From 72674159bab321398987df8a7c2addcb43972b43 Mon Sep 17 00:00:00 2001 From: ImranHabib <47118050+joinimran@users.noreply.github.com> Date: Mon, 19 Oct 2020 14:09:51 +0500 Subject: [PATCH 001/486] Updated Instruction and screenshots. As requested by user, I have updated the instruction and added a screenshot. --- .../control-usb-devices-using-intune.md | 13 +++++-------- .../create-device-configuration-profile.png | Bin 44895 -> 51871 bytes .../device-control/images/create-profile.png | Bin 19760 -> 15388 bytes 3 files changed, 5 insertions(+), 8 deletions(-) diff --git a/windows/security/threat-protection/device-control/control-usb-devices-using-intune.md b/windows/security/threat-protection/device-control/control-usb-devices-using-intune.md index e8f58439cb..054620ee11 100644 --- a/windows/security/threat-protection/device-control/control-usb-devices-using-intune.md +++ b/windows/security/threat-protection/device-control/control-usb-devices-using-intune.md @@ -197,29 +197,26 @@ For more information about controlling USB devices, see the [Microsoft Secure bl ### Block installation and usage of removable storage -1. Sign in to the [Microsoft Azure portal](https://portal.azure.com/). -2. Click **Intune** > **Device configuration** > **Profiles** > **Create profile**. +1. Sign in to the [Microsoft Endpoint Manager](https://endpoint.microsoft.com/). +2. Click **Devices** > **Windows** > **Configuration Policies** > **Create profile**. ![Create device configuration profile](images/create-device-configuration-profile.png) 3. Use the following settings: - - Name: Type a name for the profile - - Description: Type a description - Platform: Windows 10 and later - - Profile type: Device restrictions + - Profile type: Device restrictions ![Create profile](images/create-profile.png) -4. Click **Configure** > **General**. +4. Click **Create**. 5. For **Removable storage** and **USB connection (mobile only)**, choose **Block**. **Removable storage** includes USB drives, where **USB connection (mobile only)** excludes USB charging but includes other USB connections on mobile devices only. ![General settings](images/general-settings.png) -6. Click **OK** to close **General** settings and **Device restrictions**. +6. Click **OK** to close settings and **Device restrictions**. -7. Click **Create** to save the profile. ### Only allow installation and usage of specifically approved peripherals diff --git a/windows/security/threat-protection/device-control/images/create-device-configuration-profile.png b/windows/security/threat-protection/device-control/images/create-device-configuration-profile.png index 1b6d4aa7086610bd1c0c1b4b63a9a6686e6d4294..4b8c80fdd7f99646bb6e6dde30134bb005cc9104 100644 GIT binary patch literal 51871 zcmcF~WmH^2w`BuC6C}ZsV8Pwp6Wrb1HPEXn znfdXi)?#&Y@9L^kr;gseZ@7|zBs$thGynjAE-fXd0stU10swGFDDbc=F8C>vun$xR zDQ#x}0Hg2a4=$M=g8+6B*+p7j9C-%~8-<=drgEJe0Qdxu7W<;+@#A>SQxAJ_8TpKa z>zA5FJ!|wMe~+d9oChCfz2wg~q%Jokgba555&z5uX|wb;M}3 zUUekXP-;@-GIab=VthYGgO>Lyq1|8Z-8&R4y#C!gzx$tw>FmxE=}~7pJL&9H*aOjU zq(N9BD5PTfvXen^<|FB4+=-h+Ha#$-P_= z2_r^}NBuX=v?wXtf9CU|5u^Ig#F+o5$%^zzAv48uJBcO3)TY9OguzHsQA}GCmlI&& z^YI~sx{Sx`eozt}{HZI2^06aAyD|YsxG@AC@JD0q8*+I{1Y(5{%Xp%?kI_H`xjg>g zH|b-dF@9RL*EHPqSp=hi!K`|*W^vIjV8 zxsR_pByhIhR5#c(VmBMA&#$=+%{gK{=Na^Ruk^w-fmaV^SIVDGe00Pav)<23t2^to zp1qtUWXH-s%%|-Z%|pNv%Jai4uf}n9_2g3rMZ@Wuq$<_%Q6dy$G2sa$1_;pa4yCvB z;=MYsN24i4i-EE;(EYn@&Pz5+n%!7#+ZC17l)TOFf48!|%Bulzc-HXqn%fgBDgf|w zMhgERf4{nj7Vv04;SQ|id9~RefSDQ!Au87@3}`>h*bki)j_hLF9VG#^xg!H^c&Sx4 z-sLd6ee9`&H|o#K$q--|6rf}lBEs6m5bVA?1*}@+S z8Dt&?0G>-u36pkZy)O?cXxaVlx%J_X$Ih7}Qy4tdOYb$Dz78g{?FMHXIGpZo2dM zQ0?OnX@*mA#51`3tEDH%>vzqSHNZVxoicfSzHyHtfw@0X?|E^x*c9ZoT$>wbh<*Cx zVw$J+pmF*H8kEfR)xGii^KD2Ag@+Z z3nu#``+95#rloF6^4<)nI~KNw|22>m&ICW0kRk?0XjK@fI%;`2{>Ovz4hJ%KyhETv%-)K8-4OEhpm4tUIt+k%C8@Q&wZph4EsbtAcl*{QVBjBvT`B2EfT_of8MTnQB2_JZTV zaI8*v&#w5 zbQK=7z5UCii^0|!nq(0X8ui?zj=uK1%Tr{@bX1SV(>(b95Ax;M+Yf3 zz~ZYsn&Igt3Vr znNf<*%hO7x=FEkL)_ge3-l)!${i$PXAOTHIVI&BWPh@}QeU+xf94rnOJ@dL zFh-PcL|TXF|5==dVqA;*zV$b=jDZG&p3`pt3t8oY7mHc19ONc=*>bpt2Jy$@ge$Xj z@m*WbJ-A+i1aTrpi#{{REPig$J!}$w;%8}U7Q+r=I)B0KjL~$70%30H=RY(;NDiP@ zs!f8i19ZIy5^NF#EL|d=L7o?dB*+)V`U!jM)BHPpn;@Ait3^~^wfVyVg{1)O! zUe!9<$77@UHb-2EsTTdJLz!?lSM@va82-bIZByB1x5?G3X5UtXnRnyv7v|oPz>ck7 z{Po(Dj6-V7#B_-v?Ht`BNYz`HNR|3aCA$-N6%w z_CAt*T|2VAh=F&JyvSwkKeQklb=OJ8kqU4{!^X~o9z6V)tfn=vL}s5?-s5%hiqx6v z0vWyfWWq$-3he0}IE!E0S}N~_r{C&jNJRGVrW#Q$%P>}9K3z7b;Awf&t!3*6uos>E z?^i=(1*7D4yny;N=@?-ZKW~h3quUT=QD7O9y8`gDmvxntdjWkBH(;`QC(-zdo{_^^ zeAyyNze67pnO%c~gDY*8AYgGOvE+)~NzGbTV=YC==cQtEDa1gHCl!iwHCGFmm7T>i zLOJ^4w*Z%W=h=W`S4n5N@_6$aFGzuC_q6-Mu-dhFHe+dV*@s0`$Ggp-LWE%4K}%k7 zwTIRB_=3hvGO`lIz@3oIoE1rT=(X5%zyzV&Hdm$L=6u^>>As!}6tQLTJ2z631JA^d z`OzZ2t%-v2*;J;8lR{sf5eIvea#$r(ac!;+jTaoOoC8+2F8c_MbBztvq33ECEcply z%$C$=UoMU#vmF_Z0Cy2Wx_GQrv3h(&z~pXZ$xw9c!9iYa0e$Q0lhW!LM@i_!-8Y@ z_Xr`kf0gb|c;B-ar3uHBVlyILA`+_!LcTR;sylTrI0_+q!$LzLdi6ZBk+HcgauVF8 zoFmNonkWJG8-oDkqJF|+*pHmc0S6}u7{DBt*ydYTYS6h~cUE~K@>SyT#N?jlWhY+1c!_mAv~Fot^V2vg{P05dp~?AsxU16~~YzBD0hNkAZj{ zkkSezpJwKa32bVO8M99$zc@VzA@RJy*d`Sz?@BNguK#3bsasW31~YV{(GPlYl~1Mr z>Tksu47B)fG{(>)1yQYLMkr@Xy2%VUp`UpYbS|>(?zN*=X0n8F;B2R%6}ZxHwjJ*b z4IJd{>U0(cHT^9mo-oKJTpj0i{Dh41@D-$Ft+RZva(u2wPqm+9K^1A3J$a#r(=lI` zOGuc#X!QE7!4TtP)LhkC<@dnkI&j8(yUck;*mg8p+SU2(S#MXF;p*5OS?j?mA&)ML zCknVfAgtoY52uuiQ3DM00Z#d>LI0MHSS>VNcSY)40nm^#K-jFE%dB0syRzd)Ila1u zfcMMvrrrJpP5JJv{+VPYwNtP4 zk}nhlnuGMs*Onp&z@!Q_#<1|e`B*4VGQ`W&IYPo6&}H&$*@Zi57wUnrV4pzz4)=kN z$D1i8`fQA@({z4t+A~1FbNz4+=^*o~R;1;FGS9u}fUW2N|E>SKHQ}Po#`e%U_5@Ic z!leJ~+AOWnqJct)78-rb1xwlA4`A;0h%3(KGX=wpfeSZ3Uy$F#5+Q9lkHV>jW+C@| z=x3Pq#!XB+V&)2YH0GkwObX9DdKfRol1M(%v{Hee@=~jE0>DG1t=73oR!619^?