From 77cf796b8084f146467df02474ed14b4915c0093 Mon Sep 17 00:00:00 2001 From: mikolding Date: Wed, 12 Jun 2024 17:07:17 -0700 Subject: [PATCH 01/99] Learn Editor: Update updatemanagedvsupdateunmanageddevices.md --- windows/deployment/TOC.yml | 2 + .../updatemanagedvsupdateunmanageddevices.md | 143 ++++++++++++++++++ 2 files changed, 145 insertions(+) create mode 100644 windows/deployment/update/updatemanagedvsupdateunmanageddevices.md diff --git a/windows/deployment/TOC.yml b/windows/deployment/TOC.yml index f9b8d24681..5daf2b7ae1 100644 --- a/windows/deployment/TOC.yml +++ b/windows/deployment/TOC.yml @@ -13,6 +13,8 @@ href: update/release-cycle.md - name: Basics of Windows updates, channels, and tools href: update/get-started-updates-channels-tools.md + - name: Defining Windows Update managed and Windows Update unmanaged devices + href: ./update/updatemanagedvsupdateunmanageddevices.md - name: Prepare servicing strategy for Windows client updates href: update/waas-servicing-strategy-windows-10-updates.md - name: Deployment proof of concept diff --git a/windows/deployment/update/updatemanagedvsupdateunmanageddevices.md b/windows/deployment/update/updatemanagedvsupdateunmanageddevices.md new file mode 100644 index 0000000000..da212512ce --- /dev/null +++ b/windows/deployment/update/updatemanagedvsupdateunmanageddevices.md @@ -0,0 +1,143 @@ +--- +# Required metadata +# For more information, see https://review.learn.microsoft.com/en-us/help/platform/learn-editor-add-metadata?branch=main +# For valid values of ms.service, ms.prod, and ms.topic, see https://review.learn.microsoft.com/en-us/help/platform/metadata-taxonomies?branch=main + +title: # Add a title for the browser tab +description: # Add a meaningful description for search results +author: mikolding # GitHub alias +ms.author: v-mikolding # Microsoft alias +ms.service: # Add the ms.service or ms.prod value +# ms.prod: # To use ms.prod, uncomment it and delete ms.service +ms.topic: # Add the ms.topic value +ms.date: 06/12/2024 +--- + +# Update-managed vs Update-unmanaged devices + +--- +title: "Managing Windows Updates: IT Managed vs. Unmanaged Devices" +--- + +**Request title**: Defining Windows Update managed and Windows Update unmanaged devices + +**Generated text**: + +------------------------------------------------------------------------ + +--- +title: "Defining Windows Update managed and Windows Update unmanaged devices" +description: +author: +ms.author: v-mikolding +manager: +ms.date: 06/05/2024 +ms.topic: +ms.service: windows-client +ms.subservice: +ms.localizationpriority: +ms.collection: +ms.custom: QuickDraft +ms.reviewer: thtrombl;arcarley;royork;sumitav;kerick;maferr;v-fvalentyna +search.appverid: MET150 +f1.keywords: +audience: +ai-usage: +- ai-assisted +--- + +\`\`\`html + +# Managing Windows Updates: IT Managed vs. Unmanaged Devices + +For IT administrators, understanding the differences between managed and unmanaged devices is crucial for effective Windows update management. This article provides clarity on the terminology and practices involved in managing Windows updates for both types of devices. + +## What are Update-Managed Windows Devices? + +Update-managed devices are those where an IT administrator or organization controls Windows updates through a management tool (such as Microsoft Intune) or by directly setting policies (for example, Group Policy (GPO), Configuration Service Provider (CSP) policy, or Graph). + +**Note:** This is true even if you directly set registry keys, although this is not recommended as registry keys can be easily overwritten. + +Managed devices can include desktops, laptops, tablets, servers, and manufacturing equipment. These devices are secured and configured according to your organization's standards and policies. + +### IT-Managed: Windows Update Offering + +Devices are considered Windows update-managed if you manage the update offering in the following ways: + +- Configuring policies to manage which updates are offered to the specific device. +- Setting when your organization should receive feature, quality, and driver updates, among others. +- Using Group Policy (GP), Cloud Solution Provider (CSP), or Graph to configure these offerings. + +### IT-Managed: Windows Update Experience + +Devices are considered Windows update-managed if you use policies (GP, CSP, or Graph) to manage device behavior when taking Windows updates. + +Examples of controllable device behavior include active hours, update grace periods and deadlines, update notifications, update scheduling, and more. Consult the complete list at [Update Policy CSP - Windows Client Management](https://docs.microsoft.com/windows/client-management/mdm/policy-csp-update). + +## Examples of Update-Managed Windows Devices + +Here are a few examples of update-managed devices: + +- **Company-owned devices:** Devices provisioned by your IT department with corporate credentials, configurations, and policies. +- **Employee-owned devices in BYOD programs:** Personally owned devices enrolled in the company's device management system to securely access corporate resources. +- **Devices managed through Windows Autopilot:** Devices set up and preconfigured to be business-ready right out of the box. +- **Mandated security settings:** Devices with health requirements such as device encryption, PIN or strong password, specific inactivity timeout periods, and up-to-date operating systems. +- **Intune-enrolled devices:** Devices enrolled in Microsoft Intune for network access and enforced security policies. +- **Third-party managed devices:** Devices enrolled in third-party management tools with configured Windows update policies via GPO, CSP, or registry key. + +## What are Update-Unmanaged Windows Devices? + +Unlike update-managed devices, unmanaged devices are not controlled through policies, management tools, or software. These devices aren't enrolled in tools like Microsoft Intune or Configuration Manager. If you only configure the Settings page to control overall device behavior when taking updates, it is considered an unmanaged device. + +**Note:** The term "Microsoft managed devices" used to refer to what we now call "update unmanaged Windows devices." Based on feedback, we have updated our terminology for clarity. + +## Examples of Update-Unmanaged Windows Devices + +Examples of update-unmanaged devices include: + +- **Personal devices:** Devices owned by individuals at your organization that are not enrolled in any corporate management system. +- **BYOD devices not enrolled in management programs:** Devices used for work but not part of an organizational BYOD program. +- **Peripheral devices:** Devices like printers, IP phones, and uninterruptible power supplies (UPS) that cannot accept centrally managed administrative credentials. + +For more information on managed and unmanaged devices, check out [Secure managed and unmanaged devices](https://docs.microsoft.com/mem/intune/protect/protect-devices). + +## Recommendations + +| SEO Keywords | Suggested Additions | Links to Update | Issues/Concerns | +|-----------------------------------------------------------------------------------------------------------|--------------------------------------------------------------------------------------|------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------|--------------------------------------------------------------------| +| Windows update management, IT managed devices, unmanaged devices, Windows updates, Intune managed devices | Add detailed steps for configuring GPO, CSP, and Graph policies for managing updates | [Update Policy CSP - Windows Client Management](https://docs.microsoft.com/windows/client-management/mdm/policy-csp-update), [Secure managed and unmanaged devices](https://docs.microsoft.com/mem/intune/protect/protect-devices) | Ensure all links are up to date and point to the correct resources | + +\`\`\` +\*\*Customer Intent for this Article:\*\* Understand the differences between IT-managed and unmanaged Windows devices to better manage Windows updates. + +------------------------------------------------------------------------ + +**Acrolinx score**: **82** + +**Acrolinx correctness score**: 89 + +**Acrolinx scorecard** (Acrolinx account required): https://microsoft-ce-csi-qa.acrolinx.cloud/api/v1/checking/scorecards/d9ad0ab8-ffa3-4af1-a7c7-00cbb71a4d52 + +------------------------------------------------------------------------ + +**Reviewers**: thtrombl;arcarley;royork;sumitav;kerick;maferr;v-fvalentyna + +**Key dates**: + +------------------------------------------------------------------------ + +**Audience**: Admin + +**Product**: Windows 10/11 + +**Article should cover the following**: Windows Update IT Managed = there are policies (GP, CSP, or Graph) configured on the device to manage update offering and/or experience. \nWindows Update Offering IT Managed = there are policies configured (GP, CSP, or Graph) to manage when/which feature, quality, driver, etc. updates are offered to the device. \nWindows Update Experience IT Managed = there are policies configured (GP, CSP, or Graph) to manage device behavior when taking Windows updates. \nWindows Update Non-IT Managed (Unmanaged) = no policies configured to control which updates are offered or the device behavior when taking updates outside of configuring the Settings page. + +**How this article will help customers**: It’s all about managing Windows updates. Get clarity on terminology for managed and unmanaged Windows devices. + +**Submitted by**: v-mikolding@microsoft.com + +**Spec**: Update managed Windows devices \n\n \n\nAll organizational devices fall into two categories: they are either considered managed or unmanaged. The distinction is especially important when it comes to Windows features, updates, and rollouts. \n\n  \n\nFirst, let’s define managed and unmanaged devices in terms of Windows update management. A few examples of these device categories will help you identify your scenarios. These will serve as the basis for future communications as we update existing content in the coming weeks. \n\n \n\nNote: Windows updates are those that affect the Windows operating system and its components: Windows quality updates, Windows feature updates, and .NET updates. See Windows monthly updates explained. Office and other applications have different management mechanisms. \n\n \n\nWhat are update-managed Windows devices? \n\nWe define an update managed device based on Windows Update management. Windows devices are update managed if an IT administrator or an organization controls the updates for Windows via a management tool (such as Microsoft Intune) or by directly setting policies (for example, Group Policy (GPO), Configuration Service Provider (CSP) policy, or Graph). \n\n \n\nNote: This is true even if you directly set registry keys. However, this is not recommended given that registry keys can be easily overwritten. \n\n \n\n \n\nManaged devices can range from desktops, laptops, and tablets, to servers and manufacturing equipment. You secure and configure them according to your organization’s standards and policies. \n\n \n\nFurther, there are two categories of Windows update managed devices, based on whether you manage the offering or the experience of Windows updates. \n\n  \n\nIT-managed: Windows update offering \n\nYour devices are Windows update-managed if you manage update offering in all the following ways: \n\nYou configure policies to manage which updates are offered to the specific device. \n\nYou set when your organization should receive feature, quality, and driver updates, among others. \n\nYou use Group Policy (GP), Cloud Solution Provider (CSP), or Graph to configure these offerings. \n\n \n\nIT-managed: Windows update experience \n\nYour devices are Windows update-managed if you use policies (GP, CSP, or Graph) to manage device behavior when taking Windows updates.  \n\n \n\nExamples of controllable device behavior include active hours, update grace periods and deadlines, update notifications, update scheduling, and more. Consult the complete list at Update Policy CSP - Windows Client Management. \n\n \n\nInserting image... \n\n  \n\nExamples of update managed Windows devices \n\nHere are a few examples of an update managed device: \n\n  \n\nCompany-owned devices: If your IT department provisions devices, they are typically managed devices. You’d often provision these with specific corporate credentials, configurations, and policies for security and manageability. \n\nEmployee-owned devices enrolled in Bring-Your-Own-Device (BYOD) programs: Do you enroll any personally owned devices in the company’s device management system? You’d do this to help these employees access corporate resources securely. The device must adhere to Terms of Use for corporate and personally owned devices connecting to corporate resources. In that scenario, these devices are considered managed. \n\nDevices managed through Windows Autopilot: This tool allows you to set up and preconfigure new devices, making them business-ready right out of the box. If you use Autopilot for any devices, they’re managed. \n\nMandated security settings: Managed devices might include health requirements, such as device encryption, a PIN or strong password, a specific inactivity timeout period, and up-to-date operating systems with enabled auto-updates. \n\nIntune enrolled devices: Devices enrolled in Microsoft Intune are considered managed. Intune allows them to access the company network and enforces device encryption, PIN/password requirements, and specific inactivity timeout periods. \n\nThird-party managed devices: Devices enrolled into third-party management tooling are considered managed if you configure Windows update policies via GPO, CSP, or registry key. Specifically, you configure these devices to point them to a local Windows Server Update Services (WSUS), disable access to Windows Update (WU), or manage which Windows updates are offered. \n\nWhat are update-unmanaged Windows devices? \n\nUnlike update-managed devices, you don’t control unmanaged Windows devices through policies, management tools, or software. \n\nThese devices aren’t enrolled in tools like Microsoft Intune or Configuration Manager. \n\nYou don’t configure policies to control Windows update offerings or experience for these devices. \n\nIf all you do is configure the Settings page to control overall device behavior when taking updates, it’s an unmanaged device. \n\n \n\nNote: If you’ve seen the term “Microsoft managed devices,” it used to refer to what we now call “update unmanaged Windows devices.” Based on your feedback, we’ll update existing content with these more informative definitions to drive clarity. \n\nExamples of Windows update unmanaged devices \n\nExamples of update unmanaged devices include: \n\n  \n\nPersonal devices: If some individuals at your organization own a device that is not enrolled in any corporate management system, it’s an unmanaged device. It wouldn’t have any security configurations and policies that you typically apply for your organization. \n\nBYOD devices not enrolled in management programs: BYOD programs are characterized by management policies. So, if there are devices that aren’t part of an organizational BYOD program, they remain unmanaged even if used for work. \n\nPeripheral devices: Printers, IP phones, and uninterruptible power supplies (UPS) often don’t accept centrally managed administrative credentials. Therefore, they cannot have management agents installed on them, leaving them unmanaged. \n\n \n\nThank you for your feedback in helping us drive clarity into content and definitions. We’ll be updating existing content across Microsoft pages to reflect these definitions. For more information on managed and unmanaged devices, check out Secure managed and unmanaged devices. + +**Run ID**: 3557dc16-a3ef-4007-8f20-8d929b2c29f1 + +**Session ID**: e46f3c4d-8c88-4605-9d63-4f325db41925 From 7923bcfd9d23172ba9958d3a0f9ba5783861fc4e Mon Sep 17 00:00:00 2001 From: Paolo Matarazzo <74918781+paolomatarazzo@users.noreply.github.com> Date: Tue, 18 Jun 2024 07:59:57 -0400 Subject: [PATCH 03/99] Bitlocker recovery screen --- .../bitlocker/bcd-settings-and-bitlocker.md | 4 +- .../data-protection/bitlocker/configure.md | 2 +- .../bitlocker/countermeasures.md | 4 +- .../data-protection/bitlocker/csv-san.md | 2 +- .../data-protection/bitlocker/faq.yml | 2 +- .../data-protection/bitlocker/index.md | 2 +- .../bitlocker/install-server.md | 2 +- .../bitlocker/network-unlock.md | 6 +- .../bitlocker/operations-guide.md | 4 +- .../bitlocker/planning-guide.md | 2 +- .../bitlocker/preboot-recovery-screen.md | 20 +-- .../bitlocker/recovery-overview.md | 2 +- .../bitlocker/recovery-process.md | 4 +- .../bitlocker/recovery-screen.md | 141 ++++++++++++++++++ .../data-protection/bitlocker/toc.yml | 2 + 15 files changed, 171 insertions(+), 28 deletions(-) create mode 100644 windows/security/operating-system-security/data-protection/bitlocker/recovery-screen.md diff --git a/windows/security/operating-system-security/data-protection/bitlocker/bcd-settings-and-bitlocker.md b/windows/security/operating-system-security/data-protection/bitlocker/bcd-settings-and-bitlocker.md index 22f80cb481..3e29796ff1 100644 --- a/windows/security/operating-system-security/data-protection/bitlocker/bcd-settings-and-bitlocker.md +++ b/windows/security/operating-system-security/data-protection/bitlocker/bcd-settings-and-bitlocker.md @@ -1,8 +1,8 @@ --- -title: BCD settings and BitLocker +title: BCD settings and BitLocker description: Learn how BCD settings are used by BitLocker. ms.topic: reference -ms.date: 10/30/2023 +ms.date: 06/18/2024 --- # Boot Configuration Data settings and BitLocker diff --git a/windows/security/operating-system-security/data-protection/bitlocker/configure.md b/windows/security/operating-system-security/data-protection/bitlocker/configure.md index 12bf6e3613..7fbff47e8c 100644 --- a/windows/security/operating-system-security/data-protection/bitlocker/configure.md +++ b/windows/security/operating-system-security/data-protection/bitlocker/configure.md @@ -2,7 +2,7 @@ title: Configure BitLocker description: Learn about the available options to configure BitLocker and how to configure them via Configuration Service Providers (CSP) or group policy (GPO). ms.topic: how-to -ms.date: 10/30/2023 +ms.date: 06/18/2024 --- # Configure BitLocker diff --git a/windows/security/operating-system-security/data-protection/bitlocker/countermeasures.md b/windows/security/operating-system-security/data-protection/bitlocker/countermeasures.md index 62dbc91a63..13b8fb7c50 100644 --- a/windows/security/operating-system-security/data-protection/bitlocker/countermeasures.md +++ b/windows/security/operating-system-security/data-protection/bitlocker/countermeasures.md @@ -1,8 +1,8 @@ --- title: BitLocker countermeasures -description: Learn about technologies and features to protect against attacks on the BitLocker encryption key. +description: Learn about technologies and features to protect against attacks on the BitLocker encryption key. ms.topic: concept-article -ms.date: 10/30/2023 +ms.date: 06/18/2024 --- # BitLocker countermeasures diff --git a/windows/security/operating-system-security/data-protection/bitlocker/csv-san.md b/windows/security/operating-system-security/data-protection/bitlocker/csv-san.md index 6eac3ac628..15db660036 100644 --- a/windows/security/operating-system-security/data-protection/bitlocker/csv-san.md +++ b/windows/security/operating-system-security/data-protection/bitlocker/csv-san.md @@ -2,7 +2,7 @@ title: Protect cluster shared volumes and storage area networks with BitLocker description: Learn how to protect cluster shared volumes (CSV) and storage area networks (SAN) with BitLocker. ms.topic: how-to -ms.date: 10/30/2023 +ms.date: 06/18/2024 appliesto: - ✅ Windows Server 2022 - ✅ Windows Server 2019 diff --git a/windows/security/operating-system-security/data-protection/bitlocker/faq.yml b/windows/security/operating-system-security/data-protection/bitlocker/faq.yml index d82b8f6355..b2642afed9 100644 --- a/windows/security/operating-system-security/data-protection/bitlocker/faq.yml +++ b/windows/security/operating-system-security/data-protection/bitlocker/faq.yml @@ -3,7 +3,7 @@ metadata: title: BitLocker FAQ description: Learn more about BitLocker by reviewing the frequently asked questions. ms.topic: faq - ms.date: 10/30/2023 + ms.date: 06/18/2024 title: BitLocker FAQ summary: Learn more about BitLocker by reviewing the frequently asked questions. diff --git a/windows/security/operating-system-security/data-protection/bitlocker/index.md b/windows/security/operating-system-security/data-protection/bitlocker/index.md index 9d9ff5daed..e9e9e7bdb7 100644 --- a/windows/security/operating-system-security/data-protection/bitlocker/index.md +++ b/windows/security/operating-system-security/data-protection/bitlocker/index.md @@ -2,7 +2,7 @@ title: BitLocker overview description: Learn about BitLocker practical applications and requirements. ms.topic: overview -ms.date: 10/30/2023 +ms.date: 06/18/2024 --- # BitLocker overview diff --git a/windows/security/operating-system-security/data-protection/bitlocker/install-server.md b/windows/security/operating-system-security/data-protection/bitlocker/install-server.md index c79ab3d0aa..a1b63ed90b 100644 --- a/windows/security/operating-system-security/data-protection/bitlocker/install-server.md +++ b/windows/security/operating-system-security/data-protection/bitlocker/install-server.md @@ -2,7 +2,7 @@ title: Install BitLocker on Windows Server description: Learn how to install BitLocker on Windows Server. ms.topic: how-to -ms.date: 10/30/2023 +ms.date: 06/18/2024 appliesto: - ✅ Windows Server 2022 - ✅ Windows Server 2019 diff --git a/windows/security/operating-system-security/data-protection/bitlocker/network-unlock.md b/windows/security/operating-system-security/data-protection/bitlocker/network-unlock.md index f0745f7122..39be442f55 100644 --- a/windows/security/operating-system-security/data-protection/bitlocker/network-unlock.md +++ b/windows/security/operating-system-security/data-protection/bitlocker/network-unlock.md @@ -1,8 +1,8 @@ --- -title: Network Unlock +title: Network Unlock description: Learn how BitLocker Network Unlock works and how to configure it. ms.topic: how-to -ms.date: 10/30/2023 +ms.date: 06/18/2024 --- # Network Unlock @@ -255,7 +255,7 @@ The subnet policy configuration file must use a `[SUBNETS]` section to identify ```ini [SUBNETS] SUBNET1=10.185.250.0/24 ; a comment about this subrange could be here, after the semicolon -SUBNET2=10.185.252.200/28 +SUBNET2=10.185.252.200/28 SUBNET3= 2001:4898:a:2::/64 ; an IPv6 subnet SUBNET4=2001:4898:a:3::/64; in production, the admin would likely give more useful names, like BUILDING9-EXCEPT-RECEP. ``` diff --git a/windows/security/operating-system-security/data-protection/bitlocker/operations-guide.md b/windows/security/operating-system-security/data-protection/bitlocker/operations-guide.md index 1eaff6b4ec..29452a46ea 100644 --- a/windows/security/operating-system-security/data-protection/bitlocker/operations-guide.md +++ b/windows/security/operating-system-security/data-protection/bitlocker/operations-guide.md @@ -2,7 +2,7 @@ title: BitLocker operations guide description: Learn how to use different tools to manage and operate BitLocker. ms.topic: how-to -ms.date: 10/30/2023 +ms.date: 06/18/2024 --- # BitLocker operations guide @@ -239,7 +239,7 @@ Add-BitLockerKeyProtector E: -PasswordProtector -Password $pw **Example**: Use PowerShell to enable BitLocker with a TPM protector ```powershell -Enable-BitLocker D: -EncryptionMethod XtsAes256 -UsedSpaceOnly -TpmProtector +Enable-BitLocker D: -EncryptionMethod XtsAes256 -UsedSpaceOnly -TpmProtector ``` **Example**: Use PowerShell to enable BitLocker with a TPM+PIN protector, in this case with a PIN set to *123456*: diff --git a/windows/security/operating-system-security/data-protection/bitlocker/planning-guide.md b/windows/security/operating-system-security/data-protection/bitlocker/planning-guide.md index 5fb64c8c85..c54ad2e21e 100644 --- a/windows/security/operating-system-security/data-protection/bitlocker/planning-guide.md +++ b/windows/security/operating-system-security/data-protection/bitlocker/planning-guide.md @@ -2,7 +2,7 @@ title: BitLocker planning guide description: Learn how to plan for a BitLocker deployment in your organization. ms.topic: concept-article -ms.date: 10/30/2023 +ms.date: 06/18/2024 --- # BitLocker planning guide diff --git a/windows/security/operating-system-security/data-protection/bitlocker/preboot-recovery-screen.md b/windows/security/operating-system-security/data-protection/bitlocker/preboot-recovery-screen.md index 78ab928ae2..ce03b1fa0b 100644 --- a/windows/security/operating-system-security/data-protection/bitlocker/preboot-recovery-screen.md +++ b/windows/security/operating-system-security/data-protection/bitlocker/preboot-recovery-screen.md @@ -2,7 +2,7 @@ title: BitLocker preboot recovery screen description: Learn about the information displayed in the BitLocker preboot recovery screen, depending on configured policy settings and recovery keys status. ms.topic: concept-article -ms.date: 10/30/2023 +ms.date: 06/18/2024 --- # BitLocker preboot recovery screen @@ -72,10 +72,10 @@ There are rules governing which hint is shown during the recovery (in the order :::row::: :::column span="2"::: In this scenario, the recovery password is saved to a file - + > [!IMPORTANT] > It's not recommend to print recovery keys or saving them to a file. Instead, use Microsoft account, Microsoft Entra ID or Active Directory backup. - + :::column-end::: :::column span="2"::: :::image type="content" source="images/preboot-recovery-hint.png" alt-text="Screenshot of the BitLocker recovery screen showing a hint where the BitLocker recovery key was saved." lightbox="images/preboot-recovery-hint.png" border="false"::: @@ -92,7 +92,7 @@ There are rules governing which hint is shown during the recovery (in the order - saved to Microsoft account - not printed - not saved to a file - + **Result:** the hints for the custom URL and the Microsoft account (**https://aka.ms/myrecoverykey**) are displayed. :::column-end::: :::column span="2"::: @@ -110,7 +110,7 @@ There are rules governing which hint is shown during the recovery (in the order - saved to Active Directory - not printed - not saved to a file - + **Result:** only the custom URL is displayed. :::column-end::: :::column span="2"::: @@ -129,7 +129,7 @@ There are rules governing which hint is shown during the recovery (in the order - saved to Microsoft Entra ID - printed - saved to file - + **Result:** only the Microsoft account hint (**https://aka.ms/myrecoverykey**) is displayed. :::column-end::: :::column span="2"::: @@ -149,12 +149,12 @@ There are rules governing which hint is shown during the recovery (in the order - saved to file - creation time: **1PM** - key ID: **4290B6C0-B17A-497A-8552-272CC30E80D4** - + The recovery password #2 is: - not backed up - creation time: **3PM** - key ID: **045219EC-A53B-41AE-B310-08EC883AAEDD** - + **Result:** only the hint for the successfully backed up key is displayed, even if it isn't the most recent key. :::column-end::: :::column span="2"::: @@ -175,12 +175,12 @@ There are rules governing which hint is shown during the recovery (in the order - Saved to Microsoft Entra ID - creation time: **1PM** - key ID: **4290B6C0-B17A-497A-8552-272CC30E80D4** - + The recovery password #2 is: - Saved to Microsoft Entra ID - creation time: **3PM** - key ID: **045219EC-A53B-41AE-B310-08EC883AAEDD** - + **Result:** the Microsoft Entra ID hint (**https://aka.ms/aadrecoverykey**), which is the most recent key saved, is displayed. :::column-end::: :::column span="2"::: diff --git a/windows/security/operating-system-security/data-protection/bitlocker/recovery-overview.md b/windows/security/operating-system-security/data-protection/bitlocker/recovery-overview.md index c7613a0f46..4625b2f5e0 100644 --- a/windows/security/operating-system-security/data-protection/bitlocker/recovery-overview.md +++ b/windows/security/operating-system-security/data-protection/bitlocker/recovery-overview.md @@ -2,7 +2,7 @@ title: BitLocker recovery overview description: Learn about BitLocker recovery scenarios, recovery options, and how to determine root cause of failed automatic unlocks. ms.topic: how-to -ms.date: 10/30/2023 +ms.date: 06/18/2024 --- # BitLocker recovery overview diff --git a/windows/security/operating-system-security/data-protection/bitlocker/recovery-process.md b/windows/security/operating-system-security/data-protection/bitlocker/recovery-process.md index b002833d87..ea2fd91338 100644 --- a/windows/security/operating-system-security/data-protection/bitlocker/recovery-process.md +++ b/windows/security/operating-system-security/data-protection/bitlocker/recovery-process.md @@ -2,7 +2,7 @@ title: BitLocker recovery process description: Learn how to obtain BitLocker recovery information for Microsoft Entra joined, Microsoft Entra hybrid joined, and Active Directory joined devices, and how to restore access to a locked drive. ms.topic: how-to -ms.date: 10/30/2023 +ms.date: 06/18/2024 --- # BitLocker recovery process @@ -83,7 +83,7 @@ function Get-EntraBitLockerKeys{ foreach ($keyId in $keyIds) { $recoveryKey = (Get-MgInformationProtectionBitlockerRecoveryKey -BitlockerRecoveryKeyId $keyId -Select "key").key Write-Host -ForegroundColor White " Key id: $keyid" - Write-Host -ForegroundColor Cyan " BitLocker recovery key: $recoveryKey" + Write-Host -ForegroundColor Cyan " BitLocker recovery key: $recoveryKey" } } else { Write-Host -ForegroundColor Red "No BitLocker recovery keys found for device $DeviceName" diff --git a/windows/security/operating-system-security/data-protection/bitlocker/recovery-screen.md b/windows/security/operating-system-security/data-protection/bitlocker/recovery-screen.md new file mode 100644 index 0000000000..a296e03847 --- /dev/null +++ b/windows/security/operating-system-security/data-protection/bitlocker/recovery-screen.md @@ -0,0 +1,141 @@ +--- +title: BitLocker recovery screen +description: +ms.topic: how-to +ms.date: 06/18/2024 +--- + +# BitLocker recovery screen + +[!INCLUDE [insider-note](../../../../../includes/insider/insider-note.md)] + +BitLocker recovery errors and their causes + +BitLocker recovery is the process by which access to a BitLocker-protected drive can be restored if the drive doesn't unlock using its default unlock mechanism. + +Prompting for the recovery password or other recovery method defends against suspected unauthorized access to user data by an attacker. Providing the recovery password allows BitLocker to confirm that the owner of the device is in posession of the device in recovery and that the device and stored data should become accessible. + +For mroe information about BitLocker recovery, see this page. + +## Initiated by user + +E_FVE_USER_REQUESTED_RECOVERY + +BitLocker entered recovery mode because of a transition from a screen with the option to ESC to recovery mode. + +E_FVE_BOOT_DEBUG_ENABLED + +BitLocker entered recovery mode because boot debugging mode has been enabled. To remediate this issue, remove the boot debugging option from the boot configuration database. + +## Code integrity + +Driver signature enforcement is used to ensure code integrity of the operating system. + +E_FVE_CI_DISABLED + +BitLocker entered recovery mode because driver signature enforcement has been disabled. + +## Device lockout + +Device lockout threshold functionality allows an administrator to configure Windows logon with BitLocker protection. After the configured number of failed Windows logon attempts, the device will be rebooted and can only be recovered by providing a BitLocker recovery method. + +This feature is configurable with the "Interactive logon: Machine account lockout threshold" policy. + +E_FVE_DEVICE_LOCKEDOUT + +BitLocker entered recovery mode because device lockout has been triggered due to too many incorrect sign in attempts. A BitLocker recovery method is required to return to the logon screen. + +E_FVE_DEVICE_LOCKOUT_MISMATCH + +BitLocker entered recovery mode because the device lockout counter is out of sync. A BitLocker recovery method is required to return to the logon screen. + + + +## Boot configuration + +The Boot Configuration Database (BCD) contains critical information for the Windows boot environment. More information about how BitLocker uses the BCD is available here. + + + +E_FVE_BAD_CODE_ID, E_FVE_BAD_CODE_OPTION + +BitLocker entered recovery mode because a boot application has changed. + +BitLocker tracks the data inside the BCD. BitLocker recovery can occur when this data changes without warning. Refer to the recovery screen to find the boot application that changed. + +To remediate this issue, restore the BCD configuration. A BitLocker recovery method is required to unlock the device if the BCD configuration cannot be restored before booting. + + + +## TPM + +The Trusted Platform Module (TPM) is cryptographic hardware or firmware used to secure a computer. More information about the TPM is available at Trusted Platform Module Technology Overview - Windows Security | Microsoft Learn. + +BitLocker creates a TPM protector to manage protection of the encryption keys used to encrypt your data. At boot, BitLocker attempts to communicate with the TPM to unlock the device and access your data. More information about how BitLocker uses the TPM is available at BitLocker overview - Windows Security | Microsoft Learn. + + + +E_FVE_TPM_FAILURE, E_FVE_TPM_DISABLED, E_FVE_TPM_INVALIDATED, E_FVE_BAD_SRK, E_FVE_TPM_NOT_DETECTED, E_MATCHING_PCRS_TPM_FAILURE + +BitLocker entered recovery mode because of a failure with the Trusted Platform Module. + +E_FVE_TPM_FAILURE is a catch-all for other TPM errors not detailed below. + +E_FVE_TPM_DISABLED is displayed when the TPM is present but has been disabled for use before or during boot. + +E_FVE_TPM_INVALIDATED is displayed when a present TPM has been invalidated. + +E_FVE_BAD_SRK indicates that the TPM's internal Storage Root Key has been corrupted. + +E_FVE_TPM_NOT_DETECTED is displayed when the booting system does not have a TPM or does not recognize a TPM that may exist + +E_MATCHING_PCRS_TPM_FAILURE means that the TPM unexpectedly failed when unsealing the encryption key. + +## Protector + +### TPM protectors + +The TPM contains multiple Platform Configuration Registers (PCRs) that can be used in the validation profile of the BitLocker TPM protector. The PCRs are used to validate the integrity of the boot process, that is, that the boot configuration and boot flow hasn't been tampered with. + +BitLocker recovery can be the result of unexpected changes in the PCRs used in the TPM protector validation profile. Changes to PCRs not used in the TPM protector profile do not influence BitLocker. + +### `E_FVE_PCR_MISMATCH` + +BitLocker entered recovery mode because your device's configuration has changed. + +This may have happened because: + +- A disc or USB device was inserted. Removing it and restarting your device may fix this problem +- A firmware update was applied without updating the TPM protector +- Any example at https://learn.microsoft.com/en-us/windows/security/operating-system-security/data-protection/bitlocker/recovery-overview#bitlocker-recovery-scenarios + +A recovery method is required to unlock the device. + +#### Special cases for PCR 7 + +If the TPM protector uses PCR 7 in the validation profile, BitLocker expects PCR 7 to measure a specific set of events for Secure Boot. These measurements are defined in the UEFI spec. More information is also available at Trusted Execution Environment EFI Protocol - Windows 8.1 HCK | Microsoft Learn. + +### `E_FVE_SECUREBOOT_DISABLED` + +BitLocker entered recovery mode because Secure Boot has been disabled. + +To access the encryption key and unlock your device, BitLocker expects Secure Boot to be on. Re-enabling Secure Boot and rebooting the system may fix the recovery issue. Otherwise, a recovery method is required to access the device. + + +### `E_FVE_SECUREBOOT_CHANGED` + +BitLocker entered recovery mode because the Secure Boot configuration unexpectedly changed. + +The boot configuration measured in PCR 7 changed. This may be either because of: + +- An additional measurement currently present that was not present when BitLocker updated the TPM protector +- A missing measurement that was present when BitLocker last updated the TPM protector but now is not present +- An expected event has a different measurement + +A recovery method is required to unlock the device. + +## Unknown + +### `E_FVE_RECOVERY_ERROR_UNKNOWN` + +BitLocker entered recovery mode because of an unknown error. A recovery method is required to unlock the device. \ No newline at end of file diff --git a/windows/security/operating-system-security/data-protection/bitlocker/toc.yml b/windows/security/operating-system-security/data-protection/bitlocker/toc.yml index ba7f125549..cda7e92884 100644 --- a/windows/security/operating-system-security/data-protection/bitlocker/toc.yml +++ b/windows/security/operating-system-security/data-protection/bitlocker/toc.yml @@ -17,6 +17,8 @@ items: href: recovery-process.md - name: Preboot recovery screen href: preboot-recovery-screen.md + - name: Preboot recovery screen refresh + href: recovery-screen.md - name: How-to guides items: - name: Install BitLocker on Windows Server From 510cf0c756ad9249e5ef0a6b6640c1776e704937 Mon Sep 17 00:00:00 2001 From: Paolo Matarazzo <74918781+paolomatarazzo@users.noreply.github.com> Date: Tue, 18 Jun 2024 11:25:17 -0400 Subject: [PATCH 04/99] updates --- .../bitlocker/recovery-screen.md | 83 ++++++++----------- 1 file changed, 33 insertions(+), 50 deletions(-) diff --git a/windows/security/operating-system-security/data-protection/bitlocker/recovery-screen.md b/windows/security/operating-system-security/data-protection/bitlocker/recovery-screen.md index a296e03847..275fea360c 100644 --- a/windows/security/operating-system-security/data-protection/bitlocker/recovery-screen.md +++ b/windows/security/operating-system-security/data-protection/bitlocker/recovery-screen.md @@ -1,55 +1,47 @@ --- -title: BitLocker recovery screen +title: BitLocker recovery errors and their causes description: ms.topic: how-to ms.date: 06/18/2024 --- -# BitLocker recovery screen +# BitLocker recovery errors and their causes [!INCLUDE [insider-note](../../../../../includes/insider/insider-note.md)] -BitLocker recovery errors and their causes - BitLocker recovery is the process by which access to a BitLocker-protected drive can be restored if the drive doesn't unlock using its default unlock mechanism. -Prompting for the recovery password or other recovery method defends against suspected unauthorized access to user data by an attacker. Providing the recovery password allows BitLocker to confirm that the owner of the device is in posession of the device in recovery and that the device and stored data should become accessible. +Prompting for the recovery password or other recovery method defends against suspected unauthorized access to user data by an attacker. Providing the recovery password allows BitLocker to confirm that the owner of the device is in possession of the device in recovery, and that the device and stored data should become accessible. -For mroe information about BitLocker recovery, see this page. +For more information about BitLocker recovery, see [BitLocker recovery overview](recovery-overview.md). -## Initiated by user +This article is divided in different sections, each section represents a BitLocker error category. Within each section there's a table with the error message displayed on the recovery screen and the cause of the error. -E_FVE_USER_REQUESTED_RECOVERY +## Originated by user -BitLocker entered recovery mode because of a transition from a screen with the option to ESC to recovery mode. - -E_FVE_BOOT_DEBUG_ENABLED - -BitLocker entered recovery mode because boot debugging mode has been enabled. To remediate this issue, remove the boot debugging option from the boot configuration database. +| Error code | Error cause | Resolution| +|-|-|-| +|`E_FVE_USER_REQUESTED_RECOVERY`|The user explicitly entered recovery mode from a screen with the option to `ESC` to recovery mode.|| +|`E_FVE_BOOT_DEBUG_ENABLED`|Boot debugging mode is enabled. |Remove the boot debugging option from the boot configuration database.| ## Code integrity Driver signature enforcement is used to ensure code integrity of the operating system. -E_FVE_CI_DISABLED +| Error code | Error cause | Resolution| +|-|-|-| +|`E_FVE_CI_DISABLED`|Driver signature enforcement is disabled.|| -BitLocker entered recovery mode because driver signature enforcement has been disabled. +## Device lockout threshold -## Device lockout - -Device lockout threshold functionality allows an administrator to configure Windows logon with BitLocker protection. After the configured number of failed Windows logon attempts, the device will be rebooted and can only be recovered by providing a BitLocker recovery method. - -This feature is configurable with the "Interactive logon: Machine account lockout threshold" policy. - -E_FVE_DEVICE_LOCKEDOUT - -BitLocker entered recovery mode because device lockout has been triggered due to too many incorrect sign in attempts. A BitLocker recovery method is required to return to the logon screen. - -E_FVE_DEVICE_LOCKOUT_MISMATCH - -BitLocker entered recovery mode because the device lockout counter is out of sync. A BitLocker recovery method is required to return to the logon screen. +Device lockout threshold functionality allows an administrator to configure Windows logon with BitLocker protection. After the configured number of failed Windows logon attempts, the device reboots and can only be recovered by providing a BitLocker recovery method. +To take advantage of this functionality, you must configure the policy setting **Interactive logon: Machine account lockout threshold** located in **Computer Configuration** > **Windows Settings** > **Security Settings** > **Local Policies** > **Security Options**. Alternatively, use the [Exchange ActiveSync](/Exchange/clients/exchange-activesync/exchange-activesync) **MaxFailedPasswordAttempts** policy setting, or the [DeviceLock Configuration Service Provider (CSP)](/windows/client-management/mdm/policy-csp-devicelock#accountlockoutpolicy). +| Error code | Error cause | Resolution| +|-|-|-| +|`E_FVE_DEVICE_LOCKEDOUT`|Device lockout triggered due to too many incorrect sign in attempts.|A BitLocker recovery method is required to return to the logon screen.| +|`E_FVE_DEVICE_LOCKOUT_MISMATCH`|The device lockout counter is out of sync. |A BitLocker recovery method is required to return to the logon screen.| ## Boot configuration @@ -65,31 +57,22 @@ BitLocker tracks the data inside the BCD. BitLocker recovery can occur when this To remediate this issue, restore the BCD configuration. A BitLocker recovery method is required to unlock the device if the BCD configuration cannot be restored before booting. - - ## TPM -The Trusted Platform Module (TPM) is cryptographic hardware or firmware used to secure a computer. More information about the TPM is available at Trusted Platform Module Technology Overview - Windows Security | Microsoft Learn. +The Trusted Platform Module (TPM) is cryptographic hardware or firmware used to secure a device. More information about the TPM is available at Trusted Platform Module Technology Overview - Windows Security | Microsoft Learn. BitLocker creates a TPM protector to manage protection of the encryption keys used to encrypt your data. At boot, BitLocker attempts to communicate with the TPM to unlock the device and access your data. More information about how BitLocker uses the TPM is available at BitLocker overview - Windows Security | Microsoft Learn. +BitLocker entered recovery mode because of a failure with the TPM. - -E_FVE_TPM_FAILURE, E_FVE_TPM_DISABLED, E_FVE_TPM_INVALIDATED, E_FVE_BAD_SRK, E_FVE_TPM_NOT_DETECTED, E_MATCHING_PCRS_TPM_FAILURE - -BitLocker entered recovery mode because of a failure with the Trusted Platform Module. - -E_FVE_TPM_FAILURE is a catch-all for other TPM errors not detailed below. - -E_FVE_TPM_DISABLED is displayed when the TPM is present but has been disabled for use before or during boot. - -E_FVE_TPM_INVALIDATED is displayed when a present TPM has been invalidated. - -E_FVE_BAD_SRK indicates that the TPM's internal Storage Root Key has been corrupted. - -E_FVE_TPM_NOT_DETECTED is displayed when the booting system does not have a TPM or does not recognize a TPM that may exist - -E_MATCHING_PCRS_TPM_FAILURE means that the TPM unexpectedly failed when unsealing the encryption key. +| Error code | Error cause | +|-|-| +|`E_FVE_TPM_DISABLED` | A TPM is present but has been disabled for use before or during boot| +|`E_FVE_TPM_INVALIDATED` | A TPM is present but invalidated| +|`E_FVE_BAD_SRK` | The TPM's internal Storage Root Key is corrupted| +|`E_FVE_TPM_NOT_DETECTED` | The booting system doesn't have or doesn't detect a TPM| +|`E_MATCHING_PCRS_TPM_FAILURE`| The TPM unexpectedly failed when unsealing the encryption key| +|`E_FVE_TPM_FAILURE` | Catch-all for other TPM errors.| ## Protector @@ -136,6 +119,6 @@ A recovery method is required to unlock the device. ## Unknown -### `E_FVE_RECOVERY_ERROR_UNKNOWN` - -BitLocker entered recovery mode because of an unknown error. A recovery method is required to unlock the device. \ No newline at end of file +| Error code | Error cause | Resolution| +|-|-|-| +|`E_FVE_RECOVERY_ERROR_UNKNOWN`| BitLocker entered recovery mode because of an unknown error. | A recovery method is required to unlock the device.| \ No newline at end of file From 4a1e0643cf18f5f7a4a5b74c8a11d4e3e22f5f80 Mon Sep 17 00:00:00 2001 From: Paolo Matarazzo <74918781+paolomatarazzo@users.noreply.github.com> Date: Tue, 18 Jun 2024 14:55:09 -0400 Subject: [PATCH 05/99] updates --- .../bitlocker/recovery-screen.md | 60 +++++++------------ 1 file changed, 20 insertions(+), 40 deletions(-) diff --git a/windows/security/operating-system-security/data-protection/bitlocker/recovery-screen.md b/windows/security/operating-system-security/data-protection/bitlocker/recovery-screen.md index 275fea360c..d8011c5ef4 100644 --- a/windows/security/operating-system-security/data-protection/bitlocker/recovery-screen.md +++ b/windows/security/operating-system-security/data-protection/bitlocker/recovery-screen.md @@ -5,7 +5,7 @@ ms.topic: how-to ms.date: 06/18/2024 --- -# BitLocker recovery errors and their causes +## Recovery error details and their causes [!INCLUDE [insider-note](../../../../../includes/insider/insider-note.md)] @@ -17,14 +17,14 @@ For more information about BitLocker recovery, see [BitLocker recovery overview] This article is divided in different sections, each section represents a BitLocker error category. Within each section there's a table with the error message displayed on the recovery screen and the cause of the error. -## Originated by user +### Originated by user | Error code | Error cause | Resolution| |-|-|-| |`E_FVE_USER_REQUESTED_RECOVERY`|The user explicitly entered recovery mode from a screen with the option to `ESC` to recovery mode.|| |`E_FVE_BOOT_DEBUG_ENABLED`|Boot debugging mode is enabled. |Remove the boot debugging option from the boot configuration database.| -## Code integrity +### Code integrity Driver signature enforcement is used to ensure code integrity of the operating system. @@ -32,7 +32,7 @@ Driver signature enforcement is used to ensure code integrity of the operating s |-|-|-| |`E_FVE_CI_DISABLED`|Driver signature enforcement is disabled.|| -## Device lockout threshold +### Device lockout threshold Device lockout threshold functionality allows an administrator to configure Windows logon with BitLocker protection. After the configured number of failed Windows logon attempts, the device reboots and can only be recovered by providing a BitLocker recovery method. @@ -43,21 +43,15 @@ To take advantage of this functionality, you must configure the policy setting * |`E_FVE_DEVICE_LOCKEDOUT`|Device lockout triggered due to too many incorrect sign in attempts.|A BitLocker recovery method is required to return to the logon screen.| |`E_FVE_DEVICE_LOCKOUT_MISMATCH`|The device lockout counter is out of sync. |A BitLocker recovery method is required to return to the logon screen.| -## Boot configuration +### Boot configuration -The Boot Configuration Database (BCD) contains critical information for the Windows boot environment. More information about how BitLocker uses the BCD is available here. +The *Boot Configuration Database (BCD)* contains critical information for the Windows boot environment. More information about how BitLocker uses the BCD is available here. +| Error code | Error cause | Resolution| +|-|-|-| +|`E_FVE_BAD_CODE_ID, E_FVE_BAD_CODE_OPTION`|BitLocker entered recovery mode because a boot application has changed.|BitLocker tracks the data inside the BCD. BitLocker recovery can occur when this data changes without warning. Refer to the recovery screen to find the boot application that changed.
To remediate this issue, restore the BCD configuration. A BitLocker recovery method is required to unlock the device if the BCD configuration cannot be restored before booting.| - -E_FVE_BAD_CODE_ID, E_FVE_BAD_CODE_OPTION - -BitLocker entered recovery mode because a boot application has changed. - -BitLocker tracks the data inside the BCD. BitLocker recovery can occur when this data changes without warning. Refer to the recovery screen to find the boot application that changed. - -To remediate this issue, restore the BCD configuration. A BitLocker recovery method is required to unlock the device if the BCD configuration cannot be restored before booting. - -## TPM +### TPM The Trusted Platform Module (TPM) is cryptographic hardware or firmware used to secure a device. More information about the TPM is available at Trusted Platform Module Technology Overview - Windows Security | Microsoft Learn. @@ -74,17 +68,17 @@ BitLocker entered recovery mode because of a failure with the TPM. |`E_MATCHING_PCRS_TPM_FAILURE`| The TPM unexpectedly failed when unsealing the encryption key| |`E_FVE_TPM_FAILURE` | Catch-all for other TPM errors.| -## Protector +### Protector -### TPM protectors +#### TPM protectors The TPM contains multiple Platform Configuration Registers (PCRs) that can be used in the validation profile of the BitLocker TPM protector. The PCRs are used to validate the integrity of the boot process, that is, that the boot configuration and boot flow hasn't been tampered with. BitLocker recovery can be the result of unexpected changes in the PCRs used in the TPM protector validation profile. Changes to PCRs not used in the TPM protector profile do not influence BitLocker. -### `E_FVE_PCR_MISMATCH` - -BitLocker entered recovery mode because your device's configuration has changed. +| Error code | Error cause | +|-|-| +|`E_FVE_PCR_MISMATCH`|BitLocker entered recovery mode because your device's configuration has changed.| This may have happened because: @@ -98,26 +92,12 @@ A recovery method is required to unlock the device. If the TPM protector uses PCR 7 in the validation profile, BitLocker expects PCR 7 to measure a specific set of events for Secure Boot. These measurements are defined in the UEFI spec. More information is also available at Trusted Execution Environment EFI Protocol - Windows 8.1 HCK | Microsoft Learn. -### `E_FVE_SECUREBOOT_DISABLED` +| Error code | Error cause |Resolution| +|-|-|-| +|`E_FVE_SECUREBOOT_DISABLED`|BitLocker entered recovery mode because Secure Boot has been disabled.|To access the encryption key and unlock your device, BitLocker expects Secure Boot to be on. Re-enabling Secure Boot and rebooting the system may fix the recovery issue. Otherwise, a recovery method is required to access the device.| +|`E_FVE_SECUREBOOT_CHANGED`|BitLocker entered recovery mode because the Secure Boot configuration unexpectedly changed.|The boot configuration measured in PCR 7 changed. This may be either because of:
- An additional measurement currently present that was not present when BitLocker updated the TPM protector
- A missing measurement that was present when BitLocker last updated the TPM protector but now is not present
- An expected event has a different measurement - A recovery method is required to unlock the device.| -BitLocker entered recovery mode because Secure Boot has been disabled. - -To access the encryption key and unlock your device, BitLocker expects Secure Boot to be on. Re-enabling Secure Boot and rebooting the system may fix the recovery issue. Otherwise, a recovery method is required to access the device. - - -### `E_FVE_SECUREBOOT_CHANGED` - -BitLocker entered recovery mode because the Secure Boot configuration unexpectedly changed. - -The boot configuration measured in PCR 7 changed. This may be either because of: - -- An additional measurement currently present that was not present when BitLocker updated the TPM protector -- A missing measurement that was present when BitLocker last updated the TPM protector but now is not present -- An expected event has a different measurement - -A recovery method is required to unlock the device. - -## Unknown +### Unknown | Error code | Error cause | Resolution| |-|-|-| From faabe67879cb7030d5d153bd52e230254e3c0b38 Mon Sep 17 00:00:00 2001 From: Paolo Matarazzo <74918781+paolomatarazzo@users.noreply.github.com> Date: Tue, 18 Jun 2024 16:06:15 -0400 Subject: [PATCH 06/99] updates --- ...r-recovery-screen-24h2-additional-info.png | Bin 0 -> 109835 bytes .../images/bitlocker-recovery-screen-24h2.png | Bin 0 -> 98162 bytes .../bitlocker/recovery-screen-error-codes.md | 128 ++++++++++++++++++ .../bitlocker/recovery-screen.md | 5 + 4 files changed, 133 insertions(+) create mode 100644 windows/security/operating-system-security/data-protection/bitlocker/images/bitlocker-recovery-screen-24h2-additional-info.png create mode 100644 windows/security/operating-system-security/data-protection/bitlocker/images/bitlocker-recovery-screen-24h2.png create mode 100644 windows/security/operating-system-security/data-protection/bitlocker/recovery-screen-error-codes.md diff --git a/windows/security/operating-system-security/data-protection/bitlocker/images/bitlocker-recovery-screen-24h2-additional-info.png b/windows/security/operating-system-security/data-protection/bitlocker/images/bitlocker-recovery-screen-24h2-additional-info.png new file mode 100644 index 0000000000000000000000000000000000000000..113770d1138447b281b551e9cd22e00215567f0e GIT binary patch literal 109835 zcmeFZX;_lm_cv~3nVr&xQ)Z=BR%)4=vp5|av@*4_Qd6`tXK@AuMJp>iN7GDmMk?od z21l^0ECCP^Zh-~oBxad^}KoBeDCY>Qns6Y@4fcgYp?ZLpS}OS zZfmt`$Dth(5)!+vT)ucyLPF}1goI?(_H97PAuR_k@Jl-AvQwyp#2@>_Kbs^nvkwA= zn?i3|otLN}9+?9^NP1b=SV%}zC;qX1f2+i%vbR?*THFfXw6Nh;c5?9XDdaX?Y>Lxy zpG~hJM*Z3W`(5@{T((X-UOmPAdT_v@!L#YogEwvqn|*eyOF}YK4ks39*&Y32B5$(S zX&~)ZHryi+nR#K* z1UI#~?oe)mLiK~s|1de9?=rG|H)C4Z<{OOp=*om!qWO_%^Hn;%ghyI?2({%@o&owV zeh#oU<_WUe!*r==#5<%YdR-)(6Nn~6df%u-c}^E-6~!7c-lo}XKmNzRU#M~(6BSyh zt{V(CiY9xbk+bIO_Ow#umT^1bV02S$iEvP4v-Cf8Pj9nW60ItUc+vc5VJu;e5Al*% z|3($kM2W}&&3_w|D5Y=k2m(8rh_K$lO~h?&!?ZA239>?V+W!Bku@ESnn-HZz2Y5WBRC!nd_$ibQazM45=fUFN|Id5Z;vn zn%*!+)gVP~8_{gCc>00oQR^fi0|$X9(ONjyESew$UfYCPbT~8dpANQ-g#rRA_<{N^mtN$}@xW}JMB3A_?9Ed(5vfuh|-L^4q zC2@mCmw7*4diviY2`-jbN(-M1ZNB?tf}TP>%{sahw1Bbnoo;NBc3RD`X!f8Vrv>vLb0LY*ZyhR(y+Q< zfazW9y6X6uvGtxND7+UxkFQjemn6sq3PvAqD3!>t2ya1=OHbyPz3hf$sp2-P45S}D zZp_nJOVD(^BQnUSlL3lW6Uh@ zlfA=>=JaQYh_eOP{1EGfmA56dikk^xm!J%~dHovea6)7mKTayDnr`(8_Kc7*H(4wf z<$y*qTKN;jF>;HnBMLi9AA&1y0Pk`5GH;$--lu|li6`<2wFzxsi*mOJyt2~YGIVOAfe}k$ zR6vU=cIyvVV|Eovk#@cb!X6Z5MScO>C97EES)D*u1sYV3QF}YQPdg-k7?JV4TJjm^ zZe=R@1NQGE-`{W=3=2xw^t@DT71>(_5sG zmEk}$`<@4*6~E=Y4UqH4T~=n;Y1&+i35+RaZ|;Tk&UJ!y#1)PeUl?~9TbII5$(rHrnB*o)HVr2YJJ+BaC$rkCH6&z&=Toy;5L3?vwufN*5({< zFq&oqT20}CBp%g{K1L}~R#;>j$X;BxYD}`Nti_lRKAak@6g^XqoX2qw!7Mjz0sbc; z5ro|*QQKFe??1HjjP?e*7&lfb5?=HxC%0ftdyf6CB9Uzav{08-VOlp$1N^%A8Jb<# zwJoUr-V6V67PHHN3T2W_K-a6!np@9O2X;Q4e6Fli{_pq4{XOt5cZN6)sE1uCL={&= zXeggPLs~4-7+vS}T5DFwD4ASu4WAFI_aDY}$+}h<*>FCHjfMtB^z$3Mgud-Drx-`P zWqeW)wsBjjTt=zsEvSlhAxn^=mu%OHD$uA*oA;@M2VjOi>&39MoAlJF?0Km_|H)?A z2jU$>yvCsmJGzEU=u(;^xJEZ4`Y^^sx4IkE6nXs=M=xku2*E^S2OB*V{;qS-%t00+ z`D-+Xe&2x7VQk)!e(Y2WzHSTCg|_z6V?b~d6APIig4GYqrOY*vi*Fl=Jlr}_i@!3= z7w$Ua0$|Nd*SZz7_W(*8YG936xHSq{bZC|_-}rbqwEoy|fG65V$uEIjOsA#uN8Vtu zs2*9y#}HQT;-vHRhzxc7k9knP385K$Y8bQ5%7wL3Uq*=Msg#v%H^zmt9IBo~EpbQ# z3O7H46V2RA$L{iQ3@B}5xoa@SJSzWgYS_-vl{LHDI2oa?v4J2jSyeE$aH5G-YE|O? za;}`PJX=|!l4E+i=d{9Yc+_$qNCI=QbNPdXksfc3&U3|iv`&+v*cp(=5ouQvr~k)9 z4YpXKX-_DObe)os@A8(W4uR|5qS_-!*bah}5(29f)!5yz~2#WXhb*I`7!QFSAHqc#`-$b_}6d%Y3JJd$|h*YZk>7x2r zVI-Sn6kS|sGn{C=jrXPkWp>G$823iNYnjBgCU#uf zZFc6&m=ivFD$2+v;vCCV%_F-eARsgoGy=D!di)R)lh|pDNEc_lxpTJc4M>i_n@rbW zn~mXJy#^iR=#7?wYXUInK(JEIlw-j#ZlNC>&0bG1*$EiGHea31>2FeGu$~<^avE5S zSrmWG0NbLk5Y@Hgkrnh5_lj2!iM8?Z=94+eZSb9-)3t8>s^}=%D%Gt=7Zg02@4~{b zb)K~#=Jlze*-6BWr`BCXas5N>3-%v*M@SIajgT(NaR24YaK_Pw%T}Vgp?c!9%ZYWg z0|?Gidb*=$+&eovHpG=Go6-FsbsYCKN~swp3MzQ62Kwk_w0IoiCp=NMwsO=zduo-+ zi*qTI*7a;Xl^H_w#mOgcODPQ!W>GA-hSDN-p%d2W_5B;0f&|7EYu&A$ILe|&y6$#n z6lCOy#Jfptg$#r?b*A2AYZ{2 zEd26T!Szegh7aQkckWvtDqv3b6R^2d@d4YB7oXtM`J&S-5o6eR^3jzJ7f|SdVd-Sz zr`SM36E0L0T~jy~RVh>AZn)QzF@4)IMZHAl6uMIW+;_Qy4?kV3jj3w2Q!8ZAgkIJP zm+Iv_bm{GG%}qELDjhT(zVvZ}N`yz{gys+_mtZ4aS#ysRadt)t*a6x=#$f`RH(2*& z>-ouf=i$nM#!HDiN6yY&cDuMrh1$kl>8#HtBhEjrQz_=5-nHdH{SQro>Zu)Lyo~mw zM{Y$zz7?S&LG-KMH)TX~<@+_Yc7L7zc8&LDuKhbyYgx(u@cqPSdt#UR2PcOHd{OTp zlO@^c)uYqg9`K_a8zFzwd=c3kjkw6U<{ay z9}&Ohs^xuX|Mh|`d8R9>b}J;~{VwN9w#=;BxiOh9Y`v~0C@YXXOmSgfQe?6azn&51 z@;V3FrHz`*R62sXplSYd64z7$hITn)(`@n1@c4QUx6F=n74Fd)3JHK0cNr>rJJ~Q= zj1ECPsB+8Yp5?F#K2+BkJ7i6Cw;T(SN8L(MgX{FT2_j{!9x76X?xR7kLd_sv5zQ6T zjycE)IJ7Yg6}46dL&dRVL3ndPIi_sD8|yQDXr0^R5Fj+B|6KNpHZH;h1_~FJ-fiI= z!sPyXcHYNX`$8$}RJTLn+KiUP^NlL>EJ}<|BTz;fb^Tom2h00`4%3zkh z_MzKpwIVyh zl3+}5ooKztVum<9oXwPy&lFK}2d44JJ}AT^noB|c1ZH170dNqKZR0&v22bP`^*N30 z+|t><6t_KH`{h03b(HV-ZwNBY%)Dlc-s3AEtTxg};aa}^DfBsZS=XSPFm>*^71O>| z^e;TL zk*C#sDyG0cYRw)RdJ`YA0FvV%zms?**YAUCCf}eg^AzhC*a>L)S7=zr%QTz)i)l#& zCih`qs0%m$>7C@+L-#ZFmvfXhkPCHq52Hux^3NZpL5iu#VKDl!49~X>F9e^}?f>Zb4dY-KL`_!p%Z>;c|&bzqhwx*GSF zrE|Z&=Wc(ZG55m3i}30^S8UYk;y%h_T6{nZVq!#LDJDv7$at8#WaekrS3PE;7dvk zCN#J!8$uSTMUNnW^`z<@w(u+7Qd?F{RpewxjJEJnVa}ZK6v#?|^D}J3o~C*Kiq^=q z^b_l&e0(|0;-9CkY~R(I2kod9BRMP&!l1equkU5dOl!bK*yF-)Az;RG|_DH zy*pPy)(H^Cf`U2dt>S*zPn>g!v`Ti@f+TN32M){qc_sY-<$iuo{saK|_X2lI)ZU~hToK1F!B&I)kBMc-CE0c1kJ!)9a0Ge#IV3uVj2uc-%oF-Rx75eg{Lkj-Ywq`=q=a?^aF0>v}g8 zJ?8dGZ2W5Txu-9J`|D{8sXY# zRkvmI2(?Ii_RujsM!S5!?TwZlbi!FdvX+`an-z04ZYQ~NZu^j&!UFT@sDHEEG3dNw z$K?eC=@J?K%8AgNFGIKUeChP-P;afPoYUsKV#(QBS9UuTiHj<1XsN&W?dwLc5^YHM z#Y9&7Peiohig(jHJiSMMhoNWdm*@RH@{$FHu>U1h2AM@e>CxZU{71^rRH439*gMeS=$B#x0JzeSpQChjbPh9x5u7h zHMr`rC2xoW_|#|;6+6}1<7fD;jpIJ=6w&!}K;UGhV^=a-V7AgP!d7VoHl$8ZDcglY zu+&y3C1N`4pP#o4MW_SkT33#@bGYy)m!u+$Jt}ddVCzuzd6zJhl#zaiE|~`Ym{|ji zSNd9W1v7g~ zVxJSpUoIGr0h|G6;i%%)TK~D7f#TS1&{dBC9pN19IIh^{O?sqNVsEzTzVW@aFR#5e zd*h1F1+P>FjBjz-X0&1~tgrOb)iW zG(i*e5JH2q-wvqLMpJKFQKrpbRxkvsI<@Bh{WAAtT^G#Eit7kW5qf$22_vNWY!2uC za|9s{W@;F+^buWt1{mmq88DZ*qZTICg>#b%_9tz1OkI2RC>}RLuGNNZ!(E8E^jwA1 zx&njhU-i1ztc>c-eb@Z)l~VyO8$SQVo7{|+dE^#Y&S`M4%ALw49@4HOp@@v*ic{XP zo2^8@evXk{qX(_9>k%qX>S0+;MUw%(xcf#5Rr?jo zTE*UI>&GE*Vcj3A<-~*ZOO3yTlLPx%kyb__NwmRCYPQ#00=MyS!cS9h&pgM#nb)fz zbC0)zT7OHTtr|5RR7|Fk1ILo4g`UcQ@45 z;~6Jpa0L#L$W00jHvKT+F7kR-VAwC!h+vz~m(sm@=6uv2bbdmB;^S&LCYlrz#?)BQ z!w9Kg$FqH*or!nhTJ|gYJvvR0n^ekx+yQEVrNawd-%s|YKRKUfbjBKa; zR#f?%deUcgMw5nn-mick3rw7B!phO9WU@{n(0f1_Ya z)$o0%A*F0jNh@Q2@I|X@_6dQ9m~3eLcCfQ#s2OQ@anT zlCKDknq3D)cKu2L-~@*>PSZdof)WGM!WCijM-@-3FZ9c}WA2{!u3_p>A@iFp4WQp% z6t)Y@SIf%YfJ)*+3EmYp*&bUK*Lnj>uGAHV<~)2jCDz-x7SfxbRwt}l=@qL4EMcE| z2%3n-rco9(jA2YHk)Do!7IglGOD39SIL=P=KGKENfJzv+w z8OZ7~B5Bq?dE;bBFMmIg(kLfm{EVzVrQnf+?5hZ^?Y^#6oE=wzEp3(6MBlZ2+dqSGKE1Tw8?6HCbSuxnS{n0RVZmM~rq`W_X*gtHX4Pv6t zD%aL*Trtj}GK$e=wF0~ExIzf^jPhk}rU#nAon?!={f~)blGN!0aKvmG*e+n`ZCPmx zrT?6!Guf=W7C-$E)2R1#_?wjPsm7rkKgqVF>s&D;z(p|yLw{H2M#Dwxi8ZTw8D4*o zz2t$O)-jmP#=0d-ZFpHb4l-9k1+G8V0bjAmgQrE>0olbzSEPY{f*G5IOAJi$0X5}A zrxXUEQD?LqpZTcBmW`X0$1p#n+(V@pZ~NeAxomUjo{FOhha189S}`!(QfYKNs1oV5 zRdGkgV8HWg(ww(jPw5 zGp7H_n11Tal=73g*62ES+N2C8*N~{`7C~V_GdSX&wE}Zr(JTfzj3)pT4y`I-Ru#z6 zh`Vxrr(!C>LL9H9;@u$56EdyRKpm~M@ zU;=M5Z`|q%^Z))1lXS7)77k+SJ~h6tX?LvUDne>qP5lXBuR)x z0!A(i87kuzH7>V5PKV(y-Dq$G(ruC?^_;(XJn~DmrGyFT&(EbH!Zd>o0KYGET^;pA znL4$1fXDXZ23@I%V!hWb z%sE0{cIh_WHKExMsOi{DQ}LVM(I@8ZYm6U_skuxAXjn=e-;PZ!}g;uO{=ekE>jD znbS=fa5$_&jj(T|1CHD1x$FxF=*KRgM}xZ@Q2t#67GiDjChQ(4^+0(xL%PEXl0jp4|5!~WMf>hv#MdyP|9TE~px>)zld2(b2>Uc=!I~1OKwS%iyKIa$;>F)Q5#20rlwDRXx6o7J-@P55CS4SYwtR4M^FC+Q8 z`Sph_nsYu52`&wlLaeEy>+wE?s$)zx!8rj(d0AFHlA1KwBVgw#mpWC*QF-6)G}Nmy z_muRTv{;z)mSyX_4&EJt5qSrrhdq2q!>Rokk z?9EvTRh&DRsee5H{xo$@SX{{3hguzp0QffBl}Byrly?K6nyi;MAj}Qo-JH0QvEibP zSJv|*39NQ=eB(5&YeyJ1(v#7Uwwyt2r|H;3TL|GR=(B(I&Az7InswDbLVC?2#tXmn`LE~z*t3l;~1wDF9!qcJ7 z>c;2(@?M9yS6aByzatsx5{49((?gYBJ)N+eldl32DSmcy28rUV5$N!n;wxEAmIXaP z#;Ho7t-ORAMKXRlQS&6GHBZ4e?-~q=UgmDu-mwiDH7xipla#ug!Q{BxwPdlQ4Oc_kDGLnk^72NT%b}P1Np;*9Zzu{r+qYE!gP|H>jWg>b zD{Iyzmu7d6c{i(i7gf!)IvSnokyz*Xq*vv8#^-36IgxU{pyAL47tyyVgnMm+>lH?C@?o-tGxhZ)9%e5IeWwMHK8(v`z^be3d zK*DZ6swKe;*m4G2Lb~B~mM4hXAe^`PpEoIA4_EN-m8>KF)idWz-r(K}uM{G+j(l*MpKo^)xMA1T8JDtz5y5xn%*LRu@TS(Q8@}e_YfI#coCxzK{G?wO zFx(#yz__|Z{5fbF&-H=N7EU5Y?pA`)7i(eRGp6DUt-f)iU3Yj3lbGkPNk!*Rp58>q z8EnR6$BbsCHjExiPwFvd=5$2Wnx-EL+fM9nMDfxpe)RQbGU=h**IZYIg&hwDmf zPec6dJ7GDo|Aa(kLiKX@?Tge+gp4s++%?)+W)j^;8Asaw;1}z36QkD+vIbuho@1c2 z$@c7s8&l0+#VMW#!FQNuV^JboyT=$Q6Q#%y27E65JciR8R!5kO?Ii#rDBHYA%lI_< z1anWJUF%Y_?{JePDdF(e-oY!kKqiHACTGwq`R=pLF}vYIGIbT>M-?3GqS&GK(2t%c zI+AJpk(t>6$*w}ux^?|w3OZSO%K<$FT3(3RBCu6CN2RjggrH%d+51-G_09zbFQw>) ztmb^b)4zNapQv)w`{eoH-23{|_aAXzG{q}631-d|EIw7lo+IBe_lN$KnEdvn{S=OO zjGDWcYh~|Oi?|pzX zIr@r=M+g&zbDy0p_Y-w$GN(Hces0dw#=Ui2H&VDigGyT)05GnM5K(Pd3R7bFir^Gw zQcKe-R$s3$K}oGp(|jpTOhAKWNu(%ONSS@99jryhAD86{9v{@B5DI7$;< zb83B5G-yYLRZAWx1s!+Kn=!-F~J#?;Y>!t$VR&(^`vvq2K)H8auUq&&Gn#lG1%=(T&ZfqYs<{8xa9l zzq)o}oeH{+T;h)+PyAAvzY%VeA7fl&-m~W_ir(A+B>skzCjygVk5ZRN;AKEl_+9S=c(R4JtHc|!R_74)oQ?q0jq7RaD>Ui%KCd(Aq!(%Ub!m=jT87pkh zr|V`qA<^l-bo%icHT|Z79}Zq}djGmbORIk;$8e(re2#JT5lOanM9%K24b*81SH$l7 znSzH3>88JA3xuxkZ#N~T$s;nU#f49l*3|^P{*0{JbLy0rv^6J%Ae@)K&sZ!4iWoqt zLL3(_C_V(FcJDUe6rYC{)A~nB?*s*-fdT zco~Jq^3}uphdvjre6Kcl)sb8%2~2j~qQ)?}+*=P@GxV`D6ZBvP?01tWU*4d?;UDLm z8GEW?kZ)q21jyI5gLA=!=8KRJlQ13d=_vO_-->+ktJVSt8T>I{+%L#GSu^ zwU$hLgGI|c@3R=&Dc|3iGamfO7IF zohqN&edgF@^5yt~1(EGFWf!RhK)R@$z(ea9o}aq3NoxUW_raaHmC0cYh666A{5^u< zTrkj6)QRXqrs`|#l{DR0XL*5W(~slIHc(wqOlJ7TXLOOf8a2{3G;dxT*md5p3CT4i zCUz|5c!YHYb^S_fPkluAr?6$4#scjob8=-UJ`~t&Ts?EX-s;MwG%vK?wGyZ3DJONB9JtmEF=gox&~x(M-qy;>0~~#hR|I(eS5Ld*$8POouM| zy8*77zf;t^YvzZg-8w`5Sg0@125o4!w%#|kf7+N4 zP|r>tiyiO~&l(zFx;|21PvL~jRH-+@pO4)fMZfvK2WCeA6AEkVeR(4mK#Pdmqs6fJ zy$@ovbKynSU52$+PZ&@laj#ljq&^BTIc|5{-LwR%r0*1$H(!$2Dbdykj-JYO7H$A6 znNs_}RtIq-5^*Obwn^NZ1K3uD*mdLIL54(C_~v^O5~=fIGJ=#Qg|Nl~%#M?(7vD?# z4aXhgTGq++(X92K9?ntRQ6<97-)(gr6St)%vtV9{T=jDZl;6lI#=I1YdBKmS_egA! zs0xx_6U0(KJs2?$Z7{}Cv>B+-b`uSBsO`w2U_NOcNIVV}8_-H^F>CG{JkKR( zlhw(z|I_C#W$}9gq$8Wp(|$I`Eb)>s_`Co1;P+^Jw3%#hw4ihz;CvK`yZmT+AMkdq zv@~0EMaC7pj^|LnKi8~^J_=(&HIOk@E* zQg!nI=*za@@irm5M9lZ&up=r@>Z7A*?8!4rc{qrn6Rg=X$Ps6-G0iYXCu8Z2I|y6TlnzK~9z1Qy?IS>fuN zf1(iK<3Q-9zoKU(`8nZ58Lq!herrXbqmD!ps`EOmwu50bs z2Jr;qA-l7B62!~2rv!xK)R%~8{q2uM*Q>*EI~ViY*-Zo>P$X>Tz@OlJ4q?im93F+a4jrPXOhO{CHOYW4VIld__^M#PKRAH851?2_o4Q30&+Pqt`RY^Rb~J0nfxfwS<;DfQBD?cNg^CZhg{OjNa5W z&Dd$q@0z$XI!VeY6aD%&+b5ZXuyJe1ssY%i(KpYbpAt|L{+8Rl%8Bc|zb%Gwh2gdh zS|#24j)=sNp__`t^T9XrCtwc_{B7d0R}+mae4r1fMS7S%Fh0f)HLd*CerqxI_q)-d zXMT8OSn5pNwG1@ltprJ4mv`D4w=(*rXeCR(;KkN-vMaj$x6N>L1HvEhQ1{FD&dBvo z-~mk zG!F;3v9o_|@ceOs;19uj|MKejO~^%?v18}+0mRqlaLegT#ttj4PXB8nNV`1ceu6PI zyxgsg!QjG!GMcqRcp+*!mWZt{ikDPebvC=pFLzF9Z*l z;uU|o<5JzR9>_I&0MpTBa&X(@427Ofm7N?~Ap$^8DBk2a#NwH0O87=O&oUqv5t&PQ zg{T}J81>U=trA9z83YhgJ(9@Rn*+*Lc)y3|y;q{Pv~T!`Q*(XzQirC46+xJR1h@HY z9(R^{96S_m6B}+ngH!8F#y zp;&2yarRHa#kIq@%V@*i9e4Jor$9}qH#=C!Uu(n-+s1;jSif`T_GD%(0mkthPQ%#w zx{PX=2X==2LfAz-UDbtLHdDq7;-7cI#LO7iyj1Ne0kZvgY$%<3!Q;!Sq$Rx&3fLhB0^P)!Tdt2aBM^g1>>^;F9WT=^79>Qhhbnr>HDJ9p6 zX>k9w>BUrdIKpxFDNv4O3pmd8oo zaKgr>d$d>vN`9NJ934w+aq-#)!=No#qA&YKMXz!oOBtm^LYz2Mmf^OHJPD}aq2V? zWNT}F@OImsfwEOi+wc#ZjF}|OcFG3+@zxSu*d?n_6rDyQtz8|~qhbC!BS4em{muaP zSott!c?P=#ADh&?`qjC!2{9JpvNl?s8#^xn8M(|2Y3(V#3UQ0Cx%bxrNsYE~?<}r#UyEgRb@4*=D5+T4Fqn1S*C3Ijmm|v>FE~14Y#&e4( zx9!;sgyDHY^Vq|~!*tIe0Wx=&t$a$-w;s?MKV`y~{Vt}$PgRiYP87yRq^n)cFwy&A z>jZj>xF-L36n{YMEZutp#7BB_CU*2d@}Iehm{rJVMpm13c<5nPOc_ACCqR*wB2 z=E9;b{;Uef>UoFOpHZa&0-f^3BCIKMs>+0xJ&!~WXr+(1VM?Dy+8E(O%&69TQn*Ju zztZsHDc))IQRwO18eWC;n0%LbhQWR%AQ$Pc;Q3?AmUL|9-s`8z0REL4uTEz==LZy( zw==<8 zkgpRzEFGFBB;l8Ss(APO z%0Tsf$QeKWJa-3eE)u-C7{63_xdZ98>ikfE1LAJ9J$NxsvbcBuUj1puy#WuS0~;6Z zTPuNyCc_|Sjqf0fsBpd_q^I zz8U=t)5{^^yUEzht)c$Y6lm^`*R|-$ z!w_~&g0y%t4p;!m!pj|@mMWJVq(njU)PDC1FO3h`Urzj^#`5KW&vWHT%U>xs{G0RR zN|emQ)|-SjH`)0kY;ABs&z-R(59Lo8MI} z!vI>>79|f|Uuw`iSONA*SV&bl7-`~kP?lBFo09erz7>q=2@xbn5^6DPh>o}w_fKh7?Y zPUOl6EDy1sN@^{C)e%A7lj#k$gxn|3u54y%Z_vv&EgrWFO-N3H(ZYW@I15kI9kDfz z2sY)wEG3m(J{&cC?2y7a)o}%p%0~XO(;QnzB%J;5>G;Q5ZXFTzxNrLK#P<^)n1G)P z7V(x|AnU$<*X*xMq!a>sy7Y5PHTq1ZwdTnBu-;+&Vbb2aX)v$Xqy+r<9B?YfpnVvB zy?&q)_QQa+Y+%!upv!>J+D*y+73BiYdi7)%ufj1Q9XPjRV%TT${0ifeyn^X`j>FIo z1+Nj)dGyQTuN`0|6`G~;6 z0oiuzWIVb~gU2G_kvo`pJyh1!?a8}C1_nxQ6xb=A z*?@^#EIC_LWAtaopB)x~A2id-2+3G^wRV>+2sh8#@a0zKw9ys$G{})3yotv7-|JL8 z4#3eI3Y-(-UmwzI@;wO4c8I;o)O!1LcU<~utiN9-kw1Eq3(ZWrT}ayLM#aIFk8fro zM~4|^^^mX!#QU3PB=Fik2m09BQjyYAKgr#^9J0-s^Tam&f+-5Xz$YB#%e{s8lRpzcCVeS2w50P;zLiKD&c#Z=Cam5sC+X_+*? z`emmqGd6<%alZDOtNaZl5ar+EMNju1X21xy&7Z!~Cm5B7ZQkf^sJa^eLkug8`yT~T zZExyTt*;vrae+b%LuSUasJHH`#HrkjoKo)d`0Sjpsebj`-cxTRR4ndqE{LxJb8bZB z@4N$17~dP|SvO)r=ZwA#avv*puvSeA&64m64`{wHUc*A!2URxJY1S_CmR!KPP~%&j zArziR=Wuwj`@_)94Fi~`-28HNMtS0n8M=|s>5ZDuo^TbMb)szS%$J^~@A*&plLa2G z`+>ueo&42BAeaD~y7gnBwcS{;v?U^XfDQSrcB>a?l?Bj}=D*(`!NmWFkEi(iR>m6r zjVHfpV~XA6D+`~HSX8I(VE?sJCs0e;xzA81k`V)$utNi0+uc+~QLT#4j0MDY1>{P%T^0ZDy92Y%D%!h<3HTHhB$RvptjnybrnXwBgs?Y0pN z-;Ul_@})XgDZWlL&X3H8D?KQzB$?E`x{=$i*B)!VIi(8JZ_a{FPZao2=4y05x;p+d z4&;kQvr8gwtu}Z2q-Jq&1Mh|a|sDg;3T5en>o|Mxp7hv_A)*E1kr+!oU)NoS1X)-itg!J8tH0JLM2z!XUec7L#1CfSzafVK7FEM^_(Dp)puuh z-hESgK>N)`Mp)(op3NWm!Y`5jqtfZG3>8TY3ozgW&%MuO90EguJfw}( zT?M9GA4+9IWG-sHwE5(%vpT0z7y$#wCbpu;Bq308DF5u?{dZV;9>}!`P)Bl){&mle zaNo%sT&F(ykdlsGq)~x~nle?Tm5`zzteJ97JfiLk65R<`RKlfkfNwVciDg{9$NS_! z!`$pp(8Av@ldR+wOf(`J0saq1sDb9J#fJ?6=OBZr!#%xa;sZ8~mAFXZ>*`8^`(%Ss zG#59h4c2;an!0yk0XvYq_s?t1!oZ9^s1qGO@WDSihn=~*>gjRuVKLu50f4W{@ovQL zHk^1Mt;lLvuBoOv=f7&GyHtEQSrW=bk%H|)7i{G9%;&u5y!>5<_rFSo3^5GcIMsYs zZUH=pw@SZ3;l?}W0Geq%&-r4oXy+t~%)YSH-u82XTB*3s%pSXU49%I= zSrl~^Mi{^D|CS9s)A15{XgdF;JI3SFyo^ZV4G-VeF?+zOT-(2jsH2^WWEI!q3Fj@)fnu~Bv1OPG!fk3aO z4G_96Y?j9G=f(SLja^Nk)0PJL%{W}6yr-*y2@SQ9Ax^IjmUwS#$Sr8pAorgwFP?Sp za}P9kc}=o8tiM>xW&`0o6wIBR50JjykAIjs7R;E___^wJJ2p=x$~l@lYT)K1^4F|5 zHmU*%KseHYG|X(POz7D(WHQ5FQ#F?y>JR314df0K1~a2F&ZGL|&r)hOo;DU=X!m=# zu9re)J$t1f7U4`aZf5?WowecKL=!fx#OGw&Whn$GYu`~l<;y%LY?eSN&jJwZP!|FJ==kX%+#jJpFRQ{LH*!`dasd%p+$_2 zuj46Bp6zdg8~guK@efEe?20<_!!cI-{DXgSOKedC zLfwNF3YiL}3Uc16Vj6uJn)D+nlYAhr`vb=GqQ%PkM;5s@x0GjhJY`NMY`mt5*r~iz zWhDB{k?C3tQV4I~4R`;97_&Dsre^28RORSWkL(v}%&*du)P$jme7S(dQ_ znH-W(%>s4nC9$gNU^h&b|%ceA{vnQT5iO>@_4$QAVi~33-oF zgKBe%7>9hZS;GJY{r+!tzXYiJ#UW*zzYh1?wjTEQXIS!(mGh>cxrcV+NyJ%q@*-{T z=F}k1*9n}KMUKVxVEb0|2mM1-HHBX%<8!Q}>3!!mm>1;y7wB1oG4}q-?|erQQ2GeAdds*Jwr7O}5NMN3Ce1?fr8daef? zQ0wZFf*Rd-G$P)(Khw}#4@^eeb;!^B`6gahtMZ}PO+TF7NzTslVACU8k;6xKuRCrO zs?k?g-79U5Bou&EAp<8KFCR~czT+Vok|9Kl#y88jXGRR1{${4~@T}~ZZsHj-Vt%Z_ zCnL0bdgAXH{eoRSY<~PHMd&Wm*0rTlLo`Z>MPEfI zs?WEa`qOT=J(kV?qPx%)sr43d_KRz=Y@BLog}XVx?c4{+MeG919`RsR=!fxufj99f zb{Qyc7OCtrpMaux7_&@$Z|hQvof3`VhIU}WP``aAi7(>( zlJOz{FBXdgr?^+3eF2k4_qk?>tz!Kqp6=!_=ugRq996>PG}+u(nXqd5vd`7 zKtM`B1;GZWG$|n>y(Q9nqM{%rL24u+M5F`~LXZ#wgpmKl_x=6$TKizHwGZ~u&Kbj? zlgwo1{$BTWeeO(A{=0fvT>4rZN_I#+2s*%KZEy2Y4*9WD>|=}2Bw;tDbsobZx+jp% z6h_BFC~&{mM1uLz$qa*sXp`4K<-FV0&4voJv$TNg$FY6F3@33QL`bl0aHD*Q-c zbRf&#kkl2Z!3kae^_U9y!JRG6q4fFj6Mnp&#{t&O6-!&ci#t$pfW}A#d|@_NYRc!v zR3W`-;Hv|~Qdgtn$|N=xDv7GR!WO@)Bo>qU(DRm1 zoLEcpNc>1sx_hHT`$H;xv+a9m{HD4IF^!?xtar~b1(h5kCk0vI*r|!6sxr+hP_QOqDKQ_Nh#_0 zD}U`;E5-bn(xyolpe-?49UqcA)65rW`7%+8Y3V~dxJ`s*L?ru_WsUXF#`@Cxoe?>> zyLX`bdWSqF15O-~E2`6pLu>E7<-PBy&zk{@_i3;1m(Fg+!fpw{9+Lx`fvWV-lj_t% zU(($J_@Ukd)X>cL)qOOTJ!`TYlSa=XuagLKY0K)tmwzd#`xCrdt?OHk;YBf^u^EVax4|gq`Sr>nTfm-5G zOKFH=+}hJT*lbp4MwDIS10p+CYb7=pa^KmNXtI&@NbBsqI-y23_zqjq>84gjtskP& zV`IyNMVFGSM01NT)3^)!OAB45AuZvzyM+&?pkVDlW*X=_ewvMXmGFIHHR?=|DM?-{l1*m@BPJ2qn~>dXPClSP;;hvU-w%DchMmy7!St z_*S@-lE5nt%0(7>)ogxVx!&Cy^1Ubxa2K;Z`A@_Y3tg_R1r zfa4QNTDXka(&^8p6Uf!J&bFE*3gg61?HR!iq5&g6o)rtY#znP5^nvh?04{J$V9(tP8UH@K;-6!g zDYe7tNdfxbmbPMZ&*;VZf*SCo^s^pSr1qa5=0@k|3=+{vg0262@l!JIcv1FV~q9%b5-d_vFi`Wv5ZV!yEEc`=Lijn(%Py%)C~XSVcMUl>$K)le&b z9F@S?S49JbOaqPt}Vbdatx)iseeVTaIgy zL$!{!TGyW>hE+(4+X(eFuNi00=499FzMHEn9k+}mpJ(*U4<;;Sp9?>B;cBm*o12xx z1l<>gW;=AtoXl?CyHVwZbkKDHuf0t!kB;y*T{W2nVG*4N+Se$95fZm!H%RAav!+c* zCa>{mT+*-}&*MXR3=Pkn$3tNqUY;+0*}V>Dt#|oSs-9|Fmb^}JEWN3S_oOnWWh}>} zJSmZP?`D+r2AO@zf3HzENTfpuBavT%fDhx5Nj8AXStA(6xkVHe*Xa*m%w)|fv~czD zJnlvZeiRIGRT13Uj=$hC1_>&;q^xS%kaK&O1fWml(K2I5dNqRs`bw#2DLfk z;&a~J$T>L;a1;}0|Atrh;U}8rHWY3jhrzcBd!vuTpyzg6i#`p+t{n9AyT>(>=c_n* z?0R-3EhcM4PHOsiLH;!+H?(mpz=e32k70045^lQo1&1= z?Ujq?=mulDL2hLIfGyqO4vnU9JaV;q))5&$LO0KFN-6IkDd62%Z<43ov3{l^XS@DxTJ?MW=mmsXO()dhW>nQx;L19iw;h&(J-W{#bY=6Z}dP z2I{+tEfmPd5^0~@Y~3T$5?^~k$Ww;LDn%xGQv57@$g4t{6BEc%aoS_*h=(*2n zsK*)fEcD0k4p6J9g7N*2XrP;CG^qC{dm{jl=ctBy=1PQFsZ_$lX^cYM2w z9$Bk#4)pxgpOK|{#%0DUB{NumbV>FTHCFh^gt+EO_U(vTtS4d|#C_1az-e-Kg-3Dv zy&Wlaw=Ea?tpsv6hxBlcY%M4Vtl^DWnOt$yB1gJY?X?iaDNUVOk@qDTICcFx$t77KBzEg_&ZDMCXCwq@4 z`wRE7BKYwjz~!C+llQ{6C${2TQ+(EceDR8ZUl1oh(5}Inil;4c{qqto%QEf6y&SA| z>h67=vb_*|J=8%|7jjbrRi%>0goDr7oKuWaT|Q)-NGnC&^G$EmrA#fHm@Er-rbavb za7JsJGp}Cl`9wIO_>X%xI>@GCRr=Ptoh^r&GYU)!-ZIVmxBoef;0(4rU^ zbe|~YQr98YIe=k4HTcdhm*3(4WoFmW&Rg^Gu#1mP@U4$#LtBjueGnl!`^IYNuRsBP z&$2v}Y8&KwebMNDuXxS;un|c(ux~2SgDr@#Hu9a@no()}=hrSbEYo^2tu+TX=iQQW ziIHyhWwE{Va{Xf3^gvV^9VVG#OFmsPslPYdQus^fTFYhH0X?0v;e7`AKi_$W=ED@A zt-JEE0~NHf_sGeiiwKt>*TOD9cgoWJe4CJ%P%!HRcH>--gN$vY+pQ@AOZps7g+k-p z?o4{v)9bSA@aVVrlC2QfBrn6t!9kbj-nbautAL8D`1d&A6`AwldI#$f@KG5>gzs%OeKaEBaYD8(FRc{8i1R&f z6B5_%X}avlj$1$cW%===dPJJ#s7uLQV04oZ#ZtqqDX2i$Ue0ulOJo@umPX@WE@^k+ zY2}4J!o9gtfBNE&B?)iSu!4~U&Mm=K8@nW%5gv0%! zuo=xRiyHUzwfcHUp|_szC6)a%Ir1T~A#ksp832IvWkLA{lu$R(8Jbe3_|gdxGYBy# zLe6%$_6f~IPgGx471!inSouJ`HS*G(=Oc_Gk| z(=f*@MRAs^)U94s*znC#-!;~oePelx#BfKm8eQ0*i~EE*V`^1~A4D+KrA~72Ca+8V z7~kE`ZtOckgn#LLT}wTrR$JXB!5#f*u5H9Dk?No|_xYmd^o}p+$ctmsPKLLJr?y)> z${Uzh&Pxp8aFly1UtLw;#CCVx{Ebdwqz}{-BFd!gQXXi^|Ct9lJgG*9I>c?Kp$>w2 zc=XJ>0b?*rxI%%S^FC8rl4`}b-YeesLqI)}<0t>^AZfwzPFiCLovw+PXy{BCv+?#4 zZ1|9m{)$phFm-%57bw2oQDS7Rsf;SAHip3$=*!@?Y*V|}O{C3J5>RHM0 z{&c5avfkvddXQ_5!&+UW`*$^KZ~2o@a$D&1b>O9$^EBOVEMRL2W zNx$lC@x3GTUnzRl;PLC($t84FGAuCmuMPK(Dv+&FfY-U&Y^*`Iy^6kGgbk;c)U_)H zZ~f}%Oz9}ha&4Cv$PbU|K5``G^aFL%$>@y&CT-B5GmeqF-jSWp1{jWb4kvx;v4ISD zA)p_fl546uOAvaLRQQjv)d6SF!_@Fy;KCoS?9| zWsed>fcaVdgFVW(S-@hM6p84I)f=oq(eHwfl^n91&*qwvBoZ-{L&yPMb*TN*lDVPX z7R9Y2=&)D57&+1bRooI3EjX`jlXCRZupmy^D@^5`*pgL5sYh13;*>G@Vy(hP zyCcY4<CH$+CbP_|> zDAYpvNKnp?vjtN{HfbeDOXWk0N<|yL&OUKmYsu^6cONzflxN@dZg*(^Oa(mtP1Z8o zN-Mgq(pqD;$I=odW!VWrutJ-*wX<#rm3J2@zeaKkX+|yi13;zHs0R^H_XEswDOR32 zNxHy2Q;hB=ar%@-t?KZyqDqWk;(gZqqJg--qVZvvO-j=R0fe{rGp~o#4KhR)uXFuP z<5@g7noBD|79Yqw3%RyE^Z41TFM)er&Q6v3;eT0VYhcXU+x|=@kcZdTzjdyy7az;* zYD1Ui<;l;>Nln%*cEY{po{n`2c+I_zF}`G@r7_!{4jq#D^I0nv+`P*G9Qo2wu2B9v zR|87_W>cv`(g1Fa!Qp_XZ)`4m=@03Y@rL>7^WGh}S6lsi8^hkI8=u&I@8dsey=nAD z4NLqSd6#$JqN@l6?o<81?^IFqlZ7^wLoU+xSXCs*FNkf^x?^1<7E2_GJVE-5+!tX@ z^7s6QyiB^cRB5LM&avY1%kM^9BQNfDc2`+k)Q{uc3qsY6r8*)v9E~-X5|v$Hp{M7o zWI=%?PvGgVAGHG}dGPyb-RquXdkamUS_s zovo;?92I0O?P#c780py>S|3yamYakBuG@vl#zl{O{~4dFa=0HO;SFSrzg#l)O%L~c zh$EwDv3M3HcO}^JpI;`WVhp0ul4xN`AKixf?L0+wHcK!~I)gP#EQB~17@2EG8b!q% zHuwG-;+-__+}9>AWnY&(w>pX)za*_Yd8FR5HIr*8TNp~w4PtGsU`}QRW!3=x2M?wE z*E)DFas>Q4Yy+^ax^fS9*W-5PPRWw7fh9}^B_SuN*N++r)2 zZb?FyOgrLQ|IHhy9oVNZ{MilH?PiTH_*|1xQJNK$Fi&s5aAtB$TC9$sjg9iV2hF;h z1Pjx_zvmGtlQ;{}VT_`G)Hvum=3zvsXuhqZq?U*4zIty*_QTOb_y#>2!Jgr&ePdf)>+lcgc&p{rj^NF@Rftt)}?&+uh7;KG;jl5>4xI6)OM-dE|CXMrVObOE=YAI z7P@n^3yD$%=cEc+4;oiMgr!7m=R%i&#_;68Nj0k1kp(3SLD-kPu=kdrO$}3@IQ;xT zK+vQT@}$FLgt-Qps?Q;z(w+WcgIm|^*mOp=6)6yp_?H|MQKCrbEk&7=%(*>_l4+OD(k?xvZcMK711DKQj*=~APyRUK zUHKaPyL8$2;|~NCH`73`Xe*oVnZedJ*pfp2)6<3o7@J2s<8hO_H1}N?ew_U#bKei4 zMNTjjki;sFUqED~0D2>ZJS-}XSSaeh!VjB)1a3ad5~6apS8lSBF_Gw~g^}Pe574b) z>j}F(Uc2x$17fEGHEf2wE53b>9`1Sf=q!A2;kw1g49MIalw_D{iAZ>}(elSaRR9YJ zGXoshb$xpG^+m4fqpy&BZPqH=6%jU*c)8&O5m)iKwBA1>J1AI(F^-Z&Qlv^)A33yr zyvf`m=S`4nx9ZFANPTMtB^z|BY$xU=+sZXnWU**cX9GI`sdClH^IpwKUigyq`CBxr zrOjuVlh*|FgI!t4#t7cs)s0^b`&c$f1j^kp7!I1oz5rmmGT6n)`}GlH&X6TT>HycB z8^*%xZ?ficsI@RMpqUvx6bnrRi)tqem&uL5(Q!RJf4WN^mbp zRQQI@_Tv3v{nABci(tx{^xkShY%JphH8f)|rF2rqrXzYTm38#jw2_mvD)n+-Ueesf z&#z`Mw4gY(vLuJVShwwV^dEuG8ysAv;quU=+JIq8=J1}G$4}-s$d=VF*i9(WFb&n> z7Lf9f#0Yts^&k-bLI-jiF;vq3p@Ssm@TEb_7}*jYNdYO)Mz@2POKCCUBwvwGi(%QXAwz!4Omsa= zYXI9C3RI>V5@F+*V(#S~ob$pW>3$8l;K)?%lsu00S(++Yr4(`?2W6!V=lDpx>(QHS zn8rn{#VN}3n@|Fa7W_rD(bMy1sBg=ot<0O%$>)!x7lo>LfI-nsv187o$z;y>HRGB4 z&I>M<%OiSSVf%sXGN3|ng>&KSJOn_1?bDm(?yG7$zkXSq$HEB0UtJKp=@X`>0bh?$ zHyRNkP0T-6;LPaTnf~=M>aYFXhn|O8n@Qxm8 zz_vH}*+#$qL~Eq*JeXvb;VCP$3jz@WqZB+k^2#et#HAjE&x^0ZgDhUFJYRWj>X_PQ z=B_QFEiRD7wFuT*Sln4?G#Cf;hRwwVC?HdkA3piP<6GBI=<;lvRO0a0xgCgI$>k0( zL>3KWZn*tg;gXl^fSAuDq7@I-O^^Ql@<2`w>@+>fu2&i#O8s3=zd`jN z6rx+xT1VxWItP^&0?q&ed*r^ixwDfIV)OxU?p*X-J;Z>+8YjD?wd_f(3tP>CWcq%; zV!8RApQ-;;h1-~c#Ia*{+eFcW0w>q%%(ho*{4><>NbwY9SC>0O7o-Auk5(+~qSJ0F z3?H#-weo5!76}`ntaX$GN#<~}2g6S7iyXxRb`wsfU5Qt3f7sAK#UioDOQ|w!CbRs` z3A;Vm5P(}vKl^*xfVDf9$CVn{VjFXMw$kAeK@2rl+iiyv;*( z>b^tY!M0cak?hqHH4o(~Y%-;*MX+G4@Zb5(6@*z08uvqFvLc5t0nz5d{NZxHIfts! zI@U3=KxMH8#7kBF=#Sya!qhj#493ItG@;d3kNWo_9gPHbzI=1_^6)F(s3Gqb5H^kh zy1C!!vF>=1-I(=2)P$D>)$cxtId^eb zFPqw`i~Vz{d6th_-~8JO7+Ggl#wI8CMeh9;e^FZs{5^+NkX!30Z1gwgqirE@(5D<|j?@|K-5QJv zBLm#}invT%k2$M#7>-qhi>17e{(YjfqT4F3O1qt3=mF2me1Vg=d;Ab3*Qd#=_iqRo z@HIsQ@`XL%^~vcl;C}e~s@nHocY?sDoc}i)I~^B+&?i;@WmxwK#cH>QzsPnd-Brpc z%w6|394q8jkNH5BM_`Khv0{fsG{CVU@YBhbto%+v#WHdPzm*)IWOl0h$&IEz+7{ZM z-9i9{NEx5>`~u$KO#fPsphcer4pG}Lh`qm-a{jOmFrQ+QtPj)}qx?AIJ)a3Spr>hw zZTPZI0J9CEmNJ?uB8#V)V*_y&QOn&ZTN&~uh57_0iNx9C0b!Oe2kWj3J5)x;uI9d= z19I}Os(r!^BtBc;(tLc+`8)j_9GO?}_psz|KS`{|LrNz>HoDu3JvjBPDFabeh$!MN zZ%I+yEt^vl{-onP-pa1S9bS#pUwN|`{R?1@*Mhi{l9ljU;P_P$xq|2UdFxRP39cP~ zq5|Jua7SJ0(YQ4bc=bIjz%wCvkXRIwiZn6D8>@5)Y$n_X@ zw;~?yyiXrbQi}(XMmN|?KqsBHy6`#9F>aqB`}h2<#?}(FF}>2>`blEK4{Wrz9oz=! zr*~IK#&T7l%|FKQU8xnQ3qSRPGk0+obzyARaB@=+I%K*nmBEB;kTqpb@SK5RA&=nq zb}4BujX3jM{(4#36s6i%eEv1{U0G!Y+4{URpUwJpp-{_B2O8DKP`2ogL;pJW_ZAkC{^&f?}b5`K2c0y4*P}ifaxf@a;5$m4^)p zd|?e)R>hAOb%P+;{r&`SaK5rwXVjjksU7SJ+hsR+<%$ze{Yh`|<_}#VPBQs$>qEso z=MQ};C*x&MebFjh%5DHxjVisPr^4v-nN=C?;rmENz~|N36#l%By3i|9wfqqT&Tj6L zHeuzwy*p73;v9mOwNRuFNuXOT#spXlvCao9~R`=RfPjYT+Eg zZl~Ulv^#y<$N8PL?pq*QYcIrB>nm888`&YrM`6SnrKq6>TI4VT(JJ(?lBI?4PQ zRN**t+5{GOiSp6RjkvvaGLzir{7=o__-E7zd&`%DJ~S}RaYj~~#NuNtsD^KtN3l_- z>qdCiA&UzEL1P;y?YvzfT{iJx3SZG_u>dvT6Ao~3)DAh?CB?=IRZqt+ON*;5JiF;*_@pjutGKQx zsNP^QS19KQAzzQFC<0qjvfW6d0!|&rh^w>Ap`JIEX>37W)&PKTAB-d#@*0+0`e-6^ zvuwIhRv0xV?yz2d6vv$O_^nW7y9``$;g-4atrAO1iVG1?CN8{crv(WbOyv4dEx(@= z5A9Bg{h*Mw%h@ZJeW)>O8Vxu>vD~Avy=z1b-T;*Hb6O@*JZc}8(4FJiTLWNEKmB4k zjGc7`ITpSWyGW_6z>VJ)k|l=4l!&cFx_aD3BbpdTKp_Rke3D}i0X5~a#O1cl55{4fg8mmWrYecJS z3QNTB*7S)X+r8)+3XtF#4^NNE2_-Gc4XiPjdp;WS#<37@NwTiWW{xIoPPhXfiZ}nq z6@QoNI!Q$DF*}tnv1r(mzoJ!$8?9eCHE!Ri8yM!IcUkz&{feXZxY`wple+7&$7u=5-Nb%f0&TXV*#8pVPb*W5CnDQuGn_=tMc@Ob`6whK<~!7|{0>8TjLcW%DE(?K7r=7ImHvb5iIDm`>b#wz|F|Z+jyGeJjGY z#Is22ZScv!Majf_@j_kRcQa)+%}RYh;1^*zGgjBK!&-H$BZ{^k5dUbf3vbHY0%1kW z)r_6eaky7`H=A`B-)k2g+7@%Wb3UqymtDAfIacK&D!kiY<&z(xPs|wSrKd>r!$kc2 zv$--?)7U2^UX11TZ_jKMsa$#-*2`;5+D5aoF%@iC@iuHLbK-JP&@Rom`53N+vG6Fo zX7-(#01FtY)R^2(OB2G6_x=9S$aDiyTT@D{Kn&Av?>Yrab3S4Ij75?=NVLu9&3#qN zy1d?t$f>f*zLNd*w-fipnFY5x9*^T}{R&0jk_=_OyUk+iS{Sk~YZ+MZ88})i zGyHol7xri7V`!UeI6h!k=QIwC;|61dMkz=di#ftmh~$1$S&N5cguY%e>5gTJr6U^p zOdD6&zoO*w{)BMF8Ixs3P90O&qdhX0((Mm32mr^W$JZZ%d%5fF$-4dg5|d z_FPo{+Ua(bgh>o8Gy3YOjEL>`deZ3&{ygKJ4Y`#wM&5GYVWp9WSh6hW(57w=x=7wn z(3wuF;Xbl$NoBcq7mgH)2(q`s#b0=zaZU$I&5|N87LkDZ@q7+S3Ovvav&Y#n^@h{e z)TG3S>{e~{C({W~Y?LcC5(il;Ptc@8)ce4hAN3Ik!4(2zpn2_mUfNPL?IX7jx*R5s zToWv(Gfs~uiHJ)j+i2uhNdEX4rJK$_XKmv}!saZP;&-iHc6B|s5FM1E^bu^kUe>6? zI!}(17J4KIv8t;MoHS;V)TV-%Q6{HmCv&4cH}p&?RI8m%Ig-s@iK7${;Rb^71&I)>3f3io>HyEi|? zy$d%TJtrt7}0Jvo;vE+JSoOc$Id8}L%Dma=N zOZt=FL>(}DIFwEggIA*QR+kH<5(|~Ovu-$aSl$`8JDw|*Cq04D?wzmqY1Ot$!bCTq z?NJM5X5&0$i0O|UlGI zct<1i49mVX+pGoi0ZKpUQth4V+#s{@RY>KlE&tPreL-uPjt(2C;CM6fg<qN1TR~YNO@{{28mOdB~k^@$v=*4X!vqHERRP&9pKY-$TRlfiORmDaWQglCvIuGgiR$)A>yafL0B^@7nwL&}-gwfB9!L$@qN@#VrVCtwzlPnm zgzm);UeTw*1~q0wPA!bFIbklzv|E+Ni4wpxqCUzAm2YlZ=-MDSr(w{8c`5rMiB0I5w45>EQL^50VprXSalK%?X*AKtB`q>|UNVzNfs27x@7O znD=rsTkG9l`XWkn$!|i;Hc~G$7Ol3~mX4w^Z&qA=ZMChm4n8+iSS`3IXYz-HH2*JYwc@&I7D&WW<8@|xN0ZPu3iqD&o2ZPcaiED;`BJoz3V11GhN zcl(1@dkW;|Y%H0?pnE%Gr%V|O+ zUiq{o0yaKkV>(bFMh3huf-mWz%YTyD@Vs-c%}>p)*H)v0i*>e?kbzLfbl8-y*4hKa z=qZ6zKOUK0<|#>DPf-fg?=#fgC!GtuI~o16if+JZb429f{RkMIel%Os^IJA~W833i zo+>&}I?-kN2VGp})L#9-Pq`kxa^quaiRKCNB-hxBmPLO)A^+L-++CZ9l{|U$6w~Ue z3ujI^zWBiBp)M&=Fv{Ef?QYK=Z$nYaDmA;w7e(*nrON|$8|pWYl{>WmX=ZosIl+i&C)RTICtbwA>p^!V&D?isJcpv^=SrTo zQz2m8_^PB}_t^;Qp+eE@|QK8Sv5{Zo#VvrNJn)uaR2P64eF1GvBO%{|VDO+JSaR zT0kD8ac}g1Uw%3EG-0zxZ2YW~PhrbzXFD>TU_ZH2{e~o378DlcnC9^vZ?D_#t*T#@ zh{P*3_b_%lGE2Kzs>Lfx)(+m<)BJe5t3Aw?t27?z`$A~e5Sj$L}p*2y~Zy`)-X@*vHGH~A( z5aro<-HT#4Fpv?0AkNut|8h>7_`qrF1@bY8sGwK7o@bA5U?sYhhcAi1u zjRy0t(LYEOPDb9H(JPdN2Db$fS%Jniav5ce zl;LJOWq4FQ=&ssK^7aVUw(wIw`Fprj=h3Do1k54$&t|TM(93!SK0K=@mOfgqu&%6 z7^PMeY@f9MWA_K+rHm^}FfWLi;T_8E!{PEZE8~c5ki+uX0}xudsiF_JYLXjB+W1Z5 zIIDEc)D7ZjHK4}hTU6~Eg#$vTw%QvgLC~^a*9U%|W6(JE(*^M8(=qtVm$oNIAI{&` zSMCg+PCCEp_+HR5%)&&p3xr1EH1lLmS@cRWm^$!oQtIS#3s-3w{Sq+_(!FBy{?el+cqT zu+g_4kvSJOB7;~(FyFb*@!l%t`Tsq6p#q-QhT2nyd@VIuzb`BIuRPR*P32%@Yvp_- zN3_2V&>TKCWd=6R&w=Yg@yUX;@^(3j^hfMjjeK2&%FvXO1dMtB-Ph51H27_D?+`AW zZ}@JnMSRYXApPYu?Q z-3R3MySgU`e)d=42lZ`*w{vRN^|Eeg{7GAsen?=viaMK7+*r!Rf}@kmvfdaO+|1>X z%HS7&u|qGX4zq>`Bk(i^gF8uC(GIPLu7l=^xO4h-$B9yCzk6f2YvFA75?3BdK>pi z(TC_KT(ah1r018(y1s^J(ju$<{epR>3Y-*qOS&_*{LoQD`8U}D-1EZ+7{#J2JdI-= zP{|q;1GkRbN(X>!_vzIJmQlMXzF#uzX{dhd60MhYDYJxGHb-9=ev;!B)s=X_va(HH z{&eDCRNzblm~_joEzn1J{~;zN`YqCute9aj`{U5c^RYI!4v($i_)}Aby%NIzZkdo6 zVTG;?yIXG-7w#2|WSXLKhvlg^eCh5T_M#2EbKN?q6ZK!RXAD&cCl0w*99E@w1x0vS zem?*7Cc4^a)>2!hUU5I6?{;t|el38M{K|WBLT;?E;h1pr_wNls9&>6fTYueIfJqGwx|nM{ZPl*TERGkU6%=*Q4RAfPpg#Dm;qj&nZ-r@b>9VcIUUcN!? z$Hl>nFW#Gd8_iwrx^c&OY^~2lILv$%-7y$mOO-{>O=^%Y*edAwEj>#SKYAyLJG>L>tw=o zUM!jww$%J>LH#|AnTf~h^7UH%JT$I_F|TQass`m?4b=W!F#3Vi&|A?JQ;iFFsA3cs zM<1WnOCJwkH*`phLNAmMF6U<12hM%f@Y?$LU=S;MNK4bcWX0O&DNP3Titn0 z>cfie&WDM~W1QPwdG0L>r67{^zUARwZ{1q?iQ!naR+CITvRc7yH8i&or4X=wHN#n> z6B1{a*$nY_>y#AjmTZq2Sm?QocNyp)oU1>OX zh*K}rfy$2b7H#U7RTFmcb@uC9&=f!TM1hW>>bY1#D``Q4NeREzm1csrz`9Px;{s<) z@DUkjs|+3IC@T56T1mbVqtCg%2s?cz3~n5fG;rK0>8ZP@MD%;7(w>iJWAA*BVRdKP z5eHKVo-3NNt2JPgm6#FCs5CuquYUL99q*p~qhVWaps3GT&h(1`b(?Ly4ywxm*NKER ze{Rj8rqTWy>~I+_9O*nW@caY$`RXr|>_?`MmPOVl;ioPw+Y7M$@Xi6=&O!D`c+e)& zc1~pgIoiVefZZcWs zIlci~Z87#IxHyRpVn&UmsfI25TS;)+J)yhicfv(3pikKoa}70gj-Hf|`#J2@eh2kL ze9$68QaW%C&AX3!V)C-?2#Tfjz2XGvy|#Xep={}(oiG9#UbJD3M#t9h$XTaq?0C#$BUbTi2Uf<|fuAT9|5WXSzLRXxS zn?nsQ9+7WZlZ(mQI&=aPZbGS@yW^k)d5ga->Q{JE6u*J`SM&=wxdC7AQS2v>hVQN{U{f#d!Ms2;QAGC*A{)}?!Ks5^AUL_0#+Lzd8lxBlX+K>Rj*j1F~ zsZD5{bXee)oxx;pTDD321UX=q1Lq7ys<*fB>dZAvMtAWd`-yU|i+jW3oftt}n>x*) zu-a-Xd?a>Kp|!O{KibK!9uM4^*v5m9^bY&P?vK7Lxw3t}G_NXN?h*bQ50u&U$#*}m z24E&AZG1KC4{s}7gNIaqfL0j)%ERi1&j;j;6^VCDJc$1N*YhFp9`wpvIFyv z|1+}v+QqJ~Mfn&mXEK6+Bm#GT^I_ov0(=!SKRa&WwEMp{saAfv2J$Q9h*8c7+P-gr$++U*d#uEWvcaQq%(gH@jt(QB=nzu z`oBAi|1ZmdzX7!CfBY5vpTeGLi~Ts4#k&Xpul)kprW8BBB z);get*rgauXD4bBp zB2XJUeUzI#W-r;ee~60pV%~0AAICf>^uX^SqB9Jjb+qJE68$S7@U3{7hSi}~%Mai+ zppqSNk-0$`D#?nY5;^qiXYZbNwGp~OflY2`I?k&&b$7hkeu;P5)H>tuU`3CPvn2}> zrW$-CUu?&{h~7?4-NK;4K0Q#F{xlb4+@^m4MA5&=g{dIm^r989hu-BpIb5qWMZS>x zvnJMHZnH^TPumX#^CLU1k`ycRS6y!~WI0?Zvvv|nxv9b9Tb}=qi88()L*Nn4K;YGt z(G#S1BUruNDt_pb`FAvAoDDQop@tf%fu|Qr+*HEq*hzyHwh+(ZZQ(78B0ICCP|?C* z4}+kH;ey)vxqt!Ph#LjO3vvBnJ8z#QUe3i#=f`miTa^@+up;CiqlW@WVPl76c7K5l z;FdMsr)e~X?KGzy=)*|w|7I%_h5D!cJn1I>kUXTbx51Ni4wJ7x$xCbf*kIja&xmbW z>U!wb(%M#1vL~$7y7H=GwM*P#I%gq0{QYzjUjO73Y*wYCz1wbSd$(#EB0e&!F_my) z_n3cl4=la@@VROWUr}R3v?^4xdMW8csI$ffR4-jNtM~3Kp(XYW+3iip_#fR?t~Gh- zEsz^1CLfB`TZ|1}H*`nt?ieNk!qz2<1?qNqIhvcEe4ZO&*N#-=t_hfD;9 z>4Zsb{miy1Yz!I3lrRGf78T?N6gje1gWw_kG~n5l>oN z^u$}XA?I65z;nH2LNcdy1q%NUd+!<5)c$n~qaNfOis(^PK;YPss!~EnML?zZ-lP+X z0-+=XLsalfN=F4DK_1>K1R8EX-Z47jm7F|oR_YTs185S?1zyLe%^ z1-^C*JGhqaf4gV5zn-zgwSP-5(o?xMyrL%V@_zpI00*;uK`d`dqgQOwl5@{xA~Aoz zxzv|CA)qM^dl(--LbTZN0XRRslJ`4cqw9_Tmj%vGD3@zk`nE|}IZd*byQw1kjnD~0 za==1t{Y+W5mWri|QuQ+(z*Ugh5|$O6CH&4V;)znppIZb2Y}kR(s^e^wm?+yQY!rL1 z+U$s%b!5yP)J~0GTtQ(^2|g6fs-wQXkfwL>*9?1&inecu6a?l9pMNv6`HCOex!V-z zJ?Rn-n}5>*qK!UC(*sbG=Z7KYPAZ1{0h%UI===wpp~$}1%iHAkuDE-YA>(jR=gku` z0hSCCCX7->De~v8tda-{6az)j7{4?s+2P@mJw_BLt;E}GL?3I7c4)Lm-M!E*nnuPh zHopYuR^zekqMPU57Lav5H)8gwQO@`D&<8q!Hj;HecnK42H;6>bcT@C)#a++4UF>kaKeUeewY=NIN1yuQ-U%rBS z(SuyEljBa+b1CqT{MvaOpDszcR+1`dQ)4r4`l%?;8``^&n4))=wiKV=8kY}I1v&K? zCs|Y<{CJIl@uaLAdFdA3WDedDRe7om64M3*YmHeZ^UHf>3zb@^+jc-#U}JMJeSue# zsAr?h_B?#7AI}dDwp`5RlCY}hLdxP*v8j?(HGHWT>jlPfGj9VD$Et%Q$;~9%pKT%& zPx<2zxmBYlKndVmB^1HLgWol;Ko73BTkYM?9|(~THmHxgm*tKp8FJ%QQq@yJR#pZ~ zqiP0%k*^U{X&ZLZ{TSp=K8>MZVB)p#wcvleualGj`SQ)l?Wr zEqY_c|7x6WtG|jN{av7`@USsiKF;7x2x{Lbt&M2MaV`!rv3au0576!%r90iIBe}Y- zTCybExV{$MnW^p-JZE3KJ#EN#g8AJCL<^(}e#hQ`Ef2lc2N;0!?MFwQk>A25{GXd)3 z4LvwUb*4fuDGgRnd9rGd+Pgr&N~DjmmqpEpTMcPwaaG8H-^c+H+%AAVK7ky8M^TKo z2$Q@blE^q6eBBdOcX+tVG-B5_)6K7PqQ#K1S*~xBU7cR<{>U!WdggY1Yr!S__u7Q? z9bbPs2@@jYNN{y!I@(or?5G^uq@2Uh6IdOWJC z{-0+frgg{lUTfRI!zi-1$=YoW~waD``tCj+B~*ik8<$_!3WJRg3h9K0gpiT z$eEqg7Lx}54@^oFD?aPllZiIL_9l1BmQmnU8yRGDn`29v?3YwGX=^@KBo|b8^_C3d|*`lk39I0yJg=f1l6F8;@Tj zz@VdR*jc0%W`u29Tf0?xJ@s<6pWawovSRTQOA(k%GUzgDj0&DBS_Ta)fA?Dbf{qNc zwAz*Xv~2Azv#Ei*Ydvr+fEn2wf#u9!G&tMdrJ>bO>Rvl{;e>7_&F27A1%g_tKiU@b z-gNKEzj&FJT{U?rcy;-FsRN{bxx_?OauaIENXqW8=!s>5`eQ?(^6nSe|K9`cr z$K183_k16F+_EM{#H9Am88%vaB}TeiIAa-?VU^}1ZvMwl^J}S5Yd&;?L2~Mx(j=EV zz&_yW9rgSMk!g9p$yYt@l#4a?>T+cky#h5PaAzPW^lQ2?IYw@KCn1NzYZcIp%<@0m z9=!E@vL5U|-G)X*&rE|nu?eP<0gg;`paLs*21eI}ct97OtP*Fl74E+7{~DwWI7ex# z7p=2|xA|GONJUt+AP&L-sWjs|<2*f#O9P8GS3|V6RuyTt>$xnqPV?WG-c~7$)AsH6 z$jv_6NZn!miOCDo`23#c6-5I_tjKPQ5-P8wJt%fNDhJ0s%&T39sQ6 ztzsY&GwF9{3kZ+ix0r(x#!WJbDt^s@uyYPfVim6uJbP}vQ+4w;**Yi+CKK#9esWJD zA1*@3>&JyfF50!LFH?QWz$YJeeFEpC^O^6djSTHJTE_B8-!7{Y(aUbIrCQl+?Ud3M zsogGHo#3I`jzjQ8+#MQQU9sh+pBFVo-(v46c%&du|AeojZCIoprD o~jJT=sPZ z(Ic1G8;yF}QKYJ^d}kQXMabuNLYVAPoT*WPdYx2#)egzp*^zbhGtrN;!e<$4JV@Ga&%kk&-oc^T8^LQ?NP{uOA^n$Vl zSs2= zH_qP5YKi*lzc)`aL=@1o{;2=y_?*gAG36KMEJVF7$-ChKO-d<)&9;yJ_AT}HJResE zuehJ)n<;tTUJ(2)KUej@y$3wpnC}y@spQp1vb^Mk_g3%_{-!c|In+4p6u*=D$^aiv z!f+y%mV+{iow5y`n^U!yyW;LxgALmWgIY#~8UfYhH)!`WoZKEf6iKf&*yiHr&IzSt z1)1Z;I73hxZ1gp(r0nM%j|WAHY?(~As1dg#$k(WStr@c}7VD$f<#vIWSROvGS>qI1 z{Sg?=`SwqLT|iDU-f`d2C2QGYw*RMGlvz`MYCHB@mo!8JW+Ph6*xvJ*6%w#wj;WpxoY1-(JYIUXKUBzVFejYP0=O~%Uy1XC}| zew>_x2pd)WRt=;)=*Q?^8d? z3D04i>P`%bq~HD6n<@H@PmyvC=giaA3NmzvJeHU>xKj;*)Ol`>${A8Mx4U2IuJt*- zow!Kir#n2s4%0?NOY7f#PqIJhz@&ip_Q+xa;PJlwIv;?>H9Yo7q`QDJtW~6>@5hR5k&X z7?W5e%InoAf_M&%LpTx(sgmo*)M$6%%YW?%dgNc`Mjvfiwy6}@I@6*qJsSVYdFuYfBB|lO_R!Da{efHlZzd+V9OiDk67Y2 z9{{d0N|FBJCDR;)+DoFhWhUf$7GuZZi>2jhHuUPCj zjtd*;ys~Y~3_6WS3{o`(Lhc*t^Le*M; z$8F=9gJeQMQxUMr|1D4+u^x^_z0OsLnrBZbVOmm2yv!Yo!A4!*@IZeL z^eei9de<4Hm!!O&GUF>inWsFN9R=U)Zip_^{hU_w1VeX(H@PcD;1w!q>srQ3n?T!} zsB7mRo2x(CTrROdh}qmVAL}%rw+Nj$;)}=+SrJGiH!l&?Fiot@Zwst`;M~)&D4548 zC`KooJ&0jAto2s$F5C$?M|+Mt_NYwvln+6{nCY!v5Arj~sMfR~RStN7`w1<3d%_1T zvq(3a`HaOQaYJfr#dH`=|JM@Pru~OcLvx1WH(}erZzXZ?(<#J9PoUh zyk2$vA+arUb$fy^`yeU5d$mQ$7WFyPV%2h4^y|sS5IKnn<|Dw=Xs@SK+-Zb!%L?C6 z;pn7?6oMQ^RCoEZ0;;_@_28vV$h`%+7 z7Py3iHWjHVix85oO9|gC@6Q%9H}Tc)Ku|w`?yjd<@{NNy8qC}2LGbUODGr=J*(H^DC`z*9s|m^Bq!n*e^d!5S`?)pxdr6+c_5AoFNxN*B$Q1Qk&y1QoP0Y%?fhan%9c7utlv{P z6$8RlA?GBX4LuF87_9iD7S7rR>IbV2i66<@Y+f9koK>+%(vAh<8CjNnT2)+W-+nSp zV2hifboG%4I|H5xzu*1TSIidVn)^BpwBf++rCZ;$>KTo!YHGTWqXW?*cq*CrRg2Ko zS~O_E1dhDc4^hNMiyC$dQSLCa8OD_kXELcJ0|g8*|r!Di#?>k(7|PGAB)c zjP$s);MluTIr^nMYu4QtDS`7;l5|Mp-|HQu1@mk^N7??a_3$kZY#yzhfx7 z5N(DvWO0dA&@Y=0%kqH)hDX12wH*;Q%z|jSG>o+dP2Xz*Ga!H4We;Zl{%mMSXT%lJ zcN5{hSn49_ziUZS$;%X}wRvY5;uM>NKbwtp3S6Fi^+J#b2LEj{)H8doS(jmJv$G3FaIqYEKa`52jwzN+TT3pbRRz>%u;!Wdo}PCLB7t=y{=7XfI%=H~mdt$qWu5NldkR?HGk`T2-fF%RuG zf6{|fYl`PMM8aCR)X^O|gM0%;#*BjI(5M`;uM z{_E$-w^{XH&@RKr?n#!VmZ$`K8-|t51aK?*LPK25$UP{V`G7`xl<9sGe~) zt+pQvx*ZVq*?rR^MJ7E_yA`ak^Q6U@>NQjcl>br@%i@LfOhjUnmI2bw8nP2~XT<)v zv9EOmJwXWyahUF+NY~hR-^9o2SWcHAgG8K=-B}FY1^$@Kh&5*^o52c|T8?po%@8@3 zaBpHw0tN_^>-^q@kAkW8CQe(YZC{#g87>-b|oXQ>y?xvoOPN;zWqepLt8H@}63 zoDj$**>zQ>-YtXr6SVGC+flJuj!E<%x<#VZPmN~n6sVHB=#K)kzGsE&8QYmZ(f1n0 zTa4WnckB5tDu8PxTUPU)Q)H5;Na(7q)ay~|Dj*GhPvSl&r>{cxe>7dV)g5I*f!whig~-XfHEU(ST|LS{Gjs$dWK;!)0V zZqImL9>-q|GVNy*BOE6{>eSX*S`Y2x^ks*`C&%$^0DobyK;ARgzkY%9{Mn--z_|#_ z#p%Hf0Mstn)do;L=dwP`sGF#rh}Fclu4i9(G_s(dm;W@#q4Nyc!{)rG#7ga;QbMB9 z?dFk$o1C>ay+DWAb@P^B*9aS(AL&+bsmk>F`3Lz+rv1?bX; zI=)x^Fju$iod2~I18hfo;-G zKXv`bCqdl{NBzHuI@=(Nts(39#GE+!H!n*rN(PJ}Yi(FZl2Qh;75GF~D_RpR+Ry#s zObtmG0Tnu|gvGiGC+OtcbjPK=kqD9j>}r^%XdGKBlh%eCpL`1N-ZSXbUd-HS-Nh`Wlvg0$x1MLp~p43 zl)i=gSZ<_mSa_4#<1oOa-?g|x`p~u z>_WkPruj6v)Qyl3kg7-K>72SWKaBjV+FmG8z1rRf7DrIxa(CQz1FR)?Nx;-gtIcRd z^hP zcKOakb^+E~f%G9bOf@jkJuo+cF6(y0iBNAtG8a`9Yk!!`aI=^&pxe8kQ_cT#Jjm=&6!Pv?iQgjMg* z-GZYyp6feuP{L?d3-6rqlC8&+QkwS;LKKM#-}<^Hjd|PAlh40D%n%*ntGyZ&IlaGw zVL32_ryW+ESQAlInWv2b9>GBdn+fh%fpX_9;z4&O>v(Tw@4=5Zgxz0lUfGys*2;l0 z)z)Q@I$(}TDlFTM0xjdGF7rfnQdpf|SBbfMHLJ2jW(~Z`X=d*_W4<~nFly^NV2|&T zA1S_ECbEc$-)ko~??o)?HBoSKkv2i|o5HJ^L}pqIRWAKthM%i4+o49SL4KE#f|^G< z;uzn0+PKOh&#fTrZ#1q23Z4;?RN+d7pxFQydrlq#MY zP>#SlBrMx>?Z#;Ci7>D>p{>+|ouw=&BE*ei)=7;8)hGk=nY{<*4GCdk3z@9rH9aND z^x%HhWcf_~>mK?>)b?aw;L-vkj(xed@B^~bK~NNWXzjiC{P6B@PswdB!*(f^>*n7I z(V-vMW+)gjVq4xuDify~`E{Q#>a?!jWo{&qd@p^ijc>AOaob1CLUz4{rOHxq_S0pS zg}@bSg6=VkHmz!a>=BnmjpcPhJLfqU2QT#c&6yGC`4EjoK45PdAEbgZj>IpVMQqq+ zzm01aRZc{)V0=I)j51l~AOP3UUx6kBJA{b4kO=jrT zD~TBT(ooC+aC#lj9AzPinyjTLm}0TInhE;E((1 zP6^8n^Z2?EErr&D#n8QXwJ6b;d0d^j1ECJ#IH;ndazYg^yOD2|KsN#vQ`FAm*gl=! zHV(%`6A16CCztP%QWg|(>%2(~BCx7~2S}~fv&#%C3G&(z_pP0E(!p}*{%!}O(%@UC zZj{Bo#>Y*YBi4KG450zas?>b@-E4))p%#p?&uPNJFOYukgu)F9Bs$Sx;BBjE4IU%l zFlT;^Ib}uNfL%?5KA0R*rpLMrWdMV<4PX2Z+&SvLt7$)XI|srGgYy`8C$a75LJi7f)rE+@?!R#=`>{b1ao}j=lAS@3T=O zB+T5I3YZSjhP6V>52fZYsknJiAF@rOcbKL6J;nc3hI})J6$#ye56~+tRgnw6T$qz2*0nLsnBP;Nc&75G~jt_(bk&KP2b;)TU_L<>WpX4z75 z`ddpqokAf7e|*IknSq!~lXaTc&z6Yx{!-|p%aXyh6dXS}&7kpgwN(wZ;w8>~e5ago zO_MyQ7(+bnmG-w>;W?--1@1WsubX}wmG&^WXP`MkPCoN<6?sm|&$qvzZecZ=eTbD8UH@2+) z66z115$0r>ZZUI~Z7#Z45A5a;L$*6Rf&$JxtsT}f2i4v>Uww((AlC*j$qhxp6L4Mt z?_jkC4Mx4jU6t+tDUdg`_6REn~x0cH!VL$2Pl6M%W)?8vRuWB$ix zr-IjOKNUfKI*?TX(F@pNgA&fq5$Q$Kn0L5bf3FH%>-V6^gox?$(t$4?0;Yp6!}}CF z0tM91o<`bN|JnHBH6jU%7#K={Ew(ppws~J^yQW|^Q%GZz8}V>dZ4kWgsjrS4zQS#% z2QfdCL&RRty}?vYn=*6^?;X=R6>>svNO9(^2OKio$2gh|Y{>Nsm+w#sz=uX(BKzaQ zi7Q}per}P@dFaXWF_>=pbRVN-ZL?xJf76o7T~oCrm*gOqwKFBjY{|O@Q@`TWKv4+N z&t~J2mJRtMSjWr%z~sXJgO>Mu?6c$7PSQlf*yJp}^j=|Q#445RG1P(MF-n^Rm09)nvHA&^wfNY(Lb8cmw=L zNckmvRhT$q%%J;k`4z`EQT1ohe_XjxC~YLCbs|>l=z<{G<;i=Q93DBN1Ev0@IP0OH zc$agkr%B5c;9Y7kej2xJ(^H=hqqLO{I+_&oz3n=4_V2v$5&1vKi4oYpf7RdTI8=`Q z&);^``JcZZe*XWA!2c#*{-3ir|3Aukyw=99fVcCzeFsMLrqZr2sBmB>>mmy#>--BO z$w<%iR)t=Ok0Wpab$bG?%>yoFLY)Rj9JbZf$*(KXJ97?qsnHAvF)vJ>U&d@{)^wFt-jQ^ z$W4ujKba2M_C@py`?s-a8cUc(jKL zz0R3PV6>JQNF&-rO(%B0s4-r2ilGk4f#`i?Z zW}bBoL@aQ8WM@UmZn9;Wa@fxg2i^j-@yPXRp4E_z&cz^oW)&CjJuQGgDy|80Xq8l1aqpbpWoTDm>1@qOn$6y3Wh+}p|^4hjzOGwe+&1UR{nkSey{$;ohSDUTfi|)NM`nipd zthg+2#gC`m&;xt}sL`M0$B+BB3uEnC*vwJWfNc^wfW|`| z<2#mxpuG!x~|E@q54XWEkExex+ri3=<6ELKrz$PAR8uTUi{Ko0Pan3^3&UFYd?c~-RMcH2`LFLq1ig3;Wjg; zMVh$wH)bO}hU^Pe$7HJ}qR>X2YocIMAhte4lr6x7tJa2l)6_MU_6qWyESTl=V%IW| z59X?`or_8=qAGuk}7YiyRq6PO~g8poLFJ;pOpyu?bI2viw@^q;W^WwS+ zL#ipo4;`%#0lQ6Xp}`g6NcohD;D-Xcu(sizytZrSk+-m^j-`h2!|f%=^|iL&Yi@l| zOCQxhv<+!2UvDw8!T0O<-6HReGV9qrevl8l@?v7*NO68c){ z3-}qDJE6b$7WUUKKE^pyf>-t&-_eWQK0^t7S`fd_AH4sN23_ z7vY{@%&5u&x4;P9>2pTn!}C8=q%lL(GnGCLgtCHJ*`mOiwJxXV(&sDkz;vRRbSU!4 zHjFaPA{&YDq=u4qwIeg#ewR||m)Lv&*{fV&5IiZa^=L&EMR0y&zQTZCz2TcdE#BGn z1adikfF|AT7t=+?GPw32RT11Z$2Bpty*b63+GOO(fy7O=oOh4<##pJGi#MwUZrvg+ zj@OXn~0YY1DV`(oyk&z5y-fKJJNcWSPaM>{-uZclz*@U{{jM;w&3 z`=T@|)t6~(;@~76H@JrNv97^a8-Af{`o?zy%f@UPrB84c=^j!dMZ(xK-u?0%m;G{I z6&Y?lN=^egn$Ug6Ja&yxNc4+X$p+=~ghXsbN;|pbH~fMoZeg=$n*^d*IXzYJuAZ7S zJQQt&A5b^aT%<=*?>2!y(s$1uKp&aUj4>Sl(Q9zrtUJl!+P8EZ-Jvq{Bn2f{BR0Kf zd7khfYW_Gn#%aIk!gG1vz7CL$QD4w8{Jud5ZIHV&RXUYX9XX2@f7Rj$b%^3W$VFli zYgR6?{@cu%h*XZAv5IF8<{$9+T zQ{{Ipp_see=YKlWbg&RM^BRneTz#8{{7bSJzgvVy)Kv1&7IAf!&J~m!e?8)PCeSYN zqn4;(7Fox2YDIlEvOK{*%r}wW@5AShjb*4l?&=S0=G!P0mIxba+=`6R_qp7?W<-kb z_zT%0#eI4N-0Q!t{%1o{f@4EtdX-ZQjC;^R*0TSSB3t`~3c5=g-Rn6f*7_XWr|Kv{ zv>G}%^XrB)zfF=g5-ORGHUd@53~Mi{rPt$Ax1(cr1MR2=)w;9Dqu&rG0}RaR?AL+A zeiPM182LK6RV<0DK6HF|*?e;BDKVp22l;_6XVbMjU9~^jf-04jfw6Mi60ea1^{)Of zpr~O^q)q4Ww7X< z>DVlMBN}|IGHH8zo1^)YhNt(Iav`XK50-E>sagY&OzDSLEc>;UZWzDx9*r0MC%fMv zZD$?(mf=4L%&^}tFDvp#!MM^FWTglVwW(+RvN2Bn#`R&yNXf0dry`0BP3V}pLQY6i z{6en$%GeS0vALKC{=8for6i9?B@MpTgDaaY$7%?0p5`_m>G|1N%`%EO?|SCsl67UM zchNIr7Yj#z%^|S)Iqo#y?ENSRj$b<0ZI-O}`Pgsny#WZU+oIc<2Qlv46ZGNb+YkK= znE_hE*KV{8hn(FC#-~!)4MD#HBm2gr)xLO@O2~p|W|z+AD%ul6)3po7eYD+kg)Nho zkN7m2gWEiC=tS4$cSDjtjg?>#aWmfZHgOLv#C}!CwaS3hi1S!#Li&S6P6DU zemSBMtp7(skH)WeI(JLKEQ!6wokyJ^Re9LT$to2SVX?ivbFV>$w0VmMY3_*2zsV1? z>9c%Et+}Ur7iP>Dt($@%VAn0)?&J;?gS^w#X-!G9C;JlmYH|h=L{kQz>h%Zt&VO(9 zcSBkT|EUS9UbIc-olFj{9vr06IdqHWg@+Wh$Vz!5k=o3hMs(X|{dd-X?%bmNl*pIn zh5}QCq=MLai#u5gL>Jh!2jVM@hZnrmy?yV zAClF%d((*WSq&o#mm2p4Vu-s8y#N7V)3OO{U&5*Jo0e=Dvb&ICL8iiUP9tm1WgDR) zTOHcts=&5(g1&j<#X5K4=q9@Q(>swR-5UvM)UOwi4LV)!ZW(0nOpN3srZ32+OJas~ z1|WDw-D7N1QEkBO$=f94a}e!~6|<^_S~KM}e(YodA!*-{|JY$m{-68M#DCOT|Gc79 zO$QpGY&lub3LC%iG5j)cCjHM30tIXL3W{T2V!3ah32YyAmigrYVWyQBBTZ_CZg27l zbAI&Jf}MSz6Nd*s6;rm*%n4TQ2?#m`JNJ=uXL(|}-1G5==L`qF*dS5Z+|&cPF6+Db z3$Zv2FP1a0m9Z(zY9?nag(l|`o}TiK4wV~a22&ZLTcF)NVX+qW6xN(GUWh)h$T`5l!}k}#Qo-s1QIe%xKzc8Pt)##d;L|)0sC%D^x+~M2SQ?e zB8_5hXT@0+^ks=hSg2o%(~+@b6|UUnjA`e7h6@=LmJ86BLxJvh*-(XHb9>r@#}sPN zKFt)57dyp=ghXdOirUg@3YU0rn-JDXIF5CBzG2fdqk{Bq8eVDB61F%TkmuTIUUs*z=`Kh4m_Lm1_Gr0i}62D zBU|Gc(0AnRA777_*P)hbI36BJT!_aOU5xazsdGuTl4-}MPC8zg5g#}IeJc5P_?h3A zk*{xt7ST;UdzdUA$yU@15aM*Eb>3kB0K2_+e-+n^a`8gdR7&YCbo=2zI%lKl-kN`(6F> zOXxgaL4iBVo^x-w9&sJ%KB>eD5s;F&KV1)YTwr!d$eW|frG)&I^$aG8oOO?UWwW`2 zkB={#l({RU`=6z?_i|e%%M*YH3Ms*9 zmcQxi%)Sq(Npf$pqQot49KMwVB9dkx%L7J!n$mkC#?#?lk}&wFu$>?KJutXF-6GSP zQ1Y5|S7t^g*ul6Z)Xn#L9#^>G^aULD5!tWGZ*f;yaQxVXaKBruX+*gJFKRuFE?5+F zm3%S!l6r@3nuwsmUt|;&Jjfj&2hwA~)t_1^Z{Nt0H9*imA57Qs;y%Ff}hk}Nu z0)9PZ*zXF^j$3zRdF$)(%~+!=;eIAvjuaE78GRi2f!1$f(?L#VRlATHz)f~ZPmsr? ziREPtNGDkQFH+J1Xw1`Ga{1?CP*QVptCjw%Q`i2JU=Zg*kFat57j^)o*4e_8KW+t^ z*#mwGoL|yKU$9~e@H{ee1=aNh&WmcE=GU&gY3Nb~UYkI@J<7ppBkRF?tBP`C>)~X+ z4jRA3atMg{MGOc!3WPLDQ|!iJMwk(Z?WrpQ^W>|QTC}i9q2E48#Dn1zPvAOC^ll6z z;ygo3ECR=p$?4qq@mi0iwDRiS6v7=zsk-P~P0H!0ZF4U6-RZ4ud4*#(W#;7)q9}3C zXWXa;lmm9l;~@{N44eI{$cVZAfZc8XL)WH!7+pt4GnMidaOtvsMx1t+vBr^kvPjcebu~KKu`Y zl=ecCTVl<_4f}4$2on^8dvE2xBSZfRTOV!wVc``{Ez4C|OzuD7!g1$R zs1nB=whKh-{Ogv~9jmgPmZ(g<)Bm28AYlK0K%dPNT3^P3f2go%_S|8UlhCv-qsu_3dL0_I|9v={ zwssy#es#3NLeHb+91*o>=+tJp4ON#zP34uPHwPWl@@K;bR!&Y0ZCw=T?q@IPxhcIN zl>jRqa9Jy-`m}#rs&rf;kuZ-2)$mU@FD2&gkD|kUYG+l_u(`8}I+V(Q)jn~KJXM(2*S1ZUH^CFhb#nQrg4t{q zk_}LqsP3TbkiXi?bNk{6-OP%DDlk)YyloWYbeH;`btKgP2kKyY3$8l7H?yjACXvNf zsES^B;6Kn)!1YHkFT25uRs|^i%EA$Ud_L}nkyTlkJdqFj_u4of{`M&&<;?RN+fu_k z)&;rX*C$F|wsB9M)nwxR>rGE?6B_tiG}kVYDCanYY0HMI2W-T#S%iFcH;>pI$9aY& z%J$ac4?Prss&4mRwTewMYE+N;WLp+n>xgDfkJ8zc-MmF$C}Vd9)3mw%pU#_uV}kAN zkev8jcHfQfYc?WeXFu}6kDwQL5q~i*Bl``PO3||qPDrBJx?-{M%FrhhYk+vdFTDVV zHL^oXSQ?OvFT9#Y?C(tdH$0z39R3V>M#Xb=+N$6Eg3N^%ez6^jH2JY4aDw7(O>Uuv zG(Nn=%WBx-MncNOx&8LONT8r(z<{s3*xjFOW$bxQs2L11LSC-OY=l>}JVsX0z1c+x7WJVQh><5% z?aVgtyQi7-9%_L-px(Wi?8*(5U@{%+>on{e{uu70VIOty73R;zdnSNe1|ds)FBJh5ljaE@;D39;3fJ3x&T<>0$;Q47`1z{m7N=4gQ-uG0 z{J|&KrOYFt;hlH<(WGsc(1v>ovTgsK;2GYRpPg%nJSm^s@vipEu16w`pWni+Oq)z>LZoRYCrP6ZBow%UNPj} zA=|WWP%+rv_rQGS7wd-j7zE+Z`Nh&{`8|w7UGP=X*vg~7gpUtZ5?wtt{PbjPdD4@a zx8yJ2?>5ZVe4#8!prigBS>2I|efF)mjQzQQQ&!+wMi4E=$ zWE&l1;1mE7woRhRd4a~s7d%4mhC%-X*$evuf3}JWwy({ z#NagTn{K3VqXXKCRzQpCy0$v4))iONy}Q8{`nigUHob{;NPIz_6~BqG3}<^OpmAE7 zla0P!OE-%x(2E(%Wj1~L|8^N1Zwk3?UX$jzEpShC18oF^SXElV!TMZCP^kF5*)iY`V z!gn2C12y9LD*e&&Bhz#q85ZeGlhH_R^u~yCewlXox~#6JCbk~j6tv&rNwHjU%*dK06&6tH9rrDVN{Rl8~shcKa8~}5Vklj!{k9@U^lt~qsQ|kK1`1L>nPb& z-IX65)Uu0uuDkD*F*t?T8 zQ8OjAJ54xqE2$(WS&bTaPl`aAWEd}L8%Gqbc5&RH-TLB_^Bh1K%a~wqw3)EUNfdj?Kb;7QFLYjCUw+bECii^i8(EKE zBrX=C4|V8N>^eg4TV^(-VIO}E%)E1ZWr*i*BDwXv310f*uVt%}^3UE6SooiVd*8I!2h>~gdCA;kSejS4Axb0m(?E)wa z-x~N-%}wQhTg4_$L3g+Y?LP_Kwh7|xLW4A)R&V`e8;aC5?3tEGmkJeWl%x8qK?$GJ;EV#1 zAfA73@U#B=Y`*hHN0i2>-MIl>m}6eGM^Im5@Ao|ft)LjJKtk(&_W1xVmbhb{G#cWC zh@|K?%W^N_IzxMxx1c7nPguZc3USoTH> zaibj0yz>#}zGt)=*|v+K>#@;w)`MwC6@bhZ2EwQl>`pAzdArmO&2%_u&1EAL`A?!6 z(Ypo0eANeRM1=WK-fy4#*TD5ynVFF7w^U@+OuO9+M=T-K&I$(prC8`%amSX{aLWg< z`-it!;#Sn3sf^wZGQ#oG*;+9$sXmIm$uqV=^0VB3*T&Co|69T?Z&}2yTbxv4YhWAs zkNAzcjxKaqY+Jdt(nUEj-s&-(AfG7P=@CWyC`-ZmG+9&<!k_Sc2IR%dT}Xa&aW`#7zKAO7n7{4L}5D_ zVLWoC84gkV&4)65=n&}NI`G-L4#(Sv+DBZ7Q;T+>pK>;=F&HH&m=qXTF=<9tTXbJ$=~zVQ6Zjh{kCVOzRYT*tfy)@A`F~VvqVv zO*8Be=W4<8)ebY{7c<3dpPni9D4!q_LHdyWb~Je-&g8s8c3xca*{&yn>|uVJ_^;g6 z7esdV@T2CUt|8xclq%pW#TqmCZ^YlsW6y_|cpY13qu$VuI$IZmmC!eltEmYjqkE zOt9ZmI@><;VOuBQH%$WDfLIIr&i zNPVQ8MD1|(Y{iE6PM4ExXX6ZI zU6gdbwajIYCP-}qitMjw5Z$-+XTY5^db$0Im8ZK64>tNH|NZsz<>&la9Gz* zb=x?^^o@iYkM9`q^J}d?(5Y};DV&SFaibHm)~e}2*n4hmv^N1zV@QCGu4HYj zNk`U4kEQxL+wOiB42=BUwMK`(>NE0pr)OoJ_BVUAHxiCC4(0`<*?Pn2wS#h z*h7MpoBl=f*odw1@!qT|Ou4(kZ zkk{tS7Gyp}8Q|z(B}D5hS=keD>UV9CDn7rS(sufw`_uJ`6hD26Hm$e}rWA;;P6S5Z zC@ddubc}U|Ra<}QK;yJH3Qm_wJHR?@_;2o4#bK&!ujT$isPIyl$hogqjlci5+Rwh1 z5%ZsFzod*sBM{vt{Fna2_5Eu9k`GYr-<<=h{XP%7>0gA@7;^LG^2Xlf=o2l>NV>(j3(w%}nUjR5RXfCFD7$J3Q^2$sx z=FI%Xfemy$rDq79p9&mRbZ25g?s5W;Liqicljz?9<^6qXM@)&j5JyaLU0E4Q!jMyh zRQ74AfR=ByaEGO|Dt!Z87O|wyI7#&G-db@TBU;${e?TzJMhknyn+#3ijq|xDz`xf$ zcS~>F`XuwuZoonXs-Q=mpf)PWxZjf>zr_gZW}H*|c2rGs zTc0i$6lt~xyzX^4B@WFn?Ctusc0qK<;6kjdk2fzZM_Ughq{JvEFIP`)S1!3^)Ud*A z)9VXwg}CDT8qFa1-CW&EdGB-_v{4~pugcPIEkVr^yFw@2t*hi;1nDw#nWKmgj9kS> z>?Y;pdmx=DSf#K3Paf&$M1u8dLX^501Oer9ops?fGXUZfPPtAf1&Wr#$nZ+Kr?Yby zlVD{Q;|Ts!wIV1C<1!q2YgSdTo7>`^^jg%xiP0wl%qykk44?#vnX~@O!}TRjg}Og- z(;UOGpx}-2$LQ}@!@{3dPDDP!pSuNX)ZtUF($)Emd<$#|oN)1PNAe`BNyi~ODWZ=Z zI@mg4jRsj*D3d&$c;D9jf~trPPG=;b)hmrpSP*Z%)aQL&06Dkp zK>=b_WTCQ2Zzwn#!2TWj>jtB(jRedB-Uzm4YR^_+7hQ^oMvfq3#Mc~ZwE(5!seMr| zS|3i^lC&UItIwP>dWe>b#RVTziLo}8+#pa-#qu6*RDM>Q?Vjt98*qtTSKsYH=G7h&3Z#?n^E$&BAT>C^|KUQI!~GIgvDMy(H^Ojj$#=RykG+0eRTn!Thr^X z?Wv@5hNy^icb-aa0iLYX2Dat4HGhj*#f3f1jcqwak_?dH_Ix9(@8H^G0C%vt6G`kQ zYS*BRV>Q+8P~=a{CY}`xcFSV%mT@a4R4fmNW@io|O)nRbGX=PUU6`o2E|DF<*!=$B zk-mX2ym6v=0AP%7d6DgmVOs%TtP}2+DI61mT00&u+-sk1qjwpJzxjhV6C<#Fc1@`*PU21$A>skX+18nPY(?a}gkuLc7=$6Cfjk~6z_k9d z>%N~*U1bZLuekAwv|`ISr6*nx7YXkGS&}lvFdzH&Uv#y z-Q%?;iUD&k7$DEnW86*VmF0#Po_CY-kC~Fa0uP$9hdDoqcXeWM6R0gHjbWTg7j-Tl zHhe&6D_kzhYoJj`fTJ@n4)7RoVRcfJ6G3t0!aA3L0<-8fdH8TgrZ0e@az@D>uZVsh z_EgcA5Z>|5&^PS0h{o+M&xe>soW2R{vZ)m{ZN}dHeogTiFy%s35-r&1S-w@_`2i@{ zARSN-pfKLvJ{JrdEAjrJ_^OOE6rjpNp`qCI zZJ_8L!aTryum)_v=?N8dH-Jw1SSoN3C{2p@#{UCx)PVPQl&En0-cTbw=vjPKFzf2< zxmHua-sk)ARPv2l**RQcP&GXEB$)dGCFppnDKBe3DSs;kUkeD&Bv1=-UzRmI9D3&q z;i%mY)0Ir6;0^?@l-w9$Sr0tT_DEm0IQvFi>e^}Z;GkN<9 z1!w^G4!WrHk6zdLKXw2svIZE|IP3zX=|gm&If_^X+(PRbYo&t(syaeb=ll0U4A+uc zI)M3#H$XYBbASDzSVo4vYY1Q2Q8oVssua1)&cp7AAbn8>3rz!U^-0}A(jjppADyjp_X01)T z>^kdOfBZ|%d~P?93gh&E`uW8EX`yTH>P08rKOpX*fo}51>TaZQ(1`|MJON&T~ zoW}!mkx7p@fcYM{iK5&eDaU}>f@0i5hNw|3lM&Tvo(DI>=j;sN39YHfds20>IQ(pH zCX4l?|5KB-3_khs{kVfeb%>FJOXzz9SU%h9+?GMA$L}HE+dh%CU*2yXFFT?w>L-t( zId~AgfnbO`|KpV2gw_g8(_T(1x|&#ZU13z$(tL4GsUpD^-iZ$?J9VF2=9UsxxSIsB zvbCIsDJg3YxM8YXLDVyGMO_M>KNCIbUo2U?A$TB&xaB^@@4VXzS|Qn|Wpe$Ef-1_i z4lYQ_2+%se=OQ@28g7PSJ%Q{9LpqXnYHanZ1$c*I!}V+fn6z0TH!g#(&++J)Qm~Z zc%dsdIK}qjub_s>YTcKizm4TW+R&}!?0RUyQbsKuxu?8M2mg+{!|JXyIEwTu> zz*&a_cdjV>wUJW+k~JSV@=%HiXPFQKClB@Kn@P?>6+$8!AMm+|2EEML3f4|Gaqb$% za%mY=GWMjvTW+)@%vSPeO@}HtC3et}BiqROs%8JLHfSfA@K}Y)mC%bWkLGBbx z$n98jm zY#la*`*2c6QnmCcM=p^Y31hYH?}1}z&^6)rktX394a#NI&j-(`wapY+itfl4DJ_sC zPuf;8d5KFxl>hODV`Yi>MOD#f1~yKItR50eZC$9nHC@(*djfBe&$RPTwiM>Bj_Ypb z+N^5{J#1qXg`f)0pC5LUM|4L-OOugmj-{6@8LrRaCdb020S5lMcggvTsZWJGq~xuy zS4ol53oA)tFRFM1Ap+o{*?nrUohzovSiG^9E;nAmz>rr4(jI6>@heeoy28YY7RwRx zPP*fwCI+Cewf<|>;^rc4H%3p>==Sv$Q`xt!ch+7hfP`VaSc0#3gQo6Jx|Z=1jw3zQ z)UvL>FcR>fb>UVPJuR3Z0>PDl5dC+EH$HAj2r5n_J z=;PbFXd(4Gngqx|u{_r=&6U=lZ(2++;3DH(;mt?vZGj#HpiIu=3h!mx5L?jFQ_Y6o z@R32FtAvi_bkCs*A7G*f5qCr^^i7Q=1n1}TgN!ewa({NQbZ|3SQJoH&_bwEv5m!VP z3&g`hR&2>jt)9wXN@PU4j4}N4dtV%H&#z=M^_5Pxl4RH}$y#_DDTzI%=>7}@6rdWg zSu1103uL`L1rx}@E@ zlcTV%y;7o+5sjDv_=psMXe0vCMQ=69!RDOoTIX^Ud^hyLf0c*cplJ^Em9mKg;*Q&E zAb`9YXaePu%73untfs)8QGWQoIhJ;&5^(2mdT}*e`aIP*E9eIAlVY={Y2e}j?*UiK zpx3FSZ9hCedKc8cRF|b{$S8hl7I0d54MvKrUQm&5ZP{+{eX>wPwtdlG5^;K9rZDvt zS6)H&>dr(x%6s+NtO~vs2><;2 z#xWd!W!o`ztYqe@EL-Ft!rOIkeK1e3uKt&XrSjM1i(uu|_VE}73-jupswyM&=cshu zPFlcZRsQLD3!Bj~SkK#P1zqIco4eMuE@OxT(F1h!gPaq(d#!M}dQN3NP%Hcg%^|@| z9_{;n;|q{~ba4IGuI*34IKY8oxe+j>ZyCD59{uWK_hkKyTdsC zM+ntozigf#%g9tM8ZFVgyqL@pZX~!9SmPML+6;_RehQs3sjnXf|8<6wX96);zbMw= zmeo|Yj7Yk$>n}F%4^^=Q`1q|tUTET^E8mGDCLo!NWn-){=lJg((s@DAhejSyumwXY zemoY{iX%Byid#ckt?>;xRsGJl*ZYsHA6#<9xkFNlsWaAwx4)#OAych>0p1$HGvz}L zxqc4EJwdT&XgjL>yB7H`9}j1-6@BP>_S<=I~ysvfWtg||K!HMTYZRE?i`zDOOo8pQU z+a_hTB|;OynJdBCTLpD*d#1iDK5i1^Ef#ocq`8@ZqN|-WvD<8a%^>&qb2YdLQsLeU6V!8yTJv69^lP!evvTCrUs1uQR z#4V`Az@LTJmqRBOrf20(*ibs8ZhxwmEMWZpj2WG-pFGmsfOupcf49*v(y6w;?{lA` zgv;a;QGPHV*iGk)gjj_|?WUDHuUtGWsc~ar(AlNONnowQM$QzH^uYX%7rr-#30~=B z{#?Gew*+XT-jH}IAt`B{Gugw8j;mhvCm&qZQPQc0IsEMfxBp4L^8$B(5GT9?cYmYg z^Q&ynZ>-h(4e?x9lZ%|nhH7Q5$3yguO9rppGGfD%Km&WPLqI5cLFgAL%>kWng_E|Ez9CK0_?~HqlcZN%R~1&QmO^RcC#!Y^?BMugK|ag zI1Q{Ju`iHl3JabEn%8LU|eK(0IE_A|b zYbTt6%eVH{nAxdAPA6vfL#ubB2DVcaytjk^6Sq`qDqzWgqdW7NkpNN9SlS+n6m^%> zOh$6u)_T25*R0^+o1v5YB!kZ6P~G+e9@_H67E%`JrnYfa*;aLCR>Ye1QSi2oF45Sd zO|-x60baUy&so?aE1eP}xTUUT+RD@y$d6bC1|&uiZ+id|#gY?60d=|5@PVRAftqN1 z-s!i|9}&+A+-xzz{*gyI-y`}-)yfLP5$z)J9XzLjymFUBr$&Z2V2JS%H~Ww232B8= z`3|B6LN(Z8Ja#dpRa)5|c!!5RIgLdZBi}?u@EcjC#Sq?*=O1TZue|#>Y{_h?H;X2d zIh|^uNJL8(rTF-b{~^#@BkuZY<+s;Bnc@cEm;y!(!7Was$}8;Rd>bkSIk1KFxuvR9 zF{R8PJFL?HYxnLNi zohJHLZ!?*{%;@rnK4XI3{A3kmwv^!<)J}K)VT;L`XrC-;H3Ql+h-)V=###-sWP$y$ z=X`q%sMu)O!M@6U9uVN*@H=>OK`nn;3m-MXFspDgF@hO`T(}!z1&)~#ha1g*^1E9T z6#-4*B%F$1+R^VDoM(4wh37|ee=2DFDE0{w*F5aBcU=}Boi|0r1eF(0R8l=9Oo+u+ z?88b05GkmsGk(Kf8yaDokeb_%C^QZfq`=4dm;r=u zwhQYWpX(<*f3bN^HTjHiXHZ3d7zY&=ociWA8)+p;0I7Orl=Ke{P_59dRPb(&GgIdw<}~*$q7Hh+B2%8PSnW^(hb-#Z4RMRd z#A4xnpg?`b_q@T(cDI>2wtCVh^3!mfN5yz%Qa<`m3L9kwAO>6R^P3L&PcV1^M<@gj z3gwC23H)ZMkMiD#)6Ged8O$-m2vS3yf(=93rwUVQb6%o@+6U)H zf-nFb7z?r3{Zgn!hAkZ`vT8eciRIyb+R(YrGu}p=`ZHDs04mE5Ai>DyZeL)DoTiua zD9|ng4rIY|zkUby{QH-A@Q5SNPTEjc830FdW^2pzIQqNy5YUs&&%UN&{kwt5%lCta zjpdRMkh$~+P1&-%VHluE_Hh6+Q7IK*P&SR+@%7W9?WusJejk|(o^d#s^RfuPWH}g! z0`IAK^zYE7zu*4Jc=eM+ZNsXdykd28Ye34py@7qYf+>!5IA~$h1>8wohdxg1tH%qjmX8&DD|Zcz z2Uv^awa+i_!xDcd+epkM3NrVMPk#esVWX!uY+3YH#Gp0&+*9qQsjJ5 zqDFWcCZ#)C!l5hxOElcW=!CBnn+4bMsqq@q>bF+LQfmP0a;8P|PqJ+yzVm6O zu7^R`>nx6Et*J$9H!GJA{uv9m)SL6}{?I0aiV#LIOn`u7%;B95k_eP1*!6l!?6i>mA-a!rD@p4ZGDh};Q;;HB<~m1|xfR6zG3|JsSl z7aXD(!Oxw(TD&ZKaW`q-ghy}&6*o3(24wP7bB=v%yEmLIPZC<5^n9A&eXueKQ3j_z zzCj!j83F+l(N+iU7B{7xjHTDrIcRyd$TCvaGk?H?b!WNAI8!ROe=LQ~*RgkQH3Tfg zs?Qc%))jO3Qjzhrg3u|$WT)V(G9q<>f>dH4c-CvGjIioJ&U{tUs7~aoABB&439mNZ zYLjm#*FPK`y2eMtidk1Y~O1n5Z>Ft$us6_QnFk zSnm+)946G=rn~5~dgZHuQ!i9WGLCAmma@)*+ng6XB9#Y|AbSlT=c|<&~xI!dF-ftVr^#uYA#b1c z02-WaKNRB#kc~udo%nbibsRbB@b+-~tqLsfcYk0g5(b$3nx9dwd8a--v{h6a6FCrw zQER2alVsbJUwt;Ldlb8biC9Kt`30wBREdewY<|G-#Tiv zoKHek=T~_+;Ol7hW&6~I-sZw>y^HI)cTK`p5E#vxyk%ns5E9_oy(?_5?;MXq4Tb`R zPhaVy9?q0P=~&~8ysDePPBAy)yd|p($}g_?Tv`VX-q6QJtsSuwN-YRBJRO#JA0Z9} zbER%e?dRl`7}S&2)?YMA2nH`w^)PAXuwWnee9ZudzS5=qb-epMMoyhVP{!^Zw!NR< zKz>^r=#3}vQak3K)23I|fJYy_KYquE%x*7V=dUyF zbTPkf?LT(Bpk2z?R)1`5^NCjNebAYyiLbQgRF02)J;=ImbiEWkd8fi9aiS~^tpUoU z`XxCTK99wFNzGC7ZlUOCa^@*qa}PW+P`Jo*+$6>lMal%#asnQCY}>!=xHn$Wyj#`p z?3aL##9xFh+l~YFjXA)m((GJ8Z%n8TZVJdNDmvChh^zV|&Kk_N`30Q)plSmGo^tRw zV^pxymZ_>(BwwF*+~=vk3-u#MO5-gyEFbNO`*pC-wr4QsT&CJ5%2T}9{=BrukY)GG_z-P}MtWmpZ=;?&N-290~8+o0) zY^KfGq3Ml}`(~@HFaBBG&!1^7vc{F$O(Y-r2FRR8zNm_PS-vUiR^Ig3`{MN*38&S> zS<}2A6YTkiP+@vN+?;t33}7$>zDwdZ5fHg(FJ7*rm>bMs?~#TcqH8qDI|N~=6+0u;379xfOA0~*__ttpOA?q zh$52sAon9G+zqq^rb_($J_tTr<~(OV6d^eC;}??q0bl|ld}`}GOU~CdRmNpXBu(?6 z0!fdZJM{KuR-bb^ERRb`ZxU14t6G(wn39qFF(4CD+|QkRPbYMpQro;EKxuJKHZFmhL|6-Me`V>o8p@%^_4QSmy%z^-WOf zcJRzp7u=p>7N&+l#Rrb46!kDtiv-jK|GBBpO80%U_uD_Zx~Be@2p7CgPn1btVjv_7 zF04a2jd&q))DUgOs>1eUYBGrufv2qXgC9%8cBv- zI2Ph(jHpN*!?aA-8{P1z-YeHkkvq$2$jpX@m9-&%2U+f7qM~2)uS{%^BXo7@e$W$e zE4beI50mtJS#_Pf1Ey_{T0f&esO~p}$)B@DQ1&d{^~=x2Ci(jm{RR>5%wv`)9N|gY zY!L{E%I7oqfZK1C|9wE8vs|!K$NWJX6l4D-HLQ9rfvep z*AJbxB&#q~8W$j)+g9*dsE}$n;#@p=rE_T<$SiqgmHGvi>iGBg3u1( z47Px>UuC5L!AW^h;0ESB4P;35Kx~KFQBzD4++rwFLE&CGf=NEa0Xq6#7L9&AON|oZ zYA=ZR9XS33M5QwGDbYROR#G1vU_YLWt)wH@PO_$x^Yd(+TJ5~qfXOclw`Web5ULh2 z7%EWeDJ!Y0XYxg`+3Y*w$m2bdRZ((GmEjOkr+L0C&yCDQg0MzB&$4R{=c zeY#QBH+ab+W930T64uPVUu`|Xpp?X}!s6C+1GwYbondhj(e3AiSpibl zB;`Bd-i1}DDd?}2{cHi-O;NeBrm}!hDm3`9dF63&$JtZ5;~y`~2>j25@aXDki-<8` zApKO$CM+13SkN#_GJzg(;;7l|#^Q|F>>ohk1c?ZLFjEgySsysXaNaT+2FsZJnp;qeKONoC1GDo0p`XFLO0zop%^1sWGLYQY-Hx)m`VHxE1`{ZG)fj z=XK0YQVoyYc*;L86U8wLNT3!r^R-OUMabDj+mE1E0^o9S2EDGmY(5{SfmH42b(VV< z%E)7ey-Yx1B3i*AU=6bagh8&zJ}5z3FUvRo7Aokax5UAtBy~P`nnDUDLjF`$Cr0|n zjHzK?4(;oqg`uQrA=6Dhce>DSbO_U@531Wq4w~F3(@gWtWn@L{C6c}az?@c!(&o-j zI95AWYkK=nvzd7Lz4qe`1Uh&NJX4QV-m*q@LNAJ=Y)mQjt6Lm&ls-B1nmKOL4BdW zm^kkkd_&0oSREMd7MNPuPVC3|^fvx3Yqw3Pgo&edBx)OGRs^)rs(=Bs;S#Bksc%yW zh=X?;naiUQp^}K! zM-0I>j+qJVf!e~=>%IE1*0UbuGk9H9{;DaN$x{08r}3q_;Y{!QOXc+MZD7G;$^j{V zRBEIswNu_ro!(|Xy&I*yW=VpDMuh#}j zJMa~i1P@&)?cdbpvU@qUc0t}A}D&V@@)~bZo6KsbXfvAv-361u*}ME z_Wn#7tg@sy`^U;@lD_?xmzZ~FJA|3@j<0ENcp!+wVHUai1-*WA_5xM~0S3D+#fC`=i`@;mu?~Voe>!+f*Gl1ud?;#_H?zAU z-l(#)jFPx8d$9L%!I57c&Ry6CkAP1cyS>jlDc;XJ258~#WeO!*MBPzzt=f`BkEQnW zIe;Qn*9?^(+s_Ksrtgbs0WZICpyTx%j==itYaH5D+wwgYHRa9NP;&dU`wL7TNHW=a zuoUb&qfZAUM1W;s(Ga}|2s#dliM_L=@YMBEL0e>gr>Kc_eM5EKPG3~=;>ai@2*Vkd zx3*8l0R+v9`9Zm3&MqK;PelggsBe`7Quw+h^oIa!?|w5AROSr^!U(2ML4ep^cr8#zLB23S zpTiq|3J7Xu0OTEc0&`Hsh4kjOycAdLn%%+RoVqXWaJaLyF3gg!=&>2$V;2G=F?Yj* zvXU7NF5^HxkGpxvn7p4lmn(^f^~h`iI{)}Qk8VkZj*^T_VCUXn)=T#acyO4zJYn(G ze5??FKX;Z1dlMq1dgxQ(>rg_JXr`y%#9QH4fmn%ky@$1cvc0iKj=I-$+#V5Q6>t9| zcNtRGeEBCy49|#1JA8O zy$g2UbnIRV56AjAY}m>$@}WPhgtWESCf&?nxF-l##p18VHFM+MN#wCzDK-VG^+~lqS)yAa_pKV;kC%&L$lDJ_ z%e~9=ZgbP$HO$4->jv@1SQ&fP=b)>vHR+vjv>gWgo{IxwdicU@w~-@}K9AS2w};q} zIaX_(H=WaORR;UM(L=C)yQq8RxRD#8C*iZI>g~qwVy!1%fJJh9j$3N9(kP(q zK%L~E@{sgvf%w^oU^?K}*sO5#sY+gP3zNOKTt-pIU|4cHwMU-+pYQQ4>kNzf16}lk zFjF?|sYx@Zn%A0>O#qT>hBv>MqGtQPC0lAomTXx-x*m}@p*Md6F?Wxt^XvSxs}VYT z%_yOqWBS1(bHEcN$J?FEOV>&HF#4kERcwDidYQ{B3)VoF)*v3!oV=pgbV!E1(JN#7 z#Ig?z&tMy2cw%MeQm^H;&K~%lIhS(C;ywt{mAZC6u02!7Z0X|35Ifi02yKg1>eYrt zGe|Hkhq*Ue-+D>BK)ILxI;)2ZbiVv9`nG{W6ex=Q?2!qVq!zv^ulpk@s#kn@WC$s* za=hfv2YN|L^e;5%yyAE-f8@@O6rRvO*zF#Sm8wlHs#kY)-L-pJclp~0osEx;2VuTw z@~z69UFp-{5cT^-k6mq*z1$vevb{6KpZ#ErH5 z#kATRcGnx@N;m#ErkkWa+%ox&aK|>;>h^MLmq`=fOzz7tX(eH zW&6*2iM^k)k@u8T^bM6LE;_WA9(F=WZzIogFu)t=_3}TAhQ5+}N;D;^N&Itn%g3Lbg`tcUqd!jXB<3pCJZad~|yxSEXlM zJxdNZyYsGa^MWbg`N~@L+hl&S#%!^n0|1kzC6WoIkb1nV2>x)pFV&i9IS568T`-oV z$Q;&;%d~Se(V``2h1PAe5qY02SE@HAjHxLpKd0DZ2d2~qIX;~szhX3OZ?$`GNlwkF zD4uz16xZ<1lrD_2E@v^ZEz<&b5B2`DvabPt+jVh*i=sXjjXyW+H@}V?@sFwlZGMkv z$AdxC(37m_Q9?8O*b4+ZOx(sWU0BX_fU}3oOqgYGJ&Wx=4EBiX!I&CNN(s1JqUGWW z9_B5Q`_*^1vbFNPvqLK$79*}5KB(%@9*6b09Mh4pbYrgTa2@hP5eeBFs}Jq^PKI%{ zke!n13@C}NA#4wQvoqdx6(kiw}O7DLVku`V{93){O~g`a(zyZHSA z!_4Jy9<|GKiR$8f^($|BbZ>Llv{>Wr44y}I!-}R0F^g~q_F-Sc3prJN@j(-JVJY>F z`VCe)GVC!unx021W38K$z_@bqjr)VF<`0czGKX{5^ks_5wU}M&Rl{xVY4*eI-{js3 zbB?MomwhKbyS?<&C0%UXi42FQk87OF4T)m}P|)4#F;MV*%5&nw=`gl8gVwB#cOo%ut0z0`Y6GR@AaEm_PWHvQu4IRjtqtT^Jo{G4n zfidU}^tRJrS-uc*3Tt!0f@DLz0X@ zFB42+e%e1{Qwt~gtE%y3s+UfkUlm*?I{z$lJGvBYOp4jH$a)K3@LbOqR_${p_@bG7 zL{dic0vJYI60tJwK?I`XgdPIitpd%$a(lL^i=jBU@1lwb z;}JLEhPB{0Lq|ndDI!5yGd9hA>) z3(L8AoaDSGlOq@Ac_Gm8O2tflnaSomRvqaNB4xU1)qeroF=5?1YH#t8k!0;)k-k#m zYUr})olV0F?^tSe0Vt`>9}j@+8@Wd0tRECie6#klP7-v>56WE z?v3QfeDu{97UBz7Quj)G*q2#$#j{nl(i1UzHVfIQbuNWD+vQZbT-%|+8f;V4X!%v^ z9Mfed`1`+mWDXl3TT04u>GQ5QVha&u|J;Mnr;9w)f0pe@sg-$#+b(0{;ZhN{fu8pd zml=RkI+tXbZz0W}THZ9v#q7f5qjufS_r!9Tx{E4+R-MlA-$AV^FL%XQ=%D_{J%1D` zK$J4+Vb_ZiVsrVut&!aL2UR|a&7y6dD>=H>`ChRJSkx8DPH$by*&u9~_*%L#C-TR9 zbuHl>^NM(qns0Z0!;``2w2Qp?To)h){d4dN?V!fdp$;~Ztax2%C46mtx*>1Sa||{7 zy-1wD%x;8t_exN-wT;HKoAr1)zm!D(5Pv28>Wd}mM-af9BbwR(4vz{t{MKHDoJWLA= ztvQt$SB7~C$GLYtfsPY}%s&%76f5z0d1$wXYT228)T+aEnOv^ZS|LTx@SF|zCadt= zMxHn~0>Kni?Z~v!x2DIWJsDMp5VrdsKuBjT{dfmIY9$vltR@J3qn+Y*he}lB&s>ax zxv|k4%a6`Egl4*I!@gEymc6U+y|8PqF2wq64wfRHRq2up1)dB7ivrANp{B|Fr;xBI zsJ(Hh?ycZ=(Peg_@1l8w@j}|0t2ueyS!Y!BKS)TPkpC`ZS0&nNaQdVSLECmJ^9OH% zp{a1btZAh4kmYs!J^YI76XRJILzq2j)XcNewOt^4!5Y z7`CCH5U}{6K6rKUI>9(G{-%$I4hu0^y2X-yVVwA&;YRxStBKEL08@bGxv)MWcHGHz za)t02>iiQry7X$9w=6&Hy7#98$|u)l7IkA?7O&rl$HyPu(_-+kb3eHvS83TVTsczr zF5*~u|2N2RPJProyLy_7*^@A??v`lB!4%)5mh-H?X{CDm$k!+;ZoC?;v8&6-+vUS{ikJLllAEK+@6-$r%brv4-2=ZA=S{Yo2Dn1RX zo&4d)1nk>KG!)rjaL6*Fk?cqZJl#Z4-Ipd~PCJsF{;6a1|Ik;pBlP>U>~3et-382G z$cJ{LjYBMix*gU%CtBE zNUG?HiZ<{p2$IljJwesTXg-J39_mPBO>xLc!{6i<6MT5&dt^NNT2OVbn8lUyaV|$; z{-L3!q`R~dcDTAFqdB)HWS>%4XlvdfNaRn;NHnJV1&V^ba zGwR-L zsB+x%;|;{kt)Xh1F}89xr79-1y0Rz@Nn^^S3m{!o>5??NASQ)}1RpNj?yYL$spWBK zp^RW5j`Z;bt4yf=;58IBT=LSKRR*IL>swugYsAIS^ujl?z;HB9*mpdnl{tqTHTyZr zHS0?i+3Bw5p!s;U+pG7`P7<2B>JgtdD6)tsQ=RUK%o4hw`5$!4M8jzq?ruh|r@gb1s zjv9}ru+C<1opoAAhE#K*xz}*bA5H;WI*TE$rmM5PDs#Kz#qdZ}pHB`OjLUudP;QHQ z)W}+HfOxqib*eq0k#~If`PnNh$+{PYl-BUSv$aUhn~goK-+4mDmO-owP~S$=CHBeL z)@MdA^x7X3d3J_}MhBoVZ8Y~S@M107X6xh`FzDQU^)-qy0iW$AX@iZ^I-s*+V;%JI zc#^-{ut#+}pE|tmnI9JzCx687Drwv6)Ptwr47mzDz zZ3g3RFweES)L`C;j}>VnK2vq_^^B1zx|~IQouH3a+v2yy;K|~QZ&T!4#w%+u#>93u zeH89Gefjr>HNl~C4a*_F1%$Kj_=PGt+;mQUsRJtaXROyYTGzbzEcbSc=KOVu4md$j{Z+M-%0g_&RO9~_ z7AkRv<)9e^*1siy%Kozr0RPk-{a-0NClA~F_qDmRN1OipQ{UD9B`4H4^M8NCrumcr zjn$4g?)HMKet)T=;v^HO+q$HM#FHJP%Y8fcd-|PcFXi~nbT2{+7R-lzMTrLeuC)b8 zZ=b?{jloxU6%C1ABJrpWxs-;~zpL9o<>yTmnd$blf!bOy*yo9`Lg16zciVkwRzaKgWgp@WE!|ohWIkkN5aryJsPri)k8si^sQ_W%8h&7%Rd1jFjwzeo{j#(ndG+`pjLYZ7 zI$>kv*Y6+YoY$bKA>L!PI(=~9wEQ^Pnbq!R9o(DZ#N3@|m`RmMNKPpn-I}Rk%&Ew ziY;7V}eogo_t3GwP;eCpL0986SVMAO3k-?^VWeyx|d>u_5^yj)Cszr)9&bebC$eIXzDJVg8q8wWTmvF=t3%L6ObugOMeVCjEmiGC^ zbW;-_lN+7GvxZG8em>?C{KMr+7+)tmKl^DuCvdJ7>eX`Xx`zaMJ@xm@3zp#8QAr85 z%7TSu#@!gdiSng*;FOx*qr@;9;;{VO}zVSUH@wxw_mMI zFK0+M&^G#AIYB%8Skwp?r*r$lD7|@V^da6;@hPhnufTi+HuD+v=L)CgNdC`3Vf!9+ z?Nk75Rll6r$aR;&b(dUT%Ht)LFqo&AcDTi)mg@LrwT6;g8y+xJB8x8V z6o{|&plLVLDq%GZ53X-p#;*Mz-rhZ)>Hh!YFI^ojDs|;hgt}Btp@Tyat7Iyt#GF|| z4m0E!Yg;LFLK4bp4mr-uX>+!sQp7Mb=CCBknF%vCo8Q~#y83*-fBb%b{BFO)pS#`M z=KbFL@OnKT&->%?9EwL3E&>lG==vj8hsH^T-Qb)5bW%e8+Is4xk@)=bJ~H~f{jv1F zYH3JUala0K_cr@;54A4}DpMkM4PSRiuMnuuy>~1?=_ez}^s*tBKxF|jE`QX&+e|l%rS_KclcD=18HG7Bip)b<^zTwxYo4(kMiMN57 z`ig=!wl)~%?Yvjfb1kwKzyG4luOFauWt#=6xiu_WP=w7j3T@?#%ER~&Bu$bsa+g@3+8UjdwRF^* zpFJpe=jEQdGkQec$lEc}(-nQRtigiqjqETAiQt+;KT(ROxAdQQ@f4?41V2%E;vE^& z+gBJn>Ck=Ju@(pZD9PEA*IaD)m%K@+c%crim(99AlR>8!<{G{u=rd5lv6iKLcON;k z9Kb~1Gsaje6N;o( zW-QIO9?lBSgI$MZ(`}lRV0i&lh1Rf2eh$5N;O=639EW#1 zm|911G4k$-jlDs6x;uGo$*={bwXxF6{v_x5gWD%$>hBYX>`}+e$n+FbMS|da<$(?g@=f1Q+x4?Y&#0BSBu~= znhEu{u88-u>~F$$wMr-sg0dtU&M-4}v%88+21!&E)t#>Hfds#Cj@K=OFfX+8_>+ z5;mUVX#`Dk*0g+Dq4-r!Q>qR!PyXIOk@j}+h%qyrS$NUWbq>>O>*JN2ao@h1Cl|Ua zI18bhiwL~ZZDRfB*W~bqC9km;L>B8>D}R~44Vum}gvRh!n=AJ}2y4(Aoa3 z89)A6egF%)qxhudM(~}*9z!3o?x-+LWl3#Zl^?*KxV9$jp|uF24Kfzf(Tc)bQ~&#?BqUOOzD;{bQhc@DjUn<}ZdaihiH z{`6(#3*d;-FmjQLY`?`IzWT@$^8u>>I+{QLJ!cC@Z=F|R> zp_A1rq6VQXU;Q3o2>zV2*iXqDGgI{mGoDF}h!^G~GOnp5c;4Ijt+qR&4c!I>D`eN@ zgDTXW5JL`pq$6#HWPrHz-S5&%Pfhiwbc?BLQ_S-8l(2U>&A#Gj0~>QPmh5NAAO9@P zz{SQ&c{ixsw@iqu&(JL_M18y9%Qr?=$|J2_3}rYE@q$c7r5&9c8U0j(RTzD6vvrkixxiNp)1`S zN94O)k&)Hr$rrE#$(qjLH}h~zzMLFv{0?l{2hID|oe!-=!>W@=nYf`DOgN^WyW7O( zDPV&bL7)CW@Kiswn_LK>&vqlXr>q}RVs6QOR-Id)&3HU@5gndmFXLSdGGRubNkd&E zjZ(i^nheBGtJea#^!^tnUO&ER{Z>n={JSEC?1+M&ECCCLQF_YcrW5*&E@dmol#GOy zg*C3Asz*k|cDgoT_ zRatKrGiCjZmrWGoXB!p*eGfA+zcKf!Q#}gT%1~@ZKoy2t8#L`TW?=pSFLHtE4oC_O zn$q5d3^C~AuLV0bG-{e|jHPy7em^~>exx*x*xV@_nyGZssLH*sBYDLx?@Y@1o&7{9 z36yQOCX;dp(dJWg#_h*dc*&hSLhgvz74c3y+L9LLr|vc)PBq~)T+5r|FfQT!9L8Mx zdXPuf1CC3_xN6)x`rUVYP1{bii+P z#m=rwmZ}vVvGR18Fn1}cS9{zpc8Q=gaoAIS|k%J%!$dRH% zSOf`cAgT*Tyh(7czJjTEU;3{x$UV83x-FI zGy;h0>n7Yo8JP>xP<9Xa8aCkZRPNxTP$pL8W(*_{}9h3%Hi2FV)#C6bqWoMwndB`wxn{bRLXu9Xl{4rTUxP}XuW*ZL;XrB&vRrr9j4HQ>KGj z>EUO^w>jNONZ-+PU@LCGn_0OvxUgU(tLUjv_a7SlqW&iMyxci+SMl}jy^}BQzo?jr z?C7m7lG(p1h$_Z(CW}&R>8(E+RRZHSj+76|gnABc^Hb3w$4VacI|2U`Smi`wmj0K)JhD=9A3n;){Lr;uX>d z{7NQS37TP0Pc0|SDpj@CL@x!iX9@aYT{x5*+U89$QGTd^gMxToxurA{{8ge4qV}I{(nkEL*u*Xl&|*Hq?eK7?OiAHYWE%?97pxgyWM}FSf}32#sSL*v^W+Ws z&iU}_`5r)qu-b5V%lGqpHhE#?EEXH52l37d$EQKkZ_?%;4L;vREdw=URUF-6h-NrcFQo*ba#6;av%4x}7@shgtA)qHn zm?62tM13U~6(?vmSjEKl6{;;S1d4=rR=|uV?tg!)P}dDXdT@Ds=Us=&EM4*$srktI z#0G!giBjliSF`f+aRx8=%VM>8%&D$MX z@bJ;+(w+`m-USanH9SWg8Az*)00ujm$~lyCj9XFnbq-t^-4zDMOTX5NqKkM_?Q$Hg zj>t9t?DqRudPnI3rT~oUo+s#H(xdd{%B82!47^IUx)^9lFDE&QbR~aqx99` zv~t%vy-RHxj!MIq$zzt!p(mdSxMVtgc`}05fU97oXcQqWX_w!IRZAn=v!JBLFcfx0 zzw=ygsdJb{TUP*|pE+Oi&#z9~gcP!(_R4;(feCKv?%@E6*Aey|@Xn5FxZIr=^0oAoH`MEN4Ms}(-s zOZ`W*JLQX*>#O2z=E*Dg+;3M4BNuL*wy%=@>$c)N{AX^NgSksdkC*s`;9ib!$dB*BmcF>aEc{j9k({k5c>-&~q;0JF|8njuOZ5^y0 zQK+s4nKz8?+d>74hm{~tO1S(7wYajrKDph@lGZPPG;zW+gF&^`2(uosKgXVUiS3at zXnQfz;O7$BS?va7eP9&q>6}}hRqr8iIVbB;;xA}*Wsu6jxag`d@^VM%xP&>ue?rem zKOVq}zfYR`D5PKygv6D(p3&9aO$a>Kzqh_{#;_o`nyGJ^1T^y{L7ykE+uIc2_qKj@ zfhLCbceZ3-@Fe3wvX_+jnJ(^`bKzb?=a~OU4i~Zh*B@vU#NLhES7zlFxvK;ej^;NH zmj}CjXf={m83*-!>wlb)^g4fMAu;Rcl~r+*js=B~NeBB=Ey@MddS!3xbd@Lc^2K>? zWnXb;JIMi)j{xjntc0_BXB{>x>?l4J)-(F>I`{!8Qlzt?`NRR^gA z<=xUQ__QuN@iq9zWDbAgIIRQM(w_hc^wvD_vET}UY%_?D7KtdyFmZy_6d{+|a}cRf zp~)s&Ee=MSfk|n*XLV=YeV01T`;&=QF%f-IsMW%k*J;5@yzGJHUlCm2hN+k;p8=cZ z`Zn*!_^vz=5cDl$+t};RZ5HU8ApaK}BYsB4h48N|CA@+<$t$e2exQ?=>5_m#6UK4v zbyDsWl-fQnTWNgu)x7BxO`Ol-Iu8bgM#Xh?@{t&BP@-_ijJsnAJohIfB4?7u=Hs#XiaglvoiHuc65hkUifI&t)DB8(E)drp$aTT}F z#jChNDIR&J+CZiKMwSNeMqQmObwA@{4W|1f$|E>1;-puRnal0A#YZ{@`{JW>2dk6v z2Di;+@Cd}=8 zJ<@o&!Aa&rhW!@(J288sv=~?DCdg5qn;%GY;WlzfvLwLKj5y^x{Q3Ap?k z+b-Wom(qKuBWm&rR)VGpeH7y4jF2}%muI-wMnm&^R_V~zkh$#>l?dx|Q6$&0*vSO_ zn0eERQ#D1-D?yjk+%R3HrH4J&brq=)Lm4g-ar7cQTa!>n|FprDBs?vWb1y{- z!YaaEz}=^G8z=YDz(?Cq8`JC06ed$YdCVf_OeKwtvbbs}i=CGGGr%L`a>mKV7Z(AeOmCyfahuLTnv(#$uGsNyp zid+!%?*v)u2$C3~)*h~n_qEqJPX52f6 z$^!D-z0tC^T|oa6Dr`ms`VLJWoqw^6w#;uU4?PT$TgyiT7L8AD#c%9e9u+#2bwwU5 zarb#$W{7vczxtI?ANx|T864;1*jgbN9&h&BV`g=0A(pXzy{R-!if)MK)g_)1R1JIA zRJC>%YTCHi>|~v_O&#$WD0+E9Dp&AXoiy2wV}+n@Tfg#^vB*>+p>lT;^z6{fmeMEC zD=SbM2)~3+G${%8Lq~wvmL1<~Dpt@HA9=%zy$+RJBgVl?X~X5$xHUe_2uy96Aj95=xHTA5*q z4ur9hgy!()GY0Bx1mVKx3{zo3jj-NEkj8|u+di4qhiQ0;9QfNN~H68H%lDOhR4(c} z6mP60LN4<(AMxe>F{03?U=xGfm?42X%5-?M!;BCXV6DKxsi@-)yY8ukzh)&75`}x( zD4eDDcCYZGYw0scE~x>HuH({1D$*hrM$vCB)J`j$2q+j5s5VVDN45nNAZJrK7_55p z1tx7oNV>q(4Pu|3HS!Hdf~SUgwVCOK!e8tYn(r>9FfeoBPv}sjDaW^eCpW-xlD9af zmA%LokEl$fht~-PIOE(@rIiftB7A&t{WM?5mZ7qW(d*jM>qAr2@alk#@cvW;x;1ks z6TOO<|9F4O(n6;?RWSdhWz4iJZW*z%bfZ9mq3V%p3`i*Mm845v=f=QGolE!#1z|#DU05B%pavMv3!kV=&0G&E zhGPBe=Uap7m}3tahwL=uoVdy5&W4D@7Ph#arsf8I+gBz?7*Gcjiw(&N(SVSwrG+L& zh}jG{fY?MbZmtQ*pvd>gNi?6kVQ1vhhn9Cz%jh;e%R}0_DmBeRkP&Zzua7^dJuO_1k&rG}S zQ?mn>TQZ7~Dqx@d&sOKb(>K48<3Ou_Z!P%K;Fg-q+k)6sM@^eN1HUV;Ej_T^YIgtI#VOP+oB6A-&kFpz6a z*R36A$5=79v|g-4EH9IXTYoj`P%0!MKX)bcL<}a!IC#!_jiq;?=iWqs>|~wL<&~O% z_I_=!o{u~pHV02&Fy%F{0iQ(9z{Cg*@*iWTtV4%?&F<_8JpoyPCyb;IakVDu;&LH} zw9d>v^g_M1+0VqbxG(dsV5|d6mc}iuVBAmJK0LW( zoiEeyNf=XBo8 zBPhMPbV26DQ%>E$`6`6D-$t0rW5IDY>DuDF*O_E;z$)Wd1w%hm*>05MzRuugX6gOI z=s(zU@an6WE%rw<<##zAd4v0U4>x02N!VT$`%uUW?~GTA94Jb>AJOJu5l z17c5g<#Qflg#N%0al;xZGF=KWojPG@s6`^W@?Ln1HZXjQKxhcmjp}FgUzW0#(bIQH|ovncfME6Mw|>=dYn+Gl5@v7_H)2$7HessjDK}GPmz4#P0ZhswTWFWNSj* zfBLgFck+B9v_F-S6r!)D73gNX>Tj<~=~r*0RsCd?S)6b>1}yPlzCLP_y5iFM&?X;#yR_-HwO(6>-1SFaC9h3r z7rP^y91tJrmz(*E2oCJV6t<|WK1NG~hS6~4_Yv?**fTTdez2ABF0DfAl6gVXjJBM3 z$kO~)W3EgOr$Fzq;&XT8CpLv?`z?f)id>1bH2pnXZu;;hu^XN3L@B>|6ceQZGOHk% zK?BF;s4*-aWnb_TZ~Od`ELSkVGC4X1pneVIW=!$evDEmUaDJ-u0Kz-)3p_8|_!2X> zFmh8Ppe{sg2hs1WE_%zfG$v&nk}p>9ico)9-FRMH{<^g-BUxS7#@-C z%dKIXW-%j3eQ96&X^_IoiE8Ps>xTL8K2Yhm1D;z;+TVpiNc&)Rgm}i3jXZ8j&C}?X zKG?5mF&FW`^+=P5(8O>ntRI?wyTKRNubov zbAZjbinHyP@dQUnv5l53j$0|h!W8PZ)0p_P_G%=-+vK(9JQ5Oh!}DlXoO~mEvQy)v z-kiux=_qPi`(QQY7SBL>FCy<=`maYJBz0<-6DeGEkDEfsRw7uYCAu6m74!GO9TBH$Tl<%&d)m#mzygYt%&(3wG+DYYkg(IcFc_ z_~UQ?$17DJUu8U@?R`|N%gcj1-iz{Vc96dP;O6Xct;?USOXv}DASv-nS8y2RY#aTl zxIo>CX8(!4k$~aAr7L{0&BuJc&|7iH6myX7OD9s zIfs|huEEOyH)_uE)un}>>GrJKV@=Q<4LhejUzEca%XHy*eg=_Z&|Y?a2xEn$_xz?w zw^%dG|2);Hth|nrx%{d5@}PIqA&rX%qP6ITyP zLh9wq+na+<8W7v7!?MxCQ<4u^R_mTQ`@sI~Z5XcvuPQ;KtpE=&3crMOB6o6x0i`aBU3GH? zL8xKE&5)+2=uY*3%K6_gWp=}95g;}z?`Jj2^V=m|xw~~f*Caz;15KVw@!+SvJlpL) zqHkQk{CV%nQ8)Rxb;`7!Iin=|=F$A94EMst!pBq|26e02|C5WqptEs2)pM)m=&r8K zc27B_-LYE7ujgvl!J1|tnZPNk=X4NmcMaLB%NfWbeJk3rUJREEQMtEd^y?wslbI`T zAgG#drta*6@+M!12QP`ttL2fdpGc?QciVvb+Y~h~ijb1FE1sn)sV_sE>uv-CSFxUXcd{x@d!OxpGE%!M)Rds$nAo+wfjgqa-qtHld*`* zGV!?Ew7zkn#3(j()L}rwHpUOWc%B0@X5}@zgs^w9t^VC3Jdg#Fg-@6>GUTPbKOQbU z^#eZ}(v;Q=$vaAdp5j#1or%OP)aJhL6$~Z`if5dkuRe^6%4xh&B`TJqF^8z`n<_0e zN~P<@&F9j;bl&l-#r3=9p0eJW4BE3?a(vKqtMGiLu9B=(WF%QZVt!~=J9$9sv#$bE zZFU=gc^05$8NyE29lIVeOQxEwZTzEGL}j$~AQW-6>BC}SRXkm_LPAd?UHQkD&PvY( zBDl;lr}%Kh%7+#>|BkLE#`Q&cs$z>uBh|~jYWL&5c;WPz-?QbM6GI-J%*^wgvfps+ z`=6U*9D0^pO~k+hVK=2-eCv`Mu>&8}aV#(Hd1?GG9#nZgV{h2s?Jph^Px-rgJR5zg zun}y>zGH2I;j|Eq9vNwzT;6s%?%CeL9wMQIY`m_x+=m%1r(u zG2!_w=)>JS)v0EROuwpYL`{Rdnc74jy_RNOWoQ>xAX2fvA#F$V^rr*AcWCrYFDDu7 z;ai>CuSV7CYqLQ9C73IX+MiGCni-dvW5YqvR4nD~qr46HaE zd-T=)o;#$+e7Q|&Qys8UPSVANe!B(7QJ%*CK}`H62BVzPwZ^2>fHs!I_>oDfj=1OG z-Pq3R6dd?PiQiaczD{l=aG0 z_R(%61p&JyU13VauUs!I7z^eaMz`L$6EJvJ)axxl4#9gwz%Zy0WG zGp41xv;rSq{k|Ih&H(J>o92J++MQ!N6QF?`T?KBLiF4PDzQ0jYsBbXrr4_P$Bq~6V z3hQt0OzY)cxR0D+skuuvtcp)%8+>N8!Udt*80QYHoPJ6tDnhj^_4krJy?b-dE_y}_ z7d&T5(U(ov|}j!NqmN+wXBuCJn*FlA&W|^rQGJ2S!HX901M=g=7(k&|-xI|U7XbkZj1JxQQewOB z1of`uD+L3=U89Kh?$Z)C1MW@F-wo}VHb(y}v7EXBpG+v)TfEnI$i?TpJLma!7hLy~ zZv<`vp`yKc(;^OWfZn*b23So70QaiAX>bihzrP>zOm1(s>Qx-*mbCfyCj%6WYj(v?+$~L38-xyd2SGPX4%_uILY3rdIwc z;8r^JdsUm)`d1kk{=UOkak@EqhmOqlIebT&c^v{!hO~Iy;C>%1kGK1uY$E`g%8M9H zXs1CuP9dFpNH7dmOHsiCCc?W|Wv5hI8yw?Gd{4Z<$>}v~=V#uHWSxwwLysvssbf%C z-0P}29pT+Hf;*PwQqag64Jb3OQyK! zyV^_r8BHS}m)49s@%weP<$Z|u|A_!{@PCgJ{{PAx0=ApZ1O`p$BJRwP0}$(@9z*Wj z6Uyvlb+uOnHQrxZK&QIbV@Xl$)zceJ*iL=;TGZhDIY=4iOo;jH?`3(5nMPKZJN;%L z0pN-}IIrsVj8Wf?seJ_~cn>yn>eZNOUJqQF(|LVk> z<%uguNBF1@vI;>D%P>YZ%}hI! z-w)yYD*#>M7|BaS4Dael#A1|y^5FV5hT1&8D$?IvYK41(X}jF8Z@!K;Y8ju&JGRv^ zXMZU$@6LQL=Agw5Gg=1NP_6I6>gQ;W>0ZrYuA~Rv>8{-w%{^%W)m!X8)VH`cfS%F; zuho2*W|`mpUoPAw<~5|VCM6K_?-4wh2h77hCW^Zyvkz}-Ai()j_N~%u$h)!Ov+`2XJbll&ztBB>kwoUaXo?lmHg1)j4_j9@!Q^(_LU3TOu zjdWxU1pi%^wNl8v+8J~4zdoUnN7{hR#M{M23?1IcyQH-)8K>o3wPdaeyVtASNq~Cu9JX6H0nU)P zYA5|}c0qn85Gp*%Iy<8L>ABCnVL!MV=20Afpf_on{zHJ)a8wVn70&_5_g z1U9{*IQ4o1^;CwdDnrc20Pg6Cqn7dvxU>AasjG^la6Ad0gA#4q^a_Uir&GxcR~SBK z%6JOV24mA684}X_t2bjj95?vu<{&diNf^`$@tE=lf05UFzz6dr8iC6|Ub0rChAl?A4HaDbu@TL1Lf}niilZ{K1*6Tay>*jv)v3t+QmI&qaQQXAkq9{@a5%MS zrI;*vM5VOf+cR2~2LuqaS_=yI&UlH2ODNCWQv@oZgm7x|r4JUa2W#9W?$b0-tLf3s zXPvK3)8N3%rJfXfDLXn#bTkB*(z=4fKnOsnfd8I5(%BIJ60PEGEs*ra8ibbSz7%e< z-lrP_x_tQ+ABL1($>CT^5Z)YJfMFgykYCOM9Fb}B{MJbR zEJ9CVR?|1u{yiR3d>EzBd3g@;3Q+6Lm1z=!=8dFbe0}SnkHxO28;5Lc<80Jr;0h_$ zc`*+eVy65?2I+I^KJvSbNdHuZ*$R^wTERbP(t`XncfOf>!mHS zy=)4r=i6YfKt+WdhDpnrz{jBazJ;fb)TCbQi$|>uo2t#|1hDVdjvfC?pGe$qUaa}Q zwUzsuS75U9Q2IRKSw(l?omOxCxL4K#`(qF?$BW4_les6VEGX8eoR7fe%t{K=~;%5Ku{dw7l`^`DSx!tE^w?;12J^&9D`%8U)(sD_x zWL;3?FKR%*H<@%%x%u6uIj>i80y{OUqW&frOZsk$>s>antGHS75&R7?(qq|Cy;M#O zFKp%@3VVYL=HeB^9!S26<=BkaoY)@i22~B7mn@Zv%cV7AUxe7|&)yRa+1%SiujxUJ zt;P9A2{>^-MQ82&>Xy;gM@D;)T463eP6U&NqPaou!OtsJ4S;B-H-Fgi4W3s-dOURl zY3C_TAgz#!*fqlhDYY7fXZ*Gbn2F#EAx_`FzquYP@pJb0z9!}GlscQY1Sl>R@C@QC zy;yu>C*HY#@BdrAK%GK6AR;~FmN!R;Sq2lLa zuf3Wm79HuO(~Qo!p%vgu%PXw1B0F}Rdw0vRt%|I?yB)lk^*rXj)B=y+yKCsIk>Z{) zJo{D`cj+WPx;KKdDzEn|F}ZX zmrO?Ukk^UK++YQLVl&=qR_2<#yW$rkp6ftrdlnyJI)9a}p02lQGM~Ym5RE$rIX7bG z^t@m923uijb_{PB+P`K`@R&PXk}&CF$9l&+;-{Z%ytS#zy3|EbJZZ$s0<&gK$7&J3 zjy1)e46&x`65|*e5nG$6=+^cM*e79DILKO-eUF2zVNZ-2{H`XtGXVk6N5aPE59plQ zZX=~fA}M$BjtB^_1ZqK6e|=TOjSl56Rr}wa=Dig;9(Tg;!f0XLM30WDrPeLSphB@z z0<_bb`^hIZThvsa&lU%&SyFo*GHr(?_w;^q2#9o4ON!s0UgDJVhW`0vX)@pAl0c&T zQ_FCpN*ug>d?+f^Q~#RVa7(pNM$UKY?}F(@duU}ny^hR8kJYjNi0h^*TW|lRhtWCH z@3ql|P3Op}6~>9!O*4Edtm^tLpMzzX(fj!smaLqfz7@jcTFvay2;wMrpveQm;%NZ% zYV7>PYkcRgc3td(Ffkdg;~Dx>{&y2+_nG2g2rdme3_|ItquiJ~^USfS@Ls z{(M3rqma9PX$eRR5~SOv_NGUDBIfIFKRj z2I=VuQFNF{^p{T8-tq+oUE<$IrMqeK7SO^i_Ry8-wtYq)j)&K3n|0j0Wq;z$pBymw zk*^je3L5=hw2H=>3x{E2tnssFW7A7bBXxFFRTI4u0o}!4&m+27XHO}ZJ{h+zM$_55 zC;ZfI$d`97JD{oOK8r6eho^&SU7XqD!NJV`n9p~I44sGE)At^+<;ZgOaG>bN)dkn( zz1@6A8~1n6mWKHf*Go=1V(m3GS7DNBFL%?hd-g!5-W&FH85RcPVONligQ0)TW?p;p zdy@)`L3!cRD!!{@$NO#DVLdU{z~tiV)<<2wfOUOIX+LapvRa(deoz4mhAC zT`PIcyEf;!RYi1JD@{++zPhK|E4E4ngU#Z9y>+P&lv!UUO?6;s9!R5i?DuU;`ubD$ zkQ|Jb1aB-OkRIYYm*aywN9>+;)eT%7`^<_IO_(SU4X@fML3;E1wtOQ5Dh^7F$Ypa$ zTw)E-r-b^-#+BN9`OAe?MbZstxry14cTeFbuv@^2QB_v=0a+Ndnq)ar)NIkM)h!yN zm0TWw2%DblpqSrLuHyB)e+N!aPut0hShGm)LJ5{7v6#4w{;Sh7Ed{3xBlQeL42fZ- z4g;wqSA5r7*P8&KJ6lI`^)q1Q)~}VuS7_(vVJ!Jya-)!%vsmJe%IId?i(ZY~rFn*X zd-d~?^z~G=d=ViK1;dLXL1;4i+1@eGOq2};i@0A~5r*+#^dc;jY&2F>*gwjU&ZO({zj-fi zN+sKJ7Wh)7nhAe6^Gc(ZRrku1!QN8@{73plPg-h}Vfv`vyHhtXJy)k2!~6)yC7V5! zM#5eFH*6E$)(!ci*GH$hgv=;2w7?HW0>nSLXMn-yq+nqPyoB{P)^uBa#`B)`qniLa zPHB_2WH?o)yF-aJAFLYN)j&ekxHL3SnCkc!X**ouQvqJIp|Svm^az+w7Y;P_?EmJk z6_zx(@AvsrI`D#i8fG>8&r@-YoDbxrhlt7Am)+aF&Ng2~2_~VYsPPo2sZ>EuLi2{w z#v+%3L8?TokcFm;tqL18clq6368BHeZm3I3sMrWXex~}P0pjZA1x^B*7Twv_*nJ)L z#_%2+WQIabq|R4~LWC@k)0+!CPK1Usk>e*>=?!w&6>i!(MT%gjCS`8?;0|*IN5B|r zSeu0|R57Cen^O|#{`c_V(?D&1H-vS|{LfNkiJvOXYsL!|!D74IE2!V-0lBObN{t zfv6Qy&EchiHc%A8UZJzAjZr6jC!n9V+XeT83^{G=8ggRPz^LL@>74x>L?*TpX^~YH zO{h<)-k3WWOkryVa?ZVsp^xc=9d0lgyc;5{1|c^RHd+Ul)7IG>_;MY&m)IRatK&z| zbx?>|8DUU>9K|?HG;OQ>fAp zsM2vFdqMb6f5G=+)nrpXb$XzYr&8pywC+^q&tL>?)MBEU-6iT-155F;GuR^?ns~6Q z>TWL6Du$Ry@Yf31s6F#DuFO#D+|MqUl^_HK1PxNCWX%9qfnz?hxJmux>rKnBjVFtL zJyK(RDM!HM>tP}kuR^3b`e^-3X##Y>1dcJDLa`Gk^XUA^<=TsmTSMM*h>{^{-Lx<3 z_7S&fxh+f}&BUBZJm=UI$nqlObk)%>xBW`UUm4&vac4Kem?4E5d%19yOX!sbmUWvr zem~#A6>a;SX^HpeDp3W~#lJK!+B4$i+S(P;KRYl@v2h`+kM!Wq=K)~666dH(Uf9XF za@w!oGysM60`Ir}K^l0DeLkj}r_@)y=f7=F^9e{(rX>)3b8J>Rq|Y|6bmU2mtu`{bB(!Mu45|e?M&r*)DSHe?I*` zN)Gv-ulavbjS7tP8hzDR>1kXECf(rdzbAAG zU~t}mbuMUu9GXJ>=gC0vfBip7j!OVp{p}%Fz2ywKk8L&*=dL6ATVPt zs{kW=0j&Z=IDORo0mxdfLe+RK8#-Pw_+!8mq4w{W`-f~&Hb5DDT?){u;Kue^yHth|OnC5U{wey>Z7{Q_CiSEWZ%Rf#&X* z1v|H@m3(Pgoq2@rp}NSd~;g7oG@;fD0%gL2h?u;j?=S8(w>ys~X1TrHZ<+=U-V}MXUQ27bn8#?wrO@xV z@oqS4MNbTlCBBnHIgs~4uW>mMLml*QEzPbqq^Es~2@DGWl^m+Z#tVNbRcdZr&>pg+ z2J7w5oEFE)LrY%lE2Zm}Vs!K^u(T@T*Y-2NVA;ut8~VIrd=f2`%DbkUH=^LgWLZxtba!W=_QodPSRCC54$}~ z=A3fOdm?{tvKDa!=L3fh2B8;m2JB;)eDTy815^O7={$$bJS%fo0x?~>^QWwQy?(?Q zLFG<uOF{Xv?uO zeo`$%G+KB*j|VpcT3B|PZ<$?qXxp|nkQrdUy(D1hG4$8~4*(E1IecptfjPvjTjck- zLJE%3cxje}6Mr&uX08)Z`IZ9ZlMQlb`!RiXJ19DxY6-K&GcE#V_5nCmlz=Ztwmq~y z&RqB67(i>`bHk54bt}TCgvBd#CGsC13Jj%P$&aQ$q42{*68*B^mwluL)q?)HjIv;O zpbB`=`+NM{MqV!xHVp_a4PpHO;N>Mi^RSATN`B7=raGPwQrpXaeFBnO^2tRRonV&yCk=oTP=jypbs$s$w z!GsG9b=THh=u!ss{fvwXu@d@$56dJEm_pwRxGndajq zrJ~;0$_J)=y?g6XFw1BM-Y5`enAk5cw*w`cd)g@{N=peSyu%w*tHyYtDWA*=1WDc4b8}B6A99abLW`zY=s)eNsmU@uy&zDi}!^1hiaY)LwB$3ViFCS#Gj&F)Yc(RMRK8-^04YN zd^c~02pXr1eG*smP{dTul$F0E*-%#1jPRnL0Ktl?+GVlOQKV_e;p7ixFnAT~|7h<$ zqncXVc2TS-sEA4t1XOg1R0~C^N{PAz1?j!l5RejD2v`o71xHej)q4*lSZ>4&K-`s#Dh)H2T7@ahWVm0Pt(IFb;V8E)ssGr)L@o;*B zqK_QrMK6YJS^5J^o_55P_x9(80vv$pjX^IFMcS7m-!oh9Bo%EZvI~v^LB#EeT_KZk zha-NW1Ye3}N5~&^pKGn)cO2jyuDk}ip1spn%W#F2$Ggs_5CZgjxpfue%QiogR1Vx& zrL@mqcwn)bD;N!QQw3+W+N{wDWuF}fH|a}y2ebx7#ETOBOjA0~dfTP1QmQQ;0RMJKi`x1pgd;{cK2dMT2+7#IJ@i3vsyA*yCV342o?i zWI)D%A5TezDD5m#pfPWkgYl3afKaTCrgZ}9qXhkjnJ`+LI6Nd}Fb9$@BoEGLMSmS8 z4_8od1M@0kU79Nt@Vpq2tUoM+m13Tc!B0T55n;_44z|)=DW3S_bW4;C&EuYzuN>2x zXsgs_#p6qc_A`!0>!8x|;d#+QD^Jk^nHP1TrqNXZ08ViB_o2~(m@C-*%47M$8pk{S zFo(}wTHmuSj^-ke*Zzwr)3VU+I0-V6*z7|nFSbv;O)-jig@&K6yU-1uXxHDR$$wEf z@JpKp5=1WsYD9?$GxJd)!|ySnFq}!eyDu8?SAtOjgr5JvWXChFr*>)H^p;hVbnxio z_5KK_!e1)l7e&gEd(Lkmr-G_fb<5KPQ&54YrarIU{PFD3aZKyOtl~O*r_|VKN^loF zJoH>SYR(Q?f;#r*d{h6&z9y508O>I$sRcs^&;RP;@2(PTMyeSeL|w4nVR>1dH)EC} z5RLd$4E8*^xcFp6iV8ZEz4{U3I+rh`k%M_SiVSIDM+G~^4Y*D>4K-lcjl&lilBs*x zn|JTM_Yisa-tpOj8D-ZwzZd6gudu`B936rUu1gv&UyxwIqiNW`Nfm@5p?SOyTSJ5w-Duq z?t;f@AzBA&E6yqfi)DhsJzTBtPNl10Edm7TrVn);>|+(lpYFpf_KGivp(#G6UP@iF z<@tVBf@UgZ{E@8Y8F}rs$bA8Ow!yua-t1xhQ}$!=OCEzDzR}EV279o;+sdk=;I+M# zbII^&)twjIru-b@9;L=`t=E{(uL)*v4%IY;{}5&(Cc5!n`vmVs41E1r8Dy-?XU5gC z$Z3j_1&}3|6rTylm<^|I?u>b4n5N^uJI_9k2{Wb>nm7-#G^4K;>nfE^OQzj`Fz_dw z1{&jN0;N%Wkz6)qa3*}9g^FqHYxGPaN;mfaKzMMc9IHxK^~c7PU&tei$88=Ex4CAj zuiHYusScRNFY;LDNqP@j9MOb4K;m82y{9q6{pj#*kx|NSY%UBL+z0(V)xUx|0rC@N zcu+*(4Ihcf$@X_;C8m8oXL3PpQFtf7((cPP69EPSuSStt6l6vfCVunT@E*fG&L-Bv z$Lxk!Ud04!>$u@7eBF;Kw((vScC86I2WtwR2yJHdX1>sxCNHB6${ey6^&vjKObPMh zV&V%~h1PGp`q3+3ZKQjL zLtP>40sE-~kBM<{GnS0ocS#*>XyZvH4J&}(y}_-UR8!(Xl27f%z)gsai zAkcOFT2536))*+A5^dB`$$UQ4i|qB(0DZcX2EC6;meR8K^PyKAI! zf{5a=o`NK80EQE{H_lGxYk6p~N&mz#EQu6u3eB8Q-Rro(b%cVQWDl6u0~JC-Ogv?} zx>r)e<5Hnt_I%r6L+MQ-L78u8=bh+-mi%cd=8Q_!@j{@#dZ9FhDy;0|=H`2>m`x;Q z%_MON!S`0)wj1BGi~XQNAfhv#kCM_yD*`v_*zVG-?(tf61D3*O16D*+StXj{ss`J? zV-4P9zS8)vh)z`EwaKd7UYpZ@z1u$>VPk13z-Hc$CbRRqO7cVBJ^XyGpU^8SYT_de zu#EnEZ^QFe(98YCnMOebL=;oP`xPK`J(>5}O9^)0K{>F-r|!yglCATdwEiK=GS+fr z7aP|#bS!s#ctG@YqpCwnD%!E|{MRq(?0#&gaHB~pCF8~Ws+6LhLMW!M*m}GI>6rYh zK6};_h=ng-4N{2?emC4(z(MOumrqX2nukgmPd5T?1ejLs5SUvg;kr6dn#K-3uF9<^ zU5;`g>{k;C#Ky9o1pFAd`Mso5N$jc(G{Y4fC+l96++;}0=Lz#gEPh~H-zU$nK+MDJ zX{^V+cLhryliom7#UH@2lz4ciQL9wA8ab2rdOdbdO9vK@)& z0$v7RxN^x|z*1B5{^RN5AsuZNB(6kdJqvm3JrgE2Apo=Gi%t-#Dg1 z0I=5(j}+M}WB6;=9;4C{9=D|o*z-%lWkZiQ0Qh)7Yun0jM8m}>t-02E(y5-(@qy%2 zxfkb6(}ybeg7XxZhaIn*`to_hK@a0UrCQ=c?!=uCHzE0M;U@1@TQSP)n^fW?^8468>fR z5Hy?Id<48puCd@DiH)yhQ{bh(+`mrKN`L6}$mW4E?Mt<3rVZLI%Z<_@QlE8yTK8i~ z376@qD9q^Ce&HKQK6CrCf|VrSmz&UUvtngwHQO_8^eK<%K+;Ybt!V^&O@IPO z4`^Aj^r%3=w*J?}m1_P zSAdD>c`>sqGR9qXmXuTt=01<*IvTR*arP_WL{}PXENDk-il=0m&H*VZ;hv=jvY^>~ z6~bK7*?eldt9tmR0^H$Yn1j6orRuG=kNP`f{ZlEkFGKBs3?Y)kJj%6)a6aMdb-a1S zq23VR&U@4n2WP4e#1!RDPbPKeHFyt(JBY8fc0Qb>$S?s0l{?t{*5*y?G$Z;O*I2kQ zRmN=K>T>ri$qg!fk*ciB0lWii__}LrP^9?{uIq%7LN^KrS26{dP+8llZ2_HWC-++Vz#eeIm$Ljis6Q{`rJB-I}%4Z+N zyw-WE{!YCJ5}N-bk+_AdJVSqzk|1{08&dXfvn<+<&!$Z^0K&m7(rjeka15oT2e|)0 zjwP|HR|Y**N(MH|*w5K|SMFWR>|MnLaGlDy!$*sr^iDMZq^96*P$FS`S&vn?Q)*AS zd+~??5ab#$d#DyVLUEL71zA@!UAW5xXnmLiBAh|6@odYtl-7eUvy*=(oS$(W@ zE&q~qjW7LuTwpXE8j0Jx|@V5yGa~>j2a)P5F~-vMsTS z1F!e`L@DWfb@TOb{w&l6tMF-&`o^BK4E?5k?A~}H9dF-xi0akgNS?pqP`?Z_8t@MN zHsZCryls^?XU*gbA19mIwXwZ58CvdcxpqmLXRmP%C}Cw(djJ7oBrYlYj4F8k3S2ub z^n3pDq_zVjwGa09^B)78r>eFhq7Du zIc>iL{@cn-|DOks{DYX|;d$`?3t9L7vd{lu%Kbk#{Xc<@{6B;F|BCS@t zl=A;I>3>bi!}I@Ahv5H`NdpigT-f6q<#xSl3*2rpF3)0!IOwF$!MTxtAUQk_76F7* z@m3+T%qH;0JRuGM_j|^bpV?~bzc5y!e3DK-A4-wb;4aj7cLIbWnVM^Tqw@^U*c)F0 z9dENe2!=dPB|w)9AFI(9kU0os$!#0wmCwI7hWXtJ0bs^6Q$X9U^%gt4-O0p@RH??= z;0tVk9>36lrwM59=8uM=kwZ&&*i*#aJOyt7-1JsObeKotkI@Mg;NOd)3WDp3y`Y zTwI=r`CdST0AH%y{pXH`2D@A8{1!=}#C>Fd5rsy2Ohf|JC-*b=uT6AxDgQIQ7eM!q zAU$KzXL#=8rhnvFVn-NJQ{VTrWaKzp{^LZnn1z_`G`uLbry*dx(GOyP;3Fw#PCH}> z+krsVtUprpJWg)`o489vofChEiRc>n(+L2GYXkv+z4HLGHqhInayIxld!%VNxGj7@ zngtY*t%m@e4h_vq5emmQf|ajoXg*J!@R!SY*+5bLjPkvF+)NP#E$*-Ni36Gl(iJVs z?f}oP4sQ4o2B6WU!4p2+0>DOD`rV=qalmkf|_LZf@fm)pJI%iJmw zdipjn3kfKp1{J!FZ2G6EbR+jK1TGW3G<$y=HZP;;Q5^;S3nyHIY*ID8UmRjlKiHh` z<(k)4dzq5;5KFwaONU`S+KV|+R;-W{^<6S_Y!KuuKFosqghGxsiyi?&_(@@Ao{GkJ z;$ByPG#*l>@H8nJ=sK+nD&&|irGxx#>1^H|8FwXLD`nP#d*`*b#5^z$_v53#B5HJ+ zZAPTH++nD38asXdRs*uL_eQn0utOYb*|Jed6hezuYEoPu*9o68{n59$2T=ORV}4O@ zm-TnRtuy11LqTmZ6zV`wb&>E8#~n70S#E~QMvcE5!gY0^FK(~N0V$w_FK;W3wXS;? z_Z?mv-K8}`ZvXXbN4;c6BjMe{Co52|`!ZVv=GVlaQdm(luy1_l%m9^Z2TnZQku!+p zyAr3!ZG$vc;K_UTR0@7V`3`tTX&flXeP0Qb^a0WibES0MEURlL*%WN&JXD8_u zRsrHEVlv}18}c-lVa3Oouln?N_YJ|?;N2z1Z*~7nx4)jRUFrnzdP}p*)#pao{a)pQT=S0yl_U>unjrfokc(n zU;BX#dNYaon^q2N1#bw-{7~QMTbJ_2_D*2(9t>ej=}jE?hZtMM1KHVo%@~GZ!TFfn zq&!tK3B|pf8p1zJOYzxt>kAno`mtP@@`FUBHlCqq?^6tR{{m5fD7mr1J1|)^!Zxht z2_rt&@abF)wp+C|i-xO|;wzt#hXLCClJuy8ulJn2s|DZsD0!dNUuMWTXPYHM<>mvC z{rqwbiY_cqB-4^M;LQ2Xv}_b9J~15k=`Ad4KSA&E2K0rcQrZ+fTVQHqYykz->lXnH zl{(lv-SADZ!HwnWrVHxjgdw;sy;5yEE!qd!+D}lZI0fX-s1GqOXCB{240Xe9`sZ5v z>Ss0=elfe;2dA*#q;G@&aKl~~$n?$-#*bYlS{O$O7@z@&&>*~} zb+U^+&itb4LGMxQpS{lMers$#@rGFZHy5=jLUgpV6&Mksmp_kbOSg0UvfO9z5Hk<8 zhDF(2Jp&N&K3C&2AFqy}ZDdJ!D%U#rY~~f}gg945`*BzLka>*aMd1(xS# zLzlP#oqXHfL_vVUA+rUh7+oe(^Vdn9)o}H1~%W)KtVS4pw z`S2)+Duj?9@T@woH9664buHk$+Sh^9dOok^mZ-;SXMM1n@`;p%Sx)~m!#3C2DkF0- zT)s(pxFc5Ee^Qk)oD9SLQjs^64;uj_FV2(_R)3MFl3#((=@<*>9Y8jh-@kJVT{IVd zY)JNIuZE6!k+08y)vK3?ea+w5q%9JI=+2#Y0PLuowd8)c9Dvk=DL7a8^^05UPse(^ z2<9P(4BqV`nz|N(!V}VLr?iw(iJ0OGrW_mXhbM2HGIOBD0|otO?(0iZca#)W)k!NR z!4UQiR1(DW>{LtvHXE^ikgBIs9aRzXMyCs?#VL#!?s2fK$=d)yyJ+PfbRA=!8dxax zfO={#Wy4kP)vg`uVAs!U_-ODax|WSDAGtm^BAks3siGB7jtyHV_4Dry51xnme+1{v ziS^FDOX<|cHAx%n;C?-3_2M^gGtV^+AkOo*iBtZAZ$O7{Lp0v_@ciGRssH$X&u<$# z9S7!on_7z8D?cP+Q? zw3>OiaFGyELEJry8+lrKf2NT&uAao3flxNbDI8e3L21MmVR8{G^4);3K8q|+r4QUi zNqIe;))e;{co0`DX;`z7>p`xHLUV_f=PvU7rSi6(qIJci1^4cG%z}GC(u$+9OhjcK z1wMv)q4~-P=MXGuK zIenA4C8tFt=*)riDEmr0CLTO$(&Vd@cl(&>Ffb$|10NF*ookK2YWvk+t4)KHd{J&u zb-AKRjgHGEIk*~nHlq{6ik;KWBp|l?f6;{DJ(0D(|3~gN+_5nRF?=h zzZ@kATt)fEej1socJ*LNtqy0s8!apM>hOCVRS-d0tHL1lde8@1uO}**G4K$4Uqo-E z^{H*E1S^qvK0sfH=+EweSD*hIfyhX-w#qzYN(&#J#-HZ%Joeek$T@STMQfqttXxfh zksIQspX#VLATySKf8FhUv4)C7F-oxH+DxMo(x*XyKWA_BJ+1HFap9P2d7qZQ00LMc z(ZYx#xueI@(rW)IuD9ZZ*P(rUYRgZZ3x+ti@6Ec{2+%D~z$ zvVOK9x7O3$OStO8u{|yHjE(S1LuTL1b?@`nFM={&;yx@_T}u<3M9G$9O1W9oC&6&V zy(lF!Er#$Bi)>xXT>F(vw_G`Lzsz{buKD>_AdIMz4hi%ke7UdqKLfWo)Psgj`cMmO znLXOf%M#!#0bqPVgSO7H>t8r!*`*0W^Oo7oBHlf}ww!*nE63hV$r|9&+a~Y2pmmsM zvY}XA3`km5dOz&mcf)RG2N!^yebl-}7RydxM`Xq}Z28{DYOL#P&_zFfEsTty%E-D_%go(I7ko78#&5n4Pkrq*UYWp4sK}WAX7< zX@d5vNH9TTvS6>G*e$9zHp(xpIHrn5p?<;o4cC*@k`7pd^$-m*gzB10^9QO4AzWd6jhaP1W4mh<8*%VYY^+2ph zl;QaAvQvGesQH&Xb)O@ePjP%pPgzz&Z=HKFE?^5k-dfOswn5(48oyK{T-9cWf&0z| zH}aN=i)PxuMxQp0AS?S{(Tk!>l_ShpiW21c9l{o1_LK!Bb=RTu)?K}-d8~?d}i!eg`iAq8`c)* z=66Zxz{VMVaTTEeIr%wLc!Z}#=4u;O0p<(aaZ2eV#+b;id34*}(SSB{r)J}5K!vbX zIhtAgwxU6v=E&FDoh1O4uEg$}88i2A6u0ONjn0{CIkH=UNCO9rjGqJF+MSmkRpzhc zcptVM55H+V%##N`?{yW>664a6eIZjDv}gg+LBA>07pIiUuGonmU;nNbnl9-~_7lEF zcfi+p7kw)r8R=;wn&mU@gsPh$D^+C%l7)`Q%6AXH!2k|)xJ$dR|QCi+j$cVrAze-5y{z zQQ#%fFSVpH!H|-^OR6O{pXTJi_}BFVmQ)}JZq72rAkQ0;>+e~kI}`ViUS_{KB>sCY zwJ;5M644>QR`;-;!JJx8)XoD8OC2zP)+0b*17qay_3ef0$6{A=_2sCBv2O#d_X+Kd z<-4rxj@pR;B7I~dPB-xm;s|L0($n|$()5Wf;T=xnPHdOo_?;?MW1X$=)>+&)+P9L! zA*GMsw#n}cXQar#GkasLyckUUqG9)1y-R?U!EE2koy3wtlR4H}AML|KCvex8`;$=* z(3DChoT#(%wscW@e{MBp&3Mz)7_BPH zMS$6Q&QxqqO*_YI z3G5y_Prf|>nzxx>QU0d!$8ZlB*jGRTF(Gr0erUK&3zW_YFyu=M-<+y5Hl0Flz&?xl51s!S4=~%F2fUDvAf0M=Z;g zKYoeQxQHm;Sp?8CPCimf(~F+HQmG!_R{Qn>M17HZ4N45|vzB>f6eo^-NMdD8*IxlN zWosQ{Zf?;!+G`YQqmckJbA}NVmXKM}IAB&Nzn(S2&dqEi(RRt+Reiq%6xw?WSNgO= zP>wcukyU9W3=Z_H^xzag2H1|(aNx8^)KXO5xPp=HJGBtA7E~XkJDa9Y(-F)Vwqhj_ z&$i80eaaFbc7oeFFZBYdvR19?x-I?91zpFkryE~>RQ)ocddrfUA|&RW zrb_}*l(ho>&x6=-sPU_d6tMRlVa&tc$K!ixry*~CF$^<7%aofI*`a$Zgx?;wS8DJ( zG+0nHe+Iu{z^yA1_=mMK6HT##>$;41Psp+4@rCn$JMoFTQif>U9arl%kR5Yk;}85LNq9COMNq{ebcn&t6B%iy{~D? zP~V|s;2EJ%wsy@Ms4@Ny{{&jVK_G}Q2NFQ};A-BSt79n*u~1ofZs5kbJV*pK_ZWKu*BJbJ7O@Da{jb z<;ZR0@bC<@_W+F)*L+OI%iI96wRr|W?{N+gnLPvKQboD^+Y@PE-`3aPKejRN5bekv ze>|mh7C80Owy*LO2<&v?;rY4++zZcD9bM{DUN`5_Oe=2MVvGL%Ex-TI5TCu?X0iVB zNgf_UnA+L@_1A+1H>%0_RQ;$I0b3}S4u&U=fTzV*);5x*C@lzi1OQLLN^ zWo+<6f=~Ikzk|&0d6|~Wo~)!Nn^ON{QW-}vor zwlHt;{LG+iexpipv_ZV-g2gPqjbLu&R9|AsBX|e%>8kiQv8d(+ZsjS^4%QLQXg#D# zef5(@f@B&lmGk@Lesg)pEAY>jghKTVP2GtxUNzO7zv#>^=*%peCd&Wb4f6Ojdy7FuU z&+$~B2Ih;%Y~PxaP9!eLkf0e7I?165M{U0M$J^aKYpfDzZ{J+NSie08hBW=~;}!ELEAR!Pv}`w;QDlJV`Xf+H)iDj+-II!kCFobgzk z_U3rr4J77jn{{;8Sq7BVS>8zAbe^EZ!-P7Y?1TUM zF}CCKm?cf>R0lJme@H}ebIq0WH2wtA6+wHSln8;NlU0+11htYZ(I$2ba?W}n6H&NX z8lV{6nd_JM<=Njhe)_DAu~w_S(zt4En0KP}qV{PX><4sw z(b?~+dP8Xw)mlH3s(NHTeH>m9%;$BCDon}~oC59l5*&LfiV_c~zIr5hwZCH=Hi61r zF$Yb)T$&EvSg7s{9kHg5Ric|c7a|ic9l4Uk{H(@6Px=>n=ADqsL5iA>-VUl+gfPP+ znQ`TzkJQR`0Hd#{{zNXIeqK5&z!Ih9v7qx$ z;qPGx84#B!O;x0uv-S zm#^Bc2;q}qN27x)Ucrt|Nt~)DFMQK_U)?uTf9T>jEr)@b;|S#YCGp|HUH+2M<`NUM z$>4ZA%0+f2YF2O%Av(^8`n?@-_qWK)2|jWe{HBEG3NTq5SjVXG-I)<-Z3X?3wO7QR zlr?zpQ~QaZ#CCy~Qtp}8(>{(sv?%QZJ>I!eGlw@`mWuY<70gJwEqexipXG(_%NAX< z5n%J~J#~6EIGLH$jl0q}Wqojg^B8eo!ew^heSFFoH!0L9N;$M}s$m>^(L8io*#-`q z9JyU)|M}R+sd@X?mvG}^-Tw~nTJ+8fWW&S}UvAj^69^GJz8R>6@_qfX)-fyLd}br% zf=cD#W4Axg7VK^ggM$s_^F(OH1-yxgdA^qu@Hjc{_7I}~?sY7L{paesQrcR>$ zU#m7~?M#2uG_)%2!uDMd`FC_LlT;qmdo&=hh-bpmBE0*3I>+WWGMF!pGN%&KH|_2Y zQ11o}e;1!siMhS1zPi|mFlNm}q4ieLAhq z8Oul0eue~21hU94TZAiTfnC%rPlks5a12w4AG&KOH!3#^tj-IcYDmtkB&fZkNUmas zS-adRp7fz1S`Jo@@TuY=rYWitd~sYe8le=jzazUwd%Q<*wjJ3nLro1*_!iMQ+;Y)q zRiDam+3e9dSr-^V7k%j9P%T<{C~%#cD9DCI$!`36D7V}b1Podray8=qtH~2llcBrt z&00SVrrFKVQR~W7MDKQ6geEUJ*0q%;2Hh7qgZBeU2x2URdq7 zUI;%A8Uwv~njBvNlWG8;noUyKpb3|QCk;*QIFk$G%xD=q_-0KS8HD=4A?V(6OOxNK z@`sM97U=n_X>8_*!06wSFC{5&986Vd$<#Ue@b^|)`9bbxNk=_u3H(zrP1GcEoaKm` zv>xJo{czVUGeq!^D`es@=Sk5hLz;B&(8V4`pe1Qifwpw$ZJ7ZKIKq8IMWza0ODF=PUUri21G%e2Es8Nvio4hJZ^Y4rxj&{)0C8Xa%gK%@=BDkc0-Q#d2 zeo}qEVuUPtY}e6r{l*d~ zOtEtQMcv-pGx>nmG{uX(bMTm&>%05=v$h4SN~#sD=vpv@B9Am(`xbB z?eyj8mC&$;`W42c2Fd)k!V3Nul-kgGyWVJ_1xpx2BH?Rz-Z772bSu${rmE}HL60Xk zG8(HHG*_|7!+AHmr%BF9=54EJB{+5p?7AFWZWZkoHT>--&B7el!Qed(*NA6m)>L}R z_-k40FGHQ)%^KcVkQilLr+r+EVuT;AR1C>-9Z9yzwA%e|81tZif6F`J6b0RJ60}z3 zku!@&EYB4QbD;|5Dq&}Y>psN| zH38LoAD&OphnOYN!1goH%Ja8lOenD z&X2r1CSUz^b?mOMRA(|YD7h)h;ND>{urwNuW_r*NMNbiSHe3OR&fm@z-g6E_^ zVUj-~tRfi&ch$bxFXfp(Nu%!wOogz|FD!f%uO`a4G>UeKajstI2nnE{KKubI=-Qpy zc4O*>kbv|Grdd#KlFb^n zH>o+#*(hb!&&xAVkkPMUcP~O0-(0Lg4&B}TMM|^jhby@{3uc$cT{2avO<0wfYJzE3 z)#lLN5T@TS*79FZfXX^mk{_Jl{Mk^#T)|S@_jY^8PvT!+bXoklrUJQ}vu3ISZ2!%t zF6z1^7A4X*g4Z6esko&_W&V&w+Zry}g3=U!!c$>~*>t%i5otrlE2K+UA4lbBog=FA z>P49IM5rK&rCn2*)S3+%#8NNR7i2U+h;2BX{`k)cuNUi)Bu^A~gqMPCVz?HLiLYte zvVv5`F8{lT`(E=L=(~{!N)jv{hi&xyd-VN#fv1}ow&&VicfNVo+sg3YZ*Dnfz_WMy z6sZp3UFu12#0o3?`__uN{VgrfnX#T)GEIzi1iU#9xPu$)mIQyx?OTl=6l#HbaSEuV zo|27?8QM^^x_VHEb1vPckcdsz}|^n!{B3YlfKN|{@`O{_F!5Rt#* zT8kt93D=)2{Eq5)9vs{4^!s}rocZso|JndRoBwwn{MQD+mhj(s@LwBjoeck-2miO) z;6rKsEceejpN8s>>MX6SANYfLmK$AowUbT!&vi&yL}-&3=a=Vy-asAM#w5MmySe42)9*V!_yL~323tQk zne7n4eqFBVfG}_T*8S&q{%}S|;1?Fkp#yZMGBOq{#bIF(pmnAXI_F3Pf}((e5PAg1Mpb$*A|N#ssUZX_GZql(1PG{f2nd88 zf--`X5CuaZfkX@tAcW9DNl3Cc&V1kQ-+T7#IlJe(=Wx8a$-Vbi-ugW6>tDAmZtUN4 zbdQLL$o^Y5|F9Af5lave5v|$13%GLhqWv21k9f#U$8Zsmz0$(JZ6Z0jM}Ujl!mVx? zi=YOM%>o}peT~eGL_|I$@7?m;DY6YNcIyu#o9J!xJoidhLY`Wz#o3#Es-M#?&Yk+C z`ZQO$8pg=V4vy@s8|mrSZd zS?J;1@Ryh9k<(H9F71k(4iIb05^lw_B;?N}5AYi?YSrcK`V0iYk$|)TCLla6P%;Vd zS?^lN8lM)zp2BWLVPk%(@v*6G%*s39%Ewe`U+OpLXx?`Be}139UY>%)7B0Hm`wIH3 zu`%;%@f!2CS9kn?@VSBqzP7w?f~$*r|M_jroz+J_;G3BOB7_fyFA*Qd>s}P$PX`IG zf+$z^zd!2eTA9jB-kSbP&`)&U|CWXg_Cy zzDk`2pa19SB3j966#}aup1UdscM`tjo>81&$elLX_|GIZb8UIIB7V;6aRrXvOe&UF zASJTnpL+u>Ol>=S;VV=@3EWv6{_l9Ts%^FjfHkkHs2kve|2vjo_=7d9LF?h2?oR)i zSToGgH6oHFV3z$mmXXN;&h#kT+?c61&#!Z1OIvPgC`E^yNB*cqeVQ6;}+4`o=2#cXxrjHXW?3Q zg*>7G@BP;s)eNU;*A}`w;KCI)SInN~qC=(E+^BnF*Ck3fa4ny1fORerR&mK&KgZ`P zFh8^c1i|Dmi-;dZlI6e(f4=s$%PU>16$j*lAR!3+2v$Z0*w?sQ07%M+?*WPON zruNnM|8qmgncqZ)WD_ae=uslMA>Y|@=l*}b@ZGcRV&2k(lG48sfOe|*e|_Z7+&#J% z0(R7C+q<-3NEk0?G?X4gXi%Yl9|}BtBT2qG2^RPE*XHYC1a9YBW4U#WjqZA?BTh_h zcwa3{cde&q?#nkz1`LX6bVqz^sG_eXEw#<%7`U_0F~yqHusL5H)G_xY=EzZ-4qx{* zcMiLV4{p?rUtZB1=WEL%*$yM^XiDSDZbweM140q}joS~-tt>&n=`%~V;OSb$#{%X1?SBwb*0j3>wJDJz2=#OVmy@F5CxX(vG}nTJTJZk|~axCHGICrCXRtBIo5hM-lt zUEcHZ<7RntpF6Sc>92n;{Gvh?*hK`e@TIVFCfQMtzBv7q!q?}#h_W}(ZZ2%Zi9slJ z^HA~M;Twz9bG)p-Pj!z3t_a0ub3`h~5Jp_jfDMmZVsw_;>)o;Uap8Vno3nW>w3ZiQ z3*^%9W)&lR8FQ+|=+pkh6rG zn-C>mqhL!#vbJksiz^0PSCOa#wzEPnIr#Zw@DGIHyuO+hx%JBQRDC93qbg$s!vhw=^+ zD!X>3Y|eYZwJ${??W`N3Sg)wAYnUgu%eL}PUARS{K88n(e*J2Iykp$p*_~<9QP2Hd zIjjymwChg5ECtc77qx-#ifaQ6Cq6}$jVXYN4}F`~NqU)ghwh@`krx$b2{pXthFCjV z&uZqcb#Klb*!U5Eb&afQpB}8XUtc#2&kyLF`?Tt(G^Qy>Py$j12ftxt)s z?%&=SFqtLMwi@qx2UHm(ZRmovks+oXzuUc&>YTGZhEw3{aP|#e_bY>8gMCFV5!J`B z%?_)0x~zS`>{_}!0ijSOCZ*=|H$4`7Jpaq+T3`$y3oO603p|m=D#g5N@6_d}N+KwUveO)#j*3L=Q!x|DyI*qtl z{=JT!)SHV#62G(H)65iRzL({JR50_vr6GtSCovgX`1J~~JcdQ5>)HG7kJbN3VwPk)JGT{8ZTN@hYtzh-zO|hkiL-yy?MoBfg!0zzY z>$__YNv#!O`W&)OKe31&t;|tDYMLW__ce5HT-{MlPb?#jw)<_SO^B0yb&6NQtHgc4KCQh#wO8RUG5$^Qd;kHL6}7B>vfn zSZm|i81(rH5UtZ(=pI6fe-o)IJf(kR&6k)I6fuM7m|X0HQ(C{Zx5b`+cuN_tWpx{! zy>HJmDdYFg!|cRwl8lC7n2`H}HS~dP+y`VYI9AoRm`r85hL};96P;0 zDs`_ud8kh5?>wcirXr;LHEr?{!Y*9-)>~I^-B(7|2a{vJdc9i}EW_q3tMXu$XkO(Z zc@#ZrVVPQ|$d&(Qn4D35s;7xpS!Ny)EB8EzyoZfANP_DXZR}^+^wJ zk|Kr=)T(%1*E^nlD(zUkrJVQNH=FO?E%Py*RQ)d@xFV{<8YU+BQhGA31D3z1|8ye*;rr(p5MrkpNSX{^AU|@8VYR@x=8x@pGm3`6LB1T3 z`zI~gPSp{*UIz#gvKoXnV^W)KM03R@Lz22oICtV9L4sTjd7A%Xf$DeOQVczM!M0<_ z;!fLd9C+3>+c6~<2v~GbLZI{w#WyGailY&afsHOQ`>Zo#8T_4ohMVHmE!GYKHPva| z|J2Nbw%c9GHcEf^BHu@+@H!NRyHj`%iqx{28pVLzYF{scP@{EioTxiP6$&~nZBg=4MTF_@QcI}_kft!Ya0|G`qPY4w0riUA}B|B)DhGE`&W#|B!es&F{az8 z+cA`XRjyEw7y~mRjvGlnJaran$2E|Px&CYUJeo(R&pxqL$ECd&zif3Y^V|c3Emm9t z*~G(_BlTD8B7RIsDqkm$0|u|E7yl#@7j!!9*rDNhh`D3S9c8>iTMWK-5%mPiT=cbq zVln#11H>BZ{MV^TD<#!@=kM*6&tkf+>g{&@-YGHkWPus)&P9@-s;nQZyzUE!tjf)WEbUi+ms(-fj*ZLYphyN&A&qSMlV*70$ zTf3_L-x-{i=?HXcc8nKB>Oi>IHwS33o7R-~Sk%yIjp}nTXPSTN^^xy8JY~0$w)K?W zu9Y`wB-Xn~X8XsbOh7(;m|n$~k(_PF@R7Zra(uG+5$LXuzxTI5m{-(;+MNoAfuP#1 zbFFZkRjt>@#k|H&xIMW9a_c$$+{WXxd~1g z&v6e?iIA@zcM`w**IHM;-=1X=y$-SVE}ZcUqsJ&K zRBHC2w*?-xpJ)*-FyV-pI1v$q2!Xvx+;8PL9yj8B()^>OaNuUwf#`g47bhs02b14^ zxcM9$rgrM^To}j=vJ5K>gx`Vr!{W^~5{5J|=hUEcG7Tw=c`* z@YAeIPz^wEV4_V3K@8b92Dka<+iAR1ArZ>tf>elW2U(!{Vnv0?3>G|Kl$dG;XfPM+ z@JbA#UiDyQ-4oT^8u`*4u`yhc*~q*cAodGGm3zF$LzfOjga)?ehsqXBuI2a@WM2c4 z8e4>TiTbO#w^x6>#1nEPqDdW)lgRVp=tJv{6~t+|nEg|)rhgQg?cn8Er+22h)FFr) zjwNRer8(fCDA*!~OD`ntA+qjQRp{UH))ek} z%~IC(oB>&zs`>zW!}E`%iQ9Umt|~)jF)cyzCBf#}=?9uzzhxeXepBY37{AanwapBg z<93KOG)(FOB(2B^5^!lMhU@u)Fy;e22G^Q+tibduxM4mH$K^vVaAOD0JqO(tR5wVW z4vPz%kLGnAk^@xNCp@&#`eQ=yLS=mpT~m`5jv}A=M>M&NlMqU&#b% zTJGNRWN3p(q;A($&kDgX?c*b%9o!{ZQaLg$%IFxld)s^Iz4eI_EA%GGYzOSx$(I+F z6M8i><1tI^Jtb!;yLniJGy93_>+N9E|4evy!fdY5iN7xsihXk;qidtC%+&5?D$k1= z5}t4$d{$--U9Pn(6LquM9T#}*NCZmxhppC(XChi+8`W>;+kg*}%%C$5++GD~mE1}` zd7}goiIumJXgP$g-Z>>c(uv$g$yP$zK=?gi_E)ltBJ9w#QLwhlB_Yp&SX{i9~dB3T2?Q*$peVB->_4k!s% zzGuwq!OB|aCz0sUCc~Je#T)01XPt+SpF-Fe|ELrnqjZ9waznq*l_OAi+u+_1MZP{ z6}2KJ$y@tQoUQPgfzl(WI&A8Y-Tyf%iyrg&HQjPX=t(F!quK`1^Dxuy+1184!CU{| zq}0t@8}8{<{%Lb7_nUWWQDR`W!hBu zeRb&jKJ{XdU-`J2*8sq2V8}@8ip>>r?)CWLf49p>QsEE1He^xlQK4##H~{F;b>l8Q zr=gtb>uaTD&kj#*^h^cpgES})JW*vvL~%ViTir_=$*S&a5!*L!JwohIgVp?A>Uhrs za2F3D(0NuS3_=1FH#x?s zo%JBQ+h%6nq|4tkGaz2e2R3>rmm0e9SAmrNJ43v2D))EaK&Uon;3W8t44E3A({=y5r*SO6IFS1T6?&DUDDYfeOmS5adA(R#O> zk1>v3F~6k~gv0IV`d!3lsP`2^RI-}CD%Llwc3}a&R;AgRl2=~4)^JGk>9SJ~zwx}N z^j$C-?=Yp|4*M}z)|vA%bAAYQ{W#{V_&eY^ zOm8aU@)i6@Gq=pWI-0ctZuc*~ltwe-j`=Ci7S3r25Zi(bI~|hSlvtRE=Mm*~lFW$r zC%4_zyDeX$FS@b{KccwNsJQy)la6)D#(3F4ndd{_PlT9~aR~nA>xfu{ z1nlK|jKUl}D9z`;^Qs-O($2Ep-f|}_HJ+TYL_mw{36Pez4*lQIK_IjU9XRTj~xfa`8ic zZ-ZOo%9uB}59)ru%1Gz0dTYI#<^n9ILvqe=0O>gtr}Ul#_k;V7+eofg4XhS-l2p0* z=tqfY$5Znr-VgLPOfP1JrZqs97FqV9QJ+!rSGi>r&AYx(ghm zKYb~vLnj!7jNb2obul>izyHvs%57t*G2GmewHBFpEbDl5@8 zcH>rw+e$1eM8!8#c|EVzeO_NO7ioji@0QysH8&%FoFsYPThp7knMOM|cdi;w)xEg; zR>GUt0mB}JqIQm^O$I7q#3Qcf3XKn1CoAB{N})O zzpBGJ|Lpbab1mxv#2I%cQ02W$JJvn zT)8_>Oy8$$LGd(k2#D>2KewyIKL7dZs~|vyn-$=x=i>gyzpnPu?u5~_uuenI?hoMH z(vm&nXF=n2ibVb@YtEl=hvA31@pQRn1d}=Nrdx|7I~Q{k9f9af?KU#H&!v zt8(YJzw`{dAf9AZ6djko<3|=?a1rT|iib@0zqz7B^VcL{80y8n^-T=IwCuZVjE4%o zF;GMDep=b<5}lITDi^4AS*sJ>Mq$oxS4V~BwNL{ldxA=w;AV#n$j`X$MG#A_{cHXi ztV#%Ftx(S+CVmASFM**-ZXu%)cZN9QjS!u>dbqs zX(HFSu0+OnZo82b?}Xt~6tyC1QoQ;?-J(BccoY8A=`xdd>9Q%#cddwIwO~xW{Ouua zAUqWvxDp8Broiso7ow&&wdP0aFvp;W2g*W$%%ZxXQg3`8apib|>@ROwpeN+iegCx4 z7HXdbEU$O2Usq_?L>_dH0uZt96SMH~v{~e@NF(?+fRxWYL1LKt?!PbmO@Z^TyAuHL z*`WayS`Ke*%hwQokz4l97tYoE;o52>lONK$FR-z*SyU5 zptnQ?Aj4$;L@3&tLAuwf2!LReN?_J+?UVyf8;M@%3aKO^-!sRcEJ?e6r+Z~4feIrz zixn6e!uAoN8~z}s8fI7>44r?~lBbn(?d8xh-$#=#p9*D8?WUpQFHx^NwC!SmKRF}3 zA~Co<@GY@;&_rZkpq;pu^oGImi>Qhl@Flm;CPWt5QLN{~I{C1T+A%(iaIG~m-yWPM zt>Z)c^%MtlVBF@$DR-=XYsf)0MMGUj(WAkCLxy?JGr=d0K-~f;_m-+lj`{|` z`c>f0e2hS8h}b;E@zL;Ctw?Ocog*9S~X_kU`9hCcxoq~ohHVsz^v{rkEIS90q6w;_{Ph3wz0}?%j$g)%+vxd=!}1Fx$67>8Y&t{XNWCF0 z{SN7z?Oy;beJMf@oh-=nLJlMA?)$xS1vE|o9Wl%x&X2TvPt(r9z8%v`UAq=)_@2F#+0z`80Nwg*j0q^`^b3%SAmip#VGV0kBDNE+d={1wQf zmJg*48LPs~^1tKBGjyA6fDE#p4*cIbrxofvP!tupG?< zc6OnoqYQ&>j2Ac)iP$O3CSSX5A?h0?IE5%=g3C{OZO^G+$-}Hm>hghD6&t&{ z8RZN3@p(3NKR412z6p?!1#?M^c54Qq)ovV_yrGlg*Tk;)OPkHHAkEddc~GM~A)%xFyS- z;;=WEnUeY?Z)5oBEWpGIY!qn)3>W7WUGp$};@$_h6ErzbPs-*U0#L((hh3hj|7R_I(ELw$| zU871n%S-#4g4>!g+U;{SEMD35OAulpbJ~)7T7St z!hCQ|ES4U^IUfX46`{aqiF4RGBy+KG70S)Yp!I!7^N4;UmLycv1e_%R>!-<$62~^! z)-n+D=FL3i$|v?^<=lzR>O9V<<P^*BA}IggVdf-t?ce{y0pQru9=EvcoM zQu!4zT+emAhwU{NL~3VVEK)=TRwNgWT3j<`JlP}e&Po4N^0?Bb>vXhQ;e9udUm6FXWWtL?IQI7o=T8KaPSH+r$^4gbYF;H( z$9zBiU4Kn4p@*J+#h@@cp0e+V^t8p%@?!b7t}t!Z(&1TRxo*I@4VGf}JHl+cUi8d; z`S>&XCNuiV^$4v~d4ITu!o9!;Chq-0U z37!;oqV`S|zV__S=3@ofjSS+cvkHgbt|@wq=!Bn+99{RZT{uO|mQroNkI%z(l$N8E zV@jH@zlWJ@kiiRh`!=6pk*5Bc*Z2i7hEfJI3czI}d=1+1N4YV6>-x99>6e^IiSO0M z{9?P4b%@I$CZpJ5_2ESMzISA51@|~NYvn=ybH86^G+ev&QN)|)J$K+z`ukHo&J3+e z?3G^NBS4vMAjne(xGs^4gazC`?E?Oj`&Ln8-za@-49_LT?irAJy?@VRsp2s~zcU-I zbWgUP6{Y$V%2V!5FAU5!*5z2&5Ae-yQIL@ehxljqnaC+k-t5pkyRR2&edlnQD8w|u ziF9fkz5xHH&83D$*GHw19fN5sD(`zWLtsJHB+~$*nm{|{6?Xe+Xt;BX`&wah-nC=! zlm>-}V-cU1!K*vQo!h}%;de=|ALQ1XyXLjA#|n+6)t1(&sL~QpI+MN!&a3Qde>?Bj$(K8-`O-71(_J0XLOc0@0vYryKes#cWA* zZs#ZJv{r9~AIVU-v?5wc+b%Mu>6q8P-;p-fuhf-8l&u%KfC?IS-0vW=bkqBCh)uzp zAbI`o$nvO>{aa&W?u^@Kr1re@FR8y{{CXZ>UNXg|#E+SN(Ng|?f7g-L;;i5X=0=a& z^@ckd`;Jca6p5@pvvW@?$E&B$UpBd&nc(Yiz&6eA*^mOR2Bl-MCRut>)xv&LUVek; zn2bGVG~QHD{v?u#EwBuP~G+A7x%MRpp0Yb$=@Kr^PRKaKQj&AL3MN_MF7?+J@P z?V$?OGU;*~)4hw7wn5#9@J%YjPykAIJ&Wy`TOI5=fA4gWzX8o_tVxAwIG}G`fNfgs z=+Qh0NcY2}$Rb$XcKG)XX#u=8$!ottA|Zzsk&2jl$KU5Xq$Smx)Eep@Z-_gZWZpUK zDc=U>^)^<@>)bRhAu73;hNmPQ<2~34$S7ZHZ;6P}OaD6m*-mr56n{kKP?CoKo(U^n zMx@!)`q>zBPP+tJ&gh1?Yh7OGiQpk1xXKvb%a8k+Q1UW65}MXLA$Qo@0%qKotWK{1l5;BC>(me;H2AqrmP>v!+^iTOC%9pPsyX1HcYixS6Xqv z+P?g0Xx8eDS)!-RWQAjues9xK+9k(gt^6}_7l`S1>dyDSHTz)L^Z0lw>Y>Z9LH_4c zwzIOy-{NNqUrwkOD~)zLDn8%-OC%%%fN1V|Ri@s+sT190BGHV%Z6V^ykuEh6ez@-w zVYGHZzRC``VW1O@poNc&QnOuIn0x9=Q(iP-FY2dzzxy<|+*~H5KsyjyLaeM44k zD!O?8s;UcV?Q)Rgqi$fjb3ZVqL%EHLd(M8e;TApybjG?Eo%cs^DvGGYd`f4+f}Xvn z8PA6HI*~hvSA&!v+HbE54Z1VHGva;S*GTTR+s?X%3K+999=oM5cy z?^-XJSgARlCKg+~KeVnmV&JdUp_O$P+vHa<=W|ysUV*zZ@JbSWD=neK1|l_&w+*ST zcST{JY`sNT_N%w@iy+12FIgk#aPk*s8gYPg`=D?|YGQ;4LJ~5!?NPYh>3&Q^|IyOa zvjhm@mUuw#YIjAD4brXY`{CJCAQrF8xi*W(TbO|&BUPW0yU*-ywhIpTzMrQ2LtQ>X zFS-o?o9D3P6U5(>uzrJD(P8IA1|AG%ziBRe@;=q(OY+JFljny-0+nSShIBI*m6;&_ z-my@VCQQ^7k+|4i7Qwl$Rd&v@+y*7NcQFa+z+?P8jzkTzwLN`@(JJW^vfNoj%%dNJ zk#)KFcm3pD&8m}8=3TURRY+IxJ>BJL?X2mRi;SyxgwyJnJ|Xh#lGJv2-X!u&EVJf7 zxXN}0;mr@$&~HPbAei=zQuSNMQ~BVk*Hc$6$c!<|SD&EE9w}(b#|#W1^|{0E5#}O{S zgNpCxMLj3u&VIaCo)A9Ikbjc5=K@wgV4=g8oH45kJ-wChL;7xIU{E@q@wA*ual=G! zyyI|*$qtrLDc#^I(b`d>XvpcboKuzg*Tp^RUfDp4=T=6(F2>Hb%|D%3ssCIP0(C%7 zy){>_3UQ9%CGJJJjqmFvEzVX$AuW?O2jc8lg5vC9%uA$S@jF%P^6CbgZSr5yAI?svw%5d6ng{7rhK3=gQf8qBexScm=8j+b-_A zW84@sEIZ!s7FXw<-2&fn3@)x~HLDer;M~R!#=Z?E@%tZ(36V}jXw zPRJ|=rZ*?zI}+Ohn? zMA2Ye{FhaHg$g16(rokvTcY3k^2N^VO3}BnnL|&IviQ?i)MznjXnm@QZLAJngFnQ2 zS9}t@D#`nh^WhiNb9;A!j@PS-++L@u)9;-bUxU)nv{)X#-(z>i6*QDu%Ts6ZhME! zpzXthQ6+rnC(Yg$Vfo(j6L)AQy{aoCFm@(_;efmDx*Vf7+BNlOqK9kq?>$REm;3yx zL>tZ&$I0zLSPxx0`O?H zVIPA#)ScgYW~j@eh5F)+$rn+}GJhERq2fz@zSN=W3{f8;t*bkE6aId`RZ%W2+2*{D z?)W@}+N(UU>g$&2FJ6Fsvxjt&NWYw!H zkaX8YJ6d;aK`gIACQwp+HoAW^{fd52t(_GnpLdG@UDM#ERRcxB0R*R>wLvV7VL>|2 z%lVMsjuEn3^<8fPBks(n?FO_8tJJ?t6rEscm+9s97n0cZ}f_?RVpKP$X~ zi;QXg<4%in6qHzZ;OtMrgnJF+FUj>Abx# zUV9^W-1qT&-k|R+KAz3odEW4yEdNl9*jP!)mV)5; z4ITU52+!Y$XN02W5w6ETH1e34GPxh6{$No?-DwSA-t^+@(?&+dv(>>mC7k)m!-SM~ z-Ne(!|MXjf-U-_}tZII#<+mj8P+kTvhCbs<0LX-_a(Sr>3r!xTfa(GP2poKUSL7c_K=?ll%5eOh)FVjtWYz`IQjd)Z3H}2HXHzm=w<^0TH=EGmc zLc}4h?!3qmFN5JPu6xV)<{OCF_fN6Hn?)Wx6giTRVsbO*+?&=zZzwe^O9r;}P~a~t zKV%x{*1Kpk{2n7L`xcC&%a9Nrzj3a2x-uX)MDEx9EkAPih#W;ZIWfsKW-_HN`i&m{k*<%abQ87?8DEy6x_NFUWtsjccmj9 zsQ)SxHd{UuXO{we_LxC=CTTBq)kDVsb8G9Wsy zc@qb!?bO;g@9Z=?^Uxk><^l;DA^kOO-efzfUGYy0@3xHpw%6Ta;27yrv&;I>fH+x9 zCw>{32^-%hB8gcK)x<{*b*IK(f7Ao?!fAxHT2k2<|L#q=i`erR^MSvfyu=GO%I8SP zc6D}iuU2>^&;c`Dya#@go8J&Sful<9vlD}B9VOPPp7|llx zsQhWkq+lr~Uy<>_N!|0#kCuTt2|JjpiVQa9i;tkly;@QA2q<3YzO=)0UAKt@{vL69 zayT6Nam$pw+8@w7{^Y5!)a80GsM<7vC~U+>9-00lPkK^Kva*@MPv*W8(!APM zS_Cj&2LUbFrhfUg3Uf&j$zeZ7o<4xPdQ5y4^v*eU8)V-cBTmh>J!a8!bDdh144Swk zj1!;i@z5%A)oaMhIkXJ$tP*)^7a26yX#Ow<-MqvfP_~@NVKU2!I~6eQkJnh8mKNWw zU!$hh=%W^+EF|<^?+bR1U1}PX_6DS*5FFYG4#ZZ3Kw?H>Q6iYyg!^CBql; z>#>lL^%C}j4qCZy$t4`xUxjlyEH0D6rsh%>GCmH0GtadqqTS1zxdCd(y2X{Y`p$YR zb#NG&w-pyi_TJjZV9?kH*+@I03y1A3dHg%!BZg)c-IgKwhj8vSp+EtmjZl{&sIM|} zb5I|S)aU;!VDAXOstH{*pk7Lhtg z#`5>i4RJG{f3R6Liw(zMcTKIeSpDK=;glw3=KA}v;Metz++1y@A-ElMw*Ywb|xDN7M{n)w*;rEG4Mwpv~Nw0HXc%+iZj%+eK=|nPWo|c z06-jOPr+OVit4Y0=N@F11-7DI)_DeOo%!1o%A~|l{y-Al!BNn0aFF+f{RoTL5xkh| z-dam0b?@wu5#5=y%BN_%R%`l3vBtC>ng zU$&{YQb`ebo6Oa-3*g|(Q<}11@q|PLXI7L6&_FUa;53wN==|$H2Dt)Yzn891Z|a5+yalBkU34hCb7 znU>962&gn{JeZLLJ@9Vx;+0RCgQ(3h{e5BGXiOw;U@f-ghY`sO-2EoPT#-}JS00eu zu5O?1odmtTp|`Mg%lW;lbx~~hpzprc_*L>2&6;imw93%xpCEO_inHgM_NulOxZ@1w zwxzyoUE3kvIq$URxg@W%oACQ(I9RLNme^QqHn5@ay@Yt73WQ+H)MG0Soel!|V<=YH z2*%fx-)vjnq3m&sAbJe2`6 z%b7@Q_=63@%n-eRQ=n?1&f%fz(dpmMe-_%}k=)8{{l%fY^~moa*YL*;V`KfVNKfQ& za&65id5D6T@skm@UIKKpV=khx*)P_#BFFD_Tf13B7Bi!|4>vJHZY|))L$S400N5nq zS@wt7NCph=OSi5rsyA03kX)|1kWc>AGI`Fo~K$WyE*cH(EGwu3s~jUBV37Q2g~qW~s4FGyB; z)IwIW$h{;TPr=YEGmI04Xvb~uiNpJ{&Ub_F_fJj3+K~smU&q-!%9N6D|8O}kP`SsX zHFN1rkooV(?9dTIrC$1b%eq%a^lRdQrWfCU-+g*I*nYYrnmbbRDtvauU*YuPfP)%6 zE_`1@#li3~@3wnp`~9)g&EsQ&E!o3w$2dH=EwXPkzRqdi`t{-RamHvm_rU8aRj@z=Y(%i{VUYj1LTGWkn3?sQ9KS$zHT zzjHNcT^3!8f=KyOL3xWIcL)tSYJ+Ob0NYj*JxP&ClC6TiA0O2_k{>BgyLQgD?;T1h zwSiE|uuVx+PXb^zN4-CI(8$?ijOtsMT5z~|FSj>sAhApTr7fxvnSTsk)m9^OCNtot zkTMl+JkV=t?lsu^ajf2A%4PfC4Py!B-rjm?dG^Y)q+TZ&Q@MI9PA&aW(CG&)K*&-) z+aTa~FzF6TRqBX8>PXeic~Z|L%I~Xe`;OX{PHHYQtlZNOht;WyoFyBv&ONkEYJ{C^ zm$ktue{@g|Cr?1$e>%Sn_ugyav)hr^v+iO~l{PDV^dMw)!5{mJtir$YuO*d8jAah@ z2bzow?)!~Mu4%W7xChlrsGq7?s@*N#&y_6Lm;by$^wwh(Xq3L=YL}^@nhdY*>;%M^ z7>PB9^6%vq3)Us09ZnG5ZdR^o0VJ5(q+0iDzYa3|S7%txpk)Ah+)w#3H+`-S=Wy|+ z@%V@8SvC|U)*QK?>ze)=jhX+boqZ_gww$H(sZ99Ze(sf?Q_I{I{RE9bXm-)t`1@WR zJ1)}{vi!Jn!=t`8&sx8*)X)$Wde?F9J@>U<5i=j9RTgFbxHqy|T9$G2(1UA&U9$r+ z3_7p~)Ec=q@44CO_NnRl7Z8c+KTT!ulykw))_081t~O$W7;)AMTBrXw){sY2YA`oo zPL^sOvmEaa7WGW6OJWA3d>(R^~eX zr14NI702Q$kQ^$vs71-zBuO2I;}do(`CRIY z-&c`)VXzVR{Cg~pPC?qdeD$X65+X?366||)F0fALX^3^%b<@RkFu;puWN&ZPF$gZ^ z1=-t9qoV}4YKA5VXju?rJmQOy!BW1GshC>wzT)FmDFGchwhBUj~y6d1mybbgHVOQaET^_sb~ zkk;#%Rub{SnOo(l&vyj}+bG%GJf5mcy;s_`-5%C^E z^|M{WNxvzny>y~O#+0#JGWB_1D51bSCP=~R3q9kavP|XU?ddju_<%VKXLyOiI-BzW z-|k&mS!d?e{@cB{$-)fLkJ%?YN1DDk00qJ`{)^L_siAocCL6Hl<%fbSt=%RW=UJQH z28J3Ib*exULsn53?6+Dl5B-X0hXQTNYx!sVWy4i;EJ~E_DpORBnZt2(bNpVIf_d+w z3}TjW$r%_eYsKW)=z9hz;I2QhM>ZjU`3(=crd_MQreoQzdlxnnHYPVaaZIR{S^zN^ zP!5(^$oNoQQE?zy0y(S=s+Q*X=+5XdB2>8P&ZlSk{tx!vJDTnPe;?N2t&*G?HQ_Oj2fXt5}n%GRig-6#1=D%)mCfoNJ4_NB|;*ih#||y4q)#l8aa()~>7(qXPaP4Gg!#>c z-p_sdJAI|XvM}tDW%_D^r`63W%X0}nH5RV@lGgQ3HA1_I9n4-$_=!mLzT$|IwachD z)@Dx&f&G#q^pAf#U#X90@&BIu1wmmEzHm1J==;u;| zTZ;;_C9LDJbB=P@<^zM?rPaIp!5p$i!S+_;cvdEwWN2N#y7x^0Q03d|*Osr-RhqQS z0$yAZw+XpamLBT#z3xNi{5V;mRdwTBTZ}dSfEZpN&%Z>OSOk*?m1(p`-`ZLFds}mw z=g48b7q#F1(t#@`sGaNF^xi7Uv!E;jTMsf)_x_|TG`NS%2u}} zhv!%F*K!A4cv(^gb+0b4Lep~ulW$kA{U(mG%XA*6cNC+PZ{c4_)X&nT2`k&TtlBDG z&T}73=Q)O*0qb3{UsLwGw!pT9e|noh)ni_J9Z96TKh8*m*W@G4s6(F(Oe+eh+-*UJ zGs#99PS>9S(G|p6_U;(lHEhCLBD4CA_F29@njCdO6HLMa5)Q>>UaRx}{{9uXeIdPC zUd5vH%FXZJEo*0I7b~G%fhG}UHF8*CrsT2x6dAVt)RH95^q@V-0Q=l|>C@lj%ihuB zRrgQjj3>l)Z?B?z>vKeRv{HGxc#Wl&_RZDq2>GcRnz!vrBX<9R;saSB+7#82VWyPgfAH9f9fdV+=wGC_ zGY!|R&L}L;_6ee*F+K{U3^p?C=8uP{Pfuk!E&Sy@cdFZVb!~?aX9?Vsobg~mA239? zhepM5w^}qZ^Q!~QtIJnGH8~?Zeyw*xSs-bO-7LH3{w9p@2+tz5SbY(XoCQCkiqAoXf=Zoc(J5R$kU4mKJn6H;5SP^B{8!TTv5Fn4oB6p+n!d9{loap8=v5|aCn@KmdXbs95CDEWBjp)?Ch+f#zy6>hoe0Q>3ud&^iuAY|3lS!%?+}c}%oak!h zQ8v@$rP6vKyFO3PQ32$+ezhWZ=&vpBRy~7`e2V}>dB1BvS5NBGm>~K3j`AkJeg6rM zouGE;&|e+E%yV&Q6J3s|(uHhW@=dec=sq&;(ZX<$YbG$9USk zCp*#!E3ptQ#|!M@!HZ?Q?A+ zQ*WG7)*9BH+t7lWVhg*}mE1fsK#|2ADk=Wm2I>A+a!x> zb2kpz?U4a7Pv{D|ja&T!JmM&HT~n@eQrI-tykt2@HDm(t4ciL)_z;yoc=z?6 zd<$kg7ART+RKMQ+SJ~csC!FMQ+{6^9Wv5-s2~FZ&OPGZj2PtxU=)JTk*HO>|j^ZEN zGaGg*UT7=0@g$Cv;9bE_am<;`vYn~(Ppapi?4`P_;llt0--V``08P)pp-m7sM04 zc}xHDwOX7?g5`PSUKY>CpxjoUhjv>}3SrA!P1&r%K7G(+;mmFZ+r^Ei)~O8c#HQ`NAICTavJ# z>I$Sz(89A_1HV^ozIR2^+_Uu9rEV>4`v0oT_{PL6|2;JGz9!_A`u~{W{r}DlWqtGC z*uI0?#p)kV6Va@!&A||+R(%AIt%KWsz)L=;<;8n;t|_r#l05lYsgMLm^It7+Z0g#G zi2{RXgqMM@Wp-cBcGs@SpxB#DY4*bgFbG_A(wci+IpvwXlBnO7aA_S76xh7t?}i8A z)R>uIQP9;{&qj34J;E-(3)8!UaW~%ea0JYFYwz0g{Q?=463CqV$Bc!kaOXNmC)!7< ziI-%+A$S^-U1`+Rb*(@e=U|KfSbgv>2u~{KEFQs}j?fX;|9eM0!J%!Z+=r(-!10(F z>TFMA1%t&>{T9rwgCDI2;+(Msbr>jLbB;8Cn)sk>~#H(4NFgK*H%uQL0+lbjEvlMH8~>$ul+-%*e7XR z4ibO1OqrsSx4eFN&TfYNSGWajy)%%>lgs#XA>N~qp3vR2(oQy&>=YO$#~Dp!H$Pox z<93bn4DTHXe85cS;SoE_Q#q>@MtMAL7)ht%de8!vm(7`Oq0eV3OeOnG3`0!Aq0X6T ziTZ?gHg_Vz_sEB}jF~ZJ%ij;1m>kgehCyFQK0DiW2ietjYnhqEi~G>F`P#IrjV+rz zA%Ruin)}3AF^$xJymwlCdqNjmyu(;L;u3I9i=?+x%@yl>KDD7a7v?E(qse2CAON%O znB%o(%O6hoFZXld=x^EwS^!=w;K*dW2Oq3Onf}TAqf@TW9 z!69E@Br=HP0P)l5S3f_JFir+t;qqWa$~up)T+6e#o6^DMyd-{hBpEv05^y2}l@I70 zjTo%lVVLo#@+4LphuAqRmXN%_BW7bI+9{h@weB{9Xzr9qVQU8hYz-z2PVEXDT_kpo zY5p%{es#wseR*ZonDikt=%xQ=;B1d^n@4W&CdYx!q{@Wu9hqeZjByHC#?9uMOqrz2 z=LaKBv}y#nP&@v3wq(9zh{l)x=8?wVOqER(1qFw}nX`X$MHd=3vP4H1Pc;c|R-OF$ z0)G6;_kYe{+8o)ajRaFJMgkbl5GOzjBmS)Em+tD1 z6mBMGk%hQ8cb1;4nP00X(}~2(&OLK?$>ppxwb}&mVAZLjTd#L*M=^D0Mi-_U{qA(x zQ~>+wmM|(~YD1RAS%w5ys-#C>MEh;r7ypt%&eVbr(75DEwzT49p?_x56JX1xtib`E z@@s7;<3XGGq?3{mJP6UNu1e_1%G0W-ZRa89)&Zc@;OZ^^LD)x?Yh+U3H~eNWa{;=| zBhKKy(jC@TJ_A zzD}1Ks2-g$o!_aaxD}VBptTm8cZdJ0h_=Wr#>&Oc>_j#(XM6HJdxpBJzk<=YNDc0J z)~68^$=LQ@GmyY{JyT@fgQTt0bD3Ss0YhtbRosA~EoO%IK+XPMkq3DLuDrpQ{*fQdqPsr&$vWdys-iox| zoBQfvsW>0?pP5}1BGI?U7;muWsXTbOP)RdxnwKgq9di^^;%{qwBXn4mnzC~JTf53Z zxf5cFLiT#a0RytWU7Q^4kkwJ+ombLYZ8hX@;EL`>?Ed2-oea9+&F-z{jqDRory$c| z^i1~44roat30HI}#CUE<@XU#hkMGxCo$3b-eLikgPSI5${aJ<87T)UD^VAP=<{fI# zSWYYz9%%)2)Kd05dQYfzjdaTI1DUlkvHwm#{o8yGMZZ{qHDYMoC=(x%E9;lYM<2$6 zo0O(67?^(Vc1V4}#3f!jJ>uVvOfHARmSZq&LB7z!PL~(WK_iDn@!pOrTT{Mm|+9rl$K;?I&8%o)Ws?gk6D;0YfO{k}J0Gbr{n=x2Be=w=iA zA|v%`*0ld(fH!j?cpEZgD}pxN&>VWnn?wR@-pqRv{z^izWh~!a`FKd0depc|5cZO$ z?jvKqm7abK2)=nAdP`Xo6TC0tT;t_T(Uz5mC%b1_F~W%re;c(ZGS5mrR}?AKoi3fo z(pS0ovFqiz_M55u6Au=LX2Aig4PVRyr||Ft^W1{VW~KsRjWVN}%Q@kopO8ls+zwZL z+!B?@ z7T(T!3(U(nYXu&_g%~-NYhoTZ_Gv6Vae}UQzlYj>+-4@CR?#a7x8T{_uJ+sg=dbph zEmOE6>lmZ@MaP#l80&0{zCfRnVJ?`hW_OD~J!aAc@?}XdB4mG9( z!k-pDZs6Lv_YJN5zGmag%3 zgI-qe%cr~!P<+4ZE;ytgsS|`iO^kNOefIVjWDu(uqY%T%yZwV1D5s+}3-Iv4e9h;C zn=98fMqo!jWQHBoq#gQxd9AMEnD!Q@5&0X0#uf$YCd@Vyf{iHM&f|Umt9|VQOv}tmqeKql zaB7Pz;e%_+&ZleOjIUQn`aBwfKx^wO>11d4{q*Y<%XQ`YJgNXdQDkOl1VDSaw>cb_ zQspqfGkD$Kc5o%Z^z5>_dMVtfyS8G!bAJJk^uUP#Oy0=}DEPpoV%bSw-`j2O}&LiJ(V4?r$CSqm3F zo4XZdaj=W+(r?6>=eaa;jrA%?k)t=Lp38#*GU6fDT5TkbxkT%;z^>4qbaG1+`9Xhy zK?hX-b6`9VHYjMJhMVOBFK_?sD*l!Cu%Fw0{M4=tTSdv@M$PA$H~3uE_aIfdQ-}I9 zhocfh4RuCGX(&b(anHeO3S9qW*OGrBXc|y0%)Ek2Ho+GS1*)*DC!{@92`Dm+13wr zjA1#`OFm2)uh;HWO!Y6`LqZf!N%IuXlO6NPFt9NYf2=RZs~(KcQNW66q+C8yXoqF< zEGa7j^aSluOt?F9`*E54a?6ggNyrHm4cR}+J_{NzW%KmE%KlPLxaIaI{cU3K_r6nJ z9{wHAV_rJ{c6+1n^KgnnY?6Ze2g%srJoAQ6Nh>v_rf{ii=Eg;1!;=?; z(my8;{~&LU63LTwAi`#oO#nudNyzW?U{8T?B_&oM#%4vyh*y$Q@=0Bm^@g3=qifc0 zPB_3F#CrgSxH|~R-y6a(!wuDW{zn5X+cAsG-khyu4hsFbxeCq!>ukjWZr1gWZI*ZR zxN|@`4N=h8a?|2s^OYX5zBPUSfMNEOL$Tiy_CviS?sAIf*gx(pnt)9QY+SgYK9*8y z7_x!btO_;n%-gEbD8COIhiq+)+;yOQrXlq|I9QC+#%%Og^g#(rc$k{_(txIkjIrG> zf}~av$k;jR#)4Q2_ON5Ac)j{nw}pUn-jOt)jn$-s+!TgUY|QVV zhTyIiv>6#)7P{XlDat?gaR4VDo;&ZFIpg;%VXMhquje*^LdA(i`uC89-@l0p|R$3Z6VR&1*g)yNh~p$%uuqb?o(YU98( z%iI2*WM>VNKUq#H!nowwZben-O6TTgE}M4F8J_Sl{?oY_9A3mYf`L`iM%R@z8{_X3 z+?mJejecrkb_;yTIY>jCm>*Xyjorb8Tr#xFc9$W329FLt#+ z!16ZLG$35D$M9zX!xu3SoVmI2Gfa<;{%tH5B^f`_AFm7l_$ls}XdC!lTK1*a-%cqg zx1f49T1sn7+^;i=>V9`Rkpf?e?(ylAaEKlurpX9lZEqlpD!dW+?o^{L;zpi;5YdG& zRlPE7+?zF9EOF?AJfRdLY-yEfN3}R!hv<3PockdzLs_%{puJr4jO%xJ)ozJ|U%cW2 zEFEgh*SOOO?c)DjgLxuE_(^L(`Iz-fbPPc<|4E4Br;u6&syJivgxAR4hqgp6dXg9= zgGJJxYwi#U|2Wj>9+4-9)BpI+zI?Ha-zWRB@9b~=HHyiQ|?8+*l+{H5GQ++S&^r*!1woMp`o}{#G~zj z0kxQD$EPy%kLJ{Lz>8CnE86YV=8zU~NBsN;em##JWFZ&$j8hFUM%+bLWE=Ar#t+yU z#kI9MV^?DU{J7@}2^Tdqe2fg9+jf4=#H`=0DUQKuv6fNHuujoX7ut0-*5lKO+ZEL7 zwXjmS7|qdU=u*HBzsY%H0d>*Q($hEWAv?`-Ct-#xr;R!d&yY_8ESm?&NF~VA?}m{a_tZ3-k~09!QMDWUu!m?{&|N|HX{xSOe4h%@2x@%xv5kNI zmQReEMIFc^x>CFfl2JdhhD9ZW3W@fv^r}*7ggzRFWp~noeV^12`J7_ZGXJ9o@pC)s zas&a$oQm{tVpErb^@H_k=MQRoXq0su>QVTg370)G`g15C;{M^N)VNobzlI^Q+o_~I zg(msFjEZrvlKP)VoLKPfVkx}jy#~VcI%bVRC&c7~E3s9QqR(wTYnuwx(b=H8|c*9Uw!@u!4i6<=dcXSiRoa2y6t_ZyAYFuYw18{4Pk3M+EHT%HlC zD&~i*CQo<++gZjhA%jYYU>Ea3K{(TyT)By! z^9<4d9L*O(rXovBNhfhfb)`>;`P^=2;U;8bW3YEQQZxx!P`vQhUCs#9Qb1`w( zPl0{kSp40@nBu~aR=uL1POFOQ$P3=~k)AMA_L>Ph&6$61%(cs9K5%OhiJU6~g(h($i&C3h~r0RR_G8Xk;&F7 z@<+~kQZyWfSf34J7^J8JcPh7rK}iJ5JrKr*fDo`Z1IA%cZ< zxbNbA!&7QB_}r}Z8Q}x_AQ5u+s3Z+k*{uE9TJsJ6c%3L|0ln*_GY5nS&DK$O38wsu zwWHq`t_k#)G0OVwG-!|ZSiNg86}lm3>V`c|XN?stP9rpadaV||Fs|}mU9lC{*_vn{ z2Bh~lCjkW*zf-C~-KkmhihkeU9!Af!^|9@*s&B8k+ zmJg6YHAZueM^G0qo|Tj?{~wVMu)m?$8{hZV@Qg?N_d;L{t_3UJBGZH@wEP1cv0d zAtvJw_k~OCVTEx=wW3e;kv6-Qv$saP^tes)=ce7&0KI$1jbCK?xCtMz*V-N&P8!nl z1AY_cck_GF@InVBk*!B|5O{A`IZiH#{azz*Lim_juCzwVGiM3<=K^1mC{i_;pl$Hl zz>ttq-cC!qgPxizA7+aesVw96h97!HBdX4g_F|%os`I0ao63`(gOVM-FyHYXuamx^ z7*L~rtL9owQor3$bwpE<8t8opqP^rLF@csVp3rlNiE$Tl`{=Y%b9|(}NvEFW2EC8! z_c?+8)*Q4(u5T|djmU$TN$Z3<$e%}#-g$^F`>_)$WH_UA;W%K-?iS3!fNu@TciN!4iQ-uN(+*98%-kbJ$3w9ra$I*%zB|JA+#Ppu zDs8O%+M$vFhxyit(P#CFq56eEfH|6kkz!mpy?H>L{zETlnf~N+Q}EZ}l;5LCpXc9* zX9Zu@piLRJ;zSq~-tbdpOZ!ZI*D?+#8U6wx#ugm4Gew`6=gye@6cCnPI~KhRs=za? zkKO+!oKpH?>G#~N!)S#$cOkX)J(6(g#|;$_2?tTVBf_MRF?8G_;7|RmX@DR0B|co` zriBjO{tv;A0or`LT@;ZS=-QXLh8sx0JRcqB8%hYG8($x>7JJCxvQ zj5QBg`0WKRel!4(j3JuUNwqv8PZg6kSZw$>{?Zl++UE7h<3XF4B6bqp^>(~Y;rEsi>i)`yJNjdq-4bE zT=MD_TkwD95-$3F*anmZ_Zu>foJg-KmSH6uyN;25mzikui_#>bUzl@7;(@)>jYlLX z-ADy-6wl3M|vt*3?F9f(_qom_V@pv&O8mneXwmCV=*t$CX&aJYo?95iF1Z zwF8NctM#TeA!fp*s%W)Gb%k_8Bqq8PGUY**8lT-BiPCb~T~!9Rov31hl7A|le?fl?hcIX28nFjC!YWGkHy=-D{JD`f95@e+kh_>**slO} zm-^;5;dw~HzDD4pzw)Ii-^}$yPPs>3MQ)-1q{ux`o z45mXr*`D(i*;|)a75d0~P{PMcf=>d~ApLV;pPG#m!p51}kI9YH1-Fi$I2t;+$}~_X z+O~NLol~NlIuJeNB+L4TbPw)v*=eW z;B|7r)l84DN;Qpw<7$VH3z5@LD1$|LsBQqV#DX@VbjYi0ZhvA%yy0SnsJLCJ=0x-$ z@+`in>h;~cu8=F|WXi^G`pwI;SSl|@!xO(tbo}kLVbs&WQxR>(^R_W~2W1m#xXpVIT3{IdL<+(wWY^Rdw_A#LRJmC4`n$ly zsQ_qkD3#x%N0|RPPNZ=98L!w(V@`s&QCQ228oXqG0x>`Shh~l)6=1G@#|>PRX9K*A zzb$HLca{g=lOhX;cz=lAetA;kn$B9bjNi*RX<|CIQCuNS<8uF@sFKAu&u{PxIGSC) zHktn}rHztC)S`Ui7x|Mj2rrqn6BU z4JFyS7?_Gp8@;ZX{svzqNO}Y{oVWT4GVQ++Umzrx0D39 zfAc;ppTbYaNKHME_#^TU|5^1zD#`)A@0Y9HgbK6!r|V@EQ^pd`BHDL=N5tTy1DOPMzzcD z$A`T7L^TfCB2-236SK&>qacV7{5POREhPs~Up;^jow$1gj4#^PlcQmeg_o!Xku8K8 zzLJv$iX_4Q#mUZjc77qx0q(xU(WRDi(7gDZ=3k%bU7K{xD@Uu$U#(?h=25rAK|RX+ z`@j<~M*`nq4LtLFss(TIpBB_-*UY@G*GEN)p`DjIaGK~39f|m~8gI!{A*1IIv>(qu+4=4tY4N%f(6T|vslMMb`v?d^XUlfS>a2Y zjoe@&Pyup`h|dP10>e4Id+_IRp^9fkO-TM3=%b;nbR&+rxaGFqq@9$S^%cMB(5}5- zHCpP{$~QN+rrC{KSf;fmSg=^n6SSYL-}P81DufV|%JB#0!#nYmqB{E%*xAzTj&MvdW~uQrr}Z7ar>w{&oAlDxa7%OwGI}3dk7-C3Gc6T zc~@sK{E4DmeFL7LqvGP&8%&WW@b$ivr*OiO8PvZmbc%FV$o%Ds| zqjTQOw(dvR~&K(o@^kva4&i@4-5m|Wu9Dpil~SIoYqxC z2H~sLYb6WrF1NHSv!e5Z6k_xLeHA)j1Q0Mc0@r6P1-Gn%q$6 zk=|ic`-PotN`0IDZ@oe_Mnt6hqY(HLiuiOr<9>qSS^Bx65E3*ar=oJQD!MgfOFw_7 z22xUv;G};E?J>1*VCVk3uGR8_li3umKVq=S$rDqaR4AwjPA^v7EO+t2D*nQ2U+g!m zF2T;aYbq7()H9trTdSfxry#xfFzj1X@Z(c0h5nm#GZjcl4a~to{9(9(i*^U5(^VYg zha5f=e;;k)PT7TPwnHj4&fP~Ks^XW)Ujsbi;)i>OJeE6DoQt$6O) z?LXTlxp{IbBei~JEf%tsdi8$XNnOt9fiDmE44&1tWASJ@%Z| z7gE}Jk6b&7Me6XBA|)rQbgTf5;RS@7AkW+L@`vP#xaK0f-%9-_-V7+C$v=}>fB1B> z7oect9KoiyjO6;2I12_D&za;nCF+S@as-z+*G=QsgrxW!Ed^qhJMhvi^b zqAbFnJZ}duK*PE=&QNaXET@(IUVDw)NzcMB$JPBjJ@#Q|GO(tZ14*^0zBT=#(B&o*;?IzXg;422`yQ*4~IXwFihWubmJ z=vy+nQG;2x6)o|8S<07G2jvfTBLM2KRl__tpQaLKwmg$7qXR1ddIt){TiMe8H9m=I ztexv5?X2J0t9T5({RQBTRCZE2y6A54!2|Jw)_3KQ^JsX01wPzLoonS4g5W)TzJWp=mF;k|!mKxTt=r%{6BWE^o@H?p z406ru*BRWAJSB-#B-`;3Mdy*jW2t$blO#Ysqjpb+5IPk)01rT{4biq8aU2z@mnm@*U8ye>HsQhyPh+K>CC|348?vEM~W7zz2Ej0 zDb}zucT#h+C^o~EtV4Zt-L`WsP9Fcg#|_8zY+>6WbFJ}xB>b+kit7<5bPj++sLXCn=@WZ5yEo6nyBw^lbBJpt|ITQ zu&u4^fryuyG9=*6D;M|YM?wCkXx-}OM=?-W zPxG^c&k2Q2ng9Ck@cwDr>!-QTIFj(Y|80`pKZhki|BGqJd-e4#ucQ9=RjC(z|23A` zeJ}RF-mm}rn#x69d;ZVM|NFuJGmX=5Vb8hiY)Fl2Wj~&Ik zrG52(Z^OIOT-YKz;S%r3R}~%{`=77beKg$vpD64<@0>lp|9`Pid2hJfKF0SS%zyW4 z)Nun|DT4p``G5OhN3$k+<{x%VA|w2mgYCajewXv@@d zp@GI|zSR|46Hpq1a=dyq^}HMV2f$`w%ApOFwN9O($S#`ho}{1XndJh+MBdY1wo-pe z?EQBf9C>s6>sicv4BRxdHSh~nUH9A0tf~;^a^sZtMtyctD+$Pv#_)=SZmSKSoZw-? z2tGaYdiJEMuGEX9@ttqu zGtX3RI!Vo`e{k0CsR!L5@0+^cCLs5Au!}*D86ZbzL-qe%J!=z=e@#E5W?X}evW}iS zq^Z7JRbvSB^T(qzDv`e#gPSkfWSHR9M`mMj|IAMPXWva~Kj6|Qn&!Ek)F+_O(TR~V z;xXYXY8NY!<}E9!mnH|r1H6yk&{wjmFE$z0PE+##_zx)uU}9=>_PHzPgM2uJihZp% z2Xx2OW4xEy<}B5hBYKQ)uU!{{?|8odf#Fm&Z-mY^wKfMl(g4Rd`8yStdT+8mDH^Z1 z{TQw*YP0II5+&T8)VP40|Jzp>`PNR(&m4QLb~-agGLe z_kTaa8-TQJ?(ib3LaHZ=SD$*Z?c5z-X7K|cv0g8z-XZ3Cmd4Vrs+H~-X5?u`gWTo> zGEGkr(J_FW!e)TCMCrQy$rGx8Cn~Y`T{y~ya zN<g^R^l|d?Obsul(H`T!$~glPn@uvlD5JJ*tY@xQ*gfa*qOc zlJ;|1cITt;-}-uaC5PU@VpVd!JEV-$YTG)mTVet3(N87V7n-wl#GHivft>BR0;5Sf z37C*pwN_g9ou!3C$jsXy2*SyQgTTP>yg^$GBeG9HayT%+5eiuz3TA53`Ybbl_bjDm ze&CfCUKlqm8_2n@ZEQtlTvv<((|zuGn{id}@$Z4Ck5uguC@sBxMP3_TYASLLO}QYR z7SF2~_rQ^B^XanCW5#1=?NiAFkJ1&K_~374pE}lN)*7&`T!`*pj*dDU(MIDg`MD~v%qA4e}k{%vC%!~;)k40 z48`73^Lwx?YQi&t$3b4DTTcCb!#p`j)k|}dFd|pu=iy_?HT@=0E^MWmY zuvy8pfyHnNINz2U1x{^Q55-@-+EujoaF^I!HcENn{!4(pM#VktTN(x8z>{tW@T>>> zw?NR=U~%$8rgHL`Evv#rfXT-*yj_CsZ^7hFChPYz(ygLD0N#bQ29AJR9gD^SKTl7v zNB31sTZ!8p@{&7B%#K$+g7+dtaC`dLS4>A;^Ze#i0W#3-uL9H$Q(I1H67Bj;f+;U8 zs7)NR=KNH-I8h;#!wAGyh~(7G%>jYzs~^)NrY9?YHO1@HNY zI&$A??CNlMt^4v7n`mw%DH#dmSR{_1*hJ=UPsv5?MO$ZwPt9qwr~!+VyyZtsEAB|> zmY-PGW;OPC*saw_YiQDC)HcBw9(v?~BheC1;}Jxya%>`S7cvO*Wqx#3V^Sv6RPPrt zR&gn)j(QyprU8coy~y|7oSjnQN|{eV#b?Z;7svjHI<};5bys^0O%AZ6?Pk{8sTH_D z9>wh0lY1D9m~7b!;f3#LblV3RoXUR4R$a2 z2mX`zrGGyB7)bkLYBRbEe+z-~OQPI*=4WxP2EE!O9YAzOB#VwTqv@4XqHa{)!{LmM z<-r~sCMv>M;fsa|$wC*$8q*(W4wg|4SanH7?7&pMqmsA5RypI#E&BeVOag!i&dB|?yB{{IUmVQU&Qi3rc)WrR{N3V zl`DzUPVFJSFctq}B_s#@BrYuBGTwQE;e0y3NmB&=IItiT6!nGYS>rI^VE5d{F3+3#ev=_9G zz%!PH7()d=Vm!GOPa$TkaQ)&&iUH?Riz@`sOnLIb$1KNi5W{XtUAt*piP5buPDa;q zpZ2a=`tIYR?}0mrGEF(f%iOM__<2}|vXm1OA0dS5ezTf2#97E52+#+bkQ$At`my*+ zl+vj}w>5fHEBkUw6{j!y^4r~TZ#W#_bDQhn9Yz2ax5bY~ z+;r5Z+1jYo#`43fl_~nG`(I{MCLP6#xUIf+G%cmy3x-}0+IK}8kYm9kw&lHrv3C&l zgSJaH;{3G8>H$M|CN0+tpcaJGzY%D04g5EA(UTTyXy$2jHhqXGFA9z?J8C$#F5ZH- z3&;!eH_^Ts;v4N4ZHo8)Qf&$mmUwuNRGi-5;>cBz zHo;<@Litb`x{AiUe!MNfzvJvZN>W%d*p9bV}i!D~a4sV&y-5I@HA#kDETjM!cJx})jqvd~LnK6)*Km8FpiEdR~R|u83eB+F^K-si5{`7`lb%7}* zU*`~sVlcO5R#=C_$@`f*LtMOT1hit$=vXGwMv^p4s!d-pv$MKFBSD7}o^j_tHY+N+0khPwS5XR~*w8Qpv4rTSc5HIULc}B(TJrMQKFj zQtJe&)9MvF5C#D6l!a_k^HQGco#dE2U2lx$w4PiD%qxU2hgrZTO+k8NAbZ|m+dHS^ zWl4J#c zt;H8&ufQiEwejLy5)Mi(=tlR>iJIXn5a5 z*jEia)U8wAR;$|NmF-+o#2-h+dlUdor$xbH6pDq$duq_2TA)Ucsb_PT6w!@E2a26Pr^mAE|&Tc$k+pnCVlU8Rj?igyQT zVVv4(CiDg4W?6+XmQGewXbOh-G45j@(jYdVS2r;!JEncEY<1s`p6Gn@mnW7<#DZ!K z(u;GVEo-Is^=7&uLxm5WwUw=@-01VGdd78`VJ1E^ZSio>14_P&U0KCxb4czD3unD2 z&vUmzxh*H*3Vy+{1Fqr$2(%9Kw`%{5&wk|xkZnp|Tq1`9-;=MLqQv#b9&?Vy8CsVo zH?mq(zl02NuJlWr{Uk1OZ|MXGN^nN%KvqV04-0l1d3@^PnIoiWWH&=!qQ&~7r*#f% zDajmSZs|$7#=sw9m?lqVc5EX<@1p`7gN+_V$9FHbu^_1g{d@+sAIkI#I(nuK0_a>O z9>5vlTF@xbaCU)@DOfO?CBFk$(qzNn!boB>+R%NLQdswVyUsa}osv2>=UZQ%Fxa$J zZ|9_j!RvOVC!eW`&}-WHv!&o5Wxq8Z^q7UGJv`O3Qc{buB{HToQO4bwEw|Zw$HS7> zxp}6lL&Atct~(|&7j$9wgfz-anBOXlzfex~)aM-f3WErkTjvv)~wif^}*Ql zCkQ9-%L@O9Mzv!f&m1%J3^8Bo0F*5r0bIxZ9hR266#hKG&jN7_*7;66Y-+W7Qe8kc zHFR5hRxbd%@l$SzVtTNU+`HGdDqgz0F1S>>rGYr3F_32lX zJ-os$&m>q*3LK5BG6$Co-X}rsxSz}iemePmNYV2L+%~8=E1gb5YxvdyL;ex& zyg_C@JhW{CE9DUFboLcG;_0uKn?m+FlXjy19G)IX!6?(DM$Xt(0Expj^T<0!HE&r>{SdX55H*l&BXuYE-`F?wMosKXU)t3QA^RBGb_=f!iqP&`23`iP$puMrfcr~jceel_#VD~6nSFfLlf#C+S+&3EptG~|<3~cx2cv+fMF+Qgw zOse{-@UQq+x@gGa6lt20+@aZrSKko7y)cKr$V7@m6wtjo0>{!!RO7vp->jLRU0buXUMtZ3z;`zs*kskK$+%A^>4uid zzX1|6yiOw{n=%lqu_U>p5GZHVE(nrsC>G%VtRDZPNEesr4ykTM4{1+ z;YI`7fW`c2&mN=cn#{eJv|GJaSEHFXDZzD(q%SulB%Sohum5hYM(TWpUl1@2bE#$O zkkqL$VnL;iqCw55qI5o4P zM%)6Dyp9go@szBGBy;B1)^AA>3AfLUV#yuBu=uKzaqyGu{^zHR1Q7!8Td$#B%APi$ z#P27tHLZO(@geGUh>E6wY#_twAo+a#Na3FBi_husk-GTHTu?LpTl&BQdyZlU5x=K9zhlZ4q$cCT-xXJK3`I2_0g<{ zMq&)Mhs)zX0Ytq^>K$ET3U7jqiUwGFu0Ib7?{WWPW6j5! z&woQ(9zLj8c;C@dK@ljWafJjVw`|fVufJb|LGd<5&udWOLEzyHCN!YjxARg#fs{k5 zm-ZfKjTv_X_0j6FAHDsPL=z9GVV^l-@o|u&iU3|WH^fM>BDk6iHz&qjtPG3A9ax?t zM-5oQ=+G=>XP4Z-)NumSd?L?(i z5y)IuVGQt(5VefF%%YTL%$ol=^F@%c@`Y$4MY76`=ok_XwYUsAeYzhI9S%y5R~eD+ z0{M*J!ZZ}|M?XbwT^l|oJ=220LyKpNW%vHoxkMacRW@GxVPAfkWo{w*S1l^TKw+cd5=MWS` zS6Oh%h`=2G0t`hKE|sfWQC3I+(h0p%-opp4M7iFea8G9^?0 zWGp$70fX8h?Gd<6|5CCOR;EF8e<)~hm$g}NJu-aq^u$_$Q1#Z&)MwDluF>kukvSM9 z(;t|(;T@8FWs$n_856dFE1sEuVc($#sbzEY%;!t#N3X9hVn9+S+&s|7axfeyI#8(h zS>4BjX$Y9eV3`H`4JgWy5bfbuY4TXqs<0R6aLS4S^?74lox!+|5`kegAN`9FlWYA$ z?Qrc}(jvJWgF?pcXfK1F#|TopQ8=vo`v$Kp+nne?*rXbfzA`aH{3DkELq5NSG~@RNd9_e~x!{_N>b_txY58E(2zl@B zT5qLrM0!-`8-_eoXu;wy)NtA%O=p6dsU5yedl%!XUyDU~(VF=dG3hwFmLoS9{Ylpi zDlrtg!-+E@6NwL(^J{YKLy7;mJ70n8cBIFCBAz*_x5qUXRO_h{e{(>m7<724 zFoVd~{ycvpDxI8j&oIi`@e#)!9oz<%7(L*D9+Ud}Q)u0bL36Tn*(~U_sHU@R zCxZlt4_Pr*mp$bAh=Zsu%G*W^uW`l=V~IiArh&CpFc?=8U~N)J6veda*wobPSCf65U`7nTQVCkma!=XSn6>?RnOkw(Cpqp z;=v&!vzl){UX}}u^Y4G^+)5SgEd;H5&2RWeb12a&!d6Aw%RDjslDX${>SINwM!%Eh=q8sg}7v9xb;-ulyyI#KDQ5QD-{#EV}W zgGsOfe^xwK$Ov$Z4rdY*xs>1m&<)<7PEmnIzb>tx?iY=Z@Ut*q59ccOS6`8e>D*Y} z8iWt9jbDLT5Y1oUSUHDr8FFGE*>NCmTH_?6?m%+Gb(8JMd=I-#R+Y{??vz$~Q^VaI zbX3TgO>@)K5y?a z?p8I}u>feUOx(T^>K;BH?v2AJBzqLVug8`Ib8j@?@^CW1tx)BZ|J2jH!k>O4=IyBB z&&)tHIl%HQ*L|5b8|6CzZ7kwBXZ?EGNkSqt`a3}&Z0v!9CRdsKJ_DLocRQ|bj^LQY z7=9+IqWLR;N%?FwF>aHr00_~1u~9*ZAC|nU%$0-au-=SU|4C3o-d=K07`q+ndN8@< zFZS6+`v=c(%y^>PDrKT>S813$?_!cXFDfv~j{psOb{|0;96aQKck9k3$8?!T381rwW#90Um8mMJ5Hdc5t(fW?s5$@8N22t!loC@ zf6H3Lir9<@YzXbzaX#Er=Im58r@^@&(6-J{#Qys0GmadiXsuq#a2&6O=uMY<6;qe$ zIsJj<+ObA`TtoU15uMqX;6T3V@SuBFy}!jPQ+KFwwD;mGtmE(3435mZM-_o@f?dU& zIuHKhbTQUZPkD;~EPN+=dOtN;o+J~0x91k3p3k3vb}Zpu=A#RsR=vxR(4LoN{E8o? zQ*+Da(aNsAou3r!D4Yb@I9*KK)pQJn4fgqwE18H2ipmrf`*17*OC%kUb#+df zI8A3$idGP|BFzxS(!_e2omcm3xFN>Bc?~h9<`Eu|muanVy+C_tNTqK&%R8<)P~AYn zI5@;aK^ z5m^52-Nl(m?A$1}@7x#9U<+WFYNzfdwOfJA&OuRyLNkg-_sUnJ;KPmLTQ zPcBqSkxoFfe)tvLkB2Ev|DJU}c8_bJ%fqnnRO`i(88wG4@nAsJ8ht zWxjr&%Qbt}E1$GAMOu?Sg4$c#&NYl?J3d6wqLu3Wukiz@zx^|ye-xSMOlz8LVqy}x zKi=nwtKiI=TH|KyNs;ppSKjTUM_+A-{u|na|9u%sN3PB|5sS8_6M5K>_{oBw?>UZa z7n(XK@WTO2CCB)!b$Fr4@E=Lm!>L(Nlosfb32e0oZ)&nNQB#z*ljSF8!-TB+^HeRb zxW0WYOPn0ZM%yeyo-SuME6k@R7i}z9Pw5}W`oy5%kSR>Up6&ScyAL1b-W>)dk`vdT zOdWVY99avoEm5(89cTQyR)z3L)7ZBMY@=Fi_2uJYALqqEat@Sn)#;QolR(C%gJQ;y z$X&??Ni~}#KFLzBbE|qTDz+Az47*6p&m2hp+cSAAutx05!c$O93tsp{9{Iz0_(jFs zvd3I=HlDHPx7D5%!=E;1zO3R8TEZ|S*yN|tod~hA6(^Ezxg+9a- zIPXz+0Q5vlr1rk6wooE=fO%@0hL?oi=P>q%flW+|@W>@E6+B7oA+&SpY|S{~cu18V z<1|uwU;gp&AJwSQnYI19(UHpB^L@}h}Z}7e*CpvNltEj`L^z6-MaYjY?I;fHYq~t zl6i*^qTlf-JdSSRQru#)qBFuI3*Q{kU%OX&>+pIIubd_r`lL7FOic3lh6<(&!@UzM zrW-yl>#!0~4q{l-cFJF7K9l;VAiF-qtL78ea258b2KH{bdBr4B1g}GXd4!tRl57;1 zBkqLK3Q@VC+|%Vh%neNznjjKg&TTFYeWj98_2|4^uqNTc(`C^cPX`_17c1FDw(l|5 z*jbfsQhO&-wMik2e>C7E#>$k!x8|gNyEfK3ZARo#R;JstJtYh>sB4wACS&^yN~?%0 zdWghZ=NE};Lm=Mxi!mbTje%3a=;-I4m;s+c%|b=o*+l4Sk4{$WL{d@cg|7nb>gxgW zHe7J=Yn=e*0$}6UuK+4_&?)ML?6v%cxRSvoKj>QmB$YuV7(1KBF1S(GnWVHDR%qdO z50BzNY3gya3?~Z5FQg6D2);{b+`|mW)pKl>q((E3y3m;6G=8qZa(KbF{PB($#F+Q5 zZh|w_U@2M!PH(kuc_YAqNF*^lOM^;Ecq>L6=)(cVFT`_!c{Fw2j^+=krJ>`Ch^;b= zjsiu2`=pLvSbtULb^+CNgPre!9_VNt4oEBJy9HhtYS>LehpLar^KZ$#vTLLtO)f!Y zs@kkqleP3-{s#Pmgi@j!@awP)5dd7Wto8@#orghbr{eU~EugdKKLv}RALbtP*UlIx zjOdZwsB6PV(HZ~daD3MQDCVA|&5kN)yB?HkeqWoUMc9RuFf3-KT$#&WHOdGY41ZRD zV*mT~GaFEgog$=j$fni++J!(9y5(wIuTMYh-$Yn~H)$7x5wzOJ1Hy_uXz%s2|IiJ9 zRfhw>tGCNuZ_mzIQ54J~doti}I`8Vg=PZ0MbTc`tpLpV2#M)$gow&2hLZsZtn`s$< zO{??xSGqWGZ;az2zt7+dq2J5+?>VgTwfUP1@+vRa({Uh*st@q|_670X=ljote}4Qw z2><*q)X*yBSL2CGUg4%q+T`{yV>i{$d6UD7XHy>fGL`$X6YWf%`zB3re%0J0`PaV0 zag7^Jl7FtozicJyB}%-YBndQccGbu(T2pa9=-y7ex=0Aiq;E2bF$Jb9Y%6Ab1Ds2s zJG`2%(Bxo^l(!8h3~|x7x){_rZ+y|RIMAK|a9JO(*f3MQ>t+J^>m;6S7H0s&8o)e0 zfE4x2E+pk$g{_}lCunrPtU1YU)fe=Cx@qcAHAb{vw#C*JF4C_R0!@GJ?ovV{0IK|^ z8w)G{2QnJn&`rF3^8F^}&W+$W?W_~8l*Umfd!#OTWd|Sg4cRkreQeDO981EMMKk_) z3`zRbDAXV56B_5MyS#J9c{2*}p&c(77YO4EG*KN&iQkcdicye>ZQjTY_sbfAWnN5HTp=1D+(JFmps2a$@1u?XZA;Yy3eIy7vL}xApn z+Al$zgFae(w(5*?7K1oPC^L++u^mMNEC&l+f}UtnX+riojOTHY1Mh_Mh>A}^g^#s^p^8a}x9g5YsScNHd@XWRe}?6{Eec{J`;Lon_J zdx*--ES{c&ANCM_EA~vwCdT&1qwRc>H~}8z(#_w)6)08QIlBW82j%Y0dkYF#E9V_- zo)UW+5i0&;oAbb#$5QzW*MxIEW;bf3D`?*pn|MZ*3-uSIURQOf+_E_r z$|^j~VPSSG*gLIw?C~5x7mhf@I4TK7x_f1*Y4f)gYljLBDZoP`ddRu1ah#2)@$JGJ$90ornGPj|0!A5|v=`d5g1 zJP?9lReSowo>|6@=Cvo-%hw^e{v2y)ygG6SltjqRg-H&#a~sq(y2swvNfmtXb}*qz zb5omDVpmqorGF>K|9UnlIn%!Ba4r{iFyxHmXPhZQ`>>a6QSwq}(OiFRZJrtBQL?F{ znv_v~^VC8D*n^k+!-vkfwG&G%ZojzSxEzN$%8OW0A>`wpKb;}sY!oE_`r zKW=AVx9Od#mMkt1nmz0jO2f8S(03ewsFF$7IOEp63UE9$*=x|R8YRlJvX>Ii(Rkx_ zv}xcVBTITwHnOX2bWjiKX}spic28%V9osHb!Hy0Cn{AZU>5w-}xR#zi1)O>3;t_7n zXI)0WeOfc<-3lnsf^m03H#WcUvST-L&R(UzXicJR6e)@MakqK7BH5Vxdca$}r^Hc` zvD;pSaCbp1s$np>(y3f`Jf$RaZwI$+?QQMu{k_$p!4bRPTUAPH*u|qw(CtiqdE=u~!1+P~akK+mERf7Yt z@HbKGi}~?mCC_!3Up&5Ly6_#UvQ`M7yN;b8Z$f0{6&OSo1jP-}=CvMDF zZ5*MZMiGhXFh6SLs#d=WQVAD8^9oa{QAwh3L_Wh;e>ThJra?zt5Z#xV6JM1$Z*;H< zurxnwFK=&Vdp~7{EmkDvqrm9(sk{P#16){nyQ5rGdMxbm<+PPMz=`p8cL~C>@VbdJ z%*h(;mV_NC`jsOE%KPaN#^@0zoSyH>vJrur0=cb|BG;7ln)2LzQmJwDBo;f_<^~)<_tWm$JOp+2T#m z$zIvY_d7pI|B`#FR0 zthOp|lIaJwS{{0NN3os{zq3mETWzMr!rxOdL7wG;JeUeZwT-gD{I6^r-$5Mv_L%L>iX2eBV92qw3da#Ou2hEQlOvAg|o9D6U{xoP+PjQ_2>BI z(v+#eT^)9@2$p(~uR>v7KJf|puW+Zd%@=lgcG)~*#{GH5O|ErEkP^C+kN2vI4z1|| z)pcF7;|(eH0p&zMEco3vhK*M&f*W*^)djkqNZe7Cu#Z^};@6dr*ga$9j+U($eFL#- zMdduJB2@N+slB6lK0dT{&S-fC;L0+CxC8_)Ja+XOjc!5V+rlqo57z!TV+qOcRW=@i ze0)I>gFbqs@R;$XS@Lf2iq*m+Mcd!{ls{XQJW%Fs-r+EV{HV`?`q(L`1IJS*2uJj* zL^AP2ToNg36t3%3_y_X>&)S@bU;;i?MsQWm(8dV1CcP%K+~g;s+++UW_tXs2aec>t zn^J0r^OJ+mACEs@+9K%pXq)==emX+0uGi3+8xqcm$gq-lxbS*qXy=|hZcUUn0pbw@ zH=n4VGVp`cGBDHFPSS5V6Ai$utSLfR`0OzEv8OV8lmyM=5D!Aqlj)y6m6?vE5Dk1y zn8!loQbJ3~LljF09oPw)4UAib#QGfbj6H~rG2ul8@Bb{-{>xkgpTXrFRBuajKR1#r zl^ZiuE~pmLJ8Nrz+|=buUCbPs(S&e3^MQG3otLM~K9p<~z3`^>9lJO|8?x%^QriP7 z?9)NA>%A`&4(LO?47gTruRY{hGV4oU_792-Wu*0yj8|=x375K<>fm$I`h4w*mnK@05B&(sKZKVE^-N5o7AG$UoRPUps#?u&>sD`IRxO8r zU=}2~w9@~i)_dAa#h4^3QEaopSa4c<{8|1oVs1jFnU;sH@t^G|r+LUEc8|uW(B!{+ z1?J=dxdZsX!f2auyR-36DW+a$9F=^2A8ge;OYjM%67Vwg)B4ep!X;<*GPLa=`c%0p3J5AOlJDH;!$K}3YSfNErO6T}f zPw@J3NVpEKFuHbE=nIK&0VxGP7vuF43qbfA-Tn%a+1}@AMfZq7W#-nShdjo|MgpRv ztoDEEe8YsA{E4;|gAP0C)8RFJ@YnIepZrDNIBf?j8I6tUF0;Rvyv>AbAWpcAgJ(;mfzB`H=;&`U-{)DSS*vIX zDEu!jLR%Jte8}6g3yU;pWTfpamlrRcn^@=Dl_x*TMc=;=oxC4NX+%b9q1y*O84@Yc z-X<{)ok{|on5)9nw3^!3V*8>1$P98s@NrP0_KHUP>l2&pnV6ASsc&Qx$0g4vG>cr? z>f7^faSGr*?0s+{-YkPF(PuYb&jSRu1KWxooY}8BQ_lBq3!CV&Fqm)RcQ`Ctx2NgU zd}-TyOgpHmU>W<8^hj;db=<0UpTv-#g0*Y0lg<`#{ZDz2&tH(;=Bg6)3B~Etl|ccFeWhF=696G84|* z3qs`-Ck2jw){l9cnU5us2Waf|U-|K(<(U8aZ|90O>P=mhed37nWHAMrU3=BnljMc zjm<+X$ogH_pfzxAuyL*!QmSeMTmbpg8D$A8ag)=wN>%ENxZLxq6C2D?co@qfUR3hM z1vG%{4JdsK&sSSJobID{izg(&xJ0cbd&iF^N|wYmeyO# zlR4iIdE%(3yuzvlg*$*Xk0If zb7Kcx9g=~W-&Tr5!VTj~BJ23We%>N?wefcI^Vwbp1?LfzM~%nA>^t)^u9+4$(Ly)Y z?t&oX`-Kvy*EMZXIUU8_&GuxMtMfmggK1BH znfsqfM7VV~4_TEXRuen|b8<2Un{cAES;@t^&N;PCtI0joypJZ8i@))amb5HJMNo1xf#Zx7Vob8cnC*q0v>l%`Du?K z7PG=8p!;wU+D(O>Q33UVc&WJozD5PccdcdLu(p~Ks#*_P(s!-na!A$$Wy_T5ru<;)wO|8nEdX;MvzxH9!5~-&9 zBap7t8u6Su$N=$ir~%G6#_SN)xiGA00P95Z$!%Hol8)$w+iu;Mi99e5!S!tp$K!YWz%96V5l|e0(#?MOano6=cQqyo6-fIeV-_6jL!rgwRkN$$~>D}Obkyn9BU0)xEM;C#ch&BHY0tQ zXKNLu$`!UwMq1IS$G6Gd1yCLE)Z2-w`zG#qSs0OMI|Ih zRF`^9`mbJ4ey8f@CS8UY)TmZZ+i(a^F8ZC}F6NIu1RV|jE6(6Pd#ZWvM-@uho^u=b zX|M$6i2s0jWdW(wk?5DsI*i$<0l5&J$H~hjJFG=djjz`Rs}aI}DW9Cy{B00xK2|6L zm2;OrxA?f%@AWf-ckn+*T_UrT9AFQLJZG1k=Fzws@q+oBu=r*Xqq{Gu8hPY1)UR_m zcCiInFmIuJzX|G|M#Z}SxWs7#dQ`cSFc^?h;gPM?rgFzRg+w4?S1Cmka=D%0BNwaV zrSzwly}sWF@sr@X&RC~ZhTgmpURcVPg+;mz)5T@=BuK}L>=@XQGWM>xk}oI~x%s-_ zr=M0XotacU29H#c5h?DAjM1LxYTU@IcwLy|%^Mz>)lo05#a>OZ8tMEo7-+&oF*#L6 z4w`9u)QROY;n7>IUu-V1Zt1I{@DTDmSw@$aoOHrd`$>CUpD55|_N>li5^@%Jvla2wk$m^VYhQ_ai|33rfG z=j5nrLKl{5l#6G)%pAF|>URv$(VII;2RGivO?+x;o_Q}?crF*?&`Se1g zsX8lQ4ECAQh2vdwT8_=r7TS-Bwb|yIsNP5pUo{u+JLrMyvf@6|M#AREp>CSN2dkk_EO5dhd%%fDtzern`Ko&_@l`1gV{)@ z_UcHTVPQv>;=SQrP`Lr*2L4>f@?sHZe2>Zb?Vw8Y6MdjFo2uqrJiAH|4QlvK%)9VF zTssIn7_#9Fts6g*ayxLaz&(I@@AFkCsQmkl-51kALz}+289CbOb{+=@*qYaHeJcZ? z$Z4a~TRYzo5s(z*H3G-ltNsR~Z*imA28if!wjd46VUE!qNa7@B7wVAnL&eRBx3~^{ zSVpZ~Wc&A8h#B_#>lJ-=$|Lo8dxJ#(7TTNYq;v@QLYMik@{doyiAsHcI;bLQ z@rd*M1@d5Psh(08lvP#Pw-Ubk?ZWjml+(8V-^QWlScEHH`tc7E+w-F4*=!Ql*=y_? zq}J-9#*jF20lw%dgE@dbSam>qaOs{OKO_;#X6KrW%HAu!aK|3zf!N8x{{f3 z@GS;qFVKU>0LxA0O<3TKD+<+NAvMjZi}NZ(X)#MmiB63rb+3{7Cs6t-C^Yw$8I9Q5 zut4Ie1cX*xs5>}%zXBTE>%prKz~dvQ$DETwcHb-H_VK^^R2sKL6WvWCqM~zB1x5Mc zlsv1jV5(pDQ~8IJqk9VBI9SoS9R?W*)lEp_7z53=_KkYL3#A<{IB-;sRyH_TB{4eb ztT3uqXrNm$kVrQkj&0+-m`8?@0;QgQ+^ON*y*jRzb+|TM?%|7=qkhy1+hF+yYMTJ#PANA;62A z!~L07^I>k$^sgg5;Q7^(lpeqIW7=T(sQz9T!aCSQ&cHdV5t@>(0;x|sYG9Yy7OBQP zwk_^(@An005QAnDiK;0DN(%G@*=2LzGK=B^+K}+WdgT$TDzmbBswNDQEEqzyZyu}9^x=oB;!a&9{zSzwiqCAc*c7wI zes)uwp-E{FaLhQyqovuK%CK6Z#e-*Cms$i#)EZ-@3J8JAnai)_*7DD8&F-zVpGO-I zm(Of6Yi?;hfp|c5CZnfP<$Epgof}jakNrjQ(P2yRjFig|mxJ2qF#)6KxTX@zLW=&8 zQUYvavz*anJhwb;)?3TX?yV%Ut!9l*k?}smDsqH|X%k;MdEL2k;i|OGfl`rIgD!-8 zEOq@b9=VTtHP?mfYm;nLYCO8If^u>#Ov)-N**xN4Y zr4Hh0ApINTrKg?zAnn^~8lYw2Tx%K)-(@?9TYDJAXBNM;7Y!GE?=8^6dOIGB+vx@S zeQ(f%a_{lmsFH8OnM=vgM%Bed(9)Qsp`c&LiZ|4qiHcZal#DItt^8$N6tVGj>8%SV z)PqVmxaqEp?osuf&nI%Oi}&XhW%jbY0&Qq7VgQU(5@Nlc+rmW%;h3s%^FN6Cxm7D? zh`-tAgvV{cNv7%1UlIM|e}ehft+Tmiq2fk6d`YLjXJD^yIJRI#l?k@RTLvuSbv&O@ zHl-BZ?-q!K=Jn`|CDiE-ykT?@+Z|&k&J{vd`9ZLlU{$qe9a_;rfhqlLPvNiFinZVe zwqu+hOOw~d31d^Lr;Nh2s;6=aqg%$p)`3R#L~9)0U!DMD>iLA^T2Bd~+Mfo`2(*}! z%O*b3p6QqX)SzJYs@?#I$5TR@b`($FdPJ{@PlrArVH=~>voI=nAl$e--N5~}{^hZ* zeUis{R@HbxA&%I#>6~k^y^lmmCBBJUZusW;;#zgW|kpi*rZP%2QC$ACW25u3J~oM9fh^f zp+id}rdezjqe~-DzZ283ZqVxRG~Pb`U!mdjVZp!@lreibUd%v zhD4}sLYte8Jtz)`ENe`L6|!<0R_nqF3C>eQlc7zXY^9rWhhEKmX<(K?O?cNAeruU7 zq*l>jAPvq6d<{aSlbuTt>=pgtdz;T7K{E@8oZE^>A{@$H`NgQdaj>)2N z_P(;(gMR^nC{V!V#GAHIvQy!koh<}jCsO_BA62Y-qL$$Ex_f^Yu~IVM=B7$sCtu!v z`rnr_aA*H{{C}gJ^;rIok`oI_Tdv#AmVaF{6u;g7hwpu3B&%iXXWBnR$-myLe&+Q5 zE3!}j3;Fe*d--n^n)?4g@xL1RzmMSiuaEfe6Ab(RSU=9lQU6UO{-M{j4Y(B!)m`}y zZAeK>4DH$1b1Kx^aG9HIvMup{6VS2Uw(9@6W+(toR7zR>SaA9M;5Ls~Qg9!F z53@l9YN(8YjBOSE(@egmhX?ncEAiLe_r=Di-F>68;S=yNl=0WkdJ>v$b6CN+PDIpE zl6(fvX_)in2|C+v;^(vY(L1j$C2@MYP0+KbuIh; zgu$qE2e)>Dq+R}SBVWhrN)t>x5` z0=~EX&o$?Wm5BfQ(WtJNsm6~;*@W4zPKJjf2tx^lV*9#yd}`Yrj*($T#KkfBVo>r4 zkYM%c&(l1&b0&#o8}rErqYXC_f|0Cd4BPK#)@dDd+WQq`h@A8$K9YQc$H#nG@XKq; z9r0Z59vYg{GIsP^_<^ah`_Fgl7vFua;TY@Jx=9b#dU;u_>s!Y`pA$Nrt8R9_E<4~^ z(P+CQ{^zQmvbAJDj&9zxTx8i|NRicPM;$c~u;?c49>nP>Iz2p_g-#yL&I3^0D*%gR z+M+WJh+bW_CG5GNb{DgKG?yn$POWYL^xg}j`6x}LZ-79SwvJ{*;QEgb)Z!CB?G924 z4A86S7d21j^fq+j>5+0j0ol2OmlQj?&4iKYtq%gj{=kfqsnw5iEuBqv?6KR5AOo1A zA2nZ#nO9+U@QFgpC?X+tV}W;a+eT?&lW`HCeP7wYS)fR-yO&ybbr-r#(T9*7*5Sji zy&SLxoO@1+S9M<9R*PJW&oKj}K*tqQ@hn$C^BfJJv|oL1)Qw+#Eq>63z{=+VDtkSB zc9ZPhE9(dW+4N~|=VNU7iX=0lPSG`q!jGy`@mVL`+!7DeSRkR+jK@u#K07i0Em8;s zp@1Dy=BQ|<0jg7Z-_0WE`#(jsG1}}Ry}Om~h;W(`H^bGj#4hDe(R@H3&Z+UvjXJ)e z=-xw1qtm@uS(IVhorK^OVC*wYV`di5$$lIK3%Ruv-nU)azI7sRAb|i*^L9<`m2Bp7 z$6;r-J?;=ty(a3-<+h!Ems58ZT;?~+|CvY-&F>PazaK=&%=9o1GGmAKGL=$1bVSpmLMu>c4&95digu3aj%2u z9;dKIVD4xSHFuoagNmwEyy{axhf__Plxc(8_^s2TYn5=rrZM2ohe|_(8fT9CrrPJ+ zs=Xq7=+*c3)U9u4`pTf4YNGcID>xq+whlna7+lv3nvt?%&mV4}tRwE&n<6CNZeHGk zZ}v)vFn@ho>9Z0h8J)pfzuPutwy#t9{|N2KY<;n*^t{=AMl1B30X z=V{;de5J(>96HZuDVf^rdhOGeOqCv_6y3+~J>_<47+aO7dJUs52%Xw9IUtqUc0O0B z1f-ux7L1p^cpf$$R|1CAjK3o6QCQ~d zU_pOx+jatn-4QkRp$Cp$!>9SNzVyMJWz(DltFaV~{XT@0@<6YdXqH`GW%oLCdiv0w z7T?b5BtS@=<3JzgM@`n0@AWoRsFWYI*tsny2pWiWk~@u@33sjfG-T(m{7zq?Spv{q zjDcQCxzk~$d9XZ9VRMsG{2l#YE7RK|fy2(`eVbLYG=S(sRrg^{!;)y_9f6Q%BlZ z&w7*>@~s-#0oJ3e&U7z$o!9F(njac}9WJKmRgtC!25Y-pW(j-h=>Sj*G?dVNmN>Y;PyzC8E9BF zqV8UnX>m8)e3=?JxW`$PCjCu|>g^q2Q~t-H`q7~7cKbf33F(2;elsI0vllPTjO^^p zQt7nV6@bsW&`-tY%t%BHr`Y!^$qWR<8+ zIigSht5Kc9-UN*au(DUKBtYc)`^bca*Eoo~H0OlJN*!`6-KfCi9+J+=xae$h?VQrk zkp{>Zc$yBo;+CYv?9(AQnc@F)ALkzd0uwfRNBn}yA^JA;NsPy$bj?#WBM%!6JnG;J z?W3gY%%Ju69ru0?ZVt-D1SLXOx>jZrdIAT1dW9(80-$bAnCM`rySELpwpslLQ1@Jz zBV}OOEDEV|-&3#l+-?4FZr(|z3aJzUuf0x|)Ri-^Dvx#Y*+ldndPlezX%-YBC7r|C z`g?&LxApU8glq`Wt2_?z0$(6w6b=d@>{4L1l9KJ)wRHBNBQ^VV6u__klR6=C%tGX_ zL?(Q%ww$PE{?0qrm#s`>L}#0$5u%9ZBGgWYIIVEnj5)2ng3>%TZ3WkiW{OnNo8El~ z;_Xq^=c#-AB$|WQYVXHFcAsx50k7|&8&r)Kp(mTCV2EC=l2$(sWEt-uk)T&g%NY+qk9BQRE z*llVBr`}I;y5A<3ILUoXHFva$@sc}%8flbyOmgpwd;HEUx|SWl$2XmMnTVVHLc=a5 zjE=KF+BUn8(_MPxsPE7rLz9wi)kfL~9SFYl|DzAR{Y{_y?eo<YfzuI~dxpJ)AEuUKcN zjMYb?GbYm;5(h1Z+Yta5onPs}TqjoQ-Y!RyGGa)6lB6TfZUN=Z;X0Ffy&9e_F7GGW zF*#7?G-=fZ4a>+Vbe7Ug1esFtUV|8k_1K}E`_D^1IT9d~W7`&Ms;I$LUIt)ldN)yL7g zP0(3RWgl2HWp!oy`1{WV41}HK=kxEI0Y!aw$R;%Tmcd7zo-b|ZplIB&GW{Hc^cFqG zt4O(ILkoRhwahKzyUhlD^2(x-6h5h4&a!ce|8~=;JkUQ!>N3wG_}+kB3%52|;|Kh} z%LeI@%h@`i?JaARnxr6dBpke zfFOne8-8yp{+ER811CAwUCrX+YTGv|Zy0RX(L% zVe7dA`($42yXAP41yI^5ih0e-&JhhWCC)H7&}HPYa1HdGr+@D}MaHnK2Be}x6bZ6y z9axOZUJa0LxibF0MF+`Qb4Yv8FD~obzdEC7H*s) z&|jmT-iAShBRn=1M?Z~GwYq_{NUDB5#SXF5@T2ZRVI4D_$4MNo33kbWEDl8+Fx)Rt zGe;<%UX6hH_iV2sbUbd6mteIIZ2|OLn-2?)U}Pg&$Ic26Q1#xX(;~HB*F?o!0ga2> z)%JKx_MLWdC%HZJHk+#+M@2_BXKY1x{I9hj z?*@A9ju`>XZb|?XW-#C;K2G0%EBeeTa_S%ICYtkeoUZ+kPXE^v00;WQE$ROYvg%(! z6#x(Y-?3b8b*tR;Vu35^+ekPG>kX}LPQtBYg#H1IC2-pDFm*t#BlmykbaglBuqTz> zg9|k9J1}tT8T=;Kb;CoCOlrLPr%E8@)redCMR_7-Ns2m{|cu!23 z)t)jewrH`4*KwaqcyPZX@y)?;f#$GqK79-I+2cn*AdqqcV5DB>#oHxGU!~Mj`DTKC z{c{^|vqyr>@X+|&(C;d5HGuUw|M;6Qr#x)uY+c5dgv?t;A67EV7xDn|-e2%jrTy3| ziS1u%cJAEqsckT4|8>JIH3B^6U3wa) z+C1`tlOL0+SRaIM0P_gfy`SWtw+J-C-I(_vTr9ON_)y#v)z4ph0ThXpN6(vSC_ z`1w#eN7)%GyEFM}8S+!!?tu)q|BY#@0Tce~XEp)4qL?;>g;URXMCYDbb5;t5ezI7@ zHUvYdI0RuvL98VA6I9}GYo3QrD5ySD*1U-n+3y_<5yMR{EGtsF0&{kt1*J-&_=4@nzj7>Bh} zII~-QY(h;TD>6+hUN+55>m8tapQ_R@hz&h6Y(07nC}lPo);0QyCm9P~g?YTw7YP4O zaeiy7@*-h2%|H6tqr0%lO@=AT>3AK`12i8FuMhsRxl(|d6kdOw@7S9a=tmLObSSbV zI>*I<`)%p;Msnf@pHyHyy9Wm`tqm{K*!hMorJ!xR!iD%LfcDlyVy$3|)z}WFT_Edp z;%|*S^qLcNAFdUDa4?4=8cloMY7&%5#Ef^QPW3-T(Vm0*#?Rs{q+5+c3(;$RFHO8; zNGEZCJd#;v(`wKCh?1AKHXFGs`1W9aepR|vr=ds4Cfd6>VvK>wyd!9Jm1)~Nt1Xme za0D!5+%wTY;S}svi2G(3nXxqhTX!i@jG>$fs=2U3dloL=d-~9=KaNZBfhH@*ldBr? z2jaDetuh|!=qk-&@tXQP0(~N11_X2<8tfoOPd~mQ9|{A=o!8cyJAgngIQGF>d4kz? zFBGTG)i31m>S*2C&a|tX>~*qAEFpg~QUCw|irEpQhwpvH9|%5P5|s9oILdg1nGw#4 z*5k*#GZH*!BaOS`&b=)%?fsz9EFXH$-Hpl<0MguuO92z)(l-v6wXD;XX)w-qKIfFh zA0`A1J$hK8O*{Ux%BN;*;F*i=Cor+}pD4pYiSbv&qN?6vI4F}aq{%O5!Vs-Pta05cM$%;o2s z!j|Cmk|$*%Rse_!RJLy&F>9PFqrQLi=19@wJb=el{^--=NB6&UJmzc^$0`gs!xO!#lf+!^4 zs(CPWFF8$=EfM5pOek;cOd0gB#qIo`^(|3nzV0OTGH20p!M%z1B$4qO@sil2xifB7kcyCxrEDlCU+#F2*+KZc3aW@J0<&Uvk)NYpZ75Q>DAKRbr}Zr-4nRe8|23k#y~?7MGJ+-e@%-8DA1hl1Wdu) zlU?7qx|~%vjGD95?18)7*rudx*#p&L z++(iTxLW?KpOZXQalL(CiXE+LH)S!zK4J#9h@m3_o2cmx#vHxdy>&Mn7F=B(k~KL^ zRgo;&Id04|akIfT%e0@3azAg>K)zyMFuqMsibGMALqNeHc^x{a@Hp^G{RJ=2J zZmf;73#GbWx7|)jad_pB3;xSVp4C)ti=l>Pm6 zkQTJ!I`)z%>TvU~b$6={Fsyg?m7G0XNG&=mS@VO@=Y1z-H=u)B<0qNr8<>1QQ*t6; zdQ;`w39NAmmp2J?MKoBHEycht7-ZlzV=%9W^M^0^k}|2S_*3l%3i9$TAyDoLvbGHu zA35ZP7rQmNIl16Gb@Zo~ULT+xlnJQ8R;or{4A&$DrleHRUFx_E09;A9Vf&C8OmG;L zO^AN;-=2`@-3pkQ>&5+-e5B=Tp`(~$sLW>3ngT~v7$lOIpjt0J%v|I6fY42cey&P zoTWG?WJC&GaYw9Y_9}N|R1~hGbWhtzVjYMYeZc~PUgTKO4wrG?{!36vZ&4USnSEo! zG#9)OwU&vgu+1-*s8BuO(EKLoEE{ez4XzzOd#$3SN``5O%M60q_wW86-9zANo&e71 z@eWJ+*}uSl1jq=FBNEXM&No;V!>9jwtNbY4ux1{BkiScj8*ZzN2uFk4v8FL!8c5IEz=@oU?! zZdsf8ZCm-#VkyfATK@w=eQJr#QJ3Fr-sN$sCRir!wB06yJgLoPMu6YHBp! zgBKhrk^S$AG);k&z{Kfmg|C}Gfg%c&B0gTUhV|5`Ehs6)9yB|6;Nw-Z`9` z0UD!2T2E9w2#`F9av_m`i1W_$DoC9M(SYFa?4y-xQ#a4uy8AevsXiJ@KgC{nbU%OdtQU8ZNz;^sLa7n z6G6L`uQX1#KA-!KAd0Js$!CF7N ztvn929@SCwT>M(&a)l7ab!jh%#E9B{SnSQl7^m&;h5JMX{n~R10YK8mVb>xMGbf5| zBrVW3H)R6%{Ut}od4J_mLD$DwH@+$dUd|m$ik_)Bda)P=ZO!YvzF%Gn;DmcR;HlqCupc%xp9etiG$^&R8#wxZS zwrTX|$6a?i@IF49Mb?PlWp38;;Tvy%uX80;>f=4x>kNJsUkyu5t4(+TEXt$Q`Sk>vR7vB5nnMwdKuw8=7jp3Bba% zHU+RWT-yl(VvtA!!ql@Z1yJfF<_*AoU=?%w+pkRQ^5@m6&p&gvw!|eIHXG0YApDn_ zywv!Ywzq}DRbJbLT83D(DQW}IsmML^0fMaSIsZvKRi{MJf%8MA{UZwJDK+SZ;stHc)Ed0f0 zoZi*UV|VfYbBba@0R#K^4dRZD&1Pqr2*S1pn!+Vc4( zRR7%q0Q%gJ2$$?Vjh2z%6FW*q%_Xfv(r>G9MOGgc3zlbc$T3kj6%{*{;e1#JWk zXF^43Ag9UqIW5Q1J{x=SG1*-G1Lf9X)_pv-q228tN?ZfY{VP~jk8|+_xwGhSk2%B( zz3zi`qB9Sj&>7K8Dxw{>R27sFB+0HaWgm_0!_?Z{b7tx))|Xf|fEdrn6J!6rHCz&3 z)0#lyU3W|+!26Hho;yc*|IKvIH5pH6X{={-WX!MlW00{xe){~)Bw zR{)~=g|^8_1W0g=?I6De=rYuibkRFp2)Mrkp!^BUnB9!?r4Q6LP%nJG4_03VqWAAb z%Y$pFo5JcjC?>a=lk*^(ChQ{(hh8c8zHi@in-`^d&vSQf=#9*5()r9@4E|Rm%+xAw zd;?HPY~(oPoQALKA1FL-*?J^1no7w8($--SdFwm+Rp&2TY;C5Sik6XMiMh~sQMA`Y zqHpj!oo+BVXVyA5cW0rKaL;tCd7A6cyV43sl)C$iaA1#kL<@ui;%Z24U)=>1CAFc6NG$bHD>Aqyu*Ps=5i6GfY-RpATtK*+ezS1ll5g%7Ep ztwDDF;kyyMHh#`#1JEQ$I<7v+y~e;1CUM{Ai(&smc@pgJ` z86x;o2F+tUZLqyO&@>~Ju`zocs7wU5F4LS*tBB}>3`D!DoM}*MNTs*B~AZhS>VCX@G)2^~X$Ok+gHn^_A#CuDyEDpZ=9mhpb~= zW&8Bq!DqWiiW060JKdE>`tm9M?yi2~?}f`n`eq=Tov5hsLMP3Vyy`QRc`;A=N|vgl z9A8aGWo!j)DQ+{RxZV847N|mGdGaeT&AwjC9ZP_Ad;XC)c{D zmN7moH=Kri^v>!#jB$$2+=JY9!cuUKFm-i|(7~)Cv*?fweCO3ddXH-}gn?P=#n~Ch zjWY+_E2ab5F_C=sjqwtuvZreE+pU>C4{v0sMl#fF>v#^_(bI?O0STrw*?ah81JalR zEvV3rdu_VJ_+97_+|WmWJ?i5USJhB(w1j|TuhK4FG8GrBYJ zmau}t39{((tp_5FZl;y0E8+D7uBOJ=YolpMnBr>H*!O;e36K17Oh=-rU|Gz!6?enz zU|Fikfbf#8tL$e`pqafl`+3S`7g?@-i!=(BK~Dt~LxxaoePupxi4OX*`2k0qGCB=C@?qdC~y5)_G(x-GwQ`flOZJE_FsC@YW3eugE! zu$5Rz1eP0WWLw?Y_AKaC==*nlyE?ZIYRQy4w~2g%0}L1L@TD-bF%lQs#&F(7w2V5CHQJmY;!3+1(g2DTGQ&aqP0AL8bZ1+IKD-CtqOEiy$;Miw1F9w5Y`zlp^1aB>^4%wi@N)_whVmcH*IkG2Pc zyl3}m$*Hk4@_p1YE4C&RFZfU=Jo-}RbH$Ecj`q3Cz^jiOL*Dl%%%qg|v1B2c?;%Sg zz!Va`Kt0ThVQ-?;4w7VHuxwRAZR zx*X<55aHtt{-D|f94tS=3mfqpwAjd(AkD2PHRiav@m0 z!o|{952yQOu@^0~yADjT=vNQyyZ^iJrOe{M*NUDcz=hGwH~=;}PrF^wvwZ&{=U}~s z1!5c%Vy5ti-vQCaoXEY)ckq#Vc%a7w^RFY1@8z}CJzqF+=j08Ev)&EYq^z~AU-b@t zjDGw5-NUrx6E`reiUpTa)1!}C9QW}efAJ|&RfvxHr?1+{W1!$hWAWjaCuzs`zPAqU z?JjIdvSe=?>Cw*1%(Ho@+%U!B1}gD8AX*V(Vs%Fpf`3BWb?EUs~CT%gt z;aTf@3h}XyIGx2J^!Lx};j1+6a{31iQwT>qIl275FgnJ_Y3Q(;5hb&@Cs_L#_Iq+Z zD-3-8*z|mZ%g0{x~y$|8bBcr4-LX%s+gCMGl6o6PGO$9v4$LX-tRi>MhsmGcY(sVOGhLx zT+9%$t3%Q#PvXa&j%=QT1U<=fnMGY<)|#H(t5+5R1^X}&I0A=4GFutC0cCb_f{|n7 zi~G`H^d16{(ahy7w$jxVu2nkfOUIdW?^ouM#*}y`AO3h#na>GB2ojp8VD;t0k%^kE zqoza0gzDdidtVZ+y`}H>=E*Ewf&8#fU7t6B$Q>-Ip$*)YA})4K^$+dSwUoP(o7smA z>5@~Saj0SCuY2zTNy(tk>a2D}&*Pqm9D?h|EOTGVMlu$Z8VSI7-H#b;W7 z*dO{fNSQVZwo%OfR6RSh#4Ci^(r{)=P5z?G!<4#+%fDkuyz(D)rTdB6j^aN{HZ)rU zOrG@Ae}P&^{j2R8!C2h0pstgayPQk`Nbdr)6Fu)d3m?aig`LDd_5QWMOui z*(1vRxn+~idSxbObGp5Uho#@z;Q6DT8q)Q!#0_sA_;;{*@JLSDNslapRS({pDO&&B z_>pT~o#I*)zGpmO&cx)!lkJ!B8yOtx{vw{4jxWg#Xa2}@iO>@Xu`I4} z+KbbjJJnZ*_2e|$rj1}LjIcqsERY}lcK1R}$)?>yLIfq_L6HF2 zeh^LPhy@14mYWe-&7x1RWW3YQ(zINXp zY>Ns+EXN9sp}J`&M;SY$Gxw~R8BRjmEeYN4%9~yle(GG@$$nsJCxALXreZc0vQoh0 z{?uVx()oe$J=HVcs??TV&4hH06OGzWN)RJ;lj=0p%wHtWBKgq-$ z|7lMt%|cFZ1Yb>abd}pqxJPfVuGykH?1~TY8*zhHTgpZ2X+)N2yZBLH_J_Q54mPtU zV-x**_GmJjbBhNqgLm>PF7%9QQ~wb-rJmOABx{ez4p^U0Tzd@?tl1f-^{_F;#&?A? zBy4QOy5Qpv0h@IZaVzljE$f&DpjF!mo7F$Z$&%1*PubOU?aRtp(s&-O~>enZzaW>4vz zhutq}PML@ruR1kKT0 z`EMa_KFb$3;O~_+CrS@BIiaWPln^ifsgqcE8M)PvF9$Qn1(14+L`jSauE(jrSR?8+ zTGL=_HGAH7wmdqdCobWF?~Pq)g;{&aHMDD`pNI<&F@76_>5IXWmwVvI^o=KvE(?cu zp0S>=Gl{b?Qk*oKD2BlOeM&#&hulnc4$P&`m^Ve>nrwxpT8`p~+6FRLkL2=v|ge>P~G@&Pe%o!JS|YcDc|_+h5tHlC;Zj#C$lwAr)^HKKVJD zL|F_Syo{}hbP1p=2S*oc`Ou03N*R5!D`VRnQ`Mu_oLVT*gvP>5Jt2>cr~j>*k!n zK$d_rXOuy&rRxZJGZf8M54lfj&8$QhFA!b{cu=-R$9rU+Ox6Hwaq(pHlSC?a@V?U- zq!bow-1DJm4rK`7&Q0hMFT8okc*tnCvSM(o6;Io%Gx}eDXlX1wo~d^mf^TM!LU!`) zQkN2&sGsP_<{U(3NN;)V1La1)=@0!QK3*p5#T<1nrj|Rns8J^>yLNr~bZbEU_dj{Q zRgIS?n!K3Wj}XjK&#=;h^;t*1Tnk@{{%Q*KLPq zHjhdPgU4nuU^k_%o}*z~<2ZFZMW)5lUXrjx^}V>wAY0^qC%scyZT+@co~Re*nzPbq zq9*WHsqE6=zG*py=yTTb9iC>t+j77tjU9O{UC0|7yHVI|w)Ppr%-s3+lU;>#o{l_I z25EJfGPL3OINqOwA4I(7N1#`t&s+_823rnq^jk?$KA>wtFw-+^&$$$s(^9#!!jjS< zOeqY_6fXMNeXU+3n&)}Ca)~s(`D5-j35NMmsU$7Nxuu3PRQ|lESg+aEf0AwH)=60# zx!IVocS|Zrxu#kqYzHx6$mzCN-H?!`sfB+t*k-pOVtu+E&>S)Jz?`?P!(1Z1T|Obp*C9wv%-*SsLhSGrGAMBiE`5hNr(8hf8C1-#J)U3JX2UqcjgjzBr8lhU z^$vN7Y2ymofRhf@m!0uBmqHQ-8VN!)eLEO_^>ROvY1=EsB5^jF+bC}<>FejaH6@WK zv@rY9oOI&tS^S!=Jt-B8@WiD@rbBhUS5)mKdyI^jGR{!a`Qe1io+~w-PezcGaZlOv zC|w_YJ<-r)#*w(3#;vTVA@ifSl<73a89Th{o+lMy8-3-N{ACYH%s8U$S?yDQn2uq^ z9ZLpuUKCy9bzoMS;qSv5R&Bihhg!5~KVuO8BGb^UJS~ECT#sUXmsk?4LJ8TqhHYN_ zTZ*Lol%{iYb6o_L?Us)*@P%Dann!HTViN19RBavV2DmP$<)XM;^zi^hB3Qk=;B8n2cn7QPF;A> z96w9hoM65B6Fx6CmOLjB!lF&`*EGx>#?YO<2#LEqMrrAsLzAlYk$x>}J!m?c9hB{> z`0o>OB7D(&Zu2j;$Q8RvoGb2HZ4`zaq#{YGDCCh9UkY`uy?zLF=~3YDGCv_erz8!9 zE$e6Ip)gSlYw8Ui-3+tV76u9X^z-n#e_YC2VkUGl7E}%ud77=^p;RR^gl0fQ*#9yF z-tBnV|0=Co-s}RB6F-Nh9B`pO$N&H2|7R!UdB4W3mQ3^mYXIJFDP=zfAWw`A ztA^71`nH%&mTX|8J^@lvKga*`$$w_|mnUr(&y@l&Xw3A=3}n<1cz>lRT@vWt-5ixC zwzT|wAR%G>yM%)E9m;$^rkOE^HTd`&&V&=P#2(T^O{6Y(NJy6QhU?;w8JA4{5fH;8Zd5CcA%z zO`)=oLR77n+gMm<;b1j?2@EX9pnHoXso|TDM)u#4EjWq~W#e7sd?5*w+F?VTs|Y0e z(QhP*K2jki2Oe~cn{g*7k6!dtYzV)}s=3&ag5F22B5{dgkwZ<1!oIO+_R~R?0uVAZ z*I{F>R~hb_DDr-ovokEWIEx;e+gR7|eQDVx$0=>P5$Af9ZZs~)0^;-H24L4#ByapM zQM-||Y&odzYkV=%HX_kAk?4x@Sy8<_Z6$2H!vQP1VUtV2kbd(1QU*>mo5J;p^Fn5X zM)dE@LCsQQ+rvfsb4xl+Sm#4)o+k@)NEc1lgtr(W2TFy>ta%3$a)?!ZAIMZ3YY5eL z9buZ;9hpZZI$|T38jcit1FMX=q$9%I)3T!5kCT#*A(jDm;b!rhzEB$3C}QSm!JzK- zT$B)T5X)3QPVLL4uTv37P|Ardb8pP27r!Dv56$NH310R@3nM}`ahz*s8HXPEk+I>=;2adpjb1xLDS$MUi8be0 zNpY%4lXZaC9SPY04*HP~C3J}{g184jbQ!1GWd1NuXBfDuNitQ zb}$nh>Vi6mX4~V)uUm(kp&R3;9}2IadUPeyU$Nc8L=M~(b%^V&)7*?{lK;NH3vHK1w}iu#u2EuK#tV{JM0afrgaL|}g4@cw z7pJh=WYOV$EvxqRygB0ny}Zs#FsWv2u&Cq5H^|&wStGRKprPd)wzH(lk&M5Qe)K+Wgj(_Nmh-#ClSppE;C^9C&Q*!6nVnKQ0rdop69B5jakXkAYh zh{l_9D`=i3S+?~{jRhQ49C7_03NzTVic`*nknN$vvCi837 zW;&1*422yjv))~0#_!X>kW+hCZ#E7C)@S18aS6YE6_p*K@VH0o-ESU!%a^z)?f2ow z%iJe%5uz<(bN)wF1k(#I~q}==DJmmPNpL zv?rje%ZN*=a{eRJ_jv)u{cNTrQAzhw zZYFF`xz^!Zg{WePEgC_oRm|PDt*AS@j6v%92Di#ChF|xN2HcA>LSF%}sZx|eUuxEm9PxUH?K`FGoVB8*ehq47Za{ zChyqBUQ*5KT0*T03{4Wx>*mpJj@%PId)5R^_3!S=nK`d|tF)bp>>M;F$+9dK6-_?9 zal~q7(~?<7r|(hnu$|o4&*Z^!98KN&4&&6*!PvzY9RZ9HrU~aVev93e=_bRp>ao(k zo&8s*NBP-M#>SJ#>ubPHfqsVbMfa({p&aYa+;J#Gdld!2z$ux1z@g#_gxAo>kw2*X zR3fD({#C&IJVm6&;+&P!Yz*|vnm%vSIYjCP=Dlc$j{^kypxN}}OZe*NRWDcEQur!o z-GxY1VCFloNOUEwT67hRd=rENjN|0>YQ_0;So@U6I^9;8V_UNkXvkz}m=EU(Z9aZ0bjNnR#Sef0) zk=HIFC;r`Q@pVTUI=IpUuwR3t)5a^ywXAcEo>-!i*Yvu+?8u(==z`-h9xsTZy?Xrx zX8ot7yGq-~eU1#eE+4Y~vhHCw214D9D!8;9%NO%7jq`!q@K{Q|_oKKR`gN_QK(JAMmHU+Iqr*nRQoyQC@8eTXiWxOuMc>{nshlv}vlE@RHgz4u(G!;|ixbYlAyn6&$7b%y zyy2nosHtUcp5xX=RnfoB8nKLnqg*PN4tBX1tC4=vfg@=wK&6goNvkTI=;*6v5BsER ztpewwk^d}SVP>jk>9AZ&RTMzanb9f9fTqLxYX<%`ZPN>lu3vcham#I#@XXcJ8}ZFh z4%SQLO?)&xK5{(;hc-_2Ltt<^%F(Xzu zjmXlaEH@2U;B#K&^C`p$U!Z=Tkxc0&!j#Anf!bFysu-&w*nUv4YJorr%%b8oT|vKs;P~?+lhG1K1%$09$#B3 zerX(B&Nn`j8z$%i%!;STEs#e>)P5mW;iJUe%SuKZ;%Ag-#f^l<#Q}C>@c1V>xKFWX zIRnKtT2aZfo^9`=*MR6DPLO2ICM=_=E_sgTwbhl#gSrk$*DHCL^qzmA89Ok|SBf$X zU9aU*^e*vh+EnX(^E9Pj3`5vDvX2uNCFsRWUkFXwg`=jn!GDLZBeNLa4h-kke)0a- z{*^P?RnflN2!GmI8anh5Rp4D{l$ZYK{Sz&=WLMX{BWJB6?#un_SOhraG*N6G$EIge zfUxIT)WG-T5e*j1mGohR*U6abxcp$YSs34{z74lLJ`l_vzA*oLr)E|GC;HridAsY@ z(INM(+ttM5tie`g9b6c_>N@d{lnBXZhJ%Dj;PU_LLR_X zpd8M?73_YdMes)`>N zrTJ2rrXTmqZyVb9=@M|HKHid`zDnxjRF-KZ)me`N zPxt9sUW({@Fbxbcp;3cJ5X4$v zR%}&Ql#6PIFqQJ0d$0DzA&Nv!6q;FAU&&ew^AO5%7xjg+!F&D0NG*Ck^741qc4#UB?}WFbq$)>Hn*6Z&ix>D7oYVt~gGl+@)gw2AR-mj6uZNTez|s%h3ZzQ4 zV?Uy#!#yqL!qut`UACUdiN4L1u-a;^+v~h_z(uP0t3*4h*27J9m(r6!a?BS1=n|ja zvU;Ce@%8AnR9t}KA1RMIu#%Zw_D3=bFTSXm6Dj*n!0*mn0pEkaJ{n+Zy`au*arC=% za#sak)cj-AnTvX7+E}F8S=JKnSd>34L6h_~N&s)&kvScSAS=W*dC48KwqF&uAd`c$ zjnbbw`1vTL1QevvtdU*kPc$9UfuNd*23B_m5P{>$CBo1z+0>lq=tP{`o8Y@cGpmb} zR1I#}%>1nNaS~O2847mPWfTsdVk#^8)y*5+qkLTf$<6hFM60c!oUWUueae0BZTu!` z%_h&Z2K2BKNo(!g7PQ_?4dji4*zbxiW(*BGqH9Imip)vxmovgUE%jsk8NOV%k}VimkQ{m_z0A8kmKeoa{(35F?qD29nFaC0EpEMK#msek`9v z7t=fEW*2klYS=B`UK4|~Iv+s^E?ygAhi`8w>B&B)^Mr0@wAJeCy=&je=Tq(V5wDal zS#2bFhn9E^S@)o+5ofrxtR1S;%i8VZ7mjOjO~w!09;KhCYq-M!mC#(Ne=Bs`SBAtsiK`Dxwof7PFRE`glR}mfQk67Wfc&Wvs#ogX!s?WBQYzRDSVQa zvhz0*$L+yMk%s{LTFb6aXR7fw7MDNF+%)2{ND2I`F8=H>XQ7=`Y+&(@oo>)er2!H@ zc&s+-wi>AA1+#O9_jUVV#h;R-XNjn5K)KyK)lmOh-B3EPsbWw<~<-&wMKm9P$}1x%6Otq>)*e+-{rM6(ueaNBB8i$Og6N z#NZWz4tO5po3@7e2XN4pVgx8LzF|Id&o}jL*Dgi#?-bpWBaQ4F(#uW=;{mf8_9G3G zHm=J3pmYcwPS!18>`jPeZE6vg z))RoHnIrMZZz$yRv{$9|1FMmTbr3>P!zhv>XpZzYKZbD4%?L3f%9SC}-Fse+58V1w zU(YIz>DxSYaqV#lF*B3QxECTf@mo8%2la6=t9GSZ$j@GnaN>zo?@dlFhzp#NICcFD zUh`30db4E6&Vl=Z_K^>ECLEQ(zav6rHW3N|wd?P(5PHhN=Tfw@1KB0KJm(7OM$ z%cDC~%D+I6bWRWDjTJmehFzxpeP@4S{JQOh7fac`S{TXw(=+i{gW$^YLyJ*i;h-G$ zmMgD?Df_ssYqN~mc>Ovzlnf&Moa zzc)wfR!5ojX)Zcf*G9jK(_aLnNcIqeam8i}aSENh?;-xe)=ltGA5D?dTU{H^JW zF2b;aGJ+VA)2Ug(D{nNxHU{~6BMPMR%^Inom)U-%*UZg&bBePAhaMz13)_SxULJ~% z)0FbNm;4q&OVrAtjKq)Rs(PL>(_u*=4+rP=PhiL*%6sc6wG(p1r*HhvpVpKdNbBUHt%4JSVun0eFUJ7kkE{W+(-7W%nI z*GYYPq@>bR63ir+t*ZI@|JbsYXy^AldH5`}`&`Rt*064ks!8f|)r|apueSAXci`-N za67c-;~E&6Q3H)oeA=Xr&Fq#t8k{|CS3mo%`RYC98FWUcUnqDuDN_HOmyTp(t08oS zU6H-k8N;n!>Ur1I2Ge14%8mTUJWw?NI(rhDcn*hnqRmY2|hTys~_tH_+t`0VgGECQTk)QWc9M#!Er?mVl< zJ$t4xGxuO|_R6=>b7{GX-Nx|D(1ej(NMXgyVSyXxo-xgJjg+YvRYrWCry`+#lhVE2 z|DZaR%PFh4NyIClY?C>fp1EoMR|`=u`APG{q2Rd}9_|tB#Mn?REKO-sph4Ty7nMpx~E-u(<&J$)Sbtc%|o8PO5z_nyiO0}%{xy=0$C)z z6pYR}cT84XzLJw~>h0kT&JVI`n@CNv(2E=}WN3Bc_gZ4>?4o(H`r~3^riN`(`^C3s zZV$T0iyDO=`OB2Cnlg|69{5XHJ9>-94!-92~**YU70m++FUvn zrbkO&b1tQS*cf@uzl!3>a>M@8Oc&WVL;2rYuLq@zg}eZri?cPsc-s-M>Omds=)w{$ z-MqjnV65vLyMcyfDqlv6Ls66VPW5Nba??24-AXfZ4YiS$%jI-%L!e6spAZRJN*J#9 zobhx)HFbXkYaq9Tbyyutmuq^h;RzhEl{K417YcueYUvFRWu-K%36%Aa+Ip5dEBb>2 zlq!|vJ==xRsEe+>drnRq$+%*$bG!%aoVs}b?R-pSGCtYYced}*f;OJM=YBF(Lpn2} zg4kLXS;_6yaTPc2EK{6Qj!N{aCwFz^Ps`wlt6BA(DIp&m@EOb?LF};Kv8z2})hBK7 zE6|W44g9SJ{98?+$b*6G>P7!yays3& z#oS8yTi4Nx)LW_gf%A#(*v6If_$^`6hcghloGc7i!MGDhJzu{o^5TDT#;bP5tM&U; zCqU)V)yxQdw9c)>Ac7sZieLW;PmyOkVV{CivAO(H@BIx!YamF@OLpKjvjE{-#TX6o zMO5qI0!j2V^sRO+xfl?9d1Q5YW{Q&aWXAu~bOyyH(04Fac`Gk(9Au=f9@u*r!so>I zv|92SmHpSvX8x%e@p$gnI4^6)3QG+=otwFBkGFbO_Wxn;-J_CB+qYrcOpP;E^H@_^ zZfeRlB#N}JnNllruTYtqskp(t0#=hKpyU>D1DYWU zC@KO90^dzN&-$(RUBC5y?|;M8LFOP1{5I71U-Z(R zicKi%#K<0lu*I`#9er4Ssz>FU>R{+P$ivl7v{!?gZ_5={LB~q<7oo+sIa(J|Ge7Yi z+D?9)tX`S^+!~p1u(LXNL5X=UHg?Z@Uk$&RRatPa4H}&^^d7qIgLbO~-UI{rnXnTqD_-g(50kL@>Sr|Eb)2%DiB5=knVj)X9nO(cX>{s-kt;9uekl9!W zWrMM`?_r;W5}*}w?h&{qIQMM4T=wB)zxB-5_1c}DbY(Jxgg^3ee8t%MUtb&GqnnXKh+8di z_D`BlrE3fIK84y{A2L+1+)~X)%sIS3+&x57x0tKVGRWp1;EepBaAPn4no7 zv^9{z*4;(*_mNa}K4IZjtNEeW^fArx+chg*dEsRTI)szYVUBH9FK!NkWD+C;x&;9CRU0t<}a6TmZFMg zEe&mK5qGRp&3(@(a(zKQZ`u0(6Bp6=n7AV7BZxeg603gWCy z{?PeJOEl8QZaIsMxjxn?qHPJ2^h3ox{i<~7lϧu;nEo`tPjzE1DS4$VGncVlGY z_zI{rrE0NMx*?A$2|aH|EYhBf1=R_2cDUilMB<@^98n7ZO;HA0_JIi_QKR<>0Dn2P z(But)ZT*wK>_y!GW|ciPT7;*#?3*@Y@b{%H<{tF%GPo!kl5j_i^>YO~u@dXf&(de{ zFX%wIsLPp`6AmT1mOWh1v0Nk+jyiH=ryW__oVyZ6!;7Mmts_&6SHT(cFN9Zy-y5?b zIVhyQmo%78SLy{!*@fId4V>pc_KJ84At(I^RIO*YLd9M5!hO}LA7Yy1bME^Uf^nmW zd|8Xuz${ZSk1T1WeF#z6gi3WvCFZ&h&k7gU1;-QYiJ{Kn>rz>c%8QDud+934pbEgG zsTza7Zd+;YC#|Ha6g-1jria2$`AHSokGZ9j)iLHR*~uR^I`n=Dt;8l3>HFKPOsXz) z@@DCN_DDL(Pw`kq5A8=D^#;uI#D|?{zo_KFiDk0lOyx)3d)3qePovWR4K|&Xm1d;&ahDZaPflrHgc76Xg6~O%9 z%ja@cD1z?Qb8|%(SoRgeXeqt+9W0zIS!AT_j>s<>sXJT@XS>L^8 zb81=Ylg2o@wEXxTU6m%{6D(qIx#Z^zm&S#LzKeL@Wodru%HkVjX8>u5uDtHiI4j$v zyeP&hu~I|^e;Y~ZB3>@-axC$+Nuk4Jq>2cjrNZ3=*Ylx#Cm!dwilwhpi3$Ur>U=g@ z-mP-07d_;m7P>$sG@G^+`&dO}s=`&=XhhDczM&UD$*?-iido9%&0GX=ebHh^8M)se z4*?eks}??akS`Bi48cN@>LF4lUP4#lRoD6xo@53))a#GAG{WqVWkk42Sb$W0c^k%F zF+;O_a9T+!!8VoRY@^aoHLog}jjT=#^a83mP|jJM>ivFL-^~Xn%J7IGm<+9aIPsp} zo8+ZX^r~QDVcxuymmN@2{Nms%u&61#j@-W7dAJDH#*jJUjUQp5v zidt$^x>7$CUnO}X%4IZ63^~4)V46#1-9{=XtVwp)bw%hYw(k8}bXOO>qPR#XUa>(m zmQ21!D^vM~S9%RBskt%PO#<6Yn@v(S5~7H=oLO=^6^}JK73=O$zc9GC3aeLJurO4p zAMFwp*_%h7j5p=J6Iz(hR4(3MRsc)o?HWoqmrPnADdl3mB{tW}2Ie3`7_rw!gZ69e zWWR}72y2WUMJwN-Bm3oFhe)A)`=VE7l8jT0P;Sd%p-E=#jm(5DVg4dvm$Lh9Dma_M zO@e2VK;*_qiu`Mi`kT~wZ$e=q9NQ^bUhYW-;&vP=z3%V~lGYf;YUyR9cFAo~Nh@Qq z;`k)^mZA)y-m?99IoQz+SKzx@^$ClPD-y=U=fALF{E5dnN?nx%q>xSCXYHqjLWiAA z*ufr|gZFz08^`wwEr7xcC0)3RV?ppm1Vw(qCZ`C?Ed|?P#K=0wO>iL7lfIYPsw$NZ z+0~pKvM*n~T}D9*eoB>>J~qjcEylIXv1bIiFpw?Aa1_^Us%eK_88cugeDP-d&^@jz z?2UcwD0oR}2pgjOgjRZsKYFQ})5+XC?tI8ysLJl`${D?MLoqesYeT`ZO+L{ATa1?T zRaHu;XsJooo|sCPCf5`svT8{6o!7cmdcdC6I$6CQfEL#r)_KHxZr8mjd3B3;VNgVR zyMEeyYBAGKc7sn~l|-yeZrU~^eJ2pb4a}y}#VttY*I3xKncMsQN~FouT^F*;Gn0}P1@<<*Z;FKPlCpy-qiy{|Ff|4VyJ4r8Jw zpk@BO!2mgHmFTtL;b82OkW)IXUB@EuzG9o@IK-$m)q`RM9(A=)HpDFcPv(Abq!IHh9g!qZoA47(mKM} zaD#Dblt^x)?)p32GGv%6L)VXCUbzgF72u=?QErTD zJKag!><1NuU8s*PX{{i1_1;*0yNc?slJ0tj)Z!K2!iW-E`8Gt{f8++J3;)9j*naZ! z{^L0n?oxyWE%5xIhG0eqo8AV#gsr+p7oiGT9pMUxOyv2~gJs;rF1F|&I-He|ur<{M z{-|iQZYh%~U^D@7c4%(xkV|GBok%AT=@OjqQeh+|s;lYwKQ~Ep7Q9?LPrLG@ zdHyzP0suQqe_uV_=KipNhjrH zk72UHlz~iiDV#NbnXYpM-x8iwn#KR_)*v7P%*Hcn33q&~j<274_t5>wZb!B2Q5+Ac~;sbvSh zZ4nK8G^SYU;_K#58uti4{l@;80?XaW%wW8RaCeHK{uvBd1wW~qaR#*aMwkO}=N z_eHf4@FY0;E0ByoQjG)VD{6|`8h|(#w+?*lqt$cf8a2_)-N3r$Mih3qg5ck8eg{QV zqrx*4m#Wj8=Ow?ah}~hO`nqy6{-Tox!YI*m4Vg zZF4o`F)e#pjZMjFhG(t+U{^N;iOtic+34G`FG%_`d`MK|6&zhUY!#w z`Zt46{h1G0%U}Idy|Ze%19x4>B+|m{!W7e1ipR@6c4SV6Ba|o z?RBEsVcc6&W_>Yoti$V_Q)G+#s&88q9}LJ1hw%I-yjR1xJXu5VCe=IS7=UCP%i26k z;`Ce-+B63v1;Mi@mtlbfnQqBtli29R{7vf&VgyT(rODO7(&>Je^%9Q?eUK-i;qHl+eDB%( zFTC#BT)q^*7rK|_HB55S++*J48tgla&DW-HvwJIfmj;}=c>j-V!<%fA%#_t*A|7cI zVZJWA)kO1Fy?JYkFoVj=&htz965Ri|zpKifO4$6hNkKJ3HEoQS<7V1>=*!=A0bx%7 z^s964u_iS;7k|XUXi361E&KPbJ-xOy%!j@b*z$*9LnhYi`$%c@LRRO5^FPzsI8|3q zHNJhK%Q4tXAtZ91;nxe4gy3ZT=2F|Zm5;osVf9q#m%_UfBLX435b7bbg}lxTWV7rw zo{uh0tk6SM*h=1?>PLd1fvJO_=B~GVW$hmFR_~z%HFJ$N7hsThRMhBG+QK!IOZrqW zFf;g>s0z)_HWI&xISkGX8Hg+s`%czwZ9G3P?2Tgv8GpAKI|ndLPszG69iV#Kf4GER z5M%pxGYSw;OPMgnD@m1|fUU@UZmP{1`8R!Bb5rg@1K`Gb^U#smgor>#W-#n%(INaW{!VxF#p&+zi+3ymtDiQt2(_={K z+cGG34_O8fyk-+CUU5%K9wz}n94gkA2lTs3v3BG)ohKe@VhvTe4_$gD>QzF9e7alW zh8ZK?RPFegmQ!8yZA9e>%Qt|%Ymrzle%8~M`fV0Jp90ove_qGYy;tZgJi20IlXkmr zwY1EGXIt>r^J}1B{gmOV~f{%xcg+RwlZVES#B?dgf?2- zt?RoOpZubEMdznY!LjV}%z;$_HT;siG~6$?^o|&+Nc(M3`6okp*N*$M*fMPHg&MO% z;gopS14G76DN;4FRF!WVLh5?u{3ur%q6)i+f58Em;0?R+{g3aFINlL;cPHaJlGjd` z<}kkd#e^9Gw5I`=g6oFnX%((|Pm(`mtv%j(tfFLXyk?~S&4qLi5|uvN5V7U;Xmp5z z%gjuw{ry7IbPmDj`0UXz+1wjO(R z0geTTgDrAnv?}ybkz3qMtu`N}yFSeoMbS4q^0i#u5eaeSv$)=_vrEIVq7x}*GlYB8 z-qpRjt|^Ve+Ozp14o$Ee#>Lg+?Lu|(ZG?|uyneyyI+f%Nvik|0KsC3;)jkk9RaYOw zafoqG{cXdoxpR$~NrWrZJKr{lR(l7}_f{`{nVmeNVZUYW>){Dbc=Jd0y}%$zh~0`w z^^?fe7+Pfu%KT^1KYa8%r5s3BXE*2%3kmHplj+R-Y{H1NSYR_Etg-dw|L*r;sLzWx zQM5+>?xf)XVb0||k9bW38RQtE_827!ET zz_NeH*RX$oP$jyg3odNfNIv7VlCf^D1U%8nXsOaE@6HMv^@?sMi*#)bXV)nw~+A4cD1 z-q8P%bpBqTnU@nLyTw^Ef4Iwc*ND$o8+?;01I!O9l`BVXbY4H5`8n~xIaGvpi{Vw+ zAFHc?lHj!k*hh;a)aPBOgu%&L^PdyTUo9K+qFn)Pr07UUf}t^+gitp9zH0KL`%wJw zUpsfQU?rs8@rp@#Y)9>pMQ@ufntoSR#G;mD=0b+uzT2~z`>(`cdsJc0hrauS;w#r4 z@!3b6w+b4#mf>TPkiSnOXRAKEW6~j0FpRGj3O_5WyGQm|?Y;roXAPFa{d(`+fqaS0 zP&jXk?`ko(SQwmFYDjAjlI<=-*oUw)1*5(3AT5(xm@Z0c z-EY`Tf7ewZy~t`fmXskIY_EPnJYaq1oLzCeP}|vB{{4##{tld$=h$Jx_dGVaW~{?Z zeqzWC@Mz)D3*R_~PdY-{c6UvSF&_;7i3ix(r8`Ykfgn3e{Bw&v@!nH)>a}$}5mQ+e z?tNOU+>z-`eAB0xLcvSq+jBaWhYnm~YZZ?4Mr^-oyU-Qs2|{?v_v1@9w{-2?fqNlp z7l@w+oYfPu8G0IY?bi{W4K`Fa_D)DfbVQ0CmY`^3;SpXHNrw`Kza4nr58FU`Z_!%Y zQ*4Dl4h3WH%=*D+^(WfbgsD2C(vy3)fNe;kLRUsbCZnUe$LZDVZ*+)N;jD#`6?)(r z{tnq~HhyT#N2u#39)Zl*C9EtJq;cs1g?Z%Qip=P9O!w?73317eJ1jQe#1JQFqr9!^ zo%>e#e&CST_5P?e5YOgLZ%eWfO;`jp9K1cN7FU7-memJ!u;2NgV}ZFfr?~ZtOe06? zbP`m!hw)ClFiGXze#j?8*7(Z|e3GuCyd z!jG+A3+!GxWqpcf1Hs$MWcY+49D#YL>{6pz z$pt(mXTIvEj7yqL+C*G2?WYzsw@NymERSfs;e^4brC*O>p`z-&neGTobf(0TPJCaL zA%SEh6M<-rwvuNYY@amSm35Ke$)qOm0+4r)Cpq*D7D9- zck5(0mhQp|9Z;li4lE)V9>rL{Wrd{R1ReH@mGl^fg!k+d{kuzFnB}TNU?Xb11L|rE znmdYZe(N0>uSiGJ8&-tB(V2glQ;*;=n_ud+%zr6KWt;Af8inrz$EXboiX4=H=F?Zx z(=RW^mEXdcNYfdYvTfN<=88Azm8_wx?PmrfbMB@|RC5SFpmpb=KCv_vxdRo#`(HW5=GRy_~Z1Ynps>>;Qc__e|ED*+#;AoI*b| zzU#buh8b~u!Byf=bT1j-DWG*_J;c;h}!kzc2HW@8+=UF>Y=vouN7sY9J?lMzF1QO(^~xvLgr({{8i-@;M<=0TfK{D;-rXF+p))PkpiYTLOpSET|l z3C84G;(x_Ii8z6|N~d&Ah+5QfHKrS>7COZ&0A@I=x0DRP=(!B;AHgx z&3!HHcRqa!RoV2`0do)NeYEz)1f)FjyuPUG?W`X#mTpqbU0#y)EQF`tKZP(WBQ0#< z$U(o=qd=79p$Fqu*<{#T<%Gi%O*fgfR79|>h3Ojh74d-Nj35;6FCbg8xm8^BMU}(u zMW=eGO~mj+G@-}Tjbv>w=(WBYB3TBo%$lLAAu$I}-C?{i3+h0l$N6TLau1HrxD-e` z8(l`NDwfSdk-Bq9m+L!CJ7dzw!8$Xqhz0LhZ@*2Tza7BYS=6@OcL_X}`AaeFgNgPR z!=pwPj=9=Pfpt?Gyq>6za4efYkWOMOD()edEtayN1{GFkQ}&3{=MIlwhCEmT4pNA? z;odDx+HAA9IvtYfQX*U%m0d#6ftyH6Pq9lsk~XIfqk7x`=OR<^nEeca#mg#}0nsVU zQ6;%}A%EAxAKPs*WS#RFl`#c|b7t?Aih>vzrILB}W-gP?F{_*!@dC%d^#>d+GRRl%ETHaNF|tgXBM zdZ!4ex^>@#3)k5P7kA7X3hY#Q&;kv?==(!8rL&tW!|%saMiaxrzBY!DyiTxbtb7i^ zjRZ+)utym2t-;aCG)?es$T+r{dNsdtseh(U)ld% z%KH8D|4rZe|KY_ii$D4AJi65Q_}xz2(F%Z&3K65x6MznN6Iz=5HwPg;$-RU~?NYt6 zW<_;(MfGwvCC~bBJ6hxyh&wzpvwWFgqI$11s=TJt>NWCB8xOnmBQv+L)GU}?*x)Q3S zdC-2fo|gYz4}5tizk^C3S5hhOeirGNg7KL(h^7$|kcWdMZkUjVBUdY5QLBxN4 zj|UG40)7p%$o>Jz-Q!puY!BbZnPEULSG80d-_*4uCdwU(O&pagz+zWt#PrGUzchFn zc#QJkBy*U|=Dm*K5}mlnmkCE`mB9?M(YFV^l^kfhV|d^dmIPJhb7F#@k@FoP=Nls9 zztUPqNYXMSb3B0TSe8OWwIFAvs;+JAM2!Ny(knXd#C89B}hO(-ZWYVMgPEs!a~QOO_AbB<@!dEF?i)wKv2kgBd{XtSBna z1GtLmF||73g-olh1lHM|sp11dOcs+7{)XGI3 z5>EvnaR8;x|M3>{SvAl_@#5vV{eG%5de_z3fdZ8Sf+JNg6Xf#fZ{r^Tr<%*7hh=Hk zUmi@AFKm9e-f4o!b(X+UfTlS#sSAF(vAS4r)8!tF^Y1oQ-0B!lP zzv)hcZZB|PH<%_c!AnJ<63%65Vm&1?WiAdD5Y#*%%jSMXLER|v%3e+vhKY*x82S^?p#iU4lm6fF z75(wUm-XEl9(?2@0UCoUDE=WkB;cU5g#l;Tfd$h1VxrVl@l~-P2k`#;*K*v7Z8puI zDz|}@dE7-E8`89q+xpa``FH6eza-2Aa+Z$%jk~4N!YVh3fbWT|6LX0#aDa!OHZ*%yN1N`$TsE%uRJdW zXG*HMV_^rh0?VMqY<{g9&$SlENQJ}h>rJ5+FMycQIds73L=AVNstGAviu9tSYZMu+ z{d;AW=wn)r#&U_aKaILSjOrlboo_Gf=aYiP18-p)T~{P)_%qB&igcCsEuF( zw>IYEg$PP^T<;%4$b+Td`>hO?sNpcfqu^h9i#M8_x}rWZD-o5%wOX3%^lwJT9?HUw z0%V%lhHOXR{V(;f_{V%Rer;oXD*PCv=Hmzuuj*_(f1)z@)NZiXqYVE*IxemG9<7XK z+;&=#eygxu(7pnsG{zQZ9@D;n+YwxA^iaY^@RHB^TY5mjJvz*WVS`;(d=C5C_o?b) zI}#A~dfPb8)Kz&J;r&mAAK_qv>ms@?D*woS1q1=g+zq*wun%kq&pPN#e(ZgL(JStO zOM;wNzC)DTXWFeE(=MBF9gh3Uk-v{e;_6q35J`(4eqor~#nzn&{T*ol+|-%E~Klab-0_E0!VCJA2oq zKH=4tJ%36rsyLTlq~#QD$88!(?DY-00!ksBh6Y#6)O6sKlJRc7K~~w0`RkU(LLI2J zy56RtA=qM2>c8{s(F+-C^?us6kfk*%{o$eJeu|))c*~614X<>((ms=1=tr(lmB@ta zF^P>9mmf(I0Aw*f$k`A6POLa67vYk+ZVqrhCePJEizLR)_p%_K_3xTKvWsXxv3~44 zM$ntH23nBh~^gwpbzZR zgGc+?C>wN~Vm&ApthD&ptC#?@D?wgM!+k`nO#=+FjyNV7DosC(3OG1Cnuat500;Jk z{5BUO#S(vi`V|whUtr;*8a8pxx~=r*#7mB|yxX~(dQQdN?^lnNhF!8oR=D9S=<55% zavk>e9}xwxp7>o$mo-m2UlBajhToWR(g~i$psQDYqi6R6%t~)FpHV5dC}rXR_!^dp zr^RIQ%^U%l9SO8u8Sy515J_wW0`7CwtaNR)wT=4c311G_!UPZ4efnW34aMOG>qwcG^5dRFst0=lBDJ@Wc(5; zxLnXNk|Cu{;zC$s<})B{E^RHTv6vVm5YasI#gjRIwj_!>#zRuf99;?G2lxW^ zXiN3;k9PS%mlv0Eh4X_VwB4ZfS467o(9CCns3&-Fbnmwuw9*}@RGPSF{A#NG(-Y}k zz4b4GLV9*QBW@-?Xp z+Z1c@A=YpVn}#2zgiVsMX#CJm9Nm4b*_K}^u;vogD-I0&wgyJD&%QErNz&|sO3l2U zgo57b7GJ_OZg0xSi7wy!wX4c9wOAl((jSK;K)A%~6|`&E!tggE)_(YAmawVRvE5}O zKi<9d!cL>xA-IVUVRm7%MQMwkFRP`xelZdJYbF5~951|TD$Sc~VIuZk>Wrr-KSNOz zaVGlD!Y7?l@6?INoI*$HGUzh&QvE2AU)e(5jYq5BoLhQ;bzsJHZg={7>BC^(zs27n z74u%<;5>VPI&$6u(;0^(6kpd2-<-JbP=}zNcJ}-u>+rTAU~PDPn2*mq(CJnYWY)J< z52zc=^)W7M{*k1NtNpbLD@eDeFZ7rZ=OYx-&koeyh##}O7|SN|(G1k3&DZt`hTftQ zw_W5N7#}RN{vAjT2ER6zX5KQrA}BpIP`732GluBWc=63W#z89UAmgUZ05PtL^@@F= zGCOz8-ytaX#@$7+G_8Wab*|2x! zDYBf*wxWuCJ=Y&S1ldP|Mg}$C3c+`L+dJY`uR7#YL@>Md;jUT~${>~rH_+~w9Cy9* zTn*8C|G|_Vc^?8Zt4OB0dB1(S_mws;IjWzM0V#kE934Y0*n#Y}@%`7c(no+p49L!|mM zG@HB966!cwtB>xrk9`VZ2E{&z%a(n(rhdt9<(~#7mRS~LC31jlz3EBbcjeTxTjLhe zB+|wW5v17%3dkYA(Rv;Rdp{foVW zHJ2tH!N;Lml+6jkuLxcY)=-!$FU~B?e;BdI6c~2%3IA+TRAc@^D-NtR6@tK*zrj6~ zX^CZb48;R`_a2lF;xgCnP+Osh%evZ?xSjKPolk!`YH_Gl?% z-|b#|Zlyrc0+r4us_xEM6f`wrBN>7&)1XaE36Tb%gf0rHVVcbE66BqIc!gm7NMYlV zWp8#2KL4%sQv~h+1Do3B=>Y)a6R6P`!p526=79;n$Hr^) zIzdyxnx)@Yx3(IY!uM-G-y1miNCQthm$&~O1X#qcUX+41FRFnP70Und>M^fWT_4RR zIOySbq;}?rQB9xUhw4{^E7m?A8duIJ;Lcx-BeLvqP!e5F*(?(RYKxcNrT1D94hz;| z(!&#DJq{JvCU2Sp6$pwwVLS*&G6b>F=6=%EXDM%I@1@~p#mS?qTw z%^a${hteDvn0WBGMG5#S!2o*lkM@!B5kX~@YeZQ4yx~npz^l^TfbB6`?K`iI$`KeT zF`@d8l?%tbVHRA6R005+ZJaG`2A+JYVP)47PRJEY_1o5Zey;|+1f*QaHIlpQ>;8Cq z^JNrZ-j=tenqz|+KYJ(h=wjQj5xCn_me+ac5^k+k_r?R8djgrfwU&Unu5dYM->7rD zeE&I0qt5S6UE|;El@K4QI&ti}zB80XLV}|mbDQ+0FsaUog-i&@FgGI}epgC+l;=s( zWQgQ9SC;+qwyYbFOC7{#6#$1n)+6%AJY=KtZ`Vus(+3z@w6dAbe;Bo9uY7T)vmm0Ndqm} zFKKXS;9pE&pV9dta2tc1nf*^=yua=N^yfyJ*f@Lw0O)S?yY(##-AFd%64EP~$tv&R zfCB%em5aY*$4N59@yLWeSQ5bvBd|+QyNR0r6Vx$PLU#NeoMOFu9FUWG63{CJ9zarL zyYUzTkpU9gz^*Mlv0WN5?b#O{&S^Ny?#m0xjoyF5l^`9ZUFYuMw9M$(OY$lvYqMnr zylw88jVx+HG3s1sb76i)(92@+4?wp3_$<~9ZhVRdXuAM)SN4y$AV|$$%?Gh_#;@A+ z$|1Kjw`sc>KDoMngXT$dCu2D!gAnwXcp>r`mu7UuQ>oAlKl7 zUYh=*mZ;X4g($-dlrVns^XSo~u}%ES1F^#ht!$5mf9+m80;O6Mn-s$IDx^Z!5 z6#HM=9@XrK!000UvTVS^NAY5LpHN*k(EDff$Y*DG3Ht>fD71T?;A>Y~vO`(2rMAGj zt6gZw`R04Aopn*7+pgja5cOnaeNa-2??Ki34s&XWs;K7GA{cc$VW=(HPchyn8t`Bj z`jzp+7xQpQhf_P`^d7(dS3H0hu!akf_Copd6(@%lZg)J9luucxheN}v=fBXz6A!?W znUby%OQLkVc8?G+XH)q1vs$14pm>QYGG9}LS=GFX&b)fi72Xd(C8lxDqB#vYbb1md zbVCidR*xT7U`dA#g@52ASHr})I-dZ8_}XZKx+1WX;*uakl{c^K7cL+rf0@`^Dz~Pwr^Y$PwoLVXHKZOVoc-l^=u!%uYYZ*qiLd(cf-XSq5myzIKut3Rm9>7n+?{b{G7r zQ3*3$!WXM~d3D>s$G)>QH2z;*9FG$2#74izf;@mDqcV@R^4RCw9ULwG&$fa8t(V|` zdl4`gyiREXeBw&MlGze~h`T+oDdc^|%cb?Y1 zNvtV$b1A?Exr|!=3%l&A9_`D~tNpD!)(I>A7pOFO-2umUS)<~DmyvW_Z)v@=7%`QM zfG5FD46Xqnw0s*|v)u7nI@DKhWdz9BHXk+EspuFxvR}7hYUCQo7cgv-)oNGPk4DYh zFE}=KM}|;?wb%Y-6RAdPY|p7p>`WDw%>yDgT(>FU*>zbDWrt$Vxoj`&5)G=^#rOI4 z)+hnHK6qC7r`;g1fy#V!QQW&f#l0K3@LcF5UHLS=fw25LstrM0oIW!rzlb7mQPQxU zU}edd|5%Xr;~%1-KrO{cjd{1m0c0QdpgHA#5tH=)0PmvRkg}tvDKrd~v{>-3!xhH`}4XK9c=OZ@qGEga?EO&~CF=2@!SMpI;DBU3GCV zfo71!W3yO{BY?1$vB)lIhithH)*6BujqPzwi)%O!p65CcDv;uiiHKkDY6K zd}{X>cAPRvZBq&4suh@QK&d_(bV4M`tysRK=N&PyFizcdoCZ`xe8l)D5+VXcP;fFG zMu&wUQCdMi;7(PI6V)RlQaZ$>$VH&{&LF18ZxZ0bAiPo?Rq)zpJ$`>gybVnnkd5R+ zWt=kKG()`HQ~%~{p&vuB)cY{$;I}uvZi70vh@8B#Zg{qt(}Ps?te~cn>pR!#Kh4g1 z=6^6Y!;$~1MsPMIFZCOF=y<2O&tl_8_}>w=f}isoQ4u7`2jqjR5j|5s-`f0V(j-gh zMcZ$E>?`tGs5BwoSDusW$!*lxOC=Q1w`hEnyqFUM#Qe&ktJCh$7Op42;3Bix(0b@a zX}RW%oEJ3|tbVOqJ(n*3Fnn&^V0H1;b;ITbwKQE$AjET7z4zR*r`olt9iQ$Jhx-%A zo%VO?78526y&ZD|=}EBfu=Qi0NEHr@(!5sP&b7M(6jt)B8<3(ZmX8q9{{(e6Q zj2j;S&cV4db`a!yX)-Glu&%1xs92ei2_bi%+Rv`U#PzFYeOB981W1LTQjATm!X;G= zV~4jXz`68fT2p>q-vW?hlJ(M<-9e2E;|hD0({c+E%g8t7-cS)ON&)6qmOL?*Fi<0@ zI-L!(iw>JLq)3IM?$GK;SB0>)=C2nV-s3J6^L3bmDTN@7zYl{!5zk3qLX=z&q46q_w;!9!I5aGkWzNpi45;y3hPRlLf zCTKjH`Hmk9NLfU9VQUO%(ilI`IHGxdVVoEnw%h`$( zrB12GZUwMoCaA6}f;S-0H$ujvY*cLS-9lFbTQ^`o`V-oW>dCgAhQ~j1?Klh8h5?`xjR=x)j%gbd$;c|ek zP|kl12#lsmOCj>7Ay^kD@}U{~SOQvK-osEq6heq>G%r^TpT{Z?GYG=eJYAOm%6=B8 zGuZdKT;j}6CrmOC&C5FdxHLFK#2l11b~8MO6~|e{%XnN&9+DonbHZeA)9|MYDsNo! zg3hzJd;*OcYUyY&?dD7Yi`DAM%CKu8v zOkQUTRs>zJT2sDkmvGW`=NPSV&;l6|VgP+bKLYr~o)T*ySbTul_gZZr5StyXA4!~a zkKK887kk?!AU4iDQ1Q&_GJ^^f2e|w+@!@=olMsnarq9qi7CKkIjaSDu(MsSstsH9YI~ozCxC$i8ts`s109_5Api zPoEJF;yt@hqb94w(!Xs!u;X9sGPl+N$$Khz*usrHTn=}d-|LynAir{ENBIZkKHBUU zDvj(6eO(IuYGEqO_D{-qX=m;HW`r};9y>qKy1~IFqj-}dnvOis+j)AI%PUmuM3O8)*n13-=9=eOj#BiY}8a8fsM!%+grgZ-BxaQT>bx~?qqIC76 z_Nd}6w}E>mPUGQySI8{%1%{ufcEJ`n#3%b=o?hQ0PGi^d_c_wX5-HDiMPML#{6boo z@q3OvWrAwl0t6hJcE)LSMzcgS*z%g}-?)2X^F=u^RyP1#H_gAWG_@nXx>Y_ZvVpFik!?5)Zv2Mc=zZ==T!L{9H^Q?Svw|x=u$#Dk5 zT4*`$?qV`0rm$qKS8ta)%#mwfF)YZm0E=6{B6@kHEogaECzhY|mr zzOLiMzBuq3`8jfiC(?J|CiB#-VTef)wv~|{OAy)J$-h^jP-jIsQ?isTHromv>9Nl$ zqo(#{%THkuc;B59I(5bQH%xOFS8({UeNS77d|CVQnQS*=urn7|itXUef?QY1L>5!o z7Y&|H(7EuKwlGn`XJa-w<@6+L&a0s zTgWxp#X&ZcH5?-3a**Z}uF%vPOvsz6-PWg?{R#aT$>f}Bqnc*U)w!rKPEk!2M(JkFCuyk{IJuF%RbejP@y|kvjgw`i#hUzyZwY{G@WwgpabKaQP zJ7BnyJl|eVD?W+)+OthEhm zE$Z>_j6eLAe7=f=RULAUEk7-nPTAnz`_&iCDN!|ve4h+YHFRo04JLHn3;W2|$2Qqz z6d0r%qOP%PEiqA!O6Z-%!<+5^%vWiHBN7|&80KHdabJzZvU~bE;stzCRZEoVg4B6 z#BK49y+xfxomz!cLku%2rOlWuz8)}e(MMC!J4rp3h`rb9(j(WTX%`F=TsBDOhl z88qWfrx8x;#s1LH%X7dFQ350wf<#A#>VZ*N6hPvhu5U(=jZe`dPu*1pdkuT6{!9CF zXZ6?c5IR)x`DR>F|IVpSAKcn$r*Wa7ctOrRM@VV|cSzWuFKR(cA8-HN9kO+K9Fu!t zsG_@e!wJoolN*eLSp_PJ5Udk%4NAo?GBh_8C>rYkG!@!5O|^8iZmb$ldB4-GYnq@L zO88p)5U_gFbt2onF}?z=U*;AI5hE=&uOoj=TMXKy5{HEwb6*SQhYOA4K{GifjD(Df z5j&-&9~EF5HuJpyp0Ixqxz&mB*jK{6z!N5wJ};XABJ0I<;RTV`8?>$t$b)BDN+SXTk0{c0_kqOW z@2!K%;0JK^=D!SE^6OqiW=!n3RvaX3C1X^>*S0z_+MJt{%&#j(o`~6by9c)!ACWfA zK0mHZ7gh2n`hTNfDuN@%1k+k0Xdr1Wmx+=)1a&)c+l4F*TN6d#+*_ z#B9vtc4eX3lwQV0jYldlY5eOM{4ePpp<4I%^W#w)#2Y$^Q9}tCp)UnLK#$bBXB87g z5O<#cz=R3eE#nl>V`{I2Rvq@Buk%(MP~;8Cm^gqx@zAsTK&&mlw(?O3)~}PEe^T~1 zIz@YHmzruT!~nt3!`N5`MK*eRjzVt$U!axo*aR9T9&Rbv7J2t0R#&iY@A8RHkTLD`VQI(uD~ zG9VqA*NQeQnF5u*7ptbVHcB@PWvmit+1E+ekEBri6{Q8osgN~)YiDfSAUprFlAA7x zQZk$Qxj&oxTm?8$ZPq&$Y1>WKknsA9&*uuk`|!B~@+_+llv`4IFngy6Xf0S`%0zjN zZf)XS0|hgaGhc%e46mDVuUlkvc8w+Zp)W`-y0D+2yz2in`?A|mD{pK2k=T4jI{(k) z@J2#$q~DTV5`BKdmPU9nN?!otN_iwRCPVMHNhFM}BXQ!Gq5@UE;JAJvA`MfU>XNl~8%B?poBr%zgLIxq(s4*(XBc@U}fx4W6&_|TkVY&(`}(EMh`=il(W ztrsPM;P$5sDnD>~;MD~LfNT~Rhw80gFR?Yg;<>J}K0(8G9Y3}6@aAIX`8ErJtG+L^ z;&_jiZm>=d4Ho+Fp5fqjZ`}N#E$z@yg5>Cnq1iR0PFeQ;rw39;+Y5VR2!Rj=F6QRq z=tMt@S7VZY*h7{wa@0-o5*5`33CMlb*J=Mg{7&lP`%Y2LFL5i)%)7;D6mw*v_Po{rN&6-M|cldcBb%V8mS}^uFL<$IxGd?4GRJkmu6;wse0uZsf;{FNArV zwtLByz~WVp797wQP<4mi`0o)~gf9;kNsd9+u^nQBQvT;%@K#@-OpZ5)i|kG2L46aI{iJzfM#e zYd97AT1ykF zCEzUImYz*o?>xgx;hXwu-g@|fmp}PWG!u_5D$8SIa#z=VblH5e%L4%7taXR(2#*af zH>-<|l`DXx=K1eyBKaWvp1Y5}RUC~!GywEP>#sK9I$LP056>7K{!2BEI;|;M4Uxf} zAR#<|`u}O~N&}M0_Bd+UIOAwfE63bgrp3mvL{r=-YiuSPD;>uiQ}nrIu0aNffQ?R0 zlS_+&N@`|mlMCi9iQ1;6BB?1N29_aD0nr3yQF#}u_w~(}_vv-M-Q{r4J=}B8J^%l2 z86ESFD+vW*oTDU99?dqzQC^mOm(pHGUo(R(n2ZuxppOr_&qO)=WL(dI9gY9FdXSk3 zZnKIns^tsNmdr~y;$m!8N5dKrJ7yN9l)JYqgrAzOhiFCQXf8@E z1{c7utB-MWK^OXcK*ubgQQT9ui}M9i+9E~h!@-%6aDR|1eBX_V*(Xpy?Bta6c)z~u zec%4wVwVlSh;6T)G2}gh!h%@91qxy>QTeEnZ#UF8m7r<`7q-4K$ELTI5Sdrn=yS{gvDjfg^wW;p^h#>RX*bDJjL_ob z30YeJkpuAH9miwnzquam`Duc1(;S)2UrPNQIkzdCB*; zuAXvha(lr$nHOs6@Paiu#f?>Qk>gs-F~Pp)Fd3)gO7Tj~fx}V*1&~P@s;xT2#Z!S4 zP}H34U0GG{>CEDq#BxjKQ*@kiiW$7z@;+?>cR^p2Tsq|&>z-T7L}TN|rS$>rY@lC2 z<$(6EM}?KWah>+5`L>nrc7LTdg^&ERRy+>)*P2c zHw%CvaIPeqXO;F?p?iz#lDBcVbj=ro)37dEiDOueYs%1Ic#yd%x`2N2@%37j#1<7d zP)RMGM=KBH?I@ytWBnkhHF2R7&H#uhqk>;Ud6#UqBZ%_~HAz+lW*)qL@LPhxv{~zU zQH-5NaJVLEy)255$onxXlC%DTvSCn5D5~dQYyr=-O9y`M&f#6{!H{_)4>?XE#3+`8 zhw_7WZ?VGpRks*i{JN^9MxE2HJ$E$R3Jz01)X&O%V47U-hT?>(&5*b=a7v#c66+&9 zBWU~IR<0#gax+(7p~>DUpxjcTM!n4}E`Ce0NA6sKbpX;U{sv$2^+--w4!dp>5KObB z8yAFGKlZard4gHT=t+Mepp3};kYRb9y6zF1;Bd1^z8n_{=VX}v;dyQUhRvm}-o)b4 z&E#S~ou{Lorh}0*%1x@}qiHn!?Tn%&Zo>^=sO^Q+A1eSmUUgs))Kp*sK~P;W%@PE7 z5wbXToDisTKK4~5)eurceL_j~hr$47$-DZ;l)IN-sYOZXg0ms*FZ@VmMMr5H6pNib z-TYQ!9yTxliXZHlb{kK1mu5ML0^mo25-SdyRJik(-ge1Y%c|`t4Q^1yy0iJA&IqL8EOcJO zPbYkn8f)PBH9O+ZucDLBua_bc)EH^4T;s96N^0%5K?@sOiwiYu0yS$~zO&C_%&P(8 zbBJyLyIgd$i;vOSH-mXwY6pwRw<$r69>kEcw=#^=a*g`z(BxSMk3^#16^u%#A?rPn zsS7TDcu(!==K{*#_XfxipLdDRM-Ej#c@CO#*FQoU{}y{-m&1z(Bo)*~_M!2l5<{FL$ooi#5@4$%ov_r`!YqR>FZy|H9P!f2G{I>IExxmiq<52<5Sz z_7JO0skRZiJAdfGW|IMc^L&^4)|c`U4bhlnw#ph14BM=O>8Y$lj2Uk@VM61x(<(A< z&E{2|MAN*3yH<|Iq_C+cFcojvm(khrZ zuH1t|Dycuft{p%>3Lpf~@1%A>7Ysr<^H1MA>u$>+a=}WdgXhCgtj z&O3aTC{Cb@52XbXu#+b58`&teY{>X4ATc$S!!j}+@7=;Rt11mNY!1D>Pb(Hc3mES+ z)!&e*vK=ZOIy+wP@(uMlvdl8&=2h@@GCyn_Mwy>AWq7;}>wqxmptCwYn{>*Xt4hKtKWZyNiG->j@I%=Fa8LOSl)(D!0zKKO%nFS{- zrw8uhZx=OFoJ(oed&Eda6X6%GLw`~hCMBmA+~eA~ZWkn)jomw$*poog5NBj7o`aGy zcWEsGBFRxh;@G9>tm!SG5aK1z=F^Wk+oabJp`D}XPFdQ}9mGnPI@E9oF8Mt#APhRS z|Dh{>fYB|iXA2JE=H^Fd$ZY2Km;y}pdYL+I16czOD;nO(bUJdT0&!-S;_d5Q^x?g@ z5U%+geV&NFSD&@5i_;*CE}YN9wzpR=BU&s&hLNM`%GC@b*+OcXr4BSaW6Untu7t{y?uEX9!r>PlPQFv=#N8|$o-UChtlLm zO}8X%O|T&Ty1o-2p?QLtRcdwKEO4*giTxH6ZuQ|qxnbxU;L%F;hP z3Xp6L?PPI~sH#`Nzg1S{#au5f(b%o_+({i^)4V07`|18)^-i~7^S z9n|Z#q)z}mw!CO-jB5>Yi6q-xDT*ys=t~V5S*>)-8xb zV6yL}Z%xFj)|53j)wLaX0R+IBp3W5d%f;nz2QPrIwwkL22?0I|@Ix3zx+YgBRj#bF z0HhrNm4nbpYv4K{r);1}$=-pQ@Z#0&p7H-eYkF+nQAxH}y(I$8QdtT^xv=gKXQ#!`D0P>A@=_O1)-zCSO5^Jk$rG&YE^Rl6$dw+sd16c^GI(E zlRe3LZfkS(8bRnzadFPeJx5GW)~`r$H+aU_Gmj|7A8vpB)=&L#|B;${9$kagk1`M z`)$I1Hrcj#a@Pf_`dd$3glq+$j5(9hw4$X>6#=CtLQvZZuw6(K(&bzxS-o-qN{4IJ zgj9Y2zSFn7B%ot;7YKx{2Zy-6E<8#CC9&2n^`oI5_m7aKBnbIRB2=HB7SV$$vS_jq z?mqkBVDjtJag8#pav#~e-L(~sbSj(b`E-rJhH47Qmrltjb{$<(jvI&kx2>WA2cUGpu)=uV{yzTQkhb3P}$~^v^)_U^_0<-2sKcAoH;Alt, the **additional recovery information** screen is displayed. This screen contains the **error category and code** that you can use to retrieve more details by visiting https://aka.ms/unlockissues, which maps to the next section of this document. + :::column-end::: + :::column span="2"::: + :::image type="content" source="images/bitlocker-recovery-screen-24h2-additional-info.png" alt-text="Screenshot of the BitLocker recovery screen showing a custom message." lightbox="images/bitlocker-recovery-screen-24h2-additional-info.png" border="false"::: + :::column-end::: +:::row-end::: + + + +The next sections describe each BitLocker error category. Within each section there's a table with the error message displayed on the recovery screen, and the cause of the error. Some tables include possible resolution. + +### Originated by user + +| Error code | Error cause | +|-|-| +|`E_FVE_USER_REQUESTED_RECOVERY`|The user explicitly entered recovery mode from a screen with the option to `ESC` to recovery mode.| +|`E_FVE_BOOT_DEBUG_ENABLED`|Boot debugging mode is enabled. |Remove the boot debugging option from the boot configuration database.| + +### Code integrity + +Driver signature enforcement is used to ensure code integrity of the operating system. + +| Error code | Error cause | +|-|-| +|`E_FVE_CI_DISABLED`|Driver signature enforcement is disabled.| + +### Device lockout threshold + +Device lockout threshold functionality allows an administrator to configure Windows logon with BitLocker protection. After the configured number of failed Windows logon attempts, the device reboots and can only be recovered by providing a BitLocker recovery method. + +To take advantage of this functionality, you must configure the policy setting **Interactive logon: Machine account lockout threshold** located in **Computer Configuration** > **Windows Settings** > **Security Settings** > **Local Policies** > **Security Options**. Alternatively, use the [Exchange ActiveSync](/Exchange/clients/exchange-activesync/exchange-activesync) **MaxFailedPasswordAttempts** policy setting, or the [DeviceLock Configuration Service Provider (CSP)](/windows/client-management/mdm/policy-csp-devicelock#accountlockoutpolicy). + +| Error code | Error cause | Resolution| +|-|-|-| +|`E_FVE_DEVICE_LOCKEDOUT`|Device lockout triggered due to too many incorrect sign in attempts.|A BitLocker recovery method is required to return to the logon screen.| +|`E_FVE_DEVICE_LOCKOUT_MISMATCH`|The device lockout counter is out of sync. |A BitLocker recovery method is required to return to the logon screen.| + +### Boot configuration + +The *Boot Configuration Database (BCD)* contains critical information for the Windows boot environment. More information about how BitLocker uses the BCD is available here. + +| Error code | Error cause | Resolution| +|-|-|-| +|`E_FVE_BAD_CODE_ID, E_FVE_BAD_CODE_OPTION`|BitLocker entered recovery mode because a boot application has changed.|BitLocker tracks the data inside the BCD. BitLocker recovery can occur when this data changes without warning. Refer to the recovery screen to find the boot application that changed.
To remediate this issue, restore the BCD configuration. A BitLocker recovery method is required to unlock the device if the BCD configuration cannot be restored before booting.| + +### TPM + +The Trusted Platform Module (TPM) is cryptographic hardware or firmware used to secure a device. More information about the TPM is available at Trusted Platform Module Technology Overview - Windows Security | Microsoft Learn. + +BitLocker creates a TPM protector to manage protection of the encryption keys used to encrypt your data. At boot, BitLocker attempts to communicate with the TPM to unlock the device and access your data. More information about how BitLocker uses the TPM is available at BitLocker overview - Windows Security | Microsoft Learn. + +BitLocker entered recovery mode because of a failure with the TPM. + +| Error code | Error cause | +|-|-| +|`E_FVE_TPM_DISABLED` | A TPM is present but has been disabled for use before or during boot| +|`E_FVE_TPM_INVALIDATED` | A TPM is present but invalidated| +|`E_FVE_BAD_SRK` | The TPM's internal Storage Root Key is corrupted| +|`E_FVE_TPM_NOT_DETECTED` | The booting system doesn't have or doesn't detect a TPM| +|`E_MATCHING_PCRS_TPM_FAILURE`| The TPM unexpectedly failed when unsealing the encryption key| +|`E_FVE_TPM_FAILURE` | Catch-all for other TPM errors.| + +### Protector + +#### TPM protectors + +The TPM contains multiple Platform Configuration Registers (PCRs) that can be used in the validation profile of the BitLocker TPM protector. The PCRs are used to validate the integrity of the boot process, that is, that the boot configuration and boot flow hasn't been tampered with. + +BitLocker recovery can be the result of unexpected changes in the PCRs used in the TPM protector validation profile. Changes to PCRs not used in the TPM protector profile do not influence BitLocker. + +| Error code | Error cause | +|-|-| +|`E_FVE_PCR_MISMATCH`|BitLocker entered recovery mode because your device's configuration has changed.| + +This may have happened because: + +- A disc or USB device was inserted. Removing it and restarting your device may fix this problem +- A firmware update was applied without updating the TPM protector +- Any example at https://learn.microsoft.com/en-us/windows/security/operating-system-security/data-protection/bitlocker/recovery-overview#bitlocker-recovery-scenarios + +A recovery method is required to unlock the device. + +#### Special cases for PCR 7 + +If the TPM protector uses PCR 7 in the validation profile, BitLocker expects PCR 7 to measure a specific set of events for Secure Boot. These measurements are defined in the UEFI spec. More information is also available at Trusted Execution Environment EFI Protocol - Windows 8.1 HCK | Microsoft Learn. + +| Error code | Error cause |Resolution| +|-|-|-| +|`E_FVE_SECUREBOOT_DISABLED`|BitLocker entered recovery mode because Secure Boot has been disabled.|To access the encryption key and unlock your device, BitLocker expects Secure Boot to be on. Re-enabling Secure Boot and rebooting the system may fix the recovery issue. Otherwise, a recovery method is required to access the device.| +|`E_FVE_SECUREBOOT_CHANGED`|BitLocker entered recovery mode because the Secure Boot configuration unexpectedly changed.|The boot configuration measured in PCR 7 changed. This may be either because of:
- An additional measurement currently present that was not present when BitLocker updated the TPM protector
- A missing measurement that was present when BitLocker last updated the TPM protector but now is not present
- An expected event has a different measurement - A recovery method is required to unlock the device.| + +### Unknown + +| Error code | Error cause | Resolution| +|-|-|-| +|`E_FVE_RECOVERY_ERROR_UNKNOWN`| BitLocker entered recovery mode because of an unknown error. | A recovery method is required to unlock the device.| \ No newline at end of file diff --git a/windows/security/operating-system-security/data-protection/bitlocker/recovery-screen.md b/windows/security/operating-system-security/data-protection/bitlocker/recovery-screen.md index d8011c5ef4..e21c99ddaf 100644 --- a/windows/security/operating-system-security/data-protection/bitlocker/recovery-screen.md +++ b/windows/security/operating-system-security/data-protection/bitlocker/recovery-screen.md @@ -7,6 +7,11 @@ ms.date: 06/18/2024 ## Recovery error details and their causes +Starting in Windows 11, version 24H2, the BitLocker preboot recovery screen improves the information about the recovery error. Instead of displaying specialized messages, the recovery error contains an *error category* and *code*. The error category and code map to a webpage with detailed scenario-specific content. + + +## Recovery error details and their causes 2 + [!INCLUDE [insider-note](../../../../../includes/insider/insider-note.md)] BitLocker recovery is the process by which access to a BitLocker-protected drive can be restored if the drive doesn't unlock using its default unlock mechanism. From 180ab5768c5d619048d5370ddc1477f8fd5e5cf4 Mon Sep 17 00:00:00 2001 From: Paolo Matarazzo <74918781+paolomatarazzo@users.noreply.github.com> Date: Tue, 18 Jun 2024 17:06:02 -0400 Subject: [PATCH 07/99] updates --- .../bitlocker/preboot-recovery-screen.md | 107 +++++++++++++++ .../bitlocker/recovery-screen-error-codes.md | 128 ------------------ .../bitlocker/recovery-screen.md | 5 - .../data-protection/bitlocker/toc.yml | 2 +- 4 files changed, 108 insertions(+), 134 deletions(-) delete mode 100644 windows/security/operating-system-security/data-protection/bitlocker/recovery-screen-error-codes.md diff --git a/windows/security/operating-system-security/data-protection/bitlocker/preboot-recovery-screen.md b/windows/security/operating-system-security/data-protection/bitlocker/preboot-recovery-screen.md index ce03b1fa0b..388cd58e51 100644 --- a/windows/security/operating-system-security/data-protection/bitlocker/preboot-recovery-screen.md +++ b/windows/security/operating-system-security/data-protection/bitlocker/preboot-recovery-screen.md @@ -187,3 +187,110 @@ There are rules governing which hint is shown during the recovery (in the order :::image type="content" source="images/preboot-recovery-multiple-passwords-multiple-backups.png" alt-text="Screenshot of the BitLocker recovery screen showing the key ID of the most recent key." lightbox="images/preboot-recovery-multiple-passwords-multiple-backups.png" border="false"::: :::column-end::: :::row-end::: + +Starting in Windows 11, version 24H2, the BitLocker preboot recovery screen improves the information about the recovery error. Instead of displaying specialized messages, the recovery error contains an *error category* and *code*. The error category and code map to a webpage with detailed scenario-specific content. + +:::row::: + :::column span="2"::: + For example, the recovery screen is showing the error cause, an error code and the option to review additional information + :::column-end::: + :::column span="2"::: + :::image type="content" source="images/bitlocker-recovery-screen-24h2.png" alt-text="Screenshot of the BitLocker recovery screen showing a custom message." lightbox="images/bitlocker-recovery-screen-24h2.png" border="false"::: + :::column-end::: +:::row-end::: +:::row::: + :::column span="2"::: + If you press Alt, the **additional recovery information** screen is displayed. This screen contains the **error category and code** that you can use to retrieve more details by visiting [https://aka.ms/unlockissues](), which maps to the next section of this document. + :::column-end::: + :::column span="2"::: + :::image type="content" source="images/bitlocker-recovery-screen-24h2-additional-info.png" alt-text="Screenshot of the BitLocker recovery screen showing a custom message." lightbox="images/bitlocker-recovery-screen-24h2-additional-info.png" border="false"::: + :::column-end::: +:::row-end::: + +The next sections describe each BitLocker error category. Within each section there's a table with the error message displayed on the recovery screen, and the cause of the error. Some tables include possible resolution. + +### Error category: Originated by user + +| Error code | Error cause | +|-|-| +|`E_FVE_USER_REQUESTED_RECOVERY`|The user explicitly entered recovery mode from a screen with the option to `ESC` to recovery mode.| +|`E_FVE_BOOT_DEBUG_ENABLED`|Boot debugging mode is enabled. |Remove the boot debugging option from the boot configuration database.| + +### Error category: Code integrity + +Driver signature enforcement is used to ensure code integrity of the operating system. + +| Error code | Error cause | +|-|-| +|`E_FVE_CI_DISABLED`|Driver signature enforcement is disabled.| + +### Error category: Device lockout threshold + +Device lockout threshold functionality allows an administrator to configure Windows logon with BitLocker protection. After the configured number of failed Windows logon attempts, the device reboots and can only be recovered by providing a BitLocker recovery method. + +To take advantage of this functionality, you must configure the policy setting **Interactive logon: Machine account lockout threshold** located in **Computer Configuration** > **Windows Settings** > **Security Settings** > **Local Policies** > **Security Options**. Alternatively, use the [Exchange ActiveSync](/Exchange/clients/exchange-activesync/exchange-activesync) **MaxFailedPasswordAttempts** policy setting, or the [DeviceLock Configuration Service Provider (CSP)](/windows/client-management/mdm/policy-csp-devicelock#accountlockoutpolicy). + +| Error code | Error cause | Resolution| +|-|-|-| +|`E_FVE_DEVICE_LOCKEDOUT`|Device lockout triggered due to too many incorrect sign in attempts.|A BitLocker recovery method is required to return to the logon screen.| +|`E_FVE_DEVICE_LOCKOUT_MISMATCH`|The device lockout counter is out of sync. |A BitLocker recovery method is required to return to the logon screen.| + +### Error category: Boot configuration + +The *Boot Configuration Database (BCD)* contains critical information for the Windows boot environment. More information about how BitLocker uses the BCD is available here. + +| Error code | Error cause | Resolution| +|-|-|-| +|`E_FVE_BAD_CODE_ID, E_FVE_BAD_CODE_OPTION`|BitLocker entered recovery mode because a boot application has changed.|BitLocker tracks the data inside the BCD. BitLocker recovery can occur when this data changes without warning. Refer to the recovery screen to find the boot application that changed.
To remediate this issue, restore the BCD configuration. A BitLocker recovery method is required to unlock the device if the BCD configuration cannot be restored before booting.| + +### Error category: TPM + +The Trusted Platform Module (TPM) is cryptographic hardware or firmware used to secure a device. More information about the TPM is available at Trusted Platform Module Technology Overview - Windows Security | Microsoft Learn. + +BitLocker creates a TPM protector to manage protection of the encryption keys used to encrypt your data. At boot, BitLocker attempts to communicate with the TPM to unlock the device and access your data. More information about how BitLocker uses the TPM is available at BitLocker overview - Windows Security | Microsoft Learn. + +BitLocker entered recovery mode because of a failure with the TPM. + +| Error code | Error cause | +|-|-| +|`E_FVE_TPM_DISABLED` | A TPM is present but has been disabled for use before or during boot| +|`E_FVE_TPM_INVALIDATED` | A TPM is present but invalidated| +|`E_FVE_BAD_SRK` | The TPM's internal Storage Root Key is corrupted| +|`E_FVE_TPM_NOT_DETECTED` | The booting system doesn't have or doesn't detect a TPM| +|`E_MATCHING_PCRS_TPM_FAILURE`| The TPM unexpectedly failed when unsealing the encryption key| +|`E_FVE_TPM_FAILURE` | Catch-all for other TPM errors.| + +### Error category: Protector + +#### TPM protectors + +The TPM contains multiple Platform Configuration Registers (PCRs) that can be used in the validation profile of the BitLocker TPM protector. The PCRs are used to validate the integrity of the boot process, that is, that the boot configuration and boot flow hasn't been tampered with. + +BitLocker recovery can be the result of unexpected changes in the PCRs used in the TPM protector validation profile. Changes to PCRs not used in the TPM protector profile do not influence BitLocker. + +| Error code | Error cause | +|-|-| +|`E_FVE_PCR_MISMATCH`|BitLocker entered recovery mode because your device's configuration has changed.| + +This may have happened because: + +- A disc or USB device was inserted. Removing it and restarting your device may fix this problem +- A firmware update was applied without updating the TPM protector +- Any example at https://learn.microsoft.com/en-us/windows/security/operating-system-security/data-protection/bitlocker/recovery-overview#bitlocker-recovery-scenarios + +A recovery method is required to unlock the device. + +#### Special cases for PCR 7 + +If the TPM protector uses PCR 7 in the validation profile, BitLocker expects PCR 7 to measure a specific set of events for Secure Boot. These measurements are defined in the UEFI spec. More information is also available at Trusted Execution Environment EFI Protocol - Windows 8.1 HCK | Microsoft Learn. + +| Error code | Error cause |Resolution| +|-|-|-| +|`E_FVE_SECUREBOOT_DISABLED`|BitLocker entered recovery mode because Secure Boot has been disabled.|To access the encryption key and unlock your device, BitLocker expects Secure Boot to be on. Re-enabling Secure Boot and rebooting the system may fix the recovery issue. Otherwise, a recovery method is required to access the device.| +|`E_FVE_SECUREBOOT_CHANGED`|BitLocker entered recovery mode because the Secure Boot configuration unexpectedly changed.|The boot configuration measured in PCR 7 changed. This may be either because of:
- An additional measurement currently present that was not present when BitLocker updated the TPM protector
- A missing measurement that was present when BitLocker last updated the TPM protector but now is not present
- An expected event has a different measurement - A recovery method is required to unlock the device.| + +### Error category: Unknown + +| Error code | Error cause | Resolution| +|-|-|-| +|`E_FVE_RECOVERY_ERROR_UNKNOWN`| BitLocker entered recovery mode because of an unknown error. | A recovery method is required to unlock the device.| \ No newline at end of file diff --git a/windows/security/operating-system-security/data-protection/bitlocker/recovery-screen-error-codes.md b/windows/security/operating-system-security/data-protection/bitlocker/recovery-screen-error-codes.md deleted file mode 100644 index 1cef2bf337..0000000000 --- a/windows/security/operating-system-security/data-protection/bitlocker/recovery-screen-error-codes.md +++ /dev/null @@ -1,128 +0,0 @@ ---- -title: BitLocker recovery errors and their causes -description: -ms.topic: how-to -ms.date: 06/18/2024 ---- - -## Recovery error details and their causes - -Starting in Windows 11, version 24H2, the BitLocker preboot recovery screen improves the information about the recovery error. Instead of displaying specialized messages, the recovery error contains an *error category* and *code*. The error category and code map to a webpage with detailed scenario-specific content. - -:::row::: - :::column span="2"::: - For example, the recovery screen is showing the error cause, an error code and the option to review additional information - :::column-end::: - :::column span="2"::: - :::image type="content" source="images/bitlocker-recovery-screen-24h2.png" alt-text="Screenshot of the BitLocker recovery screen showing a custom message." lightbox="images/bitlocker-recovery-screen-24h2.png" border="false"::: - :::column-end::: -:::row-end::: -:::row::: - :::column span="2"::: - If you press Alt, the **additional recovery information** screen is displayed. This screen contains the **error category and code** that you can use to retrieve more details by visiting https://aka.ms/unlockissues, which maps to the next section of this document. - :::column-end::: - :::column span="2"::: - :::image type="content" source="images/bitlocker-recovery-screen-24h2-additional-info.png" alt-text="Screenshot of the BitLocker recovery screen showing a custom message." lightbox="images/bitlocker-recovery-screen-24h2-additional-info.png" border="false"::: - :::column-end::: -:::row-end::: - - - -The next sections describe each BitLocker error category. Within each section there's a table with the error message displayed on the recovery screen, and the cause of the error. Some tables include possible resolution. - -### Originated by user - -| Error code | Error cause | -|-|-| -|`E_FVE_USER_REQUESTED_RECOVERY`|The user explicitly entered recovery mode from a screen with the option to `ESC` to recovery mode.| -|`E_FVE_BOOT_DEBUG_ENABLED`|Boot debugging mode is enabled. |Remove the boot debugging option from the boot configuration database.| - -### Code integrity - -Driver signature enforcement is used to ensure code integrity of the operating system. - -| Error code | Error cause | -|-|-| -|`E_FVE_CI_DISABLED`|Driver signature enforcement is disabled.| - -### Device lockout threshold - -Device lockout threshold functionality allows an administrator to configure Windows logon with BitLocker protection. After the configured number of failed Windows logon attempts, the device reboots and can only be recovered by providing a BitLocker recovery method. - -To take advantage of this functionality, you must configure the policy setting **Interactive logon: Machine account lockout threshold** located in **Computer Configuration** > **Windows Settings** > **Security Settings** > **Local Policies** > **Security Options**. Alternatively, use the [Exchange ActiveSync](/Exchange/clients/exchange-activesync/exchange-activesync) **MaxFailedPasswordAttempts** policy setting, or the [DeviceLock Configuration Service Provider (CSP)](/windows/client-management/mdm/policy-csp-devicelock#accountlockoutpolicy). - -| Error code | Error cause | Resolution| -|-|-|-| -|`E_FVE_DEVICE_LOCKEDOUT`|Device lockout triggered due to too many incorrect sign in attempts.|A BitLocker recovery method is required to return to the logon screen.| -|`E_FVE_DEVICE_LOCKOUT_MISMATCH`|The device lockout counter is out of sync. |A BitLocker recovery method is required to return to the logon screen.| - -### Boot configuration - -The *Boot Configuration Database (BCD)* contains critical information for the Windows boot environment. More information about how BitLocker uses the BCD is available here. - -| Error code | Error cause | Resolution| -|-|-|-| -|`E_FVE_BAD_CODE_ID, E_FVE_BAD_CODE_OPTION`|BitLocker entered recovery mode because a boot application has changed.|BitLocker tracks the data inside the BCD. BitLocker recovery can occur when this data changes without warning. Refer to the recovery screen to find the boot application that changed.
To remediate this issue, restore the BCD configuration. A BitLocker recovery method is required to unlock the device if the BCD configuration cannot be restored before booting.| - -### TPM - -The Trusted Platform Module (TPM) is cryptographic hardware or firmware used to secure a device. More information about the TPM is available at Trusted Platform Module Technology Overview - Windows Security | Microsoft Learn. - -BitLocker creates a TPM protector to manage protection of the encryption keys used to encrypt your data. At boot, BitLocker attempts to communicate with the TPM to unlock the device and access your data. More information about how BitLocker uses the TPM is available at BitLocker overview - Windows Security | Microsoft Learn. - -BitLocker entered recovery mode because of a failure with the TPM. - -| Error code | Error cause | -|-|-| -|`E_FVE_TPM_DISABLED` | A TPM is present but has been disabled for use before or during boot| -|`E_FVE_TPM_INVALIDATED` | A TPM is present but invalidated| -|`E_FVE_BAD_SRK` | The TPM's internal Storage Root Key is corrupted| -|`E_FVE_TPM_NOT_DETECTED` | The booting system doesn't have or doesn't detect a TPM| -|`E_MATCHING_PCRS_TPM_FAILURE`| The TPM unexpectedly failed when unsealing the encryption key| -|`E_FVE_TPM_FAILURE` | Catch-all for other TPM errors.| - -### Protector - -#### TPM protectors - -The TPM contains multiple Platform Configuration Registers (PCRs) that can be used in the validation profile of the BitLocker TPM protector. The PCRs are used to validate the integrity of the boot process, that is, that the boot configuration and boot flow hasn't been tampered with. - -BitLocker recovery can be the result of unexpected changes in the PCRs used in the TPM protector validation profile. Changes to PCRs not used in the TPM protector profile do not influence BitLocker. - -| Error code | Error cause | -|-|-| -|`E_FVE_PCR_MISMATCH`|BitLocker entered recovery mode because your device's configuration has changed.| - -This may have happened because: - -- A disc or USB device was inserted. Removing it and restarting your device may fix this problem -- A firmware update was applied without updating the TPM protector -- Any example at https://learn.microsoft.com/en-us/windows/security/operating-system-security/data-protection/bitlocker/recovery-overview#bitlocker-recovery-scenarios - -A recovery method is required to unlock the device. - -#### Special cases for PCR 7 - -If the TPM protector uses PCR 7 in the validation profile, BitLocker expects PCR 7 to measure a specific set of events for Secure Boot. These measurements are defined in the UEFI spec. More information is also available at Trusted Execution Environment EFI Protocol - Windows 8.1 HCK | Microsoft Learn. - -| Error code | Error cause |Resolution| -|-|-|-| -|`E_FVE_SECUREBOOT_DISABLED`|BitLocker entered recovery mode because Secure Boot has been disabled.|To access the encryption key and unlock your device, BitLocker expects Secure Boot to be on. Re-enabling Secure Boot and rebooting the system may fix the recovery issue. Otherwise, a recovery method is required to access the device.| -|`E_FVE_SECUREBOOT_CHANGED`|BitLocker entered recovery mode because the Secure Boot configuration unexpectedly changed.|The boot configuration measured in PCR 7 changed. This may be either because of:
- An additional measurement currently present that was not present when BitLocker updated the TPM protector
- A missing measurement that was present when BitLocker last updated the TPM protector but now is not present
- An expected event has a different measurement - A recovery method is required to unlock the device.| - -### Unknown - -| Error code | Error cause | Resolution| -|-|-|-| -|`E_FVE_RECOVERY_ERROR_UNKNOWN`| BitLocker entered recovery mode because of an unknown error. | A recovery method is required to unlock the device.| \ No newline at end of file diff --git a/windows/security/operating-system-security/data-protection/bitlocker/recovery-screen.md b/windows/security/operating-system-security/data-protection/bitlocker/recovery-screen.md index e21c99ddaf..42159aad7b 100644 --- a/windows/security/operating-system-security/data-protection/bitlocker/recovery-screen.md +++ b/windows/security/operating-system-security/data-protection/bitlocker/recovery-screen.md @@ -9,11 +9,6 @@ ms.date: 06/18/2024 Starting in Windows 11, version 24H2, the BitLocker preboot recovery screen improves the information about the recovery error. Instead of displaying specialized messages, the recovery error contains an *error category* and *code*. The error category and code map to a webpage with detailed scenario-specific content. - -## Recovery error details and their causes 2 - -[!INCLUDE [insider-note](../../../../../includes/insider/insider-note.md)] - BitLocker recovery is the process by which access to a BitLocker-protected drive can be restored if the drive doesn't unlock using its default unlock mechanism. Prompting for the recovery password or other recovery method defends against suspected unauthorized access to user data by an attacker. Providing the recovery password allows BitLocker to confirm that the owner of the device is in possession of the device in recovery, and that the device and stored data should become accessible. diff --git a/windows/security/operating-system-security/data-protection/bitlocker/toc.yml b/windows/security/operating-system-security/data-protection/bitlocker/toc.yml index cda7e92884..80e9036156 100644 --- a/windows/security/operating-system-security/data-protection/bitlocker/toc.yml +++ b/windows/security/operating-system-security/data-protection/bitlocker/toc.yml @@ -17,7 +17,7 @@ items: href: recovery-process.md - name: Preboot recovery screen href: preboot-recovery-screen.md - - name: Preboot recovery screen refresh + - name: 👷 Preboot recovery screen refresh href: recovery-screen.md - name: How-to guides items: From 25ee501bdfe298420c7fabe1d9c5a3713880eacf Mon Sep 17 00:00:00 2001 From: Paolo Matarazzo <74918781+paolomatarazzo@users.noreply.github.com> Date: Tue, 18 Jun 2024 17:25:04 -0400 Subject: [PATCH 08/99] update --- .../images/bitlocker-recovery-screen-24h2.png | Bin 98162 -> 98057 bytes .../bitlocker/preboot-recovery-screen.md | 8 +++++--- 2 files changed, 5 insertions(+), 3 deletions(-) diff --git a/windows/security/operating-system-security/data-protection/bitlocker/images/bitlocker-recovery-screen-24h2.png b/windows/security/operating-system-security/data-protection/bitlocker/images/bitlocker-recovery-screen-24h2.png index b14c4801e3843b0a8d94c09ce3c6791c98bc642a..f47965baf29254af2dacf2bbe8ae27b6eb96cf10 100644 GIT binary patch delta 62749 zcmX_ncT^Kw`!%A74Y^(w1PrLC^rAEg0&BMvs5AjX3naAA z6C^Yd6#)SuB!Ps0N=-tM8X%Mp@9$mT{E^9;m2>7y&OXocoW1uf?Fjt4Bk;+!`_TNrmy|;ra@VhFzcNYbKk#+G_l&3NV!a+= zEh1u$PS}~JWY72TG+5Qc&0Hr!sXxW3v8Ak3-N|!&;+AEzZLCOA>dUnJPt-BHgc_7J z!g|{Hq2AM6>m74sTxxA2K-u0N_1T%&DTB)f&yK}{gaLgF$_lPVj4i8vFuXK1t?Vx4 z!GZew4>m1vlPTc1+SfQ?8-Izdx`{bsgz2Oh(ZI2Jvp=ocP1BI2aER`mX+pOGiGkwgyOqc*Vy26O5~3nHB(v_sC!(tB^#S*jJ{2UJVpXn`_YJi==Sj2t)hl0yAM48J8D^+i@{r2Npy9)`qZ99%klv>3!C z7X{=G5O!;~qMTFYu zMo%E#2r*K;Y}S?(h%XO_L1&0;S>Z6)FlfRHJ2 z->wVAkwA`*+ z9L-YYAz2aqya3_DvNPB%@)gqSCr&Broq{fs{yOm$QsrQcScX!Chqa$Ik|2zjnvb0N zIpgzjb)S-u{7rm^Ts49ncAaf*t7@HVEjgoxblG=|bB*ewA#Tpu0U$epxBHN7%NGoC>L=0U!2)^$_N zl6{-S+-`J|pg?pf2W(f=BfR6pTwxf3`g+IkVI5g`4ILLbS?u*g#^$Vjr~5a^Fv+7e z)**g6Fx>J8HZ~TR+*WCXKRkKlM}l-jtw*1fm$&r#mtePvA|LC!_dj=;EtEZo4PGdR zidpFR!`H9S!bc{I9?`2isQGnkMV;;HBCq611DtS(n#mJ2;X5;J@tQ+~`q}6(@>N`9 zX~N^euGLay0o&7_)D4?kaNN>4m10lKRJTz{@5?PkSAYTV$B1kZ35|(#ntYgY38X(n z>b}8Dx$%kaAjo_+vee6ut8if*n?#kBA<2jWO{fjyk0Y}vyO%Q(bKv{ zXrl%S$9F}HwWwxqX7nEMQ8*TjcgdN0J?8plz>605OH(z=K-IGYYAovHBBkvFKd01GD<`*QDSYJmXq4rsMhmqpXj?z zu-BkA7UeE5w$)n|IOrNIn1LX9#wBOAvix>4#u{f`p)zmqWj@fh5{w$vdc3ldroLTZ zVSqTt!#qz)qFY;?qlV02mGwpg+4m3@&A=KXVPx?c=q>m-r1`BtVdd)C1ZwbV@=Y}7 z2x%heJzl4omFN8!N#QpslXUnSl<92{Y@P6<|EsSIV(F>$<5kDBe@83%s`$fNBezWk zQXdC{eLf;~oIlj5`D=!k+l{p&3^m@^BP{&%e^945Lart8Ln;y5_8rBW^SMWlpi3e3zIDHgr4bjhtJz zr&7gsZGv)Ejs#fP_VUk}%_dUGc>fju!IsAwN9c{4S>X=T0-pn)_+R@thP~`k%2IFU zyI&4cz~sGRR}fV@&ez-+ews`GBwIJzMbT z0(s8gJ6ZAVwYjCi`IwJ&!^aM2CO-3=>#ax2z2wD*B$AhJY&l*SjP;xFekg4F2|JC_ zHNPTz^r3yjnueqI$AKW|+iU|mpVlVgk*1wr4X2)7p{R7UU@|AkSy^&2c;C(|`mZ6I zxvb&yfyT2rQ_Q;U6%K~k{smatS_<2k-S0(4PgifAl^8D9yg|FrgWdOEkYqUQKXVh; zi;c)}V{U7&|56!A2Ah0DWfBx>Ut31*lN2Z$eEohfJ7<7D&rABe;=`4ni>*`PA4*Qj z!5Ra+UCff+59)bJQ)I4x%GPfIzDR&oheEbN+0) z1K%f9J5|08A??A5>opGsH$wG=F9gdkU4`jL=Pw(r422CId48;Bst|lkDevsbGM$~x zx7C|L(`Je;;?1WOA_RnO=Hm|}bj>b=&2|`_ql(Q1`6c0T4RSq}`VVc=?U#&XRK?52 zA-=hq^3`$@KP9rA04Bd@wV=J?jrr*iSH?v{OvNfvVl_YMgmtOZ+6}X}Ql<8$Wmx7h zoabY58%o&ZwOfdr!nZ#gO)Ipnh&8+ED}Rl>3yx%!1bQdQbLQoBv)XR@1%|F2 ztY+~%gaO18ZzH&U@Yq&e0_PK5or_q2mE$ER?p~+$BH`Kdi>KcvLnyjmv${($M`oVs zBY#}*T)lE~up_N`b&+aFA=^whw=@YR%*LI-#vc3wnr|XTd>%7{hf^Se$l7dIC@7}- z1g-$pb6?)oja#zWTjw7sO}^*-*!XjtNz#+O2N6ix>b2bgGR%O7q3Ao7?+N%|H@oX!XVhJiwfX5n*m17)tZONY#?wtUAMe#rJi+ z(mI}5xZ46>Ec_iv@W^mkqu<g!_xU+c6{giLTHHd~arARAL8#(B7HrHrk2$ zUD|7Tsq_aFKe$<(MbEci8BZU-*!gzWw7yrEd*haPG&5CAEwPh7P2s3<+*BH2Eox>x zqJPfGo!X`NPWK{~T|8InSO2=iw7a^nrP{D(f33W+LU*7pvwB5xx^2e%l%tDstKKL2 z{fhudDc>Tu%HS%k!k;f zvE?la->u5^U*(ZbEN@eW#X`>1$T@BMnV!Dbzd_(wQgkf#Afx~FBut;o&xc?XJ{(OAf+HUfp~nuknqe zhvko5B~=81>{=CTR*iy_TY}x5zOEGc3jF}3 z2a1H-rBofCN~_&%!3VievYGK0epWN??5i$PzE|UQX{SC)^+NFBf4}eaiZ5j!<^Qm= z|2)#tRctbCm8;FNiz;$F7>0M)osv1dpj%dX(ph5;2d0&h;5WFjo_BRj?sqbU(44!o`z~aQJ4N~nmkrTd6BQ=fHV&$_KWD~o(oRbB zxJ<{L_=68V_65F|oC=+S+n5cDXbDh$0c&646VQC*zB1wvJtkJr>)MN|>~tfR3QSsw z<4Km4=UlVz2uicIieZ>?C$V1|;rTr6On_`)&%Jif?;C6yL3ET^%Rf1GX_?8~kE%F^ zLmh)?%>H->skY{7F5!E9BOtso_oq_#kKo|B$?E)WoKN1<^vscSiTsxY<@NH;RVQ3a zb*m-B)<3p7f-QDF{Y2PU%Bjl5KqV@#O?Z7>`b0Z|xjaPweK&6i+fIas(N47L0st}~ zTe7Y<{zTR==1(Pd)_Jf-UE+f-@t-DzWzc79ChwIMbrFq zvkyKh(>rvpHvW0*e4wnzt-;h5L-m`_*rg~L5qB4ArV*1J8mR6UnDqbzTiaQWmt9je z8eXky)CYmutAcqwGjH(m4bj1mR{UTxc%xmhhrt(-OZ?UA2^&z> zJy){kAgnpmu1FeFgk89?TGx3@(P*PcQ@&D9UTT|@#ate7QjKrVgL*N5mxseE{CA0K zHIg+){4R?Kl;V31`AGaX!+G+1d$f~-k;IUtoR;GzT9@GT!w!V;cK+5)b4TN(q#4<4 zBPi&~&td_IW-k^2Wel9Uo3cW?iw@BA_j&cyj@%YHK1@QF! z^}iA(X_an$ZUMHD)Vd%aj=Fa)^R3$FD%rOl)2{_wxBO-`fPzv#@s|+Wh5Dz|oM~LZ z?YWXB4`JRr6-Q%jO^+w+M@wEKkPg@F^T#FnvDVd4<6j7-fINz-Ln|FHX*K9QnwElU zRjl$|=*G&T1W8JHq7sK;o(5OdRwK(t<=-o>)eBpWywgEfS?(hjT)IfbD;^IM17(cj z5-u$H4mJ${_L_fR{}O}!k*^VT?ibatb~jD>tacU?7`d|%_p0;-6{do54@kT5o}Whg zVso2!4*p0f_fGw2#=k{v>F2FYYx9c}TDU`@b#Ax}^E?UZT zmQuev4YDg~gGpMATFdKyvr|_Df40;{KgLY?i*K)90QmUS7ljY23KlP$?vq5+4Edh! z5A)O1xO(6X>v(d-e29a1tzWpHnFmzd0OQ_8thcb)c?sUkD)%S_7xgj=9(@_G;45MI zPRx^l{?`O#d(3*^i@QnU*~#iJ%%|TNF&T9|5bSw7zG1qU?yJ8n7|QAPw)BIo7&^a9 zB-u|{>5$}cQ@_y~UZ1i<1|AsNd&y!u#v*#11YLCAs;LX_C0^YWIm$NY}o3Y%ICPNQP=Q+{z2JdH`EjcZHe>TZv$s3U5>)iCTKyq*}G?3qbadvuG0XX z%Sc5Le4AH)g`pajWRKR#&mn(fE$DcmuhfEypkN>BA^eq*shg&DGFz5}#Hfc?-)YTF@APJc^a%jaxXmq;akiZ$NW0tgvC@&Hl4TfFZwle+pK7dGQx72Z z&9cGfl)Gn-8c`sC3wzLZQ=`b;(H(1U{g(qe1dPhaamwLs426Wz%q*61roW3JY?J8e z4NApHTc|pf#b>8_xpIGqcdF0sAzi#}S?@ zoUfQ2bmoxF{SN|Z7s!w-hYeV42^yN?`0D)5Mmc87rv3FDh~tOwg`c~o^j88_A}a(Q zaz?QRV61#zmBC_bsK0!`u6V-qvr0{4666%3P^ zVc&WsD_fsU=iGs^O*@fy#JoF>RTVnFnkUZZ+_idSjp18f`ht~J(OJ9C9=;yi=#a6u zkxbyeTv}`pr|pmyM422fjQ=iunN)$Oz0%w|Utf6J$^yWUipsBNDMIq#@(|LF?;P_& z?6zGq4LsoAdQX^7L=G7on0ZjABMhE|_J|*q`j?$VXEh0G2Rcpu-j~(X=isE_0)U2f zXQV5xhq>hRb({Yex~EjIkG{OSi+M!Rt_`0A1--b{OyvBaRj8RkH%dYkI3o?6Ne66v zlE6UTmLEoA8wZx=UguRE-2$;+Zdy;LgIO9`6eH1M=oc(RXsoPXi@n}?RB~_c-0FPa z?|IUNI_}_J0AM>nW97~ik4vVa)ZQHjOW39${*te{|NFDsMU_^r?c{jX>KhvVeM6f1 zv$~dd5MFT}hB{*-L*(CY+K9@ZFTS315U765sMaXaxZ0T{YnD8>RaDlw4o@5j5P1@U z=CY;JF&fz;Fe##b{NWi2BVOe?6&n0`?I-`IGT#0{@#?}QvJa3OG;V`@SGoYU zn9KzC(-zi~J*_&xpr$TCG0Ye<eI3)Qc!VDNqMF-y$GsUe3Yt$|4|vGo4v%&!#ieYXo&>s+Fspk2n1qWbD01IePoE8Ox=jl zZnpg1jvy(s9ag@-?Q-n+MUG9q+)QgVVs9Ub?qJtT&fJkWJxYep9}sWn_!HA-KM!P{ zW%pjppJVIg1vVyJknYvcNz#MaNzxPMZ?ds2w1-LWnQX~aQtbnYyl7iq1t%R+R7sl+ zjc80z`T}kPzMb5oD_5^58n+%#*y3f3?J`2R+C_dmX!n}}p0vWknO3+xQvIU??M4w} zp1c+IbPlDvQZ&AMWjmJ%g|kOGP7$E7S#*-1z#rh}DIIup1viV}M2}8`$?&A>2=|h9 zb9Dd0L1?!3zWUJ1CEF;v^kmtLE`scq@Oao* zhf`0Ww55t3AbONXouyV&y~SgG7JG7R>{@)JGdPxl0hs*3VKL4jV6s_-nOeKM^UGs? ztYUxN$tP8)e~#unVZc2uKG&;s&+6)^tT(OgG7vua$*89IreoV#-Lof@+T-H|ut{KN zAnl-lqtbWef*N3YFpZKcus_*kgmF0Rlz>qdQK&S6eSkW>H{42}TyX=NJ)m7qRYs&U zOk|Gom#Mj8jJF@003{o-ry-4g!damLMK?$T3@v(Ep6xR8!BO;D&@aq^veDeGdmPk^8= zzn`FgWGz7v-(2a!A#TJry0;}_p-2fzWb3Gc5FN{&JV$#nzcMVqszKyU_^ z37u>nd(u(4qM$V2R(&J@h}r)KH>%kpTVdT&fcc}yk5o4s+_%A^vZA);K+}Qp6bJOM zVOt`20p10!EXB4SNvf#*@T+Q2DS`9)i$Mw5iae>e`OCQ9BD_q6Dkl!r%FXg62?I*x z;nD?SvSRVo_3E1`Qtmvgwy9kDvux9u(Rt$huqixqVdt<{C z%@6Bs)SAAH1w2{OiJ6N>j!n?vh?krHEr>G$2Oh;mmYcdyA+v@3URrnLW93Hn%IG*; zpplMx0R+InC1Za6zJdOnC4NVGX74-Zz+~x!XylPUf6Lwx+M$1uZwfDjUQL*O;EsSM zt%^?n4dXgM>*>#>o!!LKTr`D3#L~QovCD2JQ){>6vr1j#BAchR_Lp}b`@b&ue1-S9 zyXVws&<{G^d`OggNDBIl4h1I})=B07)VM)ptEQn$g|Gmip)sC^sU~1cB~8wJ+04Ow zSW*bqy_1wW_I@*Go|N*x-X3w1pC451o841cJh#@K2F=wqOXZ6BDh&=V^)8p`1XT7g z)$LZlTo-ap<`;;L&}%M$Wn>)`(-7LAx{Z!G2LGP&?4IvCY$xK-xYP@HE{}8Vx>S-< zeI``?cY|+xK_o76YGQD5qHBfVIrg(QRI>{CfNgq}_}g2wN+)cq@qq6?tIin9l$Gf; zZc7*FsgqHg8Qgev>HA`^MDVmx$j-+wt=8kwnv?Xi|LgR_R`m}YY-inr|9=IMpr9TdX0PNRthg~ z!I5||JFz?Ve{Np)Z_eMx(pm;lDvm?k&CU{q&K98E=S@i>IR?;K|LD;<^f5cd*lkO; z;lXM`;R{=?%IzGp*6YDhoLi)xvd&e_OziXw>wuEA;GH*HZ}~#g=;fWfV9PZr?Tr6F zwv=!e^hDqGQrrYLIOg@)Ygf~pgTd3uIW2G9uZ8J1XejL>6z0Q(nQv2|87c5xAbf-g zyEm0{Eo_oam}oya*86WLPEMDvU^%E_oc_xCmHi~5ETV-yvb{pl=uBe;bYfJ_T6n|A z3xBoC-(>#*>m$u8{AX?!sSw7^fHjXX zctTJZ$8ZMau1SHP@clsE(dh!78-BAN!*LHHRcCoDf8m6?VKY0H!iU(d!DAgh%$t0h zk>l}|Cz!R8mf=-VSt}6g*ykjJvE_Th`~Hh7 z2ip(1A7c)FZoR}91&=Og<@^AqH;hM8ou&48mp+p*rQldeW^axU5Sue|c>ZQbs~I2P zDjZlc;JWulOYVCnK^txN84(UrJmTAuN_2r{U{l7Lb}}V8*^JdTR?dmGue00h<_{Fl zRLmcn&Ca>w!>(&eheN^S;$U>pvNm<_H6&G*qF;^k69rp#c2b;st`y)i;3TG9TP!0n~ttSN(v$Tu1Dck7f8 z^bLb0WC1xyi&E(PEJUcgi~*?#wk=V1zP->&NWQSMNV|PAC5mk@*rU*@Y!eBj@Rn+} zsQ_G}biT1uk6s=CS#wLr))32XZ`2{aAvkYxM;pRg|EPoRb${{g)zkrNIl?Wf3(?4; z?1Ghk(c_H(K=Mf9JiqD_vD>w6k9j_)i(r}YupJAb0Vfj32j}%4C`az8tQe4}VJ>W! zEmK4u8Xk;ts_o51T5|H5(KecfggnLj5o(*dmKJH1fE|4!zlq!; z4BFKk-e^qImA+A@55b?|eE7bSxYJ_(@T?xl=dEQI!-eH@kM})lRcv?L6gryvBa&Bq zM}??Q7>Nn`yu7PcAK!(dX9LTYLOS~3|LM&esa2>EILr5I}qchIJP25DFIJPbqCNfN&!ZlnK_fcZsJnB1U-<$|YvH+A)nv7yhN!6QvN zipDw2-3#`+w%%Rw4vlYV7M~{w!|Z58N9b>k6TDduw`~vSw38(K=^}ni^O*26@Ye&t zx$P3NNM=*GOXL|3*5I0w@aGDRyWlxpL)uvB2CWd44P2&uEeLR(b+C~^1O>f&_k3dd zbx?x{CF%D_rvf)~JWE?@8=Mx=^pkgstJPQ3AvT35&zZ7r^kv~sJ_)$9N8zgOs)b8U zx!K256Z`Z9DJ`WhZy|cqZ+8YnyqHI`@8lFa>tA1luPoSB{>&djXs3slg&IW`NXf}( zydBam1mu3XMedee40lEX4x&r*8_SFe=?3o6EAmjK=BmBuRkUr2UN~?Emy@ts<-c>f zlhH~<$l`K_V=7v2y&{BkMU8caW{`Qf-I*x2a;0zG(ok;WZF5&}VprWf;jcd{Ictxv z)iwa7vLAl83G)KUQMKLCUX@K52=ilCOMwskS9t^5oTH5cd8l-R0=f6qs$U1~lYkHNKrsNk|{DKFg@1s?w6~dio zuKn3favs_mr}K-O#uIVlN8>fW>w4+zIP-14!!$#Eg$*R=K2~{?rJ_{Mhz+UqIV866B z4k)j+2C38QrQTbkSC# z42GZ2+*4N0YdvtXrp4$uy9&q+)*-J107vd@uDbGc_mW^t2dFzhAw`(HMTsnZVB^Ye zE_I`$T9dYoTUlX0n5T4eZQUk{?RPm?eVu29%5eDr1d_2)+NaRW{;P)*MkTIhV&{5t zd?dr+Mj{Uz=%Ht`byh29uGIw>U8$_-BAt$CAPgoJ-;4N7#p$Ty1j zc{QOl_WLC(L{rf8{gd*w897_Q6>1dz(~dfX5kf{}oT!_1_8fgv-L00mV^X!CDD_2T z=i+9=RonR1d+`2eE7zYBK&ED{Fi%c?FNOGZ>3kDWF3AywRO-wo+D}i=)hp+~<=ihr z+It_5vDI6(O8|ve=1P81oJ3x;u|(*uC95sG>+F`$ed{&dD)sU=rx0+V_-N`4FphK1 z(zIu3LKFtNHAWVhRM{OYqqv(YNW#Hh?eyXDvgbX*AXVp@-7FC=ZTU&`1U(oo`eT%6 znG_XuDlPHo#6y}YC|l~K#1r<~7YcWU>G6VKAKM6I2(TngzT~<(lrR-A0o6+`tI9Uh z;`7k#@@NE2Xd%Zb7fP4ObsK2L4oBj)XwAjF`v~!OWIo{Q*iAITH~oaPSc2%!)jI(u zoS14-9(a-_koLNw-!z*zUSEl5AWk_0Ficn}>X}z5CvL8>E8?+(uKlP}RC+{DZv~JD zL@il%)N8}_N3QCgX546n-$7RsJLi2$qxG+rdXRD#yG>|~wxjIuH(CC7>7@xGVOn^Cv~mnsC+wQ&f`ek9y~FS3qtr(e2rxDX){IwaP5t z-*~+H>e&uHRLxGtEw-}WqO|-YvQ+co7O@gTTPFqTy6XSsCC!cjTL>^e1~g7W)?Rfi zrEroZBm;DWpMI*iYuh_n8U~zd)MGUJ4b5+GEl670VZRzvF1|Vs#H;KSL_umpsr>Bl zq%t$w)!mj)y>}@K4pCK;J-f3yDmJ1ku@S;QC;}7}0_0~*gIjXhp@s3SF!qikYo*Uv zVSmi!HS~`kiOH)mGD9pQOYSI!(;6OpmKr)fPmbRr>)8t0ik2OG#B4w8=lE>Z&Z~5; ztk>qQu&X>XHs(3Nq)F+-$Z=h_ejIJRkC0XbK$T19&W4nM^TIf;c{2t&yAQj2p{?dh z58c9*4(tKr5pnA#|FKN4df*E!#7N0aQ%*8-4x3-5S6Z#aE~k%)d5L?Vg?2Kqhjcx~wxYdB)vd;oX?Cfq}3BK_UA{O+wbuHk<; zmP@;WdQ4k$zG$(pb#>zcPxVda`27k@^>LLf4)xZgzN&2!G8TFMSh!1uGve5IRbqR& zE6Q!^;6=r4TcdOK6i@j()(QTKCLZXl>LnUaNj6B4k2Kk%pKKM$@14)csKYJ0PSMayKcADIJhVQ1#36ruuail`3*MaHWNB_o#<0%(Cy$+ zFg$Xvn9hp(hv6h{4!~};trv`+YITwClE@Z2-*mhzsoY5>loRE1iYnug>&k)Iw6b5h|iI?pw*W>(@#;g?-_Y%Fj@Tcjymw`sD zq;1Gts;gW5Qbpl$Pzn>^a1|>7b4K5uPlYiduI$eZLroG+lqQ!(!QHf$=FKQM?6b!? zwmXO)mGj#>vgU+Hcv9E5Zp(oE+X2l+3kpir{lh`9Ty*G0a4pF<3?KFCij2y=)oAbC z&l~ncqq_Cl$xm!NB~w0i+SU(ntFB`-2fJp!(Te(aUZ7^-@*>YT*E>%RY{~0h8I7xW z`X?A!iSBbhh6X>Y%gNm?f4Bo6s7sAZU9pPS&h7UMifZ~*?h3v^gj0k_B-Z4>4J+3h zH_-itZ4#U+lFrNzn-1fYywnMS76JtE&pJpZd?b?G9Zoy@&S7L@0eH)6f=r8IK4j=$ zdKas5)crGfekE(k9`kSZ(3sfI)8XsI;|`S@=c2l5 zQA+d_;8G%KkXNw+mV+U-MHO<%`(Ey)~x-$iF10RCR7ad*TXrHS^o&iZ)VysRwJubhPPJ|R%{+33i$HK{D@&2f1Z zkS3``(bp4EUaa&tTEV}ye8*Am6q<9zPadDiku4n3uVD_<%Ux!C zFI2h%k}EY+PRiIxpIE5fT*c3xMG+<=H+)vhdSh;n%6k6`q!~Jn&IDKUl56}%J!~oo zAjs#l)Jm*6zwO4hlf`e!Q2buG_ymf+>WbKf-v)s@R@{>ws}jwhp!$5KL;AN-3K_l4 ziG=PWrhP<*Y)>xsDc8a;mI9B`FlDsvQUebS)7ioeKO)~gBhl_RPV=e?(S&mW*<4}F~C{zQ4?zPJ#rBS`B9;oM47B0*JqYCG!H5BJwqCqJTipE$dBQucIEi1t-V zJ=i3QHsbuQ@u1g&CQwWmb$o4reT~8k!assEV3Ld54WTUmO~em9oTGcLN@7 zLKlW*%>mNq%PcKJ>BHNE=MgcgYAM0#qEgdf%vf3B*uaeC(FVVsm>2}11g5j^dyS@r z*G$G(U`kQ?C7}Ch7u-6HXt3ZH&@*sZSi;s%_=S-!x-=xITPI<8$#S)RHVcMBWzece z5kqNOwiP@hgRa0&FoN|xdIlXzxm~t@b9S((&HJ!w*8)5k_=$Dc3F|ni46L3!NJ%?R zVAv+t9-mC0JD^pL@FfIbMq{GFcLE$A-P42wgvV$Dh>GEO1i~3r2M-T+njS6rH>adi zNA2P_bA9Js@gQ1ljpoPs+d=R}y0w-{m|K1TmVVd_ASMaKEUac+t0p#gE=hVV(Dwfw zYt_n*;P+6wYtw8T%=iR%ScKg0iCXusLn}GThd)<8O2K0i#@F&{94{$;;B1f2Ntqyu}-);hsh!fS3|bnz4-46 z?(pu$T317K~hwvcj6VvWTJAV295cQPrj0%;zP z^0hXui?z`lHpxr)!w44NLDp*gTN$Qf0FU|VB6XH!=8;x%v=+6)hBh!sz7Nq@J1$n) z8Sktq-&ach`iz{=F*GxydZwV)A`LCjs*dn||HUa~#ojC61dOi@J3bPzzI>2D`hjZ0 z(pHSGBuY7#hXQBQjSw#-Ipv76Wo3|<1%!hLI%U}RQ#d%qC-h>qKrCWZ1Y{ZU#M5Wu zRhMxkB~rGNjugl*$M4Bo%eX6c8+51EYT{S7+H1)Jm7ztYL`H%9oPnY$-DXt#9WA|n z_*p8&gOI|Xb#cYjpSTcwkAr3C!YEOq0pxkf`!SwSt=}G8tftU>U}7cBX;<7;V{CR|%q=0| zw&(PM9Vy@+$2|2yF{{AB1|uJZzsiv@idZV#tY{c)D*-}v0Qr%7(5cZ{kXga6F4JF)tp>eMM% z-~I3B+-=$A574u(HCm(D?p53uNnafrf1wITcWV0O*bl7)jo!QFfd5*d4;3_Q1U^f$ za(23M$Uy^$QRajF^}PylwwsGT_f50{z<9x*^8MR?#T&{$Ita2BqZ&73=PKk)j02l3 z^beh`tuO)$dO@E*<9LdM1QZm3T5Q=kY!zkkRC7cLz8m?gv1QwVUf$G>YQD^>yt#TV zTXOBP*3vCd9K;waH^+WwBjfeH_t&?qyj9#0eX5uo+)ojv(|9~!yo);8{n!Vf7!_@{ z4XzXEju_1;2b={SnfHF~`^syuWB>=>1A{G()DdI1h%jf^SRsUFeu7E#opkA6qMRbw zG74^vg1=BjCI$TIL5ViGmlX=DA@Vvf%j*kU#cu$_X>@nGU`I>NVG-G2_C!P)C%Jzk zou>SWN>@7iLkT}*;pbTh&~>v>wy8ARN~!oG`xVu=ft00&`PI*K;`MQj{hi?pHdI%_ zXLgbPBqAl?Atf5x{QZh+<#1q4kbnAvJC6tW;~2L9Dvi{JZC1@^rPo~ z_)K=FO3b!BB?wHmwneF8lyyfoz6kE>WNWrAyH^nEtAA8Z`T^$FFi$Sp3#tK&RY4cm z8f|?xUHvoHeDr_z7WK2o(wldhc6|vl@4LYx@^ERPmf{o_v~4811nC0Ww{t2`lVpN% zW=G7f9*o;QehA@EHvWLKxkb2>e9G5&64@D zTD8h~ZU#h?^0RkL&xXhf(w?Gtfhw^}&;(b-Yj@jJU^Gq5kJzA1&R2TAKoB@Y_d`{m zL^aJf%5S>RNT|fZFUcd9{TAgh*R{U?Qe?+#AnAhhcbBo+-YnV|Z_ptG<9)|6uGJwd`=JS1wt8`0890!LUokMZ#mU4CzF@ zEJ`qxkVY@o_KSen-@0DWDuVIvcMza-EyL-A=IMqX?^Yq5FJk68?Qqs7BjEJ==!a!mQd`^ew>dAt5p_HHV^`SxzgTOEhh_ky4b9n-R&F@8 zzz)=heTy#PfkndtcYK3E-3kl9~yIEIezi6qtNMY)J;DdSb_Q!K%rdC8W=#RMhuMC!^8>Y zz0|5CC@HLhqXx#7Vo>E{rF)95|q+)!90N~VlPqj z;1J_X3|992IQ2S&v5#;X5&vN?JnijF-Z4a2S+8j#te=T@35IqZlnNfrF+fFwXUyP* zZE!QhkItV-T(ab-E4UYhJ)x-+Tz(dBU+tpNVtFZ6`O5piDM0=iVOun-8Q&Z>?TBm% z+SBDyu=$ptFUFTi2DQV;AJ(+c$)`&n_*voR)#3jjYFm#<-cR|v;0l07FL$=;HLpx8 z$*eV znBMi#Y&U8gmiw&33vsDFR9VPea;_YnO}jgEaT{@V<^YFseuRodhR4E&8!cihg^qBd zheK>i$_xiB{OS^0$D(pKQh1d;cCRv85www$a7z|tEijw?&GwZ>@SrEGiwz`7vWF$a zSa5i=Pf-5qF@k)2Z6c*Y!i?gI~y6dMEjz;uE$;a*lh$IcEZ*bhUlSi)B zgG{6EcpTV(PHQ#M1&XHSJ;c&8;Ei zF)_#=hf_N1x`z2Mlb+yYu{v$mT5%)XmIkLnT&B}3xnCixZM z%eRSNUC0C5W2E2M7LO#R8-2qWcPudGA>npx%liO#`oSk$D`h+jaU0|8F?LwJOLwc{ z=X_Ma2&P^scsIOPR=Cs|HfZt5=uJXL-rVrcR@5C{#e?5Z-9FV<3i=H!2!egK`%W{D zemaH5t$jBei+Be-4#*#sGOLw5RVCD2( zT|$thJ?sPF#jIH*wE>5EN2LC&D;Y>l*F;sqcj%tOE8jn}%CaqEBfouFTlSRxTk3&9 znmog|#*O#QSq`ROStc2u2BdiuFOOc%Dr|kZ$6|R417+>_APJlLimB?QPMtn_uUo60 z4cv#JPNQ#L#|(*V_>~V-2tyfjsV?nh>4pv}Wrg`&h#?|u`aRnf;EYz*g#hG>t%dW= zX6Ut#`V~Yv@ov4&6-ZwaX>yiE8E(;Bhr128Onua-3Ua05r{MwPV7KWriU3X3KK?)Qv(K%**9WvJ0_FR&dEO##&1zU@fx-%uEM%j2 zSV{fOpI`quO797|^ZoWc5NEW1(2*vDF~(fA5nZ!=cknmTLG#MgfQbtTl7c2cgugA( zzy4nnKBGPV2H(v0Q}+R<4l`)|oXpIF_B*=YN%un=B;Tv+snwI8Pi+y4S)0B8YY^nD zb&2nOJQtGl;kG`{I_?=R{`f6=S;!kMAb9MCYv#`RjUG<@by4T3=D(Q=ppmZ(A!8J>lzr zugmS(zbgI*h5z-pclyxOA)fLx&I_2TTfCI`hBO)(i>TSNOI&q(sYEL258+>K+mmV` zYu9=AA2;0Hvz?{PSt?ty=^HCuo*b10%RP_5N{_KWZ&fW$RHa|8P9x90^IzI-NVo>qjjxcEcg1o zQES1k>u;Vm0Ao>m%Kglzhl*fZdGHd`jSkaOGxAs zG4`oL9P>AdCd&&g>esfuzMJ8*zX8m3>AbPVdJINtjTtNQ*PaiD*M^%KJagdPztjwj zvcRGT6<^R(?h3qAyoGT89mM*vsJ^OqPyvPVfP`6 zH@LVmb5v@zx#IZ!BvY&JVWsZJZ+&nktY!$m_i)%{1BEGZrJ$QpIUA7$xWPSfUs=qS z?XZ_p69z(;et*}Ai`zIC4u`@j1!G-#aOC{Ec@V2{hhka4XgEPX`7ICr*|{)Ek%@8b zOZizU229PkDTmdAczZ+JTDTV~_q<{_ZO^ge13L4Idvmf~LMpna{g2SVH+Av2OAGGAZB9k=4@x~&}Dd8WuHRF;JjkI#&u@`*(C7x~V zAW0S+@zTPlQ2Y-Y zkuL+w0mW+}+yTXg*Z_%wTTs#)wki(Bh2hd#P*PgCUF7$o^@w?5QJeO7Fl7dZutVUr zlu}!mBWT0gaqUf7%}g3(t+cFQ3ib#uTlZSayAQM^`p>Zp+ zw{?136Q?#jbM|ju5q09G2E$?U1Y(i23ZLx*p=%09OD1Hq&HJcVFc2e#yg{$vmX((V~Fyp(9#kcYdx7ME6jpJSMBR zsKZ~W&ls(v@SW^F%&^voQm>N?!Ee)Xa_78D61F6#AG0*JA$QsFLBV67V#Kl7oF>8u z^oX&xpN!~atqez<(r>GPWkHBqv$wM`(L25VZ4wrzPpYJ{0IsiShE%p!jTVHs7R$_S7DiA}Y4zFZ*egZL)Co;cN>^KRw7Jx^G>0q>Y=S{h0dTR-XR;f~!N)ZSisYZf)u_OyYXnAtJI>?kx79WPubOX-$A8N|_}w``j7y*uW<0*IA??zcysqu3kf=b|=Fkk$kJ zd5z9CTcU!o$ZBa(2SiMM=Bq?)+`2|&L70vn zy6-s_Kx48~ep*Z5^-SE^Zng~aOiV#kLvH`O6|<3_W$yjWAq4GRLWs^Sy%Puctaz$q z$IT|}7H@)wQyAWw3?`kiZCJDO7)gq zFqIji^Yt?F4wcW`p8264tZXe)pJJM?sXMGOZ&nW(`8YG!l*U^g^VNPJb0*Q|GEjE( zYQEh}e(ATrAv+lk$vwA(5+KT}B)OrPs^6|C7S&jrUYj?Mn_N~o1WI%m5Qv@WM^P!5 zZT@w--qLWHrP%CRhol^XmR*lP#eRY)FkT$I_2%Z}4p6+d8deYORhWItLyJN{W>5^{ zQLia}B6r{8SZC8ofyfpT5`stvFocdG*64CYfr>jlNO!8d7GCgUYVyEubC=YhSUFvV zPDrI5kr9n4w(zeB8%o~X+6%B&+9#+&1v%eoICz-s9ZTUmmU!(j*|Cm$sJaRi?F>=>rZfT@t+a)Yxj~ zoZdlQI*a8(^(O3tNxGJla?+?!g>$8=Swc9FQ-j!bKiFmpmvHEX} zh~dDYXnO2DvFZ0Pz%!rqh4eh;ryZGIf@0njjGJFQyHRgMb^yugMh-AAboKp)vnLOd zvXs5@RU8TeT=7WRpzu6A6D%StQP!{K@X%IMQ^Ua#^sfpHHddl2|rqbb7V_>Xg3?4)u3a?AH(>z@=Cu_F# zZmp9WQ#Pib$~5h=Ej@%95_Q)6YK5fe`T=PJRH(6AbQSMgYY4$u)_X$#dh~n`V3>`b zacEOKB%w&Sj8oZc=@)YsveItwtq%JXVwnC!lTW($=nkobVO>^+wkKCc7ehkU%xGU+ z8Dk~DN00h{e%^KcAjh=;$vcG$TeGzhMf1(sqqjFSom@a&gZU``D6wKnFx`XMORvW| zL)7!h@3hUu257n|{oP}GyxCuWcI}ieMwgxMQE~hWL9AVT&$3j|5DRD3_jBK|u8Y;W za9~sVYfbA%;;gD;;bNQbw@4fM#iyX~lMq0X)m9tK%=220+Q}&+u0m&Pd)z9S&F8tE zQ<3LHo^+8~om`zC_o#_jb`kdwmzB62QJ`RV4QGQmfpMwjVf_;)ZMFXS8xpCi31>}s zZ!8`MWh$n!wB8!rTa6FGIh#;cWK$_oGQ3S3%2=?H8T%*U(yLcCbhmXw+s6d}ogleA zZ@%O7eNOzI)wj}ov+v7JFKw)J16SjxZg_UgSMFJG8SqWPX|WxmDlOF+`#)G-hL1Q= z@kn{%!=3ee#LI6}Y9LUa{m&jD>q({kZ&O_1agXww{t;T?_J34;8ae@wb~@Zn&l^Ig zybz-p?`h2!ibk?*$oAjbA=+x^HPAkAl6U-Ser@g9ekE(?GK& zbIdLY?v(VlU;%kKGf+PYGMi>vcSd;{!bAy5xs`@091bM+3}r&0l&v-T(PRj!&JgD4 z?Mr>?32x!c$+jyEEcu|t=mpx)sTXn&mJ=P~q?wBfb`fIOpm#g6 z%8Lc29Bb|{!qMKF`I3_Mgs9XU`GH$5b0G0g=jMhpQf?ZS!;kL<-Up(&%|&Tr*wX;1 z@ri^xDqMe^JO?t;ZfILtt_nttijFDvec%q^?G4slC@Z~=v&~K(GV6?|x*95Rl1}yi zsMj0rO!WGwE>&4k)gx2w?+~phQ;&!jxmEXvjd8adb6OUoLBd_WJTZtU8nqF+POaX!0pDX!|WM%sI5F z-oRT-M1#IBhvBif9wE>kwNa{EnntZUxE+5EoOYT4yx;ks+%&S%kCNpnejrF7_+P-+ z!;$F)P7`Sbs+U&bS}z01Ny$}^JWMQ9WabaV~R?LUL zl7?3>r!)nNfVLsY3w_A-TmE6T_hO31M}99EJP>7DrNqRvY!s8%hdfDGBPY|)1`W8M zvOedJ;j7BGPW687dc6hw871i@cJ>qfgMR!G8yTC)5tSst!7x9R^xC<6SLo9T9 z%D}%F+&y|Cz1~}Nb6yy-N;g1$Ftt%I>!ZJ@g@?Xlyjgxk+GR1?=Ewm_6h1DRt90Ty z%VoahgO*(`+G3&gzi5pQ)7{puo?lSBSwG}&bHHY77TLU6vn46q%xasi;0b=4=ik0Hp;PN+sgh}iZ@%E~25dq!O3va2z_6IM-4g8ItP$~3S z72j@r4utI-(iM4DmUuHTbUf9>yzKO!`6q+fdYIF1U9*Rii|Ai`G`uK$|L?f%6bSs*vC$4&YE=X5vCM~SMNrhunQ|>Z#HD19;UJOf z`)c&PeM6z=q_&qH+nRk|#agH=D1QyCH(~P)t34n6t7g!{f%aIzEbq3#hugEZ606^)?0r?`94;Qr981rL3Y1gUzs6)Vn&%(cx~;(Cn|(#( zhmoISH3&xx{m40J3qz(rGO-!9MlSC5Jma~;K?${^Q|7ms#%Q@B!FQv?CDZlBx@d&<=>lmy&`~mTW@Vj~&^`KmE1<3@J zvI(oB)NhITCpRa(kZ7E7glxyyiM-eXi#&0o_7P}Fk?W5Bft6}gEAs#la<(stbv@*nG-S_)lL_@_nd_ddc~hJr!jn( zg>trBd;^LTFA2`Nc#oU>$!}{F9{9${*^f)cSuh+viAm*_oA*IV5ZY1}`P5w9qW3}J z1&D`4zw;pFrTk#8q4XiI8J*EK^@Hpy?Q3^nDA`*zxQni*YsTkT6I?rR z8*AzVw8;+cfc<1sq;>SD@e}qBRza%X^RBDb3B+cauUKse)pWm{b zf_>A&kdLz7kTvs`7SZf~viywMQ{La2J_&q{Y3*rsmL28CUJzDRIpxb=sCkJhP^hvn zKY5hYsZg6?$g}%$?IW%-K$?Qa=Lg!af9nEf3$Q82wrhlf(yem-0sZL~EdQDpY-bce z;r7i0N8shT+-I8&()_6P@RvA~t>wJjD#X3WDQ6dnA8{qgi_uY4KPnry5tg|&>)giX zmK#6b&em|=t*B+-$$$%fjdGLvF8_2jJc+^b-Lo`+K+jZ0>%EBB=c;Sm{QX(IjgGZ2)mkzvzGW0WNiIXk>SQ}T3RV}aVqLA zX^&u7wQks-FJqi|(dsdBqx99>`2IGbp_EQ!bIR4xu5t<8M7j-En0QANo6)AKX{&c< zgpQ)SIlEf>HYe^od93{w6;o1d2Q+_A&5kWSbBVmqBE)6H-w*bq@U(K0w>F6{*UU|9 z&!a%weq2lcte%BzaCd*FV3n~$QP?|TkJjc}oX>IMMkpnPSQN`w9Ls!Q_Ar zh0#Uup(bxS=w=DN4z|)>$o?WD=;7!}?hlN)6KKb-@;&u-L4U-pIr2?%Iq+C*%woar1_)PfNNBBM;3h}9+^b)z|Jh0&8MkQ2m zLd;82zP?D$ZVJV+%KYJbwViA0)Nt~&pj4JN!~>t`xPzmyp7jiyT-`#VUWWwN^@X?6 ztf>h#e0dP!YEjBC)5>5@;CZJMy39H$uKjoEa&7H&h*oWcXAHop0TYmmxm|^p(2Oid zy_c=5FZBxGc`78wxQL}Fb7+cI$1~`|D|b1;11O;Qfl;FB9+?%?WzvMZ{7?OtAhcXI zwMEAwdhnc!`-dZz7m8{sgesW)@^Cuc7o?utH{i^Cs}c$8UJG{R4!(5|BL^?q@hZ$A zCL-@1J$x?@h#7)ak^LAdgfTK4{={Fe9CR@6OvK23ZjWhk4rM25`pkVy5{rW#MgPevA-FG$cmzr1QYk3cZs!b|W9o>V+^M*Jt=36Q+(Cui5 zEl`S`Di~(JgW8LRZHZ$4t`-vb*=ZaA;nmEBH5ILD9HdUl%e$f;7*Rb6xiND3d~b#5 zS~;$3fN?ZsP@mC#BszXqv+8#=kZ(V_XfJY-kDNM3*IP-n*S2XY(}P)P;cKtZ)O&RpU%5-06C!-Br8q&{ zpY}vKc*nD%sjEa&SPv9mwG$%Zo>VpUDv&W#B^8SPpu9TW)pU%BrUkhna%L|=VVvrV z1L>G3F)cf#)Eb&}GxO)wH7`BV2`rG&ML2izk)c`Tb&n-a++3`U=3OVT6XTFqf#xgU zBZzS>O{zQEH!aV==UlL}eFGG&Vqt-#HS>r20dD`+C(vFL7C3tG&?qk8Q5`GxTXgWV zes62(+kt=f1mVy<3dyJHX#QNHyGxjWr2WE$xQfJe~E$y|?LH$&`{KBcAK3dJXeUt}|ckgHuei)IHy!l*z^Dh6b;z5%G z13wcD>=%Z;V4te{?Qn3iA8lXfFrMZnN;GpcppC&=8Op=^B=e#0afH3Kj0fqmM$SI! zD52p*yn|!2!+2DKp|3+`H}LyJh-ifw`K8W9wr1m^BUPPhnQW*yo0!pB<;%uYp?6p1 zKOkjsk`^J48+k}CDKXQ1>Jby|ef!q?L+p1hb?6U8HkF;1Fr5zm>%*{oXFYS&$|N?PDnBn)tBLmxIn?Uy>l?p0LQynqHKcwBytaiy+tWc2JEzA6s>*4>tO{MXmp7 zW70%c|DOE%Tv>emD3d*J^vcQeZ~B7*$m|iXHH#umR?6w1+z};M(cU8eo;Pv#Kx{*p zNIy6{YvNkM{}pIye?C-c`2|Px>MP=wt5HBnx7lJyk$$(yz5IJo`H{?Tq(L*sO74hO zE}T&c;a+U5CU6cVwkvaPyG!~cs$D!>t5nk;If?BeIRIKn!{0vq)uPArkP{n7U(_TK zmVOtqs8z1Mk_A=<<7aS8pY6E;a!bT@3@xWjyF=_HP~NZNnUzJoO&)#3a$%9Ms(oBo zBqc_X(seAOynjbq?!Iy}&iM^#xxQQ0=i7DmJHC~38+?R2l6*3s6AipKXi{itx}|qB zWXI)LU{SI~B03O;Uid2b0*;3=VV4yR0_)iDOw+iZ z*3_3QGg^K0J4-dLF5$%cRTp=0T?b-R%nvuKuAH3@@yR2V6V};;TDZz0y4bXJpCkB`gO*VStC^lWxeQy%jgi1UyA+ z5fGjexuSpZ1B{u{6v4TYNt5vZ* z`k91y0t(wI&sM`w3y;bDF`>p$b3{jg6Cm<2Y@k0`f55=4oEh+O7TyG<*gl#qLd^Z1 z?<8%vAqyzCc(50VajTjW(q|b5h;QMJ83yj;kAWqWw2J<|&n`6;=D~kG{p+8ze~9x9 zZ&k2|B6Q_u>an+T%UM0Lm9!9rbW^t5B-V`agzApk_R?E&UYvq``mg}+oc=JPkG~V7 z)j;>(bpKivxdp%EDu)Y@v5xL!&RwLWK6z*uXa%f!rZ5LsSEJAo*NF~*Zf;or-xc%U zdvR@P63kLXD11Q)THgx)qp`p)X+%~jq;tIiO&hBfx+&4X8fgvPJk?&ROK3oDU1ID9 zm&P~kg=go&>C?ALOQXHJ5L&$iUNSVn0b2YiG;Oox*v&nmd8f@3mZ1lkq)XSkI zM;{ejaa2eYkosOG3C~keY}9!$1kG0!hBS$C>N+h9F94j5=O+(|sI&+1+N13>u#{0pgVWbi##jLfs-8-u@yDnh3ljH3HGu48Sf zZC1Kgyv4SrvW+B}Fv1&HzBh}ZC5O6sp)?wEQNvy~qTh$S{ksd*UCONIj^lF~lJlvR zoL)J@)O3U7Z~jfP1^KS@!svc!K_4nwa5VS+@InMh%@7JtVZa6V+)2j(u9MpXF0-%d zfqe7om772>q&{XqQc%(h_68Lef=nrKrt&5`M@u(W$X_+x;i=UrOC$$^ z1h`fUTEtIS%lCwclx4WRykB`q7_CWXyi9s^iM0c z>N@6eAtSOPvKG70n4nLhzCF5Se(xmnCZ=+FK(pi{mi-=p$a?Ha2iZc^)?>1nqgJdI0QJG9-bV_*@3GwgL+Wc+Cx)(C^$KP0!hjd8`$-&gnG6m*MvR6RZFW4E=sgQ_G0;cW{B^a2%& zjp314{VZSe;TYO&D2haaW-Q);QG7?r191aRy3?hl=-2}E;`?h)0C>p6NDu;}CEOHv zAbo64JtIE`|_%s##`wYOZuGqo?nNak_ zuk1GPtKch_1=_*?!I2#nVbFTs8RQNT3<#wDW`j%lyWdtc-Tf3G{pLJ;xk6eng7;6j z0N-)<(th`QJNirGb~PI_7j}>3_<;XCx7`>0Z>&s$o-_ZA_*YlbmIs<^`YQ!q_umB? z`axR*y>Z?T*51BK_b712tf11s)(#nY54gx?OsZOw(upUBP+b&W$XzhF(ivZw@BBr6 z;%nf6F<}|_fop6&gar-ush5>ZliWayw0!lkOKo?pho0q`4|EFKeT~b-5E7_zd_*l3;=p}RaIF3i>)t&s;+QWH( zQCd=U#<7a`GS6z~Uqk2J8xeZ?cfNxo?@!^90j+Bo{a~$yRAUjoR1N3sJiW-q#kJO? zfd;u>cPw7|knNQ{7Zs<=lmO~KUw%lxGI<7l)0X+`=X|F?SCX%;Il-F?WQoSLgaK#^ zy+ojj{bq5v@b+dL5aU?o5jMO(Nvn0aJIwLju%U*GTo^LL);5bG{t2*9lris;B$6y$ zIkFNv$5&X<$5p2)N{l*onzK~H@zB&*S)a?UC;EQIZEx!lJ{lj35QSpc|I$yu576#* zh41*v5XgZ*2E}c+1#8|k(Br{aJz(O!H{zHl8*EwduVakr^__Zd_w2$2;b{Z*$L|ZA zIyKnvRKa8sfc54w^K;k+<29U>g1Uca0EqWDA+`v3_Ko{BCa26gP`lc6=XzFu0dZ<` znlYhN>a}%>lbRP6b^D=iZ&KD2=lnQmJhJseh}@V zKb$QEKTq^OYk=iC$XmJ}2eTS5X4-nYVby<4L(PEQ^v8PIkMgW}=*rI%k|%AZZ5XVD zn~9FXLFlRF8&glO39`kH+l10Uza9Br`Oi&&ZQ-pBu>Kqr^F6w@_p_t|@ZcwPA&eu6 zgd3^0{tUra=nnvT^8%lR+s7j!c)`Wy$b_ix`)>%s)?|xaJ2Vg`V1TD`xI{~_u)NNy z@yL*)d+6nZd@4^%m~#!s9<8tRm$Vp!Z=*iexyIizvZ;=DZ$R%d(%jzgI>6wt0ueB^ zi_a&d<_ukyC={iwylX0)E=?%3@fL4LF^#I=d)s3H5YP?7vu|*c`#Lg$M-$7U;K>(?p1vP7yY zaH9D4B;d^=k8j)S-!cf0gE;6K+N<{{jPhqeX;bOYD1J{Fyi?rxm#M{4>iYf%|F?WV z9-q%qP&-Q*`-p5PPk;U*vgGk0rAx(EUJ0h$)Fv&9NS2Xb?tAg^)H?w`JivLb^>Qnp zQ*ZITlBu+b;!6|U1B)Rg3E1Zj4g5@Qr!0MG5V70huK-<;C{{932WTeDePnAXtpK~O zd7=1Yinh~sMXxTh#_tv>)_P)CAFY}JfhpmV$3`B4GFT0ml`W6WslIPBUGp^K8jd1Y z6nI8OUzq39(G#fORnAvKU?FJbLTSeSkY0gC-a5PzPPpqZi3ZjTqkFDLVNSiLC!~xI z>@km&INVBDIbk7Gbp`b36Gh&8NVYe0eJx9kL;#MbCK9&ZvCEsJ30B3%i@@+bREqKg zN_cwkb+H3MQ7bERTA=FqQ(Xf7cD{t6VRAAbG5nkQC15oVWiFh~;NE_7Tz`I=N}SXJ z*8Zi+?d}4}^K!p=e$hI=M$sy>T`d|cJSQxwG<`y3lXj8&$X4;Wz%z;MHJBSBm6I#y zmb>+JRLhS|Tv+{hP70_dWjehaH%YeK#~&uRFGDPDiRc^kcKYq*^ft%SrZA>^(O?0` zP?sw3?)Ib-kW$d5xin|PH0CD+{a|3{V&*q>#D7Fer~6j(wOTY*P8VCZNfx`3tvy?n zGyY=TU&-OHc|IKa8}?-c)PpN7xn#&r7ExCDFtxAv-nVH?0)VS7FG9=uJ^PuxhvsW% zssKd9=%}gVWfuoD$PW4b4Zqf3!x7Lf=$leunSaXjxb4A*CJ(&?V^_EIv=7~%G6*yI zpgdP{Dr9_}l@KVEQ5K(JqWd%1rRrmeU&?_!shMI)W&)`aOW5rXo;h+q>~p|?LB)M3 z_F4!Z-~ji*(3O2t**(~ys+Jh4o?o~&oZs*%fyLNa; z(<;IhHP+>}NX4@=3AK?w~UTeSh=`58!eALy*s)mW2HLp2wA&zoif>&K1+Pv zwr%6SwzBIE_3yZwEg(g_mUiTcHpyWa*vlwQaeCP=P$cDkT>AD{^CI%9X$RX@NacF5 zXP(J(2j}MmM+HMwx&DmUpA*INi^3)2>&NCDroWcVj*c{$p#(y_{HLw9JZ-PKep~kw z;nx;Ck2+a2G<28y1EMt=Zm&!>GU@#6r-h+EH?(gQXpr(>5VBxCOsL@^7q{IP0mICL z3$cAofp!`fS&qYZs1~N6K+H=Y1VR2Lvl5mdT_3lHs-JBA>wdTU@y~;fkc)m5)9%kGYNSs%6x%yM~Y#-J%{786;7L$V|2=M@&ZT*Td;JN2TWIR+v@RjyHvk$dZs z596-nn&6eQi6(qnB2Ag8z{}t;GiGCt1%vXYVnQGXB#3_J#e^56`izp=qC>9?Um^QV zPU4|qT^KCt`KH*dF{y#LICQ}B_g_aKpUEN6hF4lb91^)4g5Ddq{i-lA*vd#b*<=Fy zqfTURAo@-#;qz+u+ltc$FlBGU!?Be|f7rJ#w+|}mNNobd$#8Oxa?JSE^~*Z?>&tj~ z*sX6EvrxyPRI=ru!ppNvn@JCzVi_9 ztS2lyYkoamXx(Vfx;?t*!mzHitFL2`5{&H&92)h4`ZD-b8Y=l%Z}|y{YyO{bC2QDM zx#w^LM?_^d_1>4vnIv2 zX8OUt?nVG>(N|!%x*i9M-Zs#=_5i2NYW(lEu7YZ(C~wfN&8=Nc zBmVu71a`TZ(FGVrFDBNgrPCFCFWgzMrYs!GmnGzv)%UGcA6$V5l#D+;248Iz0+p@;Tj&ses1{2k($;C9j* zDEM%N_22RWw+X$XD_IGK;AwkXGPc(99SGmOoSzm+J!>9jV({4y?ICzMvgF|n3rbK& zDX_5av3>2k-`^lOFedZ2l3A*Seazfd-6CJFbTPAyX8-s;tNL{mpt4kQ|Yhz_Hm&96Wx39`-NbRhW=V1%8|!Ix1nUmNDV%qOQQO> zifGR@;!w-&wNI5o<0}d6adB-c+w_7uT4a6_`>(-75q4fed(>8OIdNctmw^J$(*GM1 zWniP5m1hFig;kYau7QSng1g0o3O)Oy9H{=_Ju);#3Y$%JYmpu$AyXVDIROr( zWos+HYfwUd?Cstz$9REfr1hY=R5A3Szu<8-D=qgmkayWIg&i=3UYZw(6?WsS>c|YZ zNpS(FT&o(y+ozVA#rfxkegEYn3HlX+sQ@4Gp+K$F2@Zp3=%r5<)`#`6qm;e3L4vfJ0p4<%Fs&c*OyAWMJSG+y+)c?Qv=o^0@ z6mP`8eE@oR=U*(6RERM&NSg;u?2HTy@srmR@jrG!>wm{A2t~HP%*$(fy{jnz-Dgxg zz6z`2#kY6Un*Y{iy6e)g8nAut*TD$B^lMBde;R+ERNB--b3n~WyX{gG_--_y>$SF@ zE@=`ZxsG$|u6VTKZChS*CpJXLO0O6 z2)vnRPlqQkj62$yR%%vY%#gj!Lu>46O`3=sdMhhhnmZc$54Wlx>oh|&34h9Ds|7kv z(h|mE3d$ozX$?7hQ*xcOt2dhrmI`M^mVY^XYC-TkPWY@H^MBT%} z?w!HY;{~iY4H+7KQANFsK>(}c$8K_RkbGCl zFLqtwthVxYV^0wV)bz<+a!bWaL?>3`lP1cUTg{B zzx)+P+Bs3@Sk)k;lZ$V zj4hR;^O)|AqHm_~YuCQJe2SCO`8P3an9AsK5gQvAR<4kBm7PVh&P9B^59Vq&*5$aL zEi9O}Z}P!fMcV)6p}?}UWISjPlC!W(j!0(pvQ#s*^Cdw#@DLgZN*{2hsEgG(pl3c~ zFeQoucIwf1sN==Q^*uq~u6#&wry-lPm?@4OA>Aruum*4j(_&~Vt6Y?3yQ9FJe>H(9 z3rZ=Om9Dz{uZ0Kr{I1A=(NN9yG)lmWlUfjFBrS*mz-^+wSr&Hurb{y`1uRc)>m4Gv z-Fqm@bwt`u2iQuv4NZv`T5EoIYO;3$R35xHTXGavm2!QMCemODy4KZzb>Rg#aOSO` zAt<4dKhze-NVp~(fd)4hHhWL^j}`O#iTBu*Df%KF-02}lA7iOaH;{>#WeQrL5@Zr_ zz}uNtM?^oW|!!Ft5#_h zjtFpdA+8rI$c4kN1WxyKzqUrP^Ata1!4?BI7Uhku>f%&}4Z~9{x@reyI`>osD_wFu zgGw|!1FAsACHXvZ+e&KeWcKfAM?pH$%x2UT$r5Kl$>pbF+qHgyMdhxg?|WJSka_O! zQE;#8Hg&#Vs}Q}qn=_{s&WHm_IVoU$$z68Q@Xw`Rd!goWkUHk9OS%4;H;qa#6`uBZ z)AlprhVVO=_?!GPf+EMhSWkDCZqQ8mi`0{MYPX0K-(Z300 z>CP;*CSQWIrxWA!>taU$`;_{UwX5)@_?Sz-8(u2kP?_>F@@UNzyx!%;H)!a?wRkwu z5?_x)c@0yq0^S*sl|8O9i93;_x*4enmj`$opxVmz9;}Z zdf2=YrI+MF<|hH1lye9tU>N*mwuh}Oy+Z^L4j2b}n@y}b^Wkr>KOSj|JK=z?$3aDK z9A+|J4fQW!WcLaWKI7AT^0_25nQQkZr6Hvo2`cj?k|*jsU&|eL0lmXM9!bOXy_+sI znGPWR&`!j^+g1_zNqcY?Y+_r##_cnKivHPQYVivFsvc(Tal^y8Ja1xT*eI@<+wlEgThNSw_e@ePiQ=2^_{Z<+5xGB{#z*Ia@me zSg(m**MQON8~kTX9IPU=z@i0;#dI!~B+H>{vBYOuEBNK#= zfu&OAN{zAwLTxu@<@lSAvnjYKuuYpoL;mvF3rK8|=|^lHR=!bSEzExvvU@q;@Z^Dh zsc)?dEBw+uax3|BqdD66>Q(V+~u99Mq)(&a(--f@$Ai@MuUyP?IuQS%jPu)239 z-)v7tH$7;tkG1D5!130w;$h#@oM#P6zNd%T0pe3z;nGqERACl3D!p!<>PE7)KbxFI zLWn_in2=8Ty~wWX*Ibt1bAjqwT8lfPG3%G)D&`cjM=8 z(%m`e;%(#eiWdA;)g6)VgHP*JyKT5uWn5 z2|`m}<_?d9v%hP!9z>aP_b&*1M%O0F2PY<92RSUVAz)q9)*EPkl%_ovr`_WqJ1`H|-BUn4wRGEzUt})*2WD*Nj1Hoj+qf>VJE?gVPt> zg+agp@J)XPm4BzZ6I7-AC0$XD;#cer56cxd@6276ycu0}Dzq8QSb|5Om;U&sBMs&c zmyc=okPA|3`>-uv5wliZ#_R{&$6&=C6WBZBVNtwh*fyheR z$d-R4MaN$ezcPA{s^9Pyagj0wrgO8hW&0D`rLYWA_QfsO%}Iu`LdN$e-S;93`ev`_ z|KBx%)BSfado~5D5cA30o6-EIk|#m=NMf$M6Hv?d(quCLZ6|nmYHsi0bBR!{kz6GfpE} z6Q^{KvG2`AHLSpxwppaTl{4ad&n%efHWJa5s^2*MI}hG-JOoEQ%!doNmlBsC!5Q_% zpjfo>N?F1TyK>!DXAbfd*!5In^`%%;ezg;;y^pf&FqTQAM_-z)25*Pk!NksMLE_9^ zFN~sQ)Xm3}>0phsgZ^=df1`Ni&)MxH(2msH`pNIutcx zsqiU(@wX-_q%RaBniIBlSLwaYd4A!csvtT1q!4uTnoW{HsWs}~ed`tIPGK7f?I8j! zdXA8<4mv%N)>F}ViI%Cfef-B($snMyz-ShYVb3H z@ZyqSGVDiz0AO#5VHaJiZFkk}7}fT(D>pgW{Ek+RT?aJ?Qw`;~ zUys+1YyqN$+4dlH=Z$La@vuO_KrYo?F3;QA(xlghRqRiVC?ZL;bZ>M6d!d>W*m%Z-*7g#ru}C@ zIsVz>DQJ9)VbnsF*qL3)z5@#ZZuOEU$sAz$&5s|Az1<0`fR3`@jor2g_g7aR|JdE( zH6fYF8kRddT|Z2Ulk_qzU+lIkDDYed^~8CE#_GH3UlQ=C??EWkBW}lhgS0XHA3jUk z&92P|uUao{Eq$sV#1FsHbL&|Iodx{Vra)EdfS?{UY7zCrq?!)!&US;j>sf`;D$o<* zY~S#1zX?oHmdOnb3-Y5Ce-8`ymK@Io(4c#ARS%y%{kdq}veu*$bWJ2_|KGj$lmKbA zEn(hlsncCQpYB4QNStEB&SxR0g3jw*mjanEDBq<+!iMaRrU#yt_xoM_j)CsH;9Jrw zwB`u|d<*P&Yo^X0`k&xuS?&L;55z}+25KPk{cJb$2BAo`4z~0N*#ClJ?DoG0?jw0R z{$8gO!~ir-Xd36n1<-49n;L|Z9hzghKmKq^R5FJlsl%R0B`e7=$BH0VTMF10;g5R# z6k`&;1)VfN_lhxY56=U(4E1 z$d$umq|?uVz^HiyVhIkV)|8}y#t{^);oZrCQqL@Da%WB?sd>@5 zKrsZ^){-bbZPIZvH;y=v3l??mMHOxz8kSu!Hrm%ZrMJ;5G?9w*eHTm4X=}T8|D8sk zvva|MIT9&aY|Hs=Hqju2QzR;*9X>pva*HB?Q!IN<4jxv-~Dl z>UoMYxlXBHjr%>FdW~~0>fREg?TXtVIR74ilef37EjDZ9?V29cY{kb}L31G_5QInF zxJ!(@L9KR|#qpgyKdx^v#;o0x`~b9LXxfP*%0T5SQ{g1OR_d^0ZOyK8hO(eDJSEsH zRlz}rk!Mx0#|#BsRO9YioiH#5rm~Q2m2KSJ`qAGaz);vE$6GEiaCHNiYM^0bdaru# zxUeTREq2&Hk!i*X|Eyi7VsJBHk`To}IEMMAw}+l&N1f!_x? z8g7$Wqg|E3dap96JG2|F4O3Q;dfyGG^3mZFTvPv8-<~1?H)0suz-vPpz*@4u)0FL2%r1 zp`+NSDDVH_Coj%}d96R_FY}l&Qtt^G1|JK(Kf>=K zF_)xnk^x$|Zkk%NVPuCc*Hva@pmDm(UUD<13DC^nUCi}};@iGbUu;Z)O0`DraR#q1VL!cPDsr>ZJPX&j5~)Jr zr7I++#0~SXYJz2;o0L`70?2R--)f_dCpB+X(XJfx{H+!0um9~po|6>lk3Td$3bbkU zIb@pE;=o4rJQm>z4m33*5i)4_7+T9&i-Cc(J)prdOZu{c?_SO- z=@9!k7m_QtQ(B;<>@FOjl+13KgwAHKC~h(m#_K7+^@$X_dgn{7e)ByRZ`(?sR`Occ z$w{x*s1;ew2|oW~=-H|vKzOBDqQ`)Uo-@U^>DZ+qYI+yg5`)&?2qNGPC{9RHz5RDuwt|5j3j#0e2aQd zmge!&y3h3Vsgh5!0)JT>yijA`sE5@wRkGMb3J|eXwhA^T*Z>%@_Ok4?8`N*j`OzqB zEc1c=VjHqw+8$BcTjV(883uM_7&Z=x;WPxw*$*TqypmQ}1ed6`x&I2e@53QSwq2@S zO2z2_Uv9*O%thhzK5#{pu5dyC=T}z*y_=!7bvNM$?~epZ(o3dTrwMV46<7C{;WvW$ zz$g-Edfk-)JF^)GL#Gf8F>7(N8ADZCG(0<3Hu{SQUkI~hr}HSttFo0Y6*?;q;69BS zEvLGQi95yInSD8Gq%Xb{3eEjle|8t1MpoC+kAqH6aL#UH7H|Y#-OVD3Q{v#8s4(^+ zogNLw!TMJ>U5Db6AkTH8PV0hUYr?w$I+vba)#OtQLDsiyAt`+E2Bq!qd1$`p3EA{* zoajQ(BdX;8W9?1jl1kqPZfPAS(|$ISnW^n&Zl$TYpe<8YmR6?bUSnY9Rw^nYo_1%( z(iRoXh00NLgA$iqfXdPW0dvC@G(}QG6a)kWo@4WWUOw+0Uid;ko||*->s;&ix^BzE zHFoRo$jlcjwQsIQR@nsHwv6)npn&$a5e>vYLvPLAKQSEo82#dF2BSW2^=`d) z8Hyt?g)2`II+d`qu`AS@6qDO=;;!Ge4-6|sLrGMG$@|K~z~3RD^f_fn$+0rr`Ip;Q zZ}MhI9HQ*CHko40_ZJ%zeQ)nyo%~yE*EMT*_8FJmmi<$4#RFZJmvviDmrK;D!0b>u zq0Z*Q`S8EM2@g3d`u2^htQ(02Np%dFIOeYXQT$)RGl&5l)!@x*6ScwX+#dYX6@_5X zHK{rvsNn^4dO+H(bHd8#Fzz?ssrdjSf3z3+ToJb(65iN0c*`wh@r&|e;h%oRVdB)@ z?PTXBnWJ9;{&cAMB2NgH`-c!4>^|eYyk7^U_rjvu@5m@-R9C%A?wO~=ZC0ME=XV(p z9phS()!zzUOn`Hb-n|HCu@N{^i|ac*5-1mjuL1K5F~4qAME%_htt-1CD<8QCy+D$Q zKMd0HmM-<9H?-aP-nZsQqF(OVhT_BJ4n5&+BFe=n@m>7cE-NG-e2Q@sHkR0KyHl{= z=^mrhJ40qD`0igsmd^NW?I>tu*5KR!Ig-OCe-bm?`qIpY%Eg`|I8(dcBU_6- z;Om59!OnHR+Py@#-AS7M;S(k^6QK3arkm&IPQCHrBJG-_yx|uw90k3NMr(H1tb27t zBmaS|-Sz$x@0Qb`)_eIobEFQNZW)r%=S%pn&3~KNx8+;uw%e*r>mHag(odZ9pF6NH zHcxJ1%tDt!(2Cx$i$&uNVxzkm4tC$q;GbzP9tQq8;H9(1_14>iQR(T)S>e))ci&z` zUA+^3>Or*S>Y{_!-8vHzAS0`yUJZ5fUDRm0{7=A1!r}@?JeN|-zx+ZH1oj1^_=pT9 zfUnDFQ4HCx)iw1TjGzo@dH7%y_6Wno!q%)}UJGUv*(VHg2+t3SYHSJi?Zo6;%Ljx1 z1+*GxbtQqdiJo;n<9YUH?azt`A&Gp#y2%b`9#!$oHpnF`D2TRep4#u_l*~3aS;bI8KT%{C!V~wMLhj| zV<}B#Zr?O`mjzrh4w02?5m@pgA*_^HM{rq!?^#6cLw4Qb?{hllc0uR|1 zvT$D;_EkU`xebda0@m9gRV(k z>a^|h=7ytocT9On(!dczF;S2k(OYv%bWR5K@|7KRb<$n|)J4z`jAo6F$GQ*}BvmMI zmMzOQIe4(=+?(MN!SjyBeZXMT(OTVAseFbNo`-y{`%wG-?I2|!YbSG|)8R~hv}H`l z;AE|Ga3>?b&oxW=FyDUHggk=rPlkd27;gv1>Vcf0+fsk*M*)zYvT4`0*$X*|Mph8u zd#udCQ+8&mvUyV2e;oc77dnJ?J38j8V;r;?cM$J8h#c6sxX|W8CKNQkRQ-&`atfih z1`eVatUBw*Ly~@-FzoIu&dxGE((mKv@Vg8co)PD^a-4R1qHYElvggeZ+eie$$#?q? zD)6$@pew+2w#fQT(FYkaCu8LF?#SHwwW6dG-w(YD#>X}ORWozr4i@_C{hxtFUMGOm zkm}Ek&)!7&=kFymgf#{S)4^ql4YO=_c6q==;p+_GzpQK?jMu~n zh_a`0hWTW8emTRfEJc!~YH9rQgIAh1)8<@UH71T(*FFzE#L}Q~Sx3kEH9Ec2)0z1B zm-!Eb`cEWw!9pSm4@&A_Wq84y|D$boTo?YfA-yaHNB0jY(G%-zMNQ{6a^x0@Pl?%p z_?xk1{pp|Pu0U(m`^e`Vcfja5hCpO*>@zB~sTv8l&X-J?+FTDC5hXPbP~tGK=#38^ zNnc!ZaY54>$oZtd9OGLYiO8@}Y}W~Q zX_(>X#|5q!H8ZjKn<^Y5oXjHu(y+>%0;5U{0*5I9q<7_r3zPSlKckoTGppX4my8pB zN%XeTa>kkKFR9k7U6cMAbB~4gH{7R1`@WTtREW-rKvo~KF@Mrzn6fUUD$bNIV zQi47c;J)n{+O`>9T8%gnku_>hc$GH&CrmQD=Kh#C_FJ=y%VO@N`G;351@bgBi*tkR zKiT8&>3-i9ioH8ZM zT;i)tL+`vZ=M<;k>9+zHbcm!NHwz%H z%4Bx~cSG&M;+m>h#gd(LjE3SM2D#x+gbbi~=6HdyL25i}O`6(9Ks65yMHDk=!|^vb z1^j*Pf0kKB6Xi>J64dNd##>TC?6G$4VlCrs?9a5#=+)gC@Nk$zpH_x+J=`Slt46Hk z+;E2O{w)1q^pz9vLf9NIX!Po=pWNZ@(tv9XoOoR0JnzL&SNK=rBK9agdD#560+X%PL`Q&L_F00FwUZ;PpbWU~ z?qoFGE=r|I&kUW~jAWec2BgCl=qn+p4qlE%GjGl9TD*bIOr=!CUl+o)P&=QVd!BzU zmc|hJ+4Zm}JQ#Tjw7xgwC1u*m3d>e=1vK&N_0>W65xofy#a3$Y$7SibVGSC=THQ79 z4f5vVBeUkk{%bHc{Y7f}XyTo!<2idq%=5f4qx)fJb1&Sv1Kiu^7i-i01Z~gNq{g;r zUi_*1WUw|)(xw5{H&l>!P%{nwOIY53xz3=sj>ChVQ zzm>$FcCA?ZHB&uXocvhM8;Y02Jb_u_$!a(8Ey>D;z|@a|Xkal6@!lHW^x*G`_0oH2S$7Jfpq1(0F8dKjuEJvM`l=ePg#ZD^_y;m+G!r!cZI#F4 z@tJ10o~hbdw*_vu*g}|83=Y*c@zynonrj<~VYAc30oX|#CeFl6Ba2rX?d3@d#MDJ> z0$kLyjZ>c(Z?kq|^ErEd5-o@H3x#P7>Ry4_A5u$=J=P=gzfHvYA({kf=0W>br@YBNAhu=CD0x~0Fwxb~@jA+}Mmwl~@DU!8)o zN7Z4dnVSEh7wa&EUJT1<*20_M$?D7wXRDVo;1vbo%y9V8ENL_Qbt(0?XxETsNA~^K z6B=6Yo7^{N?S5$Ep83p^4!{q`aCb{EN1|&_o@*{TqS#ThD+zu-tW9}>=8VPsY|6Ry zEDw4Ma>;j`_;;c&gLF_WoR~?;3oq2iNiL6E$^#DvD&a0zQd{zB*m2Q|{gz`^KZ}k9 zp!wD4sE)~GM_4KTKnTuadLS|o>0w47V z_^6#0+J<_IUAGpN=`}OF=zPgF#&tdvV4_fG z4+B{|{mj~ME3~Yoz0!?UNpeZfd>LD!462nrTyNn^>8ZkpbN=ZOF;z=K`P*Z7=-K9$ z@U@JV1t9-JXp5xAvxieC-rPL+2L;V+2;Qnh*NPm{d(adF_q8F%p(Jq1*hn#!Z-X(5 z664xKX3&`zaL8%13k-J4_&?KKR?5oj7N^mk(1f}cSO#aZnKLf#jUQecyL&~NSdCK5dCi!_lZ^Td0>-N z{PkGo*PFv}qT@t7z#O;Y_ml8ECwG!U-0MZEoNy4Os(;v|ve{A+vzl4ZpbH%IG&5M1 zj$;}frH=cz31zwWck0+$FLN*T0&CE~|abbjS8pVMZvFmWM^gQ;1g*n+t|}%CfeUEP-x$wd#@h(Uwv|o#@98h% z))eUeV!YVpC)S8ZT{c?@Tt*V%vY5^H|15vzY!3+zSkq0~uxxK>5RV8W))Z;r9J0>abKjTe)db4YLT(C`4O!eu2QwoZr zUBB5Sm~Tu>q};6eD*JMH(Z)(u>XOf+ajlm^k)_tbQ$yl;A5nYek}h|m-E;eGT=X*0-caEWX4T- zVP7iK*p-SJ7YA1Dqq=+6B?5EhX?fj39y4S5M)TM8;PGZWvb@;BwIN`8JC;Wj_=ijo z;)=Piss%@zlD-36JC)7fVs|aED}v0Wc$UoQjeq5N5nlZLwd0g zj=~=;ni%2sa1)3tRPcc!^i;Mt%>7zQ%}69jYu>2&p9Wzn_}9ZT=QIi+ zgiG;lo*!FVQdd+?qTuHaP(N_Qdiv++BI`q0alKk)8#}L_v%Y)U)7Y`)x`yzw;npI+ zS~HpYVsdd2h*jH)1^HZ;l?D3d9T9tOMdr9}Ket9LV$seW;7}L>)c5S%x*he459X;1DW_P9hSdK$EzMzaTtQ@8= z@Wh#dZ#N5kbymRJ+>Y|=P9kkC1BbLNT>~B3w#Kl?yv;Uyb8AXF_@Ny#8hNNa*Y1h* zTK&|L)0OM+!n&A4dsp_4f0!PiW<$PDGV(de$??I@?-s-QXyOp%&7FS$WiD>6vT1A| zV#pg;-0tG<9fHifcaR@z8>VOS`ebu1!Uw=~e44s$_PJ9-QA52P@3g@buuqv7UZ82P zwe(*wXm*-?o7Pu#k-DwQ$W6QtjasOATp6@huz=<<1V{o@hiY zKsim{q}jwU<&hEBvclDt!rViN7*}nG9WX5YL^WBmqzYg+Zhm_)-Bt;nKl*Rb-EW%J zx)-)Cj*q*afxifMR*1zLGfIL~I}O-qJ08`=naT^z5}!`4($tb3x$ z)3SIJSC@#=*xlwGqs*j%(T&tz+mn8jUL2DYyL(baRR^MPgPdX(k{MyigMTokIV5n*!sCcpIzws96YSG8 zZ;pl+a1NZM_K|7ALe7IeDc%ZDa4{4ei0%K1=7J+^imIge!nMNPnT=i-Umld`6S*cPh6qK>9qtDBA z@-J`$ESG@%CRokmkM3#-inohw)Q>D~Wh18>k+V!8I-D3Bwi7V#BH;_}DQVsTgQssW z^)_G_bP}{ApBrw$cT~>S3ic74OHUeDxGymxiWP5J`9^#x<00V zU-P3};+0{Zw*|!*4kF4wq^zWtW0ynOwS$9WSNz)W4wnk|H?6V_3U+c%ja*~yUTAXg z?8y-m#@EB)^oZa@_0^aj(h;Ft$yV|!Zp~5FF@TD&07F~o zv4-He!hvFt%bX1s6U0yRHDWVrfXFpFhGHXWbFt1hoGTPqiIwehp;4|@ZQo1zzaEO| zw*`vHj_f7WYxJIznPygp2#&&~wPsgt!0|fSl@6lvmJnoheU>RFX0|e)tHp0fSsc*; z_GAv(AXRehtjQEkowN@{q#Lc8eCH0tFV(sH7%{GEj7KOO{DQ3kj0zW%IbD#sK=6~i zL*8vo3Ky`M=s$BR&6T`bl0Dg-?7*m5C@;$@u8eYHlb*p&jgcHZg6esDx|nR~1l3F# zTwc5bW#V$qis4UF>YtlF1S{eK$nv{zsNOLF7X5)L{DEeeVqc<%tg}SJff)y3jCpQg z8Q=juA+o8N!9Z174#8x8Q{i#kNI@%(RE7^Ots{^GtC1{>TYG2ArVDPg{EI^3zs~iI zRq9t4u;HQDM$~-u0in!k!J)zDn0Od>m()HfIzUarC>iM_`59v%kHc03hnZzt7!SfC zVhq0J@OBIxNg;;9W4x65h{bCH#03|DFpoW}XqMLv&t&tWpP*r3vZZ{kO)LwYu8>dF zrK*E*jSags8}SGlOFitjW)p!tn7H;%=DY^GY#J6aw9-dl zY=8;+4YCaa#iafQ*#dkSQr>+bI7=UIM4Xcxsf*ElL9&~3(LWef|0JujHtl6BABvKm zZfwJgSUs`)0o&Q5RP%zJg4F$UF6};RhWi56tTP5Z=3X%CbLa}2rS(EEAfESLSyIw+ zj4!QjXeU$Sx>XFQ;!~&kUhG!I4exVLBj$T=fA}05l&$}^1f%ym#0VfAAv~n4HPMLI(_ayBll*Q3wwKR3Qec%J`w&+jLXUgj495XBNQ<8e>t8hYpt1-JJ?n;bd zm_X2T9G70R3ZP(We}`;`IAQvJhnW0!25w!CCwEDNvc{SfA14Z&W7~hn{BILvyXJ7p zsgY>)votlvX%obF^A+6|u5HL`-;0-)nklu((Web3-@37&^_bXAkbqSUK}t8ww@nc1 z)jgNv2gWwTWX zx{73X`dSYnnq}}>k?^GuMDtQJtNowGUhA7&oF8YJi4*0RIX%dB^9hw}VaG-1VS}!J z&%#F=pyQ?=BItZik{nzQu(@c4I+JmCOveYx1r-_wx*4(=K+lI1&OK-LMJ1$U#1T%y zJ+e2vM$>f_bdN*Hu7R3wcB04p zb5=4Ut6NmW;x`AdHm2?84omBj>*r0My%4u%hnl~MDaDyTA=!q&{Q^WHY8f zAL4ynOWQx}aCwBrkG_aD_qMvQ6SgDvTYjU3;+DoYuACyFPlEW#EYtqr$#;EuM*6$< zK}NqN_lZo!WU8<(O4MQfJj}Sq24lAcVyu<0yviWPI0pJk9jCjo_;XKS0U|$<* zH(Xj;O%&@oNIJHQ@$orTu{R2Da`3r?xDB7z9yrv$5?y?CQ)KkH z!kuGB1m;#Zp?#plv1}{6lqId#mxPA&6Ks7k>Gsu*6W#$Bw9f4s$%6{agyeNXc z-E;~Uq_X|_eu+RsP@IbLe)`1Pqo@Qtu-S>0^f)E?1=Q1Nq-uOGO8Q88p7_RSm6grW zd=71tf6nz1gKm638}|2C-N5x0aYQ4zoEffolC!(MS%QyjU~feot;TUu%J{d9GCQW+I$ZGkA$Wg+L36FsQ~`AcBgo+>r=eJ=TTPn#Dg&%Ckp{lhU?VG8n8Tf zi?dAw-kr@k7-n0GkJPfrcZ`~1&x>4tYz3|jz3v2KrftK?>*d<(b#vIXW_3tj^;3vU za`~cWb&dH#b#;lh)FaQ&F&LNlmS{sod3s5pfntK`%5vK7+tjN3t<-hU%oxT$g|Jc& zO5OP@$Q3m`QK&grN>``mf^mL_t|`Hro_pn1qXPkU9hzXi5qj`g8S$a)+gH{gaEy?_ zxOQJmpdXB22#tP4W`@}3Z#+EVNX5o>A4g^O^mwTbVrVlpH74R~ms^5YB;1Xm{}>8z z5@R5|a8BXzyhlU9^agX36JIp8C~iTOMBYrIG(w#R7>Z&2oca*3{t+(!rq$E1c0%eY zSr1HoP~VtC3@WbS+aK13Hv#ZzOz&z^0Q+%QOpYV1k%q;UwD1^DO;G?w8lGxNlM}Z^ zp?3P{T{}HWD5A!ONy2=IIo>PUY^FU6D??5~J)7GyToag0=8S?-ve~L3kJv(3c3yIJ z)(DM}?&Xmb8J$aIq`?at&N{jA8Tc-rxJN0~iMEA&GbQ`cS{J~Z{YR(vt&J7j$@{hG z8+meRug^ZV-vbvDN@5O-QkRNdI79<`H%_F@rIy(|`K0o#5>ZwxjBYSt!ft?)h;Tyd81_ zE<{*N`B!NH!^9D7e+4xJ{x{K1|2H#*P@6`HNPCRLHXi-*6{WRaC2)$9R>Ts;lDB!3 zUcKCEZ+dIz!*Xltn;CWDRhZ7WD)ZI_D~>JCVE3Mv0qoI*BxB0>2QN15_jY#Z){d+< z)75RN5%id%F-+j^jSJ`6x7{s^VFclJ=5Kgq3jPX;|5-TsOwT_aE!uBfn=P?)6?6R50q8EgSQaH-0XCsy@B54KJfX24Gb`rN*c)=8amfFcqQ6zivxn)OSjpd zZ`U~O;PwFXF_NA1Chv4-p5tD~jqosn#2|c~=z%Yq@IlY-MC!2pjDJHaP6UPjaD8Q% z)nR?vxMY1Kd_zHmx%(D-XKA|yGf1B6cc(daJ(y@qr1vJTDdfZvhIiGb;uT{Rewm!M z%y1k3cANXI{^AxtvR;+jp`kMK0mV!@CV2;B>mMD}BSVNUMEjr%A(=t;uv*{OheBhI z4K9i%KQRjKO@_B}o-@uy!+P)X)<|BkTpdi>V>-8lNCl7RA5KV`4Z@e8lZ%+a9S~#4 zJVw3)vJ*nU8100dhRk5XcS5%7++5o1zIi~e0N!?8baVbACT}O?ifPJw(tP>?3c=iqyRr$Zp8K74&?J#cs%E^Opi*u(2EbRV~bz z^d++Al~#NXde=~!f`AKtATK|b#%m&1k1v%LS-+57!ra^q-h>_I$!^GR5F(~@H^k!i zbBwOMh`a+%@x$XsmY|gxZx<@1T9_ZZA-l8_XfmRpyEn7M;$I@$2D4=kWEZ3m|?fCREDFOX+HM1r%bl|JjGS8T-Bl z-^+Ktsh3=pXQ1ze-}BYSY%85yfw3P@b*k73P`Tp0d1EKh&Skyrn;X;B0<7fiG&Xoi zr&6IVcCS=RJyrSBu8MiUi^c;~b3k>f^qbmWDFWnaVvX})x$u0@QY%#Lfu3=&QcHda zD!@~~|5WyWuTFG*OTUQNUVcc+p9@2v#!d;g7o&%+hD-nhK_3^Gv2ogJ!(V>zueOfNYC=bQep0AzyNJXkaX}U6Y+iT3)o`jqv@F1)# zUfoVNUW7#LQX#dS0UIDjv5$Von(r`vQ8KLkfTEMRX9ora}UtH+y+ z_ePntV-kw&uo16n+rJ!`Tq+HAFPu=i-}qLQ-ZGn{FR+>3KU3Eh*)Lqg!K_585WW>g3V4XL#X1;H0~MVx-#4qjGJmPSry}Xh>UzRgi{q?7YsC47?Xu;PD!P!{F6G` z8?ZSW?f7NBoo(EUqG01NK>qbvHJB$1*0ocfC$uPTchv8j_uGQO!TB1PsG+nx0DvIU!42ytiwzm>hsip(Bm3cAyV*mxAp% z?{|UR;+Em`9NRtRBtps?$TDLd+cpzlnb{#-OktmNqHxbDP(xLll?#Woh&>QW`_$S_k}nJkG}t5nDL8H~bq`*2 zAp)%2o+icwuDMN#Bo5QC`sK2bR}ZEw@6Ky}8APSS{65{YKzghh`lknB_%VLwxX;JD zdz)om6l_f*Etnp0RX`Lxr1Y5ku6ZO9;p9;{yf%fj@Ep!klw-z!jSmDlsdfVr*`K8- z%C`*e)h^9;0B#>H>TWSAGaO&8FuSyADi~iInt3EY+=Y6- zY1NZ&x8Q_82XX^29(I>=o#`74e7l_J<9QaYRTq}d*(_p(2y&7BgP}|rt&U~13a@B5 z-|Su(FGkadhefGno^XYo;;|dB*Z|Iu+(8(84k+CeGNgL4s-qMYV6#4M*4n@_Q{b3s zib`dPUC_#lQ^%}rNR=)&&t`d00w6#MImr*MO|iT7aQ*hk?|-FjDe(;7B6VY6ZxkS$ zaQMI79T~7@9kX^O(|B0S$71LD6P&*CCb=Q`_j*NpnW05Psw(4#d8QMCb7+He1kfAW z-7vA(lyjRV=rTqSJ*S>E`3&XCiKD7n!Rjf4=-gGavS+)?Mg7R^-3^&7L=sjr2d>&xENrnrywVGq9@G!;kuTbvgAy*|YY+o03#ctRcK~+HTO^?CxnjTS;>uZ{9Y$iF(Tievc*`gl%(OSxnH{59_p8 zc~jH^x_*SBbiO}M+!eWYXlk=wI5xtRS=CN@!lWIfxquiO-QS8JK^u7Mah~UMoh|=- zl3Ec&LW0!=04F$35A9Gm^rd273h4nlguTog9fNIpZ%>l-(o?MVqN1X&1_YFU{Rt}T;f!O z4j%-Z111VAg@v%-^i&V4K{v_3-)g4~%b4IUKm)#AmFBt(lzdiegQI);_01vchfczE zQn>EEXVJr*U7yh)Vb|hK{Y4_9Y_ww3l8p?^P~EieHi@pjZ|mU1`kH^a=8E5I2=9D6 zgZ-Y`qLMvq1l;Kp5>vkmi8&>4W;odcM1$>j8`s1qW<0vSw#t>+_mx(cEKC;9waqA- zo}mAc{PVM^&?GI>8~nGQRE+s*2-pd@{CWTM&8maE$)8|`)qcpqHUA+a4dMGCS62Z( zZ~m6dxKuYux;z(DsxMCM70iqlUqj_+@jn}bPy-IVML~q1dIo91K>Vd%R2N`bX$gYm zO@hCDD~`pqc!4n__~E&Oh5bPSuXg%&fF)M`E-ZKnfdCPOp4 zAuZ6zjoKY0ZL5^@s!8H$5wQCG&nvuvfD~{Z9uSDV!Lc46^!U(X#~UB~dY1tJRUF6| z_;^BrcYoIPe0`GWvN@$=xwLFY0a*?o`>p-H#N>%<;*Z+D&L>=NO#H{pjTwz&r;(&5 zxPorDv2x6+(m*GrB3b^Jx8>(zc6T&#ExPq|VL77!n6-8O^%kRC?E)ep@D&ZaG*}c3 z5vWSb!(vlq^H^W2i%#tx7E+JLJV|qiJl;?!2^xA*f))MOtJA;PxbkxTsax@iR@cg~ zaJbKM;P?|}0$1wRyfsi?q?$_lyPszXEnD7F@KZ`yb#SQfWk^eqy08R*g*|C6MD^k1 zY&3Oem`=YE#n=o@@I@^2r}aK*$n?e=I{4FG$%enw^mON337&Asw-6_AR)_VeJ!HX7 z!eGS0-OLJcPSY2ox2S|dAEq)QEz`2LR;nVRrt`+!To-Rl#x?jL8R-&!xtf?$!`Q(M zRg=1Xr%kzk=Gb)uRqRW=#*PS!*utuYx7_@=7!nz5Cbr%iGQzu{e4x|{qU%oah9sZJ9~hDK4^idu4woUl2FQf=s=y+**m~Ah*7@oT{Jdd) z(-##z@zFHN>daYWTxzU~)t38jGE?UN$u?L)VU+o~H>T0AP*lrI9mos_D#VZ9i|Ob6 zn(1yCVldY|EDJuyNT1PDcK%qDPrvK&EWf)oCbbVym~thaSQk=OTfT!^rX+y|sIlF~}$jkz)mGfc>X22d|4A`h&XgBG82?W_5Z?b2npDX;gGn~32$M|>PYlrGx z#xc^um_Z31;*oEHjektqHU+!l^SCaOR{P3U!BTzdtO|{q?yQb@Al$(iI8)*wc}Q9K zp#wBtFg9gB^5s_^d)x8m>_B?MiT2oQy8R_f$VXd4Y_0*72;6f7mb=kK@ja$OnxVv{ z;v?L|MNNyU5zIe_AiJy?G(9FHw3b(1@C>)Xk?}Q-D$;#jTK)OBg1-6wEVc@pf3DVQ ze-s7jxp&a~SO)m2VMY%@ep>~G3bmNULy&D(*B9T|ZT$@IY54Hb$J|v%XovCTtB{&8 zvmpH7O{OxUo8iB`8i~KDgiTlnqja3lMj?5m4l+WE`#-uf-JBJZUJT8!ij8*fR z9QV!s@Dnc3U#afsU0banNVs;{ELlawq&R@phOy$_Aa?3of=gOe$uN=y(y_50Q7#vW z=gA&$JMQLSsF1by-@wQ{H;S;^?78Eh4Q1&UmCj0L{6~Vy3bW@Lc$4?Hh76)KF=eYu z9g4Qbu_Lk_8xirugZScAAD^(56RHRwI2U)^l*-ppS0%%LQ%Q1Q@qrQR*=bi{w}C(^ zn!oKs{9rVFj9{gNx8|(=`PSY-rc~XD+Pi)D(KC&ty`x`4+o(ecX=Kf>l$q{?#el2& z>{ZTrSCG7`nWfM#8Wbr5=Xy5k3Ae+H;ADep6nGBAy`@D8|jbi?K?d)&*j9Tiz6hN^mM z?9lu9DsOp4ZS&3j>=ErE{re=uAuMV9`6ILcI>9?Y(yIO`u)*S`N6zXDyw1Jm^Hx*N z8&VB*z6RqSI75+-bR8QC!Gk;-zQn;n_EC>X^^qzY$127iTfUT?%azaUN^MaqJ)EMRpcUNkF3IUjBtWo)@Lti8R$42nAGfz_ zAzlEE3FS0E%6l3S{-Z9oAP-s)I`Tt*X6U7P!`T%hR-PXxT}spg4=?{W2oQcn^IH9x zobf11Rj+x2zr^vZ#z70`j;Aylp?iVB%?0$#l&%LX12thwMsuIU@C`R>! zwe*2R>HDizQ+kvA3OhuAq@yswWf0dq^Gpn?;Y$rAXl_y$$!f5v^wZn~4-sqk!)VEWbDrLKFWWKFK)q(A(R09jy)$hc zUg`>0vu?ilS<%&h*8T8Uffo;Y-~BI9e_V_Yn8W&-oNyh!JM4t8wliv3z{VDxuY?ZO zKAu+ETGpkUFIRk1bX<@gIQUFdcm6d=|8!&7$o|fFkmNh3&hS>K9ZK;Cq=|9C%FB}a|E60Q9MR~=`C3$V zRx=*#qWci2Xd&6}Usu2CpS-Wq_ZAr6^pksYVpF;9SX_t|{u!(!?dZtyB0}WpkuaY~ zRaGy1b!N%1sP;nx%b|X{kuaDDmM7izFtF{X9WrUbRvaL=rp&rkGP4CZ2;Vd3jBcN5 z?zQ-70|Pw4g&k@i=vRqI46uXX`eb`p+YPT3BcO|LH@Qu?Y(yEPf=$!l{=%|KD!4(c zcTqMHRgjM8L61SB+d*C^i!@%n`eVw^%Uz1m{UygoQ(GiWUWFS-vjb{kcwkQnP@_9t zWGyF?px5<~bn8pyibU7`^H&lFe36W;HV)J(hUC%8?kq?Dt0$rd7>P!l`J6DS^9sXq7UZYt5?PP<=ER8 z*J zb7Iibok?oClWXFUI+jpwrY^cEV}o0}5tb7UhngIA0x3icn8+@d}tzI~6)M*$H@(jW6QbPQaZrCC8>EF4^G!dEY+9;0fH=hOnhp5Z9M zy$1Why2QCX4`ZY4UI~7Fi(8L&X~4^&lHq)_BLg39Z!6xhDP7 zNs9M-KM5+j&F9fvu4N$R&|%0nUc0_VxX^CRR7YqLsbHy*~#=(GqPI{xKOjP%*;;@;>*0#-FGyE=|7^w2nS zWaPo2j>SOIyE#%5lHKCFVy z1uB?+MGWgvE5+bT1YIE7@5^ET#Lyia)oHAxc8C8Q7+YNpLizu9+~)M_N$JdUehpeu z!k)=ZZsAU*SAty$WRG_SKZp2Ap|XDtzvi&=EsGpBD?3IQ z{J*yC-+ujQX8{j%rMthejW0TVHjhGXoguM?ayF_a3re;7bTu&b^I^q~DWHDa2VNU2 zWsOdN3W0j{Z+2;iHeE;tm#u7?t?}#wW|NmbJ01=NC1$ zP21N!^(+L zRCLq7+E2(!i;POW<*yA^$FD30e_zczL08xhI)1>$G=@02^baQ+_F??TTh5TwAxid^ z+h&8pH!l<<+x<5~>HP_C@1mf}?)ff;CjD|*@+45g?g6;)2T(Ak_%EK0+|~W9zg}DU zoi7)dW1Z5SXNSMWeq0U^*G#HF@t|rOLnT)b6a3KL2)7I$!ZjDr#*1rVxuBVYpKQdn zj8-K}qNc}wtTmfG2z0DoW?$4Mn9 zd}|elD_I5wRZ{g*k>@Q$_*J79?Fjp*0s8EgXJXImID#! z#KN)$7B~SP!wSh9&%D6Q4@&*{aQJ_KA!HWXTj$}&JFcj?GQ|7&FNVGkRf?HxHZVEM zo#rH_-&+T^WdO^48J-_+mpacHWb!Q{U7#{P6+Zl z2ZTmcI8mc!3ORuatDJ5$WuRx$Vtfc+cvnM)O0mNLtwJ4*Z9N2TT{7<==!P^M6U!%C zv3RwMAcH*XT(p!z1RFMzUiba}iIY3KG<+Wc41hg^pp9xs9?hZpLM_!JOMaqx-fl#` z(A=MVe9%wgOac`uo%#PX_3eR7@BjZ+PMvi`<(x`x-K2|BmgHVJsR)(OFe7XsR^&1> zZ0Kk-mlm5 z`MABq7i*A?;E=b{FRXVfS$SreHJjBLEdH%Cm=(hF&di@vujGlgA37E)YMU!8?AqO` zkCk<6!W(V4;*Oy&-`>=gI5RA~q=H#h)055DRjq5-lyd?m0KZG+n+PcYN1IPz0Wv>} zk5&4VNyXAfx5ee4jBfPAYA)%jx`|A{+5xO!qs^U8?qc9NRW@xedW<|&T9!=s;Xngs7%I;Z$1MJ+{st{_i7VnARBJN#_w z{y?JXn5{;toHqLyOx}8>6?^>xkkWMhr#;pPuWM6RfIFh;HLuE@AVlk8XDTfuW(wBJ z5*#_&>=TnVF1|50F~#GvUwVL=KkhoOO`YNGARW8til`PoXC!dMre(#m#L9bxpI8+y zXO)=Aa;6`HC2P0(R$KV?2^N#_yKd*sDVtSEUSTVS?hJ+)zg4e2f>~Y!8pI2rua6u& zy5>u78{758QlOvG#0vITOwUVX%M|M71|Ik7FxNFxzE&-IcVFr%e-6|Eh=g%WgRMh) zd7vpFh!9TqW5;9-C&GBSe^dx>If5=T@KtIrgMh3aB=66)Q+JO4^n}Zo-sHREp?h~J zfJ%6d`)Tt!9*`p7K7aukpp?82^}F{G6f{tv(H>QPZ==_Ssij4`)1O~TF4=MNV{-;V zI|NFE6XDNaicdhSUk{edMxW&%mp zKy$&f?Ccjp5Co_Xj2!g$EOtbFj32y5Go{}j0n)Np|Io7#a#<1s)pLIJ(NuB|hW5&c zyKTVf68&a=zrICHMbhTiFZ_2C%iKEfPZ~wS+n-pjm=!#E7E49dbQ2bPJv0cX^+^x! zsVDpJeLa;NFlU+ku;l>A2W0OcrNk5TOFv;&!;BNs0{OeQdG809Pq|NkjdHY?!c!PE~?hl zc%;-`$O0LeKy>L2-V%tX324CchPK;WiM@!8SW8XsAr}QW1jkZs zh`-eDOnDq`Jn9FUM8a3uLaOpVf6n6de$u~)W~~sNF1`Pz{dgFxVI738N$Wnr5Hn2X5q*9VJo9QaR6YcG7eSup*R?9 z_d|~@g-26gmOjjnOH$Q~;k-{o*J}$nUrn0aKG90%s|)b{8bzdpZVr2*cJ73y_{*&- zV{M@;*wRz8jN()s#S09(qo1AQsm)e9eW>^`%yXwb%lVPRNt+Ec|4f+OR=BakgzSTy z9osnl!bat5prhpGMGR#nTV zZ&z=+ncQPWK@-`h7;fPmhc5uQ)2ky_C)JKzNZH*VPng5!!P+pi*}sLZOnq-1pes`O zY>vVe=8Avt+|hh)3Y>yC+!hy`>+1KCMF{yC;K^_c0XnS0sx)xQEJLCx;)%2*2q-<{ z5|lsdqb&S3FX^~5@Ve$C+s_nzhp;r;RsYd@5NBpgghqPW;o1FcVzCjoUH|W}6^`=f zZZ%|NMmTpn`U6=NbH5E+T5V9;JI(Bsj+}#lD>e)~i z(M_9tVyPdHEm}bQT96&>NoMAQ6?yh+c8S}j+UPQphTG7sQ45^-+@$5pU2b_gxIEYK z$vcw4zr$lAEk2?G6p!W#Z6;&h=sl&b7O6?<*BaMbu=@sGD8*)Mr{YtgCPvUGj7cd5 zq~wBCj~l$Gu;5f`07E*AAh`NyqZe^Cgp$PD1mw0K*(j^~p)&AB)Q}HV`VNPbe}_X% zp;oe**LSBkt6M$~OR2Zr^gioG=u7tfnCSdtj6=x!cc+|^|6>c6&>T3rY|lfeGxWPG z;<(;ng*3(uxq2eR4*aTNNpE$?O4asq5p#$CN@uSo*A8_%Th+_I0%~IRB*Fi}j#Siu zb3>%ma{q^E;Yfv>ppiSZhABC%@N2_1n6eELL zjLv=#rT_x2_l>;YYC+5ac3A$@ByGK*JxVNFN?;W!+DG5H5RVaw3FF=^)eMEtLX#%H z8u)&muJHBzX_y`wp;zYzoiih;M^XiBm(C95a~&|{>b)u3>t2c;&H80{zg2$EH1uU5 z!{%3#G6@%g?_Ha}oB-UEfd)&sn$FRNFHX0l79RStLD*;uwgEm#FZ?OVBQ|$lnnSnE z)vUZqy0MhlDHXQwa{<|pti(bUc>wfRx~vU6H8(vVr;>85u2YQCP&{^^H)I<;m23^; zhSVkUrppM~Hz22fK(`BrVTAr0ko`Zr&-er25!P-%)a7OAA_R?_kbRIEg5gcb5hLcB z|Ju^!*J9*t_M$NdAl`%+10Yt8kmB8+Z5oy320?34rm+l!s71`@ojp;}gZxyUMe#6j`BbxdZ4G5P zp;MA-Qi7n;88Wgrbt7}ni{u-Xvuxbw!>&A+Nq5tD0Jv!w_8J?bZu0)#}*&qRMQ&xx4SEFeDE_B4r!sMgxt@I&TY zxSG^CvC#;YocCL=Yz)X5zm$8EBLcC}l36?KgZ=Wh?n2N*AAAYSI9mMe1k~-Huc{c5 z&gHu4pmU#Z)a>g2)%fl8tH5jTLggMWWM2cDKzyWnfS-B#7#o$ZU>GZdQp7B1)496H zpu0)NdDMCV{Xaj|phkC=`_tzZ1%xYEe`y6r zB@R4;8X`?i+_nVMOS(Bb_Cp?4peLsmuuRbQTdU}zrwXIDfG||_(NNR%u9Qp|36Q_< zjk=fF7DWL;C#Q8|Z>zWV@zlgZH2~TCI@8-{I{K=tNpMnk>S+p|F%)tG{?bSx>ZhA} zCN|pQQimTP%~P$o53289KEl)5(PQpdi843>38a95C7bvP&RwQMU;F}e2KEL zl)+bE%Wn{xNFl2rHd<%J-X_^JJ;zlms$K8}LjR*F>B2E`v4IsW81%@#|NO4UpLNE| zam*5k{@VTMBt5MvF&w)X3m6CW4`>N9qd23757#{m9L9T0>G+Q?_VMkhvWSe}9ig8u zs1kD`?MoPn;A~NB-P{*J!g9yCAf{$0^)}?~+GH^F1(bRBx`=f4P)3qh+8^euZq;tp z$y-nDis{l7{xIjGDx1XY=`K!qLL^XDQr#I;EB@Q$2;bZqaEN^mii;J~&?9!C#ZA=R zKCN4izy_<|(Kqg}{;U5V3xlf2_e;E`X`kI+buqFCmGZ-O7Lvej3p*}!0lwd#$@5P{g=9}UeG@M9jHuUE$^P{17Xi_z9Z$OPL+YfAo{xjVOH?f$xPs~IaqxFV#=6i6Ep z8t!mt6udc=Ra>wr%AfC|y*~YNo7^4U|HfMkJ=1zi(6|FpKODUwvH-89`?WOZk4A=k z-Hak|>yGVzlQMX81;Uv#kgLE$-yhN{z-8BLOJ4pHL|XotLnj#ktMLC_w@tsq&j z#+UE7as|*k-~Lbr4LU2yA`2pm?B_6Sk+OH^@H7YjS12znApQIl* zNSu&-MX$-iXZWb<}YVWHX0uZ0NL;0#qL+wU#OaP6wF%?Qe z>Jg7e9rysbejmu`*+(;5Y1_37BEpeEjjs=C{M?!>} zy~2p0`~;AiAl3b`6a2{iyZ=Z30%_4ZB&=;UgG*bw8WFI)hNpx{kDIQlyBUi4d-{&` zv~W=^Q%#Y}t@=v$j@17L?Isq!|5~7Mm5h}Ih{*h#YQOys46R5&5ELjbp@85cibK{7 z(N#{#WQFzSalQtUla-KLpm${q{QJx}35Cq%@?`QB40UPIF5$L}m8|VxacT^YFr*Eg z+-U<3oE1Pcm-(D!v`w$26|l1=t7HYv4GImJA&>)YlH2B7u%iRu5a%npRuu$pSyJj_zgA99@I#%oWAY-_~h~B;*KBte* z1;tW%(InZV2vQ!IuTrtQoSpRm{6l2jWO*&d<{rx_q1$Xju~hY`>3Ba%uQA#5GORyY zrPzDws5Y&fW)Qz=RDJ@^JQHA2O43*yDPbC;rgm23uvB$B#hqTH#h~xF@11B6VB^kY z#-mFS+CR<&PkPyPwk@|7z0)a9o1c!^EIICuZqbjJ7-98Efm5xu8_0iSy$+Hxlqux(%#1EvXqkS=TvIT#V()yJ#INd{pzlYrE=_*1PE z6n1h!gU0TW)XzOK%mYQBZoGlu!C`hGw=%af;WBLzY@LF1Z-Q)m2In0pJ^@HMHh%&- zU;x4tjawfwLGiDXx|jSmT>2vXS*6;NbIEuJyl=3i&&3ch_D<*!nvmMLcVQjYb?Q2S zC)xTPU=S33yxm23tIltz1aIL4PZVFsQ_WNAb)0`7g&L3R6Fctm|q80Ua6 z4Jc3GV%N)$OhioOu%6TA!!aXCqB|wT9wd!b^11Da-9Svo#rQL%UWerHnH9`)LI%rf z67{kqaItqKRSAgf9S@9X&jdYS&+c%s{v6}Hm*q%6nlQD^rwb(r$MSWbiwPo7mjn`M zmj}a;HK{nA4Fp*hY9(yUL|$&VHTO*buN;zvEV?o-cM1(Vot(&`1Knn+G4URQSWdXq zM6`h?^Wox=wA9RDX&`1~aQ0dXAlNY(+CTO>6Hv~$$?mLMV>U{-E7`JoAn_pQxeTQf6 zOIrDQ_(l5}FTxB`mLsyDEtCsoayvEG%fq=m&tPJp2Bw~4AFOJ%pS9=q!G`M>hI%(AP>l)&5CQj1fmDT5K+i! zD8n|;&WxN}x!%eJFQc5cE_faLw!a?O!+SiMtMJHMPAAI_*?e#xh9+h$rNfqWhx62d0E}h`qnnEcg<^)Dr>+jJR8xJ`03PtAb7l$AZ1z{|Fhwq9CLaw2yRXvA>yuNhLT-X$5pEG(jJ^jVR)2~ zi;lc#Y~YHUSFRCnHRN4kmlS5Uu;&m7(s}`Gdgi9)i*Y&|74+r40QXggg~)~T`RA5E zCx5R)XuBtkJy3Cu@QWAZ#32_K>lyDU>tXQu!rY&F2Kf|lz6f6Zz%(1H3@lRlt8Kw` zfZ*u`xpJbH-7B5j20RNNn2c>|Jw=$WvfJ`Exh;g@r%%6#8|XN=dAy*y!S7oZpGxTU zf|#mLJ#+fRno^kl$FKT1!B3+$^2^8RD<>fCgaw@jdxEYvWcQYSr6xvWI>Fi-VhLb@ zOanuvJpS2n#;?d_mk9yCvqds##C@Ggr){_Io^S;wTcouD*XKjiAKDcVn&T=T`8`b! zMiY#avo({n@V=}{{fvj^>xd_daiu$1{_&(+5B~9+46~BOd68fPbco4f7Rx3tte``zrqP>v3k07F9#?`#28ZOJWBc!8Y=CTVe!RuJx?Ax=9$3B-`^ZVSd2%eoM~ z2WztgIvS$#OCDx)c1B?s05!ZMu|U`|Tg5%4N?1cfR5ycpY6R7L5Wh{7MZ)j*AZHE{ zRaD$t7u!Xx`v<-TzOm7*XG-6!y@rg=YQj;e+f}yylGjHVz6UYCI7h7Grv9Yoau00F zzZmRWY}0AVdA&RJa>mMPxB~3hyb7@zYIj=)ok{$4%KNO!jA{6DU5Ay^s@x zJ|D=johNj4GVOv~>974hV5(*dW6^{izK~yjAYTDGh6%@gA(~L;ntRFQ1(tCi;g&Dt zG|+KIId8!B3yfl?=87O)>{3uet8}%w`Nc+S_3w2qS(r9zJ3WY-I-fW=x0%{5CThPp znlRFw(;Ygx6?rp5$)f?qlDirR0>lsU^Tpw7zZ=toO)B!v5A7s!IeGW`@ZcnqR%RfPI^n>W^1LMuU z?w8b{ESoB1uxs19S>wG>wb)Bds;V0x(&{{ zk`TuYyr(-+)fF3x@LYjE5x0H91lT-yQ2zchW1(1vguno$=Yzfej5O*lIi=rvjoTL{ z%hA&7a6_u8!4LOiQ;+;7t#H?RF6Mm253I*kf>4=G%zXt96g|;$*uw0?p{{J%Ns@9B zIPmC)belbx=Ac2nqi-m`9U{H{IPU}KMX9SiV0EP6nC(X0l{M8&%NDtBVSUrFPscDU zx2!9UTL5$_ba=_AoiS)W|0XwXnDHP*?;Zt+AI*2oBdNn9;G<^VbjHH1lFbqw{)on7 zKd4;Q&?o?i1aX19_IEu#L6)ci?T}(fXovTc^hHfA`8lq6E)P+QNNP9(nSNI&muME) z*N}a0j&01v@sR_C^%A2~k{t$4q~=Oi^#;QDjzfH>8F8ER?j{p=w20}myXFYZ6KPz( zw)9SyMd&Jt`NWD_EgCLi`Gem+>h)8(H$YAjSi>+;qdeO7J4}-N6R00b{etU+;boC} zo7~+kG<15q%a&3>q*K5`R~5(@B|-*W&o3&Q>`wf!h==IqNf)G{pN2o=J9npWW=T@-tKb1MDkDA z?g>x`Y0y31y~RF{H`!(F(lFN*)aS~cF%FP^p>rZ19+h{4YJk(m{q>MnWGz6}#>iG2o#OIgueN=^woCpG zRXzsZ9iSnu8fK2BaNJ?Z>XG4kZ!-pH-Ke&yC9NO9Xf=bvxLe6&wQXG3gGjcQ;~m1T z{nrbnYTaMCi66xZj&`Y!u@6Rr&sjjP(AK-VhiiaqWKK-Sc=3=|as=mY{a@e8WUV-i z5rp<3`MpfqN_*Z6@8B{5YKqqDTsL3d^m6rDe(1covbtA3nh15hG)h`qnbbDP#aetV zcCu3{t?teknyme>H1%xHai?V6Q*8faPkuPRqSc3w5KpGXW<`}Qde=-@_3KxB`sADd z04Hhh)rn;hylMIka9(P|sZSYS<(RKYZ11Fm<(Qk)QO(;7(}iDthwXMPk2H>~mf=pe zilDmEdCON?u!=c z@$^QHB6U~5aGCM0ZS=bI z!T94D525XA?&(|v5L<)#CP|A;4_x)mNldFQIrlmw5EQE0trfX~&ynfS>UqXn9+CAP z=MC>?9y?VE`Es$RwHK74+){E!JuoJ7Xs@CMoaSr8w={=A8%0IKCT4V*W-WnWZzl3s zO9MBpqaK3JqT&_9?nIUJ?k%*sKNYYY=l?PRNgK0ak2BJsV{yz-? z&(jy3nc2f?XZ+I5jkZ1RP~U!!og0gZT(ILXt~R@%ypzT|-i8fM%M2ESM+YQJjrj5W^WLUBYGt3+xNFDd1t{IB%`F#mqBY!E& z(`~JMky)8wDjiXrCI2P*fHcb{BLf;j#Tg|_7)?8f%?xkUynzv@Oa7=NPa>p=tAPSjA#!iRZ9fdT9;~-Um}fIuR<0U@ zjkOQ|8BHRyv@#5A&$2w3?poy5@&w+;76o8PklZuH~8bC6p-m0VhV)$~s_V%fQjGwU9e`DxMx9r8%<*FAU-loQ-GtgR#=bDpec z%2T|kF5vtDqDn#I~niQ7z+(yOHgvKHLJfGxDp|# z&(S>2%Wf_UJ!zcEj+mO$Eb^ne2GHIFn~#9M5ExYv*o&*ltQ~9Z!Tc7eo?Ocl$0u?< zR@HqL8hlP1E}b(f5nHBqvhCyj?&(LJKRZJh%B<0?H^UhZ#eZLDCqrqP%ylO!$$bMi zSB?x}B2D1_q0q~E0B(A*C8J8lD;t3s=Js3lm2D3nZ4t;CcCQQI1Lw(zBrWgO`|a&U z@ondaaH5hVqw6m!9molRvrwCkbRE|D3@u~8^z6{6^Wfz=6W#iSxmt#ez%;P<@L|Ml zMrCy}!{v5K>n*g4LrnV(apob6W@SH4%N=N6x4& zUcc{>FrInEOrqxp^9X)2?_D(zTnA5CYjw#MoM$RWG8V zq^KDdXtDJF!wsC|GfhL5b& zL(E4xWfVb8|G6 z63LQ|X5ZxW9^yO1wynyNa0MA3%q3fy%JBx}G!z*qABkRtt? z-vkS$ssrAC-xXEt`G0ZY-#yCTHMw$)@#u{m|FN8>R)%gh2vLT}#WYQoU$F{PzW}{` zp?}+tgx?P(zEEUlM5Uekr8H~P^#0pXGwwe{p;tAWp~aW}f?VbzS=#W7vZh~FQ_fVs z42Sq`u6}`q&>+B>gy3PN?;k);wJl5UYHPDywhBhJ9%~b^S{T8em0I}VJRw3dE>s+*p!uq4s$Z`;U{qMojP{oGsWxVRDN$yI3>)L_{KeqG{IkxSD=io>d RQ+Cv~%eKFkTylT%{{YP-5~2VA delta 62909 zcma&Nc|27A`~NSJR_c`~8tSExy)bHQm7;Ad+1HVsF{WaO!6_=0J!>?`G8oI)W-zu& z5web%Va8HPn8C<4F^2E-dVl`={qsAw+srw)+gWbsT+i$Id|ub}xIbTR3omaACs_*u zBGtB+Ja$E=Bzv3%JYUPk1r}H|yh&csJ97Sa<_%5Le}5J)effF$U#RiX(_)$LQU*Uw zZVuBY#|d!SW|J+Fq{F5ac6xCp;1nFr8osbui5v1sR!upozh<*xuXXo=&GUa80Y^|b z#F%m&Bl~?rJkoeWb58hfU(0svBD*JdD}{?EzH6=qxF|hfD-Lp%&^xkO(b4V6h37Ur zj)7F#SVeRfS&Y5s5MJ$nD*UM7QrFoC+@myny*mgvYiWk+#O_v!5ZD2O5 zgDpA>wrar@w<1T;TU$dn9H-wgv4*c5Ek~InwuUQ)@Wdr*q!wtYPsdaqYX6NUd#MBt zb$NVw{v^;sKHyXas@Fd6K97|04QKjotS;eT-5FIA4oRPoK=+8^1ZklZD(t9*;jI?6 znV6gtyVWTxEj*IiM^OsR8+-%)xcF^&WBw#8ko(^9bd0Zss~OEW`-hH|i%9LtttUTf z-YB{i+%W1!rWH8f7Jo|KC_=$S?1PQuh@KZNV1OXbuIMk?H&OU5Asbr=YgAN;0dP68 zqY?gusqXHD9{NUJ9qi29DKNY2e>_$zerAs~{crD2Y@VCboc0WFkv@-$j zjf8r_vql}_nGF^*8Bx-s4)&94C>Mt%BTPcp5EP`e8AohWBdwYoya=3&M~~mA+}5INOv5(2nY_I0WwXv%E z48Lh&cZuZZ?xTs+X_Xu#$P|B~mXd#$Xj*@`7GWHk*FTFA)+nE{%cb~eRB!>EjTBFP z)|Fotm`kZt?fC8kCT$}@@%#IJ3M=|+!CaPXRlXD~%%lOtj!7N;53n9(Q0^qy-?=S3 zk5IIt7~c&O)+Ov5(3TNjDy?MMrGX9qz)@tRBuWn*S=#}E6RGoeit;j-Pn|qpBw}@K z#ta#%(rx^?Xu%)T7nr@d0elWIU=hDV6(7qcjP)ky1F3J~ze%^DUS{N+efHs)vU&@? zd!wbS*3|RjLJ8q}r!(V0wDc~&P8r9TA$o?q7}@SJwxrS*L+wg8`9j|)5D}xh(k5zF z2BAG~f0fGYf2~9-BZ*sCC)v+f9wA`5qnq$@0dCGFyRtxIUf_3hu`$Rx?Cy47 zpH^&)(|vhXs>MtuB~M4fvrY~ZznE#|=Cd&=(pbu+HDDRf4(XH*c4c1FT62>~+OC|r zSQl9aoMbxL4xB}PLX6KrMYN@d%Ooy4pxHIEU$hQ{#X@!$|670=?vhN{OZB#v4{H;A zzkh(oOmn|!xxaPp?LOK@;4X4s$>>P6LxdRZ80Cfw@ZkP#wu5eO$Y@r3YlvqS4Z`D538f(aS ztpB2DGe9i0?j3U$CVh5}O{=txPI!7O?G0TSBkdXL02ZugLTVsbC0aQ8#(TruwC6y6 z@=NQvM{UshvN!rQu0P^>ESos{$X=Rl&Z)RK7V+(`g=W_T6rR-V4~{D>ODs+eNo4>Z+XdYpSVJd6kX^KWu!I+9v$R z$S>C2k^uLLsRC7_v+9S|$@s)zF=?P@rAKqRRxA}7lGDiy^!KQx3pmGWW$*dxjsghx zL#_ugknD+YFK5ooQlMd=A@kHeT`zEXm$AXL@FVf^yCy&OBg1YTc$^;pwCdX+T46h# zv8&j$(0`$F6s4;D<1RN2b*)s6DtmMA3@@LyOg&#`p}Sqz*deGHBNg<^9;mtkdVR0z z6S1rm?!N1=uBc<#05v|YLIk4QGB;+*(|gfe`lV-nHtuPk^q@Q0LiyB%FIg!}jk?DV z@02h8VYzoOn=tCtLB6Xt?Dza|MZfv3=g;Et*rzj3A}ZtEVd#EUOrWbpu_(ZH znXK9*&UyzKzKanEnw-Jn%os;0hxE@Jlg8k;hP+oJc@3wyI+|T8iQbxUEBg@Jxxs@n zx7@R9bzVRxWzj&1oR+R%QyBMGvA&Z672AkMPr4!2PKix5229WK(c?Okp6^T0Pr8!s#du>|(qK8=cRJq>o8054biYgvzg5B|92A#Mqh*s^9wq8qMu+7Tlc>=ZOgw^n6; zESZ$CobGPV?|f^^XLMoxWK^oW3o?0Y&$9j7u}uliVyTnFjyglXK@6;Z?B_OCB!yXi z(^35Keww9CsQ=<_<6~M(VD^`dr1)MTbQqv`bA|!Nm;Z7&UT3ipkf8VYjEKQShU8u` zTC>gL8#FWF#k%2-^A|*V%NNRf?ZM2uyR2Wfn2B9hG;=2(VXcjnEKXs-pM6$~qoCEk zt1EUOy{)nKK}cqAb23b1;d@#Qyes`JtFqVsyO+r$T>~Bvw|J$zrG_gq&d^^S;{y6K zaeYQfVj2z_uN3yG`1*0w$PJf3ugnUTeuJw!X~vXx9MaP$dstWVl}ZNPWjLTUa{BV zZ5zCTd_t)HxX-*H?4_mc17eQV_c1WQ#bmC`Io*UBEgR?JY6LjTXEPgUJd|#AV$>g1 z>l;&+_IV@giEJ5rzm_;l>`Y0(r*JeX!1&~I|5r9Z)?MM7L6HkQ%e4f{Y*V_}@+WG4 zoxtUB;=RMxQF}szOh@ksh05((3*il4iaGX`vH4{=XKTpEfY&r9HRY)V=@A@-MrHfC ziyw5jwB0|LJYax;eGnH0+z}oPQF@UwIR=xCBCm|AMkjG`A8SSa5kG96cLtpH$VG4in<|o@ zz*8La*)N5U5YAjyLDp&;)n2Gg?zJDN32Q3Rg1-vFwBw@biOf6zl-PZiP4X0TPjz0Y zJu+0^q*uS@9&rob>-P`!L-WJ+$@=z+vakZQ`5C=nN2OE5;p=yZ<)3zf#f*Qdo<0H@ zu{Vlzydp3HoVv#DQZ8t&*#;|&`{A{E9#*0b zAYNkPJ{^J>MgRzyNC8;sXiA_QIBZ1bj#6!7pnjbGWe-auWwV8Q#~isKzR&a;23)<4 zSEJ2$!rTfPS$Z0RfBoaK^X|tFdQm1?zFL!A_437#7BtB$8FAmvp z)!`<%suhQYK(fGnipUlJ;KRRZm_whVUSti`zwr8E?o9dpNw8d5mt5i)kq|E*54Egx z@0pMV4u6*EP;ANxrg=lj7D4mheSp%teGu7LfNoBZYeO$T@mN-KbZb(9TLCU&vOBKj03YGr0 zNVb{GnZH9X5;;SWVSU(x&b-da_Po8jBnSNF$!Ep3VdH6v$#enWT#L@hKHzo#co5DX z$Ugs}&w62!>OwWLIo@{9E_)lhasr*_B^xg>Ld%3Bu zuryO9Cdz_4lmP3QYCI@2-Gx;K;g117%Z6^A;Ehq(J-Rx&m`#-N%MDXBIp7y`?RfSp zDzgcqE9q86HZGu-pfQ0Wi4pd2=~1noj3&&_P`PSm-64H3{UDjKFUr|Ua4YaT_q)=} z-1d7K{oBqnCq-p{RBdfeD{sInl=`!%{FJ9-zSi*}_PB&_;JjYV`&h&H7Qom_8ya0* z%H$CT=qp=6s%83VA@lcg51eHwc6!B`gUnmwn&w8z3_snIqiZPzZ`w6iHeLQ~)e=~t z6u&C{v)TO8+@Bu7*!5QbS3e%*F$BY^ldG;voUOIY?POL&vD^SO`)7P3c^_9?L)GD` z+f>$%%Nc_Y<|4ur|4lURRR$tFg2nkKuq6z9{j zc40r!X5Ulg`xWpzX?0>ldq$Sep;!@b?4Mfr!=R*u%U5wJ#+aUJ0r&A$+IihD zKl}RV(g2gf>NSmHmu(N9b!sO=7WfTabUxcFq)H21bVO@Ec0PQ{W4gbj0N(|{;w+hC zs{4J)XLl!MB^WPO0@5J+GM%xQe(Z5-N%gZE1z&>He1}`0j4=->H{qlT%%IRdes^~Z zwJt&|>EcxHzt+M0dKLBUdtU0V1^mvaFso)wjJq@8(c;#FKdyuYvTxv)Q{j6*H0kk+uz z+aO1{P9ZUXwK@Il$yM9QZHJSJwK3#w>@VV*U0StQojqBR{c61y6>rxxqJ~40KFW0b z?y+5{XQF_Kur}zNT`bj6-E<~XIkDz)*-)hjl3B=4Zv9o6%=Hkj_yMVQgh8PP>SL|} zV-c<8XV5`!zTyRc!175{SA}L6VruD!RayU}RKT0-R-Iyj_2;wtvj^DWE+bw(bpM^O zhPIExoBws_Plp9Mn(txE&CujXnfdY)oFG8sSV=$oQJwGFaB^+UnUVZcxsW#PX?K^I zBI8gGIW)JJQ(ITsZUyS7cD3TSd6B7e5zKOby0BNbxbPFoiQ=h8+rO)rntxA^?YWnmE~^K%!*3ty(SO=r+AO}`O7@guh%(ru=5@*E{q*qwO2#v(Mco>Qwu8FwR$=d9nu&3Z2< zRLbp_?_iSRpXS5{GX$+s*#5P1EjXm-2j2rqX~Ha$+{A5}A1C$*AJ^Wmp^o%_wOr#a zR-Ds2RUeC*n@|XU)UPO;TlruC&y5^xaRKAjk@|R+gN`Jb%Zj|6wR;-S!Z~(#7jzBn zrelW+S&7sM)gLq@1zjOmv97!>;F_Gz=}7mj3cN$3j$8uI@{&s?N-%xsq;{;esBB&r zH?GKMdoo&f!G*nDR(gkJs_ytqKki*%o6qq2vr_{&_f0*0kuBo9Z#{U*uxW7k z-l)Ul>rc+=|8y--vTp4!{%{9A=`Oyz%Jn4yupE6+d%dgAFq~eG#~{O*%$!PToVSv4 znTa364PM(y-`B@#?h*Xq?QB1CqyE@You+z8GsFi@{WTpg>}Zw|7pVp~ z=F+@5FjTQ1akBsw3A@2Qx_Tc|84Hon*TO!eR{yD!ExO5G!zc5LOq11{6(Xcz<7b>8 z2INV{5-F?VEV?>KK8B=u)2E3frpQ=K{_-NQ*R-HNJuPPa9XE;OOVf6d3kYctDGI=k z?NNkLT3IAd%Q==dcMP+5FSgng&{*-%;RQz=>>0$jpWfM?u5UB^ZcwbX5EkxvHwf^U z22Is3+)6Y)&XOt#Vnk%+R#uHy$Fv4*85Zu;qHz@%Zf1UPx0$6QC-1)zu8yCz{7T~m zVEUV!y-5|x#iA;x%u>zG3Rgd}$~UU+zrDsaIPxz~9o3SZdbV>X&|3Z2djj1<4I#fU zL%AJmDGu0VnQNeNwULgFpgW;gTy;B0o%cX+1a?p|;TF-m$U=czUE03!3w@AVR@mXd|O58(X}7jrg;U58bfsm^A<~mDua3iZ(N@{ zyf>dj?g76GDyBe52D?t`SqPx_{n^=J= z==r7!k4=Z7No2Hm+~~17*-bQ2G)%9`YnOzfnCi|eEUmZ3ZZ&PDVgbk;Q2Imtl! ztP=|7LYShii^&N%S&76hcTmr$LUP43?_RF-du$o%@uVHH03X!1b&22w|KhfCUg@q+ zcCvuC)a7`>=lxFJnqO97ECpRLonyW=sgI+Is#m$INp~|7af#M_3TckyI)?s>sAX%0 zz#!o^Er4Tw?|vVBCN&tqc&6F9Tw=P&1(ydSC=o9viH%@3VJk-F)v}yFgAgGc=uU$W z$kl@kdvp_youkC&$?HWH!F(TxC0N@5Ea|^~^SH5Ywv(~*$4F4+FmXE{;)zvvRz0-n zY5Cd<^NIOYZNJNKDAJM|YOT$)_6foWOT-ifTyl!l61|0ao~6clH#3nKT;mu~Z914q z+8Dk@j`#zA(`Ow~AK`H&?L(q7W=3`)vTpT59I>8Uh*&ZtQ-9ZgHgil1(*#D}bYGAd z(6}CobFDM}+E=Wnu^nn&{Pwwh>o%&uRD)_(U{%@_iN4_TO_Fl3KvgCk%W=9pt#{Ya zO>S;xnFLYFs@v5eMof?B1CW^Y0p_+7g)2`BD03fH|NCL@6;BBqRB^Qy)TGg`-f)kD zh-yQ>e{hG1>UnC?-yJ~!Qizp-S`!hb3UxS1>I!F|maU*@d$#S1<=?ycTc+Xmxm{JR zh{bY4yMO6^+qPI}(kY1=`owf$dN`fXCK z&R+j}gurF=UIC#4sTG6ZFH#=^p&!WcWyoBbuS)*f5>O{vNaYgFK^`C!|CE)U5CO$k zXj`vc{-{CaoD@!ng|d?U3b)cxAt)N=znP8yNGJ3)t;fP%lPO|nrs~y#;l&F(-{vpF z-}R;O!w#A~8nKP7#@R~xEQN_HeruX}Nf{>%Ykev4{SvaZmD3j%ts~EX?L2k$d~ygL z0GJW=Yntyy`WEWR0sqxK_>*VkX}--gim~bnwqC8bMNjJMAce|`vG_CYvB;oZO>zpY zrjO;V`n5N;ZUQdh+?6ql5>N5w;b1HE#J7KNzk@3!C0pOj{i3}~EOyTRUn(UaV0Tf1 z_lPSC-1tAE{M{Xp*#%E=Ew)WDp8%y~7oYt9xj%5S;q)%4iyUs}KmU7}R{fR^`waj1 zGUNEJlq(Y|{D=K_kweY@o#3CF4O!$Qp5-6B*U%75xfkUDbTsP_f9~PbCM|@zL2IUF zIA?r1D?4q^Hpw`q39L{?UQ4I&Et=tP7vUK7y~zflhKLA+GS+^3-hRDtb!O`qYHHte zr1;`7i`+gPOvnm|_WW!2@1n|Pn}o!*W`nOQ^>YL-JI@==f9*OTA9hQ_YV)pctN(*Z z)?Z_a00}uzta{%nZ(*rcOo4CPJ2GL5yr10^c8U^pqE;mo!dq@$iBFjWXrt8HZ!$vvP9lqm*h>d4jk~2~;ZGhqTMb-0Yvy-HUYfV2}QeeHYfyL+a1@cz{ zTBqnq7D=|#sM?TL<`{3bXss*l4f}OWj(*lx0(SEBbL;2B$M|0*fN7FG@E{G(GwCPEI>E#T z!VM5je6{pUTiCR_&TC3NXIxWXE-HC+=fmjFM;ce1>;YP26e|QGC(= zWq}pjHyM)?VfbHns!KfbK2uT)T8n*b6EnVFM_cl*Gr&K8x+@82gnwV?-;8RLXQNi{ znvcZq`8Dys(Kxw%uj^Oo4DapauOiAFog_IEQ!`j)-C`BiqGcuh?07#2>3it1p{jL# zsp+6@hH60S9!4(2)XetylY89PN})x+E zk+{{(8^OPtfYxT@T`(%4DZsh3%y)C`jS6(d{nH?!q|N%PwKVP8IQTSn?)TT?@E7)q z2n+Isx~c3~@U^XATzt)1Pk~>SNaL@YE~J=2;;`?GNEhp+Y16n>%EJ>K+A8<}oyJz{ zBGUb{Ejv_$SARNT3WuPJr6LwO_$`w8G!MGi)3fdf)FVnrYTF^2dW$`8Am56{G0We?B(PywnbOHN^Kq<~DC|ajjCW`z@L$x!5Lk z-Je~08%D1;cv$Zkd+{xJ>09+mS1dbRVxd8Ca}1kdpn~b>!%mR1P}{?32a$#8)dt=a zF#NkE2`l$@*@3T_DEULnFw@rQiEZK2Q$u}X)0p*$pPy{Iawf~?PVCC(`TBjf6M2q> zt#Uj+PA$z{Y!AOXu?RIh%7~dL>;J>H&05Cp?q`^!g;leDTQ3HdK}bk1S*counb$xNn$p3YpMXcl#SBW$!=xdIP>$e!cMCA@A`TrRmYzGQq9Ri zPjorA)vk3;A7_c`HcY2E6kDw6opcrtfN{5Hi%iB@3|L}D^?DiM24y7RLw0UE@oe9m6LVW|bJ0DP zLh~wHp@90otNRhwHs7wp2o++ifD&KFLX_s(=)Jn@w|3sG7MnVHEYnfb_u`5y8TESN zP1L7zbsTYLpzIec1rh*cImyLVhE}^(zF;D?N=A8&%4_{?j zP5ge&J~}?BhmrBlq*aGynJnZN)ter!yxI8ExqYjDBq9@VUi(Zp*g0v%#a;M^a>-Ht zEPnhPDFk;rH2+})`={+-n{CVU7&qFq9lfIO#PrL^!V)Jpx0xgW`vUll=}#GXFvq*+ z{H1B8AK8>JJ)!=o;?++PX5T_2>;um<+WYw_$q*xkINWzYX)^G;aTMh1zkB z9Z}o|GiB#)*Rmt3i5lvOcgETB=R@aIl*lC7)xX1|&ntd7E{rnAO zxBLmFoU41&rb>z=zLP&mm#eWhET0eB_j{sO^tDeg(|14LH7H76c5pJ z64Vb;eHdZ9?ynp*v*CLMh*?dDe8l#9k(t*MTh19WK)Yd+Xj-)8OcU2UrmMTSW2kR) zC+=6gu+&zB&m=jcavjR{$+d9tvXqLPfk^0xVEoVTe_W<%463N^Ge!;gOh$e)Mp64k zrd!raYv`oNMwYp>W4Jra<=|DW<)w3=DNOQ3>pO*^^(fvrKgBD=5GKE_#;p#9)_E?g z*~S38a7GFi#vCg#(qnys7&6Oiqnove|gqguNdYsDAL&D5OB8mwc zeBd*A%iYB}ExwF>A6_bH5wke*L)xhY$lU6x@fjHJTRUU_bKP^MlJbDhEj=3V`z~+g z)o-{y>Ew+QR;mg1OM|Pg2&%W{gBgT1-&QXKuiACe-XKnO+hR4)6SoKWOwaF~3q1_i zO-*kmexVv+@QCDTqelo!saoP{(-|b)1(PB@)J$YmO-Q@X@c#~Ebu9OH1Ga2@7*shQ zY|60Ir>u<__B98}t0Pxk(=j`d8Xxf~+bHYY(PdYpZh4^7OchMW3dz~p+@95LRcpgk zZCT39<^))58sQm0!?3?wI-So#S?_)ccN80J$wNg_{nsROr@{iOA zIE-UBQpYJFiRY*;8w-GoL}8Q83Bc_^Q7}HP@^g0xrO6xvZ!kmDEK{6yn$dm{roOr1 zUiO?UuNllTjFS%$8Rkd)0`)_<6&Kotos%}36ql#8+ZCrPIG>qO%v6}9l`+X!89`5& zY^6@qvsQSB_@PpWRC;Np2$8KcxzBCQDHOh7KcTJLw5w=H4d9GY8m8(x`;;L&hV2KrK{zWI;%PsqWPv z{}`tjGpcWXjm^gM4G&C|{e&7jSj|&Tl&v>+LU@X81Pbkzi#PaP8oqj>O|(?6SSeVZ zWdbrl%K?089n68Xl@D8#iW1ACeZa@xxm%Ia`etO?`cu#e)7$Y-Z?OJ2rAQ{)9th42Sp&i1Fzt+oDWQpSR<{#Lm!o!)o^MwKYT78k9yQgQ;>tgU z;lPi!($({6e@OoNE{2Ca<(Lr=Q{nNC@TO_#dQvAYCpqG})&&R8VpjRG7P7FeTCc~; z>P5ZW_CWz@NXk;;2_e2DY< zJNg9mZLR7}XRghX3iSv+!K(;nHU&tdPEJo-f?v%%?ALk#?$%Tn8@{9|3IAe0@m%h} zwGSfGDX2w%yOj9t(BBLF4~70o-&T@KD)YN=thB^PTcWVqwAXHf#gh=%kq{W)rsv)k zI!`T3+>)|Dm zb6f40p=kWCwc=PSXX}}WG!i{EKJ_d1N*uCBKPfpUwtcpIRcOaRdagO&!z!6xR0C#2 zNlCY?m)$b>*@Ye`zT={+ZZpG+Ikjp4C1i(~`u%K60N}T$3tjEYDiz|@l=1A2ZEWx@Jklx9WTM6eML4@nZxkj`cL zUWy5&g@~69JhUsjEt_!(N2oq4JM>g|yy z9vEj-bY(zTqt@Y6$;0N}K^99Lkn+WYkc*VxgJ%@ahCV?eEHQ^8J70oACRS_4wM7)t zgST~m86e3UpB0y;&Gr>f_6XWlC+N0dwoR2>xhTZ=by(#9PH*PN-z-0l8$|l*SwTjStB3KHgnGZFX)V_$K z0B&;6RusprAvZ$35Sw9%mwm?wFq<6}*;jpQnfW3S-F6%FJ12~%%QojT z@IyEvc2)}8#t=_I_zX#uCWuqcW^~*J%$7O!yiJ>6(N6ku^H%Mq^-Sv-q`c2oGx3@3DO@z;P!6p@lRu)1wc41(7OA3zNdOLh>W^6CIxp$nF&c+A zjIXrV4)r-C5qi12=9(70mBhlhzSv{F4nd}N&c9202dYP;!F+4z#HBv?=Yn56^yO{Kd8OV+z$P;bkw$p1X^@n$ z*es$Rx9%L=JA5ghWXaDRg00%RE1%ga4cq^9r;=Ca@*eb#28A(iJhTMuA$Ro_WoLMp zW#+1%xb6-*wZD1uLnZ{HG!%frE69)Sr8Yl)-ykjAa^@0eQ~ef^aPiV251sUl4=Eh| zn85w1yknCxlP33%>IF(Y61~m%aN2Gfg+S< z>+Tw;0h@ZxW=uMz#HXJHSUPEpd?iHm1euyu1eF2fhGfL!!ywL6QW+tlGt;?DHvVQKURz-o6mGNOS6{8z?&t0!ZwJJu}rh(NBFEJ|R!KESMXp1if zT`V7lm1loV($MAI=fNAC`@89Tn-m%wKf_JNn+GDERlf04P~nY&CDvMKupgi3>+(J5 z)E1c7jXzg-xXFESy-zLHWLgkM>pd2Fo=K$ZAE7`o{Q;lC9BjHd&D^l;urV+3ZtAOk zvBGqUBmwRTEVPc>HczK_+*DfV88_)43<3Xb*%znz*loMm`?&+l8rb(Z20Q`+H^~RtSd*4`$>OtqzguoBG2-kL$*)EaSVh5r;>4P^1hFanb7hh)s;(4I~Np z_UT{S;;|Qfw?~6Y_p79dTq}EEi4Bgj)rDNS03!1pXREp{T}u$)e!a!WARoGi8ndWZ{J`0yNlwEN%yoj;Sk7cwN!Lfr$mECd9M6KH9b}#%o z+s@J=kaT#xly1+0<#I^8|HX($aq$VF(Wja7R-^Vyw=H9y!^^dA0@g%{YT?8FkUk+3 zL*J?jyBo6vh}c~4Oe)0e@Fq?)jD@Gwl4!Ze-^{=*DOGg&%!ylg6RcC>&{SpkIZYR*SpCh(#=D@jC$ z57o|z6%RQ!5>F`vlwM0l7K@ubLYfQiw^`#4&ULyXPO_uJhqgvqN}z-2we7iW zuMU@6Py2T7pV5_U?Zqr}3B^Ocd&H%ED+fpS?=EwZMV7_|wZ3IaqqdC}xHGu5W<;%~ zPaUJhwRZn35LWVLPmuF?9oHx%j$~GU!j1Vg@-DcDK%cWbt0^!N@oX^zmulfp{jUy} z2`}Fj7y6m1c~WbyT^gj!NdfKAtDXxvKHuUdcL7}9s#;p#<{$J5A~XEtNM%N`=>QsRue>la`QxG?ZqZ}A71Il#1P|Kj#53;zRGrbLk)pb z^9`^kSd>O;Xt!1bQ%mA6O_W-~*{T7$S`mc_o%AsH3V2vgr=mi(ZCaj2)$t{3TVAVI zbqF-63)jAmpb%$Y)F)IEu7^I!A~OD^6nE|S^-t;UqaN+oHN^ddIbWZtnf~xw-78wS zI~%g$JiX~2)H+Q#P)!K#5qzYqM6{GT0h9*!W8IHUqbRJ-ypIAs^ZJg2@JckldZOC@ zsP}TsxNaK37Ev8GXBImCQ_4kq(n>ujj^+o>_AgETv)LDk>2+T~uWvIwt%8v(YQ#F- zw-@5ZIc*)}t^4QZ#`&+p===AKu52LJWxkf&77J(+gNDpZOb7kwnRE`?BEcspEjnsTnY8daFa$t%Myxq=QpKNX~z@E#R{+T#S6o3x$pp<5{Fxa}r z6?XJF>%OTaR8y;e>EWuo->lYjgH^lf17RE-)n!g9Go(D)Y4YQOUCS!t1&+3KKRBT# z+;Y^z@@c0~mAg@R{#~#0xrIybCZ-mzOrC9A^H-~U_Sa!5 zk^B{0K~p^e4-2~IO+F<3hy3LE>sKn3xA#IU-Q+BXAMjV(MQ-)kqiW!7SxR<{8g<|| zoj8Q0AvVwFQiWM2?)FW7Bh%OHBpp5X||J zjTkfM&No;cf_vR+Dfyfu@_u@P3FvN?T7SPn&t#%YSe>^L_<)|TpFVHA+lX6-YIU=$ z@WrSD+*^q#Kk5ljHxR@uBuc&-un<<0otW(v0ou4jkb*u?1u)AW2p>Np=^qf>%(ZAe zgl4jN7($74XYDyJZ&qucFeuxQ?%28fLpQhS+v9}u<+?T`5F73s#p}228s11!#|BewX!oKO9>_)P07yJx;XO+f~#-aekonCWHXRlIJM|FRhQDn+`Dh3 zYguQ0{tL0KTi9UhhzY%Z*$Lx$8uk8D_dPBgC`}P500HYH(|0{-Cb@O*ZjHVbjhe}# zTjpBM%m8|v`~8y>x`Wv;>Ju#Id8a4pY<-~Gp*yB1DzTTP@fThdMMbSK4+p^Y^>y1S z=A9MVXnUTaTIVm~hAIF06>HHyPqO(^#m{Yc?XjQJ$Z>7XHNK)j&}U#FfyX?0rL{-X zYc_%Wn6Pyd<1j}@e2kqNBCbO6ZRfJ0KdY>2S(OBKa4cM<_{IirUjfm|o>L`CKSA50YUCfJ{06a8ydU8UFb2h(OH+7EzDt~ ztSzWI&pY6aBWC!4a^7KOcfyJ43pUP8jezFW5wqCto3)pp=5Byn)}PB6tSn+yk@2^P z7Nhq_WfPMPb8Par_}sSbV7^4CQWInptTunM|GQnzXBp#~^?z;DNI*6(gi3rmeUG~; z6lrbGm2T>+yHJisrsxk0H;GZA=dZMEBeYwdBg5v5Y;)`Nm(>SZquXy!XsME(w zqOzL3TWVS+l6IfdqP;lCNUsNUy;DW3D^>jz+~m62-3QkFfo=WL2-{0r^Zh>#U)nj^Bh{Shh;G z4C!J7YNbm(v2i3a$N$<7o?6LWPig2nJok;dCu@cu)K)FyA0FgGos4TKs~Oc{d42Qu zPz@ABG?PlvvoQ#rv1e?sXfe12|Lk9mj=A3AjDHQ|t?6s`{F*Q|@JE!Iy)4f(EvrUR zMlkE7?KlfL&P@X^BC~#G47Y@ol3o6EQfwID`CtX?T%$$(TOJ8QqwQ&1P-f7=8}?9p zdr16X58*Teuueu#n~l38%Es~N9BQKkvn5N0=P;&zFW_r&t2o~nabUssK2OzEk9)@C za_zmZ^;hqv;r*2crMX@bnPxR}CxN`m1V!jZ$*8K<>wSN%CmV5&zdJ5L71$$?Xnfd5 z>oNv4t`VlCWQ6*D`LnM8{#n{lceVIo%Agis%Vew$oW#c;A!D;D+5dO_w@s9hpaAVsMQx+!_%(0+x$7%o z-LS71KCbbX)(Cf@2{D;ID?J>(u+xQi*|_+h(992ENPNtsVbQt4<>Hhv9b_2T6_0(} z`bhi3+RR5Cd;N>r5oa&mUma^M7qPLO36vUqJ1M~@N6H=lxAv3&qRf8<4t^u)pnm0Z zKddbbuTFc+NGrVFh$BJhim?Aag)jKK9!mKh5Md}RU2&%(6d+UNFN)R zz4+vrD@(2?CBjTU$u)9h?GMg_=3e%iw60ezKl*zG{koB=6>%V$9?4VjXvay;nlMO9 zb1v4L@<7Cbe$QAWa{^AE`MXa2C%--cdC0-F`vbnpPa3Mv>X3rH+L??nm$sZmkzIUl zn~yA2p=GMSl?Zu+kNy~IV;hEnFFjm_bGUp4qwD)jWcnSBDbLr81cnx3G-*+JtQ}7>^F|>Ih;(`2!Ey6=L-!QervzfBP zmGWI;H=R>_Pr3T-?Y&E0b>;_>G-7@*^Z(0jh-(a?-1$};U;E)8ZPRkukWPJO#^J9r z!f<&il`XOnzbd?Cf)FEr0S$Z79}_-S0i0`^HQ7$y zkLG6>Z$=Zc=Wg4M!$v_~zg8bBg5*zCrJ!3TppT zl>AMJqK%LcsgsfSU4kAf=e6DIMRX~W&oi4HXXPZGG#+ju+UpjbGAfT~c*p$mSkP$a$%QwGxn9m?VPFOST`12~4 z9Jo9?p!?*>vs1wcOGms&q{}ucZ1L?JXs&6lNUVU-C__K`H6QUgyb!H2Uf|M`l7~A1 zcro#lLG>Um|JAnGZY$?rRF0^n)8F$hD}BPwmEY(@6n7-Jm_W=JJuXNDPL$vOrj z%S>h%|Kr|ozyEnWcsz3E(V4S+KIij(ypA)PdM}v~pEWUEc+!qDlVu;9 zNC^2JhBk4E+;p?c6Rer@6(Mq!IZRsi`IJZ&5U#aJ3EESJ@dW-)T7tw`&Iv1apAgPxADS%c4~ zGw{0oX2Ir?JN@mQBIMZFhZ4x%G#y`479LbI7CVrmp_1r!&^0uj>Cdc74ff`2sj?e> zg!&>Vx)0X7R1YIMl`Uh{L^&XS;1$6IRZ_Svuf>RI?-9v#&jI8%EvR={pIB)`NAu)5 zO2zhepv27tv=_OcN6jeYE3lTF)Zmx1Jr6J9FjU$HtRiYFaJGJz#r=Ja7bNlQdg~fGGmL5-no3)Us>K{H&XT-UFQlp@^Uxc@0kEV z79B1L&E00HqtYu~<*?&c@clc`Y+_sBY%TR&D$xyS{niw4mM&4cVCz`4(+P_W#8Z{( zjv)iy1t0Dhz$lE?u-oo~?#IAEn?T1Gq*JwBACVm?@g*iyK9Zcb*3bSlUCwqeVQ-MVn|oK1yKww3Css;) zVmA$z+g{N>-s58_M>;@Hod=y#1e$BU0- zrEzqhc5wtV_NKg+P0%VL{90bcrX5%Z?Fkf-JBT0h*-}#?HzF=mm_sI%2{0TGA->J+ z-`_aUql&QC+OVhFzFxdENCRD(^dKLYE-SZ8X_TeSxMuH^wmEB=)z3)!s=WB!G`0rX zvIcd(viN93IV3gxrg=MR+En^`<_3S`0P0BX>Z6*Kd_arwq1%zSBisB4uz0{!dic@2 zY+z*%P+*a#JoGp_p0AnFxKWQhaI~}7d&u+{`(0M>_RTiJW|xCu?Bewi{XBT-i5nTb zk)p%YoF*Nx23T8s9pjsvU_F07FRA#jk8U)_m8h89M!W{X&VlFJ85 zBIGh$$OY@?ze}Sev2GLxAIVbbNYW zCK*aA`##nj2FlDNY{DKAo4o8OfwdVWEnu#DhNJF5E}ia|`Bn<9YUzha7%xp*_FcEK zfG?e9a9W*8OkDhWT{Dy7T0qXcK8T-w5f)17_R)NwQX)~cM$2v5`i|Yu-d&1L=95@d zvGF@|xJ*lp5bSuLYWt4IZ8yC!*o<;4!hjiw4L%5v1smgyoYG!k-ts;8EJ(Q`>r@k2 z4+sb~&R6a%JX)-Au^|1$|7?p|9mc!tyY^ul_WV}wFujr49r`WrbtCVM1cxm;Z#819 zQ>37k`wO(4!IMSY%Ark`@GupE;(sm24jkoib`AOAL=M#E6RNHCO1D6p&!Ze=#Y14? zWOHCd%xdEO(ji73-qR`Q$dEQZoZyobAyN%plHj>TdjkL^&}^3NW@FRvQ(YexFW$BWc-zR;Ggkef_O&2cOAOZiOn<)GTidRtJ(;w2P-tT z;)B*z>qZfnJn~M1TPyWf=p2f&?ZA^S1w>SMusl<WM$hzLjtR3@qAOTC1iGBaQ*%ac2D*%dh}swVNgsugI|ovnoG4qH19@>!WQ{J|%FTWL zxwXSUP+d8`G10t6M`HL-wIZ%~JOLX?Oc*Fswn#rtyUH}wCzQ}YQEf4?qQ>ZGaH0N4 z#kjf)9JyFKfx!_I57%m%z(br)+lQRM1Zy(`J&%4BX!@lukB?(8PslaK+FtGl1d@Y$ z^LC0kR2;GttY%ud(MC(6XpV4(;-Bc}lsVW7A1)UuqNd+B^fw9JX+$Na)=B~W4bOxf zkb&9^@c3y(yZtvFJAAY2P2Wx2|39y)XLT@a?L>jeT0qpoRKPo=l8ach$UwM zD{d;nkBCLa76n+urx&sm~(JXN&!8?c=z-mqal+^VJ}HK4l3r7PKSCL6fRNhvZ`XA zrUvfsMxcY)n)@c3*k;LtCF@o^ku7^t(n&S2g7r#ac2TC503c`$dxhir3Jt@W+%!>G zzF{JKiuJeXx7uaz%q7Xo?C}?PHBnTd5;Hvrx!?OO|BTz?w4cC2m|8>{6o0SXRs2Yz zqaGzQir|r}Z#W=iH#FGq78Gc3^b77I4Wa!P+L#B?XQ4(dEbS`%5XSk*uHqtm*L^4C z<52e{g5GVwoHGe4u4yQ#Z|?VAJUY1Wq)C>T#MrA5f`?tZuuM8#CUt2n6{?z?x&N)_ z-$F8PlBZoe{sD5DURA~(zlRu+XgOGNMAmmPxh;3$a!p$t>wO0bz3A;Qn%!iPRYMuM zd~de#>_Fj6#8=6!K{f~3zdjayYf3ft96D28ufVvm<6~@K_~MgS!%n)*oTS&+Le2*{ z9{FeUAGSGm4O)%bAA0M)`T?*=WB=uAL&96jNhFb4v&GZEVRDH}#ac%fuO@Rl{0?-} z*T~GiE)C{g!@4lhuynj`9D~2hWVV87vf1n2nE6EI zsLW&@+qKbWr0t6OY&E;tY{jrCR;lz`TKL|QCNCZ&X!IDkJ<(13r{cUB5SMVeT4|TC^_Ljb=?wgUz6^gwc-HF)(!@pJ z!ncEeMR*bt38N=|*_^h{GY@CoMa35~`Jm-VS&{BTU)6%^<5Mw&(QXQT>sM+RWaw39 zv@Ya|Itj#p7P7Y}%@ zt=WhhgaFmOTN!>V2mSJqgb9#*Q<@8X#M&0BLsjg@cx=FuJ++c~Py$8$ur&BzmgUzn zvTZ~a4Pqp5em6Vb<1n6^;!i`C3D+f^v2K-6Q*~0;qW$~b&_~5SlY_-e+dz=lrpj(t ztyyWWXtK(8UiGr@&S(i%@3>O(Du0AeFUTLj7 z`;>XTG?=5juNvJ>OM-0EfSKCQq_D==P9#%UuQK55DTtWa&brlT9x~tb9|u>9u|R^?{W1qgO(DR(0CP6qgcrM<=VA;?3H41ci@Ar}LM8C~ZvXP2A73Ei^f-ZLz!m zXmFt9>YmZB@0D!!#X!aZx;;Hlj{OPkNqPB8-&G}|#HPKb*C4NCJ>1ScDJia}T4`0( zs4z=z=&~{e_@k<)pvg6u_PjuM-f{QZ)V!}mb_@lq*2gu-Ry3CcS{Mu0D2;vHl8+Gg z2t{3A+83>FVWSaRzVK*c^=VlV3wP^krouhszYjP=XQW?CP@Z4J+s}-y(M7B)# zsRp_+7DT7yx)ldOzs^GA-FuS(m&SsG?b)S%)wi4SPkc|q5fUU=T=^5K18`l&m z34EahTsBFJwX0h9drNyWyzp_MR{3ybG3w8+2p3#m$U+?|ZT5;(bTz^@mW;7oy|LK{ z-c%{vaF5&Le7nT+jne*xkBP$s%sMG^L^K%(`}2Bnn1I^Eio@JJFTjPLVLfU1xWN1V zJ>T>kwn#>RO&^t4M3tZTcc#fArazayKQ#MWxwPnPndi$dYd2KJWKI_bNDFgibp-?~ zjJk*1kK>_Is~-lT8PZo@aD8_N$= z>yyq~vWE{YiIhGiA&t5DZw3;pGSsqDh zAHCcsdGcHOTwk%)O~bZeC<<@1j_$l@nPD5;q%we&y+zD8ORjud4v+tJUfGJqJJ&F2 zl;{}v+ET>($>36P+2Uibu&5guSk|6e@v)b4p@#M;+#f}@1OkhP+c0F!Wc=d0`2J`a zm(wL3K$`#uqxOkL?P1l2j(n-BnQVom-}qusU|V6HH!)wOBe(1}nDLd=hGpKdSP4l{ zeSiKYo93VYGsUsd4CH=)MjrQZT8)1gVP$p-M>x zY^mp)4*L6?A^#*ao)t?$#Ehkwr15C-b1BIK_OI$Xw=7ca)QdKBq%@Uiub~#9Ak9&Q z>Dp>Pyep>h{Fmf*d&KCZ~@_&y8pJ&}mAXetg+>f_6qW9UZ{chv$|;3%DyeTq*4}-t8MXh$2LJ>JzgwFMA^`vz~hJR zJ!!UXw5YGQ5zxH3dk3z+hW2hdC&wiz%9+@m=%y>&!FH{6Ljxu>FYa=;5K7>WQFn$n z4IL`(Ep{!iijBau(&jF_lGeAW=?{+>tKDBNWcgHLd!!!Qtd^nc}jemMgXn0whH4Y~4c^UYh-iH00iNgu>= zQ9;+5@A}NuyRqdKd-ArCS?Os%YrNp|RU+N~y27PIBF55T@D3bla9zHa7d2nFU@u&I z40A63yBoPQeBj_e>6rw8QlKX7XF3ZCVSOHGg<{e!CpYMN>%K}_^Dq$H{qaI-5>YNI zm!?;yT^1(bW+os)S^ow5apV)>qaw^HdESjCsgc9hq!f)l$B)FA2yz-xb%G< z4z;l4j9A`)2W}ru0iSl}vP)|YhnVFFB(ftB9RHP}Uom%etVd~~g}aL+KJYG{23K>! zAAQ{K-4ZYM@hYu}S(ue32=ZJbWh<3lBlBs>eSyAShk7SJ(4`O>D(8tzX*ciut7Rt! zqVo}+op#Lpox-qyi9yRquLDu(j4t*Mrvk0IAcC!qUtkcB6tk0=>Pt#7@bM(Ow7(R4 zIyP`Hy%3v`d3m3DTzGLcN-J1hp|Oco0ctjizB|WGiBfWVdW!f5#w^7LRMXX!^SdLc zT74mnn{Q`PK16qcm!G-iE!)?JWD`yzeMO(X4L;>U&NucHJA2Z|tY_mD$ON&hw{(B6 zs6kRb>^uiR9Fra({=qa$z$BJU;8d_c+%gmpTfU+Gl2+D5Yl6iR;w`cFmWv8U%j|TA zsc33k?YQsB1D2x#H0%Wt?~=#wQEw5r^>S?jh>_UZej8;pGwaD@JqpBxgY}Wm1TK4| zS-gN?YtW_pPSwFRrVWAdx!NnCM#QVNe?&&z1`v+>8k@8P$mQpfi0_EyZk{W?jkNJA zRGsqT+XznG)*G|Y+V0Mwc)StgLX5$H2;_Z2BX30tmTTdH#D;963DJXcCs>Y**dmr% zi^07`y&bA|HY2X>T2iXszO~pt88UA*9(GoJts%@Q*(}z=a7gFryqm*l660rV>8I%h zKEb*v8U8c;u`~G8K?IOt)mX@ zb3Q}?(@kTk%OfVkQF*wL(!r}HZ)msXvZa=Ta6e0E3Sf>JQ~@us93JOj2m|JZ9fpmP zh}PG&8OIK>Oru;u1-IUHz-&1(_8Y+INqdREwOf8fgZ3-H3{$XcnYQy*a^(gmSSL6m zom2=a_c!qLkb4MbGv%}~X%r0~6=Bq7sHLUdo+w%_F*76&JtUcNFuQvd@P`Afk`ed2 z35jL535cQq{;Y+%w;r8h%@ewc1vkXe>ZBYmTtk!r7NlOIMX7o524sNv^0LI%2g8gj zo$>_}i!Y$H8+2>;Hv=$)>5{d>{Bq^Gwm6K_#;tz0+TYN{wpYEpA+JbhVSQ21;?HLY zM>-Mfvv?r~$2Gu(+e574r__syx@cefM zi^J59!y!vWUA`*GisD5B{-7AO@8v4#!EzEK6-Bjy!>_?iRG)e}hUJ#%x)SdU+n5C| z-yvn1#K=^JuNtmBTP}((C>}5Mfdf0e5*7D%b zc9JC`G8PUC9;&sgt8pYR8Z1%5U{eiCbvu#dQZ31R_%LI0I<tv4K2FutmJe~LfEd4)H4KHj3>5WWlP94uhqh& zjeakvxeMJk%BrxSJs%MBF+@`%RS#|3gp~rk0p380bSJF#3Kqj6kER4DTDl21VKy^r zJan&Zl?Iq>VZlQDj@o=^KI3|b7^WR=)SjvBT=gxvXys`e?>-$;^Z1U!XB)%4p@Dg5 z^*YClHx{aPZz$)Yg$uk1%oa^SS2)uRu@ropaSwLmX&{@HRc{LMg|s^EoW}r;<|jhA z9WoB_c|6H;9C}!uJ;Ry20U)Ym78amOgGV%WzH^qtG?XU;{gxK92j^AS&S+)&v3@Mo zTWxyVk%v!g+e)E3WSnPH37dC$zo%rzchVi)jVNz}K?~mzxZzfE9ixO(SX(rtf1IF} zT(qV__`@{GH*~ju%e)Q)ks3D6+EriH z+QPFJbH^ovzT3EC5Gfr>gW+Y$-5(d52~Fl9BbU?R>uisVU{4v@SIy^xJlr3Dr`vOW zh2(E|J~1BLTwNNw%R4+cE^|TC_k8hqQhHF`pwAX~S?$sCCy(ZZQveRh$t&4#oP$vO z(xb9-o;J3k?IdXby4J0{XJ_iRYB!Y0ltk$?XH7hKMlB6{jd()DR0YW;)Jo&Qgx$(S zC1Ymm+jC{pNIN~$5-BG@CPlz)xkxwQpVtm5n;^_g?r;iSw6@$8HVr=L2r%Tispf50 zE3TbAxlXnu2Mq%li$G)9M=DF0O|oi**RoyxLhEBaLf(*PwHtd&whK<@Sw9)NoHtx*pmD)90)2kBTeIVWn+Yxfp*c$afi`=O z%DbeIVaCH#WDynUt&b&3+&-X z9ek$wjj&2`HdOrr8$Hui1NsDrqmlEbQ2zmRp8mzlI{Z8Gpiff$fc&q zxPPlyiAzsI(vuDJgU>%c9yV#o?kPN&gOVFC|?k2+B`h&@TpRTCjxd7TTQq{{EA{hJk^vOfSf_jYp~{P#DP)Z;|samoLISolSriyhBCJ0H1gy(g>uw@s2< z4kVh4OMsvGQ}|wgLf!7q*nh1M|Lv}ryvSYc5*@HFaW#4d{2>67qU8UXfR3wH?-@$c zd&_S9Hu#VtBD^~ecUva#E=h6bnFaC?$vp6DCQkxd}?-}m>D%ZHZ@9+sLIpJzqYhHFor8DJZ&@0C!EeI z;nrjypjgAOiBGF96<$z`|q zqZ=ihh7*07o!H2mZX4hl>>O_q?)DzyXdx^~7i3rsiO1lVt#@jsDWHMz{alrD*!lYBu zsUXG1qRRhX8CwIwC$uy$(TNc$*J$()_gn)}eU@}ntPlui5Bzwuk=x~F40qa1c8%Cy5yOzwHm-_j4^n)*oxX=I z-Mf<}C9R`$yAg6w=!_8m$Wt;DT+;86fE=)aWuUdD8L{Ip5t)}GN8I`VF1Wpzbt&zX^dC}MmW`MGGnzN~c_a3VET@P;jWv+2Kh*9)ot5&(pEzZn(S-)~Ym?|r>h z7V=WT?|xN(d=^%ZGNN+QzMxF?jdDHmM-+f+@bFxJH(mV!<{>^8E!E6SpKNf@Z&sphsmI2 zlazw?EyTox(7`%qTyZ4G1l=^F_5tj`vC=#~M-A};v4JbxpmuQv+8tscdJ#40YhCoE z*Thw-MNPbhAB02&BW^tQZ`M^fkrykzy-muRL;v3tRiC+I#(n66K_M=g2k|meRaDgg zd_1*W_vtnlX8G~CndHjCKva2oOUj6 z$zE#};II^w1hrHR2bf+n#i(YODrtSPecnM&^}FV5@6ZQd9tnri2$`0&xbPiCmV_p! z8?r^=nYB^S^EFeHf8?1&zeXhl30k9Xy5%;FVK^%|{3tH8Fw%G;)k^mZWV;9#sP6`0 zkh4{fh;CZ|ed_9nn&JIM{igzCc3v+o%$WEr7k-%~O6_cc(u~Ssjo&jJaX&Zc#)k;1 zbwBJ+(1rHN_?1N^=w!7Q>aUR9dk$JcD1tNR$&QYGMtR4DDh52-n@qbbMg+Srx=i-3 zOcXYgBb( zPNLN{>X9OdQeH`y+7Hb#Grn;75tx)i@)6Ku=jtTv<6CORYgLov8zLZNp2NzoO%@VN zh`Vm7edn@d@1K?MLD&Q}c}BHM!%vTtl=PbR0Fqe&BUN(zy8M~^6rsvG2mSU7E$bPBZ$ zUk}jr@DdPATHgIp_oYngQ=0NgHG>ld zg$hA5t|Dr6%N&>>3^dduA9Ufb@!UX0hrkc$RcFJtfP+-^qM=OmSj~7wN$2_O2A56v z3f_!ATop-R49DzG;~^QWGdMe%!P~Zt*yp=kPfN#ozw(|HIi42yQr&si7Q z9ltr*F8K#^fgzYb;PJV+tEXPCf*?nL!Ea}sDuw==PkNHNV*#v zU#;>k0z37Mf>{V37+QuZ8tq3-w5g5;&LMg=w6pgRQYV_Lo{=#=Is$DJHS!$PWy6XkcK^2H zwQhBTyh%7zAyH-`g;7JH=yREt}282ZDH8P6)eD{v1uVw@4YRlE7Nks>%X zO8Pc`;`e3kO90<@N&6)~BKFlaalJD*xL70y>8@$cb@n>>nU5KKK4~^4n#6a=E8p|F zz5}FhgXt#+hmZub$yjjAPd*gl)ADMb!9`?lli+kviJX}mJ)+?i`oPhM27BCI1Vox_ z(D^0-^*;*b?vyHja*j(1l02%4_H&q+tEYs@Y(Km z#>vqIxRDZqvqhf=%C@1GHVe97kjLw5d&}{EH}GNL&eKbc)&-&U`$WR4opTEZEZ!{b zIl<-q4RpSGpd2BWnfZ@z7*V`iizHVVnQWUWk1q}h6r%VS*_#PQ7GX2@HS^qElLT%u z?GjDMq5#;sEskJAcy0rcKzUmR8d$*^H79-z%_2Lmhj_UaO)v{)OZ4Wz+GurpVbplo zFMg3H7NX0K6tc2_CA^x%i_&e2$Qj6@+irig4;y@gWFf6M925>IF+!@}bLT4dm4-TR z5(k<>D4##_j;=?yL`LF3KUiiBH8>-dmAF7Y0yJ~@t#*H(W4&V~&jn#Y$QwcHyQgU& zYEOW}Xcn^w!Oj(1z>!YzLZT^ZQ)~WlCcUxvo z?FOa~@^VwvZsNHI`7YRIdSDkp@>n1qmL;GaHU#-4SkIvPLNm8iSwxwGNC5E&VZZxx ztc^lE-wlehDXKZWCWtlcLcLl+{o)4(Jz>1o-!jwbCm}>wLugA<2O%KyD+KP@!(WBz zh;HHIqO}tafX&L9MYm2Nc|%$$a$5*@>AohJ9m(G(MMPfH9p|)59(Ue1AY*BVw|ZQl zZy3)aoB0{RW`UmBdD8vCqfW@3*d&PpH`c%~ZZh9v1{uc(&s%!-Wvv0F3e zPC**~`y(=6MO(Q14tqNQbz;f4E&$bO;Oq16|Jz+01qN(~J`mO@^(@BNrceK^t%75N zGkfg7f45m55TkkJ=bQ=+3NuhLVgP>XdzB2);gONeX*@v3|4j>>$H3B)zb=ENAAf>m zE`M-s82v%WI#Tvm*vx0*UJUu~CL>(;Km6C!D`VYgWyhqcV7PIruldnFE^u0A#y@$%g2HK|+B!YCc(r{b>=xw&S=-2(Dtjk- zX8#21LT<0vV=k54%Bw8u2_Iy#UV*9QvPfVKP^?$JJITy(pP-9bl=B`*GAs>i%RV-g zX8V5;XAL-;{yq*^-E^=p>MKIutYv)|GEg3m+wn*MM0NIN=>9iP$UT<*eD>f1v z4sDG)nOU;gFgTbx=vu1t^ykZ;l`AYvd$0ZNxtE}cX7JL)mK%V1lhD2R=|ay7>}IPj zk@is}Mszmx_k3t=4X&>9J^3cIP0DV7Wj3|*2qQ|^>c|$Z#4nEU=QtSrFU*4-2&y|_ zsb0IjI_u6Xa_)>3I^6z}Tg7-0^<_7>6zHcE5%#O6L4(_S=~Nz9qaZD(4M@|5qfv9y zb_bx_;96A@>|`{N9=sjN0_}sEqso{2tMSmSH^KI~s$1-r$rkU8#b3o!Q#~V}J@$Z4 z?*T!2W#W`{9|BBY-v?S2tx~6~+ zwVl7;;w=reS`)XRwPe7^@e#XvrUl@gx94KzQD}|rzGSsdrLJmgQlR6~R<~#!r_xl% z9nq-OXImRDhR3DlYMC`G>_j>Y3y#ZG>+f%c1{DCTf!CUj5d2v*NZ{8_Z~E2a9a8+- z*l0Ivqq^OnnN#)QW|xM2z@8Sgw?#q0%XxpR)e7=;@6D+%20;Uua;I^J1ocDb;MM_l zdof-b53IaiFM)&XmG!GtJFH0cFjB;4g zD+u6B4n!BM$x%Oyi=2(V#uo$!$&f5oa|ak>`NuqDmBnlGJ4Vn4tR4i2{u--i9Z5B$ zXKZ(h$6$b*>Ci1OKo`ge!3XBMjz8S`q_OXVTBvq1XueuVPn_7awd_{hJ2HbAGUfRiGo*axjt}1`Gn=(su;Q9; z!@jeSkPT2B(k&I-Mo^(y5NV+?b5db+Hi&fNJN;DZw9xCj7i{UeV1%5ApB4dz#3$xD zUaU>Jbv*1iBJ!H9Bp;V+?svDnnYk*Wh))(K?-C4Cf|+QpG;Uwv=O2RxcYAzj>#7us zqH@MyG5q%73$wLO0_P<+osy@!J+)26wPqxYzX=#G?sPJ(-&lc6n}LfWdK(EgfZ1sc zrAgHC;>gBjQ=3_Ffdqt1V*g6#;Crq&3Q%~n+s46emb z_?yj6`U-It2q%{f^A4#Ap&%RKu{RAA+CTckK133kSZ-KnWAcexiTbiFh05RL|aP%f#sA z$gpYOuEqa*BgTM@Fmozp?Ok;(3Z=?j*Q7^7KVFm4IRAcz_t{?d&+l_Syjtd0$+7x0 z^@i?Aw9Ia2bO;o*?f0IK0IK^_V*n66V|E`l1Gh`EdS_)RC#|s=_+~;eN_V|k%(R4B zAe0YN{uH1%D)`+}@h_yL1vgdLV>6~HF@smQhJ%jYjdy7?>KUh5{h&cA@NZSgzc*{B zRj}`5+D|(X=7HjHP)SR#q4oqi-4%`+PWl`fWiW^_cG?cR`+zkt;SeR0Z(7XP2@j>} zHqyE=twt}>c{*+-6sg4dc^~i_#ny!gX7?IYjgu(tdjbx;q2a_fQMLI?XpAdgMf0y7 z_YR!2q~C72W;3vP!TR#Y@YxBziK0-euLf_t#GTU_wzOTj)e`0YgD%O*rf*EMY@VC( z(VEI`nmKi?Crr#olI~(6>z0|T0RkdE?%|_L?#oke{m#3iZj|fogo`%+e)z2G!D-S% zuvkvCfLJKEuXbU6!1;diF|dhN?Sp+E-F%X~(}8`Hu-Uzik!CjXdg$zF&@GMCFI|g* ztEs0|D?}mRj^>Q2x#81^t<~q+h4Zp=44m9IH^S<^qT@mdw$&WlCR;O0w1blB?Alvl zvIqoLTV5d%dFhb?-X}R3HDOu5i3O!W%x&X9qCduTj5j{=-Ty`gS04{Jxd1nc2KC&k z6vZCf2%a385E@eD`#ky$_qR{y=(if2=$GKXD9;SIZ`qk0r=1kMzE*^bt2FH>>eUci zrjeU`#>D6Gc+R|P1p}0H+J$#zJlmf7R!tVI;e3u-nQh4RTEwS?vaQgkZq1z#>qtWt zY)2@|80{-J#mNu&Z(&qIDL~<2%W=0sJ@!_A0$f5>1-4A|e@YsLda=`O>V!i*QRENQY+;f|&FbG=;kpMir zh&3qko&Ee??C}SU+7(c-o#MvxakI_Vj@+aUeQW(2)8i@DdIqpdRR{ID>;@Df{rv7u zEgbnRdTA7k4;$1X3J$}|jmCJy-ePm-Sk)ndljaqsW(Scga;KMgC5xbsCpzBM#?HrJ zBu-bvN+n6d$y;Cl5cy?s^idafJivDmJsLWOprJZFI^+5>{R9FR@NkpI0>9@a+%c}N z*Q-tguM9|E2#Z3Hqe7oI45<J=iJ3m z5c8%{gDzx;f$(9hcs#l8ij+*p6DmZ2SpH6*_3)XP-43 zxya+dTe&Wfg$=KEJs}UM47Zhym71;IY0t(=7>9W8bBBnuP5K=ZyVf|{`eJ2aMb0co zqX3)jT7j*&*AhVmJBjVCbnuQf_{_rCcg8iupQ6h$0)0Km4p_il&Ss6bIn_^6_DnEn*(hIFdym@i#o<~|84%G{*Dk&j%l%f) zcevmBsH52lc`o~4ZTs1b==l`GQdmH(B8od3tgoh^_(hExJ(;mL%!KpfGH9LhaYuEu zTPjBwLVXq$MD9;syh%P_p`J8A0@goNj6Wj}ZY>r9I-MK6|GPp_LBA8bQpWnOVhu$t zPQ(33jz_=3D#6&V_AvOs9*b2x`G~ssv9Q~~vhFQ!%1RS_bb?IEs;nwA?Y9D}c?dQ61HSMc?-V?RMs=x0cd@t+S^2Q_73$+7A5~)6=@ZY;gK_D1` zYi=l0ns7#5`s6RsUS8pdbdhsjH)6e4^SJ_uAz(qpK;uik-i^7m%O@^|L{7BNvl;7l0(4sl<} zXfI{7K@U75kh;bO+e_GWF~RP$LHl~ax*V+r$FgR?-DYihnEuXe&N&;DgJs9S75N*?;s5T<`zw1>l>LXT__wa> zpE-H%6canaF<_IT^p4hH*Q>P<-=M?=4l&74#?FB+=I*MwtDrD)o9ofOJ{bT4a4~UR z#SGe8i67YGA(N2*{!hI|@a@CJb?6J&{^Tq@n+Y1qM~(LvM0>LC!R|lTm&t zx>HBGve#Oa=3NbxW7};%_r_w$cKtTID)dXQI=c!*dvu%}fo<1vvx&u%XOu_^iG^fQ z1BtCt%)U-5Na-i&onXm!yUe+I)b<+92&CwfomUw@f&%MlL0o-pd9Xe z4_1UrhfVC{q62IOJ3tDBPa1VE(B3axhb5|g@wSov1%}U4h3mttl)WaJnGuVd&GgKN z8D#bVel+M>-jtx=3!_&h*)Ot=?5dFF_5c&qOa4FPgSBqPj_-nvZyM>QnKHh>wyJP} zltJsM^hjcFI+)cB4$0m=JSeepMW3g6LThI|jFOP$o*Pbni^IA3=PGsE*kn>~Wn~>H zFk>H|jnPT9BIK5!oWiB;UOfUwihbl3dx%rxlr>PV7U5()A(%7*Hq7u5eHCv*u959I zzcZCIe~tYxn!P{26bO%ev%V46EMP;0}wuDb2|v&JtN z?Sk0lL@DX%&Fk}M%rtsxr3n6CVZXnpnZvJP`Rc)|?IdI_>+X=xGlYLz8rgn4b-2CE zM=LF5ewTU!bPs_ecrj6Y?G(_d`o5Id7CKp1eRHtGiZfgb3xQ$SAvr8ixM=qv*RJ)2 zWf~`(S5S#NIRR3>^5*aLBfN>z%(GtWYn^+xTW~w+29m}Gz-}ih#1h|DDB_U(WOmC? zIT&2;f*`{-kM^o)A-*wClgg)k!`*qP`W~~pJzWRB@pnH15c-BM;*Rcew4{~8B#f2* z;r`$)N$j%x;jjU{6ez1LDv^;6SrKmFdciHvw?=&riVZ8=&ZD7e?zz;F^>lV3sL%(r z@GVo(m+nHr=8UU&Q!sAp{lm7(UFMo z@d7i2;_MpPitMN-1I24K;dkH6hNto99?ZkT!)Ba92Z{q_iwjg2*F%A1*PgsdH2(uI zwp3M0@<~QG_Fc)c;4aR`B-svvm_f)JmN!f-IaiwBg3o01jkB+U~)l7#dr*eZ{gv zL){9;zmdAB453wmPEwtvMCp9xI#$N%lk>*`QKVU9`th)XXAHJ3U}g*{m=0jEs*^V1 zv|HU}STNCJ)$BBnTLhhMbJK)iSmUn|HbxgI@kczI18R zZQdnXEZ42n^^Gjrp*TIV3rMhLqk8Fn`U7qaU?9-FcvHd(^L7$lTMKpEZ6dIft!_3B zcLZfC-Y>d7+IO6nUnF0#m|UffdTkX4Nswas8$pie3=T^UR@b(vR`6RVSF)eNtKW9 zr4EvbG{Y{YB`=1LgRVd9KCTGk$N!J2H;+py|Nh4%TgJw+v2Dz)rpy|*lFAirnQSq& zv^3ls6Ee5b+(5jQEi+SU-(r zypQ{M+!wF=+Ri!8^E~IAQ3imvtvN`SMH`O||3vc&x_$M;j@2TlChh*W^$VBbO{;=5 zNDGL&n(?XX$z3h(mgX?O+q<2bK8zpDHpWDQe?Ds+XDm(ck^odeXP>|=uB`KQD$6-P z16YecdKVKSiFF^%^t|nNN1tq&3rjK*rp_(|l^#E_-tsj;5I++0tEIOKG}O%%fm?ND z{o=lBWxZGPNW-aT1MB)ZZuqheQXNUN=1?O)wfx>$1V06T^>5!M%FlGGH8qz$D#PO< z?dGmyL_8KO_FnKW?0jy$>2l-bmroJIZ9t~(*0NDv7~fOq!Xa^I<}pDfmr(_X&~Q-_tVxM~c;pX;N96VzBT3Q-jDAf0Qj5%AG-xmJ z_m`Tu^xOUWe^7Qy$%?nNlp5_}YM_{}N)PmjdYx|XR@}X9ipM&&ZA;W~#p5;e1HHA> z1zS+EW2aB%cWEmahCOSrxD*s%m=bv#7(57;)Pny(D#&R&)}0-wUlO?1<4|JT>x z6F5+MuDxQ%W3$oSn_s!ded#HCo9!m}X@qM1qVR>sEyK2P4w(iG;m39|6@eth-z=N0 z1|8C3%19)RNS&7p8-3wFozJ@>C^#GlYZ<>GOQHL-A#GgJ>N+HC9MaF53fwcbqo6nM z$xbqF{d;fD3Gg0wU};Fg{~AK4q4+W~WCkTFDxwkLIF|=T@r=j#W&ZbeGBkeY(}h>W zazf9<)r3|ch;ftQaL%EPiqt8ATe0ZbO~dp&3NK*|s&#)UPH?j83D5cp%?v5M7ayRGAI+jRkvK%LWWIxCu6w%9`;hiS7jaY_hCFT{F}wBs zS=~!vQi3d#z<`>Ib|A7WJI0&`cPRk#ufty+H=TaY+8QcZvv4xx`}w@(S*H-4?d6T5 z16Nj&=DVl*2e;U|>72wA_F?0@b&N-ajHH^UU#@BVZ#O=e^E&l{b_XStH2J+NatQ~9 zl#0P^TAYt}pz_-Tm&Td2-~eQZk~t|#Q#5YZb+P7v-D7EO=-3p2vXoQiu>n{^36f(! z7gaA*)LQ&uacqL2TI^~oso3A~{rs;(bQ&8H=b=~pzF}s1K~fg&If{cU5F(T(hG{J+ zCyryulA7-=Ra;5c-l{(<)s`KRPWPy-pWw$Q z$DuB9BPD3Fz@j5dffBhhaOeQj=yWhe)r`VZnUQ=ar$_gGK7m&k2pL<;B@i2Josp3HQf*b)6`A7!KY(lA)Z@*~?JdXbYv2mFg%bwmQ0lTw?{lUP*?4Nz9CZu*i@^#|14?Bm#0Q`!M$c^ zg%;bKQQuDk5beVZghNsg(#S?Lh$DwfXx(F>b2o@Ji%UC9+amU1eu;>kG-I_(&)Nv8 zi3K0e;OIa789&>b+9^pr(qBKdXOaReW1@RI9uE zvt?xje*Va)0&+$0#^L=)@m_ocCf~L+aS)Q#3>0djm!Q)}u6#-s4%qR&R1bvZ$sk|w ze$#}mjGqI_EJ1`{1{Ddkf}7Yb7O0WWqj%i_kS~u8pcG^yye)++J%rk(LpOg)jY$xtD;(jrXtOcS2JJ%qMTp%bywk0z=ieHD z@TBZLWqzaJrn8p}e(5fwT0K{k3+?L98}=k09AN4ilEIFuXMnU^pInuU|EKOb0xIZy5FV)A_mSI;*pxakcHRA3hQ` z;ty|d(@6tcAS$hWVYKM;zXscEC-NrKvm&VamRusHV&DXHqqO!gb9xzUci&|Ko_)gQn0=SsZ?^%OSV1L6SV&Lbk!m+tg_SZ0Heasm0i`;EFU6e0m<<{fV`rA_@Hj@E?t7|Ca-|$CGI0yej9qmcmI_>k9G2_U0?rr zSCJxd><(*}=rXZg{H6%7as0UegX?JGKMKigQ8;cOBDjdJ%ujUM1Ge?a%vk@PLMl6f zTx%!QiFUz7lE0KIvpKcmz`cL*M$8+n*id)V^OCQE^#Bl0eVBPT{M;sVS<&XM#?jMN z?@4pFs$uFTwtd{>2~8#NeD%FMCltdQ_q$JcIX(1n(3^xzRD{GvgjKzN8GkYFQVfPQ z?LtVw5j+*nR^FYp8Bv|2}}wMPt|fSsy%EL!x6j_5q0OlIO_B@s?K zyM^uH@{;y48-8R~%D8@L()i9Nk_6EmjcP_ledQ6@m{U5z@!99GGN=pX!AL*~5#Za6 zS5)hHk{1_Wh75*34<~c1p|vk~jf%Tt5ty)H_mvbbTAtynLi2pzz12OgW?y^aM5)Z{ zVCyz<$l#^oosmz=&e*xb=w|lkpqtBcUhI5%HgBx^=2cct%DZ}_*j02zEU_jnE&rxN z$;qaq#bCxoMl9ao9TawilCBAEIgz<5;VB~d=Fe~~czK+$b4HiI7Sl4cZ zy8FWIY|)cWufj&jTOZuO6`!g{eb~Z;r%mLi0>^MFa%%b>|3tvZ`3STF6Kg<_LEpWV zh~mclaC}k9NZ_3-It2?QRgZFBHe@yYz3d{S$M9rAzC!`4nPsDpOw$0%jzFFFrbJ$r zZ?G%gKy&k2&cX*4n&nt%j^&C;;=L?}m>%V`AGr#Pb)>#2=cDX2pf3R!3C6p`Gvmj4 z4E5sD&q}O=DQVv#;8p3d8C>v{5Im7Xj^8Nt%3H`HFy6C}#FB)<_%AihHx1ii>^J=* zVZly<`4aPBE?^Y^EpN9;EpA>G?dyna{raaQyuSU!1Rrso8`;onaypP)k+87%$GUfm&=~R(<`&2b>uGOHq_sso4PY;?L%RUM2~xH zVKZ4#Y4S?-@kp^U;A%d_&~*6<nu4MQ}VWMW33zQvm&=Fu~0D&^XhGwC%L=`@)MIr!Lz#p zJTd{hm#KMVE6#z1w*3t0tg-@3^o*DkK>R5*`N+lg%+0IwTn!r=l!{JQZZwkpG2J#k zo-j4{tv~>|5~4c90&5}y25-7ZmTkD4vW&w#s}aWFd1QB3yy#2_(z1HR#YW1#5hRTnwC*6vHtY~sIXGEh^soeIU&~7!blHi^ zWurO!z3?Xb_iB^WeKplDMS-;2%!H2*n(s$M+t}4!b>qNim1&K^+h(*m5n;SxllG`T zOw*KGIduG^LOVzeI)%3zOmn|Rs*E$H#cz~jiSz%gA{*WxwYj*mHg3HBMN7MGR)1}{ z&SZDr0Eqe*g>rLi)>6rv&;n|0ekYn8q<%iT%-^m6Y-7v$(jr5bCikTu;B|!~=zvx{Z*)>B zw{W>I4p71qw5~}wRaN{81QU0oek*q{JYOKVQ5+8FeY>a1ik)}iuXOUQPKBS=fr{>> zc18Sl29j)oLK-cG(-{2D)!Zd zKO|Yy?p2{$(}|Pmt~GFF5JZlLGYrJEdQRl3EAHxdACq~4NpTI!vT=Dy6dN;RZOO~o z#ZYN`k?O5*vWk!;_P*a-YgaJ&+djP!WPlT*#Qq;bAKHmuhX#&=QqdDhAba$SuE^J#mqU>USD@mREA-4yx6!BlK*l@%o7q~E{j-W+ zrNPl|vlpjB#=JGrQgzCF5V~UxXdC*)I?(Dh{nbPcA6>N$1P0<0FR^5Ohw1JiYB;?x zE0xryTJXAfYt)kym#5-h6!cFEXbc`wfocx+A5Wr`(Ho=-P|dQvaebb=YWQMEyWk(h zTO2Knrv4W(TSl(V`|QEs*T#@wtaDk)cZ`tAZ8twNA>s+zok!GKwPI+UsjnCL#w)}U z5|^b?UH}>^b+?SC3GUO4OI?wPmw?I)#0Sl8 z$N8ONIWT2K8gs6qO*5IbIqL6DrsqmTZglf-M|*^4N|s+1$qyB_XmWymR?&V{2sQM_ z=2SsL`n$GPad66+TyfaLU}QmJO8>?Z)C|B#?@U&1#Z*$9cn1?3|ISgAknNr2ip!k% zZB>dK-s}aZuK2U9eXh=`bUV1U-v}4tWi*S*^2VlcExc*0Hr{LQf{n8Jy46|Mc_uk$ zSAs|*PA*nF>q{K%a!8rJUrM(GyBU4OtYt<5(lvL_YW_19_Ixjp;Cc%( zyG8bxnu3}BVkoTPagM$U(#TX-XutGM#$2%t3bCm6swOQAP{aVaaWyB!B#SBba(f7j zd@oQ(aD>}s{IS#fX{8~A*DA|dUiL$i?8z35a)t;|YXrf_8&n7*DKAyZtFB1(`y4;5 zRQ1A_Nn{=hH;QWyH3P1d_^woA%6q8w+#@0M(1H98(rR!J)0ISAYtA^a_7M1m)1GuU zgMolQ)*{t$hyE&%wuqi$2GdX51O4myO~Y>8-xL)6n{b}!s*d6u zJi>EHUv4#-2KM`Po$pFe*P`h{JNMQunUYDw)Q$!@6?wKUw3iA^aHQq`XxzA@6l!g3!y1oAWv=t7Mc4ytM+nsYk#Ggs1g$ROAp1gxMIzF zrUOc78iT$)swogB%o+(}^=!m{N}VstT|UNO<2x$ohOZClc~C3?0@91PJ~>u>hz^ zo1jZx)JVopJwUrlRO#HA6XY6K?JjAfeEKtzR!tKi)-3nbL!^Bc)m?dCmM*prYvMB} zF7DQX^&1;+NQ`}WXSwIuouQXn_S&#F-ydV{Jxo!q_U(~&zxXpRox-!ReNn^-zp;<= z+Q8HN#pf4S*XEWu+`3BFn(A=0cLt*M7xRww%+ITrI(S@`9SybC9(?&ZfXM+490 zm;``v5O)4RxJUkI=W|gZ(42Kpvs`+k`ejM)2D%+1SvStFt?NvueQ%?s z_nY0%!Cpi-E5zdL%(7ro(qhqkT!s0p)90wyZOg{sO&{_5TpS~s!q?Vx*$zZkJ8 zU7a;5wwY!31S5HPBAY@#d>YzC$1+H9W)o*x7Z83SxBd;(c^#5EInD(G#wsN>EdLa& zW?F2DRK}>FM*2K1Xs!xK6?o z_|;w~*#tXu!+2HS#{N_6F=;WJqrQhYBiAfi_=i}jGK%pV%DZ*{)eB`naQTgBXl`Mj z=9u@>m_%^I$R7-89*IWHcoI1~OH-Qigum-pw#UGV*atl*gXErtVs`nUrZlxSpn#)8 z^+1Pz!7K)A&_*S4%WFM#2Wm{E9}WZoVG_!eA|4icLN%T zs|(cZe)<^OaZ%LFJJ244B^d;>mk+HQ(O*t0-F-Xo5lOij++Pam->2PO)yWJqqWg({ zb^o*+=r!(&x|UjcRFoRz>cAu!M5ojapuj_)MHF2LDeiEr^S&!Fv8{WB<6}rL!2TU6 zkmOq6pk2Ap3IUX+v6V73-|dBMhALk4CFQANcjqvKeSGBhr}4Rx1GT1+B$_iS7#}m( zj*GI0zTQjpq;Ptj!-E=vr>%S#k#-a(8YiaT5_J`yK@$xVzDw_l6L07FW_SQ_t@!g1km!SGp<6gs>V>2c_21~;rB!EV9Z_&4>D7yMB*3TYuinf z-!56CbGDC(8DbXH*FN1M-|T`A|c^-C+;Vde%wk z+R=i!I?G9hQH|%XL3azRamEI&N3`?GsGAG+zM9SETzzqfa~RhS)Z1NW?MzXsgeusj zqsihA9AE%%rO*t$g&?kMgKke3YF>QP9^u`p0bv8M2-a785>7sh`0SzOaB5i7;?rn{ zCRnnAiMYu ztC!wX8q4}z|LR7FafS70!sZ#CX)>3cn}!>>@RYdO^fek@JFU{)mr!I&69I&QWB8Is zFQqinM7V|@%*mmBAw?T>rNmgDDyZiy#bf(jD@;md22csb1b9$X$x0lj{>F%*Uh!k~ z``Pr5Kv~ke&O%CQ*tOuFt4gOmewPJ%n~Vky0vD=i4R2^;?Ms8d%9f4gMFG_>5iyKo ztT2)6c{qWh;+zaYm1hCn3qlkQpWBtEC#Y|1&bUTNcq-UQ>OF{Wu2MaAjH{74?#Cp_ zx;4i^kkUU!(v{HsiBykIRrQDr9E79~DCMF*8NfZ%?05R^_bh0i9#vF;5<4s!zi^-F z>|-^$vf_P0a)c|^ucbNYz-aJVKavFQH>lle5a{&fAn?dCeSj@BNOewJZWhzPN2QG) zO3r_gWbpIqwl(>vee zfZyk?4Ig}mDh(}jc#(hS)jcZ#sJr{R(eLglQ99qe%Qd>~s51S9(1SWDOE@n%))=e* zf^=lg#m?YRbkozE>V}6e;{=c->DktgI1zIoPB46U_Bh3|s8pDCV9uq}Z|&G%z}lZp zRZJee!_dYt0*%}PGSG3APJL0oiZfE9i?@KRL9OU+&C|Vj3ogSzXrBBnA&wxEEsc?b zXWE)w`)8X9VLCx?(G6m(Dl>Iv%6WKBYqUZUveC8lg|% z91f}RyLfrIy{iEcbJlqJ%_$ayg#Kw8C}4F`pkf^wz71r%hK^j1Swfd=1MS(Dc15gp zcCEYZmrH90d{+^BwK`GFf&S|@8QhEMy8TIG&Z_pUUWyXeqPg2Z`}EDlZ@pnh%{J9a zmBjC3m&B-l(R;Ro_B%M_-@gD0)6I=6MUT28yASRm{Av?|B9M-py*7{#!!)c^Bz`Jp zl%%C);ryS)T^pQUnxAA?h?Az#54MAL0ZSdOCEXXD`waVDdB7%`A(Q(%BB_Ebvbsx=vj4kXkumXpgR>{ zr0f@u7Hu$Li>y1Dhj&|votWFMjIs8#v|SatR*w2H{?Y9@UqAk_pW0{h%Ce{M&vKMa z%Y3zKO^BU91de@7-kuW=!Cq&vYDc~2o(k<`BJ&V{=zmd8ivwTM`J0>jvl|MS$s#XI zQNZI-U&8$%+Y>4mKUDj^V@<<@b^hgYJYuli(Ida%vJ1Pr5?BMN#kIF4{eWA28)93T zap#iG$upXkof!&C{70T4E>jP!X8`&QWQ4Xg09`t{VWU6%XjP=vcM0#K`^QGO+hNFo z9b0K1mVsw!0}FrUN4u4t(NXx9np)$;2)L1%4{3Z3w1gdu1LkaD|{ z|MJM8Az#=tqn4#HZY$c?=9GNwt1ACdWG;wGio;bvA}_yd(sgTuhlIbi!lxdIcj%C2 z+PFM-e$?GGtZSG+iZ7v9)=FyHov`gU!b1~EwO>No8Lp3uVa}&rAYV!M-`LyVla$7Ffem1;=HBL~IP>~Odl=^+)cQaq ziBZ$(@?Yzf2r$XC7M-dp0VK0+wTbun;W~mbK9~ldbGEbV>BBWPcMh!=43El$spRej zO;N>XBBsik3FL%1$8TwyPNpRO<`gtMz0Ir_o+fl*aDg4{6_uR8 zFcrt7YhaYOahtU8GhJ~7_#GpDM;_#P6gMpjmt>~5Ha0|G{Qf*Hd{Yc@E$ZP~9g1*z zT#f7Y{d_wWdEoUuU+6ZuWYGH|vZCA4*oM(Q#LQ+p(fy+eQF*cD zTILsNJwHcmH)n{2uWK)o@VY3^9HC_p1|4y#4E0!=Jxdyl<39=vND<_`;Q>JGo+v7h z320!l3_Vrl3P$Ika~pcSb8yo)DqdIMY`fB#9g^w%BBtR%_o zB{o8XJA!koZ4Lxf7Xc4n8u*0gT^Uvjzjv8@RGNayg1aII?arP%-c0J4nRm%Czgs~n zwD2T!+CSfag&vThY*)OKifH4FuLJw3v5(hzu}azlPucDIBeLu9m!j;|hZ!NNzb|Qj zorLH=R6OPrTZ0yB7whB)`_o%~a}OyG-gt{|?34vXA7WLi$X>v3JmeUhajr)aTxsqK zh-fGs*S4uKy)_R-_nuT05`2+^bN^z5c$e5x?THom=|@c zVN+q_vyZ+MUG`YzQ{mD4H|mk6(o-nmI&sopmifx_M7VUQ@*X7`I!oz3!?#x-^ zS^7~q3=8eTlv+~9Yeb#+i;bVEedB9AzF}$>thKBA^Go&`9BHYjm699(<^sNedqb8! z4BK^zI^JOBiC=`rmj^mvm8EjQ`iZX4$$nRdU%UtH*6?|;nDC~FzuQckn_tE?z8|Xx z4#jav)y448Bhhj6_{@zq_lHUIq2SyX;Dqz5Ci0+!TD8&1Ide8%^d^nK{)1mTKAP}J*&OH_k`-hZ z-r!eh9~pOIWJxqVMJu{D9r2!BK=X(Rr>7gPmAqiOI+&ZseAy8q6=qO7+$8OW5zCP2 z|Ijyn1DS&UMnCxtv|FQFHv9%U3z|i%e*^8(OZ)b#`>(^>i(ntGi*C+;L)+{IUD5mV zEosp`+-4%8YlEd-;6XHIH^=~V2;I6HIr^ig5KZB0h12WcaH+MHUl6$Of z1=L5Q_keykwtn6kn4d7_hqZju{8UiG|9fQn^<1`DpVICccPhgDFn$!^bB~7j4IL2W+1DrH)wtNk@*LmZjDVI zTZU9;zFDl6Za}A*f%a^?Iewq0p*CfeS-m2%?9g?ZXP`nf-3)XJL_-_z1?>hDb3W!u z{#T2bVmU!~aCTTZkEnXv{Vqc75GggNme?9SJS$vW3r`_BlOo-s*Jd$YRTq@c@8zl` zLuw6xLD3r8x_!BwPF~JZE4ik#!|iH zv_;lMksRZ?98%3nTO|9cmocg|$k7~)=kMZn^$i-?#}rAWkRcKcmoU~8YZ^ch&#t3y zS8F^lJjGn08bvg^wzi!l{!r~kh6rADauR%4N#`UdRlo<9GAlu*mci4=CO4=H$%6R8 zqju@n9ZtzK*(VtGOR`6=Y3ghdj|h&(7Ir>kc(g9G3|znm%B00v%ZslNJz?Y}n(D@- z)>*lp>Vg=f!bp?yc-zS;53#J8>RJ`(kVy-clW{Sc^rGoVFV9Hc2`>9L+|tzdRHZ3b z4S41Qie9yMv*;lgwLpbbbvt}qc1}>nW+}bItrnfn>u(u{b>$s7$c$eq<_a!AIDvrJ zRo+QAElPrk;p&ACmpU(xT!_Fx)0&~uVZ4N<#;dQ>k&n@Emu8a*kJex(L=6e17M3E^ z-zuY6%QgTr0IQp(=5JRk&$g<75cRyeYBsh$^{Sr+e+y!tHK;ca!31vJKUsrM8VQyI zs)v&uy#6#lrLtcgEEX2cOS$=BRTVk=U%HFhqMJHD$$Ac!2Y+P9U9pNgeTkY}2%HE} z>)x}-$3|h)SZ?FM876u4_MWy+yiD}GOZCS0!I9k$tg?ju5?f)29AMTrhwhJ!$euLA zdKGmpsw3Vz47%D2rChZqgj0a{?u9dI?CGy|Ra1dW%BTU{As)M-SB;v-C`+kQ=uDD7 z$F(yjvL2-p5gOD+(hxOIEqNs>WVB3I^+NYfOtbmaI*g1>VdQcM-Bd`pwR9ts0xJARiJ6`o`y-AP2{HXRfox?7`|gnmXA zRpE$ATb@V|r=-EQl;;VJWzL=ocUNz0Y2aq{2Mmx{E{snp&T(M;i7#=LdI2gTLdfde zYZs!60;0|$cd*9hV01rW>(@O(um-E^$`yjxU}9iWcrVA2k=#8|={OTaG-hB%g(jbq!bb)10Z2~&nL z5O2ea-0ii@+Bm=hZo;anBUn(?2SDX7e($Gl&+X(Capoh^gVauy%V&&p&BPSsR7Q_m9VoQcK4|b4_nA|# zUdAedcwtCHu3R@``+X4|BEQ8WGOJ>ir}egvNMG|sK;qzR7EMe*3{NElUl-gl52=!7 zPD_NLvyS(%Rn zJ4{K*;1i|A7xD|(T`z8?F)xvO;>MRJNZDQVaAsVYu~_4m!l|ykm-!CUIl7<{1EL6(>_Zb!M)b;Nz#)p5s{ zs5}dflp3qLRTn6bckyg?@TuIH&yQb9qTU#VF%^c!U@vzh-;vxpIGR3@pgwXvsVW;w z!nJO{#uRpcj$*+~7lt(1^i9qMU-b>Z1L|w8u0mE(?(i)jviu4)2=<;mAH+ErPNTIm zD{z?KQKw-aljv|*AF32C5o&u818JKy@ggHr&XhmM_N~y;#r+LU3A**4^dQ0Ej4go>2(H zwoVo#FU3mtqr4f{4SmSlorjdfov8O7*>530{hkC9CtUrMq_>$N1;6BhExHowDkH@7 zL$@GQ{F>vz=AF;z#|m&h(j;*ARnG%0aK>jA?W6le%$w^p5vug9D@^HvMtGhcs^O$k zS)%`FFeVbYEz1M;7f`-&_F9c^uXK2r&uG(VF_DFhBOd4?8i__E(Ii;m#j@D0o7A>v z|0R>>z}!M7U#Hr%jD}p>pPRZZnRar;hwDx90*;e=K7=VHr~hMCq4tw!VrzO-7IND$ddVytAS9@Sk(tBjR;=x)Q?aLko_6x zH6`jysf0&t%aHVRz34N`P+Bt(sUBsswl8uGuHXrY2A^nezgudbGq^=LI_50wwPe(A z{%p^SBpw>=NOb&oa)jgGb(r@ib}9kvf%o!%MZgbIYEUdU`pMSmX@{&wmtSG7qhm{& z2zdYx`Be0)C@r&*1+OHC2H#tD9X7%@&7ZXF6Mp!O^>bHnq2X{I<6kJpP#hGR#|Xyp z(s~(ZAbV~_xsW!lI`uWS9c8nC!pdX~y%l8>BFz}d=e z4i%45;rWbzG5wDuPf>~A)EhOSfc9H;fZNc&)L%8h$txrQZ4Lb(ajpB&_eY)$Yp+lZ zd`#^cZr#L;;)tPi+q)>z3Qi=zb$;w(-oh_+6KQ@?wNPBG<%|O*?LOZUOZV~1yV_Gy z(%-FUZF`D3n>SD#J~L*Ms$4^PZ(RkI*UWp*@|w+7_#t(&)o<%EuI>lgpm)dX{f3=w zmzGC#k(a1=jF};vc^gv;<~8PqZ-=^QT4jJAW@cj5GsscukA}P6Llgm+<&k%+@Wu-) zu%_3y1t+z1M^8%@y7ZBCtTjoO2lNZ!D-KO}*OxEdx&8~@~T5_xik$$#7D zedq6*|60Fk{_^f>LO_39p=U0yDo7Ch9}{EcQ9!3Idj0@t|GNL<{WPm>Kv!1-eszCK z_%5X@1dK(M>bp~CH6xScXRMeg{UYpsbw)j0Iz#tZC%J?(f%ppJlV_ugyOtt;UMSDAArxuK|c>j-lvt)o}h0a_xA>xwti1SVPZ>@B0H`~4? z2=gf1{GyPwZ*ck}I`xeYg}8aDO-ZpqwQWpMUs6=m__qt64*kc4{S0)wsKJoBs$>t>M3P&xM($+KXBPstFu3g=9b->^=;CDtZI3 z@-4(U@dw=tBY?r!8gbxs~l-B2hUFVu~0Z5Q?tb@h)hcWH-D)1s<;G~4vb8a><=qkWL zx+So-mzNV9Tpcjz$H#|Gk(23N8$fJMe@)rg3C@9VfG-QVs9Bmxbj0ZigtW3Ih_ky> zu5r=Lrs7_5PD&o7CErR#B?NLc+1NAfTzPGtqyuft5uDG+#iycv6?7z^SD%nL${6#f z=%)w>r>L~;B-L?rtR2V{zyr9AZTg=A>!mf9$X;KduCOiV*o`GFw_YK{pOAEDyG!sx zxLx4QU@^LsW&T%pHKp^@q8+fY(#pQG1MRKq;_|6|>~| zaiHHx@y6ia#QU$R6#5HhW5(-68#7I$+^1o52+L&*ia9apJ?kvIQxWVi12M%iD?^#oPMGW_y~~lS0u=+Gbatu9r^|GO>0R+fO~aG@2kfo@pZ>-lO!d>NoPr zY!x=1Ego}e3oc+>SoQUja79D4z{fNG&0$kdrTIgg)&oe2ts}Paf$&6q{ZTBNl=vjn zG1`tZ*NRRfUZLFmv2Wixy8yl&M{+jJPM^_o-ZD3JaFQL}{+@O3YPclAY1yj&aqOy+ z?m7a>_Gi(5Jm9rTq0#4NH<*kHiJ#)9bBBxbiDS|VzQdTX!7-5cd&s+y0YC0!xwhi< zNwa;HyRNewEQPt9Vxk|+4^|%Sr`7z6{*el29h1!uBt(w=mef|26gUAO!XW{-g7eoD zYdLpZIo?mo$4A%*4En;MyapaNpLa4XgxfMsDqK*I7+nhUqRc|Zm%Xq{U40vY(eT!= ziR8iGQKv@6?Vk%{*3mMLvmA@OSU1N%=Ke3JdwQ1^Ea1#vdFRb3t2*u0z8kMZ-!l1$ z?0N61jo*oqd;;L6Q#?uy+&LC7<$!Nf=ehI3s}-uTTRk^Uqrar?JBNzVCzxFe{$te} z4K8_oA^1J`5ak&ag&dl0wEa1?_NB~{8|S6r^@nm>xK7Ye_q>U+m_AK7&ay4TKK0SoEBcNh9CAy4VH zJ%viJ1uqQEtF)wz`#YU3#@?J7zxk^JYVXbF?&F>is{R-$@oL~;5zghrE;XVJ5w15n ztjz)V?a0u2^x~s-m!KxI$7JQbC?7PU)EgS2P`SqIP0yWkblH{u}$5(GAPz`rrb3~u` z;%8xJjfE_Ru@+7L-x%K(2Z}e#5SkYklWB}0DnByuNq)Gr1ISU}hdBD5EWAqVFJJ9= zilq$2qJmk5&({R3`p`Xv{N7|yeR9thcL%bl%!`3TGd|b%op?F>8x4A-Y!+;B1Q@)I zzuW0On=&#HAT$aQk3j`a$mONdYz{4~tf&)?L&u#P_Q}73Ow4fI0p6TkLYnLz=Wbh( zj<;(8bBz!-@_(;8n8M=BY)^9#O@hN(_TQOZVFp9OWGiwM9^(0Pf@XegyS(Wl>)5d- z1Ed=JFy#a{V{CVU_+Tt+esI+lmmku$#!hFod-dvvG9+XbgMXsXb+}nf3a|;#N$@gM zhOkT;HOH7i&49AqlwVob&exQ&hG*s%g%83NAMZq*HMX+d-OT4WWi2G{V)Jby-0LFN37fr@EJmEaA>+v()Doh`z%VBsUCkSH;-Ni6gG8l$A^bL%J)W2&*&>r^5U! zzu2QsL~}{3O10--hj>xl8nLmNxb(4I%o+w#XdC^xORZ=XR;74*l7n4c-amFjmYg+d znFPt|bLrnU9gU%RFe3+*xtp(+6V2>P>?)ZNnOOd3XXSEkJVU~L`hoVp1QJn)K?mF| zD9wNi>KXyyjAPm>{bN&s>d;VSC-DdzXTvCXp`p<9f{ z%|_yUqS7QXh3e^(XG8kB;3aV>zn75|nDkXQK|OOF-0eGS=R0yPk30Kw#b!d@r2HKN z@V5HR{jRw)_1w%UVcYBG@jys^N5CHEv?b)E+{0iqEb+{+(C|LRA&)?F+dk_AiJWUQ zIGe2avhP3P>we35)QT>Grn-W50+6`@O6e1Rz2n@OYf`>DIe3_N7{3+&IOcfCHCk8C zq=>Mhk`-_^(8v*u1p!FpKks16)wM>{>k09OMu)`Vb)YS$mW1 zOo#l|)k7sRje*}VaxEf$|Ear-9GmdZ0PvM(bFpy$SAj>Vw5Qc${0L5F8;LNQOS|0M zW8D*<-3d1k053_UubGuUrYh7)<1Jj&ciel?eFD9yqWhhd{x>sw3$SaU{?gT^?;HFc zs}Hdcx4$EwECJ*0A!OjC=Ru~pBWE*ri*x4=e!UERu%r>5P;tw>+dAE|?c(}eDB7b+ zxcX*(7101@C9OWis(w%2oHdH-^VWpkTDwm;3jiXM`@B}JQ51t+)shS6i+3*k@vB3g zyk|bIF22-k&Za}9ER7HDsvAC=TsTY{<}|1DpdHVQ8yD3R;zv3%^i((4V-1STUz@8K zoZwYIf?u_cbp0O({;tm-u+^|Uc7FRusS6=-O3D4+ZhCG*r@oQ-jUJH(m+rlu3=^(( zhF5%^H{(00i-JnE_~RW18mebE*G1n?=^9UsikfPTBKsX@bu)|EL~k-Qv&A{df@kOM zFN7ooX4b|?dlH-T;u)97_(kI%!&o=G`t6S!EiLzNVO#&d+hgcEYd{six5f3LhW1OX zk6s&M?Qt4X1XK(FlN#o^9w5#5hn*xo$+?)6MODAFW8S3xIJrYJG}gsyNIR_(OJ3eg zB)iI~^W4T#;iXQOrOIzt8Ck3PAnmaBC=7Cj;Z$xSY!~-&HM_S)1FrXmmBs;=1rT^r z zey!2h<5U;$CQ(s+_uA_S%bPq6D z*N&4mvG0)`Dyq^oKCZIp<fqxO7eXkN&?s^gq$u+5M-+#B=8hIlws_cRx z3&D*(8yeZd)R}%UOJk(mM4dPh@NP2k_Sh|rwMgH!fW|CA#ee=!%{ssj+ZqMVUxVQ6 zcCCdw!}hWTjG)VJ2=$i9Moy$ug-eB%t7=)ZoK`GA+VuZk8al1%M=d_*YnUb8C$x;NL3xl8r-sJdS#}}2VYNc6XmQZVG>Y4&;N4ulz(wFGKeEKt75{X5 z_-VbSj>Lt_bLJuHGsZVoC|RXymn61yWvL)!<{U85ton1NfNhO8qDn&UI$=Ql4b)_P5ia8`Crx3F-Zym05 zU4_bFj+2DSVRAlgQ(c$E#&Vn)8)+6BquIuWecy9^KEL1X``sUIw|S4f_uBjLdfuOp z$Kxen&PMN*)t3-HUawaH2bB} z5TUE`SS;&3kwwUZhFB-!-h?}2&T|?sT97bA@QO-ZzL91neJVTT-vwq;Nyb2@c81mI zmaBx5EpzlL!Z(${)#8RRyx$R44~B+{aT&P@s%OD7uSN4O1a=TXch_{Lx^R$BxBv!K zT(&tU*k4D~Mh#>D7WQ0GK^b1;u=;)VrvwB|f85D+Dl=1_MOCX>t>v>9)yxRfC!DsX zB`&(6iHW5UNcy#Bj`Y@vma4KdOGGuF0$5xWIAbCp>Ze5vjr6)H1wK9kI)UN~z*?99` z#+;KQJMp!4_kSMa5P}3lZ@rbSY!D4NZ@_bx^VMFSk8TLmg*UQe%m+{8S6ho z82#;3Wg9>=ba{_Ggul@r_l z+Xzyp{NE7V;de3&q-AQqqrXf^?}DG~?o~DXa0~$3t1(SEPzrvr z+{Nf`LzUW1&4{$XvmSMyN5OfZn$lI9>YxjU?A@MZ`QD;brMEsJSCDl(F0N)Km3-lT zSpmxhU8CQhlE2x1fwN73k$5HhCC{x%8erciD%6Z>R=B+SHT3(yKOe4rL4sob8)nei zh7YbMYJD$+on~Qz8i4SgYiqyd6oGf#wLHZ5mkUZ2Y{M+rEu#tjUIBhqsf3HLAna^iXVsc;qL*_ZyJFwMU1MFI8q7q7d*$S~ zyAG85?!RQ}n6*jc7uBEH3Ui{($@0g#xHb4B15$5bHPr9RY)Xj_5i5Ns=556!G#j}; z5ypc|4FLq$`2@Zftm;VkRf#=uL#)p!^YyS&p>FG=Y!BDQ_bs29rQ}~2+q%!A;zajN`xrSNLV1j(E)8k^^N~t-pYaph( zf}y{2s^hbBRs9#9y~XXu4;(CD8lh$BnTGq5haqG1KLXTd=x}zW*>z#vpGd?KDyWj% zIhw_<#~4+R;$wpu?o%?`TPy&V%9H4V$4vlY+@C1fm_{{E zH4&U-(4(2;T6$OL6tNJf9r=Z&ezZNu_pN)?%iI2Koj2Yx$8Y4iu=NTm4ShEe z1$)pdxL(z~7ih`KjjBBIz2}2*S{aw$qB-Fa@4?33#ggw7mV~_-HSwu!W$;?cpy2Z0PIVjcP%W?y1Clhrpoy&Myxz=@qU0d2zXbn+ z3&Vci@B(v)G90#Z5!{3|B(MkG#-0}-U4ZD`UV(?d*uf2Ih)gdu-sBvaP_}CAOBBoF-Rhf2xg2GA2k>j-Ey5QTXxbd4ydEE|`TG}5kY7|&DY=8?bpj6LpBJTm(n zSxID`Aql)(x0;^xI7)y;1hfK4!L^<17m?TvkdvOJIDh)}X-(w&csJrx~!J9O9wBk$Q zrp=-;B<<4M_>mt{abSub*a30u8dP{d5U~p@*S>S0W;$q1M~K>n;RUprBjn^}Hd!!Q ziw<{$96VQp`4d>x-lWg7vUgvnAJypz6%VuoLr0G2NQSG>oA$|^i-L-tFKbo%7xKHG z?=UrbV86G(BjNm~oSjo%I5fo(a#WqUdSz9ll`i(V?(yC-49nd*TGD)a`35t(w%{%L zKi42C+d+R$1v1=O-es~BZEy`@u}4y(o7RsdWRlL-Pw+wk7BUF z+EmMzxBa61+Z#eYE_i2^urjJz6C6l&+p3R-{)ij@{g5i4{PRY4PB2`w>0$^9L_3W_ zMQ;k&jKS}i%K05gO4o8WvcGr2(mKaj7M^ff@#)U%TGzXFHfyPm-qGPx?E=z*e8e%v z*qVU_yRnmw4@Ngt_RpAv9W*-TOqe}c{RkyLG&K46Y1iUPNSrm*x7}B9M}e;R{9QFHGt|VT2WZp94*CiEUVU+X_sQ#3 zo6htqX{+?zqRnhF27`=v%K=Bn?7m2jUG8dDJ8s)Ev2IU>fBMi}#cUY(y=xH{54E7F z0-`uxVuLLM8SkHEXn;TUzMT9d-<2RwjIosaz0qZ%k zc+;lGE$tcl+!)wUHQ#jctop1+Ga>;al0}>O*$4VhnSsyHJ6NF8`UW3_#YvT9h1qnq zYGupinJ%F0vi!ZS1$0#AByT(7XRWSc!H#L7^4h}t$-l%+`cP~lFqSfGYgAiWdo0wZ zD&sIfB{jvW+aCEk%B3a9B9PJ(huU&pkpp43{-l9tsM_XRs#GF6=kI2OuevtywV5o? z4Vwh1(!D{afn}Z(!HoEhP$bra+@Sjx`!20q+mRD1L<j1fR$nwu)Z)?ItzzqS@F!g?<_qtUmDf#I~o&8k@n^RZL)IpPB|s?O+U1}VM_bvdN9q#!HcRheKjSbRRcROl3_ zdtnBYL4!i*oNY-SNcr7{!-ey@MI9QI9!c`5z)mNvXScU1%AYs1)s=K*;R2rG9V1?_ z$tV0=*A%P+sYJI`_{^b0_G{PE0~~^M+~j@vZISKKKO?mqyFxiBFQdkm#+5nM+A(yv zLXJz*e-164hLMcQ^h&%nB_EkR>anrEuO544ZYtjyj!}pEWSiO3O=|^`0iKL(Yy1t2 zo&IVU_>P&u0b8}MHk_R`#>^0gc&X!7!|fix<7(@p_U?vA{(T2QmKEuIL}Nf=w3m+b zW2YhMowT&BXwe>ZKYpYm#bRwj&!{n8G*N$;2c{gX`VKPMU?2y( zPU0JG{D6V9LMXJ`Iu3z@Abrq}eG$cK%B4^eF(Ha|?0OAOY_Tx~HWK!Ul~Us^$W!|V zjOMG4!pWfZeunGFY;;*&N+7Ic^a9h`T4d(EI1(z_9)Sa*+c1alIf4dFA~X#I!=6_6 z=$YkNYU_<>_dOeY<;F8!2GFBzzZNE}9urE}kx5n$sB%aGx!t8SQLnZB%D=yS3CbNz z14d8NjxA4gGWym(A;}I*p3dJ{g$LCGQ`hA3X#|>deK8VWwE}O5obEew*?US00t&%U znNMP-vZWwu{l8ULfWqtV-Gru+4M|}Jq<$}?db;DE&K5c0On%c?P>vY5z6g_bMIsg*O|d$ z;`{Eq{l@X-U=!E`$*f&Rc$mbAi!l_H&^b7{`bO#A28_~P$W=1BjdXp9)mE?Ed~sHa5eEtWc*;ZmV=#tcL25gXW_D!Y*^f* zHu#=#*}}vAU#u`?i#GIq_L!jfRRpD~zr4{-0RNE!4@~s78Quu;qXIK?gS?433d~Dm zW%Rs&pkjJp|7z#>>0|0mKSu9Zd4cf+;`*J{jbo9se-xh`e;|g-Xyu*%m_^7ih52Pb zmfE1dYTP=+cdF{u2kq(Z8Yl}CbNoOeo@(kE1%^_{Hhp=Ox!rI5tWY+84C;?%V(3SO#m80T>AEPspHZ zdn_pKa1NMX1C=Pif2Amzzu6xo-xD#Trn|@(5@8YhepY*9uRLJ14aGhT)b6xYd%{SN z2l~Btelgf5$2^_$kH*%u`Oz8hCJyU0D2fkn*!$9vPjXPN^5)717(F$J!9YR8SivA( zNk3`MwlB>)A zSBsqMHuPL<{v7yMcs+M}J`@#B5Pm{Fz8&88V|$Xy&BQ4N&y9S{m-QGesEUqW3vu=5~F3T#S>g1{cIW8F`nJSuN_k4Xeb9I{^gJDW}VkQva@o%>) z8x8u+8@htDnNR-$7ErE{Je%#8d+JgahyS>EcEG#Sbb>sYnVqoj~q3K|A} zf@Kv^Bc0Y8&`j0ES~6^x+mMCS0)6&9Dc-0YRQqI05@K*eb;1u9bG$90Lg%!)M7%L) zSWSe(DzCoo&kTSy^R&ksQ2;8s8pA{f$o0?n?{SLwkTvN|iW$`>-JlO5Pp~7(xV_C7 zc0B?X+JOjee0aW!)z+~Ly4EAw5ar%?;9>OL84Vh?f+kJWMTv2s9#G4qz2^j3r2;r> zl{2=j6wf!6J!0!%N_PuvF**PfQjE}3Dxe4_r}O~N*0IpRpeZD%C{Ih2wGiB|Zt#tL z!;Q{)#dpB3r6c8dy{%RIRz=Mx2vSgmhaD-`+jxscT}un<4OL^=t+{p z3ipkb)q1o4Ne(I|?_r6<0dptt!t_rJ>{e3b3zW2mIo3_Bz?@t8mjJ&L0Ule(%87HY zkp{FTJpRM|CVMJa~C{?-|(PXW)SSWHP1vMF7sDd zb`Rq*dku^+$ct8G0Cy6JAymkl6{4o8#fEJRPk4z{R>)BS`X`vvP&@A2P!#>#pBxgC zS>lac%bP4=H##+YyeU^l#jH&oF7y#Jsr&GQ`g?kR9YT8NiF<l36p@G@Jh~WQ0V=m zyxc?bJh~6*G%TXvdwe^X4TqvLcE~2Sp-P~G-8I^d z_FTby&PpPhx!Y?fXvFFVD9~HO)#qp_Tt=rv6^Dp3u&QQ2i zJ4x>x2Wc7P-RR>PC|%nY#R?J_euV<)5Ff~;OANsUfgGH{0R>gBWoERPoG8r*{FHOd z{!0g$s@K8EW1cql#Tj=h2?Wt>PP*V!!5J|j_)-(NelInx>xIXJ4yny332gPDr9Kcf zs9E}}@Fud>!4SObJ3^c5OcPHXRJLsfp_jL-vZyiNOBzAppIdnI*a?zPjzNpLA zo9F<8fd`07GredxUx+cp7@gt^@!K!y!_E|zDD|;f>}gKFYaW$YWXFv34aj?%-}yD@Li|IPAy+1allcNE7J#uZRiU6z8_?_fv`QjJjiY;NKKn` zIdi2`E+qP^-o_!VFB)6zk8LfSh44W#{KT-Dj?w$M1nSb!|M)=;8p@Q55Hda|{)PWO z!ceo!gRhxCn;U&C#bz*264#VVxLQ+jlVLJjg0gm&mZXd^(5g2fdWU2MX!(XGUn0wT zoQ59h*-nHF_z@X^Bh`mr|I-}2?xO>4LXIk|DesR}=#FCWXA3LQ=$jCIrQ3^=U?b%q zm*mi`)-g`#{+kdF1#5Q7j4aR;pBQeAHuZ-bxFoqy2(R_pKdIJGR&Y;0m+DtlTXFPx zJDwx{viy6F6F$g}T~%J#$)2-vSgGI}{m8j?;Q1tl9T?pa%8&o5%Y>DB@OWoH65xR@ z@`o57rhD2?2Ta*pp4_*@**-9`F3XDf*2J&|&3P4Sf0Gxy#?Z_DkPC|SssqxwUx24b z8tXy_`pPZH{*4nn96IC{#L5f|69w(z3O~MuG^U_KG+PooKK{6H0^*Ba(8c!;X|1Fz zbem&E-p8hGe`Y(m!NN?5k|pI1YWo;^;ugft%mXMiF=K2(Jv~nS&1cE;JD>NVQ^GRm zq~}q(6rKCOdjYI>(iXngGy0FFZUxwZNwtr>0pi_pWwdVqMD_O73a7h2Ls)T_q(dSE zXgH9|-v>4dPRM&34x@AQ7E~6O$ z)x5pi1{(6BE-O2ju}^Wv;WqaL+xknpOS=_HevD8JNL?MeM8RD&GXP?=A1723qx!r_ zj4sfvl&NWe6Hol0L|k~d7UYK33xsF@T7sVv_GMgRhkd7z`SqFtto-TTzF1PLrt1LOr(C?@6_Co?6IYG*tI4a-d!DiCSc|t8dlXkEozy2d2TI} zU(J~u{Iv^%4GJIUPAiN8;Jmj|%ung$Htet3%i9d&%{D1w>A@zLI%BuPw=qIJkY=x@L&muWJOc9+)wb>~ zqoSj3L!jr@Xsw*Q?S`JW!EShm$-YJMUcHTkT21QL%O&8^Y zcl@0`4dptvr)B1jRS+!&{n{!X{qr`&0?HQ65DaKkjbEpb-V`;VElVHeFMiB1D8vs$ zWVNMCT~S~S7v}LFXZJOhcK0CLwBqjQLp01pETeZJK7Hlr&|rwpiE;z|LWgKCN_t3B zL<2}n0|});1i-H|$l@Wab=wYDSgCPgxWkN63S*8U8{UaE1@>usN zl``7Z4kMg{rWXu*u1`TdNUe|T9g_S=Yk2RCs)b>5^2w2SAsTuIqPA;sY;uq>Q>RyO z%0-+yYU(6>g^EOn-hu4Bo!(`LOxd}nG&@bt8V|3O+|=}Bt39;+=s3MUI{#^6Y9{~8 zB7(+R`TdCnCC0LDpN+gr?S%-*)MFLW_bP9JKiJ_39y0&(@@EOE0(RJsEIA0G+ngi{Kb&hbbdVkHe*ekD|Y(rF`&=Su% z(J?T3KM zh2=?a|w>IPh`6L`W_2KFxQI6FZ zm2v4w&OH3EC=3>HO#Iwvk3QT?SUXk0^CuEx%<5F5Jf}amR()8}J%-Al7AURAXJYa;GbBwq7EF(fdPWrAl0#UAEPnnt-xz`YT72Rmp|*R|TztV)$n1f*%l&q9A*NT<>KM=q zcdu9VQ&aWvx_1j}*qk^W>U~s}C_Jsbev=$MY#xA0mhGB_f!Aj0%nsLbRa%FVEZBx0 zuZq)lZV(9$^b7UJsxC3J*v)o=XP4+2PUXqMrP|+}lOqFt zUG1J*B8=u^1zU7^ZW}&6GOkrRsQ)wnSBX-f+^LPM+MX%Bjl&2+d1G8K{g8ZAm)z{E z(c{5@GmAxq5u?`6Sn4=)t&CAZqk-I-ZclDgokC(^darB+dTk`g(YS)0weq2T+H6MWiMXb|_%hE^WSur6ZkkN?S_Qrsg-5+xh@Yy~^T zAgmg!sXWI_Yyml2$imY1(n_*>YEd<^Oo#e+T!dtr>bKhbGkFqqPk9zdDw%c*x67`f z#>GdB3+iA5Iyf|PWm`b;VY#k}TJ4r=eEeD$!BesY%Z~o5hBpp|dCrn49$53?X93BD zISOxs8h+NP)h?stZ4Q7c!8^qnEZyW!VugIBRnG3Al1i{=5<)(;2!1AR5s z;|jVRKfS1tE}n)*0DToLMf^C)nH;Ucmc0fa655c$5+4dEQ61sjxW&3}csMGHFP7O^ zr25peFU}qTcFt(DMb3s9L;M0apm!{V07%yFX~B#g_aycG8@aP}?AT`gIf9_?kFHGC zQxYPNHQdUun2j2VM<<%G{j?A2qCBdacg8AKR#$^}L*Qx6oeP1wK2Wid?115WCoe0# z6gx=qDp^Opr29@x0E15+#t%Ouwo*vXIyuhn{(_LW#WXBCy~%PaDb|9j-BdVequo8F@HaVE~^+nl&LV%JOXjMFo! zyHucW{?wEL$ZR_Rz^N*qp>beNKpMlC;cq74hYwV=s2EkZe8xWVG=qX+>2H)TNwil7 zWIn!b&TW4}rw3Z2@B(g^Skyu4VgqeiIrK0ytXWp1yYMO-fdUOfGn`)~a*}?3oKl9+BSDW=*Y~DYUETPxS(;C=DTgw+wUMM)Ou@_ezKS~ zn&Bj75eudNjMrbc8C*2*D20zCwuD%%)oUA>_CrS#e39Vo;=B2?U@G8Om9t{a_A65d zJan|!mF3-U3S<&BXXpvHhSS;6@`9TdiH)+3-&I9=&|lj_lOlHrqGDwFu8rAhqdgTZ zHAj4fyW5H|5JT?`)mA4=(kOhH+-)JM3zS_IrW4r+`IB>qZzaaipj^Y^=#jGsbjBfy zT5`5(k8xZcFmGy)%<}jXA>~4r$PTFr`em(eK?g;!m0a%036RG}THVc!9<2KOMQ++o z`8V|Vk@z#mOglfIX+F#FEm>(A(%S0EY`Pq{ zQieCx6Z7c(yNCHtouDO_%O2iPpe($@#7K9~qtiiv!qJPQ_>4SIoW&>F9s0Ul44EBW zoUb$hJ@@uxNVyev76ik7rogg!qL_Ynrbx?ewPHxur>#o+%v z@lO{%C5x#aufcBWqkKH<$%1-)Z;&Me# zV)HU%I=%%Ag}2nYo)T;%rA{tUfnSY=In~HT&8G=lB7&NgqEk*|KTpBmEGC-?7ZeSN z$4HgDXOonAE5?C@glHRnQ`F?So}iISiD&NBItR{Y@nX7p=aRjF_^JIr8|ZME({6kK zB#YCTG*z{6@+)2&x0H->}l8MTw@%DYmfrw5A$Z;#hm?QH?RM3?G3On<8X zB99#~4#o24)hYI40qsVVZn@j?E_>w50$dLzY$81R&w2fr)o0$v*oSAEu$Cn_gX6qtN+aOPH0@1D zLp;nR>yxY-wjMJI1?cg5Q%F(_8p2D-5Py+NNIkYu1ZFmc4D!NPX3}O3-ZIL%f3?Z| z6XRFG^Qc=LBXJ!|$%C(>)`+#_Sn4^S#XoXj0cO*uTCEfNC|%q-I_E5Efj=^rN2i`g z6d*EoEXnFSqfPn&g+oWF7QcCwM|m9+e;Yg2J*0>7XKDfq-TbV?w{>a15*hW}Pz*mO zo|4QH^_y&?IlU_^BGgR>NVP&SvalOx-#C#9@M(ME%H-KfQ%G6(1lLqK9;FV#d&hS@L5I$_nt+max1 zuMSCYSu_Ikq(s&bNz#~F{002uNSTW*W(ws0G6UgU6DS1`^8BGo=LO&P^VZ|mtJ7tF zZOVcH;4)0zRIcYTugu5P2^6=lBX>D2D60kk5rXn;1CuL|tZhBuq5~Scu;#a>48S*% zv&aB!nWg#Hl0NGzd^smKJ zE(t{+;aQf(sQvHl$FS_fuYmvWDgAU}9`Rm_>>43^aOq-p9>Oc7ac$$js%g3EAWlsi zDC|N{3RbhJd9u3>_-MDToD?jd@j2>NRt#%j|CO9ve4W0(^%&*?fR;<3ZC>e(GyCs` zVf6H3)bbkAOqrb=M1mI{Xf)(%-~M-F(wKWh!&1EDWS%C$x-Bl+qI8<{zc=Zxufn3; zC>SZfcO|Zyxt+Udz3(h17uPbBM_dqvCQ|!Y$wAC#!3i;%{~DO&sBF{2UGMs%q} zsb7M(N?4ur3;CNuM4IgspZxC*EzS2#z`Y|n2B(|Uu{>!Q?etpl=ck4Ez5Qa^o`=w} z(!x-mM9crZSX%IqcRG=|1)3I&-|q&rp?sE5^QtpLxAuT*sRhek_51m&zg5}zKKMT% CM$qyA diff --git a/windows/security/operating-system-security/data-protection/bitlocker/preboot-recovery-screen.md b/windows/security/operating-system-security/data-protection/bitlocker/preboot-recovery-screen.md index 388cd58e51..392e4d725c 100644 --- a/windows/security/operating-system-security/data-protection/bitlocker/preboot-recovery-screen.md +++ b/windows/security/operating-system-security/data-protection/bitlocker/preboot-recovery-screen.md @@ -188,11 +188,13 @@ There are rules governing which hint is shown during the recovery (in the order :::column-end::: :::row-end::: -Starting in Windows 11, version 24H2, the BitLocker preboot recovery screen improves the information about the recovery error. Instead of displaying specialized messages, the recovery error contains an *error category* and *code*. The error category and code map to a webpage with detailed scenario-specific content. +## Additional recovery information + +Starting in Windows 11, version 24H2, the BitLocker preboot recovery screen improves the information about the recovery error. :::row::: :::column span="2"::: - For example, the recovery screen is showing the error cause, an error code and the option to review additional information + Instead of displaying specialized messages, a user has the option to review additional information by pressing the Alt key. :::column-end::: :::column span="2"::: :::image type="content" source="images/bitlocker-recovery-screen-24h2.png" alt-text="Screenshot of the BitLocker recovery screen showing a custom message." lightbox="images/bitlocker-recovery-screen-24h2.png" border="false"::: @@ -200,7 +202,7 @@ Starting in Windows 11, version 24H2, the BitLocker preboot recovery screen impr :::row-end::: :::row::: :::column span="2"::: - If you press Alt, the **additional recovery information** screen is displayed. This screen contains the **error category and code** that you can use to retrieve more details by visiting [https://aka.ms/unlockissues](), which maps to the next section of this document. + The **Additional recovery information** page contains an *error category* and a *code*, which you can use to retrieve more details from the next section of this article. :::column-end::: :::column span="2"::: :::image type="content" source="images/bitlocker-recovery-screen-24h2-additional-info.png" alt-text="Screenshot of the BitLocker recovery screen showing a custom message." lightbox="images/bitlocker-recovery-screen-24h2-additional-info.png" border="false"::: From ca1920ca1a4115f09847ca10ad3002933630cdf4 Mon Sep 17 00:00:00 2001 From: Paolo Matarazzo <74918781+paolomatarazzo@users.noreply.github.com> Date: Tue, 18 Jun 2024 17:47:04 -0400 Subject: [PATCH 09/99] updates --- ...ry-screen.md => additional-recovery-information-screen.md} | 0 .../data-protection/bitlocker/toc.yml | 4 ++-- 2 files changed, 2 insertions(+), 2 deletions(-) rename windows/security/operating-system-security/data-protection/bitlocker/{recovery-screen.md => additional-recovery-information-screen.md} (100%) diff --git a/windows/security/operating-system-security/data-protection/bitlocker/recovery-screen.md b/windows/security/operating-system-security/data-protection/bitlocker/additional-recovery-information-screen.md similarity index 100% rename from windows/security/operating-system-security/data-protection/bitlocker/recovery-screen.md rename to windows/security/operating-system-security/data-protection/bitlocker/additional-recovery-information-screen.md diff --git a/windows/security/operating-system-security/data-protection/bitlocker/toc.yml b/windows/security/operating-system-security/data-protection/bitlocker/toc.yml index 80e9036156..a34d5b969e 100644 --- a/windows/security/operating-system-security/data-protection/bitlocker/toc.yml +++ b/windows/security/operating-system-security/data-protection/bitlocker/toc.yml @@ -17,8 +17,8 @@ items: href: recovery-process.md - name: Preboot recovery screen href: preboot-recovery-screen.md - - name: 👷 Preboot recovery screen refresh - href: recovery-screen.md + - name: 👷 Additional recovery information screen + href: additional-recovery-information-screen.md - name: How-to guides items: - name: Install BitLocker on Windows Server From aee7a3bae965bd3063c3cddfbc4f63b6fa367aaf Mon Sep 17 00:00:00 2001 From: Paolo Matarazzo <74918781+paolomatarazzo@users.noreply.github.com> Date: Tue, 18 Jun 2024 17:51:09 -0400 Subject: [PATCH 10/99] png update --- .../images/bitlocker-recovery-screen-24h2.png | Bin 98057 -> 97931 bytes 1 file changed, 0 insertions(+), 0 deletions(-) diff --git a/windows/security/operating-system-security/data-protection/bitlocker/images/bitlocker-recovery-screen-24h2.png b/windows/security/operating-system-security/data-protection/bitlocker/images/bitlocker-recovery-screen-24h2.png index f47965baf29254af2dacf2bbe8ae27b6eb96cf10..179a50a84b18c482d396b40f72650c24abeea13f 100644 GIT binary patch delta 29067 zcmce8`B#!_7q*t!@nm_9ol}{qO{S)4X=%<4r_svN)SR%637Jz#4uJSnR-W^kS~=iM z9#eBf#UYeI>rG7rawMF{6j2aS5fBjg@Vx8$3%<3!UtBKNdY6Z}q+PKGkB4&Y@ooGd8bU{`B*Ib1F6`8STw*UWM#B7MdRzfy0A*zM}H2r6Zts z+PDQ>QNV``{HmSCk2M=_ta$a1x<(T!u{C3#)M)F=rY7+a-`R!V5)iYHaaFn>m{3Ac zLqeykTIZ8Lw$~<^{Wkv<6!C}$iWjSr(=FHR z^XTS0{Jd6zUoe{KOC7%sY*qu*)YQmS!}jnz0)*$M*BybFPsY-8dzN1hi0~GZKN>sO z4Rp4B$&;m-Q_FrL5-&eS1PW#{d=Ccf%9GO*NVP|s_%OX&wC`(9Ze5Y3y0%wFlVDB< z9_|Ui&~X8O_{N^>pcP%Zeaw<(R^m#+4F4#&^v$;BY9=V>kju2t4q`M`BCz=C(Foa)k3Fo4S% zi{U-QUzDVT(t&sv8)#C;Sz$x}R9M1nS#iSocZ5__0)N7s(1;P;-)(~TKJXU>=kC}o z+Qfq5H2RSI0TUW|`3Ec#mq>P53JgK6B&XE$tE&vDX0lQJX#OGW+cHY$XgFW|tmy(< zJ1j1*w+spIc{$=McAAK6ULFg{9euWMir~qtK8pc7(tT&dr)Z#D!C^bg@T>-n#q+oL zbZ2B|?hN0+e+@}e?o>98AUaLB*K3gzKs0lxkY>hvJh~m(^;{3z;Z}de_qJ15IDk)_4{X+eu4H4bMO43)|QvC49bn=%KGm!Va?mF<+VxGd&(G zY@iAoR``k6N!NM`7I&|2Jf~1Cr}R<6j>%fi^Cw+d#z{=(_x9Vr3g3KfbFVr3yx6y3 zN)LmjMIXV$+7ij-cN;KZdT(PB^L z(dgTwc#tKWZlY;4P+)v(5aH@xk=(Fn!9T137g+l@w9Mj0Kz3GOqt1KOpN7H%fb_e& zBZ|taDtEXin<3RE)vQVSXC*xD$(UP_rnlT4x8CU2^sFrynCBO$S$Adqf(I_{%9+Y* zeufZp)45aKqei`BL6m;ms`HZaBl1A-QknKuU#f$R7c{|YP<BKts`|I-UZ)N0WCDVa7-j4@9XLKP#Wh}q z;Bgz*?RD+ENDXWjq6q>t|0+KMP58VCa&4Uas4Da5oOGkS>(zt(lLJl&gPHn3gl3da zNbG21Zkl~rjdl|m^cjhWqc-?(j$2(3DXz2`ywS@w>pK5@GKAS*?3|P@duEHKHwE1r zP<#;#!!5V}H-?unlD%AAs$(i!jD1eBXP@oLvp)0}*@LRZ8i@ej4c-ZgZ}q|gqtSbC zOZ(U@gkIodd$Bw`In#Ktyzo<5LGqH};sB|o0Gc;@Zck6GG#Av&LVrs`*NCx>=|?+*KFD$9BMMlws$Hr;6X z0h#uu{rNSZ$P>Z`UV!sUpatP3el~^;3xEXL1Z;o0m2!DL@5pGWMOEGu@8?@n!sc>jB(jJ(}dxQ3~0;KoVyQO;@Jt4mNz#}6(>6J=?S#P!e_7Jm?x36@&28nrY?M> zR$W``mQ9@r=GBz)~elWxDeq5YIM zzA;+cJcpl|8Jk{w|Hjx3x`z=5EvmEV%0DG6%D1dV2Z009Ag_4_1bWuciP7*E53+M9 z%WngPuYxZIzB2@U`>5BRTM@9?9VltYtTSQt0w%xBjp|@0T%o^xpLUvF8UWXf%cjj^ zzTM>f)5rw}zT-vRZM&8$FvQvKlYPy$y*Uz+))J-}m6(0BPLAIr{@q-bP-N|M`_|Jk zJcP49#FTd+Vn2z7Xc~np91&?VVxE{xBuH%Bj{1CDyb!6J%A(W4J1;~6B)mdwK?iHG zdYVAgxp=F|;27kI(VIO*kE^QEpw(sw=GG0|eSCB?y_!}a-V-P2Od5OphLA#UK*x{x za=!bQNUwaOhw~-;f=}{{(zOG8;a71G1~NXg=QuZFtg|)%Hs2`9p|(AP1Q{zwpaR464=bb|L&eJ&?=WxI42?=p zkSt5flJ@WW!wiASbf!tH6h8z)0ChWfL>3+sIE|bzA_VpH72FwhnyA%7vR*vzO^cxQ zQtC}!<(nL>K3mlXT}}+C7@tYRGdzz+;4wP)=w1ZA=p~}tJ7emqDVh~UwttC_>=DY_ z6m!58jOR!^B7JxnOSB!Tozi&1qMbhyp;XkT!$(25rMJCfd#vp7AHWFrZzxxaxYs_R zCZ-_WMNF2$LW3#r6j9TOK|{f}v4noQA(^9LPbG%MzFwvs=m-NR(Hz5w7{b-6HsV`H zk{eidJXEFv>i6`4c^>kso$3z1f63D=YPyx)!~LrNV|Il zx_MTW0bPQEBw|<;{-1XKg-Ma%_x05mgln{`RkuAm?fda0cIBjGdJUqv5)1kh(3?J= zqS3_FYqZ+$_7nnm$AibB273iCt;g#S;$$vk=({3M=idG3T{qA1kvG|7uYI$;4^kKwr zm@eI}N96uqUogTk0K!N*S*#59$Llz*ukpcH7htZI;|X3HUwXcULkLR8J8zRVu){=C z0bG~2r&{JE2(A}u z?vgXG+(9XXAvp1*t`xWvj2DXP;lokceu?uqyOu}UF+H!sloKW(MmBxTlcqGg|J!S{ z$NJ9OzszR3e&AsegZ_n5YHD>;DpRa4Q%&vmrJo+7F8ZjOqWpc-fB*mbV=Iu|T{Lcl z5f$OuMt(}cFW_mHBmzhY8XHJH!JkS7L2S~F@#_t^iP#Yi-0z*G@3xf2hdH0mBaLoZ zA!uV>NVd6;x0UlMtB+B>e!q9YZUj$s6FJQc_j+7opEWP2`7Y=9P4Le-h0n<--Gh5qy!| zE`bawkt<0$Rpmvl0nRIO`UR!pz28mE|3unTx8i*H2)#@^R=a;LT8(>G&ePjCr0aTY#iwyakuaG@02P59DjPcF7e`;%M)2gFZO7Yi{7u`5dV3ZiJ5 zECfhR8f=(h`k2D~d@|58o2T?;^LI*s`LT;;v;#pzyuxCEn~`joG4(-KwgnNSq;>_3 z)FXrFaoGuCZdG}L&ll*7T+s(vBa-+?jDM|5obkOPZ(EiBW+$uVT#dPX{Ag|mQNt#1 z!nK*8X+l4%dEDl$BB1+LJ3(dxW@c zzVSAU0G42kp8r{q;bf-{^4ILQd7C9RWv%-fmo9NPROD~}I2_7qRbAi0qeoqC);hOc z<7v-YU(Y{pC$(%7+L30Loo1xJsnx zL6q@U_49yW)T-#0pUNnO)ofDlx2Vg7BXjKwhy=@^D(Yu zCTJC0w?Yd_TjReA%TaGwNm!Uw@2Hn!e>qC;G(<+>J;*q&qHl1sTH6MOVw% zjRWTlx3jN!tBt&jj>zvJ@-liudu$6mfKT8{`{MF%cjfKYGNK6|dWw%bY{ zNca=is%hqi8xfB9)M_}H`GENU5u~HcPYbt1;r)>dR*7F>7J}}VLwJQMO!2gyc;M8F z11FL)e2MAKVleyIdCf=pm;ED{UtfuPt!r`_15TYA&4sJ*DBK8JeB0SnaR+kCqbI8r znjdZOE`X;u7=ugva0{0wj3M9sdmb2jR|h|ucnro1@JF(d_p-l#d0!x&dDHCZHF8J# zzCcD4%&!^wSX}~UeT3DkJR+Ls_s;#W-E)h|6&m@s+9Orbo+CC^@>YRZa>YG=_J1ev zYcxfb^OV8zK;tJNbjnMtQ&}iO+Tu&Z1~8=x;ZT$kFF^c}m~DFl$bJo~S|*+i2?J=V zgm)YF(__Xl-LE`mTe)HYGAlNIte=dK%YKO?@Z-NKrcCg3zf_2_sA2IjFJ96fOt86U z{h;XUyFgJBoD{5v(FjK-0TS5Lbb0ENnrFRQSKBl{cFKz7@P_c!TU39|PAS-?)KHgd z_~Co}^+!BoG+<~!x3N;d7orWMpGRYI#w~rA+L-9Xyp0iBiKMnjS) zRG%3P<{wMrRKZ>v-%V^TUqCw?C*F7qBi82biDJHN#(Q&!dh^qg5KTl7F3-*|^Jq&; zK!!MSfsh-WMTnL4WYH~HJ=FuEYIak1e`nZhq6r-stwvs-b97U-{My5f3l$Mkx^b5g zIm78En2;hDjISMc+^0FqwrLhr&Jx@!YOwUP5@c6!oAOzOY-mepwo3z}lPw7ctspw! zjwiLEb{1~+kJKEUU5qP&M;6JN5`z3NbjD99jePS%cL3;6cC+r7aMOQTSZtL0+ziYQ zaBI6pa^$u3SfrcvpC{`o1tYVG;Ws4P-so#3liZNfXK1k=FuWDGkkf+Un(M2=Et#hK zH9RcJW$iQkx>-`-I-<_%5J01pTq)neyr3hi_sx5;TH%_D8!uZuUHi@5&=JvmeeaI7 zk?oj*x)ond=&~OyRpYj=%aNpG0EP8ffbDIb^Sl4ha7xdS=zqloF~n(@wc*d&0=2%LC&;6Z zyE62fqF&(>m2p7Z;l21DPi?r2Y^2KcS+Tf&%@<%6aZ!45k8^QAG85n)@geXR_1b*o z;e_c!j|)oXjq;y#H}CPc!SB)8lg?3;%iU7T@S6{9tciK=QZYb;Td;}tP-CUxeY95p z)PDrD_i0Ybj?23W7~He0`_zQPd>>HNk&w%hd>LoP{;ceXQKC5M%arI!5sA35)IJEt zBM3nl?B*x-3;jk008pa?7hj053>;6qmW}FVmXf%mB@XNZ^6+fu$cgVqK_fD83_6E( z*iGqB!>923qo`O5B*%<3dw;aAg@4!A;{ztm6UA%&dqpUAkt|;(`EcHMPyDSjNXB|Y z0nJQ@Yq@L~i1XH$_W7#}613Rh1ZP5fAorNf+AJqK0CnIh1G;8UpF?}5_pQCOkcFhX zo=u}iwM9Z+huN{~s`ztNs8C)tA91=!Jk)pWIOh4_4Z)$T1S_-j2um*M{UBuI8+*Yo zA?#&>VjGfLGj!d#h5MFYFG=XNo(NG2{=v8mTmVbNL^|Vg2st^HF*16-k=5EA`wMe6 zhXIV<1kM|{j35d#X>AEJEiy%I;t@LptJVK*5X09+IU{*l5XbyMOoZ1kN%XT4>N00? zl5a7$nGK^5rF*2?zLu^8&+$jld|ZW9PaJd|4rHk1L|7%6i3OdOA~}@Lj^V|4aXmVkBmA0?47qUPw(R8Z~cbtz15w?4Vhipdo5Lmo{k@P z{Yg48?NsEsImGCu?2tMqY$HG8^Z;1@lImjbI!vFy#$qzV)*Sd(kI;((fho(z-jDXn z3!69cq2VFz5rmMs#bQ1QWPo2-+b-f!)TBj$=vybQ`}H^uCNklOwKgX^p0WUYOChR^;yP*(S8_ ztE)4GTj1Q22%y|DIxy3C)swhl03!udP05R0D@TJBg|T^n{_E&%Jud~YjahK?TpxG* zn6K@lZ0A%m&H~}hmYBJ@Fqa)9aR@y*m~hv35=^M3d-O=O+Y+ra>XGuSW)zK<_4_Y} z*we2^t{I+*ldfY0b`@hfPpq zAxFr7HASH5EALv(ectlKG&<=TF846KSD5kL86!DE_~+vfrdQbz)RS{G-FbPT-Yebt z>n-)Y5ia!mBiEpZ!m%z;!I@@N2MQ$E6ES#LQ*d##$385(<{7j?K)h{@BwJJwd!-Bp zF?*m^Kse%Wlo>LEUA{Qcl5nlsr!DZm@tVNmw9K=M@;oq|B&>9;PA_M;qwD_ z1aE8t;?#J{*#*34 zMSut&dXsq;YulA>L;_Wi24dZVc1sA}Ij-b4Z|toowl|pZM?b~1+(4w2DKFhdDdtSX z@-KJGeoRihIuv2Ok;Kz;*8)K!fn}j<#b!l*u^%HidXF|x$FUDW{2<(Seg{~Yss|ru znrx)C3Pcmx!!XrsDSFlWLSP0?}oqFTMs3g%MtPg9CR9YgCF ze4NlUY+^jK6{}DL# z95pyn`&Oetb@H-7L$5R~AxMwe4*m00zQaA>MHcO~#<=}NjrL=RglbKTTMHmf<$HTG z_j(dH0`H8%7q)}E9sXJ)hJDUjfwJ1pH#=P-z2d*X5nq6-*8O?Uyn1gLxwrD!O`fZk zc59*a$$N$BrM2pB{c8=a^yo!;Ly!3Pt{+dw{Yby2{Z1y@7pTL<1u?(wo%Dmi@4kAk z@%RGQmsUQgv?SA;DK_MLMab*!L0XWVTc*nZ&1VKS&zSka=vLqKkdh6bm%{j!C=Wx& z5Nm;?M9R*+I`oLT2eE-_-R}G7`Itb1Sz1F-c1Y=RCtFTy)aBdgy?fOq1{t}P#%uQ- zZ_yq(3^RfTizkYMYCv$rU>ErITCo}VWo>e;b(W$A!>8}vmis*o^Xa!>vDn} zov{6;SdnMEi$JXZ?>%tlwjnb7%fppTH;{IAS+t=U-S%^7*aF$JDf_6od@G>}f-^SjqeB6D8(!Y7;B>Cn1$`LKBAdcfC z#C7*FqK^Q)FG~3Rpyi^JoZm58oLE;>==!rcSvSM@!*0JBxbun-Gax!}#4S9I z7sQAp*^8d}1(GG#MmIX^{!wORF1r$REBWt%DB>k$(3#Fupf%FwYfz8fg!@YGjjy8R z%F=rB#3+*8U;%)#>x^i1j@Y6lTwiNs@8KBHpg=x39$)%+z%dA;CuJS855n1QOJMbS zx#eUZg}zTk5$MnZo)YRqim6&Y3vrrZmv8{G^U&ijuprD^nx{7tZnPI^&;Z5T5p*-ITWDYzZb;V8v6(z!2c5g$rcxt%_BZ=AfB2Y z`EDCfzIOK6JK=`RqTe0KR|+%3N6wFX4_~VzRx!950VpJ6Ee~_LKFvJC?3Sc`*~Vygf~>0O_(nW zBPHo?ODH4${nkLuC3L6Bu#jI>bCZbGMqbP0TLhv}p%+S#FU1)P#Np`qlmLGi zFSDKtL>&yLawniu=Z0d$@(-$}`E7fx$G-P3(0}Nlv!s*Uo3`Dn|g~_26g8s4W>H(f1>1dpg!R1q zT9Bb}f*!D3;k9vc%2_vA_Hv$p3tXvLsgoWXNcynfEvO8%?a{n}W4bTuIP<-N_(vRl)SP5nf5~rp)9FptW{tgn%|De}uN;{aUqJFV3*-K>$d#WWK*ZlVEcxS``THc%gx=`*EBLTT&%dpO`w9_>|3EZsi|o0Fx&BZ({Q_uQVpIM`+iOt< zUXV|q^T&EBH`BMxpC$m&*V348PY@TF`h`iU^Ko|ltBBsEuqK=?C3ai~KFqh^U3anj z^)a~)JUJlJn{di7iR*WK|##==HIYRytfy~?(B>Fbb}M}KAp*IU3ynQ2X~K@ zj!hrqQ*6RcfDS8GA0y{bJ)ri1O#NH6gh$OH53#{UyU45k??s+Wz^#ADjt{k zeWr+-7!E8GZkxWhKn6(vPW7Ndu;F3Hcs5nYf&S_lTy{CqDA&tnV-G|Uo595r?ccJo z2>{nmI+B4I^tV}&e}R!t_$%7R4rarRIG>~uhJ9jJ(d>PG5^P^kyiPpB87J{?qdRBu8l52`zFh!2t^;vPO1Y=2w|pQ)aVLfeJh~)QD!u@oa)_%UsuCur87VMBd>3g@6`*iezBSz2 zBg4B^rT`z<%!+hpHj8N}4~${A1XUaPGhfvBS*GjJJvz<}~xBsdgi{z3~>4}IQ zt#lfTeJXGOtpP)4p_8 z6JVEajLDB?J*+4J05*SCS z+6tNj^+`JxGUw2lc_iXbJbTe`XtV@Q#VMq~N_v&6ldO?LQ?j;HrPVi<^t)i!BC!it z2rp<2q8zFe@3NvLcssY}M-yVF?;$A)<^`dGb%Q~a1S$S$3D8?pNUW5ytY|q&F{Shz z2bgyy-L=syVXJD$bl08ef;;5V=?mdE5>}LJI$cTh@-?DVW~4+6k)RxA6(p^+$fN9; zC579}Fg(Dv>&k)a1#y)h7B*iV{jyYASWaQ*nevWBzqBV+&^=6GO5K3t-2E6wP^WCg zK^swXOuyNQ7{(yufjIpr!&Qp9 z5yWsUrwg+d2b<&QxC%-BL(D4~`P-t`mc$o?Ma%3lR#~1*A#nw2QO~XdgBDTL5KaR( zV8&@|eayxlYMgR2U?DB_hptM-dV&WwCnOH0^@O3|-6ygLSD`NXY+OMVk=EV#sek8; zIO-~>WSi*)w2^XIDdp2K^n}Qf>3GR36O&-nEi6zAPspJDjb-)3C_j^x1TTI@m{N2j zzk8`gRu4GUu3TbaYb1odY_MuJZlP!5zph3GO#iTNR`>*FIAGYjoKwJ062>U*$dT3|>6653| zzfa@_#!iq%8FmEtT_?BJz_>u&Sj9BawL*pi2MyED8!AZ#?@3d=9zFv^0K1l=Tx;T7 zz$oI((`oj!sR7M4Mcj2shQnbu4ockp@PYv9fP}cXD@Asy=~3IvQjGAm#1PHb54|A4 zhXPUmj)=ak*MLuQwEu|tQaGD@UVQ=%TfqelCq2@8Bwg@v8HHowD!D{S$#W6munb>F zlx>GPV?egBLICC0CjQ%pgPgMd=_Z)Vid6Jor0{o~xEZJS(*4x%guexO|DkZz7~z}u zyISrqWx-Yry3~XJ?M8bjG6`X#XwU%!9|^fx2F6+6D?rB$MPUQ%##;E#qGNJf0zxk! zRfArx>%^jbXn7)z8Q)hKd$gukOJliUMtG993)992E(ni-+wrEdeX$0?BR4ebY+j98 z_#m$l#{ch$G>X(KL6Q#9MK@cY)m@16ZEx^l#d^Ig3I z{f2GSs9K?DZ~QnZbtI7Uu8JSFuqjXM7-2oy!bo9{Au2S3H}l9({$d50w#BmQrW zrw%gzI&>lE)GK?1}K z+a*)^>eA2+ghT&NP%@%Xw$hl~szZ`5ZwHkmK)9R(p6OzjB@9o#MFpX!uSt?d6&&&J z1sZvXfmGBc(5L~xhY@^Q`iQ=IH(TrKnJm9_OvPZJW~23i@NBx}Mv308!jQ*iNs)Sg z<+GjhSb4&LaC&qN3hempTGxk*vH&+6*jbc{k1PunT}sJ}8;0jL@kigcn$pLd*bjeA zS@Gm8QwFl>(MYRk!{7;8y-22=6*mFTIfr`@JZww+3pghw+?rPP1;U^QMwk7La}!F4 zTY8sAxH02aQiqD=r!L$;I{&W_qph*Cg+7$)&3<|sxGcppl zlQZT;{z)WR??E<_4E4Nu{J>Np&04E*XixpaETE0 z87Uf6WLrpOxel)OU((p^1FFG-HFDn#FrYPooH|#cwmL86pN+yt9D3lk;d_ntQ9g0$ z2mBD*$4Chio@s*44@UDfaFHZg7HxQ66tl^|S8Bg5iC8ChF4h0soU3uM#d!@2&jy1x zF{6dBf2n48*jEP2dvH(Codh<1*a zu}YLKVJtDajf;bu&F!D09Pugi8F!FoEY_K&%Q#b3+g@}cX{qxjG8O4+c&&i4IP)o} zTInJdsc81qvMAysFT(H4)d{Z2{1kj~3&8e?OPGA><%;+|L*}@irMU&(<&XDHN7B!U z;)u|jV&t9sJ^6wR0c_Ir8FHG8!i@cLJ<)~Y*W>(Xo2TdkS{9OHw7(F1k-wY2syr>39LQmOJfM!mW`zlwSSa-j#=xu!dj4& znkI|abSh$cEn%*MUA2!V=33YAyP+*V{Ql>hE*ow)*UVh$+^2;Q6)k;nn7zCgIyo`m zBX>Csk>}hvnnhO;wI?}4pZH$oeCZzsMS+Mp#!%b^lKU^Y^jWwZ4=$2@(_vO`BMC;O zIGLDNakiyauP4O`fY@X?Fl-JFl(??3E+gM1tY3_6pRGUHhFDGPHXs+PWk!(JNR59TwYLgOb^@b3fAF?pBhT~^+Z)Z; z&c*kz+V&IrwQE=8ah!K@hveP+A}7k_*mD$*Z0>@r??tb-m98Q?49D1($2PXpeTTUZ z`k!ytWvQ;WKRx|pR`(U6OUzN*pM!NZPHZHU=}sHtaVo^(Ew^-S6LN0+6+3lKh=zaw zsj%|YoYY)gtAU%UoBOmKL^7DMTrQwwJ6w`PB38RhGOh01%hi*tm|9o~Uq8TWOy}Ac zv?@ErimUwjF7RI?zrQJ4aO*}rh%@bVJP99DDVV(D5@nyM(mf5?(QKHCNzkLkms}T~ zmpkM#3WDQ>-H4J`(e=6Qu*9ch1wgtg#lj%*d99<^u$Z{QSnrR_+Wei-388%BfTA5a zGx5>ANQ@U}I=fHUk5AM6=|ZA7LskpQEo|FSYO#LjIk`7hNBy(=9@d;lFnW`w9P)5MqJ6?>c3;pzZYs|Jx&xqdti5E!}sFHCh2-sQKJS5;Lt&Hto!I>)a#Ih z?TdF`u#RN-=5z%qZG=o!29Aze{FcZ+S7d|fUFe->5nV%QlZoYnlYTxD-QhB#hY{WA zo6nKMr|)RpkWufzFiy36f_0m%}>{*uc5lVYyN%kubjH3itEz3N*c%t!4rkLP8;X3(ftnP*Fu_}-3*ws-> za?QprtoNK_|3YU+LY!kf_&4eBWP&uU%C6Sp-yI&+Q9n9*`Ap+82j3khiN}6fI8S&d zIJFw%bP$2ty}UAg;_~cR?8t`6iT$+PA!j?#O)LL#K+Kk!C!cM7Hgon42b=Nz$Z5fT z-M_{ke7DIE?=C9#&3?2n`pFiP<@-HsD+O``h46^eDk#4+YJNweAPDGQT1SoY`l+L7 z%x{aL%kr&XxOPm8TWx7Ez2_lV^dK#!1X353+%V>#^@!x4l`qRwKy03_cPLa+r02$O z8PFQf}Mf52R|pD2c>eB!5l>YlUtyDel#H0NRVcTv-)sfL*Zq2A9D`oQnz zh;LNGlMv?k#tg!{pqya-=wJlHCT>J>4`>thyVC*jk>K%cQQ_1jnJV!WQMq^SRS17{ zw~=Zr$B^)tYlQUW&P~hM!LIY!r7P!fm;M~Fryx*ATN!cxZl&G(S2b*i6g+yU8h)?g z_~LOZ{Dd+`j_7*wqc50L1-Wv~X4^v-5Z^4|OhH!>0;?kOy3?_qHs6_c-%jJSqFcUyB`rLYe^UHir%_ zzIgJoy$%gzWnVV9q(F|VFIw#5fS>1MErf*EA!h8E*?Puk)VyQ ziltXXP7#;iLZ`<8otY7~knqH}&iH!o72@VdVzu8NXX-NrjzN-eIUH7KVeb4JM->o4 zJUK4dKLwB)Tl07eR#Ev@qL5neMJpU4+H|J7TEi4h-aW8z5!|dR(>Y788A4wzIcD>O zJ?D6Bv?lW3r2h@B`fzXYiQe0VVq_6q;bY_KVgtO$*PT_t5~D$z>?oWR4;Qf-ugAS+ zTa;LMIrEo0Bl7FTe0YxCyNPb+e|(JuB7>+Szs#tLHx&?rXPl~Qy!;@CL_hF=;?gL| zK>G8Eb3d}Ki!=L_Lf(zGZfJJL<#Cd%BkkulGO-6Slk>$FjBJkDlT$X>x8Ek3oJa%& zrs+F9sFv6=_w4)={~G9);d-Al>#g}D7v59dzRqxk8%=yrF>!6D?Hzr!?AYTwJ5cu5%A?MWhS#gM6@NnjsNevA5&B) zE7bTExdERmiT|vr0odyx`KeO=vx``2XMpPced}aRWuY7;o_|}KhDOfuIV7C|VEFQF z2TBv_rT8Q@nl3Qq*+kr#5J~2z3E=S{`_teN|EE*1Bu?Q>cTZ9804>NqE&^i+S{wWK zqwU_?)v%2X30%+QPFdW<(sMzTFqxbS`T?PjB6f`Q6iDGzD z-wxk?xN|9wqB{WsSQ8!jM|*ILzli@HmzwPxmG)5d4H{Le5wdyn(*liiDs%&6nP{AW zU1MJP_zZZc;=FUkx5&`gyoQ9OCR9SJ_?U4xUdR!E-^*y;`FEP5N%j5UhMRFgCkwwf z?V+O#*Fu~Avd}78JZV#Egp)5%#6myc)r@+*xLV9l=h}r_$zd3WkPyFFvTrTB=;Qb+ z)g4^0=_GGs$uFd;YuNva4S=8zw?mpApbGN)x4nqe?Bkex@OX+ip@ku41TyLooDS?_TRxE!aQK=62~cK@n_;E_^v$(&bW(&gf#pwEkL1 zSSvl@3IQ>9KYtDz->0J3b2%zCMUCy54f9Du65-OpJ!HV-?H+)pDioJ<;?Bn?FB@FX zZgp3~HMlMk2e^AJg$=%URxMc9B)YRM%PcZ?(IK5uKV9D!ZZidy{P?Ki1R@0>t#(1) z&V|td83=HI2MCac$OV*;zx~X*l4+`0{v*nJ7 zr4|xCpi(>}H07$!%N5QnP=!T7o)xyNOP!w_GdkbzWCu&g?la^#R&rARS7SZVV$+dhHif?nwTf;b;P@}c#{cVKJ{-AV-2T4`q@-YZbBlZk;G3Vkbocyiuy0Xw zSOWi3STYlnhL?2=KCtL`xPk7(mj@fALPU}6DyQ5N^pOaqj-B|qeZoNdY#YZ#ebhUr ze2mi7dA^7&LKv@5=Er>}%!T=^zsS&*hD7W;;RLpm^^FtD437)5j|&t!x-tJJn#upa z_3buQf$QS^zdx$g{f4U7R8K^`-K2gPZ~>`@Z`@3JkQl=&h4}1Ta3(1DQ3-q@ryx;ybUIT1mAR=^zgDRinjqqep%bWtO0ig_5%E@aa|xW;%|>1Yvw1g8 zwL<9OC>~bj!d-(?>wt6|J_Hkzf}Eot-CWSAB0v^uo7=dUu~AtY;5!xKY%yppC6pFVaX5dir)NQeFqPbwvj(t3)E?ezGW2&pc(4;E< zd8*#MUfr3Ps2}w|HI*EJG8FQS3ucQR>SJMRkdi@rqT=P^4bxt=%U~~ zZx#v`TSDI-VLo6HrTm8reLuEaDD^RhiI|a!7bDAY#ASw*zb?fg78f6x zeCT*8@?U|*FOsTsB_3Y9uJKY++a+2rNP9OBc$4TM8$+9nWtA1HZh?GvIHei-6OrhF zY$HUZ6IMLpMy-Vi{`XM$K^1lz9&k0Vk{5i}j;(|MAn8?kTqO7#mb?9b)olBDYlGAX z?pLdcS|xQEhwYxC=31DHsft$c?FA+RPMBZp3pVn;FyXR(>i15h%s>y2J>30Yz+SV% zUu1Gs1mkK5v&=9paj~zL#c?R3r{R4_onQtj&V9Y5ASAJ!(*rSC4@4?|u>{t3pY3bLLJ+fIl1tp!Ze1!U~OJE&bMppWi7);*ludEIzN`-S5uOTA2Oi_5Lg%a+G|x@wRso7@QlUpS^8VJ z*kl5#EmGx42XubBSdniP=ta8 zs9l$ESV(M8U{>?3+Ar%WvfAW7C&EaK0uv~8oA znw6PpT56he>CQ@1OLrR1Z4+{yau)9_%bs$m?LatIW>yZA^Ms`BvP7VqP*KqoQ4moP zQE_+|?){v7&gY!-p7;HHp6B?Nzzyr>X063_eXrm3WB9SAdsE07fgI{0Y+hsLyUt~- zbGnWj(U-oUAiMR3V(E<;)+-^*42f_*a~Vmt@n~9D?W5-9pH#H@4n(w=sRW zQn<9lw>;FWUUy7uT#a3s_;FXIOJfm$TVGxk81cI=PvjXS0itHICEe6@-MF~Mf){c_ zrnV?gX2y%mXn&-hRpDj7kYE_)Cz_K})V@ufuE{t7gS-{AkGZIaJyymju3qaa;CFUg z0K)5M3|hYtaU?;jiPP)+9BjIt|7%$bTvbYioc%ie@B?pNc59`1<4f`2u)!W}H&D&v z|506z?0H_g1?sdYH;r@_ofoID`BreQ3f|UOD#Ot75~kjEv3J^P{9AyhH+2w8I<^u`O*i9!;H_WIVXzQOY5VY3V zYhlJI_$7lYVQp3M zsjPu>4tIyA>~a2h5NCVwo#vIP9ti9iABZba;=YOW>K|wON zjkUMH>&+^~55|P&_9|aTcp*+$FtOt5XA$Sd8QcUf%mt_GyWGv1K(k%NQ0Ubbnt{kv zq)S`6C!vnC)Xqsn94yjENipjINMW{Z$-5@G$_ev>p-+J-->4!C3Qd_)X_M>*UpX|t z-jZ3FHIf}()rwi7cHLdV_}sJKD3bIJ2dRr@)$r?|qV@R_qEw2#1Qd#+^NHn*)hxP= zdxv9UluJuj!V}3q*^!)MO?oanxXfNSnJu-3pyZBN1 z9WoYLAEfAJvA_59@Bj`d9AN#tX3_HLnXW^?=RI$V?eb>x+KbJ(`(h;28o*N*s-oUD znb?%(r?Kj>Nt1F`ebZ06LTBg4R_`%&%G@Vg-A$iK`s%M8P&@l#b>S}lgq!Pd!E&&p zP8^wJ(ZM)2(0dw9FU53x9lEPa!L$^lY4a|Cxql*U(9*Pi>?x zddfPs_4>k137~0SZT{p(d{$m$-9`AoF+_RUj#uYkc{$fyhbpYNo6z2zrK#(O7q=So zay|2r)yxt-%8pTbv8|+SXe_9Ym+IxnuTI~~$k;bDss7=4D=jt^uuE!llM+70uOlE4 zk&iYh;2f3}PMce~EizvrKTLT^(Bn%UjfzvJo~m1=NnLnEDbmmOy|MoJ#&k{Awt983 zTui8hq>PD?pd--XnDii0IBy7IipD*Pk&QjUjjt1Dhw=o7yg>(qw&}t^cDKV3#&H;_ zM9FcX-+ER07~jdPkT=);MY8i{InAFL)0n_zv1F0}AtZkM3RQKb`zk9%q?AS(dF4}h zKa%?i2K>7*UJe3v|AX|Vk+wlz9L06@OhCw0a<=Hb{;LufL*;E_$m;$%a5{TcI%dd$Ny$|YCUxkx6&CHd0_JV67 z-B=2<`qKtop9&JP0$Ng;WRt1Rs9njQTq6w=Ck(pW#(|>MuR4_yvjzQCw;3s#)*eSF z8B2)lM3fwx%ZXCnmml$u4t1W>f|>Q#+3r^NoaMc0@t;BXQr)7ThWniXcU!)zH&nW= z(2tDj-wNY04e(xgYI&-U88N{XlB-JP9I%vE-j~g@xJ!{z%r%PO$$V8#Lh)w$Ges5q zJ8M++9;DA0c=Z|5_iDEGQ#5)E=jFEOhK8O#Q5twu?~ioZ6*`jM%V2L_uqAbV9b)?P z^zk8Kb)(-dh{S$~N2SRw7gI0Q#lMiZ!}1oXh`KxiQ)KgD!dMNf)NeO*++TMitbT7J zER0n0&ss+YjST`^g8mbiOkB7$2V&kU5041)4xb{j=wULKw%)A=EJyp$FV=MmOLO$F zy7FIdwt;R;J4jzq?!?2WT>{b`w9>WV#(Sc}M9E0-R$Ge2y)dZST+!js!%EXejGC^& zydJyn%8#J-lZ~(150F?diCgdDc>+Dr=CfGNOJ2Wp{hlq#R(;x`x)9=92}h<$vm?c^ zjOEFlufWTppY3dUNwR!Z58YgIzj2HUYRl}RhMv*DtRg8bwT2SXR}Fjjt6PP${OxuL zP=m>?YDWyI5Jbt$i9=IIWRAxQQOvVuP#DU0)VyPGtjl#wKU+yDNY!z{)_+r14T_7* zeb#Ms=I6n-i(lGf_i0)+;ShVu82WAmqNq3YIzJ&1^H`ttd!MUS5I>4NBgi$SJqXWx z8=Qx!{rJ_dH@ULN)13>J&Lv*TWdTsElCdj|;&05YZfi!bJQPCwdKw{l6JHm~Tvpst zypd#t9{@RLae^PKYAT@R!ODe8L451o*o69`q%~|{PwxS8pJbs6asQ$Knq3kWN+u;> zpTA!0Pwvs<2A!99U2XrlKgTr-UPCSPJC~X)_Esw{dA6mx9YhrEZ(FS8w@b>uv^(fkaDNdbjbhChr z(ENuRM>!63v|e2CwNMI*;=o&c{@g>xJa?+Ut~so9p|3R@cj#*^DCoaIhFL5`4BiLf zc*1+k&n_(!?cdd8Na@EJ55memz;U_~Ipg|?UK|FyJ{4jJ6#epLyNRo@4Ty+v)tJxK zd@qx^=|C1 zSH6S&oDB6z0_O&g?d)4xO4gaBHkZ;+a6z6sqQgI-5o&pnll@FicVrxHK9Zd=SOb|7m2X#~{S&j5r#CweWaJN%u@up4Tqt4Y=Wm4BXRU`_5+ zMGnieKc)!Z#zA^FDE~^FTZkfi3nt5WiU zx3AYx)7&L9DKC1ZpnNQHyUY;KgLMm&l(0B^?5N1i2;j7mH(Gelw)75}eZcCwa-oE&KI4^epZ~7>0#wjOcHztak4AhHr{?a(}DP zihnh)>h&q)g;0_UT2%i5Rs#Bx5(s6;c%WXDNQE(J3Y_A?VqDleUd+3$a zL%SMO>m&GGxu4B!JFARB`|X%?P|IhxUqhn1AkjB>(jHCS`x4B*i>atg?sUT2u5N(* zGXp#^|Ld8{)^%U+{xV6w5oJPzh=fIT7CJ9NDkRFasLuA?!EZiXvyz!Xo~flZ_;HwT+l z8EI;7W68dio5@MeoV)HYsGmmvZMUjpO7YUl6r-*OIvwLieHWnT#2qLcJnS-bgmndv zx!lMvaaE&G0i$Xd@h==SiLj*J=(*B{8e@Bg=8vAm62tK`J%+7J+3(r#K(P9`wf`gt zKA4TN*DWt4ptrC&3a>WS6JMRYV_LPYDf}GY-V{>6oI_gn(T%AKCq^_k;;*;q;_pS? zUl?8fV)8}WdLeToOuwot>LD`xBIx51(m^jtbhv$uxVDj3iV!A7cZ$6Ky&jCoqrn%J zdWuQK>nK349fd=P5G+O7&4yM8a%v*I3u|+KC>jGpA7HX*3Y7yy;1TmqTxa7r@DkfZ z&=1UD@_YZ0>iE`%w8~WxmX|X-v!N(YVe`}iauXUdgPj+uS8^(+n8I<;?dlrXO?`90n3{KX1^7=Oo**P zv(>8W$NmyZ)HVMOq)~{#^feHfys8KKwc=aXgcd!6K-mEZV2<%Je_9AN9Uynq3d3Z# z@T@a)0Q}5o7W}U=ngUo`>QO`l@yGA{x z=mL|umgUNdQl;EL3;BNvkO>AZ9!|1jL`~(=)|Ohr^0I;6gQ^_?y_25;pcJJ61T<%U zFuW3Q5HTGE zZ}b-XG-!Bg8(sxm3ex2T3wO=vZO7t|cY;IDs)6>3r8fMV>H^7MR91-l=l!MEiIy|h z_eXP;SFB?$?8n~_iCw+ED`MYbLB$&+fQ)DH3Db3bznwQD0y~)BcxJXovf;6>xhqlg ziA8*qfUJaX`usYWN6`=O-*y%%9??s8S?>dSA6q{ck4Px!W^NJI_BhDo+)MBW6Uc+S zFxD05Dur8GV6qIF&!-PtfK&Ex-UjNUO|v)(z;K%m5t6!uwmGXRR$>uEkFnY=$4v?c z!y-RU;N7nlT~fhjD`zVTMl>l#Pcbt`^P(mx#b!lX`-$UGQ;C5No3RZZI}WV*GdTRI zH7FAJG$AS4_W7uHF_^C_EBDk)?GrPzt6~?m&Tr!~AM+hn{RTL>SKI?>t8K^_0j>y& zez8%04O?>{6HnBw@sr)o;U%c{%Y>D_m`~HpcZ{JDUAyInpSOk)$xitV6;}A14BztW z;j}g}p`M^#5dxNg3Bm>Uz8X>jslhzasNI7)2T9HUoo#6uIobIfz+V**izZN77v0X9!5D_dt-bU5J&(DZEH$^Ei*TU}m% z|Eik;rD^Hg!)5&KjcVipD zMX)$Udbfc3W%d^l=Y<_a4`)PWCZ-_g2;nI0_?BDSA0eY!YlXgtUn3f#IZrU>zGlV+ zHvYmomxk*gmw_jP59?>4)}{zD$ZHNS-T#8JGtKy{_NZpXgYwFdmI9XaRPn7`Wy;Ls z2*`OIYEWkhd+wZ;fg5Q$O`=AY&8>S3uj$Nm0{DVGgug=e+XSBu~$#>;&>pST=!Y<7!pr#7V$CgpDdQ5<; zsc&K`3HJ+79mKr(3Fvp$ahbZ0p>mhtHCZ(*xBoG}n!R?XZdb?$Gv=|LkOAMi6si~8 zx4|ipzQRs7HlT1Db+HeLr!?8&Z$DS%P);$D26@SPf!$W@GXI9#9o3$%6etDK-uO=? z^uPr}=djh1)>$kC*@C#ik9t_y4X3HF>)FLwv!I3YZ_$b&vM*YY^&1LvF>9;B1 zy)>smJ;>P@loN{;(5*UT_W+$*?(D4H=dc?(`?+4N@Pz~JSJ&K|SOut(x+zjSK-MoFb7!(fmS=JHA z$nF4Y1nuT!*WG6+j9=VciT#Ne1%7)C?s+p_vsSsipiGS9;gOROp#gCrwEQj}t%}Bb z-fGHi2J=>R?l!FX{KtAAGS6 zMz!|vR?0YM*r0=sRS_Gfn_5ALj;qm+o{GSQ{my|&qtW82#|(U$4#$Y z7ID7a!;2&}2GqT2Ut8^NBQw38f;K*!U-+g&iJQ&}8c!bOKD)3#+w=2#- zIk~4eKvPJJUoz6G$fC(@y_va8cmmR8cC4QpEB!@S2A@(}RkOhgu#0wW7?Oz{d%|5w_k@bghW9y77L8*b15c)wJeYu|-AB~`@Af&V``{owQX7qUWe2Id3rqAYz>ekrsSl=#9AdzxK zlS|I(P{Wx|SM__!iaQc31s^N(o8s_G@ZRY};J!(IS;kFodfMf@w2uf07$=A#C4SbA z407q(lfz^8(mJGixQh>;aU{7V&mS+hd$Kq?Llf}aBWJD$Xhj2SrPXlFru=svfhxm&VJ*hN#=hFL$>s zsZ&s8SeahnR?=}!2O`ImEmc;OaWm%7!`10U!fP?NlKw7gv`d}lI+Qi49gf3Or}{ED zI~;pZp4`|B&-$=AOeRIRQ`xu)H+q&zg=W84v$gC*o5)qO{H8|*l99+qQ$s2a6$(WNw4&-hd4O(j;345cz{Bu%Jd;{bF03_NdYjGf2cG2-Bx-%D)YC2>nztnjm6 znxqQ?F?K-7Zj&#;BRCXs#l1F+pS+tQ_5`KPKhUZZS6cB#m_MJQo@6}Vd-n}-VfNBV zDEB)2V`E^yl_2)znw4BbVG$|RrO>)ERgFvzwUpcU`>1NOGv#z_g)zAyAxQps(%LVW zXBklTPrJO$ze#=vO2t5jAGSRnwaG0kk#N4(LVfii1-JgR3_tEm4^xPlCcb9uAF*Jn z;C(69ae2*4=?BjY7*(92SYi6E-X=t)x1!;ZScN4;-KjlU^hPe#)ZJVAEa@E6fN_%H zH_@1RNu}A+Q8A5cmza?j6qQ%bBd#1f;|S4s_P2Y*?ajj$-%s#65elR?Qhidf;|bM+ zzdD4UcTE<7e$s>Y9}jEYYbq!?o1)C??`9a^9GB}B`g@~RT_6t{^k$}F zelu~W*z$7v_{ncPdDRdNODK}gG9W(T1i zT^pe@L)rbRYNM{gS`5aaT72nOweMp_>z;ca2fkVauGH2?7P9T66Ns>dRHsgfXrz9Z^fk2^}(HM zyLjaU=~T3<#)yBu!(orFuA1p51NZ+pv$%Gtg z{47(q6v4bUfygY?bvqm$>lUifKN5JkKa_NZ7G>=`-Jtqh)imF0ArLn6vDZ0<+PWw#+8|VGo4E)8+U&v_j**hIKy$zH{H+aDu<=!pGE~7f!2t#c( zHVYXFnz-eW2{Omx&KmMp^f3fXe$!pvoB(NqzJ!1sl*lbuZ{t|WmIb0?5wJa*dYa|z zNK@!61nim^W&H(u4FUTNhCp9K!glL#?>^9$hb{6So|=>#fIzr`UFIf#nX2~Hl;`~5 z%3;@T#ZtZX@+wa{9=wr9X~N_^{Jd63t6!Z%zeB=&#X!LTt#|`=8B)Z4DA0=0s`yRo zeAdjdir=?)U6h*voS1t=tV4F+v|Qyev0m9oKaO;*d`9!KxmCI>5o{jlrIqX6jL8xcvHm^3VJ)J7ZYC0$=3;5{vhq>jRQ^y{8GYzn6 zl#hFAh)EhId0to5=MgG8ev>RD=!JMvv@?5^>tARmVc*73E z9MJyWFjY~FBj_jIutVY&5UCga-WwJN`-C?2f%(C5&?P>w)1Ysb?E^b18bLwJ`oeU7 z*lim*t&jfI7iKKR%O6Ci`@&4bfjgrEy2lr0cJgmgBGCj0qs-fy?!ecgGI5fDxMgV; z-{>t-Y*_26DcLTG=;3`3`PoP)_d;9y!S-7Vt(?q@T=ayJ>N*G6-YugBMimj5?ozwV zFZoCZCke#{63glK7x7d2=os?e%>oIIc1%4Mm$6NIgkv#HtshF^D-~(DOovPrkvdM;3ML05(=6aG(G?(2b@Bw z0Wd9CGFmDS<_>E`2L!?n{P^xd1@j(h^cea{AWQ)Q0z;>D*RuEn@#ohLbs0tu_EUXC zTiV4nlx9|;@IHxD@1bos30FGBrr4E?@H&m@y2Q) z?Z|$06uhiXCVXq@+qXTV?hng-&LPy@wU@PbIB;~hZi&E#aM^afX?x~jw@GO-lOr8! zgM@G=zR&-FE}^B+{K2+%EA0+oX_>G}tr=9%{##a0W^=JFQD#BEGv>GUW_V>#D|Ugh zrw&mz*Gsbne)7(TsLf@760 z&wN(6H~Se};*b6m#ZFZmHmzQ@nHlN+9hzRQi`nt}b&;rJ+Le~M8U_zfk?|nQXF?Eb zfxzlxx!OUg113YB`T}l1S4sV-_S^ao*aT;NQ)gM97t)r3Bdc9F+a?zx>%1ra3mh$< ze-5`}ncqriV>D)BsQ&s`{mkI23pR`>oUm7sbwE&T!^%c}lZ@ZqQ-!TUKz*T2f;I(; z%kt}b*MQxV=2;^PmuOEyYFH&vQ@~hg*5k(kw`==RekPkkG!mET1L=0lbRj_=uKLxi zdtMX%GNM1O-q(1o>WKEKPSb%PkLato&M|`|Z_2eY%!&!)TG2iTuByx^EhfIm9RPH~ z-c-%8TIWfq1n)P)xEg393X!5BAN=HZD|j0(l4#?NV}n&)XtogioX&ghN=XU?lv$Z*&C#AYV*6%<@- zA}((<2#M%iYq6acq(u+wFrYWCiH~6&$qM&1nlCK)*#!OWsab)a<4CG28ZUf%mAuNj z65~|uK3bi)j@WT=C3sL*CRzu1>7=^~tjBh`p}xjQ;)?xd{oSCuC2FpsF>cLfFewmm zRsBbA(w>WtGWkdJ&b2!+Qd7*HhFXaA*G-N%yRVHdpOl%)gv05z+DD)~-Dn{=(Y0Jy zGd}L)D4}n;iq;MLfaG^K+w~6}<4Kk#4;n7zU2yNx8KT`ZYEb9pnXoXs8QH6baRCy= zq!MgF&YjP5J+3I5GPal)`ehMggljqTX0yms5gM)K)K&7?BI(i~WI6igABd zuPVJ!A#=@`;n z&(LdA;F23{~r zj{xbZyi@Wf8|s~BAUw^|I#o9zQy1m7X^m?jO`L56{gFo80m)mLm%JVa`RtONfbf8( zWVL_IZglsxaAF>hA40ItT)mxUmp3k12PY#HB0w(s204uosg)ObnYVpf7yTp0jzXRY z3o+?P5wzL&3!cxJfSsAaOWsc8KheATWvYD2GbTvuLp6@_TUm`ugzU`F`PZqE?-`L= zK@hnKG%QWmW7lh?%yd1$_z4e{r;gc4tDZxYBqNictH+KqAR~fbg#7$j_a}W9Oo%>Sr5+8WlVIfQEQ8|=_q zVE;@r3Y<&?J4DEoD}gkwFGNeMeogS>M~Fe&2=D=2<|Vth^4z8sX)|8T8nZentHE&8 zxi;SMwUo+8TIEies}b^!r~={ySGDzI<=)f#vgQeF^1yDld|a-7D@SOS{eI4nE*&5! zra2xj(p#VVv^_3-I^PuTA0cs8D`uh+eLoDQzOAP$!{Fkhsw)+#AyX38BnUKoHj09Mcc2QiIp$UaKr8HEtZ_rR84LKruEFS$8^?=NV^ zW4{V-OWpFCdAIRA@L1t~^ta=%9XqZ`d-M?h0^Hyj5kGnD4KI6DnZN1@!aKoVxY3{Y z|KC0Cp&!9d1PnvI9I1e*!=fURsYI_-AXK;|^Xk^yo!c~iK6gY(zR?(_?|;<8{D-e+ zUWs%z?-C&|8du6V-MugNpad4UM{p z$bK`CjiSK+d>Hg!Jnr9h81$c>-M?$pzXyf>57*@1KkDCuLjT|cCx(0^^3{EJ8Z zdr;^>T{(!?Ye#TKlL^BTw<4 z@5a~}P4DInHtxf6S{sKX|2lBNTOLcUS<ZgCyZ>2G z5fRBN3q#>RL)=P!>UgW~nwy6T_=?+j!Op57qZB-n+mNXNTzwE1M~k^Ze?BBKqf;^( z8Q0K+(;19-GQ?+(uoR`855}4F5FUR`{O1WJMu0x(XzenaR(d3AJ&^EnR#Dzw>w_e;&Nf*%w)X(q=2C%G4Z?I{nH{mX@Z5V;uuCr_xXnaW{K9rdBFs z4pbgBCn!-#WhgC86fq}K6f{K=L=*%R1Rm^nzwbZqbHDdL&;5D!ABtP{Ue~qOy4Ltz z>8jNa)vF)-=@z~9uad7C<^Q!MTYtgkC)!^JeT?+Lx3WPC;hUTy@`IxrNFn~+nEXSE zp^$$J8)l4ULABYW1;CN^|vvQ{;;laW6F&QU$ecic6hh-CboX&Nvl z*uk}ZpkNr2>W_afNKe_YYuk)BI?>El7x)&p=;XC{W~#DjQvCG<>@OaOg>wIW%-_g7 zcp?5U-hT)&xPD>2)s0FhXnLt$rvvEd=%5Qhw+0U*8SJ`4k6E&>M&a1qIozFPLIkAw zQ^Z{c6wiovUpY>{JyACeup9-`rSaO&NG!%F;OYVhT29Lb?KMIROs=**GRyQ7}f z>r0YOemn9m1Rvk7#Fbp--P{8)0So#0$7VX& zU8dco8=mMKg4(pXx;UW!IW;kAPOegis(Y`A@_=(`aYBhYTZx}a@r)=NAAH-C+|t`q+LM?H z{ndst+uCH>Q#$D@ySFv%eYn3Pn~IO$6Ax)du@Ai2cZ@@@OHGKn!m^^#)f?4+Pa3!894H2PG+D!e+&7mhWvDZO9^0}}_D!(TYWT^>oKZ)@ zt2F+fP}#8F{V{3WmnJv2g=dpiA6~JQh|{1P?sZPUc&9M#Y=H~(;kTNq=~t+u2<%rw-5JxCJnPx9YJI?%pVH zqWS$6X6^3brcfZr+?}nyG^xIZu7}vuz|m8pL+OsttF*X*yz=Mc$d~Jmg5kd}G@e=v z_r1fMK3Jf$u%K=k5$?i1j0ig}tX{>FpzX(GAjeRW7?PXt_*QZeWg(In6e5ph0#bK7 z5GCXe(3vO1P547Ut15>7!@07FhuG{h#6E?AZ9Vd}AUU14!eRh)9kK|V%Da^XX~ zh$mu3@$`uTF;Q+lbBHpvjeu-ou_B8Z^x>P=xdp=g9)FhE#E=zBc{1e8Q^s3LLfr8- z-a;+oZJg&1J^)vC>%bzQP6LLS^0hFFpmv=&*}36N;{!P+A*jnIVTI6HV94y%S%|{v z?$RK*hH-9N%^;ua=VRnAXSOUPHW6=neFinP!UybI?6-gIuKI`@tO=&oR5-D5x9nr` z?;YrswTGnF6bL^EY^Rq{nZ!!7xaxjF0I~=pafvnoSZ=`{AdK4!(aFa(u5&&NO+`Q@ zE^?3Zqo>`kD=@i+ja~2v3F|Du?2wByw4e;Q=HX(-ZBwdt_kH?Yg|vyKF_}wM`ws34t;Ez07{*53r1a6l$5PgRoJvx z0ZLF}`?b}<_>qkhp2{s9A}0sXN*1HzMrcC~gSRh!^@H74 zX~J#_ z!vzVr1(|YVH$SF7;cUsY!MjHOk+$bG@{w(C%*5&lBwf*oVBBzwb^W|{|6o&+wen$E zVaYm*Qw8H5iZ0VK$7vW0p@GFAMktLmc_6y$7=hgyJzbI8<{6oV5Z1OenE~a*C}`dc zWfsoX>g_5#_W_VTh-sf$cUzKN-n43wyeAdT<#8=Y@rDG;0pcrEX_=D@?(X7byF7m1Zsn) zYTTu_WGjh5sm-DoU?Cj-{t&*;V?}=7AO7SVCb&a401+{Fo=$Jk=Lv$ridvJ$+pG{EL6g#n01UWu3!Y zkSiJxD_WduH-juh{^+6TnYMh;iQZPF;#NX%zcPmLE-lL5iG5EDQP&r=d=``jai~fx z&^7N|l0lSTwFV0!eT2@Qzg$#D_4UX^=E~PZVXmnWt&=|Yv?V>VUVaa?*qg#AXkiAl zEq;%uR$(y?169PUp@GMR2easO3zYC}mFMH}=_c65eHvF|63k(NM3__#v1%IyYZ@g@ zwM26G44*s*J%z)>TUhGk2x?<|053`qrY>>=;HH^rnEJ?go3k66&)s9V%-$m=h2k`# zre9=v#2_ax*W`kmct&5kP44;hQbi}fZ+t|gq@c_-oIO6c z4*rE{v;LY06rZ^D<9z$0FP-y&S&?yDl4mwoNg&EwBtLX$QJE_}894PzJzM2Lz&+@S z2dzwIMwqfUl-7}lYoD4FVjGnD{mGDjj0(y!s>6}fHUEKHsKXTcFl=Jj^KU{XtFt;? zZC@_FqQPAmPT!kkt(HG8rT!WN4%O8z{(bvN9mDsH9-DG@KeF@4%J%94U`JzlyJeVT zF}0`8H5DCG?x@+71i0b07CqGQ|XHX7n#1qpgc@c#s zIN7Cj@tie3P%C$_-Rpug5D!1bS$Z+<9nTOkmj`@Z1NxTuQ}d{LxIo)F&X#(+Wz z=DYy8?&?M;gTunP;X`B%6`tjHW!2(B+hF@aK>mm?;2=lVnlICSlkw9n-DfPRT=Tj} zn#ldmC<-p?2X_?V4enX1)|if06SMjWsf0dp7=zqULa6e25TulY=4kb#No=y(%)j`r zrJSFaU*vhRY-vmgNR>bS(z0SJ!wjQ7ri;R;j_IcUzdyhxp4FFhV^amC+V9=UW+8yN zE338qmi?)RIe$QR@8*X-mKQB}s!!R!X$_@!smC!SB2%W*l9)@RB+BD6A71)z-+Vs&6dXQ0{?l*%7@3_VzqSf1ra+ zNbuz>_W1UD7^w+-dKx%17&&FJzcIQj-pK=i*T^CyGM+$6Ru$#j;u}Vw* zNW((t?WhX;NE`$JjWT&(c&QMOvWMf_G4Y^M=I0nv7hBqvI`)BAc_OGb(F?Q?KYE8C z(6}i+r1kqS%yDK4wV)UPE?Dnhc|w~yq{3NRK96Ym>@wfV>MsUwDJ}dSMJ6F-;u?JHGVW;0w^@v!$1`Cvkz_E0xBc5Rl2h)DQ?MG zFXKv7!L{;7YpwlheO34f?%#b9rg}-NczYZVI@?5w&}We5^FM@?W`13K)P=xKcAJW-1iYjF1f#}2U~yB*_a_&+Fm51)rtCr}Ld;cAIRSSh zu37Fg3l_yKVCYS{rb;4DPXQ8Q{>kAzu?;y7Y>-Rak7u>t7><{mAmah%xUKLj1ut;% zpeUvNK9tG{CrPU2yIm@WBd0K{nFU1S!(NuA%UX3@r?b@gz~*P2mqPF4*@(E8PESg|4BddFQdXY1Nmlb~grFWuI&oB=jQ|7sId3&b*-U&dXzo}i8C5Bxlm z3c(T#kM6mmoZJd{qqq+-UO$bu5)iE`8%^GKy@=Nxrw}Fx$+W%3|oxd zbpOxtY*$C!kU+g2yBE3gz1&7#sRy6A=w+tPU*9|s!EIEl%?l44aJzs5HF*jQzaKi6 ze-vLC1UNX$Fu>2c2LLb&@rd5Y*aqOz5VYJwIdLOM$!@8V?v0B}rE24RK>~AKnGbGh z=5te9g)LYuX$;yZbSZXDQr*uMOn!W`YkPc%U36^q>A*jfG-aDflUs<;oSaCzQPaNo z`RIb3t-91XdAdar-q2+;Bsb!#t*8S28izm}Q|>N&E5g{U(cPfyf;q89*A)9bdwzl?ksXA}gce zI0UL|hy#gh={SMZ9Fz9F4DHA2a+Lun$;1e+4>Pnz_v!(Sy;PLXb6Z(pV$~VB=T;ON zy#1V>M#83_JIJLmM96Qs$$R1mK?d8+7bG2(3=$^JP}gehuxgmbz>}v7zT7DA$5a~X zo->k$s&4H37f|Nr4qoJA2QWXc)jg>zz?@&J`x~HAfpPUcI}?}w$Tdkw*L&aVmPYjh z&{Xm){n8Y+Nzru*$%>&xeat?%bQb)WQT}@Ib3yY z1YA~VBYt)yv1Ua#EC)%j5*Kn+MrzC-pIJ*)$Z&4c1%9lxV{BJIJx)}kRYt3gNFAVM zgCzmjm^bGO>mHVW?66p}=@3D$-}v%^-&*PBtN%~%-7f~!#@<^N#>YL*z+ObSDy7o( znI$2V#QB1`xUx2pOM6sB+dcY6gE-kgo-u;{~om+VY9kUxg2}@VLU;bHD%YTzY#XZ;0AEUGg7_GfzxZhlV@Vv1QvWrQaW{fj9_ zQy5(tk0WQg7%FptXup9~Qw*$td+=<>0F|y~{euBH-WE{u3OPH)gxZHSkLCk%YqY3~H6w!5;jqS=s0`yv&R*1WQQoVzkh z+V!ISJ>vK5gh3`>m8nZIej{D0=JE{OWR80E#)m8p3pf8{DoT?H+H1zboMKHj3G(SV z$)}DWN1MlweSu?AGL7P1V<(+! z9%jd#Wj8g*VKiUakkHaUgpgxN@MIB+m^(a7@h22TL9qncu@aG$igR)=o>MX?x7oql zFT4x{fCo~r2n7i?Qk57w=r`2&3R#F|6eDPjSIM1$r8s5`Ipt3JxE&d_ce+ zM+w#B#aW)8Ea_x<8K^JQcTMuJab}Hj&kgB8mK=sGIg=^e zI{5&S+-0_E@|_28bE(el`-pj6!%eu-2@-M$z^HMtS$v=%Yn}j+y+hn>Ns170n5aL| zl~yW2Eya=QL3Lu(%$Jwt6jw&Ob12!+KgKA|p278kJv~g0e4@ir6;fWj18L!Q&Xy5C zSDBpSAAuI}5aoAappC~xSk#9O@plwsAND1Rbtp$N9F%z&%9!H?l>wfhlM=g{X$(kh z=mdmNg^h(La3cjRI7%5lq_mDe5v@kBG45^Mqz&Hg^!y8A@;|Qi4ON;~-q?sRYy)zx z`k;8xW!{PCcU(G*yGv=ClpO3x!l)SO6vY|yJT6BW5^kAmZ9W8zj5Ym&7VKahOCg8B zVtrI5@P(@)xVM`~oX43_HYw_cr-58S%o7wed~qqCXBWptr7IOvb*Y*VBd$wFWm+1Q z@Q--`&tA!o|L$@W)00&~jRYvXQp#QqT^k%;^jvYNo@|Iq5!%||_2cZ`CA-u-S^zn$hrR8A3nte=bF4N2|6x1PxEb-=UBFZ55F$RU-6vqf)AMh*;T$W{Hus^ zjPQuI)^gD<#5*||{B#?Bdaxjpa8DSjOz+?`O+*$+OYk_-BCxnHObualdxE%5j;YCW zs&rOQ)?_19Fo*GzlBXk@plnrj6WY>N`jn!XY8OwK zY%%AM;xET;4Ht>}PTk_l!y_%e*BW@Z08W&KZjchjD#Twv+Cik3J1)OC?blr;{2#*Q*>|nqhiYzM52>5i#EF#b;oL-ZA-3HFyc&0Qq5897` zfL&P3xFI-&2o>C|=}hr6YgeKf52e?L>6;ijMJWLPUBer}95GnsE}c89oQhiy1Jp=s z&P(Psw8+XyfA`)Z?q)B52`BgvyclRx1cL;_y_~a`9}}TB81*54HrH%9qdW~R(1hG% z+|U~61U=mY`8Ic(Q7e;zk4-0;*E;&??JG)7mFk?<^ElM)tJmkZg8W6N4dfUcr2mV_ zy%^f9&*3xb4|`WFL`msiww*!)_(-FF<=$?`>E?Hy+w#2RNP6A0$`m>pdv)>zt3DH}d&rOEY4AV#< z2HQQ(EvVlkbK(l!^6sC9g&F2X7Gqc*$j*biNSka!QB@R&(^vc8F>F)dwKCyzA+sno zHLE({Y24L;$%VObrlmAdF*D_{lgj*A5)Sb`#48!x!#6d8y_<2k#`rQ1Hkj@Kt0vUo z!p;k>!=^p|oP~`NLF4;AM0N?iC<^Uz0lN#9$TOLD$Bg_yJgqnKuTGm^z5CLmN#&LI z4I}bNxk0Zt-XPHi1xb*gFoQf`bg+>_m+PpjR@Ys!3{c@tcEKyM1lvj>_wj>*w}m zzmT@%hFQJ5%HQUAD@SedVfq}o3R9rLNxb<)CsS7%FE|q*N1hDeCz7n2-%h!7Zi**J70r`{MgSjFS#<6R)ki8DL!+p?fPLq*luD6y1pp> ziR78-$_>%_f|n_2Rs_mUj(@A;Y{909(se`F%iQ=~#}YFWEmw|0D1=VQRxnevP@3EC z_&GCz>wf@Gl4X%K?WzQim{gh_HXVuhMJ9 z-Iy}Nbphc=%OiEZ4@9$QY{3|^Sw=}+fVirJDp!*o1+>fJz|naQsG zx}#r`2PFHX)DCf7w50RU^KkP%JHO_^Pb(VAbuYIWj>#v#mc~UjpQ` zdFFMds9&oQFdzFum$sr?1jFkag15_EKO{y(ihwt2I5;b#aVFpRtHn>Jj;8XilwLES z4y_xoE6jw;w2V#s?q7*vn@QiAYyz&*4iyVtR-P#V1OlYpUn4|-OV)NZYCekRpkRP= zmDRR&X=ycCYV0KI+~P6XO_BlLlzTf+$cLE6~26^4gcMsg>~sP~c>O0)20A(FI5N;iHzcYxQup**(G5dfW>Jo18UQYCJ*56lt%gR{tv`-foLai%xf8$PO z;2h%KRBf6IN=yO+MZysk3J~Qr@zrrl%6`sTxyXgQLPzIPL!NGDX~(t;l6A6Iv9o_( z-N)X-F?Yhr?g}U{ANao1NwlV*G5~71QY|yN%5KD+^HE5HIAwn|skFkFGH& zv|E9&#i+@+JEEIB2bPJlRa4U`8mPpm*0d z$?#D`&KBhF)i`cSneeum!H(XnTvVxTMa#!2N6tSQ+wJ2ggNY{JZMmi*i{yd5SCNSR zp07}m5TL|E&|q7SuUX+=3w;?2!&ieHVY$vo{-Sy|hUER;q!7kdki z21# zwhbq*RjgZUjONgrG@*IbPjwe%mo6Ao*I3P0SC_1ld*(r$LvV?2$#xw`FCQ5wNJ`kZ zvYfvAc1KnImX0-`tXRh1h0sz@THX1}h!r(`(a2dat*6^y-aNn4cpt&H>)GX74Ne5; zHBf@pdeGtHW#mVTU)tG2#|fDX;Oc!Tq3duYLu~dlA}iD}fBn%3=MHRK?+Ij9U!RZq zFor%|Q)3~$dWjUWBH?aq*LPN+ixi_Ph~O5U$je}bbP=tPE<(xJf|P_TiMo+QYXG?p zGL*w6==xA?_bfv3#jua4KOy&$tp%n&Xs*w~hm=?GZI5ar8ex1)Kd_n-$a&loi*}|r z(6P7@l7R7a9}>XGBT{YX3i7sSmJHA(8W#}o8S5s>y zIDy${#V8o1TCQSw#uY+y^OAFOM(B)mAJ3$ym}eb~G*}_=tc$ylf$#B)&q%3Gv@aA| zsyG??ZoZs;$fw zltB9`r8*ir@Zciy)Hl9D2?Q0XD4;nq_DRffalk##_TvLh7sknCXctEE!Bj!uhAdyK#~ z{QkKeX}DG`a*3B$#F3@4w|TVwjnArmyIQ&*l^^POGp$Ly0yP>}XWjC)<=P8Ockg)_ z$QhkaGN+Ay@Zr#ZYvY7%>CAbZM2 zKXLIj%M_48FL0nAVXCU!K=T|^Dt1PByVF51xLU*RVU=xtjqr2Xn z(VztVyu#Ul28e~wDl2`XUrf^C$QkT;d|eFeS;9!Pzck||HK~bm<8}G)uepkjM9ie2 zWYtI@s2DLIvI=&roInPW%@J+W!!{C|N;fua>`^Z0PScf=^v+f6&$%{Qhx-)>SaAvM zr+10r6yRvUthMC;!X&HPEK@-?<}|K zhq<(dudg9z;qR6{L=hhEiYi6`hkiSAEB{H<- zgrt!y7VBKY(B&A&W+ynOzsv4GzC#1w$^8MQIf|3?Chv52p7UPa>k;7unQ6ot$pe2B z;loDA$<$%T=>TFXP6C2`2fx~y(|PEUdCA%+*e?Z z$^m+`(riAs>^9f%To&e&z^(N}%Vf>cRQLN>05H401eUMuD6nvTF%9-9U?7QkAsNp8$F3q*ZFGI1sl`3cP(Qw|01V^&C95Y%bmU`0P#SESt)p?8e< znS3&@ZnN!gK+1c{ya&{FG=jF)iW%$>h%8rT-p)S^Gw{eijZi9@PxLz`-ArK*AGjXx z6%KY-3_0-Y1+<%u>f_0MJOZS??wKsFAD~1;_(_5~dMR0*`?VEtLP}G+6vElkErC#| zaBCE|-Jf4=qEJtexX-OM!7;`jWFzTV!?DUiaCMLzlUg%WK1853$4#282pD z+%mRg<@g^H?_eYAlZO&-kzkyk4USi?D%tue(&hTV5v`;M|Di=G&|Z9Dsy8o*yEx(3 z4H+JdT>*iz1cImq4R%6C@>ALEYG23?Q z9$g_f#QeEich|ZE`XX7>+n-fp{STRAhsoKk`!{f3X2eyBFsT|L zD95GVxAX4zs^eQ{di{jZBkOY6Q)|1#$%qu@qai~xGB91NIA~z05q{A$6oJsXZ#ue^ ziIu>jxklL!9wt;Os7vV@P6bHU?m+g3x@pG&qW`5kUo=Z#)fv!x@wa@gOziD4_yGLXMyTe z`4>%qN&+a-q&nxd9sBdaOD!OcCu-WsRwMf^s%WC9{#1SaR-FibO<6Esx)IE=r7Uuo z9k*d`1o@$)Kj&Fmzn2o?2uM+^E1?si>JiOFj0Ou#8VPiHR#{9pqQOnO*XZ~hfNGD( zxQnH}P%MF+h-?=-UL(Q^F_L4M<+0ViBNyPPXBnQanXa;Q&2*N3t{_u0YVNC<(jb8F zhSbG;jvto#ZFoH`cYI;`lSaAh3|-&JCu-~6{t2-W*LVS$T};hOwJ2vX(OhKCrH#rN z0Il7BgN8o`zMFGoRMY15)BVHVn%Y~%KJHBsmNE; z6#?LjoY2Xq^Nbr0<5@7|qXN#BFg`S;S~K2gzBk&U4UZ^DGz(H*#>JpJPat&IHc5n*$rdU9n(O?}4!c@ia>KAHJ zUp%f{U)v@<&vLC(bcmMx`x)-4(}WOD6BTEpW)RFz!RDrx!PW6+8uqYwV1|d1aYG}e zs$;#5P!Sm{oVxg$Xt1fmoGRvUODe&NkD3@?!0v2}^XIuXjyceeq+#PR`PXJN+NMT` zv4iS7f#ifK@4&_9Nv@0Nm_Dq3Z>B9gN8XTf!I2wpnRV8DcJRE*eta;0JM)6ffxZ}3 z#EZiz+;;Y^^9X&$SymV47h6!NOC1^kHIy16X^6-k=N1E0F=`t#e#M))v(6S>XiKJw zhhLEU0c0wR?%Jly=MWd~tVij0VU})W)k!{|M7wTw6iMB;5t2`cA_4@+{<`K3HCv`{iqk z>?e%zTI&2xt~1SkE_8_-9KIoEQ%WwO+a^-XtMC#dfhc=lAnv8D zC$7J5q(#Hk0NlALe@U=NEYXZ~QKtHLjzfBcje@6dBo=Z_#0bM)SwnFE#0whXQPtLP zbmMbbAvbi1hxY|1OR0f~lrDrB)!c~r`Ky5e0ABrW~B>*WnUVq0Pyu>?Fi=H@5jt$bgO^YHA)3GMyizBZd@NMqS z8GIf>rb8hg?^z=}^;m!R!M8TwoIc^#oOf^2q7MyQlSmKgio7BsiyqPXto-#dBodq= z8ZBtmX4~g*HWIX@@HIY2i&bnhrBDOd%A$N5Af$g?X|B`lqeZNl- zq2Q0Wurn?+ZS5{DpIgCbCpHNv5S({Cgs*<`kxz?VyjeqLu` zhIQfT+)Wa8sOT9YU?_~aNUvj?t->pb=bJnVZ%R>g@=-}@nHNmypnU8OED)u@CGifz z&~uf$auK1Ktm-U92HLHSpE+b|lO=M_+J{VKOWjba3sc7r*-u95v=y~K%yM)YmEsK*>m_L|CW^kY3!kVn-sqSaHT zG0#@bEN1U6mwZL!?j~lD$P}zWFcxwiclX5EN_^={!Hpv8U&PK%=&E%+DTR&H{L6dd z?|jg9=9f|(LS89qeUU{X)79#O0(nDU{O`>$5HDVhYXjUQY=A{bx_RjMVfgjHu)4ps zjY=4G06tO@%Bt#*X`D!rp=PA0`b1ROew0sU{6OxmR^@%HA7}XO&^~G8Kh-&qH&ECd zMj%7M_P=O~)37g7*?MVW`2hs9<>H<0k zqpe+7HTYB0b(pGL)(BM(*=`o~zBDPf{y@UzzZb8{eLyZcI$>(%vg^NS~GA-VsPuSX}kAL!m1`Hz6Nn+ zcCpSxR#6ZR_HgJT>4F2p2O=#yY-&=1DlPD3Mq5pSHNEosLU}xVr!prkSw?i5tGiF_ zxK>OF*NRJrm9Dd?{>d~qcaUtl{ceNa&BV-%Yx-4S=0H0gs7n?nOJ`fBRgF(jf6M-M z(0*UXA}z~z`M376TCIEF-=E$;eY5JYVDdj>k8-<`^=j$IJ{mallH4v{w7y5aDfOmh^^|e1qbla5Dxr}3T zplM;8evVtd`je92dEw{9w1z?I<=QHh~iS;qzb9 z`kxT9eDPbI0s#7}#o^C2eZA<*Arnsd*3ty->hJ-L=VFM9I0Qa_H>*O5Zv1Ta7MW1! z$5ch8W!co$%GG2fKX1$(yl{Oop6G{Qq|1cm8Zx?uv4a<;q4fIm_woKjJM>m@E(#ht zBdy~KtB7?$gpP~reys7?Ni8&MzR(uc=zQR3;I(@C19o6Lb7x}EL4}CmpQ_1g!d7CQ z+8DEklckIO(Zyf`qkQo@E!OedrK`j8;m@fxUSQw~oiS(_>$bG05J_eh1kRroL)Mt; z3gR~{09thq6=ak;bBC`5Pru`bFQXAv;olME>C@!=ykTMEXLVO%2A^Vk<}4x}NR4x| z-F*K|R?6Jpxuz>*cGu~w?=NUSvg}MXwI~7W^jV1bmWU@{l6yd8$-bOJf54Z#j&zQv{auuqedb5-PMr~#5)*+ zXG%O}k7)DXjerJk^L?BQe_`eEx1Dd!4yF@Nw#8jF{#vqx05Z0O+Fb=I;kf5;EYD5( zEw)0Qsluh=Bi*G%jSK1#Y;_CCUmxZ(2{%@w#V3`na!6!@-QD`W^N5U`rX`b~jl$s! z`bMU1SgoMEARG6KGowAeLt^~8wEEKtW!I+rGuSF@{<&J)1JN{u*WMwkZU!4 z&JonEm%z!t^5qelsPlvzuC~ZgyPeRVevirxh^fCjiD=JQHC6eX`ET5L)Nb7atbw(~ z*LNSv#(Qmjl+pZb)iL@}eEBMbLF|kcE$U0{V8k@Retk7^^M;C-he;*xKi4=`LAE?L zb0kVJdyg5L){yQRPAKv8rm)P_a|T?GO#uMxq#Nkx4iD6>Ew;J{*t)VAs+tV+x+ve8 zyh^zLPr1@qynA@-&ysbSW^(>maepu;^)10It*T@g!Pd^<#5E(`E|AYtJz);KO(7sL zd+$F%QG2czVYfN*#m=Rm7F%%*hH})>XsYJ__mgM^Hq(f_*b(8M2+$%-d zh4+RG+5OW|GZ4WHwqvF*QTlE)p&Yq#6h2q(b!4j}?&aCeiX5P1tGd1;j`e=7%2$zD z+jQdqXJlQG$$bj^2$nMbJi~I$k7LrQ1$Ngz{l)sFCwg@z-soP_dD|)1UsAUkwTIvy zxPlNF#?Hh-%F%bk&+#zrn8ikBho4;4Fjg`4*yiQpxo3*$T}d9@q`y}E>1ejlH$i?7 zeigmDP$_#u2O^;x76Oh-Abs4TzTg$Sh#uMLixfb#1ovIhnO0gWsULTAAd$U+<6;F} zE_fOl@x3mtAP-a!HuBwMn)T9(cy`5ztylA;TZv}y(WNavRtvjqaJBvndOVs|)o(=% zkU5{#Ic)9P`IL^*`nPZ>hx1YeEpBj+`u%$ia3%&Vqf<%^Rueu7tdtox;sOK|Ht{7) zr8^VplbQIM{cW~s{6L)I%(s}l`vu7byWgRNv+t^$LQxNXS4(elX=e2V{jR}8`THxj zQyVA0Djnc~vd+Q;w;^29bhcD$`Y#eoP`sobitSKSnIw5rz%}v_@l0%GdII)*VIUwX zCf&HbWF>w31iBA(KIZAO1WyTj_oEou)*oAW;S-q@gEcUz9L zc4pQ^r)c-TMyjsIqf01`HCEi=Eg%P^GDADKgbPt!lGXp1n$a;mrqhXTFDg50a5Iyn z{1BuhQ5+AfsbBSXUc3CgHO4>v)LwL4D$fIp3$?{(Lrcc!i0jP-;Xy;dJjQK@}6jTc6 z+D1gzp^N3pMDW-1mlFs55sWQ%P90SYS;orV9Or;5Cu0T~iDuln-)V!;f%*10!oQ>J zj`6VHtjdjV?oJ8z%KI%z3(2_vh+0hL!#C$1xQ1I;j!lx3-(u=&%4S@-Hp0jv)ZH*^ zA;HQNB`m={TXceSB`pmX9xP6-uEEIr+U8fO@MpWY$@2fy6ccTuwt7_@1np>Njvv0Y zjrUSSKCdbKC1POknbz)FB#&hzYJt5PanaV=zB#P{3s%W*18cfM49=7_%=FBewLxZ* z%}P+E)}1UjY$1tRrL?s8dFk3r_V#&h^`&-hn%i|u}g#X%de-Ryv z;&&%$x?I4C$LiQ(g{7wG#v(^6+4WF#1Po+x)I~cU;bTq>{{34c{S10it&J7VqL!ll zu~fjgigJKgG=RXj?XhbXkr5P=F|V!8LHaoc6$HloVSNjsM!S!Y=-LzL+7Pb@B;g*> zF{mzacF&`@7>8G)AFH^Pp{+!egJi?`md6G^+}>t!>`Nl$X1~Ghb49(5*$2i#wUZV1;;hMfSi&EJB9r?aPG}P2kmD+)b!OUlF+=u`1FVznCK{eJpI&p z_K&ObP7f+%P+(8^jqoVu_oAx|8huF9p> za!BH5J6l!ba>!np@mNQB34RRaYS1R;80>8$1aJymCkxMyP`&kYN@ms{#Z4QLM30>R z@*qd~ZF2Ky@S&_~1eOCYXHr*KycHtqFspMRi1Kch(um-Y{8!A9CQm43^AsjF!;G1N zb;l~9D&@UyZ9KR5E}FWKpPTSRL7sb0aehp%VJsIl`%il0dpH@BN>lcEsFiDs+(M&E zwc>ijcH}w0S)|F1s;L|Am6t~xnhrD0nqi@}X$l~-BDwfS@O(>nRHw7Yr83yFx?#K-0>4g^367B)cv$0^4OX`$wen=3 zGOV7@q{@?3OM&jk;CDWcU!J(gcWeu6?#e*Fr>;`UGrJJ`T40uA(J*j0mNRJ|%HIV~ zyiOB$Md&j*n&RB}-Wiuahf71SNQ3MDJ`;QYpJI=vao&GCgP_Yqn>otap)t93>MZqu z{T7ew1@G+{NX=LG@jM^0>1;vao;J)I(J&z)W5t_9{g!TAqu2ZT-zN7ZO5VPG!mCk* z7@+KsiD>z070l_Ic(}TXV--P`Pv3B=Zya%CjRbTB`>VQo5`R#C4_lAfZ>viJwBvra zqDM!0Hm|jgsDS^99Nwo(dFk; z^6BTo8kDSrGyN=?#G6d7)Q&+?)$&UB%uJf+|&1L7? z6gh2Db&fEEe{DOk{o3!{1p;jp-}{AQe!=CFRWxGDG=-g zXwBSyogazy=!DiTbXC8lc0RyNMmcnttE$xEM{kA`V8&e|9A-`{e4U5<6d zKRVu1xL)nBwvKCxAM)3L))Bo7Z(~!{r{IFUOQ`uY>U4?_)Z|qibL0)a$i(`qcDPb| zm1=vvPzB5dwqbl3hAYy~ry7yx>hpm2)&{pQyA3B4Zl=S@(pxw7{s`s9m=9x^;Ou?QFN|)&|KC(D*^SeX-=prN6nk&=2F^ z-*Q=Ur|8AEyjD9TzG=Q7*}?Y5L+?*&Wfu)n_0IJ$47x6rB?FTsoIZdDdjQfVE&tBs zqjvRv`C7kD^-ZV{Sz%q$U1x^dRqQ@u&GRy{h_nS*4P;S<8J{z&&sKf+Zvt*e*T zLZ4~99qd#Cjx<`8EQ{ukeb+aq2jOsG$->V_X=D^yg_K{|C}jC)kZj3UX@Eg^R_g2+ z(2PI0i|e8m6~48N$CWIPSE%Iye8*_+uw5d)ppt&ol3xGzyVP$esmdJ@9uX#t6xX%5 z^FkDq#mxsJQHh0RME2q(9}GJ*Ydp)FnID|`gE_)~X|vZHl&{gF<~v~IY#IFh+~=+S zkJQTPTn;cf!{c)k)9>Ox$+LqQwNQ<41BbkWNl~2-MVfFrdnUUJEBmzz z%L?ZsvkGQ)D*56KyZ1+k+h&W3KKUnzL>JodB^^T_zdWmv%CYsJ4NORLH2jEY3P*`I)>NFR$jEU z(RQtsiLRY~d)$XtXcu4PzOlhQqnyVEL=UJuL(6>G?34t$?aMar(ky0Mn8pk37*3Ta zOd=R^S#RhKO9qG5>A*g_lND&h(s|KnIjbc3Amp6;w?9fpl&_P*hC#soSd*{LenCJ# zSTg~>y9{p0MVfZ1>TF@YYV?569JVK6^5#IY^|+I6nu4B!!4id)a=D90t@xBdC*CKiXB@HV6=^I{&-qwlG?<=2B~M{Cv%ira9cCK z8?~5o+fzGVFCe>5etPu)s0F-}*qC}J*Nj)8)}$~}6eEyxKYKVC#?Sk`LUhUPYg&7m zixPZtxJBHN=d9zA`0g%GptvaTB|x`sRs*vfxxR;OYXN?$kar6PC{y~1P`@GfqM)Hd z-S*g5H&%DyFzxg>U&e!zM9QW^Z<{l{^~0fLI2r!nvFsqk@$tZ8snp63j(YMl`2*>Z zK#W-`mS_{_s?=31bxFn({h^dF8=*XVpt&$1C+Cp}1PI(QEYFOV#>G}@2eQr|F?Ysg)d3N;K0@jzv%C$uy1jvLy`4$t5oC+=n)e68JFwN# zylVQpC~e?zO^45r|5NW}zFiK}_AuP!uk3&;qp+Ibb*nK+|9%^{x2DOro*O_del+}i zL~~g1y}E`|@&J+mK@fA=eSvq6JhdDf5)ld)5ewv>L(yfM_!1Dw69V)H^=+4Vau+ej zdpUi+xHW#;cwp^0K0F+HgjyWzij8kLPyVUyhtxY!mScfnzHQVJN7SJ4*B>(k`hHzinb*B`N85*63*xGbdLVTzXVeeTO-be+DC+iBJ0 z^NvoLt12V}=@yqJb#pnNYi18#lYPAO+EQQS1@7z{vMnBJxyk04&imebBsMfV{NUd} z7{@$t-?CT`Gn}&4Z2KQcGv5`ht}x--K#0iUWUcCVa4`U@x7jp%n)ZkA_+0tsM-Sfh z@6>CX8jLq~Vp%J$OHXCOitw14H$Jax1dI(jO&5thHZ(MuW61Q0>ezD}z#m>3v7gZ1 zdpz~${zTF&As^O;q0f8}d5xMN4S-KE8b@>0&WuWfu(SILc&Tuj_nx+g@p)c>k6EPf z&fsfIA0WKLA@a2@UV~*$w)VcOpo9TsM?Av{X8bioU*_Z;R|cL|AL0aBqpy%8GoR|- zA_ws{mSkwmHD>~+pF=LO;I*54h?H_Q-gj#wVltz68_;JOYD18E@evlSWmEHJEOr-X zCA7|I^t#N2fgu^ zEwmfX@=aX`5;H9&9x%jvGro*=dCi)SdGha(1mOS*fda&`c9l>Nc^CIs!x? zzO3eXa4mu9hfA_UDS*`%$P(lP4t1O59K0vk*#726-dFVEdLB!O@sp}EP*!RDo+#(> z&4YUv&-p$Xz>rhYH(>@JRD$E9G>$DayqKEn)9O(C_Zay z;>t^PeTFWL+2LiT6Q>_<_Q^NE=XXNpSb_b_+GeFl4|CgX@enUMDYw(^B}r zn!NVCt6_CNR0-jT>kFV8zoH_qzM>-5PzPnq8}I{?)vcP3qt!XBd6|77;xXsu{kVet z%-x8(7l!V{e>lPAbXTqs=h|-65yn*(nQgpBEuDEmrH%}71|Kyt<+%ZMW0i|a^z5EL zGdN4cnxSqFhdNc@N%j3LDeymWBNf%)+z_KUz2nW4Xr#hNeqxJV_VxXERL3O4AXVi3 zPI78+o{lBl%#0C7u#GED_V>V{u9Bn<#rGx1Oi&85e481ybY9qV0)-^?Y7Qc~-~au# z?}8lmL{W(YZSw2zF}O}foX)8=_mzl?#nCq+09<~M7xI6t0ig%j9#z8$`buGYtW3F- zz$#Mp_r35W?79G&Ph|UNXM}^&d!}m0xl|{0|~ymYpfplcu8UB zXQB*U8lAvxfPc!PAR2Mx{FTSH(C=oerB6~WNRqo0qV{c`An%f$T%@TAC_qD@<$-&) z);m=+Q_t3R$xyoL`*-$+e+N&aI>LD2waNUc@(>j_l%V5NcfUny9#=d4-}i zpWgmx(=pgx$E_Lg=u_{=n){H3)7ojyM>v*QOxJ4%5A3a#ngLwBUo91Wc`L25D z>@w=~X9G%_6~()OQNI`=VpaKs`Bb_=?_hvM3>Vn=Yhy0K$C7RHYUo2Y;sME8SAeVQ zKdG%3YcxJl$4KMQ92-ZsJR)AG1ZFt+_j|nfo)f;-iNHnk`(F2uAHP(Tt+Ir^`rvM< zA{Ev>I|F^xCj$YiV7^veCP--!cD8jtRnd3MLlLLkB5xW8%0SjLZQIX!1r7ztdZCWT z-t=CYEPY7VRhqs8_#g|}4{Q9Mt5!oj@_R9Z$5BpsF++a7Q2Az{xTI;r7Thw3)`aBV z^xipF#}A{v|7cTPzO#umwmc@<;zWpcuWk+fAoNMYv2dgEj+V{yb`XDDd%E08T;phK z{w8ZSN?YNP+-LzK=KtEO92F{-k5!)Kib158GUJT9wL{g(R|I+wVNZhIkPE*ag!=r| zsf8&uI8{3Zgqgm-P`$bT7t818?4KfwG>)Ij90P^LQotBV$3E zOlxC?F6r;@mIzj6t|Nx8(c}Z_I3E8YoL;vmE1($f4)s{x>%|bT%Q-Q)lUuI{Sn|&Y zMGXzOrk`j#Z*eCETWv13@5=Uqse;6BFEt^}516bFEB7f$nLtdXcd_alX1Z-9#z89} zjnh9Aq%Sw%$exKur%S)c;e)|YS85$$G;A=YCeV7Na-ZWo`rmccpl)}z@4W|hg`_jt zf9hdllLr!@<_K#mpLJLUrJK8H2PC8dJux|t8wK4}YScZAwP1`EHXy8v+ZSQI@+mb7 zR;qdviMo;17E1$hGWQirq{DNU#D?S|Z2-~yGz;lJ6=$#9>$vN<_cURr%|ZG5pSr1J zlMHJ=jnG_eX|2!4O7_-WcP3GcNqNgMGkuOa*{+H-ep`r=xu> z`#9+Gfux}QwE!g`Rz!T!0gzL0z41-g6S~HdjyueVl3jMZC1#0ryHU z^KiYmw{;UqFDGADQD6YNk;O?yqtA+zo0JSz5AT@D$Ov3q$B8T)@8*t$)!L^uSEjH* zaa$NMh@R1DEgFr0z2|Qv316e<`oro|nJ6v*6d=xdPevIDGQ>wp_{4Az;+@RCEyYdq zMh6HE1F6e-qIE{DmtJhU@FRrrdsE8s{nQdO2Re3n8L)l%{zXp^ z>&SJt@zZgg-M0@h(qAV>;TGZn%dq|dJyBLHcWlp|+K|v;g5RV;5PP9d;L@P97Q=3e zcz;}roEzgpVXA|(MTui`Uvw#s$L4`Bpt%BR&fmPoZ0IAH;neFXHrPTNAxhgra+lWY zw;JTHq6gtUsWooG@J&p6&!vOgW{hE38KL!D_F-))8=xe+lN*sHdYxoFht_ z8h-X~UB4GLSoMOj`iAw}{~LS<)l>>1EC|fS(RikM140KUx#x-(hM&Eae&Gt<>(%|IK*e}~jjbF<0ZckGnc>Al5Bsbl{HvfOGkR1n2KA%B8qcJQ z#P75O!I7T+Rg8>Jrm5JJ(Cs*R|1c-AE08*3R43{vkGj8z>Kg*zeyiX&0T>ZTo|Jl^ zR>>`2IA|*t`_zFL#Mp2G5RW07AuymHmq=wRMeo9 zjjmF_zHn$Pyg7|kQ@AEJNZ_fzGWGa7l`BU7v=kdk(0l$BXi_1@sgPQ~f#?G19&ato z1xA_0VAEc4`lmS=pP}Zv+SdPl@mom1H|Z7Na{dQ#~=9|nt=IKQAz zXwZnjwlGmwUQn~FWm^>Mhi44BjzqOfLE%a!OeUG-f;gBPB4&wWqs-1xA%daq`INVE zFfRT@AV{hUD~{p=&G;M$J?Q`{g1>KSh|22$v5RG$D0T)pi?m7H_zl`MKdGY?^+p)B z#ce%Eo-7MgJI|%Dzp@hgSoj=|Upj`A@u9kg z(niY>Xs3wkk^?J12dM3CXGWb^X3-j_3x!r1~-HfK>XDzi(|96aZk~66Egz z>Sim=-$tXMK)284W}|H?ti$9FI_p;!XSiTw;L>H3jSqgk^~nVx2-IDnb!yO2KO?wS zfbR0RCM_v#uixzsLa<7|KjiSt?dkRO4SHtLQ3w%NLu<=cU2Sj9G*9E)sEEIXC-`E`l3yTP!CQ(Dr6WeAzabp8ub4l3F zIgl_=Ko5MS*j*(Zc_7RtGiIeZ zb-hXJ%`PkjYEuo_#dPtkWwo*gnZp$p zjP@PySrbAYD5A}eD^<>_AkUNaBn`LO!^4;mf~cK%Rf9QygXNyoZL_Kwd;PBIKtIa3 zk!TH^g7p(MOOTWM^y#nYW{GRYR6oN* z;8)^6q>(qBm546$*8g@IJ8|8)t8KBh_=Q19`rOq0wekbL=oXXc&m*ipg<)&WD)-!2 zX8>t`z3Tl0Ft){g4&h{07Oemgtj*12&00X9DQX*-!GJ!FAhr#gMGQs(V(r^19jE=J}xZ--kbd9USHq@hbBwlTOhWz&&J`(M3?4kjZ@k z%6x#*-1C1JfF@s)bY5NfXIfCL!k6;vaM`1%gi39R2ZbFD2l@sneV*okB{Hc)WL4VE zy9(=Ytkp3HJ;X8T06jPf>~>GlrP{zD%JT~T)|XA9DZ9baBZ1Pi3ZkcxS`);>s>k&~8ZgX;oBYJYu&#GPmiW8av$uq{3K z7E?mR?b$q<8<&6IS>Qcj_GW)mGC=c>=Ne74&*$r0?iJ|c7e!S`{&eX%+U=1?kCsWw zm8I|=r7)@9^ceqHs&PM_GgX<|bou)BcOagZo9dSMstGfYAXi#JDp|*uO%q4jg(R&F zvr*A?J(1j^s+;v+q1v~>VzviToBhX|M4pXph%kh&i@li7=;rU zJ&=*apaKkJ4Nnb5BC6By2CGoI(oa;>n1!gnH2XyeuN+d^TYE82b&1To+})|-o!vHR z_Y?hqK^!+qVI^J#)&+3cNP1e+K!G#0;lIkv|+tBif(R?YD5|$pt2-jjC+EX+1;ex`0@(?s+56_^rwFa8lS`KE} zdN+|Qr1U9R<;;n!@HByGJ1^%(43LNgjUHUQSmjvj1|I%`yw*`DGswznXV1LKWCekX zn>QxoGrrM|1rUZtHz~oZo9ZBj=N5K);E|fethI0>_fD1C^UC#o#$|BZJoR6adUsA2 z#j}b!`bG08ciyVah&GH(R_onpkDVKji1D> zxO_}4*FLek_ku9GEk)Y7=TZBS>tiNHTva;Pq*j_ZQea@fJz za(Uv7L)yO5$EH`9tw25OG>7+8bR+|mZTLI9>2zqc8roX{jXHoO$DJ-afwc zxHXl}hOO7ky@`tkJ;!B*^0qKP~kraN?|m4lw%oyxIh zMuV8}d`EsqQ_K>NIA?IREn-0i-RVpHj?jLy8im?Izt#N^zo+s_kc=d*&B1} zOQYdcBTz_NJsJP_+O~$ifz?$!ou3+Z@!`o{lsvK^wZZ9C@zqf?elEerMUne(WYC3U zPWiNVuqlPZG0)wg-ZGy&RuZ_Qejt zgSQh_batyjoqN*KMy+tQ_E0dM$ttZN@8aynW(ZTmOmF)*7CiOMElO&^6~3pRePiW3 zAVaMXpBD*a`%m1wTbOMT?YkiNhiyc=#@}3TgFQJEeBhwv9{}a!9TwNri*m;+0{1X{ z`;ZzSr`%h3I1!dxsOsL`;o@VUmc9NKY3sq^mTmj zpZ2#j?N}H4b~QbT;&X+%7QBaCc?9sfJ_aPhF|Lbn*}chsKnMf}Vd|7D@kjG5xwZ@} z$TUptCF6lJSrJq(Ew<+C{PbIfsZ2i#wRrEN#(JKtS$dXysXqSQq&1y zQ_~l>KVmaDsIZSWh4@YbmUkXpATU+Bef7FVv|poh1}aRI7T5-$db(@_^1>^F2D78T z9n-xKLo-W1=Sw`%skVgOaPu^g?zrg@q|+1dbeu*`Iu4s{TjYJ;Gbo^eOB;6S&8W?I zWoWVHpKbGA14o`Uc&AL@;@8>dsG&GpVK*#qKhQj`8&v|=GoZ)bVoKWr^=~Ip=Jwd8 zg?r&f>Y6IZ`AGB0iivvo6(n?ul51$@NK2pU<@73MzXKAY1}5U0S`A5aubtO@p!&3h zGXqT+C-4IuyVkM`tLg*4WD6R~zt~hy`{nF8>hS1^E!2Fo&-LGjmn=nxZ^K&Mw2U+? zZA#6z@aL-b@y$6e1$B9cBqKj|C1){=iSe(C0~Q>aW162c)CdAqJ2PlHYa6 zjjaNA z&P-@t$yHh-la8Pvfoo|C8l)^VNb-h(`xFH z4TD6;jGEPJ$@<|$y6Bm5b zjjFT>?MiYBgq$?_cVM>-2zJ}i>+iu=a73CKD1b}iO03G-*Nz!qv1MF((C+KM8{Mo_ z1aL|1fsh^NmEQe!`Ceub1o?+*H_iU<*cMhr5#-*IOT?Bew3`QXdu<2L<8F)UF>?~0 zp}SrV6~OQ{rL>eyuyMiZ*`b=zM9I$lLte9?Gw3#w#ZAaT)gWei1Ihm;#NvAeH;D_6 z3t^n!f+10ELIe;xDKiMNT`hS2(`%3{ONI=3qDd`5kb{s8k|+qWXD=w@H0x$}uXD-g zPkeIpte^c9*5}2UwhUH$WN>3b_Nn?nb-{+T4Tfle9?G7<5MxLZDKQv=fN)5&!H`|w zR-dJE?{~0ENLw)=IKd3AE?%kiT6=2Ej~8wv%g({?69aDEN9k<}w2V2IzfkYQ%~LI6 z6MhG3d7R9P_D>+6E898`U~8rf{<2ck>mv#k%k7qw0(5D_*=6g{rpTm;8Ak0zDmRhQ z$W?FH96Ygf6It-sW*roJ6B zznQh)unh9?L{Doks5rT_(HC{glFFq&i5+mCtBG3I90_d{7Y|$6FqG1?B$A7b*l#%< z{OTAR0;VpNNX@&GH8Z-`(QE%u!*v|{(+Z%x9g1s$f1 z2`;2F4!SCwWCH=e}HQK_G}`pZH3+dD~n#}Ka*oBE_LVo55znK zWngI+56|mkhwP`i(ogh8XQ*BQ%Savlvgh)7ozGs$vi%b+j4v|Kq3=0lB2Hz+3P0 zJ`rND=V8{U`+7%zd{rN;!Zcj)8Lv;c*c}OU&(FN-!OM!#KIs^-V6j@S*rKRDF;sn5 zt7nABy!!P)qWkI2OYBeqPh z|FjNJIt>@WlQ$h}^10ilu<(CKjm*@)krYh$dE#cpX_rh%dd zQ7z~t&$jq>-~sYEpkYWXtFpKLLz`S~nt5c!ud*OrF>gQ}!FFyT_@Uh4PLXYtq^vor zu_eFH;sRo+?zMbUjJ@cC*40y80W*{MYIht5@+(_J>OU}FYBT5SBPCEO){)g;btYO^ zm%IG{Kc~4o;*ez;Cwg*rdvRccS1|n<)^-H!Ake!f)Vmj7omDg5+JpHuREJo@mnA0i z{FZe5=j;6s?kStKpvX?Ab#Yu018Zs8p^6RsW%}2710DgY*j)G6e8Y$~1nJ zviIp85S7NWvr7EeiG>ZQL^J(+!SxBjSW)Udi+v*58LP;5ILL2;+Z9@%k#&B}{7b?? z#d41@zDNl-D+`Lv0Dsd2EJ!eYaV(7%!%~dpaC>(PT;to8lp;~z_{}P7K@{F`?BIg( z`vzal=;Bp*1bA*g>G3+qPa6GepJ9cQRlzU8^WYI%a_#G{c4++W^0(E%*AtD2=+zVd z0OlGhBi5URYd}=)H%-1e;}EHH9D4b9|99V#e%qb=NPRRjHr@26vg|ceJ1)mg`+gsb zUefh|mYn<(a*Bsw>BBS2n|@kKJ+fNrrk&vZtscL8+xYc^$`5P)&U-%|2R_^C@gFYx zJ8}0vz3#tQ+`oL;-}V0=?(SbM?(0AN3#I*C|9@zc|NpgqtwCAo-}V33JM91Q&HY{f ze>P11AJ_V|IAx_@>;D%z?BAO1>!<%_%YCi?f2{lee*XXFL#(#M|J^fueg6Nk?*IDy z|8w2{wf;>#oQ=ReCc z`kLsjqTIZ;x4$q%;Mc@y?i@0Hhp$Jl$zcovSP>7LIHt*cj5A-flo z)Qw_fSI_a#o@y(%(_&tM1jN^CRmKz%>h;}=1g#~jJZZ4k^1PTZE_sU>|L)+m!IA7y Q3jEo0XI4r>;M1& From a25fa9344e9b1a51832019546148b9f59590a407 Mon Sep 17 00:00:00 2001 From: Paolo Matarazzo <74918781+paolomatarazzo@users.noreply.github.com> Date: Wed, 19 Jun 2024 07:57:54 -0400 Subject: [PATCH 11/99] updates based on Rafal's feedback --- .../bitlocker/preboot-recovery-screen.md | 18 +++++------------- 1 file changed, 5 insertions(+), 13 deletions(-) diff --git a/windows/security/operating-system-security/data-protection/bitlocker/preboot-recovery-screen.md b/windows/security/operating-system-security/data-protection/bitlocker/preboot-recovery-screen.md index 392e4d725c..a9916039b1 100644 --- a/windows/security/operating-system-security/data-protection/bitlocker/preboot-recovery-screen.md +++ b/windows/security/operating-system-security/data-protection/bitlocker/preboot-recovery-screen.md @@ -188,13 +188,13 @@ There are rules governing which hint is shown during the recovery (in the order :::column-end::: :::row-end::: -## Additional recovery information +## Additional recovery information screen Starting in Windows 11, version 24H2, the BitLocker preboot recovery screen improves the information about the recovery error. :::row::: :::column span="2"::: - Instead of displaying specialized messages, a user has the option to review additional information by pressing the Alt key. + A user has the option to review additional information about the recovery error by pressing the Alt key. :::column-end::: :::column span="2"::: :::image type="content" source="images/bitlocker-recovery-screen-24h2.png" alt-text="Screenshot of the BitLocker recovery screen showing a custom message." lightbox="images/bitlocker-recovery-screen-24h2.png" border="false"::: @@ -202,7 +202,7 @@ Starting in Windows 11, version 24H2, the BitLocker preboot recovery screen impr :::row-end::: :::row::: :::column span="2"::: - The **Additional recovery information** page contains an *error category* and a *code*, which you can use to retrieve more details from the next section of this article. + The **Additional recovery information** screen contains an *error category* and a *code*, which you can use to retrieve more details from the next section of this article. :::column-end::: :::column span="2"::: :::image type="content" source="images/bitlocker-recovery-screen-24h2-additional-info.png" alt-text="Screenshot of the BitLocker recovery screen showing a custom message." lightbox="images/bitlocker-recovery-screen-24h2-additional-info.png" border="false"::: @@ -270,17 +270,9 @@ The TPM contains multiple Platform Configuration Registers (PCRs) that can be us BitLocker recovery can be the result of unexpected changes in the PCRs used in the TPM protector validation profile. Changes to PCRs not used in the TPM protector profile do not influence BitLocker. -| Error code | Error cause | +| Error code | Error cause |Resolution| |-|-| -|`E_FVE_PCR_MISMATCH`|BitLocker entered recovery mode because your device's configuration has changed.| - -This may have happened because: - -- A disc or USB device was inserted. Removing it and restarting your device may fix this problem -- A firmware update was applied without updating the TPM protector -- Any example at https://learn.microsoft.com/en-us/windows/security/operating-system-security/data-protection/bitlocker/recovery-overview#bitlocker-recovery-scenarios - -A recovery method is required to unlock the device. +|`E_FVE_PCR_MISMATCH`|BitLocker entered recovery mode because your device's configuration has changed.