&&b z5d@xIb@uW!r@XE6>W^mw%&efrfOe)ZMG-s%OVJdLSKaENX+KhZe4c!e+{@^AYOZE0 zw2_X4oj9IG^j-X?LxscassW=tql=2U(AW*1>z>#ZH%fz+(Zi>NSnxjSEu-?P(fUd$ zp|K;$^|MiD&_|-mW~m&4=7^17hcYCzM1@_EJ?iYx zcLAXI9I*I=D6mpmb{G4T|HVaEBZh+|935UA_M}Nuty-3KU}Ob zwB-KwufHYwDE|M_mH&71{a;%A9YZPg&d>Y8vD0ro4rU4#78bJBXkG$(TnOv|LM&?k;6Ekl zz?7724%%i`lTmh6$4> z3rC+!j0+c4GDLMP$(8*g(8L?q_$q2U&;Jg#LM%$~&<<-lk0V*YuU{0lwnqiBsrD<4 z(Jj_sPZqaht)EI(Uz4KjL0p*Xtk1#P=7ak7qH>dOn~Q%NY}UJRZ@*t5$}~{5!$}}m zUUZ*z#%aF$q))KCUOpW1VR3J|G38}{2x#%c+ZO_o!|WDgR`N;Z#uvZi$B)rHaTS-t zN*vb?hIfq`w6Hfe%6Xh-T_O~w7{P;k2~=)Ip&|!OsC%Zkt;Ek7h;nE&SvjYo98Vxwj?Olot)!*5o->89)p3QxFXIB*US~?`SQCSW#4Qj=QjNc= z-D&u!rrclqEc{DCIH}p!4Zk?>ZAWX{@FLKSe`tVZB;l;JN;$lU%F} z2|y5CgU+FA-H<__GwGneBE7m*2xsbb#xvhvD0gx$b-=}ee_r@NPHd`qta-$mAW#q9 zWpwSsvahI~_`UqArOo!+Eu?JhBE#{dA0KJEdk}`@Rqcfl_$y-C{OvE4a2Bjg2sI;VGnOYK zNfaEx1^A_got)SjZRyttieG}AGkqLQeH@edqyyzNXz&Zd^WqHgj zmGzKDnJ5U)=VF{Y5DES7#a)F>iCAgc?;5LGl}vmg2lMaV)?Nm_gu`(ui{DKvg*)wT zdC0$qWCzM|f5;bY%_oNM(oU?v2%G;>SKr=f%&`#_0!*7{ z*ot)yx=JZbW2xnTIfRm%ZQce4@FZc}D61e{MH-#@8v@|vnOz|Fk%c^0xB87ZRSVqy zb?}|krVT6Q74&X&$PL_vCWu&>I?F8FEzf?^>{|98HxkVs+VM1>wJja*jbFZ-V>0}Z zz9`Q!HH*>H(_74y$$meveJ+eY}AZO7pohXad1bFl!E&xdzy_PvcpI{+W4rl0Nwu2N)U?u z<%uU@ncIsM!`A>cwM9Er!l}3N|MDN{FZKp{F+bm%f^vF)^kXpK)BWP(W9>*Eq9}i{ z@r%f?#wMmQbSTly@SXnMX!1i|W@4mF!J)nJov!2bk+<3)e*4_Flb0vQuyD+3E6e0` z*Rd?^%@khwcm*+9S2~S!l_^jO{u$%%@5#bkc3TCz=juWKpNI9HU*$$dM|B%S?>cn4 zq^8H)ZlGJgonc}W%NgaVlo*-77ekYvlyq1tm&fsqW3!E+OXM~jo_?1{i&b@*|LRtd z!jVLL!HvxmnKll=z18bCjmk6T1^zb-G{~^)fYDHM+H3XyY~cnnCBR zNRk|ibqK?5zH)D0M`onhP&odTIkr3Jd==+riCEzcG&bv5FBInV3wemn27XjRa>3W~|ap-u_44-riX{xTKsX z-iCJp6nko0rdBtzl`3R1s~t8yy4yZ!>;i|;o0vk+q@pvo^7~rms3h&!#5aZ>3Ypl) zEBLN)AaTSyk0>b3T}fn0&U#9dj;sC7>Rr6_yVE}Hx}tMHu7GE7w`rfQGSQu95*Fmr zwm%Bbd*hnrWckW1xN(=ApjSkFXxMj1(mKF*;kW*o1yuP-SO~8*mbk;(LEEO1r=s<{Cm9Wz|59DSdE80 zBNP~dsuh-uaB%l7%5`?7kY-Fqh56$jI$9hyNe2Qe^zQ5AZd#_i`~oI$w4>*n6TgUI z%J580-*_c8^zID)z5-@Izr3_x28D3N+~XX^Ug}_eiO%~v1uZ*a{=GiR~`19cD00;Qma|oWO@?)@rZP&SJ5+ypmdm6YDI=X&YZ<%h>NJB^Y z8;o6=xze(R)-MfsCB&E0uU+Z=S>LGz_y-D+7sZl%7>9Seux@yf@>nM6CpnScu8aCcsLTD-<-ovgNB&cRW;K zIJw7{#qUeB4-^}n0A>_pyCUl&!z#_s=i_|auie?%?{t}GQ${(1`!9Y3^wNG#Z_XtQ z{Cd<>9B3r#tl=8nE~lo%Wf_;{W?Deegau$g%$~5Tdh}GyX!h}o3gSH6zLlSCNx5H< zt7ysJWAN@nFZQe_oDk5)m&HGug=R#^au0s6J*;Rc9< z7&<;xeCcl)bEm8cTsnd3=U zQPxg+SM#@ml{|x1)le%Xv)OwdelLKy7f}^@HGG;xmX)~{kp~~*`G#cgyehwdugx0x z`HkWtt#10qb)y0XYEq|`Jp;ZR)-SJrZ#yk}Q|ntFeoL}J!5hEg;1jB37!G?dgA%}x zGy1~r`z5O##?rDS`iboUl7neigpJT*vmsy1BE&!%OnYmn;RpeLl=gnH){$_qVt;2~ z*Kqdg80=`H{8{{t_igW$3>z5yHz)*{`0c7?h10f@(w~^k=9VRP`oYQd;r$M{;&dB= zvUbDzFP0PkWCdW|REDl!Qpt~RDbc2VlCQSE zwpwYNH<*B~BYj~G;~id%;3f)I0fz3COwaiUqG5K00+ncYb`YkC^(l?HL=-y1V2-!a zQ}x;vFXZu9Ne!u`_%l2=Rh?Egy$oEUDG7l8g`V4H*=%7@T`k^zgSC-+0<777%}-OS59(=|ZvZ~b z*_;6F`{fq;ca&GiRVldUR5w}G0?qn25yOz6mH^C+-XT(d&uMPwjiqGzP|ij7`>&R^ zYEm<*uq;a@8NKG>kl5uL*z@4s5>HAxSpGz zz-GN))6%M4^V#@eXKA3C;>tklHh&N$Y=Xh)U=C;0Hl8ksUy!a$>*dG0Ne&-Qls0>T?optahW40r;35tW2!oIiF*B_B=H;Z}eLe=o7e3=>QK$B&e|ogq#?gT-Idl!qTxLRni2k(5#J)P@!go|Q?GDF_*J6c2t0*tn5lZ$0`;VVGXCgF{k zJ%B#}E%6Tt&OMpXbrEik5;j-6-k^h<-*n<{e_ojCu2~B@8IPUnvfn`2CL=4*Kg-*} zFZwmP)#&3ZXCkZsm>o@1#DbnIvAMKq?1h0Hg)34L# zv^?pEl~rBnAjz(_QO3Cmu4-q43gVu_FAz% z#|@9EY;5fr+Ag?k`+mWG7O(Y7O5Aftbrd~{_Is<<{$3?Rk^BV;`*|0Kb&=`HIRF0g z$oJcIj^&((pb@E=iR2nNWo?R|={qQ%It_f&B0qlz@`<}<{r!@aC*hCNBJtB~L35E7 z=j5p~BQB=LM@O|ZS0$a}S#^5hG8ah?`W6K+goV%MPxM;6gcERUAE*r&9e0KY;6ywR zMnTxH$-51@w?Dexew?h%%8_%f1Do5~9YOXo z3mxT4F+#7eeQ%WW^`2&aRX9=t#_nvp9=ckD^mJ{H3>L0WXN8xZ=QC3PHY$z&hQAg| zE>}&iI>*q%zQKJ1$S~uTb}2B?<0Qj5oZr+VD|zN8@ghDt3SG+u44F7fj%#!MBp;X; zI6jG{)AaE0t|j!dCEMFapUqrWM0viImzC<2#^OXVrLw=biI}L#Dw<43`t(I_Zkfua z)SxVt#qQ+8^={~R-~7PP2#bF6wqVxn`+%czMfm!2RzUaCpg&3+SqjH$hq<^UxoRn? zRs{^^1RPVBKU#(G%H(~_YUqy6gg+YGmTv)0WMX_GT?{Mf7~Oe{)v)<%3IMEFE``o& z(?s*d7idP)1YWH(t=+y)wnlc7HfnO%roP`m(rOzwXc|N3q;(WNDnxFO-r71Db{ah} zJaC;_W;d$@aMBjlrTGsh?*<2SMAj+5YBgluSu8eE#WIc1q3Z>zd?XiFP#WZG+hr5i za96=lS3$FnY`nkh^ak44y{6&54RCGD1usZIh%SvLNvWip;+aOhlqyyC_PSRqKK2!iK zi*S0lT!>Q&N34y)lP+>!No+7pNnncvqk`_xj*1bo?*Ep9p_2Ij_!sCSV zsANxnG?j92Dw#k$L$8ZzlN;HBGw!;Lift-oy|EeLsXI+rMt{{(XeL3Pvi*VDZyz<{ zo^^9TO($pX9KC2+1eKxwVU>n~O;vVjwQFldmlu^#$PW8ZsGkIA#5XZ$ik& z85Dam0|YelNH&o=uS*RQ(-;cB^!NpSEOO?FN*_aputAp7G4;q4=n-s}Z6A@s!5w-6 zu0r1<~GoK3?6~D}RV4#D*|fx#k6nV$K2)yxyx6%O8)*wZV6bWob@Z zrPD6Km9GijNxc>hWaTTg zLN1TEt#O-!VX?wC(En!vVi!E1+4q49jro4r>6^+YSto>Qgz}C@s!x=N;w}Da6Pr5h z+@BQATuSS-9<>og$vfzd>LsAN%3G&~kmQ-q4k7 zZBan?vL8wuGi_qv%3oks#0;4c*5bO+7w<~yIAu>oj5#3K*7SBxUC7FO-+3ETc~-qC zb}@HAkXcr@%ST;A86A*P@j7+%YUkqqC3o8Pp3}=-d?VH450nQBPhn$e?B{Txq5q4%0<=Plk=udY9w;y*{3KHP{??rLa^20a@vL^Kd@*~s1Y9pH@ z;iY)vL-K2}jn3WjjfQn+2ryLSLy=mE8jCU=95#0HJC<*y;pPRU44t51T@1z~lrWaC*V(lOyzc|Kstu5hiacrR`56MEFuN;s(N$EI^b|k8lCob@ z38)}(vPOG&vtSkmE8~zz^HDwozvGong9VA^nxCG>ZU_A$+Pr<{0QioOeWH=&X=;xS z#WU*Kyd?dy1uCgh=Nli7Zcra#M-gUYZECynw{lTfro45owlwO!qxo39Z;TlhLE-fN z{WxQC7~p|8mMjd>$YugQ=()|r=uKT?{t+D?fiC=mI6Z#U%(!(It*z)sHbAx4AGo~V z?*c7P?n%hHJKYDf8u&SHKIY^@ged?}*6O<`=e_Uv`tjX$j%;1Wu_l0H;*-Zm>*-$N zX5Re|a*rC$zlTNcqsi%#J#!jI451$63byu9FrKph==>xAS)&m*>@I>*f9&v2f0-5^~XY zcsP{08Ncy&@M)V%4jD{Hk%BZv~U|3^-aZ5_t zkvC1{X|H30ehlwRJS~b&r2h)wCj;~_CD{3`8hW)@eL@5mMzMIMscD89ETP^{@rUQS zVOm$0Y{F_At2T1d%zN`8=yD*u53>6FYt&eHY30vqZp!X61D$oVg3~=U>E?jDEp#@& z0Ynd{#f1x8y>~a*aFb7BZyA-ATD4t&LP_6;X1P`+>xN2Q|qoe8s&4TZ9kB zMuwSWC$(Zp_EYo+WqXSj)3jC(`BwmA87EqRBJ&f_s={+!2ykW_f<^SSY8|?0AkhO zKm5)<+xqy0S;|CYfHBO*BQQyi>W-6+O&keO$n*_-R~^^L#6YLXy{?*6_*I8M(_+FO zoP%_Fd5E=8C5Krfd3BQmlv#LcR`GJVEBzH>uD|;DEu;BqV=+}NiK<*b)m~5iYvt?L zScTaY8y#%)Yz(#4)A{PhEkXdN=f&R~n1S$k5XSgU<7ucs2Tcoy`GqBGLAmm4giwwK zTY?=4zrveSwFoi|pZM3K2hLQD9Cp&oUE0nqG%Fo89qZB(=BLnP-Js10jB8uqJM2;V zGkvBJx2oj~(%A|T*i(gOCWWWlgb}iMXrdSnr1T-6pu-pJrlE*(K$v9pCEHOZIpTx3 z2CeaL0j9OSGbhP$D>#5r%Tq6jFaj*xif9Uz$=gP0R`#m2J@kw|5GA@z^?Y3c&(h)hK&C z*~?$VTr+Bay+S7mAWQA5Ko8el$qioJLWbnTMYd<&!^=_`<*h| ztljq7pTf7`x=yj9uC{As#EWK}ZGE^xI$CT3*XM>7zBl3XP=VjtqrQK*2nsj2ropA8 z)QoxZfb$=fmj0 zj(j3j2@9wyYghWF1{THgu+jy#ap;oY9j33TjYHLF)Mb)OtE;PPYiIiV`6qvTz4+w56gN^9c-rE5ECboO;igoKcY&jVPW|5TG~2#wDw1l zzvq~&hl}A?nUrQJD&%q^eF4KPAzO)D-R*Ddq(a|PYC_AVKW(K6hFQi&sc`rJA{ulz zkHaBR&k>O$wo{MsD2P=b3zWY?rR)vy8QR@2EHy^LBzt$ z_G&Z6_nO}Hi@qNzv@drpeDYvG+_0oO_y(xfO&;#}y-)v-aE)?Wb z+f@6RE6WME-=z4HtQ#5x8t6@ilh)ynLpUIOtPMHUwANF7LB*oNsEH=da48j$ll3s# zj(cm3BuidIcST8{>Wz5+ux%lJ2#i!pvQPrpsIpWK&ql7IdOq;u5l!qv3 zPu^YWcxufqzo+H8HkshX>-Ds=gy5>k0vW`;JI{<3hQm}`SIBZksPIm@fJd=I6%SqN zsGy)=M|-0-9{tWvx5%Njp2SGN@L27ES3P6xz-3GM%rp+YPW?i^ z&hP5N_DY+7D)rlBC=zzeu6%F`3JMUAF^=06;)>GsYAt(y33fDR`;c(+UyS^Xs^35} zpEruW_jvF&;FyQKW+PAod&&+|hm2svo8lrtjRS^fTD%l|koD_WuPb$Sc6I=4GD5De zT5fJ!0XsWpFiuL-hTj8g(+>fJKiERhu8cpugSBGPHDrL4<1hA5;A9$q3-rS@4E@U% z!y!ww{2@}HLgOkCf90>Cxi6?bQ7FlMQX3o`?AB6Sd(J*El>he{+W#8t?ncgsHoES- zJeV!7Sbn|gtefKNsBOs&!$v>m>%mlArdpa5AcB}Y(ye$px^4J=&(@|8I`HuO`PVYh zYc#YpM5a`J-}_4iE4~+w4yYY-qf3W7@^DkJcQtIuo#q$ zCX_jj7cSNW+^~q*1c5B=*UzTMUtmkmkOnd_=*1Ux0y>YL-=*l@Z)cPbldf8Z0QJtK zM@$);MbdGXE0k=MGK#*^qr&D_yPM^TvUoTe#xm5BM)NV>d?2jC-^?dHKOl|zDHxm9w_G`^PgCi@uL~bGrMg_-WX*ZPufxG+x9)sipJf3E! zLTWT>#s84iER|sf;d0g8l*K1k&7blY#YpCf9-t4*9ij^MjyR?VrzJr-n z?yZ}V-tpD+c_o^SN=U=f@N-tYKzAuX&wuu+Lza;H-ozjn_czWl84KTTn`{iXPVx% zQE%k+Qq4|ZM?@;L!?E1Gv*E8#NB3--D|3O+kGxAQS!CtsqG=KRYE;l;>cuQ;hC#>w zcCUk;)iJ$MYduE7`|S&^9%pF)JMRJ&Yg79z@TMB6zlWj01*n5R7`Mq@*eBPBCK)Xl z=1wJQN;K+)`f_S?$s#{lPXAPP_JAhLh5_l-W-clgu(8*&JflU;?`iU1ktOxwIhy%_ zJBR9W*&#>tU#@fmZ%Ujq9uR{{O;6hc39vd}02cUc0b>d20UiL9PB8o<29|&SHXEk|)ve*4KPCvy z?W&BZ<*B}GNw3Jcs0!if6AYVn?B%sM8JZ8l*y^*>!vD9lCq_M)Sjy-wgKXm4r#Hf) zTYpFp8yXs5hli+cXIFt%+S=L*!~oG10iZ{j|RIRACAOwEsce+E;GZzrx0( zv7;S8Aaa~V&H!U== zVN=3HtD9=DLslhr;+Fr@p$Y%n^- zzxBsOZlwmW!x+Sc=mAt=Mm`xGQv)F?>fm;M&1>QYyh1FS^><|>`+jYX#6sR1f*3ns z0R&$dQ6-zk9Q?z$z~ORs8EWX)dA>30*d5$}_aAV+vZ(gDN}G6S1++3gTqE`8aH>W8 z(}IBW3!fyK!Rs!ihSC-N#C9d51I74-EwU@}&q|0&ar1|8j$hc9u(V4@N-q!h^#!5EyZXNq$yRxJ zrFF;|hJmoc)u@zkd=Spomj0ld&lH`U|qhDT&_3UIhceJx(3?7OVfqigDZSEm-eHfg3*cG2u8g|9oa;+cOc_$kBm zn7G;5XDffXnEg`?Y_4?nq79F2d4*?a)*2Q>FV3I~x*Z#uvxAl16Gg_25^rm3+Xj=M z!B#UOHrfo9`JdW*ekh($wdmQysyZc_debqOYrKWE@99^$tr>q!A%7h1Z~P%$wNpe= z3(@PXZYMSt76T?Vu&5~~FHalTC_ZLgURG9CQ8E8i4VQb~%tpFnJr{x1^4Rl?cKYMc z^8ALhV^E+K2^PXVf7L73x<$icDy+h3c^SOyDdp(#>{S{FXT(NJymr1S))(q&W7|lX z^?YTXifQyWH0$3+`PWfi4TAxkkG<9zwbu`A1}+<hL zZ8$(z&l&;Aq31vp_UNt?ED_S+AVn%Ct&+{}{e&&s)uH5gW8CY!-?=Tbe`XM$$dfh0 zGDF;&;}iAs;b4DwIs$8{RrVR#{pjnG!dI@9`T6-Y{qpj1o%xST;nm@kKhq=i8eUf{ zuf6wdYX_NZ?MU78?>t3KTJQh5b zONhIzE}(Ynr~mtCqhcq&>&8H{xXpTnVq%$<3;d{bKl!Ijc>Lp(HY0`IY+dF-x@XMk zQ(J=;8|c1w+Avk%91US#K->7v6hZD#g2Qb49I@@fLvOK1+DOP)jLZQmO@P*yY_pPMF8m6)Is2wCyr_@S)xHK4iyWvg{ ziyEISL+QL8)jsZcQbG`ou+QnoH4gL&VH9NY{n@nCG<%G0e=fkc=W%YI8r#wQlSOvIf$UyyPIjEAekxZ2|-UV{H& zP8*b7aCy>c)8({rG&OpJ?O-~8aI+^69f+M1gLysfgSc*ak#ZJAAldoC**YKuyeb*Y zCa8#qWj`%8zQ>V5c~GDbM$Gd(E3L^p0zh0-??XLs@7*yZW}y-Xe3nfTi_`|>K?d|> zm_-dFCs_W5`Od_c^Be|2+YPwUEoyuQdl5V1UIM&OqCRRml4jmBvL8npTa@*YJJugB zg_q1^TPrgp+7WH(_TWALssL2`PmZbye#cy=mwlE_Ly-+ljNZb6IB^HC>xqknrCPJf z02db*6%`fSelcNc9}rHuY-eQ(`TVcZyn>YPA6Ikv-=(#!kwu;CB5W~gdV=eoca!zhcgFKBc z|3G0s_|(glU4H~z$0)imXT<(VR!hL5L+PUQPE|P@3wO4%>>M=#oAq%`>!fTG$i(Cf z{)1+Q8aXIs(R5zDOtWN!_0`9RK~_(|-Y#S>d6IgV9|6J50A+uukgEWf)Tv)k`)X~u zwzTZ#VeR>-sw--#e_^4qMBdYKJJ3KIp7{HoBz5P9w^I=2&~_p?O9^TViA(l+iS}M^ zZ4(tU0H81Hi;0DW@aHH-SZkRG|3^u3M>aswT2{Kv}743YP;kwN+k{e0PnqNz(?r(ckU=yi8G1r#tu7i7cdxfZ%bw|Mi$*IV5OEEPaJM)^R14 zzk0Y!M-fl^?_WpTb7@FFkzAlN8JY9c^xK*IWYz1ltgVhH+7CSSlAGVk#_`VYC_F85 z838-?H(IH;GR`E$w+NXL4LL%jtoZBxPWexTc{>X+Bo~W9A&NsturPj2z|+J$TH>#0 zsjItEqFU5gwoDK{?fB(qB;bX)6*-ZBC}&f1;TA(ak*tTzF|!qq`ON+K)Q$S7`nR~Vd#b-?!oWxzt(+mU)=q|&a&>gT?xT z5uAG``g-3}T_-ty`{@lLUXUCZ5Vg>_VaJ=eGc%kIy!UUX-b;r@XOT$IzW~`~&Xe!d zG08J}_%NHrUiupjqqsgjHYuJ!H@19?RB=x@g(du&!Uz+lUuzvmqLNLzqZ&QY?K57nwq%0U+3ACj}%Y{VIIU<0)Y zIOu@<7kiE2b=LK;nI0a$vpr}?wcoC*ynH}wechnGsFaY!weH1g_Sfd>e%z$%NA4Zc zK%N}ywC9yw-5Yei*?47OPBV;Oyd6UcW0RzUY)P$`lO)CDjHwGu*Q1A9RU%f6*tDYP zuG$<+Q_~H08rXWu*PYw<`Q#P?lkKoHlLONFk@|i9Xy? zNv_*^<(#-#4K2h`d_S=jH2`(TC*|ni;GkJ1y@gD025f65rbH)5vcJAJuqm?gCZYvL zB0hiSMPFiUR3rr}wxpqR)6Gd8O)PP7g4q4yK||(E&f0s5G-cVtfiwBR!W8fO8erIk z5VM-(n409&p7JL1-n888RPcx}2#7G4pqRMj7b1jL){SFxSB#}yYgcLYqVCCL&bzk9 z>zF1#be@23FBWku4TyQy=|N15Ol-Iw0wjy%l}rpKVYtC%Munf=<&1HJa(u#&@V-u| ztYqk!R7CdtwQkDKfcR088nPBfFk$Ab+I@0wz)i+wUYs0JALA1ns@0Qwdmra>B7NEY zDUhqLvU24Ci_Wkq#^%ny<##! zx|7uPy_GBDfz+mG=oH)Xw`ChVk%JQSZ^&^|P0bojCMqt0`WQ}|G`B)U4o-t#4DAkR zw^CX^oiyrI)T_|JugkCc>|DL?dV6s$p-8QT4|;fEM9uHlDBP$$(X(5(lWi^pPdjS- zuFVab%6VfV7vDVc4b_B~KYn5N}3e6X&?NZ}=_kS14)`7M%;twH0L$ zH9BC_cBfK^SNnxQQ)AmgbkJl+79W_2%WcOlC<1mChtF7^e;)4pl{l9#u||8H9&Q^I zO{|hooCz^GpP@epjYf9_=S^rr+G{CB;ajE|A0ucCi*O7Zoa0PSekrW9kG8nad^mZ*SjwaSof!Il1C(U(vM56f8iz%9EFT zq|N?A&iio>4-bIhY$RYdD=l!@NM%ViH>5^Ue5&U-$a9OyTmNY?7Yeh6^6`KAe0G~( z;l^DhE#o5Z$$9UMM@^cF7SbYS&uBcyj&>w!rvCj)@)~VM%|!kzVryQMHD@Tt%a8I! zS0ra&3|9&Kxx-UTFSk5JyYHA0Z>6K-n=cVEGc(m`8!!0x{!p$VNl!epAOdIpc09Wt zi(^KeEJ21YAC6Q)Gu5O;@E;KeDgxL^2S1JVgpdef+N_twj4<-1NG?(fs~Y%3D86kcNXQdvpo{mfW^eZ&dw5P7j2!HGB? zDv@R)KTl9@9irIo`_ztTmz#=ZZ|v-w>Of@wT9ywlT71CE#^SA^qK0N_u~Z*|1tkQj zk_c;Fpl6d}i4KQO*4zn~B*UBa2-z$W>>?Y-*WD@{ry-jm&qkZ+p~JcZ_R{0Gve7@o zHhBihatbTulS<6}WK6n=_Zm3fh&M}N?zE>9!c=cIf4R2q-Wgov;?BiFpnXxoj{F#HOM73uFj2R*+u}mTpR(x}JOw*xsPJ1AA4dt zW%JyYae26{0jlR4>iKJupMIe~o?UCVpg~YkwqUkSi=O4|`sN!8heg8lz`gzFGF$B7 zaQ4>gX8R@QgQQ(qD0;n+%Qa`zGbyH`(zw?}y@Ox+G+uuV4JivvCu9W4 zos2yLz1bA?j-_Z?Lk-UdNrRD1sexb zH`d%6?kCsy3lzv#keB;it=+T=C|EDl>XhxAawpeYAF#?tNN26t7XjSz-5b9M+Ml2S0D zlnLh~vbSy!j#m)wjb)tZ3-DHLYC8ruoN7k9RCBH@p=!IDpCsPR6O`mWOl{~5YWEv( zy8lW3?s@o_Ct`6dPX2|nY{lt~!mMj7a!