This may have happened because:
- A bootable disc or USB device is inserted. Removing it and restarting your device may fix this problem
- A firmware update was applied without updating the TPM protector

For more examples, see [BitLocker recovery scenarios](recovery-overview.md#bitlocker-recovery-scenarios)| recovery method is required to unlock the device.| #### Special cases for PCR 7 From f6a86ae07d456a425612ada8e29bb9ac3577e597 Mon Sep 17 00:00:00 2001 From: Paolo Matarazzo <74918781+paolomatarazzo@users.noreply.github.com> Date: Wed, 19 Jun 2024 08:09:15 -0400 Subject: [PATCH 12/99] removed split document --- .../additional-recovery-information-screen.md | 104 ------------------ .../data-protection/bitlocker/toc.yml | 2 - 2 files changed, 106 deletions(-) delete mode 100644 windows/security/operating-system-security/data-protection/bitlocker/additional-recovery-information-screen.md diff --git a/windows/security/operating-system-security/data-protection/bitlocker/additional-recovery-information-screen.md b/windows/security/operating-system-security/data-protection/bitlocker/additional-recovery-information-screen.md deleted file mode 100644 index 42159aad7b..0000000000 --- a/windows/security/operating-system-security/data-protection/bitlocker/additional-recovery-information-screen.md +++ /dev/null @@ -1,104 +0,0 @@ ---- -title: BitLocker recovery errors and their causes -description: -ms.topic: how-to -ms.date: 06/18/2024 ---- - -## Recovery error details and their causes - -Starting in Windows 11, version 24H2, the BitLocker preboot recovery screen improves the information about the recovery error. Instead of displaying specialized messages, the recovery error contains an *error category* and *code*. The error category and code map to a webpage with detailed scenario-specific content. - -BitLocker recovery is the process by which access to a BitLocker-protected drive can be restored if the drive doesn't unlock using its default unlock mechanism. - -Prompting for the recovery password or other recovery method defends against suspected unauthorized access to user data by an attacker. Providing the recovery password allows BitLocker to confirm that the owner of the device is in possession of the device in recovery, and that the device and stored data should become accessible. - -For more information about BitLocker recovery, see [BitLocker recovery overview](recovery-overview.md). - -This article is divided in different sections, each section represents a BitLocker error category. Within each section there's a table with the error message displayed on the recovery screen and the cause of the error. - -### Originated by user - -| Error code | Error cause | Resolution| -|-|-|-| -|`E_FVE_USER_REQUESTED_RECOVERY`|The user explicitly entered recovery mode from a screen with the option to `ESC` to recovery mode.|| -|`E_FVE_BOOT_DEBUG_ENABLED`|Boot debugging mode is enabled. |Remove the boot debugging option from the boot configuration database.| - -### Code integrity - -Driver signature enforcement is used to ensure code integrity of the operating system. - -| Error code | Error cause | Resolution| -|-|-|-| -|`E_FVE_CI_DISABLED`|Driver signature enforcement is disabled.|| - -### Device lockout threshold - -Device lockout threshold functionality allows an administrator to configure Windows logon with BitLocker protection. After the configured number of failed Windows logon attempts, the device reboots and can only be recovered by providing a BitLocker recovery method. - -To take advantage of this functionality, you must configure the policy setting **Interactive logon: Machine account lockout threshold** located in **Computer Configuration** > **Windows Settings** > **Security Settings** > **Local Policies** > **Security Options**. Alternatively, use the [Exchange ActiveSync](/Exchange/clients/exchange-activesync/exchange-activesync) **MaxFailedPasswordAttempts** policy setting, or the [DeviceLock Configuration Service Provider (CSP)](/windows/client-management/mdm/policy-csp-devicelock#accountlockoutpolicy). - -| Error code | Error cause | Resolution| -|-|-|-| -|`E_FVE_DEVICE_LOCKEDOUT`|Device lockout triggered due to too many incorrect sign in attempts.|A BitLocker recovery method is required to return to the logon screen.| -|`E_FVE_DEVICE_LOCKOUT_MISMATCH`|The device lockout counter is out of sync. |A BitLocker recovery method is required to return to the logon screen.| - -### Boot configuration - -The *Boot Configuration Database (BCD)* contains critical information for the Windows boot environment. More information about how BitLocker uses the BCD is available here. - -| Error code | Error cause | Resolution| -|-|-|-| -|`E_FVE_BAD_CODE_ID, E_FVE_BAD_CODE_OPTION`|BitLocker entered recovery mode because a boot application has changed.|BitLocker tracks the data inside the BCD. BitLocker recovery can occur when this data changes without warning. Refer to the recovery screen to find the boot application that changed.
To remediate this issue, restore the BCD configuration. A BitLocker recovery method is required to unlock the device if the BCD configuration cannot be restored before booting.| - -### TPM - -The Trusted Platform Module (TPM) is cryptographic hardware or firmware used to secure a device. More information about the TPM is available at Trusted Platform Module Technology Overview - Windows Security | Microsoft Learn. - -BitLocker creates a TPM protector to manage protection of the encryption keys used to encrypt your data. At boot, BitLocker attempts to communicate with the TPM to unlock the device and access your data. More information about how BitLocker uses the TPM is available at BitLocker overview - Windows Security | Microsoft Learn. - -BitLocker entered recovery mode because of a failure with the TPM. - -| Error code | Error cause | -|-|-| -|`E_FVE_TPM_DISABLED` | A TPM is present but has been disabled for use before or during boot| -|`E_FVE_TPM_INVALIDATED` | A TPM is present but invalidated| -|`E_FVE_BAD_SRK` | The TPM's internal Storage Root Key is corrupted| -|`E_FVE_TPM_NOT_DETECTED` | The booting system doesn't have or doesn't detect a TPM| -|`E_MATCHING_PCRS_TPM_FAILURE`| The TPM unexpectedly failed when unsealing the encryption key| -|`E_FVE_TPM_FAILURE` | Catch-all for other TPM errors.| - -### Protector - -#### TPM protectors - -The TPM contains multiple Platform Configuration Registers (PCRs) that can be used in the validation profile of the BitLocker TPM protector. The PCRs are used to validate the integrity of the boot process, that is, that the boot configuration and boot flow hasn't been tampered with. - -BitLocker recovery can be the result of unexpected changes in the PCRs used in the TPM protector validation profile. Changes to PCRs not used in the TPM protector profile do not influence BitLocker. - -| Error code | Error cause | -|-|-| -|`E_FVE_PCR_MISMATCH`|BitLocker entered recovery mode because your device's configuration has changed.| - -This may have happened because: - -- A disc or USB device was inserted. Removing it and restarting your device may fix this problem -- A firmware update was applied without updating the TPM protector -- Any example at https://learn.microsoft.com/en-us/windows/security/operating-system-security/data-protection/bitlocker/recovery-overview#bitlocker-recovery-scenarios - -A recovery method is required to unlock the device. - -#### Special cases for PCR 7 - -If the TPM protector uses PCR 7 in the validation profile, BitLocker expects PCR 7 to measure a specific set of events for Secure Boot. These measurements are defined in the UEFI spec. More information is also available at Trusted Execution Environment EFI Protocol - Windows 8.1 HCK | Microsoft Learn. - -| Error code | Error cause |Resolution| -|-|-|-| -|`E_FVE_SECUREBOOT_DISABLED`|BitLocker entered recovery mode because Secure Boot has been disabled.|To access the encryption key and unlock your device, BitLocker expects Secure Boot to be on. Re-enabling Secure Boot and rebooting the system may fix the recovery issue. Otherwise, a recovery method is required to access the device.| -|`E_FVE_SECUREBOOT_CHANGED`|BitLocker entered recovery mode because the Secure Boot configuration unexpectedly changed.|The boot configuration measured in PCR 7 changed. This may be either because of:
- An additional measurement currently present that was not present when BitLocker updated the TPM protector
- A missing measurement that was present when BitLocker last updated the TPM protector but now is not present
- An expected event has a different measurement - A recovery method is required to unlock the device.| - -### Unknown - -| Error code | Error cause | Resolution| -|-|-|-| -|`E_FVE_RECOVERY_ERROR_UNKNOWN`| BitLocker entered recovery mode because of an unknown error. | A recovery method is required to unlock the device.| \ No newline at end of file diff --git a/windows/security/operating-system-security/data-protection/bitlocker/toc.yml b/windows/security/operating-system-security/data-protection/bitlocker/toc.yml index a34d5b969e..ba7f125549 100644 --- a/windows/security/operating-system-security/data-protection/bitlocker/toc.yml +++ b/windows/security/operating-system-security/data-protection/bitlocker/toc.yml @@ -17,8 +17,6 @@ items: href: recovery-process.md - name: Preboot recovery screen href: preboot-recovery-screen.md - - name: 👷 Additional recovery information screen - href: additional-recovery-information-screen.md - name: How-to guides items: - name: Install BitLocker on Windows Server From fd2f12717102f16f05124c431b9322813c4077dc Mon Sep 17 00:00:00 2001 From: Paolo Matarazzo <74918781+paolomatarazzo@users.noreply.github.com> Date: Wed, 19 Jun 2024 08:26:37 -0400 Subject: [PATCH 13/99] rename png files --- ...ot-recovery-additional-recovery-information.png} | Bin ...een-24h2.png => preboot-recovery-additional.png} | Bin .../bitlocker/preboot-recovery-screen.md | 4 ++-- 3 files changed, 2 insertions(+), 2 deletions(-) rename windows/security/operating-system-security/data-protection/bitlocker/images/{bitlocker-recovery-screen-24h2-additional-info.png => preboot-recovery-additional-recovery-information.png} (100%) rename windows/security/operating-system-security/data-protection/bitlocker/images/{bitlocker-recovery-screen-24h2.png => preboot-recovery-additional.png} (100%) diff --git a/windows/security/operating-system-security/data-protection/bitlocker/images/bitlocker-recovery-screen-24h2-additional-info.png b/windows/security/operating-system-security/data-protection/bitlocker/images/preboot-recovery-additional-recovery-information.png similarity index 100% rename from windows/security/operating-system-security/data-protection/bitlocker/images/bitlocker-recovery-screen-24h2-additional-info.png rename to windows/security/operating-system-security/data-protection/bitlocker/images/preboot-recovery-additional-recovery-information.png diff --git a/windows/security/operating-system-security/data-protection/bitlocker/images/bitlocker-recovery-screen-24h2.png b/windows/security/operating-system-security/data-protection/bitlocker/images/preboot-recovery-additional.png similarity index 100% rename from windows/security/operating-system-security/data-protection/bitlocker/images/bitlocker-recovery-screen-24h2.png rename to windows/security/operating-system-security/data-protection/bitlocker/images/preboot-recovery-additional.png diff --git a/windows/security/operating-system-security/data-protection/bitlocker/preboot-recovery-screen.md b/windows/security/operating-system-security/data-protection/bitlocker/preboot-recovery-screen.md index a9916039b1..96fdcf6b66 100644 --- a/windows/security/operating-system-security/data-protection/bitlocker/preboot-recovery-screen.md +++ b/windows/security/operating-system-security/data-protection/bitlocker/preboot-recovery-screen.md @@ -197,7 +197,7 @@ Starting in Windows 11, version 24H2, the BitLocker preboot recovery screen impr A user has the option to review additional information about the recovery error by pressing the Alt key. :::column-end::: :::column span="2"::: - :::image type="content" source="images/bitlocker-recovery-screen-24h2.png" alt-text="Screenshot of the BitLocker recovery screen showing a custom message." lightbox="images/bitlocker-recovery-screen-24h2.png" border="false"::: + :::image type="content" source="images/preboot-recovery-additional.png" alt-text="Screenshot of the BitLocker recovery screen highlighting the Alt keyboard button to access the recovery information screen." lightbox="imagespreboot-recovery-additional.png" border="false"::: :::column-end::: :::row-end::: :::row::: @@ -205,7 +205,7 @@ Starting in Windows 11, version 24H2, the BitLocker preboot recovery screen impr The **Additional recovery information** screen contains an *error category* and a *code*, which you can use to retrieve more details from the next section of this article. :::column-end::: :::column span="2"::: - :::image type="content" source="images/bitlocker-recovery-screen-24h2-additional-info.png" alt-text="Screenshot of the BitLocker recovery screen showing a custom message." lightbox="images/bitlocker-recovery-screen-24h2-additional-info.png" border="false"::: + :::image type="content" source="images/preboot-recovery-additional-recovery-information.png" alt-text="Screenshot of the BitLocker recovery information screen." lightbox="images/preboot-recovery-additional-recovery-information.png" border="false"::: :::column-end::: :::row-end::: From 183da2649675f68279d6aaa6fcc1ca45662b8327 Mon Sep 17 00:00:00 2001 From: Paolo Matarazzo <74918781+paolomatarazzo@users.noreply.github.com> Date: Wed, 19 Jun 2024 09:49:52 -0400 Subject: [PATCH 14/99] upfates to tables --- .../bitlocker/preboot-recovery-screen.md | 71 +++++++++++-------- 1 file changed, 43 insertions(+), 28 deletions(-) diff --git a/windows/security/operating-system-security/data-protection/bitlocker/preboot-recovery-screen.md b/windows/security/operating-system-security/data-protection/bitlocker/preboot-recovery-screen.md index 96fdcf6b66..35d739095e 100644 --- a/windows/security/operating-system-security/data-protection/bitlocker/preboot-recovery-screen.md +++ b/windows/security/operating-system-security/data-protection/bitlocker/preboot-recovery-screen.md @@ -190,11 +190,11 @@ There are rules governing which hint is shown during the recovery (in the order ## Additional recovery information screen -Starting in Windows 11, version 24H2, the BitLocker preboot recovery screen improves the information about the recovery error. +Starting in Windows 11, version 24H2, the BitLocker preboot recovery screen enhances the recovery error information. The recovery screen provides more detailed information about the nature of the recovery error, empowering users to better understand and address the issue. :::row::: :::column span="2"::: - A user has the option to review additional information about the recovery error by pressing the Alt key. + Users have the option to review additional information about the recovery error by pressing the Alt key. :::column-end::: :::column span="2"::: :::image type="content" source="images/preboot-recovery-additional.png" alt-text="Screenshot of the BitLocker recovery screen highlighting the Alt keyboard button to access the recovery information screen." lightbox="imagespreboot-recovery-additional.png" border="false"::: @@ -209,16 +209,27 @@ Starting in Windows 11, version 24H2, the BitLocker preboot recovery screen impr :::column-end::: :::row-end::: -The next sections describe each BitLocker error category. Within each section there's a table with the error message displayed on the recovery screen, and the cause of the error. Some tables include possible resolution. +The next sections describe the codes for each BitLocker error category. Within each section there's a table with the error message displayed on the recovery screen, and the cause of the error. Some tables include possible resolution. -### Error category: Originated by user +The error categories are: -| Error code | Error cause | -|-|-| -|`E_FVE_USER_REQUESTED_RECOVERY`|The user explicitly entered recovery mode from a screen with the option to `ESC` to recovery mode.| +- [Initiated by user](#initiated-by-user) +- [Code integrity](#code-integrity) +- [Device lockout](#device-lockout) +- [Boot configuration](#boot-configuration) +- [TPM](#tpm) +- [Protector](#protector) +- [Unknown](#unknown) + + +### Initiated by user + +| Error code | Error cause | Resolution| +|-|-|-| +|`E_FVE_USER_REQUESTED_RECOVERY`|The user explicitly entered recovery mode from a screen with the option to `ESC` to recovery mode.|| |`E_FVE_BOOT_DEBUG_ENABLED`|Boot debugging mode is enabled. |Remove the boot debugging option from the boot configuration database.| -### Error category: Code integrity +### Code integrity Driver signature enforcement is used to ensure code integrity of the operating system. @@ -226,7 +237,7 @@ Driver signature enforcement is used to ensure code integrity of the operating s |-|-| |`E_FVE_CI_DISABLED`|Driver signature enforcement is disabled.| -### Error category: Device lockout threshold +### Device lockout Device lockout threshold functionality allows an administrator to configure Windows logon with BitLocker protection. After the configured number of failed Windows logon attempts, the device reboots and can only be recovered by providing a BitLocker recovery method. @@ -237,42 +248,44 @@ To take advantage of this functionality, you must configure the policy setting * |`E_FVE_DEVICE_LOCKEDOUT`|Device lockout triggered due to too many incorrect sign in attempts.|A BitLocker recovery method is required to return to the logon screen.| |`E_FVE_DEVICE_LOCKOUT_MISMATCH`|The device lockout counter is out of sync. |A BitLocker recovery method is required to return to the logon screen.| -### Error category: Boot configuration +### Boot configuration -The *Boot Configuration Database (BCD)* contains critical information for the Windows boot environment. More information about how BitLocker uses the BCD is available here. +The *Boot Configuration Database (BCD)* contains critical information for the Windows boot environment. | Error code | Error cause | Resolution| |-|-|-| -|`E_FVE_BAD_CODE_ID, E_FVE_BAD_CODE_OPTION`|BitLocker entered recovery mode because a boot application has changed.|BitLocker tracks the data inside the BCD. BitLocker recovery can occur when this data changes without warning. Refer to the recovery screen to find the boot application that changed.
To remediate this issue, restore the BCD configuration. A BitLocker recovery method is required to unlock the device if the BCD configuration cannot be restored before booting.| +|`E_FVE_BAD_CODE_ID`

`E_FVE_BAD_CODE_OPTION`|BitLocker entered recovery mode because a boot application changed.
BitLocker tracks the data inside the BCD and BitLocker recovery can occur when this data changes without warning.

Refer to the recovery screen to find the boot application that changed.|To remediate this issue, restore the BCD configuration. A BitLocker recovery method is required to unlock the device if the BCD configuration cannot be restored before booting.| -### Error category: TPM +For more information, see [Boot Configuration Data settings and BitLocker](bcd-settings-and-bitlocker.md). -The Trusted Platform Module (TPM) is cryptographic hardware or firmware used to secure a device. More information about the TPM is available at Trusted Platform Module Technology Overview - Windows Security | Microsoft Learn. +### TPM -BitLocker creates a TPM protector to manage protection of the encryption keys used to encrypt your data. At boot, BitLocker attempts to communicate with the TPM to unlock the device and access your data. More information about how BitLocker uses the TPM is available at BitLocker overview - Windows Security | Microsoft Learn. +The Trusted Platform Module (TPM) is cryptographic hardware or firmware used to secure a device. BitLocker creates a *TPM protector* to manage protection of the encryption keys used to encrypt your data. -BitLocker entered recovery mode because of a failure with the TPM. +At boot, BitLocker attempts to communicate with the TPM to unlock the device and access your data. | Error code | Error cause | |-|-| -|`E_FVE_TPM_DISABLED` | A TPM is present but has been disabled for use before or during boot| -|`E_FVE_TPM_INVALIDATED` | A TPM is present but invalidated| -|`E_FVE_BAD_SRK` | The TPM's internal Storage Root Key is corrupted| -|`E_FVE_TPM_NOT_DETECTED` | The booting system doesn't have or doesn't detect a TPM| -|`E_MATCHING_PCRS_TPM_FAILURE`| The TPM unexpectedly failed when unsealing the encryption key| +|`E_FVE_TPM_DISABLED` | A TPM is present but has been disabled for use before or during boot.| +|`E_FVE_TPM_INVALIDATED` | A TPM is present but invalidated.| +|`E_FVE_BAD_SRK` | The TPM's internal Storage Root Key is corrupted.| +|`E_FVE_TPM_NOT_DETECTED` | The booting system doesn't have or doesn't detect a TPM.| +|`E_MATCHING_PCRS_TPM_FAILURE`| The TPM unexpectedly failed when unsealing the encryption key.| |`E_FVE_TPM_FAILURE` | Catch-all for other TPM errors.| -### Error category: Protector +For more information, see [Trusted Platform Module Technology Overview](../../../hardware-security/tpm/trusted-platform-module-overview.md) and [BitLocker and TPM](index.md#bitlocker-and-tpm). + +### Protector #### TPM protectors The TPM contains multiple Platform Configuration Registers (PCRs) that can be used in the validation profile of the BitLocker TPM protector. The PCRs are used to validate the integrity of the boot process, that is, that the boot configuration and boot flow hasn't been tampered with. -BitLocker recovery can be the result of unexpected changes in the PCRs used in the TPM protector validation profile. Changes to PCRs not used in the TPM protector profile do not influence BitLocker. +BitLocker recovery can be the result of unexpected changes in the PCRs used in the TPM protector validation profile. Changes to PCRs not used in the TPM protector profile don't influence BitLocker. | Error code | Error cause |Resolution| |-|-| -|`E_FVE_PCR_MISMATCH`|BitLocker entered recovery mode because your device's configuration has changed.

This may have happened because:
- A bootable disc or USB device is inserted. Removing it and restarting your device may fix this problem
- A firmware update was applied without updating the TPM protector

For more examples, see [BitLocker recovery scenarios](recovery-overview.md#bitlocker-recovery-scenarios)| recovery method is required to unlock the device.| +|`E_FVE_PCR_MISMATCH`|The device's configuration has changed.

This may have happened because:
- A bootable disc or USB device is inserted. Removing it and restarting your device might fix this problem
- A firmware update was applied without updating the TPM protector

For more examples, see [BitLocker recovery scenarios](recovery-overview.md#bitlocker-recovery-scenarios)| A recovery method is required to unlock the device.| #### Special cases for PCR 7 @@ -280,11 +293,13 @@ If the TPM protector uses PCR 7 in the validation profile, BitLocker expects PCR | Error code | Error cause |Resolution| |-|-|-| -|`E_FVE_SECUREBOOT_DISABLED`|BitLocker entered recovery mode because Secure Boot has been disabled.|To access the encryption key and unlock your device, BitLocker expects Secure Boot to be on. Re-enabling Secure Boot and rebooting the system may fix the recovery issue. Otherwise, a recovery method is required to access the device.| -|`E_FVE_SECUREBOOT_CHANGED`|BitLocker entered recovery mode because the Secure Boot configuration unexpectedly changed.|The boot configuration measured in PCR 7 changed. This may be either because of:
- An additional measurement currently present that was not present when BitLocker updated the TPM protector
- A missing measurement that was present when BitLocker last updated the TPM protector but now is not present
- An expected event has a different measurement - A recovery method is required to unlock the device.| +|`E_FVE_SECUREBOOT_DISABLED`|Secure Boot has been disabled. To access the encryption key and unlock your device, BitLocker expects Secure Boot to be on. | Re-enabling Secure Boot and rebooting the system might fix the recovery issue. Otherwise, a recovery method is required to access the device.| +|`E_FVE_SECUREBOOT_CHANGED`|The Secure Boot configuration unexpectedly changed. The boot configuration measured in PCR 7 changed.
This may be either because of:
- An additional measurement currently present that was not present when BitLocker updated the TPM protector
- A missing measurement that was present when BitLocker last updated the TPM protector but now is not present
- An expected event has a different measurement | A recovery method is required to unlock the device.| -### Error category: Unknown +For more information, see [Static Root of Trust Measurements](/previous-versions/windows/hardware/hck/jj923068(v=vs.85)#appendix-a-static-root-of-trust-measurements) + +### Unknown | Error code | Error cause | Resolution| |-|-|-| -|`E_FVE_RECOVERY_ERROR_UNKNOWN`| BitLocker entered recovery mode because of an unknown error. | A recovery method is required to unlock the device.| \ No newline at end of file +|`E_FVE_RECOVERY_ERROR_UNKNOWN`| BitLocker entered recovery mode because of an unknown error. | A recovery method is required to unlock the device.| From a0d1c4c179875fc77b564ad93e1c9aa1c65c38b8 Mon Sep 17 00:00:00 2001 From: Paolo Matarazzo <74918781+paolomatarazzo@users.noreply.github.com> Date: Wed, 19 Jun 2024 10:33:02 -0400 Subject: [PATCH 15/99] Intro updates --- .../bitlocker/preboot-recovery-screen.md | 20 ++++++++++--------- 1 file changed, 11 insertions(+), 9 deletions(-) diff --git a/windows/security/operating-system-security/data-protection/bitlocker/preboot-recovery-screen.md b/windows/security/operating-system-security/data-protection/bitlocker/preboot-recovery-screen.md index 35d739095e..671af71364 100644 --- a/windows/security/operating-system-security/data-protection/bitlocker/preboot-recovery-screen.md +++ b/windows/security/operating-system-security/data-protection/bitlocker/preboot-recovery-screen.md @@ -7,9 +7,9 @@ ms.date: 06/18/2024 # BitLocker preboot recovery screen -During BitLocker recovery, the *preboot recovery screen* can display a custom recovery message, a custom recovery URL, and a few hints to help users finding where a key can be retrieved from. +During BitLocker recovery, the *preboot recovery screen* is a critical touchpoint for users, offering a custom recovery message tailored to the organization's needs, a direct recovery URL for additional support, and strategic hints to assist users in locating their recovery key. -This article describes the information displayed in the preboot recovery screen depending on configured policy settings and recovery keys status. +This article delves into the various elements displayed on the preboot recovery screen, detailing how policy settings and the status of recovery keys influence the information presented. Whether it's a personalized message or practical guidance, the preboot recovery screen is designed to streamline the recovery process for users ## Default preboot recovery screen @@ -239,14 +239,14 @@ Driver signature enforcement is used to ensure code integrity of the operating s ### Device lockout -Device lockout threshold functionality allows an administrator to configure Windows logon with BitLocker protection. After the configured number of failed Windows logon attempts, the device reboots and can only be recovered by providing a BitLocker recovery method. +Device lockout threshold functionality allows an administrator to configure Windows sign in with BitLocker protection. After the configured number of failed Windows sign in attempts, the device reboots and can only be recovered by providing a BitLocker recovery method. To take advantage of this functionality, you must configure the policy setting **Interactive logon: Machine account lockout threshold** located in **Computer Configuration** > **Windows Settings** > **Security Settings** > **Local Policies** > **Security Options**. Alternatively, use the [Exchange ActiveSync](/Exchange/clients/exchange-activesync/exchange-activesync) **MaxFailedPasswordAttempts** policy setting, or the [DeviceLock Configuration Service Provider (CSP)](/windows/client-management/mdm/policy-csp-devicelock#accountlockoutpolicy). | Error code | Error cause | Resolution| |-|-|-| -|`E_FVE_DEVICE_LOCKEDOUT`|Device lockout triggered due to too many incorrect sign in attempts.|A BitLocker recovery method is required to return to the logon screen.| -|`E_FVE_DEVICE_LOCKOUT_MISMATCH`|The device lockout counter is out of sync. |A BitLocker recovery method is required to return to the logon screen.| +|`E_FVE_DEVICE_LOCKEDOUT`|Device lockout triggered due to too many incorrect sign in attempts.|A BitLocker recovery method is required to return to the sign in screen.| +|`E_FVE_DEVICE_LOCKOUT_MISMATCH`|The device lockout counter is out of sync. |A BitLocker recovery method is required to return to the sign in screen.| ### Boot configuration @@ -254,7 +254,7 @@ The *Boot Configuration Database (BCD)* contains critical information for the Wi | Error code | Error cause | Resolution| |-|-|-| -|`E_FVE_BAD_CODE_ID`

`E_FVE_BAD_CODE_OPTION`|BitLocker entered recovery mode because a boot application changed.
BitLocker tracks the data inside the BCD and BitLocker recovery can occur when this data changes without warning.

Refer to the recovery screen to find the boot application that changed.|To remediate this issue, restore the BCD configuration. A BitLocker recovery method is required to unlock the device if the BCD configuration cannot be restored before booting.| +|`E_FVE_BAD_CODE_ID`

`E_FVE_BAD_CODE_OPTION`|BitLocker entered recovery mode because a boot application changed.
BitLocker tracks the data inside the BCD and BitLocker recovery can occur when this data changes without warning.

Refer to the recovery screen to find the boot application that changed.|To remediate this issue, restore the BCD configuration. A BitLocker recovery method is required to unlock the device if the BCD configuration can't be restored before booting.| For more information, see [Boot Configuration Data settings and BitLocker](bcd-settings-and-bitlocker.md). @@ -266,7 +266,7 @@ At boot, BitLocker attempts to communicate with the TPM to unlock the device and | Error code | Error cause | |-|-| -|`E_FVE_TPM_DISABLED` | A TPM is present but has been disabled for use before or during boot.| +|`E_FVE_TPM_DISABLED` | A TPM is present but is disabled for use before or during boot.| |`E_FVE_TPM_INVALIDATED` | A TPM is present but invalidated.| |`E_FVE_BAD_SRK` | The TPM's internal Storage Root Key is corrupted.| |`E_FVE_TPM_NOT_DETECTED` | The booting system doesn't have or doesn't detect a TPM.| @@ -285,7 +285,9 @@ BitLocker recovery can be the result of unexpected changes in the PCRs used in t | Error code | Error cause |Resolution| |-|-| -|`E_FVE_PCR_MISMATCH`|The device's configuration has changed.

This may have happened because:
- A bootable disc or USB device is inserted. Removing it and restarting your device might fix this problem
- A firmware update was applied without updating the TPM protector

For more examples, see [BitLocker recovery scenarios](recovery-overview.md#bitlocker-recovery-scenarios)| A recovery method is required to unlock the device.| +|`E_FVE_PCR_MISMATCH`|The device's configuration changed.

Possible causes include:
- A bootable media is inserted. Removing it and restarting your device might fix this problem
- A firmware update was applied without updating the TPM protector| A recovery method is required to unlock the device.| + +For more examples, see [BitLocker recovery scenarios](recovery-overview.md#bitlocker-recovery-scenarios). #### Special cases for PCR 7 @@ -294,7 +296,7 @@ If the TPM protector uses PCR 7 in the validation profile, BitLocker expects PCR | Error code | Error cause |Resolution| |-|-|-| |`E_FVE_SECUREBOOT_DISABLED`|Secure Boot has been disabled. To access the encryption key and unlock your device, BitLocker expects Secure Boot to be on. | Re-enabling Secure Boot and rebooting the system might fix the recovery issue. Otherwise, a recovery method is required to access the device.| -|`E_FVE_SECUREBOOT_CHANGED`|The Secure Boot configuration unexpectedly changed. The boot configuration measured in PCR 7 changed.
This may be either because of:
- An additional measurement currently present that was not present when BitLocker updated the TPM protector
- A missing measurement that was present when BitLocker last updated the TPM protector but now is not present
- An expected event has a different measurement | A recovery method is required to unlock the device.| +|`E_FVE_SECUREBOOT_CHANGED`|The Secure Boot configuration unexpectedly changed. The boot configuration measured in PCR 7 changed.
This may be either because of:
- An additional measurement currently present that wasn't present when BitLocker updated the TPM protector
- A missing measurement that was present when BitLocker last updated the TPM protector but now isn't present
- An expected event has a different measurement | A recovery method is required to unlock the device.| For more information, see [Static Root of Trust Measurements](/previous-versions/windows/hardware/hck/jj923068(v=vs.85)#appendix-a-static-root-of-trust-measurements) From 3b79dddf25daa02b8a1d587eb8ffed67ff5e071d Mon Sep 17 00:00:00 2001 From: Paolo Matarazzo <74918781+paolomatarazzo@users.noreply.github.com> Date: Wed, 19 Jun 2024 10:45:23 -0400 Subject: [PATCH 16/99] update to lightbox path image --- .../data-protection/bitlocker/preboot-recovery-screen.md | 4 ++-- 1 file changed, 2 insertions(+), 2 deletions(-) diff --git a/windows/security/operating-system-security/data-protection/bitlocker/preboot-recovery-screen.md b/windows/security/operating-system-security/data-protection/bitlocker/preboot-recovery-screen.md index 671af71364..8f37009fa3 100644 --- a/windows/security/operating-system-security/data-protection/bitlocker/preboot-recovery-screen.md +++ b/windows/security/operating-system-security/data-protection/bitlocker/preboot-recovery-screen.md @@ -2,7 +2,7 @@ title: BitLocker preboot recovery screen description: Learn about the information displayed in the BitLocker preboot recovery screen, depending on configured policy settings and recovery keys status. ms.topic: concept-article -ms.date: 06/18/2024 +ms.date: 06/19/2024 --- # BitLocker preboot recovery screen @@ -197,7 +197,7 @@ Starting in Windows 11, version 24H2, the BitLocker preboot recovery screen enha Users have the option to review additional information about the recovery error by pressing the Alt key. :::column-end::: :::column span="2"::: - :::image type="content" source="images/preboot-recovery-additional.png" alt-text="Screenshot of the BitLocker recovery screen highlighting the Alt keyboard button to access the recovery information screen." lightbox="imagespreboot-recovery-additional.png" border="false"::: + :::image type="content" source="images/preboot-recovery-additional.png" alt-text="Screenshot of the BitLocker recovery screen highlighting the Alt keyboard button to access the recovery information screen." lightbox="images/preboot-recovery-additional.png" border="false"::: :::column-end::: :::row-end::: :::row::: From a9338be872d884c28d265a78c9c23741ba6efe62 Mon Sep 17 00:00:00 2001 From: Paolo Matarazzo <74918781+paolomatarazzo@users.noreply.github.com> Date: Wed, 19 Jun 2024 13:31:58 -0400 Subject: [PATCH 17/99] update --- .../data-protection/bitlocker/preboot-recovery-screen.md | 4 +--- 1 file changed, 1 insertion(+), 3 deletions(-) diff --git a/windows/security/operating-system-security/data-protection/bitlocker/preboot-recovery-screen.md b/windows/security/operating-system-security/data-protection/bitlocker/preboot-recovery-screen.md index 8f37009fa3..a1006f2b79 100644 --- a/windows/security/operating-system-security/data-protection/bitlocker/preboot-recovery-screen.md +++ b/windows/security/operating-system-security/data-protection/bitlocker/preboot-recovery-screen.md @@ -291,15 +291,13 @@ For more examples, see [BitLocker recovery scenarios](recovery-overview.md#bitlo #### Special cases for PCR 7 -If the TPM protector uses PCR 7 in the validation profile, BitLocker expects PCR 7 to measure a specific set of events for Secure Boot. These measurements are defined in the UEFI spec. More information is also available at Trusted Execution Environment EFI Protocol - Windows 8.1 HCK | Microsoft Learn. +If the TPM protector uses PCR 7 in the validation profile, BitLocker expects PCR 7 to measure a specific set of events for Secure Boot. These measurements are defined in the UEFI spec. For more information, see [Static Root of Trust Measurements](/previous-versions/windows/hardware/hck/jj923068(v=vs.85)#appendix-a-static-root-of-trust-measurements) | Error code | Error cause |Resolution| |-|-|-| |`E_FVE_SECUREBOOT_DISABLED`|Secure Boot has been disabled. To access the encryption key and unlock your device, BitLocker expects Secure Boot to be on. | Re-enabling Secure Boot and rebooting the system might fix the recovery issue. Otherwise, a recovery method is required to access the device.| |`E_FVE_SECUREBOOT_CHANGED`|The Secure Boot configuration unexpectedly changed. The boot configuration measured in PCR 7 changed.
This may be either because of:
- An additional measurement currently present that wasn't present when BitLocker updated the TPM protector
- A missing measurement that was present when BitLocker last updated the TPM protector but now isn't present
- An expected event has a different measurement | A recovery method is required to unlock the device.| -For more information, see [Static Root of Trust Measurements](/previous-versions/windows/hardware/hck/jj923068(v=vs.85)#appendix-a-static-root-of-trust-measurements) - ### Unknown | Error code | Error cause | Resolution| From 9dc395ea246fdc4665d397370b556f604a8320aa Mon Sep 17 00:00:00 2001 From: Paolo Matarazzo <74918781+paolomatarazzo@users.noreply.github.com> Date: Wed, 19 Jun 2024 13:45:56 -0400 Subject: [PATCH 18/99] test no-loc --- .../data-protection/bitlocker/preboot-recovery-screen.md | 5 ++++- 1 file changed, 4 insertions(+), 1 deletion(-) diff --git a/windows/security/operating-system-security/data-protection/bitlocker/preboot-recovery-screen.md b/windows/security/operating-system-security/data-protection/bitlocker/preboot-recovery-screen.md index a1006f2b79..21b045fa3d 100644 --- a/windows/security/operating-system-security/data-protection/bitlocker/preboot-recovery-screen.md +++ b/windows/security/operating-system-security/data-protection/bitlocker/preboot-recovery-screen.md @@ -213,6 +213,8 @@ The next sections describe the codes for each BitLocker error category. Within e The error categories are: +:::no-loc + - [Initiated by user](#initiated-by-user) - [Code integrity](#code-integrity) - [Device lockout](#device-lockout) @@ -221,8 +223,9 @@ The error categories are: - [Protector](#protector) - [Unknown](#unknown) +::: -### Initiated by user +### :::no-loc Initiated by user::: | Error code | Error cause | Resolution| |-|-|-| From fc8ae307deb4d71bf5ae7fdbcad9fad17869815a Mon Sep 17 00:00:00 2001 From: Paolo Matarazzo <74918781+paolomatarazzo@users.noreply.github.com> Date: Wed, 19 Jun 2024 13:54:17 -0400 Subject: [PATCH 19/99] removed localization options with code fence --- .../bitlocker/preboot-recovery-screen.md | 32 ++++++++----------- 1 file changed, 14 insertions(+), 18 deletions(-) diff --git a/windows/security/operating-system-security/data-protection/bitlocker/preboot-recovery-screen.md b/windows/security/operating-system-security/data-protection/bitlocker/preboot-recovery-screen.md index 21b045fa3d..c1ebd9a8ad 100644 --- a/windows/security/operating-system-security/data-protection/bitlocker/preboot-recovery-screen.md +++ b/windows/security/operating-system-security/data-protection/bitlocker/preboot-recovery-screen.md @@ -213,26 +213,22 @@ The next sections describe the codes for each BitLocker error category. Within e The error categories are: -:::no-loc +- [`Initiated by user`](#initiated-by-user) +- [`Code integrity`](#code-integrity) +- [`Device lockout`](#device-lockout) +- [`Boot configuration`](#boot-configuration) +- [`TPM`](#tpm) +- [`Protector`](#protector) +- [`Unknown`](#unknown) -- [Initiated by user](#initiated-by-user) -- [Code integrity](#code-integrity) -- [Device lockout](#device-lockout) -- [Boot configuration](#boot-configuration) -- [TPM](#tpm) -- [Protector](#protector) -- [Unknown](#unknown) - -::: - -### :::no-loc Initiated by user::: +### `Initiated by user` | Error code | Error cause | Resolution| |-|-|-| |`E_FVE_USER_REQUESTED_RECOVERY`|The user explicitly entered recovery mode from a screen with the option to `ESC` to recovery mode.|| |`E_FVE_BOOT_DEBUG_ENABLED`|Boot debugging mode is enabled. |Remove the boot debugging option from the boot configuration database.| -### Code integrity +### `Code integrity` Driver signature enforcement is used to ensure code integrity of the operating system. @@ -240,7 +236,7 @@ Driver signature enforcement is used to ensure code integrity of the operating s |-|-| |`E_FVE_CI_DISABLED`|Driver signature enforcement is disabled.| -### Device lockout +### `Device lockout` Device lockout threshold functionality allows an administrator to configure Windows sign in with BitLocker protection. After the configured number of failed Windows sign in attempts, the device reboots and can only be recovered by providing a BitLocker recovery method. @@ -251,7 +247,7 @@ To take advantage of this functionality, you must configure the policy setting * |`E_FVE_DEVICE_LOCKEDOUT`|Device lockout triggered due to too many incorrect sign in attempts.|A BitLocker recovery method is required to return to the sign in screen.| |`E_FVE_DEVICE_LOCKOUT_MISMATCH`|The device lockout counter is out of sync. |A BitLocker recovery method is required to return to the sign in screen.| -### Boot configuration +### `Boot configuration` The *Boot Configuration Database (BCD)* contains critical information for the Windows boot environment. @@ -261,7 +257,7 @@ The *Boot Configuration Database (BCD)* contains critical information for the Wi For more information, see [Boot Configuration Data settings and BitLocker](bcd-settings-and-bitlocker.md). -### TPM +### `TPM` The Trusted Platform Module (TPM) is cryptographic hardware or firmware used to secure a device. BitLocker creates a *TPM protector* to manage protection of the encryption keys used to encrypt your data. @@ -278,7 +274,7 @@ At boot, BitLocker attempts to communicate with the TPM to unlock the device and For more information, see [Trusted Platform Module Technology Overview](../../../hardware-security/tpm/trusted-platform-module-overview.md) and [BitLocker and TPM](index.md#bitlocker-and-tpm). -### Protector +### `Protector` #### TPM protectors @@ -301,7 +297,7 @@ If the TPM protector uses PCR 7 in the validation profile, BitLocker expects PCR |`E_FVE_SECUREBOOT_DISABLED`|Secure Boot has been disabled. To access the encryption key and unlock your device, BitLocker expects Secure Boot to be on. | Re-enabling Secure Boot and rebooting the system might fix the recovery issue. Otherwise, a recovery method is required to access the device.| |`E_FVE_SECUREBOOT_CHANGED`|The Secure Boot configuration unexpectedly changed. The boot configuration measured in PCR 7 changed.
This may be either because of:
- An additional measurement currently present that wasn't present when BitLocker updated the TPM protector
- A missing measurement that was present when BitLocker last updated the TPM protector but now isn't present
- An expected event has a different measurement | A recovery method is required to unlock the device.| -### Unknown +### `Unknown` | Error code | Error cause | Resolution| |-|-|-| From 4c6053bb30886dd61318c63dba26378bf8cd0f65 Mon Sep 17 00:00:00 2001 From: Paolo Matarazzo <74918781+paolomatarazzo@users.noreply.github.com> Date: Wed, 19 Jun 2024 14:02:14 -0400 Subject: [PATCH 20/99] revert for localization --- .../bitlocker/preboot-recovery-screen.md | 28 +++++++++---------- 1 file changed, 14 insertions(+), 14 deletions(-) diff --git a/windows/security/operating-system-security/data-protection/bitlocker/preboot-recovery-screen.md b/windows/security/operating-system-security/data-protection/bitlocker/preboot-recovery-screen.md index c1ebd9a8ad..24437bd519 100644 --- a/windows/security/operating-system-security/data-protection/bitlocker/preboot-recovery-screen.md +++ b/windows/security/operating-system-security/data-protection/bitlocker/preboot-recovery-screen.md @@ -213,22 +213,22 @@ The next sections describe the codes for each BitLocker error category. Within e The error categories are: -- [`Initiated by user`](#initiated-by-user) -- [`Code integrity`](#code-integrity) -- [`Device lockout`](#device-lockout) -- [`Boot configuration`](#boot-configuration) -- [`TPM`](#tpm) -- [`Protector`](#protector) -- [`Unknown`](#unknown) +- [Initiated by user](#initiated-by-user) +- [Code integrity](#code-integrity) +- [Device lockout](#device-lockout) +- [Boot configuration](#boot-configuration) +- [TPM](#tpm) +- [Protector](#protector) +- [Unknown](#unknown) -### `Initiated by user` +### Initiated by user | Error code | Error cause | Resolution| |-|-|-| |`E_FVE_USER_REQUESTED_RECOVERY`|The user explicitly entered recovery mode from a screen with the option to `ESC` to recovery mode.|| |`E_FVE_BOOT_DEBUG_ENABLED`|Boot debugging mode is enabled. |Remove the boot debugging option from the boot configuration database.| -### `Code integrity` +### Code integrity Driver signature enforcement is used to ensure code integrity of the operating system. @@ -236,7 +236,7 @@ Driver signature enforcement is used to ensure code integrity of the operating s |-|-| |`E_FVE_CI_DISABLED`|Driver signature enforcement is disabled.| -### `Device lockout` +### Device lockout Device lockout threshold functionality allows an administrator to configure Windows sign in with BitLocker protection. After the configured number of failed Windows sign in attempts, the device reboots and can only be recovered by providing a BitLocker recovery method. @@ -247,7 +247,7 @@ To take advantage of this functionality, you must configure the policy setting * |`E_FVE_DEVICE_LOCKEDOUT`|Device lockout triggered due to too many incorrect sign in attempts.|A BitLocker recovery method is required to return to the sign in screen.| |`E_FVE_DEVICE_LOCKOUT_MISMATCH`|The device lockout counter is out of sync. |A BitLocker recovery method is required to return to the sign in screen.| -### `Boot configuration` +### Boot configuration The *Boot Configuration Database (BCD)* contains critical information for the Windows boot environment. @@ -257,7 +257,7 @@ The *Boot Configuration Database (BCD)* contains critical information for the Wi For more information, see [Boot Configuration Data settings and BitLocker](bcd-settings-and-bitlocker.md). -### `TPM` +### TPM The Trusted Platform Module (TPM) is cryptographic hardware or firmware used to secure a device. BitLocker creates a *TPM protector* to manage protection of the encryption keys used to encrypt your data. @@ -274,7 +274,7 @@ At boot, BitLocker attempts to communicate with the TPM to unlock the device and For more information, see [Trusted Platform Module Technology Overview](../../../hardware-security/tpm/trusted-platform-module-overview.md) and [BitLocker and TPM](index.md#bitlocker-and-tpm). -### `Protector` +### Protector #### TPM protectors @@ -297,7 +297,7 @@ If the TPM protector uses PCR 7 in the validation profile, BitLocker expects PCR |`E_FVE_SECUREBOOT_DISABLED`|Secure Boot has been disabled. To access the encryption key and unlock your device, BitLocker expects Secure Boot to be on. | Re-enabling Secure Boot and rebooting the system might fix the recovery issue. Otherwise, a recovery method is required to access the device.| |`E_FVE_SECUREBOOT_CHANGED`|The Secure Boot configuration unexpectedly changed. The boot configuration measured in PCR 7 changed.
This may be either because of:
- An additional measurement currently present that wasn't present when BitLocker updated the TPM protector
- A missing measurement that was present when BitLocker last updated the TPM protector but now isn't present
- An expected event has a different measurement | A recovery method is required to unlock the device.| -### `Unknown` +### Unknown | Error code | Error cause | Resolution| |-|-|-| From 9a105c29542aab6d9f3ae1a09c68c969af6e2e9a Mon Sep 17 00:00:00 2001 From: mikolding Date: Thu, 20 Jun 2024 10:37:31 -0700 Subject: [PATCH 21/99] Update updatemanagedvsupdateunmanageddevices.md --- .../updatemanagedvsupdateunmanageddevices.md | 83 ------------------- 1 file changed, 83 deletions(-) diff --git a/windows/deployment/update/updatemanagedvsupdateunmanageddevices.md b/windows/deployment/update/updatemanagedvsupdateunmanageddevices.md index da212512ce..9bc4dee63b 100644 --- a/windows/deployment/update/updatemanagedvsupdateunmanageddevices.md +++ b/windows/deployment/update/updatemanagedvsupdateunmanageddevices.md @@ -1,52 +1,4 @@ ---- -# Required metadata -# For more information, see https://review.learn.microsoft.com/en-us/help/platform/learn-editor-add-metadata?branch=main -# For valid values of ms.service, ms.prod, and ms.topic, see https://review.learn.microsoft.com/en-us/help/platform/metadata-taxonomies?branch=main -title: # Add a title for the browser tab -description: # Add a meaningful description for search results -author: mikolding # GitHub alias -ms.author: v-mikolding # Microsoft alias -ms.service: # Add the ms.service or ms.prod value -# ms.prod: # To use ms.prod, uncomment it and delete ms.service -ms.topic: # Add the ms.topic value -ms.date: 06/12/2024 ---- - -# Update-managed vs Update-unmanaged devices - ---- -title: "Managing Windows Updates: IT Managed vs. Unmanaged Devices" ---- - -**Request title**: Defining Windows Update managed and Windows Update unmanaged devices - -**Generated text**: - ------------------------------------------------------------------------- - ---- -title: "Defining Windows Update managed and Windows Update unmanaged devices" -description: -author: -ms.author: v-mikolding -manager: -ms.date: 06/05/2024 -ms.topic: -ms.service: windows-client -ms.subservice: -ms.localizationpriority: -ms.collection: -ms.custom: QuickDraft -ms.reviewer: thtrombl;arcarley;royork;sumitav;kerick;maferr;v-fvalentyna -search.appverid: MET150 -f1.keywords: -audience: -ai-usage: -- ai-assisted ---- - -\`\`\`html # Managing Windows Updates: IT Managed vs. Unmanaged Devices @@ -106,38 +58,3 @@ For more information on managed and unmanaged devices, check out [Secure managed | SEO Keywords | Suggested Additions | Links to Update | Issues/Concerns | |-----------------------------------------------------------------------------------------------------------|--------------------------------------------------------------------------------------|------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------|--------------------------------------------------------------------| | Windows update management, IT managed devices, unmanaged devices, Windows updates, Intune managed devices | Add detailed steps for configuring GPO, CSP, and Graph policies for managing updates | [Update Policy CSP - Windows Client Management](https://docs.microsoft.com/windows/client-management/mdm/policy-csp-update), [Secure managed and unmanaged devices](https://docs.microsoft.com/mem/intune/protect/protect-devices) | Ensure all links are up to date and point to the correct resources | - -\`\`\` -\*\*Customer Intent for this Article:\*\* Understand the differences between IT-managed and unmanaged Windows devices to better manage Windows updates. - ------------------------------------------------------------------------- - -**Acrolinx score**: **82** - -**Acrolinx correctness score**: 89 - -**Acrolinx scorecard** (Acrolinx account required): https://microsoft-ce-csi-qa.acrolinx.cloud/api/v1/checking/scorecards/d9ad0ab8-ffa3-4af1-a7c7-00cbb71a4d52 - ------------------------------------------------------------------------- - -**Reviewers**: thtrombl;arcarley;royork;sumitav;kerick;maferr;v-fvalentyna - -**Key dates**: - ------------------------------------------------------------------------- - -**Audience**: Admin - -**Product**: Windows 10/11 - -**Article should cover the following**: Windows Update IT Managed = there are policies (GP, CSP, or Graph) configured on the device to manage update offering and/or experience. \nWindows Update Offering IT Managed = there are policies configured (GP, CSP, or Graph) to manage when/which feature, quality, driver, etc. updates are offered to the device. \nWindows Update Experience IT Managed = there are policies configured (GP, CSP, or Graph) to manage device behavior when taking Windows updates. \nWindows Update Non-IT Managed (Unmanaged) = no policies configured to control which updates are offered or the device behavior when taking updates outside of configuring the Settings page. - -**How this article will help customers**: It’s all about managing Windows updates. Get clarity on terminology for managed and unmanaged Windows devices. - -**Submitted by**: v-mikolding@microsoft.com - -**Spec**: Update managed Windows devices \n\n \n\nAll organizational devices fall into two categories: they are either considered managed or unmanaged. The distinction is especially important when it comes to Windows features, updates, and rollouts. \n\n  \n\nFirst, let’s define managed and unmanaged devices in terms of Windows update management. A few examples of these device categories will help you identify your scenarios. These will serve as the basis for future communications as we update existing content in the coming weeks. \n\n \n\nNote: Windows updates are those that affect the Windows operating system and its components: Windows quality updates, Windows feature updates, and .NET updates. See Windows monthly updates explained. Office and other applications have different management mechanisms. \n\n \n\nWhat are update-managed Windows devices? \n\nWe define an update managed device based on Windows Update management. Windows devices are update managed if an IT administrator or an organization controls the updates for Windows via a management tool (such as Microsoft Intune) or by directly setting policies (for example, Group Policy (GPO), Configuration Service Provider (CSP) policy, or Graph). \n\n \n\nNote: This is true even if you directly set registry keys. However, this is not recommended given that registry keys can be easily overwritten. \n\n \n\n \n\nManaged devices can range from desktops, laptops, and tablets, to servers and manufacturing equipment. You secure and configure them according to your organization’s standards and policies. \n\n \n\nFurther, there are two categories of Windows update managed devices, based on whether you manage the offering or the experience of Windows updates. \n\n  \n\nIT-managed: Windows update offering \n\nYour devices are Windows update-managed if you manage update offering in all the following ways: \n\nYou configure policies to manage which updates are offered to the specific device. \n\nYou set when your organization should receive feature, quality, and driver updates, among others. \n\nYou use Group Policy (GP), Cloud Solution Provider (CSP), or Graph to configure these offerings. \n\n \n\nIT-managed: Windows update experience \n\nYour devices are Windows update-managed if you use policies (GP, CSP, or Graph) to manage device behavior when taking Windows updates.  \n\n \n\nExamples of controllable device behavior include active hours, update grace periods and deadlines, update notifications, update scheduling, and more. Consult the complete list at Update Policy CSP - Windows Client Management. \n\n \n\nInserting image... \n\n  \n\nExamples of update managed Windows devices \n\nHere are a few examples of an update managed device: \n\n  \n\nCompany-owned devices: If your IT department provisions devices, they are typically managed devices. You’d often provision these with specific corporate credentials, configurations, and policies for security and manageability. \n\nEmployee-owned devices enrolled in Bring-Your-Own-Device (BYOD) programs: Do you enroll any personally owned devices in the company’s device management system? You’d do this to help these employees access corporate resources securely. The device must adhere to Terms of Use for corporate and personally owned devices connecting to corporate resources. In that scenario, these devices are considered managed. \n\nDevices managed through Windows Autopilot: This tool allows you to set up and preconfigure new devices, making them business-ready right out of the box. If you use Autopilot for any devices, they’re managed. \n\nMandated security settings: Managed devices might include health requirements, such as device encryption, a PIN or strong password, a specific inactivity timeout period, and up-to-date operating systems with enabled auto-updates. \n\nIntune enrolled devices: Devices enrolled in Microsoft Intune are considered managed. Intune allows them to access the company network and enforces device encryption, PIN/password requirements, and specific inactivity timeout periods. \n\nThird-party managed devices: Devices enrolled into third-party management tooling are considered managed if you configure Windows update policies via GPO, CSP, or registry key. Specifically, you configure these devices to point them to a local Windows Server Update Services (WSUS), disable access to Windows Update (WU), or manage which Windows updates are offered. \n\nWhat are update-unmanaged Windows devices? \n\nUnlike update-managed devices, you don’t control unmanaged Windows devices through policies, management tools, or software. \n\nThese devices aren’t enrolled in tools like Microsoft Intune or Configuration Manager. \n\nYou don’t configure policies to control Windows update offerings or experience for these devices. \n\nIf all you do is configure the Settings page to control overall device behavior when taking updates, it’s an unmanaged device. \n\n \n\nNote: If you’ve seen the term “Microsoft managed devices,” it used to refer to what we now call “update unmanaged Windows devices.” Based on your feedback, we’ll update existing content with these more informative definitions to drive clarity. \n\nExamples of Windows update unmanaged devices \n\nExamples of update unmanaged devices include: \n\n  \n\nPersonal devices: If some individuals at your organization own a device that is not enrolled in any corporate management system, it’s an unmanaged device. It wouldn’t have any security configurations and policies that you typically apply for your organization. \n\nBYOD devices not enrolled in management programs: BYOD programs are characterized by management policies. So, if there are devices that aren’t part of an organizational BYOD program, they remain unmanaged even if used for work. \n\nPeripheral devices: Printers, IP phones, and uninterruptible power supplies (UPS) often don’t accept centrally managed administrative credentials. Therefore, they cannot have management agents installed on them, leaving them unmanaged. \n\n \n\nThank you for your feedback in helping us drive clarity into content and definitions. We’ll be updating existing content across Microsoft pages to reflect these definitions. For more information on managed and unmanaged devices, check out Secure managed and unmanaged devices. - -**Run ID**: 3557dc16-a3ef-4007-8f20-8d929b2c29f1 - -**Session ID**: e46f3c4d-8c88-4605-9d63-4f325db41925 From 856ca7e823d9298f4587eac146b67dd717a4fac3 Mon Sep 17 00:00:00 2001 From: Paolo Matarazzo <74918781+paolomatarazzo@users.noreply.github.com> Date: Fri, 21 Jun 2024 12:26:29 -0400 Subject: [PATCH 22/99] [Cred Guard] Server 2025 include file --- .../identity-protection/credential-guard/configure.md | 3 +-- .../credential-guard/considerations-known-issues.md | 6 ++---- .../identity-protection/credential-guard/index.md | 3 +-- windows/security/includes/windows-server-2025-preview.md | 9 +++++++++ 4 files changed, 13 insertions(+), 8 deletions(-) create mode 100644 windows/security/includes/windows-server-2025-preview.md diff --git a/windows/security/identity-protection/credential-guard/configure.md b/windows/security/identity-protection/credential-guard/configure.md index d108d589ab..fee6dbbc20 100644 --- a/windows/security/identity-protection/credential-guard/configure.md +++ b/windows/security/identity-protection/credential-guard/configure.md @@ -11,8 +11,7 @@ This article describes how to configure Credential Guard using Microsoft Intune, ## Default enablement -> [!IMPORTANT] -> Windows Server 2025 is in preview. This information relates to a prerelease product that may be substantially modified before it's released. Microsoft makes no warranties, expressed or implied, with respect to the information provided here. +[!INCLUDE [windows-server-2025-preview](../../includes/windows-server-2025-preview.md)] Starting in Windows 11, 22H2 and Windows Server 2025 (preview), Credential Guard is [enabled by default on devices which meet the requirements](index.md#default-enablement). diff --git a/windows/security/identity-protection/credential-guard/considerations-known-issues.md b/windows/security/identity-protection/credential-guard/considerations-known-issues.md index ac6539336e..b52bfea7e9 100644 --- a/windows/security/identity-protection/credential-guard/considerations-known-issues.md +++ b/windows/security/identity-protection/credential-guard/considerations-known-issues.md @@ -11,8 +11,7 @@ Microsoft recommends that in addition to deploying Credential Guard, organizatio ## Upgrade considerations -> [!IMPORTANT] -> Windows Server 2025 is in preview. This information relates to a prerelease product that may be substantially modified before it's released. Microsoft makes no warranties, expressed or implied, with respect to the information provided here. +[!INCLUDE [windows-server-2025-preview](../../includes/windows-server-2025-preview.md)] As Credential Guard evolves and enhances its security features, newer versions of Windows running Credential Guard might affect previously functional scenarios. For instance, Credential Guard could restrict the use of certain credentials or components to thwart malware exploiting vulnerabilities. @@ -123,8 +122,7 @@ This article describes known issues when Credential Guard is enabled. ### Live migration with Hyper-V breaks when upgrading to Windows Server 2025 (preview) -> [!IMPORTANT] -> Windows Server 2025 is in previeww. This information relates to a prerelease product that may be substantially modified before it's released. Microsoft makes no warranties, expressed or implied, with respect to the information provided here. +[!INCLUDE [windows-server-2025-preview](../../includes/windows-server-2025-preview.md)] Devices that use CredSSP-based Delegation might no longer be able to use [Live Migration with Hyper-V](/windows-server/virtualization/hyper-v/manage/live-migration-overview) after upgrading to Windows Server 2025 (preview). Applications and services that rely on live migration (such as [SCVMM](/system-center/vmm/overview)) might also be affected. CredSSP-based delegation is the default for Windows Server 2022 and earlier for live migration. diff --git a/windows/security/identity-protection/credential-guard/index.md b/windows/security/identity-protection/credential-guard/index.md index 49a794950b..fcbe9884bb 100644 --- a/windows/security/identity-protection/credential-guard/index.md +++ b/windows/security/identity-protection/credential-guard/index.md @@ -22,8 +22,7 @@ When enabled, Credential Guard provides the following benefits: ## Default enablement -> [!IMPORTANT] -> Windows Server 2025 is in preview. This information relates to a prerelease product that may be substantially modified before it's released. Microsoft makes no warranties, expressed or implied, with respect to the information provided here. +[!INCLUDE [windows-server-2025-preview](../../includes/windows-server-2025-preview.md)] Starting in **Windows 11, 22H2** and **Windows Server 2025 (preview)**, VBS and Credential Guard are enabled by default on devices that meet the requirements. diff --git a/windows/security/includes/windows-server-2025-preview.md b/windows/security/includes/windows-server-2025-preview.md new file mode 100644 index 0000000000..2fb5482de1 --- /dev/null +++ b/windows/security/includes/windows-server-2025-preview.md @@ -0,0 +1,9 @@ +--- +author: paolomatarazzo +ms.author: paoloma +ms.date: 06/21/2024 +ms.topic: include +--- + +> [!IMPORTANT] +> Windows Server 2025 is in preview. This information relates to a prerelease product that may be substantially modified before it's released. Microsoft makes no warranties, expressed or implied, with respect to the information provided here. From 0e093e9a926ee4a806a1e94b7912c2ed5899b0ba Mon Sep 17 00:00:00 2001 From: "Vinay Pamnani (from Dev Box)" Date: Fri, 21 Jun 2024 11:02:53 -0600 Subject: [PATCH 23/99] May CSP Updates --- .../mdm/activesync-ddf-file.md | 4 +- .../mdm/applicationcontrol-csp-ddf.md | 4 +- .../mdm/applocker-ddf-file.md | 4 +- .../mdm/assignedaccess-ddf.md | 4 +- .../mdm/bitlocker-ddf-file.md | 4 +- .../mdm/certificatestore-ddf-file.md | 4 +- .../mdm/clientcertificateinstall-ddf-file.md | 6 +- .../client-management/mdm/clouddesktop-csp.md | 61 +++++++- .../mdm/clouddesktop-ddf-file.md | 65 +++++++- .../mdm/declaredconfiguration-ddf-file.md | 4 +- windows/client-management/mdm/defender-csp.md | 143 +++++++++++++++++- windows/client-management/mdm/defender-ddf.md | 102 ++++++++++++- .../mdm/devdetail-ddf-file.md | 4 +- .../mdm/devicemanageability-ddf.md | 4 +- .../mdm/devicepreparation-ddf-file.md | 4 +- .../client-management/mdm/devicestatus-ddf.md | 4 +- .../client-management/mdm/devinfo-ddf-file.md | 4 +- .../mdm/diagnosticlog-ddf.md | 4 +- .../client-management/mdm/dmacc-ddf-file.md | 4 +- .../mdm/dmclient-ddf-file.md | 6 +- .../client-management/mdm/email2-ddf-file.md | 4 +- ...enterprisedesktopappmanagement-ddf-file.md | 6 +- .../mdm/enterprisemodernappmanagement-ddf.md | 6 +- .../client-management/mdm/euiccs-ddf-file.md | 4 +- .../mdm/firewall-ddf-file.md | 4 +- .../mdm/healthattestation-ddf.md | 4 +- .../mdm/language-pack-management-ddf-file.md | 4 +- .../client-management/mdm/laps-ddf-file.md | 4 +- .../client-management/mdm/networkproxy-ddf.md | 4 +- .../mdm/networkqospolicy-ddf.md | 4 +- .../mdm/nodecache-ddf-file.md | 6 +- windows/client-management/mdm/office-ddf.md | 6 +- .../mdm/passportforwork-csp.md | 52 +------ .../mdm/passportforwork-ddf.md | 45 +----- .../mdm/personaldataencryption-ddf-file.md | 4 +- .../mdm/personalization-csp.md | 10 +- .../mdm/personalization-ddf.md | 14 +- .../mdm/policies-in-policy-csp-admx-backed.md | 4 +- ...in-policy-csp-supported-by-group-policy.md | 3 +- ...-in-policy-csp-supported-by-surface-hub.md | 3 +- .../mdm/policy-csp-admx-terminalserver.md | 52 ++++++- .../mdm/policy-csp-deliveryoptimization.md | 18 +-- .../mdm/policy-csp-internetexplorer.md | 56 ++++++- .../mdm/policy-csp-remotedesktopservices.md | 6 +- .../mdm/policy-csp-update.md | 65 +++++++- .../mdm/policy-csp-windowsai.md | 5 +- .../mdm/printerprovisioning-ddf-file.md | 4 +- .../client-management/mdm/reboot-ddf-file.md | 4 +- .../mdm/rootcacertificates-ddf-file.md | 6 +- .../mdm/secureassessment-ddf-file.md | 4 +- .../mdm/sharedpc-ddf-file.md | 4 +- .../client-management/mdm/supl-ddf-file.md | 4 +- .../client-management/mdm/vpnv2-ddf-file.md | 6 +- .../client-management/mdm/wifi-ddf-file.md | 6 +- ...indowsdefenderapplicationguard-ddf-file.md | 4 +- .../mdm/windowslicensing-ddf-file.md | 4 +- .../mdm/wirednetwork-ddf-file.md | 6 +- 57 files changed, 653 insertions(+), 231 deletions(-) diff --git a/windows/client-management/mdm/activesync-ddf-file.md b/windows/client-management/mdm/activesync-ddf-file.md index b48213ce4d..e3debc8c7e 100644 --- a/windows/client-management/mdm/activesync-ddf-file.md +++ b/windows/client-management/mdm/activesync-ddf-file.md @@ -1,7 +1,7 @@ --- title: ActiveSync DDF file description: View the XML file containing the device description framework (DDF) for the ActiveSync configuration service provider. -ms.date: 04/10/2024 +ms.date: 06/19/2024 --- @@ -40,7 +40,7 @@ The following XML file contains the device description framework (DDF) for the A 10.0.10240 1.0 - 0x4;0x1B;0x30;0x31;0x48;0x54;0x62;0x63;0x64;0x65;0x79;0x7A;0x7D;0x7E;0x81;0x82;0x8A;0x8B;0xA1;0xA2;0xA4;0xA5;0xAB;0xAC;0xAF;0xBC;0xBF;0xCA;0xCB;0xCD;0xCF;0xD2; + 0x4;0x1B;0x30;0x31;0x48;0x54;0x62;0x63;0x64;0x65;0x77;0x79;0x7A;0x7D;0x7E;0x81;0x82;0x8A;0x8B;0xA1;0xA2;0xA4;0xA5;0xAB;0xAC;0xAF;0xB4;0xBC;0xBD;0xBF;0xCA;0xCB; diff --git a/windows/client-management/mdm/applicationcontrol-csp-ddf.md b/windows/client-management/mdm/applicationcontrol-csp-ddf.md index 6b5054eb37..e701a8b0ec 100644 --- a/windows/client-management/mdm/applicationcontrol-csp-ddf.md +++ b/windows/client-management/mdm/applicationcontrol-csp-ddf.md @@ -1,7 +1,7 @@ --- title: ApplicationControl DDF file description: View the XML file containing the device description framework (DDF) for the ApplicationControl configuration service provider. -ms.date: 01/31/2024 +ms.date: 06/19/2024 --- @@ -40,7 +40,7 @@ The following XML file contains the device description framework (DDF) for the A 10.0.18362 1.0 - 0x4;0x1B;0x30;0x31;0x48;0x54;0x62;0x63;0x64;0x65;0x79;0x7A;0x7D;0x7E;0x81;0x82;0x88;0x8A;0x8B;0xA1;0xA2;0xA4;0xA5;0xAB;0xAC;0xAF;0xBC;0xBF;0xCA;0xCB;0xCD;0xCF;0xD2; + 0x4;0x1B;0x30;0x31;0x48;0x54;0x62;0x63;0x64;0x65;0x77;0x79;0x7A;0x7D;0x7E;0x81;0x82;0x87;0x88;0x88*;0x8A;0x8B;0xA1;0xA2;0xA4;0xA5;0xAB;0xAC;0xAF;0xB4;0xBC;0xBD;0xBF;0xCA;0xCB; diff --git a/windows/client-management/mdm/applocker-ddf-file.md b/windows/client-management/mdm/applocker-ddf-file.md index f712663818..c8d03d6d27 100644 --- a/windows/client-management/mdm/applocker-ddf-file.md +++ b/windows/client-management/mdm/applocker-ddf-file.md @@ -1,7 +1,7 @@ --- title: AppLocker DDF file description: View the XML file containing the device description framework (DDF) for the AppLocker configuration service provider. -ms.date: 04/10/2024 +ms.date: 06/19/2024 --- @@ -40,7 +40,7 @@ The following XML file contains the device description framework (DDF) for the A 10.0.10586 1.0 - 0x4;0x1B;0x30;0x31;0x48;0x54;0x62;0x63;0x64;0x65;0x79;0x7A;0x7D;0x7E;0x81;0x82;0x8A;0x8B;0xA1;0xA2;0xA4;0xA5;0xAB;0xAC;0xAF;0xBC;0xBF;0xCA;0xCB;0xCD;0xCF;0xD2; + 0x4;0x1B;0x30;0x31;0x48;0x54;0x62;0x63;0x64;0x65;0x79;0x7A;0x7D;0x7E;0x81;0x82;0x87;0x88*;0x8A;0x8B;0xA1;0xA2;0xA4;0xA5;0xAB;0xAC;0xAF;0xB4;0xBC;0xBD;0xBF;0xCA;0xCB; diff --git a/windows/client-management/mdm/assignedaccess-ddf.md b/windows/client-management/mdm/assignedaccess-ddf.md index 5b113fb30f..8bc008e978 100644 --- a/windows/client-management/mdm/assignedaccess-ddf.md +++ b/windows/client-management/mdm/assignedaccess-ddf.md @@ -1,7 +1,7 @@ --- title: AssignedAccess DDF file description: View the XML file containing the device description framework (DDF) for the AssignedAccess configuration service provider. -ms.date: 04/10/2024 +ms.date: 06/19/2024 --- @@ -40,7 +40,7 @@ The following XML file contains the device description framework (DDF) for the A 10.0.10240 1.0 - 0x4;0x1B;0x30;0x31;0x48;0x54;0x79;0x7A;0x7D;0x7E;0x81;0x82;0x88;0x8A;0x8B;0xA1;0xA2;0xA4;0xA5;0xAB;0xAC;0xAF;0xBC;0xBF;0xCA;0xCB;0xCD;0xCF;0xD2; + 0x4;0x1B;0x30;0x31;0x48;0x54;0x77;0x79;0x7A;0x7D;0x7E;0x81;0x82;0x88;0x88*;0x8A;0x8B;0xA1;0xA2;0xA4;0xA5;0xAB;0xAC;0xAF;0xB4;0xBC;0xBD;0xBF;0xCA;0xCB; diff --git a/windows/client-management/mdm/bitlocker-ddf-file.md b/windows/client-management/mdm/bitlocker-ddf-file.md index 738dea71d0..6015905cf3 100644 --- a/windows/client-management/mdm/bitlocker-ddf-file.md +++ b/windows/client-management/mdm/bitlocker-ddf-file.md @@ -1,7 +1,7 @@ --- title: BitLocker DDF file description: View the XML file containing the device description framework (DDF) for the BitLocker configuration service provider. -ms.date: 04/10/2024 +ms.date: 06/19/2024 --- @@ -39,7 +39,7 @@ The following XML file contains the device description framework (DDF) for the B 10.0.15063 1.0 - 0x4;0x1B;0x30;0x31;0x48;0x54;0x79;0x7A;0x7D;0x7E;0x81;0x82;0x8A;0x8B;0xA1;0xA2;0xA4;0xA5;0xAB;0xAC;0xAF;0xBC;0xBF;0xCA;0xCB;0xCD;0xCF;0xD2; + 0x4;0x1B;0x30;0x31;0x48;0x54;0x77;0x79;0x7A;0x7D;0x7E;0x81;0x82;0x8A;0x8B;0xA1;0xA2;0xA4;0xA5;0xAB;0xAC;0xAF;0xB4;0xBC;0xBD;0xBF;0xCA;0xCB; diff --git a/windows/client-management/mdm/certificatestore-ddf-file.md b/windows/client-management/mdm/certificatestore-ddf-file.md index 34d7637fbe..8ab2380099 100644 --- a/windows/client-management/mdm/certificatestore-ddf-file.md +++ b/windows/client-management/mdm/certificatestore-ddf-file.md @@ -1,7 +1,7 @@ --- title: CertificateStore DDF file description: View the XML file containing the device description framework (DDF) for the CertificateStore configuration service provider. -ms.date: 01/31/2024 +ms.date: 06/19/2024 --- @@ -42,7 +42,7 @@ The following XML file contains the device description framework (DDF) for the C 10.0.10586 1.0 - 0x4;0x1B;0x30;0x31;0x48;0x54;0x62;0x63;0x64;0x65;0x79;0x7A;0x7D;0x7E;0x81;0x82;0x88;0x8A;0x8B;0xA1;0xA2;0xA4;0xA5;0xAB;0xAC;0xAF;0xBC;0xBF;0xCA;0xCB;0xCD;0xCF;0xD2; + 0x4;0x1B;0x30;0x31;0x48;0x54;0x62;0x63;0x64;0x65;0x77;0x79;0x7A;0x7D;0x7E;0x81;0x82;0x87;0x88;0x88*;0x8A;0x8B;0xA1;0xA2;0xA4;0xA5;0xAB;0xAC;0xAF;0xB4;0xBC;0xBD;0xBF;0xCA;0xCB; diff --git a/windows/client-management/mdm/clientcertificateinstall-ddf-file.md b/windows/client-management/mdm/clientcertificateinstall-ddf-file.md index 2d9b0700a3..c77ddb1695 100644 --- a/windows/client-management/mdm/clientcertificateinstall-ddf-file.md +++ b/windows/client-management/mdm/clientcertificateinstall-ddf-file.md @@ -1,7 +1,7 @@ --- title: ClientCertificateInstall DDF file description: View the XML file containing the device description framework (DDF) for the ClientCertificateInstall configuration service provider. -ms.date: 04/10/2024 +ms.date: 06/19/2024 --- @@ -39,7 +39,7 @@ The following XML file contains the device description framework (DDF) for the C 10.0.10586 1.0 - 0x4;0x1B;0x30;0x31;0x48;0x54;0x62;0x63;0x64;0x65;0x79;0x7A;0x7D;0x7E;0x81;0x82;0x88;0x8A;0x8B;0xA1;0xA2;0xA4;0xA5;0xAB;0xAC;0xAF;0xBC;0xBF;0xCA;0xCB;0xCD;0xCF;0xD2; + 0x4;0x1B;0x30;0x31;0x48;0x54;0x62;0x63;0x64;0x65;0x77;0x79;0x7A;0x7D;0x7E;0x81;0x82;0x87;0x88;0x88*;0x8A;0x8B;0xA1;0xA2;0xA4;0xA5;0xAB;0xAC;0xAF;0xB4;0xBC;0xBD;0xBF;0xCA;0xCB; @@ -1162,7 +1162,7 @@ Valid values are: 10.0.10586 1.0 - 0x4;0x1B;0x30;0x31;0x48;0x54;0x62;0x63;0x64;0x65;0x79;0x7A;0x7D;0x7E;0x81;0x82;0x88;0x8A;0x8B;0xA1;0xA2;0xA4;0xA5;0xAB;0xAC;0xAF;0xBC;0xBF;0xCA;0xCB;0xCD;0xCF;0xD2; + 0x4;0x1B;0x30;0x31;0x48;0x54;0x62;0x63;0x64;0x65;0x77;0x79;0x7A;0x7D;0x7E;0x81;0x82;0x87;0x88;0x88*;0x8A;0x8B;0xA1;0xA2;0xA4;0xA5;0xAB;0xAC;0xAF;0xB4;0xBC;0xBD;0xBF;0xCA;0xCB; diff --git a/windows/client-management/mdm/clouddesktop-csp.md b/windows/client-management/mdm/clouddesktop-csp.md index e249d20ca8..400b655707 100644 --- a/windows/client-management/mdm/clouddesktop-csp.md +++ b/windows/client-management/mdm/clouddesktop-csp.md @@ -1,7 +1,7 @@ --- title: CloudDesktop CSP description: Learn more about the CloudDesktop CSP. -ms.date: 03/05/2024 +ms.date: 06/19/2024 --- @@ -19,12 +19,14 @@ ms.date: 03/05/2024 The following list shows the CloudDesktop configuration service provider nodes: - ./Device/Vendor/MSFT/CloudDesktop - - [BootToCloudPCEnhanced](#boottocloudpcenhanced) - - [EnableBootToCloudSharedPCMode](#enableboottocloudsharedpcmode) + - [BootToCloudPCEnhanced](#deviceboottocloudpcenhanced) + - [EnableBootToCloudSharedPCMode](#deviceenableboottocloudsharedpcmode) +- ./User/Vendor/MSFT/CloudDesktop + - [EnablePhysicalDeviceAccess](#userenablephysicaldeviceaccess) -## BootToCloudPCEnhanced +## Device/BootToCloudPCEnhanced | Scope | Editions | Applicable OS | @@ -76,7 +78,7 @@ This node allows to configure different kinds of Boot to Cloud mode. Boot to clo -## EnableBootToCloudSharedPCMode +## Device/EnableBootToCloudSharedPCMode > [!NOTE] > This policy is deprecated and may be removed in a future release. @@ -129,6 +131,55 @@ Setting this node to "true" configures boot to cloud for Shared PC mode. Boot to + +## User/EnablePhysicalDeviceAccess + + +| Scope | Editions | Applicable OS | +|:--|:--|:--| +| ❌ Device
✅ User | ✅ Pro
✅ Enterprise
✅ Education
❌ Windows SE
✅ IoT Enterprise / IoT Enterprise LTSC | ✅ Windows Insider Preview | + + + +```User +./User/Vendor/MSFT/CloudDesktop/EnablePhysicalDeviceAccess +``` + + + + +Configuring this node gives access to the physical devices used to boot to Cloud PCs from the Ctrl+Alt+Del page for specified users. This node supports these options: 0. Not enabled 1. Enabled. + + + + + + + +**Description framework properties**: + +| Property name | Property value | +|:--|:--| +| Format | `bool` | +| Access Type | Add, Delete, Get, Replace | +| Default Value | false | + + + +**Allowed values**: + +| Value | Description | +|:--|:--| +| false (Default) | Access to physical device disabled. | +| true | Access to physical device enabled. | + + + + + + + + ## BootToCloudPCEnhanced technical reference diff --git a/windows/client-management/mdm/clouddesktop-ddf-file.md b/windows/client-management/mdm/clouddesktop-ddf-file.md index 98427f9e32..6efe3ed695 100644 --- a/windows/client-management/mdm/clouddesktop-ddf-file.md +++ b/windows/client-management/mdm/clouddesktop-ddf-file.md @@ -1,7 +1,7 @@ --- title: CloudDesktop DDF file description: View the XML file containing the device description framework (DDF) for the CloudDesktop configuration service provider. -ms.date: 03/05/2024 +ms.date: 06/19/2024 --- @@ -17,6 +17,69 @@ The following XML file contains the device description framework (DDF) for the C 1.2 + + CloudDesktop + ./User/Vendor/MSFT + + + + + The CloudDesktop configuration service provider is used to configure different Cloud PC related scenarios. + + + + + + + + + + + + + + 99.9.99999 + 2.0 + 0x4;0x30;0x31;0x7E;0x87;0x88;0x88*;0xA1;0xA2;0xA4;0xA5;0xB4;0xBC;0xBD;0xBF; + + + + EnablePhysicalDeviceAccess + + + + + + + + false + Configuring this node gives access to the physical devices used to boot to Cloud PCs from the Ctrl+Alt+Del page for specified users. This node supports these options: 0. Not enabled 1. Enabled. + + + + + + + + + + Enable access to physical device + + + + + + false + Access to physical device disabled + + + true + Access to physical device enabled + + + + + CloudDesktop ./Device/Vendor/MSFT diff --git a/windows/client-management/mdm/declaredconfiguration-ddf-file.md b/windows/client-management/mdm/declaredconfiguration-ddf-file.md index 95751f45be..031be873a8 100644 --- a/windows/client-management/mdm/declaredconfiguration-ddf-file.md +++ b/windows/client-management/mdm/declaredconfiguration-ddf-file.md @@ -1,7 +1,7 @@ --- title: DeclaredConfiguration DDF file description: View the XML file containing the device description framework (DDF) for the DeclaredConfiguration configuration service provider. -ms.date: 04/10/2024 +ms.date: 06/19/2024 --- @@ -40,7 +40,7 @@ The following XML file contains the device description framework (DDF) for the D 99.9.99999 9.9 - 0x4;0x1B;0x30;0x31;0x48;0x54;0x62;0x63;0x64;0x65;0x79;0x7A;0x7D;0x7E;0x81;0x82;0x8A;0x8B;0xA1;0xA2;0xA4;0xA5;0xAB;0xAC;0xAF;0xBC;0xBF;0xCA;0xCB;0xCD;0xCF;0xD2; + 0x4;0x1B;0x30;0x31;0x48;0x54;0x62;0x63;0x64;0x65;0x77;0x79;0x7A;0x7D;0x7E;0x81;0x82;0x8A;0x8B;0xA1;0xA2;0xA4;0xA5;0xAB;0xAC;0xAF;0xB4;0xBC;0xBD;0xBF;0xCA;0xCB; diff --git a/windows/client-management/mdm/defender-csp.md b/windows/client-management/mdm/defender-csp.md index bd54fa0edc..89c079aeea 100644 --- a/windows/client-management/mdm/defender-csp.md +++ b/windows/client-management/mdm/defender-csp.md @@ -1,7 +1,7 @@ --- title: Defender CSP description: Learn more about the Defender CSP. -ms.date: 05/20/2024 +ms.date: 06/19/2024 --- @@ -33,6 +33,9 @@ The following list shows the Defender configuration service provider nodes: - [BruteForceProtectionConfiguredState](#configurationbehavioralnetworkblocksbruteforceprotectionbruteforceprotectionconfiguredstate) - [BruteForceProtectionExclusions](#configurationbehavioralnetworkblocksbruteforceprotectionbruteforceprotectionexclusions) - [BruteForceProtectionMaxBlockTime](#configurationbehavioralnetworkblocksbruteforceprotectionbruteforceprotectionmaxblocktime) + - [BruteForceProtectionPlugins](#configurationbehavioralnetworkblocksbruteforceprotectionbruteforceprotectionplugins) + - [BruteForceProtectionLocalNetworkBlocking](#configurationbehavioralnetworkblocksbruteforceprotectionbruteforceprotectionpluginsbruteforceprotectionlocalnetworkblocking) + - [BruteForceProtectionSkipLearningPeriod](#configurationbehavioralnetworkblocksbruteforceprotectionbruteforceprotectionpluginsbruteforceprotectionskiplearningperiod) - [RemoteEncryptionProtection](#configurationbehavioralnetworkblocksremoteencryptionprotection) - [RemoteEncryptionProtectionAggressiveness](#configurationbehavioralnetworkblocksremoteencryptionprotectionremoteencryptionprotectionaggressiveness) - [RemoteEncryptionProtectionConfiguredState](#configurationbehavioralnetworkblocksremoteencryptionprotectionremoteencryptionprotectionconfiguredstate) @@ -364,7 +367,7 @@ Control whether network protection can improve performance by switching from rea | Value | Description | |:--|:--| | 1 | Allow switching to asynchronous inspection. | -| 0 (Default) | Don’t allow asynchronous inspection. | +| 0 (Default) | Don't allow asynchronous inspection. | @@ -752,6 +755,142 @@ Set the maximum time an IP address is blocked by Brute-Force Protection. After t + +##### Configuration/BehavioralNetworkBlocks/BruteForceProtection/BruteForceProtectionPlugins + + +| Scope | Editions | Applicable OS | +|:--|:--|:--| +| ✅ Device
❌ User | ✅ Pro
✅ Enterprise
✅ Education
✅ Windows SE
✅ IoT Enterprise / IoT Enterprise LTSC | ✅ Windows 10, version 1607 [10.0.14393] and later | + + + +```Device +./Device/Vendor/MSFT/Defender/Configuration/BehavioralNetworkBlocks/BruteForceProtection/BruteForceProtectionPlugins +``` + + + + + + + + + + + +**Description framework properties**: + +| Property name | Property value | +|:--|:--| +| Format | `node` | +| Access Type | Get | + + + + + + + + + +###### Configuration/BehavioralNetworkBlocks/BruteForceProtection/BruteForceProtectionPlugins/BruteForceProtectionLocalNetworkBlocking + + +| Scope | Editions | Applicable OS | +|:--|:--|:--| +| ✅ Device
❌ User | ✅ Pro
✅ Enterprise
✅ Education
✅ Windows SE
✅ IoT Enterprise / IoT Enterprise LTSC | ✅ Windows 10, version 1709 [10.0.16299] and later | + + + +```Device +./Device/Vendor/MSFT/Defender/Configuration/BehavioralNetworkBlocks/BruteForceProtection/BruteForceProtectionPlugins/BruteForceProtectionLocalNetworkBlocking +``` + + + + +Extend brute-force protection coverage in Microsoft Defender Antivirus to block local network addresses. + + + + + + + +**Description framework properties**: + +| Property name | Property value | +|:--|:--| +| Format | `int` | +| Access Type | Add, Delete, Get, Replace | +| Default Value | 0 | + + + +**Allowed values**: + +| Value | Description | +|:--|:--| +| 0 (Default) | Brute-force protection won't block local network addresses. | +| 1 | Brute-force protection will block local network addresses. | + + + + + + + + + +###### Configuration/BehavioralNetworkBlocks/BruteForceProtection/BruteForceProtectionPlugins/BruteForceProtectionSkipLearningPeriod + + +| Scope | Editions | Applicable OS | +|:--|:--|:--| +| ✅ Device
❌ User | ✅ Pro
✅ Enterprise
✅ Education
✅ Windows SE
✅ IoT Enterprise / IoT Enterprise LTSC | ✅ Windows 10, version 1709 [10.0.16299] and later | + + + +```Device +./Device/Vendor/MSFT/Defender/Configuration/BehavioralNetworkBlocks/BruteForceProtection/BruteForceProtectionPlugins/BruteForceProtectionSkipLearningPeriod +``` + + + + +Skip the 2-week initial learning period, so brute-force protection in Microsoft Defender Antivirus can start blocking immediately. + + + + + + + +**Description framework properties**: + +| Property name | Property value | +|:--|:--| +| Format | `int` | +| Access Type | Add, Delete, Get, Replace | +| Default Value | 0 | + + + +**Allowed values**: + +| Value | Description | +|:--|:--| +| 0 (Default) | Brute-force protection blocks threats only after completing a 2-week learning period. | +| 1 | Brute-force protection starts blocking threats immediately. | + + + + + + + + #### Configuration/BehavioralNetworkBlocks/RemoteEncryptionProtection diff --git a/windows/client-management/mdm/defender-ddf.md b/windows/client-management/mdm/defender-ddf.md index a7f5fe4029..e5da0f2590 100644 --- a/windows/client-management/mdm/defender-ddf.md +++ b/windows/client-management/mdm/defender-ddf.md @@ -1,7 +1,7 @@ --- title: Defender DDF file description: View the XML file containing the device description framework (DDF) for the Defender configuration service provider. -ms.date: 05/20/2024 +ms.date: 06/19/2024 --- @@ -39,7 +39,7 @@ The following XML file contains the device description framework (DDF) for the D 10.0.10586 1.0 - 0x4;0x1B;0x30;0x31;0x48;0x54;0x62;0x63;0x64;0x65;0x79;0x7A;0x7D;0x7E;0x81;0x82;0x8A;0x8B;0xA1;0xA2;0xA4;0xA5;0xAB;0xAC;0xAF;0xBC;0xBF;0xCA;0xCB;0xCD;0xCF;0xD2; + 0x4;0x1B;0x30;0x31;0x48;0x54;0x62;0x63;0x64;0x65;0x77;0x79;0x7A;0x7D;0x7E;0x81;0x82;0x8A;0x8B;0xA1;0xA2;0xA4;0xA5;0xAB;0xAC;0xAF;0xB4;0xBC;0xBD;0xBF;0xCA;0xCB; @@ -3596,6 +3596,104 @@ The following XML file contains the device description framework (DDF) for the D + + BruteForceProtectionPlugins + + + + + + + + + + + + + + + + + + + BruteForceProtectionLocalNetworkBlocking + + + + + + + + 0 + Extend brute-force protection coverage in Microsoft Defender Antivirus to block local network addresses. + + + + + + + + + + + + + + 10.0.16299 + 1.3 + + + + 0 + Brute-force protection will not block local network addresses + + + 1 + Brute-force protection will block local network addresses + + + + + + BruteForceProtectionSkipLearningPeriod + + + + + + + + 0 + Skip the 2-week initial learning period, so brute-force protection in Microsoft Defender Antivirus can start blocking immediately. + + + + + + + + + + + + + + 10.0.16299 + 1.3 + + + + 0 + Brute-force protection blocks threats only after completing a 2-week learning period + + + 1 + Brute-force protection starts blocking threats immediately + + + + + BruteForceProtectionExclusions diff --git a/windows/client-management/mdm/devdetail-ddf-file.md b/windows/client-management/mdm/devdetail-ddf-file.md index 6f562d58b4..8e200f88b4 100644 --- a/windows/client-management/mdm/devdetail-ddf-file.md +++ b/windows/client-management/mdm/devdetail-ddf-file.md @@ -1,7 +1,7 @@ --- title: DevDetail DDF file description: View the XML file containing the device description framework (DDF) for the DevDetail configuration service provider. -ms.date: 04/10/2024 +ms.date: 06/19/2024 --- @@ -40,7 +40,7 @@ The following XML file contains the device description framework (DDF) for the D 10.0.10586 1.0 - 0x4;0x1B;0x30;0x31;0x48;0x54;0x62;0x63;0x64;0x65;0x79;0x7A;0x7D;0x7E;0x81;0x82;0x88;0x8A;0x8B;0xA1;0xA2;0xA4;0xA5;0xAB;0xAC;0xAF;0xBC;0xBF;0xCA;0xCB;0xCD;0xCF;0xD2; + 0x4;0x1B;0x30;0x31;0x48;0x54;0x62;0x63;0x64;0x65;0x77;0x79;0x7A;0x7D;0x7E;0x81;0x82;0x87;0x88;0x88*;0x8A;0x8B;0xA1;0xA2;0xA4;0xA5;0xAB;0xAC;0xAF;0xB4;0xBC;0xBD;0xBF;0xCA;0xCB; diff --git a/windows/client-management/mdm/devicemanageability-ddf.md b/windows/client-management/mdm/devicemanageability-ddf.md index cecd7dd921..59cd0e48a0 100644 --- a/windows/client-management/mdm/devicemanageability-ddf.md +++ b/windows/client-management/mdm/devicemanageability-ddf.md @@ -1,7 +1,7 @@ --- title: DeviceManageability DDF file description: View the XML file containing the device description framework (DDF) for the DeviceManageability configuration service provider. -ms.date: 04/10/2024 +ms.date: 06/19/2024 --- @@ -42,7 +42,7 @@ The following XML file contains the device description framework (DDF) for the D 10.0.14393 1.0 - 0x4;0x1B;0x30;0x31;0x48;0x54;0x62;0x63;0x64;0x65;0x79;0x7A;0x7D;0x7E;0x81;0x82;0x88;0x8A;0x8B;0xA1;0xA2;0xA4;0xA5;0xAB;0xAC;0xAF;0xBC;0xBF;0xCA;0xCB;0xCD;0xCF;0xD2; + 0x4;0x1B;0x30;0x31;0x48;0x54;0x62;0x63;0x64;0x65;0x77;0x79;0x7A;0x7D;0x7E;0x81;0x82;0x87;0x88;0x88*;0x8A;0x8B;0xA1;0xA2;0xA4;0xA5;0xAB;0xAC;0xAF;0xB4;0xBC;0xBD;0xBF;0xCA;0xCB; diff --git a/windows/client-management/mdm/devicepreparation-ddf-file.md b/windows/client-management/mdm/devicepreparation-ddf-file.md index 06ec069113..be9a944b76 100644 --- a/windows/client-management/mdm/devicepreparation-ddf-file.md +++ b/windows/client-management/mdm/devicepreparation-ddf-file.md @@ -1,7 +1,7 @@ --- title: DevicePreparation DDF file description: View the XML file containing the device description framework (DDF) for the DevicePreparation configuration service provider. -ms.date: 04/10/2024 +ms.date: 06/19/2024 --- @@ -40,7 +40,7 @@ The following XML file contains the device description framework (DDF) for the D 99.9.99999 1.0 - 0x4;0x1B;0x30;0x31;0x48;0x54;0x62;0x63;0x64;0x65;0x79;0x7A;0x7D;0x7E;0x81;0x82;0x88;0x8A;0x8B;0xA1;0xA2;0xA4;0xA5;0xAB;0xAC;0xAF;0xBC;0xBF;0xCA;0xCB;0xCD;0xCF;0xD2; + 0x4;0x1B;0x30;0x31;0x48;0x54;0x62;0x63;0x64;0x65;0x77;0x79;0x7A;0x7D;0x7E;0x81;0x82;0x87;0x88;0x88*;0x8A;0x8B;0xA1;0xA2;0xA4;0xA5;0xAB;0xAC;0xAF;0xB4;0xBC;0xBD;0xBF;0xCA;0xCB; diff --git a/windows/client-management/mdm/devicestatus-ddf.md b/windows/client-management/mdm/devicestatus-ddf.md index 2eaff3d375..ae20b8e258 100644 --- a/windows/client-management/mdm/devicestatus-ddf.md +++ b/windows/client-management/mdm/devicestatus-ddf.md @@ -1,7 +1,7 @@ --- title: DeviceStatus DDF file description: View the XML file containing the device description framework (DDF) for the DeviceStatus configuration service provider. -ms.date: 04/10/2024 +ms.date: 06/19/2024 --- @@ -39,7 +39,7 @@ The following XML file contains the device description framework (DDF) for the D 10.0.10586 1.0 - 0x4;0x1B;0x30;0x31;0x48;0x54;0x62;0x63;0x64;0x65;0x79;0x7A;0x7D;0x7E;0x81;0x82;0x88;0x8A;0x8B;0xA1;0xA2;0xA4;0xA5;0xAB;0xAC;0xAF;0xBC;0xBF;0xCA;0xCB;0xCD;0xCF;0xD2; + 0x4;0x1B;0x30;0x31;0x48;0x54;0x62;0x63;0x64;0x65;0x77;0x79;0x7A;0x7D;0x7E;0x81;0x82;0x88;0x88*;0x8A;0x8B;0xA1;0xA2;0xA4;0xA5;0xAB;0xAC;0xAF;0xB4;0xBC;0xBD;0xBF;0xCA;0xCB; diff --git a/windows/client-management/mdm/devinfo-ddf-file.md b/windows/client-management/mdm/devinfo-ddf-file.md index ff9195ba0d..b2d6f8ed7f 100644 --- a/windows/client-management/mdm/devinfo-ddf-file.md +++ b/windows/client-management/mdm/devinfo-ddf-file.md @@ -1,7 +1,7 @@ --- title: DevInfo DDF file description: View the XML file containing the device description framework (DDF) for the DevInfo configuration service provider. -ms.date: 04/10/2024 +ms.date: 06/19/2024 --- @@ -41,7 +41,7 @@ The following XML file contains the device description framework (DDF) for the D 10.0.10586 1.0 - 0x4;0x1B;0x30;0x31;0x48;0x54;0x62;0x63;0x64;0x65;0x79;0x7A;0x7D;0x7E;0x81;0x82;0x88;0x8A;0x8B;0xA1;0xA2;0xA4;0xA5;0xAB;0xAC;0xAF;0xBC;0xBF;0xCA;0xCB;0xCD;0xCF;0xD2; + 0x4;0x1B;0x30;0x31;0x48;0x54;0x62;0x63;0x64;0x65;0x77;0x79;0x7A;0x7D;0x7E;0x81;0x82;0x87;0x88;0x88*;0x8A;0x8B;0xA1;0xA2;0xA4;0xA5;0xAB;0xAC;0xAF;0xB4;0xBC;0xBD;0xBF;0xCA;0xCB; diff --git a/windows/client-management/mdm/diagnosticlog-ddf.md b/windows/client-management/mdm/diagnosticlog-ddf.md index 9603fc932a..eef6af498d 100644 --- a/windows/client-management/mdm/diagnosticlog-ddf.md +++ b/windows/client-management/mdm/diagnosticlog-ddf.md @@ -1,7 +1,7 @@ --- title: DiagnosticLog DDF file description: View the XML file containing the device description framework (DDF) for the DiagnosticLog configuration service provider. -ms.date: 04/10/2024 +ms.date: 06/19/2024 --- @@ -39,7 +39,7 @@ The following XML file contains the device description framework (DDF) for the D 10.0.10586 1.2 - 0x4;0x1B;0x30;0x31;0x48;0x54;0x62;0x63;0x64;0x65;0x79;0x7A;0x7D;0x7E;0x81;0x82;0x88;0x8A;0x8B;0xA1;0xA2;0xA4;0xA5;0xAB;0xAC;0xAF;0xBC;0xBF;0xCA;0xCB;0xCD;0xCF;0xD2; + 0x4;0x1B;0x30;0x31;0x48;0x54;0x62;0x63;0x64;0x65;0x77;0x79;0x7A;0x7D;0x7E;0x81;0x82;0x87;0x88;0x88*;0x8A;0x8B;0xA1;0xA2;0xA4;0xA5;0xAB;0xAC;0xAF;0xB4;0xBC;0xBD;0xBF;0xCA;0xCB; diff --git a/windows/client-management/mdm/dmacc-ddf-file.md b/windows/client-management/mdm/dmacc-ddf-file.md index 331ce57c5d..a0fee28b12 100644 --- a/windows/client-management/mdm/dmacc-ddf-file.md +++ b/windows/client-management/mdm/dmacc-ddf-file.md @@ -1,7 +1,7 @@ --- title: DMAcc DDF file description: View the XML file containing the device description framework (DDF) for the DMAcc configuration service provider. -ms.date: 04/10/2024 +ms.date: 06/19/2024 --- @@ -40,7 +40,7 @@ The following XML file contains the device description framework (DDF) for the D 10.0.10586 1.0 - 0x4;0x1B;0x30;0x31;0x48;0x54;0x62;0x63;0x64;0x65;0x79;0x7A;0x7D;0x7E;0x81;0x82;0x88;0x8A;0x8B;0xA1;0xA2;0xA4;0xA5;0xAB;0xAC;0xAF;0xBC;0xBF;0xCA;0xCB;0xCD;0xCF;0xD2; + 0x4;0x1B;0x30;0x31;0x48;0x54;0x62;0x63;0x64;0x65;0x77;0x79;0x7A;0x7D;0x7E;0x81;0x82;0x87;0x88;0x88*;0x8A;0x8B;0xA1;0xA2;0xA4;0xA5;0xAB;0xAC;0xAF;0xB4;0xBC;0xBD;0xBF;0xCA;0xCB; diff --git a/windows/client-management/mdm/dmclient-ddf-file.md b/windows/client-management/mdm/dmclient-ddf-file.md index dd09a2d66f..c30288ba23 100644 --- a/windows/client-management/mdm/dmclient-ddf-file.md +++ b/windows/client-management/mdm/dmclient-ddf-file.md @@ -1,7 +1,7 @@ --- title: DMClient DDF file description: View the XML file containing the device description framework (DDF) for the DMClient configuration service provider. -ms.date: 04/10/2024 +ms.date: 06/19/2024 --- @@ -40,7 +40,7 @@ The following XML file contains the device description framework (DDF) for the D 10.0.10240 1.0 - 0x4;0x1B;0x30;0x31;0x48;0x54;0x62;0x63;0x64;0x65;0x79;0x7A;0x7D;0x7E;0x81;0x82;0x88;0x8A;0x8B;0xA1;0xA2;0xA4;0xA5;0xAB;0xAC;0xAF;0xBC;0xBF;0xCA;0xCB;0xCD;0xCF;0xD2; + 0x4;0x1B;0x30;0x31;0x48;0x54;0x62;0x63;0x64;0x65;0x77;0x79;0x7A;0x7D;0x7E;0x81;0x82;0x87;0x88;0x88*;0x8A;0x8B;0xA1;0xA2;0xA4;0xA5;0xAB;0xAC;0xAF;0xB4;0xBC;0xBD;0xBF;0xCA;0xCB; @@ -477,7 +477,7 @@ The following XML file contains the device description framework (DDF) for the D 10.0.10240 1.0 - 0x4;0x1B;0x30;0x31;0x48;0x54;0x62;0x63;0x64;0x65;0x79;0x7A;0x7D;0x7E;0x81;0x82;0x88;0x8A;0x8B;0xA1;0xA2;0xA4;0xA5;0xAB;0xAC;0xAF;0xBC;0xBF;0xCA;0xCB;0xCD;0xCF;0xD2; + 0x4;0x1B;0x30;0x31;0x48;0x54;0x62;0x63;0x64;0x65;0x77;0x79;0x7A;0x7D;0x7E;0x81;0x82;0x87;0x88;0x88*;0x8A;0x8B;0xA1;0xA2;0xA4;0xA5;0xAB;0xAC;0xAF;0xB4;0xBC;0xBD;0xBF;0xCA;0xCB; diff --git a/windows/client-management/mdm/email2-ddf-file.md b/windows/client-management/mdm/email2-ddf-file.md index 04e33d681e..a770191467 100644 --- a/windows/client-management/mdm/email2-ddf-file.md +++ b/windows/client-management/mdm/email2-ddf-file.md @@ -1,7 +1,7 @@ --- title: EMAIL2 DDF file description: View the XML file containing the device description framework (DDF) for the EMAIL2 configuration service provider. -ms.date: 04/10/2024 +ms.date: 06/19/2024 --- @@ -40,7 +40,7 @@ The following XML file contains the device description framework (DDF) for the E 10.0.10240 1.0 - 0x4;0x1B;0x30;0x31;0x48;0x54;0x62;0x63;0x64;0x65;0x79;0x7A;0x7D;0x7E;0x81;0x82;0x8A;0x8B;0xA1;0xA2;0xA4;0xA5;0xAB;0xAC;0xAF;0xBC;0xBF;0xCA;0xCB;0xCD;0xCF;0xD2; + 0x4;0x1B;0x30;0x31;0x48;0x54;0x62;0x63;0x64;0x65;0x77;0x79;0x7A;0x7D;0x7E;0x81;0x82;0x8A;0x8B;0xA1;0xA2;0xA4;0xA5;0xAB;0xAC;0xAF;0xB4;0xBC;0xBD;0xBF;0xCA;0xCB; diff --git a/windows/client-management/mdm/enterprisedesktopappmanagement-ddf-file.md b/windows/client-management/mdm/enterprisedesktopappmanagement-ddf-file.md index 3d361ec180..c3304851f0 100644 --- a/windows/client-management/mdm/enterprisedesktopappmanagement-ddf-file.md +++ b/windows/client-management/mdm/enterprisedesktopappmanagement-ddf-file.md @@ -1,7 +1,7 @@ --- title: EnterpriseDesktopAppManagement DDF file description: View the XML file containing the device description framework (DDF) for the EnterpriseDesktopAppManagement configuration service provider. -ms.date: 05/20/2024 +ms.date: 06/19/2024 --- @@ -40,7 +40,7 @@ The following XML file contains the device description framework (DDF) for the E 10.0.10586 1.0 - 0x4;0x1B;0x30;0x31;0x48;0x54;0x79;0x7A;0x7D;0x7E;0x81;0x82;0x8A;0x8B;0xA1;0xA2;0xA4;0xA5;0xAB;0xAC;0xAF;0xBC;0xBF;0xCA;0xCB;0xCD;0xCF;0xD2; + 0x4;0x1B;0x30;0x31;0x48;0x54;0x77;0x79;0x7A;0x7D;0x7E;0x81;0x82;0x8A;0x8B;0xA1;0xA2;0xA4;0xA5;0xAB;0xAC;0xAF;0xB4;0xBC;0xBD;0xBF;0xCA;0xCB; @@ -401,7 +401,7 @@ The following XML file contains the device description framework (DDF) for the E 10.0.10586 1.0 - 0x4;0x1B;0x30;0x31;0x48;0x54;0x79;0x7A;0x7D;0x7E;0x81;0x82;0x8A;0x8B;0xA1;0xA2;0xA4;0xA5;0xAB;0xAC;0xAF;0xBC;0xBF;0xCA;0xCB;0xCD;0xCF;0xD2; + 0x4;0x1B;0x30;0x31;0x48;0x54;0x77;0x79;0x7A;0x7D;0x7E;0x81;0x82;0x8A;0x8B;0xA1;0xA2;0xA4;0xA5;0xAB;0xAC;0xAF;0xB4;0xBC;0xBD;0xBF;0xCA;0xCB; diff --git a/windows/client-management/mdm/enterprisemodernappmanagement-ddf.md b/windows/client-management/mdm/enterprisemodernappmanagement-ddf.md index e60f2f2868..5b6b0433ae 100644 --- a/windows/client-management/mdm/enterprisemodernappmanagement-ddf.md +++ b/windows/client-management/mdm/enterprisemodernappmanagement-ddf.md @@ -1,7 +1,7 @@ --- title: EnterpriseModernAppManagement DDF file description: View the XML file containing the device description framework (DDF) for the EnterpriseModernAppManagement configuration service provider. -ms.date: 04/10/2024 +ms.date: 06/19/2024 --- @@ -39,7 +39,7 @@ The following XML file contains the device description framework (DDF) for the E 10.0.10586 1.0 - 0x4;0x1B;0x30;0x31;0x48;0x54;0x62;0x63;0x64;0x65;0x79;0x7A;0x7D;0x7E;0x81;0x82;0x88;0x8A;0x8B;0xA1;0xA2;0xA4;0xA5;0xAB;0xAC;0xAF;0xBC;0xBF;0xCA;0xCB;0xCD;0xCF;0xD2; + 0x4;0x1B;0x30;0x31;0x48;0x54;0x62;0x63;0x64;0x65;0x77;0x79;0x7A;0x7D;0x7E;0x81;0x82;0x88;0x88*;0x8A;0x8B;0xA1;0xA2;0xA4;0xA5;0xAB;0xAC;0xAF;0xB4;0xBC;0xBD;0xBF;0xCA;0xCB; @@ -2587,7 +2587,7 @@ The following XML file contains the device description framework (DDF) for the E 10.0.10586 1.0 - 0x4;0x1B;0x30;0x31;0x48;0x54;0x62;0x63;0x64;0x65;0x79;0x7A;0x7D;0x7E;0x81;0x82;0x88;0x8A;0x8B;0xA1;0xA2;0xA4;0xA5;0xAB;0xAC;0xAF;0xBC;0xBF;0xCA;0xCB;0xCD;0xCF;0xD2; + 0x4;0x1B;0x30;0x31;0x48;0x54;0x62;0x63;0x64;0x65;0x77;0x79;0x7A;0x7D;0x7E;0x81;0x82;0x88;0x88*;0x8A;0x8B;0xA1;0xA2;0xA4;0xA5;0xAB;0xAC;0xAF;0xB4;0xBC;0xBD;0xBF;0xCA;0xCB; diff --git a/windows/client-management/mdm/euiccs-ddf-file.md b/windows/client-management/mdm/euiccs-ddf-file.md index 36803e6131..09e6e5f725 100644 --- a/windows/client-management/mdm/euiccs-ddf-file.md +++ b/windows/client-management/mdm/euiccs-ddf-file.md @@ -1,7 +1,7 @@ --- title: eUICCs DDF file description: View the XML file containing the device description framework (DDF) for the eUICCs configuration service provider. -ms.date: 04/10/2024 +ms.date: 06/19/2024 --- @@ -43,7 +43,7 @@ The following XML file contains the device description framework (DDF) for the e 10.0.16299 1.0 - 0x4;0x1B;0x30;0x31;0x48;0x54;0x62;0x63;0x64;0x65;0x79;0x7A;0x7D;0x7E;0x81;0x82;0x8A;0x8B;0xA1;0xA2;0xA4;0xA5;0xAB;0xAC;0xAF;0xBC;0xBF;0xCA;0xCB;0xCD;0xCF;0xD2; + 0x4;0x1B;0x30;0x31;0x48;0x54;0x62;0x63;0x64;0x65;0x77;0x79;0x7A;0x7D;0x7E;0x81;0x82;0x8A;0x8B;0xA1;0xA2;0xA4;0xA5;0xAB;0xAC;0xAF;0xB4;0xBC;0xBD;0xBF;0xCA;0xCB; diff --git a/windows/client-management/mdm/firewall-ddf-file.md b/windows/client-management/mdm/firewall-ddf-file.md index 453ee21804..2fd47c663c 100644 --- a/windows/client-management/mdm/firewall-ddf-file.md +++ b/windows/client-management/mdm/firewall-ddf-file.md @@ -1,7 +1,7 @@ --- title: Firewall DDF file description: View the XML file containing the device description framework (DDF) for the Firewall configuration service provider. -ms.date: 04/10/2024 +ms.date: 06/19/2024 --- @@ -40,7 +40,7 @@ The following XML file contains the device description framework (DDF) for the F 10.0.16299 1.0 - 0x4;0x1B;0x30;0x31;0x48;0x54;0x79;0x7A;0x7D;0x7E;0x81;0x82;0x88;0x8A;0x8B;0xA1;0xA2;0xA4;0xA5;0xAB;0xAC;0xAF;0xBC;0xBF;0xCA;0xCB;0xCD;0xCF;0xD2; + 0x4;0x1B;0x30;0x31;0x48;0x54;0x77;0x79;0x7A;0x7D;0x7E;0x81;0x82;0x88;0x8A;0x8B;0xA1;0xA2;0xA4;0xA5;0xAB;0xAC;0xAF;0xB4;0xBC;0xBD;0xBF;0xCA;0xCB; diff --git a/windows/client-management/mdm/healthattestation-ddf.md b/windows/client-management/mdm/healthattestation-ddf.md index d68e4952d2..3b2c4265ae 100644 --- a/windows/client-management/mdm/healthattestation-ddf.md +++ b/windows/client-management/mdm/healthattestation-ddf.md @@ -1,7 +1,7 @@ --- title: HealthAttestation DDF file description: View the XML file containing the device description framework (DDF) for the HealthAttestation configuration service provider. -ms.date: 01/31/2024 +ms.date: 06/19/2024 --- @@ -40,7 +40,7 @@ The following XML file contains the device description framework (DDF) for the H 10.0.10586 1.0 - 0x4;0x1B;0x30;0x31;0x48;0x54;0x62;0x63;0x64;0x65;0x79;0x7A;0x7D;0x7E;0x81;0x82;0x88;0x8A;0x8B;0xA1;0xA2;0xA4;0xA5;0xAB;0xAC;0xAF;0xBC;0xBF;0xCA;0xCB;0xCD;0xCF;0xD2; + 0x4;0x1B;0x30;0x31;0x48;0x54;0x62;0x63;0x64;0x65;0x77;0x79;0x7A;0x7D;0x7E;0x81;0x82;0x88;0x8A;0x8B;0xA1;0xA2;0xA4;0xA5;0xAB;0xAC;0xAF;0xB4;0xBC;0xBD;0xBF;0xCA;0xCB; diff --git a/windows/client-management/mdm/language-pack-management-ddf-file.md b/windows/client-management/mdm/language-pack-management-ddf-file.md index af5086a30c..0d5661484f 100644 --- a/windows/client-management/mdm/language-pack-management-ddf-file.md +++ b/windows/client-management/mdm/language-pack-management-ddf-file.md @@ -1,7 +1,7 @@ --- title: LanguagePackManagement DDF file description: View the XML file containing the device description framework (DDF) for the LanguagePackManagement configuration service provider. -ms.date: 04/10/2024 +ms.date: 06/19/2024 --- @@ -42,7 +42,7 @@ The following XML file contains the device description framework (DDF) for the L 99.9.9999 1.0 - 0x4;0x1B;0x30;0x31;0x48;0x54;0x62;0x63;0x64;0x65;0x79;0x7A;0x7D;0x7E;0x81;0x82;0x88;0x8A;0x8B;0xA1;0xA2;0xA4;0xA5;0xAB;0xAC;0xAF;0xBC;0xBF;0xCA;0xCB;0xCD;0xCF;0xD2; + 0x4;0x1B;0x30;0x31;0x48;0x54;0x62;0x63;0x64;0x65;0x77;0x79;0x7A;0x7D;0x7E;0x81;0x82;0x87;0x88;0x88*;0x8A;0x8B;0xA1;0xA2;0xA4;0xA5;0xAB;0xAC;0xAF;0xB4;0xBC;0xBD;0xBF;0xCA;0xCB; diff --git a/windows/client-management/mdm/laps-ddf-file.md b/windows/client-management/mdm/laps-ddf-file.md index 8ed3954967..075ff51663 100644 --- a/windows/client-management/mdm/laps-ddf-file.md +++ b/windows/client-management/mdm/laps-ddf-file.md @@ -1,7 +1,7 @@ --- title: LAPS DDF file description: View the XML file containing the device description framework (DDF) for the LAPS configuration service provider. -ms.date: 04/10/2024 +ms.date: 06/19/2024 --- @@ -40,7 +40,7 @@ The following XML file contains the device description framework (DDF) for the L 10.0.25145, 10.0.22621.1480, 10.0.22000.1754, 10.0.20348.1663, 10.0.19041.2784, 10.0.17763.4244 1.0 - 0x4;0x1B;0x30;0x31;0x48;0x54;0x62;0x63;0x64;0x65;0x79;0x7A;0x7D;0x7E;0x81;0x82;0x88;0x8A;0x8B;0xA1;0xA2;0xA4;0xA5;0xAB;0xAC;0xAF;0xBC;0xBF;0xCA;0xCB;0xCD;0xCF;0xD2; + 0x4;0x1B;0x30;0x31;0x48;0x54;0x62;0x63;0x64;0x65;0x77;0x79;0x7A;0x7D;0x7E;0x81;0x82;0x87;0x88;0x88*;0x8A;0x8B;0xA1;0xA2;0xA4;0xA5;0xAB;0xAC;0xAF;0xB4;0xBC;0xBD;0xBF;0xCA;0xCB; diff --git a/windows/client-management/mdm/networkproxy-ddf.md b/windows/client-management/mdm/networkproxy-ddf.md index 77e03cd531..41f2ea80ba 100644 --- a/windows/client-management/mdm/networkproxy-ddf.md +++ b/windows/client-management/mdm/networkproxy-ddf.md @@ -1,7 +1,7 @@ --- title: NetworkProxy DDF file description: View the XML file containing the device description framework (DDF) for the NetworkProxy configuration service provider. -ms.date: 04/10/2024 +ms.date: 06/19/2024 --- @@ -40,7 +40,7 @@ The following XML file contains the device description framework (DDF) for the N 10.0.15063 1.0 - 0x4;0x1B;0x30;0x31;0x48;0x54;0x79;0x7A;0x7D;0x7E;0x81;0x82;0x88;0x8A;0x8B;0xA1;0xA2;0xA4;0xA5;0xAB;0xAC;0xAF;0xBC;0xBF;0xCA;0xCB;0xCD;0xCF;0xD2; + 0x4;0x1B;0x30;0x31;0x48;0x54;0x77;0x79;0x7A;0x7D;0x7E;0x81;0x82;0x88;0x88*;0x8A;0x8B;0xA1;0xA2;0xA4;0xA5;0xAB;0xAC;0xAF;0xB4;0xBC;0xBD;0xBF;0xCA;0xCB; diff --git a/windows/client-management/mdm/networkqospolicy-ddf.md b/windows/client-management/mdm/networkqospolicy-ddf.md index 0a77596722..abcaba4547 100644 --- a/windows/client-management/mdm/networkqospolicy-ddf.md +++ b/windows/client-management/mdm/networkqospolicy-ddf.md @@ -1,7 +1,7 @@ --- title: NetworkQoSPolicy DDF file description: View the XML file containing the device description framework (DDF) for the NetworkQoSPolicy configuration service provider. -ms.date: 04/10/2024 +ms.date: 06/19/2024 --- @@ -40,7 +40,7 @@ The following XML file contains the device description framework (DDF) for the N 10.0.19042 1.0 - 0x4;0x1B;0x30;0x31;0x48;0x54;0x62;0x63;0x64;0x65;0x79;0x7A;0x7D;0x7E;0x81;0x82;0x88;0x8A;0x8B;0xA1;0xA2;0xA4;0xA5;0xAB;0xAC;0xAF;0xBC;0xBF;0xCA;0xCB;0xCD;0xCF;0xD2; + 0x4;0x1B;0x30;0x31;0x48;0x54;0x62;0x63;0x64;0x65;0x77;0x79;0x7A;0x7D;0x7E;0x81;0x82;0x88;0x8A;0x8B;0xA1;0xA2;0xA4;0xA5;0xAB;0xAC;0xAF;0xB4;0xBC;0xBD;0xBF;0xCA;0xCB; diff --git a/windows/client-management/mdm/nodecache-ddf-file.md b/windows/client-management/mdm/nodecache-ddf-file.md index 80a2ad5119..996cc4512c 100644 --- a/windows/client-management/mdm/nodecache-ddf-file.md +++ b/windows/client-management/mdm/nodecache-ddf-file.md @@ -1,7 +1,7 @@ --- title: NodeCache DDF file description: View the XML file containing the device description framework (DDF) for the NodeCache configuration service provider. -ms.date: 04/10/2024 +ms.date: 06/19/2024 --- @@ -40,7 +40,7 @@ The following XML file contains the device description framework (DDF) for the N 10.0.15063 1.1 - 0x4;0x1B;0x30;0x31;0x48;0x54;0x62;0x63;0x64;0x65;0x79;0x7A;0x7D;0x7E;0x81;0x82;0x88;0x8A;0x8B;0xA1;0xA2;0xA4;0xA5;0xAB;0xAC;0xAF;0xBC;0xBF;0xCA;0xCB;0xCD;0xCF;0xD2; + 0x4;0x1B;0x30;0x31;0x48;0x54;0x62;0x63;0x64;0x65;0x77;0x79;0x7A;0x7D;0x7E;0x81;0x82;0x87;0x88;0x88*;0x8A;0x8B;0xA1;0xA2;0xA4;0xA5;0xAB;0xAC;0xAF;0xB4;0xBC;0xBD;0xBF;0xCA;0xCB; @@ -294,7 +294,7 @@ The following XML file contains the device description framework (DDF) for the N 10.0.10586 1.0 - 0x4;0x1B;0x30;0x31;0x48;0x54;0x62;0x63;0x64;0x65;0x79;0x7A;0x7D;0x7E;0x81;0x82;0x88;0x8A;0x8B;0xA1;0xA2;0xA4;0xA5;0xAB;0xAC;0xAF;0xBC;0xBF;0xCA;0xCB;0xCD;0xCF;0xD2; + 0x4;0x1B;0x30;0x31;0x48;0x54;0x62;0x63;0x64;0x65;0x77;0x79;0x7A;0x7D;0x7E;0x81;0x82;0x87;0x88;0x88*;0x8A;0x8B;0xA1;0xA2;0xA4;0xA5;0xAB;0xAC;0xAF;0xB4;0xBC;0xBD;0xBF;0xCA;0xCB; diff --git a/windows/client-management/mdm/office-ddf.md b/windows/client-management/mdm/office-ddf.md index 7714d02e5e..d9dd3ecaa7 100644 --- a/windows/client-management/mdm/office-ddf.md +++ b/windows/client-management/mdm/office-ddf.md @@ -1,7 +1,7 @@ --- title: Office DDF file description: View the XML file containing the device description framework (DDF) for the Office configuration service provider. -ms.date: 04/10/2024 +ms.date: 06/19/2024 --- @@ -40,7 +40,7 @@ The following XML file contains the device description framework (DDF) for the O 10.0.15063 1.0 - 0x4;0x1B;0x30;0x31;0x48;0x54;0x79;0x7A;0x7D;0x7E;0x81;0x82;0x8A;0x8B;0xA1;0xA2;0xA4;0xA5;0xAB;0xAC;0xAF;0xBC;0xBF;0xCA;0xCB;0xCD;0xCF;0xD2; + 0x4;0x1B;0x30;0x31;0x48;0x54;0x77;0x79;0x7A;0x7D;0x7E;0x81;0x82;0x8A;0x8B;0xA1;0xA2;0xA4;0xA5;0xAB;0xAC;0xAF;0xB4;0xBC;0xBD;0xBF;0xCA;0xCB; @@ -211,7 +211,7 @@ The following XML file contains the device description framework (DDF) for the O 10.0.15063 1.0 - 0x4;0x1B;0x30;0x31;0x48;0x54;0x79;0x7A;0x7D;0x7E;0x81;0x82;0x8A;0x8B;0xA1;0xA2;0xA4;0xA5;0xAB;0xAC;0xAF;0xBC;0xBF;0xCA;0xCB;0xCD;0xCF;0xD2; + 0x4;0x1B;0x30;0x31;0x48;0x54;0x77;0x79;0x7A;0x7D;0x7E;0x81;0x82;0x8A;0x8B;0xA1;0xA2;0xA4;0xA5;0xAB;0xAC;0xAF;0xB4;0xBC;0xBD;0xBF;0xCA;0xCB; diff --git a/windows/client-management/mdm/passportforwork-csp.md b/windows/client-management/mdm/passportforwork-csp.md index d9bd9dba10..421f8f7ac5 100644 --- a/windows/client-management/mdm/passportforwork-csp.md +++ b/windows/client-management/mdm/passportforwork-csp.md @@ -1,7 +1,7 @@ --- title: PassportForWork CSP description: Learn more about the PassportForWork CSP. -ms.date: 04/10/2024 +ms.date: 06/19/2024 --- @@ -25,7 +25,6 @@ The following list shows the PassportForWork configuration service provider node - ./Device/Vendor/MSFT/PassportForWork - [{TenantId}](#devicetenantid) - [Policies](#devicetenantidpolicies) - - [DisablePostLogonCredentialCaching](#devicetenantidpoliciesdisablepostlogoncredentialcaching) - [DisablePostLogonProvisioning](#devicetenantidpoliciesdisablepostlogonprovisioning) - [EnablePinRecovery](#devicetenantidpoliciesenablepinrecovery) - [EnableWindowsHelloProvisioningForSecurityKeys](#devicetenantidpoliciesenablewindowshelloprovisioningforsecuritykeys) @@ -158,55 +157,6 @@ Root node for policies. - -#### Device/{TenantId}/Policies/DisablePostLogonCredentialCaching - - -| Scope | Editions | Applicable OS | -|:--|:--|:--| -| ✅ Device
❌ User | ✅ Pro
✅ Enterprise
✅ Education
✅ Windows SE
✅ IoT Enterprise / IoT Enterprise LTSC | ✅ Windows Insider Preview | - - - -```Device -./Device/Vendor/MSFT/PassportForWork/{TenantId}/Policies/DisablePostLogonCredentialCaching -``` - - - - -Disable caching of the Windows Hello for Business credential after sign-in. - - - - - - - -**Description framework properties**: - -| Property name | Property value | -|:--|:--| -| Format | `bool` | -| Access Type | Add, Delete, Get, Replace | -| Default Value | False | - - - -**Allowed values**: - -| Value | Description | -|:--|:--| -| false (Default) | Credential Caching Enabled. | -| true | Credential Caching Disabled. | - - - - - - - - #### Device/{TenantId}/Policies/DisablePostLogonProvisioning diff --git a/windows/client-management/mdm/passportforwork-ddf.md b/windows/client-management/mdm/passportforwork-ddf.md index 0c1cf45b97..ce26cce768 100644 --- a/windows/client-management/mdm/passportforwork-ddf.md +++ b/windows/client-management/mdm/passportforwork-ddf.md @@ -1,7 +1,7 @@ --- title: PassportForWork DDF file description: View the XML file containing the device description framework (DDF) for the PassportForWork configuration service provider. -ms.date: 04/10/2024 +ms.date: 06/19/2024 --- @@ -39,7 +39,7 @@ The following XML file contains the device description framework (DDF) for the P 10.0.10586 1.2 - 0x4;0x1B;0x30;0x31;0x48;0x54;0x62;0x63;0x64;0x65;0x79;0x7A;0x7D;0x7E;0x81;0x82;0x88;0x8A;0x8B;0xA1;0xA2;0xA4;0xA5;0xAB;0xAC;0xAF;0xBC;0xBF;0xCA;0xCB;0xCD;0xCF;0xD2; + 0x4;0x1B;0x30;0x31;0x48;0x54;0x62;0x63;0x64;0x65;0x77;0x79;0x7A;0x7D;0x7E;0x81;0x82;0x87;0x88;0x88*;0x8A;0x8B;0xA1;0xA2;0xA4;0xA5;0xAB;0xAC;0xAF;0xB4;0xBC;0xBD;0xBF;0xCA;0xCB; @@ -565,7 +565,7 @@ If you do not configure this policy setting, Windows Hello for Business requires 10.0.10586 1.2 - 0x4;0x1B;0x30;0x31;0x48;0x54;0x62;0x63;0x64;0x65;0x79;0x7A;0x7D;0x7E;0x81;0x82;0x88;0x8A;0x8B;0xA1;0xA2;0xA4;0xA5;0xAB;0xAC;0xAF;0xBC;0xBF;0xCA;0xCB;0xCD;0xCF;0xD2; + 0x4;0x1B;0x30;0x31;0x48;0x54;0x62;0x63;0x64;0x65;0x77;0x79;0x7A;0x7D;0x7E;0x81;0x82;0x87;0x88;0x88*;0x8A;0x8B;0xA1;0xA2;0xA4;0xA5;0xAB;0xAC;0xAF;0xB4;0xBC;0xBD;0xBF;0xCA;0xCB; @@ -885,45 +885,6 @@ If you disable or do not configure this policy setting, the PIN recovery secret - - DisablePostLogonCredentialCaching - - - - - - - - False - Disable caching of the Windows Hello for Business credential after sign-in. - - - - - - - - - - - - - - 99.9.99999 - 1.6 - - - - false - Credential Caching Enabled - - - true - Credential Caching Disabled - - - - UseCertificateForOnPremAuth diff --git a/windows/client-management/mdm/personaldataencryption-ddf-file.md b/windows/client-management/mdm/personaldataencryption-ddf-file.md index f4f4cd55fc..5b3b1d0111 100644 --- a/windows/client-management/mdm/personaldataencryption-ddf-file.md +++ b/windows/client-management/mdm/personaldataencryption-ddf-file.md @@ -1,7 +1,7 @@ --- title: PDE DDF file description: View the XML file containing the device description framework (DDF) for the PDE configuration service provider. -ms.date: 04/10/2024 +ms.date: 06/19/2024 --- @@ -39,7 +39,7 @@ The following XML file contains the device description framework (DDF) for the P 10.0.22621 1.0 - 0x4;0x1B;0x48;0x54;0x79;0x7A;0x7D;0x7E;0x81;0x82;0x88;0xAB;0xAC;0xBC;0xBF;0xCD;0xCF;0xD2; + 0x4;0x1B;0x48;0x54;0x79;0x7A;0x7D;0x7E;0x81;0x82;0x87;0x88;0x88*;0xAB;0xAC;0xB4;0xBC;0xBD;0xBF; diff --git a/windows/client-management/mdm/personalization-csp.md b/windows/client-management/mdm/personalization-csp.md index bf0dff0947..3f8030bbfc 100644 --- a/windows/client-management/mdm/personalization-csp.md +++ b/windows/client-management/mdm/personalization-csp.md @@ -1,7 +1,7 @@ --- title: Personalization CSP description: Learn more about the Personalization CSP. -ms.date: 04/10/2024 +ms.date: 06/19/2024 --- @@ -9,8 +9,6 @@ ms.date: 04/10/2024 # Personalization CSP -[!INCLUDE [Windows Insider tip](includes/mdm-insider-csp-note.md)] - The Personalization CSP can set the lock screen, desktop background images and company branding on sign-in screen ([BootToCloud mode](policy-csp-clouddesktop.md#boottocloudmode) only). Setting these policies also prevents the user from changing the image. You can also use the Personalization settings in a provisioning package. @@ -38,7 +36,7 @@ The following list shows the Personalization configuration service provider node | Scope | Editions | Applicable OS | |:--|:--|:--| -| ✅ Device
❌ User | ✅ Pro
✅ Enterprise
✅ Education
✅ Windows SE
✅ IoT Enterprise / IoT Enterprise LTSC | ✅ Windows Insider Preview | +| ✅ Device
❌ User | ✅ Pro
✅ Enterprise
✅ Education
✅ Windows SE
✅ IoT Enterprise / IoT Enterprise LTSC | ✅ Windows 11, version 22H2 [10.0.22621.3235] and later | @@ -77,7 +75,7 @@ This represents the status of the Company Logo. 1 - Successfully downloaded or c | Scope | Editions | Applicable OS | |:--|:--|:--| -| ✅ Device
❌ User | ✅ Pro
✅ Enterprise
✅ Education
✅ Windows SE
✅ IoT Enterprise / IoT Enterprise LTSC | ✅ Windows Insider Preview | +| ✅ Device
❌ User | ✅ Pro
✅ Enterprise
✅ Education
✅ Windows SE
✅ IoT Enterprise / IoT Enterprise LTSC | ✅ Windows 11, version 22H2 [10.0.22621.3235] and later | @@ -116,7 +114,7 @@ An http or https Url to a jpg, jpeg or png image that needs to be downloaded and | Scope | Editions | Applicable OS | |:--|:--|:--| -| ✅ Device
❌ User | ✅ Pro
✅ Enterprise
✅ Education
✅ Windows SE
✅ IoT Enterprise / IoT Enterprise LTSC | ✅ Windows Insider Preview | +| ✅ Device
❌ User | ✅ Pro
✅ Enterprise
✅ Education
✅ Windows SE
✅ IoT Enterprise / IoT Enterprise LTSC | ✅ Windows 11, version 22H2 [10.0.22621.3235] and later | diff --git a/windows/client-management/mdm/personalization-ddf.md b/windows/client-management/mdm/personalization-ddf.md index 6c5af077dd..5f6b982951 100644 --- a/windows/client-management/mdm/personalization-ddf.md +++ b/windows/client-management/mdm/personalization-ddf.md @@ -1,7 +1,7 @@ --- title: Personalization DDF file description: View the XML file containing the device description framework (DDF) for the Personalization configuration service provider. -ms.date: 04/10/2024 +ms.date: 06/19/2024 --- @@ -42,7 +42,7 @@ The following XML file contains the device description framework (DDF) for the P 10.0.16299 1.0 - 0x4;0x1B;0x30;0x31;0x48;0x54;0x79;0x7A;0x7D;0x7E;0x81;0x82;0x88;0x8A;0x8B;0xA1;0xA2;0xA4;0xA5;0xAB;0xAC;0xAF;0xBC;0xBF;0xCA;0xCB;0xCD;0xCF;0xD2; + 0x4;0x1B;0x30;0x31;0x48;0x54;0x77;0x79;0x7A;0x7D;0x7E;0x81;0x82;0x87;0x88;0x88*;0x8A;0x8B;0xA1;0xA2;0xA4;0xA5;0xAB;0xAC;0xAF;0xB4;0xBC;0xBD;0xBF;0xCA;0xCB; @@ -101,7 +101,7 @@ The following XML file contains the device description framework (DDF) for the P - A http or https Url to a jpg, jpeg or png image that neeeds to be downloaded and used as the Lock Screen Image or a file Url to a local image on the file system that needs to be used as the Lock Screen Image. + A http or https Url to a jpg, jpeg or png image that needs to be downloaded and used as the Lock Screen Image or a file Url to a local image on the file system that needs to be used as the Lock Screen Image. @@ -148,7 +148,7 @@ The following XML file contains the device description framework (DDF) for the P - A http or https Url to a jpg, jpeg or png image that neeeds to be downloaded and used as the Company Logo or a file Url to a local image on the file system that needs to be used as the Company Logo. This setting is currently available for boot to cloud shared pc mode only. + A http or https Url to a jpg, jpeg or png image that needs to be downloaded and used as the Company Logo or a file Url to a local image on the file system that needs to be used as the Company Logo. This setting is currently available for boot to cloud shared pc mode only. @@ -162,7 +162,7 @@ The following XML file contains the device description framework (DDF) for the P - 99.9.99999 + 10.0.22621.3235 2.0 @@ -189,7 +189,7 @@ The following XML file contains the device description framework (DDF) for the P - 99.9.99999 + 10.0.22621.3235 2.0 @@ -217,7 +217,7 @@ The following XML file contains the device description framework (DDF) for the P - 99.9.99999 + 10.0.22621.3235 2.0 diff --git a/windows/client-management/mdm/policies-in-policy-csp-admx-backed.md b/windows/client-management/mdm/policies-in-policy-csp-admx-backed.md index d24e808921..773526f0c6 100644 --- a/windows/client-management/mdm/policies-in-policy-csp-admx-backed.md +++ b/windows/client-management/mdm/policies-in-policy-csp-admx-backed.md @@ -1,7 +1,7 @@ --- title: ADMX-backed policies in Policy CSP description: Learn about the ADMX-backed policies in Policy CSP. -ms.date: 04/10/2024 +ms.date: 06/19/2024 --- @@ -1663,6 +1663,7 @@ This article lists the ADMX-backed policies in Policy CSP. - [TS_NoSecurityMenu](policy-csp-admx-terminalserver.md) - [TS_START_PROGRAM_2](policy-csp-admx-terminalserver.md) - [TS_SERVER_ADVANCED_REMOTEFX_REMOTEAPP](policy-csp-admx-terminalserver.md) +- [TS_SERVER_REMOTEAPP_USE_SHELLAPPRUNTIME](policy-csp-admx-terminalserver.md) - [TS_DX_USE_FULL_HWGPU](policy-csp-admx-terminalserver.md) - [TS_SERVER_WDDM_GRAPHICS_DRIVER](policy-csp-admx-terminalserver.md) - [TS_TSCC_PERMISSIONS_POLICY](policy-csp-admx-terminalserver.md) @@ -2210,6 +2211,7 @@ This article lists the ADMX-backed policies in Policy CSP. - [AllowSaveTargetAsInIEMode](policy-csp-internetexplorer.md) - [DisableInternetExplorerApp](policy-csp-internetexplorer.md) - [EnableExtendedIEModeHotkeys](policy-csp-internetexplorer.md) +- [AllowLegacyURLFields](policy-csp-internetexplorer.md) - [ResetZoomForDialogInIEMode](policy-csp-internetexplorer.md) - [EnableGlobalWindowListInIEMode](policy-csp-internetexplorer.md) - [JScriptReplacement](policy-csp-internetexplorer.md) diff --git a/windows/client-management/mdm/policies-in-policy-csp-supported-by-group-policy.md b/windows/client-management/mdm/policies-in-policy-csp-supported-by-group-policy.md index b48e301116..74c2d24c74 100644 --- a/windows/client-management/mdm/policies-in-policy-csp-supported-by-group-policy.md +++ b/windows/client-management/mdm/policies-in-policy-csp-supported-by-group-policy.md @@ -1,7 +1,7 @@ --- title: Policies in Policy CSP supported by Group Policy description: Learn about the policies in Policy CSP supported by Group Policy. -ms.date: 05/20/2024 +ms.date: 06/19/2024 --- @@ -805,6 +805,7 @@ This article lists the policies in Policy CSP that have a group policy mapping. - [ConfigureDeadlineNoAutoRebootForFeatureUpdates](policy-csp-update.md) - [ConfigureDeadlineNoAutoRebootForQualityUpdates](policy-csp-update.md) - [AllowOptionalContent](policy-csp-update.md) +- [AlwaysAutoRebootAtScheduledTimeMinutes](policy-csp-update.md) ## UserRights diff --git a/windows/client-management/mdm/policies-in-policy-csp-supported-by-surface-hub.md b/windows/client-management/mdm/policies-in-policy-csp-supported-by-surface-hub.md index 17bb6fddc6..a51aba5851 100644 --- a/windows/client-management/mdm/policies-in-policy-csp-supported-by-surface-hub.md +++ b/windows/client-management/mdm/policies-in-policy-csp-supported-by-surface-hub.md @@ -1,7 +1,7 @@ --- title: Policies in Policy CSP supported by Windows 10 Team description: Learn about the policies in Policy CSP supported by Windows 10 Team. -ms.date: 01/18/2024 +ms.date: 06/19/2024 --- @@ -315,6 +315,7 @@ This article lists the policies in Policy CSP that are applicable for the Surfac - [AllowOptionalContent](policy-csp-update.md#allowoptionalcontent) - [AllowTemporaryEnterpriseFeatureControl](policy-csp-update.md#allowtemporaryenterprisefeaturecontrol) - [AllowUpdateService](policy-csp-update.md#allowupdateservice) +- [AlwaysAutoRebootAtScheduledTimeMinutes](policy-csp-update.md#alwaysautorebootatscheduledtimeminutes) - [BranchReadinessLevel](policy-csp-update.md#branchreadinesslevel) - [ConfigureFeatureUpdateUninstallPeriod](policy-csp-update.md#configurefeatureupdateuninstallperiod) - [DeferFeatureUpdatesPeriodInDays](policy-csp-update.md#deferfeatureupdatesperiodindays) diff --git a/windows/client-management/mdm/policy-csp-admx-terminalserver.md b/windows/client-management/mdm/policy-csp-admx-terminalserver.md index 0b5853336a..9209e4e647 100644 --- a/windows/client-management/mdm/policy-csp-admx-terminalserver.md +++ b/windows/client-management/mdm/policy-csp-admx-terminalserver.md @@ -1,7 +1,7 @@ --- title: ADMX_TerminalServer Policy CSP description: Learn more about the ADMX_TerminalServer Area in Policy CSP. -ms.date: 01/18/2024 +ms.date: 06/19/2024 --- @@ -4109,6 +4109,56 @@ This policy setting allows the administrator to configure the RemoteFX experienc + +## TS_SERVER_REMOTEAPP_USE_SHELLAPPRUNTIME + + +| Scope | Editions | Applicable OS | +|:--|:--|:--| +| ✅ Device
❌ User | ✅ Pro
✅ Enterprise
✅ Education
✅ Windows SE
✅ IoT Enterprise / IoT Enterprise LTSC | ✅ Windows 10, version 2004 [10.0.19041.1202] and later
✅ Windows 10, version 2009 [10.0.19042.1202] and later
✅ Windows 10, version 21H1 [10.0.19043.1202] and later
✅ Windows 11, version 21H2 [10.0.22000] and later | + + + +```Device +./Device/Vendor/MSFT/Policy/Config/ADMX_TerminalServer/TS_SERVER_REMOTEAPP_USE_SHELLAPPRUNTIME +``` + + + + + + + + + + + +**Description framework properties**: + +| Property name | Property value | +|:--|:--| +| Format | `chr` (string) | +| Access Type | Add, Delete, Get, Replace | + + + + +[!INCLUDE [ADMX-backed policy note](includes/mdm-admx-policy-note.md)] + +**ADMX mapping**: + +| Name | Value | +|:--|:--| +| Name | TS_SERVER_REMOTEAPP_USE_SHELLAPPRUNTIME | +| ADMX File Name | TerminalServer.admx | + + + + + + + + ## TS_SERVER_VISEXP diff --git a/windows/client-management/mdm/policy-csp-deliveryoptimization.md b/windows/client-management/mdm/policy-csp-deliveryoptimization.md index f9f05c2927..6e3f949a36 100644 --- a/windows/client-management/mdm/policy-csp-deliveryoptimization.md +++ b/windows/client-management/mdm/policy-csp-deliveryoptimization.md @@ -1,7 +1,7 @@ --- title: DeliveryOptimization Policy CSP description: Learn more about the DeliveryOptimization Area in Policy CSP. -ms.date: 01/18/2024 +ms.date: 06/19/2024 --- @@ -1500,20 +1500,8 @@ The default value 0 (zero) means that Delivery Optimization dynamically adjusts - -Set this policy to restrict peer selection via selected option. - -Options available are: - -0 = NAT. - -1 = Subnet mask. - -2 = Local discovery (DNS-SD). - -The default value has changed from 0 (no restriction) to 1 (restrict to the subnet). - -These options apply to both Download Mode LAN (1) and Group (2). + +Set this policy to restrict peer selection via selected option. Options available are: 1=Subnet mask, 2 = Local discovery (DNS-SD). These options apply to both Download Mode LAN (1) and Group (2). diff --git a/windows/client-management/mdm/policy-csp-internetexplorer.md b/windows/client-management/mdm/policy-csp-internetexplorer.md index 8985e0fd66..54422578ac 100644 --- a/windows/client-management/mdm/policy-csp-internetexplorer.md +++ b/windows/client-management/mdm/policy-csp-internetexplorer.md @@ -1,7 +1,7 @@ --- title: InternetExplorer Policy CSP description: Learn more about the InternetExplorer Area in Policy CSP. -ms.date: 05/20/2024 +ms.date: 06/19/2024 --- @@ -985,6 +985,60 @@ Note. It's recommended to configure template policy settings in one Group Policy + +## AllowLegacyURLFields + + +| Scope | Editions | Applicable OS | +|:--|:--|:--| +| ✅ Device
✅ User | ✅ Pro
✅ Enterprise
✅ Education
✅ Windows SE
✅ IoT Enterprise / IoT Enterprise LTSC | ✅ Windows Insider Preview | + + + +```User +./User/Vendor/MSFT/Policy/Config/InternetExplorer/AllowLegacyURLFields +``` + +```Device +./Device/Vendor/MSFT/Policy/Config/InternetExplorer/AllowLegacyURLFields +``` + + + + + + + + + + + +**Description framework properties**: + +| Property name | Property value | +|:--|:--| +| Format | `chr` (string) | +| Access Type | Add, Delete, Get, Replace | + + + + +[!INCLUDE [ADMX-backed policy note](includes/mdm-admx-policy-note.md)] + +**ADMX mapping**: + +| Name | Value | +|:--|:--| +| Name | AllowLegacyURLFields | +| ADMX File Name | inetres.admx | + + + + + + + + ## AllowLocalMachineZoneTemplate diff --git a/windows/client-management/mdm/policy-csp-remotedesktopservices.md b/windows/client-management/mdm/policy-csp-remotedesktopservices.md index 1af96611e4..bb9986b0c4 100644 --- a/windows/client-management/mdm/policy-csp-remotedesktopservices.md +++ b/windows/client-management/mdm/policy-csp-remotedesktopservices.md @@ -1,7 +1,7 @@ --- title: RemoteDesktopServices Policy CSP description: Learn more about the RemoteDesktopServices Area in Policy CSP. -ms.date: 04/10/2024 +ms.date: 06/19/2024 --- @@ -439,7 +439,7 @@ By default, Remote Desktop allows redirection of WebAuthn requests. | Scope | Editions | Applicable OS | |:--|:--|:--| -| ✅ Device
✅ User | ✅ Pro
✅ Enterprise
✅ Education
✅ Windows SE
✅ IoT Enterprise / IoT Enterprise LTSC | ✅ Windows Insider Preview | +| ✅ Device
✅ User | ✅ Pro
✅ Enterprise
✅ Education
✅ Windows SE
✅ IoT Enterprise / IoT Enterprise LTSC | ✅ [10.0.20348.2400] and later
✅ Windows 11, version 21H2 [10.0.22000.2898] and later
✅ Windows 11, version 22H2 [10.0.22621.3374] and later
✅ Windows 11, version 23H2 [10.0.22631.3374] and later
✅ Windows Insider Preview | @@ -493,7 +493,7 @@ By default, Remote Desktop allows redirection of WebAuthn requests. | Scope | Editions | Applicable OS | |:--|:--|:--| -| ✅ Device
✅ User | ✅ Pro
✅ Enterprise
✅ Education
✅ Windows SE
✅ IoT Enterprise / IoT Enterprise LTSC | ✅ Windows Insider Preview | +| ✅ Device
✅ User | ✅ Pro
✅ Enterprise
✅ Education
✅ Windows SE
✅ IoT Enterprise / IoT Enterprise LTSC | ✅ [10.0.20348.2400] and later
✅ Windows 11, version 21H2 [10.0.22000.2898] and later
✅ Windows 11, version 22H2 [10.0.22621.3374] and later
✅ Windows 11, version 23H2 [10.0.22631.3374] and later
✅ Windows Insider Preview | diff --git a/windows/client-management/mdm/policy-csp-update.md b/windows/client-management/mdm/policy-csp-update.md index e8dfe5371f..796984d07c 100644 --- a/windows/client-management/mdm/policy-csp-update.md +++ b/windows/client-management/mdm/policy-csp-update.md @@ -1,7 +1,7 @@ --- title: Update Policy CSP description: Learn more about the Update Area in Policy CSP. -ms.date: 02/14/2024 +ms.date: 06/19/2024 --- @@ -18,6 +18,7 @@ ms.date: 02/14/2024 Update CSP policies are listed below based on the group policy area: - [Windows Insider Preview](#windows-insider-preview) + - [AlwaysAutoRebootAtScheduledTimeMinutes](#alwaysautorebootatscheduledtimeminutes) - [ConfigureDeadlineNoAutoRebootForFeatureUpdates](#configuredeadlinenoautorebootforfeatureupdates) - [ConfigureDeadlineNoAutoRebootForQualityUpdates](#configuredeadlinenoautorebootforqualityupdates) - [Manage updates offered from Windows Update](#manage-updates-offered-from-windows-update) @@ -100,6 +101,68 @@ Update CSP policies are listed below based on the group policy area: ## Windows Insider Preview + +### AlwaysAutoRebootAtScheduledTimeMinutes + + +| Scope | Editions | Applicable OS | +|:--|:--|:--| +| ✅ Device
❌ User | ✅ Pro
✅ Enterprise
✅ Education
✅ Windows SE
✅ IoT Enterprise / IoT Enterprise LTSC | ✅ Windows Insider Preview | + + + +```Device +./Device/Vendor/MSFT/Policy/Config/Update/AlwaysAutoRebootAtScheduledTimeMinutes +``` + + + + + +- If you enable this policy, a restart timer will always begin immediately after Windows Update installs important updates, instead of first notifying users on the login screen for at least two days. + +The restart timer can be configured to start with any value from 15 to 180 minutes. When the timer runs out, the restart will proceed even if the PC has signed-in users. + +- If you disable or don't configure this policy, Windows Update won't alter its restart behavior. + +If the "No auto-restart with logged-on users for scheduled automatic updates installations" policy is enabled, then this policy has no effect. + + + + + + + +**Description framework properties**: + +| Property name | Property value | +|:--|:--| +| Format | `int` | +| Access Type | Add, Delete, Get, Replace | +| Allowed Values | Range: `[15-180]` | +| Default Value | 15 | + + + +**Group policy mapping**: + +| Name | Value | +|:--|:--| +| Name | AlwaysAutoRebootAtScheduledTime | +| Friendly Name | Always automatically restart at the scheduled time | +| Element Name | work (minutes) | +| Location | Computer Configuration | +| Path | Windows Components > Windows Update > Manage end user experience | +| Registry Key Name | Software\Policies\Microsoft\Windows\WindowsUpdate\AU | +| ADMX File Name | WindowsUpdate.admx | + + + + + + + + ### ConfigureDeadlineNoAutoRebootForFeatureUpdates diff --git a/windows/client-management/mdm/policy-csp-windowsai.md b/windows/client-management/mdm/policy-csp-windowsai.md index 85b838a4c2..8f672a114e 100644 --- a/windows/client-management/mdm/policy-csp-windowsai.md +++ b/windows/client-management/mdm/policy-csp-windowsai.md @@ -1,7 +1,7 @@ --- title: WindowsAI Policy CSP description: Learn more about the WindowsAI Area in Policy CSP. -ms.date: 06/13/2024 +ms.date: 06/19/2024 --- @@ -142,6 +142,9 @@ This policy setting allows you to control whether Windows saves snapshots of the ## TurnOffWindowsCopilot +> [!NOTE] +> This policy is deprecated and may be removed in a future release. + | Scope | Editions | Applicable OS | |:--|:--|:--| diff --git a/windows/client-management/mdm/printerprovisioning-ddf-file.md b/windows/client-management/mdm/printerprovisioning-ddf-file.md index 21cb02133b..4aa2087423 100644 --- a/windows/client-management/mdm/printerprovisioning-ddf-file.md +++ b/windows/client-management/mdm/printerprovisioning-ddf-file.md @@ -1,7 +1,7 @@ --- title: PrinterProvisioning DDF file description: View the XML file containing the device description framework (DDF) for the PrinterProvisioning configuration service provider. -ms.date: 04/10/2024 +ms.date: 06/19/2024 --- @@ -40,7 +40,7 @@ The following XML file contains the device description framework (DDF) for the P 10.0.22000, 10.0.19044.1806, 10.0.19043.1806, 10.0.19042.1806 1.0 - 0x4;0x1B;0x30;0x31;0x48;0x54;0x62;0x63;0x64;0x65;0x79;0x7A;0x7D;0x7E;0x81;0x82;0x88;0x8A;0x8B;0xA1;0xA2;0xA4;0xA5;0xAB;0xAC;0xAF;0xBC;0xBF;0xCA;0xCB;0xCD;0xCF;0xD2; + 0x4;0x1B;0x30;0x31;0x48;0x54;0x62;0x63;0x64;0x65;0x77;0x79;0x7A;0x7D;0x7E;0x81;0x82;0x87;0x88;0x88*;0x8A;0x8B;0xA1;0xA2;0xA4;0xA5;0xAB;0xAC;0xAF;0xB4;0xBC;0xBD;0xBF;0xCA;0xCB; diff --git a/windows/client-management/mdm/reboot-ddf-file.md b/windows/client-management/mdm/reboot-ddf-file.md index a1c58cf7c1..3bca6f69a4 100644 --- a/windows/client-management/mdm/reboot-ddf-file.md +++ b/windows/client-management/mdm/reboot-ddf-file.md @@ -1,7 +1,7 @@ --- title: Reboot DDF file description: View the XML file containing the device description framework (DDF) for the Reboot configuration service provider. -ms.date: 04/10/2024 +ms.date: 06/19/2024 --- @@ -40,7 +40,7 @@ The following XML file contains the device description framework (DDF) for the R 10.0.14393 1.0 - 0x4;0x1B;0x30;0x31;0x48;0x54;0x79;0x7A;0x7D;0x7E;0x81;0x82;0x88;0x8A;0x8B;0xA1;0xA2;0xA4;0xA5;0xAB;0xAC;0xAF;0xBC;0xBF;0xCA;0xCB;0xCD;0xCF;0xD2; + 0x4;0x1B;0x30;0x31;0x48;0x54;0x77;0x79;0x7A;0x7D;0x7E;0x81;0x82;0x8A;0x8B;0xA1;0xA2;0xA4;0xA5;0xAB;0xAC;0xAF;0xB4;0xBC;0xBD;0xBF;0xCA;0xCB; diff --git a/windows/client-management/mdm/rootcacertificates-ddf-file.md b/windows/client-management/mdm/rootcacertificates-ddf-file.md index 5ae45109b0..2a8292e9f6 100644 --- a/windows/client-management/mdm/rootcacertificates-ddf-file.md +++ b/windows/client-management/mdm/rootcacertificates-ddf-file.md @@ -1,7 +1,7 @@ --- title: RootCATrustedCertificates DDF file description: View the XML file containing the device description framework (DDF) for the RootCATrustedCertificates configuration service provider. -ms.date: 04/10/2024 +ms.date: 06/19/2024 --- @@ -40,7 +40,7 @@ The following XML file contains the device description framework (DDF) for the R 10.0.10586 1.0 - 0x4;0x1B;0x30;0x31;0x48;0x54;0x62;0x63;0x64;0x65;0x79;0x7A;0x7D;0x7E;0x81;0x82;0x88;0x8A;0x8B;0xA1;0xA2;0xA4;0xA5;0xAB;0xAC;0xAF;0xBC;0xBF;0xCA;0xCB;0xCD;0xCF;0xD2; + 0x4;0x1B;0x30;0x31;0x48;0x54;0x62;0x63;0x64;0x65;0x77;0x79;0x7A;0x7D;0x7E;0x81;0x82;0x87;0x88;0x88*;0x8A;0x8B;0xA1;0xA2;0xA4;0xA5;0xAB;0xAC;0xAF;0xB4;0xBC;0xBD;0xBF;0xCA;0xCB; @@ -1067,7 +1067,7 @@ The following XML file contains the device description framework (DDF) for the R 10.0.10586 1.0 - 0x4;0x1B;0x30;0x31;0x48;0x54;0x62;0x63;0x64;0x65;0x79;0x7A;0x7D;0x7E;0x81;0x82;0x88;0x8A;0x8B;0xA1;0xA2;0xA4;0xA5;0xAB;0xAC;0xAF;0xBC;0xBF;0xCA;0xCB;0xCD;0xCF;0xD2; + 0x4;0x1B;0x30;0x31;0x48;0x54;0x62;0x63;0x64;0x65;0x77;0x79;0x7A;0x7D;0x7E;0x81;0x82;0x87;0x88;0x88*;0x8A;0x8B;0xA1;0xA2;0xA4;0xA5;0xAB;0xAC;0xAF;0xB4;0xBC;0xBD;0xBF;0xCA;0xCB; diff --git a/windows/client-management/mdm/secureassessment-ddf-file.md b/windows/client-management/mdm/secureassessment-ddf-file.md index c4e5cf2830..d45d5f6b92 100644 --- a/windows/client-management/mdm/secureassessment-ddf-file.md +++ b/windows/client-management/mdm/secureassessment-ddf-file.md @@ -1,7 +1,7 @@ --- title: SecureAssessment DDF file description: View the XML file containing the device description framework (DDF) for the SecureAssessment configuration service provider. -ms.date: 04/10/2024 +ms.date: 06/19/2024 --- @@ -40,7 +40,7 @@ The following XML file contains the device description framework (DDF) for the S 10.0.15063 1.0 - 0x4;0x1B;0x30;0x31;0x48;0x54;0x79;0x7A;0x7D;0x7E;0x81;0x82;0x8A;0x8B;0xA1;0xA2;0xA4;0xA5;0xAB;0xAC;0xAF;0xBC;0xBF;0xCA;0xCB;0xCD;0xCF;0xD2; + 0x4;0x1B;0x30;0x31;0x48;0x54;0x77;0x79;0x7A;0x7D;0x7E;0x81;0x82;0x8A;0x8B;0xA1;0xA2;0xA4;0xA5;0xAB;0xAC;0xAF;0xB4;0xBC;0xBD;0xBF;0xCA;0xCB; diff --git a/windows/client-management/mdm/sharedpc-ddf-file.md b/windows/client-management/mdm/sharedpc-ddf-file.md index 710f837864..0baa724281 100644 --- a/windows/client-management/mdm/sharedpc-ddf-file.md +++ b/windows/client-management/mdm/sharedpc-ddf-file.md @@ -1,7 +1,7 @@ --- title: SharedPC DDF file description: View the XML file containing the device description framework (DDF) for the SharedPC configuration service provider. -ms.date: 04/10/2024 +ms.date: 06/19/2024 --- @@ -40,7 +40,7 @@ The following XML file contains the device description framework (DDF) for the S 10.0.14393 1.0 - 0x4;0x1B;0x30;0x31;0x48;0x54;0x79;0x7A;0x7D;0x7E;0x81;0x82;0x8A;0x8B;0xA1;0xA2;0xA4;0xA5;0xAB;0xAC;0xAF;0xBC;0xBF;0xCA;0xCB;0xCD;0xCF;0xD2; + 0x4;0x1B;0x30;0x31;0x48;0x54;0x77;0x79;0x7A;0x7D;0x7E;0x81;0x82;0x8A;0x8B;0xA1;0xA2;0xA4;0xA5;0xAB;0xAC;0xAF;0xB4;0xBC;0xBD;0xBF;0xCA;0xCB; diff --git a/windows/client-management/mdm/supl-ddf-file.md b/windows/client-management/mdm/supl-ddf-file.md index 3f4964bf42..fed441c564 100644 --- a/windows/client-management/mdm/supl-ddf-file.md +++ b/windows/client-management/mdm/supl-ddf-file.md @@ -1,7 +1,7 @@ --- title: SUPL DDF file description: View the XML file containing the device description framework (DDF) for the SUPL configuration service provider. -ms.date: 04/10/2024 +ms.date: 06/19/2024 --- @@ -42,7 +42,7 @@ The following XML file contains the device description framework (DDF) for the S 10.0.10240 1.0 - 0x4;0x1B;0x30;0x31;0x48;0x54;0x62;0x63;0x64;0x65;0x79;0x7A;0x7D;0x7E;0x81;0x82;0x8A;0x8B;0xA1;0xA2;0xA4;0xA5;0xAB;0xAC;0xAF;0xBC;0xBF;0xCA;0xCB;0xCD;0xCF;0xD2; + 0x4;0x1B;0x30;0x31;0x48;0x54;0x62;0x63;0x64;0x65;0x77;0x79;0x7A;0x7D;0x7E;0x81;0x82;0x8A;0x8B;0xA1;0xA2;0xA4;0xA5;0xAB;0xAC;0xAF;0xB4;0xBC;0xBD;0xBF;0xCA;0xCB; diff --git a/windows/client-management/mdm/vpnv2-ddf-file.md b/windows/client-management/mdm/vpnv2-ddf-file.md index 601a0363a7..7454dd4105 100644 --- a/windows/client-management/mdm/vpnv2-ddf-file.md +++ b/windows/client-management/mdm/vpnv2-ddf-file.md @@ -1,7 +1,7 @@ --- title: VPNv2 DDF file description: View the XML file containing the device description framework (DDF) for the VPNv2 configuration service provider. -ms.date: 04/10/2024 +ms.date: 06/19/2024 --- @@ -39,7 +39,7 @@ The following XML file contains the device description framework (DDF) for the V 10.0.10586 1.0 - 0x4;0x1B;0x30;0x31;0x48;0x54;0x62;0x63;0x64;0x65;0x79;0x7A;0x7D;0x7E;0x81;0x82;0x88;0x8A;0x8B;0xA1;0xA2;0xA4;0xA5;0xAB;0xAC;0xAF;0xBC;0xBF;0xCA;0xCB;0xCD;0xCF;0xD2; + 0x4;0x1B;0x30;0x31;0x48;0x54;0x62;0x63;0x64;0x65;0x79;0x7A;0x7D;0x7E;0x81;0x82;0x87;0x88;0x88*;0x8A;0x8B;0xA1;0xA2;0xA4;0xA5;0xAB;0xAC;0xAF;0xB4;0xBC;0xBD;0xBF;0xCA;0xCB; @@ -3265,7 +3265,7 @@ The following XML file contains the device description framework (DDF) for the V 10.0.10586 1.0 - 0x4;0x1B;0x30;0x31;0x48;0x54;0x62;0x63;0x64;0x65;0x79;0x7A;0x7D;0x7E;0x81;0x82;0x88;0x8A;0x8B;0xA1;0xA2;0xA4;0xA5;0xAB;0xAC;0xAF;0xBC;0xBF;0xCA;0xCB;0xCD;0xCF;0xD2; + 0x4;0x1B;0x30;0x31;0x48;0x54;0x62;0x63;0x64;0x65;0x79;0x7A;0x7D;0x7E;0x81;0x82;0x87;0x88;0x88*;0x8A;0x8B;0xA1;0xA2;0xA4;0xA5;0xAB;0xAC;0xAF;0xB4;0xBC;0xBD;0xBF;0xCA;0xCB; diff --git a/windows/client-management/mdm/wifi-ddf-file.md b/windows/client-management/mdm/wifi-ddf-file.md index a43971553f..d1e6f1f167 100644 --- a/windows/client-management/mdm/wifi-ddf-file.md +++ b/windows/client-management/mdm/wifi-ddf-file.md @@ -1,7 +1,7 @@ --- title: WiFi DDF file description: View the XML file containing the device description framework (DDF) for the WiFi configuration service provider. -ms.date: 04/10/2024 +ms.date: 06/19/2024 --- @@ -39,7 +39,7 @@ The following XML file contains the device description framework (DDF) for the W 10.0.10586 1.0 - 0x4;0x1B;0x30;0x31;0x48;0x54;0x62;0x63;0x64;0x65;0x79;0x7A;0x7D;0x7E;0x81;0x82;0x88;0x8A;0x8B;0xA1;0xA2;0xA4;0xA5;0xAB;0xAC;0xBC;0xBF;0xCA;0xCB;0xCD;0xCF;0xD2; + 0x4;0x1B;0x30;0x31;0x48;0x54;0x62;0x63;0x64;0x65;0x77;0x79;0x7A;0x7D;0x7E;0x81;0x82;0x87;0x88;0x88*;0x8A;0x8B;0xA1;0xA2;0xA4;0xA5;0xAB;0xAC;0xB4;0xBC;0xBD;0xBF;0xCA;0xCB; @@ -322,7 +322,7 @@ The following XML file contains the device description framework (DDF) for the W 10.0.10586 1.0 - 0x4;0x1B;0x30;0x31;0x48;0x54;0x62;0x63;0x64;0x65;0x79;0x7A;0x7D;0x7E;0x81;0x82;0x88;0x8A;0x8B;0xA1;0xA2;0xA4;0xA5;0xAB;0xAC;0xBC;0xBF;0xCA;0xCB;0xCD;0xCF;0xD2; + 0x4;0x1B;0x30;0x31;0x48;0x54;0x62;0x63;0x64;0x65;0x77;0x79;0x7A;0x7D;0x7E;0x81;0x82;0x87;0x88;0x88*;0x8A;0x8B;0xA1;0xA2;0xA4;0xA5;0xAB;0xAC;0xB4;0xBC;0xBD;0xBF;0xCA;0xCB; diff --git a/windows/client-management/mdm/windowsdefenderapplicationguard-ddf-file.md b/windows/client-management/mdm/windowsdefenderapplicationguard-ddf-file.md index 83c52f17cc..b4460e2d71 100644 --- a/windows/client-management/mdm/windowsdefenderapplicationguard-ddf-file.md +++ b/windows/client-management/mdm/windowsdefenderapplicationguard-ddf-file.md @@ -1,7 +1,7 @@ --- title: WindowsDefenderApplicationGuard DDF file description: View the XML file containing the device description framework (DDF) for the WindowsDefenderApplicationGuard configuration service provider. -ms.date: 04/10/2024 +ms.date: 06/19/2024 --- @@ -40,7 +40,7 @@ The following XML file contains the device description framework (DDF) for the W 10.0.16299 1.1 - 0x4;0x1B;0x30;0x31;0x48;0x54;0x62;0x63;0x64;0x65;0x79;0x7A;0x7D;0x7E;0x81;0x82;0x8A;0x8B;0xA1;0xA2;0xA4;0xA5;0xAB;0xAC;0xAF;0xBC;0xBF;0xCA;0xCB;0xCD;0xCF;0xD2; + 0x4;0x1B;0x30;0x31;0x48;0x54;0x62;0x63;0x64;0x65;0x77;0x79;0x7A;0x7D;0x7E;0x81;0x82;0x8A;0x8B;0xA1;0xA2;0xA4;0xA5;0xAB;0xAC;0xAF;0xB4;0xBC;0xBD;0xBF;0xCA;0xCB; diff --git a/windows/client-management/mdm/windowslicensing-ddf-file.md b/windows/client-management/mdm/windowslicensing-ddf-file.md index a8bb624a6b..571ba992b0 100644 --- a/windows/client-management/mdm/windowslicensing-ddf-file.md +++ b/windows/client-management/mdm/windowslicensing-ddf-file.md @@ -1,7 +1,7 @@ --- title: WindowsLicensing DDF file description: View the XML file containing the device description framework (DDF) for the WindowsLicensing configuration service provider. -ms.date: 04/10/2024 +ms.date: 06/19/2024 --- @@ -40,7 +40,7 @@ The following XML file contains the device description framework (DDF) for the W 10.0.10586 1.0 - 0x4;0x1B;0x30;0x31;0x48;0x54;0x62;0x63;0x64;0x65;0x79;0x7A;0x7D;0x7E;0x81;0x82;0x8A;0x8B;0xA1;0xA2;0xA4;0xA5;0xAB;0xAC;0xBC;0xBF;0xCD;0xCF;0xD2; + 0x4;0x1B;0x30;0x31;0x48;0x54;0x62;0x63;0x64;0x65;0x77;0x79;0x7A;0x7D;0x7E;0x81;0x82;0x87;0x88*;0x8A;0x8B;0xA1;0xA2;0xA4;0xA5;0xAB;0xAC;0xB4;0xBC;0xBD;0xBF; diff --git a/windows/client-management/mdm/wirednetwork-ddf-file.md b/windows/client-management/mdm/wirednetwork-ddf-file.md index ddb1f28855..c3aebaeba0 100644 --- a/windows/client-management/mdm/wirednetwork-ddf-file.md +++ b/windows/client-management/mdm/wirednetwork-ddf-file.md @@ -1,7 +1,7 @@ --- title: WiredNetwork DDF file description: View the XML file containing the device description framework (DDF) for the WiredNetwork configuration service provider. -ms.date: 04/10/2024 +ms.date: 06/19/2024 --- @@ -39,7 +39,7 @@ The following XML file contains the device description framework (DDF) for the W 10.0.17763 1.0 - 0x4;0x1B;0x30;0x31;0x48;0x54;0x62;0x63;0x64;0x65;0x79;0x7A;0x7D;0x7E;0x81;0x82;0x8A;0x8B;0xA1;0xA2;0xA4;0xA5;0xAB;0xAC;0xBC;0xBF;0xCA;0xCB;0xCD;0xCF;0xD2; + 0x4;0x1B;0x30;0x31;0x48;0x54;0x62;0x63;0x64;0x65;0x77;0x79;0x7A;0x7D;0x7E;0x81;0x82;0x8A;0x8B;0xA1;0xA2;0xA4;0xA5;0xAB;0xAC;0xB4;0xBC;0xBD;0xBF;0xCA;0xCB; @@ -118,7 +118,7 @@ The following XML file contains the device description framework (DDF) for the W 10.0.17763 1.0 - 0x4;0x1B;0x30;0x31;0x48;0x54;0x62;0x63;0x64;0x65;0x79;0x7A;0x7D;0x7E;0x81;0x82;0x8A;0x8B;0xA1;0xA2;0xA4;0xA5;0xAB;0xAC;0xBC;0xBF;0xCA;0xCB;0xCD;0xCF;0xD2; + 0x4;0x1B;0x30;0x31;0x48;0x54;0x62;0x63;0x64;0x65;0x77;0x79;0x7A;0x7D;0x7E;0x81;0x82;0x8A;0x8B;0xA1;0xA2;0xA4;0xA5;0xAB;0xAC;0xB4;0xBC;0xBD;0xBF;0xCA;0xCB; From 1813f6a2db60e07f8db185e33db285a98ab287f8 Mon Sep 17 00:00:00 2001 From: "Vinay Pamnani (from Dev Box)" Date: Fri, 21 Jun 2024 11:21:29 -0600 Subject: [PATCH 24/99] PassportForWork applicability change --- windows/client-management/mdm/passportforwork-csp.md | 4 ++-- windows/client-management/mdm/passportforwork-ddf.md | 6 +++--- 2 files changed, 5 insertions(+), 5 deletions(-) diff --git a/windows/client-management/mdm/passportforwork-csp.md b/windows/client-management/mdm/passportforwork-csp.md index 421f8f7ac5..fe7da7ac06 100644 --- a/windows/client-management/mdm/passportforwork-csp.md +++ b/windows/client-management/mdm/passportforwork-csp.md @@ -1,7 +1,7 @@ --- title: PassportForWork CSP description: Learn more about the PassportForWork CSP. -ms.date: 06/19/2024 +ms.date: 06/21/2024 --- @@ -163,7 +163,7 @@ Root node for policies. | Scope | Editions | Applicable OS | |:--|:--|:--| -| ✅ Device
❌ User | ✅ Pro
✅ Enterprise
✅ Education
✅ Windows SE
✅ IoT Enterprise / IoT Enterprise LTSC | ✅ Windows Insider Preview | +| ✅ Device
❌ User | ✅ Pro
✅ Enterprise
✅ Education
✅ Windows SE
✅ IoT Enterprise / IoT Enterprise LTSC | ✅ [10.0.20348.2402] and later
✅ Windows 10, version 2004 [10.0.19041.4239] and later
✅ Windows 11, version 21H2 [10.0.22000.2899] and later
✅ Windows 11, version 22H2 [10.0.22621.3374] and later
✅ Windows Insider Preview | diff --git a/windows/client-management/mdm/passportforwork-ddf.md b/windows/client-management/mdm/passportforwork-ddf.md index ce26cce768..d80b42baec 100644 --- a/windows/client-management/mdm/passportforwork-ddf.md +++ b/windows/client-management/mdm/passportforwork-ddf.md @@ -1,7 +1,7 @@ --- title: PassportForWork DDF file description: View the XML file containing the device description framework (DDF) for the PassportForWork configuration service provider. -ms.date: 06/19/2024 +ms.date: 06/21/2024 --- @@ -870,7 +870,7 @@ If you disable or do not configure this policy setting, the PIN recovery secret - 99.9.99999 + 99.9.99999, 10.0.22621.3374, 10.0.22000.2899, 10.0.20348.2402, 10.0.19041.4239 1.6 @@ -895,7 +895,7 @@ If you disable or do not configure this policy setting, the PIN recovery secret False - Windows Hello for Business can use certificates to authenticate to on-premise resources. + Windows Hello for Business can use certificates to authenticate to on-premise resources. If you enable this policy setting, Windows Hello for Business will wait until the device has received a certificate payload from the mobile device management server before provisioning a PIN. From b479ad21d698cc0c14792b947a3d6ebf6d4e801e Mon Sep 17 00:00:00 2001 From: "Vinay Pamnani (from Dev Box)" Date: Fri, 21 Jun 2024 11:23:52 -0600 Subject: [PATCH 25/99] Fix bookmark link --- windows/client-management/mdm/personalization-csp.md | 4 ++-- 1 file changed, 2 insertions(+), 2 deletions(-) diff --git a/windows/client-management/mdm/personalization-csp.md b/windows/client-management/mdm/personalization-csp.md index 3f8030bbfc..d455b2968a 100644 --- a/windows/client-management/mdm/personalization-csp.md +++ b/windows/client-management/mdm/personalization-csp.md @@ -1,7 +1,7 @@ --- title: Personalization CSP description: Learn more about the Personalization CSP. -ms.date: 06/19/2024 +ms.date: 06/21/2024 --- @@ -14,7 +14,7 @@ ms.date: 06/19/2024 The Personalization CSP can set the lock screen, desktop background images and company branding on sign-in screen ([BootToCloud mode](policy-csp-clouddesktop.md#boottocloudmode) only). Setting these policies also prevents the user from changing the image. You can also use the Personalization settings in a provisioning package. > [!IMPORTANT] -> Personalization CSP is supported in Windows Enterprise and Education SKUs. It works in Windows Professional only when SetEduPolicies in [SharedPC CSP](sharedpc-csp.md) is set, or when the device is configured in [Shared PC mode with BootToCloudPCEnhanced policy](clouddesktop-csp.md#boottocloudpcenhanced). +> Personalization CSP is supported in Windows Enterprise and Education SKUs. It works in Windows Professional only when SetEduPolicies in [SharedPC CSP](sharedpc-csp.md) is set, or when the device is configured in [Shared PC mode with BootToCloudPCEnhanced policy](clouddesktop-csp.md#deviceboottocloudpcenhanced). From aaf60592b355688eca14612a68a95d344cf3f86f Mon Sep 17 00:00:00 2001 From: "Vinay Pamnani (from Dev Box)" Date: Fri, 21 Jun 2024 12:08:42 -0600 Subject: [PATCH 26/99] Applicability updates --- windows/client-management/mdm/defender-csp.md | 4 +- windows/client-management/mdm/firewall-csp.md | 38 +++++++++---------- windows/client-management/mdm/laps-csp.md | 32 ++++++++-------- .../mdm/policy-csp-internetexplorer.md | 8 ++-- .../mdm/policy-csp-privacy.md | 12 +++--- .../mdm/policy-csp-remotedesktopservices.md | 6 +-- 6 files changed, 48 insertions(+), 52 deletions(-) diff --git a/windows/client-management/mdm/defender-csp.md b/windows/client-management/mdm/defender-csp.md index 89c079aeea..198570987e 100644 --- a/windows/client-management/mdm/defender-csp.md +++ b/windows/client-management/mdm/defender-csp.md @@ -1,7 +1,7 @@ --- title: Defender CSP description: Learn more about the Defender CSP. -ms.date: 06/19/2024 +ms.date: 06/21/2024 --- @@ -367,7 +367,7 @@ Control whether network protection can improve performance by switching from rea | Value | Description | |:--|:--| | 1 | Allow switching to asynchronous inspection. | -| 0 (Default) | Don't allow asynchronous inspection. | +| 0 (Default) | Don’t allow asynchronous inspection. | diff --git a/windows/client-management/mdm/firewall-csp.md b/windows/client-management/mdm/firewall-csp.md index 53b060e0f5..549c2cbc81 100644 --- a/windows/client-management/mdm/firewall-csp.md +++ b/windows/client-management/mdm/firewall-csp.md @@ -1,7 +1,7 @@ --- title: Firewall CSP description: Learn more about the Firewall CSP. -ms.date: 01/18/2024 +ms.date: 06/21/2024 --- @@ -9,8 +9,6 @@ ms.date: 01/18/2024 # Firewall CSP -[!INCLUDE [Windows Insider tip](includes/mdm-insider-csp-note.md)] - The Firewall configuration service provider (CSP) allows the mobile device management (MDM) server to configure the Windows Defender Firewall global settings, per profile settings, and the desired set of custom rules to be enforced on the device. Using the Firewall CSP the IT admin can now manage non-domain devices, and reduce the risk of network security threats across all systems connecting to the corporate network. @@ -3465,7 +3463,7 @@ This value represents the order of rule enforcement. A lower priority rule is ev | Scope | Editions | Applicable OS | |:--|:--|:--| -| ✅ Device
❌ User | ✅ Pro
✅ Enterprise
✅ Education
✅ Windows SE
✅ IoT Enterprise / IoT Enterprise LTSC | ✅ Windows 11, version 22H2 [10.0.22621.2352] and later
✅ Windows Insider Preview [10.0.25398] | +| ✅ Device
❌ User | ✅ Pro
✅ Enterprise
✅ Education
✅ Windows SE
✅ IoT Enterprise / IoT Enterprise LTSC | ✅ [10.0.25398] and later
✅ Windows 11, version 22H2 [10.0.22621.2352] and later | @@ -3805,7 +3803,7 @@ VM Creator ID that these settings apply to. Valid format is a GUID. | Scope | Editions | Applicable OS | |:--|:--|:--| -| ✅ Device
❌ User | ✅ Pro
✅ Enterprise
✅ Education
✅ Windows SE
✅ IoT Enterprise / IoT Enterprise LTSC | ✅ Windows 11, version 22H2 [10.0.22621.2352] and later
✅ Windows Insider Preview [10.0.25398] | +| ✅ Device
❌ User | ✅ Pro
✅ Enterprise
✅ Education
✅ Windows SE
✅ IoT Enterprise / IoT Enterprise LTSC | ✅ [10.0.25398] and later
✅ Windows 11, version 22H2 [10.0.22621.2352] and later | @@ -3954,7 +3952,7 @@ This value is the action that the Hyper-V Firewall does by default (and evaluate | Scope | Editions | Applicable OS | |:--|:--|:--| -| ✅ Device
❌ User | ✅ Pro
✅ Enterprise
✅ Education
✅ Windows SE
✅ IoT Enterprise / IoT Enterprise LTSC | ✅ Windows 11, version 22H2 [10.0.22621.2352] and later
✅ Windows Insider Preview [10.0.25398] | +| ✅ Device
❌ User | ✅ Pro
✅ Enterprise
✅ Education
✅ Windows SE
✅ IoT Enterprise / IoT Enterprise LTSC | ✅ [10.0.25398] and later
✅ Windows 11, version 22H2 [10.0.22621.2352] and later | @@ -3992,7 +3990,7 @@ This value is the action that the Hyper-V Firewall does by default (and evaluate | Scope | Editions | Applicable OS | |:--|:--|:--| -| ✅ Device
❌ User | ✅ Pro
✅ Enterprise
✅ Education
✅ Windows SE
✅ IoT Enterprise / IoT Enterprise LTSC | ✅ Windows 11, version 22H2 [10.0.22621.2352] and later
✅ Windows Insider Preview [10.0.25398] | +| ✅ Device
❌ User | ✅ Pro
✅ Enterprise
✅ Education
✅ Windows SE
✅ IoT Enterprise / IoT Enterprise LTSC | ✅ [10.0.25398] and later
✅ Windows 11, version 22H2 [10.0.22621.2352] and later | @@ -4042,7 +4040,7 @@ This value is used as an on/off switch. If this value is false, Hyper-V Firewall | Scope | Editions | Applicable OS | |:--|:--|:--| -| ✅ Device
❌ User | ✅ Pro
✅ Enterprise
✅ Education
✅ Windows SE
✅ IoT Enterprise / IoT Enterprise LTSC | ✅ Windows 11, version 22H2 [10.0.22621.2352] and later
✅ Windows Insider Preview [10.0.25398] | +| ✅ Device
❌ User | ✅ Pro
✅ Enterprise
✅ Education
✅ Windows SE
✅ IoT Enterprise / IoT Enterprise LTSC | ✅ [10.0.25398] and later
✅ Windows 11, version 22H2 [10.0.22621.2352] and later | @@ -4092,7 +4090,7 @@ This value is the action that the Hyper-V Firewall does by default (and evaluate | Scope | Editions | Applicable OS | |:--|:--|:--| -| ✅ Device
❌ User | ✅ Pro
✅ Enterprise
✅ Education
✅ Windows SE
✅ IoT Enterprise / IoT Enterprise LTSC | ✅ Windows 11, version 22H2 [10.0.22621.2352] and later
✅ Windows Insider Preview [10.0.25398] | +| ✅ Device
❌ User | ✅ Pro
✅ Enterprise
✅ Education
✅ Windows SE
✅ IoT Enterprise / IoT Enterprise LTSC | ✅ [10.0.25398] and later
✅ Windows 11, version 22H2 [10.0.22621.2352] and later | @@ -4142,7 +4140,7 @@ This value is the action that the Hyper-V Firewall does by default (and evaluate | Scope | Editions | Applicable OS | |:--|:--|:--| -| ✅ Device
❌ User | ✅ Pro
✅ Enterprise
✅ Education
✅ Windows SE
✅ IoT Enterprise / IoT Enterprise LTSC | ✅ Windows 11, version 22H2 [10.0.22621.2352] and later
✅ Windows Insider Preview [10.0.25398] | +| ✅ Device
❌ User | ✅ Pro
✅ Enterprise
✅ Education
✅ Windows SE
✅ IoT Enterprise / IoT Enterprise LTSC | ✅ [10.0.25398] and later
✅ Windows 11, version 22H2 [10.0.22621.2352] and later | @@ -4289,7 +4287,7 @@ This value is an on/off switch for loopback traffic. This determines if this VM | Scope | Editions | Applicable OS | |:--|:--|:--| -| ✅ Device
❌ User | ✅ Pro
✅ Enterprise
✅ Education
✅ Windows SE
✅ IoT Enterprise / IoT Enterprise LTSC | ✅ Windows 11, version 22H2 [10.0.22621.2352] and later
✅ Windows Insider Preview [10.0.25398] | +| ✅ Device
❌ User | ✅ Pro
✅ Enterprise
✅ Education
✅ Windows SE
✅ IoT Enterprise / IoT Enterprise LTSC | ✅ [10.0.25398] and later
✅ Windows 11, version 22H2 [10.0.22621.2352] and later | @@ -4327,7 +4325,7 @@ This value is an on/off switch for loopback traffic. This determines if this VM | Scope | Editions | Applicable OS | |:--|:--|:--| -| ✅ Device
❌ User | ✅ Pro
✅ Enterprise
✅ Education
✅ Windows SE
✅ IoT Enterprise / IoT Enterprise LTSC | ✅ Windows 11, version 22H2 [10.0.22621.2352] and later
✅ Windows Insider Preview [10.0.25398] | +| ✅ Device
❌ User | ✅ Pro
✅ Enterprise
✅ Education
✅ Windows SE
✅ IoT Enterprise / IoT Enterprise LTSC | ✅ [10.0.25398] and later
✅ Windows 11, version 22H2 [10.0.22621.2352] and later | @@ -4377,7 +4375,7 @@ This value is used as an on/off switch. If this value is false, Hyper-V Firewall | Scope | Editions | Applicable OS | |:--|:--|:--| -| ✅ Device
❌ User | ✅ Pro
✅ Enterprise
✅ Education
✅ Windows SE
✅ IoT Enterprise / IoT Enterprise LTSC | ✅ Windows 11, version 22H2 [10.0.22621.2352] and later
✅ Windows Insider Preview [10.0.25398] | +| ✅ Device
❌ User | ✅ Pro
✅ Enterprise
✅ Education
✅ Windows SE
✅ IoT Enterprise / IoT Enterprise LTSC | ✅ [10.0.25398] and later
✅ Windows 11, version 22H2 [10.0.22621.2352] and later | @@ -4427,7 +4425,7 @@ This value is the action that the Hyper-V Firewall does by default (and evaluate | Scope | Editions | Applicable OS | |:--|:--|:--| -| ✅ Device
❌ User | ✅ Pro
✅ Enterprise
✅ Education
✅ Windows SE
✅ IoT Enterprise / IoT Enterprise LTSC | ✅ Windows 11, version 22H2 [10.0.22621.2352] and later
✅ Windows Insider Preview [10.0.25398] | +| ✅ Device
❌ User | ✅ Pro
✅ Enterprise
✅ Education
✅ Windows SE
✅ IoT Enterprise / IoT Enterprise LTSC | ✅ [10.0.25398] and later
✅ Windows 11, version 22H2 [10.0.22621.2352] and later | @@ -4477,7 +4475,7 @@ This value is the action that the Hyper-V Firewall does by default (and evaluate | Scope | Editions | Applicable OS | |:--|:--|:--| -| ✅ Device
❌ User | ✅ Pro
✅ Enterprise
✅ Education
✅ Windows SE
✅ IoT Enterprise / IoT Enterprise LTSC | ✅ Windows 11, version 22H2 [10.0.22621.2352] and later
✅ Windows Insider Preview [10.0.25398] | +| ✅ Device
❌ User | ✅ Pro
✅ Enterprise
✅ Education
✅ Windows SE
✅ IoT Enterprise / IoT Enterprise LTSC | ✅ [10.0.25398] and later
✅ Windows 11, version 22H2 [10.0.22621.2352] and later | @@ -4526,7 +4524,7 @@ This value is an on/off switch for the Hyper-V Firewall enforcement. | Scope | Editions | Applicable OS | |:--|:--|:--| -| ✅ Device
❌ User | ✅ Pro
✅ Enterprise
✅ Education
✅ Windows SE
✅ IoT Enterprise / IoT Enterprise LTSC | ✅ Windows 11, version 22H2 [10.0.22621.2352] and later
✅ Windows Insider Preview [10.0.25398] | +| ✅ Device
❌ User | ✅ Pro
✅ Enterprise
✅ Education
✅ Windows SE
✅ IoT Enterprise / IoT Enterprise LTSC | ✅ [10.0.25398] and later
✅ Windows 11, version 22H2 [10.0.22621.2352] and later | @@ -4564,7 +4562,7 @@ This value is an on/off switch for the Hyper-V Firewall enforcement. | Scope | Editions | Applicable OS | |:--|:--|:--| -| ✅ Device
❌ User | ✅ Pro
✅ Enterprise
✅ Education
✅ Windows SE
✅ IoT Enterprise / IoT Enterprise LTSC | ✅ Windows 11, version 22H2 [10.0.22621.2352] and later
✅ Windows Insider Preview [10.0.25398] | +| ✅ Device
❌ User | ✅ Pro
✅ Enterprise
✅ Education
✅ Windows SE
✅ IoT Enterprise / IoT Enterprise LTSC | ✅ [10.0.25398] and later
✅ Windows 11, version 22H2 [10.0.22621.2352] and later | @@ -4614,7 +4612,7 @@ This value is used as an on/off switch. If this value is false, Hyper-V Firewall | Scope | Editions | Applicable OS | |:--|:--|:--| -| ✅ Device
❌ User | ✅ Pro
✅ Enterprise
✅ Education
✅ Windows SE
✅ IoT Enterprise / IoT Enterprise LTSC | ✅ Windows 11, version 22H2 [10.0.22621.2352] and later
✅ Windows Insider Preview [10.0.25398] | +| ✅ Device
❌ User | ✅ Pro
✅ Enterprise
✅ Education
✅ Windows SE
✅ IoT Enterprise / IoT Enterprise LTSC | ✅ [10.0.25398] and later
✅ Windows 11, version 22H2 [10.0.22621.2352] and later | @@ -4664,7 +4662,7 @@ This value is the action that the Hyper-V Firewall does by default (and evaluate | Scope | Editions | Applicable OS | |:--|:--|:--| -| ✅ Device
❌ User | ✅ Pro
✅ Enterprise
✅ Education
✅ Windows SE
✅ IoT Enterprise / IoT Enterprise LTSC | ✅ Windows 11, version 22H2 [10.0.22621.2352] and later
✅ Windows Insider Preview [10.0.25398] | +| ✅ Device
❌ User | ✅ Pro
✅ Enterprise
✅ Education
✅ Windows SE
✅ IoT Enterprise / IoT Enterprise LTSC | ✅ [10.0.25398] and later
✅ Windows 11, version 22H2 [10.0.22621.2352] and later | @@ -4714,7 +4712,7 @@ This value is the action that the Hyper-V Firewall does by default (and evaluate | Scope | Editions | Applicable OS | |:--|:--|:--| -| ✅ Device
❌ User | ✅ Pro
✅ Enterprise
✅ Education
✅ Windows SE
✅ IoT Enterprise / IoT Enterprise LTSC | ✅ Windows 11, version 22H2 [10.0.22621.2352] and later
✅ Windows Insider Preview [10.0.25398] | +| ✅ Device
❌ User | ✅ Pro
✅ Enterprise
✅ Education
✅ Windows SE
✅ IoT Enterprise / IoT Enterprise LTSC | ✅ [10.0.25398] and later
✅ Windows 11, version 22H2 [10.0.22621.2352] and later | diff --git a/windows/client-management/mdm/laps-csp.md b/windows/client-management/mdm/laps-csp.md index e48b4b6d54..0e5e7d5b2d 100644 --- a/windows/client-management/mdm/laps-csp.md +++ b/windows/client-management/mdm/laps-csp.md @@ -1,7 +1,7 @@ --- title: LAPS CSP description: Learn more about the LAPS CSP. -ms.date: 05/20/2024 +ms.date: 06/21/2024 --- @@ -55,7 +55,7 @@ The following list shows the LAPS configuration service provider nodes: | Scope | Editions | Applicable OS | |:--|:--|:--| -| ✅ Device
❌ User | ✅ Pro
✅ Enterprise
✅ Education
✅ Windows SE
✅ IoT Enterprise / IoT Enterprise LTSC | ✅ [10.0.20348.1663] and later
✅ Windows 10, version 1809 [10.0.17763.4244] and later
✅ Windows 10, version 2004 [10.0.19041.2784] and later
✅ Windows 11, version 21H2 [10.0.22000.1754] and later
✅ Windows 11, version 22H2 [10.0.22621.1480] and later
✅ Windows Insider Preview [10.0.25145] | +| ✅ Device
❌ User | ✅ Pro
✅ Enterprise
✅ Education
✅ Windows SE
✅ IoT Enterprise / IoT Enterprise LTSC | ✅ [10.0.20348.1663] and later
✅ [10.0.25145] and later
✅ Windows 10, version 1809 [10.0.17763.4244] and later
✅ Windows 10, version 2004 [10.0.19041.2784] and later
✅ Windows 11, version 21H2 [10.0.22000.1754] and later
✅ Windows 11, version 22H2 [10.0.22621.1480] and later | @@ -94,7 +94,7 @@ Defines the parent interior node for all action-related settings in the LAPS CSP | Scope | Editions | Applicable OS | |:--|:--|:--| -| ✅ Device
❌ User | ✅ Pro
✅ Enterprise
✅ Education
✅ Windows SE
✅ IoT Enterprise / IoT Enterprise LTSC | ✅ [10.0.20348.1663] and later
✅ Windows 10, version 1809 [10.0.17763.4244] and later
✅ Windows 10, version 2004 [10.0.19041.2784] and later
✅ Windows 11, version 21H2 [10.0.22000.1754] and later
✅ Windows 11, version 22H2 [10.0.22621.1480] and later
✅ Windows Insider Preview [10.0.25145] | +| ✅ Device
❌ User | ✅ Pro
✅ Enterprise
✅ Education
✅ Windows SE
✅ IoT Enterprise / IoT Enterprise LTSC | ✅ [10.0.20348.1663] and later
✅ [10.0.25145] and later
✅ Windows 10, version 1809 [10.0.17763.4244] and later
✅ Windows 10, version 2004 [10.0.19041.2784] and later
✅ Windows 11, version 21H2 [10.0.22000.1754] and later
✅ Windows 11, version 22H2 [10.0.22621.1480] and later | @@ -134,7 +134,7 @@ This action invokes an immediate reset of the local administrator account passwo | Scope | Editions | Applicable OS | |:--|:--|:--| -| ✅ Device
❌ User | ✅ Pro
✅ Enterprise
✅ Education
✅ Windows SE
✅ IoT Enterprise / IoT Enterprise LTSC | ✅ [10.0.20348.1663] and later
✅ Windows 10, version 1809 [10.0.17763.4244] and later
✅ Windows 10, version 2004 [10.0.19041.2784] and later
✅ Windows 11, version 21H2 [10.0.22000.1754] and later
✅ Windows 11, version 22H2 [10.0.22621.1480] and later
✅ Windows Insider Preview [10.0.25145] | +| ✅ Device
❌ User | ✅ Pro
✅ Enterprise
✅ Education
✅ Windows SE
✅ IoT Enterprise / IoT Enterprise LTSC | ✅ [10.0.20348.1663] and later
✅ [10.0.25145] and later
✅ Windows 10, version 1809 [10.0.17763.4244] and later
✅ Windows 10, version 2004 [10.0.19041.2784] and later
✅ Windows 11, version 21H2 [10.0.22000.1754] and later
✅ Windows 11, version 22H2 [10.0.22621.1480] and later | @@ -179,7 +179,7 @@ The value returned is an HRESULT code: | Scope | Editions | Applicable OS | |:--|:--|:--| -| ✅ Device
❌ User | ✅ Pro
✅ Enterprise
✅ Education
✅ Windows SE
✅ IoT Enterprise / IoT Enterprise LTSC | ✅ [10.0.20348.1663] and later
✅ Windows 10, version 1809 [10.0.17763.4244] and later
✅ Windows 10, version 2004 [10.0.19041.2784] and later
✅ Windows 11, version 21H2 [10.0.22000.1754] and later
✅ Windows 11, version 22H2 [10.0.22621.1480] and later
✅ Windows Insider Preview [10.0.25145] | +| ✅ Device
❌ User | ✅ Pro
✅ Enterprise
✅ Education
✅ Windows SE
✅ IoT Enterprise / IoT Enterprise LTSC | ✅ [10.0.20348.1663] and later
✅ [10.0.25145] and later
✅ Windows 10, version 1809 [10.0.17763.4244] and later
✅ Windows 10, version 2004 [10.0.19041.2784] and later
✅ Windows 11, version 21H2 [10.0.22000.1754] and later
✅ Windows 11, version 22H2 [10.0.22621.1480] and later | @@ -219,7 +219,7 @@ Root node for LAPS policies. | Scope | Editions | Applicable OS | |:--|:--|:--| -| ✅ Device
❌ User | ✅ Pro
✅ Enterprise
✅ Education
✅ Windows SE
✅ IoT Enterprise / IoT Enterprise LTSC | ✅ [10.0.20348.1663] and later
✅ Windows 10, version 1809 [10.0.17763.4244] and later
✅ Windows 10, version 2004 [10.0.19041.2784] and later
✅ Windows 11, version 21H2 [10.0.22000.1754] and later
✅ Windows 11, version 22H2 [10.0.22621.1480] and later
✅ Windows Insider Preview [10.0.25145] | +| ✅ Device
❌ User | ✅ Pro
✅ Enterprise
✅ Education
✅ Windows SE
✅ IoT Enterprise / IoT Enterprise LTSC | ✅ [10.0.20348.1663] and later
✅ [10.0.25145] and later
✅ Windows 10, version 1809 [10.0.17763.4244] and later
✅ Windows 10, version 2004 [10.0.19041.2784] and later
✅ Windows 11, version 21H2 [10.0.22000.1754] and later
✅ Windows 11, version 22H2 [10.0.22621.1480] and later | @@ -269,7 +269,7 @@ This setting has a maximum allowed value of 12 passwords. | Scope | Editions | Applicable OS | |:--|:--|:--| -| ✅ Device
❌ User | ✅ Pro
✅ Enterprise
✅ Education
✅ Windows SE
✅ IoT Enterprise / IoT Enterprise LTSC | ✅ [10.0.20348.1663] and later
✅ Windows 10, version 1809 [10.0.17763.4244] and later
✅ Windows 10, version 2004 [10.0.19041.2784] and later
✅ Windows 11, version 21H2 [10.0.22000.1754] and later
✅ Windows 11, version 22H2 [10.0.22621.1480] and later
✅ Windows Insider Preview [10.0.25145] | +| ✅ Device
❌ User | ✅ Pro
✅ Enterprise
✅ Education
✅ Windows SE
✅ IoT Enterprise / IoT Enterprise LTSC | ✅ [10.0.20348.1663] and later
✅ [10.0.25145] and later
✅ Windows 10, version 1809 [10.0.17763.4244] and later
✅ Windows 10, version 2004 [10.0.19041.2784] and later
✅ Windows 11, version 21H2 [10.0.22000.1754] and later
✅ Windows 11, version 22H2 [10.0.22621.1480] and later | @@ -314,7 +314,7 @@ Note if a custom managed local administrator account name is specified in this s | Scope | Editions | Applicable OS | |:--|:--|:--| -| ✅ Device
❌ User | ✅ Pro
✅ Enterprise
✅ Education
✅ Windows SE
✅ IoT Enterprise / IoT Enterprise LTSC | ✅ [10.0.20348.1663] and later
✅ Windows 10, version 1809 [10.0.17763.4244] and later
✅ Windows 10, version 2004 [10.0.19041.2784] and later
✅ Windows 11, version 21H2 [10.0.22000.1754] and later
✅ Windows 11, version 22H2 [10.0.22621.1480] and later
✅ Windows Insider Preview [10.0.25145] | +| ✅ Device
❌ User | ✅ Pro
✅ Enterprise
✅ Education
✅ Windows SE
✅ IoT Enterprise / IoT Enterprise LTSC | ✅ [10.0.20348.1663] and later
✅ [10.0.25145] and later
✅ Windows 10, version 1809 [10.0.17763.4244] and later
✅ Windows 10, version 2004 [10.0.19041.2784] and later
✅ Windows 11, version 21H2 [10.0.22000.1754] and later
✅ Windows 11, version 22H2 [10.0.22621.1480] and later | @@ -376,7 +376,7 @@ If not specified, this setting defaults to True. | Scope | Editions | Applicable OS | |:--|:--|:--| -| ✅ Device
❌ User | ✅ Pro
✅ Enterprise
✅ Education
✅ Windows SE
✅ IoT Enterprise / IoT Enterprise LTSC | ✅ [10.0.20348.1663] and later
✅ Windows 10, version 1809 [10.0.17763.4244] and later
✅ Windows 10, version 2004 [10.0.19041.2784] and later
✅ Windows 11, version 21H2 [10.0.22000.1754] and later
✅ Windows 11, version 22H2 [10.0.22621.1480] and later
✅ Windows Insider Preview [10.0.25145] | +| ✅ Device
❌ User | ✅ Pro
✅ Enterprise
✅ Education
✅ Windows SE
✅ IoT Enterprise / IoT Enterprise LTSC | ✅ [10.0.20348.1663] and later
✅ [10.0.25145] and later
✅ Windows 10, version 1809 [10.0.17763.4244] and later
✅ Windows 10, version 2004 [10.0.19041.2784] and later
✅ Windows 11, version 21H2 [10.0.22000.1754] and later
✅ Windows 11, version 22H2 [10.0.22621.1480] and later | @@ -701,7 +701,7 @@ If not specified, this setting will default to 1. | Scope | Editions | Applicable OS | |:--|:--|:--| -| ✅ Device
❌ User | ✅ Pro
✅ Enterprise
✅ Education
✅ Windows SE
✅ IoT Enterprise / IoT Enterprise LTSC | ✅ [10.0.20348.1663] and later
✅ Windows 10, version 1809 [10.0.17763.4244] and later
✅ Windows 10, version 2004 [10.0.19041.2784] and later
✅ Windows 11, version 21H2 [10.0.22000.1754] and later
✅ Windows 11, version 22H2 [10.0.22621.1480] and later
✅ Windows Insider Preview [10.0.25145] | +| ✅ Device
❌ User | ✅ Pro
✅ Enterprise
✅ Education
✅ Windows SE
✅ IoT Enterprise / IoT Enterprise LTSC | ✅ [10.0.20348.1663] and later
✅ [10.0.25145] and later
✅ Windows 10, version 1809 [10.0.17763.4244] and later
✅ Windows 10, version 2004 [10.0.19041.2784] and later
✅ Windows 11, version 21H2 [10.0.22000.1754] and later
✅ Windows 11, version 22H2 [10.0.22621.1480] and later | @@ -807,7 +807,7 @@ This setting has a maximum allowed value of 10 words. | Scope | Editions | Applicable OS | |:--|:--|:--| -| ✅ Device
❌ User | ✅ Pro
✅ Enterprise
✅ Education
✅ Windows SE
✅ IoT Enterprise / IoT Enterprise LTSC | ✅ [10.0.20348.1663] and later
✅ Windows 10, version 1809 [10.0.17763.4244] and later
✅ Windows 10, version 2004 [10.0.19041.2784] and later
✅ Windows 11, version 21H2 [10.0.22000.1754] and later
✅ Windows 11, version 22H2 [10.0.22621.1480] and later
✅ Windows Insider Preview [10.0.25145] | +| ✅ Device
❌ User | ✅ Pro
✅ Enterprise
✅ Education
✅ Windows SE
✅ IoT Enterprise / IoT Enterprise LTSC | ✅ [10.0.20348.1663] and later
✅ [10.0.25145] and later
✅ Windows 10, version 1809 [10.0.17763.4244] and later
✅ Windows 10, version 2004 [10.0.19041.2784] and later
✅ Windows 11, version 21H2 [10.0.22000.1754] and later
✅ Windows 11, version 22H2 [10.0.22621.1480] and later | @@ -855,7 +855,7 @@ This setting has a maximum allowed value of 365 days. | Scope | Editions | Applicable OS | |:--|:--|:--| -| ✅ Device
❌ User | ✅ Pro
✅ Enterprise
✅ Education
✅ Windows SE
✅ IoT Enterprise / IoT Enterprise LTSC | ✅ [10.0.20348.1663] and later
✅ Windows 10, version 1809 [10.0.17763.4244] and later
✅ Windows 10, version 2004 [10.0.19041.2784] and later
✅ Windows 11, version 21H2 [10.0.22000.1754] and later
✅ Windows 11, version 22H2 [10.0.22621.1480] and later
✅ Windows Insider Preview [10.0.25145] | +| ✅ Device
❌ User | ✅ Pro
✅ Enterprise
✅ Education
✅ Windows SE
✅ IoT Enterprise / IoT Enterprise LTSC | ✅ [10.0.20348.1663] and later
✅ [10.0.25145] and later
✅ Windows 10, version 1809 [10.0.17763.4244] and later
✅ Windows 10, version 2004 [10.0.19041.2784] and later
✅ Windows 11, version 21H2 [10.0.22000.1754] and later
✅ Windows 11, version 22H2 [10.0.22621.1480] and later | @@ -927,7 +927,7 @@ Passphrase list taken from "Deep Dive: EFF's New Wordlists for Random Passphrase | Scope | Editions | Applicable OS | |:--|:--|:--| -| ✅ Device
❌ User | ✅ Pro
✅ Enterprise
✅ Education
✅ Windows SE
✅ IoT Enterprise / IoT Enterprise LTSC | ✅ [10.0.20348.1663] and later
✅ Windows 10, version 1809 [10.0.17763.4244] and later
✅ Windows 10, version 2004 [10.0.19041.2784] and later
✅ Windows 11, version 21H2 [10.0.22000.1754] and later
✅ Windows 11, version 22H2 [10.0.22621.1480] and later
✅ Windows Insider Preview [10.0.25145] | +| ✅ Device
❌ User | ✅ Pro
✅ Enterprise
✅ Education
✅ Windows SE
✅ IoT Enterprise / IoT Enterprise LTSC | ✅ [10.0.20348.1663] and later
✅ [10.0.25145] and later
✅ Windows 10, version 1809 [10.0.17763.4244] and later
✅ Windows 10, version 2004 [10.0.19041.2784] and later
✅ Windows 11, version 21H2 [10.0.22000.1754] and later
✅ Windows 11, version 22H2 [10.0.22621.1480] and later | @@ -983,7 +983,7 @@ If not specified, this setting defaults to True. | Scope | Editions | Applicable OS | |:--|:--|:--| -| ✅ Device
❌ User | ✅ Pro
✅ Enterprise
✅ Education
✅ Windows SE
✅ IoT Enterprise / IoT Enterprise LTSC | ✅ [10.0.20348.1663] and later
✅ Windows 10, version 1809 [10.0.17763.4244] and later
✅ Windows 10, version 2004 [10.0.19041.2784] and later
✅ Windows 11, version 21H2 [10.0.22000.1754] and later
✅ Windows 11, version 22H2 [10.0.22621.1480] and later
✅ Windows Insider Preview [10.0.25145] | +| ✅ Device
❌ User | ✅ Pro
✅ Enterprise
✅ Education
✅ Windows SE
✅ IoT Enterprise / IoT Enterprise LTSC | ✅ [10.0.20348.1663] and later
✅ [10.0.25145] and later
✅ Windows 10, version 1809 [10.0.17763.4244] and later
✅ Windows 10, version 2004 [10.0.19041.2784] and later
✅ Windows 11, version 21H2 [10.0.22000.1754] and later
✅ Windows 11, version 22H2 [10.0.22621.1480] and later | @@ -1031,7 +1031,7 @@ This setting has a maximum allowed value of 64 characters. | Scope | Editions | Applicable OS | |:--|:--|:--| -| ✅ Device
❌ User | ✅ Pro
✅ Enterprise
✅ Education
✅ Windows SE
✅ IoT Enterprise / IoT Enterprise LTSC | ✅ [10.0.20348.1663] and later
✅ Windows 10, version 1809 [10.0.17763.4244] and later
✅ Windows 10, version 2004 [10.0.19041.2784] and later
✅ Windows 11, version 21H2 [10.0.22000.1754] and later
✅ Windows 11, version 22H2 [10.0.22621.1480] and later
✅ Windows Insider Preview [10.0.25145] | +| ✅ Device
❌ User | ✅ Pro
✅ Enterprise
✅ Education
✅ Windows SE
✅ IoT Enterprise / IoT Enterprise LTSC | ✅ [10.0.20348.1663] and later
✅ [10.0.25145] and later
✅ Windows 10, version 1809 [10.0.17763.4244] and later
✅ Windows 10, version 2004 [10.0.19041.2784] and later
✅ Windows 11, version 21H2 [10.0.22000.1754] and later
✅ Windows 11, version 22H2 [10.0.22621.1480] and later | @@ -1089,7 +1089,7 @@ If not specified, this setting will default to 3 (Reset the password and logoff | Scope | Editions | Applicable OS | |:--|:--|:--| -| ✅ Device
❌ User | ✅ Pro
✅ Enterprise
✅ Education
✅ Windows SE
✅ IoT Enterprise / IoT Enterprise LTSC | ✅ [10.0.20348.1663] and later
✅ Windows 10, version 1809 [10.0.17763.4244] and later
✅ Windows 10, version 2004 [10.0.19041.2784] and later
✅ Windows 11, version 21H2 [10.0.22000.1754] and later
✅ Windows 11, version 22H2 [10.0.22621.1480] and later
✅ Windows Insider Preview [10.0.25145] | +| ✅ Device
❌ User | ✅ Pro
✅ Enterprise
✅ Education
✅ Windows SE
✅ IoT Enterprise / IoT Enterprise LTSC | ✅ [10.0.20348.1663] and later
✅ [10.0.25145] and later
✅ Windows 10, version 1809 [10.0.17763.4244] and later
✅ Windows 10, version 2004 [10.0.19041.2784] and later
✅ Windows 11, version 21H2 [10.0.22000.1754] and later
✅ Windows 11, version 22H2 [10.0.22621.1480] and later | diff --git a/windows/client-management/mdm/policy-csp-internetexplorer.md b/windows/client-management/mdm/policy-csp-internetexplorer.md index 54422578ac..61083dafc6 100644 --- a/windows/client-management/mdm/policy-csp-internetexplorer.md +++ b/windows/client-management/mdm/policy-csp-internetexplorer.md @@ -1,7 +1,7 @@ --- title: InternetExplorer Policy CSP description: Learn more about the InternetExplorer Area in Policy CSP. -ms.date: 06/19/2024 +ms.date: 06/21/2024 --- @@ -7772,7 +7772,7 @@ High Safety enables applets to run in their sandbox. Disable Java to prevent any | Scope | Editions | Applicable OS | |:--|:--|:--| -| ✅ Device
✅ User | ✅ Pro
✅ Enterprise
✅ Education
✅ Windows SE
✅ IoT Enterprise / IoT Enterprise LTSC | ✅ [10.0.20348.2227] and later
✅ Windows 10, version 2004 [10.0.19041.3758] and later
✅ Windows 11, version 22H2 [10.0.22621.2792] and later
✅ Windows Insider Preview [10.0.25398.643] | +| ✅ Device
✅ User | ✅ Pro
✅ Enterprise
✅ Education
✅ Windows SE
✅ IoT Enterprise / IoT Enterprise LTSC | ✅ [10.0.20348.2227] and later
✅ [10.0.25398.643] and later
✅ [10.0.25965] and later
✅ Windows 10, version 2004 [10.0.19041.3758] and later
✅ Windows 11, version 22H2 [10.0.22621.2792] and later | @@ -8847,7 +8847,7 @@ High Safety enables applets to run in their sandbox. Disable Java to prevent any | Scope | Editions | Applicable OS | |:--|:--|:--| -| ✅ Device
✅ User | ✅ Pro
✅ Enterprise
✅ Education
✅ Windows SE
✅ IoT Enterprise / IoT Enterprise LTSC | ✅ [10.0.20348.2227] and later
✅ Windows 10, version 2004 [10.0.19041.3758] and later
✅ Windows 11, version 22H2 [10.0.22621.2792] and later
✅ Windows Insider Preview [10.0.25398.643] | +| ✅ Device
✅ User | ✅ Pro
✅ Enterprise
✅ Education
✅ Windows SE
✅ IoT Enterprise / IoT Enterprise LTSC | ✅ [10.0.20348.2227] and later
✅ [10.0.25398.643] and later
✅ [10.0.25965] and later
✅ Windows 10, version 2004 [10.0.19041.3758] and later
✅ Windows 11, version 22H2 [10.0.22621.2792] and later | @@ -17418,7 +17418,7 @@ High Safety enables applets to run in their sandbox. Disable Java to prevent any | Scope | Editions | Applicable OS | |:--|:--|:--| -| ✅ Device
✅ User | ✅ Pro
✅ Enterprise
✅ Education
✅ Windows SE
✅ IoT Enterprise / IoT Enterprise LTSC | ✅ [10.0.20348.2227] and later
✅ Windows 10, version 2004 [10.0.19041.3758] and later
✅ Windows 11, version 22H2 [10.0.22621.2792] and later
✅ Windows Insider Preview [10.0.25398.643] | +| ✅ Device
✅ User | ✅ Pro
✅ Enterprise
✅ Education
✅ Windows SE
✅ IoT Enterprise / IoT Enterprise LTSC | ✅ [10.0.20348.2227] and later
✅ [10.0.25398.643] and later
✅ [10.0.25965] and later
✅ Windows 10, version 2004 [10.0.19041.3758] and later
✅ Windows 11, version 22H2 [10.0.22621.2792] and later | diff --git a/windows/client-management/mdm/policy-csp-privacy.md b/windows/client-management/mdm/policy-csp-privacy.md index 5094419e31..4713b9e21b 100644 --- a/windows/client-management/mdm/policy-csp-privacy.md +++ b/windows/client-management/mdm/policy-csp-privacy.md @@ -1,7 +1,7 @@ --- title: Privacy Policy CSP description: Learn more about the Privacy Area in Policy CSP. -ms.date: 01/18/2024 +ms.date: 06/21/2024 --- @@ -9,8 +9,6 @@ ms.date: 01/18/2024 # Policy CSP - Privacy -[!INCLUDE [Windows Insider tip](includes/mdm-insider-csp-note.md)] - @@ -2929,7 +2927,7 @@ If an app is open when this Group Policy object is applied on a device, employee | Scope | Editions | Applicable OS | |:--|:--|:--| -| ✅ Device
❌ User | ✅ Pro
✅ Enterprise
✅ Education
✅ Windows SE
✅ IoT Enterprise / IoT Enterprise LTSC | ✅ Windows Insider Preview [10.0.25000] | +| ✅ Device
❌ User | ✅ Pro
✅ Enterprise
✅ Education
✅ Windows SE
✅ IoT Enterprise / IoT Enterprise LTSC | ✅ [10.0.25000] and later | @@ -3005,7 +3003,7 @@ If an app is open when this Group Policy object is applied on a device, employee | Scope | Editions | Applicable OS | |:--|:--|:--| -| ✅ Device
❌ User | ✅ Pro
✅ Enterprise
✅ Education
✅ Windows SE
✅ IoT Enterprise / IoT Enterprise LTSC | ✅ Windows Insider Preview [10.0.25000] | +| ✅ Device
❌ User | ✅ Pro
✅ Enterprise
✅ Education
✅ Windows SE
✅ IoT Enterprise / IoT Enterprise LTSC | ✅ [10.0.25000] and later | @@ -3070,7 +3068,7 @@ If an app is open when this Group Policy object is applied on a device, employee | Scope | Editions | Applicable OS | |:--|:--|:--| -| ✅ Device
❌ User | ✅ Pro
✅ Enterprise
✅ Education
✅ Windows SE
✅ IoT Enterprise / IoT Enterprise LTSC | ✅ Windows Insider Preview [10.0.25000] | +| ✅ Device
❌ User | ✅ Pro
✅ Enterprise
✅ Education
✅ Windows SE
✅ IoT Enterprise / IoT Enterprise LTSC | ✅ [10.0.25000] and later | @@ -3135,7 +3133,7 @@ If an app is open when this Group Policy object is applied on a device, employee | Scope | Editions | Applicable OS | |:--|:--|:--| -| ✅ Device
❌ User | ✅ Pro
✅ Enterprise
✅ Education
✅ Windows SE
✅ IoT Enterprise / IoT Enterprise LTSC | ✅ Windows Insider Preview [10.0.25000] | +| ✅ Device
❌ User | ✅ Pro
✅ Enterprise
✅ Education
✅ Windows SE
✅ IoT Enterprise / IoT Enterprise LTSC | ✅ [10.0.25000] and later | diff --git a/windows/client-management/mdm/policy-csp-remotedesktopservices.md b/windows/client-management/mdm/policy-csp-remotedesktopservices.md index bb9986b0c4..6a06309613 100644 --- a/windows/client-management/mdm/policy-csp-remotedesktopservices.md +++ b/windows/client-management/mdm/policy-csp-remotedesktopservices.md @@ -1,7 +1,7 @@ --- title: RemoteDesktopServices Policy CSP description: Learn more about the RemoteDesktopServices Area in Policy CSP. -ms.date: 06/19/2024 +ms.date: 06/21/2024 --- @@ -439,7 +439,7 @@ By default, Remote Desktop allows redirection of WebAuthn requests. | Scope | Editions | Applicable OS | |:--|:--|:--| -| ✅ Device
✅ User | ✅ Pro
✅ Enterprise
✅ Education
✅ Windows SE
✅ IoT Enterprise / IoT Enterprise LTSC | ✅ [10.0.20348.2400] and later
✅ Windows 11, version 21H2 [10.0.22000.2898] and later
✅ Windows 11, version 22H2 [10.0.22621.3374] and later
✅ Windows 11, version 23H2 [10.0.22631.3374] and later
✅ Windows Insider Preview | +| ✅ Device
✅ User | ✅ Pro
✅ Enterprise
✅ Education
✅ Windows SE
✅ IoT Enterprise / IoT Enterprise LTSC | ✅ [10.0.20348.2400] and later
✅ [10.0.25398.827] and later
✅ Windows 11, version 21H2 [10.0.22000.2898] and later
✅ Windows 11, version 22H2 [10.0.22621.3374] and later
✅ Windows 11, version 23H2 [10.0.22631.3374] and later
✅ Windows Insider Preview | @@ -493,7 +493,7 @@ By default, Remote Desktop allows redirection of WebAuthn requests. | Scope | Editions | Applicable OS | |:--|:--|:--| -| ✅ Device
✅ User | ✅ Pro
✅ Enterprise
✅ Education
✅ Windows SE
✅ IoT Enterprise / IoT Enterprise LTSC | ✅ [10.0.20348.2400] and later
✅ Windows 11, version 21H2 [10.0.22000.2898] and later
✅ Windows 11, version 22H2 [10.0.22621.3374] and later
✅ Windows 11, version 23H2 [10.0.22631.3374] and later
✅ Windows Insider Preview | +| ✅ Device
✅ User | ✅ Pro
✅ Enterprise
✅ Education
✅ Windows SE
✅ IoT Enterprise / IoT Enterprise LTSC | ✅ [10.0.20348.2400] and later
✅ [10.0.25398.827] and later
✅ Windows 11, version 21H2 [10.0.22000.2898] and later
✅ Windows 11, version 22H2 [10.0.22621.3374] and later
✅ Windows 11, version 23H2 [10.0.22631.3374] and later
✅ Windows Insider Preview | From 6d00f714b067749e4d999274305036135ddc2fcc Mon Sep 17 00:00:00 2001 From: Cern McAtee Date: Fri, 21 Jun 2024 14:03:41 -0700 Subject: [PATCH 27/99] Update whats-new-microsoft-store-business-education.md --- .../whats-new-microsoft-store-business-education.md | 10 +++++++--- 1 file changed, 7 insertions(+), 3 deletions(-) diff --git a/store-for-business/whats-new-microsoft-store-business-education.md b/store-for-business/whats-new-microsoft-store-business-education.md index 964efc7788..6069bb6ad8 100644 --- a/store-for-business/whats-new-microsoft-store-business-education.md +++ b/store-for-business/whats-new-microsoft-store-business-education.md @@ -8,7 +8,7 @@ ms.author: cmcatee author: cmcatee-MSFT manager: scotv ms.topic: conceptual -ms.date: 01/11/2024 +ms.date: 06/21/2024 ms.reviewer: --- @@ -20,6 +20,12 @@ ms.reviewer: ## Latest updates for Store for Business and Education +**June 2024** + +The Microsoft Store for Business and Microsoft Store for Education portals will retire on August 15, 2024. For more information about this change, see [Update to Intune integration with the Microsoft Store on Windows](https://techcommunity.microsoft.com/t5/windows-it-pro-blog/update-to-intune-integration-with-the-microsoft-store-on-windows/ba-p/3585077) and [FAQ: Supporting Microsoft Store experiences on managed devices](https://techcommunity.microsoft.com/t5/windows-management/faq-supporting-microsoft-store-experiences-on-managed-devices/m-p/3585286). If you are using offline licensing, you can use the [WinGet Download command](/windows/package-manager/winget/download) to continue to access offline apps and license files. + +## Previous releases and updates + **January 2024** **Removal of private store capability from Microsoft Store for Business and Education** @@ -28,8 +34,6 @@ The private store tab and associated functionality was removed from the Microsof We recommend customers use the [Private app repository, Windows Package Manager, and Company Portal app](/windows/application-management/private-app-repository-mdm-company-portal-windows-11) to provide a private app repository within their organization. -## Previous releases and updates - [May 2023](release-history-microsoft-store-business-education.md#may-2023) - Tab removed from Microsoft Store apps on Windows 10 PCs. From d8728692327c72fc3db0ab5a96a8c55812e52d56 Mon Sep 17 00:00:00 2001 From: Cern McAtee Date: Fri, 21 Jun 2024 14:51:43 -0700 Subject: [PATCH 28/99] Update whats-new-microsoft-store-business-education.md --- .../whats-new-microsoft-store-business-education.md | 4 ---- 1 file changed, 4 deletions(-) diff --git a/store-for-business/whats-new-microsoft-store-business-education.md b/store-for-business/whats-new-microsoft-store-business-education.md index 6069bb6ad8..4af32aae83 100644 --- a/store-for-business/whats-new-microsoft-store-business-education.md +++ b/store-for-business/whats-new-microsoft-store-business-education.md @@ -14,10 +14,6 @@ ms.reviewer: # What's new in Microsoft Store for Business and Education -> [!IMPORTANT] -> -> - The retirement of Microsoft Store for Business and Microsoft Store for Education has been postponed. We will update this notice when a new retirement date is announced. You can continue to use the current capabilities of free apps until that time. For more information about this change, see [Update to Intune integration with the Microsoft Store on Windows](https://techcommunity.microsoft.com/t5/windows-it-pro-blog/update-to-endpoint-manager-integration-with-the-microsoft-store/ba-p/3585077) and [FAQ: Supporting Microsoft Store experiences on managed devices](https://techcommunity.microsoft.com/t5/windows-management/faq-supporting-microsoft-store-experiences-on-managed-devices/m-p/3585286). - ## Latest updates for Store for Business and Education **June 2024** From 2dbf84843f4a450ef63ce58c5d1d384c9b8a90ca Mon Sep 17 00:00:00 2001 From: Paolo Matarazzo <74918781+paolomatarazzo@users.noreply.github.com> Date: Sun, 23 Jun 2024 08:50:25 -0400 Subject: [PATCH 29/99] Updates --- windows/security/docfx.json | 5 +++++ .../deploy/hybrid-cert-trust-adfs.md | 16 ++-------------- .../deploy/hybrid-cert-trust-enroll.md | 2 +- .../deploy/hybrid-cert-trust-pki.md | 2 +- .../deploy/hybrid-cert-trust.md | 2 +- .../includes/certificate-template-auth.md | 2 +- .../certificate-template-enrollment-agent.md | 2 +- .../deploy/on-premises-cert-trust-adfs.md | 19 ++++--------------- .../deploy/on-premises-cert-trust-enroll.md | 2 +- .../deploy/on-premises-cert-trust.md | 4 +--- .../hello-for-business/deploy/toc.yml | 10 +++++----- 11 files changed, 23 insertions(+), 43 deletions(-) diff --git a/windows/security/docfx.json b/windows/security/docfx.json index 2e3135282a..af2b39bffc 100644 --- a/windows/security/docfx.json +++ b/windows/security/docfx.json @@ -167,6 +167,11 @@ "✅ Windows Server 2019", "✅ Windows Server 2016" ], + "identity-protection/hello-for-business/**/*.md": [ + "✅ Windows 11", + "✅ Windows 10", + "✅ Windows Server 2025 (preview)" + ], "identity-protection/smart-cards/**/*.md": [ "✅ Windows 11", "✅ Windows 10", diff --git a/windows/security/identity-protection/hello-for-business/deploy/hybrid-cert-trust-adfs.md b/windows/security/identity-protection/hello-for-business/deploy/hybrid-cert-trust-adfs.md index 94167d36b9..d17d8078a4 100644 --- a/windows/security/identity-protection/hello-for-business/deploy/hybrid-cert-trust-adfs.md +++ b/windows/security/identity-protection/hello-for-business/deploy/hybrid-cert-trust-adfs.md @@ -1,7 +1,7 @@ --- title: Configure Active Directory Federation Services in a hybrid certificate trust model description: Learn how to configure Active Directory Federation Services (AD FS) to support the Windows Hello for Business hybrid certificate trust model. -ms.date: 03/12/2024 +ms.date: 06/23/2024 ms.topic: tutorial --- @@ -52,19 +52,7 @@ Sign-in a domain controller or management workstation with _Domain Admin_ equiva 1. Restart the AD FS server > [!NOTE] -> For AD FS 2019 in a hybrid certificate trust model, a PRT issue exists. You may encounter this error in the AD FS Admin event logs: *Received invalid Oauth request. The client 'NAME' is forbidden to access the resource with scope 'ugs'*. To remediate this error: -> -> 1. Launch AD FS management console and browse to **Services > Scope Descriptions** -> 1. Right click **Scope Descriptions** and select **Add Scope Description** -> 1. Under name type `ugs` and select **Apply > OK** -> 1. Launch PowerShell as an administrator -> 1. Obtain the *ObjectIdentifier* of the application permission with the `ClientRoleIdentifier` parameter equal to `38aa3b87-a06d-4817-b275-7a316988d93b`: -> ```PowerShell -> (Get-AdfsApplicationPermission -ServerRoleIdentifiers 'http://schemas.microsoft.com/ws/2009/12/identityserver/selfscope' | ?{ $_.ClientRoleIdentifier -eq '38aa3b87-a06d-4817-b275-7a316988d93b' }).ObjectIdentifier -> ``` -> 1. Execute the command `Set-AdfsApplicationPermission -TargetIdentifier -AddScope 'ugs'`. -> 1. Restart the AD FS service -> 1. On the client: Restart the client. User should be prompted to provision Windows Hello for Business +> For AD FS 2019 and later in a certificate trust model, a known PRT issue exists. You may encounter this error in AD FS Admin event logs: Received invalid Oauth request. The client 'NAME' is forbidden to access the resource with scope 'ugs'. For more information about the isse and its resolution, see [Certificate trust provisioning with AD FS broken on windows server 2019](../hello-deployment-issues.md#certificate-trust-provisioning-with-ad-fs-broken-on-windows-server-2019). ## Section review and next steps diff --git a/windows/security/identity-protection/hello-for-business/deploy/hybrid-cert-trust-enroll.md b/windows/security/identity-protection/hello-for-business/deploy/hybrid-cert-trust-enroll.md index 2891e83911..50ff10820c 100644 --- a/windows/security/identity-protection/hello-for-business/deploy/hybrid-cert-trust-enroll.md +++ b/windows/security/identity-protection/hello-for-business/deploy/hybrid-cert-trust-enroll.md @@ -1,7 +1,7 @@ --- title: Configure and enroll in Windows Hello for Business in hybrid certificate trust model description: Learn how to configure devices and enroll them in Windows Hello for Business in a hybrid certificate trust scenario. -ms.date: 03/12/2024 +ms.date: 06/23/2024 ms.topic: tutorial --- diff --git a/windows/security/identity-protection/hello-for-business/deploy/hybrid-cert-trust-pki.md b/windows/security/identity-protection/hello-for-business/deploy/hybrid-cert-trust-pki.md index 35d1ff0083..64fe6ba400 100644 --- a/windows/security/identity-protection/hello-for-business/deploy/hybrid-cert-trust-pki.md +++ b/windows/security/identity-protection/hello-for-business/deploy/hybrid-cert-trust-pki.md @@ -1,7 +1,7 @@ --- title: Configure and validate the PKI in an hybrid certificate trust model description: Configure and validate the Public Key Infrastructure when deploying Windows Hello for Business in a hybrid certificate trust model. -ms.date: 03/12/2024 +ms.date: 06/23/2024 ms.topic: tutorial --- diff --git a/windows/security/identity-protection/hello-for-business/deploy/hybrid-cert-trust.md b/windows/security/identity-protection/hello-for-business/deploy/hybrid-cert-trust.md index 58e8cc3e3d..bbb9a72759 100644 --- a/windows/security/identity-protection/hello-for-business/deploy/hybrid-cert-trust.md +++ b/windows/security/identity-protection/hello-for-business/deploy/hybrid-cert-trust.md @@ -1,7 +1,7 @@ --- title: Windows Hello for Business hybrid certificate trust deployment guide description: Learn how to deploy Windows Hello for Business in a hybrid certificate trust scenario. -ms.date: 03/12/2024 +ms.date: 06/23/2024 ms.topic: tutorial --- diff --git a/windows/security/identity-protection/hello-for-business/deploy/includes/certificate-template-auth.md b/windows/security/identity-protection/hello-for-business/deploy/includes/certificate-template-auth.md index aab8d0e4c9..4adf8b030a 100644 --- a/windows/security/identity-protection/hello-for-business/deploy/includes/certificate-template-auth.md +++ b/windows/security/identity-protection/hello-for-business/deploy/includes/certificate-template-auth.md @@ -61,4 +61,4 @@ CertUtil: -dsTemplate command completed successfully." ``` >[!NOTE] ->If you gave your Windows Hello for Business Authentication certificate template a different name, then replace `WHFBAuthentication` in the above command with the name of your certificate template. It's important that you use the template name rather than the template display name. You can view the template name on the **General** tab of the certificate template using the Certificate Template management console (certtmpl.msc). Or, you can view the template name using the `Get-CATemplate` ADCS Administration Windows PowerShell cmdlet on your certification authority. +>If you gave your Windows Hello for Business Authentication certificate template a different name, then replace `WHFBAuthentication` in the above command with the name of your certificate template. It's important that you use the template name rather than the template display name. You can view the template name on the **General** tab of the certificate template using the Certificate Template management console (certtmpl.msc). diff --git a/windows/security/identity-protection/hello-for-business/deploy/includes/certificate-template-enrollment-agent.md b/windows/security/identity-protection/hello-for-business/deploy/includes/certificate-template-enrollment-agent.md index b43c9f754a..0290c9b645 100644 --- a/windows/security/identity-protection/hello-for-business/deploy/includes/certificate-template-enrollment-agent.md +++ b/windows/security/identity-protection/hello-for-business/deploy/includes/certificate-template-enrollment-agent.md @@ -3,7 +3,7 @@ ms.date: 01/03/2024 ms.topic: include --- -### Configure an enrollment agent certificate template +## Configure an enrollment agent certificate template A certificate registration authority (CRA) is a trusted authority that validates certificate request. Once it validates the request, it presents the request to the certification authority (CA) for issuance. The CA issues the certificate, returns it to the CRA, which returns the certificate to the requesting user. Windows Hello for Business certificate trust deployments use AD FS as the CRA. diff --git a/windows/security/identity-protection/hello-for-business/deploy/on-premises-cert-trust-adfs.md b/windows/security/identity-protection/hello-for-business/deploy/on-premises-cert-trust-adfs.md index dc000be03a..766ebc53d4 100644 --- a/windows/security/identity-protection/hello-for-business/deploy/on-premises-cert-trust-adfs.md +++ b/windows/security/identity-protection/hello-for-business/deploy/on-premises-cert-trust-adfs.md @@ -1,7 +1,7 @@ --- title: Configure Active Directory Federation Services in an on-premises certificate trust model description: Learn how to configure Active Directory Federation Services (AD FS) to support the Windows Hello for Business on-premises certificate trust model. -ms.date: 03/12/2024 +ms.date: 06/23/2024 ms.topic: tutorial --- @@ -16,20 +16,7 @@ Windows Hello for Business works exclusively with the Active Directory Federatio [!INCLUDE [adfs-deploy](includes/adfs-deploy.md)] > [!NOTE] -> For AD FS 2019 and later in a certificate trust model, a known PRT issue exists. You may encounter this error in AD FS Admin event logs: Received invalid Oauth request. The client 'NAME' is forbidden to access the resource with scope 'ugs'. To remediate this error: -> -> 1. Launch AD FS management console. Browse to ***Services > Scope Descriptions** -> 1. Right-click **Scope Descriptions** and select **Add Scope Description** -> 1. Under name type *ugs* and select **Apply > OK** -> 1. Launch PowerShell as an administrator and execute the following commands: -> -> ```PowerShell -> $id = (Get-AdfsApplicationPermission -ServerRoleIdentifiers 'http://schemas.microsoft.com/ws/2009/12/identityserver/selfscope' | ?{ $_.ClientRoleIdentifier -eq '38aa3b87-a06d-4817-b275-7a316988d93b' }).ObjectIdentifier -> Set-AdfsApplicationPermission -TargetIdentifier $id -AddScope 'ugs' -> ``` -> -> 1. Restart the AD FS service -> 1. Restart the client. User should be prompted to provision Windows Hello for Business +> For AD FS 2019 and later in a certificate trust model, a known PRT issue exists. You may encounter this error in AD FS Admin event logs: Received invalid Oauth request. The client 'NAME' is forbidden to access the resource with scope 'ugs'. For more information about the isse and its resolution, see [Certificate trust provisioning with AD FS broken on windows server 2019](../hello-deployment-issues.md#certificate-trust-provisioning-with-ad-fs-broken-on-windows-server-2019). ## Review to validate the AD FS and Active Directory configuration @@ -40,6 +27,8 @@ Windows Hello for Business works exclusively with the Active Directory Federatio > - Confirm you added the AD FS service account to the KeyAdmins group > - Confirm you enabled the Device Registration service +[!INCLUDE [enrollment-agent-certificate-template](includes/certificate-template-enrollment-agent.md)] + ## Configure the certificate registration authority The Windows Hello for Business on-premises certificate-based deployment uses AD FS as the certificate registration authority (CRA). The registration authority is responsible for issuing certificates to users and devices. The registration authority is also responsible for revoking certificates when users or devices are removed from the environment. diff --git a/windows/security/identity-protection/hello-for-business/deploy/on-premises-cert-trust-enroll.md b/windows/security/identity-protection/hello-for-business/deploy/on-premises-cert-trust-enroll.md index f856919e78..2c9e551150 100644 --- a/windows/security/identity-protection/hello-for-business/deploy/on-premises-cert-trust-enroll.md +++ b/windows/security/identity-protection/hello-for-business/deploy/on-premises-cert-trust-enroll.md @@ -1,5 +1,5 @@ --- -ms.date: 03/12/2024 +ms.date: 06/23/2024 ms.topic: tutorial title: Configure Windows Hello for Business Policy settings in an on-premises certificate trust description: Configure Windows Hello for Business Policy settings for Windows Hello for Business in an on-premises certificate trust scenario diff --git a/windows/security/identity-protection/hello-for-business/deploy/on-premises-cert-trust.md b/windows/security/identity-protection/hello-for-business/deploy/on-premises-cert-trust.md index 92ee0befff..69b6ebb9fd 100644 --- a/windows/security/identity-protection/hello-for-business/deploy/on-premises-cert-trust.md +++ b/windows/security/identity-protection/hello-for-business/deploy/on-premises-cert-trust.md @@ -1,7 +1,7 @@ --- title: Windows Hello for Business on-premises certificate trust deployment guide description: Learn how to deploy Windows Hello for Business in an on-premises, certificate trust scenario. -ms.date: 03/12/2024 +ms.date: 06/23/2024 ms.topic: tutorial --- @@ -48,8 +48,6 @@ Windows Hello for Business must have a Public Key Infrastructure (PKI) when usin [!INCLUDE [web-server-certificate-template](includes/certificate-template-web-server.md)] -[!INCLUDE [enrollment-agent-certificate-template](includes/certificate-template-enrollment-agent.md)] - [!INCLUDE [auth-certificate-template](includes/certificate-template-auth.md)] [!INCLUDE [unpublish-superseded-templates](includes/unpublish-superseded-templates.md)] diff --git a/windows/security/identity-protection/hello-for-business/deploy/toc.yml b/windows/security/identity-protection/hello-for-business/deploy/toc.yml index 55964be416..9ae8643cf0 100644 --- a/windows/security/identity-protection/hello-for-business/deploy/toc.yml +++ b/windows/security/identity-protection/hello-for-business/deploy/toc.yml @@ -8,7 +8,7 @@ items: - name: Cloud Kerberos trust deployment href: hybrid-cloud-kerberos-trust.md - name: Key trust deployment - items: + items: - name: Requirements and validation href: hybrid-key-trust.md displayName: key trust @@ -19,7 +19,7 @@ items: href: ../hello-hybrid-aadj-sso.md displayName: key trust - name: Certificate trust deployment - items: + items: - name: Requirements and validation href: hybrid-cert-trust.md displayName: certificate trust @@ -41,7 +41,7 @@ items: - name: On-premises deployments items: - name: Key trust deployment - items: + items: - name: Requirements and validation href: on-premises-key-trust.md - name: Prepare and deploy Active Directory Federation Services (AD FS) @@ -49,10 +49,10 @@ items: - name: Configure and enroll in Windows Hello for Business href: on-premises-key-trust-enroll.md - name: Certificate trust deployment - items: + items: - name: Requirements and validation href: on-premises-cert-trust.md - - name: Prepare and Deploy Active Directory Federation Services (AD FS) + - name: Prepare and deploy Active Directory Federation Services (AD FS) href: on-premises-cert-trust-adfs.md - name: Configure and enroll in Windows Hello for Business href: on-premises-cert-trust-enroll.md From db7d53094ee86abc9092a0a065dab3ef4ba9f83b Mon Sep 17 00:00:00 2001 From: Paolo Matarazzo <74918781+paolomatarazzo@users.noreply.github.com> Date: Sun, 23 Jun 2024 16:23:49 -0400 Subject: [PATCH 30/99] updates --- .../hello-for-business/deploy/includes/adfs-mfa.md | 4 +++- .../hello-for-business/deploy/on-premises-cert-trust-adfs.md | 1 + .../hello-for-business/deploy/on-premises-cert-trust.md | 2 -- 3 files changed, 4 insertions(+), 3 deletions(-) diff --git a/windows/security/identity-protection/hello-for-business/deploy/includes/adfs-mfa.md b/windows/security/identity-protection/hello-for-business/deploy/includes/adfs-mfa.md index a684145a1d..6adbe43c94 100644 --- a/windows/security/identity-protection/hello-for-business/deploy/includes/adfs-mfa.md +++ b/windows/security/identity-protection/hello-for-business/deploy/includes/adfs-mfa.md @@ -1,5 +1,5 @@ --- -ms.date: 01/03/2024 +ms.date: 06/23/2024 ms.topic: include --- @@ -8,6 +8,8 @@ ms.topic: include Windows Hello for Business requires users perform multifactor authentication (MFA) prior to enroll in the service. On-premises deployments can use, as MFA option: - certificates + > [!NOTE] + > When using this option, the certificates must be deployed to the users. For example, users can use their smart card or virtual smart card as a certificate authentication option. - non-Microsoft authentication providers for AD FS - custom authentication provider for AD FS diff --git a/windows/security/identity-protection/hello-for-business/deploy/on-premises-cert-trust-adfs.md b/windows/security/identity-protection/hello-for-business/deploy/on-premises-cert-trust-adfs.md index 766ebc53d4..8ae0f88a26 100644 --- a/windows/security/identity-protection/hello-for-business/deploy/on-premises-cert-trust-adfs.md +++ b/windows/security/identity-protection/hello-for-business/deploy/on-premises-cert-trust-adfs.md @@ -76,6 +76,7 @@ For detailed information about the certificate, use `Certutil -q -v [!div class="checklist"] > Before you continue with the deployment, validate your deployment progress by reviewing the following items: > +> - Configure an enrollment agent certificate template > - Confirm only the AD FS service account has the allow enroll permission for the enrollment agent certificate template > - Consider using an HSM to protect the enrollment agent certificate; however, understand the frequency and quantity of signature operations the enrollment agent server makes and understand the impact it has on overall performance > - Confirm you properly configured the Windows Hello for Business authentication certificate template diff --git a/windows/security/identity-protection/hello-for-business/deploy/on-premises-cert-trust.md b/windows/security/identity-protection/hello-for-business/deploy/on-premises-cert-trust.md index 69b6ebb9fd..20ea17f9cc 100644 --- a/windows/security/identity-protection/hello-for-business/deploy/on-premises-cert-trust.md +++ b/windows/security/identity-protection/hello-for-business/deploy/on-premises-cert-trust.md @@ -7,7 +7,6 @@ ms.topic: tutorial # On-premises certificate trust deployment guide - [!INCLUDE [apply-to-on-premises-cert-trust](includes/apply-to-on-premises-cert-trust.md)] [!INCLUDE [requirements](includes/requirements.md)] @@ -83,7 +82,6 @@ Sign in to the CA or management workstations with **Enterprise Admin** equivalen > - Configure domain controller and web server certificate templates > - Supersede existing domain controller certificates > - Unpublish superseded certificate templates -> - Configure an enrollment agent certificate template > - Publish the certificate templates to the CA > - Deploy certificates to the domain controllers > - Validate the domain controllers configuration From 19459e417da4ca89567d0883c5d318870fbca90b Mon Sep 17 00:00:00 2001 From: Paolo Matarazzo <74918781+paolomatarazzo@users.noreply.github.com> Date: Mon, 24 Jun 2024 12:28:25 -0400 Subject: [PATCH 31/99] updates --- windows/security/docfx.json | 5 ----- .../deploy/on-premises-cert-trust-enroll.md | 2 ++ 2 files changed, 2 insertions(+), 5 deletions(-) diff --git a/windows/security/docfx.json b/windows/security/docfx.json index af2b39bffc..2e3135282a 100644 --- a/windows/security/docfx.json +++ b/windows/security/docfx.json @@ -167,11 +167,6 @@ "✅ Windows Server 2019", "✅ Windows Server 2016" ], - "identity-protection/hello-for-business/**/*.md": [ - "✅ Windows 11", - "✅ Windows 10", - "✅ Windows Server 2025 (preview)" - ], "identity-protection/smart-cards/**/*.md": [ "✅ Windows 11", "✅ Windows 10", diff --git a/windows/security/identity-protection/hello-for-business/deploy/on-premises-cert-trust-enroll.md b/windows/security/identity-protection/hello-for-business/deploy/on-premises-cert-trust-enroll.md index 2c9e551150..63391d32fc 100644 --- a/windows/security/identity-protection/hello-for-business/deploy/on-premises-cert-trust-enroll.md +++ b/windows/security/identity-protection/hello-for-business/deploy/on-premises-cert-trust-enroll.md @@ -75,6 +75,8 @@ The AD FS registration authority verifies the key used in the certificate reques The CA validates that the certificate is signed by the registration authority. On successful validation, it issues a certificate based on the request and returns the certificate to the AD FS registration authority. The registration authority returns the certificate to Windows where it then installs the certificate in the current user's certificate store. Once this process completes, the Windows Hello for Business provisioning workflow informs the user that they can use their PIN to sign-in through the Action Center. +> [!VIDEO 387edee6-45a2-421d-9ea7-0f5aa0f02289] + ### Sequence diagram To better understand the provisioning flows, review the following sequence diagram: From 1e0469f8454923e0f18415a1c8d870c13a103026 Mon Sep 17 00:00:00 2001 From: Paolo Matarazzo <74918781+paolomatarazzo@users.noreply.github.com> Date: Mon, 24 Jun 2024 12:55:20 -0400 Subject: [PATCH 32/99] updates --- .../hello-for-business/deploy/on-premises-cert-trust-enroll.md | 2 ++ 1 file changed, 2 insertions(+) diff --git a/windows/security/identity-protection/hello-for-business/deploy/on-premises-cert-trust-enroll.md b/windows/security/identity-protection/hello-for-business/deploy/on-premises-cert-trust-enroll.md index 63391d32fc..f6cd340522 100644 --- a/windows/security/identity-protection/hello-for-business/deploy/on-premises-cert-trust-enroll.md +++ b/windows/security/identity-protection/hello-for-business/deploy/on-premises-cert-trust-enroll.md @@ -77,6 +77,8 @@ The CA validates that the certificate is signed by the registration authority. O > [!VIDEO 387edee6-45a2-421d-9ea7-0f5aa0f02289] +> [!VIDEO https://learn-video.azurefd.net/vod/player?id=771165c0-e37f-4f9d-9e21-4f383cc6590d] + ### Sequence diagram To better understand the provisioning flows, review the following sequence diagram: From 5163bf104f3a349bbe3fdc3c2d1156324e6772a7 Mon Sep 17 00:00:00 2001 From: Paolo Matarazzo <74918781+paolomatarazzo@users.noreply.github.com> Date: Mon, 24 Jun 2024 14:34:52 -0400 Subject: [PATCH 33/99] updates --- .../hello-for-business/deploy/on-premises-cert-trust-enroll.md | 2 -- 1 file changed, 2 deletions(-) diff --git a/windows/security/identity-protection/hello-for-business/deploy/on-premises-cert-trust-enroll.md b/windows/security/identity-protection/hello-for-business/deploy/on-premises-cert-trust-enroll.md index f6cd340522..4b378b308b 100644 --- a/windows/security/identity-protection/hello-for-business/deploy/on-premises-cert-trust-enroll.md +++ b/windows/security/identity-protection/hello-for-business/deploy/on-premises-cert-trust-enroll.md @@ -75,8 +75,6 @@ The AD FS registration authority verifies the key used in the certificate reques The CA validates that the certificate is signed by the registration authority. On successful validation, it issues a certificate based on the request and returns the certificate to the AD FS registration authority. The registration authority returns the certificate to Windows where it then installs the certificate in the current user's certificate store. Once this process completes, the Windows Hello for Business provisioning workflow informs the user that they can use their PIN to sign-in through the Action Center. -> [!VIDEO 387edee6-45a2-421d-9ea7-0f5aa0f02289] - > [!VIDEO https://learn-video.azurefd.net/vod/player?id=771165c0-e37f-4f9d-9e21-4f383cc6590d] ### Sequence diagram From f10e79fdb1c007176833c2e98ae56b633cb573ff Mon Sep 17 00:00:00 2001 From: Paolo Matarazzo <74918781+paolomatarazzo@users.noreply.github.com> Date: Mon, 24 Jun 2024 15:12:49 -0400 Subject: [PATCH 34/99] updates --- .../hello-for-business/deploy/on-premises-cert-trust-enroll.md | 2 +- .../hello-for-business/deploy/on-premises-key-trust-enroll.md | 2 ++ 2 files changed, 3 insertions(+), 1 deletion(-) diff --git a/windows/security/identity-protection/hello-for-business/deploy/on-premises-cert-trust-enroll.md b/windows/security/identity-protection/hello-for-business/deploy/on-premises-cert-trust-enroll.md index 4b378b308b..d46c68519a 100644 --- a/windows/security/identity-protection/hello-for-business/deploy/on-premises-cert-trust-enroll.md +++ b/windows/security/identity-protection/hello-for-business/deploy/on-premises-cert-trust-enroll.md @@ -73,7 +73,7 @@ After a successful key registration, Windows creates a certificate request using The AD FS registration authority verifies the key used in the certificate request matches the key that was previously registered. On a successful match, the AD FS registration authority signs the certificate request using its enrollment agent certificate and sends it to the certificate authority. -The CA validates that the certificate is signed by the registration authority. On successful validation, it issues a certificate based on the request and returns the certificate to the AD FS registration authority. The registration authority returns the certificate to Windows where it then installs the certificate in the current user's certificate store. Once this process completes, the Windows Hello for Business provisioning workflow informs the user that they can use their PIN to sign-in through the Action Center. +The CA validates that the certificate is signed by the registration authority. On successful validation, it issues a certificate based on the request and returns the certificate to the AD FS registration authority. The registration authority returns the certificate to Windows where it then installs the certificate in the current user's certificate store. > [!VIDEO https://learn-video.azurefd.net/vod/player?id=771165c0-e37f-4f9d-9e21-4f383cc6590d] diff --git a/windows/security/identity-protection/hello-for-business/deploy/on-premises-key-trust-enroll.md b/windows/security/identity-protection/hello-for-business/deploy/on-premises-key-trust-enroll.md index 34f55f78f3..5a3224a779 100644 --- a/windows/security/identity-protection/hello-for-business/deploy/on-premises-key-trust-enroll.md +++ b/windows/security/identity-protection/hello-for-business/deploy/on-premises-key-trust-enroll.md @@ -52,6 +52,8 @@ This information is also available using the `dsregcmd.exe /status` command from [!INCLUDE [user-experience](includes/user-experience.md)] +> [!VIDEO https://learn-video.azurefd.net/vod/player?id=771165c0-e37f-4f9d-9e21-4f383cc6590d] + ### Sequence diagram To better understand the provisioning flows, review the following sequence diagram: From 934cff5fd58697ee42bf9e7dcbe3588975ead611 Mon Sep 17 00:00:00 2001 From: Paolo Matarazzo <74918781+paolomatarazzo@users.noreply.github.com> Date: Mon, 24 Jun 2024 15:37:47 -0400 Subject: [PATCH 35/99] updates --- .../deploy/on-premises-cert-trust-adfs.md | 13 +++++++++++++ .../deploy/on-premises-cert-trust.md | 2 +- .../deploy/on-premises-key-trust.md | 4 ++-- 3 files changed, 16 insertions(+), 3 deletions(-) diff --git a/windows/security/identity-protection/hello-for-business/deploy/on-premises-cert-trust-adfs.md b/windows/security/identity-protection/hello-for-business/deploy/on-premises-cert-trust-adfs.md index 8ae0f88a26..1d2b4c388f 100644 --- a/windows/security/identity-protection/hello-for-business/deploy/on-premises-cert-trust-adfs.md +++ b/windows/security/identity-protection/hello-for-business/deploy/on-premises-cert-trust-adfs.md @@ -29,6 +29,19 @@ Windows Hello for Business works exclusively with the Active Directory Federatio [!INCLUDE [enrollment-agent-certificate-template](includes/certificate-template-enrollment-agent.md)] +### Publish the certificate template to the CA + +Sign in to the CA or management workstations with **Enterprise Admin** equivalent credentials. + +1. Open the **Certification Authority** management console +1. Expand the parent node from the navigation pane +1. Select **Certificate Templates** in the navigation pane +1. Right-click the **Certificate Templates** node. Select **New > Certificate Template** to issue +1. In the **Enable Certificates Templates** window, select the *WHFB Enrollment Agent* template you created in the previous step. Select **OK** to publish the selected certificate templates to the certification authority +1. If you published the *Domain Controller Authentication (Kerberos)* certificate template, then unpublish the certificate templates you included in the superseded templates list + - To unpublish a certificate template, right-click the certificate template you want to unpublish and select **Delete**. Select **Yes** to confirm the operation +1. Close the console + ## Configure the certificate registration authority The Windows Hello for Business on-premises certificate-based deployment uses AD FS as the certificate registration authority (CRA). The registration authority is responsible for issuing certificates to users and devices. The registration authority is also responsible for revoking certificates when users or devices are removed from the environment. diff --git a/windows/security/identity-protection/hello-for-business/deploy/on-premises-cert-trust.md b/windows/security/identity-protection/hello-for-business/deploy/on-premises-cert-trust.md index 20ea17f9cc..0240088385 100644 --- a/windows/security/identity-protection/hello-for-business/deploy/on-premises-cert-trust.md +++ b/windows/security/identity-protection/hello-for-business/deploy/on-premises-cert-trust.md @@ -61,7 +61,7 @@ Sign in to the CA or management workstations with **Enterprise Admin** equivalen 1. Expand the parent node from the navigation pane 1. Select **Certificate Templates** in the navigation pane 1. Right-click the **Certificate Templates** node. Select **New > Certificate Template** to issue -1. In the **Enable Certificates Templates** window, select the *Domain Controller Authentication (Kerberos)*, *Internal Web Server*, *WHFB Enrollment Agent* and *WHFB Authentication* templates you created in the previous steps. Select **OK** to publish the selected certificate templates to the certification authority +1. In the **Enable Certificates Templates** window, select the *Domain Controller Authentication (Kerberos)*, *Internal Web Server*, and *WHFB Authentication* templates you created in the previous steps. Select **OK** to publish the selected certificate templates to the certification authority 1. If you published the *Domain Controller Authentication (Kerberos)* certificate template, then unpublish the certificate templates you included in the superseded templates list - To unpublish a certificate template, right-click the certificate template you want to unpublish and select **Delete**. Select **Yes** to confirm the operation 1. Close the console diff --git a/windows/security/identity-protection/hello-for-business/deploy/on-premises-key-trust.md b/windows/security/identity-protection/hello-for-business/deploy/on-premises-key-trust.md index 0b7ef9d9a3..347471eeef 100644 --- a/windows/security/identity-protection/hello-for-business/deploy/on-premises-key-trust.md +++ b/windows/security/identity-protection/hello-for-business/deploy/on-premises-key-trust.md @@ -1,7 +1,7 @@ --- title: Windows Hello for Business on-premises key trust deployment guide description: Learn how to deploy Windows Hello for Business in an on-premises, key trust scenario. -ms.date: 03/12/2024 +ms.date: 06/24/2024 ms.topic: tutorial --- @@ -57,7 +57,7 @@ Sign in to the CA or management workstations with **Enterprise Admin** equivalen 1. Expand the parent node from the navigation pane 1. Select **Certificate Templates** in the navigation pane 1. Right-click the **Certificate Templates** node. Select **New > Certificate Template** to issue -1. In the **Enable Certificates Templates** window, select the *Domain Controller Authentication (Kerberos)*, and *Internal Web Server* templates you created in the previous steps. Select **OK** to publish the selected certificate templates to the certification authority +1. In the **Enable Certificates Templates** window, select the *Domain Controller Authentication (Kerberos)* and *Internal Web Server* templates you created in the previous steps. Select **OK** to publish the selected certificate templates to the certification authority 1. If you published the *Domain Controller Authentication (Kerberos)* certificate template, then unpublish the certificate templates you included in the superseded templates list - To unpublish a certificate template, right-click the certificate template you want to unpublish and select **Delete**. Select **Yes** to confirm the operation 1. Close the console From 08b4aaf082cde6f9ef50fdd959801110570092d7 Mon Sep 17 00:00:00 2001 From: Paolo Matarazzo <74918781+paolomatarazzo@users.noreply.github.com> Date: Mon, 24 Jun 2024 15:58:09 -0400 Subject: [PATCH 36/99] updates --- .../deploy/includes/certificate-template-enrollment-agent.md | 4 ++-- .../hello-for-business/deploy/on-premises-cert-trust-adfs.md | 2 +- 2 files changed, 3 insertions(+), 3 deletions(-) diff --git a/windows/security/identity-protection/hello-for-business/deploy/includes/certificate-template-enrollment-agent.md b/windows/security/identity-protection/hello-for-business/deploy/includes/certificate-template-enrollment-agent.md index 0290c9b645..df1df5291f 100644 --- a/windows/security/identity-protection/hello-for-business/deploy/includes/certificate-template-enrollment-agent.md +++ b/windows/security/identity-protection/hello-for-business/deploy/includes/certificate-template-enrollment-agent.md @@ -12,7 +12,7 @@ The CRA enrolls for an *enrollment agent certificate*. Once the CRA verifies the > [!IMPORTANT] > Follow the procedures below based on the AD FS service account used in your environment. -#### Create an enrollment agent certificate for Group Managed Service Accounts (GMSA) +### Create an enrollment agent certificate for Group Managed Service Accounts (GMSA) Sign in to a CA or management workstations with *Domain Administrator* equivalent credentials. @@ -32,7 +32,7 @@ Sign in to a CA or management workstations with *Domain Administrator* equivalen 1. Select **OK** to finalize your changes and create the new template 1. Close the console -#### Create an enrollment agent certificate for a standard service account +### Create an enrollment agent certificate for a standard service account Sign in to a CA or management workstations with *Domain Administrator* equivalent credentials. diff --git a/windows/security/identity-protection/hello-for-business/deploy/on-premises-cert-trust-adfs.md b/windows/security/identity-protection/hello-for-business/deploy/on-premises-cert-trust-adfs.md index 1d2b4c388f..7446d01e92 100644 --- a/windows/security/identity-protection/hello-for-business/deploy/on-premises-cert-trust-adfs.md +++ b/windows/security/identity-protection/hello-for-business/deploy/on-premises-cert-trust-adfs.md @@ -57,7 +57,7 @@ Set-AdfsCertificateAuthority -EnrollmentAgent -EnrollmentAgentCertificateTemplat >[!NOTE] > If you gave your Windows Hello for Business Enrollment Agent and Windows Hello for Business Authentication certificate templates different names, then replace *WHFBEnrollmentAgent* and *WHFBAuthentication* in the above command with the name of your certificate templates. It's important that you use the template name rather than the template display name. You can view the template name on the **General** tab of the certificate template by using the **Certificate Template** management console (certtmpl.msc). Or, you can view the template name by using the `Get-CATemplate` PowerShell cmdlet on a CA. -### Enrollment agent certificate enrollment +### Enrollment agent certificate lifecycle management AD FS performs its own certificate lifecycle management. Once the registration authority is configured with the proper certificate template, the AD FS server attempts to enroll the certificate on the first certificate request or when the service first starts. From 0c85b22c56b11da1f3fb5ae9813804eef97ce0cf Mon Sep 17 00:00:00 2001 From: Paolo Matarazzo <74918781+paolomatarazzo@users.noreply.github.com> Date: Mon, 24 Jun 2024 16:32:53 -0400 Subject: [PATCH 37/99] video updates --- .../deploy/on-premises-cert-trust-enroll.md | 10 ++++++++-- .../deploy/on-premises-key-trust-enroll.md | 6 ++++-- 2 files changed, 12 insertions(+), 4 deletions(-) diff --git a/windows/security/identity-protection/hello-for-business/deploy/on-premises-cert-trust-enroll.md b/windows/security/identity-protection/hello-for-business/deploy/on-premises-cert-trust-enroll.md index d46c68519a..13e2c77a6e 100644 --- a/windows/security/identity-protection/hello-for-business/deploy/on-premises-cert-trust-enroll.md +++ b/windows/security/identity-protection/hello-for-business/deploy/on-premises-cert-trust-enroll.md @@ -1,5 +1,9 @@ --- -ms.date: 06/23/2024 + +The following video shows the Windows Hello for Business enrollment steps after signing in with a password, using a custom MFA adapter for AD FS. + +> [!VIDEO https://learn-video.azurefd.net/vod/player?id=771165c0-e37f-4f9d-9e21-4f383cc6590d alt-text="Video showing the Windows Hello for Business enrollment steps after signing in with a password."] + ms.topic: tutorial title: Configure Windows Hello for Business Policy settings in an on-premises certificate trust description: Configure Windows Hello for Business Policy settings for Windows Hello for Business in an on-premises certificate trust scenario @@ -75,7 +79,9 @@ The AD FS registration authority verifies the key used in the certificate reques The CA validates that the certificate is signed by the registration authority. On successful validation, it issues a certificate based on the request and returns the certificate to the AD FS registration authority. The registration authority returns the certificate to Windows where it then installs the certificate in the current user's certificate store. -> [!VIDEO https://learn-video.azurefd.net/vod/player?id=771165c0-e37f-4f9d-9e21-4f383cc6590d] +The following video shows the Windows Hello for Business enrollment steps after signing in with a password, using a custom MFA adapter for AD FS. + +> [!VIDEO https://learn-video.azurefd.net/vod/player?id=771165c0-e37f-4f9d-9e21-4f383cc6590d alt-text="Video showing the Windows Hello for Business enrollment steps after signing in with a password."] ### Sequence diagram diff --git a/windows/security/identity-protection/hello-for-business/deploy/on-premises-key-trust-enroll.md b/windows/security/identity-protection/hello-for-business/deploy/on-premises-key-trust-enroll.md index 5a3224a779..85c263917f 100644 --- a/windows/security/identity-protection/hello-for-business/deploy/on-premises-key-trust-enroll.md +++ b/windows/security/identity-protection/hello-for-business/deploy/on-premises-key-trust-enroll.md @@ -1,5 +1,5 @@ --- -ms.date: 03/12/2024 +ms.date: 06/23/2024 ms.topic: tutorial title: Configure Windows Hello for Business Policy settings in an on-premises key trust description: Configure Windows Hello for Business Policy settings for Windows Hello for Business in an on-premises key trust scenario @@ -52,7 +52,9 @@ This information is also available using the `dsregcmd.exe /status` command from [!INCLUDE [user-experience](includes/user-experience.md)] -> [!VIDEO https://learn-video.azurefd.net/vod/player?id=771165c0-e37f-4f9d-9e21-4f383cc6590d] +The following video shows the Windows Hello for Business enrollment steps after signing in with a password, using a custom MFA adapter for AD FS. + +> [!VIDEO https://learn-video.azurefd.net/vod/player?id=771165c0-e37f-4f9d-9e21-4f383cc6590d alt-text="Video showing the Windows Hello for Business enrollment steps after signing in with a password."] ### Sequence diagram From 6d0cd13b13e26939f67693380ca1ccdb05ba6539 Mon Sep 17 00:00:00 2001 From: Paolo Matarazzo <74918781+paolomatarazzo@users.noreply.github.com> Date: Mon, 24 Jun 2024 17:25:54 -0400 Subject: [PATCH 38/99] update --- .../deploy/on-premises-cert-trust-enroll.md | 6 +----- 1 file changed, 1 insertion(+), 5 deletions(-) diff --git a/windows/security/identity-protection/hello-for-business/deploy/on-premises-cert-trust-enroll.md b/windows/security/identity-protection/hello-for-business/deploy/on-premises-cert-trust-enroll.md index 13e2c77a6e..ce1d4a781d 100644 --- a/windows/security/identity-protection/hello-for-business/deploy/on-premises-cert-trust-enroll.md +++ b/windows/security/identity-protection/hello-for-business/deploy/on-premises-cert-trust-enroll.md @@ -1,9 +1,5 @@ --- - -The following video shows the Windows Hello for Business enrollment steps after signing in with a password, using a custom MFA adapter for AD FS. - -> [!VIDEO https://learn-video.azurefd.net/vod/player?id=771165c0-e37f-4f9d-9e21-4f383cc6590d alt-text="Video showing the Windows Hello for Business enrollment steps after signing in with a password."] - +ms.date: 06/23/2024 ms.topic: tutorial title: Configure Windows Hello for Business Policy settings in an on-premises certificate trust description: Configure Windows Hello for Business Policy settings for Windows Hello for Business in an on-premises certificate trust scenario From 2bceedce740e95ff7d46528282fafcb376465234 Mon Sep 17 00:00:00 2001 From: Nidhi Doshi <77081571+doshnid@users.noreply.github.com> Date: Mon, 24 Jun 2024 14:28:42 -0700 Subject: [PATCH 39/99] removed migration info mcc-isp.md removed migration info --- windows/deployment/do/mcc-isp.md | 22 ++++++++-------------- 1 file changed, 8 insertions(+), 14 deletions(-) diff --git a/windows/deployment/do/mcc-isp.md b/windows/deployment/do/mcc-isp.md index 87b1740400..ff0a665d2e 100644 --- a/windows/deployment/do/mcc-isp.md +++ b/windows/deployment/do/mcc-isp.md @@ -20,7 +20,7 @@ appliesto: # Microsoft Connected Cache for Internet Service Providers (early preview) > [!IMPORTANT] -> This document is for Microsoft Connected Cache (early preview). Microsoft Connected Cache for ISPs is now in Public Preview - for our early preview customers, we highly encourage you to migrate your cache nodes to our public preview. See [instructions on how to migrate](#migrating-your-mcc-to-public-preview) below. +> This document is for Microsoft Connected Cache (early preview). Microsoft Connected Cache for ISPs is now in Public Preview - for our early preview customers, we highly encourage you to onboard onto our Public Preview program. For instructions on signing up and onboarding please visit [Operator sign up and service onboarding for Microsoft Connected Cache](mcc-isp-signup.md). ## Overview @@ -441,6 +441,13 @@ If the test fails, for more information, see the [common issues](#common-issues) ## Common Issues +### Microsoft Connected Cache is no longer serving traffic +If you did not migrate your cache node then your cache node may still be on early preview version. +Microsoft Connected Cache for Internet Service Providers is now in Public Preview! To get started, visit [Azure portal](https://www.portal.azure.com) to sign up for Microsoft Connected Cache for Internet Service Providers. Please see [Operator sign up and service onboarding for Microsoft Connected Cache](mcc-isp-signup.md) for more information on the requirements for sign up and onboarding. +
+
+
+ > [!NOTE] > This section only lists common issues. For more information on additional issues you may encounter when configuring IoT Edge, see the [IoT Edge troubleshooting guide](/azure/iot-edge/troubleshoot). @@ -551,19 +558,6 @@ If you have an MCC that's already active and running, follow the steps below to 1. To finish configuring your MCC with BGP routing, continue from Step 10 of [Steps to Install MCC](#steps-to-install-mcc). --> -## Migrating your MCC to Public Preview - -> [!NOTE] -> Please note, if you reboot your server, the version that you are currently on will no longer function, after which you will be required to migrate to the new version. - -We recommend migrating now to the new version to access these benefits and ensure no downtime. - -To migrate, use the following steps: - -1. Navigate to the cache node that you would like to migrate and select **Download Migration Package** using the button at the top of the page. -1. Follow the instructions under the **Connected Cache Migrate Scripts** section within Azure portal. - :::image type="content" source="images/mcc-isp-migrate.png" alt-text="A screenshot of Azure portal showing the migration instructions for migrating a cache node from the early preview to the public preview." lightbox="images/mcc-isp-migrate.png"::: -1. Go to https://portal.azure.com and navigate to your resource to check your migrated cache nodes. ## Uninstalling MCC From 01b62375fdfc78b81492ad7208c3bdcef238ee06 Mon Sep 17 00:00:00 2001 From: Valentyna Filimonova Date: Mon, 24 Jun 2024 17:05:00 -0600 Subject: [PATCH 40/99] Update updatemanagedvsupdateunmanageddevices.md I've incorporated some straight-forward feedback we've received from Richard Lian (CAT), plus MS-Style headers, and some of our best practices for more readable sentences. --- .../updatemanagedvsupdateunmanageddevices.md | 36 ++++++++++--------- 1 file changed, 19 insertions(+), 17 deletions(-) diff --git a/windows/deployment/update/updatemanagedvsupdateunmanageddevices.md b/windows/deployment/update/updatemanagedvsupdateunmanageddevices.md index 9bc4dee63b..42bf6847bb 100644 --- a/windows/deployment/update/updatemanagedvsupdateunmanageddevices.md +++ b/windows/deployment/update/updatemanagedvsupdateunmanageddevices.md @@ -1,49 +1,51 @@ -# Managing Windows Updates: IT Managed vs. Unmanaged Devices +# Managing Windows updates: IT managed vs. unmanaged devices -For IT administrators, understanding the differences between managed and unmanaged devices is crucial for effective Windows update management. This article provides clarity on the terminology and practices involved in managing Windows updates for both types of devices. +As an IT administrator, understanding the differences between managed and unmanaged devices is crucial for effective Windows update management. This article provides clarity on the terminology and practices involved in managing Windows updates for both types of devices. -## What are Update-Managed Windows Devices? +## What are update-managed Windows devices? -Update-managed devices are those where an IT administrator or organization controls Windows updates through a management tool (such as Microsoft Intune) or by directly setting policies (for example, Group Policy (GPO), Configuration Service Provider (CSP) policy, or Graph). +Update-managed devices are those where an IT administrator or organization controls Windows updates through a management tool (such as Microsoft Intune) or by directly setting policies. This includes group policy (GPO), Configuration Service Provider (CSP) policy, or Microsoft Graph. -**Note:** This is true even if you directly set registry keys, although this is not recommended as registry keys can be easily overwritten. +> [!NOTE] +> This is true even if you directly set registry keys. However, we don't recommended doing this because registry keys can be easily overwritten. Managed devices can include desktops, laptops, tablets, servers, and manufacturing equipment. These devices are secured and configured according to your organization's standards and policies. -### IT-Managed: Windows Update Offering +### IT-managed: Windows update offering Devices are considered Windows update-managed if you manage the update offering in the following ways: -- Configuring policies to manage which updates are offered to the specific device. -- Setting when your organization should receive feature, quality, and driver updates, among others. -- Using Group Policy (GP), Cloud Solution Provider (CSP), or Graph to configure these offerings. +- You configure policies to manage which updates are offered to the specific device. +- You set when your organization should receive feature, quality, and driver updates, among others. +- You use [Group Policy (GPO)](https://learn.microsoft.com/windows/deployment/update/waas-wufb-group-policy), [Cloud Solution Provider (CSP)](https://learn.microsoft.com/windows/client-management/mdm/policy-csp-update#update-allowupdateservice), or [Microsoft Graph](https://learn.microsoft.com/windows/deployment/update/deployment-service-overview) to configure these offerings. -### IT-Managed: Windows Update Experience +### IT-managed: Windows update experience -Devices are considered Windows update-managed if you use policies (GP, CSP, or Graph) to manage device behavior when taking Windows updates. +Devices are considered Windows update-managed if you use policies (GP, CSP, or Microsoft Graph) to manage device behavior when taking Windows updates. Examples of controllable device behavior include active hours, update grace periods and deadlines, update notifications, update scheduling, and more. Consult the complete list at [Update Policy CSP - Windows Client Management](https://docs.microsoft.com/windows/client-management/mdm/policy-csp-update). -## Examples of Update-Managed Windows Devices +## Examples of update-managed Windows devices Here are a few examples of update-managed devices: - **Company-owned devices:** Devices provisioned by your IT department with corporate credentials, configurations, and policies. -- **Employee-owned devices in BYOD programs:** Personally owned devices enrolled in the company's device management system to securely access corporate resources. -- **Devices managed through Windows Autopilot:** Devices set up and preconfigured to be business-ready right out of the box. +- **Employee-owned devices in BYOD programs:** Personally owned devices that are enrolled in the company's device management system to securely access corporate resources. +- **Devices provisioned through Windows Autopilot:** Devices that are set up and preconfigured to be business-ready right out of the box. - **Mandated security settings:** Devices with health requirements such as device encryption, PIN or strong password, specific inactivity timeout periods, and up-to-date operating systems. - **Intune-enrolled devices:** Devices enrolled in Microsoft Intune for network access and enforced security policies. - **Third-party managed devices:** Devices enrolled in third-party management tools with configured Windows update policies via GPO, CSP, or registry key. -## What are Update-Unmanaged Windows Devices? +## What are update-unmanaged Windows devices? Unlike update-managed devices, unmanaged devices are not controlled through policies, management tools, or software. These devices aren't enrolled in tools like Microsoft Intune or Configuration Manager. If you only configure the Settings page to control overall device behavior when taking updates, it is considered an unmanaged device. -**Note:** The term "Microsoft managed devices" used to refer to what we now call "update unmanaged Windows devices." Based on feedback, we have updated our terminology for clarity. +> [!Note] +> The term "Microsoft managed devices" used to refer to what we now call "update unmanaged Windows devices." Based on feedback, we have updated our terminology for clarity. -## Examples of Update-Unmanaged Windows Devices +## Examples of update-unmanaged Windows devices Examples of update-unmanaged devices include: From e328c914d7a90c4e734bd7f097b80c0add073075 Mon Sep 17 00:00:00 2001 From: Aditi Srivastava <133841950+aditisrivastava07@users.noreply.github.com> Date: Tue, 25 Jun 2024 17:15:06 +0530 Subject: [PATCH 41/99] Pencil edit --- .../hello-for-business/deploy/hybrid-cert-trust-pki.md | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/windows/security/identity-protection/hello-for-business/deploy/hybrid-cert-trust-pki.md b/windows/security/identity-protection/hello-for-business/deploy/hybrid-cert-trust-pki.md index 64fe6ba400..ff9434bc73 100644 --- a/windows/security/identity-protection/hello-for-business/deploy/hybrid-cert-trust-pki.md +++ b/windows/security/identity-protection/hello-for-business/deploy/hybrid-cert-trust-pki.md @@ -1,5 +1,5 @@ --- -title: Configure and validate the PKI in an hybrid certificate trust model +title: Configure and validate the PKI in a hybrid certificate trust model description: Configure and validate the Public Key Infrastructure when deploying Windows Hello for Business in a hybrid certificate trust model. ms.date: 06/23/2024 ms.topic: tutorial From f28eeac168e39d13a6801e6c2b72704c9d2b59ec Mon Sep 17 00:00:00 2001 From: Paolo Matarazzo <74918781+paolomatarazzo@users.noreply.github.com> Date: Tue, 25 Jun 2024 12:23:06 -0400 Subject: [PATCH 42/99] [BitLocker] Recovery screen and MSA hint --- ...tlocker-recovery-screen-msa-backup-24h2.png | Bin 0 -> 105432 bytes .../bitlocker/preboot-recovery-screen.md | 10 ++++++++++ 2 files changed, 10 insertions(+) create mode 100644 windows/security/operating-system-security/data-protection/bitlocker/images/bitlocker-recovery-screen-msa-backup-24h2.png diff --git a/windows/security/operating-system-security/data-protection/bitlocker/images/bitlocker-recovery-screen-msa-backup-24h2.png b/windows/security/operating-system-security/data-protection/bitlocker/images/bitlocker-recovery-screen-msa-backup-24h2.png new file mode 100644 index 0000000000000000000000000000000000000000..415996c485eaff27b708dd28cde5e50c5442755e GIT binary patch literal 105432 zcmeFZcT`h(8wQAqA{KB!R760>f}((e5PAg1Mpb$*A|N#ssUZX_GZql(1PG{f2nd88 zf--`X5CuaZfkX@tAcW9DNl3Cc&V1kQ-+T7#IlJe(=Wx8a$-Vbi-ugW6>tDAmZtUN4 zbdQLL$o^Y5|F9Af5lave5v|$13%GLhqWv21k9f#U$8Zsmz0$(JZ6Z0jM}Ujl!mVx? zi=YOM%>o}peT~eGL_|I$@7?m;DY6X_bn6czo9J!xJoidhLY`Wz#o3#Es-M#?&Yk+C z`ZQO$8pg=V4vy@s8|mrSZd zS?J;1@Ryh9k<(H9F71k(4iIb05^lw_B;?N}5AYi?YSrcK`V0iYk$|)TCLla6P%;Vd zS?^lN8lM)zp2BWLVPk%(@v*6G%*s39%Ewe`U+OpLXx?`Be}139UY>%)7B0Hm`wIH3 zu`%;%@f!2CS9kn?@VSBqzP7w?f~$*r|M_jroz+J_;G3BOB7_fyFA*Qd>s}P$PX`IG zf+$z^zd!2eTA9jB-kSbP&`)&U|CWXg_Cy zzDk`2pa19SB3j966#}aup1UdscM`tjo>81&$elLX_|GIZb8UIIB7V;6aRrXvOe&UF zASJTnpL+u>Ol>=S;VV=@3EWv6{_l9Ts%^FjfHkkHs2kve|2vjo_=7d9LF?h2?oR)i zSToGgH6oHFV3z$mmXXN;&h#kT+?c61&#!Z1OIvPgC`E^yNB*cqeVQ6;}+4`o=2#cXxrjHXW?3Q zg*>7G@BP;s)eNU;*A}`w;KCI)SInN~qC=(E+^BnF*Ck3fa4ny1fORerR&mK&KgZ`P zFh8^c1i|Dmi-;dZlI6e(f4=s$%PU>16$j*lAR!3+2v$Z0*w?sQ07%M+?*WPON zruNnM|8qmgncqZ)WD_ae=uslMA>Y|@=l*}b@ZGcRV&2k(lG48sfOe|*e|_Z7+&#J% z0(R7C+q<-3NEk0?G?X4gXi%Yl9|}BtBT2qG2^RPE*XHYC1a9YBW4U#WjqZA?BTh_h zcwa3{cde&q?#nkz1`LX6bVqz^sG_eXEw#<%7`U_0F~yqHusL5H)G_xY=EzZ-4qx{* zcMiLV4{p?rUtZB1=WEL%*$yM^XiDSDZbweM140q}joS~-tt>&n=`%~V;OSb$#{%X1?SBwb*0j3>wJDJz2=#OVmy@F5CxX(vG}nTJTJZk|~axCHGICrCXRtBIo5hM-lt zUEcHZ<7RntpF6Sc>92n;{Gvh?*hK`e@TIVFCfQMtzBv7q!q?}#h_W}(ZZ2%Zi9slJ z^HA~M;Twz9bG)p-Pj!z3t_a0ub3`h~5Jp_jfDMmZVsw_;>)o;Uap8Vno3nW>w3ZiQ z3*^%9W)&lR8FQ+|=+pkh6rG zn-C>mqhL!#vbJksiz^0PSCOa#wzEPnIr#Zw@DGIHyuO+hx%JBQRDC93qbg$s!vhw=^+ zD!X>3Y|eYZwJ${??W`N3Sg)wAYnUgu%eL}PUARS{K88n(e*J2Iykp$p*_~<9QP2Hd zIjjymwChg5ECtc77qx-#ifaQ6Cq6}$jVXYN4}F`~NqU)ghwh@`krx$b2{pXthFCjV z&uZqcb#Klb*!U5Eb&afQpB}8XUtc#2&kyLF`?Tt(G^Qy>Py$j12ftxt)s z?%&=SFqtLMwi@qx2UHm(ZRmovks+oXzuUc&>YTGZhEw3{aP|#e_bY>8gMCFV5!J`B z%?_)0x~zS`>{_}!0ijSOCZ*=|H$4`7Jpaq+T3`$y3oO603p|m=D#g5N@6_d}N+KwUveO)#j*3L=Q!x|DyI*qtl z{=JT!)SHV#62G(H)65iRzL({JR50_vr6GtSCovgX`1J~~JcdQ5>)HG7kJbN3VwPk)JGT{8ZTN@hYtzh-zO|hkiL-yy?MoBfg!0zzY z>$__YNv#!O`W&)OKe31&t;|tDYMLW__ce5HT-{MlPb?#jw)<_SO^B0yb&6NQtHgc4KCQh#wO8RUG5$^Qd;kHL6}7B>vfn zSZm|i81(rH5UtZ(=pI6fe-o)IJf(kR&6k)I6fuM7m|X0HQ(C{Zx5b`+cuN_tWpx{! zy>HJmDdYFg!|cRwl8lC7n2`H}HS~dP+y`VYI9AoRm`r85hL};96P;0 zDs`_ud8kh5?>wcirXr;LHEr?{!Y*9-)>~I^-B(7|2a{vJdc9i}EW_q3tMXu$XkO(Z zc@#ZrVVPQ|$d&(Qn4D35s;7xpS!Ny)EB8EzyoZfANP_DXZR}^+^wJ zk|Kr=)T(%1*E^nlD(zUkrJVQNH=FO?E%Py*RQ)d@xFV{<8YU+BQhGA31D3z1|8ye*;rr(p5MrkpNSX{^AU|@8VYR@x=8x@pGm3`6LB1T3 z`zI~gPSp{*UIz#gvKoXnV^W)KM03R@Lz22oICtV9L4sTjd7A%Xf$DeOQVczM!M0<_ z;!fLd9C+3>+c6~<2v~GbLZI{w#WyGailY&afsHOQ`>Zo#8T_4ohMVHmE!GYKHPva| z|J2Nbw%c9GHcEf^BHu@+@H!NRyHj`%iqx{28pVLzYF{scP@{EioTxiP6$&~nZBg=4MTF_@QcI}_kft!Ya0|G`qPY4w0riUA}B|B)DhGE`&W#|B!es&F{az8 z+cA`XRjyEw7y~mRjvGlnJaran$2E|Px&CYUJeo(R&pxqL$ECd&zif3Y^V|c3Emm9t z*~G(_BlTD8B7RIsDqkm$0|u|E7yl#@7j!!9*rDNhh`D3S9c8>iTMWK-5%mPiT=cbq zVln#11H>BZ{MV^TD<#!@=kM*6&tkf+>g{&@-YGHkWPus)&P9@-s;nQZyzUE!tjf)WEbUi+ms(-fj*ZLYphyN&A&qSMlV*70$ zTf3_L-x-{i=?HXcc8nKB>Oi>IHwS33o7R-~Sk%yIjp}nTXPSTN^^xy8JY~0$w)K?W zu9Y`wB-Xn~X8XsbOh7(;m|n$~k(_PF@R7Zra(uG+5$LXuzxTI5m{-(;+MNoAfuP#1 zbFFZkRjt>@#k|H&xIMW9a_c$$+{WXxd~1g z&v6e?iIA@zcM`w**IHM;-=1X=y$-SVE}ZcUqsJ&K zRBHC2w*?-xpJ)*-FyV-pI1v$q2!Xvx+;8PL9yj8B()^>OaNuUwf#`g47bhs02b14^ zxcM9$rgrM^To}j=vJ5K>gx`Vr!{W^~5{5J|=hUEcG7Tw=c`* z@YAeIPz^wEV4_V3K@8b92Dka<+iAR1ArZ>tf>elW2U(!{Vnv0?3>G|Kl$dG;XfPM+ z@JbA#UiDyQ-4oT^8u`*4u`yhc*~q*cAodGGm3zF$LzfOjga)?ehsqXBuI2a@WM2c4 z8e4>TiTbO#w^x6>#1nEPqDdW)lgRVp=tJv{6~t+|nEg|)rhgQg?cn8Er+22h)FFr) zjwNRer8(fCDA*!~OD`ntA+qjQRp{UH))ek} z%~IC(oB>&zs`>zW!}E`%iQ9Umt|~)jF)cyzCBf#}=?9uzzhxeXepBY37{AanwapBg z<93KOG)(FOB(2B^5^!lMhU@u)Fy;e22G^Q+tibduxM4mH$K^vVaAOD0JqO(tR5wVW z4vPz%kLGnAk^@xNCp@&#`eQ=yLS=mpT~m`5jv}A=M>M&NlMqU&#b% zTJGNRWN3p(q;A($&kDgX?c*b%9o!{ZQaLg$%IFxld)s^Iz4eI_EA%GGYzOSx$(I+F z6M8i><1tI^Jtb!;yLniJGy93_>+N9E|4evy!fdY5iN7xsihXk;qidtC%+&5?D$k1= z5}t4$d{$--U9Pn(6LquM9T#}*NCZmxhppC(XChi+8`W>;+kg*}%%C$5++GD~mE1}` zd7}goiIumJXgP$g-Z>>c(uv$g$yP$zK=?gi_E)ltBJ9w#QLwhlB_Yp&SX{i9~dB3T2?Q*$peVB->_4k!s% zzGuwq!OB|aCz0sUCc~Je#T)01XPt+SpF-Fe|ELrnqjZ9waznq*l_OAi+u+_1MZP{ z6}2KJ$y@tQoUQPgfzl(WI&A8Y-Tyf%iyrg&HQjPX=t(F!quK`1^Dxuy+1184!CU{| zq}0t@8}8{<{%Lb7_nUWWQDR`W!hBu zeRb&jKJ{XdU-`J2*8sq2V8}@8ip>>r?)CWLf49p>QsEE1He^xlQK4##H~{F;b>l8Q zr=gtb>uaTD&kj#*^h^cpgES})JW*vvL~%ViTir_=$*S&a5!*L!JwohIgVp?A>Uhrs za2F3D(0NuS3_=1FH#x?s zo%JBQ+h%6nq|4tkGaz2e2R3>rmm0e9SAmrNJ43v2D))EaK&Uon;3W8t44E3A({=y5r*SO6IFS1T6?&DUDDYfeOmS5adA(R#O> zk1>v3F~6k~gv0IV`d!3lsP`2^RI-}CD%Llwc3}a&R;AgRl2=~4)^JGk>9SJ~zwx}N z^j$C-?=Yp|4*M}z)|vA%bAAYQ{W#{V_&eY^ zOm8aU@)i6@Gq=pWI-0ctZuc*~ltwe-j`=Ci7S3r25Zi(bI~|hSlvtRE=Mm*~lFW$r zC%4_zyDeX$FS@b{KccwNsJQy)la6)D#(3F4ndd{_PlT9~aR~nA>xfu{ z1nlK|jKUl}D9z`;^Qs-O($2Ep-f|}_HJ+TYL_mw{36Pez4*lQIK_IjU9XRTj~xfa`8ic zZ-ZOo%9uB}59)ru%1Gz0dTYI#<^n9ILvqe=0O>gtr}Ul#_k;V7+eofg4XhS-l2p0* z=tqfY$5Znr-VgLPOfP1JrZqs97FqV9QJ+!rSGi>r&AYx(ghm zKYb~vLnj!7jNb2obul>izyHvs%57t*G2GmewHBFpEbDl5@8 zcH>rw+e$1eM8!8#c|EVzeO_NO7ioji@0QysH8&%FoFsYPThp7knMOM|cdi;w)xEg; zR>GUt0mB}JqIQm^O$I7q#3Qcf3XKn1CoAB{N})O zzpBGJ|Lpbab1mxv#2I%cQ02W$JJvn zT)8_>Oy8$$LGd(k2#D>2KewyIKL7dZs~|vyn-$=x=i>gyzpnPu?u5~_uuenI?hoMH z(vm&nXF=n2ibVb@YtEl=hvA31@pQRn1d}=Nrdx|7I~Q{k9f9af?KU#H&!v zt8(YJzw`{dAf9AZ6djko<3|=?a1rT|iib@0zqz7B^VcL{80y8n^-T=IwCuZVjE4%o zF;GMDep=b<5}lITDi^4AS*sJ>Mq$oxS4V~BwNL{ldxA=w;AV#n$j`X$MG#A_{cHXi ztV#%Ftx(S+CVmASFM**-ZXu%)cZN9QjS!u>dbqs zX(HFSu0+OnZo82b?}Xt~6tyC1QoQ;?-J(BccoY8A=`xdd>9Q%#cddwIwO~xW{Ouua zAUqWvxDp8Broiso7ow&&wdP0aFvp;W2g*W$%%ZxXQg3`8apib|>@ROwpeN+iegCx4 z7HXdbEU$O2Usq_?L>_dH0uZt96SMH~v{~e@NF(?+fRxWYL1LKt?!PbmO@Z^TyAuHL z*`WayS`Ke*%hwQokz4l97tYoE;o52>lONK$FR-z*SyU5 zptnQ?Aj4$;L@3&tLAuwf2!LReN?_J+?UVyf8;M@%3aKO^-!sRcEJ?e6r+Z~4feIrz zixn6e!uAoN8~z}s8fI7>44r?~lBbn(?d8xh-$#=#p9*D8?WUpQFHx^NwC!SmKRF}3 zA~Co<@GY@;&_rZkpq;pu^oGImi>Qhl@Flm;CPWt5QLN{~I{C1T+A%(iaIG~m-yWPM zt>Z)c^%MtlVBF@$DR-=XYsf)0MMGUj(WAkCLxy?JGr=d0K-~f;_m-+lj`{|` z`c>f0e2hS8h}b;E@zL;Ctw?Ocog*9S~X_kU`9hCcxoq~ohHVsz^v{rkEIS90q6w;_{Ph3wz0}?%j$g)%+vxd=!}1Fx$67>8Y&t{XNWCF0 z{SN7z?Oy;beJMf@oh-=nLJlMA?)$xS1vE|o9Wl%x&X2TvPt(r9z8%v`UAq=)_@2F#+0z`80Nwg*j0q^`^b3%SAmip#VGV0kBDNE+d={1wQf zmJg*48LPs~^1tKBGjyA6fDE#p4*cIbrxofvP!tupG?< zc6OnoqYQ&>j2Ac)iP$O3CSSX5A?h0?IE5%=g3C{OZO^G+$-}Hm>hghD6&t&{ z8RZN3@p(3NKR412z6p?!1#?M^c54Qq)ovV_yrGlg*Tk;)OPkHHAkEddc~GM~A)%xFyS- z;;=WEnUeY?Z)5oBEWpGIY!qn)3>W7WUGp$};@$_h6ErzbPs-*U0#L((hh3hj|7R_I(ELw$| zU871n%S-#4g4>!g+U;{SEMD35OAulpbJ~)7T7St z!hCQ|ES4U^IUfX46`{aqiF4RGBy+KG70S)Yp!I!7^N4;UmLycv1e_%R>!-<$62~^! z)-n+D=FL3i$|v?^<=lzR>O9V<<P^*BA}IggVdf-t?ce{y0pQru9=EvcoM zQu!4zT+emAhwU{NL~3VVEK)=TRwNgWT3j<`JlP}e&Po4N^0?Bb>vXhQ;e9udUm6FXWWtL?IQI7o=T8KaPSH+r$^4gbYF;H( z$9zBiU4Kn4p@*J+#h@@cp0e+V^t8p%@?!b7t}t!Z(&1TRxo*I@4VGf}JHl+cUi8d; z`S>&XCNuiV^$4v~d4ITu!o9!;Chq-0U z37!;oqV`S|zV__S=3@ofjSS+cvkHgbt|@wq=!Bn+99{RZT{uO|mQroNkI%z(l$N8E zV@jH@zlWJ@kiiRh`!=6pk*5Bc*Z2i7hEfJI3czI}d=1+1N4YV6>-x99>6e^IiSO0M z{9?P4b%@I$CZpJ5_2ESMzISA51@|~NYvn=ybH86^G+ev&QN)|)J$K+z`ukHo&J3+e z?3G^NBS4vMAjne(xGs^4gazC`?E?Oj`&Ln8-za@-49_LT?irAJy?@VRsp2s~zcU-I zbWgUP6{Y$V%2V!5FAU5!*5z2&5Ae-yQIL@ehxljqnaC+k-t5pkyRR2&edlnQD8w|u ziF9fkz5xHH&83D$*GHw19fN5sD(`zWLtsJHB+~$*nm{|{6?Xe+Xt;BX`&wah-nC=! zlm>-}V-cU1!K*vQo!h}%;de=|ALQ1XyXLjA#|n+6)t1(&sL~QpI+MN!&a3Qde>?Bj$(K8-`O-71(_J0XLOc0@0vYryKes#cWA* zZs#ZJv{r9~AIVU-v?5wc+b%Mu>6q8P-;p-fuhf-8l&u%KfC?IS-0vW=bkqBCh)uzp zAbI`o$nvO>{aa&W?u^@Kr1re@FR8y{{CXZ>UNXg|#E+SN(Ng|?f7g-L;;i5X=0=a& z^@ckd`;Jca6p5@pvvW@?$E&B$UpBd&nc(Yiz&6eA*^mOR2Bl-MCRut>)xv&LUVek; zn2bGVG~QHD{v?u#EwBuP~G+A7x%MRpp0Yb$=@Kr^PRKaKQj&AL3MN_MF7?+J@P z?V$?OGU;*~)4hw7wn5#9@J%YjPykAIJ&Wy`TOI5=fA4gWzX8o_tVxAwIG}G`fNfgs z=+Qh0NcY2}$Rb$XcKG)XX#u=8$!ottA|Zzsk&2jl$KU5Xq$Smx)Eep@Z-_gZWZpUK zDc=U>^)^<@>)bRhAu73;hNmPQ<2~34$S7ZHZ;6P}OaD6m*-mr56n{kKP?CoKo(U^n zMx@!)`q>zBPP+tJ&gh1?Yh7OGiQpk1xXKvb%a8k+Q1UW65}MXLA$Qo@0%qKotWK{1l5;BC>(me;H2AqrmP>v!+^iTOC%9pPsyX1HcYixS6Xqv z+P?g0Xx8eDS)!-RWQAjues9xK+9k(gt^6}_7l`S1>dyDSHTz)L^Z0lw>Y>Z9LH_4c zwzIOy-{NNqUrwkOD~)zLDn8%-OC%%%fN1V|Ri@s+sT190BGHV%Z6V^ykuEh6ez@-w zVYGHZzRC``VW1O@poNc&QnOuIn0x9=Q(iP-FY2dzzxy<|+*~H5KsyjyLaeM44k zD!O?8s;UcV?Q)Rgqi$fjb3ZVqL%EHLd(M8e;TApybjG?Eo%cs^DvGGYd`f4+f}Xvn z8PA6HI*~hvSA&!v+HbE54Z1VHGva;S*GTTR+s?X%3K+999=oM5cy z?^-XJSgARlCKg+~KeVnmV&JdUp_O$P+vHa<=W|ysUV*zZ@JbSWD=neK1|l_&w+*ST zcST{JY`sNT_N%w@iy+12FIgk#aPk*s8gYPg`=D?|YGQ;4LJ~5!?NPYh>3&Q^|IyOa zvjhm@mUuw#YIjAD4brXY`{CJCAQrF8xi*W(TbO|&BUPW0yU*-ywhIpTzMrQ2LtQ>X zFS-o?o9D3P6U5(>uzrJD(P8IA1|AG%ziBRe@;=q(OY+JFljny-0+nSShIBI*m6;&_ z-my@VCQQ^7k+|4i7Qwl$Rd&v@+y*7NcQFa+z+?P8jzkTzwLN`@(JJW^vfNoj%%dNJ zk#)KFcm3pD&8m}8=3TURRY+IxJ>BJL?X2mRi;SyxgwyJnJ|Xh#lGJv2-X!u&EVJf7 zxXN}0;mr@$&~HPbAei=zQuSNMQ~BVk*Hc$6$c!<|SD&EE9w}(b#|#W1^|{0E5#}O{S zgNpCxMLj3u&VIaCo)A9Ikbjc5=K@wgV4=g8oH45kJ-wChL;7xIU{E@q@wA*ual=G! zyyI|*$qtrLDc#^I(b`d>XvpcboKuzg*Tp^RUfDp4=T=6(F2>Hb%|D%3ssCIP0(C%7 zy){>_3UQ9%CGJJJjqmFvEzVX$AuW?O2jc8lg5vC9%uA$S@jF%P^6CbgZSr5yAI?svw%5d6ng{7rhK3=gQf8qBexScm=8j+b-_A zW84@sEIZ!s7FXw<-2&fn3@)x~HLDer;M~R!#=Z?E@%tZ(36V}jXw zPRJ|=rZ*?zI}+Ohn? zMA2Ye{FhaHg$g16(rokvTcY3k^2N^VO3}BnnL|&IviQ?i)MznjXnm@QZLAJngFnQ2 zS9}t@D#`nh^WhiNb9;A!j@PS-++L@u)9;-bUxU)nv{)X#-(z>i6*QDu%Ts6ZhME! zpzXthQ6+rnC(Yg$Vfo(j6L)AQy{aoCFm@(_;efmDx*Vf7+BNlOqK9kq?>$REm;3yx zL>tZ&$I0zLSPxx0`O?H zVIPA#)ScgYW~j@eh5F)+$rn+}GJhERq2fz@zSN=W3{f8;t*bkE6aId`RZ%W2+2*{D z?)W@}+N(UU>g$&2FJ6Fsvxjt&NWYw!H zkaX8YJ6d;aK`gIACQwp+HoAW^{fd52t(_GnpLdG@UDM#ERRcxB0R*R>wLvV7VL>|2 z%lVMsjuEn3^<8fPBks(n?FO_8tJJ?t6rEscm+9s97n0cZ}f_?RVpKP$X~ zi;QXg<4%in6qHzZ;OtMrgnJF+FUj>Abx# zUV9^W-1qT&-k|R+KAz3odEW4yEdNl9*jP!)mV)5; z4ITU52+!Y$XN02W5w6ETH1e34GPxh6{$No?-DwSA-t^+@(?&+dv(>>mC7k)m!-SM~ z-Ne(!|MXjf-U-_}tZII#<+mj8P+kTvhCbs<0LX-_a(Sr>3r!xTfa(GP2poKUSL7c_K=?ll%5eOh)FVjtWYz`IQjd)Z3H}2HXHzm=w<^0TH=EGmc zLc}4h?!3qmFN5JPu6xV)<{OCF_fN6Hn?)Wx6giTRVsbO*+?&=zZzwe^O9r;}P~a~t zKV%x{*1Kpk{2n7L`xcC&%a9Nrzj3a2x-uX)MDEx9EkAPih#W;ZIWfsKW-_HN`i&m{k*<%abQ87?8DEy6x_NFUWtsjccmj9 zsQ)SxHd{UuXO{we_LxC=CTTBq)kDVsb8G9Wsy zc@qb!?bO;g@9Z=?^Uxk><^l;DA^kOO-efzfUGYy0@3xHpw%6Ta;27yrv&;I>fH+x9 zCw>{32^-%hB8gcK)x<{*b*IK(f7Ao?!fAxHT2k2<|L#q=i`erR^MSvfyu=GO%I8SP zc6D}iuU2>^&;c`Dya#@go8J&Sful<9vlD}B9VOPPp7|llx zsQhWkq+lr~Uy<>_N!|0#kCuTt2|JjpiVQa9i;tkly;@QA2q<3YzO=)0UAKt@{vL69 zayT6Nam$pw+8@w7{^Y5!)a80GsM<7vC~U+>9-00lPkK^Kva*@MPv*W8(!APM zS_Cj&2LUbFrhfUg3Uf&j$zeZ7o<4xPdQ5y4^v*eU8)V-cBTmh>J!a8!bDdh144Swk zj1!;i@z5%A)oaMhIkXJ$tP*)^7a26yX#Ow<-MqvfP_~@NVKU2!I~6eQkJnh8mKNWw zU!$hh=%W^+EF|<^?+bR1U1}PX_6DS*5FFYG4#ZZ3Kw?H>Q6iYyg!^CBql; z>#>lL^%C}j4qCZy$t4`xUxjlyEH0D6rsh%>GCmH0GtadqqTS1zxdCd(y2X{Y`p$YR zb#NG&w-pyi_TJjZV9?kH*+@I03y1A3dHg%!BZg)c-IgKwhj8vSp+EtmjZl{&sIM|} zb5I|S)aU;!VDAXOstH{*pk7Lhtg z#`5>i4RJG{f3R6Liw(zMcTKIeSpDK=;glw3=KA}v;Metz++1y@A-ElMw*Ywb|xDN7M{n)w*;rEG4Mwpv~Nw0HXc%+iZj%+eK=|nPWo|c z06-jOPr+OVit4Y0=N@F11-7DI)_DeOo%!1o%A~|l{y-Al!BNn0aFF+f{RoTL5xkh| z-dam0b?@wu5#5=y%BN_%R%`l3vBtC>ng zU$&{YQb`ebo6Oa-3*g|(Q<}11@q|PLXI7L6&_FUa;53wN==|$H2Dt)Yzn891Z|a5+yalBkU34hCb7 znU>962&gn{JeZLLJ@9Vx;+0RCgQ(3h{e5BGXiOw;U@f-ghY`sO-2EoPT#-}JS00eu zu5O?1odmtTp|`Mg%lW;lbx~~hpzprc_*L>2&6;imw93%xpCEO_inHgM_NulOxZ@1w zwxzyoUE3kvIq$URxg@W%oACQ(I9RLNme^QqHn5@ay@Yt73WQ+H)MG0Soel!|V<=YH z2*%fx-)vjnq3m&sAbJe2`6 z%b7@Q_=63@%n-eRQ=n?1&f%fz(dpmMe-_%}k=)8{{l%fY^~moa*YL*;V`KfVNKfQ& za&65id5D6T@skm@UIKKpV=khx*)P_#BFFD_Tf13B7Bi!|4>vJHZY|))L$S400N5nq zS@wt7NCph=OSi5rsyA03kX)|1kWc>AGI`Fo~K$WyE*cH(EGwu3s~jUBV37Q2g~qW~s4FGyB; z)IwIW$h{;TPr=YEGmI04Xvb~uiNpJ{&Ub_F_fJj3+K~smU&q-!%9N6D|8O}kP`SsX zHFN1rkooV(?9dTIrC$1b%eq%a^lRdQrWfCU-+g*I*nYYrnmbbRDtvauU*YuPfP)%6 zE_`1@#li3~@3wnp`~9)g&EsQ&E!o3w$2dH=EwXPkzRqdi`t{-RamHvm_rU8aRj@z=Y(%i{VUYj1LTGWkn3?sQ9KS$zHT zzjHNcT^3!8f=KyOL3xWIcL)tSYJ+Ob0NYj*JxP&ClC6TiA0O2_k{>BgyLQgD?;T1h zwSiE|uuVx+PXb^zN4-CI(8$?ijOtsMT5z~|FSj>sAhApTr7fxvnSTsk)m9^OCNtot zkTMl+JkV=t?lsu^ajf2A%4PfC4Py!B-rjm?dG^Y)q+TZ&Q@MI9PA&aW(CG&)K*&-) z+aTa~FzF6TRqBX8>PXeic~Z|L%I~Xe`;OX{PHHYQtlZNOht;WyoFyBv&ONkEYJ{C^ zm$ktue{@g|Cr?1$e>%Sn_ugyav)hr^v+iO~l{PDV^dMw)!5{mJtir$YuO*d8jAah@ z2bzow?)!~Mu4%W7xChlrsGq7?s@*N#&y_6Lm;by$^wwh(Xq3L=YL}^@nhdY*>;%M^ z7>PB9^6%vq3)Us09ZnG5ZdR^o0VJ5(q+0iDzYa3|S7%txpk)Ah+)w#3H+`-S=Wy|+ z@%V@8SvC|U)*QK?>ze)=jhX+boqZ_gww$H(sZ99Ze(sf?Q_I{I{RE9bXm-)t`1@WR zJ1)}{vi!Jn!=t`8&sx8*)X)$Wde?F9J@>U<5i=j9RTgFbxHqy|T9$G2(1UA&U9$r+ z3_7p~)Ec=q@44CO_NnRl7Z8c+KTT!ulykw))_081t~O$W7;)AMTBrXw){sY2YA`oo zPL^sOvmEaa7WGW6OJWA3d>(R^~eX zr14NI702Q$kQ^$vs71-zBuO2I;}do(`CRIY z-&c`)VXzVR{Cg~pPC?qdeD$X65+X?366||)F0fALX^3^%b<@RkFu;puWN&ZPF$gZ^ z1=-t9qoV}4YKA5VXju?rJmQOy!BW1GshC>wzT)FmDFGchwhBUj~y6d1mybbgHVOQaET^_sb~ zkk;#%Rub{SnOo(l&vyj}+bG%GJf5mcy;s_`-5%C^E z^|M{WNxvzny>y~O#+0#JGWB_1D51bSCP=~R3q9kavP|XU?ddju_<%VKXLyOiI-BzW z-|k&mS!d?e{@cB{$-)fLkJ%?YN1DDk00qJ`{)^L_siAocCL6Hl<%fbSt=%RW=UJQH z28J3Ib*exULsn53?6+Dl5B-X0hXQTNYx!sVWy4i;EJ~E_DpORBnZt2(bNpVIf_d+w z3}TjW$r%_eYsKW)=z9hz;I2QhM>ZjU`3(=crd_MQreoQzdlxnnHYPVaaZIR{S^zN^ zP!5(^$oNoQQE?zy0y(S=s+Q*X=+5XdB2>8P&ZlSk{tx!vJ&@`Dj~`XSr;GIIj!=C{ zxkauamim-R?)Uqx5i{h@+Ljb0mrAa~NV(74Hg_Y1$R%uJ!$__(bKAydbLR6szw_7m z@BDlI*&iFbyxy<(>-Bm*Zcj>_W_K;d__Ey(p8q%Q+q)*>dUWjZX3e4(N?N1DYTEIT z%X!e%IXwokZ!wb!^*wN8c-b~MYT_9zQ@YvN+Wzs+bI)l1O6?T-DtiLvhs0!H;6Gsx z^8%+cHY%)&!Y^B8Y}R{Q->$NfNcOFNDJx?0c&Qd!MbIdVPfwX%w5^mInOoS5dHo209jZCZ>Xq;zX5)ZTI{=X%YfgyCEVSO#nqu&dL@ojuuF zT$C$qlbDMX<*>~A2Ykw^_x6K@!Wsp;I}Kym2rT)YP2J}H*Z^0R_RY4IwwWreCBzqg zU6II!TrSTDbN-6?fLI)(D730=OW@wx5dJzx5Gn94RVEd~&bFGKWe`bPnF^*Tv zlaw!Xo*yoU>-p=ZoMV*_nQZTHJ@o<5kCk3Z@|T1A9<4UZ@m@+4#R{@8C6`bIxc$Bl>3)#Z>OMU?b@i z!)@mq5w6$@QY~w5j_n0D5v&Tce~SLJdL^3j{DM{}c~~d;P$EJV@qO`{t1TVu%^y+nlQl~|b{h@D2mUJgD?0==Drn@sR*5x1 zFp5%nV9e>Ip7{&=x|BQ#E4iKZ{1^~BbswQ;Bz+`uK>GAiAd0W+oGEm2`TWw*UQH+3 zO7}o6W9I=pwNkfBz4&Y3s76`BFCW4~%5qQ4{mkD`v!=&{_y;n~*H$ORAWyEiyTUY| z963tnwLx97e&m&Bl5fVk6G!lk1d~rYF7-2{RBDBH!ZrDKdVEQr9+SVCHQgbvCq%)})isaKA0yvzxRekS6A zgLts%IL}+K%ZVLDeEzWcrJ}fNLkXa~RF(UoYWyal)?8lugvp~uN?clDRXkl@S}#@pAim9(j~vJ3CG38(ngsGaTr;JO8{3O@SE4vM10Wa- zn;xu)w(kv=ukH_!Ckz+vRp&*ml$&spr|zD0_sw1odjbrag`7#h<}* zf(udB6Ud94a`w1y@|qKc4qICNh72wJv_)1>;31tH=-c@=Wbd7cAV!^V|L3(mAb>Mr z$*#~7yrmuMjw=iDqh8+C@4oRfWNUW(ny3H!dFP5>b$U!zsN`$}+Ab^e;yPt%#YLmK!y8f*Bg=2)<2H&EU@dn!@q!R=#92 zUH+f+UdUd~Q#3k&ve2hq41`YY__XR9bbhuBxF-)*{l0kuutW#R*L9+rbRPPTd+i2w zKnK@u>in5oxd`MivXWb9>Co=Pneq!dq6IV&s>Nt958`ZeTv6C^BPNk@OZb{ zl`mg+6&=T2Ayz)rmu(cNS8aRUT29z|u4?ie%s5Dq+e7VLdhR{~GU6!ywmY+J zzwrcX4L6>^laqZagl3(PbJ=!(FkVWJAiO_148C%{Sn!W|YHA;d?aNy9s(MZJvxo2W zKw#SHKS8;~8LS$Op3C4lYxFp{7!n$#dYGL#1rTbcTC3J7>%RU!md|w0?5!OAiu>K3 zhi-;An=@yftY<4p$Mp-pYVEs3o!ORgwML8FES1kuvn-6LD63EWFC-z&PVlT-&SUVR zl|PDEi&sguI$yY-!Ot;3*#Y=yx6OpuaJjoFi&69w0GcTJv&Ue&dGftn8j z;_&OFEQ>P)GCz{UBH2<*z8q~8u@@`Fh^hl-f&2Y3c{-pwl-*@VNnZ#5y`d%`SOoYjAaX8y;7ywv!A!tnk-b3@tf{@c8} z_&u!NV}^ufWU~iC=-PEre6H0m<->3RwgFR(fZE|oRG#GGEt!M zgYdElwe%l1a)G)vS+fpilUjYS{>B`9^?N1|gPM(SP?7}ioGin*f}S>S_A zmCyD+e}x!?D0I&VAmcDkotvrKwPom^+l!Ucpiwq3>}SvRQccc?!E1ld&pN!Qi-q3{ z&b#;Euct=z3_c#QyFQ8BtS~I#Ys1JlD{cfW5A)fanHK6ILSZrmJpKz}8VPklV5RGl zJ6PQDD8C~gm|1^D=`Cv?*o{cg*ZKiJ$Y)lr`)*-3?#?>>J-_b5+I`kty57*j<{JsD z3z)$1v*$F^gnf2f{d&SyT71G8eBqMof;L%yx0-vdD|&KUYa!fQ`c{+I08s>H)49MO z&6eMs$SGik0r6EWjh_Kn*62>}f0anRIuGQDT73O}E}$ZY29sn2q+;jJieu>_@X(M? zFfs*1c7%X$_Gz3SN*<$tu5tM=;_Mb*uUyNIxSPC*N5+uyoyhl`?}#`PgHZkYqEQ2t zyEHStRG!ShaY$Xi&LyWT^M%>N(jBwxVf7z4gE;P_cu{L-PN+>Nd0=wS;OHj3cTDqt zAv^UW@%^Wl)(!7JAcA82*-z(sjB#Fh!EBBrl|C;Uwtr}j6)?&vVi-4@Ytd!jBccyR z9dFePaGUS^?cIWSLz7G@o92tgV<*eUi-Us0;q*TA&s&cGKBkAmH0n z*7WgvH~E-!=qNU8{u{JKMaA>+;8y*frWSeS`F64?w^7}Ig<7{m~gDt z>QiYmpS$!GcM`J|w3!J7cZJ%-b;a+{HZFGMzGIP)yoq?$pZRU)_rV2VJ4&huLRiX` zqqjJ7C5reZn*wy|Vzg-XZ1sBg9p_!Ce8$U#LzkKr=Z%u)*)Dbn3a}4k$OJjzzT{-h zj}}95eD%&!94nRv;YgTC7sm&QcHi*9;cf=LM*=Bg(rmEQRvK&8p#GUxQqwud&OuQQ zua?!sTPO+ZW*v8`>k6>!+)3Kl-5Lo+C2a38VlYzuTFt|g{^69TR&?|0K(C^Nld>J1FGBm==!_}e& z6U*4bn|Q9IY?P*{lZiv)%?jj6vZ6$ zO9J|@_;quTx*?k*#=9>sY2#`rk**th+X)B$7Vn}_@7?~f)4ZK~Ja7^+6HZ02VmhIv z@5uP#%OS=KgGbLC@BA3Q_3~67XfXe8Yt*cs0{QnQthVS*pT0LB$c2BX!47j0=Hbt* zp-$S$-l7l0TAAci;13kW_V|Ijebn~Fo>@SN0%Pc&af579RNfWvI|1r1LTHoH%mo9} zuRk2qUeNLHE}tIq?G^B5`EpQ>{$$zI(wNoz{HvN ztnC#KEx&h?5`Otz5fjRm9zc%Z8}^EYJMiR>ho&El+YX!y4Ei3K3cB3{zer2Fo;~Bg z65vB$4(34y?ZmOB+ggJ${F_LG=|g`Y?XM)3P|on%vyX?QYdjxQ2^zkvrDtI*u+h`k z2!gX8LhmSRH3kbtNi@hIBwIEfo%r#mwejS;`n3k_S=orv{EA`)%;~c6Y=FwekKHj6 z9kwn-0qHl`_5nQIa{u9?TXV| z_4cv)TQ%88;IgsKm(8o&KNH>?aIH&2Mf!ffpUEohsjBVpMqwpnhYiFIr}whrj1BZ2 zGPQ|`GlI;5U6r3jp{d-@4;cY9N?sEzd-Oh_#Lj`O;q36PxXrtfcJ6}>sZZg7B_8!$ zd*IK34ag<6>m&0lquqLs-G?_OT1_ZbRF6MQfJfkprK#qKUURZfFj{ zL_Z+H4{9wP`YOl7R2T|p#BPq4e8&s@j6Q*8MJ@si#R?ph9 z!=S_zklSkzZ9xjiUHfq8>-fLOP~TNmjb&R&s=Zfy-%G)ce!3On@(77TJDk>Xh4{fe zbvIKrG^_0z8Ninzh_tr8yp-Ysf0%KjVjY75@TCGeisF9;hjf-=_BTi3Q>z^N`2nv7 za0fS%P0y}tXq3SXf7Dhib{+V_7d>#IbSCa11HOEq-%?(XZaf_j(4^f@jMJ|ll%c1* zq%ZDn&eZ#o4w#FR8S8(wtdU%0!dfZQWNZQqPKp}TBtZc%T_cbiGJE+#zPV>{HfMOH z<5H{?{XBPxQe(48R^;dpXyoysfUG2ljW&+VF_&(Qc-kG-lR;^DPBH5HV$cZ%Pb?vi@ij>8>ZwD0h`|{`xRNEv zpWL`3YhMb^vd#fc)W9&rhJOIK^1su1hTJdQvWK9wl_u3W6!%Pt>w@Is7*L3EnuNI`e~lQfFtA4z)21P4bBTH*SjPH!15)Y1== z##^suSHiKM$R~B71f;_7In7kLBSrSZEPfm2bQC zF6c{y`RpOjKM%p{w`hrpzl{~w=c|w zk~IitHz@2HmP@m%=qaWPsPB5$x!|7-o#C)9Gi-NSCSH$b!>~`26W5JB?g)1j>>(Lq z?&io$Z=Y;6WT?#uS@bt=)~rwho-HS@;Mhm-iCl8P%rr#(Sm{6lisHLm?+0Ilo~cZ( zV#sM|_%3a6IKDA$cjp$BFl=F*VhOF-crhXtYWAz5HMnaOpb4Bsc`!;7uEEU!1Z7{i z6`W9nFHwdhy1Mq%T1%CJ*_q>6JvN+H|9PBN|0*F&U23($*2D{JKSdlkH-eEpb^e&H zVZiEs;!+pb_~%(pj%uQ*b8)V;3(bge9P4=a!xq={RPS#v2}!c51P+f4X7k zUzb$iY;^MF@b;HbkcfTQ9dWYiiA(*FSp}GADkqL?S>EmvLX}Y#7 zluQ#&?RAZujAD{#28T)&wSbui-W7cFUBXKuklo*66KyTT&3$m>Uwc_ga>?6M&9w-R})y2)ESm9t-*mBYW zWEIPL$aj@b;Jj*o>A)dX|h0P5V9F8q~bSaN4M6@AaD`eYo)o2^OhrClilR3 z>h-V7XAl+U?U`23zgBNsw7XWFPu2&7?!49DwJsgxIXL_5?zFm7TeObWVngD4irLnc zmgL>$_L%+pm{3|-&zuMx1!i+UF}>-^#3rZ`A*;ns;cB7IUuuP$&*K+%7WJfi@a-z+M$+VOM3gEDOImDa8Wr5!@wRCpMp5Z1ies58%6>DNh}t}P(M z$%I3@PF)imVd`Ozeqktsr33@gWFcgzM65|Xh>o?R=3U(=qx_W=f z37utOW^Le=V+tGzFFk5uaJe@N-D8n6u%qY-C+~-z-oav;df7yskZUETzhJoO7lU^l ztK+C1;Bi~6VlOez1q?W*tMkQrN2^E`XHnxX!gnsRCnbZJ< zFk_6!y?dC`+I!P+YW=Rj*|#r*^Ic&(@P_EGfdb#eawSBq79VU&>I^HkPQOt5o|hop zrGBh@3IRB4^O(js8aS3`^!HZAZcZ+9mjRj|A5ee&n7TA(6)3TgAUd)|rDBwDPt42& zyJ4rRs>-E=gggY}{Fi>8pcP&tOpOHN>L+LcH=dVp2S?uCy~VZ|fIZ>b@O3Qp6?sPT zGuXw=!k8?vCH&#@;Ci67x?10h$xr**J>UCX5nX>J-X4WcdgFo?sN5ftd=st?GHTb# zQJdC*Uvne<$V#M@VOW9A=D_vRzLMpDddzlIjIG3ZW^xm+3~B{o4G2kIvNp46Pt=K_ zGNpCHzp{#3%33uqRriKe;LNVig77gX($;7)HCE0g&I{v%ZdFTVzI}a-g|^PKYyf28 z6RjbC!>sGl&k9qFF)f*CZqGSHxcY=n0_nTu9E!J(_05ivHj18-MX{c$Rb}e1x!y+%*<6sx5OrEuY=3(Cj_d|ytDhNnO zgSajRw!8bjG}N4N@~Q$x$zS#F`o8}xaO{Vi4WX1t(A>Jl^AlvAPa`$ynW-KLt$`~U z4N)qb(ZYQ%Pf4jUY<09smulq&>sEBCNkuxuXOR1C0Hk$n_0MmOe1+H_WLc(OyxZ@) zwnbs|6KQ>3=PT{iKQDy0EJ52-zXmh110{IC#+<-5-r5jNnU>E z9|~5%WbY!@-@?)yx(2Jmc6@>pg}f%8T+i@s7Z$xA+kTwmWb7Q2J&cowlp=4NTBLS+7lvx%5B&06E$hkm`P&pa*5 z9G@#Pr{aaWxjH5cV~ey<6jH1}@5n#@Jfw9`$otisl`K(Diq`luwQfqcxWJv>am(J04U3&o1C7{++s^(vA}v3o;vH}d(F$Oi89vbmHNkf0 z()FCK5DFUtq9`6v#(A-s1{i@#4oOD0J@YGFF(5eENLt_0+9?pZcAFr5*Z|^0AxooO z%yEy5U8qKSHy(>6s4)Hu-g2|*7U&%HIaZi)bn~HBOQA5^L%irybYGyniz};y-Cyfl z^0PK$d&)fWyhUapq9yM=z-~ERL6hM+ydFn3t}4$7T>7RnJl#3k7V3wx9~%)rXF`js z#>Wq2itUVMd6%dj)!ise07~LTAD;vfp{W{QW}J^K6^X3-=`4*{J-7B4E6pE0Ux{H^ z#l8aubgEie&@=TMmy1-#3^gKrENeTfSL!ApmNdU`go#6Yv5K41xw`EcaAvsmn3X$4 z<@LsU#X?!dt+G~SX5cGkl`of6V&Z1OSOk2V_AaA3S#X!(99#j?@)7=~o!dZl2AA=Q z{4CZuT&hXBxD}k}0|5QXaV0vCaXh~R$s627jda!sm9|3YUJAY(( zG5=Cd0J+&y!`FTAUKgvqTkw9+6wQ>ge|kELc<9(7yQD2A%^|~eE-yzk2cun9eeIN4 z>L_(n;N_CKrc@P7x_3!`a?vuO8gR-l-nani0bU)n3^ydZUEjFZC`#&3uqJ*`dPA+~ z^PBcEj8M|&!V^{u%5l{kkqPnyV+0x1FP;;p)BoFByG#0`g=>W-YQQ4TQmtmI>$bsN zxYyBC$N4zO`HNz${>DFldc@zFWe+J1j#LrC#E@I6?1s}B7|+xF(#I{eKu!K*N@~_X z?OY8l%qOUuP1mm^U{&sl6)ZW}F+?{06JPHpq@N#iK<@R&Mt!V>I*Ip_0uLjHVMm zi1+a@tJJC$ox~2Wv44YI6E*EDuGEZ?yvX}(bx+rb3IYg|r=DCT%G@_2zuunv`b72U z9nHIC0OOJumvnGUZWXVs#P|wLB+`TG?I4in!=EQQ1~DgdEH#I3$)7O85s|Xr3?SwdY}mDal^9Ih)&u3a_38WlkSj-wKV0!q$m? z1XhmGmmW`#2_8K3*HyFQh=(_=yP}?y*a=THdQ31(%-r8CH#clE z;eDcZxn?n~Sd_$DsQ+By$W*z9*T8kZYn{Y5pk%0)kzkvYO3}ikn%zbze`mbHM9jtM zRKx2r|~7Udhhd!Q!Lz; zNgrf@O+7$V;w<)KN_}JoTV(9@v#A++W_jX=L;RaUBTRWH$T&4uvTE5KqEgZmlS6f1 z-gglp;SlO8RyIn)DS$@W=asx-|85dtps%F$P5g=eU&p1aivkHk#J(pMnv@^PpTy;} zq$?lYn94n5C;ApOF)wBoYyWbhx>g>Jm+<+19#LKFH{~SQ6k46f)>ojUAtdNovnvB7 z-vpe8xvx{NWBRGZW9OOEDXv~d6QY7%wy~Cmv2zYb1CuNisgtUdtjA3tlB;$pw&X zbpctz7W0C)C`MR>%CH?7y=1slx#7SKCJO{kh#2^V9a|&jh<<TM5zqU! zzZ|4HT(V*zoMa%hnEjq|Gt5wP zV+I6b5W4`{WVryYy=pB~x3fh|!D+hCDBMyFl(l$bmWN8&c|rxZd7x4W+oyq`#A>#)K zvHb+8t;#m^q@{+Lr?`~$@DtzjvOgUvmz5OIqBq(0FTp*Om!cK+g#Po<;s{?0c)Z*Z zh)A}^lOne}!(20!rP*gw#HEOj?FAn_8iy9|8MNxeeEh|7-oo;0M73hdC8M9=Bt)2+ z2Hw+8-T_3HSaynUH|f2HDTm|)izLGc3u^H`X#=4mKP)rtjM=fdand?s{-2YKb2Q}1 zgZd?6jDcyD4DVh4prdhOPwk-Go$XDBveFtXxXG@lDuSN&?PSL%x1=1y(-CV$Rkru6 z$*O1h;S==3D1d1?$a)e=uxp6n8wI6e3l_%+QwtD54 zbHKj*HpiHazE;2;qHdb~8(%$V-CFu+^(-s*LmXi_`gNIY0#Cs(L)&2-?qto0e%IJT za72G{1LfSR-%o7p9FgOkhdx(A4%JTBzDaFQyI=;8pkA?N{?3nO?weZ7GP3vyxE0)v ziNuHc5`^&7lCdx&_0iB_oQO5Hisy3kNo^_4FA|v_RjGf6b?LzW7*6nxrLf|DiDrxE zhB1n1sEb+G`U+*sJA~2diLR$m3i4G6Qb^%akC@P&{Wg&r_Y2x*?VeZpY$GxTavkte zZoWFleEjqt2@Rh5_aJe#)}X17;|^3T9Fr|(K<5)T%7whPLVXAGey8wJPA0RfnO_ga4_hR)_-k2@e$*Qv8{r45lEsX zXmS)i@k{h=;v~;O`f5$waB1NjHglhP&239-Dr`Wx&zydP>VCjy{roGvgc%uE2E~_H z!hn&7TGLQ0L~P^2WzY%U=2#e|pnUr* zbwfB4^&M59*HT^W#0%+Px>H+j^r)(0t*0kgi8rb6iIvCy%>_gHcZR(<#15`TAwguX zSU4XmpmJJN@@3Rl1arg9yRZJri;`PVUR!~2Sy6O0=2ZJ>p>6dol$?xZOnT4yRaFS5 zh*eYV(`F^uS>+d;LC43zXMb{~VoubaUdfrVC%rzt;*?y9t)o=>J5DTB(eOSh)x_Gc}L=SBZcyOH?TILm>;Ev|=U zBkQ2dq*`g$6$vK}qSYk?ZTlF{L(R`O5)wV4;1dB45P8|vjbD}`YVEUbAxl&j*#(&J z-YuFV&4qfuY&Tv{z^-r^Qw5Y*J~xcf2ul);f?x90S}L*>3mUEMnHE$pVcFShIKxkT z*IUS0iCAcC{+OP*cZmfQogeK>yxURzT;oQK4>#05{$H*iB|mw>Ev;~Uc*^E_eekQ^ z10!yU!g)JB1sdEU;eYrD#?dody5m3CzoycJ7gPIu$Alz4R{2mYT1D{#}I6HeMfkulBNN8#QOD7eO}lNc&@* zqLcG8FU8Z!dHBY=~gKGsL z!blj2j>dJEZ1VvqDoeGpxl(A3D?7683l3RXNTX+riVF-5~#sma&^ z&0;q6Q_a06%k@W678vsFos`>w)WwXJb$p|{5w)`)xE&o7)55@1HAfbnzOXm zN=wtc3(M6QND7G>(^+;ulEVSolaV6PHnd^GZS5%*(6k;Sj-ywXba;aHofb;ld=~?> zUfR;n5m7_Ilg*E{y|_#;JtgklTkVYF=6s#Le?SBZV!hOR`0&C@Bk5(pcq2U5sCzFJ(kR!*=l@@@^o2!#s<) z4SgY9F&t{n`4ra~l8sT;2O9#1KwQvg7j#>AIg}cGjbT2mH-Rc0zDy8?1INp8-bRKRBvXh z+?gPI#rydQjt&veZu12@r5 z1;_~C+9$4gAo|^uV$1vwx;83Q%=he3A^{V09MYc&iavS**XXM?#1<{7~UP6 zGQl8OgrL~=o0yMx9UEzNAG0#dx^NqO(WXc~PS<4{GsqS7XbB#2WMud1s7!S= zlecV9H^AZu9d@bB86p?=acC~ULGM!Mqd~?CCP-%s{odmhy4Gm+Q!1zHZ-Hx|7+|O; z=tEkL>7hq*=WVsxN_48*+*5d%b_jLA*M@bJ|)SKTus({{bD_oBk&7jMD%Bwxd-->I96fs9H10> zak0a5gzZKNUyg9|7}a2JWh-G;yxfDg1|Fhb=|aj`%~&PL=2AzV z&PQkO=o0au~K zsqH4nO4&0N&r#%XVZbUyt(+@!8s`^E>U-oZ-)ncP<0HQ0#jl96FREbTUrfjhPKtpbuGsq=bgjO&W&VTC{CoEC-p?|#p`jMFi-HL(bA&I=q-bPwIHb{H)8@%lZ%xU9m}sb2%axz*ww`3agp@;Kwq z`)J{}8XBKf7gnOyO~p(3^wZLRfp`49<8(5-M?leDEQ}!I@-rHb5+%4gJ@T9IG@kGk zH?*_s>8Z$yt&iu!2e1u_s#OhJ9#QHN9oaJXejfq&zhD{xfg@u3+}z$&YmkKP??jB8 zygAXl!oKU=sp=qRO1#t_Ma=6=W1Wh8% zPM>hCRTvIck|E0-hETkl*_gZ<9)5Omy+~%N!5D~kDO%m{Mb=betZ}# zt2|I;s(R#&@Vn~erXzOcBi?=E&%j};3x2U{j>Y=vt*tGZ+(zLa$cU-5Wn1*KcP&pt zt~ox@nNNnUhsLfAa{nalYz4T4w?Gy;v$J&5X>8iT@PIelkl%ybhtsR;_lL2&|LY;4^60UEXZhxr zuqeFswLuWP+Rq+K%SBX&v&PfGWA%-6J&875cokr^%;2Rlb!IG7;-u3d!P^3r??#e8 zRK5PPgxHz9B^C<}uA1y{&p6k(J1qF3k*K@M6lWcK&TC$s>&jeFAeQI$m{meNaumYo zC>+|E%Uy0T3>Y}7#~AjzZkDI>^T_vE1ImVn*uMX=x`glWX&wI+D$cvfMf=x=nqK?v zQoruRN2h?C9Y@nbI`a%A8P?yM%)K;xVm!|DS>`^0EHZZxywaZiC3|0NFOl~Tp9!jO zzM8ikG8x{N(~_aLz5}_Ig0G|ZnMSF;FdyZwq+@I6?>LKZ_IxJF;K{dtv7S@rDS{`z zT?yu_f7)PGT-p8j-x3y^e8f%hP*$P6MB~X6IJCk9H@2&ri!gvjf+tlbxe+M+C+kW{P;xb+6nUV@#NW80*Y zzHaaE9LZN_=d$AEl&i5kll_%|7p zHI&XovBv-GA>^VrBSJJGa}2Qp!81U5)9zTfd{I?R39HsC2f)ZB7(lL30^k4)9M|9b zw@DTiA#Dss&(PW$EgzVh|ifOnO1yDz(haX^r+bwk3Br{WyyeS<@|DZ z$rojfsw-Mw(71pJmKs?k4V-rnGi{W{2Y46H+aa0ijpJPzQT`&~i;Y z0t%-I91}m|{SUC~vTWEp8dh9U&^E_+MDHghs77dWDoZG0!$SU@ueD$jZsmOQ!(14fN2e zRuyZ*!o~2E3@h#4B%fi>g}n`@_J5%7RgKlWl7&)X3%|fN;ojUx)Y*))m&)4qtBS1C zsE3<+@}krFs2lC?I2+Muyk$=4++5wXNYD<;=iMVT`okffui1UUE2VGwr>hWvC7Rpk z33zbyr|+!?G2i%0+oG_mK3Y34pZjckO?SMlOt|{wpqcn)BnhWtS1>>r7;xPo;NJ-Q zZHh-FGat|atIW*uI+)fRXBDcI7qmL+7cMEGV$a#K(zn~4e==d0*G`GW>V-3JQ#O;B z(sVWGK8H%hND95Bkzq+NcqdniG?t?6QvepyTRbu?E?30}nq^T$HU zH5S10Ws~T2-&^V$3*`d@2#Kks3QeUzRKl}5`5r5PCmFSp#&?BAadJKUtI19 zHd^+g18E*}U1gsP!gYx?ewpO7oF+o2b)4^vu}B2 zmdY5bKo3wc3)Ey`^0g&*-)+_>dYOgRmIC37UItR6s`U==0pl)KddY+Kwp{uv2+?D= z`6a!2q_#!piq>o>nCRZ3+1by3IIW(DM@qT2w618N64*DOxulW`emk(j{!FWhg?2^V zU9Q_piY%8}I$1N@KMAv&ukUxqfr}?rxZi2NK+h~;0Cz@_&Y<2z^$uKLXd*_G(nN!wCRM(|j?KYmlYv;ktvJTW+ z+vKns)3)a;d(ga#%`U#8J}uV>r$-8Ruz8-JLA5=F18W>&p_8i`nL;ei_AQvcj%T!C zo#%B8%5%#6Q2-<7nzvL+PcD0y2kzyF)jcxp(;uWGM!d=csyUfDl;i|b#)|ij=V$7K zFnwBM>?86-RL;ckHg`Ta5)i(-tosZ5ISNm$9e_y=vh-86!gkMAa}Lqat|lxqLl@rY zbyVZ&rJB8)?>|&yc~3zjZ27O?-%+=n;OdnXZck1f=ACry!BGziW85=EHP3o(zH%}x zqdo|RUJw(!rmI7@Tpg-5{};~M%^`X5dGhG}qWWWQ1-qFNd1l%lwTET$>g9Er4BH8o z`j2~qZiZ(w1}UL_>Nlz{bXTs4M1dF;C7kkxs|x3AIv-4_pl1)JNW|POJ&uCo7&&0woO@y82rh~VD(2pr+mA`dmbB8HVA_?@mDA*!67t7;Bi zCPaI@kGv(xF6We*{5Q_uaN+01IdQi=h?P3?LC%eUcs?&UslLqGfn1qDoYUV1+N85j zLEP@N>pL5Uz>gE&)HcK#{XOV15w548x};n`HJ@JuBefKcX@mBKHg#%z0cFBnJ?1M( z;pKo)-fuWF=Zx>+sFo&?RniMmI=gVSbv&Re^d;*lOgnV9JcvDCASKvxg_$$Omp`ze zS4OGTMG*QghHI17QF6mm)}jH|2jLsz`!-atZDso9j$JIxrppS6*0hY%izo@=&@P0z z!go??en8glnDRz2iK|;6xV4CTCyMmE2L*|)7NPBMQ97nvPv3S<>HqevBfS7%TZYfA zj>3rHwjANlwY*VLe~Cu6ePYL__R^Rf#o@D(eyg~5W!Yq%eO;vjx4H|t@y6c^uZ(Ie zyq5?xd;TcqwENtfp5UqOB6~@Rk$6$Br4r~`(HlGk0~Q+a5L}aZVzbRqZ~fI~UYZ-P zm>aA&{LMbiyY#5~4YhcUKjr=%Klhuj8ZaKm=pqPb#sCA&On24u?z8BWXeV1l$^E;6 zrB&w>MSVMya4rD`Pd)by(v*2$RFBmZq-3UM4Gjaqvt2{zV8GU?YV3SE#%CK^vhSJR z>rb@Lq-bGu+5W`q5+jI#$J%GOPVmZciWqQ%J$$zm<-6Ky;t1|lz5Lea*bH)3y1RSe z`_m&f>}WU=sDm!)mbbuJ;k_NrJZp$>d`aBLkr;hz3vRO=f+h1}kgAUNU&^+c!!hC1 zcS$KPfK^zBd)(;##wAf#_Zuw2xTq8GvgP1}es@|xO6yI=YNl7-pf~DZAx^2l?b#SC zo}!$JPwY!L<`RcDB!E+XFeiUpmD+4IQad@6(@4ICgmdlhGmK13`y;l(5vOMtodYHu7p(q&Bdk>#4pAAPr zRGl)NW;_hOlrE-*bIt1fA!R{LAMb5)lT7Z|G$K9XsrH{y?VK%txn%E z<`}Q-4K3U^YHTGdrpz{sr#m|tFueW!>gufN!6KZkP^E`pI6HI6cI+GY-16gySAzNy zHwXhe2D)4_us!<`-S+9Deg+Cbv>6r=eO6VjgYizKp{hMkd~|I;A?k$p0hRtE`Prn3 zy)m#obL|NPOmQpNzsTFn1NQ)M6Pugenr>%=^HEagBAT{iPMd}hV#&NAS9Vf?agn`E zVW7Y;$+t8il=w@rzzt(p7#QEO$fpx=qzdTuJ1oU@Q>8BWlGJaCe@Wv+COdQnp+A0 zxf-t+S=j$Pu6x=#w1Dz`1yEWTnQY!fn13QaR|&;@Ibwxp1;3dps}gaxAif;V@ob)+ z169k0BrUc}2)X-Z{zXF$^v_gtq{5waSl0;33Rm@f`Tb8;jE(3y>ug^VOWuf#+a>t@ z^_{d-*EAJr7h6aSY?_CZeL`Z+Q&s3J%P!{lclcxL5SQ{Fy`O@=lHyJOFZTXCD#<+l z|Hd^_o62ma(#l+#nKm`Gaw*MinpXGRS2T0QEe*{DF)f?Y)XB`$5Y0pd6h*-uG*e4+ z7Z6afF;hX@frNnja=zdB-2eQ}`JMASzx%KId;P&V7wfgWc`vWmr-QnNn?n<%P%@_iDc zry$g1&u&6BoR`Pbl&>*rS^`1Wsd%inWNoX zVW#br?|+oGpTInYkWfeYv|J$%WaHq`qyA{b;%3p}Ap_N7IlXY>8w$IPetP7NBojV5 zF^_6+yklYlq80k4hkg)75`qHc3a%Lw)EX4pP{hrOeG2!TWp~=Vu2%8yg@$$~A)i!# zS+r{pa(^wppAp^{*?0aYz&eKCe#zYCtsLiB39P;(gZ`GD(Wj>3i;wx!@}E=2v=vBS zWWZ*{<4K^12s9jDjW&@UMw!|64x1;Jy)b670w2?_TyQ>;J7rj)c$7V%RX>q>1u}3S zx&JJi-QRS^K_YPG5G!q&CDgs(fl)(674o8DAFkNesHvxX@QahEO61}lQ`E4=GNiQb zYh@t^Atr@J<&pY0 zRtWEyus#e~8F>=UHMlBS-`fAm^k=*cd`QRN)Z7KdABVQvm_}UKeF)rLAyehdxhnE- zCPnfOk>ado@8St_%VpO$;s0vx?`#JZR%N0Dsh6|P)Us^7E6=DVPE(_YZ>5=c)3XpK zy-PIs+Sie`i{{f6(YQ-96;iEm?x!bxZQ9Rs`8C^O@@t@sNArE=`#JVgz%H**-! z5K-BhIA3BP-D9s~GhFK@7p)nOyh9=S!4Jg$1T%`OZZ(lJ{ys0d8gcqS~GHg;mJUK{ZBJg{4%ot1i^->WG42s|ib z@%AA%)V{wcvq)>sPHgP`)VuTwVEtR0xO87M3{8;?-}nsJOUj z@-FL%`IrU6tmYH{^4U&%rA>mrG3H6__CLGiryU(`PGR=rIPA3nIh*&H^c+)ig!>Hy z%)p!zJZ0(LZ$DC!D}E$%_^m~n+|6tSKdFd=URy2))0!Yz*|N4TExqFqas$C577gNs ziGu|ead+cPxfLFBXDPp%F;#csxySkK@eSBa2vSE|PQbRCi{(CBQz-Oc6bV^>aQw?= z-Q$kZq6Djl`?L0?9Y4A>UROVpkKCs~bptz!Tf)xX*`qOW|BZZB8}pxfVzkhA3@mW} z{ExhH(bAJV2br>76R>J8J=Bx=K;~7z{N2BwUwqT~)gkZ~&l%VGaGLo3h2KpIt{9sM z+;gA2z+heX1Ev~C>IK+Qe^rnt+X$E*gOw^Oe;B*6j>dwVD$M_qy~el&@2VmKJl+jw z6Bl(BHaj%DEY>{f%WckHGg*H;6ELWHH-a}f)S=}m?}UJ@F33_{wJs8brJhsmd9r?x zaQNU#`86o)fTz*aGL1Fe>V}BzN@4$2gnX#pYJ?Aox_*}E1Kt2Xm`bQ;!s?|Ib3aal zYT~GmP!=IKE|j<-n{oArcDb~gnZ5IWw=w4gqHM)IUqP@58-7IyOaG>>J%;F%nkR)J z7F4p3-!{v0;4d0pvCgI0p^yzO=1|lfIjL6cu;@12|6mdK-@MMX=LRWtl@kf+X>!u+ zQQth3yV;nnxiP7!5ux&c9l{Yh6y@DHe;Ro%CQKLa}uD&M_X>)Q1B zfWl6~fVCsd;9`|!UlhE1%fPb8?oe`D?wRlajE70N=|@(uk_pI(10 z{PUV^5k1N(o>{v18{V8k^+YsQeQ6GXiZ%^gn~6jlL`}i3Ezl8x`k&cYWMwr&S(QgQ zMe#~z9K4c+pLaEK-!|=$er?IOjn^uN0q?&;+NF$ znlBKx4d)MGlYKqypw;sa)Hog^>=}2Zo6S})LnV4PF4t4-z?7d`6|2fj7@gT@zTd&6 z&c`+z@D=IlTXm0b$OBZFz4C3D?JkIXMO#hq zjqqFGW5V&C2K6FJulnhmoa=vIZNjt?gK`b9&j*b6vv~LT?}SajQ2rP~Z9cmP>0xf7 zNl32eogynQ#%ZR3vLix=+e9ItBEks;HN{_c5{Ngr>c>-L#Yw#v$44g!3#>iXT*PdQaz1-4xy7k-5A?P2;qAKHW zCk?<|PC=$)_Rdl(Pt$up4J{C)Y-l2zsTQ3??=?Nkm9#UE!P(XMSSaoGZ@%RnRrI(e z52wx2fo11v(x`zR9-HRHd_PndyU70;g8lMk>6kMY>F;R$vzlUu?Q=gtFn({fZG>+cNO>6*ve9luWG_Tpd+T@&pdz`Nd=;~E!nU&fxG z=BjEq6PR|U?(;!~H$n!^Ts(u3qv5@64q=9Hx@&^4JR9@I#oi!sU8C*Sb6K;VGNy3MON1*f1Q9op1ts%=b%@@_OYAitZLnqzoQ_m)z7w zcaXcZ+PO24{JFM);Hc|tb%9Kojz%%8SXNrZubl2NGa9!tO33M-Ge)>8U0`i=Cl>s@!jX$?LCwQjbZO`}F(wC&4%zZ1*9Om*Z+jCZ) zu>K71SKKkgw=`c2*>Dz?o=53A9B~ZCKSMU$m-!4||1Nrkdu1?jly^@ve-P4sUFc-Q zo{+0R49d5ht#A4`I9`~+_RJ&wgf|Fh@=h(W@pi^aewP{uO@h;^PinJA68ln3A_m6V z)a^kd`n$Xub?Ly8<^}Zcnj=-j8;YPzv@XuDCV7f9=mD#unWwkgxWZtfK90Y;CkcRaPc{j=Ylae3?dX2q!zEB+sWz$fe-MDS5E^ zIE*&`2>Ry~_`!prVw4eD5ytUGm?qWE4U(ryXq9RY#<^aQQsY{S7LFqZVb54HmuqZV zH;i9JEeuJnGux{LYK?(OQKn=znb0>_pjSq~!R7f2U4e=XkC;Di&iLnoGkAWH^GWMi zJ3I6H;GruId3w*0T!Nr3@g?qr_T=Y1Y}l|PHhei8X!@I%Q1X(?+@b7ogI@{WaW&td z(|?%l+}4ZuhTKu`&4d$|%=p2Pa-|CT?K!(PKLp$VDWiT=AHt5BllH6rY0fd-I+N(7 zZsuU^UeW0U%m94g&{rcfS#nqW=SF895-N1p>O@sX58^sfrdO~BLI7fR%kD3BT!P({ z)K+D1NrKR7r8Vp^Q(opKeT8UXYr;i8%&9HLBzJXY{j(7Xd8lYUdxPNu2iI!9lYTvM zZ#!;fSgb?^X1w(ce+a^=(Ur5xXn9UdSV{kmVllBwjn`~h8iTL5OD`R)yQI2v$N*n4 zUC}uNOJpqwHjAwT3gvhB|owTHJ>osvjEntx3gHVLtg) zh3Y0$2El$GV+ayVKm5Y>4{M(}h%T$eV!N^;Y4{N!JB7UoYGB75Z6ZR#pnqr8vCP^A zQG?E}+(>4p1I{5+ji)$?P!EilXV9ekGkHoSe#Vh{17^6U9HK9V4Odph9jWm01r**cFXqt=U_9x>QVDGfXvA2$S@ z;$+_`3^t)8gTB^;Z1J!@$yb@go@HH5QbhFLFz5sB&E)nbu@N=0hMMCG(H2p2U47^?} z>|2(-(>LgtxKO@gV*3eikIl|=SKK|3rnAQYVhpt7l=2W-HbL?QU>4qo9c=^zrU^)u zuq$@ej4`rORCU?++dg}jLo|Zi*im$+5Y2u)UgX3N{HJG&rTzWXhT#y9VTk2X;qBh`QgY^=Vod4^M`^NuRQ#8MH0e?P3JL&yP3nW6T@Uut+Ks$=B*?B851D zMmML+Z^FK;P-_K*dwi2~;X}`ny|hSl8PV`N6htN{bs5x#cpHY#cNu1~lX9W8f{+$$ z7mHt1Twzo5IH4MO9rTy*#P&F5r2_CtyN)HWD&U#LWk+;C-A->^c>~(DuMdu0O1|z1 zw=Z0GsP{ab`yaN&0{-+;tEbZ}Xi_#5NY_^fmvs93hlOKOI*;(^3a=v}=-d!wJz-Jh zHy@QF+rI$lSic?zocC1=ci6HYgs=!{JH2&0L*+e`BhEF-xc2la#T^+bW-8;ong6|i zj{R(}lunFCP)vUh8P0u|f0lIycFwqn0z!nh&i7oM+82z@9WW=(>n0a%qYwZ4b5i<1 zQnMpqWdp0*V%<86cmtumi~)f@Ms02VK)+Q5m=c8Q#ppl>f(#g)(VQ7Pw35LiiK;v^ z{K(wI#PSo0gxJmkN*>2JLQs>)4NZ&u;?xn zJJp2s<*?ALJes$i=!^;M3j?!HHuL_}1h?;IT)SKF|D2!L4mdyN;Cc^ZBr%z^VM~1? zV&y5~^7={naMJheus2R}-0BwHb@ppaIkJ!~BM7ttX0 zFwfE7Vt4*?U;Ul<=6rKx)wJSv;5S3zNXKC;-1CHZC}V_@ z7}+O8TG0R&D6W$#iiCLxE%W>w)SF`k!sXKZ^MZCkw+*|-j(BbUwa-TUyx%dZbJ0jH3t33#u5{u347>Xf%9D>^=T!5|s8Ki}IuYIDQzKt~AIX7zh zYS}?K8YvA`v_ImcB+I)!|3s~0WaZ$DO~7tO+J#=Rz?om~&pc zk1^``F0$vYzAsYW(A$QVQm#JT>+AdZWmU0X&l$j#M<{ZcJ0l-%QU@C-O^IS{d;}9Tmaqlhp~=f z1^D9IY^s}zo4cIh@O@*&^OPgnIKET+G%nGA6Qn{PREXbiiP+epDu-6X*re;7b7Q|f z_ycMa#HybNV#k%yW8uE>3=y9JEMe3hfd<`7Lg`sRkd7`o&2O|(QR5MH|4aG z1M34mCciRFyE;gz2&u&rj0deemE^JBst#dLM@LuBE>>f8WFyB_40m1sIE5=*8yjsv0y_Ysprs-%pqghA z{Hm*v8(NcmpmVbts<(&pP|;OMeu*|*Wk|W1(dFdiOU#daYy`8s)4(SFFa_-+VYm78 zBY)0P&3+qU9-*I88Nvb53+C5*4Gf#yTuybpKq+%O3q#E*$>W6VIgYy!8;c`ckSb)U zvvIQzj9+st9Vfu3prZH5IpW_>I4i#O{Ybo`eo8*Yky|nA1hK6g8a_wi-VE>m@jk(E&>JW$!2}1%0N$en4Y+w%2AlCMIStOaezW5`CB1bEb z2)jvlpV%q&j*&pmZcYU))Fb-Yx^KR8Nx}jkD0n52_=yo1hUlx|LxdJ2g@t*)=G)Mg zcdQo8!v)5!xB2z~)b*1hSCsmw2uYf}h8eiYI(qwMxO1$eI1ZPu-dg54h}*a|K3@s4 zoibuyU>a{-HL|~a;3uh}A59Z3-(%PtqAH;ypO0KJGj}=F5;u-FDaT+TkVWnYW!e#< z#88g`hO7bhV&oK)e2H`ivlqG4`g)MFEuWy8zl6r!d^1UXMr$$4JHtUHNU*h)!Hkt}#H&IbDEVO` zQ{GiCP$75DWo2Z(D$`m2b(wUCLQ1(@(3PVPCeCkMG0Lmtc?!!cU$<{5$L4v;gnkhR zPu+yUmP{2BWPVQ@y*I4!ms}On#I7_$L5#-q^$km<%4u%aGrtPGPo>yj?Y$;*s7`mQ zO5}QkFr8SYvS6?BlYH=I!O=f~wHD}_LPBMYqA4V9sG}|1v-f&f6z*nVO4g^(0}|J1 zTV@;spKx21#XMRvHuDXzrfNyp%uZyKL2C-3LGw>c1i zT8!(b1lIPMxpJ%-o7o6@&{B-EZMfsyUZD;=($6$RG<;SCwm>M2{U_gB(Rb2ZMK_VQ zR%BD=jQPsk14PT$|}!N`1ZWv&AmJ9IG>Ryb!tVX=vek!()TZKS)Nn(@$jmSY*;i!6fsP6 z7M5v$Y=NSuR`${xSuqW~@~pbSLng&6Pg3(mx7arlnsEBE#}*B}vA*(P^ILIpJwx$Z zualztR=9)DRP#C50N=azcITD$id|V>ALjK|2nI9WdTFhfEJ^P3BSKBy@)wG2`TP73 zcc^v10;LT4F7?Q{0KPp+xmtahd8KlV1 zZM}&jRm_w84AgI?pF>5BQ2zK30D~kxBcl^LPGPCUl`|)}DA90pj$p8*EGCO46oKC+ zBPFO}$mebWaYH$hEz}9@Ty-NUv$fd6_q0;S*0>#bn5N|6Z!1CDL;Sa&|20PW(@w7U zWkB1+OqMLtcAz*$k~NY)s<&|i^on~#umfH4RB{4_O-z8g&s(jPFZ1+M&g%Si;M2>| z8Jwipc+;toIHL>_RNSg}{9tN{P}F=Z^tZfa%E2s2!*V)OY28wj<;DDCDz|ynEVnc- z!~MQ#(MK!mI$lH;MCCf(# zB8IzCr6}K=A{6en&8Zz-P`y0NcFGrc$tr~Tj;9n4T5M-g%X-*s*p2Wmx!X`fsfq*zMy;GM ztYkzt1GuSgXZh(W4Or#isI>QR3k=l7fp9+&GEc4N6FJcC1Kh?3xe<}}$CKeufXp`)y=1w=Hr*jO%_k#> z@A|{lvj-??0qU%yDF3^PXAZl<;w|1juqbVmSXX;T{+Nk;t$?0YG2yWyxlzw?kKb=t zbAzOJY9)Fb=NIy-Th}$hCL(~+NX{JkiYJq`^Hvy0j^jxl)GxuNlwdKDTx@o-JMcyp z>4W-r?ASHda1ffvN+t}>Pi#e4?(t@b*oCt9-}5&qjOWmYQDmD5CUOb<; zKg{S%+e(&ND2F9ZtQEyezKm?vJ+G>wD&rGI5pi*~KJW3acC-U^f?^uJNLt8^v$NOSrtZ}fdro^T

t{Bg2P{cNpv!ah!vySj2N$2qMU?0GB_e+nA0bgXW+^~7k!yXn~= z@g`CH$L8h6ncEi!N^jz0WGnT9jdCB{=&i79auag<*><1YT&Q>E=QPH38f@~k3|@!J z414}sf4q{|r}pto8S&#v#W<-FF)9@@VfQ>u72#w$(L7I0>#Kr+3;#i;)mP16wX9CL zy+$#NrmaBAh1NHh96fc|o>nVA%Po1Ht!K3!r9Dp@PF@ml8#)=fmJ0uobwi;KYxXEbd5^{Q8ob zW^B!eeo4NGQgj@y!(_XtD;0OqvujN=Se`&1pHVBhomiI%2}wvc zaE4U7syMhi*C-e)8>C;Iw_~*+*?+K-t2lA(# zbyw(;j|L~8@6O!fE-GFN_mRjLt)9m~Vsjbr=dfm1i}s~6-)UIMvRGxG(#sL40?G`| zyzkYp#Ur^(lbi9=7VnYVxn4&vlZ!%rvE?7+QaQzbx$7-sugS0F@HI}RgF)4BJF$*e zB6f{1H9o;?347=uSLwtIu>1NXjgw%}HRSRWZ8O0pRlh2MlH$OMCEj^+jV{s`obosc?ic8x*FIJWRy96^Y;O(bu`pWbv&o zSf2Eiu-Wn*)z6oJq~#Un^*w)5MN2r|Q8PU}#q=WK?WWpI&LHTduXujVFhE*z5^}aq zJiT0cn=`%RbZpHd_u6v-qKE^rb_uJ&@fI|s@VV)YoECHJThSPy8jCwa776|L9E@xV zF#8_Be`M2GWE^3P^pn_Qu6QL69Wk49YRq;~SrZ1gMsBE&7RD+bsg4q2qrdYjl@4z- zj&1%3MX@||m2zsvsBR$f`m6+8Id@iV;SI~|{_EXR+3P|lRPj>bg8VJAk(2DbeimNy zO1$A(bNA-rS~MLe>zeO%fgD?193;2*yH*D}5ha!fE&;S-TRCN+i%jX6pdDx{o4)4F zdkh+D$y-b730w|qeHelWC<|Fl@;qhLhuc`%(}w%B&0uAHhNNQ3Uee- zm5^oj)-s$RC?g|Tf>B;gR<10^%G{rq#FQ#bb~(wD>MUVlR7^GL>ZVDhA)3so7=%i& zHYG-QUImGQ?j54u$>I0)8IJ#cBll<<&XR-*pPCs&@0qHC`iG^E1qW@I%0;}93XN)} z3u9-iekD@sO&;2faaQ$4b>X)C?^&gxut5m@Y3j`ioi{6kStECMU*(qRfWLpN_>`$@bH>yFdUcll zzC>}S_CdBMH{}Jly8Gzg99(}cql(r@zhBg~ zipwZX(loqBt$H+v&q8FFA~0%o6aM>OBzA!poZqR}OH0 zl{BPBWS76O!!-Y}d23fC5Knqf|GqvPO@@xlUojR(2;+s6xC`)%*sKo})rdZXLWemY zpH)v^yC|>(8j5cf5EH-ui0zktM@FGb@U}{K>FDHe$Gg-HkJ--(FCoO!%9hOuN8AOO zD2s1;FJ+%T>nzW*QxMOM1Zx zV>rtz?BC=EDv#wmY)TvEHL1z%q9Tvs$7iB%6+Q8Mwh>jJlH(j}yXjFNZ$3`VoNcLf zTe!R_bQxGL&78Rdr>ya+m6C1?)dHEQ%t&s`RgFb@Sbs73llCeyolC1Co+4Z;k325( z6L9C0814P1kxB&LY}w?4Zkp#0BntOVkrv))rP?x^OWd23*6xfpWGg|{hh?tDnmW9y zN1jnapBjiNOL;vAcautbIlp{*q6;U;dRI{7XS~P1w}{Re|)AUme3kwZnsxIUQes z^-&&u{50P(jcDw1bTZ2(-s_Ew=;6b0{U_IY%g(D1F9eHhd|(h>-ST(~pjToOFkVJZ zNm&6c`!38jey*e_T5nAjooo+NuRiORK9=O-BC^1ncD%Fn7B$0$OrG+SjR@@bcW}c{ zG(t6$6Ez`%XOZYHcq6H&{WPiux)jAhT3zg?gMy}niS9<+*G}1@o87qEXWdXsdDej2g7(s`QyE9B4XayqR;a*? zt&CZP%6*H4>pt;Dvv?!Pa&<(l(^43Vg?o*6yHF814A#vtUuEeT=W_5G1fLx4Y9-oSZE{NUqTsb7$Vfw2Td(g2&4c{}D-yua<53`D*atZmta`>HR_-FZ$ zW!ZGtN}0UIrUe|=Octwu#+tMQnHpFs=4^+DyFMK4Xj-C;t%H^Hf|ckn;^-c#Pxut3i9&TRF@QlZIIg?kTZsq@sH z6jbJ`6PNqsp{&V@Ucq0p@TxFi1Q}IGpC^qqAFIi$Nf;$E5~vWQf{qEP5GO?84BL<~ zJ`DG2a?}Fi=r||y=a6X&QUCP$y@IzMJohgaUpNDv7Xr zi7wsePuxk%QTjdnmg98GDb5P%#8#mnx#GOkWCLhgSz_E90}iU5lezw_{@Bt=Rl-=% znHVdC>OM@9_SfS96Afh5P3xT#FSmxj*58f@j$gXX@$2tVZ)xFPxcGAFZRg;rTYZ-? zhVMcQ&tACunlTz*vJuNRHQL9Gf$~ajXxH8ezg+$aSordg+L`0YkD$47Go4?jdBU7vg@g4&AqLLd?j29RGHx)`}cI5r;2rdF4cM zdD%=_iAYc^7dGMiQ5&$=ikFY7ZyO4uj(GoP$UjccI1OIG>zxZMH!NYX|;8+PMAGO{)T&bIbCTN#+JRFneN(7 zH(tnHK28Up|5+9ie!_|3Y7@%%GFDy`BzA2`f zN2e7DtQqR$TrqLmXM`FHl%4h^ne`KEBNs3ulApr@>T3tb(PM~C7+_-Qx z?FvdOk4b+jhu>V8@XhH1hdYFUre-)JwBm;b5&E&40Kpkk+e}t?#yXrH z?t`VaL>#q$-uQ)!mq~TTw1*B`&#f`ggZ+ja=dkvcZCfi&nW`eRh9w$yG*`X2XGpG# zFUFC4Ad`*-20A7coohEn^q=kaS)5!Qx&VD;Ha``#!v5(lO4re3JXS=s=Gr&V9w1+w z=N9fAWL@U<&+!X1^LdT|mmb`2l76;I4-~y5xMCLFBg3zZ?JC7Ec_$8=9ZPH#~44dd7-@QNA z#4Q?nVH70swA7=F?148S{?-JO05a753 za&tw(6kwwfcDzcV%KY|Jx@fHy>94D%=l(6LV)=2Gy!7-`3|3fwFi3TKd`o}cdM6Vu zcTvCc=Q8Q%{sxpD2A6RlVrH3H+`fWcoX|IzeD#gkyq}pui{Hj4I6wc zNxAl#`}Sds>bm$UVQBGGl0-O4<_z^}P*+5f;7d^HMjt4{pYC|mMDWI{n)R{eDP z0J%|i995%g{NxVTo(vOQIQ3z|z;T6|g6;F=)?gqUhF;B{+3|)*e3erd(HT)De=sST z8H(_3j64K)+&!Jy8Yw!di1CmpMHq#xgeq$Kv&_0+QJrQckma7ia)}Xh=y^P}myRZ= z@~${TKS(PNt0d8V_q3&lPcL6N_$VVJL2*vqk)+y`$Y{fY>IJN@*O(+acD1mo#j#a| z+%mtL7hLqj4w?VYMM{B>dne+a^X4ORgyOP9WwPVp zW3Q0&uFnQR5^H5 zKGjt765zj8#nkP~^MB2}+5eIZMv+vE^43^~TsM!&uvZ|kx`17ZiS86^k@!*qtm*Sq z?xJP!y|eAxtykNnKe<7q$PDQC#p&{v8CmtNx)Kcj{*G$*$lg0!jH=da1)P{%{zR;k zU7yn}j@{qS+uGJ4HtsXA69~_IPQJeTo*EmITJ7$~6LtuuE$d}_gv!t8Ap)CaK%;1^ zgmhsW{UWq}O#1O$dj{)~P)aR}uo(Z1M8tgV+q~`4?`@|RLZ0q%;FrAxR2;Dr1T{Jj z;jAQR8K&G>_GEZ<$(u@w2`vb#NsB3qs#=Wj7M4S1)a zIfsx$UDIVSxt8EM-#Ssde4((xfDwpMU+uquNl+uljh>%vF^T{?F}0qjE_>`a!Rx3d zcw7IR9M8YLJD9i?2o3Fd8I-NH~$uq3qFkHVJ)_E10n zZ-1$dxApuHE{#rhjNtfJbJ~F1{dwSZDf0g!mfUWCBNAtD9cB^%pniDmRS`7QDj}{- zdl4iYyMLEQ-2V@@S8afy*#Es9c=-Pi8TJ1&QuTj6_&;~&|Bs;B|GBFFFSx3;9e`vD zye-PQ(6H?^`>)H`e;DDSI4QLI5bfgSrhD{oNi>05tWuw^PWtVCTE?DiDZQT1l`=M1 z)}+G4YcVx+cg!1et=*A=f)j8ypVH);=Op1Qhk;q@n(Xn^pnOq$v@^|R+p zoB{=9419x7=jQ|{O0rkPO9;Azy$!3)*3JeQ&G&w}!~3|g!u|1Mb8>6x$K%NQp$+DC zzxnUxWeaqN3TOTbFF-DEas54_h%mr(+qu8qv3_2VOq6`ASXTV+y&ZGuXG$K*9gG@( zNy<2PVJrHb_1cEAZoq%9OP$V<&OBi?rofCE*xl%}Iu8OxIZ9KZLq_q#dP(h)_<3Eg z=&@Z-^xM~}Xd5Go2&%PRGrw=KIVNKFKZZ_O24h+((7{@QsgBqT$x1kenP$DR?3Adu zoQ;El{z_1rzen)b@8f*u#wYDkbe_1>X3zPL&`s%1k*$8QsBhTx43 z_VSZR&Y4CZEQeg~zX_;e0svQ@SEd{E>m$_4WMJluV8~1A{W)X2IFL`IUjaG`Xw561 z^_?4GZR(R3;imir&hmpQGrTF|8m&&ZY-nU{A0rB*>IS8=8?b=hIzLRpKu`d`+pYM@ zaModJxYd6*+4|^qq~hR3dfT#myvBy3^0C`9x7q8<18J_i!=^~{aAM|FS;4`>x1$yT zv!}aYS33x-!lE?QTi{Kef6N}Jf%_DQzSSX`_yCvOBU`t5L9)S4*s3$}>Tr|3D16gS z@>=Pu@b!6pysD(yrz~3QdpSSY+&NbEy_1}*zBBJq{&8rhY<`ziZECRK7^g9HIC+Zp zk_uSHIeEnH*{^v+Q>k{3IeR!aE(k!S*?r|uvLT*R&7WRK%`P0hq*StRQS_EjGEr^fb&uh9O64Q^#fKC*_1YC^Uv4JfZy z(^iM^z=PK+4!goNrIs4c$zBf^UNCXJ%1H9uy)&|p@e~gy05&zzPdY((8FCq+6pG() z?7hl;XE?*slE7J709Pu`Am;~&lVk4P3+njq->r9RTU_PXPnt*G*10fMpk(-N=H-s7 zN*B*xCCtj}*z0Sm9K0s`;U`IvYHJ5MoXK<%8e6g(ex~)5y zyOEDAePmVfXQ9Q&AKXU&-kT5m&&O&%8xrZXT*LL1%|!l;X&bLc?A8FEWdcj@vnFry z>os%OFd`5CsqizZRfrJ944u0@rM0VyPy*$#JNmqL{;A7tyFT_%Yd?tk5U}s-;H0Z# z`}iCEM5fmMh|VMjp%X)aQPEdQ4Iz=Q9cqgxDpwi3vV#FiGB+NG_wIY`vT77I_7An9 zZf}&0JSTOdH_+Sjc8M2OG5hIA*S=&ZXNc_z`>$a(y%9OeWfq)w1f(30KJjT4{cD}a zWiR_nn~SVr@6WuvDt&d2SU?E-Q7VM1dlkWk9$yX?G%jzxKiB7``pPYbhPxJ&n$o-@ z4JB{>on7BzzdC$u5QP5h;F(B0&DfYptk=;vN`bTHfeu&UjW;U%bce@XqR%s84^Pth zLZBu`cGtFubkxy$5aP5FFh`j`UF(yd^^_G2)Pd)U1_|T~+!%3-lklMOsyVMYt~jW`x7P4exF$hM1&O#+UufO+uR zm>bpf>uRtx2(7pWxn=2-7mv*KUQC^5C&+XNrt~Pc@lvtwwYI{Lf{$e{L(N?zV&m2# zV~DfMa+JraW?_rh5vE_!?HSKbpZ@#Kmz9+4JnBvcAzk(btpuRT=FlGxoP=K4L zmU)vuw4bCzKkMHPysh$^pmZd;a-t1*Z zHsUAah50i#%ELZD(PsA^`c^w*5DNZ+ul7@!c15>niaXU;cE%ryN}8Q`(=R7(Hku+J z`+Qnk9w3U;gddnVKl@>GLNw+;I z^y>dSb zB|GaG;$Pu-LCCu>xi7dxkW=gm&Nijhh}~*y^4BGR7$;LHi4oC`kCef`4F&#puqEo! zzS?Kxr^Vy4leeXR57@=B^WI&!xY3td<+opJa{7--l)Nnd&|xQJ$PG(x+2KuLlxDar z{a^`DEyD)dIct3I!Fa+aDC07qBWasg^G0CmRdv9Ef8G{Ss5`Rl07KhN{_YvVPe@IB zlz(MxkPvzq$1GfT>x~EE>(|VCDeuYp-^}>FSJX~F$4{ZSHS*;p+~0K2ZRWc$vGy*A zU$p93?3ubDFK?|~Z&3gGWN#lj5I45U+~K`j{No!imaYz@J}tcEYKgmIHw~}8dDpBb zxY|ed693!7n>JHnofXUTfKTgaSof6T6lLI_gL%D3lxb4*MOytilzg6$AD=Ry+ekpe zv{sROKe@enCmVlADk}i4`JgEv5Q2uh$~%YdC{rymfG>qYmupy^0J#@j#fJrXj)xu`{G7`#QtelWoQr z+YDyR_+5SO?$7u8`{#LH&p(fUnDM%d^SX}nIFI9f9LM{e0#G=7<=GOdW-R)X(!afD zLxi3WsnwIPzb7b{dx|=NNIwymxhY8*gpUM6?)l&pp_4rmxS2vVEn3m~6`0K0Bx*{+ zc!ff0|HxZ*IF2V2hyx^Tk6Y36*JRdj5Dq_R9#^BobuaeTU)h!X*A^2oU@a0SlBVEv z=z$2PXcE)ZpOKWsnZHz>gL|U4-RNBA{zBA)B^9p+PErrdl)rwdJqTCW>wLP-rxYn+ zkp%QfVEG=)d>?(p0>e{~Jr4_A4Q>}NP1dqZa~n63qNe|y0^@SZ1hAP9o{XkK1s61D zC$P}f_E`?x;_;3D`abO&0OfZGPYJ*uX=fqV+=&E^QmOy>tpLFC?bKP3Km#(7i^RIy z@nKZ0ABR})70AD6H$xim&-c(0M6+DkzcydkvbOQP<{v)#JjCt&SN1@1Eg#oOI@q%4zlBS6 z0|j9pyMf3*wE_M!YN=_|)dO$T-2I#Ty4!I_Wt8)iH4bPlqEU<#psbT##s0im-tpsi zFu#kot^_cxvfrG#+2^kentfvrDx z1n5uMdm@pC=Yp3NPD35!4>K_ku6>M@NwM((MgsFX2o;CTidAE}Yn4%yM|-q@>9KL# zNo6Wb%z*4-aIuczcP`MvbgekaVUbg;KQ|zJvJ%M_AQpO$7OyjXB&rk;`YG>Q&^_}3 zCBemy41U(8(}?M(C0pKiAcFL)cR7dxa>0^f1;RaLlS$WFQiBd49`3kEvOZp5^=9jn zT`CL%t}EWMs?49Ayw3>CDs+vMv|0EP~K&*J7Kjr`o z(HvTrrty>e1GCPpcD&^xzHAPT zyL6~oWY~allPB36VnBn0<|=ry5@!#coUC-fvIWYMfH8^K6vxR*+T7duNy^gwX@F|n zADz8)A`(0SXjBz+y?hSUgIW(r0^I5-M|Qs9mmc$gA&U-@ zQ(>x5Ti`zvJO8Hh{iqd6U`MO)xQowH9QNL5>0Mmb%5}>10=rTwxjqg!La7WE$8|Da zdC0#2Ee&b8hTQ!f9D(`<1Av(@Hp&A|gl4awASG>vJztARrqvjm?_ zC(GD_1t_ChySi$3n5QY0(YSQ4H5Z|@zYN+R(-Up*wu7|AF`VXiuUvpHS8sEj&5#(a zbgUdiR1kbp*RK%}LK|ZMzd4GU;jvpNxy~BCFuRGpNlK_(#4~=a?voHM@c+ zGo|VnGrMdh-J+m@@aP~cw{xo+T*}K)D|0HS#BC;0#w#m~M820XEqd=@Cle2R%wE1h zx8nfya@=1gY?edkSG;oRl?|7$uBk>It{(Fi zxg;Z;GfzeV>E&g}Ie@wt0U$7=eb+ii*}?v85+ zC^3WH*>l^4>bAVJ9mY4yV$=3%V1}D{dWu7a&DGqh!v3+=RVz4QA$ye$7>6EiIC$eecN{j?uJHqi2r`+MhY?OPWORwd51jYhm@w^^U55v+%82F=A)YRxvIoaQXi zF*JK7XGWTFrnxi&YBlv0Dvzd??l-NFd3x+|%_5DL;U37luyykUUvPM{_U4&eZ$SAW zQ4SbpuaA6SQJ5aDN;tUGCHF}|qd6X~*xixW_~nW};Aw16vUznzZk$N7H6UA7;D<+v6{HPB+L4noUlJc?91uSCy~dc9e4=(By~o3b131^F8A|W$QBE z9-kiGe5~PXHm^NUcFC&Hces5{OFH|&!7p5&nHup@8X~pJ3(iOA?wM!T(bgA_AoJ_6 z1-qDa?ObM(>RMAFw4)o4C@K!?mWjm!9+v5HvYn})8f(sSg$J!Hyd=!37MRjggHsX; znlKE6mds0f({qT!O&qaiuE5UbZYTfi=Zic6E$PXO(*5t0z0-OBwl3+L_rSo zj?dTwKaB@_jt;q8$6+OmrOTW!&qNc<7Z2z^^kkd!448sVn#}M~sV>lOjGOdKHY4|; zgjoTo05%vQv?U=tWPL)qJiV@P9b$2A5;KJj^Ha-xAo%D#F7>Kd{p<9T9%eAyOEcg% zmGJ|1@S5C zvD++17)Y$dJq6zH#2fx}%~aP?mxoKWGwHElRxZC6bd;M8Fi`plylQCU#+Le8qFx6( zFjihLRY2ND_M>k@e*qIGZjL!>4{Q%obgXB@&VuugzxWSV8z6Kf2B;W|b=-Q*e#s*e znd#YnM_@}POKA+@;iT2t^NBb7S*uD&aQ#`azWuW)`&`rm=0)*ZAXXkdF=IgcBy@Cp!B+3pF{*|jNH$7pHy%L z*L@9Lbf0ZcE$$xtT$v6pgA@J8CFJ47)4Y58q1IeV^g0t0F&xvpBMKu1eYHOue?oAwzR$ebff&r+^{1nH>a}cA=$2?%z8JQJ$P;8w<@9xW5j&kWi{jL zjY*?QQ_= z9Txm*H-6|!r^P-@H(X&F<_%dsEHQkl)phuN7O7`1O!nI+2W0{8lqJVf{kj2xGPJ36 z*f-`^bWcHNDm&2V&5!h2vrtbqtD5gsC$`kX`iprR6rf~fIg3{*ctDJPL5YG}BBOSM zbv4XP8Q1HY%;Wq?MJ5Q=SkGm`C-b_}jI9UlX{KT(Tm|2eMnqbk^cf7}gv8|8^=iDt z&>aBVI&iKa3=b=q*Z5$!k9(AsQZ%C`%_9ZCBLpop5CNv&sSt}Kz6x= zoP9AoJW>4197+t2n33i#*7_vHtJd@@(aO@EVtjvS+l?JUdK+)TI2`zDmE+d@@nT2o?0~7%tw%rOM5O}e#V5e^IOm#I?@SsGDrU4nO7_T#9IYyx)7sd z-gI|wqYC?1V|P#ceunAJVm6dZT_hVAf0g;ocOrWyxz&`Fcj-OOFb}-j*n5`cKddw* znewpWumI!o_pDB@A|nrojg44d3U#|He0ty40_lv*kZ964)^WGj0E2P*$Z*ucime?-f7tCcN8{$vN{0wQ!1h+BuUmfz3*1kqBMApl2u<> z?@ze+EEgG~o36D~sVHqA%CWfEThO$T0K$y-2%R`w!$H1A#ek$AvD4fTk!p~yk!C$M zd{v!xw~wek26tWh;ew5#rgInOUuulB59X_ftxJ4OPKT*Aww8Av;t3JXljH03m^`dn zJ^uo*Kav0LX+`d)>cUHJGBREXY*mU66PrqN+)z1jw?FS$^6uU8yU2HMPx8$9bX;wD zt7}~6uu1V<56@Iv9+a@OvHjiA{A)!qxSYj&z9DNESg3HFxU8SlI9ISVbrBdSAvIp& z%5?XO()KRpfX8PZn=S-ToDCUxUi6o}YqBF>>!3BIdO27m-Ig|dsl{whTABXN3Y`zS z*-};GR6r0Gum}BI>#ANFOBpMT=Ba#jrHgYwKlx#TM+GP06fT;09xbdmt?ZmTW7Gv*Cl zy&AQf?7gcbT+b|X#54M|XT8qy*OQ$;mMQzw)f-?yopl`F!dP<6Rdv72QC@yJKV4Gx z-^k-b>He#7kV?5iaJMjot(;EoBYZa(8OjMd({MtGlRdA@`@LFuzdGeb&H|f3+TL{d zyI2S5yMj0Kp(8wq>V85V4#9UmZ&=$2-DbS&GryPUW zkG%(y9vg^k+pyVpH5l)k_u{JJ=@(1~x?Q)5@^;g@b@!BRN}rMBz!n6zEz~11ako>{ z{HZ~&c`S-N36Wo!r7E*tI(r@$;p^PT={Vw;EFp^Xm2Ryb*67H}uN?(&lZ8N>U@2Rg zi2=(Uak%)uot4kXz?rf#f8}uBlu*=6naes?xI&QWv({5~1npYxJW`s#2Z)oy-eG1< z`|-oUlGh(RI&nF#JV&t!yD9CIvm2wRyBKYV68P)5(Mh{xm?aBLk&hbE8|Rnf(M}6s z>#9!eE~f?7?KzH`*k1*swCSdMuOlJ%lB+dq*4V|OHg2zX*tmaex`6P=V{lLCEDwyu}5cvw}|r1+x`Q+rCK% z-QzLAECfx`>jdp=wE#6W6zY9H2D=NTiK-!irp5=W9wDFLI2VT$c{Pyog}mc9)LrH1j#-zvjyi~vZ}TfVTJQ9!?8 z2M}$d%|9E_>T12s0$M*tBY-)HW*MG~70bm&&sGd#BHOcSEk}YS_nkE}B6a6G*@JoX zACAfrjH&h)O|?wV+zgGlSYHSbm{`mv5j8vaUaazu&F6u1NUs!VN3}!2L=K?n_Ty2d zt@ViT^;oK_l{~VDTe~&Jo{R%T6ikd5*b!{x$ppv6iFqS~B0#x{x1K+WTNf$aM79k5 ztd}P5*kd}Mv^Aegts}eY5z@iMQ$x@EizImoH*M~@Xl9K444nwy&I?@W-w(AdHkE3E-3mix{Aq{8lDo}s|6=p#jB1MY7p4Pc zbR&4zCWTyXbdhNT>ioQ(-Q{`apZLG&Vd;|I=ulRq`WF-6D3fv{J zjGQw}pkdOP{YO>viuJw_pOKVBeVW=rljgHluB$-?5``y)4SWhc*TVUAj1)kgtIKJu zv1<+s?umNB|DNBiFO`Ao0s)jUQCP{%BC*K+?-fz52;HPAa(ap(pN75)503D#&CQKU z|5h?rOd8GTxcSe`U8pTd;2f?xiEK4sG#B&&XDqZtd~jr5-l6^Q=^MHk ze~KB$L;0P6<-H!#DW)u$GD0ZcoLY!nDbPY^fg zTnUx9fy?%erNFTKAD08jP_F95gdFXiY6y$^4XYoxfL-G30F41)fCDwD3x#TC+u{Q^ zM*_=#_eTM>qjR?UBEBO*(2g5%2f(qYchTQ~>Orxr(&|*};(v4#9iFbw0IgsyGSVWc zK$5gTdTK8AAKA+>OVP5uUg?)msS-g?DL{=DKya_1Qp4W-_8-4NcNJcw^h1C%a9LwR z((k&mznr>qpr$$?x2MkeK^&3J=O0~exb(Y@@EJQ$leg|qynOMVBk`BjZ?!Z4oG+&N zBj4N}ttHjL{ydSUhq_!R62*Cxg&rlbn4kDsJA>K&o4!0ZfP#-RLRW&nf~({seyb>u z`mo|d$DHX6VI|)DZs8!1%1`Zg(%t~W9=$KaP%M3(9t@~vF5|6E@E!pw1pVK`GT{1- zb!Ss-9K`v}Y_-x8araiIS}c_vRFltSck9t(A-VW;aSev`@4hW~k3DsM1J^MgkR2&G zx7KKSlW0P}$x9&osIafu2`nBn|4ptpWU^`X$9kF`0!)aB!aRo%0KY4P@KU~vDo=Nf zzogjNbI{_*)Nl1i**j4+o{eQsWTH%(Cw=yXR89DrGQRGu;+N$rRKSjI(@u(X)BGnE z6-wH~xg6pSoHz2XJh`7YcYNumbU4wTg=Ki~o2S6=1Q5eiG!&L(8+BmG#I-hpZq(*Qg3(NiaPP1{BT!!{i zZR)OxKB{rvLGs7j!C zy9rNOL+=75;#zE+GRE>TpcHp$6p%DtnkuzcJ@04B`$Xmgrm?j9{Ty$C49jxhJpLoG z?XMoZ>iaW`0Osu*>IQOhPHIc8wWenl&Zp0h_6-h@a>zDVQ){6U49DC^#f@^cwtFmx z`G1zPvRm%Id(FmfJ9wV2jWPb1&?WE&Ctlm&Vzi&zYR@}LX6Y};q5TR+)3gwKARqsp z;S;l8(z38h7};qKv1r{n{ujZMQv&M$0?v+>ZE7bwu;%vfzb}F1e~o?gx97pm7?ZIs zQXJnorE3k>&P^~sA{zzg^EK&|?LMsnfCBHp!hC*#X|CbWx;~2haW7Ys-%YO9C%?^= zEzOlQ@Op}Lrc$}nJA96qoZr`17IomA^WB~{sb`a;P?`5$GJU1Cy(i{yMBi9MR`Fzdrel>V=b6iaP^|QZs zQEfdz!bRv=%ViWL0kjZPKG%kt&zfFHy?$i5LbQRtV-Sfa>G5>3QT}yAxQ5Et>HG$x z%<}d^=d385eg&#Q!^^nZJXD>PMeeOgN&h+Xn6M1F4Ho=q3Crk1;jW!6?v?!?3YwCsGSJs5H=YdD%JfZ2bK z{^U5%U%UeS(-E*dh?O(_$a+3P*WyW;WPr(Kz5dyHSIn+b3alH2?^LZQ4K$`fhcZsP|gIY+~PPIUX`1iZd1E zLek7r^9}pKCZiU0B@W5%*6_#ByVTjPc?mK9LYz2-F2lJts7cW)WLw>+D2(wr$-6U{ zqKq1=i1DLYgg^4=k-KV(=xA{L)o$RwoSQfl`$eCA*1RNe?Pt6X+=XVkl?Qh#Cb_uc zPm4N0#F-|>AM3IBSrnqXK-9~^Ybv{nB4`h?PL=sJR64Q?qtp~ik)U!;@wD(<4&t!aKmobue|yn7psH(FY-=Kf72)#CqQ}Gg6b_eREFy zdR|PS>nA#A0O5#2+^*Qnz5I#ZA}JIhL^7hkF~i;tFQ}wG3M`U}ChJY7IJ(;0!B?G8 zhz-}ya;X|ec#6xE>wHkK>**evjOt(ql-qB&8SWZJf|v~smMghwpGd`DBzUS8sWxYp zt86dNM3;`vFm8t?1k&=Ii5L7lg*)9-)HKO=M`TG3YZ*-=bKBXO!RB+*TayTf;cJ5| zoFGj}M+d^Embvl!?5k+vKx}2_wkOdtzG$iC_@7`P zC#~+R)BZjISY0MoY?3^!(tAR#ikDt#wuNy(kne(3cZSsE7wO633~Rxz1ZSu5({XnX zzFQU^ljBL_{XpaQP3|1YM|)YD!o+gzxilujg*EAB727u=8@145kawbui^_OA2F=g= z)73BZV;Vcw>$r1gcE0j_6su2buoil-lCLvBtU`&^6s?h`w&H4UUwb4&vja!fmTxjo0b zH}{QxbJ9=>_Y=_9X;U$CZFhJPd*B9kN|CK8-olRFY?zaH@j)1Bi_e=y-Hlxe@9WUx zM6;@5LXitHrsa%;B3#GJGGZWPvpv#EIvv`x~B>WPZbv>#0NcN{h=bi1gb z$KGoEprkGpN)f{w>U0j)d`49q5UhaFj}ho<<8|XYfuoY*mwA@l5rs+*wc}krv-Kr0 z6^JjBk0j%2`xF*?j!Ucl5cxjINeCocJuD4D@1Exe&Rv zyvm{xRIG*3Zg@6trvGa|a-790$kT`1WbBPysBiRpcHWs_{1`Y@%+-GL~+o3ja zV9(XZSHgKt{d}PM9r}F;*FlrFGgR#o)_5F#>K&1#EI(B~ZBlpB`N<39*L&!fCH-L* z=-|JpczP#j`~-}Un<0mV6`ZJH!n+|ZpLLdG3Ss>b*z;`|ygWKkpam+8sXV{LbIkKVUHoe2M1*PeVnPh!@3KHP!ADDBRI<`?^c zj2j|{KbBsg)B}!m_b^WYcrvlE@_Df``49&2wpfwpxtiCG)Vrco2L_T}kP7CB^YG2g z{CvBCNGr_Ja`$pwAGIa42rn`Z#$QD7w>M%3T)-Ps#zQNXg|1NPAcOMt%U=8T#P@;D z9lb7E-tDYzvFKd#jd30%f9=niv-k`!z+{1)u+CGlOq$JOsSV>;+4O0>w%G@R=o*VW^cZj?}?7TQ{ZF8eWl*1<8G%DS-jjw zaTf*rF~)hRX|s3Wh0{NJmRTnCY07=+yGuXjKGtbMqB4(Mgx<_L4Gt?{ooaUOL*j~I z;kPm!J|DkJwa^vBGy+!~Sng@iV%HVxvHY?mCSWi8Xw&?7%PM(4(7h_fbb{g&Xpq>0 zsi5F3!$9la>I?j$6{>;N4{s()eE1+;m*zkw`vS5(mJ-ya;zV$_Z9`Qjlm6z`!gOX~ zPYNuU@MrUVKpqSUl|EGFd3YjqH5xVM4B99pCVz1fJ4K2}v9G(bcmq1^o#d2NJjk+! z-d*=#>b_2-HWy@ULc6w45-A;ensC938ard@HCpTdo6&gTCq0jNl>udxY%!8u3ooR4 z8Z6Jby|XTF-=sQTJ^gFOcOYH$1_TBRH2#WSxt-}Ot#1apv|tb!$(V}7FMpa?8yKIx z{G;U(_)hePgByfDZCg`+aqT}P#9epeDc@W?PQrY1b{`U6dlGxqQmW5bkt?_aeEosI zUeB9x+&!@8?*~#z?~u+Uy8-g0YAE~Dm)SwsAfGuMllC?FxGHut9rsP4;kE3RtRi+k z`i``f(&?HAUPhq1XuRv$NT1?|wpsqTut0HDfn12xyqT=;QGvZh>wWFmnoqjx&7_s@ zoYQT{1>Lq_u*cuisVNe0DKBK6Gid6K!{&CY?wQ+AU+?9mR@Qo?Sh@!%wmKLNql897 zL$?#w--Ga9>1DLb9F4xf+H17matOdz2=WZqewhbTpS1_)?h2Gjl)|Tw$6K4Lb<)pm zZC8R{xC$IC>a}bB)Ftp*U5Qvh{#(lXD4%ON`Koxm`>-Xj7D}Z{*XGCq=vI?Ur{itD^x=+BuOid70+evG?}>yce$?SSd!s)rG( z*x+H@UV*#Cnd!>UE5g9xX^cRDbnMkZSK^OPmH7-eS}M#BR&|_vblZH+S7*LRi(B_a z47ONcJULMOpH(z%=>3k|u&T**FFEXOIsPA6+8Yb`@^)CFvDZC%wdon-i*4OOi#q87 zJ|E(WCHbUPG&F}lianJnbMTKF$|~;+Y9%~V87!`>KI0V>dy}%5BzmL<-bS_9)7P5W z{KX+jgbU{WJW|SIMkZEr=aM#DQ17X(U~b~#1t?ZuzWuDVu7uINZ%sg|4I_jy{m~!h zF$_s<;SG#NX4D-Jl|W0A%H{(5Ru%ESEy)=B;gvZidohami5{qVLNpD+x(zkOTWHy<4#x!oziQ>5ZSC7`jBfBCR76_aQ~8Y4*j7p&h( z)ow#}{S@%s?kMx-HUG01wp$&L0Oj?m<35C$V4e{av?k~ZM(0v7r*i6~9}QhI z8(rCZH4SmpC z4%>d#SDY&;zL^}BMvXK~sC`+yDa~avT(vnO+%<_2B?Qa!=kf6cD0k*XJTo-y%_hcJ zo(?mUdcplhYj-4Wd6GBmol`c;ELdDL9K(Ej5%F<>+*_VFqy1#2Akqd9B_e(O_CQeN z1u35Vi`u&PkOhK0A=tNExSJ4Y5Q-svoLsJ;Qt?~a+g^|=o7hPhwZV3B3%9*%XUkgrjcyYL z22-neZdQ`DZ`P91xDC3r#`A%#B=H4nFf)PI#NCGIKAdMY?PwB3;QWk08gct`+5iwm z^_8ws90jq%foRT{U~7XVTq9M|?4K>h)r%@`tfL#@qeI-u{pp^kHtQmH7yh1pQY+=v zz$1Li4c1ZU;CXw{<$mTzyhIV8EbpMX<9_;y-K#f7(=W(9$VJ9Gae2DF=jI2|lOBu- z2p(!JI4eVc2O|b_Y}3q*Nc9IK3+h!X^yMiwI#j(jYh88Ak>dE80mv7#Pe%pcMcTH5 ztehLHhEg0uYmuMRV`I~OvM%sX%+G0SJw3ZPZF?ua(puFcJzze>J}!G-yKer6*n+g?kFC{_ch*3pSQR4nu!# zRme*{F8&JV*)IXbu6D>Y{qS?6X*R!*-EpWTfucQe% zgzJP`%g2$;TY>5JN2#QZyp)aypqT`IMqSzy6Q#=})Rv+u`U01Jc9nzO&<8JnL%%6@ zPtDJVr4~HrfAr5k?KCIFwV#w7pfJ>Om@9`jTJz8QTpvc3U;X$3W$@N6(p0Dc{;=cG-wl z38E}U@}-C%LvK_t^<{4$uWh7AcU0Q2&)Hih zpMU0Shs^{a58lS^=wB~CGbI`V>LBz+aMxdQD`Tjwa1${3>u@ZS94uI9G*VB+Hr7u@bO^Q%0-suS+2DG zgB^~0ra1nKLz>4IrHcES_WnDoP)jL3$i?Nv?P*6h_FL+-d`?$1Lr;R1rR4ssu;I3# zQ|F1O1I#SW$YwP@U9x65LQYP%VMwHt5@lF*?NL5-{mE&B+x5v_$L9&93KrI`=H{Eqv5tb~#9UN-A-hxEL1oapEXaqox><7%P;ic`U6{M( z?r(qGM6a=o$TfrsEASJ`tBoG8mzb-zrO#HS7@x%09WQu)cOCB`M=HXiPYcIW@0>ms z(S7r>|HA1mTgN2!>gMMqCT1af=Sgr_U>9Qjl*w&%y3)~fmw%ShVn6Es$HWodxyMgmlmPYk9t{Md`7ZQw1QJ#lA*RctZ3b5GwmNw zcSOy!&nN264p!cxXUvwx;N09O<9hFEUifP^3=SpY4WLG&^!(Q;Gn=1BQ*>VLrJ*OT zxJ+n5QdPdz#A|_m1xz69?CbrV?T#c?VM*zU09sj zg7~hJ0(%R$)7Z1O*0nG}U~b7G7h3t{V7D$-9(a-xjF<{wVX z4|nHEM*DREt@;1higxNzt}Ma?Yecd(g(*Tzt{V_lxap z<}v7sF{lx|-<_rkb)-DdZlFiw{bn7icJ^4(yfk;M$|sah=W$=?W0@2DPc^@cZzgAI z9mXDR1y{P{D?n07l2CaF%e(1k*Qd+Vh@V8hmgPS3lwSIK5nY2ky)mqwS;U%o0kwc|jG0+}Cjs zSy!qT&B*c=C9*@(Km0Keq#b~z7s4vAGS7n3g*B{4O>2ZtyWbdEtpy8K`z|+#8zp$4 zbLAa;N9|A3D8XCONePkec2HV8l~0sH^f>=eola}EziR2~6K-=bVclA~H%_W2)(&1c*+3?POV%vLcE z+T(FMDx&YYJNQHB$+-9{%ftJ>IMxw7(Cl>^nx%dIl1vlXX zvqJjhNnR_Vhvd1c@hL;()8L=n?{Gc`=gL%Md;8DWC zr^4^I+8%%rET3PBmNc?(a*mTp+i1c7a=`iR7e~Iw8(Et&2Tgmkdha#-C=Bu^UwY!4 z+e3dG)zat}XqxvKY9m;!!1@Tb&C31Mex!g8C(A=nYn_SxvGaJvqhp)u^^B-1A4}GU zjtHWmT7$ke`1_mu!ttY|wAAAkk}`=2rf#`Sr7wm?wx@q-Ft1FYF}e^h55WRJ!b>~I zPL~*R5wX+HelPyey1|tmjFZ}ZsziZH;~mUfjkhS|$4i82gcnf=ZxEkJvB{H#fJEjn z#f2QZ5)oP)DH^RI{PS*qAibMIX6GvC{J?cA`)9fnC~8DAkrc_{iFssH8}`z52KGFG z;RiC1)UsC{iZSyF4lJR}r7{;Fng?AntL^u0_=|S7QcR3JVpNN>tlP|H=`BP=ySz2g z>+)zqlR|OY4CGymIns~Y@fb|r>ty^Hd;i6Co7rA9dO+5UG#P{idhK^gQN3_8Dg_8` z)amMod8Vr%^o6D>wbrTaCNXYrw2IrP@b0ktNtOn#Y#B}aSuHXCulWE+p}U@Hm2%Ld zg|=L=U#A|Ls=mHXc>GmOLsH z{DG{2jm#G4`G{EROoWZ>y%?+xtFyV&=IaEbXu75Ag1R^A-a;JxPyd~#;ejpS)4J|1 zyJ=Y*quXXYdr;h;FRdfN3!DXwAe9x#3vDcBzAmi1DD$jaJsfm@KQqhld_!?Lc8`dS zO>8#;EY1g^Z~{_u(gt~F$|8Ib(2H5)7+0{gThFmt6>HmsUItFUy2cx}?w>4a-C>@u zC>~YsYXv^okaP67*>W#VpGJIw{JTZk+dS3n>+??&>5Pmh3A00YCH8Mu6@zTPyF=Ce zx^NIgM{kdC2fD4W^N6ba(;;Q!c`FN=Q>vv3S-W<=IJ~W(?g)Kq2mzJzgG^>pii=mmW3be0uz*Pr3FZ2g6%~9ZX(mz3Ai!$?%omfkS0xXMf zyI<3e^=MiY=*HhB>F}L>>tju*TM`2{;N8?wSXT z_8#fvG|pL%9qd^{R=oVOV;qts{5_?xw>e^`Tg`!2^cAUyY`n*@UopT!Pb$kw8d;xV z4@nnR%c)AlVL$ced2SPaS535Nrw!rw3=L{iJHF(yvaw2a&>DKVNCSzVdbh>#W{7*9}xV?0oVZm8iDt3DvO z<8)m; zOA8)kzc={|EzlGc3Stb?$0SRqfK-pT*L=QKysr0j8}xujci9w zu^D$3|8W^ykGX#vC_PMu9Ia~p+JYaFD@M;jjvHSR|Q*K#-v>u>lYZI0MRnp_UlVzszAE&JO^Cu%NBE?XbBYbCk& zt5?b^YT#5pL*_ets-H4{;?gSe3p@>n&+SW-gpMhmSo-0qTWu+@7sbnrN!(dl0FNrE ztc67!u3~qk%v9go?kJmr&u-2u2VN2tC@-SiaR@Z+EkF$feGk|HLt&2ME_@-DD#&A_ zE7RaSeH!(t!l@dSxd=F-rQfk`k&vZux&BXwm9fO0s~(Gn@?RPk{JL45->1Ythxtj< z5zo_5v3$a7NS_NJhmOrBIC!eewOeE}C+9o0iHKzKJ?G{}U97yy9PK;n9udeKI4R5g z%9c5Hp}y9Qkw!5&u^bV#T&KDT3YNb)GZ!qEcR=j$=95TJm0tY>JHXRw1cBWHlb+jB zTZ=KP zbS*X3LNOw{{A%y&Ct?(!ifiqTN*h)5pXMinPIcRW%yDR-D9P-tUcsfVC4!qVb0;jg zf?PS%-s*j>pGZ~?f#p;69@fGzS`gBGz5E_kdk;JwvWn>`_9j-*u|dXUHtZnhouL08 zdr&;;%axTdxYtPaMO4HMhZ;ABX}g@bZ(p(nbVpbj-a6B!@im9(6TKgsP2=gX%jCs8 zRC1^B=$uSr3qB-E^|OYPnN_8j^KK-ce+X*X`AyI4~n=}!69FZg!G{NdrcY6|2C zl}e{Euo&0zPK)YKV&9W>ePkXqIf3fSzVOr42D)}X-MEE1#k5x4Rz^QcsMmh3 zTo6-EkqUq^vbztBOePLm=S5<4O6nb6W=@nzsT3A4RE0{~6Yd-|RWd?c^t?U_rHJx4 z5;+m%oAb$(q2$t!FC@;x=>)%+L^;%pH(h?H$Q3_6p+!1=iKcCk~0 z8!cqf!Xou#DXG+Tux7^^DW%A0-N5yb{WG||8j{Rs8KJNaigc?8>#Z#h8~fCAt?T?B zo`TLt`+$fvJhb)@8xa&|+mc7>0*`wV@$hxqn-=Q2afU+l0#on2G8z5S4DHNU5o3eF zZWCQH&Pfc*P%?nR!aHnZJF-PbwCjt^`$(4vx>hZn9#4CXL2i;}q6Luyal?D9K=Jk~ zLW$qLNW`1&T1dZBmdr`fQatSKcY1^K$pHd%<;;D#fZ>A>gYEOEn`QQxPEv$~VXsC7 zA)?UU1FZ{sN>>jLU7W3$yqvNg)LkHS!lpMHS|De(A0p{-9BDs#uL{n#^^GCZHyBD@ z*x>ekz9JF$?J>b*iltYpYInjJ@aEK1)(2T^SsRtwGF)owrmnEaG_$_)94}E zs%|Wgz+e=)8iHpZ5ZnlPH7B?HNE2Yl7;5gBVVVukSNXGT+q`{Tq|tqq47`6cy>{r@ z3Psl41(QsZ^@z2pBF!*#T@^bXxA?h+W6e7p!+EfbrrX=jWi3)Agxp$Fry}G%Vk-G> zEh&PSH4*y^s`0|*W(~Pt$EWVXbH-)%jmIpfSu<%Z`@RZBkLnSnZ8^ zAgLQOSX0N2BUJMpQ$97Iqa$j7oOZ9jZXl5Pw>DJLqhsxx9>kMxhengnnaQgxt(iH8 zh6BO`5@vIS0sa@?;i^>A(VZYaCm|iH5nVHc?E1V`U_W~_Ecz2wA7SsNuKJUje>zyu z77g5T=29pRJ;q?ObExt18_cm2wY@S9cSg%I5$x@!%DH)@rv&9Q_Li^->O0@>ccR(m z(%5M)>WNnb%#((y8NvHSZKS8j7z>uYMan&5X_z)^aj2J}+6r^61O=`%Az>GE4_Ebg z(Rf)KGhU``D?uJwf*-fWWOG&Kh$-1UMfHrlP4aYHA;T@}xSLja_XwihF+9wYz8_11 zXkr?KhwLqSi-?00`{x*7&82sG^BrNW2e}YwwJPvmrj`U_`Ct@>I;O<&)d%;@=YXF7 zL0vm<{fmm9Y(iR)bJl>=Z27{b-zTSbBz^G?>S6;~hho-XmURDVnSP{#tu5xs#|r%+ z_Wxn;&EwhJ-u6))?6wr0R7=tB?pA9qtq=`uwNwW~O*MsX)R<_^Vn~OL-2rVCHH4z3 zAgLhm6EzDH3%K8&>dCk5@e_Ri_wrXyO}H8uh^2hi8;h2 z9=(@?x9D40?s|?0GAN%&wIoypN|g3|BMvGUAs$M&)NX8})(#+Navah9afmEOuMu_q z#FArAO9M5ITK*W)9X2@n?~Q9qY||8Z&ph;-_ii_CPh(r&1XiKTD*SH&xa;X*F`wF_ zRRklWCna{(h+!UjI^1UGr~g_*@0#BMHnm+g&BI?R^Cmn?q|6g$%^_u!#$>&_5jPpL>~KwuiwWkB%h^+rl*mj}#}2XM zw*rN5d%;J!6}{*8Yu-my)N#kr-!^IkbEzYwPdol)VShSw1%RoG`~+E2PFQmCqWKoE z8Jfqn)TauF^l~sMdm{e->8;TDwJ#L$>P)3G%n&k z+6!NofaF@8URD&{8XEWTlLG)N6YSTa?<%RZ(KnCvAZn>CKdE+>HCMSC40F3`-c(ub zbz+^*uBMLY}?>eV@WcTiz1~qkdL;oi4{`+;94cN;+wYnn@>x zx1Us_ns(Pzak=CmR@7ri%Lv$IJ-M~ zE)ronwGP~&J`5X`!&Y6NPqi^$$K-mTqc^|5@#77(!C+9%18pyLWx1_6dv5@6X>(%7 z<&ublg|4T6ejDf`>J3T|bBg7N;X%FEL0no+2Fbq(WQmI}^N*Z^|6b-ObgeoiDFgJs z2=dA=;2n}}0<&YpsQH96_$6g`K0uZE8)z}kR%@!ywkHjDQ6&86LH!a+qMwa4Is!rO zdqMc19k-aAR`LnSuhvQqw%efT@DI$`6#TtOTFtB_A6$ez+fK5mi9W#Q&tB5+S{!03ynM%Mp{T21w;xo&_7}65b>gf%fLe*8K@p0l z4qf?+_7{F}q%&*pe4Y!B*o@`m+^DhsO@+FZ%nYemsq5DRMMe*5h<*RA_z zoWa9M2Q6JC8a~=`qVA|-${F{5Fl7bo0lUV!Ih3jw#WQ{}0V_GC9iI>f|4UJyV{;xH z(kd{U9(>a<8cNkB9VQ;WbsmKUjjz1pel$7?o(BtwhZ(ZqNUkq00%y-+KB-o}?;uh- zp+9b*!j1%4M9nx^UB^5sO#-ujLv4bE;ZmHRdZ0+Ub1QI`5=95R$77D>O_g@02DLlM zQOB(FcDYt{0+6+9Pa?~`OUR7u1XG9B=H`OKLt%)j$;ZiPcDLS#K<6>H?=u6S?x43^ zln0PE44=D+^z7cDar3um!>v4#chq&1I^39~ukfG=@3@WZf}ij-^gWw#Wg>0m<3GL6 zw(~$Y@4?B%_W9xmCy}``#(q$dQn~v*@I=L!I0y1}6=VjnxM=K0l`sT;2B^G`^^`9) zdW)VXo-NL}!OoP0*KDh47mcfwy^N*z-CEfMs1d_VVL4U8jIP=TmcFz;X}9}B#wHD~ zsEl@67tA+i*JOQg@|IdcU@7M3~D@Gc|wYsMcqLoW18 z_O$bZYN}o`ZZ^$6lUGV712Oh-n4v-lXd7k1C?`b88cNr^^`zCYJ*rRW!_SH8yL~y? z#>0%Amw**!jhNu}z#9E~*K0ppbHO(aAGm@(CS_12Tl3|<2-$)F(m_R;&8Z?T(SEZ9 zTenYu);CtHUox^IUC7gR z-R=lZjp9|tJt|zpX<2Ur%~vJ&tTeh34dO7U+!Ym>M}!RUdmwER;Zbzoi%0o4 zug}dTw=eSE1~2lGABT@VqTWu>^9YSJ~V-FWW***7@-Of7B#lf zNN91uS=GLFtoy)^#Yr*xhpK>l=7ka`u`p}(GXKfX`jdAoq5vde=2^Btt6IaRs0rPV z1ZaXyqBmAVt`O^nWJ!@g_&+pk(k~~mg`7*1H+b(uCJ|&(z#11@c9PW-w$OuGVM6%`^s6LwN4es3-@i(h9u=xaB;cJ zcVv_@^&%Ngj4HcTsY97}DqIP-&M#&4-=t{8^s`b4Ez=lm+l3zg2^)iqApx`tHY7U+ zt0moI-TMfQBik?r4OdW+E{uKzA_uiXs@T86&%=MPe~>D@Z^+ZLKeI>pknzEpNpxIx z&Tor&Nh^|Abg{u=-B>-L`ykifZ8|d=9+ErXMD|Z2O^Og@t^dYB;gRjKRl;(nhYAmyIsGiQ;5JXe%D*8M$VcHb+Vr+= zVwI$*tE|CoklV)CBLMEl?~%aWz1HJ4{Q@6xNO^Z_y1D&%cl6#ilsu}|p7pJQ;W^Ru zzP39>QVMp&aPvOyvzNHfl@2K-HbvrQNnlKYSaGG-QTiFmLkdC$G-cdQG@ZvISWNF$53W8sMlWXLa1;I%rLy#vfxd)d3PNovNuBp<(lLDWkzJ6t;Jr>)9wL?oTU- z;xxAY{Pxg^r|2Pd0lg%70bWJ4AXygLbG@2I*fqK2X`H#}Y(>D>u-DI@?e~wAjxfU~ zmm&-XSNxp4m6KZ7oh2n6OH+;t^&ypu^}=sUbdn`{B0pHFx(3?1>oLv0R)KC$ZEst% z6y%ijwt9t`3cRVcrF!V#i$N&L$0p$p$>y$+QKD~dY)KWaGne; z%-FXMczX3$?G4Ekj9s@0VUZJXm`=3GqTxwc{oGIOpJsvrCVnrf795-7Yi>(AgsUuN zi#p8bhbe9ZUJm|g_#u~lY6XhCyBSh!K>3z6&@JpcvcA#I&tzIdA%)E2OwxK}pXP|p zW=%8N-1+2%jfj54>7?6huhbn8w7<`zWYQ(aahE!w+5DHX3hfuo=Qw8BYqP${8Dc>k zDQErze_)IQ%Hwvs5_EZ%1~?J@$l1AqV~21p-<6&cK$9QQ3@5;pK$$3 z1~NQTF~=T|CZ*&YR&@m`K5l(F8Ts?Z%Iz*@{6zI9Q4dgFgYhGTfu}yvn?cy0+)6Wo z*8Dcr2~Sb6@8o_C;POtTS}M^fbS zZAa=>BGzs!rKi~NT{MxAGlrOBZUl!X2T(7j1K{eka1Y3zWlrHk9|P=HF#+D29Jn$w zM}#c%mU%6!yYj|d>`WAd;o&Y-I-_*-4sjKnd%SbXufN9o9)GLlUZ#|0zR-cFBCkgU z%xP3B(9lY1m5Ylj(;8;I!Pe6P0IPAtkceh8>*ya12y^B;Z^c6j=(4wIH*KhYqvF@f zj2e?2Ni(!fGqeirYY!R-o)qd6ixXuC67w6I5n`G?&U_Q(weNuQ2l+jm|Q){fzRI z+}1ZL@r9k8Q@eM^yDd!xCMIW%-r*NbE{7-G=l;q0aQft>KVVKAzYPllq19O=KPJya2o906#BC5ih)7j%K3f9QZoaM)?iPa^G`y{I8}0%IRduwHSV01 zJcD$S`pscP|7X0&dmU_`4Xla1he<6|fOehV6EeTnRAiTT#5xC`?>3d%{#lO_ZmU`B zdo#__r6oF~pwk2A8|B~Iw@at3&RC&4gcX?U$imB;O8xl8EBw?Llf(137eEMx!eE-h z=RUIjnk2m#2zo(#RnMpgCNL2)h=FEufp3ch%!=8k_ck*Sq+M7wz??c%&(SMd$!C5P z(&sZLwn~pjvyVlN95e&PRKkD6JQ;9TsCvEMNU#v-hvkWw#IuVmFaX@YFAn3 zmFwbS{y+U1TY_EkWMaABzN^?_2X#V3!{a{5~YaG^u{@(Yo=*w|`6HsO^6-vTr z-sYkocn+qKj}SU=nD*06ccoqwO}~w~H0xF%q72}Gbp*y5K;1|vkz-1iRID{N*RI{4 z=#&u@GqVupN`b&xSicSA`rcD&d|X0E=_jj5%5nAb0)C1HVTmK(fHa+1Hf7*&1`Y1o zaXds|shMG?LC>8~1gqPUqx~P0cj~huicHcOptQp$YDUgfJ7_KNF;Owb?h8iEL2`Eb zy}_3~78ReLU59=YCQA(?C zlU15ObpnW?4vc$GU*#fn)U6T1^82ey)|hFxfVziL zy=x?>-a8wA9wX-ssE2r3q;K@6c5Z8crpX@rGib1{KUg*B7}xbuE$cn7;eOz*AC7V{ zRrqmK@h4icC;Q%tUhaEGzJA)a2Wf0ooB9dn#%%=$@2E@P>UYe5XF3nUPs;xdm5Q&< zWoAZEyWT1h)n{sRI+3T9LIL>T?cc>kOq{XP_Va9=NSH%1)YxX~GOBm4 z=aBeMu^pc;NsTe3r;1f-HArHIl7e|PId2bE%0jaJYe!2!$^MsP^tQDQ|2UuXs`kbL z495D_K2MF3CV|;eVsp|v&m2eQbX!qAW2<18!rr?Jh_NdqE0-!slDvysuv;XuK{JoO zPdUkXv;x=YCj+||Q0G#IeZ*^A~T^DScw8D2QUnCcZ=E>EaFs9_4$3ltM_^+j}dO(KV zvrB~gJ{j}9o1kOW2^pC77rUB}BLl;u;joK)*#3kz5~izYCgO2_F|U+6b%`y_eL~rB zqfmeM1(s})ph{s7D2m$pv(bSRPko3d%PD&8JNax~N~zzmgODFx%{$C}$PS&>l7$t< z`g_`aHH1bNJuuCfP`|G=0bIRYUxy;U=I=YGjvX=0@3TtM%`U;L4aKyBCHnNRue8+s z9rnkMcek>wJqAKk%#3$vtt=Q9#rsw6KWX+?BmV;-bd@jsG;9z`x&`$Yz^lU+>H!9( zh=_&%vdFi;dT*cE+!K-%%=z8_4Ac~%pFqCs9#}L<_p8kM!|25nK!?RknjkiAg>-&3 zoBhqxwx+h2{Pct$>%KLSmkh5iPVKxZsT3AfD#&Q|C?d39odJ&Ceu#%U%tAvQ`!Dv? zmD8A)ijX0^#)03PZ!e8ss=c9)DiVCG;lByDmZ{13(SNc}0}CISa^B_4-q0d@i7)E=QI7gkIm#Bze7Ej;fZ)Ae(;52eK&XX$~P#A zK(~#a^jX+Tbu8M4v(ndUco-*J0Viq#@n6&s!Jt_OMjZF4po`4cFi(C z4qrH3pXK#dq&?gzWCn&rp_{ZCam$TP9{4keeL?0v!{Cc*dK(DLutbLxm z7m}lJ1Ly0UJ_@{MFE(9c85`4`g5!a*|D;rxAp1nzJ`X-f_n2%~Q3-D>I4mK^P(^Bo z<(1jx@S-7I8a7Avcr85JMUIy?Ey@ zQxLy3=Z1J|y}#-ytSw zhN+?OW7>&!z2XVE3Ha^-1;fnO7YKNUIjHnSiz5)8Zc9!3HjW&QG8op&_5`(_ZWL__ zsXmv@dvd^NDD-ozHYL~^#OMY61nLI~!&yWnd!Ms3#cjD6_ljngzptV^ zzAj_)X`m3JXI5p$PcJ7K7ITur`V(@;n|aPfQ{x~ zvp=it^*dyH*Kmf_wf^f;W$d$(<1b_Dtx0=DrxMC?=Uz>bh(gbDJ*sq2EW)Q?`ieYx z^W$SvZeFnhPLFJ_2FGbwd-DEBug4j3I-(;o*wp?LU^J zF5T+8E}L{4@|OEPwth!(lW=WJZV|^T;7jJ5sN@m#Y7Y*{HsoVQGwcj6!krO!O<1?s zNxkj6p!H|DM}rNxnnvB>Ae)+9M##Xg5Z#}Zak+?YRe1n#+d4 z4VEskhhL!^(Mr9lZQdRGkLA8r?>ktXdeV7o=M*^&u<(6ug02}g-YQrl-EmB1-)8G^ zkLXeI$NGaBPiq9-o)Qpk&U)<^*X1BypK2JYOR4ySbno-FoaEk?o@2!GN_AFjkffRuTqvL)HB#foDBFv^FG^zu->slsz%4ck_r)AVfRjK0kL37Vz zbtzrh(dK$X*sl)-vD0^iSkRoN?8xjdJjB&=1b8BGd)sH#*75+6OE8OcT$Q z=m1IBb)m((*L<^{hj({N+pFzoAxYyruR8`;!O`2ng+|;x&jv zQr2gJV~Pr&^j>bv@3342Z#8X+bft2j#^OFuu}Gbeh72S_d6$|)Qk%H6Ed83m+NnX@ ztYxS{tU}B6M2mBUinC(`WuGt*Dgd;7EHw3!0TJTlNzQSD`$m>I>5g3QjWe?Y;T?qvV{ha;KBPjj)gHDF?DXzx%f2dRMfS{W8-he63y@VLIwDf^w_VA zQ*2qXF89YXc{@XQiSoFMXoHKr#qLF``k*-$(LHdRO!=<6{c0Li=rHc&^oe+_d&QkC z8Nq6PsS%$}E`(Q}m>$de5nQ@RI<8Sv<(r8)Ncyv>SHn^1xj|)*lv=XQq?7u(!JQO? z9dnhD= zR=6w)VD2?gg99zie-t*7p%oe7bVkm-u_-+F#Wzwx&hFqHfLgi`Ek(c8w=emG0|Blx zJC)yUP^|9awbx^&GQ-uxJi2=+Lc+Ub$ya^sJokz9nn2E-I9L$wN67;P?QkJo>uKu! zJXjiVc6W<9wK2anAKGL;*|RT#~s+`(C9arPglJ9%D$VoNl&C5uqa)KT4eHq~TvPoaP69DATimAI z`f(Oj9m-5V+jvwE*u(H>O*hdZ93&gHBBN~O&Z ziz{L<`$NiZBRi5GzCY(*M{{{y$3AH@FzsK+oXxlJ_vIUOOROAC=8;ZCMfI%ZFvDz* z*mLVLu7@P>rA!gExAxIXS=muoIb{pdgC4`c`=h;DsrL>jJGbxcs4^fK_T|}v5&`W~ z2;1`RnqA)JAXlMR;^U;$CU+)VFhQ0P#0%?ZkQ;@Yp{<#Zi0AS$eAE3^eKD6r^ESt` zFOI=KX4Wh#=2bvf7jwfhfM4(3WJdN$oP;CiAM(#2o^SHzYgE=7^N}ZM9I4c6o6~Wd z>g&_w^-xQj&9#1He0`0;B@ekAHyRB3y9y=u(0L-I3+uf|%BdrT;HB1lzfhP|qd!jGaER$dKv)63qhm)?sAc=D70c%ee7uVTzvdxq~ zd{c(n!6Sw*O(m*Su2_=ooHr>mo6`v>z}WHt%_R9Y?Dw?5RiB_!7*Bboop5aQSv~Jl zRJWp_vR94o#rjSwj2-1Np@IFvx$I453ha+Y?aok8m<@(=GH*Up;4+Rt8mJF3H-SPL zXkxJeGh?at00Db*l}%*E$0qJgzR46%zUk4G8EGG6R`k*%g8cy{7!_U);2`=5-E6vm zn!7obMV>+=6lYnVj!_qeGYKZ$ixdMi^i80EUCn%ilV@eqYG`#Gdwdgfqxu$YNDe43 z{$Z!p;2iGh#<0$Z_XfhTpi+|I`MG?&KNXtc*wx|-(>gl7-tn-H>jJyWUnlLVpAeQI z`t@*t7tT07JaoB|APinMjdWgQdf0A^atzlU8(8PD`o$C2s2;sE1EGT%%Y`rSM6PWn z=+`?mr2t+yzfJM3k=N%&eJS0%`AvUE4CvZ&*W(qJXbntgvP+Yh6lHGB1lc69r-b?1 z1uB1&;xTiVp*x3Ix8#M}R3XtPVV>8VKr1!*JcjIo`*4CE-Bt=*c%D$4P>9TA-Svnv zM$6N17FZW}X`|@d#pxzPezq{nF`HaUbJvPoCbYA6fU~6^osyb;$yW2679=Y2Gt`E< zYc`#RPgiZuGT)7OQvcxlamX?=1AE)}9o1~nCBnFGW{Z0^pWz&x|GAv!tq(2)Bxf$y z=&!hG9@Cd+0x>VULLUc3*$ zkWU7^th&mYXNJ#s?0{XIm?2*K^7Q32-b|Q(;PjdrFY1m*uikRxgp&=Ow1^dEPw|7D zDWN3k#0~Bb-0bl6o||Cj&=X?%hQl1AP!tF2VGsM+wR!Pp{lweil3cdx=CVs>qJb`t zox!G_qw*=g8EqPVkG3`e8doqQzM62l3WHj|C}7!bHj}2#Cvjt}uGQk1x~nr%`Y)NiaT940Dd}Ckrn-a-f43{eg|j z(OVDX7mym~FtnwX_0NQFxA%uY+OZ17h%)DJpl7-$_Prm>uR7dh(8bi!ycHE}Ftw zqg1g_87cUxr@2}x`?|D*Yj>*>nY_p!E0&JFW!4Su`Mz>1e_fJc&@r13 zfk73jl=;@#s88F#I-6n2b1-I)(gDj1$W_*QfsVb$yP4kjxC?XX<2NxTN=>Xn-=_J@ zu=8Q6y;RL1aw)T6#U)Z}o-`Yh%VqGeI-eQJbCG=&vz_Z7;$3ztwEnR#lez?TcC13? z+;iooV@z^b0~gMorx}m&oLq?;;bF>cvRsA(D>^^-EVPV0d?+1s6O^11 z#&HfIA`MFP>0NgcKLWlOa%;qM4pYA+!HKiRPRX#c7j%TXD!c8}+ti zuAaA4cXr$*iFVe15OFqw#k6rA(6gJ=#pj`z*2G8~T7c4YsD6_rIyxbrkYqQ4=32y} z8t>ra3BWI8RdGn4rf72>j`M%HOq15tE$-9lVD^x6BI9yS-e$DS&TnJ>#3%wMs$(;f z!JV$7T&8rI%}$0>6G9Al=x9uwJ1%aS?H9p1)*Dh^X-%1*4yvVI-+J>tEgSz&VfVhS zPls|xcKDO3(F;-GMlzm*b?aj(_jXp+MXvVV;V^Ru=RwX#&F6IY-wQ~F5YB(_Oj{E> zM|yziaFTsv6Normyk0|V^?e@Or=}e=ugy2>x%si6#i{a5&TuX0l=#*)Mc#!ii~Lrw z5BWF#B5SYSjMScYp1E-i*WMY*+|RN~(k)ax;L)iT>s+eTK}qv%{*hTk#;)48ptDOz zbp>5e%L0j8-wqxA=bPTw{*vx*eSClV|Gk3!|4547KV$OGAOHWOC;soVZ;inJ&ik)* z@V_JRza#Pg>3w(@y7Sh1Kv;g&H$N<^+C5R`EWFe=YByg6iC$4* z?6>MD=~Pby7^@}#ef%(r7-{c(LF)~T;9Y4YQ}n}{KV^D(jn#S4 zmv+%R0q#L=o>JV&synEcPNXz`R(H97E_60KDzxgJmnImbC5y^3J~0xc#tSOfG6)S8 z&Leq$E(GHS0mBFd*fGQz#Pp%*f4J3K7b9H~d1;y?eV{n?2VmMXA+oxSH(mU~Ze~wr zu1J{HjD0$zvKSvMEHbBU2$MX+c!?Tuhuh7rHYDHxz5lyfbbB(#TQ$vk^zZ3NLoC zefyIVuBGWrP_aP>RU9UyBMHv@nOWxcOGP7cW=k_YTPCBJ7(4!m0T`8Z#9-qCkzZeTQCR ztj>g~KQkHt1URK@mmUe~uPaS<=*KGaA0N#A$0~>MnLNrDu6Cm%Tk2al;wc7CQn~|=Fag-cUQAkrWlwWG46VU2}bznf8{zt}^n9(h)_ejVo+vgk?{r(c1*9kRdwyFF^T$pgF~ zoNiyYSkuAC2Iag%44~(x0_rphWgnwju)$uN8}9`HjJs>WSdYZ)HD#i~O8ihit$M^p zW{Y7R6Fwb)u=0V3AF$(9W|OUnn6xWM8|qiY#t-FrktWl)A$0YQgtypShjw; z`}=lqY9;OQ6K|ZeeB*>CnKAhB$FG%Qy|n{e78}#i+5V&MkqO&0mLL&F7Hcl$d4o4D z$bPfimWa3uhcADws}#l!X9N3Y`q7I81bT;-O>t-;Lc>!qkl8qRzvh9OwLuIHtwCvu z&1ood786su+76DztC2K(9U0EWS@;|gjLadOl8a&r(y{kp+IvI|gOQ{BUTF-$%Z4FZ zCgRkPbEUU5tI|hfR-s3y6h{j#nkIHLZJTCSSiMYpX3vVWS?f1R+Eshol%UlN_12V3 z!R%X%yicg9rXqY-(|8v(hC>V~oprYV^=w5?M2=WJzj8hXEPMDav~^GDSBcrogVFRo z%?9yHb-j1vVmiEexc&3E%3JoezMyAl?ZwQ5^ZN$9LGPL$@zv~ zitwVn>aY(S@Ns5{j(B@PV^u=)<`3!0SPoTwj9k3LC02+8A}{Nk*K%ANlkW>AyVnJ* zm>H)Q$J7-oQXCFTnr|?WZmG!MKU3egJEL-d>-qbWhre#M#dWvWEm?^srWMvkg5VQ~ zQWjAble*v@m~!f=pgkPPnM##LCftqb(z%6+U7^$!h>2eK;+wW+JY-*>%zb%GzE$!; zr_7u`l+?U{`{SkRyy>w5=y#yU-oRQL`%nso+Am!Z!W{-P8}X4p0BvBLY@lg2Mw3^@ z=$~p+11oqlQw(Q>ZL;6Mw^@$-ycLrBd&4k;pAtB@F(yi0Ee)dN@MFqy-ubvofdRt) zaP8sQ6VGzp&@jg%EEoM>5AjYF;47ZDC&8p`S^j$^oPI9H%<)teu5bSe#5zqXQ^5xe_m9+=jLE}Jvgs1CnfbRy=myI74Ho- zi4%DYZN5__w0p;n`mquhf~sTxxG~#D6l-JDcwaBBmHJ}EG`KEI^O#8L9!n+VVO8zE zP>t3Of?5gx8ViVsAOOBul5t?x`k|SZPPO*lSyZMT$yLq5+Pog{ zo&KAaV{vOT60jPhuU9EZsGwvR_{v-KyYv#f(rEAn%Z9w<+8c6pk-?=NgB8C`pJpq1 ztGZmP%ygS%eqAvQR6gl~bXn>y%KBu3k>|A+z<+H#Nr01a(vFDD@} zTY%yRdW~(|cXe>5SGXs*NrXDb;LLF`Xci~T&Cz4p&h}ODO2Ln69}5Wm<@srMb%W@T zxt(OuPiV~xUWos?uG~nO$l6afxFC_h3AhT4p<%?5`5fGJ2Lx93(j9+-; z`W)?+o7cQuwlj292>8o+|5j3{(&1eOllNQRJ<1KjDU6wzOVmEPa~U_4re0CjE##3S zPB3sGu~qY@aU`uV7NBpdk-9ffKKm8-uQ*cV5%hNv<1+b+4~vh!g|+SpICO{v2p}Im zewEV9FfCdz2ZU|o_-)lI zOq_q@bC%c zI4B*PdX~^qc!}3Otr$3l8!3tEj`-@Y-CTaLccqR=mVCml-+?u4A-G5YUlLlnp#f55APlB2*+khGY!j+@IvyWgGYJ83~uWixMPMd=zwo|LT#snk4X^`P{VO)LFKEoym= z)c~x%74v(ePr{=fiiD_v_DWDl+wsj7`NP79{M05bl3GkXgXDPM5$z&j;@4_+U*L0{ z`FPD#?{qDl&%z|R$)HEIsFJ@feOeY!F8}AJ?~C&<2TS1Z-XH#-xZnSIpXL)pT*U^q ztP6q4FZa}rz+p0w4_>L-q`%nD0CY~_-QtUjhQW)cfYGLWOm@FcLGMG*mWVeehU1L-^_oBG0BVCPTps-(3pnCpjGus7)1pQF z)ZU)+79duoNE!onh<`fld@N=u{e*GXu#%m(+L_TEWLco5)G!~@hA&;PYqAdRG8OTI zO(;E-&#M1#MYJ|R#yTAzyUHyN{TRC`@1Uyz_W_&nvMqZwOI$bg- z^VA;GLi1H-t8c5EodnS^=|M!~?hT;y@(MgAQ~-QHe-Qbeqw=sLvO$o%Jt4nt{?dNH z+9thpB!Tg@8lZ!N6ibB{gBQghkF5@gP*3gcTObF(R}tr(CvlSmXymY<1~}RqO*0%obEw{s@xvNvG*dg7N-yxnF4mo^r>CUe+=;Om3y zlJbSEcK&8FU3~fgvYePTv-EG|`eeOTM4NKZl3(vNn6E_r+@1geB+f$K#uO8PLB?W7 zFNnzi4zGXE4s4z|wlEu|ArDTHll4?nNzdQ{a%XuB?fus3?PoLgnp~_`*zy_<+L&WM zX;of`0-QV5xO2S~fPdnlM&A>jP)NdR2jCuw-wY(q9-DZF;OF>v?Cd=QzgzFc#+LIX@gSGt|rt@a>o@C05|Q zrhfwO7ZIUp(@8j87&=CNkEo-3%A z&+nobx*w(+;GvtrnZfN{ixk|I;Dsqp;)O)A0Ll;EvbJQWkXALs8y_T3Z@FS3rJSGs z*Fq9;1s?}i(j@QC);!mLjFzh3XK-)ILU=FXGqt=g4UhVRm-`+BZLR7;Hk3Nyx3#Sh zCaA#SeeyY6UzCIGiIxQlmJXZ~#drR3fRQuYp+%aaKD|;k;aUG2lL(yimAd_%#qK{4 zu<3&Q`CzpObxFES+&?At86f3XWd=BHRqwS7(`|rlgRPY51TV#APn~+_h=LtSl3a`w8+W1;6|e+nL4v=Ez~e>#0U>nmhzKpM!^coZ9&J z+yG4=GP$)>{J3@b)?pckZ}%G3A&TxJrG!V98$Qi9mNmSOCT#fv5BGHf_K*1GeOBhT z!~<{=hVReMY65Bc>CbrM-65)y_E%1%KY1;zUrgP}Ew$D#wiMWZ`m;~}4jFqOrC6!h zQo|r75-@et%0<4cK0;*I*b5z&;32DA9?;`~B4;j=wG=f^twzfkD4uNn;uJP?&obebI zV-MgEV0BkqR6F8~ag*s#H@=sP9v#G4!XD^i?Bq^eW>au?g3($(aWHw`h}Cb39yxM+ ze`{*GuOmz=h(uS!B8$%Xd=Z|>#-GiJd;Du%6M;&i;CRdqoj<&w)$e&TQ_;2$iXMDM zq9m&FvyN33%Zo%*==a*pRqOm$EzyU*Z>8BY zjdsyT0QmGfZnW#wSF0F?-58bu()f$Yh8Z5(8w)sTtuj^QK02(Tq=ly&cWDG6JALG$ zYX{zd$x(>glk>)_Dq?aR+B?Xr*LHTcS?*?2{asFc_&tv^8{GWPcG&zzb(2~iaQOL4 zqK?BL)T^&Dys(^92Tqn~XRgLP^q6tqj5mI6!EYBso;vFM10ONkk{Krz6u&oy^6w~V z(t%)n!_uqp(&fhJ7GJ$FO!Wy=;FHArmkz|0hpV>jZZ|s1YsZY(*P}dIXgKd;IXsx@ zY2<3?cb&!8iVc^vubq2r{3!YqXoGc1KUVD3^X)_KGb1GpnxlmyFX+ccY&@zIaW0~_ zl^efPuz8{nEo2z>5Sue?$pX>o^qFAaU9&p)khLA{3#D>_2gzMC5Lg3pX273=@SRF_ zhJBWhGSn^9QwmH^umeTh9nvw{*yZ#bA70meFw)I9%6GJ6*;bAJAl?*^L@8$ZY%WJo z9PjJOk@4kvZyG7CM`?55a_$i7`eyDiD%apPqs{v| zWQYe|h9sc^--N2K1!2zo?5|(ryK(A5PF}nz#mtnRx5ut%!HgzHfJ5Fg*x(>Ymyskr z^2~8;yuB-$Q|*-@OS?;I>1~+&HZ|NsiB-neU|RhgH^#E0v-niW7&O={T@f5~8<-j4 z{i6a{u-j&o2gVaP94a>k!@7@(!^c}K3x91v?Z6h)Cp$kb?*S z=ii5o!-q`~m2}qBA$*r@L*e#=+-NJTdra6hNdG^j$AnGX8Hxo~M+W^Q0RXViI+uYZe|@Qdr|wkH!rLyx%Y4e@xbIxyv7Bv?5{({xBc3+1rxYsRRCG;r4DL zh%^|q?HZ~1-(>Ee$oIjt^96dr^(U?U2B!krIVW4j44vy5@b)cDsuUX?jE&MTL8B|dqAGB>2{4fg!H>A{ut^-O!_I=S@p2QPZXeHpMf zj2FMOgy>muu;%J<82GZnc{3T<78h$WPkocjx*w2hEbnbX3x zc;X)ODcV&(8DV4BJ&$Wfd?6g%snm2In(r~aOlJ!BcA_FF@(~i@?9Obsk^VGfM!VZ6 zx3=bsdDIwU92;-sIuw%j@fRjlkW~Bo`vP^)l>-@oLCGPnQsm?gYKhf(vad!;+HSGO zl#>IWy}0ArVxFpP_JfmPRc7SL2k3yku=(j?aN=})hE<^n&M@1*DAe=s_7fRdso_6q z)cMX+@$3Gn5;hpTCudvSs!>uXvHe*{;mA-#_2-V;5-*&Bk`QY3CK2 zLCv>qObq9O|JL-A56b@Lu%S28`qzK9a@0P+WU$Zi_K9a#Vxc?V^=p^k*xlQqb+Dl& zd43N9u#K4S%rO;v)G3ju^AuCj^kAzqm~B;TS47GFTv1nZPbvMgo}eh2a6j?!Ji?%H*5M#<|m z%B6Y-Bh8AF*M4pvTO19Y4&PUd1YBl%D$$504bOm#&xGX1Xqg))Rhk&Fx%^|DT7h1}1pT`TX&BVmp<~;FK@c z(-*W(CrXr@2zq5HS$g(a4jA_SMS`sgzt(G!6B6IOe%$BROi9x838q}Z?Hg-uJ1Upj zs7{h<-rRBrqK3|6^fjfz0 zY=k;Wk>+RytMA!tp3;-XZkr~wQy9`J>Vl5Z?uo|wYFN2~$HD6UbPLtkB;?T)rIZ~@ zDVGFGuirQJwq_a-0?+nW^u_0ZDe#ZDo+_t()|!n?HTGvSA^B|LUoz1y2Jd3p?*9o2 zlH>ABVJEUKy}m&n(tZ;(%zv5ORFFU)f2b~W9}q@U*?r^Oss9VaN!ApA^4<-ytJ5yL zp+4&iY&5eL{DJoLI>>lTKx{bDiAsq(uoES(WO@sn^uNq6R?e^UxsnzL<9`PB6;&xS-K)Az+ zcA}z3!&iGJ&*1KjbpUu9L^|4mTf@St*>GmDrTkvrdw;qHotM3cN^hdZ4ZW>x3dNp^ zpGzlbpCv^p)+pxgTQ^dPVcIHA0SZj9y#0etGYWTc8^MUs#w~wKMkdV3%849`0T&^}tDSuEwS)o&tFvU- zL=`7XbZ14u@4OWNb}|=ud^1E)BB0V`>ivb-(}m8D1trCAoqTzDudtxWu(27vdu+Vo znDQ_%`=P`=7LKnQAl7TPZZonHOpI>2{}@uAt>Cli`FBVE2Ip4Rhl!Dg8n5R*mHn(pz$p&#TAKUx(V_SBjz_AGr+}&F$+rFuTr<;cHQ2?;_**Cfcwl0px9cnUxZh^JI`@%Uj<-nQKw+f$HQlZwjQs%W;;)s-o zJ%eT`^BsCp`JpY|j@!LAvh%bRG0-W1aZpvPUWIHh7WSU8 z9pm5sjGr5z-K~IAim6@QL+2_rk;hoJEuH&^yKqj9AP3xQco@Lymn?+YfXL>NB^s~; zI`k(hIR|VCckw+QgHIKjsBFCjCtL`U7&z}r|X}hz@LJ@{y%?u(Qt%MV}u7K z^7Pnwug5bT5_99hDbuJ=L4Z0Vk56;SLgbgfP6FV&W4+YRgF1A}0rBv``dQJ7JYYr6 zh}|HNzA)l<-ZP*#h+b#(956k-#M|rcOz?GecBukFo2WSe?8Gy&m;N~mJif}jnK=*B#y$HZY`cl#~OAipkTbLDZ6FHqGNsv@X zda>LFNdE!$K>VY#(3*mnw6vhA{KsexoTOth@xdk2BXrlJPz!+qNA>A_?u*-}O1j7OKx49x7 zW9aa&ANFw};1laH;9fWinu z8MOxtR>ZeaO(zn3L3|Sfq%Wt9iJ1y=dTi^b4+IH}G86g86aZusOYal7hmEm-mSpat z^?wa@IS@Ih%Y^f}*7LWv2INy78{DXvTKPm8pPJy0!vCZ@;^6#=c%)wk;?jOYSc6Xw znN|m%_}e8HkZ1{iCiSb^x4z*~is)kvk`90+%IlFMP+o8nAGJq>;rdw)rAi1A$4+%` z5c3tc60XSGxvaP z(GJQ~{az&D-0Fp@p+*NL>F2EJxS$$metUpHIDM|BDY}B{DL&1~4#&8_E1sDnn z{FXCqeFM<6t|VgVH$ZrvWzC!_HZxzvIs5oS5yoe6{%a@=PJlAs$eFjg^0YMBg^j#C z#zBLysEnM%>-3$J<2`_wbgg_2{PGcHKAY#8pW|Fi3rt1NkwULtb6H<&UemF)nukkW zY;Pi`T;UTkyDsPgxZs^1_NmV!xyeVq6M8?<44fh^l@tq7E6L>~4T)b}!c`rZ#w=e# z%Dl~Q5*}E_+fa0(SI(kWJGA+1&Xr8b-Q&qXE$CT0Ddf%{NXVl&t6!v0I~*58FaBq$ zr~_>by~SNN+TU>E;3Ss~8p=kc4QwKvBA{Kz*~o1CtfIB}LZ&H!vPc z%UevTr#sR=m7-(x2+`eVRN#MJ^i;vbheXcOjJ|o&$Du$hIB+YkM>d_HU$PyncA)cL zg2kcYWT!6kg-GU^%N7M6xg}u1{>5GKsx#}UC z9>^u?XemC>$QG3*vt5@A(;uQ0In)F+yhrzcgM?ugI-tK7Jzj=*-oL&6g;{hS6%4dI z5xP{qL8Paa8kJ99>~RFwpU(@vj`?gSq4{g@9(|226h)|S!CY)9G6f2ckNunoXZ4aW~eQ-1Qn0gva7N% zBrGBnos(KDOzHcVc-Xa-Na{3h?&kz>$}`4ZjDEMiV6eS1^kffS^k3uHB6+KRrI1_w z*d9~@9XN*gsqWZ?*7J!E>?_!|0#4z>lSAf!!PV)p#;M1xa*D_ycl zcY#lLo~8|LZ?-7wno>z?wXBM`!h%I0P3Fc)K$!;EeN#PuQm(NaZRPSy|1t&Z7maVr z_Vh36Nf!grFV7!6WwwTx^cI2#RA9;Ewx@>2E6Aut%@3r?lfDYkah6_eIBgVR^a!cy zPr#OMKI|8D;yjyc0HAUp@wjZgiImXroUet13|tDaNGKsPhx7Wy*>whPUj>h0ETxc~R&{n#F$ zo1AL7WG_z$kWFUG!KSZ+2EKzv0^En1I{9#XsP=d)jJ~mwJ|lvUZwM%Ay(jSwP^hc>P$E7RZ#9- z+GiByJ7qgI_;itTFK${U-3D2IvPhc4J38_Oz6`lPe60w16bp*LC%AB04bJ;9D53_)9a z6qB!BEf8>su5!`!tr9UxyV0McRMD-ZE5f?6b2K$LB5rIVlK zI$0Qzov-0iBSfi{?`(CBDeoR>9)+T=#$VKf2!eR(y$F5Kqoz%`o@m4j5Ct&$VL)Qo5Fyx=UM)z zoNNPyueeBJ!zxPH+n#PL-4Dcj2(8Gt#1eiRU#1RwKEuNWMmFx)MU?{Jpco;=U@v;27PV`*BieQ!*h%JBq^9I&eft^c+=D0~zJ5?vGtypnx%iz;) z&X1}3h%IowuR3&$xyn=H`F*oxR>DF`bf1>(llrMpF7E)Z%}Uog8nz$9h;_m2-k-y< zNiReT-d=6H?dR6nN^4-zaUU770JUXV>csdB4yihTKmxQRN*|qgUi3Yt@;2Htmp{q+ z2fJ8uqV5&F0LhGS4y6KKD5B}Cj8esiu@LD?Ehkxhlkqv(u6nfdLi|au*X2HnjY(pC zNGTZP#1|4EmsL;qY#(sFw&9K2h5Y;&?GueOf7*QHMO>s)Kh*iegKr_1J#4pvZRf@> z!+-Q0f}Pr;-5E1KunrTy1iI?-H% zf^V>-!$4Q5q%T~`y+PPyf9S8w(fYkYk*OsD$q@mT-=l~<4KI?%Z!{-Jn=73ex_*PO zv5)XWT=;GNKj%Q_K>1PME&C-$<%k2LaBw&j>{0sZzgom6lgR4G*Tk2MOXp&S5rmv-2N=2l<1se%RY1I(6Kp zm|iL=`QJ;v9@whfT!8mUVN&LADiS+@fw zjxy%@B>St*@`Y)|1H>BB>-okU|?jN z=>r@BTCSy^r`Y&f;UV&RlJ!`T@2|5z8hve^(`4G7cWGEm>k>r98gfO>*5uPq#mF00 z?#+uP*|mhu5O>F$d^b(hN`!?SHHav!M@X^4T(w!Xr|R=O(r;ghXU}NzFEkCr(6nHt zC#70csPTZBmZ2z@%Un_!siB=|^FGsj6`63QPC0mV@3SDd0jyK3n{)xExl(kyP{)>YAV2Iy-8}21s(% zjDqofelI)tYlq?xR@JlaBF+tLLC%$*@ZRdT@!(Qrf>{%*gEY@IeX@Onkoplropaje zLK~j0TE!I=O-ye+{qFED$393OB=ynL>}RsT$!E3GcBL>_?`?~>&1g_Y-x~zE+Z&{D zR?72M8w*RH8w-y&;1u0|-dt1u;8M-rlFUOvTX>0x#E3|y18(~B zKis}x?PcbD`MNm@_8K}PE}V@F+RB&Y$P!B+4b$&DPLtr^PKgJYA&CCM{eIH{!_q`0 zgZTrLBtv-rGqRC|Ad<2^4tZug_Jxiw9hA&CRe@kIgsIJbV<8?gUDa8ZAv%%vaj?*l z88xZ;mO51(gGXb9m(y=_q88GiyqG;NkF!>%9M1y)P$}YDd z7^%zw8n<=!TNfYO<5snc&}+u^XQRx;{^Le-%S^t9XodG!4@64V&uCr!Zt~ZH=oja| z3lMXZbRtr`cQw=XJrC;qBln~|aSzy^Pj8QW17%l9jw~AKcGgShY*trUmG1z|VcDpt z)(}$5M6u=~3J$_M!!eqmLuLh1z2U@cHrBQnel(X(F9k{0vsS^tRR$020UB7_x zA^W(Empj~j>!cw;t=0?o&uDK-*3#Rvew?wlF7E!CT=^0?3~e%gyuH;s+zek!uOCtg z3_cCRt)+`^Ytcr>&m8~#&K)pjueOuNts9J3)MLf;k0SOJm zRZ6{Nv7X@K!%7Tp&^jAGt?UPW3Ob&e`j!{Aumm2Dg6f=Iqd)ajmNps=1!T1t8Euy9 z1RcyavBLHq!QG8XP;^#xKAs1m?t{(;_nms=KzZof@9<38;|m`XwYOEr4hf06n#P2F zw}QLq*47uC|1PBsh#}>|i)H@yC>sPhP1o^TNy#t1{v&~WsYl`)5NIn7Lt?%*VfqzE)W257|vzPSy zr4QregbrvkBjY49D&gmE;q*k%5ZgD_QN3@fRdJnaO0VlB3|fL`N>zfFgwvI333f?^ zvKm%)|N1Tdlr`Ni{bXCMDfDT)YDO?MC)GTKjGx`T!}yD)1kU!sr8Su%U?|&pSVOBm zc_n4CNT1*Yy5jkJyI*=bZyRfVu9Mz1bg!#ft>lFrKBOS90E5@6E0|8mzF*bul^ERo z$o`3+rIqR(?)(A7g_`!;M3@s}*k5u4l`d|hf$!ZJqS)*|8~bQwQx2p!Y&n$KQg-*; zH-R#A81iikp4VGuHPp|SKYFOT-SWH}UvMTSQ|d(MWTnE7zn~yf?sb%5>bwr(5#dwv zc5s(NR3`-K%gMkL2l1snVN{xZ`62S|oxLKRp&C{&Q6jM9DYx9uNr7D-tJ!CXC<(+6 z3?-=vo*Q&Ym#NUjXXC*=(COTltp56$%7di!o_8W?z~uIf9} zw3GIh`bKaBXt{9scg8zKkEbm?ju_~m%9^5YYDj}WvGn~)P^KPHwx_u|p`k)l0oU;p zc3}9DL|BM-Lew{mLFgXY`&hpnGZh4(iiPxdcFpZ{cc zTl+KRv+G7xrc|ql+GKP0n9qc8aR9iq7;{SP@wioN^PtSOxr6fBV&5dK?CRu|(xI^8 zc7u5D+jI3%Lo->7Dd~vZ2l=WQ=}3pkE020{9!j_j=sVF8)5(+_ttjE`PI$8-eqw*H z8D8Rjo%teU*OGS9fyIm5SBlFYw%y0ZJ{BplI|RuXq~c6Bxfc`$G}{j_U-PK?Nwo-MQ^ zmd4WpX`MaKXI6e^^7I~G_etu=zh<=tZ`A7 ztt<76CD#af<)R?cmd~BF;}iD|9|?7N>s_P4XIGstTWEP*VrCFeG$5_`33sSb&66^4 zt8$bjx& za_#I&x_CkcI)A_jBZiu**poOiJU(e-4w8=AbF;E}yDw9ZvPX4Q=Oj)pbaBB& zIIJ%x?vt~b-qvU4W4M*FMNx7rvj3ko84GTn!@IP;3RQG`IGtTn)YkEp&uwfa9zhOC zmqo{aB6~|DuQMC_oVy+##bsv9H5;H%6utOMwjZt<#+hh*S=}Umo!^G#&5P7I!;W~! zcSUz8&NGTK8$NC$Yr@6DFK=BefYH($T5OK|^YZGXP#g2FUJMFXoG2tJxRow*Cm*5PI>kT;?xWlq2IoUqlpbUw`OAz}otfTpm z)RV!RUqA~|9kgkpF}kPWTR2HTopm8sJEQzG!cw!wxKikIy~^TH$7kFN_ry>4D^*rD zrs=IGj=tD2L$LCiRZGW2YiDo=U>T*{Es}u(stDKlVtSnslA`&}9Wimw8tYWhdPpJ6 zq*h|y)5tiM^yDY2D~y~?+d`*cM@Qg^#`$uYCI%8L(Nyo*=|+#)K-)CjkECO#LV_2A z5hQ#+j(T{+HhlynIw%r;1Wl=_X4Z6WW>it9x=z#3r9IXM5SR7Fmnbss4Go>>CYop% zb61n%Ls(Qe$$i@YpT2u8EwZ4GcU!h%^N|GnJ9Vqr?SJzY(rYr7AnQm_MT7?HnFUeH z09d95McS(ZrNGCw4f@*a7mIH>S@NwfKT!)%Jtud#JAKk43nq97wnD5S`i2?nGlfLWp_7@&+%R+C zqvVbbPP`F@GH;eBkv_DiyYmJ3`TSYMxe$*-jj_wxd28QLpM$t|yOv*YwTJZ5ml~JC zW{xxXyq^ALwB3E296qFNOK_LE^EhC1*PwLT=ak+9X`h=t8Ma$Gd*1b@BmDznIqN1q z4uLMyOP98N#LYr$o3#$FdD-5mb~(Nit$>_mzQBuR-g|))f*6QsQ zqVp?Kqdy6J|7ox~_dL6EtNf-wK)csDJqSE#Ek>cl<;aBzbayu=?)*xvDUCZ)c;EgG zm54XRSwEEx-lC_l)-L&?pM0!k#*Iig^f>8lexf!P6x$Q43RPmJixT2F@BaptdaJ*7)93LugxYtl{A}inf|? zz@n$4%P0tjH(A@|C)~`=P_Qz-Df+j_C6judUCGV8r|=5>b05VIlE zJszr5LLpW&4OkUk`&Js3nmdUN;Rv&G!degRB{d08lSA~^uG5w*qEK!Qv)sc>Bq%4M zNu=l!O|9Q^St$nS5FZF4c;c%Zqn8L@NP&BgNgZ zJK8<6$~L`=jEe?ayfy`w>@Q=cCj?ESQs+Zz)u7K#8#0 zKAiC%uW?*W-sRge1G7&LtP&ZXH!3AG*Wp!Gp&r2cDcZ6o>25qZ&h*C3VizF(&%WsG5gSXFLaQQ;fY-7Zi~OpHpnTy zcv-j959|vn1(kXw1%G4u$S^N3jXYg+jSAvZaXEdIMg$##zQt9Kf#5Ue?W)%eT--^) zcv^pr$s+gE&q`I4))92vKaF=o5D(U`HXt{tBz-NPi2fQ2D(!p&Re7YE#*39kVgS!U zzK-XDgURapO84;C8Q`CMW!+lJe0-CC>uANTv8bNaDuLA#X)M+aWQUN+#LjI74qMq0 zRL9%KKZf!S@h2-_GjlNO%QT)hL#p<-tz%h8I$+Szpm(ifE)k1PCVtk9`DN9&$}7#dVJx(DNlm` z)sFaI!T&YSpN{muPVv7n^S_zmR}1`aDE!}{kczco-2am^&9`Sb8|$&I*1OAU=O3y%x};c)unc+-7eZPnMXomA&(%GIME|MPPWU#qC^xgENQ0oJ z#mWdFWgvCVc0V_A0b?yMD4_n7`Vn$q3j#?mC<&!(EKI|ibQj!Yu;-pNFLPQ7wQ9B> ziSHq*vnai}p4;~SX}_N)lMOdH{UlMY4fsJArhc{867k8Gb;SEB^T Date: Tue, 25 Jun 2024 12:57:56 -0400 Subject: [PATCH 43/99] Changes to device encryption --- .../data-protection/bitlocker/index.md | 5 +++-- .../data-protection/bitlocker/preboot-recovery-screen.md | 2 +- 2 files changed, 4 insertions(+), 3 deletions(-) diff --git a/windows/security/operating-system-security/data-protection/bitlocker/index.md b/windows/security/operating-system-security/data-protection/bitlocker/index.md index e9e9e7bdb7..8279aa6322 100644 --- a/windows/security/operating-system-security/data-protection/bitlocker/index.md +++ b/windows/security/operating-system-security/data-protection/bitlocker/index.md @@ -85,10 +85,11 @@ BitLocker has the following requirements: ## Device encryption -*Device encryption* is a Windows feature that provides a simple way for some devices to enable BitLocker encryption automatically. Device encryption is available on all Windows versions, and it requires a device to meet either [Modern Standby][WIN-3] or HSTI security requirements. Device encryption can't have externally accessible ports that allow DMA access. +*Device encryption* is a Windows feature that provides a simple way for some devices to enable BitLocker encryption automatically. Device encryption is available on all Windows versions, and it requires a device to meet either [Modern Standby][WIN-3] or HSTI security requirements. Device encryption can't have externally accessible ports that allow DMA access. Device encryption encrypts only the OS drive and fixed drives, it doesn't encrypt external/USB drives. > [!IMPORTANT] -> Device encryption encrypts only the OS drive and fixed drives, it doesn't encrypt external/USB drives. +> Starting in Windows 11, version 24H2, the prerequisites of DMA and HSTI/Modern Standby are removed. As a result, more devices are eligible for device encryption. +> For more information, see [BitLocker drive encryption in Windows 11 for OEMs](/windows-hardware/design/device-experiences/oem-bitlocker). Unlike a standard BitLocker implementation, device encryption is enabled automatically so that the device is always protected. When a clean installation of Windows is completed and the out-of-box experience is finished, the device is prepared for first use. As part of this preparation, device encryption is initialized on the OS drive and fixed data drives on the computer with a clear key that is the equivalent of standard BitLocker suspended state. In this state, the drive is shown with a warning icon in Windows Explorer. The yellow warning icon is removed after the TPM protector is created and the recovery key is backed up. diff --git a/windows/security/operating-system-security/data-protection/bitlocker/preboot-recovery-screen.md b/windows/security/operating-system-security/data-protection/bitlocker/preboot-recovery-screen.md index 19322dea8b..30c8682448 100644 --- a/windows/security/operating-system-security/data-protection/bitlocker/preboot-recovery-screen.md +++ b/windows/security/operating-system-security/data-protection/bitlocker/preboot-recovery-screen.md @@ -103,7 +103,7 @@ There are rules governing which hint is shown during the recovery (in the order :::row-end::: :::row::: :::column span="2"::: - Starting in Windows 11, version 24H2, the BitLocker preboot recovery screen includes the Microsoft account hint if the recovery password is saved to a Microsoft account. + Starting in Windows 11, version 24H2, the BitLocker preboot recovery screen includes the Microsoft account (MSA) hint, if the recovery password is saved to a MSA. This hint helps the user to understand which MSA account was used to store recovery key information. :::column-end::: :::column span="2"::: :::image type="content" source="images/bitlocker-recovery-screen-msa-backup-24h2.png" alt-text="Screenshot of the BitLocker recovery screen showing a Microsoft account hint where the BitLocker recovery key was saved." lightbox="images/bitlocker-recovery-screen-msa-backup-24h2.png" border="false"::: From 3caf2b137afc8be1615b51296263eb67aa356168 Mon Sep 17 00:00:00 2001 From: Paolo Matarazzo <74918781+paolomatarazzo@users.noreply.github.com> Date: Tue, 25 Jun 2024 13:01:21 -0400 Subject: [PATCH 44/99] fixed typo --- .../data-protection/bitlocker/preboot-recovery-screen.md | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/windows/security/operating-system-security/data-protection/bitlocker/preboot-recovery-screen.md b/windows/security/operating-system-security/data-protection/bitlocker/preboot-recovery-screen.md index 30c8682448..d6543ba40d 100644 --- a/windows/security/operating-system-security/data-protection/bitlocker/preboot-recovery-screen.md +++ b/windows/security/operating-system-security/data-protection/bitlocker/preboot-recovery-screen.md @@ -103,7 +103,7 @@ There are rules governing which hint is shown during the recovery (in the order :::row-end::: :::row::: :::column span="2"::: - Starting in Windows 11, version 24H2, the BitLocker preboot recovery screen includes the Microsoft account (MSA) hint, if the recovery password is saved to a MSA. This hint helps the user to understand which MSA account was used to store recovery key information. + Starting in Windows 11, version 24H2, the BitLocker preboot recovery screen includes the Microsoft account (MSA) hint, if the recovery password is saved to an MSA. This hint helps the user to understand which MSA account was used to store recovery key information. :::column-end::: :::column span="2"::: :::image type="content" source="images/bitlocker-recovery-screen-msa-backup-24h2.png" alt-text="Screenshot of the BitLocker recovery screen showing a Microsoft account hint where the BitLocker recovery key was saved." lightbox="images/bitlocker-recovery-screen-msa-backup-24h2.png" border="false"::: From 41a9d197133c240dbb9ed24898ffed1483c7bee1 Mon Sep 17 00:00:00 2001 From: Paolo Matarazzo <74918781+paolomatarazzo@users.noreply.github.com> Date: Tue, 25 Jun 2024 13:09:40 -0400 Subject: [PATCH 45/99] removed duplicated paragraph --- .../data-protection/bitlocker/preboot-recovery-screen.md | 1 - 1 file changed, 1 deletion(-) diff --git a/windows/security/operating-system-security/data-protection/bitlocker/preboot-recovery-screen.md b/windows/security/operating-system-security/data-protection/bitlocker/preboot-recovery-screen.md index d6543ba40d..f3bf57adf0 100644 --- a/windows/security/operating-system-security/data-protection/bitlocker/preboot-recovery-screen.md +++ b/windows/security/operating-system-security/data-protection/bitlocker/preboot-recovery-screen.md @@ -95,7 +95,6 @@ There are rules governing which hint is shown during the recovery (in the order **Result:** the hints for the custom URL and the Microsoft account (**https://aka.ms/myrecoverykey**) are displayed. - Starting in Windows 11, version 24H2, the BitLocker preboot recovery screen includes the Microsoft account hint if the recovery password is saved to a Microsoft account. :::column-end::: :::column span="2"::: :::image type="content" source="images/preboot-recovery-custom-url-single-backup.png" alt-text="Screenshot of the BitLocker recovery screen showing a custom URL and the hint where the BitLocker recovery key was saved." lightbox="images/preboot-recovery-custom-url-single-backup.png" border="false"::: From 557ca67626f9ad401b22011f4c55bd35c28ffdab Mon Sep 17 00:00:00 2001 From: Paolo Matarazzo <74918781+paolomatarazzo@users.noreply.github.com> Date: Tue, 25 Jun 2024 13:18:00 -0400 Subject: [PATCH 46/99] updates --- .../data-protection/bitlocker/index.md | 2 +- .../data-protection/bitlocker/preboot-recovery-screen.md | 1 - 2 files changed, 1 insertion(+), 2 deletions(-) diff --git a/windows/security/operating-system-security/data-protection/bitlocker/index.md b/windows/security/operating-system-security/data-protection/bitlocker/index.md index 8279aa6322..69d9822b91 100644 --- a/windows/security/operating-system-security/data-protection/bitlocker/index.md +++ b/windows/security/operating-system-security/data-protection/bitlocker/index.md @@ -88,7 +88,7 @@ BitLocker has the following requirements: *Device encryption* is a Windows feature that provides a simple way for some devices to enable BitLocker encryption automatically. Device encryption is available on all Windows versions, and it requires a device to meet either [Modern Standby][WIN-3] or HSTI security requirements. Device encryption can't have externally accessible ports that allow DMA access. Device encryption encrypts only the OS drive and fixed drives, it doesn't encrypt external/USB drives. > [!IMPORTANT] -> Starting in Windows 11, version 24H2, the prerequisites of DMA and HSTI/Modern Standby are removed. As a result, more devices are eligible for device encryption. +> Starting in Windows 11, version 24H2, the prerequisites of DMA and HSTI/Modern Standby are removed. As a result, more devices are eligible for automatic and manual device encryption. > For more information, see [BitLocker drive encryption in Windows 11 for OEMs](/windows-hardware/design/device-experiences/oem-bitlocker). Unlike a standard BitLocker implementation, device encryption is enabled automatically so that the device is always protected. When a clean installation of Windows is completed and the out-of-box experience is finished, the device is prepared for first use. As part of this preparation, device encryption is initialized on the OS drive and fixed data drives on the computer with a clear key that is the equivalent of standard BitLocker suspended state. In this state, the drive is shown with a warning icon in Windows Explorer. The yellow warning icon is removed after the TPM protector is created and the recovery key is backed up. diff --git a/windows/security/operating-system-security/data-protection/bitlocker/preboot-recovery-screen.md b/windows/security/operating-system-security/data-protection/bitlocker/preboot-recovery-screen.md index f3bf57adf0..aaadd7678e 100644 --- a/windows/security/operating-system-security/data-protection/bitlocker/preboot-recovery-screen.md +++ b/windows/security/operating-system-security/data-protection/bitlocker/preboot-recovery-screen.md @@ -94,7 +94,6 @@ There are rules governing which hint is shown during the recovery (in the order - not saved to a file **Result:** the hints for the custom URL and the Microsoft account (**https://aka.ms/myrecoverykey**) are displayed. - :::column-end::: :::column span="2"::: :::image type="content" source="images/preboot-recovery-custom-url-single-backup.png" alt-text="Screenshot of the BitLocker recovery screen showing a custom URL and the hint where the BitLocker recovery key was saved." lightbox="images/preboot-recovery-custom-url-single-backup.png" border="false"::: From 3527da742c6430c49c46880a310e33a50947c812 Mon Sep 17 00:00:00 2001 From: Aaron Czechowski Date: Tue, 25 Jun 2024 11:17:18 -0700 Subject: [PATCH 47/99] add metadata block --- .../updatemanagedvsupdateunmanageddevices.md | 17 ++++++++++++++++- 1 file changed, 16 insertions(+), 1 deletion(-) diff --git a/windows/deployment/update/updatemanagedvsupdateunmanageddevices.md b/windows/deployment/update/updatemanagedvsupdateunmanageddevices.md index 9bc4dee63b..1602ebfce6 100644 --- a/windows/deployment/update/updatemanagedvsupdateunmanageddevices.md +++ b/windows/deployment/update/updatemanagedvsupdateunmanageddevices.md @@ -1,4 +1,19 @@ - +--- +title: IT managed versus unmanaged devices +description: This article provides clarity on the terminology and practices involved in managing Windows updates for both managed and unmanaged devices. +ms.service: windows-client +ms.subservice: itpro-updates +ms.topic: overview +author: mikolding +ms.author: v-mikolding +ms.reviewer: mstewart,thtrombl,v-fvalentyna,arcarley +manager: aaroncz +ms.localizationpriority: medium +appliesto: +- ✅ Windows 11 +- ✅ Windows 10 +- ms.date: 06/25/2024 +--- # Managing Windows Updates: IT Managed vs. Unmanaged Devices From a56816ad644bfba1b7934af992409da9ff9aee00 Mon Sep 17 00:00:00 2001 From: Aaron Czechowski Date: Tue, 25 Jun 2024 11:28:05 -0700 Subject: [PATCH 48/99] review revisions --- windows/deployment/TOC.yml | 8 ++++---- ...es.md => update-managed-unmanaged-devices.md} | 16 +++++----------- 2 files changed, 9 insertions(+), 15 deletions(-) rename windows/deployment/update/{updatemanagedvsupdateunmanageddevices.md => update-managed-unmanaged-devices.md} (66%) diff --git a/windows/deployment/TOC.yml b/windows/deployment/TOC.yml index 5daf2b7ae1..f4b74cbd1b 100644 --- a/windows/deployment/TOC.yml +++ b/windows/deployment/TOC.yml @@ -13,8 +13,8 @@ href: update/release-cycle.md - name: Basics of Windows updates, channels, and tools href: update/get-started-updates-channels-tools.md - - name: Defining Windows Update managed and Windows Update unmanaged devices - href: ./update/updatemanagedvsupdateunmanageddevices.md + - name: Defining Windows update managed devices + href: update/update-managed-unmanaged-devices.md - name: Prepare servicing strategy for Windows client updates href: update/waas-servicing-strategy-windows-10-updates.md - name: Deployment proof of concept @@ -115,7 +115,7 @@ - name: Deploy updates with Group Policy href: update/waas-wufb-group-policy.md - name: Deploy updates using CSPs and MDM - href: update/waas-wufb-csp-mdm.md + href: update/waas-wufb-csp-mdm.md - name: Update Windows client media with Dynamic Update href: update/media-dynamic-update.md - name: Migrating and acquiring optional Windows content @@ -379,7 +379,7 @@ - name: Delivery Optimization reference href: do/waas-delivery-optimization-reference.md?toc=/windows/deployment/toc.json&bc=/windows/deployment/breadcrumb/toc.json - name: FoD and language packs for WSUS and Configuration Manager - href: update/fod-and-lang-packs.md + href: update/fod-and-lang-packs.md - name: Windows client in S mode href: s-mode.md - name: Switch to Windows client Pro or Enterprise from S mode diff --git a/windows/deployment/update/updatemanagedvsupdateunmanageddevices.md b/windows/deployment/update/update-managed-unmanaged-devices.md similarity index 66% rename from windows/deployment/update/updatemanagedvsupdateunmanageddevices.md rename to windows/deployment/update/update-managed-unmanaged-devices.md index 997d298f9a..56e94bb220 100644 --- a/windows/deployment/update/updatemanagedvsupdateunmanageddevices.md +++ b/windows/deployment/update/update-managed-unmanaged-devices.md @@ -1,5 +1,5 @@ --- -title: IT managed versus unmanaged devices +title: Defining Windows update managed devices description: This article provides clarity on the terminology and practices involved in managing Windows updates for both managed and unmanaged devices. ms.service: windows-client ms.subservice: itpro-updates @@ -15,7 +15,7 @@ appliesto: - ms.date: 06/25/2024 --- -# Managing Windows updates: IT managed vs. unmanaged devices +# Defining Windows update managed devices As an IT administrator, understanding the differences between managed and unmanaged devices is crucial for effective Windows update management. This article provides clarity on the terminology and practices involved in managing Windows updates for both types of devices. @@ -34,13 +34,13 @@ Devices are considered Windows update-managed if you manage the update offering - You configure policies to manage which updates are offered to the specific device. - You set when your organization should receive feature, quality, and driver updates, among others. -- You use [Group Policy (GPO)](https://learn.microsoft.com/windows/deployment/update/waas-wufb-group-policy), [Cloud Solution Provider (CSP)](https://learn.microsoft.com/windows/client-management/mdm/policy-csp-update#update-allowupdateservice), or [Microsoft Graph](https://learn.microsoft.com/windows/deployment/update/deployment-service-overview) to configure these offerings. +- You use [Group Policy (GPO)](/windows/deployment/update/waas-wufb-group-policy), [Cloud Solution Provider (CSP)](/windows/client-management/mdm/policy-csp-update#update-allowupdateservice), or [Microsoft Graph](/windows/deployment/update/deployment-service-overview) to configure these offerings. ### IT-managed: Windows update experience Devices are considered Windows update-managed if you use policies (GP, CSP, or Microsoft Graph) to manage device behavior when taking Windows updates. -Examples of controllable device behavior include active hours, update grace periods and deadlines, update notifications, update scheduling, and more. Consult the complete list at [Update Policy CSP - Windows Client Management](https://docs.microsoft.com/windows/client-management/mdm/policy-csp-update). +Examples of controllable device behavior include active hours, update grace periods and deadlines, update notifications, update scheduling, and more. Consult the complete list at [Update Policy CSP - Windows Client Management](/windows/client-management/mdm/policy-csp-update). ## Examples of update-managed Windows devices @@ -68,10 +68,4 @@ Examples of update-unmanaged devices include: - **BYOD devices not enrolled in management programs:** Devices used for work but not part of an organizational BYOD program. - **Peripheral devices:** Devices like printers, IP phones, and uninterruptible power supplies (UPS) that cannot accept centrally managed administrative credentials. -For more information on managed and unmanaged devices, check out [Secure managed and unmanaged devices](https://docs.microsoft.com/mem/intune/protect/protect-devices). - -## Recommendations - -| SEO Keywords | Suggested Additions | Links to Update | Issues/Concerns | -|-----------------------------------------------------------------------------------------------------------|--------------------------------------------------------------------------------------|------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------|--------------------------------------------------------------------| -| Windows update management, IT managed devices, unmanaged devices, Windows updates, Intune managed devices | Add detailed steps for configuring GPO, CSP, and Graph policies for managing updates | [Update Policy CSP - Windows Client Management](https://docs.microsoft.com/windows/client-management/mdm/policy-csp-update), [Secure managed and unmanaged devices](https://docs.microsoft.com/mem/intune/protect/protect-devices) | Ensure all links are up to date and point to the correct resources | +For more information on managed and unmanaged devices, see [Secure managed and unmanaged devices](/microsoft-365/business-premium/m365bp-managed-unmanaged-devices). From ce147ee70031fdc419cee1dd8ae8d05fa94b64b4 Mon Sep 17 00:00:00 2001 From: Aaron Czechowski Date: Tue, 25 Jun 2024 11:36:31 -0700 Subject: [PATCH 49/99] fix from review --- windows/deployment/TOC.yml | 2 +- .../deployment/update/update-managed-unmanaged-devices.md | 6 +++--- 2 files changed, 4 insertions(+), 4 deletions(-) diff --git a/windows/deployment/TOC.yml b/windows/deployment/TOC.yml index f4b74cbd1b..ce71f48060 100644 --- a/windows/deployment/TOC.yml +++ b/windows/deployment/TOC.yml @@ -13,7 +13,7 @@ href: update/release-cycle.md - name: Basics of Windows updates, channels, and tools href: update/get-started-updates-channels-tools.md - - name: Defining Windows update managed devices + - name: Defining Windows update-managed devices href: update/update-managed-unmanaged-devices.md - name: Prepare servicing strategy for Windows client updates href: update/waas-servicing-strategy-windows-10-updates.md diff --git a/windows/deployment/update/update-managed-unmanaged-devices.md b/windows/deployment/update/update-managed-unmanaged-devices.md index 56e94bb220..cb25564137 100644 --- a/windows/deployment/update/update-managed-unmanaged-devices.md +++ b/windows/deployment/update/update-managed-unmanaged-devices.md @@ -1,9 +1,10 @@ --- -title: Defining Windows update managed devices +title: Defining Windows update-managed devices description: This article provides clarity on the terminology and practices involved in managing Windows updates for both managed and unmanaged devices. ms.service: windows-client ms.subservice: itpro-updates ms.topic: overview +ms.date: 06/25/2024 author: mikolding ms.author: v-mikolding ms.reviewer: mstewart,thtrombl,v-fvalentyna,arcarley @@ -12,10 +13,9 @@ ms.localizationpriority: medium appliesto: - ✅ Windows 11 - ✅ Windows 10 -- ms.date: 06/25/2024 --- -# Defining Windows update managed devices +# Defining Windows update-managed devices As an IT administrator, understanding the differences between managed and unmanaged devices is crucial for effective Windows update management. This article provides clarity on the terminology and practices involved in managing Windows updates for both types of devices. From 73bb50772e7799727094789cd0c031f50062ac22 Mon Sep 17 00:00:00 2001 From: Aaron Czechowski Date: Tue, 25 Jun 2024 12:02:44 -0700 Subject: [PATCH 50/99] Acrolinx --- .../update-managed-unmanaged-devices.md | 22 +++++++++---------- 1 file changed, 11 insertions(+), 11 deletions(-) diff --git a/windows/deployment/update/update-managed-unmanaged-devices.md b/windows/deployment/update/update-managed-unmanaged-devices.md index cb25564137..3f495f601a 100644 --- a/windows/deployment/update/update-managed-unmanaged-devices.md +++ b/windows/deployment/update/update-managed-unmanaged-devices.md @@ -21,10 +21,10 @@ As an IT administrator, understanding the differences between managed and unmana ## What are update-managed Windows devices? -Update-managed devices are those where an IT administrator or organization controls Windows updates through a management tool (such as Microsoft Intune) or by directly setting policies. This includes group policy (GPO), Configuration Service Provider (CSP) policy, or Microsoft Graph. +Update-managed devices are those where an IT administrator or organization controls Windows updates through a management tool, such as Microsoft Intune, or by directly setting policies. You can directly set policies with group policy objects (GPO), configuration service provider (CSP) policies, or Microsoft Graph. > [!NOTE] -> This is true even if you directly set registry keys. However, we don't recommended doing this because registry keys can be easily overwritten. +> This definition is true even if you directly set registry keys. However, we don't recommended doing this action because registry keys can be easily overwritten. Managed devices can include desktops, laptops, tablets, servers, and manufacturing equipment. These devices are secured and configured according to your organization's standards and policies. @@ -34,13 +34,13 @@ Devices are considered Windows update-managed if you manage the update offering - You configure policies to manage which updates are offered to the specific device. - You set when your organization should receive feature, quality, and driver updates, among others. -- You use [Group Policy (GPO)](/windows/deployment/update/waas-wufb-group-policy), [Cloud Solution Provider (CSP)](/windows/client-management/mdm/policy-csp-update#update-allowupdateservice), or [Microsoft Graph](/windows/deployment/update/deployment-service-overview) to configure these offerings. +- You use [group policy objects (GPO)](/windows/deployment/update/waas-wufb-group-policy), [configuration service provider (CSP)](/windows/client-management/mdm/policy-csp-update#update-allowupdateservice), or [Microsoft Graph](/windows/deployment/update/deployment-service-overview) to configure these offerings. ### IT-managed: Windows update experience -Devices are considered Windows update-managed if you use policies (GP, CSP, or Microsoft Graph) to manage device behavior when taking Windows updates. +Devices are considered Windows update-managed if you use policies (GPO, CSP, or Microsoft Graph) to manage device behavior when taking Windows updates. -Examples of controllable device behavior include active hours, update grace periods and deadlines, update notifications, update scheduling, and more. Consult the complete list at [Update Policy CSP - Windows Client Management](/windows/client-management/mdm/policy-csp-update). +Examples of controllable device behavior include active hours, update grace periods and deadlines, update notifications, update scheduling, and more. Consult the complete list at [Update Policy CSP](/windows/client-management/mdm/policy-csp-update). ## Examples of update-managed Windows devices @@ -51,21 +51,21 @@ Here are a few examples of update-managed devices: - **Devices provisioned through Windows Autopilot:** Devices that are set up and preconfigured to be business-ready right out of the box. - **Mandated security settings:** Devices with health requirements such as device encryption, PIN or strong password, specific inactivity timeout periods, and up-to-date operating systems. - **Intune-enrolled devices:** Devices enrolled in Microsoft Intune for network access and enforced security policies. -- **Third-party managed devices:** Devices enrolled in third-party management tools with configured Windows update policies via GPO, CSP, or registry key. +- **Third-party managed devices:** Devices enrolled in non-Microsoft management tools with configured Windows update policies via GPO, CSP, or registry key. ## What are update-unmanaged Windows devices? -Unlike update-managed devices, unmanaged devices are not controlled through policies, management tools, or software. These devices aren't enrolled in tools like Microsoft Intune or Configuration Manager. If you only configure the Settings page to control overall device behavior when taking updates, it is considered an unmanaged device. +Unlike update-managed devices, unmanaged devices aren't controlled through policies, management tools, or software. These devices aren't enrolled in tools like Microsoft Intune or Configuration Manager. If you only configure the Settings page to control overall device behavior when taking updates, it's considered an unmanaged device. -> [!Note] +> [!NOTE] > The term "Microsoft managed devices" used to refer to what we now call "update unmanaged Windows devices." Based on feedback, we have updated our terminology for clarity. ## Examples of update-unmanaged Windows devices Examples of update-unmanaged devices include: -- **Personal devices:** Devices owned by individuals at your organization that are not enrolled in any corporate management system. -- **BYOD devices not enrolled in management programs:** Devices used for work but not part of an organizational BYOD program. -- **Peripheral devices:** Devices like printers, IP phones, and uninterruptible power supplies (UPS) that cannot accept centrally managed administrative credentials. +- **Personal devices:** Devices owned by individuals at your organization that aren't enrolled in any corporate management system. +- **BYOD devices not enrolled in management programs:** Devices used for work but not part of an organizational bring your own device (BYOD) program. +- **Peripheral devices:** Devices like printers, IP phones, and uninterruptible power supplies (UPS) that can't accept centrally managed administrative credentials. For more information on managed and unmanaged devices, see [Secure managed and unmanaged devices](/microsoft-365/business-premium/m365bp-managed-unmanaged-devices). From 831739d954ee6e0ff8ad8bbde34ede015c5d4340 Mon Sep 17 00:00:00 2001 From: "Daniel H. Brown" <32883970+DHB-MSFT@users.noreply.github.com> Date: Tue, 25 Jun 2024 17:08:49 -0700 Subject: [PATCH 51/99] Change format of reference to Disabled setting --- ...windows-operating-system-components-to-microsoft-services.md | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/windows/privacy/manage-connections-from-windows-operating-system-components-to-microsoft-services.md b/windows/privacy/manage-connections-from-windows-operating-system-components-to-microsoft-services.md index 8d8aa99a85..5618158898 100644 --- a/windows/privacy/manage-connections-from-windows-operating-system-components-to-microsoft-services.md +++ b/windows/privacy/manage-connections-from-windows-operating-system-components-to-microsoft-services.md @@ -1607,7 +1607,7 @@ You can disable Teredo by using Group Policy or by using the netsh.exe command. -or- -- Create a new REG_SZ registry setting named **Teredo_State** in **HKEY_LOCAL_MACHINE\\SOFTWARE\\Policies\\Microsoft\\Windows\\TCPIP\\v6Transition** with a value of **Disabled**. +- Create a new REG_SZ registry setting named **Teredo_State** in **HKEY_LOCAL_MACHINE\\SOFTWARE\\Policies\\Microsoft\\Windows\\TCPIP\\v6Transition** with a value of `Disabled`. ### 23. Wi-Fi Sense From 2663184779575abf9fad55f96b7a536d3c55dd96 Mon Sep 17 00:00:00 2001 From: Scott Breen <39719539+scottbreenmsft@users.noreply.github.com> Date: Wed, 26 Jun 2024 15:13:57 +1000 Subject: [PATCH 52/99] Update change-home-to-edu.md Removing references to Kivuto --- education/windows/change-home-to-edu.md | 12 +----------- 1 file changed, 1 insertion(+), 11 deletions(-) diff --git a/education/windows/change-home-to-edu.md b/education/windows/change-home-to-edu.md index 042df87a74..46b42c1194 100644 --- a/education/windows/change-home-to-edu.md +++ b/education/windows/change-home-to-edu.md @@ -21,12 +21,11 @@ Customers with qualifying subscriptions can upgrade student-owned and institutio > [!NOTE] > To be qualified for this process, customers must have a Windows Education subscription that includes the student use benefit and must have access to the Volume Licensing Service Center (VLSC) or the Microsoft 365 Admin Center. -IT admins can upgrade student devices using a multiple activation key (MAK) manually or through Mobile Device Management (MDM). Alternatively, IT admins can set up a portal through [Kivuto OnTheHub](http://onthehub.com) where students can request a *Windows Pro Education* product key. The following table provides the recommended method depending on the scenario. +IT admins can upgrade student devices using a multiple activation key (MAK) manually or through Mobile Device Management (MDM). The following table provides the recommended method depending on the scenario. | Method | Product key source | Device ownership | Best for | |-|-|-|-| | MDM | VLSC | Personal (student-owned) | IT admin initiated via MDM | -| Kivuto | Kivuto | Personal (student-owned) | Initiated on device by student, parent, or guardian | | Provisioning package | VLSC | Personal (student-owned) or Corporate (institution-owned) | IT admin initiated at first boot | These methods apply to devices with *Windows Home* installed; institution-owned devices can be upgraded from *Windows Professional* or *Windows Pro Edu* to *Windows Education* or *Windows Enterprise* using [Windows 10/11 Subscription Activation](/windows/deployment/windows-10-subscription-activation). @@ -80,13 +79,6 @@ For a full list of methods to perform a Windows edition upgrade and more details After upgrading from *Windows Home* to *Windows Education* there are some considerations for what happens during downgrade, reset or reinstall of the operating system. -The following table highlights the differences by upgrade product key type: - -| Product Key Type | Downgrade (in-place) | Reset | Student reinstall | -|-|-|-|-| -| VLSC | No | Yes | No | -| Kivuto OnTheHub | No | Yes | Yes | - ### Downgrade It isn't possible to downgrade to *Windows Home* from *Windows Education* without reinstalling Windows. @@ -99,8 +91,6 @@ If the computer is reset, Windows Education is retained. The Education upgrade doesn't apply to reinstalling Windows. Use the original Windows edition when reinstalling Windows. The original product key or [firmware-embedded product key](#what-is-a-firmware-embedded-activation-key) is used to activate Windows. -If students require a *Windows Pro Education* key that can work on a new install of Windows, they should use [Kivuto OnTheHub](http://onthehub.com) to request a key before graduation. - For details on product keys and reinstalling Windows, see [Find your Windows product key](https://support.microsoft.com/windows/find-your-windows-product-key-aaa2bf69-7b2b-9f13-f581-a806abf0a886). ### Resale From 6e626be2871640ecf3f0ee1859ec7b8804676021 Mon Sep 17 00:00:00 2001 From: Paolo Matarazzo <74918781+paolomatarazzo@users.noreply.github.com> Date: Wed, 26 Jun 2024 06:17:46 -0400 Subject: [PATCH 53/99] WHFB FAQ update --- windows/security/identity-protection/hello-for-business/faq.yml | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/windows/security/identity-protection/hello-for-business/faq.yml b/windows/security/identity-protection/hello-for-business/faq.yml index 3d8f631c06..217320345b 100644 --- a/windows/security/identity-protection/hello-for-business/faq.yml +++ b/windows/security/identity-protection/hello-for-business/faq.yml @@ -44,7 +44,7 @@ sections: The smart card emulation feature of Windows Hello for Business verifies the PIN and then discards the PIN in exchange for a ticket. The process doesn't receive the PIN, but rather the ticket that grants them private key operations. There isn't a policy setting to adjust the caching. - question: Where is Windows Hello biometrics data stored? answer: | - When you enroll in Windows Hello, a representation of your biometrics, called an enrollment profile, is created more information can be found on [Windows Hello face authentication](/windows-hardware/design/device-experiences/windows-hello-face-authentication). This enrollment profile biometrics data is device specific, is stored locally on the device, and does not leave the device or roam with the user. Some external fingerprint sensors store biometric data on the fingerprint module itself rather than on Windows device. Even in this case, the biometrics data is stored locally on those modules, is device specific, doesn't roam, never leaves the module, and is never sent to Microsoft cloud or external server. For more details, see [Windows Hello biometrics in the enterprise](/windows/security/identity-protection/hello-for-business/hello-biometrics-in-enterprise#where-is-windows-hello-data-stored). + When you enroll in Windows Hello, a representation of your biometrics, called an enrollment profile, is created. The enrollment profile biometrics data is device specific, is stored locally on the device, and does not leave the device or roam with the user. Some external fingerprint sensors store biometric data on the fingerprint module itself rather than on Windows device. Even in this case, the biometrics data is stored locally on those modules, is device specific, doesn't roam, never leaves the module, and is never sent to Microsoft cloud or external server. For more details, see [Windows Hello biometrics in the enterprise](/windows/security/identity-protection/hello-for-business/hello-biometrics-in-enterprise#where-is-windows-hello-data-stored) and [Windows Hello face authentication](/windows-hardware/design/device-experiences/windows-hello-face-authentication). - question: What is the format used to store Windows Hello biometrics data on the device? answer: | Windows Hello biometrics data is stored on the device as an encrypted template database. The data from the biometrics sensor (like face camera or fingerprint reader) creates a data representation—or graph—that is then encrypted before it's stored on the device. Each biometrics sensor on the device which is used by Windows Hello (face or fingerprint) will have its own biometric database file where template data is stored. Each biometrics database file is encrypted with unique, randomly generated key that is encrypted to the system using AES encryption producing an SHA256 hash. From c82bee5f64c9e91afe17d2fd2b84f768f8e481a3 Mon Sep 17 00:00:00 2001 From: Aditi Srivastava <133841950+aditisrivastava07@users.noreply.github.com> Date: Wed, 26 Jun 2024 15:51:37 +0530 Subject: [PATCH 54/99] Pencil edit --- education/windows/change-home-to-edu.md | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/education/windows/change-home-to-edu.md b/education/windows/change-home-to-edu.md index 46b42c1194..072a760e05 100644 --- a/education/windows/change-home-to-edu.md +++ b/education/windows/change-home-to-edu.md @@ -43,7 +43,7 @@ Some school institutions want to streamline student onboarding for student-owned - [EnterpriseDesktopAppManagement](/windows/client-management/mdm/enterprisemodernappmanagement-csp) - which enables deployment of Windows installer or Win32 applications. - [DeliveryOptimization](/windows/client-management/mdm/policy-csp-deliveryoptimization) - which enables configuration of Delivery Optimization. -A full list of CSPs are available at [Configuration service provider reference](/windows/client-management/mdm/configuration-service-provider-reference). For more information about enrolling devices into Microsoft Intune, see [Deployment guide: Enroll Windows devices in Microsoft Intune](/mem/intune/fundamentals/deployment-guide-enrollment-windows). +A full list of CSPs is available at [Configuration service provider reference](/windows/client-management/mdm/configuration-service-provider-reference). For more information about enrolling devices into Microsoft Intune, see [Deployment guide: Enroll Windows devices in Microsoft Intune](/mem/intune/fundamentals/deployment-guide-enrollment-windows). ## Requirements for using a MAK to upgrade from Windows Home to Windows Education From c80cf09ea53c8883ffd4c5d4b848ad9543025722 Mon Sep 17 00:00:00 2001 From: Jacques Eloff Date: Wed, 26 Jun 2024 09:00:56 -0700 Subject: [PATCH 55/99] Update update-other-microsoft-products.md Add .NET to list of products supported by Microsoft Update --- windows/deployment/update/update-other-microsoft-products.md | 1 + 1 file changed, 1 insertion(+) diff --git a/windows/deployment/update/update-other-microsoft-products.md b/windows/deployment/update/update-other-microsoft-products.md index f71f77a7f1..f2132aab16 100644 --- a/windows/deployment/update/update-other-microsoft-products.md +++ b/windows/deployment/update/update-other-microsoft-products.md @@ -53,6 +53,7 @@ The following is a list of other Microsoft products that might be updated: - Microsoft StreamInsight - Mobile and IoT - MSRC +- .NET - Office 2016 (MSI versions of Office) - PlayReady - Security intelligence updates for Microsoft Defender Antivirus and other Microsoft antimalware From 7e65ecfffddbae0ccf4dbc4541c7f7eac1b47560 Mon Sep 17 00:00:00 2001 From: Jacques Eloff Date: Wed, 26 Jun 2024 09:09:54 -0700 Subject: [PATCH 56/99] Update windows/deployment/update/update-other-microsoft-products.md Co-authored-by: Jamshed Damkewala --- windows/deployment/update/update-other-microsoft-products.md | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/windows/deployment/update/update-other-microsoft-products.md b/windows/deployment/update/update-other-microsoft-products.md index f2132aab16..5cfbfcb8cd 100644 --- a/windows/deployment/update/update-other-microsoft-products.md +++ b/windows/deployment/update/update-other-microsoft-products.md @@ -53,7 +53,7 @@ The following is a list of other Microsoft products that might be updated: - Microsoft StreamInsight - Mobile and IoT - MSRC -- .NET +- .NET (also known as .NET Core) - Office 2016 (MSI versions of Office) - PlayReady - Security intelligence updates for Microsoft Defender Antivirus and other Microsoft antimalware From a19a46c794e804e16b863749e0d7b40d36178de0 Mon Sep 17 00:00:00 2001 From: "Daniel H. Brown" <32883970+DHB-MSFT@users.noreply.github.com> Date: Thu, 27 Jun 2024 10:01:54 -0700 Subject: [PATCH 57/99] Update URLs on landing page --- windows/privacy/index.yml | 124 ++------------------------------------ 1 file changed, 5 insertions(+), 119 deletions(-) diff --git a/windows/privacy/index.yml b/windows/privacy/index.yml index 45001f0589..b3ae58d22a 100644 --- a/windows/privacy/index.yml +++ b/windows/privacy/index.yml @@ -9,7 +9,7 @@ metadata: description: Learn about how privacy is managed in Windows. ms.service: windows-client ms.subservice: itpro-privacy - ms.topic: hub-page # Required + ms.topic: hub-page ms.collection: - highpri - essentials-privacy @@ -17,162 +17,49 @@ metadata: author: DHB-MSFT ms.author: danbrown manager: laurawi - ms.date: 09/08/2021 #Required; mm/dd/yyyy format. + ms.date: 06/27/2024 ms.localizationpriority: high -# highlightedContent section (optional) -# Maximum of 8 items highlightedContent: -# itemType: architecture | concept | deploy | download | get-started | how-to-guide | learn | overview | quickstart | reference | sample | tutorial | video | whats-new items: - # Card - title: Windows privacy & compliance guide for IT and compliance professionals itemType: overview url: Windows-10-and-privacy-compliance.md - # Card - title: Configure Windows diagnostic data itemType: how-to-guide url: configure-windows-diagnostic-data-in-your-organization.md - # Card - title: View Windows diagnostic data itemType: how-to-guide url: diagnostic-data-viewer-overview.md -# productDirectory section (optional) productDirectory: title: Understand Windows diagnostic data in Windows 10 and Windows 11 summary: For the latest Windows 10 version and Windows 11, learn more about what Windows diagnostic data is collected under the different settings. items: - # Card - title: Windows 11 required diagnostic data - # imageSrc should be square in ratio with no whitespace imageSrc: /media/common/i_extend.svg summary: Learn more about basic Windows diagnostic data events and fields collected. url: required-diagnostic-events-fields-windows-11-22H2.md - # Card - title: Windows 10 required diagnostic data imageSrc: /media/common/i_build.svg summary: See what changes Windows is making to align to the new data collection taxonomy url: required-windows-diagnostic-data-events-and-fields-2004.md - # Card - title: Optional diagnostic data imageSrc: /media/common/i_get-started.svg summary: Get examples of the types of optional diagnostic data collected from Windows url: windows-diagnostic-data.md -# conceptualContent section (optional) -# conceptualContent: -# # itemType: architecture | concept | deploy | download | get-started | how-to-guide | learn | overview | quickstart | reference | sample | tutorial | video | whats-new -# title: sectiontitle # < 60 chars (optional) -# summary: sectionsummary # < 160 chars (optional) -# items: -# # Card -# - title: cardtitle1 -# links: -# - url: file1.md OR https://learn.microsoft.com/file1 -# itemType: itemType -# text: linktext1 -# - url: file2.md OR https://learn.microsoft.com/file2 -# itemType: itemType -# text: linktext2 -# - url: file3.md OR https://learn.microsoft.com/file3 -# itemType: itemType -# text: linktext3 -# # footerLink (optional) -# footerLink: -# url: filefooter.md OR https://learn.microsoft.com/filefooter -# text: See more -# # Card -# - title: cardtitle2 -# links: -# - url: file1.md OR https://learn.microsoft.com/file1 -# itemType: itemType -# text: linktext1 -# - url: file2.md OR https://learn.microsoft.com/file2 -# itemType: itemType -# text: linktext2 -# - url: file3.md OR https://learn.microsoft.com/file3 -# itemType: itemType -# text: linktext3 -# # footerLink (optional) -# footerLink: -# url: filefooter.md OR https://learn.microsoft.com/filefooter -# text: See more -# # Card -# - title: cardtitle3 -# links: -# - url: file1.md OR https://learn.microsoft.com/file1 -# itemType: itemType -# text: linktext1 -# - url: file2.md OR https://learn.microsoft.com/file2 -# itemType: itemType -# text: linktext2 -# - url: file3.md OR https://learn.microsoft.com/file3 -# itemType: itemType -# text: linktext3 -# # footerLink (optional) -# footerLink: -# url: filefooter.md OR https://learn.microsoft.com/filefooter -# text: See more - -# # tools section (optional) -# tools: -# title: sectiontitle # < 60 chars (optional) -# summary: sectionsummary # < 160 chars (optional) -# items: -# # Card -# - title: cardtitle1 -# # imageSrc should be square in ratio with no whitespace -# imageSrc: ./media/index/image1.svg OR https://learn.microsoft.com/media/logos/image1.svg -# url: file1.md -# # Card -# - title: cardtitle2 -# imageSrc: ./media/index/image2.svg OR https://learn.microsoft.com/media/logos/image2.svg -# url: file2.md -# # Card -# - title: cardtitle3 -# imageSrc: ./media/index/image3.svg OR https://learn.microsoft.com/media/logos/image3.svg -# url: file3.md - -# additionalContent section (optional) -# Card with summary style -# additionalContent: -# # Supports up to 3 sections -# sections: -# - title: sectiontitle # < 60 chars (optional) -# summary: sectionsummary # < 160 chars (optional) -# items: -# # Card -# - title: cardtitle1 -# summary: cardsummary1 -# url: file1.md OR https://learn.microsoft.com/file1 -# # Card -# - title: cardtitle2 -# summary: cardsummary2 -# url: file1.md OR https://learn.microsoft.com/file2 -# # Card -# - title: cardtitle3 -# summary: cardsummary3 -# url: file1.md OR https://learn.microsoft.com/file3 -# # footer (optional) -# footer: "footertext [linktext](/footerfile)" - -# additionalContent section (optional) -# Card with links style additionalContent: - # Supports up to 3 sections sections: - items: - # Card - title: View and manage Windows 10 connection endpoints links: - text: Manage Windows 10 connection endpoints - url: ./manage-windows-2004-endpoints.md + url: ./manage-windows-21h2-endpoints.md - text: Manage connection endpoints for non-Enterprise editions of Windows 10 - url: windows-endpoints-2004-non-enterprise-editions.md + url: windows-endpoints-21h1-non-enterprise-editions.md - text: Manage connections from Windows to Microsoft services url: manage-connections-from-windows-operating-system-components-to-microsoft-services.md - # Card - title: Additional resources links: - text: Windows 10 on Trust Center @@ -181,5 +68,4 @@ additionalContent: url: /microsoft-365/compliance/gdpr - text: Support for GDPR Accountability on Service Trust Portal url: https://servicetrust.microsoft.com/ViewPage/GDPRGetStarted - # footer (optional) - # footer: "footertext [linktext](/footerfile)" + From 0c8193d7d67321815ea7f2f9c846d153c792f11d Mon Sep 17 00:00:00 2001 From: "Daniel H. Brown" <32883970+DHB-MSFT@users.noreply.github.com> Date: Thu, 27 Jun 2024 10:18:48 -0700 Subject: [PATCH 58/99] Minor changes --- .../changes-to-windows-diagnostic-data-collection.md | 6 +++--- 1 file changed, 3 insertions(+), 3 deletions(-) diff --git a/windows/privacy/changes-to-windows-diagnostic-data-collection.md b/windows/privacy/changes-to-windows-diagnostic-data-collection.md index 090b84a4dd..2c4708c320 100644 --- a/windows/privacy/changes-to-windows-diagnostic-data-collection.md +++ b/windows/privacy/changes-to-windows-diagnostic-data-collection.md @@ -7,7 +7,7 @@ ms.localizationpriority: high author: DHB-MSFT ms.author: danbrown manager: laurawi -ms.date: 06/04/2020 +ms.date: 06/27/2024 ms.topic: conceptual ms.collection: privacy-windows --- @@ -65,11 +65,11 @@ A final set of changes includes two new policies that can help you fine-tune dia - Group Policy: Computer Configuration > Administrative Templates > Windows Components > Data Collection and Preview Builds > **Limit Diagnostic Log Collection** - MDM policy: System/LimitDiagnosticLogCollection -For more info, see [Configure Windows diagnostic data in your organization](configure-windows-diagnostic-data-in-your-organization.md). +For more information, see [Configure Windows diagnostic data in your organization](configure-windows-diagnostic-data-in-your-organization.md). ## Services that rely on Enhanced diagnostic data -Customers who use services that depend on Windows diagnostic data, such as [Microsoft Managed Desktop](/microsoft-365/managed-desktop/service-description/device-policies#windows-diagnostic-data), may be impacted by the behavioral changes when they're released. These services will be updated to address these changes and guidance will be published on how to configure them properly. +Customers who use services that depend on Windows diagnostic data, such as [Microsoft Managed Desktop](/managed-desktop/operate/device-policies#windows-diagnostic-data), may be impacted by the behavioral changes when they're released. These services will be updated to address these changes and guidance will be published on how to configure them properly. ## Significant change to the Windows diagnostic data processor configuration From d96aed3e10a1cade8df7a66e6472232ef588a0e3 Mon Sep 17 00:00:00 2001 From: "Daniel H. Brown" <32883970+DHB-MSFT@users.noreply.github.com> Date: Thu, 27 Jun 2024 10:19:24 -0700 Subject: [PATCH 59/99] Change quote marks --- .../privacy/changes-to-windows-diagnostic-data-collection.md | 4 ++-- 1 file changed, 2 insertions(+), 2 deletions(-) diff --git a/windows/privacy/changes-to-windows-diagnostic-data-collection.md b/windows/privacy/changes-to-windows-diagnostic-data-collection.md index 2c4708c320..6b6004f7d3 100644 --- a/windows/privacy/changes-to-windows-diagnostic-data-collection.md +++ b/windows/privacy/changes-to-windows-diagnostic-data-collection.md @@ -60,7 +60,7 @@ A final set of changes includes two new policies that can help you fine-tune dia - The **Limit dump collection** policy is a new policy that can be used to limit the types of [crash dumps](/windows/win32/dxtecharts/crash-dump-analysis) that can be sent back to Microsoft. If this policy is enabled, Windows Error Reporting will send only kernel mini dumps and user mode triage dumps. - Group Policy: Computer Configuration > Administrative Templates > Windows Components > Data Collection and Preview Builds > **Limit Dump Collection** - - MDM policy: System/LimitDumpCollection + - MDM policy: System/LimitDumpCollection - The **Limit diagnostic log collection** policy is another new policy that limits the number of diagnostic logs that are sent back to Microsoft. If this policy is enabled, diagnostic logs aren't sent back to Microsoft. - Group Policy: Computer Configuration > Administrative Templates > Windows Components > Data Collection and Preview Builds > **Limit Diagnostic Log Collection** - MDM policy: System/LimitDiagnosticLogCollection @@ -78,7 +78,7 @@ Customers who use services that depend on Windows diagnostic data, such as [Micr > - Windows 10, versions 20H2, 21H2, 22H2, and newer > - Windows 11, versions 21H2, 22H2, 23H2, and newer -Previously, IT admins could use policies (for example, the “Allow commercial data pipeline” policy) at the individual device level to enroll devices in the Windows diagnostic data processor configuration. +Previously, IT admins could use policies (for example, the "Allow commercial data pipeline" policy) at the individual device level to enroll devices in the Windows diagnostic data processor configuration. Starting with the January 2023 preview cumulative update, how you enable the processor configuration option depends on the billing address of the Azure AD tenant to which your devices are joined. From 1cdf676a30704d2dc4d70d3b711a9e9500f016da Mon Sep 17 00:00:00 2001 From: "Vinay Pamnani (from Dev Box)" Date: Thu, 27 Jun 2024 14:09:06 -0600 Subject: [PATCH 60/99] Freshness 1 --- .../images/security-center-home.png | Bin 58055 -> 60151 bytes .../images/security-center-start-menu.png | Bin 50563 -> 81451 bytes .../images/security-center-taskbar.png | Bin 5402 -> 3258 bytes ...windows-defender-security-center-areas.png | Bin 243781 -> 30356 bytes .../images/wdsc-all-hide.png | Bin 7764 -> 7591 bytes .../wdsc-account-protection.md | 2 +- .../wdsc-app-browser-control.md | 6 ++-- .../wdsc-customize-contact-information.md | 2 +- .../wdsc-device-performance-health.md | 8 ++---- .../wdsc-device-security.md | 26 +++++++++--------- .../wdsc-family-options.md | 5 ++-- .../wdsc-firewall-network-protection.md | 4 +-- .../wdsc-hide-notifications.md | 6 ++-- .../wdsc-virus-threat-protection.md | 12 ++++---- .../windows-defender-security-center.md | 10 ++----- 15 files changed, 36 insertions(+), 45 deletions(-) diff --git a/windows/security/operating-system-security/system-security/windows-defender-security-center/images/security-center-home.png b/windows/security/operating-system-security/system-security/windows-defender-security-center/images/security-center-home.png index 13d6f59afcda8d53681734566bdecae816fd4683..e1db1cbe84f08deb8a27a4006d58bb4a5f613d04 100644 GIT binary patch literal 60151 zcmeFZ2UJse7cc7Q@HvB{%#0u?C1axr1gsz>Dk>sKk=_y|A_5{JLTDkQ4k9&Uqezq9 zi4h2$j8dW#BuYsz2vH(6h5#V}QtwG{X4LuK_szZQzWd%<@2w>sayb98_kY*l-Y4;P zHWuq;x5%zqwQ9ZPiKC}it&#z+TD7M5n|}d!WHrvffy-ARr!9`Gs_s#l0zQ20d-&Ah zRjaV*b%L`pz~^r-pKuFVwQ57VbT^F~hXQ_m-o_arkc>#IpSOAsFy z6cx^_qwKJ}Bl$P=+%8UFj+&G+C2OFT;!sQPqVS7RAkhGd14Axsi6w%Tu7Sdr@<6=2 zINBmV2KM2Qbe!d#94aDa0%0b24q4U!i8^wZHp0Nr)2|9IXKb-rd89Xl{{$p>LNL~c z@t-QT%`WYm>p$_wXl2Bid4+k3s6UtIfW7u{H^Z_tB@`1adIi~{c=F>URkOCyP<|_Z zaj`4*mhx|SGK!&*6Qq) zuF;*RZ_mferrp|u&L8ByvH&6JMzIHE@5}Ft$`lDyNM0?4t2|=cDKM0<@;aj^Cn|HN zbe{_?&?|F4wz@9=5^L3wVPQWAAJrgLymdynUw`T|9B-L-*I1S@$7kWiuA1jYgFEeX z&KYeaP8G;TR3_poZ^VZ=d7e{4M9!y=ZpRL2AZ&M|adkE^&is@ZvTSM{(mJUEm(2~W zS0}!