=jMz05+n?Gh#YKA6jb_~OqtW>-kdog>4` zoDD@*-QQeH&fVr$(VpC2EoGZ#Ps2y(PUVMRmR+P@7PQ**f%k_}z8!=`Tq|wi?%Vgy zek?ssKwg{zm?8hlB!_-?Gsd*79D?h3|1N$wAj{a#y(|+`u z%(dSv%lrk*BkEc&Hgrhr&}w>_A6s(&u00OxUKB=0kMJC^>29tKeEUllsqFefnm#v8 zLy^fNU1^SQ2C`OXnAOwK;uTTymUl5~Oqe9Hv#We#%rjky9j+@XyE6+N2q)hDVJ6~S z|IWzZ$5F!{;T$zn@50%~0$2Fw^lci@YCC>MaPy@bsBP;Ibz1tn!ND%-A#D&ew8Pd* zzXU#!f2c23KkJ&hl)|~3p;5cym}v@~?K#><=8sJ$=NyLrDuRD?=ubI%?iN~WJySZA zE_hTkWAL6OF`j(v09T9|TFMuKZ|0R?UMknw^!p+zx74NV(Vie1 zbUe|vCLvcO6yNesczDUl-(}{W+uvi4EzqzM{<_+&;o@*I1|QvznOk)= z`pnBy%oF#6k0exY5HJ%ou*g-uXPmh-OcK7UcPYywAEzG<^>tE`= z%SSoQ?k^Vp`%d8@YWR|En(?GfSvOm|YU&m~k>f2Bn<`S0BttwlyL^isVN5_Q6S+pN=^3=UZTS_~bY;{TK_Sh07+I;$>$zI6_nUr%_+2C3424yC zD7)s&$UXmdH~*`tT4;b!$lBMSQH^INe2HwSUDvGrGRf2%R{vbI6J1Kz02LfVp{iPJ z!`MZ-9{#l}GbBtF8S0`!h*5++fH&`0(nn9oseP3`eDuN3;Nnvtw1&KL`DpKMXLZ&| z;gbI_eB7>VA(fS&r>Z2!=LU;`U2@X+F*1?4dVzM)U{&@lG+I*FjR^z050*6@?#^zk z%!X2!)MYzMn7f2Q<;d8oO2mn~Q|wis6d0-4 z-yaK!i@W3y@wf&BN44Ij^Kxa46D zshhTso4IHyXim!Rg&&?`Ei@SUi7i~|=DcRe*cm#I>ph-b&+RjG3OxIEpXA)Rr07^k zyuijoJ)ygEwvw`s)dOo+5b%3fzH!~Pcrtt;-MlQ>Tz%yv&%6bF(e^1>5!(s8jdgm2}KpgLDq73RVGm`VK11h&RD>bJO=2FwKk)$O-m8Mm zz;2(lPxLZX`o+x?Gvs; z+3I#oZ^ew&=Kt1iFa)ZoX?}WbQS1tf^Sf%ivRi5rp8Fc3L(L@QvDC2H7iDrs6wD2F z6e80NG&Zxb7%a7Zt;0jji<8@H*7Jo+_t@xMmh)b=*M)yL{Ua7=T5jcU1U63qaPF7X zRZFLqS*iP2dBl)6+(a*t4qbi2#?7TIkP3l~I%4L&^VEmR>?Fky`)dH%fK)jfxgJeh zF~`4jxI75&ej-u_4st+>PWU*R&G<+n<#Sq}ie&OY&5}==Q)6t!1ytr=*%vk=>VZNT zxwwugV8nUOZ+ffcnE`M-NMN&kdDZ%O4?IQ`gt;>~_$D zja3-p=WHlQNO)3J$S|NIBb-!JM#CAx?d|Q(+kI?LyH-%@*xKn_V88-k*vF_Q<-QBY7`y-EeT;JbJ4jEtz@1*Vm> z^nnq`xxfyjJgl=V_g5De7gtx9FJE${sj2N+Kd6 zEG(n+=SJWE{|E`V(f+x(yg#`kCvuQN_UNZ8#M@W1&&h*k{PQv2_5>h2S!MSlj zj8){nwq+M0ivp?ypOOTVa`EwXZ8^<-dj_?OC)}tu2G0#8(NyVF0*wp)rt+aTP{lgo zDR;!SuI;c7*bG3cFvQzRyHw_+C(Vkb42AlXFiA3)H8dhHpSB_qfecZ9v?2o6lRFnD zEFfp0RZ%`f`94g{F3Nmyf7cu}mRXs>?6v{;aAWqx3T~U{I{0g?Bp#3?YivvE`^vK+ z+Eo#kzLa;D5@U6M@w@jZ<6sB$uL9Ll$y;xkM2Z3j(P|s%hH}ePvM(@v=0#n0Stp3x z8h^38Deu=J27wOXxHvdCC{aWpq9{B%I=nxn<<01Y-qy7crv+adwSg)D_=4?5a;>mr zw*<`XQzte!;NUw@;ZDciu9SVjBrGS(2up&SiRGVVz~unvDBwh|j1*N{#$rExoPI6| zx_aS2p~rRGyNk@{$vus%rTKv$G^$x9U=w%zu@oE-7oSZ;m+n#bOTv@H+5qpQ^bZPz z+~90|Z2Ya5o;v;;0fN;}y9^*H`CJCZd57Od8;2}Yrnxu+Kg1MM<(~(z_?h;tE4@|a z1L=*4lHZ0E8o9@ttNcrQO7|qw__6!PU#<86)e;t%HX!@cECgBwqu$}gdG(0ot;NT` zeN!gpzi-Ppr9~I_ZmeO7sX&WVK=HV*kD-`Zug}`A?6;Ncnz}$TdZL+mg4s+Fdb;c| zt=y^1S8i1#@abs<(%U@9-QC^tvH>*d$mhrl^l%&^>EiC5u99>lPKVQ1H6kJU>I9od zQNng6Q_ORHdMG`f9LRC1===H_BRo8Kx?TtV4PV^26IjWxt4Bvqld1}&0?2p zwy#3kRY4)ZMhP*o_~ZdDX30%69DSh#xuxxg@q4T|zLvNj3B#n(_rmRDGJvGsOVH;^ z+|N(5T7Cob28@uTeUFpPo+WxxT&41c<4>uu!{rQ09)A5@n4q6&r0Kws1nil^hVM_u zWexB~z4OkYn^~X=kl<9igZhcNt#kzaUsXAF%dTcMXStOr-ut5Md=81v|2i@EiXY^k zhI=49HkMvF?rxcVCp)DRaE^dO(PoHNXVzCl+xbk~KSF89^!B-8UluKmy%GbNwHPov zh z{5!dYC;E8Q3ki}Sojdl4FAZV0Z4K8J^edisw7PMVYdqc*L?yyZp0B)YhhS8oZxGK? zxl{Est{9E)V41f?`Ot%Pri8eeF!j<7JvA~f^mZ|4fsk=A|E#j=bz-_@y{79rQ9^xv zKgAIo*1x{dugl0m0dyj>FGP>O>>o*tB$|XkMliin6a0&?p3*X zApew27cvR&LUB$85ug(MA+fP!Lv9g$6J%1)!L-k`%POiEiN}N!clqb&y*~URlo$S; zJNkS#v9Om#Q4x3HGph>&?~H4XRr|`r!efK+MeRl#*D4R?#rfTNzNF7qqL%!uaxLc} zy03nH4I1=E|B{2)g?7;7X*$(jA?mI-1CQlVONRyG3#jV0E{AH)=VWoPJ}m)UxvtIiDS) zE(beKhnYbWCg~nq|a~dwg7td(l(*2p* zYiJM&mBk?>L|)ySDtgM}WC%M~R#qNL|=4b!$)0^ z{*ruNDGVX$1KYRclD2zHByX8dQDLY!bdfEV#X>SmW9FVeinPoudPy#l=R$(tLrHJ0 z&Om=JyDMsN8+;r+Su%M9Rf#AWBRGL*;GF4feIxM1u|v;1x%0Te$41S|a!CT*9`HJq z)RMigoIrK9$B}HY|3|;M!oYiB^527%sNgTg@3uuIHG%IsB_jRpUq1*UhByY+D+M@b zKya|VD9cz?dhy)Pw%;ZyT`W3}RNQd;1NUHOb91rIapU@ABc7C$I&hJHW8~A!U3zPB zWS|Nn1JX>S3`gYs@-)4|vE0;!jr5$Z7A@{h*--J#8)T4pKFMTiK}D(PpRGiX3b}+t%HPoqmDRTi^8~ie;g@nv)b?gxB%1X)gke$qwV%?#)gdv7MSP&=3)g?gX|ZoP z1}b9G@V2>BoxiqiwUy+OM&(!L;Qw?=o_E4BFGUN{tsY{ZpPvk_)*$y#gyEKi_^)wZ zXlHK<{j_Cfu(BHysMRc~?Rgahsh3;OOLo%Jo8EI_J8+wk>gCJ*ShTUe{w*Lte?Hq| zJv1*buaTsGs)3xR`%SlUjvG~A%*iiBLmqJ54wNBy_sXpg$4j~Z{zt^L1O(uRFcEV9 z0rJnOv*O}-eOor30YbM0;@pAo9U#C!E_Z*C$FqF5=CqjOdB)b+3d4*FNDgMS*BcWhLxg(JyV_M3#n8 zV-TpbVB?L>Rswalh+VW2RqW}kP&U@=aPWgO0)c$!emu-9xXu-pWcx5Xc6W2eso$_^ z98%;eYL=?A?-y2uOF;?TJ^YPUz37;NksaJzTljQhQ40euNOh71(ha*K0zCzRP*Jq+ zf9qm;{l2~BgNc6ek1mw+o_piP5mC9cEZ-G{VcM?@f*$c&UTh)>=KTE-vK@zJGpc^&S)pcrgwbj*Z`VEtv7~ygqH%V{TzEsp)?EB6cu!Gpjlq+~XwbP=VZi^68s?)NALkcscC^3DW0Gg7H(1_37Yeo{CQFjQ zh;^alTvm5B{tdL-1TMaA3^6Q3@@|c@*udvvN~!3_4`C3}P(-M44-WZod3s# zCHL7kO)vEt(!#ow*RnLR?MCm4rlKMR?U%i;mfTz6OGgctS(NdhZj71Ru%`%&aO8s) zb77GIzEzg_K+s5559)`oJr=oL3nl|eyLw@7_qQ{jJ2xPUhZT^-FGR0-LCnPHL}0NBZo-!d1nsOu1+?9L%FIdE%^#utBuTJ zM5Y_ zvirPulBid;v9wNW9|i}ciR|;zGFH(%)?8K zNew_@@3nDhu5X!f7!rf%m_h!uom9Xg1zs$G`!fYWR4Td#YeL^je!tc|EYERkgrAT> zcb@1X#=%Wz$Sz-6*Oz@RE6=LQlCq8R{a*Y_e-`=)+DuELi~F_p^QkWXI7hRLvbU8 zQQbON%}LNK^i8SaRVp_SRaRkKWj}iDmJvQ)Y$ZdI0O;}7L@ZDRJL-lT6#Is6k0UCu za(syMUdihN83txheNvjy|JbdI`_*&Q9#V;8Ijt)M){bX`g!aBaw7vL|@?(!p?UDAM zPW(8lr+-1!c+XmfX;oIu5ID%C8bpAW`jY`RWBvIHFgJUe@q2HsM*H1um?6vc(mD4< zH(wNVXe6Qnw=Fm`$j2e5S$Ag7=_=^hK>&O(mDRE;q2ZCiv$o_y$vj0#T47qf0&0yhbvRmjof^Qu>0!3FLC`rzczX474<|IWx8bj zBONbNNavb^(0=d%BX!_x1g|90@hUB5Q$p&6^5s`sC0EbkqDt}+T~;iDfy+BRwuEK} z-H$OJ5R5{(%tJ$dZiinrp}-831zK4yN1+Ig&wUf=8$oXLVaT>$OSG>Cnmz2g5Qz_x zcEku%FKo7vK?LDJ;R*-#*exwg`JxjaHE5oO*7n#dsz4RejDciM1g`WUr^`E8e(e=oH#^ysYQAE*nNQ$qzTq604@D$q&)HZI z^_Y>IP2HP)AtoU?1;YE2r(#TGL1Nw)7!!JVI>4#s_R?MZ>g0;k@-F4nRJynBru^n) zb#>KDL7HKDb@fM|nTaI!TQ@df25DS6eGp@QD8zo-ce_w`8jZyRyQ#Q2X>0Q@QPkJm z6dHIl5jhdAjKszQS#}J=BK**t2;Yk|2&`2Y|`|#j##bQc}_l{RL!t zz3AC?7HH-dDnWOsxm)`J7GFm6{QzhD>29juIdjophZ1$4kD&JDuXBrfRV=8 zYB3y(3y#muP|?uPUcNM{G82${I8E}b+S9$B$*|KV-yHEgPk(KQdTs^pxIWoIh*BFu zJ#S97_LU=ZayLLSu3+W?zh67u4ccRUa*w5(%oIJz%lbB)>YqJ(W|K6iO6M$;v1;Tm z>fph;V(w?y_JU6Q`y*`8_m;9&!UoPGB;;Yz$v8aA`65DoV|A4ZY`u2Pw)JnXSL)^C zv(e2Rs72rF*RLUX#2~0-3@Opz@LQ3G^9={0U}7Gc6jX2{C1J~A+m9bV8Xv+e_yMLe zVEU=v`rnN?If3OU3J6jk32>^Kv!