jv{*wYcF$CK|86euMy;Q$QjJm0At?7n<{`M>6H3tde%UVBu;T zi?rR%&c6FGcwAln)wJF*HHYus`zmNf9mXbvaFpc5(-mV*N!!~J?&}m>b|Gnba`VrE zzd!x3@`x5XzQSxOH+`hIYqz%%({E_#Q8scoDHijB-6EUX?c3dL?A&s$9Jw~t3DiN} zU%=|qzDM5u$H8p^A4uGDATQkFHYOoyANuKt>p4beqo@H=0xEuhhCYL_5yDH)&C6{Q;*e3YNNi59$hE)lvOCF*rPR*eLTX@5&)BHd$W71Kek8{l z+!&sbaNpMTx1>D>3exv)Qi!nm>TW*lg@mT?Xd4}w!)hCCUscOS$bV01+rJ?-89CQ7 z^Z31QCpZ5Bp{ZiM@KH>TLsB7rI?<)nu=0v8#s+F%s(LjAX15VywGa$Brlb zyx`>kK6iaJ90tY;8LvYLJ2xU1UF|MZV)q!Nh!9$vEzp?Ji%8Y%GDSl-)C)!|8Qy6% zT7loPotVyxx%+Y1g(5I=3TqhgP2lMdx z6>~x(S2*OSF=~D4IwpC~0LprWh&y3BdhV?li$agYJu8~BV~RX#y)weGsm{>hqp`T8 z`@j0ApNpsnH3f@Ys={;XrBYECuS5B;d<1%jJL=Ik<}v!!Y3U-vJ@MBdswwQHRj*p%ngS_b9<*O!=71-GE%jcr zm#+8XY-1Qnap6ww+Ns}G^m+V|XY<6mNK5LCt7lfY8RA+!%$8~0!909We}!NpoqtZq zm)n80vzAox+k4Uq-M-isn8RaWAcALT!3j@w%bG99fQ_OBw;}Vc4FbhozZUu>uRXTH z8T6Qh$Xo_(>3}FXPHKvww!i|pnVf~XRG1o4C6V>9neEf#>Gs&qw(rRRSlkZ&foj| zP$7ya_WWAZ>{?-*=^f}VpR-rEQ#1(T!_lzq;?$t!RLSt$pAX0P<3$)TLk=>(9r9zE zWv|W`)KO-QV+gEU?45p_KHu8^eP{XqGST|~`gS5?#8W6R~&2Omd`lLQ%Ys98DDlXi{V=y}&$-aHNQ`&<)2FIaf`qWF#=8_!0l)lYzg1t|G6 z#uaNo-T`H6Ju0fEtIkFG#r~FNcwS-yo_<1{`kQxzj^P-; zWz(AQ2vcxyx5Uc*A~g|G>7ZLf{jndm=s=+)E0r3FQCu;A9ztMactN=DOQRSTOW2CF zwT#r8`ps}-+oqll2*Z*n_l|XJK9v1nI_P{c?rnpK$l)hZybYdFlYlU-_SiKuVA7w? zqfMVHR~pBh(($!U!g_BcV>zHzSY&Nge4ADl7c=Fub>AsEuKM-koT?42IO_mDp46@d z9}O+@5h9<`yvCOEm}f2uLwBa)gCBU?AZZegGzEQRx~&L^$7d_>yb9mt8Wfk*^#{{6 z=k>EsPv)l|wU2jAa4wDMLM5$9Fz1j^;nq>I9s{;jY0K8|=&~`v2X@91W^|!5>`{xj z%BDEstQp!3@dB*l>uDW;V%*)P)0cYPrRqlR0`Z^{$N^m4t3jNG6tHW$YRC4yZpzUu z$B3w0B(bAK?e2K?LG^L0O+viMj6r4QGW_nTQV-E4=~8&wBnA$rm^kL)fILS@FVXSxrP zM-mGhX!VkF=YHbc40p+%l27r^Pv5&KSM#L(sx7PwjOks?oUGLw*^!z1D$!cH=DHw4 zXGb`{CB-kv$g#!5@u5mR%hQ@3<2lr3rLP*$8sRz}6QJrXj$h zww*QRv0B9jH@VhGXxURGgn+Xgy7p}zla}D8!lrV)u1~#e)2f>>M}WvK<9#BCPq#Ha zJ)C4WIm2$6Lmm_4dHcEyh5gR|gyAt2C^1dE_=l3tfy8rzB|A*huAYh3()6B3{7dWm zx%3F9S>ydqKa?i??6J73*U2%_E=JzY%T6#F0!DUjVmvemupWRT9W&)S}Y{C)4H zSu!pt(Sdxo-=(DQaf%-U*o?J~@m`zMf*coA>x(VC;oX5uTgkx-KM5Mzc7&Fk9lqvz z>?c{Lxc=cNlWJ}&ZQp>IZo50m51N)r!7W61DX_~g6K#uQG^Pz|i(Cm_l}=gafosuG z{5q!bct2-H?b(yWgT=woej{b@^8H9C;Yy_`q!5=J3c4~`?I5uOi++E_GE2SsPWEL9 z86Jry0F|5ox|6=AM-Ryi@`BMjuYG|NG3;7-PFb@nnMv+xJE7Q@tqdw>IgBdAvjN_;4e1A& zUBysM^9Piov5RXQau1AFJbxR^+p@fMf#enE_nI10$%NGE7KD)RIu4m5QpskALDa z_oMv1%?|D)LstJ{6`(SO$WP9#=a=RW>6)wTJquUKsOY}_Cy_|%UhM7s>F4u11*kCW^pRZ+FsJ+7TR01M|Wcg$?TrZeMSIFN*`B8sy-PE zP%dX0u{@-Q9Q4;A8!F50mk-hW(0|k*?#MfL;J@!<0X>Q#&p-?891+6?_B!6GQ#K9S zR|k%IDrBZFy&fuw7^YsqT?^L7w(aF=;|z*}UmINXpq(e%3-ybO=MIL{J*VAKH1i18vkfd@Zyw_IM7RCLC@F!wfz6~ zWB@6=F7m*0JU~F+*=BwRT1Z$ z_0zal{2?~FX(_ER?E_3@)~o>Zy@aKfy`BI+T)^*_ANVxQ0)I?`+%QmMeVSwOD-`Fa z@?m#oo`koUf11`{pwCLy#aK42rO$2nG>pbaZq3zO+Bv0`L@@p|ZxKxc8+Z%kYx@6Y zf$RTs3y8hMuV4{NPw;HKsUQF~vu5YM4ZMuYvgTax@tMz(&My#REI z`^5`*h#&*cpPgMJZigf&iai|P-N_XO`|q+O`A7#8Sqa|Tir%+Nu)QuHTjtuBw`OiclaD!>Sb2A!!KJ9RiT!&*t9_XUN@$2B3^iIUn?Thcpm5>3uxi~`mp51g^Mg8)h&zy zGyq^e%5rYr?so6$;zAE)G~&eCuGe?G=T zJ}=QeBkDu(Y(X(X3QD+#ok4gU+*XL(B3&`V?!?2N9bx9h53eRR^Ypa*lRCdjOe4i1 z5to7!45^C~i_Vjc9Iliuq!`vdI3Zc9tIhW+n&tNiB{p;O_wwI6$m{DuPg1?5hvR#t zGX1y5O}p+km*Vtx(Ot6qJY?3&7VAtH(BE#bi|M^-OrEZISj#}f&8IIrDQR{%!vtRk z21Ilw_qZ*(d*TD`N4(kG6|L4+&00t0`qcGMtEu=U!30En5??15U$Eo}f9orbN~a%O zlJ$>lohqPp9v>P>G3@FwNi{&5H79rsrKt)RTyrR4HC1(ZzS5xHh;O&=GSv%FTftdG zB6QmDJ$1=~N@Q}IP#8L@!H@GnddRW~$nVH$T+&io8Ko9;cd!kqRF74o%va-LnblmO z&||25ch_nDwa^7*Cmn06R#ORwR$&%1aUgo+tun!skj#?}yfwuh%neQQMz(BHAPL$~ z1knYDp&t4che)yNkT`&UH9F{}T;P&r6gNPZ&Z%BJPD62W&cp;(05$^WRy_=B{S{IY zzMP3)&eTxY?q_A~9=0Jd?G8@qGw-br6EV%VIR>LqWn=FsN^GPy`z)2{ow-GX=T9 zT1y7id8LcK!pbF4PMH#5MO6XYFHt<3xjR}fAn&u%_jx3yp#*6098gS<6ThQ3Wr&s` z;t4qv6CY+ab%;|k3u z(c_%ehwzUewUrFTcMHRb$|jhn-?Dj~`;jFgJ7GT?sxsN|XyOQ7RxY5&Yf&i`h^APWFo4mVaRELH_+nhcPW<^!uvef&~D;qA4k2dM? z8kfedH&v_~l}PjN72h}?yAj#bH0_-|2<=w_w^e8!0aaGik42cOy-HCcH#%zqQVjQe zu|0=STSX}9I;n!T(Ai$BmR1)-FwoD9FgYKyg=UDEjkKG5$0-5HY6=Pso%kt((;%cL zCpyriAb2wg9k{3&xQ=CnyGF^PRL)2%YfJt?>52XFjG?y z3tg+OIA!7+QG_50ll0si3tC}0#;Wk z5xy;J&{23oms$1ptlp&pYQ7x5&$d?J9pIhhz9bFn!<#ls*qlBSyA z>xPF{Ck;{RQGqQ;K4DD$^y}OYL%f|&ZpB1^Zf{SD&n1u>ap=?h-EFC*xDJlsgLcY( zxJ?q0iydIMpHzK7@?V zHK5}|?Ji6P60RRUt0tUHZ_wVB)Z=v^F!Jm#%dPrPd72OPH_SHhyj2&R=mltPGyNcy zU5s*^P6Z*ZtB2mU0UF>P#jln%-FLjJgVDcEuftjVHW>UsWee$+Pis&Phn_E~=Qgk6(~eLmLIZSX|3Evzak&6nxQE*Vio&@ifwp#Gp*D)i7{5WKByB zyX`E<5ucO?VWBs6)#AhvZ8%%2Ry;52#spH#h1(<-aZlyqxgtrh>AND2w2-+g#O$<^ zO<=~Z_jkq*NaMjhWr=6?9@#67AdM9Jb?BoFum+Gj*&ug+=vmWE-@F9B+;ua;WPDpo z*E18@^{u)jH*#X$L$tQq_mEApzc&IKj77J#D1Mht5LF`g&J1a9A}^Jf+Vd-@*V+P5 z*h;lMsK5^oN$wChXb63Qvbd2x&5U@%FVPj&51$+vSm`ni?K^+Bk}Ao9}maw#h<5~kwe%PcS(Nl+b1o2xq- zM2x9u3r~Ix*@x$XiBUG5e4#-bw7X)gV;~H3b{IZ_9vXltJNEpH?X4#FfiwtQG1W}h z1cP+CKwI35jxUl+9Wa|>Ptgb4ZUYQE@R4Bwb3X>4*pG8^-CGL5q8=Xw{bkt*-Mf2p z=fdNzp6N#_CCYA3_@+kTdrkiZ<97=JO*{Mklfg7x@6JKmDhRx*`}tPaeaI zlmbwwc~8Jmaco2Vz1={IWt~>Mf}fw`^zBuIjk)|r7pm0*f;8rzHf#B1)CcTHR`n6i z>@x+=w6OPutGy|U(1ZX+rtq=U`-w|LC1N4=^76;9`Z;QmCPdIQ-wyPPE#=VsqaNOo zpgRlwQtM*Bc$PcrBbMD2Zat?{H_%6CJeSv_h@!7m-*|etm8Sb6P(Jrd9HR;c)-AJm zXwmQOa-wW8^Bs&If*G;YvIGzRA4*2v=1we#|D`8Ml_Fz^b<$+$uUuuMB0z{>dWh3z zCZ3{lMH#uv84VwbM)4RnET``=JVm$|CLJmJZ$_FQBS?bp%yoAb-CG1e0E$}dGy(V(Ih!Q=gBg+UUp>>}5|@x7U(AKJ6zcoVUCHjWk}OdV)S^(_BW7Mp zR=rkS@P_c*S8})Z@N!toIRuQJgT9~$#w#K;uL;=9Uh-!H*#nB9jE>TYRrmIP?f&Za zvMT$+A{!!Rqe)Y_c=6zn3uM8nnI-69MMsZNo)2d!?BPAn6+910%FK7|>;tpQbK72Y zB*Ez85i|{-D%2z0y1)ezt*&rAX&qf@9kSInhKrB0H10YrTnL@78DC^>#zr$ag>qb9 z&J$Oh4%{PPc)E>r*z(_x^i$^a75J$Wyk zI!m=bIN2u=oD2&mkLH!h!UgXm6bdvCzG_QI*`DBl+#FjIX`{m^^BIt1OvVx;dk$t; zQ0&Xb`Ri!z(gfm-3lg?Zy`Cj z901R3i#g14dA76lT(pw_rXoqvN39M8SIC}hZTMRDs*`8_H%_sb-8j|-JT56;3Cn3o zaCNGzSYCL=I$ns^zNvb|x^8S0X1t~wFlYzyGJJ%f?oAtUO1BhW>Go#cRL3=4y~m)U7Z z)mBt$a*8ekK8YlosFe)5I}6i-l_j{t)Teb(-y=_MHPg#WLnnKP(97FWRzr2$2ippe zx&?#B^OB9%Yt_!RB)GpdKy2(S#%!XvE2N1BWDP z9M4YU+>c3JbnUXksshOQ!GjBtk1J_jud8$mz$0KJlm>)B2xw~U#W&J=apWIWWB_#P z%CP&TB7ZX^>Kelio0uzKJzep;Jhh9f8e67qLZ%t3z$*edH?()`MtN!w`@C*mT+7sK zxJGcYlbn|hgI-*E+*)CSg$EBKDmNs;yJ+jeOfZJL4~SDgl5iAUZ#5UGi*fZX_d>?D zP(zWP5AoA?m7sB3cG1fS0mR>w0w4w(awxn2W&i9X?8qAWZr-`*eQMMqiUh8{Q~e2g zX1FooxcqHR6?@l$Sx1>7^G-d-SGSk6%{W}Is<tlwOjxZmk}71e2w{75>C81O+*xxDZMx6lwg6gig?hNSHoN$?R4 zu#_m+mLLtGQ*KfT)b{e?`9N`=&w>l%ya`9GJQN7{WwYM~2L^Qxgu7aR7bHcPUI!r0 z{G$Z!e@Wh&(iW*JF;Gq5Prsd^^$I_kO)~wR z!cPT9B1xA2p)=sig8Khb)stt{x;&mK2SP5qDgauOcHwRpdRTqlH;~I<*3)8^X4~aJ zX2ONOI0Oy3_zviLiiqwuNi9;cYy!;orN(r& zaBzQ28t&v5%(?zCCzfAJK>h3J)|ne}X5l^~A!l1T2TZkcuB@F*#q>Lrw)o6l@f3%g zZ8|=82OCvVZgczJ{aw+C z-#Y~6h^tr9b|N>nd&PQ)h&)5AXv>;ojqV4K&fl>kY?O;1&odmRM(dTSRju( zW%gyW!;^dCper`rTN2#lGpCI@+eIo!qHNq(U37@`wsk`=+-?pohY)ibqx|NCOaj?vkgtluV%1MD!f&^4>v= z0wGOWPtm~E9`$*n6{dmZL1g0@SaD?ZMI960EsKk(7y)DKZ_K}L4>nUZA2L7I60)#O zKDK%;#i%&4yQyMTT516rn~>M~7I$;?md^cZ8!dt{2{0XH!T`1nx&;4Deuzw+tx1TC z4d!|)BlR)$S{;j=WCo~+V?S9T>}VPsX^U2on=Ik}kbbLbA`W-0q0V48zUy@Q^c)te zGDK^#{ZgLne%q4h9`_PQn?tOZmkIc;?8HE#t9)T3_M+#8)Wsu8u~xDk3&_e*dj1by7Q30GH-OxG^2q@-*!rF9Ny5Cw9Q!GK%SeWpnUIQTT*C(wIy zaBCo8a6=UyqDSZ=vCa8M!LUyO>*ebrdHK%MPxSNF2gX|xNlwDkhAJ$PIoPvkwUPre zTS;D(aAebkkkW4~yTjwukp`UR^>?v$VU_7!B{Me*n+2h-x81`>UKs-AgMx!OnJvF5@+dPH<-xMf~qn?K~GVyA(33KK-8B;Ft- z_z6_j1zcRis2Bw?DzLk6QV(>~BP9ID*B!DG&eh;^{8|YtC22q8!88^`RO8 zroL_pPd9@Yqrqp(352evB=di>vlMNeqR|~}p#L-Yb)DTg@A6Scf+Je%gwvC9yRQq< z3696ww9mat%~#wwbh-4mIPG}@r)!U9uAYlg7&=~uPQMT$;Z&sOt%4;Nq5cfivof#{ zgexGR8JOi*T*vpsqc9=Inl592L?yB0cs}J%>3M;xFsA}7SZGS?IK>3eu)KdOIw4L! z{F*P<`B3{C1GJCUaqyaBChH=a4tybCR>2l(GFB#I!>N&Go4}#yFU)A~v(cg%`_Bd9 zpLLl1Z}B7le{T`szIXidE;`}Pk!bddI5~)5HcuU>sn*>u^!U=cC2kul0eWa=XPQ}N zEr1_IhYOx-xrFT)-$3f@7)}i!_C^n*0iVyecUPBm$obys((&7%<=ZU3{qL80 zSMQLx3Gb7gR^tZAY)pLq=DVFWL+@tXS&s&+?f{vMB|LR++`SsFgxi0=c<5jo+e3!u z1L&aW*(Y=w`Ms~ZStbx$OsL1U1ynCef{1WNRsHDhshyG#w$Q-pf%)&R^*T@d{i2&X z_~u<>7izHGL=D1$d?+(E)+#ipLWUyMfpB7^9cZeSPctnFs7`x6S_FOkPgn@OzHKLh z3xL=qB3ruf(h;bLHG$3ieyn8qD;X`8=KARzN~ zg`B{%v|iB0IiO)XMg>*3x!yL?ALu^1yZ5|h$O)q%AlmxdrMdIROyg)j&C&r{Q=w89 zyDckUNv1(N$?4VYT={`%BfzRHys|)-ZSw|yt+or=Yf)En%T>nN?tQ^2Q_#R*`P(?G zT(Q}4^098$pP78PC(wu-nZXMyMy@RuwJ3rkOuLXo!@(SXk|XlQw)4s6kw7{0zi-Io z*zj_FXnr8RhIQI0n!yf-B8=wmP5{4Ze$6$OvFc1>YrS_0PA0ToUJH2ac@gPGxuz?r zULLG9&WT8>SbXAm?6^J-`bNhZ=n>!)r&D{(`5UYQ02D`M-R)W?|9;sb@?!1@O6ot6 zFo%UB?=}U*J_!ldfIXPr0FgZ(AY(ATIO^e+IMvxGPjo~R#!P02XoYEV*Gv8+`W1l! zbW$+JA|9mU_uqWlUysG$F*Wd$XoHkf|Lj0aI$eLJjsmrkH`#`pY@@E-TTOMx-aGO- z9Pty`J2Fab(fCB;n#VyD*A{v(ET+=VfJV zLhx(@t712o(4U5e-_3FVCz@<~7+Z-leQL#y8>a^FxK`CY18OMl48f1;jRnl|=@)5ogz)lSJ&S=l=>I$Khf zopuymcJ4e@3^gfwX>l#3OwlCj@SXU4ciQpPJ?Qwr{I>*0;Ap^`9jfXTSFK}C-C&;a zR;A;1b0*Ft$$uL#E#q3qnXmD7wM84%vNZSab~30{1V1q=3w;#?`&Y5(&1g}M$3J43 z6GH#=LjL#UL?4sl?+K5!=Q*xEPA%5N9bOjyWIXBc?K{m%S`GGvmGOjbxEt7iT0b$Z zx6kSya3=2(X|!lz0jNx<`*q(L|Md#a%HZ#pu*9AF5t`C2@&9U8&83~&|J_ZTl(dD@ zt$WjVzSuf;G0l6&-!30ESzVm5lXk2BcTXVgAph_7;a;H>k|;E=9b4NrJ4=NLqhJJj z|M4aViJJ)tLCx|(P<{$%2A8W z3XN||j^)5yJBl;VtW&@3=3sxx!qcKJe6ZB{{>jy#>qp+_Mj0y}(mY>$T|F>zT+WhhhxkbGAE5brw>vAnP*j_ z2JYQ0X7T5OaAR{+OBLix7nVolJBf!McMG=fW6vhy+jQlg`%t;A;9sx$e&YJa{g+f! zA=`ue7{1MWseTNB6!Z=WQ#419VX=@k!8q_@Rh4M=*vx)^%v%h?C)3*SOw*#j(dyrr3Qt;#E| z9ZCnDT{(nDmnmvWgfM44Y(1+n%qHcBzL0d|QU~KHfC0e58toH1@j7q!80ez3D@mA~ z>6P0RlezKr0``f@5J8Adl5X97^}AO-*OfNc?Agmt9*4!9vv`t^G8H&>R3kYpaGj** z_`79_+oWsCEcb;l?lc?RVj?p#n>I=Wk-bAxg{u-(-CWZ32KRHB;tt7!dgPGMRAbf6 z=HN3A2$5f%?vaL0(w8YD+N;RWFbbFkMS8MRPVn+cF&2Ycy3%>Ss^5_a4=G=~Mt5Gf z&ghtUYz>OLweB`FT_O#QP1v88-XLr^&Cm4B4USWPT3JYZPZoc{Ht^ClY=46i+<*J2 z9b=zsV>I^QlPSa35i^*}6qf=1^D}AQh4E5pubDIoO>WkIHZVj00>3U7iP2?f`?YTE7gu_8;u;y8L0Vo!_ul?eQajI^J;{i;*egAboMU3+NJ_(va@x*uO4mn{wY!@2 zdK&=*tjAL9F>#AAir^}<&FQ$k51R6 zhWB_S_I>h58f@plifu^byfInOP~uTK{Rk+5Efcq`O>8k|4g;~6mpGu8Mcbtmd*4?) z@sHLx1&)cHqmXvRd~be{6H*G43-qNP0vqG9;BIysG4QVdgl~?&06iK&_$B7UtWCfv z?G@c&Yv|&OR#^Onf@Us%?Ylx9V21a7;Ozoa8w$vNU$tswQhTISvp|M`?T+rH8C zytuqYGcfY@8p;v@@==w%g^H^K#6Hnh*Y2(!OD~9B4v^{AjeRaE*`_D-$m|7#2QYn! zPSBq|C&+egJTu5F8UR3pU*8I=wIxblQBrT|B~9U4_&L(mo&_}S%}l~ z>6rUm@qSMo&*=>->coRE+;-`6^WRg!%3b24X5JAA1$h7V$kWPQPJs>dgLSw6uc$QX zl)T$9+hfe?@Yzm%Wv1JVlf0k$4#>5l1R1GTl<}yUF-vLe^SQLEYnpK}zXlykinUsC zg^jKxOs$Fsbz$2D1?{NA?3XB6%>ENZY*F%6^OeKSV0-^1j_p;N$73Wp4O(k3dg)zU zuGX6*wjaK3uu(>s+~*P0$_bCt=&NEaoGT|J-N$mq3Z#&=92o_$})C?&ik_D4zc^DqRqF%5e9~Y6q-pIto8wf9fOpb(<1zEpJ@}cQD_tM8poX)X7aJ057oQx(Vr84o0H|F; z+D|#63&z~KVq8@aacLkrbx&@5*n$VfK36lHd)o*?p1ttt1tvawn=JDIWej!rQD!t@nHIIj>O;#;@K>bf3^t*!>Jhw7Fcr{7K!XFV0h((^#DR4p#o*v zDn&ckoxIMCVlTtGMwzbD^!e+S;6tBAn-{Il-a*}Q3fv&vhF(1uzE+(?kxiSFA=RO} z2G(WeiiaALufkVk?e}$`JK=ZE@)70Vn{SPqs7orVuUNg28P#lMZ?dJtoeZiGK_3+y zI=Zzi$0c)%a%_n<&^vW4{^@3tT;LjHKQ12)uq5Bj<=A6wPi&7FRGr$-PT_DyRnq;v zT49bq=+?=|)JJ+%xVpm6nmS#CgZk;c{PAFBOhCW?eHTrxzuvfRP;L>n6a<*3i2&zm`8t zxW`Pi3Lc02ke1XM=ngH{bYJFEMEA4s;#@K90N-QRqmv&MrlRGLyGSJ^8*-PXC7oT0 zTRFe^!KG6dM1x%zW=edrAt7BFiqoYl|(U&1#B)0sfBdTNn@{5XJTH_QdU-Yu%*Oz~FoQN`vl z)fCj*deate8fvjZ!!zK51-~D?_nOpCCYZxEBTvFaFo1!Wm>m<0XM%zED;gu%Q~A4w z$kN&WMogSKbHnf{H|DRYHZja+#X6gm52%xEIhnc?{Lxh)f~X6&%jDsc&> z$nR=54;iS9+wXX9)Y%B_$bWY9Rdqs*d}erxzd6WB2Ohz3Bl4A$0>BSKLlN7N1L5Vr zS>)0wCC#;g)^&Q`uT!b}p*PGn6!RX0pKZP9+xZegiZZyZM0JAI7M)6tU4{o&lL}Pl z;$-7mQ2^%I^?(Q2ubwm%bwR9;E`!2zT$-sGCVJMKbmYL|*pF(;g2?t z)*79Hi49(T-=-Qj|F!i-X*i$A!DKs&%sAkmx?#h4E20AtAHZke;}Y&@Q5>2_)OE$r z#fTnaRX6O^ii-`?q2yf8#Ww+AfK)0dFB1)Ir|hsL=xh7o#tDw{RsN&F;Of&R=gPge zX_|3jG!NN(p7Yj`ujE~kz>3U+sss`{xFzzS6c!z?m=u5ibMv9onE~%Ac9n>_!jHDVuDv?9q7TAq z;>1$tjpYjC`;w@_hE5y+;D#}(gFY&>8|}9%G3_JLIbJa(4$W!? z=Z;pC2wXa@ZVUY_6UMhyGh2QkX1`Jv(^0e2SHy|fl>}EYswYu{?Shbo#?|Lr`15y~ zOQRsjHh}1rh{1zcR|2e_QuHy)-18{BtYihoZQGJ?UkF+|i)c9AY$fQZ$4Aaz{aOQ> zE280-!zax8qQvh}$h!5yBF>2eQix2Ep=fI>tk-)18(zt`%0=srwtX8sgW}E*elep7 z2Ba`gdScZIk%TXkb(c=mL8b;gK)k%*3HSi0X~e-ZCUc{6zA+)zC_mHQ_0qhwlLr|( zxKKY|{p61cD;TJD?wi%;I}1n$P@%xI0OH~u04OfNZ(t{%qbUPOQ4orK?!%pC$eozc z+PCM*+j^fqcYa~30YxtF>WwT^{+M@(9R>0TD}?z>2EIu{Y79c7N1V-Wc%S!2oItbK zac}mZLT&$A?B>VMpXWC&1Q%OO@S?@;EW^2dsSl>VW)yA&7yiXEgcaKt1PJKnD zKjcu4EFNEQ5RHBhOzryR)RxII)`AXHlnAvCx*QZw|8}r=BY27SC`w&KVh)HX3n2w_|HU%y+mKp@ER+VQ3s zi>4Ltxg{p=CF<30^pGnH-_Prgy?ZJcuu78{2Z!n0fxooI#XyuCKJ#020_N9Dd=n6b zNzLIOVC%T=;j_OO>+z5M&@dE040_<_fVe4if!whzwBe+o5YV)%fLjG%Rj2oE;4{uC zF*Ni9cj713X|tT)1p`vsbpE8NnBW7j2QV`dkbw6FshtC104CydC@5C}ai!?)UfImD zThCjtlgne`v3GUiak;ULoeh>BX?0Ic{$s#?<56 z^Y9|rg`Btgxoho*rRm?v_$SAV@zeS7QvTGuz2rBO)iO?@nu+THKwQpDJWCZXE{;X3 z0t9$U&I%yF&mAfN43kuo6<-)4`*s3yJC_GiT*kyf=9mDqy}*j#{E|4) zy@=m7EhDu+z7|{W!VG`S6?k83E|F8%=eFTWbK7|{uAgXngVYe-o3=eZyGIuU*rzp8 ziBbdz0tERpg8oZg`cG*5|Cxfre=Z>Zi6;J+LiwL)@863wfbL3eer^x`a|!%U;QjwB z>q^4eFAjjrc#{QjRU3h(A*5yRKP}@OZv#-CV7DV4-o3jmBW?asN%&)r+nuX{|LF0~ zMu%y}k3o1L7mgQL6LX(717FrQJ5`cvChZFtSqKfEF)mKWaGxA+6P<2@o-4l%2H`ktZ zEV)4$^oY7O@afoocM#Lf*#QPd7|stM)X9B|a`ZeyVze4Xkg_y_fI)^lVVDv*Ubzo4 zs^U~~VuRU0Q(yStezM!fq29%Bk$E{*|ELQ?E4^1>-V<;1%MmAGl~uwe6BbeHGRJ!p zBx8CP&B?Rkx+=mcL=*1?G= zN(imn;2mY+pz!KAfqV>Gt*G|IwW7hL{F`TR*=zEw@b0kF`oL=dr;_jcEF5lb3-UK( zOtO`1tM)MQ)o9e-woPY1{k*}HEm3)x$UriHkC`mMh6Xu-K(n-i_CM1KS669Yf&6r@ zBVyV=>SA@vk(Ic@P8(PFEp1TpBTbUc5n{*9#5fW?M z)t6XQnfX+`eATm-y#t06GOTyMLUHg&Dzi%DYQ{B4(coM&t2T%C$E>6l|Jg*(%EQn4 zC5CvD?S4^aeNbj~6g+Z*Iq1nN^SvTk2fxihBeri!@SzW1clzzz7DAt@2gTh0)8&4F zQhz%fhn=CmH(-}PbZ5%WS(}`8{lBYa$&j$FhUH7z z^7AcR-PqS{tbnKrd~K@6M!b9!I(!~$h84ftBG|6Y5~$ya=Ud&qRH zJgC@NKBw2!%Q}A!DPN=c-oSox8nI@#I<+q)K5XhzXUdX4siR4=)Ly6H0uE=JQngEg zeJFDaY8s_;=(+)?jc2Aru~Om3#*3o1{%Y3c{qEM7X&V~N^ikW$V8X43h-@`dNO5FU zU%1k)A&-rLU6k-QzW=Br%+_GjT*@i9{ghFmw~OytD{9F!soY4=%>&dy`qG0RDEPn_e#+(He^e2n)|H2 z?bQHjuu}ayCAd6bqgke}Rv5eSH71^CNSPH)kWLv4dwX08HaU9`2V1x*jRD;+EiVt@ z=MIX#Z7{zSY7>pF4sAJ0Wf=Ue{`#$+9$Bx{*67tKaU*M^Zr5I%mFBY)4WD{L zdwSs=E#0UM6sWkW-ZxCT3*Gm-k6ll5{i(U$#F7Ad0hZK|dYn2_YA^0@Nwd|3UNOl( zLpo-fJ4T8ydlJbH&n2b`^GohZLSxDmA_;b-VuTgyS%yl8dZybG&w8~FeZV@(^yc4+ zwokH?t?BVLUfs0Onb@am!@*TuTQ&v;yaBsO zGn_RnBkopo#Bi4|d9L*-Jrb1rxDrqJjU9}nn-tekGQ;SO!K%z#m_VN`gwui5_cf4S zf)7S+Sfmj%KsjJEqOOW?Mtnu54E|~mrK*_j@;}&n)37G5um88TwN|NO3yR28wHiSn zAP$U49dH7P2*{i$5fKnEAVPp7bwtLfD1!n~nPiO2b5a!&5hOAt%m@(z1c)IdKtjT~ z6R=O!KEHpj>zwoAJm-1S%d54y?|bjP_Fj9f_5CdNuOy9-%dU$97mR7$`O%4&GJq-> z5|{9c!mo(M2eoa?4%e_KGn=V*4j47rR+QY5{D~AkCoTQ2`}HpKf8)qjUsvTUwy36lVp(0tyE94FiuKnd8?euU(c5`-e* z+AakuGZ+>#ckhCuM~O1jMmfYsPGRmO`-2&+aO}J3{uw!T?w;M}whi;E$B|5rE)QnM zp$jmm)l@mfSl785i=}T66`W1-Qc0wEr;QOyGc`d4s zCmV+-Y^sRzGQ{UXE2G9;rA64eBC3G3N55n>Q0gedaCX_wzv*ZPf)8Fo(PV+daHe1Mrb~k{!VG` zWpI5ea>Bxg{ba_hyDq^Cp{fF|=#IC~=kLKpm5|18I(tJ@^a`}29bq!d&mZVu`PLwU z5T|0A^KmI3;UCa7nR+B5qs>S~JQJW=loVv>Y`Bf#`NI}d^qM2tnt)U+v z6sHq68er&5B;keUh14;E*p)Z37ZB`uz@w8%iC$^}q#h!^BOmpX<#_DI9YOeM^aZvd zHlvFe@>P9|ZL&k#3a{jZ={=$40tNXD$$%@5BHs%EWB%0GzmQbEmbwC)YA56J@!9K`X4nU>zH*##M%VC||Ap3c{xv>batuk7D~HGz=foBiV+Y3$ zR?%|A?-(Y>#C*(K?^@e##8_HUib4Cz-#V^j7$3zfPUFcEnsP$@ihf6R;oWu&A;hOBc*4~VjAWJ_rKa|sYuw^$FSYKZ z9C$w}d&n#-dqR_NyxLyqHykV14r*Z6?AgfMG{ox)(Wv$a|Ca6UikW*d>on6PBKZ-) zM09|uGS!*-C?d;EVZsZ|#~r&UV0>q(jU=~{z^$#)g0TdPXig2+h~5XThK*s~&;Vb5 zC3{oM%r;JUabF*)yRfM(17Bqu(=H6pqQM{r^?NhCXntLVDffL(o3$S%*b};enJS?z z9B3FRB3=&=42d27;0Aq{f$eb)(GeA_&Uy>~awjJ~!8!0=n5G2rUi3gew5}L0KquYM zYp*|S?5N2MU(4K-?-m3}(Z0+KDr-b0Su&?evbxq%gGRz)*8(%r#yX#Ooczub$wKQO z9ub7+&=0e585y7 z80n7vg{FU%_C6Sg3VlWkwbhRu+TC6VS+CdZVW!a>=-R_mZeqE)zGirY`1Ys!Oz_4~ z54|jzK`&5GS8cM>J~N2+F~Ntdxq`uN+>+n`i(o9xg3sK%YY17@gnD2h)IwMhvhL+r zbs{UQFVdNw*rk`Q&!4-X5@czL%*Go1Fnvvphi-zf#remn0!QkU7dgO@K%nb4S%`t+ z+5vqV-`HUTemM{c{XA-d_zt9;^!vwz*xTH)WM)`^@Q>b|_}Dn(&K&;M(HmD4RNTgD z!w493+0YGS(%zJVQ4I=i8|1ocnU%k0`&eOO=v|kVH44#5lovcF(jF+kX1#ra*L-Rl zLZiE@G>Vr<2}nbOkIPP@h@>MnWJAO0hlHYB8q9}+whV)FxZ=C-G{iBy&ZaR?$x)^X zE0Yhv26d^FN0eq(`Ve!zI0ngXcmLa<(@JJePz$au`+>l*d;bh8^w^HEbEfakC*qe| z7H6?iQE2e#78rOus-;u_Oxt-?aL0<=c>hOQwkTIIfLVDMvxsg zZE=9|d8VPj-*lQ*W<3@^qp$x#RopHz?gZBQEzRgG8i-~{VhQApO}V5@Zvhs1pmAtC)>bveN>YXs!#KL7mOM(AlH>rr!B z!JWOv#Zi3JNy8>$?4tup&zvgX-r)<1_c~Hi@>F27~CVKzQ8{1SUQBOVI zd&c^;Yo8K7Y4jaCxzB!!PzAq|k7b)Dcn{S-F?9fTn_V#wJU@fE3b`ELnov3pN?vr{ z0>(=|)SNWB-<4kzW;}?7-rf6P%XEXNQUjl8U-1ouDiR7E{;W+Ho4cJwko&{sOtmGG zn{6T>LE}O;Q00WD9~qr$FKziDDu;6U;>By>?j(Z1`*GwEke}LN^i2?Qvqq zLlT2yK+g1|DpOfyM+woMxt7Ij^Z^8Lg};Iq3R{9Jca{FkCViOSmWNEDB8T~VEHC() z5yb}TWezZ0azb!V%2(UVP5Bd6XDR!?r^vIXzwL%~yx{f4$d3kBUum%)yPl#DZ>-OB zyDd=$Q4~sJN|Q|K4hezdzuhR%=MU8u>XxSCQ>}g<+x(nvaM1wZ!`I=xYD!|pGJTO7 zO+>eSa$~C^au|<+v>Bg4;-IR5JKfy0bN8RYULiI(W=GJ1-mPFC&u-WUYfKxjk|C&iw;MTpEU(Az_421D`_LB$%p z$K)_a&Mbu3p+nVhQ>K=ay71Ff+X=?-Xz(W^vFO|J;6RoR=g|Se@%Q>1gEmuPZuvuM zNX68%scfRuPNK3>@LFUq?dhYY98OAPecX&VAtX1Dx0m^<} zK}9RB?04Z)Ys0X0QJ@V+>*(R{3S!sN0bN0=)eqidAY?${E8FhcwwcxJ({AXuY_FQy z!v2H}HaNAGj(sW=8wI5D%uy#OlY_c|01EnUmN2}=!O_vN#a-*W__6kSd`$5kPP!}( zZSmZfT^mvh@yMR}PE-o_hpWI-y+Y1+#?5S)@E+9XtmsoJNgC|{3@y{Oh9<0}6r{~; zZhEUQ%uNaxw=iex9mX(L3ua*(Rw(GV+iR$B#pN#x)oG+N08xi`*=*6zMiRFIKV)DE z_ihlmPZVXPg`OLmNU-PF3!nL4b?T!o%Sfr(($`%~?0MER@H9Dq8#=+mHHcCqqeLO- zuxQo+Hsphl7exR(tqn8sP4&n1+ObdM>E=+RiCMJF{J!TD=t!ru(=R4)gr_r5V^#G~ zOX+qFpU=PSOn3ANRvoFr?GeoH2v8jrM;pEF2+rpQx!@2mjsC8VL*qEQBPNRa%863! zE~3h2k9sX8fD!UXf)0xka`%fZklt_#RO*=skCQ&Sd5<&LHqBp}23S&fHTrk>#jse9 z1iD`o0q4fQ9UKx%BlsJ9n03i1PSP`FNg-vr0+1k}zQ~`PtGTcq%sDLmYv)zKlhbWd z^Y~QqWaLnNKgQyVv+#dJ)SS}{6Su+4LMQzRkqv2%vJ8vaP8|Oi*`MGwVnMgO26lGf z6`M#_kGG)dNd5oGy99D@_?LO(nPFKM6_T)>2&o1t>`-&#*l{X$e83waa&o!S2ws>1 zLqq2p5HStAWWkP#y~D&g(Mj2p8uMKp#>F+F$toEmJMyi6@8Vgz7b_9U{?g}3H}H$2 zFTs*QF!me-^lj3?C?4Src>X2Wlr2oT2SSKswFL2cI3jJnmndC2iR*6GNyYrSCe#v9 zY`*L>bO%@*{@h#@;)|s)Y;oz{M{l4aN1m`S&q5?F^nehw8dBzmdInbZvRfPb*#@{7 z*we!c$g{=`i@+>S9+!J)Cki9C-Be^rRv~CQ(!DNk~sa! z-X*A~IfhUoDS%PvKy#@UmZ##KlkBW@P|WB2$&+J>N}(6}NfJ+7VU)a0OSz;p2J zCyrA$%K2c2?6GyRM5Vmh0QS1*o`c! zpahsI$f}+6?iR^#(-|XFz|&KpjqNb#)r~O02sy<-H?9>#GctNY=!=VuBUw>g8mbQX z%+>E4E=nSP*B-tW`8%G?Ox0=7$`|Z7?+o&;y>#uAczWUkhz4{gT6!Bk!~pje;i@aE zPkwQ5pdcc0KJD?|^_!`ie_j3(f+s`kZN;ZU*9>k~pGxSEB!!;qowl3sR^1@VDQNfa z`UT-Lf|qDIoKjIYuv1wTZz*=zoGe=by4C~*=_1W(_$t<84O*G>)3ibac4sY zj1KTGZrfG0!Hh0X)gi5Hy_AIxA6ZPe+qc|W0yXjT3dkkQr2I$HwJGw+>W#w z@ly734)=h@G|(yebBpV540BF`#r!l()Rooh$DiKFF-=QwSWebjE7)(oZe@tRf}%l% zO<{@w-woNj&XMM=j^UOQ_bSW2MK~E4eGO%RIt-$*n;QCV4f=o+j9m!+NFS+W!Sl0adP*cz0fN`hjdtZN-getWxe4T9Vw0>S z0T_BYY*M8C&wko#uX*2rr@1_$wE?N}9n^^1NWhy*p!g`WG6PhdiN$uZYt2&#D1t!7 zO2$H$cAd<}8ypcocU&vwm)!JzfBiWubn8{3%{0+9DY9T^av=u%Ey#iqx;iahYq1tO z-1zABq=O&#x}N}PCh75G)rN~gO*btAx%2JTbhYMNZJRv`UB`f3qbLxt_YUH;i3+O1 zQP8d$A033rRin02;RG|s=bShymGUPfi;7VmNfqp%b*>0_`i5uxZTbQVs$kDNgL7f} zThKr;JTkRX1A!RBjQZKO|G_d{ngblxzZ$Ov=z7HFr&24fV1P zpv^wom121wkn>BmL-EgIZ^X!pFW-9^zKmy7;b5Y98Uk`CW~QYr3~#6*VE5OBui&xM zvWbK}Nj-YV&t#5s9DzV6fUW&&TsBS!voW_myIRoi#3SW=UfeDW4WcmuT+>7)0 z?Y`sQrhMmlubd^r5-!c{;?@83ps)EU$jNzRw)X?u>hJY|EDm&BnTQ(mJ#k6}OMj~h zv{Le{`xu+G>Q3=!-5cp=^Jffp-15mrodTl$!N(RIV2P3S{5+p$&-zroXuhD=Jq8G2 zy)|wq>N)OdVtAl;KB@U9wW!OraJNn7=G(9W6MY7NBwSmOkrnPQ;0{M=0oCgTH};st z3=WnQoEOVZL)(rH69#|JOGv;6yPy=;u*+gCcN6$0cIB2Ts%Va=jgj5tFl`L2+j$C!NX+wOFa?NU9c97$Q$gi|O$x1U+K)iNjX7fL&^Zi$581Ie0EUP$?Y3`+w+gD4#o1$R{ z?!9G5a%|yR`QFWA&HAtUT2WI?TNcIk*gia!HI z`_JUN^z)0g>#P-P(t=hBKjg!(a325Oxqp?Lk3XwjZFeSL@?^uF93DDWU+8_&|}^2bM>`MB<94Ov*O0XeCxmjy1!t#4EI01UWjyN zL}auqDPsS#s|{4zw>2f-K8{I=c%ArT%4gMbpR*JaEKZyi)gk8VXpNb-5B+>G zX~7mdpoAT8WX#;xhEK}k$+ElDX9bC$SDFm}qS%R@U|=T(cz_qZg9m`4=6cv6$JT=v z{bs4A`g7gp=R6Jnl@S*dyJsI>Sx|{Z>fa^rJ9^hYufy>l{pDKp-~8p10JnR|U)EHm z2bZf94;%cDVn7%g$CtSC%i|1AQ5sF@-7`Bx1(f}d5OWU@1wnJyq({_$4flUjkELsE zz9%B6#(@zTZ+9v8+9qCj>PLqOIiHcpYw8W*Ir}}l zRHs9hbRTU1x$;a0Q&^3J*F|f^P}?;|$iwZ-pLwl@j{Sx( zuS@Ao&uLVp8T%mRexcYGikk2-Qpq=Z7izXDc&@Pxln3oZz6{eHw zlSiBk%Hy`VK5suIb7*D9#phA}|GeG)|EeDFQ=RMQ8{}6<>|cz9{~bCh4rx)Y6eQ*| zG$6C@uZO{);_0iSGI9|sIgnJ41h7DaA7WwZKpdimn$Q>aTkrmVQ>|F`^v9!Tro=$7 zA&42hSDgja6guO1+s|JEeoxuQD`mOm(XxL%!~j|v`N;QFcm8z-?R z;;ALjYW98>InWU(LF?>Jzt&Vi8FYX0$DD0lR_BQy*~^P+MmfYhP994Op1}Y*p_=|1 z2MM^AhurCzJ7j%}C1!tUOik#Nvt-Px+?ysu#OLNHMF&}(c@SREW*_O@)1E(UJ^w-9 z20^L3?E(0QPv}Be!fm#=jr6T3jBii?7WJ>ld+LliKCb~NZ02W+GP;ze4_7@LA@(QM z*KQaky9rIV(f2{UnP<@@KptC})``auriTE2@7b~CoIbEmObud#|GKwSRBo2|b?MB+ zgwIG>X|km3qKN`@v;kOB{n7SZ>CMI@ z18$kS%t?m`CENI%}18F|x5FDd5DPIXeB2jsJfJVp%(Yh{ws3ajzJ`Oz=i<Y|7z8jyFQq)&G=_Ku?wzElPW}2$w7AM*maO_*_Kcb{WtLABBwFLfI;4^!t!0IwwC zq51^@Hr34C?&>0MRV92P1DUf>!oBKQy=8iB1{YK3{bE<2QD-#MydSR4u;(A9mL_MZ z&rIls38GW%KW83Feo>4G-h`*Z?8*;<4WFz!ib+;XNEpkhY}AmmQ8d?hsW&E8H}r(5dEkBeGW6 z-po>OP1y|MT29-W7a_%gmWtGDja6ru4hi-O_?+8u5f`&&%|#pKTMgAS`XFzSX5K){ zv@U(?4@klciaUGaY77g5YY*PA1vw!K3O!!wg;1EtxzxBpm{3X5xyizWpc_l|?e-;S*=RL%h~+S;U{&i7U#;DY1Z*hB5zwgA1AnTNnfMdJz7#JJ@~UP$~`~VB{de!ZdsUQ$SEQBA*bsQ3&GuOVV7C5JXm(HZpKjWB08;;Ea4|j zpfZ1rgN*FRI}p5YDTxY`_4lq`kcedI&n=7iQ=kj@*A%)G)wSoH%)MBlVY*)X1#&pO^xiIjAO2s3_>Hlt zv(|{iY$X##qXepbPg8|+I3Bt}5P4guJ**_J83?q76E+^lyxZGAbr=O?bc<2QbvESId(@t*o!v)T zE_~)X!fweWmqaGrD0QCfFfKuGer%SL<+Whhxb$g&lrR*YD&A~Lv^C7%IQKi&PU^$fj7?kNn>Tav)e7F=Q~eEJwA@-5@ydI zUYb*&tMOD&b@#o&!8nBCMRNr5=h%S4$u_uDLMe;3XT@NAlAdl|zGwRB@a|A4n0r|$=0rc1LB zYa5oI1m|AbR9AgDaN9%(d5N=8|1nc3xG!zbO7d@pAgd+RUA7kIPaaokZRmO)%a&5^ z{e)9+!s}Zb@KRE5AZxqB$=tL%KLFHC{luC3bqzpD7_1wjRi*_mTmX{5vE`O6qn}NZ zee9|z#otR6_sYWKOx7{TZ)T4LS{D^vE|GTI+eqP)OkP87u zfmCAqAaH|ReCVx|dsG%csbrNbx2*YQX>G=DByW@4N2v7MaPI}|1g6C*{_jp{#Y66n zUY5)AORPhj>yeMWU4FEFK8~4P=eGz$NU@~F7ti0Za7$N`5w7yHS*}!%5q~W6SMkf{ zWf|Mz7Z(HoB6@|&CI`;h20Fz68lzm1^e(EZfE@AJzU&vO+S8J1CC5Yucp(0iD1tb+ z6~Q>Cwp(Mmx%&$Lf$-t&3G)+_*9l%OmZtgcnCyTyhin-Nm^*2?t<=3*E-qaEl**v@ zTsbY@^?cm9MXwsWQ*kFn;j#1SpI~!#Dx=3_%SLN9`wA`5Lf01H=>^13o2=IpgCGwr zrD+<|#FQPLbDJ_L_ZZ@$KAKC-?~7w+#tGIN%0;#H7w4jQ<4I#V1@f7=9 zvLyzs(GUhyuSAnpH3$KMuQ$aw2RG=5TW6CVvbfAhl?Rjz%7*LX7jYy??7CGh?3hE7 z!)brMR*Pi_Y0si2G$~rH09a2tMcB-pxL-Dx92FAqhJqRQvQXIvE#m32S#P%n8Vj&3 zQ#N|HBs2cvSe=KT02QYcD=BW>>lNF|nP450bvMhj)UPPYDFY=KefoBH@dUf)J1|Bg zMMAZ1Uipk&cZ*y~YO&Qc(6ua`%1y`ubC9F>D)m;4>wLQf#oe7AgeUr6MryuYi&E29_z+e*?{MpJ@_W29L&{;C-11VlB)Hd^rnqHpEXqq2-~ozT8Oe%+39&E$Jc z9X2YXKgew8D4z!4XZ)fA9n?fgrUFNfNB$BoGW$)ue=fh3g?P#mS> z!U_w={Cr>4A|sL+S}xa?Ip>j2{C+muWX0T=vCX=i#Nq8uoNDWBYx?GF2vlOLqbY|OP zlHLx6YPr0+XZ22YM;cDXkkzHjtp^XpL`d4XNL(x|_>k;yNuyl*ZPqCW>^4=7t5c<} zN*8GwEsTAC7CU2>S6Av?hykw@CI>Ozg7 zeYW1~+TO^T*Hl`89<_~XMQG=AkY;XbHL34-(-O1HT+8tyuJ0{+VdVjT zRk?|9q??F}dDTWJN`eHrAe23xj*J2*N6wO+^A$nI89M>Cq`9noVf?1yGH;!7~c;I~1kZ+qHp%{P*FHT5ei_K7PK~Yuk z`qQV`0-vV$*Qe#O>gdF4%@?a5u`48N;sP&wo|JuF?(EI)&~FIN&*lg8c~;_(vKqts zg2zgFqMawEM+#a18@Zwhup(w!ru?G`H4>)!UqsUG6ZhRWF4Q+w0Ija1F#-S;9BL=7 z-L}Xq{PdmkuTmr$9fPXIvGCN{pOYMxj@ML%yB5 zZ9$ai`E;6mRm%qO3$T7R#|FpUZU(T4KG!yQsF)NKhold(q%nEAZek2t0Yd#Jnn(@dG>NCLRiV-os?niCpo{9MZTFVfEYwbI% zWhGdaVJ^3XZ`xq=8mu0JK@KQB$UM>j=C_G0JibC;wl{)y1Atd2+3*)V{(UFbHS|K! z&}4&zDiPT?X`fy~OVq9Dtq-;2c=%ukHeAY$o|a`P8|%g{dSWw%SV3c^m@!GZ!B?Z@ zH5~i!zw9V;J(Mod9WJN>Q;8{lO6L%O(xmM4c#Zt%twlo<=M2V&CRefSoUqS=I$0X8 zg6g|3|MZFINcZ2O13k>)CHO-QgoHZj_5yso&(gkg+24+aUx-6Ts@q__bDPL#z?Z#k)eo5BD5Kfq(nO z{D1L9J?J^s!nw)R++IxQLbH4zTusaAc}yR56L2Vg`bkLIkTZYqH}d)S=pj$UEqKod zf@In~QxCVquyG*!2hZ<$Sz$G23EjOy9A@_Eu>LE(HJ2?sYV9Pkm3;ICZiXNdz}+TD z%m7Hpd>~eVmPng&jy~QcQ`Ke|^kL>OP>I(h*R<{^SjHf6$z`2#!bV_ch8|jQ62@;n z@RlS)M*(UJ;1Cx`0v{t@dLS1}Ik++>>3RKyakU>^-7@7Z`i?v?P(q%sLg+Z;&k?a7 z0Pyz$n6`J%=t0>gkj$NIzCbl&{r!RUm+}TzAeM8?E!Ag;cM;h_^Tjm+5OZ=DI&T6`M3Qap7i9jES!Y{$ z-HAiU-E6Q;>WP?bBQBy%c^}GKv-^ANfKwikjvH)Vu!7&46iy8u0WTuFa+RR)m*5|T z46FJX;Eu7#4C+} z9&lZuPHr!_lw~3VXaP*RUEiVOyBgi*AC+fCFAd*1agpyZtws|03y%A^{;L(5yStbe@k#&xS~#tgjg-0 z;}=n3_RX|M9=fXpw9(8;qkYDJ2>f$f8>8&6-7RL3AIjZbQ9W0(@L?dfe;%q)!-Yy# z5OrDPJDEOr7GYBrS8OM8)F(av8 z5PCf#%nGVkFVVq@s!n}tpaufIcPU1&kr)1QFu?}KpR*)*FJC?RQw>G`K=7hD>=wt% ze>myoZy`?im0k;bz#Vk>S3?f@sdR2Rz{(S(WT7n0&Avy z@=yNC;*z)5d@PsNWv- z*;4={9I!*iZeolzQ6Xd&oPY~2fq1J^ms1ASoF4+L!tJe(&S|Iewq)6f@4?`Kb)ZxyLg>w8)w1(hN{h&{ zi}R*K2E6ri23WX;s4h(kJN>M1Xc#~kR+^T4+zY0f=y-S80+h#@4?g!6*I>q_T`_H$R2C>Oh3hsc5P%X>Rz{3ZS&!5a`7X^k^`%x_41W z<_69W&JXn`%iYa<`qxfjkX-P`=*>GOl)S@6oF`0@(bP&?kmiQ|7z3xpIU zxmX6e@07N@xOw7>7~^sU^Li9^!5DqmdGb%o2Elu2pT_%fW+jz!dvsz2i;bJ+-K_sG z<*%{qaxQO6lm7N6nNP;{^SSE|ls>*Qs^+xR>|lJ>{NKxYB?owWOBcmTU{g zm139H>v?BC-P+o*z9-=5BX9BQMm&IyLb>kdh7Oa7a|2--kYf$HK#_v4*+rbw53Ay< z;hu@bhh_QrVWnsy)>o{OP|V92T(smReNs=4QQe)&0}XCrld==9=cfv4Z>x8p^~HVK z2(`WV0AN65*K*=j&9^Jei!YZA8*Qgc8RG!dI?B%;w7k-S^iTp&$X)XOe9icvsg>c* zxRM)Gu}<_{kad~1c>M_+kY5l;1LWNRL~XR6=k?+qtI-1;5xaO2EkV3mpSk@Qc$$wJ zu}Pp7`Y%vYc2&saG|T235Gz42n|-lpan8{2^GP6xB@27*R@H+0d3@+%yn(ex#@`&h zcWsl{HTB2a7F53o?{(l-$OCChw*Pb6t+K&2b-OeyJ+Vfmp*hGpi*1zp-h}p;K~2iY3lCF~arXPg z_EDNYw)pB~LMhF1F_!InJL0_;E{9=-hMMI&+o3Ov8XAQx7!w zV@oL=^!A_Xn!ie#I9nevVG)=vB5&qy>(lJzyY%et{;Viy=`T8)?V}tSuX$?-sMg~P z0Fa-a~;>zRp| zzQ4F|{xjaKeBI5L1oY3le6@?C6NLU<8G>mW^FwhnFI8x*we#?`mI>L2Y5olG z4x{>%f&fo#QzAdQArWT%vskxY-G&BJ11-0Yc%-P-e1GZx{;R0( zqWPJKmy9mgu$4YUv{IkLc@-e5-6d-q#fZoQ0*7k1w`9O)Q;8eF><+)fNCYG%PbD&T zLc>bhJ0V;mePg1T8rqLrOghusqc?9=S83tZIo@m zW6g*K;ck6Pe%Y4r(K^G3g6S8b(=RXJzr!$s7?QZN{p!*tQR&Nmv(kj`q-+F1MZxD= z5vl%^mBMsau-`F*#jW~3XHo|=x6`d3XAio1eHYh!t2C@DIa`T!?|^y9LrMWdEgk5> z_Q9j>L=;=Un02w~p)ff)DmuIasL!4 z>clUdc>jk|8rIVzc7gWvT0owCEkkhCjo;<^wB@INv*5P7UNg~6-0l*bnRo8r)PDUp zRjq$tSD)WL|1V3Ec zarrpB`g1|7w}#YzICmxFHDaYKSa|Z|+_bFyN6|-zR0~;n1OE1s>BnkE*Do(qE>a}o zD?^M_N2w&wFim{_;Rd#~FoY{@ZW$^Z&6EdvB2xAaqxY9WWnlwdUSRJdz^D8Ow7fK( zRPZw>=~NIpv#?5<>y8ul(bTI_PxLiAyiK<2_9T zz2&|E3o@t7WtdZmR5~7V;6?mB6BAzD5`@&!Fhuw z=4OyrErtFrRph+nO!K#zDjsSjMY6YtFjzc%m+`Pn|K*uDY6n zZSVQ=Zp1Ra%smlkJ}n0)c{w2JK7eqI3sF-D6`rHZIzCF-OodlX5a2*KZ8V& zkCVW%Da@aS>wvf762~}j{bmrG?KAQyAZbi{Lb21$r*IXsLceT6xV=yMyFLK3ei80AWic}fSLS! zf2HkCF^ozW`|XL9!&vQOtDS}`pUK@eQxOz;StPY)^+q ziX(2KR>_c!Tr`F13`WttoZ=y~zWy1c`X4T*;X@q> zFl7G6B0pn3m6vk3_7n+F9bk4hb@d6|RkbpN8wz4bdHgv?W;O)f806{9^l&u$!G_=3 z?Q66qy4z9zu|@_-xA)LjTa>tV)0ynp<&cl;WslpAegj&S^lRJ7m9)f`aGT`v_Ih*b zPN6ERnMB($dgG@O2`L7W5!?g2ajXl(G^LxsJEDC~LX#Z$n|}aZ75{b&jF5&al6KTk zjkk4u45G|0w^{dtg=<LQz1lP#u_1PqCreem|&Z1>$4MKlh%~vv8oBekmr2|#5FHM zo{~91E}WbKvJK?Xd4@=*nyPh+AB8r;PG-!&X%9+hqgovd|BM53wYvmQM6wJ8YhypT znq#1oY}LBOh;-0Ov2mCjNYdFhKaeo}OVmH>w0>*6)L&j)AOi zx&sxbw3Qkllcc2Q7gG$#r8|ymn-uqYb{c|xUUi(yBN#X5#I~0x?5BhL6VBV< zTQ4^N!x>$0X_FoMy~o3t=rD8*A_HZ{40ZFu-EYHr0e!veJ#}xNr((~JVf3PrqdXzA zxocNUCR@orpukb7-c+N^m$tN$DZok&@+p5d%+Jb-%d1%-65XPTOD6Q0m1q*bNHZ@a ziAEz$?uWE(pz1%SrVn{SZ1{=8C>Nv~q7W8h(i<<^kL+vYy*J}1)ki8`?jj+mb4W=P zdrYCh3tgg-9y*S+XrRgz-QA44!_iz-jShSg{(0{3^(>kN2G0}C%27)s%CA|>S-E}x zurkA}Ovm;X@RK}E6GzS?$OEdJt`X4M(X&rgol0*h+^zh^quM1%txH$cDJ3qN*J4QB z0&p_)Q66ifjM+~eRZF&6AgfO?cfu-0G!YG z0fDB{5u}DC(?M7*3A%h9;5%nPh)R0O@ynBC@XiGPbVkO_eAaWYriU4iEICmpM}3WGWPODR)0w|?ANiE6>$M!aX!`{odDJm@wtG@ z=h2ny8w%Sqf>W$+Q!o{!zU-HG#GSC(%QEj~*k$Gp*;2f0`G>>nV6#UzJqL46>Rv;e zky`}z`Mg+G!2F2M$%QO68=MQ~T4Y+^iq-@Xrtb;EtAX8-&QPd6WjW1YaRB#62BCXY z95o|Hv^LX#UZ?k67h~#}5)xbAv)38=i0*fv%JmnJ;1JS|!+bucGK*Tqq~pRtBGy zjiT8(v)ynymDjhzMx)yhTyv@fT3Q{G8hqSKqg9Eh&r4iW0|8it0Q!_Qxcls}h9HcV zJiDf=J6~$15mYgTfo!RCl;`9j3CG*>S-)|>ln&m#tgf~_(?~g=#0?Ej5Sv*JbwyX< zq$Gt18Jjc2Lw2NaRl6ZIE{kSy|3K>fOlRQGUyZh|*f%-t^1j@aP~&MNw!bjutLhy6 zB#z;690N(4Fe{aB5fIhF9Kbwp@da2vD2fR7Fj4L=V4i@cTvlCinTJEzF{%5=mzs!faBio#OXm+ z2Z;qRBJJ}tT)yXZKr!l~bYCbyE!AgMFK&#=zIkB<(og{f(}J*}_m&|;)ecv~i?hNV zgumXxj;0D&eTz{(G}mwIR6qpPWME1v6{$B2hjyH}BCNXUL-s2wFYY>~-)+ zDh{P(k;5#x`Q8iL{p$SXSfE z5K=tb5I*5Zx?=T6s6ssyx-fnYjfVk^b~Mr^IJ{s}_86Omg2M02l=#?P>IqiOW~nte z9Cpg+{?dVF54}%|%p#l~#mXL(qL2DEHty&Wzo%|D^wFAitJ5-N?s8Y=bmZFJQ(qkZ zj^GvK(Y*f9r8iB{2Rd47%gzV53$F<17k^P!*HR4Szr9s#S@tD8lRiJY8mypnxi0`s zmi}MoXbIYIul3Ru#%nRF^N6jp=-n^f6V5{oN&431)3n2lOZ7VcAGuP)CNi;Ond*?4 z3R<1}J(8x>0a*$YrdiYg03;bch`G~81`2__<*_On=Yuc(^xol4+{9O%S~W4887$|O zJz3c9ihB$n1i(pDbwIyOtaD%V|CU01sSI_}{16yAKLuX!bGhP6nymvvQWV5pM6r_# zHijVXBw%Kx+HEQ|#UM!r<4b9=AwXmOKfs+bXb;7~!}b6qNIf#gvs3-cG$#1P3bZhK zK}J$aIf3U9O4sIpZ+pLG0dKk*wKbJu|i{=~|&oDfUo#c&s=W!mA&z6_k zLO+4R0FCg3`>semLonMkY|}d#)+{zk9S{^B8aT_)Y}k87p*_ zu|gZS<5p}*#uS#}J*AQ;GC6Q{-`K>ExbH}~-=9az|Ropa> z>J9I26ah1HCCTTES#cIhpDcWeqpU7{G6*zc#CxL;Yg_;@={`!LLTILrcqhHf9@Enf z%gdpj@p1msyEncW)*o1stPKN=1~1ZMWS^XM!jpS)X0b<*HMJevXpZSaSq|&-wqK%q zyqc{zU=r8vaTMC5AsjappzByi`1P!V(eAago`?I}0Y+dRUM)A1a=2T9uA6d__i=zX zyxH&yNue@PA4+42Re;V&=@^OR3a%7qaj*OIO+B2Z*;A}p`ldw82@#PPMyuzfy{hjT;n1$ zTv6i>{u$cJ?`AK3I2-N|_cKh@$APk9n?{Nl&1Wr zXup0ehXhi%+#>pma)-m1rjJRbrjsK%!W`DR1GsVgMh^|S?h~x7H&F~ozW6nE%%_rs zi>cX`8&C2gr^2_y*=r+nQFc(%b0Sg28XA=w57B*>FIb6Zmpob6xP^I?2*%@+L2qT5 zdEGilE=I18SORPAN0{}GnZ4LK$i_77gogzuvw#i&)G%OilukW{6T9}RHH_xq^GY9} ztFci9DGZ@QV01b#Pio!J;`Dywl;>8IKY@v&7IQ?%b6>iG7O0o4u%y{Pa^>x(Brb;CZ6fp=1 zlT@v;TYUPT^S<*wm-l&o?{oQTVEEm(S%)J-FBOcvtX8chl1wws_b~uTj?)-MN-iN7H(+&r4~z?V zsPQe$-Lz*b{%)83d737+waXIhF0YBAhJ+huAwd+?*o7+d!ur|BIbN#bfn4(azN$KZ zg1RAp9XK1a%VVQ;J@w~C<#}=j27KbBR72rQV2d%iD$$ID8bc0DG*nKjh%YAbtTiHq zCp}c0(;!Zhj!#W7SQ6aQRkVD zJ>n^@lSZ6~E0cl=7$#Iuzn;Ft@^(R^S8qJbBN2~&#Q6>_7dl`{x84Jrx14^ z2q(RKI+JU@ebgi2$+PVAm3$Aq>vEW4MENo<#g~R*>$0-KNHliX_SHclpZaN{Xu|xX zHU1+td94xXt<{y(2kBYFyrTY`i(}$k8tGXoU597n?${M=%h-zNjqoVH5$w;gs(bUx zmPJQw9K7>i=N&j)EB^%Ce*dXoE35r_X~sPkow8sf`?KdCyehi)&DMS&B`XgO8L-t^ zEvA%)(%*`2b*3)vOWXu}k;7jqc0D4cnTE?XT~Thpn=uxYw=bbRJ?e6q zeQl_51>HQOxjk?+3pOrSrzo9^Hh66@d{}^BXGdJ&ncFf#h+xf#^0tHd4dpg^*(&(5 z+ah-bbFa*`Jr`PLmD19 zI^`fO!EiZ1Apg06QXHd8UBsfweD4M@1s4(vQ@cYzN#7?Ua#s8Ui6++i2mP$4-;hW} z{}wLfHTt0MweLMB#P87B;TCz={x6uPwh=-EBw|9Q{GG_v(+3H)*s-F{;3NBkROqG+ z?ls|f;8VTT_V~^;+oCz>kyQ1jO}>j!6K$zOrER*oP&iH_N{zZ8b3`Qyu% z;_(*2coep?e;D_3_e^}_?6PHkWtsHI1%JKgBVQKwuvTsd!iHaThWtj95!H!c{fl!u z`S0HETS(yrQJ^$p3|bqUd~ED~Un)TSIOXNw>XFPlea_{iGR;F{E`Kesh`%1It8f3T za;W8apvt3~pEg%=Tq0{|VLeyWSErqnQ{OP3Q}v~iJ`|HLVH)T=WuMJ!3wLW4byi;) zRq_*~daT6z*md7#%^=Ob6z+QAeB}3=W)vL(fRi?(%gdHwmTfF@Q7)Nl(xfg*@7RP8 z{nt%a_$MS8iLF2CaA=+La)XelyNEsYMTU7-faH#rc&Y8OZBX1?y3NWrs=3-SITt5R zcy(RLwxuzNzh=Swi|Nb=!LKDMciy@4 zDM<1jUSM^8R(QQv9O`IqrP;0)PQ)MiJtQq&9i0|p;qO}_gh%fudNC?}Ys5L}%eF>?<#Fjknc(Y3+QJJvhE|g%)OnDV}%x$zqlbY$w(dwe#nA zLy`x^QSZGuIgMZ;7DEf(cYk>aD6e|5D}@mr3iji>7flzJ$D)`JkYOA?t5SQ=M99N3 zQJM)axBs`iLeBH2SGhxvL}8;hXKw~JM(cu)%pl00 zw|L)vEBt;#vU4}(;>K%L+L|1ty1*kz)6$HmdD0Fbb6e36c|`JX1pAfFEblwiyRe589^?%L)D!2UHBAM%O0z5W z;Iq2EPUC_ayrw}+z}`d8R{YWJwp;K>lj@N99|xV9`}S+zvm0oGvj^t=y^(gT|J-M3 zO2sexufCjdo3!RHAFQe6PMd!4tJrqmp!Yw&`u=NIH-3J5B}`W(`b!LzM7035L$cyi z-fAM-Dz*m;+MRaJVZN!!9!cwTnA6B4hm*pirpvohe!PAt_Yw4mQdMT@T^T`ew?UD& z$!ussfVI@?;ESND@d{c$m^h#DnH z=IQ@%pxqKtbQl-MP?b6YWIIjy>XA zRPv#MIAU+)@|1}4b<&R4&%WE%MNYE$2^XKi;N#3=gXG54*udEE(T;ssB^^u9pP}kF zx?>|CsPiBpC+c%Xb0v^5Bu?rzV{E@zwzey=P%xU;?u;#6>~pc_m7vxS4kSz zeLMf^t<{^nR!q8&hh^OVaeR`~_iy~&lKk^Nz8uq5Onm6KiymE&-AO9??6uWvm*wPN z4Vd}Q`}mwD4gW9Gx*x@D(-Ce4ZTQE0$Vn^KUraP*$=~)F*{<_C8%VnwQ41MwM=wQ@2UwZrUMKExBrSp4OXbZ zy(8dy2+TEOJ9SN+<>@GxAEgk7lSJuQ#VvT3^Yx9?>!&S3iCPeyWB``LpkM;T!RU}b z-Jk-M5wHp69BHI(MQoK!L{@y5Aymq$)lODBMAHnLViN33u~je8Fbzlp1q8P8WGC2! zQk2tf%QUUToBW}oehT;0I7haj17!DtYK}p`@Q+Lr3~bTf&3g54j zENgZb5;1Q}&>?^XWtFdzRm-i=UUN-jb3HhAy}rW5(h&s?dW(~i)?BaVAPM#$s?zl4 zb{-m6n@5J}WJeTgr$6LLt;!^gt2?O~g049`c{NbESF0-oMa;x_E43AKQgj+3nn5Qs ztO17&rFIyBjQ4=wGi*uN4dz=BKDMSy<@u@9kdE2Xa63>_TQ8i?q2AxAi^H|6=Lbjz z>7HZ#I%_-+zEbI|JbBF|EP(&B)ZeR;Z%R>gRsyX=yCp4#fj$x0;nWbdJWoneBuBz_ z+D-$I+M#MxcB2mZ_9V7Hl-5Ok%<2ZnQ3N(=rDh($>}G}1t4fO_S#w*NFI51MC);0Y z*s#xPd;isKd za=>D2mr)c|>C`B*#gPQPNOpImCMmFx1RlK#%8WD~BXaouNnJtT1%5ED$u^;n68LI5F~h3?9?LJR4N^TNzDgTi-`K(5~MrZd*Fz!k-u1-Sp_JwTAy-3;E5FJGVq( z570Yne65~usLTA<#9e$U1+^MaB6G)fm>p03jwzKG?h66B0$}IvQGC;hcB@l`d^n&u ziK=^awvvw_l^8n*=oLE}6|dvL1_vunHW9%;+X#MVH$UZ~W2r2L!+GzV4~90zo*9qBHd@Pf(!7G{A$b zI)-k`d1O^dBVJ?3+ozUCVtDTYZncpI4%1S&bbT4zKMx=ZPgS5!s>o1hiVIPV}czOJw#zv_NKM%{2|v#Ajmgo%UaK z9+ZFR;wAKb@}4VU9n6~T=$Uw}7~5O!ms|-p?Jh^uhXHWTx7du*V{zmg9RW#=ni!I- zo3&L6FWkJe#P5-5Z)IMTk`s%@>CvxNo`7wZRJD^X)k=8Jn`C}RO#?}}HU9QfrV{jd zUjowL%^qiXNa@ceqQh}Kp&WwaRed!@*R0YBEfk8IvHVEc0Q60rI{^-jCKYKFa_h~+ z7yu7TapF|YG*C#8jDKDwZWdxDHo>h;%&j)=w#MtE1~}lbzph??47h+1BAZ_CaBB7L zA5Te;gDKXyDA?41!f_ytS8A^af^0|rNxL|n!?B$qWQr4DSeCBVu@p&<;e44&GETac zMtX6_!8S$l78K6`Hfs}~8{-XhVw77@ye@nuVBTa*W@uEteMUWTC5TPRyC8g!yQg<3(6$!=))0ZZPPi%{g8{An*^UPL0X4D2Q zK~L;)Cp<=_b{ybLOwggSojMb$59j(rjva`B_gOcBmg#9~l{`hpchHFGeNQR?n9UF( zV%b2Z>YUfQE*)N79H7V7!;rW`j?O*LN;ynIZB22)kJi*!tZm_j6K#m4YGchA*=l4(TG-P&KZjk zFAMtaLo+)w#`AsPe$#_zoN*0jU+e|!h(sOExENI`O}j2_sGzPTeI`BMYM^BdSZB zFx+t=#bIya&CzN0H9tCW6Kiv>kN_Qg;|2{Sct-^(@Cw~@xBm@D~MEH{=e(c za9jrOu3>;DkIFx0SCK3751Zq4l??KdL)6j&_(=tUidN0}HYpNLQq0@fBPn!X=oPTz z_~+EWn{itLv{%eIEze+AVz|@BkE80?IfzU<(qKZ$5pj2t&gC^i*J5Y9sid$ z&^%Tf`WH(DbgcvL=Hxi8#l?~a#+u^+dn&wI%w5V={58w)iq&h}SxBqAx3Y#>Z|=iIuA0yFJ*=pBUEP!{wZ_|_D_Vr! zX---$7MXU{_m2I}__HMoPhJjP_`>ol!~0!wD4790o}<7pxfOWtQmDNc-X6h#uVi_= zR>7ALz(G&9I7?OzK6rTZdBvq~kPi9E6WIQrMOt(3(+Y-~i*vg&`9eqPXA8w%Ei_u9 z{Qv3USw${Soie#hOA9 z%3mlcODutlgbJDX>v|G^QG4Y-epQYMPGl$R6>PV3E*18 zvuY(Uv)-wYx2r|UNN@vzfB2t{=dTXtWOLx$;Yc7!n9K>WA6TUi{dITSCL#BHx+QST zB#Xw|`1nbLNI14kqgQd()#_Ws@|4XMB?y=Xc2|F-8e32;EHq1b;N2HENdI9X02(7; zxDm?zInF|aS3WnZ593jTNd_W?`$VjK%s*-d&iRk4_5TT1cajVIzsUoin%4ghUNN;= z|GlgA$7$21-M?1Lo;NbhXXEj=@T;?X_Bob38;7ml!>>MW`PmZmU?%RAeSu%?K5?ce z?b57qgbBa8@#aTT;~I}~*lhZ=Y2Pl2PFEfA9)}BO;Qw4vHCQ||bR1fF4ZqsIt1EOC zYaHd88gOb!r*g>C|q43&PX}JY`}`8BtSa;*{k*H@ zDonv9|NH$zF6e<5dgzTeI5jQf=@&!C{j=V+%p8)GPJ+1{&O3N#_Myjk0ny_I%yKxD z@NK>CBs5L20Wj4jQ|x`*u|jTUO|oIu?#Z^GtI;&SfZ6gQoAk2xWWQ6dBVr?uJp(_c zlL5Dq`%+2z>a!jmXQagQ(W+m13MOH8qz#y&09f~eZ9w%Wi_SnmQjZ5`=$I$}Miuaw z2%4n$WLo^WW3AaPXIl!#HiTKZBn!H%(t1iV-71-c>A8YTk541YOc6{#*M%}?+8~9C z*==9OL3IY=%f}?_u_9EoxRAhoIZPO|o#ncWT-Py4KhyB?wSmo(Fhza|aYv(@P*_Sl z5(}GnNQa$54g3_&FC>lK3wP~y$3*d)s=({!cknDW(A9!R5FWI>-98zIB*pYx8Z0`^ zJXV{WVE6HNEG`nOT<$&cc?vgXC2;I@{5y<(tIJ}gWChpBO_67qEp-~I!qrP~^}78r zG{zhg80c7h0TDZ51J@|<{5VW!hb7qKi(-T8Ba66NH=Qq={N;_Jzz-aY3((yA&d zd1fqks~~x|9pqU9-)6^iPt{5wjtnaZr)cZ|-{~Avaa~VVmpb7hfjXH)AzAGBNuK7Q zxQ910%RUJSbsEd@z)3g7;#ThKxmx9hYBkV75Cok5JVz5$N*vx5_#V7}54Wk7*q?#z z+z%l37+Gec;m_3!b-1sf&&+SGVxR)jk@}A&aS}Jr`Q<+6vCw^r%Z(uWBKMjx$qoO) zj0^yfwtM*RyIN(k6pF?H3;qV0>5atdSknnu?myJ^FGT9g4<}|0Z^$r}Jr(dd&L^o_ z0R$1?3QUAH`ys+7XxnW;@}K127ZpPIXM^8Uc{@xCA^Eqe=t-ckJArAdC2osV%%ilT z;13S)3?$JCBvyuXhk`>6e4XSP?epZpY%DI_uzZkI{8&*&*1-e&>%pR2h;%-ZiW1cj z$5ta}HP$=YTANa1mGJP0yRpkmUlLm25&T>%NP#V!%0)wTH&quJ3o4e%f z2b1VyRCf@1E2x21Fi!45Qg`P~dc*%HZccP4xg#3_{sHU%Vn!bo%14G8K@K8(b$bKu zjp4U#B)7i@A59@}7EXZqspDY2UXEv+wPvdT<7WmJ#M^yhyT_1x%boGVgAA$bX}Ifg zi;vrpg6FmhxK2L7^}^rvmlLdS9pq&{;*Z?WAqt|);9(dY;BrU1JrzSr55vp5f!=r) zTS@k~LJH`f*$hS;nHVb1dApzLR`CdOTMQQ)5_`y9V4%NZ^tgXWhtJ1ulg_{y9cpnq zht7am{o~Dov)*)0v*z#o>-dR;s@+pDdM6unckx5<9xCpPQ4;@UTT7sPtU4Ry3?con dhufp(#3kCvKPKSMPn))Bec0!s|J;4_{{U2RV9Edh literal 58055 zcmb5Wc~nzZ7dNccVq3+bS{YuI2KQb?(0B?6c1vetYlx z=$fsS;&-awZQ8U+@$#h$_M0|+Mc=e(%bjl&z+Zf-H?zV2HUsun=QlBUYQx|kTYb;j zoZGaih_rq2*4NQI5pO!pgLIPd;w=Kh3 zFBxohQM(;q_WKV#++WiNH{I4Tn0dN|{mSh}ZL_~NH>&Np8G6gp_{6gyZd}@cKlT+;sw)Woiw&nk5R)p~%^vhfaM~v*$iw0y5BKYUV)Eu#9 z`|e0XSH=eL(@iG|?<}|xq=D7XO%>Ufmo(?K2!kU7%RL0S>(p2;JE+nwTI9ujILI&; zeM{0LrOP9bq}63CiLiAxuc4iE&6NpFg8$UX!7-p#lSB1<1^GIbe)CF1$M}NBwkYB< zQz7u}6GJ*vmpfuZstrN6(Gn%50b&R(L~TVtSg-|>j>Jz(Ru*Zs8hekfn6Uo2 zNO{s;_L1J`HnCeiSB3Q&^AxMID?inSTI)3qCW3rFIfJpi<$YfBZ}Q*O$pTYl#3dPe zg|<{o0GYM&k7kwO*T>|Pt#W0Th=a$*8TNI31|I?=WXZcY7sXF4qu5Om0o(l`910EY zBsL*O>6G*PT4{17&3NwEFKmc(5^}#^lq$t9O9;#R_b${sh88$s-;7KI9T>ABj#lC| zwzH^PVmu@=vvFA}BxUMRkzQFQ!3Zy<=|X0 zRPe`8-^~Wt&QI<&e!%e5rkwZWtZ-=a1|2?Iw4yg3WE}eZ7Kw=5tZ(H(*}9;rVy$3# zSdyeA_EiJirdB>{F4rYP(l5FcAD+G5O68eAY_75F+WV#}>YT{^Yz)^jAN1{M$b| zm#LuveI{iHHl7#8{<(%E!03L+e@ki1!Poeo8c&lyu|BU0G!z~r^sqz3JdgBvdktfp zx=H3$5f%Tse#!P8+V+;7LV^-t-99jPfFSB#RDK{jFi??XbkEzo%BlstsswTYiyy4Jb4?0{@1q1+?W3Z+@NgfKRjLFfMV~c z<3Q{pe|r=(nxysIGO~OA-g0vPR95Dm!-k@~rKVB1S!h2zq#Qn$EWA2*uQG^W$uTc; z6#gjCZxu(R7^N};r&c;O<*1IP`+qOUl(u2usVI3w^3vJRSWpopHl}iin_|r3&*Alf z?;hx9SG_~s)Ia_Ave<0kwsLU(xpVXy<@hM&kCK5ds>od_^6z_lS@i`;(k-ZR(peUB zC2tLiLZyY`rxhw3MRjx6U~wVp;V_4%ao zKa9b}#lTe+HAVyVne9IkN8E|(z+~|3>Fl!mf75<1|F0COA+S)mGF@A}S&q=nf?C~T2@N~3q2&|BCIo~?4c8Aor zR=liL2EYbh_Y&c#5@srH z0nS((Hj~GthHcv$wABne@2_*{1t_OfkyHc`cjU3Nl-PGR=mV_*m1ZC&)z{)lz5f$F{RBR}QsDQVwC zDIP!kSh*B!m=f95?w<7$N;poWVtMN$r|*MA7071XW5IVOpfTSF(AB3cQ|BY(<{b?X z*s+dsQnq(&RdO;MwMMzUCgf+yjr2rIeVcTAtT#r;3vZ%SB~wtsP+h=9VzfR=)M^lF zTipKpX-5j%p?V4WXVW4z51Ot*CvdV|lLtN&u5UmAm+JKueL}E!{i8E*S=#4t;g0te zppR)-Ds+=96l)LN3r3zst`QwYYzwu0rf^zLbW)h?R2xX6lfMbJ7_)-#al#36xqq<1WqwMji{^*?PwmoCUKXc9~YDI%g67z z7q352xO0s9{eOP+`bPKWo#ap>E>;zZ8%mJ;i5;3ztBmbU)&9Y|c4Md^Frt3NO_3&k zTElur4%OxIT|53_QA@?IXdwn;%0-5#**Evs*N5~M-_>sYCYXI=3)x3sQ41d|I7y)& zNrf-;$G+WX&~aa=0{C|vHY;~p-xjB2xJ{guxy=!jO$J1|8*l#IKgu?Ok7q?)z6?~^ zGnxZ;@wixZZE$-;X%b?G#+5C8*D2>pPDkePpY>Y?^!PKEx}0KiLgnkDmO&wd+GJ~o zuzrAu#D1|jdP0r%>5hrw0;a;`D89Tf8)Y;8?)&tVrS%=J4HNT*pQX8d}V| zUvtDRFId;+1YY76*k9q3_?%oIZTa_*8h}ERt<$!MKCa%QAw`U<+t!DHkJ+Lw?|`R< zIu=}1MPk>r75gQZn)PklkC?5xhQ1!E@7g7o0=3HCQXWHkg76_HJ=eK_36)`K3{YGKz=dF}$?Oje@_(5yE-RL2IK+K_){ZRnKLfyEqs-&$N>zrE^0# z-o48H$FcU}#-R;viQf6x%81%odWt#P@64FcjBkqlVx<{xN=`{Ir@1azyqIi&itb*# zf9}6@Z&;AUknQvqDh^A&niu1i-bih772d1q;f(T@i(u=k!Vmw4Y71&p!N<;(D;&h@8dF_hst%-6k4VmCe4SW_5jrBwWYPM%EVoYsm%*KyTpYA%_a)0 z7n1BR#4ug3rn<}xjgj?Vk#G7b{UP+}F}bkI^@&T{Sqief@_7jE%=04b?O31o(c8Ql z?2R?r^7dA0tDObLTIAQLsVOGQsg^&MEo z@mNXI?+b>6DkaI$`vn4b5$hTEEdIjD!r}P zkrEtwBy3)Eu3jii)&u5?b>8P&3e-o7Ww!q`C#kG z!=QSYL?0|@W}?kflBbhUyqH56Ib5*zYBrrqJ^gM6W}iV8lZsow2+wx#6IGMN@xrQs zccFK5@!rJJcBby@E!$w?OVP*O}WQ5YyoE_Y!1Ff7!#_<}Xc zGX;^xbOgmb<1!RfVuN>LPoTPNy{j$Tg2V;^wsCH2G)LV)>+)?z3pMokGuE>TxGQSD z+y?d+b7!bsvFE(7w#TWhNL(c~`d3AP+mP_S#EwT^(g{}OjoX$1sj-TfgjI2#HcL{AkS2c0n zA%gxwX;4e17ycT;Kw(>d&h3rzpXtk*p7QW@*wDLf+r)P%=U63_O9`|S7kTN^{^9>$ z>$!dw!rWc^;h9{16i*oytJV4o20AL~6T}xW63#}yXqsdh_c zD$)O0DU(+ef%)Mmt6SM)HnPG}*#cX&Hq%vu_4rNQ=RIvx=&xX@GdV?t4ao==^iMdc zhFKMfA)ZYeS9fMNOs_ADoepk-avc;u)dE5I1=N@pDofntK#EFosj34@)deVVk#1ia z)mp`(|Ipi;wtFe1fVyH1oYfG%F&1>+_L7nMt>0k2qPyIVQPYZ{Pd6#!#C-o3YKX{S zygb@fcnP&mdK8%qZ&wR*+PlZtXSwyHxD!rs7RB^M!ELfbN_0SVO_N`&q-=pH$L|s8KzC_jgr1D>$$@1 zW?KFaqqkhrcjMCcessh3Q^l?GZ8b|)5%VJ<$eA&0waCgmEJcggXWyM~=S_8l-(#R8 z8?ReE)*0WnsbLmdFSXLA4RT!)v%WWYtn>CocgG7?6fzy&(NNR_3pgopbSOnGwU{qh z6_z%wK5b{QdVJqy?P;4+@wFzB;obS^(?p$ud1xLp)}0p7g$o z&m4bkV3(JD=(+so;e}Uv@>f``$L|*qgb_Ore7h6Ay);^uX3fy!(cYa2uRC)`j87=k zNW|E#st_&}vjawJaJK#VP62+(d|9tHc=|GOa_`ZBvW{!PlBu|KL#ZF4-np5{+8z4y ztd}kG#N)=lqa)_(G(Cm8$5RA$(d;deVV@xHPeDVen$0Md-tooOS52m0w^LVLqHW^% zO$FN5a1#6Z=QTkX&!u;T$N@$Ckd1jw(pzW+Qvr8D7pPfjM^}>$Fgd;{Ku~w5>;E#g#fV zPZ=*_Xe&c9rTrbqnR_?*nzoq4E)=M2TBJLA1#yx%FCpByw3#$;l-+K+0aXer7IC#(KsfN&^q#vF!ylRNS`H(I2@0r z!prK4D)40~)Ae&{Pf-g(jlJ^WdjT@?T*qcdIi4}s_4AI}@!6#sf5Lt1uJLxZQ9e9V z(xoY$bdf9yygwa~Hz+kZ0%N)DI5;VV#x0V4ykT3!&$mkH`CN$XojQ9xS@OO7L1Kvg zC%ffR#kX^9iJC2V6A~yS8p&Whko9c|Nd+qYk?So?7W{%yRZlKH#SW+5EPdYNqr0Gr zz$||A6@Gli^VR(#(H{?$MkMpSIsitgYrZ?}{5j6xw>YhI*K_}dTZ#j`#Cc^36l=`BhxqF!Q11~7d$RNtZC zijy|lzqo2tI*hg5dm4J4kE_agIirSn^(Skjvu3UW<>iPQRL$%4e~XIJF}-J^rbjY| zsj z7M3aj9sYJyI~Z#5X&h3&DsfH>HIx_`7-9watw()`hS=fp_q?3e7jtQ4VL>L^ zoFDa^&v09w7Fa*>8H+z>q%BU7dkx=nwB)K`gXkDBJ=@f0ldb=@TRR$PKoy1FvuJJ4 zj&XU6@*xoYBNy>1-)qDr6aQc*EWv#TNSEX8@$@!ntQ4V4LKYWK26jhD>WXBKsS5LL zD3RWAws0b-vRUu+?1Tvzvxad%6-GAMfux*!{P6_P-`;jf)#_A0KQ)9GWNj=_P0viN zk#gY7evSI=G`&{(*qzMqB9qxa9*5xeP=h?<8~fh=QnZ9(-5QBULm%?Gc8!c-Y@hku zOhA0v1`CCZmhUmIMaUmCQB8k`j))e#mGm^uKGpc zU=I=J8~j6MEcwBh8TE9mm{;9%FL$Qxp8c7=;SUq09VI5D0HYbXzHj*ta-hTi^mrMm zCkJJcVC=+^kR9P4*!{V*$@$Zwd_o5>v@sJaZjN|Qi&eb}9ny9dqgN&m}fZdO;zk<0lTN_bK#&_elUV=Ez0S=(iVI&ua}8M z|Kt=%N8NEG&3pVlFB((su{Rr2iwqQK7^g~>RBR?HZe|1%svfX|iZ#bXm}MKIkdy4Y ztFzrLDGrQ%U}EA+wxHr$UNFQ1J_P(7pG8BgH6#)5z3hKCk+d5OnnoQ!Ohd~rSoO`- z<-c#RW>0by^==9-?5ULYslI)3Sg$v)7v8#cZCcDI`|Hiyr;djvm+E`xm7^d=%E>CV zvHE5CTvxK$jIZ~-z5x`wPV`_56&?ruyQKG)iOpyqd-;_$uBYKxIxHy+Yto>CU>=D)^p|rtB-nQ^; zGccnWr@uQ->Du@`Q0iOr^MfTH#GT>D&ei+jCh^-5kGnpDf2?$kucQVHRZ&k%)3!R}!DPIm1;J z!}q;^YCOcrLMdg?v|FFgx%X7S276NrO560ycB(W_YeYKgy-;nI;G`~E_d06PjZa2K zc%m!hZ^}wf$Cg9l{ig3{_vF7tS^2A~5r=Wyzl)H^96uD9J3P>oNAh6T%(O%Mv_m&T zhVptLDc$8LHX#|Af7XiBo+<~d7HcK_w~mgYJ+JIBBvUJY?m6Mjab(VAP{{Gq&n{2yoA> zC?$C;xOiZhI`-OzXHfRm=*&{<`Q@xpb>j${620sk5j6wxY^R2OqGubI5qp@;>~mux z92nP3lUI=gTnXC9zY)Dp05v+Qs8ulC<(de@7P10*7Ges^LUTTRJsf{%@Z!g;N=(&m z%vRg#W0>C@qqs^xmjNSVih9v`3V+$ar6vnJ5FO3rLa%EnHh^R_bqE) zFnLI}8_gxo;mHWvlaFmU>wwg~Jp8)#1hv0l>)}|<(}{Zxe32r*@KRP$X^gjV!t|Ig z>y%4X!{_r>%}!I33qa?A=w5vL=eAJ0BGaZxI>{*z@_J zW2nr@#HS_$PbJBMZD-RZJ;G2+~ zHr8nrO=FTE{$qRjIx}&-Bfg=UYc5SL7!7X~t2cqMGZnqRAQ||Gpuq>L+^qy7WmE%c zj2zcS1%^L-O;yrBzT2mlRrO5@HvWFmhl_VgcSebNL+-cSCWP;~SaodD3-^h5z}24y zb8hy>{_Uv8p$DJ1-aO+7uV4N=H~$;2#;?k;b(4m{xzGgpGZH=PV&wZGaC0z|MMILH zG5+1h?DuW_Z}-%a*uTNx%e|=*#BzR@uxK=;>Co5<%ssmTyHgUK4|EOrz7V$X@`U>> zO_Pki7 z_;_sjYvhE>RgD#dW@R?$NT!y7m<7D;e%59ii?bp&CkL%UE^p++n-WE zFRY>n`Yegg?YzPuShwYWaCj>@FfXtqA6=xAuc7eNXt!XS>i}%HRX(5cZn*bdBnRGeTG~aX&LqN8*fFeKTm5S5pmjm%kEOS?|&EMH(c9P%Z`+Mttlj zG?N~PSQv?`89d7H#0f~qa@usPIWXP7YlT%76`cRxTI){iQp};5MtsiNduIxK$Ee4x zk*XJL@|K|K;^^v8+EQz~BwWV#Om5Lz6w+!JmYoRGugB#5GQGl@k3A8~BXQ>YS9;5r zdfVLy|0tDDd$2(Z10eO&UEKbgNxEqZ`4!jkJ$i>A#;5m>3ggFSOL_ed{B0rWNujah z_}M~tiTP4q1ST2f5z#YHnM3sbWrs}~JRn-lf zxLz=o?E#{%OTwk612z&nwIK60@1S|bT!&ia9lAleZmnGq3XL^R#8GTzgJj==kbt^* z9v3!RNtCT)k*mqq9ndiJ%*O}py`mf@HKc!YyK@#An$?&Q$iq#+s4=5<&j52``v!R2 z272Eq$83 z9?IZ4Q{E&=0x1#0J?8h-5tQp#VCQIJIC~poWhMv4a^bs5p9Qg-Ua##a2yImWl!50? ztOnE$ND&eCFlN3ov-j&vZN=L{muA)ctN7(=L~scw=mAk;SU_iOR=l(!ea9);I4e55k@_KDPRMZT))p#fMM0$$(-bZG( z6$CHtFb6BJbb-)4*c2nZIi^NWVr8^{-z=n;4!Wn3XlCNwQw|Ox*`QHXJ@@-&6Q8dP zQm@D=C{m9uraCspcmOvAp%1!fN&RLIpNjIFLbCptz;TAdZ{1GmsrvbPtr8G+nL?8J zgFkJi*ZKlRFn*&_!Tem-SWl-7(8P!EBjr%~tp8oj^PnNj&7CRC1kqv4Zn}y!!jDV! zT_!)f&CAcUtA?Xo^4`D_1Lu*i^i}4)&aYe?NXUlw(J;0o5U{$%8J6{?5Uv|dcRD$g zf{cVJz7X@33sBxEa7jLx$q)CS(IP4Psux(cRTa!%724=Il6PaS)#%TqWjJDg zer79pLsn8|*E~hr4p(}5{xd8oi{_4222ir7i9I%G+X567CptEZ=2?gx*#=xCkpoZZ zra1Wwd#0dz7-GTN69Q;nV+`M)HaO1$JTwat@)WOXDnF=VSCZBk72v_{j!23g7Y65> zYVIwk;Wa~DrILtA^1(^Q9}NY>L!<%r4}CKeFCzjF@Q&_9m-Jo*yhs)lET8ZE%Tf3g zr8sj0$U`{+iXxon5Gt~_JZ7HULL=E}B+4b^QuhHfoEXQ+N!EBEIjkuSKc&OsahH;% zmAf>GU)AL1J_I4aBY&L^Ltl!`gx{^AT(uFa+cEL+*cNdOcV6i6x?;CRWd-g{#`win zrTq(@$6!Zzh&CT;M8FdW%+s&>nDIR~+1nr4OwY$KM>({#`zR?%G^s3^;Nv(GU;Ap1 zrt{BWeTnx2juI3~WDp8!;aJB7fUvLUrEtRJ6szqoVXyD(o`RVNrKa^k_pOOZ$t1h6 zy>PjiE z1IUZ}yVcz6Jj`s_@z~UETD!>Fw24fS^Ii*i?2zfs^xlY>7Lyux%>tfHf;79Ajw5DH zLel#E^NGLWKSPX52~$q;jDWCDjYISI?^H5LIJGXjA;Y$urTpBH<*69>+fVaM9(pUf z(eBnk2ZrdZ#FrpOBozyBM0CNKnr%VP1`o5}_HCE#gSjg^!I2m2-QAN!CPQRO__=E_ z)qnBvjY?ZtGjx+w1dOR(Z#K03tDa!R+oRNn4f0N|=oYef+})08gUR;bHsjs=>+oK@ z@at}GK?Jgawkz0LaVfmF%W=8NZge(YDp_R&&YHtze^K}_O>MB{RmDon;25S_0Pk(>v+i~8c-or`75KqJ<|LSse&m9 z{CU$nZn4XWxr;tC-dU5|-mQWf3+IH}{#CYQvMWi7GSj?zF`V(l$HT#4wr~qzq;u?AHD{kTD?Q9lkxgC<3o!vaMhptimi78*1Tu=cqvTLct$2V= zw%DmISK-1W5Nh|h&dk@KBqbd3dkhkL_-0&ttP`+we1^ zoy#fRPIm>U@#WiQLlI&_vXlZ0yz=>>Fn8qrYHa%}r9RvkL@VdnNg@!JwEPWCJvf}M9SSr{0G4tCtDDUi2jBko=Yjn5RiqqrwHJUMf?t6=};GmUY79<(i#zII5bG>Jvvja@o z1jW2ir~ILF9V{>`d{VhnVY(swv8veEr!U`|=CK`ThO=%kn?RVK2nO(zbd86-%lTS~ zlFlofWY}0bg=7;DNA0ObBU@}h?HO=vmdid)(BOFU@~;cU_pbADKp80kWrV1+-4}@< zhZy*nuvM>M(SS$Bp-h@|H7764Wgqp7zW?5Nh=;rWpoOAGX@AlVMYk_uRfj+yYPGa4 z5Vd?db;Ysmf9f+Xt<`5(q^!W3O7qy6rb!57328KN`mf0ezVYq$r6<6d=DrYQ{n<#Dhc^afsebj|}v|I=t{`bj=xq+#BcSAza z%X*`IkHHKN4XhCh)f9a0qRrnB=ZB=CT%{0leLg~%4$T#CjPyD}){Bu!kzo1XMdfq1 zks_<)!1r;<;$Ux8;7+p7UYD!=?g7RfrQ>QNA2;e$I(%&Dd#EcNsrQ6_`yZjTV>8j# z>F|UQrs9V@m~FwD-{%06#!yOXL{a{o;kgXADl z{nJ1GI-!*n{j7L=K%HyE{jivv!8;VVloL)tVn6xrD6#_{tPyTE1M7PBWd>Pmbym_7 zwQ3-hj|VKn^WZD@=TSef=Q@`^DGofZX{KEr8MwLX0nfbf<>Wj9I0uUys1dAU-hQ;T zKcJCj7gL3;P?x5D@DL!xQ|_V#XRZ!=s&j?9mhfH0z7QM@ZGCR4!qWE5S_-m^v-R?+3;Pn-+#jI$$3N%XpDf)1+HxVvk zpg8wul29>1uy!gmXL6Tw-XiLK4CID53q7?fMvL>czqrMH0G970v;!!>ZiNOovk)PC z0X5_BQC`;6(oZLdf!>s0GfI{Lz(|H*&Sv$l%-`?EWF3G4yniGS7QJiU+ z3l9&bxg>}4xFQ}Zr3aPLF8Tt8B!b~QW~SoF<-8zk;4F7A$D{znB$9#Cfw4h~y7<-5 zNC>*2U#otn_!Pc?zNC!BkQ1}6i$wP^;%t5m$~s2+Y80wlua5n>b%&1dXLH|_s76NX zJ;IS`3J6yLp7zYu6fkbG?mZN5AReak#cDI*#>yAT{stiOEK1I%*s7Ns}!?gZKJx=^MLW8|;qW2VP z7B9Z0(UXJM4i%uDPWz1k;@w#LIQcJ=zE9^N%9<>mS`&Mr%?yN#JC}K3WeM_6 zi~C?Q$OQ_o-RuAgDKV*EE;1!uE$~{E_7F4(okJfepX0s|--v_D*i#`ZgGvm~)wrvA zGE1{||5D*nD(OyC0;M;}oxjvj1si)vfh8WZwouh%QHY7WSPlE# zXmLvZEzoFv4>orwKZxnFx^p!4z&wKO#Y6F3%aX8}wn>5{i+t2_7T)m_+kG2%0hoo) z-oljf%}zz*c~n<_QqfxVg$I}v&)wX<8?z7gi+I#dL=NhwtmFqSCgpY1&bMPDuf(Xa z_C+qZ415-B15(Ck@{iim_-|Ct_{4@JGN7)?57m4%GatPmool2<`DQXxs8} zeyLnY78cI4HM>T*Er*4-?zlMO+7#?NCaOIwL&ASybIsA zW&9axhB8A^g5+JU>CPmzrW%U;kKpR0yi;zyrOlO*U!HRC1Hqlvo31Z{GD^qE3!FpZ znlV_8*(#(A+}kL=~SH4uZJW>iDD$dm546n>q zuhbUo)JnE&hj~0vp444}(izv+UTC@#)0MnI5-;^)2;BIWVt#kA@$ zHYsAtD5`&1t2TW4;=qi|iMDveJZL(xfBvNuHaCf2K*nPZm#3g)Q!vK*B33Kl_tnuI zQ7hEFQTmE$x_{pd4&8^K0686ZBL*HU4^2yK2NsK5z4A))FV4`>>s-@Fd>(3xVEK_A znJC1SPcl)t5SvJ}x^Ag*o87{nw2D;J&H`(l>43V|RDtnoIShD_EVhaF$*l6gBr|#^ zLipKm8HA>Zq3S@410!)_Rk?ydFNi7SDDaK5V+22@f%VH~y1|~rJ%EeItoG%2 zZ~lh7k5l`fh6gmI3i=!C zlP^{+<@77Y`_38^Y6b!KWi8&x-9T2q0Hlwgi4Em*f^WL{%74d*eJ@-W`j~SAkC)r! z?Mbmb6T7B;97+RC0SVN+4jy}RhKt_mKyhCf{6XY?RO%R1{{A&%w9Fp9-onvM2fb2l z1Dls9RD-KxI?C;~KLg08xxRf=WXS4TI>^XL2}N(z!LBy(v~G2Mp>hHAB*lIyq^i0{ z(84PgXtRF_-vB-JFV{@YYC-TIdal)(VSQ6*Cm<^%u9j{`wS6hwKIYYCH0uloy{lKL zIVcG22fNdt5fM7av6H$XiWr8)5|mc9mL*y5AThNCF*ln-j}i{GT>$lc>;VHiDcMlo zhWgpJzx0~W)t49)P`UQ@)f#p%b5njgT=~4$NAjT(OIh}_5<^jwaxkN(0k(*+2Ssor`3B#BL=Gp%W|x-PAZ7HU@iX*o_op>?mBDro(Co0l}-bLBnT2v|@ik zDNC~Wi64F(5E}6z1=Iif#A_9>TOs%o%1??fU>ITR@ejvD=pP>ya)xrkV89x=_GQqi zjn(j{{1kh%^-?bAi3j`;dVnGA4mbhBN>u+nC13V(#VkkR`@IdFjwsAYn>0eeV^z0~ z#=s%OlaB@uE3gM>*aPKJ?#sCKox%)+v8WggSU6fiU4T)GJ+NN-6HwO;A27n6ehAGF zX1x3#5F9fD{j~&r1I#R&p+}9aEYO^VJ7A?Z%L!HPk7xC51SYHKu_!U{8Fn!myOVwh zYODA~1COj~GPf92iHj&IC%u2V!9}8m1yT?j?HvQF(6zM&Z96Py;wmBs;sJIyuKG;# zDVkv{eX$X%cCpede0t$bZP;H5t=UF=vcI^mlXOR3lv zS6_~Qt5FuW2G}4XRRN)%v;u`aNoTB1+W5@m1jVQs(;^t?l+wHk=BEvf14d(tesfv3 zIA+ZGw>sA12j+_hIz&}KZcyo%9PHx-vtX2TM~mjp%5feE#ovFO=H&oS36i!7>2YjhGMM|0L3?cE z6w6mjAuoxQQQ2yh(Xd4}{fn(1+grXLxMCjrF|lSTvSXTY%UzI^btd*0YJs^fXCpx$ zRe&q{HZKdJ-U%aAErFOHAOk|D2v4YVRB+nIBVNkXoB~oeL}E2@1a|rxwTegUi~^9+j%4FP@Ko#d?lAHlBOB z3`{`tmsWGs;57r5;pcXx2mb2wGchMKCF@y*PYW3t-DF&JtmE#^5EeIy4^N_POaio* zIh(m+NL=nCsHHk3>V~)f3@q8@42lI<#|D3Ty{;;1Lcql21Bwm1ca*CAu1G=nynL{r z_((u(5DKty>u?(al9|s#)(1ySbHD`N@KqrC^4oBXLgTI74!m*&?^B|@qCk12kFX^T zn$h&dcLY^0sQhlkS>;WXfK4N%!>LMtQd==D#8Z#_mzA50&sB zr47{5Ja|8jJ69CMu&_oMxk*|#jOwZ%a&uBYT=o1D{ol&!4Xg&rMKS|=F^`O`+#iH0 z0SV+UXh(zF}DA?s!cwg&D-!sK=xkw zWxqgDKJ^H#z{T$7s_?5=5St9x6c^%Hf0|Tr0LuxJm&ACKukFWLZyv`})hgEOi*I3$ zeElcudoB}fpa46O7L|V$eW`o~N3&moTh}PKnHK&;UCZxk04rVwrVPQT^FAXHE=;3^ zf-aishF80))GY0^a<5-NFShPJJbu%MXHvlWbK3o34MdU!;R;Fn2hF;`%<7FVA2^ud zzey43*bG8Ry>Hv@U^EQussXM_sIJt2e-_oRd$Hb~@c8~}1MrnDbFda3MkwoNLbJ|g zygiFKPk)oq{=1KjF!M6ECWLeOS@FdHWWtwE9V`K0ryW-lY#b2$sEWE1D>h&=iP)Pb zN9lV){5xL2p37nniQ`VJlGTw*{^8~L=yM0Y^n^qOQ8hQeyWKx4aa;SM!ZN%9Y%}Dd z6!h7YE8Hwgpo~|VGQnv%j=hugu+xgg@OE2Y2auNC6xD?Q&zwf&Rv zJx@j@1+l(9u-rEt^tl}dIoR)fLD%MRVVCt@3VzUtxhu&6h*;mGWOz!b_9$vG-bWuG z76hfJNsJipdnOycw1#0%N)A|X*53>AT}PY0QXdcES1;EU0RMGD1N|8+^$XRQ^&RNq zXUetENTrXHT$Pu<1lODL)grF~3k-!CdBMYSz1&Kt4)8Cn>N)qUIfA zf)cBiYnMM%P6i>pjXl+;D_^xa$O`hl#FfpM1QsD^)`+ z(~n`7{5BVTq5O&fhFGv)`je=E^VloJLSy3~Y6g=VHmjeQuh;<7KZ_(c0+ z-N3HSMz99!Q3Ir@k`^7dgN~9^7*5(|v-ZOiBg$qZeF*vbJnn$mTG|z$K{*}6sS4VW zg_9U3I>upbDAr=JYdyD19PY)q`s526nwH`E^hkRZ|d9Lnv(Ksl%43H7p@>2Ej`o?_E53XMOaS zMx&oxV_pQ=`1BW*Oc%`O1D+9GI-(g^84nTj%o1w;-A`EJe?`m&5#5DAD;t=B8z;H0 zY9qW?S^rUD7+dMTu)Z)8KypJw-_!OZ1pzkleK|~wZ!-f;uK<)+rzAGTk2lr?o^B90uo6I72fWN#|&b{Z-Gpe@BCL4L@-;QHn3XPMl2AFbB@~ z^%buQd(8U3U018$CRi1RRm-GoYV+}v7WV~9pPMFX50^?zZPM97kt{GKgn2D0j?oKx$7l*f0 zkL3*z)K}6%mnYjpYsy2PHZT8EwbV+OI^jf{FWZI0cXtr}`Dbx?uy(SzLozF=SyC!o z7Mp`#?T}c2Y+-Z3vPZQnXd?P>Y|NeGVuEyO`<_iX3PofEO`X5zY!UghE*ab z9MR*a6RvKyU>eyy3mo9fl7YE4S(>Kr>LTBQwM9?R_H?jMmzyRQsG+*^t$K&3Au(tt z@mXvE{m7Y)euJuN9OtIjB|dY@h%bUv9bIgTtZ#1qO|~}<&cDiYG7Ajjsb5RoMr8wv z|A(l71PvFcESp?2EzNb3)R5Ga%y6T9bF17CQ7Tik z6f?I_)Jg*vmK23j(@KRDmlT%}m-k><^Stlx_k7;}=F{MP-{+j`Y}a?WI{L&a-X4G0s`|4N8k0AM*_M`E?~L~M@dqk+nECs5LHY+zW|XeV zJv2qPr|?2ZgiE@L++K1o-)<-5ULv%I_Swz-E#5sB`J@$B#@M*O z0=4qBGZ|KjG%eYD)vD@+zRNJj)DNI(S8m4hh=KA#_q-sW5tUhPgsc|#83Y7$C{>MB zwTi4iEpV-uzJU1PZQdtC6Y>7i1`pj8OR8#lxIwQ@L=PfSskkaTv7!*TOK3F#TMl~E z?Ii~=2YP+nm;*iy;S!B_vv-b>=5WB;W{2Ophah$BQlEJilhf@Y&lV0n^8u%Fk=UjeyBq$XUbVh-HZLS5 zH%)Tdfddts_SQsn1J?kH>A&x)EPj13I_md;K=)TZNPJsIoI1NS+X3R=ga2T{lirdJ zXcGglO^_aKqR@htk$iw)w>|C}7=!JbZo*;!Uqn+su}E}Wn%6Ku)HhF+q)_AZZZY9-~retOxC6%#+GjxSy1PTitc(H|?M6I35?Ty+Mg}E+&#}Df4E*>VAO6lXB z6D~7A#SyAErcw-WOm>d99cHneg3~BZlEYFYUL7C zC;WMwWNTXk97>^D4S{BR5m*lr+JeApcT*h&6vdW3@9kLJjFuxCJ=q**38s!yoKxIk zB&5J|zz6@K_~4Oe>Ayj+I8=mW08N?dlKE!K1Z4EQxLC~ND)FQOP%0N;;;p|22W%Iqm0 z$&`ui<)VmtVnd_gMTS_pAoATh#nCnrr2fIiA}`YQY|eUjZn?K34$KnNp8%Ee@o-y> z9|pc(wlR32$SZ~4v2)wROFv`-ImEiRbD`*-_(s_h-yjd0ipo*_w_dz6A_qQI?O-hY zB7fJ$?|YMcVAgdLtNA`)D?LntkNEqGPD5@nHUM`p>OaUu?n#J&G=7j)H$mGtc+rSK zh|@J3OiVUQ@1idI0(%A-!8_GUgZ@{O6h$X4o*Q-EC6!^VHw&d7&SPyFBJK!l>?ww6 z=2Eh8VhEHf&G?Pl(aI~6&)nRnyQ1!Yaa56%e*N)QeZc9tZOj{{c_W;S#d5E^rbGtoB!kr&v-O_k@(BbZDXr8Eu z@@{)bkJr>aekruU?2foOMbteSJaGxH`l{ zg>9zmf>gxo?o2xe;@+6Q{YVGo+`_>`!|AW@f;5E>gG~=wUFk!fFsl-c&V2S6uaDR@ zd-|&x#gf<=zErw;b_oAYN1V!&oB6>7N1ok02P^jJi>bbl|x~&eY-0-~f^8@9B`1Wq;FI`{ngxHFs!aJKF z69>~BC;S$AJVFeNF%)6#xtyQSx;mrfg7=wBj1e{afmaNyfHoBQTv@DEY7R9|KH$Fc z^UyVX=@ZD89z2oqYeY5yZB(`48CC2`4<89gPTzfDdcTA21Pknd5u|-q=#GkJjct-U z@S9{23|zE>X(_=)Ta~keVi8R6u(RW%?@DE;2e#9a*r_vN8?UDf!JG+MhM-pyp}(2z&7 z)<+&LeFiErR+-Ms>%RpSUebYO50vf|2IcEO&JpHQFYU9yrk;65}X zD8=GPrIG~8lYnfGOfMcQL&pSgUIWE5~dd7 zk?N^DoU1P?af|wzN#e`s_bmyQf6o$NeM=+g0V3S~z~q@MLg4LvAFi1U4L(ulkG$!| zhr~Bp+TXO9UT}UL&M3c;8a)JS=E-di>Ox3>q2K$6l69{jpm$y2@B`PaLhldqptNe8P!#>9jV+i7D5fxlna z`x#;9EZlKcTs1z>Ryn?NdgREz`^9d&wUB^80Zo$5slF1w(w=c24`^1$fX7Cu;rry^OJ57(X1ZG_GlQtGvHH%b6*dy= zEdPn)OrOWVB5}i&%PHNz8&lSWG=_(bwM(Z^lSw?raxYJ(>}F-UZUfr`|Elj%AJjLh;uJ? zBTf_5M#66B>tbc_bZw-N2XRuSa0IJ_REscP1mkS)f)(*(CMYku;UBZW5)pCX$B z*^by{1OTic3l>s2CW^tH$J}~X){(gzavIV{+Z-VK@~OPcDJ`ROOqn8B>P$D>GbHvI zKK`jN!o=q&wL?JY;h??_8y|?mebpEUg^wl{^FHv@WCFBj{vY37+$Nf#c^i^7h3}3Mp@`dqx zD8F?4#3I~_DA}dDh~?ypL&Zp~5#`8UILBR0tC)W`y(*NC|nt;LH#E{Rug{hn$>D=aY1 zMDTL;Ba;GrDNKHwn1>@D3ak6F(PVZZ*Q}y~m%RVDN~U;K=Px^Z48B}8?Tqya_oyO* zeu6~FbQ=99oA|o^yQ!wU2751kD*sC+wE6zV5$04oRmN@<8HslLM;j!@HBPx?CI>#5~cSxTMl}~m?%9HbFZp@CkEDvI6Hg}dZ&~u}8DVi0% zOE;H35aaPF?5dg|A*8(HlucNAGPVByk3*C5;IqL?ci&gYJ2U)Dvvp?})XJZKdu zCd`)dn!l7vE$Furp%p__M;oOK#+m2-^1F#Q%5bexhKUzA?`vC0iGc6GNh!TfFRFhI zC$V#Kz5K-Goc6)~LXkUBD_i{PyvLVCDdK~lw{VuKO|=Jv_dhi5oB4|R$`C%w%>DR# zs5<|~R~`&>&)+X(T!=dlcjaROVgT=+zFVQ+s)WVF#&AM$>TR&+CA7riqR7gGNSc>v z@aSF1q}Ptg_ObU%W$Q}I@{KLSlTN!|T^S$=m&+@qldlqoTdo1H)hzr@WrF<|!L%7! z7@scgDL7kC9yfv5rp(D~?u+c!5D{|Gl+(rkgK^X%&#(noz}`5-ce0;V~pt9Sc{txauljL615X71K8SlP+ zDV2@kNkBJaGhqHa-ZvvWY2#HG-2*F&j( zwyL0fO4Fh861{A3TG{=yFm1URVYVvV&s_ILH^eD?aP&d%e?IdaU=c;B|C10QIg;3v@BD5b0`JRTpJCabOFGYqJotHf2Tlj?GoILg{X$euLLIoY zNN0>$xc|{|l0D#v#b7l2=q`P3cFL#5;rDV*7)y1rZ?DVafxBN`#g%}XcNh)W7VO=1tOI@aR40{J#u9R26TIi8L zBKZChnCu&Q;t&3$)qrq)RamIXSZV(=&l$^(@^G6;{GMRPUcElNyF1J<#UAue`o=>; zWM5VO5kQN&rccY+?9Z0bQgExFxWe@Ed}hoEz{ta&Ics=s#!$D$%|Y)pu^BBx$zo@D zW3#sIZbbj>l~CvU+cHfxiv%iPqY{<%V_c9&3lUW?oQ#_@s2* z)F}VHNJGFWPO&tWsM(7(oX3X>UZpio8I0-<%N&MsJ6OLD*b*iv74ALuWtmnA#rFYt*)=wHv~low@xPX;T_Gr*AV zbu>oLC%uvc=Z;A;nOTTT_>keKri-OV3VP>!id*44=0Rc}dy@THHB?0(catc(8z^X; z^ox|1Y!kABZ)UU$zh|St&Bz8b1I)B8h(5;`!fA7&Wpz82!a~o=|9eUooLHb?7??QC z;!)scaAt9u@v~PxL#uwz&vmRE8yf#JI2SQg#{HSnbyKsEcSpaYY^1(qt8=o=k4Yc5 zE9GH#X<;1dj62Js|C1~A9B=wXUEw;G1to_L-5_*yWH=d}laY2iT@rSn=!IzBX?YJxkxx91MRP-Ma=*o{E1!5Nk7% zy^rt@S@9od+hNuMwV+41C)>mt(*flm#-Ul`cH=pP!5(Kg^Vl9p=!9Y>y^Wzf>3Row5R-t|4~!D@`C`O>)2lT?)h zi$a{|j%hX<5*Mw=`qmA`2IKPbll^Q87-{)?`;`K&Bwb+w ztw3=>vhNq)8IY0v1AbXRGNjVaMRIYPK}GF5GdYtEOiUtLZ1f%Q1PCEUeIG}AW4ig# z_+B4}LVuElZ`#lv$p986RtFwyf#~l4z#ktiH)UgBTp~HEab6$9*)rfuYXcgMzIzv@ zB_4#aB%sJFZqy#Sz%mA!>YhXiGC1Hu^*WjyvbrQcc0f$uHS48eM&E(_a%n|-gUn(5 z_2l3@{Ic$`qk)=+6R$m{UJIv_mF0KkuPUeCteAd-&48PDNS~)KFj1M3B{qOVIZ*R=8sQu{L7-#KZg^h@?0}bWRIw1Isoj z*-QVyx~fqF(hyAbf6%egfCsBX+?lziiPU4wD>EuKGooOSWlW66UnWpo)$=`M`GGVQ zeUM1}fQR$)O`jU&du*Plm?rV%UJxOvjbzV_XPmc}Z{($t_(8W74sFm-;>*Ow1F?C< zaU=fQ(85|0EMdF7Z|X+#JY0-+$>FJ{4~JRtkdtKF89a3OaP`68HTCJzy4NLS9RKy- zr3jC;@2c7<`d|~E*fimql6}B+;)Qdqv~}7jcp0?>#T&zG67iHMH7Wgb<==${ z!ihcNVdOy(IzE>RC+Nuv9}S^D^EUIWPv(&qozUkcx5#vG1Gm~jVod%bN_6N$MZSW< zj%}2uuA2nUgqCaXm+eGrn+t=Z@ zr;|?4nr<-~_k+Z=9P~!Y#A`S@XOJ(|cuTF2bdfrJ2HMVTM*#qJ4dlQr6-v8*Y{lN( z^-=AAML=5bM3jc{yN&vhqiEzTL8V1d%T9y@1rgaqYFWlIyI+>bpvm zMgrNg7kdb_Gs3Z(JzYFT`(Jc6r8QvKWIw)R{~+sBaPFDZ>0~-VO5Q>llQN2tT3RFP z*WhrK^6tRg@l~oW`ogWr)e2%yVVyna<{|y&=Ha1^gobZK zWF_LE9}mad9;k(%0?jAeKV6S=ijVZCJeSbU+U$nxy~BcQExL~q=dPz*opeRhPPng^ z`oxQM*eVaY9R}ah(@=8y&RRT+i}Kvf+WwaLcuOe{fr{%Pqn-Q+$gDfqyjYi;@wOuf zdcB$8xvebR#9*kPx@*_phG|$6Zz;K!Vu<7DQ&`EAODLC-8LKV+wj<(2IFBv4e#-K_ zofN|Yd*IbxAPU?^)5%R?CB?;HjaV!LEiECX?cTA7!A;Lsm>jnq4)0jHNHp41*wFG9ck65SW!ZtNcxastjT{cGiuHc%9 z?F+w0?d~(tm)Z-a-KTfFiiHg5Zs4v{UR%ttWhZ#j zV>UfsQ}QF32%j<64MR&MKN@`odr!Xmd!tbkh``ynf>vR>;rdiM<%P-k(&O@T+^$j8 zk3>h5+4Ejk<8ddQ^i9o;yE`c!$d24Z32&f>r)o1Wk^5)K%Mx**m8e7;J#PE5#H6!^ z)xi2KJFp+Oh1YV`NUOXBxj=@CEnv8UP3hO>{*%k#S24@rF^H1%%D^^PRwS3=sjOT8 ze^-{4s}q^?W#NZgMWGM5OBdRzQo^6zri*HHy814k>%a9!ZqJ&@wYkP|U2lJ9zV$7C z61*C6WXTww9qq_E;l6_vxtwe}rExM{T$iIEzJuLN=Nz;44+Hb}t+ja5*}*)3$Q)+{ zDaN=ev_l6$covEjS89e;`fz+H#|x-0a#%)$$|qp5qtm_+3(W;G>4ecAqf+u0@yBrx z!qo9F!4`k{+9&9=0{gZ_v52@8**@~__C=FOByFI;Hi*-Lyv#Z@u+2m73OIdX77U=3 zVt@zgSuWXom}pnbb#@-4(FD)ZjV5b@D>hkb>4)WfIq-4GF3Qzikd;rO7T`aVc<3D*`2P{VLJsVXQ#&4a3}5i&tC*)-M|mLLJHx20&LKng z$`-Kbcf`uY%{RN~k?92elE*1e3C-QOQ-e#p*wu6E73*$+YuI|j3+yKFCBt%rdJ7uLknA3L24RAKJ2P`)jNfoBBU=b zOv)~ZgJz134j<&`nC*sakv%$mv+%m)RGP}_;C|1|gfjb$kS-yAg zdX@SJR51I60Xtuyw_*h<-h{B4FetsYzlQ;=kbL}u{X=aw@=QIN-Hds6fwImdUnl(v zzJudD9yWHNU8EYsY5$9ax)p5*_x@1n;@8vkhhOrxUg5B>u1QrWVi8XT}UWwY^) z_M0#oP;(InFp*hBI2zQsueY2_Hmd|BQEn>=2H^t%vQkZjT_pk7#BAuC^C9y2Kh0?I z@U5kXtz+#)Z2c@RlxyMt`1zU?i%r>T&6~6Ax?`VErrE({L*YYjF7c(~ z`zbY+WY5VEtz6|pW*+IvJ~`^|EuikUd7@z~1d7EZ=5UNY(FXY)_{Cp(nWo zUhC^2`=AOo={Gwg)$bIWLLh0lOf-!_e>1fEdA{80`SlF{mr44YwIL`B&Rx($YQBfF z{-kc}weuMlSsZ!l1^Ea4(A!3=X~Ek5o5k{z2AbH_z0_Mpeq3_AM8$ebeZ^y3h|sdtYXxH{ z0%TtMc{BY_0H~9Ze{lSFd8A6Eq`Xq%oVgj~3n~CK4aKV>hn%;0s+%1^#cY(a^B$#; z+s>{Z$Qetc6f5@iS+@=V2qwDdiZ9Bl|EU$NT;#9(TUwjqt5JL8%C+CcQ!jNCFK<-wkUhXH+ zPj3s`HtKm??^jOmy3VgmpXk$^-uF3(2J&F{n*j0+k(Lw(jUeJ=d)7lV3mB3|Ltgb||VX4?)a~uKa@IH;3(t@ha?re~p$QNgtn0#{|%f1f9i2!%a4{xkx)~7L9 z^IsP-sQBK8TV$2RA0B?VRv(pM8%b1IRfpdN@jjy?y@Tb*;#2j!aj27mr!!LnVKkTZ zD(V{#7bb{c^2pDD-OKV^#b0s8iP@&$CwPkhxfuF3I| zkBk;5B4EABSEpwk?7Z;@?JHa*-#Zp;tujkKb$FAxWRIlDs#S*@8Xe)HWq*4{ar>4K zacglw>A?8Re;jhF<@bv^2DWFvcqUcdqUl+@FydapLo;~J+kYLS>TRRyc@K*J_%t}% zuH*E&zU!nq9fl=s-C*vwJH~xKIT%Q`^G=bTx5p)(OqI!ZQM-dEe?AS+A2h+PMytLd zXS^K*=dgkx)Y&}A7z2Pkp6?VZp8ZX2s|*XPRhCjB!J$(fX3(m;&AR_UeY6#n===n)5() zl0%WcJdThX$I}XMb3EAL!mhm}P z&l|t$@beAb2mReQzqN7i-$H-?C+M%e1b3p3HN@LC4s9N*`pWfJbBi^LYIyLA&4?`P zLT?l6jqJd|rFZx{o|%&vg-p}QHD4gIv~_muL@j0+BED3)LQCoaZLzY06f#k=yHJICs3qV5h8&|n)#Z&!-62;HHY)>%PrU0hy7q3z7Q z&#!aA{=EonKqH^#=E|mx|%go(sf|vO)qyJc1sl)}H(edh0|+V~Yc~ zRQ`T00}W*{0PpVk^p9j)&UITTb1NyMW#waxQ$+@*ozCW;1IdApC25Bw?XLVvNdo`N z&|fmg8?2e&?#$}S&TCVpv6%@Ys-MRgCg(u_nA@VWSB=I}Lk`9Gq(Ngcv8xOfPIY>6 zbsJ#XQ=2!~~IAiL_p6$zC>32MuMj+h-gN30OpMQ z-0WkHfm1N+`D7y@5OjJ)2n(2k;@<6^pO1d=9A_F<4yP!hIE1QFc(gt$ODMhZKqw7b z1Jd+%q=TIMP+%()4NpJevxAfQj7!EH&wH2@F}&$FP=Q46cZj#E)${v*OFfzK(aynr z`&q6M(ZOxPlc__Y!txU6M$`mr+5zu#F_c*g%t$k?Pqw23e~Hu%9Uc^i=LWT{_wZca zQ_1P_)B|dVHUMGdi+g&Wrtlf)TkkAEsTIzL0$}nG{oUk20E&d2YA<*wI{KwfSW8!S9-+tJfBh3;L`!7#qd!7> zjMnFOGw7zJ+W09@!AGTZC@}G8z26u01^AfDb2E4a3!s=&C5+wX>(MuF0VskEg=01p zF1G`QddAXjprv?#D#e(>YaqW<_TIClF^FCs7n&wFoBke*+=ut%1z&V>U#S`fMXz(; zvsnTFMJe%KyGrfAN{Y&AVG66>fLv;{Ma=1109=Do=`BdWSVoM7b^!DS0n&C>8Rkc% z$zZY4Mo4S!nm5k*@%6ZlaB=e(PQ_Z$8Wg1+*?Up7xQ?-FbIl1yz(ckW#Um%sV+$!V z`E%mkhKS=YDml-kxrd_zU)CdT571(*$0$)(xgIX8)9_V8o2MND&MXQ$U^mW*h-DjC z$*&4@kkFd=RTnagN2$9Hc|Zl>O;iQG)-xUr93pE( zWwbzDjj&JB?ljx|>8EPe;vAo6kyKVv`nN(BxbC=Vm#U&h#EL>krH2Xq#D51H+GAOH zL2e>1Jz-$yU2JXp1iEb#mqcqQ!2yv(&~3D^(w&DY7<$EE_ZSTt_l+^g)!>+YITGt( z|Boc?i1ou@(t#o0ZD0a{xGaE5b|*yy`8N-@6J3WBH$$aSVTeI?egN^p6|XS>ZdlD&_tn*=lxmgUEGlM5o}$&pw`HF zUO3f6_FWFY$zPVGTjb5vuiAa@CZaHD&VMyeNeHwe|G6byB%#nnv5CPVa-r{^#Y9__ z4heA}+QgF_T%>L%Et!XKfS}!cSK{?%Cz2WK3BCDL$8bX1A^Kl_gKgx1c`ys4??3A@ zG5-{DjFS{)4P~RTKHo}3HH_=0=S9R|zi$UTpmIv5NXX`QlBU)w9qloS#YK+$AQKVT zG%-;y`C~EdgEKP!;g>tiB0bJx7tK&(Ak)AXoJQz8-{ z&l5iVvFroiq#W24zACp&O+Ov2oLO8%*K4{1(!gmx9Z33*cZbHy(7FGMLDJ)&_~AnS zN~7Z>^UT9VTw>?AAqCOu%5nwpPS&$62WdZk=BdG7$em$Rcl+c?HTcePFE@LqJzJk? zm*x$;?*47n!dTYSh@+^rlUmCITCvwMM%$>#B8e?HmHL!Rl zEG7j8g5Z%3BGI0#Go`9C^}@ECFpj-^#NhjRCF6}Ks&}q;9Y?(P5FuA+=hnr+&k@hV61+6gea@- zR4T@VlkZ78*;)2u3?BDdo&>UT?(l zjE&L8y73BjJ~I#^1dc!Y+o3CkaMfcC(fdwmKb%Z*_*ToS&|1HbIB&c1qqlF@Szbv| z+7+`og4OJ^903tF-uE?1Q&0g3(GQQ&j}LC27cS~kRT;3bQB5t$_Lzsdw%4C7Rmfj^{Gv~!uq2jeyvQNOyv$y(g$ukbV!B>xY(pE=~5FV+4 z<)66m{b%nK>^;sYl7;ftjRq`1UTX@kyl9l4z1p66=ei*$2Ydg=hd-V>$p(@`4E2+T z$#LXlwDK10mvI8uQksJ6H#V@P1kb-4u%|!TKPez^mzWWi8vnxVu;(7;*D1=L(qpH| zsCi<<2p3bYIsm;Z{Fi2x8KfD5p-C>lJ0}sm$f0j_wM~|T6q_jS_{pg=cBEepUi!mcvmccS696r%W}pSHdrHA!re8S>#^+)Ajy3Zm2z2U)W3=O z7$K6Y-^F5bg-)KxUY>wnqMwd%_KMjly`%Np*12zxgH_UVF&}__8FX+UJl33rXKQTC zdU*=$lpTM<1D*s~&#wz0Q5v6oeHVJX(E7@S`r5MVXnAZ5@bDz7Negr4cT|v;Cn6I? zt7U(oo-retE4^W;O}C#J$T5-j^ay8QFJGqK^F4S0SD>#=a$5ame=1+&F^oQ1x19;9 z!Q_4NuMT!=^P8VDipju+T>}IY^;=j~P2kUtOG8gLZ?lOmhH?iN1zPV6IrbA1zYV*j zy4U(aM9jkoToLzB$HxOC$IJ&XO7N5CZD-wt=Ux7@cYSU8npprdclVlx#bC~=m75Dr z|MT8P)L(vm4(pv~UjPlrmD5j#3x|>)KHF0D_0c{~a5hE6H;@*oxzvq0{#+O^e?Y^w zn`Pf3qs72bD_sEf8_!{V0BXqxxy4)!bcx;EIF9pxc}S?bl`=(X<;lgj9sptkEKdC} zR$n0wEQ@iiM*R)WEowgxGqR8aaDrM!oX!8ik)(Mp<`SmCjn0aqbgY^Ree^f#+6f1N zIz?KDlIE~aNK9Bog7S(V3x-k5hAap;Exb{OV=;dQCIkxi)xeX1hZ<$fSM)v5fc|*y zNWol#+1vt4|1YZn7nAazi>YklF#Ha2FXw(R-^pm4XKja;7|HU&eOE<@R)+X>;rzM; zcW`0fgB|QE@Ho{woLtGTI(5Dc*v^xN^S9Xw#DlKNskYnDZ zUQeimV_@*O*uoB^RFwx0>UZs8viZOj1UdGzr>OgiS~hHyieR@!;ZcPE2vDy9N=nB- z+`Iprffm|S6C;A8dEu}343*KMeVE<@u+kbfuw{zqZ2c*<^__%WUMwYMeIe=|tAWST zW6k;alA78R=w&@6>=V=+`267p9P_V{Oebqp+p++>LBi?P7i+kb`uZT1p%D{*3yYFe z=Z{t(DY4D^zS5gYd@Jl;H!OEsOfD|yjHImIc|;V{M%OFbtdP)-ZUvi)7iUG}myqx3 z+Ncg$gAnB8XFmyMQ)j1y`5m*^*}>xa@@neB zD0W+^jhBgaet|2cl^k}MF``14v;#A_UR$-vRzA66M}CU^oEmrfy_TFK^iE%aBbGbk zZbzJ?SiA#urR+IcdEQ5GH?@n3Dc2h{&e#FU=Wi%L6H99+?&Cj#6G2e$*on^ZrHh2jW}VqYis|!Mn(xYBDti;c_c-oPNvA`# z%WP(U3}9FT_nn98`(wJ#z;FFnsgHCV^ZHg_>G|f7S1)`njsGD}XMyQ#n+7zkDl*9Q zp{k%!eM+aSqZ8?S+A-ke8kd%5N+D+)pDIUxuFu__pI{mY2xMVE&q{iU$Vxg-GXHd% zo2fTcqaM<)(HEVnPr>cB4LjU@aIRqd`bGSIJr_bV#h3AJ@2#z`lcj$qT+Qe z_mfP4c$ky!EhQdqIiQ}g+}i9hSldaQ+*BxVwl_y)iGZ$jzoJZizn0Z$_Z85r_B_T? z+|H}IZfg8CV&~O})DXL&vg1G^18S7Mf7Ho^G%19voZ2;_wQMvA`>_eR-)0BX|s$hyIpZ~ zTG;K6Q=n3^UZ2ObH_NtjzyRrqDyVM`_T%x$pYR>f>8(_JnmGppjH1i4 z!e^w&6BUUB50T>t&u(lG^X@kgcFLInjcaVpPP?g_o#M8(XbdsDr{3-nYG*;y@^Ii0 zwP&@fy9ex~SLB)GY8bUW*g4H(MP7PU4-&9ZrSi%;zc*C@BF)wtZ_RZl>J(s?DpFY+ zdUaKiqL6o`CWV4X3ud~u72jN!k=9mQDS!F4vTXCn#xF#NdW02jawSA0zPOJwy|qWL z+hua9F8ju1$ad3581}4ZOTb{VB>?z{6|f}C0_r~U7N~U2_)JHvA+Ld!i~MpLYg$9B zX6}7i@Z~Ld9B3`;K*y!d!kn(cto5u20_;J8T=atMs|1aRv_!=`z$-sQbfpOQWZf#d zUWs7db`q@$LC2g3pd>*h?yKE@S)XcwxB(=h#9G`3)W>tWAujUptzn;gt|jSaVpkrY_}Fq+b_6m(5!cb_<_;Oz!-b&w z6n>FDPK1Fc<%*3)V-SWhn3Bk%4HI=BznB3upT7XjXO5lXE5eu5<349eWc9?y@?F_H zDIhfc<`KKC=N|A-G0MC}7Tql;lB_vsQBDXA*v)!Hh}3-8<(W5$65CZ(n@27?;GEOd z!PB6ZK6Y!EkH!Up2Z^ECY_FK|$P84~+t=WhIrp%~vcfTLCRBOjPNv-&Bjqi5TVU8{ zde*+uY{yn4QV3PBuF`|($NtzOvJ5$*Y8GAPY6Q}s{HaD; zsiE~lC{u76i34@4m6%PDfEavU*%^)KRP{vCK@%5zZ({mtR&)b1R}O)ivUs?dPqwAm0gf^v@oZUoQL!CF~JqptGkG_$L|(k-?;+` z@P}7V9p6rvBpu~~)yc#_gaCriWnw?&zItNEspGuHhEQZu(7NToFy(I2aI`k(U%>|J z%@4P*ba5gzKG!(+9W}FqPWKanS+O4k&bQuvrO7g(WZ9@$BZT*9R@nhv`GP%;$)mQv zS|DCuLcE^BDEUo{WM+eYP?{g=P2oA8-G99LL@vFFxw3yWWBDjYR$N4jIQk^a8vk&uWBS%ON*w8 zR%QYV9peDnkk6sKO@ovA3U2-#FmdoFa}+XY#l*q?bH(Tw+Btn2p!0WSH#TqZoY`Hu z`v&RIP?-@IuWl*i7-9X~;thljL>FfXSYMvcFH!xB#aEocU+xArrusKOX26r`$;Dip z6}AGHYIvD8WqWrjiZi#6!Po9eK4pU%ajCj67Sb_2L7SOc5&pWk@-tyFAiu3@$}E6B z*|B1VFMN#L=h5EaMieFR%7!~J?g=wp0aJ}nI;EYn6OKTtGi~UYAKpTU0F3_GSCVny zyio6U;h!s^vCuT3v~!}g^V}Fg=Hd}LRyI4~Q5HIF$mp6}>N*{bdAA*`oYCo7caGoH z&(|f(a$RmQy!EY5e=kPGkpUg;DZQ8EnYV`sBYkr!iqM{bnMFEdS`iIC?h(^*(*r{9 z7IISgO9G`%D!SIYedc4!c0v~}S$y6%U7XpTcw<+#p&B2TFQ!ZiQ0-DiKLEJ6#_{9O zNDF-;r~vcaCKjhD{Njf{r5yCbKFMP>{z2$FQ9^mf6X2aN{E4Fp>=J@pj)z=wzxmv_ zY)`Unos^Lv{)klWvu2LsX<{IpS6qioX4lx0Uchb$)C_%);!_GEA&R-+!d!E9Rf5%e z>=|1(Kz7#7*)5mbI5c_Pwmh`Dv`YHH34~)k5jpBI$+$L4n4FxIjA$Sak;M@o^>_^t zYR%|&)))f_7{U74a=~|j8ul09$f@a9A1?ZgHPXx%mF<*bkoNvsJ zLmX1$7kSTlg@*!TArM`ADwg3wlS?CG`y?~*PaHd@t_WF2>u)D}Sq(`|W}5?MMkVF; znIb2n8oS-hH@$SW*SI99ayQF)n{Y2JpyPXO(uW}atRSuAk(08P zgT3?`!*ta79hp|{NzjO!QgVPv@(81yx=*2Z+m?#p7^iQI*$`p9$@^{+8Lr-tLOmuc zwcub(#3a$__t)vib}C#6GFAL+c(T957PBAQWM+hDnFjUcf%#Lr z>U%(P9=SZak)x|Z1|{CM>z#6~=??pH!htkVJ{>nF1{*mp;f%R7@MOsKODFVsq>;%2Y#!gjjUOQj}C#Xzo8 zzXOP$eyPw$bdCrUyz|gO>P)mn2I&Xu21LhA_ea2o_keWc)eA1-w$6z(p$aWJU++}3 z&->!aK@>jkVM1Ir<<^J^iyTC&T0G4nh-b(8Wise{7M`nOZb7#l^gW_A651hUfK5hW z#&EcK@jX6pA-RjLabs)PSCysqwbmLxz!;=iqFm(C!JKI@)cYC4%B{y$^z}~NQ+W*J zXAZhcX4gY`V=7xJ?;CPCKnQh@9<>i>^%eR_(skQR#Hr|8Fz=4%yRVZiE%k)|#3M>y z?!htjff)ER*xuiO9{Rs%1udS1zKqazo-)h^Pi>;-?VD~62<_4rdxJr60B8DdMo$GH zmMIySqS(JM8|}GJ@qBWOaF`v%o3qr>p3DfCUCML4c)ZHamP^0$;OG{{hoD7ciu=M9 z>CC?3=L#uX|0SIAwgT`XU4F2c5RDJ^QO;M%2<(&TenG6?fbu z`Gk+yLJK_o3q&W71G9uoPg=-2I*QL?u%1M zM}e`#Wzqqh1@5#Tw~hg4!XJ$09m3ey3wjus?=;VWMet`j&I!cfF6GiQbLFzLjIR^ayq~8au+>E;$t|80$?o8|=C~POXyj zDodPolMjPGbo!8C&nH@d|7r#SC^M+Y;z1)~vit;1gp`mY4TWd-b#*r9={XqYRGmz& zP)IO;2j5Pu@wRciZZEx|&35f*EHbaY*>sf~NkgMpxo8vXoZwjg{iYP&IKLW%^$*$TbHNsi>Q2{JJ7XI*rk5%E}C%O7!GSI_$c|0$7 zwy8cCgL0o?&At?yO4|%ocFhdBK|H;NMu8ak5{Qn1|J_sT*pC#6HICTin)TmFOVm=S zEmrjbUde9B^C^9>PpZGfDEVk$Hgn$Ds-X-VaYm)+m_V^{T%|{Xr}9s!5V$oi^j*$h z=Dl419||bfsfRti3MyzIN_-TIy`Xh9^QtK@^EjTQW?kjY7KPa|7>j5iSrvlt(L}c< zBDmkoaK5Jvfrh=e{?uyzE+c`HGd6-`AHEq@ZM@NDie_?badI;(#0z%pPT_vjdAWek1!MjIrWIlv1o zu74MjD*6GB{Xmet>Rbl}AnWGsqq z6ora<=fzqEz~|AbTdO1_cgZ7W87zjmn_xwggiq4Yu?6*G&msjslZ%{(O)G&jcsP7~ z=LE*Uud)7x5sQqLIAVK@ex$M;;;Gt?;$#_d(L7g@Iqrm+`bIy~ zPI2PAwhSEDmF&7$#N)UehH>9pe381vfoS>(tm#fV-Jn?DBAzVVGT-gs+IvgYw3UH9 zY?F~4t9FQ0vR#Tvo5uv-QH#_68%3y?`*})l$Puk;p}ru$u&D3}{agi`a(k1QRG9yB zbh2#qZ);$Gp`JWIw2>r2N7xf>vvl*=oPG4lhyy#Z-S6Akjq|Fo|J?-WXEvLZwrcv;}y|7dd0`JivV z1m1(d-foz`HY=rh;s4XvcgH2Y{(W~&<5VXrZR#;CHO)L_rdAkWL$l10BloCqh9e~h z0@}{Zk*TSOP?@5+GIQWOElFeK0=Jb4Zc`LO9M6SXo!|4^&wby%{1d)kuJyS->-~N= zm@Y?qMf=t_8ld*IJ7}UJG>|*)BZ#);KMM|*CK~qaHF{k0@R0FS9M{&M<7i&hh|f^S zD+US2ws@zNIU1)u`KwO|KvmI6aEYCqg_?Wy^Z_y@7fwARg}nhH!77j2eez|)RsZgpJlV@5{{3LOFI?(f*=H&SIuj+GO z*-!iO{!5me2%SqwpB&UnPNt&hWK{1RWs888Z~ARicoVISC!v4(}@}^ zxF=c?sTnB0U(#4LhxSDMgpmKC0tkNOoIy4SQqW_Hgi-e+_VwuToxpcZ{srfrSz z>`@gtMJNMgXHfFF2E2-7bo9y0DX5Y_NSYV^QS<@FOKR#kTtj5`X1RNHpaIcCJat2I zO8Z5epdF8H} z36~cnUE;_vbr5+YcJHDb70|D1|BT(@vf0B^^bxs;X)anR%kN0x{zL962q=}-$ z^rC2pYf#?__dkV43byui$U)>cBq7)V5;icOzKcmQxHrtt51A-tDwG7RhGsMi-?#Kk z9N`?AXn9=*o#*;}BDLe0YuLx%6r*-rMnwse4lrp|i(MIkUp&itq#e_d|5=Bl7 zgeKW@?*KW=B?sKJJD!f&^P^*j=we+Y2dbB%ZZ=+cepu?unuDZcgiQb8XIwovUoV!z zdZ)7Xleu~hZurtFu2-D4zww7z6Pu6Ji+R`m?R&GP3T$5oatcsTxyH-g$~0ZTle!z# z&7Fbx7Oh8d5b-fFv>v9n^V;m$M;*?C90;68F^T4B5Ms`}vE!}$Y&kpVzI>Q_Ia=fr zI&~u8Z?1z)>S2_wwFpMC9~MDl>fS!kt*%WcafxxLc@!oab+4fPVoLTDujNAYMYxJh z<4D~gzm*?ks#hVQ6p&D8b9?xRM+l*=5`#7fo_9V zC0KD+XmAWU!B}pOYOhuMF*W~cY~*zugQDs`++BeBsEvYM*`LGst3(yGj^}6VO@^)$ z@=}KTpd_v#@$M_sK9|tZ?2WvZYmjVI19i1coVQ9g_niY~ijWkepQph+Sra{?){D=g zbU)NR3gissIdbh*5QdnY%626ot80#r#7 zCM>kSnrTz>ru9ifo4&N%zP>38E_9iCw}SJ)J~xq2NJngoZ`Ox$V}rcyStpuu_SeCE z@^D^9U$&K;f!D-!bSrUliZu{T%pNcU-i+JLkY(sR8anaVoRL(_J$}>p8R8}$_hHPg zaba*>R)=b^QLAnVN%Zo@G=gg-7xXZuaj;@nVobg4eI%*vuK#>5Q@xf{GHcOGnR?3L zbx@VqUmSD-ymys^m~8xr&K_A701x$2i}`CilZVcOkv8?B7!C-=-N+s7)<+WTkIxRy zT)?1oKMFzCU(47TG)yQc$NB+JNR#MW+xXn!Y@=bfkd<;cuQh$Q+fYbiP1Yus3fZ(& zsP{oda-Vh_V(28pw1sgQ1B?Qt?C}BOHn}8GU6OaOpAzU`%AQ^2?=#jC=u+exXQA!& z5qEaN&yh|lXx7Ol(XrTTesk-hXN{bd!RO>|LPrq+Yp7fet}r=f7uB>g!h(XjP@d!0 zh;o^8Q0Cb`Wf@w5T*6QnxpAK>q<(+p2;mr z#B&A?Ry?OeJojb8T&P>95AXYoZ3MUWvJdNJXf)brhEfZaa_@$ng6=`9_$ntJq%u-1uzVx~h$wrYY#pwX>933Hp~375SC#&n9*XwO-_geGh3@DhX*o z8(lu%Q?@365|zSAj{!R9%~`TAAe!eP_%NvN z`DRmwN`UIhQl~4Od-`Ox$W$6qH4(60k-wZpWFFV=jS^B!dC6(?0HFV~-Fq+6oKxE; z;}HWA$mWdO<&es)@$Ddg&i`NYWW@q>U7c}ndrW%A9Y8N>4d65XE&r9+-(r^}|R0kEo^Tr+uv3>>le6#x0O$?P-CUSCplL!YY1q-uNz9@h4RY0sswdM+`g03w zf_<2Ntfl6R1=9U4t=k-}+n`M#GrG}eI@$dHier8SQH`EkwIA#ev0Cl!+cq7+J2#g< z3P2xzBo@PQYX)LCp%A*LOHh>!@N>+n>3##uo82;OmTNtZ%C zgki5VPIG5!Uz^MQbrxu0NMwO__I*KTE7hJ~r&XOgsEu@oyGpcQ3G=5-=LM*Kd-~x| zntk^)i>*NV3}AF>`OZ-16<&8oU|Xl3;%q0OVcSE9&T=5_%J2jAF~DgA>R_#)6Yuir z^D@kYHB;VmmU#w46%N*ol;`228hF&7>`kpv0hTE0!XW1g0& zO7Jt@?T26l(Fym%lT)TTaN0gJnV}9w`se$rzQ0isKBfO@Rdr7I^^tn;iNBqLu@_f; z1^ptdkK2O87`KV{(S-KLyGiXyr;cO&0&<~l@_)vtvd4pWbLk@#iP|30P;XT!E+)G} z9$x%F_h>)5i#Ma8LH{g{d~Sk@msafD$8&>?ITK@<_tq38lMw8)7H7lo9p-W%oe${V zwH|_GRIkQ;TLXX>CC$yO(w)`Hgxn24d2<>VAvH~qyN_nU96ot~m8{)1GW@5yN!4}$ za&rz3{w-x_SpoJ7V)*`{_HQfAUlNNnbz@X(ao0Q6j|*=M=@9?asy%lJO&xqO( z&62je6El<0G4!0}Kie-IbDgUWp}FDD{BtDZH{);sWegifrt#>Wb75Hi-H}HVHsX|< zW8E-vyG3Cj$Aa~Jw=yEyw!4VtnmY7ME1e_lyq33ezw|&IG)?BND z&K>@`R_ZRAVe;y2|Hiac9N@~n545HhMI>;^Tr`tMexr5&fyT62IwYM$sTivLE{nqF zTuO&3gRB9^wCAo?gdrj`ODTi$?h2qyY&*XWbd5dk;9Qn>Tkp6wd)pD`mI?i%q7#l? zu99C*J8ZC0p99!6r&q0~^8T=8wk1~&-9I!=+x`E**fzjGQdM_LhV8A$dS*F()9959 z>Gzo|!Xtlt8b^zsR*-YXQ!cltIp?9SHXHCnvNa8mx&BA{&5!VZH&{3Rba}-;-@mSU z$HZNH#?bJt3YTVXGX=Wf+jesA??Lw7?{;*4WxAsgI(JK(mjpN%QQhxnwYV*_h*W5v ze^3Zf01ew~RJdCDEtbw0>JXPeKP;5~_>=|$59%-ZZc(UNY*vA%i6>nofuph-tT{Gk z#oby0x>n2q1Wz+vc$-YSXy_YauREjx2)_DM#T?5$i5Y%?vL6V}z87~NqQ%{Zp())J zxpms89bfkdik31RAmX;b>pnZ91-c)4y`t0*ttPIOr<(jYnm+5}?3dc>K$;Hp6423P zDNosZDWKFD)^52xW$21PYbe2Ywj8Iw1IZ}QEBuv`vA)v?hlr6-o(Bp~X+Ae=uGm|0 zd`O07Aaj19XL#~Qdm+g4R%%_VsX*Qf_gqINxC41^&?z~52y|R6mfe0f?OD*}_TBN5 zIcDqboXqr)!H_B?Xl=j|bpPh-e*p61X}CJLmE8`mAoXx4i^M=4@JN1tt{d7dZ?%uD-8fd#&(%Gr1mZ-k2Qd}@_? zFppN`gJ(G0^{yIn9BZoypXrbnSoEbj4N5EWsQf6ILDc+2+VcPMijfoZIIWmonWl9Q z|BvTZX+8Sj9U96t*$(U2(cP;gX>X{EkF0PY{BS~Lpdb8_N4SBIkR)7`T-CIuwc z)>meO9XFTJ@HeLgg1703?7Rap&J;^1CZ~}^`U`R;BE6GJo{t&`Zq5fT;`1!dk-xmj zqyyNN473JsQT#+QKF56o$QB#=JMSzxiIq9|U!u0CVs>(E>?@g*qvjcAudEOrkz0E* z{Uv&*|ARrnLVVOZR2n~|+cxU`rg1sWb5iPSPIk^m@7;~>`a*NowbQ!qLUt#La<1W0 z{J6Gp+uvT}{IKy<(8tuc?DF@F>smgk%5kAp?|mE@+M^YbipcuCB<<0YVz5=bKPe}Y zuxdZulYhIcIn`ppjw^4o5hX!z$w4N!(bUdq)Q@DzW8Q1L)X`S7Km=h;#*DdXJD ztN}~Ft>BD^(7Mn0w~`<#>SsDH;0(4^Dt$7*ML0O@FP=jw-FzOd!n#8c-QJqQ{Q<1}wp zeFn`vIuvi**6dK?+BI&uQ)>8bmn zr~}Zf%fnwcK^tVOYXYD7O4VaB52=SfTp= zI(+AsVNZh7Go3HI+?}D(B+CfJ>mxvqlqXa>brKaFaJY~Do>h()^M+n+5pWWAKn zvt1essOrRKfxUIy_>zqNXz6q-$W)?H`z~{^c9$3>rcpTkF2av)<4j01^zwR1zZyVl z6fJXV%*_qAx93$|0cwXk6bVfCuM^Oi2_cNs{q45YNA_e!YBR!K6yZ1ehX%Xw&JWH= z;9x6;w>BQhkgVucH~Q5~9;I-Hc}U_h=}%)nLEIs(t7G1oeGs-%-nb=8VQAQ52-HSe z4Sv4tYS)vi6$c;pZggubP>v17pSJ(H)bL)+GJo5m;}VJgH7~yzy-id$KN-H=-2|1a zp|?*NRpUltjqI(#JEIC8v1b2XcoN?j`z$(SGK(qe@06G38DP&yUStaSwW%A|UDnf%OcwVHlLFLY*$!ol zVMTT=?t|1?b(sD^X3sAS5|?q=!m-Di+zDqg$|F{v^q9p#C_yARR2L zakChI+zznseA1!s@{4zC2yux*B?L@rC)=J}q;dGUj+UrQX(K=_d)w9>>8vpsa>- zE{iT~Rr%$h0?wS{>qr?74n^&nO@J8Dh1t_N$2oLKl)X<1)7ZCvUy>?3m6n}F@D-Fx*s(9bFGZud_KAJ~jtm~WARj0}x)f=qWstqgvhhWT zK_h@skq5M@?cRDHjbQH;C}C48};f_Eu5!ZeHJsa;WE4tngI#On5zsZ$ zRq$>&9j*1q?VAnJ%JWn%9gYg?KII$%J_tbFlXvcD{yFbi)UKK0aexa z>vREUbS|=9$BLDVVmv?JbO}C7@ZfCJm-RDW$0ArfJCAUNKE*_8=fgl_cm)~0{E6D`Bwlf18dW|j<1m>lg4uj^<~W3 z33vN9osAm|%t;~H7dgGP`*}fw3$kII3F63*8!b3mJD%0RDLZ}AP?sG5l-zrNZubFW zPE0{v@SMHbzmjRY7L#e~1LnAyziuo^qm%tMo-zr_fVDTYy&KE%KaA!)H=Yc1>FdwW?Vy%MobrM0hwNoi z>|_4arlbIw8VDnppPZr`=bbUGRUJXOgZq(00C2qw_1ohq3VEJIHSkpjja`aq8txqd zk>iQPh~qmf+{0-)uTfe)SF*07{-?y;b7e(J~W1VEa!!}OhoaY+l} z1jiH*RG>|uqkHHA4QLY}1_M7Vc}<`iW$d|1``YQkqznyYW2xQUj5X(NQ*aU|buVd~v9@xy8I@;YH16#OKlG!&6x4NEn>5H$eIyteXimp~vrXMogEG?%I#NyjuvZiDg z0japD&7ZwzJau%%%8}kspmFRx9TVy*3=GqaSvXN*tc?tFMsWtTg5Rug&HvK$>|sz< zfOHAT8*fJKJ;!hEP>&yi1s-_hsfD(m&nSOF67ij}ZtF?s7j8|8B~bhNA5rQd!&mMC z^*l<@ac-wo&BBC>i#!^^p8Wo!aF#V7ND(h+vzN?KD_x2Htm^C2Nnidn2I{emE&hv} zw9g!1_CJ2VQ`!E+C)5E@uX60NsI&?Zy1j%mFBZ1EDV!Y!2(Nha{RwHHlPDZSHq^+c zZVhD?K}T}yOUqJetw9p{Mm&5#zXmVaSM<&8Z_1w`+ZqTHw->WnXI((I!tdH~o_n<) zhqo*u496N8OaXnF^hud6EppyuW035!?N{Pi}bG*%h>*RSoxS8qr{0nCL292*~HA!Ee3_y z%dGA`-t&bWq5cr$lx8Y!)*UfcsB@?pX;k3$ZP!TD9v%8?nx9;5{e4CyY%@tW-V`&) zd(4X&P+X^`oZ$O88(q>=)*foLkc{oq7wf&E@yBa4Gj?g^U3bYjv(P}x5RDY+Xe$slFL~C|5>w2VnXe{YF!LxeBLW7?eZ1+C`@H?D77e3|U z&kl0j^)zyUYF$Ub;-R>@pjv0Os(FUi%HHGVB-!Zk)PWhgcZhIbgBTDoBbVfSS;v}Y zkGnHjtTQFuyl@wty#VS{2K4mYptIVfMNS>J9VnSI|KZKlq-)MwseY}7`59QeJ^k^> zyke8888x+8_y|UF>_aRUsyy4gs$|u|WQeyXP-2GY;g3=wW@$aSGH7LVJK3$0>8f>1;`@ zM*$E#1BbEp?8zhz zQESF=sH=y#xH_wKT1<%d59}Rj|`!a`iaK$a+vIEslV=wvv|g|p(tVRlU`7ToYgK@brlW0 z#u(P2hxyZy5&f!V5fg=PN;q4pnX?KFp%@YmzLI!{=p25+GS=aSN`^b^cocZhSi}Y* zVVbYw7x9^qt9rM_a6f8r)ey{GlsDn@76ofZdPCJjy_07@43OcF&PwR@%ISk!eT5|F zw!wXK;QQbAm(~s#atxm!QHF}>+x10?7srS^k1D?e6>4jEq2RbvR$ta&;Y)u*?E3O~ zi{7i%Bh1G7d@073CezukR(g7R?-DWOc2}-}7qJ2uR3I0VX-umQ|S5-J` zbp96#ail2Hy>AARX^Q(eGjpQ3IgV*CyzMcZQwBZWS@K=9H4Hol+uqS@`Ne+RzCg>M zvt`ag#`=mariQ=gnUgz`0eidCARj}AX^L(ubL7=(phma`bs{#MRP_qYow4d z-TI~E6qDqo@W3QgZmp^dG(G-;yht|zHiW3gRb${>Jb0F*^W78zv0Cx@jCV9-+$y#H zoYqJu%)W$LaiXpx^i2iwCeiw{Md-Tj$MdM&eqo3y1l;hSICGKi6fbw->o-ye3b?h; z-;lQ-G}m2jt2L}0Hrg$;?QX$Wj-u!u)oe`Q_Y)0uU&$*(aBd0@x~~(}HC+R*6s>%2 zI*UavuBS4YyjlULcHQs^tfuv&#{-o^V~`c-z6JuC>t5~0A|^A@mqKc|@Z+7#2T}`5 z80+*bK-d4DA_eeQ^{0>j^L~xI6?=)d6g&xEDL*&CAx0N3vXGy%Gv1n{-S@}XJbPXk zCJ&W#HJ+QBb2Iw= zCJD1v@X8e^{sVy*kK4)_dBT|@O6u`8|6_{&9W+_J+k&2HD*4Wop9oX?&Nb1UngLrR zT>bqY{?DNbSn|3ut92t94vowX6a(h;whL8_<9kJ&J3Vr7HgdQcX^I^lOW7a(RoKfz z%twXtiGpt$*Ov)2%@JjF(*73b2~=bD>?Zrr}jBIrqcap z3CH?7+-i@!pP@3hdgY}MctD@(ep53hli<&4wx5^hnG#QlM|Z}@KjOPkPpZ{o=7ZW@ z@AEYe=!WUISrb?4fy z#E{?7p@EaJM@CJpc4d$hlEO#e`uaDj^K1;nzv}P95dCSZRa*>MM}4|lLQkwIVs^}Z znzuz%l#O!e8a@v&$|jH*bN?VXtWQUU>zfkFa5rG8?!lEtKL*@LC$Vqc|7w=C7(L=#qngyf{eJW3?lth~>tVsw*jX8q)h1xl! z*=j%Vpm!y&|1dR4sI)i@a1T$jpk-a5++hTcSb!AZLB6+MyN59lrpzDUB!&)_>OK$K z9fcX0{o2TV@o@IM^FI*_MghB%Ox~%pH~dxr(og~AI!^d2N3hPH8-mH7U;70Ee9-Ctm*Yj{}vlB)4PQVGpN5x0z?Y@Bt^a*YuMs)uD*CIL#Q~5^mDBU zljx$Jy2lSa=#}q?eQj0Q<2m^oH3d$5BTTLM085TfW54w_*{rc#mTK?r5c@3Sg^b$E z(bl3gt_y0`RVBEcu;v{d+$FL>gJg;uhrkNU+<3a*A@9YP-wPL6ghehmJ= zqA$iw+H$?*2?MTLB+KTn-eQyQ==zZ$#s@s=9*ilvP$d$7ba5=ZT%wOn-&R7BgWJyL z>^VqI)a)ZtFpj?P#g}jBwR|$UFJwaP z7C(2p6l=J$ttXC6*R>mi^lolMUG-gj@nOjMiH-2v4`i>e)_K@1gX)g%W)c9Q8nnIe zLka?#Uw|6BS%eb58jJ^+YK+<=wd>@a#D}E;sP>YfTnkhTYT`p)fI&#S4L2`Kd>R+0 zac2X!WYT(Fu39*Y=IiL^aPQS!iZ*K%C3h1vO542}b&5s!YjJIiO=6+TTkZWUHwRS} z;6{PmnDrAIDQ;KgDrC)w%FOobL%mw!p^ILp687F*t6bn)pm-y?i9z@hisb9$mEya3 z#Wl7x!J0vS>(X)?n@EDyHnW@|XoO=I|2fa&y2=bCf`wjl&6J-H9K>U8N zIXdGSHRC^6$e|;$y!OV}le;TfG|Zz}d-qBR>5)_~bbj50_=Drq;tP9D7U%D2a@<8v zHsO=S0qKNKBdt{lO{wivqQvFsTkON)nF6bX@h_X8V*AG8^-wt@X7Hd&Zt$v016cj0 zLfFmvj?u#gFGzNaD-Z;>=IexN171`%6!LC-X7#m)!gSqk@h!jb+bl>PaH)SB)e`D5 zo}!~i1AcDa*RYrTzo|bDf}e{EjHDhST%xY&nbe>OJ}2=r^!qEiY5xjJdbH$X5!OxB176U}ck zO$wSdQXWm(Uw`Sb5y%+{WVKgN-cK9?C4RZpfHUeE11zV2xjm%5=BN8yU7*r zjXQ0EF-FVX`)5L@o0_LaE&hfDiG~9vjcQ;OpQ!_a9`Am?R)`YxQtN5&z=3OOy`*wiFIH6MZzz#B`X%Lo#TSPO zYk{12{8SJaC^5tCdG5Z__X*Bp<%|(?eY?+}bB@)nM!iAt9b!_3l@}u2BSW+cRefS)BKDb5I3RX; z8WceiS}5%(xqHO5VLH$Hz#0@w+EH_q5UMB0p~Av@6GJ~9g@~gqU;I(X?v1b&W@t-* zsefRvNR6`=byVYsnDap$kTeWUIN9t3pz-^~X3L56QH8wrv8gh%WG10uB*57CB6hRd zbBu&Qqbi_ERI*^(#JAe{>3BW;2Y9JWC8@kM#7m?2xomP4(fGU4RoBK!TF}){I4nTC zH-P;DhvR!>!b#TYXOJO|1nL$>I%`B)Et#ur<4d1m!4hM^j}+ghCMIikpVI(DnectC zF%2H_icj=>N~w6HD4)@WB8-V6KXBgzKYg=8$ephSUdCr$g|Y~0FQ7Zx2l(<5IkB8N?rNx4;khF(P%El87}?e8Sb)RJcY=1mDZyJtJw(UA_~TdfKY z!ci&1or($`PPH8>kD@`mCh90DqK}2X!Idj-uIHsKVYqFF%5BeG{wOiG9pSXb)kn9$zwBc7=uy{%;H~`H0ac~&jsAu?ld6U9M$Ojerbrq(d0n=Mm?k0W2N ztut)3Kk>4taKmfcGxo!sLw};vBQ!VfhKTxdhb%0<-a-a%Xu8g3!t=jOuML654Sg>u zFVoFuPE|Y_#-U7O^8TUqh!f3CiJu;^>yjh7QE!q;KeA>F$pBpgN*Kd7f5=0`R1 zf`_K9F;*X1K6c*-&1d#cuf0ru0GB#47IkC@(~U8;hPG9Q{dF6~{l*H(|2Q-eCc?pb zX=2ws%uj_ZI#k)f#Z#URlvdKJKdNLhf1kMiEZn@9lAyv-Gj*p!a%ACc1_zw`d*Gif zZuMv9RbN_FW%XDvSjMf~H++7uV*PNpNyS_paTtf`Qe;$bW4Ey@-cV4%$V#>&WaYd` zmH1lx?&||?2tu9wiP9q6Q_q+;r*m!*c`&Ll4?>+W%);eapOYr7bXk5za>ebby4t!% zhV($?^WWTaWUGqCDu@p~#;D&|Q^^?RZ#o0p_+}-f>W^Ji#r}&-r^F)eKj;zM$Xumk zqae%w`GJr}L*i+!+%Kq_$2?FGoDaJ%UTOv4?rhP!&Gh3&u6;&Hux3Z}^OG$ONlS=w zDBR0h{e4csWz&D}R5@LDVfU5EVtDP_Y4ST_M zQ`#F&-eXrnh2HSUpS^`<-@%oee(9X$S85;rs&V?0VV@>yw}1EHnV7rcX?u`D$dmQi zlc*NU$w@g(lN@z@R_soY-_}yNWX3e)czaC;;)`)ILfneq!V>0f#9u20Zs7CP#Dl?{ zHTn&Bo&+z3zn9Dn7}gjI6=(?Vn-gAdpO^5pP(;_Lg{!{g?-fi__H;b80`eEFMXxXAdE?&*GX+zE%ri%_0vk7cSzI(nqK5eXG zDHsti(Xlrr!*sQ%)n6iZfr(%~HYts%uf$~VvVk%7Ahw9}E{h@J%5R(XZ^%kzZa*la z7S4g*-D!$LaZ*XMHRtIR_N$+_Kmz>48cQj3M8paywWqWaUmhdKr5cx)C3*DlOypn< zk=kEX%FPbN&PigCpH$5iTtWz{v(~7cZ z`6B^2$%qbKj;2az|6)E22OJ{!Yo(cs7`EX~7(Z7F-#(r8%|W0kkVWQ1!F)wbqWcYb zyY8^Q@RBS6sdth(es2rK0DX%&)2us!p6iG2A=}$$CU?ug-j7hcyHvVAY!i6oEN7KD^>w_c&o(i2a7RYUuazhaM@mr7I50;vJ3eH_uo}R zl*nZ4nj0QYuYX@To*k@oyXy}mvz2$fqNvh(aU4gPY)CxuK~{(`Nzz5CMX`$SmPrk?6$W}UDzT3O0G+_(XzQIJ z_ph6uZK>L#Y75!K>K%X~ty|P{5+D~wAstLsskQ4^d}B#oW#vmj!KF2mZOp0Rc2TPc z?tF7t`x-@%wM=Zlkp94Lc>0x!H=}4_bq3pTk!yD!kFIP->M9oTyh27wm^>yi%Khs; z$jWz-a;VkYhcvCaY}77T6W#_7=LiEJ?39C<&dO|+@?x$2Q8p?xuEC)^rJk_+GP6GxPl3 zL%<^-CYGy^BS;GUnak`@jMC%LT?xj5o#l1uT<_Uj=ocp>Bg*}EwE4IAXKD~fiYQ41 zHwl0EK0)UQn^p@kSeO5KCI-CA_P2nMp_b~mTRN7*L}h|1rl>l zN@;CY136MEZ_7Ux+t)m641Fsbz!#0o!w~GrjhHIb4JSqmnPQK?DsMLbUDfUj!rOZ# zQc${~rCeyR=MF!o_cvapoS={!5(eb2UkIoKWRBP9&~E-2WiF{9xJ%H*4^PJf;fPkv|3>;ldAUUFZVIq?icQ)j8Qxf_OXqRW{4Afi@AtSvo)^Xdt$6- z8P-Y?LtLkm(w$JA!PCq6-CtuCEr~Mu^k>!3I+FS6J&BQU$K4+s&kPVTMC1HfK6^)vrJH z`R-@jOF zwO$<*wOt|KP%Yqg{o@!}sWR?JKtC#fD&cGDCjL=@c+Quy22zqIRz581fe*Z@YUl?z zMVhoY64j_?qbg?^t<*NnrOB$zGTpNyLAUS9`%i>Rp0mSK>o7U3NN;X?5XW&7f!>A@ z4{5>T8; zdrGv{GOdr8BI#8U_-Py%mqx zx?E7D5l=k`6Tkscdyh5!AELQ-Zk)M0*WuOU;%L)XJbS?@4y|Qg<)!MvewBA?`~bQz4TlbG6D21@Y}I zysWS6fFUu`vshJdFhi%4HW7ys3zB$EOYs*7SY%E=p2%F`L#Jp1yym%w7Ro^*TuTrH zt?j=f@FNxqe#CPiVTY~jlCJArCA8QG&O9g3B}SX4Moj6Z2)Jzo*y4yB;1K<-32hdYO^0k=K zJAy*w=-Z*6bF6RHYO!L+7W20%N$(i-0K^AocaOtky3yXD9(zFfb%*3!9o3ogL4OM@M71TSok8#d=;B-sFDzn!rpRJHp- zZmlXzcXq(ETlaWTAfH$88;>(wz(oGAdmwx~5$nQ;GaCHxm9HU#t=T*<6V?4as@;B? zd-!`YD$jSM{i743v#|AJKMqK^$)gNL)qkEuczOrrO{pLMVb6V&)7(~(sCr&BwlZEN zt6G4m7Qm@;)lKgjS>4mQ-DRmgtqhp^N!22T&f?cWC_lGZ_k@`iKPz4PRMqe#vYL+^ z>&`3LAU!)C6Nde$p<)pA`JSq1H52SEYrz$kc+tSB$<+-QW>Q94&&h>N#E~lIzs6yL z?IM!QgVasUIt|81a|5KV%Mlq|^afz*sNZzN+ef^A{GYFrF?>>#pnu|?7S(=oH5s$f zthcFhVS(XXc!+S%wONevYoeyXr;pU%5BTAO37ySoSz^sKmYxG3?Q zo?|%^k3ydISsIq9Ni0k+4$>oh_VAo+tvy2N?$rr(-SI$JL)Jf|5U6W&yzaifDG9y;DYT{u#Xv7U;xMFA%7oiQgXrGG-w?9HX4zw;h=*KW26p`3ckz-6 zo}P&c+fj#$Ccf5Qt)Ec#6xq#5UfMw_J9j2CQLcmb1d+BDWAkl@_6~*f*HA5k;4TN9EUl$|xp~Uw-*1s^P|KecK4{W0I599y12~e9o1)C0Qs1$)k{>70oi}8x+$Ej+=tewq$FU)OU3isV-^liSrI7>?z> zOx&wKG&*Oww$T_4YiTTT7W%&FW3o&g^MR0+aj}Gp(cjjn-as4n^NHL&&sa8_nwCCT zn4Qbx7JbZ?lc>n>v;y~yMBh$4Zq$z+ zJgQASt&0*nl?(Nufwhm{1g(9B7R4KJL|e;oQ(pN+$Cv6z zLH=dH6}+W($KKr}S_j2uZAU-9tb0-SHQ|V^)C&|MysiiDq3SsXJwcBem8a(&h zS%G>Ve{QQdVcdlb&U44)MimAz7mSR!#v<U;qmEY^iSVntG?N0 i@c%wYe!i!3{*U_0mMpoW<&`@ciVDd$rWhA3pbl|$GN(aE6$LgrAZkW*pV!Lb~Q$-6g2R&-EkM2@pL zPfkmPInH@<+GcEKw*7n_kKgC>{$7vAz5BlZ*?qmPC|fk-c}Z2O)|G5MS;iWeP1o-dIIoMr|^IPS{{yud*W?0PQ#d&?P7oY!PT=0B(?T=~i`Gv1f z&+C7T`h592!1hEY%2;T>_MLrq8dc3z0&X9+vQ6HvvNZfd@?fUOuF1(5ua=g;{p0nm zC%>4qw-w;m3&V<{i<*fb*+??AzkK=S_V7+cHF1hlm=+&Ck;aAT&EkO2rGt=2S#`vm zlaTb=OOc!5ZOIsZL=Z{(4!>PNmHYJRncYMR=wvHmzBM?^X8mxSY8#h`aQkkyvx*6< zq`D0##TKy>7VkCL5hrJGAIaqJ+>i#=Cm@jPgsMt_Pqg7E-=S6`>sG{1@UIs(c4OIo z$HTJf$(fc%35=8Ar}XV&ASMJ`EB!YndVYK2w0bm2MO}|+GnEuSAN^_fdo1zF@w4!4 ze+Ki1$9$L?Ae<%I2wrOrAltYiUgBcDjTZ(?g__e|si^(RKLBch+SWD=kqb&*$;087 ztQgm5`S;fEW%b}+^l~0!#nrD=nNO7x^G5T&Q&tnu41?`gTPTROh;MA_2=-4&PkVT1 z#gA2|sZA3Wa&@D-02~9|?AO3s?RU+#=NK`J8__8y`S=M!|x|6lM6%D_=)KFb(6az;4dhvr`1Ut!A}1 z;HluM1ykc9{{oQqd(IyQ14}4yU8+S4pqJ6#YO=rag1BC3X^^=}s~E{cX?oi~L1VKe>W_Bs^# z@JlCjTa*xN{XVludx(>e$&9n zz4BF9=Lw1Qj{vQ!&Z3vCg8_mjtubdL;`C?j`c{Z2M zUHJiOLdg{S8(;OmXo3aG_*OhrwNI1<43cBv_yB25DSe2t)VAR{>-?64gnG+kKOmB| zDf>EFyT3yj^?q)gLT^c{!n{`2$FaQTDtmI45~YMlA1#7h;Tf?kn~9p)B7zjpApHjg zKR+KKoHG;^vw|KRG$!;N;CQdzyiUkJAOfzEx(xvx^7PG(Pq}9#t1#->sw|5u74Ut! zA<~l{ZMQI<4E(z?8AHRnO}Axh=|h&-$mlYyHyeU|buXe7N3iB6FprR?bEbj{%3wkp z?0%DU>XLQV?vX6j?n4bGU35wD?M74`U0aDC%)dV!HZ~FR*}|b?`JoB3$N_RxSAWL> z{7>g%kl41e{F+CXxh4?@NATir_9@BLzu1`Pa;4Zh5 z^}rD<9UsyW4aezf~>Ri*)ob9#Vh?r)kHE2?j;QFibT8E4CWqjQf*du|QWE}MhiBeC^z#1Xp?#7|Q zbmJ6uwLC6xLD+|x6bs)O3IUQDyR`p&FBTr#=7Ez%LO zI(7IY#l!vCY(s_^H1w3~ixTqp^$Q%iKv@n*gT?Zi32v;X)n;rVzUHD-!a(VriWxyk zLVDfTkg4;LU$%TMR4u1S)<$JL#Vg^wuJQ&ol>e55q%n74^hVW9q4b!@s(Dh_ParMS zJjx__!nkXuux}6>(!hj&Zy0u+gAe@mp)x!4`+zTQ>C2Tv5jhcPY|jd+5l;tv!cnK&K@tD zEsECP;e~dn&>`A7q(zJN$lF_7r_d0v2hG>K_(0?^Cs5`a}q>Oz$C!0*sw~C{W znp~CSW#q2bROibK{>a<`s67swO$-nD%jyfrSKBxgc}L?_Kj-vnn)p%pGef1vsKams z#Mf4IllKX=L=6c6812Hd^YIdojSes3rf~aqO}`OOWu{9~>gMdH=Qn~rzJ9{ccz^CELSqw3&FHp>pid%cA%a;>d7q#7JlwyhrEqZ%C{ zSqsuOadA5fPCN?kCc2i}4*GT0PDi%hr+tro*d*6=mA4uXXcc+4apMBc|5ny~C_wpQ zO+rv}J~pXB!VK!41;{qcVvNC1Y;^pNd9qm(v=Zft;k2a>g8A@~0^r9Dc`U6Fs zWRG{2ii^Ef{J4XsTwZ1_7&iz~Z4vyJJ>MOqA zFSAFk%ByfzI8+0f#=`)6d%qHnEs}eGg|lHjr5y4k&VQS$Mq6&zQCG{#R!d8r2uFu~ zB~aj!^3qj5Fmr|G*#TY_)1;@7pxZAiNG509??+#kT@!((5kos`m&oU;u1M1F$7_&p zby$9+T%Ni|w$G|%^gQV-#t1>}<>k)lTrHFRBn|2GE1Z%4pv2Y}h;mU-gv~mFIRQ=@ zrGbM4qCJhT6=q}TnJ95KUl=D+=95qQ(#?+V7KvKGUt$_f)wgH^S*B$|NTly(v_|T9 zX13zupb1eVVyu9i zJgANqZAS%*)J+*PS>T-jw1P;_i9w$u3x!qTj-em*{}x;v2~z-Vmszj^f@=du62d$f z6}9dQ)zT;M;Kc$6*}aX83f&H#g~q2tgtt!vx*v9XXs@33{Nnro5U>xBs3?|}R`)K@ zPF(nGW}-*wC3_(=m`Opg8Sam3ea zUNK#}O!imI#7EnUcQiQCblSHw&OcU!gN_D@iouaZ8j^Hli8M_$eE?wEG+-R8F<)vS zQ}rYIah!@!F}!POE*dQ0q5V51(Rg*n$CPm0*^8Xz`b`3v?aueE|KT?}_R-!4@2W6v zzoCO)9%n^${Kb6z3>tu?&{Vdr-~ys|wnbQ8NWW@%$1+ zYQs_f0~0GLh;fO{&PYUV=0o*l-YU5WY2XogX{dhXJ_X!X`eH0KZHki$}T1OZobzP zbre*ND3STQ4V8J-=;|fwlh`9#_9(5>8DgRtex)JqQsW8v#(iBUF8ME)5j#^P#Is_j zY&dZRT56xUCO*uE0#AKepMC^8|McbuJp8>|pYA422do>Wl}2hu|_& zKc9GYb5~j-|Jt#PNy+cEf4jkmmbA~#rJDT^I?bM@)+$YTq)-Y&Ha_?+$Kt0uA1MYK z=1r^g51wlmwxWxxC7F6`1lkSZ})NsMnr7h$PCm;0)#T$-)0D3$-c# z!+lRbRe$G(gi(f5y%~hmlrO<9&gT7thL@4t@BgJ6F%7R`-3Mkz>ldKdf1Mn;nzkQ3 z?@d2Q3a*$pYw8cN3@Z#jfEd5sx1iPqgSuort7-^`;;3Wh1@P58dkx-tNGf>OCsZt@ zax{N~Q6O2S!%9qon{t;KNN@@yxX>||?wYq<{FI&5+0V(pLwA+5x zEWI9TE&?<0_9uiE%d5ERVSXT zL48xY+7uX?gwUsR^$Q)=Cuky*k2`-;=0-rmWx^9gXmwZ+iU2AIL2~ACy1YWm(o1|1=Xsg8B}SGusJV8@wh%ynAMC zKC=53`BXP7U*7D>Yeqy-U->{2EbB|lsiZ_ysbH(4dM)slxji%XE*H81Ed_)Ra*f+1z}YQa4HncOxXykzZ$Vt3XW7;uK-KEn{uZf9@`K0clkgf+lxu*QxvQZC}^Yl9pWMxx2yk53c zT)Hg7IN?&OZ{m=eo+i34MPaq1{z<8Tu9BuomiQA}T=VxjWs!EJAT&Uy2%1-O#=5Ue z_Vxj~8|hUENc1s4CabtiW~`Q2E+G;`LLY{2ozs}-9kz1W_8OHtNDxWQIIw;t=N_E7 z)|oBCC`)Q0q&Su*ML#qg*V(WC**7GS&_wnw3VNCi+6td{1sx_v76fgkzDLRAywStx z>;4eCpZZ$ul4yBXq!j1fl2fQ|mSPkFKI3@?W)bkQ)alqwOt_-t335Z zx`=n&{e@*S_tKB~rsB}sePS9N32bm_he^_^>nZ$NaNnsw^)yV#Qw`Ee26M_(`eK%6 zF@V!(OvCkGqoPra3&?Q_>R0F_m@Ydy0&!Z#Ojnr)glC0xUU~sE>jr(Nn2g8~Gga-| z{!s3P*X;#JU(DuSRuA+&aH#yE?ZwUU0^f_)S}8uS;!d@trYH-#JB#Y-wh50&?b|16 zAb0NK9lMIz*2=&!b+_SJ8-;}`FX>d=Unve}Q&Y)19a_S0(vg?w&XjN<^-Ky&-fW-4 zH@QSaN^1LR9SgHp8{kK(-?a23k8L)zc-Rff4*H+y5NQb>=PX<4>Q;`mm}#7Gx309& z?u4z5n;eF}u=Uqi)pyNeHQX^<-c?+IdiTxn6!K<$eE6WtFbRXPag}de&Qq_Mabfng zr>!w%`Tq1lq!{L;u>szApWO+mdyCcz+-3}jp`9gv0#^Spoge|btj@JW_>?2y$=_Lo zE)q?nfp+t=#AwIaB0s}`5~}hAQk{s=JX;G5r2Tw?4q6J1$2RQE+s3*H|6~0VH zOk7jt=o6OCPAx$UCZ$Fu!U2G#hL;1s6k$hNw!VLHe{kY~9iT0dDk{w$1Zmrw{7V#_+tqqDmvegaHlq1 zL`m{Lk~wVYS98s3M>_;ylGU^n^xK@>05scam~_gVX_L0-a*Wnh9`c@UIs$uDXS9D*W3ABLO8>tR-4%% zdcrAm8vg7ff^|edq*U>3zf(kHg-C5y&I{p+tt&*}(0oQb1oqFXCG4;{L~Hqd|DTD7|3|FmY{v&Dfjts_v&0eDf!DQT4NJO%C_ zHI?H#@F{d4u^(4>Wg#q)O1=pHa(nX;>Weh2xoYJaR(IpnwNTvaYpjv@79Wo z4W+zg^=gt1f;p!%&KcO(g@?68%V}wzeOoSMe?O$H;?mW$XxZ!`K?PR4eUf7`vkp;p zHyH;ftFr|?E#X~e^-JM@IC2f=t9}{ z^qth3zQ(uT8dG$XOnl$<)gqYD{9`b?zqQ10ORP-2ajVc9f7cmJFJWw_l$a%ux9g_-MVPqPbQq7%8dy%O$*zCX7v!@%6$<9AF8uWV%} zP!})4r*3aQ%4t0ndfV5P{ix}L&c%z^T8Xqq)DNM9HAxZ%a?H$2?TD|6Z_hYO$^zyU z#bo98SDdwVuAdZ1uBrTpI3b{-q?DWAUH8{HJP|q179~^cotIXw+9e_sq>|E7N6n|| zy45o4Ec-jg3oklU-f=sognqq!mG#U6wpeGq8C)r6LLQqZ$j;g*B^poTies#dn$TIl zzQ^uEk8nIJvMt2#ZVpj+KRhA3Qh&VaOjjlz@uBfuh2|7V{ylJ(KPF5z8o!9bYl)}F z*o$+MhSCq>PLx+-cHK1{3_)E5;ZIL#gcklix+u@gw8JIjyQT5^Va1JZk%o(s9*Bg@ zzj7qUhsJ23r7J?S8ZrhA>k^+__RmVb5zT&5AGV8+kmX=W~tH&SA#V| z6In+ow=FzN1Iv8vaL6|sB1?sZ#HLjW!v@V4{Nhtz>p1(cK2y|M+s?jNBE#M}BJoPP zsFM732jhi`OMceX`Eee1JL}2IH;daOb`)ilWQ3j>DtI|urKi_CyKa&2Eg>N;?p2tg zY<0eyoh^4=*Z`@GA2Eo#ruD_4hSQpaXZv+XW#`rzn6X@PNN1hemv?qhLEuv(lWt5bp-eA zoY!koF<-@Jwsm%OF7g_zh3M!7MpuS=df93|<-rC^NtxlT%KGtAfj%d%(j2eILKc8t zH(;JL5g&;+4+Nd?ZL=#TOP*@q$pv%9n^XT#FdH=wSDl@Lh!seNpBaR%a$Dj9qqAAx2sP5n6W#)d zW7mr9U|iGGH^)+hx`Oc~geP^C6-3LH?BhMe`5;&Laya2uU5=HwhXJh`7;TMsS31yH z&CJEv&lR;pcaF@1T6t<^vxoW_Yr|D5Df_~IEmjc77oE#@%>|JCuiTN#m;}und6SLn z7bhM^s6-D%;;5$}#0lC9_L_+9J=tttFA*b8XOr#{xf-#CivKY(%ym@7$opk9XU*W!%fWh2DCfkR1rv z0hb2Jo`KCTm{d>^q$7tgyqsX}S*rnPfpBlmNUEjjE^Zn=$5jOl(AhuQV&VqG2d-D> zhxS)D9E8wiR5{V}!ymM1Dt-O*W}za&n|}7}6KP9DYtQ|hsxjr-mpyv4SnF|3miCsV zmF-A+0t90F@U?tIvmzkigqYZEC+9aZs3Fms%axx{0u`c?TK3*f;o%#_p8MJ>E3$)+ zR%)4eXsH;iM$2l5q`cLdZO$U48!7n*$01%;R~~?Z4`}H~mOJ+u$STGmAE$Mj%?R0t zrlp80$+met^#6*I@y2%+hik}+jMdILWGgPWuY*{7yULAeGTj&x8<*pVQ}IC*wo{e$ zE-kVO@vdGuYca79vZaS!&qWeOT~EvgUCg0k4svI*gPQP>FHiz8fzeH@>|ED>mMCB^ zLJKhsjQ*QZuLka7S~MB|HZi{8aC#);NtHDSg8gzp+4(3-^_B4Di(WU!{~DX=g^N`L@A?7#UcQpkhWj zl1dnbO|d-cjw19+XXX&hRtQ@qD@<{{%p@&XW48?UA)_ih^PW2M;gV?`m0D@~+=tD^ zHWxQ~h(=X>{t_wNG_|as0(kHHFq*;If-5BQXb+OnU{u{zpGg|+Ko=sq6$w;u*wrQP#%wxXBPP2vG zWwm({_fGtnyzPN_wpEPJGL4iPS7!c+p>cJQ*}r1d8%+N3aPDy8Ud%d&GyO z%T^T)74*qouTkdJs3?z_Ht7CJK}F%_D58 z>xI|b(M8!N)+Fw*08X=&ZuPCEW#S$8$uO{=#Uee@y7e|%0likAT)_>9mfD^EHeVh2 z(|pIIg1KZ+=+w}>eS2p+@#zYuh2hf2X|E#P?($NVUbNnyYP~uYTfk{`nk}YWqc)Gc^>@tWqw_kdt}PGWLeSU{rt1!8KGXTyv}eOy zQl}$@R#BOxU}ltHspqF=TjI z+LN%Sg+RuLTeH-*PZrF~CV1O)h%>c!Dh@mzwGb~r%JyP@H~E|4Id`g-KG}Hb%V^eo z6mOU`PU3Ggk8=BH&E8d!Sz!o}wA0e*={0d&(JlAZ$`-er!7m@L-|2n`RZgIys7+|%h7a9UM0c)AR6J-j z7uAiI3fS8?L}v=sN+$l)>!8vm4E?f>O3UO%l}RubJ&kvPezwe6#v- z_D$<63)s?mVu&!0cgus~FGKv(UMB+aQAe%#H4U7zV(@yCiBjtKX6N3|;tae_L;i{@R($M= zeMoz^@uF)yZJjf}aGVx%&kDWF{MC=xIdbrB;$}6bc!A~{aDNJMhWY&s_u6y(8ed-A z54bhXq1ESdcKqJ64pJ9_UNb?Q_}9?a3OU=>jp4j<$*iyiN563pvUPRPvtTx726>eh zl=&xeEu7+E{hYI=qTWqE5;Uo+v2kzJN-j)yv01k>ZoECbYP2qikzo=pbmB3~b>CTz z?|d-2sqzjXM`62}#)^?h%bvc1Cw$e2$vg@$SzXu0rzOmkIVL4ch;t!|$}(E&>()c! zsZRL$jnvp8EOzz<3*yJi@bvRzZg~3oZT!r;;kWTTukc?w>BqDL;$Z_61aBc4KYcAv zBZ}Cb=Lz1OSV+`Ef^mN#CR z!<{=*xUYt@-11=z@@N7I#Z$Boyadn8o$S%UpQp1ik4l^0by$kId&}?&f;z%wjfN|0imf`)wD1EbQV| zp3{^Xvh`Dvr>@u4g!d@YPRK~W3nAMEF-3g%eLb_Z0r07*4qxz1Y7I=nz=4Un~v6K zwBFv4_Va`CuPh9F*{()1iGBzQb@%lxNoU`U&!lhN*4Q@sV{`1xhAZzoSj>LGb2kGL z$yPG4Q8P6==Iv+9eu?>RxHZBeyWT7q}1l)cbLpgHAxm)-}lc zFvb6|)&PH3>pQs&jHT^vqIti1Nk)4SVqwaO41?q%EZ(3+ z_U%f8STkJ*fM~v>^lvL4O&|}*U%+F1A};uDM2!EM)O0k@lzZt@MDRD!W){_d+P)|% zHu^YJV%BcQ9P~yiX#|>)k^BEiS?N>5JE?&{`{h7r(e{0H!MKIj1YkC9p@b{_d$j%c zAIx=SqT^H2?C^*4#sW~Yq%e6o4Xib7l>-DKI}Lh|RG?;AR6ZAv=YW@-7+EOCbkWCT zPCSyjkj| zB3V@4WG|7=218OaL=(c<|AaT}CL?LmMqnm^=e5TFh1_uk;EPP??baq z5%PnMj%f;jqF zgp6hXhojFL9L7Tk>tP<1&!bZDNk{9f;gnd!$DLaPcovISw6lPo=s6m6U9*Kpdjf{B zH$Q^m(51IeYWRJo#5<5hSsf!ztCnjh{X3{F_J0u|`kmC7Nto*1c{Z+Pa&W=rrO1n`$2$KShe!JAKvsEJwR{GNkp$i^I=gHyxHT;d#gbqF%%%|+UdiRDOhF`1uGtvEm zbrNHE69B+mVZP6xTTCh2h0@<5|0e}jS{mvwBaizP;?ad!hz7A3z-;U}M8jQf%R?n; zz;N96W$D3+e7?nNE;p?}R1A8?uW#?5f0k9p8zw(u|0fXLKujM%OmBGddLRw3d2Nk` z-Ss`)Jv?gXkU%ojx#=imu%ApnLLLm_ucEoty})e|ysf9S1E5Fz0O4lg{M@1a3MAwV za93pVz#�pGn5SriC@!&}r#-Ml5e&p%=f~3q*1;{HoU__VfH?D9>)iU(*EnT_fwp~U} z!xNB5QBR6{^N**Yp*c8otyU~$yYdtVpz{t++tO$pthi*$8@bV8zZI+VE=}qF1!w0( zgHHUe{x9@yF7mRc(mNXWIC$ZsFK-#bEz>vjGQ`T*+dDiJO{budeyPc6BBL7D59KI6 zr*fyLYjsiSZYZC$o2mA^gyQC z3cr_XI%pz$KkRaV|Ewm)x->!)?2xjVXRjqJ=+2&}K(+!_4EQQXQ0Deinz9EsT)qEf zLNdtXzAsQoTn%ms@*VMHcj4u2#7Z4vWr55aN0!wcX=c2p{$5)b6PsW@*c{e9bRdA< zj@*_W@p&~LqdoCc$3Xrk?-O|IW1INCjA;783o&-8uB?`vGC&)1VNvF-=J*SkwJX3f zN^^Etcl)U4;&TrsU)SC~6bcbx{>y%$p;p50z*qxa-1If+o%Z3cT7rrGl7h0Fr}N>U z(Ehf!a&ojxR6T!G+82ahbNf~j+Z&c4cKiXqW6$}$TY8^p!=VVf`@rWES+`?UF|j{L zA`6!NMYMZaj2C7T`fNxs^h(tH!*jjddw#O}eK#+tN&C#9vHM3qbZiSou=UE+RT$yC zetaa=u?~P}=#&r&*i#_H!}I1vgjo_t@4poL#9BJXaUW{z;&Q!yObYPP^f@kjnABRzNgK;8XoRsXfIT%wlW z&d**r2Hv}ubjOp2^;NE_Sr{oiz3xzoy5p;-^SdZDwPvHRqZt!FzHkf8*m(3LTu@ea z1J4a^-5E_SzuKMA#YS!Y7i9#4H{NU|6JdV_fMyLS8PysPMNLjFL1dr9zFjSyb?Yr$ z?;hGN>p22q^KEE_B1ILYQU6U7E_-dp6m4~A2{%w)B3XQ5eV<8d)eS%^a^Y3jTG<;K zb1NqPm+};}cy0Q^$0MNs<$O!FBx4WUufsPlG2d+E;5F=ceTw#4TBh}jwM@O`-t{=C%00`t15>G(>@1JBov3^8r$t8}TcaRg&mn>YRRt5H5VDgH;3A7sT zoUy*CsXGt6ft-0wcqsP%k;%Wz>jABS@uR(K|LC%tWIKVU=nUC0J<>=Rk?fn(Z6MXI z(RpTnoy8=7HSY#)y2#1Z!V%MQRj9KbF^2SxM$2OX} zk4v}TU|g{LsJ)5~huuj02t;$vtT$j+7tkMpIM|i{xr2+#ZEvn&oiY4BuxWy`RImy3 zpj;E(U#Igh0F{!m(*SJfv~DTNiKs$d7Zd9sJ-L>)I(ID{psRTd6w$!=%`swGGqZXP zG+^r+A}lO(Bg1pb{nVBvnj><_A3Hl=osfqZpu9k6(whry)?;?}Ec2lncL1)7=dTiC zn6+C!+gN-cOzMtfXRtO<8AO#RPvzocyepnVv{|k$_X~*J-M#91ubeqKLz`a6RFB(; zqCA8|L1`~pH`JkXp7jX{X=!CLp?e$Wzw7jLvi@>ts|09z^w|rYG|6%7`~_KuU2omv z(q`*@T~D(sj^#L0q&IbCM;{#c0^Pc;=oIy3VJI8#bDdr0wdkx)$nJxxUZonq`fMEb zN|t8VG5Re;mHeY!_}$EED!gFgSC{DI2u{Au<{t9;cN-BFh_TRP^SjNX2+lVn!fhKq zjwVu47Dt9R{Hv)`BScM%Sygfkxctd7^*EZqd)1&^-`E7fA9*SMlJtfkV(U`FMIcTaTO!@x45E=%Q|sY`-<8h}jM1;t{jENXDyiQizkf0o zdv5HB4~M1-ii2M2R0aQrzN0S{fUM)94Xmd^*FsY3U=GmNw9YoC7leEuo3ucGTvPd? z4zatjk5TLTplDw>zo+-g!J4B~0rb_Pm=CzcuKH2*GH6>i`Nq%1T&@sFgK5LA{jInC zZ6joab#xo_1y`_5_evuN{j2-VJ{o z6g}{yi5&P7%f&(#efnQ8qOgqHP;yGP8K-28`(iwARq4YBJY7^+UZ(cB zzt$T$N$ubha;(R zt#DWP_2300pn>(>`FLq_NCiXMLl(_C1?3 zRxUw{jE;f{3l;`H<}ixiQg#mC#^dRUz3?^8o3skte%P9oZ0JIAPxEp$b7~Rq8TtWE zUJoJL*o89E!*HCj*t%IiJ(k{-alLdc=RG9AQp0<3g7a7@H?D2=e)6z+Q?rqsUkP^c zcI@xq;>{Exd z;ip}|K5+m%--+9HiYiT6=B&U;oEoBc`iRn-5up8-AcJ{jsh3a2=sxratEtqHxH6_H z-adz)b9HJnXP~4-B74NlkELW_U9oMfE?gl4^^Gf|z37oo*CR8(caMXIpy%TVo)3#+ z8o2|QMr+1^Yo7JmS~U^5wJ;i+h%xC^=|>p|+o+4{B)fX=dY+TcAVrQ#!rH1 zx!ZrA8gz93V-&3z+$^FNcQ!Mvm{ZSI)3#~*i6PeMB3Q`Zzqz|0^X)zzps*(7N;+oIgr;I+DjJ<%! z?yJR(VZ(^c82CW5+k?lLBf?Q?7C+Ij--j#Qj%rG+*H9BRi*47KuiYjNbbM?}ybCH( z{OzDDxz=Rak)SYpo6Oq5+)0fSu80m_AsbZu$aujSgUoxf`tmdk<_&3eEvI-T~0tClGntyq}m5`QG(YM}*yMDzLdIg>{=!|Uyl&CWcU$IPPO9tX8`TLp zh)X+V$QUtCAJb`;>F@j_AFhmjGo(dw%lWY{NolA;hIr>~Q9up~${O)23VD&rWyF@mTwZ8q~OkHQLJ768Wl7elH%9>1UJWZqaUD z8M%}_hj>i57CATgz0Mrt)*pX!A_0=ztc%sF)Yeyt8ZV7HG+*W1y;*n?{q*|OSjVg; zi{&pHS%H#SSM~<%^BE5=>8}4JUSUOSIg5rbX&m57l*dqeMesd7LCTt&b1F^#*%LN= zC9}tM-wsj&4T(AMHk%FnX2pWVVuG}#kF(2wPuP`dc0jO&vRQ6)G``2G?Ey?+%d-1A z`*elz+L~>u&`y+f-5ejc7iXpEz6PaM6{Oo<#tG&%#qjJHP(AgT#%pNq73O&U6wC4l z<__KJ{)G^;uI;$j$)Sq!p~^LFwimhqOgX$^w|2&`g%zk{S(;`%V3LRgUmiRbBhy=lKM?yksza5-sdS$Rcu={n9 z#6W~S>?rj)Hxn293R8lihj2oMMlN795O)`BgqVKm$Zh?iQ0iJP^-fq_GkNW$UP_&G z6X%*+etn#8>X{Pwho7HOGFEi2nV|VNC;&Q{r*fMhR9me7z@VmE>6kL;+ruLFa-a33 zSPdHVhcvVkl)83at+uX`VP^25K|xt_mf=M_4x?2+vuq?%&Z3W}Iv`MEFnULAXL5yR zy8Z0!GC2bz=z9C(G=EfYcc;(zg8@Xp*Uee^uef6;5wr;R<<7&-pRAPmFO_CyR*gPO1hIIYvMB<$UV4CRH@z_ll z&X=)!XAH)~6eUg=8OR)#2M8dolpnlB+0KyROJzht74eXLA_~SLSTOBorAA{_`a>{p z_gX=l5lYgH=K*li*UR*PTcQVkOflZ4-9g_~mY#UtPiRX~1H&Xw6=c_mz(vZZ55KM2 zLC{z$rgScGeBMOnV8Yzq2$A~GRsu%;B92$yJz^#}(!2cX^T;BTJGb&cSx!nK?Yi?c z(#$8|O=n`cZDm^8tYB&(>4t+S4@^E|E1*D-R2-=Qp6GBmuBE21DkG?+laz0JpLGyr zwb80VD7LMey9k%vD-s*`Mq`9*Pln2q(MBpH-HXOIWe1n4jwz_f%GI9F;d;Go(NCRg z^OvyFjlv(%4lHry6%^0f`6zsDU#F{^o=vnO+#@Gs&V5c;H&Iynj;ZR&%UCywo%x7J z8$@VIGj4)+mVd2vgpFDxN1NtrRH7OA&lJ-E>g8bcgo=&W2c9q@5PR17s@??lFre~| zs2-!Iu65Wk5vT?<8%oWcds&EgycXwgO>6}LAio8pJR=38|0=U4u^#Ygbdt67j$(Y| zV#F6UZAE>hjKXuy^^n8_<41{&a&oP%HPo@!nuim%)0jt24QkfboK=>yKd$qxn`IBN zBM%0GN3ABHzX;C9PTrhS50VwsDWY*3&O0Alv$+6Ll${Ny6jl8-I2Do_2IaqGTE@(@ zz}c`*H?#rJE(Jc*J^2JSU>M)+)2^+Hbe#VHnH}mxu+eYSd zh!DgeWw|jqF#?e6SZ1e#S-bd zT7MfJOYxW<<9B7ph>C?&r~RkzCWh63TC&$94V$+nfH+b2lWT>&EFM^!XNvylOsTzY zXxPHBw>7RjsHt!kl42XubVDL#DKoO>JZH6WQZ%qwM%hq-M4pqg>gzUdMa`|WAr;R= zhDOeZ60fy7K2TI|h<0@pf8!oDY>_eP|(b3YGJjVZZzP`w#BNeQ)pgb-k|F>v=t^f3@3Q zM*gahW}P0aw-xQVumc(F4U<>d$@vzJDjwi?Ew0WUfz3x%^TLDEb#W6`e?z|}CkikI~gV|K55PM3}9h^n+2)i5C~8RH{|w^FFB zFE%a>Qk!FrWudj;#X?DSP~eky?3IVf>f#6r^tf~I-XJj}$(!qeVHVyEp|6ogl#YF_ zMPSN<)wCVf#K>iXe*=bm;KH7EQUm;7Idlciu4P1YM)K2uJR9rbbuy-*xqG0#45wqg z7&8OEt&{~=>3jH;qC{n_t)Y_oDjkzstNW9@TEc^nJW+nw`Okl;e39AZUw?b5E;76T`Mn!=BHX;jf4?3_g*IQx3_2SEuRIb=+4 zOG6U9fP0ZK!ZDapLl3LPy!qB*GhbN&L*zDDx)H3<5r58mQXA+tTVZs{dImT6IW7Fx zxQJq9{*UG7Y1?y4g-B2nYR|O}_EsxJ?Xk&ZkNsYnjhYRPCERW)a{e`UggR!nRrCMm) zKf5RunORepAB~#LEJKA$;2sM%PrAdQ)^@3ZUVeejB9(^?K45$6Pf_3N;@JD(R4Rk< z+Z2*)(_HobUzjWoH=};e%T5Rdw}b|x;9hn&41BnH2h+xWg5sdm;Yy?gU817K8}>El za-GkhBK8&V@UCblGeGHJDO5liyULd^j!dc!8pg&OY#C}IKFpF)pn==GF*WSU=wErB z+N9Jo{bqdY(jNs;K&C4;xy;uEhhK|JP_Qvd`Q?1^SDS(|5eWp;Dw(sw9ecOtzAR4# zQ*+Y88|uf0P)lWd&>YZpV;YFBwedn?RH){*F6kF4bj+(k-GA-pp6g}(6+~QzkqUpE zu^be>f=_0uPBHgz?~hk^b0oWteg2s$)@NRH@o>;uQ%U=xsRhL^dRbV>!n^sQ4tdpd z+5xDA8r*Ke2DdJlT>8KQmyelp)9K<@25-IRHQuEW_;Zh*2DI@1A>=qPV}GB1gsCgC zU-(0X(4H3}gFT98vH8NiLYU0GjhF#z`-#CvMYEMg!f-^_{%4O%-Q2h-Ebi=bV4mw4 zen;<^f?Epo_5Snjwd>=7dD`-BgwTs(DuTj!{I6t(%B-=4z1762rF9ifO7Svii(R;D zI2EKu5scr|AU;17qjg@4c>eGOJFY_=<%lFi0-s-M&ticqjYl`>E>f2;29&k;$VX{q zSRZ_2GnE038uC7iIjS7+vYugs|TSi`uLom@V?-jm*&3xfvT zr?Yw@hKA)r!aq00XRbH6(?PYi)BbMgkq3<9Xr-!BtmXFIHV~%QeDE5|+Yr0)!p%1N z{)#hrrO#NhKSlrS50&RHs;hJQ@fWrR{z+!bXVB@r zJH(FXl_ z0Uc4!)tl`XG={}wtD>J+rA`SILO0(#jk}iqeh8Rw%+LLb{}^eTF6{R!WO@;M!>2dp zQ+iuM2t662)}d_PB*}GIxznBE0Y~b}%gG{cJ#>RP9btuzI45Ip;#dW)F0EM_22WYB z?iksYf`SzXD;^g#6JA3hcq+9Lw&wz2n)fI!4)}MHUAA^be^+*Y_TUc{?Z+pux<9_Z z<-P6{knMK+<~-PB{d5hM z`1(-a&5W|ZKiX<<{vNs(NJ49jrBERZU9=DslB~j(Z(tw5Hct*dOvph`glKsm$Y(Ny zppuDDa*LQ140h0H#90!tKbKjS9*kO>zF!rW6FKan?gww+Mq}{}GaK*N$c=2Z_wT@= zqwL*PHCf1UhwwdVOdZqNcSA8}^Y^2w$e*^XO;U5G>*RGWrpf7ruU$a4@6~-}TUKkq z(eC)v&*|Dv{$u-h@blvH>BuWtMBnTX|JXgzb*4$=@}2$R)Z}8Vdou3O+h0}lpy0s2 zvIovT_T-OO@cRXQK8> z#(bTt$Kv^#Fv6uvJdw`5W0*lJOW0`tD-eMohm;0Un>_;OgZZ8-JH|DFXO<{VDEDB}c5#(gE_=K|@1LTsFLr4W)Hx-iCpLgcpNaag=|BR)SP%V6*NU!$MNWDOg_ zb7m3_?cF^lTxG(NuV9LDksgI`tVsD83R9Ra28TVDvGOT%I2dG&&aqoa0Nm`cU`DSB z{;7zT%+&A*{!i=&e?=@yES;W)#ns8P~?8f*-BC7RD2A@2T#Pu&fIL- zxe#C7H^(vI$RQ$@5vVo1u=QoGX__#^U2cVFT-4?yJ?_-X9{pYmhqZ?0(}g zAEQJhq{|>|L<>nbe& zM3n64GHSvte_U(hXRCp0sHa`|_>L~Md3arHQBz{KW^-4ym2AH5>^m~tSw4$XGVG(u3&?A)8~52km#kxx@7# zka#MH2?jHEpWc*}wttVsP@N%2nR*x1D*FAkRh*=nS!Jp-+9Cs!2L`R2hL6^9FIDP4 zh?}lFVo1=iB(QT>9v{4++2^>bP|yj<*x;Y7iT(14f^V8wf|6Uw4{bHH@&{Hxo@t`T zeKiY)L{giO{2mYUIPClLn<6)BAD(7jn>#<+NsDw2U9Os2t~HSvM7)dQmXg&sE^#J& z>ng4&GY8GJflzVkcel~Rx*$qgJM9bu}4?Am@UIZ7Kj!ZEP+bq+6#dMA16ZlBP_;%pGtz~*`;X(7U z?!T&fe3QZi(;kXYyD~?o4=Pb}^EOiiEw{t7(IjkRP)*vEo)G^87TQr**x={ayL@Vj z#51He8cLsYkZP!}SdaD`2vRi4V2H~~D<=lH^|)eR@Vc%v?p&==0milSuSEt2wwY%x z*eT40pXXL|Uypfp-Ap0sGD*qd_eQ?2?n&wkn zA+P!K!nT(eI9#ozn_o)8-$%k!b_Z5BzVtg1;$j}lqj5<&PyKQGmJ|DR)zH}7HXHkm zQv`X0HukQT4fQF|88*0L(AbWOlt$I-^;n`7?~hF&;Otm5}6#k*MiIpNVU z%TQtX-m**-AmC!Aefb$}V(BEP=77%(f0HamD9Ym{=n?3=DZ6XvG#O zlzLgWKPzd~R*K`;e&Tx3D!)n?^~D8!UU<&N;@v*QZKq4&y~o$0{oe0Mn)*XdUQX|+ zY%_n`OYH3A_mb02+BGBTpIsB{Fpf}qaO37g=P)+g1g%};-LnKa8L2ii*Jb}C zdO&@KIR_6$eTOEiy5^ zC9nY0G<;PoR`hC%UxL;D|$;WnSispyt^mW^_ zGsGtD+;n#swk2A5);jxe#o>0-TTQ3Y^7i@*kixaYAC}H-Ov?T;2ttxP?48u-o=-3> zIcO)rUr-HR&m}9P47#r^gVp8~-pqUvEP?V`i=X-8o5B8^tP*~GxZnJ8Rb;)1?~_=u z|Dlh3UxgjZ+j06YOd$CpCl^FrdAWz~ravg@k~nLp75B(Hhf1h8FxP06M+>cylSz=< zs4hJM?=j%HTXt~5w6aFR@f!NYkw>vOsxHn_UOJ7xf0h~0Q}MC1RuhA@ipwKdqoj*V zISUWocUKt@5;wUO6f-rowRAmmT|?tlS9AZ<1gDXjx9g7)+8O*w#j=JiJ~7W$U)@q! zU=x!bHm5xPkiDPi=v8wlX7)V1H{JN-D{%v#1Uv}j4u{DYzXiYzy&RdHen3=s5vqX2 zGr>AIPoVOR%bB*=+()JU{7Q8(#R8&U=!Y{2R?yqB;HWz0M9nAkt2m%*2z1<3hCj^KO=@ z?A$v>8uXR$4Di36=`|UE$;dVB4^AFGeqs>zMk&7SZ^VzYgMRE_Wm(c&ukw^%Yf7^o z(ivV2Q6I2ASnt?AVeV2Pl;J{m3v`n4nA%nDJ9+=#vqOz8_U)+nKM8TUkKW#DIC|ac z9do4pi*KlbAFFLa?7@^(?Y{8yk;nRKqiUq4;?0QJ#1@4K1COxu%b)uWm|j%aBz~Fr z=6m&%hJJL|Z!F2oGng!oAUzL#pWx!o`FOH^_Dr$9eA!68PeOAO29ueYQ1^{s8M3Gi zf>IyyJsQ3R2M?Mc!NYz4sw#j#IKzL8R^IpRGXcwFET&SS5W2+E`E_&(guAr2OA4s> zV^Q$b{iukbU%viF?@haTKCUT&LkhDQALo&`=mI9kK zP0B}ot`Lc@U`ogX5=as~^gknkyZsA_XrZhRGQSOYNb#sn;D=hNN0tSr?pPhIp&bOL ztZjV=@UHPC3C+W2w%dNMtR0x+>lvl(!k``np^=IZ;L@Fxu%!~-FV(Zr1u>r|m^)Qi z18RJ0Eie4I(L3a$vit$2e+${vcEKd0d&P5U)vfGt?(--`@*~yOy+12D<|B|YQ5=u{EXM#3SF1)tf^0^ zqccq|!g>bHhjTsBF27;kPO7ABnpk9XhOM10Ts~m&Zpr^mt?IZ)Owc8MYoyP?MvM>5 zPwP}-q_>;CQ|go|*AIxzY3&y*Vc>(Q3i`+Wzw8vp_n~_eI`)`bbk4cbc*UG3I={Gpk7H z);yBIU+9gzvKiA@rj%ToAZR+UwZ5J;x^6i5;LpAmuAy$p2{0DzU3x7Lu~mF#Hs@lg z-N+`rH=q81M$qbcn=>ua_$0I7TG$_aV@vZ@XVQn4C&45U;BSjpr78S_3H zOTPm+d#N~#Bq?a4R9Nf}Ok%-9r6s5%!&IwEDAdCK2UYjYwd}yd~9A(A+fW4 zq}ie%#&9*#FSg_lDMBa5x5cnpYRYwdGvQ*3rbWTzIK@!fydyaE``QEVC@DGskWgua z+J!u)!`v}%j>Nu3zWsP$;MM^qT^q+f^lYp_48-z3@M`LSX2UrQ9@CSu%Q+NJ33QeM zq|UDoJ4qy)14@3xu+!fj4Ft+QLs!tnS03mpyASeJI72dZPzFY+gTwpH(ZzZ%`@8pc zIU;8j9EVCWo+YW=YUh2R{Z?C8f1BdGo06^Hur0*d*vTlH@wHg@@rdPmtgIVshCZ>) z9TlXG1)isQ4c=h|v}KgLWx7EivT$9TJP8YC=tod;$a? z#pg32#LNPh1JvypLZuC%suU{z61l1^o~sMPwehWv1dZZ-T42&|i8$q>9FbmqD}x#3 z@82ubvD|A_b|xZBs_KYv;5*}H>yS@=Wl!_Hi;hrpP>X)3e5>udx9)C)uD~FD*59nn zQYooCC7pZK^R!!j&T)ZKvsemfCOKiOE}tvDZB~+=k&84##R;xrFcWncgXX3uEPac! z1rgWZbBEu-wbrO0qEu2y`h2FI{dcypJgTACtm|Lhx9F)!iWpQxyzFYUmPOODzS*@9 zX-xOKKOvdR`fJl02#b3sGA~uE9f$zS!W`|&u}<*bdNNA-&#h6RJnktSoRgWQUHQB= zGieEUGX)C8cK!|e3@}1MBxP4uLutd%FG@}5VIA_AqlQ~-4@l&fB|&JvDz?D})C_`3 zu86|m_9(=eP>qvzmmGx$qKS#!H*AiHQzNveO(FP3G3w-sZ%f1CWToZa{=BX$64aLA z#QyF5R#ud6^U|$e(ALkJBH_QnC9cE#HDez?8m{|1KVL>M|0Le`{#5LiGl1t{XlSG} z=oq!u*)!Jm%}59e@c|3u=SvAJ)^w$zDNfDJ%n94*qMF2ti}ZdQIc-#IXJ04_VkQ+5 zs68n=U-hbB-~@aymMQT&8mfp-5VMg(T&gjN^q~=C;kyf~IGiWgz7R&su?(}=>gDkp zrnI-Q;14=&=+#l?B>}uFF88RhT+eXc^>R05F{3H&dH|QKTp6wX{$9w=h-x%+|Leg8 z^I6pxXY=*K$UGTxaN0qhPpm8=;vdA)r@!Fqg|ahb47^NMbLKCNU>@ZgU44ztSdBoG+KK~iX!R`p3 zf`WgI7-R}G^a(8kOEowCLx^*^Ykunjdx^P6lPFdJC`scbkE5eHZV&@~PM@Bxx)ZUz6((h6K(Nsw zcz8e{T5cYhg*riS=_}46G9H!l{x6U}0DzxObvA+^w8cPSVCF`y;t%ceeJrUW7|TFx!0*KQ1pVPM8sS& z=uJ$8^EC`% zS=iUQvvxP)M>vbx&AXan%}rT=Xq$j7wf7X}eZ91!A*pbYF>NmQe8yKmKn{LJnV1L3 z@l_-CYn1o-)ozqXE-1e)!|3vlY+j8O>-Or5m5UA$+B}&2K)Ir8M|FW%o-X4d6MaB; zX zZoh492^vsn2`(a}_JL&)zBc&KMYP4dW&{de9B_6>58Dv@@#D#@3rB>Ids=rIuGw$~ ziZ_z!miA&o)W)`AGP5#0WzTE=Wm-O5Omu9z)VqP5&j3|m_SL3gMevP-E)!)ex8thM zEH3Mm%>_v3mul%jf1oL&FryD7P}9^x`DHCvpV0jJ)K+hVV${{tj-WRBt`*L9tRyZX<1cK5bD4C?ycX8*?3JApEL8>*q zM!%pen;zs!@`1|2n{=<_JulC)w2Qd-V7lzj54sju>>%HJDmSiKUpy*&_o}ko=N~d_ zV+ryz!}rQ2jERq2gO&pAdxF!s3qL4#$77C}-djEtSz6{`TC&{BDPrZelp4*7j@H+W z9m$gmTtuh(tByfjH(seMzta_rsO)5Y5v;|o7p@XCX#IaV8{-2gLG0S|*jHOPSEzxC z>*N1~iLkjz?10`sHbEJEHmA3j>aGu|M11y;`zbONyvZfDP*rKiw>-4O=Vjtp`eB(*(gJwj zG3e`cPhoOcWjCO$mcnFOjfPw*J2#+>I35&UVipovgG(%rmLFYYPSv%B@yhnW&*%zc zl{$6Pq~HZlTer@z!ghljV&Og-`SIcQgq#4OVwiJ&PW@+)i#i$$7yy3uJN0tjWksU- zySjixCmD{E=zjx%ZY>G+BA6e}bpZN%qcz407mz;KCEB@O@4@|kv8lHYf`WP3(e=HF z(WOq>HwHFSe1wHpmW5`+MR%(owp$X@_Z%}%Dve9ercko_U3K$`=?(~~-&`BY8t-n+ z<`ZY%%^GM8DLZ5NQdeR7e0O9w*I_>Rvv27BH|^goRkzOAb%>C-!1+Wi`y?yMi3;MusUq7^)0 zU`^=)nY_|d1p(8gO*Bz=+ZNFPtdI^NUXn2!GVi6e)@gD5cE>DQJ|Zq4u7H)dcp2lJ zkS`B^aLS2*X~4z@r8U%@Na_8Ia#eIm@c9LdMt#LyUW7oUbhoF*VuDm!_)n(2ed1=< z$9TTZkEVW)XO*_aC_X3Fb=B5wu~+4_<^5t)e=vHscP4W9(s`bnm-xILqF@9__Sw{_ zZ7ea|$L`#B7|xZLpb9Dla~3^=&ncfuw}ofxrhI|?m#bjl+Jl7oW3fx!)!Tf*g36I~ zSAntMaVvmK5j5@OJ2If0P{KS&L#g=J-))lqLZGwK^Yn8 z9sp9&UIfn+a({3RV{q*XVr%xynIkh0$ge0_L{%rG5GE`)+F8;!vc;wUY z_}a#MrjIfE0xW*;)_-g{9?{p`r&cHI_>^3UL3k^wb=hA1wOVSXs2eVhd8BHV%C12O549%z zQ=)s3+Y#A~D;*p@#O<2N*leQ`)*A8@)Z2ED5Mg!Kj|D~^*N9u9f=Y{CS5-@MQy^Wt z#CXKF)XmXYz(}F@ag!4~w}QqS!zL1_vq2CDrW>h8X`0-ABX~~v8vC+zyjwsM{M)wM zX0hh~fn_;&j}BuoW7fiyS(`7s1=)4GmA4krKoqbdZy;Ph!m!OTXq#JyykHj;ALX+g zd{s$yMd9msz{a`yGQl1k&O26&kwP&OIXLm3(V{*oO&5{i)x$ZahRact7Gi+mk}!m| zeQHjtmq`vC){(@TPQa6{R*INc7RUKGmeC}IkizwCnRUG3|F+Z=SjGy4@L9u4YQm10 zR8diQZ{*Wenyy;2dIc0x6Z{ES7&3)cn(0?tT=ZA&4R`aqzZTakBvV^~Qz?|yzlgZoCLA-*KrQFL;$l7D(Ne1SX`!?iVWZfAb4WPpsXoR4DwW)vP~vnh zR-Y*eM@(C5%nXm=Hi}Pgj3;PptDA)||FJKpq{_s048F3E9i{#2xH+e++h2U{EV=UV zWvkg;`Uc%hJnB=dT!(3A4ZD&}ULos_%MUJnsai=T)PDQ~YMho4oU%Jo4sas@lB@yR zz_fR}Zg+|JU0!_<*cGxUm?CZk%0JIV!o)SIUXI)s+0NU2C&<{sCEL^w)4<-8l?*WB zIqGPal||z0$uHx}Ij8JG&nhRH^CM}N?ibQFcGr&nBDF+4U2-m33(m-`QOB9wy8J!T z>SbQIwi>rh3!#PSoqE9XOj zk@a&x$I+(}XIKLTH7xh38(s6dPF#ovLIzI}2$>^1Q8pxvX;%<1k79!1GSh{udP!RD zmphRo=GVeVn9K(M;qLhO$ZLP6Q%)=yviD`~>{}j>Uipa{(^J|!mdp1D)two6?m2Pe z(e_~Kx?inrXI>0)y|O!@^uqql)Sv12#+03-tqT4TkKnHih ziY%Bt(n4s$xDk%Ps3T6SF(vf+%{NF!7)g2Ostt*`P8qs(`Oe_ICs)+X;W8w_%epON zezE0PVy6~@ZF9pLY29l6^KAZgM=OJF0UD<-FTlC#2E5gI@Yi z^3I0ww#oZNht@^0%&Fv@Y1G$#Qj3TnvM$Q`#I6rdsG`Aq<7IZE*ERpGPZs?9RI{>| zIfB)?Uv+ucqTXyDI?+sB2nTMl^YPf~3kr68;&vnPc<1t8%7`Gpx?NDR_5s$!F=*#+ z*3B5NklU9T8Z79%-j1{2^%t4#bl&rJ3T^QIfaf&RJ8ox{w|o4kMC;BFaqI6OYECw+ zL}ll&m!(r^uL*nbLGxJ=ybZM;&@e$z$TRY-ACr9$d6+g14cOfny0{NQRl>zRzp+;2 z;I4k@yp=~90WGkt8Gkp+OKO-=Qa;eM=gvBo5RQ1*h;6}O0kXC>%~FrQN#;FK6q_*N z(PyK9LV^No3GgKU<4kyYfb?(GiV9i&y3O+OkBR z%vvs_4UH-`XG>gp4nV|Dx;gnK)%oe^x;2=U8tH$R`|Caf{TJL;1;1s`%izbGy+1BL zSs%In%OKk!c;JNE)GFn+PJ8@uz`X+gFFm2bMeziYe0%B3jxYC9pDug)d$%2XM>tJT zS@&0FB`ZQq5ORkuaWMa-h5*jnJY1fg@0sF%@Kx;R?p;b6^bS+RYmDtkWjgFKR16-R z*46#`xlXfn-23#G7W4I%du1f19#P51S9d#$vw^X@B>j6i_#FF};qg9QL=H1ESYOF{ zR1c+jA)6(VD;77jglnmuNFhqzmRtDI9sb#WIlN9F;EvaAf8Xxc6@T&bq3t$S>V^0H zojV()n`bNn3Po0qvXY~sVqfYl@7$f|Q-UuOBekIt`#r#nAf^e6xR)Pw<{aCb?fWe~ zxaK3oV9n4YJqjrmq`1vC1Q7(k)ZkFSuaJ*nf;qoVhJ^hiEbI>NBIV1;!GsUXn0(}! zKSCfRH6^bP#d~`%#<^rp9pEOL6RZ*NwNz^DSp@Ww#nbutTH@@`!*NPZDL)ljDCGiG%~OoZ3f zOiHk^sVjy|e{NPkX$PnqC|O-JS`9F3$u^6ykPu=vEM8cJn#iDP?9=ww!QHNV%nZcz z0!^F3T2wkyY?a|1`NXCP1_yA%JMKq1EWrh2OM8I7N(TwYvd*U5-f)t7`ti=~?D&|6 zO=S3Hix%ufeFS_$;rk{CEgpF$IAz24(3#APYy~7%t={H=)R=h?0F$QoETaaOT0sqV3{! zT9!k$X6rmW4o)xDEyZqR2rSB{?(gek=IF;p37G<0H53O`tNp;H>Kh&-psMiZ7KN-DXm$=Aivb0)^GerMkm2Pj} z#!aDi=LL!%H$MGIEYjW17c_-@F#E1+`Snzcp$t^&!Fd28AiE`!5;M`VNpZ+?Ak>F! z6xW@$u~CKsSKrm0>;hOAZ1U=kHm+Qs`jd{uD~tglr^8>RF}*<{{5OdyPt^TBgPSbEkE^`l1<{jzJct?3MMXr~Lg$+9k2?>) zZ@=|n$#q1@yMxlzx$AtkbMdmM?90-q0)4S3E{p!`<#lOu^VVxHrz zCKJ3M%p@iVEQ#FHt*D6ut$)Wi#=xM1g|cek$jhX_oB0A{;QM4cc&M}VFyxGO!K}@$ zW2B)E^B)a4%9oe92ilvqCshU&tG~++#D$*=2+uV=YO(z>;I*5WB>&>ZYdmlA)A-~% zyZc*ks$tEPshNC`BxKh*{6QF^_M&CnZ^9tJO^A&-%c@gc4A2sq0O_c=Zrs96W^Kr8 z6bYtc7c$;+?~#-%%|OOfhFm`!< zrB9~Xgv4LU*h%fs(+SC2KTmSAX^&E1M&+34PK6P7lT{LgWqg)%vQ^rZuJ_6|pk;!; z6x(9a|4#_gUAD_ik7BD_u(K;EI%{c%Hf9PB>-|1_eaLRH?!$YA3VSl@9ZM+ZbOtY? z=+V=K{2m(+m9T!Rs7Hzw4?;mxA&{kiz4b={HdjMJzUtIRgw`R9(xK~8 z?BfA#tn%C1!M<&SfH2CF@Y~DV+ve1*xiViqP#?2*@vvz{pT9u!9uHa(?n$pajKt@| zZT`2vf&GrIK?A+tTzj<`c*dHb-2$3X17@4rG{B5pw$F!7?~y3^+4`9ZX8fs8(;C_{ zG}g?~K;$29CZz7E1Lnp*UWT3{G8?8ARq=R!x6GoDqp(k=80b7xf~~W!q5xPeAP90O z?+%|Yb$`C$H>vQWC8ul*UCgh2`uO?*8J%Zkjdc$DvL>f(R-8g@tK#NpMn7^Njc$+V zZ5h2rt`^qLy(YJDH66GQvxpXxjsa3JWU1B5GpEr~8!uYOLtRJCQqpQ*GM0Kze&fCr z!uhd3ZmVsVIv!p8@=oTTf-e>a+keTc0r!mnmqa{5%&M7Cl<^iVd*ZZ!~68-9UGEvl{Xvy+eJMx5yJvyvQ)c!L}3-6;j>XUg(OIHRdL&SRFAMZM91bdQJ4db6>srzwvs5L26F8Tesc zsC0+UB~0d&Y-mTlyfAvC8bX)761x+!!f8YG#D{MSz`W^nLw@NfAAEt}s|7q(3 z3kf$&_~YE{EP;1-P8d@@egW`hUjw{V4LWC4WD*iuL_wg#*Md)x8iBDTfGlpt;qHWL z(5NG0PoYWpBj_i5uOkKBuBuMj;2iZg_N%Re zef(2q-MDZjX-DP1d*MrFZ!P|*{URy8y;-3q9F^lxFqu^rX|hko`?M}Ub}@G6QF0_2 zgK5h)yQE|K^|K@)_wV1GjV#}x%<=v96omAHHS!xOh+r)b+Y3(7#wiCRSWN>=`$nqV zY9f2zGck*qazwmI3>(-tuwbN08qt7B1m^)HoaghjTHD#7DJ+&Q@!snQxL9aL3lZ}r zYeURb5PT?4QPeA-eB5?nIfvW+n`58yX|ZERGR8JNJj(!{Yx_10!13mhE3H<|*)m27 zjq$VeVgkXcq0xuV2-`0Y)aV=_6*F#HWXGllG&T@G3R(y+yPm6{=EMptdfg7;)mb@Uk+dxQV>e?^YqU-vchyI4I+^=}QsWxfd zd0wj8)|;HclU19#tg`*1(#BA4J%p;{PcTtFZ?W~#VJ6?7oF+DY(yf^QIXLda@5Z>SNU+ zdKk*kReQ^7$Kszb7b*}4GO)3P0E2-_2{(j=Q;-Za))Nh?K|`4sKnIjGz?4Tt6G7CV z*S_X(@vkyt@nH=;VJd+1B36zCC$aPmGJ&mG?i&vIBya)}CaI>@F=w!97>`L1j=H9p zcZh&vdp|XTO6e@Uzvb2kzOFFsu!`gNz+NUuZ5%?JN$}j#msS@5CIcDh* zk7vl;*tS^I$gj5Sr@XV~4Jxauw7w0QnB(=|H4ui=PKeDD#rdMg+Sc8I zJ&4btxj+iA;?>6Cl7z?qy`2X~eANz`hpIfyriY0<(Mu5G{K4KI&9Wd0mH2pa)4hgR z9-G$?g`lPsv#EY=E>xw`)Mc}>-Pa|YU57yUc>wJ9x}-;`j#lS3Lx(VPI~22{L#`g_ zfyXQMuc%K%e*+8$cJw&*y}XQb4MK`L($vKFT8<54J`gDNVtWQheq)>UzWnOxCsU`S z`7e2rdC5w$QogBOC(S@L-M^z4x=Ppc09#L5L&R;*u4h=pi(j1FV=uk`<4!;FR+u*Z zX9*UV7cCFBtvBe;&^um{6!Q5XEYmyK>)bqpZuaVlwF0MRQ<*ni6C=8?Z(|kkS*t|U zMgTKsQ6wTEcK56QBFv^4CaZ~~Mwmrl{&(d*$kEY2Jh|CB5g`}tD=orN79oLg_)1$%625L_u* zD-9Z+zCjzG@vc*atuoggi)jX#zCZeF@k)2iS6_1mXU5HAoEM4dJQxH~IO)H(mSH6o zwbQS*8|8ZJ*~w!;8yN}Eag%sy#qBh~IuBZT_?OAH@k^o*m$MYxTk`C~)044Y=#3rz`pEtvqE3XlTdp#jgX|u~73@?@Kv3&v#?C?~k{xPwXqX@F3EFBZwrA*PJf> zP7~eM!eFE@K6!?8U{;>roBmQ4>mGX$HxQ;oDLWa!Q{h|RxMC>szm-sN>eFkl`hY(% z*4~aDYWW4&(;yDx6ee|;kI9?8QMq3V#cSV<6%w&n= zrNs0|KG0P<`b1T%t{(sFhs^u@tV;v&vfT~yT{522|i?i!QwsMU$ATLqlZSH=bJBHZFbA%!VtRXS4hS! zh4(qYUWgCxPljAUc$$ESs!)lyfIaod{hV+houFL(E_AwLt60ZIbi7eGCsIFYcFal) z*e%uGG|es!am%AMN-@RZV3&=*r>K%(#2({U$ls8~!dWpheZdn}4x>eVeI3-$Zx*fe zrMsmJ`R8xsx+|XaB`-#)a67eYFBQ~M+iBD^o@lW;>d~n>Q6FFzob)cvvX1O$eXe}@Ndf>!@{c_qI#UKLCCGQ98>q#o9MuvSw7zNn z*%|)Gsnknh-gxWx!wMJ->0^`cBO<~*^}m3@%!y;KXq3RL%8kBP9Be~XPF!St3N-~> z4!8=g0tae0Jtx4v5x^Ykd%=RcdnTA&O7F~YOV<}Mhr{LBxI+(E^B~!iO&s(kI-1rvOxTc_0^3w2CMigScoY6!^Um%-XY66M7DnSqI^jnkoHZ~MTBAy@FVfBZLIJmBNa zew6rnUc$JPeJF5N7oZSwoN93C(i^2U|400Be(bwt@m!>##Tq3=M&biR;@d?4e1a<`fu(V7lm&Af zDU`K3VxlR(vZjWTpfl`3%e=K<9l!{Spl@=)?uMDGjcBOFdC8>D-zD{A_cV2jB+zVL ze^kNlQ(mformUI&aR_*KMhf2R&V9+Uo1U7V!k2{zn@%PL??@`~wcbQ-T#Pj1r{A&J z?Z36+9$E5nuwW^$D92T`HCigPc<5qgDA3%v9lPdacf>QtW)Jg=()W*3RxJ&-K8I&Lgo0vD9_&KO?SKA7~L?DwNugfk;>iqW=qD;HU0SA@c6u!{1)MCF?&7RtDQ7+hC zIQhk>G6!W8@)rys@Bn))JLB!Xra_^;zk542huUJkv)Ys&t1E}h%||SS>BgJ$G0F-D zv3yM`iS}}9qNXp*pdmrnNOc#&DLy#bD1>jMjM6g`eu63MHU>TwTQ7TVp+UEa1gl;d zdfq2a#YgRZnnV~{?b>WS(0qJt6rT<6NbUZfF4mF(%~dz- z4qo)gixGoK_xiW_&dodS_@^rgf~MwMl|0TvATh4Xw>I`IagSr-ciK3<|Hsj}$20l= zZyXInu{lkV*+_C;2Zx%|%%M_IIpj2^qMRv*m{SfLa!3b7hz<%NY|e9Bmw%TGF{2}_%|J>1-k zY1uQ@Y}0S!S&)-Gtu7;{P@CtG&(*?%!C%I%jHN>Sxlr7|eaMH$BOvxx8YR>AV|)D+ zsz&tWfs~>`Zx7|{r{!s#6KWjPQIW&={wMz{33~l9O1Opu`9|H@0 zoic5iy}B>r!a2?>L7tO33(V<)#Q^l&6yY=8FtVx>#3Kd!IstE#_$?54_l@?|Cb~L4 z{Ap>pHUekiSKbLz*_c7nbydho)8K%RT}p9dGKy-hH3#31-aP zq(0e=Ge`kU>}E=-&EX4HR{;&TCv|hem#_*|lB5Y*M5&mLN@PnB@uqdT+CaJK7XvxrCNWhEYliv91+) z^LPw|$p$tAlrx?8L9KXT;DCrt4T43XfTq0a!dSeLD+7>cp{g<+!a%^)#c-^RYoRJF z%1}xlN6Or`_coC-{GV<}B2 zJ~_wTy{y0HR{Z0}40L)9tvP#~BPC5RbsIFRIe(I77{ajEz;mX9jsurUNbRZM+Ql9F zzXv<#gSfMj`fGYi@IxAF&3%|-envSITW{(bd_>XrB>i*|!M^;PZmlm5`5gHu+w9hl zmxJGq(lZA2W+OJ!-@L*{)Ek?7IEEi#IO@zs0F(vF;}E5`HU*i}3c{yZMP?=AC(rgL zzFgo}S_{MRMxk$BA-BDmfTNSc+ZqT`TB~JTk<3yjtkU#;B5VKGO?>_v+l%Jtd60ui z>{RYY20{3b*zT+EtK&sCM@k!~80B_5T?Pwox1rp)gD>InO4Nf|-(O>{5l$7?lx*c+ z+oc5&iQWhVd3Y2w(NsnRcshgwIi=WvMw)E3B)6;gAtbUGs~U?{Q3Bwb3S3DEA9LXr zK!yN#Xf=CF2wI&rv|JD%y$ZE%2}c6`d=KO#v#*<<%?X7GkWvJaf&T`3Z1F2#x6iYq zGWkqiA0|1mjB!*$BCr1vadp)KaZR3qK&^}Kf{8WY5z}^=;|Y%KNp2cVb9?hsn4@l= zTV72yo3Wr?V{!^!Os_e|CHDu#mdV-&WfMK)n_mKKP+^SMG^|0*M4J}dX8hef)+X%S z+w&;f;;WOGhimRQUiGsMaSC*u1N*gbUEwuyZ)tn+UYNO6WQm~*xxK}f21#fTg*mtl zrtT-AU(jU;jAL{w{SUp%5s9DV7*VuVD1cca@fDO_;(`f_j8EJLQiDGa)O<}kMPY|k z<)nxL>^KEcuzmGOIMaE4z4Xk(N2(M1stQ=8+mFxE?=eaL!JN4MT&TC_T)Y5_# zC`hX0$d-G2Brzc~gO{eNP(1S-oEBNrX`^)af98n`cezVV3q#T*S%1kN6lLWUfyi*a z5e=vo0CHlA$p5^rLf(4aBG@%|1CT&>=QL&d%bt5kL^4fp&$HNPs0- zQb19O9FA+Sdj%M5tl>TShUmixXk3fr@5RgU?CbTI#MN&&sEx$9O5#pOkfRXuW|wp( zv)!RjgO`QoYxG)f4g^ulActPv7apZH;{GNTiT{1c*&O&y=E z{g?H{bVcClVB$SgWwQ=<53D@=I{hGG^&n=o6JDduftQyEiQtvmmO}#^3mH9)1=HTe z;VK9HcB3EBTB&XU>W_78S3UPa#_*~`qHb;QbvJ`Kn|-$xf31{LtRr=_;S`2Hfx^S1 z8iy_Cv9b~be@p`ZN%HV>aW~>_ZUU_~k>yONPh+v`51Y9(y-G zX$NlPEzvonKh*Ari+#)u=m=IN=3Z`d&OWp;6X0$*vP|g-71CAgoy`7BprrPuT7Uh> zI6|Cr-R`C8ZmXv*li6>w!zz{|PAJ}mCy`W^)YJ0@`7=hkY|Ozyk5H#=sNy zX&M;$R`iG`+1H!rpF?)P3iP6-$FNsKW-YtE&`gFCHTz^(-cZ$#3d?=ItX_@}6R%Yw z)~uYvsn)CP%CsQ0*;7GeN;!ql6ezr)*V;HpzMG!jS^DX9T@Nh$(>1l(Kh&YNj*Gsf zkxT~Zr9I`$Z-L`5rM7iaE}^TR_s()mfq$j#fAkAVIkvo^j1NG~UiSBupp+=@b^Vo) z(HD#`K;`s~-$MAFVOMBm1Of%F#=RjjfgFZ>Kyn<0Z;X4m_N!^^Atn%`vA6oq1O%+) zI+S_6jACP$sz_xEO>-5KYVkh;r-oH(iBThod;Oo&daF0rb-tsFdRH60QURFMua6}p zkOZGYkV=;vP$(Xf71#C}q52MTd$ozsut>rJAJbxZ9R#`-8i*q-+WjH3rgUvmKTXz< zJTp@!K)Fc;1_bvdQO>>wpsD_N$hIRT9BylKsgDFs&&9TgsJ;6cLSW$V@H551QqSv+ ziHYNL2sgLYDiEHM^Eihrz~_$*ZF~x_&L8W37T2aAXNT>InJi2*#0?>2RrwZDr<)Z+ zHjNG>`NHMC7=m7>r3E=y-YkMxX*MM=Ux6ecw+>_b{lz!$6pKQM$Lrq+&^`!)PHr0r zb(o-8J&7LQZsbb*smWaOXE;X%W(VrP_Ot06&*q4KLI3@0B`-eAs~Tu!E=KgY;WAaG zk0!)|T2Iotig4`y6Q#=GeS>KD`o_=G@u(q+Z{t)_14qYfG zWX^Tz3VBT-q>-|vcOoc%=hyPI%*Ojgt=${!tB3SAj*o~eWG%a=CM`CG<%T5CL}z^~ zx90BeaT>Q)O+yaiD7wFVa|cFR=7v1e-73}^ddKTtl-ofy_SPNmw)T`;!}Ti)sFS}- zpL8`+$UX1y;m%v+9=$czcS7EA?eVJ@a+WHmR<2%9>>Is??oFBF&snosoGTd{;&1-h zQl~B=&{O|!t?cKb`xqhg2VW|BOLl5=xdA<7$P8@_(VcCN?;(&PYT(&o#Olm;BvrqG+}&f*fk_>UX9xFjP9| zn$1BzPYKX(#eKmP2TWJbx#c#B?7opJLqfyXj^Fe+H@UffKekvaQ%%316l2l$8%*G9 zI)KR*K`(Dat}aG$p8VRf=HV_9a{b*52x0CN)mvXmPTLjv%jwqS61;OaUVKPdC}_}k ze!^uJ=aRc)AbM~4XX_}>4$f`q-+^i!KtN2Pmt#;;6x}EL9_xZMLH#eW-zY6927lL4 z7Rk$PHmU&%{4$&rn+3vwN@V=jIe8V~!S+kBgR6SUD$oKA3M}VBBL4Mjl#R^^2KZY)gndUCSZuuC?V+X1=h z;a%F=TL{4A{xEmT-Q1!u4+4PKtHG7|vG96H?q+;G6LLf- z#*eEc%1DJ4uCb3ed~CtZKTm5$Z}@6Vt88e7hatRjF$?UW77#mI1j3p*-;gH?Y&cA4 zF^zSAQRRxJPTBj10L1=n6fW>DvC;F{VAN)7dgHNs&u&IMpHRD^Rl8Ol7>|Y^q&Z zF+S^;OgqGcfLi1I06X6^%6FjMN2KST7uu_VRxR;~I1!pKO<@4iw$gAIj__&xHZ_s& zFU$3+DxAy2AI~Ub7nx*p2v9x(VHi zI5*mEWifX;Y(v|}yY@)?#i|sc@U;f%&q7TjF)`#sl>Nqsgc4moOGEd_yInQv9jQ^s z`b6&0YmE6hGz0DXJWMR4@iz;YDS^E=#@tbRc@#A;xg+(Ep$&Rmm7z9fMi2MNh}0A! zUDUa4Z`9H)W9PJQ*8kSc%z?h#6If02Hf_u!XpGbfu0dMQE#qIOT3U-E3bPyOgqQ&c-?4w~% zDVSSquR|3TUPoEBf5VE4JyBJVL7#NR;KQsjq04rmT*~4uZa&*tc7;kbtQZf^uA*k! z^4Toj)}NRDUA`Pai!+uKg^CG|T*V+^dtu|;fArvcUKM^FdBo(#L0L@8;vsxX`#^c! z30U)BZqlr5@Fi+0s`q8TQs4-MH#N?(#V#u;;Em6Ba;I%H;gcINwO*gf{=HNqP0<>> zxV+7KSL8x@x7IF&8wc{iSbOAC&rzp~1wFe5r+nrNWdkU)##w>73G^9so9@XTtDSYJ zwxZBL*;fDV(x%McTI7kIH>u~&&nCJZ3f+0pAQd=$!Eipf#o^Q%#-cIday&7_&;}kQ z{ytU^#H!NAwqaGCZL)IX84w9og@s5KLWU7!zp7p$u~xETCS(=G0|$t(&HQc4T6nX0 zAfG47ZxKc)y;sAt`(I=HB;>G@VUuEfp4?Cvur_)KpEOFm3OhR5(%%@qzZjw;n47fK zgmT!iS=su)?p3F12U>Jchk`cP$?*0}H^$ZBoW;kvTiR_cg20S=c+a^Ujt9sYKWSKY zmo-`w0$tqx!^2ZKh6 zHtvoWK_HTjd)E}otw`Xd;7FCxR3Ps-vrJP0!hD5katA4eIxRNkhcQOOmbh=+MED(X zhQD;^zSV=v;TyW{LedWO%-{b+KM;m8OA`n6d&7tk6(Ysvj*;b`%EXGR3PhOfY5vtV zXPhGozk@92O}wf|uNmX;&_edC0*u~F@k~lcWdxR8JKFtewq#8??JR_Q z*U4EYcLcf|W}0=-Z!L!jWw|A!yN&fNW1H>KU5)%X(mkfPtq?pDX+#f0Y@uHiywRrY zW-M|f=>XVez(8uO*Fng?NF%Q&q0~8trRhNDpMnZ+S>Lrf5_DpXJY17>qUUCIDNyrZTr6bJ6G_$ z{)eKB%X-Ao&41AJCM~LO7X;vsCGp3}DexI%&vJ8r1tR>%W3jk&K-a1XVTb}^2}INh zTUZF#gG)_y6cw@N*i}GWyLi?QxHexD%_Aj`90ea@AmVj~Okt2@B7bAar@pv2A}C?; zsu+06HtQ~e+s1%>UqxgsVLslkDY0!T3<<>0;=4w_J)RZcf1jC`f5Q@<#0wM6Fu2hr z@rgo-5ppTmtTUMTx)>^B8#!@E%eVaV1QRoHJRE<)H8~1Z@&mQhN)H{@zOZDQQ^9`I zS;}^uW?Y`e#E2c0I$6JIqUd(AXDA^uL!)l0u(cN)dRv~cPDP4Z8U6s%E4V@MYO&EkWJvbb>JwLzWv z#{i+h>J&aE4s@n_$}4PaDgb@2h)koIs!x{L4&R$wVrZl+suXq)dZtVd3)iQ{Z%eH+ z*>Y;kJ=t4SaVS#m{Ms#yW%6_4VS|&+MWVnJw5XiQ0am|2YPcm1MB?YBocrYGhed1N z0@5TClr!8gD6o#0*AhrL9NXSOnjBZMdu3TiibE&>UG0GLTuzE{7pq`s0b1?F#{9Q% z$xss_#!`*VusOCAueO@!kG?QbbX3KRwn_6GOYfntjPn@umnnNeg z=(DZ7nCO3Ka(T&wClC~2d^|5nXAxE-x}^7^lr5iy%i$WK@YFTY3+1#VbDDE_w)p_; zS$5=+omiifJ0{8AR4KUx_CT6Yw__~k=FOXNRogZZjQSF5{QzZ6VW0&$gFX}S+?E!1 z-{1^7=#J3ueffl2J7*jMe|6FO1Z4tk5o5e&RM@sp2rhkj1o6)DSxmV^j>o+d`9cC{ z$3=65kiRRB8#w8@WhKuE#yka6pAY+E-xZ1Z6c@v;%}m>Kz3i!Sm>4>|&Nu8E)N{^Z zF5oQR1B3rfFh1@>&Lp{srbbrIt3nS#Bs@+|d77}b)yO>hsscFnIo z&B-lnS}bv}pl_&I5~!K-y4r4ycMrc4`P#E~}vI^iC zBn5Q=1|cfE4-0J4=I_V;+`U$5W2@k3iG?;}5r`Pq6N*@!!|7aB2p}p6T)^l>#9^MI zxf8Dq=Q(#v%Opsz-V-hRdM%l|Mus}b|BY%ML<(xg8l2)(aje-;9E(%qVoip5poY9P zGzYs2)5^9pTM1{?Vf5qQYWP%oKV^QDdW;NT3oG6_SE{~yj;H8mWdx+(>CTRe7wU6-mTx&yAj-G!eSKyR9c0q| zo#0h4bWq}5%zDBJ)lUn2|6___yJ+^j6;P$Oz5D6na9^GM)88}0`TyH8q{3FJ$dR~d zc1@gkSP4xzcCV*`){o~Y0|JnE8>Wr;H6#yV``3#WrqE{pecXc0uOv&u=pI@)NEfL? zUa*-C#*xLmM_phKR@2=6`o`qF^$vT(!-N8<7skH+*AZT zY@jp`#xVNPjoore>zm4aug1R8D4kr+dNA);sYQy@)|-@Kat5#QMxd8wEXZp)DNP9! z>&lT+*bBUiNcZ*pTN!ae;ig5Un|`S|I0N{hNu+5EuwI9Z#HVfFhKV|%)AW+~SXN%5 z5Yi#)s6tuqd=V5QDk4{E@xalX3rutk`*#z-(|}!yjzAzoB1oRbtWwkD-*NG*k-NhN z?c%yeP7T{esH+c_s?ii7C#?`J!pW&7XBKp{1;_L%w-*C{`5~Nko{y)7E|ku8GO~RN zuC1!s>}a{GWj?T&$>5m$3(QZgw{8?9)xFn$>l_??%gK>Ep0Pg?P}$TK8hV%>IC^dx z1^%T;ts)4 zsdLM}1hLgl7SVW!6e1S-14AW?9A@H5S2 zx;vyHl4Jr4Q@td;r{aO&aA#na`z5EWRjTu$GzVs3K74Vj=W5M!U+#TdDKh!~T!z6~MdaO`-VtuHx?N2k zjrR+%Q=_b0&I)u1q^|iJEQ`(ENtuqyrn?1NH2rJdFT>f(ehhuqT7G!adMSOCXU(Q& z$}XGZg)>=wQ`jrBM9D8`i9O`e0>DPoGMPpeU?mra2^DWivFjchCZHVz@@{l5_A$LU zH#TN$=okCVti#SBI2A3rcgk#*>#NAHdv2v5=1bEIN^YiEz(V0%AmWDc+9+`2m z!{6EfnvJp#`E(zRoBazev@bvZIl4EIuIwC*U)R)@I+N(C^2=CNVo-0ufl(kg22+c9 z@@i3{12q|86X;(Qk$joWZ@{);Wcv$C8-RBv3-$#&nG&KwF~g}d_5J}*2&^nUdS*m` z1|D(sWaQF7jN6A=uv3^T29fChpN+}sIfNOojkT3KnK}_sB_dV`B#Um-ksaMBiy7wMtaQ1rcAClvDEo>`N68g_Utb<4!!os&=%L1AR$vmK za^^#Xk)kVk=XMp3#s8q3CAsuAvfr;Hq;c(bwZ)eK`7-Y&UELtc^mFj`=azM)gha-- zfiEKQ5;YA{{CYmT4?FyEJ-#T$%9hm1;)Ybu1n@mJM@M0pC#S1(jq0~Lm-Jr)z42F> zGcxS~Q(DH^?N8Gfjh4d~dyJCBJf2^;`o(NQOlQ}QWS0ci9~6=1EI5=a>)86K!wNFp zh1AnfjccwErhB@4V~OZs#ko8Y_AyPk*V0_I9Mi}-<<4gr+3yQ83s0!hz|$2~oe<%^ z(h$A4vHV;-fVTm>I@uepB;K%?AJcZomG&pbW}6R+sKmVA%F-hx@YyI=jwK$Yx!J$- zjMm_#l6b&J)>{>G432?%k1VC2e62QCoL~9^u%= zLn9|mfYYDE>yx=K{WA>S-NC;o%@nAlsBZgs^Hhzqqaa9Qt z3kgGOV-L+8&KJS(1f2jFd76l~MUZ{xEeXIkJBgz#sX+hJx{0lv@&J=ktJ6F}R3;~? za9)dU%195B$r452FU*U8dl!gRgOe%+QA#$7qbJCmM;Twt)66Z?p}VbGj#7pI0p6&b zM@$5AYScDYh&XEt?Th6~B2JunfdmqXE_g&D;Pj92^FzG#hY24MlbScyF*L_QdudTO z+ONA(CFms=y^LkXB@6uPpho`5>HC?U;#rqn`{)woF(s2Wz12_mbg%B;*WaYndnL$> z2}|i`QQ2udL9aD>Xf+bn$#ZQoD}a1mvh%85gPiK-;A%1nWaCir8B^p`jy58<*#ES< z0h_!h0pye7P6Vi|Mum`#)Q67dB%ea&gJJAp>hbr?m8dVVL_=y@I}YGR)d+R zIJf#MzBRsqOjc1fS(=%m?>RW;Rz?WZrQ^|~`ev*Xh-k6#`HILCc{1PyR0(4y5q0#Njd^wu1j1XeO4q72&62!by1qF#uPResKi)dz=iJ>>-k?KIX$kCN zyQ36ST?3q1PObeY5<~XJmv93acB9>@Wcc-ZU8N=EYNcpDAao%o6RVCK)&kyo4Bgr= z?_s{3VJ;_LVy2|fcX8hA0KyA2w2#C5<@En$iC~bdBhx=K^L(-W{8_HmdMpBK`OB(*}N-S1UT_lz4AF6rNe`^C;|S& zTlGI$39K=&blt6C9%YZ;EEN7)s6${MVLPH6zS z5Xyi)eRp`Ylo4)<%vD;vU2~io|5sr|1JVG$w&MAv^UcI$U=d?F-yjtlV5RQj#ad3M zFZ_t!z8|(=mV`O(HPiZ~iGk)@Eh#_Rl}>kOwckD%fu#2J4d~E><;URR2`<{Z!9ry5 z`>~QfF?37fboNSetQ_wG?1qR8UFEQ4?7o;z<*k`Y9T?4$;zV zFDBY*(8imR>)C{Q6nmla+wqhG72+6W-XM1R>Q2(C{+3Ilsdc6u*V<5D_iZR*!{K$= zv5CSckK9)!rpZ9mRS*m&Pn{8UJBJh^-9LxilqEqP&dKv`~7+VAZeN8n=5fs83;|38lb$-4gLA+hCT{`|d z;hVb&2QW;fV&Jq!rnrNvicmZ&%;=(SNv>O~eoI87MB~+!RH->n)xqP(#RAha2wl!H za?3+|5<69!TW>>tbSbMdzcX*Z`ftsh-=e1Iz;*c)8Wmu{lnRoAb|#oPPUy_txSA;Q;J(PNt#k=--@i_I36 z?u@`WvrFze0OUQFV10F_G+-@aZdo?MI&M|x!e1H8Z~1!?=6myCvbpA$!YTbel0HhaPdSKg|@(SaAJ zw_L@Vu(wSi(J7gd`1RraToFmEMAFlt&L=BRw_kJyEz<<$01J@{zaW2AmPT;PeT z>~b)5=!%r)VuQY5Y_suNMZ-u=vxd&wRGeQeDGf}Adm*RK`gz$l7OVsdkCg*Xsy3~D zna=cq^Fyn(KfYi=KXX(4tfB!4$3{U;_WWW00yWaoJL%fuIz05Q z2wI6m*(f?%nyVm@V1D^s<+qkrNeRhdesVz>U@}yfdzuE+OPRFUJ)Fn4{J|T=K0ef( zM@Th;HV27`C@8&SBxD+{Qu9TH%X2?*l!ZYWqD3;%Q+F$J*N;6j*z)BQbQLc%P5-F- zj{(Kq^_B5Wr6duI49++wF_%;V<0c=v%CMC`%P@T;6<;v7E_)?<3J-L&_0X{7H`YYC7VdWHvG5L{`Figh*TA3l1N) z&$-C3p3Lc<)@UzxdeZFKy?;L}Z>^Pn6E!NC3bcNqasmS)r7zs=>!D|}gvQkO8vv+f z^s>uG30U)oMoBnC5PxV}`CZwwnCpUlqN1WDy>|lAi!1Z*faCjKw$vnnjS^Rd+l-8N zou`B0eH=9nK_1uP?q_aVjmO;Bc`9O!2LHv3zI6QKHa1hW?J3NI!Qs}dLyCLSqn7WZ zqWeu+1i}1bBHCi2932aQBKd9ExcM);((#I2*+c1nXM_K$s2>IvRiSTGk=csKcTOY{ zkgN#z;p~7Bz`;^v-w~ibz#x|{bnhGm{KRm1C`wA?RvkcjyAo=GEV*Q;LnH#edmH3% z`=Ng0v$vI-%lKn4OUCG4?<+{zU+!dZ!aeI2T5FR};I|?uaOUCvt#R%YQcgxf{D-ZO zz()CbRBY3^yeL?8X;7kjK9@%v!ppagiln8N>aUqK`zL>P`NB}nw^DGERZj_AI>uZs zL20?`m3n7*ZOvsbxap*L`#W-kx9X_gIRD)8eKdYlA4oK0b1f@OMCk;4d4C>d@bi~m zY}?ksH@IbP<=VAG&r@G_6mqZaJD`Db)W3nHu~=T%%Od2@0K9$&bH+}__co%r+;hAp zaKdTux$gs1QFT|zD&hU)%BY^ z=E6NRANd#EHR47P{e`G06U-q>u;hsvl3ktCO z>-9cQCLaMhvyrY~UI?qCY5~4#vmk%XyPdPRc};HAD>U*$h@nd!tX;CYU0{k#>K_GdK0X!%`4*#J;n~`1m_?)~{Y7YQS0LPnPX3Hs0n9pic z1w&431E@M6E?3v%cVOCgZ}t3LujH|#b=LKV)Sh+bOfJ?ot#|RB+tKS;*i`1}^$zpN z5ewWzZ#`#9DjD4PLG#~aM`Y@?wJS%`?!&ofrxtk;}Ca?i@}5^nGGSmaJp#FL@5YqQ_i@dtKFk!GaT`^%@_>J$ZO|hjZ%0yb-1T^a>X6x_w14qQ6yrug#091`Q_YGt%}#V z-YK>~?&Yp;il9uZP7WP)B>q5ZF)Vf&9!afFUB0XI>+9l1i-P!LA?QS$yWK073s7vU zY>7)sCFWM5$8yn+xC^^iVO;+OGeOZLo{cB=Xic}|o>HbCocyO`A*o%ctaQlM!5QW( z?e&+kg|yr`ww4puSUu<^!*d&U+U z{3QhI7GA7rET|12LAg?NUZoXQ+grxwMoDzVXU^w01NOuCi+~Pccp0EUAOLg$FO0tk zsA`my0w?roPe6Pw2k`dc1A*9~uEGQ?d`s6`U3n zuWneTeR&!XGMb|?pQ&rpH}_%3tZOzaJgJ86=o4r$)ls2CcL|0+DV;p}=7xP$Ih?Ga zM|W6~Uq11>b4Br{ib(ZL!4?Pf0~2#_5&ERwTDT45BR?4#2H^9|ZyxN=MQ&58?;PCL zhYCKoON%_+Lyu$xzhsu|tzBbrE=2wp`I~m=KrFYdnoIwiv%mVd-nhOOq9=WQu!p5A zvieQ(cG&ZfLT4d-Hh&n+MtF7xH+fzV{(u)LYym61Y>Rvy_eA>-}kM2UQi3IJ-0tS_%W6iE+2R}NQ=Pe{9 z;-aGbIyk`63nIEYhkFb(ns6YZK@MVVp#6C4{_hVf!3vUqbOP8VHp1Ipq}h?cu3*w# zWAn5^O>X}ufML-Eiil~3L_+@O<&S&JHPNIGl~Pb>%fVue+jwl00Hc5+ceGZF1h`7N z2zU4N>tV^^>5sBqOjhUl4Hl;1LE_>yz1F!sH|VD2*>m_7 zR%f@%g$~yX(;Zs25kq6yV(aZPI}OTotE+J-p1KXo?5~Lq!h4qy<@$X>N{>=Qc{`%#ad1 zsCVjYmU*t@f>^!0|8Hz~E+g`^aH!+$R(b@vXi|FLIvJM{RbSumTx1_DV&@I>%bx2c z1VyFWWUssO{Rr0hh^d~NwPc##@Z=S6_GErtC zDYEu5GYn2s`zbgxY{q>Y)ME8cYMD3kgg9Ah>cMYJT(k1WK3<-;5eeSCEGwgkzd*|% zCNICiK#&>R7`c|?X=Jy}S+~S3n^{QZy@|H8+u6{`b2ClN`sF@thXq!vVe^|N%pJC? zKU;PtL@@$B75pIgk;N$A?3X>B((~BJ@E^uH|9c(~`I3lA3id^l+(=|8P!`zckaZsl zeH91NQ!&EecWH{twtz^*3xgPA4|BU_Hk?v;FoW32xYlO;|9%3cHjxytz`C9>o@eqc zbNNAiE-#3PZ0UW@4?7Yn!IO_n6li>MN|03GLd#1;DM0|=$I>-jqq7@QJ4>SC-|za) zSdIx0G=c{Cvk0MIq@;sVq*=9ebmQ1i>6&N%Iz1CuhD1IY!s9x-+p;&mnJ&3+>(%*~ zV6MGbzZjSr{`D>bVN$VOUHuXxV-m7?Z4#-TmKu2)Al6Uo-xAMZybxcjwoWujoX+cg zi9WS9Bl)3TZzn-_E$BVuh0VTEwhR0B-nE9Q8xwjHj!h=|Oqqn-TRX2x$_Im=m6T5f zewwN^Xy^%DwX5ap;=Vvny?%UZ+*}wY^|xSOv81=K!{j1hA5zV?wAhHbZhy*D?0U!7 zALbM2&5;3Gv+(u2sUW1ug7eBp0N;3yc>o?EzS4`u9y_^y* zj9(f6LSuVV@7Y#$AK@1a`qm<%;%NAXqmoBjwf9tyJ<1JNX)o_&J)B-{m;AjYs2{#u zCKw?ueW872*ky+Q_di#hd$}NDob>?+|6+NCNcPz6Gop)9Qw~{n<_~Tfj!T{t6}@)? zZ)>iz`tr58xzdslro|Rfo4K-ou1NHjW1+|Yme}TLO;MJHRJNlfF{HQO1js)bii&br z9~8yof%|)0g2-@(a;HNG&{O?`rf`;^ctk~HWkZWPJ8qCIHn1bF} zrA*nM)$G3Ih-j9p$U?A05tyBpPC$k@^0t3!VDM+XY-??ATnm?|#reF%;FsHK_^*CD zO#cEEove^ZKrhc5gF3Q%BB!%3MsT_vcW04+SzOz}3j2V5TAk=5AaLtmT4YE1VuvI3 z&%s_@a2!^>rF?nsJOh{RmMIqK=O`4M=#Go$gbqX3SQKKY+t`_o5#zOx+*B9(m*ast zFZ|KIn`f?D-qc_J*z)+EiK&T_c>p&t0>C1WFV_>DxDaXHOYXJA-u&aV$O@9|fPO5- zL}p;M#+?c~V0@Sz)PE?=zPLg7s81h^e3Hh61jWDE9qG{pNH8I3qYDUGn`amvdT)%s zm#_op*wnWE4%<&`MX#hVU}dDV{i}$Zc4ukaZnT_2ej%{;S5**%S_uF;u&Tme1M`!U z%|4!jz?L(u%;1tXh&L8{LaFRn`9seP09tPQ5HOInU_nBp;W2lhSWo=4lTOoYBLEM9 zdlO6}8Knl&}4MBYkQULJykP`xOsfTqvnw`{iD;ne`w^|0S8Wsr$u zvG*^eNYn>L7FFwA_YyjPtuAOfJf|)Z&dp}9Z`;N?j+9CrS~-3qwJ-F+{&p=xR{#4a z@^^hQ?)n>5`oUjpj^mG?D~t)Taz!})vR^bo?HZKM3NIDQXaQ;lAi3y#T#3b!YkP`yd!_uh{? za#=z4-O14YNAtlD+#kdAi!ricF1CXiY5&l?gbHUSPCV9~f?sb6}?3#!ATVcS? zR+oGix44|%-nW(A`7&**o|OUAoXvIUZ!V)RG#jEb(}`eb z3$AdA8Q(~O$ucb8x9l9}LsWH_WqwN2=t-yac_hXr)xz8mtGSs70+xv}1J=~xch!Y{ zK(khP1hDFiWxS6v*T40o*Wt};O_x;wtJ0`0%WzJ&J&|m0-jNtrauv<~axE)Fj@vaK zkA`z2xGxyU1MMt80u|r4a$AhAzyO$~K$%z?_r}XtAdUU!!`E(Ncp}8(M$GaN(~q3R z#Zg-A@;^L(5t5M#5xR&e+R( zy$EWt!J6)esk4%F{Fm$IH|GUxnA0llt+__wClsp7VAa*_)aPjs>hyP=SH`nXBekKT z|Mg&EwoLZ6t4?+y;!d@97$i?U=i3u|>xVV(h%isWIC-($fmOhT$(P<`I#Idw>4*>C zfS0osK7S@Vw?^yW7%Sx-c-ag7UKuT=)&YWvHZ1$$gv3s53w}+TCyT!kx(TVo+jwsX zIUDD@&J5sdB_@Wofw+1&OtdUCdD|LNMuae4F7h@Wc|}R$Uk<)qm&hd6aXjEtA^Vri z?UE;@8Eh@D(6QgFo~T8MTS{ORY99TGL0%6YDU^80WuY(i4q0rcu4yb)Z=0QYR98Ng zes?Wcmrf~kHv345UvNXAKp-qgPaZH+eMKmc0nP&y>ih(#Td`V|qv%>wbZXKVPES_m z6o7u6|3STAfJ2stdl7XLooAist}r}i!i&PT2}fl8Jcr={h$(=AtpIKqOAJ`QRi0A4 zci2l(`0vNYG}@uv1v7t-!&I7T4qNP)F*Q?rORUCkiAJW#e4pmY6dLtxCWmDG)?d*I z>AKH6CguV6bu)1No-N}Z+5NkJ>rg~{yA_pz+iq*zwawbSsP*PqjR?>KhlSZl+59hLWF*+dt11Yz5laY;_*CL` z+a7T@m;xgfxHa*Cq*z5-l-i;&gg>(&DXKqS#;eYdm0=aRrn{>@A7)hYGf-+;1Hv6e z&R`44i3i}Ms6)4b56M-o{9kOVj!$4Dd|!WMOa2C7d2Q=yAV8n#{;q57b)-Sq_i}9r z5rZr?O)CU^JGpQH0aL7rq$n3AfBW%+L)5BH6QCp67_F%c^ivUuO=D?=*jTxqi%R?9 zZE|0(D*+zm-Hs|dwPUB1<)V@j4kroRK`2}@>H{5OZYH)#q7rzql47QkfBnDAL+R%-!MJT;~$!wK1Ai~|m zirW67_Nz!&*)F7bZJk`?SXsouq5%mBO`gjRRo!*aU#ftYTX&xum!e9ZQr;Nwbh%M( zC5cq}_U;F-{l6{zRY3!_{d#W`^DSKnR3rp(O90Fr!&ST|C)s{e>7=E3fuDOFZ2oPv z?@o%uK157a`SkS1&<~A3>3YPN*`k}tq~OBCZ|vx;HW2s1Dco48_lDk!twt1WIG04x z+HwCFv7M|g^AwKKyZdfr=Yp6+hkqhDhAPxwO4VjH6hv%!i_uG`vMDn~lRVT90B?^bxNDV*o6 z5I^|>gwJOy8zDtr#d+UHzRgeKXN*$Z6}HKWh7@g5nqLf&E1|6|Pg3NS6=O~cWJ3El zdd&Cox7$#wxndvdA^AC+wsX=*r#6iGdSI_%S-<-as;5fE(>C;NslEoIj^GF?Zel&W z8qK=K8PW(Ku(Rt-qzbflPhH#lm5P$~C2zW3QxVlEw~667*^@5z3Gc8o;KG|XSZ`ov z#QiGizvoZ%z0~t)jUV#5rx!KRTgoC4DYoniZQG?Y9i;)v26OT+2vKxvwo|nK7W$U2 zkgkJ1E6{O21>4QU6Bd4qy*g1+7NuqqzxgQ&v&wCs4wc0}Z!Cx-!os6%z!-Bwbd;s$ zC4Yeqciwxd_**)eV{SkCF*O3I$Ey8&Uw(D*j+cRL$(`h#EkDyF+UaVGX8a6ZO_iy1##&57TNc+%nz>_$d> zCS8)`6kLkZq#i(lx{WpvsP#uImT>u}n3Gf&#^_$$p7IN!NI4|_ghD^%TxaI9A|99N zlJ*jUX-YxfBFFJptw@}j;GpAtfYpU?W{r#pd)zy2S|n@(Men!EtLYrz+#6$zt*8BT zTYb3P%)BejY2=6-XD{Y30h9X4Ux%-z4Qq$VQnUw9OA*5AqJ2HQ=jQIbvwIH62&*U< zdxH7e!SJf-?8s1$SD=g=O25^u&mAZ0Ky$U7-dk`F5bh{Px3kJ~#8#@&{5QPaObB~D z{`X3GX}nwCB?LZ59CI>!P+TU|f}iUDV5#~c;vm=S)TQ^9Gk6IO4-u^9Ghxi#5GAzY zJnacxCXf+a&wgJ5Y$K0w6p8Q-<9|V8u%4RcL{LYm|L>msD0bKb#6Vfk4}*`Rl%8L^ zdq>UWg#GHo*mKW`!vYQgj%R1-k$KNx6e>2h3Ro`#jNkwO z-$Pm*->ej!D1xSH$tl-n`pqVkNGl_y#6-iB#FB_|3XX;Vdr?9}T@K);S38|bBq=F? z$fX66N4{S9Ta;=~2VtGlrI5e^rOx5G9HLM2tqY)%)9f9SBOIS(nmi^6EX{?eE*(j{ zR?ho6%tXIAE?`T7(|{ZZ=%8c(b`q=lgc5(Chz^CSh&kuiO=7`C0x zMkd-tOAH*2=Ft*iWJpEBW(LP0l$|PkM={jTQb|%TQ0N&+%Y2|#8Z-h7M?zD~@ z`!Z)qdP<^ADV2VE4BAqvH6!+MlTHfw7wOZB^H(rS)DthUc6=L}MyIGa9TK!4io_?m ztACiPHe#&@ofe(bU6*2cH`j!EowFU4%?RWjr8ks^hR;l8R%V`=+w^{vJN3JM#oEsq zh}krus-CwpR`nX;15brS?t%q0nhLjxEiHXKerRd#2}?n6v`}|{0Q56iyjbXw(Pc7{ z_Eoa$W@hVLp@zgt^^rn){dR&~Cdl~W3CZ}LS)=T7^g^mD2dHC-IMWhF^P7La!MBXqvErZoDTTe)z_q7W5izm;!l+v^%q`zw_U_uhKh;rO#^#xs z5J0p%Q=VpMuz$FiBp@b?RL;*U#9|*hWN z7t}Dz76~MM0d&Kp@l9-bS?zn$QHpj+ZfcW;&ZkTlIVE%SgF1m2Cj^2B{E?-r>rE9X zA16|`TEDe5wE@K?pi{dZzw==+quRNtMhg)7TA;tZM0>%?CYfCV z&RI_pA9&&JM;)Az>YnqiE!|4E#$HNzGiL*zHD@=6qQ=%cU;!RpDW81hzpMx1$R-@m z`5yD)YuQuNox15IcC>8YxDlnjfbgWOUNFgnVLpl!JCT!L+d z!XGcI&OLw48Em`_3LsN|yz`+gZ_G)u4nSzz1?Q~ACvmac> z!A~xJ!6~m*5uqyN@E`J(Y2Ig80|K40fgOI8*&e>Im2Cmv;vFkVCu1(A|bI zvGo;}<2=p#cVtGG(II(7-NV{TJ@gYx*Ch6Ic5nUORM*2S&4iGDHuyA;Ek6mpj{%hD zfyYL3S*~YA6HF3~jJJ5|F*B^P7<;?U?chQ8TU~A^KS)xYEn1p#k}^M-EO9qjzG(EJ zk2U!0g`^JGZ0VWI>b}#7UB6z*8-DMq4qM8j3tg!#aq(C8PpE!r01qO|CQ-v> z#e=qX|1YdREE+&?9G;b~A>agg-TrbVCWLBY)!5T*<)4MjQUQ0)oJP2?OErQI(#qF5 zMZ37ohiQ*fJGjwW!d22$-155)vuvGz_~W;mn}xi$M3Y7;Bd)vkH~O>Uni6{dK0xi8 zlsp{q#B8`pV!A?_cIPuQB{0f6Z!rf$lV}#Lf9qAjRHBc_r z?Iqte_h|O<79(glA@{SoG~cb6h(0FuFcHWoFwHEh)!r{N3(pqhgNVR*DVH@6z%lCy z$n!(I0ODGgkNN&7($A6CodCHDRdIeWpUigCROc{QexQ?Z6~gtY53*aA3#lV|aJYOx zAx$+Do>FHgbDjaz?m_3a=r|DJB6kUFi)VGHe-1!F$*z$SdZ8z6{+I_irOcptJA|Lv zb}Q9wI*3-K&*mpBNV{D~zDbRa`0SB97pg*iL{Jx9%gt$Me(Bc~+S?--*}p8-?T3}7 z20gFU`tigeO^RziL~ruO?>s-QWf#eeAm!b;Q)df9*WQ^@(f-<YhG(r8`;uLeazN67U|A2_4R%06n-Ol4T$-q>dH@y?w%74Y zKV^giM1p?cc(%FE`9>XPUw>YuuLp|?q|9D?xpCMPvfCQSwa+)CgnYFVzNdC}U>i!= z5^)nP*rbFDN>pwheJsPLu18U?V%&~d)nqpW`)t(Hv%90+lV&>Z+C6O_x9)Bpwms5d zz5t?>C94%ho6h_e{pR(hsZyMMP5<3-Jjez?K*@^B%bMYc9&BF$Y7VZVK&%8_o#qU) zA^{f9v(jIl0^08Xwm%e`W#p7#x1(JMZmi(QY5(^Nmr< z#(Y{g_-dZle#WQXJ(kvU*H=BL98hS!Fug3c?E8&3W#=+ZPWY}vsk!OP=gtTi4ySd&?i5<-4upLiBE=VN};H2GFmLmZIXi}6Ugm0feBkedij zBV7CoNl-x5K$PJ>QrlcelxsxOC<-6%OQ?{Nc$PxQGvB)tBJgj1C>R3x1#PzvU&M() z;iG9u5wn0?SVaWTJScO7^(M7V-LpCJvJEk5ww`knm#-2cMmdPmTZi2SkTqx5sGfX4lSr0yl(eH*R|K^ZZWw#0_R zdL2u9RxUVxyRLaFsPgL_8M5dF>hp2sLYL+Bs@o}UA^5!-?=OS!-u)%eGR7MG5fBwBngxd z$5|90^u0bx9wRz_3S{gMSkic|LYAS#;wu=-*x=*$*X;pSwZy_P#{4?yfCeT;WITc zG|dS2667OkpE5Mnxo!4m7;K*oRN%q4GRjN=YjnyDz?L$Bi!rqQ>s@|yUrcm(#3H)^ z4rHnVMS=>caiIP8{?O|RrhF0+KyRhwfP110S3!!wdDBrS4`D2bV^aB5)IFvG^rXWd z_LL%-z(UM|R4d=g-y_Am!%)#(-rHkCzA3sf$y6r6M_p1N^x&fl#VNla$R&Bgn9P*a zbMF+xER_VN?hS2h7xU-W?)doSPl>|A1Ps4IGMEZW3k!-)y{gAU}nQLq!~;l)X#e^;fYLG#}e zH@1q7g67^h;qAP*DwlO;)fa62CFkFbCHn21jNXMXr&#I&M@o#{Of;Eu>|W9c+IsB9 z@oJOL*vj+nCskoJi)`;}B0-&lTGa)h7OP8=m@=tzrugS^vxG#UA;L*Oty zCft}7w9h?zfsntn&TzonRdHf|y}6AKVNNU1?z6y)7~3ZLC;L?*|4|h{nMsxr+<)Dr zeVna-yejC!l7rg2Z+E-xa-T++hMhyq+SXe? z7U}V|lurBTeBxj?Np~TfyZ-g&k1s}RD-Ms^2LXUd)6|2rYhKckcbdX;rWVFp#oSeo zVg?dV5P8pHFBhwQN0y1Al#8KH+WZYwrLF89BRu0??+vy?Wck7Q1jdV;uv@GF8O3BOjw$&)m>82OVc5^BFF!#q492ATTIk?O zd-}!U`KSDEp9kC(g^>kF>@=rObi?U!-;L^tr$B5n2x?_TBwjL2D=^?VG0mhJ2ZBUTY&c!g7(3`8DZYjBT0yr6eLm`F9yno87?GfG;f3s+swA zeTBE9VEHm_ecCo&pg1i`M+YgCy3n&Vb2_raa>YnY^zNP$ZRO(h7num<^3THMis63e z7+LjVrx@7v?Iix)6o&f7#+%RFVfmFE6#bK+7K?E$y{rN_VId+X0o9JJJWefq8zpNjK>$oBv13ykoyTmhu8Inv zQtSg*db(a!bM?5PUd0cPVN1kCwTd*^Y_3>2Y{C140%GCILLo5iZcNLXP0r=j;HQuH zuT|LK*|~OCE~-@gu*V)wXQfnXxo1D@pO*Znnq}Q>n;bAo*5_EFP1im&vpGHer^zof zaSy>==;XFw?P7?0$<%ZQNCI4Y`llDHEf|^}My?_tZ6n`%UpmLkX9OPzH!EJNXi78E zT8c!}(#P9Iy!5uD8=xD5edOnlC1nznQ&|w*Bsc(+fe)cULf0k zPLPw!g~~@>)OU%M*u?2f7atXapA$0&d~pD2}@74rBL3q~8QX0KPRKr+}YswuTUYdlj(lZ7{!y zuk#ThBLBV(^A+9?I0uj)b8#RLVFD=`Lj60`ZeKadlJ>p;pp*MuLN*Nky8iqpkMKy4eu*4t)RtOYiJZ zr*EE{WHvWm9^@hjRrqc|5}(R+{yN_uwcjS3PHa15oSO}av-L|W94nhKelA@x4h~P(44OdIYlpZTb zE_qBRHm-l|ROp_`$nmO;L`C}Lm*4ejDq;$5`!d9!HXA{U&%^%hOEqdQo8jWFb2Lqk z0Rbww6RKkWDwz4~K6+L6;KK^)Q*4YDqj9WJcT{-8el6*?@ZsBLA)eo#d}aq2KCS5t zrH18x8?y@PAVynMXwQ4Rd}iMGCpxun!Ht~1d~+~A1joNgkX3KW6&d1-1;%buFoy~vDM|HqS-OR0UO^FCn*M8aQ z>|Jf}N5nt<%bd$CQ}9{oj%OpY*u5?lzAb&17SriQO+oCH zpOk>i_9TF0jzTK^&vtVKf$$ML;cRR0;ML}%3rRfO_>>o!VoeGt;DxM##OE)b;Un(r z5=rtWU*CX;aw|!X`Bow%=B0jz-b;}v~-?gqMeOAe48X$JYK?^dQ#7p8VX z@P{5I;hJZc7wr~l+(2;7fg$J>Ql`G-DM&=@sX_6~`f82DC#vaM>)b_e7a=!Q^dsvJ z(;rrTh+B77NTs<=MZTPki0W(V{Xzvekf}>Qgz777@$8~U9@PDSR4aoi{%hB-@mD5VEBNZXqs&1QaNr?;;XW9FYeqG!`>j9$9G># z{8*ouEN=le+eaT6l0m&2IW+a9%x&#RMg)e+Jj-}YSq(bux-X4q1T}A*YuaG_pt|8M zvXMYJW_CD@nJ;q)QmiMS&LW}2{QF*osLD5_dDtciim3*k7DS5kn(KsQ5ut``>a%fe zN*)h((%-nM#>hYQNk#l#B^xboZs(x=sNv1K`2HY2<*|oy2a>;v1cBJvVmu6rcHEXY zQaP&*P7m9&25$uEy-OixS3KNJ4O>cT-tynhZenh}J>C>Ona{FrjttqdRANLjDawA# z>h|`grN)Hp->lU3KBv6{|5WQ2nw>d<5_?m3)ozg)I|(mV4&#gqI){uMg8I-Y-xN|< zu0a<$1|B5Ot@_7~fe2&u(YX1W;{8f$9Xt-U-o6e&8Mnl5(^!tel4o%6(-25#MAnbx zgVC?ujb#-+Z=EQKj7g@UPrlc_enrpD#`u{{1|soxUvcI@#J!iYwqt)L6vQQRjYAAu zPeV`O2r#%A48Gq!@+l4{2ZuW=pm=YXMw#MX#YZ00gXQEOBVPKS2!@~hY2S%+H@|8| z$GTdZX~5Di^=+RAb zaRz!jQX9JATb9Ro5$FvZt7Ah7tr!4Mv+YG-48f*L_44$U(c=t0L7}{xLFg~J-+H&l z${t4Gy}X6o+=Cn!n9fhj^!=wNm*qX5==jYoDw$SAFZU1E)Muo{S6LY*BBYLcIe*Kjcz`h-Ls>+P>IveS@@kj zMpHGjS;m$RDLxiYbS^EZpje9tOy~1Lz+h#iUvB2nM7Ar~HX>;^X(b*T1L}BBWQzuj z+iV>m?~INAB7PRKh%0msR|V8RA;qJuB!aL2%v>QEcQN%v-C+dGd1E7G=Jjy5x8u5v z+bV3bs~omCzo$E^-?3WugF4b!>g;r((spDQTd1{D{+U9@R_D&Bxw2KNobb-=sxChe z68tC#jHNj{+(Y|cvb!zFj4R+(0y*eU82A=mV*Yh@`laJ*bdI^K+9s#auS@|(*tV*a zZ+Pd0-kd3rpJrbRS=T+)T4(ezej|+7C3Q}wYfY+_w`tsj{?rcruR@Rmchf1l|2eq+ z^s9#v;Y1B${iPu*-H+=ugJ z)%YUHk9I{j33^`K{Bn0r=IB9DDESrzZ;Tb+`!+xwFm4tVGcbzk@7y+;PbT(+N^vHq ziIF(TqHw$eEvl?)7&m>8RXbvmX=gAagavhE;2rjU$RkY+rbNT%fk(aHbv(bB*36o2 zf77s%66)*gYMVWt>KJ?7c9l2Nb?Pv+V_s9PpzHqAll)DcXr~h2+?`ycZ6;qE$m2>A=T|_zIVz$ z@>0U7<7I>}kDJYA7^j<^vVY7UpTz}?*>d`jT_+=K*$1OX!8MLI4SI2emS&Se^vLzK z$8al9950wi!YUvW*FiX8I8@-M3T}bZP)|2SzPymW36wCGJr8awgdkz+P&igZaNGjf zMuMm!?My3v1iVk%{PRZeTy(4XYJFNf&;d%1{!?YHJ}Gy#>c-^OM++HR;cs2$>ime; z&xeZY)x!)R4#h1Z$H^%rDa{}wUoqv7Xw}3U6_|C^%|cI2Pjtk@VQGax5ap74^}Ffc zX>z(T-|;|Ojrkb*6{2xbxyhUh7n%&ok5%J9CJ|}+dOstY!$Mqv7hDSl6a~mRbfkGb zBm2fxz5Rb_LgiG4pGzUCwt>xW%B7n8R{5dUIRn!@5x=yNpnRL@wqaqMw(jO9}kB!#|G=@4wpah z?ACUXiQS*=8yvSaM+gM1jfz{bGLw1dO=@(@b<0ztRy@}BDyn%nknc>aN5nPcQ)vfV zem!saXO@6_c=o>E@ia;rPu~=R3B*zjXVm3$u*9g4Ir8D}SqLPER~>*y$+A^wLIK!&f0f6YLgJKjF`2})~9HFxyDo25H6QE*ZbCdzcT0j zZ{6KBCyDU+R9AFUXKCItE|;8}KN4~$Up)OxV3Bd3cvi;kf}1KSZl=E1m?1;G#vX1b zFym{_U)O65fL!GU983aaCOLOCznsEo2CjLP_8Jc5$WR{^h1?aY#W|G-{|cK0{bIgv zIDK!7(bRVzNV^HipGOA|;+WTRh)`MacV{TD@-J&uu*$SFh9wNH^Hc#a?T0J1BIm9n zTr2<+vZ>y6b_4<0>egu>pMPGb@H|JGVT5j3%YA|%v_jXWGnVz_^^8fY$e=SGDpHt)0zmrub^u?f61<3_KqjIhh5{#bUaOb8a?Vgd7=oNN*U8DG3z4%6%JuJcvZQ{{`R(N3+N5N{t# zKFEpvF`CD7B;MEKwEFwBCf5epXzy^D_GXPb!_Yta|F2;|GsEL*c4zDaQplgHuX~k~ zx%e`T%?*)GxLBBn4LPq~i9jZ%jfFQT0#OhJrXlJu-UOJ9SQIO1*@l3Fb19(`qX4%M z1kwfOtt|0~N>cy`&qR5Y9+b=L4Lk@@$(v>A{!H+XMzqgl&ytSjr!%kdQWrdkCS$rf z@pXNS9l!;nuWcMKu-p}-$wI66`y*fEMm;w2xNf_ zCPA#f^AXfpry#;7&P;;~~Ti6LoJO9DD1U_h2sFA1LNH zhP3RlSRrEu97_2bhVC71mUvdiGGZTec6%?nuy(|yEWNN3)u#@Jb?$PsB@*T3+o&c4 zr0XnjX~fy#P=jnXgpMnZ5iY=%iTgfl+(HHYWg!mtNej`6j4`^1Q$P|>Vo}5d)2nu^ zY-@8@RDX?<-cy$s zfodNTHz%#x)x(lWfVvuHWB`^qs%8=h8m-?#j=PWl9KVW8cFJ}`is64P<7YRMn*WrH zKd)OjJg(V@j>A21a;e@Ib@?N4yvVtON7gL;!}|4DI%j1K24|%>8K}Jb8Tc1o@l`yh zmbToWo27CA>0;IU{D<@wf5FMDakQ44_F@R@eu=JVahJxf!@Syl`t9QFN;ZS!?H=74 z3-Ncv9(N1e3sz7s7jJYa$~Xng)TT@!LL}X zouD8Ri9`&NAaJ4f46q!kG!rayKd?qvfDLJI_*3=uWCt%;MBoOlA{WF_jud%~o$EAL zD=w&zY53iVML=SLdD*Sf%N6?z*>@xb-z)gH$##Ff_r7O^fb(j5F;dZHdvJboYUCit zI)D58>*2uuZ-Mml`oX_-uYHwuAHA8sVHa}f^ zx%kr(G-c+ZjR*@?)?T+Gd|E_we+5Br0x_oa5E$^u+MP9?bz%hz!jd?UkAbhGBO!8K zRR+!S!s|99oZ2Gu6F6|OEP*2)^xmzTY+&!AOYvt4IV1OkE-qzc@b7PLAMZXl3p!)F zupl5^HrHLMhUrLfFq-O-Hd2@o_!XU;(fuMsHEQ&!c#b_T=wPQPEb^Fg{6>#z+ep7v zb)35K*mjq`JbFYu&RJg6PduX@`UA$fm4Zo(7V)e3oDqR|_4;CY)2VSG_*;n8q^6f< z(~l0j1NZM58RIqe#rGHEgP%_LFS}<+{0a?9F-B`|%ND!2r$q8BmE%uQ+mLK-?v(Cl zJPis)#l(BW=4-aP6EliUbvFkwHw?W{4{O%Xy$yXR-H z?Sk5hD1%=%(!>&pDB1Hcc7#>=SF9@v$^8ayY@p_-$0jEYy3gVa+edL|(4i#oYY1sH z4(n=hAszY*hr?#!TQEXDq`*)LG*f|2#@Bv35k$8L`iP~&l8$A9{6#bn0W|rIi(tqzi zm$#n_`9sR~s{Hr9vBj^B=Q@EN1^>Q%&YjndIISMu6g3KGHnT>qrHqP)LPCr zJfi<~cKb7?=33IjP4WH5dr)|wfLQw*sP|WG|7NGkzvOj0Y{Z7IunG;^VV%%>k=)w8 z72{6P*_R7+eN>9VM;qkp=sTz3Jz>W5EBDAf3VUI9wpP<5+H@Q#i`7YvJouDhlQWZE zdz5pLxAz+>o{#e!HV*U^MzKUj8DUIji@HSZ!{s-m7=?TDzr0kOGOnh1sYqw>)6?d& zvDl8c1Kv5N50FSGeEpFrt8<9>PgGB{3DOW*$V)OXC1SxaU|zf7d3jd)Bg8G{h}dY?_T-o}qP2id4m^RwJ`t3)kd=mJl!Sh`w29>i zP?gsakiZWm8}(_rwo?rU+{}uohD4xd0cHgJ$E@0u+N@1KpM0!=fe_HQwB-Y}bx-&X z3y1t@$=>(-Q3Umq*Y~6@DbwWaRjZ;iO)car`#EFqcKm>YTMkQ30lW0$c&+>WaiJ~# zp}r=Jbx+5*KqP2ek;qDa`0s2tK15|>oR6>OUy(VWw5Y;z=;{upm&jtxe+$s2Li^54 zh)MArOPXF(e=Nz#Zz^;_M8hve!+*`sMf~!p15%sQyxb>vctc_aG`Gkrp-H^0WCA9g z+Q|#DwsZaL{&522dZs(LMi<@ zX_}Yd$rE!~v1yy7iKO&2=qwu$-bISnO*gGbQ*$lkC62y+eclk;2Ihqec#68TVq2Nq zFwSXOg768-In2S0mbV>zd)M1s2)Kj1ITu8$D^f&6iQCRBto9|1r2hU`>hf@h4@%^cp z1f&5*udlE9G?`0qFj`zD!|OB(BqCVXwp(B`CWjiMg(rW8fP;8lKsY3XxEdGvjL>0f z@V`k!rK~JLfcY*GBgA*^72=ukZE5R&UQ1Lu9Su8C_!~OvqJ8_S{9e=2vpr6o#igAavw?h8Z(24%-2ymCYRMY0K}8 zy2d@`CP$3X^)f}bwK}wROfz22H99JXEW?9w)sCeddpR_%I3r#*t=*n?y(l}ACoA&g zSuNdI5Wb~Jwqk#ILdHjlV@?d=V)<7hQ7q5&LbfzVDQB2oXSZO$16R=jXDh?1B6`;yQM4vBtobs(z74uyL4^8{Wc*i582t9z(4VuC)x)FI@24)(rS!@PVp(@Y zPQK6cd(F_BK+RXg4;`3f;rDIv`c8+9mrgu1!0}jc`a4~VeHhWmn*U1Hg1qPMa?KB1 z3~On;+)w*7rh-BNC16)%pR-?Bi(UmqWFT2BAbhI$QqbRFQ+E=*GiF9PXkK?#xhuBzNrvGT~M&f$yAgCArc=e!2o36 z+{=kYA*|IWL0Fx5C3Jj~&jbQV0;~t3S!t%PHe7Pk{Lw@skOD^xp~DOZ_Q2jM1(V>m zucEoEa@_Q5LVuKtvcy_+Z(+pG<#`!rYxi%o_q#E^20KY~9)#I2pXlF1L@zaJ99soZ zk9f}mNz$d6;{E6Ttzo`3KL?-_+oESHrwYm{mV=-_6mhb$<;<5fJ-y%gM@w67X4dTV zVRM72RaNEp%P-Qz7GI@5>pFG3s`_vXv(M4xp8*i51DoofbxA~Sx_B+z(UU&sN{^8| zw&1RBdmgdbpc2Ri;ymg(O3%=(C}$b=lU?XhnB&pNqm;)2M~;VHi0v;jj<>vb_p|j~ zl{a;gcPfjC7)>TTi+pRD^=U1D>zgv`(sWuHz`UZIh9r)AQ;V(acz`>LwQha3ZD zrXq7JeSP&?cLR~lSnmNAN#co*Bftdu@_=GM%wLKZf_@QF3FjjXu>^;;=h#fQ$;#fA zf)MoscCVT+_Lu5%(wFswpie9PHw`p8nym{-U=h9o-lXeEVp*1BjyOBR*-Pd=p4i$B z9IdYFA@=&$rjb(ZuVJfkPu0gLBgUF^NuOSCeE+zn@jPtV{;R?pb-jrv*^F;JMfFaI zccX&f?2ElagTkw$4(}Qhh#aaXpxXicBq<1hshHRF`k-$E^g3W+=%Nr%(|raGuYaPT zFnXN~t4|4O%+W>!Mg>SDI@tmtEBm+8TkM=3O~!b48#o~V1r~0M#l?<=G$_Ia z^X$w_w`Dqka0DZj%nX1pd07=Dq>Lo&>XHs#5R*lPNCtXpjUk)8ak%YR8TKoEEAY4M zHzu{-n|V3k5|r52eKue7*~p^Xqj!XjGedH`4E2gSsW;dZ46EhEYe|md=H^kDV>sPi$sMp0m*jo=P6pt^MWiBwA@g&bhuv4O#0( zPj_eucBbB&X4{XyBf?N`Nl9E@G0BVay391L_H&%242rKz*;)59^NJM{^b=p`I-FgO z%Xw6d)0QvR72Vyb*6rAPm~flqnv^_!OX+W8tgFxledB%ugCbOK;?S2 zYhuo2&}qRNDrPuBM~0o4{j(S60z+&UfK*-|-TwDItG3&&U559xqwyERd9d(~O zGtut%=jR*RLLD=_`dhs%@^4MHhf^d)!*-@Wbb(0~t)pVy_ZBAp?(euOUD{61Q4SE7 zqyHY1-$jVIbHo}-iC5gP*p~!|d@9I)qC(aL!Z$ZFA4OI`0QN~qek>6LJXh>&V^BuJ zgxXhanO&2<-D&P{zr(kikBbgt6_(w)WseJ()I7HEqUEvVGW*^~p}4*$K3DZZd~*zA z=MICcB}OMY0-H2z0vlBd0_7n>d92gY zccp~QgCD)j=xRvop#!AH+elW0W+o~A)KqwxMzW&;4tQ$PZeKV!-at{Zf76az*Sj-i zWn-v@VlXREM?#Y!={I{$iJ?fp?r6Q;kBlL8t3G1mjzLo;)zxa+b=yNkhdgE!>yC@i zkPkw@Ql2Vj32B5()%EJ^e~3{`Ig@qEH@J384*g+v`LzTxYCgvgkEyAs{fQAQp=2~P zd2cJ?@-Og*3K#`&Z#28Lgzb6CPt^WZeiIJoz!AU+fpNr42+30vkxu!o!SP1$3bt@8 z964(QMD)BC6jqT1esh9+@vs|e#6C1V1|?!=kYjH8paO7BDbxt^njO(8NO@U>Uk?rS zywk;R8j9O@0Q>xrp7%6y7pa6S5vNXSnBJk@q5c}p3A99~eBYfarcET}+R7pf%^U8o zT*;u+9P|X`lGSezu3LSJToKnCSG|si{tf~s++at{v+R7kkl{rkUzTNMWu>oh%vtgt zFL1iCTj4;FCy{zUc#`w z^rW0-d0MNyyP%z35#{_NDdKp7QBJ+B7-AVVE{A%bDNDb~1#+H+!q9WC3SG{kdd?y_ zut=v1|8*F-W=~9BB&V7Fc?18(VrIS(<-2@b4|cg_P(fVbGCGaC#t&*YH3c^k*`Uyc z3=iS}?XPsu#d`No4*D-E6!`Cp$RaOao`0vyW&ZAzt%0DIo6pIk1_G5@QC+28qn@*ByZAeG(V|UuS=boD*!`;JnCQx%^+9C-YB8O9@`5A)&E1 zYq8AuarGejUj#<`{qsS*4!Y!)A+WKmRA|CV+jgDnxvf`5O3cb2-t-x2P*c|Ip3NHn zHud){EVjHT>uU@{|Gc{0_?rgqzNNap&|j;zzcTGJRu5Q41Jk#z;bbRzB+Y=|9+CN zP7SAzXJfN~)T61fGY9%RVHo_nbyp3Ab604%7m7%icQC+uJWaTDb0tVTzM1vn2?pC zxBXIrFW-XYZ})c`bg3^vwDi5*-bM`5PxNSHcA5%1a-WOT zpJI-;)k;b4h0;zw(gf5xu;V=z1iBU-hedVAF&tXrF*pk0)5irhKX5Kq1h^1zLu zg*DC|jqgf+)$GG)PYF@fyfPzF$W(xD+g|A*C$qs*Kiep~5%KOubLWd^&0;L3ky{9D zjR)iNxnt$9Ip4aQ(jMmP-!Oip=?2I>J}RPC(&Yht4Ij@{5U6V3&RQ0Ao<0MX@rg<6 z*`1~ud%JMqg!vaeT~ES*7D@djvMrquJz?ZPbOI`BXcEsr2WJw56gJ2<5asS`L+DDby&cXj0%_d{hPFN=P2+L!~%Bfco!&aE6){*XT}wtFw6+dyw~Y+UcXg`^+T z^+Ma|{>04_0mtI|Sw07$CYwx@)2Ey=>+J3_*rDHXfWsvOkcrmxP&_@3(;FD&0H-ZX zkPjQv0YZD+enBE3Wqa=vh}{3X;2YCS=MYW^)Gq78Yn+`j2fJ+&k;6e**QEJM%sK}M z7xwBigeMIY^RnYzlqnK%)CiLn<~PQH|5`R8M7iJC1i(NReeNmGm#PkQjf11TJgfM= zNaoqcij8N!LC~LJv_IxC?yc^sU#PnVf566u7Py2nyzVYldd9X{fUkKv;zu}Our|e+ zA4>cGqXvhZqstD_@1~l)uSz3Yh#Hp;{r1tr9Bw!3q2qdhcDExYDrA`I4tt4h;{%pp z^0HY(XZG|S4y+LY3|_n?pp7~1-;@Svl!k5OpGx_0VcAoEv~MIeu*9o0@b~^MRFn7C z{?`ue(*?sF`^3TUrdATsLVf8~{IEvZ^e%r{(!Z4+#e+B?apM|ixR1t2(hKqBh?DoL z#onNoLoB4;1Uva{dpc?CM!-8wcEygrcTO-f>-DTE1U@mkRyLlB3hr)L3JZ8&G)2wI zV(KB}b34ew{hf6A(*Uf^15tuV%kbd2nv!wW`iMUE^x_y+ZNV!<(zxZmf@G$>cbK)-G3m5I(gMYFg7Z z#HcRdC)!0ZZR+j1_8slNMK3ooVqpMxyn4 zv}_1n4JE>VqJw?%Rwngw+HEdSR0x28wNoDiVNXlzJnLY0wb3A^UHuKcy!|t}ZouT3 zx5fP1fF1g`(teP!ugCVVR^?>MZ(hBGiI4K5l3#yr4>1J-TbgXnh>$1ql;2Be#S7fZ zme0>RSo&27e5_siDAvU+%~8!ueyd50^fmotsClqUR*deK96mMPtTt zw5`WnViM#Rvt2{`3SGT{d2tgp$2yTpDw4*y80@@OP2gpb=242{+Vtd+?n#_lMZ|@2 z6slJdG=9VM6=lc4w1Su>vws=M@c@Z+VShP_l>g_d^LZHJ0hZ%53?=!lxWKNB2$2^O z@TQVF+Q7<^|LA0<6bJJ+)MZZkx8B>g3XR6*09WoO16|$@2NT zLifD;f+MKvZv9`^G&jA6$LkC2CHO2+In<%0NFmE1F&vhDONzuz1b29_^aof~YQ)T8 ze+zHlCS)Nu{gi6mwm;=UWEQR?uRF6eij67l=E@%ZU-!$XKcvW%@AvwhpW4!8g1+6Y zoOs|jT-w{ZR>srdlova{Yz)*50r6e~vdON>^+{0@Pj9evGz`v+Xh*a0Q}0&2xoI3E zl~UjH`j%MPs_rQI>=u4Eym6h0N=%t$Y~SYpbnMOyd-5F|Q8tvY9tRT3y9`Dua3kCJ zAgZ#ZnFZg$0GS6RvWMb8Rkk3pXi*pmtP0SMpqFG7_yD~Js!+`PD*i;N;0f3g%JqsV zDj-dB@wy{2D7&rN?7c97%0D;U32BSZ{YTc@-g zDQP?C&QztF#4bLHoZ{^+#IwFr#c0s<&2~e}wYnB`nL__mKR6RC@uouH0$|7mWHl$N zy-f=0UBhF=G*ig<&ljc?JDx>dg}wamAho=UWp5>`^P_oy?$6L*YMBbAg@;T9HGf%q znDjJW=P`c`i#VS7l->>PQ?4A|*&Q;TkqCK`MD)~MT8?#^@2AkO$)xC}RvRZ}Ka-TB zRc&F~rD-b;`pFXaX?K|N7|*un65Fj~i}ZW5furB4?LyHl!JFvl4O%vA%h6}!ZldVq zlG_J#zZCUXj!(1Zv+yY%56a>$?M*Oz&;s$UKmps9ceyx3%@qlWSCYr!qLff;Z*k~! z;G#DG(n-LlrIi-byeF4+nQ?=K|bR9}YLz)!&P5CWQdnkhlVcucw`bxD-NPJ^VA$nrL z#YJt)WT%>bKIU}OW*=P<7{siozm}K1jstgxpTu$z5{XRw(&V}P@NOqw#(A&cQ@)v2 zz{bNPZ+Jg~pQ${rA4ceqW;ym(rbbFdhr8X&pUt6Mw06d*vfF>3iEin6D1?#Oe$A7@ z$3!QHF;8e~2Y64jRx@=TX+KZ+zmm=~p3VM$`?Yr^p>`u8MN3OsFXFQb9V@ zj$G8Iik`#AQ%<@eS& zuzxKAhxT`He~#vNpW|8*YpojB_(NsDLPA8Mmt>yRDK`a$G#~+{hknFGx4`_Y5de;0 zS^x$l2Bf^B#Y7HCaWjCvMDn<-X^RB}n666Li=Otj?y{(=s-O~teEUa1k`mkmX$nu|at8*eH`c;slXu#6|ErY! z!B_pfu5)MTAgH+oDqq`AG=hEoT8fPjMN3GLo|Ga-#dloD=gbVM58S`6Z~+A+`@CNA zbYOCT00b@W91~mTBQXSQUF!P*0px5nxpQGUFlcubEB_l@rn%~9!nxJfgU#OC>psYe>5}eId$M2+~m~t(pUV(X7k!ny58?gf2R!l85)15_kORH z223B+9r;wG-;q{Ceqv=twAS;vmgeqI!rkPnv&$Gf(XGm@wUa`0zZ7PAu+3(;;V$$- z>-5W%mvS<^R1R&(*@rlLh~~MGS_^Ww*I@=e_NS~u=WhvcXnlw!rfIYUyX;k0S@~(T zvq}B*Z{4kbXA4=Of7m;J=05I&j_2+ZZ$d;0(mGD*!VV} zi3461em+%zGIEiHx8IECp1370F58f;Y&a2rUI`)!-14}gxbqQU(Oha;l+k)1mz!}o zf1(m}^d;}6)W58h6|lQ)`C7UTb6h8NPuFa-z;g3yH9O>*ZS{E{@?h?XEYF=b)QfVN zzCAs5W+g@I1T}v&0qfT1!vcgPNvzIH8#ghNqgm>_DD!=I;_+!B!bt0!gDeLA=O zzA&4Y)?F)iS#aQO|C1N10!&CjJ8D2G4IGH&|NqD1AjfXQZ<-K6qYWFf?~`z05vpeI zlc#2~eFoay-|CCZD%|J0ULZHfjGV~7Y{FR?_aUNT=)C!eaV|Z@gQqu9fB&#`nf=!^ z6({ewqZH8edI%@1xTacma&?$}o{u}GOvDB?{<4!bWm-Lxo^68sjOBK}ZpM01*P<*_ z&8KOUzUuj#cXA6_+D?Dc`r1G%cKYGLE56;5+4^p;riZGL4KCA)f41cQ=12(%z>^dF z_g&%ux+~k{E6xH6f&3tG$DwQMB0a>==u;%pHu0vIGgAGq2qK(>s3)imG=CCc4G#t>nWy<5>eCs@w=shCFF#$S8~gn zt-b&!v1(`SJ6VrVrJK%b2Om1w_E`UtEu2)R{u57%R+rl`i^CpC$8LPfVv>UfRZiVg zWQ1!=@|)@0v6Q$@;)wf}7m6`+vt>q=Sqyv`O>@c^^ud?j+yUeD)1BeI?AN`;`fIml zr?%&^?nTQ^-M-LU3o|i3vWas^Ytn4n#ReE>y0yLzyPU2xuFbrWjNg?HZOv=mDmwf^ zk9fv7+~0fP$!2Hwbu3hs}PzK9*E^l1m@ErKF{<@ zDE^NL7mMhD1D?n&E!Sj+p zuw+3LCPv|=*9i#u41$P3dkK=@006rFQ0bjtiMXqRxMSx>Yir;%2%;KM(a=_NjQA`7 z_40652nq=(tMJY#T#gVE$whG}p!`j7zgExMAR))y&9ZzquX`rUmXcrFd2c_rYm{_u z9LOP@ZIQ33Tbw<(>RtM1XJ}fU>D4kEv{YmvMAnzefoojEit`VV(*&(T6_mh zW|b7Ym@JWg;VTG-P3>+!o-aMH5@!Y*Mp(|z$8joie#=O%U*FuN9@~0H8BWL{yyM$$ z@X?a5Y_6dX0w*h zgcDxKPr8HcysZDc$1R$9l3&0n+32g7fP~0BWqg`K?)!rx2-Wr)6*U^o;Zh<}s`cDj0 zM9ToQ0ljPJPV9K|z}bVMiyQSKnH#q+tPsxAF10M*-NK*TQ-W{KfR$!wvk@>e#JN6Q z!}00>II>g{AEUn)`c!UPnf|k7EcN%J_gX^7J_Sd^fLL=a{9OdXYx8TTX$GN%=~Q@G z=Gmfl7GttE#o>+P+tb9e7B+pC|ARcWb0a-Znx8*(tBV`O&Qk9i9a2EfZ zu|apeB?5KNZIRA}k|JFXt~QZR&nXljC4{H!{R9h)u50!_0=%haM%HTL5FW6Ioly`5 z-KGp4gx){%@9THn$$cWqnU?b3gW%Zz1Qtri@19*Sdq2MDDU9-9e<%;8XAHRRaMnY_Lnk?CQ>Tlvfkk@06wb&O5FGBNH5#nJM{U-p8*UW9RW8?{CMn(eS=2<;VNJ#_v z1kE}EbEXsEor7;Xr)H}Tb@?SgYH&05AJ%Z_lgQEkNL@v`K~SuJ3!bS&*KV3bC#!oV zpGEenZtm%Jz04lUS9sX~4rT5%HIA^UF18f?&wP!iXzUKBYNz+Fch?FJQ%7Fh`E<>R zJ2tX8NUrkaFv(C1B0~cV?p^fQ+rQ;7Md#n?9~gF_v`S9+f0ypmcSyj_%aT!IKH(mfpgjyYOdVAF3wI>zhM)t z^tijEVb#-XN{p_R$Nc`m-79(3md<6am&k(tuHKPsa6g94Q!lI+W(&kYwpX`OH*Jl^@nDQ_5#kEP}~hL>qU_z z{NG&K%E{KxxhL`GiD#z;H_uyi3t*6XLhg#0-8kT1*UqND6XkBK82Z z4G$0SuAdoy6AQPvSW%VS2IH`fKX$j-8x53lgq(iYn%W)s-r#au@5bTsb3;X&%usb17jrZ`+6Flj_QC%w-S(0zko-bXBLfw2*dFpQ z*b7C}Rzk97vHL|p>9A>MGa3UtT29Wnh`Pg?j;Fcog@Bx7FI)B4%hL#9^Ccc}~N&Aspr!6I8C4hLU9&rD9-86X<1A4wgC1hHJ84-4fFWrPHh z1qHf@{E!nNz|c=Q1TZQUjyhxRH4%wGsMzsu^^7>+evhtAijyd9P?MW+Q~;9%!{Y?n zl}NE+rg|W;s*`F;4jO-y#oI_LQxJUP&y-&Uyrsj_~<&7j2BSvw<1U7;;MNM^E1y#%oKa( zC^IKAWaP)*OzDl!$46J4Qpx~o#su^Bd9e81o|lK;3!q%d z8B!h|XO{$voFtW}aU+lC^~M5(hrMQ}MG51R)yRx$WD;e}G4l3$xX-MWg815HJ;cYE zIBvsnO$i79&%VtEx?02)T)R4Bh?qhSx)P!(3WF$sb(*wyyK!jna=JNQH_|N0Gn7|Y zeh9W%IRhx`)(Xb$3NfZ=n9@a#K^yk7vla0_#bjL(TVcjO?|I2}20tiQQ<1{d zo52GIe70i!IhojQVYG#Z_{0|+cDJt}>VGe&vKYX(fbk51vt)mRF1&&V4T3)%1t6(UpMwthri7LzV+I2_n%iRB8lSZk zId)g9US5XJg*=#cUTF#>V=zHFl&5hXm#+)QMVoi;@97N0$=7brwF&Wbf_ClK7wvfem5oD4%MB$7+yUv zJs-Y78;g!Ubc&ZT$4;AMUAk8C>(;*vldz+hXnGT%vKTJ(TnnHr@Dqtz|nF0haKj*geXQi z6nUwloJS$uHQjo>uh}rZgvIIA-#3HOzm2IW9md2))R*R;$7ti-^h- z@7COuBs&!cL4Dz_J*3OjfV+|2f7+uNc4+=vMrryGh$06^E!6wGi5mcwUf1ME?=*%> zK-za%uQvtw{*x4uVFZQ0Kg|WyRFh6$Q31RgaWUc9Z;0_8T(Yq+2MG8-ym)6~`0=k* zArl>Bug2Q?%A1YD?RA7lsZ7`Xah-DpQhf_lLK*oH8ds!?;0-(X`bQ#puL%@xX42CR z6G+f-Uf0$5+&5=)&TxF5C%P?E0Wx77Ya*(c#5{8Qn8d4!PPMrKo*1iO*Ne4C470w}$}!g@Z!mS9%Me)PXj=nctNU$6EdC|0Yid1g(2xBX{R7 zIm?d7eJT5tvwGUiYSr0{fTO_P>S~vI-tCO|%8hQ&e;+JGCK#~qVafTQJ{e4$6tb|B zc4Vs23F%pXVJ(6(TB8P$r|MI}*Xf<#TO#lVoVca|q!QDwIp(Kxf3+y!6xCKJum=>8 z$laj7-oPeXAO<<51+WSa^3vCf!HnrsVE&{tz;L27rVuzHbjF=R?U}%M;VYD&nw~eY z7e&xb;S@6ryS1VS&0kL zE2j>Q9Qs#vu_2Kd`zj4&$HP6to6=C$9S}dfI8u#L$^@!nM()|s%-QP=!wuW8>3go5 z2i47J)`_5UaLMgAeW(#FiR*GfrTng%wh()3YYkIvlgt-_B}McIGl!yf$^ zHH>FvvPZ|oGMTr1Jk=Y_D#o1UmGk>Ae7UPuTrM;_6W%%Bvhsek{gF8VDXC|0~EVuUgpNCFNt}Smx`l%jX#GNXOAwyYf&zDewG< zCteaFhU5SPK7RX$wit0^1-C)~wGb)*#LBaET0I!DBb;AC^nTV4si8#foH4S?Ws>{@1kn4+0^fI!@398*d zX`a~<8v87JklnSY8`$^QrU#ljY7T>z{cwOlOf@vKi9kyaKQ}j^V6vqJ6!QL;s74|N z$_z$G->v!a2o12t7W!-&zd)D42->7zK2yEng(wf#%}&mPGjcF^lDrVVQ|Ma^(T&SB z`awf9Am?7r9J0~#aHbUG4eV$7Zs88}h^$+;^KN=_(CQb%el}e+tVG`NZK9|lViKHZ zx((TH`gi*u7`8Jn<;5jyoPc=w4*R9ZmP$uD$o|o1{I{L4b&g%b*gA(>y*ZNRyK9qe zjC1i`zTjQ96@Is$hgvG)6BL5|6!^&;_qB5_NoS?!;e&?cn6hd14R?4o{rk~Bl)Ftt-oBbpa)y8akp~Ph;Pt!s zQ5kXzb1-ItK_B@%qd(B zUO22{19m}Q<`zi!4ImjjuO&et&mYLUaTv)3VbO7#uU6mUsj8@2tkF6X`Ytc)#`g26 zkww(R{EmxLa!tcrrU6A}`_*mBwlKjp!-Tcgz3?BkZKKYrZ&}Ng9|5tA11$7kfjw6K z=A4d9_!a2hl<0m}lV%O2K{%0UU0Od?L*QnrZy#4+$wk2X<7dOK0u#B*X*_GH$ zkYC6cmwI-`Fm+Q)nNI!y3q&bcq}DZXd~;}caB28P#W0%T_2`u+&X-q;FV zG+Oo0C!`|R2OSvXpO+Bd6b-!nA954eyIx>puGTxKa{8!Vt zF)=~M{Y6$Glwj~(>g(RZG#8FRFCrimy1M}tsoL8_W0k5Lf^49e*aX~!zl+O-1#{!j zqVWT(5WHaY4a*n#A1U$0PGPiXA<)xqnt5aSrRu`s+{YMQuP_5=niuVvdjzj;s8#q~ zt^kLp-n&(Gi+2Xhm%Yg+-Y>pjwp=$g@tEv8p>=a^awRnK#H)dBpVhg=3y^e`bu_Bw z=+nUN!MM9O{x|Qw)8<_?E-#C5zA_AWqASTW&-To54+*);5vgEEs1ZS z>U@Rfx0#f=lt=G6)kkIe#vEj6tZcxOVzH!QrI|NvwH^C`f5_!J`K2no3JaFU_dl0f za%Ep+{TKWPZ=LtNhl9)@>vpA?meY(izwj7k*24E*FO}9GJ)dv@J{`0VYT@%(I&$Ys}1evcNUZ zrQ5bum?)q^32E)taPF;$O#wKGUxCD6kPfUe? zS=1eCRGu7Y=w8h+Zy}lDt1e>SzmyJLHs94v&3TIDJK}BK+UK{)*_Xjh&{IY~W5G8R z#k#q|xHR8>B7Bg6+B3W^?T0Lf{^OJlWb;nL#y_y6I;DHRd%0{TH5)ok&*;(3e`e_L z1s!hbiW&FMDw6HbcO{ZK#7 z!73Ag@Upz#lUPxn9|eGv0@0QTDMiE+>mH)$1P2lh=)GAyuTkjhICv;hLiWBJZY0Jj>1F!DF5)04Sr{iv5*jp&i^{Oo34Da zSbiS5;7SL?avl&b2<+_T*UX2?+nt}-RJ3He%c*;$4Eg;);`Aa6uxqrCzvo|-hp)6$ z3>~g(AE+=7OU^+=g}Y75^!neUXi9I80t}9Con@NlP)(!na#BMj-kW;LiySs7(qyje z%d76!Z7*#+L={Of3w37n7NxsDJ4oKW!JvV%;|(c5y_XV=#`q9Sy!~4<=8(_5??@kj z7uhOLYfz%C)&T2p28Pxti7J^vm;e$-DoUYX{Y~c|mXZbtk}oI-7FI(fo#o_2KH4ZU z&o%;-Jo;$H3ih$K`9j?e z7D&?lUp@#GpPDsVGUkme=PQ4mM`J$NVo;IQhdayUrIEJL!QJwMqb*ak)88THNvMC0 z!HxHcXLy^|=78yh$umiqZGs7B3 z7i6SVf+O$C#UhLFp-iVYl#S4ldX>~49qyC5Ygf2E#N`#X^prMS30`KU6C-BkEdKoIvyiJdf`h?2{%6_|(VOvb|FXZ?!kreZzu95@O~f3x0hf=8 zg&10C&Zh?ZtWiQwLY~#5cYi&$uBqKzc_`^vF<{B|gxO){R;z1wW4c#g*}tZ1D%e{e zUi$8N^f{?B>#yKDT2G?ySxEBSV}d=}K#cY5VZ`h#Bkv!!HM#_*BBDR&58~Lp6=4Bm~V16|ZQw zS4u7vhV#FBS$?=Orap4}BVGPNgwA4mULm?cpUBNwbBhmPFW1wPm0t^Z2&G_={v@Q=^g zdusLNKwuVWbxCg*sa@>*M}WGJx$7{Cw=&e@cA{6vKmKvy*|Mx?^U;eqXZgUQg<0(> zkDyMA_6uL0hcBd4rWb7}e^WY&a@Whk!tb>eLDd@`o^q`8xMqo?@K-#~iW~4dsy;4i zMeQX6e{w6>VMA40Mf84!a?)S?b4P(x!wcGp$U5;tCk8G)zoGH^zv*Rx+ch>Qs@!AL zuOyj-<>22Z4w{0GZ|FOe?)$6(`~%<%!4HNn$@L5{+dXeB-*xu<9JVmNAauu*LEOXZ z+O1e)&}67Kaf5Q!Eq%>1dRN$^X%(mUf|<0@>pq#{EC zX8!wXApcF~a8Out-Juf^pX!YjThMRmXDr*uj>#p@9F&aEW>srDi7#6$J+2UL|<%4X@1}YxCntt2y-!Q1#hD+9cbFGlI~z9m^?R(X=bagAJ$MkH*G{l*K>0dW(xXG;Txfxe`8` z6c(fQKqaABW3V1vGVyjN!2kX|`9WvBlFQ|Jd;ta#=Uy<+iSW=y6Up6*Z&?N&mAqe7 z1Z+|mU{#c&86zyr?(vcw>@A;7FHM(HKR{Ur{+ms2^$jlTy1Rx0*eQ0_4mFTcIujtv zfp6QE_+rAzX#(|ZFS1xT120Sx1bnw;KoWv@&BP}lhbA+v2e_#6h5!2|8zVlEOmxIgs>Ij zh9Wi|O;tG7t%;28?pwSir`d>#(g#d(*Tt@Gr<53*a%JHIq~Chuy2(Cqy|bhxZq4pd ztN885Y8l02A1t?(Hx+Yf;uB1}9?xf6`*J@BRWApR{PhO~1T?keHg)?64CbPv!Caa=R->27ME`g}VG&K)CTAT;6c4G}s&8?Tngd>P6$j(qecg8?%{m0r`Go>fG$julZf>6*z|WhZIGGxYVJTT}fBw0gsUUw@4jo)|1Mn0d z>utEGZ3IXU6bj46LYz6NX7HAU4p^Zqz9P#G16)nSm{adGIp-O@U9sKe-awTJJgA9e z2?*XjK#R<)G)!SM6@Y8B?KxZl%W1}UA_C6MPx8Ny~dF7aHO zL??B(Xzq?EC8;OC$Yx7HZYaSQNC`UWaW0w2b3@G6n+Favk*Q11TeSe=oBUk-zpIdo zlYPOccSX8iGvEXC=QRzi;efh$zNH|_2Pm^-_8jWshyWsqy{8F{l^K0-os{J?cC+v0 zF7%(N+DJq5_da>_@P7cy;+k=hBCHnGE!L;dqn9D1yB&VWFWs>P^b0qw;S?Qb*r|&w zJXXU;8@U3rL^&;czeyf}&aNrbqNcBH2bam-+!)MG$!qLN zy1Pi-dJ{O$=c%9-GN3Vf?U`8B@x}I|s>IM9!=Z1O;6j}v*N1tV!XD)4J< z*fX5na%zFEk$AuFFmT~{o>xTfpJGmIX277)56*lp_wU_x|8a8%@AH5?>-3NMg@e(v zp+awRhMAM8d)w`i_EJB-2i^Uv`x-aH?q06Csv-jc!aaT9g(N;Rd2h&I{`zU|IBux# z60j^o!r*{Z3KoF_yI+ah|JIgU|MO=e;7?qn1W0G(c-K#(B}7O{8ZcpmQsJ?dq$DL_ zTg~^L6e1Vf{b^yLvDL|41e|@#s45MEplXPVfdp?R5kX1nzj}eESJ^UxZpcO~*Sev$y0))D0$sI84%Zh z+v_C`*u#RbH|lPwyXTA_9QEMgNs0+UEidQ_c^E%}w&$O9O2{+WXk7`H;VYP0)6Q#rKOkLavP&7kDh>S**gB_O@2T;Jmo4!dc zx?;i0{`Swz=iQ4l%X*z<2Xk|X7?FLI5YTdaYBVYc> zB}HDcOILz==kb|uECCjBk(fTYd*&_Onc>H)5+HPqZ)&D^%Jk!uylYuV zS^H4$mcvoDP2+S&#xR`$*IkRyZ8cas!`!`?yU+}3J`UkBc$r2&UZoy0Qv|(lc&{%I zAl0`+5oQz=6*%0vm&6oGf`Q0qT9!{gJw2_*-pI|QGgkkVJ4K5W1-isG0UritwP(qwD;`Ie(B1+oXr}*Rp$yYWrPmBEg_x1j% zZd5j-w62=6^&z8N)`q5hU61)WoSR@8`WctB`f0i6xx4O@a4{x8xXm(YrSkcjf4Q#|_*ZJ$GgDCSsWPA2g_vHRZ<6_3?$(j!kz^8J73gJ`so3 zWS(YHH6kSQryf2!=Sm>^{nrv0fc=;o*Nk;sSlSN(J}}4+_3&`WnPZ*yg}T<&edBL{ zh1U$@z`;?L=03+!2!}xIt~)5C1Ix3h1^T^t=8GDUdiDcd%aQ^`=t%(SSYQMj!?;AOUm)($lviqjsJ0H?Z&&L1-!uu5G9yNN@LkV6P4C}0+2rxp^bo-G5f<*!S z%@O}tIeN-9CKA@}))RH(L;sR!_ruiQ?R*<3Kl(8lP(Kh`Da4qNyL4_Yn~;-Sinn5? zSNi@%J!oyUO8LZyDxLkHQrjMGxV;~evyt`y`_yY8;q#$E|2SC|;KqKE6WOQc-%buy zh>EdacbNaD8r0SiPm>&qaA7U%x0&->_2}{Iy|Z4S^y{(K2Proy%IV4{k`7s)Y5#g*YM zZaL|WVK=?!IhL#9Bzbdv7hEK>qW+oOow7(;>5=c+hB2ZkJAtKlIT%Qqjo!vh8Jmch z1784-+LgDGwZ}5Tp*Xu)bo7=4X+G+vXK?%babD zm)^KIz=HV;;t$KO9?sO{qVM$#6oa&%KP3Ta*Zg6Ev*APgnP`Jx6??y%q)#>b9?Jr; z2JLa*6B4@RUw9b=5aoSMt|OJf3qu7t2Jdf@rkLLo!2bK7Y`c11%b!+Cb04H@_ue-& z=L?`PVvU3;J>EcL#&+bi?ivGSKf+uLe(v5cC%Qe$+WC=*cVSkt#bpg>!Cul&Y1Eu0 z7rH~Lm8J4hQ_(>n`K$hTXA20GdEsjnXaA=IXg?QJb{M85BR@;W8IG$O-R1Tuq-O8n z^I`|^LmVVic1kyqd@;qZBe$QS|L)uOG|;XjX_`1;dSS7_-gq9XN@D4V|QX?1ufMR#XeBX3P^#|C?? zsbXHSm2&_I1XPMwQ#7f>ud2|8A!#ty9L=OqfT#qQ0YO9~fN&!q7zo{ma@WPX7Qekcxb{`?vB%jQ?R#d_I`pgqx zlwubYK%)MA0aum9CD!}0h`bWVcf0;^;;Nth(<_61Q0nu(yM$Fvy;Afgzreet|E0k8 zi_Pbn68N{eymu>C<9FIJkpDUV+PvOhorm*QqXX$N!G+EFEdVoKd)&Z7+fb1sawy6S z_pe0nlHDw|-tD(L)`_BbQ1U>WK?RqPwl!jxgU{_&DIVMjr3np6rBW#wtycYe4$n4W z0|A2$Yv%aTT$_H{g0^FIUb>mWEH2dYlz;W?5_ofTKlsSw;j**(Q^IeqzI-5lx!Fv- zHK;JaQSB(xxzm}FM_BWGx%@*ajBG#p_TgaL`W3VoD4&?1hFCA~*d=bc0S+#NQf8XF z6gWLH56FxHwy48wZc?HVnty8(BCA=DUrV|*7^T{26l==e)6mp1gq|~b6ccSz0AgY= z_daSsAj$2~8{fyjy+=ADaby+g8W6Z5uavx4-k7wPx15f8NZzyVhOj z++B5URqa!?`PpG|GNN!luzrAmfWV212`PYpe2WDE0j-9D08(PeBqD(qXge`=M-UMB z!GGUxNtE!|Kq91*xU?|jE;tql)AzxO7ykc{gw>q*ot?~V9YD&eC&YjxSSKJ!$k@@) z!Q9Tt+|~vJ1)7iuNdNJVE@*4#?qF_e<^)oSFu?(&!vBZrV66YID}j@_wJ`|uGXgZQ z1^Qo$qOFOOtGC=zwR*q`EzqeLo0n?R|k-m-o_Xp8R{QdRo}tJ+{P577yBp# zNQ3-u&pSI98iPE31)Tr)Zi2Sf*2XqYAWsv?JwO`7zivwAPFBVsrB`!gARq)F;zImN zZkZRGo@z>qZ@stInZ&l{x&Gl}@{paxN7_ns;FA;4u8fmZQbfxc3Ta=wk&! zvF0X(WX$I!n56sQVBm^Mcf+B1{-FNm>fz14z7x16h!BWz&-YySe|JO_`7rW3}a$HC_*9j zwPtH;XMJyuj9@yTfr*+-gMSY+}T&eE4o*Zi<8`Y}Ty?@dIEBEDl?2XD8Rw_4c&i zcSyBvFLr9p=0fA~WFa9TyPe)|zy?_z9lY<5@QK8~#y0ncBJ5pVAqf~5;(^^&?1Y}t z#0iweLf~<)R*CDaRvFrz&xgyED^}_ZAvZf*M}VK!PQeg(r|YdOTuzr-i$#imJ?f3e zDd-IBc`@1Sau?%*(ilzS)6*@Sae?awPF(S-E~z-`F1kiTT`4{#MYa4fD>HNKSENE) zN^t&I#4F3&+gp4_hNj3qqzl?GFUfe-{*C7YL<-HX+R5PHL5I^R#P z&dyG^yHPS~p{?0&p>HY4Gap3OGyz8fPj-LQwj_YW-uO06xfC;kxCOVGb0CXTL?I; z+(nDmvx*uD4ljFr%}zIZ;D1s+v`Z8TR4nGJR744C{TT|wkBf^#J0v0^k}p%D(&=1z zN#B)U7$pn_)1!vhgf$*#bpHdZuU^Z{??Wq-x-FYuP{8i>QY)-5H9A_CRtx8g&*PPP za&i(5tF0s-o}a5yF>BE@Ojr$k7Yy!qMn8r5D;61CF4Q6j3z;pKa>;)%nob$*^!j-L z9+!uw@3K5*gSSNO<3sbL#678+e>yKDfGPZG+7dRtuva40s7i*%G1(@RxjrX zLN;nxy9be!r`8#cVD*qEJJo+oq%js27c)2>Nr7lITa7N1DYDz`{HdD&Za=Ceaambf zdF&zaU&dKnARZ3@bl>gI^|N{gaRPUD_acvt^Fqj9gMjHy(OU2KC*-P(xHvzRiY7J{ zAU`z{?VX*OKfAo&U3dTwiV=iWd*l>hiK2IOH&?8Inh1X+X1()1HNTA8rATM5liVZk zesRa#6{%E+%g8jJ1Zj19y+(J%0*}ywg|mAI*&uFPdpnTn*4cH&QF)ae9h^2cHbdFH zx=j|Sz}I59)@UAtEa6U!5U|zt1>Sp=wSD*J48K%~0<)h2{?t3M=G%9OnL0z!2!K_p z9Ib^+x#37OECyZfFF|x=EfEojT=RrzadjTV6Vv zKsMjuYP+wlR#sMqc26$seaghEc@E^aOBRn+Hr)6B{m>{N1i4791jz7G@aS5xK>*%giFsA^iakEw&9>Xo2?;1VIy$W#9Vj?Bz=@l( zIUd0#kV@x!K3}=HyYC(x5RVFmdj5IfyFz(-$iG@VNXg8UQd7g2ot+)tb}wDDfPlr| z12QCUI}(a;ECyB|`k(0i&xPFa|Ax^0U&VX5vJ;3gAtPf$z96DNC`Abt-{v=dR9w+A zCYz1c|3(uHt_7-!|5I_FW9~0s<`p`l;zS@2`Yw+uO`!41OQ}>TSX7&fOvsMB<)?CS zrJ>Mqo|g|g{L=4pks0@sV=)~>0i{BUbiM~rmV~r4ag7fHu4afC$0G!-rk3i;oK>$A zhL&*#o(yU0qnX2w*?8bQRhm%5E0<-kxlI^+a( zc@9h!=h;PhOiH`qrq!_|=4X)wpaROX_#Qqb-tlv4YNl#?zcE3!*80_Dk=<4JGND)N z{5ooz2YbjIMNsAMcoGiw)`%eqaU7l89Dw}l9J=P-CUtZKnaLs%PcyRdfncqm9;%a= zPnM0wA+=!gdfqE&o%W1=G4E#r>Pob0YEiRKjTsC?sKJ&AJ{jtuvYES#^T; z=*|kOE+Zi}HmQHbWWAFWrYkoE;p7ad<)uz&H1oy#+*~;FRpI*ENz~4wu;m$y3OVK( z^MkP5A2@q~51K+rmGoq06(?X>j@JEGfY^+9bF zSW4n8J6(vgZxG3^-W4hcvHT9tb+HmEGUaSnyQb%AGKnLTA!6<3(a#1#`uWc6!DK5F zgET#xRZyrsmvq5(r~KAzKRjB7`Gv&{|MzI^T5g~Wsl6C)xK5rZ^PJ7@y=NqO z#`JWi6Zp1lv-x z7s>1L1M(nMAmUPzB`D@b1#V50SL7=#d^>AGs1JOhd`5RCw<|^FdS9HAo#ipyRKu#P zBEP&;%whK*LCWmc4~&$WY=g~S-PFr>9?vn3YF&ZTZR*r}!{vHPo}>zT;Z6E__DN0< z&IERyC3~Rdi8My-2Ya;`4IIMY>dbmVyX$gG>X+}w@K6MLo0|dp^%O#oNz8pIcBwbu zc1ovTvZ2LsZ%>#eTl%PChB_1c$%`#&lI-p!0&Bsw%Cx+qnP`f*?)bRDNSE>uQGUu@ z=9{y{(jRQo)lQ#+p}n=}so2JloM{tBYW#NC9R7v`$D5q8i08p-*VoR8hIB*$HHs84 zgKVzu?UerKcZI7-Vq~7o;VA6+)=NYl=TsS|4XSodkTdj^#$)Tu9xUng;VAQu6U9nE z7yaX(Hv~)fB2VtKC1=BxFK&U*BWb+vCrrr*!3!i7PB2=*KBKF1gNu&HmH=%v)>iOI z?<2>CbG?Y6tYM$t*mn6yo8A5y+G&O7x}ZT}*^;Yt{YLAJ)GJ#2Vhz9?7(pPSYcc50 zmf5f04L@K=WAp_t`4%?@tdLVFizzH=p z)J~b|*1f&)=A@~T+hd5`0cG`Ag@x|eKNEfPe=^a3&u{zj&GMcl;D1094gw0KP(rIl z?>MPZ1fb+!6WtLCe_cobs{Tu|AN_Lz{tqSl|Eg22A}Vf^7aG5c&?+_tm@8)cnpnE= z5axlGo}*0yw|mTNvwa~ueAQ@^&pw+=W%%s(tO!-x{GSZ~W!a8({7yuH4We=*(BJR~ z$LUmWs*YS(3p;%l?a^yB?yQmHn`eu?RXT7G%~d0>l&mj$$L?*Forw7oWe|4E9EJJ& zsW&GN?!+-tI z-k=Essu}@h7vP&Sbmqcd9&WI=CUs*z7$BTny%De!$WdV|FL11j7v<-n#y2^wMe_o9 zS*k=UFb;LlYiDo=n(nW)@_giO*5PTaAnL~0Sh4B9zJ;M)y?C%OcpJ74otyq@#~jy{ z^-8hFUg%fU`yOAv9H$kw@Xn?{0G}8;j~Ls9iS~>na@jdaf-tz$ z+nzBkY)Vg)p$6sgf@-pj_6Dyv$%hKAj}~9OkGp5BJX%>iSJ7zWK3s94H%E*l)eX)y zyS1e8fZwNF^TX0#7FcVoI3VyOAN`MUHVdEx5xTxSa0oI*Nt_!i&e4><8wW0B&1X6X zeKQEWy(N9dK2h7U^`!BkDW5S-+&m_a$J6tTsW}&&_@)f|3B+8aL5v-a%onovs6?jc zLOM`u;esP|U^JfTzDsP=VL2=}?~maTqs|X5Oa+rVVqgBMZ@9-p^VhSZR~patbB1)= zFTOEHPPY3MnDVyvMf$1&QxSkhDgcluV| z0~_L1y3Qnz$eeFE-C54u@qsNjk9J1J{x)^`Zo3`Ca7g=319-A<>A|Gb+m(G>3QIgA zfzi<~9!$plJ*;u^r7-vCX`Wlg!Lo{*asngG6RBU^J!jL5GjIiI2!=RDRVhT>I@g9! zk1G9|us3$5mqZQMO2aGvaUZj{+4p${(=g2ggCz33MZnjj2>YIcq?Bd zl+wE+ZOncXSrBvsbPh4{q@HK44I2(g+W{7{$#s*m>JD}kv}j^@OKR};X)Sr!0$ORg zzF!Zs8I~&Q&|#$4o!MtFP{L zV-63&Ia^PkdG2|?{EyFqZl*xTzpgN`bB=<-C`V6tLSA!h4L%?63VrFb|LjN~fKYeD z490;)n>{+xp8h5V=-@)`v+%vu<^1)%F~{>hzn|Qqnc}AR*9;L0pp0`~`&hhb*MR~^HKu>jv=ATk zi{BOJlcRAa?$j&h2-vlxrq*Yduo%1h=ZQC?4+Rwq)pZ~1{$p7Fh^Lv1?=-o`&F~bZ z8SH>HwCye@p7upaP44O|J=rk2*pVefLrsp&tE9?aPY%#0B;M%YjtaQ_;}uA>y_u{2 zMbmobNmdv3d*fHmz34MA*ym)XsARo-!VEAJ;kpuC?sH6gvvOu@OJQX1tpaPN68pnL z`C_*E)647QjPRNkwC@bau{YOdX^R?*T?OQxfS&$gF`7iz%9JU{P zTeJA=OQwih2w2VhysC_)2vrq_v5rR&Ot%H5va(oB5Bh`k%3L-hD?(B2kA7aC-Eb}N zRmbyz99++{C6PB4!UZf}2742?v6y|Ix@R+u5%}3L3nOeeOTyAslDs#{gW#Q8>wG&P z-c2ny&H-b#@mmn^J{Skzf`1L=>Jln&CeLha!UOyUC zJH?3_*dn4Qm8SZ9Sqj!U*KwjN=J&PxS-NCv&P3I|6c9vsk@S`{$HMoS=sAqL(b*_60S-U=VGqQ?N zelQ?+@1;f&+n+jtX5&dmR5JizRBF=3>Q{?jk(Os0Fr9BG;nQ$0xY2{LQ0mT4RwMTi zFo@0O zzq(G8GaYWdicj-lX!v9Q<3Bbg#yDoDtB_D6$3Nt%h_WF2SUC|Kj^s19ED2XjXQn(`WQ~eo?ZF&-ZLGpfXUc zI(8tXAnUcBk3Az{!aQUJ;l@MLOSeVq;5B5GP5#}6$y4mhwW*lN7UAG?D(3{=jV=uS z5;t@Ged&~Qu$cENze#kS^MlN}w+`?VZJ2xH)qC9SdeN8)vpps=D#U$v z_C9kn=X;x^Tiazk=s93Gr!WpF<$KIje@9fn;#x$Jq$XCfU6Kr-xc|i(Cw((R=EC^i z%FWQ!HsdfRiwEInTp>gBdB~^$3^i8Lx03`B>=u7#V!I`)wxat?Zm8`@*MkiIh>yuV z^X>exsR1$2GAcZez-Vp)k7Is#cTzk5U9Ri0ci9?FNlVC*JuUGu@NFGjNx-m*=gzl? zW8dv5NC}77GQo^)*}fL&kM#K<#dWTmw3TSzxqy$*fK2y01ef^$@k?hx>uMs_TkDj~ z55%``6)D^!TeUtDZ#G0RDMkkGOGrMSJdo`VdpW@YoZ6}Fuas}-Z2jyD)a~WIRUD&% z(aAM{0u}BZFZuxcop1N7yGzt}FiF3EHA@ElK(AU8Wb(eSR=K*G=+MqFoGexw=3dik zxtIkH^uB9UuZJw152OFDGsxApWacOTX!zQaeMR@GclZa zhkSojN=`bHqCFR>s_+n093l}^OA5xWdUxYnQ&Fi|{}F?b8}&(`UI75{V*4A7s%syK z$5mdf=%g%McI;1SXQlh2SU1|p!Qhx*5px->(H${bn9Lykc(Kz1 zs{>^Q5oIxA_EI2y4Z;Yjo&9;>cgWY*iR}eP8?)O|#Z3|JYU^7tgBXCsCg?fa5{(Y1 zcWWNx4a$fweNm*Q=>Cee%5e2cc!7)c8R&<7KnBxLleaTlea1r%Hk#Q;93w0?OrXtVh4yBq`4WRRP33l&y07XE8Z)Y-!DqN@eJCp&t> z9+17@D=>h%IaJ@^ZH3=#sf}4C7#t3-XuZJhLJt%JVa&zjZ-(C|oF34q{Mzv)9 zf7qppVWm{8f)w07jT*R8b+djW8yp@+d>=B}dfP$Q`rzHMA9zXg@iBQmOVVP3t!O&+ ze-7ZSd+PDD$Jv0{tg)YJFf;+lc*5J?3o^tB58M3(XSTltvQFdpc8n2k&{FTbh&|!a zpRlY_G=B-8mbxgG%w24cHqZk4r%MEAUUf*hm6R9)0>YbjwTyH#D26@u@e7|WA=3s z;^aZ+M=~9y2Y9A`d)Dl!y5c^4ClKnnr^s*_1Tun2VCi_1kW}*r{)VcRmK=lahkfPjfQ$ivgTFgWT-LBd(Cl0Rl)R-_kDux$D)ByyHS`?jF`wa zr82QL|0ecRqIe54H{(CF`0}>luECUBgwNVp_7r;*>Q;&A<~`^ zd|mFWzj1``)@F+f??V@DUhsB5)!C%wJBT8h@yIgl`f9V~-OZ_f4(evD(Y{l=lM+antj!sNwJ#XB#;JuQk|y}PCH>|VCC=Y9mZRup04>|Z-2N=16X zTDNUI@t}vxHahby*|9gorYz>3HvQcNoqq3BSHO6Q0O;HNP%;N;*@7kZGyH70{utl} zs4G~TxYn~3xon*B4?A;C@(f~kj%RAHWqYl1U6iexB6YZ z$Pb;D5?eiip8G3c*m`eDi`pLachvXOWny=zZ*Q-W&lDU#NLFby-Q3;v zkB>)aG+ERc429oWOwo+cYLlJWy~0xuWw!UThDbVTI{?EyKgX<*yZ&2<-~KA|>dqd8 zOvdQz6L7egscrLBRZH>oD=VExD8;0x^&uyE!_IWd zqy%-}yHDBUajGz_9`}r|t4V@4A-uU~Ak%981pu*GBF~p=8hpQe{^d6x&zCV-tkm3@ zRV_4qM~$zVbzcD@r(_+f*F8cj-4Vu!%Eoa6vo|qp>6#GAhop$?%UkU-4VG6X``oO7 zh=&zgzG7~)WU!VlMW4f+m&d8Q%U~%S2+3{$UYiY*$4|+?VdG?TEzyC1&}N56MLe>U z|BeNiCKWuUE4EzC4E7>9CE^*!8axl+8Y|?Zq%-j$>1YN#-OZNaX@ zC@c1%zy8vryB=}!Vbgi)u{Os?6!4tEFJ-vR=FRjx4>Z%{l6#gSx{`vwJjaC3b=Q&! zfhlw-viuH6GIeZq$OFIhQ0fn``Zw6~JPlhQ{Ts16&2K+Sx5S}>;Ui|zu-f+BAPWw}iYb)7fGZF9)HMtz6H8^Q94@oR-9aw&EE-34D#5XLP zy4dElq7m-L?Qmyq5W$#XIUWi;Jrc=%O}gG0L$URVxy842g0?7q13rX({#%JTQLkoU zSKDAxLEZk3y}P6Irptk#eRsW9e4RCV_@@iOlozS$ydFnO8;akjHg3xWeDMp9>B2*V+J=hOM8g?>WcP;KUrsLTu6iFz(I* zUuSW+&sXQ3pEuF={JAm>qt;#&Q|EJ^+V{|2H^QWzp1VLc^ z>^!-|`lvxrM=J9x{S+h#{(B|!i=AQmApZUa0m5eA{fkX|BOJdp;#%V_ljS$nsf%NQ zX?_-XHFKe_gQ3A!LbfxMej0Cw&iDr;`Od-fd+7mT`3HWu6ZlBVHZ~{tn)8sDDQlQt z4Ce5L?d|i?kD23_eumtw4w&h!MUEus>5GhmY@IVM8p_jIE>v`v*aZ-c2vB`>y}&qr zVN7T{U2xd_WW1`Izq*4A5r-vW%`|@Xw%0g@)Vf@4iwjnjz3xeT{}ZvRV%tlSnJ(<^ zBmdj8%d033Gqwg->l;SFamdW_jgQ74aiFvEC(~BGR?jOd5;VH|?fE=$X4e={&VJ7& zw_`ZxXlMb9eVjO=W^#eN?PyQXKXK4dx5hdj>o+?>$I&&m+~!`b%ter*(>MmtAdk?xFnfKbFlDjK^qZxF zo}C+-y{$TZ@gA5-Yay7dq}Ax6lUX+J3U*fZFMggC^V1 z`xYTA+d*o`eeLcwmvW{SX-)Zs&^pdm(c{jN6$+-bftu}W%Jrn)A31AHAVk`*Ej6hB zOkZgEfY7etiJFVChik}d+88fnx;2s-A1)+5$(c{}19|kII~tm#%EBJZ3U*G1oAd7A zZJ`b=+BFP+dD5XX(Po(cgjiWg4yXuVGyC+{G^}u>LKD>HOUPsKFWT{;`WyD(}c7%AAov;eSiT0kGQw zZtN8up;t?Fb0&**kXo0tEH0Xoj=bh`ZX{*#G&p_0%>aVcdUF&IS7N{`^h$@1=RbeJ zAQh6}262s4oY(HQ)D8Vvc3p_AmHig>1otSbj5KM{=;y;vbVN z0uN_mCx;fpN^RF*RVRP*zb9J$t7VPUT&MAPqfdo65r@UinWfjsG8?j|Z(E6wXW8w? z#Tb(-SW^<~6V*%&$8BYWYV3z=zmB4cy-Tny8ZrY}XRnFw?^v|PB?`hKc9)>oGdUAY z)CqhtPFtAGGs5N&NU&0Sa*ms;4)kPY(}d7nl}xx}fk2q%%5vnQgB52)?W1ZVb1pu7 zk)D;1fVZ&6e$z9zpK79CQ7uDur0{^y=_3ftbLLFcgOx{S5mWHn)eSMgIW2v!wI&kM z=@AXQPA!)l$JvN@C0=a=|FgBPpA8%Qrn;K;UJT~?1?Lxu%Oo@0fcmG6h_4;b!4RLf z)Z|*bJt5xas-B)ZT6#B`+)3_QKI`K^fSQFARx)?63HNZX12F#s5k%*aVZM#Z)lrq} z|E|%J733K_3DG4)wBOvED>?1&NT5?Yi)gxQeL4r-JPkKTqSr7TgeWZkExf?+kZ0Kd zX!(W1^M`t>%<>{LXAWChw<b z5d#`2g=3_#8-nNVk730N%4Pr3)Yk2>-l(`rBrfLDoLsX`XjlUysx!_{HN(De{;-|$plS_8wZL}AhTV7wIVcmiQi z?VxuE#nG|ASESoauJZ+_iR~97F?4^=Q)sG+49C11U9(iv`JU3Sp0_!=iPD{lK&l ziKi8E@EhSv*~8<>b4b}3)sqhs=yW@Uc2*V{qW$06AuNAo3a>3)+l^~yPn!N(%c`c| zfu(Lh7C2!}MVdfDVKGIA2Eu+a=qCIA5!S}vM|q};*6A9%O|lV!bqk--1#xIou;j|Y z|4YpJjELX7HhGap$)?xrv2exVm0Xld^-S`m1XkbyQQP1M^*+xa9`SU%yA4OO|1up8 zndW)`c6-e&G3Gg4+u!+%`*IB(^U0h$8E1-w)fEB%;~uRCoyO$%7f8fg%&uihOPDO@ zxL?bso@V0e9SnBr31&>qQA_Xa5L`&k*+*50( zIH6D2d#T8T;wmCpVED0IF#M=-(*ZYbEDiX3y!Ck zKqT+3nE$aDhjmrO7mHlrneP_B@cF(SIsW`LqMrBYIX2A-Q;C66$Y*&tU}Pv9&PqO? z4}+$Zm>9E0sr0PO6WNpdVJ;8;V{143_XGjB;6{fj`Qqfcstv{Lywu^m$~y&}4txx>AcmOHDn;C9CoJ;MtE!Qi=>2ZRLrArWJIP^}-5=7KQ>22}?!3a0hw? zOo*}CzY)XU8{7|t`o<(1*g@vAW70z|8NgEyx#E>5iD0xp9CdJTK<98E1_Xp*usaa5 zv$I=mwAOK@H$((Ts*+am$~=_;9rY=Z>~pSUICMTw3w+j4qF!y*wrYh}B+!jcZ|s+d z#!LL&FCpx;){Yq(f@-<0N6Y2KFX!aM&DEJ2m~8l^UuJ&{t;bd4eWhuY&i+T-hS%Rp zDAOkKja+=(HLR9o3xxFK68vq*P0!geL<$7CNsNMI#djM%Es(1>6j&e(s8`x%yLvn! zf|<(d71vO6v8ekPjOFJs73Jmcr_Db;#eZ`1U?%-8EQ_}SfdE>nWy#MZrwc1ZDEX@~ z62FB?^#q_wNq%{81KHc(cL%y_Wk9#hok{fv{K759-~1{|_oLyKK;azWsw)Vt(UfD< zpF$s@0 zVOTkx$r^?@PnxmQA&HkJqugqt{yQ-ATr<3XgReD8|4}8<0@HoaY0!;ekX8tB_Gq+J zO;xQGYMQ){H7xattT@h6sySQ1aUsRBj*?Q(2GeMz6q$ft+4!Gx?g(!*9RjQKfa)1P z?QmHmus4Kq;c+eb^sNnj+U|R)b^$~SExysc zs<<%AyzvWcdRAt@*TiLJt6LmO$JXIJw{W!q$%45RPuz&^LTvpO&w#-~n`62ZMX3;wr|))$(__^t$ln->aA8ApoiL1a5Ib2gcvUe1kcvJc^ zu$csTTju?POoC+M%tPP;tg^WSY%?bH<_w)-&}e%9?c#9dYUn|`nmf;{?88Uw-CASP zud@~ZVd_q(jf07Y6E+hkh_ko5t!mm+R}VCAO{QY|`;k79tfe0AD;eb+wZoeG<(w)S!$3oTlaP608AmU^O7euLO zjlp7U50rO3c$LVd!A*yvG$k{Rc&Q0t%%F6h;=W4c8gnH0`~<}%S3u4$!0WrAt_IWf zlqW)WzwZQxqOOXDpl9N5jHyh5j@R3qPyN=Z4$`+Dgjezu zNn=O#<*VP@t}k~7?C~4U1AU;b_D?$>1)WJ{d=yf+8g=i^Dkq6^x=OM8GXThv_3Mns z=Hhq)p?ei7*-6+Q*oU*{h{9#E1-#32?faHS+kZHuA$EFhP0@JE@M%5%!j%L}&vgue zSIgrb%LKgWO_ND^7aA0x2`JGR^8}(|V2JVYfoONQFvF{3eo9M7{Nm!utgWqOutX>f zAp#l@Mg76GK$vbI;&TmyEP?mi!|uoHJ>M>S>^%_CP$HXCZ=(Q&SAmn?gDF&~Py+=z z{Ld>tt#+p{V4Nt)IRS{Ar{GH?iv^ph=sD#m?2Urp0ltTmRTe*j}eAja8zTH4y| z4hNx&#-h-PY!Q1)N(|9jAU1wJ1YY{?R5<%s#PZ5{3zi#Bg z74vHYOZSNVKFS;)4`F>Jk;Rdtp;G63S)hG4Sij4Yz`mcCr74w# z8!4!id}|4%(uRTvN$5kNM1ddKA&+9^tqEHPX*nbEva&^n_C61JuD@y{h`k#yMg|(y z4R3 zmo(f-rap=f@MMy5fFAr2wBCd#!0T>b1^pZ3ngg%|U8v72{h`i&0r+9pRDuA42>wQsVf(t&RLQ5NFk+S;ROYT zMLvmP_iZca^Vf&L|JeShU0oSiGc^>%MV3zfD_esq54ON4xIJS{H+RZf=*gPHNdqu4_a# za>K8pVO7y+-OL|D9|?mSI~c_$_iV7Dde^IoH}>LCf92Di`LGpc&$Fu45KXRs{yu-M z?#W7ypUTZ!r(a*c8<>~5Ybz{Y|3rZ=wUwJm_sOlEW~EVj0qE_tmd^&sKsfa~0X%Br z^~4Q6R9j=B$Mv>ZwmVkc)npM78sJ!WROe5}sQI@A*c9fzF?pdQ55^t}LNRy^ z$jTDZm_c>3P@ah7O@+O-FC}NpTA=W6d)7ipZo(lqnaw`N!}?k>TlRh#>pVR#J;yhi zp>*9oFEa0O5{I^exK<3%44E%$c}U;{zNo{ZmVF3NdGaP(#v0(vF>pIoq*l#JOYdqY zN9Va7ZdU&-4PPF{ZJs>xk&q>fM*Ns)Q9l%gYM%~OX&7Evr);`VLqmV8!pnU$>qmPq z*v|Aft`FO+Pw)}+rjrV3yqZC<7NId3sW&#|4aOpq(3sE5Nsbf{)SY5uU9P`2Vu_s` z^`5CfA3k0+eV@%^wo@437~Z!$d1Y%UPI;qR9aejz_inT&?%pkhLOA~_p zd^<#ecnmdg5j=86Ub#+-UTR9RNyL21lPbkBnsHuMuSyL8*ONMGlFwp-3Ko=k0OUj^B|OS5^e6TBsH4*#&;Ht{CJ z1;V*%V0BI`KklL-^P!6Q=x+1}awItr$@?k>$dj`tzAKA65GP1OC~+o9Gz;cUkdKJ> z%XKW~1Ovss5!?Y($j$-9FlYx;8zkf2j2oqKoq)AveA~SfmcfUv<*F>!8Mt{#i-p$x z>L0c0F|RDNss=!Fzhl+aOgFhCcz@r9q5yj<&B!ysJ0$_@Dxjm|$2C#GSBK5mRboJU&~^=h!A}s~droSrx}0-Ne@-m>oD3rR5=`ldI5e{FA0k?+XGSg}nT4m=>Re5x)?|N?cJ|GVwjts z!!b$7xPfJ#rGpd{?tlIjfR;8=F#OkDA_WKVF7`d}YM93%2A8lr*pu)-g!xf&P;|{U zkZi>KxenEM$baRbp%MoaCC{1NWbu%H%{yI3#q&X1b~w7(&zCM2w8a-j(txUYLcOGi zs^zr{@t^cD&H7Z>exuAZ8L5A9Ox5e;FlVW2N2j`4)YCc6>~(&lEb0Ge;+)pZS)1uX z$*(RP#+j0;I3bF}^Ic(4pECp_qp@f_KN$UVe0ntCUy;h3#oa+4q0uXrrIB}hnziJ| zV7z1-=6s(Zo?s8}rLG>9)HfZWF~OXNhN;M3?m-hsgu(1@w_J#1-MVQD^^{gbP;F}R zlw6-)ZDY@zOlC(S6iSQ769cdJsX1MGnaGq;%Do!q08Cs-TemC~sLxo|T@~{Ub-|SZ z6S028u|Ev=b>=}DO`Oy)3fRS!b_@*ACk9IrtJwcdK$KS$`OpfmH4l6tpbUY^gyF5r zjo=NtRHmlsme2MIJpwKl$CZ>%fVN4Eq`pX;**^tnFJm zQyGGDkjIzPNLAZ99d}FJVa5?Rv}D`n)m5DbLyy#dWn>bvS7PM<0=#WRdBDBHK=%J{ zjqm?j8u0%fQU39FTEYNOA-i*>@I6UF7!KVv+s&CTXl7g##7p-AkPIvSM|lJbtx z%*}xi^@J6kZzo-$pRG!ju-TQ0o})QS2rTVs94D>;M4mYMDmf8=l!6S+&ej2|0g`}e ziaAvW{qF}N_}Pz=Rluv(~;7;6n5M?5lO?w=1WzmKG`Ax)J{LR0p(JqfmOZFubo~lEhP$wsvbS#_dg$w z7ivuYQ^O5toG5nkzgefwd!e>|2C@0QXW%tc@!gsb0S)-R zJu`O@+qFyUw{$&M(Dt;m@Y|NALtup^)p)gW^=GbLWVT)s{@}^Jf&#Sc!~9ptvvFIz zL@O)U5YWY=N?167&-XzztfMv=1t%DcL07ZXy29NvO{3fVeqv(fNIe19%TQ_1h=ks& z<&C`*ycE7Bo31zhOvKEE#M=O-c*5P(m0+zlw5|zx>z(XhztPfLuhMz5k1k~ick>hf z*F1zK_SU2@<9x=q2H*U*)UW#25&W>s`Q(r7 zZ;f6&rPQ)MtFi3sF$pei)YB%khJT)a!KVV9^`7C35tu0W15#(s?j;|1IN{%pcV9Y(~O`dd0 zlw#oQg<_Y?RzutC-l%m?(=-*?eJi?MaRAk}GwDWYb3TkD&@iZxKxo8g0NyP4YH@0u6 zneV#5B*sAJ-&}7R$=*{BER5?{Mo80`D=2iJEt23WVFbo>K~k#TNW?6+yN^G0(}Ux3ucWtZ74Z?1hM7P}(k#he6w>8@FRuX$t?` zJwEoa`KlX-VUx%H(bXpE9R`MsxozvRT*z^eCM6dETq>e+i4yg~O|FI<;T5BWG>gJ) z(d${;N+~M}A1FA8hv> zvuCv4n6NQzc28cdv1pVh(Oj*H^5S(hXp0q8WD#Av z-0F4Z-30bz|5S13)S&-I*JxnQ*ncKi%+0VkxK4a|*!=dMIp?A82Shr{SIaN13=hNRUhUIXseu*hRICetan7KY0&e1bRKlMo|q4QgrE#50DHKjexUPI%@& z81elw+&5UQuCv;j3K!ciUjIm3wo2c(6CN~Ievi8f6~=n_f`S=~`)2J3>M?MjY-3Kg zybz=qnN>wFfm237kGH-jeQ&V^)tJkDAuLizYfQqkk zYeF<#_Xs#;(gcmK&d#p00`RV|$O*XDnY{0%Xwdgjb2i0o#5pc#b>GkUTdsRyQLFA?Aa?W$-q+R;8R<$l^BD7; zMh!4xS1{pi@S`n3B`{*^BR3-O?04)1oa+o~m;A>9sJZly1W9-fJz4nHgS{6bU>6?I zDPgaIy_MU0+KH%Oe{00`1(1_bxn{IMhV`K$^ZFz4HG8aM;Pf=P++UGv1GYc4l1x4Bp{Iaw9YzPBenV{r+)++NC^rpT#G`2eIcd#pcJ2}!)xU%!$(@1aEv~2gLM?reZV%BJA@>;6 zI3vfuau(=5aiU3yJGnZ1L@@F0=qxN4?t1z*)0ha?g&59bJ%(LE2}qD>l(pTOLzPN> z>(pbYZco1~9ZU7oXriJkd~DsY)_s}k@RCDMOq8{)`1I4}Kp0M+OnX%2xr6mEc@Q+6 z%ouT@?#Ot1G(m$O9lFu}9OvfgcErHv(;Uc1Wo|tka=Uq*zcqk*fv4}I#bc24gS9#y z5JH;7eSPHXKiKL>6tugB?FN6;HlY|GUb8dsIjPXZ``z(}S1sHfN|342uO)2nDCQtl zrTO*`815$#a_sM6@e~hXtVCuc0VG8W9i5&G$XxTu2^PM_pVZ{hlOiX-C!il~-ibeX z0pvntcq^s^Lm|)zrTNWM*`($4K36cY9dA?lRcQKUn3>57l^hSPH(q!Cw zRaw{-J~{t6QH|;C76Y0c-k<-Zqk;(xhjhhiy zz=8Smx!P%ul*Y&vq9giuNLhJU?oq1Ru1{#dn}&EVv%sg*vy@oEJ#C+Ha0g$nu&fWB zBrw`rVXtBxCy(2{)L7Wcj#WBEOq*8G(d?g25Z^EpW*~TAPM99p9K0RmZXp7sg~7o5 z-@&r#6?xeK^M-HhmK9Ur%YJM+wexjSl&%Y!lSPS6;YfVxL2PzNr0;Ru**?-W&B>d~ zb5jbM`0D))y9;{SGjCs*6@~x$B%|+~_Rs^E_wg5jhIE|v!A3&6@%lx*M7@j@MH`Ye z#gLzI=KQ{se~N56)@aj(CRIcO!^8bS7=GTMBF?!qWLt~1bMQFu?8(+YCfF;INSh$+ z_1^{evDUKm#T2zN5}B~bz;??T2}Ko|g(H&gGp>oFb}_DFr%i~Bp9S;mFeq2hId!3- z+^u?Np72D4l%Tw`+gla3eA#v|H&2UEXUD$0w~2VYWP^IKP6d$U^4k=+QP;=(nhG_& zGZ3~eK&&*mD((l&O!3Av@xFS9TS&ci+P9{=d!L~cp^2_$Az{ZnQM=olW2XVYo9O1J z8$zsEKk+*ne;Udd`R@H@xj+p~-@!meMgk!-=%nkh(;LUb=esS20MeYP&S{NnnOp&$ z#C-0~u1FxOf-`P{!K-z=CSLZ+LP3fY=>1j?+YB+Lp;~=2homKFl9UPc&|yQ`d_2E6 zufygN1;INTIEjMt24rIvgyNB>@GZZ7!R;Shm_+!p$Rr8UrxRIDq?_DLrZgt>Y#rf& zqmF~sVz{}t_Bf(K;T8_eC<7yxS^|jIi@bv5qC&$1187qd0Kg_h%G3OX#ZAFoUx$ z2Z+T~xCxhPGvhEyE6ZNcCh@bxY!wbck?QZJ%@vX1gx#{|cIfw12UFJ6Nm?f}fD|@fRg1EX zf;ZpH`6=n?@`{vq=w`;;D&6kcJB1f1x00y@Maj-;ybN<++Gu0X&&RgciL$Md!^x>B z^UfcGQlYAX%ZY6#Q(>?V`*V&FA1Gp%s$xJ~$m1&#GkyP|t({3%^PIyJbf70J=q z8qy5#_o=?w5AaS>nJBcE?}E}(7XIO%?1aH7TMQmGM+Y6ZqfviUQyBb;%v}LdKuxL~KT-Js4A8C) zZ_0V{@R+t4E+7_cO>%gQJ8lZkl#1%wToK<7)_co4!$#ShG&jK#haI~KjoN8(l5D|8 zFr9*v(BW}Euk3%hjT|dootCaChb%k0(Q4eu^d|nWQeU3qtH!ENkiWOJriYfUr z!)qnc9GbCd`+UN8*~Q9shov6`jXClFfWzpuC4CSz);S$t7OzWLmji-J3u2{*)JwJH zMy869E7E5^@gl!$?qb(F;W5~651^5@j!aVbM#4sa!*v%E*b86cXz}W~jc>vb+*OY$=glEj*lj4iSKDd^!cwULe76 zC`PZnw>|kq;0bXVtOFU;{JSxmrg6O-(q1Lq%_Q}I= zHwMsF&}XWQ5y!E&9Kj$X3WygyAU@f@b=30IpQ`eu@uQYK{Llv%MT2a(pkw*NNX(Mtdc?kJ27Z zE$JtuBrds+^XuM7ecSwSmSXWcIDwea3H0xWj>>^(q$az^Nww_AG+Q$|TPxpI4ygcvK$?{rEVGF@O5WV8sT#-5E{xFo=6q^F*t#7vQ6NkiyE`nM1->6iRIrU&7JZ!oqowEi6 zl_NfIS{fC#L9aPjSSCa(aNylun}mJbaDu&?#(mL+r!xrnF zly={bkFrG9@ZNa}8c08MTh?WGx?G@@V2Ewxpkf9A=sX-O@DrVhm9VTVHiTLepOAKy z`Ra2iTka$>0RJvT50iJIq5)T0*}gkjlFB0_`s&ue-7oMm)cd=mtR1%o%5X$a>zy%f zKFIvAk*$XBwm*kv<9(tVYO13i&9N%|cP*r@J8?F)QBIuJs?D|Wn|PUoTJ_+7vy>A2 z&<4`&!w7)97|zCq(l#@hwOF)uI|Vz9dETB`5dblV71@GDwj6s*xcH+04=Hw1Bnt z#W{gKZ9W*odSMIIuFH!RQzK9CR8mTFK;v%#!b4u$3DA#lJ*x2L3FMdJW~Jgl_sSdq zy5vRPqM$pHi$8xZEtvyw%1ep}lWZS2P{8ZwMMTC;zgD>XK3)W|2Gg#HSr*6C99xtN z<-YL+>$KsJ{u1vf$L!_^fwxzce0XP=EV!@|KTB8G_9Bra2i6j*$Id>dZDX_qqnn8CzG`no8>?n|I~pkK~uaAK{Tszdf1! z>rPXuhwye>4Ck%m44=y|HDaMITy=ms# z=k6MM<(nFYr-m4F+ak9y^>+c;i< zR@cR9OU9iiJi1n)p)8fBvn!Saj2Z+ICn>ys-}z%Zc0(4C*ai@ z#Na6RpR%``s0hQoxET7C=cs8^w#`;L@Q*)`&S%CnxCV_{l`WkMtv-?-$oXV$cDuj8 zos6K9tOtGAfORf5_@q(#nQGOpOU7;vHJsE+DqWBrJe?Kzng;5c44lig#6Y_|ye4MF zj_S1u`4lB6p87m&3*ViQJiaNS2c*4j1E^lQi=JY*m61hGf3ojVcG8Zaqm}AiMl@j# z%!?_D#l?#3z@7NKnb)U5T5g)o@$Ux2SaOwsYklC+$5&JPz51E#uz)h@GJTDhzFQ&p z7UgD7mdhJ`BE!#u<0pH_eEY@jqasb^7tJ}5?zq-#RjXtKKRpAjKfOQWu*f-+FZY~@ z3+7BdG8N%KC7zm*GFBwTjttW%VEp)NJE`!?s$ekGR9v24ShQz}#-B)RE8`?IqIuK8 zK|D4?;I*$^XwgUawbrVro)`pAOt3`U$sNUvKZ5i)JfvY)ttGrvI3#4A?u>-1y)Mb* z!BU^?)k15~_w<|q34W}f4ic|7`}Z#e{Pc?h*~cki&0A}luEKDobS?LG#N{V!IlN&r zjRkF(Ib*~NpAg%k`gISi5id+`Zr%KJ+e<(){m|<3K{?*nwwHT9X{>JM#F3e9S_~@x z%V0Q(@78AIHFrapLjc=drp+&Ha=v&|YPzBlukeYzSisuxc;$)X&Wvwtm%W_>W4-sS z)6J+kT40W4Q2l(p(~VCn(5uC3@r6^fM!&jt*Mh0Xyf>e_R!LBU#M+p};}vWA)qo&K zCJmGo6bO;zW07GD=7nN50tXb45jsQQPQMm`j_6_{wi|0WVg1qp*+A2b(s9uMW5u48 zY*Q3uU0FZ%bH=TRIe#x0>N6^$R(=2RdJ!EzL~|sAmT9@a@W>}<$1?^g(pSFWYgM#_BGov!-~q;rhN!qQ>DP+UegvUMgnW`2d`-Ft&A~zpY_^Y0+SY0 z2&OL4R~2ZJzbb}IXZfHFL1AUC<8cO|y7@~%O8z!8+LJ}fxixtHjiHU^K~ui3)(ksD zt#r|vQ0#`K7cKY;SP8o#4vMT-l-lPjB3;LIZ}3@1pujVx#pmOrP_$H8v-!ArisSda z_fVMz?-Y|Hw&4FJ9shOGk#~^srL6icIn0-zNZ5ED=D*p;e`FsK|B-_t78Djeurq+~ zbcgC~724ViYk5m=Ry>9u#aKp`-WsZWdsMrSZapa0X5FDSn~-hV>ctNEatmP`C5u1T8e zu{c|)F?~e_qV6y(x*HH=Al(`4l(d6}hy;qI+6(y!cg49bv?p}`E87}U4m!}D3$EGS z|F04Bat?_j0pIo4sm0$YcR`5=gv7Q4K8#fMy^n`irm~Cnp|c;X`Sd(zi2aJn5x2oU zUr^yIdt#7zQSOgbF@W9mdMkxvYZ0=);_)qUy*0-SxpnrYQAbivv%nP77@Ym-G9LSS zPdJWj#2aO*EuD+Ocjh^Yf?rEq3i|Wv@VAIk?@5S~dfmh4ZFkT)p8yhw?6qFyCo56^ zSK%L_;d>o3R zXo?OKUpN}$o1em@?k~LJGhbfzue{@ZkbkdiVS}8pCg>qmJ`uQ8-a6!Vr4|ipQNl0Y z1)Z_g(N|`_zaW*~Bx1HMH%9Q|bM<@0L~$xy<=yUV?A&(+@m#)P-sAFW1BThsvbBU} zs=LEBt2U}H|H%vBTLe%>5+x3i?(#heM~bEB^DTM_=Rke8M&Uhs0scvwi9L1YUuK(g zU2!@tItk*rNO!smbp_(gM`aJ3)qVm93lkK*d^HLpG3ZrY$;u$N)FexJPm@JTB6cu; zJGI{}%;L_VR(d7sO{vxVuzB%%&b)qEDc%u+ft(*axnUmmdT$$*8{WZXWl%y?{>4)Q2v4QouPY^9oT>AiZBP0&Gp(ED9M(9CHtAj9p^ zXXw*cPG#hrnl&@}?Si^?_ic;~l1!Z?56|Z@to?m-EDizP@kqHG_se6?sL)*IEbdMPE-uPurVk2ScIOi z{Pw1rcQhKn#MiguGAwT+ZTjr*k!lLgJN#ckKN^-A%6toA$mVE7kb>zUfVavY6WG=P z7)aYsI{wX?%%r4Z4Q4<)k8^LrP+hp!19WYDmX@ZbyXS*;l^4u;Y?Y}k2~48fi<|nm z7SG%Dn0htk(U%E^&aD(32NP*xQ< zyr4ait>1UFRrxmr#~$I8Rp|P%%jJL*tPY$7FxUn92FI-oypO#jSci{i=$0dJo`XZ4 zBO^b8A7egFoG<1;T_*AE{DjEX`vcc?UKd+0o}ywq4SagThYz+$>?cm=zT=@B&p@e? zYE^_?_h`U}&v1S9K#Ls$Z@N|LUG>@f`LA^a$x#qY7`R*wL;tlbff17bZEXwA_}ilMpMFpx zuev;QP$e+|12e}08+@QpxyrJjv)ryl2Pk!XQwaA@;pp|5GszyF^JsV+2ifMKoJ0cnk85tB* z|N9;}UeTF3|H@BS2lrj~!A#Q&%AEr7l+o{l5l7HrR)!X#I5JK~!lUMC7`~ZUePswoa(HjtU<3ttw;*BslFi+IY<_QJODy1)B1oAm6p z{8@Y!?c|=(} z`||cUaDKBx>}N?}pP498tkJ$vidw?H8zg212~5zS`H%~j(5@*pL5i`mP=qK7bf_XC z%$b|Euzt7E4V27H5adj^cOO6K`3BC9oQNm^SXe3tRR70a@$NSRdry7>&|n zpS)WZzI0GMGJlK2r)9Vau_y{rmGacW3i(XzTS~CWCT5&d|1X(`9Ebls^AH24eIt9Z zCE7Ev8Xn`E+i3l6+=6-~HoX?wN5Vk)#NtG5w#|6yX~9SDN~xU5OL?JKmY!|=BJ6MV z?Bc{cvB37P={sz!9bSe{#8V!dAFR^S(@VS12>S64(Ult-c3=Ui&&>tAUOz%B!5M))Ae2pk2&}D>rg((@t3dznXj`UX=8TpXhb@gghO=p`UX6a0IGZZL&>A zvsYAUnrHK$7;QW&W|i9|Uf#J%vr~a&2O|L0)<{sN)3@*_{}z}Z%cd+$@YLhwn0e!B z#Zm=FU3kCh|1|UT@=8?f9IZa0zD+K}{T+D4&jD=p;?&xbeF&HX4C0oB6S)lG6utcu zdGUxFSsGjNQ~cG8elrI|#d!#aO1n(0kwz>)=N*u1&YxH1x1(N$ctp|Z=cV&*x?rd5 zbaZ6api8hv%KQt8H`}Mztij3Yg`~{e?sjM7I$!2LQQ4}s7ddzQH`5rn1OIj!qj@>m zaEia@Vs4PpWX7|}#aTcX?^l@34J}&csd?iQHGpq4U*`2E&k?r&rLK$7YA7olrhX4ELV4AHxm5N={= z_@GXJ3$f=T@8nzRRNeCg-B0jl2EVI~Wm=5fvLg(7^|$y@ zw=~d4r?IFFVT}2MJ!H{PO$S3DCbS{0DnVX`t@#yS2hxhzi~r>2I^`r%h5wf?_uf9^ zmm8OnpzVYZzP4Ov?%E|IYyh&CC!HC2QWH=(>}Ptb^{Ap~ExR{xG&$1*k+)bmpTN)b7=Ux)B237CkNCnT>8 zcEPLDnXY+xvlvV$S(kF@aZD8fp3%Xd-NV?SD^10eCQV2%^c}(wWhkQ+pj=$sCpi%9 zA>k#?)2Rlb#-$q}ioVWMnzNOJ#mzXrZL#fkF%#Yp%lf?{j_-UyAvIbOoyZ!=T+D27 zG-OXo5?HFM!^%EI0Cd+%IICMP=q|*#ldYr4(hZ)O+b^O%{(0#cK} zuSXB(e2)lEay$}udozt)C*GfvrOx~_y|ALZ0eR{6qEw^0bcug4EFA;oe(#W&y6y(O zF1i9gFV4^MtGCO?D>SE~{&e5;J`_U%kxa8wg)IkT)X;fUs4E6*890ds&mDl@g3s%R8ybYtnu)8XJQb{^Q9G{sx?9cjn^Ac73YiU36PY)#K^T@-3(zfP z5;VKA)P^S;vxEZoaO=?R2oQF}R{R>4t!jwdWo%cYz|IqH-Eex#O#^}=g4tvMK6%L+ z<^8Wyb1kJIGTd7c9sH@SjY=mU87Ld;kAeB*!*Obbpp5p;~m zJl2Uy6U(P7^;WW;{sq`nzF&@{K*5x?uG9pTdnPbG9K3y823lxK;;YIm&0ER2jeablpb?SJim(&{ShwTRn_`GQMKC{x>)7tV2?7+!BY6M)|Jj9J`?P1=vom^&( zIx2~1j2*0~FUkw86sMQCY))q35!i8At!mwj)9)t&XOh#2Y^n0v@pdhFp#QXivMack z+;4DP0+Z2V@}fiOGWQ|m)Bp4UBPMM3&MI*mv3+dQ*ak~hPTTIzaSUzGs^JpaR4cvb%sCs``6+`xwcd3D0$;(1l(s4@wKkZ&1J?ZS zR?cXP{6~1g&?dQnb