{=I}JB0U7pQyWdi!a>N02vhPcTJWF+u0A=N>49j0C+@8#S&T9V4K z(sIm&0bFfF8)f)I;5S+%>z&Kfz*Dy!`Oetq0~9wbkOH4p*Oylk@CE33+<#YM!wbQi zGy9ghhIWQ4V^P(2knfJ5z-Y;rdDjIZ(!7}y`T<1oBvTFXai?xT;NDzdV5{i5ph`CU z#x28EfQ)%oyY=voe9qV>miO%JbAKj*4-bvGUXTtf_(Pn)lxao(ZB|T63jC@YSqPzZ zImh(_?UR2TGl7%ISafS|e?Or7GL4&1%l?bx zAq6k!+*S0%fD=z%FnPc3Kmf_w$AJ#E8rA=poEc>?xeoOyBNa#JIXA?Ue;uR%7P|qZ zQyk_&n+QK_JZb^{0Xsge88Is)1&4Wee%f|u<3d9=Y7?>}eH$@mw%u0Qg9wgA<1$dy zbaxk!V>kh=y7ct~;()zw&8hfAglXZjV1sk%4^!P8x^ic|ie1 zCCmiiK7n=<)5Ox`v*_Ip7yHmtk0_nWpq7m-bxuWoApev3#0Nh&zwV@WpnzGl4U^LHqv(J7GF!k+RSFt5Ms&ZQuH(8+j_UfoBkZ zQhRY_NffM4h2ihIfcnJfc6EfMNLP0on*aVj-+zA~`CTk@lHBf%(?IX3u}bEw#28WL{e?KNe7y38*1gQ@wH_)XRsW-I$tJNqDj@E*KZe=t7Qaqx zT=RHJc5FFX7aSW+KBYap!Y_yAB{y``$nOo~fa)cz+lG1D$3$N;XFVRf|C&9k*i}hR z?Ofxs=xG>74B_T&`{Z6$_lqSaL6%}v7U8?1>PnJ+)+Pi=PsQmLf@^PSv}DTh7$*<( zHuIwoq5X7XKkmP?c*oNT(~5feRqmv11Zg^Qlh)jAq;1IHc4oACFPT|@e!uEyB7R*i z@ZRS*;k8NMX2W^pyA91~O%fzf@W{ol3!d9t8bH0vDq!;J|7PR_5muGR0Bjay zJ1xgU$2e2)XVe7J=v}hHmn7{8`VM3#MH|>KT`s}~(R6Yic;KTBdmglpz7!y!ONb@5 zH~f6R-ScV#ARW0P3qs=kP1i!k-Wgn4b6Z@%4z~*v%R053rNvV`Ej%+kY)0?4w^_W% z{>MFPA|Ps(q$}bS0W4Z|Y6XKeH30G0&~rPN)gs6)(oC!rAJF~!F~qi3%Pdmw=}$H_ z!Od!xuZ*nuC%Z{AuIS^3jP5^#;xdF)U9wyVLd&aED{}WcXv-#j@A~DJry%Y{eqMRj z=b2>HNhli|ACGMLM9_3B9_46&ANw&-4R>Izv|eCTB=%+< z)0va>IUocnDT#{{A9$C=0DDXqY`j-R?6=zp*|y?~BD{&6gZ23DW()Q>zCVB2@~7dS zMN&OI)!Q{+gXQ~sAR7P2j%I+!*)GZq`Q&N;6G|a+0U*|8Xw3qme<@puL@p#(ETZJZ zHjoU2R=8M2iXvGm9#yL6lQWbe9e%BmiD#N&=%JM|<0|L9=JugB-IA-`gOZV2`S z2{FwNN{)D*?Q0R#Pf@Zs3DWhHsIuObHy$<7xXYMiaG8ULbYN!Zx%0{9n833(-8cL0 z6?IqS*-Eo$5{+bhn>cg2vxdOVj-v01&bMI3opQ{h$?L$ymZF)+`+(BqL(fn^%X0bI z36g;Z$v#L^u`$d2KKlFhFy}M2q{(k_Liy0*^v?55g}I#oPjzL0ZjwW1@{8m0`q`lC zDNt+s9aCOam7P?m$v@ebcu4$)@w_>2pg8^7vY}__6g7f1p=`VfP zub~X?T2ja27|{u~uO%ht7UL+x&ro!xTUx5`T^UJz4XgL#^}(CyGak_i-g*x&%GWJJ zNF^RZp=kmW^#MGoJbDkJLxxdzmR*#!_)YG8&A7>r_t^)VT1U4RjHP`xD^ju+-Pt6M zPQ}unJs$I0KmV<&E_xj8d7L})gNIGlxbW7cEHU$Ar zia(oH}Y8l4w<{nzT!uV>T^*GF~H+DS(mIFEVKwAY62rhtH{j^H(w1mYG+q> zXjoADc;mvoeiljoHcWeeJnLl8+w^iQ+V}K$XddW)i!m`VAb(OWKZBPu8(XZFu$8|m zgE92-4)sl&3UNQJCq2{NTt>!7zvJgKx9Mop<25Ow2{8m$3}@T{AZA010{%({z;- z3uk>dt-kz^dHbiPKTs42(D{V{B8^9m;TW_r8}r4!mB-eaXHH0)pXP)2!FDp&CY7Tl<IatbnBCAo+fH%Xg8eLnPAZibiN~vCiEX&z^h19p*O8tKVAc?dc4?6r|L6H+a zo0RINIZuRdciSi-`eJsX@~{UskGQZ?W3RXZ>eZ|mPuky2-zH1$0^rIkxV;k{aMxDP z`_A6{qK_UGpl&Be`MUkcnS?va++bwy+{YY@%4*|QyW=g%k9Sq`L#-YoJjOP4U$C)W zyfFCz+mI~!>TqO$V*jD=%|p21oqRbQzS3m5TBy5JW8zH1{!99$G!J;;O7$!JWc5d)>iG zdll_{XDNJ?cVxK}j<~}9`#cEhQWXfUtDasXA1RF+iCbXs&UK=)~@#NS~;dbx&hB3k1 z$7Ur9oc@%5p;(h_&HrB6D)bZ2lK`ManjcmF9frm0r<|?t!{}(t*r)TervgOj`{PCu z5()BZq&ECP083fvZ*PAcYz!cd=LiTps%|#_;@^oN%8Jc%AmgC&D~LJ8|20H+G8n6T2r!say{D=w51i`4|*IkD=XOy z|HY{CTb9Z{LDz72)dfD}#Q=RW$@#^`H4m8sQ5$F5Ai9}%UCVS(7m?kMId}igwObGX z3TUy&RG3fc9K7MP_OE86rS@kK0VMNuQz8aOW@eI?Oj=_pNk~krW5qAGui@q0{SstR zoXKlQ&mNA~9AagH~bJwd?kkJI|iqtjoS6mPnRgg%cHbZxNIM?fg3WETt1#8^gT}o*y zUErdqq)Vj?kZ>y)uKX2rKzb8<)D96sOOiIl*jbTIDfiSSLwX_u{sE*qzFW2P$GCd7Ke787_&yV z3RAA2ZQVWa@4_DW>m!WikSvB?tMYI-Q zJNq+>C$8v|YxTaq&TQks4HQg^_#e243e|h~>Tj^d~5^&g^Vr{6Y z&e*q`D=(iRv|&8~oe5(G7mOW0wCz?uD@cu5_pKL6&yQ03j@`UK60eB`+c>e>@XH3# zbeeb%soM82e4m}YUI!4!{(XT3E}8<0z~PRy(=X_`?!R-qJo#k9e7gI{?^G;YIo9>! z2F`zfM1^cLQ-&3I<2`MCYkd_{5^ebp;r!{5II;%RkrPcX0~J2dq$VJKCk8&Z-J0Xy zO%%3C&WpR6rxzace_d1i0?@;EB0R%s)XM~^(*F0r_Z|S0#)gjGS~D4saLqNgHS0l33uj(v_=rC?wOqzmnWmr^|<`)}U}p&J3*Y*K``DUa(^R$5vB z1fVm4lQxFw#&i%sXGmD8|GhAGKtc>oOKX}gBNUB*6ZFLKFgMWkQL+u(}O!rf@1#sI_t^Ju7-dP*5Bvt@n{@F4CZ4I5+; zz|kHSF2R!fo>P(AyW{IpraVyfs$CV+UhqkviRVxcTsQeJuHPG)j|YS?l`?hVvg%d4 zQ#d>preH$PUnc^IUvyJwMAY81yvhvp=(RE0FD_H(b3<Oc_2|dD+|C}-OzuC15iAod7~S6ltVN!Wr|)W z4jj@i<|Ft|YZ#Y~Lt5<&^>kR#3iSr6R5!FA)hs2eCwd{YOwRhxtD=o4AquI4hK1Jb zuKNWGgtf1i|0IRa#k#`xIp5Zf5CoJCI_WJ0i#uswY9w_-E6N5SIa}tCB$SD;sXxOe znEkp7bQ-?y^*I!-+$D~?*20X?^ zVfl+?A>*FLFECSpuMlM$jo68pn}A0`>ta7G~C>+cUn z^>G)br1Tz)#rw&)_E!M5edjHFW65AiiL6*@VDT zn8ZB&=G+O={pDTwUU78Ses2uW>_FaCm_ZG%4_2Ktj{y5oxX8vdi>)CUH)VwP*;C;& zP#Nj|fYRkk(cV$^f^pSTo@z#{4|Z{YS6u zJ)+={tMEu!O_$<&ddX>@chULtC$^c@w^q`J3`((mD&6?rqUe^S3v7=T=QUO&U%%oG z0m})H^fzu+6Y!O>;`Ce^e!juu@r+#-XxR^#XdT-0^5&p(wcLP;Ql<@aMyn*vek-K! z?jAntvS}~nFI!gxJo=kn&*zmNDp2LrbVUFc-@FpejQP=0%$(Vdpm<0V)(8Sp_3D19 zOGTyf3~mi7#WlmeKe!6`lEhsg^upm!04_s<;4PHaF##NFR6t)}yJm)k z_Z6F1M|H+&$W9Z9{aZf8$maM8!pajY31*Acv+%+H<~`tQ|CH&cJ>ZqjnC5*_Rh&GV zhsm*k)dkbD$AkgOL^-X7Sso%&O@HV|{ZzO5%?JRGc~G1BTOti#R;$qqkm*7y{b3Kz z|G5B|$+>{A(F(xDY7)!QBz=2&PEiyZK3g#3p*TqR2->{E3Gva~ks-bCQ$ z^%_Xb8<$yfUF_AuJa-lA?H(t>hs2|KPkf+awIMGcrDR`T|dW`*}7+%LGY zYL85^*DQ9QXiCvk;kwJEHnilC>T-8^ff-Cl$*6*7dGKLxiJ=Lw!)y$-Nr#(G7PmtH z=c;JJ_vfK=DcbHt1*fg6?qNGG(tt9l1cmgA1@Q#15dJ<#1dje+hoST&Sx+|O(z(wi z^s~B=sN_geK%%LqJ@zKR?`emVWpjET z;TVayzhhv9d2LD^KpFj54c+pDeBAFH%yE0B$88suiDs(}r;bmK3|29P7$)+Zk+amsTFGukzDwG%dK}?!eHJr=Q~^zFVFT>gPa7RtAcJFZy?EKj>c|N17Kc+d>d6Da zuX;XAc*=j0u2yAo7kK4OYz;~K+06Z6U$&{TT8OV0;U8hTb#d}#zX-l^)Ia=H<~X#& zG%Kk>W5BYZm7}$)zQ0Gwj9IGuYP#HduISXfz%0`YX#@IOmT2VeEoO$jUE6J zMyYrX@A~-4@S=(y_3=C3avIwA)l7l4cd>Zb!|oT)kuJt`H*yefFy#UV!?Dc8>O02O zwfx?+^5w5qY&FGrV*jGN-&{+txv;#&sE(H~K?Kh3)u&!&fL#Bgr@?MgD zZ7DLmp!H{*y{!wGQfU2fJcv8saps{+IpmGj&_jSQJl#50&-R!KO%4tUWK+63i5`!j zoX$SU7`)_f(JD!9I_>}Xx(mRJArxwkDpXG&Pfej#j#zc_?2D$8nfb#TL4iqKf%ri= ztg86z#}ioz8cd@melpUgMIP6mM%-?D9g)AwmHWNQx6Sg=b|SbwK_< zY%_biW!d}fMrwtf7VBi_1NIL84qB$|#a*IW9-Z{PpwCr3@6veUK>J%J4`(k~pS8Rx z82KJk1_tK9nh*P<^=LM)38G)@gk#I8x8u);MW{CQYNJ{t7;3ecXaV2Gn_zyHGdx}{l0zc818SWHoFDsCP9q;!Du<+Q~#(>Zg|qLVZfA$Q7@ z`e{W@SM37^w4S|#s@MMG@s`P@pq`)PNIg9u&MpZ}m*d)$EqJzTIK69~cBAkBR^PC@ z(o%*NnPsV^U5q;2oF1)xi}f%^9OAg%ytvq&mS_;q_1+ErR*rSXi=e|5o1zMHY%Iue^%lDGzf32H-qB*55f z^nVHBYS#!SBdB2`iX^5y=<9x>t8`topd_a;<{v0gO!t?wX@#w)^k8h9DSnl_|5NZp?