{;Q%R$uAFRZOf;vF0OIdBDA{1l=orX91sE?>19^F$lZ62{ zP6%u^dmFYZ---5rLP3G-edE7j&=CWSxHd%fp$;)$vRKJMlZ*5!A2P`D$Z=?+N-?jS zr{NGQiq17$pRuqtn0tmk%M0Sw$FS_+^i}4rc=vb64x=In4V*F^Nf9zuPb{TQ)~kn8 z&G>z7R*j?v!3zs5S_yZ_-;v!)D!H-^`Zbl*Du?nqC+gYEv4u@w?_;$(-}w_6kI^(&bW66LWULPwgMad=7tv08kfI(ZdbaX zSz+Jd#1>d&Gpznqbp4%*g@2b!89@CnWJ;{#^Z8N&UFu`s5XJVAMkG98+-*7YC<$#4 z9)vQB@Io!#pTd7=TojP&S3s_?RM4uOrHKg^wY3ztJ;mFVNhuq0L(ZorJ|TAYnm5fA zPND*_7+mhhjIK#2d>aMW!R5rKA9kzzn_qQJ@ausb97R}L5Kyoy>-cjm)%|nUMaSTw zOrJ(a?ZduoR^Y@JeWHRPF{U$Fo{f^%un(KPBz(cnb*wD>+wEEZhbmBQ)O0D-+Vf30 zlPclHvABRpTvD!H32V5J8qI#?>h!z0#hQ($7H@%kUxV_jv;eRueT+95wkG0r##+o7 zB^Is9j9x8CypMx*jz+Fz+vA{~o<30X;wN@HhrLQu7S01s|3n-v^_qhXyN|$;2u_)0 zUt?XYYx6}=ZKZp=GkwRo*{`lsU#(vNgvSe61h@F#<+LJSqzgOXuCzgH9 z%?))d8<&l`r~HeFlQCH)*_H^+GHCdm@DHsNctZ#jau%t`Cj!=ke0?A~>*6pCrEtlF zWDKu$|K&V%i{xCW4us*7w3!$P&(C1_--p*ElfEcY)5x$E1J(A(N)a%yr8dBO3Ns)V-yUi`km5UGZzKShIM3 zP1TjPq9Kf8?nFiY7s>^^FS-hR`~PzL^DF#^x&4J?|5vyFs}BUML35lZaUGqDsWpj) z^kp#+q&EC6eU*NqKG(!r+m&TX;jV6_h}n11)6r#D+KI`# zoyTR7oW{L}2|+u*S&nM260hE$soFo=UMLiJjMakbiVL?Xy69Us?^uo3qhhm}Xfm38 z>5J7>V-pn;8O$g1=#!J6Upfq#RqUVyo9^0$>f!glIQfC?^E3VrDi{q070ACZ;osc< zUzzarzBMc%)1l}IQC!%YUK9Fw98@zT+Vx`Hlku$}E{gKM8&|{bvKCtvI&)YNX9ux7 zjm;oK6Rwuti7lxzJ@XOV*3eqz6rC%vEpWB^$jQ-|+&=mK>A19QE2cC1Fe%olwND!P z2dWPrnTUz%U$M{2cfIfjo&Z`Bw?4`;DVyIC%E`PBDpp2-cqw20$ELo_O=dy|8PGLm zs`+V;I5dSb#$4_@S%3VzRo<6%)`e^!{tX7mFd>8G>S?NBG8_p|q&YFi$W`u*Lf3iv z(%CnO2>%6mc3{U>(2!p^-GDHIo}sU?hVCB>^Zm)8YoI_5*uY*`NF5k|F@6*gYIY_4 z%bg$Wl(K{Jk3y6gmh4{|7GVfddNp0a^(l~y_bD4TkS}%{ZY6*UGHw|FibJBDCzAso z(Xm0D_m86r#eocpSkQmTSNR#vM}~5Hi~5MXAEbTPPP>5w_e0{ye<@*HuWjZ}B9kSH zFceu$U|a1&`4P_VFUS}&)I~q$reWxdZXyxc;Y z4xC0U`Em3!Hz%H?EN{9df%ETnb2nvT(GN6f4vZn1%aaMDe1=uU7Dw6m8bBlZUk?83 zUCBHdWH5u8jO}jCPb=YY$Z&r+WODP){ESHSE9UMUUW5z3RPOE%swxes6;H6`=HIRL zE~~{GQ)d9g8{IxR4u=+4jz5#=bI+ToKI_jz;;j;5oVT1m!uiLu`#UBu?T^L)ocFq4 z`A>aQ$}7%1#&~kg-#D9bJL1B!*9M8VXty7@&nq@P0`HFu_0kprLDe0@1649_FVlpZ zR@&nco|uVK2=971jCdtyOolv#XBG)Z)GIeULpbdDLB4 zD_6e4aVsH;oX556pR&KQ(WuH1e|L;koT*<(eGNYiHx18-(m|WdnazsA^`SqJc8K4z z+;evF?Em>>+`Cdv;o;woHbD?gI18%m zAHRO*sY{<=pW4nR*Ip)tB{Q2;g1)}|0kd8%1#OOAsI<_mY znyKEBmmcDC5Oyh>$oZ3PvnaN!i)YaL-O^XLJKgANeX2ixg2y(PqE`9Wlvc;t6*)W;-m zf>f9!OphFrr4D0@QuRdRSMA<1y$k6oz%H6UA zUzkXuk6z6-cU}_fpRZ@A4#zV_RQS81mWq?Yx~&wvp+n?8qEqAP3}-XeJc@yhS78^_ zpUDUHYO?(Rm(9?}@O^BL-r??Z>>8oH$375++DIy{p;(x4GeJnjzAq8>m8i4_u>v+i%3u`jlhns;j! z7&aSQCx?EwAnw#kwF&lSV@XFOHYD~jr}g3|-Hi3Uv}m}PnG%xJ+Pw-H+vwlZN@gfz zn0*YMHt*2;6C^Y@y{@&=CNDIHQMd5scfH6J$r|$#BR1Pm9p*z{k$1b>JN$FNVtpNj z-urDsR8>V+I=3j-B1HRb?sJ=>2RY~=%GBP$pv5LcDQVjaxE_<9cc$2PP>j|#`;c0K3x$wcN`&BKVUrM?Q-Y#8Z;>=@-U4OqQZKyZNs)~qTX zK|9I5xP@nJy{9UF)Z41wc9aW)X5XpOGz_S4yy$bS6+QbyS#9N!%eT&xRFE0>mm=OP zfezWmQ_1GRcZQ{8c{jG%Rd}lEQr&t)i?!qg{s$M&&)oy&0&=xq_K2^|$oHCaj}}F5 zsWt{qc3LBrYZ+=D1&1#enZjC0Ok#9h^&d{u@%oj*DS-ETW^H1dmaj|j5<)u8mGTwJJ zcFU9ZwX;+9a^L(kZhrp!hc8(4sR6>rFXyOy`I+fsU%eG1Dys3@BCTi^Q-pNx>jn)+-tz;?#1xe5smkFh~wqW}RC>28ksmR4(A; ziKx%+M{({K)V!hA?pMz16|_utLCMt77_0MSWx#oFpf%!maYYIb{b`u|6>(=ue7Gcb z;?a>DU`9mi!G^J=*k3w9+pz(8?iE9hxL;pkNf%;Kr*$q>dxXFJXt9@4XU@CE)kZ*% zxIC1;7Es78@8O#k$Q$N9;fBwexV4Q_IH28hUdfW$)i*!FD5VZG+{$5LZTTYQ0n-e; z06epgaWjoKQ_P`2t(5L3+w&wwpjQ4ZDzp7*(oD)8(QQidX^R2r|FzasxV8Gz1bSiv za^*y$KZSqePab8Vw$&!t+X4M=&08ofKMrU>_C(5odA5DfoQwv{HJ&!vr<ga!}LoY>-U>WuaOgM=8v z-Fc3a6Fkr`?eTeSu=&(2K4w5sRwExABJy-9ef-F96>0L^)I2?V%VMQ!L+0$um<-gL z*y~Cg6BlL1T6PFEu%{A%rp#{xUziGZL4zTUdMr_3qe5VMG>!0uTY3dAs;(ys&3QW0 zAl^J5fx&%V)<45lMdox~@Tv?EBF3TqvTwAo7}^P@r9ou5C@Yc_sm z)8AMVH+rUe_vk_Trj(W0IOsEevLbzv;b-zvMZI!N$!~KNvV-~e4ygt2;AR9n{})QB zeSAJn^3t7BeSS_UKv(<_7m!h~?kEUN4T$V33!AO|4J!HVP{d8pSp@|1-8Sq#|n+Q_2t9Mh8#ay z-#i*On>=&cJo4rvFQMN%s>t0IR*^~vCgY~dkU(p9lsCtsj{#nMc(+WRM&OZo@&@yF zx8d5rEusRG?_?VrB7oXfB?NlTGXT)sfE%-We=-*{wIAlv53fB~5NJd4_*90h?Lv`x zV}Q>H(1$?0H}`e`p0e~6*frZECHe}&Q3>jZ3YsJ8f{ezfOYraeVT#+iNcjSt z^&@L6kz{(O70)N9j0}+{MjDDj^r*uJeWSI%!g1NpJ8MXRZHvg2R!D?fA3bsthVlAR zEtdP)v6FGPa6`&+HuIABbG+ z3{TjXB=zZ|i!n;LL;F>=p(pVQrExRqbHJWsb7tfwB{Vy9Z$hpP)?@a&T{Gn6@*+h> zjjMD&N8n8+#@KY>&-X-&@EuH37eq|#y0eT`^y1)tVHXM(M)t2pzZxI8)GlXL45i?m zw8@;WGNT-sw$k;b;6+d|;dZvd9aS~1u8n*EO7^%L=QkXA=S!p>IF;IlUY^>p)(_08 z+B2;h+H?pLDH35+Zn+i*fIE%ss+$40pWjRZm8r<8Uj9hD` zU4vENXP~idXnQx@U1yqGdcJrv+R2Cnl%ELFN+CXOwpQsI@at3!QpybUzd9`qo-$O- ztGVHc!7zfnh>l?q55BEl)+t4#L6oC`i%=5D#7ic~*cHjCA}3~x{?5yxfRQ{m%~Q0Q zOZQb)Fi!792QQ?Ed82SDE?H#Ki61rfaq%|d)2HZPt;VD5&%u(W|B=0(3}hBN>WbUT zT7Tb*16s;c%r4O?7UL@-1Fh?IB#|v%6b|t_lLmm#u%}I^DJ1D4ETuEe(Tvv?21K<% z6!TLCsjOPaSVwgk0A$Fvv`*;bQoWlMo(TrxhFPs}X26MGmB_aK^g$~;Ks6y|VC_;` zia8JTWBkmIczX&CtW!TjTFkas+dQZR1&Md}Sz~LGi8AgbuD>=##XrcdAAF-a@)>>k z8v8z&>h*;7iU!X(Ww!GUAT_pL8-%2XD>&ux|Ba3c$zn#+=rYR|GNwERUV5- zkf;PTlh62K?y)l$xJ;U&G5iwcN|C$>WF(zdt*~m1gcYw@@*?57c4$%C4{)oGCQ}Qv zad4BfnvZIuF7q9xk+W#BwM@s~ZI(*h$&vop9y(>&rk<&0I@E;QrB`~F$$~vS0 zf1|V}fIi7q&@^b1DJ!EmsJ{n;2z`%YTuW+i4pyr)X&d~pgABr(uH@2B_fy2IwU1vh zTmUm_&&QB;XZ~Bpa*+#$ZO}{#;^9nCrpBrLFuP$ti)7uK-F$WMiQIL+bBsrVaeqp+ zLEEBoIGbu1VQIBevy{(hRKS zlDS2-{8UX8*Trc?7I-JAuQM$YM=DD%g)4N=a;-XLuU11ByNft}&IM>|W{zZ0ZTBE- zzAvVWq2}E-akS8!_3>k)Px47Pj?;wm)9xW)aYn-_&jd%MyPHNXgaL^?PBz-Pe z_69h%Lm_;p(ub`%$jw@?Vc%BZgB+!vR2zcDk)}U_r2c5 z22%R%RHVUDPnin6%aWGfm-RPdr0bnwzm08DjwrW|(5Wf!F?)Pjl!z2PMEZv4>qM!G zv$>0W_T->Mm}M9nMy3I&XFl?~WJ;AvzG_&yww)+1H9Q+`oU23QT454rvS%V}PQ62= zM(jW%RM|k`f&IMw!n~>KMyHk0SV?E5^TH)#dS9B4&+5dUJ2EnWBOrOPrZWd-uj=6( z(K`)5Y;_jVc|5(TvTXmMDle*$`p(FocaubBGC$6~7ceMMHEqAz;jbJuH1y{13sG0V zfTW`_CJ!}{B2w@mf~cu8@rSzno~;>;8^F_uuT7m6Lt%vd^y2aoN4oltIUM!On#@+p z5rg%Z?1r{cgFcH)M+$eDF5Kcb3LeK`!J>Q>BaB4BpDo`AOHrK^60Ds|@9f#+PCB&b zHhdaiu+N5zv(N_<`ZppJSjp zjP=2-3q^Z$F^)J>&4TpoPJ>KG_pW%^R5P{mF`?4ta%SoV_RP}D=k(5w zjyAVKxbS+)PZJ;<6X6zpA}tlzKu%Mqk4GvZ^4k&}owl}3IWJFfA`eoZgm=Z& zB?%d)vP{EFG1V-e?scES`sfMR{c9R4F6FRBl6K`_6pJ+i*7;jpkwG@eN@+MJyA-5r zUNQNK?SjDGSV?2%d<4xjmUxT=Ep|-nSkvS=GIUQEmPEQEJ<1C=MJJzuuRR1))UvJz$-;|L()WrBWgm+vw4>^mS zgo`{GTJqCcq!KQe_#eH!Wl&vF(=M0*!JXhP!6mpu0s%s>Ai>??;O->2lMsR*B)Gd< zaDq#4cX#($yzflinyULv-CuKl?X!LN>h9J3^y+TpkCkBv`nwS?BO}!lyjzlXW+m&G z{?TkEsj_N#wU4Vy)RbKE6|^uV>Kf}#7>8ylPW~ zr2d=IJls?tFJNrsld#aok(#LeK0T{CWR7q2Nl7?(r1tG(AllG4)65Fb4lj;Ytf{Zr z(lp1eIo-i3)tFVs7jK3LIW9c}`Igc=u}T!h{#C2~`7o5Zy+HgQ(Itkr%bdgYZO zVe9wz%Bdz|?))1W(d_mgtu@Z+?8V6n)0+I*bfxw0uhq#k+<(|WUzV;6u=G+o|0Yk% z>SPD4ka9$RNOlQ}BU;5q3cD>oG+TLb_>H|miXh~VNeJGo{x~==1o~~LO}(|08xTqT( z$f9SW9(-+}^v+&d&U4`-5N9M#$a($4)EDXr5Y%KIYbsveDGyd&-gvoW9xSYtZxYME zQ1$y2m!y8Qyn`Cgq9y6%#6`?&lO+?+%B)${OXRXWLaAD+E2pZ82THtMI*o$!#W+{( zU(PhTvVk@$lyBYyE-&l594(^#3BjVKXJIkf9?95WXsnIW2FWl1w}$oxfe$y*lCHKb z^-R%&-@siFGe>)S$bAPurHRjtZeIdM&5c2kF4+{m9|j#k?#47!j-V=8)t4kqAqk*J{X=Ar}!lQDl)$Bi`58*w_Cox!Kv-K|`w_;N(dh z+WF4}YEQ_bt$L%=2ZeIPDAlRnEllCH9K7wr2L5Tv6U4~*UWi1HMo@wUvBccs9}&l1J}}td8dzDn47G;TGT08DqVry+Mm;ois^Bw%oS$ zZZ|2UmK0jW{do1~0JN$?71GYYL; zD!cutgs@1^*fCkxIpm4Ar|GH6-FAmFDk$M9re>k_wuM)8;{)!WdiXgF=T+s!CfkI; z)G1r#?V^`eC^xqq^_>^a1lB%3{?2W@U5W1~BF4KxyL*H4wb--8LY*2#EP0tE*b%)J z`9CDLv0=@WjI1Cw*k5c;2GqnMA(6GSd)pt+R?03$$ZZ+B&=JJTxbl;>Bb#NP-~3kF zd6~1u&2z1JgA+YL@W`JZengh4sIX8Qo!wVnV8N+yrfHM#7O!~yN;%%)#aCso-{Hom zqL;rP$BAmJeUk55?qM-ltL1DLWdtm!7ekNAtmk+Z6Vb`{Bynnv9Se>j=}-i9B4Hw( zwzs--7PDu!D~@kc%s+N$^NI6gVjC;(l)Ml4+*9J@H)48XGy+?x8TdS=>+64i?$1{D z@0P%XL`QEu|C=uN2TW~ux-JbGkQJ|FXJ>;G!hg~!c(ezo%1xC?n_tI8U&X#SmKY+s z_qo%O)DYaWovy@%mnGBfXUZSOy0av5r0v1Pd18FJ%H!Ris(j+pzyBWp^hJL8Y_3;> zKtXoEc(dpcgDr5H=4qw%{vuK-nUB4btlD``^&o>mvk7IVzh@Xuv#a zPkTzdMTq#Axl{d5kU=~3k__wnl%6jX2;}#~#L!XmDiLooa`I@+V##7vt*(yKrjMqk zw8}ZMD;HCGR{==H#20q77%!S1Awws){6}fjE788Dt1leQyv^Cj;}K4mw`Y0u5RHs| z!!vurb^SZOIxr3yE&MoiHEJ)o%DHR^#=^0RNxq7aC%`wT^u4e~B_W0P>WSV!t3K0R zO+^ZFzOwfmQQyouO1~~pi)=23P?yb-qJ^*^ia|Q4VPfLrd%7cuXX@;!LDHH@Un~Rb zntUQhAV@x`uwRp`sHm9j<)jcNc+jV?TIk??<9U5OcSq=Yq%$wrMhxCLLeFZ=@d!?G zX}nI!W>GoJhb`7) zoVV#xTR}u@KwqwvOP>RM6UU;}-5H9*p2X{kj*h+wDzA|Ux(wW6O8|uk_G{EwX(W4) zPYP$^9J4+p>|>m7(y?7?j|l(G`ZyQn`^qBD71 z6ExMlR+pyo_;_W=g`$_m^hZatY9sozPb)s5iE+LGJHHJzbj@OrlScSTi>%>>#dP6@ zQ&9KciR;|x*IN<1ZC%RUiIa$yOIuyCxj@hc-E`A4T~3B_wlu?K^K^Avp^oXo;I{yD zBQx6NCDESG(M3C3l2j^+>5WXKG|?$ur3b0OP0B{PcQ7GVu~E!tOt>kxd*?$21_q(? z5%Ke*rKMZ4tOfpzTJ!1L!Wms#gugu&iy?mO;!nLfAy43t16IsS-NkiXKqP8!=V}#_F zSd|#2$M2%M@##PUt#GVyY=*JO|4LC zjhj-t6og;wFgxJU#(zV|HP1s*gG~Lu`O8^^3H;EOpyX9th|SiPB9M-bpb{-cl$h=E z9*R?Ry5Wc~b`|aUtKmf6;isfoZmx^LQ)3MxuGgXDEohW^5Yo{Gc&yU{jQfAgJV-SG zg%W&3U1etU1w}NTLD{6kj^>W=da<>eU6fP)k=DeZ7Nx+r(K{r%s41+2Yot%`=jo2H zj-@N|9F6%_3w#syvWG;F1QEhtjD*enk)N_Tyj_%n`mhh%MUC-$YEbD8iM=b3zZeUs z79Ol7%zvJ2vRa$?BVuEGi)9w4p`&tnxhJi9@#gP~d__Zp=Mz-biXxPpha0`fn`cOvOy({Gut!8w=}s;$7i!) zu3oZm4p%8uDgX1EQX`!duOzu-to!XdCNWv6ZX4pRSLV|KH=4sW%#vlCJKt(jt%r9LHb|`KVfTj^YEs)d%=uq$ zY2?x&CeMb#Bx334s_4cr_f7dWOX0r-^u0WD*{^@Zk()e@LNtnA|Hyf%Q{(r0JtnXF zU#R5!8XX<0&Q}!NVHQOdK@fmnysEUtUYX=jYipv}A1sg}45Hag?6=$0EG&ke|Giw2 zQq&YthA>$v@0!4NEg2D?24j;iZMU@-#2 zVr|&%DMWHCrg+CgKik-s>lZ&%>T7{5xcnsjurAZ;Hs zF)u(-DciJ##7VYkf388_d-|l9^m}ysH8f`yeeQn$v;-}81CPOi=Vo?xxylFq1mfdj zqvz~_zY;|_?Tz3ZuNa$SKbups+Q`~Zq&2G1B9*%`DGQ0)!xYt$8ieG~%Z=(oqVuC% z+;xUjofhdAD@9a?7{h+k>oMA*mObqMIgF2e_gQS|TFL%?LVNL|3HxLE>3zxW_x{9a z2F$#ssyQXS*J4X5$fQ=NToQIRYoil=aGz<5YHlcf8dV6<`_?ghisaXdl`Ei6v4QX~ zbwb8)hB>GE7DGyZ(%Ru;zCRLXQl|__r`9rD;d`$i+^2Q%HWnubvu^0*e{@CRdNpQhboGE;j|Bz%Crbcrm zO4^$}k+`1^gTBAKVB74@MM)$|HyWwuEymyB&g_C11;LMgeVCr&piAofvpR~m>mG%E zYv5IK$eI|T@r_sASKE2N~W-DKuDPHJ*>%=23pdwgRz6}s5;>c~acBf*Z zYJvH656)c;i?W^XRpEsTtknbc{|dEVKqDc89?T^YpIKO0f-{2(b9gFu4|RyOBo7X< z3SFXSNGA99#%;)Y!b7HekeaH34qkmBa4k0TT^^q&*U(bfmk7QrX%9N9_2cO4+mF7% zimc^g$TV#s#Nd*52n-ruhZ!q3lB#V_3b#DDP7p;uZDXR32&k=5boz}gp_nJ6*jZDH zjfi47e-N=@qh~uHgRAnTd@WJm;FL{2Eaqtrxr z8xd@vRMh8Qrz*>V-%7n$_|!DchOA*Rk*v;SLz@iHct}HIDUY5J>CL~&_Jo)^LH2@f z<2Z3h!dAABa*%jv)WJWHUTv1#5R<<-9zC9=z8%@v~%G+P?Fyzs1 z+PkusWJsfU;Z=7bs-3Sd`R7{eKh@eS>_@#wlbkjydCKuK6cAh|-k!q?A`v~=DA+KL z1C@~>l1bX{CQJ2(yTb948whIcUPseP5Qh(a|Db}c4o_@(;Pf$!>hG9AqyLO>Tvb*> zBYTcQWm?{(h@#Odsgb~V48;LbI5S{$Ma3*l2??1Z)?ayfDwW$W38WQjbf6}kl7*I& zi7J~jdEp}b$a6Q|&Z{s^K{Pr1MM^R*^$wD9t1zTNSr*fD(k_gKLxW@ApxZmrHCoOi z*BqACbk0;LPVg}~GbMc$p-207W4XzFs)b0k5M`;kJsGxtD~o?5Cz*$hZ}9rZ^51`; z3sQO`)4SA+b~C=MKpWxYU$=xtqc@LSa`H{zliIKkMTHTiyLhcr{mUGdcYYZ%;0k z;;NCcPU^nGAt3xrPVV0s&jk=him+$g8<{w_h6Ks+qScoP0!HtQsPRnGN=+MTunv*A zL+f*X$>60ObE*C)E)pQy&IVQ7(?`I5N&Z8YYHqW7oBB%0gFm}qM#KGRG9 z-9>d=BmZPoK_9EUBGGiG;spy$P0cUP*{*~bm0`+rmI!A9|FiQ?E_HIZgPnNUGfOkP zH4y@{(v5W?Tyu6`^pK5k2B*ILJYp&s*%$j)!8gZIyV`!~u_CdaS(qSljoOc6I5@6`fuI(Y!W&R=zl6M?<(Bwr@d4Gx zLZSk$23Pq@T!-kR<{uq}VOrYjI9jIM8dn2%?RP28n_4wi23teW`-@Uv&~-W-xa_cB z!@`hFhf^15Od3q_9sPCFr_ez)tg<&|T}&y+$6F8l3gu*^Gk18I&aMj~Bg|aEAyvpP zLxIZ={6C?`>osFzW49t9H4|jNk+=U7nD@gJ7gLS3C?W!Nb#+yUm5c&p7>Lc~Fi2!+ z=xseN`(r4nt0Vr&SI+$?BU2eBsT>jvU^=bbY}!ddH-V0^F(oQ$YGG(G@IFTRj<*qM z`1le40%*WRRIHG^wYkaRdZ?{{M-8g{PwW2&ulq}@^J62VN0I{IT2>1U)!j-9ZT<+H zZpZpyvIi*KiOO??8|HGAy}|R0)$4c~aUHn(uD2<{fxztw0f?XiE->jwHZ7z9WP{ub zpg~Ktqv>*LP*yf8Hw?#8{IV4%5EBf&$6K{>->?7gDvN(G%o7rVR~% zzTSbBO4yn&J5n?9P7~v5fP+e#ULAtqW(S9jiTQa8i=6x@f3<|OfbV1{d7hUUk^C3( zFFl3sRvmM+V&=uZ`EniuN6`$AJ@fIF`RFH5=;rWLJUfhKO?|2%o9lH5mGp@-~oA?XCSXoT{t$x8mo$jH#!sJ?R?P{59U!t((4`olmLn6gjT1 zj_6?bW?Fi%GsA=v3+vY(FqOIFFQWvr=_GJE&NLS9eWc;%YP|oTz!vf?eLa2k-W=_k zefyh6v6#?1ZS}#96T?eb4B0TFPH1f#6y@)YGwx@J#W1tcJK^Dy2}fDttN9zo(qRw( z1Yet#aQtASnaKB*#}YnMJ?E!AB{-%h2t4IZj;!HTnoR``Gfn5%-xP+aW-;h%*&fe) zh2B|O(A#OPTuThw^u;@3Sy=`F>s*4*@!`t>1w z@TnT1^G_4KkmR@4q~7pz_}J6dZM(clcTX?kC)bZ(eg0Ag<&KAOH&#-QY|d}%RZENQ zIPM7{RWjPz^@wLf^ji)={OGvMno}HZ@f>lx*=)l^-4bd(-Z1keMSFO4ME#hXJG`83iHFeq~HR^0xugg<94w} zEvEd#@mv_N;zGX^n_{l`tImKkW9RO5?5{byC?Ka4eiXBsKJTrAf((=7N? zZpSe}c}o1N4^fWL`d}@aP#a_;Luk|CNRf?-T*q&6?p=(F5XzKkOk#a#E%qWsF8c-w zkP9sE1V6E3&#UMNl4RFcbO6VVC@p0JDhK>gR#F-p%K^#NRg53r zSxuK2z?PSnpC2wHD~LYC0*x#3aIWlebtq?L#Z1g&Wp053SU?kv@!iSQm92#!k%WbX zMdlej0|O-wPaHR75|fBXliKU)@qvbhrp*1!R7^~aNGFwoi+7>XHMgj!D0>jIgwxC0 zTL<6|ode0XEq@0RIiX<)@665VpHm(Nd6%s07VYir!K+R2rKO|{e5VvoNsSH(7Ze(M*nI&V{pc3}E z=L69K=RLu^@Qz@NN|yu8#4l*_=bN&zS2EYe@`}>n_ipcDA{jZI)DiRV>R&MST zU#s_>OIUa~#EERK)|QTv^5yg7gU6;jzs#Y_eU=b1ZJwDtOTbCJjh2aqsIvvdZy1sS;EAxxCI5;?_Yi;#1PZugo zP;PE+I(vGwqV3nZ?a#MIyOXTcB$W}`kF1lVm3B*Jfz;^Dz3 z2w?PMRA*%ctgaf~p6`gifB&u8s^48Ei5LnhKr%8i9$#Dltn;51D)@$-(M%~Etu1$8 z4JsHK{$8kd5k}JY?(Of-tf+_qFVuJjVj9_iNG!&`Mqc+Kc18d=32GA%6N5dU$cBuB zl%bF&0wMr&9wq7NU$?i-0nQuTre7wwl&e4vLBPSsm$I}hsP+o)&*ixaE-vg%3?E>R zDlILoMokaWGVcgNPmX?>V>F*~6k)ngyHpAeJvWU;j&Ilo)q2)}&8H&_JqMi&;(%YFM@kFmWAtC@K$`0&XTwx1e~U*M3F%UbG2H-#HjFqHfj)Ezz;PIqR-zc5c2Pz z%I09Q8Jb>=72(!hraIb4@cQ;vQ%40C7uRa31qyDq7xIdNlXLvm7Z6J3Xe0tzY;w=a%2L-c zdwzn;CJ^(0prF}bH+@W{)7eWvra4Uq@>YB*aRbiJov^X7wHqd#1V}YBG*|<9*w~^I z5(o;zAwXyc64*OtFXQZF7MK_rw*kHVXK(*}gH^4KVR^W{pcWBH1+hd9^AQRVH>tl` z^h82L%vhoY(ZLrkh?cx#;9Q-paZTMuZ=b#S}5wWbHwXd&_ z&+EEu;s6g5^Ie*VH;BiWfhguzX`$z30&1e+$J3j{bnwgleyPq1jx3}+azOS)eijvIC=Potr zkJET+eR{k*IEC`sk|ic4P7Y&XVbRdiYKq3k#(qyt9RdS$aH?Hy`0A+X4E=K@r-FjQ zGumzeuTm2d z%$+GEKYUPM2-es9u%e!0EeP9m+Q-B_%OfB#d)Q4aAkZ+Bj2eC{NKDD9SrvlIq^ds0 zMMD$N+4%uTrY)LYnf|wh6bbP;uaWfkXkkmup00vZ2P+-HJJaQvGC#I~5es$4!^g)V zBeQv!FVz!;fq}U`Y&SmjxMov`z5UFe^xmwOGrs+ z33Bv9y{)HPV%kqz4|K{7Fc9|_XiZE^Tuije5EBoc0H?+N`h`VGItVOJ^(u2L0VukE z+n)q>qZdDqgMxx$0F}X@5m$F=6syA0Dt=N>C@nuu2O33wTw{0B@)h(|kDzn4rgd{A zD+5D0t9IG)^=>o}Mews+hghJbFJ9<1xv_`iv(+>-GFzK*5hb!4!2@h0^Z zJpUc0WmBL1{v;Tkv=2x=;IOxVS=Y8lGoAJ(2Tkt5wUdckz!CmCJWMAlx^&o796sIC z)5AK@(-RC>Qu9p6`?hL=dkZ-+_=JRtLPd0~+;or#Oj7P=gSAFIVJVSz4$z;FrB^6;T%gar1I|b+mnseE-`-vde*Q$>C9iQtRKTv>HZYn= zz>#$Xamw3^Jt+;1L>b<~v@~-4q};s1Ofp`Zlpet|a6;yUrEpU2auN>+Dd9$sjC=-f zqYj7$;+kMe`mCwh2Rta@F^lIZ*>OwW<#66&D~E{P5N>B@$Hn#XP``ZC-Xim0Ugqj> z0m@2RBfF?o7BV{o6)a|I|DBmx%u3mFnIPcI2$axke0*NFd`DefGH|WxmHyFU^MO?f zirR$@BH$%%+7nW`QEMID)J_-UEC8P4Y4Ir~qk$t{PY+ivTS6CJ(!;63Hzz&h{9u$` zzI@3l=o4OO0q#=0IR${4Xf~Zg!0uXwG_S5K#$i_J$>ikJ)d_&20)jrnGG0Azos*l( zY1kPe`RhkQLht@eWpNs>)wDjZl;KH!Pj~lhb~0d(v#sG;A2RTPVDj!U=h771W;g0S zepZGH-U6OJnUwvI=Zm1PYhpQp;sDXfebv{%hL~WK4Gj(Do|i#$uUUV*JE9X7UXTwU zS@;Mn6XWg(LKmomc$%L5rEazR*`|gqJs9i+pu?f0ae>JCNhl6gZDaCaG5|UjlCb8g zr|0G6Wm%WOd`2oEA>rII;o2U6lp^BY(9M{;))TEoSJmje*9|y!pLURxu5r&Ow^#-O z)S-5h+bC-qIHSLkO73H_vjKOl+q(+~-TtSV4^mP;fBl*;p9(D2Bb6oH^LvG|f4Gg$ zrfa3+0Wkn3h>If|&~adt=86lz2nXnxnYFQ}&F(JO!Q=y>#_Xj<=%%{iDykN3Cy=&yJat2F-4U#^I`gXfB1=;ujwN-=0Bgk z_6K_}Lmf=!Drx*UiYf_XHq5s1{}W^Ue_6}_8%sR{CN_>o3{;)1d;E^|zcc0kKd&Ao zbIZ?;#0=21n0o0Y(8dC7J90tXN7#z?cPP$g0Y>zd_s2$;gL;qRu!6#0+Vvjw*>czc znm-Vb=3ttGlF_w>9$!d_@IF{u&l4fmUIfjF$@;BKk=k4aCkwon@;z=KRFw@1H`AO| zimtFrdifP4e(1PEA^1AyT)E}`5QkN_#N41Cu8p5mbM{3>=Cv%E zuMSL4tA)s%m4z>k(*eSJ*z~)1+x8f4cYX!UJLXel<_KX*-i4X-(^o>ZZg=BHmv0Xd ziTdg?D%~#prCF?FDEK7c)+Mv{pl^4$5gRHG>%aozsDsk?kBxG+$<)G!eoJhx24FHi zvtUk@%=oqpoz(BBw%87!bTn>WHX$KP5=%^W`8D-7La$D3;b$dVG4K`=pWoyL3mIq1~~0 z3B%O&NyLwev=&P0qsTZOIn4QPBNz^+?azhu&+ZMlZIxzmzhKeiM{#Rw=k~2Nl&goz z95-zNgr3&o$9dxszN9T&gmKg$0+Sqrdu4QM5Zp zO2MsrV23v3mC{%B2?Wde%h#&;F18{etG>@AyZpVphO)LPw!NO@9+B*+gV>wbx@o73 zuvIuxs-m;Hr!$lCHv!`desWhT#ghn4#0`qp73;=v`EW5)-n|X_`qYZRAu^#Bb!36g zooTroW>OfBFoGcy%wZI*(2roL;}dSV1Xz;4!O^LOWItXPRYYrP7$6^cm<_te$k&QL z*|RWGHN!R~Vv&7(dPm+O>Kr=pYU4GTpe?@H_<$f%(?q|;EorwS&ArOsMD)c$T8g#9 zROxhIL}f0v&!5lr94=d>f-e{6a}#Bj4h>$YXbW}Bq(zTco_#efm&Qy=;$fi}xt3pw zY3Y)pdH5}7lmC!h&_(HktCH#}%tQOCbWQbi%H?f zk1K&UJy+~cZPqMCDHLu5?${5Kpp1g$$@afY52^>dxIHd9bOF(&YO=!Gq!+$vm&_@c zvTAy4x&uO={*A#}-JibpZ(JIn&TLq*UaMdfR5OXM*)3?_Y#;ydQ25=`W3ew!1Wo(H zGUeo& zyi^(t&uJ&FfLrD#YZwm%H=NmGYV!TN(5Xt_<=F|yYcIX`AJVi!oA-F|tc2UMnR0T6 zpUO5dpHd2FE27z6>|H)|rafH=pIo`D)Y}WY8LqjqCXr1x*5ZPh)fDubs&E?4pFFtke3%!AxaP7`nHO0c@up*e8^#NAFHU&=@+c%qipF5 zTY;*=7FD0y8)WIdaK7U;2_7%!Fgg)t)7xVTynDt33VcWE!M3cj+`5OF#~0dlZbV-* zcFoDIyJW6i_U8>wX*IGL3N9VvMIeG*Z4HG6V5$~IoFtZ;ipA}#h0 zk|N}pC2@cQr$EJ8L>!s^jm7%gTuQy$FPyEyI$v`$)gy*2#*v95+ID~2jlGJr{07a3 z)6Stj&+rv8l=80?4q*<* z2eOlW$vvD2WlLH8wFV^LA9GPr@Cv*-5}SmuSW7hXIc#DhMCsAw_|iR+5w}PEt`sV6 zCVh$`y*@7dshwBhduPL|$M(oUnSg$vQe`_;kvUDhp;x(zL#kGyyV>_;9Io{@J&CaU z_b(d0RQC6xJNurVr1gmH7lDYqk=@yjmuYtrdb}_WC8vyRR>FN+tp|eN)ojEyb(M^xhc~pFU4Heeu{vDL;ue&s{HC7*$Ef@S9;UD;R)uGDJ^cE}zh$`#K|b!u>h zFK{8{JDU;B7tk47cWI7)K!rZ|?KnANQtBLS4y9%iI7o3FsBo(V>eOp?W%uLfDY4qu z@0yk9G=JLog`(Za2t%dq%N34N2!NrOn3zraPi6XvXLa)Aj75=Yksbv@BpKtv7>;vn zshj(YzqI*1W22fS?e@~|>KqQ~&8~{pK_A2!8$5yMy7A&^czIE$o){COdKLJk80^$fw=Evi#AE*GijqjE*j=X zCbLgXGKlk&Jyq4#J#&AyOtEUA4v`B@Ubav^(Q95N_V{pcy2&!lr>%52Ki-Wm|mhp6l1I8_;VY^*1 z!hVs|1=&etu?~PIGdVSnS7lB8z(J5>s%1>xvT4?JTY?dRre}&?U$+&1v(rNCQBFZk z_;OI^yj)tpQ`2&LMiXOEghopHw?IKCgHR<5k|;72lqn)JYJjML7L-Ad zJ54c$IMhT!FH8W#WXmK$5Qjv8q6yxi7FrC}8@A`!zt8D=R?lC!!wYxvX07$Ecdfm? z{e9;<=WnO&{^7-KkB=PDfxqWIe@6~uKn%!%-S$4bTlM-`XAM63%mM4N4?2AJvZm_f zcb$FM(8r4Gm9tu}-n=~hv~XJcVXd#e{RG^*KYG+Kml}Nf5l_njDiAn?nzS}ay;}3; z@N=)Mvky5egJV;lNFFPUtu;(3$?5C z18_M|>ag5YHE>#yJ+luyaCkZLaMq~HTJm|(YSm|sn#uvRc|+u?k9A)`>{D;9YWr&^ z1>*)b2EGy!a^$JckD5I)e?|kczdk@q5BkW>@3e61DKR4u+2C67(5uS;`&(u{$70%sfNXCM8H=_7B? z>|tE5Q4QAo@SUH-S&*@uej;ls=fNb$6P?4TBW4btcmao1Yae-He>ru@rB80$%~8kR zsja%?s@5|k#)mV9O)dWLoi9NwUFW5i%wE9!c4r;CNx{}97 zU#~f}K1}Au-N?LtXB+2_ymlZ8e-M*hN8U_tuov}$Q)L-XVG_EMJ@OPoWgp+-wS zbNcoWaA>WS1MKM>_RIX1cwntL{e=8fwZ694XXNl}a|B*Uf9gbP(??%*m6OjHjWEu> zz{A1MzSf!7S0|F^W|)`D{%Ernz?rLh4pv@HjXL*1H_b#A7-JC$xVPiuiIo>MpB%ot zTxzlKShSf>y?bSEpl=W0tImG*PFpeZZ#!C>$N^)YmK=Z_$N|s-d}`qBEnj=ft0Cup zTD541)d9Kee?3lX4>ji0noB=*l{W^??+iJwyj=gnmCT0vSfQpi^wWU;{l}cs_PJ_B z+x?8&+a8CUHS7o6M{9q5-z{puc|?&*BM0~BcK;lXF0aZ63z z6To@x>Hs%;&Erpx=&j%X@XxlRK7D?B@0?F`F6-3VQ?CEosiYTate+a}Ay56YA9{b< zIrPUiv;~i>ZxgH64-b9En_g%;+&I9uo^RXVfAD;J*Y(f!S_X9R?3o8F(0Q`}8kYL3 z*TS1)*(YQ5=Jb)ZTazS`zJ{A$~2aOgYsLw})d|4k14`L^Bi=i0W* ze^%#kNsj@+i%rN?LCXnZnNec(q?>V zcAIw7o0m-`7~ zcm`!3Vo`N0X0C^p*P+&!mGh5-=fRpgcz?Txbu9X=ynEAY=aQ>$>aQKNADnkwTYTcV zUF$Vy-2xzyNj)`HX9HW#gKTVM8Mf7|xVm0jb3|KRs4 z`=NXASabH{K(n{VJ)H$OuYcjDuHHyq1YY%JinFW9N4{Lygho2jG*lOeehc|2Dw6@KK54Y{k_;Js9z#e)%ctCIa z(-Ys`!dZYbh!sD)fBP-{+m4GGmVND=`w6t>)N!NzBP(I}pzX9RLsH2UWB zsS#Og&Y0i&s|T+a_p^qW-}k)h_u6;UcMwmwJ{o;{_ji86f5r-u!`1;sZ$9T!ZMXfF zv|Z;Py2W2RJNc>N>;va@REuV_|HHLFPTm4Jd~_Us<&CXDCvVPt)?_|)<3Qdy?NfbVpPV6c zU|hZWTBn~kM2%+w=#x3D{pB|Mw;g>z&W1Lt4UEy@e`h~^@)gvJaecEs{hCi?POWvu zSoJxFT>5U ztHZ)Mn-&h_Ugp#>SLXD|r*AInfwKT-5X9Lhb@0R24%VmFjm){BMQ&)Fc1v|~^2GKt zHm`4;e>!|)HCbyOU#Jz%gsuJSjexg*<$!%s19H!CGl-G@$L(a#$Ds?U0DYUJGyKK17GlN|d=MeC9A2ssUTZiuxOOMoHg|YSceqxgwcP&`@W^d=MdS|r;n>RV+#T0W!wyQAnIe}Bk|ijMVj ziR)MGH;LS)Ll2xjU-3Df>oxQuzo~uR3GH+2_t7?Um^+=(u(M^se7{alU&j7I27m6Cgd<@1=%o_m_3}W?1 zZN~Hw0-;C=01^;H+gyKRe=!InHBOT?dNMJTbF(cFIj_%|C-U!WuCkxkh%kS;<`#1< za-4R8pb~~H4Oqv`5d~x!6=KVp6$OOVV;1StUNk?!5CD{rm_t+s0kB#W3~jz+R1Cn# zim_qUii$!(U*i*y35F3AlvRQ@FeEHX-s~1J3J^4ssOUT9T;~vTf81)2P&tq4!TH(t zI?`mXQIm~aYr;WJkz>sEda4__HqWXd2q%nVDl3Nb3yfX~M#UzLr+Oq9#BHq-2#%G5 zd4K=}Rtn|PvZ)zowEzH@4f^H~&}e*C3EDt$LVzOx0#QrHnD?f6W2c+j`e^f5_BAhI z&}heqIhVFeP5&7vf9E+~qCJX#U-OkY#<^Aux9`u8{rY*DG&v1NR0Y7uijiaHracA~ zV-XIPl-W{JaEuippFKw9F}LM}z&;T;YFQbpgG)%t8|}>_Ry(B8eFey9n>m7D&b;c!Ge_I&m;-gp z5v>jalX?4$De}Ug@fwa;M(A5Lgd!uFdt7xBDipQ9f5601!a&q~Az`19^9mB?k!umT z;hdI}W)@H+7{t^BM>9O3KwIk3lN;9NwK-KinyeDEsS<)w`F1n7vEJ;8^jlujQ)z0> z!Biqug1nW%xy~`~`JPAH{R6-XKwe+=g@ASfZqA)U!LSR2Zn%jI@F$BWp z1PBBGe_?)~GoO6`Py&$^1M#?;Q22CG8_uR$MlhB zG@x!WZEkYAImrD&f}z=aGu^p4&gb}O>X`7P;bkV*Fe=9~zf|7}!Z{_z=#LR40E#@| zIA)(%U{Ec5Dj~WN-Q1o$SXNv%%Iwx=*>FFR`wF3PJ`f0nK=|ltEI68hJs2p#NEotm ze-K?xDmTjIBP&L=xl!DNQQlBY)Vu^lBYV>|mwx7qzVYOoek}hDuA!<{Yu9zOw%27; zjFU5x^IVjlg}Dj9Qn4S;N7&k9_%t%xU(DWoS~2Re6(d_jnr{vWjN}p$j2DQk6!zVG zV!SXU5J*tS@xB7{dob)5AmnL}FrfZ%f7Kg#%t0%L{r3I7VcD`}ljt9F@C*WsLzL@0VND%XDSW1Hzee{kUP zVb$_|hl3A3c)0rNtA{6^c%q;n(kH)a#lAJ~xYbJ=OTW)$l@Jd535t<1%=EXs--MDc zqnmP`7oOk-mC-Z$Op$`-&`^-Ueuf$zWW`N9~sC@=TV(ciFl2k4) zR1CjgNjP#zsZD7!tbZy|00A68e{tUFr`8YX@%hi*J)GNe0D}RE=q*Mr&~9Fkb+2p31qlHC&@LyU&@={uRIQb9KGWO>i{* zH+KK(aPMdSrrN@h00@O`=S`2R#@RA5TV8;|Z&rQn?b4BzfhZuf%>#i?eK`nfw!e=XB7Klc(T#yF?Iuu2#Ugt21qa?7OzWkoPYo7}F8FC2F5 zyl{e|=C;^Bq7r>VAzC%45>^d>$m5x3{%g4ZZ|^PgKX>OuToz`)$4DnS1B1BWmm$AJO?#HT*-hr>4?e{A^JZ{0lnfBc)y8-8@_`eEUS zRddDyM4HVKLnOzTP+WQO+bWt@i~|EuVDd*k^uggHAO2vww=?6jdRQ?W^9#1B7*+`2 zm{ktqA{bdIFy8M;=#vKuk9S^j(F9Dr^lEKo^_XA*1dNMnan^|&$4{Ca5B%f(!%0UU zKHPZCJL`x0-J9M&f4s8Y;PYR1=5Y2&3+;w+Be|j6$Qcwsu)Zxrf`Pbs-wPNCLBfEt zBB-2;F8Zl+hsVG1_2C28T{E2cvO}jlhHHAlAq*HzALYR^!Z?TLaa{2FS6Bb`kAJj) zz+|e2%ZU|%wiQH3vR``)!4MKRo`L}cR)R7+a#RTpD@L_jf3#vKsskI(T0X`xH=isg zREn3krQz0Qejb2w_nn^}d$Z%IZ#_BOar-BRzq{wN!%e%dEijbJ1~Am#B4BwTU_A81 zqho8nVraHYgl+R#SXUW;1+P1+eyK3|RogbyJk1vll;5;E1{`yHjM=`T z{T8oYUhVn| zMf(9?)hdHO)bky;-h5L*!E)jg$ljKc=hHszCM`dIf9tSv_ZgGulgDt3&MKh!D1k6f zy!0*S5C8G-SBD*&kE`6-CvU6e@XKF%V7Tt8cMPvR^~7Oe-QrTB$;fJ9j)Pq0Ic%Tu zgDA%G0X<=GUG%Jofdk4Od@w$+TI;RIW{P zk?%DS`Gg>Ih{HFZC$&8V2gYJ@-xdIJsf2_`e-+u|J%(Ta#1w&~wT*Mew>~hq#0bb# zP1>G=C1iqOluL|{s=(pFM)O^lUOe``yMw2cTuPKrCsd5X_WS;N1YPRrD}{RX$1kn8 z_N^yQP#Cj1V6<)XfBHwa4ZnHg`>IW)0Fs|Q=QVZymUV{=*S_Pj;l9t`JAC`;r>Es3 zf1^McIeLgVoO9ik^GnIY4?S2$pSgXuZ}V$+0I)I;Z7cfI9s{}gq*^2#7@nqM0?UU` z5M4@qtR=@B<|Yh8mz0gX#A-kQ1$&Gu$7P7M@shS-dZ9->p^VFkFwk~cIlkSneO~mU z;jX*x8qZifdLYn+f3|yg?z!hCI5a#fe@DN>7|&=+;5Q$8Z1~}$*H!=TKX=b?&E>yX zIDBL!e}3|| z->V4%*yYUWfArG~v*Ef#{(?7>V%$kbMLM_IY`=^ZYke?hkJH zomS>AFJP{38_v7_{Eo_h_=fA-GV;`L^RMl0*Ury4QxAxFVc}=U7hL4nf0vMF9>>m~ zeq+0TZ9{tOkp;;)r=47VLCCg%Bs9}fLPUUKr4S4%22fx$%FSp>K#0}ul$B!2HPeIu z01z8d`osyCrXGxhV;XC1mJcNy2?jUs;Fr9(;JEL;`|3vK9>a=}P_V~vAAvC6HYOVZ zgZSvbKQg>x>-y^RNcx)gfAm3~J;eoY_^~>l$5amB5Q2olxVN@1xXkmjp)~!b>#wb4 zBsZAIzK^QzGl+~W`JeW=&p>IoZNN|y1Tkixs$gZXO4tXA`pUh@H=lejl5p5Aa9YIp zsWOZ?`oswiBK>xL4@Omvb~C)ON3MLyu^^G_e+G5Hdrq&X5==%t z445ns!oq8AHkiN!0NajSQ+e9F;9@=%<3GRsbXANr*Du59XO-Z(5$&9xKxwp*4d_p_ zeTT*;9On9Eg#5I}5D>v|^I6qnG+HGPRFHn$Ic0u}?ki}M6A~U(T}rGDSv{;4HAb$C z<+p;DJKQ90+zbxKe-nf`Ajas8H6DG?^69Jh{o8e|e#`bbDAvApdqI&fDEAh$6O4oh zXc8QAj@Mjrt&b82b4UoBOH}0jnap7>CJO@QXU@Fsetv-=5d23wzT5%|gvml60GJLC zZaP)%DPq3+iCQuOj5#&)tQb}azyJ#RRFMJ(lScsND#X~If0h>VO;ihDFiya56Zp*W zCRQA!vDw#9&DP{Tdakk0=NM7d=h7Y{Kp?7y*C!;7(N^?1*GP`@`YMny^D5_~IWX8? zxcQ`F^pC1l1zKAGa?Ej}`2@qbhniWw%Mc7JMYaw70FD!xZ+`A^ zbq2(&4S%U|(1qOF()}kE>P; z;;d?rTLeM?Xrp|0Q4oyZxZ1C=5HPsk$R))`RlzX2luUqNaLc*JNH_$8cKt~K5HwYF z7~2I%yD8pSZY1rBt*5`tqtp&<5PaUnJ}(GBK;`J4O1ODyy5X&@VQFR>YMy?M<(ve^zMqwSbBOEU ze>dIz0oTL6!nW6%{W71=8T0-e05gp<)*>bghXBwP0LL;}$AHA&n<4RV9c*f~LPj z1Bk`%N#@^tBC1Bl$$S86(Z21POJvR%{ljJ)l151v34JoeEYel(tKvW3l(9TC!fBG7& z(r|ML4C6%SpgsO8apaPMdb0(57te(lb(0t{I-0K$F71PMkr#{bw5eyqZg{ zNn^P-+C)rF)1R+R%)N;)7?;{>2m?_-oHM=0*uIX<<_r=yo-QRAolA&vZW%GU$Dj=$ z{k{SL#@r?pGpQUS6t!fGu%woPq8Am#DxvnMAnk`13~#}eeU diff --git a/windows/security/operating-system-security/system-security/windows-defender-security-center/images/settings-windows-defender-security-center-areas.png b/windows/security/operating-system-security/system-security/windows-defender-security-center/images/settings-windows-defender-security-center-areas.png index ab123cc49b39b40d5632d2397be2de259624e280..1dcd937bcbc175d339f7631e5fe58fd6c757a72b 100644 GIT binary patch literal 30356 zcmdqIc~DbX|2L?DvZ&w=C=h8yP?WW0ClOE)P(f{o$P#D-L`VokmH;8Lw~9oORW@lw zR3LyXVGRN;QCWf@VF?fsNPrNwgoGp{%%z{-J5^Kj)>~6GGw;;Ae^3_Q%Q^Rc&pqdS zw)4pGy3JnMqq5t!ZQE;m<>Jk4+jbCupNG=Bfd5JQ<@hJ?&vw*J8>?;jUgbI97fCp*JRro9>09kWY2>2I`$uytwg|HMmA$CId7QN`xk zXDnZ5bLLm8h_D&9qSd;p)n(X!dgBRpMMqoA#)`>VOFf&MLh-=Ir`H*Y3Lf?A3)N(8 z&BEx_uOE8`xB_Mctk;3h8F0vgbC4_I^2SB zLyB1-Wr`~1!?C<@(6OuwRrgC;|9oi|HyUh5}OQZ z-Pl)R9?7{ka%v(*$im*^^AZ`QVG-OBzs;gSn!*kVVb1F=;Zo~n2GJpRk{jH-D=%5n zRF?KIdSiu@MN26YEVyjuzB2y@bzCJRY|^lPUJ$g&YIRQyKAc1?gQHjr* z=1X#$uGg<&gz;J1PbJE)IpxmQ9V)08EsEDIIxXBwU`)+q!NjX)1VtgUp%br}39j)K zs(-&oa^0Z`z5kkdVfMG^@=lXZ>H+*)vKizzM)S(GOEH0R6=x^#-URh-t+{G(Q4Z8w z9&?*4kBR&KLB&*>$C64}g3FYUGS>K!t9k5L?P%2MGpn&G>VbER7W>@fjh^SK_!mi3 zm}n4&DNA+TKRg6qf3{@UXpy&+=V!I(oX<;~I7e*z(m?vqW33+q8g5Lpt9Lmps2JrP zZbLN%eMbu86+jrycSv4rt9(V?3p^wATCO#r(EK81aStK#uii6bySzS7%SUIw20Lx^ z1w1$HV2w9AOlFpLm+|~*;P24+y2U1S&Rfpm*7BbNi6CsnXx`&V?#j?cpApEF)@*(^ z$<^Y4pAv#!6+vJVJ4!SNh~*Q@6SRt0Lg-kz@DKvEx%^_x>cL@=*EOVj?Ifx4G={b? zAJZ*|bDhdh1DXl~H|s}P{8uxKWHa(DBOW_;6dK94zlVvk-u%*n{l4IMPsrO8)3755 zkA}MwM2!Q{^#k~!#>A-G{<)qqoqu*q^3if~JClhJZlh%l?ga}SAngsAgW;u9{Z)-B z_6AJ6j2D%a;(`lG&vASf&=4c<;1mmnInCla(~w=eh}H))yH`S#Yp5?v$->MODr5QW z(iHX6oz>CGw4If8+La{!JmM64x*Z84U^kh zd#0~QWBQTyRB#~_17cu8sR9em?-GdQPfF?Qeb;Pnv-GXqk{_B-ini%91YmN2l);9`f_?u!E}qT(jAkPyO~}r4wKz13s0dX8ls;HA_UFcl?o4oZXUU8 zDb1Vle8srLpKxAbY4^NfT_8$qrpb$<9$RlFy+MUJPiD%0;kSV+;=)w!(bn3A{SD%8 zCpRd4=nKe(Ugh^qG(H}MhBB(wBG;D-+oTf+ay#>IoVE`Raih*6wPbt>!X0y66xt34 z37aFo=;7(}Q+M*0R8d4J)4Qv8D&jyDQN%~v7}}UVxGN!t(Ztw^;wc9Q;!E+xG!k2s z6a%W54?0E~-5wq~QFu|RQT)mVrq_*oX*R}54wp)Csx&!t!B<7Zz}5Nb&Nrez2Od7- zi_Ew5PXc#l15bEE7`^7Sh*pil{J23knfDxwEs+>>lb=%E{aUN+JoEP9dFQEKcJuuK zCTl9YVr4#SMv829ii(SxxkKkvy8 zca5`a0l^vGOSM%6PPua8abHyhauY3+Dn}^uKO7kBI+;170e7yzwq_Dkeuox>)#t}1 zG8P!tM#b^N&VMoG#b~DkLox)Yj5Ej9ooo^B!+dDoVVfM*IV`J^O!+=(%-FA#DYM_?u3zcB|@tR2CbrfoRUO44_L_@1KV4=LE-+trdk`x3H~VmhzqS zd&gHN(gi829S+>^h(*U2C~FJhErIz=UT^4H_My%{d%n-OO;vX($d1#Wc6H(hM9r+;_U}qu&fU|K56V&&|?( zL$TqZgKWobCP%LSZC~+TqN8ZJpWTh@-@bW!eg2uvv#&Aq>tE3eT0ejAGH402#G_!W zo5QAus{)tIb@+gb?YG1Rs3gmZ1j>%iOSp3c6@(CDFz#H>8p=+aVu@5XiiN+4sk$}x=g5>$RE;xHJ*!H^KdL8QQDu(TA-@h&Jwjs(>274_H` zmVj-b=QvEBl+V)S5z&j3=#D|!Mc={)h33P^Cz3A6^X%K63!a&!Ipq>wWORPzN2`ak zeLX~?e)z0;87H!?cdzfK&+r8G)MV5+>7lYsYgmF47xW_NB7U{8Lie)3YjD?i64*Wb zG4e@47ILJ5dQJS)-3FgdyHt58S>I0TBj4MJb69hSLvnTbt5D5{%DXkb7h8XG9?px* zH^_4f-NVWFg`TM)sr^vbl!?<9-SJoH`SJ=-Ljco zUi*6|Q=i$S{8BjV26eILyj%^^q~$FK(M`9*Ocmr!$HMA=&CgbS$~NsbeXvICl&E0oBz2+iMfI+GceTzM z%44)_B5JPs+-KY{*m&Y8;AbQy2T8oFs zMv|pNbsZ+fL%+jH1|wahP~B`J^5*>cKQ~P1RVF4$=%$N9ukBld-g-~g4u#Afdo_z1 zsTicRo}L@Cm_c4s!`EL(QL4OZBN#xttEXM#CCDayx$jj)P?DY;;FZO6bK zf(59;Y)Vh;+~@Pu;*_y`X&ui!`D3~@=x0KT%j(onhSE*^ouS6=XZ@40?WlIyn?q{% z4tw}+n_8F2T+k>B#nusa_`s@Om-TulkEV~j?a*XbC84jT4_1|RPra@*6nH27Ggx0% zWM9Z2#$ES<@mS|?Ib&Qp_F&o3bo1`oHxFPB&}m4s&8L;Vg24Pu@u^dZ-X66Xi}6w* zM3Z~qPU#)vXQq!&YLTI+er!_bqZLBj)ShUAJoh2xphVA%wFmX!L+!`l&Xd@0PSmf`rG-{C+GDZXcdlT$Z8gqW)|ni%$W?8)nbhB`mo0Z$5ZJX;{;6s^1AQ6Twldph#jd}He&Xe z1bw=8&T*7fJCBmaWaFmh^ki7wsElo$4R7EuC!bt4P~6e^i2iWq{Rp~!QP3!lX_td( zQociVYCp$F)g34GG}d*pcsl}!UzzIpPt4>AjSb>pvo_@5W%+@PPDY>6p0wZBoP65X zKRkT^Q$#F1C+bHGz)lW;*Bthyia3^ON1^`0c}^$-^t|`^B)1?N@{Ksp+BOQA*o`^% z*#rChYX87@f(i22SD=AHMFd$F}P#kSU03hb5oF+TMfCvE!?iU@Vvw3=f{uC{3>SxJ-5fGX1D^}oQS zv0S8ZG8yF2ys_HVW$NBjO$JA;e76C)gYokf@k4P#cb!VuQ>~!aQ#mkw2(yrQOOGJ4iFJ1MEFF981c96=i9dj$9JZ(fYzGKugfwf0e$9n z9p;X-Q94!Hr1?nmsnSMN=sfS!X^Xkm!lo^;2FnlHRHF_=aSdC=V}`V#e&X1cM3eb! zNH~Gr6m{uD8gN!W)9b*`9QbOMe-$t9OlKtUm8KnH<#Wi8&1e^b4MX+NdiZnR7i*ql zM`yHro-m4Qn>R27>L{<#30FlNaI_@E0mx_{}@>Pv_yoDFWB^40)HPI>7pzUIV`adDHhGhP8e`23HXSKOQ8y2y8 z2?G18zTY19t$Ds{om27#j=i$)$e<0cAa^w_l#`K?(a(-HD7}(GsR!q@=l1JgW1DE%$IsnNk-6&4XM8lz|F@yB6zmEzNMDA9WKCrAPVO}w(I zHVk{i|C{6%T{VTqS{A2@TuwyvW_y~!eivE?eN#Y+ytau z=M}1WM^9L14{_027}F~d8oTT+7TSw@h13a%ok>6qjf+>74e6k zO5m-VvH_oGC6 zjqgZ*g2EO_z&_n_aK}dMOqAE7WUaVJVEDhjC|D95eOWa=xm=6hBLaORZ#^)1gsjM4 zmLz4F-1ehb+z{~RJBrC_jpPmF_JA(*+ogH)B1Ypp`b)B1YVMF}#lZY|CR-P`H!myi z*t|>BkVDN(?E)rUc_~`uLSdf7Xb(@N7}rGeEA{@n+oVxDpsi}{DjRccQ&OVWy%Su6 zFD3GDUU7e<_br;^ZfLrJy18yR@Bn!1c1GZKreCCBuJibZSUa=i%m)tCZJQCSJEjl$9V`5vsGg0TA zs4Y$YN%RGdg2w2~lZlPrUJ9avnRVY`8<9=LFtWooZxBc~`o{Eb#17-zW}pvcQ8ChR zFE`>}8lHgwIVTIAf$(w;={)%wVdTs> zcwO)<*fFBJwWZu@+}!9K{LccM6K&Dj9U?`F%&35r<@3~0%eCqKj7R+}p{UBV1jR~Q zB)mv;CDyO*OiI)Fczn6CP$zJl*y@NU?pra3RSsWA?jd@2_&yMe!K?sIkj?hI-(I@?jfOUCSUfP zZ5-b}Z>$twdp8PS0vjk_`+f8+#_^-G9jwi&73z#~><3v$!J$hT=TK+A6|I#`kJ0sn zF7}<^I&Famqeb4MDPjMF1lw(G!!x&?JD;6hB6L8RcV@E;Vu=29;}GzzWa|L4A6a2& z>@HG4q$40L%N2D`eG~c*CWYj$v<h0dP_|E%tOB4W?Outn3sF>1fi#Co5FXvOaZjQ3=PzUc4tCnwn4Y<{ILmis+f zr(R~te6=WxRqjYqxc&x4c~RHhra+B$tX%x@y@Gl(D>xFv*PZpAMI8}cDm1n0+)Zg8 zb_Lyk6+{Q7jdW`A3S00{jLB1$hp)cW(@tc!vCAyhS_;n9Tob;!dwl}coih|GYI!@T zJPwp6V8(6QSjmXtpV+@fqEuU9Js_iN;usxe*CD3~;jM{|Km%3wTEqO-rvs;0ehsk4 z(hC`lJuAkHYKugYvQB^$<9w)bO`SK!L}NU0s43!%Di!KO z9^7f&1+|d3v|usBl8;iVBZH=u^}<`Ho;z-U|*;9 zGw6Mhb!8qB6pNvTT6}3UPeb77;MMHCbgAw%dZNMt?zicmN)q@*+12rRmnO%i1Fp`e zma`mbV$-ytLZvk9>CaOoPQbMZB_xDN1Ojn1S&Fs{D`D(f4*$(mHWx|xSfjhCCQ%?3Mqq= z?>kgOMR{Q|_gvvenc2{zj60e+*x&xpzib8CuG{uf@1sh}3va*N+E5G#v_^{ibzh{6 zr8M1O2ggTpar_+Ka0V5vI$Kza zPxbk`d(FU?V!!G3)ZGiyFgg~n)DYD(P_+Uu8w7PE(RJS^>EMQ&Uk0sX{*kxaajfl8 zTGi};Wd=G#UduE+Gz;WQCCARI;_9eCAmqh<>ZFyUmqJQZ+up$IX^<&rui1@L*3l{h*V9hU83K3|{JUhETkIB#8}P2j zd-zsKvX^&uO#B+l!D)-XLiidA5Uw}mRQ}$H z7tKb{B^TSY2jc4o5ZGy(nCV|RegzHdC4hNt=clpMGZ+O;JDE=acr%1!4SAr1@O$;F zS7zzPL}@9n5}2YefV;GEYb(xmBs@UGtS4h5_^O#FZ5hno4i-e{w;8B(@(qgp8X|bz z^`HBbT>T}M1_z^V1I_9Hy1rR zZF%7en{?Vnu1`KbiA_Sg4UV7s_darq3_*kf>ES3|)!AJAwPly@|=6LQ+ zU)}38JgxE9Hz#{L{Ga`)CJpzgMOka1!#=4Ax8~~w_V?cOVRwbjqs|6~WAB1xS@&K{ z&7cYSZMk*+h36fIvkcEMPLa&lj9u)9P|Yq{xUzEh)Z&1Ax2lNB}LM(0)Jf?m^J z)4WrE&7iH&qan&Is`ID)9Ud~pHLo#N>P*`!({7GKj5G$P_!{MUQ;JbuCVw|Qrg zN`Mz$*$l<0TJE_(Z?voLsW&gg+@q3B#LDt?BW38;ESM8FC`@KL)_jmylhJNbX;|$t zoJ1x$S>0&YreZ$hR{Fye_hqa^Tz%GM=#`RoL5l9_Rwv^l^S7m~MO&zc$@Swtx#*AF zSK8ZiyuUVhTXcWsds&p7V=2amxkBG-2n>#h4*rIkX`}{6n?Qc}j6cPwT&nwW0ayQ8L@HTGv3(a` zy(#DqofV^6p2x@xnIBlbXRqmlNf;+Kel?XQUbzA}Rk0VB(sBlEp;--?%`(&@cP*F+ z`@&M&*wOLdEqSI}IhS!rlOR#wioE9q|GNb><$EmRw|#n-3p6T2b01YH5g0vASL3Fe z^{J@7AXNqRwL_irk*P*&DWS99&K>wTM?%$&kkGdihf9@FQ}uK4-BngOq&O!Cg~9+Z z9%oM1o*E;U`gCe~r7s}nFF-+hBV>3aP!ld$UB!Q@!g&rBooYK9ivu|foZ9|^acGAs zS*cXQL(1W9vpG!dg8CP3%#LG111LwC)PBypTC8jUS29?WSwt61vGhz77MKrhK$Ibd ze%lKhyHUeV)|6LZ=QraN+g$S!I6}iShVq=@VgNra+ACX(i%nzIpFKzx_x=_!5 zh-CTI&{*sNnYt^&_2qlhTp`|r{fEpMOph8@b7 zu(px_;0)|;Z>YZi3uuG?*ELVBq(=;Y=7|HC zKmF_bYn!frch_#9s80N?*j2{_v!a!_P;K;Y-bb1LIo`wxxs$oSBT+itpUnwV-A2(iGT9B)F4=r zg)DAdY={xem1LoiGY_1wxyHnFrxqZ}hM>75xb8#VDxl!z_ip9bgkgr0bse7bAwg$~ z(qZktNbBi~U513C)8BM_CR(Z9f-z4w#Xd9*IwB=viA3iBHpYO-e?XzDamjXv) z`!dt&Ql1ir4AoIS7Os=7rbS zJd!=6Sdm!5YfjYPF!@oR=(>T+K!VS-DGFiMd~)pOFwN^J>yVWf_qFw(Jg+^nQ(;0? zt?h>rzNV)P5F8%3a`fOkhszt~P!bG{PZ6`xLicVpCJl2~s2?J;tBkQ5(o39c z?!89L1yRFqW6Y^xdSiboX`w3`b17?$^Af1}TVQ0I)P9CV%ps{o@0q5{wFxtFH(e(U zy+i9Cb8LUQ?X1gSCQ-YqkA@#Mj!Ka$88+=LwafNRUFgdG5$gJ;`)AI1M9bypL5kTY zg!&)`^#YJa#Lu5?KR4;;vG<~tUvj~fFK&ZslkX%Z?t}CxMQLD}9#Y&?Xa}n*_|^eq z`KN_bW2Qz=J-hR2uC=CjCzhjz+JugC;ON&E{_^W4o+}!nLcg5O0|~l$f1R|wX_gy> zfJ)y?m$P_YS^I%0kn=9Zv=o-6{V2cNa(aQO_ttt6<&^dDJi?9=d~d^>aZ2DUotn?> zF8q|!P#L-ysS+J;C6a~9ylpsh^|sH|9a@^G7RjJ_({0u8PXOd}U4++PQ}ObnOr9dB zm&HtjefC%leE`cPlAXqjf^p-Sx>UciL3DtL4F;x#KZtm)Ps&-{9mqDKLNoLzcb-6fb!oNpOZn5q(rqMFqi^n|bQ5ZbU-ZCnNqQ&KxJ2steiPStOWrUGCwMf0@OuHDU0%8OaZTb<50H=5i zbnx9WrSxeH6XX@Xeo^YyD7QYLGTr2eT7$%y(9{0*xk_(Q#d`3M1?8SE9j~i>@d3U` zl>$QN1qx}ZEWqE!E7v4PgEU@oV-yegLZ_H-`szsZv3~r}7z3W<+UrGm7KXk~EpSac z`F@;<+}$|`lRj~Fr8(a7#69)D_NSYs8~~f8?|&zq$Nr`z{Y}Q_(CEhrRowYEdr|Zw zkF49$&vysASmT~pdrvFMl4?b|AIqf*Yc*M?PgsUJJ8{vsT3C0ws@z7eE5olt& zckYQ$D|f<)pDTG{f{L+HZg3PR;7{U2I5eBrArEODqu*|bi_Xv*mK?d2L^auTFB-dC z-(%#wC5AjG0Gz1QG+}WFCDwA=%r%t<$$Ky^39Juc?k}qcg1+pp3DRv ztKSnv$vaG;{z|!Ew~V~DD4!#A@=X4gutfeL{=3Zt=` z5IxMcbTB?HsVp0=Rilx9@_4bX_=6}^SDV>|YWIOisZ+acjpscl)~@t@HDsZ>N$qEf zo)gQ8sN8I=AL{9`+?40rGF{K<`^Ft*^(Uipy}er`J0!6Jy(2=sj`2L~x9E-aLPob< z$C)*Y%M~S54!X!~O|c)s@_$j46J7wbtHYHiGSbn+iV*up|Fv&g7cHE+i3k{zJ1wae zcXj9%P#T$grIGs{e5?bO>btJew-fa0=4{sOjsHgAOZ8w<)|3m1)cYOYRnV zwiUf7EiGNP{%VK{%ibXhnK9aK7;r-RR3+VGa0DW4m6EaV^X&u;K^b1th|XM&_)m|d zPth{T-C4CClZcQ^#yGYY@;%f0ON2T7*kkiTrjL2A4dn$`Ng`dG^s`TI+AgBt7Ac_J zkm;>m7r#}|$(24n!2JnipntW5wB>%y5#L_Pm&Z@;=W5Etx*UVcTsqX=SG4V~gbQ{% z?&8xwLc9Wh`&kTvrzW0Ltp);F%D&2!@ks;H7h`1`ULo5L+XtjWiglf7P0e?7W(OFr z53o5?_m9NcuWkB+G^u0V6c4|bd}v6Hn^)sxB?UA_+;;FKx^Z3D?!D2aSRIMq2>`W*MaN2KhPkFmiLc z0vvU=TP!XVP5M^u#9s1RYW;)TZ9sNw=8gtr;kG2GH_1R8@`$LU&3SvcM}zv9c!hy& z+*4QoREx0G%-MDb=m{*3&2;>H5hsAO&UbV_c1`6&$bLpbUlois!-pTG7&NLw5!S^a;}&(e|JV^=@HWoesYo=(h+Su1f*O&hJPcboeaAe@HbRiTG{VU$k- zvoY0UQL4FHG%$IttR0RVG=v7<5-%=^7guE$n=i#e4t5@PMZoIIVJGeDeR3}hT0UM* z?@M3KWsJSHzmVIebK7E^#_@kX;#&Xybb>4|${)*}Mdtp@c=e;`(a+oqM}CCl8s?ar#>r=C#*7@AXx+a}>uW4gCwrSiRWYY!R zmtIehUEsJstPZm1gIDJ1PMyb%S6_#Y?mKSwW5u|_V^^q5$oJS(7JB9*$(uNW4NWO~ z1V&*iv6PwU;{>HLT^Oy98d+{hE#nUlmrj*fh$4XvbQIFTYCp3+V>6|KAS^bF%O*?W z6DB3=YKnEdO9~hb$?1mdx*emwQOp8r*%OlWWaiYD!O`3#*E*EB(v#row;TE{R+_^1 zez};G7t8i4q=5kN?}hxI)*Jk0<9JM1VYRCT z8apiH328vKXGW3ms9}rYcafY#4U>6!ze!Kfo11&1QPm%SNn=V61hnBgiG_LDb44Xo z^PY!YV~6N(#s&v}X|$P4<;FXW4?M_a-`rAw=HB+68si?OT2CfD`|8x5UUE1=aQ`IE z;7YX|ewI#=u?pXzOVB%+aBCCL8o(3{ACKZ`S(y%`9O-aUa6tO<4+k;a2F8Zo%UV4V2`xZoOxb5W1^;O z`Ao0T!OBNcM{}Nl4PNp1+3a3$xBc9dTfUhi zU>~`9;Lr#cDbfpWddl7jkW2E`7E~=wNYIjP^Kojm^0fUr*hNi4QiKr&=!j`_yUWyV z=j|34dQ6;0y8=~Z;lfwLHBlE_<|#TR18LT(P3xR_mhHCT= zH}TXZMLdH3;Vvfwx`Q%*=B)Hh_WW;kf(KD`!igV}>j>&(Dhm%eGJOvcRPhBTU^kN_ zyghi|&XEbk8zv7HFU)!0JzF`>I75#}#~1$Fv~Ru2>TclceSzF3L1fh>%7l|++UVaoj;8=yY+Ax{p7ZzGS5$| z^i{pgB5}M57E!Zf`!AoC=~6+onS6Cip@zQVptj(Ze3uI#AfJc3{MYTl)K^}e?pr{;5RwpZ1r@uRb)Tl2$z33$riAgONycRI(M6lG!gSqiP9mL<1n zb`y~K6O%Xjkf61?1PcSeOL@}*P`oF^!H2>#2k$hner}!03|)C@(;B=|8;+g-B^ATh zApXOKZE%gWm%ekjl3Rd=Rn~rP-KWfn-$09IS2>!AILWQcGdgMj+M4q+1t_D_5HZAl za-Id-_zZLNsB+&q`bevO;_u_OX&hw!rTQ6#f7Yw7pH3LtcyunQ)?e)2cR@%yNifGeEm5Ti04>uDhtzMuy>J*kL??s$l4uj3RJtfz%(FTOfCd;lq&pa512dm?Jd zeX-sGT;stpFdn4yi2UkB}ohFl&Q4%marG4*Pe6 z%{S=hdH)P%hDp(1!6;vDbFN`Pu-;3&CG-S_H%_8^|8hM#&nb<~VMG zVcb#Egw?z%0lFO&F!xG|@*Gb0o)|mP9jT}V%|~AsrT_*Oc|9;3M)!@fd)T|8uS&i} zK6+qS2{&cGp3it(_0BK14zpl_!*nNi7Ldrs|Bg%Y)X7Qi2Ojl0XUa|ois5U?ny)sK zrm}uGV=7*Ez~i8R*LEr{XorjAQ0&q^`WN#Q1Bt*sx?{Z$kti!Gs07!!9Gt9R3Kb8Y zC0N1xVs`QJmFkHXmZPlmG3c<)o@e>a6o zKU0~H$b;&{H%d0lULbLsLq?|bXbY{Tmnjzu8z93FW(fEhb&qp)#S$6bLU{$J{EHw5 z3SwFufV^|zWSH0Cjn&sHz;Q0#7$VVn2eciz!*#SjtLhe+J!Wl}i+0@(uWkt?!zrJq zijZBw)Aw1|I?ho|3Q|7TyWEP&Ijfc~`cd5j?zCMmPMw-N4?3EAegGU=!<;IC(}CJ- zJ^t-P*UE|xk!=|m|+L194e*hFhVI8 zc?D9L|IGM%j4B8d0+xP{DkJ`FM^l!-)*)S%(6H^t1g|26Z=i1qIuD_=v19t)pNuTh z^E!U0fBA@OXD@WEoAjConcz7kmHC3fbpVPST&uo&cC?%Q!nC(7`e_cqej+}dBOx@< z4*0e47C%&Ih=~R!!MJTZTq-X5A?*(ENluKX3tS*ytwZ2L!wY$P{e9ho8 z_L#vOu2Qb)j@?3CiL0ZrwW_8Ft3x7xQnY*cyCri&Is-j#vXny7`*=C-j+C99pg&1p zNN+|qm#I@NbTIz84?AP#g==0gfyT+Vh;P9@i_Mo!T1!`OG{l(yG^7SG^Oh(J1?z@{q!Ob4)R|DQYQT6x64J{Qf9)4>3B0xzw5fA#>wdpQ_I*8 z%^z+ylp*!dmTUXwE|6Z{wl65z+m-}R)rtKpMsi==VY10$O|IhW4(E#4+OT)`O^i&S z-6PE6=?w=!v)ZMOTC2bE^ z&$Lt@-5h?Yi{th2=lG{6Moi6-f~hz#dP!HF@rtQbL4yD#9m!921!vz{jkQ;tl*rMC zWV;fktiftY$n-R=I}X1b6<^)WH5^a%tU4p3mC&RN+i{3&q9KWQyEa{Kd`j>=wVw^- zQ*-5<;JfnkTDvns%e%cL)KTyZCs(BT&owU(N?IjJj~+@jRh7m4=n1XHRcV$I;h}C8 z^!pp$0pG%asO^t(%D#m{b_s1PwX_Ty004I`y|?2WwESks&d2f->BKXi4MCI^9OHDu zON#KozQTWsbOG25Z&U$-VWLx3iY&o>ZPNGcIMW@PEa_NOfrmsuv3r3LH@yDR4((zx z^LK`%I_icT=7i;3sGb5lqzpYCasB5Ks&nNHSW&|=o24}I5jRv2MoN8xnh-`zK*5Z4 z5+woMoLev`cg3ZBHPnsuH*FE2`Z!S=maOd0ko~Ww{xbsCVG)J975>rSp{(Ij3__8zn8K z?Y6t!{3(8&si7VHZyi#a_X*^hsb<4owd|~^tDsH>I{BKQPuu%@rlHGjAwyWi`<^OJ zj`P8hPmrrAga3KXR?@wV$Z zpiiZBw|7pbk8n>ZdTZ_38oZIzeb(=6y_za&_G_P($vvLOF_ui1jGi+tv5rt-%nxhkJP|j`rC6#VL+f7$as5C*gg)SP_ZliSWTO;i0Gn#iVRKC6 zI)6pe^K>1E-#^`tR=#tPzM^Ud>FxmA;cV{pnEN}}LMp{6_EeKaHwc*#sct)38l{9d zcv5pDOP^}@l$UDhkoHDo>QX=R?G|_D%pvGuDBRDpCkB7V2PO;cYApY;wTrN*fWb|i ze<|E0^X8BhVp9{H(kc>vCdV+dh+`z3obpcKrhak$?_+Tg)7DY>c2?oWpdT)Agtl1?8QW9$vqG~> z9I;to&h9o)sA%Di&P;vq0C0JcDZ1X`Zs<%VQb;P?oYNovWr!amvU|<4c#B}(7z*}Y z_%mK!+ar4AbHzfd{nq9(V;bQ$xU`*-J>=ySewbsi#spqsaiT?<0O9u(V$XgOQ+P2! zN`XOuAOz5$deckwn3)Wy_CzGJ+-KZli=_2m1JYq#<+}{N;E|>6@Qqr@xbMe;nuAR! z_5hN;J$}0V9O1aRZC?}aUoqj-;-z|#nAeJ3(W3F!d|vGp%W1QqQ*H`ve_gPxRR7=F zJM*w4_r2XO&2p%;G)r?JSDBXOSSkvVx>uG~R&K>|j?_wVA_qjY)O5EpY_QZ+)F#V$ z%6WDLIa1~fPN|?GPADpfo*%7!_Iu8?-}jIAde1rgI@k67Ey4pl{GRXczCZW_-2gV^RgoMQ`}i6JsyY!nUHvnrzH$ntX|vcugVnj)Dw$=HrYQ$xN7M zZa8s)eBEg3e&EfN^(2E;u@YrctF0&Ty9r89lcHxr9ZIYmAWCOoYU0T3?vfahAkz4n zbU35(#)+AM_h<;N69r*s7BLp}F4YUb%CQQAv6qYu_w8mUA`}w;E@6It@PA9f>>cC$ z^}i*||CTWSt3gcaHi3}2QzAZxn>8lzlz-MjG5CV&C;`IcUd<7NAFuaJPcPO0?>rp1 z%5__tJeQcrtZ6}ru`@#HA2vGB3(6lKvO1r^|0!v%PdqOuO$lhvF~Z9-68i#egO!NE z04}3|%Y+~tsoMZ&EddiiG8&tQBih9WhR_Vrrh>EqaR^WJV#WA-;BN8#PUd&c|w6LqGWQ^oH` zSCy(wTp=e-r=zkinyIluVWfFL$x_&gD57;-4mMWC1@2O>6R|sD_w{cZ}J^D zjM1Nz!iXcoZZ{XLLV@v=LX5m0i(@um=QTfNj zuYE77G(4bmq4B!RW@Hf5C-T=Z0-EsrOp9DjChnA!N`ymiWD zr=O%Qg#7fAC~ERk3-4y{YN#B7+|QMh(?S7hg$*JDR(`HL{k^xY5&;o8VW)~b-57=; zNE+vin&Y@Db@|LQXYWlwGhclD)FVZvU+<{Cj!=i`A|6=uo^c?gyOKkVF6bFF9uWWA ztiy|3jMt{UlFem$U5=tJ=}kC6r?2GTw%UAiuLSTG-N0LX+o2J~wp3SzthKaPJ`gn8{AT+!)DN449!lno>{qy?EqNKkWcJ74r^kC;0B zdaJkcwPJNZwUP7STcR!#2lvKJ3IJ3xRXRozBg2!qbq&#|x9TDtB4&<99Ho>HqTk8? z?J#1-QxW9H@7;v3l_h=$C)PS_q&pDO+p&1p9(8h-Sy@8NeflIhqvh}eH0jOF-KFzq z+Cz0$ExBsvmSBvRqr(gna>}9|xs9!;u#%u?KEntNn7y6YXGoDRpa9Xr2;R&(la!1! zeNzxq9Nr{p8gI5|Cg)+a@*pGRc6rs{z*IVCAN_}+m`!wc-l0HmO_F_@@8C^-&Z6g; z?OroQT*Y?mG#Q(z9WMGC$&hpK$_O8aSJdLEw^O|wm9!|;2$1y5Lo(g+6n!PobT1es z8NBGpX4dY!rptP3=K%6s3%DoD_QIe3jB*)H)@S{x0pk7U|1!QY)~{3mFA=Dh)qsf3 zDJ|XlcYWzZl~tz87I(5gAxlYM_JE}Wh?$9@;d2HfVJEsTA^2ljjvFg3TPu_O`vg-U zaFsb@FQ2r^Qf)KRDk4*E2>jI0kWLd?Ko94iWKWgP0;6_$Ar)US>6_enMnQzCwaMWf zK=AThxB-y*n`d^nxgqa8IX zQGWa_>~;ly{IP-Nwz>ac4ujE#{}4pC|IJrcH7ww|{7VP1$a`(FH0&ech@){DWg9Kp zn`$MtBTUQx*N*bs#ft6a2lw2lbop}(^W|wBzFTo|!SeFV*S{=WJhXGhXhEq-F*(-X zK{TjT`I=-0mFAZ!X*-1S?WI6=kB& znOTDl*Zev1A;&oRcNeyeX^a&%pJdqyWk-1)hDl3KlV4a2x+^Q=I!T)%wNp?#c2WNF zG;0(~KP)G`Pd=7xj`U$1oNiuo#kJM|aACUqU~qm!kHHF%Y%g2XR{~6fl`#@Lzi-@5@C z{m<7)sY*5AdN_5fpn#dc7YO|Sl3LFHGb-kAkzn%q@h0A+D$KEG1gQla*Uzz#@QPeu z0aj^%FG?^ey>0`LOSnKpe00D$#BE^HNbLSTV6A}WNDh!O?Ry1Fk8Cqb7_7%R*h_o( z6VI(Ro2kQQ)8Cf>H;xFB1Pkz7B=}BZsE0QzDZs#oC7y-^EvFaPy+h>%n%nh~g+lqIF1KN=>T{wU zNG$zXtBQ-fe1@E{y-Zw*0G+1-|CLi_+0^&kXupqm23}QvD)G>Hr?T7D6&H;y%fuh% z1VR+*i{cl)z%X0Aa;5HbJq993@p3$Dz#;|aSxr9F9|Y$Mqz^$7?}0=9#NKE5Q6|S= zE{`Le^pdtCoyDWQZR(FtTO=L!D~3l@{$4!jLngU=Qq%qwc~0taW93ZYz=w49SA9ls zPw-p{GqB)yB8qmhJ^ zk9dGNG7}>`>r7VTZ^YGcu=SG^3uO2W5n(t*0|^-W#rH z5nIcVm-oz3+ER_i@5~LoEZtHt0cn0I_byDIE_o?0_~3jVjoAgqJh2+R7y@RQD)g#8 zjeaL%jI;SgcJ!wSi>^S9y@ZsrQLK^8;b6_W^`Ur8Nc|Rne#_jqnN|5iVXs7EneP=4 z4gmiQ%;Ud_ogE2TRyg2-Tg}o8A5Dz-VFlaz>>Dv&ywz8~x#AuHPJ8$+HL3FTcR8rZ z|4sA(w(XWD6aWCvlw&}BU?e*H4bdXM^HRj(fe3%>=OEczYWbrA8Opg69Qj*5p!m`n zUxL2c4Qw`K>r?u*m}`5&>eq)xDrxln4}gNTIYI}g@cBW|DL~zD>NRiN-%a^*FsGldf(5qySx>s(yu&B4X*ukNTW(EZ`CVc4+x>8t4j%Uw8R*H{>7W z+m{zqwe{yVKjF7@rT^q8GW7DyS}O83a&v>Swedr(ew`h^y?=x|JbyCk-eROTVM+C`E=A`1AdR`ES)ztRGBHa!=q<$d{+ zo11MuS)sLxtYb6V&M0gsId0zV&)y2$8z+_^;vnoZLN#hWi3Sd9Z5zK-b)WCh&bILU zhOYgBI3x;P+2Pt-@)9P>e0`ESEy~eD@UBsE3hKD-PLVf+jnVy=;K&%vE||~IT!Z3r z+d=t9bsy))+bX9v;gst6I$l4_yF|;&m9OLz{}>+M0gk7u`7TINid8r^rj@HNcs5ns zXiMLP>!R-c^NH&!m+jl}_7H0B!-c*Te4O}8hfMujh$vjAD4Q}qcRIII7C%kiEZy1UNBBvJ zF+$h^cRhC8`2n@Mt5GVtAi7zyywqX)2T9`Ng>!~)AxP!hiP(@?r~*%B`8C77gIv{> zRUXAij(0tG`KF?>lv8Dz*ITLaDAqCdQbl&w$Q@ecrtL^~$q?RDiBAs~AUuM_;@d8V zXa~;Tx6-d}85EqoYEYoNqwy&u?|aNI1DT-DWJULb)ssh(cfBbZiEw3h$7T-d=Edb? zUKGDXld%na#}C%Io3viALG$P!lbn?htm!_UKr)s0IbheQg*Z6xR~<-U*%==3Q{AOj z`0gZL-gpH@fxj(HE|>kPPX&gnhZ9U$qFm7;zjyc)tvGGG#Xc_O^kia-wAp|)oH~n2 zjdqzaBsv3m?wTIU#-iFJe9%Ml&%=LUTd|#I)UJ~Gm@krTTc6=Fs4EI&0~_meDX6_a zy0latvzE7^zQyuOS=!_Z&h6KqZ8V#ASJZ{cX)!*}%~g;5Ns=`t``D+O}Y+;8f& zyT!-K@jmlAoxO%1c?)dMM2ct1GziudbZo>38X~$zjBi({o{>Ii_dv?m?6*Pb$jZg$->+@9|5w3xOJlsJ3R$sf_XySHB;>kWaI%aH`c8pctFOz!)%H5wvq{+P&?U9J`&;}9T|fHI#N~yS%F)xUYw~aAmEISgo$1P2y|NVQ zlUL$m-P;|wk7VgGg9{&|%N?t+zS=k5^`4gp+(Dua-KcB=7BGvi8G7GGS?hxaDa%*y zWc5=}!@&tyXMkF%3p~y})?>}#y)rQFakQ{9WJ5gsF(fTGMU8(YRJb*p&~z{m(02bT#fG)r8)j$XNdd<6%4H z;s(YZKZDXu%Aop|kq21zm>K!!ivhd3-3Y%Sv@dl^QFvjCurY!ThQLVGD9wbk3I-td+o(t=$D7i(qsH?a9~$Fx_>tx)lZoXu!zxkK*g%9I8HoSwC$cc-$zcbrR zEQza&cT%Ah$9y1^dy; zK20uohvgunw$vy#p@$b5IP26$(dqki=N|{fO^}baTT-c)_{Ao6%$9E(c<6TJ5-A8` zk+^K7ej`P@ZydmSto}6__qlOH!w7Msk|VH5#o!Tng05Y;Y56oO56`A`R?1w31}Egd zxv3EMJhV(IEyecQr|s{|Pt9xeKKGRdEkd2ZJk%^hsxnrx$tEreU&~z5Z56=a5(yd* z*6*bwB}_y5B_u(m@P%n9F7w9YoQyv<9RuHP_RHRgyqvEd{3L6cbG*XEedFvjhOGaf z2znrgt<)X-q!oNDHi!bFuJ;A^f_Q>s;n3o&3sDe;SH2hFv*AZiob$9~t8Lv=iPkU( zT_FoAIq0ax4H8VB+fOWn6J^}&!OB4Do?cbhC93u_oTHA>%>)&*Ja`#fkT zl-qaqm&^%^#@Y172Zt_ew~TSgGwS(vy1E2Pn+SJ+DF#f^FE(($ddYM*e;(`0H|B*0VTV#-U#s^ntuyg;MXq(k62X_s3mNEyPUr;o!8xTJ*3u!J8y{V2!v&uv2x??Si$#h;7NW%@ z?%&t}ZL$}Z5IQt=Li*qol?M@Sy;Bdah~@#{m(lQQ&)~ZPqdZ|v3P5=UpHr z(%~w&oV@@f?P%g3Vr69EoJK+4qXR&TBdJo7+a2>4-ov`0|V3biWNh;1?a0=-ck|1by-%YBUf_@<+GE#z4d9qN|aU1WFUZdo@*IUrv$O;pjS zAnpbK3-))%9@hAe+Rv#277*fh0&1FP|1kv>q&@kRftBJghdxjgy;tR?*e#2b@U!XA zqr49k+5n}lrn~`aPI4d2y5D2VPJ8Op5^VJ^?|pkyisFa#&htzTxSq^S zhc+zILy}?_12)>fd!-X^o*?K6c`J)DJG~^hE9-9wm0Z}@qYSiBkaJ1d-1n)Gv1HKx z=WR2B(g|wf!uH?QzQ_ZR1~i~X9#v>?Kw)#2H)hpn zoFu_p00wvPV<}IQsW;}kAe~{Z!8nt(b-zx|#uIuo9I{s07K=X;Hvz>Qy}Mi|vir!X zn@$=zpCUiq+?{JMrbBmp%z?hl07xTM+q(1O^2T>`{0lV6v~NY{YH$zR?*-eko*41# z9(u(YzY7bfS#MD$bJZTQQ%=KcQpfae+a1X!50ZVYHB_0~4p_ZNBR+3s2IY+j=jL^O zJaQgXM>vgcgO1&oLYv%W$W|VM{Ky&o23dn0J#&g=k6x{tv(P^D*TQtN?H3l-0c7}w zp~yEZMNEDc!!`Ig&w>BT9HcT6fK4$$i4D8MMZbONE8Uhd z%=>Dq!|l+x2eXbK5s`n$l@wghGnp7jbp0kK8&@l_7ekvmoh$sM*D(X#WYxYBq)=AC z9;c@eUgSIkkkQ`RqNzu)bh056iT-h%@j{<%f0Xcm1LK^OSZ3zDaz$gMir|!O^DQ7I zx_w|Gwbca=&;C-ZY<3tLf!K{!1DMJ+F`0K3mA7HG0k z4Eeij_b!F}h)R<3FsWz^65ZV-j=F4-E>D+M{GfIy*UT1SA$-A%l8R7qzY$TM<`(Ub zWUJk}(4O{5?Ox#!T24zyv=lW|Iv!%Y?~=9de(C^V%!=s##TVhIyctt|FV--~dAg77 z>$Zt~2bmo=l#61+o1L4Cm%`hwV`njCT}%qDko*g8={nmG#H28rH#$4m;kCLu*zC|r zx!ccCHyv;80v!R(ez>-^1)|EC>nfvr=K@x)f-4WSnRQZ+Hj^FjIZ%*9@d2^Twq4~$ zF+i_ZC%U$AvL6HOMPA^>{Qr>($NljQqf7jM0p zI8Y!Kl@MJ{vuUe>z61*KSOEVc_~Dek`)U#xS0pR(aoq991&`rn&km*IB?OvHN??hS zk`L6G%YgEe^@QXTa)sa~s1+I%I1lHon+IYX%=W&ElI0$sv>U};O|EXUtImCFVdm0j z!#%EdUpq6Ivuy1Y|5@j~()}lxCqa)hDzZ_z(N?775wXjOmC4V$R%-X>CwS&&XYkaGd1K%%JE@G-&o*&w^c^v7(+b_J3 zs*&xjx8ofXcM@*bj`iG_n2kyD!DXJ+RB83fuH-#c5A;*xu@p2>4?@AE!6+|KM-`?yNUIOO1i2A# zlMVg@UE!+|LJvWCnB+B_q-C@fLBL<6lI70|1PTG6oI}97$2SFqw|Bm%%UdelyxIgE z?XO(IDr9yGRXIO)+g)~IgU`>D?9WF?7UOY3R42Oc z3?tj4wFq|=JpHmCXql6~Y$H}#QWvF#_QZ?2=1)imt%jvUf`uiYeq`*W%S+2^{4c5a zV|)kRp?-R=h!1k=P>n<@IR8Qo!ETmqfI60gvl>WzR{!+idI^$NkdjlS^wLufXx1RX zS&Z|+jGREa@p`wFVchj2G(Np+r|wy5yS=#tK!L92KtaUhz@7{1p9|O1w=ZkG`VCau zGe*}L>GdHiJ;=mBsc(7|7-ms0c7kH>dFg_k1(fVd&q`guMrVrW?m18u0V;ILL?V4! z(X^KfoyPNygvu2meyc`-W7z*p9~W;r?lmgRrs@fI0!cG?{ng@N-XLwCPTge5Ih2OULnk#%4 z%5bk%!eXPP+#uIAY;`DD3t_mse6<-2w1EPSPLt_F#qTQj1#>cL{t;Co(I9YUUG@Ab zRe)o6)y>GxT4l0wttuvq%yp?b4)Xbrr0j(E3I+ErHnxQig0^{4=bUPzxu27<}Ul(O-1|I;kmXRTC}6^e9a)vX}wVGkGh{a@7~b$Z~ACypGy3FzKDX~i$dSq zt`Pjv8-MQmO?#K{nzk1=W&%!EBG#%AjMyB%k12*nXOa)Ic;w}{7e?B?1pm$y2m&F% z7&(*J0;OeC>Tn{P%*lj)V?b~9t+YS&HLOz7^(ic%9AjieId$$uU7=Kzdb*INFt8|l zx?vCvO%UpR8o1&GV}L5saQJQV;uZ25`;#eYSMReG?FjB_>eQ+pyM&;uM~%Zwtu(@7 z)}5K-^Q(sZkYVx*ytm%j`rx&4T7faUFv2Tr*?*~@eC)iDHQ0&qC}BzxnceTc#savn zTHz?nG+pWNYOTX;(+&C%4`u;g*^KrdY8M{nDo_%DYY_*jS$mAKssxW5HCEaw6&YyKufKdX!T2lI=7YTKHw3S0Bom4qWm)QYmXZ6Ek^3$_mVu{TqZW<(V0IM}a+As6*`ScPq4{`c z1!{XD`_;HpG9$JQ?$ddNH2RdA8&y|R(1l?9LUvBa?t*3E)1`>MwPXe_El4~o?&)cI z(o(8_@q6>}Rj+d+sn+Ma)~nclDY!e8T~*n>l?SaLCQ0fdG+PJ9cOAA9%|t0(QhTfd zFcHw#0a@H5YWKJD_kHc^wYY^L#Fq>b!d`o0HqrmL{q37`BGbBY=q#g(J) zi6{#H!jq|zGhn?p@l9<5H%)*d8Q7RCTUYPWmJJO!8D=q?UI1aJu&{3pWO#?p z8IVqM)b z(rHv2YTSmb7<2u672;9=g;mLv3Q)$_dNQM)8wu~_iQ&U4Rz+_|^hZ^Ng+ON7Q1MZc zX5Qb!E%~Jf<2iBP$IIrLjT)gD=uYv#TsXtyhBv@EBS_V)somf6nb$C7$Q2p1uCmyv zn)kDwe5h#m3e7cw5=(q;LCnghUM)A8yG^)XDOo1JQ~c2^s_qzH>|yj@2~XGcdQVX( zci=-YtezUce+Spky12Cy72pUeM)@sqRgr?#3Q|8ysr^JijkBFqri$Y&=*g&a&pICo zhRd?BQF`-pMx|x4{(9krdAt#kJ!XI?oK8nyPL!gUrnRc z7|cEvb^<%&LGAIkj?}NgfJiQcjO+JDJT%)?DQ* z1b!)r4>zDiJ(6|+*v^n>z6z**+g6Qu%Zqw0MGo_$Hy86L4dzZJ zHBu|8`&Mei6Q@%)ODVFdk#xJiy>=?t3FZw57qF5AD(= z({DNsE+{V7UkWj+CyJ9(t%x!)fNjG3u}PGItHtv}+shotLx!4M)g<@M+^A0;wOH%I zG}PE>3TWYG4O4hWyomM@_2KNKuA@vhNmAP@dkeZ*dXx!L14_(IDKd0{ZxyW?QlRy0 zg?Gf1#g7yWy(1)+XrTPO z{fNlJZg%FYy3uX=_ocjj@l(1!@w>SbhHHD~i;_GEzwJ>Cn}DvsN&89fonkX)5vSBv zX5SF}n$}&7SGtu_QuOgO@vm{s>vKAE=nZgM`G5d{jRDn1X*FTtHwO}PRfySvyGIr= z)z&N!4P2%eNaW_M28X1{9mZt&LS#aQ84p;_Hho1}RD6CJjf4vejKhF?uCZTvKeld2 z<3SP2ZYHF*e!%CsRn&Tl3G*8xT=wXS?aQfx<35m2p6~hy?i!-#rjL9ioxp7!!Z&cm zC-8yuDj`4rcud}h(!Wup-pHxrt0zGC#T;|Q{*gDap)_FPzY?%t|N47<{2}GMv1P+m XjKSKAiGw@I{&N1eOMl5XbB+8TM{TrT literal 243781 zcma&O2~^Wp+6N3$r4|LPQ=>pZ>lE7x!8Ec2vS_U`9S~}*vW0ylNLUjELKaYpOWCwk z!V(gdQEJ%@0U{9g0EQ$`BtW7BBnt>(NgxnH;EUS!?ace0@B281!wKi8&;Nh#^W5Kd zz4fi9+s+TnKQJ&b*!j&rzW&a@V9Tt5fsxPq+w{Mo?Pxfn|6z#z&h0CMN}lDk{=<8y z6K75s7}VsLtcPsXf8HMV4_~Z-foaE^Z^Q1`U;brau=((tuTOlR6gb<=sj8U1LY_e! z{D<3vlN}enw%+w|VS@SemRC1{mB(6tJKK4x|K`_7yMG5C{`ZMAXUE!X%fW*Ha&cg& zMa17(TeolDvF*X3zu#1h$OJD-sf_hLUHRF0C;1C9W5sqp@gImRQEX-+L5yr1t10!q zi&zLkXi{LBO_FXCr@XN_zu8>#=U4op)v6W^-D_lMeyk$n81s*W1r^)1WpQvo^u8d8%Ji$lU5q%Z!xTePu0?Ob{Qil+?cMm665P-jq~iA zVy%JJ7;#Tb$AHkQyN&NNo7T# zE6^Tu%ymfxh8Gf;y{IYZ0ae;d7^b2Zl4ANPewCe<&Svv}>a`+tjAfKBeBw}rh`&7W zfLrlex@?JM_bX6V{vO$k0QgNVWI!hW?z8%gM8K7StyY&W8Ox^R%5g}*zT#7t9izy1 zeFsNHqGTMV(1>*evW!B6^o^Pi&*2PGFr49)zWx4PH5T?>J1M7Lx}=`TY=UKK;IehP z)#b%g^`|{gyub-d5oOB$&YoV-w&XkrE+BG|(ObqaVJaLTt-dGl_qCSvz(76-wc{m8 zR?{W%!E5~iUq@obH@w5<_*0`z^ZWNK1hn_`o?l^R)(2tX z8S~Fpe@sibz;_DYlr3c_leaCN&nXFH|9be@{H(HQ&{4kmWWuAfdLq<6tgiu5tNUP# z9zi38mj!}@jvXF$A=a+*Ldpr_O|m4OQsGUN-^=2{kBkf_M``mr01EF7iSv!4z;2a| zME@Xf_D;QRX*w}5BJihsOtv@69pG>edTjissA9;fY)M*`%*aWYIXnd-S4Q$b4+3U1 zxI^N$(@dT+fhxrM!TD<&GwIJ0uPa8EA=cTXNvX@s*)bp7a?xQ_mScQM)~TRu{yi9N zyCSsd$B99+orE!Un+$v>XkQU(oIHr+gM(aNis!%eKaP^ z1S`GmHvG0c)@#J(+YNS+W5-ELf5|cNw^m4Pke8P#PU3sFgg(zZVtpn?ef>xfRd={_ zfx^3%09v%1y(ObO*3Dt#dg#taIWXBP-ji%cQ)5N_TtFYxS_JOZl8W0do(e=?Al8;; zrBUxAw6D=K7K1=PaG0tn=GeS|UfdnqQ_#WxcGVW67(^Yjsj3l5Wc7<%X!HS=8Fm#c zP~T7OC=A#Foo+!gp?S@XC}; zyEPcU0W$t1Y?E37-+~KotK-*RCCae*MrFwwx~C`+=}8V;J9eY41vCTWL!Z`sG@J6C zb40QMir#`vx_*T%eV_0uE-9fFG`ac!w+gF51gX=|Vx{C)#jO~x3EGf=OXs#J=)2_v z)X|Mcy8jqTtfxIq>#~QXz?*Fh!MDhtW%gq%s0O${yn8C`5q-fxJqy zQU>okPh2sh4jTCZCURWU4h2u<8q;ZY=GlzSUrymqM>`9zH9cCPRx+4TZHr?n=c2o~;4o^(h;bw8=Xo%r^0VQ6?k*84-aj)@@g~kC?;s+=v@qQEn+v$9cx-1>7cVE%HBF-m%vH2zi89O+&2SSqVJ2@}-=_cbXjvj0*gr)#OUo@b$rq%^Ke$P2Zxb zaH9`67nu>fPrtEFvbmQa3|egmPzmEk*3NA%xD_~EjNThNtKCXbO<~Q}`2-ml@fyp& zo0bsBoBPVc(jwRu8$AKmg9`>f)!uv8Oabq#RRXr%TqzGfiV!z5BilSwO&Ijb=#SK# zN7i-gf;YIr72&W7vk)~nEOXKI_3=bVg+q>=+yU^_?w#R;&n}1YJ)% zia@8U9J3V!_JCB$bdbv*n?d(Di)#OPUUZ(&A2|}xFqJTM()y`tT9p+` znCvY@=%!tH9k||eE6s<4HrI$}HZzW5PaKv#n0t_tQ#yYwaYoza)|lFJ=us9s)}vAA zJhgv~Ud5_offNrMz_OoS?0Y-sq!h^dj&%Mf!*Js1Fr|6fnaY&i)u*jcWPj@XKUjz` zcCiR`Ae`qbO53QYG5(C-1ba`;0kC_{A@~N%6RGOMu{`H{!@ruXP4Qbmnkk%3>i-O5 z5*4u-`UZ{FHCf?WfU`Z3pp?vuALABwYF~df)5U!HJ!)qQo%dv;CWknCLO1&`hA(@M zME>{w#I|-ot{ZhD;HUwJ6_7GhQSXVI>4g;+jGQA(S_HNDj|6o3KJy(}^nK;~{8nSN zzZ(K|WgCA9B2xu}GwK!(wGeN{Z&N=P{EBLV)ZQ+6WV*_leJI$wTAY@zlZ?2%Z1~K2 z$#UlAvW2?fWEC%(;)6E{m3^R+WJjKu9EsC{hZ~^E4ck>Zat!KKRLH)H4Cb>B8;jw} z!&Qzd21)&0Jqo*J6STR`d51Tv+{XAOuD@;7)#P1~)K+5`mz94DOzLdj*St_$afsg% z{H%Jo9j^XLGJ9?X#6h+E8%SbmPSUYr^`Zb;|f= zAHQi?Qk)3il$4TQADUOM&h^Udw_;cu%T+X9Y)W$5*&eh%BW9+Pthdh2Z zcC-2qP<2w3UESO3G>j{+zd=y3r%P=f)maPIF6qn1_aQcee_zuOK-1rc;{r0 z5!`t*nrfCYhisb0Yny-OsD?u})`B)?5+Na3fJYl=S>o%x12H>}=F)GzZMGbObLO?R#exEmy%@}?+-ol1OW2*Wyb^c8fwfp5TICAd|A zdRG0D7)lCL;S@nVfMsv&Yb_WRqdp0c6?Le0=+0N53WjM5gkbB?1yP5uBzI8#l8mx{ zGbxmOY0&aJw2N!WFq!=HMIjPAXvYh{Jv4Czgxk{t<09-Q*%wk1mx69wicL1K_tU!G zK>47M*{!i33$dA^4!8^!1Y~g>GMv?&fR@$t!{T+B)7;+3JZy^Hb<4s}bt+oR<^>%I zx7q$OXxkK*xt?x7Q^8l;%&4sBZaH#qLW8w#%56TmFw8R?(Ajepe#jA-+zKkSoBhT! zTKA0Ax!6RV>06DPJ;+afbr0NYj4A&}SzTOW8LA@OtJ;PUp)QL2ExVH7d7iXfXIOvV z@g|+LmtnRrS_IB{wD$}`n{}WbS6xU=dt|&YIy-Mk4JnR?Y-za? z!3V{dY4cYIvu{z2GFhTyRX3KGpj)E!ZQTfP8Xx|sp}%RWX(V~~2ar}u3uo>(IBr!( zHa&rh7*7xMp+B819&C6@to64a!^w*Wzf!c@x^aKvK2a3hLz0)&Dq8}Jc)0sFG0t}+ zMTR2Dcx11jBFaEHODF?#nrHy^(6tR8cWqki$SHf55M=q@za3*O z6eW;gk95hVP&5~>@wDg}-Zmn5ht#`D;meO3w~8$FZ=vd8wa=tzPd3r#-?xfps;c!b z%l)bN7tWQCQnPsNV6GMAW!Lku^V71di&&yCSk2qp=^K`8pHc{ zPTeC`GS8OW#H7At2?ec#r#V%5!+w)T#B{0Cn99Hry16CwrAw4XCHJp{6@r7tK9Edj zMAI%AY0JZ_Ntmt8K2rmNlEtmi&?cIC2C`7@u=(r8wJq!WN8WND{T!<@(K5T%L3wI@ zJFh5bF8-2m=h(JijDW`!C;J|L94%IsgU3`$oZ&~NDe7NhE8@ds1FHmo-WF4z2e;bf zxU4kN;LeMExbPtbycUfoqAqQ2T)axpRN?0Zt`?4dO9e|Duzh#Kypccr=znoy zJF*Hoxc+0TJx<4D2XW726%w#Q^{&owKlF|zl$9unHu0IMuxzn?^=t+IOa7gcNb90c zeW?x+v{<#_(m-C=4hwyal6~{IH7QyfMRy~jvn;?lff2$Sl}w?O+W?Q-9)F#OZUQj?OHiYi;BYVgrHY6O2>Jwm zno|}ILS3Ta5PJwws7qeV&Q$*B=o@ii5}e;*EO~awc+`5_%iI;)$xfFtepC)Sm7$KIQFGL)4kw%82FqHKes4DZDJz(-o~bLeWGK?N zv1d^vjN)K71&L*FisFg=r~|{eET>0vLFR>`|Is`e0hEOg-wU|?bUkVDQm((9TjVQl zNaK$9`0vn7&@k-oPhxh!_`ke_Fb?-X+#rFkdGfw?aKHMVm9sT&M(V(;8eE8W5w~*g zvtIDN_wQq-qJF7Bi{bMUv^Cc>ykcS0qWgNRUfR*&24i7UDp%377;DAa5-5hR?x*oT zdn@Pg;Q`kf=?)Pnm8}E9d&BnGN1Z*Fuxd$&)8X>Zp~kC(5k*=cH_R&EZBMMJ$T!KF z2g0#uqwQa@`&F63;&YAf_TpO&rx9=%Km*j050c0>*iJ)7@;wkvT|}B>JRXwo;C*cY zZuxQaWFvIoDcgW3o0Zm~Th z&|@e=qSJ9JOPu<+1^O={Oz&Xqi7#dqt}vP#`DNZ*KnQf?%jT_c0_tCMX&`eyK$2%|TZz-kl#+TFm1NECLa3lWPKJ zFRaXekbpaKJJD0?VKGt)K4yGjS&1r6NU@Qu0u6|TCq?4?W$G|=e1~HDOtyjX8MATh z6&oyuYtaFG))h-r8z`bpqoY_Tv}Enb35DVM&^|t3VQSh*)7gK-f1i>1xns^F`5!b~ zNsS%BGncOw0jdFGlKu1bl!$>qy;w(%9c$oxSeP#)Ma+~&BTi&)ZAC&xmcV1?II>b! zxZ-|pKnMdQsaH1k{YeZo_D|Hsn;Dh$Q-_&^D(QWcou5yv zXJsL650fpbf+UA%=@-{;hQ&^@vmc!F6UC679dU_hGhnc>r6ffab+f zQG+FhTAF8K9AtG=Fm|L8Cdto5S0>=Vm1Y$2ewV66_Hz&*BcSEbiDZ(g}?6Km~Y*^dGr zu7b_(>=||(P9CQl{&!V1e@YH3dJUJubLTbyD4gr9^HOiqr#StAEQXH+{+qEC#BdNi zo*sqV+#U)Wggonr@$@;l@nVO}wb4?+HUM)~&njM`jwHhiNh3;s`;_ygaBozfGfTI` zMf)E%^AGYwbHhxS?FIdG#C!|%m6`?$reTirk=&zL+2TN7h!;P?ip6k4fK#8!iibv! zl-_B8pkTO;z50b)pGq&cL6{iAUKJcn(gv$6pAYZtd@k@QeT0%9u(`SHA;0~X6;TJq z1cqO8KO-{9@d0!coUG4bva{}IVDuD881^7Os-f=~zl-c<6^x%IJMjnS=qAkIyY}7t zWrQp}T=C;am?6l@zDXxk6Hfa;zJElvu(d|khP)kFvN&xb1odLV|k;zAa-gImiL`&Xr@g1kfg{P}X&YySS)EQ^x> z>EC3%jP9@XbgkeLHN!skEhmX$UWC}qk~kt0E@#IQ<`9bN9H%*YdMy26li(+sySs*a z793_!NsbR2JdLkxl`~xjB@c@C>?)EQii7YTyXt8h&xLU^4|Z3d)Ai^VKFo+$5e;1O zysu(st-_E%R?`!ge|RCA?r_zE#-)!c$VP=|f^aC5a5A2y3 zRa|U|Y#<^=Fx(<~{c;7}3?d((!Fn&{g2jQD*-569AsFrJy(_kK0B;*tr-U4JjINb` zK%iRuIdtE21_RfYe1D7myp4Zqr>z#B~oXMxQXD}7YgX!&v!HiAEc1m^uYX@uzy zG-`Bq;K=iQ`zp&?J@N%LBC@)F;>NysfPgw3l*e zaoMA#;PPZHVSs|1SsGBf-l$PtwVaeTMy+8TaSY#Je+2%qh+eby>X&ZGw;6lc(%Zwp zXAkR_siW9ZMH4mJRDmnbScyW8{W)iYLyQBHgvc0n^28Yy#QyjdmHG>SLVD|EpmHL_ zNUO#q4CJDNf^(>6c9Qtdfo=+4!BojDLwTfv($zrxAZdxtW-0xvfZYx9-S%QiLKr68 zKKfPDWJ%M3pzQf?mYCIz_gwuoowpnUsiE`(K%byW+H4 z@JmsV3wYU|kE1^}wvzJ!77?s?Yyc~h8TI_ejh7^$nJ-y?<+y;a0{5sYZ1^)Yv zCj)Dv?k}m_?F2yac>-|!h!t)v(QpgVl({BxQGHO%MES^(N>s`WCt%1qang;X-KBy& zs=EN2=oHM)R$|G(?fvPRu=fZdm#LWFw3c?!OMr;XN9O8<~khK6v0=_pfAvh>fq9yNT zs<*1AMxT$bcqlN>sTZ^0h5O=~1=tgxzN6V2B6A6{JJ`;0%3 zzT5D1zKYk>e4MH5o4~T6*8PC!iYr;YFtVG8bEl;45e~wZzrbY9nBXcp9G!6Tr~wt4 zbB-g0@{hH=61fMaR4#gB&z0Edy9D+gs6k+EM47f!qc@P2KB5;t@UIHC307_UerqD> z1*D+4PH!zikK!o~+I=0TSBCv1y`Z=JXigiEvnDX_9{U5Fzcu){8L@%a0xwIA$O*)m z{=mA_e9m={CIUluLTZ$=2uQm8^4?>re1tceS0LnD`c*DiPT-37pZU0EG*P_}HPbJs zD^>rRlfa1Y2QQ(5h|$C_;VE=@U(3B?>_%mjd^+fTE&V-$ehH_+=DEW@(HQDQk8v&J zS#cBFW;pR?&Y3>Tr^qN-L>7zy#K{i(Tr0SL^fc8a`FU(gYV?>T{3&4^JLP{vhMerA zjOG)LF-I*b2{<*4(vEd85w;xA>ydx7gx=6-e(^Qnnoz$ve@aeI?IrE z*;E_-hu_CZ|G1HJy(W+lvG;v@=<1YkVRj%;$|D@S0j89~b&89XQ0?D%F)T1o4+?M^ zqZtl;{)?*0tU9(2;2Wa+bACSm$GyrvU;1xbfb`W&u3;#Vt?cjn{Du$BJv%|W%NTn> zN!*L8_%ybdA$4-&W*Ro=kXdIe6wECt!2aBf1kdA9RAWMl0(9a9Y3#cHZ142{&EE88e8xYcPk2OUU5QLiFb%!t!=L@? z3*$ye$W9FwoIgK{skJcDAOA<{6KEAvnuxU!PHgk~`QkNXvEE)%4?0yvTZsd?dsM{^ zRWF}LM)p6LCvL18$UhUBy@b3c=WCt|iF-r-s7CU}KGq|_H+IdKNuG&EQg4XUjWbz# znoWeLAB*AYsV#r{BinwVF*VTFhb&kC*QuslIkGc#BXWCh)hyg7BH4MVYv?rtWt_!T1m~p zUd8hUSz?v6V5Q)chC6z$RzP7M{v+yL;Y5>jr{!j8(vh|<|J08zs4*3SFKm5~5)f*7Mz5aA~Ylr)Qw8zF-AGM4bXUHMCQyf*Aw?T z6AHXqykt>zrUH&yjmazs>YBYDK#d3pONC?A7~vqCYqYroJzQ$lvaY_oJN&v5TEbc$ zAs%MCq@XF^(EOGpu4N7pvfN>&bf1$W{=uJ^`;F?{CQx5HVv{H{fgmZ*_YIb|H22*_ z(c0Yw1QbQrw|mk9Cm^H5=K}*QqO(AN^UPJ=IVy7Vn* zOpo&%?A_Zw47N;ayU)FU3+MX`d)24wuNpS~zC~Hq_1I{BjJ<|C>EuWo-q`a7+&@yy z;IA`z+l&M9V@(^e_q`d^i-9TaTSbu61afS05BR!crFew0r^3#r8=|qCJ=F)6+~=g3sho|e6CUF$0ggF{Fy5sm z#z<%1eNI<+9?lB>zn!V!ZE@2l-kQ432#{v=!Myv}Gxh#(Gf28l@@v3&@Bdku$m%am zvhwB0jFO98TRR^1IRoyI@HohabO8nVJBa|qy(1BcSHE;(M#$gml;Kk0f?p5+?tx-$ zCPQTw9gZ;`zytRDQH$Zjhs}rUjDr{1^|a=)!xBd?>+rWEf_-AL;u1lM2Rg8L6#> z^$ob!8dtaAu*&iQH@;t3#OjE;z=3)&QNYO^v>gBV?zt589yX;SUcvGj|Lu!RFPh(E zR>iB4EOO~K-h-HrTWwB{Sy2zg@(?pu=XnIQ}Hm z77?Pc6~??RloR8kQin2lYvR|uLbi=rbQ3NL1Q9$zx*FH;J`)pYyMusrN8RiPtXel@ z++OJ0tZ@64(ZdiBaJ8EH^lSZf`Zyf^l7jA(J$^)eCklnbFw_eu> zIi3k^wKr3!^1UF0=~g1+}pCD4o&LJMx|S3dxcQ8I2mCA4-qFMq8G ze6YrKiix4R@9?jLLub{4Hi!vJx);i4xlr=}!W2xGNE1!Nq(;u{YVY`3$YpVXBPt?I zSP`vvP2tViuh!R0nisnycS;fKvNcO;m7-w8O>f|A1Hw6!D+;?RU4?z(`IBDJ|3NZ7 zqVu*U0Q>hSw(31VS#|GYJ%JzEBXy;{p%|)W$R1D>bB)DO5B?R$^3r8L$=d&gOd8nj zbi+~B;&D^)od6z4RT$pvSRoizwTNFly<`%W3N9|C-)rvYE`MUY25V#qSziHhSXd*G zQE|02E2c>^BtMk0#u`)~GYz+EB4x9eE8?lLzWPTR<%I+D6m@}Pbq+Yf|A?MU(F%kv ziVcsR=~3zsT-SQpplr!<^F5AK=QzA# zSBg4||5trZ0+E)M4-=gfQ;?7;S@B0L#A>3~I~8bm_aoU0fv<)c6< z9P+LI|LiRNQ8Ea$WH&7I?LJf*^5 zjm-a?305NM-F(h#N{hQKa%Mr7;7@I~DF;_YpFs_+?7+g)pqE2fkXc@O;81cNj#&Ly zNw5uQ0Q|nQ=>=n%8-_KEZ2WA36R(d2z)l8;z|t@gN?AQ*TSm!I{C@<`f{8eFfOLp4 zAlNrkuU`AFgMXU;-HCF(kJVH0$R0f;9*Ch8&~%5%&IeADhP>a656+j6-^HTlE020l zxgM_GYX#xwnLT~+x~Mzhas7oLPt>lzRs}uRGU_&57hChk(?ESjm<>;%<0Xx8hJb@_ zXkTWk51>{#APJ9c(4+hm%m@5w+XxvbrBXlvGiZ=n0;M zL~qC2RWGsq65(KyDgq=nG_PD{%OTW|n6BdZ6L0dGHKaM}Ae@z}HXvD1?Z*dln}`E{ zsP+kau~-{ot;6z=-~$NHmTwua5~?i2lx2GDZ1venlqPEhn!1ypIJCMnq&B7wfCC<# zn3068_^aDTphhheSu$0#M!hljTeki9?n#O|t?@5wVn_x6{D@(J)t$`s#$AuEzEDG+ zWSpn$Yi{p&fv^M##kWJCbwc>k_*syiTqw9-=(RP^py z)LZj}=WPn&E7vcXtg8<=>M-8%SOzR;91maEp%GTlw>9$rUXHd-8o}sB>EY}NbjeoB zwcYiIx@9HTVuc`AyinJWgz7z=NM!Lhrj9zlLvBTW!DFWYrv2VVO!d*accuBVi_;qT zZR?%IzN`eTff$Q@m&JIedm@8vw*lV+QUmtZPDGg4dtlo4A!h|4MKd2pXFIpbzH+eP zlLlj(92skri3hQL>tBSMDU@H&m>Vq>(8+_;wOse61f80C``oU12s@Q-UiOGhiP!D} z2Z}UHS$YkRcIIVM^RrVb@RQe{ibt;!b0G z3(9ee1bavO_^AF*FUfkZjMkjC0)#Sihesq|=D;06*eOg+Ks(Be=1#@oZw4;3@58;8 z@4pAP?B5U?0AW+EDoLiHHkc2VYCS5BJadpiR8Xe+*tS^e`Jeq8=i6TBWiT_hse1bb zT(xM}MI}^zJ*l(JWVAG!FeCB79kgai&&fS$@>lOev7ze1YH=om1>zSHE~6!0o>;|6 zJrErZ4X5odLXr~+QK2$@7E}vFnTe~QDz(9%{cL#3q<+sbcD#2C#1^DY%c%P=I>sc?(XJMU4l6o@`Ei4i}AXEiJ zmY}`0mb%P^A>kI9p94tSTa)uN{w#b7BG^4yP#9}Ej;?xDVfXCwzFc(9Eq2Ysnkjcb z*=>xr6)>ul;V`#)56aq)^!cMb{KYPOYLjqd1LBz9{9G|gX`O$Cm}FTKPLTeDTh-P0 z0z<`P6qVy?E$VvzjK@Bsg`4rd33m!#j2e@$femlXZo>?pccze2KF6YZZ=;{6P(2i5 z2Mb8zO#8BLUAaITwaPL?D_+83)_Q;5B^RlPWD4PCah22OM9JEYw$n2uXgs@5Wb*S7 zzU9Vi!ttP5hQQ%bRwdsx%Cq&7;#cE3%SjdZP8c$%2mNs!v)A>>a@KjH!8+i} zid^>{4d2o)bL!og^c?r65W?|FDCW3z-^w;Iq&1IxC`j|n`)y`0NomruV1oGZ-H}N? zSepKFYgc+tMoY#WI7FrY6B!@wJLIK<8a=;ZBn+}>eP~QXQ7NEc>sj0*0`2jYQ%p7# zMLj%BWsh^|KkAcAu>2y>UzD=Snf2} z7-bc-&zQYr=w6*stDoA*$*)Bv|HmHhz(r|#Y3sd>r_@FIWKqs1-AbP8{EPU_UVYdS z@uQ_l#v=0e<~nUt<+agCTixTu(kWs$KU2PzoCz91Xh->QO_@GRI@X*rW;9Me%x=`g zlZQ2Qy(g5@_{N9$(jIkep?%Q4>3h8!HTm1WEX80w_j((hnnOmo{Kv%w zf+^g!269+PAcqi`Bkh*WU*iq5MWs~~;P9G03~q5!Gzh0(Zvx3dmFm6%qoxwfYd%Sz z)zuq`zu#Q&2#W~ER8nufOu|JT)iO+j@s%*B+ZZJX-WuZt@aYdsC!7_hzzHaByKFvE% zEl$77Keb9`I878c@o3F<{-hUDn7G;q2&x4%yWeFYqe3dlA#W;oI?OjGE|oi6zn&9K z^PSv}K{Z1mTtnd6+q(1V4wWxe1{;#Rs`&zN-H%~TfmCzn40B*>BJkDvj{IEv`IgO< zP0}kPje*6&T=~iR)4U%bwJ307JSyH4gUP(g3-P343kGe1M97(|bOY3`;>SMAh8u)C z^wNz^3C{}bX4%5T2s?Yj8VC0V6D#M#1k*U5 zT}LQaxIsItPL4fKe|fQ3F2feIJMm)Moo3}E^=igv2$6nt;oy1~ZT;l+j8V?$R_?{p zc$~!05g?W@)GFHMdagZj+P&0evR!3BeoSfiI|he_$^P*D`1X7#3Ck|hCzq&KqfLW$ zp{-V}IK!tW2LXD4Ld1VR<-ENO!0u)mTVZrl%gg*v-!B4z{y;UtvIo?D1U2dts=M9D zW-hMP**Fp!02$ z3mQ!SDm?84TOUZMK-G4a-A3odu|7}S?nd)huDiE(!__s`rvh7=Zkf1>ZNx%(Tt>U= zmbXuitFAW6+cmM}lZKIJV0QgOuG5W;VzH+9u=V=5@%%z#i?%Tl6r7@=qN&M*%OQcJ zuv2;ulKF4{FeH`iS_dHDRM6;1b7M@~7eU$JK8-nm{T$nSYL5#0`Tu$|m%}x}2*TPm zHP&=iU?{(RsQfPdnFB9MsE+DuP)jn-dy1$V(2qJLMoIS)&Qcjb+L7DCR7M$Ck}B8| z`RpXt5sDeXyzV&VG~58XeAY9Bio|;y%icM>^(AG|`yio_*WUhs_;-Tq_U@pJ6V|sV z{%gx=PVpgfUwdMu9wf0Yax(O3Ph44GN>sa^lC^-3Wofozf`Sn$OiaqhJTW+iwzNjji$7*jPtZmoG zIR0IaPl$%csOLTAWnRNNe*)xLkl*hZo7y z6W`OTR!V|0I3$sI+=%=D=*tb;b10`GHoHrI`vs`5UC;yeM^~maTCSRk`Xx(cW&}vU zO?eStpG!1xbp#v}ZuFU&8WW4TAAR3-CjlI3o%Hos`crvy%T-*+AkO5f5q zi@M^u4)x<`^J#4kU>8A=18W9aV z7G>|)_Q@gs!_y6)aWB4fPQX$_g7EkYAm&J`b4tF3_Ng@KzG|ndJfz-CBbYRDeiQac zpMU6;=_~aAeRo+AvsRE;Vh&qR?ILH4BBwQz>N76a~1rjQ;R7NNB~kxk12>E2u@ z8g=t=|G3``-BAPy1wL$DQ_eO%D?^tk5GuCfbHcXNGgKxeTG@7%VqS|f)ZOYWhJ|N4 zld#guW8R+vd*pl10RVuup-&Da0x$MFOfOD3{dD}v-#?sx((w9mYa0F6tvtf>l4aZE zg;a2wrir}QK{Y;wDEg){<5MWD9=obR(my-0zP}p4Unzfu`X)!?d8-PZ@&lF_yKySb zZ*MTI436Z;{^&lGKn<1NKv}GqVVMh0tFa*^6B@H! z3wQK^YoOc5=9`LoF>4URQZuSv64R=@yc+sK6#lWzSDqR1w)DM%EbUfmM6KhtL?v|3OBd{v zx-Bpsh1>-WRD3c@9}g?)&})}_JLUUZX(oVkp;LG53QrE^!ZGquo^MZl;BiZurEt>` zuQ@dtabJuoT*NH4ogEt~`w1(yd9r$YviOq?lV1XE{*76-^$PIJk0xdu%LU7a?z6A$ z|Hk8u()WrB3{Yo4Ex)=sZ$^X!+THsg<(s&S zhuCjkwWD`Bnyh-QcY3`b;`IlUMyZu zWOYErOwMwmytuf)rNz;2)dS-{*km~g2iFmT|3tv3465Gq@dL_nkKX#6>l$!fVUf9m zMs}PZ-8Uv1NZrb}it{_P@|kHe9I8r>zYI~A7{`Z$4x44i&s20IggkV^P5G9bv8)6| z9c%UrGgC#7FY?cmjl!)}%M}hWeNaE^01LQ^-_#s<_wr&v`zM_rUN~6i_ub7q{=ND> za2f0Rr=;)G+gr0%AExu^`e()l{kkF&X!>|v2yy8G&nM}z@A8VhdBC=+0;z9$;xo&o zx=keE$bycL12+>J6OXvj1|dvYfdXG!oi>EJ*Kf`HXL(RBbF=IHMSDj#jh+A4dwRte zPu>o6SVI2vbT$8ES}bwKKQRN8Qhn1z_1r?Wqv832;)<%B4h>4Vwz1^01?7{&ooCR$ zr$?0dj!nGe$G23|Q^V+;Eh?VQX(l3cyrLeSY@F*r#q8LyYAfCW=Z|jedxlz=9562ssE}%jlP|c1(P{ zw%=Lx+LHXdBnWr*0xTB>C1R_dFAn-gtVjj5&_Y zsv_`?i|Ei}adqwH*fphhv(T+^dCyWX9DVaV-czFwN_EWnz6nYJTvF;#d_h=AI*YNE zMb0p*g?Ur;*TP9EHRA#hoA2FGAUDE~8dc=vp(@1R16W1s`~xuv-D5^^+3#Y0OgZvc z{8HK9TGAC?y?z1#_>rHIa(_HC8!^yWTg|^1^#O%BQnSEo`B!;oR}660Hgx#;p)%Cz zDGf)9J5pmh1su&z%pvrAX$6BM`k)t|mqJuuO(KT3I) zVLR)VvMmWQOwlK|avI;reQ~}&RR{bl(_}J`w<=rEbzJliOZ6iBs``*wVRx*R-S{rF z{pJx6S9=7+p3rT~Z*Dv`i*NmIzJ3BYDoEV4KF|;+=~%`(Y;(>{(sHS8@y7$O!t})wKY5|Nr+|Oy<2ugApjx6t zpg;U*HPiv~wK}J!HOxY>8}|v}Ie+WV4K<_Zq7nQ9Jj)SwW(G!D(6QnXwg#u^*|*IK z@=d9^qC%N;9}T-FUbUyxM!?zatRE{R5d}?kR*=^RhmWEruiyU;~^(GT>SJoa&1R8>2x+c_jCB* zKlM|0*Cu9&Z?=e&d+2YBUDC%(G{z=z1&i%Q$hxnBDjmmPb;!*CEZ7nnuh(CKcBRdH z^{*XqkFfn2T})gQAYpRjpF3C#pd^B@cagTKp&^FySBh}Qt*kf)7X|n_{-qsBHg%l$ zVb4yQ5NB#8`1!=FvT4y6ke)kVF1SZ*Np(3E4`FBZ-YKoKCh@;s@zBV4qY-?^zg$tp zNYR6U9)S9GH_8=%M-Gj9-ktx{#0HdnA6D|G>+N4F7%4y3F|yE^3UwOjp&&>C03-g zIj4D6H)#(a^P*+dBjtm6YHWhe#&Rx_nX)^?bM3d5W*sGohaM05zWOmms+OW{iu6UTeFXc0CuHFPx zw1=8TN8=+!r65IQvSufqpKsy{N9LgkuWZNO-aR7p$Bvu;V9@K=U$Wl(9}(7s+#K1; zc!7}^=kw)af#}rNZ!S!SS&H+U*pay^+psNS{@FRn?mck>ozuP0wGkliHKt}$q`!Nc z*hIZCkDcJFmQRpvLo%VuydkSM_X*#)wi77*jq%=3OT9d)2L#D8KVq`t9a&E;aanEH zG3D1x#snEfx?9r1XzhB@z~If>j+9wRU>(W-=_kY2&S$tgV>MaY0jEa+50Dg}FLNXj zm!2jJq=5mhq4JHN?pfL;*oF)P16VmjPGgJv9!Hpv)^mmK) zKS^F8sd%IOPv9#LrMM3q$a@n~>@IF(S`sVI1zrxJ(VFFI`-}RQ`}j?^ys`80=eq+h zOHwoP2(8xDf}tR(UibwZ;XesiX3`@DGSZ9lQ&mS=lt&UXE~Bno0@%(_x8IN!#r6jr zPnlmK&1ZMF$5^+7bl2IFv=~!J-g~uRh?Ao(a}O9e|J@i;1viPiGemxuME^yl$q5z< z?k{q2rV$8vTtWzO=3T&FM2FGko+2DfWGQ@TmSr}6dH?tR!}--?6r=;^sO5ofD>j$; z%hTf)LGk^-UzgAx;zFSyLtR65U`x2>QL9|T8DS~-l|LBA#-+T;q!$k*YpVQ^<322) zT@2xfJN05DWAzL!GyNr%yw?{XV~%JthY9%RwIM(k{QV{k`TfWq@D0w`K+q2tUbQD( z0ue9xHsi%Z^u8ObndH3r&-Lx^PENT)K^$Un+~=jI00|pA763Mz-^uvx1GFst$^Umf z7suk5Dp;nZJe95=!E z!(9g$WB*L(Vz&vY()(BG9|>0XyI2V2PL+8kwf=|`W+ZC)!3zqAlyi3&Rm~eMqVH8; zE|3QFnV9;7q2YZj+WZ%>I{9b&xZ}DTn zb))*f9z4fh$T%yu_?F1&53>_aKt9admv=Cg=$W1O2;e&s0OS+t{Kh43ge+9v?xgix zY_?oP{^EC&QlF3+i_!E7K>oklJA8J;O`0Q^J26( z16$FlvcKi-f-oVFhS%-?uHS&$_1%s7JpM#t&3Ajk?tj(Tb7J>v?vdELw<;dP@R5H7^4G4xB(IyL+Q30 zN3|#6xqh{8_RkgaXOoJr)pnpEjt2lL6BGc4FDw;X*%Z*Y~p&}%Ge_E+I^ zP2rf+t|OF{hM(u+Eo-%B9goyx$t$1MX`x-x^snJ$I% zZg*Ei=qzM?0|xung~$T$V=TD$I9+S08U1|^chuve3#ueAcumzEz$iB;zIV+CZ8FL> z^5^#RO1Y>Ju;)1nN%*@|NtCjha`>i5@8Vdc{TMryYGJNUk92ixn8rir>RT7O1J=${ z+AA+EUBu2F!$d3+LdH-uvyrV>V{f9S@|rj0hTjeRMPKh_O$4NT4`N6{71)I!1I)_UE!MeVQNPTivppZcjV?;-DI{6Y|ZX!&$wt zp0k?-_MZPga^q5}7SlNJ>4X5!+~abQde%j=B(5R?I6g&Y=@$T)UTkwFJ)u++C1Ijl zo#BZuxj&<}M%Z z5_2nx@hwLKf_9indipYJt%huW6LVBOZae&>merHE8KbyeaUP`0_)BM3t%eW{oWO78 zsEK!#%mY!8#RJr>-0S+3*Alh#P9w9ynhe==yb$FdB$L&6D4dC0P7@xrxCE9%&aB$R zS)bWfiR9!v83B|dEtNIhjn0V9)F2ggJ4f8v0iiI03Y}Pmj{786^aA$Y70@e0DmZyf zi6wCJA8xPzK<>!VvTkmi9R76JRB)RgzE#r2Gu9tSMjWu~6CU$Rbl3~&p&l7Ntl8Zk z6hAnBK4{SbM{y;ztBMtC-?9{kdgkH`v0j&?T{!A+*lsta%F$o^JvP~;C)$29zIv%! zqx+g{Z5CO&Z)yLX>RU6ITi_4#Yv0kia&p;uZ4fL_-F-d56xtXxio0ygioTgxMqgMH zaE-^_bB_#57``jz^qdV~64r_V*~Uw|H9aGJ*OByQGjKtmo4Zh$DkbU@0H{7BEHOMN z6}Sc*znJ@7sqxbLKgKUa<%u}pt}mbaul{}%2Joz;MjL`v-WrjkL+|5zf7m)py>589 z=TI`J!WA2~>Lt*bMbNxwmG*FIrZJM*o>C)041nH%3;DF6Q0HJqCzIXvXfDM!w!!e=U2Es|a;%sUFT2PXLD(7Oc=<2PeFP24S_ zH#rOE9gUn^r#oCjYfewbB%s21JI{jMR3LX|BZKBlAq#4pJ4<~SyJkWsV9OI7PmlPg zfrB2>zPF4?D6pGE*q*=a4Sn(vT58l$OVbWY+@{D>Gut=|?%t_-X5r1h+ZbWboy!5To)@=w=%10j3f|%I5cP1<&?o?{);(y0?E!f&1-tU-a}9 z9xm0L6b)AVgzzUaJfBv-&y!=mC^K~!#@s#v8S7E4Q4@%7B;ee=AYP#KQtm;2u!q7~`8r%QdtlfFD(X<+TrrImqe@$B0PcYHIJB z(W;=b!cfEXxNW_HTnoI)Q3GdFG=8Ulze$Q@oj8>#<7w9&@cTo|vA>nzZl-~fd%gD25856EgbR~M?jX}WJI108x>>)G~ITZcze?^^BlIc^G4X@V0}|8T02E&YaTcNFsA-FGc|QL>Gh zNdjCuJX?J7t#J(OzLD0o>G<~@as$XaUirV=bl!oM?t>%Ex-<5}(hZ`nlt8fnRMM7D z@SbM#bsZWn+o&&+HWBD0H4@!=(SdiU36_Q8nef3sV00B$_2_3U(8~rFIv0bAqLJaT z@^x~AKlsisdg6DgFFH5!9PVyv)LHvjMs{GGp~1+Ji8gDB;ccysuKHG7je>o|g^w{A z3M&a29(^4}d*!HJ7#n;Jc=!&8A?(?GU6oH#@EQ-^4>cYp-$YXk`HZxbLMBzin0gc2 zJ>s42Z8l9f)qkUfnGEyaHZROUisWA#Py{0?!*JpAZgTgFFu{FSrRMDaRrU36ojV9Q z$y9;exJBAqJ!nuSYRNlXU^ZAzPQ?y>6%=La3o(qCvw$+`>%g6&_0&o+EHFGX>m($C zA&qbCNyR4yB6(lpI_1!q9S^+CeFRrd=6L$tfaI7M3Qw^IeU4M}WDnNVHv^uRJLZuD z;~`2ryg2X4q$%g{yKt(C<7U-G`5S6glfM?j0`G-DAZbZ~kSnC-HTBK6p!!B9+XZ-- z<)JCM0Q?ilfcmzs_^%8vR>1mmOUdr`007Qzs0vNmk9- zzbSp^5cC8K<3AkKhy#19x=Z+UU}oZs|4j_ffe;tre1$ORIE1@S@BjuhZDS8tSyLf!pKpD+tkUB{H@6qAf~ zkIQz_U?KDpBW{bsaJ?x$=>D*VJCw5MHCgfME0}uYP4iokn=G7xl;vqVDOe*TObc|u)g}N?7sauTkr(%he(*Q5#!VC32a+fiLOC2pd#*u`^z)C%}uq+ zYA%D$OK$EwQ4i_~f}8@<5l|1Nq0ca@$>L9K?4!2O?3e3jVIUe$G_irv+!mv48mCLN zm>j*m#-m%VJOzS2e4>rGzwqbBDv~?WSn1Sfmekag?)jldUzF>n`R4@(f#fX;SH`r2MYN zyv--mrSV1IBK~vzNN}&a@e&7Rno27XKK%%0ARuGhE}=#RUf*?Xl>PP`RzE}m&Y0I( zGi6PgrNrNz9HN53+8pBGs9Ay}97k67ZBI_hv*t1_1D@jU1yf-EMbT6A52GGUw`@<@ z`LeHrk>B`%noW}aKUHpcXHp0=IC625xNV^-a`pUtWemSQ8J^_F{p6e9P`Ji}J8>3! z{VJ^5v_IMyM?^9;PEiFdOe=R@R{Fn{vI9QyP)(qaTc#VuKT#~)Q5r*R3BcKrCAbK` zb%~NU5;O&EWJ;&2X&fkLyW^a`9Sk`)B!@U%$C%-^cTip*nI3#-QyOEG?4F1FpDg_p zs^glaKk1(Y2aN|1SJEylSWpIxY;l=0nYfV~{+u8rOqe$-VJ}h5W@ya>SFC-9kpxqtIcKOh+J?tG8a!ah<)mv#>6>)5tH2a9<>7%eetE|`WZ{JxQJ5; zA^&fZK$7_Uh+PRaR?@xmxS!Airzf6m#OoJ$ zRC(@Jcz#kE>O^2`%H`wn3%v7`!2XBEeV>A zxJ9=fOm__`BNKT&!Rkc!XcfPtGzKC!6Gj}w-c+Bxskw;?8jD(+vveHauB^$*)dP$t z!gv%oKibd-e3_0fvBa*sWz$HP{N=p5n7`?QZ)wjR5dbKQcJo77nyW5#2RL=+c7Wvx z-Fct%KNEcO+f$5lV&LNYCtCm2;;Bl7h*O;f zti**3t$-O4CMoFEub4M6ob4|K+(@aYkSmScIjYJwZRo%jHxCR2aOp#|U zdN+Z*8K9DVrAMIk33-47fVR6+e>i;wW{+Ey4nhyRi z4_N7EHIQBtl@Dgb{~f!Q@|ulILxWVH{6P1y=j2*Ym6;N7(U&oXQe{?B-YzABKqH=! z=E$9^OkGTh%m^B<;%$~?wtxmV-Wq>ym~2}7LJaIFA>dWKn^m`;aF^0s7iQ^*2=|~C z)>v$kammng3*}Cl*3qdehr-Wc>!X9)^DKZctmj_K3%jmwcvnhta2yELbdx8$?+zY* zPH4gA?qi+o`^%`iHX0+RHMm3nwcw;*ILg@k{-M^$wZkK>p{<72J`}Cl_EUaJ-7d92 zU~7G4OKXs6y2Yb1K;NZ;c&d6Cfzi8gBrQVz)`LmO6!&^T9Py8>&QtcRpEc9)M400_ z5udm(!-UbzG6R5GQsb}X)|Sn6a6SJxMvU1zt%7Xn|DyxDqHE*~O+$4C%;cq3uAKME zvcU0-VnPCa%~x$6cqyM9aG}uaRRWQqPv1M*)Cbf^G|QrxI~#qe`znrt%AU0stM?6f zq=RfB?IaE!yGn8BiGB~BRQ}}VR6X-^egYTt<@(z?NPLh;%-EMf=i@uYfUFt$? z4ab3%293LvyY1t7s4)S{YMMhf50>hM=?9cN+4Q#seC;boLygf9-Dt1HpmH?hyVSFF zRE>w_xLfXrJ6FF5XqjEd^@tQsZvVB^y^lviUm7x zyT_h>T6yjx)kU5W0u(RlJ6)X2Xh36*g9eq9|6$uD|6|9mXiA^j!9@s$_MqO4$ZG5DypY;9dDS=BA z;RmjH_UG&}t4cPG6haFAg95jPq!~hp64J2`Ljw=+Ufhe@QRUF+ZG8zgJvxC1f&Rf^ zzQq{Zpm<&sR6I$tOSd@NL&kcihcX4fkh97(!VGci@-g?jO6PLm2Sk{RHF91AkpZ_$ zoT0e)Vntal$5C{%kMMr*u$792G=MhN5Ry z=c-paG7^lP9j_hm5Z&(qZzkrMou?L#o>bW6h`EU84iW@AR|mBs!``&IN$GQ=9hPm@ z7tUYE^*rAbQQP@3&!|6*1&lT~SC&X#_VRYb;GvNlcsV+dj@i5OpQN9cFlbGj*exgz zJZBd8EN3kp$}Z?jnc24z4@rhEr($uTDj4l~M=a6RhxOK-y{1?-S9F4k#eI_3o0V%C z-`zOtXcMDGb<}j!4Kb||wp0rvFIHW2)udpC4ueAHq#Yd^M!ZNljkBzas^n$)wEN3S?TFT%gV+Azb&trBU>Kiw`z##r^yR$h!;HP{dJhhbCYxSnKT*$WH#jY>z9 zPyq+v)nhKG!{nI==iJ>^&JENA(q2wuu48^O*n8MdR_kp*Z{C;P$M-)VSX}}>`=FK+ z5PNO(HV!Iy-|n}uCIejgbo_>!OA|q6k4j04zuyabgOQ<#+pe%>7V(Us@f#NMw!&W$ zzgFcvh8Lxs=8z-sA^B3ak#Q?(PG!y@!V@@(GMt=H4M$Ab*LxLsHC(1>V|?6#^79@d z#8MBAwoV%=93{e8?JfiwR#K4Y&TTOQd>pieFA4DuXy-4=d&tWs$TU< zYxAc$z?+{r^NJnP9aJ@qNjBPH_gUv#gTvT}ZE>B>ogHr=^4-=rkhXirisS!rF5UeH zf3ANg<9nxgH0rj7Mhg`e>|1QaLcbc7_wc0gHzAglPeS|%$F1&$7`l&UX3)rYbcG-> z=)3sloidWw0hdny&!#wZXGcAU0a>pnHaV`u4x11a!JXJJ#M2wsR{iM3wjb50^UFAD z+jpX+A-U2MU17L5(4*stu+5cr<}_T}fw1Go8(CWW4h=a})05rfyXcC08KBZ`eeed5 zCU%bpk#efO9CVuqdV8ax)(}#Liw!;)7&YtYUmfn;6r?2z|!Ekcl4sp~G-n z@()E+`hDu?L|?=dmRiw9yjU+pzyG!Rk$3<8qY^9!*f6_m#*}q33lK6aW%C%FD2#c~ z;izH4uR?_^3noz13-FT$z==ryS*m)fBmmVhv5Z~GO~0~os9-kZ4vM{mHI00ESlEAZ z2>#QevuTHLLMiN3IO_|qf=&KDHrry?=Ch%v{d@OQtlB`}3}mv{sXTrI$c+g)P*C(f z&m3!`N@`@yoW==8zl7YYO(9b*Q<#-3q}66x4BQBFer)$#T4n6E4lL;Nm`iw@j@g!A zt-OyIZiAIFX(rafv=X{hsLiT4zB5Owl>Q9!OiA14;!^Xl1DVOWT8LGo_Kc zu<~g$`nw+oimgXI^O2>fA^f1WP)P-!fe!_X3MDR za#}>5RS1>o!h*ZFIGZquVZ-a3rLDU6=M9DrC31L30B~Yn(_zU*tfwygr0^q2Hpg}iXz6d zxr$s>>==V^+=c1s;{|M!tI`|D8pXT2PZX!jOguRPHb@3VbEC~&BU0UjImSpX*CCTw zJlXbcfkD9vHpsZ;6GlMLdUwkzH6wY(@@per#3;x@Z1PRYT0)-yRPr${wU_ynO(Hu~ zNb5C5!iCK)M|z;Ei&#CZC*Bj`5+SRJuCiiOmqO8;)4p%btDU36emLa(`7_dIkUOMr zKUjV52kXAd7i@uk3;Tehd{{%wOsBp@Hum^C-xvN8KKXL?d>BpW^%5nVNL_>?L*+gZ zbGpo)2xD2FT$Z^qrg&NNB9yuzvp@AQmnVCf8vUb%7hfqTS{ z_=}kk+94V7yJW--3V2dpokh;e45=~j*K?`wdnT`baT0M!&p>3rCnQ6s_okm!UZ@C& zrB;8H6%u&!d^(v_7U-I>^CI4>VA0b~rvoJwXBKQ~OznWi7nB+N24@XL9T~Z)in(Qs z`Q5Mg8qvMY`N*tb%zkRb$e1yQ@$(v}xT(AQF(!gFlD{V#bKJT>>QT7|RPHu~mIUdO z^l}!rm6N@|Wr)iV7~n`j?G_4bpnn7?p%P>}cNvJD#eszmJ#fJM^U3N%GvBCG-7fpK z>}y++9un5k9?k3gU2ojtIAH70Lz#YkbsyRRtFI9LhCM%iI3f4!5dco z7~7q7PjhC?_RvZT)v@N2(Okyt^hQdcTwUIP3I}p9WcXzX-o}ImpoqT(&!!8%3m9RehH~W zHd@39MB-!4`OG3gnt9U&JWK!nJWP#Hp}7?K^C;Cd!aH&M$j5akwrSWCjS7wR(_fvM zWo#Vysr+$R;M|bEXv{6EpV{I3tMkQ=;XkBiGvRvz8VkY?XSja}NKT$sax81@p`Td- zPUHBWcFJ&v<#YDl1-}8)1|LrJ^IPxSC8xX2#baMG5z%m^sLgWBRf2_s=b3K-85HA# zg2{7V-`acfK#njQK_}zBU8XhYW{AgdN?aXszN@lvDPfNDsZ@ld!8_xYKFJXIf zK_09c)g9f-^m2Pnr?;vZZm-*>p6;AewsHuTxVXOTUsbsl0h){0)!ICtnY75}wTD>)tLY?atpRFwPr-v-F>en>&rH_xl z^I0Q(lL!N*aARMbXO!f*mtRn;+$-O3;Im$EM3vW0EtivDldndw;&l#ZJ5dZ}N7MshbLpzsC$ZBLTnIm2X94N-o*S;snhlwl4`ZczUkCvCW zc*JXDlQuy%DV&Xy@76@+991VvD;q14AhmyNA4g^+b=? z4>#kTX$Mf#eYJT>oKQplyRW5rmSf|zync1i)yp&^+)HhfoTnjbF%yc$38%f&jZg63 zlHumwf}p2D90^`B#1X!z28J+%9~My_1xVS~+#!aL1_0}$;MDBM{^{3&Plc&2H#w+f z-Q!$C!O{lfLWm5N2NeFU)C z;F0uWGsx$0$}NM(pnf;6C3oTItvRXLdHz0v{8(37N~pcvsxop_B3U6B6I`9k3M(GS zfag$QrxRx`d-+gw@Qn!G)86Ea#rIK9l-HD@rO8)a&S(_BuqLm)ts&kDqK0l7?fQPS0M z_;nFxEWI4(6-_*8y7oqfT7T!#%ZxRnI+X3D0A&XGPQQavif=KHkVx|kwO)(f7rLDN zeWroiLk8T2-hf_vlK@w6)*T1cs0duq=N@AhJQ&EbKX3ndu%hfuVRuZp+emz1K4$6d z?xnYVZeo``*Andq22W(|IR}f3j=m99eQI;)!&MeIfcm{bsGW-mA$cklri&x5lj|y? z&hBu@jzM$x+Pq;8Gqn~iRq+wZIqUfGu`|bwXsAd{LZcoz7O+naiW#mi-lCWZGoPFdP zPw}+R&g~RL!zJb`6sGrAQr+%Ih1-Y z5@LAqxq_7#*4zx|v|CzpIpYvH1=~R?{Q#F>?k0&-#Ru(rb`~>YK^TbrB0S_51$4kM z2i63)(<$D5>*-=dI!YxbGUC?3Qm(GKgyoPeu0=s)jNA^7A0&4G^LO9?CCI>FLe}wl ziRsr*Z}qn>wLd!INU`HWMbMFT>2bMi<(CocDTK(m9C~;R3Z1k6*IQ0hd+pToL)0Bs zIVJq>HL4ZhS0cQky4}&lfKe0805avU9V-o|0zxL~754`!3VV{Sf#P5Nmq5h~?BMfA z!_)IUKe)Q|YoH>dTF%*2NRvbpZqkM=5;QtJ)s|U<5J-)2Z7;!zV+t${rk+r6q%_dg zM_S?I;JxVq%>VhEr^3vex6?cZD|GrjrY&5w!p;1 z5vZiEqw))Z{r%B>1c-d4JJE2ZEp){p(P%n+JD@*1Xp8X61yNR5Tlc&y%qQx@M3#5K z@##KJWz9U=eX+)(5Cr>TXW4DA?3p`D4BGeJNeekEhl`!@?QIdsS$zW;?74fR&%e{@LsXo}PU`+$JKD|-|J5w~7JP~0 z5E_hC`VJEII3!)8Dh?mX&!}9rw}gcp*Z47b_;$nAG4@&Irjy1R+EzvUmvPV;8U(l9 z3lic+_SbBFK7i=G4X-$AcNcn(JXrt~eqXRM)Y=VgeXem**F)hQDK5w$C?~Rr7kxYi zc3sz4Y|SDPT^3LkEmX838BsJ8&Na2pXBvjln4W}g%gX1Nb-18bt}O*sjux}#EQWJl z&sRe=`L&*)n+6FZMqiW%4!q$;Zdy-`ESbhm0{OjMQ{|Er zwkjQWIWb4IfR4g>tG!uPl`DTvpsYX@5$zXjEaO2%;a2brRB3EPs6egK64Aw{ddf(J z{Oy2gfNM;gq!cU~>fN#LX&?YS%_C9z{rlJaYMkccGvxqdh?Z!bG9hRlZ@JXMNcpCmhcKVY0SUx!Z{E zt_$qO4BFl~6a5z9{kXaJi1oQQL6j)Q3DW4s^UF^ z`4o6_`r-m){h*8S=U4}cs&VLlr z!SOW~q{0Zw%4DRKGtl5aTq1KI5g~mXmfSUqg8a90H!L zkkATO52as1bKt+ z+q|9YI(C_1wUea=PH+v}Bp7HXzmLyJVotMZ1a1tPCdhk|)rYFrP}+KT_=~zhW(#IZ zDyR*y8(>Tpl*xzEiOeXfFpBXC&`Y4U!Ast-y(1bx#!WZSLNIp$`RMvfj0ai9wq~tq ztn&CK#xL!k;XlV;!T$8lAjf1$kb9tHfu{cHbQ?cqe@d3zF`o%8;7~qPynL>2 zzmsN~so~Om&a`)w(tO{%^GvmN|EhZ3Zpcj6g2>+4yG7}BiX{^J6luGEIk@qoB5JFv%5= zmdv-HI_+>#v?pVsC?byg99n?FQK}`U@LVkquqerw|HM2|o-VM77Zb zdcEpOsu4qC*QKGX5=9eXA{*z9+Kc9kOqUxlQRzMixVg8Swu0Xq+ zd)0aQ%+&8J21eZEzZ*=(<&{{j;kwE1orvcSH>NLnd&Rw<-_@J~n93F{g_QIdGSP02 z`CHucN@NE}o8s(JtYBjzQAN*`zKiHa6}Fh793$XOK+3RNRq@w> z_dxcAz~BkV5QEK8qzScctYD-NaTp#<`ZKrHF4YBYkr3NFZ+t_lj3CZ{ zoAAMUqlhiwC&2Cq;rE@M6{VLpBj!Q%#kzaV8n zo{}74aM+O>f`^RX&Zpvl@%`+Lq;OL<+2+*?^;!m6YIDLy(R4W@sMrJ@PQ~s`AwI?e zjTPxe90~lv{PG3+47-&H1!30K!(+V8(xatA z$Bl#cYTZh#-Cy7PFt6Z9H=g^> zyp)hFDi|zBe=TecuDKZlN4Q&}N|^LybLFmvU%Q6UKHCuBn;j?|Go^t<*W(EO-rIb> z>-_4**hu|MB>-L8Fth>}UEM(1O-h+QMkeWeNRdCrxn9g%tqd4%V+RHYnoG!EV(IkG?R7d7hxheNI1}z~12HEnX4|IR@CN zgR-iVt6uk5#n}P<3~Dnf`$LKZ|J=;!yv7Z=ONM$R^w*q}Gx?I!gUgP?=Y_w~ra|G5 zrR1yet{iP8JfL|aS%N{|q$=Qh2lj9$(Rmq+ZX3}_L-PW}1x-i@^K$40SUI`lo=gAI zlO1m@P7=Xb3CJxOz1bT;vEH^u7x2^Ec(fvy8~6@gS= zkQxueECx-^@A~>rB6jRmzZXe9$Kl$NH3E3&9Py>s(7HrsFppFI{`C=c-S#K@Y^!u2 zmKc}2+g8)`0)AN;(QUrzL{0MV0Ihc%r`lyFIdq0)%YRe-<=|%%YO%|mR+oWGV{L4T z22W!L?jdqZc<@VZnE26jE+lyJp%vE4Jn51;A%<*5%5EZO9TT1_=L8FyavkT!@umpX zGoZ%0WaZNhoW;8QK()EK5s$KoR)kNXuV7Z&ap3w;`s=}wMZL!>8#zeZTCAbg2cc;= z>0f|zb0;;*+hf3K7H-!avqZqykR!SI{8V~2nO*fBtd6jOikzb$)KAbog63g*t&(nJ z#DTTVbdl4@0nUY$1E`tU`H@jDXjUw+_3WeFPNQs^?E$pe?S8#Dk38gZ&`WUYXT|=d zN*ra(3wL*W;yAufr};eV9$886_su*0VikY<*D40 zzjkCJn3z|w+WxsnpUa^0fgZ<7cWEGJ9(@UoWP&0EP)b_!)s)n1ur|>-s{7q`=p|_F zmykZX)s{PEu$$pwGX=k_$gWU`Wj+~V3*pE7OOx?tRz;pgzc1>YYwskJ#I+c#Wgpp{%N*~R zAF>#>cJ_si#LRV)-y3}FpOg@jmg-hT=|+n={xk8|^}?aJ_t=nyW`^nG96rYM3}#B3 zha@d^@fU;ajJSOZ5BaEiLgMSZtAA!$ZVbRLc6XmBpOeHRxeIQLkvnTE%fBz1bv8=q;1tk(rE1&5VRD}jv%N_k7F_rO{ z_N*e;d{#nI^ES;19OzxALjgX9QLQO~|4RT{iIvTtGV=cfE`O4dlTImX4ME_tVbVQ* znVHC4k0~54)!dy=WGCm894I%7uCC}S$CV(v_O9PWVqGBH5d05M~yEl!|x9{gu6 zT;TGN0=u#Y_#%HC@{SJ^BSDPpgp06&QBLut;xd;mOjwjh5Gb1SX274 zhnBMGVEk3{&t)>*`Rh1!Cm!(}EbMe5wrJcJbR08fbgHpp1L@v>&o=s0bMxqu%gvxD zYc@Ud=vulFGK%lthUum5A{gRE#wFhzDj!qv=3Msni-z6{n8|ojMr)*gf@rs?b^q}) zYSK-Cm!-t+0^Q>-TBe3C7;A|bOV>9 z-S6fvRZ~+z7MXoO#VM>aUgJ*~+2kA8Kl0OrEMvZdENG&%!0>wfQoQ%P=>YbzBa?~Y zb{M8N+>nooy z*OkxaF#R(8!zM5WIA8-HYnn?BCIySL!xk$$QCh}TGtG=IX5)FUfp%?pqQ5y&*3Elg z2V!#^WSwX71N3J_fD)EewhX4UXY01W?cf|TjxdY<);nv^v4_@U6(L((AqQ&i1b?N= zX2@LLO@AVA6oEOl7VrBHM&%yTjwN}(cEw0BaehsQkvncLlrC#T>HZ^x&EzlK{C*_Z z;2S%ZP#|v52cOdQwWnm^o-;}eVs{7$!wE)Hr9!NI_3G2*h!vE2aQm#MUXN@I{gdi~ z8Y6VpG`#)9!vD+4$?5u7e+oEu0Ep(0jTPMj2Q9Li$=w=%s?;_RC@iQl%Sq|&%0eCo ze#oEmDr3ehE^}r<^x5S&{@%M;gv3__d1W8& zgL!2cyE;ib6$BpdL8(L(yZ#UF<^i|eZlC`)~zn$(Rh7H^rivOt$zU07|NB;OW%3uc{l!TRj0Er%Uo>VmarPW zy0Fp2&Rb}}65G^dQH|tJ_~F4wmRVAmLQt%e49DNR%e|ga@*qbNbg;b8HT2w4SMq-Z zcS$M`2fA|#Aqvnj-^IQ*yg1U7p|}&KV6Bs_`^)jl@>Yu0^2Er%YrlTy(dW4Nzq}^z z!E$RqtF+G(irk(C<*-I5?5t>wl3rdwtd}FEH=?u3N2q(od9twiLOVAyZZp+}3B-N25G1&Q z*<~zC&bGvPX8N0zNS+%iciOd;R%L`rGun3+QxB54N8WwH9aV$&jS>=hpN^QeZbBU8 zA(!eTq#U;4MRSHUDv-Fh0L-t^FZe6)$|`6E9B`I**Y4N(_%!?Jq=jd^ z#i_BZ*KO<3&quqm$dn(LNMHOHZUK29jj0VO>R4i!6!OR+u1l|;hMpr(_F+)j!JW__ zne)6aKLLn3C+u5hef?KwHrhoZ^U^i^Q3|n@qS_BIb}ow zokW|gyO~FOY~zf{JCc-khrBb4c@*GWmlyfT@4zRU6*ARsc7M%@OKV6tv#6qd%&L*) z0d@1R8juzB@l{6OzvIjpf4T$KUN@&NKPRO_emC@SAA6snvD@@In(_}<{ohby=e2O5 z{kO}Ct6TAKTDwZ?|2p=5XfF7`7ErUZ*x!LxE347l;=@N=o-M%TcyNY zLvD=1llXA``*)cxz$I&FmCjxDc=py&-aT_1+@lhuo5^R^2;Y`S{;?q7-{W4>zUD-K z<(sS67pCoy>g8V&3Jo-td}564dxXLQh-GtCOHc}(#+0OXpi^kY0k z*=hV6p;6UI{5ppy$*~VNURMU8f4<*ZP{j4TSp8iAX7gY6wIwdJ8tIE=y8OQ~6jjKq zky6dRN)52T1CRWC!Asfw-%%@nXT<#g9+{!Xpjhb9;l=8CmCe!}$s-#Ve)K{OQa+n}uXk1xl zK73QFxQM5t`Vk;g0~urcbRr;m|K+ADy^qwqyjND00Q7_5jxtj^+GIg`yGZUF_>a`- zfhBGW7;iL5n>oC9ak_=q)l*qw+G?`Q(eaKf%Tuf8T!^67rRd^7E~HRp?E>dIrR@a~ z!S3$v!^Ef~rQm3|f`lVk!hSS@kdedn9566>r@JQz2T7zX{1M5_-uXu)Gt5Z3O!WIN zQG^CsogiOcqU?taJ9V}$U)?c5&TtTZZK}15J~I%;>|R^ilu$MzyDx>@WtCng@qYpt zVF!+XMTCkXz{~6m5q!|k$H%Alo08spYh~)s z23qJT=V|AanlfEC=U-3h$-Of7t{>^PcG)yi0z7oe9jYG_?}xs_OxxKJ!2MsWTHcus zPm=%Xa9%PZF`g-5*f+oR*ofiRHQY|^hUx<6{x{bUEEMb<^~ltiLRA0^SpdC>%Ja45 z@~9XvNfWgGML>&NpI4p8SxXp@06K=jN)>PKIu&SHhFas^^_GowB`!$HzK)1bo|Z(B z+qMJeB#P>97B*ID4J94Pu?k#!XxocMjlo(jG*xuw%d*ao&Ozw#nugnzbJCrEXOD0| z<$Y$Jw+rdXHW#I5$WiZTpxwlHNx_+iKd586G&+4yt~UO7Bp}l>>B%NY&k3y9y_X`+ z1Y?nPZ^=*)FpRchWBY$((SE1(zva!1DXC9l%vC{pVDN-h@IsBy=K`)ad{R)5o+823 zmW3G2NoU_jb-QuZy0v_rltB^0?cD)-j<%#B7WnUo8{4;Wu$CL$_-5dn+dP5WS?|dT zbc!nIma*D|CV1-uW&Ci*ecd@U2N=IHkVHIgNMCN@S@(e46^+{taa(O(TkLTn5 zxc|IeFAdNkxFD1?V&wl{ICO1NzTp2rw$dSMw^uja_kaw}YYJ9&p+n|MN505$Wx8t} z`OgB`8`pr<6D^N>pI4Wam4zfRLbbjmjzaD|tz1kC?0Q~B1WvNy&mae(0dOB+`gec1 z3|h_p<})hAq8Uysp@*vN=#z%sAOO)QJuK7)Q;GmWgTk%9CLc*jl#8_MFM^|h)X{%& z*k1FiJ}$M3?xQc|0b^qP@oDK5H{Rj#b2pA4E;k9#1|MFnXNO-n*pAl8z!hdUjA^)s zI1|kyl>s`VJsL0;Tg8@KpaS$C+Gg4RK1oz-4fL98?bXui>MdK+YYijjCA(PFM&NlX zMNiPDHLBfzzzkn6o78LN!5CbXG&If{deoMk@K@?9R+@=U4ehcw#rhr_!W^X4B(9em zo(YhNYuXeThCXXIjaIrHRoD|cGTgS2!i;)fnV=02#?P=II7M6C#uh?DqGqt;V2pPt zCz3Kf2`*AtK$hg`#5eSe|A(^I0jm@w{{xEnUc`7)`<D@J&VkJo-=QOL}7X=&a%X9 z%LlN)D7F0xv3Bz>v4(N$7wiJfOIi1>L7H}_;>t|a$h)Ia{@rSW zmm5ipUS?lKNjMVcEagN!4)Mv|3FFrt-CS51AzQ#!;M#bOp+$5MEZbtaKaW&NNy)Sa zU=U4Q3}VRh2^7Pb1H5!I9x(Ni>G`USA#l$;o9r((}kzma&uewHHS7cvnwkYs5uhB0cYgQ53wO z&atfuhEA!{adFl?=b*wi23OQLShvGzm!qS1twl=m|GIi|~!O-(ueIK^Y;$wiW?QrhD1d#kLr?>VpfC%vT%fG z(>eRwizBPK5koaRq0nYkr~)WfMuDqTayXr$AYo{6Xs_reA!+;@oAka%bo><=W)zuZ=qj!pd857Li1Ky{4d6M8_NQ_ep$JL> zTm{porkMK+9Ds~(#F^YxvMMn0YR}sFVaaN=5>RbGtf@A{^!YC}e4L~i z;No7gbin~B(Iem2t|{AonYfT%)R<3 zX2)E=2uxTiC!Gqc*$%D)N)1mH((z2Cb3kJ%Fx)7fQKUy2{&W<`J8>pn5!1A3#!K$x zMfV8YP_&G{)Z<3i@N(TODvJnHUq8x6=supI;bzcI(E{}tL69=OEvv82s&wqaMwj~| zt9-J&YW6Ws7KN`=8(&POzI2*-nQpYemb%CAf)4Bo#~zRA_kl>PZaAFbb@*osh2aN$ z7@>8uasK@aFqoJ;E(#lFpqIY?6-$4Y&hKj5?u+tc7`l9*`=SAZyH@|qa zmg!k--=%-Q8+NTmfIR3K4)Ep4N>RdvFz?mR>f~#8HcH(rX(t{$u$xwbiQjqX?g|I{ zt#@W=V;^^U_KA!++c+1Y(o#Py#7Jcc7VYO_C?boH5fuveKaRItK#@4u-L zd07eGh-Z#Tl6tTuV;o1RpLxn?0k=K0HQOKop_kD2n9cl)jTLe6FE$oNi(W;+WEr!w z07gPwJ(~HK%0ubv^jX+<3ti%qhO_HYx=}13%eLUrZ%YaXmWp&5?Z{Io_y2l?l~>lj z$NF7|H=qSO55GQKSTInqA*n6rt;Q-eQ;>(icmhL*$`@z3+Md0LkF?%4=nFZ_U1yXv zogSZFw&lVq!zMV&n|*yP*nCnNm;N&8xXY30&|09?v3gBLx~Ug&Pd;I96NxAXG?z;j z$85xJRffhTJ5!^}x6it>rG10no+-+K$$Mc9Z8bM{E&sS3_euzDtm0zZ96d(LpSn`P z32xLU)bb2^#Iug?_s%{bERP*Z2>->lJG%yZ%SMP;X&)?E`4G_u8BHfGJg?J+p!?H3 zDRUB~Zz1fLYE7I5zYAQ%dF*F3LUnh&yYHqeF;n@`Q$fnR_NeOt0S(&he-pdu02~}V zbckrY1DNVjQK^$xv^tr$0QwXc8+=KAXN$w6ev;g#deNA_Fz3p`xCF`o`W+ds zETc)C@4PZ*o^aGKVfpK;U3P^Yx&92J?z8KgRjV7W8%rdHu05<4t7x85dQyLrrbS&t z8TUFjGj}`NZ3MPy-9YcVAWw~m7op(1BxL%2#CP1GjQ~yYI6-YeGaH^tv2-TX&A!L< zzN_~OCe+9Ql>i}Vd$SbX3k4TMoNGtaKg=i4E)HQ!R+e4T*tPxXTp>3fw_YMKRol37;j#Fi{2_?T{Un1GSFU8F@NSL4hs1S8RD)k69|!|*z$?min>k08y^D2 zv1HYC($DA-G*KNx=I8D|D<2q0Fj+5GR48Yx6~V z%ACS6+2MINhan4O+ZPF?aoHJ55?0vJVPR5Q40-ZcM~?mKI`Hd)|H@|WDUvgeftrzJ zZoeO>e&V{Xv}>-Wx&yxSiQw=N>eDdi0rY+-aW~1Ks#kj)Vu_*C z{kvsT@QALrgxMD316Ac`9D}-+?9$M)x@1f&yBt$Oo#5I9K2l^97`M6hRvcWW)?A;J zPFQ!~g&yr-jHwZg#Ni_P&aicwQ;LSjUZOmN!CK@0QfcIn1pR#rm%9ynEflW~IHqeU z2SaszP@SeQ^!UvFiRaw!CqDb62H(A1UfP6?Lr9tx4R0jFxnL!Al?%K z3Y|YZGv+F?uCo@{EWUCYeDC6z+l3KxvOGN+TaC4nOtc%#=9@8RN2#_cdnuok*>2*w zb+ps%ikQ!6l0z)d5OLNu83EIcz(!&_QHZkS03WJYXU!+>oqv01yWZXUB-BJad$o-OC_0M1rRxA zUHt=Typ2{t&NX}lSXcm_{H4B(N*xe#$1rPgIMA>v{H-ZCIf<5&o(s9Mqk>wmWR#?5 zq<$^k*U(jZUS<0Iv)d@$bl}g8VopXpBluZ|dqS|&@L_{an9dU$X3WS#jQo$?$H9@S z{Wda$ZV$L*b~|C{O3{9MG9Gp`-@!P^+IqT$+ZZ?|HrWYa?d#l{yQpz0fSmxTHH0(K+11%q1lq6dnsZ$uv!HF;b?eZT6yq^!BqlU#qoL&gg~6%~TlZH&KRR`c7P(A; zGEPLDS%Z{jQ43}@aWCdO<0YI@OZCV&hS9ts0OF=zR zq*mZ^qR8P_bsbvM0nT+sj>E?Q5yiJ*uD^67e8;!BudHu3Ijiv;n+49?vyItGkFNCB za^!iq^jM5D);4<4_>)GsY%9K%`?+0o1gp-lr&V1yzIJQno3RY<=#_U&O0ne2jtFs8 zzyXzmE#3)9Z9tgHgulZ`F{B@WbPwQjH>5ua2i5*@Ham%Zsx#w?;HqA@KP5QkaZvi1 z;}C9FHqfAz9x0Bl>o8j!Qb6lZJ zIVXpkmkL$iYrDO)#N==@PKOE-+l>}t9cCRp0zXIs-vNcIh|N>2YE}734N7$l!-Di3 zt8|qikjYrib6jhjXs=44(9wL}t$Zra1EsyNP2TSeb7yCScV%ggqVYz%+yJb0j7~;g zjQ_fS(L!rhrd{=Em)&P}sI*7)Eq4JF(Jb}mi-VLir#4K;0?7nf?_m3OotOld$-jgR|WK`o#VN`a+ z@Uzp~wYe2%8}od7-S5t#lK_2I$OeSDx_M;K+stwVp!9Tb!XHM3T1SK|V7Z+Ln=HF8 z^O^jVzm7&DBz?$^-M<45u)m2}-I`hk#hHA!HP;mwF{-Hl@Veos$L7+5Kq^WIawQVT zEghfj2Tpy*2S?|%mAo6S`~A03O~aKwK~YuPA#I>7>21VCEZ9~#X72~J8@%^t9kuw! z+R9tukI72_he#rlW)orL^$e@>fdIrQA<|+Y-0(OU-?1C9pTZTf$Z}Q$ ziG9DWR2;+~CFgvMGTAJKff6lSmS3=G4JPYWKV4@q#=^VixisxsXduTg#Tx60;qdj$ zfnnM&{MDB#iWOwjSO*n#T7Qd1sfx(z0*TgB`wR-l8`GMI1Z*YY3?j=<*?oBFFztjA zZ3iAP;5L=mK`Ku`xF-;a)|GtWTC858kUrP7q4EB)^tzhwI^J)NGE`DP)C}O0&U|

l1} zz{HeY{v;n=6zK@fl5N4`jwhI#HN6HTEqZCRY0TBlvvHAEW6mBZv@e+-o=EoT%`5vu z1yX`8H;Rg(dT#pbRynfkj^{O|@Yn*(3Z-1yS@x6g2Ibq2pQqnYtA?+b1Fl3&*^cb@ zoiP6q)@7-1yE!CeUJiP7uBpFAZ8Skk47yocdLwkAH8e$Kq6u^O&y_oESVPXZ=10UN zQIRW%65t~GgzD;~^ZBXI`-3@>zAUR*#(3t^sbG9B*=qsjHcnmtR5;Omf+x;i3g@&TIptP_xG zYg@X5YQPF9llcc;{72I*JLymDK&fVMO1%RH-61>tWOnn18~T9i+*dtyaDv=QX+jnR zi%SDudyjH($vTBm}uH(V+_7S_$?BIZM1O^O!hA4T)vJj z+PRQzl0IZpPQ#3(clQJH``Jdm6F|cW-o8Abi9mBcdO;G4mL6Up(E75#2f3I7VQ5cZ zizT5k`-Y8f-$Q#;js4tUN5tDe5e^^G&j>h6Lls(=@yJ`&jGYIgVYnU;yV`9~Lc%<@ zj^S^te)vG>?t=|I{LwJ?aQxvOXrJMxIp`h9Y1V$cId_#hyG-@}B|iT}J{*z!S5*Wcy4vaN=(*yBn?ZKhrqAA5b4CvAql?O#quVj+#%3j!_7kizPzT|U&G zgUKNWX_~o@o-eNQ_L zP{6LYE_&2vXaGwTx!CmxhXI<4$~R~|R}(`pvvRLwK= zPVUfZfVblKM#NG>dflC_ZZ|6YmL&7x#tC?k)SzNlA^rxfJV%o1J0zYex0mT$w6Q5z z@>&IJtzdQSGsZn5w&lo@_YSsZzmjU3RZ{UQITQ?d1d z-7U9xmd6p=+2eS!!}yckDE8;l!SP1bKz<7M`*Sfjv(832!J>X zw*{ib*Ik59+VZfd;}F~l8CWr#7mNO|<3ZA{=6DQPSRNE4T@&YA`jg>r7+02@dkN%ejAtEfyMvF1xz2TkANy~>>E{q2NJMNR9eB`Y7Hm8~waSFM?! zpT+_Gh8>+TlQFJv9G{f8W8n-+%A=$Mskc~I3BGs8mZj4e;cpY=?DPSJhZvS{CJfv_ zipS{yhFbUr@m2ElKdG%s?ejshwOFFxdr zj%-t#A8++{tYezb6|Sv~-Ur}SDtsy8{!F9j$5t%NvT>{SO5s+*_?IlpW`HtT7Gk~J z`$OqR@~gG-1Tg;y@_0f!#l4(=#JR~dC zsuv^-Uu0Sg%CGz)YUnu8&sOl%36aq>N}a$@5XHV3V4)ZwHR8Lhu*j(JsMcT|V938- zL@1@!6HRhqY~%JYQ}ZuK*j%NCzmTvhOr^no--i0N!JArnJ3I-m5_w?anZep(Fe{kv z#`|UlPSNbURotU_UlkS;t%-$(?^A#u_hujpPGXm$?}gl6+_3Ol0ZKUq1kH#`FP!_< z4E9f}6-&n;RXrR%F4md)N-y*o4Ym7kdf`7UJV5w}_C%*gX0*IWBjN<(s@>}7@T(}= zLx3>b+H_H9^>55Qc9pV#Qxu&@M-blicSKP7Y1&3?<5H59ta#pUp6?wDG*|au5C;PC z@Dl^?&kq<+BZFx_9*7WSfIo{l|62(gYD0QPiYc+s$4_g9UG=MQUkic3AXjis3WpW( zSv)r8p60;@5S4jRsQ`S*nw4SFOHvCMf60C3)sBuutmktOY5g=8p7U~OPKmY;eq7SM zOUyqJC><~U%n67hH7;R?H32Oz#P)E)FJJ0dKnq~2F%?mqvWwsAT9h6-!Kwm5dldYf1hJu0iD$(oUcDG$hUN-DF%+s_N z2?D$kX2E2Q$hkY%dZJz$>lWFL>F}8H*2#u2Meoz?9AWMKU6s}sAYYK29l|RRBBF;F zY*b?m`yh~ObuaBO$3`*SqfuzlcMz?{10aitknfhZ z$(XG2J6~Co5Ybv9Xn?_BRR5Kcjlw)_U{v?iGuo5pxu-1D6FgG^!P2N#S^sHqE)~*p#j5^cUHzSOjTM~xq6Ok+5z8&FK{bu;!4y)o!F2o zFqRn3yvI}oB7THi(}J%(jK~?<)JEDS;C|*U|fVZbeHE0se$d-EaP(B z_g~_1Ri7a`I&ew zn56C_o|0LWe`d1|k22LF+QcryPS>hnh>cVV%<4l2Id-4}koEiT4TUlqpixh+doFv< zbXWCN8woubQ_Q)#OBq$_KRDyTSZW4$WBNs85z=v{#>%Zx??9DFN1G9Z`}iN=`4`-y zPL}aH)1>UArwAon4Rbi*a5zwq(x%Pla4PtEiEk_WG=?3yr7%FcqS5Uu2yW;QP=(2n zF+Ae0+pZCKz)h zUeP*hAh`dkHvx%UPhUU7qbNY%Wxttl{E1*h(>NHav9T}mbW}Aq9ic-8k9M%st!a&4 z#q?{Be)vLwt{|Yjs+7$Ww2f-~PShhd$ku%x(=skbrD_lxBc2-NqdbJqW;a(5)>y}f ziys`c(rRboJ#+^>5(?HLn0^;NtN0v?0+?H{_^=?ys#{v%Pin1jP2**(x+3`x_|wofZ6OHuGzT z)?vzokxd#EwT)GqXXR#|KG1g@)KX2mc|=!(u0HRUfC`$w_)jMpFx=r?SFzC$0G_UF0NN%kg(*B22Qdiec0jRc2ZMzP8Z6!i!8 z_!YUY#yJ&x_HJ}fmiu~TCVI}p_O@lx|D#*p>+~0P!v8va(IQT^T?rL6py776JQ!dF z95i?OU;^PGY1pnDC~u)_-ZG(V{%gZD>MtoxU^-q_-viZXSorWr|8Jak-98QDVrz-d zqi#`qzq%^gvoo3rh}PB~FC6ao>Jx3lF09gq$P3WN+Dnp`kn57|`;b>}Z5Au6{JAcr z==O`2eV1+F7~dQ+qi5Jw?F9Zjr$fyycBB=&EBMphXWJ%RE1?{Ha zK6s2!8EuK=SH1pF%y9@mpqkj8_~8Q-IX<&EJ&ldHY_*}VB&4E?SDop;!*;IUsSHNR zM5p``q7CoeP&9fDwjW15B%HL z2w^Qy;rEOjkPpcty#I2#M>xiD+^|&m$qiP#1%#RY`TF|r*8wA926gZZ`atTVHa2|nB4=7hi~mG&D{ zbK#%n5pr;g2>}u~glJyTL<|{_EqH!1KQzufNV=nB`_q}~pQ)DP_(7v~WKhemu5h|` zfr=%6;j$x@POR~pebZ)GH~pp!{v&9>d+GhHxnr=WUFOqFRTgQJFy3Fs%S`rt&*Y84 z0VaKbnevuJsw|6TMY&v@Q-@1wD&AgpCWhJkvZD$6 z26QqP!ssZ%brcP1U{mu=A8Rlvddy>0Woyp{Jm7rBN2Rzuf>UW{K0FE1N?~ifCxT82 z3vt>_j7o9{@H6!+moxNOniJ0PbO`<uTlx=>!ReF8p;C50hUC8KTV)I)jTfm4q`#5ieC;G z@T=wbnGKepV=%A!&TAuEzauTH@+n@z=ZPBjgX(aKmtC?60cGM7$f**U*EU2h4$WKeM#)up`LvyN$uDIvj$UdlydRO$ zJ+r$a?S4&YvB=Dm98Q0U`~?NMDx!g+#5<-rKUHYKVeieSI8=?6<9%3SZ(>;{*VB6Z zV`|C(PhGRb8?Yd2PpNaEMroRKb1;*b3o^Z#zS3Y(*2B*S3H{6voYEqi3%qkOqPW6X zB@FhlC+_MnbY#LI^(o_YcMPt~fHCKaNH$50lzt~0j`35L#{bZ)!SlDv=(g~r_*$17 z+23OSAgxx=&lVR%PbEnGyU(()MBvpELV8eI4{(bYoRj~^QH$)L$!X@(92hDQb8K^~ zQ3l^9dNg+hnAXWPq4;FpvM4nV#x7s8)314Zt+Q43*y zLtM~*7eaBj?>+#!FUe6{oK7%Tfj>0aRpdo8+9BM_5age!TQu>knRkt7HvwJmkbIv> zi~N<+AE7{hSntUrUdZ=oy>?S@>?{kuviy(vi-^lj-vu)9^pb?;;rBjzh8lb%d>`m2 zoxfac!%9s!u*)Wkcv9Px(uxHuhlqL!jc?v13Hs35$4Tw4tmS@}8x;L~_$9bKEk+9- z?~B6~vcqwHD9FL7)CZXQgP9uz7<1A|ZLlC)9ruTGg&wD(SeFl7C_=wUAvzIzc{wTX zOF%8u`aZs0PFRKDRZ1I)S;9<3VVP*Fn-(Dw?MfCgP5298W%@z1%y-)&mUM`j<3t3^ z0xvAUSzCo~^2Fbu8KZj)mTH%STdaH0XYrR|H%xm~e; z4@F;Mk(iZ}_N>#0+-tC*Ni+5PWt7Rh4h^0-an2hid)~oFSoVw82&DKD7PRtkxm89? zlmX?k&6KpSI$`S9R6^Kj59JshK1IG`mL5`UgK`$WNZTDFEzGuid%6%;sdxQ*Q{nSf zJxd=LuJ1wxn^#wC22XJ<>5lHnw28J+>USQ>NJ|F&uKC%s^>tN>V+ z-xBnd6L2rNCWl0AR?X)l4$BHdmWjm?h*@NE&+u?@pk)Oc^8todjhe z(vGLq2AR*c+sNrgcLUXKT#DvxDI426JJpiE-AH9I%yG2g#dP}pGNv|S56uM~pdYly zU_ZPZzjT5f(2Ym=e8hr5Oa|qG z8Ev<{N5|q(NZ3CPQ1TLt#e9JW=RR10_5JJ10d7O#eo9-4g((b68d!i|fVZi8ao(T? z9(l^QZrz~3Z}&fJ+N^$!I;gE##}Vva=sG=jSsT)9dfzrqm9W=a7p;H&#pw5<=Xho< z?pVpjRNj1h!scELcl<}P8N-{sW>Z}bDnHtD)t}~VUu_g-D zXp6v{tYl2xgcjOY271i4eKB)K=>o& zGd&%S@Z^c~s1{6d59Kn9?~H0Oh48^TCv(l;n(>MJQS7ID8`+;Wqs5!Z!s9eI`}POu zpLIif+2TsVV%dSY9ZEm1FM)!L#`Iv$m{NVS9z7#^l8r9{a`2qrqZjgYE2+_x ze&?q}M~l(n%9QL2gqla%ZIJ$p+)BMK%g&}FCX73{B^`)drnzk9Z&y@hrZj&pwA~aG z{@&C`lk4!v!UDcS-j{OW6N&WU6(ZWF9CZB*dpCK;Dlf%|8j@%k`(!NO@THE*JCcj; zBByM)zu8$r$YkDG-Tktua#S+rO)jQ=#Mn0ZL_11(q10&g>5e$9^`*}2ojG~4!0aQ? zD0h6?1kxD4uW;+-t*CdJeBE7MpLX?ZI$82Q+|%IPRKqzqjBq;~KDV{v|L*?^^9$t~ z7s}4GXSJCAXRUbHri#naK55Yxph{CW(WHk($oCqT{=WS&dZn`Of0Fquyg$^wpHT#& zZ8GOi+Fug{7!O%wnPTp>bFE$?Y??6|d4*+u3Q?)IGZf#Z+Mt+ zgE~^7CFvwfu%qSZP;E$0+*H|+6Fahjl68>Re7`BA!yDF|BkmEAUz2~hwHoz_=QCAc zvhRr&x0d<0z4WYZN}cnmkM9wj)P8~~xLxK%=|8LMW_0?D&Azv>L}u+tOKw~TmXcw= z<`do1Zi!~B>)X_AaLz-f2d;V=JU-o4oj=h69MePo`DYKKKSG!(O`zZF4DcbmYkflI zPWU~87|K4Yt!E8>Kg7Jdv!Xh!SdG5Uv|>rqhQHwNWFrXRQO?o7Y|dEN^lr=l!zDV& zTIPH|6#a@{;K`q~GoZYjOc=xcSwsYGR*Y93f!AF5$bx@I@K3ySqY*#Xoz z355TFnO+SWuzB}q3IW3SU^2Yx$g(od613^11`6&e)b%#>S&2HiElWEQZA=zk*(UQh zJN-0Q-nsS6*3pv>qGJaJ!&&{o3gP&jC$-9EgcpT{DSyP;T@|%ew@Z?$N2jlWi_tI6 zIC7p8=Vq87h#)uetqQBL~%6B|$nhgC>6 z{DfRmXmv0{k$$MuT3XYp>jy|1Wr(#7OwqJ+^tiJd5V>*N+@H?=byBrbUqoE9%rph*@N@lx%&ZsK)-md?j2IheF)`@pZOw(OE zURc$3F5VgG7Z1!!o>q2wj;cyaAbLjduBEBwjc=JAX2_V9Pq!E^Y)~aFE;qv-;C4)H z9SWF62JtDwXsgPy=1wAk-+R_t=C7~Z1>E3et_P!2+)>Q(Gs!-dLgG=~K(RyJrwC%0DTAp27CoW6mWd={UKZ+shMyuoFQ z`t_er-p^wX@woh$1-HmYJ0xBg=3R)&JH{An)C zlf>B6U7eMOPS)Iy#ttGlrev5^prv}rTWRDOKl`n-A4o#AKTj9f*d(~x12N|46TxL_g@MROd8B{b#Y$hM-_O?A zhw~=~M6GsYhWIttJZIRmy9_(5Ja}fj+em%lP3hkr^I8_5>nTPsp469~e;*V&Mf$-; z+LZ>08ci_^!ir7_-_5E|CMz;0^-GcYsTTuT^l)aYpoWGkMpf*Xn&!j+J^3+)>fsz| zQ82DR_FEMJ+~KXuW5ge3L6t_YZQruEnAK^Z@gl`k(wRul#=Jy>Qk+I=t5tX!u;tI{ zEx2Nf#%G)wwVGq zoxy+_PnuXs4xg2&rT#et?kJfHdJkGQ$AReiOH;gEHZHOTvFID?FYL`DFQ+E?hu=b zUZ>673lHyK{|ifMtYS)eLJB}{UGb3sUkhcfbIleRu|=y$}gQyzgosEZ+cRU z(k%GDQuM*8^3tu@((VM)w8pd6{N+L0jh66RTRv?dK7*a>qnL=oPOlcK8MJppNVdPT z%$M7)qDPuCB0GW#dT}@Q&?PFDBdp|5^A1<+1*o4*ftZFnhDEZ0iABx z=d(@Tg!`&Tt|IMr`+ZN0%Uy+^7f7em%kb*qkcy7U9HCSpzo3@xZG+3SuLBz^er7%k zDx`gz8y(T$uLaNP%nVb=WlCv~m(|xGX2(#QgUCxFlHj-8+oz9;ROG@=UgHO(^HI-9G zQ!753`*9Sjr(_@OA)#Ye1Di)7-*hGq)_n3+ZoDaMW-mRNZpM~znli-gcAnfD3ptOG zZy%o%0Rys?GG=)G@`K>|kg?|_Eq}yngmS`;8Pd0ujvkz86DGx;gkTHyNWLX2{|;`5 zjz=P9#MR*(M7A`*xzwMY&_~=*f=gapxum=)su&b+9{Sk~Bz;}%XV>oUVZ*GMaOYmq zLJI0bcWR~$2$5~of%&=wTp^siB#E$gsp^QlPy*Z5eL5TKcXNf& z_3vwaM(Mt~8R(2>0O>F;ldI%J5G@?kb}_s4S8`>m{nzBm26LsDintRop5GefpW{JM z-A-PLXZ`hiCTBBxCPx=L(;jg5HbDU?fv#2R{y3Re+!?Oi(?$6)HP76Ws(HpH z5IJO$0B5P7*zNxEAJZ01QmxViLfUTCdJh%AO`V{>u#xGBk8S=ZO*OM2iexT}-vzn= z3vhL6HJ8=Guk9x_-m45w9Z@nFy*B_pHLciVYWsM*t-`KJrK7*K%*+_>*1dn%z-2T7 zo7Q(Jrm?$5AM2{h*rO74-D~!&^ET9zx{>NB_79!=b=U|c=xw=tJ{!cXx?TVzwhD4J zj$1CaXRlObCS92c$q07L*j!JZ40}9dWUyKC^P=EqM?2Ngqm=d=WUd9Dn&84rZmS#* z>lD?DFPbj}eyv($ugfyUZ(qtXWtubF;T}zlPD+-&B??7(euO91cE~?GT3-a}<4aS0#5g-_ z;@$058|b1_H-DX)DZLP}O%D&Q6`t8c*j;^A0}+URsi{vsXRaLnS>ofR{5eN0+((lR zwN(m>1w6cx_ojf0TajDR`ApTW5Oys#aC$@JQbEmc_H!F27cQ9Zx*=aD$|4Jpg`aUD zLl8667PNEZ*>2xKqP(-BQdaneTKgvTlC{j2x^Sohol+bQu^)R;R2U*|B@k5hl{C4q z#GzE@`)I1sG`C*6CFcWgWf`c5P3o&J)>jqk!(VFMm?>-HWObfqnY^T#{*yHW{7O$R zQVtFyeOGaIn~!A#=i)ly<$e(5BSL42>9<<7Dq>4jF22fkKNBs~C^0n)Q_zBM>|M9F zuD5xwZLL?1{jYQT$G+imnh#97IbFHoG0#`uN}}T<-p6GC1bj3%2<-wnIx1 z#N4z-0_>-HNCoXWNTaXo4!U^;`bxi#-y*krKsT9k`wfmhqQ`s_1X0KyP6WZ18zNUP z4=m#%H$|0fls-s{9(xkJRkYH9!&bBfcz7J?O(WFFj1L|+YJMCo+n95v$xsTWV`bRp`tUfc_;|;-Hy*~z2SG{s!ty08MP;{U0Ns^ zw)^1g?@m9n+zbiSIprF+r|XtYTJv2N=APYMPNW};U3T*ltNjs1lLwukL0jYZ9Qji^ zzW(Jdt2w2;V~(mVw>WsegLv~{H?N=C&m`OXXef%|Sf31C-0cxZOW~iztIln+_tZyk zqqlhxR(dkCeUv$z#l6x+O@uCM=-|y-pKS3=F#fp{H`{ay88e!^!z-SyE1zf?JiTrx z$k_L`YKnGeyM{61WVNtj28&)cF췋>92XaQBpYZg1pDVY_Q9@9X_hW_KY2x(N z<$N+%i$i*2VqHC|gc%0ojGkoPLH|{|u8U^?9*aWX4ZmZ)@2TzQYDI3wFv0l6FL-VXO~lNA11#Q^|LeJ7T;Nb3`=wF-E5GGd5_; z_GiXbUOaQox`j!59nP;gHHmpDrZXvx-|y95k={YY8kks)isLRZ*WKQm8m^ely;-!% zD3@-ylFC{KHI4Orc`%*)!^W%dQGA!Dd_ZOXUW?79@Kh=r`2XhfO#^-g168|b9QnXGTGL58ths){2oh1&P&Flr-_CGeeHpr-QO-A>6k}|9hnnh_r1aX5g{W;%Bq!#-PzjIwIRbRiv^y zr_#`-?6oq;mJi0pet;`Cjx0sbE?GQ=Fwx4*d33=sW$)w#iNU_DZ2{AbA)HeiUjx&9 z>b3Z~NvVQo%NrHbO?%~Q49{tNw@R+jmKf--u$xxPrdHvN>DQ*G7vRX)1`Q?erR=CJ zdtb#n&zrNqTcNEpYTrJxauha`U=(enO1isf5f>IQB|ya3Hl#H_q$t))+Kz1z`Y7|9 zAjdX~>Ng*kYngLhm_3a8VCaLT0@+ffa-&11-KLW!#G9uB&G;Yb$6DMgeJu5|EYMG_ zImc(nWeiol+L8!LwmzJ0)tsMZdL1-6r$^l3?NKA3<=k0nEAC&L-rKWIur{34uPg7;t(;}AuwrD>x~l?R+51!#BST^T+3L=G z-Q3~(jn6tredVC6WscElRM6C~tY6oCr+4aQ*-&)jlYJxShD-6Lm*UlM9`@;DRG$r7 zh?_obzMm~seWGQnen0+mB@W82C<@29s*gP!CAF`lde<*zM_I|PovCrZv#@wpFm#Pw zeUWLlgyl?!Ox2v5ML>9d&$%W9J!TEqhQ4(-P@0=CS30}$G}oP$$2H-Em>g7aKUvQ# z6Z<@~mSrSGO;rw~b+*Xw<~T{6-TU?!yf?b2HCnDl5YCZEQVfQaJSbg=z!j^|zv11e zHDxj*`46oZd4>{&KO}PrHp|m%-xi`7gy?Vll8%_~epJ^;O|psDjQfR+TuO=v2wb-= z%!FLNU6rGJBrNtDDP2w+OA_aHCldmclP6AOEYO2!k68}m#prOYRff>Ww|NnEH|XtQO`Lw?qc=9Edpx#il5CYZ=i%Z)ItiMev~&$dxlol zMAXsI;};AdFcX@ZcLbhDb4w}p{H|{c?{qG*Rf9Q2_YlvrOID>NW={;(S&G=p9qgR* zvpC7x@k0QU7G!Jpk`gQ*3FGlje67CCm!~Vn_K<0P-&C$VG-vH0W(Q_g^$h3`&IGzIe@|IM^e(^r zA{xm_m+0yAN6g^3PR7O_v6z)fKkvDuzCj6QtAX4o`*IMYF6e9$VJ8c$e|&ZX#$2}v z4W_Px{NDc1swgmKc%<#Kid)MuW zJ-t#AePW+p^PcxN?{8KQyl_)_(M|Cxze!`=m9$$LI*C`K zIFXGq(G@K@J2(kjF7~;ayi`Vo!Qk#`fti7bZDl z{CTX0*Ul}{cuP4m8TTRWV&YrhK+!K`BW5e2P>>kTx)ai$R!cIOd0Kma6ftOCS$6%G z8!orcU1ywDGq}0;U5)9}{qWs)e>JKTXwg<^bXGDi>@_2Q zB4oe8r1erlf?slX>yFNWA+yHeKh>e=w|EIAO%`Rv!71e{wQbf{qNNLy+e7m5vW6+NKcxZC&%Ik ziWhf$91FfK{Bad=9VyhfFQK;`;U7vq@UNWY}K3+vpo@dtkIQJEl^P)2gwrr9P`^3OKMGR_&7-le6O2 z8^1HFyV1L=QB|hnbz=2f*<4G6{bBe+TKJuHpHxrcT@}xDD%KB!etEL&8?FZ_$X$> zVowdXqG73LCvNOF3wsYWN&D^UXx9r1A-Eb&>f%M9m8J6O?ff8oWg1+gP88wkOrv0; zoP=5SL+9zU89%pBv0Ij|Lq{RB<>zHZ1Vzf?P)dEC3iJQt>f8gFZvX$knX{ad^EpY~ z${{(kIaDfzQlZSTqMVYpIc-Kn<{MP+B+@J67 zU;nvwUGM99y`GQf^HmcvQ7P%;u8LCO9^q>c+2|Qx%Vs)HvQVYl&YI(HH8QRU9VPBj z`AWp;t?I6I7e87-+%?Ny@8lZ0tAIx?qbb8%bv(O0_d%UPL`Ozj?4<*L-XBhWo0%Oqfk~m(ssb5nedZ zt0`UJbg7=#wKI^F_EZ{G%Oca5lzcf`D%VunN->u+Qprr&g+bt*%>SS_Qq%;ASdG`V z5{oUGn*#yRJ8rZQ4ono0o*?CY3SbRVYBqgWyckYoRqOxxsf?-$L+Cn+z3 z;r`rNy2*VO8;iZRlJBo@|7i4n$@>-pZ{P=3C5MbnFxM8y4Gl8gkdg288$<;e?U5B~ z$$H*zGv{n9esEu45^X!s)p0k=x3B0Z+w*Gx*=*ku9}Hi;@y@q-=Wy+czHVNE>3qy@ z(#~aU*poVrU;7YGH) z0A&f+9)k;lk8VU$>SY3xLzhIX;~+Fy&df)vCL0XnYyt8oMdA(P>q%fdetbh1P0J8` z%vo_$dhA#AlDp5JmjsYZ8BIqgt6&}hJKS<*_P*PnhCsKJSo8($1%nY(?O-Qp44Kxn`1NH*lB_!Q>_gbG!`bH=LE4`@1a6HTzUQ$U{f;^eG9si{ey={GaFKXPp z2KJSmwNaNpSUScfXWr%C8h!3Qgpm$Jg}UQ2XeF>$+y>b55XLOH?kd;td`0;fkFI#N7fw^F{}^~p&=N2eMSaMtP@{iEeP)bdDWo3)<~X6v%ZSM@G( zF}c~kWnob-qTuDr=N?uqzw=U#`6Fe1<-!^pv$?vo=+G$;Pf#aRXh+-so0(6Z_MHmk z-wHF#YphnE-lXwwt}G_m#Z29o@7caKUP8TAM**J_T;^7G>+34DFUoK$TQ5m)v37OM zjGc(izm(;2^OvJ(MwN4YCcZ!CPWU-|)fE_Bx&gOmi=3O#qB~A@Me|oz^;@p(dd&Zk z6}gx}eiR0H0RQW9@-E_3iX~n_zu`ext`CAUYeGz^Eca1@k)P-j?ne9ezS3ujK^g-O z6H}vL>YGTT2v5diDWAM(orS2P6JB=iF{P6D17>*TAD+uM$K>!oC^~3)3E>=d7xR|q z+HEy}XWG$zuN`^R6V{1c`YL;8p0#Yn0O-q;7aHsWzTc;um%XVZ6jR2;vVHD7M6_8F6gyK%9_2x5;-gop&#-^H6n_>Q(e$uoz=r z3pD}6p{gGmhIGo87-^Y>{e?hGk&zU({*tytX6sHIlGCcNwI{i%-(Vi*q|Y+TV?9TW zNM{7}z``!aT-ZZ;;{5kMoYU*yAw0=>wvwd3emS|2ZlSbv8N55`y!1K%8pSf8pIv4L zt{OaJ^1{?|Bjd~i1iu;j<-$l=$HlOJmaQ@aXg{4oh(G-}roLVUU(rN;B8T2<{MyuIEC` z>|^UE&$Gkz9aYUp1BY37+2(XF_Q#O+`^XWwj+H09+~LM$oRpr>wOh7+V9xLh!_F4; z^E-nD-OY!hcpjr-G{4qX{(bWvvuo#u$c`b4m#jV#9vT$S}_D$RBfN-)n2} zP(Y1rtmdq`7rrZ)dX>%u0iM(Vp1U|T$l%;OQ(k?YxP9+sNksD^tjVRVr9VaA<3=g> ze)#RWWQqi=^det$nf@)cauGV^T;1Q%vE|?sck~X91%OW~?)(hq(zX8OmGU8D`YvNH zawCZb4k;$Gus@J6#q?sAT{hukVeDGG__mNqQWx)9)PsrIyXdo@AKXcn@drxK;)E2k zr%O5?)cdB*8}w@&W|fj~jV;tP6WI>aL)8Y3ozT&!J@hlsUBK~Q!AogRB{I!vLicIe zrmGDLj0i?xL_fxM40E5`9M;W$$Qw9KG`m`vaxigS$u~u#98RKUv{d`Wbf73rKLsPM zsJ6=?^Uv0&je0Cqz3F4;!YN=WOD)OZXhgEXb zWU+oIf6zs-Y|(@oN#S5W@uvzJVN!bI+ji_=Rsa8U_#$dB9&_mmXE zHqQ%OLS&5C`=#3{uJ}Z_s9FQOnB?N`mzRwFWd0zckLG$ffSTpY^e!q}D%#q{Ixu#$ zS@lK2`b5d4DipG_CMEJAmZJSOz?MwBM2>7P=ORc=be`hoJxLRw@grzsCwnCuj)z6X zU-3NmdCU_k<4<#{V|#1dQ-u6)zCJIu%|o@tGd|&0Bu@CoykdVhG?fYat=TPROjBaK zt~{j6ou<>njM9~JQNxWBR#}|=%Wsso|9-Aqp!2XDQLE2TlG-h$W$ZWo8BO|x>LS&$ z`jSlWKOkx?GOnspFedroX3t+cN8Z$iCVLUMm6mz*aLl$Z{aZxPBQMe)jdkDV-qRzE zZ$yDk5){^816!>A&I6Y_k|&0>3l8KQ(9`Jr6(ihz3Cb}7b89-H8JtvFnBo}ZzWy`V zoJ`qn%BxmgHY~>i%jjQzwqCtGmJ9RNN7B;RO{~GKXczeas(TR;53^Rva>d_drI+k< zmUCRQ8^F*yfBbQqytRhf%IqQ2-?EO^*OXCrO;*Km}U zCygljHJe`_)1qAUBhm(mFG%t)c3nX?sxU}s;q6wvxvZgJ#r&rcrG*Rk_vp29wl6p~ zKdM~N5~mOsMG7;~SXg|waK9I zG1yT`hRa+#@nB-WI4*8|?SkDubhmEJm(6 zjcVcbC|OL}pyJ7-rTV@2y|C6h7h1K1mO6g$Z%#${t%c=QjJV^$A$hPk3!HL3u^|)R zxE@9OM~dNEmOk;TF!&tDs>;YBNUL~2!RD$wPm-J@Yv4dBIbvL32(&uw#V3CZVB0#23ki4yrWiwji=BfVys< zUD=zxHM?E50XvF6QYy4CX>2_nRg}vP2%Pk!)s8(l_&%Q5W>AM&atCSXuuEZIElzVe zP{p3`)DJO9zT(ZO2n#&3yUVP$wIMYitHu2bsY)+U1NRC`b9VO>#yzYF$@ZHMtEOMw zH!bPoCeqLu-U6n;GAt=c3^m!x+Ng=%%G_u0z<;C|sF$Oh6HC(r?ny`2{2SI7+&q>j z@idfmtH_c4y60fH5Oi4aqxJ(ct0(E|{s-=;@to&M<{R6uoX^Bvj>A>tMZ_qTj3u_BzD%tHEvkqy)e%CoWF!xKUg{>?7nVcajT_V z5UiTw9NKpn6F}=I_?8hc3ftb!>DS+OPp53V?}6Yz(^p2wbHuQ^F*$EeQk37CZ}akY zlxVu&Z9E)8$_hZaRZZ&agMA175GbMGe-`6@TdH7Zl99J}5aWm4kllchSjzEzCm_fU zN>$MIWeit?HnAVL2#{1eS8&E((q`}7y!(_@N`T%gJkb}|pusbcNihLe#GMzulV0$K zpaKYOe@CS7p5v8OpF{s#t~VnS28NtS0-EW!KRt#EwEy?o5 zS+tD^qaWe5D*VRCx_8PqbUCAQd8z>qqTF^yEFK@m*x{ZH!OyD=KMYHm#~F~eVsa%& zWn>e7yes)gHsw-Z*4@7S9Osu+m^9bLQL>!Y+^uZxN4LL;Vp828ZXup0)!z7~jP7?C zr;E=8=LgjeT136J#0$akh;}og;lRbvIod?{-RJeG!zgb()PLb!Zmrf-kT6G@Rd#yX z0u-~wM2{pSbKNFER-Z?4EhElcxxLMit#e}91}ze68!l-PF9*D~;3?zwixqjB%BvSB za8KW(qfmgF-@vyozOg`~!ij4i20EelT0=QsvZPr2UI&v7(H%rOzXM)NJ>vDR-e0P{ zqy7=j{vke=h3K0htlN$mhY4SzSdv)v4y|vC#m!-KX`Ci;+;$No{>SG?A)IutS}cuf zu?Q-a#wVsnD^-1rCzLd{|fJs@pz z&93}z`_S@`gXi2(;`wg7KQ|nd;~~H*#xp}{+_Ul;ap@LGcLpD^m-wV5ZRlV}p){${ z1DwC|;!6Ak@ASUF(hK+x`2t9xWx}wnJHq$qrw0VROFrRcNYm~~6ncPUCc za`u8U$$Sg{W`K4hl%LF~Xu3yCL~!OU_J3)_`f3CE zph0<3cQK^blK7}c$nZG~XhvBPMzgI-IIg);q-IZsKl zJ~vzVHShXpI6l;i<-hvFco8k;6e^s4w+d?#B-q6ZkX;q}Y4Z?$7nds7bM!{cqaaDz zd~(D^&Ox%=Z$xw#{M=%@8_IOvWbHXK>jNWuyhLvw+WBfIvC^7X@-VWWjCTsEn zM86pZBmY^UJBiQ%z`=N*1Kzd+1$25r=%ZR**)jQNElS*9Ok-xFg*uNOFCLN7;)0iR(Tie6vGH{3MHp{&gQ|4jYWuO8-&h>S!X&$U0 z!KYr8FfLDwkHUMo?|x-_MHrsboa2$txDctMIm}ox>NI>>$Qo&OJY9#1R{tvVs}bI1 z&iz-xt;Mrf`;2h;zWV+?Q(HjJ=H06lukYfMnuxN7I{8H0zKHoAmUrKs>yKf!!SLn8 z-3e9B^&Rq^|E!{2gajd?5(H}64sw=N8J4$)T6u)2$rnv238x1({r}D?6Lj>qLQ#E3 zo>Z^9xK9}(KF|=*9$#( zO0|WS1cSUS)ZJZW$C=k0T|H@5HPbZ1we6DgP=8e$B`-M2)H?fq0o^IxUR3Fg`2C zWfy2@Dkl;%LDIMDRAI;rOA&&cmwb(D9H4cjzIgi2##4bBXcLLNH+``0tQyfI5i;7G z8NbfY6q*-C@9?JUniL&vqx^%#a*bV|F9TdDN$F}5gpovdrZI} z3R*{4aOSI_54T*-EbpyP_m!<>|Fmx{u*rA2?{CZ>9=c&MbE^1^ISo|2UkdKZCh8MwIZC7pW{e^|wMXk=H(6ItHd&Pxy_L1dNzHRa;UBiFycV!Gu&>m7k)1 zG2ro{iStY8kpbl>(?YBKN#=9)x%tr*`mDXO%Vf$7Og`l zo4N|ielCuYCATZiF9DYQukEamh<`0)sx17U|S z@?G#0$+Uy{0lHx`20F-Q8DED{m;4~#-moEz9A=P>*6Z4Nk^O^K&ZcI;IKoS}k=1S` z+f(AP>a`!qU5{TIKVwIyRsT~1A!02(*SA*fB4zcX zo3pzgBWoo;170sRN6uB|1+Dr!67>3O!M-WhMN_GZ9uhI(v z1~y_$(nf_=eLdsQyx_4Uub~~Tz#&h2F#o9w1eJFgnHG{Ra4;o z5?+e)?^EGj(9?MGE5xsI)(6G$Th6-K1xLf3@eX5Pp@nt*2WE{(g1wlWZuY=pRW+s} zIDB0g_Y|g=x3H`n5D=&HV@E#U=$G4lLCW_=N+sU)t1GUi?h%+%J-9VH@-I37<OtsCCFyN&t zs&S&Nj6Rb!p!-lh{zmU$r_26fK{FmP1qfQFL(p(NsErrQ@04t6$ksj`KmQI10`o~H4Wz2vF^(2}a@n!|LWN<0Oa7O% z&K=SUMGpNKn;N$OeEUK%$xux4feHUm7JPKD1>+L z_HreEJT%^{)BgB6y>ju3N={8mk^7#~k3%%`|?CW9bvS_+X z0uLMbijp%fPzYTdlFCq`yL;HzuaOR>zrN>F%x10x^f*7G`QJ5ULPBq4-08VD|G$^Lff3vUyH_V)bpU8*Wj_7Bz^34{RwPJkdaG6F4me!v<3z9p0AMdy{MCl=o8Yce#-1|mrA{&IkAT8JNO2Ai7MCCW#rST+ zsm`q8$ls^KmzXD&Nc~*vQyz>(?8n6!aa?LK8R4qWNyHMmp)!2L*RqwD`GENe3wL(! z!i3T=uvjGL;-bP}Y8eD%wG|(v_J;tpw_(}dahUMcy9HYOr?HvA5BH$9^Xi75G%3h4 zACkA@Jku-0K|0Oh%D|M5;z=bYJ|Fw!r=)#KNlTd$Z6_tY&;8@ zN*JfVcTx4}(a8~6q`v_z5Ynky$s%N8>DWPIrau3`r53s|yc@{$t!u*cM6y4k+9JMw z2mx3w3e!SIVmeeV!t;c7+Yfu4zxK_KSi34U1|hpLcz$$Ukk9j+U0QF@DNZA&q;0BG z%zU8@ldk2}TNbkloqkOLKU&stT)~`c&uCSG(MI7YGBYLM8`p1)WNvTco!Q~8HGJzk zHdk$Ob>EfVT4V8D&JHldm(ZST(0QuE1SX*H8u-a;xBu-1;%03`-15R@VE3O>Yg$Gw zh|~+2Y)3A{K0y-9=AJ_6yIg7c$h5N|IJTs{QPo#|%jF;_|G!gii|D)9aF- znD0d;EplAHvJ*@A`eB<_%*itXXN7gpMu-E0qT0&lCz39pE`>?oBO1-{xdMk1WEM98 zI1r&nV0*uiN!OG6d%Z^+(RoIQVdwIJJT*GKq2a?=ZSb{h*hyE%Tqa4@zam4l4~Avv z^ln6KEc6uWO==y-(tFk zJ+C%y%8CxT2cJ#_CNMWx4zxSh8jVHdxuqW%4k(KNs#ZP$-Uu?06p}S~b{tg{Rhv zx9yy<6iIFB^)t^i0Ot)2w6Osjm11HAxu#`lHK7=T5f>Ed;#7&0?zF~l19H$f;T`?~ z0bVzOlPAKC7MC+d9)u%@!yKEvbAtzn^%BmdjhV({+DA|m^lrQuIL8jY9 z&y(VkzO;M(f1JPygoOLjN5Z#!rFf#ZJY(x^#$Q0cS;WQr-gXJF%LLivTI93G$-%4( zmjFhk1$sv}Zi453=Mpo}{7H=5}^=w5I&0-K@8G=YhY`W>@bB zTo06@&>M--DD}-9XLtiHv?9zi)3$TLSfDNS&c0J7F4at!%=4%R+}5Xw03qKfQ`|{* zq)fvCG_6v<&t?#8A9NZNJz8vB;Na?FB4bd%p<*8ed}SuNmn~%1Tp_(nF*$(^J==M6 z0(Yv@(ofqvkHqSaV8;kolbb(}Y?S30GPy-ZPE9i=r1klJWju$!UW9VXe339_q;_rE z13{FUo`BW`anl1FqelMu=(!NRAs&lO9Uz%_9@=T1Uw`SYYW0?qFknhtBFby4kniJg zLUss}axGWYq)zwhX*)j$#$a8V$fawNO%h&T8_|pv*2Om2`{S^EH(8l`DwRFaPU(Mj zsPXI}PQc!NR$6|w{AN#*yaXk+vAu?8egfkPU~yOb#Fxr+og?C2D!&{W(=jR%F;QUT zi?s_b{^lyMwfyM0Djce2?zFPxvJ`RRvK@9ztkjnR4gdAAg~yzyLW7kULM_$E^DCl< zt;w?jvHkL}wjAbwe#c%=`s#M4YHsQ})j3qC#kj#fwPqi4AI+r_`4UxG>Dzzx9gX}M z^6_TTgfdJs?R&w)uzpj-m~d^=sqzmr<{s#j=!~WiU1*Ug7Io`{mEGN3O4!7~aFIo! zxwG^ZjSgkx;9~&&pJ$pq2X>ucKoY*eIynE{RD4F>_jg7En-aD!RcGf=)DB^0mLxg zOpQc0i|fnOMb2s?%Z6jU)3Aa)!a>mh(~75UsXII4(3p~6EgNgJRDsO+JJhLi)+UXK z2;tiCJ3poEuRy3`KJZ3$$s}vrV42%?S!g&816tVeh_a8pxAe(4Gha`4e9SJBEPwDi zBU#abZ{-8lV~cPZXF!c>3iwrS(1LFj{pVBH8Z9 z`r!ysK`hN(#PmU3Apo$ucIJfjrFP`N)W%zG=eVhL_<02?$`3i>HgEbH7M~%>_!*ZL8sBB16tR#y&!fPN zr;BEcX)H}OZIwMxni)4!aKdRA{Fc5RpUFJkx4RV5vO3=AVk#&8#@KFa%Sy@v_)N2P^J1-3 zo7DIGrZ13zO9NNb`che<1$ZQO>!%#+c?@7Hyb~(!WZXFcQ-fN1Av*-?N4_DfbQ*4D zAWOe6dO{wBvdSpeNGcz-w<5kbhI%0Ke2eI?f=X^`0ocqL*TFTMKfQ8A}a-)KN zSu|ve3RoXMxvT1_uyK3)anTZ7hZwWU^)>3ptiHmX8&EYT*RF($?l$x~{utpdTQT3;lZf%bjS2jH6npjSwUj6h_vb+AnubJ(vOKWm={jyLu zaS^8ys+@1-kO!m-QHHmkMgk%pdYbUT$4XuLF?AT`E9|Uxjz&PQ>(KAbZ@{@NghJBv zKbZ?n$16m-yH_seJLv(Yd2a;*j!wfgJ3L1v5slwSnQ^?o!ig@e`fIakr-7bCv{~EZ zsY3l>OMGgrZVN1NfT9TgN2YIS9RhJ9t{dvy>u9 zY+ZX%ZgfPedb>QNX*4v(IZUEW@%@7Huhd3!D#70u7fz%;-}U6%rPs&o((3X-NUuC2 zuzH>n^Fs{DItcYDIpKkEw@&7uSp|OI#QmaHKy1 z4NP2?B@C`zOYkeN7;&}7TqY7nSc{Hl22?6R->XuLP|1j$;X)q^n>`Ha?uL;(MxY4A zLl(A87|ioV9n>2@xxJZ4a+T$^#AvB9@R3w z1UymOy2C6t4u=Yby1?TLwdQ=3rq##%)wQ~Y9k|wdeHkM6r8BP|LRHEJ_5x>n`6R0B z9a6bd^;+j$qf>8rY@;MkhXdU=e|-)g=Dw|s=VYH`DVh>Ok8(y$joSJh%uPS|%8ta| zD@ZVz;e>?=8 zp4B#a(Fm|@g6qdb#;%20yuZ!|EBG{%XVysdfA^WG6+M&19l|^Evmau?bY}}UBo$;+ zguX#;d+fHog3S@%raIwpXnjKbN<5%b~WVml>LaerQdN1 z)TF44o*B7bI=RzX3kkiH-~72x;V&$!w8z4hC>m!o;iZB*KFNvi(+1;)=a(pEOR zuJ64L-g!86%Y3DJ;s&Ik`MPD*jvwQYSUM+PaG}Uyl6O;m$%3uw$+|cO2*uELne5i7JCoQF*iupi zmL5uJY~{iF5yi*$BOfR`g}AE5Y-(3Hll}Kp1ZVq^>BnFQymYKGcUJ0E+NXRh-Je2VZJ2~J*X{{E5dv6*JJhd` zN6h*?148%wJOcsdu(Xa$@%l4fyK~tjK_NRIfUNZcrD*x-?Yk-uC2yjoQ@`Bl%rTm7 z$C%mqCebqYF6Kb|Fzt`MzNBi{xy$8O(FtAsBs6mz8ZvO0lk!MI#Y(bb^u~##lf3KO zUoM{LKDE;tx_wek%R})P{5u59v9;h~OcXg{X>!Qncl0q61;+ha{nkH5IU2->uidhI z(wwTea3?}j+m#5l|pW8AUiSUG*OxqA$F60b1$*20WDg+n;CQc z!weG54Uk|C)_%l}xVhARc&3dvffF$?q_u2Y?-WH`q;&V-<^rU%-cl#*rwRkp;N|P^ z?iJ+f3@RL1x)hr7^Ja^otQYi--$Wr>?%bI#CIPRQZY`A$5|t&1Zd@l8C5SAdy)N~` zWkoI-fZ^{S6rz_*|DzOmC=kLB*U-yf!5(zH9>*ny>4LL1Uk@Z{r8aF2|NhoA(x+SR zZvd`|0SIs2%o#`-==5{&X)Qy4)1& zFNw0Ss#t<<2x%)l{M;!ISMT&a1~6$=uvLjs=U>QO|IyaebVg(Q$gxhVihN$@NU%6q@e0uSs@@X0TByzwR0^my-@&lbsvoT#e^)Tn6$hTX zoAWbOFKx}u@iSfZMXJH?FTtMFwiPombnhs9`l~XWx-Lan5QqmJUi-pT!qY~TDH_Jwg^&(B>~FQS_0-&V(*mafkl<7upN91!#IePW9gL& zn4!K0t&TL1=MtoJpE*Tu8SZx650L16&UvBHX@aZ4miSj@TyPfXp-GS#CdYWjn zV=d1wL-2y@-+LNQ`^yq4E8*_W7zjleg=_##JR$f;ty=ds4HGmspd1vD&iKtJira>X{0!E3p6SO59v>Mv!irMb! zx6U!;d)ynMto~A|fszmA#-Z$PZ?rx)fTP8KiM=y_EULZPePMs`Ee#AXxV^zV zooA0xEdS9acV)>oBf!lLWh07a4%8(T{`GjgKu*)o<@U6s0UgNp2#VPIX_jz&WRf$jpyl)p0v+mb?su=q$bqy2oEp*R&1aS(r z-VglcP7$ICPt)iTJlFxT3gb&J9pnqX89XMtRXC_3MlEGXjmj1M2C5VvsH$DdUi?dL zmPW~zd)=s!jDBLiK!;q%_?%Th&kpg^Bx=MgASN!#!`?%&-61;Wpv|@h#RFe+YSVW3 zNkD1n36rA!tNpP2wp8u|Kz@DY@oCV=U=n!*N}^{vY(PHeZ|4%%S)>1gTRVBH zc`lFeJ$i0)x~ zgx0jG4>Y|k1HQKcd2dL1g?33EdW(czvhtVgc-QxgVlPjjZZY$SX8M>gF5~tS5=i!QW3TWX_o>leQmxY9*3nVkxlE+H zUzt!^M|~Bllqn+l8lj4hzpe?57E)yTA3Moz?-womXkvt($+|5qb)FH5Z?701v4`o_%hgkR)VdRMG zVh3gDWhKCwrBLt&@+&hb4Exbfg)++TFShC9@h(i@M=dy3IsKL^(B|xTkOhjToEZ05 zO{__9i4&mz0;deel@|gP6QE&+%PE43N&=gxGrR8lLw`;|jAn}zEcbrVF*^pwIr_UK z(NM5_$+5F_K*~bQ)v#Kff@^kR@eg*F8EJ+<`gU(&g-(T5`bMzXH1y7%YD6=i8i{BZ zSoctOb4f#w@23zIS^e&~K1cK8UC|`6X|ms61!CNchxqjeD+>aIF1i^mLg~Kgh!vZh zWj$21*f1H09l?M#hNXR_f6?mZJa;P(P@7X_xfyd~9+XP*2_6%8=0qJ zdXo7`yJ&aZ4biMo%BX#@nNWqm$8KEx(ohwwxRNOnphTW?-ZCBe4Z1fhF7x)Fg}zi{El!Rj`*Ofpx5lwWKXGFfG5z1M5vX(?Y)7;*nlI`a@vHq!Dzb- zfS!;(0DEV0=i``z9zx5K5{Cd8qdizreBJYV|ZEB&M^K!%%6Ku@i;*R%W=juUm)$^)6%NaqNOY z-qei{)izJKHI(}yPe9^N)|EKqyOT=wi5N@#8&ro;yMnRD;Dh`f-{ciHJ-gb6-)d5n zTfu0k{BA~pPa|~2Pz)bWhn)NB@+(rs$s;0tv>cDvB05r^yZ4l?)MmhssxET_Pj9+3 zTVZFAarLZ4S?|2(1=6YU++d(4`s!SEh|vik*lL#R(Vqcz17B;ab@4|l*s1Q2&WlC6 zAU$f*H-v9iw#shB5PxOJ_Vl1)32or-QI)dqz-5zaP1!VVPjLJs?9g5Y7b0HRBFPy^zxa6%X@S5=7^1(4|?6)ni`GOPBi= zjv@#p!RNl1wVlUys_OMyo)rH~4-2xS9VN`^m>1+7OZ}QGhX-x`fCakTg%IQwlf?O;EOrF8$E}7CJd3KwD0Gk zx!e;O25$!DPOKiT2HqQi)1PaU!cOW5EIxG1FL30*GI&FHH-T2In_qSNlh}Nl`;F8+ zx7>Q91wnqVq7n?f6%<2zmxLdc7qD-T^QQZDAKuAHe8jlWq(gqWlT!lj>_zP(xtQN* zR+)>qp|x>&ML`}ys!A6L<(PylJ$&kGal8dzY~t6m=x5P&C0fV-SJiLJQ^#68_YZ&P zRu6Zf+$Ss7z}c|T(?o2UFOw?r#F{gjMcj;Pwg%QcDRa&hLbU#Ga*Mx*@{q|V*=4nJC1UP33ym&VL_4ozZ>--&nedsxfv@dErQA@=c$HOxKGfIh} zh~~8Rif1O)(9AkI#%zCe%+g_Vk`=Q-LnmBhF2K^7gXR0q;$_>)7Hdo)SKof-u=%Dy z<6T?#a4nwJ<{M}zq9Df=SDmH|-{HbgDA*p3{RjliH=eK#e&&Fs*L3;tXQoZ8q9 zdo4lz0L?`D$NU1Y8mfA*XsuDr?^6(C6fs z?tJV_r>mo4d(OzpF(XPu&|y<>R`hTRgat4W)s==Y(V0Se-2T|n-*2IjN+N9zN*sPc zpg#S$urBB(T6Efnt|GfRt<|F5OpG(XLkiv^JUMt1Eu>E`)v7MXQsT^7dAQ;&$Yj97 z3|C)Qc5kWuS=dO5H7{a@^In;!B4&xkv$a=U$=vRSiHb)3#)VfOwJNHjDJ(> z@mLm#XXX~<{n|{5s4%QHF3t$SoKIjr!m&)c98)VX%-*6_m0*PWk0KhW`*YGrN>`zU2e~$ub_zgUDcOPs&gHwwD`}`BN#Q2n7IN8 ztv1Qszq}4o)rDev1Ngd*bYM2Pxpmgx0`8R_=_qGFmuzJUj)%De8CT^D^J26O9^i--`<2_oiz z_4L^!>t`Uz>b@llr7tLA$_0NvNHxjdI5A?)yrpukj*D2t$`J{%atPJ3LV@W^tv^V` zyp^_Sxm~`~pL4-+2?; zxm5PEPsSCXaZRD+yc+@pNyGqqPt@%G7KCXfOX@5;!1f}gqxIli)%y+4O5Q_^$8 z?tLwPI)IT7Z)5c6lakr4ilR&NS4@jQM(8+|oM$onNP#J*FgTDt-& z%`(YL_X}RL-AHdK*}WZn%a+W%P_No=tVvqU+E-2!&cxp}bUE99G(UxJSK9Si4~nws z5_Wmsb~{r1llw$rbW87Gq)cG{?qXh3FOn-@ir?l^?UbI}jBxthG+7p4Azq~8UkRil z`{#O1j|@> zW(nkvA_vTW2vGC81-NM`W>63YaIk4C5R2cqkjXy;JP2}nAU+0Q0jWvmq^)Nu%~cM~ z-2S@_va1&*2>v`_2H)Ad1hKo#Dz*nQ5F+i0BYqr<9+XPT7JW#|(6Qw}j-7`YraUM* z0@xY5oxET`s}f6B^}P3f`AB@^uEgcjF=z9I$O26nYpJHwqTH-dw5s_6-wa3KL(NTv zA8x9p_n-KpIa`{8hFO$yylm)Y#~74YRjORbgduH3Cfcu`;dgc@?Nl9P<25B)N=|mA zB`e&YavX5b1-<@}PjGMTPYk>%h}!we11K;&(kj>}H$){&tE4#OQ3ZF89MJTXW1~UQ17H%f~Lf z0VMA4vr@<%1>qeP1Gur)m0?=L^#rt{(9!Po9+rh zxT4RY0Xysexryx(Jk~6t+VBL-_J|PkDmN?W*I{o6r~kCU?r#E3Q$K-zPleE!qFx~q zx+Vwvq3iq`A3-Ei(jGLJKD)Vh&7o!i0v`(jG%p4yZla2O6#HfG2n4#>iZVAVU6fsy zz{cz9rG@T={_pUFHSGG87;eM>Dt6no&R$txymBt&1MIh%i)+#7&7+{T?UesV)p^Gy z+5YVx#F@D=)7)ic-R8=ixU&0>rh4aHYKmxPYK}4#Tqv5Rl|oy~ot2gg_rR5!RPF_c zVkRmo0`38h-_`wnUcc}2{Hwn31zgv8o#*j6j`z{NK}?==e5;%N7_(t@VOp9DUv4OO z3yD$r&d`JF=3BZqsJlpubjPp71*3;ceG!M;Hvby)VB+n676>GPy(Z<%w6zM4<~tYr zuhhnx>|uze_xv=@toFwXA;ffWRLP!sR*lvM0?Z$3_&A9n zDq3y(0dA*`A&VbjqeR3(q+wo4tsPK5bVeIs+T-Q7fi`x;m{r$;AO> z0!LF7{Gvw=-pz=r00N6uC8z*iUsa#8=9sQxs}V{wUgygw{amn(xipefCF_D}Ke>23 zX7j>Js4&OKyc1A2(rZAQAjV2m9w z7Sw}*kcZsP%TL5CSr%A=RWR4&$0AZ1)JGWlGdm(Lk5v#K=u||Ue8`WL&PCi4AC4_QXGCYcpfW6<7ywu%rSP4 zNGOQ(Zac&9Z58bz?vP(I`*K{ZNmW&{{W1Zyt%3Xy`DP)#+Ss>_+FK%94L`iVd%oA& z9Q2B>jMEcm3+j%v7xg~ks+#X3cDHU?4C3z#y{?cgKH*E8(`W_|ti_lbk+3T(nr`D5 z8IS`x;!o%0t35`4ee2>|UoK84SbX&5wU>$(7lLVUBXyP)KUlpnlZGk2?>hWj#Q?Il zMCkAx#9DKlF7oudWQ737(rLYOS*5(P%%B3g(J5=s=F^SoC2JL*mM^u=b?B4RNhU+8 zAc5Y!;6DjsvsB4Y-3`!9Y>F`2U&WwVSi9{=XOfZi-}B>gHUEdt1baTXQ^d={#m@! zQj?8q@caV-s27T2_wsZqq!RNi$O)|Pm8eR|zJm{Hjy>yq#umKyXIfMRTX<#PPR!BB zZ7J;`MI}~s`^l{4WK~uqRk5?Q-0c%3U1-g9dF7fD<9w9<)cL*YW8Q<0PRP*u1c*)2 z8ZWc_wgf}{Y2cuMJJAL3rF0+UHhQsJM=6W_Rc={-&0HxhwB#ZL%GMcU2J5O*mHpkZJ*;mNq3gWA zi`#ojpRQUK@6@Xm`d+-BV?L5(P+i&92uEOcKpILKXt6B4df!>`{9+W&%*_m`Q`{Ux#K=EHx=FM z?55tvZjX8?gOJ#WRmk8g@JVY?g226`Iz3BNw@6Y}^C@+>)B0$5bslKG0q|pA+PhG6 zE>WH=v>F$JBd*}WR}nFE#Dfby+zl}{EwH;%zD=AnvuX}Kg=_q$;r*`qtMFlihdfXS zdRT<8E*W8QDVq)lR;%5`Bk`zKUJ{tfKi)Ygdas)onm4VF8VIW@lqK&S|MBLYwLIU% zcA6I)@CkW^cCP#wQpFQE@cbIwcJ)$TT{*F4N;_Knq`NL8**H~=g(+Ozy85_gEV;|F z_%5Y})D*SBh@P#qKz&I7v9z&UOCCw9#1rIrd}tZqk#dKmA;pnfeLI$`S^KKTk9#E*u7~UklP5;)p0g z+~6CS`J|!&;B&I~p{dVyNY5@}4`N*s*SR#la{K_9rh9#eYWG-FEF)Z_(uGm2(=`8J1oCRik<02 zdWcG(d+Jw_7IBZYXERpB*mouX3y)u7Y8i1Lv*qoAIK7TDSXe%IFgK&JP?xdlY?r3* zS8OPSI4+0^E*S_PtEe=LOrb}2r6A6n>aN7J{W-FVYb>JNC~34YhW;vq62_D zW=k7I2*j}>HFvkSb?gTjj{vFbam-tgn0)$K4nt1&m;@MeXr_H~){#E<^ z;X%wB4QD%-wWh~Csd2&>sxk{Z+0VJW=L@9nQJ!w?cPNTiR^;QtX4U8aZnUUXR}DD` zeQ5nHAENI_kn9cp$NEB|j1yLFPE}4JI!?rCQ~;_EG9$T;#+###TrzKxe7S;)ID>zx zQvq4zY5rNPs71_{y(EVp*1^l1D1piA{pO0_`=8 z3;r|ID*NNo(F$=xV7Si$)s9;>M>d=FV{sKKdfv=UK@^%g3`gMW?MWgvC8%tr4U{JQ zxT7E%-}c_lD!iE|#!lFOnlFB;IUIORCRHvcgFisJc@eZK%uftL)0gMP=6U9d2B@K! zjy_A=kADy#<;C+!K|a~(A;3u1%}!#r@YyWMl5#%!(^*8~HdjpFhkRs$S!88g4p5v| z{c(R^2M!1aXbvNYz*`KJQjWHMigbAkzlBmIz8m7enaMu_P1x}{dQfWPaI5P?dM;^ zMbyq0tb|nFv+xWMAN8ag?20XV-Tf4$(z;cUX*HF2-HBDaxU=NUUNmhst{~1AdajIE zr-97hWX4VTP)x@Wx6A}NIlms?mQ2$weQ=00ffeh|Q zeXp#W17L0CzCrzob>eHLyPx$he<9hc%)|_bX*!Bw2LeD~_2W5`aS$e?Eumc}zhtpp zub4Q0hY6%?)s~M@;^d|eB?8V!y=jw7Zh(E3z@VsA%VUzeaLrzDvqh_9p+@uGr;s>e zIqn!aBREGedlr#!0-CK;f%F$XzJC02mX;=NtwNl`sS{^$k_zPT#L3c>xG;aek(%NZ z;da?krLj-)%19ir)(+CW?%M072_zv;PZvE$?|B-*%xIjF?SEuC-p~%Bfl=E#Iz*VK z;Qet7mPhpvX@ox!*dBS+Q;AziA-m;lou|wakP8*nd@0=sTZZ0|PRWCk3wa9H$P40_s4);|bfuo}IA2xEkRaVVA zG8c3RQec~cyIpXCch{&anr1O(NVYGc53Bl3$FW==(5_$DsLE*U%##|~u)3@v*%W4W z8~AibB29lG9X&6r+0b>nwh#WOgog!^!sOZjxdHY85LQe(vw z-S;YvE4;jKq~KN|>DCzcIdk~aPc5bYIDsuwr{baWoBPys7i6ys-8f{E^PgtSb#V~8 z^Q;BBn%GTs5DYm4vzPDeYi`Frmu;8IKCWcRlIVwxrsg7hbWe0k(03lr1Y*&mMl9+D&}MT(ceFb&s4+*kMN2{?#6FM>sTA#-jbR7jqL&gwc+oVuKg_K zTOPsJ*9_o<+kS5L0X9Gn=C>!!wkjqt<3h?dJ7aa9dn0<_lKFuL%Hy`%=h|<8{Q0gC zmHdrMzPR?uu(i^t#grnN#_Lr*j|Tr@V}1>1Ym2H{1s)gsNp&R^Q0w`IkZ{LzRhf5*4WuV!QmlYuq~g_!!fh|Du;;SW$&7!x zA^nS$(b&D1xC3C}<9T!|3#TxX0|QsrfU%N(OAVAoQpY;>(XYt)*AD1)Wd#@&Eg znn^D5lh1aSCyN5{87tt)*t&4JUkxFZ&!UUXEvm~jtobj{tnfXrg;47CXX>#ozKNvk zhf|Sit6+u=H2VGHHL7^8WmF2L4a5vPIsLQ@@+;k2t=Trs+u8I^A$SbQw$0cjwezqO zrPr^97f}=!JMI-XAavx}1(pZzHt`4tnZAqEfod;|)xo(~d!|q$EPs{;y z*Iz^5ubELcOUb1#3gT8JYxwaYg%R^-+s#y2is#j!+`?$y-n4PHjN;cGYjU48^hORn zy6py!=}dL@2IisiG5FfVkc2}}8xB1b4XL?dUWp_humr=gUL+rBr8`h_Q zpYCEt6Ey8IFSB$Vf9(J!cf^~btm3WTLv-Cii*Py%2nX$$uk{S-;H!Z{&vJZ}c**8{ z(nrjy(lT&66ZORuPaM1y$cIiVNOg^V3nGgI@73;AG5~q`{JLq)Bj9Uf;|dF2^)+qD zNjcR*&4M>K0mA)0Hrw;Ezk?zT3Y#iQ*Q&sWuNFDE)9I^Y&brvZnnNE2)kW^K2b$TN z;e_3}o_Y?%R!J;`4WXLeURsk@kBsGGS8_Mh(i%{K zH0zBE0YOcTINyohh^THj@IYV4nJdLZ>Mw|owB_}dKriwittu3$r8wi zFv3pW#&Ae~r#@ymfzo@f74Hti^raeI`4!ujd7FKKuH;RtKZm2cK6IxW8@1=JO^trs zUH}H@#KMjnjv#>CYt>VMjcQo*@Rol^~wmTDDC?^eHIx^#uP z#)J|Ecj*cIHzYg9h3S>08wOMjG-`?3r)hciv1Imdx68s*4uL*_DJ@}2QPf~n_| zdlRbcds0nxo-cbu4MtcFkyKDCVm|Zd$6AuG#|lN~K}k@213&S$PUH!oA7f#rQ~}>2 zdYbcjT{8STcCCLy+?oKMq$-U*I{I--AYwPi_rmTo?--*XEDsxudk>ng7~YPeMZ3Qx zxd;A=6y1?AII=r+Rq(vGrbZ6ZmY7scm1 znV5?BMKE*JWgfI8#)izmh>TK4wcV+Ku?r>4A7%@iM7NhaDyT>gF6!%^Zwx7O(%Z96 ztl9zFh{9bar4TxKo+m@Pm=<uPHx&dG~>(97&R2T43oZco5&Z z7bC#OJ_pZj?4!z9Z}|@M5k_8`D%RfUNSnG-s8R7mtrGi^Lguj0+Ak&hZrrBDA>j-{ z_unbSo_W!m`PKi>Rn~$|-?oMxu2{!~&qBruIJml}lGz&0BF*6Y-GqW+kLZ-;`Jn?; z*-?u<3|oE|w=6|DWMw}YbEm0uH8AvR*>yoQg~*c1xdOD_S{bz0+(xo#*H5W_55lGH zV=@hEU#~jLQ@0ZU$T!&}1U(p$;h1L9^uDgRXg#G*nygP4yDH6*B#w_YTgE^=lrws9 z+D9?%QT82AuqxDr4M^z$+MdM&bF&6^s)iScLf@RWhfzs#MnZ>=GV^tjQ?BKOVXAc> zPbM+9oiY1)#n82|9<{et%Wlk$RqnbguG!fN*S#Rar z^hYNDebBa`@qf}ow zZ`Y1k-Xv}4j?JoBH6?_$qvxv}{fFp>>3m-AHAe?FnpHAEs=Y>R9s4@{;n{Z;#!@y;$uGyO!ASmej!NjRxxC-q@c)HDs|i zDviEVV_jiB0u?&ru(Ev?u=^y4RqibL%h+P&+_ebeV}A~1Qgn0@?1}+w}c%R z+7^j>RF!PW@-(jS@Na=Cf~^J9JxVM)8-lYgh*+m8q1y9918nx}KE*>9R%SKyn|qQ< zbzb5bdd*(L9lP)6Xu#t`R9BCiv0D4U64gJPVVMK$C(Btab>7sN<@{wEuTjQ=L3Znfx5tT0axTw0LJinn#AH4MZD8S-v>A zR$a(wni22U!4u7ES{oawm^UufK=1FLKGgwM6;O((QOudNMW0B&z?;d&-CMDB3mL#T zj`qo7*AleTnKhwYs8vCSt6_!SzsxX|MjY-`z6VLyPbm|htN_dNGN3b9QTtPKSQAU! z*U-}sjiez-kW(1{j~oo?`UoA}-0)#ef?GZY^Zetw`&~F-t(;FJWLnLp66c29a?Fp$ zL{WfcL%h0>y_@}79?U#Tcs8Y~{I|~wZ#nmgJ#A&u)h$W2l%SJq z&K?hK%qfv2(%cZerUEB_n|oyLt90hs_3sl~B^(Ki^pBy{qNAkp$(q6MrH?6prZc>X zmH9bg_o7dgly!e^sqrgZTXl9#Ca$fTExknqBTjTjB)7KLtX~|{{V}BcXz@nz)(WZW zF{Ne8F$;Nvl;`fkKy7|K{@WT;r5kl5MxE9EDOqk$1^tO}N>Htz-H7r*jmsvsJZ!v{ zJ7DKS564Gfx8pXSagCU*#59{B&_V3SY4Rz5f$p43iuPFC!)F3d1eAHbYSL=ZBp>XD z$RU!3{`s9>Cy2?-mv&{hhG6dA2`cWeQQ!4>9&q2PH=I$SW>$?|D@h%Vf$^m53bv!? z9^lrTk_fgV8Nr6p{&PCS8+z+APheisp3)$djdOg`2MG@K;;6G4lL|&nyXi6?Uva-{ zQc`y>YVf-YV5=1$cPNh-V^Wz0z{}{jV7L`2MLCsOTr7HrE6#$Ha(HaRe>UN;#4M51 zEliI|#em2aNU@N=l}7EcqJl@x{M^#vpS&x$6SeK-xRtk=Z+oPpSLo_JsT*~>PTa(7 z+yU}-XARMkY=sf289C?FQHZVpn8|Zm1hpN3l{mlzOeoRYJ)@0%ppLvoPKj(e_c{rp zaEeLmJ{&o!#oBoDgttet?X52Bb;NSDwC-hr^IC+z_ql#QdY-N&@Q$|hZnI?ZC2$vF z{Jz)TSbFn)7IeT8ngq4YS%baAFo zbMLL47;cD;wo-;Fk5I_-yE8)0B74Ub744|flA_C$KR@d(NAO{AMAtYO0UMfs%g zt&gWCUs{gGn;A_HY>T|ydt4266Z_Zu=+C8`QtJmGHs>9S8?BxnXE4txY`QkCP4JYb z#qb1|9xlbAw&t6~=T9^Y*jnA3bwL7=6#r$ z<$||V92P<5jVCa#GdB7~?Q!kXrfU!~IC#z>E~xSJDl*@UIFH%;5d@$0JpHNwT%Tp2 zZiX5`s+_K{`)>Gp$(9bQ@GGJ?uQoiJVewomLvAKsX+n9eqN7g(ZjAGkX-?f+zvZ7W z5G{Vya_OoW{+lu@s}k1~OzA+`39g}8btfc~;RFA9;~cgIKbwCJ8Un&JyD7fsc8N8@Dje%8-=t4`l9cAiN?!aLsLQQZmQ zEvmI{!si>>J6GRrIxM6CJp36Rxvbj}D2eL+_4}LFJi=_m1ti4>B?i@}oN#q?gRahB zvfvt0KKx`6s79HtVO?Q%$4yagn%f4i(>LqMHb3j79D9y?7H>&eyfCz4Cp9d&D2q3^ zQFQR-zk91`>)2-bdK)5Q>8P`#;LDet2|&|?+_B<`BH8jar5*6(j2xBjD?iBYabg*c zoEv>J$PAHq`pI>&P+tTKI;uJ2bXPPB&X7GV^1=PqU(lQruNZUi|P~&gJO1^vFju_xc z?nznA)C?-mym8*Kd-ET}+y@y-MU&!-iMNi+!x!{mPK-@h{+#&%WHVoo8@Fu!N3O(o zEBm2y@R{B018$tntB4LclZ^?-ebUEglkqg6PHItjcsMhh=ODRO6%zv3366z;o|74F+hz><^$UvP^V4d=A5Tyj)_vhR{|kgdQk9qyG{0WQ$^;Pr=YLo4oF z;CO7xdXhuGj*lnhb~N%fLNKk-&<&eY+@-)!PB3YwpbZa{P2cz$S)k3AN&^{2X$x=E zh(I}?AzI}41Am%;2N&171AS=%rcp5%z^%k)Pyr`(>CxCa>j6DP2)-4>mS8Aj-t=}i zsm@74Ept?|h-^^;M=e{@$;!i38o{y--+^58Ovtb@DoWj4PAbykP_L9Uim|smd^zd4 zK;WUr+*14AZqyJMC792RrdRNQ5EDm3e@LF%ZDsj2MY=mk-ms_2qao6KKq*ys77_i0 z90h8apHf@vQ=>!K*U&15Dk3oal6SAKs5d7!I4GXDs;>&!!KH<>4J3=G zRaPNr$${H$>^n=h19|T#p|rMP5&F13DL5 z1HD3Pi=6|)sr^w=n7Z~li`}DxX_dwljVvMFi;j?ZOd)C6;4FRZnZ`ufSkN`tzRrQ$ zO46jB6kHN(lkoA))aQOPM)Ae-F>h5NGMq#kD85f2p!f^ne+b=FQ9lecym3QSzu z=vR6GM@JZK2FMzyd}YX~{zaY2(^X~J8x?YwI^0x8J>>r^Zxp~vKP@fTb&Q&FbUSWi zwAuBlw#eJ<=&x23?^Kqhf0A$dwn2BjV^j!v1VMP(EIFvGXE1^_)+;`pBp*6itl=*3 zXC0Aa3ng#@&3X?vgC?l^@ogYI)h9BO@nNWOAgEnPx*5Kn9=%xsQdSFKKPKILx&;{= zHI*mJj{EvS2Eiz>iVv5*Rz@7*aLk%HlFq@*tTn?pFw} zP^as`%Ze!#!wGd&X->hz87Z}W&c?^4jva6>Uak27o|0=dvuaGe`NSwIt!mjh+s>C# zQ}xo*QAMq^oQ|*;uU`g&fTxX6CjbFe+H(QPZaYmS94FtM{(?E#F&M=)F@k<5*pl zq5P5Y*)r;G0|y3wqNj_+XN4#ea3FeZ2QEqXrg`2CrK22z)K6%`fo|#|f4)$NoXqO1 ze25Czvpf@`U6sr$J2v!b_rFTd^GqxlxcQWU@vNyNr<~KwvJG2yevR#kY%2JHy0ReEwHI?Ij2_`!o49 zkhqR5y#wCi?(T5a<_qw3HY29?Fr@+$+(f9U_vvjyQ5Z!T2b@1K@hg3#AZ+FwLLgfd zDrP8QF?r1KLTi{9;c%gGZ*Mz-acJcX@j*B6;qBR0a^H(v^EMpQX%J0N=dkr zTQXPsu+ppZP$8U*oW)&%FM9aQ5#(9wnODU1|>_zdtv_^pKV8yRQ@GHH6uyyp1(U#becEv2qr6Qv^ zr(b_L<45(51+fhKgmJyRPG2Rqxy;h`SH#xWuFyniW^9uEi`a%3alKDQPw)F==LTPb zh(W8Y+pr<%(HQpY*gN2M#wqJfwp#W+@wTjOLA1MyG;F;){Hp*HxQ<)9ol!^e?M^U! z#@gbG@~qHDY!zV)U^z$~yoUpnTE2%CmU+2ue2huf(wzuOl^cB~9PEG8n%K`A zE&zrF>zr_3Yh`eoDXF{R$n6Td==RbGVAYWBMha0!9Q8Pya88*6tWd40j#5D2VDD27 zR1Fpy-o$OxUYBFc59oX4b%ooiVVu)^dh$lxD8;L)cX_26974oN;pm;4Nq!@`l~HFb z8sEQmcZfq(G&jg2y zO^^7y{B!S9NfYtjW~jcHe7m@U#1{#H+<=oIf2q~(Zy(3oCvDEata$SbwcU+h)p$=2 zq$Ep$R{4zIv%95R7pTfV(p!VP0M9oCiNN~_R|7nzux|yV!7AAKT)}d-9ds}t?PDfm}xy?%gh8tkUo$2hZbPI0)J^9h9zN7vquMF$2Q zAk(Uk&X^xqrY|{g&0k5Km#1xBON~RL$rk$_5LjcYbK;5Ob5-$3As=p5SfQoZ{Ct@j zbY8Y4tR2e-7j7rja6KvX^7(I}Yi)x!PUL%c%_1dgab;13?>XxxOMnY`teQ99@;aRN3C+U`Yb~!k%Y$kl> zRFqGH(fIb7G+gLjVHef-QeZdsFPjAa2@s!jjxXF?KN|f(?q-Y-nmCXGIG%Lb(c2}v zA%0tJ5EY;M?haaS9Q68dlddBF>~4aO|3*)R11KZ;rtSHHTeke1?NiwqPSGjbAo=^c zAuC`r2dqMrg$7zhNFGh;Yj|KOq|P)R7J73CQWbOG8lK#vp-;sIySF=mlohOkhh08* z_bFgn%!8ijsj zB1`$6-T8ILTPwM;ow9>cCRwPs%D~I4B`ZNT2zrmxr_h$M{@>*Pzm@5KS+N?oD)a12 z?8R9=TOeIC_OwH1yePG5APa@TUIuERdoUbiPZYyAis55m+%Q8Gm!L3{#$D`W?=4mjbK=OKgTV^A)2&;58*j_Y|l>mKCHS>aUV zd^|%}VshwuTnHmBB>JO%PJ>5=nbBO5u_rQ*PG8v{eL`4Wget@?ZI#T2ELW3m1G}4V zLMTu@dWhu)V&`Si?~+^c#o2x%Atc^4;;~O^b>wXQweK|#r#=&R1|LfoA5-hkhO-Ub z^i{uaF?e|;?Q052iY_C0HH{7>H~j&F6Ok<2KTzD0WiAJRX2?xYZq=sMMUhTfD-5v1 z`j^NWc6sUx(434lGedLsdnghuE2_9aMq1>h_yN%8(%t3gou0K_Hju7<2JuMA3?(^! z6Ms3WV;Np#(C!F;B3q5rH??5hJ<&VM5{o=A`{!oHPg5GmX!%|8Q*rmaK%KcZ(Bz6o z;3T+FNHNY;tt3^rNHJ~aTiVYZ6y$sL9L+a+M;wvAAxjksj#1HWgN!ymvTxDH;dG(W zIxme20=iCIGWFpr#=EV)8QiDV3>56{2<*~t?9Ty zGsfDi7alZpz&!@=S6J($mZ#xVORYJ+8kr$452yZ=z1dsr(A_W)=u~Wkl=&v)&&*G* zn|Nz@-K9MZ@_m$DP$~Mpx@ZMj$*IuSB!?6Sp@u*CIhY$U`hX3uKz4bi>8WD?%my(i z7r^M4+gQ2-w}vglKL3uX{DyFbB>|%)#F?6qNLpb@tli8`9>8^J#YvdR8G)YvhWHt8 z4^F%91=>jOMlnJ?Jx}W%1LJ`s{1HAvWz-kQkJN0j6eJXH%9Sh%smGlwmj##hX z;uMQ>G!r3JLbU)oL{d+e3LJ~7dvR)nVza7P`!BAc^3!to&LadOk<%xS|4vx$4m!}R zquL1Ke-zdhvOQg&|=ejMl6o>WB?dZ}?JQ%(}3OOo8XiPdqvZ z^PD^Q5|si6S)xX?R1Y?Sx#vq*&T9IeaAITM9@ZswM3mFaUT%^!=n z!Yz4Sb*1gYCGnLVHI+KUr6T>%+qBIOscs`)-Wd^l&-t2U0l`@O57%}XJ@BaRXRTE4 z%XjcS$7>CmIQ<&`g+@JS))5rVr2*Ly!msj-n^xOo@b%!9_yE#*h3_W8k9Su7_TG#7 z3h;IvvhJkmi!y1YC+1&!+J(ZD)%1-^+a^a-p;ZyEoBjiUudT81=4Yv9$>tXZU*erW zDoxpeO5ae`GR@6VJ1yUV{D}o15P{HVlq0zB9P4|5$3E;bXnYa>M{*4l*AhHBV}Po& zGXdh`9`pvp=Lcoaj2LExjNEC1hlZ^A zou4+i7O-@+y30wxc=@arP3ERdfNF+*x2tv`{e(5~W?CgHu&!4pePB(zz%sbK$i0hZ zdmgs0Hy{roGq|c*^REjEI179J@jGA@6?_hNX5EKKJy=5(-2et+=K_qIxUH1|{fs=8sgjZwFMcUL5=i8Kt3r8hpP^A}7hhd^eQ zaWxF%;St2<41$Ja%@yZr*@CPNVVXBKzNQB4KL>@~5{v-w>{k}1YEeI*3$LvWEvKF0 zC8?ml(9LZCFImsuG;*DvOi}MKHTR5r+Sr1Fc3-O6eb;FO=W6=SjTf5RzS8z z4A6r>?W1jGKKsC&!r@*dB7{zsVtw{}x@mk^S>)lJ)M4b^W4sI!_$P|Y}_ zuuh4@63RqiojN2RIM@0@3|D4#C0|`KQ6k+=1iwC(`mzCEEA4=xd*soxt#TmEy@AT^ z-6h`venD#YwKYIe4O1gdL)zj|02O5qLz3?!b#M{1?QeGwI-A$cvsy+bS)W$7Jd_(enQ?mYb`wIwMp4CXw7puUwnl^z+s*lE? z>AnZtw4YnItLZ_S@=w`1&;S%`TjTo8BEXm%C900wb=emAFrSV$YL@H;8C5(J&VF9< zj}Gl_lpkPq6g$aOdvOdH+UeW_DYVVPG@m-C1vO7oP2~q=$7MjF%8!C5n6})_5Aw}h z0I2|1U@!7=Q6e-?*B%He#qTgBp;h2{VUgKtj6j!duB@U?Sxs`@AK)Mrp6wt#$0UoK|n)h7pMzFxsEj*C>P3(5g z?Adz1_7Il0djQk>?=;kV&&96D!Um;YRQiV^qqQIBTvE9z!P!KzlGzzxS~g<&)i8@W z9N>MKH)>($(_@tNXovJN^^!F-Al}4(zS-OI=6~s*A~7mpA0aSMJ26KU5(QQnr)5wc z8R-3}E%VecUf`M&42%>_zUb`FyJd-M@DZu8*q58-gtg!U&{&|W{+*i9&iPl3^MnzA z=gW8EW9k&V?RBDsjO_e9GZR>g) zIRK#E+VJ-z?vToEkooP4q${Sh=5V-X&jUD09oQTzPF|7%>0(Rj&Aqd#Z6tSnPUq00 z08b95D(!*pUZ3452g9(qAj-rIw6@ly|2-XvTLtm=+D*raZK?i#9gQoj#=@UBUfhX+ zUvObPhqTDomhlhHB2rFh=kuLId286av<<-!me^EcG~~JEt^ZG10<4eCpLC<#cv!Ha zQe&aG$e`R7Z+`&jkJWjY%9XUz`CKWe4Lu`#Byp3BqLtesMv@NA_zgsR86>PG`6;~( zOKFVF5DxAkINE|-)n&*qjHq<6C>L{NTKIH6K6Q&Rp!8;KNQ3}cwW)_)QEUXBoX zEP{=TGN-rN>eH31y}Sa-I4wd zq>oY=rGxPch6xm}bb$KJnb@rXo%w}0{TCx|*X-P-N+A_%;T)Vhled}hLQp}y_h+u~ zpSGcDi?Jrz+NtY05g>7+NSoS4v1ze+u^H7Te~Z(a(GZiSeUSH%`JrPEGeV*)ZpR~U zS#J=$Eq=NEEJ`++5Fuza*Po(kz6VfdKx^4~Zm#~dyV<(n&pn>{qf*6~wZBqyzrfYe z>*?O#kOHp5LGnOaZq0@df*;CIS@%qdq~R*%VIFmMUrUeqXyA%^dm3w_9Gxj;Rr6W) z$p_xQ66V$l%TVt1X!tv8CNwqZyw|E&cG_FoUOOGXB#2~JBW{a~I@oQTBNBDu@-nL2 zGl>foT`~WC)ck&Q^Y*-}pOFofivb-vmliUz)=|IC19kkzusG}Bqq$MCHWpMkTJg$I zvWbw{STE`6;*%mpkhy{^jg0|1Lg^qRlA34X=LOjJqYtsv;tW z`ZA0saJ!y=Hh6aTeAzge9+IQd<^7Q@+alW-z_co>_&xMRGyY5I0@k<-3Jv`QYSM&^ zUTy2+w0)`|cShH;9P2c$NelV9de+jM~3^r(Xw(0s? zS5JY^qT@bwVto8K)?FYeHTR6q9_g{gkc_s&AYl;hCvpxr`<7S&fclN6!u&GuSTito z+$y{L;O>`qgi&|+B1tmhOYU}@Pt1*(b8+|M>UR8@3W-4F>4=Y@iAY5Zhieg5z@k;C zT}6!p>8^+)AGv?Q6Pk4f9k?~aC1+IC)(zbo(4C)<+}qJHnDjGhK>}tII>a#SQq+#u zS@9Wj?!(RgNhq2I1MbL`@}j3Dl$%8|%gh^ah9EO;#=kn*5~=<1x<9`_Z{>qdh4D+> zu+l?-;oo&YY`Ud(&5b*tQ^;bW#Co@TIi}CODKZm65&vgZYovz#V%nZUeW6x?tX=f% zvF;4HfQ{KET+FRBg(J%@u*9PxVUAY+a^p%o760YNB@IoR1ZYV#9~lJQ@I~fb%@#1Z zDu|j;+PWBb@0SYrx^QHYLVQiG+bLYrWqWNkcc}`d4l!u(5hPpb=_MjjG9TUGX=`$z z<&j7Q)abtGgpFxwhVhX@nB?{9u{ZLJFm18fnN0N8qe+mT4aBkS*Nq?ISFVkQh`f#u zjDf~vFk#9BwkfL3^1Kx~^C0Gr9fCuN>kkkrJJ>uTK;vgBAg4y*xMr0Ze*Ja&iL4Rj znYbB2e_ZvXEp+)l+pWmY0}gIa2Fy3!>8iOj3FfP_8@5jJKeqjyU|VHrq#r;FQJ8#Z zfcSd5qFv{IG^77i;bDfE#pU*QphCpw0en$0nlJR6z@P0o4l8;1@NRL;5T$fw#O>?< zuOM&LsTVyZq3Pgf_2uLJs(?h|L&(K*s@aKjn1@QfDOMTeD}9hSO^pj0f$LgHk6aBw zPs9X&g|C1YAZ0S+M10}?d?k$vU_5Gn(p5ujqDp98aC!a#B8?C=kfkuULb41X*H$Hg zYmiJ=_q+Cv9}y;w`z9?O6e~9=8vI4IJcGd+_LMN@#`eq<%d@BN1%xz!FzFsyJ&kj3 zh^#(R<)a$OMThDlDLO*nw)v@vH{u}^KvC}7o~DHi7FupzyO8nNVyQQ;0s*QR;Pm`8 zypjX&5eZE=QsWn~V_;wjgJqr2N(bI>#{WV<0>Kx7GmR_pLL=>09aq4Fi__MfC5Wt` zwbEoa{++Y3c64(;HIg2ReK%cy_UzJLs6J;#;|&)pKk+$P6q?YGo&D>>+^8Km_mHQ} zBaG6ApwmSg_udy#l$#fp%@F|#jM5sU#!zm{0}Pn2WpqRlaNl#6x3fzHxVR- zQpTu-yJzNzzU_I6@%);ad#0XeL(Yer`QnC?>_x#RpA!DrnbVLKqX~qy^5bN;Bz}5X zMao^;CJg9|%MPxhFJBM2C&ty z^Jv%_d?md8xWmxLcJA9Vtv3CnYxs=dtrazvLpG{tP51jhds&o_`H({!Ld)hIfze2B zx6_#ZZtrndieZY_1l8fXo~CVD6#H?rPWHfoX`r9_|EK|?M?gL>>_F0h@c#FJI@X!1 z%ck|7IQZh78e-b%D0}dcmo2NNA{o$6<~RiJQ8TxZzE_TfzvEOU<6b^vDB7Gee+r8R zE783%(C9NF-qcdNEWJ#3yu`QvN7bA7L%F|y{Fa0i;*{Nx;&c>A)L3RnB?*;tvacgc zW31WDkcbY3IE5^eRO;Bb$-XzpFoc;gwrZG>F}7haWBA>DKEL1R@%{Y=@B4n=_w~Ns z*Y&!dufu-|MP>{?!aNjXKFr9i*Yf?1JW70KWp5o%)JoJuwt7=G?9&X_>SKI5`ixkk zC;J-=D@`(7Rc8PhaD4`(1oC=%2XMIRtm)MH-~^x$#{@oAi+h2pXTq1La!q5y(SG)Q zP$4JUEt80JKSuO|jto2lRqh9~3qI<_gcpW=6d67CwLyK#wWd$LC~R-1I#_+C8C=_j zI$Mnr+^m<=?Ij2qTnA9SlQtHHVV-vVfn3A?m8P73sh+>O5vrWr`2PaE!iET#w273V z-HHpNF0Oo8k)`QNjcU!_JhQ^EkV#@VpAl;Lolx-BHm3EjZ69Z74LK=f^H_P=Pp5tU zS;4QiiCcoTmSnk7==w3rmXZ8dM$sEC_%B65p(2rq`JokK`ML41`K+UK@1L^@Zj<(@ z)?{=F^|=4EW1jZCxXDheGN&ZVTA z!KA-VkTVr6=Tc%Cv@dktUj6+?{?`jG?5C>J(;ZtOJ`^cq`4qeop%oRZXM$`(ggd}hB993LjJ?QjI{wF`tF7C#{QDZ0CO(%+T>`nvro(dVjo#6T3g-a)hX*d1V8h;3LTu_Z~8^)y8C z9=P*A@-M&6JzgqHf7QAn@jHb3?@*OhHOj^C=ULQA{8T~)`TDd@DTEle@NTuf3IfP| z>o7%zIok7 zftNW-KeY8dPMJ~x6RwpvTC+OuU(zCe?b7K;!eOK774Fv_%1?P?3QOP!9I}rjRcwegy_<_DTr1oScp3+=p{De8pzRSrQhbH2$Kbu%eE2 zT7O~qXFW3zx9RCfGBg`gq?qeEm4%6Qu0YGqSP4Xr?$OELCr4M9BkTPc(lNM?}M`bFTXIB zJ{{ba4(_ty-0pB%bX$^+TwqS0oxMWGKBEKT^y~W)E(Th0=(Q~K$Y7_w6-$hMSp7ka zF*R*e%ZqGYsB<&HjMk4uHo(U+u<7B#F7CpS?iW42CyMiViNu>jF9DxAIg!ogkI+3_Eqq64i8i^LP;s`Xy9nid|W=vQ1}wR5;Oo&QG@)MiQS@b(7Zwp`4j%oy=reYc6{Q7mFTRE!x$$ib8xZ0WufD~4=sL2T znlSU_Met$+p~+j0kq9p?BtYBKEcsT+`-*=Ze8uX{MhiwakQ7r|zIC(hx2d{Mte_Nq z14b_^&w)qdM7_8?7h7j~`=)U2!J5QD^%>?ah)KG;)BP>7!#7F$5}wQBc!vHZd+>|5 z>(BE~GU`Ync>HQ$1P%gM@YWBbDe+5|&W4C$_R<5JqXyUGI3En3GRxZ0@8;NlpfkL* z9t|Us9#KOSkrZOoQfcKQ|DPwuCoK+<`6T@{QjUG&J9!8_+jPFeJ>|W2*xQInjStdL zuU=8+O1WC^<<1UcK3B53x~byKzEs2%zn3bdePz6aNxB!D0N&ChpKP=PWwre5^#Zbo z?Ece)GZ1*jdxMQvfkL%SdbL;=qc7&~H#q!w4bB!2t{tM8}VhO#1ntYT{0cL-*bSk6O+Sf;z+{ufZV4qLR;a>j1B7`{di+h3~j^&ATn z@2$Cb*^}3QSKuGLTwQ(SAaUfF%BAt&0sZc>K(qVroB1S6*l$;#79bsg$%ECIt+U5I zjLdW`hx@31 z)ur)<6p=s7qb;JZY5yxN)W`YT4f+a4a>*xdsrzC`XUvwyZ0x6~zPjzugh!a#ro&rs zTi=!yNq-_U2VAYI!F%XQTt6O~CkT|S{0`OsZipCffDhW&^Bu5$SAOi_!}Y5m#GEPSwIy_)6VSfy+wn&eHL!I-)r|s- z`+21;UA^sPYY;PbT@9Ngz%9BHL`g&T zXWUQe^7dz2bm&lwPnyj{_A+V!dxyDZ2sIII%6l)ach#6LdWkoj;CVhT|jp<*>WfuG0F-eiPDcbw7 z0}61Z0hb6$&K)P@_|BNmjN%b}PiEOMIYT5&nPz!l7T(+b|9WG78&C>1Rl3>2pH(Xn zFV6%8Un}MFET|ItoiBCNre>!35cyl~U_4q?-~mIbOOZJ$%QL~oLsViqFEf{g|Lm|` z`{U0~?Tc#lYU5R}DJ7bsRMFM(XZ(!{otDcnRp^s=<0FEyROx~l2YNF`aC=f1(HdU_ zHb-unwbG6He)DiL+1{Q!LF;_AK6t%St=EV+(JQhzZrr2gY^#B8Mmm>qw$38T!u(KY zxa{cj9ukD-l93K1_P5i+!vTEo!RVyu{PANP&x+aj!V|BYDIf zP^0OVZj~7kZQ~CGPj>|Bd5@})MG|BQKgEj~IQGJujnXw55K$iaG!qcGiqn&a0w)40*@jsy} z6-Z5uAkCX%jPoz(OTM>B>1Tt}Yt`%TlAaEeLzx9U=O=R6Sv3w3<^Rx;<%kW5>ib6G z*@knzs=yJkUofQjSD$ym8scDOkggiyXby^cpH2`{0p?dVj_zvyv z%#PoBbIM;;LJ1Q!afaw7U*u+kSChh_B#|JSI+kslIE5QK3KMT{#fvqU!RWbQ|N~|x}N#$KMTd9>$ky}q_5Z zWai^7vp-I%T3Z=yjmEJZI=K&pjd{2cnF_$Bd?&0_epEatA|_$?$j@$eqj0_S7h(I7 zBowT%bn|D-VA!b_IX-90%O?5VSZB+ni(6m=N=TPvP7TA5=rCY!24mKs{NNpbo90hB zmtQ{}I>!e5O9lm4{6lBDo8Xhtafg?6`-*4Xl_9;TJoDEP<$JAO1=TCsog(vQIG?8t zD?W)>j2xr4ZBB?!u&A<=@vlg*WCgtMEbR{c)j_&NQGjv8#gmir>mS#P(CF!oBs?hjNQTrQO>06N9-A-30yp(@Wo^SBE1s{GdQxBEl@vB5*hx?d;8U3Cb2wtZu0~j`hD!X{ zgvsn3A&(|R;}pu=Ol0Pn60!`z5x_TB8L3TcJ3cKG;4W9w5noAG=F^_XL`AX7kM$Bn zPr1jORMyFW3$3%>%sXBTM0ZiBgM9KWl${3cFy3MT^bnKrn^t|d^TgYm= zZ2|mc!PKunVz)j2U}X%rq-;cfdD2;=9dt=wPhX`orwLmwR(C|dvzWe+pGh8@?a<{NR>|4Zy=Iquy}VR(~dv<%U`!&mbEgReM>PL7fB`# z{L|c=&^MUsa_DzC=w}@}05%>K%+MfHi1P|_ape$bJ~laJoahz52RA>$u;<`G1J zN|XXY%W%uTBng(pJ~9fl3FODtZ^gLyQvQC;BW82n+-;sZL-RVyYF0o;zC@1OjF?3i zeCcxBa=qtM_}cIwO*Ny1S$PI_!n1;*_A;6+r-DSO8^mpn1xzXW**T|D#-N<9^xsS; zwK3SyZh*5{ld`qkaRiLhD}ucbFGz!WT1M)ZCvWMRP7$)(_l$T(w^m-U%5(sjZoqVm zsFUVqMUsy6RXo~}sz+pe0`7`M+5wE##ws`3r*)2$r(GQF>LFkEC}y&( z=1sNnXT=%7q}(3uI{rEJYjQZ+&lon2egK;C^}m_n0O99Dc1CTVS(V*B@{}**sRr)+ zas5QG`fra9xAH&qxCHwE`xIyv{mk4eF`S#Lrs`xL_`4RDYz&H@2|6}E9BuiTuWzMR zZ60gw)=4T1T}o&{Ja+EV`V($Q#YOtks@xfHQ4l3s&}d64L^ZxXXeIIp1UIB3iL+N# z7N$hdREErf{2lM);QK$kJv$BW0oP zZga*nm-&lD&f~{fXpFbgIx@}&1cjCxlj0us5^kc3P|8V#p>dVRWo_I``0nqem6%{T z5mCFRe&IubTg;n(gn=2{trIuBct>Op*~QA46~dKvH^eytZ3Vw4QaAEH|vYZ0%3+Ieg+Fa0xsJdJPpKwUU zKKtw)u*@0Bv$dE*>`9tBy5Fx(CmgIjIJ)(8*>QEe&ZcjR{*6CwLC1&l69$YEh5oyq z8{>!Rz?d!jB7T~qT!nmXe)lndQ8+ej{F!~RW1@YKSNk9K=k9e)Z9vUF&fB0Soy3+? zrRD3-)+a^6bhW+<1ot_{2wV*F=ZwI`H+(>$A`^h`aB}w!PLr}W7N;aQps#b2{@!ZE z!94zNYKFCsbusl&fqdz;Ov#Ihl0r^`!s`$x9X&T@An%gy@JxKo&W8J+c)~YD zzM&|8z!yIM-Zl7Y-Kle>h$OE>x5&HxRh_ZAg#Oe36%2}j3j;lxjA0TBLhY1t-=p7K z@xoEC*o{ZCUn}7d;qieAmwX-cLLKOJRAo<^%}+fYJXo34Me@1{5lhf=DE+6UwUL z;+bM}fF;LRY1K60LB6bw<@^`tsqF|QivY_54uF7)I8iL!F*{eTzV03vw8MX!o~YP2#Ji zJPxE>eMTLllI1 z2D>hC=duP}Y&dm9^v6U0ekYxm5NhM6wlddK|ELMHgdqi5f9!~a0ahOlq*&BFso5c_ z55JWg3{h2!d+3w?APqut=Zw#HVM5&_6m*2Kn;GpeCTUBp*iiYuVmcHq+Ifh%)&!6JPf}Z0%4SCUk4n{Xb`mOkLVJJtm_^fCt zn;GsGK4sSkT+FyKZr#uvH5zAJ61)KxX4_r@(>XR zR*3wKf-Y`+I!fQ!WVy+_2kl3dKd7WmJQbOcs{>{qeWr3%QQO3Fm(g}2@7ytILbPDhl5n=>59{n zhaiWKrng^BlqZ{LVl%ERj~y;QQZIT2r;ME>>@*N4bJ(DB{eK8>{}AppPurR;#Kael zFr7F3I+PCTeOyv}j0Hw+n#H7R#?K{OA%zKqaY$-9NYE`-LFCi%33M_|&Vaq%8rRzf zMUtI`X}Wd~6Ct$g%P^<>XcvIlKrp|Lp!rT=Jd@*d zt}1oUS;2rlu_d~b_8@?j-4m79*E$?E->9U!S^`;K^#S%E6{X~Te%JD}w&3o6UeGU; zF5p4t>e){Ipw=#e9Q|3R{VK=6fND#O{EQ9q0Lsml3Qcs<%iu|CD1>X@H|)Gs_RIt2 z%fRaP1@q1bu&=NTtIp$2pf-y5OO1s$U}B@hZ+2TR9}51974q-hQM(U)6+ZFPG7Ws_ zPs-m-@t*v4jVB)Q1i$X>_CeG`@0zErMlYQBD#rke_zaH~q3SmhF#){*0rlMs*yeY_ zOxUAt@YWPrCtRQrrc%idL}|)i_sBMq6FWTaVov#OnIYTj?xR&Mf%r)PD6}5<0uYK+ z@dio-2p5*f@)_wjeRHVSH5&C2;J%U~>Le}nJGm4&e`7)hk$Sw;)tX5$oHJ7`)+@7n2x_&7|`=U8f&XAzW~7xa@=Nr{aep=J+H^+?bb>w z`zu(wjM7u(1{BYlTu7Lc`8~`ZmpkW7X(+bKb>&`pS_7bM(=0$g4)iYkCuTcw{XQ|n zkFL&TvSyX`Yt<4yA-=~nsEUpQd_o3xf>)O=lq1@Uvo*&*!!#q}@2?HbS%F>~nmE|s z*vN4hne5B`ZTZ;xJL8NM1Eb-0x_uvOzB6(~8CRP-AWs&}KIm3$I;`f(X8T-MvU0Mx zQi_6*_*Y=9y2?#op3GA&lro(`B5d9W>p{LU5x!{wT0eD&1Jifh0pW>PwH4LE}f4zZZW}u));I`y_hv8zb`G;N5hRgoJ zGS6lV(HA@`wxo7*&ZHi265#O72&i59BwXa;bf`ka>U>mhyWOEHU;Dp)Sg;h>yjJWn zw}QQySzz&I(oX+C;)K*$x96wUF)DhH!jAH-DQ*<2oTn_=$?vxD=MAIh4tWj^4G$-9 z(cy(#0sfP<4+gb!rcWRC6d=g!a{x^f-oqZ{m&SLm4V)zw^u{;@Dt{Q#f})>{@Ux44Zs&@~K& z932>2-)2bz!#l>%4?tl%1^ULi|EV5#`=QkW|x??xL18lVF*7{PSmi97P6L5%( zV=un2a|JuDTJO)>?7v;VloYkTOQ~IG>$mD&>Cpvw*OSb4Ig;DOB9VMk>N4(@&VFU< zJ_v+omPZIPUoU01T3=#b(0R_GQV*}=U0GAF8^}Qj(pMEj+BpiF8Ag?aY4&w|&9X+# z(=?dntBD_1DG~=szB$;Z*QT&hxcF`NmsC5GqzC!mDdy^LypP44AOAWx2tfw zhd3u1M%PiN0;5Y1ii*uw{&_>2k&nWs7mTeXW06Fro@hm3>8=WMd5~OreET=h+N>CI znv1_{o6$Nr`};S7qPsQGtOca2-Iu%N3*BXPxc)U@=T7v=sp)rv8CVmEt6P$+1KZd7 zb{7McgRC7|LM1wyh!^^Dn-(R^B7I!C_ffr2$U=_yY?X<6);Qp+xX&aM&foerS7wsc z`4WRMNrd8&o30|mmpZ(@W^qAkyrwEzpkvG5row8tARDDamGrbo zW{lVL2yYfwXxx2SVEHBANEm#(L(ia;WBIS&WjW}QXX(?oT0h!MKr~8kL4m+3n$SEh zP1?8fJbHR+ERM+Dbjd1;@(ofw=xdEfp8kOy-5Gv(#*f5quEV;!oLQp1efg)`MrwJB zKBq2_E?K3&eIC}NF%A1^L!OKEXxVmOAX|4J`d%}Q*77xdt7P@{PJ(TIh+lcI&BBDe zPY-wQq9?$w+tdbVQKAH5SskLCdc*S4gg32jo_qE4ykW80#(^ni=#{?=|v{BZt z2I)(<4`>HXE6za}UaOo71hT)6QY>V#6k8R|(S3T7<{Z-WG~v(;*{2?n z6~dz(&-oB)tQ&~_wA^5gbis4uOXr(T$`KSVAvP!xy9sxqP7t`3uEYkAPAqLlNCjCR z+A#?XvNGxRWSYA|NxC|F1#&=MjysV3XMOm)Gfj55Z+(^M#@wCkZyJWg>Njl7Jp|TH z_}A!X!*S2~l-=gr?bcL=P<)_OKMXX#?v*pbQtP;vs&=g z+B58DK@IZ?NH7vwDY)5z`m=IdhAE3puhCE>_o+7=` zNEuO|qY$%k0IfalhAmxgm&#@p&;DEYa0v=GWba)~1>xJrx7y#$VUYzHk@wG7d^s&H zCC1C{l(fuxd(2c7&=D~tOAAjuH^tj|D-7(N%`z6c_wucut4vdU;6x9GlZ#8ea;lr@1a5nn^_VEO3P#ofp)Hnw|%*z;t zhd^iwc56QSztOUE5Sz|@1*}$WGB}`e@_ex?tu;s9smP_tf~+lpi_YW+`FGkwzFmA@ zC~*BRJzj3WIUOUI*sSg%sM^Ot`PlH8?~MqQOR#*><=dc1i(_O z*aVIn=WC8~8I0>R$GJ~`t@@d$Bk|4B3qPIXifST>dPb?PjQ?SBhcn2>TT|k-3iExv zjWG=8&-x=6^HwRO?7W{3{`6W=wcygf6&3pGdGGbzL{5*4N#qqJ#?UOrjjzk>T!eC^ zOXgk;xT6LSg^gkEzOkh`(`!Ps)=S#A!MsnD%|3uLUOh^zbz4m} z1OB3s1VvVz4K6zHSYu%41BsJ&lUv=~o;ML2#|<8eAwOzdoQt9iM{?4eP_8lnb`cZy z{Lq=G+-t&*gG^qlAGhej^qO}k-3XX?ky&^gS8m}d_3^Aj9J<2fpRC52=96dWIV3bv zKL?MY5+LLzSDP&Genk^q@m_#S70bx!U@|$9Sj6hwcc?tOD$Jw3@@}i!`m%4E^7!mL z1H&?>LGr1?J9+r#)pxj;K6Wd{9`vryf=8Y3!Z66%X5MA4d$xqfXBsl>X0!k_7&I^C zvRR&o+GrR}P_&319@?jsJYz(}UV`XB7-T2{7`<1a!G!>|MudTITR+~>Y@=2S%L1o% zY<{(5q#oNEC>}nZd`?dl>@V_w_*Pl|>(O$t=gWJiUW{KHzLKW#^R|~UuD3l?HFg3k z-gtfS%&5ta^pl(+)yl$tXOSk}8HNlr!#0?T+Z5YA$<4uT%T^%7DU|VBZbW^3Zt6-;WUpAcT=VwE_nsB$AdWKI;J8nD zAKXB{x-b+Ug*W1rKi7BkI$tF{wNFzZbvzKAH~k?v8lP)raxrW9cAgg^iza6-YbOwS zLpFP7+I(1YBMmcgHDrI=B{d5SJ}9ueMVoI>+sS^r&@d;3D@9iyAVV?KKR$7;WYp=E z*tpWmjjPU99lXq>Zt>9{Vc*y135H-@H}z2J=og{*uq#f|xc)t`mcHJL){}H-)q;f{ z*59Hjr<%LA(M1y^2z%htd@yNc9UCvIj5rf+ya{y%JGX?8R%rCAd3_J9Q%^A1c?o-&?pu&o;7fjpgBSL?!#)shp4jeuudGz;nc~#n_(hsv z#o4c&oD>S*7DC>?49+N@gjrrz>rn03EYOC`>jxM2rbcI;%E_X~3%t?OHMR3MIq zIWj&G3$IYP?}qomGWAhp4nO2lFx-C5U|xh({(|{4^xSf#g)0+QpP3tqXd|8S-pjIk zJ3|r01qBR8Q97G86+HuRoeptTmIx>U+C%eq$m$h(6P)_!dCs-d57^m!x7LQ2)SrXZ z(o*zliFtS2Ho`TbqO)=i`B`Bh0nX-G24|{#&`|Desmn=C3ywYq+!aA;(L~!sU(_)C znm0znMY@TlT$;(?s5zHx$D=|~^+Qmnss%)<(oo{ zElkWx(|(o-K7#ga)cT70Yl$ZC;ni8Lwjg?IK|8LgYE1r@#6){niXDhz<)_Y%HvrS` zn3j2geVC~h>+`T|(`M9erV)A z-&qkNiw5spHHdrnQX9@>*N>Upoh*T}k5~=49r>uXQM9@1@Z>s^ed3Xa%Js(5gHv{91*g*g*86VrndB zPF|Y_w%J4fe1!)uTp`Q#sna2Oq!73C2;0EHx-*wWTO=BG*KitZ3xa=TJ&%Hj9BgPG zY+NP!P4#7m&-x{ovlu#ix6*<=JEem_6cac-Bfd#tSdat0T2Iv zFyzPhlWMc}3QOfgrA(Xr*b$Az5-r4>2mOWYhUy5KKUV`m?3q^IHh0^oVfM}OjXXVC z(_Zg#nI?An-uPPyB*qWFqmU5d+0!xWPfa+0ELdJ-@2fFagZ!-=zfU2wafj zsK!dN6?#6RJ9j>2C@GlOa9WfQNzzt8l$$Df&YvuB!;bZF z#2Nc1WSt_`mvzFAT}wS0Af&qBMzZt@poAiO>;8~T>^*HcCkvVJ4oyI`~0b-Jm)wKNLK%wPWpFEpGS+jost(D; zeVz)59dQ(%S85I2+P&~f;;v7tkum+W{EzdKeaSOkTMIcYyqXMTIhWSR?!gi4X}bDr z*Fd28e8m(a#FF7coTWYG)2oE(Eo^q-s^n5Qs5Of+`f-=ik;MEq z7YIdadms8d%e+v{?rO$d>VZJb>h?=a>91N%;|Sy&tBdyJB5Ryt@r7xgM)F((CN_}q5*wQ^%M{jk ze+9g71o812C;4@~@dJHpB}(Qr_-SIHKDhk`OgwntJOa1TJH4*5y!kn&s!6hMpL4l= z^zCp|ws1Aitv1^SLCFgB=idCGnoce#vXy=`^o6%ahjxVg{mqozq%W#5FFj;otYiK0 zr}@4Qqz6=Z^_C2AKqv9h^Xjl#7ltJ-# z-msOJ+FQCpC<&<%FZV=U2Uv6Lq`j${NV7xOy55PLwJ15y%Jjr zF?rhLVO{vtiznW(I1eMDp{U{O`7)aGQgCDCJQj~K`ce}UJ>RU2Y2W{ZrS2XVcvro`G z3^VXuBr2%%r?bXutLY{IuJ?gcxF@IL=l)fOhRjgGnvWX`Kh(6Pmqx}1wmd3&Ye{aR z`+jr1K;-5${o{t=ji#9)=__Q4^e3W4=9Bk_*C^!~`rehnNU{_5KgB>ZAhIDLy`vmo zZV(G#HWQq0DnsA-LNa?TiFDcep^3oTAz2br{@HZHnt4icxKwzo%xkLo?K#fXSTtL0{OsUwi4#ah03~ zlE!X)q~+ScE{D`H3%e^LAmq!{79oC4KF?2mTcp=RT7BAw3@^va#PUDyy+!6ve2Gaq zJv{y4F{CaD5_F?}DB^q?*xW+_f$=Y^(8Qk!C=YYVaJy422PM5{HSPD@5Tt($pI$DT z)2DD~(FfPrW64%Uq#V=~d)@UFycIb=@+pLzJ^uDw#Ug4K2)H5Rq| z>y#zDDV+DlRD6=OkH07KOKicpF)Ze-%LTVSU5T&$iW}$3AG@8>-UurIl4^-VDRy@* z9_-qj>)uaVulpOHx7*6fj#w#p--6~8=)TQ^I6Tq5D`~Ydd5XwzQ;{lfn|}tr^}{rq z_qXohHCJ#l#ABuT*%z=%%~r#4iq-OyL)+8nW-^wZODo#)(4uex8|uU%xXvPggQm$J zN|%3C-8VgcwL2h=Mx%UH$6y_uMu7XhFV$htD2#KRCb(T5#ZeqY;U>$Fo~TWoxn>8! zDdWI=BmYbu6OO(hWAD_lJ82h#la|vZp|GR>=i4bvJ_-C#k0`sH`4TPls(%+vU)@+y z14RE%D2+O?Qnb_jeqs~{={bL&mApB73R>IO5E68h)li2)Ru8Q1&x7J6MQ@%1=Y&-` zQ!>N)Lh)?d690jh)NQ}t8#K*pliN4XU)oJ`#L2Zhd+6tSxvO-=exdkrdwqpQa59yEOL2Lp;&{Z?Kvg?5odW*lZW?$}d za=WjoD|>6!+RKXmwlLJ7t|D(2kptasjhPIm06v=GIPc*@!MI^(9iIxfLlDkC(YQ8e-t0eQ&eNSygAo&!>o1G2LhZ0KQo{Vckbsd zqvAlcDc4$@^s1T8QuGy8MFQlO>1_<7-A&cc<=$49-z(6@@}A{Av4P5C z)-5Z(QrgwMwP0c)iC`7jPYhydq2ZO8)3E}lZV1jlKkmLJ!#D6(&j2XhTKp>A20)f$ zb45Xk6bl1<*KlsNL@;YLRRcUyS_t7g8|44I$+gM1pOE(aS9EyWjjZzvXG1t z8fZSG93sA3U$x}|s;XlsB0@tTxSG$c8YqtoH!4nB)hkIrIe6iabD<{Lv>tUIUhUCC zJ6fk#G}}dVn-3<6iDqsTUkflL7v*lqrC4LUl)u%X=odQ#D}iw@_&0+kLYVH;VWax$ z3|{#Y<}C2$p2u`TbcL^+ydVSGb?8x?T81GuM!|=}afwK8URo(3;=9kehS$oB7wvc} zuD^e0?5F=k#FxpZZHzo*AhC~`X}foZWg*H~8jvoQ$DFjww^TU)eWLFQ1zXpygRBdu z$=4C`PR?J<;qEu08(Bj}^>AY8;wHF0{@hjNp`VeH!;_40a~HU`>u~8aAIVpi0sL>K z=WFW2MgS32NcpDK6vx*ze{5;6aUuJyp>Tbo(l<+~^BaG<7(d2@{R1G$>#^6MRE~q- zw}Q6z%_eJC4TI3pozZ!3BbJg_!{v40(JnVTQHRB#;DC7W<1hT`lWdhw|? zyl7&rPKUbLaDzfC-qP8|zhmlo&$b5C14ZFq;mm(>BXi!hd-#bC2;Z6fP6E8~)y4@E z_0uw6R)VxCO36Y_;bg_$Y7bmM(XA8|FglNDp1L{9uw$7~xC&L-x!B^2D?GYvr~aX~ zXBVk=S~3&cxPNLfK9}hbTYDEncN7QpYw*nM&5b5@1V^Y}*Sf9zBQY>;APcf#B2DX; z&dU#95rd7Dc5FSi*mN>?`L;!#YxZ?_o-%rlBAx7LFSiL`3jv*J2n8B2Eb)cPJQU-qWc&K(;s z<9c4L7PS=Gz^-WeRK>aVKL4DI$Ex&Pt^`k8564|z#25Ci4o6cpR&%8w1LdB|>lBrCxzF!xf{j>3N#PFTE62BXE{uFPE!YFKaP!v7M#Z4Bq%SKI)tFPRMQg^C+@Q zS-+lRWLt07d=?qICVU$Mr&t|Hdoe%mNBMthFDizx#66dTwwte`E14K5^9~g7 zPO8rMReCFep{tFQ3c*nueiQMkYbj zky$i0s_s24-_5XDRI`qA8yt|Iv7f(PYW-@-%Y9snD$`tED_c z`ZeWTYU<=%IEPLb?g%qQxyHxb|L>X`p29BLk%pWpw572d|6R38U-kb^XrTH_@5#VQ zfCq#m?kflEuIbufB)VhoESV8>zN)_`2=5;Pqt5m##!k-ZBvIc~n8pnx1atFqfH${! znV_$eiOpp_{Ig^5=XS})RoYSnFcb*e)>fDP*k+`?96niD zyvsL*^7UwQIJh5+niNbc1gvX9wH128T~RBW1cUl#B^60-plEb)A=m+)Aj@*M&ZFuz ziih$FgyrXr7VG}Md<1w}^#Ida>7>LSN( zaGTTI6$fS&$Mjz{JZ=&u1IBRq<9xVbrwR|1OGG-|aF+toUxo=CLc@c)9bx<`)l+65{+4IH@@YBxmd_r zUOw_-0D2#+jQIA1jJ==@8qfaV1=PLz*T?j25L#65`}Mk5cpg0`HFZ^G7VKRKBla6T z5&$(dRkA&bcGexVsff9?C#PR$v7U+fC6CxCQ~5b>SeEfRtm#xvJg+)WH`wA4`vjJm zVYR>MVAt`g*w8-ZTne8aHM^#h&Xxq>9Av+wgKYO?$1!DFO^`x zsb)rKqE8NwO@l8}JK-ajt0qxV72U1N$q0X1;pG3_!Kk&3*OrTF!#$D$o>Rge*nxrM zhcy0>kE(YI!@edHFIxz9`cy_q=amuQ_XyKqjSZUpGrZN*uFve|PXZRcXz=D|gpVr~ z$;J!erXaX#+-8gZ&Q`G>%+f%5C#@LllJnXuV6~v$j3QQO7gR|MzHKrEznNJEd9w9h zn_Eh#+06IBx2AcFnUiJgB?_Y|OY~arPoWo#`I?l8*u#!)Y?APF*?7&%Ed*Vb601G{ zEOtfF-w8T34Ag0Wg__Q!m13Wge2gz49uxEiP|xra5&Ekr;Q`EhRK#K3f*GY#2fYA2NVg&yOWnK;eu~ao-T#qTSxC_$3nd@S^SN`opvX+c(6&;N8e%qIqGtB|g}c zeOcJ+9M1<~GhLAv<@;?~iXCjdQ=kbUC500|AErF~AwAv?$K||gZ-SsjH>Zlg%N=Qx z;gF`)(S%%m9pD0>$hZm*SAc(nZscD#{J$N{2U^lH5?8+q z4ha`RD71OO@o-|zjjX9ycUsRsv6rf~D6vdksdz%c_$U93P;2lCzNbop{2q#UmfRE% zA86;xhwM~T#1XAKAoQ~EwtgMZv8-x_;b6m4Fc2>F>E5%OQ-?EIr&qGVV>zm~hVNP( zqwB%Y4~)35Df9ESRXW^+@&{9`x>kkddD~L?j`ejfn|9*4J&ZHn>G;C1eu6B5WXxFn zbnK$|A{AA80}YDV-}P_O!m{h>uPMB&yOX6?gaklV&@-q zGep}1Bk^fB$jA&5H1KXnkOC;y@^ZGAft6t06*DN%fn%FfS>KHskP~AVo%##rR?y7( zEiqyMy~v`;`(6 zE|_ul_5WY`?hd&!0jWpsc-VLy1+IW-o%*Kk;54qgw=>oE$MEMXI_{NGohYJ)2K*sr zV$`|lmG_Hu!; zj@A=KVp_@Vhse-pOGDZclk4g?Y(AO2Fy-wQyv+C)l6(RXEr@kG!aAG7TD1C{Fb#|K z*FzN9DE~4rpYC;`-|8Q$bx=j?>H4kngDzV{u|h|`#clZ@x0ULJKpRYTqL&l-k+@gD zuAgW5wgX!c&*;oaV%fa9Z)Pvhs=0d!FS!HzGEYV*@wWx6RhYsJx`r*~H$v;V)|lVI zfUOjaWbdL+BFka`!=oT1PE&ppJOR9 zEyu_us}mjavasfuA~v4E3*B-w74cY{peibXP+zdY!A>OTt|T=1-t#9>QRHcREt)oQ}O_*@G~3ed5r)bf2D)VLmnQ>+wg=Qhx{-hH&uM@TYl&(ru+>btsy{zG z(c!qG5!6$i=pKH_AVinm^5P*bIG}&EchsGXU3mE-k20QAxWxVl8-u7oLoxHBJhP8n z>!fmkX~OJ3rH*w0>jMd9OSMwDAe-hkdIdf`?CT;)cJH^5L+-tZ9Z?%$YTew*D00^u zc6WDmTOIaMtP#(Y;MtCO#?>3c5XZqZHWa0q7vE`fi)A)p%89NjSgjsM^_%&`TxRXD zljeZ5gOP6%IfiGipF!TMx#9lnTb4mpf9H3n)CO8lG+5QbL)E@>E zWm^~1SP6OF{VI9%@)D@Vgd7n*xr@EJS9RTg3eKLcP*zERb>b<(BhxA0 ztH?bes?I>Q8NJ|eAurm+@ry(2Z?&eG6^#+;nwWei4fji6;Wfp@0o2CtR7)|`U+|0| zlb5&6cJ;h9w^QVixb6hF9Wc?sheHiRD{>Oh{rSLQ5-$FB)Ly` zRxKQtedgzi9g9(y;&PBA%*>0ET&C4xtfb3HhfH90&|4%{Of#Tt%YoTn*Ej^+N7iMJ zSXg2HMZ=K?RmYzCeH!_wB{YOs%zLl|}r$CXE0okk{>OkU61u$^Ha+;eh^#G$$J> z2qc9hItiXE^t+KaTmmo-W~I^7H=?G<2m^+nV?R*iB6>8uls$)QjU|&A#gl3CM1#9K zq-tf@%7z47`8oic4IatK;vu*A3ai3_j!c!nHdx_9bsyPcOoyomx8WSH^-50hCicmK z6(w`n7w!!m2_(OHx!%zE&)G@D;0Zxcs$x?kE*Rg!?6Sb@V3=mEpvenZBh4Dy&x?Ce zkIO5+M#AJ>ImokQN)Y~|@88Q0AR8p>PWkM60J5qE**^evRi8{xoy>@a^_FI=_VBsY z?hGW{ft-`%3g90(hqX*IPjuu%AZ#)78`AYGm52)3+E3rK-z%#L?%vNc8y$y87@K;N zAciD1I4Y&Dm3U2fw%<3_sP(394q!wK0DqCO-YojYAYN?5PiPp^&GfX}1zAJwzrwD>wHT?5h9N$gx@Uvhx{A^L zL@(JzvJFv8!F?mdo<+kK=8;#fyTVEn=M=$@;HS#gk-dvc5@B*~$=6VRd)53R*rO zvhm|pqwQYK#Wc!d?gP_oh+ox-iW-u_ZBnld&~3m6bJQ@(?&_1?Bez(C zxnosy*rybZ3jGE?jnWCN=^L)s0h*YbT+>toKqDq`QKCcLtHXGF>HBvFBi}^!=}k4& zJO8^RVDRLJ1`;#QW_o%ei{QZC+HZW3{F?Wevvh?dVYX}DC}p-wOZ4ZVHS;K8)GaBK zh3`*=5|G5nd1T>k%Ux!b^==`OO0>2kX9-CNX(Cnub$MY0T)GZQp0~EcGxFnbWAU@e z0mAyuOX7})q2Qa+j@q^uw4pS?fFz3~MS9xh;U#&)HYK1_Lk6=exQ-aT$!%87Rw7r@ zgbg}?Nmj|h|0{lwLM)HLzps}8u>N6y9#W(^O3o=Sy$9MNNH(LIpma^qDSdo6InUj< z^I&U~pkQgw+d6JUNei>UENBbRp9Z?Ic~r`)QVzWYo_>&PjZ*6mzBa}&4jO{2F_er| z_dv(0yQCkfTgP0suKjdZli!nXU>ba>4NfG0juTT`FF3_Oj$n77nJ#0xmp8Wfd8X7=wVC@VB<^-7a+m{AL=9 znCo(_3*XKawrdJ#dEbLP?0L34KjZQPL>|&loDB76m?YGSuJn8Nagp%ykI|Bj+Z8F# z?yl+p__IeNPTJuqud-`f;%}P&I@H*2WKq2lA$l7D3djiU&o41}Rc3|0#_Bcr`*<@D zW`~8~TS`A$3TXb#`10-bWX@WG-Zss9@|XjIX~uH5eRAR`>`O;fn*F;SC_GdJ&sIC# z)5hUz(DGwajf{8DPGwXNT76###gsd@h^NhP_YVft zOy@*}3bE1C+qi7n4vfJbxFyU)w*Fjxd7H>7DBl~iM+a55tJ&AoLL|&Zy7^B7c(^No zhwEO4)oZ|hEC%@N#RXQvWoqfV5TCa?;19iHK$}Wo?HK1I)cy~W$-?tgeaKJ&R2`Qb zIvH~0D9Y6{RQ`%2*KujYF)rqtV@9L18a6L4z}5=^md^ZCWLdQ8vY#ZSnP_Hz%UKg`&gRNqHh-@Ev`X_VPN@@nQWfG8{KXB}~ zd1QnlfAt1x5WKvb&1XDwCsEtCQ>zTyMC>}LX&Jikbff4F9M09>rFgqdb)){|5AmO! z%W3u|HYsZsYl7jMDG=vrC-%Mj`(9kgCu!)N{#9_gu9|aM!!Evd;dwda&2fnLdxGTR z1(ug;pIJ;WF)xN%p!1z#NbHtg?+g!MQvb*W5&0(Gc*3JN)8p|@PL@8MkF9XE%CGo zW^n}fcpgG`H~9bcEtwsf=7bYcv!H$*5zvTvI-Xz8T=%WXAHKHZEu%4H$S0w?Tsj!@ z5ZeiKt2r4&*~dxuLYX$WVkH9scVK+vUOkSlZr|8D|DgWmEQc?b)D5&=!?Zs}>vm>Q zIN_xMZu?}X`IiM(bRQX_Td_L8mo1jc*^G+&Ff`_*d@u%B4Y_^0KAD4gfWqscCj7gZ2Fbu%rv3z!K(;ejNyejKIHmlOzlTr*j#S-p6e`VYa8kWF%z53 zdy)TDXr@x9;AIU|X>XXV^%8qvHk8;gW|VZcv|$`ZXNsyooS`#h$qS zjSDy!APcYnM^~TJ__67&p`_DhxlQ5_>_%-ri9E6*?@VMmYwBm39sF?LwG0%EkhAuy zS7hX8TeNnwQM&}UtD*#!3DCxQH9`|T^?_NvQI3k2Y*#>fy$Bw?FuPhrDUCyieDrI| z3Tv{OFokQoYB$?DL(wCBAjmJg$jqdji1%g?v2D2E@nUUOXaKj6&z-8ufCR|hIP4S!(!Tk`Hk$iE*KV0A*% zUn&GC=UOez#tz4}kWN`WfU2j{>%lvQz}GmU=o--t>cP#FhFxW^c}3fHxoa?>9f%N~ zfQyYPI5dhQASFeFO^l;!nWOTlZ{N}Kp#S&yH zwr6}-4k$c-$^$)>fcV<*-kdg;{0E7e68+mav^-chi5;~ z5H6Dcjtl*X5n+hrIe-Nw2NVUYX*x8AUvV$nK_wx$0(g zm~=0Tn!C!lMQcfUf%HQwEG-CvVsj(KH_1A6X`C~wWR5HQRgUg&UAn@I0;D8@0>BO=XJ^S;8uY^JsMa$@4172pJamX2o&ewb3TQm`sh za3BZHN_G|I#u3!+s>Zg;$qY2sU;AiQZKaO2=vse*4Z3>i1*?ND2ehZLmiFq9Z5nNm z6B;|xo{kO96Ux(DknbVb5=B@Fu|?S?Du`T_OFKfmh<}!+E*{IxsYi) z>_j&Y@xaX0qWK}-R zsTh3O4Go;6+lygKS{ECiV^{GGdtc58BBd?@=r+n3fx0%E? z<}6W=j|mw$G^D5!{Shh^@~gx)V$8)6W({zqrN^koXz1|y&cSW%5wOi1-Bg<&i{brY z8^k$zOH@MV-`yRKm4njJ28W?6Q*jw>Ib@!h^F^t#eypAF8QFLtFM%N(=vlN+4P@E~ zzB<1yp4gjcP1P6ASM6+Th(n`4)iO+{neO0fY^m52C@fJ-O(I{bBR{_!jSAF0KXu4z zG~Xjk4hn2fq4&_{6V0QCl<`m}>~P-O(83jy%+*QIWER>UE`v~KCs70WAxJ-hJ$QDU z$DX~#dqB$x?Kdu-X5KGYWnKWjbed{gY|FvntBunH>;{wDoV6Pq?`fxlv(7k+_&s5; z%Yx47m_wa8=;tD=_F^bN{Due`NQ6=fHdPbpn0`9 zA_-u;-AbNWS8VX2-3I)73;mm_J$iLX2qui~2h;GkD(nD*j!pE}haOh$o*4j`5)0*z zD>K_^_W-K3+~C1T(E%R;k|g2CUrdXN-R;n#KJzlPouuNsQVpSoxq~^*k(ZDJpKDeD z9OR06n=wbA1gQ`GbxZFlIC0_Y%pWNShw09bsxp_L7J@JNS2+MiZ5?1Y!k5m<=Y@4z zj!0dr02@Rv)M(xd-fD6^rg=7&w%Eqm&3=c!%y*YB7u_L*mngp2-RG=zXF7MjS$35| zj;H^0?;(t|`pf0?H9f#2hTQ(GdiT*S1KxURCKm)t1N{>IN*uQhKOHk1Gp|CLQE_Fj zE#6rTU2t2aV2Ohm>u(eL;20Czg!dS7c5nFlYzuXgF?YNcL%*sX%U}{TC(>C2<^DeY)&{eWXUUVhZJ~uy3KRz};(_$kHhi8oZ@=E=WM^jz*phX|dRmf;# zVPV*06;+Z=H?@n9o4Ny98Mg6A@8Uh5w_!}hBiI`F?qaUJ#({fvYYm9P_uR2J?18ck0M8)$kLTXls zwufO@z7HrG+Tv%`oNR9}Syd+On4Y(GtFC?^H__iTgS*NyiQ?=@FQicSar__7)tVJw>N5 zAK%Z7VpNyv&CqmnR5ZJBo<<|GrC7pWShuw-k0xM>s=?+GeYX^*qgubTHS>A#^rUxZ z4~x%^6j*yG9$^TWA;B2W0`(_A)N+igGNCmg)x7jsoL%^koY`Omu(TZmlNn){`54z; zLEPUg?H?-v9eqX@Y{ujF#Mb^r7Quyzc|aYVWwFv@{6++XGCJmDD#aPm*)a?j!_B$ zSBi@|m5`G~WW1Aoa53`xGAej^auh!fT-Vtch7)tCNZJ=$Nh~kD%0TeNv zeE?%(B+RAa=AE})P;TAD$f=S617}0I`;Y)3x8GcGRZVfbnsp&B2IX&RC)`jw#H>0c z=yVbfq+IoJ{Is7(2b8<84Zt-7?7VLpPVKo9&4n|u0>|x(N-UMD0=W{`Nf-2J>C(={ zd#JpTI5WvJce~u(+aki1;7L8-L{3uJ!S89!RwhBmgOJppH%8~I@58a-+fP8 zgJRljHuRf0nC=Xl0BouEQ|@PDRC>1^YPY5>Dj}5csg5K@@z!ALQ@4E=v`Q=peRc#O z-qr>o2;7nf+o#xFg-*r30w~HiyMyzTOVC@Z>67K4P7*_~@Ep)J>(4U(+2Y5Z81%g* z_OGC>digX$TjupAk-AOXtQ989n5isheN$Ai`+EVp+#K2*!QJQ&qGG|fLz?N|w9Ug5`Kc^nDAF!|*Op=w?6FvId=O^P_tY9&z;c&m1rhj5${mvcyanw(OMNJ|}il;yD$ zQvv=!s+<$vsYD(TRS_8>`X)xLO@Eh(*j?G)?4J30!ggRI1ibMvl+DskbT^B zx%xmG^47n)??XL#{NOL!Fa&l#OkQzdt*~}P23gxuKh(Tjp(jjrwL^7g&Sxkx$Vb+v zqVsh6xih*-eMt$o(JR?6j9>WHa)oi2)V4+u5Y*0?nDAW;+X28yb42K z$v5OmS1t_gP|^S9O)}BFA^H4Vx^B!-y%BVF^TG0mSLo)1^lH)mLekCOz>71#`f!MX zoFsu>mi{RH?s0nj9&OJo73-z+>5{8{n``vPp%LkLzVGYul22K;`iCo@KR^^6n8Y68@_)I-FW8-bpWZz!p)uT+`$j7{LQjDb zDv(KMRBdfTmgO9Nb+OsI1>?reqs#-&V`JX_l|^9N+@b&j4CNQPIoU)!qnk|SUH2Jg zS_rbvVHu@Zmfwhwk2H`JSkK4@eR@F-u#jf9BRD+oHmDhvXajLr|5{bCGRH@iFYLaK zGmmdDw{vp8U>-n<0FV%l$`g>;G2)|P9sKBKwm#z zM-V@3 zTw0VuwjA*Ug9!&#gUjQx&6J)px=(+?LJKKnOObyow4w}h;y9H$B>wFPZqxrZqP)e6 zCz0UE`hx+DC62mOL?2QxE(FTzlic?-{xE(-K3Ft$fU?jjC7XxY`=Qpa2tIYtaud)E z%rG5HDbgogoyoGQnQX}cgAw-Z0u^HU8wzRX$;*is_x`!p2)g-7<+5)75x-NeAx%=G_ zi8U)WeaO__Z3xBjH0YkBETq^>D**As8m;}Q}y$&s^PCGdfi=F`6{sg!yiSl2Xz3sq~KU< z$3V4&uK|VSM)&@+h8KHHJM%EZLOaQa@&Z0Carr|Ipz~Yr1rnPD`Z3(U3H%Cw%>j|_ zwL<1H(t1_ExJw#W!jl6_O&?zr2=GL1<>K_eXvp|I8ii}&pK8x&pjBhIY+TOa66^9i zt2GdmP(C!_j^;BvqWn3(`(Xa!lJjcPsuU3nDn9Ynmu~Ev_mfT*dqV^3u1El)QWErET!)BKxP)kHk*-7f8!wc~7yG z44A_mRkJa^*XkBD(8isj$I=>c9L;Aw)-`sU#9Z%9llBcqajOpASfy)&!qK-zZtN*b ziBA9~4m55QS*iR#Ph9JuRBNCtg(VIs`2ihetOBKu>eaVF>;A~7T+9Tu+bYfP*8`$!JIrqoc z{Z$CBP7NXE!l!axj#4x@%ccSN@ZX^aXLa_AiZFhjt&`TW8|*Ai^gG3qd{zN$= z#Tw>h;Gn!}R+0Pd?A@01qwM^KVXsyqP#DVD;hc~#krnelWmCE8j7%#h(mYiDJP~=e zfA{*~s-M%r@oPh;bw9Y>zSZeAw?3!h6xSukY$^ltFBx!WUD=c~YIG-iDgCHOs6&%N z&bRe>o{_Skh3$|inJVT6v4^|@V9~4rpOvXRZQk#q_t@MHofpurnWP_Zw4pKz3d*zP z9Y7xtp0PoZRe29Y4*+y^3P?^uq690*Az!-@AF{7pNpgN}D4#WGNx-oG`ryLP({Gt7 z0k9cCoaX4;FoDGB0zK%<3lsC=UV7aZ%lRzN+f|iHv%wzkuo7EGouro>ZvayShIh#W-WNLtORXLP|+a>~YU@^x3Z)E&%+!aDZRoS&p! zSzi!;NRkHm6*;;w_U761fArcp>=~t3Ru`YX$8N!GYdvMUDV@R=e z&W-^!_2Q$O`N`jE>W+jGSW`CpZM0S+2Q-N~YyEibBHSGzwEVk8*$QXP4q^ig6o?Ev z0+M(88Ik?wo22v__-0usyI*HT9^^_{V1I!IaZQAoDN^tGKm+0Ry!=U#uZg}SyzFY8 z6M2KN*$qH92aWr-WOqWV0K3WxrM+usONuHXxZkTadv>yz4P94eA-Vq1!x~W7aJMba zB|V3wDZ0NuSYhCUAMMxg{qct@>(?Ng(zl;Hf5+`fhKb@|0%2|S?0#So+a6H3Ki+9Z z3lg2-&RKEpo#(z|EG+^-0M7$vxk_6Wm~ASPUxUUxDacsJMw{3H+rr^k%M?Txx^4h(9 zh)^IrM)qbSzDW?rP0#~wbwR-K+hkL?1dZ8)kgDSbezO66TjHs70xYq^D1 z(tB^dl#zS|y*Dx3_Y!=vhc9ifG-=sDVuR?W^fUrBOTP%;$O7Lzhe95OS>AjMU{8Z4ZZNtfU;P}SFFCXw9P-N{{>T1=+BcIvLCB|4wk ztGpPxeN$li&vM9vy|U!&y{VQlEJs)W|LXq=Rd@gKLr|zwAEM?=+l; zr#*75Z;}hVajx?Ei{Az6?CQN1jq_Kwd_oNRzNQJYi=m4>-{t9-*bk%plW@r$gc*8m zYT4JXu%1Gq0xj>%GR~R)m_QU3JS_H)xwgcL#51rkwkcZJT2Dd881zIfOGq_S6IERE zenzE!PR+_lu7&80zn`di$lEg}H|pb|l_MPx%x|Ls8n+-@?yVd+xB0|+a;^JwWMMqZ zc$noW-8kxY{@9&d`&p|hfz~hkTI7=3FN29S=7g=k%6Xw7TLx=$NWs zFMTnxzo#vGq2B+q)!^K)MmW0+nVN?=X)=ZVs>8najAuGRli5#&^8rP`)|iXuZE` zhaZ`};J6H#cb|UrN}UQEy3+Esi;=5FUQ7=&IV> z48V|px%)#G8W?>$kmg6>3M=-6`w`RxrxtBrW{zsHs!HwE!0{>&SldZdVx5BUAdKN@ ziE3QfDe*>`2;(BAs(1J&8TSjwAK!no_%$nTj>k0$N`puZZ&ymC-fG-?6t8cpDh_;a zenxU=-(1Q2*H!`UV-km`Oacp?{4@JfAx9wYCg9WKoTi zwt{AamU32Qc{XLfdsA8Il|f3?V4dukB+yWeXY?GvXOZOBwPgvIJl>P7ZH^g9=zdL0 z(KLan$RR9#34A>rHom-m9F|_;!X5sS+b;`Q>lz2TOb1J6!F&{ey0`#xBb(D*w^bfR z+iocb@lOckk3Q~f;e>$aQ_)+*QBWgy>;D#y{-ekT+uBq|zfQdv!4CB_Uk|^TTvP}R z7EUb6b*vH89XVNuPj)ZEUS`sJ&?*qiq@EtLqnx6G*?H}Zz0RpKUw0|>JNH%rw%mLt z?&sZpy!vO=NSm-zqu-cK`p7y0z=IA_(ES`JtNt%4>cheN(bw>$pb9s;6(Q+*0jhU( zUu}No>()VuYsCGA&?6Xb-I18j(PG@zv3!d*S}~zOQFk2?JRN6T0b9FIl1{2^hb!Vy zez$(F%1UU(){lh;Vv6xJ)C64?8M!G#%-& zt%_aZL)CLVxjp2t>b497Vw4YG)6sWUHILuhZf#C@b+@T_*pnONCZF?WVqITtnjuwI2ty8Iihz#0aZsJa%boc4IDT)H~d7 zflTr1#*(w#8&O4|ezV43yJ2j71Oo_?GM(Pi(qK4o$vTx9c1&@Xk}DdQk7M9QbFWX= z$B@l)sYiD`Y2>CDm-9r+;q*@pgjEmSN|Y--`v{5A^<;WG=I0XIw-hcm&BIFdwed0W zcYoo3i0`&kj#jElJG6dNFWTHe)l#nGrHM#?`+lgh4K9L^~DN_f7d~fwdm^WDOGt=RbAiO z$q{6iuy$U;9@ zh;~2fvAj;2qCcs&*yrw|{N`){7Y1+q@THRV^FzStrbA@fbEIVvHXS}SxlVSb69Osg(%7vNa_hrK`9`6QSc zv;`VS;6@sYwOK9$#<%tVd-DaR#w=%C)wclc*#VCP; zf$YbH?BPL`)2()Ek+SK(?wjd>qE|e62@NPVkB?LtaCP_jW7SLl zt4YtQaM6@Ic#6keZr>hOF-3#hzANkFtQ4NgR|>;Wo1M?>OH>0)qkH>DZ~gSvXx8)A zmK(oq*2|uSY)wVRq^i!~T>Fe3(Bu^hfp(bE7x!_oIxiK*YwKGMv@`b|;$1-Lbvct) zLo)V7ad9C^6_7yqP7?g6qejxI@=%zUa`WN&{ zMoozfkAg4Jp;GKtucB72DA=+7O`X5oR2TEv>SBz1r!!q3$Q9s){JJ0^d5t2-K@RL* ze_q|eeQbo^Yl^2;iB~!1`XahU6%14&Iym|L_x~F3P2u7ALFG^Jyn{ya=RDBA|04X} zl#py|d78jyNO05SXhs0@cmb=^4;8jyr!G}vuCx6tpRMM{0b0tD-phj1X#kdjNQYQzna&2fwB zKF8HO$qO5q*oG;@UsP>G=^dFKAQ_gHHrx=j(ihu5t0|Kk=7iWlJHT6uOhC6>3G~kGUQM=d~nb;O+s3M>|m+)E6wf=%L!8@(YTOOq!--~@rO0Bhhh zxppPchuGu*HGYrrU2_knO8v-qjnT>stIjVDHu_Ukr$yysyD)hg94h$ymx)yr-R5!; zVwm2AieX*#zmMTiVd4|g96IK9ts6h%Ddvfrc6j&!=*I*)vveNPDQ^J0W>rtuB;b~0{bWAj`|1No{mk~k73~@cn9ZIlBzk$P3+ow6c9&fC|$vfot zx=D2Qx>tj;$7$bvH)+*?l~0K`YTItB+O}YtPS_DScYl@pL0GtH>gptx<mv{vKm;iCo$)Ukvjj4w|6g48$Z{^y+hw64?BZcRG z9UK`Il1mGEYQZSQ4T|^$5IR>xIDLU*1$&O!BA!gj%opVMa2eOrJT^cQ6XR8a$=i4J ze~B3)Oy3jZMh;ZUghMJQ|Vi( zxV_H!lAYp7``f9?KL-id@U0)YB)vgnr%yVwaDg{m*!*|{j# z)jp6ggq)m23}t*_Sou?Vr7SEB+5QJf`bL_h#HWvyU{ok}O?BKq8c6odL$aARinzhA z@^JKO>p&-Nuvea66Cn+xPi~YNUE#-+WnQYP*$7j$Y};}3o0avyVJk5JL~mUT69`_l-MsbF8^gy%r39&6x^e2=A1@(aW1o@Q^M_=6Zui^>K1a-X@fx#`5#0FOF!`E&G<%IM{MOPzNx1&hFts|eD=JT=0QA;<@YhJwVm;YUCE@5l8e$mgp_q9QW3dbTJ= zTPRhb09?E;SRNeXij=OMizez2ehvp4<>wox=tZrc#~4bBw=UPS8>Z_X zqcQNQfxPu%k-s$Q^Q#5BA%Drt?r_(N@@RrrIGaZ^TFV7vd{9Sa({+ulbOe6NL(jSP z>0tK4{KBg3F_p{E<>a$oZ`)YtW; zRYT@}v?@RJW`IU_=60or?=?=S*7tI6hK=;l@=L(fg?^+Hcx@4)0KpcGgD>>}UYtn%sV30X51YRq0O{Qxb z-buVZi6|ueoy_q~I`NBc#nLBta>N9Fo8(sJWG|c8OQoPi-ELRN*7QFQU3EF$oT!MN zk=WA(U3crZ)qv7Evrz>QtMm+rfwONlEvPY=DFVhMp7A9!UEmr8{=9uZiR!Xt5An|r z=xhA6`9ANR8Iw|nxlQy{CT!FnFDy|bwCIh6&eSoxGMkV-`$CUMlxU$nHW`yO$WlkGM&>vShYt?=|)N!Ox)Aa*hCp!7?qdozF+PVXSGoP0K?O(Zm%05>fn|} znHQx?&?Ue)4#1Sa(cd@9H}C2@hd&v#S(H8Kx7zaXZ?zB*vt%aj=Y@`lu~32n^7Z-0F9MzX<^x_g_S zI(}KF=a7a0Hgs@r*_0#Ug|^=gsW8Bu90rC%|v=+FB@!am%w$@ zzgm+T)7Nl4CAA8fYFnW2>NTGd88_tz+R=lUp9k@)2bdyxHt#2%g0TQryqFx2P(4=P ziyLmXoFC?a{^9k}pDbJ-2idiB&YY(MZnpoTT#=aM9BneqoYv&JelgL5zHz(#jKoN9 z(d@`SnX8qDE2oay_RDw1dbKzM`DiOoK4Ulci>%5aAs^#f3~#4Deb?=%nlP$d(z}m< zTj2*cE&SqWpSv!8vkChJZPe$y>sd0P8m-;>ER~AAnzui!*dRPP$H`Bh^aVPF(FY&!p zAYpkeo3_$!{eGIMchGt0fFVC!>zZl8GEYfx*IjH=aVP$nm4##fcE%a2DEKOP;%9qoG{NM+a0p(t)MdL{I_yuZA&(fcO z1IX1{wQ*s2B&5ADre1ccl#KpV2vkUyrs`B=q*YE?r1-^e4+||NRaw0f{GkQRt+mpc z=WzHB!&lG~E&-HbVxGuri9f2;Kl+d4o1q;MO^zOOYQe%d3p8Ts(I$-_?en9*92u@R zZET5Q#{sG~!0L0vU1uHS#FKrA4oIIb>1YCX!Mk#{A@4$jv!&!(}4Khw0#2B2* z!cXw2>hNo&0c#}ze%$*6+c*BJeQtf=wSj2#CBL-=O!#2;Pimw7?j^SD1z(v@4d_Y1 z*g#zTu+vb==i-$AwrkG4xLSE9N5u# zK1`ZaEXjDvLD|2Sjk|!aJ>FA92y~gDY{XhI2$pFv-djB{BvR?Eic;FB*}Ao0xs`{Y zN^sX-aYs>kb4vEGCgfXSMq!ytvjZt-t4S*H<%~IQ<0QCS*3$TQIU)nZY>oVcQtA~8 z%wBBR9g^#!}6 z+R2=O!$Q}DqUuDX>62fNmo^wA#tT#sMB-OXRSdC(ZY)sE&nY3GaNRn(+yhL`Vw z$1GI9&_S^4>reD{DoplJc5{&T@uD)Oiv7ZsY|kFQJy%JZjd7rou@{<7MJAF8^5U6tuD?GlEpUAdD`jo6Z-;1`jvgX}VA}!^j&z zNO#4g5d24UjT7r;|AF?vRPRzj0YKwlg@!A-?w;+;JllJ!SgdK93cpf@V+5O?Vh@{R zyQCDj{Gy$p&8F7yns2*{#!k$)q?6~A!mhrQ3Qzr>c#NLMcYD~x5gDttMD!Cz9 z&)EE$mkb1qVOU_++0)Py#6mR;bR_x0?bP^Fp`EChmU1+MPNdiC;@K&vaB@+1P}ypd zhOE0*v0*GBIdUlMx9j~oBKWv)^#G?T@Bsm1A?Nkq>*!l#&lAFoLTM8W&wIN#Tf6t} zK|>lFzj7R0VFciSX)^#)!q@61hl!qGwzPLZ^zFkh>nsvO1x7KY_bKb>IvmT@lYjmR z!|Lt-czrHx@z#}%=-0o%+AeB%d>Y5d4v{iG&y0tz_cb>&S}ihf+5M!TSRlWpFO>Xy zPt>dHubt&x9t!oD?(z^pGoI&tZY?aT;Zpiy8Kx!oX#|13BCYC61}M;GcQeI2oSdGTu)xN9oz;RVHuHrdw=4fBZU$0OF8ExnIV zU5ze$h0?z|{CCtIU`D>#nQ$GDVW}X)+8qUf!%WWNq>*#0Ie4tbfZ0LRSeOj;=eu6Z zjp}4Hrj4#RpD0|^iNkH~59V(Du>R1x`bZa_<_{aK1r+UAoXQ9I zR6=%SN-XKCUt-OP-HJ@`+4E%uK%+4&s?WTzs*^x7E?#{S<{QePbxLf@-gqFQDEjSI z-o8^lOY2ZJKqfupd}A(FK#U$<#@9|ufWIFnZ6$M<%c(>{R&I47*!x2PhHYFSL_R@1 zQR6ym16^rMZQ{b`jJDUp?gVrrDj!-3y(Gixq?Np8T*Ff<8+aWYn_bSWQ=E09b)BpG z`l%VuUD&oKv!1)O0TQ2or0L|v@A;56?W^egco3%Noc6Cr?RQRi3Xkt=E}T8VU{c6{ znI!d_fhVoVUHjO&iRkL`rzeh^pxtOWN#d!&(Bx*sUD0WKp z95pY$5Homf^Uo)4mYVY1S%F3GAit;kN`IH7u2jyCD3YjTm18jZ)qb}E;sb=Ts`Vvy zuwc}43O51x@_IqlWQ7;%`Oe8e=NJYc0IWFJEb_+09Vr)iDdc5aXZ`8Bvc`*^52iGjt{}*XW}5^>2t|RLshMZZ1#fwnSj@B zz)!HNO-mdJIP2RHh!!iINoJDk|rOt4q;|a@rir60TC06qZ9FB$nfBBMK>I zt0u>aQaQ|-Ic$;~a+r`YbI57fK@4NF`MtY7pWpZU{jXd7;nv>vdcB{o*W+=&J2V;c zIi`cP*mJEfn^q{j7EeDN_xrr_AkGvz@I!@AR#}f+fq~Wv@Xn5)uNWNYyLwVt;M9;j zx8@tFkxz1CpKUKzJ_A03v`%^BFmkfH?PWW~G{AuHx%QupNBQg_o#t)J8-`fkV zg+uBWPs`8|w@?ng2>XYTj##~rR76k+MF+HidEg!gZANO0?8ilKt*hL1;vKpf#ol|j z4i+FjYmWGzkqTF8w|$w{kGpES8vq#*pv~U_lu<`KahoR=DHbNO&OWqNR6MTinNnbg zSEkJx48MWR+o-;jwLAh%8?e2Ct+l-o^0abC;KI9c!>JO5(YQVTxIv{!Gi3Q!IsU_D z)C`26Q1ylc|by{NI$&xBycgW<J z*@1BBu8P?-P~xaHy_ZGNiZw=UTFfp}6oLbwCS~EMW-`ci^+gkbVw3WYBJ@(;`Zp5) zyF!{2->9~38X;>L1F!>52R^{=OapBnF|J7UN;eT?`Z%=4OaoOSO4KcEj&{>ee66je zHE`MaPa=%rJrYS@Ep}>OvGN6-l;6cN@qQF6Z9jB3+SVB-b9dm}ko~D|FJE7gv<=Xx z_jRCZ)nVO|%B*WUWKkg($^Rfrb)*#6VfvG+=euQvcia>r3TNNuRv%J3319#6{cO8# zgJ?F>K))T~#@yElLlIjCS0nZoOP9RKFQk_6>-0*l5ibAW=2TSE!#NiwUqTiM5_Dhy z__~wtQ^fPBGC99@S!UFWin1BGgRXCz_cGy`5o@+?Cn~qPmOcxkXhYlF1?fxwjDU50 z+!Ww9c`-!2a?&8&Z*jjmN7!jLF4P#&vCgip{{6p)_i>Oldc9PyJ&^w$;c=x_$`Z23 zGa&OTZ?qqe*H$Cjzlegi*km()iw<~c?ugn(dme1#1dCQw`XmlCVWiw6c>6@fPq^JPtSsX6HNr_e!M%ti0a z2<02i8gE|2c;)U3Z;xt?=-#2(12wL;c0)dc`8VviY|N5sUAFtYBb04`zw*Rx|CXQS`=&-NLGe6L%RRX>u2_RW_=yVROGTPZYGW zC>&cc$M7jnfaZJ=8wGrwu$A>fU-?S>{ot90=Pwd0tR}p z?{_@*$c4?{b)h`SdK|IX<*w;^k(W-8NB!c-L%bfPa5g8Nw5xM zo44eo_(AN4v-_C-v8F2IdzWPwK?by*FB_KCmCp`d(7)p3{btuC>N`hVsm(uF+t*rp z#Txr;&Z%c1`=aIc7=Q)U=xkpHU>+Jnp?wx{5p9QHLU% zoA+w5{gSm;t4gpBq@t@8|7k37xqsY7a9z-RyD`P^zN77*1Q1Tt$q7qZ2@01!vWOC?fVNiFoMGdk4glI=O_3TQZ97`KmO#1jd> z{k}7c{`DKWF#$1w#_yTKoyZ!N`<04X$wNL#2|UJpP3AQ&n(=vCqVe$Gm99~{oKWRd zSLDJ|6KC3NIs-3jD-LqQ?gT;PPbb;Q?@QeMx-oILPKETqA}!%~WVl09q?}jQBi&b+ z_Ddl@rG7nf9jx-h`IBx;?pD`?mVAD6tiM2gAEkdqLWfNVAGf*Vj)()qJ%sRYhxa2Y zXzMDDgLv+_UHkrkL%bVEi8hOHg%QrQ*3{RB#|&1}qK zG{Z!wmZ}JgE>oQ~U03{w*}P8oRS@$bry8M?KjtW?Vp2osu*%-~vV zuU3jxK}4HeHgl=)4wehjke8!P+nIved>v^P^70+$Zj`6Awjr47<1upk#jw$W1!)PS zaOtDLKaew|)iFVzTQaSs-Ke$Z{q@j~pXmq2O8lw#c+z;BPD1Eyd+EsKo+`tGUPYgt zg&|#Z_&rW*?$mFA+n=N^$(n<;Sp2BP=RF8OsYwoN{gqsi9=7=E3A9TA72NbbRiMwl zR};k6;#DAq6;@8mUFg36nD15?QNVHggsLRaf2C(W4KG@g3T!vZAHgkav!?%8safnz z@`tf>=?IPyL|0)wx7z&TMv)F+RGaKL6G4u5D}Q85bHY9~(zboeh`!TWsz%{B(Jdpr}pUU$EF z)5LI5u#^wg`cE#nAn4G ziNN;b@rN>9`M(_MH&PN_?gBDS%o8#+QVMt85nadJp6Gy6;bau%+ueU%7;1BVcAX2prtMxvlD%Djb|o(} z9czV--oZiN_2g`I!C_s7L|^XV+jfr`u0xcrFJK>G?R(SxlJacO>}igVI=obaKkNFl zt~7;;wkdzM6Z+au=hY%a&umvsOa$3!>W!HnPr?n8kg5>2vd}4XK|Dn^iIz|QWPBzs zrW;1kH2pI27aA|hm)!JT9DR~6V|2uwA2Ye05@;folfMWB=}Fzj&IqiR{}i+NfMfcP zx~eTNy*uI4cDu)iikXrtm~|=c76R9UHIST%?hW?y_|l93l2@e&L;5{O zY7Gxz?%j3ux1e`J5vwjBGx$O2Ig?Jt4G;(OK+441ZM&?;;`J&mHnS@I9imvTtjZl* z+xk7hw1a=!O;^_TG0_Ki2Da84Okp5-V?O^$1aHYzwP`qvdGOZTR7sc!zFHtG(*pt> z8m@PTRgaDjamZB^s*eZu0qcbV7qV6ZGVQ39P>IlQP*Wk8?a-5G@K3XI_*%E9xgZ}o zGFRwU_Nha(1drK?a)?0%0QprEO*8W0E{nP`{pCt7xQ}-)o~Y%Q*RAx#J0RtYGN{hS zTkciW`|F268rD4vN1vK-i*Kt<_Bd*Q315gud<@dbUI#DqLA3n;gr-nt4YjD@-$1nX zVY<)Oa1g*2^MB67g;eWtGk(7`jLjs)tJrE+uAVje<)LD?3-1#}BM)L&ppBmpy@#8CT+l8&dcqFIU;au_qCmDb^B6!M zvV5nnXd?OC)?IS}F%`*j*xS*$0^!lyGA1U_WwTOgY1X2Do~03C5i>7JEQ<9TmcM?f zsf;N#zxrK%8bpC+jOdl)2o1KqM)ns7RQD3$2Q4x5@dZ!uO@iu@vSK|na^u zetwS^ec>jkIyCLN;{>uMJM?062~sf`R2PN~^;9hHL2aA9mWkXx=&!m`&r$KB`)upD zLs`XF0+qsl9eHb5VcCu)>62~YLzs{%_~`;Eq?>e0J)z+K`HAl>eGVaDxU+-nl-OXE z;9SmsTgREkG6}2XclRuH5_aE|vKia0xXd4dAL!&u-@_ zUdFyn^~Kn!tj~4udp^yk_eO8tH5z};f*ZE3jB2u65bhPt=Qy|u6cEpeL<8>{cJiRl z_6M5rVe)&C(bv1D9^@#j6isy)OPKlN{9&88UsI>=2#Y#R%VqO3AiiHEBMS_zwWVZ9 ziYdGiqZjc*R=!PunpR&`h~HX<(H<8yT=5>>@M9=PII7B1Ox=%$Y&9q6>RFa0?tvWu z&0>})*W3oTHUG>~XLZ?lT4te!<$h1)R@D7DgfAbHx*V0M+N)0xk3O2`v^-d|zMa-kFy;qOL7kTmK1?nu!eTU(y zq}7jzAL4ZJ!RP7dE~asftQ)dcKc`X$v}FIc9RtjQ=z%x?O+r!3{GS>wC7D#snWzWn zl0fvP#;4#Tvr=BzjTtK#qa~W*e*)URp{7x6Ci6-V*1hH4if zlAnHe?qfy2mm}L;qIeGUqR+SQ_w-rHVt@+V+g^D?+GaD9<8D;rCN$mas}>Jmcm+4X z*$>qOL{`rLK;^P+SgBnGwA%cZ>WMFR$7)Ec#o9TT2ho@Z4ijcBXJvsf^NW^q3Cg-s zGSvi@Qonn_3@jj%o;pygkLJJ?L%#SKf+F|rwH1?yXEw@*jd|dE&7Z%@<-QSh>XV~i z9br?h0gZBRncl~)3PEqL+)^C~4{!i$2y&x-KGOc{sU1pz^2Fd(5eoRuCP{1XyoHCy z`D>4|qG#XX>(oF>o_d!lVS-PiF~=IY{f~8+1d`Zg62f@Qn(tdf9*lGL+g9zJWmwJc zJ_G>12EA0}*H=vR4*k0QdBc(>P+8lq!*0;)Cy%=`=lo9;y^>H>n+r7!;7Iuo=cld` z4hhkzW&wls(CF?rJnN0dR1S{hdK7AGa;E4!np@3-heA5{ z_4!ujAsx_U!-D2Ph`(1{mrpcLM`K`1lW#VOI!5*Z3h?^U;x?8b~=+yjb$P zdn!`AZ^inbXCy1DaDeeHMJOitX37G-oT}g&pB6@=Ew<%mK4-KY6tJ87yy#-<>^Z0? zivkL$SpYn0Uzv5On5RA_Ao}u-e2PxcqFDG7?6e{z9Ef#mSkS9N9FE{&i%1H&as)3uKx#d zttwqV`lqx?o?c8Ba=sIG4`x|jyURp^boXR#pM2P^-EiT0TW%0Jf5&$2D+*~K5|d0( z)8SzE{!)Zp2e+Tl8BlD#S*Bf|^GOkkea`)sOdzi>Bnwe1t(l64j~|qj5AHCEH|;Pw z)SLqxJ(S_wO&mk9;k`PXN@>D=mxino#btw6paonL%wb$3)8K4x*l1h|RY|eWoz{ru zT~oWEDN8SCYV;NK2XRJTOW_84!zF(3g??=Uz| zK8vS|{qw%s$p*)J`%X&8`&>G;ljw9R<+?6G))J3=fBgtF2Yf%dNE7J0V*|83&TAXl z`1b4HUbAZdyhyJF(<04QIshOZxJUo1zB#ZxzOQ{BiDtvA!v>=Jl={z(j4_LnF_M39 zvqp;lU1}GXTNJ`9Zmz!`G)#Hv%1y}I6#EELjVMo9Tj@;?6#e~zG`N2j>vOCvOu5o9 zbUn58AYX;Mz$?>a$@xH2o{tH~Dn z;{4qhUrDR5X9Hb@2Gll#0irpx@aM%VqWG2=NhlX&PqvH${}abyPlZbGmCQ^CKz%J@_3L zDO{mAg(274v=vQ0qfbNxWh)uU9kku!W&T*>ASTLo>CyTh9&-v`qI~l@W`6w9zBf?x z>v`S4A6a4C8+(Wi)E*_d&r@kRHqj3ZO4by)VtGEIvV))Z49#s+$RX#u~CFDYz% zS{jl<%m}Gd@hT7N+u1KFZTpfuxFvPuJQ<6ZptDd2P5wdB*%;TeQu+-Si>r$^3NO@El1ty%B zg(85%l#_u5qR?^0$nYRg#~sHypC9rtUUj5-ZvN2vs4D{&yeXNLjCj>hiA!{Zu)D;J z^qaCI{M!r&2A=dPvc^pHch-DQvHs(Ui#_;J>w21W=;GZ`w*T?9(s*Ti6KLf2+_D#F zEr!T$Z#5X+)PJBuh98Fkg+Q}%9yc65H5>gO`I_VrM_{tc`T;fk1y${(LEmoVss~SA zx_Mptxcbz(I)%I?AfuCR;tWGAV3l7?~XF@{sNYOpu@Z_XgMpSnb3f0$n0;-4k|kT?R2CNy;Lz|0T)>V=5p57T~i*Cld>G~4W-w6unv-L`FO z1!`?^)zA5OM+G`!p`J}L6i2P|Gi@5?!@KjIt>JHPBdJ}3B{f7ewt75u9?$Q|^l#8a z$2hw;t;*W@?`>LIelY)z1xc>`di{^)dlC870}^sWL>S%=nAxeZx9grz1Gf_;GD zscueBuO2@GQiS0~k8pAfsiqjg2#K0;n@fBhdTQ4)82rs* zV}HH5s<32N9cWO9gYa&$=-9y6FK-oBQE#QE$Z`)6kNBK5=R6@Q$H%rb^45MjPBw-N zCK1z#zCT5uw<`aI3jOvXRkSz8yJ4U1{kSF;cu8J^gPFPu_Y~=G&5#2$MWc(T8h;GV zpw#G*PJ-)l;&IRW#i4h`@#5cCsUG|XIU6t4G_{~xlX%hqJ4lUCwM+EDNptFB1Op9> z0lVs%KmAW`);$HXh@PBxTfxRa;t(>MMA-UOMH5{F{yP20y0}xv9$K3Ur#>f$H; zQ{@i%$rI+@8McZ>M@sROY&-DTe@3wyRuJT8Yix)LK#tb5 zuJ5zXUP`y~bEKkIS`P=3FZ=IEOQS`^Mq#>8Lhn}M42-a%^34MAywX%)B7!xvDz zk5Rrn+1~Tw(847_~4GUkTHMuia!As z{n1E;zq})LeFom7>XMsW6S>$JuqNz(`TNc9cYcYY2^hHW0qd{NPfdxXn5{;o6Tov@ z8;~uZ+zf8ip2Y%&TITYC^diy9wj;LoW?WQLe|X!~|KOEZZd$)(J+z*+^j+cJhhPex zVPD>cQDbNulJN&|l@XKYIy#pLkp_P8rV@G*X+&jAe2nRihV|{pZ|)!oxhV-1`En5< zpZPqi!K5V%yo1##n0?`>H(dt}ABOe<0ZF0x6`7vNS4V<%WGD6ff=p(sNVdnyIY}n$ z&}EVX{k!mqBXa3}Hi(ILTDxo4_oHzvVK%2ISI3q2n!OA^wb=M`EL)yyB~4Oy_k6J^ zY6>IQhU1+zkGe1;he9-yVj~6``~zmU`90q=>o{m};CnLts@j7e*W>eTcScHT#C}*) zd;ap?gZ(1>{0odU%@~wf#^rGHO)7e@Py!J|SgNFdsCK(@c{4RbIb0tpu5t8#~4v z_+*SapqCpfJxC(Y9lqsAQCRbX1pa^C%;vG*huODYUZrbtHssFA&Yg7x9LCd>hWY;7 zz>t=A_OQD+M^&y7ZBE+>6Cc$c2hx{UqydS<=BgR`U~~!91bW!|cG|1Ldm$H!0urNg zKPW(!addNQY^k6vGR9D1^`WM6P7wjkhs6t?93k9=#^81#w#x+jUCr&3ipa{!#H0US zP|JK+G{vg2k=OeNZ#O)uGOj=rxT6tmxy#@BwV+X9r|CH#5b_|CN3^$co)ff z2c@l$B==X?cOic8IPGsnN#%_-_{ImUlfv0U7wTa{cAWjUMv$SSPP&S}2u8z-w+NJJ zT0JpA@u#~0!Je8qn~+YH%QK`dspv3pqUyr&8#>gykh@P!_lK(`YtyT8m*cY=>4fIz ztz^$o{e`iONX&ys2{90MQmO(F{DwQK*sO7o_p5vYn*O3)3h#n@Ii zA#5Aa`TosUg_H4zf(4S{3j_o~!|>jPoYmDBSX741&g zY8%5!{CMP8GXl~btO*D6XQfq1bmt(o!$$4JyNR2~{ zR;xW-SMrnt3is=r8BAvmGp+k-YhT@6i$1MM%>96*`Z9Es@Yy})Y1vy`$pV!E2S4>B zMb~7Svu8TlaO(@G!`OTC$JsI8QP`zVsSsg$0c-kVkJjP>XnGqqk_c&QT+Vm%M0G!U zt+!$Zjvj;aFoO2R7h%<-UOp!hgnu3Q>7GwFE8eSt@ABC*Dya4YIPr~wEe{_4Dd7FiK4jCS#m3w}_Lp z8a+YbGOK$4VAi>Wn!MQ+^GkD}Mml9L$I? zJO5SLDHELRy`kmdmvrdHVe|C^`;NLrZiwpgg(0V013Py6zI9L@4Gj4hnboeiVQb!G z=7N{7x)GtTve(p1GUvnDU`VOM4@D`-EDYQj74}IF#KMLME)ErY!KMa6bE1j8J9Apj zMh0b~k6({e>`Nh>X>ko9*{*Ab^Ti6d&_1o%A-Xj<2_^rk=c+Xcuy*w1w%+19*KF!;!dSudjQZf&@Q z!h?l1ACIrKlEOz7wx=?3;ns+6dTFo^h$~zNtX@fOauq|cX!tP3u6_0U%hKGh8uMA7 zlFyDs@yYVs?jRJmM`}Yd={Lh(=|2&=&GL2ysd~_7>dol;3SUU_2|u(Il}_`DQgv45 z$v=9G*Fns?jsqID@>(k@=(O!Xn|lAmQ7>%1a+}fd#zeDf-|{g~u_}MSw>d=XzWmt- z3UHca#u-b?-Pk|UyoDF90yp87sku&{ZO&_fd>wkfV?x{Y3Yfyb_7ED(NwOh1-frWv zfS6YAGTv85gS@^S@)w%6Wqt422!Af_Ws&$UlcvX|nL1Ej=T6{EZ^({ERvzF-^~qdL zD7ESnJZK#J(f?q~33ffuvskystbP1W+sjI6DF4xb^I-_$so=@1JCi)--_Cjxj`}Q| z20KkL%^vs$!he@dhy^zC4|vr;8CMYTRWVEQb@%o4b>(wvKsqI5uSVOQEuA-ujqYV* z%k9cMP~ksHY`3Ov5a?}b0D%)TJ__E^r|{5k3dH|DCjgZf`h&XS z@oqGjHc2#EEcBOl=oce2*_LPxPFM~~L%TAclijEJzs|ZqXcLlz#*>~@-pEHu5IZH0 z-C=CI++z?Y?Lj~QA=Q?K@lgHI2t=BobL;xY5bTG{HsQl8{@qJtODhQfkM_{UH4 zfpSzDO?+LJjS7?fsj!~tN9hkQUGsQ$nK?1G6WRyQ9e*Nlxv`p<{S3aou}9gMXWF#3 zS`wYmC>5#U_}vdt$LTOZ3G^-9N#$A`KdV7AH=YFYp%R(UGe*f0b+1mXD(>R@2i+gn z4V!SmLj)BNe@*R!0-NWKsAZhmuFn^*@RR>kJK%wS8ISxbqLt5l0l0nHlC`pdwsBGN zzBDk4GRZ%sKXOp#j#}WR+|H@HA?Yy20gx3Q*JWjw0n+j9*c-U3HvduZhgT9`%iNOV z!AXBi={Ij5zBy$=*k1_l+P@VGE-NPPvfVvxQ(m6fVQeoUcQx@GD0^I)oK>nQ75luX zzeRK0##f_SnDFjLt8653x|duzadp%gw*1E^^&05A+`V?An218HNy~>hCqvi-bPCQ| zn9xvwTE`XTQ4Nl7)eUM6SG{~z=Yz+s_Q|hPKjq|at^x+~2J};!&O&IAsRcRfz2cA^ z-3h~U*q*!f1jjQD{LU6<6<3%ggykOYq)3#q8BJy^{1t;1x>7qbC}7^;pTW?3tuG0#=vO>rj;D6dil+mmGM zJ?wl%UVhQ^WKg+V)62xeI1KmD)8Aa8$ja}8ueB&6bB3wo}?S9T@4;H|_5`*ZSt*M{y67=sR$HOLf&^R^$XHb>*DN+z0K74D{y9MFZdH{ zrM+(?p}W{|hABw9E}P6;Q18ZdN?Gr$IHN=H>58~kn=KhjeeSipt*J-lL1TG~@ zFzD3-fq%3xVa#Mbf9i2MtjFhDaj10zh-4u#f7? zRgm37z@z?bVgk)S9%%tGkyn?xiakxk_5LaU`swM%0Hxsh>dLz=<-4GxnMkD|YTypgoj2W2Px^mZ^Dey`ZMSm^*_m(`wMC_Cut2**7&%=Z&ae!LX>} zz0|}YKMT~NU;6|01$5A;La5`E0RDF%&k%XwBpC$;v6=ae(Q->x{)mi}mko9;8VvJE zy(FDGhfNDLJD_i}r+0c{LAzo>(8oQAR8ZK_mCQ1b`AW9;T!0LGPe{(0Ai^qXBl|1% zY4@r{tu{4A1Q!it!iie15Y_)gX8XX2K}9;nN2*+pXf1}$Y7+H)1QVptFAyr!V^7;9 zBH{d4+)?74_J*E{&<-LF!pJaS)B(qD7XQ9t+zjD}o2pITN_(j5QM(u~XAe8GS`-He zmuSO^_DE)WUbSI$6XRS{Sxi`~&odWC*c$$IR@#2sO9}@QcTVR?wQ2rkzn)humPdzHf)X|?{YKys0nFRU;7=p+%vL{vE*M z?Lr1AB)7ZKgs1Y0>o)?dZvsSi2?ZC**8S&M%P<30PAc(ZbAQ}{artu82;rWhh>gpH5gCuCi$690~WC8VRCZTr*-iB1$fQ%PJ)L za6$N!m(XB6EERMB(v3b5^I5>-7x+<40py8lM>_o6&3E#Cywk(eD4;C{D#6DZ12?6)ivyh z0+e$eLG{s?Kv-;=ss8qcU3Hi&9e^BHb$4^Zat=)gZC>o6>YiRNC2!G~frK^9HTiYb ziV6MJ6RGEmkLR1ga2xx)N!ubNH!Xm~zPP+QIMIl_v)`KZAg5e9sUGdSa8$rQG7y?E z2E4v3p7YZwAbY>y=)+n@YC_aMcES)d=lmqI-rDsg`P`J3rN89VWj-RFAA$e9aFzUh;*;aAiW&tV#SA`hgD?SIZSIGo*W#E&6aDD3ph=8><^4 z<2hL3K?%1A+St+|Cu|OZl%HGOGCEZ87X|}8Gq(2?^kK;P=RJwP#`MhEY*Wf{^i?sI<`cVw7e85v*5`Fw%_@{BN^bB5%>@yB=o6bKWD)#SO z>Uc#>_YXCsh95B!Aq`FieWObc4P3dS+))NR!gRnt-uY7YB0%@xeJ);$znR;zJ$ox( zZ=;(e|E#N{0i^kVS$&8r>7lH%{%NNLc}o`eDz&ua_6DTIf5mla+g_`2RQM=0|0iPK z>u*O#b!KhAgm~|?Ka$S1&~aaF2AA}k?>XerL}?#EqfVjQjxIXQfBFnH$XD9C!FKwk zIf*MG^oId^;WV`$9?gu;CP`Oo&DeJxB&Y}LybSK0!Y^9V{hyhI@}_|^g3~pHqaQX+ z{Su1KKDjTzr3w#qZEH~p;i$a^<}f41H6_@y4yQGntH5XOULtVeVUci5SQ3#)8&(_r zQw{M=SP-V)_m2uLI_$MAIOOSq1Y`;lPk?VeR| zhw;!_Jz?k6bVOq49SF-+vcyQB5g9m`W2tgi{ESX-M<>OCi48mB^djmwx<|30 zV@?Uz5pTz=8>RS9#5)XIqSH7weL7+=qf~`(+P2?2l6G1+SeWp^rU_|wUKmvj(P7Jl zInuvpbWeMvL1S8h7W78 ziuL1F22_icD+`#FWr}5PLb_LsaK@br!}YAeXFshn02?EMjgFrFJMPA`3W7VQ>!JuZ zC7`>}?C_3y@ERC#$d*1jMRoQZWW*@hKFpoY0xy7;*6ZwxEpt9`ckdC9M}i1Wa7T)c z5&1T5>(~?TsY~j{SQ#nJcpF=9xx48>n+H6s+h3T!(l4{rK6O-5FB-HlA+WtkRqg(EWdGME+a(MJ$F6wW1ZbKI%8 zbLQ3uVy_#?OFMqn+34*tR_}Opa>|$g_M?wV+qaXI75X&XYN#eLM2|Rw%L2{U%FFU` zcEy?s7=?vFQ_yMXJ#0E%jAV&h`yzSS1th#U_?hq3S##0qdh*Hvb-k<)+(Uc3k&QA= zkv}NBrZSBl`+-8F#=N8-4Be*p`rgq^O9qw0;-a!H_y^8A|8vxw0Tx(%)c}~8_IDtjbm*NA_ zH0Hb)+G=Q{N(mx44W$d^Gh68Tgc#Ar!Fhdx9Pq27GPI_1h{4nYK3>FkytiB9Om$Y; ztLLZRhUH>1^8v&S?CLAnt>5#;%$UO328Fqyp34SRtsj712WkF~mCGIiG@)MpuQL2{ z0c>U6!Wy)AYu}3nC$9!6v5#S7f-6b;&jI6Q&|g?NDXI7w%S*oad(VO1wGnw;cKt>o zVVn7&7H9i*4)cV(=PqL%;AHC3SMCF3<96|%v%u>2mMf|QF3|T5uRT}J75!LTm%qOr zOPn}%Plh}7ym4#)>%px4HEpI%%gEz&JZ!~;Z84Ntgm?GOb_yH3m9`G7nnR4ECf66s zD+ZIF7HYAuzp9Pwx1@OCGr)W!!&AJfy!B>>4tsqFh^PeevIIl5U_jv}*Qp%b{mx#7 zv}4ogz3@AiiymdTc9sVc^ws@yr>5Ys#gB^w%oBKuIQ)YvSh||a?ahr9=O7IT3BegX zg(noTs0ONx3t9BuIP?QTYf&C}oiWNRC7b+v#RC6Xkyfw{lm;+>rX7E5eOoTLDb967 zxpY@^c}GWBb9%5;vuTp!VS5r1&ictU)c8^EuhXD$HefUh?!&cwzjcZAZBtY+<5QFgkHU7J-;63 zTcuiamRL?lt+haMXvS&FX`}21O%qy|uac?17aJKJh;y2YR4jX0xiwKm&3sLOn7Zk3 zNZS1c%pFn!rra-axo}%VZjqv?-y*MHdh_SU_-tS>V>08BLb1Ohhl;&NsIQI#g5E&h=i{T!0a);ik7T!9#=YTzA6C>rnxX<@Zxn z(*9dvqiE>CSBa%f*IFuf^+dFv{uMW*`goP20DtS({`FkV4aoT$KtccvVaB^z=8#sy zHFO`RDjC$!|Gjl3>at+4Vj!UG2i(4lO4b?DoNZR161{S}RDb>UaLC7Yb(l`|8>WJ# zJnv4dH=l#Ay~r%`BD?6q;>sY0)T|4oHazUcO25u{t2_+erb%sim-smTJv%P(wT6c1 z=TYx$Uf*}&h4+uNxi%*}U-#7Bmzrt3_s&?aB4t3sp>pl?IQvjPUJw55)9ECCvTNN7qmVc3o~xHB3rCQ>5~SbO+;+ zGxg4_@eI+77rGl+yEeJXHJIXj@3OI*E&~is(;ni0KRtS_K5Wo~#H`Ah>O4OWOii+m z1QCd3U+E7ihM3+S*GIPvF&}Aj<{rWvgaO;`9=pXI{%|8T!2kmV}VVyJ#cHEpP#3E z*tW~~O1nWb7Z_RY%lxY5Jo1wR>c_9fRnyxE)^xjxNO-24X|4hs;p=(k+r<5yT4GC>Z`0E!6IN9`@sDEb1C}tnRWOKhhBQnaK zjr!yXi+o(iHGle#`4jBA@N88dnB9PWOCt;TS;@MzFqA64^Jvv>T5MpQcf7 zsn0VF(sh?t=)50VZ0v(1lp3{_2zz*R zw1ByO5#~Vcymv}wLr=a3NU^D086$idXpA4QYZaP>!8gCAr~J5{QwPu0nnO~I>>;)$ zhu-R)yA30B+~4x6P-}M);LYYl%{>415 zFNO+SgiL3|ZLu^K#mCNV;QNVr*+P))V7Dp!$Dp;3{ZIdG!$APl^@;<_n4&2*W!$x6 zRtzew^G-g@_Bu9vmkC?@$bQ`OGr_UZ%7)h7IhyW?f;Ut@&G?!1IAhyOU!#xjEbkF8 zF?+X$Dy1&XMAgZB-;wo6V0;P3jRS}-aW24z*N3Fg`yaSRrhTw#E(2DKkXs19UA%7! zg#Zh^;P^pBY}hspNg*d{R2(&VxsL-i$=EXatAI&T?MGj~k#FQUBsQ(w$Jr8AIt~@W za>`+-y0X?f5|tD}q~e`I`O0B9ULQ&R3*l?TH@%M65h;?>-WH`z-rUW5I3A!YgW zh5Vqj1%pN1qcAp+oV1GXqv;OG-2(=2DX1BZvP+Qb`kL)y+0FDoUR0e3RoYdD4tRoE z-3vBZd80@Ac07|JpSwTFM977`Z~C9+>~G~rBvxE)Lep!OMlqyCt8T7$Da?u|S<fg+B;s(G(J7U&iwOwb(@V?#Z8uo?sYi*?GHr!}4K3fDCvs?+x~xTYwW8JAn2_es*KEZPaMLv=rZSuq7HjvsBkVl+%}mq0}^om-R`?PAgA`S9kPlE$cw zW6ITmj@0k0(DrH_CUbv!VdIz|8M{`gU%>LcI{{hw-wXk8M<^SlMthhZtj0Q>6X~O_ zCsy+x-{(PbA7OW{u+qq{hV6eMr$Kz7XlOz9^Fv>Y9<$525_{fqf=aChbxuMfqQKv+ zHxrLHmpkl(9baa47#kITbc*pdZ`Ya;t<@DUUqcbG{SOj>KVeowJ!Pa`V(jRJZd3O^ ziBbuc?-ft-{!lq4PvYCPI;+_7UaS-rCyUygVK<4GWpPqo5A)>0qQKo`>291_u%)~I zR@{?fr?7U!>QT+{NJ(|JeYUCJCGy{FdAzZ%Qz;_h!k+0y@oc;$4D+2A7shmi>fh`%`x@!a5e9@o# zhDP~saNuQv_E~^8HiS$UY*Vacd>O4a8te!gEPI?Uk^X-TR-ozMqoUJP$S3#LW12b! zdL%2WT2r?+9gl>k4NgLx$k_C44m}#`P+D1J;A^zX<3m3rN6B(l4ZUdZCj@m5UM^Ql zg(NdI&*$e2*i0i;T5+Maz`8iu;Qq+PP~z~F?)n8RyqBcSaK;AR!!3&IGD^0tRA36& zE&PFOC$9F?bntGn107kT((PB5pM_gT#_SZ9aYD zC+_*`!k(d>C=Y`zhlVvR?*2;Z7^(H2Os41YPg}vwV~B>eK|Zn7rdMme$uwyL#6*Dy zeI5CH*?CO>5qS4N2;1~WzF|HH78{fG+6=g{T(z0hCGczX$ky79^0;)6 zx|Zl^9wt9odvWetg7;>k6IZhr6Veg2rE&KSG^$EWqHzkdT)qRSpZM7#va0bx*>A1N z6{YY2K0RBj3;y=3Ou7@JbZg%!_dt}Hb_a1<#W%11&b|Nug}oqUODtd&Ctrd$%Us46 zi3hkNe^Nd9&l{IDrWT*t*y6y=+f571+iTw5XPS!zg{T0Cx{6X-oNN47hUnL-X&(_kL?K>!OCK(i}R13WOqpqDFL( zo*-p_L5U73qCfr6!b66ilQ@klq6%5Fn(t@Ai4F z_j%tRzJDOsmHV8t_u6Z(z4jLCeXh7={&D@@f=74zK<^*I?S3phG8kM>T75BI{LD|k zW6C0A(tPcocD3o`3WN-KC2{2oM>jM%ZE^?!8)JUZQv~V>*LNzKvD0ws9h3&y{nDh` z>0x6Y_j8rKI-4eOd&AzrXc{6!{(wI2L-#pRA^ntksi-aK6P|OqB*@af4FRv${@(R9 z`ncWc{vVyRX9E-(oai`tlTvdc7DusFkrid zjn;12GlXlc54zfVHbI>Y`7@&ov}cf1Wu+bgPk(RQuHCACjTsbG4%JNxV6F5040aydU$5i%Ko(lZGR4m4T&O1$>7Dkk0`;8*Ex?+ z57>`8L0Fej0jnt6i*82ein@wM7Eb0@9ll<T|GLB}#^1@TN^N61p-+p1q?*D0+=KWimS+NFiW2eG}}8!suAM|+wVf!@$_upLK7 z500su1k^4{U=gO3eRr|o9)UV-I>ao3vlC#&x)w}e|q!K--qv z;YX1tR6Eusr>+NUz&Qm;Y7Ouqg^8Ezi;Y;V<8dQJR>J!Gn;t(%vRh(Xuds;Y5|ghn z_eV7&IF7N@SXKOu;}F}etw8qeA|h#S&1dg<*wEO3e))5)mjd`^6@iaFTv3vZX#6!W~^uU99Fn~B8*Oj;HAA#4BA zJA^+8(;Rmz%G?w$udKnpJvT?)3}iDHWOfiyJ- z81D*Ub9KMs|D;-4jcGm*rt85oQeM0E0vbn^b%1KN-&seqv{E^ZSJ5>=kBU>?;5s}f zHdByb(eHzWK???d1c_eDZyxcSGh08sF!1>KK2aS!)2`RHa{2U>3UR}AjFLpl--_v2 zx3t1{mZljTQ@zfJ`(ZhajbGSj@NT`C{*VQ^4o zgx=NvmFz_=#3?2GxHeu~%ZaE3K_DRH5x&YH-ai7rCttv4sd7NbuQy-)SkQL&|0v{L z3zC!^iqcMemOG)gwYyUxVc0JaMe>BlEK(>a>0C$D`zniQbIRAMtV-W;vJ$U<2DnOWg)ni9R9Kk} zy7n%}?jaEK;qdx{LE;H;GHQ_6!tv&L{qTya!2weC}1kepqYsUG)ik?TU zE)ZU6^udlX>Lnr9D}i#o65#;{QP4*dWXqc{-pb`@tTYa-qW#iBL9w12rDr9R(uC+a^z%T z5n>Ln$bVe#+HH3o7M<%;G{4fcktPysgSn-AqRAR9@3iqE7ck#}XEwWuJUsNbEy41N zg6HnV1+QJFsNq&9?78s4TG4;RbcGtX_A zlF(UWn7~T@rX4VLFh=fNJRVhVyonmjB}fHRndMLNT{|cOM&Agg>i>e-!dh~M{Vfnz z^DeS>e8=fOUYr*D5%}Ld$WEMz|N0t<9s`yZf9&;y=u@68RRAMhGJ_=i@Xd}p_4lWD zR~bdE4j}*!0oHRsPE1|1EHS4u^QcCKOsvS*BXuAk4K(X?tDN4piR%yPC7Y56|Z=-hJ&lXm_h{c%E}^68dX8 z@}=?g!zdWghaF$4H#qInW3;q=V0zIYW^Q2!=Oxjkl#MLb9-3~wgo&Ctb zb5NQsBUl{6F@IO#R0$q6V7vOJS|3ClW-bws{-y}}{EGeBoMH$H<(qw~J!fT+K*nC7qdb3)^t~FVxxiw`@Y?YJPM+j=0?O{~D>IGR={Z zaL{u8h^4d-;hTcd3bmHs{XMh_Go>;;@tsq|m;4(5iI{iVZ0#`=o|W<%itfPoA|(UY zgG*k6_a2)v-*}u+lHU-T)Pd%>IYkv#xb_<}h4`il)STe-m%A0Z`!+=3NAn{y;~rey zR?9BKQG!P-k3!?uzQ;UNH3n}>oZkpVrHL8~XtN!U)Hq?PxkQ;26^ctj#z&L3SDbZ#G9}AH9#kO#!^2DrbOX2kqnir zMD+e|+nsT5lSGu`V_Bq?)&S;fw!IS^|ADjVH+^?BsR_-~cg_u;b{S4E>n6)#bw4-p zxT6B5wcZE9uFzugDKw-ORcNsH*m^h^&_4n>%;F71zG`d$> ze7CL4`0&Gr`%SD#`%+I&S*l8F0G`|aD5MQVt1~81(as-$P)_W3Di7Hoy@5<9KKt+0 zR$w7*eHGT6UW|ABVz%)Rn4odE03bPdlE0fl(g)pOKPuVY2egL%WN`YPc)?H(us;^# zUIF?{S=7TIJHTsyO?c^)7Dt8{SnYc!(}32bm;_Avj~PD^i4!NWc$j;&1EbAkZJ~N1 zCYl7fnAWNUq;HhJ8=xub<+zO{c@9#wC)1vs*x<0b*2*%S`f89;YI*R4YB z7tc8Yn1Nv8drQfIfB#>#>k*G&sd%yTW2bjMlhQ=br5p2+OBZcZ~LsJLJ%z>WL6b zQPb`^EzhNt3jG&Hyb5~-+5P{^k6Gq)NX2(e`Q%Bpjg$Mo@jPBGZIbNw>2}YX~`NjH5lR4vO5i|gFfsE-n6-n8u{+u*G+nN26yDPyqjY?dCs)}tA7ooz3;bohusl)0OO z=%9A$)42ZqEp+b*H2W(urXU{TD(@xW_a6?a31UtD6|i(E1q68$W=je0YHnQybSpp&b`#VZxqFcxm283Ut?A8~g3RxI9x2_CZk@jIlH zB*`mKR%f9Nb^tCU>e0POpkr^$@C!MZQDo=*u(ZO!r4{{Z0BYM>S_Aj#Q*-cY=8sq& z(*%r!xDe6jdCa48#N97)CnW_H`)N64oGkk$9LAn&_RpfG{X6UK91 zqm2<fYkCE@EHq^I#L;~w1kCMRs0Uo#o}fc*wA)8a9Li1)8(nfg-6!2*N+JJYLIWYR~K zamZ>y-!!_8U2xj0@VojyO2Yq#qK~yI3M2wBWZI4>Sz{nu9uT@nmdE^QRdB&rdZdJplkmG>hUiRwdZsI0 z?T-i$;vwDqWY5w*!!2>%c~cCaVvSX5#&!L=!Gt9Jz-t1;Li|IZ@HzdZPr;uW^K}23 z4*V)oBW_GwAF36ln5e;Et)BXRpfxBi7&JWfM(=9t^cqBw_a_dt5Og>tA{w(DmiL}o zkk-uk+1lF;M)}j$38{f_O!?t!1&B3*qQGP^ytK`iE!c3%GV;0^Uq6Ef=`IEFcJp% zYOxmVv;D0b-s_(qoZDyBZhjWCm;*l~$pbk_vS4=vpT4MhDcs{_VEO09^JB&ys`e^c zKO+{l2IZubsSBbWFx^KaJru$Kj);7Vzw+(xTES(yga$(2(BQtayDk|r*I0Q@ z-1j12=)fPR4^PX!97KWO=(^8L=2P@I+ZaZ$LcAwbGTOj85AWQPgn6Crmn}#ZxHn*Szgm@6 zYOa_>UwIe>1&J>-S27;P4>T^$zn`x znRpah!of%eFkCgs>{hM0+Ms7YdO-@M9>q+D%-t&pJtG@1PQ~2G205nzX?^JQ0)bh= zxYIurztIJFo}$!MYUkWr`qVyq zb=F)g;R$u^DM+6mcEK6dlJRL?$$q*7cusJKSf^X?%IO&xRPe)nq3`cIuA`DX0yl?5 z9zv|`TOLv?FRT{)zH@BTh?el~ND46VHR5!ZfYoLeCzRL|iIQv=JvsNcgW7(~V zqFadSg0J>C<>&e1@bWp`~rO%oaVT)n{TlVf&{Y&)R;A^uCC{2}=I{lGL`9rmNx%_X<=7AeoW$Y=RZSxa9MK z#1~@Zcxi*6=XG(d1T0yP8(XTFqJ+h}yPMn>!^81mp;FN(zg8HjN=?p5srhQ43GAyo ziSn6Wb>4N5l+}dm%Dk;`opYzvOK>@-jT2E*xP$w=eyGNA`x52nz$ucs{Pr|QREXgfo+gI<(i^ZOy(NTV zvpI-Cl3ww%0@-^HJ}Eljh(hkbC&2U2XY4+Pb~&d)Yba>mYDcK30k-TEtb6*99z*Xg z#s67_&OZ9|>qK>EuTqp}BQY&*0%htW#$D*Tcs{5cCoW`>62MBn8p5Cw62F=_u`n;PSE7xIV-KdH;0@Ku#~KO2|j@Bkg6xC zemmdZa&jJT05H%+^KpOk@Cp7?kFn9yc;k+YbzbcAM%~S~P6swmM4-HaRfU|pkEEQ z#)bA%Lf+-tX=YT1jTbfEdys}IS$^xA*!wHy*KEmi&6NmbsK~{G)zhuuUwMBGOyZJx z!%}$VyX>plA%khHinWzh2_5*U4D@>?hlJu<*PsL!Bpo!cGTMKj_^MVkC1ax*eqEwfq>*1|x~YHYkB7L9KqYJs{!k*>nXh2mog*55QT5&?&x4fxl&&td)K=_a_4mCXZT` zl2-nme^A7wVrzyCC1ZvZ4>!8NyPt=NpB$zuJv zy>89JokL4QOzG@fFVG9y7ysd%DwAK^xAJs8thb?ZyZ*iE#|qJXn`wv`!KHux>G90M zsO$#}oyF_D@sceM%(e$8{%gkmfW4I754V4shbS0xN^1pD9OF_o<~HvN#k`z4TuceP z#>}_raYS8%=d_ao=yp?qUq@9Iww|dh+?8D1`u$Y5u@VuRv@Rh}P1DET{kizVqEO0j zV>d$nV?&DUlh@)=}LNwW~all z1Q&W54t)w6oi+YKuB0o{2m!cn8-5|`->cgN>q0Z#B}GhWi|H6VGMf!`EdtGP$f|YX znlqR><(QEzB>~1EL_#)hYyWIl=f)o(6EyF}`#r)Dn$a5+Etcz<(67e5l%!RnTC;eU zAWEbhTUu*5szK|ZglN;ol#@yyVkK7lh}1sL+@?rxLx2{iKQ)b&x-B7^I?8=Y25S$N zHFh(WYLeKF60Btcd9{wg?IHVO)0oUi@m3;#LKZg;zb5iWDzZEI-Z$DeT4)+E zxFj^o8r)->VaIsOiP3Xzv6fLyhLt$=pPmYb$Vf%D0dQP<2Yv5Umf0(cr4^V_WlBPk zTN$;T=D+=7)rK+qF8RX}=BZ)oomnTYV`N-`+A8mo7kmN?$W_lqZsaxKh!z*r^{0hz znV`xoDo8`qkrfDA$TM^dgi2n>OE$I%pgDo|g48S->T?Y@Kwr;vR6;L+LYFeR-o+qm#XH2NQ~)k`7fbSh?lDrbLtu)L3Kny{SJW-82y)eTVY<=Z*2nRjCD25 zcErEsu5UH=ESi+tA~PA3eFsHVq-EbiwUZxi^0(@vEf?B*?APTSI?cO<45s1q^k^z7 z&xy_bb^gs2MtOk65g!et;c|C>D25$|iEVFTjfCjPMsvfD;ddRUTv^{UHqu8SS#Nx` z(j`7qP}B?EV%7Cio+%vc*7oOi>l}7G>#^}xG7cim8OY43t3ZN1+>DxdUGf@rr8OS4 z0=bQQrh6nki3UqTk2j77@Xo?owOMo|vg62zaHb@+nBq}m{zGvQrrt&^h#@*`;5yp` z?_s3M8RgY%T2?`vax~EnHbRB!A4YDe2F(A7sl2E_o7{eh#dS)haWVf$&H~e>M>AvH zc>KPj8G7sk0^T{%;^QKw?hD-kAAJjA3XWKeHO0iy)>MwZ$ znYS8qMP#NIxhYM z#n`OuJJpdjM|(1$p+Y2TK=wf_hmZlvK43wZwo1RI5N@%bQQC0aPmWytB8I;+{WdU| zch{Y3zcBR+=PIaL5cPGbsM&)_+PyyOD(|pd1RJIncMo$)>qM@ar~yn z&CJ_fQ;B2fOc|nr$>O*I+3z-b%bXlXfz7rR+)1;W+iYu>T}Vr9g^g*<=T*{&ujP$u zt|%D3KuNbJDaT>&S&pJQYR+WHs#BE_;cW*7VQpvQ34#ToHjO)~d?&tT>JNCkcuUnm zqBFznj|W7UGh0* zOQlb#wBEFvQgw`YM4BNH)Sp>~e$9>tb(IxJ;2Gbwpv>CMJ&X0y~t z+=e736>H9--lBtd}(O$ zg;f$tiP3Vv(~_|oY0XS#kO6|-$M-ljP~&N{19|@M;uitu9tpnmBb|QpISHccI;p2; zLgX14syEt>*YR3&54bs8d?`cupu&N69mm6RpEJEUlSkt+4&)lFhfk@cZP2A#428U$ zl)I%MlhIa4k3i1hWz4pq8qx!Vym^|OsHoVWtOxJq_?mO(8-+!X z8``w#Ux@7MD%hI4zC~D>3CAZQ0wJvd_KgA#poA%FuZ;SBV+L*{wOjgvr&Hqadwcdk{-g>%xUC11 z8Kc2j@DE~rDHIxlGDm&?hK2ay9R-@QB-B{0EoCfBtPATi-7)1Kp+sknxncZ+*I9yt z{n|9z8wV@oT%nQqg*phf7Ca@5IikJbTLc4%7j_F?WVraY3(D{A*>G26EBgtRvy_@MY&K?W)>GCTfNmipWy)|N zCFY`=N-=wwKzj)f*Z+n~-HTzz)G#KB(7`P)yr(&%dtH$h!1Zfkzaw&tcOZ2?y^s}{ z^up81WwwwRB5ful(682Vkn9&KjuuTuEzy(`ldo_@vC)}qv(YzpHL@0XjWIg$w(SaJV6uR??j!3Ra1JO_%zm%cKs&9jSC6&BoIUlV#%2>)m=^~q%b zXj%G&P@6iD6FRLhV(IRI#H-%DVong>Gv)AR-opRQwY5s;_7!Xw^n^7*=I@#sGTy;c z4U*=1;YN78DGyRZ&~v48r>YryTUCow#f!}Z+n!=%S6yZtI^p!vcwPbm{L2D?tIs6}ZXq-T(-tO~D6rIEW z@iTmZDDekJogO)Td#VzGDv`H*byR^ZP5f;0R{&!I0v2-z^pC{(K1#*c2 zHK==*q!JZDADpQYG_AShSKWb{%$pZfdg^Az9D=H4$Cl~&6>|y$L$5f+WatJT;cpvE zC~c>5f!GwDiD#UzKPwA?wfjVjEDyou_SY$&5oTZLvS_G^86|Ymg2BgaIMlKT&QQ3q z4|YAzdZLiGKIGJ2%mjLZf1OGZ(+hXRFMOH&`8fN^oyES_21u zp{PKXl`hI*cV434v!8#)WL9=^vKl&M&LNAA@6cX-uZu) zl*@oBa`ke14eaZ)P&Mwaf$g{H$R@Nhx6qtsF2=g5W1_b`uA27ijQ63VGsA;&?B(ogsnk>z3eT9+4Ytq}jqgNv1IK|-sGJTHUWy-Wwhs*xYA>)6xe+Mp2rDoy{4+-YF4CgF z*<6xfPk-XS=#)mNsm@Y}_=Sr0np%<)TR9T_+aBC^zi*eB?s=c~jjkOiUGthftX_(+ z_|4(fm9Sa~`(JKJQex~|1QZdN&dyk}ENfOk&Kij!?Nj2##I^sFp}6}$A@K&nV&1Z) zGV;WZnS{)~Paci$$@AZ!M3oCs&ORqYog!7o6x!lIZOZ#h@biKk+fXIRCk()p;ME&g^$oF2V=ux_p1cN@%!og^rkT=ps0#;27WYse>xE)s z7wZ(G-J0eC%JD=2d_(Pbc!;x=Dyec+C{q>>Msq!&rL{Q8*nwh8 zK$pO+JW4eLacHAeut`*E&6SM17bSf!|0WkR((HJO+e}dm-Ve#9aF%A6lNYCRI^ol& zOJ9NPh>g>tbjY93B{Y^LO4y_ln<&TuY!*-&qVfzt>(zzc_h^?TkxxeJJaC_&p z&&B>CKNDs)%HhuSXiNTcByqr_zwE_95Nwq6btz=3hh%Hi$vIL`L=BBhReAd}R}Yn=znkvRx$mtv zIN#>2pQL=JE4?EyIQNWSy_PSLX8Ci_3ORq zpJ@S0)YlYmrPu=O#1(zetY~YyxKt4xzd)8mAGjzZQva46hm_-JE@fPyg1d}H628

}#)}Xc9@mHM)!c!a zo!NX}eg)@j^SAX>3ly$1pB;;RXS$@bMEv<>&;zdRVpr(4YoFxI&35s3!B zf3R%-=DAwV8y4K~#Z`k|4e5)vI#a&)Y%mIHsJB+tA#IIiAglS~;EYR@IJN9s&OwBH z-;^3~FD_=&pScA}P5Y3SR2Qw7ayKvYo5?q6Tu1R{!R7YXIHzqIS&4y-K0C= z-?i9bQGAK>zuYZ%AV9(NS7BhR+`s9M!r^J_Ex(#jAz#oAV8Lh(=qj{zSv z>H@I5j9d1TUD3)OVL92|ATb76)V+C)br~2Zph6W)GN~@VDrhg3gf0#h7C9P&8t``P zObf8?<*7uczqtd2f_Ce~h{Q>ip15<|tAPW#I3t{euIL}Xl&Kc|8@$~b!ijT5mQ&^n z$OkWRzYBkExO;mPvx7TqyiH)ejR-X0a1ZW;GVv$g1BC*8^XAV|;fwxoN9XQeDcni@ zy1ch~`5E#$vx~-Z{dPT?zP3jxAM?<(lU;UB@u|1(y9DH%$?(Mo5I<{jwgbWu20bxn zG5v*C8dpi?%U~H-<7nVL-e^=%P`@iR%MA=E;kEmnu^4_Dj?($9j#La)cyrOC$gdXY zeZk1UOD8P#K-B3p)Ezgrv@KsTe(HKgh9ZT(uNC&)asifvmwD;w2dsWCwj|bN$GO?# zx{O98`kUwtJ{(+wGxJ8I%fmz$lITB4cgE@D{$(@*%ta*O*vlJ zI9?e+s$5V;P+i3R*7%T7l~xbMEi+OUXxcli5jIT5+N{Fc$jVT2IcHq8jv7``=t|If!}8N%e7JCa>5rrhVAzq%J|H`o8%GQ;sB zBFPFTl`Pw9=|-Qf6tkE01?n0Kbn3H8Pus&NRJJNv{~F0wMy~uVN^u*&1M@Qq!(wn+ zyK%mbPWHV6qXM>kc{prD4IYe- zB&v_nyaZjHVv6f)%dJY=o`X|4ODQ3(8`qm$O02bMiY%B|0mk!xj=~Ebp}vC4*N0fT z#kiJpfC|z+bpms|79DKwc0xv|y@EVaX+&ji9KUdn@3f%=!0F}?QT1h+6VqSO;LQ>o zw$i)4kCSx&@N_(4WWry%kkLTc2i$CG^kzH2Xjt=h|B2>0Ph-`#lVrk-v*DyOT?^%8yZSlI?LSDMj5wR z_kgG^_5Ca98ynZLAqG`57bVvo2u_08F=ZVFo80(0^svz(bsDfS@Ct^j0IMTuvCU@k zY?+WhF^XJSREVlJovZkl{0XbZ=zC7WnZ@h;>on$7@x1|>_Hs+!Iy`MNrbv?L6a|&+ za1exIlO;CEyn%Vm^`H1KM5Mi_z`3}Wpr5QRky{_=5qxdse6~+;7d!*;n1zSXO7q7T z-#3PMphdES-erP=_Yg#z7N#KP5I(~>$dJCDVQ_?-TiQ$>aI~E1#l3Md|&SS{km1Q zJr^2a`2v$}8v^eukRJ@TVY2cLqYT&o#9ySS+qb=D=Db_{nd5%+W4ffekvlaXaQWU- z0hHTtRQSwFXo_HXEG{dnY6^%SM=prHi(8o$+cO|Umx4FQp`k5hT+`-E#EqVPU-~atQtVgHQEKi890+W$xoFNgRsXy& zZ}D?;!c>e$8Rzj+v$4De;d^mG=iof@Qq9GPdzCbBi0IyB&Wx&2cU?;-sa41fo%Eoq z4~}L>1Etf52wbWO4K+8MxZ4@_HHnV=3yHpx#WrPVv3$RQrpac*yhS>=5VodScMdG0Q(<=mJVv+2&dB+jWuO<57haeo_0>sN1eli3vGp|32gY0S>BAGK5lOmE+O9ZJAJFQ3sahTtp6hRLe zadIyb=9KB;Ln}5xdYB6|N#8#WaN8x}q5sB&x}M8>VDb(Mkc{IUkMG7CbW@6p6K3?| zBXzrbeQ{@Q=aFWU*%XDym6Ov?&BJyUqn1yv+t!007-b$dMt9X|E$;C>cg>tqnl0-t zYf>IE@3Vb4__J_BBY!mgWo{z&m2PD`bk;YvZYh)bvIa)cS@R@Y@$m{=Jimk$b_Jb5!7e0lx!r-5@Cbun7%NX@GVLLaD z&kHwmSaoVA>B4?e19tJhH!!K?pUqV*AeP?jib}7CICiBMO*{oJ)b6nEE*_c=TKe)H zHaqn-E>B;axg#yP<4P9I+tWg?H|K!S`qo$+a;xyl8Ru+?eAe7z(-|_lErCQ#eGsgX`{;=WM{S@rp8S;5-6OL!x`&4jz zg{(0GPZYdAZ!z(;8N?xm^#v7&W^LxkihCT<>s0i*15`8w6}6f7fQR7=SDZ#flhdL} z%dH=(eDM}ovSmGfmn_JWaPx3KI1p|%8ZcH);!V?9MJ%|4^#S-1$eJjOF5pJp<3NIO zi_Wn}w1?x6qU`Ws^oX*2;yibQL2M2{H(tw4prwSTA|f_cTL>FoVx zPU}vF`rZf5fylEvlPP$g9thQ?ke}NvRWl5m%xA(*i1K10m;EeE_d&q3!g5z>iAYuM zDsFa2nGK#VEFvS2yHW?N7>8Z{u#))SS%;J=Hbje=OfJ>JjRe&fViEr$x zO})_kx$;Y^N`qmDoRP zIibUj+|bQ!G}(L9<|C3WACkS5jX;TwSDUSZ!WzW^^TuVUFZii&LK?qOm;JYG2AS_6 ziaK*}3}#43uFWf`Is-=)fx-`t6v99aigBxIMnrjl#m34Yl{h~OY%27G6EhQrLvb>C4l>p9&M4o!UH-O^Z}QbCQM!I(e(8GKAo{sn1k# zlrydwGRo>}(~zY>zHw^1rDR&6Hr{FQWwH*``%-8d_IU?ZY1*B#^<`($3^NL<^>sEU zFA8}nSeS7C@F;Y;PF_&x@bSv@ylYPtY_wgw-f-P;f_rhPzz^Hm%6eb;(doHXzm95L z6uP|324R)3u%bq2ETq|{-+kfIepFr{r+>&gCrK%nd0@IZb?=O+s=7+%-`UDtaqhOr zE+`%-?BZv$d5;3|xNf774~qw;bS8YOE%6jz_WaDhfljJMy_cZ^qXwPHmaP}=r%XS> z#dkf-BOv}b&riSAsRjil*mX5=x>u6^5NwLUtceopCCCXIlTJF*=!%N4V*P_bqhB z%z~zQL}x-0i)T31x`)YyfKa`bMW{dJ3De=B-F4Yf^Ugs!B2~Zoc^oD1 z2u6u9pH!*HAm^qAwcqwB)=xAL1fx%;Krr1S)b=UxQ7Ut*Fk>n6v*e;e$hP%KH`Uyt z4xPwEumPWHEcO&SqoL6Z>onPanO!jY=BYfuK*irJO|Wt7(?fOZFFSnIDxbaUbb0P*3$ zP4o;+Pc3Zd&;u=BHqUE-E!7e00U{8J5-5da$|4qLEPFREn=(+m;~w|)QEyU`_*9Gm zOIyv^P(NWoLp3u?ITqDLOnVXHwCKd1AKGF)DzVNjWuHtY0Ios0?YTPH8!WgZpbH1Y zkRGQ1I!OpvpjkB4W!_3_#PuH9L@ta~;=?;x-}USke3F!7+GyZ@jqf_Ew8E4=zXiV{ z%MqP*Z=#k%wS?T+q#F+R5TyXV#%d=?tx&FFbH+8y0=GDq%&kRUFsBNSSPBiNsdwYd z2fMzUjca2B5^|P=K{x!6Z!seW%EHYvRpesb6PVrpRjDo3)iC{V(MttLOXrqTcOtf) z7BYmx|i6<|nJ9CH^rlDoHW|V`|hsB}Ks5=W8hU z)1ZZ$mH2t)hrePN12oN&B4vW#VNJ*g?9MY zY!F1|2d3;GS54_aO^Rc6$K@!LSa#UA1qWaui8Ex%gJ5gfZLje9yE*s?7mu_BBk1Wb zD_u~FIJ*(Tj`wLCjVjy~52Wd6qrya<*|0yO?O(fO?r&-Hel1C4u0D6C6gDRn6=m2< z-9dde&un!$(+N-swND95v;%9{AbvQ|DUG+Z+^!XyzUA=3?hIi32&qd9!lN?Jzt)OF z@fNlxUxw(-2uiw-=ub<;LhkXdfPNvbav%6eLVO`kCo=|W)7~`3_if0@Ls{q_l-Y3N z8UWzvp96aKnFVpDta#Npli$!DNgY*+PeW_+puB>il(H3Z6Q_Ce5XL+=@m3t=Go%^J z4$f<)88L!Z7M+l{`mOa^|Jqu+JB?yb1wVCIYJDEMMJ)|Oqka0rBow^baSA$)Q%-wN z5(+QfMSVQdNsdF?yxx4qV9&IcPUo$+3Xp4js^}kTc+%ATt^1XLu4~n}KgCgAKH+9) zT#*Y>Mm5%8TS0q_9S5ojE{U>BO`z4*giaW;tr+}hve+DHl9}Ij@SEkq?Ya$hwQQPl z_IC%DlYN3gZXQ=!ZeM^KRdd!44m5(t3X7my&h0gMN5u>ea9ZmN(KgIV1!?_T3d+1? z6KEWEdUy&R1)gk0rfsfrOvH6W9V+{h(=tYp5&@DK2~v)kquSGFd(V=E%PB{J27LA= z^ME~t9}OOfF-+*<@Nxw_5X`=d|Cy<~zr97j>m&9%zvW1C+KRPbMW^2t4hVZ>lN5%m zPSIQE)X)8YbiMgsQ&-#e%^-qc2?&TH1k_qo6hw*;AVH;;_OcZz3dj_ODr!`Q2r*uajB#a44NVH&r2uYX{B#;0hGl6&8>wccz&kyfEz$fgz*IMT~ z&hK%YTUhF7KheVc7eO7JJ08`AU7Fm6@JC!63(R@-vb~|m2AfFCk0V^s$htz%0`_nI ziQ!fCN}H_&686txxAMmIL_={xtFb6vmxY@iC&QT_LJ2at+$GOqoxRG+B-7V@@@akS z590@Ag$3n%PHnN-Ew##NBp@7^AG6Wq1}>+aozfJ>XvB?3N$IA|yu^tGXXZyxTRI_w z>@X%~P7V&f)A~y18xiS0z;KwP*NxQ22zOz{;z(l0LdI883G4t$$HN#yxJ2$j;LoH* zW4*0-R%Dc7c7!~ips>MUJ%Ot@>v~kmt=rR1UtK8u93pDGfk^NrQ2CEXId~~nxVG&1lt;TVE4MRSZ|@}1|-vEhlRw1ox3|Q8NLwY z7g}y08UhF(X4$pkSbwAWJwJ0-`dr@Hj1(Xe3KEDfh~7EAo1I=c2KAOT!;bk7;?^HO z0k#Li`qI^mHH$re+m?98uRWa)0dCydDs4b>g6*33O0lkU+D_h5gS+oq_&V%&ptFO< zx{kXve^PdIzEif|I4reF+m{kA{-oK}Y^$u-@eFC*ssZ9!^Ia*uzg67jgG1Q7S1>kt z@ccIS8O}XM+-U^&A)x#*sxu3#ABn8IH*C7Ml%}SwO5y8d^6bRz%=bXlqA1h5yNs<%XoJZae>_U z14P{iI6}ApR>T~XNP?AK>O#)17%vG7zTRCbZQ~;A*JIxLygIbnC?+aVC1lR$cJs-v zD<p7dcUzQjgHkT=So04RvH$EAvHPOb$Nzfv%5}Uan`SwxbB6eC-_voM7 zf%jwLkDbc~Nwd22sh-2Tc9>&KXR|RX(-h*t9V3?eg$)J|X+4_Lv~^0LAG)S?_B*4X z&7cbuIgkAfqVKpC>cgXt2tuP0_~@UClVLaZ$WCL13or;D?$VbI+g+`J^V3KJrfz;0 zGmg{LoMezjx<#ulv*@29CAW@hSXEuw z#Tu2`uCCzkdPq^C>&F+Y7%)S$5hRT+Hq?%8NESPXy)`>hLIL*!lPIhgOcE~jz5=>! znOa^3Jhzh^E=tTK=ExgUaiJ=kPd!n5mG$C80=}#GWcfsHHh;@e!HMJp);p8!IdLvd z7Irq~AvfIjM$JKU*5f)5JMxcExu;Vmcjr>}-Y*ZcA6T(pzDVFCNQama*AxmL-)4}k ziq+14T3^2~d7 z*8R`tCRZpDMUXCoKO$PTO=0{OK8?eM1IWrN9YhQf(ftYfmPkBnT%nvNl(?Y)N!>Ka zJjxu76^$f09)0S5*x_)+j3H(i)PE$%+)>c)ZqCgRO^Z?UikZ=fNq|qROb~Y~ZHt8S zMsIpU7u*wzC@hD|<0%bWU>^BvW;qwaUd-(M!UjzvSRoX0<2Wk>qb{Ts*(ldSI1vii98|{6WI*qtN?aH9jCvew0Q?l zx(-X*X)4%iTr2Ba{8jhHb_gNAuA4d1))fV|?}Z>&1|hMKEvzBGM6s>$3dz0!vq@Qv#o)%{Wi3UA%fucLicJCle*kC~l^OX0?p zcCT7oSct{v)N2P)Fih?+fYzC3v@+01ttGAO3rpi^mzUTQVp|K!pTS*^;Eh?4f4mlL zPRrG!5!r2}i3y6DKs>G zv*ndnNxkA2ZpvKZm^9(?TE-7XuoTJrSG3{mew;|w4VN9S-T4Zjf{5`e)&;S^u#&`7 zycf5cSXy}P31R}Wt9%;ywkZ)! zpUZYS!1pYC@H~iBzPb*g3^sR9m9U{^+>Vj#jOyxulLD80H&Sr>4aNvJ_F`X|3xaFH z36=sW-Qo|K8*}$?@1|zsqzy5`1`QzCQo1tg&?cwm3LG}?y9189VoxKt3=cw1_B_C} zwE~T#qH>s#_CsrYWzAIeQ3vgg5w_Mqm{>3Q6zt--*uGjgx&5V9U9sl=N26pBH*S0V zvBF^-zrbd%(cF%RmH&ZT3`Q7gbQ74fmHh9I6jo4mZ)BJYC&ELn5=cdS*l??EpQGy{ z#d&GrX?CDv2C>VI7zW2e&n;~hq`DPXng5qa0sfHS=a+e z#n|^i6%g~Vh~0Usn)4D3O=fEb-j&1@+z?9R6>r^wUXa`mJHCZY zzo?PD-W5ZW?V2-}I6S$g=Yk({*#|^VtON+0I&f*()E=9M3l=1frD%_K#l_X*B|SU`{4p|hUIY)@Y! z*7M?AW*b7ZT54dP;om1+c7s1op>{;Lq#w0}9c#tIOO6O+ zGS#(R!aViXu?^{jE6e>>b%>2~i|M)K{md{U0I0)ta}Nt${DF__^cJA!_DJtet@p{E zjM%WDSuc*p7Z0g4@CAppU_iQPF0C7sLtkJu#vb0eT3h5Nu9{p zaPFG1V@gbet1&fe6g>YuR%rQ=zkev`It$!h8gj~UwLvMPl--S7#4DO5qRwfax}UvC zW6Tj13SiYHxyCC|svp{w3*1DOi%VI!ZHaW*hR8QM42}OFwL0LMXnHxW)*g3cl@&IO zxK1fZjpdW&mtp8MOMI%@(Arkw+`aFt%Q~|1doO z_tx|^aKB?c%=_-}&%4_aqiPM83m$aa$@2ZE2JJZSse1?`V<=i}0LJy9Dt+Nw3>8CO zC8y7qKfuh!)P0KbRTgI6&h_r$lI+uxLC?uEnYrYX@OYejJ0W7}cx+5s0e9DT4EqIF z?X6hC>z(OGj1Is&P1UdqVc#iVH)mm{1&-kq0OMV;>4x>*3A-c%`@DoH8Myd%+sq0| zM~vTMXgvmiuBB%|PSi31?4rfTL;~-uzqF3rQ_G&O7yJHo&5gp;tvJT7P8d*88Y^9u zjj-<657`W`c`-i`8O>-0piSZYAh^1HAg-uR*BuRb%4vT4MUK_3?!aoTTCQHjdamEn z=tcZOr)I98TVy%zZ&4#$gm)OY9}Ix#pK0{T{Y8NOYHYH3JW8Lf&$5psQ2}}z7WyI# zQ`)b;pL-3FcOk!pDj#ejIz4&n6lM<76*hg#(=OdYs*b;nM)%x=0Ra(!zzq%^e|r0* zh3k?3jK#4D$^RKRql~U*pB}~GN$iOXkF1^rUCsvpC znw39_?(5vq)1b-1_EPY~Vr@xam}Js7+-!Q4w)A|YXIL5J4PG3#w2|Fk@n{6Co-$$qPz6=_+8C$S^5Z()m>U|j> zErypgFgCRf{hh7yWGDe3G^ZU>8}!jqY?5?2$H(cA$RyrK^`Z+xe&Q|CjQ0OECog{z7GGLrPgdT7m#t_6k!DM37PmuH(>z;H*W#HuYdT{7rR)zCG(bv{_(^1?l&G&ySgCp+s5at{!>+d z_c5)@3VzEZ_)>RBA-Sbx*N7#<>Y&MRFJQjmOEa z#V$`5(FKwy)+GBN7^zrqJ!d+f_Qj%&>iL@f#rbD5H^uGmcPQX6ApH%vJk-m4^`0(z zFf`Wf;fsd-v~|8+zhq2QlBHd7`S)CcB2S8yeQ4wm)4pM~E^SHiu1jCS$Vgop>E>m& z!5$4ei(wEi5v8R#X#9w@I~y50hP+5_d8+yrpd#-Dwe>@3#{V=;fgQe-jv>|~GwTB8 z?qkaL{-@q%gf-B4tafdMy|%JR7%rT;Co|J4RaeF~1s%(FufrhWBYW26ZHS**K9lrc zNsDk9B&-pjOT-O_P~mZNYjZna3wRM`Gev*(hI$5$4M)w@Q~p2EfG!?m(EpGlM&j#RwD8V;kP zan;{db=|9wb@|9NHWPP0;z=SHAho4V*J7~PAe;G7=TzJ)^97w-Mb&D*o8EKKXt(Cf z22uD8Rb_Hm+ucDCEm_m0m2%hYCI1i;4UCV#p{NabYG0o9-q7Z@*G<(GUPaJbf-0Aw za(7l{`>V3~Y6@ISIor?Jygax$xj(7)yuG7qE*??X|NOw=t3U9ff{6F&*P~*=M}nOW z<-7P;nyU&*=sAzdohS3Ebau`PRHW(*5sjyfL1$fYh!xv-)2>O8{MO{yffGvJ~H1vBSiU03)Sv_|SQb$~Q4di~8P)0UeKvMSu#e$xS6d{0=TX-W+xEwjB`-8Cq>6D5a&%KNp{M z%|#>DMP0@K&D5(RWXE9HTE}`%VZEtgE%Z$HHOxRnZ9T6d%E&kCC`qlbGBM8>59uCl z-jUEd%pZ4g%}XhwrA18^I2bUvXY?k1qg2=)AC14)4XLhP?~+T%51%hEa`Bp*Fp@5i zDHW~ef{bN-9LIMtmsa&F+`TtLMCf!|pG)JMfO2X+_1>BhuC~<<=>A}_pAolCY`b39 z2PYmACD5JgmkaNBNArX^rNp&KP}BKFOr_F@;e)VvF?ughhG-syj#1%PC#j(r#Qov+s+ zwb1XXWf_HYy1u(NJ)bTSQqa~x!Ziw>Muv$DMg8LU8651)D zM))e@?eFBl_etIbSw3<)7Im?O&i5l(UT>HHxUW5-*AW7%q7-cMbynPIhl6$_0oDih(SoeFGb!ilvBa{e?8>xw^t zrJEVsI(6Bor;I!oRtoPmx~`zA{&HM=zgF-%y5V`L)RH3&n~ctGiH|5x2%5H0T&jK4 zw#ZtHyyXe}XLG*C{5^SIN5GiX9~EU3W`AxjJ5j(k(b2r%C0P!|2(4|Zo^&xJu(*Z%X}8}8ZixeKA%C!uVzaa7TGxsF zJ0?L?d7W_>OiUZp4)>FVuk>kr^sYO6C}!` z{fWoN?mI@s;*5O79!=(!f7Vk<47m2x*b{YF+5E1ckIlOsch@?Xcqj9)lfvO`c(M^+ zw<&v&xNAaKKjl37KnL_W=JvkH|3pr!-wFTP8TG$cTg^#ViTO_x_SMrfgJ#-B6)aBn?+iR7+?#r$*h`9bxSL8eMTydnmW`<8Nb{f1K~Qa+H&vWdm4{M!52zSUq^lu!JUYysF2yXY8KVWAg%~+A`TG{>!0v9 zNLr9IN7MAf4nglmI@pJxgMTTOjwcyr(d2gxh2Eu#-9ne_i7=(6d<+sP133Av)^!@gW zC5Xe91UrW;x8}_e{ntVKgpzG6FM`agtnbSpc0t@e`x{i zZsNp#`#DF+#i!HrjI=o-gQ&UfV>UCmHA|+uQiu4h! zLD={u$96JG(tkH$<(-+C^e>yq*meMkPRGgwEA}xLizff!2Z5tB(vA#^6Wv}1T1-{h z|Ds_vOdB3+mF-$r0x2~_(a!~e5-0TFqlYTQXq<=Y^bP)z0c?4QsV1kOnvm z1q%1vaM2!58P(@tXU5PwLoj71xa4*Pxz4&E0n3l80qr2<|N5A_32c1Lh`zd-1J0S< zv_JQcQn`f!xxdruYE@w?-}EB9 zhoLVnK0{G696UjHGJ5a1JSj31c0dkCb?^VoWmZ)JN``R2oly#EGZz8c^>TER)_5rP z^@rmfxCKzvqX%pw+C*dn-c%vBUB2}^nqatE??QP0e@eB_AY1FBV@`ef*FRg{p{I(r z&j@0tC%Zk@`^{a?{R=nueO)OQsadWSe6_ym=tn!wa(;_$p-hjOVb@e#fyBY zZ=kMySS61k89O~1M><-MnS8(Q1)1iw-ccNa$sB$~&n{W0-W(j=SsX2`U7ID7BC6_} zMCxBP*5f9Gb-qDw^YzgR!>JDs)(-p%XAb*j-G|NPW5v&&&x98CyI=W%WhTX@7I*Y& z@UK#8A#=C-@E_JH+0gOE1SoD!gDr-w9L%hLNmFiCZ5=T_UdaA5-I#@ueE->6kF#~9 z*5~@Ilgy@d`eBTwYz7LVs>wMC``t6*q95ZiCWs?AbVLhVv1{%f!eI5-wggUTKvAh5 zpKO{o-?fV~-wTbTJUdcPX0PV$nfUjt00AJR%_q9|H;a@!FVIh_aNG@hzgpbFYs9>4 zsLV2P7H<>h`=P-dq+$J~g}m)OxLr3}GP~VevFoSKWP9uCsefnT+IYYTp|toq z+4@d30-Z;Y9BH$B!yK0k`n% zEjP#K9iDWo{1vCe%at6zg>MH@E!BF#5Ch^SQmI{Sz424GVHynD>b4(OVKxhxx(Ha; z9yb-Pg3`r)7`3uXQ!@Im_;ISA|NT~`aW=*s)q$an2n;0-h+kN;PoPbSMrR>svDKV8WtEgmWwekxs3Uk zD2LTTMSy|;OPs$ojWn!uNq*K@V=Pk`&@;)!9gHR1y5vlMkBG^I2MIj+^q73zv{z!# zy9gw!ef?ymS5gw!FjbEd4%KU*T?dg!)km({T z#S#yfvASdAS)zH3)DiWR%B0X9)2meB3oM_&lH3C{ zURarI2B+!*lLBh-XnI5Sqf&3#Ql87pdtOiEj@cuFF$%pU`E))V2ff+szRy0sJ*i9k zXWC_~Uw3uiK6zKOm0NYE(?9)B}>Wct$*v&NDw7V1&yTr;shmVhDtgUY*<3@XD z{*WI?=fOAEq9phi;J3*ydZxE{9l~6kN0mwM&+n>{KIbx);9p*@ZQtu!&Q2RMJ9_E_ zy2nXY%zA1WiEWmiF5EL{8wyxCk%hp83LxzJnj!b7U$(;t+s%Xjr$43k-ox z&9hkD`JHKc{8ZUt2v%wZqvY`le%hawSwW3wcptX!@B9UxrT+5{H{uut(z5j6@i}_v ziXdZu{5(cgf_McG@!_&t-RhrLn%%fmfjYV)9U89#=gVcu@>3PJ8rRg2GapwenqbMHC7lLLErkahh#U1{iA<3FkPdV!87L^%){ z>5uOYggTn>M@VBaOAiux!+Q?Re7`a7@JfYkNUeB~fqOwvo+V+jv-j`aZPRXY$29m@ z5gL;Y%52e1>A~2*fXIjB+w{aQ(DZtGrI(O;4h-*zBSN~x%se9AoM05`&wRt_Jd$7!~EnTlhhDx5&jD;Jl)JrV+p34o`P*pz|a`E4j z8(0w8h1u`A-*sOGm#3PV!)l}U8~>r^UK|)V6H4?QUBa4+liMX*k2^Fpx~16*mcNZU zX;`wF4Chd8Qc(ta{cY~Lz`1&mdrBr=>~j!B9ulCWmD>j0A{yuPbC{bNciudS&YL_w zr=W#@Y=6--n&vP?stSo!ey?KQmE}|2J1ewVX;A4s%!NYS{l{+FtHn~h%?x$*@Ag{u zkyW6w_ZGQ{4;r(M&;>DT}|ffPbd zxfJ^S0JZK%>_>}h_tPL3&u#38&Xwo==qP^WJj~dBYHia)#>0WQ0Xt_l;2nv!2-#?z zccc~(>zwxy6qi?D4j?)(O@Efw80j|P^`yCnupqE^uba4YS{c!4rBfZ^j4q^*{TABXt&N`=a_9=~bx@8aLm1DjCIdX776NV^ZsmIiY`!mJnS2v9?!eX%)TsK?41hl?|eGE{U$%7 z7HuAa1w3Rqkc@l<5Ocq_1XiD6S52|-^rATE==jCRLBypb@$~Bp<_|jwxW!R^OW4}R zFTK~`nNljhoxYVDxX~l$IRB^wETtaD<}(AD){R`c&y-21IDA{3XT1NaHc1xyq=1w{<<*TXYTBKFh%ze@r-r z`i5^`+OjaBhdy>SCsn;90o3_u1pO-zq7998hj5mTU&lC0a95*i(b6Vli>j+aOsX=@ zWd|4Q29zG%&R^xK|E(i{oe<;(dYu@0&4gr#oYHFmS5L>;oDotUK|khtmt%GXG40SM zF`Ps2V%+>#MQ%odo@@NifcTac-B}@~-@n_sI@`PJEe^_ne{HcKdhRRo)R#KSK^Q%k zyurxruP%bL7X7*J;T751K6tD{97wVuG^H+Sr6IJL7r1X!*zauo3jDT-F^hzbD`PCW z;R=iK7cK8k_dSB_RcHK~1FNbyeZU9KrELCRyC5u%D2N?Y zW_s`{jH@}#2SR;=sku*O!fjq*4d*sGy245!ei$n+XF^vt_(h3~!zHR8L0UMFz;f+X zhfW?B^^H^?^XMfNiAlJ(EvzG~Llfgm%}Q5?@fAsK$SjB$dQ0|eREpbIK@AdW?+8*= z=PW{XBFbmnzAQ+Uv?vpzW$(?J&0$foth5FX_>s#iA4XTh<3%WewTP0uFkOFBSMHT- zllo%l$A|lyZi7aM*O02I7j!dqolBk>H}$h%)3(OjnUGpZQ^?jDiizrb#5078sEMG} zsUTN+jU#ROIBof!a%IQ2(g6kxh@ityrnteD8>f(K`9xJdLh+#l^eG6;1DgIepRsw! zg5OF#_*_q~-$KTB@isrGmg~R00t&8mGUv;U{4#!Na#OHuizv>Vv<92gQ{mYy$vi0P z|1s;0yTze(3B$7A%5Akfrr590AYqjIURsLLpIMu?_m3PuS>lb!?iY>28oJV+^&U#3 zw)x(!aa#?*f*glyFyRnoMr<^Y7cxUs%G*$iRHz^^;siI{0g1==)X8B91CfKn4uW9q zM$X<>^9XYUNxY?OXZfvG82uOqXf7lDRm*P~2MLPf2J#^VO#j+wObb?4?+GGe^dvg&?6khs!AYkcmEK% zQ~B49N@*_;+E=n~jiN8TWj%)yUj|g0Ff<_GLudBd`5i9$6m(mbyq}T%z+1MbEy@r9 zn!RoeY^c+oq@;?GJtm`{i+gTia2O(5`xkzaqLIA2FHEef{+86`@K7Q?C<;;7lG0*w zm5-H?tPiq6=sN9mP{S?qjHfd{Ey}S!BOKsArr&fP;?sT_gsCJgRHrAqQ6(La%@41P z%?9z!dip+*@wRNJz>Diwnjwhl^B{k>E_HdEA=Yc8#LxXQPHSh|SgaGE99eZ299I-q zqK~k`V%`K-v$ebWE*w!FDN>^yw{gj7(kuw%Bpe%T=)UsVF@Iby&eEFY@{8p(aAEb= zU?-`w%VxW?TaRs*v9!?C+uIT1j(_u+Fs9&8KJ$b@(hL50;%PGw8L>dpUjjdk~fH%>=tDR44K-) zjO*{-477bvUx-i?(pervwc}g3%i%9wnj7*=kt?7V6ZQ{d-WBpkYi#D(>wFUm9Dq<0 zQQE-uzMUxNg$%cmTkkOXl2xK{E@sMZD(D^E=^WlPC0^F}4kf96*&-3SJ< zN^V+)uCOJS1n?xl(;7gM9g371$xW^R94^Lr7D^L|9{h;6L?f+-kn+l(%ebEa=!x(g zAk_eQUS54_MxHr@y29%YB1VW(CF>HnZ#k$R)hfk>(e8*_;ioTkFgVg9`@cd7%^lgj6dk(Lkbcaaj|qE`eK6+-2Jh!qGCDorHNSZF5qKD?}rU(U*|zwWGK| z6*dzcdxEq=`hK8LzZq7Seq~J)ZuDZoH_y|nWtfzB8BLGATTVsFR0SD`%I-LcX9TFN zhTb5r`>lkJISr;Nv}*NQn{j;L!?87eN%;=NHol5p=d^Y^#?i;(5W6SL=+2|Mtb7QD zlSJCl4(k@5(mQA!9NtqFAZdJPfppwBi}^9xhoOA6Wr*!L!^IsCoSGXDC-W$6N%Ot- z&56ZSebOTZ~c3kT&gkE!OQnwy)n>{QYLri{v`4SOq_MZqe!C}bLU$jv;q#6Sl zUOs@m_{9K;2j@`6@kS;K6g?4Vp!@a~%Jjb$uhiunTon9yrc)AagXSI*$33}D&xd@IOim8dQ@Mw{91b#B1I~B%pGn=N7H8qyQK~8o!Bvc@^r)I8J*0-Yc-lU zc)G@uyIQxMRYCo)mT3P!S|V$HaXWIKoSw-YANAQMwsZdWvNFk`6sFiT-QWE(w;~G` z-V&j>F%9;AzDtP)@qz<)JH3Eo_7>kh+|w46xAVlD^1}Lwrv}d+8X*^bINknQ?0*oa8Tr0+RUWx~ZrKXhb23Mh6HV_3w6sI^_GlXp9Nm zLX=@WnWg)C(0KyE&W%3mVBXMgOV`6BJH|Y~D!VGuL{$|D0L6rWH#7$puTBXrytZO6 zW}C=V-DpiHul6#HRX43Y&s0V4_al=RA>23Zx7?+#NTRA`+#A?-nsOKo8TinoW_{R( zd6bLkI%vC)w@CAtH&)8PCdNHTTMMyqk_hSA&>^T*2boCB|H8I|=FJN|yv1xCq>pdVeb zN9W9hR0m17){u<2E2gBiB@tC)0q@+AlCuh0WC>)kxOEteY3p75GgfIawICiXH$Joo z&RVLy^AX0z3hd`r^nsJ@3qNrII90%u%d(Y%HSK6!jF5b2wt~-hS7F#v`WSTO zppmbd!~CCzIY}8E%k-r=&izK=p_2Gb>{gz`GLiVBsBvv9gPD&S?fp!C6$2O1faBww z?7AH_M~}j<=>bZKV4}&KnEe|X6by=-;G~3ayDPen^PSDNfIfGmJ~*rCC1QsrmNmg^O%_fS9652kZ(<%ej2}hNZ|L76N}$(t-#VQK#6eoU(p7(@uH0Er=tpBx^h2 z=f8K9;_Ad{B}M+Fxk0(8?oBeCpie%Td3AUKOYHtPn7oGjWxzWkNluUH9f` zYvGuPc?+*l4XL1BiBVuQ&206jlQD?t2W1JMgz0R>ThtYY(uxY63r@imllc)C)Q@OZ zE3Z(d=HYCqc@G5^Hs6Q5xEsQBa*YUMI!pQD>b1EumP5f0*FW)&w|F4uq%jeHI#pmY zevH~fwWhFD1KA`mQK9c5<2>kXN|;P%l8(5cWCLp-)u1?kMPW?-f=k3|N5`D$%Eq9# znD@=vg~p7!GTOS^x!e@nk3f;&4HO9-0Y4B%?ui6|`V*J8>#LH0J6jeG|HcoXMAfB$ zE@Z^tL+Ln%qH3HTR;gdx;FSy_nbr1^-#0zM$s@%SUoSqT&`KQBeh%~X`r0%%#hJA} zE10_~H=3~d7awoq;S%WLJQsJdUq6OD_pXIPFS^I@0h%-=g8OL9_0;Km2`oD#?&QPb zKg^F8xnnWmzOwM~`>BzGZT6EP$$vX8i=N!(`e2cFl}yx?ITi~`uw1y{Ba^^gxh8MK zP^WX1DYYqFcg85?%}(PALw|Uu=p*r&Tf9>b?jVrqV}7i4;-_~F3|T`j7mynk(;R>{ zqd`vgK)~&Ql4j$_NKi{_cJRZKTXqKNq71K^8^55zGLKhLJ%U(U7Lpl6#2aOOQgkrM zoqJFGy3)Xa7xjF16IJV$L@#v1T&G34u7E7m$^l^XBy-bjZZvT}rDd)559!FG6loC# z>Capof4SMh!%K|~EZlZ?Cp%4`hGa@3Zh?nFP#-qTjs#qbj{dlXgVRF`r#y4{?G%oE zTHPn*XiNKb#Ga}n1oLO_fz*pep0~KQDn%IGDDQy8f|hdJmzI^XS08Uxv|@G&{_d`7 zEOFOktD{0-6>b+#yn{0zd++@oc{pU8s+VWDzoV@kAp_JW;a6Y8W z_hdtRP*iO5g6r;4b&17>j9M)r#rma*8dl_db8QCK;W>6U1=wI(G*K@-$1tBSJtvSI zm|Zop_aIlKBBirj869poN{+32y`SGAW)DZ((-xPkA1xuqzb@hXh=ldXwIzK#W(R4S z!o86ul-GU2SEBrxI{WE(Gugn0!7U2XOHBQ_)J&q>7Q%BL0ftU=(?RH<~-GjYzfI4G*~PZQAw-}tebc_8Vy0{=wuxYTZzo0uj) zsUqPSJT*QxM>n?t3?*X`Q`SAtxORyI`gB}AS~unqyI=gl*pGad{Q`o+e0qR@&a5uJ zHWSW=@S;a~;R!6~71xP=Lli%F5=hCafif+-rJirfoS6;9=RvUq<=LT`4j zh0c2*q5^=xKVwn<7V2}H^N25&Sm`W{to?6>kv#y|DlKGA0W-;c?K^Lfn*El*H=xzi z6i#zmks&BLxy-F5x87Yw&vB2fL%d+Lu@v#Vibdi4txAO8LBi*V^HrrBpQP4=3zv=N zMX-fPaTXVGucFIy>f%@sH_m(^ zzuS`!{MLCdbe-pwXh^m4rx@AvHK|~$M^e-lL(Z#jG1xN!?^t&yT7w&?@azwtX=2qi z`tz)@?4WDS8_b)Q3in)PdgWerL>6uPXD@zDVSF>GN`_VsY%L1}3&Mu_9*93FM{=To zN5FtGb)JAn5E1$RCGAI8%a9*igpL={h$Tel!aU5*9Um+GPz z)b`K>RMfs|{v_>5Mo)A%qLdB&tLZ#Z7&W-U{KRJ0I0;1)_I<=;DAtG)uQqQ?L`XTe z4I|8~N0tiFY~aV?(xZE#10yYDJR9Nbdr6h&?fJNubX6I|dS2F^wzikPS^SSM?8yJj z5B7P-LIr*&p+mC|x)0jgW0(BwkAYrKoEi0;LnLwceuYw${}ZcLqfNU)W)+>emHcO4 zp!dtB$>GTtyawiQL}ZOO5Ynn{-V?; z3+rXDIPu_fPnF`HA9g>vs~$#G)=+V`URSD*7AyJXL>t{_yIO zG9bW-13m}-8JrB=_dqGwSt1>^f7xZ)XRJD`AB!(&*f25nAcga_E9f}0{X+hA(%BPW zgC`K&l6-&yZnhPG*U1!nq^=S>1*HjL^M6V3kn!TPq-4~Ik`M5PbN=hDV$4M0N`pC+ z^UNniR8`s(hZ+*%X!Z&&${Yc@f}Tn$SP0}+oDl;PT0LhKF2Sv%< z%G*}pf{yN!2af&q+MY~to!yD-8#JsQVOQG(x={W zoBhQ15pD8nZJPPhW8dNIw$Fy7Yi4$iILe;q9?feh7mq~pJ*Ou>CN3>d;GDZxMaxZP zElYDD%_y0~QBaof`E?wQ=`&;{#zZZLl_m@KBrXyY2 zY*mVx3OjGsHn*}Copg!L`}^<%=*#&_U z9M7+m6u;1p?O!!{4)nXP(pHtN+R{n6x9t*B{NOV)T+>^qhM-YM7SpP&@50{a9uTutoyyg&&i!I`I#V}uICyZu@7i``v?*{oImVxc` zX34yp!P3+g)E9^s)0sS5Eb!?Sr6dR&SRZZ8)+ofak~F7b7s&$clI7Bwyl3oqr=uk#*( z+asG{=iM$T4~eJK9FX+-`9v`Mhhj>e9l3IN)S2U#Wx#KV!p0THJc4HGETyK`CRP9U z^i|yRoGPL;$(N>p#Kg2zAENGtyOPt4=NdAdo3J7hBmtGOLhm0mP(I4}C_dHqOE)Tp zH%ib>8d8%uagjS~oUY&?V?mP=w$Eksa2FP-YNx-x{Kd<(yM}G#>h}6}QDY2`;R7TP zV`Gjk1u!BS5=xd7P!PJ=z@%AsFD!r`1i1~FXS_m=J zku`cZ#a&i3zRl~<9Rfub_uLTjjaF2G!z7=eH19qQfGM19HM7SGi2 zMyHE@!FbE>*5FlC8O1Q?=TsY@LY zp3z=m!iHK(Vyu);5+w37g!O7PL3p0Tg^KUXd_*yN+4dDN31TU|&5_4#DOt_xP6iDZ zD;8w7W4AE#f+`HWq4v{i)tD47Ty6t`_WhCtWsC#D5r^m+ei4tRt^`i##L3g0tWNpJ z+U1Rfll>lyw%i@bB-LN(;3w16QiiE_&(upggu+R9y=Tk9^$OGcqcP%ze^|~LjePpT z^j}p7JFEG37(I*7>BXLQ>|5>mq<>dIkn&yo|H%pja`Aj=NvYFJ@e6alc8+}%k%JU3 zwtiJ^pAhaJBtl_Q0jdQ5>ccyRJ^gMqnw zOWlQ-;uK}J+ggHyNulYNH;x(o65kixaMk&j@{d98VGZB5qkE&Y9#6_=?-xp%vSBtS zkvJtHDdQmF&=V<w^4+WoqpCN({jmGV1_@P$|--{~vAd;*j*&|Nm=dl$O+5X-3## z%bJyXJ7=VTt+npm9jv=8%}`WUR+K2r5D*WU*}+3wE6o!f?sB^m&>1Om(lif=P_w{P zKvO|OKv52g=*=Uf1jOd_JCo?TJ7dmplY7Q*lEG zTpeFzP!(8)sXWW#+JLuYdUlFOIRH3O&hTbp6%Km6YAT*%G9E_{lG{5|MDa?0ps66U z-F7PyZrfv^XP|Li&}+S%#=ckgAm9ViQwJ2#^95OFNNN7Ete9ZF8hJItc$(`oQ!c^Y zQn&cV@e<7=v>^Di1}BxIpW=NYTW(XTu%F=dyxeaHn#@`KKZCZ8J!O+WuqkiQ-Tj#M zhR6BEu?WEUA&HcSs^Y`dk3B228g4ATv~Cc@1Bo(Ewi&` zIdp|@*zT(trC0J}KgT%^+;nOASz{Rxdy%tp$pMDV1?pxf1>H<{?~Fck4U+FF`9Re zqC=?s&mB}y_KKxOZZk9&XxV}aLHCBzK_9MfqFXc3=1hZUYl_}8RsX#}y)$)tJYa%J zO&Gjfe=5YvK}>bVKB)^=DOWgYUa)#*NrX_5DQNjcFu zl`iLRl1TX4fST*l&Vh4hlbK%~+cuLNeim%n0>pD%kfJ9d474%`_62 z3%#&#basL^(?LvmTbA-RFx7$sLVEvMpB3UF0*+=H!=3WFnJ@WEH9zR~rZi^W3Q1>k zsqs2aUZcibKBdWGrA!%@H$G_jJ|hI#PygP;=dzWYJ(=YM0_wW-)RMlMNa>#%?PM{ph)Dhdv zYswVMr2)#G!YRpBV`aX7(?Gj>vbo*f(&?;@J<;x0IyQOqlJRZqY2GyOc>nT=cIh6c ze>jzK?3t`=r}EcDFG@YuKTr=?PrE(`=*yU&ar|V{ ze0OOzC~CjbSVgpnUWO0v{4$q+*MJWuY& zTnwYDfAp4eVbhFPI{^C=S={FB-VE#>J8&o;9o+Mxf?KKIfh#TcpK5%aMcN86UU)^6 zLnBoY+3Y8RlaYZti+MftpI>D;RFnG49f51@XBTljVeC#LmY*#B#bnz7oV-Ev9PFP2 zUl4K~#{TYmcl+O`pJT4vFj6)?_@u=x!ejPU@CG@=GBh<}(uUJ6vo=4`8oRARb*f@W z?nZ#?d0-c2TOUfx6>%&_`&tW%b4{{PCP(@g5KMAALs0u0G*;X zNvIWBaudfsRZC?oDKkaT45gZ7A`8I2Xb!YZ%uYLfmw7|tu+%yGRcNyF{J_e)06?;F zBpMQbiCj>qOK-cwjIy7Y^qd`_1)ZkP_Ib?ou^zCD8)i&1a)m{dI-NJ0@M_K|=fUbU zvNP^Bz|FJnHQspbl1DVl$w(I#1DxHKz*_`E&h#VsjJ7F82g1PdL}F&LzLg&aD17q? zFyk-hj5r(t&x*{4J2P4l@iM0AnRyM!`4XG&D~%J84n<09uCiCYQ;Q&^QZZ+8624Z7 z^||ORg#mrsj_NGPR$t3aG%az|(KmHbJQzQ!lH2*F>AE7SC-v=|)Lzp|cF=bH$XKOI zwSM@dRhFdT*NU683*clXWTcFzLXhcZ znU|5Ff>a^lQ*7cAA02p{Es}MK$#qzfI5s8K*m=*^zVI2h8>t80?YdipZ5|27QQe3t z7h0jfD4prbXs~z5;}(aXh7Sxb-{Z4k1hqO@eM}Keh3uHE zvwxQiq#HkR7W`S9)6m80_xS1N=P|Z zRR${ud}{ronzfRoamh*v@JYQxRHdAUS`l@Ca>Q4l?pG}wO*hc1z_1ah!V-LKQ;?10 z;1IpzsoB<`Oa|b{vJ5&Oben*=E>=9>eUgeaht9r5^9V^I`IY&%HysS_tD@Q7v$40k zq1QHC?A(x>RP7y-a~as^u=~{Egc8E2{qzilxaOpH z^b$TT-}2<#wrqcG4@51jk@j<`X}t2YyrI%e>Ip7kS`w49pAWN$W+biGuMWx;2|Qin zD9=^WDb{_D>g|Ds2QMK=>$PLNysbdM#Phz{ahn4**=(z64#uQcP7%-Vtjzf7hjH)O zLBX_0V0N92F^orD#G#=6D{76O;?9mwyj1mOj@trGAG(4rK}wUx$qU~=##{g}V}oWF zbXgvdNo^2BQXf4r$XwyVv5EW?yWF5RntFLyhcv#pVfVLHU<+oj*K!qf+Z%gO?Y|I@ zs-lc`g^RsI2cDh6k@4tT6l7mJ<&F2LfsugJgnN;d1K!IS&CAIIKoThOpNyNF{n5PF zHAR~4Jal$(yhoQuHyF5(T~5S^s*xRsK-ohJ}v& z_PDO~Vb|&?$4>x#uOuQD$SA5KwfG;Qp};{g3zw4scOJ6F$Kn?7WjlISooaoNkpzwh zClZVR>Cir;@-&#d;V&yXB%6ON$Pi2c@6rcfznm^g9mgG6^X6CT^Ze8;YDnb)u*!++ zbWT57+-*|Kbfc)2=SPu@`LlwT%}pl~4Rb!XNDn zNO0V2`6YlrsXx>?#j99wXTK2p(E&MjX?${f6G^&JlGw^#NdrsYM%qCb?K1Na5da!tWAABQlwcK>ieVh* za*uYv+k;>_o^L&BnKx1IUW76|<62(byvjUD6!8n%43ux7+d<`m->uDDTfuCwn;7-G zIJkBNH0{y{cmVkTk6+yka$03s9dPkJXr_wFUJ$eV&VHBZ%+V)%eEJ&3Hh=Oa8*;Fs zWADx{<#K*_1M1KokJGZ%=i6t?ZmZb~g13C~X4wx;JIPNxnMniTBYSd78*d%Pg_wR4 z8#WBxT3&V&aGJ4^$al9M@YH#1L9A7&(q=*(GN$#Sh!Wd`e#X;C&Of21ZOLDSB=&skw zxR9*{Pa;yCjqkh(@~*ing+2HyFbcdq2C?k=9>_Z7;WII_)3n)f-Dn)yVi%b;cEj!M zPxjD9#;wYALP#58=+wTk3wd=|wBzzO`+Se5&Ubs`g04SM!drHyarEe}zR-#zPiwH< zptj{FB~479;~}H0ktL;+^)C5|Jn%%khOx6GMA&-h-dY2h8!3HUZRG|uQvbFOs(|?F zsuRt`-m0jr#wPFOTEOGO_0BYkXx&gOXK{l-iMh|I}uWfz(D0xa9^&B!RhKQWi$lNMI zV7IYPhPghmrLc1|)77AxIy=N;ctOb6Z%)W})_7=nCTQKtO$FrV->XJo?-^L{*c#AEzMf^Eh&g}LiBJsV$46wZ9^7wyJ;$I z{Re_K*Zc=3Tvtwcb%teFGIqQD;!Qrh*Mod`51RJqu!aO zHx)Y=qi|A8?%LzpND6v-unC5c_LkZuNXPOQO-|?|eVV(jyA!IwBx4LjVNuSsOnzJB zrk=VL1|oYWKhbvJ-}Zp#$qd%iZ$~Y%__LBRSMSqdU>Dx#B%;n?K+`?9Et_&)0T%e% zkDExTDYATj(N$xKp^iJR6MKqEISJhE&Y13l_n@x@cxIDuKc7Nx8J`4y{hpcIV++u( z4q8m9^VLOvRSZilT$a#$CwJ|hifI+_8o7czZ0^oa0ss4q>=n4apO*OT0dMI!cz+mh zGVd9m__AXCwWOF&^4#vONpC{X?HiYV+xUqatfg|rgB6LRynu;b_scK#+7HiEO#iYr zi$Ahr-DY6V*buiOd^B_3_dseNz98h#KBVK%a8v^<>TK%KK0c5r%er2L(>W7#SFw{< zL!|vXDker3ac&1BTji-S0|QGP2CR!OoBX12MkC?&mjXDwf5s=Ycl?6PFex|Rs!yO! zy@=Ji)~Txen@W2}UmL<(`Y5Sg4qvYgaLEHS@KL(t=*69fY163grv>U3-Hep{Q0DsP?}z?c?DnL~ zaLL{@#Okkt!ps0FF2*%X=l!>Zk;>6pqUlRi1xVfZja|1x?&rmBB-8HF8q7XiDA{w(jCTmmwZ9-H3D;!<~7#;1QQSVQ>62M zi?kEKD9frCk6D8-oQv1M$)6pp$1~VR&^|iErPm?3)JKC0`N+l#5YqdPOJuLSvmNXo zV}_8SX~Mxb4y8YC7+KnX2@j5H3=EMB`etPe^?5gTidjD;fC)?bn<_@f`abz+#g#hs zdM)yAXW{41IQbCjJjIOk&f6E=f?rO4{mNhC1*!;;Iy!wpll)plU3$1jW*A#kqqfue z-!*F&agw(Kh8qEIMR)wIP&dofMYkFAJX{pu-JD*2e8dC>H@?Q`v{`9v%-_Si=|(E8 zSe@T&)pel)U`c7IKXwIS6V}WicLB#m*iIgyct+yuIzkpFFZzo}fZWgG*a_ z7TWys2x9%37rEPaR``I-LAR!_1LWP0B`c1^Q$GNYIG~OJ3LZmmL5Hi5vZ;DTlaW^o08z_`K4}hRnn4V~3uPQRl8UHa9SEJY}PBOtzQu?BfMokyZvB6d@ur zV9GQUX&{YoaNPnx02#F;WZItpc}HS8%gmaRJYuF`hZjlNlZ@lVVWzkK-S>dWDX+Us zjnNz{g^Y|e7rQHs72Z)uQD0Y{`x_yvF&5X4Z()}n*#=SS(<+Vp{;plQFm~r3UO?cE zGx`?jrh}Bx(&DU0z#g*xPUSErBGe~zX+aUH+%msWNe;f#0bSmxQ6&T3Q$k47Q(?f| z}D6{TB45e3LTshgB)m zF)$0773H{Utt7)m!OnWX4os>O`Ik5FC5kD$?sN~aU#!&Z5~>R%;hOBlk+>-3-~Z)7~Z2_Jo|2XWsCCwMsPk2#P%xp%HBj?TeHXcYuY~skEmWZ~(RzHz_c^)tw;mrvn!QVM@Bq?F) zG8}T}KHs;c1HB#MB{6DqxNa(f((K}+!+0@rQ z@|5-$&I;Ylu|O9Iua*y_aR;b(TUwf*NpU6q=FuVt2`j|Z(gUnXuGUA$ zzvi5*d{7an6ckNR9_vUZ5!WKYqG1Qici{GP4tcWbfFLAbaP2%{2XNK5<{Z_Lm6bWN z`WdkuXfL=|KB7aQ8g}&K=Z{OG0WKeW#O4_8QtVL11Dgek4zJW~o<@ZSNIwHfEirMx zZvgCs+u*hh+W3(admU*tC7_t<+E``$$T~6k&27pL;DIo&fj&+i9&nw;g}~Zx;r5RY z%F?-%D)B@*wKhvx7r~o8TBfi##R6AD8$V`_J_PS1|6~sa2wQrs%icE=*S$R4h}#BO zE{dK3p7JUKjRv+SHT%J2AOJW@Fy|Aiai<>*6ah`6wF{)-7~2TJ`rdTq;k8nA%Pr}t zHT?58po4%FRz2qRJVzGce3K8HZ=MQXc!tKR;s43AtGbnE2+wBaQ;05QEbV;=34ftj z@?$J8R+(zO0nQF|)rV){;`EW@yQNI;5a;(@!m?dCyFN%NShl>8eEUdH>)6^)J1ASx$PcqbF0h5T?!>2_9y; zgLYT$CeyZn{uPgn01aVgz*&9z*wv2_%v~N{0~0&SV-c3O&dQgkFVB@(Ial>NrIopE zimLZ_9F@=D=&$77X!uZ&-5_an8K{x+S9e|CqCG7QCcCX!ohXm((s^vnxX@b*C}m`n zojt6|6(0J^rtA!a)h`yRPVA&@=lfy}$F6F;A^1neCf7z3sAlDJT#B*4n$4QYMdw<) zvI?;5nF+^nBfu>jls|2MMWojE7}BvVa~~&fV|0Y2t|4Dd6c?__0{Z{)LwkB=%#yYM z+_dd7TJ6TzsV;#UWMUYpbcHlbK`h|5>KqC*&|= z)cEZ!ArEzZXZDX*9Z9+tkPB86SK?J2(!fI_g>^jHB+&7OQ76g@mQCD}4(;ev${tED zd5dQZoQo27^`nUq1i;XX=%D_Xr6{hrIE|(FD0pozaEmL-*pX}l0^RHlZih5A- z>J<8+--%+jwYW%HeE{I6z!-O4x$5Ve3bsoiH{G6ag5Fs7x%(X`fvN5q^mYkpNZtN% z}`0=&#p}(5((PMW* zpkZY=dXQ4HXyBbx#2B}q2~xW&wKaa*F0Bg4@|TEZiCtx;`CijOD0JODPm(3(-Stcn zbWUz!d#b_!@Vf}!_A!ou1*{MLqZ5^S>|lGBQQZ^HkQR(_!jV^F;qbZsQAP-3oa1nm zHa*|)hJjP7#mO&MUr>n6PZ8Eln^QdcvIB|)(Cx80&e_L0jr+g`7E!RJ4MC}q)L4~^~(^3XkVQ67$VMbGX zeX}Xt&KKWQkb2|&`pu^BzuNF3%qaBc9xU zvwLO$USuk~K&fWD^5JcO%+lOgtmdrr z31CWl2JFU_mtJ@C_Mv@n;21)rHUjdVPuA&NU39a(WEZ%vBct2ln-+(66RZ_ij9b9Y zJ;$PRU@E|9&1z!VD(LgJ6JK#;dfX zZOnZ_v>wx0e0rfjrFR?XWrTE{ss9RD5)QyQjMmx3mt=E%KKG4d`Vw`E^x2| zB=g{_!$W`w1I*=HIPba?&Pte?{;|Y;EwM?bl&4BJ0skvproXbdO`v{-nEKOa(5H-6 zMQ;pRXz(f+=ne2JU*|o`n*MO9^0XtRP<`W=Kzigm>K1G7IS-NMMWmUv!Z$~(egqm5 zwX2VLf)(syNnx`qK9ll9G&AyFk2sC>T#mBuSU0PCZ_2oEb&(W13)lwL$2zQm#3ck- zQKIA6tp-!%cELjfC00H;-)b2AAVUGw?nc0?sE4UxK*VTIn|6j#h!6ls`kH`b)1I3WT+h&ss<u4l3a=v9xWl|S9`wX3E*e0TFv)pE*OpVo#1pJ9NwsT$v%Jt?BHS6P0hZ&AWz zjJYZ2#?_B=Gl5v_)tyne94m{@N^xRn*rF4X*IvlH1S(O>giv-t-tzHR@;2Z0TO7c zikPChGWX&o!{$UR-MfHDMZ!;{_|LTUS>DXbDfkyTiPn+N zYJx`Q2aOw-mV2ZBEGP#fufJ|~s{qfS4)diiYww~k3_t00YzSsl8NM4hMLdM<1!JPV zg({6R7dmZZiMafr7fDEGj0RlIN-JQuhWfmDryn;^h}A0#cpFDT>pZoF%Z#neF~(-G zTU1;&R?{)ss`e+LpJC77IiDeX37z<{*L$!CN&2M)=%ys+^VY31zs_Ml>w&H>JRUwe z0duoihWl@;M!lLF1X=fCz3yR@gSzN5axy7LE&aQ<*k;2OQqzIZD=D8RZn>3srb;@1qPM$YlKUkLI7Yq3jrBUyNvFTXgk#G)eyy^s z-FPW+zv&P(h492(&(zc>o3`x{_|}yw$%7IdYej^|US#ql9q<*5c5@OPVT>HZvvn7b zN8ojo#QT=fuGVAT%miz=X5GIu6t-nD1 zy4Rk$n?WV#Gz|a)mSXIxJ$5Fz9-D%tqLostw`bL~{{lcTeP41^`m zVUXuDQ+C_n)B8?%VCoQN!v4v~!|E&e9JUB$+aYWUjw+}JaJ^<#G!8oGjrJ+7?qwG# zAP+2f+|2k28kWU65{cDL4N2WWfVA$In_|XT?ZM3X@X|9JRej7=UA2a}=o}inOt@zH zFFW@+k2Iv{PLHMz>`56Y*507iFKb;2o^+R%!(fb~707<;?o)WmlEu1p z*ZO(!pMu`q5#~}Jwt-coh2)w9H&gHyaY5EeFd5Uy{*nqNDdD5ecyk za?1uBkK1Ix{+zEWhWzBMcCL~ffhSwF8WGOJ zDjLT0lxq5tBkw`ZjB9U@EWIYmKfEuUqE{Z+E7oQdtd;o7_K?i&i?A(%$DnZ;2V!kX zvpki*s&OTY5(id|yN~SdA)mpLmq=JhAP<4u-Bu$FE}k?^eF_M1GqqsrbMV$Nb2~0& zJn)?}eBBUIedjrM^@=tp0-z3otzbFf80qZ(TTxPA{LX~+9_U*vxGS^P#F|K)h>os(JCd1v9^TN!KH+)Qre$k`+ryl1=5eou^vfg#_{%nRVqJe^A#h&n9m0! zE{a2fz2U$ErSYxveJ}izjUOG3<@)R8`2kX{bRHR(W}DQf`%9+%I;A^I(Mah$5wE)a z7SQ`oF;)h!w0i}lEuVKs;vX?Gyf3k#Lo*XaH28#IYA!%8EfBI58UU3?iR6bEHWP4ef`A_eUz=( z>8Gr++1cVd$Y%F`yO%`my0Fqp=%vp~VOVW>T3h6Y2iomp24px=7&va62N-V5vkYTskzyWLJXXq>Hcq|5_ zoYgdRY}+^oFIbMDj8^~q)ek^o$twqFC|_I_5r=gGk=&#dzwTm z_`;6kecSFx1+m9){$2%je}&((`{I&=CxVubUpc$S0+Ux~ZSL$7K^MQ}x)PrCYqHSb^hq@tTvS4QL%r! zVodWfbKb2<8UN=OKj3UyJvS6K$6oTChY>r&+Fl_kPKlmAs+s1u-tc2~>_|3-l>T

axGCWd+6UOS7?vrCSa<{Bq_v6#_LEt5L(Q9>IPS;UQkyzRNGe5laG=- zZ=NC*U~^EDb#v>{-Z$vA)7})We|_#>kGCW4e928IJzo;8dI?`%Jz@FuJkOM%t%owK zM;D$0C6g5zfS&+t6}h1Rx9oxwAUA|u62U&)se)cmK6Ch2oba4C(IYqE-*!1*GpG6l zV44E6HWXKTkCI2br2x=d|3$xbOEwGHBbgVY+?aZ0V>yJxa9}Dp99G?kfAnu7UQ{WJ z)ZTY^LpWB%h5)T5gmKi*4xh%;053lolQwm$NP3U15bp#|SF!kwismWTT)q)2WEEfc z3gs(Uk`;sQgc647I5=~?*+$p!0+NLD_UCvlMYbh)ZdrAybCnK?0M|2?HXr#~?7N$V zF$y@bggo8y5kK8fqAbD`Axx-d&XxCbMulsT2aprted}UHK?z_4%s7^|g~@{6RSrDE z_5v%C~gU-Y-r+^)7bWZxnL-8Lp5_jb(mdM$njPQMlxk_m`&TC^@`VGO<(|xZNED6|mBW&|jYh?Zs6Sq% zDjS%++7wSQb(w>Rw~@JLTkye0D|-*`>XA47=PtSOZGJ$%DBVH?%a~(LK<)xz$r)(@ zJfe(sm!&Ls)C{8JB_$-}a-~^&A3pejLu9NeE)O5;!K{Z6f*C>hI@rN$&SsuMxLXZ~ zuR9V;s`KDnWUxy`HN2uJ97*80knpEzlcTS*5~iq!9HMhOcRgCMkkF{kzPfn|@$gVI z40OKJu%eq*9c6+hw?u6B#{azeie*p|ue?St!f5>59 zd8)#j<`a;6=E`O=_}2er+1yY~OQzHIn?AKIOwK}qep?rtXzpZqHv6|aywTPJ&HqZV zt8XO5Lnf$B@qA{vV6uTZq{c<`kZPpY_tvAvuDL(t6;&8_;#hrR#**ZQh)|G0g*LDF=oP9_U~A~*Vd$xCE7=fU7S z#0yrX(O1+{z-@Yaoj}(Yn+mz!gZ`hfBP>_lxK)hN(uUBTO3qvE=l2R!i65X3uQQUS zvwq~4_faReq^`Q7SUF;=ZbB1nt;9XO9D=FH+xy???8M19MOrbS~qZU0C|v8CfPr0$-YqHD*bD`0rD+!;G) z5+wgk9+_6?9W(J2N%8#&bGT4udC^GvMf6h|O_w@nh#VO+yenMhLr;s~X5p}F6YUkb z0H`e8s^vS9Ge7xF58ptm(#e1DsH7#Yjk`X=`&${Ef+VDg z{oUWe2@ovN(FO`eI2|E`P7SUiD3m!FQX{-yeA*hM+=0(N2K+b3*@Ze~#S_>O^c}gI zrOv%MWtl^z#xmp-zkvD7jkdnW^KDQG(fsKQCaG-hnC=J6A0KtXec*1ZnXgQ}RSzbQ zdi`_@m26gK-vGj&7@vQYi=AgWr>f3NQBC;9iH-3H<{_8IBtSa_7`8roDRpgpBnd0K zA8XpVZ>hRadoO5OdBJ}G-JLP1jmS;Gq`}(_&*%!QS1saZidlcmdzNv)5?@0x&d5}pJlk_&s?E-jcBaz@tTah%9Z?3E$W)1TiW$FZN_vo*D?UE88PJl z?sTqcX6*h$EN!8J2BXs{Ugf?j)Jz2Pb(wEDVV$_xpLnG1xJLX|rKpMbzD+Xi<3YBN zC@F_BW;gv1(&3pDgFxRn)O)yJ5m%iepz&R2TSNJc}GR$KcC%f10FeR3a*sE9Q#^-#8N{KG4{Y;Qme7CA}6nhXUN! z*EKofna!?lGH{?#2=-tgv3(WCMw2RCS>t+EZHMsH8{^lIuIySTkPhk+@;bH_&>l3L?&YZKN$DR8!R;UjYT8)#D0HtCC=l7hDe zPIaJwIuTfwmq2-(HBQRGSG03Nm6{CZU(5f8yQ1Cuy|U54>d2Xh5+iE|rs-CvuFLf7_ImI!tv#S~qhY}X8c zqSRfcqf4Gt{445x*sw*U3dSj8^er8!PMZI{xoak5YvOI%G6Eeq->6HgXb{WE)vkjX z49uF!ne#q`PEI1ATzute@|~GZm1oSp*!`_ZFag`6!0oxT;ny*p{F~56sa>-z&%I~$ z-l?iGKwQLpP0Ryqjf#lLIo0`kbWVL@r716Ax<_p7nG&X0s#7gjl0VC!IJwc1^{o#T zMa*Ztfp7e&%m&&L?Nd`A;-SS%N|sZSCxMO_0{rwzLpzu64@t{0)y=^J3UDq0%Mu&DA~V>#5%reZz3ACKB@;8o_ z>BwaF`kABI%rN4j~Z}q!mnF#KSqy z^CdqVqgX3t^L7NB*lJ?lZ7nNQW)il*vxzya_m~MJiN7>S{hKG7jV9>S(NG#<$_V7b z6cBt(xpZBjeoW&>GKVv=04wsn_ng=ST{^X5@O4?dPRVJ0Ee6DreihJ8u#34MWdSq{0?HRcmxWI$p&)qp!#SRrgTSuctc6J5* zwi~Pf2P5i0PTR)m-ydG8lV?{wNFas9X!q}3oV@Q%lljl~Wi1+cOq*ykSd-m!?$`IA z`}O5m#+W2SD}~*@2_*=Wa%n>lf;ypTv$?Bdv}*wSauH?azjmQ&Z6zr=W9af0bPN@N3f#uzVl(Pcr#B_dx+6^?RA?q_^h7XYT!5R$W!FH%<-hiW*ki;bTm zJB}*Uo225MW|D7hY%g35cri@Z4dJQ8t#rZ!)JJZb+%9yOTtieOB#ra^m0d2TjWr9J zBWB@1PZ5w27l?MXCt0CCDo+TLRPh(ajgG)PP6HUWsHD4N&^Jw89&uQEU&8ggg+A}9 zx8^CORx+pb*nJ~xr2+27~hpF%*9VAOD5{*Nt1%X&>=Y(hji3E~ z+a5}+W&*qnfX&TAH|DUAD8Q_=>B#nxu{A3;Kt``@cmtpIdR%_WEyC+3^~%<$LehI3eYk zoa6DMUJ_BjZB}d>{3LM8s zscBT8E~J=O*}>}M#yWQ_&o|gAY*)WPjQ3S}_5&3g+dHO?EgdklIHGs&M3tflb1AiT zR!){ynuG~Q=5zeZeIIy-eyX*uk2_;Lvvuu>IK80U_U^@}Q3_1gR0jhPnV*BQ;BYsm zf-4`Bzh3*@qsROV|D(rJudF*=YS1S7e!|ciTZjA)>-@b=qaJc$h3Z10CAPwaS0*m7 z6idGg2vbnyIgFi5yw2Du=1)hizDMn|u-g;z)uqD;p~rGF{D%W{9axOKp98eDLje#V zp95l25kxGjS!OM3QqMfMfK_oGI<=s=dv%DTr3$d(gOjc~fe(_TEyEKIv(c(y)#P>Axp!=V=RY?518pQX50E)PuoJ*}F zEJ-E^9V?YPci;Or^*{lte68F+oobh$&shZkgA(#Pi0!Xkml6cGtrJ%P>oJ84k}jZ^ zoWloW?bSD8M;@AOl-DcSPV-#OIWAqF(IB_a;~u=QZ&`g>n|p37E28^Q0+2m^QkU!G zc9GH`*Ia)AA8NSoD&a-lQsijaR(IW6aNbx~=_T~}RMkzA>UV05o9(@~F&7jg=t&I#vQciVO!Roo66Pl=h zX+iCSl7L3&EA=%1XKhN(dJhjp3GL^vPW=q$5fj<`NOC%s3oE~N@4m}~Uku}wtB?bZ zF07as^3k((+RmZ#3`3rm+N<$deoS>2n*uju-LwU_sB!t zTXCd#)4~UCKb_nlcYsFUwkw)N5x_Db>x9yC${t2HrU_Aql-hS-M6BCYh}K zojH_JjC@ye%o^Sv-V6*NNGeo>>LbiCtz5Vh9z?%~?N`Vif`@_E&X!+ey6pg;2|L^2dDsNa?qO6J%PiKycXPb8@`*M8>&zIdjuD|6qPx}P~wLKgB zv!+()bXyTv>H-gEBazzzy%u@ zu6kM1#66+XDyTcSpfw}S;(q{~gqm|Ywd}S?U6DtXt-fawSdt+FJsUFMNKVKI9a~pq z*$N6o?rG+NJoJ+jU8^SIz)G0{q9tm7#$r^wUsPCYD-SnINv^b&4ZZq<<4XhN4f|ar zyIwd*3P7g_qO1Da1!Ekjn7ry?$tD3MUs23wJHat#d`aksEP2-=lP{n*Bl1r0Paa?- z0_J}XfDd!n-ZW8iOv)FZHb=5jjK4mPC7dS-?)m**T%y-~@;^ujorNs3QldkC&gjJFQ)lTz>D(h4j&NlKP#DwSWJ|!V5RwL_4`H;Au?ZTX)@A z7gk03avZPy(s6ME%PXe$Q79psjg*kj?$5%?E_+NRw!;cl@@Scq`+!qlx08?K+BbHSYXvoi7BJ& zXyTrS0Io|g-O?1G2p`Aqz@ag9Zj-A3 zT|=FE)B6OA^KiL5IB1`*;Ttz%j1l9u5V?E8b`c!51<*vlZpd!PDHu)b2%Wy6+6l{i z=sz$hxXE05?celnXZ~;WZpS^0-~F%D0IMNqqWQ3CturN59X@yKyS8_63Z=$%a$rIb z2M7VU^gBb=PY`43<^6f5gq|I?t9hBNpfrsZf;@)SIh7H>pJOlh>irn0#H5h8NfE{T z**Vu{95-ldymyzx{@MSSYOtMBIpdps+7VwuU8aHU`-K(ChZ$@PJWrJzio}v#G8j3CDbK-56!bq$%TE`Egt>en}Oeh zlxuP_Lh&VvH5cIK6KDGePo-zE9w*w-+(?v~T<+FuA*KHtt1~|Q=-RNa39F^Th5a3S z6nr5t8r-Io7c~otIC;O{$ltGpAJS&$dh3A0Z!Ra-Zs1zcyya^9OU$+LE z19N$OAw0WX@pR-4y7XiOCJjN*{hoSmEWHMl?>m5;68|H6b71{O-xFNEwCv4*h4x0i2=RqR1H22CBspeO0lo0uNM zrF`50fiJ8oACaI<7}t(rtdnzXVnA$K{b?!C#He`EP`*}FADYY0x>Fer-kbdHAI^FR z7+7(+r9xJF_e0c{^#hFjWRuIt!}xl|yz%=2^)hcoaS8^1!khZ$aMWksE&2V_4|v;> zkpXiq)SP@(I577qtdb=2Z#p^rkNz4fx|))U^CoIuY|AZ?_vEnq<>*yoQwRjTdj z94H#!@$MfqrOb`6epAH4UfQj1a$shmFnDwuCKFWNBl*<3dAoJs8K|kmnM7|02p};h z@2aKwWjET$j8ikYIB(L5e4*~Y!|y03oPn;L%Cw(ROe&G|Ri)|y_733w$zvYGjcCIw zCeGqafs@)-?q_tk|IkbPb$U9e7WZy3mLIwcm4j}k!qLGD68#+qCDQuG%K(7vROuVZ z@eo8OT5u5&duu)r0 z5J6wqQ1;~`NipDe2R_!3zF4~fJ4!d8{Wdh&8TPQzWo&dv@CHj>7cdf z{+v^kJX9Gx&33U((77i3{#(wj|Ffh}mXYlc2h9cgd|=ocXu;eV;k&spg8B5^7~#qV z;}1G{I`!x8b=O1LMn~gN*GnH=;nd*Ch&FdsSWF$2bx!-VhU%0wQPsrPA7cVN_xJY& zCnkrx7M*MQYNB@3+EXkpZM^IsS&D77H=Y)SkC!-@M_8yAk(s;}Vu-PbXLF_(o9-pV zlvIN&T%(Y6Nm~<@*~|SDNmQncUD+C-nt5c~iq7b$lvdkxBc*!u59xo|c^>F)mix`^ zKHIX~AnU-2T@{d+V1~6Ao8Dt2DP4&PF%w5xo{hOL^=ssPHaVqn`0xurfk9pqxjI4m z)_scp^bPIg+-PdIy}Kc*pMicOQjYd&Rd@)tYI4o?-aQm@W0X@#737B^wC;CeT-zXd#-q@=pbIo ze>W(gJ~@hB+7XT^xmhX$`2xv1wRwM}igSptsT_Obr&6!#6efLWDr~B+?LB2a%_=9t z(b9iA;YQ!y>2{!JdGQJ0U4*(?g#Z3Qmzh2Pt6fCJ z-4t@bBq>(E4Fp)hfQ6+8^iKVn(p-6$R~xDxEDAV)-0DlWR{XI&0v!wci?4`4GZ;#~ z%@3lZz)={n+4w_Qf$xbt{7)~)E&si>qORbbwE|)BWG*~SkB@`%*O&cy7{wFFsv-SA zekk3l)kjqE27<;bR}edmc%7*4k%af-;Yd?B8tU%|+Zs=eE`9ueXKKp+Hb|5$Bk*Fmk!E zs8SN33~w5|bzKTU_yfcE;;KP({&kj*bw~4_M0V)~r{90WLC9#;+Wuhmx}kc{5VgHmh;OtI zI+%2@_P`t=jNIbxP(F+pk=jU8beQ#txhnh%r!n@s)6y&K!%F%JAg?V8i6KhQ-^Won zidG_15=BYn;9yNT?WN%s*&ycxrIn<_@K$0pgYuGwQ*_GaGOm`z4?69H5AU6N5=1eM z$9bqvcyF(Q?iG@$+o#TRVbP1#T&fU2dp@SjL*Yo`DXi=|zi!FBYj_$;xF6p4hEm0{1|9STB0m)zz=@!AhJLI z6Ty5q`%%EbFWB2ERtk@-S-71As*UfHrTcqp8W#pKyv8d@TQ3zZGCFQKCG~kc^vqIFs50qu(B( zWpTN;m`@~~rI!0QO5oO72B`{2&OI~L|RwktV zX7hfy^#7sk-Q$uz+duHkl9nlLtt^l0+p}3KB_H#Yh?Oh1r=>NY_51z)?`1dl{kgCE zy586O{l3lwu3J~X?~Bil{`0Nm`!AGo?CJ~jNScLyzOahqp+5iOb@oO?ykR&vdOJ^H zJwG2uSKgf-&{Q>FSW^{D=P)Bc6sF=ee%y3P9|1ZE&_zA+w$Ix~jfBM$=%dz(%I&Gx zXrdtD)-`!YUm;#ja0jU;<$}Y+ z<7d3SH$OrJ+}J!WG%N46xu<{(zNWSZeA4kXTtk9|@;d+h7x3(4yHRab9!^w%CM)l> zGUIVcOzqRUvKj2f!EmW<_;d~%XP1-#CDt#bBLgDEH^UjHRu*J!iOqB+1aRQntSl!}oQCgwEBd2>Nb@R@ZSzdIOC-Vz z5a{Z8Q?lau2Tk;&%XGlwj2Gkhe0oUkQ5GMNF-BSQUqL(`x{P)lXq)Qs8PF8Iout+F zd>VHBC-Csjp42xW-3Y$#58b5k#!FACY4crRzQDOFiC${*gK%LLiH;xF9iG|)$f+3u z<@ld^5TH-6eRFE|-)4sATNVy}XFlVzuBdGK9(YWdYIlIGJv0P8`=!g(E9hn*82#=P zbYZ|&xD)?(#bMQ`&qeU?_=tYJy-$bK3O{a+Y@z5C)#_&h12?giZuijR6#0)HBBnH0 zW}T)FSz^wGp_k*-k~y2{%j+BvzW$>xX^Fn?B!Y(8KP7?$Zv0EYzG#4<{HtabyzLsXwF z4K^+-7CQI!4sLTHuwRyi973tS1FYg2vKtYuz(9A=;qj2A!EBtdqi3~YW%(_CV{J_2 z8V}ma7W`O!Zv3XZ!pHL{Hdl$vNWO=U{>?AZ&+=`Jz5jr;fNgvJ<+B0rIu81I8%r=Y zf@a$b+fsA&+P8CshRDd5%^>aL+bHUj=AvnP6fj(~NzkI7o5B}}gl#LU{RX_uzOHQ_UH$WCO)6>@(39Iw1 zcdLCBnhS`~;KAmh%E{)&m~nOU`ug{)|4V%}M2Q=k+`g2O!t~PXml9N@=RM=0-Nz^{ z*nqH>Zy?44+ZQkM=DMbWEIE{uH&T?tpvK@=J~>T_4?F||b2fWW#1evUP^H`^K6bvh zrHO9B?p?f2USWi@ljP5T5*&!Mm_j5qPfRKwUX`8viD^~la)~Vt@9nHM+bgJd+hCNN z6Q6bf@_e*siH2zs9&yPazI#u&I+9>x54(E72sP_BV(CU?f#_ zyx-}j2n$eF#nCjgw$Cwfx(a72gX`)NcWtrzgJCsI;3-5nBCgC_U~V%!{{(&q1%wpH z1!JY^+>4yA?Hdjb?M%^KfypKOdgT@4QS|*rR%d|-##^`#7kJi%++a6>1UKS!*WA?! zlVQ$v2TwS4Tes+WxgD-;ZkMr|`y)s=3Oltsbsm_DxMk-0^VgS^?-A8Bl1gh@Spest z@$~7jHaZvTmH?Sln8XsE(#|>H2(Ynum{Ly?{B>W6tsJW`h})=5k9ICLe0Y9tBdsjr z7Ag)zzta3zQ3pa_T57rfjES4jJ{$L1=zMI>Ahw$=Q~GR)RIgK1r- zLdU|&P`!=}j^t^|;*LsUUJ`Y-1y;kO`UDEP>RVDLLmT%B28b!|R+B!S@@A9igbO$a zar5csv0lUiB1xRXtJ;W$d=Xn4e$L^XuTk;i|I0eKER$-ET)!n0IqI6_Y*j=&)MiaN z3Gn_l>G@Xrt2enmM??unlxWlX-kE!`cEpy$VrdWu6@xfKhZ$mhW0f7jhPZ~Z<4Ezh z$@qSd)6|}+GFkZC3}%paE`GjCQTM1Wnf}M;J8kN1RZwu>>aM$0q18u=(Wm|J?_ECg zO7{TArl@B+SUhK(M#VWEo=H?y$j%rMX4Q3P=A5J#AXO! zEr=tHv$PE2A6vc@6Q%oV{#!qM_3Ql%B@h38%xLONf)ff7BBE9M9V1qjXPb?U#@oea zJL8VYvb$+T_^7_!{AlG9O=-&8_B&IKu~PBlbv_&!7Q(< zjH6NdS;;@-U1RbdkYei%UoPIOkn5-g`;>ECfPKyiKh+Y(jP4ZnFA5`_N$Giu<@9AA0PE^#WWG{O!uxjvzgE^ zfuzrzog36P(zi4D_`E!wH|a|wMhXvrEdb@=4HwZ|AT!LrG3>@(Rx%LSAEtsP*E=NY zg6$gwrqr<73xC9QDE3|Co;GbPC@LtlDuk(GjOpgWlfvZrs&~;~i$*y*m+Y`OG05j; z0zO15T{Dv?S|EbRyr$W8XAi@#Ll`Pc>d!;R5_nzm^EG*jkXCGmYn;VV^3pMf#5opd z!rC&Lh*?))&ACY{1&4s}_~*JWJNG~DLs3R&Wd~q@nk5EEhxY98Jx@n0$ zuffA};z=4(JZPoAg@ynWb}fi@MLpymi7@Q!$&T|G6+bW@#eZwrkW{NQU6>b??q#Lu zB5HjLFN^1jAgi~^R`!Brz>5TY@pE_ORlePNz-;LZ^E_w@2_5-3uBqv! z%wEW>YyMsyGkrY5SIK)m>vai3qigQ+qec@l^O|ex5^^79t!P8+lQn!-Kp9vBZip16 zhsR8ja)}jLiLsN>@B*eSf&NTw7a^t0Rnuyqv2Nq{ed~N;;H(fe&)f?}Cen#!!lMPK zdrz8ertMi27r^yCii8vTJnMc6Z0@q_fRVCvOan?D8;>a}oUUgZrGdt>}oGodTPWpqM2 z`$Sf#e^IWzo4?<`IrCeXVIAH?#bfb=J)-4pTw7hRB@EwB#yoCtn^83k+?0i24CX>D zNDD+KD7Fg!$vK3w1u%&A;`a!=MJIBElZeiO_;4=ujPJ=9<^9e`>E-p*%zFHfnWvf+ z?XSZku^ni-bvx!BDkX7lwA3Ay;IK$Uzzi@eToTQcP?sC=_G_Ysa`ah)<}dgH^D{+h z7-aOkiPZxr$YSK1i+?$dFeD`2YcbU0>6y@bI(Z>xJbSJhXXy&~5Bj2S%7wtb;&bXO}O>c`0j7c#Zvx|KT>uA_Gik>(}`VW@~Cy+yWM< zD@>#>r?w8j4xaRqCo`CGfWsAJYA_$2>eme(R$!bwi}H9Vj=L@9=)j$- zlw{={)bcHnPllzjl6J-tm`DDvFQwM&9RSu$1_?$JE&8v#`=)|{dx6t@pqcB@{<^B&LEy9IdSc`31{7O6gntv(bVM59wgx5xf5D>7dhSIVxWRGh z$PM-}`#Qs3kW34r_Z^8-LThqvIyf+Oc4=lqP9(u6k&VeMq#acSjKT3w+XzttVa7D} zF^XfnUaIuIk2-8(S!mtT94aGr4qHM`CLK#i!d>-(LI<88x;nNvZn9auy*VXrnm?f#4AyVLkr`WMH|v%3{BrJ=4{pf(49*Vfj4?5h01#ue=bp~>PkQCTE@ z>D7llb>qT~ivy5oAJqdW*0@8r0iW540ShPQj>^0bf(JQ^&}`UJ^m(`qoq!WY2Ard+ zfx$s9U_jnE5TxAY$KS5qH|7z1X!S!#8NLhX#&&^TF#XXp>dG3QkUt)OZQhP7+UkU_ zK5yu31kVLEijYk_ibK0s(Hw-H7k?Rge7>YZH$AC@tp6C(0<{ zOGmiq-3*+VcU$*^Qzf#=1zl>A=)7uYA3#8NU=Q}7a+BK6q_*!ByuBSJmm9!Jx0N3p z?x4SH>{>lgFrGs;wD)5RvpZL=1(iZ;6ELtk>b?KGu&_0?9*GDK!ZZgp`M^)UbhS~1 zE}TKi{B<<2vP;7;Z zEmi3`0zUW@VdVIxu}Rso#0Fx06HP(aF01__m)6~YVMGe1TG5W(S`&#um)PwH@XJJl zG&iY3y%(Hr`xonHY+8d!^VgCEj+X?ga}>jmTumoLcWacRB-h2+5hzF|ds5?(wIiu_ zEQ7O07y~>Rh8C2Mm+*`T@*Jc>+QWS3c{YAjy^sNRx*E!I!MrlpzsJ^laJ9S~-dN$d zwG-FS6%0!+4U{r*zF`5Tjk4mQbH=u7tvX8u6ie~(J^1yQYcDyAJo=auXjrQyBPqad z!GY# zo~gFGlN}dH7=-`#ul5MqVd^+iU9P!)U%uI}$&f6F{%hHyEx!TeL|yiD7GMz~(%0rF zDh0lNn%T-J6=^xPI?uR8DN=JX@CAEr=j>Qi(c-Blv-$-zB(nItL_5&1j%wH_G<5%J z>TSB4Lp3V5lP}K2M)?y!o4IDKh4Fp9IRhC+ph|vjXnFaNS+IX1LHc-|=enJc=`mJz zG7ZBx&xRwBYmXj4gOG$pC|wK8?T6!?Q?TJhrLy}Om-*PAKYjb?9b}-7IJ>2Ad7Q6X zJ>8RQY5XutnCQIj1|1W)Bo>C+*A>opIY{l9H28tk(JQu8E=&Y7RhIB;0!D^%Q}f`0 zoiM8FK`vBDc{M4C#x5)^RmG3C)R@E?zEwA-DgL+hRFZ2CUh=A%Z)~shwHEH`S_WH~ z$Tm>3+&LRB?A4^wmV|dA2gUK(syr_DgJXlM3hq+;P>5h7%qQR#P9MMd=P!Jh(+7H3 zLd#yq$1;Z`TSSKmWn|A%bkw+)o6KY-&v;=FHIVwN?}nL5y?vKqXa=H(F8kooU3saA zKw%&&TYhDe0&#Eo#~xLIl!h5bG8-ErE`R^ zMB47MY6_z+BmkFwxKbr;(6g*AXOHnDNVKGk{eaDTv5_VZ8~P%C;Bg_-6rvQ~$^oYV zwt?32I6Fbqb+?bs+Pe%}FU+qSre=MEHucTcZd9BPMi=!oNID-rqCQTNob=_W`&{9r zuqZl{wuixNNX5!WM4<4S0_z)+!&7DKbw#$zLLrx_;qSiS%MACdl$#J~PCEab)*XI_ z-CO%zf7s*Txtucdulo7a;d1{ioei0G$DG4k^4pGdCbSib{e7VyS+dF^W#>-+`^Kwb zzWu~e$oxq1UZbCx7S+1?1|jgw%&e$Fk#`=e(JmSG z`}9`j3GNlHJt4*ph*`?;@jSt9Q>j~Fz3qr3r|WPL63i|FCio#+%;5ndc;Ey!UV~;i zL`Bd`PAJ7>qN8t$QC^;5_{swuHM%Fx!q6@?@$F+*HWcW~>~6aU zc8j}SeJD&Hp&#>|R3Bl#V&q&Z`D`LrmLa=eIFcy;(BKEsPXE-?@{(eguiIs;Zl&X) zKI6|{FL_P`SBi{#pjMRDa_8mgrE?14YLXFiuqyoh3`CXX*D*kTSKFCUmU}zWiNV$f zqVaqN*SO9d%IPGZ?XlJM+?iFx7B`_j;+XO!Er-iYS~dG3R}>dhKfgJOOCOK6Qz~6$ zBwn}XUX&4)p83dZqQ+fzCwx?2wNa_K4|q~p3ti&KY~g?8QL>Y7(kPe}62E3L=pG)^ z;_}F;@{3ATO_mqmMO0tsHB;L?S0Q%`UcHEkU(&D~TCzmrWiqCh8nhgJ?&|rEuzRJu z;fZ3{v()-;qVVp^t;(4WeSe9PRWH!~+w*T{cW(8{GkwJ}JMmIxO>S@D_#PtsO&D1< zZe(p?Dj=VexLZ1X}eJx5J>tI?Q1h;IXOUndbQ`wTv`a<%nHDl4oD2RdK6v8s&L=@oXY$`D1$C8y6`#EM2$}&ap zw-;!;G_m&YD4ZTQE{Xncn9rqoL#usax~%XB*A{yP8jCJK2C{`%npqNj{BA_?^5W0U zzU^sQz^i*^3w6u0Eje~c`vqn%j(I)%-cIbje3p~iKA(MU&eNak^r)={)^0h`NS~q% zjx%=sLKE0mo5+5lQhb{7R#a`e?|q2wWe(p>2wF}RyUzJ-@hVBW?4gGpTUy&CV!NS5 z{qdAX4;^1^;%r2@hsVxeXWk&8>$1?uBzcKVDx(q(lAdJOwUoKHLEYRM!G!gZc&(J+ zB^Ex}F;}-zQ}6d-erbfmaIuszAh8SkUh5wOZWMGemxCz!QYcX$3KuXFG4o^R8gKW6 zkBX1c69Ok_f_Vs-s}X@JgDj&3J@)PwfTC3)zIqyQuhz)IO{t^@ic2IrJ36pu(|@zSm{!L zKd_uO9DrhVj6B<^Z6p=Tu(n0ZYj|rz$62HGF#VXem)WAPU zIYVK4*YEIQ)F~(RZ>+Xn&toq%xh#~&8}(hsy{;slr&YJCmR>QbXf11X_QT8ZWS@=a zh7CjU-vu^*NZwv*y5gF+>G(vm+w2)-f6L-j@cDq|+0_>rgQ;`qN%F}wOUqZBpqEcw z#i)g5?gxH$gtEwMYqjun@DM1)*%|bkWsw-M*gSTUhvkuC0so$7Apjia z0VNx3=7n3p;7yA$Gz(l9f}V`Gb<*xCQC*9(uj2?G!xBZ1nb#g!LXm5KS+ea!nCWnK zJlQ0#(5|-I5k6rm>~+790^y|u(z_LxXhVQaT3lr_JXmU*CW&6^n=7nXt*v7%>!skR zRwcf7TJkou9g2(d5)-*sV7i`UU`bvYbHjZfQ(#5o*yv_$28y2O8-&gT?o)^z?0wK7 zZuN;}R?)KOfGp3pduK>a<_l?y!sN-VS;}`NBn*AwKL)&}Z@mw&M3mC7!Br zynG?^dqWDi_#(M$cb;w?<5%`()76U;YYE_VFlpApyC4|y1>|U~mwx1OMuT%?5mX2- zMPoHe*BdFhbPL%?b0Qj;FuV(SDo+KrZR&Jmz}ODY3R1skgGZAVroDeCl`->0P|zI( z-_X886$z(=IUA=gER%^n2 z%cTAbIHXHb0`t((c#Yj*iJp7?83=Nq=O zA;7QNFBKG?{pI488(Ywe!K(M;m85~}E=U_GC#f96 z0Zdddz^F82v>`bXCYtN&#KaT$KOqCW78@Lm%#BK63rm?4NJ27IkPxYZ*pE{O)C4=} z0j7A+QxZIvCVPDSXesj&Uze zxMDvyMn@qsPQJ8kl6|0+`It~#U|CbBCmg$`&Jiz7Fez=Eh=ST^#}WG}OSNQzG)Loa zXav45Dr2p9if;B~k0~ooU5}?Iw^gz?@FNgJzI^UdZmwWwLwGDVRAyZQ9Tjdxh_Aq2 zjm3kz+-$q_l6B5*Kf@iWfVoc*{DS>5{U4ZXs=zEB4@~h&S(VcQ$)besl){Y^P-AkZ zE8QuuR{;Kmr(wbd6zd7R+tcG);8a_jHe;MMGTdt(OS_^Gik9_L497W_OGb$S+liA{_QZL~;`7T!0jL-7Wl?;08w8I|DDQ-&F+vXd&p5Ru6%}~v} z{w8|4zr=aQyJ_kn;ErQWE%@2mA)0}x6;D+FwHY(l&Ed_QRi$v>AC<=w;vvvtv4>)~ zJH!i?O{euSVc1>&OxF<1cvsMe+!k1Eb3a!^QUJ3A8KKMAU^ey@Qiq;`yIn^H`AZur z<-=H~l<5hH_EsL|p8Q;e7uZ;>IwNg(mgIqGpIuT)-BQpEj-yjp^o~WE=r9a9-@B*{ z9X3^c^Ce~a`5pIJ39k@5VBWIQ%#Q~ujNF6uzzO}d-#3tBE#8&i{5QMXp%qsOimj<^ zJu@OcK*MYPS13|i;|4g!&&(w5;AG_YI~AfTwM(9FYdo zPH~{88`-e^BAyh;*n7H=xj=(L7%PX$(3Ip~KRz6BxA*Lo*(%r2Qs9?GiYz~)sb+X&fvLb91>bj&*41)}a8cpkv;DvPq~ z@<`~AwtAyHOa>Ju&;aLRrdu~{9|6*N6Ge}5nov>(GnYAN9onJ`0lXOM{`7D_{n(hy z{5=~M3;;i?+SHpHX|d?@+Mv>};q1$VrAZs@w>eGd?3C=&hl=OwH${~4H}aTrx3-hQ zob6l~Bvct?wRqi0W<0M1CZ)q>n%Wro`yNuKGPZ$i%h`ZIWYaL;A3sQO0 zlr%lpW;r$XRp#o?-CWh!T05J*3|)HGqJEa8I3F}BHL-w;+X#(sFp6@1KwWv`^k2%{O7@%)Lk!du7yX-*%Nt@F2x~sTFm+%hBOfEV}h4 zh(OQZH`UWz(w{e*2l&aA30<>p?+4ndBA?QZR#q}AtGUy!NLnZ=>2SjTbhIwp}cKE;>>3$T`{vzz3njus0wd36FROxLb?yK=;F#L!O1$n-*5v@$j!Z zda{%s$9xG7xp_xYIKk`;<<=E2t+~z3m9*Ugg6=y&uFrP~Zf{L-kPk~&TA0?wbJRDf z{k)4UE?`-G#b-D^a1Ggq;*q@Wu?OWSJ3KQR=%B)G{$~fZTC?D``V`V;{3%m_&_=?m z;w%V_&bl#=v(lAsnZ^vCF*LtbfgSbss2l$YeNU30t0@Bto-Z*g9VNld5aB~i>Pw|UL zwll2#%uSHqHnakG^38Ew=vS|0*wUakNW|bCkU*Q3-w{o8Ugv-)FfHSyh}X-l68aoHD=QgG zn*NhqD00ra^%MU?qC03W;p>Lv%EzuWpXxz(85H`L6c0Vd5ZN@mP0Yi za5&fYyf%n`rBwnIDcj;Gu(Tsw=$SaoA|Fm&p^t15(agnpN}-#e-u=(+TCgb|;wvKT zzcF<59Yz!R&&Ncq z`o~?K*rQJ9zATCH6uLWL@+1kh8xxVo9Kxp*=WI#~ym&LFvDx9GmdlNFt~;CldZeZs zwLDgnm4bVK)0j+74e>9Y67io!HY$aP_I)#~JlHTo^Yu++r5CTVqk&4D3u#Psn+~Q} zbN`p-5bfPzKse_>mVI`2b`7uxW^6`ZZR;#BwFc6AZSaN4P+i}x9ey{UEoquu1#wkLoq@ow61)B%%6dOjidDwVgbOLuGI6tv7kKD{3J>qefpxC zx9TZ{hg-C{Mo-`Ef-!F9xoNsu=Ibo$d=Iv7)7OENN!DoJ(FiGc(6wgA%*;~w3yedW z!n#b|VK&E3;SMP!gA)rHNS1+pOSr>58!$X?^z2R;0FMWr_Z=cHN zYdnQ}Cv(iVsiK}sPJYOp_$W`c)rsYT?MB>|TWLzKps^96$ibX?zyNy>z{$9Fw=|bZ z+!@?@E-)G+qK$Y3!i1JnE%DN8-TnqkY9!@~o5thD4#SqNgiaBcICXC7X#}^W47jV* z>Gz~C+NkSAi(x|*H{Ji#E8%f!Z1+w{P5a;wU|a)EvT?QQq;&oHzdEC54$v7*e{Q{5 zikUyeE&KCBF0nZJ$a-W_pjU6Na5Z-D@Zv;9vn1Tjr?%09=_$wkP?IGHqdA4#tl+%^ z(en_|Lda~Jhw8O_X1Bco^I#BWHq8vuFfkKgA$YY?8AN8f7k9dH z*xwe*&$oI!VuVwWy0n<% zAv7$%$+*@?bN~yf;Owg8xErY!2B}9S66MK*o-Wwh*&6U@jHlhN)e)={f+O^B5n_dw zb33Q=IE33JBGx;XRcl>`n8q&44+*6&8Beb2;`<}@P*Q}#LU<5d6vp$u)n_*7;NId+ zeOr|ekdgoM)7t*Wr`3X5tID6!a$x<(9I77GCD!6y>hMXq?qz6=IuuC!RD%tRau09> zENzD<7$M5t=IU?5C4Ummf8Ae&w`5K)k0DR_9GYpGc=y=_n>Je6_)YsRxB5bz|4xVo zorBc#7Ch9abJQ)dH{LLA(sRE4pZtn=Hq1{bUc7#v|4a=__o9!u#{*cAVQRC^ z#GU06QpyLZfmr&E9$2G&cZDhdp!8Jd=_wDDo;}cOSJ?N2fF#Y+)ZdiL?vRkZPd;f& z!^ukqEBs(eMcm5=P~~gizO=I^BQ*~QTJiXA@%>zViqT2SSm`T}>HLeN_p{v$HFZP) zLC=Q-Bo{^EM~@?uIdsqSMu`M+!HI(RV|mu(3O3teT>_&HpXGz zgQqk1QmpD$jpS8@5hI^oQBT`zy15TSSc^0~fl+TY)EVzY^nV4$iG1OUu1lq`Am5Xo zt*AxU)wZits_zLBc={`V0mgo6`_hhQcY-;xPBi0j!SS(?5ebEh-A}G0Hl)>mIWt|Qg-8CKdNE2y zOxw3Aarg&`cYNxg0dCntVYzv=p{)N!&O!0>Bl7E}0#7AFB@5F5ewv zrDdf?t%d>6VU~2G)hB+g3Ax(8_hv^7-nVsz8C%?nd7+}VZ(?3h=;rg+(bKR{R?1Q| zW`6T%?m1wN=^w<~$C;qjXX>sS#zmfyoHehpw>=Rq5{>*jF}B(kYrq_U=^VkBCRCJ@ z6?|vu?P!ZA;wW$I?x=M$Ti-PUaGbof`Hf3+V~5Q2G?!vJi_$edG%1SnZMn>rH`a~o z16Cv(NqRO2S4>N;dxZbYrYGKMDYu3$aJaD!_E(x0sn&Bbd2bKP>iZSTOXNy|A|qnt z1y^x?aC~Xcn17SGnNXG#ZG0c7%)FY$sV+x`GK^n~m4dV(?g>&3Dh;G%$ca&@AE~0$ z9usAci%-5BDFU)HYd=0{ae*3(8~gBSZ+ec1qWw6)sVW&5>htIZd-3Nhb^aJ-l=&;( zcN{I+0=e+_ww|NOoAiAW9+AHBPcSs34CxT2l8)RQh1p znkbu|dC;8-QqlY>IqE!X%CqJ}q80fq6an*Qoh>U*>dBZS7YviOyDF;-xC%O{AM zBX}P;yAuS?6D;cntlPmFn(3q8@>3oq<5$$cVH;h48t;4jSCuH|SB+2~=^FjO!M1jDhSV`q_o_aUs{p3PrmK(y_R}KNm-K3hoF;QCaYyT-AOyWK zD7Ahd1Rs0Ka3~n4DA*;;aK88J+|;Y;C~0BRtcjq%8D2U-8{Kui+U)7`HTZ}mJTfZ$ zuoGBgfT1DI4!uZ7w~Ydb6B@Tj2VjBf((naWn-xL6U2oNF;@yPuz4-3ueofK0Weo`< zdl6sB^Lwl}*&3$otMJuq@V^A#&ucq6=<2jEZ)U%&r#Sav7l_I7%LcbONN{F`|MRu!{^XcISe#*X~P?j z{QgT`$24}&P~rYE-Ic*)-PO}v)C3Fwy;<6syJHpc;#~(eqKS@;o=da1*AL{LR}G>Q zDF?GFPHm|lGT|g%GK94GTp~;6Jn~Ks6vjYOVl%+?b)R&_5zw(d#7^JYT|x)$f6f2B zglqZwDPm+;y|wr8!@8XDPR@jtdO$i~=u7I$eJczBnk=N{Ub%2=o<%+Bk(( z;N2oQiAIjcAsAEBrC?xuG8le9W30DFW{Z=3Z{z(;l=|x$QOw8FPd73@*RNv}Y8|PV zHwXki?kxb}>(_MPL&$qw=19n4=RFWFHsaUz^0?7O$6;Q>?%A@Vz&YI z!5p4_R;OS;p`)t@X8+5i`3U=9{XYY&PD8c95QyZim+q8C?a|+TrVPhY%}6 zKNfZ`QTG`~aO(Bx%qi=O_L{o9^&mBC!^`&^eE1p_t~$`oWUd+SeUD5OO6;#rFZ8>9 z6+rd+x4_CG{-NP$4SgZ>OsU}1Zh^!Q>Mztaj~~`H1Fx_pd^uZV0k9?@ML zlxRYO;Fi&yL3z2r3Kg-!TL00RPRz9MN13NmZ@Xv$Q?4Euc{2K~fcUoQ{AP$*W7fAdav=f@t=Fgar=du zN@n11uFJs23k2AEW2HXDFYED>*r3C`A2pu%`J5_GTP2vfyS!VF1n|43I?JIp;}vNpWEM*F(i2e3^#Z1t<43iS(N;bnk; z37hiK{X>`dOEy$0McrhWrGP%iEI1e(D8IaUL(zOI6}UdO(}Y*PvFT2c%sOVWJ}c0v zwp!Bp{?pv|hzZq2*_amqh!3jT_31)KDIy!ojhJRlF|-BqK{iE~dnc>Tzk_5l7`o+; zoy*)JAXa1*9gg2!)&fjFNyqmEpSs~<6n2+!>kL?0{1OjZ1V}D^%1Oy@i*s61+l7c8 zZ!Z#LYK6PcM(X^5(ic&PUi}MFL_SySW7rjMH($4-nEEjyAAbh_L$R}Ey`D4v)w4&4 zXO#AGvnQm>OSm6?bQBTEm%jL_5mj-zhxkt@mq?lY6#ue^y}#Em(Vrx=v-R}XG5y+~ zm-BR21=e1wnz?TK0AqQu?6nuBGYFhCQ_9uET_xwtXG4K|Q1ie(nfe}nd|CEm&(P$& z*WN{H-#1(V<=N}&pW_obK0PbDVD}oCfrkFG@~#}!WN^Vh^aUH8f@ zb?bn98sS@E3rfkpC=udI-DoV)zY`;5#RWsn9D; z00sxAXayfY?({so&&^!-o4M-JQCeP3ZGo%R`?HAK{G-DQznynTc#ch*`O!aSPnql9 zvXfGyTbrxqzZ{2*7)wJ-@av&~%%j9!NnvG%U`L#&9hO71-~Y5I?{rViJqn1}=`v(Z zIftY-meF!&0#td$l~4In#^qUj?S+0Hq_lQ25Xv z8;Jj>*ajyLD$su~C^x3jX}H58?L)=Bw()6%9yV!k8$T96z3&6kq{x2iVGI4KFv!0I zDo&?rJc+7XgUFgQ4_Ud_p+S+(M=)!2ko5Q=;rNdS06K_r{`@zzK}rI%GoG-fxUf4| z)g3;p{Si5Ehcw*4rYo`O>nz`UQz#T61#M)4{_n-y75_(1+ffXLzHjBnU~z@ZRGyj5 z$o${cm#gut9TM@rKNT3~y%cKJlg7Z>Sx%%dsrrgb%r)UUp-0@86fb&rQ3cq-LHY-` z%(AOap$FPp17Rhabi)*>Qh?tJChNi+ssg-9d;;;}JBh+*^049V6L~_zNA;ft0G)qM ze8ex`GuIVZEj9mp>vGZ&2y!DC5&~&zuIGO3fB!6dxc{5i?C&?DwL$&Om!^p~p6hKt zdiuIwz3Z@TR4Vbu9)NIBXAq~dW)-?!^;GqHt1yqJ_J8sr^c!?&qqdxI8|&PrRE zF7;a13&ifjMS%nNABTX}wMY)f%m)JCyWLk)$1Mvrqw(M4LS1WJs|+IVlqg5tz16d= zdi}^IoH(IDC~6KBF#i-;)V2O(D;PG+#?CR}poM;*0@d15EV#`QzeaZSB;5aoL?T{K zC8js0r;Ngp%Gc}iP zjO8@8sUhBx+n90hsQ9Rr)74%69v7OLwp|UfYRtr8qVB05Gl5v=743{TKiN5wl;Tv@ ztn%AJDe!_}bMM>ui&ED^lYjxjfD{1>ND-h%P9?PyXI<;PtIXNGQJ&TQMs?>9Z-hl{ z&Hb|p!#&(;LsG_{l&{B063R{5?g065HRaTbMD|L|AP%~sJ%#xw80pRE?ibtVs({hm zi;~D2ZhV&u;VV48cSgOjvc|nCK-aa?Q_hz`RWLwZ|Azh%zTB6w^2_6&sCxi>KsA=? zT7`Y>RrP?mD|#b(lo!sg4iM3h7Lb!4fkLE!2vT^Haf+53%3Z5wU+E&i7{qQQ>u)(JlaL7;(LX)t5xl7G|sVk)-qeHez?}Lr_|ur`t@zDJCPPwfAZf_ zZ$=W1dBmOSCID^UTE<%2R{&}^5!RW7Mb2wX=77H78Q+?B?LR9_4w(fk&3ObG-n5y+mtFvzIPdGO!|PW^&#dYF z?wbR6O%SLuBB9z{eYv|ZA>G{t<9rVN+E1Ap;n1M5wn6|l?|Y-R=I02k=PI*RD-rx> zJ9s~T95(85>*oA=P;$1e?W0vjBzaRcMMHZS>0r$v_IB>3Paj%rzuB`hL42!6BiyDR zfEy($PzZ!Y5NX3@9eELCT+A?{x6@R-cop6XnKSZ2M&pf8=YWrG_HoLTZ9175Q^V|+v22)8G>;~nw0&809#!4>d zrbFY(TyHu;(Sbd(4zcpII>N>e?pF(QPq=e%$kyu>@u1`CsZmqQY4DH~F#z(Z>J!R{ zTW_`{h<~SzG>~;4g|Gr}j$EHgGzPz&KWJ^!Drl%q0%Ur^$uKG#%C!`e0JLICnSd zXHSdQyrsTfv7)ut4iwa4jS!^|wcLRck}754n6zl;NNg|9B#|gCg2bcEA!*pg3+wXB zz!S=Aml}m4&EdS>(mV|%^ItjFPmV|(B`#(WD^vXMsniw_y0rKy@wS-2OY_(7!$EjOS9kd9Nx-Q@gOAV zk}*8avL2xHq+FF*M_?bjJJ>kb8tPAo>at-F)ZBNZ*jk@(cn}qhzawo35Ufr}*^KeynVm1Cg`MGh~ zrH96(-tLixmaG0~tkCB{u9MZNz>Ii1!BZgNtq#G@Q#~Jt4Md@jT*L(*{zsBPRoBy@s+>!Yuqt+ z{qFp@Ggl+)`_d_9#j9Pgg8#)=+Okrxm;8F1LEv%W#lAM=_TkkUkT!_xTa+<)e@9iy z5k(SuOXQN6e$A^FaKFLKH9@Q4HjUx25CpQbzupQ9h~9<%qex$IOw8Tvz&~{FGkWqq z<5wqt@60x*+9#I=CQEFlPXAkg@Q!Bx0jIpvzE52={CeBpHp;v5Hp^IxPuXo%{7PP* zJs9~1Ga0{6;HdGm%=g ztpZYJNrK3yw%Zo0wlakTq%}yu01*%}fv8at!CFND6Ok$^gh2=pLIwmuL<|TdAq)YT z4M~`iKtkZW!PeUDy}z~2S?6zAu6M}uKF@vM*Y&&Vn32YSL8r@=-FxIEOWYW*8M7lc z>#Dh|5E*BwAj_kac$Mo`I?KJ{IZOco`?ORUID|N5$uz#Lqn4kLMNB%LXrF5jf8u5S6EC#%|hzGc-swNB{8S#=-muA)X= zsj=K+EvB|R(`7)%t}@RNZPr+Qri<-Km9ru!tvdQMJsu zA+_1-^)G(mY+V)qEPlO%^w2kCXj@BWZevpSA;j{8MM-1b%7_U;tvj*nE})5!22Hr{ zQOYC7pEhm1l!>Oa`Y9%*aonG#A-~l_YisMEJ2072E71gfgD1rG7iHhr0A0OUNs9TI zWJJEUYk6++G9=A&BUWkfjk0C-k<*%9k7KqYa|E0Mf8YsMKld7_j2ye$Tlr(z7~$wc z{uoblCPTG_`%*&AM#OlY***Ros;^{W_ZN|J72VvA$62aHmy%fF?67v>DM+rW($`qUG>67SqN_eq*_Ql&Jw zCvdI0A9*B2BqVnrV|FX0BxmsN-fLecUZyAnZja@j8>)vH2ntfkkgFs6(A=Ienhd${ z4Y#C1&ms1cm%Mp$=)w*)4tIZaqimtC94T0OR`nA9D>bcj%}30@Dr66NtvX)D@Le3~ z;P=l1Rui$~Aw@u5chk3Egff|leUrrPxykG+mtPOw(%Cd-O`VS9dL9ARmX*KN8F@;F z5Z%?hY9ud37pp}+2w@e);-)o1xo!2?hq7~5O0u&76&65RtF$DoN@k}f>pp#WAEyDn z>@dDOtHm6g&JI_6HkDw=E~BPU03k}xMyjO789dh9l${hlU>2y?6Z$W58!$W0`oCd= zY#Bb;*C8D9^+6S;;NOX4gsq4}LvuSj6<3!X&!+usU%}j^*wEYJ)18)JANa=QN(FD? z?xRD6YJYc0Au2NIN8#*m8BQ6F&zHYBeZRoVs~cG+tHZ~!gUY#KN*4E0Es}dubnTUS z0S0Y77Lz=V**DIH1cLg?ZPbaXZw3PNW7zmCNy3JRIS6r%kV!V_mVaAQ&@tPisgoh^ zJYJZKXR7_&QpW_iVeCuh2T0}jw^_@0lW!<|a=BQF@f^EOMs#!YW?m3C&?Vht!{nn= z^6x%XOmrvM7XZb9BC=p?sUQ>3`wZUDzhdL>_JxNj-`>X|N^b^mdIG=s?1oM0G2Oq` z?-M6^!FtREIrZk>N8ve;8pW>%ly{r>!Y6~A{`7!yu-Lw!)K_`txMyP(LEPO^ookgj ze2Hx0_Knyz3#>f0_+x$lXkKg7_mU%40G8tp1cnag3yb9^Oj-j#Tq1sHJx8dSCkvX4 zrpWt>#|AIaMdFoO(&Oa^+GIfVc+ND5^<=?}s5q&lmR z&n7@B?3apT`>GH5)N|l4kM)OA=hqECSq^ubC+k1Tg%5D;eri~XZTl1luVp^){MBgx zC6k!E$!;HP_gHuChzweF^ci&m%ZtLPM;KjHC?qR%e`y5^1D@YJiRJWmw?IOxvt??o{IX=8ABfUg)xsbj& zVUOzy_(G_ksdpi!`LMT<(6lnS3UyitdnxRUu`QtOQyyaqI{|vX^Yi+nN3xd3Kk0#V zRh}&CO*a`%HA)Zmn6Cz@PxRzRa~z~PzxM&i1$WC2W?RaoUltdqyBq*<@4-YVmSHOJ zj=(>TBa`=Zqf<(dJB=l3r+!Rx`$?xX%2ptcPen0_iznuLkE}UNe?>7$mx2>=M^8_a&1>@KNB@ z;7nCp0R&f4;W|Uj0}POXVcbfYUVuotD#w}-pIO{2!FJ<@hYK@(dzB?~eLoEdG3qT1 z>^SMC^N=mC#@JYobvU&YnWvsy@+03~2zt`5f*(!VbdM#~d`@N~-(dPw1q99HSK2oL z4EagNIh((%{@iz|Lsd2Zso8Axcj=*Gba3S6g5K3xk7L}sI?o$gc zZaXkIOTXFkpDjm&*(K~ugcLACQas%mAg3wtId`D7;Mo;nrIi!LByD;_v4L5tjWx`Q zvgt43d&XBDyN}5azs&k2HRC^*Mq$g28(;71h%L&O1z~?we7&_G?qLTDTiM~*5B&Z& zQkELp@x&cLekU{?bUrDHf-lxSav)+Fdyjclk`c-7GsdANyHz`XlS`~0h~^156fbfz za&ey?>)fLR7cq$UxC0HLzCg#A8T-0aIxC}7*5UDJE>u~dd<6EGRj%d!F1s81CO|a7 zg+ERBF_Z!=rxM@rmG^UT#E-N!s{zg6WjGHOD-0hTuze2?aVj*o#UEN(Hq+MVQ|UHx zz2HVq8pu=^a8)&9*0zr&9|Bk#uhUNic@LzbilGA`XSjI>SQ^TL7pe;}PP`!wsLZg` zjOLJ9b;M@Rz4iH{Vd|Z4JZ`W4zK<8rZb>K^y<_!y@RaBe)#>fmlJ3A*a(6iQZV9cI zfpVkj`ZEe#}sS&OXULxPLHq!hGjBy)4@tepZC_s>^GN1%i^t`Jt(`QZ$7-@!j@r=1EXQy#3sXMW+wfitm{(4=|uUh&Fb76^>nZY zBruDat1xDBujlqQX`T?1~zrU%3*``O)}EZ9b)boBNd@&re0sIpW248S$Ag^lgf zrvhoSvoN=~i-DvA!Al9^h#XyC3)_EqH1HXKfP08weywLw;mn7eP--@*iuivw(7k8r z0~U)D%yO}weDJQx#l4eGPSF83b$u+un2|#L=z?~|=o2_2Bcp+N@%corxL(1WTu>x#7S9?KKsf60 z+f}ZQHCH7EuHeCG&afS7LZqiFz1SIaM8Pq?167a#6$ zE*m-QO`+>A#>zv*D01%+iWXJagU>u_hy{4M$XHBKJGlY4 zq&djizoQc;6Vo*Y6HlkHSFLt0{d(>oC1rpce40{FCw?xQrdjVTUTrCKVxU9zE{9%4#r>ae|>8w49VW8IAg&~ z*T}Ki-kh*>#plO+&F{**#<%z^DRhGCS5Zq02M*^`+~0xbRk)zu1w)$+Y>iLHar zWk*cg@J(zIF*SCCt99D4f09i}rdsrl=GXu(9*>;~yAT$3m5Ggk2XfNZ;MofoiLC$apPYp4=JmJHtNRqmPiA126u$85!Br=GM0 zoW~Eh`~8LO!T+45D6#dm%_1m1eAgWYOjll6t7@Vz$U@SCmyDjNbifM@fvG~?)hgNx zZ%q56>E?Z?EZs^ny>XREJO;3)V;6v01Q**jV`=b*S8Jl&h~rxe)dugHf#xp0}_;<@ZxZp2Ixu`UuE&dsgWN6MWUKz;)YUUpQL|A3xNcHHetv=M5 zHsO4iu+txbb!s};?@SMF3GMUJX&smEx%17)bf8e9%jBsU z3g!}$&dT@$r#8EI0XsVSk@i3Zf0HkLzr+0*=FsuA$8Rcn;z%I_96;EQtgVf0@u=~?7BV- z_U0IC7>%E8fs9nkRK8*|H!z5MliBP5hr3HZ1_&o!5HmZaLTBNzNl>4%sVTs6`CDp$ldyuKdd{yB8d;o zf<^JiXHvMWZ#D7#^1mT-VGEU0O3W+f>;l#+mFg zNQUZ`Aq6raBV>)SrdILE&9lJ&pS|4}6z+L!#NG59pkj@!>v%(C`8ui!x4cTjcW@+Xh{`I9-dY$qF zB8PisX*9uJz&m01TJg20m)8mHYA@y)3+v^)II1L&q5$qFAq2Ri5u-^&iFTl7an;`LHkr`mK@VwSCl~o!RBk{#n)OqX3YU zU@ahd{rd4F(kM zk+s|&uB-fF;*HjBM<}*Yo~kJ?|9~P?c#aIDhQSub={$Csbb9Wj(g50YMl*@stDr~W zDXy8bRODQi9Wdk8E%z=L4!#;JtxqJK&O1}W`we=pF4CQmcVbUJwJLjRXlx}K%A5C{Hlys}n^(d<*1}j~ERFY2Th!uK6eGE&9N(U<>jPRu0E7+MJ!t4lTrV}(W(ZLla6_>Tj zgkZ8UEW~b_ieSgn)Eg9fw5L#HTT=LJVAhh{4<+j-oDMlM@@9#0&XA}Mv{ zOe#lA_VMORSD)lIVItVA+bg*nzUY+p2cX%~kGsi1`H$5Ho+TJJFg$+c zzg2(6JF(nnjB;!3QKGFxEdXp)-HV+0PH+&lr3ibJcV~t=c8N2=S|9too4HX`{zWvS zU)kU|VQy2vJtK_95!8_-i-&>rdHbM2D<@6DnG9joI{_G$7MiXiw#sO+(O>r%HDBZ$ zZkbs>A~t8K_hL6W0oJ&u#XJ`gBs`zSoRjpZtTxOIh28w(KokOCGoq?|)cMpPYs;Z< zJ+lhbDfbYusq8P(022Kk43guRgM#B@Jud_<;tfU|_?iPR**~!%8P(>guftO7jQU&5Ip%R;lN1}Q&1cwYo9O4_ zd*>%ds`oOPoU8Ej1-RHrj1Z+^x&HQTZclW~XuYP4z=2R(#8s<|>=B^!;FL zE^<6C(vvJ9XT^y(Yc7{eI)<@>W^c`P@4!RXsv)<<`D2$RfvWNwO4DdbW)D*eRV-|2 zNmSG-&0q_kA@KFm(o4b7-OhmWA*GfEv|AQtDvbyB{^^d^hcIM&}ezXxk}jh}ae<`P4Tx2dAt(Cyt3ZhMMbwlE`Xx(Pic zHf!3{;*f>uK!~IpHIBol%x>eb^w{ROwmm-3b4l2bKZD)d9fb zZB5LCUC{{9j!qI=eP`K7|5Lqdd);p{SffkkHlne+lZV12A0;YusdY)7y5fAoES`t= zy-tq9ns9$dekMw&Cr<`XczE6>l4?6J;AUtKHMJ;%DMen~9ldD;f^B>z<&)1n#_m_# z3Q=kZT+BX2q$sH>dJue#;FF2JLEACerIC>{ugRX907bi+>P*ypX2M31{M`V>*3W34drA|Ii#Voev*+TezBkd|6$|rz zpXQ-12MQ2|w(|%l&Qg`VWuy}aX_x3RRUy3#cAJ@^M1TwLl_dSZQlIKOt!Y%@zR_r-IcL0uI+ z8r+|czG2{xN3SmWRPkmh!S`8n!bqC-xbw>Dv=z)N3_yJ>1&fE1XW9mwI&(TqvmQD` zifP68imsWD?2e-XO0q58Murl?@kg(jrhaHXAWI(He3lHu6~P`whvfreR}c=$|;LRh0NYtmZFHnsGfwrR@y7X?L0 ziEA4PD2SFdGMa#-2nyFsE5h)NiHoZEZ)qV=J-T4ea-(YJ_ z{)xUO+<&e%i>+CtcP3q=OYc2Z<<~`?vu@}~>!)5cEO<44qNJf^@US$Aw8MTJ-aC9s z=HXVYd@j|^i`NK@Obb}C6J6lbl7!s}ct{BzjFw!N`gZ3vj*hE}e1SZclyovW39gdg`dC(@fbLMf>BpZe{#fOTL~Y(Kx^AzvRBRpP zOqxqLwuIK@vfp}RM^*;d)UIscTsUdNhuQt?6oXHjq3Zd2u1N-5Uxc!tpi^x+Mtgxh z_Q44JvS$P`JQInS{cj_^D7=vmP}gv?@NT8+Rt}K)D<@`N!ig(jQGV}8R~3w6^WQ1^ z^JHfsUZ0YKnr*`)=X)9dhC*hP87s~RxS1X6Q=`3N=!q%Pd*_ycSMs!l9;bY~-(0V+ z=R^s^zQM+O?#zC{5YS52IJLD^xffsp4@9P?Gh}@ksF71rRjDh;i$X2~mRmQ5^r-J3 zB^4W8(r)jKi0Hy!AR>1Cl|-RY*jr4AcMyWIpm4lWEc;LlXmOmJfg~!Hx|Ect8d=M0_3k;K zrHS`0#ZuAMsA`_AZ!rL);eEo&8jV7SMdR%n$7R-Y%3ub9_hhB_4zb8Q2)OyGivNbe zl!>n4WQQ;#RU65PdU>9Hq2XY|v+VuSF`4m3J;e?`ax=g=_gJ55)B%e~KasDGi}py) zso#1LM3I{#JYB+JjHSIqOgk^1oh4^~rucvt%j7USTbo9eRSWo&5!Xq)#uDEBMwKw% z-RR3=Uu>*o&)wskU-_D6?Imc`BWl8>DkQ2o@pwKYjm3+V6%RV`--h-DS-Y=xa4u!< zdP%P1IiOK>-8d)cENw7c>pg{53xFftetXR2K|Mk44-~MtYrpR42(eiYECsEM@bRRq z$jMGu%Cs;#QIo=JnLKRtohRaSKXLMox?mHlyBAGbUOyeg-@*2gatI?q+S+Wr#~odM z!|q*-HSi1CqEB7*vSPnB&m~CzP=;I94%BS=1j??`q2kW@+yh|R|Ik(a%R?|vWw_xML zWrJbZi{X|~%>Z*AZa>AZX*dVAmp7^Qc@iiZAmYJLWb*{3$dd$~O#Dj)H+jwr8KwgS zd#Ghkyw#TJN?2?~ke;W2xj_~%40Kl#M{kHs-Nm}m5DXrbFWKRbk^Yr4GW(x$M!K3< zR#%#@78qvauH+B2Em%D8*i34L4y=EadC&_K8Op3D@VT2MtL%^dH@0bvTN}i08u+o{7 zIc|hBy=ySyLzJEd@((_-dXnHKjgEq`MKAKFA5uv!M2VuxCF`qf{i9KrEj6vH7C%bU z^$txjwtfgGfB?j=9ESka9%du;Z_1Wylb^0VX(OhvV#3KyVDKRG`7U^BCLkO=T&OZjWhgQ z`_xAEX+S93P}*qxpf1}yoY&~z@>Bg0M%I&*(!`On<2U!z(t8*jsjQx-FxCxo2JrMf-oDN!&a%Wa`nc`${ z6lUN={)k@-s(7hG*gqpidnOx}$bQg5-hBUryd_Y00T%va6(mRj!OPYYJ(?e&e|rA3 z(OVd?6d4h<8NtA}H3S|Z4uua=+POOuLWtKrO0^S8du_xIvmQ+fjbnf8>SGwDMEd6Z<*A%5nST07W ziDtWB6v_ZABKmTjw}tJ1(|dv(ZC;B{edeD{v5{9?a-%O0?J=vj>EGDCw0~#&8WH#c zywB*JhetrA1xU0NUa)eBL^a(G(Ni9kUfc>WxZH$t?)oLZ+@SmJvR^&Y;e4m6u9=kC zu}lNkQ@xA9yz560r-K!NES-)6w3!p0$1gPMU-tRU}Fs zXO{Pz=*3qWuh30FUjnNc$i(|PiM`OcUl(6s6WsIGPo=i9N1cx!;xJdu7gcS7YUB>3 zvr!&ITE6IUKC_xB2oCG95MggunFhWGv{>#TwhW|Xpq-NF@)dkiZ8MOcO2~?NwK;Q7Fn9p&L(s6hE}q9Wn;pI9ws3Vzl#M_C25zVpM&m z#U}^NGYc%G;I~})z9=TdGM()Z$)=6HnoQ;p&VthS5L{b1f?Q^3i|6 zaCka<$vLycTW9L92)|Z+mpYg^-LKxdREluYob&vx;=C|#?lK1HNZ-`N7Qr) z$$hy%@BDPJs%%hpt3|>%)rV`FWmH}3+bs+}0u&}e^>XqLe*)62HlhC0Dat1l)TV6T zJ>EgMtUDCGm>$Y7A(PbpWGE^~pADT;Jm|wmn0N+Sy7@jC;OCizZa!6diX-8i);=wx zg0(TgxAL(!et~$ot;t5fRHuIUn2Q`*>&$X4bv;RuQXtRVA>Kbzw#4h5o;~V=U5TF( z{Yz`Z6bfL+;P;EHisa3hXQQ8WZs-2N7Bu^LdGOwLl|wCiVM4MM26Ab$^DV8kHlO<5 zIojCRE~XkSXd&1y&O{_g$eS`C9AYZ&m?Yo$^ig~lARqu%feJ+-ck@oXD1T^Cb(9`X z`f-x?tE@jIuKDWn5~07Ex0)A@j`go9hayS6Zm-Dyrogw2Fd4KT_Qz$kDmki>pme#M?yQoi^ z=m<&FJ|4+WAcfITP?npRr-6qq4_}f&G8F$JNv<6dS$`C_`+t;XgPylh>iP-H3@L4+ zwqAIC9kf-us6f%-qld-o)3|Yxm1u#Ex_(nA*5R4T?`u|%ePHDG0D!cLK#H4!)_M~5 zjm90C`dW6*h#Qz;ZtqYLKl`HYyvTG{Nt|`9iCV~YGM9=#6h2~Oj2H-GYBfgDPA z7>PXAdtMufzX_E;@WqZe8cr6hAP5((uHbdxup|SpQNP#(o;;tPCtpYhSJo$rqrbgj zKjk?;w{>aFd4E>S*i3&d?Hm+PPRx!Qj{%Id&&#)swrysafA;Jm1sV}yp*ufpb|eSL zZOzq_wKl#-A@&r&PJ=U$&aE+?>1Jr3p^@8rdhvlsty4Dd4?gK4XE5*z_k%+P4i$3w zEwty*xXPz=$x(Yssdg1JjIlQh5I#THiGhJ*n^2o|NzXg)9*bvDS4}Y}s=*&RKp#%$ z`Bt{+6+Miy{Jxc9YjDE|5Mb533O(w+K#*_<=Ftz!;yzu|g)Do1;?BJirVkbYir0%e zYd&x*_hosU>ave|kHY;Juo>N0F(P^%*2LADI2k5zoaL7O1#YOYD5>sC|3#WE%`IO zuG%@VIdP3R8&DO773~vW2lDi6=32@`cVQ7ZXs#l-MX@2^b%r-Sb3rS!bkIPQ2XO|EpjvWYrkU8YUk^OSeack;Y*R#;@Bt5{Y0 zlQuzKN&P+VSiOVi-x!@OSf$7h{bYg1@saXE3@7_m`9oi~C2dILP2qT7SB(XMddW}C z*(01Qk)X4dr=J^5u2l=bSPEIJEdUnFX3|n_x3r{~&)q#m1@Ova$2xr>C_6MMo^SL@ zvn_X(HJDJPp|TP)a_Qspjsj%ca&_$>t6}j*ux9?#+^n0|k>Kiyuj zW$D-aU@|O>))K@g9EL6haSqF3IA+ zv!21~SIkiTpGlbE;jj{F9ZO07QRr=>%ulhhX@ctb068dI`Vg~!d|_;W;cV7Tp$&F9 z?8vd1>T&aqZSWrd*_3*B&Ne%hBx(A(CoRbaEqfaKP-*%Su_#0sO6-BNY8YCP|5AU< z0bCm{ek|n-1X8deoakLK_JGXT{Ch)VtCE3uEoEvaB?gQ8SB?(TC~*M7)JNZ35?WpZ^~XEbMs z+hhS`H}gteHm_VKQdiIbK=|LG-;dD+e(-ZP7(L;&UBl$_f)yRmOxUnCGSe#+o}?;k zx2g!XxV8gG(euXp?aIb^e|`sw{`CXPZafR$OR2IcL(ql;Iy8>|}s!B=2h+a#K4$hX$O zE8><$*bN5^6%Fv|BSW8-u=v&)y;)%F0A_O;@$boeKn^a)>+%1Fk_MohfcXV`GB}y5 zIm7F)d+wM(623K=#JS(0k38!b8!K|I>4${>y%Eseq4>pCX8(hNe~P2wEoy~!D=~4J z(VjE|+uglM%@cYCg4m*RT?PSjF$Z~aA^qxX>BDtO!;H|ZmMT`2YL5jINa9PnlWv=U za(v*}mN3621GM>9Wb5lPzcqSqYN>!QFwqJp*a3}r%+A8srr7keugqMXJ&FioL)##) zS5kG4-6ce!boz}^;s8dHO;yaBQ>I)05(;`A`Dd)|f__A)CuZuWo&p@bF+H@(4=CM= zxT$j9=l8#VaT?WJb_EYqD_F;EeuS{$B4dtRuU^I5-{V)RaK!$pCe(JB)-o$nP-XSX z#*xglO+XeH-|qRn$^~HZsRy4_uF8V2Pv|A_rmAmt$(a31`9Cd^yH=)_B}!|w5IvIK z(*mm#)(tv@*G7YuTme?8;Z%De>wv6kIcSG&ZN28TJZHhLrw*~4B@o|wSfZHR3m`ie zl}t9(qC|9)+k(t64gwrw*wbY}zB%(x@R7HrgFmAF3#@bO(L&I{zHE7%ExF6zhz`_( zMlq6q?jI%;kY?t+`k$eDoP>&GB?7X#zUB2@0EH}zl65~TzlJt)m+q9MKU`m471x~D z0FPXL-qf^5y+N-Sq&^rGfG?_ z10{DPnbYTHYlw?RpUsctrJvw$N1{#)$rys_&G46m*@dpzq%u6ExM~{#C(lCKyK@55 zZ=q^YIwJI3`bFMXMf+;8kNbJA{Me{4XohM!u5ULdaMT4c7qC`b#70eaU>d4$VZ1)o zX!A7yR|g;=r%F@eG?Ago$p)%^QG5Sz=}GQiIz-?kM~RM(14hId@`IDIWdI{u?@;du zbBEt3)-V&2MgG7+=W$RI4XQV1)F6jU9VO`tAv*Tb;`W(|6kl?t@xVBC3K6*nK}sYg zXr$#X-VB!qnrCpbFnaX2|$7q#2;mORM@dYpkIrztgQw zrSlOz_-dX~AF5g{)0O5l77)f*DF-bj`>s&e%nWv0^t8YU%Ax3i>|AL*QvwHGu$nPD zT76t60pY>P*YK1iOS=nM zLx*-I*+oXYP5?rTh6>qWZ1XB!#0%IEAhy-m^!^VCp?lgXF(QZMWqQre0cxj#&E=78s7dHh-zQlPXBTHHl+jd_N}6OV^GRh75sdkV~Q_~`^;lM zQic(o+1an*yQ@uxdkUQclur^s;e*jOmfy_f9JFRp8P1bY*1~@m-o>})%BKlDz86n3 zpBMsaXkGPBJ7QdE?{0BWF*noM1sXOUTh@I5Q#42)2J&IG&6>``8_|EH3Qs%a>aK}bwt==?u2;rZT~R+i`u5q9e^EbcM-#Zi1N+kd zk#_9M?RN%a+9rMB+SkXTKCJBjvY$-dI(92vu~QY;!epH9fGH3AB=(`+!BO1+K4O)Y zj{0&mfBIHQpZOEmAuW-i9B&I`^jebT0r{4(ol^e0JSPn6r_e>A=Xf*zNbcMQ%QW^J=y-W|zvl5hbH-&}!8c;;f zb@kK<{XH^bkcBO*ryPozo38(ko&h>Ju55I;pE33n(K4^Qw3GvuN##PmA0WlohZF^@sD7ps58~ z;|FXxtb}*I9Q(@N1#azPd1?q^l8wh$N6wE6r;6GGM^4sedK)V{oaNMCiooJeq)rVqHZc z$b#j7%jma9>BTCC?z~LWQyOW8p_3+TNI!~gxX#M7CjKU8Y;(JLaeDLh)RT*4e3Mq- znB@`v|7Wx$Y%PpOJTbphDHt;dG-e`o=0uu@H0-8O9Om5EBaj93ubc)ohb2nVw|AXv zEN%X{)p<1V?Tj({Y6M$xp!~RJi3+r|3d)2lzv=UnW(|IL2o=V&H_^P1K9wHoN5AeO zc$XMg_p@L9U>8z-!j7}83ACnjUW8&pj4A6xb75-N`X7Phh(POsNa#kVfk{(I=$d42I=X;(7KC$m1j=bJkJII9k{=7g>?Yz~55`!NNDqoqm z&e}2wcmt|TSDXe!ZRROI#+vPA8_XfjUpfFyM5{iupO!nbp-x!r{DrziU3E;`$rsGD zCbH-?;Ln`kNP!rQLE|+8n#5X;P#fRHg6>&rRDjACwHR@|qp48ZInwP6n{WcL@{|!e3W-QvNpA2REjTw6cBY z^8ij}W^PuOQtD~mU&gE%fBP+13j7XlCCu^e<83ox;&@a27`T&3MHZvR#3|K7w^p=2 z;U?Oad!nQ8(UZrJaNfnSzI+PLo6Yd zo0eNkplC`r@NWu4Z6eX5YzeuZ+zR~R3>yo8)X5h9bxQ8CFVL}FbX}$_Hw_sS^dh!& zen5;Egt2B{8-EOS9GxvDp4EcC-KG6?lo`sWOYRFF6W1tnleu$R)eHbu0_fDSbpY+? zv<)fknkByYA=)+!kQz<>>b&I74(BAlYUod;=~iX{OQ zcNO>=jQbfNUaUabaBsSAw;gzFLh5MLVUf$g6*A6g?$!g0xT(~>9n<7}?|-iN<(*Y7 zLe?4QF)8^*T0BKZq|k-3dHw@cWO0`;I^I|Hv{78oD=C3F5u9L{;S()i-e64c^&!3a z^8y94r?m0IESBr+h-PQZ+5mUMW87g!!z|B(riTd)nRganAfGdq!XIplH-Bz8?9w4%BO-n^RJZ_h>~tX@tdIajE9SxxHlZ7?hhB*Dc2A?I+w358!VX3 z{1QT>x0yz0&Ic|+M8C2ZQc`ybO@%F2)7ter2Ia%EcRO$B4uscF)a(M1GPCh+57@+( zB|yQU2b6gO*`fWSWoc%KOs+-p{`yz8e-$8b8LlY87sm~B7k=BB%9kUDHEV>$ds(OS#%W&D<;FkKnD|Wba=A3k8LGYK*PRvcT*_WO^&S4#3ox z*T;M#<6K!vy0HB9<{!lg2x)uVtTmPpgktatw9W)@mE3(8VD>-}iuM$v)0^nL2{UmX*>eZEgj7a~mCE&IP9RQUYDHOlSZe>?h z0?AjoPm*H0SUJ)Y?WUC>66@0Tzl=?lCsB(A3(h7MCi=Kg>#QIRcg=?+5-(=Ht^}bM$W% zMqbA0lAL7cnb)k`-^g#iVu`ENHFrnQFZZ)o|=JWHBsXUKE=J5 z$)J4Mz~#>P&Oo>uqIxk&SDs*cfIg8^rF@e36x7z!Ri^I@--B3a&qN3hT zS31-aKaYlLjOrS!rdsg>zvzr6v@9>l5XbC=BKKvX@)vtJ2Ou*kUTrcE%@GX-VZwPt zbvQpc@W%>Cy5>QZ=_yON7vo7Uz=&3}!ac>R32Ak6;FrY%xQk-jgxm|LQg28%1UGXpyS3<-D`S797E z^VOV$6_4NWCVo#TK;ocwElCp=s0_98MGr%aH)81V)V-5sy&2^C*d3Ei5IRULVZ=pQ z+GMFd!mBI?bblFAcb6V;=f-|QxuynRM2g`%f-sb)(v8!%$Vugh*i0nT70vG)$If=2 zGX99Ex=d~^!QYSqfMS;hyd+>)kWbNg(tsnE!GJ-9(S*^6s!e6FA_&i0miZDmff+t2 z-33n0ZR8jg2BRT)+`4>%M4?-h6~sbei)F)2#cZ&1wEdgWRgt&`YA7g?;B)qWk*?cZ zqy3q&7;StePW)TKOizBCILJDXI3xfluCXTpkqH6d8YB{cF5EHwu+9zCRYmCDn_vuV zIehT2Agx*7>vRl9y!A}9P2##FGyLb+Jey94A^bT!{29D*GR(ddElF5SB89j78&;yByDV8Z^5hnZ`72RrygNXbKZf~Pt&PguVn5Z+vLFm9_hlViUG&^9n?JT_Ym<@G(j-!5 z%+YTv9?sSNYoUN^{5X*z9b1(L=U>k_cD)12lJ8VbGS0IpB~mLpyyrEX+|VPWG(H)B z{~Ym}ewGN>?2PJ+UN$Z%esPoS6Q=Rfe(XU&LJuh|=8a~@jYbs}_M8K~5FPrA#TF!9 z2k2MKgRuAdb4I)GJRJ&Pf?X@hM((;ZIQ&pwH_OVE1AAd#xq2)Yx*h*+7d%BdF*E`g z>QgG6btqoEKYg>){4JM%@N+^Kg%>S#WLt-$ZjjbUsk@qP0tVthz_zovk6uhU5sF^k z>9hu*-w;Rg)ZnRy`%slegi`F*CBa7A%mwBhB5%?0m+zz*o9x-hR|k#NAKGW3yY^N` zR^Ryw_CL%!@oOIj=Uu_}m|su_?ev|vcVTkhrJ{@^=_)4D8_YehSJYumfgG`m(@TMp zK6368PwZ5`@Zm<^lbuge*9w{@+$)wRzLVdcxk|o;kMOH0;58T{(&rZL43bsFxVhX1 zQI`WdVFEUHLkxTSdhduG7FFaY-QX;U?^FPeI~Hs`}w>-uUFYXVKLnetK-ttEjh2ruS|Vc$S=E@+3BzQY`O1o zi`ND-$*%utHIrNph_S?>Z^c-iDMj)xV%NG?!%Z!f7fMt%_`V#)Fj>+f@#Yd`lfct) za!Zt)G)K?A7_j;Jq%EH<`-B5|(KhvHz~(fRi^i9X34+06GX%bDDMgS%NDJ*EyK9n@6?az$hmtEmoyA8oLfEQI&R#17!Hf{=+fIU&PwGks=yGDr$&F;o#FE9NT9(@`cLV{sM1K2^hFqMSs zM2jm{$UOpIDNlbSycYkjujU1urhf?aC*7~*tIxJ&QaGBbN1pp(4@Tj7AD{R1+EwCv z*fqt#Ml%cwL%gz~$(0^JDqE1#X%k#{11?>@4a$q3`JkCIn2zkXI%B8s&;CFu>Z3$< z&?NRVMZ$JDZH|SRvdKZ`Q$~w~7|B2bZZ0g^W(-c&S@^J@W?{ZW)xn8TaCaUH z2xs1&=61^llQKB~VIYRw#WN@UFC3=F5@mOA9lA?ybV@7AOsSf-ywtb9c%8BWSMhY5Em;fVj4d>t@;)WCwp z;Zw@br^mvE0y#jpbpI35Ot9WKsmvIWQ~`78kCLaELsztfddz<}$`UkRo2J4lFgy|k z*P6)e*E`N1WQPD=IWl-%msm8w?oK#LiaUd?Et4cAvw%X^?M>ECFr-P>2avP0k1^xv z5oe-`e{)n|Ge4LSemKI%-_2#3TN^O{@xU;`^t}9kLiegcy%Wu6_K}XJa1Y;DnC1hv zGFa+;MOWr*OJxIe?lT^;B{GBj84~^!=~d<|WM5>1%vCm`a|6?v2~OWW(;pHJZ&H*S z4~={s=o6`x+?zle^e(iPA2_zPAkGVRxP9p5jj8scd+;w}(qcHA)S0wkIfK&yzjh_x zMbivVsnDC+ERF4J2-j2H$m?O(FnuL+K0lzzrFabfL@~$bk*XnyJM8_4K`=cCFfpze zFRHP-f_WQ#U>Puwr;`v}J&Tq%8}%;1I;?_1{y-yl48V~D zV)CL4YtX)puu@BaY{M8XfRC$s$L8pE!55$`$h-2;yxzmEpF z&w3M;-prAddAKRT1AYw3=qc*_`2rB?fQ+=66`M9pXXv1}XiY{Nq-KQBINoRCTfWQ> z(mzGkCY@=zxw9n|NHH}Pu>`K~`)xu$77w^U63@>VCSYpA^|#XDbeLZTdRSTc78l^6 zlZ=H8@Wq2`^?)ob{=9s5MS?DGZt>7ZsOY%NOUFveekIULWC4DJAW~e+yE-;l_x%+n zjHM~-mW2bc>%wfAZ?pJ!xB$O+WHoV>n?7Cnp@!4+UH|Ke!kH(S3WU!4(+~oEp~V@I z&sOg9y-H3i!_CK~j|H-yPQ18^n&i6?0W#~@f%(;&QC!@>E3mC8p8y@a^B1YZa=^tU z2a0eE5|Rip7YrFJ&UXku$&glBkc=kDJvc6{R1#L{de!&KksjfW!+zGK-T?AjslvG9 z-efJs5n4AfZuX9E(LiheIxDgEaAEML`q^HDIMQf)s-vT zfhU>PJ7FucVgdtHq4)&?s-M>kcv&w^JyDFK#JcL*_C~E%&9~{yIp~~6T@(A|)_1Xv z@LDJ}MO&GxDol*hTB^sEZ7@BORhADY7;9W-9=hX&)_AtW|w=Nuv2%t7|Q53G><_Q{@Jbz^Bv?I!0&a*wvxnH)%F(2S}sgkahn7r1?=GO z*%XQ7jEAZzxl`WR;d++x2(2Pz5z3^8%+h<3g%}-LkTX~qJLIn|2)b-@F=u*t ze$x$hUeHVjXyn};y6VV6UOgv%HMbDOw^=0>=?U*KpS}|VF`)@rsi&$|iMpF}+z3(H zp_~Zb6PHg&O)!ju(&f`%cq#u@l%Iz^qFz574xIRB!uIDS^r~_c{(7w=t5tk&wxugA zu`72m#c^=;My^v1knns|EM*^di#snx-))p`1e0B20CQ$_79g(Z!Uq;>`VpX!0X=Zu zd`GgdCgE_fZ29ccB)TBoDEd$maG#z!mM`3d4@YFlXc&Iu>P$u}?Fh0HT2PS|b5)NN z%UACnVMa6(IY(wb#OZHiiNae)o7O(|2Vep2xRi%hP_@0QZ)193xp(j)4%yC4Oql&j z8Aqkn%&K4HQ*g)2)e*o9k{f$l9f+|0d7`nO6kuK_-y%$y9~^%uaEdG}MUmqGg1{NA zDg0_n`SP}F=!>2(Dq^ys1@kA=05lb_y3ym{hzfVBS-z>B2n;C5bubPvtwaB<#c9Q+ z{M9oYD=n97UV6>IQs9i%n`q=wgx@p!Bfiy!AsAbT;VV7tBdoIG=6ActDQKWcC;Mpp z8H)m^eD_sAp5j3Do<;`GpEPPZ!zu!K*0u}J=d(>;B|%a~Em&uZIHUgbAxfvZ1!oJM z0tj!;CIz>c8MEVYf@B#dW4M08k#~LLtE98d6pCup3q0aMO+%pjb>q*f9Q<_7zN%&A zeVkngn~mg*5uE_xiy@@6jC*G7%UhhPl=T2pl`$2kxd3)5e8F!qAt4$@e#DQVhe;iv zil!=rnc*R@lXDYLWk9bBIAc%6wWR6REBsz}sOe@g;b+gdfYP|+!yZK(gTpqp8J zpm|Y1AS?g#9#0y4+-e?H5J9@r_^XQUB4F8^e4HHBKMZ~=V_3Sn7+yLjjx3)%K3{76 zxZqC2@BCr5lKh<*-3LVHmyXja)nhN=V7!x6(i%g&{Y!3Texuy+U3_9o;W|KlMV~4z zCZt5C$@b+sR2OVZ@hv*_XDR|fzHqpCHGCSS5}SX{|KH@HBfoybq1&K;gFFP{R&4A{ ziyGx!@JCv@u_nCpE60Br?wd;8(hALwsM$`$F>U};lRWl@S*>jls-E-qR^5k0!vHLo z-w1q>uVo74(9p}utPGYV0Ah;`F1|s9(I6}_!C!I`EcYWd@zG73srT{)81=-dhP?$2 zh9;IukDdoUDASs5`mYBrSLIPXbmL*kWpaCa$%>7s9T|UX;qx; zBRi@IVRnJqYXW2Z2=AtpR>4BO?=#~hcWEF1WVetd8?F5RWyxp=+s)H65qVSPR|ZdYeSwv3sxU7!gpayo_bB}f~;nVj;;i|cIKc7IKN}P znc3#!^pOu`BFXx4Vw5Ye#oiP2W{W-JV79^aMrO=*&pBGF;z22jl#<&gOzSe%TaSMo zrHPpi_q-T&FpytgCK|zRNt90xs;>g064B989|z+@z&c+4G~OHeY<6CPm3ma#*Dp@J zlQp%fi=#>(t3{e{-Ufja*9*zN;hDLRa}3Z#`YHL%^;~Mm!=dtr3oHK(OLtz+O1<~L zikg7nHj4N&%ItL=8V58}7yKh;70TS_>;4SXZ#$kZgo<{Hmf-K_k{S=lBahg!ys>m9a=fYfGrUkx0aLSUt8KsON6pc|&JT};zJYNVW;ErOX& zH=Z;_%%eLH-VU-HsZXk#h6`J${1^VGh6BFjP-)3|;&%=U2xS|*jdQ(FV9-l1nYF}4 z{&HzjBj*O~t&!Th&6Zwqqic>dHeM0BacijbA1Jj@urwx@XVP1xn|SVPkp2RkDaakF zMZRMBvw)D4h4n>yN8kSUelJ2P(kIwG`?*EN>!+Ps-FiQdnh?fr5+9xxbk|5f0~B8D z=0jLFT@?QwHG#P-rI*l6fROy{n`05=3Jo?N$eccvpp`)w1b+}f9H7iwZp@3qG=B-< z?F}c6>B>Lzb7oPYlMLoEKLu*~uG}S0&QA*6oD_4qof8-(S`k>axYh8cexL{wv32pI zgl>wEgtcVaKgl<+r1nGKraa63_Ga=THu+y3Qf_P(#4ch+>>*vj+2rg@IVm(1VAYb@O0Ch0#UH4c8*+=H5Lt>y=%85_7aDJH0#uYsC$ z6eQ_+;V>tQ>}X7Dxp>Fe?)Y{ai`z|{f4{;CT1y7@1AQIMFK%@s@8l^-$vOxuGjo1UE9qk8tG zC&xQ1W%mxaCIgclQ`_y+$ zgY1$`gs+8fSz!oyDF0>j=mE%EpMz4C4W6+_3ONOqle4yhV+&pft|h=266qjwu(9wU zfn?2JaYL@yaTHRQoialbTB$2TeHjK<3OJYowg-5vNbP`{06= zz!}O|)ip$k7j(wjR=`gKD^izeoOZW~2W(3`gyLC=5^j;-R>jD`O!ye#y6&eJS#pO< zx#5zxfgOd&IS~?Mje>N8wUm5!@JU0NF{JIS8HwMlT5MlHryUO44Abdi@ryuxMgZtL zY*)rt~m`x^?fCZYP$mCHJ{Ut7j@!b!RjxY3r%Zd##0( zn#EDE&afNEuSAvMwpsD=Mn2NJ!;EA9^cy1r%7h&YDa%Lph4DJM87f`3T_>fu*=jq|?rTZcB7aR*YmHfOF zN5~+9k;LpI*&JpZBYYNj{mx;FHB3mMQU!fv;F<$j7 z@!11zlQYNYEeM4bHuof0M;6JpejL(C>hYUqJ{dhb_B*V1M*>uIl}G1Z4-EGI(ry}h zu?j6rlH8!x00|@~^8Dc0>g91!yWJyBcSqn0i?d4Yc3=RHW-CE`av^_*()`O|PI>b6 ze_MLCD7$IbC*3b+-819r=uJ%#%sP9$y~0%&o}tA#B#$%8>OyfBV(!tSy^-ba2RJr@ zH?+Tn(4o&4eKaeIA9p&V)`wN~tR|TAU_TOHb73Hed_;PFeNu{Q3lIIw$(g+ETwTBY zgYahTbB|a%f8y_t1dJ=?_Z&h&I9!|N%h&iu=|g3@NKinA6F}=ujpPXolt4bGK-4gJIRy`g(WSQNvZ0A zrMtbvo6jCR+F=vMntdtz`3xg%Oy_#8duefo;TpfRAs$;6$62O3eI7tjm8EleT8}>f zN{PPar{SpbK^afb(xsL#(keuEyun-Ay*GqN9c*%G$S5E!M@8(?qe10TvS+QV4_Ltn zPr}t&mq%^E&OPV5oYv-ADi0UqzCF{am|NWE>7(C-nwPF`eJla${jE z5GO`Tsr%>SbDf)GDHCDYt8b$7Aj}8uTOtZ2^}pMNMv#O#1cPI8kEw1KpiIm&l@<)O z-i)Y)4svW_hz~Y9g+OPjX!yK70NbdWTm12(P<7FU=-S)@3^ZmbyauRLP*4@m(lvK~ zE(g=&USKMuQ1{fZXiWGzP+_X;&N(*r0CAPKI+XdO@%tJ_FTfHB_M{g0{>NoGobw(& zMX#v4o-K%|-YUEip`sX1IPxtInlEG|Qq(-Ou_Xd5ssWh}=AvunzJaz8h2k7LwUTnC zJ$=ai)U1@emOE2f&V%_B0dRv^DK@l_e#|C~vF@1YEjj@BVvu24Poin*hXm~UfOk4+ z?IP33Y#}h5?br1!OlOyS61E-qJn2~hlvi7@!@TDn&&(DFO&=e&F{y}&bH^X(6P4AZ}?nko#iEft!)Q>0x&WN5x%mC$6FkbI+;YFvh*vvZZ&QB(3!Im6%r}GISZ&YL+ zK|cx=-blp9Q?Gjwvef9frZv`SV8*&xog2!hpW)5JYjm@HC=z|#BF6JX#cYM8fnc5U z+vNc{^U;SyPztx)s_b~IGLxA1s;X1h&=Lz-2$_c^NthFOqswR!**s4aA(H!{Gal1q z|7p{uzYlS?&v-PDBe{gEUoIaMYc(%O!9Fm|KFH4r9l>r@E|VRXUdkO_bjrsxS~X9F z_k?s7U|@7sH?lWciaxtzD^T~ggywKJ5q)HPCJUmN0d>7zLXxzBs;{AKt2WkC2tfeA zLf?f+#*?9O$eNKHoASj(KV^0sc^1@UE(CH#K@S@d{K9FdU^rs>h&s|Zn;_Mw0% zHf5jt>2&!R!VD#IruQ)$F;8BLTAt~mqXiW= z!b=k0DP^FILDD1ibQ!Hr@E2kwH_;K{B!CgWW(lmjg^X~}J6>DIfzM20+Bu42zp(d3 zXM#1=amR#avALj8cU^)EGee~}gJRchvt16|reU7C&;CaZ`(jmFi_M40Yv#3=M-FAg zzpN69(XzTdIEc96J^8>HQXKAG!Sid2kNwvRY#PA!pn5Ck@YPY5-j5%*gl~;)_lue9 zt~zAD4^G9O=m;B&uo%==Yy{zKW%kn(y_%1YzRvgbI2vHi~Z#SdLZMB$v84(oY zE;#{>*WG#$&>TkDm*+LJnc>@T7N1|);i2a1nU5A8is$jDesIpyV-G_&ugZD4@uiSQ Z)K8TiLG%@!wE!M}4+#FeV)v2n{s#&27-9eb diff --git a/windows/security/operating-system-security/system-security/windows-defender-security-center/images/wdsc-all-hide.png b/windows/security/operating-system-security/system-security/windows-defender-security-center/images/wdsc-all-hide.png index 68b94302a1ca2ecea58d9c0e20b1c6f8ab4a3d60..012a75914d7b461e79fd3888c278e94f8fd95a43 100644 GIT binary patch literal 7591 zcmdT}dsvcLx390s#u{tVCN)vJpypR*SmGsxv9v-|ywqeWYGFBucq7Cc*kp}4A`~)d zUcf1oOvNlUZ{bu1St*4minmG=QPI303SJH~XU;iuzUN%O=bZCA=a2V!-}S!x-Fxk| z*8c6^T06tr>x9n69UIrIS)&6x>FT>?&04wUTKA=v=8b_WNLzDTi}O8kbPcB+Akzq6 zgu8gUtXWe<-L!OWy++oKIe8YhX3gg3zg=tj(f7jEtTA?ixw@Q62$uJQr~r6pdhC_t zLqOlZgf_2DSu=e3OCaR(y4|`*(@(P6uP?8SdVjfFck4sfD`CEHp#3qgF9AD&nKAEs zl*{?Y7B3+LljZDqm8Fa=hnz+t`#b%@FLn{89->1=lXb9Gu25e*NxYJmR z)h;mFVJ3Jlj5gAtWd;+bNQ!{4JcJP)2%AM~8Y4x~q}lxE(A7o3>1r9}2@AR`L!_Io zd``z2-@EI1=CO;BQ~nlH2q2i7($iIus2J<4;7sQADOOGjYxY>CN{Xj)uZ*fDC=>;1o&f%y8?6AwKnSZwnJbRFy`RSr=9t4ylz> zTP&jon$W$4flr_UhVv1p)Rm=2U|RKwK;0QK%m^6=Iri+hQIIPwQ90SqChBh1&I=3f z6)iU|2x0klCa_#PJ3B(s-Pn*2Rh}98BGmzX*IahUEVBBk8}RT(Xb<8}s|Du9gW1;n zF9a4ZBb!OfDzJ-hcRL6O8?zL3oX|Cp-m#Jvy*&W?*?>9GV=jw}R1J67fFvUYOCIW< zNVjzH9O|>WIC-^zjT@`?l62YGwmf8F!wMp$bphPPk^I&A?J=BUkh@Tqw!RgsgKa=r zXT;*CBjEXP_lFR_-?Vp|dCB&zgVew8=Qp(2aT6{YYFeZ!PbpJ$5v0 zI+imB+AX6sp`e`BM}^0_$EX??v|N zRX;rq>w<||XyyDCzii)rjv4@m0p{{aT{Q4ahBNFo$uQ6}t|g-r!N&+KV2^?kZ}p{y zLns@m&aruisf4f8hJu8t88ibs=>n0%g(glTtbQ|%w7b7xf3xiV zTWj?1Ys?sK99)hv$^pW{JGJc8)6~?Ig%{SOcU>?V>rq5nKJZ+sx_2;YTmuScYo6Zq z=%xXQvDlbSvbLIAJnlzhwQAN7>Deuy?7SrO^;IjF(5>dF;KqYgMOlb3X=RpaN>X(& z8ReR$z(SS|X~Y7$*eZhk%g?t$sBqdPA8gFcj6fPI6P;G((We0%S0ks0+7{xVP+r?Pw)pErN7pWTeAl0u%DUQ(}&VQNJ_lGv*F> z?D~O#bxculn$;_xKRgd-@-VcbXzs0cqc14Nsfb`beg_)?C9a2`Yg8vOAot2bw5 zkiViDH;Z58`r7M@Z76ICv%zs?+K3#{l+(X}BelCg(E|U4SL*J*&S^2t;fP{DJPic5 zPYa1-eV-CPHsCn8>YT$h;JPDcQ_ki#s=SbI9k>T-@w>`1&9VM_F*BiSD>gaueZN0p z%olNcyaFG*WwWA5CEm>18Va{(gZBM-hutz(42jbEOdv>FvR@%v$}LeJIm;cj!O>W_ zv6*5*j4|8QNjkBJjNi!LqZ}0_GpED2u%FP-U}crvaRQMs%AAKQKZxdOC0$wsi%l3L zfV#`4s=E_GSZwi1&FFN?9;Vy#*`m~!^cI&=?Z+ge8$j4YL@DvE`LjvSwVMdoW)|1- z-jJc*sgL+2ya!y~0accpuLeb9U*}q)dVx(zgE^u_gK@8V<;#SbK2|j65Y}5AaI~2X zK@_lSr$(0kX>ha5DP+~o65x0GZL#M7`b1!?DC`@{xx{iS{|U?f{3{i(BPhV&w#%;B zw6I#RImDJd9L!pE()AML#O zMZzobP^imr$JR`O>SQU_cdY8=9f6>wix%NdbA_CX$KG7&Fu^PnXbTwA(;LODD*>yv zFcwi2vJc&h+%o3u)oWHG_kRqYr%O`p7}E}+sWRol9u-$GdliraDwG5ZMUwZE!>vIb&p%UIxoIX~wU913afTUI+m*T;#+bLP zPc59z23JXtds1cX=w>DJ8-a>8|uVil<1mhw{t)df|BiMty}15AY%D zs1Y-zFvc*A)-Abn``Q!p46BSin<6Fc3krMYd)_?o5xqsYdMov-pKI$^?kRKS0d@iT z)SBdMUvjXp1;#ia??cDh%;UY$t>Q5*Nhy;Q06t zcfs*n1NZHpt8QcalOFDT^tp5JSjk|+_g%BQGD*m{kAV~rjCJrwvRSdYmx%Qu0c2k3 z<7rYY1t?UQ^KA=$%z4We{%ofjJTD+gikV5vzfWEa8>|nhKM|-IKNWx&xa@ro?tDS6 zlxS@5eLm*pG(Cy)hjneYJJ1M7k^kt)AX|qjr2d7mvnhTNsg@aT6lwT*jTLgL$BZ`f z+DXRIZnTeidzXe6ILH?u+l*mGOj`}o7}~m%f6!b)i2iysZ75uBi6)wi=1P_gS0SL|><*jFlwZIpRP6&XXv`{{+LSU`Y5m@hrM>Q>Mbs4O#%=90F ztLRd=xjg-X@K$_-s^uws{cnfkLsS^Fnns@$q^@_s=DGg^?IE( zELj8Nz0cd)JOi6IR0cnBY$7c;RCFvaND7Z?0@f~ipbtVuExpLpPp6tfNmXv2dme>v zaPJTP>rfTp#cnZD{aw>#OCXs;x)hqHPgU6Tl8&L*+QxZC3w^X;sr2AfxzD!+;>IUHqDr@xJJvu2Dtn|uad z*^g_k%|(nHyoNoG>{Z)K>r5kv=<28aAKbn*)ZZ1nKP1j2IAFg?+}8SNA?f7)U!`@c z(lPcSKOrOsZXpMzPwN?LXWE$SjN~-zXr!j6JSn{55UNRN%t4=d7a|F;rknQC*%Mce z7or$xIOvcxNN=Vo9>1kXXHwTX$=pUAqVfaZ+MbynZiz8S%OB1$}&Iw zI;;KTx4&?>dK2bY@;m)48#iq(PJWwXo@xo%!EfCZx>Wsa(GL+gZ+K?RQZa5hR%bzm z^0P9{&BWPNajA8PZK`|LuI>^&Hsk2(V$0!MZ`>x&QFifcXMWswOg!c8L1*;w6N%;#L}NQK1LQrnz%zha&V@*`k0Qq~nmi{uDwQIB zZc7myOP?hVO&yfZ-F`;AFNkKWB?&Ex+XenMU{Y7I1H@t|v1jGECWBl}UbRx>Zg{Ij z*k?_1x|irP^H!{n4i*iqV~`sBO^Td$7IK(13)eR=Vn^JbgHZ_QEeF)4Qbz+laUpn{ zB&H%Xe}la^L|>5fCc!$P2xAHutg&F|Z^Mpff~}h-EO?7JCwm5_R9a>&5`H|lyvpc*4+=m7A^L*lykBm^lSV@CeAM|isT!i=1idkFit50)5NA1*hydYeKKr? zKzk~O-h6yXvfzg?t3G?g9&qP*HBkx|QA<6hQ$8aW{Ak18Zgb@x=`R9DEuL$sK$jTj zgms`u5A#dfuFv{@FNi;bXin@J&5S*OG?KmnoAvsjmRO%7!^%sn$@6RqNtd zz2n?-+fRV%aB@rBeq|v|Jy>zJufq{K2QMFhyQ=_#%r`I|V_}_UYxp@|kd~v}mIj4* zIPKlPTTvGP<&9GH{jrAv@|GGQ+Z6UZMC&obpkv!jy~q9nf;7F)RsHH`uixtsj%B`J zVW8ZE`y7galFK^|@T){mSSWX+u16Ipt_{d|&z;2jgwxWi^2wgD8wY2b*5hEU_`aH{ zBtQe^GHvH7G9l>YQ%EuI{u>|086Lg9s5ufxNt%qByR-NK>u28&lF|IAdE>vHO!;Pw0W4;*~kdmxgdoT97OrxKQ@}~TZwim zF+%CH!wTTF0a+gS#hBfY!?9>!Uc<(Y1B$(^+oevXr|~5WYQh{LtGM4J3ngf^YCa>&(Pm zHPi|eG#gxp85)k?@~gp=23xEYepa34beON9kr3|*`$+HV!p zpZIO7!Q*)iZ1mUHRo3X3Ns&7OMYZp;@UG0cwz@>Hu3*K!B*|mGv8vPHQ+M}XR6dAd zr%Sfd&YSfXK$MRBo88@P#_$8%*tEnzqvV?J20J@72vI|d?2xCae_akGjWt!Y<`+2K zg*Pk$hL*ybyQo!Frko$@LygZL8EUPuD%7w3<^*N(Q?WS&DS@+mf_{R z#nepQpLSRi+!b5aFNlxuLX5fL!X_JRfz|cS*4=*hfzdS^jQj%ScP&`u$)?qU0 zjRx~1T%$8J-yw`=8OtD;l{1`PEt|g?*0xlTgdH6_FFQMwqTo`O$yG_FeuK`a`r6{z z^Ri&)8yffaU(N2$tp;8Q{<7)o@jJ|PIySfn;Aio0oKSsuG0=3Q$$cmPegk`G)&8A9 z8-_STcSQQ<2vMA3$Y(mBqsA0Pua;iBC7;e(zbTY=D_KBtw#&`j?=|;=^rVDidR`Gc zT-R{f&!*O_KOrI#>t(P>ZeuR#ymt3IfF5K)e8-@HN_2WL#L6sfGBepnU7<9fi^2zd z1rGI82fHBywUMCy>d;=>rlJ&BTwXz;G^2>-%A zgTb8NR3P$F!Ve_}VtD}qonR4~ujteVHjutOGP&-W3Iy`DY5&7o_sRsFk}Fy~#&{8e z!oH*=RcJN|ZG3$?-DzLxhT;LENn>Jh45U3)qfq=mHcXc!O4c=cz_o&^$jjRi8Qjv_ACtfNS{1= zfA3He&Z*e^d)|xXmn3XpZUPXI}h8A72SiCgYDI55$%4G3j-$;s^(~9J1_`g~4{Tp(M z{Msz_T6l%1S>#vIi3P3H+{4vR)%`k6=XlZLi*&}W>_x@}{zR><4LmQr#X{G(AisXW z>OX{rOX@WV_0qZI75|j1X?^0t-Or21<`i3&{diDcgkiRCmf45T>7z1&CCIm7xOSVV zkHNmyoM#~xJE*9yTKqy*kH>gQ3~|frmQiXiF~gT%1=gZe;+M|4el$eL(>{iT(5m&Y zF@%!_K;e!(mKHbJ5Lo)^v9DkmU*ycwK@MI1y6w3WC+JnbQHW>VGpWK4DGEv5cHMKj z$N^UtF{e7CnDIqGFZH?~)AcoJ;M=ezKF>Sbz6y{t{h+N1@VsgQF5Ijkc=t2@0=x?R zhW37;H8<=i%;;6_Da?Ltiwv~(g^6%0$Q_X@n39bt72o!!MdnoVK?LQVg~86ORXC*G zvvq-*^-FEVSc0Z{7JpAeK4E)Xe+>Ip7iL@x-)$TGxKRZx2pIeYa73KPL1tO~4E%5a z&1UWdS)0j|QrvnRwN&hbrnaDPCrtDXpzNm_4c)ZxKoY1 z;#k5`QsIy#%nPm^<0{jY_@;wcx^u@<(o)UkFG(Pq-NQC7b z6PgJ2z|L@VCbwr?zuIqR{1N5|90Q>rXzI#;nYVN(F=yJ+0guceW0FpT*0`oyd6yem zZ8f6t-Li*;sQZ9ymd7eE?o}5kW~IqcQ&~qHAxd){&ydq+hY3pBrE8M+9G`}3OxDqv zq8s~pm6u^VfK8$f2Ce0kUi%JrN{_B7Ud}T>Rf=gW4`fdD?8P6CE?2eqPo0+d)sojn zN>iG)zFM?l%()cA1LuL$)24MW;Wy~CMz@F4gyL0ObJ*`?O5{g96Xw#%KIF2=?P@dh zUo~+w!!-C5VmZE=`@8&KKOp&=JEdD~ihW)aCJz z4X>ap)70mts|)<+0@C~=1eTBcGFxlU4R;>d zaS3+->1{->_Idmk`W+DYO31!Ib70o>cnMcDM^B0Q4|+^{L(-z!i#J82(ZFNdRs5e? zUbAJK&7$n0N1h+{%?_@vD48`+w*PscZ!+pu29i!?C(*#Gp*pBu%)7SwODF3_`Cc5_evc9ZqKDD(^b literal 7764 zcmd^kXH-*Nw=P&frRmG7h?H0mM3f>O1BeYmM^K~%0SPs9gg_Dm6h%s;OAw+G1Bikk z1_%K}nt~yiP^3m_A(S8qEtGJAuI)JiK?w_bJy|npc}yghoZVAv8O?2Gj}>%{*Nk6M;>&x&uNsE4e_or z+~$x;){!b7F<7GS;Dh`Ap&`34Arq?BVLa_g;+cHrn+ z+}hKAK6a|K?hP@klYOoSa#UQ)swGBlJPWKfp~OG9r1eJW5I_33xoX$7`;gq=sl(XS zxdB@jVq}G+l)!|PcEC6Ey~&O&Us?lV`S9hyKLO!)~ zw8j_^UJ*oCEjFs&JEL(aqPNnPeSjjR<^L>P@F2f#{`F6zm7Zqmx9~&Nf&CAU^p&|d z%@5apkj#+t34y&R(74neDX$Nh?R%Fe+oLo4YksKO%9Rl2(^rM(+*vQNEs7KcM?4Y( zlog%A6hKhR9CoS^kU(Y@ja4|=fiBPFT?3d8DQbX6!uGvNenn}Bd)Kcyd7-0D4 zH|&-6B@LBx%^IMnZX$;i7?40%c7W*CZ?ZbWWf@1A<6Ze~F{6PIq1u;3j?ugFOSPbb z8tN%i9@eLzp<^wHxsb_tL9sq+q&(5Dzbs16<;jv(;Ha|-fbEbS?u|n(wo1%Sc0Jd% z6^V1#myu9*E-r{1OC%`54o*8#Ma{in1;*{`KRMA8Im}$If|4St1}VtAh(S=vw(6Xk z{$3bv)^dEB>>p2jkfC7JML-P2Wc2J*)DsQJQ?!Vk-Y)^xfu5pD4v!0bUQ!-d15wzpECP^FW>B#n~ zhJ7_Y83F6x9>jITB$UhTdLs5q59}* za^YzPzvolszb!U29+|WHYUCK)$`@V~f_AY{xl?sOU#DL>RuHA>14=*OY4Jav{Qub> z{QuZ`>_>%%v8JYGZ*t1L^(98s0A_oWPWl@}&=#i11dI|L=4p+MJb#Bk7^S8LD^t?t zM*Mi*m-POaajJBQs4Vcd{^sxIUOaT@O$5(vFE7Px&ARsXmfDxTbE>{2C@NiC^zP~~ zd~<6dCgymc7GWhHy;K`YKf5h0m(_ASKasCKkk&9GMO(YR+@{@7ksG@G;@X{!mHFO* z4_Crdev#8r4YGU&v+e`s*WX%B2Bb+hvBez`&p;r|^e5 zDOH^-m$5>=DHZ32B#W%pP1s#}bAa)=z#-OS`nHWccB_5?QJ#D8YSgz=h=dJn-b~#B zXYqteVXD;=Mw*IVhmxV#;8O#-`P+W{c1E_Jw9mTCJIWyp>E&~mU-EuZ@W2UgkmETqyiOBtyNE_4WqTL1m4 zS-rDznCGBpQZ;hBs(Km_8<1=T5)iPn&9jp~+FqOGKyd2j670Gq3qV>#-%DWo`Iz~^ zk5SuHPmgHq;ght9*hvqEj&ugru%iZ{;4+m4M#7(s-hTtv5RuyE0 zqWAdyn{+ZJ5N96HzyRold0W=Pr_?bev}fDAfi@`W-{w?yPQ%h`-A?9ceI0X~yV_X3 z5exbC(XU_2;|gGVt$mi;snY1YDlt}4RKQz&Y|XhQ=p{2kau0dtbq*L!CF(Ql1v;K0 zOe;hu*U2&554j=sm=Fv7jkyn`ZWmWBD`%Elj$AG!sFXMhFwC9aOFu%fe@kc3?*o-K zyB`_!e9Ki5Q++ufNA&G|1M$YkY>op+-KyP(YU<+n`Tecg{%!Kww52*$gIjY#E}|Z> zac^XM&dborP{pE-l&9U#4&gaxpM)vjIz_Zy|Dq(FL&uaG4qkgNKRrdRFn*Z~v-}qI z{0h)Z{%1AAwyXrd1*2c2IjnL_UScbGUwBU;$Ty$(_KNlBM?ZU+;*%`(z!*0u>g zLDyBpC{8-4Yx)r)nbMl`#fk7SaZIrvCG1<#O08WnlsQygu6J+lc0DveIa1aXY{*JO z^=zcaJXAD_J^l&#ly0NqOj1A`6uxcH@lfhG<@kAuu!80DV!&bIYW>1H_LckYQdlxQ zMq)^A!yvJ`ejXZLpqTf=)ql9Af*EnbFjHu@a$%|Q_d}JQ$w6FTt$?H68DrM9+Dhe( zg`8y*rK{}h>I?95@&;{x$pE(99J!p{rib_fD-5d1+1Eh%s^L{f=(DcP?v+EB?kvl7 zj-y@zs7M6h_9W~_kpZBUk%vS_B!Do%9XKV!b5a1IR~|BL)R5E*GS#GD!V2PL`y*69 zYXc>1+koS?!DvvIhRqGiH;;E{t~^5drB$0?#_X6`I< z{$d=<#dcYo(X`#b;|Mo$--682?aur&<3Ck}zH(RB9fXvun_Xg1dwc9=t4l}4cbGx7 zu_1n>FOAmv8Cg9a?Yct@*jJGoj}gF-2@`cs&!GyB_DZIZ=T|j8&YkBMz>f{+d+2v) z9;5PId0H+p5fzqmfsYw;+8m~7b@|dlP;G0&>yZ$LH;p4dEC%as`7AVC8`l6tM8c8v~_=rMudgd8-ABD zfJY7l$PRMvNko0f9+yw@8%dGUhRkdCkG1yDuZR6LY%-yZ67qa%dC+_9lws(Uxw>bh zpqc8N6kP7SELTlqR)Kqd5fI1XQHBQRL7ftJmuQ@Yu&$%{G>OlN(4W|TuVT8*76JCw4hArkgF zzUtgG1$YA2x@ki}e97C*p2upwB>Dt8+qx6{3uv3qrLtCvfqS!29G_ggWHlhIdOBc) z(EH8DxLZGl3s=`_QJV-%M?P8P?L=R5CJ5cH<9b~N16;5#bM~1U&Z1+Mc6sKe#(Pr6 z#bKACEWfwvK0jr>wTO!GZyTKC%;+h+N@8O!bmXK|Ud{wfXm)7yC54qNG6z4F%Hj^k zBazB!0sawxmo*`rlm{#aU%z_GXy05~Q|%)0$uw7xVGgZJc6x>#acIJwf1b-AGmg6IP+t5{>Ce}8fMWC3oTO;3+Ll~8e5aA+@@q_|ikYdVi zz5qi*8CWXI<3JnZ`d7AiyM7x;n`{;(Oz})(#-w^uIW9w@EeAX?*0X|B(4nq=KPfA6o{0kMhbLu{0s$p>;VqRg?)n|TZNm{O)dITG2w;jnDLc5L=wh&< zvZ6RKJ2?(*KShqn`!T8mZ5Q$}U{xA7fbI24s^ILcj*nTrmj{MN;=HIPm}}H?+B!PR zK~JVWf?R((KJfziWQdSd;xifxki0m19R@CVga^LcA)RmD+$_D-yA@U&ObYT>xEAH& zc^D=6>T5Ad)2~nCO2oAf;xeSb!c>x6yT(dPCeTnLzMj>gMEWr|)pJG)XOkK)bWI=X z9C~~*-!KAt@t&LWpbP8(Y*4KWmg!NilkojDD)kK2J5?0X5zZ4;)XA@X)>AcB<_6T+ z&S-=2!el*z2}Ec1`Q@O1!B*4k5dFlV>a1y#@GQm(8*tbAu8=p$aL(HxIWLD>X*o-V|-HR5|hb86V4hEhIb@STZ0M~3xn?^eqTxSrxZKtqV z_k<7wkCN12^f6P}ae4H8N%Ct3oj**sC1p44^reGOYg2#2^M2MxEQ~_Fx&?X0ocy%1 zU-piEfB?no^=1lvvMbnCc}^R4w{buv)e4gnXgsn^*p?*q=ON z=7&qoVfs1M;s#kVx3#w~{sKA(55KpLhYVFsEwxsT`|;pg`xMTk}m zVL3Y|kNv>1!q%m!t(n~5B8e0D+yeD!0_ZWMr3$A%6Q`v-Uj}@LhaQ?9n&Sof0T7EE zFP&W%XK&yq_Cwo?h1wH6**K(ciGS$Jci^4xmJEH*WUg#H2P`xgr>|{4ryh%D ziA-b+`ZjEzaO4~03cNa35H(YxOLv^J#T<+F_T$QvPpF`5hW552E0iDtjQv+X$S53@ z5qxmWZ}V4du;uz~h%OqFf5{wZ-v#iQoGpQ6i!uf2*S^KHhkT8z!F^(yL%rUa8qTy-viA@ zF-x;6av-Hg|B{EqHPq-9L=9bP)iHM{KawkK_vJB_)!N_Y0E(OcR`mXXpl_R$mwzE#- z4>wMWcm6ihJM^tK_g8)==HSM`jW(-&xQ)*rpvd$TK;J^T3Ypx!!=iI9NNHl>D=t{>;beRV4t^(J} z#;4YtVP3RR#}wx)iN%q=GEn)|us<&TB_3cdR`vIUVK*k`yTL53G2Fa8^6_Ady}DN8 zkXiNL+Q9TGX<>>alK328E~u&3wqUuzB(dXlgo&* z{I*mxupc&H1CdYx`?nDeRqdbhIWM)x8(qhcV<11zc7zEqjsV9eJXP0Aypa|*R7lhd zP8PlX7r3!r-<2rWp5*Eix?DrVy*mIr@KYXFIz>_snkotmqrdyBE@Gh!Loe!7m2Lu( zt%f|}io=U6##}xIfE;~rLW%}mMYN+qHNvu z)stQK5%{PZcg@~9vfFw{{+W2D#JaF!dJjgEab%CT?-w4!QQ%o19j%eea;}|qD3t@5 zwNC92qyHDZ)Epk0xN{~xw~+V#M{ebRrKNse`}l%K>5?x&cM><&JJjt!vzY&XPuf^m zh-oyZPce8@p7fMyjM87Ztu8m>6d~Z^7>$?bvBDFPqAoYLOSk{e@#Lj@I^G+I{NZXx z8|3b--chY3lCT7Qe6#}-rm)FKoSNh9bN{fnaC-{8J&^RG$yiE(!9D&b1GjgOz zAA%dMRG@CE)GtxYSMz9_xb;oCA?=)I|4wd+j)`diuedBk*{k2Y;o35N(U!+CeIAta z6usULWCJGzD+A+?6GrefniB3(kzsF>j`5wCbw*JsW^+P;C(ULY6JY#O7sDkbxh z&?|)~gTZ8xt+jT;GQWP>dS5kKG5tsz&wkE(SAswK-kj}p(}`O0Uj8K(QzKcIbP2&z zYIFhAbd4C^CWrpMryb}^k41ZtdtTLn&yKgM8N~G-{&_mZBeWW;R&2p`@Y)p)PXoaN z&?vWXH+}GN4}HHL%I3A=0<^4m!f6tfr!ME67(vNK&s9K72-QqsZaw6;%6i{FsXq5% zpYAEcj4wx;yK8_ZT8Roql+3*Uv_i~HFVMU9qbkcESN9op%t zSox;v&k Windows Security > App and browser protection**. 4. Open the **Prevent users from modifying settings** setting and set it to **Enabled**. Select **OK**. -5. [Deploy the updated GPO as you normally do](/windows/win32/srvnodes/group-policy). +5. [Deploy](/windows/win32/srvnodes/group-policy) the updated GPO as you normally do. ## Hide the App & browser control section @@ -41,7 +41,7 @@ This section can be hidden only by using Group Policy. 2. In the **Group Policy Management Editor** go to **Computer configuration**, select **Policies** and then **Administrative templates**. 3. Expand the tree to **Windows components > Windows Security > App and browser protection**. 4. Open the **Hide the App and browser protection area** setting and set it to **Enabled**. Select **OK**. -5. [Deploy the updated GPO as you normally do](/windows/win32/srvnodes/group-policy). +5. [Deploy](/windows/win32/srvnodes/group-policy) the updated GPO as you normally do. > [!NOTE] > If you hide all sections then **Windows Security** will show a restricted interface, as in the following screenshot: diff --git a/windows/security/operating-system-security/system-security/windows-defender-security-center/wdsc-customize-contact-information.md b/windows/security/operating-system-security/system-security/windows-defender-security-center/wdsc-customize-contact-information.md index 4bf296c839..05fe144f5c 100644 --- a/windows/security/operating-system-security/system-security/windows-defender-security-center/wdsc-customize-contact-information.md +++ b/windows/security/operating-system-security/system-security/windows-defender-security-center/wdsc-customize-contact-information.md @@ -1,7 +1,7 @@ --- title: Customize Windows Security contact information in Windows Security description: Provide information to your employees on how to contact your IT department when a security issue occurs -ms.date: 08/11/2023 +ms.date: 06/27/2024 ms.topic: how-to --- diff --git a/windows/security/operating-system-security/system-security/windows-defender-security-center/wdsc-device-performance-health.md b/windows/security/operating-system-security/system-security/windows-defender-security-center/wdsc-device-performance-health.md index a15b5f11b6..1d94c8edb1 100644 --- a/windows/security/operating-system-security/system-security/windows-defender-security-center/wdsc-device-performance-health.md +++ b/windows/security/operating-system-security/system-security/windows-defender-security-center/wdsc-device-performance-health.md @@ -1,16 +1,14 @@ --- title: Device & performance health in Windows Security description: Use the Device & performance health section to see the status of the machine and note any storage, update, battery, driver, or hardware configuration issues -ms.date: 07/31/2023 +ms.date: 06/27/2024 ms.topic: how-to --- # Device performance and health -The **Device performance & health** section contains information about hardware, devices, and drivers related to the machine. IT administrators and IT pros should reference the appropriate documentation library for the issues they're seeing, such as the [configure the Load and unload device drivers security policy setting](/windows/device-security/security-policy-settings/load-and-unload-device-drivers) and how to [deploy drivers during Windows 10 deployment using Microsoft Configuration Manager](/windows/deployment/deploy-windows-cm/add-drivers-to-a-windows-10-deployment-with-windows-pe-using-configuration-manager). - -The [Windows 10 IT pro troubleshooting article](/windows/client-management/windows-10-support-solutions), and the main [Windows 10 documentation library](/windows/windows-10/) can also be helpful for resolving issues. +The **Device performance & health** section contains information about hardware, devices, and drivers related to the machine. This section can be hidden from users of the machine. This option can be useful if you don't want employees in your organization to see or have access to user-configured options for the features shown in the section. @@ -27,7 +25,7 @@ This section can be hidden only by using Group Policy. 1. In **Group Policy Management Editor**, go to **Computer configuration** and select **Administrative templates**. 1. Expand the tree to **Windows components > Windows Security > Device performance and health**. 1. Open the **Hide the Device performance and health area** setting and set it to **Enabled**. Select **OK**. -1. [Deploy the updated GPO as you normally do](/windows/win32/srvnodes/group-policy). +1. [Deploy](/windows/win32/srvnodes/group-policy) the updated GPO as you normally do. > [!NOTE] > If you hide all sections then **Windows Security** will show a restricted interface, as in the following screenshot: diff --git a/windows/security/operating-system-security/system-security/windows-defender-security-center/wdsc-device-security.md b/windows/security/operating-system-security/system-security/windows-defender-security-center/wdsc-device-security.md index e47d41fc91..1e3f8737fc 100644 --- a/windows/security/operating-system-security/system-security/windows-defender-security-center/wdsc-device-security.md +++ b/windows/security/operating-system-security/system-security/windows-defender-security-center/wdsc-device-security.md @@ -1,7 +1,7 @@ --- title: Device security in Windows Security description: Use the Device security section to manage security built into your device, including Virtualization-based security. -ms.date: 08/11/2023 +ms.date: 06/27/2024 ms.topic: how-to --- @@ -19,10 +19,10 @@ You can choose to hide the entire section by using Group Policy. The section won > You must have Windows 10, version 1803 or later. The ADMX/ADML template files for earlier versions of Windows do not include these Group Policy settings. 1. On your Group Policy management machine, open the [Group Policy Management Console](/previous-versions/windows/it-pro/windows-server-2008-R2-and-2008/cc731212(v=ws.11)), right-click the Group Policy Object you want to configure and select **Edit**. -2. In **Group Policy Management Editor**, go to **Computer configuration** and then select **Administrative templates**. -3. Expand the tree to **Windows components** > **Windows Security** > **Device security**. -4. Open the **Hide the Device security area** setting and set it to **Enabled**. Select **OK**. -5. [Deploy the updated GPO as you normally do](/windows/win32/srvnodes/group-policy). +1. In **Group Policy Management Editor**, go to **Computer configuration** and then select **Administrative templates**. +1. Expand the tree to **Windows components** > **Windows Security** > **Device security**. +1. Open the **Hide the Device security area** setting and set it to **Enabled**. Select **OK**. +1. [Deploy](/windows/win32/srvnodes/group-policy) the updated GPO as you normally do. > [!NOTE] > If you hide all sections then **Windows Security** will show a restricted interface, as in the following screenshot: @@ -37,17 +37,17 @@ If you don't want users to be able to select the **Clear TPM** button in **Windo > You must have Windows 10, version 1809 or later. The ADMX/ADML template files for earlier versions of Windows do not include these Group Policy settings. 1. On your Group Policy management computer, open the [Group Policy Management Console](/previous-versions/windows/it-pro/windows-server-2008-R2-and-2008/cc731212(v=ws.11)), right-click the Group Policy Object you want to configure and select **Edit**. -2. In **Group Policy Management Editor**, go to **Computer configuration** and then select **Administrative templates**. -3. Expand the tree to **Windows components** > **Windows Security** > **Device security**. -4. Open the **Disable the Clear TPM button** setting and set it to **Enabled**. Select **OK**. -5. [Deploy the updated GPO as you normally do](/windows/win32/srvnodes/group-policy). +1. In **Group Policy Management Editor**, go to **Computer configuration** and then select **Administrative templates**. +1. Expand the tree to **Windows components** > **Windows Security** > **Device security**. +1. Open the **Disable the Clear TPM button** setting and set it to **Enabled**. Select **OK**. +1. [Deploy](/windows/win32/srvnodes/group-policy) the updated GPO as you normally do. ## Hide the TPM Firmware Update recommendation If you don't want users to see the recommendation to update TPM firmware, you can disable it. 1. On your Group Policy management computer, open the [Group Policy Management Console](/previous-versions/windows/it-pro/windows-server-2008-R2-and-2008/cc731212(v=ws.11)), right-click the Group Policy Object you want to configure and select **Edit**. -2. In **Group Policy Management Editor**, go to **Computer configuration** and then select **Administrative templates**. -3. Expand the tree to **Windows components** > **Windows Security** > **Device security**. -4. Open the **Hide the TPM Firmware Update recommendation** setting and set it to **Enabled**. Select **OK**. -5. [Deploy the updated GPO as you normally do](/windows/win32/srvnodes/group-policy). +1. In **Group Policy Management Editor**, go to **Computer configuration** and then select **Administrative templates**. +1. Expand the tree to **Windows components** > **Windows Security** > **Device security**. +1. Open the **Hide the TPM Firmware Update recommendation** setting and set it to **Enabled**. Select **OK**. +1. [Deploy](/windows/win32/srvnodes/group-policy) the updated GPO as you normally do. diff --git a/windows/security/operating-system-security/system-security/windows-defender-security-center/wdsc-family-options.md b/windows/security/operating-system-security/system-security/windows-defender-security-center/wdsc-family-options.md index 50f38d64dd..2304702eff 100644 --- a/windows/security/operating-system-security/system-security/windows-defender-security-center/wdsc-family-options.md +++ b/windows/security/operating-system-security/system-security/windows-defender-security-center/wdsc-family-options.md @@ -1,11 +1,10 @@ --- title: Family options in Windows Security description: Learn how to hide the Family options section of Windows Security for enterprise environments. Family options aren't intended for business environments. -ms.date: 08/11/2023 +ms.date: 06/27/2024 ms.topic: how-to --- - # Family options The **Family options** section contains links to settings and further information for parents of a Windows PC. It isn't intended for enterprise or business environments. @@ -27,7 +26,7 @@ This section can be hidden only by using Group Policy. 1. In **Group Policy Management Editor**, go to **Computer configuration** and select **Administrative templates**. 1. Expand the tree to **Windows components > Windows Security > Family options**. 1. Open the **Hide the Family options area** setting and set it to **Enabled**. Select **OK**. -1. [Deploy the updated GPO as you normally do](/windows/win32/srvnodes/group-policy). +1. [Deploy](/windows/win32/srvnodes/group-policy) the updated GPO as you normally do. > [!NOTE] > If you hide all sections then **Windows Security** will show a restricted interface, as in the following screenshot: diff --git a/windows/security/operating-system-security/system-security/windows-defender-security-center/wdsc-firewall-network-protection.md b/windows/security/operating-system-security/system-security/windows-defender-security-center/wdsc-firewall-network-protection.md index 0070445c0d..7d4b3f13d0 100644 --- a/windows/security/operating-system-security/system-security/windows-defender-security-center/wdsc-firewall-network-protection.md +++ b/windows/security/operating-system-security/system-security/windows-defender-security-center/wdsc-firewall-network-protection.md @@ -1,7 +1,7 @@ --- title: Firewall and network protection in Windows Security description: Use the Firewall & network protection section to see the status of and make changes to firewalls and network connections for the machine. -ms.date: 08/11/2023 +ms.date: 06/27/2024 ms.topic: how-to --- @@ -24,7 +24,7 @@ This section can be hidden only by using Group Policy. 1. In **Group Policy Management Editor**, go to **Computer configuration** and select **Administrative templates**. 1. Expand the tree to **Windows components > Windows Security > Firewall and network protection**. 1. Open the **Hide the Firewall and network protection area** setting and set it to **Enabled**. Select **OK**. -1. Deploy the updated GPO as you normally do. +1. [Deploy](/windows/win32/srvnodes/group-policy) the updated GPO as you normally do. > [!NOTE] > If you hide all sections then **Windows Security** will show a restricted interface, as in the following screenshot: diff --git a/windows/security/operating-system-security/system-security/windows-defender-security-center/wdsc-hide-notifications.md b/windows/security/operating-system-security/system-security/windows-defender-security-center/wdsc-hide-notifications.md index 5e330d95a0..623cee353d 100644 --- a/windows/security/operating-system-security/system-security/windows-defender-security-center/wdsc-hide-notifications.md +++ b/windows/security/operating-system-security/system-security/windows-defender-security-center/wdsc-hide-notifications.md @@ -1,7 +1,7 @@ --- title: Hide notifications from Windows Security description: Prevent Windows Security notifications from appearing on user endpoints -ms.date: 07/31/2023 +ms.date: 06/27/2024 ms.topic: how-to --- @@ -34,7 +34,7 @@ These notifications can be hidden only by using Group Policy. 1. In **Group Policy Management Editor**, go to **Computer configuration** and select **Administrative templates**. 1. Expand the tree to **Windows components > Windows Security > Notifications**. For Windows 10 version 1803 and below, the path would be **Windows components > Windows Defender Security Center > Notifications** 1. Open the **Hide non-critical notifications** setting and set it to **Enabled**. Select **OK**. -1. [Deploy the updated GPO as you normally do](/windows/win32/srvnodes/group-policy). +1. [Deploy](/windows/win32/srvnodes/group-policy) the updated GPO as you normally do. ## Use Group Policy to hide all notifications @@ -53,7 +53,7 @@ These notifications can be hidden only by using Group Policy. > For Windows 10 version 2004 and above the path would be **Windows components > Windows Security > Notifications**. 1. Open the **Hide all notifications** setting and set it to **Enabled**. Select **OK**. -1. [Deploy the updated GPO as you normally do](/windows/win32/srvnodes/group-policy). +1. [Deploy](/windows/win32/srvnodes/group-policy) the updated GPO as you normally do. > [!NOTE] > You can use the following registry key and DWORD value to **Hide all notifications**. diff --git a/windows/security/operating-system-security/system-security/windows-defender-security-center/wdsc-virus-threat-protection.md b/windows/security/operating-system-security/system-security/windows-defender-security-center/wdsc-virus-threat-protection.md index f48a985759..6014c9acfd 100644 --- a/windows/security/operating-system-security/system-security/windows-defender-security-center/wdsc-virus-threat-protection.md +++ b/windows/security/operating-system-security/system-security/windows-defender-security-center/wdsc-virus-threat-protection.md @@ -1,15 +1,13 @@ --- title: Virus and threat protection in Windows Security description: Use the Virus & threat protection section to see and configure Microsoft Defender Antivirus, Controlled folder access, and 3rd-party AV products. -ms.date: 08/11/2023 -ms.topic: conceptual +ms.date: 06/27/2024 +ms.topic: how-to --- # Virus and threat protection -The **Virus & threat protection** section contains information and settings for antivirus protection from Microsoft Defender Antivirus and third-party AV products. - -In Windows 10, version 1803, this section also contains information and settings for ransomware protection and recovery. These settings include Controlled folder access settings to prevent unknown apps from changing files in protected folders, plus Microsoft OneDrive configuration to help you recover from a ransomware attack. This area also notifies users and provides recovery instructions if there's a ransomware attack. +The **Virus & threat protection** section contains information and settings for antivirus protection from Microsoft Defender Antivirus and third-party AV products. These settings include Controlled folder access settings to prevent unknown apps from changing files in protected folders, plus Microsoft OneDrive configuration to help you recover from a ransomware attack. This area also notifies users and provides recovery instructions if there's a ransomware attack. IT administrators and IT pros can get more configuration information from these articles: @@ -35,7 +33,7 @@ This section can be hidden only by using Group Policy. 1. In **Group Policy Management Editor**, go to **Computer configuration** and select **Administrative templates**. 1. Expand the tree to **Windows components > Windows Security > Virus and threat protection**. 1. Open the **Hide the Virus and threat protection area** setting and set it to **Enabled**. Select **OK**. -1. [Deploy the updated GPO as you normally do](/windows/win32/srvnodes/group-policy). +1. [Deploy](/windows/win32/srvnodes/group-policy) the updated GPO as you normally do. > [!NOTE] > If you hide all sections then **Windows Security** will show a restricted interface, as in the following screenshot: @@ -55,4 +53,4 @@ This area can be hidden only by using Group Policy. 1. In **Group Policy Management Editor**, go to **Computer configuration** and select **Administrative templates**. 1. Expand the tree to **Windows components > Windows Security > Virus and threat protection**. 1. Open the **Hide the Ransomware data recovery area** setting and set it to **Enabled**. Select **OK**. -1. [Deploy the updated GPO as you normally do](/windows/win32/srvnodes/group-policy). +1. [Deploy](/windows/win32/srvnodes/group-policy) the updated GPO as you normally do. diff --git a/windows/security/operating-system-security/system-security/windows-defender-security-center/windows-defender-security-center.md b/windows/security/operating-system-security/system-security/windows-defender-security-center/windows-defender-security-center.md index 2feb4cecb2..6b723cef2e 100644 --- a/windows/security/operating-system-security/system-security/windows-defender-security-center/windows-defender-security-center.md +++ b/windows/security/operating-system-security/system-security/windows-defender-security-center/windows-defender-security-center.md @@ -1,21 +1,17 @@ --- title: Windows Security description: Windows Security brings together common Windows security features into one place. -ms.date: 08/11/2023 +ms.date: 06/27/2024 ms.topic: conceptual --- # Windows Security -This library describes **Windows Security** settings, and provides information on configuring certain features, including: +This topic describes **Windows Security** settings, and provides information on configuring certain features, including: - [Showing and customizing contact information](wdsc-customize-contact-information.md) - [Hiding notifications](wdsc-hide-notifications.md) -In Windows 10, version 1709 and later, the settings also show information from third-party antivirus and firewall apps. - -In Windows 10, version 1803, the settings have two new areas: **Account protection** and **Device security**. - ![Screenshot of the Windows Security showing that the device is protected and five icons for each of the features.](images/security-center-home.png) > [!NOTE] @@ -52,7 +48,7 @@ For more information about each section, options for configuring the sections, a ![Screenshot of the Start menu showing the results of a search for the Windows Security, the first option with a large shield symbol is selected.](images/security-center-start-menu.png) -- Open an area from Windows **Settings**. +- Open an area from Windows **Settings** > **Privacy & security** > **Windows Security**. ![Screenshot of Windows Settings showing the different areas available in the Windows Security.](images/settings-windows-defender-security-center-areas.png) From 05e428cdb29f7d77a389025f770aefd2db73d904 Mon Sep 17 00:00:00 2001 From: "Daniel H. Brown" <32883970+DHB-MSFT@users.noreply.github.com> Date: Thu, 27 Jun 2024 14:47:38 -0700 Subject: [PATCH 61/99] Add callout about Server to Mail Sync section --- ...dows-operating-system-components-to-microsoft-services.md | 5 ++++- 1 file changed, 4 insertions(+), 1 deletion(-) diff --git a/windows/privacy/manage-connections-from-windows-operating-system-components-to-microsoft-services.md b/windows/privacy/manage-connections-from-windows-operating-system-components-to-microsoft-services.md index 5618158898..3566b7a050 100644 --- a/windows/privacy/manage-connections-from-windows-operating-system-components-to-microsoft-services.md +++ b/windows/privacy/manage-connections-from-windows-operating-system-components-to-microsoft-services.md @@ -7,7 +7,7 @@ ms.localizationpriority: high author: DHB-MSFT ms.author: danbrown manager: laurawi -ms.date: 03/07/2016 +ms.date: 06/27/2024 ms.topic: reference --- @@ -537,6 +537,9 @@ To turn off Live Tiles: ### 11. Mail synchronization +> [!NOTE] +> The Mail app and mail synchronization aren't available on Windows Server. + To turn off mail synchronization for Microsoft Accounts that are configured on a device: - In **Settings** > **Accounts** > **Your email and accounts**, remove any connected Microsoft Accounts. From e6a8a95631853f64d45e913a861fef3017d3b972 Mon Sep 17 00:00:00 2001 From: "Vinay Pamnani (from Dev Box)" Date: Thu, 27 Jun 2024 15:50:33 -0600 Subject: [PATCH 62/99] Acro-fyxes --- .../wdsc-account-protection.md | 5 ++--- .../wdsc-app-browser-control.md | 8 +++---- .../wdsc-customize-contact-information.md | 20 ++++++++--------- .../wdsc-device-performance-health.md | 4 ++-- .../wdsc-device-security.md | 8 +++---- .../wdsc-family-options.md | 4 ++-- .../wdsc-firewall-network-protection.md | 6 ++--- .../wdsc-hide-notifications.md | 22 +++++++++---------- .../wdsc-virus-threat-protection.md | 10 ++++----- .../windows-defender-security-center.md | 6 ++--- 10 files changed, 46 insertions(+), 47 deletions(-) diff --git a/windows/security/operating-system-security/system-security/windows-defender-security-center/wdsc-account-protection.md b/windows/security/operating-system-security/system-security/windows-defender-security-center/wdsc-account-protection.md index 6068b7aeaf..ae3cb0475f 100644 --- a/windows/security/operating-system-security/system-security/windows-defender-security-center/wdsc-account-protection.md +++ b/windows/security/operating-system-security/system-security/windows-defender-security-center/wdsc-account-protection.md @@ -5,7 +5,6 @@ ms.date: 06/27/2024 ms.topic: how-to --- - # Account protection The **Account protection** section contains information and settings for account protection and sign-in. You can get more information about these capabilities from the following list: @@ -14,7 +13,7 @@ The **Account protection** section contains information and settings for account - [Windows Hello for Business](../../../identity-protection/hello-for-business/index.md) - [Lock your Windows 10 PC automatically when you step away from it](https://support.microsoft.com/help/4028111/windows-lock-your-windows-10-pc-automatically-when-you-step-away-from) -You can also choose to hide the section from users of the device, if you don't want your employees to access or view user-configured options for these features. +You can also choose to hide the section from users of the device, if you don't want your users to access or view user-configured options for these features. ## Hide the Account protection section @@ -25,7 +24,7 @@ You can only configure these settings by using Group Policy. > [!IMPORTANT] > You must have Windows 10, version 1803 or later. The ADMX/ADML template files for earlier versions of Windows do not include these Group Policy settings. -1. On your Group Policy management machine, open the [Group Policy Management Console](/previous-versions/windows/it-pro/windows-server-2008-R2-and-2008/cc731212(v=ws.11)), right-click the Group Policy Object you want to configure and select **Edit**. +1. On your Group Policy management machine, open the [Group Policy Management Console](/previous-versions/windows/it-pro/windows-server-2008-R2-and-2008/cc731212(v=ws.11)). Right-click the Group Policy Object (GPO) you want to configure and select **Edit**. 1. In the **Group Policy Management Editor**, go to **Computer configuration** and select **Administrative templates**. 1. Expand the tree to **Windows components > Windows Security > Account protection**. 1. Open the **Hide the Account protection area** setting and set it to **Enabled**. Select **OK**. diff --git a/windows/security/operating-system-security/system-security/windows-defender-security-center/wdsc-app-browser-control.md b/windows/security/operating-system-security/system-security/windows-defender-security-center/wdsc-app-browser-control.md index f09525a59f..ff0ffba791 100644 --- a/windows/security/operating-system-security/system-security/windows-defender-security-center/wdsc-app-browser-control.md +++ b/windows/security/operating-system-security/system-security/windows-defender-security-center/wdsc-app-browser-control.md @@ -11,18 +11,18 @@ The **App and browser control** section contains information and settings for Wi In Windows 10, version 1709 and later, the section also provides configuration options for Exploit protection. You can prevent users from modifying these specific options with Group Policy. IT administrators can get more information at [Exploit protection](/microsoft-365/security/defender-endpoint/exploit-protection). -You can also choose to hide the section from users of the machine. This option can be useful if you don't want employees in your organization to see or have access to user-configured options for the features shown in the section. +You can also choose to hide the section from users of the machine. This option can be useful if you don't want users in your organization to see or have access to user-configured options for the features shown in the section. ## Prevent users from making changes to the Exploit protection area in the App & browser control section -You can prevent users from modifying settings in the Exploit protection area. The settings will be either greyed out or not appear if you enable this setting. Users will still have access to other settings in the App & browser control section, such as those settings for Windows Defender SmartScreen, unless those options have been configured separately. +You can prevent users from modifying settings in the Exploit protection area. The settings are either greyed out or don't appear if you enable this setting. Users still have access to other settings in the App & browser control section, such as those settings for Windows Defender SmartScreen, unless those options are separately. You can only prevent users from modifying Exploit protection settings by using Group Policy. > [!IMPORTANT] > You must have Windows 10, version 1709 or later. The ADMX/ADML template files for earlier versions of Windows do not include these Group Policy settings. -1. On your Group Policy management machine, open the [Group Policy Management Console](/previous-versions/windows/it-pro/windows-server-2008-R2-and-2008/cc731212(v=ws.11)), right-click the Group Policy Object you want to configure and select **Edit**. +1. On your Group Policy management machine, open the [Group Policy Management Console](/previous-versions/windows/it-pro/windows-server-2008-R2-and-2008/cc731212(v=ws.11)). Right-click the Group Policy Object (GPO) you want to configure and select **Edit**. 2. In the **Group Policy Management Editor**, go to **Computer configuration**, select **Policies** and then **Administrative templates**. 3. Expand the tree to **Windows components > Windows Security > App and browser protection**. 4. Open the **Prevent users from modifying settings** setting and set it to **Enabled**. Select **OK**. @@ -37,7 +37,7 @@ This section can be hidden only by using Group Policy. > [!IMPORTANT] > You must have Windows 10, version 1709 or later. The ADMX/ADML template files for earlier versions of Windows do not include these Group Policy settings. -1. On your Group Policy management machine, open the [Group Policy Management Console](/previous-versions/windows/it-pro/windows-server-2008-R2-and-2008/cc731212(v=ws.11)), right-click the Group Policy Object you want to configure and select **Edit**. +1. On your Group Policy management machine, open the [Group Policy Management Console](/previous-versions/windows/it-pro/windows-server-2008-R2-and-2008/cc731212(v=ws.11)). Right-click the Group Policy Object you want to configure and select **Edit**. 2. In the **Group Policy Management Editor** go to **Computer configuration**, select **Policies** and then **Administrative templates**. 3. Expand the tree to **Windows components > Windows Security > App and browser protection**. 4. Open the **Hide the App and browser protection area** setting and set it to **Enabled**. Select **OK**. diff --git a/windows/security/operating-system-security/system-security/windows-defender-security-center/wdsc-customize-contact-information.md b/windows/security/operating-system-security/system-security/windows-defender-security-center/wdsc-customize-contact-information.md index 05fe144f5c..aa892ac49b 100644 --- a/windows/security/operating-system-security/system-security/windows-defender-security-center/wdsc-customize-contact-information.md +++ b/windows/security/operating-system-security/system-security/windows-defender-security-center/wdsc-customize-contact-information.md @@ -1,6 +1,6 @@ --- title: Customize Windows Security contact information in Windows Security -description: Provide information to your employees on how to contact your IT department when a security issue occurs +description: Provide information to your users on how to contact your IT department when a security issue occurs ms.date: 06/27/2024 ms.topic: how-to --- @@ -11,7 +11,7 @@ You can add information about your organization in a contact card in **Windows S ![The Windows Security custom fly-out.](images/security-center-custom-flyout.png) -This information will also be shown in some enterprise-specific notifications (including notifications for the [Block at first sight feature](/microsoft-365/security/defender-endpoint/configure-block-at-first-sight-microsoft-defender-antivirus), and [potentially unwanted applications](/microsoft-365/security/defender-endpoint/detect-block-potentially-unwanted-apps-microsoft-defender-antivirus)). +This information is shown in some enterprise-specific notifications (including notifications for the [Block at first sight feature](/microsoft-365/security/defender-endpoint/configure-block-at-first-sight-microsoft-defender-antivirus), and [potentially unwanted applications](/microsoft-365/security/defender-endpoint/detect-block-potentially-unwanted-apps-microsoft-defender-antivirus)). Users can select the displayed information to initiate a support request: @@ -27,20 +27,20 @@ You must have Windows 10, version 1709 or later. The ADMX/ADML template files fo There are two stages to using the contact card and customized notifications. First, you have to enable the contact card or custom notifications (or both), and then you must specify at least a name for your organization and one piece of contact information. -1. On your Group Policy management machine, open the [Group Policy Management Console](/previous-versions/windows/it-pro/windows-server-2008-R2-and-2008/cc731212(v=ws.11)), right-click the Group Policy Object you want to configure and select **Edit**. -2. In the **Group Policy Management Editor**, go to **Computer configuration** and select **Administrative templates**. -3. Expand the tree to **Windows components > Windows Security > Enterprise Customization**. -4. Enable the contact card and the customized notifications by configuring two separate Group Policy settings. They'll both use the same source of information (explained in Steps 5 and 6). You can enable both, or select one or the other: +1. On your Group Policy management machine, open the [Group Policy Management Console](/previous-versions/windows/it-pro/windows-server-2008-R2-and-2008/cc731212(v=ws.11)). Right-click the Group Policy Object you want to configure and select **Edit**. +1. In the **Group Policy Management Editor**, go to **Computer configuration** and select **Administrative templates**. +1. Expand the tree to **Windows components > Windows Security > Enterprise Customization**. +1. Enable the contact card and the customized notifications by configuring two separate Group Policy settings. They both use the same source of information (explained in Steps 5 and 6). You can enable both, or select one or the other: 1. To enable the contact card, open the **Configure customized contact information** setting and set it to **Enabled**. Select **OK**. > [!NOTE] > This can only be done in Group Policy. - 2. To enable the customized notifications, open the **Configure customized notifications** setting and set it to **Enabled**. Select **OK**. + 1. To enable the customized notifications, open the **Configure customized notifications** setting and set it to **Enabled**. Select **OK**. -5. After you've enabled the contact card or the customized notifications (or both), you must configure the **Specify contact company name** to **Enabled**. Enter your company or organization's name in the field in the **Options** section. Select **OK**. -6. To ensure the custom notifications or contact card appear, you must also configure at least one of the following settings. Open the setting, select **Enabled**, and then add the contact information in the field under **Options**: +1. After you enable the contact card or the customized notifications (or both), you must configure the **Specify contact company name** to **Enabled**. Enter your company or organization's name in the field in the **Options** section. Select **OK**. +1. To ensure the custom notifications or contact card appear, you must also configure at least one of the following settings. Open the setting, select **Enabled**, and then add the contact information in the field under **Options**: 1. **Specify contact email address or Email ID** 2. **Specify contact phone number or Skype ID** @@ -49,7 +49,7 @@ There are two stages to using the contact card and customized notifications. Fir > [!NOTE] > If you enable **Configure customized notifications** and **Specify contact website** policies, the contact website must begin with `http:` or `https:` (for example, `https://contoso.com/help`) to allow the user to interact with the notification and navigate to the specified URL. -7. Select **OK** after you configure each setting to save your changes. +1. Select **OK** after you configure each setting to save your changes. To enable the customized notifications and add the contact information in Intune, see these articles: diff --git a/windows/security/operating-system-security/system-security/windows-defender-security-center/wdsc-device-performance-health.md b/windows/security/operating-system-security/system-security/windows-defender-security-center/wdsc-device-performance-health.md index 1d94c8edb1..652bd443dd 100644 --- a/windows/security/operating-system-security/system-security/windows-defender-security-center/wdsc-device-performance-health.md +++ b/windows/security/operating-system-security/system-security/windows-defender-security-center/wdsc-device-performance-health.md @@ -10,7 +10,7 @@ ms.topic: how-to The **Device performance & health** section contains information about hardware, devices, and drivers related to the machine. -This section can be hidden from users of the machine. This option can be useful if you don't want employees in your organization to see or have access to user-configured options for the features shown in the section. +This section can be hidden from users of the machine. This option can be useful if you don't want users in your organization to see or have access to user-configured options for the features shown in the section. ## Hide the Device performance & health section @@ -21,7 +21,7 @@ This section can be hidden only by using Group Policy. > [!IMPORTANT] > You must have Windows 10, version 1709 or later. The ADMX/ADML template files for earlier versions of Windows do not include these Group Policy settings. -1. On your Group Policy management machine, open the [Group Policy Management Console](/previous-versions/windows/it-pro/windows-server-2008-R2-and-2008/cc731212(v=ws.11)), right-click the Group Policy Object you want to configure and select **Edit**. +1. On your Group Policy management machine, open the [Group Policy Management Console](/previous-versions/windows/it-pro/windows-server-2008-R2-and-2008/cc731212(v=ws.11)). Right-click the Group Policy Object (GPO) you want to configure and select **Edit**. 1. In **Group Policy Management Editor**, go to **Computer configuration** and select **Administrative templates**. 1. Expand the tree to **Windows components > Windows Security > Device performance and health**. 1. Open the **Hide the Device performance and health area** setting and set it to **Enabled**. Select **OK**. diff --git a/windows/security/operating-system-security/system-security/windows-defender-security-center/wdsc-device-security.md b/windows/security/operating-system-security/system-security/windows-defender-security-center/wdsc-device-security.md index 1e3f8737fc..3323324a97 100644 --- a/windows/security/operating-system-security/system-security/windows-defender-security-center/wdsc-device-security.md +++ b/windows/security/operating-system-security/system-security/windows-defender-security-center/wdsc-device-security.md @@ -9,7 +9,7 @@ ms.topic: how-to The **Device security** section contains information and settings for built-in device security. -You can choose to hide the section from users of the machine. This option can be useful if you don't want employees in your organization to see or have access to user-configured options for the features shown in the section. +You can choose to hide the section from users of the machine. This option can be useful if you don't want users in your organization to see or have access to user-configured options for the features shown in the section. ## Hide the Device security section @@ -18,7 +18,7 @@ You can choose to hide the entire section by using Group Policy. The section won > [!IMPORTANT] > You must have Windows 10, version 1803 or later. The ADMX/ADML template files for earlier versions of Windows do not include these Group Policy settings. -1. On your Group Policy management machine, open the [Group Policy Management Console](/previous-versions/windows/it-pro/windows-server-2008-R2-and-2008/cc731212(v=ws.11)), right-click the Group Policy Object you want to configure and select **Edit**. +1. On your Group Policy management machine, open the [Group Policy Management Console](/previous-versions/windows/it-pro/windows-server-2008-R2-and-2008/cc731212(v=ws.11)). Right-click the Group Policy Object (GPO) you want to configure and select **Edit**. 1. In **Group Policy Management Editor**, go to **Computer configuration** and then select **Administrative templates**. 1. Expand the tree to **Windows components** > **Windows Security** > **Device security**. 1. Open the **Hide the Device security area** setting and set it to **Enabled**. Select **OK**. @@ -36,7 +36,7 @@ If you don't want users to be able to select the **Clear TPM** button in **Windo > [!IMPORTANT] > You must have Windows 10, version 1809 or later. The ADMX/ADML template files for earlier versions of Windows do not include these Group Policy settings. -1. On your Group Policy management computer, open the [Group Policy Management Console](/previous-versions/windows/it-pro/windows-server-2008-R2-and-2008/cc731212(v=ws.11)), right-click the Group Policy Object you want to configure and select **Edit**. +1. On your Group Policy management computer, open the [Group Policy Management Console](/previous-versions/windows/it-pro/windows-server-2008-R2-and-2008/cc731212(v=ws.11)). Right-click the Group Policy Object you want to configure and select **Edit**. 1. In **Group Policy Management Editor**, go to **Computer configuration** and then select **Administrative templates**. 1. Expand the tree to **Windows components** > **Windows Security** > **Device security**. 1. Open the **Disable the Clear TPM button** setting and set it to **Enabled**. Select **OK**. @@ -46,7 +46,7 @@ If you don't want users to be able to select the **Clear TPM** button in **Windo If you don't want users to see the recommendation to update TPM firmware, you can disable it. -1. On your Group Policy management computer, open the [Group Policy Management Console](/previous-versions/windows/it-pro/windows-server-2008-R2-and-2008/cc731212(v=ws.11)), right-click the Group Policy Object you want to configure and select **Edit**. +1. On your Group Policy management computer, open the [Group Policy Management Console](/previous-versions/windows/it-pro/windows-server-2008-R2-and-2008/cc731212(v=ws.11)). Right-click the Group Policy Object you want to configure and select **Edit**. 1. In **Group Policy Management Editor**, go to **Computer configuration** and then select **Administrative templates**. 1. Expand the tree to **Windows components** > **Windows Security** > **Device security**. 1. Open the **Hide the TPM Firmware Update recommendation** setting and set it to **Enabled**. Select **OK**. diff --git a/windows/security/operating-system-security/system-security/windows-defender-security-center/wdsc-family-options.md b/windows/security/operating-system-security/system-security/windows-defender-security-center/wdsc-family-options.md index 2304702eff..9c92b794d3 100644 --- a/windows/security/operating-system-security/system-security/windows-defender-security-center/wdsc-family-options.md +++ b/windows/security/operating-system-security/system-security/windows-defender-security-center/wdsc-family-options.md @@ -11,7 +11,7 @@ The **Family options** section contains links to settings and further informatio Home users can learn more at the [Help protection your family online in Windows Security article at support.microsoft.com](https://support.microsoft.com/help/4013209/windows-10-protect-your-family-online-in-windows-defender) -This section can be hidden from users of the machine. This option can be useful if you don't want employees in your organization to see or have access to this section. +This section can be hidden from users of the machine. This option can be useful if you don't want users in your organization to see or have access to this section. ## Hide the Family options section @@ -22,7 +22,7 @@ This section can be hidden only by using Group Policy. > [!IMPORTANT] > You must have Windows 10, version 1709 or later. The ADMX/ADML template files for earlier versions of Windows do not include these Group Policy settings. -1. On your Group Policy management machine, open the [Group Policy Management Console](/previous-versions/windows/it-pro/windows-server-2008-R2-and-2008/cc731212(v=ws.11)), right-click the Group Policy Object you want to configure and select **Edit**. +1. On your Group Policy management machine, open the [Group Policy Management Console](/previous-versions/windows/it-pro/windows-server-2008-R2-and-2008/cc731212(v=ws.11)). Right-click the Group Policy Object (GPO) you want to configure and select **Edit**. 1. In **Group Policy Management Editor**, go to **Computer configuration** and select **Administrative templates**. 1. Expand the tree to **Windows components > Windows Security > Family options**. 1. Open the **Hide the Family options area** setting and set it to **Enabled**. Select **OK**. diff --git a/windows/security/operating-system-security/system-security/windows-defender-security-center/wdsc-firewall-network-protection.md b/windows/security/operating-system-security/system-security/windows-defender-security-center/wdsc-firewall-network-protection.md index 7d4b3f13d0..e6e8967d86 100644 --- a/windows/security/operating-system-security/system-security/windows-defender-security-center/wdsc-firewall-network-protection.md +++ b/windows/security/operating-system-security/system-security/windows-defender-security-center/wdsc-firewall-network-protection.md @@ -7,9 +7,9 @@ ms.topic: how-to # Firewall and network protection -The **Firewall & network protection** section contains information about the firewalls and network connections used by the machine, including the status of Windows Defender Firewall and any other non-Microsoft firewalls. IT administrators and IT pros can get configuration guidance from the [Windows Defender Firewall with Advanced Security documentation library](../../network-security/windows-firewall/index.md). +The **Firewall & network protection** section contains information about the firewalls and network connections used by the machine, including the status of Windows Firewall and any other non-Microsoft firewalls. IT administrators and IT pros can get configuration guidance from the [Windows Firewall with Advanced Security documentation library](../../network-security/windows-firewall/index.md). -This section can be hidden from users of the machine. This information is useful if you don't want employees in your organization to see or have access to user-configured options for the features shown in the section. +This section can be hidden from users of the machine. This information is useful if you don't want users in your organization to see or have access to user-configured options for the features shown in the section. ## Hide the Firewall & network protection section @@ -20,7 +20,7 @@ This section can be hidden only by using Group Policy. > [!IMPORTANT] > You must have Windows 10, version 1709 or later. The ADMX/ADML template files for earlier versions of Windows do not include these Group Policy settings. -1. On your Group Policy management machine, open the Group Policy Management Console, right-click the Group Policy Object you want to configure and select **Edit**. +1. On your Group Policy management machine, open the Group Policy Management Console. Right-click the Group Policy Object (GPO) you want to configure and select **Edit**. 1. In **Group Policy Management Editor**, go to **Computer configuration** and select **Administrative templates**. 1. Expand the tree to **Windows components > Windows Security > Firewall and network protection**. 1. Open the **Hide the Firewall and network protection area** setting and set it to **Enabled**. Select **OK**. diff --git a/windows/security/operating-system-security/system-security/windows-defender-security-center/wdsc-hide-notifications.md b/windows/security/operating-system-security/system-security/windows-defender-security-center/wdsc-hide-notifications.md index 623cee353d..86e41f335e 100644 --- a/windows/security/operating-system-security/system-security/windows-defender-security-center/wdsc-hide-notifications.md +++ b/windows/security/operating-system-security/system-security/windows-defender-security-center/wdsc-hide-notifications.md @@ -9,18 +9,18 @@ ms.topic: how-to **Windows Security** is used by many Windows security features to provide notifications about the health and security of the machine. These include notifications about firewalls, antivirus products, Windows Defender SmartScreen, and others. -In some cases, it may not be appropriate to show these notifications, for example, if you want to hide regular status updates, or if you want to hide all notifications to the employees in your organization. +In some cases, it may not be appropriate to show these notifications, for example, if you want to hide regular status updates, or if you want to hide all notifications to the users in your organization. There are two levels to hiding notifications: -1. Hide non-critical notifications, such as regular updates about the number of scans Microsoft Defender Antivirus ran in the past week -2. Hide all notifications +1. Hide noncritical notifications, such as regular updates about the number of scans Microsoft Defender Antivirus ran in the past week +1. Hide all notifications If you set **Hide all notifications** to **Enabled**, changing the **Hide non-critical notifications** setting has no effect. You can only use Group Policy to change these settings. -## Use Group Policy to hide non-critical notifications +## Use Group Policy to hide noncritical notifications You can hide notifications that describe regular events related to the health and security of the machine. These notifications are the ones that don't require an action from the machine's user. It can be useful to hide these notifications if you find they're too numerous or you have other status reporting on a larger scale (such as Windows Update for Business reports or Microsoft Configuration Manager reporting). @@ -30,7 +30,7 @@ These notifications can be hidden only by using Group Policy. > You must have Windows 10, version 1903 or higher. The ADMX/ADML template files for earlier versions of Windows do not include these Group Policy settings. 1. Download the latest [Administrative Templates (.admx) for Windows 10, v2004](https://www.microsoft.com/download/101445). -1. On your Group Policy management machine, open the [Group Policy Management Console](/previous-versions/windows/it-pro/windows-server-2008-R2-and-2008/cc731212(v=ws.11)), right-click the Group Policy Object you want to configure and select **Edit**. +1. On your Group Policy management machine, open the [Group Policy Management Console](/previous-versions/windows/it-pro/windows-server-2008-R2-and-2008/cc731212(v=ws.11)). Right-click the Group Policy Object (GPO) you want to configure and select **Edit**. 1. In **Group Policy Management Editor**, go to **Computer configuration** and select **Administrative templates**. 1. Expand the tree to **Windows components > Windows Security > Notifications**. For Windows 10 version 1803 and below, the path would be **Windows components > Windows Defender Security Center > Notifications** 1. Open the **Hide non-critical notifications** setting and set it to **Enabled**. Select **OK**. @@ -45,7 +45,7 @@ These notifications can be hidden only by using Group Policy. > [!IMPORTANT] > You must have Windows 10, version 1903 or higher. The ADMX/ADML template files for earlier versions of Windows do not include these Group Policy settings. -1. On your Group Policy management machine, open the [Group Policy Management Console](/previous-versions/windows/it-pro/windows-server-2008-R2-and-2008/cc731212(v=ws.11)), right-click the Group Policy Object you want to configure and select **Edit**. +1. On your Group Policy management machine, open the [Group Policy Management Console](/previous-versions/windows/it-pro/windows-server-2008-R2-and-2008/cc731212(v=ws.11)). Right-click the Group Policy Object you want to configure and select **Edit**. 1. In **Group Policy Management Editor**, go to **Computer configuration** and select **Administrative templates**. 1. Expand the tree to **Windows components > Windows Security > Notifications**. For Windows 10 version 1803 and below, the path would be **Windows components > Windows Defender Security Center > Notifications**. @@ -90,14 +90,14 @@ These notifications can be hidden only by using Group Policy. | OS support ended, device at risk | Support for your version of Windows has ended. Microsoft Defender Antivirus is no longer supported, and your device might be at risk. | SUPPORT_ENDED _and_ SUPPORT_ENDED_NO_DEFENDER | Yes |Virus & threat protection notification| | Summary notification, items found | Microsoft Defender Antivirus successfully took action on _n_ threats since your last summary. Your device was scanned _n_ times. | RECAP_FOUND_THREATS_SCANNED | No |Virus & threat protection notification| | Summary notification, items found, no scan count | Microsoft Defender Antivirus successfully took action on _n_ threats since your last summary. | RECAP_FOUND_THREATS | No |Virus & threat protection notification| -| Summary notification, **no** items found, scans performed | Microsoft Defender Antivirus didn't find any threats since your last summary. Your device was scanned _n_ times. | RECAP_NO THREATS_SCANNED | No |Virus & threat protection notification| +| Summary notification, **no** items found, scans performed | Microsoft Defender Antivirus didn't find any threats since your last summary. Your device was scanned _n_ times. | RECAP_NO THREATS_SCANNED | No |Virus & threat protection notification| | Summary notification, **no** items found, no scans | Microsoft Defender Antivirus didn't find any threats since your last summary. | RECAP_NO_THREATS | No |Virus & threat protection notification| | Scan finished, manual, threats found | Microsoft Defender Antivirus scanned your device at _timestamp_ on _date_, and took action against threats. | RECENT_SCAN_FOUND_THREATS | No |Virus & threat protection notification| -| Scan finished, manual, **no** threats found | Microsoft Defender Antivirus scanned your device at _timestamp_ on _date_. No threats were found. | RECENT_SCAN_NO_THREATS | No |Virus & threat protection notification| +| Scan finished, manual, **no** threats found | Microsoft Defender Antivirus scanned your device at _timestamp_ on _date_. No threats were found. | RECENT_SCAN_NO_THREATS | No |Virus & threat protection notification| | Threat found | Microsoft Defender Antivirus found threats. Get details. | CRITICAL | No |Virus & threat protection notification| -| LPS on notification | Microsoft Defender Antivirus is periodically scanning your device. You're also using another antivirus program for active protection. | PERIODIC_SCANNING_ON | No |Virus & threat protection notification| -| Long running BaFS | Your IT administrator requires a security scan of this item. The scan could take up to _n_ seconds. | BAFS | No |Firewall and network protection notification| -| Long running BaFS customized | _Company_ requires a security scan of this item. The scan could take up to _n_ seconds. | BAFS_DETECTED_CUSTOM (body) | No |Firewall and network protection notification| +| LPS on notification | Microsoft Defender Antivirus is periodically scanning your device. You're also using another antivirus program for active protection. | PERIODIC_SCANNING_ON | No |Virus & threat protection notification| +| Long running BaFS | Your IT administrator requires a security scan of this item. The scan could take up to _n_ seconds. | BAFS | No |Firewall and network protection notification| +| Long running BaFS customized | _Company_ requires a security scan of this item. The scan could take up to _n_ seconds. | BAFS_DETECTED_CUSTOM (body) | No |Firewall and network protection notification| | Sense detection | This application was removed because it was blocked by your IT security settings | WDAV_SENSE_DETECTED | No |Firewall and network protection notification| | Sense detection customized | This application was removed because it was blocked by your IT security settings | WDAV_SENSE_DETECTED_CUSTOM (body) | No |Firewall and network protection notification| | Ransomware specific detection | Microsoft Defender Antivirus has detected threats, which may include ransomware. | WDAV_RANSOMWARE_DETECTED | No |Virus & threat protection notification| diff --git a/windows/security/operating-system-security/system-security/windows-defender-security-center/wdsc-virus-threat-protection.md b/windows/security/operating-system-security/system-security/windows-defender-security-center/wdsc-virus-threat-protection.md index 6014c9acfd..0bba1cf21b 100644 --- a/windows/security/operating-system-security/system-security/windows-defender-security-center/wdsc-virus-threat-protection.md +++ b/windows/security/operating-system-security/system-security/windows-defender-security-center/wdsc-virus-threat-protection.md @@ -1,13 +1,13 @@ --- title: Virus and threat protection in Windows Security -description: Use the Virus & threat protection section to see and configure Microsoft Defender Antivirus, Controlled folder access, and 3rd-party AV products. +description: Use the Virus & threat protection section to see and configure Microsoft Defender Antivirus, Controlled folder access, and 3rd-party antivirus products. ms.date: 06/27/2024 ms.topic: how-to --- # Virus and threat protection -The **Virus & threat protection** section contains information and settings for antivirus protection from Microsoft Defender Antivirus and third-party AV products. These settings include Controlled folder access settings to prevent unknown apps from changing files in protected folders, plus Microsoft OneDrive configuration to help you recover from a ransomware attack. This area also notifies users and provides recovery instructions if there's a ransomware attack. +The **Virus & threat protection** section contains information and settings for antivirus protection from Microsoft Defender Antivirus and third-party antivirus products. These settings include Controlled folder access settings to prevent unknown apps from changing files in protected folders, plus Microsoft OneDrive configuration to help you recover from a ransomware attack. This area also notifies users and provides recovery instructions if there's a ransomware attack. IT administrators and IT pros can get more configuration information from these articles: @@ -18,7 +18,7 @@ IT administrators and IT pros can get more configuration information from these - [Microsoft Defender for Office 365](/microsoft-365/security/office-365-security/defender-for-office-365) - [Ransomware detection and recovering your files](https://support.office.com/article/ransomware-detection-and-recovering-your-files-0d90ec50-6bfd-40f4-acc7-b8c12c73637f?ui=en-US&rs=en-US&ad=US) -You can hide the **Virus & threat protection** section or the **Ransomware protection** area from users of the machine. This option can be useful if you don't want employees in your organization to see or have access to user-configured options for these features. +You can hide the **Virus & threat protection** section or the **Ransomware protection** area from users of the machine. This option can be useful if you don't want users in your organization to see or have access to user-configured options for these features. ## Hide the Virus & threat protection section @@ -29,7 +29,7 @@ This section can be hidden only by using Group Policy. > [!IMPORTANT] > You must have Windows 10, version 1709 or later. The ADMX/ADML template files for earlier versions of Windows do not include these Group Policy settings. -1. On your Group Policy management machine, open the [Group Policy Management Console](/previous-versions/windows/it-pro/windows-server-2008-R2-and-2008/cc731212(v=ws.11)), right-click the Group Policy Object you want to configure and select **Edit**. +1. On your Group Policy management machine, open the [Group Policy Management Console](/previous-versions/windows/it-pro/windows-server-2008-R2-and-2008/cc731212(v=ws.11)). Right-click the Group Policy Object (GPO) you want to configure and select **Edit**. 1. In **Group Policy Management Editor**, go to **Computer configuration** and select **Administrative templates**. 1. Expand the tree to **Windows components > Windows Security > Virus and threat protection**. 1. Open the **Hide the Virus and threat protection area** setting and set it to **Enabled**. Select **OK**. @@ -49,7 +49,7 @@ This area can be hidden only by using Group Policy. > [!IMPORTANT] > You must have Windows 10, version 1709 or later. The ADMX/ADML template files for earlier versions of Windows do not include these Group Policy settings. -1. On your Group Policy management machine, open the [Group Policy Management Console](/previous-versions/windows/it-pro/windows-server-2008-R2-and-2008/cc731212(v=ws.11)), right-click the Group Policy Object you want to configure and select **Edit**. +1. On your Group Policy management machine, open the [Group Policy Management Console](/previous-versions/windows/it-pro/windows-server-2008-R2-and-2008/cc731212(v=ws.11)). Right-click the Group Policy Object you want to configure and select **Edit**. 1. In **Group Policy Management Editor**, go to **Computer configuration** and select **Administrative templates**. 1. Expand the tree to **Windows components > Windows Security > Virus and threat protection**. 1. Open the **Hide the Ransomware data recovery area** setting and set it to **Enabled**. Select **OK**. diff --git a/windows/security/operating-system-security/system-security/windows-defender-security-center/windows-defender-security-center.md b/windows/security/operating-system-security/system-security/windows-defender-security-center/windows-defender-security-center.md index 6b723cef2e..2a65943ed8 100644 --- a/windows/security/operating-system-security/system-security/windows-defender-security-center/windows-defender-security-center.md +++ b/windows/security/operating-system-security/system-security/windows-defender-security-center/windows-defender-security-center.md @@ -7,7 +7,7 @@ ms.topic: conceptual # Windows Security -This topic describes **Windows Security** settings, and provides information on configuring certain features, including: +This article describes **Windows Security** settings, and provides information on configuring certain features, including: - [Showing and customizing contact information](wdsc-customize-contact-information.md) - [Hiding notifications](wdsc-hide-notifications.md) @@ -27,7 +27,7 @@ For more information about each section, options for configuring the sections, a - [Virus & threat protection](wdsc-virus-threat-protection.md), which has information and access to antivirus ransomware protection settings and notifications, including Controlled folder access, and sign-in to Microsoft OneDrive. - [Account protection](wdsc-account-protection.md), which has information and access to sign-in and account protection settings. -- [Firewall & network protection](wdsc-firewall-network-protection.md), which has information and access to firewall settings, including Windows Defender Firewall. +- [Firewall & network protection](wdsc-firewall-network-protection.md), which has information and access to firewall settings, including Windows Firewall. - [App & browser control](wdsc-app-browser-control.md), covering Windows Defender SmartScreen settings and Exploit protection mitigations. - [Device security](wdsc-device-security.md), which provides access to built-in device security settings. - [Device performance & health](wdsc-device-performance-health.md), which has information about drivers, storage space, and general Windows Update issues. @@ -84,4 +84,4 @@ If you disable any of the individual features, it prevents that feature from rep > [!IMPORTANT] > If you individually disable any of the services, it won't disable the other services or **Windows Security** itself. -For example, [using a third-party antivirus disables Microsoft Defender Antivirus](/microsoft-365/security/defender-endpoint/microsoft-defender-antivirus-compatibility). However, **Windows Security** still runs, shows its icon in the taskbar, and displays information about the other features, such as Windows Defender SmartScreen and Windows Defender Firewall. +For example, [using a third-party antivirus disables Microsoft Defender Antivirus](/microsoft-365/security/defender-endpoint/microsoft-defender-antivirus-compatibility). However, **Windows Security** still runs, shows its icon in the taskbar, and displays information about the other features, such as Windows Defender SmartScreen and Windows Firewall. From b76dbc51a73a54df31e437d173713aa55829f121 Mon Sep 17 00:00:00 2001 From: Deepak-EDU <140197022+Deepak-EDU@users.noreply.github.com> Date: Thu, 27 Jun 2024 16:59:07 -0700 Subject: [PATCH 63/99] Update windows-11-se-overview.md --- education/windows/windows-11-se-overview.md | 10 +++++----- 1 file changed, 5 insertions(+), 5 deletions(-) diff --git a/education/windows/windows-11-se-overview.md b/education/windows/windows-11-se-overview.md index 56477ff62e..30e70da005 100644 --- a/education/windows/windows-11-se-overview.md +++ b/education/windows/windows-11-se-overview.md @@ -103,7 +103,7 @@ The following applications can also run on Windows 11 SE, and can be deployed us | `DigiExam` | 14.1.0 | `Win32` | `Digiexam` | | `Digital Secure testing browser` | 15.0.0 | `Win32` | `Digiexam` | | `Dolphin Guide Connect` | 1.27 | `Win32` | `Dolphin Guide Connect` | -| `Dragon Professional Individual` | 15.00.100 | `Win32` | `Nuance Communications` | +| `Dragon Professional Individual` | 16.00.200.121 | `Win32` | `Nuance Communications` | | `DRC INSIGHT Online Assessments` | 14.0.0.0 | `Store` | `Data recognition Corporation` | | `Duo from Cisco` | 6.3.0 | `Win32` | `Cisco` | | `Dyknow` | 7.9.13.7 | `Win32` | `Dyknow` | @@ -114,7 +114,7 @@ The following applications can also run on Windows 11 SE, and can be deployed us | `ESET Endpoint Security` | 10.1.2046.0 | `Win32` | `ESET` | | `ESET Remote Administrator Agent` | 10.0.1126.0 | `Win32` | `ESET` | | `eTests` | 4.0.25 | `Win32` | `CASAS` | -| `Exam Writepad` | 23.12.10.1200 | `Win32` | `Sheldnet` | +| `Exam Writepad` | 24.4.1.1200 | `Win32` | `Sheldnet` | | `FirstVoices Keyboard` | 15.0.270 | `Win32` | `SIL International` | | `FortiClient` | 7.2.0.4034+ | `Win32` | `Fortinet` | | `Free NaturalReader` | 16.1.2 | `Win32` | `Natural Soft` | @@ -170,7 +170,7 @@ The following applications can also run on Windows 11 SE, and can be deployed us | `Remote Help` | 5.0.1311.0 | `Win32` | `Microsoft` | | `Respondus Lockdown Browser` | 2.1.1.05 | `Win32` | `Respondus` | | `Safe Exam Browser` | 3.5.0.544 | `Win32` | `Safe Exam Browser` | -|`SchoolYear` | 3.5.4 | `Win32` |`SchoolYear` | +|`SchoolYear` | 3.7.10 | `Win32` |`SchoolYear` | |`School Manager` | 3.6.10-1149 | `Win32` |`Linewize` | |`Schoolnet Secure Tester` | 2.1.0 | `Win32` |`School Net` | |`Scratch` | 3.0 | `Win32` |`MIT` | @@ -188,8 +188,8 @@ The following applications can also run on Windows 11 SE, and can be deployed us | `Windows SEB` | 3.4.0 | `Win32` | `Illinois Stateboard of Education` | | `Windows Notepad` | 12.0.78 | `Store` | `Microsoft Corporation` | | `Zoom` | 5.12.8 (10232) | `Win32` | `Zoom` | -| `ZoomText Fusion` | 2024.2310.13.400 | `Win32` | `Freedom Scientific` | -| `ZoomText Magnifier/Reader` | 2024.2312.26.400 | `Win32` | `Freedom Scientific` | +| `ZoomText Fusion` | 2024.2403.1.400 | `Win32` | `Freedom Scientific` | +| `ZoomText Magnifier/Reader` | 2024.2402.66.400 | `Win32` | `Freedom Scientific` | ## Add your own applications From e6176ae98d42d5dfcf0eb51a036aaaa09b8e8092 Mon Sep 17 00:00:00 2001 From: Deepak-EDU <140197022+Deepak-EDU@users.noreply.github.com> Date: Fri, 28 Jun 2024 11:15:21 -0700 Subject: [PATCH 64/99] Update windows-11-se-overview.md --- education/windows/windows-11-se-overview.md | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/education/windows/windows-11-se-overview.md b/education/windows/windows-11-se-overview.md index 30e70da005..e5fd11df2b 100644 --- a/education/windows/windows-11-se-overview.md +++ b/education/windows/windows-11-se-overview.md @@ -128,7 +128,7 @@ The following applications can also run on Windows 11 SE, and can be deployed us | `IMT Lazarus` | 2.86.0 | `Win32` | `IMTLazarus` | | `Inprint` | 3.7.6 | `Win32` | `Inprint` | | `Inspiration 10` | 10.11 | `Win32` | `TechEdology Ltd` | -| `Instashare` | 1.3.13.0 | `Win32` | `Instashare` | +| `Instashare 2` | 1.3.13.0 | `Win32` | `BenQ` | | `JAWS for Windows` | 2024.2312.53 | `Win32` | `Freedom Scientific` | | `Kite Student Portal` | 9.0.0.0 | `Win32` | `Dynamic Learning Maps` | | `Keyman` | 16.0.142 | `Win32` | `SIL International` | From c515fadbe28f66a28a4d104baf514e9e3a0895c8 Mon Sep 17 00:00:00 2001 From: "Vinay Pamnani (from Dev Box)" Date: Fri, 28 Jun 2024 12:52:37 -0600 Subject: [PATCH 65/99] June 2024 CSP Updates --- .../mdm/activesync-ddf-file.md | 4 +- .../mdm/applicationcontrol-csp-ddf.md | 4 +- .../mdm/applocker-ddf-file.md | 4 +- .../mdm/assignedaccess-ddf.md | 4 +- .../mdm/bitlocker-ddf-file.md | 4 +- .../mdm/certificatestore-ddf-file.md | 4 +- .../mdm/clientcertificateinstall-ddf-file.md | 6 +- .../mdm/clouddesktop-ddf-file.md | 6 +- .../mdm/declaredconfiguration-ddf-file.md | 4 +- windows/client-management/mdm/defender-ddf.md | 4 +- .../mdm/devdetail-ddf-file.md | 4 +- .../mdm/devicemanageability-ddf.md | 4 +- .../mdm/devicepreparation-ddf-file.md | 4 +- .../client-management/mdm/devicestatus-ddf.md | 4 +- .../client-management/mdm/devinfo-ddf-file.md | 4 +- .../mdm/diagnosticlog-ddf.md | 4 +- .../client-management/mdm/dmacc-ddf-file.md | 4 +- windows/client-management/mdm/dmclient-csp.md | 6 +- .../mdm/dmclient-ddf-file.md | 10 +- .../client-management/mdm/email2-ddf-file.md | 4 +- ...enterprisedesktopappmanagement-ddf-file.md | 6 +- .../mdm/enterprisemodernappmanagement-ddf.md | 6 +- .../client-management/mdm/euiccs-ddf-file.md | 4 +- .../mdm/firewall-ddf-file.md | 4 +- .../mdm/healthattestation-ddf.md | 4 +- .../mdm/language-pack-management-ddf-file.md | 4 +- .../client-management/mdm/laps-ddf-file.md | 4 +- .../client-management/mdm/networkproxy-ddf.md | 4 +- .../mdm/networkqospolicy-ddf.md | 4 +- .../mdm/nodecache-ddf-file.md | 6 +- windows/client-management/mdm/office-ddf.md | 6 +- .../mdm/passportforwork-ddf.md | 8 +- .../mdm/personaldataencryption-ddf-file.md | 4 +- .../mdm/personalization-ddf.md | 4 +- .../mdm/policies-in-policy-csp-admx-backed.md | 5 +- ...in-policy-csp-supported-by-group-policy.md | 7 +- .../mdm/policy-csp-admx-terminalserver.md | 52 +---- .../mdm/policy-csp-admx-windowsexplorer.md | 52 ++++- .../mdm/policy-csp-defender.md | 8 +- .../mdm/policy-csp-privacy.md | 203 +++++++++++++++++- .../mdm/policy-csp-remotedesktopservices.md | 56 ++++- .../mdm/policy-csp-windowsai.md | 74 +------ .../mdm/printerprovisioning-ddf-file.md | 4 +- .../client-management/mdm/reboot-ddf-file.md | 4 +- .../mdm/rootcacertificates-ddf-file.md | 6 +- .../mdm/secureassessment-ddf-file.md | 4 +- .../mdm/sharedpc-ddf-file.md | 4 +- .../client-management/mdm/supl-ddf-file.md | 4 +- .../client-management/mdm/vpnv2-ddf-file.md | 6 +- .../client-management/mdm/wifi-ddf-file.md | 6 +- ...indowsdefenderapplicationguard-ddf-file.md | 4 +- .../mdm/windowslicensing-ddf-file.md | 4 +- .../mdm/wirednetwork-ddf-file.md | 6 +- 53 files changed, 429 insertions(+), 240 deletions(-) diff --git a/windows/client-management/mdm/activesync-ddf-file.md b/windows/client-management/mdm/activesync-ddf-file.md index e3debc8c7e..99038f75e0 100644 --- a/windows/client-management/mdm/activesync-ddf-file.md +++ b/windows/client-management/mdm/activesync-ddf-file.md @@ -1,7 +1,7 @@ --- title: ActiveSync DDF file description: View the XML file containing the device description framework (DDF) for the ActiveSync configuration service provider. -ms.date: 06/19/2024 +ms.date: 06/28/2024 --- @@ -40,7 +40,7 @@ The following XML file contains the device description framework (DDF) for the A 10.0.10240 1.0 - 0x4;0x1B;0x30;0x31;0x48;0x54;0x62;0x63;0x64;0x65;0x77;0x79;0x7A;0x7D;0x7E;0x81;0x82;0x8A;0x8B;0xA1;0xA2;0xA4;0xA5;0xAB;0xAC;0xAF;0xB4;0xBC;0xBD;0xBF;0xCA;0xCB; + 0x4;0x1B;0x30;0x31;0x48;0x54;0x62;0x63;0x64;0x65;0x79;0x7A;0x7D;0x7E;0x81;0x82;0x8A;0x8B;0xA1;0xA2;0xA4;0xA5;0xAB;0xAC;0xAF;0xBC;0xBF;0xCA;0xCB;0xCD;0xCF; diff --git a/windows/client-management/mdm/applicationcontrol-csp-ddf.md b/windows/client-management/mdm/applicationcontrol-csp-ddf.md index e701a8b0ec..8b27862509 100644 --- a/windows/client-management/mdm/applicationcontrol-csp-ddf.md +++ b/windows/client-management/mdm/applicationcontrol-csp-ddf.md @@ -1,7 +1,7 @@ --- title: ApplicationControl DDF file description: View the XML file containing the device description framework (DDF) for the ApplicationControl configuration service provider. -ms.date: 06/19/2024 +ms.date: 06/28/2024 --- @@ -40,7 +40,7 @@ The following XML file contains the device description framework (DDF) for the A 10.0.18362 1.0 - 0x4;0x1B;0x30;0x31;0x48;0x54;0x62;0x63;0x64;0x65;0x77;0x79;0x7A;0x7D;0x7E;0x81;0x82;0x87;0x88;0x88*;0x8A;0x8B;0xA1;0xA2;0xA4;0xA5;0xAB;0xAC;0xAF;0xB4;0xBC;0xBD;0xBF;0xCA;0xCB; + 0x4;0x1B;0x30;0x31;0x48;0x54;0x62;0x63;0x64;0x65;0x79;0x7A;0x7D;0x7E;0x81;0x82;0x88;0x8A;0x8B;0xA1;0xA2;0xA4;0xA5;0xAB;0xAC;0xAF;0xBC;0xBF;0xCA;0xCB;0xCD;0xCF; diff --git a/windows/client-management/mdm/applocker-ddf-file.md b/windows/client-management/mdm/applocker-ddf-file.md index c8d03d6d27..9d1ededd2a 100644 --- a/windows/client-management/mdm/applocker-ddf-file.md +++ b/windows/client-management/mdm/applocker-ddf-file.md @@ -1,7 +1,7 @@ --- title: AppLocker DDF file description: View the XML file containing the device description framework (DDF) for the AppLocker configuration service provider. -ms.date: 06/19/2024 +ms.date: 06/28/2024 --- @@ -40,7 +40,7 @@ The following XML file contains the device description framework (DDF) for the A 10.0.10586 1.0 - 0x4;0x1B;0x30;0x31;0x48;0x54;0x62;0x63;0x64;0x65;0x79;0x7A;0x7D;0x7E;0x81;0x82;0x87;0x88*;0x8A;0x8B;0xA1;0xA2;0xA4;0xA5;0xAB;0xAC;0xAF;0xB4;0xBC;0xBD;0xBF;0xCA;0xCB; + 0x4;0x1B;0x30;0x31;0x48;0x54;0x62;0x63;0x64;0x65;0x79;0x7A;0x7D;0x7E;0x81;0x82;0x8A;0x8B;0xA1;0xA2;0xA4;0xA5;0xAB;0xAC;0xAF;0xBC;0xBF;0xCA;0xCB;0xCD;0xCF; diff --git a/windows/client-management/mdm/assignedaccess-ddf.md b/windows/client-management/mdm/assignedaccess-ddf.md index 8bc008e978..81d21dbfab 100644 --- a/windows/client-management/mdm/assignedaccess-ddf.md +++ b/windows/client-management/mdm/assignedaccess-ddf.md @@ -1,7 +1,7 @@ --- title: AssignedAccess DDF file description: View the XML file containing the device description framework (DDF) for the AssignedAccess configuration service provider. -ms.date: 06/19/2024 +ms.date: 06/28/2024 --- @@ -40,7 +40,7 @@ The following XML file contains the device description framework (DDF) for the A 10.0.10240 1.0 - 0x4;0x1B;0x30;0x31;0x48;0x54;0x77;0x79;0x7A;0x7D;0x7E;0x81;0x82;0x88;0x88*;0x8A;0x8B;0xA1;0xA2;0xA4;0xA5;0xAB;0xAC;0xAF;0xB4;0xBC;0xBD;0xBF;0xCA;0xCB; + 0x4;0x1B;0x30;0x31;0x48;0x54;0x79;0x7A;0x7D;0x7E;0x81;0x82;0x88;0x8A;0x8B;0xA1;0xA2;0xA4;0xA5;0xAB;0xAC;0xAF;0xBC;0xBF;0xCA;0xCB;0xCD;0xCF; diff --git a/windows/client-management/mdm/bitlocker-ddf-file.md b/windows/client-management/mdm/bitlocker-ddf-file.md index 6015905cf3..51e2260bba 100644 --- a/windows/client-management/mdm/bitlocker-ddf-file.md +++ b/windows/client-management/mdm/bitlocker-ddf-file.md @@ -1,7 +1,7 @@ --- title: BitLocker DDF file description: View the XML file containing the device description framework (DDF) for the BitLocker configuration service provider. -ms.date: 06/19/2024 +ms.date: 06/28/2024 --- @@ -39,7 +39,7 @@ The following XML file contains the device description framework (DDF) for the B 10.0.15063 1.0 - 0x4;0x1B;0x30;0x31;0x48;0x54;0x77;0x79;0x7A;0x7D;0x7E;0x81;0x82;0x8A;0x8B;0xA1;0xA2;0xA4;0xA5;0xAB;0xAC;0xAF;0xB4;0xBC;0xBD;0xBF;0xCA;0xCB; + 0x4;0x1B;0x30;0x31;0x48;0x54;0x79;0x7A;0x7D;0x7E;0x81;0x82;0x8A;0x8B;0xA1;0xA2;0xA4;0xA5;0xAB;0xAC;0xAF;0xBC;0xBF;0xCA;0xCB;0xCD;0xCF;0xD2; diff --git a/windows/client-management/mdm/certificatestore-ddf-file.md b/windows/client-management/mdm/certificatestore-ddf-file.md index 8ab2380099..b552ae24ad 100644 --- a/windows/client-management/mdm/certificatestore-ddf-file.md +++ b/windows/client-management/mdm/certificatestore-ddf-file.md @@ -1,7 +1,7 @@ --- title: CertificateStore DDF file description: View the XML file containing the device description framework (DDF) for the CertificateStore configuration service provider. -ms.date: 06/19/2024 +ms.date: 06/28/2024 --- @@ -42,7 +42,7 @@ The following XML file contains the device description framework (DDF) for the C 10.0.10586 1.0 - 0x4;0x1B;0x30;0x31;0x48;0x54;0x62;0x63;0x64;0x65;0x77;0x79;0x7A;0x7D;0x7E;0x81;0x82;0x87;0x88;0x88*;0x8A;0x8B;0xA1;0xA2;0xA4;0xA5;0xAB;0xAC;0xAF;0xB4;0xBC;0xBD;0xBF;0xCA;0xCB; + 0x4;0x1B;0x30;0x31;0x48;0x54;0x62;0x63;0x64;0x65;0x79;0x7A;0x7D;0x7E;0x81;0x82;0x88;0x8A;0x8B;0xA1;0xA2;0xA4;0xA5;0xAB;0xAC;0xAF;0xBC;0xBF;0xCA;0xCB;0xCD;0xCF;0xD2; diff --git a/windows/client-management/mdm/clientcertificateinstall-ddf-file.md b/windows/client-management/mdm/clientcertificateinstall-ddf-file.md index c77ddb1695..20bf836b45 100644 --- a/windows/client-management/mdm/clientcertificateinstall-ddf-file.md +++ b/windows/client-management/mdm/clientcertificateinstall-ddf-file.md @@ -1,7 +1,7 @@ --- title: ClientCertificateInstall DDF file description: View the XML file containing the device description framework (DDF) for the ClientCertificateInstall configuration service provider. -ms.date: 06/19/2024 +ms.date: 06/28/2024 --- @@ -39,7 +39,7 @@ The following XML file contains the device description framework (DDF) for the C 10.0.10586 1.0 - 0x4;0x1B;0x30;0x31;0x48;0x54;0x62;0x63;0x64;0x65;0x77;0x79;0x7A;0x7D;0x7E;0x81;0x82;0x87;0x88;0x88*;0x8A;0x8B;0xA1;0xA2;0xA4;0xA5;0xAB;0xAC;0xAF;0xB4;0xBC;0xBD;0xBF;0xCA;0xCB; + 0x4;0x1B;0x30;0x31;0x48;0x54;0x62;0x63;0x64;0x65;0x79;0x7A;0x7D;0x7E;0x81;0x82;0x88;0x8A;0x8B;0xA1;0xA2;0xA4;0xA5;0xAB;0xAC;0xAF;0xBC;0xBF;0xCA;0xCB;0xCD;0xCF;0xD2; @@ -1162,7 +1162,7 @@ Valid values are: 10.0.10586 1.0 - 0x4;0x1B;0x30;0x31;0x48;0x54;0x62;0x63;0x64;0x65;0x77;0x79;0x7A;0x7D;0x7E;0x81;0x82;0x87;0x88;0x88*;0x8A;0x8B;0xA1;0xA2;0xA4;0xA5;0xAB;0xAC;0xAF;0xB4;0xBC;0xBD;0xBF;0xCA;0xCB; + 0x4;0x1B;0x30;0x31;0x48;0x54;0x62;0x63;0x64;0x65;0x79;0x7A;0x7D;0x7E;0x81;0x82;0x88;0x8A;0x8B;0xA1;0xA2;0xA4;0xA5;0xAB;0xAC;0xAF;0xBC;0xBF;0xCA;0xCB;0xCD;0xCF;0xD2; diff --git a/windows/client-management/mdm/clouddesktop-ddf-file.md b/windows/client-management/mdm/clouddesktop-ddf-file.md index 6efe3ed695..776f55aac6 100644 --- a/windows/client-management/mdm/clouddesktop-ddf-file.md +++ b/windows/client-management/mdm/clouddesktop-ddf-file.md @@ -1,7 +1,7 @@ --- title: CloudDesktop DDF file description: View the XML file containing the device description framework (DDF) for the CloudDesktop configuration service provider. -ms.date: 06/19/2024 +ms.date: 06/28/2024 --- @@ -40,7 +40,7 @@ The following XML file contains the device description framework (DDF) for the C 99.9.99999 2.0 - 0x4;0x30;0x31;0x7E;0x87;0x88;0x88*;0xA1;0xA2;0xA4;0xA5;0xB4;0xBC;0xBD;0xBF; + 0x4;0x30;0x31;0x7E;0x88;0xA1;0xA2;0xA4;0xA5;0xBC;0xBF;0xCD; @@ -103,7 +103,7 @@ The following XML file contains the device description framework (DDF) for the C 10.0.22621.3235 1.0 - 0x4;0x30;0x31;0x7E;0x87;0x88;0x88*;0xA1;0xA2;0xA4;0xA5;0xB4;0xBC;0xBD;0xBF; + 0x4;0x30;0x31;0x7E;0x88;0xA1;0xA2;0xA4;0xA5;0xBC;0xBF;0xCD; diff --git a/windows/client-management/mdm/declaredconfiguration-ddf-file.md b/windows/client-management/mdm/declaredconfiguration-ddf-file.md index 031be873a8..07e2e406e6 100644 --- a/windows/client-management/mdm/declaredconfiguration-ddf-file.md +++ b/windows/client-management/mdm/declaredconfiguration-ddf-file.md @@ -1,7 +1,7 @@ --- title: DeclaredConfiguration DDF file description: View the XML file containing the device description framework (DDF) for the DeclaredConfiguration configuration service provider. -ms.date: 06/19/2024 +ms.date: 06/28/2024 --- @@ -40,7 +40,7 @@ The following XML file contains the device description framework (DDF) for the D 99.9.99999 9.9 - 0x4;0x1B;0x30;0x31;0x48;0x54;0x62;0x63;0x64;0x65;0x77;0x79;0x7A;0x7D;0x7E;0x81;0x82;0x8A;0x8B;0xA1;0xA2;0xA4;0xA5;0xAB;0xAC;0xAF;0xB4;0xBC;0xBD;0xBF;0xCA;0xCB; + 0x4;0x1B;0x30;0x31;0x48;0x54;0x62;0x63;0x64;0x65;0x79;0x7A;0x7D;0x7E;0x81;0x82;0x8A;0x8B;0xA1;0xA2;0xA4;0xA5;0xAB;0xAC;0xAF;0xBC;0xBF;0xCA;0xCB;0xCD;0xCF;0xD2; diff --git a/windows/client-management/mdm/defender-ddf.md b/windows/client-management/mdm/defender-ddf.md index e5da0f2590..f286ba947c 100644 --- a/windows/client-management/mdm/defender-ddf.md +++ b/windows/client-management/mdm/defender-ddf.md @@ -1,7 +1,7 @@ --- title: Defender DDF file description: View the XML file containing the device description framework (DDF) for the Defender configuration service provider. -ms.date: 06/19/2024 +ms.date: 06/28/2024 --- @@ -39,7 +39,7 @@ The following XML file contains the device description framework (DDF) for the D 10.0.10586 1.0 - 0x4;0x1B;0x30;0x31;0x48;0x54;0x62;0x63;0x64;0x65;0x77;0x79;0x7A;0x7D;0x7E;0x81;0x82;0x8A;0x8B;0xA1;0xA2;0xA4;0xA5;0xAB;0xAC;0xAF;0xB4;0xBC;0xBD;0xBF;0xCA;0xCB; + 0x4;0x1B;0x30;0x31;0x48;0x54;0x62;0x63;0x64;0x65;0x79;0x7A;0x7D;0x7E;0x81;0x82;0x8A;0x8B;0xA1;0xA2;0xA4;0xA5;0xAB;0xAC;0xAF;0xBC;0xBF;0xCA;0xCB;0xCD;0xCF;0xD2; diff --git a/windows/client-management/mdm/devdetail-ddf-file.md b/windows/client-management/mdm/devdetail-ddf-file.md index 8e200f88b4..c7b1a08470 100644 --- a/windows/client-management/mdm/devdetail-ddf-file.md +++ b/windows/client-management/mdm/devdetail-ddf-file.md @@ -1,7 +1,7 @@ --- title: DevDetail DDF file description: View the XML file containing the device description framework (DDF) for the DevDetail configuration service provider. -ms.date: 06/19/2024 +ms.date: 06/28/2024 --- @@ -40,7 +40,7 @@ The following XML file contains the device description framework (DDF) for the D 10.0.10586 1.0 - 0x4;0x1B;0x30;0x31;0x48;0x54;0x62;0x63;0x64;0x65;0x77;0x79;0x7A;0x7D;0x7E;0x81;0x82;0x87;0x88;0x88*;0x8A;0x8B;0xA1;0xA2;0xA4;0xA5;0xAB;0xAC;0xAF;0xB4;0xBC;0xBD;0xBF;0xCA;0xCB; + 0x4;0x1B;0x30;0x31;0x48;0x54;0x62;0x63;0x64;0x65;0x79;0x7A;0x7D;0x7E;0x81;0x82;0x88;0x8A;0x8B;0xA1;0xA2;0xA4;0xA5;0xAB;0xAC;0xAF;0xBC;0xBF;0xCA;0xCB;0xCD;0xCF;0xD2; diff --git a/windows/client-management/mdm/devicemanageability-ddf.md b/windows/client-management/mdm/devicemanageability-ddf.md index 59cd0e48a0..4769870f2a 100644 --- a/windows/client-management/mdm/devicemanageability-ddf.md +++ b/windows/client-management/mdm/devicemanageability-ddf.md @@ -1,7 +1,7 @@ --- title: DeviceManageability DDF file description: View the XML file containing the device description framework (DDF) for the DeviceManageability configuration service provider. -ms.date: 06/19/2024 +ms.date: 06/28/2024 --- @@ -42,7 +42,7 @@ The following XML file contains the device description framework (DDF) for the D 10.0.14393 1.0 - 0x4;0x1B;0x30;0x31;0x48;0x54;0x62;0x63;0x64;0x65;0x77;0x79;0x7A;0x7D;0x7E;0x81;0x82;0x87;0x88;0x88*;0x8A;0x8B;0xA1;0xA2;0xA4;0xA5;0xAB;0xAC;0xAF;0xB4;0xBC;0xBD;0xBF;0xCA;0xCB; + 0x4;0x1B;0x30;0x31;0x48;0x54;0x62;0x63;0x64;0x65;0x79;0x7A;0x7D;0x7E;0x81;0x82;0x88;0x8A;0x8B;0xA1;0xA2;0xA4;0xA5;0xAB;0xAC;0xAF;0xBC;0xBF;0xCA;0xCB;0xCD;0xCF;0xD2; diff --git a/windows/client-management/mdm/devicepreparation-ddf-file.md b/windows/client-management/mdm/devicepreparation-ddf-file.md index be9a944b76..903c08866d 100644 --- a/windows/client-management/mdm/devicepreparation-ddf-file.md +++ b/windows/client-management/mdm/devicepreparation-ddf-file.md @@ -1,7 +1,7 @@ --- title: DevicePreparation DDF file description: View the XML file containing the device description framework (DDF) for the DevicePreparation configuration service provider. -ms.date: 06/19/2024 +ms.date: 06/28/2024 --- @@ -40,7 +40,7 @@ The following XML file contains the device description framework (DDF) for the D 99.9.99999 1.0 - 0x4;0x1B;0x30;0x31;0x48;0x54;0x62;0x63;0x64;0x65;0x77;0x79;0x7A;0x7D;0x7E;0x81;0x82;0x87;0x88;0x88*;0x8A;0x8B;0xA1;0xA2;0xA4;0xA5;0xAB;0xAC;0xAF;0xB4;0xBC;0xBD;0xBF;0xCA;0xCB; + 0x4;0x1B;0x30;0x31;0x48;0x54;0x62;0x63;0x64;0x65;0x79;0x7A;0x7D;0x7E;0x81;0x82;0x88;0x8A;0x8B;0xA1;0xA2;0xA4;0xA5;0xAB;0xAC;0xAF;0xBC;0xBF;0xCA;0xCB;0xCD;0xCF;0xD2; diff --git a/windows/client-management/mdm/devicestatus-ddf.md b/windows/client-management/mdm/devicestatus-ddf.md index ae20b8e258..0e02205007 100644 --- a/windows/client-management/mdm/devicestatus-ddf.md +++ b/windows/client-management/mdm/devicestatus-ddf.md @@ -1,7 +1,7 @@ --- title: DeviceStatus DDF file description: View the XML file containing the device description framework (DDF) for the DeviceStatus configuration service provider. -ms.date: 06/19/2024 +ms.date: 06/28/2024 --- @@ -39,7 +39,7 @@ The following XML file contains the device description framework (DDF) for the D 10.0.10586 1.0 - 0x4;0x1B;0x30;0x31;0x48;0x54;0x62;0x63;0x64;0x65;0x77;0x79;0x7A;0x7D;0x7E;0x81;0x82;0x88;0x88*;0x8A;0x8B;0xA1;0xA2;0xA4;0xA5;0xAB;0xAC;0xAF;0xB4;0xBC;0xBD;0xBF;0xCA;0xCB; + 0x4;0x1B;0x30;0x31;0x48;0x54;0x62;0x63;0x64;0x65;0x79;0x7A;0x7D;0x7E;0x81;0x82;0x88;0x8A;0x8B;0xA1;0xA2;0xA4;0xA5;0xAB;0xAC;0xAF;0xBC;0xBF;0xCA;0xCB;0xCD;0xCF;0xD2; diff --git a/windows/client-management/mdm/devinfo-ddf-file.md b/windows/client-management/mdm/devinfo-ddf-file.md index b2d6f8ed7f..a57636514a 100644 --- a/windows/client-management/mdm/devinfo-ddf-file.md +++ b/windows/client-management/mdm/devinfo-ddf-file.md @@ -1,7 +1,7 @@ --- title: DevInfo DDF file description: View the XML file containing the device description framework (DDF) for the DevInfo configuration service provider. -ms.date: 06/19/2024 +ms.date: 06/28/2024 --- @@ -41,7 +41,7 @@ The following XML file contains the device description framework (DDF) for the D 10.0.10586 1.0 - 0x4;0x1B;0x30;0x31;0x48;0x54;0x62;0x63;0x64;0x65;0x77;0x79;0x7A;0x7D;0x7E;0x81;0x82;0x87;0x88;0x88*;0x8A;0x8B;0xA1;0xA2;0xA4;0xA5;0xAB;0xAC;0xAF;0xB4;0xBC;0xBD;0xBF;0xCA;0xCB; + 0x4;0x1B;0x30;0x31;0x48;0x54;0x62;0x63;0x64;0x65;0x79;0x7A;0x7D;0x7E;0x81;0x82;0x88;0x8A;0x8B;0xA1;0xA2;0xA4;0xA5;0xAB;0xAC;0xAF;0xBC;0xBF;0xCA;0xCB;0xCD;0xCF;0xD2; diff --git a/windows/client-management/mdm/diagnosticlog-ddf.md b/windows/client-management/mdm/diagnosticlog-ddf.md index eef6af498d..03887d47c3 100644 --- a/windows/client-management/mdm/diagnosticlog-ddf.md +++ b/windows/client-management/mdm/diagnosticlog-ddf.md @@ -1,7 +1,7 @@ --- title: DiagnosticLog DDF file description: View the XML file containing the device description framework (DDF) for the DiagnosticLog configuration service provider. -ms.date: 06/19/2024 +ms.date: 06/28/2024 --- @@ -39,7 +39,7 @@ The following XML file contains the device description framework (DDF) for the D 10.0.10586 1.2 - 0x4;0x1B;0x30;0x31;0x48;0x54;0x62;0x63;0x64;0x65;0x77;0x79;0x7A;0x7D;0x7E;0x81;0x82;0x87;0x88;0x88*;0x8A;0x8B;0xA1;0xA2;0xA4;0xA5;0xAB;0xAC;0xAF;0xB4;0xBC;0xBD;0xBF;0xCA;0xCB; + 0x4;0x1B;0x30;0x31;0x48;0x54;0x62;0x63;0x64;0x65;0x79;0x7A;0x7D;0x7E;0x81;0x82;0x88;0x8A;0x8B;0xA1;0xA2;0xA4;0xA5;0xAB;0xAC;0xAF;0xBC;0xBF;0xCA;0xCB;0xCD;0xCF;0xD2; diff --git a/windows/client-management/mdm/dmacc-ddf-file.md b/windows/client-management/mdm/dmacc-ddf-file.md index a0fee28b12..15fc5f3231 100644 --- a/windows/client-management/mdm/dmacc-ddf-file.md +++ b/windows/client-management/mdm/dmacc-ddf-file.md @@ -1,7 +1,7 @@ --- title: DMAcc DDF file description: View the XML file containing the device description framework (DDF) for the DMAcc configuration service provider. -ms.date: 06/19/2024 +ms.date: 06/28/2024 --- @@ -40,7 +40,7 @@ The following XML file contains the device description framework (DDF) for the D 10.0.10586 1.0 - 0x4;0x1B;0x30;0x31;0x48;0x54;0x62;0x63;0x64;0x65;0x77;0x79;0x7A;0x7D;0x7E;0x81;0x82;0x87;0x88;0x88*;0x8A;0x8B;0xA1;0xA2;0xA4;0xA5;0xAB;0xAC;0xAF;0xB4;0xBC;0xBD;0xBF;0xCA;0xCB; + 0x4;0x1B;0x30;0x31;0x48;0x54;0x62;0x63;0x64;0x65;0x79;0x7A;0x7D;0x7E;0x81;0x82;0x88;0x8A;0x8B;0xA1;0xA2;0xA4;0xA5;0xAB;0xAC;0xAF;0xBC;0xBF;0xCA;0xCB;0xCD;0xCF;0xD2; diff --git a/windows/client-management/mdm/dmclient-csp.md b/windows/client-management/mdm/dmclient-csp.md index dec09993f5..6011d8d162 100644 --- a/windows/client-management/mdm/dmclient-csp.md +++ b/windows/client-management/mdm/dmclient-csp.md @@ -1,7 +1,7 @@ --- title: DMClient CSP description: Learn more about the DMClient CSP. -ms.date: 04/10/2024 +ms.date: 06/28/2024 --- @@ -745,8 +745,8 @@ This node determines whether or not a periodic settings refresh for MDM policies | Value | Description | |:--|:--| -| true | ConfigRefresh is enabled. | -| false (Default) | ConfigRefresh is disabled. | +| true | Enabled. | +| false (Default) | Disabled. | diff --git a/windows/client-management/mdm/dmclient-ddf-file.md b/windows/client-management/mdm/dmclient-ddf-file.md index c30288ba23..b82d0fe21b 100644 --- a/windows/client-management/mdm/dmclient-ddf-file.md +++ b/windows/client-management/mdm/dmclient-ddf-file.md @@ -1,7 +1,7 @@ --- title: DMClient DDF file description: View the XML file containing the device description framework (DDF) for the DMClient configuration service provider. -ms.date: 06/19/2024 +ms.date: 06/28/2024 --- @@ -40,7 +40,7 @@ The following XML file contains the device description framework (DDF) for the D 10.0.10240 1.0 - 0x4;0x1B;0x30;0x31;0x48;0x54;0x62;0x63;0x64;0x65;0x77;0x79;0x7A;0x7D;0x7E;0x81;0x82;0x87;0x88;0x88*;0x8A;0x8B;0xA1;0xA2;0xA4;0xA5;0xAB;0xAC;0xAF;0xB4;0xBC;0xBD;0xBF;0xCA;0xCB; + 0x4;0x1B;0x30;0x31;0x48;0x54;0x62;0x63;0x64;0x65;0x79;0x7A;0x7D;0x7E;0x81;0x82;0x88;0x8A;0x8B;0xA1;0xA2;0xA4;0xA5;0xAB;0xAC;0xAF;0xBC;0xBF;0xCA;0xCB;0xCD;0xCF;0xD2; @@ -477,7 +477,7 @@ The following XML file contains the device description framework (DDF) for the D 10.0.10240 1.0 - 0x4;0x1B;0x30;0x31;0x48;0x54;0x62;0x63;0x64;0x65;0x77;0x79;0x7A;0x7D;0x7E;0x81;0x82;0x87;0x88;0x88*;0x8A;0x8B;0xA1;0xA2;0xA4;0xA5;0xAB;0xAC;0xAF;0xB4;0xBC;0xBD;0xBF;0xCA;0xCB; + 0x4;0x1B;0x30;0x31;0x48;0x54;0x62;0x63;0x64;0x65;0x79;0x7A;0x7D;0x7E;0x81;0x82;0x88;0x8A;0x8B;0xA1;0xA2;0xA4;0xA5;0xAB;0xAC;0xAF;0xBC;0xBF;0xCA;0xCB;0xCD;0xCF;0xD2; @@ -2988,11 +2988,11 @@ The following XML file contains the device description framework (DDF) for the D true - ConfigRefresh is enabled. + Enabled false - ConfigRefresh is disabled. + Disabled LastWrite diff --git a/windows/client-management/mdm/email2-ddf-file.md b/windows/client-management/mdm/email2-ddf-file.md index a770191467..144f69b17d 100644 --- a/windows/client-management/mdm/email2-ddf-file.md +++ b/windows/client-management/mdm/email2-ddf-file.md @@ -1,7 +1,7 @@ --- title: EMAIL2 DDF file description: View the XML file containing the device description framework (DDF) for the EMAIL2 configuration service provider. -ms.date: 06/19/2024 +ms.date: 06/28/2024 --- @@ -40,7 +40,7 @@ The following XML file contains the device description framework (DDF) for the E 10.0.10240 1.0 - 0x4;0x1B;0x30;0x31;0x48;0x54;0x62;0x63;0x64;0x65;0x77;0x79;0x7A;0x7D;0x7E;0x81;0x82;0x8A;0x8B;0xA1;0xA2;0xA4;0xA5;0xAB;0xAC;0xAF;0xB4;0xBC;0xBD;0xBF;0xCA;0xCB; + 0x4;0x1B;0x30;0x31;0x48;0x54;0x62;0x63;0x64;0x65;0x79;0x7A;0x7D;0x7E;0x81;0x82;0x8A;0x8B;0xA1;0xA2;0xA4;0xA5;0xAB;0xAC;0xAF;0xBC;0xBF;0xCA;0xCB;0xCD;0xCF; diff --git a/windows/client-management/mdm/enterprisedesktopappmanagement-ddf-file.md b/windows/client-management/mdm/enterprisedesktopappmanagement-ddf-file.md index c3304851f0..ba537d72e7 100644 --- a/windows/client-management/mdm/enterprisedesktopappmanagement-ddf-file.md +++ b/windows/client-management/mdm/enterprisedesktopappmanagement-ddf-file.md @@ -1,7 +1,7 @@ --- title: EnterpriseDesktopAppManagement DDF file description: View the XML file containing the device description framework (DDF) for the EnterpriseDesktopAppManagement configuration service provider. -ms.date: 06/19/2024 +ms.date: 06/28/2024 --- @@ -40,7 +40,7 @@ The following XML file contains the device description framework (DDF) for the E 10.0.10586 1.0 - 0x4;0x1B;0x30;0x31;0x48;0x54;0x77;0x79;0x7A;0x7D;0x7E;0x81;0x82;0x8A;0x8B;0xA1;0xA2;0xA4;0xA5;0xAB;0xAC;0xAF;0xB4;0xBC;0xBD;0xBF;0xCA;0xCB; + 0x4;0x1B;0x30;0x31;0x48;0x54;0x79;0x7A;0x7D;0x7E;0x81;0x82;0x8A;0x8B;0xA1;0xA2;0xA4;0xA5;0xAB;0xAC;0xAF;0xBC;0xBF;0xCA;0xCB;0xCD;0xCF; @@ -401,7 +401,7 @@ The following XML file contains the device description framework (DDF) for the E 10.0.10586 1.0 - 0x4;0x1B;0x30;0x31;0x48;0x54;0x77;0x79;0x7A;0x7D;0x7E;0x81;0x82;0x8A;0x8B;0xA1;0xA2;0xA4;0xA5;0xAB;0xAC;0xAF;0xB4;0xBC;0xBD;0xBF;0xCA;0xCB; + 0x4;0x1B;0x30;0x31;0x48;0x54;0x79;0x7A;0x7D;0x7E;0x81;0x82;0x8A;0x8B;0xA1;0xA2;0xA4;0xA5;0xAB;0xAC;0xAF;0xBC;0xBF;0xCA;0xCB;0xCD;0xCF; diff --git a/windows/client-management/mdm/enterprisemodernappmanagement-ddf.md b/windows/client-management/mdm/enterprisemodernappmanagement-ddf.md index 5b6b0433ae..e3199dc618 100644 --- a/windows/client-management/mdm/enterprisemodernappmanagement-ddf.md +++ b/windows/client-management/mdm/enterprisemodernappmanagement-ddf.md @@ -1,7 +1,7 @@ --- title: EnterpriseModernAppManagement DDF file description: View the XML file containing the device description framework (DDF) for the EnterpriseModernAppManagement configuration service provider. -ms.date: 06/19/2024 +ms.date: 06/28/2024 --- @@ -39,7 +39,7 @@ The following XML file contains the device description framework (DDF) for the E 10.0.10586 1.0 - 0x4;0x1B;0x30;0x31;0x48;0x54;0x62;0x63;0x64;0x65;0x77;0x79;0x7A;0x7D;0x7E;0x81;0x82;0x88;0x88*;0x8A;0x8B;0xA1;0xA2;0xA4;0xA5;0xAB;0xAC;0xAF;0xB4;0xBC;0xBD;0xBF;0xCA;0xCB; + 0x4;0x1B;0x30;0x31;0x48;0x54;0x62;0x63;0x64;0x65;0x79;0x7A;0x7D;0x7E;0x81;0x82;0x88;0x8A;0x8B;0xA1;0xA2;0xA4;0xA5;0xAB;0xAC;0xAF;0xBC;0xBF;0xCA;0xCB;0xCD;0xCF; @@ -2587,7 +2587,7 @@ The following XML file contains the device description framework (DDF) for the E 10.0.10586 1.0 - 0x4;0x1B;0x30;0x31;0x48;0x54;0x62;0x63;0x64;0x65;0x77;0x79;0x7A;0x7D;0x7E;0x81;0x82;0x88;0x88*;0x8A;0x8B;0xA1;0xA2;0xA4;0xA5;0xAB;0xAC;0xAF;0xB4;0xBC;0xBD;0xBF;0xCA;0xCB; + 0x4;0x1B;0x30;0x31;0x48;0x54;0x62;0x63;0x64;0x65;0x79;0x7A;0x7D;0x7E;0x81;0x82;0x88;0x8A;0x8B;0xA1;0xA2;0xA4;0xA5;0xAB;0xAC;0xAF;0xBC;0xBF;0xCA;0xCB;0xCD;0xCF; diff --git a/windows/client-management/mdm/euiccs-ddf-file.md b/windows/client-management/mdm/euiccs-ddf-file.md index 09e6e5f725..6a148a8d22 100644 --- a/windows/client-management/mdm/euiccs-ddf-file.md +++ b/windows/client-management/mdm/euiccs-ddf-file.md @@ -1,7 +1,7 @@ --- title: eUICCs DDF file description: View the XML file containing the device description framework (DDF) for the eUICCs configuration service provider. -ms.date: 06/19/2024 +ms.date: 06/28/2024 --- @@ -43,7 +43,7 @@ The following XML file contains the device description framework (DDF) for the e 10.0.16299 1.0 - 0x4;0x1B;0x30;0x31;0x48;0x54;0x62;0x63;0x64;0x65;0x77;0x79;0x7A;0x7D;0x7E;0x81;0x82;0x8A;0x8B;0xA1;0xA2;0xA4;0xA5;0xAB;0xAC;0xAF;0xB4;0xBC;0xBD;0xBF;0xCA;0xCB; + 0x4;0x1B;0x30;0x31;0x48;0x54;0x62;0x63;0x64;0x65;0x79;0x7A;0x7D;0x7E;0x81;0x82;0x8A;0x8B;0xA1;0xA2;0xA4;0xA5;0xAB;0xAC;0xAF;0xBC;0xBF;0xCA;0xCB;0xCD;0xCF; diff --git a/windows/client-management/mdm/firewall-ddf-file.md b/windows/client-management/mdm/firewall-ddf-file.md index 2fd47c663c..e48568b2b5 100644 --- a/windows/client-management/mdm/firewall-ddf-file.md +++ b/windows/client-management/mdm/firewall-ddf-file.md @@ -1,7 +1,7 @@ --- title: Firewall DDF file description: View the XML file containing the device description framework (DDF) for the Firewall configuration service provider. -ms.date: 06/19/2024 +ms.date: 06/28/2024 --- @@ -40,7 +40,7 @@ The following XML file contains the device description framework (DDF) for the F 10.0.16299 1.0 - 0x4;0x1B;0x30;0x31;0x48;0x54;0x77;0x79;0x7A;0x7D;0x7E;0x81;0x82;0x88;0x8A;0x8B;0xA1;0xA2;0xA4;0xA5;0xAB;0xAC;0xAF;0xB4;0xBC;0xBD;0xBF;0xCA;0xCB; + 0x4;0x1B;0x30;0x31;0x48;0x54;0x79;0x7A;0x7D;0x7E;0x81;0x82;0x88;0x8A;0x8B;0xA1;0xA2;0xA4;0xA5;0xAB;0xAC;0xAF;0xBC;0xBF;0xCA;0xCB;0xCD;0xCF;0xD2; diff --git a/windows/client-management/mdm/healthattestation-ddf.md b/windows/client-management/mdm/healthattestation-ddf.md index 3b2c4265ae..0c9d382872 100644 --- a/windows/client-management/mdm/healthattestation-ddf.md +++ b/windows/client-management/mdm/healthattestation-ddf.md @@ -1,7 +1,7 @@ --- title: HealthAttestation DDF file description: View the XML file containing the device description framework (DDF) for the HealthAttestation configuration service provider. -ms.date: 06/19/2024 +ms.date: 06/28/2024 --- @@ -40,7 +40,7 @@ The following XML file contains the device description framework (DDF) for the H 10.0.10586 1.0 - 0x4;0x1B;0x30;0x31;0x48;0x54;0x62;0x63;0x64;0x65;0x77;0x79;0x7A;0x7D;0x7E;0x81;0x82;0x88;0x8A;0x8B;0xA1;0xA2;0xA4;0xA5;0xAB;0xAC;0xAF;0xB4;0xBC;0xBD;0xBF;0xCA;0xCB; + 0x4;0x1B;0x30;0x31;0x48;0x54;0x62;0x63;0x64;0x65;0x79;0x7A;0x7D;0x7E;0x81;0x82;0x88;0x8A;0x8B;0xA1;0xA2;0xA4;0xA5;0xAB;0xAC;0xAF;0xBC;0xBF;0xCA;0xCB;0xCD;0xCF;0xD2; diff --git a/windows/client-management/mdm/language-pack-management-ddf-file.md b/windows/client-management/mdm/language-pack-management-ddf-file.md index 0d5661484f..3739f4f142 100644 --- a/windows/client-management/mdm/language-pack-management-ddf-file.md +++ b/windows/client-management/mdm/language-pack-management-ddf-file.md @@ -1,7 +1,7 @@ --- title: LanguagePackManagement DDF file description: View the XML file containing the device description framework (DDF) for the LanguagePackManagement configuration service provider. -ms.date: 06/19/2024 +ms.date: 06/28/2024 --- @@ -42,7 +42,7 @@ The following XML file contains the device description framework (DDF) for the L 99.9.9999 1.0 - 0x4;0x1B;0x30;0x31;0x48;0x54;0x62;0x63;0x64;0x65;0x77;0x79;0x7A;0x7D;0x7E;0x81;0x82;0x87;0x88;0x88*;0x8A;0x8B;0xA1;0xA2;0xA4;0xA5;0xAB;0xAC;0xAF;0xB4;0xBC;0xBD;0xBF;0xCA;0xCB; + 0x4;0x1B;0x30;0x31;0x48;0x54;0x62;0x63;0x64;0x65;0x79;0x7A;0x7D;0x7E;0x81;0x82;0x88;0x8A;0x8B;0xA1;0xA2;0xA4;0xA5;0xAB;0xAC;0xAF;0xBC;0xBF;0xCA;0xCB;0xCD;0xCF;0xD2; diff --git a/windows/client-management/mdm/laps-ddf-file.md b/windows/client-management/mdm/laps-ddf-file.md index 075ff51663..5d06e470a6 100644 --- a/windows/client-management/mdm/laps-ddf-file.md +++ b/windows/client-management/mdm/laps-ddf-file.md @@ -1,7 +1,7 @@ --- title: LAPS DDF file description: View the XML file containing the device description framework (DDF) for the LAPS configuration service provider. -ms.date: 06/19/2024 +ms.date: 06/28/2024 --- @@ -40,7 +40,7 @@ The following XML file contains the device description framework (DDF) for the L 10.0.25145, 10.0.22621.1480, 10.0.22000.1754, 10.0.20348.1663, 10.0.19041.2784, 10.0.17763.4244 1.0 - 0x4;0x1B;0x30;0x31;0x48;0x54;0x62;0x63;0x64;0x65;0x77;0x79;0x7A;0x7D;0x7E;0x81;0x82;0x87;0x88;0x88*;0x8A;0x8B;0xA1;0xA2;0xA4;0xA5;0xAB;0xAC;0xAF;0xB4;0xBC;0xBD;0xBF;0xCA;0xCB; + 0x4;0x1B;0x30;0x31;0x48;0x54;0x62;0x63;0x64;0x65;0x79;0x7A;0x7D;0x7E;0x81;0x82;0x88;0x8A;0x8B;0xA1;0xA2;0xA4;0xA5;0xAB;0xAC;0xAF;0xBC;0xBF;0xCA;0xCB;0xCD;0xCF; diff --git a/windows/client-management/mdm/networkproxy-ddf.md b/windows/client-management/mdm/networkproxy-ddf.md index 41f2ea80ba..4448901798 100644 --- a/windows/client-management/mdm/networkproxy-ddf.md +++ b/windows/client-management/mdm/networkproxy-ddf.md @@ -1,7 +1,7 @@ --- title: NetworkProxy DDF file description: View the XML file containing the device description framework (DDF) for the NetworkProxy configuration service provider. -ms.date: 06/19/2024 +ms.date: 06/28/2024 --- @@ -40,7 +40,7 @@ The following XML file contains the device description framework (DDF) for the N 10.0.15063 1.0 - 0x4;0x1B;0x30;0x31;0x48;0x54;0x77;0x79;0x7A;0x7D;0x7E;0x81;0x82;0x88;0x88*;0x8A;0x8B;0xA1;0xA2;0xA4;0xA5;0xAB;0xAC;0xAF;0xB4;0xBC;0xBD;0xBF;0xCA;0xCB; + 0x4;0x1B;0x30;0x31;0x48;0x54;0x79;0x7A;0x7D;0x7E;0x81;0x82;0x88;0x8A;0x8B;0xA1;0xA2;0xA4;0xA5;0xAB;0xAC;0xAF;0xBC;0xBF;0xCA;0xCB;0xCD;0xCF;0xD2; diff --git a/windows/client-management/mdm/networkqospolicy-ddf.md b/windows/client-management/mdm/networkqospolicy-ddf.md index abcaba4547..04b4528ac6 100644 --- a/windows/client-management/mdm/networkqospolicy-ddf.md +++ b/windows/client-management/mdm/networkqospolicy-ddf.md @@ -1,7 +1,7 @@ --- title: NetworkQoSPolicy DDF file description: View the XML file containing the device description framework (DDF) for the NetworkQoSPolicy configuration service provider. -ms.date: 06/19/2024 +ms.date: 06/28/2024 --- @@ -40,7 +40,7 @@ The following XML file contains the device description framework (DDF) for the N 10.0.19042 1.0 - 0x4;0x1B;0x30;0x31;0x48;0x54;0x62;0x63;0x64;0x65;0x77;0x79;0x7A;0x7D;0x7E;0x81;0x82;0x88;0x8A;0x8B;0xA1;0xA2;0xA4;0xA5;0xAB;0xAC;0xAF;0xB4;0xBC;0xBD;0xBF;0xCA;0xCB; + 0x4;0x1B;0x30;0x31;0x48;0x54;0x62;0x63;0x64;0x65;0x79;0x7A;0x7D;0x7E;0x81;0x82;0x88;0x8A;0x8B;0xA1;0xA2;0xA4;0xA5;0xAB;0xAC;0xAF;0xBC;0xBF;0xCA;0xCB;0xCD;0xCF;0xD2; diff --git a/windows/client-management/mdm/nodecache-ddf-file.md b/windows/client-management/mdm/nodecache-ddf-file.md index 996cc4512c..4d442904e4 100644 --- a/windows/client-management/mdm/nodecache-ddf-file.md +++ b/windows/client-management/mdm/nodecache-ddf-file.md @@ -1,7 +1,7 @@ --- title: NodeCache DDF file description: View the XML file containing the device description framework (DDF) for the NodeCache configuration service provider. -ms.date: 06/19/2024 +ms.date: 06/28/2024 --- @@ -40,7 +40,7 @@ The following XML file contains the device description framework (DDF) for the N 10.0.15063 1.1 - 0x4;0x1B;0x30;0x31;0x48;0x54;0x62;0x63;0x64;0x65;0x77;0x79;0x7A;0x7D;0x7E;0x81;0x82;0x87;0x88;0x88*;0x8A;0x8B;0xA1;0xA2;0xA4;0xA5;0xAB;0xAC;0xAF;0xB4;0xBC;0xBD;0xBF;0xCA;0xCB; + 0x4;0x1B;0x30;0x31;0x48;0x54;0x62;0x63;0x64;0x65;0x79;0x7A;0x7D;0x7E;0x81;0x82;0x88;0x8A;0x8B;0xA1;0xA2;0xA4;0xA5;0xAB;0xAC;0xAF;0xBC;0xBF;0xCA;0xCB;0xCD;0xCF;0xD2; @@ -294,7 +294,7 @@ The following XML file contains the device description framework (DDF) for the N 10.0.10586 1.0 - 0x4;0x1B;0x30;0x31;0x48;0x54;0x62;0x63;0x64;0x65;0x77;0x79;0x7A;0x7D;0x7E;0x81;0x82;0x87;0x88;0x88*;0x8A;0x8B;0xA1;0xA2;0xA4;0xA5;0xAB;0xAC;0xAF;0xB4;0xBC;0xBD;0xBF;0xCA;0xCB; + 0x4;0x1B;0x30;0x31;0x48;0x54;0x62;0x63;0x64;0x65;0x79;0x7A;0x7D;0x7E;0x81;0x82;0x88;0x8A;0x8B;0xA1;0xA2;0xA4;0xA5;0xAB;0xAC;0xAF;0xBC;0xBF;0xCA;0xCB;0xCD;0xCF;0xD2; diff --git a/windows/client-management/mdm/office-ddf.md b/windows/client-management/mdm/office-ddf.md index d9dd3ecaa7..e36405ce71 100644 --- a/windows/client-management/mdm/office-ddf.md +++ b/windows/client-management/mdm/office-ddf.md @@ -1,7 +1,7 @@ --- title: Office DDF file description: View the XML file containing the device description framework (DDF) for the Office configuration service provider. -ms.date: 06/19/2024 +ms.date: 06/28/2024 --- @@ -40,7 +40,7 @@ The following XML file contains the device description framework (DDF) for the O 10.0.15063 1.0 - 0x4;0x1B;0x30;0x31;0x48;0x54;0x77;0x79;0x7A;0x7D;0x7E;0x81;0x82;0x8A;0x8B;0xA1;0xA2;0xA4;0xA5;0xAB;0xAC;0xAF;0xB4;0xBC;0xBD;0xBF;0xCA;0xCB; + 0x4;0x1B;0x30;0x31;0x48;0x54;0x79;0x7A;0x7D;0x7E;0x81;0x82;0x8A;0x8B;0xA1;0xA2;0xA4;0xA5;0xAB;0xAC;0xAF;0xBC;0xBF;0xCA;0xCB;0xCD;0xCF; @@ -211,7 +211,7 @@ The following XML file contains the device description framework (DDF) for the O 10.0.15063 1.0 - 0x4;0x1B;0x30;0x31;0x48;0x54;0x77;0x79;0x7A;0x7D;0x7E;0x81;0x82;0x8A;0x8B;0xA1;0xA2;0xA4;0xA5;0xAB;0xAC;0xAF;0xB4;0xBC;0xBD;0xBF;0xCA;0xCB; + 0x4;0x1B;0x30;0x31;0x48;0x54;0x79;0x7A;0x7D;0x7E;0x81;0x82;0x8A;0x8B;0xA1;0xA2;0xA4;0xA5;0xAB;0xAC;0xAF;0xBC;0xBF;0xCA;0xCB;0xCD;0xCF; diff --git a/windows/client-management/mdm/passportforwork-ddf.md b/windows/client-management/mdm/passportforwork-ddf.md index d80b42baec..c94b22aed5 100644 --- a/windows/client-management/mdm/passportforwork-ddf.md +++ b/windows/client-management/mdm/passportforwork-ddf.md @@ -1,7 +1,7 @@ --- title: PassportForWork DDF file description: View the XML file containing the device description framework (DDF) for the PassportForWork configuration service provider. -ms.date: 06/21/2024 +ms.date: 06/28/2024 --- @@ -39,7 +39,7 @@ The following XML file contains the device description framework (DDF) for the P 10.0.10586 1.2 - 0x4;0x1B;0x30;0x31;0x48;0x54;0x62;0x63;0x64;0x65;0x77;0x79;0x7A;0x7D;0x7E;0x81;0x82;0x87;0x88;0x88*;0x8A;0x8B;0xA1;0xA2;0xA4;0xA5;0xAB;0xAC;0xAF;0xB4;0xBC;0xBD;0xBF;0xCA;0xCB; + 0x4;0x1B;0x30;0x31;0x48;0x54;0x62;0x63;0x64;0x65;0x79;0x7A;0x7D;0x7E;0x81;0x82;0x88;0x8A;0x8B;0xA1;0xA2;0xA4;0xA5;0xAB;0xAC;0xAF;0xBC;0xBF;0xCA;0xCB;0xCD;0xCF;0xD2; @@ -565,7 +565,7 @@ If you do not configure this policy setting, Windows Hello for Business requires 10.0.10586 1.2 - 0x4;0x1B;0x30;0x31;0x48;0x54;0x62;0x63;0x64;0x65;0x77;0x79;0x7A;0x7D;0x7E;0x81;0x82;0x87;0x88;0x88*;0x8A;0x8B;0xA1;0xA2;0xA4;0xA5;0xAB;0xAC;0xAF;0xB4;0xBC;0xBD;0xBF;0xCA;0xCB; + 0x4;0x1B;0x30;0x31;0x48;0x54;0x62;0x63;0x64;0x65;0x79;0x7A;0x7D;0x7E;0x81;0x82;0x88;0x8A;0x8B;0xA1;0xA2;0xA4;0xA5;0xAB;0xAC;0xAF;0xBC;0xBF;0xCA;0xCB;0xCD;0xCF;0xD2; @@ -895,7 +895,7 @@ If you disable or do not configure this policy setting, the PIN recovery secret False - Windows Hello for Business can use certificates to authenticate to on-premise resources. + Windows Hello for Business can use certificates to authenticate to on-premise resources. If you enable this policy setting, Windows Hello for Business will wait until the device has received a certificate payload from the mobile device management server before provisioning a PIN. diff --git a/windows/client-management/mdm/personaldataencryption-ddf-file.md b/windows/client-management/mdm/personaldataencryption-ddf-file.md index 5b3b1d0111..165f97507c 100644 --- a/windows/client-management/mdm/personaldataencryption-ddf-file.md +++ b/windows/client-management/mdm/personaldataencryption-ddf-file.md @@ -1,7 +1,7 @@ --- title: PDE DDF file description: View the XML file containing the device description framework (DDF) for the PDE configuration service provider. -ms.date: 06/19/2024 +ms.date: 06/28/2024 --- @@ -39,7 +39,7 @@ The following XML file contains the device description framework (DDF) for the P 10.0.22621 1.0 - 0x4;0x1B;0x48;0x54;0x79;0x7A;0x7D;0x7E;0x81;0x82;0x87;0x88;0x88*;0xAB;0xAC;0xB4;0xBC;0xBD;0xBF; + 0x4;0x1B;0x48;0x54;0x79;0x7A;0x7D;0x7E;0x81;0x82;0x88;0xAB;0xAC;0xBC;0xBF;0xCD;0xCF; diff --git a/windows/client-management/mdm/personalization-ddf.md b/windows/client-management/mdm/personalization-ddf.md index 5f6b982951..5a52a16784 100644 --- a/windows/client-management/mdm/personalization-ddf.md +++ b/windows/client-management/mdm/personalization-ddf.md @@ -1,7 +1,7 @@ --- title: Personalization DDF file description: View the XML file containing the device description framework (DDF) for the Personalization configuration service provider. -ms.date: 06/19/2024 +ms.date: 06/28/2024 --- @@ -42,7 +42,7 @@ The following XML file contains the device description framework (DDF) for the P 10.0.16299 1.0 - 0x4;0x1B;0x30;0x31;0x48;0x54;0x77;0x79;0x7A;0x7D;0x7E;0x81;0x82;0x87;0x88;0x88*;0x8A;0x8B;0xA1;0xA2;0xA4;0xA5;0xAB;0xAC;0xAF;0xB4;0xBC;0xBD;0xBF;0xCA;0xCB; + 0x4;0x1B;0x30;0x31;0x48;0x54;0x79;0x7A;0x7D;0x7E;0x81;0x82;0x88;0x8A;0x8B;0xA1;0xA2;0xA4;0xA5;0xAB;0xAC;0xAF;0xBC;0xBF;0xCA;0xCB;0xCD;0xCF;0xD2; diff --git a/windows/client-management/mdm/policies-in-policy-csp-admx-backed.md b/windows/client-management/mdm/policies-in-policy-csp-admx-backed.md index 773526f0c6..3c0d28e2e6 100644 --- a/windows/client-management/mdm/policies-in-policy-csp-admx-backed.md +++ b/windows/client-management/mdm/policies-in-policy-csp-admx-backed.md @@ -1,7 +1,7 @@ --- title: ADMX-backed policies in Policy CSP description: Learn about the ADMX-backed policies in Policy CSP. -ms.date: 06/19/2024 +ms.date: 06/28/2024 --- @@ -1663,7 +1663,6 @@ This article lists the ADMX-backed policies in Policy CSP. - [TS_NoSecurityMenu](policy-csp-admx-terminalserver.md) - [TS_START_PROGRAM_2](policy-csp-admx-terminalserver.md) - [TS_SERVER_ADVANCED_REMOTEFX_REMOTEAPP](policy-csp-admx-terminalserver.md) -- [TS_SERVER_REMOTEAPP_USE_SHELLAPPRUNTIME](policy-csp-admx-terminalserver.md) - [TS_DX_USE_FULL_HWGPU](policy-csp-admx-terminalserver.md) - [TS_SERVER_WDDM_GRAPHICS_DRIVER](policy-csp-admx-terminalserver.md) - [TS_TSCC_PERMISSIONS_POLICY](policy-csp-admx-terminalserver.md) @@ -1944,6 +1943,7 @@ This article lists the ADMX-backed policies in Policy CSP. - [IZ_Policy_OpenSearchQuery_Trusted](policy-csp-admx-windowsexplorer.md) - [IZ_Policy_OpenSearchPreview_Trusted](policy-csp-admx-windowsexplorer.md) - [EnableShellShortcutIconRemotePath](policy-csp-admx-windowsexplorer.md) +- [DisableMotWOnInsecurePathCopy](policy-csp-admx-windowsexplorer.md) - [EnableSmartScreen](policy-csp-admx-windowsexplorer.md) - [NoNewAppAlert](policy-csp-admx-windowsexplorer.md) - [ShowHibernateOption](policy-csp-admx-windowsexplorer.md) @@ -2539,6 +2539,7 @@ This article lists the ADMX-backed policies in Policy CSP. - [DoNotAllowWebAuthnRedirection](policy-csp-remotedesktopservices.md) - [DisconnectOnLockLegacyAuthn](policy-csp-remotedesktopservices.md) - [DisconnectOnLockMicrosoftIdentityAuthn](policy-csp-remotedesktopservices.md) +- [TS_SERVER_REMOTEAPP_USE_SHELLAPPRUNTIME](policy-csp-remotedesktopservices.md) ## RemoteManagement diff --git a/windows/client-management/mdm/policies-in-policy-csp-supported-by-group-policy.md b/windows/client-management/mdm/policies-in-policy-csp-supported-by-group-policy.md index 74c2d24c74..a9bd1aa0ed 100644 --- a/windows/client-management/mdm/policies-in-policy-csp-supported-by-group-policy.md +++ b/windows/client-management/mdm/policies-in-policy-csp-supported-by-group-policy.md @@ -1,7 +1,7 @@ --- title: Policies in Policy CSP supported by Group Policy description: Learn about the policies in Policy CSP supported by Group Policy. -ms.date: 06/19/2024 +ms.date: 06/28/2024 --- @@ -530,6 +530,10 @@ This article lists the policies in Policy CSP that have a group policy mapping. - [LetAppsAccessEmail_ForceAllowTheseApps](policy-csp-privacy.md) - [LetAppsAccessEmail_ForceDenyTheseApps](policy-csp-privacy.md) - [LetAppsAccessEmail_UserInControlOfTheseApps](policy-csp-privacy.md) +- [LetAppsAccessGenerativeAI](policy-csp-privacy.md) +- [LetAppsAccessGenerativeAI_ForceAllowTheseApps](policy-csp-privacy.md) +- [LetAppsAccessGenerativeAI_ForceDenyTheseApps](policy-csp-privacy.md) +- [LetAppsAccessGenerativeAI_UserInControlOfTheseApps](policy-csp-privacy.md) - [LetAppsAccessGraphicsCaptureProgrammatic](policy-csp-privacy.md) - [LetAppsAccessGraphicsCaptureProgrammatic_ForceAllowTheseApps](policy-csp-privacy.md) - [LetAppsAccessGraphicsCaptureProgrammatic_ForceDenyTheseApps](policy-csp-privacy.md) @@ -873,7 +877,6 @@ This article lists the policies in Policy CSP that have a group policy mapping. - [TurnOffWindowsCopilot](policy-csp-windowsai.md) - [DisableAIDataAnalysis](policy-csp-windowsai.md) -- [AllowImageCreator](policy-csp-windowsai.md) ## WindowsDefenderSecurityCenter diff --git a/windows/client-management/mdm/policy-csp-admx-terminalserver.md b/windows/client-management/mdm/policy-csp-admx-terminalserver.md index 9209e4e647..42757e235e 100644 --- a/windows/client-management/mdm/policy-csp-admx-terminalserver.md +++ b/windows/client-management/mdm/policy-csp-admx-terminalserver.md @@ -1,7 +1,7 @@ --- title: ADMX_TerminalServer Policy CSP description: Learn more about the ADMX_TerminalServer Area in Policy CSP. -ms.date: 06/19/2024 +ms.date: 06/28/2024 --- @@ -4109,56 +4109,6 @@ This policy setting allows the administrator to configure the RemoteFX experienc - -## TS_SERVER_REMOTEAPP_USE_SHELLAPPRUNTIME - - -| Scope | Editions | Applicable OS | -|:--|:--|:--| -| ✅ Device
❌ User | ✅ Pro
✅ Enterprise
✅ Education
✅ Windows SE
✅ IoT Enterprise / IoT Enterprise LTSC | ✅ Windows 10, version 2004 [10.0.19041.1202] and later
✅ Windows 10, version 2009 [10.0.19042.1202] and later
✅ Windows 10, version 21H1 [10.0.19043.1202] and later
✅ Windows 11, version 21H2 [10.0.22000] and later | - - - -```Device -./Device/Vendor/MSFT/Policy/Config/ADMX_TerminalServer/TS_SERVER_REMOTEAPP_USE_SHELLAPPRUNTIME -``` - - - - - - - - - - - -**Description framework properties**: - -| Property name | Property value | -|:--|:--| -| Format | `chr` (string) | -| Access Type | Add, Delete, Get, Replace | - - - - -[!INCLUDE [ADMX-backed policy note](includes/mdm-admx-policy-note.md)] - -**ADMX mapping**: - -| Name | Value | -|:--|:--| -| Name | TS_SERVER_REMOTEAPP_USE_SHELLAPPRUNTIME | -| ADMX File Name | TerminalServer.admx | - - - - - - - - ## TS_SERVER_VISEXP diff --git a/windows/client-management/mdm/policy-csp-admx-windowsexplorer.md b/windows/client-management/mdm/policy-csp-admx-windowsexplorer.md index 7fe9bd9679..aa8dc35733 100644 --- a/windows/client-management/mdm/policy-csp-admx-windowsexplorer.md +++ b/windows/client-management/mdm/policy-csp-admx-windowsexplorer.md @@ -1,7 +1,7 @@ --- title: ADMX_WindowsExplorer Policy CSP description: Learn more about the ADMX_WindowsExplorer Area in Policy CSP. -ms.date: 01/18/2024 +ms.date: 06/28/2024 --- @@ -456,6 +456,56 @@ You can specify a known folder using its known folder id or using its canonical + +## DisableMotWOnInsecurePathCopy + + +| Scope | Editions | Applicable OS | +|:--|:--|:--| +| ✅ Device
❌ User | ✅ Pro
✅ Enterprise
✅ Education
✅ Windows SE
✅ IoT Enterprise / IoT Enterprise LTSC | ✅ Windows 10, version 2004 [10.0.19041.1202] and later
✅ Windows 10, version 2009 [10.0.19042.1202] and later
✅ Windows 10, version 21H1 [10.0.19043.1202] and later
✅ Windows 11, version 21H2 [10.0.22000] and later | + + + +```Device +./Device/Vendor/MSFT/Policy/Config/ADMX_WindowsExplorer/DisableMotWOnInsecurePathCopy +``` + + + + + + + + + + + +**Description framework properties**: + +| Property name | Property value | +|:--|:--| +| Format | `chr` (string) | +| Access Type | Add, Delete, Get, Replace | + + + + +[!INCLUDE [ADMX-backed policy note](includes/mdm-admx-policy-note.md)] + +**ADMX mapping**: + +| Name | Value | +|:--|:--| +| Name | DisableMotWOnInsecurePathCopy | +| ADMX File Name | WindowsExplorer.admx | + + + + + + + + ## DisableSearchBoxSuggestions diff --git a/windows/client-management/mdm/policy-csp-defender.md b/windows/client-management/mdm/policy-csp-defender.md index ba4d3d7bde..a790f24a26 100644 --- a/windows/client-management/mdm/policy-csp-defender.md +++ b/windows/client-management/mdm/policy-csp-defender.md @@ -1,7 +1,7 @@ --- title: Defender Policy CSP description: Learn more about the Defender Area in Policy CSP. -ms.date: 01/18/2024 +ms.date: 06/28/2024 --- @@ -402,7 +402,7 @@ This policy setting allows you to manage whether or not to scan for malicious so |:--|:--| | Format | `int` | | Access Type | Add, Delete, Get, Replace | -| Default Value | 1 | +| Default Value | 0 | @@ -410,8 +410,8 @@ This policy setting allows you to manage whether or not to scan for malicious so | Value | Description | |:--|:--| -| 0 | Not allowed. Turns off scanning on removable drives. | -| 1 (Default) | Allowed. Scans removable drives. | +| 0 (Default) | Not allowed. Turns off scanning on removable drives. | +| 1 | Allowed. Scans removable drives. | diff --git a/windows/client-management/mdm/policy-csp-privacy.md b/windows/client-management/mdm/policy-csp-privacy.md index 4713b9e21b..ade6bf6cb1 100644 --- a/windows/client-management/mdm/policy-csp-privacy.md +++ b/windows/client-management/mdm/policy-csp-privacy.md @@ -1,7 +1,7 @@ --- title: Privacy Policy CSP description: Learn more about the Privacy Area in Policy CSP. -ms.date: 06/21/2024 +ms.date: 06/28/2024 --- @@ -2398,6 +2398,207 @@ List of semi-colon delimited Package Family Names of Windows Store Apps. The use + +## LetAppsAccessGenerativeAI + + +| Scope | Editions | Applicable OS | +|:--|:--|:--| +| ✅ Device
❌ User | ✅ Pro
✅ Enterprise
✅ Education
✅ Windows SE
✅ IoT Enterprise / IoT Enterprise LTSC | ✅ Windows 11, version 21H2 [10.0.22000] and later | + + + +```Device +./Device/Vendor/MSFT/Policy/Config/Privacy/LetAppsAccessGenerativeAI +``` + + + + +This policy setting specifies whether Windows apps can use generative AI features of Windows. + + + + + + + +**Description framework properties**: + +| Property name | Property value | +|:--|:--| +| Format | `int` | +| Access Type | Add, Delete, Get, Replace | +| Allowed Values | Range: `[0-2]` | +| Default Value | 0 | + + + +**Group policy mapping**: + +| Name | Value | +|:--|:--| +| Name | LetAppsAccessGenerativeAI | +| Path | AppPrivacy > AT > WindowsComponents > AppPrivacy | +| Element Name | LetAppsAccessGenerativeAI_Enum | + + + + + + + + + +## LetAppsAccessGenerativeAI_ForceAllowTheseApps + + +| Scope | Editions | Applicable OS | +|:--|:--|:--| +| ✅ Device
❌ User | ✅ Pro
✅ Enterprise
✅ Education
✅ Windows SE
✅ IoT Enterprise / IoT Enterprise LTSC | ✅ Windows 11, version 21H2 [10.0.22000] and later | + + + +```Device +./Device/Vendor/MSFT/Policy/Config/Privacy/LetAppsAccessGenerativeAI_ForceAllowTheseApps +``` + + + + +List of semi-colon delimited Package Family Names of Microsoft Store Apps. Listed apps are allowed to use generative AI features of Windows. This setting overrides the default LetAppsAccessGenerativeAI policy setting for the specified apps. + + + + + + + +**Description framework properties**: + +| Property name | Property value | +|:--|:--| +| Format | `chr` (string) | +| Access Type | Add, Delete, Get, Replace | +| Allowed Values | List (Delimiter: `;`) | + + + +**Group policy mapping**: + +| Name | Value | +|:--|:--| +| Name | LetAppsAccessGenerativeAI | +| Path | AppPrivacy > AT > WindowsComponents > AppPrivacy | +| Element Name | LetAppsAccessGenerativeAI_ForceAllowTheseApps_List | + + + + + + + + + +## LetAppsAccessGenerativeAI_ForceDenyTheseApps + + +| Scope | Editions | Applicable OS | +|:--|:--|:--| +| ✅ Device
❌ User | ✅ Pro
✅ Enterprise
✅ Education
✅ Windows SE
✅ IoT Enterprise / IoT Enterprise LTSC | ✅ Windows 11, version 21H2 [10.0.22000] and later | + + + +```Device +./Device/Vendor/MSFT/Policy/Config/Privacy/LetAppsAccessGenerativeAI_ForceDenyTheseApps +``` + + + + +List of semi-colon delimited Package Family Names of Microsoft Store Apps. Listed apps are denied the use generative AI features of Windows. This setting overrides the default LetAppsAccessGenerativeAI policy setting for the specified apps. + + + + + + + +**Description framework properties**: + +| Property name | Property value | +|:--|:--| +| Format | `chr` (string) | +| Access Type | Add, Delete, Get, Replace | +| Allowed Values | List (Delimiter: `;`) | + + + +**Group policy mapping**: + +| Name | Value | +|:--|:--| +| Name | LetAppsAccessGenerativeAI | +| Path | AppPrivacy > AT > WindowsComponents > AppPrivacy | +| Element Name | LetAppsAccessGenerativeAI_ForceDenyTheseApps_List | + + + + + + + + + +## LetAppsAccessGenerativeAI_UserInControlOfTheseApps + + +| Scope | Editions | Applicable OS | +|:--|:--|:--| +| ✅ Device
❌ User | ✅ Pro
✅ Enterprise
✅ Education
✅ Windows SE
✅ IoT Enterprise / IoT Enterprise LTSC | ✅ Windows 11, version 21H2 [10.0.22000] and later | + + + +```Device +./Device/Vendor/MSFT/Policy/Config/Privacy/LetAppsAccessGenerativeAI_UserInControlOfTheseApps +``` + + + + +List of semi-colon delimited Package Family Names of Microsoft Store Apps. The user is able to control the generative AI setting for the listed apps. This setting overrides the default LetAppsAccessGenerativeAI policy setting for the specified apps. + + + + + + + +**Description framework properties**: + +| Property name | Property value | +|:--|:--| +| Format | `chr` (string) | +| Access Type | Add, Delete, Get, Replace | +| Allowed Values | List (Delimiter: `;`) | + + + +**Group policy mapping**: + +| Name | Value | +|:--|:--| +| Name | LetAppsAccessGenerativeAI | +| Path | AppPrivacy > AT > WindowsComponents > AppPrivacy | +| Element Name | LetAppsAccessGenerativeAI_UserInControlOfTheseApps_List | + + + + + + + + ## LetAppsAccessGraphicsCaptureProgrammatic diff --git a/windows/client-management/mdm/policy-csp-remotedesktopservices.md b/windows/client-management/mdm/policy-csp-remotedesktopservices.md index 6a06309613..4e865bd15f 100644 --- a/windows/client-management/mdm/policy-csp-remotedesktopservices.md +++ b/windows/client-management/mdm/policy-csp-remotedesktopservices.md @@ -1,7 +1,7 @@ --- title: RemoteDesktopServices Policy CSP description: Learn more about the RemoteDesktopServices Area in Policy CSP. -ms.date: 06/21/2024 +ms.date: 06/28/2024 --- @@ -439,7 +439,7 @@ By default, Remote Desktop allows redirection of WebAuthn requests. | Scope | Editions | Applicable OS | |:--|:--|:--| -| ✅ Device
✅ User | ✅ Pro
✅ Enterprise
✅ Education
✅ Windows SE
✅ IoT Enterprise / IoT Enterprise LTSC | ✅ [10.0.20348.2400] and later
✅ [10.0.25398.827] and later
✅ Windows 11, version 21H2 [10.0.22000.2898] and later
✅ Windows 11, version 22H2 [10.0.22621.3374] and later
✅ Windows 11, version 23H2 [10.0.22631.3374] and later
✅ Windows Insider Preview | +| ✅ Device
✅ User | ✅ Pro
✅ Enterprise
✅ Education
✅ Windows SE
✅ IoT Enterprise / IoT Enterprise LTSC | ✅ [10.0.20348.2523] and later
✅ [10.0.25398.946] and later
✅ Windows 11, version 21H2 [10.0.22000.3014] and later
✅ Windows 11, version 22H2 [10.0.22621.3672] and later
✅ Windows 11, version 23H2 [10.0.22631.3672] and later
✅ Windows Insider Preview | @@ -493,7 +493,7 @@ By default, Remote Desktop allows redirection of WebAuthn requests. | Scope | Editions | Applicable OS | |:--|:--|:--| -| ✅ Device
✅ User | ✅ Pro
✅ Enterprise
✅ Education
✅ Windows SE
✅ IoT Enterprise / IoT Enterprise LTSC | ✅ [10.0.20348.2400] and later
✅ [10.0.25398.827] and later
✅ Windows 11, version 21H2 [10.0.22000.2898] and later
✅ Windows 11, version 22H2 [10.0.22621.3374] and later
✅ Windows 11, version 23H2 [10.0.22631.3374] and later
✅ Windows Insider Preview | +| ✅ Device
✅ User | ✅ Pro
✅ Enterprise
✅ Education
✅ Windows SE
✅ IoT Enterprise / IoT Enterprise LTSC | ✅ [10.0.20348.2523] and later
✅ [10.0.25398.946] and later
✅ Windows 11, version 21H2 [10.0.22000.3014] and later
✅ Windows 11, version 22H2 [10.0.22621.3672] and later
✅ Windows 11, version 23H2 [10.0.22631.3672] and later
✅ Windows Insider Preview | @@ -672,6 +672,56 @@ If the status is set to Not Configured, unsecured communication is allowed. + +## TS_SERVER_REMOTEAPP_USE_SHELLAPPRUNTIME + + +| Scope | Editions | Applicable OS | +|:--|:--|:--| +| ✅ Device
❌ User | ✅ Pro
✅ Enterprise
✅ Education
✅ Windows SE
✅ IoT Enterprise / IoT Enterprise LTSC | ✅ [10.0.20348.2400] and later
✅ [10.0.25398.827] and later
✅ Windows 11, version 21H2 [10.0.22000.2898] and later
✅ Windows 11, version 22H2 [10.0.22621.3374] and later
✅ Windows 11, version 23H2 [10.0.22631.3374] and later
✅ Windows Insider Preview | + + + +```Device +./Device/Vendor/MSFT/Policy/Config/RemoteDesktopServices/TS_SERVER_REMOTEAPP_USE_SHELLAPPRUNTIME +``` + + + + + + + + + + + +**Description framework properties**: + +| Property name | Property value | +|:--|:--| +| Format | `chr` (string) | +| Access Type | Add, Delete, Get, Replace | + + + + +[!INCLUDE [ADMX-backed policy note](includes/mdm-admx-policy-note.md)] + +**ADMX mapping**: + +| Name | Value | +|:--|:--| +| Name | TS_SERVER_REMOTEAPP_USE_SHELLAPPRUNTIME | +| ADMX File Name | TerminalServer.admx | + + + + + + + + diff --git a/windows/client-management/mdm/policy-csp-windowsai.md b/windows/client-management/mdm/policy-csp-windowsai.md index 8f672a114e..c971a471a8 100644 --- a/windows/client-management/mdm/policy-csp-windowsai.md +++ b/windows/client-management/mdm/policy-csp-windowsai.md @@ -1,7 +1,7 @@ --- title: WindowsAI Policy CSP description: Learn more about the WindowsAI Area in Policy CSP. -ms.date: 06/19/2024 +ms.date: 06/28/2024 --- @@ -15,68 +15,6 @@ ms.date: 06/19/2024 - -## AllowImageCreator - - -| Scope | Editions | Applicable OS | -|:--|:--|:--| -| ✅ Device
❌ User | ✅ Pro
✅ Enterprise
✅ Education
✅ Windows SE
✅ IoT Enterprise / IoT Enterprise LTSC | ✅ Windows Insider Preview | - - - -```Device -./Device/Vendor/MSFT/Policy/Config/WindowsAI/AllowImageCreator -``` - - - - -This policy setting allows you to control whether Image Creator functionality is available in the Windows Paint app. - -- If you disable this policy setting, Image Creator functionality won't be accessible in the Windows Paint app. - -- If you enable or don't configure this policy setting, users will be able to access Image Creator functionality. - - - - - - - -**Description framework properties**: - -| Property name | Property value | -|:--|:--| -| Format | `int` | -| Access Type | Add, Delete, Get, Replace | -| Default Value | 1 | - - - -**Allowed values**: - -| Value | Description | -|:--|:--| -| 0 | Disabled. | -| 1 (Default) | Enabled. | - - - -**Group policy mapping**: - -| Name | Value | -|:--|:--| -| Name | AllowImageCreator | -| Path | WindowsAI > AT > WindowsComponents > Paint | - - - - - - - - ## DisableAIDataAnalysis @@ -94,11 +32,7 @@ This policy setting allows you to control whether Image Creator functionality is -This policy setting allows you to control whether Windows saves snapshots of the screen and analyzes the user's activity on their device. - -- If you enable this policy setting, Windows won't be able to save snapshots and users won't be able to search for or browse through their historical device activity using Recall. - -- If you disable or don't configure this policy setting, Windows will save snapshots of the screen and users will be able to search for or browse through a timeline of their past activities using Recall. +This policy setting allows you to determine whether end users have the option to allow snapshots to be saved on their PCs. If disabled, end users will have a choice to save snapshots of their screen on their PC and then use Recall to find things they've seen. If the policy is enabled, end users won't be able to save snapshots on their PC. If the policy isn't configured, end users may or may not be able to save snapshots on their PC-depending on other policy configurations. @@ -120,8 +54,8 @@ This policy setting allows you to control whether Windows saves snapshots of the | Value | Description | |:--|:--| -| 0 (Default) | Enable saving Snapshots for Windows. | -| 1 | Disable saving Snapshots for Windows. | +| 0 (Default) | Enable Saving Snapshots for Windows. | +| 1 | Disable Saving Snapshots for Windows. | diff --git a/windows/client-management/mdm/printerprovisioning-ddf-file.md b/windows/client-management/mdm/printerprovisioning-ddf-file.md index 4aa2087423..e4db037ecb 100644 --- a/windows/client-management/mdm/printerprovisioning-ddf-file.md +++ b/windows/client-management/mdm/printerprovisioning-ddf-file.md @@ -1,7 +1,7 @@ --- title: PrinterProvisioning DDF file description: View the XML file containing the device description framework (DDF) for the PrinterProvisioning configuration service provider. -ms.date: 06/19/2024 +ms.date: 06/28/2024 --- @@ -40,7 +40,7 @@ The following XML file contains the device description framework (DDF) for the P 10.0.22000, 10.0.19044.1806, 10.0.19043.1806, 10.0.19042.1806 1.0 - 0x4;0x1B;0x30;0x31;0x48;0x54;0x62;0x63;0x64;0x65;0x77;0x79;0x7A;0x7D;0x7E;0x81;0x82;0x87;0x88;0x88*;0x8A;0x8B;0xA1;0xA2;0xA4;0xA5;0xAB;0xAC;0xAF;0xB4;0xBC;0xBD;0xBF;0xCA;0xCB; + 0x4;0x1B;0x30;0x31;0x48;0x54;0x62;0x63;0x64;0x65;0x79;0x7A;0x7D;0x7E;0x81;0x82;0x88;0x8A;0x8B;0xA1;0xA2;0xA4;0xA5;0xAB;0xAC;0xAF;0xBC;0xBF;0xCA;0xCB;0xCD;0xCF; diff --git a/windows/client-management/mdm/reboot-ddf-file.md b/windows/client-management/mdm/reboot-ddf-file.md index 3bca6f69a4..ab06e22815 100644 --- a/windows/client-management/mdm/reboot-ddf-file.md +++ b/windows/client-management/mdm/reboot-ddf-file.md @@ -1,7 +1,7 @@ --- title: Reboot DDF file description: View the XML file containing the device description framework (DDF) for the Reboot configuration service provider. -ms.date: 06/19/2024 +ms.date: 06/28/2024 --- @@ -40,7 +40,7 @@ The following XML file contains the device description framework (DDF) for the R 10.0.14393 1.0 - 0x4;0x1B;0x30;0x31;0x48;0x54;0x77;0x79;0x7A;0x7D;0x7E;0x81;0x82;0x8A;0x8B;0xA1;0xA2;0xA4;0xA5;0xAB;0xAC;0xAF;0xB4;0xBC;0xBD;0xBF;0xCA;0xCB; + 0x4;0x1B;0x30;0x31;0x48;0x54;0x79;0x7A;0x7D;0x7E;0x81;0x82;0x88;0x8A;0x8B;0xA1;0xA2;0xA4;0xA5;0xAB;0xAC;0xAF;0xBC;0xBF;0xCA;0xCB;0xCD;0xCF;0xD2; diff --git a/windows/client-management/mdm/rootcacertificates-ddf-file.md b/windows/client-management/mdm/rootcacertificates-ddf-file.md index 2a8292e9f6..5479190d60 100644 --- a/windows/client-management/mdm/rootcacertificates-ddf-file.md +++ b/windows/client-management/mdm/rootcacertificates-ddf-file.md @@ -1,7 +1,7 @@ --- title: RootCATrustedCertificates DDF file description: View the XML file containing the device description framework (DDF) for the RootCATrustedCertificates configuration service provider. -ms.date: 06/19/2024 +ms.date: 06/28/2024 --- @@ -40,7 +40,7 @@ The following XML file contains the device description framework (DDF) for the R 10.0.10586 1.0 - 0x4;0x1B;0x30;0x31;0x48;0x54;0x62;0x63;0x64;0x65;0x77;0x79;0x7A;0x7D;0x7E;0x81;0x82;0x87;0x88;0x88*;0x8A;0x8B;0xA1;0xA2;0xA4;0xA5;0xAB;0xAC;0xAF;0xB4;0xBC;0xBD;0xBF;0xCA;0xCB; + 0x4;0x1B;0x30;0x31;0x48;0x54;0x62;0x63;0x64;0x65;0x79;0x7A;0x7D;0x7E;0x81;0x82;0x88;0x8A;0x8B;0xA1;0xA2;0xA4;0xA5;0xAB;0xAC;0xAF;0xBC;0xBF;0xCA;0xCB;0xCD;0xCF;0xD2; @@ -1067,7 +1067,7 @@ The following XML file contains the device description framework (DDF) for the R 10.0.10586 1.0 - 0x4;0x1B;0x30;0x31;0x48;0x54;0x62;0x63;0x64;0x65;0x77;0x79;0x7A;0x7D;0x7E;0x81;0x82;0x87;0x88;0x88*;0x8A;0x8B;0xA1;0xA2;0xA4;0xA5;0xAB;0xAC;0xAF;0xB4;0xBC;0xBD;0xBF;0xCA;0xCB; + 0x4;0x1B;0x30;0x31;0x48;0x54;0x62;0x63;0x64;0x65;0x79;0x7A;0x7D;0x7E;0x81;0x82;0x88;0x8A;0x8B;0xA1;0xA2;0xA4;0xA5;0xAB;0xAC;0xAF;0xBC;0xBF;0xCA;0xCB;0xCD;0xCF;0xD2; diff --git a/windows/client-management/mdm/secureassessment-ddf-file.md b/windows/client-management/mdm/secureassessment-ddf-file.md index d45d5f6b92..7d49cb3604 100644 --- a/windows/client-management/mdm/secureassessment-ddf-file.md +++ b/windows/client-management/mdm/secureassessment-ddf-file.md @@ -1,7 +1,7 @@ --- title: SecureAssessment DDF file description: View the XML file containing the device description framework (DDF) for the SecureAssessment configuration service provider. -ms.date: 06/19/2024 +ms.date: 06/28/2024 --- @@ -40,7 +40,7 @@ The following XML file contains the device description framework (DDF) for the S 10.0.15063 1.0 - 0x4;0x1B;0x30;0x31;0x48;0x54;0x77;0x79;0x7A;0x7D;0x7E;0x81;0x82;0x8A;0x8B;0xA1;0xA2;0xA4;0xA5;0xAB;0xAC;0xAF;0xB4;0xBC;0xBD;0xBF;0xCA;0xCB; + 0x4;0x1B;0x30;0x31;0x48;0x54;0x79;0x7A;0x7D;0x7E;0x81;0x82;0x8A;0x8B;0xA1;0xA2;0xA4;0xA5;0xAB;0xAC;0xAF;0xBC;0xBF;0xCA;0xCB;0xCD;0xCF; diff --git a/windows/client-management/mdm/sharedpc-ddf-file.md b/windows/client-management/mdm/sharedpc-ddf-file.md index 0baa724281..4412297df6 100644 --- a/windows/client-management/mdm/sharedpc-ddf-file.md +++ b/windows/client-management/mdm/sharedpc-ddf-file.md @@ -1,7 +1,7 @@ --- title: SharedPC DDF file description: View the XML file containing the device description framework (DDF) for the SharedPC configuration service provider. -ms.date: 06/19/2024 +ms.date: 06/28/2024 --- @@ -40,7 +40,7 @@ The following XML file contains the device description framework (DDF) for the S 10.0.14393 1.0 - 0x4;0x1B;0x30;0x31;0x48;0x54;0x77;0x79;0x7A;0x7D;0x7E;0x81;0x82;0x8A;0x8B;0xA1;0xA2;0xA4;0xA5;0xAB;0xAC;0xAF;0xB4;0xBC;0xBD;0xBF;0xCA;0xCB; + 0x4;0x1B;0x30;0x31;0x48;0x54;0x79;0x7A;0x7D;0x7E;0x81;0x82;0x8A;0x8B;0xA1;0xA2;0xA4;0xA5;0xAB;0xAC;0xAF;0xBC;0xBF;0xCA;0xCB;0xCD;0xCF;0xD2; diff --git a/windows/client-management/mdm/supl-ddf-file.md b/windows/client-management/mdm/supl-ddf-file.md index fed441c564..0797c3447b 100644 --- a/windows/client-management/mdm/supl-ddf-file.md +++ b/windows/client-management/mdm/supl-ddf-file.md @@ -1,7 +1,7 @@ --- title: SUPL DDF file description: View the XML file containing the device description framework (DDF) for the SUPL configuration service provider. -ms.date: 06/19/2024 +ms.date: 06/28/2024 --- @@ -42,7 +42,7 @@ The following XML file contains the device description framework (DDF) for the S 10.0.10240 1.0 - 0x4;0x1B;0x30;0x31;0x48;0x54;0x62;0x63;0x64;0x65;0x77;0x79;0x7A;0x7D;0x7E;0x81;0x82;0x8A;0x8B;0xA1;0xA2;0xA4;0xA5;0xAB;0xAC;0xAF;0xB4;0xBC;0xBD;0xBF;0xCA;0xCB; + 0x4;0x1B;0x30;0x31;0x48;0x54;0x62;0x63;0x64;0x65;0x79;0x7A;0x7D;0x7E;0x81;0x82;0x8A;0x8B;0xA1;0xA2;0xA4;0xA5;0xAB;0xAC;0xAF;0xBC;0xBF;0xCA;0xCB;0xCD;0xCF; diff --git a/windows/client-management/mdm/vpnv2-ddf-file.md b/windows/client-management/mdm/vpnv2-ddf-file.md index 7454dd4105..abe39e405a 100644 --- a/windows/client-management/mdm/vpnv2-ddf-file.md +++ b/windows/client-management/mdm/vpnv2-ddf-file.md @@ -1,7 +1,7 @@ --- title: VPNv2 DDF file description: View the XML file containing the device description framework (DDF) for the VPNv2 configuration service provider. -ms.date: 06/19/2024 +ms.date: 06/28/2024 --- @@ -39,7 +39,7 @@ The following XML file contains the device description framework (DDF) for the V 10.0.10586 1.0 - 0x4;0x1B;0x30;0x31;0x48;0x54;0x62;0x63;0x64;0x65;0x79;0x7A;0x7D;0x7E;0x81;0x82;0x87;0x88;0x88*;0x8A;0x8B;0xA1;0xA2;0xA4;0xA5;0xAB;0xAC;0xAF;0xB4;0xBC;0xBD;0xBF;0xCA;0xCB; + 0x4;0x1B;0x30;0x31;0x48;0x54;0x62;0x63;0x64;0x65;0x79;0x7A;0x7D;0x7E;0x81;0x82;0x88;0x8A;0x8B;0xA1;0xA2;0xA4;0xA5;0xAB;0xAC;0xAF;0xBC;0xBF;0xCA;0xCB;0xCD;0xCF;0xD2; @@ -3265,7 +3265,7 @@ The following XML file contains the device description framework (DDF) for the V 10.0.10586 1.0 - 0x4;0x1B;0x30;0x31;0x48;0x54;0x62;0x63;0x64;0x65;0x79;0x7A;0x7D;0x7E;0x81;0x82;0x87;0x88;0x88*;0x8A;0x8B;0xA1;0xA2;0xA4;0xA5;0xAB;0xAC;0xAF;0xB4;0xBC;0xBD;0xBF;0xCA;0xCB; + 0x4;0x1B;0x30;0x31;0x48;0x54;0x62;0x63;0x64;0x65;0x79;0x7A;0x7D;0x7E;0x81;0x82;0x88;0x8A;0x8B;0xA1;0xA2;0xA4;0xA5;0xAB;0xAC;0xAF;0xBC;0xBF;0xCA;0xCB;0xCD;0xCF;0xD2; diff --git a/windows/client-management/mdm/wifi-ddf-file.md b/windows/client-management/mdm/wifi-ddf-file.md index d1e6f1f167..a2a8cf4407 100644 --- a/windows/client-management/mdm/wifi-ddf-file.md +++ b/windows/client-management/mdm/wifi-ddf-file.md @@ -1,7 +1,7 @@ --- title: WiFi DDF file description: View the XML file containing the device description framework (DDF) for the WiFi configuration service provider. -ms.date: 06/19/2024 +ms.date: 06/28/2024 --- @@ -39,7 +39,7 @@ The following XML file contains the device description framework (DDF) for the W 10.0.10586 1.0 - 0x4;0x1B;0x30;0x31;0x48;0x54;0x62;0x63;0x64;0x65;0x77;0x79;0x7A;0x7D;0x7E;0x81;0x82;0x87;0x88;0x88*;0x8A;0x8B;0xA1;0xA2;0xA4;0xA5;0xAB;0xAC;0xB4;0xBC;0xBD;0xBF;0xCA;0xCB; + 0x4;0x1B;0x30;0x31;0x48;0x54;0x62;0x63;0x64;0x65;0x79;0x7A;0x7D;0x7E;0x81;0x82;0x88;0x8A;0x8B;0xA1;0xA2;0xA4;0xA5;0xAB;0xAC;0xBC;0xBF;0xCA;0xCB;0xCD;0xCF;0xD2; @@ -322,7 +322,7 @@ The following XML file contains the device description framework (DDF) for the W 10.0.10586 1.0 - 0x4;0x1B;0x30;0x31;0x48;0x54;0x62;0x63;0x64;0x65;0x77;0x79;0x7A;0x7D;0x7E;0x81;0x82;0x87;0x88;0x88*;0x8A;0x8B;0xA1;0xA2;0xA4;0xA5;0xAB;0xAC;0xB4;0xBC;0xBD;0xBF;0xCA;0xCB; + 0x4;0x1B;0x30;0x31;0x48;0x54;0x62;0x63;0x64;0x65;0x79;0x7A;0x7D;0x7E;0x81;0x82;0x88;0x8A;0x8B;0xA1;0xA2;0xA4;0xA5;0xAB;0xAC;0xBC;0xBF;0xCA;0xCB;0xCD;0xCF;0xD2; diff --git a/windows/client-management/mdm/windowsdefenderapplicationguard-ddf-file.md b/windows/client-management/mdm/windowsdefenderapplicationguard-ddf-file.md index b4460e2d71..06f96f2518 100644 --- a/windows/client-management/mdm/windowsdefenderapplicationguard-ddf-file.md +++ b/windows/client-management/mdm/windowsdefenderapplicationguard-ddf-file.md @@ -1,7 +1,7 @@ --- title: WindowsDefenderApplicationGuard DDF file description: View the XML file containing the device description framework (DDF) for the WindowsDefenderApplicationGuard configuration service provider. -ms.date: 06/19/2024 +ms.date: 06/28/2024 --- @@ -40,7 +40,7 @@ The following XML file contains the device description framework (DDF) for the W 10.0.16299 1.1 - 0x4;0x1B;0x30;0x31;0x48;0x54;0x62;0x63;0x64;0x65;0x77;0x79;0x7A;0x7D;0x7E;0x81;0x82;0x8A;0x8B;0xA1;0xA2;0xA4;0xA5;0xAB;0xAC;0xAF;0xB4;0xBC;0xBD;0xBF;0xCA;0xCB; + 0x4;0x1B;0x30;0x31;0x48;0x54;0x62;0x63;0x64;0x65;0x79;0x7A;0x7D;0x7E;0x81;0x82;0x8A;0x8B;0xA1;0xA2;0xA4;0xA5;0xAB;0xAC;0xAF;0xBC;0xBF;0xCA;0xCB;0xCD;0xCF; diff --git a/windows/client-management/mdm/windowslicensing-ddf-file.md b/windows/client-management/mdm/windowslicensing-ddf-file.md index 571ba992b0..d2abdc9fc4 100644 --- a/windows/client-management/mdm/windowslicensing-ddf-file.md +++ b/windows/client-management/mdm/windowslicensing-ddf-file.md @@ -1,7 +1,7 @@ --- title: WindowsLicensing DDF file description: View the XML file containing the device description framework (DDF) for the WindowsLicensing configuration service provider. -ms.date: 06/19/2024 +ms.date: 06/28/2024 --- @@ -40,7 +40,7 @@ The following XML file contains the device description framework (DDF) for the W 10.0.10586 1.0 - 0x4;0x1B;0x30;0x31;0x48;0x54;0x62;0x63;0x64;0x65;0x77;0x79;0x7A;0x7D;0x7E;0x81;0x82;0x87;0x88*;0x8A;0x8B;0xA1;0xA2;0xA4;0xA5;0xAB;0xAC;0xB4;0xBC;0xBD;0xBF; + 0x4;0x1B;0x30;0x31;0x48;0x54;0x62;0x63;0x64;0x65;0x79;0x7A;0x7D;0x7E;0x81;0x82;0x8A;0x8B;0xA1;0xA2;0xA4;0xA5;0xAB;0xAC;0xBC;0xBF;0xCD;0xCF;0xD2; diff --git a/windows/client-management/mdm/wirednetwork-ddf-file.md b/windows/client-management/mdm/wirednetwork-ddf-file.md index c3aebaeba0..178bba80f3 100644 --- a/windows/client-management/mdm/wirednetwork-ddf-file.md +++ b/windows/client-management/mdm/wirednetwork-ddf-file.md @@ -1,7 +1,7 @@ --- title: WiredNetwork DDF file description: View the XML file containing the device description framework (DDF) for the WiredNetwork configuration service provider. -ms.date: 06/19/2024 +ms.date: 06/28/2024 --- @@ -39,7 +39,7 @@ The following XML file contains the device description framework (DDF) for the W 10.0.17763 1.0 - 0x4;0x1B;0x30;0x31;0x48;0x54;0x62;0x63;0x64;0x65;0x77;0x79;0x7A;0x7D;0x7E;0x81;0x82;0x8A;0x8B;0xA1;0xA2;0xA4;0xA5;0xAB;0xAC;0xB4;0xBC;0xBD;0xBF;0xCA;0xCB; + 0x4;0x1B;0x30;0x31;0x48;0x54;0x62;0x63;0x64;0x65;0x79;0x7A;0x7D;0x7E;0x81;0x82;0x8A;0x8B;0xA1;0xA2;0xA4;0xA5;0xAB;0xAC;0xBC;0xBF;0xCA;0xCB;0xCD;0xCF;0xD2; @@ -118,7 +118,7 @@ The following XML file contains the device description framework (DDF) for the W 10.0.17763 1.0 - 0x4;0x1B;0x30;0x31;0x48;0x54;0x62;0x63;0x64;0x65;0x77;0x79;0x7A;0x7D;0x7E;0x81;0x82;0x8A;0x8B;0xA1;0xA2;0xA4;0xA5;0xAB;0xAC;0xB4;0xBC;0xBD;0xBF;0xCA;0xCB; + 0x4;0x1B;0x30;0x31;0x48;0x54;0x62;0x63;0x64;0x65;0x79;0x7A;0x7D;0x7E;0x81;0x82;0x8A;0x8B;0xA1;0xA2;0xA4;0xA5;0xAB;0xAC;0xBC;0xBF;0xCA;0xCB;0xCD;0xCF;0xD2; From 01b1db7da6d80da388e9bc6dd7b56feec0f1def2 Mon Sep 17 00:00:00 2001 From: Aaron Czechowski Date: Fri, 28 Jun 2024 13:44:50 -0700 Subject: [PATCH 66/99] cleanup app-v links --- windows/application-management/index.yml | 21 +- .../overview-windows-apps.md | 6 +- windows/application-management/toc.yml | 266 +----------------- .../windows-enterprise-e3-overview.md | 8 +- .../ltsc/whats-new-windows-10-2016.md | 12 +- .../ltsc/whats-new-windows-10-2019.md | 8 +- 6 files changed, 32 insertions(+), 289 deletions(-) diff --git a/windows/application-management/index.yml b/windows/application-management/index.yml index 7a3b8812e1..ae406114d7 100644 --- a/windows/application-management/index.yml +++ b/windows/application-management/index.yml @@ -9,7 +9,7 @@ metadata: author: aczechowski ms.author: aaroncz manager: aaroncz - ms.date: 08/18/2023 + ms.date: 06/28/2024 ms.topic: landing-page ms.service: windows-client ms.subservice: itpro-apps @@ -40,22 +40,3 @@ landingContent: url: per-user-services-in-windows.md - text: Changes to Service Host grouping in Windows 10 url: svchost-service-refactoring.md - - - title: Application Virtualization (App-V) - linkLists: - - linkListType: overview - links: - - text: App-V overview - url: /microsoft-desktop-optimization-pack/app-v/appv-for-windows - - text: Getting started with App-V - url: /microsoft-desktop-optimization-pack/app-v/appv-getting-started - - text: Planning for App-V - url: /microsoft-desktop-optimization-pack/app-v/appv-planning-for-appv - - text: Deploying App-V - url: /microsoft-desktop-optimization-pack/app-v/appv-deploying-appv - - text: Operations for App-V - url: /microsoft-desktop-optimization-pack/app-v/appv-operations - - text: Troubleshooting App-V - url: /microsoft-desktop-optimization-pack/app-v/appv-troubleshooting - - text: Technical Reference for App-V - url: /microsoft-desktop-optimization-pack/app-v/appv-technical-reference diff --git a/windows/application-management/overview-windows-apps.md b/windows/application-management/overview-windows-apps.md index ab58f88f99..7188ebe6e0 100644 --- a/windows/application-management/overview-windows-apps.md +++ b/windows/application-management/overview-windows-apps.md @@ -4,7 +4,7 @@ description: Learn about the different types of apps that run on Windows. For ex author: aczechowski ms.author: aaroncz manager: aaroncz -ms.date: 08/28/2023 +ms.date: 06/28/2024 ms.topic: overview ms.service: windows-client ms.subservice: itpro-apps @@ -31,7 +31,7 @@ For more information on deploying Microsoft 365 apps, see the [Deployment guide ### Power Apps -These apps are custom, low-code apps to connect to business data, modernize processes, and solve unique challenges. Power Apps are available online and on-premises, can run in a web browser, and on mobile devices. They can be created by business analysts and professional developers. +These apps are custom, low-code apps to connect to business data, modernize processes, and solve unique challenges. Power Apps are available online and on-premises, can run in a web browser, and on mobile devices. They can be created by business analysts and professional developers. For more information, see [What is Power Apps?](/power-apps/powerapps-overview). @@ -182,7 +182,7 @@ App-V allows Win32 apps to be used as virtual apps. On an on-premises server, you install and configure the App-V server components, and then install your Win32 apps. On Windows Enterprise client devices, you use the App-V client components to run the virtualized apps. They allow users to open the virtual apps using the icons and file names they're familiar with. Users use the apps as if they're installed locally. -The benefit is to deliver virtual apps in real time, and as-needed. For more information, see [Application Virtualization (App-V) for Windows overview](./app-v/appv-for-windows.md). +The benefit is to deliver virtual apps in real time, and as-needed. For more information, see [Application Virtualization (App-V) for Windows overview](/microsoft-desktop-optimization-pack/app-v/appv-for-windows). ## Manage apps diff --git a/windows/application-management/toc.yml b/windows/application-management/toc.yml index 7e86c36a76..eaea302b9c 100644 --- a/windows/application-management/toc.yml +++ b/windows/application-management/toc.yml @@ -1,255 +1,17 @@ items: - name: Manage Windows applications href: index.yml -- name: Application management - items: - - name: Overview of apps in Windows - href: overview-windows-apps.md - - name: Sideload line of business (LOB) apps - href: sideload-apps-in-windows.md - - name: Private app repo on Windows 11 - href: private-app-repository-mdm-company-portal-windows-11.md - - name: Remove background task resource restrictions - href: enterprise-background-activity-controls.md - - name: Service host grouping in Windows 10 - href: svchost-service-refactoring.md - - name: Per-user services in Windows - href: per-user-services-in-windows.md - - name: Keep removed apps from returning during an update - href: remove-provisioned-apps-during-update.md -- name: Application Virtualization (App-V) - items: - - name: App-V for Windows overview - href: /microsoft-desktop-optimization-pack/app-v/appv-for-windows - - name: Getting Started - items: - - name: Getting Started with App-V - href: /microsoft-desktop-optimization-pack/app-v/appv-getting-started - - name: What's new - items: - - name: What's new in App-V for Windows 10, version 1703 and earlier - href: /microsoft-desktop-optimization-pack/app-v/appv-about-appv - - name: Release Notes for App-V for Windows 10, version 1607 - href: /microsoft-desktop-optimization-pack/app-v/appv-release-notes-for-appv-for-windows - - name: Release Notes for App-V for Windows 10, version 1703 - href: /microsoft-desktop-optimization-pack/app-v/appv-release-notes-for-appv-for-windows-1703 - - name: Evaluating App-V - href: /microsoft-desktop-optimization-pack/app-v/appv-evaluating-appv - - name: High Level Architecture for App-V - href: /microsoft-desktop-optimization-pack/app-v/appv-high-level-architecture - - name: Planning - items: - - name: Planning for App-V - href: /microsoft-desktop-optimization-pack/app-v/appv-planning-for-appv - - name: Preparing your environment - items: - - name: Preparing your environment for App-V - href: /microsoft-desktop-optimization-pack/app-v/appv-preparing-your-environment - - name: App-V Prerequisites - href: /microsoft-desktop-optimization-pack/app-v/appv-prerequisites - - name: App-V security considerations - href: /microsoft-desktop-optimization-pack/app-v/appv-security-considerations - - name: Planning to deploy - items: - - name: Planning to Deploy App-V - href: /microsoft-desktop-optimization-pack/app-v/appv-planning-to-deploy-appv - - name: App-V Supported Configurations - href: /microsoft-desktop-optimization-pack/app-v/appv-supported-configurations - - name: App-V Capacity Planning - href: /microsoft-desktop-optimization-pack/app-v/appv-capacity-planning - - name: Planning for High Availability with App-V - href: /microsoft-desktop-optimization-pack/app-v/appv-planning-for-high-availability-with-appv - - name: Planning to Deploy App-V with an Electronic Software Distribution System - href: /microsoft-desktop-optimization-pack/app-v/appv-planning-to-deploy-appv-with-electronic-software-distribution-solutions - - name: Planning for the App-V Server Deployment - href: /microsoft-desktop-optimization-pack/app-v/appv-planning-for-appv-server-deployment - - name: Planning for the App-V Sequencer and Client Deployment - href: /microsoft-desktop-optimization-pack/app-v/appv-planning-for-sequencer-and-client-deployment - - name: Planning for Using App-V with Office - href: /microsoft-desktop-optimization-pack/app-v/appv-planning-for-using-appv-with-office - - name: Planning to Use Folder Redirection with App-V - href: /microsoft-desktop-optimization-pack/app-v/appv-planning-folder-redirection-with-appv - - name: App-V Planning Checklist - href: /microsoft-desktop-optimization-pack/app-v/appv-planning-checklist - - name: Deploying - items: - - name: Deploying App-V - href: /microsoft-desktop-optimization-pack/app-v/appv-deploying-appv - - name: App-V sequencer and client configuration - items: - - name: Deploying the App-V Sequencer and Configuring the Client - href: /microsoft-desktop-optimization-pack/app-v/appv-deploying-the-appv-sequencer-and-client - - name: About Client Configuration Settings - href: /microsoft-desktop-optimization-pack/app-v/appv-client-configuration-settings - - name: Enable the App-V desktop client - href: /microsoft-desktop-optimization-pack/app-v/appv-enable-the-app-v-desktop-client - - name: How to Install the Sequencer - href: /microsoft-desktop-optimization-pack/app-v/appv-install-the-sequencer - - name: App-V server deployment - items: - - name: Deploying the App-V Server - href: /microsoft-desktop-optimization-pack/app-v/appv-deploying-the-appv-server - - name: How to Deploy the App-V Server - href: /microsoft-desktop-optimization-pack/app-v/appv-deploy-the-appv-server - - name: How to Deploy the App-V Server Using a Script - href: /microsoft-desktop-optimization-pack/app-v/appv-deploy-the-appv-server-with-a-script - - name: How to Deploy the App-V Databases by Using SQL Scripts - href: /microsoft-desktop-optimization-pack/app-v/appv-deploy-appv-databases-with-sql-scripts - - name: How to Install the Publishing Server on a Remote Computer - href: /microsoft-desktop-optimization-pack/app-v/appv-install-the-publishing-server-on-a-remote-computer - - name: How to Install the Management and Reporting Databases on Separate Computers from the Management and Reporting Services - href: /microsoft-desktop-optimization-pack/app-v/appv-install-the-management-and-reporting-databases-on-separate-computers - - name: How to install the Management Server on a Standalone Computer and Connect it to the Database - href: /microsoft-desktop-optimization-pack/app-v/appv-install-the-management-server-on-a-standalone-computer - - name: About App-V Reporting - href: /microsoft-desktop-optimization-pack/app-v/appv-reporting - - name: How to install the Reporting Server on a Standalone Computer and Connect it to the Database - href: /microsoft-desktop-optimization-pack/app-v/appv-install-the-reporting-server-on-a-standalone-computer - - name: App-V Deployment Checklist - href: /microsoft-desktop-optimization-pack/app-v/appv-deployment-checklist - - name: Deploying Microsoft Office 2016 by Using App-V - href: /microsoft-desktop-optimization-pack/app-v/appv-deploying-microsoft-office-2016-with-appv - - name: Deploying Microsoft Office 2013 by Using App-V - href: /microsoft-desktop-optimization-pack/app-v/appv-deploying-microsoft-office-2013-with-appv - - name: Deploying Microsoft Office 2010 by Using App-V - href: /microsoft-desktop-optimization-pack/app-v/appv-deploying-microsoft-office-2010-wth-appv - - name: Operations - items: - - name: Operations for App-V - href: /microsoft-desktop-optimization-pack/app-v/appv-operations - - name: Creating and managing virtualized applications - items: - - name: Creating and Managing App-V Virtualized Applications - href: /microsoft-desktop-optimization-pack/app-v/appv-creating-and-managing-virtualized-applications - - name: Automatically provision your sequencing environment using Microsoft Application Virtualization Sequencer (App-V Sequencer) - href: /microsoft-desktop-optimization-pack/app-v/appv-auto-provision-a-vm - - name: Automatically sequence multiple apps at the same time using Microsoft Application Virtualization Sequencer (App-V Sequencer) - href: /microsoft-desktop-optimization-pack/app-v/appv-auto-batch-sequencing - - name: Automatically update multiple apps at the same time using Microsoft Application Virtualization Sequencer (App-V Sequencer) - href: /microsoft-desktop-optimization-pack/app-v/appv-auto-batch-updating - - name: Manually sequence a new app using Microsoft Application Virtualization Sequencer (App-V Sequencer) - href: /microsoft-desktop-optimization-pack/app-v/appv-sequence-a-new-application - - name: How to Modify an Existing Virtual Application Package - href: /microsoft-desktop-optimization-pack/app-v/appv-modify-an-existing-virtual-application-package - - name: How to Create and Use a Project Template - href: /microsoft-desktop-optimization-pack/app-v/appv-create-and-use-a-project-template - - name: How to Create a Package Accelerator - href: /microsoft-desktop-optimization-pack/app-v/appv-create-a-package-accelerator - - name: How to Create a Virtual Application Package Using an App-V Package Accelerator - href: /microsoft-desktop-optimization-pack/app-v/appv-create-a-virtual-application-package-package-accelerator - - name: Administering App-V - items: - - name: Administering App-V Virtual Applications by Using the Management Console - href: /microsoft-desktop-optimization-pack/app-v/appv-administering-virtual-applications-with-the-management-console - - name: About App-V Dynamic Configuration - href: /microsoft-desktop-optimization-pack/app-v/appv-dynamic-configuration - - name: How to Connect to the Management Console - href: /microsoft-desktop-optimization-pack/app-v/appv-connect-to-the-management-console - - name: How to Add or Upgrade Packages by Using the Management Console - href: /microsoft-desktop-optimization-pack/app-v/appv-add-or-upgrade-packages-with-the-management-console - - name: How to Configure Access to Packages by Using the Management Console - href: /microsoft-desktop-optimization-pack/app-v/appv-configure-access-to-packages-with-the-management-console - - name: How to Publish a Package by Using the Management Console - href: /microsoft-desktop-optimization-pack/app-v/appv-publish-a-packages-with-the-management-console - - name: How to Delete a Package in the Management Console - href: /microsoft-desktop-optimization-pack/app-v/appv-delete-a-package-with-the-management-console - - name: How to Add or Remove an Administrator by Using the Management Console - href: /microsoft-desktop-optimization-pack/app-v/appv-add-or-remove-an-administrator-with-the-management-console - - name: How to Register and Unregister a Publishing Server by Using the Management Console - href: /microsoft-desktop-optimization-pack/app-v/appv-register-and-unregister-a-publishing-server-with-the-management-console - - name: How to Create a Custom Configuration File by Using the App-V Management Console - href: /microsoft-desktop-optimization-pack/app-v/appv-create-a-custom-configuration-file-with-the-management-console - - name: How to Transfer Access and Configurations to Another Version of a Package by Using the Management Console - href: /microsoft-desktop-optimization-pack/app-v/appv-transfer-access-and-configurations-to-another-version-of-a-package-with-the-management-console - - name: How to Customize Virtual Applications Extensions for a Specific AD Group by Using the Management Console - href: /microsoft-desktop-optimization-pack/app-v/appv-customize-virtual-application-extensions-with-the-management-console - - name: How to View and Configure Applications and Default Virtual Application Extensions by Using the Management Console - href: /microsoft-desktop-optimization-pack/app-v/appv-view-and-configure-applications-and-default-virtual-application-extensions-with-the-management-console - - name: Connection groups - items: - - name: Managing Connection Groups - href: /microsoft-desktop-optimization-pack/app-v/appv-managing-connection-groups - - name: About the Connection Group Virtual Environment - href: /microsoft-desktop-optimization-pack/app-v/appv-connection-group-virtual-environment - - name: About the Connection Group File - href: /microsoft-desktop-optimization-pack/app-v/appv-connection-group-file - - name: How to Create a Connection Group - href: /microsoft-desktop-optimization-pack/app-v/appv-create-a-connection-group - - name: How to Create a Connection Group with User-Published and Globally Published Packages - href: /microsoft-desktop-optimization-pack/app-v/appv-create-a-connection-group-with-user-published-and-globally-published-packages - - name: How to Delete a Connection Group - href: /microsoft-desktop-optimization-pack/app-v/appv-delete-a-connection-group - - name: How to Publish a Connection Group - href: /microsoft-desktop-optimization-pack/app-v/appv-publish-a-connection-group - - name: How to Make a Connection Group Ignore the Package Version - href: /microsoft-desktop-optimization-pack/app-v/appv-configure-connection-groups-to-ignore-the-package-version - - name: How to Allow Only Administrators to Enable Connection Groups - href: /microsoft-desktop-optimization-pack/app-v/appv-allow-administrators-to-enable-connection-groups - - name: Deploying App-V packages with ESD - items: - - name: Deploying App-V Packages by Using Electronic Software Distribution (ESD) - href: /microsoft-desktop-optimization-pack/app-v/appv-deploying-packages-with-electronic-software-distribution-solutions - - name: How to deploy App-V Packages Using Electronic Software Distribution - href: /microsoft-desktop-optimization-pack/app-v/appv-deploy-appv-packages-with-electronic-software-distribution-solutions - - name: How to Enable Only Administrators to Publish Packages by Using an ESD - href: /microsoft-desktop-optimization-pack/app-v/appv-enable-administrators-to-publish-packages-with-electronic-software-distribution-solutions - - name: Using the management console - items: - - name: Using the App-V client management console - href: /microsoft-desktop-optimization-pack/app-v/appv-using-the-client-management-console - - name: Automatically clean up unpublished packages on the App-V client - href: /microsoft-desktop-optimization-pack/app-v/appv-auto-clean-unpublished-packages - - name: Migrating - items: - - name: Migrating to App-V from a previous version - href: /microsoft-desktop-optimization-pack/app-v/appv-migrating-to-appv-from-a-previous-version - - name: How to convert a package created in a previous version of App-V - href: /microsoft-desktop-optimization-pack/app-v/appv-convert-a-package-created-in-a-previous-version-of-appv - - name: Maintenance - items: - - name: Maintaining App-V - href: /microsoft-desktop-optimization-pack/app-v/appv-maintaining-appv - - name: How to Move the App-V Server to Another Computer - href: /microsoft-desktop-optimization-pack/app-v/appv-move-the-appv-server-to-another-computer - - name: Administering App-V with Windows PowerShell - items: - - name: Administering App-V by using Windows PowerShell - href: /microsoft-desktop-optimization-pack/app-v/appv-administering-appv-with-powershell - - name: How to Load the Windows PowerShell Cmdlets for App-V and Get Cmdlet Help - href: /microsoft-desktop-optimization-pack/app-v/appv-load-the-powershell-cmdlets-and-get-cmdlet-help - - name: How to Manage App-V Packages Running on a Stand-Alone Computer by Using Windows PowerShell - href: /microsoft-desktop-optimization-pack/app-v/appv-manage-appv-packages-running-on-a-stand-alone-computer-with-powershell - - name: How to Manage Connection Groups on a Stand-alone Computer by Using Windows PowerShell - href: /microsoft-desktop-optimization-pack/app-v/appv-manage-connection-groups-on-a-stand-alone-computer-with-powershell - - name: How to Modify Client Configuration by Using Windows PowerShell - href: /microsoft-desktop-optimization-pack/app-v/appv-modify-client-configuration-with-powershell - - name: How to Configure the Client to Receive Package and Connection Groups Updates From the Publishing Server - href: /microsoft-desktop-optimization-pack/app-v/appv-configure-the-client-to-receive-updates-from-the-publishing-server - - name: How to Apply the User Configuration File by Using Windows PowerShell - href: /microsoft-desktop-optimization-pack/app-v/appv-apply-the-user-configuration-file-with-powershell - - name: How to Apply the Deployment Configuration File by Using Windows PowerShell - href: /microsoft-desktop-optimization-pack/app-v/appv-apply-the-deployment-configuration-file-with-powershell - - name: How to Sequence a Package by Using Windows PowerShell - href: /microsoft-desktop-optimization-pack/app-v/appv-sequence-a-package-with-powershell - - name: How to Create a Package Accelerator by Using Windows PowerShell - href: /microsoft-desktop-optimization-pack/app-v/appv-create-a-package-accelerator-with-powershell - - name: How to Enable Reporting on the App-V Client by Using Windows PowerShell - href: /microsoft-desktop-optimization-pack/app-v/appv-enable-reporting-on-the-appv-client-with-powershell - - name: How to Install the App-V Databases and Convert the Associated Security Identifiers by Using Windows PowerShell - href: /microsoft-desktop-optimization-pack/app-v/appv-install-the-appv-databases-and-convert-the-associated-security-identifiers-with-powershell - - name: Troubleshooting App-V - href: /microsoft-desktop-optimization-pack/app-v/appv-troubleshooting - - name: Technical Reference - items: - - name: Technical Reference for App-V - href: /microsoft-desktop-optimization-pack/app-v/appv-technical-reference - - name: Available Mobile Device Management (MDM) settings for App-V - href: /microsoft-desktop-optimization-pack/app-v/appv-available-mdm-settings - - name: Performance Guidance for Application Virtualization - href: /microsoft-desktop-optimization-pack/app-v/appv-performance-guidance - - name: Application Publishing and Client Interaction - href: /microsoft-desktop-optimization-pack/app-v/appv-application-publishing-and-client-interaction - - name: Viewing App-V Server Publishing Metadata - href: /microsoft-desktop-optimization-pack/app-v/appv-viewing-appv-server-publishing-metadata - - name: Running a Locally Installed Application Inside a Virtual Environment with Virtualized Applications - href: /microsoft-desktop-optimization-pack/app-v/appv-running-locally-installed-applications-inside-a-virtual-environment +- name: Overview of apps in Windows + href: overview-windows-apps.md +- name: Sideload line of business (LOB) apps + href: sideload-apps-in-windows.md +- name: Private app repo on Windows 11 + href: private-app-repository-mdm-company-portal-windows-11.md +- name: Remove background task resource restrictions + href: enterprise-background-activity-controls.md +- name: Service host grouping in Windows 10 + href: svchost-service-refactoring.md +- name: Per-user services in Windows + href: per-user-services-in-windows.md +- name: Keep removed apps from returning during an update + href: remove-provisioned-apps-during-update.md diff --git a/windows/deployment/windows-enterprise-e3-overview.md b/windows/deployment/windows-enterprise-e3-overview.md index d92d11b9fc..292858c4fb 100644 --- a/windows/deployment/windows-enterprise-e3-overview.md +++ b/windows/deployment/windows-enterprise-e3-overview.md @@ -67,7 +67,7 @@ Windows Enterprise edition has many features that are unavailable in Windows Pro |Credential Guard|Credential Guard uses virtualization-based security to help protect security secrets so that only privileged system software can access them. Examples of security secrets that can be protected include NTLM password hashes and Kerberos Ticket Granting Tickets. This protection helps prevent Pass-the-Hash or Pass-the-Ticket attacks.

Credential Guard has the following features:

  • **Hardware-level security** - Credential Guard uses hardware platform security features (such as Secure Boot and virtualization) to help protect derived domain credentials and other secrets.
  • **Virtualization-based security** - Windows services that access derived domain credentials and other secrets run in a virtualized, protected environment that is isolated.
  • **Improved protection against persistent threats** - Credential Guard works with other technologies (for example, Device Guard) to help provide further protection against attacks, no matter how persistent.
  • **Improved manageability** - Credential Guard can be managed through Group Policy, Windows Management Instrumentation (WMI), or Windows PowerShell.

    For more information, see [Protect derived domain credentials with Credential Guard](/windows/security/identity-protection/credential-guard/credential-guard).

    *Credential Guard requires
    • UEFI 2.3.1 or greater with Trusted Boot
    • Virtualization Extensions such as Intel VT-x, AMD-V, and SLAT must be enabled
    • x64 version of Windows
    • IOMMU, such as Intel VT-d, AMD-Vi
    • BIOS Lockdown
    • TPM 2.0 recommended for device health attestation (uses software if TPM 2.0 not present)*
    | |Device Guard|This feature is a combination of hardware and software security features that allows only trusted applications to run on a device. Even if an attacker manages to get control of the Windows kernel, they're much less likely to run executable code. Device Guard can use virtualization-based security (VBS) in Windows Enterprise edition to isolate the Code Integrity service from the Windows kernel itself. With VBS, even if malware gains access to the kernel, the effects can be severely limited, because the hypervisor can prevent the malware from executing code.

    Device Guard protects in the following ways:
  • Helps protect against malware
  • Helps protect the Windows system core from vulnerability and zero-day exploits
  • Allows only trusted apps to run

    For more information, see [Introduction to Device Guard](/windows/security/application-security/application-control/introduction-to-device-guard-virtualization-based-security-and-windows-defender-application-control).| |AppLocker management|This feature helps IT pros determine which applications and files users can run on a device. The applications and files that can be managed include executable files, scripts, Windows Installer files, dynamic-link libraries (DLLs), packaged apps, and packaged app installers.

    For more information, see [AppLocker](/windows/security/threat-protection/windows-defender-application-control/applocker/applocker-overview).| -|Application Virtualization (App-V)|This feature makes applications available to end users without installing the applications directly on users' devices. App-V transforms applications into centrally managed services that are never installed and don't conflict with other applications. This feature also helps ensure that applications are kept current with the latest security updates.

    For more information, see [Getting started with App-V for Windows client](/windows/application-management/app-v/appv-getting-started).| +|Application Virtualization (App-V)|This feature makes applications available to end users without installing the applications directly on users' devices. App-V transforms applications into centrally managed services that are never installed and don't conflict with other applications. This feature also helps ensure that applications are kept current with the latest security updates.

    For more information, see [Getting started with App-V for Windows client](/microsoft-desktop-optimization-pack/app-v/appv-for-windows).| |User Experience Virtualization (UE-V)|With this feature, user-customized Windows and application settings can be captured and stored on a centrally managed network file share.

    When users sign in, their personalized settings are applied to their work session, regardless of which device or virtual desktop infrastructure (VDI) sessions they sign into.

    UE-V provides the following features:
  • Specify which application and Windows settings synchronize across user devices
  • Deliver the settings anytime and anywhere users work throughout the enterprise
  • Create custom templates for line-of-business applications
  • Recover settings after hardware replacement or upgrade, or after reimaging a virtual machine to its initial state