-Gun$ z_hTV4u`)rL4sqq}r4i)kmwZj9$71;aiK4E;R?}5qTcqi=x2upOxyT|MCa<2(Pyx*0 z#-$QxfC0^|&Bmd?#YGn}@xVW9Ifx$G0MwIor>;9|O#a2j9$Onz|8Vrv(l%fRvAqV| zR~vdP)mUwLhgs_s8PUuaP%beSHxYcSO+l}W`^d_W9cm9yXOp4vxDzbhMl@yudr7qh z_BBI|mYNrHh$fymlC)~w_>Xnr)UQNtYLFNDiq010)U&>mfhJNK8Vhtv`&NUz-94D_ z)pELk!}!%O$!)1?f#3aYNUU0Z$?9_(1K;gt%<}?AZ--Xmvv-}=Wz2G~ zDyaR}It7kZx5p$dsp+?PkAp+xtA#4>+X8BTWMfp4!qBf64SbzZ`|>^z2)G4 z*qf=j+gJDqh&f1{yKAzC@LbNKVd7HabIO*5)obxx0AP9Cla?`$T%BL&!^Z!g^4>bC zt)P1sPF;ZFt_|+))|TK}w0M!?QrrR*DTLxsTvCdAarfZX6!+o|#U1Vm@B3Td_wQZz z{&%z5l@`vKnR8}l?`J<-hSADp9wG6(jDx`~GE+SOi%TDsFjO6d-)pHqr!Ozb8SguZ z(jjgxF7jGzXRgnEq&nFtJ1Kn|Ej!|CesRv|godHms+cE@3DgD&hrZt$C@)I;;Lj%q z;(#}^=(H}ZrpfZ4RX4eHzoAPR?;q&%I>xA2gM&+Z!QG^I)WP(yh{Dvj=9**ZqMIt; z%`pUWYrn#H1X}o{tU=*EeKu!niCKKr+{nD!>PPuf#JmS&zg!r+$}DVfbsO|Od`4_1 zW#4^YzJ%&-f|glqp@nug!zIP^)7s6eK-pSoPN130op=STB*5>dIm0W`&5tQ;tP56vvAUomu_cVVjMKXzaeo=Li7^Lh5L;oU^;r9J;Ws!-CKEwp4fGnL@Q|&;y0@ z?N5}pk(iGjUw+goaCrER_I^|=c0>~2X1%R{orIRo&IpnL5jGqFoB{=plH(i7ZLn;u)1o-+J<|G#`71thY`|g}Zd9<5F z&-CG*)nEah+G zTFO=`Pmo*fnV)byl!sMh^QE{{QT}v(YI?q>=8cNk$%;EUsLPx}>Dbro$W!iH3R`nk zTk(ladc=YL=+!gOGa@c8ZtkWW6%D40s+T>GpZ@Y(o$uQo0p_H(iA?l9#^FWRwIEx# z{>=?rY?o7je>ZmUqD))YP?4Oe`9!OrpB=k$j~F^ {pmAZUz#bR@H`?wlgrgU^g z@)63*?rdgx_!DW6u7dCJajw^vRuRO-#4Csd*bP!Q{s$<&K;RXNa6C`ltJT>hyw`t# z&=i7#m#46V|_&oA#s6PbV;vA@(jnpH@y^vFh7LtiM0dXnJ$3BubzuTdQ_dy0`U{MH{CR1f zdV;jOhaxTDx>uwCbzoQ13Mo7B{L!>Pj$iDgSas0xo#O^`m-GCW5L5`_)GMLaL42+g zyOGFwz-@A6>E(LmKYqu(-|n`4(~&?df+B&r&4q-8gDHWSkC;{_0plh+*36hR#A>l# z&6=}0|Cj0-d6n}={R4K+^M1}(pz)#SKqAt85KU!E6X{p>58QK!lz2;7(3b8txEqK zDQ`*?-_mdf7^I?^r)!6A9~)$rm2|tzKGVs^2v8n zG(ER?;K}&kz!ztQtB~a5l~iFKrhBPDoLRNTw$ZEP_%O?|~ zmCQ&n5@O;PKWb2)GuKCrc{PK_By298JAdY;@akZSS;8l$mL>tWOUXS(hbH@wbxR%+ zMcQiZ@i5(^rT5`!w4L_l1K0BpkdgSV=~mJ+AsxiMJi$PCAHb+EG#V{gCT8%uA`To2TU7@@VVDZ`vzn4dHCEy(FB zA9c|6a8>klME|m}5|$IwG=35^Gtbs0gd}HJuTs|oQr$ZCMA^2PkAR#vwOIWjDR;?i zt4HrHqH|fFPy|tX?O4xvP^(w&ErlGarDc9Mz2ECmAv|lk!BFA$#`TOJzp(h^s|Uan z=ros4h9CU{ax>>nxkW_unBrb>hcyuhzRrN2&-g*s^8q@tY)*+rcnnR-Y^3MTh;(vnW?&9l3Z0f#kz2VzWqnbs5RuEzi4OIHw0CVUhqCx;1{?l7}A#$jTt zl4KAJ`3m~!`wu*6=M|+<>$zfbM5Fr$(_a49ylf!7+^z`pAj0(YKZ_?7NL?0Pp4=Uw zfX`ViC-r+v#d=7dPrTG}O4@6w)q@if6W1AceiO#c;dVvxD-NNjTJZvLUIFCe*$dC# zNo+1ZL@k27YKM8Dl{Su}(vfTV6nBtMrT>eTZs_$+RZovhCUSCauIXc&{}VKVS)_n@ z2#|jzZDt81RHBBEq_Eu5Fh3EHsGlFUy9l^v9sv0^nGFrXe0;8`+;gh>slcX9*~x-)oV#%pcW68;LAke{bbelEH=#;OT zknrcA|FYbzImdlI0RquErZ1csKir3Wx$oPrOFUGeXVlH4^?F6ZiRCQdamRyTBO>q8 z&CtTN-dEwM`Ba-o)T*R1CE0gzbhOu2vD zM5-qNjtU^Gj*1y`4JLsudIWy6a3%FB03o3dI=*!HePT=U3-R+vB`yc(L9?bdV>1mW zzrPWZTXXoJun$~gB?@StX?WpLYlJaLygKc%6>09S-NATG^I|W@8E$jA^ zP9{IIZZI(l5KS!CoDr~*&!6G^F+-S;`-jnKuB&VxKVkh;w$%V*$p;erOO#^zRA)9A zrMz=qp{y4(E|VU_FO42R@AmSTl3cMkTI+{1@G=hEya?dZ%1M|gQ|s4=5;XN0!-%p@ z(T(UWV`eRxtZtgo?9@#=iT*G%`_r~$#^Ws?v@fqPxcv`CXJ@tDJqxwY>GG-CV{aNP zHWQ->SDpE3YlozG7oYpkxT+C{y`22K;m@R=rdGV>K+Qk`iYw49w^c5yBS$VW)<^(s zt#hU$l!yCORnOngzb}SO*6%!K1uT5z&F@whYO}r&Lhl$% zSVIn@M*dULhj#`Sh! z4e4ewczf&W8jw&aR@OGoqV`K|`jk_5+sgDMtMD*6U0hJxkAkA;Pu5cdVw$NLB^4CY zN;C=btmLM`l1rE4{;*-@-Q_PpYij4wY~tf;b5%3gMrpyP?iOt~P_liFH*cnZvreNJ z@8=&QDd{!0z?V(8aO49$BDxwUg*2eRO!}YSNY*eM zjJqr##P98Vk6q}BopLa$!b|JFIs-)HXK&5dxJ)*fI2WQ=?ulsT2S4NA3{!MEq<($> z6QFe5WuiqX9Rek~3CMKe4X>Mte*QGUSC#t?yiEmdAd5fA2JkGVq?ttzzWUU&_`1LO zX#ehFeu_|!-yz^Xfa zCt9&wPtaOJkQErrVsf-x<2-W}T;jzU^H)~THCs^sw`L9(6)=+OiD%oW5+O9D^wNb3 zzjpGNXLQoa#+{lcv+XN~MoE;&?a7P;fOMefcV-Q8%2O{`MhEz){FO^`#e}aEf6Ap9RQbiQy-F zBK6nVU!7XsPo;WW=dt(fQ`iSB$ud=*CA=H~>NZ76N_I23gMhX8q{efVZ+NQV*lU$D>)XFuK^ZVlK&-5aV$ z05a9&mG>xFrdp2b5TeMWKpp@)Kv+G@R1x^{y*7;>8SGOyGwXiYcc3 zN*Ui0EPnn);9+qjn`ywh&^EsG*_NzdT`dowb91x~JO}^t84F$?NZP+h-%s*LUmHvq zzDVzq5_yhBp=V@dbmn;eQ#4_p=t)FoPw;9P_o`%77iSwi1^mPsoJ_=1)#;uF^Z&G5 z9)H3sEX+U>I-+HG+51Bbia@LK`Z=$9iMRa#1d@6(0PcW&sw^LK>i&%2G;ZUvnz z%dT`vdu3ka$okhr7$6V`ol*=>N1?Z_PJwtyZ67{b!*3?Ca+L?#*(>|~5cqv7X0ze} z#hqoX@@}2)U3=~+@G}rdVrW=$L5LWi-`Qu(_~3jGJ|kn_82lFK7-*5)7kqeEt=5Ne zdB$D5a1mLWe%+z5ek+ITZA%Mg%D>I28gcS`in`Rj^#aO1mtf|3#@56UK~S1}J#U&{ ze;nkxH+lSI8J2f0CEY(3Pni2meB9No6CwT7s1iiMu{NWh#X;sk#y=_n0)2UpScmDE z=SY7##(WK->HSb}KH?EjQo`xoR_iP3b(L%Kq=P!6rB)G{7Qei1j~Mo@O%Ow`56jw7 zi_ntil6QLgNq@XvubHY*z2d2LbHp2Cmc0vHDVm671Z?LL7Xw z9jaKX;$o)%2MWg7t0wey35CTo=DHtzVN#RRD)D!w!bZ|nc(B@6TLi|2pJ+@nw zbD)1W($fX|piSKEfD;0Nsw}BQJ_jb13r_6_<-o5&o|@@k$-w8h+&<5;FPUS%pSO?P zJ2#@izS%jESPDu2FU2q`=~1gbId)zM zD9dwyDvr0m6p3Su+Egs+9TdUQa@oKz-(~u+dHgZGZXp7-QXL9{pE-T!4H2`+91hP) z#Ztd0^i3rpc>@vlAtDxcdx?$2q+VWEdI2Zf()WEj*C5$DoQsP+W)U0Fm9WM8@@KuC zfxazlmMH1W0;<{KlO9}L`65nabe+4^4zp6W}H ztZtr&LEPMbgj`G-x9MkO0%u`F_lGRkZ?OSu=V^#|WOE8rCM#}g>5lTjpyL49nSuXK z0a&-w92dLObnAH2Xr-smvuwWI#Y)g@M)NAme&uq2R<_&fPp&>AgIurMivHKF3)5SO zzNhJ9?Du_A%G`*Tt2RPDoo}KU)`?EZ)Oz?rJB_)LQm;<5g^4(a-hcLc&Z{73-IumN z2d`3_UB0gGbVP%8fgtHBbp>r&cWufw2M!_eHNF? zNL9pGI#?X3cU8uStoyK#S(XAD%swENz1}M+KqqP@GT}=ZG%h0v*T=4_D%N0mkMD$k zIKuI%h6$t$2sQqHXxlFKN^0Az!BH@h5 zgW7L%`(wqjkyKpY8Dn;89ixE0WUF=_gpN-DWHq(|kk#igwJ3H>JTUnw20F z0)9;#a^~2^(dnQ!L7v3dW>qD$P@c#-4k{cpqwbEO1J*+T0A5a9zq**v- z%-e7s_XURdq!1PU0Q6VvF9|8>jaco{yCbz0(Ou}py01PSxA~tpVFhRucbt8_v*v-F zOr|M=#Ud@Z ziboq?H)jt|W0R1O02P$X6n+6kUF5PeFPOW2+5^wuH>|zFJean*KcS&#;W~FQYOmZq zkd)=kX55wKBNz2x@2e9y+R5Xi%oh99-ySRX3` z>oLO>;p;Hv0z^5}9U7}oyg)F{v(Gf3GYDP6lc!G~1Am`9>0jl_SGU5hjbYCw!=@&| zr7}W1%yw>wbwDt_3#1J68ZzLhMCiQCSEq}XNu>Hvq`$hB=`lnEL}GG_Qy+%Oww;+5 z2pCrwI8iD+>VN}>7WA0{RchE0dRHAoAmH`dl=vSGZ82qUQ(LjIlLWc6Lts-h1WD+T zyA+OGT=7%L+X0%5|3tFRChxF*)EFH3Ze zwIQV6b98OlPm`2<$X4CNiXijsaPX&ku9~k72s?onVAP|&xL$uI^?c}7-FPVOO=_!v z6po)mm~86IXz|?5(dv9$A&yqb^i^kq*Zmh2d{Cv@c9s1V$b?I%kx7&dk{kpqO!?}ZP|N`;qJp14jfqwqBmHujuQqSiQ< z{VK$;L7V5uXkl2?MpUezgaFV)ukdtQWz29BTLlVRZ5~cN#;JMIbwLq5yq;g07uv@s zx;Dw_F-GSlCI(Nab^LnHe%E+2r~9miZco(BwY1jPS{n^Jt>5rsXFFH9<#zTPqG^2t zYOr+rsAgwycy-3BN7ze@-CFvDsRo8fVfJX?kmW}A-j^mH>n4vxW=v1d< zF;7{Md;#=z+G8Sfr>Rr?i*@oe=kV^{CO>arAL1@#@mV`hIYLW(a`iGo29PMJquTEzx+Rwv26=d00X0Cpi_LcJDk;wc*iECEh%=!