    For more information, see [User Experience Virtualization (UE-V) overview](/microsoft-desktop-optimization-pack/ue-v/uev-for-windows).| |Managed User Experience|This feature helps customize and lock down a Windows device's user interface to restrict it to a specific task. For example, a device can be configured for a controlled scenario such as a kiosk or classroom device. The user experience would be automatically reset once a user signs off. Access to services such as the Windows Store can also be restricted. For Windows 10, Start layout options can also be managed, such as:
  • Removing and preventing access to the Shut Down, Restart, Sleep, and Hibernate commands
  • Removing Log Off (the User tile) from the Start menu
  • Removing frequent programs from the Start menu
  • Removing the All Programs list from the Start menu
  • Preventing users from customizing their Start screen
  • Forcing Start menu to be either full-screen size or menu size
  • Preventing changes to Taskbar and Start menu settings| @@ -146,9 +146,9 @@ App-V requires an App-V server infrastructure to support App-V clients. The prim For more information about implementing the App-V server, App-V sequencer, and App-V client, see the following resources: -- [Getting started with App-V for Windows client](/windows/application-management/app-v/appv-getting-started) -- [Deploying the App-V server](/windows/application-management/app-v/appv-deploying-the-appv-server) -- [Deploying the App-V Sequencer and Configuring the Client](/windows/application-management/app-v/appv-deploying-the-appv-sequencer-and-client) +- [Getting started with App-V for Windows client](/microsoft-desktop-optimization-pack/app-v/appv-getting-started) +- [Deploying the App-V server](/microsoft-desktop-optimization-pack/app-v/appv-deploying-the-appv-server) +- [Deploying the App-V Sequencer and Configuring the Client](/microsoft-desktop-optimization-pack/app-v/appv-deploying-the-appv-sequencer-and-client) ### UE-V diff --git a/windows/whats-new/ltsc/whats-new-windows-10-2016.md b/windows/whats-new/ltsc/whats-new-windows-10-2016.md index eb925170d2..22fdf02fce 100644 --- a/windows/whats-new/ltsc/whats-new-windows-10-2016.md +++ b/windows/whats-new/ltsc/whats-new-windows-10-2016.md @@ -39,7 +39,7 @@ Windows ICD now includes simplified workflows for creating provisioning packages >[!IMPORTANT] >Upgrade Readiness will not allow you to assess an upgrade to an LTSC release (LTSC builds are not available as target versions). However, you can enroll devices running LTSC to plan for an upgrade to a General Availability Channel release. -Microsoft developed Upgrade Readiness in response to demand from enterprise customers looking for more direction and details about upgrading to Windows 10. Upgrade Readiness was built taking into account multiple channels of customer feedback, testing, and Microsoft's experience upgrading millions of devices to Windows 10. +Microsoft developed Upgrade Readiness in response to demand from enterprise customers looking for more direction and details about upgrading to Windows 10. Upgrade Readiness was built taking into account multiple channels of customer feedback, testing, and Microsoft's experience upgrading millions of devices to Windows 10. With Windows diagnostic data enabled, Upgrade Readiness collects system, application, and driver data for analysis. We then identify compatibility issues that can block an upgrade and suggest fixes when they're known to Microsoft. @@ -71,7 +71,7 @@ Other changes for Windows Hello in Windows 10 Enterprise LTSC 2016: - Personal (Microsoft account) and corporate (Active Directory or Entra ID) accounts use a single container for keys. - Group Policy settings for managing Windows Hello for Business are now available for both **User Configuration** and **Computer Configuration**. -- Beginning in this version of Windows 10, Windows Hello as a convenience PIN is disabled by default on all domain-joined computers. To enable a convenience PIN, enable the Group Policy setting **Turn on convenience PIN sign-in**. +- Beginning in this version of Windows 10, Windows Hello as a convenience PIN is disabled by default on all domain-joined computers. To enable a convenience PIN, enable the Group Policy setting **Turn on convenience PIN sign-in**. [Learn more about Windows Hello for Business.](/windows/security/identity-protection/hello-for-business/deploy/requirements) @@ -156,17 +156,17 @@ This version of Windows 10, introduces shared PC mode, which optimizes Windows 1 Application Virtualization (App-V) enables organizations to deliver Win32 applications to users as virtual applications. Virtual applications are installed on centrally managed servers and delivered to users as a service - in real time and on as as-needed basis. Users launch virtual applications from familiar access points, including the Microsoft Store, and interact with them as if they were installed locally. -With the release of this version of Windows 10, App-V is included with the Windows 10 for Enterprise edition. If you're new to Windows 10 and App-V or if you're upgrading from a previous version of App-V, you'll need to download, activate, and install server- and client-side components to start delivering virtual applications to users. +With the release of this version of Windows 10, App-V is included with the Windows 10 for Enterprise edition. If you're new to Windows 10 and App-V or if you're upgrading from a previous version of App-V, you'll need to download, activate, and install server- and client-side components to start delivering virtual applications to users. -[Learn how to deliver virtual applications with App-V.](/windows/application-management/app-v/appv-getting-started) +[Learn how to deliver virtual applications with App-V.](/microsoft-desktop-optimization-pack/app-v/appv-getting-started) ### User Experience Virtualization (UE-V) for Windows 10 -Many users customize their settings for Windows and for specific applications. Customizable Windows settings include Microsoft Store appearance, language, background picture, font size, and accent colors. Customizable application settings include language, appearance, behavior, and user interface options. +Many users customize their settings for Windows and for specific applications. Customizable Windows settings include Microsoft Store appearance, language, background picture, font size, and accent colors. Customizable application settings include language, appearance, behavior, and user interface options. With User Experience Virtualization (UE-V), you can capture user-customized Windows and application settings and store them on a centrally managed network file share. When users sign in, their personalized settings are applied to their work session, regardless of which device or virtual desktop infrastructure (VDI) sessions they sign in to. -With the release of this version of Windows 10, UE-V is included with the Windows 10 for Enterprise edition. If you're new to Windows 10 and UE-V or upgrading from a previous version of UE-V, you'll need to download, activate, and install server- and client-side components to start synchronizing user-customized settings across devices. +With the release of this version of Windows 10, UE-V is included with the Windows 10 for Enterprise edition. If you're new to Windows 10 and UE-V or upgrading from a previous version of UE-V, you'll need to download, activate, and install server- and client-side components to start synchronizing user-customized settings across devices. [Learn how to synchronize user-customized settings with UE-V.](/microsoft-desktop-optimization-pack/ue-v/uev-for-windows) diff --git a/windows/whats-new/ltsc/whats-new-windows-10-2019.md b/windows/whats-new/ltsc/whats-new-windows-10-2019.md index 0124fa0995..78cd95c0c9 100644 --- a/windows/whats-new/ltsc/whats-new-windows-10-2019.md +++ b/windows/whats-new/ltsc/whats-new-windows-10-2019.md @@ -484,10 +484,10 @@ Previous versions of the Microsoft Application Virtualization Sequencer (App-V S For more information, see the following articles: -- [Automatically provision your sequencing environment using Microsoft Application Virtualization Sequencer (App-V Sequencer)](/windows/application-management/app-v/appv-auto-provision-a-vm) -- [Automatically sequence multiple apps at the same time using Microsoft Application Virtualization Sequencer (App-V Sequencer)](/windows/application-management/app-v/appv-auto-batch-sequencing) -- [Automatically update multiple apps at the same time using Microsoft Application Virtualization Sequencer (App-V Sequencer)](/windows/application-management/app-v/appv-auto-batch-updating) -- [Automatically cleanup unpublished packages on the App-V client](/windows/application-management/app-v/appv-auto-clean-unpublished-packages) +- [Automatically provision your sequencing environment using Microsoft Application Virtualization Sequencer (App-V Sequencer)](/microsoft-desktop-optimization-pack/app-v/appv-auto-provision-a-vm) +- [Automatically sequence multiple apps at the same time using Microsoft Application Virtualization Sequencer (App-V Sequencer)](/microsoft-desktop-optimization-pack/app-v/appv-auto-batch-sequencing) +- [Automatically update multiple apps at the same time using Microsoft Application Virtualization Sequencer (App-V Sequencer)](/microsoft-desktop-optimization-pack/app-v/appv-auto-batch-updating) +- [Automatically cleanup unpublished packages on the App-V client](/microsoft-desktop-optimization-pack/app-v/appv-auto-clean-unpublished-packages) ### Windows diagnostic data From b541aa8cb5afc40f43b0dee22f49af85527c3a83 Mon Sep 17 00:00:00 2001 From: Aaron Czechowski Date: Fri, 28 Jun 2024 13:49:23 -0700 Subject: [PATCH 67/99] remove app-v & us-v from docfx --- windows/application-management/docfx.json | 5 ----- windows/configuration/docfx.json | 20 +++----------------- 2 files changed, 3 insertions(+), 22 deletions(-) diff --git a/windows/application-management/docfx.json b/windows/application-management/docfx.json index 128c0cfc00..4f5ec979b0 100644 --- a/windows/application-management/docfx.json +++ b/windows/application-management/docfx.json @@ -69,11 +69,6 @@ "Windows 10" ] }, - "fileMetadata": { - "feedback_system": { - "app-v/**/*.*": "None" - } - }, "template": [], "dest": "win-app-management", "markdownEngineName": "markdig" diff --git a/windows/configuration/docfx.json b/windows/configuration/docfx.json index 9cd7b554d8..65d0a53b09 100644 --- a/windows/configuration/docfx.json +++ b/windows/configuration/docfx.json @@ -55,9 +55,9 @@ "titleSuffix": "Configure Windows", "contributors_to_exclude": [ "dstrome2", - "rjagiewich", + "rjagiewich", "American-Dipper", - "claydetels19", + "claydetels19", "jborsecnik", "v-stchambers", "shdyas", @@ -72,9 +72,6 @@ ] }, "fileMetadata": { - "feedback_system": { - "ue-v/**/*.*": "None" - }, "author":{ "accessibility//**/*.md": "paolomatarazzo", "accessibility//**/*.yml": "paolomatarazzo", @@ -96,8 +93,6 @@ "taskbar//**/*.yml": "paolomatarazzo", "tips//**/*.md": "paolomatarazzo", "tips//**/*.yml": "paolomatarazzo", - "ue-v//**/*.md": "aczechowski", - "ue-v//**/*.yml": "aczechowski", "wcd//**/*.md": "vinaypamnani-msft", "wcd//**/*.yml": "vinaypamnani-msft" }, @@ -122,8 +117,6 @@ "taskbar//**/*.yml": "paoloma", "tips//**/*.md": "paoloma", "tips//**/*.yml": "paoloma", - "ue-v//**/*.md": "aaroncz", - "ue-v//**/*.yml": "aaroncz", "wcd//**/*.md": "vinpa", "wcd//**/*.yml": "vinpa" }, @@ -132,20 +125,13 @@ "start//**/*.md": "ericpapa" }, "ms.collection": { - "wcd//**/*.md": "must-keep", - "ue-v//**/*.md": [ - "must-keep", - "tier3" - ] + "wcd//**/*.md": "must-keep" }, "appliesto": { "*/**/*.md": [ "✅ Windows 11", "✅ Windows 10" ], - "ue-v//**/*.md": [ - "✅ Windows 10" - ], "wcd//**/*.md": "" } }, From c2b9c58923760cf830ea70cdc632f2190cc811f9 Mon Sep 17 00:00:00 2001 From: Aaron Czechowski Date: Fri, 28 Jun 2024 13:51:06 -0700 Subject: [PATCH 68/99] remove uev --- windows/configuration/toc.yml | 2 -- 1 file changed, 2 deletions(-) diff --git a/windows/configuration/toc.yml b/windows/configuration/toc.yml index 97c229350a..45b8217fab 100644 --- a/windows/configuration/toc.yml +++ b/windows/configuration/toc.yml @@ -21,5 +21,3 @@ items: href: provisioning-packages/toc.yml - name: Windows Configuration Designer href: wcd/toc.yml -- name: User Experience Virtualization (UE-V) - href: /microsoft-desktop-optimization-pack/ue-v/uev-for-windows \ No newline at end of file From 6aae12f6e92d081ee781e95984dc629835be2fa9 Mon Sep 17 00:00:00 2001 From: Sandeep Deo <38295759+SanDeo-MSFT@users.noreply.github.com> Date: Fri, 28 Jun 2024 15:23:03 -0700 Subject: [PATCH 69/99] Update recovery-process.md --- .../data-protection/bitlocker/recovery-process.md | 3 +++ 1 file changed, 3 insertions(+) diff --git a/windows/security/operating-system-security/data-protection/bitlocker/recovery-process.md b/windows/security/operating-system-security/data-protection/bitlocker/recovery-process.md index ea2fd91338..88205440b9 100644 --- a/windows/security/operating-system-security/data-protection/bitlocker/recovery-process.md +++ b/windows/security/operating-system-security/data-protection/bitlocker/recovery-process.md @@ -64,6 +64,9 @@ The following list can be used as a template for creating a recovery process for There are a few Microsoft Entra ID roles that allow a delegated administrator to read BitLocker recovery passwords from the devices in the tenant. While it's common for organizations to use the existing Microsoft Entra ID *[Cloud Device Administrator][ENTRA-2]* or *[Helpdesk Administrator][ENTRA-3]* built-in roles, you can also [create a custom role][ENTRA-5], delegating access to BitLocker keys using the `microsoft.directory/bitlockerKeys/key/read` permission. Roles can be delegated to access BitLocker recovery passwords for devices in specific Administrative Units. +> [!NOTE] +> When devices including [Windows Autopilot](/mem/autopilot/windows-autopilot) are reused to joined to Entra, **and there is a new device owner**, that new device owner must contact an administrator to acquire the BitLocker recovery key for that device. Administrative unit scoped administrators will lose access to BitLocker recovery keys after device ownership changes. These scoped administrators will need to contact a non-scoped administrator for the recovery keys. For more information, see the article [Find the primary user of an Intune device](/mem/intune/remote-actions/find-primary-user#change-a-devices-primary-user). + The [Microsoft Entra admin center][ENTRA] allows administrators to retrieve BitLocker recovery passwords. To learn more about the process, see [View or copy BitLocker keys][ENTRA-4]. Another option to access BitLocker recovery passwords is to use the Microsoft Graph API, which might be useful for integrated or scripted solutions. For more information about this option, see [Get bitlockerRecoveryKey][GRAPH-1]. In the following example, we use Microsoft Graph PowerShell cmdlet [`Get-MgInformationProtectionBitlockerRecoveryKey`][PS-1] to build a PowerShell function that retrieves recovery passwords from Microsoft Entra ID: From acaa6f221f362bb7b0074b4fee4b665e1a38dda9 Mon Sep 17 00:00:00 2001 From: Sandeep Deo <38295759+SanDeo-MSFT@users.noreply.github.com> Date: Fri, 28 Jun 2024 15:32:39 -0700 Subject: [PATCH 70/99] Update recovery-process.md --- .../data-protection/bitlocker/recovery-process.md | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/windows/security/operating-system-security/data-protection/bitlocker/recovery-process.md b/windows/security/operating-system-security/data-protection/bitlocker/recovery-process.md index 88205440b9..aee50a307d 100644 --- a/windows/security/operating-system-security/data-protection/bitlocker/recovery-process.md +++ b/windows/security/operating-system-security/data-protection/bitlocker/recovery-process.md @@ -65,7 +65,7 @@ The following list can be used as a template for creating a recovery process for There are a few Microsoft Entra ID roles that allow a delegated administrator to read BitLocker recovery passwords from the devices in the tenant. While it's common for organizations to use the existing Microsoft Entra ID *[Cloud Device Administrator][ENTRA-2]* or *[Helpdesk Administrator][ENTRA-3]* built-in roles, you can also [create a custom role][ENTRA-5], delegating access to BitLocker keys using the `microsoft.directory/bitlockerKeys/key/read` permission. Roles can be delegated to access BitLocker recovery passwords for devices in specific Administrative Units. > [!NOTE] -> When devices including [Windows Autopilot](/mem/autopilot/windows-autopilot) are reused to joined to Entra, **and there is a new device owner**, that new device owner must contact an administrator to acquire the BitLocker recovery key for that device. Administrative unit scoped administrators will lose access to BitLocker recovery keys after device ownership changes. These scoped administrators will need to contact a non-scoped administrator for the recovery keys. For more information, see the article [Find the primary user of an Intune device](/mem/intune/remote-actions/find-primary-user#change-a-devices-primary-user). +> When devices including [Windows Autopilot](/mem/autopilot/windows-autopilot) are reused to join to Entra, **and there is a new device owner**, that new device owner must contact an administrator to acquire the BitLocker recovery key for that device. Administrative unit scoped administrators will lose access to BitLocker recovery keys after device ownership changes. These scoped administrators will need to contact a non-scoped administrator for the recovery keys. For more information, see the article [Find the primary user of an Intune device](/mem/intune/remote-actions/find-primary-user#change-a-devices-primary-user). The [Microsoft Entra admin center][ENTRA] allows administrators to retrieve BitLocker recovery passwords. To learn more about the process, see [View or copy BitLocker keys][ENTRA-4]. Another option to access BitLocker recovery passwords is to use the Microsoft Graph API, which might be useful for integrated or scripted solutions. For more information about this option, see [Get bitlockerRecoveryKey][GRAPH-1]. From d4439c8a1472581227a021394a2f95c23307009b Mon Sep 17 00:00:00 2001 From: "Vinay Pamnani (from Dev Box)" Date: Mon, 1 Jul 2024 11:01:21 -0600 Subject: [PATCH 71/99] Client Tools freshenss --- .../client-tools/add-remove-hide-features.md | 16 +---- .../administrative-tools-in-windows.md | 59 +++++++----------- ...t-removal-policy-external-storage-media.md | 9 ++- .../client-tools/connect-to-remote-aadj-pc.md | 10 +-- .../images/change-def-rem-policy-2.png | Bin 162864 -> 24847 bytes .../images/settings-page-visibility-gp.png | Bin 31593 -> 39196 bytes ...e-device-installation-with-group-policy.md | 2 +- .../manage-settings-app-with-group-policy.md | 2 +- .../client-tools/mandatory-user-profile.md | 13 ++-- .../client-tools/quick-assist.md | 5 +- .../client-management/client-tools/toc.yml | 4 +- .../client-tools/windows-libraries.md | 4 +- .../client-tools/windows-version-search.md | 4 +- 13 files changed, 47 insertions(+), 81 deletions(-) diff --git a/windows/client-management/client-tools/add-remove-hide-features.md b/windows/client-management/client-tools/add-remove-hide-features.md index 4fa8c60998..92fa8aaf85 100644 --- a/windows/client-management/client-tools/add-remove-hide-features.md +++ b/windows/client-management/client-tools/add-remove-hide-features.md @@ -1,19 +1,9 @@ --- title: Add, remove, or hide Windows features description: Learn how to add or remove Windows optional features using the Optional features page in the Settings app. Also see the group policy objects (GPO) and MDM policies that show or hide Windows Features in the Settings app. Use Windows PowerShell to show or hide specific features in Windows Features. -author: aczechowski -ms.author: aaroncz -manager: aaroncz -ms.date: 03/28/2024 +ms.date: 07/01/2024 ms.topic: how-to -ms.service: windows-client -ms.subservice: itpro-apps -ms.localizationpriority: medium -ms.collection: tier2 zone_pivot_groups: windows-versions-11-10 -appliesto: - - ✅ Windows 11 - - ✅ Windows 10 --- # Add, remove, or hide Windows features @@ -29,7 +19,7 @@ Open the **Optional features** pane in the **Settings** app by selecting the fol > [!div class="nextstepaction"] > [Optional features](ms-settings:optionalfeatures) -or +Or 1. Right-click on the **Start** menu and select **Run**. @@ -41,7 +31,7 @@ or and then select **OK**. -or +Or ::: zone pivot="windows-11" diff --git a/windows/client-management/client-tools/administrative-tools-in-windows.md b/windows/client-management/client-tools/administrative-tools-in-windows.md index 1e319e16a4..63b3fbd65c 100644 --- a/windows/client-management/client-tools/administrative-tools-in-windows.md +++ b/windows/client-management/client-tools/administrative-tools-in-windows.md @@ -1,18 +1,26 @@ --- -title: Windows Tools/Administrative Tools +title: Windows Tools description: The folders for Windows Tools and Administrative Tools are folders in the Control Panel that contain tools for system administrators and advanced users. -ms.localizationpriority: medium -ms.date: 08/10/2023 +ms.date: 07/01/2024 ms.topic: conceptual -ms.collection: -- highpri -- tier2 -- essentials-manage +zone_pivot_groups: windows-versions-11-10 --- -# Windows Tools/Administrative Tools +# Windows Tools -**Windows Tools** is a folder in the Windows 11 Control Panel. **Administrative Tools** is a folder in the Windows 10 Control Panel. These folders contain tools for system administrators and advanced users. +::: zone pivot="windows-11" + +**Windows Tools** is a folder in the Windows 11 Control Panel. This folder contains tools for system administrators and advanced users. + +::: zone-end + +::: zone pivot="windows-10" + +**Administrative Tools** is a folder in the Windows 10 Control Panel. This folder contains tools for system administrators and advanced users. + +::: zone-end + +::: zone pivot="windows-11" ## Windows Tools folder @@ -24,6 +32,10 @@ The tools in the folder might vary depending on which edition of Windows you use :::image type="content" source="images/win11-windows-tools.png" alt-text="Screenshot of the contents of the Windows Tools folder in Windows 11." lightbox="images/win11-windows-tools.png"::: +::: zone-end + +::: zone pivot="windows-10" + ## Administrative Tools folder The following graphic shows the **Administrative Tools** folder in Windows 10: @@ -34,34 +46,7 @@ The tools in the folder might vary depending on which edition of Windows you use ![Screenshot of the contents of the Administrative Tools folder in Windows 10.](images/admin-tools-folder.png) -## Tools - -The tools are located in the folder `C:\Windows\System32\` or its subfolders. - -These tools were included in previous versions of Windows. The associated documentation for each tool can help you use them. The following list provides links to documentation for each tool. - -- [Component Services](/previous-versions/windows/it-pro/windows-server-2008-R2-and-2008/cc731901(v=ws.11)) -- [Computer Management](https://support.microsoft.com/topic/how-to-use-computer-management-in-windows-xp-d5872f93-4498-f4dd-3a34-36d6f569924f) -- [Defragment and Optimize Drives](https://support.microsoft.com/windows/ways-to-improve-your-computer-s-performance-c6018c78-0edd-a71a-7040-02267d68ea90) -- [Disk Cleanup](https://support.microsoft.com/windows/disk-cleanup-in-windows-8a96ff42-5751-39ad-23d6-434b4d5b9a68) -- [Event Viewer](/previous-versions/windows/it-pro/windows-2000-server/cc938674(v=technet.10)) -- [iSCSI Initiator](/previous-versions/windows/it-pro/windows-server-2008-R2-and-2008/ee338476(v=ws.10)) -- [Local Security Policy](/previous-versions/tn-archive/dd277395(v=technet.10)) -- [ODBC Data Sources](/sql/odbc/admin/odbc-data-source-administrator) -- [Performance Monitor](/previous-versions/windows/it-pro/windows-server-2008-R2-and-2008/cc749115(v=ws.11)) -- [Print Management](/previous-versions/windows/it-pro/windows-server-2008-R2-and-2008/cc731857(v=ws.11)) -- [Recovery Drive](https://support.microsoft.com/windows/create-a-recovery-drive-abb4691b-5324-6d4a-8766-73fab304c246) -- [Registry Editor](/windows/win32/sysinfo/registry) -- [Resource Monitor](/previous-versions/windows/it-pro/windows-server-2008-R2-and-2008/dd883276(v=ws.10)) -- [Services](/previous-versions/windows/it-pro/windows-server-2008-R2-and-2008/cc772408(v=ws.11)) -- [System Configuration](/troubleshoot/windows-client/performance/system-configuration-utility-troubleshoot-configuration-errors) -- [System Information](/previous-versions/windows/it-pro/windows-2000-server/cc957818(v=technet.10)) -- [Task Scheduler](/previous-versions/windows/it-pro/windows-server-2008-R2-and-2008/cc766428(v=ws.11)) -- [Windows Firewall with Advanced Security](/previous-versions/windows/it-pro/windows-server-2008-R2-and-2008/cc754274(v=ws.11)) -- [Windows Memory Diagnostic](/previous-versions/technet-magazine/cc745953(v=msdn.10)) - -> [!TIP] -> If the linked content in this list doesn't provide the information you need to use that tool, send feedback with the **This page** link in the **Feedback** section at the bottom of this article. +::: zone-end ## Related articles diff --git a/windows/client-management/client-tools/change-default-removal-policy-external-storage-media.md b/windows/client-management/client-tools/change-default-removal-policy-external-storage-media.md index 685f872e8a..725c23927a 100644 --- a/windows/client-management/client-tools/change-default-removal-policy-external-storage-media.md +++ b/windows/client-management/client-tools/change-default-removal-policy-external-storage-media.md @@ -1,12 +1,11 @@ --- title: Windows default media removal policy -description: In Windows 10 and later, the default removal policy for external storage media changed from Better performance to Quick removal. -ms.date: 08/10/2023 +description: Manage default media removal policy in Windows. +ms.date: 07/01/2024 ms.topic: conceptual -ms.localizationpriority: medium --- -# Change in default removal policy for external storage media in Windows +# Manage default media removal policy Windows defines two main policies, **Quick removal** and **Better performance**, that control how the system interacts with external storage devices such as USB thumb drives or Thunderbolt-enabled external drives. Beginning in Windows 10 version 1809, the default policy is **Quick removal**. In earlier versions of Windows, the default policy was **Better performance**. @@ -16,7 +15,7 @@ You can change the policy setting for each external device, and the policy that You can use the storage device policy setting to change the manner in which Windows manages storage devices to better meet your needs. The policy settings have the following effects: -- **Quick removal**: This policy manages storage operations in a manner that keeps the device ready to remove at any time. You can remove the device without using the Safely Remove Hardware process. However, to do this, Windows can't cache disk write operations. This may degrade system performance. +- **Quick removal**: This policy manages storage operations in a manner that keeps the device ready to remove at any time. You can remove the device without using the Safely Remove Hardware process. However, to do this, Windows can't cache disk write operations. This can degrade system performance. - **Better performance**: This policy manages storage operations in a manner that improves system performance. When this policy is in effect, Windows can cache write operations to the external device. However, you must use the Safely Remove Hardware process to remove the external drive. The Safely Remove Hardware process protects the integrity of data on the device by making sure that all cached operations finish. > [!IMPORTANT] diff --git a/windows/client-management/client-tools/connect-to-remote-aadj-pc.md b/windows/client-management/client-tools/connect-to-remote-aadj-pc.md index b47fad81ee..c08492c201 100644 --- a/windows/client-management/client-tools/connect-to-remote-aadj-pc.md +++ b/windows/client-management/client-tools/connect-to-remote-aadj-pc.md @@ -2,7 +2,7 @@ title: Connect to remote Microsoft Entra joined device description: Learn how to use Remote Desktop Connection to connect to a Microsoft Entra joined device. ms.localizationpriority: medium -ms.date: 08/10/2023 +ms.date: 07/01/2024 ms.topic: conceptual ms.collection: - highpri @@ -14,18 +14,16 @@ ms.collection: Windows supports remote connections to devices joined to Active Directory s well as devices joined to Microsoft Entra ID using Remote Desktop Protocol (RDP). - Starting in Windows 10, version 1809, you can [use biometrics to authenticate to a remote desktop session](/windows/whats-new/whats-new-windows-10-version-1809#remote-desktop-with-biometrics). -- Starting in Windows 10/11, with 2022-10 update installed, you can [use Microsoft Entra authentication to connect to the remote Microsoft Entra device](#connect-with-azure-ad-authentication). +- Starting in Windows 10/11, with 2022-10 update installed, you can [use Microsoft Entra authentication to connect to the remote Microsoft Entra device](#connect-with-microsoft-entra-authentication). ## Prerequisites - Both devices (local and remote) must be running a supported version of Windows. - Remote device must have the **Connect to and use this PC from another device using the Remote Desktop app** option selected under **Settings** > **System** > **Remote Desktop**. - - It's recommended to select **Require devices to use Network Level Authentication to connect** option. + - Select **Require devices to use Network Level Authentication to connect** option is recommended. - If the user who joined the device to Microsoft Entra ID is the only one who is going to connect remotely, no other configuration is needed. To allow more users or groups to connect to the device remotely, you must [add users to the Remote Desktop Users group](#add-users-to-remote-desktop-users-group) on the remote device. - Ensure [Remote Credential Guard](/windows/access-protection/remote-credential-guard) is turned off on the device you're using to connect to the remote device. - - ## Connect with Microsoft Entra authentication Microsoft Entra authentication can be used on the following operating systems for both the local and remote device: @@ -64,8 +62,6 @@ The Windows lock screen in the remote session doesn't support Microsoft Entra au Disconnecting the session also ensures that when the connection is relaunched after a period of inactivity, Microsoft Entra ID reevaluates the applicable conditional access policies. - - ## Connect without Microsoft Entra authentication By default, RDP doesn't use Microsoft Entra authentication, even if the remote PC supports it. This method allows you to connect to the remote Microsoft Entra joined device from: diff --git a/windows/client-management/client-tools/images/change-def-rem-policy-2.png b/windows/client-management/client-tools/images/change-def-rem-policy-2.png index d05d5dd16fdb519e8668975b2123c6ee1e6ee14d..d99919de15171c5b310832fcd3af2ad365a91813 100644 GIT binary patch literal 24847 zcmb5VXH-*N+b*hr0-}PT0i}cvDn&qg6;Kov#6~A{LZP-i345&Ye1S>cWHj zx=&A?Ivq#*VVKU+uEgKI_<{C!+ViQN_Nihl&myhC;B@Elol~dE;4FtWXJ~EaH}_3F zPo28heDXVufqb_=b;>&Lf$p8>zE-OZlqyN%7wdIL^gWQhN&J8(Oj9#6W6&FWH#TSd z!)LWz0f_fdtkuPc@9)B#m~zH=hD9$uXV`HSV)YAAd#SCk#a?6aCBii#TBoONHj_&NzwXZ~qD>E*H4k+*S0S*veGKdnlcUeCX{AQJ+9Q#@SC0@cu3LM% zS-e+|-fzj*cy>rKMp*?etKzR{hp$c@UkG0zvmcBJqK=ASH&8o@AW76lt6n4=b~xM0 ziQaEb(nXPqAYXM8*xTVp3-J8>SaX;cdOu299blNmrtPZIC}_$t;&bU>iQch%bIie@VS;fIP)!8|Ic$DK zQ_a+rwVBGgH=4K>DZe!gm_U?yj#ePG7kEY0*uwpV+I8B-oZ^HEb9RTy^sxp*vrcVL z;v1O>8A9QQOaif|Q42!U2Tmi~%|}R{L!A2)x`+fFkRZ&KzLZ0>FM<>%<;#nC=g@P3 zVlIc;qZ~usHyYs~DyJs)sFY**fxG7o_*nx9tWjB6S)as>bahe1=;?fJ)NcfITKY9r z68#prkD^J(J>b00ny=p0rA4*UId`cf%B2xr#h{C>FgED@P``XKTt0_iH%2|@h5`)H3q>qJ z0^5bM!G!tF9)~dvUAy1juL?WcFlvrRDGzQN#zZB}*;#|0?MLrqw3Y9LQH!o;-f9zN zy|sS@uqFsHw|b{xs&zIiIG+PIb|#ADjEB`b-(FkmFiFsObvq6{oO@9juS}1&_WcX= z-)SAf*n>4uBh77OdaIr8v*zggAuNoI%prRmT5hwZUEg#j-by&-lz}yiu$T@lU`o}h zPTux|OA3ISZLw~Ae?Ml9-v)7e2!)doi)8S$gxV8-ZqOg^IlGtxld% ze%9Q-mJf=gu;x}kgz<)r$7Cv7EzU)-PC#M||I>6HRazpCVaMPIr=QX_BEYO-LLVfp z_tjd&*xwDCd6$ixagJgpkDhVh{Bj`w=2GLNlv4ZO9;w&OJ8^dBhpuvIUTfAme%t#r zV>Ooxd`BnCjzP_8>R(pt<$5)CbTE6h!|$S!2F{~!5}*a_Za@gFgvBtT>kWf=_N!2(I-ve9V5ld>(euwX zT~=lPVIaua+$ycK;povKE9dJU&DC)S)Rhpa-B0aqOr1NG7bQGlxZzI~(F|LRunop$ zj&PB47UvJIGL3$;e021FPQi7bPW~@&?Cqs^VEe($2R_ck5xxCQb&Ze33Z-WncaS|F zTgL&M(meOfv~J+*pKPe@2NhP-Sm!|DZLz!k1OOw3(Hddil_TSe2+Ta?KM9QOSkgG# zjAa##>>k_H@a*bU;z1*%kxs`S@rrgfT{nXH{d|E#smoc_EGW@(^&b)eRyh18+YWm3 zVm&07=X&rIGXrOm2x~o3J4^a9`km((DC88l?!G4{Pn&E*rF(FB*6A7$6Bkg&n45Mc zz{RUka&%N*t5ee2^(Kv)D@J>iCKViUJ~(1!lx+K`rET*x-m#Fi(-$!|-}ZK8Y+hMW z6k!bhHR4X2S{g9JB?|Mlv}!haOi|-yTT@z+RssxV{R8-xE8i1QgBB~-jCdq3w&D{L z&fbO-mK6`4%B#G4Hi8ZjF!jEa;l1SB>bMo{O-_j_>fKkIp_WfxQCKeGY@PgZp6K>T zDYxcBG8Y>+oEiNsEEarvwDT=I8)M;&fgT_<@VsjSpKQj>{b@gXTp02|VMw{XM}6t1Oqz(=i0$Ww{X~|FJQ=!C6 z1^u?2Zf)F^TlzqC;O*gFjOI}n!>|D-gcisiSD^q zG@Q;DSANfR7+9vc7Ut`Fk*bZQy5bMr831x*J6D5iNAiIA*7>%LO(`wTfcpbPVHr}O z@9|AS#_`VaS0FP|glS>JuK7M^JbQZ_#HNTNr9QgdF++Kgg4PezHow+*ca(pr{~n<^ zd}TQK`V48?Mi;3kaLw*6e}wKbIvN1*#HJ`b2W+!j`_=XXk^1W}7=~UVHRoU>i z(KiYT!TYV-d6J*SpvUkg+4{r} zCUEE?p-QihrIhZ8mS2e~Bw3u{biO}O6_dLQlGiwLSkWOQMvx^wyeholK$`%;M?4Lyz6dQ@VshrBo zsj;Sza|G7aNc-MH+h-N2Sgwa94CS}l6T;h;9ugquJ9q0IfiA7U{6jqVvrU+Zy96P<0XzrE9MJ2FX>B)A(WEzhQ*WOmQx|?1?J$B$UA+08YN&iq zcs&Zf`TZ!RyS9~s-J+01mr6c4p9pvzYdj+SJ4AQD$5eNgms8002SZhBRxa)_ItmUTJQg0Udfc3yCpe)}cHRA2#^sXMYen+5p4DX# zy2jJ6nFz5+7&#v{s`RGmUeu=OduYV2d*W}uknQVzMI0II`DG6_%?f+XgcQPzv#AY1 z%=U?#QX+9AyJx$0{qq5dGk5=U^LP($On0z09aL6V@oZ&a1rWd(oOPNqL7lnP_qaB3@||B1ooh6YdMFivxx3P9Yf(}97kD{9HK6tM*ewp>k0@Qt^w2}^$bKJr z2k>_9PgPMfPL&otVm}ruGIylTHD=JIKg;8u`LR{iZhBlDQAvK zanhXBr1Sc9zi{ik49t1u6%6m}pNfW1>4#ERZ#Z{xu&6KQahYZN-)NdGEnR0t0#ko* zCh(oNT6lSRyKk1K94NHw_olwn{=YBt9g+UV;PLpoy@!}1k@;En^Zd@b@?W=74R1Ib zJrpxD)r3B%d^OvP9y@wlE{*WMR?_toB`GFt3kS@8^1rhlXRcZ`hnhsi4r^(ri)3fX z)~u`ole~*zT7f(kO;a^*w*5GlshRQw1$=d`)Oz8wEUR86w1Pr*pd-b26geKj3R+mZ zVK9rU!+9t0zI8jcF&|Xz$!}A7d=F!~m|-`oWLmd0>@Ageyf}X)Is-jVs;h=r$_V`{ z91q=sI@vky`^j_}aH&SfvY4yfaT3cSWgIwHq2>M2T?!px{i*yXC%3473Y9hH0fOMk z>3{B&p~H+#g%Dc$`^kg#8g<{n+5Kl?jH7Cl?P?^&QQ0eUm=4KolHlcAfnN&R>I)(n zDZ1W1S=nfnpL?EN2Lvu&Cw)MA87JA^_4Swtw!ji0F9))lhfI@;W<#MqUE%U(E-mvL zo+Ss}%-LGk#6D@-xKD3IC}5A?`q>UE45fmZTKFW}&nAA?mqcq^hFT83a3i!O(V(smSqQ2_{;EQtBWo(M#NRKs2) zc|qyw{;ir>(%-4jSWK*K=PC@bT@otP>Nnt7W5Ysa*f#SFIjHa^phf;O1K;T$gt{4> z=|144UsGn=`!s{R5zG73BRQX(!Bvgj3RSg-W{cdQctbjxoNtQuA+_?1jpqb!9Rr@o zBL?XzH_p*=gPj|Kg-)@FlHnZ)$@_Bn>^m%$q}6YsJ++yZ-p6%VG~gblCfc(Gnf1zw zHl9)|V^MfSS(*dKi+7+8`nr;R^ zx4yU(%bli$4=Sp4+q15dvP?&P<4hWGw&G7~ga6iC{??(YRXM{(?+)Hw|&de&iZ z+M;{iMWMI#DunHP2t`EMR^{$`71#q!+oL7#PSlzIis)oaiH1L&sn5wqLj*GddD0$_ zz#nIfa?u2OX5$2zF)v zf9V@E^AquuZbVq&Kzn|PWzkE*lNUi04`CDMKk+5bFbM0ZJ>N#@)?-E$WbwXF6%$=6EQw3+k}3?6&x zdpCkR?Uej|k6S9^4D5N!;<4R`y4b1IRUCQn1|1Ds z|IA0UhB&EP%`yuZ2va%Q<@<%>(1)GquBT%*HbtCk=Oj?h@tP95J`?XDQDq`@Aj7EJ zWSi63A{6DW4SZ~7U7O#|o@;c94d5{}Kx6#oGFkfz_asphouZ~EI<~Nk98`=f~*Q3TPw=#K+ zG`*4xb!==ow8P^wqZ#O2Plrm8B|<2=Uh5UT$d*RgfOBc+qjS_!Y*igWS@qlK`UiD= zR~l5pAo`I188lo&C3v9Z&Eayk^`(o;>BA2?_6i%!MK1*;JIr>29wxKY05R_hZR+xj zO*%lP(q7K4+=fg7DZlNR37=ewS(2^gnOm~iKbHUocg!L*bxX*<28h&57;Z3X_q_0h z0LzbrzN2$4io3iq&Kfx54T0JNV$UmDjAZ&KMe8N`oJ)Ur!k<1ZTV|^fW`UMV=@P+( zJ6DFj$-JOzBm#ZOz5QWqwsbrHMpgYHam+AA_6}M!#Uq_4!q(74L!MS0BN?`WSp&67 zN@=5x{SWbc@{g=Wa>Q$CZ2cXMaylAyih}Jm!LO(eQ}2xCT&StKqRrF`FEZp;L{V9; zI}@rGdCBovY}(N_wG8EF(e#V@eD|ax)B@jpQ%XKUKJWM;*IE5s`44^&`|Rnd zxqGe1rsCOTFz_<*Y1Uy)P{kPli>AoE{W9I(CCdp2{T_;Q5>hqgzH{cYxucZ<%KB^@ zZXWhKZOCBE1L1=3%=jQDWEH_I5Zg5*8mHp-?&c)uYmDPa%}nt}-aS@M0}0!~oNN$* zA7klW^F6Dgwcf0nwaYCy~un%FS$h5Nn~wr$unrGgpYCtT^D*=~5Z!J63C zh`c2C#@%=~%dWiVJ}8Glu;n#wl%a3`d|n{k0SXZW*{qRP&rZN#faKSk4GyZ%G^>$c zu(MAa+?rejB@TrEHKS7Mjkv73{)`xsJVlBdiA-DI2KIkD_tQz;MZQ46(HW#fj(*Dcxuh+u}Z7xw5{7vLc2FrnlpNLh1xQ*}m) z8S`ihS)+cxp5?VqBY0QgUsNHINU(sn(GEddKLs&Z`opRJGXZj$IZ7Hbr&~u!vIHjnY5A3NP+LfKL)!C*yJsXRI+w1=ewp3Fw-B!J^8q{?vCwI!60qF z-RDouu6_HEbQ4r6&YPM%>|JBwlJYO}1ZChn&9Yv5e}JyXr8JUZ%R zIPg6mvHl{jOCtP0i#C9Cz-EkjrdFSj&vvZyu8CE{Ob(0P5t*d~)rGezt1=!*CGCj! z%qEcFEHlJZsv(J(6<;Lo5nNbWl_QRRa<0+U_Il(zAtGQv&= z5M#2$85>hIebBxCXbOuXpN|kwH1y;i2UqpT#2R6E{oE!gEqxw*-m4%X@8+4;+r6Jv z7>%mzgHbQ~z9XKH_a(ic^OYL&;9*@;NW-_Z8{dYOQ&yKuK6$3L<=UH~Cp%lwQ+10F z(Vk3h9XRDaZ8eJ7HMSWX?JF{Y$G_jc^=LwA7%^`r?reXsKs+HSB}1$p`N!O$zKKr} z!yJaB!|OoOQ^^ts-c)e3nNt^Fgsj~h!GZ|t{Yi0Lk%8Q1T+}7{md5PN_YlA`_qMso zd8m~V`H$J#_A*nxZ+BX?ZG8xv%9pwW5GFj1AHZY+=k$#+mA zI<~uG`R=E{<{=OVwAj44^_OpSJ9amCuCN4Cwkfws3^Z3YBCQ5I{41lAl<05V!Dp!o7NmJ z{;7+iQu|m9v@`jYYJ4p;zjZXZJD*4HCDme~B4Z!NM}so@18ORTMsO%_&^1p6mH8ir z_*zy;|8Y3A44xR; zYn_BAgbD|q1%IH=nqu5__Vyn1{zpjzeo=EJF2=!J0jcmMgWs}HBs|g19RG#kcH5iU zw>DFG!N(ql9(53(K(%6Ezdd-C4hi||3A!M?w`=JyUF9vzJyzA-^Ve@_a2W7>sgsIB z^e**q`SJPJRECXSQ&Qa9cm;LqO3%bvwVBC_%}3x7`8e{Y{d>5gE($9wu!Q3x-PmWdJQ(7TPs{~+jxWaAHRqA zSg+>J?ITc8mvbQGJjNvl^t6_PU3t%OI}q{OE5!j5irt`9W*kADyQBj2pAt9*Zdr8` z=51u{Ze6F_@A!B5REk&YU#D!Pk9<&@usyQ(;g;QK{a%EKr)zx?&_%#|TMuapv^W2t z^rz1HA>b6t^{kSKAl3On;PwDa!Oi#aPVKiFY&vfz$Oo04YyIjG3uEP}gyALB}z`w9EwHe&f zSVHPf{0;AIF=+W|IkA}M-%P8Tc9f#F|3r_y1HY1Lf_9I1N_2dCO(_~SZ@89^4_g?J zCRTi$&+SGHt98$gOL7)jL7xH5T0HC&u#IabQ@4tUdvD)on-+M%066TEI^9RIYNk-Uwa(fGql1)h`#q`89 zVxYp$gyRq@&-n6-?(^G%9{_XuZ24O}e!ma=b+?jtAI{M!DtnjCZyR!0%N}l`v3Nz- z%Q(4#!f9*S_?R`DsY#J3ql0FfzagLvCs~H8Ds4ET)wYLloa8|3ZQ5-vn(E_26YU#q`- zsF4y3KD=UfnkI7Str^Y*W_!u@)-GD#;cs0=2&L2p>1SOBwOxC%d*D~c8oN4yACc+_ z1I!Mza5fqkw3Q+pw`E_xZlZ_(>K14?hBA$(Vl`mHbt+dAOBz}=-BJ=6gXVo+2U$?0 zR95!ir$H4_De$XN0vYoVtsGQ(UFYQwq-8~zk;L@o?+Lqvbj=p))dP2v4a?RLG*2gp zv-tS(-NE8Lfy(Kz!9?I5RE={uVI<;HqS*0TNWolV^^r0D-bBey z)@uc?#m0k1cq(`1fJXB3U)EAH(8VS>vyEi^*r1rBtN8jNXfK!i0FVN*+Hf|CJjA7S zIJsfvh!Ld9qe-#E3iy0DloamVSe05yUR3$`t>O$9i#W*{_ngWd6zeZhpy6ym#}c$P zGJ~JlAze0~uTCLt_;bk`-=rlI9%JAtupXT=&utCUg}hgXGRX1Z-K{eqdcqN*tz%To zh(OT6lqdST(k!K=@V}N4Ju0Qd_X0npc_VfEv8NgShv1#(oEmoifoU03os^(Q1)h}e z9wnexRhbnv8m6EZW1XXiy4&MQAEUY;`hUC^?Uw9nxHPi~@oYCO!;bI43Z(a=S0+eo zG5s>e1=h4V%`W!u+eKy^6UUoBpx(&hCfFys(~FUtP!E)UyQj}%S54hDaA6GiHbCxY ziKX~JDy2*_cM$Obu2v%7h39$^x|7al4=5A{w`Nvs8H?)=g|Eo30m5be!fICWx;oclIsx+acW-w z$ys(L=k*xx&812N%9AfsOvJhO0mTUW0IoU8ImYN|Z|Bou4+UuIGCov8{Hghc_ez^s z*$%T)Ntp!EVX9O>b%#|0xwB^Qj$xeyQhLFl9L?5k!A28kB?8AOTPuq^L&3#}cWc>- zth}8LCx&oW?kI{q9LHX2Jrk=)*(sy$i@o=1;9k?kcr2c{1$jy;@}Cg4o7P&ZA-eq= z=+aEl-h>Yx01fAZPR%($mG$vgY)ft}u||Zl<>)f!#U!R^DWPhEoAS4?)qPY`IV9oO507sHefCp}QGp`p1ATGoaFwsGf=a zHGk>^w6>W@*1}I$+1&^@s?#R9hz}133Cp_}%cN{#?b2e5*HvML>IX%rk#aU4!f@a| zmt(nW*FA(%8yTRzbB{Uif`pRu7kAvu92gud!TD_jVNnW9>jqRFl)PRHdoXCsLS(iL zhmbdo2CB*-5^JRW%c)e^6zE2pl_Pa^InJczl5yH^l|WsY5E;gx3U{8ys(;Ef;Eg8E zjz9iHpwH~lfE$%Q5DLvGZj+p;*`%~n{-}K|9?tXyT6(xtjrcb}h=d`4_IYjE*1QV- z;V?K+JkfnGDrvoEHA$ir_Y(C7Ol90BlZ!!6hxQn}-lXx6_3!_yw{1B?x#aPa*EX~f zOeBa1)v5IziE*%AiSuh-au4jv*gk!rPGCRBLyebsH@{Z9-Is9t5o0~|nO%)h+gCW_ z)sGUKm`i~y0{*!SefO4Uyp70*ArVToT4loj5Xr(?iMd8l36k7Qi~r< z3N43-&~DNFT;JlJdIP)EsNKM_i!-r@^S0K|f!*>)Jk8La1kf@^7F$m6zqs800O|g1 zwAwS<-$b?D3}F+bN!tl{_y6+He_*};aVImJVJlQR@QZJM#^m#H-`SW}(l7{te5J!T z!Xgl|;JD1ut~$9HJM&c<>byzAZa(j~DWc-(j<-_L7J(~vz=vBtsO>BpO&UVE>gq*z zXUlil9B(Fek(B`P>olJc-lD-T&q+=l9QoMGL_Ti?mv$QRa(z;c48m)NM~sXzydQq% z+te{h9w`Y=5C!_0Y%LOqS1X%}aMZKyGq)ta zIpmZ|b|#bnD1Ag_bL$vkgmft@;wI;!+`e&@`eB;H!6y-U^WQF-lYCzLJET!oo2@^{ zc>4sX{CtgmtbIbDqpc!ZJ3Pj|0HIZ@aeQkdukV1tcJi|j)w;y8zX?xaJ{8;~3P zsv{*FD8%~mK~D%hfq+@rNIa#k#o2S{De3kW>>bmFdE zqg(q;-_0G86h)z?lCs}1STlh^6&o9}?dDxNc$HY85oyU(*6RwUYpnX2LY6G7T?O?s zM2QVkaB^{}v$zSr?JGm!?zzS$@lX>4)ZLn|GksSqE|lxw%1gF75~sGSFzouA7 zeuM-j!r$3FK^AIRdyTQwG-E4?v5C<+J`?(`n-mRoyYzU=qi{5vbLpbyq|=DiMq)+J zK>Tf2J~rb3x;t66k38>nv|!w*p={h8FU8p23BMORU;nKf;vnEYMFJ3PwoF8V+yUC* z^0Y|IW4&Ro*pTkDuX<>YlGRQQ=U0fiP1J6aOM#ab4Ja=Yph@~k!S~>Qi2wg+&|uEu ziI4vQ41%q9KOU7_*dLjYzDW5~6)!(J{Gnl9Mr|A~318-;K0W%38yk__WhE*!C}E*$ z4~SUz96#O=_WRtOD(N0UFUzJ1m*~S3rE9RkK9J2esG*U6!>yJ27Hy$ zm+BP@HsvwyQp1X3`_CECIop|vJ;V0gFc^Aa$-n&8hHvGHs+Yw7%KrI|0?(5co88xD z|CS9oA5lCkWVV$ulnig$H!*Czf5NPw5iERQby7nE`W98H!bF}*X>1Q$CD)hZ4)P<&*yP>9joGGxGn= z^GoPfMt;<+lzC9Y7F<@CN$jCDLa7#wAAAN}eQS0@4Y&KZl=aN`yEBdT(x5Qv#=l zP?j+6+@Y%#EUrN^f}%@y15mkL#tIX_eDrMO2@+rwou$#PAcKeSM2*lHwVA?=SMk4b z7v0Yb`Ze57gy6`tgMRhQoc%M(cfFCU5>8O{*ce2FCUI<3^ychOB7E71$4eFG1F8Fq zsmeXbRfd!OO_x$thj@bw`1Se01Os+yAF(Mbznnp4#;r{Ce=_{#740@l#kKZ}s|1mi z*v-%NcB6P{>XbI-L66Vh-ZW7b%vTxQPrBySO3t%)qLuY(GgXd7@#XgL7ni2v8L6VU(f%lu^NXvr*eB2IRK4TKow^vinpB zw)nk!!GEn_dTtW+@Si!jSWoW$Z<)IRT4(M%?Vv|dbH3aa8a;QtOE#%hkPTIVROu|A)pqjbj=Ek^q8w1)WQ*6})AXJwK9sC~`h5kb zu>8T*#c?|&_CrT$T%UzE1>BYr>tbL9@As(p=UqS7!j|={gRujQs-4e?_5rAl*6hon zTr@@03`}|sn06-+a`Nkj-S8q-*~i5lxLJmu{@2pAhA`{G z9vRWNyXhV5?L&w1lhVhJ%P7wflHR{1S+7tK%&y@ds??KQ_dL8ed^+(v0f=t9VYQ^a z2K^lBwephe+#O4S-P)qfN{dUgnx&Hfq!*g*Bvu{w>_H00L1?h)`-bDWpILw%J#!7$ z5NHO|a16*V z$;bW7GZ9JD(YL>ETes)u=g2dVemf;fzBQw4&g7YdRI%*!E^^;~T(ZVVOuilq{e8D5 ziUY9s>pqV4*m3LE?`a=#=lJh{O9gte%RNyx%Gjo+UX0#l9WKu)MQ)62U~blC^X}wX zkifm;QC8a=-MFQPk*al?8yttew-w#ihBv*?KQ&$z{%i<-l%|DTcd6gLTjZJ=_1CIK zTpplrmDWdhkHwjeWpw;o(9%1Q|Fs{REW8P(%8m{1y!RnHRpj?Q?b!f}_8fOtnbb0VMjZ(@q_i8i{33vUA-nElSmu&SJ zsP^0n_3P*;aHpV}uHAm=P!%j5{A;VlwXA%Yk3?jhV>Xw1zH64Z87wXR2vp3jJE$n> zf&HlIW5RE?&}VC+UiS6?@}q~Md|bL+;*;ZEZCK81D`JX1Xu>5wR$lka5=s4o&2IV` zlnW1C)Y{EK3=)BXpB`^8?pq-I8Y}_}VKq$MoDB`+gP*=ra9sE;7|&hHEv$ zuE-TY>^QCIeCUDb%#S7{2KpSyw3N9M2|o;u%r$i})outES&ZbtqRi089ES3zrQb=u z>cSyxE;RGbvgr20Rle7qQ+vmbmgdRB{+!S!+TSu0uKkm8JBmKyAO5Ic8qeGUyM=6f zdvphVVU$y#g)D1IS2Gh?pe>?g#7w|(E`Qh|{T*VRPo{A!9$J?(cvNO=`>mtUv&VQZDswi1cZ(Ng9=~*<|9V$f77{Y2ALf? zxXz~*Epk?tp$829x?Eq#HGV!+(yKX}QB^5@O@~Rq|1(3Mww(Y(qSiYV@;vI-$VO8) z6$hkr9~7)QcI0pB&HqGY!JdPqfts$>_xGZiN>!zZI)KJ$T3@Fxty;pC!iFWH$^Cu)0g*|BZZw zN&Wh~N8P{jauR>O;_gJkz)EtWBzYP*+u1r=dYzi2Kq9Kr%KC}4G6W6mXy9cQmaHBu zK#*C{B7T(%+C#SCxo)uD(Ul!T@5_CV|bg!e_{BS|MD-v;6G%T|6h$rnj=y;RQ92zxPJez zZ=$tNm^Urr|2AxeI8G9762Do#Cyg;PY{hw_(deHXyj%C*=gtbpIa}E<)9RPB$d<<5 z`9Jz=(e;Kc&~|+OUl)CMox!8~97lWOq(Pa_EeLRJ9iU3%P~HK1K3Q2^0Z_s`Gm<@N zHO;j(&an8kYSVm^5H|DXd%|qO(G%3>pHP#P^_0~F6&vedSK%c6k9R#^L^-*Qzi6pg zqEUogMY!X&PywaJD+4T`gI`8NtV%z$&^~`x>&j{(W;4I#ulm$eb<-k<`f1C&iwk7-nlz7Y!!C@X>vE#jW$)o=XDPpw*ZtI zDbT3a6|hXtVxnej*#M;#O^a8IG@VTS&9EAXOWnoJ*@y^yaXsh27IUUGXif_-l{t4~Rb}Rkcly7+3 z3m;8wlt{U^HT|DDpHcLWb+v8P;x#%cd(On%@Nlh>neCv#l##ZeWG7w_Ey5 z$b;!32-&7Hznh$*Y6hLZ%(i;l^cLDL#%81+G*9fV6!RiVp6_OtA6xw>q4*zTkpfjG z#6K&y)%!z(idFKeIYCRW0wl#laQZY9AWwBiy&jn^9eDjml59ZopovLtE4!DEaf6n( zdu83*J^Q$dJr4-}>z;>;UU@O9rf5Xw#f%cJLRT_G>AEX~?g5Lh-*AsltI3MKDb+?r zI(pi65j3I8;yh0>Amz!yz|Ui|$jJJO|62?^`g5fVd8sqO%0>j{&@dnwxF#5a^G7NL zcL5p>hW$=U2a42-50gF&lpIYk0XhfT1eHM{+@+5fVJQC8D8Gbc_o){z)n8iolnHZJ zg%fvPmb7)i!mVPTt?TvoydMu#YzyDJG$sGiGdq+`ESOdu6iaMgs9-W+c*q#>bygn1 zW_#0!ZiH^*pn0X^l;NeuXMN9^ThQ#6wKM;t6#r90PK@MtA zXj+%H$lg9!@R;AXT+1W;EuZjJoFV~kDUO|d`^-IY_V8}`BK=`z!xOb3W7MK+Q;?)w z8(2M7d&k;^gUQP9?iLTrZl@WSN6&ta0Oaf>9<{OG8SPM5@}ehu68l9aR{TmT<#g9G%BaJ||JuT4(A@811^KBp#uWq@ym;)??fwzExu^D$>CwD4{-D zB;W8zsqHBu9X1I+uy70%<+~|00R7k!myuu7Z5k`L5@q++dyUa<7}G^|m~SwY&@Q9} zGm*D~^H@IpkP1Y#msL9gYW*99DHy3F7VJTkC)8|woUURD?)qnwt+Od7`tDDw-#1NH z^Vhk);#rWsHK9GBKP+uOT0b0FLM zeETx+_!X_}Ph*(SVCIwWEAhKxYzdxqg$QYBvdXkpb_Eff_4&M+(v4Ck0cQ(|^-t0k z;uPykO-*5;VVI4h$3yaG#{%>%i9zvT9XBw#d$D1BG~U$}ub>&DOvk%DkPn#%OQ74c zgRLkMd&bU{2_|XXh|Shoxj4QieA5q`T}8V21Msx`H!X2};YQ<=R>X*1!ucJGE?@hw z%Dpo#-Q3v#O`Ys4;_YbL1#io}&Gsi%w%mc%04Z{2ROT{1@!;nYV!>VbXPVw${40$l z89e=lZ$@`jcN`zSV9M70ggE^iS~$7U?{psWOeFT#h25J@aAT8|G0ZHccq|!>9Dagz zbeFoRir+0S<|21-VE*PxuWa~5@S+dX6xN}(muxFffU|X#+92ImQ+t9?7^BB-y*X~7 zscq&pbcxkC5h%fz%(~pkLI;R3Lr_Ww0L4FJeAZ3Wj3E2v z&(mH{Q_+l{t5sGI((BA1V9qmiX3w=xa0QCh_HFpKYkGSC=`l2p>pL$g*Khqw6x&UE znrH`^#)8s(sA+5u&U)|9`R8#K2tbv<%ukuhQfRX~eg7PSJdoeF{DbH3a!*z~6RBAEWA(EIv8sxw4!A1H3jz1C z&az$nz9cseo4F~5eW=JH%%&ZCFDx!_hIIXf56+gZ3a7O&oE z+U5&2Z!oNTJWo15=AUsNyP7GLaM!;$ARxtjqSJK9m~U}J)Yxg1?5Esmf|Zrller2R ziFJs_?ts14I6JDlWeu^8;XGbr5a~Vhp$dt_fv9 z7dcCXmyfb5FezRVRo(^=*~=ASUE!{euqp*|ai$$373W(=3uqYwJ&$;jhF8iQL7BT? z8*s*p_1su`(cp!WJ!s9OBk@idn9#ZOF|~{p-eD97Dh|*T2k)Y=pK$;Y;+R$$>ioGe zzw}De>}A@Ml9B73NKq&CF(OhtK5HEUhPZ&G^_&y^9y#gCy68bYcSZHeP~t&R?2Fy0 z5ItEur%3sBd8Rs&@A7WNxs&}NpDQR@V|^{$GxBzX(nKxdYb3WrK&l`QRJEILdL?-I zAr_R1PzXTY9Xr=)^m%(%Ty)PLB*=|-^do2z>$-uXFHK_ENA$)rvr^4f%e%os<|zm4 zF^#f`b}k}Y>#L?~t9AdlT?Hg06$t8bdqImzk()X@#VVa1TbUQC%H&NAAm$*rJ<1K7 z)PB+YGHBgyc2y|7QmCe?=LFc+DCfQD)Q~C{A5&>mr6C%%Qka#P8=bsYx$WUn!DHU< zoSO{}h^zuHb1&A!)CMCv zj3e0Zv+iqE4z5~zMz|J%LusGn*}oK2?&P{TG|!PxHsfFgPw3b4`l}%Qj-@lFwz5c9 z0lI8aKUr1d%Y9PeV?U$)mvBCgX*SCEZAZv5C$?g?Qn)ma|VZ*SLoLtYR}>@P&Ob zDa^RMefbsN7L7B}QMeu9Akz1^`)8Y_UZHNSS95CnyztaRdr$WNQhnosaY8Fk+IBn3 zTw%6U(|o(hD^ZJZ)p?YAQRMYm^H$XL;PVWO&MQJIxS&fqvnH(_l{b)npfH~8+=L9h zM4#68vO8*)XTh^`Gs?xDZEX;4R*?jsUisl?E4l3LTD2GZ++}XZdPPu_lpau2L~8ta zWYNps5-DYddW~)Aw)IkoXVE_x`sg32*)aw?xVm_`1#mapgSVKF4gvV#(aBgDOJGA) z1OdAIG1WAqV=gpw3d>&U%eV zgh(o^Q0U|;*+ZhRXegbyZH_1az$Cum6Tk6Y^+)GNeW`5^r`VWA(|SHm{T~rD{%)Ghm?v^Gzsqh*BzfZYf?` z)CuC%UvV*XuCStZktWF|Sn8ANk`B|4?`fwFXmzdUeb+VW>V*78)Aw&xw%*_LI!4Yr zG%(RvcdZO$4wvH@t_adrBvwRXowwT<=_iZNCTCz`7dS3Pv|O7Y{qEWPLNMkI*SmfdNJAL<#-4VpxDPcB2V#%PHFf$*{lIcVyr zU^D@NqEQ|tdtNTvL!Dg!FBeJ?NzQ}ZuHn?Lmt9fz|I~J!QB7vu+5r_26vYAzQdF8F z5`#`KAb~*?MT&gmP^3f%kQqq;gLDF-f(p_EDH9+nSZ1i9BvLa1Nyr3((nAnbN`w$8 zA+%8L3G>yv*1do3x<6QpyyTqslzsNu``ORlgdj7_BW^Q&Fwb4$$xPcUKi*0;ljPG6 zt1wa_>oa;$3-KJ@d}@v@VQ{jBJk7&qx8{#IqTyr=FfFnUVbf2g?V8jZI%v7zvAce7 zQm@{pjW|(bf7R%DbXo)RXhXHieyWej!rO>xIc#svkhjAJmh%2yD};^uL<#mOw$?y} ztVjM{g>2)^z>&X)qhQ#%(#CUFq$VCh(sBi0JVCQC$9H6De=I%gB04zJHE%X9I0Sdo z(^LsEeZ!T>Iq7z!rpE;kVZv&tx8DFI6z79!4tzLTqg?FIC6BzP_-l8HVSPb{$bLE* zlhswZYbRJQM@mVLLzq971#>Xf9Z_Tk8B#^Tkjj#*$f${<(-jkdj=%ln_#X!QsO4Dc ze%h-F6XD@ZZD+ATkb|nz4gAd%AZ8bXn1} z^RWXfmJ4t=1^)r_1`FHH2PSC4qhK8n4ux22s$GX#lFq;13CY$8NQV|%eTsHm8Q_gN zJ~zhnCu6U?V=qJV4v>BFdgAtQSs;|p_3-5MvP%5tU^!{RF(8kI8Hi|{C>L)x)ORp$ z%vbkbKO)22_{+63HCPcWhlxi5xdKS!sIF57hc|i-1LW>-%L3F>ij!Y9`@HHzuKq|# z8L%KI4TJm|a08atm#A|>mnTpxoS)obvI3Y{*kQ{L=3G{t_oE5U_Tc>ia!16un^#(% zzy)pC`z(7Gw?cvJW6C8Y?eP+Wt^Q_bUrCs1hJngodpGfzH`#lERC{8TK*+({1R)KVU3w)07zKAXp^^WEo*+Sud4Bc43_bXdYeSO%Q~)^bUrtF#;JzRk zhC8<*K~h@uVsFg=YQk?z^RLX@qvq0yZBlCmDTr?ult7^qa8Tp^7v~Xk6lAF!FWdR# z`j3h`^7T^>9m$iqw0%LpE^Phf=a&R2HWJfs`<5m|cRBMQFupC}UBQ+))l`gbUWf?I!(EN`=cYDnfAgx5J zBaOnaXp<9m&x9?L(oV8H!isO0Il7&3C10Mr7b_=?zwZI!zCXC=7bQ&SjqLu)oqiK~ z4$o*I@+*HwUH_+J%1{J!9#7Q1i^FnbpO-(syyirA?uFp~78~8x)oJXZ{8wuMYk~D` z=p$mmBU5eGuNob-U#Fob0hH+_=izCaX}&6p7F3xcbIUw52Cw!)oY!7f&K5nW=vc1o zDI#^QdjVpf(E~+gnh#S7dQ}1f-JFesIvfg1_-$X8Mbs&mh>9N?phm)#so-nhUs%hy z`o4#nkj}fQe(sRd(yw1hokUI{K2Nu|^6!vPDO?V$tqkofV!ZejL?=6Igg$f;Oe4F8l?{EgBZW{EH?Ph1QcuNq+@ zLQ6#ted27g%uBCG<=oxZYVb}Gaq~@{UGbb{W!!yxE&XeQy3jhkHXZlY%&lMUc}$_( zJX}8&S`Krz-P@j+6gyn35b+h$t5GT9&%z6l709#6PpEN0CHDG7 z5<%@b8+&ywHwnZq23F7bKD=vxwWu!ct=Kf7zL+bsv{b$zg?LTd7MFO&-Lg_{XXsNN z#7%$g>e|EJ^|Su_U6vo}{~)JWdjD$8~=#YGi2lQNEt*`}QBccj*r8)Pr^wQkN3HhSz`2;T9JD z?a!&79KS5;;kvuLQsR^axadCxaT#sjalK>;IKhWnH4JBENyUdDCC(f<2y8W?6~efh~o~)m&s+?yZ=rc4=@F&H#qA} z+Nr-|LlwiedYnmHy>uYoyRwcta}&Wsf79}}A&zs!7N4_kxWAd%7-?{_@0`KSMdWhc zz%Hx|d~qQZ+(@$%o(siXLRZbFEKv7G9>^M|7M`k4qTM^8Rwws0IFGUzx*W|O@VZ?L z&1@$oJ`=7oA00?yu3RuZ<$J3bC(c!+_&eRahAU;fo>H_W%;d^63Vht5^Kc^^FY+a1 zsuTT_T*Pq4coo<`9|>&?q@bw}_U7+O@(Cqwd&Y(8{eTM|kK#Z0hWvt9S=~O^F(cGf zW^ud8Bw}EjRw(0!=hR>D!Jkf4h4;T9+2~z)(%6Ltc2an5yRhL!z~nwRr$%C)iTir* z7O>?rEZk~SJ)d#!qG5S6r0-}0fYT?Mf2sX#5C1-J>;Drw*m3jLl+p}8f^p(MGe;#} z+9y|MNf_Zj7&dybHf?I5gCuir$}auL;pE8D-nD)k6(oDnf#K%ZhF`UTo8hw~R)3mC zw%n5SmRrwYR+zti%Twf(9LL+caTyn7;yt#wgMtqkBfCB_>sP zVs&BmR1ad_Ct;Su`+X4tSkZIw$Y=mq>W0o7HmYayIXZm{hDG8K0$z&;Lm4+Or1=cN zCjAVz&%t8!ryq}~Z+dP_<#B^5YR8QE@aou&F6GzkXvQUYivB0uZ?-C=@hQaNf zY@E1xqFO;Ffv-CSX6BRjxHrA_6UNfgpFE%Xjx+$z* zDbbE?@ndi^-w}K@r!slW@g1!HAZ^Mf;6;1NflAM|p<9mqL?+i8-hXf#mKy-EkrZ4G2oJ@=kYOeXC7L)|%>vu4ceEdsH(EzIv(!IP|km);t+> zev}oY8oWJD1Xu0KQK#|WB-Mi9?1fX|HPtThO#-*!RvE6d+BR$o6U&FfcZx4O9KAi} zX!VIqAvNlp0J4tVHrS3cm)n`Z z9;;osfKdKYqkdqTl{Ki0A046(0Cn_;!eTZck+rMW`N8qiEc}%tCfyB)ijk14L2_ex zLl4(mhtlZABV+NVbb*qA@i)_n?LbMim?_4W=au7zy#cNs30&`t}kmzubaY)Pb zsTYZM2uHYJ368or4Y%H(z?;s!oio5^<%)DtR-Vsf20Nlvc7j-S#^D7Ie?$9jr5Coz zus)Tq_l+0N&4yqjhC-Oit!+wuHEPTf#P?taHdYIN1UnFu>f--YfOYPGy)Li}@s)rQ zZQMu`e?lH3N*O~;4;A?|F#C67A=5{jdr{==T-BcmxnfeWJ<=}{NA^fIwzeDA20j7~ z)1Ju%j>wd)#D2YE<*Djt1*Bq9?`J|%j|<)07k>nNcu6sC#<$VA7jWIXsv7Dq)3bNG z_6BjIvP+l}S)H4IwTjkGeK7dL*yrGo$AM6_zJEXz07k$WX9h_ub5GMvTQRqo|9npS zaiu9g2x|aWg;+iG*3au+U&kX3@(!+NnOzY4$rv$$(cq zv{0)g$#!oc1HSfhQWi30E6(TjR$X{(zj*1{BLM?su=l&s4{iL`p(2dQ<&7IMzUA}J zEQVSGZc70EgT0bTN6h+xXNtM=TMZYUboWQo9q2<>$zvAo+wm!89h`STzF(pU8_!1M z$MnSAbcd)U0eS`jKn=xK)pf4@vDne<6^ma`Pf%qE>2EsVE9`CDU3pZ}!a4D-%?8~! zDWpG1N#N@#W};)(n)16(qh#{_g;3yn3oKzeET#*6bOoA*m}D4chH^A|;ywR`Ry+j6 z2eLdr2xqdcUun#;VdLvdBnl}!k7Bf;hYi6`4*ELZKVj`1U4$)7# z5C-{p6SUbjAYsHPdRKz|>l%_~{I2gjPA3^GQ%F(J|I+`{Bmd!hb_N zGQ;uSn`<;|Dt_$6(=~{Re!bONQ@D?j)vBY58dwci-Gm9!@_KSgqvgdXO^{JBey+$( z+yDV{h-F`o^bcj$ksGrISHqw3jJXlR=f;W`$sXgPDd|mkA@XaVFOfg&qr`E|^Q?QV zkRZ`HBz%Ld9ldH<2y0ZYekHk`$b^9JLh_fVc=xP9cpv}Sm5Zre85_0nzT2sT&gpT9 zf9ywS1Hb|tZmqHGtXfpr#(fHq1qSSf)f$F{D+8~74seM|cMbUDmf-a8NF*-=S<@#D z@mCd{Q{%qI24|icO6ifP9kyY>-OirA0pG43h%UNcr-HX|6`UuJy3lZvFhe8y1~^2= zVz(T!q3_mby@S4mqRq5P_9MShG{Mu2yDQR#`h(-{NNyg2%O7xLPswm{=%1s!fIlHty zW%;CQ`YDWbTfEQDguz=iA*Dz=b~by`eSsy>Mom1kqW~6r+3`u3~M_OU9Si za2d&^&Cz;G|=J{47vs4HG!5!4Q2XOQrXwC*ikj z5F4AXB?6K`^F-xq+jirYcUiz`6mL;8H$@+{L;{^+7StY;kf*Wq_LXE0kKl@%pObe( z=e3pm>~qnavvtf7@;AFxlqwUTQzqt~xj^2E8I7e>r&#iOa=s4@ZPQ?fAf1nJ;5941}Y_s~1 zV(aa`81(0ee#;&(jST_S139%CkR{ms=8kgXglbMazY&XfW@is_Z;3pezX~v_5>YB{ z$5E4}_wx?;RVFRZt-mSjX(*X+s82eO zZna(;RmHjPN8<*0Mq*0B%xWT>%=T9$UG%3did?6g$$GD?8bR4FaEC0`MN|4~ZcV=c z3ch7)Q*h>an2r@xErIgA&3N!oR*x;C0;Zv-zZeWoWP8ddk)D1E#>E%=MLDywgd(ly zi^4nm3R*KojUT|ZI_fbEg(obZs?QbY7*IqA=j2+(EelIYc2B+V1C6aPI8$*&HpBc^ zCEsp;5P$H2t5ICoWVlA!+26&VfrDn2X+_pQ1t&WmLAs?ROmOHD&<0<3d8k@M8y)Wu zR~wTZ>+PwaXa8Viamt>2pe0R)m)TxCM$Ez!iL9LV(dR`s#&r9t@QbNsm2H?B0e*DU z;ln^$u1L?p%-_neDhRi~E0l9B&u3^mjkU>`EBYsBX{#F(WZh;hKM47)k%Pm?}lfpN;`PVK5{k01Mk z6-3rY9|3`q0Ssq|53t5fII=%;Y_RWEG%I8Z#7L9|^ct3?|;sU6S>vb7h$#0 z>FMGo7}=*T7nn58beP3$ref=a)3MkGf)>S#h5J5hL0zQ6-xh&VZ=2~f7(|z8Z2dKR zNfm+iFMq{7b)uvs(9;8~Z>{cMrAtaK{ErdQ{|Jx%pFeojZhao}3&`VfP5O7BjCMgs z0)p{>sIucZhf8XukaGT;XZ3G|d;TB)qJKhC5a>+!A$V-IG#HU?x}MQ(wj{H{!t#H9 zZQ)kjhvO20oP|6p)7(S!=apmN_tETzrid3{nuJy!b+!HTrGV(FrF>U)gAkAPZ4Psf zHfEiE@p!(R5VktYNCXv+sd|WwtCl6VnD&h!+)HOTH_<_g`H0< zLA9nIrS^J_gwdC&-}!Hhj(j>2*jcmOjJ#~``@SCfrfVIfJ?&jNGZ7^!LfT56sT_-S z+j#7B&l)fU@AQ2iG5273Jak>#G|o~;{}|jZsW@~GVP~AJbQV1E1)~%snQ4IPf_yo} zi?=={s$>&?9#YmyeO;CvyZmsx{i5t>g`fR>NpB!Bl&skLe!^NabSNB65*D+Fn+;jN zE4Ch07`)WBViiha*46_-@A>knH{ly}2^DDOoL3Y=*rC7U$YJb&1ARKg!5AuRVA(TI7UyGB{&? z>@wb8&!76thOB?zG~dI(M?CqHGv`$%_jpSw$*L0!dF+0S*43Sdd$XQsr3R)o`F(4x z`HN@WX)K=>xUJY-%CimDuB0ual{1Q3;Jn|pz;RgnuFZ6;oY;s`cj}?tvDQW1*i|qw+xVEHdUE) zBQ0ucXyZc5H~1>eigji9`qs{c6U7`q1VJXMhav*q95~229yyJ^G;gi>Dj!_$fSA!( ztQDIfFIKx){krsHQGL-x&8M>_skrx)4kPF2V;(-|<;*CR8qd?C)DV^%DfSW8n{z6% z)+96mv4FjQV%|wKTvo8}L`z0uttrrpJ(L$MJ9^CQ;HJ>6D?M2MHb5Ty5Vzi;!iuPL z)w|&nPs~Gzk?xyaEyXAq#VqkZ(PBDl1RE>jd7^AVIBI6YU?v7~L_=3?^~YnY)Qq2p z9%Y!@xr?5I1MG}MY>Y9we%!GxP0Y9Sy{oYAvQ^>OAY$4aI?|8Vfvlhgo-Wilx*Eoh){iHw) zLoAR|4iML-&?f0J7l)f7I&-q(t%24#Vr8vqkAHtWfx1FqSV;6x)7`%4&|!QiI4)TY zFP92B+~kvhirJxnxE}K{Rwf~jz-0(rw7A({XCq`ihC&g zov16-wDswsXS#dANaQ{;r5}!fYB!MesgCvHC861d(2K`0qLzkz^+P(Hovx-jyM?nL z2aPi7c}+5j8{$f(LAm*Pb8~|nXV{#wME+__E$0!KfE>?#a|6eWdm-l5CHMe|c+Dp$C<4UO2Cn0!CX znAlhlCQ-qEvP=quhKq|EMCM>@4A2Sj`zP034V|6uQh?#1A;B4Bz(47Kf)~H?@bpB2 z`mfotE+KN*zrWT>36UZKe~VE*x1-9IZ$i33+BH%;CMk;7#J9*44`fDMI+FE zA_@>P25ro%sj0z|8+U~s;@Kv5KpzGB_n3_DOUSLAol$&Mk9t6vVCB>E^QwA!8;gsJ zpIHE15O@HGe?zZnWKN(gA_vY_6DU1B{p8eCVEp}?p^=f1mse+AUS2~3is+Xs ztOH^zROSY$xpxm;ckGW-o@+pxX6?!|11aLZuOTUzORwSUMkb4mt*xz%O=Wrc>D3iP zjPEcIgnve_);9Cv%N0!A382=Xn@TX&t7FJ_|Lxk?&=9DU5c9aU0RLMZm^gh$IZ3?> z3ky3tJEy0otE<|wt%0py#lZB2lK}zbf;5A!Fb;@L^!Gf+O$wtCk{sg$T z@bJJc<(dASmX>BeE@XJ|{LFcr{`mNd@!6Q3)l0`v9zP~3YJO=ckP*b7hl|1QgYf6J z=TLeE64bh?-wu-3rzk7uT*fyjrq&p3|2Y6(Q)$uUGp9aQ{J zUca;fLblf&lzsGXX2AM}$YBD%d%-Na^Sfz@Xzz`tyLeg*0d`=Z5EM(@_yOcQNZScXl$;~mJW<_7Xm{6d00P~)n0US5b5IROTU^Gyc*Z<}^KaYBxJ~=5L$Lk%b zk;g~^a@fqwnCMrtm5I^ogUChbg9x>5^WP)`ksUWV{&Y<7iShf9u90TrT>LO7bn+=WaeM;SGLTDRw2?hQu=rM71F*N=%0 zg}y=znPX_w!t|JcX=4!(U>y^rrs};`ar?$^{T5_Y&-2y~R8QeQ8$Vb;YcvT2e_LfW zH-##sIYtvgG#vlD0>b}*g3<+!e@TJ|pLtco_|gEf{t5#1f!t=$)X{r8img~cyYF5U z+A@~;^b?@*CoJ_j6Vx)$GkDi?N z=tjW$?_5yl{_S|Y&QLz9LsbXPH+=;XvG{L%-D3>Y)XtKZMzSlt_LVE}O>3ItEIUY} z5aM`UJ6DDFK0HOmUmQdJ{H0%ye^n&z=`IWB5k4EZ_Uxs$PfJ#yF-_}&8ONtX!3-^4 z*($~f&Ou&pd^vv_{m*=KKC3SE-g@Q*4KD~}wnKnEe>eHAKAJKT_1{vsY%9oYm(ckJ zKTMHa`@+-`#P|M%g5dm+9&8IL;M44w+X+8)eF=+!SBzG%hg!Rk_x+#zfSRfTW28IDjO zc6`*MDn8b57RH;LTzzMSHvxj57Xwj`k*RmcQ*2652Xt( zH8Upd>$z4@8U!&lX3$g>`?se50uYgcv4nosPK~lhg0h*!3hzIwK-UcW)wL|Jl$D;0 zit$yRYiZ+wUkS|cECAwm?};21?*DRm62no(KmY-;+2(SAjhjIze8u0Mp=7`bjE!@D z7^37Exc~kIuVr{~B}I5l!ReXcvJV^QagCYvwXCtG>>-hJtd+?UqB7DI++u8D5}%25eH5J7j?&3|x}+A1j3KV=;eh?uCDu)NyiGNXd_fuf^^ zMvqUk^V-njU_KR&JZKOzYh-yV;F3^(>?5~8j$~`4f`o#3CH4X_e8ND@n^P1xc_l6d z(gP=vOs>rl5SrF|r)nL{<>Go^u`Mj|$1#KTy)uxaKxA z*;@R>_ja!Ss}Kc${}eFhxA_^~HoBl@Vd~b{($$2gVveSrg^6=6rg3s|c|stp1K+^f z!p+Y(5A!&`HYdQ&+1A_|rFEV0t_{$bX;}Kh)OA4&|<) z$Tl?3Rc3wi+<=wty9e9Ql^L&)>Ah;}4`EfLa6bHk-JZFU+JBP}BoNU7ekrY#cLda|;U_ z0^D7#kfHo$DqjRZi=Ww`0l7ff?Dz&K^tAo;1V@DUNL*mGS(%A(LBD-+>T>2}5b3XV zHhl;BUy9mh>UKUq{bxp3Uc_v6FmgZiF>|sp&o3_VY@sB(=zE1|@*Sz`0on$l1hhR< z1Tut>SH&GSr?z)Mf~Rbmx5;^(Fg&>c9rl`S&IFnlAh10Fgjq)(;m@Uoy??Au^Zh zOMP@8yWLCq5VV`vw5_h|{~RVVPLjcjW>LJ;{F|n-_;WVDzdzrYcosSvs>Uj}Z{cPx zTidGxL@jGy`Eyq25 z3)rN{Ecd>(p{}tIQczY@c9QT}Y#*By?VR48n2em7n27$W)T{W=1#C5c>+sw0 z2uSYjo=?T0<%EDgX34}YJp=i1K~1TrmzojY)H>#B2;rY_k)>@o#_d&&2zP8zyQ;gm zj043*oe46*j&SC=1KmUCpZZ|P-^kSrdG{p27;I5Xrdb=@qrHRDTOg3!JBo3kq}%z2 z=SgvlYaJdMG|&C%T~3AwSo(BhBBmX~DndJXM<;V>DW%Vsg=>Q<=FtNjy`&$S;^=T` z2dnq!?du$8Q4pvZ2&5U-kM0?}clEo^nPIUO3rfewT_-C7UsPn+s2=b42!0F_ssZ4b zxn>TYbPtWirA5Y-X9)FPqPFhkrd4N_+7#EcrFG_H_M?K})+u534qJEXITCpp;=x0=ws6BWPGR8n zna$Vti)NC7t(mbw=_fazoMlc{IlRZVXme!Dubi;_e9RnD_z0cZ-S_d%&(}Q+SyIi^ zeG%b5a&XJ=N-F|m_LsI^-b>2A-t6RYxy8i9u*8^7z0YUgCaM@hDJjF42#Q^xXzWf( zTi-^adhj9@G*D$5LZ zmXIM|Vbwd6_Ydb}l~n_xw8PyEkz=Ym8>dsQ=xbzTrEK0G&4AmFVa%K;loQ!FB}c*5 z2iA&>=)nB?&|r6ZoJKEbdVkC;sc0&~_WHa)PVbV{#xm4nZO`P401R3N!y*-D>Mfs5 zjRwrn%cI>)C8pYA-!Xh6#vZXPdo znOYw%Ikw#EKB21eac9;i5@Uj)( z3tT#NS57jjAaKR+rvST!BrPv39yD%q*z< zdvjwj>22jcqn{is#zd;RIi#EzGRMz*q;^k7v#AIB=1!0u4zee{<@V!`B@CFAK6TL? zAh91Awo~3Qm_dZ$BvM8BMmM5W8Q4w#MpsPAFHL)dwRC!GCM(A;bCZ#psDy}iH6=DO zT4;vineTml$o>`$>QCluCSBI(JjZSk;Z9?Z#sUjqDN8He%SkRYFgwcNTx#R&#MHva z@Y~qp!NOPB+HQD@IAEei_h`)R6P6%5Kvq>>VH4otW9Ot91gTkD{&F;Pb2BtFba1e; za&RlG>8NOc@lliX)Oj*|+WupxV9)TpxVXZ_%ft(DM0!@Ca+lD>hevnJVcpc!==vl( zDHo9EYw2S9)49B*0R=yGb&WgJBNXH4P+h%;J@|_Sc^RLEURrJ-|L4oaGp;&gvWLd0 zF8ygdK54Qml!9G4!3ECw)!Dg)y{(m9WmTD_&DAA-7T!6|=>;}6o|a}d1U&r|{Ukg* zobxXPgjhPd>Pq>)F|Mvn{%&H!I_3sj_q()^M<;zd{`iO~Sr@%8$&>zlGeu->E|qdQ z-_{xnine`VP*%dl$Z8x>nc1ib2fTZ)lpQzz)~s8b)Mb!}j$qt-9uBP8RkBu$U_KXT=LF0&D|)?dMxWda{{0#p|1A$6Gu1E0f;z z;tD$}7b6$Dt~-5i5TdI<$>}JCJIS0%?x-1gu_sRl{~zV4>;Cf)O~4}waw`{b9|Zqb zHD~}6dga5lI3`ke=IcYD@x&8CPEMUBpN`M$xRSQ8q@tptq@t$srOEVy2jck@GXV~E z=}4NC3@#E9DiSI(ViLN*&$VqXRc2^)njESJUTca6N4l4W*pCeIH&0~dfcu4{{r$qh zL9w9y1F&jcBwlZEMO9Q)5VXM{wAhh#i%9Cpavw@kA-Sigdch|rbZ3a`Khb>N_@ThW z{RKH))t5H@W*WmFHOF^|yX9*`^NoE;61l`M5I*=;%2}z1a2yh3=;#Nv4yK+wVCeE2 zVWMw)kH&vOS+fF9SL?8bRL#W>Gg4Z%x@R<$;|vd&!`ye=4l&Qz=O4Q!`p?IJm`v*i zAbiDb$$qHIL970pCKI=%z(`j7d0X3s?eHa}tS{&Er9pn4^Be(6Uq#!8a*wZ?mVYpGb*vMG_E!-wKO?! zw@%{G175wqpE$o>*<6G^aYCMfUKmD-jA>}~R`^&R1?jgE3*>mXjvu<8Apb)&d!jNj zIyy2cMuO84w@Q{q7id*gwXe?sjN5$)SzNl-=-I+FsfC*}JB0Dh=!Xoh8)>VD54Qfz zV>!0;t@3Vu{%rp2D)#E-(~nE@#uuKfg#^c&4%L?R&idwNRo>K#T}M&vGb_RM^Xq=z zFhN@}D8xD-B_ueQ@f5nYf+}w<{3E=?ebb_%KVp6l;!D+H479L*cF%}z1i*`*mQW_> z&7B!7t-J_Pp*)_j+BX6}WEwL_f3WPvVFz>vbM%!O* zFg<$|F_~yD8Gvag&rsjg=4%f68;pdEG2@T~cj~F9xA6YB3%11K?+xth zC}=K`+t5=Vl$u)`S6dil)?4T4-33BpzzY+Ih4tA9daCEX0xWSLPA&a2<}A&6?1hXM zJBVCkX|corRs1*|lLj|jjy?z+o%@|2`*#W|ID|m0mhkN7?da^xVqR1PCyWdpmk5@W zj*<|RkPt8umC~A%bZmX4O$_DkSH1Umw#dFPIfikA=did+AhKMc+KwhNN|KA3fLgrP z%l|WQ*Zxz!;s6jkfk6@uPV9SJ*kNmHr!zQ(iajs8=a*Mqm{yl3M@?Dn1w{iL5y?yn zkQP*es^YTvy6Q4+u#y1gsgtl4dmH>#JE6X9<+?Fy$#81sPg$Q-$55f$!1m9@;#^G* zZg?tS4_lQVKWtUhn17ME^xegm*~hHAyd&wK2)Kz(7;AG!06#U>Y%#O4v9Pf-u`TRr zpcb!Epa1YWFq4kUr6gh5GDs1ez{|rmxt}BwGg$xp4k4tkRxlwlwF}S;WICUOk}D7h z5KB)H-Vmzx4GDos8gj-7La4EuwOva94$ZvwGfTGm>zm@yEY=59WWs{Ah2wf%R^%S#YWgoC@?D0@V>3?GOe8+P%&kQhzpSvRfQOIKDVTIIxi|@g`;8vS<32w{i&R5 z-<)R=+y-j7g5{tnD%_)326YV+R(r8Bp7-Y>L7#hG`C;fVh#srEusAHQtSm1mh7`Xo zxnd=9y}f(>PXX?&353?XTBFM`*NtmIn5=EVn6}Z4_8O-saO`IUXn!AqF%idpGd#=* z!!ElUFFM4w=4-fLW{h&&Wr{5&z>%hef-EJm6+W*yvVIe56i~H}qkrg=iu?dlcUpGc zJsSWjqN66QOC_R3qM`xs3xe9-`X? zQ3KeN85f<+)K-t&E#!tVZ#C&%^QHY4lh&vNXX$0caAG0Bwgb1-M1A}k}?~V`6!S^4ZUvLn1pu6 z9r!T1`m~*;h$*~B__ZMWM^ex5D=kj?VZCBHRH5?E2;^uq{aTTFVq&2h?^1nI0jKPr zJ$Iqw(!IW%CtOlhUe^n?yXleTF|R2HdlyqvQ%iR-v1EmHcY1DQd@;GvTuFSlA*0N-#WUUO97K-;Cbp2=4w9JRz=f@Nd+-unox}z z#-=JTv9k`1$mB)!Z3(mBL(HsaGAw%q17IWz?1$y~v^LoBOxQ8#p^u8pI094S1Uj0U zsamOc$5%G?_E-4XIA;VW)|NFF)Ujcl#Z*#~lC|b3l~)g~X!lvnJ$?3)gtTxpkt`ps zuv4|jdoX;h_jZOx{-J0JIFnVE&CmFeK0V0QIZ ze>iQ3&Fu9}lJz=mrG$t3^RPa7;k0u=;EnkFfbl=bpg=deAcY>nffsj!c-$JpsTLp= zJs~C4=plwT=v${Kq{RlTeV(*jq+0zsm!>BEoR)>Njmv0##=1L%wNR(K@mJBo@z%)7 z^ixtf*AOdLd65!*2`MFxN83$GQA%hGV zWuO@vf$u@-Fc){X-b!t1-zz5Cw~y=0Talmt>@F5mnGA#l40hzmpwGrePR#v5QzPAh zzTNC^))B&8K1M?=GcHXtD-YgQ`+NH?0~e{sB`YUAVrp6RIz&JKFDtBQs?O807&gi? z+~uN^Cc#NRZ8;o8F`~j#opoOL%$kNqaFXdejI0~<3Zm>~G2+m2@u!b0KUdH|4oFdP zb}pmG4Ldc#IVLUQ*&MBJ&K8dEhe~X;p2O1)oHI?8r=~tHvc;I8(c*Y5KK1P>Og9h6(*u3nIw^gl|J^d*wg>ehNmmu5Y1m* z+A17SrxTQecV&a3yl$IZpY3o<^PHOMu^}@niC0%w{;h;glDiC2Gx$S%Dt|0YgxGOk z--_-~dHFrEQxeCUjtvdX)Raq}X>s7qr+9I3zr!;pG%M-NUWSl{sp;>={Ls{ue`@IA z9KrI4(&dgx`!hRuYTYapUotbXVM&pL2a1u~q*8XU7!|AR=%#pj_%Jmw-SMI&TRENX zc}Q8^!Z93e%HS)P^+~wqnv!*g%k#`>)9oCR8LDVuyM)LrO#Nl6 zQ=Fo-$4a-g&Db3$xv-<3@Df=SUbkC=Dmxx|h2X?UA0eKjfvSp9SO&x~ZchL!O;wz= z35qztX?Ux=%&EcQ1_}cFmRj;RN_bZ13Tu1wE$Is>6BU1CtAQEbJg-i!eXsmD86gg4 zNl}&Xd(PMP`HzG{bwzdc{dl9THjv=e!C?kGr!>6?r>(~iQs(+G_!xG(6#EUIG^MS% zmhSo>pMV>Z-h!TZFf;z{vPr?$$UjQV`c6aMCd`MxD{jioEO#Km+WEY zW+GEFV7Bg$K#(mioj#Qwq4cFQZG+}*xZBGo?W%{bc*95N@zQY(AVNP&RPw%KC{rf> zHS~V8aS<|qH+g8!l{7Vvf3W85P+jo-{Sb3m`ePcFmbPHuQ~5VWfSw^>s_!uKw{E7Q zTWHR&tEn$8K^f{|+JeGDTDiUe1cFc5a#XKk+72kU{n$_ektx2s?z^e;kx~T4jvVA} zkEF;b=^1`Tgs}Aqo1j40mt=!SB&l)A6&}qty>7=lcWqmZtJg7N?*AK_nfLqWxe^#4 z5cMS}-+N{UzI?`$ZDA_lQzLgL46jUOan^oJGX&*#?s`x|QH<~bYz9Bz$vwt?}n*cM$ooz~_QOG3V&Y#COJS!3!nW{<3sQG8! z4=-itQprcneRZSY9k;Y=wKBcCyBot>p|tk;`ki#b-b*YjD<{kE(?V3r#c~V}LjRKB z5zE2)?d7HI)m@n-JglAzjI`yC0Qa~^3rv&3+`_5;v=|4Ej};tO%W{|!Nlum*X29nV}(u=?o4)sDu}I~ULn7p;d?-I zHw^}G)l9JYg0&zfXFuIJxs`C?I3$oMr1Ry%D1k1{Tv>s?Urk4JV%*?X$S4DD1 z?sqZYP!@Ur|} z7*~W=0vs7({^bBfJ5v%p76}ZE3>e@s>eot$YZJW7P9Xz-&4AZx@yz`^(p{%t7?0e; z;=)9>?jJ4`$A<^q0ja~?>>kDI&!RkK@U=W`+0lQkPOx4P|JONnSbz710-Xi^EP~il zCn3pYfBaRGitpDFW#;WrJ-e_L7N01&eQui8kp0XF3gK4GABCBYlaryBdVFzZXI|HZJhD0%TfC>M`*-RKUho5> z^P-3oj4#`y>GM_oxoL1e{fL^G7!}k66?H#xA2ebzMfvs6b8)Czw^0cLg)JhQgL|iX zh~^|oaj~U&R`20H6O{o6n8}MdEFd#g@UHRa``YX+%I4xvuh|sjidPMd_OZRm2&X#a zewPu-5lF3#k16M=hZ_0`feu9a=y7>@d2u-rF$RhJn^X1Meqv11+Geldt;AlkXSxK$ zd4ufzAF|$Y!~2LYP?xs*(#aak9(nC$#waB6$inOye&s%#w8=7uzttABu(Y&-1217{ zXdv&d!$J8_6O)Wc(Hwl1S()ILs4^whmG?~ccToVylr*D5gzh(5o)E0AJY&HjiHfVV zgr2a}Sn_kqM}|9SzX26AVYVxSRAxyU8mx7-jC{;2>zkXJTkDI9EL_v8OB=cwI&bG= zrffzb1EIZNsQvjU>bY3cN}6v*eiFXwfHDhB)y^$Bx_)SY=5Z=RGf&lcgaX;#0f}RO zT5y>5lc??sapDRx4Ux3ec=crp69>nZ)`Ra8~073GxWB)kiL<4cw1+*@X$u z4-)2Ydp6brIKY+tbwyZ|2;+O_;q3G4mz7axNk>Cf7kd$d+*24S7EytVAkuU|@-5)U zuR}dbYP5mv^!CrRmrI@+`G&b2M@+4-_0AV5fTacK0w2NtUxX%S7gmkV$+k0_zfuwo zK%t2W)9sDzhH%;jTEOx~&kSVO6|O;m!(=mN5ZJ;Xtd@E`({-xJal)Te-DT#sRPP5= zUilybDqIHb9E>cCJUxsH0`p5V>IMrsj_>|7cufAOqfHo94h^)ze49wwnTbK2lXd|Z zleNeyBidU&5c|JOy^U*Iy2|KlF56;biz!j?=`TM6>k$TwQ}QgQ)5pJ4r}~2X{{IpY zTuRR125gpL3ma6`0Jb zQqmOUISCxy(aYUdL$dvZ-%Pw-nCDlg4f}hqSt1q%1qi&=YbmNnq7q#&iUNw4yF7W% zX)^)7dH{^v;Mbvu%=?M-$@rC;1ssD6dTMDIH*7Q{BrKE{)}D44*et_i+iIHesY&XS z6S}f0D#WjHm#GSy5=tBYyxypdKA>e z)J$#NIJif(lW;9^hZJ40u`$3fyDB;8a!<0o=YoP7pqkNJVA5$Lw+>P?5Zy}&OC`_Y zLV66go#@|jnJ)fRp(xzgPy|VEO(tOC1PS7}B`(Ai>%FUyG1&y-%m7w9dNF zhq1F$D;COE%j19Dn~5;syOc^fwu>{yPbz#)E?ntBm&@DUbm^?<%BS3pi6=Yp#J0W8 zYy?>0^KAqFC34C9nT&~5Su3shPnJ~@epm-T72H#mmZ8F9QVjj+SZ^pG&YO0Qq{;|o z);1m#qqJC_?^H2QNy&TIJhuLnr36<-jZk#Rac~ocx47xv+-(4tbgu{Qkts3kj>%S-Z3-TTk6T?=j&nm&%P;08d?|uQLrFYq+S$AM_rtCHI$`X(jacD zSSY#ecU49B?vDL(qhZS1yrY0ShOU@Vu=l`iaFK*hXjCmBGOq7206$EQ7Q>1Nh4K-< zY2)U|%gHZmdk}tMe317bp{c{+2tGazn)n-R_j)%o3yr0B9aVW($7@%0fPuESs+ak3 z-O5U|N#xZ`@e;qitgrX-EZ!zS=fC8u0qA=aAD_hJiqCZ@^%dSZyG=7$7~mLEHRYc@ z+-z}zxN{ulNR4RwTQiBzvy1=B;O^4h3|SfKM@}L6G^rqXs61KMWLX3+%~Z!7g%RNME~Qic zEz1}U#fX>I5(lx=Z8gAeSn*(yv_j zk+Po~?NSm_(titgKRy|xw_E;xpZ?Ze4WsnVMl5;csJ>93gY%zbeZ(D@Xqyn{(;a1G z!d*Bb^u#7Mrl$I?A&K$`8wQdpo^%TSxM)I32FYD%fO`@g6%VeoXbcWqN91fd>Y)J7 z%g-}Z+GM(3GT%8R>^kLy*;xjfd5cs!KAmsRT+88vK!^M$D+)tEjN}ewJ?w^dOd>0h zxR^~~xw*Sz;WPJw%n=iQet$@L04{Mx*n98vt?^H}3tYn=vT8K3ia1i)1pl50w@feMICPuZ8yY8P24VL$!aTLBowS`nG$BMRNRm6%?iujRsAM6_1+3?`y-C> z=8GNZA3<7CmCg0#s(LMTwIpL^6dH5gKS|_vS2E!R-s;(TwBsCfv(QqITzZAKCYPoZ z#>H?5LREC826%VTLHLlkNHQHiQIH{f@IoStuVOx6e=hR-K_Yx)rt|@Dc@T7;Uh7s+1gg-q9>Y`(B)*5#4*$%vmZw9;VIW=9=WN`UZ_C9~c2 z^V1T=NQ#;qr(^jr6Dtmk-uFE|;v0?U%|9i-y<@W>L0)=s4&k}u2{y1m)AGB3#hjcx z`EaX^Z(HO8h?e-LiU;EgOpd1Jd3jWK9+lr4%M*R^UUmunt2^?lE$?Zc>QOxJ}HRLceZ*NnV@`8i387(|sY3QHKKc8P5u|1TP zbcEFDsJQ7PE2d;h)IB>kb=iLJ4pER&P*4;QlH|_+V)Ick&~xHjkB*I8d$#d1V!*6j z5?|6`Sa;nwI%0bA(BkS?-ALXqqL~!CHlm~c*h{`TwXX2O$3HmOXX?1GcQ*01buX;i ziE8J8L4x8Udk;`XHa6x(ejnJ4k!b24Ks6yfP(2U4HODw)@4SL`t6L#+a7R-QTS;%T znfr0;7TT6XMy&IDcn1kgJHy}v%F8n=HaI>Nl9iH*46LmDXyAM^xIEm8hDQsZ=))Q+ z+BSNowIFP z6)d;CF$)F8cScCyE1d8fASS*2I=lM%>MZVCUmTB11^kVl^CBR|%`{PU1|8C{RURHX z8d~(I2E_xrF?0WPUwHS>_xzmRb~~HYB@(ck~JFtG7K)vb7*zVqrT~CX1cfUK=%P9)v1^(7^7?zNdk)t{Pytycq z@!bEFgclnU1i+J_c1~v?o+THg1=jHM|DQm}>7KyF)!Cx#45%#!mhf?c_UZer{G$QdUw{a{3Z<$h~tLYjdr!4%Zj8ERnfw zAnk0Ov`RZ_@25vSBbTLT?#52`8QtFx%=FkcD3xe9IT{B1UEDl#v--b(-&W@qd%A&} zu-wUvKY+p2>>(2i_X`b%9ha6cAm^ATCLK1nn3@)vo29TKE zMz|SK-XV^m0Z!53>*N#n9K@$jitRmyq)L?ym2C^L&fh?yjyO7{E2Z6qj+& zN(_K+9jX1}dc|D=kz7*D{qy#_;Rp49ZqgGeq7TH{*qH8;n}pfo+n=CT3pWA3>Fe4c z4M#O^x&}fi-EXvXpt?CaxOKe>%8!EH-S6CQ>!07vt7sPZ*tk|>(h5ajpanRhjUs!aIm~_C(VczMRqoOIm%f!c`k)@S}iUOkn zAM2qXuh!AZiIBg02l9nLhWKb~X+RU= zn6rqv+G~d^SJFlkU%`Qxea@hS1gVKhiu^>hD~EFtX=fCy$guM2-TRGyokAVxxdf?$ z69C@lKa4LnBlSDHA^Uq10qXlXUY=ohYiny`=T3^L5T}oALrx8tfD0Hr=K0bVsAlaA zT4-;i9D_g5G~ux>;y869EH>1Jtbse+-s)}07EF*K-ZP21I{J>}0FZ~(!P&3C>e8?=9uj{b8};j*uXwejZ2MLh+5$1{kr7iPz8z4rB$`MqAT z)kRRoaGd>mg-5t2ti=GN@`DfR5BAqu&8NTb7NG0npr$L;8SNPGs6Z>IRO|aeMCc;Y zBm2R!?Hc3*Y-aMz2PLWl+4;Po_rnYt=d`zGVn}>vNuM{eJ01q+Rjhy87w64wkJ{kD zV}L;x_i8i@k>7)jgenZle?cBMv|Uu6?q^fGV^l zkiPHyz;!8rBF!RMqp!MFjUR{|_!nGx9*yy-HxR8bDI(l-rdsQXAdR<;942EMxY%(> zP#-H%F>|qu5JhFRpZ<_~ub-_`D{`|F`{Px~!VFJ9OYOI^C=hB%C_TmrfF63hc*wwO zYqpXEVF_^Gqncb0O_yzb%!s(x`L!W|$hLV_S!&5_h$usr`t4wW%Kg9t*FbS@4H}-l z!_nV|Pt5LPFxKt2P!VXjMYD6|W#tJT#+fr?>E1Mbq|bLkR9E(c^xx)&>WK?lwfjCTD1SG zwSUx*1mtI1;7&o(YaIx;dkWHP1L)dE1-whiZ+gAP!0kFPbJn%$p-Bu5q;9lS}FdncmlupofG{`Gz;e+73 zU&MzxJ>-!1^$P?tKa9V0}7R2wMR;%yY!r)~spZf-vw6cpe4kR*HD|2tYo0S?^b zI0x8a>Z^G4*NE#j7I(NpvVG@ccgc z95WSQ{7ml&w_^Z?`~&if+ArV8ZsygT6w$`o%L|t;lbG-YLi&oKZhS z#J|Z}-|}TwTvGCXsbf+9pVYDcNM__<@q+(YVnK4y#Qy)a%s>?d{3C}UvQveD{x^n= zGUESo&&UAEd6{GBiJ0nhk!@@IXe#rwcZCJxy;}T`-!AY~z4qY~PgZ1Zh08u4 zKeTA+UbfN*=8M`Iu8Zx)C^n~i;zYj}o#?;mFMaovx{*^=Oz2=ZY^RGXO>G66XtM9t zbAB*Qba&xB*AP|pT$77)`txpnuh7uhEpFxAl};yo!h>{Fl*o1)U6*5XW_^8ykMX7E z7X6z+x0A8GmelK-Wna`vB^8z`_imis-FwZ-d5#*4xp&F8t`BU9SG)6t&YcI(BSBXF z5o88j7VWD8$m#515cP=LnqFnxDe8)e886Ey16elxPp7`g_8I^cp3QP-Cdi0meyhIZ zT&%923jhRylm&k3Dma~c`|l_G<+xx*Qq%x5_WY)0sCg(t1^$zY#XR;&?5SGc8}YRg z_Y(QPrTPl_?rqDpA9;kK5KXlwhE6!aVUP3-*bBOAWQlE>x{;l8TFXEqxVXLB(h!i^ z4KFtp<rG)U((F145&n zSN^#EQyO5NV)oYFv8s)I)~Da=Q*MQm-tI|}%Xa@DyuJKjKwV+Fe#+kG!d8 zV^+%vQWmsXxBVJExwv?l-G}9jL;H;qW?j%&>cuH9vpliN*3Hhw%(${Rv&+IH7}gKa z#lym~J+s5o#TDlX{6~nid`Tu_6jMv}H&DFOf1r>`)2?>qEbBfZ%#M-}9%P;8-*7t( zN`hp-_&!`=P+;Utv`Mspn+=TR?;@)qJ9rtI9C#;2s)Qt@EZqk9 ztV;gnUDiGjOC*8yDttGc?_>iG&0`NGvDsg&5`p!`wi5?9ElttWd0CiK1)CrTK_K;Lh+ zQNr!j@7`|!_BT24d-tlPx^6>K1pE?UV|ySv7(bTNh~FnAD~xA$dffDAc@c~8$6r$f(l)Zg(*lE9&ziTP z6xZ{?LIYvb2KVU(VXv#B8_;t>2soE=WoEuiU}05Em?IK(Y#8Sfop*&_?Bb*n3RrF0 zI6gU$htxjypPjFyQWCJ!;7rpM;MZV%pM9CsGOv}vz;MD~(dL%=0o@VDadkeabEC+( zEU--JU*TxF<7@(-7omJ(KNH!s13m->S-F2hezb%U?Yw2_}QkZ{X#}Yc0yJro-7R;3I)or8RzOmvMJv`@r&l;LRHE3cPi(` zB3=D3-{~sP8^c?wlQNUex@QKW>ykcV4)_xFwaxhKuHZ&uP3@?VG|^~?fZWRvi7aTWamoTzPgL^z8+|9NCs(w|Z-|QG@SNU10mZBz>r4q8Da02$CD?TqdGV@|5*kUgFzo}6n{a!qr;j$x_R(^+pE9% z)FjK!`%#JQAJ{}Mu&v$tLxxEsgBxjs802Mdm8IT6PbYk(j7X;AYMm=A?^@SIRcpM13PAW~e6( zMgc!y`U}%W58$$PhwH?qqzx?VXTwufu1E349FZH!wevi<2&HugsalB!Pt3=ahb_;$f&MdDfBF+cM+aQJPUfG3 z)a@-806JT8B?Rc`=vZQO75&6NUNgdc0i6dKGZ)xrq3KeL`NjpQTUkxDPXCCVjK?D< z{0-~&=>y*2W^A0>Rn+a)da?|LLvL)Q^OYipm^k+?o|dC7xlY;c-G-oj-|ZzD6r;|? zDEigd0m>BKm-c*W%?k?~q0pb$L+(!qgKA2ClvIyUGn7axwhs|DiS^ceyU_NW}^wE3ixIcrs})3GQ%{r2DoctNt!az zMm;uvTaOr61@tOXs5NP+om}TACD6xe3Jm6eq%2|(Xstym9KoFE#} z|6%PNza#&iXyKVm>`d%rV%xTD+qN@tCbsR4oe4U&ZA@(2x&8e;Z=Tn8-G89h>T^zg zs`jp3yC4bp7qiGz2(K;;LJkR`JZ}>f9ozUGx*vP8O^}$nYyk|9qGwDC{!K3ku1iltZ`@R{^w$l7{bA7Tyc`)@wQt4m*7Ef=1Mj`yuzP zunND_vd=?DyMg$JT2`DKa1c}9KWO~tk$rKRXK0iH|F}lYGSwb6XZWX9MZdkA!$)DX z_ZB9~+}!Sy>d48rb9N%B?3=6Cd8oo7B$$~hw>-3GWIKtaCF~&gDkbHwet*`A2~6eC zKu{wMo#ORoW#MJ>`T*h|Apt(#lxPvR>JReYwl_&YRjn_DEjx_w{G)PqMnJ0mu66JJ zuug#B<;wMQBHm&kJ`kzzV|?rFSdws!CWc}Ak*nyZ_jJ^vu> z<-()wbkvcSN8PGas0g^AyujQ_$%iH_V!QfaOP2b(J$^iv17?%4rt&WP=M{!f;aMsq zq=agmA8bCr0|A$mv79WMm1QvG|4s}ObYc@%5%Tw$RPqBRP0=4ACeveAtP~a)<=BuY;C%8VqQ*G=Z zj2}M~Dk4X9p+_OTG|UXTLL*>N(Sh{%2+i$h2gQ#H6qXVN#9u@T;@(D9tANBb!l}U; zGk$rNQVrwMl7hkWq|7jFX{A|qvccZni{~}JT6cpPmSzP-TdWhJ!Tx9UQU>{ zp!SKg^9Rw|mk?l@XPZ?3h~Sx!U$yqIKt9upZ5E+Uop^{zzsfJe`U6+sFpUd=d3)C5 zFYiP7%wb{W`0R5xoVCOiwDy?C;_QaBY<}`_*2_-pum1&I=p=byQWPoz8@k#e!Uszw zE(2bT+=Dx7O0t@JT)%n^{NF_kQ{eBrL%G|m{igGwE&6<(nQcQGF)J;bs}){wxyiU? zjWmsA_Bh%q1|b_hKDrb#GdsV%o(l-e@`8F=k`Fpf9x|@#hH^}PwU_T85%r@x+J0J! zMyy=_TOT7EP%%v<;gcSH%R<`OTV329q?GPou@v#qk<$`e-`;rm=q1f|7Y`yL&FJV4 zG5CAOc2kJ%>Skr#a)BJliHRzS^8#^~@P^i5(yyCGimL3)F-BuaN8bp3vhEzqmhkR63S8 z^oVKjU>x;nm06>qo1bu4Sb7L7_Ob))skBFe;K%hxfaEsE$m{Whqn?_Vp2^$DS1n<8 zj(sjbVN^FvJ0zK^#jFE1}DN=j8VwOWJj+~nlsSaM?Gow*X3#Kc5XQ`5P*IfXp_!J7ZzSHLxX zy%eY!SxG}lDG3s#hlUQ0f~MjsH4LhF*w{c42P1Ryp`M<6004`S@XHNuIa5NqmiOAt z!woXa$=&&;H90+_1?tE~%x0l-t9?I-l=Mwa(h+^`W?0 zy1|+Hq(hLKzc)E~KX#x{mh%th!hrES-y zbUw>YGR~x;z3z{NRHcw!DLw@1W_06mygn{F+Ho8;iMr9ELI0sqij0w&`RAX!fB->D zOUmc=mKMk=aPx&CD{JdMO&%7O9}ObpnK8uOQS4!{8ZijDynt>gkmfl$8My zSTYi!5~W53&kZ-5_kCBny!d&zc7XCK8%x}+Ynj%(##BWd;!#oZUl!jHmTS3a3H z;C>_B6^MW{v!BOFBth1}eX_Row{bJ$ZJhtKm|HvL;o)B6mN--oM4t~W7>;w=#x+2S zB?wk$|7>9X&sAv9Jh>+@@VkV>aDO<`+v_V>zaWg`;Y0=tFE4MlrKp&g!$#}uzkf&= z-|x=P&#$kq1jjhNq96mR3fi?l1BBE^n_cY{~^ffpid#2)X2A*88@AEnCtbTP^1rN}CEh<1Ic zzQMFmUDud}MCx^|&#xL<+oCpy2TAWdUO5cyZbEr7dX{5$MzG50XO*Mf#DM`8QoXyL z$w3%OFDxsGU#YhdU?y7fRuE#%`x-xgf%)F|`5&Ykh-cI3jJVIFEu=ES(Pd|SsW`5qF!`%)Pu%4dJOVv76RaH|{ zQ&CYXx<%auvk5BcB7FlzUTx?qAq7wVn`+{Sz9xQm`}MQ2OR0~sxi@0xTwUd%qf@D+ zkC(YqqY<&Gsj;zJQcZ(0^CTB)W)NZ!FE1|;p$Bg0{ctLk3^vBaT$F?RRYlx0Zsg%O z}>+Tk5X?76&pVX1H7uQ-*J)HLIfy%^NiG?19w-eI_7u(vxG2bh@4EiDXH41q0q z);4xk)$|Nhbd;2ov~+go4#!yb47GqM2I>miDm*=`&=_V(kG|$l%lKw?YD+=N;6vzCMC!Zpilv~DkdvC%wC}&4O}xwN>uYlx z{Jg<@Wn6!`mp5nEwzhH?GOEicCy?fPWYRp_xK^#&@Pbt;Ud1f}*zWqtK8-h|!EP9Q)&ajM_%3B+`JCe+#E%%1=nhJ@&=u$;hi-Rmi^`fc?84} zUmn-Pjxy#cw9hx(NNj}X2jU_D54bovS2VTKGt$xTNiPppa@uSAN5}fczzp~1>Kdj_ zYP70trFe|1$iJP|2kO<=)t~03HguYh{3;q6==)XBOOTGa6uz}R()@Nrw$jrQz(rd% zXYP&!^=e+QGZxgCX>AO46m%6Ua?H}_5Vgmqh7JKwK$b$kG~GSlW(9qPgn(OFn6#bL zweVPG^}P??v^%wj4A9HAl^XJGdFa9W?$-hog4bJnR9zpBnW-@;Q7=!ON!n=y)ZnEoc#sfAhulKuMaU6;r+8Z5oVuP`5scKiJtqlEolRTHzFpJoC% zer<(imG6BoB;t_n3et7m^#*)eZbPFBLsMIyA2w!mZWTE^9;m2SYn?7fk9x@yz~S8D z1zM4r)B6z}E+H>wl$Q8{fo_5%6`#;3>(+uiL4I>I2m@3}0qx2nE^=QR~X$ikJn39AiV z4X<+aE^=B!yXA<9zBH_V1c{MaQ4CjHthAy_z9VZ%b5(UUn_9_=l5KE8UV0R zrJKv@(Fx~cJ5o8>`R}+`-Sac5E5_bk=t8|l+tLN;E&_XnldGbYTMO8U3p8- zki?=)PzrChzOG4~*koAZVzt_lys)^4?ja=&G|Y)sc4p;Kcd_>iQiAiuR?f_}ct8y1 z>9WZ1P~#pNRxS%q3&(%{r$^rt*jmW^(D1~u)8Iz&)P}S|V#d0{&_1qw=e6B-i}aWC;NCB1bYsuFxh54pIObs20G82ly&PsJ#Gr2k4R z6BhHp_xE>@ZD0CWU|^u-!!tJ&5`pjABOL%TBq=NF4Gw01o14DIr4!|XS`t@%d1)t< zW;Ms*00R377E94nTuRw_ga(VRs$Y8h?$p!F-5SP^qy!+TC6DOkw|rJU_;eAvig+=b z)VZSaox+Ik;>zKe1~vlA1(1^{AWBtIX5{<;WJiGb5z#w%_AygyPkj=|oz3g!@#!0& zc6&eGcT*p`f$J_Cq8gNWs&I$8qY_khcGJOJ@dTB9Z+aVo={oA!>KA_W&KxdsBKtpzOPhMG6Mqx$r$}*&Q{z>$NQ|VpO(Fnlhi>gIJ%b?IyQDnh$n;=6^uRhzl{Q;^+Z0tL87zBZ_*$-~o8 zT6#E)T7dAtmz{lSy!PoPlb#bRCx=j4Dnutng)p5Ap24YhKNwVKw$iqbCQGnrLdICm zEfkZaJ~kst#x0(arL(#)M#(Rf6{qyaVCS$S5GgL74)O0|a;nBZUjp)8NuTSP&kyj{ zXUgQsuw}_{(RQ2a*o% z&ghPT@61#&Dh@maOqRRFWz=NfllrUY3e+f@S%m{*G&hz8iFkE`GlZ4b$eX^I+}S#w zddWBVNsC*+9Uf|%vrM|SLSP-(cUMsPdCBX9M(YpM5@FbWI}HzW*z5+7j!X|DJ&wu< z$w)WZM9myTQ6mKvcToqrc(~TWI>*~|dB@{rIcda(3hEws8bcgfZ_ZVR$oMW4-FT2(Z&k{2}l z)JcEnf{Z|HfpSzJ9;x;!l1trxy}W@ zxVpNYo}C5eFz5q8-Yg(Mp{>~y`}d-`S{gnRFLJowoY-}DW@{eZ&it~v*4nacQm9pB zTIe4yiL!QxjQlKZ6F!Z7?P;!!)9g4F4voYxz}clT6E{MFcc;`yY0lm6wbJKmTzm`q zdcMGYeuf#ACgHP+zVd^&6t!>#>|Nl0sRFD%F~OL*S6ZW zy1JTAmzUv9|IR<%)aAU2l|Lc#;G_wnZYiKL=NAXtTj&vbC-Ob-S;8;Ww&9xm5C|yt^j&*iWeXSknwE>xX%8)e^LiJ(Pg4!f z&hs;xjo+uXr%>JiCXX#*O(z9y$x(fSOqZZvVQ-z;$1_~{R6 z+@s_2g&FACF?1pzG(NTB`jeBHc^BjZ`?L4%Xc`F~{+m=(WF*L`W2@bbM*Vf>e4|Z8 zOpJ_+%gfFVA^m838^q3SA00v24%u2%Re#3vHX_&73H#c;qDktLmr~?%YBla$Nfh{V z15-AR9;@>+NzsYf`4RhjkSOL7txbwK%f%4n)C5ce!<=q1eWUxpr2o!^@tX%0;XkCP zx&8e~06n9GkKDkI`A$D76P1>(6?3mGGq!+3uJZbgHcEP{b?xwSY5j^Ia$aTZ#Ira$xcOBNKY4{}WojV#@mqfb!RQYdS4R$5 zB$Xdp`BiqBD5Z23gupvviYITyl^&Q3(j> z$;rdi1kkL9T|f^5bYGAQFUvT>ugc7KGwyKB?A zy#Zu1Cje?1n4G($clm8OpV&Muge`ermxKHR{Z>rab>`SC%Z^urMoH)t!+ez)cb}-# z9+OAdDpT6BLPHqe+!w*bT-Bk|xy|Hz8%SArDDaC1xI>=6jj}cYj6Sk8^NU@zP^*mu z!QpjUO0dGOe97uIJZ+uuzyX=}Ag zhAqU#uDVn!ta5o#u>)LWrH%K~Yyz?e{tQ(0l(YUQn;DrmopT<^N2wfWnBO0#O|Vou z1Ys=dH-Z!29qx?v9$0ln2(SfO>4n7$E__J{Q+r-;wdcYWO%q|u_pbYMMX)z7qm6k+ z#hPtVWj5LF(_5S@voPfrgT<1jD}w9x^Vh~6o8{@MM5wRb&!&_+Scd(SSegZK0A{Y@Btun z+L!k}Xl8dE`ZrHzO7x4f*sRvX;R-NKD~*Vj3d+yqv>|bcK?b*yng^01>UF_bWKgF8 zvDr19ot?3z@KBLzk;7`UFL;EAv4Ci+`)}a4nH%qSRi|%C_sr@?sN)k&$ZXy#(J&MZ8%30zHA%5hb!mTW!Bqj9M|ya9X+Nd1eCDkk;H9gFMks+W zXfXV&6Jj@GiHdF+JLs!8TJn}|x#YN`=+!3q)X2F{cD?GVhC0zQ*D6eD2X+ou_i0&T z;dDEFRZ+6I+fljg@p$p!>I-#d>ZazGQjQP0T;Aj`L3iX=HXJpq!Jr%>*)Xxx|8aKG z3J+@+kf~Era_PJ$I?}-3h`;O84!ZpIwc0Z<7;)lH*liLd>&U~*SQoJP((0LW#aF8r zp1R~?py#$^ZZ6DVY`D+Ncd5-a(-NPJVq5jgV}haq>%%>LG36PqK9jbO))EdY11m#I zQ!}Mno@^05hQ8EO!iF)pI+#pWRyJCemzEat^3q-_14Qj3O2itBUwNXrjS2>aW+cg6 zudFv6K15{10#vefZwpHkNcIf8nsNX8%=eO~^nl2y$Vk}yAW&TExQ(Ru#f?5DKO$;vL zLoa#Zs^fY|S)3%%{80z8@?&3G)=+=wQwp}bIUobn7L*m%Avb;3tjq`0Rh1StxOoCh zT$`G^x;lLfVO_#cAXCdC2`Q|1;0W3PDNqk|NbqjSY5QhJ0S|DIaN`x!)ay{fSq zL#}IWg?5GnDZ%XR?I*Z+pLKCbNRS5`EvAhLvU}9Uo{z9~w7vbu=GFS2-PI}Z2)+=_ zBaIyhG?ZK4-^E6USusH%-p902hUlB-+}4)9u5NZ(T3Qt3yOOr{+Wh?8>IVb#7jM2- zSqINL&KVB{MwfT)%U4LsXz$ixW>{B7`SkQRP{Y#K;s07m`N_AWGpv)#+x~lO^8rx3 zh{DRgbcvarlr{HtNV0g=+?f*h
    !zxKJoYRS5thG4Vnk#SdyY@;+QEjKi`^-oX7 z-{5&23U(ml(Z4BP);s>ALA`%AH(G2TUn`A7X9yy0#7{K>p4p1rO|Ms8(>?!;Jnf!e z<|#aC{z=tfr@!jZ(=m7qiA(6i-cMmo4}R`LgR7CI=m{LS?A-75CA!3U9nv? zPLDT!ozbY30dzLe&F{C*P-ZHZVK*-L62?Yjz+-2P|sVRvQ& z<3FUQ<3UhrYAP%uB_qaw`*V05d%su^J>W4|~ zw*GJZB%)F2Arfn3)yDUK0@LmMynLEkx{CUXoY%EpG@c*UouLVwBrr)bwq{opX-lue z-eYigG-vA)+eU}eb&MKzCH5iXEnk|Q43Bbu8b6j}Vy`6ZL<&|u2zmRveh{CD731;m zqy|4u4O>&Iz}o1v4}ZG)24}?lOG-L_4o`{Ok|rF+_;irGkX70(JJ?peX2^WMn{JS& zlW$>NU}tSXn6CCCbSdoy`xW>*4m4O8VO(X(3U6Gq(-z7I;WYXg=1t4`R?e%+fToeM z5!+rxQ|U_2T=p_dWGxKwXTTBDwaqeb$VkKW(4@{nn2#7`y$hhsGosRLU%q=DxR`Nf3 zAW&JrxXPdS@kIm!`?QarX9XRbm=Zr=10Rl5_{`@yAyOrZw(%|u%l|GsM%Vy7`NGdX z<$D|e{D^7#x;V)IDSi)HsWdgsYS9(GUZ|{u9BP6SA_L2HWasA$pwq8Fi!{Cn&OqRN z)Mft9h^DyTYkfq)-@z@Q@czb|m;Dg=a9Wq2>(giD?$XZJT zC`gU&^ABrH5Bc_*mEtZ#27%=SAAcpcky-a`D+h!|4+%6@pQOMvXtbk5t{_AOrcYlR zsixP!?v)u-ttqHBrKZC>4JR~%oq1_vB9uB-o{A(9YO#ui`|m1eu5TE{F4D26VKERu6mmPd2(6cuaAy4=~daklGaH)Ohb2h`x(#g2It&W<9 ztiEw0Wq?Z2J0AF9aJmj}=u8iP;s;;`W_}bf32GznKSsTNr?f{V@d6;ySVpkMRmAXmoK{QR7= zv-I0`3P&!QE@37PZ6(M?-~{{I!*apuWlj57`)luk7f~Y%%VslM34&fq&Rz`q;(-_h z7nhdSNd^Rj7)Yk+q*VaRY`gE7>}^5VI@Y}{ne$B`5TW-qY2tgNJ@q}k87u&t!J z0$7(%#Zv@bla!JQcRJBx6h1xsQh$2;9!c zsvtilN`@)L-B^_>%; zmc5x<$3P=92jNLo(i#wn$H9V7CSff1RraY#n1f?w1F$(ev%$r;0n|`e(vMV6gMGk0 zCS_?Y>GFcb_;dZF6^SX!UB4jX8ZbG2^2a$f$ZRz)G@k%Qy+u;z)=e-8O=nyNiUImK zrBmXg2cFhCGglK@hF)6&16vYiUn|Du*50$*C!R7KzYfjRno?qg_v(a*!nl1h;qG?i zeeXV-KVVSJeSHz)dVpNdoEPU-)X&I_UI+M_sK@lUm(tGmI=PZdq- zhNZUqtXb1k@`RBGVjD0b6;>XLxR#g{!qMjii%av2F){rZ8KVTy9UI_kX=$fh+5)Jm zLDBIooMB^@3w!VZ;)hM}Z=Vqf((9`mB`}0wYyKSBZ&MVnIp`!MeT~11o$eo%*ot(d zN`A<=MR+aIW}Y7}JF!U3oB^*DAVlOik}YmmVA1>qC6jKnO*BpH^%9Gr?>=*UZm6)2 zXJ+mykKZ`hczQ+Lv>du&%8>mjP%9_o=Xu>jw-WM4D6v|*9 zpNP>Pzdmv}ykB&r?9Xwci&?q5eZ~7)I(?V!a8ei3+#KmHH-p8YW4K>Z$7pD)aHJcQ z)s+g!%_Y#3n;sdO>YW@Moe&QVZuC1#HMoW;pYZ)fjaeXMc|7LkA#^`w$k{|!eftJi z=d;%1?B~=6p+!s|E#nF=>*~%?6`2~2sZn5l1$2Q=9$;kjL1r7foeuizyJu+0TG zuk#ah-=sCfes0FQqPe2^JY5nQ?ecs!SZ((cEESX#2YFKHu^p{{zpPD)K|k;+J~=@E zJvcuR1qP!rloiY$%$?KUY&v}&G{dr!B|!+9hZjEA!> z7yCJ?E>TLr4~otj{tmUF?*2 zo3^y1X1n-gEWL2GL!n(Ux+%WCS*qKix+nB{zQN}7NRLSE{l4hH#)QKmaP`M(#qE1| z%S9hqNkK`tNk*=S=%KB?7Sh6u%CT{|vEebER(PjanI~XnN;)q*Ffb(1^2nW&yu58d ze&{f8l|1z!X!vBvH!|9uK>s1#{L0JusuU1;JqpBii^+Lmm-jwS4JcTC=!8-}E*T8( zrC=>Nm=-@YByTF3iT|qJ%T$iUEWBM4$m^sNCOJ{4!Rx(eg3m+ST;%x6-D|jlXodr! zW!MK1^M`)#q4fALvXqqtl?@Ta+nWS5D&UFl?Ja}=`8AY}#KHVwh79xW<-FuCA%&0TLlHyZ<#WR~4;tSf0N0nW?gyfzp_p zmL1)9a}5U$Pd_#r7DR0ogS_a4q0E4&1}IVR(EHBKsSYN_pZKo{Ym49d@m)a;|DT@ElHnp z(&=H4wig|Dypl3pxWNB4LP>6LZE#R~E*36Sq=o`L_rSl_4L z?o_wo3>x3sF4~gJ!hd6l{VJkIzW$RIqN}(>UufO>=of%407G$FSKm%$iSfe@TO6&3 zvifVj1AQZN0m%ALe+ z$axiA*u!&RMT!bfObia{_ltpxN%zX^Bxf#hC}#POsbOOdl1m{y+LT#Qx5QY!*+Xuj zO2q`{kvi_kClWGT67bvjoWx5czdZ(TlM<)7)H#E?%p^%=t2agYf5+z!4aiFSu^D(@ zMq#+7_@k}mt@sqG$qtE*a#RdFM&+lI4alpiT3T)sQ(-!=Y88x}KRPYayr7-H_4rDD zT%kCu2MT`(%T?~5Zy#?LiV?{-J4C4lc=&rr*ceyA;Sf$$ziJtihAHJ8R_HhX<-3L(i_4-;7pr5sfJ@2ox^^}3OgIaYX6NlL#&3PzGm zZ^Lmd{)Oipt#rpt9FI0jPz}>@ddOHFbLzKvuneqs#AOOnY!41>IOwKN;EyS*9*PvS zoJ%;JjIMOF0&Xm~Kl>`3AC!buKUiS=oyEPW{{6CzBJ}{Gn2-p#LSq_;=O)L;C;!o& zeY7?8pYM?<&~|7~vv0)53?0wM)r2Z5>#v=%f!#ST>Ownu%7b9x$w#Y0sl!6T`kw*QA@PAAKC?0t z1Z}0bPj@y(aur0#2==mPB zF>?*7qk0URXrVZRo!^$0Ih5?{avYGBZL6t8OvOS}TI4}cTub*ObJDYK#)7JIP3+n=N2n}x{H@BU4J8OK2+$+Yhl0<9Gg|;@2{P7Oq5Yv zKh=1S*%Rq{B$Ha)(J~{|CWgV#JB*z9k}~@DvptAZ=OsPb!5m|NdE-0 zMLuk%UXE1-9cU>g?yiw@T{Pnln(k~JWvTSPDXb?9LFW>YiPpW^E{emAaO^n0taZiH zL{Ge~Ta?Bc_-mvfC7y-HoUw|SvD@m>mCseoKv)t6rrAQF#5Ebojzq)IU-`=)QS-+8 zlDL@{B_aMWBaN)UqInQHqWC#?p`>uW_5{oh8&TdJJMX+8PUM)nY3=>8H09cVOazic z-a~LaDoL^F5eBqOpucAJ$#&0|(tR%ppB;%G&LBJ^gc`wq+>UHuo)c58We3bmd)bE# zh1_3g^Ll7d$@1e+B&}ZuQF(hkR1d`Y_A8c`)(+6a!d~dq78YI+qHu;NSezUrL$2+p zxhJ+Ha9%R_kmCJ{;$GTb5oXykxao-v^%v-jeLpLZo*6(zn(KtYx=DB2v@b>5XhttA zFil8>n?wvQ+I=sYhxg=>;)>(-Qc}6w(w274gD$c1(mvZg&r*3>xuKL&&-Mh2&QLkW&*Kr1#bqeU+J2X1pm6@Qe!l>$@9^`|xQn z(k6RpP8)E!F#^`KvZSdOkMv}&>Ym&l`HcfEN!hh2sFCdx!YlOgCI$8wy&Ihb zk)&2nReu5B10ho++jXlP#jr_}9@nq8a;!Bjv!A8FTm+*P>z!OMGfea~y+eE7#9djM z7cYYaqvVX_+UO|5wmH~1FTZ>_%iv?_OM1LAV9yrKmmpAm)}fCT8?CCwN{wMLM!;iU zZ7-?bM={~pOEfV@t&j0(wvc;0;y|`Ovo+xbF`kL&jVS#xE}F&j+;Vr-7$j=En%sci_Etw?5mFSv1*AZ zh{kID-$XdO>=c%^E#ejDRlPEaC}=53YH&5*ZiZXx(LB0X)C*ohMNf_wMA&`}x1BMXp267gCCh_R9m3#cp=pk(QM<`@m;vX0;N!sU)PK{vhLn z*m@-NisJ?hh{`n7M@XiFTbQt#a<%N|g8!&#%4qY}E&fT-(a;<`+ISSnE9>)n%MCd# zGznWjCp*=2nL)tTi0jho{+Dc6N(N+Fe5OLk5>vk`mV3PWBl!jACPF zFJ;!p9jD5+gqp*!q2mTLIVu8j>d!r-Ec4lA{Bd=-rUlNnkkI`ANgAq3N$CpS7|^WH zkr^`oU9sKw3!fX~mdu|tWv$8L8!me2Fes3p^GrF%0ik0SGWQ2?zdY&USWE?D3BUE5@Re=`5aBxXKY~4mqAf_oO+{@Gl zE1&~qC&dNG)nlUcMMd|v%3Ru_iufj*A9CUhhDRFX?bq9hw~i$}?8QE0Z7An(Sv9d#pA_q4=l&o>6*y2KzCkncq1s?K z2vxg0Z8Vyg$G7T)iF_|MmXve&Xq|U2Ja3 zkc=03h}4dngng5jhvjyDzYw@>YX^vmN!Hc8kz2D`KoSB{2BOK4nTdKsh|fHPo0bL&6wiXH<*+*a-=2@@=CVv;Sqgm%vts1Gq+ z)O#!!&upnEz#4i0SYoImDB8JE45zO|l)HZ4P`>ZPi7NjbvWVmAXm7>4nGyrar_-JYiy+Y$$qk0U2IQdOk4x3*^CH6G>@W5%PUdErb_ zAl#y6oVmdnZ0NIqvt^#%x->-U(c$z_`izQZgf_$%16rMZgO~-CmAQ!Z^@Y?UHHNzJ zy1u?CvTECsGZ2xH5o6=_(vZ?mmHF1<`{*7Z9iEIk-Z+lgCHF{yY};Oy+C_@ZIeuEt zkipHY#XzMM11JY-bkq2*$fU&Wb_g|M^;zNM^g6ww!_ybGg-vh5Xs`X=bkL2&`M+Pp zudVu9E?%|cb5OMnUSK+^!!dJO?(U`(%`KqaKG{cj=Li5H90)55S{|fk3he3aHGm&r zU?c>g3vQUTz9V4ECKV5%;o@@}s3V)kRRIC`5;D$2_DF zlrF!-(dW~~H82#XH8<_bx&n?MvJ-N6=}pf=J!Nv=p0~Irlkf^4FTvA2wP1vTL*y*5 zZRc-wYY1w-xo+QiG~3AJ9jy|2{mZDJAD|?!dC150*&(*b-w@5#(G=3+{Ut3dC@8K> zQ%BHo`&PrsM~p$mCRfs`sYU#qiV4IqyWrMp^i;(?+~@6c^_9p{B0I?>j_N2Wofun- zwS36gi2vd)8?l`TJz=uk*(Jk-(Z-n#5R|gORC4wXm$+i|<_1T|gWV}5 zM_s;^d>`v{CP6_0wt9L}QH4%Soa^bvR$^P#;jJ<3>=)vo(D#ED20PMzugtP>@-kwM z-v4N)3Ds zYHuH^InSP9LDaoB)lo7Y7K?VVeRBHwF=D!(-4;zCq`v?a;S&D`i%=;hHr~(#9j)14 zIeLq_30ccmX0C_$&K^8}W&6si>gvqmCKvm< z`mCbLnwq)+n)kG9;M=u3n6>p@c0*sx5pOAVfonOce7GWMAD~mBCIrG<6?~kT`lrJO zQVO?#nxvlbd{(xgk~%C`KZ_NM;=1?WI}|SzM8rV=CD#u>6zwjWay>z6Sm&#|Il>iT zzX1+39s&jtmg(duCUwP$o(LD2P(Fo3*YTe zeB2JM3(YBYG@_Dp1cf<1L(2mjzCl#?Z&uA(oeOd<&MT^`z7w65gfVh3RIUu(6GR)M z%VA*C!2R(f4vcg*&Q8=|sh{@6j6TF3xr>yfJQnaXs-h>B9lv-fc0=i`G9;Fh56s9A znQ{mQpAuq;Bk+Pv!i#6RRT!R1>rmKYJp9EA@SZo={7S^aPD#)ZMbW-C&%cr3h;x3I z2K)Da0C7N$zqP$l%;;)D1v;-Chepm_u@k1IR=fM;h|f7X zTs&gQ+iyQic&DcO8*0j02FErG8tXYtZw!UVI9L>XlcvxU|CJYw!D8H`!g@z6o+c`b zFz+OgvGE%K)}vYNYObnpY92(Z+IZGQCo9_j2p%WfttCgmdF^QdNSRW~_=}Z>993*9FY>HJ0TUHUz~yk!B>=N~Ym{Q+msVt=nS+Ta zDV3#nW;c2`XovC*OnGUjI6UI3Ki(0#Q391821(M;s#>0Vffc-kpqJMLDT(F3E`gH; zD=&DhMSn!0wxduQ-hp|T4qA&a593B1fUi#)N@`Y*4grfF#9fu5h9yw>&Mk2YYAu%= z@6kEy8Z>(=@{%|;nfwJmvwOFds0d|rF1&_M>H~&+LLE4%h~+Ncw77RmiIPB0_u?DO zqzM}I3bdd*wBOkCVIwr3Iro}V&y)~_BfW#dDLnJZv*a5bI6UMyC{j~3_GjZMgR{ef z^+h$+H9Z9-FMLmnu~P3uQ79;%?49_HlYVd(D9Xghr0kcBIZv{l+7l_oO(?3UZuBBa zSwM)NLFHNsRs!F3y_6B47gEzuij9`y+s2?Z`PVy#DE`X@XE4^SJPe$#>;$EKhj`;*$#XbEiG zAc5&si8{Q*Y+Uj;-t>N$&&>@ql@}B@CPrmi5mE0$v6&ys!Q5l~yfQ$PjYQPKP9-8t ziiJg9%khKYtwiTN7H1?AS9gj=B=G-M0$o;=gP)(bYAel|{qlybYp2^aV5a2Y-pS)-EysRg&Kc&YZ{ z8q40CZG$tb?B*0FJ+-4(AKlNaxuS0(!|!?H_P|J8Q|2uVZWaP6iRgl78yjhT7@EI% z#)TC10|kot$+evEsk-b3Yz$N=)II@;BjruqORqBS3DXhD=$(2$4NKrr3t1sHc7@1j zd1HMcYK{}nY6sTWr|aIF*CRc=gY>BO!!`6+m|PrxL`})%a&X>;q;qj~I{mhhDEU@y zD(&}Sg}|lBwU*d3rgB^cGCFVEsgxN|WI{48dI~|^{_Jjd2FdM*d6Z8+uZX*5FGv0h zAH88#Oet7vY`HPY(?o$=fkE@U7y+{wr`UxL5?DA{XsF01A}p#H7q18q7gvmrla-ed zVHfvK@5jhN{%DSlEC-K}#@Sb;k(Ug_iHSv7gDPH*udPiy9lb*)LrB1>cs*z2qu#7R zs~zcg>?Lr?akPDoHLT4{4Xr&^^Pr-mBJ_w0vU+@hpNw4pY*-=M0w94GZ#b|K5b2%A ziXw*8_GBeNdLCZQ$JH~v>nlF~wrm8%2HtVy=-rG%!)Ls$xX5V?Z@r9(e`GCyLxLk1 zbS4EX0ZRyx_=@lcrU$B@ICIkPr&AMq)?GNawpMgISqX>sCwlGU0jXsV zoW$vHaMVSwj8(x0R#9KBlaad3(F-pzPp{4-ct`M|=`7Kc`_)Ns-N}|(!n8MVo{8URWvsdqF`}}D(OW>Vl&ia zVex>fc-p4thsK9jnp5JeB@|?3?|c=&`cEEL}3@tr})WA5@gOYsgY;6EwH4U1S23iac@|E}*wQoC$O2;O+99mz7x?i6&;5k5j z$U699=i2I6%iIldi^EJzOjq7!-VXE=-b2R9b1x$a>}9cK;;ooD&o6|OmUmK{KS>}o z*&K+RV1VP2uUn<~HZ{;}R zq!u0~$;2e9ZXb!A1gu2mJ`$xT7FGQyihmVE0{T~QlE)$8d!&-lCQHK+R3kU?CliPyxwW4 z%g0E{pcIy3e#(xM;71BkWj(+51tq;zudi5g67rz%^;LC&8H~abqz84coK30!{EX*J z<7;1MDPGie32G5gP0vh`c{c;kE~l$rr6~c&<&{Zx63FUGS(=$C2+8k2ZAJY|D}L#1 zS4UlDfTIKtYKJ7f7+6ckM3Hqnixh#G=Be8v479A|?8o1BVfK?Zk*6lYz{bih5)ml^ z;NlXAi~y5hHVUpY?|Lzkls%jwCqPL>CGMBn*;JM6U@mtE#U#ZB%+?n%Vf%?_D}j*4 zwcL#<7nsD?hDSJ49b}=|CTpgzr)@?9(^pH5_j;@FEUbDg6EF zCmo)aqmv{IAl0l-_g2;>{Si+@Ss3)Dx-1y*_n>xAP>MxFi|J^x93Zt0DeOict_@JV zk*)ygL0XrvvZm(ztEYAGP)vN}T4rXdlIjOgJAg3I9*wWtkOgAz2<5f57rAqb>);`A zZMOvMiz()BJ-y6`vqM13Gx1{vyMg6p=>1tkdK3x=wg18OSWL{ULBl~WFOzKFfI?6@?N%5na;L`S$5)77{kfpQX%n_4UjcDCNl&+%D%=*MY`anV(HO zDuRnbv7#LNBY~kcp(XMta@1i;$=fCHQ@Q<>;TA@CsGa28Z1zr;wx$A%MuLVhF`aWg zPI zgE@G5i*5y25^rZ>-mh$Cs;z2BLZ-lMcJ)b3?@)7nn5h{R3WrUM4H#gosxR;Z5c!=4 z4eq{g+;~QPZoDz?wzVh?2WpRsgen|e3c~a#c6s)|hk?1_-pb@Wl;p&EmYQHR<)z?) z+mpu1LHhAS9%5nvX|pHTr}$SwGViey>|vL*2>F|@2SFt8@3CIoU*v3WCd|#n!N!V# zja5XR(?8`7e5POmnz|o!!C1}U2K?^grZ=U|f<}Do9BgdtT#8(l?*j`!m4USo`v4^_ zE;g_xD=RxE2e%jxuWdlUxttsa3ri_pZca|@A{k|ads*=9CnXIjM~yY?J+5bt0}Wd& zit@AL;bdb&SK?MPvC8hu1v?*UpT2GCBMVk%V`pRMl)q+ncf9i}Zl0-WlHJ5V_O6Q=y^}(B0oUM!;uBNv}q(nFy@o@66 zv0Ftwt$@~7CvqO1Gw0?&o65?;XXxNmGK9HE@)_%`)vtXu<%Brc;d-nbJe+PpuC>qv z2$mJ+jbhFO)l62MK4xxi?3_?D2@;u% ziexKIB~eikVPPH`Cekh2QS=f@ft8~l?!3X$FyD0QjGZv(3%H9p^qeoI^sIw1G(O>m znVQX<|l%kRkSZhr#GW* znuaEV!+cCsH7|!}b%Kpd)^I*-k0pOO>U<)pdYn|x}h%LE5}SUOdh1QfI*?d z*WGp37AfiO?(S}oE~QISN*V+tmF|)T>25Jlk#6bk?tIRBo(FW*-FyFgulK!o@Adhx z0W)Xf%=~7)XXebAQIxgzPI&c+B>%?A!APl(xdNLy@7*_NZ*O6|Z+hk;e@jd_C_8xv zzOMBkxAw_hB{{3O1lyt75 zVr1dx6}+EZ4USBvkEgtRtzcd-7;c$3<-Gr}hxPt?cg{T>2}w)wtnDh$h_=dia%3!I zY%T4(w@x3udg=xog-y8_V0{HWFOzDnM?UBZ_HUITzTCfD!IX~5ZiVIMl#Z27yL(1_ ztjr&~5netq&w_VwQ9Ib&e`1{^&%_S*qNit|XXIsJ)$@#sX`e}c;;bgY%*ZJu?)Lg^ zFFdYKIPMF-XLJPxi$CIC+3|IWxVYYT75R)ev{K`!K%ql4{xJ% z42;Z7ERu4{{uP~5pReLM1U8zoL(D4CxE$`s8wsiG( zF7Cox;4yHrusAb1G_tU|0|gGYkEZ%YyV}~pi`sfS$97?TG877|O)kIh>S}%03Wjd) zZ0{N9?Vng&nAzHz92R%s?rltr4o^(YZNb~X!N$^fZ&zy@{G#^$ z(TRO1tn&p+V`+S8ptG|D4Bpb-KR>zxKtD8^PdM6|n;st=8(2D6f|>aausb?GHZeAS za0GjJ+t^;47#W_NS=>1RZTE0~ZgPBdVt(^rZEJOMw5PM9we|hN68s5qe{FuGr?UlK z4jr9?lc3>$`txwyv(3jfJBl;9zcXa%^N`Y5Qzf%-xgSnW^!KiHWJr%_$K0 zFOySX6-_Mf9GzWrygNNPHa0r3wg=k+W^-?Cu)p(NYxCQ;r7jUBH;9l0Mdhofmp>hG zfgA$R+4=GAZm=j@THbXGkHg*=fvm00j|~mYEUoXtV?P0omsdcS;hCk4y-y1J_~c}5 zZF=Z^cSmPu+r-N7 z^$(AZFK!=vQXSAW@YX<^Tv(V|1C4WJYIbSs%p1D4wK6_DH2Is$7eEg;XD3JcM+c^N zKQ1qZHG!S^;gO-irB(0&6P7FJ>c%q6?3b3NR#zv6N2cdjw$IA{WOZX{YQ}oc!oDG&c9!enHTq{q?Ewp`pp4H7IN|9_Tu- zIXpEyJ2iE1CTsh<(AoD>J?)?gw6u113~#`8l7cNYuLuoPK|vR{im&~o&)zxO1#SI( ze@}OJTMMjO+Pb?2=C{ra9yF8b^`Y(_xK~SSM_cDWZ{PUr((>-n>e|dOXpE<%n=C=*j!eL7%knH720rZ!-}m-SEG1;H;fiOJ-yOWgnbjRDhEpkvu%Uj9bG-M!wbN{S57tlwLwTA z0t5&UAoxZ>NZ`Ma1K?nMa&VR7|Hp~?zY;spouR>=j@Hic0PaH4)alx$Zt@d@bb#)KSZo}96{Quzq*dLo1 z>}Y8no?ZKvUT>bvt;}?_w)726t$wu$9RtwOv7W}dit>u`^74w>`Zw?2F9N@92K7gr ztZuHnecf7HTiw`NGj=$8x)}LOHV!uidOJEhdZ#xI|4iR?3>-}_O}D&mdRA9c1@Z|h*hNKA4HF^!O(LG;|)nZMVzm+ER#+2|#~t3}P2 zlGe)p;6r_o*5wvUUHMz`x^XSbpDfq?o9qA^@x{@?^fYH#`2aBqH5-XT{rz^}_eb*~ z`1>Fv@L$LbFk^8~k^K4%k)R}}j7%RJhotI`>3>Q0_V4ES-QcT;hYw=X%euZ?40hZ+ z@G`>pL0o#(&;ihU)USSv8TSU^-Sqb9e^Ki@1hxaxT*$6mvq*prq$tF-~6vRtk$!g1!9<-i|DP z?Oez4%icO4dn>=l?02x<;j5TCp36>;3Vs+;)3>+=9K}5KqCmRHq2yTbN8iZ*d1iV$ z{anll@TB-C@7i12+uPePi*Q`KMz3L*{j3)zw!a5#2UE{eZN-0u5OHwH2Bx~a*y;Rq zXWrjvn5!3M#V5pPb*qPe^zeVN0j#)&TVZ_vJtm!yniZItQ}j7x=pg4v)C9bmC-?rd zec*o|2nqZbvJGszdmC~Q63IrSm`6uhsAvV|z5e33$p02n8e-Y;&;`_-N`6-{iS^O! zxagwl9xtK5G%#tV!$(WZ;#xfR$36W&MSN*6J07-_;lqkgw%z*E92e9l8mTBchvl{X zanJMr5wQC!iVfgKBV^Dkd_H;R_=i-Elu5FYvT!QLo^2!fwX{yZbT-noeHdU=T_8k9 z!7rp+xCkr*2VSnKwAduZF)!dpeEkTvN%$Bc|z} zZ~tfX07G}wcqs80eQIDwP&_RQ;2^}5H1Kcu3L7{Ej!Sc5_>penlR0PRoH>>>CQD06 z@fcZwf2#Ft0ILtetQfFx)IBrX zf9qH_N?ViZSg=s&q};03_Yt$9{}2cX{8w;te0&7n&D7zPgNrsJE|FGfVfEPbU{BxV z;s)Fxp(iI`E)T(fznJoYo*ctG4neQulh2>2PlJFy$H%|TxIkf?97Dml;9f^3A3t{g zJ6>>LNx{8fX?-z=1JA~p7c3jlgZRo|CTwIbd8@3^&#s1^?8cM^F<~O}DcD!79}OOj znd%DD5i{C9?U+2x?%~l1SPh@V|6Ams*WVjAz)A_cXyX6X4G{y)_V63BzNk9W9sUAZO!L2y5Ng zhZj2h!c)L|17rKm1qzk`%;7`c!T)`F>)_>3=-Tf3$UxuV$Z$+k8V@-R3zvHO(80vX zmWP`r9S*Txcty|N#|i@DI|~W|{b0aHhi7?%0mcvG>@N^7%*n~g$kCvou>=V!o_=I) zKbY@NE&w?T^l7Ni{)RUMcp<>=4!X9zG}zZOG&Zw#aC+ru27LCJ_y;~K!!H{Wv}3nT z{T3T37L7}O_r%FbW@!*75w^IlNAcX>itsa|`usl5H~@BI(jPFPAoHpD)qHrMIXvDP z9Ubf$TUy=(ll=o5*gM_~jdx{2#}PM)s{5p01Ft>H|A&UqwD>|vgn@}c_~G-}jsMFA zKtKuf4zpsy!PD}2dV0plDdY14)2$-JhjShL}=wV?RWuR>i3uL6@ z5N1)k)x0{p&=VEm@8D@+8flW`?K1b@V+VT;6TK zH||{oHZn8AEezovTH1!@;h7n0z?W}r4o`rl^d@gpb8WDI4D@Z1+;etEKx^H3yHjQS z*bW{Rj9c5tC^XXMS(&N30t?~Q3m1qPxFnqtGG4;AWNCZf;Av~11*=Uh-8)vE0qyhe zf%fq_B_TQoDe? z*F||g^v@d{+y#!7R_dceJRYa|lntfDW(7Ie%PH|ZhRHqSFQldd3lLJ z-XYa(Q+vR~%aMq??)o~~TDm%>!Pc>po&Cd0-MMM;*|oJ<9i5Q@{?0z;CJ_eOrm$=p z>pDkSKihu^GouaQsHiU6!CX%p*3Pu_bq#GSt)fex4}5sYIGXJ%iqmDHM!S9)nN#SN zdwIECRsuIMKDhw1sGq);AuK`@J@*8=S0~M|mu@S-eqK?c^#`LeFbzmZnm_*CF!=~L zd|4H$&TxsGTGTbHVSeR{vD$k3ew{`1eOMGQv<(ddLu{T^n)zvRlV7{=D*+XYm`zxG z-42+|zKPeq&Stk^HK3)VZR+Ixdb}GLn18D+&%sSeBp2dp`OqOVC3O}GAKdLUH#d3s zxJ12j&}>%3SoUPSlf+Vbsly`cVJo7H8k_^FJ7A8 z2M(5&3LXXDw}{Wp+W?CXWO#KrD%Ah3TY5n=unPdMJIY-wbU^b0(bKc{4e49@-HvO2 zMGzABRcuaWR|nG*(_)+_rl+GNr@=jc?dO}sL=qVp()TPlvB?d?YMT11J%TyUbI{YU z@=!Anqd@S@6hj8a_LfH9h8l@;LVhB}BcrFMCnY8$fJj=)6!y0*jSe*E7%8Gd(8=*> z=;^VqQQ#4)#Z`5TRrKVsG7vz{LC%w7P%?sEWY>vt@xE8h@vY2$lgms`2=~G~^CH5+ z_)ay)u4#RJYha>A-Bg<#m6eZ`kB^U+m{E|0DYznWc4L2kYO=yhiJKMjD+MtHm}f)LB_IJ7tjB6iY19(tzm29J4ZElQqX4vvj(Lt`!Qh~)n zkB3f4577^EXrAtze%_TPA}>dc&Bez9{%~Pa%Ss6(w^h!6+RyDBtarS!<2EM0PQk&- z&5eVHN%<3JbWr2m>Q>!WwuG|=FYM0vIQclS@Fh9V>6>E+vSHr5^wW8yo4BN^o{tN* zC&xRTgUrdXS-I(9S5mQaQBu36N3@sp)vHQyh_T}k-xocPc~wA2vv?6UO4)A>wA8+i zjINtu+56!Oedybv3R!Lf$W1wu=)I-A-OSLtgg>KT@g_GmAFcLv*m6;zv&v$+Jmn%` z#l3XtA|Br53l}b5M&go`x2UPq@^&Y<_|x|o7jDv%(KFDJ(qn&jom!sY;b`r`-rC%g zGJk4p3d~d9v$T|}2M7y*V1^hGJKX{}P;yzS1l@M1d8$jHFK zLq*nTm=UAzX zoG3a3lZu2EtVB#av}zE3=Xj7K%>H^l@Q>FdhvAn_q(7Rjl6u~ z!B35eL`^8{;u%m_R#M;4IW%|--%51(@*4QEV zU~<$G=VpS8gsu{)(+@6drz5IQxkQ6fna_-VkM3m%I=vdS=-!W*DQi%%D5R;PM{8_+#sj3&TvBZp>jEXX7$%!ElED@@JhNqxciB6KjPncL@cf!h=+Or?XP_ap? zC=@prH#axGb&hsn!lzR*jw*cJnd>3Ra^sQ=p<2z;S}+?=lOL#IlVjZ!B%o1XyNt@O zWEj>s2ukJ0H9h;Q685{6H@hF)(B=-Vis|NaX8k6K|))$Q%CV%uHOgz&Ja z6hlh-UT1o%N;6V%1my;T={BdoO&1pAWuuY~EdOjJ#ol0Tm<=251=d?kF)bBuo7=Nw zEd;*5i6Y|kr0Qj3j2%A-v*umx+U5o@j+YjmW^_1A`mT9xtrfBNG0>52T8bwD3#+?8 zfrck3I@+Z>A%VA({Md2u9>mUm#b>YHozEOl5>DWoi2L`_YYZsJIr`eeSJoSv9#3|C{}<>nDgd6@(& zgplHJK58auB}47}JXu~YX&F(mgi_o67?s7#QQbx&J+zFY2)O1|J!W<8M*(oVFIAlZW zd*7|iIt80u{r<|0bCPa)1?}x`3fe=+H7Ty+@VF$x_8 z1S*$+ROq`B9WNbPbOQaT`cny<0LJc`E6`$Ku)2D1swgpH5vhA5){o7>wm1L4sRWXs z6MiazhWetkg!Ffkn?gN2ct}Y|)RNL_TO$%(=?Mr3<*CYlTv^T!{k)wm+x*1TzH&y@=l`3a3c^sQ} zCYse?%{4c_vh=o~#iG%&h9JmE`l^GgMs`g}sHEW9yQ(J&i`sf`z4 z;gFEfx?NBpCoUo_$Sw9HjELkqHt@*~n_Iw|-xE)g ztCubzp<@%Btp+6`!a>5rLRE23ZJ6I(o_!Us#li#HTk`Wy>`g|=P^UPDjfV*Wp;3^? ztSW1;ao4!=11349O>*Sxw5MS_bTq<}4(YE4D#LU*@JX4_+=?Q>T8O_J&TyFm!_el@ zmPWc^wxbqHJ5!+glo?$;=@rE}qq#4NLT4#zPijT1hF} z9PnA;FFqrRkif4Z@_rc36+y9psu!?&-UTKNofOGPiN#|QWE}1ZQ!whpH^lh|DWXDt z#FJDp3V7%i6Y$VCG`}&bpz1C!5j7FDQ}Bxqhnmj5$%_pPF7)(CF{8s|AQy5Aorezs zR#Ten7>LeG8r->4mBGV8M@bb5(!DjTb zb9AWXzNiu|BdbN_vo~Soe*9DPid2Y*Z%IABNJTxD>}Dcb!wRlBh~o2bT$b^ZzttErh?yuVkVXJBw*Y46wy zumCnRMzPh1V>({qSfqqfF?mkj_oQ%ch}?>8h9Aqk0yJov&@d8VXyqo| zayI8CpfrnbJpGhn5*W9(RN|+lmCq}Xx3v}|rn7t6^+m5S0*u_fD@%({Ws%%84sVL1 z!0=sD8CGge+UAe_-J^m7{liLYEn^ZSNk}EEt>iM2ImpOp>9nF^ z;InMNN#xrH#FR*krY_c5*#<0FEHo;iNoSozZc`#3DXyr7bKxheJ^O(PV;vDDa;~7~ zi{LoEsP+*pJ_ZG&aZ2*((C#3p{yqWO4K^EJhwN+(I@Bwd3EAllt&Cwt#U@Av+U1X= z7P0A@AKK$@fF?RTQt>3k+s)0z###xLh3+E0dPvx-RoL=lpuYC0_kBAs7BeeT9uY>; zo0kP*qZHy}M2N_A+@64Dw{tx1Z_0ss0US5W87jbRK;B3W?K0R72+%Zqg$P-tB-GsM z-^B;WQc}_=$~I2*4~3@QB|^QSa6kFY=N|=uiu*9$nG*R1IhXY9d-p*c?_0POs)^>(Vk{@+9T7%nWBc-Y33E zDIFd1vS;#{l?LUtUy+DOG^{jXiHfT7U-}MgOM*83v%h<@@D~FifnSA-YtBt#i`a^G z_+QJwy1S=|5Gjd7Oq`^{J$_JwpVYH4N5?6c?MldPsRX(|F?LnDdo3_3FE3*cyxlAD={nURr^i=A6oR8+|50iUb| z$3+ZTlLsYVyyF0XytlF3WH>@%ZC&&({9lgX>2i}Ky&D|pPbjI3a~tc>9k^z3Y~c^p#^DoKJT?&2(-5J!%N^UF0Nd>T$BMkeqd9xh%HFdGIsZSpWk>iOz@DdDo$c{;*>7D{Rh4(X#LkhibUb*(e zby6Z)j^|(#)!?TiVf8K>1f8==gSd#W zr3`&4;fI)mT~BP`V^I=ZQAbDdqy&nac)wgF#G^hlDsE2DsHDU-o|Gl7fjaYdfC6Lg zVMZtzH<|i?(*0vQf@E60R5a8EHZW@~Cb(Xn9DS@lkn0Q}0UYvkVBr~n{ zEbkxqxEw~~L3YPk;U9GmgejPlVO$VQHO+oCQX!0Is6{W6`_cs3HW?XM^15pSlu|dyQjIQx3{;iudlzquXkiDFg=(H z7fVRpA^+^q?T?&1sf*wu#u3qQ`t(5?&Ot(D7#9(agr-O19xw(SH`5hlAc0BX=^Rqu zVV|+4C_gi+Ty~a_w#t>u6pVU>eFLLo<6DOxME3~T4bSyq#>S8`_NzU6 z6|*0eA0R@4E9T-R7ZXN;iGP*R+BLSTr@aTvJv{UM{ez3^tH9Cz=JP-)J`qk-sXPe` z31MbFzp9yqLm(;BOAs6-czH_%2XJE(sMtrn`25lS5ZHc{>V$d&?FyUo!{n~sPFS&k zS?li~=pS0%SUUb~>EOxn-s;TMNdL2UX?9jz^!O-*46JNk&EAe>`jm87_(FH>GkSY^ z-t{zFIBK&K;)#cZ%RKPl#U;`A&gun#)|mzoeoDvSl`<6xzt7W|{fC%q+3-)C@s&w6oLTA|(||NR}`+F=+^ zO>-Te1fSe0oX;Ui2A@*K&PqD@3kf_-sfv~$#}~G`ClMdZOGqqp$EDvDi<>DgAunDfxo8OOy85OKj;6~Lq zxUjl#^!axVumzt-A72B&sm+ZN#lu8ZiZOM2X3oHljl->bH?gCwyQ8<=(c6dv4@=b7 zU*>TTD1jQbQLSK$SbL`+%LKW~B4AnfyaCn_`rr+rcW5m0UAY1m9UHTJ;@g?&qgR>{ z3XEt-E?P(wt|CGjB~uMspBM0N5~%qgr}Kk}oBr`E9 zw{q-zSi#Jex*JLp-H?gprnD8uCNX$iIlK$J87SmnC4$_PRP$`>Z2Bb8_tSGT`+xNv z=MfV4RU|kE6I|k8^(ZQarMwMPY1uR2krIi=Cd)e96C$C$9bJ`H@-oUkEGD+MuXC)a z$U{fu3WW9+m1vqhB^eVbp`~Nd34E>tdN^Dj?q*?`aNquk0~0nqA-Ao|2z)MLHujk@ zDegHLLtVYXM2MPN;?~`aGfh3pc$FkVMIfZ_ zcAkFg6)3wflqW)2Y9MweG@z`(}0zMYU~s zu3^cU`qX~;b@_g5`D1oG92s3duz4>7Q|1N&G{j5}PrDc3?X~x?TVGR%or%{tx8CQz zHaYSY2Ep)|4tP)icwUnh752DlWa;Cu^8`3*c^0F?a*cvWEj;3M60F-jRR)U?Rm3UU zFDqT083hSLA|&|iaOml^?vzlU)QV@Y4jp>5-ex6dMG8R^x(XpPbXYQR|{0Ya)z?^%`Lu?2d9^~>ptK{af>Baz2X?)0c*J*K?a+}H* zo4bo|@lpt?X-H(G3eeI^NSRh`06V~;ua_DP4zYe%)d0MTXMt%uM-4VIT8)Gfzd%Ph zg6rJ;kDgb-ycU5XSzQ7ue0=l5a%jzRk(44z-O;OdB2U?yJwVQ|37j zVUfDP;wpQMSi#v=Iwet%oLpMNKJV=D?jWfuLXaF^)WXL-FW-^}n~qTCq5lkApZ0>9 zoH0nzc{SWhKas%BgAOevZaNaKN6(kQUbnb9kb@XYOvmfP#w>f$1p#~{c#`&ye6q8& zSkbQE6bbS_n;xIt?0XXC`=qRX@H4eL-rui{Dz?$RXBSh_^`V2>j!$-`#JGWLkf>{u zD+xhDzoMI*eCjpjlW~if2wlJ{Ko%x}L~6DXZ=k^H_C%ODE7D~&LAlJm54KfT5TBGB z^Prp|3+@gOk1##dXe$?2!** zii?Y*LTx3HNyyOc{O>i?xZLI-r=h)Kk?=6LxY$Y2fsmMo!6z}&|7|iS6%HH!?ZmV1 z8IIFlCGioUvTNQJOiEzK$LAH-OF2`=qm<{-thmVR3J&S-hH4^oMX@gnAq%EHPA)Ai zz3Xj7jm37yETyJnup&&87yXhDl3-FuGMJ4JZ!?LDBotJ}d`eED*f$sjCHAx{N%K-*kXdGT%)=$H>###jfsF*8#V)6_xia2X0*B@Y z0vAnpFx}A72sSoeE*kZy+VM|&&*Sl?L~k*?iwuJJo(1vQdBw(TD(4`-Lbz;Fs@pp9 z9!POqzamd~D=#Ixu(b5Hl@293`(4NMW_TBHd{ST-#RP#t`am%g*xUmjP=&S~6XPm@ZzqMWXUF9W2aZZ*vvaA1GNFW3yd~GOc)6Zy>2qsuyMFJuNL(G18zy z=eqZxpyLzOUtFD!wGuXSP6K-zEM<%Em`#>|ofDs=FPt{tlytMFXMxipf zDC9e&3mlIk#a!+)BcUs~B)ir-4axD>)K0 zLcNHF*Dvy1Z!=?jFJvGL8e#I|3^5WJG!b>9lHQ@plE=bS*w-+Pe67G@%YF3328|y1 z7hFQolzbICb2cm_LDL7(&j#MlfVKwDAM9N?&=Bj$PJ(#@%QVmy43!g@V2(t6 zPFhP`us0Vj>NOn8#}BHipM-cxk@DP9qL;Q5xPUBVbyqMhnhgs}P~IZz?1AJUrYx8d z^9Hw;cYbS6L9i+nGA$RXV|K*T;*tnyFCGZSC3YR3vJcB)Kn4y+%nSvIF)$RJBa&K& zU8DUOk#F#8Iv1S@$!=(l7cJTiA%n-ot=$E_vYbd)Wbx#lCS?_smg?NoqeN#jv3>I9 zvzf=E-Mzf~(M(9>5CZ8t9_ip673b&qFluvMVBj^6ugfeeHx(woh9+sKUR?ULFu(K; zqx=t$%iptj2Z{Oluppz!+zqY=)%fUOxX4L`6`kQ6#X~cH&;}l61+r0d%gdM;mF5ZZ zF*A^HK5SYC&3Uph*M$Dp^AHFf&z;=9EqHZ(#yYU#8f-#(4N1m6@zaU&mAR=<8OCe4 z5)zi34G&#(*icx0rF;B)dt;_zVU)~$Q+p;|v~6tLwr#Ux+wP8Sqtmf%+qP}n?$}Pw z+uwek^8@zPzN^csTB}x#Ip=`<>2@|mbf>p1s)6X7{md1(KV}el|AS^D-@4LFC~nT` zt%`E|w=vpYyo&Bc*`;t`pPcy#GMoEyOY<rEnZ;jsL$q6w% zOs#^h{5~;!k*rdOH1wmbh!H=#Q9tH?L-~uEB({<}<~n2jL1K#j5puD&qw(j~LNXSu zwU(<5=y)bgi4`|lc8Fp7tdic|{@h%Wf?c7LKdl+Hd>vhNOgDqC&7%sK_DuEw{o*-c6F&2-EZD8SeYjfe%knJs7Y z4`d_~#r0=pB+kyt(imxk5&>y)Qh|%X{nAfEPN5YQ{0i1+;J)p_F;S4kA%P?PgLq0A z^{q{At&MLS^Qzg;n`V60-m|c{34yPa3qNM2<2ha2;HheDw|fn{i*VR@o{ZEnyeqA* z?3k8G28G%J$P0(D6sajnX=I1~sxCV5z+8Yz2CVl-qUq`nfjVti(TDi*yrhzG+V+!B z4oi|SJ+^P~3Epm?s9;HU*fccJjL&Ndnjq~Vqo5S%b>9v!Vls}k7PDPnFir^|&LNo! z`b8n-`2R`8f=)5`!&p`1{tH%rO|sYcNB4kSA}(eP&amfn|MQPcugv21J(+7Cyu-<`>651PuTqR+_r?m z_;A~D>!-Tf5kkF;Rk>Dd>tU3=Qo?DpVUQJ52i5)Xz}IrKQP=pZp zc2UWL+@(Z2L_$Mgqx08^_>Z|WBiZ5dTUz;{9 zq#6UWF1DTU#O>q_oOE zlT|o=&wwT1cXn}ef$-S`DFDeR-Y~TL5N_~XSwX|UIQxt6<{lhe(w!jyq%%6%{~p*l zSTgkZX>mQ78|3sUem3^%@;LPQ`TFaZxY-QEv^jx1gt^zfa>AWVcGlHw^Xw-J49tUzixY6y=BB7JK?`FH5F|iiaokudM5yq6+WNPsNTJ-q z#_3kvL|HR7M)F6d-_rZVWO@H$rAC3p`$u&q-HPf_38h6BwjOxYuD#QpnPp^73nZPR zMa*t$OVFiZ3Q*4jDn~$pMa?+jdk1ev;M$GvDLx)HivC?Yq;1OV?Mf2$*Y-3+EuMgT zs=9Xft3x(YWSLzfD>DN#&9RN$$gjyzo6njC6x8u-mtL=)f;h~gu-aY2pB8R4tDC0* zTfbIaD0{!&-}YY+^|!ycmzH>YF&n&U*H5d@WS;yku0Yi5y>=IF+6%O5S9b7rYQo16 zA3T9z&q01a`6Oat8Z7Q;tbb52G8dJ57=8_ye2j}}c!4X0 z1BGR1F$NNN?|7jRk;FkyoBNPD1ft5ku{UsJ`mF9|q989c??h+>0w`r-7vgi$-%O1? zLExC`c$72K?iwGCGSZ^l=!e3P5&1y_yCyv6@Ac6r1j??{G(#}oIcgvG)yzCaq)kr9 zRwEb)88I=)-rfR#@9ppHC+ICa^)XQJVBQC1zqALr!Y*f3Xv7*AN?XcrjcTvB8)(_a z*0h9L$?ExFTCbm@4sRUiKv2B)ing_O@I&1pO8=Ph;cRz=n|$`y58J-VrEm45mI;FH?FXO5#;vjc_HtVo& z^Oyic*xD5!@mSdEjQ=vQ^&+1v`8$Cmp3uEF3ak;RC-tIy+orXsY8r2OIECMH*XQqJ z?+hiE084poM@3~9JtKA7hxo~2sEgY9J!n&19%84V-1^oKCrg=y5!&ibS`EX@OB>sq@BlVqyMXfzD=u6QEVQEAQ;ISk2pZzpo&wKCabF8?W^2G&Oy8zedQ5 z$>&5#$ZvYDa|7;m2zl-GzpNaY6x z9HK}w2r)wgWbLLg4vPhSb=PmKA@P!ZO^s@cmShy$RI zJ|wx**8IL3%f^M(;$A5osUyZYEkwP+2)VTNGA!M{itF2pi`(1V>*;iRh48>L4sHi1 z4H%Z*YRmx9udQvvYTpR&3S#|k^_G2kYX-hA4}u^fAjm{7G4-lkgue#YDYLnSc_G50a)GkFW8|^xT2Rq+-<+B?8?yPFn1e#XnC)~b>GPeR zYu+? zDgC4$cScu-oWNR4S0^EcnA&weLc7q-HORlGB@*)A#RUh9z@X7wRiBYl?=VAyGJ9vp zfc3u5s6Q7>i;n zkUtRMS-1ctEKlwbzrt%--PxLLh+BWR4wo55YMrYpxp4n19M#nu_w;%jjgxD0oKRk`)QqNOW>PF1LjE%;~>%#?l7~ z`NhovuYR4T^8N>9uXV}A#aDf0a{IYg`MxE%o(aKiR{i zxJz}eRZoH#T5a>vA!_*7^l!j`4Z9hCOZgX*6Q~3pi)+Jpc=K82gCaYz0O?BV$+vqF zAqXUO(Vk-_9t8ol9uQMI>#1pVK2ZVs8r!=YC+Ans8ZgI!Qy}^)cx9lIw&3e27BC3d z_XObYb?%@1h#uY$>v&@|==@C);M7|gv|+P6JQ~YvTdQqtDRLgN;w{nepuYF~4*J^>w~iTlm$j zjC4XzEe#bFHGSR091SH6?#68auFv*jt{x`D&Ut~^-`JR08bf5cF2_d|oR2j-G1dLe z@N0mK9go}N%hP2ZG_JLE99!S}%3t=*Uq27ryKj9Ce$fyOg)B`ip^i9(@^(a2(bwSi zno399-QUA#OB%%3GOHRNi?}owy%v z4IJ^#GboN?@gid1V{ z?yrX;ttmV;liXUgT!1yOGZR50qhP+w4cDM|itqsq`poLO*9pz#VYsI2_SI5Tg_BTI zR8?JAZK!jA(jJjFP|!JO_&fd-AGq$#RG!~i|2zCEYI|!ZI>>+P^LDb|)J&>ZEl6} zuhouvVkfnCI-)0fU=MtkCdjgY6a-)=`cVVwI+x5SkTrL;f$b{0>rCc$R>$jZ2zrjQ zt=PZFr{-U(WKk51*m%k;$|531BlE9L{MV$8AFEI|_H_=ox6om&L#dzAN%RC^$Vf;i zNGQn2xyJcKpU%-6ciFy5b(w`+MYRhDmWIzjrHF2r1(>n+-V1F&m5;8i6ELjdo)Sx! z2$%dT^0O5Da)2b^)L_wo8zTd4I~Bi>{6HdT4g>~~z`utoL^)WaNG1{q62&A2WhkJpnSZ`>{j^@kKMF zMn?%ZS4iznOz{WCL?KZ!KcI$1#r$W;<%M&y> zQ6zc3C)y%3?4bT)r!OsGXW;B4FL=z?*TV5nS45#27n2VL9bx1I2TmXUQk%Jb8TW6B z;$Y`Sh^8X|=43`jPBlZ3=3C%f(4eI4>3Vo)LZ)$NlAfa zUu}*LNhnB&esqI?kVfMI6JrwO(^aBfiJWTdN{H-d5|B{#*4O3xRhuZx2%_uFY}K4N z^;>)pMH39_EC0U(NF6>Y!f|0+tj`=ty|u{wcVa#nH8%qWMxB)Pz|EZR%y7n^z{5X3 zu(sn6SKEe;9MC{>Ff2VYzQK6+fiyIi#}_vAR`fBiDKNRk29+1a78U{}qp#krPOv9+ zw_s)9!K4`WHtXT_GdJ-%--Qk#M;W=e@@$T*u6HnG61If$=AQfFh?Mdty@$_sp+!VjaJ&k+nMdDM;+HOy8zfP zHRIuS8Us-!IvR(Qb2~_@TYClJZ3ppX+Nl z^j>#Tc8sFA(&k(2(rAD4@X$$0`2#o)r4X8WN-ur$Ox|*ohrV%kRB}GOh1+khIbJP} zGqG1vqSzeOZDJbcvOEPTw}j}>S5aVfE77cUFbrZ(85694C3b#9U}Vtt5?_T$pR#xi zH2IEkhuNxP)x&drV*4Z@7v&Gr>XK`J?ZUU-RS1Tx%W~00ZcL`Sm5Mv z;rZE-@j+R1zi6&}@r=P4e(xyCm zO)0#!mu4;b6FfgtQ&j!g-CwcU(D3MDxk!W1d1T71}`2EV+~vcej}o5LagINZTWY z15G{#30-HuIA&|m85{^;)t31i!0Wmp{{L<``V`-{K7^~B&nDmUG0f}r;J)eam5qkU z7$mFw`#C3dzUstpqs0RwO+#bJVhMwmSRrOAW{i!^!l8b#dMMF{PD&{>VOYjODF9jH zIhoOrF>0r9l1F~nb)>wu{B>N01RLWIT4xo33Yvj9=b^3MbY0i)omgbx5no?Ah)Z#W zCwvl(LHN7PF(Dyn%pcka)wm$%J9}YUp5ZYJ2t6sb(PM6MjHUMIq#)>V!A($an7F?H zxQ4WVL{zfF^$Z6+##+m7Yvhhswk&FwsBbU1ZtRz!Pm)Xg3teIcNWw_JJTtXYV5E?0 zA5RJ473jrq((4U!UKlqQO(8jSLL4nNpEVD}u)^?UQ-~o-ssT||UcbT+x*{iZ_%C^_ zSS0M~KLs6*){Rui)v4`zdpDuvqO)C1A!lJ@MN3BoUylM_m@4XyFiZ)Fs*6}$KLHZ8 zyU^d`lH$-P@s^tr)}a1L;6V_%Cve)*Mtavv>CQqv(g> z6X6Xix9t{D*L^*iKes)IX~ji_C!TY^T3ib4p`G_h`!S!rD)CM!|3r{m5iD|j8YQ}S zcCiR9aPpr$&c@?|%1x6TqkD%QlN!#k4#uKh7atZ#)&nDQ)%{7V+&36NL*fEj-t3PY ztz$;xpU?Qd4H5ija^U9w9~y))Ko}s+&p^0-k>>__;{S|Xg`##Lv2>)#-q=#=B{s&0 zo4tSV-rYSS?j0Eylcz{Zr?Ii=QxLNGK3qZrN^C5wi{HQ9sULl3GNwACOU@%jjqldr z=9v>XnljBFzby#HoSXTWrs0#1d%_yTAi?6ac^G55G~j8%o0cO3<5gK;ic^tV)#Uc@ zd@I8)TPWBiz~sRq37H+{-H|DXA&3leJd1R5x?j z8(iNV3Be7O0(9%hxKMbi$t^O}2?Wc+lPE?o>zWV4!c2!L)L5R&_#c7&8`D*PIg04R z^2U{72^+J3>(vbF8J_-psBUIrWUWvI=$6V!7{NmohKQ)}u!s6cOk4Y(@!drTnN8wL zxg`VzBaS&aj@!Gg&yi!9nChw9xH>%C-^R+M7k0!@eO?qf_=0o%#gCsNNE|xWR z4-fV*#-%LK(T>c};Li*MeE?nt>_4d}M+c@D6SGMvXlN#BP!`)Ac?e%!U!#6=!Lnw} z4pgm9kGPK|%)J8IUx- z$_{)X^AzSTvA7RHego5~Gdw8wGV2!oXJ+9i_YVSoJSmA;&)DJm0qAefTeeQIbLGSA zt*hX5!VCv->nTZnp1Y`qlk0lv0hy{K3{vaE@sKg|B*ngHKpk44ioilTgbUO3p-a3U@_Q^W4+`IuTw(dG#PlqZi2h8aj4`?7B%#Zoy)}J ztx!fR4uARdHeMSKkTKygYWnojD91!pRh7p%%qn_GYTs71-u|jNm+L6(xb-oBYNh+_ zd{zIle_c@NLrAb9X_c}MUc$ehDf|SCua&V9g=8>48&%D4@CXDx3)>fj=Pfnk=uw}{ zpgX)^%9J|A4y7f4t7;iVDd?`DZa)IRAfV&-!nj|s$jE6F4ei6W<^8_)4i~!Cx{KTE z+q=bTOaZhTgC43&T-WpuVX--W3=~;nOvJHRLjpWy`u9}ZeUxQ)?eZFi zX>lQ&uTm$}>a}YQ*g>$HHZCqTX-Bf7ArEXYA6#<)uv}c;5Hw)3j__sH3O;Q@J1_kdgN?nTpY)L-WR)1IUKB9}Pr%Y}SU>KJ`dSG1cZW!q z?__;o70gjJZ{fNp>}dl2ged}`UHX5}E($~(3rfpFwV++#ondxcJRvPsnY?{^k;mDb(A|c9Vz%Ey|C?%q0aiVwJ1h9O~lZWL@QoIZnSM{$v!}qp7n? z?;vUVk(D7>WIo>>qa7O044gYoxO*fxcDQxP)&`;J@Rn6slqh8^?Lps7K?sv~JCzw( z?^XWhYHM#`>>we*vc;KzY||-HV!57r48+vbxP>m8p+EWS*+MHqhRF? z!*qCR?T7vk;?nx-3wIl=(6A*VJTNQ}nkSEh5(Y@Cl$l91wfGYfBOk>tg2diN z5CB3e6NQz0acoQTJPDw8+ow%ZsK;=bvM>Ow2M|m@UWrEGVRdro?ci3ZMmlfB03% z4f-mnOZ6478>p-OiAta8xRM3QNH*9+$tx(@fBy9%3*u97X$Wh`ztAuNyH!~CqZ+w= zCrn>Qe`9^yTJ~PC;K2AG0&xZ28MT)}LgkLldP_eOcLO1%aj<}l(w;$+>^WpTV9K37}O3cw&$qgrCB02$aw?j&YRoke zq&yP>_kMXA=ybL+5z++90>Y()1E3*QxuAlD*4dn3p4Qgv^U+V#m`ZGdPUoBC+pd%GUARKGG6^ZkK1LaAu z1+EGO&B~00j@ZzvM#G-8x?Wy?#zW0)iK0u9Qhv7ZI*J(qzn>`<>^^DBzF=W-F@Of! zP4aNZPJJF++;(}Kgj(;jiBTYB^J*6&a`HXco- zw-2+38Ro~&OdR`YCek)XwRMg!bnnR)U^-s+b0pnP5;wuNBdAqvEziG4g%%$-4nx!1 zBdW+mLN_`88i|k(mxHt=9X!d+h!exn0yLvAwJ6_Yy+1?+>uY_mvC6JpP&knfcTE8r z8xxCz;}i77Ksg5lvujzLZ|wU z^%{DBk1^mrsMLZ`!lOaO4n>xYtc}|c+t}e8<&*b%4t-4)%I}*ojFNS!SM= z@i&gYaPAaQQ464=EcKLT3NIu2O_b0hP)kg+p2N{ zl-(eBiG=tH8epqdcaB*UGkqQ#!gbc|;Kg~Ov$v4j%Ost((#9r7^A2#fnUKBiFcBnj zi|pRniwM1xiEjQ=jU{`z5q_QnRGMuO_fpBfQSO>;+jKf|(Afb_R$os425D=&n|j)* zI-0s`Ux#qHCcExFCT6~_wl-FTFnE_)bPCfk2r+PhaPZO5F>=#WQ}mZt3^i5slhakU zmp*7SRa;SKVaPZ6eSLd#abaa)VqK>L@EqoT=@oDQianOmJN{6(15(zV-tyO0MeKIuJVZ zwJ*T-+J=5|ilI8Q=xfgGmj^x?%FTMz<>LYu}(niaLip_?e*<`Xmfrc3<9JSz8%C)x~f5X#dBx zq_8-p)c4)p(bdzz$;F5H(ic-j@z)4g$&pFt70?-r6Cc$pVLMnWl5hzvxEyQWTFKEAH59yagJBbQx|MQ6GN-BXi&%zSXx{pBPAUe8KLwK3JsMM6*aN6)Yj93H-}?x75i`C zAl3Z~nvRA>SxE_i^G{ArIGLDkZf>9g5BB#R-=Ay{5D+9JBxXO4CQ>Yb|IJ8%`o58N zO2Got$|@@p6A}jc`jAmkVd3HN@$vcZLH!dF5&%Y`ipXuPt-Z*3+1cA0Ep~nJJof?z z024N>^BQ^@x=}d=894|kDft-&YurdNjn$X>2}m`27ni1nhK2tA!1#D&Ev>eurpL+aNHs%h zqP_@VP*8kONK8bIfN%x>DB-FT>!l`6cR2ozzcRT%54(nT78VxYH!om7(F)N|u5PYw z&oRA%Urs_RJlkfswNl2$#tq|pknkg)Pkexv1h|U^?+BFErY4u~uTNY~TTLykfH$|} zH_p?`OEpDBAyLtYurOd&?_(Gf=+uVCZXblZ18x#Iy$Hz|0&sUeWiyQ8gW~pt%nkl` zPBwdV&8hJy*SdO{ic3APf*eZ(=dKfcr0)+q@Rt^*jn7GiuVW7p367&wxE&2z`U(qz zf9rZ9ILS#F@c#aej*hOZtelyd$*AAS<@DK6SX2~nFa&tZJs$TEc=*|EAQQcv=L5W$ zaew|aS*C9f=;rns9*X|bR&@pr-CuFKiSQl4tF^q$75N=(LvRn1*jpTjA`IiK{hVffFYxgj*igK(8|lpy=teQ5*L(+r~=5=AMHXFwkY;N z(SO+)L#-w?R)VPT76|(`OW&ao#iPWxToqe{A~p-uC!>q?JWPP=!e9VPIdJHECerrk zOAha=vqjpuBVx?G9LIixPUtw6m6C{{#yQB*QRMnBqJv`OSI!A&k*!}Q`B1!6Hy-?)oL&?~+Dm{tIiI$WlUq^($cYyg7B;egT!tI~CZDArMSDe|ftk?5Z3zwzULApk$e(A6 z4<3K@=+b!)!Y=BLyok?CtOr=H89N%UUJPqzB9cU+xq~^>WcBz<$qr1<$c%_Me9kj! z)D+Z>SxT-vFfu*}P`eAw&`ryML&T%Tq4pIn*Q-vHo?UjH+uhNE9ctj|;@GC~dLmy# z?qz+kFta|~<&4<0E zV*z#%XL!9=T3B9QT|PZCK;tH5!z1n}hQ=6bmO->TNSB!O;COHUxTs4kGQv;3V6?}_ z#;mD?bU8RFk-#x4Cxmo`;B?-h*vSNo2AC=}G|0%v*xA@*aeqQXKtiUarS&BCfa6GLiY8)3(ag-$A=)9x z$eOO!E=_&)KSA+w)ZBXgn$I|;0&oz_fP^>?;LO8TZ)J&F{`>oL$m^VSnp#6-J&tIH zUjSx*!u=CM08xBw>f*tZF*{|I0kKADsvPRX-@toQSjcU5wLBB(_4*DM#Jar+5>>l(-vb&nS0tII~yAs+u`kPwXfS%Nd%34=cYCa7~6A$ zPA`ZDrxN*uGzpnYi#0wMSakhB6g7jeZ<{n_F9> zqZh^ui~Tqllld?Dm{5^w-|r>9%0B_zyJ_tN@TAmnQogsJhP=ZOu@Nh2Vyk^GY=vxv zb+di}AKth1nXsH)Xsi%L0e-Ke#ERQ#)Y39kRcBuy06y#aocula{g(l^RTZ^MW~RP3L7VP zdTz1GCBg;i*xlWt*P9y~JNqJ=s;2wT+c@82?_FwC%z*&O$v%rTtwvZG2rj7dP6dhZ z$+KOn?8HKeu;Jl?x5AH$`^bZ-Jq>X!Xl%w$@4&)Z#t%>Um}q4sQS44ibZH4bdn(WD zMFwgcSgt7Of1vjZZfCzk$kx_YKtMoo>1*Q8$eTOT_42%rbtI4s z7vn7>R>wA27b7^fA_a;I+e7U2^%eXT933rjG0H|&_rP>*(8FP@Y9ChuD7X5&jEj`G zrc`N`WVQQ0i-r`$i4#)?0aoSsj*l?NjI=dSSb0o6wfXVo?P)>rGL3NXEkM`_ z7QbfjfY3OHZxar}X?T}yfkb;(vo=H)!DO$RMD3-(CH%E;MaA`bJoggepk3gJVbpWR z`#gX~YY+~|`{I`FJssfSL`SAgsC3>|vTbSxIDejii`JYtQ(voxv?#LNJ%*-XmD6$s5Mn;wZ zdvnv5CF_{95FAvFG#6{qQcZaNHe)z2Z{y*i`(BvZqsy|Vb2B=S*TnvEYWLFDv9UTp zt$EU*M={)zdOJFmpdab&o4^F!7+W$_#1`Sl3U0u}4IY`EF=ii^Fi})IriGoaOHrsg zQ)c;sv^PkFWwd2o@ns`rPU5+;`GgHb#giZu`qzc2|Cf~sGLJ6JIc1g84V0w6Zviif zE?c8AHnwsL`^%VSr}SH&qK7?nV)x}*D**2h zW+VvNV`*q=Qc+MqAb=V4`1$}K+1T{7xv{abhK8NB^~a}MK&_JDRz@D{NIaUAHcw`S z<6N_}t0P#?zA}!gxonPSm-j2%;@0+wTv2!sGcQMy=$+0@vcZ!D?85%7Oe)5JDbO3o zSSs+f1)g%l@Mgm`I}R=jffvsk+e+yMPVIq8>X0Dr+s8w=lp@F_S}bGSpE5PMrvL;> z6QO#47#?!w5H~d+$9jC;ry8=wX8NNNQl8vqzO%TL`=DhUbQL*Q5zmv!y0_$Q(e76%&E&k09^+$xQZB)gnyGc4 z;dQi1P4}2ajIK3_6YcxgB8b6%u(%gc=nz?1SpiDVpFaTsZqbHc)4JafK|w*eFGhxj zViFR*EU+;3V3TWouA$uDtRa1RBV4hP4qurfAgh>#lUp4-$=!b%jt#$F+j+XQy}iAK zK1^JJ9SD@gLo;bqzP;!)F}V|`2oqfdXv$(uMo38u7NExIe`=@uBs`BshTY=Db3{;J z{WbDNVr@w!YRY%f&kHQ$VMj@p7rX2|LE(ar)akIy4kaQsSazHTcG^4Noe8E5Ahp=P zvo*E!EnU?~NhS!a94Ua6I7R=C4bb|LsI*mF`a?o88z z4kmZL{DMJ|Khmy(HIR#ojU)!c87m%eAOo}+o9vplhK{39lH|euT8hOfZwPm+!P{dh zbPvd|FzJ7iS-C)dH{4TgCA|%^6A#ReUwz#vx@_ZW1l!$&zJ&(5nN?6uK;`Y4{uzI) zVtiId>g}ZPRiUDxqT>1tzAXM1+R}(EHo#>(tcL z<&|$+I0#Hgp!ogQrx!0TueP=}IzSqfoXpz8s_s7&T4$Tc8Cz3eXtdXhs72B%E{w`j zBBN`iE6Bs;y_0iIF)0z_jr!0}-YZJccIn(=<>}t?*CRNP3Izv)qgtX;U$y65@0Yow zDx9{k)bsRqTG!gNE+?_XI%1w}EY9m{^J8?h=j-45`T9*65AM4nF!|NivjU&z1IC_w zW8*&1JrdXqUW;d2Jp3FW$_@M)m5bG%rAo{~f_O}!hsng%dR->hS(|JgXYK@iA#%aV zJ<@T;dGQ?w%Fb_M_O02sbO9*=2)O8&1W;Pz%Qe2fCZ|6)x9>0z`F955eHCdV&P~X% z$`YeK^shh)Mo^oJSvKK7zR<7xfUSjH3b{y|!p%$4xtkmh1;hZ&rk&$u>at-=K zC6l0IX62=0^DGt{5h}F;DPb;#Fd<+U075*m?rmOe1FHzuxRZ|XK*$|`bl9LU!l?!_ zNK6bP zBO@Uy>iv*C5}KeQen@a|FKlB|lR=j!c=BS}4)%Mm{}0F%fSM zg)_Wb;PXhtfU4)Hq_i;RTn#ZzcagV>ZidwJ;bB8jA4?H$XE9+bxf6N2jfVZr!PVf! z$>CRW#qHdTYut%>RDs}eZ{AJF?E@o&nTfmodA9-Bj2yQI)ZW&lDjaT>cK_-qNIG0( zW@PB5>)(ROCw+UC3UUsXAHRZ;rPgdvult~$+j(#&B4~L=G+c%7^{}dG>C64r1YY+j zPM$EVXq*oANqdFrki%wpD1>rEcXKc0^u(piRu*|)W|_F3yPFG7*Uqm(NDX1zx9*C& z^9#!@JV77QQ?W~_sV%)1dK@}?;GL5>Ee3}|gTT=+Ffy=G(sR<(zI}IxW)*#;#v+ch z*BXM@qai81Dk5NVIG?jD_jRAo;}2hMpfqbsPdCRe;{-ZhT6Zrwlg;F|F5f8RaT~D zVBm+bTQf?ol7t2+9>Q znme2Pe6P~yZ})gvc(ws@wkB5JQ0>5#kR#l;N^_^L<}JQ;Mx=p$2mmuq{Mr3(Z+RNJ zhm1r3vv;oKy&_9#Hjy7H>s_*=G-0xZ+S>hxv#urcr$J-=L1Qr(M&|iLr}pjjOy(EA zY?kbAFdi*j+>T{V&(M%It<{olY=h61N8p}=N9}}2BywVoER!>;$x?wlzlxcSwMoq# ziYl91+KxYfQBDKdvY6TwZC>Yz0)d2IJrhr^9A!kG_mn$X6XvmF>t=Sr4^epF*D$_3 zGTdWVpo`y-YnvahJi$X6BJ9)pudcfb!+C=I*;$~+mH3Ibj5~@?W7jV&+3|jvZ!FQ+ z?>q&)S%ZirL7&j_+0V=ES~y-{MQoob*SnmZta$s^rWTj!8@El%k0)n(m(Vw@C%d~E ztnFP;7lKe6B;Af`;|zOCDGg#!U;oj8g=D;72h*flLtK<8r!%|bH=M;d@`i{yH2Cgf5bVA~8m-wX#%fvS zpuqUP9qlgqw(=AODJ6Ak_P1-cIJ^*7smtYh>?|?T*O+cCLK$^Xz2bDI;kdZG&u$-e z46~|gG}8V+nFw`{2zUKHNj(sN6N*{!muiqq=X7w;%uJ{farBX`JQz>+&5Qz;$W>q=B+F+&4s6MR@JLfWWzfT`=0v2UVB&YgE!-fxM3lU263|1mgwb zUV)!&>2b)vh)0DT0(4p`;=xSlRh`{n~p-Pit!{YKlSydh!H<0e4+-OFlj^ z6u7^i=)mn@YT5C>A^^zu9tov0|9+MNQnun0{mvW zn>)L^>RoE<+MDYELwZ3@c2;&iHm;X1pQE2y^&phg6lKDyax?2|UaebQQ{sSNk<=W6 zwbft{KTY`AgRG_`4<;QZ^Ak*t=Vo~)m&WcM4pzh-_*oNkR|kjtn*j$b#nZXz^}CO> z>x=&WNisP22WzLr6-u|7; zoX^AbgQ|v9L_?M02&bEiUQ|8Zt<`njx2i&U|AeEZ5I_)8S6+_mf-DN)WGZ(~SVNbYN#{vt z?e+3`L*%~#G?)Bf_t0CL+We2{S!o8k8ylf1-%r!S`*-W>PjkrbG9$B}F17J3Eip#F zojW@ky6c;pJ={U~xr1#Ps-^=1EG$kmFgfL)zNUY-j;z_KfS2C14LXx-XC)78_LEF< z8Tm@S<62eVX7u1|x!60`BB=NF%dRej%C?r$<$E&IN8ox%_Gm#myE(aec({1j**#aT z=56ru(w@s?jJ(g9+`Jl@c-RuS>KLADZgU0Cpo_XSFRv^w3(5}#rP$cmRQm0MK(_lq zsbg#A!rtHCyy*?8OP}@ZCK$Y-#6|49-f8S0>6W@A0$XB$|(g zhLqg%6?dG0-@$ zKR4!2aD9@>@cspXA}j*Z+084N+?@rmeQ=xxMh!hV84(yP14W+2`Fz_d0!0UhTc#~; z4LLCl5g8Q~wFBju@A}nd3F4*X%v-svTvTFJ4%!otB&3jrWn|QL*Si)V|GM}1eH)E; zVuJvhLQ3xHx4IjeDS6@GP{?3n(o$1XQ{j=jJyVVT%Ml7Od4;%`{tR&~!iC_NXC(zS z8PGOiD*P`ex9dLo)xAdp7T!0Wy(@eV2jm+TVPGSvvd}if&;U?H$6*rfAaKC?Qakhq7%-Q3*Vn`QN#U8aPMyZWpBemD7=xaC-AD`*1lOSUk(vepBB9- zB@ZGk{z-rAb&OT<+Ih8RlI1Nav%_zY%V}%NRbL$L9Xm#~CkZE`LCZd#WbuLn0X!1$ zDexFR-2oh&Kvr#3)c%L-n76mh1kedBA%7YFlvpHG zT+kh=VgzptoE_}j+ot3Y4`>+ZAEWCQ=uMy-l%d=nF=*`9+TyP8m7tI+P6~P#4|Jpn z8~$A;xjjrv`YXd6ofgiP58^#3ok@j&aFN>JxQox_5<7+K!x*kqn^S>^=&F8ePW7>=59hlh!}q8Pmo zB~jgC=Zma&?c0MTr%za$=x2Dc!9Exi6y$hyU&UufG|deIsp#8Q zw-tuV$3dP>iyWTpKX8w&7FV%fu8x-{5NM>`w$yza9B;vme$!OqsN zwtrz0cpYDJS6WF(NKimbOwsesZ^-% z;KanZbonwemypc8%1Xn~AZAQtd~sS<>yM^r9i!g}z~{t=P9_5a9OT5|(SZ>v`Nl^s z0f_DM{|*QV{5qhO?@PrvsECP~RPH|t4f}+WXATAVj3gwmmq3_!?7RXZBAi&PIOie! zej52>>-+OSi%W^OirOivtU`ix=j38-(^Hy@dH5KY`mZk zg&;oUS7sZ@$C>HB>rw*fnGVc#!jqro3@Oqg$(^O%^sP zXb^l_JT5S1Mt+7%KSQwS1ifD@eSF8W39Pw?STdm?@p^iT1P5dPa1L_r2Xrb%P&Ii( zXn(@Tr@Ww371Ium(>?|4-g}ZC-y*^%5>BdkJ@KT^9+!v7LDx68=Y^RxpNZU^XY<3I z@9lV%Srj-PHos_g3pZ!RMB@v3B>cb&9cC*(W7DvJNpOl#{eVfxf@J5OPrdYruV7P}R%c}9+1S$m%q74tqrxpncO8Oy zOUR>f0BomcxAQs2h244V^u!RzxvLNo9!AhO$!;)WV#|0JGBdz`sv8$Cp`hdPYut@{HNO0t1lC)|@<4up@F+UhuEWZ1DPM=58<`kC z;Dv8#OqeP5WioP9ZV?f78up72HU;~T+UK*aw{>}lP>Jqlbex_Y*>%{VBF}=4MrxVW zIrG8lPJrE*%Ewq&FM!pLf0LV=ivtCXk`_X)OwA-BBS22g#`Lp#U{tAXwjbS1Bmqs= zlC%DAJ22gq`o?uZlkmKjmhfPa>w--5f~sP2f;TSWQ+`jt#Z7;c01f5pbt-mYr}XNc zPo95XEx(ZBB_qaVa;}^_b$+@0T#AR3j9l2gysxUvQ$UOC2D7ZBk}@SN{!IvlqhrNj z*L2mh5Kd8fHc~}36*XlwMN(FIVYa~fqTk+dZ}m4sIq_g)Ub=Dxg-2Aup}N{6_A$xT zE09YUu+L19<|kYNnoEX_DMRbC8{rF||m#fAQ{02e- zzYb{iNTmob{ncMCB4d5NB2>?V^I;wfDgA}-2&8Fa+N;MF7P>qe?_MB7W)L>Z9fqC& zC-WO~{XJbB9qsMytpVwN;IqBN9TSb>T(Aqje2z?!A*Hura$zCQCYBw8TwYCY_mtgXFwh7-B<- zhAE`tSu_IP-&u0UC%dglCgPMAXp#A|{fog0A6j@5rZ2^CgI`ItVd^b(?O=6qu&=Wd zRuCCY8REQ*Y)oBaBCIS5DpHWTvSSJUru2J z4?8UZw|zh{6x9De;<%tQlbM#_$8(gbEa?N!LF3FZk7C6nMmG0xb$*e|OGhFgZF)LO z4>rpu&l3enu{kxgg~CEXEfAJBPV89Sf=>&6U@Nmeh?)%fGL2vKINgF&U zKO2PZgk(Qp$HfwNOz=x7)2AjzVZQ5@+FkRqQd>okgjs^pA(@9!n1_bLF|Td>^F_RG zR+<#W=xNBgJZq*-E#mdcD`inSW=?s_ybfP2HBu}FKFiwj=7Hc4D=JE6R>R_?(0p%Y zN?b-=XVa$kckRvXO~&@xq&IMHStq`nhn~(}LJ#+92MVNkDCy`#AJq*H@9jNKbH4d2 z(v4rGz4YoAW~X`=%EUalf59TT6I5AMmUUl|42Ra_f%RLkDZOfM)VZrff=r<1oYS)W z`7ws3gF9An^B&4jG9?`LJzY$;c%BAS3038(-m25!V;^|{`;baOu6B-r2 zX2uxIq2X1b%^g)m#ajvr@@xXkIM;q;HZ_vW&f;UBXJS-*oUsmX2HP2LAFz{N7Sp|> zT9hHh%pk32VOmtG!ApU3{u(Z>u!5)p2pt#Yd2kFtYG$HY_=t`G8~r8;tL7aQA8*%y z*qpqE&Xu)KJGG@3)gdGlG~$6=;oV8%R1a_=DENvHii}t%y_NtrR*4{w$G)`*9JHj& z{H6s1n-jpIosFUp3#)uliJZQU00o;*?bHSUv^S^A&|drLXB1*WaRo^*7xI+Mgg=1U zz%dMtTm?Qnc}^URdKvRmV`6AJT?5)CTOZh)sVOUhQ3%Kg z;9^`R$*9PR=8!mRn}5Cd@@ZWA5Lz4Ido$ zoOEeOvM|#N`@Q%~0v|>@@)O}p_y@@bKV(M77gF%AZ9471*X}3kV_~C6IwmyzPAyJW zvV9Z9N!h&8n9Uy>P!aR^6ERq9Y!75mdm>63)H07?Js}v5ZgjRG@7tCu9m@{`%qa-1fkIuC4 zaT3QtmC}xV+XM632HK76I7zVZ?k7JR?~L#=!Dc3~d!y%>m`x2)#z*-M*MmYZzB803 z%uI?wyR@?Bd4{h7F676X9Q@K2wnhPuLc+7^n!6?d;E!Jj9_PMG<)X%?WL68$Ilb-8 ziCD_UfpeJ^p8_B>I7ia^}*p2E{yaT*#qZKu*t=i}kbO;!fk z;iKV8`x(9-8Go*7$-_X!U{qXT?Wn_tg{xs(IX(ruYy_xLQl(&{rBE%*kTp=}A!TyN z?_PjcMekv^uBIRz3A1B<&&RokV_+|?B#<5-hgHP|^@C zOnH;n-a#xPLV%D&!Nj-nY@N-{mR8U*7?}{lkMYaTmvHIGWEAAU9~mNY*hIh;TCbd}9pJ-^{HwKQ6;TFucE!}e z6VN!L5^YFPFa;EX8(yE9;;Lh;9tkmqP+**8Y`75W&%azGWTcb>o07DG6h6@nFhUfT zN96_kfBc3X0YU=5jt}nwMRd}B_lD$ z`t%$9y{^W$w}>R=G_I(m2wh?I5G7YJx4epGZ$d{9dXJgV;<%-BB~^>tZQhjcQ3y> zeHHkyB(rt5MP8PZhLp$m?dsV(mroe&er95;gNsE>L(3^5BF-fyh>woSD#S0ApUo*Q z$xSO9*s=A=gcFQepif(sgOP^M_to4E+@*EBRY!)KpO;@c_o+09fPggE?MjIYF$?>* zoV}ZQyYlXiIJ=+#zfg8MJD(sgt5o>l&S@|5df~OY2ono~$RA3exPOrJLvI0m;@iGy zEpQ9l1vdP`ZCSB#Rb7(be33aAufu!q-r!SH{hmsR6q!jkuDlTd*5|v6l~`3cG4M>q z&k=C&s0TG2OdlTyJ~HDaA(RM@lybSxk56hCQ3BU8U=>*L^u8-ZLMR#;#${{6ia}7aye-7Yh(x0!IIXSNFv%^`pPdf9R)8H3PZI`QD#OQhqtj&pDS~*!Izf1> zZaUX--A#n)WL$BtYDC_;rfYGV)O)jG@@S!{EY|RjfhaXK76}rip{aY$tKMPosp5|t z5^P1N5EZ_-n$^<}6`B98SRSle9eu%sM1BfN84au4xlcy(HKB;HnRH6B5GAFg zs!h&^hVUEv-7i|?iMbiAskL)U)QPM`)a34E_mnGJDbN$KdORCBZ3M%>td;&P9(qQB z$pA?^iidFi_uFB+43 z-l#|mveNK+R*(PoVgb(Um6wW=Ow9BGejjYId97Jfij{>$+P`*e$?us?}~RnN?_wmy@DVuGqX%= z>nfP}kVq?LJUp$3*{yKf-3B%uKDHAkCJ+w^5)AOiIgfGyn}bO}25gLCB4Vm4n)=3e zR`(maDi9L*H$X_>*8wf-gG=Batq83iDiUWQ;S#=`IB?q2LW{eeN-+}itJ&T!?6eaQ z$N7a^S}U=?b8d5UF|9E|kOq(Mw!Tb8x)42`u$W=W*{bK0+?He!DjdPvx-yv=(hT%6 z21Y7iCr(Fkfk5SM=+xT88dx1mD+?22gTqsc3yV7|6O$9eqtD-Exma`35+b9Laq!r+ zb)ELCXDqiIWwF?rVnHZm&RtOQ4t2?W`G|#5nfT&)7FBkvu%6_O@)t3@^n~J?ZVlVO z7%*vRC<#iSWJZR#Cio1_;#D>X)>qZD2uecqpGl2e6Q|eb*1>EnF3*jR3=U5&tZ)4` z5!$=gW2nwULqKDj*|GGYhM))A8|&-C3+vH(x+FhgP;)w!lniceuD)2PQI=-r;N+3b z&68D>;UZ(YpWpZK8^n`??e(>_nu!;x5^T&gybtQ9PW!Hw^=54uF1{}$P+EeYLD2Wb z{ON}SZ&u!DinH?Z3(Mu^$w&(EfWa$fPM_u9Y`l;cqo@Bn66oi{k4L2Gk^BbUz3l*N zKH)Y@e^UadGG;?i#Atqje2;z|Nh6{JHdzYYnOlA!$x? z880zh0$rW>@JRH63p(L>S^<{ayiNE>h$SOq`&uzgus*CCNxnFY=&%dUj!cYG|x=upu;9MSva+gBTmdES~?i55;vX zRDQ4MyxGmwjg8IC`Gx7x;la`Am93q#iBOPdGj($OG|Vh=iCx=Z7aA6A#fXcm?wQ^U zH|s56&HJ$pKQW=y<8b8wFG6Ijn*u>8C3Bk_;Lqm#{M6|1(Adn{&W9zp2)+a%fnUeR z?*i{U`P~z4-FUeqD=DXdR$R~Nl8KX|u3Sk_0yXWev)qUx&LBrKlQ z6JW9{-Fapr$d@nCI$1ZI#@oN}&fmezKR&zllke3wj+XPhWSKF3=Ha$#uRWb6+jtr8 zVxVlHY+PrBBSr|p;FYLYgLj<+Km@le8Xl{Jb^hx}m)m@pzX%H2^*lcvVy`qtxfm+x za2xsw;nDLk@q5-yp3cX;TYsx1!^!(Q3FM;}@NSqreJX#w(xfKN%)ujfulQByJz4IX zI5HCXlkn|Y>Q6GLB=B+Q#R6aa_Q~@X63B-~r0$yd8lK(`u<9Ld&G0}K0hZW0kgIf$yq^}ubp}euf@E06mw_xP zBWxU0^uVl|WdPbT^-i9P?-~RmhND{hYG$k_B~Sr!;rh=IY%6>B*~8hxw)}Kk)q75E zZ+lzjd+Wn2<&hz{;_7CTz$b5xKjAp9C6$F55A~*2aP%>Jvb5W;Oc4+JoQjo;UwyS2 z6)h>cR#4pO0{!*iGIv~3bT$)nndAh15(*j3`=x)-$WJDKWv6=vj1UMq287(yE2jfE z+TE)QQRKo#;$n?#t_1t;y{^3wcFC(u3~cTVFYGOhX@4Y_yYq5+5Ej03vw~fo8ij<# zsi1G+a|z@i#F5hVeX$3ZKutb+G7jI0VYmeP3y|W8JBQwl$(2JTrXjOS%R3D>V;^sf zf`=jG7#CjN_E_KE+T>|X?e1hpb*v>5COr;>*O~bevly#LK=axcUCqeaxPufQ-j7Uo zton{;U@i?)*);rw_*`;!rSG5kM_4OA2#KAX>l=8RYA(Tb8N%VIE8=fRcJ(H{Sj@vV zcpN};SDBZ!X=q;E`%fBc!*q=d4>b#mLh8T~XvvXrR`fVHDz2$-;fA*btUh>b!A?l5 z9GnxG8ly^k`6i}JYUtSm@5{GOJ*>?l%9?)ne2(A)2nqZ;V7tR`P-3B?lFHZyJqq~@ zZCiDmD?gI+szr63=IbQ4J)MgXg+avlVRcuygB%_KIU}umm`i9#h!&s9uVB|mq-`jZ zlSxHN41r)Vk~@bufzfF2>0weyibmvThBPO!lVh-mnWwc)HRm|1QQqMAfy~w11-wY{ zt~MbGkD*0I%8Pei`btAxr5`TioYVch%4Lm;Q>5#7xz>@qf$>%cH{TwjBW8lPM|rC8Ncml5MKySA-Y zUi(1%;IlY=3A}53ml%B=y})cp-d4d!;xs0t#JfinUgvq=6vo@#}(@d573a z5>Qh9q@rig@Z_!;KQk^mv9Y^xSV+jd+cvlmWXO+X0v=_fz0WgU6v${Hs0N~jV5kR= zY$S1LnXihn-uC9eC1oIHa;zLbosfII_DY_gik_a4FFk_~go%kSBb}3vn}LAIx%%wg z%!}pclAOdOq=LRx!yR?;T4Kx?5Fry;Fxx)210{bUzktRj6YygBR4+j`fi<_s7L3T( zI6WTlxw|l2MV7f2^#Y#WHn8FxXh?MFij+;v%ip~V1ld?zj924Efk1H2;bj%novP$2 z&~F)`3F_hx5WaZxXJEOk0UP!ncj!@Wa0dqS-m{{=f~w@1*#ghOGB9uBtV(zdUCp;5HN1l%UY=qJ{V!GC^ zdj`NN-W(tF7bgZ&6i0E}eYpgjlzAm!LoPv3m<;23fPE;?p69|&a|v=u%1kFNG0@XS zh)jxCCq8!iXcn04Y$?etDR?!%@LS6~&Te@^f_DSFEmlgm5SZPma_gXzN{L4oRd-Bv zKepq$f=bRz?GoY|5)x|1Dn|w0D!GA!Ms~gw8y*=Yi<(bH){Etp&xe?xlJ-1t5+ec4 z|NL#!ux@x;*?N~?sL6>6;a21E2no4w>_mnmMy%r!^k!=IS)n@zJ?3Rp4Tsxc27LY> zduIVqRhs^Pc7MA&JF^qcj2)y10ulxYNGTv7-Kd08A_$@gih)>kmmn!6At2q|-F@lq zx-^{sbMLt_=*;eac4uQ|JfC6Rd*6=deZKE|?z!jc+?D*}K3FbHw_{qiN#LSO)KjLN zU-K(H%3efTR$4C0oS@mq^eDa!wj=(Lk6HG7D{$S-H>1Q-o&C!_CxyAKTwXw%4e8HO zkp20OT;@T3Nm<4chsnNV5fS$Cb$Df~#(nXepp=Qb0uLuE-dr2I zl$r2C_U!I&FB~}QY-4Zh;>;%@LBCtX(l)hu+YYi~v`Srph4KKU^j(K%*-ckXjE;Tv zt<*hV^yx5j$mD%%%_BQ@$y!7gHCDZSCc*pF*HYA?E{;xCF7}+lqKtdRtvvEO-d|S5 z_!vwAe;J#(J=sb!LR9`mO|fT}xW!|=v@}^UvBNv}9oR>OMlo~q+<#Ntv$C937o&KN zT?Tg3Bby5=BgyuLvb**pE+5LZiB|9P@_OJKZ|R z#&O#t9k;$#iOW=y5Te-&V?;$oeQ59gowUsCW?`iR>uY5lY4TEnXcRT|e!**|A@y@> z#HFw~)*f#u%uasNkSh`?gNF7wHJH=!)9dNqtKA@6Xis4%K$t<1=6; zMbXk6IJBQ;&mNg4{`SQUkMEvmJ93cxgrtmhd&iHCm@B1sE-C!!z)t>m(gDxxV-P#xO0Zx7o!DeLT>t=k^g zk>%H^p5h$GFW+=2T}E&#I1_!DbKK%CS=}QD@;1fo!s(M5cLSZG)Oj0Q z49cSUMImH!cy_QTC!?UKetdCx73nVR zNP6=o&@T`YzYYtIN{EgvXlkq+87a!kPl}BUCq)IvzRPN#BuL8S^gvNoT0wCw`f0;l ze@j91n}DDILZXoP?1Jev!i{Y!%ScOJQ$l!nfFJx9{H`v$6Zr;q|EUcIQv95xQwBpLh^kA}ado7x0^NHH}3%Sp}`5c+>?= zuTE8!<`)zcmJSY<0)>PZ#ib>MIfZTGOQ=;$u1r=G=jLV=c1;nU%rUzMYB(b(Qi7U!YiY-j3o*(+*oH*OnU6PcZmeD;-yt2E7thBV(6=bBB;JQj$nhVl0 zsyj$O{;+~9H@DT~q^8%j6E5W9k)`sotOzg(|A0XM@TfO2$tme|y%R8V3kbfnJo8OB zAu7l}ET^LVhsThu%#O6>W+r6SWDX${Q0`jGQfF#zYGd8jvqi^y=Zj;q!e0l&_`Z${ z&zoo`++{L@Ac5D^*#Gzy-~FUY(iaAR&7s+$f}G5Eu@R_sf!)Q$XSb3*s$E_}nsb^- zhUXU$6dv*>@oh{|Q*Ys4RbvBXp?%|I7^t6)d zHt6^K#(Yg>VNPa#+sFcpSpQIaUPfA34Q^p`d497oy*f5D%%9li*Kfii664~_TL%^q zh-%2FiU|#cDF2X<RGHjL5j409esM5xKEdtK+CsSRbq{Nsb8h2mJg)BlD`OS7AoC zv$DS4-BXdC6d4N3pr}2)q`f#bqpH0RH9WA=*3SBz)U?W$exjYN_SY09Muhqi3k-`c zZm5GJF(Crur@T|~| zw6OW-KfLsxXS`@Q`)QzuBqQtbug>1_=^Fg$+i);2{$pSgi1Ep>IX_=<`<4kUJq!I& z0(8{0j0|U-Vm-z-up8%yz$mOOFE1}FtgQVCv_$G5Bg7Qrtq4G)d<_4N)< z4=rMc*I&-s<{CJuiSfzb{BPU;Y?jxTrza;Sr)Kb<@(rVy1pZrC%#7&~6RZ&6E#(!f z7QEACoWET34{yU-U0AD4?0c+MDJWmh7dh|!;|GTkSV!=40pSx`wsWZ+Yd?AC;g4AD zsv9vfs23F~nJqv&3ynGe>XPZTxr%Zd>db!X*xaIY?&17XiaQv1zQJyh}3OyBgLZBo~V`^`@ZOagx?bF<57v3*k7^?wtp;TEqH zSFGaIXxO7Rcrgs$u#RkhGUs+idhiw+O^mdKht->f;uZpb+OMx6GZXrE`@Rt!cPaU) z?=}1c_>$CaienXDQkC*c)`&~NU$wYs1<$Fn&*i(RLss&)o;CI>Wo5p10n5Ju24?#+lVX!o^1J6Y7Lc{F zvb1pjpyb;AhE(U9vSeh`tS9)4AIti@ec%!vm0Ul*{?AYDX3s=ddi>ke%#yxEWDZ#_ z%uft{<)2yChdzGn7qHPh&=48$Dk?sw^`|#@{~o3{ri%*F;$su5dZ&NM&Hv@|74qj< zk5V5~izxi6-&?-FW>%2p+NQFEsObENt|N)n>p7S;F8AV^x< zI|1hX46LFK6$_t;>i-0o1pY!cJDaD@3pIbO*sa^KRy(~qH9cRQH7F>IXW3Oc%q|A^*AcftAgrpY~lKfs@9M`VYuWysZ40Ho8!dF-R}oFZy`8dTMnF z{Tp4V%kPm;?wZqe%0l0m^tFCkjj6=G?GiW}9y)MPZ1`Hx;=d|^tMk31 zB3B0)bf$BDGrt^@(VeMy_N1_wc61Lig{=9$dT>cX=FZ!4Cu>KMLx)*3qS9LzD{IsA zRYWgq-i>PC{_8zIm-xmw87`I!3b&KSkO>6u=5$L=Nc>4;dCxC(it7oLZ?8xST{X5z zAwDqdKSb+hyMeCMnd1UaQ#uJA=3k{@t?`N+57&v)vXSxHMg|%(svboHKl%paZ-6;u z-qzEM_b8*bLtOoblQ@OUTD#rmIm&#)C8Y~NO1o0TIS;dQE4+Vv)h7uifxnQY#klw!P9+a~Ab}C#gH)0u z`oaIQ1g@Y4pl4sMb4QM`wDv!A^hMi8paw&wDjjI7%3@%dkR3f%0U=q<|5 zD5_`}Kp%ndpP>gMAd$1=#$9&eQRyHZ+EL%#e?Ii?oE^7rRV0qa{P{A-G0{EqoQ4w zels~k>o8jD%lOocL04y-tzEC}tMP!w)jDKjb$QC-`4G9}@RQJyca?MRnl@*M?qn0c zGTc1!u68PH7#aFtrw0-^%%m`??6va20d#%#x>ol$Y<>62mdBvc^Yd{@{Vq;8Tl+rS zfQi@bYt1l>n=1_s3;rq7KFK4_{yk1XqpuoP6I&MEMGd;T4SVD)rYxb4nb=&MU4ZOv zklmr*A$&T0U~P`j)%E<$*_Y8XX%p+jZ&PoA=oDqlzJ5DbJOl1@b75*ODz4Ajkx;2! z@MKu`TGLN_34tJiat1@k^ydmccu2-#a>6i;^r&9Q(gIBQz;tRDk`7% zPo4Bi9Cq*=i_ToAUtCP87;$rhx$Cj@9Q7$*DkeO@css)j!v#42k#I>{*;`%aU zVmy4TgwC_>-SPct=_@9Y86m|3MQMfQW!31-E&XSr$j?>Z!;cE>-rW@wY}{M*Wg`~Yt!I|n;ETNkgO zw9HnpMN*dS^vw3Xi}rVMg(lhEvNGXhpAL^(!ddqVoU%J`ZL&I#HTtX8=I+uw*V?T$i6_us?zI3#;x3jl(eHm6z+D*6% zt*5&oHZnLM_NDtfXIn>za`bY2TmGgS8N>GuHpN5*2gGefIlXj?E(z;K1_(=g8d=KA zi-)RgiT}C#q!bmdKsCTRve;3O8tUb02iV#;E=os?s|Mpup;fqfrQfo(7 zNwcy%-%=8&ev$LQj_)}{)tpjOJ<3xg_&HcuPbj^zw|hmfNjC?dD4)tX!n5=U`_88B z+R#_dFu{PclW)Yk{<$ChB;0QvOagx)n-l#DR<~-XWov0&r)_c;TRWEehSz3L=f1g) zbPfkSt~h~!*Y(tZG3e|)dwfd zg`&*CW0Jih<`endi{0p7=WIzX1_Vh z@wLI}DSPYgF9e&v(ypU8Ur5eXwZm-mgyVpidKCj}^=_RJp{mWcbz~VopOMzVc)57j z(QF#(Vha8ysqmT9MPzPc<*9z_cic_OetOB)FBIx_%QY~b!QJs2yph(vPqBEOX0<}+P^AVZT2YBIg_iX%Q_tIG?MS`(<^?&#SYzke}%yL+|0eN4xw^K;>b9UArIoNY>m15b+vgzRe%al_mdGx9YsT8*o< zZB%~XbPEUb(eCI(1o}Kq9T^hG;-dO1>54*>8_|WH{{rR)Kd#TiHLh2V+I%jHh z^;M|9JU~qWx%Pf{{M`9RRc)=L--g^`ZF$5i&WW9dj(j)a@v8gDcYpTzpP7WtE5s)% zsa}-iS8&g1Zy$VPv4j6`@$r?W-RaGB}vM!57JOkQPJ%AmP7ukQ+wwOJ~YAgIPLzg>A%^w1>iv^Fj~_Yk4H`uUQ3t=>cS@1kelT`;ePyX=FhlW@EW;tf)G;s~J;9b9`;jTe*S-d{%Yr*b2@j!n-@u= zH8)b^sdkR#>(Bo5=WoB?D|PSQ_4JhUf_KgEFD2#S9olh5rOPX8QwzNo z?&fTiM;VV042JsX>65%(X}+UNA1~S8IG6;&zxV+skKVnyqipvEu3I!y^EI)__jx8RR8DN>C63)TYi9T9 z(@P$Sj~|Us9FVaZE&E ze9-B|%B)@%j`HuR3QzKupW!P%bEb?(pn^lTQN(K0tzm6o5h;rv);DcB6*yp=G!mZx z)eW4t920Pw$*LQ@ZO}+YTmPNw(EWt|M|T=`us8m}uunC0#4Vs(K)avr`C{_GMqUz5 zQLl{bLAQ9|K!^v<-mseUcAt6@(lxc7Vq42}uH;*9yc?V}7v`qYS_GuqDXz`O;Wi7R z2Q|%_IYI~TB|@dcaj^qD_eZ%M7fQ!Jc1%lyqgOO)zt~gAc&e1pe!^ebnKOlSj8$Lp z44TKU&LQg?6Z5r26Y+5{q%g33H=gu=uRm#58`_uo&Y-M5_5)xu(eM9hTTKcba?5uHf z1H%Ql;&<^VaVGZnIrng=o>jPLas3z_73*=qN5P5Fz0KMNatwQDbzbIIl*U_Xo!L)z zR-Ml=B*f*hC+`kEN>Rld;Vs!(_S%0WBl{ECDNT9%kPyEoA-X$wX~_3o@Q!NS`aMXP zN&jrmQ-^kP%HDfZjmz=9E=v9l|KB)Wp1MH8o|#|e{qqr4n&+<`WhXyVJ3({Xry zKKBa=(dD{IzVGBY=cq8JGQY!=yUEDD2Z?H&d>fzMn)lW+C0SH|7FMnM%Ckczh}Sc9(*mpcF!L_BO{{}<9-kl z=`JT^Z=s2}*T#Aa1jgO8Gm)F+dI;vnFP}$g2;s4<5iO+T@ z&?^Q71Ob+Rq&OdsOPn*oV(xiboMaHZ zqGFvkxIrrL_W>q>{~mffW}MvHE~(W>3YRkT)lfVizgM?Tyh6D-Hi3VeIvyA}`r5dx!xHgweX26@frYGFtTC2T>IK(4BNjAeq-HIgzll9E+? zC(FK~sil5C?n$_RZpGKU`5;{p&CO12LS4Q7PR++p)qi!eLqBTpykY0J0^K+2)+UgR z#*JVJF#t3@4>+TBOZmJ53~@l9RN zp4WeWbM{dwGSfYs_@svYc8^ja(lxy7ajRh;V=?{Rt{a3(dwi`M>6mK&#MO7VarMK` zCfAk*Mm4U~e??x(Ayh?ZKm18oOG=iWV6XXxcgXB5`UsKrR@_|p+fo030e`U&5^Hh-Cn9wO)?5!M9do;#nz1T*)7Bn}%n2voxxggQ@7?r6xIl=-Pn)t5zuxNb+{E;CX1qdyCBNOA{4h*}04T z`o-c!;%_D<%=$C%?>&6s@|}0N&o#I?_8rsIE?Xj8Xc~*GHD+P_lhl=qH!4!3&+~`~ zUyU6>W|2)>D=h&Adg<4pa!)OUXqZg=3da$ox+_7No1RZW|3N~orOHW`{Rgh;hb#>f zt}(8!w8h$*T)Ft{rRNZWNBTx^snMZa zzT4A^^jy;vJ;lInoihw&_mv0h^L|H9E@NXgL>&D3N5P`xd;g?y^J(R_`#UFBhF;$j zJh^wTm_%eJ@i!xD=F<7ZSs1u^r6Qvw<)lRTq>W>09n~)}f3b^B)Xu>_^QEVoq4CWd zUIlJ$L3$^?Wu!af?o3<*2r|*0>TY77q5tNo&Qm?c9jwQ+yxmZhF1hK<%Xsi_njY4g zQBF+zD47^E;e0#!ik@fB5lM}E z@%c~GxoP$sI>}+-_n7by@9R&s4}DGc*&cyAKBMdJw;;ae}e!l!G^pLadJVSP4Bt4h?O|=Zsx9Jty9lj-JvSk+i}O5w4id*qPUp z{Wa$s@;oZ$BKl*6^o#|xG^H$pO-f)ThJi)*JIXOijzkU(Y-%o+$|H$P#Iu>YnYEeOwV9dK=G2kf%5^)821J`STgRpyjBEbzm+WsT^QqCg z7zz(lmmU{yR(>-`YcfoyIvLXm!?>8AI>aC`sN{~HB7Ed9dHwFt35}7^{1MeBgS3|? zqB_vi+Zr-9u5LVVSZz8Mw~lNsq`n(skQvg8T6|YEedS^!m+i3Y`sVQX#2xjjKYW(` zJxx9hS}A?OVd|2jN?li)R*Q)Ry@zliRN;Cbz3O;W^9rH;#4gOtOa=J&Q%Z~)hA+=8 zulBW#UVGej@JtmwV-bw%0jjF+cn4e(#$95DsO3hD!H#s%UYT3 z8M~l8$Z=;OyJxvHvQF)J-M-ibrDr|XH|u2W2mfNcpkz5(^sZAfXj(W88DH9*nVR+w z?WUKjr(r3jKbm{wNa5cOcPLwq#a4_6>JM=k%~s)I`0?RxE#G{b`{lk|N`Im5Wnw=q>sm~&P)8}~QJ!(kTv@>u? zvRw3Mh(HHneJn4nc8xWgSs61QI&_$pj-H=r|5ZMEm0<|!yKOAb!$5x_AV~a%9uF0h!OQ$^ zVtWUWo*Tx}OjJkp1B$vnkiY=3V>H5g29kjRf=B5^6^$c5*zT;atuFisz4ZxEw2t+!~Y2_2{B ze39HSf*=vej@;DyMbyN-V{~0z*f!dxF&j0uZQFKZ+ctNT#IW{;w_jUb}Xj6TkGC zXm7*Jui5enr_{VGDN@#(pzLJgvNm%Q*Ed@_Qx@D4GWKT_{Is0~06L~2$E@Y)dr;C# z{vOisnLSafqeCsQc5?N3!&0cp@SxOJkOuw|`}QyWWB~|RLym9%SYeeS-vu8I-xf>1 z{FninO+?ULlUZK7Qk(rC$HhWZaL3GOyyx66DEZp#ntbPGxp94NX?P(d{6|^|ker*F zo0=N>M9mhH4fRe_(%6Yyp%aoA;1mMOZtCYcJNxH~oG0ZZYUBh(kX(c^fkw{v6&)k2 z*?y~;Oj_GBlbz`cUu%#rjkRa|Y7Y6Jd$N+E2qWjknfBY|+wDTEKcZ9|vv9Z6QS7v` znref7Yui%$8;ax3b4;Mj-`<><*eAGqHExfeDwgYK&0z%c4d>Y{=pF_A1=|}fOuXel z6sy&^9vW;xZ*#4e6;UGND&EKC{5z&+ykMexZVAM&P^6I1IC6?;tWs-r{NfI7 zOy$mcewOt6j>nOt6$DQh1062uvMF9aCu^7xH>vW(;TAs8!>gQa`#w*YWkV)St{9=- z#TU&RXqhTOO;P>n%9-SWh`xr=!qR$#(tbBwwg`g1!&llg9|XdZbzV#iKc^-Yj?$5G z+F0>3`HI12!HTAgX}2Za9A+LTC+8x#`w`Uf!e)(v07=O%b=rI-LC0*>j`xN`J(z~r zJnU}TgB*?>=8Hw|-^34+p|#?%B`SOaNt)*+GMliXBU8Chp^+ zPLTnj>```!GpP3e4nCK2yE}5ofJoQ1uXM{`Qwx>+}Nw=oM`V3 z^jv^aBd_K!uhQwCr1RNP=5PcD(-?|PeJwOg$8f$GYvUAfk*rfGAs|#icRieGZ$Q!V zSNpNTABt^d3r%{zt(QzsEf||UhNLhGy(SNL(n~4`eMuGfW`zC|MJsCj zM{iMSvu9!Y82~+YY_t2~QKc8AotcVoHrc@k44t z9~>=Z|L+|XrNGZv!Vq<*IUvw>v2pyOUpBZ%SFC?rKyex$t=%Ny<}LhNDjw}0uk@|o zS_5mE>A50`OQeD1RJI~Cgb-5H5(|VqYxfLMLn+V->LQ#Sb3k+*;$^1I)bnW)8nLyr z2Qs4gvq>c}nqmhWsV@I-C3XdR8bMJhflHNskoMnSW!Ky(j72Wkb`nsr%u2x8P`Rbs zLuEdlr;ViO)!&ojW-hmYWTd5kvxuFSGEIToa;cw*95!LOB{SIwh&2QDl=!v!W;dNs zS_G8j{O==D%9|&7GRbUG11JXcXW$$D9)YCOQ)TCe4Em;?@b6IX%08D2%;<_9obykH zSXVG{FT?X`5xs=IJkLoEEvgj!DKIWDhPzB;1tFNq$<`fJ)}I&7x+#zv>@H80b^{eS z;m72Z`sjpSO7|dH-KH>6Q7PTJM z=$9i!&8Mv`fq*58cv zgXFE^-Q#Si#TU5USc_1?(Az!U%CurHpJ4wuw_$i6T$am@8z(s zm&*E?3}=FM%l#(Ynyl@C^iz~W9&hI+Y&gJQeN`n-5tz1}#M#?Ssoul6i2nk|9hk zwQ!^2KhozYwPYR3EaXZOS$EtVk0m3*+HC#?nWmv{P)8YcFvqOyiRQ0xaJNDzXyvvR z*w-3KQBUMmKl)D}E_|AMZ#PcUdNP;{+HCPR1_MqCb+J!0hBp!&e&K`lc3Ngita@FC zvB~Ezh7&!Y>E38+`K74E1(Sb2rRZ>&f9B+M=*&iS;&mU~l(pL;6!KnpV4$`CxtO47 z<>60R2jT`~?Oy2iX`f#IIxkb@7{#M7(6HBv=^z#Zj!jbG;4qNTQFxuK=M1#0pEV3D zd3!IA-Ib^?T8Kuw0f={7|6(~S^ED;u?zvd899G-p^*FJ#`9Hw{8t3w4ls^HXbXSGYHN%{{Y3UdUnuel*Y*Pv4&6yjVGh>Ciq0jOGJtL=be^~-A0xg7OJ%Nb;+#wJg-$g799P(EV4q?~+`Y+bnCcYG53lylBr_%92w zV6Rp-np<0#395NuWYkX2*VCjrov};Z6FS@g^F@#F#)pP;X{)#C`f;(oZ=eB*rVPw= z3VMS#&3@F4+rb_|KSLl`;aTNkZPzhM%5fEiFrMI{mKgj^57;)6QYduERMy3hv)LlT ztLXPzG~kK22Atn^*B6FGm#T30jO=`OgvlfrH*g)LdB%*_oAbq;;nqFcT95#}@*GWLZ(-SkF}d&|vvwZzn=yW-BSRH9_O@qy)mGu<(4SgytD}to$ zk_I#){id!*q z_0TO@QGU}u-#;``bh-butAb@Iz(#*~zyosBJ{Fxv(fz5<{UN)Qn+~(*6@Xrv@-r)$Sy3#=uP_G_4Cr4oR5W zX?M7_b$2-UayCl^VKbNI)Ru;;As?nqJz>bZ4)huIPnMM)rO({k)-<5taZx@KsB&Sl zSPPjxNcomS7Zja*+hK6LFV;90vqH$Fs0wh`$)KyIsH;ahEVL5w{Son0QRE2Z1a{ZQ z*7?_bfH}y#$6TLUs&ng=I(AIt?wa{3fegaKzomQ?7!TMaE?pcw<2?L>4pF!r0>=<@ zX%|gS9S1MixPW-4!8_DtTX)g!8>7x_*w$)Lsv4%XqS)bm{M<>)LbOR!?kf0AQ`<1g zm(fDr{cNEAu>Lbwe_nkOQDXakf)xKeBN>~9fraJBL!Pe#gUM^QuTXnXhNhqj0an7X zr32Rra{RbZg!G7FbEmx215|rNle?jmrmf+F|EaE}HgLl`BPl8CRx~8^E$SyFD{xJB zZPmHPcrkPqCf)k+GJE?w>T;*lNv)jx^D_AC;NY2qGeTa_b=s1rO=@Uaz}|_zg;M4g zo9ha%Xn-flyxVJA@QKOeLs!W9S&H4ud1Y;*OgHSY$R^(S_@sYjkhxhH9`zOjI-?94&T)q8 z^%;0AWK19!S;M8O>CBgtQS;aA&90i!))7=qK%`s}9FeS%)zxo<1k~4&lGIJ8US9%y zzm#WhSst&kHYiz7B3m%R;Sc?Za{u|in+RmkByvXqfHr^d^_)(_?mi56RJ(a34pYj@ zw)h&{>x$|Q0}fO|H~xgS*^;p?pZ4G7*ZX3P9vw-I# z%g*|Yt489Chs*|13?sq8ERM-c79&YOC6`crGTxS_e9b*mStPgd1^H=(JhajP{UEZV z9oz8ylz0Jp^01Z!fvimLSk^iY(}?U;U+o9p@WO_!wOM&v+Sy+g8xO`>vZgW*xXl)M zYwKzP>#hpG$=?SFM#;b^Cs`PGswq;Z_o9MYV|)Qc=n#fC!Y~KE%$w7(cs6<4gSwFLM zox&oYM4yM){z5Eo{W&P6@|;!I<-h6%!(NVF1G`1Ov8n;1V}tJ5`+J&*@C}Tk5}1wl zPpu`#o+>uJ`yOaebqL4vGnhPGQL2aPpJ^k-7a?4_xT!sys z4hPe1!rc!)0Dx6SPaav2$hE*_EkhIT+c14M`mz|4hH*;UDpJPqn@b8lzs!)INvFgd zLOF@{${e*1{lLNalI_T_mZv>HF>k{&ITjXZ+Y~_ZEY$F2ou71OCa6%<>05)e-NF8Kr&76H#33v0^Z)1&^rzqh$y zR~gSk(u`}4k(s_8@^QT%8`hI(? zCJwdsTU!{2or-GdxZhXX>#g{8PrD!|F6D@(p$=t+xk77YfRUm1eZu9lHe6J|pK;0i z$pGAMU+73Wtpsf(85!Zq9?-D2aDDHWNfzhE>P{@ee8#$w#Jxw~AjH1-7n=yQKm6w4 zOInY$K8sbBhY&JpaVDLpRgkI@QEL>L`((Kzl+=7zFuW(KA`Mi?kt7K3SgW-Zvf2^M zQ}10D=sv>i#nx%Kek1+zix7Lx-s*c*#X_|=;L3Ob_qy;%M|&nne_j@SX02A9X<49L z=&@L{73(nq_!-VlF>Xhn>)wuPt-VD^+xfgJB6BC!_doVQ?Q7jjl_d{+mp4Xt$Fzc);z~A_t zV|~5f3w(`pZRL||R(?)T_-M7Bi#0O>FLhTQQxwte;r&al6<5>D_svU+i_OgI)|I0w zGq4Gvls%$48xpJ2L|<`=MUL9iz7c_mH;Ayl~nHxYhZL(h}cNcufi$&E$0<# zYo=fRMhAbdOJk3W)>!+h=b6SvM!(`xdY)gT6i?yzIpeozsmKIA*}%^>OnZjll`bB) zQ8*E~Pp)u2TypnBR!|Dun%DdynOj|-ALVK}=vIO;IvS%T%@g{rsgjz~Dm`isCDr>a z=j9|blOKbcp~ULtH%ZMynShwKQb@@$2L**yVs_Bkew9sT>Xag3Ge<3C zgpOqw1obaaI6TsYHWkM_dNT+(nhB3L%1W;4=GHh?Y-T<7=J6kRbBD~VyF_Qz?%Im7 z&^DT^zSos@iB2^2znGsYjtPL}>mEBCCmd!h985zOxf!mqnYucWIV%Er*nJ$5Mo`-F zQxSeH!}C<7;a;C|=@FgS+pEbbkf3Dg44YAIvqbay0;MEf3|BUKsv%jvQq-AUxVQQ= z5FKaLUEj}k6c5ojpEm@)$1vy_TAEdcQ5G|u*IUPI}4acvR{n* z!65Lf;hqtf?1gk(*gP?-HWPm)6=Tm`A@BSBdk)7l9`uL3F)(q4TWee2=-yLdTw7{U zn|Z}$xYjnk+P=Kf9DX|B=^kX7Q&&YYv^crIKC#5b(A2c8yLKJJ04~+=^QG!3LPrVt z>jbut*5;F=F81i@!Q6tU*uAQ$L5P_Qz9q;(xJ(Si8O)@K_NiXQs*1n?yeusuA7i!1 zzL9j<7qpuf)DvteR##Pc*M6(1a_H$n+FI;hUWsrFgk%6O#@4u8P1Y2j1$Rw?TaZQ7 zNX*rC_3V*Id=RPikd=CofC4ZRmvr(2p-Q@99b9_Pk{}uB?q^_jG3fe>=iL7UJ!=2^j9GZ?A7?==vylbH|MM3i0^^q`1F^i*qUM8`i;r zvHj#OR%%N?kA=U#xizW~3VjVDLtPCTYjs_9jp*hAhv;#KA(Yoh8`Z zxZh7>PqTdxxPraRafUj2dV!d25gPR$G-}MfT`f)W)ZVA9JDM8O+6RZf~i5zP-y8j`>gpw{sNTCyE=xe=3(TJ#Eof|1eS->*;_5F)WDImj=M^C~>|3jfz3SSdnx2=Q+p8*Eu6pa&{##qs;Gz-JQle^rTqvE7WE;Mx z5wnjJQ+NOO7ES={qw&SSlqPHr&Hgs6x5Gj+*w;7xqXX;mU*8YvD9!GTtUD{KIxBoL z(aWgg^D{O4Tg!03?E}gjHT9By`>c~hje&NL#=TU%(97#CZOhx6v3_tb0RJwo@!bsk z&b1`;ww7z_t8%oZF)syJL-$KQBidViS{sXf^T+6Xb@au}!2Jc!71vW@{;%aLp!?rj z*3w={&(igMZx!TQkP_CJ*4(Ua<*bayT7Pc(K(uUi?&$YG$xc(%^(=+*{QF~o8UE#=5>UMKLKH)*}@U(ZdszL{m zZ5F+<(23v}1j#p{Y0_`{gS(*+5fP)eus@yD`ql-TEYI%aoej#!tlCLwHxuKf^J&l93|!i zf$u|-&wPBurOh?XNK0&jVS><}9zOZLPF7ydAzlT}Uqmb{%bsCEolIQ?y8F8c+7gbT zb{=j01MJH2q$ajj7iW0*CA^TC12N6)-P-C*tM)c4yr~~|ZOicRM$WF>94+}+kZK)0 z+>lB5LB{qb*451j45`=)94sqrnrjI~wIfoVS4Wt`o*`cvUBz*-v+|AtYf*WZR%cd( zc%l7QVMnk2mKAZ=`R%Hk0^Wt+UtaK!d*1IxM=Rd8b0Zci0ObY$2@LID-^=_IduG-t z+>LXNp#Rgrv051NIgi)hEBCE+LdfHE2Ue~*-tm4oCuf&y8SN184wq&8Nt^IFD6P(l zVrd^uHeKQXB8ULvJNw|-+@%(z;8HJU`WkmEF*u?lel2sh%QAm&u8aqGwdpobH}rr$ zQ18-obC0AR_&@;~?+EVAlz`ps%(>pg$+N9(=&}rN295gSLe-)ukc@;IR;?XJkp@p# z-8X71_60h;kPhDmybc=na*G3^cP*^+I9PwuLj|u%UyGoL%H}p^9vryu>StX;1r!cb zLo#LagI+3wBK3~4sCSrHh^1Q_W4gO?n>00?{^Fgkqv)xxOFdUmy zp`E4aL4oP>xM5N$nefzhBVpV+3(vj(`g_?aCogG4v0!&XbcxZXB3|vR z;8E}QzIy)^SlrJrco7|4)IvajLV$u+mgbL;Y!!hJP+Fn;xytdFJH#w^=nxYn_0T8M z;5)B`ueK5Y^U(-odd1Aejct#O4} z>D#`@WQGR@23}YFv!}!xaxgD9`}yY26iz?zld~vQgKKl&PMGHwG*{pfa+iXsX;vIM z)6+E7)y=<`&{pM?ZBFK!r>tn8+PHcO4JtxEpE{49_Q&);D2)IBH(;Es>{cBOA3dpM zH-r6wp6lt|mq=r*vdjKfW+`-p*ZRdJ@#ByX@!th6sxwmwgtCgSYvQZ z4&=&OF9U{&ur9yBx9G-Hoo#R8T}s?8@AtYYFYl0*RmUZ-ZoBk39C#Bb<8X}R^^u)r zlg>)7>YRsh%ZX z)2wK<{uHq@$lb_JmaT`j>ghsXffjdYmkLNjO|7q-Xvr<_y)#c!abzV^L+2-@s3X24 zT7vp0IFGRhSocm;*o!O-BK=-mQs6&+w#o3!%u(|}+!#M@;8{UH+ZXpz%-N0pR|9D@=sY1l+{|Le;^`Puj)9xApK;0^LnY(U*i?)C~vFh=HO>m7MwOQDZZNI+Pj5!yb13O=n1Wki@SICXnKeN zGCA@E)X+1;{_Wt^^_8-6fLe4+Z`!EA^EZd)OC?)(ZWsc z&Doi|DSOJdSjvdn7D`L~pX0Mrf414s8Jb5qv10Q|Uw8Bd7P>WgMm*}TgWWLD6Ol** zNKeAbwPNLh#igxmKFXqc@znWXsa8wH*)qOt`O5(0P6ytouu*$@-U z(I(GD??t>t*C!P&LOeC1-NXEa+c?{e0JsJs&3pN7Chq9;1uqET zM!Do5B4LTSkL?+?-T*(3;x16{_~G48whq({?e<+}TM|DP*;hlvmn^I;;7YXL7uRn(J>^7-ZEe8J4;#xyf_2ZI|8jM5aXp&gU(Lp^o^)beyZAY_R95??VC@Cvq3pjUC(Otw&9(bVJywIG28K{~ z2AA5A^rBM|@F_6KgCfgu7|RXhZEFmq>EKkpZO<@!OyrV~>(a0!roAET2V83nchx|% zA6TZtBDm7FgU!fBgx;&U{~ajr(Epm~EfPweo*L$p+tSmQ+m@4W=d1hrc3QS^3fBw? z?aD_KWuhY@BBCM`rtHox#N!_h$-(croA>M4iL;T{E6$=L@D1xTD_REMR|UBxCVG|) zbu%*(KdqRWnxH4rtrp!^N!6W6`01e zvsC3WN9J zQvt=6kr>hc?$-VM-`yFd5v!iZGNaZ!0`C4JydHB1|CBk>{{wkr;6J}d`~y_vf88hH z51AuID`EWqe$nHrv=IOxbSwbO5E#rYqZmNg%Luo=y!_)PEHo4v24>sve;-f| zZS|Efj%suixVuF0pNEBw{m$_r-~Z2qv)@V^sAfL6a-XYMKj~ZqTM+nL_|<6-^xG21 zkFI*cxtInk0%~lO*sjaTgB+4Xs*e4t_WG1AVlm6M`PAWCws@~#9}fYbup>R?I4=n# zba323c+!;lAMX%7pbCw9&)!r)v0dq=S(ULt8g^Mv{sB=)Mp8ktERg{nE zwB6oIU=KgQC}|sBiJSz5Z$rM==?;*(Q%H_2Zn{>>gE*7r`WN>2xpih4$PwGTYS^eIlhdos z*8=ynfPV21ejN848=xpjS3E+%oC8y%1$X&SBIFt#s`h9;2m_(2nsL3lG1*$7w;}qz z%+;x$Gsi2<^8V#1-hfPOW%v8AeBVi#v@tnl!tp@xS5M#8k!C(pmPBS_tyPA%k4q|fJVv8Gn^<+}z`V?gY@5-Ekrn;i^2S>8Oir{oTY#1eW zT0u!qVyLW%m$QtsjJf%+79XKD<=(2W#!%;~4PC2?d#oGN9oZ}80~1S<8XZrU&zf*~ zTT@$CX{B$AEvmLY4&G_MyW6e2(gR{l6W7v$yLt*&((Js3yOO6UuIMO2R#e;6P^7FV z#&;cc^^N&W9{$!Y1#Ygg>$x0zhL}6`6!myWv{cQ7?GCC0g`FAnH=JDT@;Vx_`|hsF zo+`)4uh_{)BXV+#g|A@uXERM*-OJxc5cS+IU}0Saa~ZgT{MiOdz5cziv*o{bu4=wy z*s#a!ovT|y)AQOwzxYMZg#H~Nb&*@ukhL6$^Lj$QepoT<=U2z~&8fDGF6&Y>@_l)u zyc-&Y0+{G2J;Cg47<$FL9_u>8lvS_mfYOw50_ilOG5Aa z&)pb_LmD_@S#u*6PSsi1FnDYvIBW=6zb5vJpZ4#vKE)x?lRB#DLE=yY@r0&hye<7??h^d1&T&UBq$`V7D85;km>fk! zGo~qtqz}JJAG@;pZHlP$56~`U5@oJqeiu4i!Mb^4W&cn5VTNgt4h{~YKl3xUKbj9b z`M$EUvqLsJCORN!;}gR7j3`Ku6+E|982^n4Kldi2yi2~dx%~7@cN@(lnzZ(uR9&M) zWZsQ?U&vlZaXi5T&C1$v*<*?NJ+XvO1cZsRqUaI(lPZ=7Yy(5q8Xln}{`&j7YeDNe zX36d?FG>^Pr`e7Z`P-9J$%N*kKbBF~nMS@6n?nABt*6PgwY8H$q-USHFKmNC^Ao8LW2JZpUUWY25I?KcxJAn~OiKyr58w+_iioueCa( zC@XdT3k1CN3MIL^(uqbVU*NFP@{;%n)Frd4`$KuaN4f^Q`Ek_(J`)hH4G$JUS`WCl zkBnHil}9(S!3?iPG7wRpQSc2ZP{2^o9n-4eKOJ=HvoH1AJO#x6Hh>dR}zsxEtE+!>ODXAvH>7{g57LC`Zy%WbA<%|@PUfMCSERq#k zJOuM+D_*S9`3>?m+m_QFk4ilGpP40}$l54RL%q4;n^6sb$*l)6-sJD41Qmv>X?}ez z9@XEW-cZC{%wMFQr{?6cw6ruP1n~F%XM8|j(VCi?Mnw%glL0tC)M~Kk)6-LCW+pE$ zuM^Si$_iYd^5Bqfnc!O5rE{*ju&NwyE$3C}hyspx>`_E@$XnTXi@5Q7Ic>y;yG=m$%Qtk z6$~PfYoywnH_>Te*tLO^j*hjssuz;dg{cV|0%FQ+H|10xDFLp_pLwJAynB41E9Oy{ z*pJ|;G{jP~=@zTgQ5c4VkC3v-@}wk)`cEg3?1gAY?P++uGRqcx)!DlUgl3Sd0FE_s zKr5)Ss2`sdiDZ<^(3zIN>Z(~8TZR8vLM+)!~UB&qzuQ+PGRZGQ^(K!$z)A5 zyXYN@12jRVkYjAKi?$xwQ7;kz_(;(OJthr-EO>mNhN1vv5Q;}4n!MOCyJWpF?XVs& zyK}bJ6jMsPZ@{TN9Q%2e#K{%i4&wmTB8k23->ZE`{$L`{%*q-b9#*jgu|2xW5I5y_ zcH;4Vne2NH4+()PKYgY7s!eom)jMim%qVqDuM!@kDJy=g`l`y%kbZ7NEg?m9=^OQs zG1k)`jYT$>nQ#*8cI+BGLA7U)A|FGHcVEi|g>zK$0%1;1lv8BEemiy|5uf_jB}W=< z_;L)o^lWsgcY<)MZZdoeIYWWrppUuf_}PSb!OVhM`$AA8bi48AwR4}LKMOj-vxs!$ z#0}u8;I2M-bq1-*^WE4*Y?q!3E7>UswD573ni}I#)4Yd`D&*>zVv}8x<>x4 zc~N6{0aJe=Ua%!j@m0iz>KbB)IcTn%?2k{h!N_~_K=Y}pot3JR-@cClv+ z+AJb5fleqX{e(PP9od4T9%ep&wROsZ82*#7*~p0S2_(|#`Nv_-Jood1LR$C5K%Nbk z^)ScAJM`cgq4mP17cQAcl7iZUtQ!9n!*Po3ngr$U!NgO3&!9Jve~8>0sCSbR2l=IF z-e1lgU??*Upy>{;d}zI_2Hv(VrY?DK?uB(^s;Nwmc^{XkH-&+0er1~-AXH!EZP`Fi z5KoX zeO9xbZYcPRg-j)Mh++A1iqqpr!;zDeb(lb^mx%~e5fr&AH!#D{ZmsVbQUU}!!FK`D z@@~p|Tuoqt_B<%FjVwu@GgH*ZZl5^5eEiQ`R;h*ua?552#db_l24il3kI&K_o+_i=Y-L+T~%25@NrOP=YJ2WOrN>WM5Q0$%eIl{Co9b3FFXzIu+uarN4tA1aq z{a})ara^@bS1S1db?brD-!uCA6boAv43yl-u}nj~OlWYp;hdn{u*Ems5Q|GuABSTa z*ap@-6u7@#ZW*V{&%5iKeO<)TR6%U>Dg1C~*apq|5U+C^P)F2ew}g~Ey{cbxL6Vu< z%v(tPbBq^fFvls5D`rV1@$u0{qeWql(egmwu0%7VFhI8$owj3A$YsCfzizbjxUIOd1C|-8&Dn&z6vOR^t6udLY6x;nqlEmJ z{2_2!y-S^M{u(@X2HuGkgVs;ZjHJ{|Rd$!@{O8ck_{y=Pw}xUx!0fZeR+P?(*Xi=V z@!ZwK0wTrI==(CI;Kbmo94zaM=o?bc(C*-qN%NS)A~TZRM-`hQX%>FevGq72N6 zf)!++zTP7meUp}?EGf+ilVWp!y4!f}UvU(HknoV>Fk2K+mQ<<)TR+Y5(~{JT69;N6 zE_ub_f4jTtZ~`W$y@bcQiqZwq$8tU6=8?WX@f|mM%*8++8VISoYf9}uO%7kb67gr2 ze6Vxu@8-=AeT8k2328kY@#}f_=P-~72w7gEa=eN^FSK-~38xxBbnL;HS$Q}|)u{Oq z6#j{iqt7z1&oR4^*a0(R^uDJqKr&q7n&ooF6(TtrnnXf>fQjV?BreVv=&K-tA45RQ zm3F?D)30R?d%_b_uAh-U;oXpM^SzV-iGjO5RsrDgXIaF~IHDHm+rSmW3Xz@mS{8tq z>pFRtg;N$}=$H9lmR>sCOYy05OegER(z?)+k;%!^6^O?=a&XKpc=(CP&?Mv3D@U-@c zKriH2F*CER2v#2j)I9UVX`JEVUul67eRbB>pR@z4oUfOs1cE$BaHlw5*v-P0p)d`_ zDKIBJ4!S#B17m-l=?;P-KP--yNHpJGtoDG>Rwpa}PUzY@45;Oi>zCuIMqfoSR{d8x zzov-^GuEf2n;m?8x9`aBA*#Z%zoiWg6;yVoi5}t;{N)PvHCI**Ft7E#x#aMTAho;Q zE&!DY4&Q`WBJdaw!QhNu0jEK#)}PdY+{I#YYQg){B!rimerZe~71f)^ryD&D{tax-u;bR%z!(JjSAg_m^BLKYU&@4 zusk?8lg^oRPbbsCbBJiZJWYtZQ72g6U>e!z6{mCZNzvyuW_xOZqtwpISDDUs=7C}j zUzQ4TvX^4O>ziAsk$BbezmyBt#ziFk?{?IwrEl=L2v(eFJRY*o6wHv1V|$!qBhKU+ za!?4R{Mx+#i)8?>;ADxJH3{tNhAAd!(ZIw$-Vw>xUS=b@myw^c4!WNS@VG^#XM_V2 zI;uNLys3nKoHiSy@@~ zlD>OuCS9SUSm5B(2Y9O+Tw#;okel(A`WP~r7JB1|(Dp^SD^X|jONNsM{E5xjKZEk_ zZ2Fd-UeN;)N5={wv^U!{H&T9b1Y zDB-;9cVGUT+a90C8L6d_3HiN}wBkm$ms2XXz>ixY*Ph{V`AFWna!h3&UL=^KzF(&e zShakeID_KH(xd78cXe748u1AjVSHExNk_sgIhxyE>TjvH3MmEdf!);d3&GKfM3?c zHHMvQ7R(3Z>4kdp+nSo|F#UNacIM%0D@&@wzp5!~DQjpOY%I^SGIvX3%%-sD$t|F? zuYSyaiEBxU@>wTK=ZWe-Gh9GR#Hgv0Pe;coNv-WIK+l%W0p8%&oxK%Vp0P`*Q9j(- z1}BqL?_FOs)tMk>A9GMb!kVxEg@$J&BQ^(?wnl0{W<*vvbqQxxtW1KjSDJc+=?65% z(xPW{lHjCxzV}a4e~uK1X{+!`+YegPFabWk#g+AC9`4{Q>`N<$ixWJ_Uh;P4)g?U@ z9c5wa@?YhpB_3%0(NkxuF3}kfWDIjS-RrSB{45Or97sUAk{SdHEFxv`zy>?u`Y-C| zx$!0OcTryrmHFBtf3vmE9xH4!vEEB*{P3Ph?`nPXL^Cfs=lAXhjx=E8a<3A3;H#^l z>i;C|{*YhImGo~c++(v59T(Wq(^pf4oEvm1kP=M{*!Wo&r%piqgt_2(U-y&(FxpD* zf_7krA(u0>A^GoK4~79J+m-)W%Wxls1#W*H?%goIrJ@oVsA*|^SJl&*W9H|$pQ%aD zN&=zhFif^>7G%6nFp1fdg4&Mn3vUt|#yYMYegzQ;hW!gMf`LIY#2*WU9-@M${Gae+ z9(6jTiP6XKEBt_H{)iL>UPt`DyJ(DxDlp#5%BsA*z5O^3l9!)T5-g(oFX9=!1(TNz z$;iN#%F4RB&q?Y(7~g&mL0`X1tNfD#cCU`01ROmRQ(aXRS@*lQuWd%)A2Maq;xy6Bh(} zW9{oc_MW|8A)1z&+Lv}|5uq>Gr40=YC=^bp+A@(Xoqh+zU(gxwuuy&-Ge+aD1lKakG4G6LgUp{?XFQsN!w*Y1T-}*3_vvU zyf6!M%SU+*aHovi30XT5p{dtbWO{bn+{GL-V(jMT~NLdP3SDd2z~)YQ8kB3Yx0Pt9v(`Wm`bEzvG@BEAcQfM;4jg@)Ar*yhc(wCmDRl zvpT7A?)I5^I{3K`kbzix#_J>8KydL^=ex6AX8S0}viV4gTV8vTU+L#py-LKiWrtFz zE;E_nYI~hpoBFE=bmSkCl?g>mNOWpz>wou6(g)>r(lz(iH!#vQdYSxfo4);9)y`0&_gIUh8+JF+9^?C2NlZ>OwfY59J0U?K zp?B~8Ivx7k|5)$Xj{AN7w3{SoU31i#wG40Lu<`a|-dU32(mY;33x9d_`;LObZwU?O z3V7=XdTohBt*EKU$$xCCpsPf9xaKNW8~WH53*&@Bl8Z-!xDIdg*8YXeAYG0hLaP2Q zKeXpH!`pr*$ZCbQ=<5fGT)m`NT9Viwh>Hu|`;h<<(pRLRkpa5KwYC>_=H$eV)z|NC zcE1cG*Rb}hZ+tOfps8T0F2dejW$Plz!n$bjdf>vxL)qR{mzTlV&u>)qnJ^0y;p&ZT zteg8KFE=+^_ot2&zsyUQo&=LOdHZ`+6Feis-0T=pA1{};r8t(rfKeH33LL>;#a%l7CzB_qW z((v%Aifu_;D<>sYAOX)IH#axXgAN!$oE%RKz8hWxVbsAEc0tTfDZUL zoSbvu#5*9MSibht`;Tn>{0pYuiJ`$CeT5#G@;xV|&ac-WRP<%LC8_^S=*n-eAiq_6 z8e%pboN3ez=zDFNb3Jq0UXuH5?c&f{x@;+7<_l5V?pyu#uwSKcrU3?cdd39x@*_`b zVdB$a&Q~!^&*qW(7TQCnHwRH(xspC97ACLOCkwoa(xFm)T#xe8qFzq+6iX7VnS6T{ zcQ*Z+Zclrm+lDqx{TuOKe>u>C=zc%nnWzj?166_KCDFMoP0a$`?pH*<@os%~ZPeBg%FA!=niJ4| zMWS`~O^5~wVeR%-Q@J}`*o%s7VsvDg-dzux4m-Q9V+scZ>(5j$d?Uhk%M3p?m*t*lS}ZuN9! zmpWOitG};VG)}+aqj&DQ!11gIuBkB+#r5T*u5xqA`asb}I^UwCEM+bmpm*}nguJLt zo@A}GzI&~72jAX)*j@X)2t_wFtX|BCIRCbs0>BHh$BQX*GxF8)yGqFrmJEBi!%QcZL4SWC>>naCGlXD*f6c{ZW_QAz;(lxAZ>QJ3L)ft zA()lA8FRe}eWyQx|M-yH5$}PMa3UF{r`>+** zR+4rSQ;oZP76t~lo@kP}w$fAF%z||@7o=pD(v0`t?rhpU_0Nt>5BCh-54+l1>OcQG zsCljDsWiX)ufy8yLl&l)py-U4Sb$rBkA_OT`q}3Ql|ICdj&`(u%J$WtwfK20Q6t{T zynv;{HX9`p?fCb_1LZk0i3^?j-P5=b57Ckr27j=>R5XX{JHflYW`$Px%njLS8*ecg zn`dgI$KtqWXRU~Kl=vyW+&W1{>FN0p z3(0`}zom_MX~QBiucin)Acs79@>*EXTJX}+)@)a$6B`^`YXnK>V25d2%${@eFyH=? zutAJI=Y0;*^YD^bo*j-_n_r%(4+$xLxU?S>qaCRXuqC?Ge&Jml8V#+S9{bS~*?*r3=I-9- z@tIxKbaC@sczXJF`14ehqK}x;a{6uaG89+(T&O8qIa$eD!L$DeRSQwKxJeOTy1SU; znlG8TY54j7j*lGE|1#)w88JVwTcx7yQqzr5L3gM!pLjLhb3OQVE9v23Z>;r`Q#zf) zidMN3*Qm!&0TTVd&Gk33T4N#$8Ntutl@sGI2ddT4Wd*=4>Hec@Smea`0U2KH3t_=) z&dLvWx96k3O1o1_c=^14f^O-gCumRTiycjCKRDIcxq0xFG&hN#SF{hmH2l^3MA}QT z&@%@|bcngstiE#nviR?aG|Z)xV`5reeWUrUDnLHM=rfp$PeVqlsC=(CqZj3EramR7 zw!S`wF4d61nG}~IT4s6yhm0vDFcp z&ZxPm)=b>b#v4-zg7B@4brvm7Y^#p1$GY;HIL@28TfaqDXwQ$3_Xwu{ITTW;&5)D= zhmo=@Tc(M0Rz0$RqlfF%YbRcabkBm@@n$9Gp-)Is*e4_@tl<`!(5s{oDVWg?M}PM? z*Q|^nbl&)KFcQ66nl^ua&Th%3;kT5|u(Wp^>pbM-l9*dk=;feJ@!{X*UEY~07m<&E zwo4n_>P_7XeBvrI6YYu)^+`?i4AOt+SGrs+e)IKwN4liy{qdyq<7!#q%);E9;)TCIaML$q?K)QF zO_jHbufD+f-!B9kWE=Kx3rb{Kwa*IYI&w&Mx-w#`wfh${vz*O>Q)l^af^EdoBEX-d z{{0{|O8Z<|ux!kyi9;ODdzK?HF)-ZuCnLU44f=Z3`45|RlQ01ChHNe2=-<}Hl!Lva z`)Fl{7;UAK@~#gbQIT?D4+@0Ilu0q6UXV{?G@bQ*C)bEH_vs7$*?3+`6Qo#vW3gu5tXTgr-+45A*WPJ2dl4svBE2d>~!BmUfDWw)$ZBN{INR3 z{8n34Y}i>yWXYnu%s$%IuF}-?TrR>heN$1G^WH&kK@{^S=K!nIXZ3gU%YmQZSQEF{ z^pegLWQ&cO8>yt7#dOhhgHFPkbsMl{dVZm}!oUzCisCR6BH-w(o2l_t`f2}9;it1G z=nuKBQ=Yl|!S_UO)OcL!sxD@_4_vJ1bd66gRnwC9e}!V_1m^HRKd>z&OdmhT>;Dwz zc69Qx;_aQ>J%9PwUo{Ay0BL{cN~irnoWAARI$|tV)4nVTPD}0VEV1>wv2t3NX9@Lr zcx8M#1brD)5Qj=PI(<4!(R$m8$wDXF+a_gkfr^-hH;YRPZ3)i!)C_d2&3q(#cdzWF68Qd| zVtn=qiF<%-;)I$F$Kcbq*(PU;fdLCGT&)AiVUk=S3_VjSd&Y70iP0j@!@D9C(gbd9 z3+bTUtw&DoiqbBelw1ST^@F;}E~$93D~Kf9i`Fq!n|zLudE@7UAVrOa`$;-!;r5Tl z;Wr^|^E{LFUO&*&_(Wng{O#A$m8?lJafAGS7~R+@qn|g1&_CW5OrgIwi*x_Z&G%6) zQI4qguh*nXg3P66y?^P{QP%~K;l{0PRlt*j=i7Imb<;mu1MF&%?e_kmuiO{Sh1PiC zqeFHpzv!Jke`l0?Uk=jLMQ^2GoK|8@cnX~8db*_x_pX;-5f;hu3B3gzr=~pi>9@D2 zL4TQ4CVY<1E%2M3V$AtnUl@3t%J=EVAN&dTFm1hsS;mJ|!?{j9J+mU|%R9&7;*`tN z7cAH%158w0TsQe=w?{S8Pjt+6?Hwa(hJE)F7d(AVbS{v#ifu>xZNty^CdMXtF)v>} z4;QH<6hzvmY3Ho00^Y_@W*HlaCHAjxUlm3F4fA|Aok`eJ-z=ieFyY6E@!i4q{XKZh7=Z0wc1EK6%<>AMH|r<7Y)G7hs+ zbX)2Q;u?><*#IDZX z>-wO{z7P`)asGmA0;BWNNI6k!G9L=et4v@nv1BVDz1fKFy2_2^ja>5<{GhWu$G>Xy z<+#viY5bqVD}4>Qx_-ymrEi|lwIf~CfUxXdo|T3lxjX5RRO6zQ#?Ll;?x&I(4nGi-(@kN zMrFuqp7e~~)kxL4)8m1QX~26!W#_KR<6qa3VoBK%k?4-acpWSbMt@Cou`BwnmmG@(e%6!yGF#i7EV2{VPHFQFZuSR(k)+G#g zLn4KF(0qjYt4j@yZ!vsDgh51abNI}0u{HY%n2hAdtRGy1nc+M|JZt}!wZ!O*C-F~u zhl37*jsT`v-AywEqhuxviHfiH%(mTXXTruZp5vUYxN)HjZ}KSmn&Py_UDn0CaYR8G z7Ts@MNUtn_ROnbP!Uo4DQr#8Ym;UsnH6;hRcYUd|nedv=-7hZBy4J1+rSwb@tV;Sb zYvx9>9r?5~P2PrnhYqdFlHmp^cNtD=LLF2K^{GKVc8#S33wfqF`(C++^?4_UA#}@v zs|yl>{QS>MUH!36vVKb+V}2dYGQvO4`yu8 zZ|M8iT=WgRJmb?^Up7y+r*82+o}R)f8K$Qv1csKeVzKb@m#XnI0a#P;GkFyS)iyJEj^Q zmsN$rGU0JOU5)M6f3cmfI?{>rY?_U?3M52?+VD=x*SdVAiXK1xvXUD*bB*HF@{%4D zec>LlKuTsmuTIw?J+s|SM5IrhO0w^vJ0L5LszNNCi1^tOY=jjZY&A@m3+TdWs=^uj zd;h0QOjM{Su!@8j$f#;c2>t5O55J@$)|>n+q6e z_pUx3OrL7k%tsi@Y)Hq( z{N0Mr<)ft@Y{g)k>&)!k*oYl_McYO`T$vfA1}-MXBOsb&gnT}ko_p3HJeVZHwiC7@qrgDzI(c89Zf;fK%Y`0e|X8 zTl^h4j|AFp#f4xZLiC+B|_2if5aXC(`;xHyq`-nwK+OW87Y9OXr4f zw4ZInc=x{@`uMRpUU3~yGMZDJ)5%!GyK%1Z zck#(eeT;ga$e-`Hmr3)jUTUTOqw}Ip8_gU{ezcplLHssNEdhoZo`lwx) zZ}a<`^^W@lthPFN-uW9{Of7y0zi_^2U`*oNA`|hB<8^e>X!uJ}nQ7asO;q&`5~%GK z1ncd~F8sUfl$G_yNie-;#q0fuvn!pZ)@2Lv_lvl^NJJP(v{2^wEAcnsdgL2Qi!K&s${fnA!Qn=_AlHPXB^MqCy0E-Sl=MgaCUlb zo_|hPxaIqa`RkDTjr-?ANFOlMZbI1}t$)tOuy&>0$HMqnT;@K`x!I@h;%(o+32F-o z-)Q;QuU{+87dpKr4K`m_Y5U^&@1tZ+o(2|GscHu(_5Te%wxhF3`YIWHoMLOS()^V& zn}&L*=|(g~Kh02ouC=hH)aRv|vHbLmWPPERO*zYG&rRtAi=&8$4~|HXW>dgTN)=(~ z-}@;U3?#ieLE8Y}?Ch*|`jJ*cLnHA}5i?B4==Ekc`ohE)BIuu;-RU1;dS)Bk=xT)4=S}fmUxW#YI=9d!D5piOu!~ zfn>Fd8?}Dw_mJQpCroEF)4mM5?GqI|1NlsceHgq$BI1{CRNa4wdlz>V32yCg?`^c^ z;n;wYZIo_s0ya}te_Bc;-uJ&YGD(^oV{Ej7>1et8q?BZCamdr+ipu-kk$sl$f|NIZ z#0W0rm{>4VR*Q_=W~LKcpR26d7uXI9<(x4!IJL9(l|MVe^d-cUS!5 zv-tb>9|*SZIeX{Zc98Upz8EGo3oQoG2}9sJXh^6zi$wz8u-Zi~Nix}vF6n*rbKY$q zVC6`q<4a~-#ru7}+P#>DT#0vSnhyg-`SF>W>~+ob5<8oHVU30Ig{@T#RJLtV40v=b zb}87d$%xde@WOUu$(sqa;o%o}W5Gn9sUG*#oM`vuYoTl`uRVM4c=YPIFqOMs=%(!z zR`QGt21Ps*YRq&#x)eJf-Ai`nwvJ~yjCu#u z46_Xegv43uj$NiY_p$p|r>Q=xzOAc{KVL1|%zTG&uACR&v+GbvdhJNh%*UqA1in~}MpA`+PlyD;W&Gwe(d@{P z&c^`Pw?XEbZ|#3=Twbzz@0Xcmf1!48cK=#YU0v(E*B{51m~#&fwk@pvUh?f*X>&zI z1vmR+ZE_oIU>Ge&WL@^9zEpQpori+F?PMHlSY2Frd7+NY%< za_k19_*hv>Rgm{=RlLC0t0vhrbfFd-#!-*vc~l2(Rh8A{<(#;2L9RoNd)&X51ywuq z?inDEZF8A%k*g~l5uU!#Vm3$K@kuQlobm4GM3S!vB87++g|&t#%giI%Fp=pQSxF&@ zCVrrhNP5+|Bpz{jFlP5p;AXP7ZG66^;(hCp2`Ht1EW@>KN^n@4=r`N}<0Lj}HDG%v=tgUEb~x zI%bd#MtEF}<1~qg#AzM_fsjMfFYz_pvADkTV)6!x0UFOcJL`Vf`2Q(Iw6y@6(&*M{ zpFg9jv`2i=G&D4P^M+D&V{lMAAUM{NhN^P5q@sd1jTG-B6Ipg$n-=32N(|0)(U+3? z9)g96MD)uhkT|@KBT|N>tE-EI(H%A?i(6aCXB2rn7@0}J&bjPe{kVDfM>B0Dq(>9wdH&yrh_wTzqzr8+Lv{>TCOarXJ+Ao^o;P`lNQ8AI9 zedk@x1x*zJ-rnb5+Ay(@pSk((NB-*g?w@&Y$gGFC`7lk~a zAItY`T9Q9M&$YNbw=_MI_d*F6y4JxU1^thL2MZ|Q=DyD~KfXdChTl&Q&Ur| z*0Y{*J|`z9XJtkIc&5#J#*R5Ownf(YxA*t=MMT0rAwKpmE|M!XH8sKYRaI5l`S{pg zKD^&QISIbMMk-lo_8*@qsd3Yjk^s+1Ywo~6CgG;8uH4I~1rWJ~o!zec>XjAYtp)`( zb>R8dK&5eQK1Ff9Hq{~tE*@T=H-b1hBv=!XhMX46-NW&0v5SlEpXfruMXn$2-dS3% zTSlRU^vVQ3h)YZ7Tn1BZh;Var6A}^K-``t)56;ca)r`J91&pHr**Q2+fhY^`_R?nt zB!gmiclV5M|55a7Wo1xc;KAXc+UfHGtSEv2xCC3+_?IUW0FJnk_3V7+{ckLgg*pO$ z+&cGgABbtN-c)VW*RPyxY-Np&jmSN?emS!WNR^Y7{cbsIN1cj@jKr9^caT+ zG!=t`U+h2Dk}t0I!bv)1JHZRCuC6#Wr(%zu^hk?|6dp_^=TCXPl1LUvWlhb=-X1JY z0$ZRH?MsIbXI5Tb#4-QBKEg2j_jB{T%6M@hMVPVRFa$0H2i~99Ra$CSDTfi}%I)oU z-zcx@?tW^75qoXKOO4yIs%%xxfM1x;t2dPZyUusamvX>pL?5xVV0~~SIC@oZT`j8k zJ^%gG?$YbtNd-Cco}Qk%%5a?R`9_7ld|{O6@J+7`>)8Oq`8{WRCiFkibn8a)cd7wa zlKG8a9zd6;nG`mkUGy&ACtRV-pY{5?C?zt*P55cV^9{@3_` z3$#$YB`Z+A9=|a=zE%lRM5(hs9|?C36$K_f(V206N{V`?uqTzGjK#9%h!(dL9kQ%O zpoCOVGMp8$BioW`=OGvs;=UFZ0+I@J`T6+Krm!7&e*V3|#)GLBydwAT&d*nom6+Bc zw)vET^a7_5W+$yL!bP<}aLW;c2;T+DsjH841>9I$TO)`IP@z8VYn^ajMJ5KaFN*1N{<2)s8S%NCpRBYY!wyz6 zU^qHD8oJqIho$%8!x@US7cy#78k(43_-Sft3JD5s@PK-836kWk*{5b_iLk;vOt3es z2?+_OL{ad!c6Y%H4mCMB)QukO$8(j&Q>qx~&?+R6C|@{{T@~ogkZ1rR5XL!*IbG|5 zEEV_)Yr42_=N#+&z^NITn<`+i*uV2bvD=_N z1&Zj;Aq?_xhf^0}MYq73y_o3?Buf(+$|QDnje;JpP)C`$0`U$o)A6kz-a0v>!CeB#9raVe?8{e8G@ zPo10u6tj+zo}x;IU%`PPi?Gz?kaM0i5&It`;^uN+|0fh$*fU0tPc6_1ehVXmZi>0B zoSmJ?@!*fg{5#baXJb z9?0WAzFGLY8`TZRevMiw2%#0rdVFX>H4q}0`GBR$jk4-b)P*5z`}9!X;bCDZaG@bO=k6y);fcUHwdByA3Gp!Dd_VNJoVgn%h#V5%@pMea+Q zWjxIg;VD(|H}dBEsX8H1QEDGPh*zQ4p|E3dh8Ptb!(S+*_Z;OjO+ic&r{1Un+n^~^ zq#+QP966}bkiBlh$_62ijLJ03FfV8zA{1r-Yk-;Y$Fl3tbfO)@uVEj!_$1*~FfkBL+i3#WT+)$owVXxya2pnp%<%iOq zkp}X<5^J?1_uvPzQz#>$yl})+fuGf?tC&z^xJ0il4GAs>+Q$|C6$^ zGC#n9`xWDuNGver-Qz!>Te3mw36_oYg5P!V`4n}Z0o$l=QJmpl3-tDIA0Q{RYrSaf62(1zTj1 zITqL%E)PrEM3bC`ewi{5C+p1!J?fzZRVr&@XkyQ!HKT8b@=`dE{{%>4DPpxvfsu$q zz6yUYKP-`OkRl5e2q?s0-PzbcnLqjS=M%3SJN^?|!}Cx@?-1+@+!kXQvxbTp-$;@> za45Wn$w8W&mYf8eFLuqhD5PaCFT-HI7KkM5anPyJXOJBUPd}2i>Ux0aUiKh*mQj8* z1_|LdV`vZ*LdOvyN_^Bk?cs)~xCEL&L=ub;F<+o(f&zV)2#%*OPlyPjzI8Lv)d6I% zexN2dLHUVBibpPEgU%8P&}9j&7F*;c4kwKVjAEvta%=sZ?9GDz#&OKoGco4R#m8V# zbndAt@b!qF!WI@dsG}EnfN){udU~kUkwxUbSSCk_4!Pdh-Bpm7GGIqfLZvs@pzAT% z5IHD@Rut*7Zxqwx9BKDFP2p#Fo_W@3Mt~7^bQ5aG3FO%jgi_&tqTS;bCY+J;9Rj%F zuCP2nY8gQ4Kqz+9Z-ScfUJ8IP(5purF;61G>AK-!=F846-pH7l-&E-%#+~K^!Fy;sV|!V8v+0;P-S$KykoJ z0is*#=`n7A^+K_WXG?AjWS*H|Py65bYf*oIjiY6zapDx+jh(Mo{+u-pmANY0f(QqRAf1%-t7*A2n1Tao4aKdkto zg6jbWboi;?gA!eOCXAAHV-x^w>YE^t?)~o%V4B^f zfkHk!m;e}X#BIwlaNwS>moXN(p~3qH2T0i48D0=7FUJ@12*eDVfgKZKWTBoM(P_|& z>$Btguxvyj+(S&mknQdE0UtpZ5Lc8>XeW53Bsl~&pEwo?-90+^BQ_QgY$5h5yl|Zt z*fg;`23RbJQmSKuSdz~0e*UN8VkI5Sl^F??H0t6{kK$F3y;Wb#F!i3zLU&!L7Q?r^ zJlbVDlx1u%kS9zYme)%Gc?GyK!v_E%q!{i6_Zt-qWGR?!a?h7nS3S-0ogca3iHA&> zEB>f)>q#ak5fCg8W*8ZC7&*NpFZrdB(+dScEBT$FcTj#P!-lUFDRgFf)W41zRNSn!Rc4s4-ly{wRV5=t};vMMamwmlB~G&)LL7)U`q z5`YORk|!bd2bBU(z{v1OfMaxIgwY8r!5F0?#S>TmFNfeOhASYpVJawk`udwLVHT_a zXca=a$2s5kAsI#nd!Rh;p;xgH^%Zz%UBmcn6ZYTU}XI_7jwsdfi;NF8Dh49u6u|25%n0({s9LqBuV~fnkk&DuDF12gIEsG5=Jzm$U6k7 z-K+zQQkj7rNIKDsF@$h&BH-a15kkCUtRJu(P>wX{vBszbdt(vs3>|a=@4_A}xmYWF zdMOTTszk6Bd`hZOiXVm#2uBpMl+cH$)8~Xi8S)wUDe(b}ATW>>UDrW;aX5i5Ou@QN z#(@pF{_H@V(nGX1pURKjAlN_`Lfle*H0U6dd5UvSWCtMisaIZWN}v7}hy(8&iY|)j zi$VJLGjhWVlhh|C5#oTA!6R_?@}Le-uZO%8a*0BL{6C@Y8{-9x{66AKa#EXUCLD{j zuW%aCox-%_(~wOaD8XLrgqd z2L7JDt1Az+jMZFd^XDWtpcAU|rrB=fl3Hb09|&${Zipywg8FkiRti71Nb+hEAu4?+xmSQb9Ecq5K4!hsk@ zNlT913G)HvF1s1jVNJj=DoK!LJ8rGkVOB57Jk3iEa2^A^$RjA zXMnFW@ zJcuI0=OA5AWz6`OC_DBVKzcHl8LMyd=7Y_JF_S6M6wMR<~1vWt}(3@x%Bj=}YdLs*5N06Gar9;$#e+<${N{z1M zDtjUS!zye#-UY6{;VXq|j~=dw!OeT7LJ!R6;wRY1>KX6ZNS+};%>~kR1(l)6-7xTd z&3{hldPb=f9G!34e6jv)xqkD!@ZvtFVe*C4>Dp>Xvk zhX_qDqy;$H!5bb$?0_7(BXM4b$yIa4q)?`Y)+8gmnEo-> zu$c-srGbnuHVcbBH3{)u3)ALLAFZEK9Q~J^n*xHI*}2cv8VX^T9%Q1)6e21s9q8Za zsiks?wNq_mco}0~G0sx1cBlZsN@+H7KVza)mmKhD2l0rL7#)i==&7iJi+GP@{N%go z-@l~-*~;QGICA7mWy3+52lkG8V*YX%3|Q|zE0J=W$nmjH94#u&)0=)4aTrry(z3C! zD`R0IBJlr~`SK6SwH!^2ttuJ-VXbzlr^TR!&sz6oSkp^-0j}0)WfM#G$-}Xa9Jl!v zOQqnQf)GrtI9QNAf`I0~A~EjYfl|$E)z6)Faw)MEuQ-8!0rIwU*h6&&QJ|STi_704 zgprf4TUF^t+4Ph5#bc9)V%4z3)bm+>Q0NmnrgP>frWUITpd_09{(-aOs;oRHF%!c* z?C+T`jpZSp8978qKmk9dFT_A_`_0KF z){28Kq#w!{;?4jzRLV5m#_E-S|0azC(?>P5$r*dhyU6}+e|*tN-!m@ zF9$c|Wj|((-F#QT6v+#G2Z~Ib8WEB6xIu6E!Nn(hwZnI(w50V5i)ee)U9r7tLjD4j zH2VV(QdKI6Fid*d_+B;x0^+ZYo~NsQ-)tEEIcaJ_&5r;kaf-zhW19~u*Yti00bkiu z23-VJ&??3jLu!?>J=1r@s4Lklnx&t1iqR^_@xjrOTiTS{7QGDJ$5J|kx1G@N#MB&? zgq;-;=lME{4>*1FjD(DaE^IUGG2vB}M%9dH2wE>mSa@B|1$`ULg(Y28R8&%)uUv79 z>2-1zi}Mf+W>{<1ruW?eU^X7Xe6MJ^A1+wX%}neoNJaR&k6BdIbqHX${)b-013==l z!{wrkY-8pj*z5`ZsozH3LJ|F2@jaz}I4ZNeU9nUQW4+5uFP7wJ8EPtBB~eVOsM$v9 zgC%li0$;MXe}}|Z$`|=d{e%;fOe&E696X*h$$wLcqdLw=VvA*BY_TdBA=`41Kiq6& zM>}$>aR0pf{97b!6JK+!SfC4qukI81bj*<)ZmJaO@%~Foi*1~1iKfDMrLf4NKztg@ zP4vN@JM8cd6Eq1L*#^D0PmHNL3dO28J1_RbKcYDISKh)oEjE-ZlFAESy(*5g28<8E zV#xSd!{tdRx2*=#Ly0$-1wK9njzqY=)n$vhS0c<=+*B(RGTVTFDA6&@r3y+1{i71M?PyI?%GdV^!|0K{{M7w)f65pHaplzqU#Z0uQ(S-GnJJ>iK zS-l<73iV@Fk*KT}7+NkiAmD6fF+6%WnMgpf_n0Vr8B=E&xV5nXGknwJsCO;eWZ(%; z=G>E~wfUpL$TYsGTvP#qXqJ#|p!t1K;I{cOLK3F3JR8&9$(pJY?xF6Bcxf{uCcVpoH@=DZR;lHawN^ zu~nImm670lSydW_4NWz$B9D$AZw*nqdaI;eSL>)~h9O2Ps*bh<6RxyDrQm(B@0U+EXYJ4zeZ*yv_K|)t99^oPphBLRGyE3lyg7- zyaod?BXw)!IO8~THHC)vl!-Ws%%Tx{;gd2ux`QAs%iqW?>!h)lqKUJvmZ3?AKWNFl zm~ISzRfBE5)zg)4`Al;1a^)Q9AX^CBeXji{kWA+P9@QAf5j=K@SLeG-^b)xcG7dev z%9Fg>`Y*A@pzc%3jq288%{GVipGx9z9ml-?5fIk-T7Rvjf!ONh9}2wvOBt~9dGLc? zbMos{l+ZRDDDanw5xQS&x3yk#=9qO=NUfampsKQHP43)&*M}aaa8<#v&@{ts!7OT%gLBwS*#%>=!v*Vwr0H zpctM%AfUL`JH0pWNRVsVanP7lLuH;_s@EamNx9IwjEv8r==;XKC1F|uJ3v&N z4aK024Tw6L^111cy%pKo+XSd+t)m>RSX)nyxgAu_5lsG?O9YO}k@9<+6l|~jHWjv@ z=b+3WhdEk6mPnRRl$a8^R4ngFtfCfQmqS}zLV!Kc-jC8Asdzg=X!3aqtcoAUqKvN- z%jO$c5@)o`v~5K-n%?HEbuA)i#{%c0qOKKB{jaUwRYA*$jxknkUhY8zrOBzW0tFyXxXZXGNpjfa=e!?1cx|LC#%yJ+^Z;bWrqT9@tzK^@4o zg`eMDi-9OTt)u*!2B`CPkYZ76dVXG+R77&*cDJ}Uxqw**>FO?D@I^swBSr<8sL0Es zE|k_@A6rfwiSHbK$WHluadGiQWD)C;)aFxdR5TyRMPMfJTm?EdH9g&9>koAs zkM}opvcV6POMQdBK0Y!&2R|XtsGQ}ydwb>2?AQ7Lp|d*wQv&>{7ro!oLz9vSkuXZb z`b41P2f%qbBOC+$1+S zE<9Rk)wk6{uypNCBw|~yBPR#5*|)I&ad9il&c5g8A{B656&k8o`~BNjATIt0Ssosm zI>1s|mD;q~Mc`?0PpF`vU~?pu3kh`dN$=eHt+xAo`u?D6@{ynz&p>GI4AbI~D94Y_ zqLZA4#`U4+^1EA|Ye8Y4PT%McqR1Zt1Zs-LH5Og}K;{fSGv>jR^L>49e>J+u*CDrdl9^VusA;|EI+7~V>3WEA+X_iV8b~b`5WMpaZw{c3pKYf+C zF-BPR9_;K~hP5;hThPzU%!sW2Eg)$ge275}vC`yVvZN8esTMRITZ;>`EQRpmR9`V+W z`+MH6G&&N!&LE^PLjNK7RVzolAYDjYbjrMx-+2;)+0#pMc&O1R&H&J*1TK(D@K41a z8fwqA%g5Q)pxPfY{?ILu5u$VDuu=Z1v|HdH#&=3*5+w4WV(~U&3 z8T&rrX}s5>Gqq9ocS|F)DHbQ!+ACe_o;%aJeF>86JFG0}7pG zmg@QV;F$5Qr+S)IPa2_K;bjD>dX0Gps~B5p5svo&xP7$UdrOTtBmUZC$ayh_j-Kjo zpYxlUJi_aRhr0`(t$jq-5kcC~_IA;%MI@Wup(6<2vT#@e#aOl5*4{JO?(SdS08h#W zBliz;)%*vC-rjJ?zU`oxwDJg}BR^#_qpkyCH%p|qFeDRqOABdf*s3JCWyZS%L)}az zpDe~#Zm&BhLq@xR8@HLr6#fdG_`xZ~zX;?1&2n_vY#T^iU0i&Rmj{ebu0Y)E?2!m4 zIcCUl4?{d>Ggh(9u=i4{CsV>Qd#TvE#A4C{6i6L1J42&YM@LRki0^gH$+JXa(8H{5 zV+>noTg%G#Z`J(eG=fx) z?i=~hXZS3;&DQQ2w{*T3CW@bdy@nKaipM4x7F6G_NckKXWMu}G!B2$qDYA3aQ2B;% z6H_(+hq7;suA~dvop@qRY}+;`*2K0?Y-eKI6Hjd0wkNjj-&5A=UIKa zd-v{LyXtwKsu~r=mf7x2He_3kjL_Vy)M~IK#=%5F*Tn@Ds5wFG2; zlwJb41jQ&Ydz$<-UBZTj#M4|8SkZE|4yaQ%u=_hiFX93ZIT&?}Sp&3# zcQkzQw6XVvXs>(9w`@6eR(Tw!(3Z!53VW_n*LP@VI zp|lFOg;M=87{LKylO1-Oyz~bgETow9VXG0ivgU3lh>E3XEJ4GSNK^|^HHm5&1Z=?` z;vzQa#P`NR^;Felya$%M-zG*7mL|#*5aB%KU8qO24`7hP+rI&sz=PC4(u~Hwy4q|V zN)hsL@sS@zb~1+0sO%G}a$rw8oC>`R7sT`IT`PPpBFMxTnDrve(P}rP=*U7l?638F zwJ^EN9L8hBMYJja+Az_lSbrX@)@j9BWN5pL3#%$#h48tdRb_tq?nby z=Sx*CMnt>l;Ubz^f<8%LED%YSp#|UJWF%xrVrRRlwl(1^h#?U|njC_%M`^#4`hsRL z`j)p0(i9pEiKMu|A;M)4a3aF+*=NX-gCT-FPJ%oa?2RYqpRPS@gyIG{bwjcx*6{dS zkS-Zgkg1jkX)GaTnH&m;Y!#*1|4kwA+r1&Ip*=d=9a2pMQP&Lw{qFcos09SEhd6=x zY&J$+$I43d*ywKpshw4FWeT~Jgk3Hhzq_ZG6`@+hVdlK(2muGIJ>`%oW_^HlyK%kF z%7AJDOa^=)@XW}q)ebrW!Mwq>i5LAlyLYa>Dee3s3tsg$D47W%WA^rms~5*grZ%yAJb8cr3nBCvq#F|ODj+>sPJm^d-F zD$2?ruoaQY@LTm#0|vznH$PsH*F<;;YDoap^5|n*J4FY_K1J;BQA2U=9 zPooj?mV~J37`6nXiEy|i28*bNr7-1RtkoEOUHR`6WX=~S()|61*(t)ysFj}vfiVa*q^q0I-;g@wj5 zP;-=qj8x4_iqhpTcJK}Yk{m++f%&Hs;GtmatBl?~8f9R4-$3~O1h*Q12Wl&J*WqJM zN7lv*a9hojN0YpLm_^vC)NX>SA0IVE1R|qb$$LW_izws$ zTh5Umi@m2zoYa+*DPE#Q@bApjFGRTbN9*-%-h{jtVK5UO48q!#62(#(t(tkubri`X zB4h_q;gDIp;^fTOe;(V3jo3SmV5t0-YB)Y^EVDKQa^yRAt|u0Qws<579<6QQ(HLg@9{lj+Hp0zt6cWUf$dXAK8OK(vI9RvyrXG$kIa#gLHA8UuQV zdJiz%g2QGWKYGI^GN@Wrb}IG(i-{(MagZOy7?5m8f)Gron%{BY{vLE+1lD{1H&1np zTY0)LT%f6Q*rYSnQ4@)dqAbG5rH@%^NEd&zl%g*JObJy%`KNYaq`VRCv+Qpt8{Yl6 z0TiZ0;yM$!&cRJl?q19RyB>nY*xFU< zfGovT*(~Z)sIOYd3g+Jp*j@-#R^OO|4&wv8x4>7wJR7yxj>9;xHV=r+{T$3@s9MHqFSY_?(fV6zbBE-e7g6 z9daDc3|lzmK!zuhRj`Fu8E=j97qNc=i=!1t?xus)l!W>Xsc(kd4h@A>+87N020g)} z4X_S0CDk3|Oh8+Tg?LO37I;=FcX22-@6GWs(T_gnpb=A)CRc|AfT#?&BQ)qpNKt4B zGUfSi!rDI5T4A)sCa}uW@c5!6H6$1{V+Jd7c&4y;gUnh42LXD_s~*A2Gy0|lEHtqt~ zZ-iM0h4EWPM#k7AFn1CC0erbYHf|!y27P@L?)2hZsF=Y5FtJmkkSrzDY0!;cs!LGQ z$NvRudh|0m9FC`$Ul@1sc5n~IQz*Ght2-gE$`B`^Il4gE@1SSfYpx{Od;JZPO}Cy@ zU6Ip_@j(}+ZH6XU%8~asOeyVyj81rxq6io6HVXn%`c4{gtfQmj*(X|>m=!cI7F??e z?ejkdsuzM3?B^tFICIbs1d#~4Y*_jvZC?l!&R5azNS5S3JcRRWVXCE^SdxUPp-M$3 z(^W&ESe<6%jf17~ejTTyO0e=VrK{HTCtaYIgCvb(rz=YpkZ9cW2he#qzcfawzDxY+ zq7lhsNl87hq%nfE;pY@$B)#5Y?25Fkmo4i@K2Xt53P1}8}vmj41@ts3R5UZCf!g{Kt5 zjy7#zBU3d+t|!$EIQu?Doe+d7GKfbSKx&`9$<_hl_%c;1JUSss^=uFWs|DO$ca6-0 zNw^V76WksUhkmDz7@b$1#?ix-rAKL^JK{>o#-_xJY=Xb-;pGoTpZw_x>+OoXpz(@W zH5KcR0HSzHFVRB+Ywsfj+Ipqv-;qqX>GCz@#(!vsM0Cfmd)%MEIt6RBlO))#HAXb> zt0}3Z^@4!kg~SGoVl*o^*P4uQ^9`QpW2Vl4Df1XucAaqia)6Mb#y$nVus-ENA4*mK zg9J6dU*mZ}pq(ukZ!w_Gi~e@go% z2x!xvwEdle3pBf$QQd!TV;aLLApiVMRBTdSNJ)q$qhhcj(~;&m6W!8kw44ip$EuYf zN1@##+TV?6Gla5vk3y4zG{SP>s0ZJtv0$9z8J?phlqNPuHz;PFR}0I4L^HEQ5I8_J zgih$!kbo68q(TfK2uc{uwPw+a-%n%QO`^*f;dXA+^EtAH0qeH$vrC1jc@8Pf*O;=D*JwC^b z%@{LA>w#w93&$(U<^qL;VqoI8U_=>^Ualkcq)!n~o&J%{y#lqJ2Zz5iJ(aER#~+u+TjY zJMo^=>FU&OgnqZ7Z@R%^D}OIgPD_J=_*EKAq#YVzT9YMxM%&VBI*a33Jg2@dlqgb3 z{~9Vhp!pH9e1bEz(knOqSCg;I^m46`AHdT91c6>NMDVr8slqu_*6dc0z z@KQ8efDM2g0~En&QAP;QtAlv=$ie<-`^LcmbJaoecL{MRMjK&eLdU|a2u;+7Ob!61 z#9vc#R%4Mo>81laUhqF62p2|+g~+MJME^VjaDR;gcJVgzQ6>WP+KoKW0xYO`40j<< zk#-nLASVq0{IMP&f%Wg)c5*S3X~--}3QV6N^1;lk-^jl>E{>rlN4)#FAip{AQJv1D zvp`fC^N#;A2%Jba)nDpo95AfIf!UM$IKG1-SK=3gOJ&0c6AgAis!0&G5tdT=ju{o| z*fye??U5eIf-kU2fDNt3qULV_j%3Ijib_mExP`v%63?0OhhlUyVINEOw}&R3`M$6W zci)bhjUnu$ERQ#&tRWP8FI)5^Ch;CUk^L zZz3#RL%KAG8mCDmn}9i?W4PtqXMyn8_BP6jT9@kxP*Dh0>0UrQmCEn!B=7eAMm0JLex9IexCPYU4y zlXj2Q#=n(NKF4=E5ZqFN z)&0yT=!nuIQFDl8h-_NZq*NN(O=FLYgjnh}9)gpISE)sk6CLHzJNxX@u<=Xn6-6Ou z#myx0KET^KK-K#0ySm6usWztcyGj%mDNPbOKiJjLyoAp?{YrDF_Cgpf{(zFKb$2dm zO3beW#I*6r;7@3J+l4djt?c`1cN}&BGp3mH z?D?R!gjvglBwlqyqu>wy$iIb?mcIv>XTeqyAn%aA)>HEb`JcohUSK&fuC|px8uNEe zK8M;5&G;0_yw7MLXtp|#@F&pT!DG&cK#Be;CVQ}<^B96}W=TR5$>!ORmC`ZQpC_7L z-j3gaT8$S4DZQu%B~aiZP9lxslR5{S4)FYj+0fZ3@edqNp`34oA`~k)12Rduc%YLd z_X3?Y>B&q8cMYv9p}XRx+mk9iMRpuGlIn${4~k`@nSW2ht7($e#dAhScppm55fnB7 z9Mg37PZ*Qn(sAu}5Zj>OoKZCN(N$E#`fxHLKu+Th%gOkKN2WJVF$jT7)0PX7ogZd* zc=E>Zh(HD5ZQ$WlP2jQaaxu5Y7;N=o37Xk@Hag!S&ePK_LR{}ONY-O?{0-s(SnL8ilj&y;X3btMDB3g~(pmYM z#zt49nS_}b*(GB4#Nc=e5}?w9LkNph8*^b_m(JhRuDfCt@^m7a46pv@@G&F7I0ww{JTr^3- zs8l5_kmxXIMPXxU?xv}BpzzUi($x~w9Fwu3Zx5=>b>-P{4A#C$$ugOzNs^aS-CBw< zAuQy`+x5*v(_`*&@sc78#$LdRc?7Hv;Uznd?w?3Jdyq?uV65e>R%*P{_s(pJz`>Kj zsah35??C2fWJ%@0gzk#zHxQNW`OS<*7pR2S&=c9A5P z;~-&kfgAE5$ks+%f$_Pzomz>1bJpa@3?V4N$Y{nU+@B=*l?U(FYtEv-#>~`U62uRO z4Vkv5iEBbdFr+FRQOMCH4ny(1mXKy1b+@=nbr;7Z1%IcsAJ2wJF9;S#citIku28%@ z2P3+M{H6xZBg=%CemUpuTR2A;pTfut`k_5)JR>I$Xb zm;m7It)qj(2^CuS5oogle7ruEelAt%aM`Z?`0-=#Qb}m%32L-M^Yil)Rir7->eP*eL5D4~_!G!+ySkWo>Enb-^Qoc(14<+mPB zXGevHbA#j_GfxGt;43fY*S$huHXe+OuR4F=3=mCe-M|Lp-KRZ`fJmMF6Jd$MP@p5k z4-OPyMky>@XBh_pD{nj+Ge6m*fq9_gMjphI-v8Ztu!u7@F@R?grp!Cj`QB2LrZ2`ILtm-(a~qQF&BB=bga+C;y?ozD*2ERySXk_G^=%2FDYfw@0 zY-?2&0~gnSfI<55+L{bT+^ao@AzISW;o)5L@YvYc12_T*VVbeHy}i}yaI@9a#J;s< z{V=20^k`qeHk61xMK%uvwMMwOxJXUKd`|^s;p)8Z)Sy#SQ@<|?|IZL^cKU*(kfKQQ z?bn;-1()ag`T`DOJyl6C?zDVBt{cDe5rTGLlgBq00&WMxxxYVwKp^|oiy+D7;r%N% z3Qq!Zra9?wbaZrMZLOj32LzkzY(;6Q<=5xOLw~w_CZ}Gj0~p@PPc;#d08kdNsu9|z znQ)`^SRw@orIlszrOYTO*w5l|_VM*aZ3D5~zHdOIs_3{|&>T9uyO*pEMPUs!Gw3uk z6Hko5vJ%^xPo~!y4M6`$TiivlDb8Bk*)arxfWEhckcM*8V4R$s+;E2t4GlW24!ikc zVM>-Zsh$|1k6NGjKetpI97Ka^fwMXvjH1?e`uJ_GHdr7N31%fH2M1^Ix<)SRdVyH2 zkN5XjBB59hhdGkBg+w3;2?-$~VQIn!rKi42Zuv^pWe>^G&Yj>T3gNh2QH2XIKTR zCEA`YR>h=2xW0@WQ)prvb}kloa5*T&(1dD<6$yeB75*5dS9dcP0-G=vhdb=b($w6% z*yn^{m<_2yf(DdPxOP6mMhlureyaaFxUomws>-UWuFlRzxCN^9tCc#4K9d;s8z3;% z{T&5DHLPRv@qD>$D?)n*@fQ>utoXOq0i2()<_Hr?qhnW_9a^pGM&FYDY7Wy@tN*q2 z`ML7&hM!kgRAdG!jHzsDW)`yg1C-S5m@7t8ga~Jy1+Ot-k>j{*YDK?+Es`Y+i`1vO zF6mEsGaQ4L9)klS@K%OnRB$26l}1iZEL+2EN10O{v#NH)}zm4#0e1@#!iTnA<7ZPN_Gg0ikbZP_+vv~_eG0W&i|Q&ZKxX9gB> z7>>V?MutAg5+DS{8ymbBv`IJ{K_of#t#$i$`~o3XslUfb`E@T2oUiJV%ypLw5#8n4 z+KSSo43(5nHenmo=N5+&9ibXb__e9?v0y=MV|U9(MkUnt3^<6G)T#z>H;Lbn{H^ZD6>1~m_{ zan~u7-TEhV9t?HZZ5#q|z@*fQQi5KG+v6()85kItB`g--D1C`t@gHp!zXBou zI^PX&kOqKQ)cN8PNGE|siuew)s1&EvICKXnHIU;GqTdeb)Fa*o3IeBDmJdNH6=G$x zcjq8!Y3ZzQt@wZ$P*-s{CZzu?;V_q|r;!iYk14WKGJ8Zs#0~o!C`_jsUY8RTFJU7s zEgb3G)PJOS-^u&pyLsO~K0r}|B~XGo5R|SDB6)$_u;O*C{1NG}9@z;AA_pk^)w*(3 zYW!$FAMPGb7vhqH6%`e$Q|<_90?_9~k1gr#gJpc6xWP1bP>zgE|0?E78P?bb7Z(*( z8T1ey4v4PdUHgy*U@_{>=KRmx3&Z3zH(V-ge936!w)@fcjKYw@Ja~oQW$NSn|5M1j>UT|0+h~prF(m z4TR?CeM1tlndSE~Lbxa7aSE=;)DDh1O)~Tnv;&~z{0{RLxmIb#+2#GwZ-R4oZviZ5T-He zwF8zJB_$=HO<%Z0&Q01W$TH;mep_CGELssiCui#6w@E|D2tAOgYPVy@a5I*0bK}Il zI6f|^(fe=3zWlf0&&|yRM4t+cMX=~zqpA;{Py8)+2M3+JEn%psf9?#+jHbepzDyq$vXI7y&n3!OT<_4W zOmPWTFbA(P1zjkP@GV)EgkXv?1+AMkA-drIy*^rgtXU5(u9nO77H5Kgk)UnqM>oZP zzLV}wA{IzJgO5*ttM;FFf+-@M*MI-FtE;Q2No`B;|NRySIz)v+{+FZl-(rXR_#p%S z-;(b>oW$Vt#&pK|#V?%m01C=)?rb3mhFCHOy9w3l0uW zPse_=So-gAyR|?B79(+hMzwB2k$^y9+Ar|yl(9m1Wl5_|Ni)GTH0H6y7IiHujlWR9NTlGrluW_;KM)Ma{I7QG*wr~xBP7= z;1LpJdJ)z36f61+wOgpFKi?(ki*VH9n9`o>Dvr#Gu01LIw+B~saN1|;P8(&f-hhjKD-kc63ui@fBOeAo8*ll&b3q&t-+|-1kNCmkMpW9JJ=Q;=eW2Z?C7qPw zShOO272p%ocOk!^qM?(V>HO}nGq9er>H;b+|IyA)xqs@Qk*^9_U!C=Z6Xd2jgRy|> z8aSz`r2yYuMyIAYl6sE-VG2zCz9;KKpSv^qUx!Top9@6q&s0L6t4szTtALu%yA+WM ziOZSEQXd}K^G*#XHV|B!(et@wFFCD`pXCiak)BDg_j^97AgaE9=-yPTf&VoUG)^34 zq62M@(B&zjBRMi)TC(rF?SH^$*NvgJ?z z;xtJ!a;nnR3EuFgkK{djoA+Ypt0E>g@$ptQHTB-HeJg*I8r}a7BI=mewke|KHIk>g zyW*uWEc^0dRb-AU=aeBbjAQpxzhK+zi>v3^BdKO#C=i}cUGsg{yXVtpvU7j+Hb%R^ zqHkavg(+>)*)`>M7ldil2yBDtwj8#3xor5u1*59^m|;^nS{ zI=6K-mR(wQx42~Pu#iC!2~V)TV!`OxzJ$QQwrQ8kME$bIDbUrmh~nis{q-Y(ZrRqc4YSiq z@#OR#N|C`F0mbukG`0_d03XThK>(J%OUK8p$2Y#k-O_EEhbXr}-|uwMfTFFFx^P3G zHk;XLxn7pab{gve|}^f8%(gsifo~sJgm;BGsF-o5k%#9j}LuiID`v60i&RiFE+-F2t;W2>*l zV5514UfMNX&~BtNC1GgFAfN~;rLDx~3E%lizUJ$^U7QwVC_1TO*?06+wmie0I4_&N zw-u#y%Kg}kebTwjzw}!cT`+O#g`-0QhD*@Yt>?>bD9XzTU#w;rEB?69f+$}uJZs!mzVjcO|)k+qOjWyN_y zWj9p-gWgm`fL}t1LUyrl?={Q&D!i}qB|>q;+K$!3>|?Ae>B=!`x6tv>6z*HvWjYb>z3 zdZL8?DH_N5#&WQMB9-cIWm)fpaqLuN%p8TmPwObL&+P(pzWUk&NJL}3DhAjqX{ zX(8K>t2Mo-Am#QR218NFr%ZANgU*nzo!yV-;bGAJ-3)`g_UDfdF7DOR@@83SC4EhK z4Zz0QwzNw}@0Yf=zP7%~f=A61xst%mjgijBCSMVTSrG+B6NkJla{JXbAR_i|o7Zc0 zI>x(3Rn<%b)5A``)BGRyb;E5@j4g6^))rsK739xWMo&Qc$68QZc41YRbeJ2F9+!t% z@AOPsTN~5&b7}zj;&aGLt%V_E7=*lW9Y`g7QPd~es zieJ}K&6E6jJ9w`+nwvNpg)a16jt4;98`h4Nmcp_T{Cm3di#r<&J1aqz%ufSc{2*~# zT3TG<7Uq{emas3cIU1WdwvrqP8=IPzI6#%F8n^5LmNs^lr4>~)bPNpbdYZqKy*S>+ zbF|QxT0e}Fc^pKS6hqa?Q@PjZFR*R8n9hg|CYDUeO6M`lI#7i*fX1S2BONZRn=0{ zlGRmJIW}ys+1rr#Jy!gl?9{Z}2PevD&$YFA+n3FSTOivtwPLeR@X#{#;6uh~Wh!vn zeP?65s~8w!VlJOJNL}1qw*dBl%8IF~>D!eiVXXCdO5}jq6xbYf$ zK$`m$ua5Q^T}5p;*!4!0eOioHO;yvOotVkM=AUvIdOPb=!nXU}uKteIt4yqFLXInk zm8SVrAOLn3m^93@N+@OBy1llt0)0-D;hVeSp61fSH#hfKn_pKQ*p!mG_>Xg=XZe?B z&)rQdM@Pw&U{3lkO^uMKi3!>>YaPOkeaNTU{38YVpJrm~0?oewCSoS%n`di$+L`UC zFmc^jaHxMW&uQg2FwE3AFq-5+AB@n&d;M`cm_3Pw`yh#hUewKbz?f*WrJji`sH)+m z`+jI#Uj?4wr9flZ(13zqmdNOtzx@Oed4?L7&o1 zE&a#~t%H~Mip%XD5=niqcxY`VtA5$|zNlV3G`~DQzdgD-W|Uw7WB0NKsjnxeeTS+U=Q+J%b zxQ+#_dw#)sInbGyN%D3vjW3XLe}aeWIizKz0L-@#9dNb}Yj1zMS~F|&9=U);m+&0Q4c3plbXwe8aCEy|Lk$ z@}|$jf$8v)X)oC^)aB>Yl^va%cBk>kTX_5qCu>a#V|AW|U|O)kx{2sP$XA*N?)3F} zWfcuo3~zrA>-N3>I$brnx@~s(lI*Rp&Yaxr=W~g=X?d?`f@o>Cvm3_+Nv4*qTIZm{ zNv`d$L%J_u1MGlCn1nfM(NcABEp^<>gk;atYA*?qoUXkiyI^}Zz(kS#2h}TY6*jNm zC=5|2m(9swRpyMD!MVAkj>b?1_i~7=AQAU-fui82;b1sTD&KU9{xSDL%xhr9RxGC2 zFyhP2$5SYBrgfV@Cvgc|5C4MeYNtFrRgIu2kNws`{&g3Z&9lq7-Y!PjW@bXs)@a0* znSg(9dH_+^)5`^H2e=PB?zkC0;-lUaRTqAXzo5-WJ0d0^HRjWFwlvP-+AVsl>fGEI z)cHK187XZ6K3Kj=&-V7$arP2@c9+8r(bn6`%-4O1zt7VESP;y|>4&@D=LgZ}SxT;4 zdL8?XC~6Fzwrp%x?H_iF6K^79{Et)oic75fhLxr#bkIWDZr}8)S&Up=P@mSt#Ma-K zopbHstocP^)xAYQlE;%?*U>y^7lM|-5To!7Gs zu7K?*Ol~ax?P=#BM5@=-UDvNQQ((2YtOmek<5$!p`Zf`}!;bgOa&9aAOsSnVdQt zF1H23D2!@6N@OCr8k&XX9Pac@v)7FJ(CXpZs2q6pXit0Mi$Ar~{X&f8Rp)cad8dYf zS$mLt$A@Ag$gd8QD*|So1UZNPEq?+1ZhaPLMK5_p>jkGLo;k|j4!2S zcW0-r>Wu0lbun@fv}bqI-j#0mE_X50G2A;uu6uIb5kc}$8lCv`q0t;H4$uFx*9Y#E z+x5Vw=ABIFZ83c)+3|YLPe`2qJTm+js&)Q=m75H&!)0@MI?L8*7qFz2j%vo^^SLI> z{BUGhr$i=v`^=@B)Zww64{q@XHf(?1Jnk+WP3zSgpVjt3gm!*hQSG}k@hK?QqMOcjaNcg-RkVM9725WAe9Dc%e|#z3wf}m3 z)ad!@0`;u)su;mw&BiF;`J6R?aS`?xj&02E!I`p6Un{NIusUNn{m}E3BNQ| zy}5jJdQ-J9saTEa(DoJ9qY3PeubPDJE<%m2WAN`z2h9LSidoEFz25%M7Y!K&?go51 zD_h!W`c8J;Q{%{?(YX9h|7us01YazBORxQoY@EBxyErQj-oejPh;mV0<2S zXDKq92RFMn9q!woVzp|fwa>BDzU9)rw{+g0j@Vb;j8@xT&~|vux@`df*+@gC2U$WE zEPi7rGhwl~0$wYlaf0=_ZO0OB1)sN&RxyI;m~ziRth zTJzf~nAe8<`YJF5_4#z;s$O>7$--jOn=KDZNyN53uWG1#xjoiGaeBTErVM<(7R&ZI z4Z^z@w{)}I-X3_}E3DwtLL2A_6+NvAfanpTaNo&DEF^AV|eq~JM71=M(qJ5Bt?R6iO>u@$*#n9K?f#r7-HkT`(%VG3#K$44$`*5r{ zqUq(mHC|KAcUA8?F`Lkhl^6o*dx$8RU3t{=)-f~O^A)D(|8`FFwVW%6&+PKA6fD>8 zc{tAhIWza&X1sH;FM%S)wZ&LDmcDtD#rNtRR>fi}r`vq$;p13f&wh*M-f^A#1GxvE z-+V3Fabbx`7u~0>Fkr%7&+cXpDoDupkZSv5D=!X4=QY?1=4Xd|&Xw2b1P%YB^*?G! z+2dr%Q^6zUT2OOnAgABh;tPw$lA-~R^=v$giDVpkcgOO@_qNm{s|MS?-$Kz^%>L8w zMM==UuXDBTLZ7CgX^U+K>pWXJ>Q~tuBRq`LZX;(I*WH3XSDmZQX>y>^BZqap%~7#! zHfPs#FKnziocDT$fw7hN@mj9*8li_FWpKP3e6_mF2F^Z|Gj&a@>w7X>A53me2w}6n zHsp&55#7v54y4*{CwO$^UCmPnMa}rJxje^@$u3Xg2)RA~cHeq+8T}gp$Wgz4XypTpen#`zMbo%UjzHh+=+)WeUyaF3Z8d?ekCe0KZ zhmNxKZdZxY~=z9?m}UYpeqkn}Nsw>llZd~2|lxl&!y-DtEQIA~eQeUz@Lh`f6u zEbZiI{h0MS|~eWLnY7az|DHLW>sU`liB0CK3AG`Ubc*6 zgVSSln`M$#u7hAzAaFbw@IfYVbr&UNLr*KvVL8qB^?B{DUHjl;HMZI6AQU!+uBRAE z_#LRre(>lBzmy|KFE=jZqRs7mJ-&#<^2(;lXzBTWmNsK_IP}AZVR7)mV3tBO>UpZ(bM%#=j!8y3T`Ie zQKOZ>O<8&%!4}U^L0vAwX7{<1mARgtytG68Q=(OY`}G6)zJWlO&)Lz>2^+?epCy~E z32yJvU&E+m?v?fJxT7eNUSu(I_>Dsu`-nx0kg` z9Io4wA=TCLCOyQF3-_xG{xP6#X-w5(HA@mw*wEqfl71JOF^}KBtH%x#Iy~)lq9wic z7PIS>UpnuBajrAorxID0^*?n=CLO!6&rN&0#;Iy%R*o<;Rp%XA@~bu<1~LecBQxPU zn;Evb&ByCT59U*w2cI2|Y0$IzyL3qhE~yk;>fCy6PpBPV#&OmiO|oL=OlwDl)F0-G{?$4Lywi``TG>jA1o2#ay zQt_pt8(OrPui|?2YDa~5nv1K8S*!0h{$M06Gj9CIPEGT3-JYCEg06<`#QmkMqLVhM zRQdDUH=iHU;v%a0IZgg!8w3lO!RD&iifm7jq{yv`K7g^*&1x>dIPCU zAs~VTHY^pv*LSeDs5|WLtm2H;nl(GtE0ZntH)__@8efy$=cBNxGdZ@v&DJVi~6sz-Axf# zB%wO9i*(zGr{aTDQ!{S_JwEph?%Z@`!(D=fJBlj2D{GpFlS}{&A<=2Z00|> zc(+K(@NSAOc7bZmzE0YMJYXy%P0w6z>v-qFk7LbiDLsac%b?mzm=*bHz0GdW5N1Z! zT~4THerwUk<16&hWP~6>hHW~+bmQq$thH>|Pz0 zq}X<9>@w}x@i7Tyq?KaOE`HXUhUdNDn5C1qUA;pmi7D^k`h?KFt+wC@N+@I;fdahS zXSvs|G#n-ol+??vx7!Vd@X8Zh`<&Fi4Jl1TN1WEll^jJ_w+>i;5FECt4ft~yPs1xpOdWl5;PTR43fW76&RQOIYr9GK$tWJ*| zd|lxD)u#FlIM=LSA8|*k$SrbGk-&DJHM>L;CkKU}(&^{bT>fvTCAo@@z?*JtbU#X- z7n#rOW|(5G4)%Y89$}1c`);`lTXkj2l@h$uZzn-7ZzC7-t*Fk#tSe^qV(%db3%f8} zF&~rjt3q)hTOH`NMq{70>-_en9#uNWb>@J?Q@2FtRol-KBA>6O%6z1B?KzvYR2hf01>dD9(DaWWgNK%i^xxOc1sxu6h~SI*MtS@@L7`m7v20 zqaysxRrUjKzoVM$#H<@`cQ;K9 z>RA!XcG6rGXg0^un_UY>gE4@&7Q~lL`<}OjZRAXDpZSBaBte`T;LO*l{r2m9V9+t{ zio*YeD4$u+W% zHYbjMe)Eu6PdkMd!QVQNw+S9VA;l%ILod49fs^h2EM-r3hG9Y@4*QTWea`qyd0FkW z&G~lv#rbJysKaLawAm%&t;vIGg5z8w=APHFVetXeKwje|fC0XlNz;XyWOdtW;17?= z<@A;vm)hoK`O|iHzxDLrh71EKVjikXr{0{^pwvrXyEduWrAWypmmh22=Ji8g_&(n- z(nj~+avD;$OLZo=}IlKuieZ6kZ$$nIu`Q8f3Te&uW9gV?bG2V6R zQiXV`S;exMYu42BW~A;}30!4wf1Sr|;j{W#x+_5=cz&gQ-L>@i+85i8W|t4&eOz^D z#MXwx&Qw;kd+a=Kpvrd6-0{?9wh2?v{fLN3y-Crub9hDcrl)s)vcEPtl7BdXkM?>?fOU zy2yqJHqNU*IK?!UV;br78%EYT_^zWO-LiN$ZEM!6u5@S7ESvhA?k3S;d4^>R!8pcj zkImZ%*Llnvw%Zj`Us`iyE~o!IMIzh4>3(FW{k}ZFVWgwXk)jptNU9Fyl_$J*8C^aU zZCyAx1wmUvuZw-v6Ci01Rg63D1;Cr~pWE}nzP?D@{7;SdBBduB^sG37W*!1#J{#p7 z5izxYWxgsBZQj}R_KZF8`vMLXJrgb^qYw*N`gbc=J6M8NOA*2qAteg-*%->`5!XZZcb z&HHXqIy@~V_TWtVk#!WaF8tp~$x{Cv5j3VB*E%KvjQ`$`W5miX>s8qRF3uvkZP^~P z{lE6F{hm(4VNE3BK*?X$JLoU* zd?Xq-rx6=~dVJnvg)b(Oir9j8L11EnAEzCeE!?fcL#xxeJ6(46p%Hiz$*LBulbJ`Y zW3;z(ioxa^3cz%M&9SxVOYO;FEh697wWnIS|GDv>ua-7hyOT--9;cplq94pXWFv74pnSLINkIWo$p*{&(GiTT1jV*@y`cKvLxb=m3>0T2y5 zk0q#3v5yx8tuu)3PR$&!f>vjPkyAkq<}F}Oy@HRyMZxxUu7Dqq@m?j5miKTcGd zGjYlgXD}X2?h1$v*a86&xpF?xlHdTnMJ|lN5uKQzI`OjVD_&8TP>E zbzK+kUTCO{Ua6!FOA*7={N{*$o%v!2rOkvg+&-?ni1nqnIj<^w$I z>0)!Zphm|Tj>F*tTwQQ1NfuPIw`^Uv6I>m&x?D8(0(Pl_HaKH75AiZwODY7lO%Ew(Ax6+Qun?y zpAf6q{&UG~A8p}dE^7;ITn8 zF6RJSWBH5hdi|Bx$6`}v=MpGv+TMfRlDWz_fv+dD$?YOc|k6V0( z?UrP6_{La0M?OnI(r5MJRAPpQ4&ak2aI|n^!uyQ!#M3jGKU)Wh;k0$EE9l0fqROo^ zuLL|izWii;_czoPXCpECs({AIvaNE*JExU}o1iQIv&Q?_xylgm=6;FGN3zq8_#%*A zTn+6XmaUF%-ulzP&D|M9Mw1Y;>iww5ueild3mlO(Jc1y<*}_@oX$bo?PchLn*N51$ zw6m?Qre|Pc7;D!#Yq6+UJjkHhZOjM)ckkDv3KJ`f zsd5L%%Fxo!Cq3HiJ4~!hpQD4oJ-iakZYQV~# zm^H00Y?`zmaC$4kynNQ0NP|G4V0cz57S`&}t{ zoOpkXbWOms^kNyWGfFcOk%aULJ>i%HiGk|mVUG+uSvAFD$TH)#yY|d?8SQi0_>{w9 z()BSD>9BQv*6OgAH!v7cT{6%)(^~U?I6KR(IJ&4!L*woi+=IKjySrNl3GPmCZJ=>? zC%9{H*Wem7NN@=uA&{wO=3Q&%^ZWpMbyIato!Wcf*G2yN=WpUmnTx2k0mdbBU9Gc| zKwm|QNshPWd7HD!TI5u6qnGz?t*UpS#In!wb%c_^r2$5+kX7VJ&2Yfs-rClpu7#1Y zp}F~{{U6hkCldwH{whol^p5Q7YtfI!`%#h1+Gg%sVgAeHY`^^IMsF;*eHVVHrO;dC z@Ai;vtU!Z!)_kr_bQmz1wy3CVQrkBU2m5`WJ-CEjj|t_pk) z&7FUZ_k_c%uh1>J-{bq*70oLAKGc3x>P0y+>(?;vcb^LWRUP)(H!x=En)wcWi~s!U z;3>(jv0|d@ih|4S`?ZW!YE68>>o3*URrF6WXml4R4Ly>-G9vyxU!cGlj45QSw1X{B z^Tqrpw{LxMkGVUy+dXF2ZksCWS6ufF z7efABILHW;0~5E7^Ra@W-aCW7|9Cg1*@|l$z7J(!--y{vP~1x_`2S0RciAbz9&oK0 zd;5@wr`Dt8yX!der&GeXRfJpWMQLY=tffolvYn%!e0Nok{7UTQA&NFD(A;TV_Os~k zo#_IKjt=qW5S4#TeouB3VOz+*^@e&Cl6LwR@2urdaw5T)_2js6NQP79$5Va2Mz=40r!yN&z;BP zHDxjIg?lmZJ(MDZl;_=lU(GIj>2{#ezvjoE>nJ3qzwvQ0FtS~q1yqIdOhuW^t&SP= zF{*VEb1pJlPK@%gx1JO!aS(oGb>{eWAqVQ*UN9!k)n~5NUosA`kBItNs#lfPY8~FW zV9M_@{$*5odHZI}%ptI2&RoDw$0obH{Ar`K!e z&4BLx+u4PfhC*k`f=u@{-xKKAh<*U0@19j}W6~9hg4n_f(oQOijmq%XNbdoY=3A@* zLrXq44RdMgt$mIw6)Mc0oA-^9QjFr<;3!+_3_}#WJw+k?z_&=Z2nRYp?g>AGNX-%E}f{@$xu2Q%5 z20ol87NpIjr5k~tv@!_v0l3QgmV6fld(@+FCc@p6Yfw{65S)bp@v;j`-(x{Z40Bm?BOQ(ZLh-sp_H*7G*ZD6+p@WGhR}#U+S4%}D0|P7X zq>Fr|-mHc@)h`DhdxPdTB-q-061sEuOx=&1Mw7m>RL&MUS{-#Qd|UH;4WH{}aK^;a zcwIs|7qe&WK6kW|czCF3?Qq@s;OJ=6>U-65{>i-U+x(I4pVcxJA6JS#uRDrUvnR|# zkt`RApT7s*K7N0{y^@;ycgN@6<;z{TPY-id$njOTD z-zERG!Vt;i!fa%mEcra-%bp#dbcJ4Wi{HQh*34uzv^MW`t{)8c zFkS5E3nA_)dbV%%1V0=8Q^`qISARDxQj6sh=69qq{#~-q(VeYd-+aJ8#?gV~0!F5aUC@0=#!TGv-{Yg0Xv_iu`#-oyj7V7PS2G3^*=dNOF-Xt1yoa@m@~S7S&pj^AZFamo?A z8BQ#1IeaiNB^nS3`nDC7+3{k^zv-HDdtQ{KYDAc6^m7aYnHL;2e*Fe+AIr|!J#K3? z5_bNYs+N#!o-l)j@oW3-x20WHs7W#%;00Z%FA6?64iVj^3j2^qALDeQM*3Q%$3I_% z+mh_(e?um?@qJ(Ew~v3|`Ute_r4#*~#~?>vIlll+z^{#rG`j^O#9lHdu{Dm37SF?z z2O{k+=~0&JYy+FUry;k$OUYU4FL%i8u5H1_9yet_WE&DnOwW#o3|DSdSs2wJJPRqx{{kX z@Yrmu2#Ite!x=ObBD#{#M}I#xf3oOzU7O5l9Vp(M%=qFH*7@f$=I?*we6jH2^0O2P zg+(|YCDr@`s+UiCR?*C|nyya28I!!*idjgezVXN?$6xx_Z z`T#bIkj43Bg#LLvo+?>bq|vvyUp*2`2#}FULN6(o4CT*;M{3q7+b9Wu_)6=K7M}x-K`?Q)H^jse26>wwmZEZu+pBUeuaOW6xzkeAP z{ZD^bT-o!#urSxxnuWl1msN1Ote2B7Pq_BDG2%3~f3xrFvl++iyhC!y`_}R!$S~7< zzr*EpP@?}~gtGtbWc$YOdDGnC^T4`82iMKsTz8xQBhaVqkl$02TQo_nE$dX)S*WJNu<=;ix zJcY#PSC+;vPoF7+1s$?~qTGaM#&i7R4>7P)Q1H}Wx|^Gc8Mu3D40$Xw2zj~iwN>?q z74)uZ?{9Aw+Y)fQzC9QSc>P)Q_BY~Jh=k>Sb`e&a@j;4zXKUGmxq9ipKNT_-pDun< z{yWP6DzR^WYhG+P^mZoIgxXwkdMjkC+dHsYP__FqIXv3EdcJP_ZaVrlCpf^DfcSP_ zzaH{9?J6E@S2A}pgHU7fH&@91$44}@o&Jv-pW!54&ekbI?#uoKylP0i_`N)hoa~t9?Hx#`I z?LWon9`X^dW>&fFFuA>}a_zgfX#Dp^BtxkFQ>{9cMxuv_;7zfK<=2Rl{GPM~{-ltfFA~8Ir;V6-!XMra5%L(-h5hL2oM#nXl_HLq57F?!K?! z@!zP=cX38{cL?#H58Lr@H#nFw&K;xIL@l+!r5u zrhhIuZ?7p0NNju+znhslJ*VS(90=OmeNnYj(Ug_ZK7YQ~(T+z|rU)+j^0}ju=H}1O zVGx^!9#Q3Z{=);>t%L_N11rsWfV8!hTm?A4_Qwt|BNGJroBStVwI|@S(w;#9*47Wt zR1Y0ISG~Q9H?_|B==t%T@|Vj_Z5M|}SCOeR5rOKGsSH7Rb- zJl&Jx%hP%NRiT@|V})o(u|)QT6m2epWPK#LQ1r(Io*V!3$EW(t7z_1dtR4#eOxr3m zp-)^tOf4swChj4Q!WbOH&ac9 z_wE4aw++LzqTKu<6E_1!HM^IBzVcS9F!7MLuoxMpUDt&JzkEX%8P0C6v+ajrX#ImJ z+CP4F!ddwvLXTZp-6b7@2IW}wRqh3fCyA6V+f!OCT)&pu0mKQ?L>1A=$u3i0p|*C2 zf{(0%fn7$N-&lq3@zbVm2oJ*_U4h;pb$N+GvpH{irYvQl(@l4$zYDm(nvS{0fdy(dXv^C7Ego&xbG|L9wBCs0 zV;SwDJu|+%dbZ}tezL7Boh}`sf0r`4lY!8+CoBp&7M6yZ+E{4S1Q3>8-9yvWJbO5^ zp9g%(D1rf_3)>SD6U);>ws+Xuv@^pux_rL^3bme}{`=dKy1L7y3KbxnzO@(eNf-#S znfLl&{GY(mqm*c$h4=i7%}EvI+kt?@r=P3qA-{%h80*Y}PULylbw@DN4@@wCJtGPL z8UxhXdpiZdPdu|OuLb0+BF--D*`{Y9$l^HrHy5YAg8RDrW27~{U;ZZWqV9S8f5)+2 zP-A6*RG_`Ry{zmgkoM#->+u4-rVpnJ|KZ5l{vaXK>?mt!xH<+76*0l?0c>4v9-f0j z{YTs(4?}#F7s6)1GR(xsmjPcQ_DSsQ@)C^7U@csKhEqK~IT@Rr%y?ukXMqBQ&o(zV z9UL6$>!Xt;{V}1Qlg1ls-`>7sZJfj2n|OG5$c<%5K%Vm8NJs(;8TZ7+0Hdn5w)T$; z$_MI~U^r#a3o0N(784UQs5fp05{m>Z`gP|00RZxvRKP_Rr=4)m7&>WeY^>;}fk)*L zpOuvr5ix=%E*1kz%?_8k)mB;sbG5s(^K`R^McQ7Pg-i_Cf)!&ey4v!>?ly~@*sp#I z4R!!O4iy=B5jZkBsj{Byc|-JMm-qHQ0pe9BtD04*APpdUy;7(neLD_Bzk$SiA>XnX zreVnbAS|F;?&)C+3J(%kydf9y866-0xUk0yWW51MdK|aI0tdd6+win))&vxat)ikb zUvR%6P(s(#7&;q8d3bo(g-jD!PQj1$OIozL{dp}M1_-rNb8_BtoS=om3yX-{Y_(sY zlt+pJkyCmhY1#TSCP^EBhNgWb;K5oCV8O^Qw>xj-%w#E$?Ej0NWA1M~cv5k2xGqMtVAz!uX^-kcy@7X%d_V+xyVI3} zWBuRKZ%^1j!HTQR)>94!pf|x@Z`8`b&8;2yRvE@xZ`PYRS}Hc6xt|DRP0y=*I{yCo zdC?s-W3v~TIw+3hL2q&aAhfq0Iw?nUdx>hF(zj&h+dDc!Kuk)KK)yegbGz+u-i~b-eNuama_I@g3pW87FyLBlKjnbaIOGb|e)^O7PMu2hISny1 zGhjT68MQm{{EKwvBkWICCupOC!(&x*WUCOZV&jh=AElX`sqp6f!mMNqU@PKb`~w1} zZO`;zgoTB{l0AdO4a%nL$BCNqp+bL5-J+$(8DXygWw30c2<$^S$=Po+`eGGJ8JS;{ zq#xM)l(rs*y9{frQEZQH4Yjna)}B!;54aI7tVgidfN9BC4MXIaluaYc#+$PiUanAg zV%WgZeqqB{2#nW6p?Gk>NHoSye}FeA6srytgQrkGd2Ck+EqP3f&w-atE_8+;XD)CB zLhfJ_=>=0(DO3btJpvs0yQim0F1;r5;KQ{^LGD;}<~4-IQ3+{LNEY%FD&PRIiVTCs zyKxpnb!y=udug^H8-m>r)Wec=&~CqSC{e$M2s=Bb-v0F%UB3iK!JPeG2{o7#T9)L5RKwe zCvDZ#_Pn2e5;iaCC6z3T;24?gk55nS#{EL~rW8bcE{kEAXsM~CK6Ap1Bf-N%ox2rb z-=$fcDH4d5iIAqsbVkBe{&{|0j8?U?u}RC%cY0UG0uZ&O>^YJRrBR4nwmJb_DOumZ6E32lweVgnGw(Z!Qksk2>Sa| zt=zD`e}hf{uIqBQ=jr2nPC0w~_dkX)KTW@&#ud6ZA?$p}I7a#vai5eJe1t@lm z;hJ(RS3i`Ml&nz6CPRstatc0Zmlll!7=L7FTUe1i0o|eLbcOOM>8^i1j~!+Z&pg5{ zr$Q<4r92b>>6?_)BuWklaXQ|su!*d|4?R59y%mgN``Z{PVli6kwjOZRFT!amrjx{= zkra*^AN{Jn9pHr0pYh^BhaL+1Rg=WAuEn+C600!@t zM+EKDk|UtV_+zpM!;EW`Q(!!gYCJX*1#C+(6G~LG(GzZH{+2wR$n?QYL$m6mytKX? zKzjWe^o~;0@Ahyk!IXWf9C)VWOMH5Z!(*JZAX{Q$%=7d2{~A3zR)Z0bXSM|Uvi6*a zr>rQ3j#(mySwXZleo{`PYAs`IXxN0ZY2YNv3a0VE)^nOfKqG`o&3+@0!m`9Q3PlgE zA%?I5*tq=6RIBE&uaoPcDN2-1uA}IVBv9Z&-4d7}pTZcIVmR?n+U3edC{meC-aH;! zULPC`m4_15g-frgKMDEY(;eBsp~)&*a@y{*=qJ7%po(hXh7E2lib*04F&e7doQLlp zknKbX7>1jVUH(VlLgE3XVFLm8cn!{s@h*HUY zhh)E*6v!s2+Ngu$OgIgB#$f!0m$0e-w9pbq)+eIVo`w>MYR6tYPYaSUC`LOq17@aJ z%R$r?9B2OR^9@Lg`IjK0K>jIG$4F}QUI3XUYYaKfpZ>u~YJkV5i&RVHWYB0%?^b8b zk7+e*oGITR+3!`TIsYz)T%)DclDzVsfM7*q3gm+tQx4o_OORD5Ia&M#Y{9j8ds!*N zX?*N#x5-PvurB1z_GWX!*y7Z|FHyklCJQEoiYYZ-F-TIm1deJrT7iQ)MF>U6PI&}(H_YCF3X@tb#8E)xc#A79n>b(3b(G&PYO zl$fQ`HUhzvihv=hDe&>h=TMs9on%r3jP8N3bFl(dvj-QAa2-(~XR-+4HLlK>H;nSW z7=s*w!@>c~zvXB!GX_k=BBI1HVl5TAHR4mTDm?jVS$MWA1Hl&u`RvdFVkK!h6ivB5 zM?WN`tFr18?^zjeFc0YF8R6+PL38*kxvvnEiwYv9>~U`7%|xbHzVpKGvjA~0%F=rU zS0r1q*j=1^5YY;3^sZ$B0^C?@V?S;)&=t?(s93@o(NzdWL$~SN&$b-jq-?vq4u8Ac zWDmZJBe#};_(`R=$3OY-$_&Sw9{AVNX*;RDpYUjtQnUO`=98GkXgl;d|KMz%+V5MR zzaZfZ>^B=Y4+?rW)=Z-3u&d;isan{aFkBz8-aI_g*4FpP3*(H7tR%mNwawiS?0lpp z$=bWs25n|R8gz#nBVnX$3VBB4w$M>zYzo_oS%k#)?u3M|(hvcWwLbX&jx3gNznH_E zM2R)VzZUlPYy>(v@DSpv&qFjV0{LIPjU_@sPu1kU7ioB@0MWaHZm1K-AZ)OnnWd7fCq!WgxlG4H~Z}~4obRc5{QdoTf4THCfREO zeH814tEP^~qlIiEf$R|5hwsV=XFk$zsh@F@ybGCrF=Fzv8W|w$iifk^k+^(CL+ijg}9aK#&EV{bLpea}I+C@Pikh{HkEEX<{Pze4i~Akt%w)>%*}Oqrh) zTz%>11Qzm;eHP<{1UIyqAv*XnyAayNOZ{}!K>j$IE3FT_kdytkoLKd4+ z|IDdGrN^7;+oK3Jmcw#0ni%=BUCx@>Him(o)+7a^1RTRl$0s)+ol~0Q{J?R?jUZr= zTz_(39$Wl!J;x?ek&1Sbwn6^ZEk)Ftm_8B?u1f&gB6sB`Vn!7j#4>|EEHEBMVf>Yr zlS*a$Ur)A_XeJEhq-G0Fw)&c!O6h_gdcYtaSX)39$~iOWPmsP*e&Vn-ge~EP2a=(N{vn+L3AN5^1I1&+kxEA1? zOgRSo1Pp!TQ42=V#N9Z(6-1$%aSP?6a{L z)Q9aE=H|eAe55`E^ImOIg{8hhgkv;uh-x+M1MYxD4TFTsYJ1Q#$lP_P6E0S+;vx35 zFH9&0XFtfGfS{BGLBD9ij)@KY$^VR6I7m|luRUXZM=(2@3SfsHr6wV`ld_R|6eL6M z!&KD(4m9ZGyK&qv;xJqXj=@!UqJNgz`e0-3l<@q>)U-@GzY%!| z6;0?W7f%194tXe#Uv%RwVdfzX;5O-naJ9=L#=`%oMZ~67reZ@0?4ffFZ}9rs(a;{oyuzib^UNaa9&MJg5A$8i;A z+ht-AC7;`J0~ES4K&&0g63fTqAreLbnIe&M1Pfy~3BS{ffYq43UTDP+5*OS-t~;#k-Y$!SJiYP?VU#R#(pr5Wea zewSTpUy3DU6#MGqaz$3nQ2)7S`Qr6@6GmL*tR}02;V7@F zM#bWWq~a=g+yGmFZx$tZFXS<9KcX1xaCYUYjNV}mk^12-ET_`rp^@495S8cqC*n@t zO-^c?fugoA5da{$r_5+9PTOe~&}s{l=3v2%zM6u`u0H8CasCqlXQAy6$Gt z&eREEbYb5uBV0?%J|UJfqN%7%&LRH^<&FO3L}!CYT?LqeqUWfRv+*e@v0lz;`Z?jo zm$S_KEITjg7}%XCSWDnTXn(XZvMJYx@?R<;f@64!iTeV6e(e6+98-bXWLIt6{*eF$ zXCBHx43%C}c_hi*)__MrJbyxDVJ7_+{5m zq;iG+jF%zKvE^kLN*U(N;6E0(Azew}chhcM%A(bKFOW|4z>Q{yf0ToQ4cgK{D5yR} zn59eCMw?S?1b;-g1bYZjGaO<==xstD`M!C;BxLZA@xwq$NX*>O(^P zP%*{o(#-={so?r!IlyN|2m(N*6wd`uO+Mm)?B0-1-ornY2|inPhnm7RHsMynLhGG& z=G$cHGippu_*cN1JfaclF*%5mUkX-*4P(&u%fpFf@M+PbhV0y~HJHt;80#!+Sprm5 z_^32^Uxg>yFJn27!KG~SrV?UQhBTQG{{NU22O(G>pouy9S2h_{bz~E-HQ~D)7Wo;yhLp1p+{}zhflfe zux=i^6?nkJ;K1SHB~Eekj{F8oa)SgEd+e992L)GB%Sd8IBbAQH8Kg&um1~Q0CMwb2;0p<`7O?%_z7#!~;vh zdj`?tDD#B7SVHfD)}sUV3ZMSu11HgdKuj+$%=bB|~Gael3e$YW>@_N?Cr_{d}xegy$R7$K5K zIMf|mw?Q-tCc4<5F~znV4|POU=DmAa9V3qB=t1sEm~Cvia-x{U>?j+47dk#qUMojp zp(%zBH#!J+)!~0PP*M4zp!P#GG}EmBw#e>aC1^uJFYFh^F&THaoRoGw~U(ofN3 zgYBqrla7~Ge$g;6@0O#IbW{G+@F9{Wrvy2Sj2AbPIV29E2RZsQjU7Z<1T@b*ifNow zG{3n}q?K-_W7|`ZM4IOTQT`|M6rQ{UPM!PQ2rv2Fvr*-tyCr5|KvgVkgJih^j+v z#b7t>BS?thguF44g}fzf`qDWWl7->U;40P8ypcHy*r<0Ufg1|M`WcxoE>A%ULg)BooWg|(M{hZ(UBj?Kd zK?JtOC{X`-Yw!dG1LM0(xflyT;M)cQ%Z(Ua!&6gApE`98F5rC0yQ&PUif^xgdfEVg zTSo^WKE9}YqKh*yZ8}PE%((E}A*kKiaKQjDJJ z8&I&JDtz-Cu%J{_0F`uZniz%1}@aO^%;sd+->OG+7 z!oY9{zA`$vvy5mo=~Vxx8qHYN&~ObPuzy!-NFAQI1FfQ1gGbg+niM_UHXa`LJi8*@ zVOKn_^|mM0%Rq17fu8JnGHjB9D(;S$grxi9YAw+V&v>15h|2Wk$cIAQoqvlGssYrS z8BMr5g#$r9F{G6&_Yiz%a)X(DO(l z5$}0LnVg=c`QS;Nrr;unt?@6ay9zcg${d(mS$OQz|CKG+De#+z!}Ig<7PnXPDM1u|Lnw}r>?9x&AEsG@WW1l^^@RSKnP+~*#($d?fJ zKPtN+bEKxF{bW`KE;HNi(cvNF%k;v+`sc}WACikDG4=| zFdfIMO?7sbdF7qDHI}|oH;xnHQhqj_xE<|(TR~PA&RI?=;A;k2A(;>f6c&SuLOm)j zF0CHV9a|d}Y9TS8>4Dpyg#%9{j!lJbW1zjXvLf3A@sH=74mJ=!kN7FAWd!mx>-LcA zTCx74_`zlsXmm%Z(1a1gFd7xR5bJQ(<&@daX1D_k?K(6S0NqPX0lyq)2hLI#4Z>uh z1H-3890ADibF{093LM*@w8shN9kow?rRWyN$K|yN`Az%$zT&T@Sy@^2d|qB!a*OhV zH2o-|9~IQCC@&u*qcGyGvn1L(yOL=m$$!}d9L9H~v`1VngI*JiOEZ@*;j^(M(pUxY zVndqQ$|@i!u+V4!z(5t&4O8v0dm|#)3T$sWcJ%5hgi@5bt_CaW%nQ#0tG}$f-L3ET zOzGKEd&_GL#wu>&30Q7<0(F$#-pMO-Jf%NBd;pe<1?*?&?(m5PFl`yM_#NoID3WQ* zeL1o0^?$HU(sCjN!Kh6sUy>Y|sCI?p8b&p_r(&R@re3Ez0oI@tlC{mptVL=8>SENx z)DpoE?v|Jsq)2FDNyMCt_67j^et|~=njUg0;D|5i>TvnVO8C|kc0L`1N@>hrT2jc! z$THc@riFBU(jgA;mDaes%}^r%HBYk1n(M?bOY{n0`nEfH5CX>W(PQ-#ae{|{LY~qz zHhy>t5&$-y%mCS?BCxWtDRE`fb;BT~np6<|PQsVxFja2J77rF~ARMwJ<7d1`UEmm7 zb<2=m>W_*V>+^ru=s%P{`QSqWO=*tro()ODglj5Fx{phVl%a&COJ)9ge58|1ha*hj zlP+{3zhRpnc85fDhRHN{^)qtf7j##79N!Hj9C)nhSq zBFeE0I%NKjF&ePEwCuN$*w|`)@vksC1*)Hf$p)HN&p*^jtH%mP-w~Xq`2%*)uE%{1 zl1wJzHPs4xnO_del{n(}e2ETl2^0#VfJ@s7b5sU1%CF01976Kkv>uT~vbPu#fCHLr zRH6DdxH`=4WZr6vfj_*;J1z&Gz(U(lObf@2CNp)qcj%@%%toyAENH$@NHg!9nQ{0& z4dtC5c&SFG${JDMoyw9Cm%)6WD?A(!SUMf0#y|LjX%5k-jcBKqFDDcZ_!+F|0P$I& zX{XCBAZj{)|B^BnC5AqH-%P3Yp_K=7<>&ogC|Zsj`l3eC{{|V{@JL{x(Sp*c zH^peG^eOK5G+K!8@cZxIgE}WWj+O73rV!>y_E84Eh56zcwgkIlEMcon` zw+hu9mXi?^EB0iiY>HkwfB85f2GU0L%}EfQL`EO095xohPdk}3^|Hg36nbc(VW)gg zX@I9>bxh8h1)E5PGbr5y*CI4CWZa#3J}9l52?zUT<&(L94@Kf27xjbIzu&zhCDPBA zCzwKbJ+fD#Mub+`Pf3H5nrvD4pZ*BRN5R*;NDRz@*AJWO%Nsh`%IJSP!ohH8N`kD zM-8)r?1qbJv@8eM!j{tfT0T-!l*BAW7OwuxH3W1tS#Grb$nX@{D5Gp$395+(M&vqh z!>AgTM4|^fp)M#&_MtHjvyMye?$6K8kevm656PS=Z*q9-i1UdU@OTHw7_7b1A95St z54C)lF+}d)C+@$+4YIlM{1PV7q8%#Z#=+6ntST8_Oe1g2TqeacjA}&;eSnV~4P-T1 zn}4pu^pV0Hj;H?`89Tn7|WNP%r@9DpDG1ywQpn0u-E$;p~J4sNYQ7eVpqLUo z<4RjfaBA`RuG~R+o?IU4MA|*d7DFHVKoZuA++frHtd=>VX^O9CKI_s#lRG;1m6T`l zD|c+@`J}>ln;gouHQCzyu#yJg4qNcikwamgcZi-1S8@1G+h0-bd(6Zwy*rp4JQd68OZNX@X-xHNf|5Jce;CsQrs64S)^$|%?h+Q@gE-q~~W(sl4Xv|+r zHtn#pC0vfLhNP45)sriK!Vo_LmZH&$NFt9cglg6ieavl?G zgb~iga3X6a{S2~4!-op&IQNa8PAs^5hlxCQqSK>}fq{Yg3fZyb+iIlikGneRk@uLK z=EF__Q_xFrbGCLWcF-G}vloihwrK ziw#L@Gb<%V@Kd!85>(6cD2}g16+k2pi!p}fsW;93)rIg|#+JjhS}|_8|&Zy1Qi2F0?1kNx)F@35Bs$kRB9- z#=%jcsPwe5_wWGB%=~E1y6~VO(02@a!^qK8WKNUIEZ>mqBvVO(BRBTUYcFa$C6u&O z7e$(5qJRSpL~6ArvK9(Nl{H#}R1h-i9C1$O8B3#;L=KVT=09$3Mtk`|zchl~8|Jhm zq2UVEj}|eWaRFj7+L9 zu+s8hktPfYXu@}9nK+~S)gk|U+kCdzEJGFr_A>a?qgcK;is51|I)(aSS!#4_Z&^?x zZ-k#N3fy@Vyfr6%5B#Cw*~iMcI)tN=eo<+j6r}<``;HX9V_(|4oW#*UQEz;BSo#pHiETeuxrNIFz1`6XVvQXrfMkqLpJHz1q&TkojjNpn^?2&QDVQi zMfJz1UuuicQ+gCJ2tSOsFUNkf{};3 zyDDx4N%*N~ZfJQqY3-`_+%a#ZO7Wc2{l1H zLc~KP(hCPNhiGp2gvtu!+41bw+2-u@b+HKA^WKRiZPXOay2iM&NxqBGO6v_~Xa`J@ zxX%`J*g8hu3%oO_4l=Qu3|n25@E@M~(IpL08uG_Ezd>v{!^jlzfpRklc-=#YEGmy~ zuwRH4kdDLN9?Uj{=?y17Yt+aM>A;9~|AucD53jBGO$q?ROx={LPv439r{UM=We;Ln z+1O(-P}!7+q*AG8;+iJbIH8CF{&MVYew6HlS4kV6@Jl=MLGM`}k+xJS`#9!7r25Hp zk|`?N@?(DaZ+0^Le0(XY4kMHKbtx=9U2Bu@5W8Q8@E&+5IJrtfpZB@dP#WalO(AHr z7jrS8=gEQSBRB!APy&Q04iabJE|`;LBS@o6{a6XTWO9aA#I%)EzuJT^l}X~M#VLJ` z6p&^riPyxX1(QbE!294kMiOh&>_JMxLjK_Fv&@dj@kYS(D;L`{3agRDy_<%mUlf9@ z?3I+F7O?`8JvDNmfnm~;$6;yJVdE`H6;=ghqc4Tw2!5e|KktFQ&nxt#E2KyQOTCFk zk{XJa4D{jT;d;zJ z!<7svO3Q@CvPL<{2uUuJ>m=@;(<^AyQW1-V0Nb!Z%CMu9v5joMqdS&Lh2(!3IZ%J_CyEW7A^_-I&`eY8xI4lc_# zOX_lmTq{zx?jdaaNGN%dn68xB6I_}#ZfjoM`w@z9EB00yVUVP+ONceDB(WRL1da=| zoH>bsRkJphT*p#^>jROyq^&AH=8@(w^2Tg@EG9h>hxw=zyFhvZhF29~S}ceN+2&~_ z>{V5Yf8wg#;V?D|BI%}-YmInk)@(gCo5SOv+U1TsvV>^KY|8`sqo%nJr@r`^I1@Im z%k=H|N{3Z}1858aFvE9R7R|CqR^eD(nEl}9GqO<|-kK;sRVzA*3+rZSQLsDQy zcjxZ`YqM7gmyRT{KQ;3VGd7$o4oC->a}c#o^s*9a8EuB^oMe8E56}w7@=v_GR0xve zD3x5~(wJ8jo*YnRz9}o!dyc<$ll;sdm0<(lzfan6XCLn@Kn#u2Y~bUAr6*+OW&Vv{k)G8Q+HjI^*a-}oY;jghx(r&AW~VjF)k-v*Fs+N? zUn(#a^1U{Firf4SgIW^q#KR3roN{L+c_D$0N(DYrxJhH7pbV+=LdF3e626^wl+rOn z<;W^D)rqFRx&lKfhkV`xN-|CF&CPUNo^Q*VnK_fmX436JuYmmyNEf{}Az@TX@v`U-Xs=867utl@H)YmMgYK9^iph%a^0T^sE&-n1GbIvkOsXK& zNZ5NtxE5+=_FanE77-s0lE^v`kh~a&x6?ysP+Vjk^=alK|$h6}a zfcak7C(YrNK3jGz@c?&tD_2}99(^86w1dN_2dj6xC7pNKlbV<0J}g1Bxx~>VqjI{5 z*}1!3O0}bk3>EZf$1J4r$#Q%BhIuB*GNyS}ph z?ft&{i4SD)B+i>RP}=omSl>O6gf9;!RiZq#5;@dV4+8{S<4-6LnKxr2 zuCk&R-Cy8GJJbgE5~&JaU%dHaT6xSLBiujw<%LQOpja}k*JB$Ct!gt-H-6o+MIp*M zMS6>_NZcuy5vgzcO$;{K`9f-S$v`*J>U21sj4lf1N~AqeLaVonW`Tq0Rz+HY=0%z zKgUWdV_VvmP(AZfk$!Zcx(p5p$xx)_2E})26yM(Bj0iu36Z2bdI#MU=8YZlnlYj_H zNl+^FbaswM7Nx+Ot4UU1O_XKoHJE#QCm}(PM6y_xgfQs5 zbMO<#6VLQO7ROQsxrjh;{QleRI4}tjLDK4tzDHfUkXcS($j@7e%`eUvdZXw`;TNQH zN2hVf2EJM94O+5jX!B?!<82UIN%zk3;0<=RDiIciqxnKyY0Tpl0nb{lVokOfQ!AGD zrS?h!DZZq>Idw?a8}_t-mvcf)K$4p8x7HHTr~1eAxUMFP~LD@IAw_j=h1dfkVDmvCqOLrwRJ3l{k^*OJBK5>cqiSsW_r1`|-6d3J*f26Dc;fI-Pm z0Sw#Zdf{Nz|HVgjSpl}9`^vCoVm?0vznLO} zFgjMSu6x-^5vm{R|3E_BGGoUAmuZKph6bP>*tquafl?kFA0JxY5+8I@F5Db18JVC? z#Kgq(Yn(plIBpMt0Z5bOu#L9U<q(5DfreDgnn$m`9IaH{W%P#7U9q-p2bqd^Piy zmXnLj$|8PkZE0z2jXuKw0RhgD7Q0pVquG5AA)1x<-Qay7k8*f8>Z-B@sO2zAj9xA3 z3Q>)G1M+l|vCaDq#QBW-@iQ|jTC>NpEjMqG`2k}JOZPx^%58WfK;C4er|0*3YyxZx zm-|n6xQ_t)@fL5B7N|Jk23O6_%{gxkL}3u~Y!X&KmIJK2Mj*-AAHI689?rzcG#FP~C=a&kRNWhJiez?DnWRm-wrH2R5o6F=A=-lPCfvfFKkEl?mUOIQsq;bHCb=KYgGNMCg-rL(@3e24rR*17A{8 zQ-QJ(AHp<1xwMWr#7e`a$PQ_5a;H5fRc^*4A5;!FO?_ z!qJaI!^4~nhGB{^N_l$kXk@TisV`;)=PzUEtz0fk;|Ps^HB zI^0DtFeAU2)xT(7WH3}89Pw0Qm{d%%S6pU|5&v>#dtm^tdg3rY?0YO@Iaa z!t0-q|M~t9WAE~HZ*uYTZVQ_rOK@fwROIk88*xHGG=vP7gL+!9#b8ktwtiw-5n<)BZ5+|v%U`@aa(Y%^2^K=21XjpA}}4BcGbMc_eD zfhurqAW6`kj<$Aac=#4$10G@MQi983tx=x&qxvD78hliIkrKKb*Ny@R$D;u#&k03o zb6{G9$$r=ZZY*Dgzy9%6#(PO5Crc>r%-P9Vh z*$Wfa$5D0CVCLYMJ5f-uH|GNRd3y^)5tsK6?`Q$6(+0Lv@ct{9T@_5J7-GkX+Llo;d)HGK>X|;t9y$MN;FAnr4_|sU@hi@S^I1mU>c6)l zu`b&2gu@+L@o&S9ap>X#uRM zP1KCDipNmo1AON1Gzr***kl~sQBisXD006HC0~s^S$M!bM5#33VIaICQ%}G_p;-n? z0R*;}HCk|@aD@sz$5*C=o5|`l{b?$@))`|g9^`a_-%>l+6f#37!mQd%Bs6<_(Jp*6 z2}+|Q%*@P7RC$AgZaOyBaA|VX5uu7D_>J`9q8H!wO@31|NmQ^07R4&_(QG0makK@0 zR#9L93V+&Ygn9IiId9NMAaV`M%4HI^fc>-WYZwQ;;?OA*zE0nQ)O&;_=>39rr__Snw4B0XdNc_AC+&Eu^`Qv9*dm5X8TlH2gnIn}HHoG*Zl0If8%`69TIG$eAF zgvw$%cM=XTPz@v7>BDPtsInQJ?e-0KtYbDeQfV_K>rCYeGme!ilCxS4p;dpz+LFHw zI(o-WU?hXn@A=ohw_cnU+_wn(_o+b{WEn4X)Y6j+lKV#a=hy*zHt;wYvg+n4?%bL) zLM6sTSg_BmGA;GUtWwEl1uD<5eYfGn6(X1KggVP_A0$kJ?K6@Kya{#xvIZx=(P7au znZ?UVJ5G>bxZ6^vuCA_A#gZ*^02-l5qTeAQ&%bbL5jzvBQ)To)u?OYEn+d(@+t-OikEm|HQKn}*l}5NnS%7SixnbeSyA~7jTw;W2?2U-3)GOX zEdQeL@0q#j1oAvvlXpNu5a?i4qO)QFj3iO!$%YyiLtRp#;!Z>1pE^q2y-3U-MGBB~~qS*deQDf5&b_&qJ zR)qI*9n%LLkeGmSKA9=?)iVVh#)6PtW<+Co!HXDI@L-?ZkN<(0-{K{#$eCqN?k4Js ziBR$&!xII@s>oudQ9YnK@y84-1O?ECr{NUoRMTU_Y%#{!z>|jzBH= zcJp28w6rx4qZZlbNOWNP6-K|hA|=;1U(i2n{j%){h+M6(_z1BvyR4^a>%>x{5RTIR zhKSS&3%?Cn%sii*K#}`yKIufwVm=qKAtCUZZ6%<$>5@fD>aOURm_yE#BXOLm1A~L? z+)Wgyp@xreJe>W8ZLU!>ob;3{l?Z*R}IMEd@=q#uo^aTW7$Ti=$dh~DQX-EDM4ZZ!UqR5f`|vO}2QJEl@Z zs*u1avsXFr0cqJ92;!YBWQi>$KY6p`@?-w)1+ma*Boe9~OUK|RjwHxm(dqz&vL{Z# zolR~I7s#`hcfouh?BP^;B=1K+O14PkkS#EBb%j$fIy%ZU;~79vc;@; zorN<4{BabL&72-tZq8qYmMHc;ktJOoo`fOg zmOVBf6t9xA(Z@Gk_qkKICEpAt!a1GN2O+?Hx@o5p>P10U^caE#BubL|H`}2jL~mnOdN?f->D(oeY~e?WPH~l2FM5*$tem0 zhMsU9(%deI_C3A5lM<~0dF9JVig(dJY;6LUgFiCadV^J)lBpmw_bXPbriRAIDVh|#hsVxoJav;Kr9DK`K z@q+dJq+B32jwrP=>)0NBYCkIrgs3-Js)%Q1Of&bn)M0W=i&6ltJ#zdslpcnFU}%vb z($*29F#F$JEkW~&@1#&1i0GV~0sm@JtG|`xFS(yh!xp%G+UDUuerU9Dl6Oh0O3^Ok z>aQoj-Uf5c_gaV(?N8^$6K??`Muf3%q{F`_OWD4PsT;Wp)5 zcVcb-!tMM>A*R3W4dz3b-xzq60Ir)`mkP4ugAM!2MoSw`&=emRmnz5wCR|=vz)Mvi zE{Y>iiZ(%~v_sJ76?h&U;X@KNMz`se+h#Tr|1B;4S8RnT4t5pIe^>PC#lPoh+oD5F|3^X*Q(_xP_~10QJw1O7;?ME7EfWQA=1Z)LQ6~qDln*_NFW$pkVW+r z!d_uQh1R?STn`KjndvK~1Rj0Yk=V!85Evh9iXddpz}`xIHZFGb?0=% z9GUox*NO*&uyDCH3nk6l0fY(dY4y=dzws@8uU7*-m6h4E2QS+VOB<@19j zHsJbt7NTR)ZmaV1FaC)AU6lvF+Pk{?G!TUoJ%@^F#Q0ZCd&6JH&A`9_G(Pd^lC1zf z3irRw*#18T>;C^}LtC}7aEb~FO`n0R2qI!wshFPLD!`}(B+GTN;o+~S|8m;_a=Vp^ zfdM$(ubn1AJUS)@kYu{JxV)D5@9&5Mly|sLY-{H$*8@G!((-bYcx=Ct?_XlNii#&u zKGA`ZjZGyjopMAMP0&ABI_keX9UzGQzeG#_f8+pUW@Z}JA^coe$dJ+cHy8)=mR43? ziJ33@E{NTyS zNqvOzzhm~7STD9jL`mVdaMcBuhEK46sq&V69Hu3Rr2kc?B zp@D%g9R$S0F>Sx6b3MfWon6W?XLo03>v~Pq7lHwK_c_p%nU_BfIBn1utUu@Ukf>US zhv{8+H<+xEy0)gPy7IVSZ;ds?_dP?G_n#v`S_(`)4S+>o|CUh*%`r1Mc^(L~*4Nh= z85k}~|NY@w%)}lVLDcT+_^6GCh|u%r&vPFBWf0-*ZZc}1T`r&4Kzz$cW%m;S^#zbd z25`>$2oAqGGIDeMC4cKAq@<)|XUAfozB#oyXX_ zt@(+W_)af%>S)6V(z1A(nloIjipB|9Wt87|Xb+`lyv~z>0|w*Mr%%U6M-qeh3@YA+C%%<&Q!|MkY(uU zFtEuiV8;fgdwYKaCLXhk!oothu+Ol4?tfFg5tsl<0Qirv_Y!bWw6E?uXTYX7_9u+nfl?)0o zMOE#}UgmB<<2E}@D=QRpjul0TjU+LABW(>09nEq<>>odWXr^l7dLZ2#-@U&>e+V-l z++C15{2*=Rbax$-t@YnOXq4E~R~THFR2aPK#h;-=Xmx1CJ9nQ1q>A+%+slet%dkfo z-;InxNds_`-D_2+1Yh_s`#NU{6nvHW@92K9Iu3Xk^-CPe@k)BTk1E8HokbAIb=gTo!$K_bS(`x)M-bvbZ!wDFrw0`*3USWOZ|=7P9=f}(_Z-3>-eR^JXsYUunO~U~)XI^2bZj-u zWm(DBtlm8zk!?H&K<=R4yOTzcJ*;!cQH1Er*+#%V0la_b)Sb41iM^AT)$F1d0aJ~c z^!ri0IHsqxfQQw90GF{E&f;P(O}t{=KWP8Cp%6ql7{bLUpfVg+fZ*nSLd+(xAW-Oj zX*XH@=@*Bc(^$(E)=nOAV$uep2B&FPma-ZNWliQJ-~m}{w{H=CMlUeV&iG26nZ}< zTX{=o{#k~kDd2h`&woDvay3sAM?q-rF?Obvb~{cMLC?^suB(-U-)g_}8F~%97KQM6 zMEa~0uTHvw?cO%GplyF3ab5a8IXEp`aNunvX}7-qN<&=5$mI@`pnqiuC05bzLFxX8^jAN3$Cu5G<$rzg2h-wHG-fs4*I?>Cnsd;f4CzmSx3sf^)!=hO2&&hD=7jzq_d!g4@hxq;x@<1uUZ2fsa0 z!ad=*`}k|GLWw+M`If@j>RH|! zphN9>^I8BYADM}rD5-l83{1}5H=HHfKK|3eEUbw55~BI%Pngg$`)zre6=|Hbn8=^* z%ZW_}?lOB+mb3JSbHphRuw?DTL|rlb2PPqG=#4q&*)&rQem_54P?u$PZd_x`MIl5l zI2$IO3~&DN|4Oe#b~e%Z>q4y9FFw>s_P$o!%6x(4xXvr~oI* zN%DCj9mi!SGjj(j60|ehD^_BY?3}T;Aoi z>04TakO`hFo1LNv`i`-i67B7Bsz*?Qz0SE8q*n)tTU zxd2*KT@a*d;#x8LCOpqZ>bBw`+kb| zT6QtEL``Nz_JqGs!^KPu#JoaTtUchP^480?xvRducVJ2K`<&jwXWuk|!bzh*^|`Q< zFUra55vugLy-uIc##WKbwXaIf{y4Z&1u^h^+XS&vWF z;$L!v7moUk)6)5nGHK@hton4~r1I4&ixDWWxwwCzM1wvIFVB>RARU7VC0m*s>doig zGts_@n_cukX7kV=Au-tza)Wbfhi<^`>iSl%`$8 z77FT+q{V~iVrQ}+=b-eLuz86N;Ql!Vk%Br6TIdlo;ZQyqShN9H0F$|f&jNNL+%P7dE|7|9u* zJiy<6Um9Mu@}^$Y;&&!_rPHVM-WdI@PbY7Fe&}MnTO&`A03Vr19u*H@ohW4lUB6Kk zRGMJQ*|QhWeom)ek=G|rSwH>>VVBy#mp;~0XNPyF-P~DvD}Sk)xItY~RQgtNT(sF# zkuOA{{w~7c?-|>4yhFQdo!23y&;8G}W0LW{*8c_Z6)X+))}|FDsWcs4u)-`uEmXcmw=LbBFSkEGxb zL$z6wnlyLM&@-*rT$`ZZ;+>bwpE2E@Lg-Mt>aI%BO5^tRV`2pkOFxU?Hfp!>p*dKe zpY0W|FPVK(EYeq;77=e-)m2utJf2Rr`!Ps-=}J>~>T;j^ z#vS-~4?o*k?%h5V%)N5o$1%SSo0H6i{dta2f8()g(+s#e6OvA08Orl+rEYW znlq~l5zoM~SM;4P8IBK9#jg&#)!S-;4!bo3_<4E?c|h#Ex|8ttzWTkWiD+-fwoFdgZ?5CeW-T%D%Xpz3xPGm%4qfdRi66cx9KN z$L`eZ?r%j2UYdY_H1c~j6n$D^nEbD22Z6&lUk5#aq;2FbKIVNi4 zj`EuNhNh;Xveq)>NfRd>bHteW;1vpN>=kwM-Of^laRtT-1_m3Qs+GOHl}v!3rp5Wu zXIZ(4(cw4GV!l<4dA%1OOW*gCq0H#3B+%(sp!Kq$=In_1H41%@qEpHKG{`)DqNQd$aWIUpq$0Jqf6ta^bv-mKe>`r)s*pDyZn%j#Ma5 z%BSNnO+0B~J@+$v!T=s2GkLBwLC`E$#vpi@e=iN?jLj4p)q*NhTD7SIFXsv@`vtk~ zyU^t}iQ)e4L+L&W*AH4Yh?wF&{O|b)2{0()a_;iJtFBVrlP^Yiqy$6^i}G9>f&d5e zIDd^mWP|gjBQ?b-++~Z2jyVfsyO>Hi&4nWmr!9v&QY#AlsEE?xb9V-$c2tpP$6|k4 zqIlw=h6R&H0_}}~=XpNa4XvXKC{C4;ZTpJinzU#kHXl{{I z^m+9NGo&a>f9p@r(||tD+8>_6v@%oivx7P)EG!Jr@cZ1JjE;x9jP@er=TRSIP}L@9Na0C$KZCDp-QaNld$@`yf1ER=O;&x#SYHUb)Z|W z3gYY(E3g1bQ$|Kc;tonKE9A^hpo4Vff;CqjaB=q>&ozmrCdC(B$*$WxZUTN?zC YB{GHhP<)3TSOX(3{Xwcm!Z`T90F67)DF6Tf diff --git a/windows/client-management/client-tools/images/settings-page-visibility-gp.png b/windows/client-management/client-tools/images/settings-page-visibility-gp.png index 198fc83a7c517c7d093ef173dbb0b4f63bf9eec6..eabe085176c4fc46ee09e70507cc7a1a341714ad 100644 GIT binary patch literal 39196 zcmdqIcT|&E|1ZjnBX+PMO~@#s2rAMAgp8sfU3w=YRY1THLg=xejI=0-C{;i}2n6Yn zP*fyQdXEGWMk53g2vR~!LX!Ky%=^A`?z!iz-?{6qyUx9Tuvkx$z4v#2>*rgZN7t=P z_U)G0Eg~Ya&-B_ATM?0;F~DE!PEp_!@Ggbpz`vhhwkDTFF#Sj8frnrGFIip^5vf7# z*|@PCc;0pUnhQ)sM67f3?6v5u5hq{#GFQ4w?5M@T3zv>OfAjFg*u3e-N~r!16EB*S-mt~xbMD!tmOI{v6Wnic zPTs$B$LGYC&Khst=kzn@BF-?vVv`em%ta^0$7&0oz|j-diykpx2VOZTi`_WQW^*c8 znUpp(y}T@NiCwi+&gQo*4H5ZG({q7*OEz5CHyth{>%?Zne3=$#vxCc2VXEBzrHE

    fZg2& zy&qOaA4fB>nvLRl14mudBn!dPr_sTW9Uws#d52!ds4PX*th@}3XJ|3IRjTV#f`VOz z%%-?R9#P07OqmG3+s*bp*d(*>wSTm-3#-0T`;s@KFEgzpsq%C3;~TG!y9C?1EY{;k zb-!R~0&qmf4=fQ^&BIp1kY7|c9^jj`^{c#Gt8#X4(vxEs7+I9?eTeE~{dTCF2=QoPl~*ox_)R9!t@*Mr+7{klZfOyky%6tEu?ihnypU@4PT0-MX~b{kk=`UB`l(yy7-@yGApr0 zwO@P3J~v}MmC^0vpQE3JgJIq&&$P`QTNKIo;m^^ERV0DPs1&hd8h6arVC9rGR^Kol z#d|>P_{4wPGtjJpX?`y!*VZQ&2OK`9!i=c?ahgWq9iYXpvU7P2Zh0|1mi_z%mNib_ za05sA=&E)AU};9__**3x7XD+BmXkM?9_{K#w)bYtXqHrGzUoVN$TuSn1iWPS#Q#~) zqROjPMYoPUIej`q&vDX&juxz}l2ex=n_Nz&*H*_1kipOThHg^1F9`X!Lvc(!_EP*0 zAVETe*(gfDRAvpt~7#qB?dWu{oAI>~f5XKZ2es0+zAHfti zQKHJb>lyX}?J2t9qJOGJ~9G1?XopLX!aU24;OnJ_AwWBlb zNoQPU%ES5g3XCK*ew#2H$NL6CV#e>MW>dw_$ zmw^`HMj9jx`6CU+#3F@Z?DwI9lWZO9xB?yw5>=(oRSktAXC^^mw9xo|kByhGrHwl< z9WryOVJQYr7JOmj7)XYmM(MTQe5vDc7uUwz17wG^Qv#LAW#4jV>qAUIUME;BzdN&9 z)Rd*2&IY?T;2TYL9y_d}rS6!gW=5?ns;L=?z61yhxJ2IG`!iaFn8@8~uNQTT+ee28 z=1+XD>)dd?TAa$bU(h~4X7|IGbxS-&M2~9QRNF#~;2CdyDYBfWDj0Sn4>`5=#c?1w zGJnmX03rOcQP83z9M77n76PlLstsMFiEdMHBEMAH?nJ550yA~&U@H1r7-wszj zAr}uZ%cg&H;G6{2;w|FS5gEJ&NE<#y`h?_h|Mm}i&04Odq)T<)K1!PRR|NlnrqNuXWLiaEivdu(qL)usV1yHY5Yemy;drr^1caU`2p1iCTR1iySq`5|p9bAOwFrNqHEyq-_PAKS z>{@>!ls;7%7FEgk2>k=im~UP4_8@c{p|&4OxL!8;(HU-LHaYM_!YSyMhlgsW1H@;{ zQme^hFea2A$EL7#(h1U67e7eNQ;#V=>>f>ss6FZJo(Nb&lHvDv;M+oai~!3k7ZM=| z;Yx>4l&#Xi(MGJ%;<4EuogAVwVkoOXXdMe}ncx%4Lf}GTDCZ8(e0qb@-Awrw&&iq& z#MhmWyqZ&O@AXHij8kyM8Z^+V1QJXMw=maJ%|m?{^?jGy4M^pcWfcbWR0C;yQkd0v z19PSPiv{gk7K3oype!KwabkRKBN6suJ$e7-*LHzEm3oRLi?okPXsuEVCZoFo)3n3^jfP%S3{!=JV0i;>D zcnUei@6`t{#xF?5j|d0f$~8^X4Pz&HDrDPvzfk8k!AJ}r(dMdlHo#kYuWJQdhIrfa zgt5im7lx;xFyr2C)#u~4EBgXuPHADVl_x&g;EyfebJj}SSw|8{9_03*i=MaN#7F(ObH{<1%B1h!)V39X(iLi z@x@#*0-0XjSpgW6U_(ECnm-kaB*lGC!;up~P-d3kPb4Cg_tt+(cA9;Mr_&LZ!<%>N zAo16%g`v!|p;2`>_K0}4TG+u(g;}##eNUBgB~9CId(uDY1~-0l7F73@$KR4;{5WV% z>WRv;3mm-ns#gybcF44K&~vZH1=aLby~cAR-VG<TYCz?E$mjF95XnSx38lonqUGB!MoJjDzpRy+>hLuzWj?fp!YZ9)b|bTuH_EO zR1`cbGh+n(LvN0IoZ2$%F&R7mF9%lx^QNBy=L;hliBl+dmOOhTv~8ko-2?e8ex8rQ z6?FV?VOKOw)A~0SSWF0?fn21lm7-fI+;JUit~=x4;RvH9-`4kOGli{H`SDkNK9(>T zJ*r_8^mxn~0K}T5R*x|`-4z9aA-IX**^kPS^Lpi#+~a7>_;Wp_;hR)t?x;Tqrh}YQ zU`}^1W!MVUQFXj5p}>+kE$Gc5m@w;&@(I6B>12nteI4^;YyNoa-1Uf4oy}st z7k3`3Kg>!Q%=TeP_>4)WmLGb>D6OTJWlx4Q*6Y@GU)|KN_Ky{S@rxyCeri6xX;k|3 z7r&O2v+P_J?^kk*)Zq8R$@Y$Xd)Q>(Gi?*cmTN>)-!VxS_$G3GavlSK+`*s6G%lr9 zVlM%|a@0SIPQ7W7_p65vz{Z|Hg<5)u!^1~`|K}y|M>T%Stc)(NjBs_7J&U#+{2YCJ zYl+X;zFK;y2e3q|As+bjwFF)Q!11onZ4dd3)jVxU5QVT@AXtEc1BFZLc93pDenIt_m!`PW{LH~0D!5HeYx zS8|#K-$V#W!(9C*H(nmMtO9A4oLhOn#fm+)f%hu)bo+vH8tXJm+A%qSW^rhym5|H4WqESzU-!TFH2YVyl@*Ls8hpkwIAfeB<2GHpVb4stH@y z-G4de*#FvAgD;^5+!|02oKeL_Io|Z{y0S^f<(n18(nKn?fUOs^9$YLza#oAcL*nJ+ zYM(88vKc`^~Sb?Fyw4(tQFTF zuHR#rChDM$apgo$7KA1Yx<7I`*vTzk66D6LSr3s$ zs8(rxaXBGo<%FpJs81KSmIVra~d%j&lc7m z1=Q}9AYs0N#8*%|8G41}o9R&g5|Zv)njgJXki7PTAXto~()SHN34Xg_1^uW5)C#j%GjLj`6 zctLcpBXdS~K1`FYh@x`9)PDQ8dCmb10~Y8wkVTtPO8v^<($N4%R&bbc_;9+1VT5be zu@&nmIOv-W}6dzkCOjZ26!+^4v;mT5#jm{$ZtOw&Vn_ov~^7vROUHOVQM zb$ox^21dLEBwPmRcps72>p3t7cTI#Yc9f8(&#u9h554Afj|D46sjMCeQ(1SC3aZe{ zuWuko(7Rf)W_=u}u1(_J3j-3DZ)Ux3K4&gP7{rfJHA@0YQTW?JZ62sa510rl`y5+!C_HTf_zD~hrU_nPV3h9ebGw^l7nPE zimK;oSo%_$8#z4h`RY$qqmUbw2Bx@*r4bve`3tfQEoHDGgwM={wY>2q=O7*~On`bk1H8h3!S|OsRYl?ut~FB!xvE1pVPZ!N*j)rNZ(117o*JNHP+wCO3&zC|_Q<~`B3Vm1X)oWiKHHdxH(e=TV7 zm**7eRAqI{sSA-`p1FlU2lx|Zjtc<^V<^*m@88I;=!St%8TpsIT7vbm?ysvtX&Uqe?9a)RaAU%Rs^-iBH zh;_{aYEP%gbR@AAk%H1f|WJ`;m8T*{B?em$v_I)?J#pp=K} ztQoLLiNDka%$rDL#Ju_1C|o-b>biubMzAN@`iL)bOScDNzgV$LiG0@*2t1Tq0)bi^ z{OF1Ccjt$^rYw@*G?J%{74_dFsvk)Zv&cvdT8jLVP99e|NAi`i+X z8Tp{TX_*wpseKx!aa9iQU^Y`_WQ~D~5=1*QZ(r}F>rzDDfTz&5FAw)H%gb_koiTa5 zj~-(kh4Rtwr^u=2~ zu@;sx_$5G#svMdF`GUdHYw1yx+*SSDFK~+py^{D_8%#7EGK(-^tS^S#9Cd7XvYO>F z!yI9esCx0$mS}DjAKUS&GAk(9)~K?$0){6_K zUXah)6Fjy}64zfRxMsBK9C!E_>BShxrnx-HAvLA}bvpcSRZ{U>-i;VAK(**Eg)^Bk z1#5T~dn&YLTF|D`f@r16F`K3ZlS~o=10%Y_Qe#GBr{^dvH*iZLNaDAhg`FclRAs+P zt<*=SE%y0+UQCHF;Ngimzl9!esL4?GeF%4tJKEJ>uF>S8QTg>L!rhLlTv|U58L-ro zKP|h=A$dp>{qqk}5yd!$+62GS@}&;OOR4LGAuA=uisINNJc3}IEvVcZJhpCJE(~wm z6J6cvs|s!Z#>8;~5j}i?r86x*rc|x-5(=vyYLVjGh>EYYHYOA-tlYAw2|We6`dI3Q z@5Qq$o%m0A@5@5N z#p5<;-qTc^i^wYr;U*Hi^v9k-{2K*=r*g(CNOuB)?Af+27i z`1>~SpYcBuk)Qd0iVI@43O>#m2zLcVeBb$kOYb&(E&p_y=lri=)|W3( z>8leuR61%#yn&gVioVcwxFbU*LU$>&*GmrZxmi0fWu=Zi!)p$$g=P|<6U74WeeE_Q z2tDT5rgs)i1z=<$f6O%%J&B}k|Ayc)*ynRHcuz#)=M z_hk&@JO&=?aI$4));ORE-;lmgM2RfMsXhNqs2#(9B7$CA6bCOFMwxF^{o+D(m3H8_ zjBsJK4qb$>xHa!SH4IBCB!azzN=HPhVG@-$uPFCsJkb3rn^J86B#oI}`?f0L3 zP3+rJk)4a;G25b8mh2Y)d^E|>R(3!i6zmo0trW^GL*_ax%{A6kteE6SVJN$_xaYmE z5)@K{;O?mMM@zyB$*A2&D>eag_*)rm%uNGzi}u1r8K)<)l={#=^A8$LWWP0AL{yJo zWcS($U{#BgO9FAUeeU%RHo;{W;_+>0#u(&RIp-`;I`gd@#6~gHcCBzo-J>$pe1$EP zaCK+lwj+4Bes_H9v7z-;#-|M7AMf`y;Rwew^dW%z+qDVdcbrLKl%CM9>?8cr`VirE zRf=eN%}{$V*5WPWB%)xUeLdnnZ5I`LW)t|&-FW~=@jNESmOt`FjxiA|0l*N&zu5YZ zApF;zqA94jUIT8KbZ_yd4m%jKmGT<;Sj=j$A2RG{bBIOm8!382pLxpd%8+ zdxD7T*R;Kfi)Nh_$8F;8RlNX%jqjbzN2l`7ryeF@+P^B}azV;{i*_cOG63Mt_A|9Oq+gAD(u>=mUc%gW7vF@oTgl6g zb86;*ap+GCfsqCJ(Ooe^&seQ0ArY#veT&5wL64s+PDEukl@F~eK9m^2TKvDA`TUoY zC{nsSas$f#sDSzv$c(PdzuN%{FW@iu_cdrZc)NE@p1E?$J*&TE#KeU8dg#Tfv7DwW z%8>gy2I$I7!3GQxH`_4Akd3dBZBY&5{q|B$KJ?+1kxUl@YCjrA8_0uYjV{~51-m&{FgwhF)^WG)^ezTKT&YQeMnhvssBVNydVJzbRj>>k7w&#byLI8z-xD6mIvbB z8Y~sG6Xf_v%DhmO5Jss$tzV-JG#6{o7S(Om6@E$mlDXb)(YvIGV20bV!#~%^xv4Iy zJfE+R%eoH~*!l@i*7Yc24}iVz7=3VEExk#_vkKZdVxf*Ou77CD$gRY6qZPHgBeZib zd>fuz1hT)~v=3JvdPliSmxj%m8)>Ijl%$hE3VN1eu{ z$=_s7!u5@GYx8rRh(kR&gKM6TP@LBQU*4|2+1&9tG!ymH6;T$bgDe*}&0@}h_>O!b zGS*PJ39LQXrg$_bc{JslgZjywAH~P#RdL%|9D+YJM;GU}9GTR{m_i!P1D#(H^LLxq z^~O6Gc9LX9gzPA`1Nes(VuT>SZaOU}AHY>d&*&dt<$f*T+&NID2BD2K-6q~}ClH<& z%}5oVl_r|0&(77A4zpj-Kj*mS-S3UMU^R<$ppqCWN^Ski(D1esq96(2pwCj{*{7oa zyt`wnf#}IlL{;e(rAiaOCpvphBieM(*=&cC<4f(@@O-xQbnu7y-Ylt4Ov{JQ4a*Z`=%og-xx@eK9p+uyH`b&)GqjIWKb)i zi(U5KvYMC*@S~9hrN(q@$&W?dde!&MKa0FQmX1LnrsEI;^`fROu1Ng?C_jfa_J;lko5yKxmYv-5&`*3ksZY#X_C~b56K?B-9ViS(;i8 zP)NJc-dc{f@Hr2o+@b4vtziMOgS#CC#YNvP;HY%(lcJhQ6D*qL&Hm=~un`(;d8mCC z6&OcI{KJ#+;VFHfu{6E5O4?}%9J8ADM7M9gpp7F|7Z*Ytl*Q$nGAMeelt88Ay@6$V zjyKWVZhUTlyUNu#MdZbj9;*V~jA^KZV#@>ajBRW^L}-h&LkNC-MAozVR=q_y1Rq^%B(R$>63IV(Y9HQ=&TZLCm~4g#Ncz9W(`sh5uqo zsw}aob>{5myh1o_pa3Cmu=beuRkCA_*&&QaEPuU<6wuMt+LOn^)BoXFi}4N?3bDu56KY=2bx4b^)FP)5vOV>(ha=<#pX0C z91wB3d`;a{)oS0pZCr%49IMCvgZwoO%*upA&+F3Yff$O$vIb^5Raw+-@p(R2qqEsq zv;mzAy*hdD9}<&x;yk-^dRqB+q13x@s*J3KE|6f`c-wbE|ET&}0@}56h2~HY?|+1v zq^+qQ}F-{_!I! z-r)pj+v9;Z?He}mO5|1!*-Kw0-+Gy%bXXJNp9Sor@%L)4sT_5^Znrv&Y@|G60O zctq*1$LOkB2-jAK)P1(<7?)u6 zw|2}mSXs=&i5~vhj!&KjlbhRT&W1vrJflkVk%HE(3bSO#kE;kFpN&hFROPNZLE;)F z#0oRc{B`hrG=fb=oH;eGfCzsD$LEFi z4B#}zS~O_z9JTZaz5dUD*$(_|w)6iMP!lCOXrR7Z7tO?{pkw#`7GV!7)wyz*%W`psfiYs#q;Vjn`X2P{`P68#2aMF%g~)&u@Qdtp})1sbV|!w zl%rG8l)OypAS&ra{E1&b7C7;_c`g9s3;xac!@<2kXym!f#JIv{9s12%VyDq#?b?`6 zZmc1zGW8dfiw~pU*^i5AiEy^HagbB5eQ% zTeO~MIwwb{=N&`KtdX(#ib$ijFUnhc7;~ye)|LR`#0D$o9Z<}FG z0ij3s&CL5eLYq=tbtdIPX)KeyuB&d!L0=PAGxfY(oAiN{1uh65b8@07t;sex;6B(u zXe)U5%g{WS+q3@8Yg;L!T=sd)&12~v-9L36kt6!)Xrl{*3wvcvf|X0o93`^q@1{k# zkHo&Wg365KSa&w3&Efi7yl&Q|Y&Fb)r2%FZenZXlfv$Lp2VjV5c@JuT*RE18_V95Z z3%RNCsZ3I1)#k2g92@qcLJiL%W!Za2eroW0Q58fsPxJiKlXU}qt1W%XGpx$ce=Tm& zoW23xP-fqAi3$$A=$RfGBW(TP5i~ZDzR?gG7WEEoIF(s`w0Jex1-x|5G3uQ7N_J9Z z)agEN#TR>E@uv(xhx+pCep00JzN0+{)2i(3LehAhOb69DI-V_ZdCSu6&PSSSVocqh z)K8mJm6NCTcz*Rg_EGii)P}1W)K#b1QoZ;w%#rV} zLk)JUT=@2SKnG7%9OI`;X^z~P3BO6y)K_hZvRAhVoc_Gz%3)x}JnE*JtKr0l(2{{| z2`2%)im2`$Y?ysx>;FqvD_nH20F{D{cY_emK7GVF+wK85k7;Y;RA>C(#Y3=_MA~I_N&mh=2cDggXQLs-j09P$%@aRNs-Tp>w2}y>O!r)5+h{ z;Q3wPei<^mG!?DB^T~_HS4(M~WEM*H~^xCh3uaSHsPW44q@}fSO ze+!=I7O}4>eoopc-nfLZgxFS}Tar%w@W&k1qh$fF6(^qk*$7v9NpDGQRjIfPE|zB?_&CUWXw*&k4|eipox6IQP^ zdYUWR;gz{!OW8@U3PL;|(rO@~D=bZKdgFr{9pCj>*L1F9)CS2$1`+3BU$C>!zQ36g z&8Vsh*q07-^hi-5-93*nQkEu$-(5~N!@ZpAQq5F0kAM|j{iK@kCDtA6`Z+1iVfP+L zt%zAl7uOeCKVh|xq905ig&13swIlSMQa7Bdph|T|@M_q& z3euG__NAvC*=$$69mTCq(}R~hM9_JegEUH7B{EM zkshrFix04*C;EaAm znNMu$tEHP(#%Z{oZH4n@sSGL#4D^4PdL#8ouPo?u+MB@XbtN>jOVQ;yW4mV4>wtOn zs9Ouh^FQL37YOtt^@ZE(`c)`}<-F8slEtbSgHanYR4EyUJLB;qu0QkBPAV&T-TeJz zv!$#@la6YpS`e&)FxGds0iBgroUY@rV!40*vq__Pw{-8#UdI^StQx@cX_61@YvQaDZ zDd4(E+h$VG3lZOr%>M58D(y^Z94zCEUVLF7y^(cat^8F-hm;@UaPDr*D9VK87E4>65}!r(sUc>hm`cRC%s4F5?fCgFM&+*#Aw-~(yO+)CMER)>+W++>2QO-sdT-G8u4C#Yy6L1SY{>k z6!mofj?3EsJ|6|BbbXlwMD#&X#gm6&_x6(#fa0s%YandsbT51W<}_pg>^1k>*04$V zO(4XDzuby*dYZsez3cxDP+MyNFd$|L$Vv>T0Rqu9@gz{$-LX|QFEkoyOl9cAjp%Ih z<>A&;$N%uBhwu`G+qR})1`B}_^WfdBus=8W{}3g1f$kun-ihF|h`1n33;yX-Q#rCI zaL&(v-?BD^@h^P6N$s}3FKJ6v#`2gr%Ms=D+ImBP#_fO8By;v_n4ftw+pagXhZU3I$+A{cnFCWQK=V0vtMf{lDkp z|CBX~corpQi8Z@9K6JUkCwQaR-_Uyt^Xvrhkiq(M0B__1t?D1UHgT0!dV|gQwV*|d zzXpl^*C%WK%k|~|Tk}4e-OWJSKmsOmHY*2}I+d$Ti!niO6nZc4l0o5SjsoN%B|lnQ zF?oiF(|W|LR=+$btxp}e+T{34D65pUri(Dm(?|NXMrC5991;eZfd1?(G_nCQGd-GB zjw)&W^6#4+3{urrzd=b^mbmI)tB>}&#*pOCKJcKQ1Sx*kultfa-C%j-r_dCfUf#P! z!a}#t0W;FITpuT?V+nz&nwTMmO=RA1wF`%+=Xrl~nk+Ddk=*xwIPHqlN!3~U_Eudn zV+{(_A^8sE#G2P}-!B&)o!)cR`S2NyzM{MPyOjk5j3bZxto>nqwFX^FCC(!-jYH75 zyffJPD%F()m7u!H+VbC1G9PR|7UZ7#xkh?iZLCJ8HSpb~orOil3(eg?lJDmhrBDG$ z?yiOdCa7Iq3uT>Di!a2KNZwmX=8#g+6)MT*lCsAV&H(hzf`?f_)|>`0z_@1}v@w|* zH2dPFx7khP^rjxHWT-Cl$RiF&LP^%C`pxI>+H#kb&V>c)AX!NZa>?zGG1$?0nlIObz0WHU#w7-2646R_2EL)lUo?k5WkT z?rM0eC~&GHAlqk|*%p9_Tv>Jn+6Ooww>y?#{D`Or>}ra%)O# zaQ1&sHQm&yO>_I7kENAD`GO^3JTTQ)zZUdN5xo!Sm@Hm<2|K_I1#3S7uE_oTl2^^U7apb;lP`C~F7W2*a~`V6Lf3 z!!Li^!BbBk{4loK#$g;SS;(&&b|j2`h{G&#o~%1SR_DU%MG@at@e7Fl=UKb9t~%Yk zoBV$G?8UyX2O}IeiVhx`^HbZ!xZ3dBSh9&6!SkX|4xv;m0g^ ze|-GrGy7z{s(kfk&ePfRMIrtJZN`K@comZC77&$ww1NE92;k+K6Nj7#>8;jzfz??l zL+ueIx&zXAg&SX`jtO2zrCpwe-O{kh0!CM}_RD8SGa|j*!pk!aeIgdxn`GPia%jp$?shI!q`& zPc8K}TkZLfS?lL6nTF=puFj&mF3d;n>pIF?CE0wm20L;_Us2D`>K2V!cfHz3Oxt#d zlqz$-sC;@xGOSuYF$!pKEG6FRc;Id@zZ~Y02IY^+l4qVgi7tqt-q~YenHx;kHa(y6 z<-A;{=zds%m@T($Bh^9MPD$FyvYoO{ll^_Qva8wghujI+yVnTk*e5m3(P6Y==LZi? zO}3wGHTVoM*`sDa<-HzS9B~ei=dT zz#o6(2#=u#E8)#xgNIi}P%-?Iz7L`>r&)Gtr-g;ox4^I=e*Z|D-zci<E>KDOlwaZ$IORH?%yR`(r|}YRy&3`Ac5Is?ik5rc_PKN&cVg&$ z`qPHFb(yy2r$_SLr^JFTogo}9WertVdyj=jeV);RL;A8qdT+FN`jK-N&X?p} zl$SDE*D?}A$D)zWN8NB=BxZQ;=uJ=2kL6Xf0Fpx=r`_5%i%{=uLSOVoC^!z#(F@IuqHs^%d#YNJiM zM|q^S6U$1y&GV5NR9kn* zv+=&Qvp(MY23kCHPUq+i94LvGF{Xi!J9cslK%B7YEJL03DDQQBP5fG9%bAbOyYnUj zEw2a0j`rWeQYArU579}oyA_T9m`^QIPosR)B2=i#2Fs{~PwjN5-W)ePz>OU>PMx^r z_B>;@+0cUFfkN|1kZ5jFpvxuu_<$9CVvAt6ck29qKiV1EtGu8l zMKtnawXkt6r2S~){v%$$Pa(eHxKwNY5W_hU8azE5Vq;wUj#zH-J2*9-eB_hc zi>AkJHNaG>9X)b*T;A!|{x;21a54wq5CXzq2$K>?-bRhS*83ucb>L^!2)7$K2|N@r z_>=1oGGc$@xnq7J#$euFeOW;XHB!@VN{LIs|y23t# zyhCjYDulwN`g~Tip4sfy046%@F>Imzy?jmlW_gq0l>&_;GdyX&nVFhUf`i3Nt`kOE zpE3pat(w?PGa}Dj2yGtr4pldbG=)#n)ZHPaTsBaDGb#{Nd$iRAEqrAx%`|<-2CC+`yZ`KeXF; zEsKK2OFy0y3Kx!cn))?DEjzT!^$gv@G4mj?WfON15u>eeUYCkqXtd&TWq``_Tl;^- zK-qy_>x*3S=kMo|7rMvclL*f=REGCN#h7tpRIH|4jS7i$w_vfh+jMK;8i8Px>-Sn zf5`;{EE&unLAT^9cJk4$@R|hq&v-fcCYZH)Uw;8^nkn%vQ*Y|18!Vwx5jYtos zR`iI7Xm5cQ03Uc>nACugO@6NQ7#J0KmX_G9N0o}R|LqtpMt2UZw0crIZDJg?mwDZ# zBUI!Lyar0;76G~@@&??ijY%y`28#{;+2_$w$?sHJblij z{lidJayY6Ff%T)AQZ51Sls?B;`9;K8bqnLfQnCAsKF_FKtGuUhlW|1FszPDZ0sUt`>ZWb;EEOb7puY*Bxx3f%vk!@>*1nm=1X`f*G z9!`L%6%;1h72f3Vw)y9`>Ju%{O!BWT&Tu*4jTglMwJ6NH^E`h5vRMJUBv{=!kD+c# z>5L?h6rcJ{in#nQI9GTGsK-QZYC_L;APe2K9}mCyH|V=M_sdSIp8Te&guMfD@1GN( za^hPG{5z0+|Mb2&Z3kdBZ`=XMoF@WIZrlf8qVu``EspEe!bql}riN@FW&QbZf=Sub zL`-&4c1%CkuBEmCTF5|B`Q`0Jgv9r~YN>hbswr{YOU+O;<&<0VfY?0N{Q?G(W0eQz z>E-6h61U3qoNpQNH?HmsHeNZJL6h05L2QnAwP*gwk@4e`3lMe#0~&fSuI(A4JLV9- zI(rg}Z?vuqlS`XgelUC68W0YDIII1eq*;Kb2juq4Gjhm<;zw1O zL`@uRp=T?%nJx(Ht-!5>$5=7GNubDJpgH#68zSe==Wr zydB-z{OxNQN`o^ms34SCG&r@4`QT}%yh0X#Jwp@kW30<*z90IM7zGF%S!mjXxHzP|zHr@`|v}l6P}&vA1$cR5mC)q+Vk8b}kI-*GP#D@*0L^95y}&fh^)9#SIxghcfhN#V<8Tsy! z#(Ag_Q(nj0jP>J!*LXu!&q9zUjbn3TCSR8J%a*{$QW>R6XZ08+M~s6kf4OiVaztyu zdGS`PD!9C(NM!U)vv z*MqGgcf~0c%x5w{vn7t~zWr#5EH0!&q$uVp%0I_@@;bz5;QqpAJ8iJ!-|luBHp_bAjXgM0*mgHr)x+R%eX{TdR@74+P zd$6vW8+)*xJAuspO@>nPqYwtF3g|`*T(G*CHCokOw7t5-t)AqrnC7}jx@!23oc-Pt z@0x_g0xb6MJD*y*9HAN-ipY-c-~?reM#Ausuqrdl04 zB~TKNF`X^cSf~iLEi)#_=XCxN>vw0jh=(Uy2H z5sqmgWUs|$(>@coS$3RhkHCLcc-6M-J`U|`8Rj1eJOB0R>I<<=&4Ydh-n%;ywPEF0 zH<;j27Q!wsrYv`-C{8XVOzo-H#gr6We(?cx-fQ`yQqfeH@wGwRi;~)-3RG#BL{7of zMMuBVZUc2t3s+$lUHTXnLNTkU;}CtSZDc!=#$?8otwyu@wb;%X`A!7m{MD48koJ`X z+U*}m%Z`CaOnB6>9Uj{11?5|Q6~GGu=d;g;lDW?txql_pB#Db?(s;6s+qCMRgt4NK znPXiy4%COe;hvpQ1|rDBQR2|Rbr%Gme$|6m^{DT+`wKFntJLb4qjgo&xKn1n{Pq}H zOk5YA#P$j!yJ6S8-e6bso_Qc6+oKoZ=eDi-5&CCFZg>{&Mz&)+j9wfCff!9qij7P{ zbfxJ)Sunm`{w6(QHnzl9_f;zLTw=sMvcHZKHdZOoqD^bd$=>P*${~_JzBjs*Gyibj z=XE^xV#m*7^~qfEU`<;vgvlGG6*WO|SI_sCzh6MyOqqwieC+KP8(_%M{Xdv{&#L27_d z1_FeR7(yTrIGZ^0{(jf>zW;O1hx6flgKO{Xz4lsb-}@=|b3a0DH_$4q7w@_>pAI;E zP12hq#6b6dg4#`-bgn7xR5(XVL)9OLwNFId6fRh`toCX>lhT1j1sZzOdF~S{i79E- zktUC&vOc?;O;PgTPe}pX-myvx+cPy!P6qU3C#t{Fg7Vo@VDmjRSfcM**sezHGxthw^9;GY1y`o947 z@IPku!3BR93=@RX>g0Qoh&mQVCKNm6E zszzmZ?I+H2Q1&rZJ?g2P`kko$>BvdD>pl{1UWG8>LfM&Vke1)>= zb>Ia6kzk~4w7^pO_E!(1z94K zBIKLx_r2XMc9ZA(4*#8+b1rYmmgx4qV|KK!%VS{=B>dt*ccG_jET-(M3rRR2RrLng z-t`2}3&gqQeJwH08?&T<9ppk*%QwqzNY|pjR&dD<->=K{G*47eR?-EFVWD?hq;?>8`dE>4TOTMw4?ye;-SqK`#xu?N&X0otU zKTnHU@mu#lM+q;Ly`|8fFJlTRoiPueW+43Ax7&M;WIxe#;x5~^T<+JpU-}D`W!HNL zSn8`OjzZ+FrZeG-ZQKUo39W;5I(cO$a(3=~&#HewTQrOAcz74|To57SDY^f_Fe`ws zBemZIn=)2TwV3(dUS-I-QVET^^JXz&1Y`7apJ}B;4zCCSbiS-zPmG{)gB@)!yXVW3 zF|srX?NcwC)|1sP&-Q0Rx3qdWABU?$H7w#0FGf4*j@6&L@87rzNnZwT--7Dc4y$ZX zM$~$q^MDN&@+atEgEOMk=ANll(2b`BhNIw;&z$xYVC2n4?Q(4N$O zUjE~&Wy!p4{s`!6X@!92R&Z`^=AQcJ$5WaAm~lU;g?wmzj09Nvue!$P2RC zo%?*%QwRtPk%;esU|HM!H+L>4#hVZ?a~1AS_h7B(ksHoiGg2XDFQzqR;*qp^OT@?a zz(Dd!^{2yFC5~BlpDLKmS2*^(5)=Ayz;iI&2Tcm;vg%X!h6oI!gJSy|yH@h)V~=)C zmd$s@kvnle9sKGUoJW7fqT7``ze|j6`9Sr}P+l)Nydz(oMnc4`8xzQf8{&{ zgen*U_bEFR(YqeX3R*4AR|~ljZL;dI_>H&9F;{;j4s2fBhntKK5s;Yq+6=~o+}E2e z`8K)3KU#f;KcvN|7O&=sO(Tl=q^9ArDwIkW2et>tH>iVzuLB#-bLVnl@m1sS5WVUJ z355c-|A3luo2>BmTKnBrvzkVBjYa0R-+P&`@BD7XTRbDla+~a2SMTJl^m(T1cusAw z0=Gg45_ER1F()2jo+^Zp^pOGeYy~>|HIfhFFxTbCH7vf(Z%uYuU}Vvb2W!=Lu|Kps zp!f}a@cHkJ@f2C*6y-i=+3S7w-d%zo1eS0us&L)FJ7Tq^6p__wowFm^LYmFtN3OYe)BYJPkfC$vyLuI{ zv-qBjh^!OK!mYV{eOSPEs{zfD6D;wG*3ft1>mp+7is37031PE^m%Gjc~R)f|=6|DvM zIW=f>%7Zz~0@HQQauM-2D?{I~1PAhVJG=U#Z>&1rd-Ld(st#>FjU?lj1E3n;-KnoZ zI1uN9Rs}DyA97bXV?Q%n6EGFa`#bx6Rv=*27<6T~n8sE0Y^YVV@$h}xJ?zQEgpax_ zSedTOZ+l?u1bNQ`&oT4YTN8Q58{nDDBZwX|m=LV6tkNWFKNkp_0 z!KmKFCpv8@dyHe}sC&{3^yL<7*}`tr`y}a>$Z_GMx%)9vrXg2b8`XG-MF>Tlm$Ii= z(nb4mqsel-k08cgCf}i%eb%88k=2bGpnYSUiK8S)1Xnc&H}^;z_Sw@+>UHtM_@F;7 z+AmB9C`~RMga_YQwbX3d*9QV*gj?D>R;F3F{ow+X2G;KOFCguDLrcjkXZvbG!H%ch zrZ@Ip=a@Oo-CMLY6*@FYl6`F`G6>x)FMWZqlS{UJ2)3E2kL<-L{C*)2JzX<^rIcFDIezk&hJR1~ze}M5P;HZ?(@&cz z-RrVuDQN~(Jz3cz9>lWSGli%i>;e!Q>zjxprZ zPqSuosrTiiuPsstMi;jS*p=ERN9NL9C;K)6v!f);7qc>oV{@|7mKjnr-j>hf-;N@Km4+T?9w8U*Ip#X;hN?v@y5={NlUD$z7Teg`?blUmahHS#d9i{` zZv93myX1CsyjdCNJLf-eZoL*^C>(r}0okGhJ{fEGn^Kjx0nCQozF+4vLd*3u4U(~1 zPxXnz?z1>~2xWK3m#Ba|mxpi4viVrenw0}^$`jQ3ZPtmb|Fupl7Pmh)r>q7o!cXo#o2#(Znx01=zw6A)GA$TwY&P?ymd#1Fm*$CzK=aH3|vG`-n#qb>-msgrqFq1!v{E&cH%+T4xV ztc?BIiLE6?CnH7EY4`jJDG@R}pH}Y>gx{P}qanx)gHreDkn28M^me_UV`3SUNmoxi z>WBq+C4t2x)?$lT zb8NS+soYT9Gb17?xLA&4OKqP`Y?!3hP&4CPW$@|!en(cimdbyi+FWL@N3c^hE;_80~w41%RQLe;+M z>ZJ@WZas!$``~L1qKWFvou|fD#Txs;S*MZ@bId;=s@FV?H;(cavmEirs5q0+I@+Rn z6}ie>$oy#KySD=dUE{dY4nQm~RH6PCQPjgi`@2g}GdCYWHWp@yqoh3MohTo-U9gMB zqBhA-WS+tq#xhlefVe7i|8(`hs+iNMx73^_NGimK-Ouu6*0ON(jFcE#l;mxYL0I>2 zaLpXtYfrF@iVj&QR%sCPbV9A*ZS?E~rHGRLNNQxr*iD+Xn8!x_oVTZd21zlbkRnpe z%u`E3k{W88KHy*Ia3(R?84}ujYzx-#7n!&+y2NMS@C_3>62dzme^b)1?qi%l%fLK8 zTy&3SkRw0X*pcI9Grh@%Td|L-pXv914assX?km-l>4rMho8SzZ-$l5Syxzv9FuUp% zonr3Tht}LDsVB~)?ec~sg~&Lg2ZZE|#+{=)r7jZR+FA~OU6Xy;O%f5l$a%Q}&=~d2 zU(YKa8t1ku^svcaNV-+$HgVnTRTHLA!v9aN5ez?=c#m-3O@4W4n7x?KOR#o)&-FdSj6I0O z-G;EKzd5kHNvRpqNX;lc&X$Ck*leJM1Mdpzi4qLN(PhE;rTWCsvOYhdMUlE|zZ%-8 zs1Q;avw0B+;qbHu@D%vNV)d)aBB5E6aFOhuQ`M4lS!tc~yKRB|+&_X3u+~A46ymIO zM_!d{N`B19s?$PpnJEviZ-_l{>3jI3li_qq^GYZ69z+#GBLDhvRf6m+h+-T0db`4I*o=RH|*zjDbw>X35{j8Jq6gvE^47tYUsGZgjlk zv=i$tQ3SNq*oTUvj``(OXKNtH_lc#n>ZY#1lm4zI}i z&Gp(}E;29p24$;3giPlit?rgcF)Q}*+mBBjd=L&()n5fi;9Zqd=q9ua-R>Zq?E_Q1 zafF6S7;-kVbz~sDm~);3td;S+ewG&u{{1*|JaBBpbX@NQOG7eGm1j>{3)8TAp<8;T z92~<+tiBNFbt@4O0aot)RSIo9-QscamDa1{0`8Z)Vr=_+EEmTSn`RWxF^I*7vI*k# z_dY~(+}@**vAOi)57XJ(^RS)*EvDgEdADt6!uxf%F1h&cZXLSgN$`3qEM@#y&(h?8;F*urAvUegMCWU|Y~yz3s#4^f<|_1xphEzwLZp< z2Xb<=0e5G#`Vp%wraMyXw)KL2SA|f&v4*j0Isl=haXqB<<;YASCouhou?T}0aNVE} z%j#cJc-vY?dKo%cjYi+Do=;?TrtnqrpA@_*rnbptQ~Ak%VNX2Tcu^%7s){9bdZuaf z>b!@|wU!99S%Q)riqhTsd>(e8bMGU-+MZ~VRQLUdGs6zu!LkW>q1rY|Ma z2XUau9bM3fT3>1LSlBB2I3h+V1*{uW(!&3OU2pV})!uC?YqU^vPkjAorVusr$QRB# zt)YNDIkmDB0Po91E{WuMu8Wp`DkSQrT_5gU_E9$NgLuOe+8-w?gVnGk04gIfd~MS; zN})ko_+9r_AX~=H51{{@-7!Rtm?$%dgC%xCmY?kv^RT0p;k@r_i|u|7 zaI^?vOlR4pOU3y;mg%^eTCJWq{-Mok6E;KSBQqF9!Z+}BK5-RKLosM9Sf(Yq zb1_ua)0yO~qv5HgciL4{UC(fC)R6{8Cq!ik=}6-G)|37GYj-Y2z#wrb5PnCaTee-t zA!(I;n#p_s;#nV-58f`5>sitqQG0xc8V^uLPL*VUcZZfW=$=L0F9JT?vIHR|kL%tB`h;e(tw?CN4qh{~;p*`tTb z{2a-if0Z;f5PbdO>TB;*{u8g`DVtB$cz&qvufUMWZ*^5dsd@+4GyO=2{7rd&)2I5- ztEmYnc=5tnch>Fe+#Ev{4`BMCgZ26^d+p#~fat@C@3~d&kjK()pg-^D(Ol!)njbHYACIu|z4hNNXm|Hz6H;C2Ng5a(h$ImZ(SqSQ*_9*;gI z+9Pd6aVfm?jxut*AUZH%sXPn1b5M2ijWLyxVu}aupSdJ^EIK8{U_YJ?yAMu z_hfH4RrZN7?`>DurPtl1p3r?alYJ?lGWzKI9dc~{y8g)Zs|v&#yG;ot=4RvN*~xeT ze{`pRc+hT8BW8lAUVXDTaAx0bq_CVXX#BE-ztn`EP-dV{msZ-3fJJwWh3uz?+23Uc z7DMZ9$^MB<`}SO9zp)xC5!UUs(dl3n6ly$rDfkgxo;u_~k=yQR4!u?IJBK!nBp7?{ zTlh;7Yl|nvZ!HQ?BS{$I$hwW(OZC{Gm|35|K&T?)JM+_VwNr0nv$|CR?GWU1NwywE z%YjOh7EF=-Bc$`LlW!L;Xedj)I_HR26Y{Ly2^{*B6G-WmTytFK1|+zu0*4Ag}e>Jf!3a+a1{xth?u5A#j){9)Y>PI!K4hKkgHDDiSC!@ zhO@}W-0d$s-BH}nUccf*8mX^2hs99{z z_Pr-PG4;+KoOhogKn@`0+X{a<{Jx9wcT_{=lc50(!PcgXxrfcAC-n`5fm^E)WIXv{ z=996;F__whb>*|LJhjX3eFRK}E7youVlCxVi1s6m<9x1rEY)^*Cz5}M+}tD)@BXfB zE?pqx#fFsb)m?(#*`z>=w#jm!{tl=SaBDSR5uN9AAIUx@ySNu*b#_sC>X$myPqCf) zb*DF{lV#N5p!@a$wKW!3HJFOn*!$9MV%h-YkQ#15A`|A`wUIF5-FT>kwtaV(aGK9b z4YIDGMz+{TJ;~hL2v#sdrO{Wyaqe@1xsKA6)>1S;&h7T{BFL4PFIMt*rc&ve^^XXN z5>;?7`~ym(*zQ{Dt*=?ed`i~GQdzUwE*~!bWX>J~;oGqKw$SkDN4!!Bp0zcXh4>Ib)^J!d?1jTtxfva#gLQ~St zt<=&Pt{HI|ge=;JBPW@~Nk0q2du%w!h7q(36yuKwfrIuBbMG8twyauzQA+-czrEON zoGUT7$KfDMRHukV(Jt1XJbLsnaKgxYIM0_VCfRL-2?z)Pj0rn{KxK{*+;^OG1*15{d2d$Ue>JWS?ub{AEpRF6^s4gA{b%%fi(F6opWWtkX45c`T%r@_uOrvwZA{-vHbIu z;@yIo2h!>E*57Fv(b+1N47lReZKcc!8Pic2?Fkn7`6EqTQD=tikrCJe+u@$U8J+I1 zr?&fwPJ*UP>3OOgtaoEa1SwJu>%%L?BIteBRvS;yX7|Oi^lPuGygIMphjJXP_UPI^ zzJ8op;qOIzt!jr7BK)cY^TZ^w_>Uf}i(F65@gc5?fS;JM%eD14cylJAeCY2*c_sJz z!#|syonEvWq?!&k@$e>1jq_>j2XPl+HwL3JDq>rq{5ofCwXu8~_SykmJnM(YUk?=C zY5h7g&|*x#7v=6HQww&#P(=MTmA^NrXfHsne=L=H9|oi>ooF`PUy#L=VOXC>>hN6s z<)@^+Fn?%1+}u7JM7I~d&Kx(1v`nfr6xSvkU(q34dF9_7mre<^A%&$MedFgAqe}zR z1P2_q`&&C+0(eIc)~wRt4B3hGX}8oXP+6r%p?o_g5J`8S-iBx% ze2@lMUyU-%Ha1SxsSI~z{F+#mlx~(eg701F15=fiO!TDR4K+>7XavM)v1;z+&(({U z2wiUB+kj_39zLiWA-RINwKXi;)r~(vowI72 z70Y!Tx4MYh%Q=kae-6eHM@g|EwpAbnZC=9+=z{tNtpe;7dj|**rHT4(L86$m@ip5h z{TZ6nN?-!bvXFg`P}EghAQ5bKj(>3OqXU9`T@=VU)F$;OQ~%*OSo#}UcvT|EyoI;?H)3O;kqUaIv-A<|ZF^_3KFw>s< z-!Jq{1<$^?e~VrjENP*ypZ#Pqv)otJTijmE6G6 zmuk=>>t#%*mcLc6l&u)BH;Dsv1&&v9(3srb6tkWOt8nf(>>kUnt!z{m2hU zI%p!nxM}2^;_8AGc)lTW-HdoyR;;?(iYpc;L7TZN~(CAv1~@r(O@F=dw%U z&@+ucA7`4u!Im|AD*hQmO{rPVX@YC{SmPrcpuS42?TD)1eM9_}_fi}r)7{=h<@roa z1g$fVUx87a>f(_tDf)$zcC!`7T}hZ&PMktjm}(Pq(U9^NJS`8b;| zo{}C)McI2m_N_a9$H2PX$Y0<$@@LeYP-MfDwgWBxSTkiQN95$+Of8d7-yukOKrgH$#BkE0HqpN z&rh`sD{M@U3-7c@pr%&4O!`RV68nwHTn9uW;c^tbpY8N5N-tbZp0;eIWU+@Yz0$S5 zvExGFrM1|cMHVY!g~OBwsV?cq5hO*9o0+HT9O|QMtw^@m>$6;~<)sbRG7sMoZCQ8e z+hxGtk_XbuAF<}&BqqdgInIscF_hS4z-aH|3|yD*ie8xrr4~VajM$~9l9WGG`i+0$ zxEb330nR~*;Tfs?Qy&;Qd8VaH8hrCD!lyWOYS*LRu@O3s8K!x8V_PD+Xy?9o~l zMrz#tZA7jA1oI6j?ft=!8p_6k3U_CNR%@MTW%(g%zr59qr1s`+FHtYzQq-938@(5# zr9@5*8q%=Pi8qPpAnxb@JAD}K`!S}0`6{&oKIk>j6JLWzegAjvLVjB1{X0PJxNMu- zv(vktNvMaGj=hH;HMAx9R4<|^-zVNXp2NRXZ}iHr9IehkXj-5%2wE0to|;IC%i~^6 zYr07fpe+M9@}*5Z6nNz|TUb#WDaGksY^2}gl*XWu;T;{*Y6Tj`uNy&Dig5mYJW$#- z1`b;HQ?$^?=nU|VX=l873(TWI4?9MZ`P|>IzbugzghCY)0gm+)q9ju&TNW@+hd^JF z|4^AU{^7AT9z+#Q*vfWmv45J4+-IBzC2arlLDIm!*-@p)vmdKj7Bu(k4zr<)WR&|3KmJM)I8&xx!TV6qe3nIwkoE$FUrYqua_*_j5^8q){18L z*Y6RKDOT6}uc%G;t|GNd#oJ084{SIUE-hb~G3d)3Q9{@F3_YpXHnvoK$7xI`XKBr? zJ`a`Tchcl(j49m?8HAuDjh3Xw={l4!fBab0zZGf6H6T{jyqyB~ipCN!>xnG8X{Fn} zYDV3@gX`TMP`7F~qf}&T5hpYS)Kf*x-P(Cx?`Rn!f@YV8^Xz#v+$-2v(nc@DS5G=M zFvQvVC$>Yv3+apBCb#()lWoQG)_F#aMciLzR?n?lvpcVEMxThibvMMa0Ba%&O?R)x zTnt9q%?C;48eZw~ftCB4Wq zL-OJx8gZ6?Txir*L^kXSC(x?uaH*=jN*1&CA?S+E*-6bIgvA>IxM;sGy}iEr=(F5l zFVUyPWA)q#)@q9ESGqZKcfxnBK!twzcx*sCs8^ZyXa99>u2>1lxLx2U97UXi{QF7fRmRv?Hb6~biuMaV1vQ=Z0A-5x2pgY z_aBRc&5TNa%8o5+1Yv|Nk&NM}6$5HyXOkyT0Fo7Co2_Zzo!FX7_4iieneHa(@C#W^ z>eU*Kp+*^}FM7sdD=p~EvA0cXU1iK?!zVotU$Ne7hC z&qymvx=#M22I7r@WE>ZnlvT!CT~TSc>_{Pdh@+Km($eR$L{*{%4fLGl_19|k14fsH`PN*Q;4L4P;{3Vu9L4X1^uk%HD!4C>Y~iPm#k9Ds7_IjItfNY+Ik%%2 zZZcA8AO0uZBE$YqL+_}+(n00-26VqLlkEJKHW?t(0VL&@!U5Ex)rF@d*FF4tG=Ee_ z`(E_B*TQ;uak*e?8*&k>QkFphns%s2N_D#zc6DVB;96C+S);=o%vw^yhLLJQ z^TVOd>eQe67be_7FEuf&IR%3N^Y%Cfs00);A5(jE-eEU|Fbf>gIEaND970560_p~% z#)tf0`a|GEA?2UR&Zhq(5dN1v>Jz;rxF;CWvp&g#AJVRzC|6@l0=o5+Y95h~9Y~2! zMJ(DJL-C2)s#impZZS6--3gn#Mf)WiDnD`%@whwL{it$$Lpd5m!WffY7@g%{0HC(6=VMD-xt*Xof>4h&>>7EC{lblSBf9|#(i7|U zA|tAE-IIRA-P&td)#O@SKoMEm`a~_F7e|83FY4*aM4s7?G-Y#XELh$aaCC|;$`A5# zQ=OD4Ubi$u7L=?XGu(4#;8tGlDwNvvjbFx~&JarCMEOQ%=FH?=xzGA&7-}CawAg>? z6g)PYOMJx8Qk3n6(FM&uxT|a}nWm_f6K$*8$K7jXT_+9WNDVhf6+;oM1?{7P`qb4* z9Id9a^yZ0z5S4T7D!w5z-f!tGzC0IEd^l0x{sMokr(hkXo21dLc*LsU0`cakv+L?V z^`?_G9bCb+?`C7sJ);eoe_vkoq1A`66S)}S1nTKN4` zsCtM(qV8zXFJOwVI&`YW{@Tj=%$#Caq(*YJc(?3>*>~P(Z^3y=mmZU{!LzvG;7gX- zTk%IH;FO%%C~BZ|f0C#UW6O+jD)B360ts5wL*JNASwT=q6=XGwr%twH*>MCuJ@;`F zoA!n}#<+)!OW(N&kEVH2G?@Hk5v&V^Gqsn=g?Q^a| zh9-&V`%`>ho`6>sY?9|<*ENOMT}-o2pC-_MTbMrXV@i?M6I$IY_Rs$z+zC*6GP zDs(qW0&v)yzl9C?#i{2tnvH}~7t@yyv0!pH69wohmgryD6WtQ_x-f5v7~Ajuk0ZOt+49r?*)=d&p;Z_6Oj^FbjGPkOl; z+y4C$<$1sOSRtiH8Ve2A4nVQg{PVk>IlZ&%2F6sAl{M&#vOivWiJbl{ia-2ejEbx2 zvQ!0zv<=WnTLwJx0o&X6mSob+z!aF=v#EWh3!}Vz)W~!q08F z~4FLW49(S!T!h0&9=cd;wG#f?<=x9(YqNV>#|#MM+^z-7R8wUCRYpIp#?G?<6 z#3J_JAmk~1ES~k9d2h;3Uwcj~<63gmU}L*jq;t0+xyn5?LehVpC~!t&4|zk& z0#>m$SnJ6S^FTJZxZEfGTUkekg{u!=Jpj8F{Z^hWDix45-I?Q%N%UbyQsnC+sYu6(q#x}JDt6U(y-(rEDum`!? z<2$hdJL3Rw#_A`NwNGVGxBd`+kXl#ICN(6_>{s!7Q%(XmU_U~XyjZF z^09nY?u-5-!gm)c(_{)9k!g(ihzY#UsH-aNdXN;{!=XnHe}JREM$OjpkxVotDVt>a zF;^o*YyGOfO+wymx!5i=#&*&!ZNgwFIaaY%e9liOIQpS2d(|x{?S~H!@b>tktVY+; zHGL8SV}PFsG@a7j2+4C5AuBqbku$C8CGuAdu3=lN1voDU9-!|1vHB?cwTKk-Lk~^V zJ(ccU2knT6ei0Id1IrfeBq@*Mw^qh$iqVd(rx*8@pnv}cEj$}CXkx1p`3A*)n_#L? z#bu|VrMy4%6o(2hQc$vg(NVW+U;t}1dy~=0uaVWq-$Cu1wON#C#HtM>Ef|1S^bSw2 zlM&7vj&li1+A-F|%jh~udRWR%8F2u7C6f8Agn4w=fn5;Y_I#! zy=LU5l_d6~9;b2AQa}=(ef|%Nghe=OXPE(mJ)74WYTN!e+?IV+JYe0DD+PM*)%0(! zBlmtHE}L7V+CPC+?J%=?#@v!reMY;v3%vW#)3cN8vE^R` za?W&a=ck5TRY|75j?Qi`jLMq3kG|AA-+gO!yG)BS-y^N&(%%kP&4`iUbz(rNG2gMJ zQgJO@4Er#@P=lvfXUmzlWs>mdTG5b3o8<~!>C8|V;lV4vsi0BaexPQ+M=G<{N$E;! zx*QKp{^87)KDk0#YF6D}6xJ7e)UUjc`!X8V9oBJYhLXqvg$syah=$NA0i%?!#Ppqa z=Npw_nNZiPR(cotHyVc6+dz3h(n*CL*^?XjGRs?U4cBx<)Tg~zL z`|oZ?(6XV9vM^5WyWw)OQ=l)GH@^%>s3Hh>9{{@Ux16eVFL zM{F(Ro7sB~>?G-2A3_RjKrN?qmh7aTLjhlbxEa zG=U^s^Lo%~gRo$+|F?oP#0#o)Li@w1?XpXp?FaCcmtQ~qobgPBf82o(tPivLvSq~Y zFyy`G+3=V-`q&F{WO;u39}O>N!eIA{$%KyOuO3IEmsqd2M-vN2rz=mF*YpQgz$|+> z1-*xnxZe|aJGZ2qV`Ohz`##=xFd7w4U-gb4h3%0Rp`YK7 zRvJg44)^0*tw5CoW2YCZ6}z1^6Gu)e)mbWn8Z4A#TPQ+~Tb5k83QhnM%H^i|HI8BaJP zv;Zp4&YuQ*k%RWIc7N@bI%@umyvhiWvbBMl%0{wV>PQmy6*|%4Oqo;yFceEGa170$ghT>HllSVe@ zR&38OlL(@}!B`Q1yB8lb3t#Y$OA%548Jw*4)v*fXsIQKkT^Bw?;q zxLO=-o8d}aIAu0L-C2rdT;oiTk0(T^iBd=9UEsN!T=3fVte(%6l7KwF$j8Ot-Yo=7 zcv%G?awC+hG9|Q(UR&KdBCohQ2Frd5aj{IzGLLrua)r5hnL7HhH?S=yMz70I)6>wV z8m0Fxt2%%b&+3f%=QdR^$Y9gOEfF5OYF*yifFyBrULlO(i^xSUUa;xX$6s=MYio5b z_yopYGV{Dpr?_Z{XLKHlQHrWxOh=bU73R*u5;5ySyROhoLcJjTvWZk3kp?qWChjT?p(O1 zlHNPOW$wZ!yD_!9H8$Po7Dof*;{35?)Kqj{TeP;Q!KEz9J%Wy!&$@WeNEcq|K1^o+ zjbYwI4I(zQ4-OfsBXpsp^zl`XSSbjv*i7e^+`tc$AwlU`bP_+>seE*<{C|^imbE00rdVDI{vZKr^e7Izxg6(Hf zybgBC0jcD!UPIoRk|Prl1Gmfj&*}f@0{q8%`Y!^C6HvBl*?{jUESbW+QgVe(xx;5- z6(aqMjdsj$M0|&$72oQlYK!31D)}C7O;~H}B(7Om2$EB?q_}=iX+0oO#kI-tqXsE^ z6GV?Ua~18sAhPDX#@CJH7m&6Lu^f& zJ)o7&(JLZ9`uxp{={TWl={QavR$S>>gnoJRt2cO{WTyK2O(@*jG6Vu;$THgSTNq^P z3a>c(C6y~+%;TZ>DMRquY!CEPq~+1qyMpWBNhzcKg&! z5b`_zH9vS(41RLJjo+f~?)x?mp0^Nq9`MkWH~VW_h>^V9FDtCLO{KD{3mChvxj4UD z!p{c15<;%2E(|+`Z;xnGPfEMiCQpNQdmsT8?Vr*6V~SJ1e7Ic$-7)7rJm0({zaY%zN8=rbf*cY_SV zI3?@?yg8OVnBxfeM7uwJ`8KYxm3I5&(_F)sxtqscKG4JGZZPDsR199cL*jf12CVz0PB(9_3^rK& z7CPl;Hre?j4iN=}xaw}@+drKyYb?BcRaGhhy@1J4kla>R%0vAUd^OgfPWL8Z4@}Au zF&2nv(>y!fW@LX&yAe&2MB`!_T!C8Bl3v3I`a(|$k3m{SExTg7I%2I-O^&gC&)Ty~ z1NPmXu8M5$J{=M<-(#7$UWYuh2s+%~T3-v-0*>GL z_qfEA$C6lF-o(VF`fnP~Fwy=ooZ}p$`M(h1;PihfY5zK24m+)t8v^R)bNll64eL6k zT?Rt=71BN{j>u97X5mKjuF?ev-^{h$*B&|V77@{AsaE9d#p~{P3BDbJKGeR zRytoCLmR}&CA0{VZw!@QpK-9FG4Q!#LVX{H^;0Upb!`6zrNm$AmevyelCCU~fb6Qy zcO$62s9KdHJ+!5lEtHmM17gbu)aXjiPb)N~I|VE;xWagrXlJdr+Hb|MMkVvWXw2uT zImdpOZAcI&C)Nn}uzx4pMhRz7X2*@C@?|GjevdWSR=njK9@{4A$M-j#Tyl7CA{&`p z+S0Xa*JV`HG%dXL4XkUwb>Lq|btrVmv1@K@G0uxf#hhV#-*XZjg$hJ27SI$;sY>y4 zO1{!}S!@FpMo;*wEwLx2WRP+!fL>3^7Jp+6*H#}k!AS`zO!l`5&J(+0@$oouQ(O{M zy_LF~9DKYRhRBpEV?KLhyiqUkUU3a+y%7}AD$tr0Q<-wM-19+~=Av={cIZd$ITfga ztoYJIg|@}DlmxF25n+@Uy!QoXqgvwuW_ysNkJwY6y_kb{qcM+>KOJ z_fDD2(wsUe2dW}si}m!d*&#pC-yP(D6kubmb5$$@60dVZ)2~AwRs%yvJ-p5L`Xe{KP-T19PZc6uA z)c4iTVQ(cqTmO@YCpNW}i4z*tev6+z&bFcw1(PTA;=KmE5XL8m+-K-%UqcG-PM;b( zy6rD|ex+JHF0gT{Q5RgTk3`G&#BaHC!U9%V@Dg8%Wj?Q9%_=(^4N&jcCJ{RdS z^@`dhT23-tqa9=WIQ)jP2K!4dI(RzdsV|^MbLcp4X2A3q@s&=yu=t z5j81RO@Xm3ieo{GCtG?TSq}AM_2TQl-a$x-05%`1=Bc*NQ)XiRSsNgnwOZ-)GK9#aR^bp&68%GvqUp+_>5$HMGY1j~A)7pl}ihtDn! zmFif#S(GU2%1Hg7@w!3C+lNmYJUB@nlwJJA)LabExDkEwI=bdmE5aN4ui?~OjIv|L zSimI=SyoBe&+_DhKzDzlx-}@{t^kj}EW&RYo`SFg8uvZWH@=)!f9e``$emsUm@S_s z4uJX4r~H3{>;F4){>SKw1PZzKK5-p-_wx?``?t2^fNz^j;u@E2o6pjH9Fn0sfa(t# z*WG6s61Wc?`bSL)=y9(4g)e#s+Ft5o%)q*h=PT6Io;Y;KO;KuI`_H>96QHVUR(lM(E-1h-D=i3diHyc)P-9^h)sUR_ac`Uy*U}|z4 zzf?GS|7+3C&J{-5Y(dO8+=p1Her7McQ>7JnP8ZJI%+XTfXAV6;{Ez94|Mzq9lWpGpFSN}h>R-Q1^-`V z-Dyx0XBY?Ys#BGU#g5Z*Nf9kFBiEopL|$?+J1ib*`0Uy-T%8EcAg(FfXZv4 zLj4`lg?vmDSIMS|P%+nO4D=sE_w1O~4`??G`L#*H=5@pVE-ck|jgBLM{sBZ2fnUpC z^>()g2y=Cf{cEWr(xj-}y550Irsjm<2S~Bv*l0s8-D$2SiIo^|G>Fo_!9+TPUSwE6BhM2MyB>uRT6|Y;hfdmbp8b_v~eit-}c4^f*m8Bu}Lo-(Mw#Mh8tJ# zZ7;(OX3?RtrJ^{Mgh&S$S8(~>I;z;Bey6;Rfn@E$oB#_4xC~^#fHyv}@l} zJa3#-4}Zh=4XV+{=4v*fy!f*jk)fX=HX@pqV8_`+;SEhv6hN<=Syw^hvZAUdoP?{Q zKxSd{o~nH9);Hd&yNPs9Xi_JP!Hwn1`|Myuq-1ntUeR^rNkellFi($_g%nUOCIcb7 zNXMX-&aBi}K060z-h{R+3(%&OIP$hchPEe;Boq@yorlc6Z%wKLwL>o{H=Swv6Sl<( zzV4dJc<2^z7Dw#1dO<9&9E!_bs51WH2{8@S)QpAVexHbNU4N8ULeGL(S4A@Rj{Inx!Vic7uxvvtAE zA&2G}npH)s11i(_X>Z@i4Uq7;X-ss`R~a9C^6xqNWKXsAG6wfynj>Q>8?J}e#rt`V z9+N-r>ezob8#6!K;(VNN9@ZsMvre2q@OZ^`wD=TnVmm+_aaHk1rQLtB@};M#+U}_6 zVgh8W^6!rfTc5zyQ0qnPj(cvPka(!X(NEaswArSDV+PB4fd|G$v#6r>&h)I7T{W^v z^6Q!i7>qc>r7z~+X1$kKU>7ChQ1Uta1xy4%7WVL!*#~viityRfuAEm&Nyv>n@F4MN zgGOJjUJI)Ia+rc-!31PLN3lGcjKN%MyoLl||6oRxo>b0{Awk~&?f1-rQg)GSb^~ra zt<*>`7qL;jOa@3JuCxBlvgENaL<3lZ5HBU5;4UXC(%S2YhLxfZrV3)^qD`zoz+Asl z9|KCmqe2Zl!2>Yh2=2#h@$Z=`?2m$1*wCZxN|$({{m#tH0j_d0&@pB?dW3D&V86O} z{q_0-VAC5X?}H5n=-C6?vp<=8et2h&`g&C#dG3`@tA*e7sT*XB=DSoXHCZ)yiGk6U zR_^{+xvhYaHFs&nuj@|HO{JCIsn0yxe-0RCK(I6mhtc^LAjIs}DQjiY!xN8_j3b!& ztt@Vj^dHN+zA)h}3+`wOXSY}JLYtK+&A<(CqF1+Pb;tAo`%b&7FQ{xKUu+?3&KGO(`|zcy@G<0cqfb+cvQ^8i%w9t@ zXme@q3uzGiFAY^ZTclzM87p+{uz<p6-fpXr`xNiZP+(cq#!8>V#>(eK9#Fv))k_%C#fO*CZ+MYnrMKiGa-mU6bJ3{m;`5rvUBo~reo;CJ15g~5nZ3twAkMe=#M^jdi<~?q zYsfUX8iy{e9h`e#%j!&>9QI8)eIZ)YZO;*f;fGMrFk3z>+7`axp;Crxl~6ZlxjQ$G eRJ5es#QYN2f6}Pz5DZg)<$2QQ1kK~}oxcFFY`!u8 literal 31593 zcmdSB1yo#Xvo_d3a7#i%a1GKS0fIXTPOxABfXSijG&4A#)k-BA=qFhL0A9_iJlFHLyLtvkLpKb0U2{Pb8 zw4@T-lhNUlF%_58F*ecSE+5W_M*8H<4Bwyp9uU z8?JZzHTzW?`%Zi=&?9K) z?bmTTA1>y*ui-lkpE$S~KAYilyHliByI;F0yzi}2Bz8J|9|j+W0Nm#Fcbz)X!PIvn zYW2>_bZD!pHQ~U0rPW=p3WDdZ&PlEs=8s(#E*hYT_j_jZr{NvY_yzWJMdF)<`>tf? zy{VmsyRsdPyNihiXy1;8{q|S~aoy<;>4b3Ro-0rD^zWW0%lPe)BW#2bHrg2UpwPOe8K7D)-kKTu{D+LrmzYM&-(+hVx>>y^7)ibk{i9;qsaXQ?23Nf8wC> za*v+(y2^^==4S@PIf)Y9eC^aw19dWeh>MDvG+;1Zvzh z2?mqqdNx$6dIDNdQEY&o^60zXFFO(252!30+clh+-R-g6S2bAg6!W=lB;S!V*l*Xl z+0V?;yDjS6Z%w$~l`%COQ)@V%dIY z6iKd`+>QVXoR=lL9{BSeSifxuyJ3^YF2WIqe$8cJ z&M7V8Wl;1vP%Fob`XwCq3Y>z{E^jdMgkH+bS2V0bOdiA>zAobM9!cAKBrxzDewW zp62LuK>Lby4({piy9@8f4z73I>{>GKmuiTw#ohMmMd%jpn=t2JalBEyG+0Zg#l^FY zP4BPZp&pY-wppK;!a@1i3lld-YowREq9|*kr^wWmjP66n-(@=*D82M$6(5MCb?~E=9N9lkO=R^ zCIu$Vt8Wfe&#V*qnG<;Bfk=?VrY`17bF#iceZ8D&x|To?24pM5!?O zR(U0y2*k-Wpbu{E{Uo60X>Vu)kV#Vy@F!Ke;QMV$^iQH519#_Zn78Y+7cT420cd-N z>(Q{d9rx9q3JDbRezn65x?gipy%H4cyjretGX_8o=6$y>?`e~Y7^3qMY6HZu`)XvX zF|CD`*uc6dHaxIcB+=N8<3vn7@};zen!M;wX_XV>-z8%GUZMma2O2lj>ZI6Yz*2Or+nw51HZVcX+&RT*SbZBVWCBll zrX@XIPBp}=+L&H$AD8!4*h$kft5j#qz_3Wco6{7KASSQ~)sFnVFRbJS@zr1GM(w({ zq;WaQ=DL#Vc0YfU#A9`EP#oa1QuSF0-$l-X)4&FFaf9#V=6*d~I{7lz zitjd^?;3j15DlGm+(EovAU8)k%=_YS$Bkz-nt(7&Gc$z?fZyB~Z!jtJFw>0Zde!WH z_f5lfKa;-OX*S>C$^mqZp4<5|KC5{ih%8Kz3o^@7LQKay2omHiT>~;E}>*F zJNu=>wbk`$;+>mzOh(nL%W{nQN-T978(KfNMTM$Kd$|7B2&(pqA>=c~a*>jcM+N0$ z3#)JU3>1k#w!!|IXqFTBUvSX`_VJb4j35k$!5L+T&wh1G&FOPuXgRS~Z>+Yr3UJ2C z^?f`uqT0%I`_aG2eeuM-#q)fvM-!JvANT8uIVrr)2sL~fzWr9_&PKo5{**#B=AIeh4pdBMD?~zlcVFkCF8C0p<5?)dK*HPe@T(_i!hSuzX?jWQ;ZjS#t=l7EIoL%W zu=s=i(CF{&yx~!j0B)IHdXd0XkB+b07R|TsJo9$oK{M$6MN98cBw#Zd%{en07gXSh zBw8{+WYlSdDvsLEw?;=s3QNb(vQy)(2&KL4xhJWrT6=S`84XACw^$Nnq%p(`IF$;! zicnJgzM@b3HiaqL`#yP86t+b!vN%XNL; zo2h|$xBI)~t6qKHvmEI;s{x*kf#mzk4n8_Vmq9Wdskcxgqz+}?MHCfDv)OCEl3I?< zSO(HnX1XxVLY0wL1{<5Mx71d-vTW&NHCZ{rRxx6tS+SVzdx-jzfc~jqWHs4cWEWld zZcsID6MabGxzL;Cjd15}&%4sx@}k z8Dzr8-r@rXVL%RnZP^NkZMeDeZMceDfUbx%9Ic*-zlMiy#!oa{S1sJ$Zlq(_?@jv` z*53x2x$X3j+&0pmiFwpWPcj8yGDBsPyU%|zm0Qv1sdQ6nD2(VafYqdpP|SJbze*M^ z!TQx630pBvSW)|4msyvl8;a1jC_OoAIne3E0F{#@Xtj8NW1fh5ES-vZY}7+vZ-K5) zHp3fiZuTnNwtjSI+>Dbr?^`81?L|iO9?o;|9*UD(HPX+Wcl$@rU-ge1xOUiy$H9?g zd`rr<{!Q8Xg2$1{FP}Pv2c;xYd`IP0n@%n<0-QHOi|?{5_-cE!)I;wX0x|1JCdQ6l z7$2_uT#!O~<}(TY^>yMpR?wt+^*|9K{j4pk#f&#%8&}v(e z_szmds_}rUIYCAvA$@qoMJAgVmq!8r!?P`}6DQ zq)KS-Sai}g<_j^D+vBN{!rH?eAlP^comVzilGDRsk9^ldbJXhxWUTm?3+c;G^szyw zZ{<zn4k*zS!$Kwkn`bVPKh1QDP@&k zL^0vBs+DGV9ln?uBmi*ESi)aSTnU_2Wi*aOlW@76uLP?jQ?r(Z^{-jlI8zeIp|Rzt z`Lev)<(>Wy#bMqyVyadhFRuh^+|Rk)P``xdb-U9^zP!DmSFJq!A?>;x1d!Yo66oQL zS=E{x$<4&f5h}pTJ~4@+48oYt)G4Y5$u90zQP)FvOXxM+wuZRO8V(obzNj@od*N=G z_HTF{&X<|Cp86w4uWGKOZkGQeYVt?zcOPvW*Xw{SOS<^yEP(-B(uOLpYVAuP5Z7IQ;s0k2QBAi zrtSob4$CsaxGH@Hfi+8w?DL`QxYx=Yb30<#vB@-x++{$#2HzSr6-93Wj zTAsTiz5DDAhM|Sw5aO@xqF4phS{72kce-v*Xkfq+MX^7BtEg3AhkKCjgEuig1E8JopMx6-aFkZJU*QX3X`V5ZA2h* zgusH_TQprD?^LU)Z(C!<%*a+&mRB%c?u5FSj;NH}78>cj;3^WiI_`x%oSoYR`Q_vM zXvJSkw;yn(q?UWc5HAQvo0_(q>g--x*{#odQ{2G6uU(g-b7iqrDhN`Je4h5)i3fbRI80SGk?7#3 zVYh#t$dHF?1Y7)=x5OZb^Pc=AIMx7EtqrPjIS8LZ7KM;=V`t0%Lv= z%OvgR@C0C^MP*2U;z6erGi#bO@Uof}?6)lym=6qjlJ!dsAzG#c6+E3lrI zBTE$mOJ94~%r$=$6mM34)$ENrz;iKMW<0TJ_Pa{}x{>UrzTDV;iAYB>vz-OUIlYvD z;cLr2o*v$}xI>g#SWaAH>74W)5jmcb8n6jyFxVv8Gc^J^qj6>ddTv*@qgGgV{@H|| zY#>K2+dzJqap^Ra>1EhJgoW3K(4ng^aR=xAe3rYXR6H-|Zsa*foZEL|>e5f!n%5*k zit{hb-2n`7cYR!~$*YIeo&psbhtz$Jw9B@nnd8XOO2?Mj@APot_yzE)0DJMWgoUp_ zax>SUnK0YLb8+oU@9E+XlAA(9|HqOkSm!E75$fY_R)Lqz6 z%AgN!c7;<@en!e3n>+umYLR8%5>G7PYZD;(3Z8#PxS88wUGS2}#dgTPwC|d*#IBSE z_wD=k{_)nl-N%OAb?Dyj)#WySZI+MSS+a{~g>HAK^tJE2=TEcPemoHk@x4_nRIl60 zihubz#L5#R%-T67+-HD{tlB`L$TzTy#$cF|Ss};xxGX0Vj=H~dNe{Ei#0o`7RN7&9 zpL0YjD(2P3*(8QzFLX$gvYC+T=ZEjl&guG)|8kW~59@b=1>!Wia*%f-t_e4nM=LTg zG^=FyfJr+;4Bii*bBc{3WuqorI%aJCRB5;C5ptO44MzkG?_KfF7HC7H6*<}F zTG%@x_uut~`+FsSt(#(1f7=rVQHf{ZrRQ3ifRO`1fKa&Ww8i_`58YO z2kwX1cPQNVw6CBzw_Ns?{O z`u5V|+G&4)G-P5How4@q?QdfG^*_P?*U4XGHJ`Y*agdl?dY?a!(Ju|n7n)$P7RKw`(H`{N;jmSAAwdBQ=8t zC-L9Pq;*9-ToC_qBuj>f-#K9WnVET8= zd`j8XEsmcYUr6rDY-BxyUUbA7w14@0bT}xy2Tyw&D%O8X4?x)(+dydhJuA}s-?0ry$LIn6u8NZU-h4!ojfl@R0lI&M z2I~;3PObwwh5c7(#7dxm%#r?~=>JVa=ii8}yZDf$C_iKVcSHh);o0AQ3d4E1H>IH_ zOrr}6Icx^<*$UA?<<)xpLrFGkHK6vOX{vbcRX6C>1|^1j;6p#}A#bC#mL&f)LCusP zg`bC>S2XOX9XRflO=x4GI7lUO3Z*}fb~x@0>_7uz?S78BSBM@wg-{KI+ufgVd-Jzx zu`Hp~t;Q)4K(J(rN6+7`vvmNjSb8P--U1gLkq7NuB zOm%`-Elo+-?_%|OL`Y~oSC#x=oHC$M1KLYu7@BYOTYxC^zdX5&)7Q$7+cqu1Z%(U2Hj#Td5e4L^j&56I0{-1|_ zx2r!%%$7>rzIKCuAaKr%`o~+z{g%A>6c!SN(g~f zKHw<;=?h)u;o$iUCi3;UR@D558@nHl1;c zI9(;XU64F=j=X;c2Ru^{Alcw^w~x@4ngK#T9ESTJI()v=@T&k8zw5&1dYRE!@b*$E z>FI-8Okx8L0s}pJXE8s0!Zx#XxjyNhuv)+b&3G@$8-zx3WWEx}i9@@giA9TX&_cxN zXH2kMnz#9gWsU&H$6B?v!5A{}4gW+wiIKIjsvRfYZ*cPSjMGY}P?A0jcCIZm?b>8b z{n2L;MLp`iVajv#oIUMh4eUOWd|9#a+S&C>J!ubrs(M%N_Ofm(=>R?z-DlwmUA-_#BdZai zS6=-ugv?1?e$NkJTQ1S@Us#&~ntc0cN#9Q>lO+w+|5&tn zCP-!q2UxYvpH=T+KsMa?YZ3nS$vy_;RpST@K-vDjNdeJsam1(pQqK4!85w+I&?Cp= z0ra`{$antR->@9m*s!iA<%{IVqznflbU@q zKQ`;4Ezb_pe0oac01Rc;zWppj-JE&4;0>M6ez`fT>wP=bvGRsb zA@I#mE%j_)ozLf3T>Q2*FDS#qOTC2S8k;c$5zA>ogxh8T&T7tuLZ|Wm0qX=f3)&!% zKsK1v-bpOR#j_%Y$&e;_wRTCKFIJ-8-NI1zx0O<5D=)mez+Iq>YWzXj;;0!j>$aKF z$6~O|r9EJY)p_0HO2y1fuw_ptT&cA``|Bt^N zm0i36fkeEVu~<79Kp=b723Iv!e;bPo5H>uBknuF1dch0*vfv5G8VHd_%LhdH1p^>h z53mykRD=My`fEgBv5ok^@`?!C#XL?BJG_A1B%l3hv(4CTTefJMf>^e?IVU_&0zXI} z#rG2oDs-NmGo9N?db1VYKSkRyKj-3u3b#eY^wmq26Fexc1qsr4V>3Nnkig5+N7YfY zj&PGXm(}rgigv~K#jH7YJcI36_w)|}#_fWFfP}67nH-V%pEmW9!cxUVr=lJQck>6> z#t*=50#A|A`1)qdM~H3mw_*n-edW?CR;|69;M@(vgKdetB3%)wVkr@(d~NmW4A7SQ zchw63UmHI$@S`01DC{X|p>j#nd&Y3L(g%=Vf6KRQs|!XI<}a9fx`QIsHW}PFztksa z&Bl<4FZ`~A;fm4Y*_U-vJ3OM?MH`uf=t}!-l1rwvw zRAA1br<-xqij6#i(yP+4I>^=9$kIqOjw-CjrmkRYtywf z7)zT{m&r=mck=J}Yv&%cjU5mQ>$S^oXpCB;G#g_7^7HSRwj<58Vz2fX%?Ui(5Q>AW zs8>8JEm>2-ra1u^l%DlCB{8#T9C8sgt7syAHFYo?lrPZODj@8~7|eB)+bD#yrHcxK zg4^@fEgbbAbVPC{-K<>B-}z#mJV}x{{y97~=8ckm`(O{3O@f zn3LRd^h|Rkk~~aFUgd*BPWWg*#h-FKv}6~T#p)A#3CynIE`6F}sp-4h^qlvi*gjyb z%xrpH)6S$T|Fl<}*)}_lu`SKR0I^VHz9TiU*24O&f~!#^SKjobYEo`bInIFg~Z{W%mUA^4m3rJkuVoeM_F>!|)}GS<Y zk;O{TS`4PjfKCm_CA{Cx*lX;?JIG81gf9|iW9&tN*(hGFdf&^s(?26-_qC!Ra3@#( zTtFDTOJ8YH!ltRI6nD$M08F6nGq#4 zyZcpex}Uc58|91ku1>O0Rx^j}143QQc{#N|wn~@E(ahHxfg=M)!1NaX5I9}NLiy-` zUGUK0M(K~dfMfh>1%XvC$-m8!Qet+Bh7ls zD$<*Pl6=vOc`%m^ovve^7!V#-};WxPT5$Le(jfv~Co3!tm@wann+ zVnkQulW>^K22y{87{iq*nhiqDl!By;f-S+%U5b=QSYw8FD2I^oTfroaXpu|zmG7Md zW>syI8a>pS46>@cV3w2BH(OvjaeY-th^JMlTuDu?HIC$)y!uy?cTJsGZMT-AxcK(F zfz;A*BnIX-)q{pj#7z7sUXmX|)S}qZ4~5^XP&Cugt%{PdTfZooi7n1UQ7C^eJjwG* zURWoLtPJS~mI#YJ-KJ!;mcEsh>~9|2;aVcI2-Ge~vkyZVBPwYHje8t-HQ1AeaB<6C z;lK)K9RkB8a)w>l7{8V^`ngtP!L4fB7X)?IM?G&JP_OGHTYfH5n@bxn#$zI=7(miC>sPrZyD5iT#ad)#qFtXmC|pDWx<8Tx!-$RmGlu4=gAP z=*76NF$kkPwdBq&QO2}q_0;7Cl3llcNqO^=9ND-m&)<5?91R`FpcnwIfb=N}d5YA* zLNY>*_I!7ECD#0LZ<>ChTH!iG@cT+RmBtg~B~BR72+$%1RwIJasuLIV=}Nm8vB=m- zN)hGBH)5KN&TykR$sw(Y|F|g?HiA~T1`)E@I`J0@#Qxv!xv;~+Q+F2Yp?xa zK;u9u0tgDkUyH(E^yJbe&NsPlMk)iEPPhar{9BxLrVI|fUqYF6p$QrVBhG~8*-U*H zASIGVnQh-Ef$#e3D=Mv#gRH%oM9xfl#*V@L8LkkAQPeaYZkVKq_R z!7<6SXN7p}53EGXN>uh80*GDq6uC;i{DE)T0>xC3$R?I$&I9Wj2Q;|*?AlB9p`vnU z0XU447cW^f%A*?q)e&*3bmwDXr35sW|F^xYCA0C$QwN(Zq5k>oQr=qk7QyF@xQy%Y zu~DD8{)+ESduI!=5EB1bb4AYcq1gSQ*=a6eaft<+nMN`(7*M&FE+3h%xQAfbhExUo zjfA=eYX97okI6uwT46Z)PH>`i9aV6GjNR5`lS9=c0tTSvB85&ls~_)BOlW7UbS8Gb zv|Q^@s}*)p=(p5ZNA%J?3?$o`WfyO^2#yQU!ovG#89z3pSd^Glwi`pZ3g7hD(tS;b zU48nplXkLKTt^a)ETGQzd{O$+DiOzQ>cvRw#xz;qY3x2W{Pt;1itVOUc6#|9w^dA> z4hDvS5}nuaD^<>m+z--8g8EU-TXWK>1*$cK)uWdTHXI`RS+OcTqinY*n5*V*G$aWS zIZ2i|tF2e-x7#h12)jbpz*^_)H#8!~Q}TnaOZE!3%3nNsAy}5wl;5PC=VjZVqMO`X z<=XqvtIQI{;}}i7w|YV<9r%5C~V?870`S@Mn&2{LH5xN4xZ&lv7wDRTG#_0-90^ zb3QRj!aHhxt^z2~E4t4^^A8vAe`FZJDqQX6isS zZdD#W@!McIOhNE1Dz8tp6mm>cRWoY#f1LC=mZ+KRWV zqKY%hfbdr{40%YLeg2-p;KW0W4n zbuhc&NEu&ML5P#>?ta~tWo%$sU6sl7j^aJ4{8w_saD{Va_R_#v zX~F@Ss)#U8ajq7zqohJn=?E?GGrHO3@z`NYPGv1-7xat>OC0aHGrPP;zkzVbkBfl%Dv6tt-MI%JWX5ASy{Os74YUuIM_R z=hLLw8e4P3j+PUc^!6*9atlXA0%rXHWSqXfKFXKsBaGWd;Sv_a5i)X~wYRmyJ{VZy0GNO@b6 zBJ0prx8S;kRiTNao&pdOec?@`r&gKV&t#c-1z&`-({^Vt60vcwW+lbUN}SGU8Y9Xc zsisLuli8w>``WzFpPZWIG^@)A52`@-SuLM==(H(etYkL6th|{P{@C`O02f5(Ot(MF zWN>>iWZmNhRJ$Cn1yKeO*osR*H}DNF=j*ZuHxJU0qmdsH%cKkBsarQP8E8D^`q@?g z+rt}!C|&-CDltg(0iqvEJ-ELx7dYd=1 z=WHdQ{yg*(%lZ3QE?3uMxQsf<`PFv#nj|5qlc+A7hvLl=mjd1ZD|V%}%xR?4#m}y8 zbSQEp8}W>F=o7oaHhPpTa}3o9Y=6B0gG043Fz1SiS7ZSW*1l^*@ ziWWw+1dUt_Rfnpwe!)@ZV4RR%gO_51-xIfi;PAeG7oN8@-7N&Sx@{2uGYbPewyTQR z&&a`oyC*W6#kqd(lSiO%%*^=IX#8T(rrbcMsT4k)$xdtLr{jn{qpa#oeTguoyg@bk z8Z2jpN=8y%VtlI6mMj5A@vefjF-_CR-Q=@WUT@0X)3+|0a*1_UpB;yyatY6BaYPlQ*UJ1Ok3zTfOO3HQgEs8$E2KKN4CZLm#%4Z-^d~7 zH|iBxLW1&8yoUOZtKw8LV*LrL!T#5fUgt?chFx%EY6!I?aGTiv8CCKOkqQC`+pG5! zhS*&aO?osbLYDJW$dmq^tOU%q_>9ixS{10 z|534xq{$V^^;yXhohj=VqriD1Sz3Kejw<1yO#@|77+<`{3`^LH12Vw}$Dlgj^xh9nV?k@ESCpH~ShZqF!(AHza!H&}53{V4b8r{Cz^0E-Y-0oa2}K+?m6Rla;Oy z<#&WerYS7oog;l}vq}RiK@G>859@bxV zLZ)<0q04W`6F+*)Wa4Bxt3-8NeZEtZV@@}I>=niEqqGK6EhAV{BXqVMN{u~>-PsW) z2$gTYoHAyUc(1zrUC~CD$uOI!%jQH?GTD|+$CyQBeDe8+iLE*FE*&cW3`oiK66X?8 zqJ-bRb=DMx1O9!gHL(G?ex`T(&{IUq{l>zRVmbWs+?u|#hQ)2Q-PaRc-= z$ACorfg|Q#@QKxjlJ=~tZwyh1hO#+Qt#3`+6Zu7MHa|0e6$A|>rj)hH z!D@a}J4^*u#&`>RoNOp252OAbEe~0DDQ_aqGsjd4i(BOSU|G$40(e$na}-ebzXmXF zxoSthS&y$`jsjA&6bMW3xOk-~pi@Tpu(RNw{jrD6tMQ}JaLM2=*-CWW7HU-*(x~Em z_HqqFl!{67%>|7$Hncu7?58uFr^d2EzbE0!0hI{=Yh>^~+IH26GiQ$YS*c`ZQX?o_ z73VU$-P^Og9jpxwwPykOtX>>O1&`$d2=Z}wEmDF?-PmTN=Pu&{m1{XAWTL3hK zfoh9_AtQjCl(m<|FT!^wxl{c^7Y^Fe%6_5;j9bj>w|8~ho-+r0u@mvc_0V4Fg2!Loe3Enkd%`V8J2eW#l*ahDFNmDeQp&kvtPMWvq?Xui&&Gm zc}!DQ{L~msk4Wst^xyYgBoS3MP3ZhDqpc55-_J55Lr- zj_>j_k3qu;&mAfsrQ>TaSzwOgzmED9bNLja$dU8rXXzbHoWfY)hc!b9vnfM8&Fq)q zhM(elA13`hT51r|86iWFYTe98c7FCznhQ)? z@zMJ%A`I2ACU^0CWWIDUhYD%)wJoPHb*=+;!R+i1=OozLsfSYTi*i)$QuC+`2_6T} zdry8srXQwocq$syqEZ!^!+49ATfDYYB~DR`r&z~cO5LM`lPdqX;L%Cg$svO#rlH&! zHPQJgEd?c7LM$V}*M9Eb9j8;F5XTSCASL-JkuecrEhv*}i7u{il1zKGAGo5iOi-$i zsxlg$9Q*jE6~`!k5wR@5IA;whK4U4Upv=Y(l(;PJN!pW$Gv9a~+;3!5eZ;BN5wME> zqMWUZ_BZ;2m-|wLz?zJ5eDgWv9ec9T*JHzaIreg3QuR&LVk6?Ke1dNbJ@@Jn;*=WyiXT$v%k@+^6>yM~TE{fmKF`B=C6Ezcer@f;7^ z--#&-6}ZS-d|q~b1&hHsz%BneH9p5 zLdI~-IltQ01<9)RBtlo>TJDR_$>nN#{*1cNv8P2%eA6W0Bp3dzDV(nMjC-S29}ioV zl=u_7XUGtIlC(g`>1z%$PeMbz3fqn6-{n6G%Wj795dLwP05JRW?K;RJd)HX8t|{jJ zXUC;J$DQc0flkWZ=9S7Gi3{_`j1ol-Z@c`&VqzGPG5{NMroEDK@O|0J&YUHcGy5Ya z6Ay*uYHBRM@>bCn(I6`<_KNxKkGXTs)YI}9Ig^eLtrOwLQ~yP({w{=p3Ox|KsPVd8 zgLb>HWoE%Y_zu3|MKbm8%E%5WHnwSLX&vT>uJ_Pf%tXm)_G?Os;#^lFEz3V(u* zIvlz{?w#55J8#p5dJPv#RSwr)L*)Aq=1Gdp}CDwE814O{&UG#58qRuq^er2~|fY%WfLui|OGr8m{xwvP$?S zsE*KcwHdc#DI~JiwPgu5gNGD*^MqB(6G_`k_{t2Z7zYa2yDbzv7^anZ6|MYBttbsz znZXiRuS=5xA6*^j?3Pk{CwkeDIV!i)!6|eU&Yb zc?kZh3wPzEnu^>#!oikdCTk{~ivMA3cGec<9BfylL$|}s8vCsuJ8!Ev{976QPC!-) zHgo@K990(qU2SK;(d8C`CGwn*rM6|YF4z8sb@Hc#zZg`hm2Ro*iKdWTrw|*kq3f{` z)CmP&;Qz+#-#{0?NCYUAuN}*L^{^r)!9qlz9H#lWTxBE{M?Fo)zR^u2=)lL^dLpAQ zAl8!R#gXL<0>Frk(#E2`&4xw6EY~=E5 z6LfXrHxQdp&rXB=61n$kgds@YB-Dxva`6kV_#E6RBsz6NQ zB<5yUo}naucD7vVi!iDRgUzgUo0^bU536(ov;ZkK7U>U8wN^uNc1%4b3Djr4hT0ZL z;P&+YR%ouG{=;5yso_CC7d^9hBi^w&@?+|$956iOJYeQ$0^4Alc$~SujQ0k<{QR*E zLit;;B6QG{_Jn2^Iwe&ec#HaT(e}W9}~n!occ>z?jMX@5cT=vJX%QCG$_K?-9G$j7t6fuD;MT6Gu| zrfTKMdkq^pL)d-ArDA?Fvm9}!kM)kkYj_mujK&Y+JLWUvx;Il$Cte)2Awu!^jLN>m zbg@6($5vU=_%COo9=B$hFFS8naw2ey5~Gq+d~;XDT2s;jt}I?<&kr6I7V}S?LW;w1 zM2!tbWpHIynV25mq~Mxqo$8wz$@8h%wXzp(p4S?GBAvD1IkQmU{s?{4b-H)hzdV zPCpE93G`qbykYAf*Ew-luYYJxegkT?4(2Zpy(bByk+HAn{zRrYk;Q<=QyWU5{5+Vs ze)MCiFxaNWlJ{&7%TENK(vVOik|GSVjn~Q9d!C{W+RsBw;oIIAn`HlrA6B4dWbJ)d zA4EAQWTF3Qz5?4=>{tE$kFn4so}xgTZLjxa?RHeTYy!~5wUbbFv64j9Dk)={_L1{X z(nce`VCvZ+*5Ag=Q>JDQ+nXO_+d3NU5SkWWd@1>agR49tA%=zrGBPvzt0Z3lc=V3R z|LM`ZZphQhmIbwDwBun)$|A}{TT^f|O6gMPA=oQ5eqNK;gaOJ&k&IIW&iky2h2xzu zVy4$2%U)d5!nT1_HR%=Tk3Izu=i0JO-j;F``h6)u;fehgu5hX+62-NqHj!oh<-ZzK<6C0WsLB^C}H>MY~FiQ>(%oyu?gpJ?SN=e z4R32yY&uPUwyL1ih@{*KTiLT!YKa0;Pa#jvxRwtp3{^y-XD;!ezndxe(}7ge4(C|< z3y7Koe^}XT_>?ECz`lPI$RnQs{$gkn*gsa3`RGZ&n*OSf{!7%bkX>}X6cOjT>oK-N z9_k8k4%ayv7-0P}IRgxE+9hLt&$zB@pwj$pBWKO8=LaxB&JE{LjU5WdY8)=p8Yz3u zSqg;EK8|DGbnS50a?>|Gf3lS@R@s;Zy3&T$c0rSW!jQe#$XuzGx@IZOK?$x7s z2;wl)M&3m$$Nf7l+zpeS3cnYQDAk8R9>NZAlO( z%EL~wzLP=K8A<)KrIV(arLr_pgmoeSKB4Vf?4uS}N;!UWI%#B&qme0MI1^2j=+uVst8kmdoJ>=%=)C!}o%ZOBFEu3VDpSwS ztbMNTB1{>k!q@wGp6-om{%K-jiNchRlqX&ovrTehOT8$}GA4CmW+Q=zw5*P=UIrCB z-;kybmKu*L`%y5rX5xg?DW~eIc?3p}HWacTD(>&ci)23YL&*vZ`MvxgzjlwUkIktZ z!WO9=_M0F>9F-S{On-MgI;9BB;eJcvP;7{MiNp^qNn)S)4j3_xF&;eYkyF%Fw9U+@ z_WESdJ>4Ie4{xfgBTl21ofMvJ7+n%~GiaOE*7tf`>MYT2I5SngKK+~3LfQy|{SR*< zncx?~8t}>m?8^#uht_q=5G`t0roY>rdfK=1eZJoaiMd*qE^7Vlkar)Nsjq$2B4BT2 z%_r0^iChP2?4uho{*(tqkdODZ_Al6PlkAS@JQ9Ie1R5C+`!I`~{s%$$kKI21K3e}5 zorp^Z-%moASGjZ=xrm|hMp0^EkaObYm_|v~#Qc77)2l4!*FH-FmGGEerUBDp1B+#o zhla|(4ViodoGXE`tP(~`=DW1%k&XFfwqI_gTXJv32z(oGxK^TOyO3C{b{A_^f35Y{WhM1BNKLjCb@RC0(o%!|h9jZT*#$c8tFrm}qIylC|sfOvcxHlpj_f z)$(Wjbt#g-nez7bq+9f=x})#+5`JOkZf*JNnX1Y_?b{!nw4zxv`a$IMYRqrEYd38; z75#_}|TVo5y&KJaMDr)BkSSl2v_Q<@P-<(8vX!3 z?ZdT#E+UYZg&oUzWYw@6If}M$bV&|Ko$Knqk}?eu!stSaIr6Gbcv~^&C27qGfO2sr zxs0(dc~w%Bv6WTOyLxRYx!g)Mg&bQ$e7Psa7CN6|>{B5M)D@5?z}BRhs$seO`mUz6 z$uFhBpUaQK{hZtW>RbaN&YIHTIyB_a_zl7z2oWY+ytKGx$;+p03zLz~+RBv7N@1}| zXv+8~!Qg=5__oW|@+y&*i09{CR`zsPb|``$Y7*gQ3e$8B*4ij6Jc_BdT!v{^@=(c* zCHfh@KW=r%45b3BrG9RvVOl;Z{G@^2`ukLT;}2)7kcc;#KWfMWE7a6N*QS%gw|@?B z#;>6RbQmae3c*ONF280YO+mpY2G{th-!0Q6gz<35NCMj$+9)S~Orr=P)F_^c*>W>< zVl>2k_e_|wEwJZNnvtAXUbZ5~ww*|%Q? zG!REO4S?GshrTHgEf~bGjXI8#Sp9|uY$ZalEMt7DS)w{)g|kxxQ+|^A7`_;*J#8seW$yPO-rA*N~n?_?2yBY~Qe- zLm$$_SrRw?*r)AR3e3uxPgku;Hd$pE#&SvH*QV9_&&4P+s(c=CDn=3IupcWFouLV4 zX-;cRX)+mhj-?G^Kv$D17W0aB+7O=yl;HR+K#*-C(`cM3p&z@#ci47BPLarr08K3u z*KjE6#cy$Kt|(Ej|D(6>4r=P_)&>-mD4_JJ2oekkO79lBlu$zNy$3W@L7Mcc^xk{# zp(8~)M0y92-VsqiY4;@fd+$5&r0ABsu3~pR@N~d#&|6>)8?9FQ3uDmCWBa zFnM-`GtAdh6^MSG5Xe35&01iAg-lkx)?v@Ct`)VEc@rcp;H=8aSAbg+ol!7Rikjd< zs#TeWv1K@Z8sw%WXTY`4PdahH z(!P}{O!9*7O-JKRwDXC@bFKa7F(_ z6A=JgOAmSatFaeMU-S7>=6oHWN7iKQrQWRD&9j;hF6B!NYyl2LHtR_XXVnY1A|#m0 z%rfIj(h@USGo!luV*QT?W-sra`_wAQL+=$7M{trQeLagA{LtX2eV}k3W79t3*mLe; zzg8(q%If8bts-$w4~Zc&Yj&*q$8B!EH};PI@mpN?g2;-%dWUB3dQ4g~(>I^$&Z=*N|M6<@zT_a!WZ>P?>t~lf!F?P-`q$Nk*La1oJE|hv0 z%4=`s>h!B-I0$_OUW;;#n>S>o32oOMZwa(%&Bc>}^(_Hw9M%lxrl0}^s+LB7bn9H7w#=sM+ug*4`Pckw)aD&O2AO}P18{Wv= z@UGMef-HQMY`znf-?rOiI_L$S0SPAM=~yV{cO@z}%Y!aBn|nqQ7<`zrUxnnaM8{*9 zPBdS6n-eiOmT`TJsxxLIlV0<-CeD@RjSH89k4?!5s+r_)XH%cs6~54;4$~HxUR(Aj zdp-<}=!t-ng*_n_=-3qCc(>J_Ff!vYGWkLVVy-mRe8FgRsx&*0?=!Jk^UW~0%)*D` z7DrIxG-}%+GYE-uV?^RiTPH#%gKp<>4eX2W)x?m7d_1C=f97z@NTHfv&N)5W@G5WH zX^}T5ZEhp|4-4=T=r;Lk*u$}I!|{B07UdG&$qZ``$`BSHePET1x8{L(c|>Kd9UqE&QhC1G8Y-IaI%Kj+A*dth-^?oGdXPsjOa**~{Wb zZ{9e7`kxoNdPqPo9(5RY#EMQ0MjXd39)3+EjfBaSMt{6pWsI9BUjQ)pawv`eox-P_ zY%gr_j&q}kzKC4Pk;or9h+=aU4+f9(qPQjWX(aB-Zthz$4n_*DeO_a)IV4uiMQK3k zmJtt_RCV^a+Avd`k`*^mB%flz=#LXgIhBjJ|I-WhlJ_jO)AGXa&2cdBfEwflKFqGY z^}UqI&E*fh9vgS&8{Ay3f4Pov3~mGY4@<^)B4Gxxcty}>ApzAIe1U&X4F#YhEX?8p zOjj&4DGBXypgC(8V-UcA3qCW2Qyj`iupE|Ynrn9!cTSr7G&cMWJ_DVzC0z2#2*--K z+|%-xo1A?5)$2lkqs%@8e8tX^1Qj=T4pj3^S02JWN7Yixz7V{jnT@oC)10%hNrOJx ziC1;l4a@lFVr(Bht{Mk?_4l8-JGB*Tn-j?4uOo=;R(>YMftqie0awSMgCct3HzN9WRyng>if- zAL9mEEla!M+Ht(?FtjM2l4`#o7DJ?}za-i0R9^4C!Ae@fs0+*XI@w}1Ub4RwsB%z~ ztTLdE;I_s~ww7noelqq2HRoY`Ft@rAX;f)iCp{T$GCGOsB4vMIyY63}U{$kgsqsj; zjPYeE_n7b!Qj|LrPNA(?S$+~cZnrC>wFo+11dr#Aphi6op4^Bu!GnZ)-1D`FP zm`2xZ^&84VS{q-@6t=%;p?4XxWnKthR_hVcaY1Kw1zb!^=w^CI*=Af?K2FcZBC^@E z$NDNvRtmj`d=4yY*a0`-xD`))PH^HV**y&67sWoJ%lWb2t_;9fJ|dc>-kJL4YDs*h zjvD0nJ^Zk&nB%sfZvBDnYI`7La5RfVK4F8rWb_DKi>^UfCGCwB(DQqHm*2y$uDg>i z%4UDrhf7b>It~^+bwaA%l^4rhS!QFyb-~7d&HU$FaQjiRgf7jUH`^MGtm#D@oq__f zjH8pGU-hh2oF0N3Kb-V|;5;|>oZHtk?(eJeqT)+<@IHdLIP9vl#UabHdzc`+JeSl! z2+p?3Zv0AHZ8CgWWs&p{rU?8pS#5F6+u(2qu4r>}^U=r>a)NtB{fMu->%*ol$=%gA zzs=}EH~rU9*mwClXWnvTC`at^C4WI^r<%e!d}sUeZA1SjZ5KzS(a!jLWv0&m04 zb!!fEW1^z^6Y>HGj=xb6bV(}KSl zzP1^C4gmK)NEuua)k)i^mw?VDN(OBPDMfExO=cMo?SpEOl9@zF!`gn!_=XNb7qRD| zZzoLpXN3eMpNnijp=Y;KC@~f%T-v+$%XC3bt08=D?0AgYOa|H1%xGMa*B#r>@~By653zEGif$zMu@%t?Qrthns@5TUP(thn3Z?`?cpgoCip(L*#&(&%2@*)T{&~g3rD|tb+Ct<#j-!|Pn|4ZrNr3_r zQaLJ67y75Lu8#-(;s@ zZX%HVJE5e`jp0{bQ~6&{z_thr=V%_-E#IIoZq|c55@~yEf_slu0e*AvGMJ zxI49{FQhwYCz?wY#c3esrV7-RY5E`g)N(M!>=4sm0N`ZFi0`lqZd-F_wPON+U@)hR z4HY%7wr*y8nSU@oM{ZV_4q%K5J!bq#9PK0^_=Fr(no3Gt57F+Av)*vJVi-@3YZB?1 zscS?Imjs@ybQHM~I-}HA>;@Zn>|qxiG=NOtQ0Ieg(ksTwa_4}GM{7jPn>A>%NTCgj zdo%v?jslXVHx#(vw#_NwBm60)0tlriO5E6~C7%Weib94$j_ zT&r@F%{09&MFc7={BizMOa+u@OdLhE;3>-pgtYJd5$COn)-2%bJjy~QDBUO-wa&_h zs2Ze{&XXBXXrGWwBv8X?oF-Q(W9Wi;-z0vL#(v-dnt;*OuSR z8%1(`PSQ*N?muuO`u$4?oC(rqUyl&f+V zmW-(uT2#tB=$U4(;!=(o7 z@*Cw$VZ_IqqiNSL1OAONJ(oq*6xK|`4_nopOsOwFt@Ycff0s{JN<`aymA}_Og(C5n`_O}bBh(3?bzV?A%=7;D!2JYVtHNL#SIhr%tCOHN%)hfvR}v_H|grS zraVmoh-ToXMRrdx3#=|WHbVCm4dDP{-NOB;MKH@HKvI7_pma2KpwKCSW+|jw;-=y5;C?*Q*$vN?o0^+y zqc#4s&#w1QdStdy6;x7@2LI7h7vNd!O3K`$+i=Wd!7eQK) z0cD?78C&Ct&_X=(ME>=hYT84yDWCACW8;NU4X2VT%~D6UQ~h!fE*z~x;le{)G#RVlpJWv zUHmxQV8}MI_Rey4*sFr095Thb^CO7O+x31{)q#^Nj%OSGHN_=%yW%_%#KAOi>H)?- zidR-c##r``ekw=qt{|4@`~2?0wyyQz?`;ckz}+A`L(uir@c5irFf8yMU1e9_DVTz` zTbByq;~Q4{%jesIH~U{uzSBkRYc*QUHMS!|*4yY7?KQHXdZz{PQXM(k@&ia|*pnar z+{LEw^W0jeOyYZS_H9Kl-WNdjTeg!V(B|-Wl}D5MG`}%&;wgXIb%mv$#h+zJYVzvk zgi_*!jA99e)Q2{C9(Q+FWWH>hkgGuql9%1!3C33w*oMsY1s_D$bKhZ~iN4~gutQq? zZP=Q6Da|Wtrl@guvECYqJdtu2)=Y}mY4|E|K#Oen78;k>ak6kM1f zdMQ@7804RJOFYz~Ro$yQlAAsgm=tup$99jR%~#WHLw=(Y=HW5s(9?A&G3jodia-{z z^iTW*FImPf5!RtxLA902u4;3C`v?$~QQw$Fy>n4;;61?=JGS^lE`0a&-PgZ{g)RE2 zn(z+qL-!-AW?047V*>O%#e#gy_pENX|5;V+W+*P^Gu#Ta_RUifv?ctH`SN%bP^gE` z0cd_>ITFbWsSkq_F`RQzl``Aev=hkMDqk-!qX`Y(A1#q z0Jz?7$fH5&RH)@F^DQuMFc2LzGGNe91B+A*kS`^ieMo4wsLM%VvjV{@b zL5)v@)oJqTEZ0O+`(722@cv^8ha@ABWDABfB7xT`wTdDHKf>h7OUdj;^cQzFiu%M!hbrvMj7N@(^(`-a4SKe zrlP%ILlzMr7TCxd3s%jt8(8wyQ>k#)j7HZ~>WrD@xJ zRnSJUVI@LH;1du;j($q$j3@br_vsSVEA(nc&4FmET%f;IfLD$K%FGmctKO!Rv#FMa zBPudbFt-Sr%CYFD*~4t%$NNZ8!mJ@zQHVO|l9m&RPKpy#FS<|%Te>1=7k?Q3%40QS;VAioOkpLWu_4$0o@{Eo^wT=_ z-1;%qf{FDNYmgK&v?srtYLX0>Ir#PJJw;0a~(!8?Z8^T)=HG2=fHWw?_q-TFVj zAX%W>$q6_Kzh_g_0#C_kI#e0+;&z|Llkg46&7EZXZSfe$ZKI{rFg2=8^Vx9lKEKl} z0*+!irl-kOsWP9K}mnF9%K(faP65>5#{GnFzt!!34f74?9JMOCTz%*=>*4aRhC3q z1}9L}r%XK*%9#g>L2OPxkPI1FANynMPM5TI-52p6$aZbgHtncAso|8JBdtSUnE@?%TjY ziXBZcY$g@1A@vgaV<%>OgdaBFgbE@izON%NIibMRr}1(>jXJk1aK-+GD(_71M}CIm zyNg&_Z$)Bf|5XrD$??~5GMFAxE1HD_em~&)MOAsY!VIFT;F_azD^=*Ab;nd%(BnSl zKVbogm@7&_Z~a6*5Xb9)2D0A#%@L=2lPTf!ZF~oUzRv*&a-JLLwDy0B?EcL(4Ak@bhv)zKBvwu|M{QjJp;-vVm;Ln=lXpTZ z4#jprUwJ1SiEF=Ie0<0=iio#|gIK-)T-NC>9|5$9S~-ov087>{lk2&dF7pTSQBld0 zPSx90>LMi>*S~CjuQECvHM&sByR!w;V7Rtc|McLC?)-3`KHRKA6Wez zj$KUV?OuXxXv1@9b;~sbc`EQv`^Tvb&Fi8Bp*c||(dM7y6Fnb9?%o>XLjJOM{r<-5 z6D@BNF6nK^ILz3z32gD)>JE~9w!R_E$mU@flk%6%i|8r`Pi?X<6|XRO`t3NJruEMR zJ7+Hs3o2K;R474jM?89gnu@_9*0^$1>Ep1T1>aX?&ofF&ZMJ$J;)hj3f_vfXPY^lm zQZ=~hHIt87h z-4zzz+&;x(=IJJ-)szoS-!cc8LhVh}s9MXr6>raM3fge`ZB!V_e9OL-kli=#21Zi> zyi1SH{Add6ZEVAjlWngxk8ADp$>s6(PoY9>&%=M(Ff)?c91;}C)bqV8KX?~mt3^m` z9$sx4q9qU;s>7pLCR*e;of;Jkglh2^h!qflpr?_WYwF=mW7)Qm+r={x>0JveGv}(I zT<&*Qs2}Cx8`mtyb4-`B>&zaG3T#rGA8%sh^8g`@(^R&yfCBs!EVhnY9}#vy|X( zGbkZ{yFf-<4+dIdhwWrw9bXf>v`1@*Hl-#)bvZOI!F=VGN;vb zneH7f6w;^_6=Q!$D$}hKnY^qn!05q4P~nvBWU*QLxKcg(=Fe=YMpS0dEQ|MpoIWio zE|mrDx3@ugY9W#>K2&>=EuMmA{Y66zzQA4%IW(z4H{{Twh5d%nq>qlOjXbUSz>Q)O z#obeeWuO%oYBQ6#uxQ+rVk^mlm+^ywN-D_FX$Gr2xhm%*QorSn#)h51sHDh(hErr) z>d~AZ>#mNiY-ts|wJa7~!wb{zepd<$9m0i`F}coAhrX)7wqh1r3RIl$0zb^IQkjix z=V<0DDN&Pu0HAfj5FGh*{*ywM4OFDft1Rm#_#LeB;5W)xKMna-4YNlPymPT#$Mrr# z49v|{qhG5Fgmw&&>y+rm1H$owl4<18PY*M8klg15NOw686x4lm!}nSA4a1iIJ_s+B zJmtAhDt2v7fkI8QL3j4L}KIlc_zr(fvm><6thjS)0nsw29vT-l>T-QUP zh8xf@cHA?cZ9RGGmTvU9%QPPDg8WO85R1bRVIFmr)BE0&;3Oe3&YNK2VoOuc>8x_V zvp`|KO_X-)3NJ#-WLc_@!QfFr{_DsHR(n3kv+GGUdbsFy{XIIO&P{lh7o!(^@CA0w zlGV{!BPO}^&4d)B&7^<~46!)xT+K{5))!*^MTn%R8fsFoWg8z~sF zKZjoq4LP91aw=TeemXO#6|y>W(^ntPoaNRcUkHOfM;tNBXQO&;KgmOJ$3fvfvzU57LkU1n zC1tSZ;{b$uLdrYr)oZ!>jM#g9_!N5Qh4i}kJN$JugZpkm@G&$n_n) z=uMpp>;j*;SB0w+1BTjH0H-p<;OOa(RV*;vl~?K8=aK&3$}H-R%sfyYdyyx_<=3D_ zVVj>=>-+Z#P~#18)6cc0W0QN{=4x>@5~@nZ&66cO!Px@0&hughJkwM#yyrY3@&LojQJ91HFen0%4X1UJuhgqNMLUOBO@oCi-$ z&I*)EyKe7zJ|~_O|8Yxvi=U6&T{mXDG`T(9l&}S#$1*jXFH1G0Rx&On#Uw`%Zc3NC zfo(@4*XF7oywn%m7-0cC-|0VH6IRIL3a04N(agxa&6ui0A|9ywRGy}Gl*Rt~(G{e^ z2xNq@pB0{duwbOet87?v!hDQ&vbJ$8v8yQClHRPx2<_!3f1jWx0pI`z*4!LCib zMl`^tH97$_!fk|iF=OB+WRVMSBA0)gB(2NC#vP(;Dy3RhHL@j>Q zcq#;w({KC!yl&W3WWu|k%eQ|m%eXN_V32k`l2Nr(emI>sq&H!S@Q{2SQIbs3Wvu_+ zp2SE|Dzi2jAt_6zEBJ`7!tFkLF3b=N)jz-;# zbx=h-t(vo}e{_|Z zxKC5k;=|kwgWPm8$xfADwYyfOp(U*p zZ(iA;=j%f*PAk1Hd#oN;e0XpS&iKX3o~=&`D~R)r+s-^$QM5M+1PqSbeD!mS$eBFE8wN_K#)~2 z$=V`D??x!xdLrviOI}h4t^A#u_yN_wQs0-P$Rs1g(Na9ZVT=!yc7NNnau%3H`f>uRSwXYMSkl3E#xkTa420f8CvES|l&b`JLtHWS_(KYD@rR_6aQlZBOA&;6_sKgu-c^}EA8x?|&%-~NmY zmHV^HE|8@Ev#Yft%%l*{DHs)CCf2nOb#h6j%qR87`UJAy&8!tTw44#MKI5!3i6F?4Xt2PbC2-V$b&>ll5Y+8 zfzc_Xgaq32`b3x*F9Oh`P;V*`@81Jk9ZP|IS`tf&dW^UL&S?@vzN>vLRuY%w%LbD< z{##`PIbHN-GDAlv%NAtzG0Cjz*W5>7zAyPxb4P^n?-5yAa_+{7u38Uo7nR-P;dL*G zeWcR1E5d=DLLgQ6Gdee?=eyg@u`CDOL2E!<#@~(abKeJ?-#a>5=~0RTT_;~Egk`DH z9p}AlnA9ey{vq}B(A?1VP3aUI-}@kkXZH$R+QVYRsS+qG(48yJ@)=zgyMO>Q6oUDr-IECN3 zCpzOYyD4@=sOI445hVz34K!A^tY-^uvEryXC>xQ~a4kP>%<+DSofD<0X)gRv&+O8^ zHRo`XyXVa4__ctK9)v$RVdvAovDj;`?qe!SIEY&!?|+-Qu$+6RxLw(l2l=NCTHUbq zune`aF2lD*7(WNy$u6CzoVfojt?CaQWw2; zZDAG*YAZ>n>c}3x zg<0HUtwgbtwcWk+j(wY>jye}D5jBtz>0D?WKo%8*Rx zOa%AJ=uCknzZ%MH^mq~T3pd>Ni`n^pO!_xoNTPHJIQ-yxNEFj%$km$#ERet{VcS)UWaT8U2QT?&ss5Fxz20zVaLa!qY>n z%cQNX)s_ojqmq$$Kqx5$Q_1*L8MI=b!u~@6`+5uxH6G9oKp7jj!(vw4k;{hE%VWn% zz|>4pVC)Uxg9}cnVsB`sd72I};nLp%@TL;dlZE|ry$a%zJoE)i46;cnf81^8j8LGs zErmf1bsz>`F1AJhE;jIOF=?wNAr?I#OsF)C@ukTyaStGy=9_$pf8d0k0BTpaqz<~1 ziG#O+b#++`eJDc~bmy8Q7TO)VI>_hV)fOU1G_mWiTqDrbe=oOa(*csvuOIgC8T#D5 zhUL}$6L<@}+|c=f|9={l#cNYUo~8w!CVm9Y>=c@Y9i6KTtUCa65(`TWMwcf0hmqAL zo$)Y%Y2*nm`xCUUhZXPTV%29@NlK5)g1#jz2OLN_B|WYd`i%h~#~OmIoQ@G12Ed;G z%NJEL-ZwnA>}X+x&lvQaF2mAX72!hM1i+>`RfPpKmpyHGOzUwtz`i%TJ8+77(M50O zocDI>Pd}$(G<@T|erIE)#k(#Az}V^RH9;RoedW5|DW@y5-~U};+4$8K@H(MzH7q$d02l!YNd6h zNaW)BwFFI&IMeqZAw+3hTJ&dAX&1pgc32I`4{=*OF5$nAub-Xz4|-Ul2NV{`(HRV_Dp}bJwNE^Z6$?5M$ za^1;R?-vI-qB!D6EhrrCcr-lNUTQO#ArYD0RZi)g{X9JI2zTT2dK&(tFT$^nN|{@r z-GZ{d_H7`icL@r4E!%Q`7SX$s9d3v@_w3W~{_WvskQcs(`cDJ&VsVI-=>loE(n#qC zGL60#W8vJmfrxZdrcV^z4yv(PvRI44$-F*LKbXo~`s|d{UF33z#JMw#G`VqqlcH?2 z{|svWM+w`~yXwB@Mqif*MuwP?xtQmpfHYy6;o? zQVRT%H6M^x_VToB#d&ZtiH4!DfE_&yI0l$;m$uy~4z=_vo@0GaKM4E!loGIWfaozG zNqxKOLWRDi#m;5TyNU>?f&;oF?3d5k$cyA{z#IVs2Md^AW-&PP)t?0Eb<9@^zPtJC zrBQ`m-8B00v=OBIXnzsQ0H|#w2kIzpp@&5=fTwZ1099i;(`u=pzUO&mJD#+6=hbjj z{MWR%FX#c$Z1m``RJNnzN1$2%%P!BrDha&)w=JQ?L5oBefB(LuUi|L9e{qTZy7K1z THwj!q=nK4(fQpxj8od86s`ZuD diff --git a/windows/client-management/client-tools/manage-device-installation-with-group-policy.md b/windows/client-management/client-tools/manage-device-installation-with-group-policy.md index 0aaf41776d..052dc9e72a 100644 --- a/windows/client-management/client-tools/manage-device-installation-with-group-policy.md +++ b/windows/client-management/client-tools/manage-device-installation-with-group-policy.md @@ -1,7 +1,7 @@ --- title: Manage Device Installation with Group Policy description: Find out how to manage Device Installation Restrictions with Group Policy. -ms.date: 08/10/2023 +ms.date: 07/01/2024 ms.topic: conceptual --- diff --git a/windows/client-management/client-tools/manage-settings-app-with-group-policy.md b/windows/client-management/client-tools/manage-settings-app-with-group-policy.md index bf19bb6ad7..fb091f005b 100644 --- a/windows/client-management/client-tools/manage-settings-app-with-group-policy.md +++ b/windows/client-management/client-tools/manage-settings-app-with-group-policy.md @@ -1,7 +1,7 @@ --- title: Manage the Settings app with Group Policy description: Find out how to manage the Settings app with Group Policy so you can hide specific pages from users. -ms.date: 08/10/2023 +ms.date: 07/01/2024 ms.topic: conceptual --- diff --git a/windows/client-management/client-tools/mandatory-user-profile.md b/windows/client-management/client-tools/mandatory-user-profile.md index 78e358f1fd..5e64dd2f66 100644 --- a/windows/client-management/client-tools/mandatory-user-profile.md +++ b/windows/client-management/client-tools/mandatory-user-profile.md @@ -1,16 +1,13 @@ --- title: Create mandatory user profiles -description: A mandatory user profile is a special type of pre-configured roaming user profile that administrators can use to specify settings for users. -ms.date: 08/10/2023 +description: A mandatory user profile is a special type of preconfigured roaming user profile that administrators can use to specify settings for users. +ms.date: 07/01/2024 ms.topic: conceptual -ms.collection: -- highpri -- tier2 --- # Create mandatory user profiles -A mandatory user profile is a roaming user profile that has been pre-configured by an administrator to specify settings for users. Settings commonly defined in a mandatory profile include (but aren't limited to) icons that appear on the desktop, desktop backgrounds, user preferences in Control Panel, printer selections, and more. Configuration changes made during a user's session that are normally saved to a roaming user profile aren't saved when a mandatory user profile is assigned. +A mandatory user profile is a roaming user profile that has been preconfigured by an administrator to specify settings for users. Settings commonly defined in a mandatory profile include (but aren't limited to) icons that appear on the desktop, desktop backgrounds, user preferences in Control Panel, printer selections, and more. Configuration changes made during a user's session that are normally saved to a roaming user profile aren't saved when a mandatory user profile is assigned. Mandatory user profiles are useful when standardization is important, such as on a kiosk device or in educational settings. Only system administrators can make changes to mandatory user profiles. @@ -118,12 +115,12 @@ In a domain, you modify properties for the user account to point to the mandator ### How to apply a mandatory user profile to users 1. Open **Active Directory Users and Computers** (dsa.msc). -1. Navigate to the user account that you'll assign the mandatory profile to. +1. Navigate to the user account that you want to assign the mandatory profile to. 1. Right-click the user name and open **Properties**. 1. On the **Profile** tab, in the **Profile path** field, enter the path to the shared folder without the extension. For example, if the folder name is `\\server\share\profile.v6`, you would enter `\\server\share\profile`. 1. Select **OK**. -It may take some time for this change to replicate to all domain controllers. +It can take some time for this change to replicate to all domain controllers. ## Apply policies to improve sign-in time diff --git a/windows/client-management/client-tools/quick-assist.md b/windows/client-management/client-tools/quick-assist.md index 397791e335..25a3039918 100644 --- a/windows/client-management/client-tools/quick-assist.md +++ b/windows/client-management/client-tools/quick-assist.md @@ -1,9 +1,8 @@ --- title: Use Quick Assist to help users description: Learn how IT Pros can use Quick Assist to help users. -ms.date: 05/09/2024 +ms.date: 07/01/2024 ms.topic: conceptual -ms.localizationpriority: medium ms.collection: - highpri - tier1 @@ -134,7 +133,7 @@ Quick Assist for macOS is available for interactions with Microsoft Support. If ## Disable Quick Assist within your organization -If your organization utilizes another remote support tool such as [Remote Help](https://www.microsoft.com/security/business/endpoint-management/microsoft-intune-remote-help), disable or remove Quick Assist as a best practice, if it isn't used within your environment. This prevents external users from using Quick Assist to gain access to devices within your organization. +If your organization utilizes another remote support tool such as [Remote Help](https://www.microsoft.com/security/business/endpoint-management/microsoft-intune-remote-help), disable or remove Quick Assist as a best practice, if it isn't used within your environment. This prevents guests from using Quick Assist to gain access to devices within your organization. ### Disable Quick Assist diff --git a/windows/client-management/client-tools/toc.yml b/windows/client-management/client-tools/toc.yml index 17b21a7926..9600b605e4 100644 --- a/windows/client-management/client-tools/toc.yml +++ b/windows/client-management/client-tools/toc.yml @@ -15,7 +15,7 @@ items: href: manage-settings-app-with-group-policy.md - name: Manage default media removal policy href: change-default-removal-policy-external-storage-media.md - - name: What version of Windows am I running - href: windows-version-search.md - name: Windows libraries href: windows-libraries.md + - name: What version of Windows am I running + href: windows-version-search.md \ No newline at end of file diff --git a/windows/client-management/client-tools/windows-libraries.md b/windows/client-management/client-tools/windows-libraries.md index 3486649f20..65a263719f 100644 --- a/windows/client-management/client-tools/windows-libraries.md +++ b/windows/client-management/client-tools/windows-libraries.md @@ -2,13 +2,15 @@ title: Windows Libraries description: All about Windows Libraries, which are containers for users' content, such as Documents and Pictures. ms.topic: conceptual -ms.date: 08/10/2023 +ms.date: 07/01/2024 --- # Windows libraries Libraries are virtual containers for users' content. A library can contain files and folders stored on the local computer or in a remote storage location. In Windows Explorer, users interact with libraries in ways similar to how they would interact with other folders. Libraries are built upon the legacy known folders (such as My Documents, My Pictures, and My Music) that users are familiar with, and these known folders are automatically included in the default libraries and set as the default save location. +To show libraries in File Explorer, go to **Options**, select the **View** tab, and then select **Show libraries**. + ## Features for Users Windows libraries provide full content search and rich metadata. Libraries offer the following advantages to users: diff --git a/windows/client-management/client-tools/windows-version-search.md b/windows/client-management/client-tools/windows-version-search.md index 2bb838cf72..2c34266131 100644 --- a/windows/client-management/client-tools/windows-version-search.md +++ b/windows/client-management/client-tools/windows-version-search.md @@ -1,7 +1,7 @@ --- title: What version of Windows am I running? description: Discover which version of Windows you're running to determine whether or not your device is enrolled in the Long-Term Servicing Channel or General Availability Channel. -ms.date: 08/10/2023 +ms.date: 07/01/2024 ms.topic: conceptual --- @@ -17,8 +17,6 @@ To determine if your device is enrolled in the Long-Term Servicing Channel or th Select **Start** > **Settings** > **System**, then select **About**. You then see **Edition**, **Version**, and **OS Build** information. -:::image type="content" source="images/systemcollage.png" alt-text="screenshot of the system properties window for a device running Windows 10."::: - ## Using Keyword Search You can type the following in the search bar and press **ENTER** to see version details for your device. From 2de75631ef221457783d7552a86261484ea6379c Mon Sep 17 00:00:00 2001 From: Meghan Stewart <33289333+mestew@users.noreply.github.com> Date: Mon, 1 Jul 2024 14:42:05 -0700 Subject: [PATCH 72/99] wufbds-9131668 --- .../deployment/update/deployment-service-prerequisites.md | 6 ++++-- 1 file changed, 4 insertions(+), 2 deletions(-) diff --git a/windows/deployment/update/deployment-service-prerequisites.md b/windows/deployment/update/deployment-service-prerequisites.md index 1f24cbfe24..d2b1131886 100644 --- a/windows/deployment/update/deployment-service-prerequisites.md +++ b/windows/deployment/update/deployment-service-prerequisites.md @@ -14,7 +14,7 @@ ms.localizationpriority: medium appliesto: - ✅ Windows 11 - ✅ Windows 10 -ms.date: 01/29/2024 +ms.date: 07/01/2024 --- # Windows Update for Business deployment service prerequisites @@ -26,7 +26,7 @@ Before you begin the process of deploying updates with Windows Update for Busine ## Azure and Microsoft Entra ID - An Azure subscription with [Microsoft Entra ID](/azure/active-directory/) -- Devices must be Microsoft Entra joined and meet the below OSrequirements. +- Devices must be Microsoft Entra joined and meet the below OS requirements. - Devices can be [Microsoft Entra joined](/azure/active-directory/devices/concept-azure-ad-join) or [Microsoft Entra hybrid joined](/azure/active-directory/devices/concept-azure-ad-join-hybrid). - Devices that are [Microsoft Entra registered](/azure/active-directory/devices/concept-azure-ad-register) only (Workplace joined) aren't supported with Windows Update for Business @@ -85,9 +85,11 @@ When you use [Windows Update for Business reports](wufb-reports-overview.md) in - Windows Update for Business deployment service endpoints - devicelistenerprod.microsoft.com + - devicelistenerprod.eudb.microsoft.com if in the [EU Data Boundary](/privacy/eudb/eu-data-boundary-learn) - login.windows.net - payloadprod*.blob.core.windows.net + - [Windows Push Notification Services](/windows/uwp/design/shell/tiles-and-notifications/firewall-allowlist-config): *(Recommended, but not required. Without this access, devices might not expedite updates until their next daily check for updates.)* - *.notify.windows.com From fe089e42452db999e64c7e6ba5b49590813101ed Mon Sep 17 00:00:00 2001 From: Meghan Stewart <33289333+mestew@users.noreply.github.com> Date: Mon, 1 Jul 2024 14:42:34 -0700 Subject: [PATCH 73/99] wufbds-9131668 --- windows/deployment/update/deployment-service-prerequisites.md | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/windows/deployment/update/deployment-service-prerequisites.md b/windows/deployment/update/deployment-service-prerequisites.md index d2b1131886..778dd2ca1c 100644 --- a/windows/deployment/update/deployment-service-prerequisites.md +++ b/windows/deployment/update/deployment-service-prerequisites.md @@ -85,7 +85,7 @@ When you use [Windows Update for Business reports](wufb-reports-overview.md) in - Windows Update for Business deployment service endpoints - devicelistenerprod.microsoft.com - - devicelistenerprod.eudb.microsoft.com if in the [EU Data Boundary](/privacy/eudb/eu-data-boundary-learn) + - devicelistenerprod.eudb.microsoft.com for the [EU Data Boundary](/privacy/eudb/eu-data-boundary-learn) - login.windows.net - payloadprod*.blob.core.windows.net From eea3af102883ffd1b656ff6a030f62281985af39 Mon Sep 17 00:00:00 2001 From: Aaron Czechowski Date: Mon, 1 Jul 2024 16:18:21 -0700 Subject: [PATCH 74/99] remove titleSuffix --- windows/whats-new/docfx.json | 5 ++--- 1 file changed, 2 insertions(+), 3 deletions(-) diff --git a/windows/whats-new/docfx.json b/windows/whats-new/docfx.json index 6abf313079..d51e184c00 100644 --- a/windows/whats-new/docfx.json +++ b/windows/whats-new/docfx.json @@ -49,12 +49,11 @@ "folder_relative_path_in_docset": "./" } }, - "titleSuffix": "What's new in Windows", "contributors_to_exclude": [ "dstrome2", - "rjagiewich", + "rjagiewich", "American-Dipper", - "claydetels19", + "claydetels19", "jborsecnik", "v-stchambers", "shdyas", From 8eadd278e534f41f6e0ec7de86366b6ae886ab6c Mon Sep 17 00:00:00 2001 From: Aaron Czechowski Date: Mon, 1 Jul 2024 16:23:47 -0700 Subject: [PATCH 75/99] combine ltsc and other updates --- ...lishing.redirection.windows-whats-new.json | 21 +++++--- windows/whats-new/TOC.yml | 17 +++++-- windows/whats-new/index.yml | 43 ++++++++++------ windows/whats-new/ltsc/TOC.yml | 13 ----- windows/whats-new/ltsc/index.yml | 49 ------------------- 5 files changed, 56 insertions(+), 87 deletions(-) delete mode 100644 windows/whats-new/ltsc/TOC.yml delete mode 100644 windows/whats-new/ltsc/index.yml diff --git a/.openpublishing.redirection.windows-whats-new.json b/.openpublishing.redirection.windows-whats-new.json index 9e05719ebc..28ef654c0a 100644 --- a/.openpublishing.redirection.windows-whats-new.json +++ b/.openpublishing.redirection.windows-whats-new.json @@ -159,11 +159,16 @@ "source_path":"windows/whats-new/whats-new-windows-10-version-20H2.md", "redirect_url":"/previous-versions/windows/it-pro/windows-10/whats-new/whats-new-windows-10-version-20H2", "redirect_document_id":false - }, - { - "source_path":"windows/whats-new/whats-new-windows-10-version-21H1.md", - "redirect_url":"/previous-versions/windows/it-pro/windows-10/whats-new/whats-new-windows-10-version-21H1", - "redirect_document_id":false - } - ] - } + }, + { + "source_path":"windows/whats-new/whats-new-windows-10-version-21H1.md", + "redirect_url":"/previous-versions/windows/it-pro/windows-10/whats-new/whats-new-windows-10-version-21H1", + "redirect_document_id":false + }, + { + "source_path":"windows/whats-new/ltsc/index.yml", + "redirect_url":"/windows/whats-new/", + "redirect_document_id":false + } + ] +} diff --git a/windows/whats-new/TOC.yml b/windows/whats-new/TOC.yml index 7ad2200658..408873ec0b 100644 --- a/windows/whats-new/TOC.yml +++ b/windows/whats-new/TOC.yml @@ -18,14 +18,25 @@ - name: What's new in Windows 11, version 22H2 href: whats-new-windows-11-version-22h2.md - name: Windows 10 - expanded: true + expanded: false items: - name: Extended Security Updates (ESU) program for Windows 10 href: extended-security-updates.md - name: What's new in Windows 10, version 22H2 href: whats-new-windows-10-version-22H2.md - - name: What's new in Windows 10, version 21H2 - href: whats-new-windows-10-version-21H2.md +- name: Windows 10 Enterprise LTSC + expanded: false + items: + - name: Windows 10 Enterprise LTSC overview + href: ltsc/overview.md + - name: What's new in Windows 10 Enterprise LTSC 2021 + href: ltsc/whats-new-windows-10-2021.md + - name: What's new in Windows 10 Enterprise LTSC 2019 + href: ltsc/whats-new-windows-10-2019.md + - name: What's new in Windows 10 Enterprise LTSC 2016 + href: ltsc/whats-new-windows-10-2016.md + - name: What's new in Windows 10 Enterprise LTSC 2015 + href: ltsc/whats-new-windows-10-2015.md - name: Windows commercial licensing overview href: windows-licensing.md - name: Deprecated and removed Windows features diff --git a/windows/whats-new/index.yml b/windows/whats-new/index.yml index 4bb62bd59c..911043127c 100644 --- a/windows/whats-new/index.yml +++ b/windows/whats-new/index.yml @@ -15,11 +15,13 @@ metadata: author: aczechowski ms.author: aaroncz manager: aaroncz - ms.date: 10/31/2023 + ms.date: 07/01/2024 localization_priority: medium landingContent: +# linkListType: architecture | concept | deploy | download | get-started | how-to-guide | tutorial | overview | quickstart | reference | sample | tutorial | video | whats-new + - title: Windows 11 planning linkLists: - linkListType: overview @@ -49,12 +51,35 @@ landingContent: - linkListType: whats-new links: - text: Extended Security Updates (ESU) program for Windows 10 - url: extended-security-updates.md + url: extended-security-updates.md - text: What's new in Windows 10, version 22H2 url: whats-new-windows-10-version-22h2.md - - text: What's new in Windows 10, version 21H2 - url: whats-new-windows-10-version-21h2.md + - title: Windows 10 Enterprise LTSC + linkLists: + - linkListType: whats-new + links: + - text: Windows 10 Enterprise LTSC overview + url: ltsc/overview.md + - text: What's new in Windows 10 Enterprise LTSC 2021 + url: ltsc/whats-new-windows-10-2021.md + - text: What's new in Windows 10 Enterprise LTSC 2019 + url: ltsc/whats-new-windows-10-2019.md + - text: What's new in Windows 10 Enterprise LTSC 2016 + url: ltsc/whats-new-windows-10-2016.md + - text: What's new in Windows 10 Enterprise LTSC 2015 + url: ltsc/whats-new-windows-10-2015.md + + - title: Deprecated features + linkLists: + - linkListType: reference + links: + - text: Windows features we're no longer developing + url: deprecated-features.md + - text: Features and functionality removed in Windows + url: removed-features.md + - text: Lifecycle terminology + url: feature-lifecycle.md#terminology - title: Learn more linkLists: @@ -64,15 +89,5 @@ landingContent: url: /windows/release-health/windows11-release-information - text: Windows release health dashboard url: /windows/release-health/ - - text: Windows 11 update history - url: https://support.microsoft.com/topic/windows-11-version-22h2-update-history-ec4229c3-9c5f-4e75-9d6d-9025ab70fcce - - text: Windows 10 update history - url: https://support.microsoft.com/topic/windows-10-update-history-857b8ccb-71e4-49e5-b3f6-7073197d98fb - - text: Windows features we're no longer developing - url: deprecated-features.md - - text: Features and functionality removed in Windows - url: removed-features.md - text: Compare Windows 11 Editions url: https://www.microsoft.com/windows/business/compare-windows-11 - - text: Windows 10 Enterprise LTSC - url: ltsc/overview.md diff --git a/windows/whats-new/ltsc/TOC.yml b/windows/whats-new/ltsc/TOC.yml deleted file mode 100644 index 3dede78331..0000000000 --- a/windows/whats-new/ltsc/TOC.yml +++ /dev/null @@ -1,13 +0,0 @@ -- name: Windows 10 Enterprise LTSC - href: index.yml - items: - - name: Windows 10 Enterprise LTSC overview - href: overview.md - - name: What's new in Windows 10 Enterprise LTSC 2021 - href: whats-new-windows-10-2021.md - - name: What's new in Windows 10 Enterprise LTSC 2019 - href: whats-new-windows-10-2019.md - - name: What's new in Windows 10 Enterprise LTSC 2016 - href: whats-new-windows-10-2016.md - - name: What's new in Windows 10 Enterprise LTSC 2015 - href: whats-new-windows-10-2015.md diff --git a/windows/whats-new/ltsc/index.yml b/windows/whats-new/ltsc/index.yml deleted file mode 100644 index 64c7cef9df..0000000000 --- a/windows/whats-new/ltsc/index.yml +++ /dev/null @@ -1,49 +0,0 @@ -### YamlMime:Landing - -title: What's new in Windows 10 Enterprise LTSC -summary: Find out about new features and capabilities in the latest release of Windows 10 Enterprise LTSC for IT professionals. - -metadata: - title: What's new in Windows 10 Enterprise LTSC - description: Find out about new features and capabilities in the latest release of Windows 10 Enterprise LTSC for IT professionals. - ms.service: windows-client - ms.subservice: itpro-fundamentals - ms.topic: landing-page - ms.collection: - - highpri - - tier1 - author: mestew - ms.author: mstewart - manager: aaroncz - ms.date: 12/18/2023 - localization_priority: medium - -landingContent: - - - title: Windows 10 Enterprise LTSC - linkLists: - - linkListType: overview - links: - - text: Windows 10 Enterprise LTSC overview - url: overview.md - - text: What's new in Windows 10 Enterprise LTSC 2021 - url: whats-new-windows-10-2021.md - - text: What's new in Windows 10 Enterprise LTSC 2019 - url: whats-new-windows-10-2019.md - - text: What's new in Windows 10 Enterprise LTSC 2016 - url: whats-new-windows-10-2016.md - - text: What's new in Windows 10 Enterprise LTSC 2015 - url: whats-new-windows-10-2015.md - - - title: Learn more - linkLists: - - linkListType: overview - links: - - text: Windows release health dashboard - url: /windows/release-health/ - - text: Windows 10 update history - url: https://support.microsoft.com/topic/windows-10-update-history-857b8ccb-71e4-49e5-b3f6-7073197d98fb - - text: Windows features we're no longer developing - url: ../deprecated-features.md - - text: Features and functionality removed in Windows - url: ../removed-features.md From 34f240bf3336be07b544ece0d5cb392cf390da34 Mon Sep 17 00:00:00 2001 From: Aaron Czechowski Date: Mon, 1 Jul 2024 16:37:54 -0700 Subject: [PATCH 76/99] archive win10 21h2 --- ...lishing.redirection.windows-whats-new.json | 5 ++ .../whats-new-windows-10-version-21H2.md | 77 ------------------- 2 files changed, 5 insertions(+), 77 deletions(-) delete mode 100644 windows/whats-new/whats-new-windows-10-version-21H2.md diff --git a/.openpublishing.redirection.windows-whats-new.json b/.openpublishing.redirection.windows-whats-new.json index 28ef654c0a..b72627e6c6 100644 --- a/.openpublishing.redirection.windows-whats-new.json +++ b/.openpublishing.redirection.windows-whats-new.json @@ -165,6 +165,11 @@ "redirect_url":"/previous-versions/windows/it-pro/windows-10/whats-new/whats-new-windows-10-version-21H1", "redirect_document_id":false }, + { + "source_path":"windows/whats-new/whats-new-windows-10-version-21H2.md", + "redirect_url":"/previous-versions/windows/it-pro/windows-10/whats-new/whats-new-windows-10-version-21H2", + "redirect_document_id":false + }, { "source_path":"windows/whats-new/ltsc/index.yml", "redirect_url":"/windows/whats-new/", diff --git a/windows/whats-new/whats-new-windows-10-version-21H2.md b/windows/whats-new/whats-new-windows-10-version-21H2.md deleted file mode 100644 index f23820ffe8..0000000000 --- a/windows/whats-new/whats-new-windows-10-version-21H2.md +++ /dev/null @@ -1,77 +0,0 @@ ---- -title: What's new in Windows 10, version 21H2 for IT pros -description: Learn more about what's new in Windows 10 version 21H2, including servicing updates, Windows Subsystem for Linux, the latest CSPs, and more. -manager: aaroncz -ms.service: windows-client -ms.author: mstewart -author: mestew -ms.localizationpriority: medium -ms.topic: conceptual -ms.collection: - - highpri - - tier2 -ms.subservice: itpro-fundamentals -ms.date: 12/31/2017 -appliesto: - - ✅ Windows 10, version 21H2 ---- - -# What's new in Windows 10, version 21H2 - -Windows 10, version 21H2 is the next feature update. This article lists the new and updated features IT Pros should know. Windows 10, version 21H2 is also known as the Windows 10 November 2021 Update. It includes all features and fixes in previous cumulative updates to Windows 10, version 21H1. - -Windows 10, version 21H2 is an [H2-targeted release](/lifecycle/faq/windows#what-is-the-servicing-timeline-for-a-version--feature-update--of-windows-10-), and has the following servicing schedule: - -- **Windows 10 Professional**: Serviced for 18 months from the release date. -- **Windows 10 Enterprise**: Serviced for 30 months from the release date. - -Windows 10, version 21H2 is available through Windows Server Update Services (including Configuration Manager), Windows Update for Business, and the Volume Licensing Service Center (VLSC). For more information, see [How to get the Windows 10 November 2021 Update](https://blogs.windows.com/windowsexperience/2021/11/16/how-to-get-the-windows-10-november-2021-update/) and [IT tools to support Windows 10, version 21H2 blog](https://aka.ms/tools-for-21h2). - -Devices running Windows 10, versions 2004, 20H2, and 21H1 can update quickly to version 21H2 using an enablement package. For more information, see [Feature Update through Windows 10, version 21H2 Enablement Package](https://support.microsoft.com/help/5003791). - -To learn more about the status of the November 2021 Update rollout, known issues, and new information, see [Windows release health](/windows/release-health/). - -## Updates and servicing - -Windows 10, version 21H2 feature updates are installed annually using the General Availability Channel. Previous feature updates were installed using the General Availability Channel. For more information on this change, see the [How to get the Windows 10 November 2021 Update](https://blogs.windows.com/windowsexperience/?p=176473). - -Quality updates are still installed monthly on the second Tuesday of the month. - -For more information, see: - -- [Feature and quality update definitions](/windows/deployment/update/waas-quick-start#definitions) -- [Windows servicing channels](/windows/deployment/update/waas-overview#servicing-channels) - -## GPU compute support for the Windows Subsystem for Linux - -Starting with Windows 10 version 21H2, the Windows Subsystem for Linux has full graphics processing unit (GPU) compute support. It was available to Windows Insiders, and is now available to everyone. The Linux binaries can use your Windows GPU, and run different workloads, including artificial intelligence (AI) and machine learning (ML) development workflows. - -For more information, and what GPU compute support means for you, see the [GPU accelerated ML training inside the Windows Subsystem for Linux blog post](https://blogs.windows.com/windowsdeveloper/2020/06/17/gpu-accelerated-ml-training-inside-the-windows-subsystem-for-linux/). - -## Get the latest CSPs - -The [KB5005101 September 1, 2021 update](https://support.microsoft.com/topic/september-1-2021-kb5005101-os-builds-19041-1202-19042-1202-and-19043-1202-preview-82a50f27-a56f-4212-96ce-1554e8058dc1) includes about 1400 CSPs that were made available to MDM providers. - -These CSPs are built in to Windows 10, version 21H2. These settings are available in Microsoft Intune in the [Settings Catalog](/mem/intune/configuration/settings-catalog). [Group Policy analytics](/mem/intune/configuration/group-policy-analytics) also includes these GPOs in its analysis. - -For more information on the CSPs, see the [Configuration service provider reference](/windows/client-management/mdm/configuration-service-provider-reference). - -## Apps appear local with Azure Virtual Desktop - -Azure virtual desktop is a Windows client OS hosted in the cloud, and runs virtual apps. You use the cloud to deliver virtual apps in real time, and as-needed. Users use the apps as if they're installed locally. - -You can create Azure virtual desktops that run Windows 10 version 21H2. - -For more information, see: - -- [What is Azure Virtual Desktop?](/azure/virtual-desktop/overview) -- [What's new in Azure Virtual Desktop?](/azure/virtual-desktop/whats-new) -- [Set up MSIX app attach with the Azure portal](/azure/virtual-desktop/app-attach-azure-portal) - -## Wi-Fi WPA3-Personal H2E support - -Wi-Fi WPA3-Personal H2E (Hash-to-Element) support is built in to Windows 10, version 21H2. - -## Related articles - -- [Release notes for Microsoft Edge Stable Channel](/deployedge/microsoft-edge-relnote-stable-channel) From f83238cbdc16a2d840d4fd2a95aeba150b9b648a Mon Sep 17 00:00:00 2001 From: Aaron Czechowski Date: Mon, 1 Jul 2024 17:48:12 -0700 Subject: [PATCH 77/99] remove direct links --- windows/deployment/update/waas-quick-start.md | 14 +++++++------- windows/deployment/update/waas-restart.md | 7 +++---- 2 files changed, 10 insertions(+), 11 deletions(-) diff --git a/windows/deployment/update/waas-quick-start.md b/windows/deployment/update/waas-quick-start.md index fce23e0310..adc84ef341 100644 --- a/windows/deployment/update/waas-quick-start.md +++ b/windows/deployment/update/waas-quick-start.md @@ -1,5 +1,5 @@ --- -title: Quick guide to Windows as a service (Windows 10) +title: Quick guide to Windows as a service description: In Windows 10, Microsoft has streamlined servicing to make operating system updates simpler to test, manage, and deploy. ms.service: windows-client ms.subservice: itpro-updates @@ -8,15 +8,15 @@ author: mestew ms.author: mstewart manager: aaroncz ms.localizationpriority: high -appliesto: +appliesto: - ✅ Windows 11 -- ✅ Windows 10 +- ✅ Windows 10 ms.date: 12/31/2017 --- # Quick guide to Windows as a service -Here's a quick guide to the most important concepts in Windows as a service. For more information, see the [extensive set of documentation](index.md). +Here's a quick guide to the most important concepts in Windows as a service. ## Definitions @@ -25,10 +25,10 @@ Some new terms have been introduced as part of Windows as a service, so you shou - **Feature updates** are released annually. As the name suggests, these updates add new features, delivered in bite-sized chunks compared to the previous practice of Windows releases every 3-5 years. - **Quality updates** deliver both security and nonsecurity fixes. They're typically released on the second Tuesday of each month, though they can be released at any time. Quality updates include security updates, critical updates, servicing stack updates, and driver updates. Quality updates are cumulative, so installing the latest quality update is sufficient to get all the available fixes for a specific Windows 10 feature update. The "servicing stack" is the code that installs other updates, so they're important to keep current. For more information, see [Servicing stack updates](servicing-stack-updates.md). - **Insider Preview** builds are made available during the development of the features that will be shipped in the next feature update, enabling organizations to validate new features and confirm compatibility with existing apps and infrastructure, providing feedback to Microsoft on any issues encountered. -- **Servicing channels** allow organizations to choose when to deploy new features. +- **Servicing channels** allow organizations to choose when to deploy new features. - The **General Availability Channel** receives feature updates annually. - The **Long-Term Servicing Channel**, which is meant only for specialized devices (which typically don't run Office) such as those that control medical equipment or ATMs, receives new feature releases every two to three years. -- **Deployment rings** are groups of devices used to initially pilot, and then to broadly deploy, each feature update in an organization. +- **Deployment rings** are groups of devices used to initially pilot, and then to broadly deploy, each feature update in an organization. For more information, see [Overview of Windows as a service](waas-overview.md). @@ -36,7 +36,7 @@ For some interesting in-depth information about how cumulative updates work, see ## Key concepts -With each release in the General Availability Channel, we recommend beginning deployment right away to devices selected for early adoption (targeted validation) and ramp up to full deployment at your discretion. +With each release in the General Availability Channel, we recommend beginning deployment right away to devices selected for early adoption (targeted validation) and ramp up to full deployment at your discretion. Windows Enterprise LTSC versions are separate **Long-Term Servicing Channel** versions. Each release is supported for a total of 10 years (five years standard support, five years extended support). New releases are expected about every three years. diff --git a/windows/deployment/update/waas-restart.md b/windows/deployment/update/waas-restart.md index 0170408476..9d859d31c3 100644 --- a/windows/deployment/update/waas-restart.md +++ b/windows/deployment/update/waas-restart.md @@ -11,7 +11,7 @@ ms.collection: - highpri - tier2 ms.localizationpriority: medium -appliesto: +appliesto: - ✅ Windows 11 - ✅ Windows 10 ms.date: 10/10/2023 @@ -43,7 +43,7 @@ When **Configure Automatic Updates** is enabled in Group Policy, you can also en - **No auto-restart with logged on users for scheduled automatic updates installations** prevents automatic restart when a user is signed in. If a user schedules the restart in the update notification, the device restarts at the time the user specifies even if a user is signed in at the time. This policy only applies when **Configure Automatic Updates** is set to option **4-Auto download and schedule the install**. > [!NOTE] -> When using Remote Desktop Protocol connections, only active RDP sessions are considered as logged on users. Devices that do not have locally logged on users, or active RDP sessions, will be restarted. +> When using Remote Desktop Protocol connections, only active RDP sessions are considered as logged on users. Devices that do not have locally logged on users, or active RDP sessions, will be restarted. You can also use Registry, to prevent automatic restarts when a user is signed in. Under **HKLM\Software\Policies\Microsoft\Windows\WindowsUpdate\AU**, set **AuOptions** to **4** and enable **NoAutoRebootWithLoggedOnUsers**. As with Group Policy, if a user schedules the restart in the update notification, it overrides this setting. @@ -113,7 +113,7 @@ Starting in Windows 10 version 1809, you can define which Windows Update notific To configure this behavior through MDM, use [**Update/UpdateNotificationLevel**](/windows/client-management/mdm/policy-configuration-service-provider#update-updatenotificationlevel). -Starting in Windows 11, version 22H2, **Apply only during active hours** was added as an additional option for **Display options for update notifications**. When **Apply only during active hours** is selected, the notifications will only be disabled during active hours when options `1` or `2` are used. To ensure that the device stays updated, a notification will still be shown during active hours if **Apply only during active hours** is selected, and once a deadline has been reached when [Specify deadlines for automatic updates and restarts](wufb-compliancedeadlines.md) is configured. +Starting in Windows 11, version 22H2, **Apply only during active hours** was added as an additional option for **Display options for update notifications**. When **Apply only during active hours** is selected, the notifications will only be disabled during active hours when options `1` or `2` are used. To ensure that the device stays updated, a notification will still be shown during active hours if **Apply only during active hours** is selected, and once a deadline has been reached when [Specify deadlines for automatic updates and restarts](wufb-compliancedeadlines.md) is configured. To configure this behavior through MDM, use [**Update/UpdateNotificationLevel**](/windows/client-management/mdm/policy-csp-update#update-NoUpdateNotificationDuringActiveHours). @@ -209,7 +209,6 @@ There are three different registry combinations for controlling restart behavior ## More resources -- [Update Windows in the enterprise](index.md) - [Overview of Windows as a service](waas-overview.md) - [Configure Delivery Optimization for Windows updates](../do/waas-delivery-optimization.md) - [Configure BranchCache for Windows updates](waas-branchcache.md) From 424ab7e8c21a14f3c36c31f1564ca6d28251a7b8 Mon Sep 17 00:00:00 2001 From: Pawel Lakomski <34425146+pawellakomski@users.noreply.github.com> Date: Thu, 4 Jul 2024 10:49:44 +0200 Subject: [PATCH 78/99] Update windows-subscription-activation.md Incorrectly set comment was visible in the website. --- windows/deployment/windows-subscription-activation.md | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/windows/deployment/windows-subscription-activation.md b/windows/deployment/windows-subscription-activation.md index 539f012a42..034308a993 100644 --- a/windows/deployment/windows-subscription-activation.md +++ b/windows/deployment/windows-subscription-activation.md @@ -135,7 +135,7 @@ With Windows Enterprise or Education editions, an organization can benefit from To compare Windows editions and review pricing, see the following sites: -- [Compare Windows editions](https://www.microsoft.com/en-us/windows/business/windows-10-pro-vs-windows-11-pro) - [Enterprise Mobility + Security Pricing Options](https://www.microsoft.com/microsoft-365/enterprise-mobility-security/compare-plans-and-pricing) Benefits of moving to Windows as an online service include: From 5e3e82391249d2aba3fd3edfbebe0d8e13c63cce Mon Sep 17 00:00:00 2001 From: Paolo Matarazzo <74918781+paolomatarazzo@users.noreply.github.com> Date: Mon, 8 Jul 2024 09:47:42 -0400 Subject: [PATCH 79/99] WHFB Azure MFA updates --- .../deploy/hybrid-cert-trust-enroll.md | 2 +- .../deploy/hybrid-cert-trust.md | 8 +++--- .../deploy/hybrid-cloud-kerberos-trust.md | 2 +- .../deploy/hybrid-key-trust-enroll.md | 4 +-- .../hello-for-business/deploy/index.md | 13 +++++++--- .../deploy/on-premises-cert-trust-enroll.md | 2 +- .../deploy/on-premises-key-trust-enroll.md | 2 +- .../hello-for-business/faq.yml | 6 ++--- .../hello-deployment-issues.md | 4 +-- .../hello-errors-during-pin-creation.md | 4 +-- .../hello-hybrid-aadj-sso-cert.md | 4 +-- .../hello-for-business/pin-reset.md | 26 ++++++++++++------- .../hello-for-business/webauthn-apis.md | 25 +++++++++++++----- 13 files changed, 62 insertions(+), 40 deletions(-) diff --git a/windows/security/identity-protection/hello-for-business/deploy/hybrid-cert-trust-enroll.md b/windows/security/identity-protection/hello-for-business/deploy/hybrid-cert-trust-enroll.md index 50ff10820c..046cff4a4d 100644 --- a/windows/security/identity-protection/hello-for-business/deploy/hybrid-cert-trust-enroll.md +++ b/windows/security/identity-protection/hello-for-business/deploy/hybrid-cert-trust-enroll.md @@ -135,6 +135,6 @@ To better understand the authentication flows, review the following sequence dia -[AZ-4]: /azure/active-directory/devices/troubleshoot-device-dsregcmd +[AZ-4]: /entra/identity/devices/troubleshoot-device-dsregcmd [CSP-1]: /windows/client-management/mdm/passportforwork-csp [MEM-1]: /mem/intune/configuration/custom-settings-configure diff --git a/windows/security/identity-protection/hello-for-business/deploy/hybrid-cert-trust.md b/windows/security/identity-protection/hello-for-business/deploy/hybrid-cert-trust.md index bbb9a72759..8b2347f411 100644 --- a/windows/security/identity-protection/hello-for-business/deploy/hybrid-cert-trust.md +++ b/windows/security/identity-protection/hello-for-business/deploy/hybrid-cert-trust.md @@ -34,7 +34,7 @@ ms.topic: tutorial ## Federated authentication to Microsoft Entra ID -Windows Hello for Business hybrid certificate trust requires Active Directory to be federated with Microsoft Entra ID using AD FS. You must also configure the AD FS farm to support Azure registered devices. +Windows Hello for Business hybrid certificate trust requires Active Directory to be federated with Microsoft Entra ID using AD FS. You must also configure the AD FS farm to support Microsoft Entra registered devices. If you're new to AD FS and federation services: @@ -82,9 +82,9 @@ During Windows Hello for Business provisioning, users receive a sign-in certific > [Next: configure and validate the Public Key Infrastructure >](hybrid-cert-trust-pki.md) -[AZ-8]: /azure/active-directory/devices/hybrid-azuread-join-plan -[AZ-10]: /azure/active-directory/devices/howto-hybrid-azure-ad-join#federated-domains -[AZ-11]: /azure/active-directory/devices/hybrid-azuread-join-manual +[AZ-8]: /entra/identity/devices/hybrid-join-plan +[AZ-10]: /entra/identity/devices/how-to-hybrid-join#federated-domains +[AZ-11]: /entra/identity/devices/hybrid-join-manual [SER-2]: /windows-server/identity/ad-fs/deployment/deploying-a-federation-server-farm [SER-3]: /windows-server/identity/ad-fs/technical-reference/understanding-key-ad-fs-concepts diff --git a/windows/security/identity-protection/hello-for-business/deploy/hybrid-cloud-kerberos-trust.md b/windows/security/identity-protection/hello-for-business/deploy/hybrid-cloud-kerberos-trust.md index 9af88ba3bf..136b0f615d 100644 --- a/windows/security/identity-protection/hello-for-business/deploy/hybrid-cloud-kerberos-trust.md +++ b/windows/security/identity-protection/hello-for-business/deploy/hybrid-cloud-kerberos-trust.md @@ -202,7 +202,7 @@ The following scenarios aren't supported using Windows Hello for Business cloud -[AZ-4]: /azure/active-directory/devices/troubleshoot-device-dsregcmd +[AZ-4]: /entra/identity/devices/troubleshoot-device-dsregcmd [CSP-1]: /windows/client-management/mdm/passportforwork-csp [ENTRA-1]: /entra/identity/authentication/howto-authentication-passwordless-security-key-on-premises#install-the-azureadhybridauthenticationmanagement-module [MEM-1]: /mem/intune/configuration/custom-settings-configure diff --git a/windows/security/identity-protection/hello-for-business/deploy/hybrid-key-trust-enroll.md b/windows/security/identity-protection/hello-for-business/deploy/hybrid-key-trust-enroll.md index 62f5d4401e..de3ffd9240 100644 --- a/windows/security/identity-protection/hello-for-business/deploy/hybrid-key-trust-enroll.md +++ b/windows/security/identity-protection/hello-for-business/deploy/hybrid-key-trust-enroll.md @@ -108,7 +108,7 @@ To better understand the authentication flows, review the following sequence dia - [Microsoft Entra join authentication to Active Directory using a key](../how-it-works-authentication.md#microsoft-entra-join-authentication-to-active-directory-using-a-key) -[AZ-4]: /azure/active-directory/devices/troubleshoot-device-dsregcmd -[AZ-5]: /azure/active-directory/connect/active-directory-aadconnectsync-feature-scheduler +[AZ-4]: /entra/identity/devices/troubleshoot-device-dsregcmd +[AZ-5]: /entra/identity/hybrid/connect/how-to-connect-sync-feature-scheduler [CSP-1]: /windows/client-management/mdm/passportforwork-csp [MEM-1]: /mem/intune/configuration/custom-settings-configure diff --git a/windows/security/identity-protection/hello-for-business/deploy/index.md b/windows/security/identity-protection/hello-for-business/deploy/index.md index f5c412fc4f..176e016833 100644 --- a/windows/security/identity-protection/hello-for-business/deploy/index.md +++ b/windows/security/identity-protection/hello-for-business/deploy/index.md @@ -146,7 +146,9 @@ The goal of Windows Hello for Business is to move organizations away from passwo - On-premises deployments must use a multifactor option that can integrate as an AD FS multifactor adapter. Organizations can choose from non-Microsoft options that offer an AD FS MFA adapter. For more information, see [Microsoft and non-Microsoft additional authentication methods][SER-2] > [!IMPORTANT] -> As of July 1, 2019, Microsoft doesn't offer MFA Server for new deployments. New deployments that require multifactor authentication should use cloud-based Microsoft Entra multifactor authentication. Existing deployment where the MFA Server was activated prior to July 1, 2019 can download the latest version, future updates, and generate activation credentials. For more information, see [Getting started with the Azure Multi-Factor Authentication Server][ENTRA-2]. +> Beginning July 1, 2019, Microsoft doesn't offer MFA Server for new deployments. New deployments that require multifactor authentication should use cloud-based Microsoft Entra multifactor authentication. +> +>Beginning September 30, 2024, Azure Multi-Factor Authentication Server deployments will no longer service MFA requests. To ensure uninterrupted authentication services and to remain in a supported state, organizations should [migrate their users' authentication data](/entra/identity/authentication/how-to-migrate-mfa-server-to-mfa-user-authentication) to the cloud-based Azure MFA. || Deployment model | MFA options | |--|--|--| @@ -159,7 +161,6 @@ The goal of Windows Hello for Business is to move organizations away from passwo For more information: - [Configure Microsoft Entra multifactor authentication settings][ENTRA-4] -- [Configure Azure MFA as authentication provider with AD FS][SER-1] - [Manage an external authentication method in Microsoft Entra ID][ENTRA-11] #### MFA and federated authentication @@ -205,6 +206,9 @@ Hybrid and on-premises deployments use directory synchronization, however, each | **Hybrid** | Microsoft Entra Connect Sync| | **On-premises** | Azure MFA server | +> [!IMPORTANT] +>Beginning September 30, 2024, Azure Multi-Factor Authentication Server deployments will no longer service MFA requests. To ensure uninterrupted authentication services and to remain in a supported state, organizations should [migrate their users' authentication data](/entra/identity/authentication/how-to-migrate-mfa-server-to-mfa-user-authentication) to the cloud-based Azure MFA. + ## Device configuration options Windows Hello for Business provides a rich set of granular policy settings. There are two main options to configure Windows Hello for Business: configuration service provider (CSP) and group policy (GPO). @@ -240,6 +244,9 @@ Here are some considerations regarding licensing requirements for cloud services | **🔲** | **On-premises** | Key | Azure MFA, if used as MFA solution | | **🔲** | **On-premises** | Certificate | Azure MFA, if used as MFA solution | +> [!IMPORTANT] +>Beginning September 30, 2024, Azure Multi-Factor Authentication Server deployments will no longer service MFA requests. To ensure uninterrupted authentication services and to remain in a supported state, organizations should [migrate their users' authentication data](/entra/identity/authentication/how-to-migrate-mfa-server-to-mfa-user-authentication) to the cloud-based Azure MFA. + ## Operating System requirements ### Windows requirements @@ -291,7 +298,6 @@ Now that you've read about the different deployment options and requirements, yo [ENTRA-1]: /entra/identity/authentication/concept-mfa-howitworks -[ENTRA-2]: /entra/identity/authentication/howto-mfaserver-deploy [ENTRA-3]: /entra/identity/hybrid/connect/how-to-connect-sync-whatis [ENTRA-4]: /entra/identity/authentication/howto-mfa-mfasettings [ENTRA-5]: /entra/identity/devices/hybrid-join-plan @@ -302,7 +308,6 @@ Now that you've read about the different deployment options and requirements, yo [ENTRA-10]: /entra/identity/hybrid/connect/whatis-fed [ENTRA-11]: /entra/identity/authentication/how-to-authentication-external-method-manage -[SER-1]: /windows-server/identity/ad-fs/operations/configure-ad-fs-2016-and-azure-mfa [SER-2]: /windows-server/identity/ad-fs/operations/configure-additional-authentication-methods-for-ad-fs#microsoft-and-third-party-additional-authentication-methods [KB-1]: https://support.microsoft.com/topic/5010415 diff --git a/windows/security/identity-protection/hello-for-business/deploy/on-premises-cert-trust-enroll.md b/windows/security/identity-protection/hello-for-business/deploy/on-premises-cert-trust-enroll.md index ce1d4a781d..8c1de9a2d0 100644 --- a/windows/security/identity-protection/hello-for-business/deploy/on-premises-cert-trust-enroll.md +++ b/windows/security/identity-protection/hello-for-business/deploy/on-premises-cert-trust-enroll.md @@ -86,4 +86,4 @@ To better understand the provisioning flows, review the following sequence diagr - [Provisioning in an on-premises certificate trust deployment model](../how-it-works-provisioning.md#provisioning-in-an-on-premises-certificate-trust-deployment-model) -[AZ-4]: /azure/active-directory/devices/troubleshoot-device-dsregcmd +[AZ-4]: /entra/identity/devices/troubleshoot-device-dsregcmd diff --git a/windows/security/identity-protection/hello-for-business/deploy/on-premises-key-trust-enroll.md b/windows/security/identity-protection/hello-for-business/deploy/on-premises-key-trust-enroll.md index 85c263917f..41cea6946f 100644 --- a/windows/security/identity-protection/hello-for-business/deploy/on-premises-key-trust-enroll.md +++ b/windows/security/identity-protection/hello-for-business/deploy/on-premises-key-trust-enroll.md @@ -62,4 +62,4 @@ To better understand the provisioning flows, review the following sequence diagr - [Provisioning in an on-premises key trust deployment model](../how-it-works-provisioning.md#provisioning-in-an-on-premises-key-trust-deployment-model) -[AZ-4]: /azure/active-directory/devices/troubleshoot-device-dsregcmd +[AZ-4]: /entra/identity/devices/troubleshoot-device-dsregcmd diff --git a/windows/security/identity-protection/hello-for-business/faq.yml b/windows/security/identity-protection/hello-for-business/faq.yml index 217320345b..98723b63f6 100644 --- a/windows/security/identity-protection/hello-for-business/faq.yml +++ b/windows/security/identity-protection/hello-for-business/faq.yml @@ -150,7 +150,7 @@ sections: It's possible to Microsoft Entra register a domain joined device. If the domain joined device has a convenience PIN, sign in with the convenience PIN will no longer work. This configuration isn't supported by Windows Hello for Business. - For more information, see [Microsoft Entra registered devices](/azure/active-directory/devices/concept-azure-ad-register). + For more information, see [Microsoft Entra registered devices](/entra/identity/devices/concept-device-registration). - question: Does Windows Hello for Business work with non-Windows operating systems? answer: | Windows Hello for Business is a feature of the Windows platform. @@ -162,7 +162,7 @@ sections: Windows Hello for Business is two-factor authentication based on the observed authentication factors of: *something you have*, *something you know*, and *something that's part of you*. Windows Hello for Business incorporates two of these factors: something you have (the user's private key protected by the device's security module) and something you know (your PIN). With the proper hardware, you can enhance the user experience by introducing biometrics. By using biometrics, you can replace the "something you know" authentication factor with the "something that is part of you" factor, with the assurances that users can fall back to the "something you know factor". > [!NOTE] - > The Windows Hello for Business key meets Microsoft Entra multifactor authentication (MFA) requirements and reduces the number of MFA prompts users will see when accessing resources. For more information, see [What is a Primary Refresh Token](/azure/active-directory/devices/concept-primary-refresh-token#when-does-a-prt-get-an-mfa-claim). + > The Windows Hello for Business key meets Microsoft Entra multifactor authentication (MFA) requirements and reduces the number of MFA prompts users will see when accessing resources. For more information, see [What is a Primary Refresh Token](/entra/identity/devices/concept-primary-refresh-token#when-does-a-prt-get-an-mfa-claim). - question: Which is a better or more secure for of authentication, key or certificate? answer: | Both types of authentication provide the same security; one is not more secure than the other. @@ -203,7 +203,7 @@ sections: questions: - question: What is Windows Hello for Business cloud Kerberos trust? answer: | - Windows Hello for Business *cloud Kerberos trust* is a *trust model* that enables Windows Hello for Business deployment using the infrastructure introduced for supporting [security key sign-in on Microsoft Entra hybrid joined devices and on-premises resource access on Microsoft Entra joined devices](/azure/active-directory/authentication/howto-authentication-passwordless-security-key-on-premises). Cloud Kerberos trust is the preferred deployment model if you do not need to support certificate authentication scenarios. For more information, see [cloud Kerberos trust deployment](/windows/security/identity-protection/hello-for-business/deploy). + Windows Hello for Business *cloud Kerberos trust* is a *trust model* that enables Windows Hello for Business deployment using the infrastructure introduced for supporting [security key sign-in on Microsoft Entra hybrid joined devices and on-premises resource access on Microsoft Entra joined devices](/entra/identity/authentication/howto-authentication-passwordless-security-key-on-premises). Cloud Kerberos trust is the preferred deployment model if you do not need to support certificate authentication scenarios. For more information, see [cloud Kerberos trust deployment](/windows/security/identity-protection/hello-for-business/deploy). - question: Does Windows Hello for Business cloud Kerberos trust work in my on-premises environment? answer: | This feature doesn't work in a pure on-premises AD domain services environment. diff --git a/windows/security/identity-protection/hello-for-business/hello-deployment-issues.md b/windows/security/identity-protection/hello-for-business/hello-deployment-issues.md index 4f77b96763..e6b79420ad 100644 --- a/windows/security/identity-protection/hello-for-business/hello-deployment-issues.md +++ b/windows/security/identity-protection/hello-for-business/hello-deployment-issues.md @@ -15,7 +15,7 @@ PIN reset on Microsoft Entra joined devices uses a flow called *web sign-in* to ### Identify PIN Reset allowed domains issue -The user can launch the PIN reset flow from the lock screen using the *I forgot my PIN* link in the PIN credential provider. Selecting the link launches a full screen UI for the PIN experience on Microsoft Entra join devices. Typically, the UI displays an Azure authentication page, where the user authenticates using Microsoft Entra credentials and completes MFA. +The user can launch the PIN reset flow from the lock screen using the *I forgot my PIN* link in the PIN credential provider. Selecting the link launches a full screen UI for the PIN experience on Microsoft Entra join devices. Typically, the UI displays an authentication page, where the user authenticates using Microsoft Entra credentials and completes MFA. In federated environments, authentication may be configured to route to AD FS or a non-Microsoft identity provider. If the PIN reset flow is launched and attempts to navigate to a federated identity provider server page, it fails and displays the *We can't open that page right now* error, if the domain for the server page isn't included in an allowlist. @@ -23,7 +23,7 @@ If you're a customer of *Azure US Government* cloud, PIN reset also attempts to ### Resolve PIN Reset allowed domains issue -To resolve the error, you can configure a list of allowed domains for PIN reset using the [ConfigureWebSignInAllowedUrls](/windows/client-management/mdm/policy-csp-authentication#authentication-configurewebsigninallowedurls) policy. For information on how to configure the policy, see [Configure allowed URLs for federated identity providers on Microsoft Entra joined devices](hello-feature-pin-reset.md#configure-allowed-urls-for-federated-identity-providers-on-azure-ad-joined-devices). +To resolve the error, you can configure a list of allowed domains for PIN reset using the [ConfigureWebSignInAllowedUrls](/windows/client-management/mdm/policy-csp-authentication#authentication-configurewebsigninallowedurls) policy. For information on how to configure the policy, see [Configure allowed URLs for federated identity providers on Microsoft Entra joined devices](hello-feature-pin-reset.md#configure-allowed-urls-for-federated-identity-providers-on-microsoft-entra-joined-devices). ## Hybrid key trust sign in broken due to user public key deletion diff --git a/windows/security/identity-protection/hello-for-business/hello-errors-during-pin-creation.md b/windows/security/identity-protection/hello-for-business/hello-errors-during-pin-creation.md index cfe9d5519f..0e89afb281 100644 --- a/windows/security/identity-protection/hello-for-business/hello-errors-during-pin-creation.md +++ b/windows/security/identity-protection/hello-for-business/hello-errors-during-pin-creation.md @@ -40,7 +40,7 @@ If the error occurs again, check the error code against the following table to s | 0x80090035 | Policy requires TPM and the device doesn't have TPM. | Change the Windows Hello for Business policy to not require a TPM. | | 0x80090036 | User canceled an interactive dialog. | User is asked to try again. | | 0x801C0003 | User isn't authorized to enroll. | Check if the user has permission to perform the operation​. | -| 0x801C000E | Registration quota reached. | Unjoin some other device that is currently joined using the same account or [increase the maximum number of devices per user](/azure/active-directory/devices/device-management-azure-portal). | +| 0x801C000E | Registration quota reached. | Unjoin some other device that is currently joined using the same account or [increase the maximum number of devices per user](/entra/identity/devices/manage-device-identities). | | 0x801C000F | Operation successful, but the device requires a reboot. | Reboot the device. | | 0x801C0010 | The AIK certificate isn't valid or trusted. | Sign out and then sign in again. | | 0x801C0011 | The attestation statement of the transport key is invalid. | Sign out and then sign in again. | @@ -53,7 +53,7 @@ If the error occurs again, check the error code against the following table to s | 0x801C03EA | Server failed to authorize user or device. | Check if the token is valid and user has permission to register Windows Hello for Business keys. | | 0x801C03EB | Server response http status isn't valid | Sign out and then sign in again. | | 0x801C03EC | Unhandled exception from server. | sign out and then sign in again. | -| 0x801C03ED | Multi-factor authentication is required for a 'ProvisionKey' operation, but wasn't performed.

    -or-

    Token wasn't found in the Authorization header.

    -or-

    Failed to read one or more objects.

    -or-

    The request sent to the server was invalid.

    -or-

    User doesn't have permissions to join to Microsoft Entra ID. | Sign out and then sign in again. If that doesn't resolve the issue, unjoin the device from Azure AD and rejoin.
    Allow user(s) to join to Microsoft Entra ID under Microsoft Entra Device settings. | +| 0x801C03ED | Multi-factor authentication is required for a 'ProvisionKey' operation, but wasn't performed.

    -or-

    Token wasn't found in the Authorization header.

    -or-

    Failed to read one or more objects.

    -or-

    The request sent to the server was invalid.

    -or-

    User doesn't have permissions to join to Microsoft Entra ID. | Sign out and then sign in again. If that doesn't resolve the issue, unjoin the device from Mcirosoft Entra ID and rejoin.
    Allow user(s) to join to Microsoft Entra ID under Microsoft Entra Device settings. | | 0x801C03EE | Attestation failed. | Sign out and then sign in again. | | 0x801C03EF | The AIK certificate is no longer valid. | Sign out and then sign in again. | | 0x801C03F2 | Windows Hello key registration failed. | ERROR_BAD_DIRECTORY_REQUEST. Another object with the same value for property proxyAddresses already exists. To resolve the issue, refer to [Duplicate Attributes Prevent Dirsync](/office365/troubleshoot/administration/duplicate-attributes-prevent-dirsync). Also, if no sync conflict exists, please verify that the "Mail/Email address" in Microsoft Entra ID and the Primary SMTP address are the same in the proxy address. | diff --git a/windows/security/identity-protection/hello-for-business/hello-hybrid-aadj-sso-cert.md b/windows/security/identity-protection/hello-for-business/hello-hybrid-aadj-sso-cert.md index 558d15b2f9..3d2908e78a 100644 --- a/windows/security/identity-protection/hello-for-business/hello-hybrid-aadj-sso-cert.md +++ b/windows/security/identity-protection/hello-for-business/hello-hybrid-aadj-sso-cert.md @@ -71,7 +71,7 @@ Sign-in to computer running Microsoft Entra Connect with access equivalent to *l The easiest way to verify that the onPremisesDistingushedNamne attribute is synchronized is to use the Graph Explorer for Microsoft Graph. 1. Open a web browser and navigate to [Graph Explorer](https://developer.microsoft.com/graph/graph-explorer) -1. Select **Sign in to Graph Explorer** and provide Azure credentials +1. Select **Sign in to Graph Explorer** and provide Microsoft Entra ID credentials > [!NOTE] > To successfully query the Graph API, adequate [permissions](/graph/api/user-get?) must be granted @@ -487,7 +487,7 @@ Certificate enrollment for Microsoft Entra joined devices occurs over the Intern Ideally, you configure your Microsoft Intune SCEP certificate profile to use multiple external NDES URLs. This enables Microsoft Intune to round-robin load balance the certificate requests to identically configured NDES Servers (each NDES server can accommodate approximately 300 concurrent requests). Microsoft Intune sends these requests to Microsoft Entra Application Proxies. -Microsoft Entra Application proxies are serviced by lightweight Application Proxy Connector agents. See [What is Application Proxy](/azure/active-directory/manage-apps/application-proxy#what-is-application-proxy) for more details. These agents are installed on your on-premises, domain joined devices and make authenticated secure outbound connection to Azure, waiting to process requests from Microsoft Entra Application Proxies. You can create connector groups in Microsoft Entra ID to assign specific connectors to service specific applications. +Microsoft Entra Application proxies are serviced by lightweight Application Proxy Connector agents. See [What is Application Proxy](/entra/identity/app-proxy/#what-is-application-proxy) for more details. These agents are installed on your on-premises, domain joined devices and make authenticated secure outbound connection to Azure, waiting to process requests from Microsoft Entra Application Proxies. You can create connector groups in Microsoft Entra ID to assign specific connectors to service specific applications. Connector group automatically round-robin, load balance the Microsoft Entra application proxy requests to the connectors within the assigned connector group. This ensures Windows Hello for Business certificate requests have multiple dedicated Microsoft Entra application proxy connectors exclusively available to satisfy enrollment requests. Load balancing the NDES servers and connectors should ensure users enroll their Windows Hello for Business certificates in a timely manner. diff --git a/windows/security/identity-protection/hello-for-business/pin-reset.md b/windows/security/identity-protection/hello-for-business/pin-reset.md index 816f46365d..aabf1fc5f2 100644 --- a/windows/security/identity-protection/hello-for-business/pin-reset.md +++ b/windows/security/identity-protection/hello-for-business/pin-reset.md @@ -49,7 +49,7 @@ To register the applications, follow these steps: :::row::: :::column span="3"::: - 1. Go to the [Microsoft PIN Reset Service Production website][APP-1], and sign in as at least an [Application Administrator](/entra/identity/role-based-access-control/permissions-reference#application-administrator). Review the permissions requested by the *Microsoft Pin Reset Service Production* application and select **Accept** to give consent to the application to access your organization + 1. Go to the [Microsoft PIN Reset Service Production website][APP-1], and sign in as at least an [Application Administrator][ENT-2]. Review the permissions requested by the *Microsoft Pin Reset Service Production* application and select **Accept** to give consent to the application to access your organization :::column-end::: :::column span="1"::: :::image type="content" alt-text="Screenshot showing the PIN reset service permissions page." source="images/pin-reset/pin-reset-service-prompt.png" lightbox="images/pin-reset/pin-reset-service-prompt.png" border="true"::: @@ -57,7 +57,7 @@ To register the applications, follow these steps: :::row-end::: :::row::: :::column span="3"::: - 2. Go to the [Microsoft PIN Reset Client Production website][APP-2], and sign as at least an [Application Administrator](/entra/identity/role-based-access-control/permissions-reference#application-administrator). Review the permissions requested by the *Microsoft Pin Reset Client Production* application, and select **Next**. + 2. Go to the [Microsoft PIN Reset Client Production website][APP-2], and sign as at least an [Application Administrator][ENT-2]. Review the permissions requested by the *Microsoft Pin Reset Client Production* application, and select **Next**. :::column-end::: :::column span="1"::: :::image type="content" alt-text="Screenshot showing the PIN reset client permissions page." source="images/pin-reset/pin-reset-client-prompt.png" lightbox="images/pin-reset/pin-reset-client-prompt.png" border="true"::: @@ -76,7 +76,7 @@ To register the applications, follow these steps: ### Confirm that the two PIN Reset service principals are registered in your tenant -1. Sign in to the [Microsoft Entra Manager admin center](https://entra.microsoft.com) +1. Sign in to the [Microsoft Entra Manager admin center][ENTRA] 1. Select **Microsoft Entra ID > Applications > Enterprise applications** 1. Search by application name "Microsoft PIN" and verify that both **Microsoft Pin Reset Service Production** and **Microsoft Pin Reset Client Production** are in the list :::image type="content" alt-text="PIN reset service permissions page." source="images/pin-reset/pin-reset-applications.png" lightbox="images/pin-reset/pin-reset-applications-expanded.png"::: @@ -103,7 +103,7 @@ The following instructions provide details how to configure your devices. Select >[!NOTE] > You can also configure PIN recovery from the **Endpoint security** blade: > -> 1. Sign in to the [Microsoft Intune admin center](https://go.microsoft.com/fwlink/?linkid=2109431) +> 1. Sign in to the [Microsoft Intune admin center][INTUNE] > 1. Select **Endpoint security > Account protection > Create Policy** Alternatively, you can configure devices using a [custom policy][INT-1] with the [PassportForWork CSP][CSP-1]. @@ -113,7 +113,7 @@ Alternatively, you can configure devices using a [custom policy][INT-1] with the | `./Vendor/MSFT/Policy/PassportForWork/`*TenantId*`/Policies/EnablePinRecovery`| Boolean | True | >[!NOTE] -> You must replace `TenantId` with the identifier of your Microsoft Entra tenant. To look up your Tenant ID, see [How to find your Microsoft Entra tenant ID](/azure/active-directory/fundamentals/how-to-find-tenant) or try the following, ensuring to sign-in with your organization's account:: +> You must replace `TenantId` with the identifier of your Microsoft Entra tenant. To look up your Tenant ID, see [How to find your Microsoft Entra tenant ID][ENT-3] or try the following, ensuring to sign-in with your organization's account:: ```msgraph-interactive GET https://graph.microsoft.com/v1.0/organization?$select=id @@ -133,7 +133,7 @@ GET https://graph.microsoft.com/v1.0/organization?$select=id #### Confirm that PIN Recovery policy is enforced on the devices -The _PIN reset_ configuration can be viewed by running [**dsregcmd /status**](/azure/active-directory/devices/troubleshoot-device-dsregcmd) from the command line. This state can be found under the output in the user state section as the **CanReset** line item. If **CanReset** reports as DestructiveOnly, then only destructive PIN reset is enabled. If **CanReset** reports DestructiveAndNonDestructive, then nondestructive PIN reset is enabled. +The _PIN reset_ configuration can be viewed by running [**dsregcmd /status**][ENT-4] from the command line. This state can be found under the output in the user state section as the **CanReset** line item. If **CanReset** reports as DestructiveOnly, then only destructive PIN reset is enabled. If **CanReset** reports DestructiveAndNonDestructive, then nondestructive PIN reset is enabled. **Sample User state Output for Destructive PIN Reset** @@ -233,12 +233,18 @@ For Microsoft Entra hybrid joined devices: > [!NOTE] > Key trust on Microsoft Entra hybrid joined devices doesn't support destructive PIN reset from above the Lock Screen. This is due to the sync delay between when a user provisions their Windows Hello for Business credential and being able to use it for sign-in. For this deployment model, you must deploy non-destructive PIN reset for above lock PIN reset to work. -You may find that PIN reset from Settings only works post sign in. Also, the lock screen PIN reset function doesn't work if you have any matching limitation of self-service password reset from the lock screen. For more information, see [Enable Microsoft Entra self-service password reset at the Windows sign-in screen](/azure/active-directory/authentication/howto-sspr-windows#general-limitations). +You may find that PIN reset from Settings only works post sign in. Also, the lock screen PIN reset function doesn't work if you have any matching limitation of self-service password reset from the lock screen. For more information, see [Enable Microsoft Entra self-service password reset at the Windows sign-in screen][ENT-1]. -[CSP-1]: /windows/client-management/mdm/passportforwork-csp -[CSP-2]: /windows/client-management/mdm/policy-csp-authentication#authentication-configurewebsigninallowedurls -[INT-1]: /mem/intune/configuration/settings-catalog [APP-1]: https://login.windows.net/common/oauth2/authorize?response_type=code&client_id=b8456c59-1230-44c7-a4a2-99b085333e84&resource=https%3A%2F%2Fgraph.windows.net&redirect_uri=https%3A%2F%2Fcred.microsoft.com&state=e9191523-6c2f-4f1d-a4f9-c36f26f89df0&prompt=admin_consent [APP-2]: https://login.windows.net/common/oauth2/authorize?response_type=code&client_id=9115dd05-fad5-4f9c-acc7-305d08b1b04e&resource=https%3A%2F%2Fcred.microsoft.com%2F&redirect_uri=ms-appx-web%3A%2F%2FMicrosoft.AAD.BrokerPlugin%2F9115dd05-fad5-4f9c-acc7-305d08b1b04e&state=6765f8c5-f4a7-4029-b667-46a6776ad611&prompt=admin_consent +[CSP-1]: /windows/client-management/mdm/passportforwork-csp +[CSP-2]: /windows/client-management/mdm/policy-csp-authentication#authentication-configurewebsigninallowedurls +[ENT-1]: /entra/identity/authentication/howto-sspr-windows#general-limitations +[ENT-2]: /entra/identity/role-based-access-control/permissions-reference#application-administrator +[ENT-3]: /entra/fundamentals/how-to-find-tenant +[ENT-4]: /entra/identity/devices/troubleshoot-device-dsregcmd +[ENTRA]: https://entra.microsoft.com +[INT-1]: /mem/intune/configuration/settings-catalog +[INTUNE]: https://go.microsoft.com/fwlink/?linkid=2109431 diff --git a/windows/security/identity-protection/hello-for-business/webauthn-apis.md b/windows/security/identity-protection/hello-for-business/webauthn-apis.md index f047719f37..d685983a32 100644 --- a/windows/security/identity-protection/hello-for-business/webauthn-apis.md +++ b/windows/security/identity-protection/hello-for-business/webauthn-apis.md @@ -14,7 +14,7 @@ Starting in **Windows 11, version 22H2**, WebAuthn APIs support ECC algorithms. ## What does this mean? -By using WebAuthn APIs, developer partners and the developer community can use [Windows Hello](./index.md) or [FIDO2 Security Keys](/azure/active-directory/authentication/howto-authentication-passwordless-security-key) to implement passwordless multi-factor authentication for their applications on Windows devices. +By using WebAuthn APIs, developer partners and the developer community can use [Windows Hello](./index.md) or [FIDO2 Security Keys][ENT-1] to implement passwordless multi-factor authentication for their applications on Windows devices. Users of these apps or sites can use any browser that supports WebAuthn APIs for passwordless authentication. Users will have a familiar and consistent experience on Windows, no matter which browser they use. @@ -69,7 +69,7 @@ FIDO2 authenticators have already been implemented and WebAuthn relying parties - Keys for multiple accounts (keys can be stored per relying party) - Client PIN - Location (the authenticator returns a location) -- [Hash-based Message Authentication Code (HMAC)-secret](/dotnet/api/system.security.cryptography.hmac) (enables offline scenarios) +- [Hash-based Message Authentication Code (HMAC)-secret][NET-1] (enables offline scenarios) The following options might be useful in the future, but haven't been observed in the wild yet: @@ -100,15 +100,26 @@ Here's an approximate layout of where the Microsoft bits go: - **WebAuthn client: Microsoft Edge**. Microsoft Edge can handle the user interface for the WebAuthn and CTAP2 features that this article describes. It also supports the AppID extension. Microsoft Edge can interact with both CTAP1 and CTAP2 authenticators. This scope for interaction means that it can create and use both U2F and FIDO2 credentials. However, Microsoft Edge doesn't speak the U2F protocol. Therefore, relying parties must use only the WebAuthn specification. Microsoft Edge on Android doesn't support WebAuthn. > [!NOTE] - > For authoritative information about Microsoft Edge support for WebAuthn and CTAP, see [Legacy Microsoft Edge developer documentation](/microsoft-edge/dev-guide/windows-integration/web-authentication). + > For authoritative information about Microsoft Edge support for WebAuthn and CTAP, see [Legacy Microsoft Edge developer documentation][EDGE-1]. - **Platform: Windows 10, Windows 11**. Windows 10 and Windows 11 host the Win32 Platform WebAuthn APIs. -- **Roaming Authenticators**. You might notice that there's no *Microsoft* roaming authenticator. The reason is because there's already a strong ecosystem of products that specialize in strong authentication, and every customer (whether corporations or individuals) has different requirements for security, ease of use, distribution, and account recovery. For more information on the ever-growing list of FIDO2-certified authenticators, see [FIDO Certified Products](https://fidoalliance.org/certification/fido-certified-products/). The list includes built-in authenticators, roaming authenticators, and even chip manufacturers who have certified designs. +- **Roaming Authenticators**. You might notice that there's no *Microsoft* roaming authenticator. The reason is because there's already a strong ecosystem of products that specialize in strong authentication, and every customer (whether corporations or individuals) has different requirements for security, ease of use, distribution, and account recovery. For more information on the ever-growing list of FIDO2-certified authenticators, see [FIDO Certified Products][EXT-1]. The list includes built-in authenticators, roaming authenticators, and even chip manufacturers who have certified designs. ## Developer references -The WebAuthn APIs are documented in the [Microsoft/webauthn](https://github.com/Microsoft/webauthn) GitHub repo. To understand how FIDO2 authenticators work, review the following two specifications: +The WebAuthn APIs are documented in the [Microsoft/webauthn][EXT-2] GitHub repo. To understand how FIDO2 authenticators work, review the following two specifications: -- [Web Authentication: An API for accessing Public Key Credentials](https://www.w3.org/TR/webauthn/) (available on the W3C site). This document is known as the WebAuthn spec. -- [Client to Authenticator Protocol (CTAP)](https://fidoalliance.org/specs/fido-v2.0-id-20180227/fido-client-to-authenticator-protocol-v2.0-id-20180227.html). This document is available at the [FIDO Alliance](http://fidoalliance.org/) site, on which hardware and platform teams are working together to solve the problem of FIDO authentication. +- [Web Authentication: An API for accessing Public Key Credentials][EXT-3] (available on the W3C site). This document is known as the WebAuthn spec. +- [Client to Authenticator Protocol (CTAP)][EXT-4]. This document is available at the [FIDO Alliance][EXT-5] site, on which hardware and platform teams are working together to solve the problem of FIDO authentication. + + + +[ENT-1]: /entra/identity/authentication/how-to-enable-passkey-fido2 +[NET-1]: /dotnet/api/system.security.cryptography.hmac +[EDGE-1]: /microsoft-edge/dev-guide/windows-integration/web-authentication +[EXT-1]: https://fidoalliance.org/certification/fido-certified-products/ +[EXT-2]: https://github.com/Microsoft/webauthn +[EXT-3]: https://www.w3.org/TR/webauthn/ +[EXT-4]: https://fidoalliance.org/specs/fido-v2.0-id-20180227/fido-client-to-authenticator-protocol-v2.0-id-20180227.html +[EXT-5]: http://fidoalliance.org From ef8a0f16c68d1ee44dd26677913862588beb1f77 Mon Sep 17 00:00:00 2001 From: Paolo Matarazzo <74918781+paolomatarazzo@users.noreply.github.com> Date: Mon, 8 Jul 2024 11:15:23 -0400 Subject: [PATCH 80/99] Added recovery password details --- .../bitlocker/operations-guide.md | 30 +++++++++++++++++++ .../bitlocker/recovery-process.md | 9 +++++- 2 files changed, 38 insertions(+), 1 deletion(-) diff --git a/windows/security/operating-system-security/data-protection/bitlocker/operations-guide.md b/windows/security/operating-system-security/data-protection/bitlocker/operations-guide.md index 29452a46ea..c41b4ab0cb 100644 --- a/windows/security/operating-system-security/data-protection/bitlocker/operations-guide.md +++ b/windows/security/operating-system-security/data-protection/bitlocker/operations-guide.md @@ -610,7 +610,37 @@ Once decryption is complete, the drive updates its status in the Control Panel a --- +## Unlock a drive + +If connect a drive as a secondary drive to a device, and you have your BitLocker recovery key, you can unlock a BitLocker-enabled drive by using the following instructions. + +In the next example, the `D` drive is the one to unlock. Select the option that best suits your needs. + +#### [:::image type="icon" source="images/powershell.svg"::: **PowerShell**](#tab/powershell) + +```powershell +Unlock-BitLocker -MountPoint D -RecoveryPassword xxxxxx-xxxxxx-xxxxxx-xxxxxx-xxxxxx-xxxxxx-xxxxxx-xxxxxx +``` + +For more information, see [Unlock-BitLocker][PS-2] + +#### [:::image type="icon" source="images/cmd.svg"::: **Command Prompt**](#tab/cmd) + +```cmd +manage-bde.exe -unlock D: -recoverypassword xxxxxx-xxxxxx-xxxxxx-xxxxxx-xxxxxx-xxxxxx-xxxxxx-xxxxxx +``` + +For more information, see [manage-bde unlock][WINS-1] + +#### [:::image type="icon" source="images/controlpanel.svg"::: **Control Panel**](#tab/controlpanel) + +You can unlock the drive from the Control Panel or from Explorer. After opening the BitLocker Control Panel applet, select the **Unlock drive** option to begin the process. When prompted, enter the 48-digit recovery key. + +--- + [PREV-1]: /previous-versions/windows/it-pro/windows-server-2012-R2-and-2012/ff829849(v=ws.11) [PS-1]: /powershell/module/bitlocker +[PS-2]: /powershell/module/bitlocker/unlock-bitlocker?view=windowsserver2022-ps +[WINS-1]: /windows-server/administration/windows-commands/manage-bde-unlock \ No newline at end of file diff --git a/windows/security/operating-system-security/data-protection/bitlocker/recovery-process.md b/windows/security/operating-system-security/data-protection/bitlocker/recovery-process.md index aee50a307d..7f22206332 100644 --- a/windows/security/operating-system-security/data-protection/bitlocker/recovery-process.md +++ b/windows/security/operating-system-security/data-protection/bitlocker/recovery-process.md @@ -2,7 +2,7 @@ title: BitLocker recovery process description: Learn how to obtain BitLocker recovery information for Microsoft Entra joined, Microsoft Entra hybrid joined, and Active Directory joined devices, and how to restore access to a locked drive. ms.topic: how-to -ms.date: 06/18/2024 +ms.date: 07/08/2024 --- # BitLocker recovery process @@ -26,6 +26,13 @@ A recovery key can't be stored in any of the following locations: - The root directory of a nonremovable drive - An encrypted volume +### Self-recovery with recovery password + +If you have access to the recovery key, enter the 48-digits in the preboot recovery screen. + +- If you are having issues entering the recovery password in the preboot recovery screen, or you can no longer boot your device, you can connect the drive to another device as a secondary drive. For more information, see [Unlock a drive](operations-guide.md#unlock-a-drive) +- If unlocking with recovery password doesn't work you can use the [BitLocker Repair tool](#bitlocker-repair-tool) to regain access yo your drive + ### Self-recovery in Microsoft Entra ID If BitLocker recovery keys are stored in Microsoft Entra ID, users can access them using the following URL: https://myaccount.microsoft.com. From the **Devices** tab, users can select a Windows device that they own, and select the option **View BitLocker Keys**. From ec883f83d413dcaa2dbf22f87bc37302bc06e885 Mon Sep 17 00:00:00 2001 From: Paolo Matarazzo <74918781+paolomatarazzo@users.noreply.github.com> Date: Mon, 8 Jul 2024 11:34:17 -0400 Subject: [PATCH 81/99] removes version --- .../data-protection/bitlocker/operations-guide.md | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/windows/security/operating-system-security/data-protection/bitlocker/operations-guide.md b/windows/security/operating-system-security/data-protection/bitlocker/operations-guide.md index c41b4ab0cb..8ac5689f57 100644 --- a/windows/security/operating-system-security/data-protection/bitlocker/operations-guide.md +++ b/windows/security/operating-system-security/data-protection/bitlocker/operations-guide.md @@ -642,5 +642,5 @@ You can unlock the drive from the Control Panel or from Explorer. After opening [PREV-1]: /previous-versions/windows/it-pro/windows-server-2012-R2-and-2012/ff829849(v=ws.11) [PS-1]: /powershell/module/bitlocker -[PS-2]: /powershell/module/bitlocker/unlock-bitlocker?view=windowsserver2022-ps +[PS-2]: /powershell/module/bitlocker/unlock-bitlocker [WINS-1]: /windows-server/administration/windows-commands/manage-bde-unlock \ No newline at end of file From da3a1a997e63512a4ff64d4a11e1707af080324d Mon Sep 17 00:00:00 2001 From: Paolo Matarazzo <74918781+paolomatarazzo@users.noreply.github.com> Date: Mon, 8 Jul 2024 11:42:35 -0400 Subject: [PATCH 82/99] chore: Update BitLocker unlock instructions in operations guide --- .../data-protection/bitlocker/operations-guide.md | 2 +- .../data-protection/bitlocker/recovery-process.md | 2 +- 2 files changed, 2 insertions(+), 2 deletions(-) diff --git a/windows/security/operating-system-security/data-protection/bitlocker/operations-guide.md b/windows/security/operating-system-security/data-protection/bitlocker/operations-guide.md index 8ac5689f57..7bf6e12c5a 100644 --- a/windows/security/operating-system-security/data-protection/bitlocker/operations-guide.md +++ b/windows/security/operating-system-security/data-protection/bitlocker/operations-guide.md @@ -612,7 +612,7 @@ Once decryption is complete, the drive updates its status in the Control Panel a ## Unlock a drive -If connect a drive as a secondary drive to a device, and you have your BitLocker recovery key, you can unlock a BitLocker-enabled drive by using the following instructions. +If you connect a drive as a secondary drive to a device, and you have your BitLocker recovery key, you can unlock a BitLocker-enabled drive by using the following instructions. In the next example, the `D` drive is the one to unlock. Select the option that best suits your needs. diff --git a/windows/security/operating-system-security/data-protection/bitlocker/recovery-process.md b/windows/security/operating-system-security/data-protection/bitlocker/recovery-process.md index 7f22206332..d6e0f76716 100644 --- a/windows/security/operating-system-security/data-protection/bitlocker/recovery-process.md +++ b/windows/security/operating-system-security/data-protection/bitlocker/recovery-process.md @@ -30,7 +30,7 @@ A recovery key can't be stored in any of the following locations: If you have access to the recovery key, enter the 48-digits in the preboot recovery screen. -- If you are having issues entering the recovery password in the preboot recovery screen, or you can no longer boot your device, you can connect the drive to another device as a secondary drive. For more information, see [Unlock a drive](operations-guide.md#unlock-a-drive) +- If you are having issues entering the recovery password in the preboot recovery screen, or you can no longer boot your device, you can connect the drive to another device as a secondary drive. For more information about the unlock process, see [Unlock a drive](operations-guide.md#unlock-a-drive) - If unlocking with recovery password doesn't work you can use the [BitLocker Repair tool](#bitlocker-repair-tool) to regain access yo your drive ### Self-recovery in Microsoft Entra ID From 7bc18d74d30e194e8108c7478d9a21c56ae26346 Mon Sep 17 00:00:00 2001 From: Stacyrch140 <102548089+Stacyrch140@users.noreply.github.com> Date: Mon, 8 Jul 2024 12:15:23 -0400 Subject: [PATCH 83/99] pencil edit --- .../hello-for-business/deploy/hybrid-cert-trust-enroll.md | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/windows/security/identity-protection/hello-for-business/deploy/hybrid-cert-trust-enroll.md b/windows/security/identity-protection/hello-for-business/deploy/hybrid-cert-trust-enroll.md index 046cff4a4d..e2e4402d37 100644 --- a/windows/security/identity-protection/hello-for-business/deploy/hybrid-cert-trust-enroll.md +++ b/windows/security/identity-protection/hello-for-business/deploy/hybrid-cert-trust-enroll.md @@ -37,7 +37,7 @@ Use the following instructions to configure your devices using either Microsoft Windows Hello for Business provisioning performs the initial enrollment of the Windows Hello for Business authentication certificate. This certificate expires based on the duration configured in the Windows Hello for Business *authentication certificate* template. -The process requires no user interaction, provided the user signs-in using Windows Hello for Business. The certificate is renewed in the background before it expires. +The process requires no user interaction, provided the user signs in using Windows Hello for Business. The certificate is renewed in the background before it expires. [!INCLUDE [gpo-settings-1](../../../../../includes/configure/gpo-settings-1.md)] From eb01cee7d91bc2c2ab2aa630b1e3cf38e49d5a2c Mon Sep 17 00:00:00 2001 From: Stacyrch140 <102548089+Stacyrch140@users.noreply.github.com> Date: Mon, 8 Jul 2024 12:16:15 -0400 Subject: [PATCH 84/99] pencil edit --- .../hello-for-business/deploy/on-premises-cert-trust-enroll.md | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/windows/security/identity-protection/hello-for-business/deploy/on-premises-cert-trust-enroll.md b/windows/security/identity-protection/hello-for-business/deploy/on-premises-cert-trust-enroll.md index 8c1de9a2d0..3a9200db54 100644 --- a/windows/security/identity-protection/hello-for-business/deploy/on-premises-cert-trust-enroll.md +++ b/windows/security/identity-protection/hello-for-business/deploy/on-premises-cert-trust-enroll.md @@ -37,7 +37,7 @@ Follow the instructions below to configure your devices using either Microsoft I Windows Hello for Business provisioning performs the initial enrollment of the Windows Hello for Business authentication certificate. This certificate expires based on the duration configured in the Windows Hello for Business *authentication certificate* template. -The process requires no user interaction, provided the user signs-in using Windows Hello for Business. The certificate is renewed in the background before it expires. +The process requires no user interaction, provided the user signs in using Windows Hello for Business. The certificate is renewed in the background before it expires. [!INCLUDE [gpo-settings-1](../../../../../includes/configure/gpo-settings-1.md)] From 3e827c1506baf1e927fb0215d509e0f491333f31 Mon Sep 17 00:00:00 2001 From: Stacyrch140 <102548089+Stacyrch140@users.noreply.github.com> Date: Mon, 8 Jul 2024 12:17:13 -0400 Subject: [PATCH 85/99] pencil edit --- windows/security/identity-protection/hello-for-business/faq.yml | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/windows/security/identity-protection/hello-for-business/faq.yml b/windows/security/identity-protection/hello-for-business/faq.yml index 98723b63f6..fb596103e4 100644 --- a/windows/security/identity-protection/hello-for-business/faq.yml +++ b/windows/security/identity-protection/hello-for-business/faq.yml @@ -213,7 +213,7 @@ sections: - question: Do I need line of sight to a domain controller to use Windows Hello for Business cloud Kerberos trust? answer: | Windows Hello for Business cloud Kerberos trust requires line of sight to a domain controller when: - - a user signs-in for the first time or unlocks with Windows Hello for Business after provisioning + - a user signs in for the first time or unlocks with Windows Hello for Business after provisioning - attempting to access on-premises resources secured by Active Directory - question: Can I use RDP/VDI with Windows Hello for Business cloud Kerberos trust? answer: | From f22ebc4fe2d020739414ea7e7fdfcbf6b0964159 Mon Sep 17 00:00:00 2001 From: Stacyrch140 <102548089+Stacyrch140@users.noreply.github.com> Date: Mon, 8 Jul 2024 12:17:58 -0400 Subject: [PATCH 86/99] pencil edit --- .../hello-for-business/hello-errors-during-pin-creation.md | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/windows/security/identity-protection/hello-for-business/hello-errors-during-pin-creation.md b/windows/security/identity-protection/hello-for-business/hello-errors-during-pin-creation.md index 0e89afb281..ef8e864841 100644 --- a/windows/security/identity-protection/hello-for-business/hello-errors-during-pin-creation.md +++ b/windows/security/identity-protection/hello-for-business/hello-errors-during-pin-creation.md @@ -53,7 +53,7 @@ If the error occurs again, check the error code against the following table to s | 0x801C03EA | Server failed to authorize user or device. | Check if the token is valid and user has permission to register Windows Hello for Business keys. | | 0x801C03EB | Server response http status isn't valid | Sign out and then sign in again. | | 0x801C03EC | Unhandled exception from server. | sign out and then sign in again. | -| 0x801C03ED | Multi-factor authentication is required for a 'ProvisionKey' operation, but wasn't performed.

    -or-

    Token wasn't found in the Authorization header.

    -or-

    Failed to read one or more objects.

    -or-

    The request sent to the server was invalid.

    -or-

    User doesn't have permissions to join to Microsoft Entra ID. | Sign out and then sign in again. If that doesn't resolve the issue, unjoin the device from Mcirosoft Entra ID and rejoin.
    Allow user(s) to join to Microsoft Entra ID under Microsoft Entra Device settings. | +| 0x801C03ED | Multi-factor authentication is required for a 'ProvisionKey' operation, but wasn't performed.

    -or-

    Token wasn't found in the Authorization header.