_;QZWt@QlIHnu zwFt{(|R`c{m4@rP4sl6 zLy|ajL)z(v5HN2g0JMX>~>72ckQm7S4AzZ?IQ8=|Uw`IQ=>DgmrF8*7k zi#dWrXg?qQ@|at??;1%_w&s4glpP6ghGy3I4Ez2Q%7-Ug@4wy+ce%kZMKUW3=q(%<_r5gEPAn!A>}DbOAnZtxK5_Ox zu>k)NW8$~S;M}3Joi6=;KXGW~UUwlP(s@3HGOZaJV6l|B=zO7b)@uf!x+~18`?;%_ zMtGgTU@|}c9=uE`WBt67HMQV*JX`1V`t|Dvj&)kzywEuXC($g^i4BnpWD*=+`*vmC z2GvqsX^FYWmXXgi^Wdi$xcA&G*12Tq@zm&uz}(BP^x{Gl`$jmTA|p;%Zp^=Y+}D22 zi!r-V7HGLDCW(txB&`j}d-+V^E=a~fPC`>d7uPk_CEh9E!G z_2gWHzGT|_Bds-C@AW}*FJ)26;uRKvx1Tpg-KAeca%Co?$We=n<^pxVaEhxceXZH+4>eb zKNaAult__&aV|}dm{}g$^WJ=fDLr2co#ynOIh@MP6|MYSpWxu5V%oA*;bnOFSK2}J zWhlL5H{0dkPu*!y)@Qf>koB}qSKH3OA~{yQRDkd}bY&h7R?Qf^!UDi_D^LSciYr#} z*NY+i=p-JCok_+;w-SD+-eH?V2m~t-RHv7ZewI@x%j`y;-s~oMD0hX6q#Qn9F2oI? zvlBX&GFWnAHlPRV9QR$7UN)o8HddaE>B4oRWgwMGM_u)pN?6e!MjPI-NV;E!iz@p% zw|Ds24^+ZEk@dOcv{ryHmC(`?w;fezpC7CE;p>!n3*)^$lcd!_XJ3TYgL{0;2y)R3E z)(`eX2Q|gi-K7O^npI2{XizrIaGcufNo|UwsUvokN1aJOd)c!^sM!4G;02z2UEj+_^{VrH%Dl z544Bc4Em$T_ly30!G7$=2?Tiq0iRx8Ue?yk04{}YSEOkJ`vdrxbUl{OR!vgqa>zWJ z@`|Mk#yA0HL5l0%oGe#uXL*5*o%u!(Eow4;IOcTM897u z*=5@mri>V1uMt)4F@k;V;tAZIrdG)iBhO5$t4vrz9~C{~<@(}<$B+r{eq6sFE3`mE z;@k3UG}P&Wxj`-*?z8-BKbr(VXdJ(;BYU#b4)3fmjZZr(^SYRXoun_>Gw3vaxfKpP z1Yu(j$}nun3$!>uo#1HTM+Uq zCmqLItjBLZlF^5)dDR86a}uNZx57g1f;=I>AW1HWqf1F`{gHBr)H~|#u)`Cj7vTw~ z6AxNJpVK~7b~9ehQqxfdGrz@3T((9)P|yJ%Ks1lbr@{y#sOcu}X!@`@>98DdW%eA^ z@LIjgX|@w2L?09B!TLd<&kN_;p^Y?wk7K9CEpZg+QjixTHrym8U8ghVY4KXy$$G9l zo1?@+0lpG`@6mm~Qri9l6nyK=qB$fTpGDC_#>%O`n@%^^()&Yejl{2UE_62YXin)o zJ_`NR1%a1?4}gkS7nJ6N%H$JNJ;w``&P0O<27xzy!->bE16bfigQunp@9B3-sK9c) z6ZR4RYIE5V*q;xhFQn;L(p2zByRarGGt+>-O=%WrXVxZEbOhwgP$N>6C(zLMp4-?b z^sHPO-u?lw`Jh>y9#E#>(Zh#8L4b1$(X6~hnIiFOonp;GjcYSv6Pyql1_q03pwv`X zI4(S61NsFpdI^E0N9PN66khi6;LjUp!64>eQ!dP%Sm4Epc7*;`-c}suuc&H^SInRj z4_3=m6e2M!m|zgu&F^0wqdmpaD{C;yG=M7skC6Mm*?@9!o!F>$k&Ff>~6-!)zF5mqY5nTQG2Pr_b#!8n8>f#H3gF{H{ElS|!nzd#25@`}i!6 zYu|t`k0Y|@Y>XhjcB|7xhgx*!C!py3Mb2E35^O z%MDHBhQ6+~z%^X4`9(APW)HV3dNcdQ7L8a+ylMPe9@ckhK6AbpxopQe5e|;uW)(oa zHQ)p=I;NFe>{j5Yx30v*$N+zTAZw!Y@}&X|u#`R?v4R(V{R*gISwW`^OXEwjS9(G7 zb2xcg?`+?C1xMmjM*5uuA1hQ=vcm;z9=CZC^leIca>UlO9(eP-I${!9$++@(vH2r; zvs>>slfB%&@siw-aDC5!lJv z#RMS#VJKuJg90$w!c3bbS1|2$9#`C8P7T3xG01l{-*V{coh=yceB>@p*(vjtw0Wm+ z+E9OTD!U-G3!I?R=v+g0`VCFP<{@oUPUwlTClNkjW?)61KMWy`&@CSS@&$CDd{i?fP zM|b8!4qQdc2$KFeheS&bv>DUI3sF%5uiCqnmygeLLFg1h-Hpu&jv&hPsZnN2<8qe> zMpCh`3@rPslj{TT$?28|+au6{m5s2Y>;o+9J37jk3)WuQmMZ+nhZ{}wMbg{ekY6YF z>7p!{gCR93Bq~grXX4V)f%F0pkWW)EFI=pmShygnb2gRAcxPu$Qym#S-5fHXb>|rZ z_W{YfN4oHm6|`3||B|)QVaB4c&h9wp)5_?N7jIQtfIL|ch#K9@!wBKIoMp6*Oqs8o zjsB-H?s!)r0Q@S9MH>LP%Bdyq&o#! z$j!z&A490IqZhe4yT%Q1sMqMP)Zz!}3kJ2lk9!}D#c7Pi?f;fCpPY01Uag^}nZF(j zwtKRxGskV5K6}Eqn^#a$G@YQ@d~{~){f}62X)#a&xI<&?$@gjB)iQZ6uZ$jI#bY#e z6%BoD4Q~c(0vF1#l*1zEG+l&Vopn`CJf8JJ5t~f*WD#|o#@0ni0^j$}*TCF90$~$N zaY!jxR3OLc*qj%dbziuD(CPqV~eXC-(W4O+W zm*KP?>WviV#v)cC%c0kbs`cJ%4+?x@`g@fyCufR2h>%5@vBgruHrz5Pzuna1OrWMbTasb=0OG|XVo3%r{7vTp6KR=d{} z0S@>najQfgTc?vZ(hUn;{QAUR<+q;V05=RGA^?^Y#3U@SwV!oe*w$PzH8G4B7jeTj zGk@&jIAK-xjVf+FpCHzu$kB7+3TWM+*7S4ESQjqkuy(Vn!^4mnp8k1f!-C9TudAYV zoCfAtRc3ONL|IKa_3K9K^w0g92BV?@?iF7rc!E!{n2!8S1ABASpJgz%C zu}7{=Y^x_)A!IHc6YO!r+9gy!pY*F42&guMeeWOtgQvPD4E)nVvcSLR4PMIFjaZ9; z)9%BQj3QQHaqc3G3yv%wvlzlW=E6~DDcq*)^WP~B5c=&>+zY7ikNfehd+x#E?={k1 zYjT_s0WzeO!(ZE!sP3^}(Rlr<*SXs7Gz)u;t@&njSp3h2EvjS24wV1Vf!%UHq+&I& zk8zq{&qWyXCBLBp`NuPb*54h@$wzhZ4XT6jWm*uoY#A2*> zsyMJ#r}cM+|8xW5TXObW_E&a+eG-Usz5!~Q=oCejB#g;P znE-;*gshu5Z0BQxcM7LeYJW9vEBrRMXpG{=@z{GL1oC|;ulZN-M8^x^94zcX!yJ|c zY4M~bft56QWMQUj2!?1;smLAtyY5fI>DV%pzNw?pU++%L-g>JqwWp1GgPH^~LwtUV%x zP;X=53j1L4DQ4rvTM1DBu7ZesIGg}%4R~z2?%sv=YxdHn(0n&p!2E@=lL$)P11huv zziSouA<$`@A~>H=s;d>%U}_W@=P``<0VoPUcKeBcCHT7g;8|D%K8Q%aM$X4YxOHWn z8hY=Hp;Yt0&{o4km&g1r4)Tw)v&cg;2O2^yR_2 zazD2c1v~#ln#5G0w!c^70mv0e zdw>7y_2FI51I#C^z5+C@W>u~vwrO30ugk;im1%wsE?}mMY05!jyJbd0yN~DJrfIr} z7@)NG-upbh(8%3_kwYu}koa{Emk>V~I<3{bQn9ro*^u>is`u*QG)Z~QKyhJzRSkh# z{Ylie2%u#^pdVVmqf+wq9Zf%+mU!orATVde^|j}dZ*7NxUDaTN<#m6X?y!{7hqKAr z@;mDp&muvdFS??_zaD%9Z6#ehq?*Li0AP_)DJ)`G8bal;q+K|gd!`Zo zKGBs$xpaYrPjlOuWX#3(5As~K>FLo3s_VbB3ue)nE;6@A1QS-3&*_fnS#yHBA4kN= zE7uS`iM=R-;0U?t^(GX@cFEj1HlIXFciK@;;Inr7ss)xJWBSr<`jQHKkq!w201NlMLV)`_wuEXpAKLelN?RLvdgvx&ZAhzT0OH(@@Np{Wa55y^#yBm8 zIX4-U4lAF|ve7}UCPFP2IWe@*(@9S`SVe+h3<}x3nLIVmU!gksO-KnoY%|-QbM+Fd zb|E3%clDW{_1N(&EFNJHa6HPA&MJj($d%zQd=PQQyMP?#FRv=jr&j!2^qdH_#=u|X zZY)mRup&z;nbJl+$F8TZy#bQR%vBME57;k-0`5F<@$8Mnqc7jxJ;T?PvEM7?DB-?^@ap)) z)}EJ}V50hZ1F!Asl44I0b6HB+CMSqkCZdj@?n><5HDrCROEBL3%|4)0<)@O>By2r0 zjKj#NiOm}|Mh+QhqU5cp_->(amrshMGKD|%UTAQrKw&*5t2hWlRO3VkP=-oS?cH9} z@1>Nrp+eR)$gyID!(|o~_;TaOdV$9c2dSUAIyI_oXHMRF(FH8z5c$dA^m#~J}32NZpsD`l5s?JW@0`0t`e0L4{ z4CQK8&6_WRIu+Moz62hT$O6^_x=CrVk+@haS(h>>7MER>Ru*`ex9I4-^R4z7-SF5N zOW3sR3&xVGAqyN#da?olDG8O|yxWpVY(lXb3MkgJ>AS$p38lC>j<~sMO`5Tvqc{Ny zpR6z#m5A2cOUP~YdR~nnG3Z~x)rZuh`c0j7)AOA5Z2{c3@%23tjaPr9I=pjpNqsNg zc*1{UTJ-%Xqk;4?@GWS*b3n*Un8tHttYDl(Q5Fvd6pKR z&JkSMxS2RyzEj*K4!0hj>;9{{vv^H&U=2*cEE>d=Xixy-JEh;4J<_gc**4lp2ItdkYqrpQ{85BgH&^)R!03JCZiVxv1J$ z{<6^lFYlJODMf)*=rLRy5P!)C7BuB1`$f8bAq7J#K(J8ygh zN`D@bua=A%m+<1*%VxVFD%iy@+kL!7xTSZ5F?W6x6)j2KPpA2#&OHHjjkL1Xn?v%1 z&ApY9%T)lq>S)vuU)+$2Ywt}v*_&`|RNG{E13yj|0(8~C2PiVu>yT+(F0=eFLxhtRqC6~<@e`LsW`6Z+H=&Ia78}NWbt;(^&laT`^ps=;ah$u$05F)hH;vMHcGrS#OR>h<+;(fdpKvd znig;8J7n^AL4``wT{*-{weg=p*N?<}JaH>PA9@AC(Es9hE(K1aC7=%xPoZucH?+!{ zRzB@!$~|*g8Py&_Ov=lz7BT9tC-JVE-ndNMZo~B&`CgCtu&pXQi8kI%x!U-eXJP(8 zLOh3ApWAvl+tdElmJ+9Rgo)D-i!yiRQ)$_*L;Y2Xc{=cP!d4!=ENj-KyjW@P`~nd{ z9%ivXaxKTpLL)$GioSz9{WtWzmVR?1gxfg(5jOBne|N*j4C;R!_jbTdy5k z-N<(5SbuOPkQBJg4XkD4(PvEW*G6)p%)4?c%BH{7Hj?