    -or-

    Failed to read one or more objects.

    -or-

    The request sent to the server was invalid.

    -or-

    User doesn't have permissions to join to Microsoft Entra ID. | Sign out and then sign in again. If that doesn't resolve the issue, unjoin the device from Microsoft Entra ID and rejoin.
    Allow user(s) to join to Microsoft Entra ID under Microsoft Entra Device settings. | | 0x801C03EE | Attestation failed. | Sign out and then sign in again. | | 0x801C03EF | The AIK certificate is no longer valid. | Sign out and then sign in again. | | 0x801C03F2 | Windows Hello key registration failed. | ERROR_BAD_DIRECTORY_REQUEST. Another object with the same value for property proxyAddresses already exists. To resolve the issue, refer to [Duplicate Attributes Prevent Dirsync](/office365/troubleshoot/administration/duplicate-attributes-prevent-dirsync). Also, if no sync conflict exists, please verify that the "Mail/Email address" in Microsoft Entra ID and the Primary SMTP address are the same in the proxy address. | From 6b576d95499cd639fd27920bea2a15503f1b695d Mon Sep 17 00:00:00 2001 From: "Vinay Pamnani (from Dev Box)" Date: Mon, 8 Jul 2024 11:13:59 -0600 Subject: [PATCH 87/99] MDM Freshness --- ...e-active-directory-integration-with-mdm.md | 44 ++++++------------- ...omatic-mdm-enrollment-in-the-new-portal.md | 2 +- ...ollment-using-windows-provisioning-tool.md | 12 ++--- ...ficate-authentication-device-enrollment.md | 2 +- .../certificate-renewal-windows-mdm.md | 8 ++-- windows/client-management/config-lock.md | 4 +- .../declared-configuration-extensibility.md | 6 +-- .../declared-configuration.md | 2 +- .../device-update-management.md | 8 ++-- .../disconnecting-from-mdm-unenrollment.md | 10 ++--- .../enable-admx-backed-policies-in-mdm.md | 2 +- ...device-automatically-using-group-policy.md | 4 +- .../enterprise-app-management.md | 12 ++--- .../esim-enterprise-management.md | 4 +- ...erated-authentication-device-enrollment.md | 14 +++--- ...rver-side-mobile-application-management.md | 6 +-- windows/client-management/index.yml | 2 +- ...-in-your-organization-modern-management.md | 12 ++--- windows/client-management/mdm-collect-logs.md | 4 +- .../mdm-diagnose-enrollment.md | 2 +- .../mdm-enrollment-of-windows-devices.md | 6 +-- windows/client-management/mdm-known-issues.md | 10 ++--- windows/client-management/mdm-overview.md | 4 +- .../mobile-device-enrollment.md | 8 ++-- ...ew-in-windows-mdm-enrollment-management.md | 2 +- .../oma-dm-protocol-support.md | 2 +- ...remise-authentication-device-enrollment.md | 2 +- .../push-notification-windows-mdm.md | 2 +- .../server-requirements-windows-mdm.md | 6 +-- .../structure-of-oma-dm-provisioning-files.md | 2 +- .../understanding-admx-backed-policies.md | 2 +- ...-scripting-with-the-wmi-bridge-provider.md | 2 +- ...and-centennial-app-policy-configuration.md | 2 +- .../windows-mdm-enterprise-settings.md | 14 +++--- .../wmi-providers-supported-in-windows.md | 2 +- 35 files changed, 100 insertions(+), 126 deletions(-) diff --git a/windows/client-management/azure-active-directory-integration-with-mdm.md b/windows/client-management/azure-active-directory-integration-with-mdm.md index 27c5fb235c..eefc2151ab 100644 --- a/windows/client-management/azure-active-directory-integration-with-mdm.md +++ b/windows/client-management/azure-active-directory-integration-with-mdm.md @@ -5,18 +5,18 @@ ms.topic: conceptual ms.collection: - highpri - tier2 -ms.date: 08/10/2023 +ms.date: 07/08/2024 --- # Microsoft Entra integration with MDM -Microsoft Entra ID is the world's largest enterprise cloud identity management service. It's used by organizations to access Microsoft 365 and business applications from Microsoft and third-party software as a service (SaaS) vendors. Many of the rich Windows experiences for organizational users (such as store access or OS state roaming) use Microsoft Entra ID as the underlying identity infrastructure. Windows integrates with Microsoft Entra ID, allowing devices to be registered in Microsoft Entra ID and enrolled into MDM in an integrated flow. +Microsoft Entra ID is the world's largest enterprise cloud identity management service. It's used by organizations to access Microsoft 365 and business applications from Microsoft and third-party software as a service (SaaS) vendors. Many of the rich Windows experiences for organizational users (such as store access or OS state roaming) use Microsoft Entra ID as the underlying identity infrastructure. Windows integrates with Microsoft Entra ID, allowing devices to be registered in Microsoft Entra ID and enrolled into Mobile Device Management (MDM) in an integrated flow. Once a device is enrolled in MDM, the MDM: - Can enforce compliance with organization policies, add or remove apps, and more. - Can report a device's compliance in Microsoft Entra ID. -- Microsoft Entra ID can allow access to organization resources or applications secured by Microsoft Entra ID to devices that comply with policies. +- Can allow access to organization resources or applications secured by Microsoft Entra ID to devices that comply with policies. To support these rich experiences with their MDM product, MDM vendors can integrate with Microsoft Entra ID. @@ -24,23 +24,21 @@ To support these rich experiences with their MDM product, MDM vendors can integr There are several ways to connect your devices to Microsoft Entra ID: -- [Join device to Microsoft Entra ID](/azure/active-directory/devices/concept-azure-ad-join) -- [Join device to on-premises AD and Microsoft Entra ID](/azure/active-directory/devices/concept-azure-ad-join-hybrid) -- [Add a Microsoft work account to Windows](/azure/active-directory/devices/concept-azure-ad-register) +- [Join device to Microsoft Entra ID](/entra/identity/devices/concept-directory-join) +- [Join device to on-premises AD and Microsoft Entra ID](/entra/identity/devices/concept-hybrid-join) +- [Add a Microsoft work account to Windows](/entra/identity/devices/concept-device-registration) In each scenario, Microsoft Entra authenticates the user and the device. It provides a verified unique device identifier that can be used for MDM enrollment. The enrollment flow provides an opportunity for the MDM service to render its own UI, using a web view. MDM vendors should use the UI to render the Terms of Use (TOU), which can be different for company-owned and bring-your-own-device (BYOD) devices. MDM vendors can also use the web view to render more UI elements, such as asking for a one-time PIN. In Windows 10, the web view during the out-of-the-box scenario is displayed as full-screen by default, providing MDM vendors with the capability to create a seamless edge-to-edge user experience. However, in Windows 11 the web view is rendered within an iframe. It's important that MDM vendors who integrate with Microsoft Entra ID respect the Windows design guidelines. This step includes using a responsive web design and respecting the Windows accessibility guidelines. For example, include the forward and back buttons that are properly wired to the navigation logic. More details are provided later in this article. -For Microsoft Entra enrollment to work for an Active Directory Federated Services (AD FS) backed Microsoft Entra account, you must enable password authentication for the intranet on the ADFS service. For more information, see [Configure Azure MFA as authentication provider with AD FS](/windows-server/identity/ad-fs/operations/configure-ad-fs-and-azure-mfa). +For Microsoft Entra enrollment to work for an Active Directory Federated Services (AD FS) backed Microsoft Entra account, you must enable password authentication for the intranet on the ADFS service. For more information, see [Configure Microsoft Entra multifactor authentication as authentication provider with AD FS](/windows-server/identity/ad-fs/operations/configure-ad-fs-and-azure-mfa). Once a user has a Microsoft Entra account added to Windows and enrolled in MDM, the enrollment can be managed through **Settings** > **Accounts** > **Access work or school**. Device management of either Microsoft Entra join for organization scenarios or BYOD scenarios is similar. > [!NOTE] > Users can't remove the device enrollment through the **Access work or school** user interface because management is tied to the Microsoft Entra ID or work account. - - ### MDM endpoints involved in Microsoft Entra integrated enrollment Microsoft Entra MDM enrollment is a two-step process: @@ -64,17 +62,15 @@ To support Microsoft Entra enrollment, MDM vendors must host and expose a **Term The MDM is expected to use this information about the device (Device ID) when reporting device compliance back to Microsoft Entra ID using the [Microsoft Graph API](/azure/active-directory/develop/active-directory-graph-api). A sample for reporting device compliance is provided later in this article. - - ## Make MDM a reliable party of Microsoft Entra ID To participate in the integrated enrollment flow outlined in the previous section, the MDM must consume access tokens issued by Microsoft Entra ID. To report compliance with Microsoft Entra ID, the MDM must authenticate itself to Microsoft Entra ID and obtain authorization in the form of an access token that allows it to invoke the [Microsoft Graph API](/azure/active-directory/develop/active-directory-graph-api). ### Cloud-based MDM -A cloud-based MDM is a SaaS application that provides device management capabilities in the cloud. It's a multi-tenant application. This application is registered with Microsoft Entra ID in the home tenant of the MDM vendor. When an IT admin decides to use this MDM solution, an instance of this application is made visible in the tenant of the customer. +A cloud-based MDM is a SaaS application that provides device management capabilities in the cloud. It's a multitenant application. This application is registered with Microsoft Entra ID in the home tenant of the MDM vendor. When an IT admin decides to use this MDM solution, an instance of this application is made visible in the tenant of the customer. -The MDM vendor must first register the application in their home tenant and mark it as a multi-tenant application. For more information about how to add multi-tenant applications to Microsoft Entra ID, see the [Integrate an app that authenticates users and calls Microsoft Graph using the multi-tenant integration pattern (SaaS)](https://go.microsoft.com/fwlink/p/?LinkId=613661) code sample on GitHub. +The MDM vendor must first register the application in their home tenant and mark it as a multitenant application. For more information about how to add multitenant applications to Microsoft Entra ID, see the [Integrate an app that authenticates users and calls Microsoft Graph using the multitenant integration pattern (SaaS)](https://go.microsoft.com/fwlink/p/?LinkId=613661) code sample on GitHub. > [!NOTE] > For the MDM provider, if you don't have an existing Microsoft Entra tenant with a Microsoft Entra subscription that you manage, follow these step-by-step guides: @@ -82,7 +78,7 @@ The MDM vendor must first register the application in their home tenant and mark > - [Quickstart: Create a new tenant in Microsoft Entra ID](/azure/active-directory/fundamentals/active-directory-access-create-new-tenant) to set up a tenant. > - [Associate or add an Azure subscription to your Microsoft Entra tenant](/azure/active-directory/fundamentals/active-directory-how-subscriptions-associated-directory) to add a subscription, and manage it via the Azure Portal. -The MDM application uses keys to request access tokens from Microsoft Entra ID. These keys are managed within the tenant of the MDM provider and not visible to individual customers. The same key is used by the multi-tenant MDM application to authenticate itself with Microsoft Entra ID, in the customer tenant where the managed device belongs. +The MDM application uses keys to request access tokens from Microsoft Entra ID. These keys are managed within the tenant of the MDM provider and not visible to individual customers. The same key is used by the multitenant MDM application to authenticate itself with Microsoft Entra ID, in the customer tenant where the managed device belongs. > [!NOTE] > All MDM apps must implement Microsoft Entra v2 tokens before we certify that integration works. Due to changes in the Microsoft Entra app platform, using Microsoft Entra v2 tokens is a hard requirement. For more information, see [Microsoft identity platform access tokens](/azure/active-directory/develop/access-tokens#token-formats). @@ -107,8 +103,6 @@ For cloud-based MDM, you can roll over the application keys without requiring a For the on-premises MDM, the Microsoft Entra authentication keys are within the customer tenant and the customer's administrator must roll over the keys. To improve security, provide guidance to customers about rolling over and protecting the keys. - - ## Publish your MDM app to Microsoft Entra app gallery IT administrators use the Microsoft Entra app gallery to add an MDM for their organization to use. The app gallery is a rich store with over 2400 SaaS applications that are integrated with Microsoft Entra ID. @@ -124,7 +118,7 @@ The following table shows the required information to create an entry in the Mic | Item | Description | |---------------------|----------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------| -| **Application ID** | The client ID of your MDM app that is configured within your tenant. This ID is the unique identifier for your multi-tenant app. | +| **Application ID** | The client ID of your MDM app that is configured within your tenant. This ID is the unique identifier for your multitenant app. | | **Publisher** | A string that identifies the publisher of the app. | | **Application URL** | A URL to the landing page of your app where your administrators can get more information about the MDM app and contains a link to the landing page of your app. This URL isn't used for the actual enrollment. | | **Description** | A brief description of your MDM app, which must be under 255 characters. | @@ -191,7 +185,7 @@ The following claims are expected in the access token passed by Windows to the T |-----------|----------------------------------------------------------------------------------------------| | Object ID | Identifier of the user object corresponding to the authenticated user. | | UPN | A claim containing the user principal name (UPN) of the authenticated user. | -| TID | A claim representing the tenant ID of the tenant. In the example above, it's Fabrikam. | +| TID | A claim representing the tenant ID of the tenant. In the previous example, it's Fabrikam. | | Resource | A sanitized URL representing the MDM application. Example: `https://fabrikam.contosomdm.com` | > [!NOTE] @@ -206,7 +200,7 @@ https://fabrikam.contosomdm.com/TermsOfUse?redirect_uri=ms-appx-web://ContosoMdm Authorization: Bearer eyJ0eXAiOi ``` -The MDM is expected to validate the signature of the access token to ensure it is issued by Microsoft Entra ID and that the recipient is appropriate. +The MDM is expected to validate the signature of the access token to ensure it's issued by Microsoft Entra ID and that the recipient is appropriate. ### Terms of Use content @@ -260,8 +254,6 @@ The following table shows the error codes. | Microsoft Entra token validation failed | 302 | unauthorized_client | unauthorized_client | | internal service error | 302 | server_error | internal service error | - - ## Enrollment protocol with Microsoft Entra ID With Azure integrated MDM enrollment, there's no discovery phase and the discovery URL is directly passed down to the system from Azure. The following table shows the comparison between the traditional and Azure enrollments. @@ -284,8 +276,6 @@ With Azure integrated MDM enrollment, there's no discovery phase and the discove |EnrollmentData Terms of Use binary blob as AdditionalContext for EnrollmentServiceURL|Not supported|Supported|Supported| |CSPs accessible during enrollment|Windows 10 support:
    - DMClient
    - CertificateStore
    - RootCATrustedCertificates
    - ClientCertificateInstall
    - EnterpriseModernAppManagement
    - PassportForWork
    - Policy
    - w7 APPLICATION||| - - ## Management protocol with Microsoft Entra ID There are two different MDM enrollment types that integrate with Microsoft Entra ID, and use Microsoft Entra user and device identities. Depending on the enrollment type, the MDM service may need to manage a single user or multiple users. @@ -318,8 +308,6 @@ There are two different MDM enrollment types that integrate with Microsoft Entra - Use the JWT Token Handler extension for WIF to validate the contents of the access token and extract claims required for use. For more information, see [JwtSecurityTokenHandler Class](/dotnet/api/system.identitymodel.tokens.jwt.jwtsecuritytokenhandler). - Refer to the Microsoft Entra authentication code samples to get a sample for working with access tokens. For an example, see [NativeClient-DotNet](https://go.microsoft.com/fwlink/p/?LinkId=613667). - - ## Device Alert 1224 for Microsoft Entra user token An alert is sent when the DM session starts and there's a Microsoft Entra user logged in. The alert is sent in OMA DM package #1. Here's an example: @@ -372,15 +360,13 @@ Here's an example. ``` - - ## Report device compliance to Microsoft Entra ID Once a device is enrolled with the MDM for management, organization policies configured by the IT administrator are enforced on the device. MDM evaluates the device compliance with configured policies and then reports it to Microsoft Entra ID. This section covers the Graph API call you can use to report a device compliance status to Microsoft Entra ID. For a sample that illustrates how an MDM can obtain an access token using OAuth 2.0 client\_credentials grant type, see [Daemon\_CertificateCredential-DotNet](https://go.microsoft.com/fwlink/p/?LinkId=613822). -- **Cloud-based MDM** - If your product is a cloud-based multi-tenant MDM service, you have a single key configured for your service within your tenant. To obtain authorization, use this key to authenticate the MDM service with Microsoft Entra ID. +- **Cloud-based MDM** - If your product is a cloud-based multitenant MDM service, you have a single key configured for your service within your tenant. To obtain authorization, use this key to authenticate the MDM service with Microsoft Entra ID. - **On-premises MDM** - If your product is an on-premises MDM, customers must configure your product with the key used to authenticate with Microsoft Entra ID. This key configuration is because each on-premises instance of your MDM product has a different tenant-specific key. So, you may need to expose a configuration experience in your MDM product that enables administrators to specify the key to be used to authenticate with Microsoft Entra ID. ### Use Microsoft Graph API @@ -415,8 +401,6 @@ Response: - Success - HTTP 204 with No Content. - Failure/Error - HTTP 404 Not Found. This error may be returned if the specified device or tenant can't be found. - - ## Data loss during unenrollment from Microsoft Entra join When a user is enrolled into MDM through Microsoft Entra join and then disconnects the enrollment, there's no warning that the user will lose Windows Information Protection (WIP) data. The disconnection message doesn't indicate the loss of WIP data. diff --git a/windows/client-management/azure-ad-and-microsoft-intune-automatic-mdm-enrollment-in-the-new-portal.md b/windows/client-management/azure-ad-and-microsoft-intune-automatic-mdm-enrollment-in-the-new-portal.md index ab7c3e0a1c..aca40777f6 100644 --- a/windows/client-management/azure-ad-and-microsoft-intune-automatic-mdm-enrollment-in-the-new-portal.md +++ b/windows/client-management/azure-ad-and-microsoft-intune-automatic-mdm-enrollment-in-the-new-portal.md @@ -2,7 +2,7 @@ title: Automatic MDM enrollment in the Intune admin center description: Automatic MDM enrollment in the Intune admin center ms.topic: conceptual -ms.date: 08/10/2023 +ms.date: 07/08/2024 --- # Automatic MDM enrollment in the Intune admin center diff --git a/windows/client-management/bulk-enrollment-using-windows-provisioning-tool.md b/windows/client-management/bulk-enrollment-using-windows-provisioning-tool.md index d9938c6409..2b0ca2a334 100644 --- a/windows/client-management/bulk-enrollment-using-windows-provisioning-tool.md +++ b/windows/client-management/bulk-enrollment-using-windows-provisioning-tool.md @@ -1,13 +1,13 @@ --- title: Bulk enrollment -description: Bulk enrollment is an efficient way to set up a large number of devices to be managed by an MDM server without the need to reimage the devices. +description: Bulk enrollment is an efficient way to set up a large number of devices to manage by an MDM server without the need to reimage the devices. ms.topic: conceptual -ms.date: 08/10/2023 +ms.date: 07/08/2024 --- # Bulk enrollment using Windows Configuration Designer -Bulk enrollment is an efficient way to set up a large number of devices to be managed by an MDM server without the need to reimage the devices. You can use the [Provisioning CSP](mdm/provisioning-csp.md) for bulk enrollment, except for the Microsoft Entra join enrollment scenario. +Bulk enrollment is an efficient way to set up a large number of devices to manage by an MDM server without the need to reimage the devices. You can use the [Provisioning CSP](mdm/provisioning-csp.md) for bulk enrollment, except for the Microsoft Entra join enrollment scenario. ## Typical use cases @@ -68,7 +68,7 @@ Using the WCD, create a provisioning package using the enrollment information re ![bulk enrollment screenshot.](images/bulk-enrollment.png) 1. Configure the other settings, such as the Wi-Fi connections so that the device can join a network before joining MDM (for example, **Runtime settings** > **ConnectivityProfiles** > **WLANSetting**). -1. When you're done adding all the settings, on the **File** menu, select **Save**. +1. After adding all the settings, select **Save** on the **File** menu. 1. On the main menu, select **Export** > **Provisioning package**. ![icd menu for export.](images/bulk-enrollment2.png) @@ -120,7 +120,7 @@ Using the WCD, create a provisioning package using the enrollment information re For detailed descriptions of these settings, see [Provisioning CSP](mdm/provisioning-csp.md). 1. Configure the other settings, such as the Wi-Fi connection so that the device can join a network before joining MDM (for example, **Runtime settings** > **ConnectivityProfiles** > **WLANSetting**). -1. When you're done adding all the settings, on the **File** menu, select **Save**. +1. After adding all the settings, select **Save** on the **File** menu. 1. Export and build the package (steps 10-13 in previous section). 1. Apply the package to some test devices and verify that they work. For more information, see [Apply a provisioning package](#apply-a-provisioning-package). 1. Apply the package to your devices. @@ -142,7 +142,7 @@ Using the WCD, create a provisioning package using the enrollment information re - If the provisioning engine receives a failure from a CSP, it retries provisioning three times in a row. - If all immediate attempts fail, a delayed task is launched to try provisioning again later. It will retry four times at a decaying rate of 15 minutes -> 1 hr -> 4 hr -> "Next System Start". These attempts are run from the SYSTEM context. - It also retries the provisioning each time it's launched, if started from somewhere else as well. -- In addition, provisioning will be restarted in the SYSTEM context after a sign in and the [system has been idle](/windows/win32/taskschd/task-idle-conditions). +- In addition, provisioning will be restarted in the SYSTEM context after a sign in and the [system is idle](/windows/win32/taskschd/task-idle-conditions). ## Related articles diff --git a/windows/client-management/certificate-authentication-device-enrollment.md b/windows/client-management/certificate-authentication-device-enrollment.md index e53a80cc55..2cea712e44 100644 --- a/windows/client-management/certificate-authentication-device-enrollment.md +++ b/windows/client-management/certificate-authentication-device-enrollment.md @@ -2,7 +2,7 @@ title: Certificate authentication device enrollment description: This section provides an example of the mobile device enrollment protocol using certificate authentication policy. ms.topic: conceptual -ms.date: 08/10/2023 +ms.date: 07/08/2024 --- # Certificate authentication device enrollment diff --git a/windows/client-management/certificate-renewal-windows-mdm.md b/windows/client-management/certificate-renewal-windows-mdm.md index 573cbe71b2..66d42a4d90 100644 --- a/windows/client-management/certificate-renewal-windows-mdm.md +++ b/windows/client-management/certificate-renewal-windows-mdm.md @@ -2,7 +2,7 @@ title: Certificate Renewal description: Learn how to find all the resources that you need to provide continuous access to client certificates. ms.topic: conceptual -ms.date: 08/10/2023 +ms.date: 07/08/2024 --- # Certificate Renewal @@ -19,7 +19,7 @@ Windows supports automatic certificate renewal, also known as Renew On Behalf Of > [!NOTE] > Certificate renewal of the enrollment certificate through ROBO is only supported with Microsoft PKI. -Auto certificate renewal is the only supported MDM client certificate renewal method for the device that's enrolled using WAB authentication. Meaning, the AuthPolicy is set to Federated. It also means if the server supports WAB authentication, then the MDM certificate enrollment server MUST also support client TLS to renew the MDM client certificate. +Auto certificate renewal is the only supported MDM client certificate renewal method for a device enrolled using WAB authentication. Meaning, the AuthPolicy is set to Federated. It also means if the server supports WAB authentication, then the MDM certificate enrollment server MUST also support client TLS to renew the MDM client certificate. For Windows devices, during the MDM client certificate enrollment phase or during MDM management section, the enrollment server or MDM server could configure the device to support automatic MDM client certificate renewal using [CertificateStore CSP's](mdm/certificatestore-csp.md) ROBOSupport node under `CertificateStore/My/WSTEP/Renew` URL. @@ -89,7 +89,7 @@ In Windows, the renewal period can only be set during the MDM enrollment phase. For more information about the parameters, see the [CertificateStore configuration service provider](mdm/certificatestore-csp.md). -Unlike manual certificate renewal, the device doesn't perform an automatic MDM client certificate renewal if the certificate is already expired. To make sure the device has enough time to automatically renew, we recommend you set a renewal period a couple months (40-60 days) before the certificate expires. And, set the renewal retry interval to every few days, like every 4-5 days instead of every seven days (weekly). This change increases the chance that the device will try to connect at different days of the week. +Unlike manual certificate renewal, the device doesn't perform an automatic MDM client certificate renewal if the certificate is already expired. To make sure the device has enough time to automatically renew, we recommend you set a renewal period a couple months (40-60 days) before the certificate expires. And, set the renewal retry interval to every few days, like every 4-5 days instead of every seven days (weekly). This change increases the chance that the device tries to connect at different days of the week. ## Certificate renewal response @@ -99,7 +99,7 @@ When RequestType is set to Renew, the web service verifies the following (in add - The client's certificate is in the renewal period - The certificate is issued by the enrollment service - The requester is the same as the requester for initial enrollment -- For standard client's request, the client hasn't been blocked +- For standard client's request, the client isn't blocked After validation is completed, the web service retrieves the PKCS#10 content from the PKCS#7 BinarySecurityToken. The rest is the same as initial enrollment, except that the Provisioning XML only needs to have the new certificate issued by the CA. diff --git a/windows/client-management/config-lock.md b/windows/client-management/config-lock.md index 30b905a41d..f497c86712 100644 --- a/windows/client-management/config-lock.md +++ b/windows/client-management/config-lock.md @@ -2,7 +2,7 @@ title: Secured-core configuration lock description: A secured-core PC (SCPC) feature that prevents configuration drift from secured-core PC features caused by unintentional misconfiguration. ms.topic: conceptual -ms.date: 08/10/2023 +ms.date: 07/08/2024 appliesto: - ✅ Windows 11 --- @@ -63,7 +63,7 @@ The steps to turn on config lock using Microsoft Intune are as follows: Config lock is designed to ensure that a secured-core PC isn't unintentionally misconfigured. You keep the ability to enable or disable SCPC features, for example, firmware protection. You can make these changes with group policies or MDM services like Microsoft Intune. -:::image type="content" source="images/configlock-mem-firmwareprotect.png" alt-text="The Defender Firmware protection setting, with a description of Windows Defender System Guard protects your device from compromised firmware. The setting is set to Off."::: +:::image type="content" source="images/configlock-mem-firmwareprotect.png" alt-text="The Defender Firmware protection setting, with a description of System Guard protects your device from compromised firmware. The setting is set to Off."::: ## FAQ diff --git a/windows/client-management/declared-configuration-extensibility.md b/windows/client-management/declared-configuration-extensibility.md index 3121be77f0..7b1f9991f8 100644 --- a/windows/client-management/declared-configuration-extensibility.md +++ b/windows/client-management/declared-configuration-extensibility.md @@ -1,13 +1,13 @@ --- title: Declared configuration extensibility description: Learn more about declared configuration extensibility through native WMI providers. -ms.date: 09/26/2023 +ms.date: 07/08/2024 ms.topic: how-to --- # Declared configuration extensibility providers -The declared configuration enrollment, which supports the declared configuration client stack, offers extensibility through native WMI providers. This feature instantiates and interfaces with a Windows Management Instrumentation (WMI) provider that has implemented a management infrastructure (MI) interface. The interface must implement GetTargetResource, TestTargetResource, and SetTargetResource methods, and may implement any number of string properties. +The declared configuration enrollment, which supports the declared configuration client stack, offers extensibility through native WMI providers. This feature instantiates and interfaces with a Windows Management Instrumentation (WMI) provider that implements a management infrastructure (MI) interface. The interface must implement GetTargetResource, TestTargetResource, and SetTargetResource methods, and can implement any number of string properties. > [!NOTE] > Only string properties are currently supported by extensibility providers. @@ -51,7 +51,7 @@ uint32 SetTargetResource( To create a native WMI provider, follow the steps outlined in [How to implement an MI provider](/previous-versions/windows/desktop/wmi_v2/how-to-implement-an-mi-provider). These steps include how to generate the source code for an MI interface using the `Convert-MofToProvider.exe` tool to generate the DLL and prepare it for placement. -1. Create a MOF file that defines the schema for the desired state configuration resource including parameters and methods. This file includes the required parameters for the resource. +1. Create a Managed Object Format (MOF) file that defines the schema for the desired state configuration resource including parameters and methods. This file includes the required parameters for the resource. 2. Copy the schema MOF file along with any required files into the provider tools directory, for example: ProviderGenerationTool. 3. Edit the required files and include the correct file names and class names. 4. Invoke the provider generator tool to generate the provider's project files. diff --git a/windows/client-management/declared-configuration.md b/windows/client-management/declared-configuration.md index f655d1ae19..e12a89b7ca 100644 --- a/windows/client-management/declared-configuration.md +++ b/windows/client-management/declared-configuration.md @@ -1,7 +1,7 @@ --- title: Declared configuration protocol description: Learn more about using declared configuration protocol for desired state management of Windows devices. -ms.date: 09/26/2023 +ms.date: 07/08/2024 ms.topic: overview --- diff --git a/windows/client-management/device-update-management.md b/windows/client-management/device-update-management.md index c298893a3a..5f61783f99 100644 --- a/windows/client-management/device-update-management.md +++ b/windows/client-management/device-update-management.md @@ -2,7 +2,7 @@ title: Mobile device management MDM for device updates description: Windows provides several APIs to help mobile device management (MDM) solutions manage updates. Learn how to use these APIs to implement update management. ms.topic: conceptual -ms.date: 08/10/2023 +ms.date: 07/08/2024 ms.collection: - highpri - tier2 @@ -25,7 +25,7 @@ In particular, Windows provides APIs to enable MDMs to: - Enter a per-device update approval list. The list makes sure devices only install updates that are approved and tested. - Approve end-user license agreements (EULAs) for the end user so update deployment can be automated even for updates with EULAs. -This article provides independent software vendors (ISV) with the information they need to implement update management in Windows. For more information, see [Policy CSP - Update](mdm/policy-csp-update.md). +This article provides independent software publishers (ISV) with the information they need to implement update management in Windows. For more information, see [Policy CSP - Update](mdm/policy-csp-update.md). > [!NOTE] > The OMA DM APIs for specifying update approvals and getting compliance status refer to updates by using an Update ID. The Update ID is a GUID that identifies a particular update. The MDM will want to show IT-friendly information about the update, instead of a raw GUID, including the update's title, description, KB, update type, like a security update or service pack. For more information, see [[MS-WSUSSS]: Windows Update Services: Server-Server Protocol](/openspecs/windows_protocols/ms-wsusss/f49f0c3e-a426-4b4b-b401-9aeb2892815c). @@ -88,7 +88,7 @@ This section describes a possible algorithm for using the server-server sync pro First some background: -- If you have a multi-tenant MDM, the update metadata can be kept in a shared partition, since it's common to all tenants. +- If you have a multitenant MDM, the update metadata can be kept in a shared partition, since it's common to all tenants. - A metadata sync service can then be implemented. The service periodically calls server-server sync to pull in metadata for the updates IT cares about. - The MDM component that uses OMA DM to control devices (described in the next section) should send the metadata sync service the list of needed updates it gets from each client, if those updates aren't already known to the device. @@ -130,7 +130,7 @@ The following screenshots of the administrator console show the list of update t ### SyncML example -Set auto update to notify and defer. +Set Microsoft AutoUpdate to notify and defer. ```xml diff --git a/windows/client-management/disconnecting-from-mdm-unenrollment.md b/windows/client-management/disconnecting-from-mdm-unenrollment.md index 612dd07651..cfc52d7c69 100644 --- a/windows/client-management/disconnecting-from-mdm-unenrollment.md +++ b/windows/client-management/disconnecting-from-mdm-unenrollment.md @@ -2,7 +2,7 @@ title: Disconnecting from the management infrastructure (unenrollment) description: Disconnecting is initiated either locally by the user using a phone or remotely by the IT admin using management server. ms.topic: conceptual -ms.date: 08/10/2023 +ms.date: 07/08/2024 --- # Disconnecting from the management infrastructure (unenrollment) @@ -22,14 +22,14 @@ During disconnection, the client executes the following tasks: In Windows, after the user confirms the account deletion command and before the account is deleted, the MDM client will notify to the MDM server that the account will be removed. This notification is a best-effort action as no retry is built in to ensure the notification is successfully sent to the device. -This action utilizes the OMA DM generic alert 1226 function to send a user an MDM unenrollment user alert to the MDM server after the device accepts the user unenrollment request, but before it deletes any enterprise data. The server should set the expectation that unenrollment may succeed or fail, and the server can check whether the device is unenrolled by either checking whether the device calls back at scheduled time or by sending a push notification to the device to see whether it responds back. If the server plans to send a push notification, it should allow for some delay to give the device the time to complete the unenrollment work. +This action utilizes the OMA DM generic alert 1226 function to send a user an MDM unenrollment user alert to the MDM server after the device accepts the user unenrollment request, but before it deletes any enterprise data. The server should set the expectation that unenrollment can succeed or fail, and the server can check whether the device is unenrolled by either checking whether the device calls back at scheduled time or by sending a push notification to the device to see whether it responds back. If the server plans to send a push notification, it should allow for some delay to give the device the time to complete the unenrollment work. > [!NOTE] > The user unenrollment is an OMA DM standard. For more information about the 1226 generic alert, see the OMA Device Management Protocol specification (OMA-TS-DM\_Protocol-V1\_2\_1-20080617-A), available from the [OMA website](https://www.openmobilealliance.org/release/DM/V1_1_2-20031209-A/). The vendor uses the Type attribute to specify what type of generic alert it is. For device initiated MDM unenrollment, the alert type is **com.microsoft:mdm.unenrollment.userrequest**. -After the user elects to unenroll, any active MDM OMA DM sessions are terminated. After that, the DM client starts a DM session, including a user unenroll generic alert in the first package that it sends to the server. +After the user elects to unenroll, any active MDM OMA DM sessions are terminated. After that, the DMClient starts a DM session, including a user unenroll generic alert in the first package that it sends to the server. The following sample shows an OMA DM first package that contains a generic alert message. For more information on WP OMA DM support, see the [OMA DM protocol support](oma-dm-protocol-support.md) article. @@ -107,15 +107,13 @@ You can only use the Work Access page to unenroll under the following conditions - Enrollment was done using bulk enrollment. - Enrollment was created using the Work Access page. - - ## Unenrollment from Microsoft Entra join When a user is enrolled into MDM through Microsoft Entra join and later, the enrollment disconnects, there's no warning that the user will lose Windows Information Protection (WIP) data. The disconnection message doesn't indicate the loss of WIP data. ![aadj unenerollment.](images/azure-ad-unenrollment.png) -During the process in which a device is enrolled into MDM through Microsoft Entra join and then remotely unenrolled, the device may get into a state where it must be reimaged. When devices are remotely unenrolled from MDM, the Microsoft Entra association is also removed. This safeguard is in place to avoid leaving the corporate devices in unmanaged state. +During the process in which a device is enrolled into MDM through Microsoft Entra join and then remotely unenrolled, the device can get into a state where it must be reimaged. When devices are remotely unenrolled from MDM, the Microsoft Entra association is also removed. This safeguard is in place to avoid leaving the corporate devices in unmanaged state. Before remotely unenrolling corporate devices, you must ensure that there is at least one admin user on the device that isn't part of Microsoft Entra ID, otherwise the device won't have any admin user after the operation. diff --git a/windows/client-management/enable-admx-backed-policies-in-mdm.md b/windows/client-management/enable-admx-backed-policies-in-mdm.md index 00618845b9..db0f36a085 100644 --- a/windows/client-management/enable-admx-backed-policies-in-mdm.md +++ b/windows/client-management/enable-admx-backed-policies-in-mdm.md @@ -3,7 +3,7 @@ title: Enable ADMX policies in MDM description: Use this step-by-step guide to configure a selected set of Group Policy administrative templates (ADMX policies) in Mobile Device Management (MDM). ms.topic: conceptual ms.localizationpriority: medium -ms.date: 08/10/2023 +ms.date: 07/08/2024 --- # Enable ADMX policies in MDM diff --git a/windows/client-management/enroll-a-windows-10-device-automatically-using-group-policy.md b/windows/client-management/enroll-a-windows-10-device-automatically-using-group-policy.md index f9ccd5cc0a..409c283821 100644 --- a/windows/client-management/enroll-a-windows-10-device-automatically-using-group-policy.md +++ b/windows/client-management/enroll-a-windows-10-device-automatically-using-group-policy.md @@ -2,7 +2,7 @@ title: Enroll a Windows device automatically using Group Policy description: Learn how to use a Group Policy to trigger autoenrollment to MDM for Active Directory (AD) domain-joined devices. ms.topic: conceptual -ms.date: 08/10/2023 +ms.date: 07/08/2024 ms.collection: - highpri - tier2 @@ -12,7 +12,7 @@ ms.collection: You can use a Group Policy to trigger autoenrollment to Mobile Device Management (MDM) for Active Directory (AD) domain-joined devices. -The enrollment into Intune is triggered by a group policy created on your local AD and happens without any user interaction. This cause-and-effect mechanism means you can automatically mass-enroll a large number of domain-joined corporate devices into Microsoft Intune. The enrollment process starts in the background once you sign in to the device with your Microsoft Entra account. +The group policy created on your local AD triggers enrollment into Intune without any user interaction. This cause-and-effect mechanism means you can automatically mass-enroll a large number of domain-joined corporate devices into Microsoft Intune. The enrollment process starts in the background once you sign in to the device with your Microsoft Entra account. **Requirements**: diff --git a/windows/client-management/enterprise-app-management.md b/windows/client-management/enterprise-app-management.md index b6e975a1c8..323376d673 100644 --- a/windows/client-management/enterprise-app-management.md +++ b/windows/client-management/enterprise-app-management.md @@ -2,7 +2,7 @@ title: Enterprise app management description: This article covers one of the key mobile device management (MDM) features for managing the lifecycle of apps across Windows devices. ms.topic: conceptual -ms.date: 08/10/2023 +ms.date: 07/08/2024 --- # Enterprise app management @@ -116,7 +116,7 @@ There are two basic types of apps you can deploy: - Store apps. - Enterprise signed apps. -To deploy enterprise signed apps, you must enable a setting on the device to allow trusted apps. The apps can be signed by a Microsoft approved root (such as Symantec), an enterprise deployed root, or apps that are self-signed. This section covers the steps to configure the device for non-store app deployment. +To deploy enterprise signed apps, you must enable a setting on the device to allow trusted apps. The apps can be signed by a Microsoft approved root (such as Symantec), an enterprise deployed root, or apps that are self-signed. This section covers the steps to configure the device for nonstore app deployment. ### Unlock the device for non-Store apps @@ -154,7 +154,7 @@ Here's an example: ### Unlock the device for developer mode -Development of apps on Windows devices no longer requires a special license. You can enable debugging and deployment of non-packaged apps using [ApplicationManagement/AllowDeveloperUnlock](mdm/policy-csp-applicationmanagement.md) policy in Policy CSP. +Development of apps on Windows devices no longer requires a special license. You can enable debugging and deployment of nonpackaged apps using [ApplicationManagement/AllowDeveloperUnlock](mdm/policy-csp-applicationmanagement.md) policy in Policy CSP. AllowDeveloperUnlock policy enables the development mode on the device. The AllowDeveloperUnlock isn't configured by default, which means only Microsoft Store apps can be installed. If the management server explicitly sets the value to off, the setting is disabled in the settings panel on the device. @@ -238,8 +238,8 @@ If you purchased an app from the Store for Business, the app license must be dep In the SyncML, you need to specify the following information in the `Exec` command: -- License ID - This ID is specified in the LocURI. The License ID for the offline license is referred to as the "Content ID" in the license file. You can retrieve this information from the Base64 encoded license download from the Store for Business. -- License Content - This content is specified in the data section. The License Content is the Base64 encoded blob of the license. +- License ID - This ID is specified in the LocURI. The License ID for the offline license is referred to as the "Content ID" in the license file. You can retrieve this information from the Base 64 encoded license download from the Store for Business. +- License Content - This content is specified in the data section. The License Content is the Base 64 encoded blob of the license. Here's an example of an offline license installation. @@ -469,7 +469,7 @@ When an app installation is completed, a Windows notification is sent. You can a - NOT\_INSTALLED (0) - The node was added, but the execution wasn't completed. - INSTALLING (1) - Execution has started, but the deployment hasn't completed. If the deployment completes regardless of success, then this value is updated. - FAILED (2) - Installation failed. The details of the error can be found under LastError and LastErrorDescription. - - INSTALLED (3) - Once an install is successful this node is cleaned up. If the clean up action hasn't completed, then this state may briefly appear. + - INSTALLED (3) - Once an install is successful this node is cleaned up. If the clean-up action hasn't completed, then this state may briefly appear. - LastError - The last error reported by the app deployment server. - LastErrorDescription - Describes the last error reported by the app deployment server. - Status - An integer that indicates the progress of the app installation. In cases of an HTTPS location, this status shows the estimated download progress. Status isn't available for provisioning and only used for user-based installations. For provisioning, the value is always 0. diff --git a/windows/client-management/esim-enterprise-management.md b/windows/client-management/esim-enterprise-management.md index 970b5917af..2a28981591 100644 --- a/windows/client-management/esim-enterprise-management.md +++ b/windows/client-management/esim-enterprise-management.md @@ -3,7 +3,7 @@ title: eSIM Enterprise Management description: Learn how Mobile Device Management (MDM) Providers support the eSIM Profile Management Solution on Windows. ms.localizationpriority: medium ms.topic: conceptual -ms.date: 08/10/2023 +ms.date: 07/08/2024 --- # How Mobile Device Management Providers support eSIM Management on Windows @@ -28,7 +28,7 @@ If you're a Mobile Device Management (MDM) Provider and want to support eSIM Man - Assess solution type that you would like to provide your customers - Batch/offline solution - IT Admin can manually import a flat file containing list of eSIM activation codes, and provision eSIM on LTE enabled devices. -- Operator doesn't have visibility over status of the eSIM profiles and device eSIM has been downloaded and installed to +- Operator doesn't have visibility over status of the eSIM profiles - Real-time solution - MDM automatically syncs with the Operator backend system for subscription pool and eSIM management, via SIM vendor solution component. IT Admin can view subscription pool and provision eSIM in real time. - Operator is notified of the status of each eSIM profile and has visibility on which devices are being used diff --git a/windows/client-management/federated-authentication-device-enrollment.md b/windows/client-management/federated-authentication-device-enrollment.md index ecb42e8160..32b2fef7ef 100644 --- a/windows/client-management/federated-authentication-device-enrollment.md +++ b/windows/client-management/federated-authentication-device-enrollment.md @@ -2,7 +2,7 @@ title: Federated authentication device enrollment description: This section provides an example of the mobile device enrollment protocol using federated authentication policy. ms.topic: conceptual -ms.date: 08/10/2023 +ms.date: 07/08/2024 --- # Federated authentication device enrollment @@ -122,7 +122,7 @@ The discovery response is in the XML format and includes the following fields: > [!NOTE] > The HTTP server response must not set Transfer-Encoding to Chunked; it must be sent as one message. -When authentication policy is set to be Federated, Web Authentication Broker (WAB) is used by the enrollment client to get a security token. The WAB start page URL is provided by the discovery service in the response message. The enrollment client calls the WAB API within the response message to start the WAB process. WAB pages are server hosted web pages. The server should build those pages to fit the device screen nicely and be as consistent as possible to other builds in the MDM enrollment UI. The opaque security token that is returned from WAB as an endpage is used by the enrollment client as the device security secret during the client certificate enrollment request call. +When authentication policy is set to be Federated, Web Authentication Broker (WAB) is used by the enrollment client to get a security token. The WAB start page URL is provided by the discovery service in the response message. The enrollment client calls the WAB API within the response message to start the WAB process. WAB pages are server hosted web pages. The server should build those pages to fit the device screen nicely and be as consistent as possible to other builds in the MDM enrollment UI. The opaque security token that is returned from WAB as an end page is used by the enrollment client as the device security secret during the client certificate enrollment request call. > [!NOTE] > Instead of relying on the user agent string that is passed during authentication to get information, such as the OS version, use the following guidance: @@ -183,7 +183,7 @@ Content-Length: 556 ``` -The server has to send a POST to a redirect URL of the form `ms-app://string` (the URL scheme is ms-app) as indicated in the POST method action. The security token value is the base64-encoded string `http://docs.oasis-open.org/wss/2004/01/oasis-200401-wss-wssecurity-secext-1.0.xsd\#base64binary` contained in the `` EncodingType attribute. Windows does the binary encode when it sends it back to enrollment server, in the form its just HTML encoded. This string is opaque to the enrollment client; the client doesn't interpret the string. +The server has to send a POST to a redirect URL of the form `ms-app://string` (the URL scheme is ms-app) as indicated in the POST method action. The security token value is the base64-encoded string `http://docs.oasis-open.org/wss/2004/01/oasis-200401-wss-wssecurity-secext-1.0.xsd\#base64binary` contained in the `` EncodingType attribute. Windows does the binary encode when it sends it back to enrollment server, in the form it's just HTML encoded. This string is opaque to the enrollment client; the client doesn't interpret the string. The following example shows a response received from the discovery web service that requires authentication via WAB. @@ -367,7 +367,7 @@ The following snippet shows the policy web service response. ## Enrollment web service -This web service implements the MS-WSTEP protocol. It processes the RequestSecurityToken (RST) message from the client, authenticates the client, requests the certificate from the CA, and returns it in the RequestSecurityTokenResponse (RSTR) to the client. Besides the issued certificate, the response also contains configurations needed to provision the DM client. +This web service implements the MS-WSTEP protocol. It processes the RequestSecurityToken (RST) message from the client, authenticates the client, requests the certificate from the CA, and returns it in the RequestSecurityTokenResponse (RSTR) to the client. Besides the issued certificate, the response also contains configurations needed to provision the DMClient. The RequestSecurityToken (RST) must have the user credential and a certificate request. The user credential in an RST SOAP envelope is the same as in GetPolicies, and can vary depending on whether the authentication policy is OnPremise or Federated. The BinarySecurityToken in an RST SOAP body contains a Base64-encoded PKCS\#10 certificate request, which is generated by the client based on the enrollment policy. The client could have requested an enrollment policy by using MS-XCEP before requesting a certificate using MS-WSTEP. If the PKCS\#10 certificate request is accepted by the certification authority (CA) (the key length, hashing algorithm, and so on, match the certificate template), the client can enroll successfully. @@ -471,15 +471,15 @@ Similar to the TokenType in the RST, the RSTR uses a custom ValueType in the Bin The provisioning XML contains: - The requested certificates (required) -- The DM client configuration (required) +- The DMClient configuration (required) -The client installs the client certificate, the enterprise root certificate, and intermediate CA certificate if there's one. The DM configuration includes the name and address of the DM server, which client certificate to use, and schedules when the DM client calls back to the server. +The client installs the client certificate, the enterprise root certificate, and intermediate CA certificate if there's one. The DM configuration includes the name and address of the DM server, which client certificate to use, and schedules when the DMClient calls back to the server. Enrollment provisioning XML should contain a maximum of one root certificate and one intermediate CA certificate that is needed to chain up the MDM client certificate. More root and intermediate CA certificates could be provisioned during an OMA DM session. When root and intermediate CA certificates are being provisioned, the supported CSP node path is: CertificateStore/Root/System for root certificate provisioning, CertificateStore/My/User for intermediate CA certificate provisioning. -Here's a sample RSTR message and a sample of OMA client provisioning XML within RSTR. For more information about the configuration service providers (CSPs) used in provisioning XML, see the Enterprise settings, policies and app management section. +Here's a sample RSTR message and a sample of OMA client provisioning XML within RSTR. For more information about the configuration service providers (CSPs) used in provisioning XML, see the Enterprise settings, policies, and app management section. The following example shows the enrollment web service response. diff --git a/windows/client-management/implement-server-side-mobile-application-management.md b/windows/client-management/implement-server-side-mobile-application-management.md index e9c0ab5ecc..6d2acde09e 100644 --- a/windows/client-management/implement-server-side-mobile-application-management.md +++ b/windows/client-management/implement-server-side-mobile-application-management.md @@ -2,7 +2,7 @@ title: Support for Windows Information Protection (WIP) on Windows description: Learn about implementing the Windows version of Windows Information Protection (WIP), which is a lightweight solution for managing company data access and security on personal devices. ms.topic: conceptual -ms.date: 08/10/2023 +ms.date: 07/08/2024 --- # Support for Windows Information Protection (WIP) on Windows @@ -11,8 +11,6 @@ Windows Information Protection (WIP) is a lightweight solution for managing comp [!INCLUDE [Deprecate Windows Information Protection](../security/information-protection/windows-information-protection/includes/wip-deprecation.md)] - - ## Integration with Microsoft Entra ID WIP is integrated with Microsoft Entra identity service. The WIP service supports Microsoft Entra integrated authentication for the user and the device during enrollment and the downloading of WIP policies. WIP integration with Microsoft Entra ID is similar to mobile device management (MDM) integration. See [Microsoft Entra integration with MDM](azure-active-directory-integration-with-mdm.md). @@ -78,7 +76,7 @@ Since the [Poll](mdm/dmclient-csp.md#deviceproviderprovideridpoll) node isn't pr ## Supported CSPs -WIP supports the following configuration service providers (CSPs). All other CSPs are blocked. Note the list may change later based on customer feedback: +WIP supports the following configuration service providers (CSPs). All other CSPs are blocked. Note the list can change later based on customer feedback: - [AppLocker CSP](mdm/applocker-csp.md) for configuration of Windows Information Protection enterprise allowed apps. - [ClientCertificateInstall CSP](mdm/clientcertificateinstall-csp.md) for installing VPN and Wi-Fi certs. diff --git a/windows/client-management/index.yml b/windows/client-management/index.yml index 860eb04bfe..184e34da03 100644 --- a/windows/client-management/index.yml +++ b/windows/client-management/index.yml @@ -13,7 +13,7 @@ metadata: author: vinaypamnani-msft ms.author: vinpa manager: aaroncz - ms.date: 01/18/2024 + ms.date: 07/08/2024 localization_priority: medium # linkListType: architecture | concept | deploy | download | get-started | how-to-guide | learn | overview | quickstart | reference | tutorial | video | whats-new diff --git a/windows/client-management/manage-windows-10-in-your-organization-modern-management.md b/windows/client-management/manage-windows-10-in-your-organization-modern-management.md index cc6af7d11f..a43167be49 100644 --- a/windows/client-management/manage-windows-10-in-your-organization-modern-management.md +++ b/windows/client-management/manage-windows-10-in-your-organization-modern-management.md @@ -2,13 +2,13 @@ title: Manage Windows devices in your organization - transitioning to modern management description: This article offers strategies for deploying and managing Windows devices, including deploying Windows in a mixed environment. ms.localizationpriority: medium -ms.date: 08/10/2023 +ms.date: 07/08/2024 ms.topic: conceptual --- # Manage Windows devices in your organization - transitioning to modern management -Use of personal devices for work, and employees working outside the office, may be changing how your organization manages devices. Certain parts of your organization might require deep, granular control over devices, while other parts might seek lighter, scenario-based management that empowers the modern workforce. Windows offers the flexibility to respond to these changing requirements, and can easily be deployed in a mixed environment. You can shift the percentage of Windows devices gradually, following the normal upgrade schedules used in your organization. +Use of personal devices for work, and users working outside the office, may be changing how your organization manages devices. Certain parts of your organization might require deep, granular control over devices, while other parts might seek lighter, scenario-based management that empowers the modern workforce. Windows offers the flexibility to respond to these changing requirements, and can easily be deployed in a mixed environment. You can shift the percentage of Windows devices gradually, following the normal upgrade schedules used in your organization. Your organization can support various operating systems across a wide range of device types, and manage them through a common set of tools such as Microsoft Configuration Manager, Microsoft Intune, or other third-party products. This "managed diversity" enables you to empower your users to benefit from the productivity enhancements available on their new Windows devices (including rich touch and ink support), while still maintaining your standards for security and manageability. It can help you and your organization benefit from Windows faster. @@ -45,13 +45,13 @@ You can use Windows and services like [Microsoft Entra ID](/azure/active-directo You can envision user and device management as falling into these two categories: -- **Corporate (CYOD) or personal (BYOD) devices used by mobile users for SaaS apps such as Office 365.** With Windows, your employees can self-provision their devices: +- **Corporate (CYOD) or personal (BYOD) devices used by mobile users for SaaS apps such as Office 365.** With Windows, your users can self-provision their devices: - For corporate devices, they can set up corporate access with [Microsoft Entra join](/azure/active-directory/devices/overview). When you offer them Microsoft Entra join with automatic Intune MDM enrollment, they can bring devices into a corporate-managed state in [*one step*](https://techcommunity.microsoft.com/t5/azure-active-directory-identity/windows-10-azure-ad-and-microsoft-intune-automatic-mdm/ba-p/244067), all from the cloud. - Microsoft Entra join is also a great solution for temporary staff, partners, or other part-time employees. These accounts can be kept separate from the on-premises AD domain but still access needed corporate resources. + Microsoft Entra join is also a great solution for temporary staff, partners, or other part-time users. These accounts can be kept separate from the on-premises AD domain but still access needed corporate resources. - - Likewise, for personal devices, employees can use a new, simplified [BYOD experience](/azure/active-directory/devices/overview) to add their work account to Windows, then access work resources on the device. + - Likewise, for personal devices, users can use a new, simplified [BYOD experience](/azure/active-directory/devices/overview) to add their work account to Windows, then access work resources on the device. - **Domain joined PCs and tablets used for traditional applications and access to important resources.** These applications and resources may be traditional ones that require authentication or accessing highly sensitive or classified resources on-premises. @@ -71,7 +71,7 @@ As you review the roles in your organization, you can use the following generali ## Settings and configuration -Your configuration requirements are defined by multiple factors, including the level of management needed, the devices and data managed, and your industry requirements. Meanwhile, employees are frequently concerned about IT applying strict policies to their personal devices, but they still want access to corporate email and documents. You can create a consistent set of configurations across PCs, tablets, and phones through the common MDM layer. +Your configuration requirements are defined by multiple factors, including the level of management needed, the devices and data managed, and your industry requirements. Meanwhile, users are frequently concerned about IT applying strict policies to their personal devices, but they still want access to corporate email and documents. You can create a consistent set of configurations across PCs, tablets, and phones through the common MDM layer. - **MDM**: MDM gives you a way to configure settings that achieve your administrative intent without exposing every possible setting. (In contrast, group policy exposes fine-grained settings that you control individually.) One benefit of MDM is that it enables you to apply broader privacy, security, and application management settings through lighter and more efficient tools. MDM also allows you to target Internet-connected devices to manage policies without using group policy that requires on-premises domain-joined devices. This provision makes MDM the best choice for devices that are constantly on the go. diff --git a/windows/client-management/mdm-collect-logs.md b/windows/client-management/mdm-collect-logs.md index bc39a4ceb7..0a3b883dcd 100644 --- a/windows/client-management/mdm-collect-logs.md +++ b/windows/client-management/mdm-collect-logs.md @@ -2,7 +2,7 @@ title: Collect MDM logs description: Learn how to collect MDM logs. Examining these logs can help diagnose enrollment or device management issues in Windows devices managed by an MDM server. ms.topic: conceptual -ms.date: 08/10/2023 +ms.date: 07/08/2024 ms.collection: - highpri - tier2 @@ -40,7 +40,7 @@ mdmdiagnosticstool.exe -area "DeviceEnrollment;DeviceProvisioning;Autopilot" -zi ### Understanding zip structure -The zip file has logs according to the areas that were used in the command. This explanation is based on DeviceEnrollment, DeviceProvisioning and Autopilot areas. It applies to the zip files collected via command line or Feedback Hub +The zip file has logs according to the areas that were used in the command. This explanation is based on DeviceEnrollment, DeviceProvisioning, and Autopilot areas. It applies to the zip files collected via command line or Feedback Hub - DiagnosticLogCSP_Collector_Autopilot_*: Autopilot etls - DiagnosticLogCSP_Collector_DeviceProvisioning_*: Provisioning etls (Microsoft-Windows-Provisioning-Diagnostics-Provider) diff --git a/windows/client-management/mdm-diagnose-enrollment.md b/windows/client-management/mdm-diagnose-enrollment.md index 1d2c92bd1f..5610d29c34 100644 --- a/windows/client-management/mdm-diagnose-enrollment.md +++ b/windows/client-management/mdm-diagnose-enrollment.md @@ -2,7 +2,7 @@ title: Diagnose MDM enrollment failures description: Learn how to diagnose enrollment failures for Windows devices ms.topic: conceptual -ms.date: 08/10/2023 +ms.date: 07/08/2024 --- # Diagnose MDM enrollment diff --git a/windows/client-management/mdm-enrollment-of-windows-devices.md b/windows/client-management/mdm-enrollment-of-windows-devices.md index c3140fd86d..f57170b82c 100644 --- a/windows/client-management/mdm-enrollment-of-windows-devices.md +++ b/windows/client-management/mdm-enrollment-of-windows-devices.md @@ -5,12 +5,12 @@ ms.topic: conceptual ms.collection: - highpri - tier2 -ms.date: 08/10/2023 +ms.date: 07/08/2024 --- # MDM enrollment of Windows devices -In today's cloud-first world, enterprise IT departments increasingly want to let employees use their own devices, or even choose and purchase corporate-owned devices. Connecting your devices to work makes it easy for you to access your organization's resources, such as apps, the corporate network, and email. +In today's cloud-first world, enterprise IT departments increasingly want to let users use their own devices, or even choose and purchase corporate-owned devices. Connecting your devices to work makes it easy for you to access your organization's resources, such as apps, the corporate network, and email. > [!NOTE] > When you connect your device using mobile device management (MDM) enrollment, your organization may enforce certain policies on your device. @@ -24,8 +24,6 @@ You can connect corporate-owned devices to work by either joining the device to > [!NOTE] > For devices joined to on-premises Active Directory, see [Group policy enrollment](enroll-a-windows-10-device-automatically-using-group-policy.md). - - ### Connect your device to a Microsoft Entra domain (join Microsoft Entra ID) All Windows devices can be connected to a Microsoft Entra domain. These devices can be connected during OOBE. Additionally, desktop devices can be connected to a Microsoft Entra domain using the Settings app. diff --git a/windows/client-management/mdm-known-issues.md b/windows/client-management/mdm-known-issues.md index 10bd7ebaa1..43e571ecb6 100644 --- a/windows/client-management/mdm-known-issues.md +++ b/windows/client-management/mdm-known-issues.md @@ -2,7 +2,7 @@ title: Known issues in MDM description: Learn about known issues for Windows devices in MDM ms.topic: conceptual -ms.date: 08/10/2023 +ms.date: 07/08/2024 --- # Known issues @@ -11,11 +11,11 @@ ms.date: 08/10/2023 A Get command inside an atomic command isn't supported. -## Apps installed using WMI classes are not removed +## Apps installed using WMI classes aren't removed Applications installed using WMI classes aren't removed when the MDM account is removed from device. -## Passing CDATA in SyncML does not work +## Passing CDATA in SyncML doesn't work Passing CDATA in data in SyncML to ConfigManager and CSPs doesn't work. @@ -222,8 +222,6 @@ Alternatively you can use the following procedure to create an EAP Configuration After the MDM client automatically renews the WNS channel URI, the MDM client will immediately check in with the MDM server. Henceforth, for every MDM client check-in, the MDM server should send a GET request for "ProviderID/Push/ChannelURI" to retrieve the latest channel URI and compare it with the existing channel URI; then update the channel URI if necessary. - - ## User provisioning failure in Microsoft Entra joined devices For Microsoft Entra joined devices, provisioning `.\User` resources fails when the user isn't logged in as a Microsoft Entra user. If you attempt to join Microsoft Entra ID from **Settings** > **System** > **About** user interface, ensure to sign out and sign in with Microsoft Entra credentials to get your organizational configuration from your MDM server. This behavior is by design. @@ -232,6 +230,6 @@ For Microsoft Entra joined devices, provisioning `.\User` resources fails when t If you want to use the certificate used for VPN authentication also for Kerberos authentication (required if you need access to on-premises resources using NTLM or Kerberos), the user's certificate must meet the requirements for smart card certificate, the Subject field should contain the DNS domain name in the DN or the SAN should contain a fully qualified UPN so that the DC can be located from the DNS registrations. If certificates that don't meet these requirements are used for VPN, users may fail to access resources that require Kerberos authentication. -## Device management agent for the push-button reset is not working +## Device management agent for the push-button reset isn't working The DM agent for [push-button reset](/windows-hardware/manufacture/desktop/push-button-reset-overview) keeps the registry settings for OMA DM sessions, but deletes the task schedules. The client enrollment is retained, but it never syncs with the MDM service. diff --git a/windows/client-management/mdm-overview.md b/windows/client-management/mdm-overview.md index 7b31fe006a..7be2352c9b 100644 --- a/windows/client-management/mdm-overview.md +++ b/windows/client-management/mdm-overview.md @@ -1,7 +1,7 @@ --- title: Mobile Device Management overview description: Windows provides an enterprise-level solution to mobile management, to help IT pros comply with security policies while avoiding compromise of user's privacy. -ms.date: 08/10/2023 +ms.date: 07/08/2024 ms.topic: conceptual ms.localizationpriority: medium ms.collection: @@ -56,8 +56,6 @@ For information about the MDM policies defined in the Intune security baseline, No. Only one MDM is allowed. - - ### How do I set the maximum number of Microsoft Entra joined devices per user? 1. Sign in to the portal as tenant admin: . diff --git a/windows/client-management/mobile-device-enrollment.md b/windows/client-management/mobile-device-enrollment.md index 5d0537216a..214a73f052 100644 --- a/windows/client-management/mobile-device-enrollment.md +++ b/windows/client-management/mobile-device-enrollment.md @@ -2,7 +2,7 @@ title: Mobile device enrollment description: Learn how mobile device enrollment verifies that only authenticated and authorized devices are managed by the enterprise. ms.topic: conceptual -ms.date: 08/10/2023 +ms.date: 07/08/2024 ms.collection: - highpri - tier2 @@ -43,13 +43,13 @@ The certificate enrollment is an implementation of the MS-WSTEP protocol. ### Management configuration -The server sends provisioning XML that contains a server certificate (for TLS/SSL server authentication), a client certificate issued by enterprise CA, DM client bootstrap information (for the client to communicate with the management server), an enterprise application token (for the user to install enterprise applications), and the link to download the Company Hub application. +The server sends provisioning XML that contains a server certificate (for TLS/SSL server authentication), a client certificate issued by enterprise CA, DMClient bootstrap information (for the client to communicate with the management server), an enterprise application token (for the user to install enterprise applications), and the link to download the Company Hub application. The following articles describe the end-to-end enrollment process using various authentication methods: - [Federated authentication device enrollment](federated-authentication-device-enrollment.md) - [Certificate authentication device enrollment](certificate-authentication-device-enrollment.md) -- [On-premise authentication device enrollment](on-premise-authentication-device-enrollment.md) +- [On-premises authentication device enrollment](on-premise-authentication-device-enrollment.md) > [!NOTE] > As a best practice, don't use hardcoded server-side checks on values such as: @@ -168,4 +168,4 @@ TraceID is a freeform text node that is logged. It should identify the server si - [MDM enrollment of Windows-based devices](mdm-enrollment-of-windows-devices.md) - [Federated authentication device enrollment](federated-authentication-device-enrollment.md) - [Certificate authentication device enrollment](certificate-authentication-device-enrollment.md) -- [On-premise authentication device enrollment](on-premise-authentication-device-enrollment.md) +- [On-premises authentication device enrollment](on-premise-authentication-device-enrollment.md) diff --git a/windows/client-management/new-in-windows-mdm-enrollment-management.md b/windows/client-management/new-in-windows-mdm-enrollment-management.md index dcfbdeb34b..053a0dd779 100644 --- a/windows/client-management/new-in-windows-mdm-enrollment-management.md +++ b/windows/client-management/new-in-windows-mdm-enrollment-management.md @@ -3,7 +3,7 @@ title: What's new in MDM enrollment and management description: Discover what's new and breaking changes in mobile device management (MDM) enrollment and management experience across all Windows devices. ms.topic: conceptual ms.localizationpriority: medium -ms.date: 08/10/2023 +ms.date: 07/08/2024 --- # What's new in mobile device enrollment and management diff --git a/windows/client-management/oma-dm-protocol-support.md b/windows/client-management/oma-dm-protocol-support.md index 3d1ff0619c..5caf42c5f0 100644 --- a/windows/client-management/oma-dm-protocol-support.md +++ b/windows/client-management/oma-dm-protocol-support.md @@ -2,7 +2,7 @@ title: OMA DM protocol support description: See how the OMA DM client communicates with the server over HTTPS and uses DM Sync (OMA DM v1.2) as the message payload. ms.topic: conceptual -ms.date: 08/10/2023 +ms.date: 07/08/2024 --- # OMA DM protocol support diff --git a/windows/client-management/on-premise-authentication-device-enrollment.md b/windows/client-management/on-premise-authentication-device-enrollment.md index 0d3a3b1a1d..e6c445b43c 100644 --- a/windows/client-management/on-premise-authentication-device-enrollment.md +++ b/windows/client-management/on-premise-authentication-device-enrollment.md @@ -2,7 +2,7 @@ title: On-premises authentication device enrollment description: This section provides an example of the mobile device enrollment protocol using on-premises authentication policy. ms.topic: conceptual -ms.date: 08/10/2023 +ms.date: 07/08/2024 --- # On-premises authentication device enrollment diff --git a/windows/client-management/push-notification-windows-mdm.md b/windows/client-management/push-notification-windows-mdm.md index 0ac4310aab..e0842698e8 100644 --- a/windows/client-management/push-notification-windows-mdm.md +++ b/windows/client-management/push-notification-windows-mdm.md @@ -2,7 +2,7 @@ title: Push notification support for device management description: The DMClient CSP supports the ability to configure push-initiated device management sessions. ms.topic: conceptual -ms.date: 08/10/2023 +ms.date: 07/08/2024 --- # Push notification support for device management diff --git a/windows/client-management/server-requirements-windows-mdm.md b/windows/client-management/server-requirements-windows-mdm.md index 6b3a303e0a..92e09679f4 100644 --- a/windows/client-management/server-requirements-windows-mdm.md +++ b/windows/client-management/server-requirements-windows-mdm.md @@ -2,7 +2,7 @@ title: Server requirements for using OMA DM to manage Windows devices description: Learn about the general server requirements for using OMA DM to manage Windows devices, including the supported versions of OMA DM. ms.topic: conceptual -ms.date: 08/10/2023 +ms.date: 07/08/2024 --- # Server requirements for using OMA DM to manage Windows devices @@ -11,11 +11,11 @@ The following list shows the general server requirements for using OMA DM to man - The OMA DM server must support the OMA DM v1.1.2 or later protocol. -- Secure Sockets Layer (TLS/SSL) must be on the OMA DM server, and it must provide server certificate-based authentication, data integrity check, and data encryption. If the certificate isn't issued by a commercial Certification Authority whose root certificate is preinstalled in the device, you must provision the enterprise root certificate in the device's Root store. +- Secure Sockets Layer (TLS/SSL) must be on the OMA DM server, and it must provide server certificate-based authentication, data integrity check, and data encryption. If the certificate isn't issued by a public Certification Authority whose root certificate is preinstalled in the device, you must provision the enterprise root certificate in the device's Root store. - To authenticate the client at the application level, you must use either Basic or MD5 client authentication. -- The server MD5 nonce must be renewed in each DM session. The DM client sends the new server nonce for the next session to the server over the Status element in every DM session. +- The server MD5 nonce must be renewed in each DM session. The DMClient sends the new server nonce for the next session to the server over the Status element in every DM session. - The MD5 binary nonce is sent over XML B64 encoded format, but the octal form of the binary data should be used when the service calculates the hash. diff --git a/windows/client-management/structure-of-oma-dm-provisioning-files.md b/windows/client-management/structure-of-oma-dm-provisioning-files.md index 170d213948..a1fcf0777c 100644 --- a/windows/client-management/structure-of-oma-dm-provisioning-files.md +++ b/windows/client-management/structure-of-oma-dm-provisioning-files.md @@ -2,7 +2,7 @@ title: Structure of OMA DM provisioning files description: Learn about the structure of OMA DM provisioning files, for example how each message is composed of a header, specified by the SyncHdr element, and a message body. ms.topic: conceptual -ms.date: 08/10/2023 +ms.date: 07/08/2024 --- # Structure of OMA DM provisioning files diff --git a/windows/client-management/understanding-admx-backed-policies.md b/windows/client-management/understanding-admx-backed-policies.md index 7b80861923..f327359fe3 100644 --- a/windows/client-management/understanding-admx-backed-policies.md +++ b/windows/client-management/understanding-admx-backed-policies.md @@ -2,7 +2,7 @@ title: Understanding ADMX policies description: You can use ADMX policies for Windows mobile device management (MDM) across Windows devices. ms.topic: conceptual -ms.date: 08/10/2023 +ms.date: 07/08/2024 --- # Understanding ADMX policies diff --git a/windows/client-management/using-powershell-scripting-with-the-wmi-bridge-provider.md b/windows/client-management/using-powershell-scripting-with-the-wmi-bridge-provider.md index 5fc0485080..ca347147ab 100644 --- a/windows/client-management/using-powershell-scripting-with-the-wmi-bridge-provider.md +++ b/windows/client-management/using-powershell-scripting-with-the-wmi-bridge-provider.md @@ -2,7 +2,7 @@ title: Using PowerShell scripting with the WMI Bridge Provider description: This article covers using PowerShell Cmdlet scripts to configure per-user and per-device policy settings, and how to invoke methods through the WMI Bridge Provider. ms.topic: conceptual -ms.date: 08/10/2023 +ms.date: 07/08/2024 --- # Using PowerShell scripting with the WMI Bridge Provider diff --git a/windows/client-management/win32-and-centennial-app-policy-configuration.md b/windows/client-management/win32-and-centennial-app-policy-configuration.md index ff1887a640..363072d68c 100644 --- a/windows/client-management/win32-and-centennial-app-policy-configuration.md +++ b/windows/client-management/win32-and-centennial-app-policy-configuration.md @@ -2,7 +2,7 @@ title: Win32 and Desktop Bridge app ADMX policy Ingestion description: Ingest ADMX files and set ADMX policies for Win32 and Desktop Bridge apps. ms.topic: conceptual -ms.date: 08/10/2023 +ms.date: 07/08/2024 --- # Win32 and Desktop Bridge app ADMX policy Ingestion diff --git a/windows/client-management/windows-mdm-enterprise-settings.md b/windows/client-management/windows-mdm-enterprise-settings.md index 03c28bfba7..a9b47a78e9 100644 --- a/windows/client-management/windows-mdm-enterprise-settings.md +++ b/windows/client-management/windows-mdm-enterprise-settings.md @@ -1,17 +1,17 @@ --- title: Enterprise settings and policy management -description: The DM client manages the interaction between a device and a server. Learn more about the client-server management workflow. +description: The DMClient manages the interaction between a device and a server. Learn more about the client-server management workflow. ms.topic: conceptual -ms.date: 08/10/2023 +ms.date: 07/08/2024 --- # Enterprise settings and policy management -The actual management interaction between the device and server is done via the DM client. The DM client communicates with the enterprise management server via DM v1.2 SyncML syntax. The full description of the OMA DM protocol v1.2 can be found at the [OMA website](https://technical.openmobilealliance.org/). +The actual management interaction between the device and server is done via the DMClient. The DMClient communicates with the enterprise management server via DM v1.2 SyncML syntax. The full description of the OMA DM protocol v1.2 can be found at the [OMA website](https://technical.openmobilealliance.org/). -Enterprise MDM settings are exposed via various configuration service providers to the DM client. For the list of available configuration service providers, see [Configuration service provider reference](mdm/index.yml). +Enterprise MDM settings are exposed via various configuration service providers to the DMClient. For the list of available configuration service providers, see [Configuration service provider reference](mdm/index.yml). -Windows currently supports one MDM server. The DM client that is configured via the enrollment process is granted access to enterprise related settings. During the enrollment process, the task scheduler is configured to invoke the DM client to periodically poll the MDM server. +Windows currently supports one MDM server. The DMClient that is configured via the enrollment process is granted access to enterprise related settings. During the enrollment process, the task scheduler is configured to invoke the DMClient to periodically poll the MDM server. The following diagram shows the work flow between server and client. @@ -21,9 +21,9 @@ The following diagram shows the work flow between server and client. This protocol defines an HTTPS-based client/server communication with DM SyncML XML as the package payload that carries management requests and execution results. The configuration request is addressed via a managed object (MO). The settings supported by the managed object are represented in a conceptual tree structure. This logical view of configurable device settings simplifies the way the server addresses the device settings by isolating the implementation details from the conceptual tree structure. -To facilitate security-enhanced communication with the remote server for enterprise management, Windows supports certificate-based mutual authentication over an encrypted TLS/SSL HTTP channel between the DM client and management service. The server and client certificates are provisioned during the enrollment process. +To facilitate security-enhanced communication with the remote server for enterprise management, Windows supports certificate-based mutual authentication over an encrypted TLS/SSL HTTP channel between the DMClient and management service. The server and client certificates are provisioned during the enrollment process. -The DM client configuration, company policy enforcement, business application management, and device inventory are all exposed or expressed via configuration service providers (CSPs). CSPs are the Windows term for managed objects. The DM client communicates with the server and sends configuration request to CSPs. The server only needs to know the logical local URIs defined by those CSP nodes in order to use the DM protocol XML to manage the device. +The DMClient configuration, company policy enforcement, business application management, and device inventory are all exposed or expressed via configuration service providers (CSPs). CSPs are the Windows term for managed objects. The DMClient communicates with the server and sends configuration request to CSPs. The server only needs to know the logical local URIs defined by those CSP nodes in order to use the DM protocol XML to manage the device. Here's a summary of the DM tasks supported for enterprise management: diff --git a/windows/client-management/wmi-providers-supported-in-windows.md b/windows/client-management/wmi-providers-supported-in-windows.md index 9afd80ebd2..610f0e36b9 100644 --- a/windows/client-management/wmi-providers-supported-in-windows.md +++ b/windows/client-management/wmi-providers-supported-in-windows.md @@ -2,7 +2,7 @@ title: WMI providers supported in Windows description: Manage settings and applications on devices that subscribe to the Mobile Device Management (MDM) service with Windows Management Infrastructure (WMI). ms.topic: conceptual -ms.date: 08/10/2023 +ms.date: 07/08/2024 --- # WMI providers supported in Windows From 547d66de3e69f73eca03cfedfa35f5d0386d0cf2 Mon Sep 17 00:00:00 2001 From: "Vinay Pamnani (from Dev Box)" Date: Mon, 8 Jul 2024 11:19:47 -0600 Subject: [PATCH 88/99] Update --- .../bulk-enrollment-using-windows-provisioning-tool.md | 4 ++-- 1 file changed, 2 insertions(+), 2 deletions(-) diff --git a/windows/client-management/bulk-enrollment-using-windows-provisioning-tool.md b/windows/client-management/bulk-enrollment-using-windows-provisioning-tool.md index 2b0ca2a334..c248120cff 100644 --- a/windows/client-management/bulk-enrollment-using-windows-provisioning-tool.md +++ b/windows/client-management/bulk-enrollment-using-windows-provisioning-tool.md @@ -1,13 +1,13 @@ --- title: Bulk enrollment -description: Bulk enrollment is an efficient way to set up a large number of devices to manage by an MDM server without the need to reimage the devices. +description: Bulk enrollment is an efficient way to set up an MDM server to manage a large number of devices without the need to reimage the devices. ms.topic: conceptual ms.date: 07/08/2024 --- # Bulk enrollment using Windows Configuration Designer -Bulk enrollment is an efficient way to set up a large number of devices to manage by an MDM server without the need to reimage the devices. You can use the [Provisioning CSP](mdm/provisioning-csp.md) for bulk enrollment, except for the Microsoft Entra join enrollment scenario. +Bulk enrollment is an efficient way to set up an MDM server to manage a large number of devices without the need to reimage the devices. You can use the [Provisioning CSP](mdm/provisioning-csp.md) for bulk enrollment, except for the Microsoft Entra join enrollment scenario. ## Typical use cases From 419fe51e16743233f54044b6ff3a7a8f1ab47296 Mon Sep 17 00:00:00 2001 From: tiaraquan Date: Mon, 8 Jul 2024 10:48:26 -0700 Subject: [PATCH 89/99] Freshness --- .../deploy/windows-autopatch-groups-overview.md | 2 +- .../windows-autopatch-customize-windows-update-settings.md | 2 +- .../operate/windows-autopatch-device-alerts.md | 2 +- .../operate/windows-autopatch-exclude-device.md | 2 +- .../operate/windows-autopatch-groups-update-management.md | 2 +- .../windows-autopatch-manage-driver-and-firmware-updates.md | 2 +- ...dows-autopatch-manage-windows-feature-update-releases.md | 2 +- .../windows-autopatch-policy-health-and-remediation.md | 2 +- .../operate/windows-autopatch-unenroll-tenant.md | 2 +- .../windows-autopatch-windows-feature-update-overview.md | 2 +- ...indows-autopatch-windows-feature-update-status-report.md | 2 +- ...dows-autopatch-windows-feature-update-trending-report.md | 2 +- ...ndows-autopatch-windows-quality-update-communications.md | 6 +++--- ...windows-autopatch-windows-quality-update-end-user-exp.md | 6 +++--- .../windows-autopatch-windows-quality-update-overview.md | 2 +- .../windows-autopatch-windows-quality-update-signals.md | 6 +++--- ...indows-autopatch-windows-quality-update-status-report.md | 4 ++-- ...ws-autopatch-windows-quality-update-summary-dashboard.md | 2 +- ...dows-autopatch-windows-quality-update-trending-report.md | 4 ++-- 19 files changed, 27 insertions(+), 27 deletions(-) diff --git a/windows/deployment/windows-autopatch/deploy/windows-autopatch-groups-overview.md b/windows/deployment/windows-autopatch/deploy/windows-autopatch-groups-overview.md index 2e2ab90f1a..030de871bb 100644 --- a/windows/deployment/windows-autopatch/deploy/windows-autopatch-groups-overview.md +++ b/windows/deployment/windows-autopatch/deploy/windows-autopatch-groups-overview.md @@ -1,7 +1,7 @@ --- title: Windows Autopatch groups overview description: This article explains what Autopatch groups are -ms.date: 07/20/2023 +ms.date: 07/08/2024 ms.service: windows-client ms.subservice: itpro-updates ms.topic: conceptual diff --git a/windows/deployment/windows-autopatch/operate/windows-autopatch-customize-windows-update-settings.md b/windows/deployment/windows-autopatch/operate/windows-autopatch-customize-windows-update-settings.md index 8afa348a89..8425bd6056 100644 --- a/windows/deployment/windows-autopatch/operate/windows-autopatch-customize-windows-update-settings.md +++ b/windows/deployment/windows-autopatch/operate/windows-autopatch-customize-windows-update-settings.md @@ -1,7 +1,7 @@ --- title: Customize Windows Update settings Autopatch groups experience description: How to customize Windows Updates with Autopatch groups -ms.date: 07/25/2023 +ms.date: 07/08/2024 ms.service: windows-client ms.subservice: itpro-updates ms.topic: how-to diff --git a/windows/deployment/windows-autopatch/operate/windows-autopatch-device-alerts.md b/windows/deployment/windows-autopatch/operate/windows-autopatch-device-alerts.md index b8373cff62..4556c227ea 100644 --- a/windows/deployment/windows-autopatch/operate/windows-autopatch-device-alerts.md +++ b/windows/deployment/windows-autopatch/operate/windows-autopatch-device-alerts.md @@ -1,7 +1,7 @@ --- title: Device alerts description: Provide notifications and information about the necessary steps to keep your devices up to date. -ms.date: 08/01/2023 +ms.date: 07/08/2023 ms.service: windows-client ms.subservice: itpro-updates ms.topic: how-to diff --git a/windows/deployment/windows-autopatch/operate/windows-autopatch-exclude-device.md b/windows/deployment/windows-autopatch/operate/windows-autopatch-exclude-device.md index 89a23620fb..3bd258dff3 100644 --- a/windows/deployment/windows-autopatch/operate/windows-autopatch-exclude-device.md +++ b/windows/deployment/windows-autopatch/operate/windows-autopatch-exclude-device.md @@ -1,7 +1,7 @@ --- title: Exclude a device description: This article explains how to exclude a device from the Windows Autopatch service -ms.date: 08/08/2023 +ms.date: 07/08/2024 ms.service: windows-client ms.subservice: itpro-updates ms.topic: how-to diff --git a/windows/deployment/windows-autopatch/operate/windows-autopatch-groups-update-management.md b/windows/deployment/windows-autopatch/operate/windows-autopatch-groups-update-management.md index b6e42c0987..ee20c918b3 100644 --- a/windows/deployment/windows-autopatch/operate/windows-autopatch-groups-update-management.md +++ b/windows/deployment/windows-autopatch/operate/windows-autopatch-groups-update-management.md @@ -1,7 +1,7 @@ --- title: Software update management for Autopatch groups description: This article provides an overview of how updates are handled with Autopatch groups -ms.date: 07/25/2023 +ms.date: 07/08/2024 ms.service: windows-client ms.subservice: itpro-updates ms.topic: overview diff --git a/windows/deployment/windows-autopatch/operate/windows-autopatch-manage-driver-and-firmware-updates.md b/windows/deployment/windows-autopatch/operate/windows-autopatch-manage-driver-and-firmware-updates.md index 9c38e97260..d3a0379d03 100644 --- a/windows/deployment/windows-autopatch/operate/windows-autopatch-manage-driver-and-firmware-updates.md +++ b/windows/deployment/windows-autopatch/operate/windows-autopatch-manage-driver-and-firmware-updates.md @@ -1,7 +1,7 @@ --- title: Manage driver and firmware updates description: This article explains how you can manage driver and firmware updates with Windows Autopatch -ms.date: 08/22/2023 +ms.date: 07/08/2024 ms.service: windows-client ms.subservice: itpro-updates ms.topic: how-to diff --git a/windows/deployment/windows-autopatch/operate/windows-autopatch-manage-windows-feature-update-releases.md b/windows/deployment/windows-autopatch/operate/windows-autopatch-manage-windows-feature-update-releases.md index 159e11b310..0ed4a2cdb6 100644 --- a/windows/deployment/windows-autopatch/operate/windows-autopatch-manage-windows-feature-update-releases.md +++ b/windows/deployment/windows-autopatch/operate/windows-autopatch-manage-windows-feature-update-releases.md @@ -1,7 +1,7 @@ --- title: Manage Windows feature update releases description: This article explains how you can manage Windows feature updates with Autopatch groups -ms.date: 07/25/2023 +ms.date: 07/08/2024 ms.service: windows-client ms.subservice: itpro-updates ms.topic: conceptual diff --git a/windows/deployment/windows-autopatch/operate/windows-autopatch-policy-health-and-remediation.md b/windows/deployment/windows-autopatch/operate/windows-autopatch-policy-health-and-remediation.md index 208f3ef552..d0371e0e59 100644 --- a/windows/deployment/windows-autopatch/operate/windows-autopatch-policy-health-and-remediation.md +++ b/windows/deployment/windows-autopatch/operate/windows-autopatch-policy-health-and-remediation.md @@ -1,7 +1,7 @@ --- title: policy health and remediation description: Describes what Autopatch does it detects policies in the tenant are either missing or modified to states that affect the service -ms.date: 07/25/2023 +ms.date: 07/08/2024 ms.service: windows-client ms.subservice: itpro-updates ms.topic: how-to diff --git a/windows/deployment/windows-autopatch/operate/windows-autopatch-unenroll-tenant.md b/windows/deployment/windows-autopatch/operate/windows-autopatch-unenroll-tenant.md index a628585c63..52ae00fad6 100644 --- a/windows/deployment/windows-autopatch/operate/windows-autopatch-unenroll-tenant.md +++ b/windows/deployment/windows-autopatch/operate/windows-autopatch-unenroll-tenant.md @@ -1,7 +1,7 @@ --- title: Unenroll your tenant description: This article explains what unenrollment means for your organization and what actions you must take. -ms.date: 08/08/2023 +ms.date: 07/08/2024 ms.service: windows-client ms.subservice: itpro-updates ms.topic: how-to diff --git a/windows/deployment/windows-autopatch/operate/windows-autopatch-windows-feature-update-overview.md b/windows/deployment/windows-autopatch/operate/windows-autopatch-windows-feature-update-overview.md index f0300bdd0c..2bf45427ed 100644 --- a/windows/deployment/windows-autopatch/operate/windows-autopatch-windows-feature-update-overview.md +++ b/windows/deployment/windows-autopatch/operate/windows-autopatch-windows-feature-update-overview.md @@ -1,7 +1,7 @@ --- title: Windows feature updates overview description: This article explains how Windows feature updates are managed with Autopatch groups -ms.date: 07/25/2023 +ms.date: 07/08/2024 ms.service: windows-client ms.subservice: itpro-updates ms.topic: conceptual diff --git a/windows/deployment/windows-autopatch/operate/windows-autopatch-windows-feature-update-status-report.md b/windows/deployment/windows-autopatch/operate/windows-autopatch-windows-feature-update-status-report.md index 35f31b5ee8..d8e5c7be2a 100644 --- a/windows/deployment/windows-autopatch/operate/windows-autopatch-windows-feature-update-status-report.md +++ b/windows/deployment/windows-autopatch/operate/windows-autopatch-windows-feature-update-status-report.md @@ -1,7 +1,7 @@ --- title: Feature update status report description: Provides a per device view of the current Windows OS upgrade status for all devices registered with Windows Autopatch. -ms.date: 07/25/2023 +ms.date: 07/08/2024 ms.service: windows-client ms.subservice: itpro-updates ms.topic: how-to diff --git a/windows/deployment/windows-autopatch/operate/windows-autopatch-windows-feature-update-trending-report.md b/windows/deployment/windows-autopatch/operate/windows-autopatch-windows-feature-update-trending-report.md index 9e08f94fd5..2d724d0af1 100644 --- a/windows/deployment/windows-autopatch/operate/windows-autopatch-windows-feature-update-trending-report.md +++ b/windows/deployment/windows-autopatch/operate/windows-autopatch-windows-feature-update-trending-report.md @@ -1,7 +1,7 @@ --- title: Feature update trending report description: Provides a visual representation of Windows OS upgrade trends for all devices over the last 90 days. -ms.date: 07/25/2023 +ms.date: 07/08/2024 ms.service: windows-client ms.subservice: itpro-updates ms.topic: how-to diff --git a/windows/deployment/windows-autopatch/operate/windows-autopatch-windows-quality-update-communications.md b/windows/deployment/windows-autopatch/operate/windows-autopatch-windows-quality-update-communications.md index 2433c7acb7..4c86c00301 100644 --- a/windows/deployment/windows-autopatch/operate/windows-autopatch-windows-quality-update-communications.md +++ b/windows/deployment/windows-autopatch/operate/windows-autopatch-windows-quality-update-communications.md @@ -1,7 +1,7 @@ --- -title: Windows quality update communications for Autopatch groups -description: This article explains Windows quality update communications for Autopatch groups -ms.date: 07/25/2023 +title: Windows quality update communications +description: This article explains Windows quality update communications +ms.date: 07/08/2024 ms.service: windows-client ms.subservice: itpro-updates ms.topic: conceptual diff --git a/windows/deployment/windows-autopatch/operate/windows-autopatch-windows-quality-update-end-user-exp.md b/windows/deployment/windows-autopatch/operate/windows-autopatch-windows-quality-update-end-user-exp.md index b0319f299b..5e617d6e2c 100644 --- a/windows/deployment/windows-autopatch/operate/windows-autopatch-windows-quality-update-end-user-exp.md +++ b/windows/deployment/windows-autopatch/operate/windows-autopatch-windows-quality-update-end-user-exp.md @@ -1,7 +1,7 @@ --- -title: Windows quality update end user experience for Autopatch groups -description: This article explains the Windows quality update end user experience using the Autopatch groups exp -ms.date: 07/25/2023 +title: Windows quality update end user experience +description: This article explains the Windows quality update end user experience +ms.date: 07/08/2024 ms.service: windows-client ms.subservice: itpro-updates ms.topic: conceptual diff --git a/windows/deployment/windows-autopatch/operate/windows-autopatch-windows-quality-update-overview.md b/windows/deployment/windows-autopatch/operate/windows-autopatch-windows-quality-update-overview.md index 4831b08a21..e9dc59e3a6 100644 --- a/windows/deployment/windows-autopatch/operate/windows-autopatch-windows-quality-update-overview.md +++ b/windows/deployment/windows-autopatch/operate/windows-autopatch-windows-quality-update-overview.md @@ -1,6 +1,6 @@ --- title: Windows quality updates overview with Autopatch groups experience -description: This article explains how Windows quality updates are managed with Autopatch groups +description: This article explains how Windows quality updates are managed with Autopatch ms.date: 05/24/2024 ms.service: windows-client ms.subservice: itpro-updates diff --git a/windows/deployment/windows-autopatch/operate/windows-autopatch-windows-quality-update-signals.md b/windows/deployment/windows-autopatch/operate/windows-autopatch-windows-quality-update-signals.md index 7f403c3a2c..caf9f9c2c5 100644 --- a/windows/deployment/windows-autopatch/operate/windows-autopatch-windows-quality-update-signals.md +++ b/windows/deployment/windows-autopatch/operate/windows-autopatch-windows-quality-update-signals.md @@ -1,7 +1,7 @@ --- -title: Windows quality update release signals with Autopatch groups -description: This article explains the Windows quality update release signals with Autopatch groups -ms.date: 07/25/2023 +title: Windows quality update release signals +description: This article explains the Windows quality update release signals +ms.date: 07/08/2024 ms.service: windows-client ms.subservice: itpro-updates ms.topic: conceptual diff --git a/windows/deployment/windows-autopatch/operate/windows-autopatch-windows-quality-update-status-report.md b/windows/deployment/windows-autopatch/operate/windows-autopatch-windows-quality-update-status-report.md index 2d99ee3d3a..34b11def99 100644 --- a/windows/deployment/windows-autopatch/operate/windows-autopatch-windows-quality-update-status-report.md +++ b/windows/deployment/windows-autopatch/operate/windows-autopatch-windows-quality-update-status-report.md @@ -1,7 +1,7 @@ --- title: Quality update status report -description: Provides a per device view of the current update status for all Windows Autopatch enrolled devices with Autopatch groups. -ms.date: 07/25/2023 +description: Provides a per device view of the current update status for all Windows Autopatch enrolled devices. +ms.date: 07/08/2024 ms.service: windows-client ms.subservice: itpro-updates ms.topic: how-to diff --git a/windows/deployment/windows-autopatch/operate/windows-autopatch-windows-quality-update-summary-dashboard.md b/windows/deployment/windows-autopatch/operate/windows-autopatch-windows-quality-update-summary-dashboard.md index 64ed6a7a91..21c684b548 100644 --- a/windows/deployment/windows-autopatch/operate/windows-autopatch-windows-quality-update-summary-dashboard.md +++ b/windows/deployment/windows-autopatch/operate/windows-autopatch-windows-quality-update-summary-dashboard.md @@ -1,6 +1,6 @@ --- title: Windows quality update summary dashboard -description: Provides a summary view of the current update status for all devices enrolled into Windows Autopatch with Autopatch groups +description: Provides a summary view of the current update status for all devices enrolled into Windows Autopatch ms.date: 01/22/2024 ms.service: windows-client ms.subservice: itpro-updates diff --git a/windows/deployment/windows-autopatch/operate/windows-autopatch-windows-quality-update-trending-report.md b/windows/deployment/windows-autopatch/operate/windows-autopatch-windows-quality-update-trending-report.md index ccfb4fd07a..a956837968 100644 --- a/windows/deployment/windows-autopatch/operate/windows-autopatch-windows-quality-update-trending-report.md +++ b/windows/deployment/windows-autopatch/operate/windows-autopatch-windows-quality-update-trending-report.md @@ -1,7 +1,7 @@ --- title: Quality update trending report -description: Provides a visual representation of the update status trend for all devices over the last 90 days with Autopatch groups. -ms.date: 09/01/2023 +description: Provides a visual representation of the update status trend for all devices over the last 90 days. +ms.date: 07/08/2024 ms.service: windows-client ms.subservice: itpro-updates ms.topic: how-to From d42306cfe8c352138f624b41423d69f0f6d9c46a Mon Sep 17 00:00:00 2001 From: tiaraquan Date: Mon, 8 Jul 2024 11:06:41 -0700 Subject: [PATCH 90/99] More freshness --- .../deploy/windows-autopatch-admin-contacts.md | 2 +- .../deploy/windows-autopatch-groups-manage-autopatch-groups.md | 2 +- .../deploy/windows-autopatch-post-reg-readiness-checks.md | 2 +- .../overview/windows-autopatch-deployment-guide.md | 2 +- .../windows-autopatch/overview/windows-autopatch-faq.yml | 2 +- .../windows-autopatch/overview/windows-autopatch-overview.md | 2 +- .../windows-autopatch/overview/windows-autopatch-privacy.md | 2 +- .../overview/windows-autopatch-roles-responsibilities.md | 2 +- .../prepare/windows-autopatch-configure-network.md | 2 +- .../prepare/windows-autopatch-enroll-tenant.md | 2 +- .../prepare/windows-autopatch-enrollment-support-request.md | 2 +- .../windows-autopatch/prepare/windows-autopatch-fix-issues.md | 2 +- .../references/windows-autopatch-conflicting-configurations.md | 2 +- ...patch-driver-and-firmware-updates-public-preview-addendum.md | 2 +- .../references/windows-autopatch-microsoft-365-policies.md | 2 +- .../windows-autopatch-windows-update-unsupported-policies.md | 2 +- 16 files changed, 16 insertions(+), 16 deletions(-) diff --git a/windows/deployment/windows-autopatch/deploy/windows-autopatch-admin-contacts.md b/windows/deployment/windows-autopatch/deploy/windows-autopatch-admin-contacts.md index 690fe5613b..be8a0b2063 100644 --- a/windows/deployment/windows-autopatch/deploy/windows-autopatch-admin-contacts.md +++ b/windows/deployment/windows-autopatch/deploy/windows-autopatch-admin-contacts.md @@ -1,7 +1,7 @@ --- title: Add and verify admin contacts description: This article explains how to add and verify admin contacts -ms.date: 09/15/2023 +ms.date: 07/08/2024 ms.service: windows-client ms.subservice: itpro-updates ms.topic: how-to diff --git a/windows/deployment/windows-autopatch/deploy/windows-autopatch-groups-manage-autopatch-groups.md b/windows/deployment/windows-autopatch/deploy/windows-autopatch-groups-manage-autopatch-groups.md index e541bf8d2e..cd9cd8132d 100644 --- a/windows/deployment/windows-autopatch/deploy/windows-autopatch-groups-manage-autopatch-groups.md +++ b/windows/deployment/windows-autopatch/deploy/windows-autopatch-groups-manage-autopatch-groups.md @@ -1,7 +1,7 @@ --- title: Manage Windows Autopatch groups description: This article explains how to manage Autopatch groups -ms.date: 12/13/2023 +ms.date: 07/08/2024 ms.service: windows-client ms.subservice: itpro-updates ms.topic: how-to diff --git a/windows/deployment/windows-autopatch/deploy/windows-autopatch-post-reg-readiness-checks.md b/windows/deployment/windows-autopatch/deploy/windows-autopatch-post-reg-readiness-checks.md index e48ce95422..bbed3ec3b1 100644 --- a/windows/deployment/windows-autopatch/deploy/windows-autopatch-post-reg-readiness-checks.md +++ b/windows/deployment/windows-autopatch/deploy/windows-autopatch-post-reg-readiness-checks.md @@ -1,7 +1,7 @@ --- title: Post-device registration readiness checks description: This article details how post-device registration readiness checks are performed in Windows Autopatch -ms.date: 09/16/2023 +ms.date: 07/08/2024 ms.service: windows-client ms.subservice: itpro-updates ms.topic: conceptual diff --git a/windows/deployment/windows-autopatch/overview/windows-autopatch-deployment-guide.md b/windows/deployment/windows-autopatch/overview/windows-autopatch-deployment-guide.md index 82e1181f87..df3a6cd77d 100644 --- a/windows/deployment/windows-autopatch/overview/windows-autopatch-deployment-guide.md +++ b/windows/deployment/windows-autopatch/overview/windows-autopatch-deployment-guide.md @@ -1,7 +1,7 @@ --- title: Windows Autopatch deployment guide description: This guide explains how to successfully deploy Windows Autopatch in your environment -ms.date: 08/24/2023 +ms.date: 07/08/2024 ms.service: windows-client ms.subservice: itpro-updates ms.topic: how-to diff --git a/windows/deployment/windows-autopatch/overview/windows-autopatch-faq.yml b/windows/deployment/windows-autopatch/overview/windows-autopatch-faq.yml index f92f2bf122..8e0f87c3a4 100644 --- a/windows/deployment/windows-autopatch/overview/windows-autopatch-faq.yml +++ b/windows/deployment/windows-autopatch/overview/windows-autopatch-faq.yml @@ -4,7 +4,7 @@ metadata: description: Answers to frequently asked questions about Windows Autopatch. ms.service: windows-client ms.topic: faq - ms.date: 12/04/2023 + ms.date: 07/08/2024 audience: itpro ms.localizationpriority: medium manager: aaroncz diff --git a/windows/deployment/windows-autopatch/overview/windows-autopatch-overview.md b/windows/deployment/windows-autopatch/overview/windows-autopatch-overview.md index 6e49a4703c..f5f9d6ac76 100644 --- a/windows/deployment/windows-autopatch/overview/windows-autopatch-overview.md +++ b/windows/deployment/windows-autopatch/overview/windows-autopatch-overview.md @@ -1,7 +1,7 @@ --- title: What is Windows Autopatch? description: Details what the service is and shortcuts to articles. -ms.date: 08/08/2023 +ms.date: 07/08/2024 ms.service: windows-client ms.subservice: itpro-updates ms.topic: conceptual diff --git a/windows/deployment/windows-autopatch/overview/windows-autopatch-privacy.md b/windows/deployment/windows-autopatch/overview/windows-autopatch-privacy.md index 4ef883d665..5b74de7688 100644 --- a/windows/deployment/windows-autopatch/overview/windows-autopatch-privacy.md +++ b/windows/deployment/windows-autopatch/overview/windows-autopatch-privacy.md @@ -1,7 +1,7 @@ --- title: Privacy description: This article provides details about the data platform and privacy compliance for Autopatch -ms.date: 09/13/2023 +ms.date: 07/08/2024 ms.service: windows-client ms.subservice: itpro-updates ms.topic: reference diff --git a/windows/deployment/windows-autopatch/overview/windows-autopatch-roles-responsibilities.md b/windows/deployment/windows-autopatch/overview/windows-autopatch-roles-responsibilities.md index f2217c4b0c..b62bc5627b 100644 --- a/windows/deployment/windows-autopatch/overview/windows-autopatch-roles-responsibilities.md +++ b/windows/deployment/windows-autopatch/overview/windows-autopatch-roles-responsibilities.md @@ -1,7 +1,7 @@ --- title: Roles and responsibilities description: This article describes the roles and responsibilities provided by Windows Autopatch and what the customer must do -ms.date: 08/31/2023 +ms.date: 07/08/2024 ms.service: windows-client ms.subservice: itpro-updates ms.topic: conceptual diff --git a/windows/deployment/windows-autopatch/prepare/windows-autopatch-configure-network.md b/windows/deployment/windows-autopatch/prepare/windows-autopatch-configure-network.md index 2633222ae7..dcbb1ae24c 100644 --- a/windows/deployment/windows-autopatch/prepare/windows-autopatch-configure-network.md +++ b/windows/deployment/windows-autopatch/prepare/windows-autopatch-configure-network.md @@ -1,7 +1,7 @@ --- title: Configure your network description: This article details the network configurations needed for Windows Autopatch -ms.date: 09/15/2023 +ms.date: 07/08/2024 ms.service: windows-client ms.subservice: itpro-updates ms.topic: how-to diff --git a/windows/deployment/windows-autopatch/prepare/windows-autopatch-enroll-tenant.md b/windows/deployment/windows-autopatch/prepare/windows-autopatch-enroll-tenant.md index b24d784042..f623474036 100644 --- a/windows/deployment/windows-autopatch/prepare/windows-autopatch-enroll-tenant.md +++ b/windows/deployment/windows-autopatch/prepare/windows-autopatch-enroll-tenant.md @@ -1,7 +1,7 @@ --- title: Enroll your tenant description: This article details how to enroll your tenant -ms.date: 09/15/2023 +ms.date: 07/08/2024 ms.service: windows-client ms.subservice: itpro-updates ms.topic: how-to diff --git a/windows/deployment/windows-autopatch/prepare/windows-autopatch-enrollment-support-request.md b/windows/deployment/windows-autopatch/prepare/windows-autopatch-enrollment-support-request.md index c349ad620f..6cd8d98e22 100644 --- a/windows/deployment/windows-autopatch/prepare/windows-autopatch-enrollment-support-request.md +++ b/windows/deployment/windows-autopatch/prepare/windows-autopatch-enrollment-support-request.md @@ -1,7 +1,7 @@ --- title: Submit a tenant enrollment support request description: This article details how to submit a tenant enrollment support request -ms.date: 09/13/2023 +ms.date: 07/08/2024 ms.service: windows-client ms.subservice: itpro-updates ms.topic: how-to diff --git a/windows/deployment/windows-autopatch/prepare/windows-autopatch-fix-issues.md b/windows/deployment/windows-autopatch/prepare/windows-autopatch-fix-issues.md index b2371addb0..d973c0f991 100644 --- a/windows/deployment/windows-autopatch/prepare/windows-autopatch-fix-issues.md +++ b/windows/deployment/windows-autopatch/prepare/windows-autopatch-fix-issues.md @@ -1,7 +1,7 @@ --- title: Fix issues found by the Readiness assessment tool description: This article details how to fix issues found by the Readiness assessment tool. -ms.date: 09/12/2023 +ms.date: 07/08/2024 ms.service: windows-client ms.subservice: itpro-updates ms.topic: how-to diff --git a/windows/deployment/windows-autopatch/references/windows-autopatch-conflicting-configurations.md b/windows/deployment/windows-autopatch/references/windows-autopatch-conflicting-configurations.md index 677faf730d..cbd7fc1142 100644 --- a/windows/deployment/windows-autopatch/references/windows-autopatch-conflicting-configurations.md +++ b/windows/deployment/windows-autopatch/references/windows-autopatch-conflicting-configurations.md @@ -1,7 +1,7 @@ --- title: Conflicting configurations description: This article explains how to remediate conflicting configurations affecting the Windows Autopatch service. -ms.date: 09/05/2023 +ms.date: 07/08/2024 ms.service: windows-client ms.subservice: itpro-updates ms.topic: conceptual diff --git a/windows/deployment/windows-autopatch/references/windows-autopatch-driver-and-firmware-updates-public-preview-addendum.md b/windows/deployment/windows-autopatch/references/windows-autopatch-driver-and-firmware-updates-public-preview-addendum.md index 9edb3f3748..8cbed6ce25 100644 --- a/windows/deployment/windows-autopatch/references/windows-autopatch-driver-and-firmware-updates-public-preview-addendum.md +++ b/windows/deployment/windows-autopatch/references/windows-autopatch-driver-and-firmware-updates-public-preview-addendum.md @@ -1,7 +1,7 @@ --- title: Driver and firmware updates for Windows Autopatch Public Preview Addendum description: This article explains how driver and firmware updates are managed in Autopatch -ms.date: 06/26/2023 +ms.date: 07/08/2024 ms.service: windows-client ms.subservice: itpro-updates ms.topic: conceptual diff --git a/windows/deployment/windows-autopatch/references/windows-autopatch-microsoft-365-policies.md b/windows/deployment/windows-autopatch/references/windows-autopatch-microsoft-365-policies.md index c08d4cf821..56d474d0f9 100644 --- a/windows/deployment/windows-autopatch/references/windows-autopatch-microsoft-365-policies.md +++ b/windows/deployment/windows-autopatch/references/windows-autopatch-microsoft-365-policies.md @@ -1,7 +1,7 @@ --- title: Microsoft 365 Apps for enterprise update policies description: This article explains the Microsoft 365 Apps for enterprise policies in Windows Autopatch -ms.date: 06/23/2023 +ms.date: 07/08/2024 ms.service: windows-client ms.subservice: itpro-updates ms.topic: conceptual diff --git a/windows/deployment/windows-autopatch/references/windows-autopatch-windows-update-unsupported-policies.md b/windows/deployment/windows-autopatch/references/windows-autopatch-windows-update-unsupported-policies.md index df04f475d9..5e6dfd39cc 100644 --- a/windows/deployment/windows-autopatch/references/windows-autopatch-windows-update-unsupported-policies.md +++ b/windows/deployment/windows-autopatch/references/windows-autopatch-windows-update-unsupported-policies.md @@ -1,7 +1,7 @@ --- title: Windows update policies description: This article explains Windows update policies in Windows Autopatch -ms.date: 09/02/2023 +ms.date: 07/08/2024 ms.service: windows-client ms.subservice: itpro-updates ms.topic: conceptual From 732f1f50b75a41404125e9ddb9e791e86bd8a869 Mon Sep 17 00:00:00 2001 From: "Vinay Pamnani (from Dev Box)" Date: Mon, 8 Jul 2024 13:58:02 -0600 Subject: [PATCH 91/99] Fix Pro applicability for some CSPs --- .../mdm/policy-csp-admx-windowsstore.md | 10 +++------- windows/client-management/mdm/policy-csp-search.md | 4 ++-- 2 files changed, 5 insertions(+), 9 deletions(-) diff --git a/windows/client-management/mdm/policy-csp-admx-windowsstore.md b/windows/client-management/mdm/policy-csp-admx-windowsstore.md index ad9da6b96b..aaadbfb085 100644 --- a/windows/client-management/mdm/policy-csp-admx-windowsstore.md +++ b/windows/client-management/mdm/policy-csp-admx-windowsstore.md @@ -1,7 +1,7 @@ --- title: ADMX_WindowsStore Policy CSP description: Learn more about the ADMX_WindowsStore Area in Policy CSP. -ms.date: 01/18/2024 +ms.date: 07/08/2024 --- @@ -200,7 +200,7 @@ Enables or disables the Store offer to update to the latest version of Windows. | Scope | Editions | Applicable OS | |:--|:--|:--| -| ❌ Device
    ✅ User | ✅ Pro
    ✅ Enterprise
    ✅ Education
    ✅ Windows SE
    ✅ IoT Enterprise / IoT Enterprise LTSC | ✅ Windows 10, version 2004 [10.0.19041.1202] and later
    ✅ Windows 10, version 2009 [10.0.19042.1202] and later
    ✅ Windows 10, version 21H1 [10.0.19043.1202] and later
    ✅ Windows 11, version 21H2 [10.0.22000] and later | +| ❌ Device
    ✅ User | ❌ Pro
    ✅ Enterprise
    ✅ Education
    ✅ Windows SE
    ✅ IoT Enterprise / IoT Enterprise LTSC | ✅ Windows 10, version 2004 [10.0.19041.1202] and later
    ✅ Windows 10, version 2009 [10.0.19042.1202] and later
    ✅ Windows 10, version 21H1 [10.0.19043.1202] and later
    ✅ Windows 11, version 21H2 [10.0.22000] and later | @@ -220,8 +220,6 @@ Denies or allows access to the Store application. -> [!NOTE] -> This policy is not supported on Windows Professional edition, and requires Windows Enterprise or Windows Education to function. For more information, see [Can't disable Microsoft Store in Windows Pro through Group Policy](/troubleshoot/windows-client/group-policy/cannot-disable-microsoft-store). @@ -261,7 +259,7 @@ Denies or allows access to the Store application. | Scope | Editions | Applicable OS | |:--|:--|:--| -| ✅ Device
    ❌ User | ✅ Pro
    ✅ Enterprise
    ✅ Education
    ✅ Windows SE
    ✅ IoT Enterprise / IoT Enterprise LTSC | ✅ Windows 10, version 2004 [10.0.19041.1202] and later
    ✅ Windows 10, version 2009 [10.0.19042.1202] and later
    ✅ Windows 10, version 21H1 [10.0.19043.1202] and later
    ✅ Windows 11, version 21H2 [10.0.22000] and later | +| ✅ Device
    ❌ User | ❌ Pro
    ✅ Enterprise
    ✅ Education
    ✅ Windows SE
    ✅ IoT Enterprise / IoT Enterprise LTSC | ✅ Windows 10, version 2004 [10.0.19041.1202] and later
    ✅ Windows 10, version 2009 [10.0.19042.1202] and later
    ✅ Windows 10, version 21H1 [10.0.19043.1202] and later
    ✅ Windows 11, version 21H2 [10.0.22000] and later | @@ -281,8 +279,6 @@ Denies or allows access to the Store application. -> [!NOTE] -> This policy is not supported on Windows Professional edition, and requires Windows Enterprise or Windows Education to function. For more information, see [Can't disable Microsoft Store in Windows Pro through Group Policy](/troubleshoot/windows-client/group-policy/cannot-disable-microsoft-store). diff --git a/windows/client-management/mdm/policy-csp-search.md b/windows/client-management/mdm/policy-csp-search.md index 1260cd7ab1..8734513a6e 100644 --- a/windows/client-management/mdm/policy-csp-search.md +++ b/windows/client-management/mdm/policy-csp-search.md @@ -1,7 +1,7 @@ --- title: Search Policy CSP description: Learn more about the Search Area in Policy CSP. -ms.date: 04/10/2024 +ms.date: 07/08/2024 --- @@ -919,7 +919,7 @@ This policy setting configures whether or not locations on removable drives can | Scope | Editions | Applicable OS | |:--|:--|:--| -| ✅ Device
    ❌ User | ✅ Pro
    ✅ Enterprise
    ✅ Education
    ✅ Windows SE
    ✅ IoT Enterprise / IoT Enterprise LTSC | ✅ Windows 10, version 1803 [10.0.17134] and later | +| ✅ Device
    ❌ User | ❌ Pro
    ✅ Enterprise
    ✅ Education
    ✅ Windows SE
    ✅ IoT Enterprise / IoT Enterprise LTSC | ✅ Windows 10, version 1803 [10.0.17134] and later | From df4f324c3c54d0b44800c1d1a352db797634c05f Mon Sep 17 00:00:00 2001 From: Meghan Stewart <33289333+mestew@users.noreply.github.com> Date: Tue, 9 Jul 2024 08:20:57 -0700 Subject: [PATCH 92/99] mdag-dep-link-fix --- windows/whats-new/deprecated-features.md | 4 ++-- 1 file changed, 2 insertions(+), 2 deletions(-) diff --git a/windows/whats-new/deprecated-features.md b/windows/whats-new/deprecated-features.md index 0b43cfa4e9..6d5b59a3ba 100644 --- a/windows/whats-new/deprecated-features.md +++ b/windows/whats-new/deprecated-features.md @@ -1,7 +1,7 @@ --- title: Deprecated features in the Windows client description: Review the list of features that Microsoft is no longer actively developing in Windows 10 and Windows 11. -ms.date: 06/11/2024 +ms.date: 07/09/2024 ms.service: windows-client ms.subservice: itpro-fundamentals ms.localizationpriority: medium @@ -54,7 +54,7 @@ The features in this article are no longer being actively developed, and might b | TLS server authentication certificates using RSA keys with key lengths shorter than 2048 bits | Support for certificates using RSA keys with key lengths shorter than 2048 bits will be deprecated. Internet standards and regulatory bodies disallowed the use of 1024-bit keys in 2013, recommending specifically that RSA keys should have a key length of 2048 bits or longer. For more information, see [Transitioning of Cryptographic Algorithms and Key Sizes - Discussion Paper (nist.gov)](https://csrc.nist.gov/CSRC/media/Projects/Key-Management/documents/transitions/Transitioning_CryptoAlgos_070209.pdf). This deprecation focuses on ensuring that all RSA certificates used for TLS server authentication must have key lengths greater than or equal to 2048 bits to be considered valid by Windows.

    TLS certificates issued by enterprise or test certification authorities (CA) aren't impacted with this change. However, we recommend that they be updated to RSA keys greater than or equal to 2048 bits as a security best practice. This change is necessary to preserve security of Windows customers using certificates for authentication and cryptographic purposes.| March 2024| | Test Base | [Test Base for Microsoft 365](/microsoft-365/test-base/overview), an Azure cloud service for application testing, is deprecated. The service will be retired in the future and will be no longer available for use after retirement. | March 2024 | | Windows Mixed Reality | [Windows Mixed Reality](/windows/mixed-reality/enthusiast-guide/before-you-start) is deprecated and will be removed in Windows 11, version 24H2. This deprecation includes the [Mixed Reality Portal](/windows/mixed-reality/enthusiast-guide/install-windows-mixed-reality) app, [Windows Mixed Reality for SteamVR](/windows/mixed-reality/enthusiast-guide/using-steamvr-with-windows-mixed-reality), and Steam VR Beta. Existing Windows Mixed Reality devices will continue to work with Steam through November 2026, if users remain on their current released version of Windows 11, version 23H2. After November 2026, Windows Mixed Reality will no longer receive security updates, nonsecurity updates, bug fixes, technical support, or online technical content updates.

    This deprecation doesn't affect HoloLens. We remain committed to HoloLens and our enterprise customers. | December 2023 | -| Microsoft Defender Application Guard for Edge | [Microsoft Defender Application Guard](/windows/security/application-security/application-isolation/microsoft-defender-application-guard/md-app-guard-overview), including the [Windows Isolated App Launcher APIs](/windows/win32/api/isolatedapplauncher/), is being deprecated for Microsoft Edge for Business and [will no longer be updated](feature-lifecycle.md). Please download the [Microsoft Edge For Business Security Whitepaper](https://edgestatic.azureedge.net/shared/cms/pdfs/Microsoft_Edge_Security_Whitepaper_v2.pdf) to learn more about Edge for Business security capabilities.

    **[Update - April 2024]**: Because Application Guard is deprecated there will not be a migration to Edge Manifest V3. The corresponding extensions and associated [Windows Store app](https://apps.microsoft.com/detail/9N8GNLC8Z9C8) will not be available after May 2024. This affects the following browsers: [*Application Guard Extension - Chrome*](https://chromewebstore.google.com/detail/application-guard-extensi/mfjnknhkkiafjajicegabkbimfhplplj) and [*Application Guard Extension - Firefox*](https://addons.mozilla.org/firefox/addon/application-guard-extension/). If you want to block unprotected browsers until you are ready to retire MDAG usage in your enterprise, we recommend using AppLocker policies or [Microsoft Edge management service](/deployedge/microsoft-edge-management-service). For more information, see [Microsoft Edge and Microsoft Defender Application Guard](/deployedge/microsoft-edge-security-windows-defender-application-guard). | December 2023 | +| Microsoft Defender Application Guard for Edge | [Microsoft Defender Application Guard](/windows/security/application-security/application-isolation/microsoft-defender-application-guard/md-app-guard-overview), including the [Windows Isolated App Launcher APIs](/windows/win32/api/isolatedapplauncher/), is being deprecated for Microsoft Edge for Business and [will no longer be updated](feature-lifecycle.md). Please download the [Microsoft Edge For Business Security Whitepaper](https://edgestatic.azureedge.net/shared/cms/pdfs/Microsoft_Edge_Security_Whitepaper_v2.pdf) to learn more about Edge for Business security capabilities.

    **[Update - April 2024]**: Because Application Guard is deprecated there will not be a migration to Edge Manifest V3. The corresponding extensions and associated [Windows Store app](https://apps.microsoft.com/detail/9N8GNLC8Z9C8) will not be available after May 2024. This affects the following browsers: *Application Guard Extension - Chrome* and *Application Guard Extension - Firefox*. If you want to block unprotected browsers until you are ready to retire MDAG usage in your enterprise, we recommend using AppLocker policies or [Microsoft Edge management service](/deployedge/microsoft-edge-management-service). For more information, see [Microsoft Edge and Microsoft Defender Application Guard](/deployedge/microsoft-edge-security-windows-defender-application-guard). | December 2023 | | Legacy console mode | The [legacy console mode](/windows/console/legacymode) is deprecated and no longer being updated. In future Windows releases, it will be available as an optional [Feature on Demand](/windows-hardware/manufacture/desktop/features-on-demand-v2--capabilities). This feature won't be installed by default. | December 2023 | | Windows speech recognition | [Windows speech recognition](https://support.microsoft.com/windows/83ff75bd-63eb-0b6c-18d4-6fae94050571) is deprecated and is no longer being developed. This feature is being replaced with [voice access](https://support.microsoft.com/topic/4dcd23ee-f1b9-4fd1-bacc-862ab611f55d). Voice access is available for Windows 11, version 22H2, or later devices. Currently, voice access supports five English locales: English - US, English - UK, English - India, English - New Zealand, English - Canada, and English - Australia. For more information, see [Setup voice access](https://support.microsoft.com/topic/set-up-voice-access-9fc44e29-12bf-4d86-bc4e-e9bb69df9a0e). | December 2023 | | Microsoft Defender Application Guard for Office | [Microsoft Defender Application Guard for Office](/microsoft-365/security/office-365-security/app-guard-for-office-install), including the [Windows Isolated App Launcher APIs](/windows/win32/api/isolatedapplauncher/), is being deprecated and will no longer be updated. We recommend transitioning to Microsoft Defender for Endpoint [attack surface reduction rules](/microsoft-365/security/defender-endpoint/overview-attack-surface-reduction) along with [Protected View](/microsoft-365/security/office-365-security/recommended-settings-for-eop-and-office365#global-settings-for-safe-attachments) and [Windows Defender Application Control](/windows/security/application-security/application-control/windows-defender-application-control/wdac). | November 2023 | From 12446859950626f4efdd25886affe7d51f8596d7 Mon Sep 17 00:00:00 2001 From: Meghan Stewart <33289333+mestew@users.noreply.github.com> Date: Tue, 9 Jul 2024 08:22:56 -0700 Subject: [PATCH 93/99] mdag-dep-link-fix --- windows/whats-new/deprecated-features.md | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/windows/whats-new/deprecated-features.md b/windows/whats-new/deprecated-features.md index 6d5b59a3ba..4c4a6712c3 100644 --- a/windows/whats-new/deprecated-features.md +++ b/windows/whats-new/deprecated-features.md @@ -54,7 +54,7 @@ The features in this article are no longer being actively developed, and might b | TLS server authentication certificates using RSA keys with key lengths shorter than 2048 bits | Support for certificates using RSA keys with key lengths shorter than 2048 bits will be deprecated. Internet standards and regulatory bodies disallowed the use of 1024-bit keys in 2013, recommending specifically that RSA keys should have a key length of 2048 bits or longer. For more information, see [Transitioning of Cryptographic Algorithms and Key Sizes - Discussion Paper (nist.gov)](https://csrc.nist.gov/CSRC/media/Projects/Key-Management/documents/transitions/Transitioning_CryptoAlgos_070209.pdf). This deprecation focuses on ensuring that all RSA certificates used for TLS server authentication must have key lengths greater than or equal to 2048 bits to be considered valid by Windows.

    TLS certificates issued by enterprise or test certification authorities (CA) aren't impacted with this change. However, we recommend that they be updated to RSA keys greater than or equal to 2048 bits as a security best practice. This change is necessary to preserve security of Windows customers using certificates for authentication and cryptographic purposes.| March 2024| | Test Base | [Test Base for Microsoft 365](/microsoft-365/test-base/overview), an Azure cloud service for application testing, is deprecated. The service will be retired in the future and will be no longer available for use after retirement. | March 2024 | | Windows Mixed Reality | [Windows Mixed Reality](/windows/mixed-reality/enthusiast-guide/before-you-start) is deprecated and will be removed in Windows 11, version 24H2. This deprecation includes the [Mixed Reality Portal](/windows/mixed-reality/enthusiast-guide/install-windows-mixed-reality) app, [Windows Mixed Reality for SteamVR](/windows/mixed-reality/enthusiast-guide/using-steamvr-with-windows-mixed-reality), and Steam VR Beta. Existing Windows Mixed Reality devices will continue to work with Steam through November 2026, if users remain on their current released version of Windows 11, version 23H2. After November 2026, Windows Mixed Reality will no longer receive security updates, nonsecurity updates, bug fixes, technical support, or online technical content updates.

    This deprecation doesn't affect HoloLens. We remain committed to HoloLens and our enterprise customers. | December 2023 | -| Microsoft Defender Application Guard for Edge | [Microsoft Defender Application Guard](/windows/security/application-security/application-isolation/microsoft-defender-application-guard/md-app-guard-overview), including the [Windows Isolated App Launcher APIs](/windows/win32/api/isolatedapplauncher/), is being deprecated for Microsoft Edge for Business and [will no longer be updated](feature-lifecycle.md). Please download the [Microsoft Edge For Business Security Whitepaper](https://edgestatic.azureedge.net/shared/cms/pdfs/Microsoft_Edge_Security_Whitepaper_v2.pdf) to learn more about Edge for Business security capabilities.

    **[Update - April 2024]**: Because Application Guard is deprecated there will not be a migration to Edge Manifest V3. The corresponding extensions and associated [Windows Store app](https://apps.microsoft.com/detail/9N8GNLC8Z9C8) will not be available after May 2024. This affects the following browsers: *Application Guard Extension - Chrome* and *Application Guard Extension - Firefox*. If you want to block unprotected browsers until you are ready to retire MDAG usage in your enterprise, we recommend using AppLocker policies or [Microsoft Edge management service](/deployedge/microsoft-edge-management-service). For more information, see [Microsoft Edge and Microsoft Defender Application Guard](/deployedge/microsoft-edge-security-windows-defender-application-guard). | December 2023 | +| Microsoft Defender Application Guard for Edge | [Microsoft Defender Application Guard](/windows/security/application-security/application-isolation/microsoft-defender-application-guard/md-app-guard-overview), including the [Windows Isolated App Launcher APIs](/windows/win32/api/isolatedapplauncher/), is being deprecated for Microsoft Edge for Business and [will no longer be updated](feature-lifecycle.md). Please download the [Microsoft Edge For Business Security Whitepaper](https://edgestatic.azureedge.net/shared/cms/pdfs/Microsoft_Edge_Security_Whitepaper_v2.pdf) to learn more about Edge for Business security capabilities.

    **[Update - April 2024]**: Because Application Guard is deprecated there will not be a migration to Edge Manifest V3. The corresponding extensions and associated Windows Store app will not be available after May 2024. This affects the following browsers: *Application Guard Extension - Chrome* and *Application Guard Extension - Firefox*. If you want to block unprotected browsers until you are ready to retire MDAG usage in your enterprise, we recommend using AppLocker policies or [Microsoft Edge management service](/deployedge/microsoft-edge-management-service). For more information, see [Microsoft Edge and Microsoft Defender Application Guard](/deployedge/microsoft-edge-security-windows-defender-application-guard). | December 2023 | | Legacy console mode | The [legacy console mode](/windows/console/legacymode) is deprecated and no longer being updated. In future Windows releases, it will be available as an optional [Feature on Demand](/windows-hardware/manufacture/desktop/features-on-demand-v2--capabilities). This feature won't be installed by default. | December 2023 | | Windows speech recognition | [Windows speech recognition](https://support.microsoft.com/windows/83ff75bd-63eb-0b6c-18d4-6fae94050571) is deprecated and is no longer being developed. This feature is being replaced with [voice access](https://support.microsoft.com/topic/4dcd23ee-f1b9-4fd1-bacc-862ab611f55d). Voice access is available for Windows 11, version 22H2, or later devices. Currently, voice access supports five English locales: English - US, English - UK, English - India, English - New Zealand, English - Canada, and English - Australia. For more information, see [Setup voice access](https://support.microsoft.com/topic/set-up-voice-access-9fc44e29-12bf-4d86-bc4e-e9bb69df9a0e). | December 2023 | | Microsoft Defender Application Guard for Office | [Microsoft Defender Application Guard for Office](/microsoft-365/security/office-365-security/app-guard-for-office-install), including the [Windows Isolated App Launcher APIs](/windows/win32/api/isolatedapplauncher/), is being deprecated and will no longer be updated. We recommend transitioning to Microsoft Defender for Endpoint [attack surface reduction rules](/microsoft-365/security/defender-endpoint/overview-attack-surface-reduction) along with [Protected View](/microsoft-365/security/office-365-security/recommended-settings-for-eop-and-office365#global-settings-for-safe-attachments) and [Windows Defender Application Control](/windows/security/application-security/application-control/windows-defender-application-control/wdac). | November 2023 | From bee90b3e06b657af715f12badd6c1df691353a29 Mon Sep 17 00:00:00 2001 From: Meghan Stewart <33289333+mestew@users.noreply.github.com> Date: Tue, 9 Jul 2024 08:52:02 -0700 Subject: [PATCH 94/99] wufbr-fresh-9153880 --- .../update/wufb-reports-configuration-manual.md | 2 +- .../update/wufb-reports-configuration-script.md | 16 ++++++++-------- windows/deployment/update/wufb-reports-enable.md | 6 +++--- 3 files changed, 12 insertions(+), 12 deletions(-) diff --git a/windows/deployment/update/wufb-reports-configuration-manual.md b/windows/deployment/update/wufb-reports-configuration-manual.md index 545ebbed48..5cbf3748b6 100644 --- a/windows/deployment/update/wufb-reports-configuration-manual.md +++ b/windows/deployment/update/wufb-reports-configuration-manual.md @@ -12,7 +12,7 @@ ms.localizationpriority: medium appliesto: - ✅ Windows 11 - ✅ Windows 10 -ms.date: 12/15/2023 +ms.date: 07/09/2024 --- # Manually configure devices for Windows Update for Business reports diff --git a/windows/deployment/update/wufb-reports-configuration-script.md b/windows/deployment/update/wufb-reports-configuration-script.md index e216694bc7..2d3b3f14b0 100644 --- a/windows/deployment/update/wufb-reports-configuration-script.md +++ b/windows/deployment/update/wufb-reports-configuration-script.md @@ -12,7 +12,7 @@ ms.localizationpriority: medium appliesto: - ✅ Windows 11 - ✅ Windows 10 -ms.date: 07/11/2023 +ms.date: 07/09/2024 --- # Configuring devices through the Windows Update for Business reports configuration script @@ -22,9 +22,9 @@ The Windows Update for Business reports configuration script is the recommended ## About the script -The configuration script configures registry keys directly. Be aware that registry keys can potentially be overwritten by policy settings like Group Policy or MDM. *Reconfiguring devices with the script doesn't reconfigure previously set policies, both in the case of Group Policy and MDM*. If there are conflicts between your Group Policy or MDM configurations and the required configurations listed in [Manually configuring devices for Windows Update for Business reports](wufb-reports-configuration-manual.md), device data might not appear in Windows Update for Business reports correctly. +The configuration script configures registry keys directly. Registry keys can potentially be overwritten by policy settings like Group Policy or MDM. *Reconfiguring devices with the script doesn't reconfigure previously set policies, both in the case of Group Policy and MDM*. If there are conflicts between your Group Policy or MDM configurations and the required configurations listed in [Manually configuring devices for Windows Update for Business reports](wufb-reports-configuration-manual.md), device data might not appear in Windows Update for Business reports correctly. -You can download the script from the [Microsoft Download Center](https://www.microsoft.com/download/details.aspx?id=101086). Keep reading to learn how to configure the script and interpret error codes that are output in logs for troubleshooting. +You can download the script from the [Microsoft Download Center](https://www.microsoft.com/download/details.aspx?id=101086). ## How this script is organized @@ -39,11 +39,11 @@ Edit the `RunConfig.bat` file to configure the following variables, then run the | Variable | Allowed values and description | Example | |---|---|---| -| runMode | **Pilot** (default): Verbose mode with additional diagnostics with additional logging. Pilot mode is best for a testing run of the script or for troubleshooting.
    **Deployment**: Doesn't run any additional diagnostics or add extra logging | `runMode=Pilot` | -| logPath | Path where the logs will be saved. The default location of the logs is `.\UCLogs`. | `logPath=C:\temp\logs` | -| logMode | **0**: Log to the console only
    **1** (default): Log to file and console.
    **2**: Log to file only. | `logMode=2` | -| DeviceNameOptIn | **true** (default): Device name is sent to Microsoft.
    **false**: Device name isn't sent to Microsoft. | `DeviceNameOptIn=true` | -| ClientProxy | **Direct** (default): No proxy is used. The connection to the endpoints is direct.
    **System**: The system proxy, without authentication, is used. This type of proxy is typically configured with [netsh](/windows-server/networking/technologies/netsh/netsh-contexts) and can be verified using `netsh winhttp show proxy`.
    **User**: The proxy is configured through IE and it might or might not require user authentication.

    For more information, see [How the Windows Update client determines which proxy server to use to connect to the Windows Update website](https://support.microsoft.com/en-us/topic/how-the-windows-update-client-determines-which-proxy-server-to-use-to-connect-to-the-windows-update-website-08612ae5-3722-886c-f1e1-d012516c22a1) | `ClientProxy=Direct` | +| runMode | **Pilot** (default): Verbose mode with additional diagnostics and logging. Pilot mode is best for a testing run of the script or for troubleshooting.
    **Deployment**: Doesn't run any additional diagnostics or add extra logging | `runMode=Pilot` | +| logPath | Path where the logs are saved. The default location of the logs is `.\UCLogs`.| `logPath=C:\temp\logs` | +| logMode | **0**: Log to the console only
    **1** (default): Log to file and console.
    **2**: Log to file only. | `logMode=2` | +| DeviceNameOptIn | **true** (default): Device name is sent to Microsoft.
    **false**: Device name isn't sent to Microsoft. | `DeviceNameOptIn=true` | +| ClientProxy | **Direct** (default): No proxy is used. The connection to the endpoints is direct.
    **System**: The system proxy, without authentication, is used. This type of proxy is typically configured with [netsh](/windows-server/networking/technologies/netsh/netsh-contexts) and can be verified using `netsh winhttp show proxy`.
    **User**: The proxy is configured through IE and it might or might not require user authentication.

    For more information, see [How the Windows Update client determines which proxy server to use to connect to the Windows Update website](https://support.microsoft.com/en-us/topic/how-the-windows-update-client-determines-which-proxy-server-to-use-to-connect-to-the-windows-update-website-08612ae5-3722-886c-f1e1-d012516c22a1) | `ClientProxy=Direct` | | source | Used by the .bat file and PowerShell script to locate dependencies. It's recommended that you don't change this value. | `source=%~dp0` | diff --git a/windows/deployment/update/wufb-reports-enable.md b/windows/deployment/update/wufb-reports-enable.md index 1502d549d2..157adbc776 100644 --- a/windows/deployment/update/wufb-reports-enable.md +++ b/windows/deployment/update/wufb-reports-enable.md @@ -11,7 +11,7 @@ manager: aaroncz appliesto: - ✅ Windows 11 - ✅ Windows 10 -ms.date: 07/11/2023 +ms.date: 07/09/2024 --- # Enable Windows Update for Business reports @@ -34,7 +34,7 @@ After verifying the [prerequisites](wufb-reports-prerequisites.md) are met, you ## Add Windows Update for Business reports to your Azure subscription -Before you configure clients to send data, you'll need to add Windows Update for Business reports to your Azure subscription so the data can be received. First, you'll select or create a new Log Analytics workspace to use. Second, you'll enroll Windows Update for Business reports to the workspace. +Before you configure clients to send data, you need to add Windows Update for Business reports to your Azure subscription so the data can be received. First, you select or create a new Log Analytics workspace to use. Second, you enroll Windows Update for Business reports to the workspace. ## Select or create a new Log Analytics workspace for Windows Update for Business reports @@ -69,7 +69,7 @@ Enroll into Windows Update for Business reports by configuring its settings thro > [!Tip] > If a `403 Forbidden` error occurs, verify the account you're using has [permissions](wufb-reports-prerequisites.md#permissions) to enroll into Windows Update for Business reports. 1. The initial setup can take up to 24 hours. During this time, the workbook will display that it's **Waiting for Windows Update for Business reports data**. - - Enrolling into Windows Update for Business reports doesn't influence the rate that required data is uploaded from devices. Device connectivity to the internet and how active the device is influences how long it will take before the device appears in reporting. Devices that are active and connected to the internet daily can expect to be fully uploaded within one week (usually less than 72 hours). Devices that are less active can take up to two weeks before data is fully available. + - Enrolling into Windows Update for Business reports doesn't influence the rate that required data is uploaded from devices. Device connectivity to the internet and how active the device is influences how long it takes before the device appears in reporting. Devices that are active and connected to the internet daily can expect to be fully uploaded within one week (usually less than 72 hours). Devices that are less active can take up to two weeks before data is fully available. ##### Enroll through the Microsoft 365 admin center From ed4959c2d74057378042beb2e662a08764869e25 Mon Sep 17 00:00:00 2001 From: Meghan Stewart <33289333+mestew@users.noreply.github.com> Date: Tue, 9 Jul 2024 08:57:49 -0700 Subject: [PATCH 95/99] wufbr-fresh-9153880 --- windows/deployment/update/wufb-reports-help.md | 4 ++-- 1 file changed, 2 insertions(+), 2 deletions(-) diff --git a/windows/deployment/update/wufb-reports-help.md b/windows/deployment/update/wufb-reports-help.md index 3580a4810a..6e7c31a485 100644 --- a/windows/deployment/update/wufb-reports-help.md +++ b/windows/deployment/update/wufb-reports-help.md @@ -11,7 +11,7 @@ manager: aaroncz appliesto: - ✅ Windows 11 - ✅ Windows 10 -ms.date: 02/10/2023 +ms.date: 07/09/2024 --- # Windows Update for Business reports feedback, support, and troubleshooting @@ -52,7 +52,7 @@ You can open support requests directly from the Azure portal. If the **Help + S - **Service type** - Select ***Windows Update for Business reports*** under ***Monitoring and Management*** -1. Based on the information you provided, you'll be shown some **Recommended solutions** you can use to try to resolve the problem. +1. Based on the information you provided, you are shown some **Recommended solutions** you can use to try to resolve the problem. 1. Complete the **Additional details** tab and then create the request on the **Review + create** tab. ## Documentation feedback From 8618beacf64bf21e4251152eb1d5cf5b73588ae5 Mon Sep 17 00:00:00 2001 From: Paolo Matarazzo <74918781+paolomatarazzo@users.noreply.github.com> Date: Tue, 9 Jul 2024 12:27:30 -0400 Subject: [PATCH 96/99] fixed broken link --- education/windows/index.yml | 2 +- windows/hub/index.yml | 2 +- 2 files changed, 2 insertions(+), 2 deletions(-) diff --git a/education/windows/index.yml b/education/windows/index.yml index 942a90b16b..ac12ab0836 100644 --- a/education/windows/index.yml +++ b/education/windows/index.yml @@ -137,4 +137,4 @@ additionalContent: - text: Microsoft Intune community url: https://techcommunity.microsoft.com/t5/microsoft-intune/bd-p/Microsoft-Intune - text: Microsoft Support community - url: https://answers.microsoft.com/windows/forum \ No newline at end of file + url: https://answers.microsoft.com/ \ No newline at end of file diff --git a/windows/hub/index.yml b/windows/hub/index.yml index 4b0d111d73..6bed7b9fcc 100644 --- a/windows/hub/index.yml +++ b/windows/hub/index.yml @@ -197,4 +197,4 @@ additionalContent: - text: Microsoft Intune community url: https://techcommunity.microsoft.com/t5/microsoft-intune/bd-p/Microsoft-Intune - text: Microsoft Support community - url: https://answers.microsoft.com/windows/forum + url: https://answers.microsoft.com/ From e4a32b2afecd299d82a7d7c93f697c60e747077b Mon Sep 17 00:00:00 2001 From: Meghan Stewart <33289333+mestew@users.noreply.github.com> Date: Tue, 9 Jul 2024 10:09:18 -0700 Subject: [PATCH 97/99] wn-fresh-8869747 --- windows/whats-new/feature-lifecycle.md | 4 ++-- windows/whats-new/ltsc/overview.md | 2 +- windows/whats-new/ltsc/whats-new-windows-10-2015.md | 4 ++-- windows/whats-new/ltsc/whats-new-windows-10-2016.md | 4 ++-- windows/whats-new/ltsc/whats-new-windows-10-2019.md | 4 ++-- windows/whats-new/ltsc/whats-new-windows-10-2021.md | 4 ++-- windows/whats-new/whats-new-windows-10-version-22H2.md | 4 ++-- windows/whats-new/whats-new-windows-11-version-22H2.md | 4 ++-- windows/whats-new/whats-new-windows-11-version-23h2.md | 4 ++-- 9 files changed, 17 insertions(+), 17 deletions(-) diff --git a/windows/whats-new/feature-lifecycle.md b/windows/whats-new/feature-lifecycle.md index 9c928556e8..578a92fb51 100644 --- a/windows/whats-new/feature-lifecycle.md +++ b/windows/whats-new/feature-lifecycle.md @@ -6,9 +6,9 @@ ms.localizationpriority: medium author: mestew manager: aaroncz ms.author: mstewart -ms.topic: conceptual +ms.topic: reference ms.subservice: itpro-fundamentals -ms.date: 12/15/2023 +ms.date: 07/09/2024 ms.collection: - highpri - tier2 diff --git a/windows/whats-new/ltsc/overview.md b/windows/whats-new/ltsc/overview.md index 881b172f79..5fb5127bcf 100644 --- a/windows/whats-new/ltsc/overview.md +++ b/windows/whats-new/ltsc/overview.md @@ -8,7 +8,7 @@ manager: aaroncz ms.localizationpriority: low ms.topic: overview ms.subservice: itpro-fundamentals -ms.date: 12/18/2023 +ms.date: 07/09/2024 appliesto: - ✅ Windows 10 Enterprise LTSC --- diff --git a/windows/whats-new/ltsc/whats-new-windows-10-2015.md b/windows/whats-new/ltsc/whats-new-windows-10-2015.md index 5679770b95..83b91546d8 100644 --- a/windows/whats-new/ltsc/whats-new-windows-10-2015.md +++ b/windows/whats-new/ltsc/whats-new-windows-10-2015.md @@ -6,9 +6,9 @@ description: New and updated IT pro content about new features in Windows 10 Ent ms.service: windows-client author: mestew ms.localizationpriority: low -ms.topic: conceptual +ms.topic: reference ms.subservice: itpro-fundamentals -ms.date: 12/18/2023 +ms.date: 07/09/2024 appliesto: - ✅ Windows 10 Enterprise LTSC 2015 --- diff --git a/windows/whats-new/ltsc/whats-new-windows-10-2016.md b/windows/whats-new/ltsc/whats-new-windows-10-2016.md index 22fdf02fce..df08af61c1 100644 --- a/windows/whats-new/ltsc/whats-new-windows-10-2016.md +++ b/windows/whats-new/ltsc/whats-new-windows-10-2016.md @@ -6,9 +6,9 @@ description: New and updated IT pro content about new features in Windows 10 Ent ms.service: windows-client author: mestew ms.localizationpriority: low -ms.topic: conceptual +ms.topic: reference ms.subservice: itpro-fundamentals -ms.date: 12/18/2023 +ms.date: 07/09/2024 appliesto: - ✅ Windows 10 Enterprise LTSC 2016 --- diff --git a/windows/whats-new/ltsc/whats-new-windows-10-2019.md b/windows/whats-new/ltsc/whats-new-windows-10-2019.md index 78cd95c0c9..6e5084a543 100644 --- a/windows/whats-new/ltsc/whats-new-windows-10-2019.md +++ b/windows/whats-new/ltsc/whats-new-windows-10-2019.md @@ -6,9 +6,9 @@ description: New and updated IT Pro content about new features in Windows 10 Ent ms.service: windows-client author: mestew ms.localizationpriority: medium -ms.topic: conceptual +ms.topic: reference ms.subservice: itpro-fundamentals -ms.date: 12/18/2023 +ms.date: 07/09/2024 appliesto: - ✅ Windows 10 Enterprise LTSC 2019 --- diff --git a/windows/whats-new/ltsc/whats-new-windows-10-2021.md b/windows/whats-new/ltsc/whats-new-windows-10-2021.md index b7f6c2c73f..f8a15b202a 100644 --- a/windows/whats-new/ltsc/whats-new-windows-10-2021.md +++ b/windows/whats-new/ltsc/whats-new-windows-10-2021.md @@ -6,9 +6,9 @@ description: New and updated IT Pro content about new features in Windows 10 Ent ms.service: windows-client author: mestew ms.localizationpriority: high -ms.topic: conceptual +ms.topic: reference ms.subservice: itpro-fundamentals -ms.date: 12/18/2023 +ms.date: 07/09/2024 appliesto: - ✅ Windows 10 Enterprise LTSC 2021 --- diff --git a/windows/whats-new/whats-new-windows-10-version-22H2.md b/windows/whats-new/whats-new-windows-10-version-22H2.md index 3ec8fdc763..a2c3d3e798 100644 --- a/windows/whats-new/whats-new-windows-10-version-22H2.md +++ b/windows/whats-new/whats-new-windows-10-version-22H2.md @@ -7,8 +7,8 @@ ms.author: mstewart author: mestew manager: aaroncz ms.localizationpriority: medium -ms.topic: conceptual -ms.date: 10/18/2022 +ms.topic: reference +ms.date: 07/09/2024 ms.collection: - highpri - tier2 diff --git a/windows/whats-new/whats-new-windows-11-version-22H2.md b/windows/whats-new/whats-new-windows-11-version-22H2.md index d2308ff620..a76a1b6abb 100644 --- a/windows/whats-new/whats-new-windows-11-version-22H2.md +++ b/windows/whats-new/whats-new-windows-11-version-22H2.md @@ -6,12 +6,12 @@ ms.service: windows-client ms.author: mstewart author: mestew ms.localizationpriority: medium -ms.topic: conceptual +ms.topic: reference ms.collection: - highpri - tier2 ms.subservice: itpro-fundamentals -ms.date: 08/11/2023 +ms.date: 07/09/2024 appliesto: - ✅ Windows 11, version 22H2 --- diff --git a/windows/whats-new/whats-new-windows-11-version-23h2.md b/windows/whats-new/whats-new-windows-11-version-23h2.md index 421552f353..afc12bea4b 100644 --- a/windows/whats-new/whats-new-windows-11-version-23h2.md +++ b/windows/whats-new/whats-new-windows-11-version-23h2.md @@ -6,12 +6,12 @@ ms.service: windows-client ms.author: mstewart author: mestew ms.localizationpriority: medium -ms.topic: conceptual +ms.topic: reference ms.collection: - highpri - tier2 ms.subservice: itpro-fundamentals -ms.date: 10/31/2023 +ms.date: 07/09/2024 appliesto: - ✅ Windows 11, version 23H2 --- From 08b09d9dea47c0ab86a19021d49334cc0d918d91 Mon Sep 17 00:00:00 2001 From: "Vinay Pamnani (from Dev Box)" Date: Tue, 9 Jul 2024 13:29:15 -0600 Subject: [PATCH 98/99] Provisioning packages freshness --- .../diagnose-provisioning-packages.md | 10 +- ...can-use-configuration-service-providers.md | 136 +----------------- .../provisioning-packages/images/ICD.png | Bin 60464 -> 29688 bytes .../provision-pcs-for-initial-deployment.md | 69 ++++----- .../provision-pcs-with-apps.md | 95 ++++-------- .../provisioning-apply-package.md | 29 +--- .../provisioning-command-line.md | 27 +--- .../provisioning-create-package.md | 93 +++++------- .../provisioning-how-it-works.md | 24 +--- .../provisioning-install-icd.md | 49 +++---- .../provisioning-multivariant.md | 97 +++++-------- .../provisioning-packages.md | 122 +++++++--------- .../provisioning-powershell.md | 32 +---- .../provisioning-script-to-install-app.md | 32 ++--- .../provisioning-uninstall-package.md | 61 ++++---- .../provisioning-packages/toc.yml | 48 ++++--- 16 files changed, 294 insertions(+), 630 deletions(-) diff --git a/windows/configuration/provisioning-packages/diagnose-provisioning-packages.md b/windows/configuration/provisioning-packages/diagnose-provisioning-packages.md index 53a0f7861e..dc6121f2d9 100644 --- a/windows/configuration/provisioning-packages/diagnose-provisioning-packages.md +++ b/windows/configuration/provisioning-packages/diagnose-provisioning-packages.md @@ -2,7 +2,7 @@ title: Diagnose Provisioning Packages description: Diagnose general failures in provisioning. ms.topic: troubleshooting -ms.date: 01/18/2023 +ms.date: 07/09/2024 --- # Diagnose Provisioning Packages @@ -11,22 +11,20 @@ This article helps diagnose common issues with applying provisioning packages. Y ## Unable to apply power settings -When applying a provisioning package (PPKG) containing power settings, elevated permissions are required. Because elevated permissions are required, power settings applied using the user context after the [initial setup](/windows/configuration/provisioning-packages/provisioning-apply-package#after-initial-setup) results in the error `STATUS_PRIVILEGE_NOT_HELD (HRESULT=0xc0000061)` because an incorrect security context was used. +When you apply a provisioning package (PPKG) containing power settings, elevated permissions are required. Because elevated permissions are required, power settings applied using the user context after the [initial setup](/windows/configuration/provisioning-packages/provisioning-apply-package#after-initial-setup) results in the error `STATUS_PRIVILEGE_NOT_HELD (HRESULT=0xc0000061)` because an incorrect security context was used. To apply the power settings successfully with the [correct security context](/windows/win32/services/localsystem-account), place the PPKG in `%WINDIR%/Provisioning/Packages` directory, and reboot the device. For more information, see [Configure power settings](/windows-hardware/customize/power-settings/configure-power-settings). - - ## Unable to perform bulk enrollment in Microsoft Entra ID -When [enrolling devices into Microsoft Entra ID using provisioning packages](https://techcommunity.microsoft.com/t5/intune-customer-success/bulk-join-a-windows-device-to-azure-ad-and-microsoft-endpoint/ba-p/2381400), the bulk token request is rejected, if the user requesting a bulk token isn't authorized to grant application consent. For more information, see [Configure how users consent to applications](/azure/active-directory/manage-apps/configure-user-consent). +When you [enroll devices into Microsoft Entra ID using provisioning packages](https://techcommunity.microsoft.com/t5/intune-customer-success/bulk-join-a-windows-device-to-azure-ad-and-microsoft-endpoint/ba-p/2381400), the bulk token request is rejected, if the user requesting a bulk token isn't authorized to grant application consent. For more information, see [Configure how users consent to applications](/azure/active-directory/manage-apps/configure-user-consent). > [!NOTE] > When obtaining the bulk token, you should select "No, sign in to this app only" when prompted for authentication. If you select "OK" instead without also selecting "Allow my organization to manage my device", the bulk token request might be rejected. ## Unable to apply a multivariant provisioning package -When applying a [multivariant package](/windows/configuration/provisioning-packages/provisioning-multivariant), it might be difficult to diagnose why a certain target didn't get applied. There may have been improperly authored conditions that didn't evaluate as expected. +When you apply a [multivariant package](/windows/configuration/provisioning-packages/provisioning-multivariant), it might be difficult to diagnose why a certain target didn't get applied. There may be improperly authored conditions that didn't evaluate as expected. Starting in Windows 11, version 22H2, [MdmDiagnosticsTool](/windows/client-management/diagnose-mdm-failures-in-windows-10) includes multivariant condition values to diagnose problems with multivariant packages to determine why the package wasn't applied. diff --git a/windows/configuration/provisioning-packages/how-it-pros-can-use-configuration-service-providers.md b/windows/configuration/provisioning-packages/how-it-pros-can-use-configuration-service-providers.md index a535175bf7..978aa8fc5b 100644 --- a/windows/configuration/provisioning-packages/how-it-pros-can-use-configuration-service-providers.md +++ b/windows/configuration/provisioning-packages/how-it-pros-can-use-configuration-service-providers.md @@ -2,12 +2,12 @@ title: Configuration service providers for IT pros description: Describes how IT pros and system administrators can use configuration service providers (CSPs) to configure devices. ms.topic: how-to -ms.date: 12/31/2017 +ms.date: 07/09/2024 --- # Configuration service providers for IT pros -This article explains how IT pros and system administrators can take advantage of many settings available through configuration service providers (CSPs) to configure devices running Windows client in their organizations. CSPs expose device configuration settings in Windows client. The CSPs are used by mobile device management (MDM) service providers and are documented in the [Hardware Dev Center](/windows/client-management/mdm/configuration-service-provider-reference). +This article explains how IT pros and system administrators can take advantage of many settings available through configuration service providers (CSPs) to configure devices running Windows client in their organizations. CSPs expose device configuration settings in Windows client. The CSPs are used by mobile device management (MDM) service providers and are documented in the [Configuration Service Provider reference](/windows/client-management/mdm/configuration-service-provider-reference). ## What is a CSP? @@ -15,11 +15,7 @@ In the client operating system, a CSP is the interface between configuration set On the Windows client platform, the management approach for desktop uses CSPs to configure and manage all devices running Windows client. -Each CSP provides access to specific settings. For example, the [Wi-Fi CSP](/windows/client-management/mdm/wifi-csp) contains the settings to create a Wi-Fi profile. - -CSPs are behind many of the management tasks and policies for Windows client, both in Microsoft Intune and in non-Microsoft MDM service providers. For example, in Intune, the policy to allow search suggestions in the Microsoft Edge address bar uses **Browser/AllowSearchSuggestionsinAddressBar** in the [Policy CSP](/windows/client-management/mdm/policy-configuration-service-provider). - -:::image type="content" source="images/policytocsp.png" alt-text="How intune maps to CSP"::: +Each CSP provides access to specific settings. For example, the [Wi-Fi CSP](/windows/client-management/mdm/wifi-csp) contains the settings to create a Wi-Fi profile. CSPs are behind many of the management tasks and policies for Windows client, both in Microsoft Intune and in non-Microsoft MDM service providers. CSPs receive configuration policies in the XML-based Synchronization Markup Language (SyncML) format, pushed from an MDM-compliant management server, such as Microsoft Intune. Traditional enterprise management systems, such as Microsoft Configuration Manager, can also target CSPs, by using a client-side Windows Management Instrumentation (WMI)-to-CSP Bridge. @@ -37,13 +33,13 @@ The WMI-to-CSP Bridge is a component allowing configuration of Windows client CS Generally, enterprises rely on Group Policy or MDM to configure and manage devices. For devices running Windows, MDM services use CSPs to configure your devices. -In addition, you may have unmanaged devices, or a large number of devices that you want to configure before enrolling them in management. You may also want to apply custom settings that aren't available through your MDM service. The [CSP documentation](#bkmk-csp-doc) can help you understand the settings that can be configured or queried. You can also learn about all of the available configuration settings. +In addition, you may have unmanaged devices, or a large number of devices that you want to configure before enrolling them in management. You may also want to apply custom settings that aren't available through your MDM service. The [CSP documentation](/windows/client-management/mdm/configuration-service-provider-reference) can help you understand the settings that can be configured or queried. You can also learn about all of the available configuration settings. ### CSPs in Windows Configuration Designer You can use Windows Configuration Designer to create [provisioning packages](provisioning-packages.md) to apply settings to devices during the out-of-box-experience (OOBE), and after the devices are set up. You can also use provisioning packages to configure a device's connectivity and enroll the device in MDM. Many of the runtime settings in Windows Configuration Designer are based on CSPs. -Many settings in Windows Configuration Designer will display documentation for that setting in the center pane, and will include a reference to the CSP if the setting uses one, as shown in the following image. +Many settings in Windows Configuration Designer display documentation for that setting in the center pane, and include a reference to the CSP if the setting uses one. :::image type="content" source="images/cspinicd.png" alt-text="In Windows Configuration Designer, how help content appears in ICD."::: @@ -51,124 +47,6 @@ Many settings in Windows Configuration Designer will display documentation for t ### CSPs in MDM -Most, if not all, CSPs are surfaced through your MDM service. If you see a CSP that provides a capability that you want to make use of and cannot find that capability in your MDM service, contact your MDM provider for assistance. It might be named differently than you expected. You can see the CSPs supported by MDM in the [Configuration service provider reference](/windows/client-management/mdm/configuration-service-provider-reference). +Most, if not all, CSPs are surfaced through your MDM service. If you see a CSP that provides a capability that you want to make use of and can't find that capability in your MDM service, contact your MDM provider for assistance. It might be named differently than you expected. You can see the CSPs supported by MDM in the [Configuration service provider reference](/windows/client-management/mdm/configuration-service-provider-reference). -When a CSP is available but is not explicitly included in your MDM solution, you may be able to make use of the CSP by using OMA-URI settings. In Intune, for example, you can use [custom policy settings](/mem/intune/configuration/custom-settings-configure) to deploy settings. Intune documents [a partial list of settings](/mem/intune/configuration/custom-settings-windows-10) that you can enter in the **OMA-URI Settings** section of a custom policy, if your MDM service provides that extension. You'll notice that the list doesn't explain the meanings of the allowed and default values, so use the [CSP reference documentation](/windows/client-management/mdm/configuration-service-provider-reference) to locate that information. - -### CSPs in Lockdown XML - -## How do you use the CSP documentation? - -All CSPs are documented in the [Configuration service provider reference](/windows/client-management/mdm/configuration-service-provider-reference). - -The [CSP reference](/windows/client-management/mdm/configuration-service-provider-reference) tells you which CSPs are supported on each edition of Windows, and links to the documentation for each individual CSP. - -:::image type="content" source="images/csptable.png" alt-text="The CSP reference shows the supported Windows editions"::: - -The documentation for each CSP follows the same structure. After an introduction that explains the purpose of the CSP, a diagram shows the parts of the CSP in tree format. - -The full path to a specific configuration setting is represented by its Open Mobile Alliance - Uniform Resource Identifier (OMA-URI). The URI is relative to the devices' root node (MSFT, for example). Features supported by a particular CSP can be set by addressing the complete OMA-URI path. - -The following example shows the diagram for the [AssignedAccess CSP](/windows/client-management/mdm/assignedaccess-csp). The diagram maps to the XML for that CSP. Notice the different shapes in the diagram: rounded elements are nodes, and rectangular elements are settings or policies for which a value must be supplied. - -:::image type="content" source="images/provisioning-csp-assignedaccess.png" alt-text="The CSP reference shows the assigned access CSP tree."::: - -The element in the tree diagram after the root node tells you the name of the CSP. Knowing this structure, you would recognize in XML the parts of the URI path for that CSP and, if you saw it in XML, you would know which CSP reference to look up. For example, in the following OMS-URI path for the kiosk mode app settings, you can see that it uses the [AssignedAccess CSP](/windows/client-management/mdm/assignedaccess-csp). - -```XML -./Vendor/MSFT/AssignedAccess/KioskModeApp -``` - -When an element in the diagram uses _italic_ font, it indicates a placeholder for specific information, such as the tenant ID in the following example. - -:::image type="content" source="images/csp-placeholder.png" alt-text="The placeholder in the CSP tree"::: - -After the diagram, the documentation describes each element. For each policy or setting, the valid values are listed. - -For example, in the [AssignedAccess CSP](/windows/client-management/mdm/assignedaccess-csp), the setting is **KioskModeApp**. The documentation tells you that the value for **KioskModeApp** is a JSON string that contains the user account name and Application User Model ID (AUMID) of the Kiosk mode app. - -The documentation for most CSPs will also include an XML example. - -## CSP examples - -CSPs provide access to many settings useful to enterprises. This section introduces the CSPs that an enterprise might find useful. - -- [Policy CSP](/windows/client-management/mdm/policy-configuration-service-provider) - - The Policy CSP enables the enterprise to configure policies on Windows client. Some of these policy settings can also be applied using Group Policy, and the CSP documentation lists the equivalent Group Policy settings. - - Some of the settings available in the Policy CSP include the following: - - - **Accounts**, such as whether a non-Microsoft account can be added to the device. - - **Application management**, such as whether only Microsoft Store apps are allowed. - - **Bluetooth**, such as the services allowed to use it. - - **Browser**, such as restricting InPrivate browsing. - - **Connectivity**, such as whether the device can be connected to a computer by USB. - - **Defender** (for desktop only), such as day and time to scan. - - **Device lock**, such as the type of PIN or password required to unlock the device. - - **Experience**, such as allowing Cortana. - - **Security**, such as whether provisioning packages are allowed. - - **Settings**, such as enabling the user to change VPN settings. - - **Start**, such as applying a standard Start layout. - - **System**, such as allowing the user to reset the device. - - **Text input**, such as allowing the device to send anonymized user text input data samples to Microsoft. - - **Update**, such as whether the device can use Microsoft Update, Windows Server Update Services (WSUS), or Microsoft Store. - - **WiFi**, such as whether Internet sharing is enabled. - -Here is a list of CSPs supported on Windows 10 Enterprise: - -- [ActiveSync CSP](/windows/client-management/mdm/activesync-csp) -- [Application CSP](/windows/client-management/mdm/application-csp) -- [AppLocker CSP](/windows/client-management/mdm/applocker-csp) -- [AssignedAccess CSP](/windows/client-management/mdm/assignedaccess-csp) -- [Bootstrap CSP](/windows/client-management/mdm/bootstrap-csp) -- [BrowserFavorite CSP](/windows/client-management/mdm/browserfavorite-csp) -- [CellularSettings CSP](/windows/client-management/mdm/cellularsettings-csp) -- [CertificateStore CSP](/windows/client-management/mdm/certificatestore-csp) -- [ClientCertificateInstall CSP](/windows/client-management/mdm/clientcertificateinstall-csp) -- [CM\_CellularEntries CSP](/windows/client-management/mdm/cm-cellularentries-csp) -- [CM\_ProxyEntries CSP](/windows/client-management/mdm/cm-proxyentries-csp) -- [CMPolicy CSP](/windows/client-management/mdm/cmpolicy-csp) -- [Defender CSP](/windows/client-management/mdm/defender-csp) -- [DevDetail CSP](/windows/client-management/mdm/devdetail-csp) -- [DeviceInstanceService CSP](/windows/client-management/mdm/deviceinstanceservice-csp) -- [DeviceLock CSP](/windows/client-management/mdm/devicelock-csp) -- [DeviceStatus CSP](/windows/client-management/mdm/devicestatus-csp) -- [DevInfo CSP](/windows/client-management/mdm/devinfo-csp) -- [DiagnosticLog CSP](/windows/client-management/mdm/diagnosticlog-csp) -- [DMAcc CSP](/windows/client-management/mdm/dmacc-csp) -- [DMClient CSP](/windows/client-management/mdm/dmclient-csp) -- [Email2 CSP](/windows/client-management/mdm/email2-csp) -- [EnterpriseAPN CSP](/windows/client-management/mdm/enterpriseapn-csp) -- [EnterpriseAssignedAccess CSP](/windows/client-management/mdm/enterpriseassignedaccess-csp) -- [EnterpriseDesktopAppManagement CSP](/windows/client-management/mdm/enterprisedesktopappmanagement-csp) -- [EnterpriseExt CSP](/windows/client-management/mdm/enterpriseext-csp) -- [EnterpriseModernAppManagement CSP](/windows/client-management/mdm/enterprisemodernappmanagement-csp) -- [FileSystem CSP](/windows/client-management/mdm/filesystem-csp) -- [HealthAttestation CSP](/windows/client-management/mdm/healthattestation-csp) -- [HotSpot CSP](/windows/client-management/mdm/hotspot-csp) -- [Maps CSP](/windows/client-management/mdm/maps-csp) -- [NAP CSP](/windows/client-management/mdm/filesystem-csp) -- [NAPDEF CSP](/windows/client-management/mdm/napdef-csp) -- [NodeCache CSP](https://go.microsoft.com/fwlink/p/?LinkId=723265) -- [PassportForWork CSP](/windows/client-management/mdm/passportforwork-csp) -- [Policy CSP](/windows/client-management/mdm/policy-configuration-service-provider) -- [PolicyManager CSP](https://go.microsoft.com/fwlink/p/?LinkId=723418) -- [Provisioning CSP](/windows/client-management/mdm/provisioning-csp) -- [Proxy CSP](https://go.microsoft.com/fwlink/p/?LinkId=723372) -- [PXLOGICAL CSP](/windows/client-management/mdm/pxlogical-csp) -- [Registry CSP](/windows/client-management/mdm/registry-csp) -- [RemoteFind CSP](/windows/client-management/mdm/remotefind-csp) -- [RemoteWipe CSP](/windows/client-management/mdm/remotewipe-csp) -- [Reporting CSP](/windows/client-management/mdm/reporting-csp) -- [RootCATrustedCertificates CSP](/windows/client-management/mdm/rootcacertificates-csp) -- [SecurityPolicy CSP](/windows/client-management/mdm/securitypolicy-csp) -- [Storage CSP](/windows/client-management/mdm/storage-csp) -- [SUPL CSP](/windows/client-management/mdm/supl-csp) -- [UnifiedWriteFilter CSP](/windows/client-management/mdm/unifiedwritefilter-csp) -- [Update CSP](/windows/client-management/mdm/update-csp) -- [VPN CSP](/windows/client-management/mdm/vpn-csp) -- [VPNv2 CSP](/windows/client-management/mdm/vpnv2-csp) -- [Wi-Fi CSP](/windows/client-management/mdm/wifi-csp) -- [WindowsLicensing CSP](/windows/client-management/mdm/windowslicensing-csp) -- [WindowsSecurityAuditing CSP](/windows/client-management/mdm/windowssecurityauditing-csp) +When a CSP is available but isn't explicitly included in your MDM solution, you may be able to make use of the CSP by using OMA-URI settings. In Intune, for example, you can use [custom policy settings](/mem/intune/configuration/custom-settings-configure) to deploy settings. Intune documents [a partial list of settings](/mem/intune/configuration/custom-settings-windows-10) that you can enter in the **OMA-URI Settings** section of a custom policy, if your MDM service provides that extension. You'll notice that the list doesn't explain the meanings of the allowed and default values, so use the [CSP reference documentation](/windows/client-management/mdm/configuration-service-provider-reference) to locate that information. diff --git a/windows/configuration/provisioning-packages/images/ICD.png b/windows/configuration/provisioning-packages/images/ICD.png index 9cfcb845dfab04cad5b040a16ec50776fdd81a89..c5525201f1931b84b7680a1f2bf21b91ba940191 100644 GIT binary patch literal 29688 zcmeFYcT|&Kv?h#7Q7j0k^deG31O%lEh=NEJfzX>oX`zRJlz@T?NQp@A0@5J?q?aH{ zkq&AIBs4(?Bm|@+Kp-$df8U)u-^`3cb~nV{X8epMuysF znYo$i=;+SsJkT_zqdV?MdtErmNc*Ho@{Tg?&oQvE_FX#o5brYW4ZX95fd(C2HSF~M zV+Pv$Q{E3O!E|)zz8t-d^>~#$p`!!G>1b-0KC>gX*$zmdAv47>bVRM^j3v^>KR8ag zy}u@SAs#4p-NE!2_XVV&5yuT?`^GzN^jbj~`QmRcXw4VFf#Vl#B8@z(AeQKQ$MM%( zT`BI7L?7PfM}UrZB3AjGUM3%0LLX>HYVY3`hJ7vmNM2F>NVWnE-yGf>+6x(6W7+o} z8mMU7#@K_#HrIzXk!SCoy!`UKa@2#)^GE-k6K0cnN&7GFM6~7^+81}1?g+8o`*X?L z|Hvh-UeV(u&>FUN4IZrU@Ynol0;O(nZ#uvOtSXTIl+@W4AbIm4c&oE5vt@c4IVdN3 zlMp@F7SQGeMz@`g4aJBBc<2H?F3Jt|SU4dvu>N>+4!w88@OhM05=guKQm{bklGmFa z?H?0et1L^uk{wYM!6EI32uHr*?Z;e$hMgHag@HFKnU>wzt4n#ldVe=Ma{|Q#2%s7% ze7??BeeaE?dyR)P*e%*ZCBcpHzzy~`DsPh`dOV5yl+l{^El%?b?l^w$5y>xR*7k4Yi*tlga*qR3&4)u%3eF}Ak_HC6#X>eRZJyI zenB=_pe|y)kyM0`GIk4Gl^>uc43tViX zL>Vu-q09w;82gI9{I*#0bT3auT?6%c=$dbvT)@u^_KE5N(uF29gNlL=KK4I=yaNeD z7-?!}WwFj=>b|-Bc#mQI!=j-Y&*FU!BF3MON!hqXL#V#1-FtfPbf9_$3Dh&;8cCAs zI{={GJj~8@l{P=Xa6XQYR6?NhW)z&V{V%>;?~0Eji;SP3@{Zv?Oy^M-ErKn>`l@rb zk<&q~w)W1or3C#0CMcNT@_F0B-!>^w0z{^GLn|-?iMB25pqACd_mq!7`_~qa`v6^i z7`;6+_`_NpoFQ0quwx`NtP8DRBLTEDcj^&porXAFyKgD5n8b=g_wTqzpUU>9)F62T zxmx|)nL1gFmLDK|65f%84ho``o`EvuT1)mhvNWh96JEZfo= z9ulCM9EWXy)-WS7<*wp!?rtWFp)U3+g%niAL((|eJ$GQRYsh*n#tyw8dSfBiw7h@Z zM;hsN*fywzt%qKNpn-Bf?ZMNVhm|b7$Tsan<=idEj6(TWT!=e0W*>F%M3BFUu?E7LlRFre5dU%VhkJnUGol zv?ZBZW!Tq<0^0Wd&~meHAhw0x9>BERv42g<>k)??8dbz**0Wl+7?Ln}EE?=MEV7qp zry`Y2ywOt+pKRz8Q|EZ<(d64#M1CA8i`v1}PuT<$lcGow>Sh^P{qd&pExibj0>h|! zRKk->*0yUU_|_yY#yYP(tA>)PrYEZkogZRzOIbcLd$|^GO!P}#c!UT0dG-n1%(>SV zSb*ZWA3_Gp){nw~woZ3F<8jHUm$Yg64No$2wpWM2A&IU?#Wf&ErZcnm0g-+w^ zA8Rct=*EDEO{XRxY2BYIIxwkvwZuh_y`a+l%#7`o)XM&0;-$eQ?O-YV!FYA0he~1n ziiKx+f%z1oJ1cF|*oiauhkvRKJ?`D^FN@#_AM!juF^;%tkNTd$GY>)y=krm%b8p%` zQupNo!-V|RhReaUs!)^i?m~D_=O)z{($T#zv z#{_sV`hQW3MTc0s*?#!at!%mhbjKU%&Vv?#rsapE-KujcDJZqxr@HC`K?1)PubANx z{N{3Mqe0~%P5RiPhqig%t(XIk%z$=*F9#N9LCC5?fo8<$?Lu-sl1t!=OnHCwAret! zU#YbGq2C#nra74!x41yWSKQ=G z)nHI)cJ?aFQjdeECpWCC_IkWdL17i;Pm-HC7{R%zM&YY#NwH<)=&#EZn^w;9p|vX4l^tQg0wCB|jpKaoFB{PD#Niq`A@w&acgznA zdg%cLbJlwPc~SMS;29^t&`u_vNMVQiG_Db{kjX*K%0(+vLUCxV%4j8NU1%90y4#5p z_Nkt?|4g!L-3eCFl+^r`fNCD^Cw0E zbXnlq1VoLD-s5bT!S?RQlYRhQv7CUt1+U>Xp;k0hZa>&QO^d~AC@C8AyB<_i(_8JOE&M3 z)4_>{5Yhz8F8-x;aCc8tWsttH3Y?Y##}Q*{b+|oWG`xRzRKfL2&c}=lrUX7`_0`eo zlN2}QN7R*}5uu5kRgKar{Prd9qBw&aLiy?`SyLME8#5m@m7{s^xWyRz`-|J;+ z89@;TV(FVd(>QquU&drh1v>b3<+1Y}tI-zdiYKWX@zFfLf4JbhZ*W4i7q53u7iGMi zoG3d888WCL?rTn9>Iu30gHLYCyd5POBXW}~hgtRJZ=vkWYAp)7jI+T=vRW;N0}_s3 zp_bzU_V0!&ICrEzow{*>0mwn>5J!CMt0*T}!N0~CSf&=<38?6&R43J;cTprzxpa1Z zQ&fn)f5$XuGCBkRZ)3TiDGPJEZn9SynB4D(fS$rv$wDrv+qC%)=r^6NldK`)s$Cf! z3HAX~gFUmst!BmO0!foaFFke5IS_^Uc>}RW%ne=3u_B-#8hFMpWCi`$HY^Mdm)Oli z+ZOv<0#%g8?EJH+jhUe$D4Y$CtLjqF#=c8t&Hb(B-Ua+(&(62hQNqYIgtKkO4gN>! z$_$%HcyWkuuIO0()$E&u$JX}8>u?q*zB&CAB#v86kjw)0dfCERq0JW-$6gM z(pnVjw-}UmOKU z3@gv+LpVT{4^gCBhJfq@_YmoYg3u@Ffi>%5q(U3QJ{hJmDqp6~4vjW-)FQbEw+wx* zOO*q!?vWM=SBb^nJ@sqXh;n(@29pJ}rr1ZuYXZuH;#bNRAHWUb62HBo!S^9s|0_Z- zhfF)pLUesUPGv-9S4BZjztKFC7vnYukhr^4aRG@PP3nBTtAiD%Az-CJK0VrP75*Ww zV$Ulx>6NBzS|z6ZjNNBzTHCboZb37@S{J@yM}MBHsz z9cBo6t=@q2C57d*E$q61bA+?Q>R)<<(h(o8I9Ia!iCU3=qCstkiBWlNF`6s4w1oT_ zmC>5l)o*`fXn*GepdskH!j8C#E6}_9-=fDaLkyu4mZOvm+VvktAHff=*hHiX6z^y+ zOBabGim_FTXbSlc39+{LCPXDfRay!=ZfXk2KNNPndFzZZNxsVdcdut7zhqA6h7gYm ztLw1n7q@jQs#YCfPjj>6)*9CbS-9^;()FQ{lZa7kExXn{Fy=1#h5e4gZWeOS+PLRnYi7N__tI}&+xij6eosfAxk#7 zn`F_y-Al1dO;=ca3QcatghDc`0`hBeVzQg<5G|g!!yBLO&EvdMt69dpol4MT=f)Ac z!_Yy0U7}m?$Kn9H6YOP_lG?$@*NX!&<-y>Ff}~kcN_U4Kbs63e)C47^|V$4Y8+A zR}qtg$2~WH^?ax`*{`IYTy({%>6M|4Iax9Z)=&B#4q%_w1q(T45t;NMRhcEA=7!RO zAUa>1U!)4nhr6GWl1+k)H(n}-)f#Z=uiYcwbv9vCmXrq~;>0d)NlQ=rRHwYM*dBEK z21A}}k2an8zTpcS6kmdDSW9o*wu8#3o0DybATFk< z;vpEQvPn)2BSTmzC%OL$;b_`jP1>{FzE{5e#STGO^S~={LhI&78Yb+3>y0Q}Z5#nq zi}anLDw~FmE2WuqU*+BI%e{?Aj+@E^ciWU*oGDs_o2!S`4MQ!l(!_fRWCef!N;y|? z?|4u`HR1`{Jivx*V7!(XqvXUt*)-`q^;E%(!{UU27Bp-A-utFaSuPW0t@$Sxuvx}9R9*s*q zDs|OQ&qD z*>5Ahl5Y-Xt_GBhO{Q&@LR+SJo)Q(6(tSC&f(wrl9jfHP(G zmX}=_#Qe#a{VhW?e|J#bn0aL&NCDsQV-5X^EKc@nP{PQc%WFqj)OY8p&2abQLnQ9| z>4su9*n@F3&EwjM_g6!vP2WAZ*o}Pn(5j38ZwWV0x;C*y>F+G`k9cub-VhM_etauN zZ)nigL2K{;fE=`K^-%wIw=_h6tJ}jdFAjq|hCMLczG5?wT{g&Bk^I7VY@nQPz7IXd z{eZjYyGh>`kJS(ZTxIvuw+7af+U<1OgB^D zh*3%z{<~Q#HuC|4qr5Y?K9t;drgGEa`oL4&&JNdk;u1~D%=@&Ex&m{J z@5YKf0|=P2-4GWQ!Q{369dbZsLC|o}s{_31_l!hC;FP4jijM7S$dHw2n zLMQ$v9BIP);oI#qq=x(`3-7z5L2;MutlL|DUzLw zi{n)C`T$d$%;~-ipJkj4%tU~L5xp1-bOGYUb&+FWhaMrTTvC%FGOA1|V}8%3so9C* zkc^*@mtNf#`mIBC8W?-&*T{XlCqXyzYfw!#-7Qzym89_5@><2VE7tX-U79Bz z0V3_PBnPWc;VQPhvIwu+U0dhr#B>iBiN#9%-9m0N5-5@T9rw%73x3dbZck7q^wvzJ z>~}~PFsm<(!nC|TBg-L~?33)zh<*}FY%)9w6lUrT=tr6_Ub1B(vq*AV2Bz7$3X98) zWw(t%Q|X(7G*^gXWu+cb7bms4ktXF~qk+Lve|M1QcDb#8jE(J0XjO)sG;#g=n{HRD zF$MKQY!7n5`p4QBMH1h?(@gON<6N+cFAvOuix!-rNI5YRa3K^6MM@Q)hFaRQ1ckx* z#&y%H*Qn0{5u<1Q6rTrPIYXKdOhL4~GG}O>%$ZKBpZ+l9>6f3eDqgt()|7>hFCM#-Vjs{{ zLB4DyoxRWhHQ2di7^ZE1zjEPpY#X8dUFMpse9-mqgW5in9=cZL%eJ_^gcf9Q{qhJo zFu?@rx!!U3xU0T?3!*X;dSIJfI+N{nbIj9kdK*w?x_)EH*)oELYw*te?alAcT}B5`W?U8v`n*v5W_47kmnRw z12_8V03HFjeC^AMhwmOb0lC!+;^f}rA12m8WZe(-v9=zbCR!Q43sOCL;y?1oaAjV( z5{lY1+UFB!Nbo+;lvVSGn4MND&-pk#RMxOgErAkIUSrj2?U#E%&4$*Vdp6s^M0ZH; zBqf9UPzaDZ+wC^p%#9ef02b<_hC_x1Mz>lQ4zz+L(F!|`9*aq?;xMo~uIJ0c;%Xlt zKLU|b56`V7&(#^Ny%-YZEgtRe8dI7t@z956APv>!L$4Unc1t( zu7-VXR`!T1uC5=7aSPx^5^wyJR`E7zvXXT0 zEHK+v$e)@KSom%xR9LS)_Ce=}Okc>YfX_mne8p)TwJfyn7u8gpzF!w)lkv0BtuDc0 zaW$gR);;2j48(gXB7cFZi_*UXy3#JGeg4gUeck;C+p6HhqtmF-$6qitWy2^vfFGOK zju{UHts^YFB!p37CFGXRg-v&;?yO$Bu)lbrnOST2Y=7@|f(Q^tNg|j$a}uC&?){(! z&6Sbp^U>ouKb}1=k3CEfQT+p+4J}oK9l^P9yA?Q#fLGi$`({E>+Y5}niaEMJu~ysk zu2cVD(~AjN`3?#7m7un91Ci$k1+AD@J}Y=JIVOl9xp4nOjH?$YjHumHT63F`vPT60`BfuN(O*S!Kc{6o)XYDkic!;a<^1FC4&xblbuh&}3i-n%A(THW9KzOm#2nys$9zwj&0vMjF z)d~AeUu-J`pmHmr;tH;7IMaaK#%(J(4*$tEihuc& zFLm=C6dB&V`EJub8wsMPHOqWjoII2Zy*R1FypMjWH)l#xsp7$#3}H0~cAxePSF$R} z4JB5x&{~i{w;s*w&w9Ry&omAg2v4Q0#EGCvy?)e94qkuI`Rg@cMo~rU6!!hJx_Ng_ zK(uy+nUGN~tmgx`R`-7Wc9)n?ezq4TasEo*fxpMuaW!2&_)N1pWTv7X5g85nfbob6 zt9&+zC;Qs^+gJgg4xzz<#9c_GNB!W$5cm!4aSKD9u0_4-z1vi3{sW?{0!@S{bO}D@ zbP?fRH!wC8VY;~|anQ`udNo;EtrKXRoBKUgu_+z=eKj$*WavTn%#Tz|nElKH-$Hyl znoK$mOE+j;@u@H~w#bFyb#b4oE76bSm;zfrACMvvDVNML<(v&!@1D#?`tQVB5S*MY z&fLj7rT3^Qu#|B!t~w!#=-*!E_1+3)ps@S#P}99xdYxB)rgl&E`@GA=9Z+8_dr}2g z^!TqJm)LY$cF(w%Zk1D%5L5G(T#|CxqJ!RyN<<}CRkfJb!3}BAf^c`Sid3Yq#^{D> zJ%tBr9IxIxD?uL4&P|W1qX2TfYF#no)2XM09UpyzBxqjG<-tr?X-n)b*LkScb`PXr z?O-K8^^$Bb%~sS~ID%5zYKsfjW(^5HT0y?QZfD=1OtVbfFl(l+^2+Y&Yk;Rb`E@F> zoClc1Tj;x3gr2bdNCYuF{bn#;*RIN{2R*M&=zF&|Un=X_p)}QA361vpov7e}hOKxd z*__G9`GPEcKV$5h`V?}jZL*iP6cG9W?7A@48w%Z{ z_osgO9=};b?4ImRsa9}E{iI(yxpcbThAVMBf&X!4elK#1I3B$IL};uu2LVS`_UZ+n zBhY^#WA~iUx&Yj-peU$|=v8Ai?%@xzp56BI6^NDxbqVP=nNUHO_Gf=k5g0RMk?#bP zH4`mGB#zNK{MvF%^jS>g9KFAe&bO|8p_k_|0Aa^q*68ua5L7hhW(+L~9fer2F^!J| z%*?Z*1}Qn*w3hsrmQX!MLKL5wd16%DOjzcg?Oj^xD!KG;+VX#2`um?X_y0Rtv86To z$R;v!+hf|?r&5LHAX-2#F5QhDXWyPiiP#2stU`ryzcz;s=33jJ5edKlNT1hhgN6K; zG^741q0aey?A2oO+tVakQ(-+rzUGhq-o8=2Pdz64Kf!u|Trd_FBP=+-Wu$oyEx(zmS*FNAm0ybTaaaQ{t7wQO7*^_Xz`0 z$AzhelYg~aK7{{%eA=OljF}2+=6??2`uT-f2z8q@rK{`KieTf_e`JM^CvK;H`4s<)}zVf1uwUBqh`o}!nX8M;e(gwozcMKE&HnZH-19&O*Uwm!02 zQ+r|J_$MEqCB(Zg2r3XiN(@?K~IMUY|fRh-HKS5q?70%9Yoqs zPX=zc4YKUxb6?7v{2BB>@fB@Q$*d@7Ab41BZLz%0Q+3nbq5XD%`hnrhEDY8)h)#*PRBs*Ntd=1vxwc_>Ok{Gc=N$B%k zKXhTg}1&E+by?E^x^+UTO zmpVG^rM9czb|Z9a+y117WI)(fuT6ex$V(rR{g{~H8Gr8if-DJ-cG6-t@?lq`@nMy@ zc9^@R_$GT0%$#~-uf2S&1DAggzxn9a(9|;z&IrLryp(tSb=@sH4E??(3IDw$2plvd53p;haSEeUg4uqItB`CDl ziz@^_o?LnCZJ24A>_PvW@~l>X!0VdAXZN%W++}{T(dLuM!nN13kG=thcJC-BB?hUR ziCF`v%B&K{TD}{>;Ciq?zc0o(JRL@yJJl@r@!Es8RBY~!+cOUy<5k%XfXh*!S_K!m zm9KO?v8Pyw$RdjYZ8#;S#OrNE%ppKeNHN5L!3 z`u#<1^{GhuJJ_-ebL5t-zEdS0TlpW)-Zkz562IsI2X zJm8ot==aTQ<&^Zajh2maRVh@6T;Jy)*Q1%_D?XZtnn7sro_n@P4625O z4_gG7)#tJ&rJStFdpH;b@g|MarF0viAe)1s?%C2WU_Rk4)Hqx@;L@1h(NkjWitaQT zZjgsfEny{zvC!6!O|BGhp5_3Bcj6YVuikv6dmYZ!U2Ojl3d709Sky4TMXw7xx&dLh z0&rQ#!SQmq*qJH@_LG%FZ(fEK-__&C{7=5WHroWgXSDJGx`q$cXWG|a2)<~PE6_bK zHXmZ@aZcf4fG6*okIj!Jm#m+CZ`H+9aeJDY#I~Le~Qf-!f~welT?;tmc_^TtE}HMv1QZm z>ulSa2zP)HR%Yi?q>PrIe06zXD#hj?hDRN+9B>xa^FThx@WL0G8N=r2CB(OzP)=!n zN^-{~Y`7Xc!z5r(NhN^^j@7-DxF=#^zWlb*UpFJH-mJ(;23pT)a*D~Ka!h;el7%7M z7+G{*ATGcg?$+;i)x4n`Fc|knMeQ=NR)w7E`ITerLCM+Cl%R+8}T#mTA;WoKdG9!{aJ*%Dz;urFF}%y_cbt%9Yh12pST<% z%3ZLz?>YLszUu7u(@z`~-Es9E-amsrXU9oXSFU8v1pP9bPHqd`>~D~t*}X|rSC`(e zoC%UoU4opYP1j5@PiJtl0sG$I+W>9P}-B6x$Dq1P`7aO8H|}p!obh zW}kX`Q^_n)8P)A#!LT4WLi*wp>!Z@Io~28RCGy*-T`@KLl%J)T+i_fGZ|Ko5rVhZ6 zwe_hatI?04(_zD@-|USp_OjO>QlxMHTq&Y0yiIlzp-(U0am5lYT6BJIwkpe*W{CzW z3}e?Ymm8VE$19A&E9lVzJ1F&29)ItkealvSNo=elQNNRJO!tD#LgPi7S53#v-U{wf z+c!*UnTuBC&ATf!2f){8&f@*^sLbC+#UbRiyrx1Ro9S0Mmj&uCE(pBjJDz{=*oJhX z#aLUy#Z27}tD}Bu+O9lgf_wr=r~OGQyqty}+Ro6zIQxBT$(+`7fUqxi{*nlM1f(bMrny%82n|73#QKGw%{MIcK{ zgtIP0m(+4cSctR3=W+*$9Ts{MF>J?Xvk>wGp|q&!9^d`JG2h0}X^v`RN+xA#R-nvO zxUP^p@{|^i3};3eFuwC0V(O^QqUX72;p@#89t~Zv2u}dr+Yj^wAAYx`-kSnG=jzjg zijJIx9#dpH*l6Qmfq#A^=IH-0pvLDjHZ~Y?J9WF^jfNUB35;cz39g`W0b|3*nV1%T z(Bh%aUFedhJI|*gyR+NJ3eL%Qsht!Zd|ztxqEBZlk#AF*5@ zy?tm7k&kdXH{J~I@ZSLB28m>#w$3^{%rf@AXthz#q0uj10489 z8;Pda&_=p+P=jQ?^+NYOXM}U*jagxoS9*)Xhwvyfd;1WN5)%fAN|};lE2(R09e)s! zbV`&#SL$W|k`MjjQ5=O?G2)d$e#ZeCD-l#*Pud2zQe7={Sm z>KJCa(!s=9stnXIs-h@TO+>gm@=!CQxO*9evjV9{MNI z+`yf;dG%+9$AMvg^UAT^oZR3a4CYE|b+qLiq3w{de>VRKA43`#I70n_6(WDpGt-@L z!WtuOi))jM?;Is4cV~mYw#RScIRDyCbMpA-qbp$|C*i&!_zSZuT1P${zUrQDTl_FX5nNiO&@> zG-uPg15l*mi#N0!bLkgcu(5BwiOKw^i*Xn{FZT8*^@fN1VrkC_&_;0BL!CDdf{_<6 zIe)qe&}+pPwSVsWnL0ht0<`@*xW&!RQy*vR< z0`|^mfJWAh^I}G0bJ62WYNW+Q(qMyp?*7iR)zwJ*wn@iChOoW5!MY`G8ztFd1&EPK zXUO#nwV#oGAWN}hLr&%=tCEGR=Q?*avc_5G==*5fGtrz8;%!TRd__a4m<|L@H6L#9 zoHWDbn}1Qc`@Hg~Yr>uManz1tzY3brbnot#@Zu3GY=G=-Qbi9I7Z3JFKYJVCSBCxG z&Dt{gh;IiWDPx1?3c2Fw6(Mxb?jehs81m}gPvASU!QDOeR+4Qp3X!ql1l?K)X$#v6 zswh~ETn#I;CbdzOdog8gHA^$@X0{>%bCWo?G_MW;dMQOyb#Hh&G+2dxtM zyH?M38|`0`7P-RTT(8N?vf6T8PiC;jmndl7{N$hMRWgGyBgVOeMQ)Z#wM}%Yv(pa@ z-eoFaqr)HQ@nt`D)$0R5Vxg;8bEuhy$d*EGz~(I(#-Zuhhs-Wz4}s?&0U!5>lkVAm z_s}+#r#9keOM7H@N6y@L^EeABb1)|j(vNqK7af{+__)v5>5*{rL6g(dlOZ4JC%?fr z^!oUfBrRLKsp8*uN=Xad8H#yhI?fgtV^BZ2$;+OUt~k2)e%tAlmG!-BH+3_p2}pAH zVOHAlK;k-|jOF!>vb(uF992`DC?DV`R@U?0l0i9)SXVm{H_7O6oeW?3n9PEaHtDV{ zry};gNs0Lnr}Er$8ZR+{nvo0JpMnYCWYf1L-Ax%RJXgC9&3lUUr?k@>;BAYTOJg<1 z#=JfR@_e=hXR6;tRSuUMSPjJ?1zevGZe=R8W3o6SFb(H`<+zR^9VLIrxEiyu7cL=` zLB)tv$npTt{sTgYxPtA|HjJ>vn^0xGwvsMv6>K~e`jkRBoCReLw~ml3`yek!Vw1cv zwhA{^i^6Pbf4LXtcAi=Y4sJ*L*B=sn9ksKT7Q+>N`~(rN+AC(HSA#D5oyIpQY&a6& zrE%h!hV35Z3Jwq(50|>7g;qBS6i3^XE&L+Z<)f(pPp8EpJG{cPf$!>q#dh`Tp=Q&C zm!|I@61`3z-&J&QQ9!Z7G>F#PasrS$A3Ho0$3pw+e!$+hr3|A2xpJ3byrL)Ea|$xO z@I0Xbt7F-NgV!{SK!cRR`0p6m`Mens7wE4MEV3=|pqn^&&#mo8=*58y#k;gTLgFOh znh#jT?pveatH7zlXkXW`(z-0n3^L`r&!-X3GBJLd=i=SeC_a}Bf6QxS-O2A_m$@ui z=57*ZSv|uUq3``8vr!o?Uu(5B)qeFuos_IzZO#WbYH+- zf5HcxY48|>f>!Lcx7jEn*);_DoXa-+H*w$d^TLdWvA#vIl>;w$w>=2Yogy;T;20F* zS|mlw=j}FBTde6{NLOs&CO7(P;;}r}ySd zP@5s$pHkHBe|7G^8R{oAW*DTb-0m}Iga%~a+47F`oAYHHbj4@T&| z*%g_IG7NN0rjKkbIMUNYzmc`p;4##|rICj8NW`EJ0fyC=r{Ev-4*HP11D z#3q5%Z6;!$&YRa(vt0QmwwvbI$2hw~gT#!H=iR(j5)_!K5lz@RMP$5tJ(E%t{iaZ8(ZQ1Gh4n*ezjBo+;DINMKt zQAbhJxx-s~EIu`*wNghdTy+WoZ8!gAMH>Ae-aswTA@NmQ((68vz0b-*=WBY$DkjXb zoyE$M+)oidABT^4D8L(|TQ&NkHtBnZ-+sPFU{~7H<4c3)o?bbU0@~v+rHkSv&J)r& zGbsMUiTpOM@l1Vyzf1cnSP20wA@z_Ho!he zBaNsP2QAv3E1Y{_*y(OLcdX+4uexVK{`yM}ytYiw7yhR_I-!DHhHhNozqj9LK$I@# zPml2L-lG2p-jb@@`A4Q2>H2ew;NN+q*7h1}%)zaTbYnV4T?8#T{b#QHQ~GAM`sRb_ z>b3(66c*{9N=w<7=;CAU{nO|CH*$vaIaj{q0;uL&aeSc$dsAbI~bk_V(xHdii zXi##Gcqa|%{nT9P&kVK;Qn0Ut5YnAb>@76ytp`vTz1r)WF4>@09D|kq=o2$ZJdrG6 z9-F_hz6))GCb_wXX21VHZ-}@*u5wU%h6DSodpD4ca2G=rBDovtw&boQQ-x^x=-rSxbrUeReT0t#Vl)#9|D z@pe8}$Nu539lI4D*O>~*cg6{^Re!{p(&z}t)9CTWUegg<;{D645#^6P-+EM= z{$U{D zc&Vk1H`G(Mq9$AM=Cdmwp|Rd zf)WuA89Ks=VYkNS`ZxRFKdo7hZRqZPRHy6?ishDa5Mc)gr}HWoR$*%CdRy;cH{b{T zl+Nf5Lm7&PW5=Cao(EavZRA#1i@ml;u5HD#DG5+TMXAwBhTE<^mcsdK{@1VDv~%>= zTj6M};0pBD>LWzY5}k(mwEWs#p|WJ=#ww%QRWEmTeUnV(SqNm@K$#ab0eYIKeM}s* z1Zz2VwbbF!d_;XJvmLufQmA={n26G7qZ5O?+DT?fb?}``&fIVJ6(jHMc>|UNgNKWe zmoT+ED(#yn(|=J8J}W*ZK=wqr6~czLwYr}Qv4VD#Ygx$+o#ie$n%8mwwJRXotE{wB z>7|N`G$MmYQgNg%ev{v2%`d}J2kR8jEpKb|)dkyOAsNWd*50g*B z%SYZd00>GWLGzm0Nf#FU=c$C@IONWguVgKIiE+hQim1N;G;s6%57iwNI|=frg=glT zkb+a6eXwV&1~9AuJOZwu5f2y>p`sJ6SC-By1bPr6?m}&j|8AUE5#@_`Uq7_7@hH~UE8bXsIAcFjs-Z!pkcN0Dn6G(6FSAjtY$ICpLX z(;v|3G;u3D3HwBOR+Zv=7*==e%N=02RW-r`dj7$6HU}Qa>H5%Mn-zT?f15cvP*0Fs zXg7@;d-JuS7p!&D^S1ZKA2Dx}9DzyfO?A=VZ&JLpwF4@PyHT&-DP^0>jdkVT%=qo0 z1+B(?*1Y~k&-;QPVqT~7hbZr`HqLZcVeP}&5<)ujUHS7?*sCRtU=HRg_KpFDGZ#4v z94466B3Q2dZUledyt!4!Y-gK}n_j|3g=0-WUE!39-`8onJtHPmgAT#M4t<{4fzv6p z^zfbFjadwtf4Q=ZE8n?6&YK`t^>iN?kOu7~fC{URu-)D^q{2fN->7@pe(o)M>)1F8 zMY(M?!+26^y>{le$Wf=22S9+eQrFXgjiM6U&zN)Z}y z^ckAlmay{c;ZOmAAu!ZPFQKhS#7i$LihQrd{*mJxpu2as{5RUv5x78ZGvgXI+a1fv z&Daw(lm|X8o{Uri%GOt(`#ZJds8gOMXQN-=Wnu(FLC*o?$De#PiqFk*oT{RoBnUr! z2Qu|V5kTFhR`w`z!YW3Gn8rGAU(LauoZmGnWnRR1C(udQ4<(B^aP%hDUs3saflcP; z_4$|OCQtBkwBG?QYAG1zwWt5ih?kq%&5d%5*)-VhfX#F*%Ec!t7d=RC_oBQ9{uJXk zBM2=WS}Fb`d>s1(@TJ*Jij+~Kkg&_nx!3h-g39a>rge!Yth@i1O={{O zVb!;~wkC7K_m`WHNYl3-M+7L<``S?kxF;mPZn}G#O&!4Rpi1LepPjc^Xst`WQ+iRA zfTM1Qh*KE=3AZ2bAr3#Y4|%?!F|8~<#~oY^#s4l!tUG{6BVd(i>XL?8IN`sZHVBGh zr_=LwqYa_lt9izu@`wqx?f|6mI53>5nK_hr_zGQ5>#_)!4e73TiPPLjU}mePFgeUL z@8TD4K6+lK?&cBp32<0aLFuq8EgbIF&A#i?-ls zb~^Jfr8Fy`bL0ZM);#1!VXP7}6sNJimMXLb`2Ii2g3QJD zlS(wNG0jPpgf70?XMK5KF*m3peg`l8qxlYh9kwn}&DRKxSGJqE{mX8&%s*N36Eb0z zg4Os#Sj&vO`zS(N#%HB2+A@Ah6Ut|~O6c3yQ8fJ^N)#ndm)94<0A4fozS=LU$;9n)c)TCI&%Oi9bIqu0Ftzg^% zsMNCD46vD++uPLUE`E!ii?(QgM&Oy6VrdWR(8}6flE_T;JZg4qBP6sJw~EfWMW(Sd zxwZ$6I+R>yZMpU*S>k#uyH2g!irF85#90P5aRt$sdqV!_Xv#s1mv8E8x?rORo%bJf zV*Vg1+*eu>C}g|JCd0B}CC{2!z5Zm5snnd88czMUT7mhrS}0+$Jaae+`&R(z3&sn zy}Iwfyp*>sXX>X1sD}%{JokKb1bL54lU@LHr+Vs)b^-f*>aTT;iNXSQf2D!}ozD6n zsspe1dzvdThIu^>7Ki@XOU-WfpOs-RQ?e>!kNMmk6!Do`n$v{$uPN}TZ}}V^M&_hc zKl9q$k89|W(IJ?^id}DVnkcDH%xK!FI2}Au(-j&+q*qs{`ER}_V*oFXSfG`c*5C4t zc`kcQhh!ai$q!eZD*IGI)L^Stl6~j^ie1@k= ze$8?ZfJsy}r8m;)PHDu?lAxg?{OTSCeY4{7M<;C+R6SRNkIkU64lucABuUB1s>c5( z#pJ{8&3VnNrJnNDFuVRjNpbBgBYEuhhTmL5PXOnduVEYrGKnRSKg;Nk`!>h%tJ*>B zLq5w@WZx;QAZZAoH;rJ!8(4=U!V89w} z2PXQNLYG&((vMVuNbb7(KX%vos?#C;P3E!fWv~Pm+4%VuM$6u5xFqB{u_UtyzBcaC zJJDSCJ^{%t=GTHbY?l5**{3z7LUvDz-xQ8?BYq%I#_cwNLOsAUUm?wEr@wjSIs}Hz zlZtTa8+p7fGA@;`7&PqqMIBu`#!mZaUK%)39fa#xSHi#bkgXb7uZJdzG}nl6INUV$ zROa0JfrM~ctFrhT_Enc(VHTt*4v*4~X1zG4$zC0FhS~r6{`dpSQ?tZSzMP`~ZQ2?@yi|VNwY= z;e?#>>5kp2rhzhv`FmMcdz_F4EzK~ zV%Lpx^qD)68wA~a>ju7#Mk^(icTeY z2M8_n1k&FX+~?f$p7Y_3d&ju%xbN4Dv9jizYtA+2^Zft6XWcKFJSB)6hHIT`i0{G5 z?h65oCWmVdO^hQK>@kN9X8m}l;t!}R^P#Acs5EQXVHLbN^YK#pIKsX6V7#*b*zLkU zKie_DBbhbCIb}pgT{**U8y?pDd$5%Zb32pnE+>RWe41#JizR)~g6DZxIrw#whwxmJ-!}TmsT%ld?bMkCl_iO}fYN zJ^cFrrPLq(gpAAjRnxfvFr$c-BfLlT9I!`t0mpZ*y&;nRK&rJw&p6rVC~)eR`-eGt zTnsp&*JD=+n^S-bKFwezy1+38m|h`M5wS`RUB)ZRUD zfCs`jhwG~59*cQ&PJFef?#Jr>=xcZ=$1_Zqxg`CAiis@VUoov-M@OrZ&;>cuU(+7&NzGZw3OWI4P-^WYq!v9mP5bi zs|Eu)aL3^%L%Rukrfi>&&K1ilYh~!@PI`G+t2+1_Tw)q>YXAF7D^Y6-gpX%=NaJxqCucJfZP0UX27W?_divY z{wEW+|Dj#|uf0oP>E96nhyMa1z%}>Jn^^)z{{I)_o1+Fe5))@6$Cr?k+mAhh@9f6j zy9~jTtI+^Ekif&uzyCg$1n7vUCtS|JG-s7X!z!<0NXFAj_cHXBam+4~1#F<+XScyY z>>>CXZLRHOn36htnY-Se249wLM-ruT2Nz6niJpumLvPtE@dpQAAiAv-<~=DB(CM89Xo zj2c7ORVLuUjHmswn+G?tGnW-bq{gI6SInR8wlhv9zvmk3)5yv{jrdRFr-5A{V3W>I z#deFx0wH~TKd&xAw>B=(%vb8MT$a4l5)O(cZO*7n-6Wn*xqqpK1{hCO$pdddw04qi zEA&7J7a1U*`2kQRNin%#_;d-7B>#+q6@qXT(N2${n_Q2i>oyrg|8q`O0i*Rh-ax9d z%6Nn71!>Cinx}BhNt?1{;O+UbS}J9(^6GIEOy_jap@P(oY4DIoiGLju&)Hdv}`Z4h@8Fqe_`HgRnE30J2 z1-h?uZeF^1ZP9izccWhQjwodGgf(*QKT_;}9v7R`hpb#jKk6fos|Hy<#rUprnS$8N zDr2j~)_JB?cj)klSy;bxl+co^TvzZ-E<$koUl4-t&5a668O^EB7hC925Hw?c6b2PlX0(;5zC=Y8}YD?NZq`=?8@L$!xyqIL(SaBq7|o?FG5JzC4noFu#;2 z(`YoM6St^llZ2N#u2?VnO@BjWvgYaX(Fm(4)w#EMW8V=q<+^^}qh0dHVwdY{7OYt| zx^M?)bBhm!9|4B&<3mBn+_q0nq}x}4lmc_;56^z{vh97FLOem{5cI4iRVIf|{1yJG zY3B?yuInE(g3(7VzEe;U6-v%T%yej*(Q_Slvo>x8?eGrj_08Bc;ocLEeaw zR7;eb9q9x6LFZ`2LlJavNfPO^x~Yn-^cQLl?Q!UP`2mG&?-SEF&1RZKd}x1{ zU6@bLP{{3rn4d%ZrlpsNFD+8MB(D2VB%&ggIlS%lzI{u}AuhzTyP$D$mza zhdLwgB{Cjb#@Z2Vs!gAt>QHNwp)$yB637vEd>j)IdR=thr0 znhkh!VV!5Bk+lQzW3TMTNxD9K(MC;+iC6h%^IkIYSpx-8tu2oTny{nlgMGIu!l%X) zBGUVFt3SAp{OG~W=jija>GTLppGNmBj{mXngZRu*-LF$+5&H*vRX7iHRVv*qxx{N~iecBlc`<4K$LRp?-@ zv+ly4J5!Dp2)Q($P*O&D^S5|#L8(f&^dzn zWeUjF_|Cj#ev4Kcx_TslTL<%=ZJoT+5O} z1ga+NWAf|#;c5A9-xKK+=^Z zprF~~BthiKZRv-rT(WigT! zm?0dym_60|G?C)e5TS<}&#zs7k1wC|iWZUhoPK#&;!sG5=S9KsS>)@&;LbYfg}5Hc zUuFXJVl$`C+jxFbYYnv=LfG;6RJIj39=rWvpojNk(6RIABYlS!TNyRRgtSU@$b)lZ zgHX-yUPXTUHc19wKC8Hj_j!#vmj~{g3`^G|92M-Qb)kPJxcf z%(z6)!Jwhc1bj+jyvP7!m6a)kgK4gjUWC5%t9AKZHYg_HjK1MBY53$N0hi&FcCpdM zq{It;ZT>PDD`&AAJZ!bqGP3wgpjB+<4`shJ)%hpRRd|HzA^jfhU-oIAQbYvV9J_3C zkiwo=K`)P}NPZ6#&n|1Ps+<f3*l>ALSPI#_e{h$Z7$8JdP;s% zQl18D@qvFq=dZ?m0O|wC>o5w9IA5mkC1XuI9A}b+;G6l{sm9ycwGaWGe;}YyqDe81 z&&~^KeDPH?)YX72|I-cYzo5{@7bE76)u8fr4@!}G(4#- zZ#BcI08G>V74pcQ>w9}2yO|L|P44&8y27Tl7_xI%8t}KQ%$FYt^h)=DSf>o5PVO;y z_=~Q>tHWu`p;~59@@q|A@5Nk2npCE=f&GSFMCI_+?k(H})@F&*BvY322a9(fXP!gG zl%5Y|rw1!@Ryg$8ufFoTy?7p*a#<}e_4(nAfvBT%0ja9SKzRFpEP3@=cVc*N+^LXt zA(lgOxXA?)As=LLDmII$iebJjx;4>ZqwSd%+$tTLI#ZQa%f!o_B9+%+Q>9LiC~lne56iU;?ZTdK26_W5kd%aw!J&Rh(UY zZuG5aDLeGYi@M5uqw^4GQZO!JwbWMGEP`0M^`(jV_%ZE9!fBfP11p03&*QsZN_8Ty zQD#nKL(1(3Hy}UKZNJdtJ{?~J_@O>dyT&eE?81&q1h|5!_Xd;fbDP?V{-&Lgqgt!-plnf<{UFWehynHZIX$IIh^v!aZ90)`?yZ(I~{m1 zxmk+zVYhM^W`o$*8%T$Y)z>Gw1;ST1Ow*Y++@xuIH$$YdG$m}b-+Tu-dUk_E9p==9>Qhh4L!%oFK*`H!~{AtXwQvyPSjE z(U!PSlJ@-Yt`J<`h0T~PK-sslUl-rVQ}j4XxSA^MvpDMdGe&$43?PB^^=D79yCljo zuTessJl)ss16uYRe9y7b`rUb8@Pf%RSbFx}uKjeGmnNSzJPCqbsYCSgu7+vizb}C~ z{qEOW|Ms(`F~I84rb?Uq^i{1vB3zjFICw%t@P@#ixiutb2V{%+xDIA-PD-7R<3^|n z&n-=NPtbct1U5dyD*cv@mv;FIKRSI5oc`C& zx%cMp+Gb7^${$W8S{nasLzDfC;0f@~k{N(V_j!fLP*d`6zg#Arh6k3OO{^N3JvFe~ z&1*T9$ItDyV`x1X^tg&Hm65Lb?DWOPqqKB>)>R|>*^;z355;z)@jcRq8Ivaurvfz5 zg!Lmrp2M^7P4x>wD88LH-sN%u{cI>m!ufFv?j-x%H9 z7&K_`KET}^MubQ?KW9`md}dpQoUwf)#lz?{~$Z|yBkTT=+*?s~>b$(9*@&f32DLK-?Rkn{;R_&IOPoRpTvN_9+#>FoGpX79G(T)0)qRo zaH<(W1kFcH&mfpWIvWW`8QeI(!cTa2BRPS3``5huQ~>I^h!ba2<;R0u*FS;E^WSi` zrJ5!zX+IYSkKu9Zdm`m72YBt#y4VuClljvcuv<;{pMhXG5b01 zR5b~V%|vUQXxvT%h(iR_IOgoy*p1x<$hVOUW`<5lw$Ctxxrv+ta`SEi=BFF=QcT32 zKeKnkw7-{)uuB5b<4XoNgJ#Sy_`lu<)&F85|6iMk`)@QXP$_m~H;Y8}{=P7L71tS5 zOWT;s%b4m9oE*_y8w*2}XmcJr^G5$z!4gK>b}K_1#J|=X6C@YP#nr)3ffLBd-qpRh z&#)FTK*&N7u9yaYL$lwPOii>!a9OBDy5Jg@s3Lzx%Cw5eoRRTgp%LSPJtgi}`ARv1 zsn9g+jTIF?KxUm~>}xIcVw{}h!*Dg%NH19+3zipCe6pofc#5lt?l~kVKO*I# z%`b5~@$`ZsF+woEYNK;Br8a&TSKyZ!Ff!Nzc6fMINQvKIdPzq}(dZC`_L6=8&q+xSD(a1D+4k)1HS!2W}4ayZ0!y?xpy%Igz+ng`S8VRcpTrF*0XO@Q$?& z{8xm^Y@q^aiFJ1YDj5iV#Ic+#TOB&u2tZb-8-GDobVJ>LfvkoP>u}(-9aY3U4Xr4-GB9^#oq z6tYuoO!q^MS$w?|t|nu`L3w!R2B2M#VJZy0_|K06kfde+ENVc?QoQC{M=(Uj@L1uM zD#uaAi}i2BH{&av%mw`T`Yjx;n%|Q^VQ#^;)~m7$AIZ;qp*1z8inV(pmc}lkqu654 zlvHwXuu@V_T4kqo`szFSo%oPCusvxJo#=1YkCe<1WmSb+2FyXzsK#GPX}=oXnM7|| zCU$q&r#=MA;=_f~#=P_w_*Kw>X#pwkqzAcb-aLI9kZRXK^qJ0PH9CItPl+`luA@B~%7gnM3ERxOSIs@{@gdftL;bM+QbCfaqr@+Umynm65G zN0vUPi87DpTYXe|m8|VI9N3wFl)}Aqp7?|scCB$NRmfpP0k5@6y2~7VYv9$wWonSg zs<$sXD;4R8x3G_1&od!vyb1;ft4CN3Vh%F~9cn3`ect&S5s^+-3$$utbv?li?!F~;(W?q% z=7mHCVq0KDcd_VY+;{u(aehO}V!MKNI+O-i5iIsq8m`LIdfG7MPyy9y*Y}k8l02zDh&gdw*t~Yja)6J4!JaAVF zZXBBc1`fc?64h^y{Glj;xDp7uRUPvW#H^7=egU`RscGm`RAuW4DN|f|_CO9JwHm=B zJ0KU`q1r{hvatQ2Op)MVZ|3(8nCxC2U@GP|Zf~}{`;Nmqrvj7Z%G9LDD9i30RtHW}eBwz3QAT}&Gbv3!6Gq8BE zKH!Q3ug~gl@IkNdUv$F~^ugg8JqE4v6x4dylvq+=`Bb~lcYH-}{7{p?IU!WIDcuty zJw!T3&+`G&a3Y&VMLBIrMlg?#*yoNioi+?NmPCS&q~!FD(G`#78oAh!2VBz_sow>1 zOLJRa-4t(f?JMZk;w=kF+c*n3X*J~7P0CR|>*db)94%ZuNYzsFt6m!~%iLfSpl*NzIWDwf!a?2;5H?TKLfiue z+Zd|!c~Xd8RXZT$c9Q)ugp|bdh5pM+qMa8jwNB`6<=J3|?7IV>uSzV?Uu;eVJLc!| z!WL=hHY{5d1ifIIg)C9Z~QjeHZaSpCE?x5dXAWIYvLfP#b&spBEqXv`Toks zW_&~uG;7;Y2u1Vq86ncc7m*3j(3J`}^)crpk_+Vd)OlNC%DVX~41Kg)7s{aZ>*VV< z#ih&X8=h5#JL|);jVibXWxWSy#$S$ofN#O86V*RXG643WZ7OUCP`jCm?A+nsoHH@HPS zBzTj5d=NSiZ%%P#^$<+eo!>rG|H=~}x@CAB3v%OK1?EmFNCdCH1-6Y^DQ5Z1PR5WrjEW}}RD8kYo8irX? z6G!4v5QYQYVtDH7i&x3MgdGb|Bi>%g#!ZU%ep_v<$5yKon9UtX;9E-kFC6E8?~u?w z`JP*H>*GF&fHuAqaHiSS4_f<^@ORF-q#|Rc-x(ss4u5y&Rwi-CD@+KMcFDNrRMaqa z0t`#SKag?Rcv(#m6qFF9S8kgwo;jx~0L04E`*JMW&Ipdjl0jK{0{=Z^u%4r5g6=5I z6A%Jxkn9%n&jvIrSV)aS#pO4I)#J5`6oepke!LRGXuCEpa%kJzpae@+f}8gR%$#d7 zIWmJxnzp*;#0xW6-U3S5t2%!~iP#SC9!FW06n6z_Ez1DOtrNf*dt~aAVB9G|jXc1-vFgVBlPKCIR8``=bqOA%8QdY49fano(%;IPG(<_C)i4>kw($?W=X zzRPnVnw5!S6f@&30n_g~N*vBWMs&;8rxV5C+2+d>v*gU@y5V1f`rW-Ah*LHtS(&ha z0M6Q=_}eMZOZK48=i&DqrT`HvHac$gYEKa-`0W+mX6D!E7X;m`qK9a6_n|7uP4u#= zSs6z%l)Z>b5B-iS$jq-A2*B1Z%nhbA_6M*={b8@dN-)%~gI9P%eeQoU{jA)dnwNi% z#p8A1g1why>QWum68myaeSor%zi|=ITjvMM4?OZ{9ou1*J3~SJkv6n+msY{DV0^$f zTY%qhoJ8IbQj|RMjYDWlg)<)?5jm@q^vCRS;mM?D(Z3{=wP}2L`u2d-;mddT$K8@T zhbxarbGF@=&7abpsOWr?um~bq2bC%GD}H@<1=da+DI#{-6%j8FSh9<>O(y0YvLcSW zP~OVSQv6C3+O9Qsj}i?SG|(a}%(-+nY!#zlFZE%ERZ#J;y+AQ0Wto$oB)a@_AH_2o zz*3}Z$ix~qdMLJ89A}2CU*QNX)zxY3lu~a8umpEYp^BGN+xwed3 zj5Es6cF}dHh@UHRyP|=&=`=uQf^P96?Dt_c7Sd;GFPwa&GxxeBHs@ADHeCIkv>X3#Pxc~~? znxQ32E23Ay{1WoZG!m3tAZ$p+-X@>|)klJ$tPY9Rzh7nJT!wRiBae)b;my+p9LP}V za-)=AZNK5MN=PjIz0%3RM=&xu@OJ&)AWf81900ZP{W5_#m9Kdh1c zH!D%Z<56OnN&auvMlaVZVUgmAONnvM)MZUTui(VTF^;l=mMl5^cRN~hWHZngmIP2) zy{cOR_(H@dPB~>|X`9=Pc2gfMqQ6(}j@IZ%@Q0}~ykDJd)StTK@!Jh3_jbrZQH<~N zu`mH=QNXAP88&-L2B2-In&BjCXMEvICso|H!FUcGI#w?TJbJUvhEmultn!gs@R zl1`Q!NBsKaQT0)gX9)fzWxFzHsU_^ld6-wkZ_SnD`{0PWsYCEn~z z58w(D*MVIcOq@N|R^RSJ=(~F_XInq_gj-)c9QbCI@f90;N^ycAJ ziv^{sVW`JA&KAb}GKUiPD{uE$nqT*-)Brb|o`KMbbLyxi%^?EYqedzcxPG|R>RUsH z9qY^ZNF&;*5$+8>(-*Oi`+xu=sz}VE_bJf8L0J`37N<p0Wumi>UOB;_>7yh%Or~GzX%Yif4FN5h-4bn_1{H4+N;Xj`CHHKb67@gZ39U$rFT90%4_dxT7Qrgn_vc*Ne&~|l9 zUj~IT@c?r#`!!JfAD=jRo6&UBu+P4d`UZ|aS1F@{fk}?z?Za|IA&bOe_0mNIy(VHv zf#C|Pjc}|1K9(0sj>~VhE4k7T2;QXi@D8gxXmxqf^p0qryJz=OeMijR==}Q=11XL5 zhxzwZa5EGQyff(mO!M*ClY)^@046pDN~PFv-@n$*+BciaFor-u!hin#pWyNTMtJ@I z`6c+`pLI%4J@Wq_D)IU6Uz+*18x6Q^a`q>FZd6QaH@XCTt#gmj4O6|U>(0;q5AggW Aa{vGU literal 60464 zcmZ6yb95)o^9CAcW81cEV`JO4ZJQh0$tSjLZEV}Nle_QtchCLf&Y33U`&733t~ps}HWfPmnBONuH10Rfl(D|5d<{#~hIjiUQ^0CrZA5C*E5#y$I20W%kp z6#@dPkB9j*1pilua*)(?1_FW~{I39y+5=30fG&oAiwdcD=w0T38!U0}jBFh6ySp3W zFuMG8z`MS_wrT79Z?kXviy3VDck3z}FRev?-5E1D&0D_>V;e!kztx@8a=qB{KHGnu zJd{98v=0$FF(F~mh!RywtR$g7-CwXnKg@_SN+n_l{rLFyAR-)AG;9w^Qc}{2ikAFf|7ipLxKtK< zQN6NPq#eiy-~BV@t&^h~Rl2w%-#%d6OqbJ-n~_B`e((*89Rn^5MS8LXPxuogi^!@O zAm#J)J&CnIp&Wp{?**BJ)1Ih(wZ({8%7Uqa{S|#{zt&f8!;bU$Mf}-o=K_IZ=FG$n z`ObwCIyhYWtM$YHvlIje9kWjG{+}?CevE<(g63~90k@}a{uHSB3EULd5E}wv$-KzO ze+Xa;Y#76Q*~KM10_k42oWS8#h&^`FewWl)sGtU;VjmJj<5PK(l9CEw!iP7W>?-!A z;$^j*Ds%(iOgwFP=+w~9w+e;sDYX|KWmp53)g(`#-bhh{$m?3Ve?!2n#&l5bjOt6` z7uK{FV57m}0>Xl<`t)_P*P&C!S$3IR>>x(R1O>@98B+>IPv!uq@bNQ+Usv`}q13yM zmOmrh6#287VL>;Qg8Jau;WOqxUHSs)QY$BpJ#9MJN!4X#_W8Bu286q_y-bej<3~7H zw`(rc(UT{PmL0qPz$sEoW-${651xN-XuvR!pWNZ7ShE=@DTY_a3fapn$J|Iq+lJPz=Y6_|JCWz6QcR&3e@C zBd}W@2dd5sQ~3=+qxMAV}S=t>p877qQq1Gdp}aV}V1kiutxVp|^9 z+*-+vC*MH0V+$s{(U`rQdK9{xUi*q}Ccl-QC{@BJi*{n#$5T#w75Va&_tR0XgVUhf zc64K{K&F-NecWpUH>CaJ&Vjp&P(@qP8>A}cB4Gmhjm@|Cwkyrc`r@{-*iJjIY~MHl z_(3uA`6uap1AcPO6%APhC^}WbW;3$8yeqw8`840IDj)}CG#Z^u z0=xy&)N;HaTH(&QUYvwVGVfb4KptyO$Cvd6pHsfzDYAMwzD0B`}GM!ho*0iX@=#(=Nt-{WM^;>vi5Lh z{%$Xu*%L2bz%QP6(V{T7wz8He^XeP(^EVS3C#a=PZy@yX<_7r; zK%pY0r^?Rso6Ma_-rh~|+Yxx~>d$w5$=La71kRMR#=%adPLFLKVS?~$HU>~ZpzS&d z-U&S1p%bL{Rkbt5id3ll;eH>VXX-}@__DS;rcYZWB5Od!;RT&puO(Q&EFv~L zuDUwS$uXr-35g1Q9&hjas|_3oxR#*mEj@%8BL+urc*bBTRiI_v=`Lq(hG&3I@uCWo z29Kw;8ydW_8a=>YKVmB&5pO*^WcyaYeFgFfV^*t<7>t^>;S?PqXiJyB5MHAWfvH$b zgkq~TfLn0uz}Fph*t;exRf@yBj;5ZVy%n%iEr1sUr7Kgy@C(&6z#-N~N65#|pzj8q zTtu}W8WHw6ZRG64xi`uR1QP{lY)rZmbg{j?u1i62$e+qDHVn5KLFlu@MoFc^0(Uy) zy3zHk@@Itx4Q9(NG1R@9FXy{tHxiy+Fnx+JI>ThzGVSvzBzt=e4OXe3B?vtIJ1&;P z#Z&G`!X95>F1fE}rPK9vx9-${u}!XH$p)A4)A<0>2LZQX!z(@wWGiIsIyI`ql#H16_iW9{LopdUA80J-#D!h+6t3WlTwPt z1lII2CC56tCtD59(d@Px)g8cxQGrL*+5B!NnZvS~%>+G1^dZ05>Ga-<&mH6ANOI8^ zo~Nw5xq{Cyf`Yu*+#FZ8vXpot(QwdaZ+i|^ zeK~3j2euzqy?v48crN&Z?Puuo@nuxsP|xm-=8SZK#(S5<6t5_a!x(ZzB5 zXYLJxga*Al-5$?9(lFs+i{(3K;^5JmjW1DFq^hbZ15t$_u49YiLYbc%XK1?|gdfkP z@72PeS3LC6ZkeSu;+_SLbbn|HTz4jL=cAVIB_);dF>fr`9)Z&)}Jc zB)jYVmUCgG!-GS(b0@>sWYEPjJ6)9WN~?vvx>wN2Q{0ar;=qi{q5kR>ev?eovt+HO6hAa!<7hsu@w@iHv6iI8<$$c4&cF#1Twac@$MBZ-*l=+Y64W#e1J{3rlCbS`Nt;O| z0nPo#wngE$YDxE$#r2iP-K=Sv5DtreF8Fqhk?t3VOwJL$ z8{zlJ<{|}0qbPNG0=L0r;$ukqYWXD+j^3T@9LhuLx_l4%&;GIngW_Gd5q2yD5p@Yf zkrEZQ=2E9{e?fSCfvgmRj&E5qh20tk$I0o}5KSf65micqysolnHG9p%k(-Rm`W2fe z(#cK=Af5H{uB2>GPHYtS+{JE*EQ8C(@0#{YQGL4y9>JEHL52=|1i_D#u_>y-4%Lh8 zWoZm`DAa&bya=tAlj8>D!BNHIa1zpZZ{s1Z$NUx(%N}_yzx;;8jZtqi?vL|vmCp8Z z@xt3=7N{*Jb31AgV{*w{76JtW-y7lGy_2}2QVKHYM8zK(#aTTn#tOyYLJ$t(H&eZn zFUVGTD_W|s#Kb{Z{LT% z)OjHEcj`Dm1F=vKJzvAmPKxwxtQ)-NOwZJLdNGO1>bh*-{y@u)Pr^(R<1sI6qj#-+ zx;<13O)QF4-q(=z$aXbvqAFP}QWFzRm2fSb1v7NV`ZP6>W!|$RZ2p3d;q69a`Id2c z+)fQo(^1nDR9CZU&UN4xU~~JO|Je6d=7P@lCg%4N3~4TFL7i6V`uhi0kRwhw(A(vV zwax$L+*YAi&md{SFzLS8S6BLzP|>GfEMSwDHw*`tDZfeAxVmipEOE zCHZ@;1!Zw1rx%w}YwWzQhoK3n-Ld2-s)trWaV(|vv2p}prTl(Ig0)sT_sZ#PA55vs zXsm7^?Ik=BYdD#`PCfDr1$j~X-WE@gdft^2E>gT|7b6QDcIvgeqP*EhgOANVQY>jW zENJ#O8m9vIrnh4=bs;+d4|eYA-0gA6Sf1^c2{p!>p8UvGdP`Gs>z8D~0+?=Ii}747Dz5QF{h~3ktLXFNXb`238-< z%>krQ%4JI4lFAbKk5baV}O-%U$K zMIXm;x1W*n(XR=r>h{(0NdL{0+8L0km#;8x3f@JYu&t(u%ub+R~}NHL>& z3mFc!X9jhLlF!HH0E7``A>)hvemg5wzu9EyaQFva&2Fl-CxOu*R+uP-CRyn>8sIP= zRB5S=&BBQTGewHkRpLVLdvZVXSpck`;jhn|4JVV9y(rfUn@|YZ;&oi0+IH7 zE;iIzHj4AX>S)12(oWqdbA*4H!{oPnh*4)wA_Ck0AXXwhPt0=hd}X1Ps%~+-Rg>Ep zh~3Xho#MaKqc-o;VhkGGP*s6Y|Di{gtH(GtRkjw=-3mj4iWro+Y<)T`R#Ch|f%^j_ zd`~HTJd@33YxKl!{Z4wTPW{F3rwk;e!0-#av2+GLN2hx#kFDC%fMv;D3O~vao%ed( zpckq~Z&=B*UZ!WLcP{LB>iaGvwpJ1!M6nwH4yk|mw?qB3lg4y*IQw)wR~TH){{(WR zu@$ChV^)91 zQ0RuB4q#inzh@N%25s+uf)NFQQ*cKHs=?SbfIY-&C0!a0Z6~DurbdggSj-D!Hh{qK zT`IVM{sEWRzrnkiTa_#yA;{lbi6*ENqWq;oFQY7VcR{v2BV0-FSQIfaTbd%aoTHHv zAj0dDKbzk6^b3A41!E>1Tg*U5Eg&LblF+Gq-s1MY0!pT!A{ypi=-WX#0OYSVF=jG- zXqlx5Nj1Y_w;GvnXEqpD|?4`^HSz8YJNH-~+)PH0*To zQ5*qE<$bjvUaJ5N|3nlZ8B;~FwR)v)K?0O|1xAPA+_4Y!!CL(|PsiR2L6+;&sViOB zktTchp6sA_2#`6H$oVDFH;W5UMgCn#@Z-@sdOA7J-k;?W8OWz3!+k?%H6T zn*2cTJCOFVS>cE1;`)NJSHuQLamXd5Oj1*JbF0@Qp z7@VK6QQMnI;-e}I%AZNN4auYwfd>OPk${y=NJ^k2yqV^y-}iXf>NUu;BtA0Fm_ zu)qv*AWWl~QJ$)#TNu6y4fThBW^0xsdvGX->POL(tj|fe=J|#gw0%Y8;XGnVOL>@m z(_O5Ub#eNi>0!sp5y=%^0gSLqgblZ=$|NoWqu0on(WwyRi^-(~g=kyBBJya~l04bgzmkxl&&Q1d*)VHdr(u0g4!7e4qt^*3FLmq4^Z zP}Fs}68w|55BD=8xgL(e`)?h1f_qlS2*{3Lr}YB|X}yL`>EU}~XG25!0Yh{a9IW;d zl4lYSG=ltZ+vB-;TDzMy7ZRMx?6R_b6c;XV45@5Pa8p1Ntev@&`O&+%6+R6Q|GT9Q zdV;yb78~+sFnjX-B9do5K8d$3Evgt%$?mzP`QNHb4DvSB2R&fkZ#4J?%(tZzR zEM)2G7*BUoNuM(CVzJg5W9Y(+hCu`euG$~U7R5xegw$jNR=*A04bbXyhRk230@4T~ zVi>2$C()I|42ze|N?U07aJfZymVeYIBjGJgUBzMIHRJd&vRdP=#bzeh&03>j)Ao3o zTXG=oVSDU;zA`#lrctiM0&A0Fftv!&)bL`$6j(t>3n~pMO~1ix@ss&kmxy|4xhua}uzL)Nyy_Ez^`-HKBfymj^sI5UF$8Dznd~U%ayf9dfa@wmPe(k^BNpYeVu#cF{o<7eVQ))9z+uhjm#+S`$& zS;Dw6GM5M!gO_Y|wm)PhB9(lkF`5bf*AR@o@nNxuYVG+7z6$UQXOn1=*Fw{}mz0aP zdOpw9M`+4|@#^Pe_$6+dUk}B#~a8(3BY+ zrV8WHs;ITPM2s3)=mb{yqmhPKwMAbcdS5}L2-S-D23&!nedkaRSISb z)HDNRw^;hf(L9%)TtF3Q6La;7q!(`I+Ng8iI;b zB&rEWX~UXKiVj4TGf<;V8}a%b%P@)hu2thR|@hLYt%K%!jwHus&77pzq0) zGPOOa1TZO5;|#QMo+v*vS{zwZAUSq9CmTRZV-Zs(v!}o4sRbb6_V@S9Osqf-tE6bV zpH82Kpp3tj?j^q^F>U;YT8JjEBQ#ML$K6-|nC8F+F#0r4^rJ>~SZ#b3w6b{C{aLY_ zkD0Bxwpy!wEXIEU`)9eM#_v#y3@cgC-nEYB(j{&ezM#ZQ9`J?U)Tro-WrHSo<{AD(7gbn5ia+Z>`1BZzG>DnLi ze`)sS2nL>(^|X*CJLG@a`5nykissxOCt8HTIwx?v5@$xGr~fkg)&|fL%0vcp0q0*O zheX)1DLKKxS*_2A|7(*r+Dgx;fxG+4GtSc3;(S*XEx;`vuq1&iAuKF>?+yGI1Hsqf z894s$VSm5hg{s~3B_4{~{o8xzAONYgKfCsMtA1BN|MjJx*^5ShPlopIR156?Q}62k_yvL<*?WuGhxRM*(q%J z>%siT%?bZ83B9m8R!3-MiZf`3XzFUR2#nV)ZiWc<$^{CP%E%XCzJ_;-1wmawuN-%T zr1b1HfVzlFzNCbNPhy`+Y(xhDfk z5|$!~8+`20QuDmrHLkVd!+!+N|Jp*qPK3XCajrpZPA97$9;uD7qGImf!Xe03q}_CW zt_B6Rs=3P{A)Sci2kZtU$Pu})cbmWD%4V|lQ#d93+de^jDi0&6V`fMxN=|q$cKei! z>z*4ucL|CsRuf98lItPj^^K>9^}NViWO4pw#@al#GF?0VhlzfGeKM~M9Y$J;m)|;^_Q6HjCZOc|X9eMr{jm7O9k0vqjYU@t@THiCuKq{}d)`Ge*Hb z7s#aTa&>6<_Zj+nbu1N~`9o6M>a|Aq!=7LM{SqaGur%yd`agsxZ&zr_f%+@n{Gej% zR+_|d9YEf#xm4yfV3XqKEa6r zt`;2s10M|2m{A~mAKK%U z_+2DKL_}}80Q8z#s?~qgj|^`rI8Wd~{951Be>~O(K`(IAWTsDSug7ojpk(Z1VX$v3 zpx{)YqSL70f8)%ACDdf*eIQ8}t6vLbF8b?tT5;&xZ9G}1OvpEq*9diL<{#tppRJHYyxbeyN76w-jprfEc4mL>-$U>Hx9$_d zM%`g_Qi=IbBVZv!bqOA4mV=u_Ua(LL6%HId5$!l|ume4^`<3-@VQMF&|14i0Jl~5l z%CGSd*s^Fg$g6|@nFW7#`%Vf7#;AUzl|6V7)9&4p0};}u4JQ;e+p*uwF3L*w(~8w- zA-8KC2Bf09nCkaGSVZ2;#z8@fXY@|{e|01<8DD%nGck{4bCfl6#X<|Iq>mQfXP|1( zC^5>ID-u$3RJFGYz>(`kfWC(cuocWv^47tmu|y1(-mR%%OA@#wDMkzz-(wOoN5FAU z3(A#y$iP14yPo~iJ>k>4NAn)Qs6x8qpo!kO>g-|cW=b~SR$opR>sb;WS{ZI2t=_q1 zd~pcN7*zF0qsAtAao}MPkjNF!WS-E>mZv~pU+!fZTt=dMgHZd^)=E@7PkVLU)*7w* zEyJM?x7ZyozeGE#e9%>ghHood_x&A*0I`98bLCo&2BVZ9ef{5jW9;#zMF`W#>|{{F z#-+cS@B8v|7eCDD;y|_>+q+D@t&mB+o+#Dm%vw?>RB9eF*B$`mh!ISfB(<0yMk??k zL6iR(N5AyDX{GtSGxb*+LF-QF$Y6pMjZrs;Y_3kf-Vi)=G4k!)O0nI zv4f-T@pzA&5b7W32zyy%2rhCNE*$D!_Zy$rNbNmvx`fn2Al+Kv#%HWMH7QWB93~@U z1~|}FiIt+b*h8gE0s^gC!DFb@`Pl$$F>OyM9E;D9Q5&k^)l!)X;Ww4YUKlv!K&rY1 zsd?+Q4G8DFfd}QC^73_z^56fw;5Xk6iRUk0C&;q0MxT91%^pt`=#(Ndsp+G7HJhdi zIp3LZ6dRmVWlNRSWC@Z|?}!P_O=D%;>L<#!j4&e?U~ljAmxHimxa$8fjF>BcQK^?UJ5Ks7&?&06Nv~1zD zP#!oznGQGQMkal+=iM|9V81OFd0!463_f#pK%aBD=9bnR0lW|eh?du zTCr%o>x+gJ&`d<*-qQMilM%qR_b-&UKajqAqX$8@pr4Ky0VGS2s1PF{Q1k}{L!CYg zDwN8RXcY6^3DIlZ1&b(A30YN{^W8(HAeCd*RGM{)!0xD2BH+tYeyvuH=wBPhT^Y2} z44GL2WH(EKPK2q4`ih-IDHlF5yZ`58##*KE13V%_gl*c8eO*>In~<8gRq;TS4AWND zGQMM^Nrd|f*x(CD5Kw61x+-}+S=*hnF+tQ!p7gFf{};IscgQ?{Fb#;Tn59&q&;6w^ zS3^tDB#9eI6Wf{5PA|T3Z!v)Wp=-sbPcZ47Ol4R9y_MJKfqJUDKv}H|20i;k{?FAp z3o*us6@|pRfM3_f9r^0s??an{PMe+oux4HOBSZ;7v%LioK#dc?C-AbzB6IbFw)KkK z--`TaHGbybM=09=i`w}AZ(RLfyjmod9RH_bxmd!Ve?eO*n(#j#T#POxg%1Vwn=a^o z%)J)y9iBGy|LcqeZ=j_oLWr6EKi_=Uj*A}szx)3=zyx0U@F|o3>x&1d0`mKlfs}!V zs#KwB&hr~u<&&OWxBTH#&VqV=$5j1{cL$W5!7neNX8!H_M={lu>?rku*B_4fuV;h$uI*Xz zMAfujsbWwPRMukCc|x=&^_N(h+=Vz`an1FQd>`NI=Gaj^^+EKqxhkI4?R>eM_Z;g_ z>-+IqS?}rYcsXCHv`*8rmg}Aqe;-BF%b7LWR?a!`P8hOzvYi!pNSo_gbY|(K>&}1p zWE;jPTfC@)KJ=2eIB`X|cP-EgaTop^ym!g)muLMjT6 zkxDxk{>dB&jm6%gocHWW3<4bBdc%1RP2yy zA0eQBgyAiFe&d~IOZdTo=&Agn;r%xFu0EUtdrX6@;iFlx+#ZH28lB=ScAbPF*y6m` z8V;#3n`C!yo`d)%)2ShnzYR_$T@uyheBjiSY=eRD;3ivxU+Xkq$rWjgxuyt${&IOR zdO(tRzFu`Q_+Wlp0(MxT6aDM|D|VP;m&GObCXk@6OX_hk7I=L7`i9xCnf{Riv9sPV zzR{F>MqkAE;nBk;=cKkC*HP%(kfqIlTt08I_)NIDj`JPj74rI<$%Z~}#`ug^3%Z7Y z^3v7u#6fY^l1OS43pmzc+4XwrqkUPaw{MZ(`^vNyHp~tW|bnJj{C-48etcz#!x@q1I9 z>E6l$C2#5VbA__|bUG7>&2s^cU_t&p!i(MZQm(#>@lLKx;Y$|Q)2(9%?m&avOgcY_ z&2&AEC7U0dA$Qhr{=vIvm9wvn_VM|5EFB%KObjST9u`!Le0qPK%Pb3XD|`Keju*S7 zrRC|N#5yRH!rB)PLK5+eY#zJsbbBiyhdH}!MvKE%w9%Cv?cLw)I>v-bzJp| zjS{lw{q2l}vYAz1krVZYlP4#n8clS!KC&z8frh^S!3+7d^GDwbR`m{7O-JRZpF|$|&ICfU{3d_;P z?mMIeJM8}Ar|;&L+|tmKJrGjf%h`OMxCikmKoY8%E*=L=mV3j$wQDgb89#YIUiHLY z3+M`VvoC5-#f1;;&1ACpo!?_bn1~6tSjm

    UQ^l^bTsAC5OORrJ?X=koH=x(sfA zu<`8T?koqMIgUmuCG|ovu)IWg7qGn3>-aD_7`gwN=<&Y`gx#!Oy-l+mS5KqOM(2K5 z)XrH7hu*Qt<>#|`%8kGcd2sa6L3KA9iJ7hQq`^1a*TVMxnmC|M;QLh(vF*K^!v2J@ zC-K0RzqI&R9Cp)Bk9mMQLnvXJ>M8yX6lyBB<8TvRelKM#H-zotxl)e7v!r>UL9-7 zWO=!#>5QJ)sWvPYe;>J-W95}1A?exT>hsqCrfbK$cJXrtBf(04p|u|{&pGVrPHSHO zd!jY9mBw$C9#z3XZrDKWtmUUS)L){dvxL8GWT0jJck6)TB5|~9Km}@t8?{2PS_#%_ z)5L}{NPiiPMcun!w`tTq0O>s*L($luO_z}QJ&+^;lZ3}7Z0B-0GQ9Ftj@T(U&s~+h zGU~Xz&gFK#Jj-}JLnHX(Wvns+;1TP_VjEimI@5l9v{};p22zOzvFArzu@a+3sql2l zBviNLwz4#G`P+EpB{jN4#eFfhn@({ zo+7FnDv}F)If39V7ZLoNZ#^Af=sr6v7JR1CZ znTT9b2gBnSY6>a|676i}9Gu(TfAshsr3aG`PX`VSmEDHfEqAuWfOPTaIj7AZ0Z2tK zaV>e?X!4Is!IVD*MeD1FFL-FBAsTSlY;3!$;O>^!hQ{g6)?XdcM||N3mD(;1j;Ft` z*8J)4B|>^V91eyDvkbhwUaX{qai6zL9vkl?`|2)0+kNeTcc3eeDHt#He6#vBhpzXC z%tld|XrGF$X9by%h}-98tWH5?oY&U;oXC)Z3>EF(eVrIDw~XRPI-5rgH71bcvKV1$ zV4yJHAqMpru+iDAeNLEGn5rz2vXTrg~ovooRPc z+Uz}! z93SA^TQHTtz|eHR)PH~>M{8re3NP?>g{4-_QH;!U&%NQ^5nMhEZ-?bZl=iD18D9RH z@2zUNn#7uC#uYDja-cIuE1Xn1LeTMY4&_9i7HZDA9xqv{&ha2N@g@Q} zifCw(gbt6R*^Cm+O9CdM^z-btg9b2u+!SnxxD99Y%7*U(5#R}u`1U6{0_UW8;+gt$ zxx4bjEM!_rUj74E4Ihl_@lv+ih3NBnu#XBapw>9}HJaguZ`=;wq%1lhxDZfHBrWD* zKV-y~H5w)bBkEWE6xp4i6Pe$(r;t#6xpsKq$c~S0gbjlA#1hHv&2U7tzvjJ3npRN+ zh2X|-&ANdcgf6k!ERXoEJtxrUD-4I=yHeCd+`r9-g z1vHWryQLZ*pExC-F?y;bVmsGD*<3VCi!NoNoVE)?qG+L^#sQrvOD=Gw3tsz-B9-b8M}Rf4lKSma2CAZ|CVI(sd-P;> zegj!iaM=#ExGHi*Ue zA+}d#WQ9w72>x|J12|1q7XTpn)TggXP>};>-zac+lv&M@T1ARYv|zsZz#JChOCT)8 zfSQ!1P}75T@y&FCp^!9N`)tvZEI25lgqj--dVa*f4dp)K6)45gTr_? zCRLs-^kZXkdv)y?*bR@-Zxt#m`>`Li8Sa*x(?Q^OBX)5ogm{QD&vrcjl;vKy(Fy~` zQ+Wd)b&gZtrqzmC;H;tG=%*%#V*t57mSTkpF|3*x7{W?+59ILdN~dlv>;?x*&=o~L zRszv5@|2Wua#^ve0>Cc2q2sS#p+wCH9SZ@i2#(Dl z%p0CWE$ul%i>+r*G_z2awxklEA3{LvnczQ3KQlNm4TrZI|8d?*@S1Pj$+r;xOz!3f z0=(2Bz7-f_lYnEbhir@-H3TTEU`7qXcCYHSJMbfhNcMhEY3D;g{p<_%eW_lrLLbB7 z^5AB5)ogWGSRAIigD}FZd)&=AbT*cg*Z&f;?H43DVcl8dF8GL|=pg(>{TnnhApTdq zkbH9f{&xdCWCuQ;arMIwB&NcCJR@NCsd}{9{923G#-Wy8_H5T3Y}2m2aC@^8;hewu zJpRS`se3EtaIN|S4u{3U$gTIxjTz)ti8Rwkzx&!y`d6grfCaCRoEBR3av z;P#Z!=yBDtNW%40NgmJD$Fkw2ddvCa<-*n;jD*mzszGklQ=Px-Mx?jrTbSBpALDfY z>2Q2+=rHk0z+X+YXdda8J$MUzi(+~BLeory>P((aEdcbLjsSR{Tqb(1gG4^>K+}D% zJ|p|`@)V?yoYdRpBf;%d%lE~OwdfcH?rnNdo#MKS+d?q!TgVQx z!kaf>uYDy@SO?}IywgqGx_gcT|1ikyL%ol2)qS_`Oz46ho?z2oVUn9sFHfOZE*viW zh9cXN*>TT<0=1p|r7!!Qh?+4mK-xy%-;oeRPy2IBge zOT67l(1`mS)TTt=xBy-RQ9@+SLTE~7Gt@{=1iESl2(OV){`(806x{c>i@)c6zGB z@fZP~9&5HXtrJ|N2>3YA^Q_%axO@MPSjT0$=f$yPKgAu!lmsH@^_m&kZD4u{7}Qki4n?}K#1MeQ1=`}%Hw zHQbq~A0R)h94hAs+gs${`;cw-)oT0RNqnIn)c4duvwS+oP5)oLbK9e;Cx{O4Uj?7n zLflCOQX1sypxsF@p~PL8iiEK`DtbgAr#Umz-24UgdDg!2+AS&|ezbyTFZ}pk(>s$l zskL<7Iu<@g423*Idk0)3n7T>LeKOrdam@CyhuS7*Q& zMSKI9+JPcoEr^eqP4#c(FZ#Sf7MvDRsoDw~6L2rbkNP`LM#jDLy63kK_d~kNc`ucB z-nEKU&^rRTtZgd4Qo7>IuKZTv7LUe#aUkMt@D466#->?N$AvPiQ1_jX__L|YE2@wq zW4vgy^vVo31;DSi)b;4lN6@Q{cjcnnC*k~$I3%dL`B=D+sI8XiX5R|H&)a*zdR>8a{b1=)DZ&h5;Xx)Z=?uQaKX zpPFrA!pAlN;Y#=_{1*v+DeFyNakH`|7zXV*Kf9gt&bY|t z)re?mE7ZSmrTiMhu3Z`;2Mx}Y-)OQws;X;-8)=s0I_w7|^Tg?Pl%AY?mHnt2d={DA zB76*F0IC9N%*ToR3Yb!gC4)3E?<4sV01Y8jjHdlj(24VXf(XSSR3WC+agjhjhLn@P zD-{&~R@o@D>&z$!rsqU$Ht86!;-vFnKitItn+zaF*hg)wV{6v`Vq*c(C8}bks8lH_ zPy&~OH(R&RG8vFct{w&Lec`llRO`?X0q&I;fv1OXktC|3tN;Kl<46@~bFJ^`3%V>Ks@WQeEcd1_R5<>b1Wg{;k(Z zO41E44P&jnh2+9y$^+ZgCX6A=wR#t|jU>c~0P;ty@WJ{9G zt0WZFQpT}H-f7DLu*O)(p;cp(e^V+}pY712n5lL&yiu9~(asGaR&lW@xiY_5mW|7Y z$Os=GY!JcAX{+}$F?YoZseex)8zuBaR|aat{CZ`J0aZ~`iOa}xAW~7KNVQ&3-*1Tg)pjAjQ}o zm=vU1fd$RzQ}!p5i76Swh}eFksggNW1OlsjODCt4F#Do_ijw~!r1jeWZq*Nf;hk_-ilVM0OPzh@;+8Q;Po%kcgr%dAD*IcY5yocjpK{)sK z(Z=AF84lMb#(L9FMVI^!CKhI&)$e*#_JvVsSL4W?>(Yhy+Q&5ZD> zjZ|Kh8PGmj@2+3N{o-|z0724YOqKhF_lU9m$zhG*%X8ZN+xEmivrGS?jj6`ZVkk}d zxpyLm3IDq@q8!jmv^MJ9_AKyzHf1chb^*UNQns941lPvbD-s^c;hMXH;i!VL@&39F zwKJH=$1x8$n@0<0jK#)1XYYzxR>i*qMahdsCZ6RhYwfq6^>9NfgC1}k4&1ys zPudFt7f=3mQo;rg{A-yR{)W%K7Vf6j}(vvdB@FcDVx`WFK^YU~|yQ@i@o$4_(d z&W#-luf6NyM3}-^BgB@wzL(oQMmFEOK+&t2Mzk|}q=bm;x4(39)?6IMkwkN&o*yCG z&SWLB^fhl}E~nvNgt~ht1osfoaC*#@wdv*Qx$XmBpCErZ4vZbWg^w(+$0*7m6UC2n z?@rE6PME(qRlTVYLW$FL@ovmSYLEGrU(bo{Z*;-5*Crwg?^CI8n>l!NyWF7Bi?c$ulNAY`}|&-t>tpL+GSnCHp?l~V8Tm1kyW3$pun1Gc9oi!=M&Kt zjn}%O%J!nl#vIq(X4=ooh5?>#o17fpO<0337Ul?%A_a^5ehk^_vK5nAb||o|OdKPV z3zI8@O~Y@zPuPU>!x-_>I5#=9EAgjW*K-fBY_YFrDFE;wT#c34 zxxrkh_|6BmtR7k`lZ%dLH+puER{Dpy-7TuABJMif+C5+1oH9SHcMO!UmL(4N=O&E4 ztO%&oa0(ZfCWi*6mW!@uey|dF3vMCDpLE}(IErn*hBWs08{UHoH}Iy-Kt><1?3z;m z)uzFCau5DAdR@v-21gzPEp<#5=B2Uql}fGj3yJ;2n#(4>WEbP)%-p|US<4kGhuaaG zOan%5yKkE2IGRsleN;TlXqq3yeAIm2tMR6E(&OUXN@ID%QiP7?K7z4<^Fp-+U(#N= zgTQILyf@n0u=~AmwpDNv#InMhdD02-m1m3w#0-D{_%)~SS)5*NtDRu-Uq0>bbIcbV z;kPNVf{=7YiM_I5fN-jnp!4=lZp}VDktiVsoy4}{#Ke-^hM_J?rv^-eYe!MQwxPY$L5!>Qk{L8!{9V--U^Y*gK3=u3&t+*ctUGF z(0F`lfog+0aN>F`x>~(Y*_5BI__U0o%J3p6-siq>><0{g#2>#qK;c91|HIfj2WRp{ z|DUll$;7s8J2Mm86WhiU+qP|cV%xUuV=l9*Mtwq)De_hqpx9{zHy8FJ*J?C}I zn(%c|qz*e)kmt-UKoL-X*qY%ua3!qd%rB1}_`1|l+!qrbJi_(cJQ+H7hBHdsU+uJD z^hX<}Hd>n2U>dKqGFt}|^kEW~(+n;*yR{W-KDqtGN}e68*c}2`>>*Hp3h0>5^=jC* z;?^ReR7e+D1NWG3q3ooQ^lhX5)YW@bzjlzqK37L3eO5Q*Ggmt0c771sp>g%Lf4Ivt z)itD-Y$1CM8WLZ<*YGA&rXmh@$ z{pbQ`xJ;uI+@VkqnF}XDqs=*+*U1>nFZjqT)=k{ZG2HM$y;?>yju6ybGKhlhdG8Y0zG<#adBGSI;-79gkSj2t z*L=J{v69~WuB5Svd9rTC)>?lsC-!Rgw@~F6Q4u^aoNRDLr0vz_SwciweFf3&qc!$e zm(`rFy$JXtfd8+E@mtF*;OHJ$Z1>o&>zXak#>-imxs!mSEjilqC!p^9SQ5hOTI%)4 z|2D(bxZc=po1IXdeOs)Kc&ga=o2v&5GL*}r+pu=afPP>(QxKC}duq~NW!_;b+%+(& zH?|i!U#7Gensej59&WzFMITTtE9vbMq)V9(Mmsm(_{8O$k+ZG5gC_WQ!w4*!N^e?x zzi#<=>b-Gpnr)y9c}pOD@=!oe5e5Mej$0Zc3KDHGG#K#*zQ$v$OGR#(wI`WLA4G2qv~mhj(d*VLdDUNK zhw;Q~qpNnqt@`PR@ zOTynB#9b*jENATul#yL*jZAZ&(u9M`E-(Gx%rJ%R&bKAJXzS7ZSB6agKw_`1yiK=& z-ld+Et0(I;z*>hTaY8gNHla5DH?^dlZ}042=fue8 z4m@B|UKm}4=EWycs-KDJ`5%Ke{|phs)d!D-nux`GyUa_%h+J?Y$$pf>duegtdbKk? zyk}YoClZNnrd43c0oUV#W~dDF6_bBLN*Wy9%g3>MRT|=$Ft`l~esFdcs*Lt(Tq^to zGgAQj?C>7&>B#}|_pH^HC`56sW{kC(%S^leNk3jXeV4l|J6xKgN>I&Vg{P}7liMPe zwb{PgQF^M@{v}0XfHGpmmB5Th^jOLr)D6JxrbbqQ8MmyJHECZ3S z@2tJJjbC~mUtNzE;KaIb2raYqf6Gq(>w|K7YJGxHm(JJ5v_6t?kZkjAUp`P-Be#X< z74?5W*i&Jlk^XpQ{)o|CRI9ke;k5eISZHCeyfM! zyRqUS!$bc>v=-sL|M+mP{EVQZbGRz+sHv&8Jc~|FBX1QdX}#`DG)uwe0`&(y$zkTB z-wQ&$_wI<5fl-hJ`iV(;%LZr1$iVVYuwpJ2G+dM{p2j#Q9I2Q&x8?lsqls-f`qWJ} zYjbB8-fo<#RxU+g-~v$2AEU;*r!Yx(GPo|KPXe*T8YX8Aga0s@;f{6x_}_SG?;2 zT*<52#Pkx!oU1ka!B26-SB?F8BP8*DBJ%zMMc>uOBUmd>#8TOeJ{>Mhy4g1#$LYM0 zTs&{qSuT!d&QUtEN)XYcz&L5HBgTzxTJ$=2sxSi}5bIl#7^kFcZ$QTsk0+9~h3^yV zN-EbKmP^e;+ z=~)rG$sWrTsQkTix0hxH&EgjHuf!51ek{m;sW5M$#G>+!#jbYqg^^6x~7VAG)7`QAyxb2mbf(Mqp|x0kyErVPTu4;CX9 zkCTf?I|v_z6x-v+zQZ1AB2s+x7UI;23*#6vTN>SBwsw{kh?UG5Ba(00p?Gu%T8}_m ztVdIZtQRBkgEXlYbh3hNE@s+RyU?HW<*3T#N2uAJKdPbt^R+hT$s^jU{q9^k}Q|;0;gOpOaB}X>J!vh15E8j1c^9>`5kzuHUDdF?zV;4~k zg-B*}NWszVBV+-q@c91hid)c0A`FivdadE!9u^Xy5eXpS#_2 z)*sm9plqn(i;7LuenWFDsQbsGBWP@OU=(fonK_*KyZ4oNbN0BfbKIC>v~{b_9Xf7} z%O*(XMs}4)FJE*mOuP(pVPH*|SP8&sD8!)I4kUp0Ju!I18xqxN()8VR8$% zJ2!X3r9iviNg{}a#g6yZIBveKV#NqB&{b&uk@T0Wx2XT5o``8$MHqrQN?yBi&|HWK zf)1utk-E9CowMn$D%Vdhb}* z=j2}}KD#3a(mR42`o!oz_f@!!rn9%Iev@D(go}{Lf-v{CI6H#(uL#5#-va&E=n5e(`ntXmVh2-$IvBY83(sp(>Im@$t z`QdJBXCH4qP%*nGcX_)vAN2~$v@uS}>!)A5?R!8&LPOlIhsO-?XKq=JJ|OU^BHCP~ zqM)IjY#Un?x=4#A)SIj&Takz^!V~}iHmGNoBU)ZhNKTV!rxbO0dcK&2pYXGi~&>J)%o}Y9*Brq$WQaI)A zZI`Sj+5+T|=(u0ATe|C)6TrZQCHpb2%8B+srl#?mfN76^^lcxd*S}OXQ5}*WU}0da zn2i_FJ>|ueT0EWf?s9XB4VP0anP%IiNO>V4p&$bBmw()N<A=ZX0?P+!< z-(4(&x#jBUF@KS=<9ZrWh0AgH^_^%+aymEjqu1~Avtjyts7MKDqXqc=)(HaAMp|es z6#JFiDW@8BRm<80*Dtv=d2+T~IoxYlVmc{^SRPMeBDVr+y(z!3*>y9<`!m>RBBP}O zf>s@$Cs(YQ;c~6XhG2!oinIm)&=4%+SErzvLj%)6)W$sS+k=PdvJFNFGqnQdz$2INoZ7XmMCR-j9DifGyBYJDz%+Er({GrcpZDpJqJgCJ;EcS|txZ#xdR#8Kpy~e5u)n9y!t@OS zG-dr5e(|cnsG0^;Kjw%0)d#_AUMlMn&t6G(MhE%Ar#Atjxn#9GN z4upuxXmiS9P=_y1R#lO(d@S;YNaOq=n~CRsbCk7z*B+E<>9X5>g5P6z)3*AR;|?v9 zxJNUpCO9K}3zYBbY-v2S>W%mc+6v=%!0Y^6SjBAyM%NsVoY)t-oNej~;|o|(p(|Nd z@y&1_!`??pmv_TF%gj8`@o#u`RQec?`&#Ulhx%k`suEiXI9wh)=1iaD+Er!p@poqV zT)tF79>c8-&LhE>aza)sD-v+UWGzO8kFW zJPhxv@gci8aqmzwG26IgWs`a%n2cYs?|$#2@hL72k=nrTNd0X;C&WDhx4VKIUC*eN zh;h}b)moRybXKHo@6YPR965!JB>D^vo0VFd$#g@)Yb3%?i;?!T**`jE%umS&atA(? zZZVH?n>f+k<1fob^r!69n#Z5K`Ad)M>W)*7x;;l{*r%rgGSAKO_lVM5l`(`VUm7Dz zkJq{{y_L}!3GLJm_YZg6+nW~=DNfjFpX+PHjIwkq4~nNphsIQG%WDPGK2z*3!(=&l zIPN8{Q6D}C9`gyu5$PExo<8F@Gv3YDhpgh>g5Eu-njnfOj;BiziT7}R#Q#e1*ys9} z(Ih*4SV^v|Eg-iyRpsLDZ2He$V&GdilKG$rDjV&h97Je5oM(5ZU5udnY*(t%h)DVrg}^&ym|#HD{LF zrj)?jsA^28BwLMJChU-wWIR~sI`i@j#CE=UA4ejDqdAFgS}U?itRWN(jr4xY3qR72 z3Mmxq!2hIRX#Ms-Jgt&mC@E?3KdpM3xP-Qcgm`#;eO_vwvCiBlDobYr$oD$^k~)21 zyL}u!?Ug0bE%Xe-Y5&pD9+^BxJW0GjP04zO^9fvS+|FF48uClwnv!xTzcB0#HKY!Z zx#3SUrl^QGI6p27GyX|SPo!cT^}MH8T$u9vFfT?%c{_L+|BaJ4ID5d^cSZ=oYWt^D7vt~~f+rh>D8!Snn{Z_~30Axxl&hzeS z|M^J*#}L5EklomrpJ-?@2pJaYNVw67dDrD@d6_HciH+eO_{69c^LCvlnHMsezdW6t zGv)G4R;lH9Cgk%Ye+lt?2)m4_y$zIW|Cf%Dosf|2*%?uG7rEa8n(R*FH2S$5G&q=& z?5uHHD^5N|i&j1mWG<0roHKzYp&XN4kq>uQU}McqppcrA#26A68OV7EL+0jmsA#0D zqkr3LkDu~;zd>3~#$v(YeXV&ETSJ5UH;QnsVl=nWXre+52Tr zxErzc4}mF}u$ZkjW8>nz^O{zCoF&htPY-ND5&$80He)bE&?v17zU;IlH){i+Tj_?# zpXWxX!bU$v@L)htV7cV5_7~rLegFKrv>;wmLV}mQd5&;^m`w$R;~(zZJ-EsM5dHcNnY*5`FgGmV?tR1E>Q zjRr4Jc`M`ea>;)9;iTg!X87p`4_*k8eK9^h|J!}WUVgr4UceGRjlbSthphA8NkJX; zRCg!Ol3jp+EE>7EyZx)hb9-On$ZCH`*30$a1W9Ty$&pkso=#XApwH(ymK3}_%UvNc zm6&jHiM6+%~Y*U zy>Vloj*2DQxaum>DGHOH0_UX!WvVD&te=-rrA~6hC23IGCvR` z&-gp*a{;S9w&5<*S-lvf{q|xK7uhzG#RG@QiHY#jNQT_Dj7gbi7s&2ep+QACc$%hM zbp*4RWL1Z4^uwl&UPkJukM%GHZOXIEUJclA(*I_*jE09-c}rehWjn}}1+~rQ9P1cL ziSlLNri>*Y+H5X|2tK(q#S>@R#NI69uy@MuNHEsYkt(|W7T&I=PG!xPQ|_F`%2^-b zxKknl$_d!n&+c+t8XF6rAH$K)LEEg357AW%wav#Y-_dgPljpOJg*UQq%e>kd+A)+A z)fE-I%LI%*ezjYn|KMql0nS0Ut?~jepaFl;;p^9jMqi!EIW9=C#m?Je7B@NWouwLj zsO+{J`DM~=mKj)-U5mSCS6H!b=ZbW?F@uT*2M=Sup@KMUnqg%goNQY^MWuJgR(t=Y z)o3%9;usr4wp?nqwIXibt)`0sFkMBRlsqhzYIe*=2M%}#_tXA#F7IM$$2Syf?hEto zp(4qi@LiGp#23SBoo{{%&CH+6ufMg-tLg~Z?5PzOOipouEzLL7o-Eb^i7q{q?F|XP z$(1X7WHYo~Rw?%Pc3#V75Qd+Y*88WEi^#*#`RU8Q)+(<)nzr>AU;{c_SzHXw!gM-$ zY6I?K`aO9n6w-jgNuQu1tIMBkU-cX;f21EYajfdP-5oGTYsSBzUVRAxWg=CIo*bUPt?Q433Z6Fo|H@>y6C*WK z8d*gB2^Rb+;db6g~5*TqjyvmxtUOs?gIRglVFDJRFt{)i@6|pYfV_@jwfp8z*9vd&p*pU zfAoE|K{Q4n?=lKO*RVQ-FH!Y`gmM#Dx z_`)Y6O>-m4!Esq*Bb`QC4kfWmi^FHCQX@h!D&X~>{U`%EZzIy&5OgBik;C1*8XXup z&whOERVJvjAH9i%!R?LCtiFK^c93F$f@d9DGE~5Kh=KVgR1}@c>T|rUI6on#wY=MJ zlQ)iMWj9}m<6YUB8)F$^q-4pUdWWrK6T#I+J)4zC8I>wAr`y1-&fQ1r7iKkAPPHOs zQe6u1TTAfQCb%HQD%CHKQN#MvWt(3oS3cgVf3f8e7}SQ~w4BVIdPPHG@U}2H^4Uu% zaUgo#_jFZJ{>;5N5i|du)~3PA*x`a zwxJ*r3pi9l=sk7pmKJE>b}MjZR}>oQ0_UL5kLtP?H>PoR%%S1;;Xn`ipGvpKpMD{> zy`Qvezsa0(VMYk9dW4kG{H)HHiT+FwiFStF5>RktxHN z_t77o+fMJRui9A$sO=_#_kMrUdkNjl&b(K8qyEgx`RqKe?oZQvb&iC`<$7{58$eqe z^Y8WkBnWC;Jto0PYNE@{J#TIv8;y#pjd8ob&i;^}>&bpX@JghxA_6-wzxHpLhr`F` zC;0KsD+0JEUBB^Qc4r6@p@5UwS0sTqatp{m( z{g8ns2trcWH9KE2P}@nLtgEmgD~sP?(`R@KeCGiAu?BcBw#Qo98k65R3tBu>OzraN z@pQ$Da5n1~1-_;(8jI7N81p1qA(V?o45dS80pd_JryWiK^vhhFNhn#$#qsP!#q;u$ z8DQNsQ0?=eWX0LBgz&%fQ>^E3Y<|FMLOg)m2=Daxc#chKxSoqJvo->Q^Cx+ZUm@%M z*>XVbd+_l#j9KXml3=V2Rg6{3LXwlU=_%Yj*`ov6_4sn^F%`2z@^N^MJv=4buNQQPQ^*>(R7Ur=a>UN~uwsaK?#M*&o> z#G9;gHfA^ugtZ!P=@VbI*y~S4W4G@3Wkq;3_;LUrW45xX(26NC1w03GolA-@!GM!j zuFT`|iI4AnVGq;yy!2;=n2NT6m%djnl`*e2IAkq?22(`{Zr&4h>o+nuoLvr1VM^<1 z&XeY`Ozyp}_ptD70Q1SKc^B!QP%I96Mq%rZzqRi#GHw`UaqX)k86l{Wv3e_PLXKJ*XLyL8T=8uR;j zJqdcPjr_b-Ee6>|{QAlh8OAfEDtRFy<`IbX~; zJ}!0cNA2ttWIVEC@%6VJsR0nYP8lhtyJ9P8rn$Pj;rYCe586!Xky4JUTZ!_Ly zxYEBl!wzbqZ|;Y0f9X7_g;;Di+q5EEmhB4(SGubtj>{N=(MsP}H>!;F9oN0^n9+@f z2t3jQlZymaS}&=V3@p0;1h?@cqxl$Gl2zOh`M{5im=bxk56+d7M;w{hUUohdNvET_ zy)H>fwGSb#v$?Xh50^=nURIm^ zTFiS$bH;GGVcvmPlj9+=w?}ZP(vebfH6K5Uh#4~qzqrFSDdCOOnk~@TtxyuHucQE& zL%4XbJN;b;NGEH>y}qv9dP%g`R5#|A0SQ)0Fz&=XcV+08y}-kBOU#6d17wR0FPJ)<>f*iCf3$9%UtQK4 zPA+~_FB1>T77#z#PG%S3)k4N1)ztd-GwuoYCFDBYFWn#)^R$&Z?`bl6c>ZYIAfaJQ zZpt*uDH#KzGf}u-9uOyL0$oo0O482PKj0q!g~fz1*<0H51`r$f_8;f>Boh!h=)X_C*^V)1ORP`f z(>Xy$*b=m>{}3JGsN&%mKDH;HEoBNGcI^ z`xueG)_s@iZX$2yG&Z054`LlYhg&?g6;=RUJUL#!0j7U(fGR6?f_)+2U ze{;guPDRU8QE@qqidIjAn2G7PruS^Qm@+Hq9nh8mqJL%WaQsKFr^9xeir8 z8)UtB^Oa-s$D8*x0~;6B4t2Oubs!ZcveFxG0fW{KHzDxLq(zdAvg=)lRYEvPCDFQ& zs`#2U3NZ}MdZi>3B#TvUsCzn{ZVdHir=Sc9FSpO5029Qa#;WQz!dLYe?CS%F`}@4U zk!nM6socl8_b1!muakU!Wuc_wp{<{E!qN2^PUn|?F~WM|ni?K>qd;SDbIAmojWCqF zQs@4rsxxGyfkTbqY5qQ@g}libAzGThNnV$GUeUVE6!#NI7HDsgRm0sM@Ob(?^qkZQZ%Io;0_D-v|}Z?ha&Hb44{T9nQW99-pV# z^f}VfTbqi8;bPw$+@8V;r@euWZ_Vj51tw#H`_u59 zC{I&*_?&~MXO;*j>kFHU=Uct2dd?U`%311gZNs1;3}+JIfoj+UF+A{XcY^##|*RaTG4QmHf78&pqh?=N}*X zG16qfMW;;lUEDjqp!jW|1phhr@Y7c2H3h|^OrOwtJNC9F<3e2YhQMzgB-qiKK)U@c z+D;{fS!UZk-Vx45SpEX|FVI5g>yulZhTIRN^QD62 z*wgQDPoDe|OzDY4egYo5*EF>kJ==*iXYe)vklDkO+`Ka3y<0SoMT73Lq^4$s$yh2w-bX)Y&5^cZ1zG`Ib}ipbJ{gf^FR4(s--gx#Mha(qaF zi>51un$*u?kqp(?TMec_{k!HwWRD^VHBRkt^30j_2K~*pCp`3~oBfjGJU|GB^Z91G zS`N0{_HRaAH=4_%AwO2m4oqS7&xq9kkNXQ=1K^~Q_QG1ve&{tOl1+!JE2@|>wr%{B_My~b7@n=#Q? zVDp?{fl)U|UqY;k`|>I&S(06SZE-MQ=z< zt|C~lnrcNNqPsasBp8<+GaB0%PuLV`8e^v09Wbj=O)yY&)Y0K`zjC%w7s%$pNSIow4oV6|0*SPr*hHiW|yT;LfJGHFAxxVlAd#s(0jUz?aU zNMK4PhM%A|{C(1{8mi?TZ)?5(tNr&cUV~5XEZgtfIQ?jTwZarwW@(`nqt~VWJ^*EXkA~918l^qMKi98WXPDXkYIJwKM z2OcGLr$dYUt3WccFFAQ^@t5(J{Se4BxV?2<-OY7Gk%*?uXnlC4X4_3qfuQitl{cLN zfd*cK(bLPWDGnKrAE%ouuM@q_qXwg4UhOuNDw2ekJ`l3tc~!?i+kKO(MSE%OfO69` zxVFv)-$6jRp+1q`*&G=GhAfJBCOSgVYyt0-)haQnXhpuVTrs%)L)3^ z?{Wd-v$i|?!(v+3Lf@t+h)h0N`4MzyTJQ@vrpD<3)>c?5X=t%BGhO3ntIb*CB1X7v zAx;}VvT6BwJ1*}oFE3x} zP4?iv`M$R`{waOHlO}A8gY4hid@73QqYKQ+HFH|SYuPoG6WqY zNup*E89ftc@Vf7i+g-V9s)z&0W;;(b#APyS)xR9qGW;DtN4QB#)B~G@EXQN!^n--b zp})QYdKjjae%*h>8h@kGH%?CE_6t6oD(Jaer-Fh#jmHZ9SA%oPxTE}&s`WbHVr44` z(tFK%gMZ70=iV=r9^I12)G`Awn0aKq2Dq4+nqR^QMGFVzo*zR5eJ(1Q!E(SpyrcQi zvC5cZ*_}&ZZx*uPQOH~!Ky^~KEBwIwS62t{&v!-J(^NEFKNh_Zs$>WeYMi6mzNWlG zvl%$k<<;Kif|s0)sFK$D@k2o12legk0&>P^>{uiC0Sa^H)d=Ep(DCc0j*q+u#3Gb; z=z(zWeE%|=E9SxqXOCb{O`L7>Ci4!3B#qR70L?sWR2Tb;dUR(q{E|m+9|yvwSsIV3p~tcDuX8g$m?8=s4D8K{pvC+jD+C#m2;1|PaC?kV$f`R# ztl3=U;m})J4}w;c=h}W<6&Tou)_Jsyig4!6r;gl_`(s*`awf~hYKy*}&`ctwXi8)? zKjBRfp;+MjPi%ek0LA%KjrCU7rNyf^8)Wtw1{hIugd?>=v)i6>Yq4w z4d`zRlITIbAddo9sufI;aGnDM-(*S{2y%C3WdJhG05@y}9P3V4`<&+SJdplkn0UpJzWHgDVE&dFApcWwGu= zYmy{QXHFw)&hSAlAUWkr03bB`j-B8$X*`|%o32iZKymNi0&qApEPrG=!F??>s{kPR zIA1As*m@+&=lCG~$VGTQDPO=Jf#y3Me>=gox|2?=ZOiU_vzfC^{%wI?doGzt_efok zlPonQ&04M=#>c+j_OMZCexo7#-ZqEahfLGJIqvTkf@0t4|JU;9uPdUahy5l@)^Yb9 zdzZAb3*b03CdO6b6aK%`|Bsxh|0`T?PfU_PKofaTK5}E^k`}iVw~boqKSO*US;Z`- z-A+D|%w2o5ARXl-5fkxPvpq4Zy8G^sQ5VnK_m$bpOM!u4*xwXBU9oBn9E0}KqM&a! z;%&mq3+mMWA`V*rpJ2b+7$N2vg+b0hPZHr<-fvdl=u?1!6@{}lp#9(G#l-zd;aS}K zpYOHdEutQl&5}yDfxkW83=x8IO3)LiEB_d{AO&=*o82kdA>Q& z;UWg;%0)~6RxA>Koe_O)C-Ojz_Nr76{f+|SzF+ymtC8?`B5upv3~U=I7VvPtwQv<( z>1tgt*Km;=Kv@1?9v;e1lQ z3)nT-56H2sLMVQ*ErPob&-!!>BCYHA_-Y_7Dp|CEGPs@ZG9NMuE5l#%Zz&`E$=(M&Tx{v2RM+Rld0_c^cD-{()1Bi zUVy>cRS;AE1hZm5gdlDK3p?m(A+ln)R4|w<;edAWZSWh3k2!{jLOdbms=^8kU@hPw zm2Jl)gO~~flFR1L?aT(MB>X6H7L0eRi3ckyzYCT?g%fVl6ev{&wfytITtO7llRtZe zQCPvx%7u&0|HW5vT-K;k=fDSx{7fwsXb&N+U4+zXTU)0O z*V?=|QHMRTSrWGt-I+now9U_(SKrROOflMY6pxSSz!TwE{azPAt14X4C=M$l%I(>U zExnKzVUA(Zi4E*f!`KoI3ZCt{)|9Q;Pg%?J8{aK%_PU8p$-=IJUOfy16@_UAGykev zp7vT$f|fNzk(puw6Vq2-r{?07kQTp+cBUng=5v{f8e$ko_2nSq7P=> z0cX9rk!l;0NbO0`e9qFV_*xJD!hP;lMsJqMN%EJ0mfuS=YY-AGIh054EDhMkY&>#` z7xEWa^aNRn=&2}VQJ1Nu6`UOW%}KfiN%GICpWySW_yJ4Wr2tJ5)6z& zJF$AGrmS$;_;9?T3T-Sp2+SH8?W;4TElDN9$iY>s2{ss&`Smw3lC%$zico30N4OvX zX3B8C3=xaO)qW+bi8S(~;(Jn2Ne5X;r^cX2Ass3Fn5saf6RHuIX2roBm`l@rNl-+sW7petreMI4GSeWKMEN{s}LP2eEzvNpf_jF(jp7RblAJ zNCJS`5FrrZqt^{6PXs|y8&!Y7baFLEjO=mVv>0K8bbd@xJ@IU9jwAK42fn}1N>rrW zHS2W~pTpt83tf}0(4@b5W@*%sFZzQLRWx>L+$Uj93b>0#b`RJ|FH`1<*>Qu3akR z3v{~vu)(Z3b2;vpH3rQZz!*Sk-k!8XQ2@P29e1-7k!801YlthG&d@~}Hb-(?>EDRK z>e4oTYEhg#Xh)4B@@KK!^4DtXlZ@3Mwh-#g>mY=5T@%zkIQaFP9v}o-0?gTO%tHP5(>h3!$T0}FT*a3c zx9I)-qi&4(dpFEu&I^l}Vd%?rB=>q`qe3x1COD*Kb%ih}VPU0VdFp^ZVkkUnz2jqR zt>R)KC+TP*rX+*H7{KFCq7R&vakPVnloW8Zf>|mAo*>zNP7bD%#%2kR=AI(|4D}DA zWSC#dv3320R7Pgw~r!r-}dNDuRH;hS*`v zBs?4f#_WeOtG7eeH4MAYd<`YCigWg1l$b;hu{lzd43YZhAz(9yu>!NX z@XE$V^?_Bm&!KRNVCU7f(GZ>@F+mf9p#V%ORwe*jSyI7%v4~`3ZkEPecJn#UM99UY zv)sRMEYvEnPd`m*Ml{Z0Mu}A5E$l{XLT<{ga@y~P@xlNrjxrapVEXfS58Vat%)?kF zk0y>CQQf^kN9qqJWGH@(O(iKP^d;}8L|H%Tfn!&{Z+LhpY-4)3z*N~pNUlzmHUVQL z?>5@DROTDzpJ*+-6D-!={RdY-?V#MvJKHUck!+aFslJbMBCa=Pd6G_87tZldi2-Pz zoJf}dqk-X3X^l9WNIRFXKlEuo;C=gO%3M-|Kv zI&4aXZ&Hm2fr?ozKAAMhf=Q3cuh@kRpX1MLXiG-`ir!u$-%$3whnpn7 zXtGX{*_sAyAg&1)lZ|zm?2$Rbsk(@y-{!7jXn4nz5+A)HO)qxRZCnOQjPVFELxK(i zex0Drn+JNKLQVvAIJM$0a*V681rTs1YPnYmDOEp(N!Li8qlt33)f2BUwLN3t82T)U zvVzvdKT6ts5Xar#*49HP$8A$3Ds#8FMm%h$JtMfo3KnC})?!6EA6=61M1wI&H=7_j ziC{3+Ywcu`YN51ef$c|S9V0)*-wFf_5URv~-y?9{VQ?;bo>)wmn-6>^S3_SU)%c`_FxFzfaX5XW(3~EO(l@p`huG)dt#ofg6-xi+564=W~15v zjn!n}LLXs;lAw|*d7*RgEwPH;&Mx=$bsH+)i<0--k!TQN3B(3VguRdJ{V9!8_(50C zA=MKLUgpb1BoG`kfNHyr!i@b(7po9P5gO_&r7R%20!k2q%+D`E=08xw6dk|r4h85e@ zMi|yNVoomr7hCiC^qd6F8HrYixMGIC6Tin>{+%cvYLFsl8e*vFD)7MFjqFR)`;uHF ztZUAHCU|^OCF{7W{X1FXok{!;EbeLDcctT6Mq@xV+;XKZGNNQ1vnSs|9X7P6K9@jU z?MGaPBG1jnotg^Yd$gG~+g=Pqj`B*V6m1Gv)vz@WU-Tml$X`vQ_r)P--<|ZQxJ17A zFZ%9Bl)PMhCTiNHKYdF3T^c|TrU7A2JWu$Lp^r9q=v;-FjqskAn$mfl`I0URJEAAG zWnPdGf|j3p;6>&1>NK7mF`}#Q?g{VGH^h9%>Qw-kKhT2CJ+K{X&w6jsZ{i}if_o`( zd?027d^}{iKBl~&uVh%7NMpB?ymkqV>fm>TDND!5wR9f!c zAYXpHgd50UCBkCt%-CAfrD5z(TSiEr&yaJEZr|@N|Fp)I*M#FiSuv=E@*Rn#u?n&ppYuZz{;trh|(g41Lh@tWaKhoQOOF_hMm-Hvt z-c3-M!2TG~aW%p7`)Ux>vBGF>Z*-NWR6orCzXjTORcgcyvq z5y*Mu(DvqNe@Csl|0huhksq^s#dz1&yV@yjwyQjqxi0?@F!NtC5=ip=;w zjq6kZEORhqy5b^gL}k7^oC8Dc_7AJCi*?zQ0BE?qh`QXKRU>({F`_~}3VeutulsIU zllVSbq~rqpL&Mn?U1A|k0%6*$8yMSAqFS2io`xZyk-Evh?_ zJmqWnjf#xS2gB&2+6&ozSWofEx#9BH3IIBP41@pq{7FGv{F7*eMrWMpdsx^^3_qMM z4ua1&%f*5WtBq(!zt3Ah7alB9_->Uki-H>Z0NRoJx_Gg)IlgoRiivZk;}0~w%F_t5pfy%_uzTu^H{+rc~Q2{xp8%w z&y?FDJqd#fRYg=^*FYi1Fv@$nQ&4E%vPONel)rrr7L-PvHTW~s!v*6z+_U^Kg}Wab zw@nEPsv~W>yuM-NYx*!>pLEYs0y*SmRo|^!g0Pf$y+kkY#{d1#a>&U3{U4QX{(m?P z{&yn(z;qlRLcn)@j>=#%z4;y1%ugtU!GiA^48@;srQICQVCPhyYUd!O$l`v;Z(Z1) zD!gdA{Z~E^aVqzM@!)RAmR%@1Q7C?i1MJ@hsrn8v3Lb?KJi&J1Q)hTtwdRDV75qALad2Om43sD*7zGZ=#qvS0 zv$41@X7GBeRqk(?RTLC4Xu**!?-b+Jz6p`e5(Pe#1eY(wf(6|}GK|rLwBB?k4^4UJ z1rp83SH>!=j*G>6SJ{OIn+1*gw@ZX>mwm=n9y5sxiGlnRrW#UR^jkaA|0bfbeh?}t z#scfj3=qxoEdSp~`^M*9nrQ3Twsm4#C$?>#*mh2wU!0uSwr$(CZQFYD)UEpm+?&57Zcr6kZ`8SQbxi!AJ<@ z5AhNuD;<%XOH;2MXbnjt@{RP6GgohCP7Hq%`b~f#*lPl^9(KU7pkxL%sTQye!P&wV zSb=oGKYc!*P^~=r1oH*=iD={#tmd4Zy zde)z%81%(KgcCp3;#ijiCn~iuGr~;wvg>-#%1TJcA5P_Y$Mz8;;$Ca3+HXb026MW* z{GOMgDn%N;JBBeQ=Gn8R6{V1kEw_^MhJJMTQwP;_;=Iog_j9G(;XG0|yd4JShoK9s z`*4@Kx4pWS7qLswB9&prb0G4)lAu6@$iU5PQZV$OjDaq&zi%z@=3*29Zw+ahwqQ)C z3X`U}ve)!6O6vrLTU8vq*=s<^%y|CGIN*tADcH-^bjpf56qX;m&#I=`2?wL%j2Z5w z%wtl2T!;5CSBt{B{W+Vf-YVQx_AjYw2;9nI8I`;&yayq0*4 zo%N|J-+L7-o;p`cFgL3s%e{Y!ua2)>r|_hP>5&eJTsdOnlzj=SZrAlrF!*$Q$P)$u z?=MHAG62l5w`Ffd<1mUfmt^Jj9$NZDELw;b9$Ul2P%v;jkw(0g<5>8K$Fq05p{+W0 zz5hb?6b+Gg?F&>=`Tq3x+e$-C-fV=_86mwn+J$>wYi^O0R~uTo<}#4#Sa7u@A9RHx z+fubt=B4b(Aj(86HQQ#wY)jYTnSi&n3hz^)wKmY-jVb`7O2k0dgp2A$R$Sgxa_mUr z)e;oWH+lUh%h~A`#-r@d&Q=fIyqxy@OIk%^b@#QqWad!8kGe57X<=*3#)h6vQd0hG zaSjH?RlJ>?9{WTM$79KdA3ro7v0)769py29g8+HMVaO(0-ia!A;eYiclj;S38{JMB z1UNy4n!IcOaftK>z)$H zLR;gvEt1!n$?LZ)26t+e2K@~8POQcJ{v4tQca7)6>i14j@#ngg*~uTFL-W6g`FcjI zA_vpf^X>L{Yp%~t?VEXlLV=(lBa(t?JMt+R!wst;^ESpgLyt5I*kfb}0RHf<-i2M0 zoo~fpMG6(+4s7QH;$>8Q*7H?u(4m+a^^nN{pFGEEmd%w}X-JM3`NXC8UdFWA!-X{( zk~RO7N-Kw&$aBN0>ae{iquI_I*83vi(UnBEUMW@^|80Q=Xan9J&b6%{yDrY5OPxkv z(b+v%v1iJFH)XeeZ^vmlAC(crO5Fu6ZecMD>OjsBBRQNK_1_G0Y>dS(sl~irIUnZH zUJ=QBqW00NBwLi+^Nf=03uZGO4|Co6v?1) zV=k$YSu{0?gWc6MkW>g(&rsm`(i(zv5YkD7Xv-)y8!EqCB@Zoh5L)>de)Jk|RxI;t z0g?o27oS`l<~*wLf?|>&tLd(Cr%n->K;nd@@w8jYE-Z;(=0M~6{GiQZd1k`nnx=mD2!NP<4LuXqW!5>X7sWd7wgsg#F$Vul_P zv8^`AOVht42QSb#PlRhMXJ$cYwDRSSj6<3BA4cZCxaQm1-VBr_fBrVmD35Z^tIVgh>h2*;@R|^Kki7T9+Gf7-@wuS(@Ady# zH}F@BE^gOSPbh5R*0VCNc^#<`oQnUO-f}~!g0*Bc+p-hW7oH6FwW1bmlL=0*Lk$42QeeAw zn2qUz=V)j;IUaHmd7#>X2X@fp73bR_~UFbZxrIq?)-qdPanw&F*w zB$YL~vVWG^;Dio_HN)RAKIO>a%s|7L4vXtxZYuTKR6IuqyD{8Ub8^|ogG@n)QLsEG z$uN)wta;L$TaI8%LV^tyJk5@gU$Ty<1>!exDv-Gi2|?G zU$XSE-6Kh+W2~uUb(pVXO091mRjjoNUgVl;L9?uTWhU}t)B`8wJfrC_Q5scV2neM@ zHzC!uZS@4Qn)Iu;4W#V)j_m?QV}6O2q*UrKa+HOC27^>N=1rv7Gh)cw;>oA!le)(e zjwO%{3VFE2?+(08Dl$lD)VR5C?oeR&7i3@|-fm=POYy)6V*xoGN)8QZaY<579VKY@ zCE-6i5<~Z7a>QF^Lk9{~yAtP5D7BQTI0<#Lpf2Q6&tCTXj!{V2)24uU(h ztl=VHC<^BTFpRktP3@HrGwdk56P_;rye0lBxS zM?%htfCqvAIcx~PoQ6O~6)A6Rew$eIPhtP5`SuZke5IstvfM1mK#4&76=1bDC4u?k ze}Ub2(X%&Q*$O`&2wI&YZ`aB3V=LuqNqoDt|6ulyK@AHi2eP%1>!II}1|r!nMWp~! zDJ~hOj{GZ#m#6$W3rpgaC0_$80%2>TCJ4qI%N?rFDV+{jg1uA71UymN(-9#7c8UkZ zS)BhiN_vGuC*bg-BD}r?9QclZpWOyw%s`x=?bS2q+#;zGw%l%^nj_{cBA@PAN;I%; zl-sD(G%``FXzplGUHS0n59XdAfE9zJKMCx4Wy?YRn^Vjrxh1x&#Qj)g=RuN9k9pFF zsiMan*k*WA%WmaXNLD4m-&qm^GJ7E*M#AQ7FoQt2!Ndcf3d9UhOQ9@+xFDhs6c%AW z&@e@a4jwM$!wVU~x(OIr$=>Z9J7D$pLxT}Q)%V*wZbp*ts^&ajSuZbP)ifb zS93t+Wb+TeEu1~?ksZ*o3NKhKE6Y#9AQP>m{P=}SRHVe>tF?KUrSqRHtq<)_?H37- zd54tt@lWpnW4CKrYGledIFPSksB4BcFdVkwQbIz?2N($3fU!#rELd6Cs47w2g^?E- zGGPhO58IPNx;0hl!6|eRXRhL$mJE&G+$z8sS`Lm^k{JgcClI#Kn|gZ?+POBWO~khX zKDU?^FLckGN7Jw?@GL;kFyG_{1wseHRNe_SbX2e7F;EZX_jE>TNhMTiBs08Sv@~@) zrw7|26C)o35IUdPaq26ZhNy~=)NbW=HRu3CgbeXZIhdeBi6iX&Nr2Ir8zKTJ0&!W^ zW&`Ci*QQy#9X{QR=x!wQb5xZ}=Yw0L7mEcg*G{f%>o1TI8P1zw&nTvyVgCpvHJOU9 zp9{iNRAyg}wXtGS)Z>5Z?hEM#Oj02UUCu9gB;kWIA7^73$Ww{7H`U-9M7DZrbrK`k zO$MzDdE&me@T4i5g=5z1e0 z76*_d>XrJd?QTtdJ|nqo^{|fi46!?NzCtYImLOt6CpUNtx6-Mm=)j~T3JBQeC~O=) zDFQ34nY{9@9%@^jZRJ_$ixi2lz6P)ofRH#_+eFo)0fSv`ZO|f0A_XGe>Fs26Ro||8 zfvA|X&5bK_%dZA0(_t7z2D+K^7z@yirou9BL!&OJ$FCXZe#3LPHYmB3=j+~8S zq&Il7$>3ktp4)z`4!_`kJ`Svf{AFf+mGF)ylXsWrtSKs&H0)+wQxuK`D2~#DGytBl z0~93lo=myCcl6rO!yda9;qqP9#gdG;6LozcK4^;LlW7Ohukb7aUqjs$JCnP8L$4+7 ziGt@R1CAO->=P6At@PE#T!L&X{7rSF4l4Scq=z?JGtfxB+|oajM+J|!ju_dUJ|)sa zrwNPLXrTc@JWs8XRU`F?Q{{6iz+2BZEosw9Y&-v!eQu7u()E2ZRPP|~}PvgBH4$!%$qgt&^ zU08Y~D#iSlc7c9P4bydWwe`Q9q!z;crryIlcx}k7I6XV@xt&~hMQL|KhCm&PBh(AX&xC5_0&wy*3rzr5tvv&T7qhf zNyTuEp=9kKLxF@zs^hvgyol;?7#k1G{X1x7JGVWW<4S~3yp_UCyxRD|?>G?&O;u(w z6Gn?RKF*&tl>hK2`u=*Oj#RYR3Vx`AaUcG}(njDbZuEIPYLfUeu7gIY?%opWng?p; zlGj3_K35cPB8=&CY%1o0o=AgEtxRF04B1(91>#M80;UW`ySM565ygllRpB0OFMcAa zo=I(~xLov6iAI^}`+FP+(dV69Ojf0@6RnI1bsz*AF0G`&nQxLbx0{QP2_t95c=oaS z9rmQEXkYhanS=}kA!-_M8xMM-pcd==*r`*RKWJZ|v}3fkr2WTi1W0JqOi`0HWwhXI zmW?AqRhhf>{e%g^h2#B3%)JRMYkh2WFqDgR;H8&_OeWvaoG4%5E_X!3BEnP61|O@_ zQ|oVC?#Q>*HP22yrTCHn{PAMc%ZHuUpfGX{rxBH@Wlm-2?s~_UsE^JrWuyM&MV-f zYgR0VGJ{bhc^?n7!wL{181hU-k8t4w?Wx(Cr5KQX>(RJz&fn;!Q`M? zPyk;!HyO@+<6@PwrHRvgZ(m`Lu36tN1^%L3pR?ymiE7G<5yHFsZibo1m$xCYb}MgG zw{3fAUr^t73f05QtH1yspWxEMuFv6)rwiAEhTqN0VJpi0Y!80YD*CpY9u1vaetb0M zl@-n38$DC_rlX9v_57tJx#n6(O^IBB-X*TXd)byQrMaNS=U3d=(0$XQO9xxT^-9iM zzhU&p;^DQps{7Oss?dyOEUF06zXaN9yK0V_Y-IVDncU#vTUZ0ub@$DiTisMRb#a1S zxcPPUt)iM`rf)b@SSQ{q9pvSHCmW__T^(~OvAEeqlo;^ZJn_=;5CkhNcPt-p&}i54ODwJ8=q zHP&w_mv>a`EpTxK^TE*TLD8mUfk~h!KC|(Z)6^1~EP&;N(exia9=f-z{k$FR)f0f) zAo+N}c(;8Kr091(Ad*Ct zVU>FPgV}S>WX@9pUY6@>fBS1qPMW75I9z!O)-`tx31v~D5W%uhv#`m}60|W$_>3Z@ zhuEvjta9tebO3vI!V!WZLok1_4(hFdh@KncG?7sR1kP!BQu5atHHEj`WlJ=~8Zg96 zqp~iSM5vo)1=P%1^zv_k%povSPN%`ImjeYnC>jwVA(JQ!9Zz)xq|zg}y8`kHB_y4y zI7Ag_5>%!Zf9O02rvE>NI`e~n7?E6{4Lr`i{tJpJ|Pojzh!S@}m7EJuVFE!}Z_ zwvtRC;`-BZQ>IyZt9JPl3F;f#V-s@;{iN2gqL-ad7ym9kI~pfO;4b z4?y=nQrw1#Ju5@~bUfU%a^f;^&IqD7@fXw)X4mtbdZ* zQ!t_F{J*5~pIe08pYU>NPX)2xF;zU@j!nM5cQu0?UGb!eOMk&hWHM7YpW=TYii@&s zU`rA`Ft+^&5});iE_p2PDRHCm=Ai%eWCJrhz;IUDXXFR~1*j1;!WLI5mcF(m)V*{s zs3nfMi)74rUzHJLBx`5PF%Y@w5sD~>CUZ|UI0-lmetT^{nK3}^ z(iY>A$|v-Z1mfGlCnrZLH0`c72fYedy-JrIBiXjtQ5Jj>uL4x%!N1H-^|$coyVy8TqIr}twi^k-mEzL-}bTc>6*=yOkyKFiMcQ9+#>qaPyRXUlyN zpn3SfwK8RiM`^_?(>Bl3y1p3xMYlNm9j@p{37kkeOAjYu7I42fuk8*vby>&Q{k8U3D*f@+6H}BC#~Pip}+4p`QGSP;N0$9bHfz6qTjF zc>s~wz+4`bKaIc)emhbaPeP#~u?j`@B;9;`0l9P0!Y8aMPf0cj+#CR!3^x-StA<;7 z{IGwGO|k#gwj1ov>>gkT-#i%=ep`5*&VtrAO@1F*mk>z!Y`wRbEK=D;#-0Bd3Ea zmiMehpKV*oV`sq#^ z)D~`@s2$+E5fZVGva3x2W+f^)`IQkY#QeC?R>oyT{fB~0f`fh*^7lpE$7)wF!xLN6 zJ|S)bfoV#{5h6r6VzbV>r~~dtB=X>|2Z=W6yB;d$*YvCoVvo;PpPKf(o=HY13zyQ# z$NJ@F*%qG1c)^XTjNrlcilLSpP!5rUYio%5*-}ADA>5#u*bDX$ND?f`oaE_9`QsPN zE(YH}!iS#4C&eK{BFbW)#fZfS3o!b&^xqwt8GPig>#@P6gOw2xLe+TIfep>kkub&f zfndHiXKYmSpr!iks++e?hw&j7sJ1fNtOF|A3QpfuPvqgjWx#^OcjK))S?1RhPzYg& ztDZKYg{2-}O>ZEY?T&h5DMX)f>+jQyVc8c|p6wzy-ijA*&|OhiQwUqFFgn)ZLRxQ= zQL6H`6+Q;qm-o2kF~LKzI1qL-wI-$d(G64D+O@Sao{!?-%}q=NKeDmx{xtnaMm~Wk^XmL~3UE ze4|1Ctaw+&^pT=Dkdglc(Z9SjEr(^7iI^T5??DDwfbX-BAXKrB%GX%gM{hO<_=!W+ z_D9V7&5|0V5RMuSA54OlRzuretGsmfwn0!!#4sfMZ80_C;-r?M<8$-j%>4QKdK}p2 zp%d245n2d>zA$gQz3^gxx5^&ZLRrSHyI1cmy*R^`qT6kFJ|`Rr)U2fzNN&iiZX9Iz zoSvfi%OEuoDz^Bc3_QIcQ;S6MOBxTpN^-WSE9? z;#T6E&T?lu_MPi$9m;JSGSkv}zsE)_I=*L(@n7(|6)ZU7Tt`T$m=%ouS5#xof6pQDrC2GeW&{att(2cf^OyMA9T zL%x4`rRx9of$~>(3M?uY9+@WcZfL?VG}Vc3@bJk#W_cLdb>EL@Yi!K(6}p*vJ^gD2 zcqeLblogIAFoTkP#~YyXaZ?t0+U$JZjBWe=x3KZolQ7*R_heIhd8o3pav3^5bYpI7 zwe6t zw|P@l+k&B_7B=tx3Db$6zHXg!N^#!jbFL!Mqr+*WccI*^a;3q>XkdRu%P31Ej{A0mnFAC#53$@+z8ohA@47?=OU4}>9trdZfTpe5)7 zDb7)y7COBZ+O%)Hm83ND-;YTWBsu|czUsLLgu6s^e{>I!@v-wUPYm=?^(``6o@jSd zD}K3-Ar=zpXB$AXI91z}U%G1m`yxa?935y#z~DdycL1(Fi@?6wR7X5L04%VYBnda_ zK+u7N(5l>SD*A|g(ejQT`Px5$)c^J`1?dHmSK9;% ze!F;UNfUpY#wLiwHx9j+`>nXNQxjK4GkWVOPV@lx6N|~gLnW1I?zDRhL^YGjUz+*z z)+Y^qWm@JC6wZh*514K(;>v3(+7USyk|BAbh}=PaGZ5(q;9Zq#I{mGNMfE1yE7dR0 z-c*UoGM0`(5~oW?V_^cH&hv0G`v@ zKDW5-?b7n9j}|!ba4tXa-*O=2Pno%9y@Kxk(M&hPd)#Kjq@%F0|QWR(1^$osz zAz9GBpMMw#>#W)0t?P1}dOieU5aL)eG^TjGZ6}}H2I0dOLP+MkukRb|UKYg4=p`~T zn@$!uF>sDP=v~II76@79E3Jo~VRM9LCJ4-9IOILf=kp8gRCKS?22_P4|VZ9PH*s zhfG}t{1R`G;<24Xx4v%wIvf;2WAm~K?mu(?GtZT^#t)OpTeoqDyEm`L?0IOVA#~?) z^joZI>flCW)KTD+&5Q+JHos6%ynVebQ$BR6VS@o)oMf(oWdyB-3A2h()ihQ~9SLX4 zdy=iBg1X%WZ(EdLdckB3s;i0Hcwq;q*Mr2>L zz@5KOg`qu$d3t+B z!7vf>A!5VD;g6`p=0;|v0n=`IRoJ_OSVQ%Wr=9em5$@R&hw$$U%2azCpia~SB>hS8 z3~0bNevX@qi;Ino&1Mcp9vTKJ zTKLQmT@Zth!i`}UuHp#siS2bzdT*#o_k93%i68Mq?N%_!hnJo-2RL!V#~+-L5T~x<%_V)2O(#o3ePwkHSTyvKEv$tG<*+s6Qco8*|WXa>@iq9b$ zV-BziS=RRg?D&(d18Qhf;dk-y9QAJ1OfNFqh4grCs;Ado(b}DN`ILj-q!Hem-)-RZ zxWPHN`Aw*baehaMpk4Hnh3suC*^S})JYO%MLQZ{?xD9}|+pVqXkk}*Y&RCAzNgxbxx6atg^ql1~3& zG-uspVo4~xe`@agUY3*kH1!#qpuCt*y_mF9@BJPMynplk9`I{}j3aSB9z($u2})mW zJ1go$5Ub{dHN~%YaLUBZZMT!v2I1q!nMsi=hHAp<#h6@&TO}4OJ~%g;(OMf4O1p#eVKJcNR#;*^+a}#8|xoi zQMJdu4BUP}St9e@;^>yS@H>U3-1?obe&t0{R4yM0rvQ^WElc}2^k%sr==?Lb#n5Pr zH@(8W61a~axC_ReC){;X7XNE=AGhr4qbl+^@!buqk4xm4mIg?6y*;MB_03(FFFIz~&TM7^z&whOvsT067{p z8U*n^2v5ivR%WX9F+;tIjV@mhazLnA9*9C6(GVhZUS(d)w!$13fLZs8$z@4bZ za>E_IkF~G$h*ka9<-7(wF#h(of~3mZrPd*2-bNXI+)y6zU8 zt*a;h9dSnsa1$V%PFMK&9T9E%T96{0@O9Dt7dLA|MK)_1r2~@0LoaY|`}N&i&6O|P z+d=zs(~6o1CHkG%Q~U-Y^uPnY0}nap(^;zHt;2A%>MdkR&3)muUgQc&4>XqNS|IKb z;wW&mc3=7Con~uw{-%dP)twzSi?m$phj;=0>Cy9R(^qd~aO~ZaZ_+mHQ?z!TEatc# zi~-<^4xkVMup5c6^)GSn8#|B2>tPCppEtG(>D&p7nu;46Rm zYxeNWFt{!Cq8{;H{sbl@pZAv(aSfD#xVXf6?t7ibm~?c6m?#;bZ%9LJF|Cwy6yR8= z3k=*XbWxp&jMZQ06za=Gy!0EeeKY>uY6ZnkqGLaZB9-vvOkESePeb})wfGCk6Ks>n zV+Ms1ZI+{GclF^zd>%Jj4kj+)*(n=s!4hBEtO?s`?!D%Qb znLff^&B-^v!mp%H``s8blm~oANumr@=fHz7CBMPDb<)r7 zB-28kE`CQ*??`_!Ip9@y{En~Fir3$pP!Ec{Fxfla zD;^tY#B=n2mZA3y0#)eAgjagvm4NLOqk8#5SCE^2Y@FDJR;ht0F&6;*RYVkCo;7yh zT02UHe*%?=vgvW7fv62Kxq7}_z~`*XA&mqxVKB|}H1w{MkSCLf!y7x3@?n%#M@VP)uk zGL%EL-*%U67hrvw;EgW#)fp!W$GYJGNGRCx3+>&W7u9i3Z@c|J%IXHD_&GwW@)mO= z*tx)Kzx0z7NlE@=OENNIxzcQmq6ab_C~k6d&q=r2n5^5&9E!ndi6Hzxwt+oX#B`V)tGsGD~0-m zsol##oH4lbz2Kw3whnf#qpI2`svLk~2zzUbS01Yo2BQhK$EVB1xdUe>8^wMh3b*?5 z+W;@!)k2@d1Xl$=p0BS7{XL^~Q%JU^8)rp93 zk-h*`53<_X>c`nxv9o@+`)l#Hj8es~hMI@;IZ^S8o9FPc&}}|7hP0OGWHY)1lCx`= zrlz|9wfn_qaqCmb&bm6gEsK>0m89uqOxoMqh7j zYX&hdCv8z}WAppt*6j!QO-I2Rv52+0@%M_x$`;toKGhU2hdoyPST;w7&U*f%kR^-bSKmi(QB&{r z7mjhnc60Kcj=em;cfHm08!gRx876mnp2DX-ESL_O)q%NdpIEjlx9&=H95;N+k4z3e zH@y_>4QvkX@3Mv3!NH^Vr${|b-|0st^!0y3lk0yCn#i5PgN`hISjO|yjNla@${q0j+!KHiv` zHCJUqX`;%Ff^*b_A#U;Rn&&e4^&flpE9Ok6L1OKPo&lft@T5gtE5jDXo;44{~D2g6+jGpIz0r?Vhh$ zRHgiScsExRkf>RlZQE4-C|I$Nqt z9~EihvA9Qj+Ehal1UO+&e|Uq^0K;dpQwUyAUfPed3Zx_(dOM4mnUXEdQ!yt0g!Q8h zE&2sc@HE5N;3KRtb$R8wi|cWbu}ixprIJxqOZ47*z#H_=dnoe~Z}{Dfmn>a0h=yCf z&8yvHbTv=RgLh^kIG1sC6nFe}E!ZB*MG4r*8+y*Uj1!?t!CN2Rm+*eD) zOyi;ro2PsN1bWOA2Z%Kz7us=a&%^ru+idmofP+U50#f(8bub8@S;`apeF};IN^yXd zx6UO$$9$-0m!cq7eP7q4^-Jx*zFF=hUe{e{Z>LSt-ihhD?Fq>GYyP8>4GN4|q@6qbZ?Ca)LB?nOQ>X|xdnA*EL=G#4}PQ4^Em?<+|dTk8qg z(C^o{k>M*zsR}DCy&ga+w!Loy&YHZm@UQ1ZCcHc^xQxoRFW1Vho1v3;+bC@O2`1Nf zj>NwH`S|N>lnnDcO_+pOHlet)qRWiw4r$Qp%l+l)WKd|~jN{o!HV!?Gn<#0LqGuM{ zACbUu6+nAv5Fgvj%UoJFA{G_|InRP0)X0!3DgU#Pb$kxkQ>@(Q104t3`{F9UfZrs?|6mFCg;{W} z%J_WZ-^{%!$F6pa{su+Lvee-9|E|Q1*`8J>ooeUuQLAz4rRN$5dEBKuX?r_2U(4Io zF!l7^rs)@aqRLNN3{*pbG9%u!XNWFzxRxJ}l4ORgRgtcDG4fx>v&F+LJSJtL=`IXi zLV(|AhPCnXGiZ_A(xid^w}*hnowqmPC~SpXiHmDebGO!91n_#e`YNQ)4!iYKL$bpE z=(UtL1awucX`Lsf0BwiO;!&z9CffM^Lac&u9PxgCqrf#6PrpAFa`OzAkBfC&#j`?a z56Fw0ZTRbpFBQGGtk$%Q6V(s5x5ds%8MCE(5gEpIZvFJ(>S_#^th{km^P)#kx;Qd- zwU^}BZYo0SRgwA7WPb5IM6LCG;rBZzN;d=-h=jcziw5$JC z+UqqV&d(7rsyJBFrqK|J%+G7cpuFN-QL|czgfVbKqe;d@5;-vIAknHeQ82MtpEC8d z&KnhqFkvrkT~#w*)Y(`+2^_F&*HBs2E9THeE?!oi%L-8A8sX@dX>13aaf?@lV8@#~ zHglC3%aznFnzI?9Mt(Kus4X=uixrAuTT)xg;@C<+C2Q`=NZ&;5E2O7S(>a~=MJfg6 zZxnWXK1~Z>9U@QBQgkLS^Tt66m`UOf0C5Q?!}nRbNjxIhtA`Io^Ysb_x*~|@I#G{= znkwf<)^c-k|1w6nJn8OGViYJ=m4rIY@fQ?&EQIH*L_v(jCxE;f+x<2`G;AZF+OuT< z^hPVg1RT^U(O*#Wau@1&J(usBt53y9su!e*L;-`k@PxFzhXfGO4G0TRp=R^R<>3wT zI&<@lrC1iZgb79%4H`^is->nNNN1!w?kiPRdTK7D3224(H>ytQf;*nKfyCfNsuB_I ztW;@vux)5EvBCLaf6dc8OXZqBb`bUdvs%=oAHd7*#sOW|5BSLmCmf3i^h*T(?wEH7 zIt{{WK=&81qc@%k$s_+Wlm+ODDwtD`$R{J4)GajVzG^o9DTpQm!)42j+pcwQJT+{S zQqdEs3^oX4#0pH+LP{w=bX5_41=ugo?w7xXkXkAt@ofpf_ZMLl3<*<1^%OfQjfpA@ z1c(8f+ISW)t=eY3Ianm7@|r@A0<)odDGlqghN|52WL4!`B3ojyLuJ?e-NP;&EHzk! zJ1a`sa?u;EQZ;L(FkZnHCdvrPSPB1X766S8vRQ4Mt}54RD6K+TTWDRX5}-Zs_K30% zn6|0dG*A_Z5g^JCY*W2UAg-JGHdE+kW>&k5D)T#YfSaRUZ#@;Kq>u9q_@Qb5EOO71 z1YPw>Ohk_BkvqyI1SdcF>_&s8w+ltdPosUD2l5}i(fm#3 ziT|3SB*biSw>5oB?1aH6__nVt-EL_){PhtlDtP*?CuPx#`h)^m7JKwq4j=u4&}sbmbo8P`Z~hU;43#Pve=ufN&}yPCu?4LYs@~ zs2SZ`rc-})DwbwfA>~up2A!(X^Og%K64aI;2UHj!Zhz%4T{~8Jg2A>7oifV5s=URWQL@`GXeW9P*uKL_pk8OM;DZ>QAM4T4$}z>GI%Y ze|}dM`uez#OC;@&6awHY@I(0s3*H2Be^y|e^9K0eP7rr~8VFyU@{&{LB<9JG8v>9HFMAAL#m z-$RH!%Wx_aHVLV#;CD?czEIJL^wH}J;y}zY>oK8Or2>{Oz=)LMxQpy-rLd-L z@*Jp{LocmEWH^6iXin__SYo*7A|7b<#-Pj5FPQP$?L%`DfmWz);RYzhepNAfTFPTZK$ zY4t@NC99LMZs;g-!JEH6trT`#K0&yjpaHf=1rg$za{sAW09pOmIt>4fwI}IM9RVx= z(}DYUlUg$+O++W^k5w&hC?3$4{gR1RQPj4hIxy(w`t!w*=qFzFApJM#Y^3;u7T1NU`6vfB42^O@pmQ@;D* zgRJq9hhKaVGUeK&xH<-UzW6^>-{)Zy&QXvV@XLX~+{u*Qwim+%PE6Zm?{X&H zMT}8z$c0ePLWg#W3i0j)F2X|OD5R!rkypVuaCsMGr$O=@r{2ARzd-;iq}b}Cx>-6 z)P0PwtnYt`RCwyP4AwZ5B5m6@^4s2QhQzmh9yz~08W6($97_bQnOZT}f3O@P$HXjg z7Al;VfQ1fjG76g)(@FER&;rO+X4xTOm1X_)jE#v|{BmEBpiUp*Y2iisbShAK31adG zQxENF?xiH#POfi@(BGbZPBspb9+aawTWu3N?kIXAoCbJGHyyGm&6Qx!s+YLV6A2)Q zv?$zid0Vm=$Po&8Eu*qm$@2w}xX>0X0IVhIh5|BzP~B?#Np|dU_2F+NY=Onaz!A6- zKWxT|EfKe{!E!iXoT_Ln#M6Wi*Ezm+N(?@45Dx5cb{ET0TUCKdhl7S&I~=-YmPcUucv+!yaSr~$$`~eH$fl%SYy#6dp|bA z+u2NhJ8NTgK``sO6sXKw=AgG*8(&xXb0JQ~YxFk86m?t^PfUhkV-bIbE*Dd!Lx=BH zbx`-Sbj#o#&ZmanLQ0GL@T-AxF4xZDQy-*JCHP^j-Qo*^oOS1Hz`n=v26~7-Lm|Hx ztx<6AqjK0$9p{?rHuoPzdVZ$L8W_#OxP`-7iC$xjCt43?Gcr z`FtPaC-9$mV(4e|$Hk(qjG)BsnzHbH3ntNIlr*6>oa$;@iN2bw);JDPI(8J zq@cb*rMmLKrPqf8j%Az^A|j<^fr?eble!q5_-H$@KZf`Z{z>LKpRcqHcnB|pb>70q z^{+8OQ-t&6M0uF`blqb@!)=!HHa|$Fy4k9q+|Tru&)UJ zP2!7LcNvFB8UY{wMK2uc%O5dRn}yL9<+U06a}M-tJfKG-Pxx9m#G;_HAqqA0X`hXD+*)vL>IAxKcm)lD3J;x@9Rh4xlth8$x+3RqJMTKJ1|CV4EC;3&^u*sx*ujm6e zKtHnx58Dd|U^cBv%3x;$jXng;ldJeX_R{jS5e28Ue68T%c^x@>+mp~_r-P|;o#l)G zTjhC1Wmy&4+1)$mL&6|1cZCp6_2#aJ8vXu;I%Fgino4bRtx|YUoAv8Pdk2u6A zBssXX(o;3!wc0FJY87X*^A#COWMMpPaEskj+#STB%GdOTFk(v z@OLw}>B7I$|mUfkW?-6>9ScXti$?(VL^-62S^FaL9{zpInGc`|t>duC5|X1%|) zUKD?L_!k%}iJ^?3-V8rEl+8!NQLYHY*=`worsES}+5$%l=c9FZip;f2Dg{F>2%Jc<{8!XaZ(pFtTytvnNcRw7H6ycwo~tPf0w zK-A_x=_s@b1O)h9yD>%JM`D{WlK>HgG)8h;9wk)FR$u9!Z296Iw28cuf0U|x%X(q~ zI4lv*mX=k|KcR&1EsOTiD$VOTmx8=dy149~-UQ@9LxdatUYyY)a(Xb_w3ZO^xQWW= z8qG~uxSBrKm;h88G$!Zks|ujPDq#JK{hOZp?1>U|rVtk_*JZ*_az$?mf0~Yp_ch`Q z)KrZpOfBM&qTpi zgHsiyTs)|i=)JM7uBiLEe!i&~W&6^{(tRPP{!ypWAvU6xJnzkF!u!zsoL`dsy}k!*sZfNJC#J3^q-trlw3Kgf zc2Bl-&$O^@zOJdev`M_2T7CyTzN;Zfy)FA}l(4j1*v$86-I{h+xA(c$4#Hz%^;*9F ztQS=#((`hcnJP1V3EY$F?yLrgp2ons@z4KU%Ui{H|DOKjqd0G}|7jsklGWrg@?9Gt zb}_^b?^y&bbUI675R#GWgr3GYD1Rtm<%?IoVXZyo&dR$XS^@W;Lc!)++Ia4dZwTlDhw$0-NVWn z!kZ~Hx7&KcdnXMjev>i^N>W%jgy@Iatzaigoq`PRgA#zpnc6Ut=me*bVZ9O$#_wIF zFG~qZB@DAj)36m4M1jhG?gJ?pDB(R+$Ip=+oAQT=4#~1RTjO(90~s7fq4?Q~1B|#0ZW%1FS{20)WC<+k+Yc$0!nj)%>*~#_oD8kKX0ZmHGkV5+;MANzpp5GR~ zWWiw|oAD@^d$}-vTAo6vm*U+!jR)rNTbT-FIG**OQgxFgH+!it*65e%c_O_LhdTik z-smA>INEN|Btd%S*tM@=I6H#IaKS`UrC1)2c@}h9p9`e9ZQi*wN?Cn5@F@nzJFspq zf{lzPeZH2&%j|dA(?>uU3Mmon;uk?bVVuebC36#vT8S6fawV~w0;q;|PIEDbPcBwB z4^`G@C}INCM*+os5=@)bIRSK8bCI>__ z!3fq3Wjqgk^cH`q#WE{r4BU&2bXH8Ub@f|N1!6Z;LOd+yuliuT&`BTK*gc-?#lcJjYYM^3lX-~y+bnb6W19?l z{ngp~#DyOImF$+k`PsPj{^GM#F6I`<^ER&K9-yOn;6OdoVX3lkqE$yMIN1fL`P4Ng z*Gng8IB0*?H14;Xh6^5@q!}q8qs5Z=nhz^VF=L%q9_VH67=(zsdi})y==)x)s%e|A z9(R>M0gOcVP5A0stG&G^=X*H|c;hfJnaI?Yu)@HW_pK$*pBl2Ab&h^m==Ahl>?#zw z#=&~HDoS&d@&Leb1<7UpnF7xOq2ouD?NJW@E3k!V4^yImp+A>x6h#UTs_U}zN zu|g>KOE@>J#6w6==E>eZHQ=KSZtAT_-AMRRIe+()G)=iW{EGy^BDDT-01(WYFd7V zcMK`0Uh!>1raHBXYyGo0i151{_`-s@5Js3H1baen9QG3OsM57thTB5f&Q{V|o+lHp z(y#GaUO!vI5N2%4wR5+8q>caAuG3%M=S8VM%l&C%{TCCs&x?tqsx(LH*%j182p|iX z9RNF7xY)<{mpMx7jrc_ZVARsx+z@uc;}wJC0{F@(9~AzhFd@oPs7MvvTm%AfzT5XJ zTg!)#L`R(7z)q}hJ`2|h<>;b$5rCzQQlTW4g6NvxG4EF;Q0#lapun5^wM3LA<>6ah zAg9olx3$rOaq6!U3Ecm#GT#4uBCg~CIgOWvVqU_tk5c4#B-0ETb@)6p5Z0ZKB#_~> z0wSOxlQooiNsNgrxg!y>dIiyetZ zN4gj>#MWF;d`Bo8rC;{AJPmq}SB5Nc+Skw8{w);9*JnaYg$6&9!UW7Fk^m+9sq^Be z=u3J$4^n0#og%7Nd=-lXrafGJ4wg3(h%?c+*`_x+=RKZQYp?C4KK_M@W!FDER4pA= zK5=Y5NExo5x1A$yc>ik;hPn;{E7KTMqOw{SUvqNujWag*{N#^)awGNod3ly$|5bOG zJ@GJ=KH+~atdSg&i8xy1f}!WH=ct5dOs&bkKPPyGA;v8gIWYtqtg`UX=(Gp{vZOI~ z*5G*LGY_CKII8gmYN_{;<^1D~<1Gb!Nl&*v1dM`$_kQE1z#ypVamUc}H+|WL0hZQ- z5LsO1O+p3yg_imvzx&b)^Du!)85ZzK_ear0VRzIzq$jw(v_>ZgoS<*xPuLpo=|P>5 z1iMn2&wo3CIh_z633z{$P#%T-lUMO8<%{akTu79PS%iw$3kkKPLR6`oVhnie=`L4$BLI40ZWWv zVl{~4DE?;Sb8+}ct^aJ|%cmivT7WDCJofF1(?HFRh+SPF%lv5>l7R52vXYY;R>Ui> zCyhG16I$~54>vPJm&*^$q$jGqh|%Y2jJTggLp4W=5n$aEjQ^t;euxGEiR}7mc8pTD zb8nZRJ}Fy@b-vQyG?GM6F$nunFfY&55nbngl{Sys$RW_-V!ayBR@Ngb_~kPa4_@SJ zouszsF`U4O1x6Dh6`{Pk#qPH}F~UQG~q}$_fLP2YOA+r@bl2f^Q7mP^E?$)7L@^qw)OI`ny4P?-VnTl zRJ(9|e6g0plqfAN)l;ES7-;JB-tt|iC8Z?YCa-5J+H}$Pe6gi3WE~#_3aVwS@pAo| zh#~6#^1%fM9G;pI0NFHpe;s*(&wHhn8!YstK3^WOynJ?A9J^qbop5elJj9DUh^WAI zrq$bF8Y)uwI@43%M?a{*SE~nv`Y3qwoHy>N7!F#iHRx>)gK6yIek+|LxU<;K6HfYjJ7jUUxZwRiJYx^ptS|?3 z1PTw628O}~is1O=k zS^w8aJtDOiG4b=Ad_=rm|;kzUf8BAuL~#2}id8hr^uq>%KnKxcg`vw%x^S8l`4} zsc-^!iq}7oud?+!hfdKudk3Ywwa0TO8sW1TQgnp%(dTx3^We8sG`?Aqa?aZrQgX>E zew}y+{i8xqiRyQ{nwZ-*b1AhqNNymESdU}Ar$VRW%h|vfB7)9XAM@puVeF-+Tjs>5 zk^;mala8t?SgmB01_AYKEL>%Xs@>*X6~9e2+so*l7NSc~yE8$8O3nj|VS(%JFC(ht zfb;vfzL&AS=9}lX@>Yn+qsC(&TraW6{*0ah}n;y{-C_2Vec5s>Ro;IX@Jvi+rlD^ zuV*;Lp!JChwrMHQrddohIdGA+ssZ>Es1Kq})l^owT+C-=i~q#SA(=5w;3O6v*Ow1_ zR%Bmy@^%Z`UBjL?W+E*ZsywTgIt>~vMfHp;#Ykh5_(&}m9JcnZD;}F46#4mWjZ z8gFJ*jYZkmCT3v>e@~2#h=Gq^+=TJqIk5rViZHwS%OOv!l_gIrY0w)bbwZYDLuKjT zFyJ3dyT9Xh@0NWf#@l{b=YgI`$nWwTLGf5_-$QDrs!JngEp;`5HmyI;ng2 zEKMjgV1j5v+uzS>AhIia!+GD&4*2il27BamW6L1~O=cntVI7Uuq}k(*jz?33E@%?t zQ`2n#Q4j-GAhT;^kSxQ_rs6oKGL4Pi_&w@mSMnc!i{U9CqsY8oZxl-e#0FbhV=N@f zjx?my>a{b?$;K72RnQesD%(z))!NmG?09!&rDtyf^sxLa@N%A`g)|?Me(oj}ZAdVe z`TOT#4`4>BP%}5-l_89aB;@vXKKUmm}_&yj}x4(b{@*Y%!hT*%Zo2#?8o_@w$t8j zTuI*{aZ+GpmL+5&VKZZ3o_ib|cd8*FUt#8@doZQ6IEE$suQgHrZJcmXw=ld%kjGFp2^h`1eq<4sP}@<9Y*JDOB)+ZDyZY4Y z;R6h135Mn`FjI$sZog~vUzuZVEl_TE8|`)z$#Y&Aku#W?PNx0DQCkD+s}^vth{`tn zR$EOKEY^M-m)aHT6v2SC%M zPrO8JB{Odm#=t3qY=-iuygZ8*=bEs)ksc;EZo=z>xgP!$HgBJK^{(QPrzV9T)B2)8 zi~r8kub%&cZ#lRmssMFzWo^#S@xLgp@b-#mB4ox1UQg=3KWHp#hy`>mzvx3F2El@2 z*flo@F>TT3>)%D$!y;|gzwDP$RmX_9E?su4D*!EgH3O=*^m$iPx3#at2rLjDGT6w! zBV%b*xQ73V2E+;Zs+KqXuE8gey{2~O5D7 zTw3wa3r)ve6h}07os@yqsEBZ-0TvD5&Cib;ozx z^gX_?OW+g2{Sc?U_JavS-~4_OA;Kur^*tDvn71hy^rck}4H%CwPYn;j^r!KRlpU7N zVH}NBM-$GXZ|6XgEzdimIx`G)L;Bt5J+e#Q#BX z96EUV8BAy(WtY<8qc&qMh1(L zn{(X0dRpf^T7RGTS<*Ik>#R>t%;JGu{OV~MxV8ma5$%8D?U?yhSeUs;^8 z=<;QH?_1ix*c#zpg!jR$2akv#wu(N@^l{Vrsl`H9l;%9&=CB0p5I%qd+6MlPphQe{ zvbQROgsxjnTb?{?1z)jMQ6FOb-T~VU%JQ-&=nPp&?QeX*?+XpXzeXm z$r5JTp)4;ryo2V(XJgCx11+&+)v+|0ETyXp4dzn*xAGGO2d~3JX?b3FntZP;ZdI1H z8uw&>mCV_*!X$V#m-)IZz{>P_g_AMg?Ji%V=&@aP+Jv8&L;U?^no_*yPhNGbxeEWX zw@5H}U*(d}_ILp<|8F@upfe_9D>I@thSLUorEx4|AEQX}l~MF#l} zvfaNjL0G_ejMX1SMG{B+{AC~UMGo0%d@RK~r%{9p|1tDhe;Jpy-16sTeQ2M{$C zN8v8UzZy@YXOHpgd8?4=pW2;2EbNb)I|g+B;~&b2cMLti`OF1?I*v|#`{aqr<*t$i z@wV>u{M>9-Wl|sY_(waRw{@5so{^*t#?~La;rM5TbJOT&4YvY{Yh0`8a-O{M6Qj74d}(?JDH$f zYI(VMwM08{V%zdxes7r)TVzupQoTBWY`tvQj><<#;TdtGgVt$nO|>}9)s)$UC35@dXAN8@tJrd z?Z`O~8U2Qi6368y`cVqv=KP4j6x$}Eza=#IgjA#teJ;e_jspeRQ`JbWjkS(a0B>1f z+yvR_A^x}@U64S7Pu{%VQ2~^iUQ3}>vW&a0R_`iT;o|CpSBkO9XWYcsU`);G4w{Q( zxnPYK2LL_Sw7)dt<#1KW)KUyGFP?V6+Yitq?zc&-l{FUHU*m?awX@R`NeAEj#;u;~ zw7Pu^dZ7(7Y}1qVHIY}IZab*N)i)V*xk)Uf=~`^Qsq?Xr8?z84O zjLDQxfvKnd-fUtjjsaz1`p`o{8rsL)xu;f#6gcjkB&nsznhiMv?wPzZ8^C`MNl$&z zCZg$K_7$Tn2~H@-qaSjqZV#V9WK1WHcOfu`CPV~DMatKUmfEl^hvzaX-;rc{=nw01#zucJjD>56O}&EgGD5nd1<^UI4;?-!)VGPfaO=g-xU!m}F#xFF0y zQ6!sj9$Lb9gIL?7gXc1qisk_&T$9Q(LLv7bBjonUfr|)bWBEo_ng%csTnIdH;GbyG zD7?^ME1CkZpH)+iv(YdVU~iMtlD~wU?oNXWhEyM*+DB~rw!hEug0rIbN%+~pK~-}PPaCX%lc05i)nxF-f3Z&gpAD|;gyRFs z&fdS;6!>d$^_~>5lFN7$Z?W9jkrG=i%>}J%18xinBH*y8pj0z6D80lZV4XaP3+o6Y z(UM)$d%Z0%+x_j;MfyJ+_klo;#`8e$|A;;A#U_*Xae! za%gG8dz`o$I+()j*Mx&h%VfyWdC5(X_@8tv#yxq-917#H!BOew9-coHnj_QtUzGY_ zgubDn@w%&iu)<7|z%&DBve`(%<8!$KQphL#<`EZ_iO3)cHI~gPpeu!%JV7H?lljD4 z3PRfYYGfG{s>B|-?3~|C2iXMq{uK(|Q8t|TxUv|nW{?VW%kJD~)+`E2ik_<{?Iti; zhzGOKXfgXeQaLiMS1H}Vm?f}fRBURZktHIBU5f@5h$)R8#pH>wrsCxEQ?UL*&uJhM%U$1bO+G0AC6# zb}|P`+rP&&;MM8-037iFM1GR2@UEt_vKkOapNDlFE& z3|nmdS#e5KTYT&wp_3lFFPIQ%v7^Vm_3Gn^{EQNs(sy9}Z!!c0>sBe>0x4q66nv%R zlH{+&XsGEn6ZG}3;*WmEeE8bs*1xFbi11MbFMth=*M;Yi)+MT9Qn0f z8~n}j0g}7~G?FtS>#|1u0`*M~i8>#FXnk!@I)VzE6*up;cV@%Fb}P&qB%W{ZF^iJrI43K{nv@8n z^WN+QFOuXho%$G9s$F=~?|&zc0nlf)Eyc8(dHp%7b5Ylg!KT?n#xnKMm%|kg`W%x) zGj(9&Rk%aTN39%mIg$i_FH|&$9M2~C%gHh|ifoNL@GwKxLD;R~R8<{rO2NUCmBPU^9^TrCU{F@56FfGRqsew}Yw zO>u)nn!wcB?XX4aCu3GZ3)iU$@%Oz`fxbQIR04vMjg4W6U?|c`oZP%ITh~0apb1I> zOi+AMI6B)dQm*kVG_*plielG0SCOzUdYXQIr3_S@&Bl#tilYg{38##O;B z0P$(p&2&ZeXVKAi!t;mkJDz*eu}b}}nc9p3(g;pGpRLukt$JGg>tIZ23j8dKq$vH` zCewa@QB%t!o}PMFxrq9chW$UGU%y-y0c(~UdwkB#8tPN$pWWTIZp|t#^3souy@x$& z(9v?`xkoMk!q%;S4pwJk=B}?lTO}U%6UXBk^jH4NLMt2S5TSYyC~_zM8X;4rj>YrRL&bTzXDU6jUtoX?w!qL#|yfzvG< z^WX$I+O#W1^*l?0b{;vBPgf>rU#vx}Nt=CWMdj@h-hBL7ueJ}Nc#}Obx$Z|Ebp@$d zCAml~@`H1-=$QjIm)Js{5n;TQNHRm0vZC`J$=cI#X@fejj5PYU<~@*4mipWW-a>k@VTWMV$@3d#o6PZKq<+obv){@o}Mq%CT)h>Tu_ zR?mw1UKoh*)7pSqBluhc$as$$)_Pj_X1;j9=)Uv7?zDVXCi?Jg1V6`l)G5 zb37QY!40VRI*altoPI`u{}V4svg}cdL!v)_$`F0T!hx4suGcr}y?|M>%~aC#^i~e=(OjAqf<9#Zy>#cz6D8brn0(k&H!Oz%OtD LhZsP_An^YI=}F(l diff --git a/windows/configuration/provisioning-packages/provision-pcs-for-initial-deployment.md b/windows/configuration/provisioning-packages/provision-pcs-for-initial-deployment.md index 97dec0c215..80c1a38048 100644 --- a/windows/configuration/provisioning-packages/provision-pcs-for-initial-deployment.md +++ b/windows/configuration/provisioning-packages/provision-pcs-for-initial-deployment.md @@ -1,63 +1,47 @@ --- -title: Provision PCs with common settings -description: Create a provisioning package to apply common settings to a PC running Windows 10. +title: Create a provisioning package (desktop wizard) +description: Create a provisioning package to apply common settings to a PC running Windows. ms.topic: how-to -ms.date: 12/31/2017 +ms.date: 07/09/2024 --- -# Provision PCs with common settings for initial deployment (desktop wizard) +# Create a provisioning package (desktop wizard) -This topic explains how to create and apply a provisioning package that contains common enterprise settings to a device running all desktop editions of Windows client except Home. +This article explains how to create and apply a provisioning package that contains common enterprise settings to a device running all desktop editions of Windows client except Home. You can apply a provisioning package on a USB drive to off-the-shelf devices during setup, making it fast and easy to configure new devices. -You can apply a provisioning package on a USB drive to off-the-shelf devices during setup, making it fast and easy to configure new devices. +The following wizard options provide a simple interface for configuring common settings for desktop and kiosk devices: -## Advantages +- [Instructions for the desktop wizard](#start-a-new-project) +- [Instructions for the kiosk wizard](../assigned-access/overview.md) +- [Instructions for the HoloLens wizard](/hololens/hololens-provisioning#provisioning-package-hololens-wizard) +- [Instructions for the Surface Hub wizard](/surface-hub/provisioning-packages-for-surface-hub) -- You can configure new devices without reimaging -- Works on desktop devices -- No network connectivity required -- Simple to apply - -[Learn more about the benefits and uses of provisioning packages.](provisioning-packages.md) - -## What does the desktop wizard do? - -The desktop wizard helps you configure the following settings in a provisioning package: +In this example, we use the **Provision desktop devices** option which helps you configure the following settings in a provisioning package: - Set device name - Upgrade product edition - Configure the device for shared use -- Remove pre-installed software +- Remove preinstalled software - Configure Wi-Fi network - Enroll device in Active Directory or Microsoft Entra ID - Create local administrator account - Add applications and certificates ->[!WARNING] ->You must run Windows Configuration Designer on Windows client to configure Microsoft Entra enrollment using any of the wizards. +> [IMPORTANT] +> You must run Windows Configuration Designer on Windows client to configure Microsoft Entra enrollment using any of the wizards. -Provisioning packages can include management instructions and policies, installation of specific apps, customization of network connections and policies, and more. +## Start a new project -> [!TIP] -> Use the desktop wizard to create a package with the common settings, then switch to the advanced editor to add other settings, apps, policies, etc. -> -> :::image type="content" source="images/icd-simple-edit.png" alt-text="In the desktop wizard, open the advanced editor."::: +1. Open Windows Configuration Designer: From either the Start menu or Start menu search, type **Windows Configuration Designer**, and then select the **Windows Configuration Designer** shortcut. -## Create the provisioning package - -Use the Windows Configuration Designer tool to create a provisioning package. [Learn how to install Windows Configuration Designer.](provisioning-install-icd.md) - -1. Open Windows Configuration Designer (by default, %windir%\Program Files (x86)\Windows Kits\10\Assessment and Deployment Kit\Imaging and Configuration Designer\x86\ICD.exe). - -1. Click **Provision desktop devices**. +1. Select **Provision desktop devices**. :::image type="content" source="images/icd-create-options-1703.png" alt-text="In Windows Configuration Designer, see the ICD start options."::: -1. Name your project and click **Finish**. The pages for desktop provisioning will walk you through the following steps. +1. Name your project and select **Finish**. The pages for desktop provisioning walk you through the following steps. :::image type="content" source="images/icd-desktop-1703.png" alt-text="In Windows Configuration Designer, select Finish, and see the ICD desktop provisioning."::: - > [!IMPORTANT] > When you build a provisioning package, you may include sensitive information in the project files and in the provisioning package (.ppkg) file. Although you have the option to encrypt the .ppkg file, project files are not encrypted. You should store the project files in a secure location and delete the project files when they are no longer needed. @@ -74,6 +58,9 @@ Use the Windows Configuration Designer tool to create a provisioning package. [L - **Configure devices for shared use**: Select **Yes** or **No** to optimize the Windows client for shared use scenarios. - **Remove pre-installed software**: Optional. Select **Yes** if you want to remove preinstalled software. + > [!NOTE] + > To target devices running versions earlier than Windows 10, version 2004, ComputerName customization must be defined from the setting path: `Accounts/ComputerAccount/ComputerName` from the advanced editor. The default path from the simple editor uses a new CSP that isn't available on older systems. + 1. Set up the network: :::image type="content" source="images/set-up-network-details-desktop.png" alt-text="In Windows Configuration Designer, turn on wireless connectivity, enter the network SSID, and network type."::: @@ -81,7 +68,7 @@ Use the Windows Configuration Designer tool to create a provisioning package. [L If you want to enable network setup, select **Set up network**, and configure the following settings: - **Set up network**: To enable wireless connectivity, select **On**. - - **Network SSID**: Enter the Service Set IDentifier (SSID) of the network. + - **Network SSID**: Enter the Service Set Identifier (SSID) of the network. - **Network type**: Select **Open** or **WPA2-Personal**. If you select **WPA2-Personal**, enter the password for the wireless network. 1. Enable account management: @@ -91,10 +78,11 @@ Use the Windows Configuration Designer tool to create a provisioning package. [L If you want to enable account management, select **Account Management**, and configure the following settings: - **Manage organization/school accounts**: Choose how devices are enrolled. Your options: + - **Active Directory**: Enter the credentials for a least-privileged user account to join the device to the domain. - **Microsoft Entra ID**: Before you use a Windows Configuration Designer wizard to configure bulk Microsoft Entra enrollment, [set up Microsoft Entra join in your organization](/azure/active-directory/active-directory-azureadjoin-setup). In your Microsoft Entra tenant, the **maximum number of devices per user** setting determines how many times the bulk token in the wizard can be used. - If you select this option, enter a friendly name for the bulk token you get using the wizard. Set an expiration date for the token. The maximum is 180 days from the date you get the token. Select **Get bulk token**. In **Let's get you signed in**, enter an account that has permissions to join a device to Microsoft Entra ID, and then the password. Select **Accept** to give Windows Configuration Designer the necessary permissions. + If you select this option, enter a friendly name for the bulk token retrieved using the wizard. Set an expiration date for the token. The maximum is 180 days from the date you get the token. Select **Get bulk token**. In **Let's get you signed in**, enter an account that has permissions to join a device to Microsoft Entra ID, and then the password. Select **Accept** to give Windows Configuration Designer the necessary permissions. You must run Windows Configuration Designer on Windows client to configure Microsoft Entra enrollment using any of the wizards. @@ -123,6 +111,11 @@ Use the Windows Configuration Designer tool to create a provisioning package. [L - **Protect your package**: Select **Yes** or **No** to password protect your provisioning package. When you apply the provisioning package to a device, you must enter this password. -After you're done, click **Create**. It only takes a few seconds. When the package is built, the location where the package is stored is displayed as a hyperlink at the bottom of the page. +After you're done, select **Create**. It only takes a few seconds. When the package is built, the location where the package is stored is displayed as a hyperlink at the bottom of the page. - **Next step**: [How to apply a provisioning package](provisioning-apply-package.md) +## Next steps + +> [!div class="nextstepaction"] +> Learn more about applying a provisioning package: +> +> [Apply a provisioning package](provisioning-apply-package.md) diff --git a/windows/configuration/provisioning-packages/provision-pcs-with-apps.md b/windows/configuration/provisioning-packages/provision-pcs-with-apps.md index fd7134875e..2052ee0f96 100644 --- a/windows/configuration/provisioning-packages/provision-pcs-with-apps.md +++ b/windows/configuration/provisioning-packages/provision-pcs-with-apps.md @@ -2,21 +2,21 @@ title: Provision PCs with apps description: Learn how to install multiple Universal Windows Platform (UWP) apps and Windows desktop applications (Win32) in a provisioning package. ms.topic: how-to -ms.date: 12/31/2017 +ms.date: 07/09/2024 --- # Provision PCs with apps You can install multiple Universal Windows Platform (UWP) apps and Windows desktop applications (Win32) in a provisioning package. This article explains the various settings in [Windows Configuration Designer](provisioning-install-icd.md) for app install. -When you add an app in a Windows Configuration Designer wizard, the appropriate settings are displayed based on the app that you select. For instructions on adding an app using the advanced editor in Windows Configuration Designer, see [Add an app using advanced editor](#adv). +When you add an app in a Windows Configuration Designer wizard, the appropriate settings are displayed based on the app that you select. For instructions on adding an app using the advanced editor in Windows Configuration Designer, see [Add an app using advanced editor](#add-a-windows-desktop-application-using-advanced-editor). ->[!IMPORTANT] ->If you plan to use Intune to manage your devices, we recommend using Intune to install Microsoft 365 Apps for enterprise 2016 apps (Access, Excel, OneDrive for Business, OneNote, Outlook, PowerPoint, Publisher, Skype for Business, Word, Project Desktop Client, and Visio Pro for Microsoft 365 Apps for enterprise). Apps that are installed using a provisioning package cannot be managed or modified using Intune. [Learn how to assign Microsoft 365 Apps for enterprise 2016 apps using Microsoft Intune.](/intune/apps-add-office365) +> [!IMPORTANT] +> If you plan to use Intune to manage your devices, we recommend using Intune to install Microsoft 365 Apps for enterprise. Apps that are installed using a provisioning package cannot be managed or modified using Intune. [Learn how to add Microsoft 365 Apps to Windows devices with Microsoft Intune.](/intune/apps-add-office365) ## Settings for UWP apps -- **License Path**: Specify the license file if it is an app from the Microsoft Store. This is optional if you have a certificate for the app. +- **License Path**: Specify the license file if it's an app from the Microsoft Store. This is optional if you have a certificate for the app. - **Package family name**: Specify the package family name if you don't specify a license. This field will be autopopulated after you specify a license. - **Required appx dependencies**: Specify the appx dependency packages that are required for the installation of the app @@ -24,32 +24,23 @@ When you add an app in a Windows Configuration Designer wizard, the appropriate ### MSI installer +- **Command line arguments**: Optionally, append more command arguments. The silent flag is appended for you. Example: PROPERTY=VALUE +- **Continue installations after failure**: Optionally, specify if you want to continue installing more apps if this app fails to install +- **Restart required**: Optionally, specify if you want to reboot after a successful install of this app +- **Required win32 app dependencies**: Optionally, specify more files that are required for the installation of the app. For installers that have multiple file dependencies or have directory structures, [create a cab file of the assets](provisioning-script-to-install-app.md#cab-the-application-assets). The installation script should [include expansion of the .cab file](provisioning-script-to-install-app.md#cab-extract). + > [!NOTE] > You can find more information about command-line options for Msiexec.exe [here](/windows/win32/msi/command-line-options). -- **Command line arguments**: Optionally, append more command arguments. The silent flag is appended for you. Example: PROPERTY=VALUE - -- **Continue installations after failure**: Optionally, specify if you want to continue installing more apps if this app fails to install - -- **Restart required**: Optionally, specify if you want to reboot after a successful install of this app - -- **Required win32 app dependencies**: Optionally, specify more files that are required for the installation of the app. For installers that have multiple file dependencies or have directory structures, [create a cab file of the assets](provisioning-script-to-install-app.md#cab-the-application-assets). The installation script should [include expansion of the .cab file](provisioning-script-to-install-app.md#cab-extract). - ### Exe or other installer - **Command line arguments**: Append the command line arguments with a silent flag (required). Optionally, append more flags - -- **Return Codes**: Specify the return codes for success and success with restart (0 and 3010 by default respectively) Any return code that is not listed will be interpreted as failure. The text boxes are space delimited. - +- **Return Codes**: Specify the return codes for success and success with restart (0 and 3010 by default respectively) Any return code that isn't listed is interpreted as failure. The text boxes are space delimited. - **Continue installations after failure**: Optionally, specify if you want to continue installing more apps if this app fails to install - - **Restart required**: Optionally, specify if you want to reboot after a successful install of this app - - **Required win32 app dependencies**: Optionally, specify more files that are required for the installation of the app. For installers that have multiple file dependencies or have directory structures, [create a cab file of the assets](provisioning-script-to-install-app.md#cab-the-application-assets). The installation script should [include expansion of the .cab file](provisioning-script-to-install-app.md#cab-extract). - - -## Add a Windows desktop application using advanced editor in Windows Configuration Designer +## Add a Windows desktop application using advanced editor 1. In the **Available customizations** pane, go to **Runtime settings** > **ProvisioningCommands** > **PrimaryContext** > **Command**. @@ -61,50 +52,32 @@ When you add an app in a Windows Configuration Designer wizard, the appropriate ![enter settings for first app.](images/wcd-app-commands.png) -## Add a universal app to your package +## Add a universal app to your package using advanced editor -Universal apps that you can distribute in the provisioning package can be line-of-business (LOB) apps developed by your organization, Microsoft Store for Business apps that you acquire with [offline licensing](/microsoft-store/acquire-apps-windows-store-for-business), or third-party apps. This procedure will assume you are distributing apps from the Microsoft Store for Business. For other apps, obtain the necessary information (such as the package family name) from the app developer. +Universal apps that you can distribute in the provisioning package can be line-of-business (LOB) apps developed by your organization, Microsoft Store for Business apps that you acquire with [offline licensing](/microsoft-store/acquire-apps-windows-store-for-business), or non-Microsoft apps. This procedure assumes you're distributing apps from the Microsoft Store for Business. For other apps, obtain the necessary information (such as the package family name) from the app developer. 1. In the **Available customizations** pane, go to **Runtime settings** > **UniversalAppInstall**. - 1. For **DeviceContextApp**, specify the **PackageFamilyName** for the app. In Microsoft Store for Business, the package family name is listed in the **Package details** section of the download page. - 1. For **ApplicationFile**, select **Browse** to find and select the target app (either an \*.appx or \*.appxbundle). - 1. For **DependencyAppxFiles**, select **Browse** to find and add any dependencies for the app. In Microsoft Store for Business, any dependencies for the app are listed in the **Required frameworks** section of the download page. - 1. For **DeviceContextAppLicense**, enter the **LicenseProductID**. - - In Microsoft Store for Business, generate the unencoded license for the app on the app's download page. - - - - Open the license file and search for **LicenseID=** to get the GUID, enter the GUID in the **LicenseProductID** field and select **Add**. - - 1. In the **Available customizations** pane, select the **LicenseProductId** that you just added. - 1. For **LicenseInstall**, select **Browse**, navigate to the license file that you renamed *\*.**ms-windows-store-license**, and select the license file. [Learn more about distributing offline apps from the Microsoft Store for Business.](/microsoft-store/distribute-offline-apps) -> [!NOTE] +> [!IMPORTANT] > Removing a provisioning package will not remove any apps installed by device context in that provisioning package. - - ## Add a certificate to your package 1. In the **Available customizations** pane, go to **Runtime settings** > **Certificates** > **ClientCertificates**. - 1. Enter a **CertificateName** and then select **Add**. - 1. Enter the **CertificatePassword**. - 1. For **CertificatePath**, browse and select the certificate to be used. - 1. Set **ExportCertificate** to **False**. - 1. For **KeyLocation**, select **Software only**. ## Add other settings to your package @@ -113,15 +86,15 @@ For details about the settings you can customize in provisioning packages, see [ ## Build your package -1. When you are done configuring the provisioning package, on the **File** menu, select **Save**. +1. After you configure the provisioning package, on the **File** menu, select **Save**. 1. Read the warning that project files may contain sensitive information, and select **OK**. - When you build a provisioning package, you may include sensitive information in the project files and in the provisioning package (.ppkg) file. Although you have the option to encrypt the .ppkg file, project files are not encrypted. You should store the project files in a secure location, and delete the project files when they're no longer needed. + When you build a provisioning package, you may include sensitive information in the project files and in the provisioning package (.ppkg) file. Although you have the option to encrypt the .ppkg file, project files aren't encrypted. Store the project files in a secure location, and delete the project files when they're no longer needed. 1. On the **Export** menu, select **Provisioning package**. -1. Change **Owner** to **IT Admin**, which will set the precedence of this provisioning package higher than provisioning packages applied to this device from other sources, and then select **Next.** +1. Change **Owner** to **IT Admin**, which sets the precedence of this provisioning package higher than provisioning packages applied to this device from other sources, and then select **Next.** 1. Set a value for **Package Version**. @@ -130,8 +103,7 @@ For details about the settings you can customize in provisioning packages, see [ 1. Optional. In the **Provisioning package security** window, you can choose to encrypt the package and enable package signing. - - **Enable package encryption** - If you select this option, an auto-generated password will be shown on the screen. - + - **Enable package encryption** - If you select this option, an autogenerated password is shown on the screen. - **Enable package signing** - If you select this option, you must select a valid certificate to use for signing the package. You can specify the certificate by selecting **Select...** and choosing the certificate you want to use to sign the package. > [!TIP] @@ -145,36 +117,21 @@ For details about the settings you can customize in provisioning packages, see [ 1. Select **Build** to start building the package. The project information is displayed in the build page and the progress bar indicates the build status.

    If you need to cancel the build, select **Cancel**. This cancels the current build process, closes the wizard, and takes you back to the **Customizations Page**. -1. If your build fails, an error message will show up that includes a link to the project folder. You can scan the logs to determine what caused the error. Once you fix the issue, try building the package again.

    - If your build is successful, the name of the provisioning package, output directory, and project directory will be shown. +1. If your build fails, an error message shows up that includes a link to the project folder. You can scan the logs to determine what caused the error. Once you fix the issue, try building the package again. If your build is successful, the name of the provisioning package, output directory, and project directory is shown. - If you choose, you can build the provisioning package again and pick a different path for the output package. To do this, select **Back** to change the output package name and path, and then select **Next** to start another build. - - - - If you are done, select **Finish** to close the wizard and go back to the **Customizations Page**. + - If you're done, select **Finish** to close the wizard and go back to the **Customizations Page**. 1. Select the **output location** link to go to the location of the package. You can provide that .ppkg to others through any of the following methods: - Shared network folder - - SharePoint site - - Removable media (USB/SD) - - Email -**Next step**: [How to apply a provisioning package](provisioning-apply-package.md) +## Next steps -## Related articles - -- [Provisioning packages for Windows client](provisioning-packages.md) -- [How provisioning works in Windows client](provisioning-how-it-works.md) -- [Install Windows Configuration Designer](provisioning-install-icd.md) -- [Create a provisioning package](provisioning-create-package.md) -- [Apply a provisioning package](provisioning-apply-package.md) -- [Settings changed when you uninstall a provisioning package](provisioning-uninstall-package.md) -- [Provision PCs with common settings for initial deployment (simple provisioning)](provision-pcs-for-initial-deployment.md) -- [Use a script to install a desktop app in provisioning packages](provisioning-script-to-install-app.md) -- [PowerShell cmdlets for provisioning Windows client (reference)](provisioning-powershell.md) -- [Windows Configuration Designer command-line interface (reference)](provisioning-command-line.md) -- [Create a provisioning package with multivariant settings](provisioning-multivariant.md) +> [!div class="nextstepaction"] +> Learn more about applying a provisioning package: +> +> [Apply a provisioning package](provisioning-apply-package.md) diff --git a/windows/configuration/provisioning-packages/provisioning-apply-package.md b/windows/configuration/provisioning-packages/provisioning-apply-package.md index 2f8bb266e1..a5e44cee63 100644 --- a/windows/configuration/provisioning-packages/provisioning-apply-package.md +++ b/windows/configuration/provisioning-packages/provisioning-apply-package.md @@ -2,7 +2,7 @@ title: Apply a provisioning package description: Provisioning packages can be applied to a device during initial setup (OOBE) and after (runtime). ms.topic: how-to -ms.date: 12/31/2017 +ms.date: 07/09/2024 --- # Apply a provisioning package @@ -13,22 +13,20 @@ Provisioning packages can be applied to a device during initial setup (out-of-bo > > - Applying a provisioning package to a desktop device requires administrator privileges on the device. > - You can interrupt a long-running provisioning process by pressing ESC. - -> [!TIP] -> In addition to the following methods, you can use the PowerShell cmdlet [Install-ProvisioningPackage](/powershell/module/provisioning/Install-ProvisioningPackage) with `-LogsDirectoryPath` to get logs for the operation. +> - In addition to the following methods, you can use the PowerShell cmdlet [Install-ProvisioningPackage](/powershell/module/provisioning/Install-ProvisioningPackage) with `-LogsDirectoryPath` to get logs for the operation. ## During initial setup To apply a provisioning package from a USB drive during initial setup: -1. Start with a device on the initial setup screen. If the device has gone past this screen, reset the device to start over. To reset, go to **Settings** > **System** > [**Recovery**](ms-settings:recovery) > **Reset this PC**. +1. Start with a device on the initial setup screen. If the device goes past this screen, reset the device to start over. To reset, go to **Settings** > **System** > [**Recovery**](ms-settings:recovery) > **Reset this PC**. :::image type="content" source="images/oobe.png" alt-text="The first screen when setting up a new PC."::: 1. Insert the USB drive. If nothing happens when you insert the USB drive, press the Windows key five times. - If there's only one provisioning package on the USB drive, the provisioning package is applied. See step 5. - - If there's more than one provisioning package on the USB drive, Windows setup recognizes the drive and ask how you want to provision the device. Select **Install provisioning package** and select **Next**. + - If there's more than one provisioning package on the USB drive, Windows setup recognizes the drive and asks how you want to provision the device. Select **Install provisioning package** and select **Next**. :::image type="content" source="images/provisioning-oobe-choice.png" alt-text="What would you like to do?"::: @@ -36,11 +34,11 @@ To apply a provisioning package from a USB drive during initial setup: :::image type="content" source="images/provisioning-oobe-choose-package.png" alt-text="Choose a package."::: -1. The selected provisioning package will install and apply to the device. +1. The selected provisioning package is applied to the device. :::image type="content" source="images/provisioning-oobe-installing.png" alt-text="Setting up your PC."::: -1. Wait for the device to load and begin applying the provisioning package. Once you see "You can remove your removable media now!" you can remove your USB drive. Windows will continue provisioning the device. +1. Wait for the device to load and begin applying the provisioning package. After you see "You can remove your removable media now!" you can remove your USB drive. Windows continues to provision the device. ## After initial setup @@ -60,7 +58,7 @@ Provisioning packages can be applied after initial setup through Windows setting :::image type="content" source="images/provisioning-runtime-add-package.png" alt-text="Select and add a package."::: -1. Provisioning packages require administrator privileges as they can modify system policies and run scripts at the system level. Ensure you trust the package you're installing before accepting the UAC prompt. Select **Yes**. +1. Provisioning packages require administrator privileges as they can modify system policies and run scripts at the system level. Ensure you trust the package you're installing before accepting the User Account Control (UAC) prompt. Select **Yes**. :::image type="content" source="images/provisioning-runtime-UAC.png" alt-text="Do you want to allow changes to your device?"::: @@ -83,16 +81,3 @@ To apply a provisioning package directly, such as from a USB drive, folder, netw 1. The provisioning runtime asks if the package is from a source you trust. Verify that you're applying the correct package and that it's trusted. Select **Yes, add it**. :::image type="content" source="images/provisioning-runtime-trust.png" alt-text="Do you trust this package?"::: - -## Related articles - -- [Provisioning packages for Windows client](provisioning-packages.md) -- [How provisioning works in Windows client](provisioning-how-it-works.md) -- [Install Windows Configuration Designer](provisioning-install-icd.md) -- [Create a provisioning package](provisioning-create-package.md) -- [Settings changed when you uninstall a provisioning package](provisioning-uninstall-package.md) -- [Provision PCs with common settings for initial deployment (simple provisioning)](provision-pcs-for-initial-deployment.md) -- [Use a script to install a desktop app in provisioning packages](provisioning-script-to-install-app.md) -- [PowerShell cmdlets for provisioning Windows client (reference)](provisioning-powershell.md) -- [Windows Configuration Designer command-line interface (reference)](provisioning-command-line.md) -- [Create a provisioning package with multivariant settings](provisioning-multivariant.md) diff --git a/windows/configuration/provisioning-packages/provisioning-command-line.md b/windows/configuration/provisioning-packages/provisioning-command-line.md index 12a10ae502..5ff3a5cf1d 100644 --- a/windows/configuration/provisioning-packages/provisioning-command-line.md +++ b/windows/configuration/provisioning-packages/provisioning-command-line.md @@ -1,20 +1,17 @@ --- title: Windows Configuration Designer command line interface -description: Learn more about the ICD syntax, switches, and arguments that you can use in the Windows Configuration Designer command line interface for Windows10/11 client devices. +description: Learn more about the ICD syntax, switches, and arguments that you can use in the Windows Configuration Designer command line interface for Windows devices. ms.topic: how-to -ms.date: 12/31/2017 +ms.date: 07/09/2024 --- -# Windows Configuration Designer command line interface (reference) +# Windows Configuration Designer command line interface You can use the Windows Configuration Designer command line interface (CLI) to automate the building of provisioning packages. - IT pros can use the Windows Configuration Designer CLI to require less retooling of existing processes. You must run the Windows Configuration Designer CLI from a command window with administrator privileges. - - You must use the Windows Configuration Designer CLI and edit the customizations.xml sources to create a provisioning package with multivariant support. You need the customizations.xml file as one of the inputs to the Windows Configuration Designer CLI to build a provisioning package. For more information, see [Create a provisioning package with multivariant settings](provisioning-multivariant.md). - - ## Syntax ``` cmd @@ -29,25 +26,9 @@ icd.exe /Build-ProvisioningPackage /CustomizationXML: /PackagePath: | Switch | Required? | Arguments | | --- | --- | --- | | /CustomizationXML | No | Specifies the path to a Windows provisioning XML file that contains the customization assets and settings. For more information, see Windows provisioning answer file. | -| /PackagePath | Yes | Specifies the path and the package name where the built provisioning package will be saved. | +| /PackagePath | Yes | Specifies the path and the package name where the built provisioning package is saved. | | /StoreFile | No


    See Important note. | For partners using a settings store other than the default store(s) used by Windows Configuration Designer, use this parameter to specify the path to one or more comma-separated Windows settings store file. By default, if you don't specify a settings store file, the settings store that's common to all Windows editions is loaded by Windows Configuration Designer.


    **Important** If you use this parameter, you must not use /MSPackageRoot or /OEMInputXML. | | /Variables | No | Specifies a semicolon separated `` and `` macro pair. The format for the argument must be `=`. | | Encrypted | No | Denotes whether the provisioning package should be built with encryption. Windows Configuration Designer autogenerates the decryption password and includes this information in the output.

    Precede with `+` for encryption, or `-` for no encryption. The default is no encryption. | | Overwrite | No | Denotes whether to overwrite an existing provisioning package.

    Precede with + to overwrite an existing package or - if you don't want to overwrite an existing package. The default is false (don't overwrite). | | /? | No | Lists the switches and their descriptions for the command-line tool or for certain commands. | - - -## Related articles - -- [Provisioning packages for Windows client](provisioning-packages.md) -- [How provisioning works in Windows client](provisioning-how-it-works.md) -- [Install Windows Configuration Designer](provisioning-install-icd.md) -- [Create a provisioning package](provisioning-create-package.md) -- [Apply a provisioning package](provisioning-apply-package.md) -- [Settings changed when you uninstall a provisioning package](provisioning-uninstall-package.md) -- [Provision PCs with common settings for initial deployment (simple provisioning)](provision-pcs-for-initial-deployment.md) -- [Use a script to install a desktop app in provisioning packages](provisioning-script-to-install-app.md) -- [PowerShell cmdlets for provisioning Windows client (reference)](provisioning-powershell.md) -- [Create a provisioning package with multivariant settings](provisioning-multivariant.md) - - diff --git a/windows/configuration/provisioning-packages/provisioning-create-package.md b/windows/configuration/provisioning-packages/provisioning-create-package.md index 0824710f19..b239dfb3d5 100644 --- a/windows/configuration/provisioning-packages/provisioning-create-package.md +++ b/windows/configuration/provisioning-packages/provisioning-create-package.md @@ -1,16 +1,14 @@ --- -title: Create a provisioning package -description: Learn how to create a provisioning package for Windows 10/11, which lets you quickly configure a device without having to install a new image. +title: Create a provisioning package (advanced) +description: Learn how to create a provisioning package for Windows, which lets you quickly configure a device without having to install a new image. ms.topic: how-to -ms.date: 12/31/2017 +ms.date: 07/09/2024 --- -# Create a provisioning package +# Create a provisioning package (advanced) You can use Windows Configuration Designer to create a provisioning package (`.ppkg`) that contains customization settings, and then apply the provisioning package to a device running Windows client. ->[Learn how to install Windows Configuration Designer.](provisioning-install-icd.md) - > [!TIP] > We recommend creating a local admin account when you develop and test your provisioning package. We also recommend using a *least privileged* domain user account to join devices to the Active Directory domain. @@ -18,29 +16,14 @@ You can use Windows Configuration Designer to create a provisioning package (`.p 1. Open Windows Configuration Designer: From either the Start menu or Start menu search, type **Windows Configuration Designer**, and then select the **Windows Configuration Designer** shortcut. -1. Select your desired option on the **Start** page, which offers multiple options for creating a provisioning package, as shown in the following image: +1. Select **Advanced provisioning** on the start page, which offers multiple options for creating a provisioning package, as shown in the following image: ![Configuration Designer wizards.](images/icd-create-options-1703.png) - - The following wizard options provide a simple interface for configuring common settings for desktop and kiosk devices: - - - [Instructions for the desktop wizard](provision-pcs-for-initial-deployment.md) - - [Instructions for the kiosk wizard](../kiosk-single-app.md#wizard) - - [Instructions for HoloLens wizard](/hololens/hololens-provisioning) - - [Instructions for Surface Hub wizard](/surface-hub/provisioning-packages-for-surface-hub) - - Wizards are also available for creating provisioning packages for Microsoft Surface Hub and Microsoft HoloLens devices. For a summary of the settings available in the desktop and kiosk devices, see [What you can configure using Configuration Designer wizards](provisioning-packages.md#configuration-designer-wizards). - - - >[!NOTE] - >To target devices running versions earlier than Windows 10, version 2004, ComputerName customization must be defined from the setting path: `Accounts/ComputerAccount/ComputerName` from the advanced editor. The default path from the simple editor uses a new CSP that isn't available on older systems. - - - The **Advanced provisioning** option opens a new project with all the runtime settings available. (The rest of this procedure uses advanced provisioning.) - - >[!TIP] - > You can start a project in the simple wizard editor and then switch the project to the advanced editor. - > - > ![Switch to advanced editor.](images/icd-switch.png) + > [!TIP] + > You can start a project in the simple wizard editor and then switch the project to the advanced editor. + > + > ![Switch to advanced editor.](images/icd-switch.png) 1. Enter a name for your project, and then select **Next**. @@ -48,7 +31,7 @@ You can use Windows Configuration Designer to create a provisioning package (`.p | Windows edition | Settings available for customization | Provisioning package can apply to | |---|---|---| - | All Windows editions | Common settings | All Windows client devices | + | All Windows editions | Common settings | All Windows client devices | | All Windows desktop editions | Common settings and settings specific to desktop devices | All Windows client desktop editions (Home, Pro, Enterprise, Pro Education, Enterprise Education) | | Windows 10 IoT Core | Common settings and settings specific to Windows 10 IoT Core | All Windows 10 IoT Core devices | | Windows 10 Holographic | Common settings and settings specific to Windows 10 Holographic | [Microsoft HoloLens](/hololens/hololens-provisioning) | @@ -67,7 +50,10 @@ For an advanced provisioning project, Windows Configuration Designer opens the * ![What the ICD interface looks like.](images/icd-runtime.png) -The settings in Windows Configuration Designer are based on Windows client configuration service providers (CSPs). To learn more about CSPs, see [Introduction to configuration service providers (CSPs) for IT pros](./how-it-pros-can-use-configuration-service-providers.md). +The settings in Windows Configuration Designer are based on Windows client configuration service providers (CSPs). To learn more about CSPs, see [Introduction to configuration service providers (CSPs) for IT pros](how-it-pros-can-use-configuration-service-providers.md). + +> [!NOTE] +> To target devices running versions earlier than Windows 10, version 2004, ComputerName customization must be defined from the setting path: `Accounts/ComputerAccount/ComputerName` from the advanced editor. The default path from the simple editor uses a new CSP that isn't available on older systems. The process for configuring settings is similar for all settings. The following table shows an example. @@ -83,11 +69,11 @@ The process for configuring settings is similar for all settings. The following :::image type="content" source="images/icd-step3.png" alt-text="In Windows Configuration Designer, enter a name for the certificate."::: -1. Some settings, such as this example, require additional information. In **Available customizations**, select the value you just created, and more settings are displayed: +1. Some settings, such as this example, require additional information. In **Available customizations**, select the value you created, and more settings are displayed: :::image type="content" source="images/icd-step4.png" alt-text="In Windows Configuration Designer, additional settings for client certificate are available."::: -1. When the setting is configured, it is displayed in the **Selected customizations** pane: +1. When the setting is configured, it's displayed in the **Selected customizations** pane: :::image type="content" source="images/icd-step5.png" alt-text="In Windows Configuration Designer, the selected customizations pane shows your settings."::: @@ -97,27 +83,26 @@ For details on each specific setting, see [Windows Provisioning settings referen ## Build package -1. After you're done configuring your customizations, select **Export**, and then select **Provisioning Package**. +1. After you configure your customizations, select **Export**, and then select **Provisioning Package**. ![Export on top bar.](images/icd-export-menu.png) 1. In the **Describe the provisioning package** window, enter the following information, and then select **Next**: - - **Name** - This field is pre-populated with the project name. You can change this value by entering a different name in the **Name** field. - - **Version (in Major.Minor format** - Optional. You can change the default package version by specifying a new value in the **Version** field. + - **Name** - This field is prepopulated with the project name. You can change this value by entering a different name in the **Name** field. + - **Version (in Major.Minor format** - Optional. You can change the default package version by specifying a new value in the **Version** field. - **Owner** - Select **IT Admin**. For more information, see [Precedence for provisioning packages](provisioning-how-it-works.md#precedence-for-provisioning-packages). - **Rank (between 0-99)** - Optional. You can select a value between 0 and 99, inclusive. The default package rank is 0. 1. In the **Select security details for the provisioning package** window, you can select to encrypt and/or sign a provisioning package with a selected certificate, and then select **Next**. Both selections are optional: - - **Encrypt package** - If you select this option, an autogenerated password will be shown on the screen. - - **Sign package** - If you select this option, you must select a valid certificate to use for signing the package. You can specify the certificate by selecting **Select** and choosing the certificate you want to use to sign the package. + - **Encrypt package** - If you select this option, an autogenerated password is shown on the screen. + - **Sign package** - If you select this option, you must select a valid certificate to use for signing the package. You can specify the certificate by selecting **Select** and choosing the certificate you want to use to sign the package. - >[!NOTE] - >You should only configure provisioning package security when the package is used for device provisioning and when the package has content with sensitive security data, such as certificates or credentials that should be prevented from being compromised. When applying an encrypted and/or signed provisioning package, either during OOBE or through the setting UI, the package can be decrypted, and if signed, be trusted without explicit user consent. An IT administrator can set policy on a user device to restrict the removal of required packages from the device, or the provisioning of potentially harmful packages on the device. - - > - >If a provisioning package is signed by a trusted provisioner, it can be installed on a device without a prompt for user consent. In order to enable trusted provider certificates, you must set the **TrustedProvisioners** setting prior to installing the trusted provisioning package. This is the only way to install a package without user consent. To provide additional security, you can also set **RequireProvisioningPackageSignature**, which prevents users from installing provisioning packages that are not signed by a trusted provisioner. + > [!NOTE] + > You should only configure provisioning package security when the package is used for device provisioning and when the package has content with sensitive security data, such as certificates or credentials that should be prevented from being compromised. When applying an encrypted and/or signed provisioning package, either during OOBE or through the setting UI, the package can be decrypted, and if signed, be trusted without explicit user consent. An IT administrator can set policy on a user device to restrict the removal of required packages from the device, or the provisioning of potentially harmful packages on the device. + > + > If a provisioning package is signed by a trusted provisioner, it can be installed on a device without a prompt for user consent. In order to enable trusted provider certificates, you must set the **TrustedProvisioners** setting prior to installing the trusted provisioning package. This is the only way to install a package without user consent. To provide additional security, you can also set **RequireProvisioningPackageSignature**, which prevents users from installing provisioning packages that are not signed by a trusted provisioner. 1. In the **Select where to save the provisioning package** window, specify the output location where you want the provisioning package to go once it's built, and then select **Next**. By default, Windows Configuration Designer uses the project folder as the output location. @@ -125,29 +110,17 @@ For details on each specific setting, see [Windows Provisioning settings referen If you need to cancel the build, select **Cancel**. This cancels the current build process, closes the wizard, and takes you back to the **Customizations** page. -1. If your build fails, an error message will appear that includes a link to the project folder. You can scan the logs to determine what caused the error. Once you fix the issue, try building the package again. +1. If your build fails, an error message appears that includes a link to the project folder. You can scan the logs to determine what caused the error. Once you fix the issue, try building the package again. - If your build is successful, the name of the provisioning package, output directory, and project directory will be shown. + If your build is successful, the name of the provisioning package, output directory, and project directory is shown. If you choose, you can build the provisioning package again and pick a different path for the output package. To do this, select **Back** to change the output package name and path, and then select **Next** to start another build. -1. When you are done, select **Finish** to close the wizard and go back to the **Customizations** page. +1. When you're done, select **Finish** to close the wizard and go back to the **Customizations** page. -**Next step**: [How to apply a provisioning package](provisioning-apply-package.md) +## Next steps -## Learn more - -- [How to bulk-enroll devices with On-premises Mobile Device Management in Microsoft Configuration Manager](/configmgr/mdm/deploy-use/bulk-enroll-devices-on-premises-mdm) - -## Related articles - -- [Provisioning packages for Windows client](provisioning-packages.md) -- [How provisioning works in Windows client](provisioning-how-it-works.md) -- [Install Windows Configuration Designer](provisioning-install-icd.md) -- [Apply a provisioning package](provisioning-apply-package.md) -- [Settings changed when you uninstall a provisioning package](provisioning-uninstall-package.md) -- [Provision PCs with common settings for initial deployment (simple provisioning)](provision-pcs-for-initial-deployment.md) -- [Use a script to install a desktop app in provisioning packages](provisioning-script-to-install-app.md) -- [PowerShell cmdlets for provisioning Windows client (reference)](provisioning-powershell.md) -- [Windows Configuration Designer command-line interface (reference)](provisioning-command-line.md) -- [Create a provisioning package with multivariant settings](provisioning-multivariant.md) +> [!div class="nextstepaction"] +> Learn more about applying a provisioning package: +> +> [Apply a provisioning package](provisioning-apply-package.md) \ No newline at end of file diff --git a/windows/configuration/provisioning-packages/provisioning-how-it-works.md b/windows/configuration/provisioning-packages/provisioning-how-it-works.md index 24c02a6557..ec61311214 100644 --- a/windows/configuration/provisioning-packages/provisioning-how-it-works.md +++ b/windows/configuration/provisioning-packages/provisioning-how-it-works.md @@ -1,13 +1,13 @@ --- -title: How provisioning works in Windows 10/11 +title: How provisioning works in Windows description: Learn more about how provisioning package work on Windows client devices. A provisioning package (.ppkg) is a container for a collection of configuration settings. ms.topic: conceptual -ms.date: 12/31/2017 +ms.date: 07/09/2024 --- # How provisioning works in Windows -Provisioning packages in Windows client provide IT administrators with a simplified way to apply configuration settings to Windows client devices. Windows Configuration Designer is a tool that makes it easy to create a provisioning package. Windows Configuration Designer can be installed from Microsoft Store. +Provisioning packages in Windows client provide IT administrators with a simplified way to apply configuration settings to Windows client devices. Windows Configuration Designer is a tool that makes it easy to create a provisioning package. Windows Configuration Designer can be installed from the Microsoft Store. ## Provisioning packages @@ -30,15 +30,10 @@ You can use provisioning packages for runtime device provisioning by accessing When multiple provisioning packages are available for device provisioning, the combination of package owner type and package rank level defined in the package manifest is used to resolve setting conflicts. The pre-defined package owner types are listed below in the order of lowest to highest owner type precedence: 1. Microsoft - 1. Silicon Vendor - 1. OEM - 1. System Integrator - 1. Mobile Operator - 1. IT Admin The valid value range of package rank level is 0 to 99. @@ -130,16 +125,3 @@ When applying provisioning packages from a removable media attached to the devic When applying multiple provisioning packages to a device, the provisioning engine resolves settings with conflicting configuration values from different packages by evaluating the package ranking using the combination of package owner type and package rank level defined in the package metadata. A configuration setting applied from a provisioning package with the highest package ranking will be the final value applied to the device. After a stand-alone provisioning package is applied to the device, the package is persisted in the `%ProgramData%\Microsoft\Provisioning` folder on the device. Provisioning packages can be removed by an administrator by using the **Add or remove a provisioning package** available under **Settings** > **Accounts** > **Access work or school**. - -## Related articles - -- [Provisioning packages for Windows client](provisioning-packages.md) -- [Install Windows Configuration Designer](provisioning-install-icd.md) -- [Create a provisioning package](provisioning-create-package.md) -- [Apply a provisioning package](provisioning-apply-package.md) -- [Settings changed when you uninstall a provisioning package](provisioning-uninstall-package.md) -- [Provision PCs with common settings for initial deployment (simple provisioning)](provision-pcs-for-initial-deployment.md) -- [Use a script to install a desktop app in provisioning packages](provisioning-script-to-install-app.md) -- [PowerShell cmdlets for provisioning Windows client (reference)](provisioning-powershell.md) -- [Windows Configuration Designer command-line interface (reference)](provisioning-command-line.md) -- [Create a provisioning package with multivariant settings](provisioning-multivariant.md) diff --git a/windows/configuration/provisioning-packages/provisioning-install-icd.md b/windows/configuration/provisioning-packages/provisioning-install-icd.md index 9b572cde75..8acca19051 100644 --- a/windows/configuration/provisioning-packages/provisioning-install-icd.md +++ b/windows/configuration/provisioning-packages/provisioning-install-icd.md @@ -1,15 +1,17 @@ --- title: Install Windows Configuration Designer -description: Learn how to install and use Windows Configuration Designer so you can easily configure devices running Windows 10/11. +description: Learn how to install and use Windows Configuration Designer so you can easily configure devices running Windows. ms.topic: how-to ms.reviewer: kevinsheehan -ms.date: 12/31/2017 +ms.date: 07/09/2024 --- -# Install Windows Configuration Designer, and learn about any limitations +# Install Windows Configuration Designer Use the Windows Configuration Designer tool to create provisioning packages to easily configure devices running Windows client. Windows Configuration Designer is primarily used by IT departments for business and educational institutions who need to provision bring-your-own-device (BYOD) and business-supplied devices. +On devices running Windows client, you can install [the Windows Configuration Designer app](https://www.microsoft.com/store/apps/9nblggh4tx22) from the Microsoft Store. + ## Supported platforms Windows Configuration Designer can create provisioning packages for Windows client desktop, including Windows IoT Core, Microsoft Surface Hub, and Microsoft HoloLens. You can run Windows Configuration Designer on the following operating systems: @@ -18,32 +20,22 @@ Windows Configuration Designer can create provisioning packages for Windows clie - Windows 11 - Windows 10 - x86 and amd64 -- Windows 8.1 Update - x86 and amd64 -- Windows 8.1 - x86 and amd64 -- Windows 8 - x86 and amd64 -- Windows 7 - x86 and amd64 **Server OS**: +- Windows Server 2022 +- Windows Server 2019 - Windows Server 2016 -- Windows Server 2012 R2 Update -- Windows Server 2012 R2 -- Windows Server 2012 -- Windows Server 2008 R2 ->[!WARNING] ->You must run Windows Configuration Designer on Windows client to configure Microsoft Entra enrollment using any of the wizards. - -## Install Windows Configuration Designer - -On devices running Windows client, you can install [the Windows Configuration Designer app](https://www.microsoft.com/store/apps/9nblggh4tx22) from the Microsoft Store. +> [!WARNING] +> You must run Windows Configuration Designer on Windows client to configure Microsoft Entra enrollment using any of the wizards. ## Current Windows Configuration Designer limitations -- When running Windows Configuration Designer on Windows releases earlier than Windows 10, version 2004 you might need to enable TLS 1.2, especially if using Bulk Enrollment Tokens. You may see the error message in the `icd.log` file: `Error: AADSTS1002016: You are using TLS version 1.0, 1.1 and/or 3DES cipher which are deprecated to improve the security posture of Azure AD` For more information, see [Enable TLS 1.2 on client or server operating systems](/troubleshoot/azure/active-directory/enable-support-tls-environment#enable-tls-12-on-client-or-server-operating-systems-). +- When running Windows Configuration Designer on Windows releases earlier than Windows 10, version 2004 you might need to enable TLS 1.2, especially if using Bulk Enrollment Tokens. You may see the error message in the `icd.log` file: `Error: AADSTS1002016: You are using TLS version 1.0, 1.1 and/or 3DES cipher which are deprecated to improve the security posture of Azure AD` For more information, see [Enable TLS 1.2 on client or server operating systems](/troubleshoot/azure/active-directory/enable-support-tls-environment#enable-tls-12-on-client-or-server-operating-systems-). -- Windows Configuration Designer doesn't work properly when the Group Policy setting **Policies** > **Administrative Templates** > **Windows Components** > **Internet Explorer** > **Security Zones: Use only machine settings** is enabled. When this policy is set, each step will display oversized buttons that fill the **Windows Configuration Designer** window. Additionally, the various options and descriptions that are normally to the right of the buttons won't be displayed because the buttons take up all of the space in the **Windows Configuration Designer** window. To resolve the problem, run Windows Configuration Designer on a device that doesn't have this policy enabled. +- Windows Configuration Designer doesn't work properly when the Group Policy setting **Policies** > **Administrative Templates** > **Windows Components** > **Internet Explorer** > **Security Zones: Use only machine settings** is enabled. When this policy is set, each step displays oversized buttons that fill the **Windows Configuration Designer** window. Additionally, the various options and descriptions that are normally to the right of the buttons aren't displayed because the buttons take up all of the space in the **Windows Configuration Designer** window. To resolve the problem, run Windows Configuration Designer on a device that doesn't have this policy enabled. - You can only run one instance of Windows Configuration Designer on your computer at a time. @@ -68,17 +60,10 @@ On devices running Windows client, you can install [the Windows Configuration De - **Recommended**: Before starting, copy all source files to the PC running Windows Configuration Designer. Don't use external sources, like network shares or removable drives. Using local files reduces the risk of interrupting the build process from a network issue, or from disconnecting the USB device. -**Next step**: [How to create a provisioning package](provisioning-create-package.md) +## Next steps -## Related articles - -- [Provisioning packages for Windows client](provisioning-packages.md) -- [How provisioning works in Windows client](provisioning-how-it-works.md) -- [Create a provisioning package](provisioning-create-package.md) -- [Apply a provisioning package](provisioning-apply-package.md) -- [Settings changed when you uninstall a provisioning package](provisioning-uninstall-package.md) -- [Provision PCs with common settings for initial deployment (simple provisioning)](provision-pcs-for-initial-deployment.md) -- [Use a script to install a desktop app in provisioning packages](provisioning-script-to-install-app.md) -- [PowerShell cmdlets for provisioning Windows client (reference)](provisioning-powershell.md) -- [Windows Configuration Designer command-line interface (reference)](provisioning-command-line.md) -- [Create a provisioning package with multivariant settings](provisioning-multivariant.md) +> [!div class="nextstepaction"] +> Learn more about creating a provisioning package: +> +> [Create a provisioning package (simple)](provision-pcs-for-initial-deployment.md) +> [Create a provisioning package (advanced)](provisioning-create-package.md) diff --git a/windows/configuration/provisioning-packages/provisioning-multivariant.md b/windows/configuration/provisioning-packages/provisioning-multivariant.md index 6ecb125be7..01be2943f7 100644 --- a/windows/configuration/provisioning-packages/provisioning-multivariant.md +++ b/windows/configuration/provisioning-packages/provisioning-multivariant.md @@ -2,18 +2,18 @@ title: Create a provisioning package with multivariant settings description: Create a provisioning package with multivariant settings to customize the provisioned settings for defined conditions. ms.topic: how-to -ms.date: 12/31/2017 +ms.date: 07/09/2024 --- # Create a provisioning package with multivariant settings -In your organization, you might have different configuration requirements for devices that you manage. You can create separate provisioning packages for each group of devices in your organization that have different requirements. Or, you can create a multivariant provisioning package, a single provisioning package that can work for multiple conditions. For example, in a single provisioning package, you can define one set of customization settings that will apply to devices set up for French and a different set of customization settings for devices set up for Japanese. +In your organization, you might have different configuration requirements for devices that you manage. You can create separate provisioning packages for each group of devices in your organization that have different requirements. Or, you can create a multivariant provisioning package, a single provisioning package that can work for multiple conditions. For example, in a single provisioning package, you can define one set of customization settings that apply to devices set up for French and a different set of customization settings for devices set up for Japanese. To provision multivariant settings, you use Windows Configuration Designer to create a provisioning package that contains all of the customization settings that you want to apply to any of your devices. Next, you manually edit the .XML file for that project to define each set of devices (a **Target**). For each **Target**, you specify at least one **Condition** with a value, which identifies the devices to receive the configuration. Finally, for each **Target**, you provide the customization settings to be applied to those devices. Let's begin by learning how to define a **Target**. -## Define a target +## Target In the XML file, you provide an **Id**, or friendly name, for each **Target**. Each **Target** is defined by at least one **TargetState** which contains at least one **Condition**. A **Condition** element defines the matching type between the condition and the specified value. @@ -43,9 +43,9 @@ The following table shows the conditions supported in Windows client provisionin | PNN | P0 | Supported | String | Use to target settings based on public land mobile network (PLMN) Network Name value. | | GID1 | P0 | Supported | Digit string | Use to target settings based on the Group Identifier (level 1) value. | | ICCID | P0 | Supported | Digit string | Use to target settings based on the Integrated Circuit Card Identifier (ICCID) value. | -| Roaming | P0 | N/A | Boolean | Use to specify roaming. Set the value to **1** (roaming) or **0** (non-roaming). | -| UICC | P0 | N/A | Enumeration | Use to specify the Universal Integrated Circuit Card (UICC) state. Set the value to one of the following:


    - 0 - Empty
    - 1 - Ready
    - 2 - Locked | -| UICCSLOT | P0 | N/A | Digit string | Use to specify the UICC slot. Set the value one of the following:


    - 0 - Slot 0
    - 1 - Slot 1 | +| Roaming | P0 | N/A | Boolean | Use to specify roaming. Set the value to **1** (roaming) or **0** (nonroaming). | +| UICC | P0 | N/A | Enumeration | Use to specify the Universal Integrated Circuit Card (UICC) state. Set the value to one of these values:
    0 - Empty
    1 - Ready
    2 - Locked | +| UICCSLOT | P0 | N/A | Digit string | Use to specify the UICC slot. Set the value one of these values:
    0 - Slot 0
    1 - Slot 1 | | ProcessorType | P1 | Supported | String | Use to target settings based on the processor type. | | ProcessorName | P1 | Supported | String | Use to target settings based on the processor name. | | AoAc ("Always On, Always Connected") | P1 | Supported | Boolean | Set the value to **0** (false) or **1** (true). If this condition is TRUE, the system supports the S0 low power idle model. | @@ -53,17 +53,16 @@ The following table shows the conditions supported in Windows client provisionin | SocIdentifier | P1 | Supported | String | Use to target settings based on the Soc Identifier. Available since 25301 OS build version. | | Architecture | P1 | Supported | String | Matches the PROCESSOR_ARCHITECTURE environment variable. | | Server | P1 | Supported | Boolean | Set the value to **0** (false) or **1** (true) to identify a server. | -| Region | P1 | Supported | Enumeration | Use to target settings based on country/region, using the 2-digit alpha ISO code per [ISO 3166-1 alpha-2](https://en.wikipedia.org/wiki/ISO_3166-1_alpha-2). | -| Lang | P1 | Supported | Enumeration | Use to target settings based on language code, using the 2-digit [ISO 639 alpha-2 code](https://en.wikipedia.org/wiki/ISO_639). | +| Region | P1 | Supported | Enumeration | Use to target settings based on region, using the two digit alpha ISO code per [ISO 3166-1 alpha-2](https://en.wikipedia.org/wiki/ISO_3166-1_alpha-2). | +| Lang | P1 | Supported | Enumeration | Use to target settings based on language code, using the two digit [ISO 639 alpha-2 code](https://en.wikipedia.org/wiki/ISO_639). | The matching types supported in Windows client are: -| Matching type | Syntax | Example | -| --- | --- | --- | -| Straight match | Matching type is specified as-is | <Condition Name="ProcessorName" Value="Barton" /> | -| Regular expression (Regex) match | Matching type is prefixed by "Pattern:" | <Condition Name="ProcessorName" Value="Pattern:.*Celeron.*" /> | -| Numeric range match | Matching type is prefixed by "!Range:" | <Condition Name="MNC" Value="!Range:400, 550" /> | - +| Matching type | Syntax | Example | +|-----------------------------------|-------------------------------------------|------------------------------------------------------------------------| +| Straight match | Matching type is specified as-is | `<Condition Name="ProcessorName" Value="Barton" />` | +| Regular expressions (Regex) match | Matching type is prefixed with `Pattern:` | `<Condition Name="ProcessorName" Value="Pattern:.*Celeron.*" />` | +| Numeric range match | Matching type is prefixed with `!Range:` | `<Condition Name="MNC" Value="!Range:400, 550" />` | ### TargetState priorities @@ -76,27 +75,18 @@ Settings that match more than one **TargetState** with equal priority are applie The **TargetState** priority is assigned based on the condition's priority (see the [Conditions table](#conditions) for priorities). The priority evaluation rules are as followed: 1. A **TargetState** with P0 conditions is higher than a **TargetState** without P0 conditions. - 1. A **TargetState** with both P0 and P1 conditions is higher than a **TargetState** with only P0 conditions. - 1. A **TargetState** with a greater number of matched P0 conditions is higher than **TargetState** with fewer matched P0 conditions, regardless of the number of P1 conditions matched. - -1. If the number of P0 conditions matched are equivalent, then the **TargetState** with the most matched P1 conditions has higher priority. - +1. If the number of P0 conditions matched is equivalent, then the **TargetState** with the most matched P1 conditions has higher priority. 1. If both P0 and P1 conditions are equally matched, then the **TargetState** with the greatest total number of matched conditions has highest priority. - - ## Create a provisioning package with multivariant settings Follow these steps to create a provisioning package with multivariant capabilities. 1. Build a provisioning package and configure the customizations you want to apply during certain conditions. For more information, see [Create a provisioning package](provisioning-create-package.md). - -1. After you've [configured the settings](provisioning-create-package.md#configure-settings), save the project. - +1. After you [configure the settings](provisioning-create-package.md#configure-settings), save the project. 1. Open the project folder and copy the customizations.xml file to any local location. - 1. Use an XML or text editor to open the customizations.xml file. The customizations.xml file holds the package metadata (including the package owner and rank) and the settings that you configured when you created your provisioning package. The **Customizations** node of the file contains a **Common** section, which contains the customization settings. @@ -131,10 +121,9 @@ Follow these steps to create a provisioning package with multivariant capabiliti ``` -1. Edit the customizations.xml file to create a **Targets** section to describe the conditions that will handle your multivariant settings. - - The following example shows the customizations.xml, which has been modified to include several conditions including **ProcessorName**, **ProcessorType**, **MCC**, and **MNC**. +1. Edit the customizations.xml file to create a **Targets** section to describe the conditions that handle your multivariant settings. + The following example shows the customizations.xml, which is modified to include several conditions including **ProcessorName**, **ProcessorType**, **MCC**, and **MNC**. ```XML @@ -185,18 +174,15 @@ Follow these steps to create a provisioning package with multivariant capabiliti 1. In the customizations.xml file, create a **Variant** section for the settings you need to customize. To do this: a. Define a child **TargetRefs** element. - - b. Within the **TargetRefs** element, define a **TargetRef** element. You can define multiple **TargetRef** elements for each **Id** that you need to apply to customized settings. - c. Move compliant settings from the **Common** section to the **Variant** section. If any of the **TargetRef** elements matches the **Target**, all settings in the **Variant** are applied. - >[!NOTE] - >You can define multiple **Variant** sections. Settings that reside in the **Common** section are applied unconditionally on every triggering event. + > [!NOTE] + > You can define multiple **Variant** sections. Settings that reside in the **Common** section are applied unconditionally on every triggering event. - The following example shows the customizations.xml updated to include a **Variant** section and the moved settings that will be applied if the conditions for the variant are met. + The following example shows the customizations.xml updated to include a **Variant** section and the moved settings that are applied if the conditions for the variant are met. ```XML @@ -249,10 +235,9 @@ Follow these steps to create a provisioning package with multivariant capabiliti - ``` -1. Save the updated customizations.xml file and note the path to this updated file. You will need the path as one of the values for the next step. +1. Save the updated customizations.xml file and note the path to this updated file. You'll need the path as one of the values for the next step. 1. Use the [Windows Configuration Designer command-line interface](provisioning-command-line.md) to create a provisioning package using the updated customizations.xml. @@ -262,13 +247,10 @@ Follow these steps to create a provisioning package with multivariant capabiliti icd.exe /Build-ProvisioningPackage /CustomizationXML:"C:\CustomProject\customizations.xml" /PackagePath:"C:\CustomProject\output.ppkg" /StoreFile:C:\Program Files (x86)\Windows Kits\10\Assessment and Deployment Kit\Imaging and Configuration Designer\x86\Microsoft-Common-Provisioning.dat" ``` +In this example, the **StoreFile** corresponds to the location of the settings store that is used to create the package for the required Windows edition. -In this example, the **StoreFile** corresponds to the location of the settings store that will be used to create the package for the required Windows edition. - ->[!NOTE] ->The provisioning package created during this step will contain the multivariant settings. You can use this package either as a standalone package that you can apply to a Windows device or use it as the base when starting another project. - - +> [!NOTE] +> The provisioning package created during this step contains the multivariant settings. You can use this package either as a standalone package that you can apply to a Windows device or use it as the base when starting another project. ## Events that trigger provisioning @@ -276,26 +258,11 @@ When you install the multivariant provisioning package on a Windows client devic The following events trigger provisioning on Windows client devices: -| Event | Windows client for desktop editions | -| --- | --- | -| System boot | Supported | -| Operating system update | Planned | -| Package installation during device first run experience | Supported | -| Detection of SIM presence or update | Supported | -| Package installation at runtime | Supported | -| Roaming detected | Not supported | - - -## Related articles - -- [Provisioning packages for Windows client](provisioning-packages.md) -- [How provisioning works in Windows client](provisioning-how-it-works.md) -- [Install Windows Configuration Designer](provisioning-install-icd.md) -- [Create a provisioning package](provisioning-create-package.md) -- [Apply a provisioning package](provisioning-apply-package.md) -- [Settings changed when you uninstall a provisioning package](provisioning-uninstall-package.md) -- [Provision PCs with common settings for initial deployment (simple provisioning)](provision-pcs-for-initial-deployment.md) -- [Use a script to install a desktop app in provisioning packages](provisioning-script-to-install-app.md) -- [PowerShell cmdlets for provisioning Windows client (reference)](provisioning-powershell.md) -- [Windows Configuration Designer command-line interface (reference)](provisioning-command-line.md) - +| Event | Windows client for desktop editions | +|---------------------------------------------------------|-------------------------------------| +| System boot | Supported | +| Operating system update | Planned | +| Package installation during device first run experience | Supported | +| Detection of SIM presence or update | Supported | +| Package installation at runtime | Supported | +| Roaming detected | Not supported | diff --git a/windows/configuration/provisioning-packages/provisioning-packages.md b/windows/configuration/provisioning-packages/provisioning-packages.md index 050fc24beb..a226b877f3 100644 --- a/windows/configuration/provisioning-packages/provisioning-packages.md +++ b/windows/configuration/provisioning-packages/provisioning-packages.md @@ -1,9 +1,9 @@ --- title: Provisioning packages overview -description: With Windows 10 and Windows 11, you can create provisioning packages that let you quickly and efficiently configure a device without having to install a new image. Learn about what provisioning packages, are and what they do. +description: With Windows, you can create provisioning packages that let you quickly and efficiently configure a device without having to install a new image. Learn about what provisioning packages are and what they do. ms.reviewer: kevinsheehan ms.topic: conceptual -ms.date: 12/31/2017 +ms.date: 07/08/2024 --- # Provisioning packages for Windows @@ -12,29 +12,17 @@ Windows provisioning makes it easy for IT administrators to configure end-user d A provisioning package (.ppkg) is a container for a collection of configuration settings. With Windows client, you can create provisioning packages that let you quickly and efficiently configure a device without having to install a new image. -Provisioning packages are simple enough that with a short set of written instructions, a student, or non-technical employee can use them to configure their device. It can result in a significant reduction in the time required to configure multiple devices in your organization. - - +Provisioning packages are simple enough that with a short set of written instructions, a student, or nontechnical users can use them to configure their device. It can result in a significant reduction in the time required to configure multiple devices in your organization. Windows Configuration Designer is available as an [app in the Microsoft Store](https://www.microsoft.com/store/apps/9nblggh4tx22). - - - - - - - - - - ## Benefits of provisioning packages Provisioning packages let you: - Quickly configure a new device without going through the process of installing a new image. - Save time by configuring multiple devices using one provisioning package. -- Quickly configure employee-owned devices in an organization without a mobile device management (MDM) infrastructure. +- Quickly configure user-owned devices in an organization without a mobile device management (MDM) infrastructure. - Set up a device without the device having network connectivity. Provisioning packages can be: @@ -44,57 +32,7 @@ Provisioning packages can be: - Downloaded from a network share. - Deployed in NFC tags or barcodes. -## What you can configure - -### Configuration Designer wizards - -The following table describes settings that you can configure using the wizards in Windows Configuration Designer to create provisioning packages. - -| Step | Description | Desktop wizard | Kiosk wizard | HoloLens wizard | -| --- | --- | --- | --- | --- | -| Set up device | Assign device name, enter product key to upgrade Windows, configure shared use, remove pre-installed software | ✅ | ✅ | ✅ | -| Set up network | Connect to a Wi-Fi network | ✅ | ✅ | ✅ | -| Account management | Enroll device in Active Directory, enroll device in Microsoft Entra ID, or create a local administrator account | ✅ | ✅ | ✅ | -| Bulk Enrollment in Microsoft Entra ID | Enroll device in Microsoft Entra ID using Bulk Token

    [Set up Microsoft Entra join in your organization](/azure/active-directory/active-directory-azureadjoin-setup), before you use Windows Configuration Designer wizard to configure bulk Microsoft Entra enrollment. | ✅ | ✅ | ✅ | -| Add applications | Install applications using the provisioning package. | ✅ | ✅ | ❌ | -| Add certificates | Include a certificate file in the provisioning package. | ✅ | ✅ | ✅ | -| Configure kiosk account and app | Create local account to run the kiosk mode app, specify the app to run in kiosk mode | ❌ | ✅ | ❌ | -| Configure kiosk common settings | Set tablet mode, configure welcome and shutdown screens, turn off timeout settings | ❌ | ✅ | ❌ | -| Developer Setup | Enable Developer Mode | ❌ | ❌ | ✅ | - -- [Instructions for the desktop wizard](provision-pcs-for-initial-deployment.md) -- [Instructions for the kiosk wizard](../kiosk-single-app.md#wizard) -- [Instructions for the HoloLens wizard](/hololens/hololens-provisioning#wizard) - ->[!NOTE] ->After you start a project using a Windows Configuration Designer wizard, you can switch to the advanced editor to configure additional settings in the provisioning package. - -### Configuration Designer advanced editor - -The following table provides some examples of settings that you can configure using the Windows Configuration Designer advanced editor to create provisioning packages. - -| Customization options | Examples | -|---|---| -| Bulk Active Directory join and device name | Join devices to Active Directory domain and assign device names using hardware-specific serial numbers or random characters | -| Applications | Windows apps, line-of-business applications | -| Bulk enrollment into MDM | Automatic enrollment into a third-party MDM service

    Using a provisioning package for auto-enrollment to Microsoft Intune isn't supported. To enroll devices, use the Configuration Manager console. | -| Certificates | Root certification authority (CA), client certificates | -| Connectivity profiles | Wi-Fi, proxy settings, Email | -| Enterprise policies | Security restrictions (password, device lock, camera, and so on), encryption, update settings | -| Data assets | Documents, music, videos, pictures | -| Start menu customization | Start menu layout, application pinning | -| Other | Home and lock screen wallpaper, computer name, domain join, DNS settings, and so on | - -For details about the settings you can customize in provisioning packages, see [Windows Provisioning settings reference]( https://go.microsoft.com/fwlink/p/?LinkId=619012). - - - - - - -WCD, simplified common provisioning scenarios. - -:::image type="content" source="images/icd.png" alt-text="Configuration Designer options"::: +## Provisioning scenarios WCD supports the following scenarios for IT administrators: @@ -111,8 +49,54 @@ WCD supports the following scenarios for IT administrators: - MobileIron (password-string based enrollment) - Other MDMs (cert-based enrollment) - - +> [!NOTE] +> The Provision school devices wizard is removed from Windows Configuration Designer. Instead, use the [Setup School PCs app](https://www.microsoft.com/store/p/set-up-school-pcs/9nblggh4ls40) from the Microsoft Store. + +:::image type="content" source="images/icd.png" alt-text="Configuration Designer options"::: + +## What you can configure + +Windows Configuration Designer provides the following simple provisioning scenarios: + +- [Instructions for the desktop wizard](provision-pcs-for-initial-deployment.md) +- [Instructions for the kiosk wizard](../assigned-access/overview.md) +- [Instructions for the HoloLens wizard](/hololens/hololens-provisioning#provisioning-package-hololens-wizard) +- [Instructions for the Surface Hub wizard](/surface-hub/provisioning-packages-for-surface-hub) + +The following table describes settings that you can configure using the wizards in Windows Configuration Designer to create provisioning packages. + +| Step | Description | Desktop wizard | Kiosk wizard | HoloLens wizard | +| --- | --- | --- | --- | --- | +| Set up device | Assign device name, enter product key to upgrade Windows, configure shared use, remove preinstalled software | ✅ | ✅ | ✅ | +| Set up network | Connect to a Wi-Fi network | ✅ | ✅ | ✅ | +| Account management | Enroll device in Active Directory, enroll device in Microsoft Entra ID, or create a local administrator account | ✅ | ✅ | ✅ | +| Bulk Enrollment in Microsoft Entra ID | Enroll device in Microsoft Entra ID using Bulk Token

    [Set up Microsoft Entra join in your organization](/azure/active-directory/active-directory-azureadjoin-setup), before you use Windows Configuration Designer wizard to configure bulk Microsoft Entra enrollment. | ✅ | ✅ | ✅ | +| Add applications | Install applications using the provisioning package. | ✅ | ✅ | ❌ | +| Add certificates | Include a certificate file in the provisioning package. | ✅ | ✅ | ✅ | +| Configure kiosk account and app | Create local account to run the kiosk mode app, specify the app to run in kiosk mode | ❌ | ✅ | ❌ | +| Configure kiosk common settings | Set tablet mode, configure welcome and shutdown screens, turn off timeout settings | ❌ | ✅ | ❌ | +| Developer Setup | Enable Developer Mode | ❌ | ❌ | ✅ | + +> [!TIP] +> After you start a project using a Windows Configuration Designer wizard, you can switch to the advanced editor to configure additional settings in the provisioning package. + +## Configuration Designer advanced editor + +The following table provides some examples of settings that you can configure using the Windows Configuration Designer advanced editor to create provisioning packages. + +| Customization options | Examples | +|---|---| +| Bulk Active Directory join and device name | Join devices to Active Directory domain and assign device names using hardware-specific serial numbers or random characters | +| Applications | Windows apps, line-of-business applications | +| Bulk enrollment into MDM | Automatic enrollment into a third-party MDM service

    Using a provisioning package for autoenrollment to Microsoft Intune isn't supported. To enroll devices, use the Configuration Manager console. | +| Certificates | Root certification authority (CA), client certificates | +| Connectivity profiles | Wi-Fi, proxy settings, Email | +| Enterprise policies | Security restrictions (password, device lock, camera, and so on), encryption, update settings | +| Data assets | Documents, music, videos, pictures | +| Start menu customization | Start menu layout, application pinning | +| Other | Home and lock screen wallpaper, computer name, domain join, DNS settings, and so on | + +For details about the settings you can customize in provisioning packages, see [Windows Provisioning settings reference]( https://go.microsoft.com/fwlink/p/?LinkId=619012). ## Related articles diff --git a/windows/configuration/provisioning-packages/provisioning-powershell.md b/windows/configuration/provisioning-packages/provisioning-powershell.md index e5e7ea6019..d8292d3413 100644 --- a/windows/configuration/provisioning-packages/provisioning-powershell.md +++ b/windows/configuration/provisioning-packages/provisioning-powershell.md @@ -1,17 +1,14 @@ --- -title: PowerShell cmdlets for provisioning Windows 10/11 -description: Learn more about the Windows PowerShell cmdlets that you can use with Provisioning packages on Windows10/11 client desktop devices. +title: PowerShell cmdlets for provisioning packages in Windows +description: Learn more about the Windows PowerShell cmdlets that you can use with Provisioning packages on Windows devices. ms.topic: conceptual - -ms.date: 12/31/2017 +ms.date: 07/09/2024 --- -# PowerShell cmdlets for provisioning Windows client (reference) +# PowerShell cmdlets for provisioning Windows client Windows client includes Provisioning PowerShell cmdlets. These cmdlets make it easy to script the following functions. -## cmdlets - - **Add-ProvisioningPackage**: Applies a provisioning package. Syntax: @@ -59,7 +56,7 @@ Windows client includes Provisioning PowerShell cmdlets. These cmdlets make it e - `Uninstall-TrustedProvisioningCertificate ` ->[!NOTE] +> [!NOTE] > You can use Get-Help to get usage help on any command. For example: `Get-Help Add-ProvisioningPackage` Trace logs are captured when using cmdlets. The following logs are available in the logs folder after the cmdlet completes: @@ -69,20 +66,5 @@ Trace logs are captured when using cmdlets. The following logs are available in - ProvTrace.<timestamp>.TXT - TEXT file containing trace output formatted for easy reading, filtered to only show events logged by providers in the WPRP file - ProvLogReport.<timestamp>.XLS - Excel file containing trace output, filtered to only show events logged by providers in WPRP file - - ->[!NOTE] ->When applying provisioning packages using Powershell cmdlets, the default behavior is to suppress the prompt that appears when applying an unsigned provisioning package. This is by design so that provisioning packages can be applied as part of existing scripts. - -## Related articles - -- [How provisioning works in Windows client](provisioning-how-it-works.md) -- [Install Windows Configuration Designer](provisioning-install-icd.md) -- [Create a provisioning package](provisioning-create-package.md) -- [Apply a provisioning package](provisioning-apply-package.md) -- [Settings changed when you uninstall a provisioning package](provisioning-uninstall-package.md) -- [Provision PCs with common settings for initial deployment (simple provisioning)](provision-pcs-for-initial-deployment.md) -- [Use a script to install a desktop app in provisioning packages](provisioning-script-to-install-app.md) -- [Windows Configuration Designer command-line interface (reference)](provisioning-command-line.md) -- [Create a provisioning package with multivariant settings](provisioning-multivariant.md) - +> [!NOTE] +> When applying provisioning packages using Powershell cmdlets, the default behavior is to suppress the prompt that appears when applying an unsigned provisioning package. This is by design so that provisioning packages can be applied as part of existing scripts. diff --git a/windows/configuration/provisioning-packages/provisioning-script-to-install-app.md b/windows/configuration/provisioning-packages/provisioning-script-to-install-app.md index c9aff98df4..05fc65f6c1 100644 --- a/windows/configuration/provisioning-packages/provisioning-script-to-install-app.md +++ b/windows/configuration/provisioning-packages/provisioning-script-to-install-app.md @@ -1,8 +1,8 @@ --- title: Use a script to install a desktop app in provisioning packages -description: With Windows 10/11, you can create provisioning packages that let you quickly and efficiently configure a device without having to install a new image. +description: With Windows, you can create provisioning packages that let you quickly and efficiently configure a device without having to install a new image. ms.topic: how-to -ms.date: 12/31/2017 +ms.date: 07/09/2024 --- # Use a script to install a desktop app in provisioning packages @@ -57,14 +57,14 @@ Create a script to perform whatever work is needed to install the application(s) You don't need to create an orchestrator script. You can have one command line per app. If necessary, you can create a script that logs the output per app, as mentioned below (rather than one orchestrator script for the entire provisioning package). ->[!NOTE] ->All actions performed by the script must happen silently, showing no UI and requiring no user interaction. +> [!NOTE] > ->The scripts will be run on the device in system context. +> - All actions performed by the script must happen silently, showing no UI and requiring no user interaction. +> - The scripts will be run on the device in system context. ### Debugging example -Granular logging isn't built in, so the logging must be built into the script itself. Here's an example script that logs 'Hello World' to a logfile. When run on the device, the logfile will be available after provisioning is completed. As you'll see in the following examples, it's recommended that you log each action that your script performs. +Granular logging isn't built in, so the logging must be built into the script itself. Here's an example script that logs `Hello World` to a logfile. When run on the device, the logfile will be available after provisioning is completed. As you'll see in the following examples, it's recommended that you log each action that your script performs. ```log set LOGFILE=%SystemDrive%\HelloWorld.log @@ -178,20 +178,14 @@ When you're done, [build the package](provisioning-create-package.md#build-packa 1. The command line will be executed with the directory the CommandFiles were deployed to as the working directory. This means you do not need to specific the full path to assets in the command line or from within any script. 1. The runtime provisioning component will attempt to run the scripts from the provisioning package at the earliest point possible, depending on the stage when the PPKG was added. For example, if the package was added during the Out-of-Box Experience, it will be run immediately after the package is applied, while the out of box experience is still happening. This is before the user account configuration options are presented to the user. A spinning progress dialog will appear and "please wait" will be displayed on the screen. - >[!NOTE] - >There is a timeout of 30 minutes for the provisioning process at this point. All scripts and installs need to complete within this time. + > [!NOTE] + > There is a timeout of 30 minutes for the provisioning process at this point. All scripts and installs need to complete within this time. 1. The scripts are executed in the background as the rest of provisioning continues to run. For packages added on existing systems using the double-click to install, there's no notification that provisioning or script execution has completed -## Related articles +## Next steps -- [Provisioning packages for Windows client](provisioning-packages.md) -- [How provisioning works in Windows client](provisioning-how-it-works.md) -- [Install Windows Configuration Designer](provisioning-install-icd.md) -- [Create a provisioning package](provisioning-create-package.md) -- [Apply a provisioning package](provisioning-apply-package.md) -- [Settings changed when you uninstall a provisioning package](provisioning-uninstall-package.md) -- [Provision PCs with common settings for initial deployment (simple provisioning)](provision-pcs-for-initial-deployment.md) -- [Windows Configuration Designer command-line interface (reference)](provisioning-command-line.md) -- [PowerShell cmdlets for provisioning Windows client (reference)](provisioning-powershell.md) -- [Create a provisioning package with multivariant settings](provisioning-multivariant.md) +> [!div class="nextstepaction"] +> Learn more about applying a provisioning package: +> +> [Apply a provisioning package](provisioning-apply-package.md) \ No newline at end of file diff --git a/windows/configuration/provisioning-packages/provisioning-uninstall-package.md b/windows/configuration/provisioning-packages/provisioning-uninstall-package.md index 6615407051..a4f68379ee 100644 --- a/windows/configuration/provisioning-packages/provisioning-uninstall-package.md +++ b/windows/configuration/provisioning-packages/provisioning-uninstall-package.md @@ -1,19 +1,18 @@ --- -title: Uninstall a provisioning package - reverted settings -description: This article lists the settings that are reverted when you uninstall a provisioning package on Windows 10/11 desktop client devices. +title: Settings changed when you uninstall a provisioning package +description: This article lists the settings that are reverted when you uninstall a provisioning package on Windows desktop client devices. ms.topic: conceptual -ms.date: 12/31/2017 +ms.date: 07/09/2024 --- # Settings changed when you uninstall a provisioning package -When you uninstall a provisioning package, only certain settings are revertible. This article lists the settings that are reverted when you uninstall a provisioning package. - -As an administrator, you can uninstall by using the **Add or remove a package for work or school** option available under **Settings** > **Accounts** > **Access work or school**. +When you uninstall a provisioning package, only certain settings are revertible. This article lists the settings that are reverted when you uninstall a provisioning package. As an administrator, you can uninstall by using the **Add or remove a package for work or school** option available under **Settings** > **Accounts** > **Access work or school**. When a provisioning package is uninstalled, some of its settings are reverted, which means the value for the setting is changed to the next available or default value. Not all settings, however, are revertible. -Only settings in the following lists are revertible. +> [!IMPORTANT] +> Only settings in the following lists are revertible. ## Registry-based settings @@ -21,8 +20,8 @@ The registry-based settings that are revertible when a provisioning package is u - [Wi-Fi Sense](../wcd/wcd-connectivityprofiles.md#wifisense) - [CountryAndRegion](../wcd/wcd-countryandregion.md) -- DeviceManagement / PGList/ LogicalProxyName -- UniversalAppInstall / LaunchAppAtLogin +- [DeviceManagement / PGList / LogicalProxyName](../wcd/wcd-devicemanagement.md#pglist) +- [UniversalAppInstall](../wcd/wcd-universalappinstall.md) / LaunchAppAtLogin - [Power](/previous-versions//dn953704(v=vs.85)) - [TabletMode](../wcd/wcd-tabletmode.md) - [Maps](../wcd/wcd-maps.md) @@ -33,26 +32,26 @@ The registry-based settings that are revertible when a provisioning package is u ## CSP-based settings -Here is the list of revertible settings based on configuration service providers (CSPs). +Here's the list of revertible settings based on configuration service providers (CSPs). -[ActiveSync CSP](/windows/client-management/mdm/activesync-csp) -[AppLocker CSP](/windows/client-management/mdm/applocker-csp) -[BrowserFavorite CSP](/windows/client-management/mdm/browserfavorite-csp) -[CertificateStore CSP](/windows/client-management/mdm/certificatestore-csp) -[ClientCertificateInstall CSP](/windows/client-management/mdm/clientcertificateinstall-csp) -[RootCATrustedCertificates CSP](/windows/client-management/mdm/rootcacertificates-csp) -[CM_CellularEntries CSP](/windows/client-management/mdm/cm-cellularentries-csp) -[CM_ProxyEntries CSP](/windows/client-management/mdm/cm-proxyentries-csp) -[CMPolicy CSP](/windows/client-management/mdm/cmpolicy-csp) -[CMPolicyEnterprise CSP](/windows/client-management/mdm/cmpolicyenterprise-csp) -[EMAIL2 CSP](/windows/client-management/mdm/email2-csp) -[EnterpriseAPN CSP](/windows/client-management/mdm/enterpriseapn-csp) -[EnterpriseDesktopAppManagement CSP](/windows/client-management/mdm/enterprisedesktopappmanagement-csp) -[EnterpriseModernAppManagement CSP](/windows/client-management/mdm/enterprisemodernappmanagement-csp) -[NAP CSP](/windows/client-management/mdm/nap-csp) -[PassportForWork CSP](/windows/client-management/mdm/passportforwork-csp) -[Provisioning CSP](/windows/client-management/mdm/provisioning-csp) -[SecureAssessment CSP](/windows/client-management/mdm/secureassessment-csp) -[VPN CSP](/windows/client-management/mdm/vpn-csp) -[VPNv2 CSP](/windows/client-management/mdm/vpnv2-csp) -[WiFi CSP](/windows/client-management/mdm/wifi-csp) +- [ActiveSync CSP](/windows/client-management/mdm/activesync-csp) +- [AppLocker CSP](/windows/client-management/mdm/applocker-csp) +- [BrowserFavorite CSP](/windows/client-management/mdm/browserfavorite-csp) +- [CertificateStore CSP](/windows/client-management/mdm/certificatestore-csp) +- [ClientCertificateInstall CSP](/windows/client-management/mdm/clientcertificateinstall-csp) +- [RootCATrustedCertificates CSP](/windows/client-management/mdm/rootcacertificates-csp) +- [CM_CellularEntries CSP](/windows/client-management/mdm/cm-cellularentries-csp) +- [CM_ProxyEntries CSP](/windows/client-management/mdm/cm-proxyentries-csp) +- [CMPolicy CSP](/windows/client-management/mdm/cmpolicy-csp) +- [CMPolicyEnterprise CSP](/windows/client-management/mdm/cmpolicyenterprise-csp) +- [EMAIL2 CSP](/windows/client-management/mdm/email2-csp) +- [EnterpriseAPN CSP](/windows/client-management/mdm/enterpriseapn-csp) +- [EnterpriseDesktopAppManagement CSP](/windows/client-management/mdm/enterprisedesktopappmanagement-csp) +- [EnterpriseModernAppManagement CSP](/windows/client-management/mdm/enterprisemodernappmanagement-csp) +- [NAP CSP](/windows/client-management/mdm/nap-csp) +- [PassportForWork CSP](/windows/client-management/mdm/passportforwork-csp) +- [Provisioning CSP](/windows/client-management/mdm/provisioning-csp) +- [SecureAssessment CSP](/windows/client-management/mdm/secureassessment-csp) +- [VPN CSP](/windows/client-management/mdm/vpn-csp) +- [VPNv2 CSP](/windows/client-management/mdm/vpnv2-csp) +- [WiFi CSP](/windows/client-management/mdm/wifi-csp) diff --git a/windows/configuration/provisioning-packages/toc.yml b/windows/configuration/provisioning-packages/toc.yml index afd0f1f158..2e5266898d 100644 --- a/windows/configuration/provisioning-packages/toc.yml +++ b/windows/configuration/provisioning-packages/toc.yml @@ -1,29 +1,35 @@ items: - name: Overview href: provisioning-packages.md - - name: How provisioning works in Windows client + - name: How provisioning works href: provisioning-how-it-works.md - - name: Introduction to configuration service providers (CSPs) - href: how-it-pros-can-use-configuration-service-providers.md - - name: Install Windows Configuration Designer - href: provisioning-install-icd.md - - name: Create a provisioning package - href: provisioning-create-package.md - - name: Apply a provisioning package - href: provisioning-apply-package.md - - name: Settings changed when you uninstall a provisioning package - href: provisioning-uninstall-package.md - - name: Provision PCs with common settings for initial deployment (desktop wizard) - href: provision-pcs-for-initial-deployment.md - - name: Provision PCs with apps - href: provision-pcs-with-apps.md - - name: Use a script to install a desktop app in provisioning packages - href: provisioning-script-to-install-app.md + - name: Quickstarts + items: + - name: Install Windows Configuration Designer + href: provisioning-install-icd.md + - name: Create a provisioning package (desktop wizard) + href: provision-pcs-for-initial-deployment.md + - name: Create a provisioning package (advanced) + href: provisioning-create-package.md + - name: Apply a provisioning package + href: provisioning-apply-package.md + - name: Provision apps + items: + - name: Provision apps + href: provision-pcs-with-apps.md + - name: Use a script to install a desktop app + href: provisioning-script-to-install-app.md - name: Create a provisioning package with multivariant settings href: provisioning-multivariant.md - - name: PowerShell cmdlets for provisioning Windows client (reference) - href: provisioning-powershell.md - name: Diagnose provisioning packages href: diagnose-provisioning-packages.md - - name: Windows Configuration Designer command-line interface (reference) - href: provisioning-command-line.md \ No newline at end of file + - name: Settings changed when you uninstall a provisioning package + href: provisioning-uninstall-package.md + - name: Reference + items: + - name: Introduction to configuration service providers (CSPs) + href: how-it-pros-can-use-configuration-service-providers.md + - name: Windows Configuration Designer command-line interface + href: provisioning-command-line.md + - name: PowerShell cmdlets for provisioning Windows client + href: provisioning-powershell.md \ No newline at end of file From 322076a8b47d41370cede9ef279bfe63fac118df Mon Sep 17 00:00:00 2001 From: "Vinay Pamnani (from Dev Box)" Date: Tue, 9 Jul 2024 13:40:45 -0600 Subject: [PATCH 99/99] Mo-updates --- ...-it-pros-can-use-configuration-service-providers.md | 8 ++++---- .../provisioning-packages/provision-pcs-with-apps.md | 10 ++++------ .../provisioning-packages/provisioning-install-icd.md | 2 +- .../provisioning-script-to-install-app.md | 2 -- 4 files changed, 9 insertions(+), 13 deletions(-) diff --git a/windows/configuration/provisioning-packages/how-it-pros-can-use-configuration-service-providers.md b/windows/configuration/provisioning-packages/how-it-pros-can-use-configuration-service-providers.md index 978aa8fc5b..9c82d0c44c 100644 --- a/windows/configuration/provisioning-packages/how-it-pros-can-use-configuration-service-providers.md +++ b/windows/configuration/provisioning-packages/how-it-pros-can-use-configuration-service-providers.md @@ -19,11 +19,11 @@ Each CSP provides access to specific settings. For example, the [Wi-Fi CSP](/win CSPs receive configuration policies in the XML-based Synchronization Markup Language (SyncML) format, pushed from an MDM-compliant management server, such as Microsoft Intune. Traditional enterprise management systems, such as Microsoft Configuration Manager, can also target CSPs, by using a client-side Windows Management Instrumentation (WMI)-to-CSP Bridge. -### Synchronization Markup Language (SyncML) +## Synchronization Markup Language (SyncML) The Open Mobile Alliance Device Management (OMA-DM) protocol uses the XML-based SyncML for data exchange between compliant servers and clients. SyncML offers an open standard to use as an alternative to vendor-specific management solutions (such as WMI). The value for enterprises adopting industry standard management protocols is that it allows the management of a broader set of vendor devices using a single platform (such as Microsoft Intune). Device policies, including VPN connection profiles, are delivered to client devices formatted as in SyncML. The target CSP reads this information and applies the necessary configurations. -### The WMI-to-CSP Bridge +## The WMI-to-CSP Bridge The WMI-to-CSP Bridge is a component allowing configuration of Windows client CSPs using scripts and traditional enterprise management software, such as Configuration Manager using WMI. The bridge is responsible for reading WMI commands and through a component called the common device configurator pass them to a CSP for application on the device. @@ -35,7 +35,7 @@ Generally, enterprises rely on Group Policy or MDM to configure and manage devic In addition, you may have unmanaged devices, or a large number of devices that you want to configure before enrolling them in management. You may also want to apply custom settings that aren't available through your MDM service. The [CSP documentation](/windows/client-management/mdm/configuration-service-provider-reference) can help you understand the settings that can be configured or queried. You can also learn about all of the available configuration settings. -### CSPs in Windows Configuration Designer +## CSPs in Windows Configuration Designer You can use Windows Configuration Designer to create [provisioning packages](provisioning-packages.md) to apply settings to devices during the out-of-box-experience (OOBE), and after the devices are set up. You can also use provisioning packages to configure a device's connectivity and enroll the device in MDM. Many of the runtime settings in Windows Configuration Designer are based on CSPs. @@ -45,7 +45,7 @@ Many settings in Windows Configuration Designer display documentation for that s [Provisioning packages in Windows client](provisioning-packages.md) explains how to use the Windows Configuration Designer tool to create a runtime provisioning package. -### CSPs in MDM +## CSPs in MDM Most, if not all, CSPs are surfaced through your MDM service. If you see a CSP that provides a capability that you want to make use of and can't find that capability in your MDM service, contact your MDM provider for assistance. It might be named differently than you expected. You can see the CSPs supported by MDM in the [Configuration service provider reference](/windows/client-management/mdm/configuration-service-provider-reference). diff --git a/windows/configuration/provisioning-packages/provision-pcs-with-apps.md b/windows/configuration/provisioning-packages/provision-pcs-with-apps.md index 2052ee0f96..3ffeaa9b73 100644 --- a/windows/configuration/provisioning-packages/provision-pcs-with-apps.md +++ b/windows/configuration/provisioning-packages/provision-pcs-with-apps.md @@ -27,7 +27,7 @@ When you add an app in a Windows Configuration Designer wizard, the appropriate - **Command line arguments**: Optionally, append more command arguments. The silent flag is appended for you. Example: PROPERTY=VALUE - **Continue installations after failure**: Optionally, specify if you want to continue installing more apps if this app fails to install - **Restart required**: Optionally, specify if you want to reboot after a successful install of this app -- **Required win32 app dependencies**: Optionally, specify more files that are required for the installation of the app. For installers that have multiple file dependencies or have directory structures, [create a cab file of the assets](provisioning-script-to-install-app.md#cab-the-application-assets). The installation script should [include expansion of the .cab file](provisioning-script-to-install-app.md#cab-extract). +- **Required win32 app dependencies**: Optionally, specify more files that are required for the installation of the app. For installers that have multiple file dependencies or have directory structures, [create a cab file of the assets](provisioning-script-to-install-app.md#cab-the-application-assets). The installation script should [include expansion of the .cab file](provisioning-script-to-install-app.md#extract-from-a-cab-example). > [!NOTE] > You can find more information about command-line options for Msiexec.exe [here](/windows/win32/msi/command-line-options). @@ -38,7 +38,7 @@ When you add an app in a Windows Configuration Designer wizard, the appropriate - **Return Codes**: Specify the return codes for success and success with restart (0 and 3010 by default respectively) Any return code that isn't listed is interpreted as failure. The text boxes are space delimited. - **Continue installations after failure**: Optionally, specify if you want to continue installing more apps if this app fails to install - **Restart required**: Optionally, specify if you want to reboot after a successful install of this app -- **Required win32 app dependencies**: Optionally, specify more files that are required for the installation of the app. For installers that have multiple file dependencies or have directory structures, [create a cab file of the assets](provisioning-script-to-install-app.md#cab-the-application-assets). The installation script should [include expansion of the .cab file](provisioning-script-to-install-app.md#cab-extract). +- **Required win32 app dependencies**: Optionally, specify more files that are required for the installation of the app. For installers that have multiple file dependencies or have directory structures, [create a cab file of the assets](provisioning-script-to-install-app.md#cab-the-application-assets). The installation script should [include expansion of the .cab file](provisioning-script-to-install-app.md#extract-from-a-cab-example). ## Add a Windows desktop application using advanced editor @@ -109,13 +109,11 @@ For details about the settings you can customize in provisioning packages, see [ > [!TIP] > We recommend that you include a trusted provisioning certificate in your provisioning package. When the package is applied to a device, the certificate is added to the system store. Any package signed with that certificate can be applied silently. -1. Select **Next** to specify the output location where you want the provisioning package to go once it's built. By default, Windows ICD uses the project folder as the output location.

    - Optionally, you can select **Browse** to change the default output location. +1. Select **Next** to specify the output location where you want the provisioning package to go once it's built. By default, Windows ICD uses the project folder as the output location. Optionally, you can select **Browse** to change the default output location. 1. Select **Next**. -1. Select **Build** to start building the package. The project information is displayed in the build page and the progress bar indicates the build status.

    - If you need to cancel the build, select **Cancel**. This cancels the current build process, closes the wizard, and takes you back to the **Customizations Page**. +1. Select **Build** to start building the package. The project information is displayed in the build page and the progress bar indicates the build status. If you need to cancel the build, select **Cancel**. This cancels the current build process, closes the wizard, and takes you back to the **Customizations Page**. 1. If your build fails, an error message shows up that includes a link to the project folder. You can scan the logs to determine what caused the error. Once you fix the issue, try building the package again. If your build is successful, the name of the provisioning package, output directory, and project directory is shown. diff --git a/windows/configuration/provisioning-packages/provisioning-install-icd.md b/windows/configuration/provisioning-packages/provisioning-install-icd.md index 8acca19051..3b4fddb9b4 100644 --- a/windows/configuration/provisioning-packages/provisioning-install-icd.md +++ b/windows/configuration/provisioning-packages/provisioning-install-icd.md @@ -65,5 +65,5 @@ Windows Configuration Designer can create provisioning packages for Windows clie > [!div class="nextstepaction"] > Learn more about creating a provisioning package: > -> [Create a provisioning package (simple)](provision-pcs-for-initial-deployment.md) +> [Create a provisioning package (desktop wizard)](provision-pcs-for-initial-deployment.md) > [Create a provisioning package (advanced)](provisioning-create-package.md) diff --git a/windows/configuration/provisioning-packages/provisioning-script-to-install-app.md b/windows/configuration/provisioning-packages/provisioning-script-to-install-app.md index 05fc65f6c1..970ed67763 100644 --- a/windows/configuration/provisioning-packages/provisioning-script-to-install-app.md +++ b/windows/configuration/provisioning-packages/provisioning-script-to-install-app.md @@ -105,8 +105,6 @@ PsExec.exe -accepteula -i -s cmd.exe /c 'powershell.exe my_powershell_script.ps1 echo result: %ERRORLEVEL% >> %LOGFILE% ``` - - ### Extract from a .CAB example This example script shows expansion of a .cab from the provisioning commands script, and installation of the expanded setup.exe