{#W@)8{Op$40=6Pp5**YDc za>hSv56lEDvG#8p;xSW3*qrf%DnQD#r4dZ9d#i|lLg`?3fSID}4Gr7Z_Zr?7ok+x0 z-REb3IuZc(yMgLJvXkQkns9HK`&VO!ho7?d%IVG6BMedabRpe>G<0E_elHy!<>@$K z*Il%pa|HuJgHi)wSIg1kYTDj7vHn=9h_FQ#_^_%*KlOT}GP}ZdexW3J4e$7Qc-|yzj z52P!*Z09=wH-G)HXZ$ zLlA;HX_U+rFjyX+xslatZ0t@ma^z{P+V6lTTmFKlYVJaiveQlsBs&Bj=lxc*|LBc0 zxjn*c@c+ZJ4j+%WU+u^klH;@PLCqx==^;Gg%jDV1fB3Ql%%cgj>~dE_(A;tw)qp*@ zdKkjsvLIUYde;Hn^tY{SW%nuof~{|M0b&0IP)rY!#vTyi0nttpqJhXlSLIRNK5ER{ zKUje1O8b8DHxlJK!N$`8wSFG|(8wLy$o>qN$$w7)QsU#}CKK=LpWodI_BV&bfz~LV z7X4n@QQU3|T?2v}hKT6Nqh39D{uS_20xr~R_R4cov`c2Ri_|9}>}Q%Tw`=NG_DU`= z_R`rZjMfd{B7p4>_I=5kEPJ`oeqNe%GZ`>Tv{+I2j6E5)@mF%>RJpc7ar~P-%YH#u zaXPs`RKR~wEc6z#a`sh)lM;ZhW&L4jiFl6Pqf!tz1si*f+({cK)!q{nQSxQ6dmV44 zt#-uLzpiOya@x*no1@w_aaw4f>7h@98Pudp0%%y2OGysG-6d;65slgYWj{cOwY2!C znzpof^TbvnBzgEZ#(BW!ZATBWiG~L#E&XL5+N{4{{pN0(;nPEEFdc_f*yAqPt+miu zR2XcdPk-iY!H(|d+(E|h02&EpkIVMkgf?@y;|y*^v3iAB>x2#023HJ8`b4hurRT@A zc=6LfF;U|m&sK7z`ddg1l9yLiOMDFbe*xAf(AnSHqq^V5{((7(!YzE9bk89)W~=#* zo-%w=HdI5DT2PZI*GAi!gX*rZ;QEsveaJ#so@}lruMOD_4a!~t{iXKp`wCBK4LQN@ z8h@qc6qkZgB*I1vWl<<0Qw*Z>gU&Ze{&f#vQ zox2)auKXTJ*KD3IF-)Q7R*$DNYUxo`0-335k=mZmQR**rQEZABSNZAML>66-_{i}7 zDCOIRx@*j&My%4HwF|9P^LF<3$9h9~eYR3IPUn{RlE^&NUAz%WDlsS{<}WqeJX#pm zAn5vT)~!pwaeVfV9T_DVmY}z>1%tFH4rywW<;_w~94sP70XonR)B7K)dFNu-!0mlm z1C>GUMDTlkHhBD1ppVnz_j8RQxV=wEZ5_XI;z0|)M&m=;G2AgBI94~m} zeA?%0!T;f>0pNyf_&sKSa{ROi@ei<{CT>GuGMVs2RSUpkmF&(}FVzBKxw2jZy#z)d zLFP(UldWqAx#droo&YgZ7wBo3j+x-AIRO3}pyIU@N%={bc~I~EdToZq@tH%ZF8xLz z=gHfQQdZC7Ir^3(Yl92Pf9DI+T}{@cx(DI3E%isil(Td{iI=nH*G#xJ=2_)@<_+RV zu@m%=A2IznXQ~U@cZ4^MoBUu5;5iCW{IVCELu?{dJBq^;Tk|uDNyC#z)oN=X;z z=}ojUO@l4}D8I{oO(Z9SS>PFe!Af|9l}%@|a~b6~D7Y??8ew$TkeMv#=uJn?ZtsXb z(=5Ief@f9B_16s@wZH+UcM!a9iB@k>!C|&2AVizc85x^qS&=lu8dkPUrgiGJ-CbpC z+|TT0yYFiR-Sc{DaH>}s!tU7o0mqK&jBz@DaY(@C-gALfV^V#x(UbkjUgQL;gsiop z-814fR};_MG=%v`i~_qIvT)?kGD5jS5WX9|{R_Wu3ctGqx6ZJq@>cvFNq=4j0wc|r ztoD;bupJo!x`+HxH`*yqiFKR4sZc&0Y?{&^3q3}M@8U3Tt zp?i#-H(`y~)oP;j78m6i<$oV2@FnN+=|aP9f^oQ1OAtEkR+e72HHH+Xi%v6@9mo{ue^NTxXk(PiUsc|!~wq)ja*5j#6o)J#F zGIR$Y*X=*Kv5}Qo4UKJNt5iYIshnCH6jMTrGr)9E5^QYZzDP}X@pCaRm^(Nde5D+5 zwRQV_SGi?=vt{XLesh~3zn)W3US#~zuQa&spw|>0Whnk1)Job*!mQ{qta45cf5<6C zMt^%fSEsaIeSRdbB)0<8%Ehzhxxj$pz*(CWhPF>m%VC2Ti%^`F6qs?0+9lg-mArK2 zHU0z1y($a}FW97Ba#A$nXld#w7VRp%;Ur1kQrfZE-A(^K0&A%v_UL$1O+PsZ?e@@-JMak_^hwk0613^2l_KVK;|#Zgr)>K>+Q8E@gRUx4t4*RtFHBD zDvxHB6D0wN|K(~Jo{Ng31yx7KNBeTlPtrxLMKsn*%|C{c&q`Vg7cHyo; z`@A!}Msx6{+g_9>ssp9eK(&TI^r9`_>5*=E2YF1R@SnT7{%9(WLYH_2tc4rko(sy$ z(gg$2vxEHQr$%|{W2=W-I1*<~ibA}l#SPs`d$#I80fcqb%zb$Vv#;3}#kabG3m>PX zELE0?65kcQKWxZvPY60S)ZoD@N;=b*lvzmI;5y$?v-2_r94+GvP?Fw&?jQX!R_+FH z3IOetX_r!NJ;0!=2}P-AA|qgY890~2jC>~=TOR>;u0RB5{l`pSYYwf1yC$mqJE#Jr zfUM~oEZNygqeIHuGZ0QqNxM}^e6sDN-f=^SS~6dZ5bHB1X3u`#F>ShyO!{M=^1@5r<20B|DX%G%CTzB1KKYtxv zUq57efh*E3K{MBdkv+eE_mX3b)R%b0IPGijd*5bPWo!KUU}M&Am=e};hfJa{F;8D8PWYed|PFMG9@|+gqL@_H7TM3|| znw)X46Ihz98SX=Wv)%xqzbij+U3}0Z$v>E0(oQD^#a^MUG(tHNsPA*6s8?eQ zFA2b{O{~+i_p*#_pLlu?3zJauC3I0L9)3^1+M4VDoZZ!l|MK-4a=&)FC$*zQjTAbZ z`cOZU_o6AeVnXK$X@#~;2AAb^=5j>~K8Z~QM@6R@UxIHj#EoRl z?{RwNaJ9n|wjJDhYaY+0W}ZcNRk(bG22ZWJf}VX|VzK({$Ul)YKrywiFYn?3o6*3K z#Fs}_cf{8kyyeoWc!D91nB0p$FXdGa9Bys$2gbrte@+m+Pf{#C@4L1$*5I#!#quss zLFaf`2AoVnGw5w&95n_`9Pme~JFX7xIr%7yN{K|PM&Bfx_|yP%{4ElL`lVVBygY%2 zNY21TpRdID%*%L)_j{w2{SH77IvVNNA0SOSB_|p}mrUv-cu_DYB6P#Wy;+6jTO=dP zuZ0&AS7=7P2|Z22HS&83tJ(TD{Yze^^iTuMOq@FE+VhZjvy%q+h+z z-2hsJ3eAuNV8z@LqPVGPX3j;)h$%cGwVQ6;rPu=~()n`isP~$#Sw=*1p@u>mO zC^BZ?+LrT46JNN@@MbY+5|FOtcLh-~rG}YQ;47m4VI4Cq*(m|S(Wxf$8Q}e9%#S4_ zOxyR+5UUC8q~S(wOAb8~lgzVXV4k)Q?@l{U#vR%YF@14vn(|E=c+a=04|3t-HM);@Y zx3ON-P5>P0dl2@5vT@@zB`>{_$$(*Jm>U~)jRl1h-0cOU)#7yLDNmjD0& literal 44895 zcmd42WmH^E8!Z?@aEIW~NP^Q4Ab1182?Tey;O;aUBtUR?ch^AU65Im>cWDR?jr;Wb ze&5`=Ywn*rv*ySA=+&prI;T#ZI#o~Yy`Nn_loX_~(84(#51$(1;}PHVz_Eobe#bX}W7uJYA?WE!A$I zU-Nsgi!+J(vJyxza@bcmQh>&sta4+9$mVw(;@>1=vLpq1RC?B;o<{6&5@?zO zxGZ<_c$}_Ds;J->D`bUBQ~9bD?uOcJPsub*%J<=-c@mu#_sou<_b=m1;KG=Wpx_t+5c!Jb-{&d#U&ux%?BfSZMZVIno@Y(D7#64f( zu7nib)Vpgh`^_CK)FGaB+!*u(PBtNOnEp;!fQlfS4wUxZELd;HNSox`wzZHrux$Y? z8{_V-jC#?EbibvqVc%*No`<(;6flpp%e6U)3Ev6SIk@_<%KG3da(k(ixi-y)muaYRNsP3qC} zHRKwl)>RWkyfgaRDw$e8F~+RPJJ=ZB`SnEJz{SIDyq*z(7}h2qNrR?#|E*@rCRL{S zR@rR-itEeEzP=v>PJ0uSan=a_I4wE9+leq04_{b05xwe6ht@?B&i^Dl`sPuvV9I=I z!4x;s?_ozSf_QXa-QzL(4{3te&yth;fIFu7{_F<}92zq}AIg#r8_mIE9R^2kaq}5z z!)x@QNQ zZ|d6b(`81^%YGTyUUdYbf=~>dd_3h+aG04RNY>yF&c zOlo?~pS=F&dkKJuz2-bP8gbrf%w35za761)bVl-kqFDQqebm~kknxcQlt|OA}GoF@ZZr{(#`sMI#c$sP7 zh=OAZ9(GsUJ_rs{b{LqTRjx#^+O2aPU7g3xtM)h$3hvrc-L;ERs8%;m-c<7PZfpCD zH(3N_>Q`T|xqmWG@|o~>7FJn*xc@j_H@j?GIN$cnzo%mcSympKV0~9?~z6h*OSeXw3uZY=T;S604 zz1XF&mV4*Q0K}bHZa2fr zL!o0M@2c#_x2oib+4LCC%y7M|rkefYp3E}zdrk?Af;sr&DFbNNtPsst) zi4{I1^HDls+P{BKlFp|v4{BNY8c~U@74enZ^xx`UD%bxGcV#6bS8C2%(gv1)S27ryF1|l zsH|hhK4=*WJho`_z`s*(i7`Bx56lu@ORrx%^!1KP+4L;WL0NK6e4BReor4rn;Tu~$ zcj0U>{vbTrI&em6eY-N&VK>+8_td&_F9L>rRjXw5KmIv(Zq`2Z`WGTmpu!s25~Ym< z%U@bO>vI4G4xs|8pTWBl>1`7ioFbdG@JG||R##((=DOq-QSrG-S&gw*==8)ub$uIhz-P0?(SX6`1!i`zY@CmxCgZSOaWjEcQE}|`}Wz9T&^v&2W)dTde&!in;1h|WgWu1Zy zlUhreCp@It-7{IbDtG2N`Tbf9BchHxy$Y)oLM?PK<8_rR#z=yR zCe?bl^8G%qUU5w?Udv8v6rP75H0{srr0`#NTbRReA5VEm?JnU;{x4!dkP(=07MtJcY7?#jGe*AT;`&l|h=#Ny-yJ{*DbE6J*atJ?Nx( zQV*tfa@td^Df8iwBT(pUIFL)j4=_`Ea&Uw$%2#&PX)s0_-Mwk4Nc3)W zR^wp9*NF!KPq@D4Zw%6dS(rne3U3lyesEF}=#^cYBr`Bg^O3H%ul32JRYQ zto=#@)DlB)Q&7oQern<(t?~d|71B77>gwv8<=i@_UwZpXawNE&$O>OTs`lSkd=1ie zRpu+I5(+rHenQ#6>d$w}CL0e2+(iX-!s_n{+P-FV&jePGl9n=ha5JC&Mn4(X_RVCB z*>gaw=VIAr@|fbZbteQj@vHiwI|3pdfA9341ZFoj}qD-hZ z1<3p{vwF;E`2NIkqqFz4M1<*Z%&SM+tvm8j|2WC*o_y`LrJyTVQce@YjI9pmFGc55 zyPHgd|85x3&B&G;?+G^Kb=RZ#6K>OO9x%EnZM$rv>g{$WruD!B#;$}ya7CCv9A zw~QtmP7di#-csf~rgsnD-`&pv0cz^i7^zRw-OO7H5uW8;3+~UB1b1XQ^64$o6lva7 zz>cQxj^5*%={L8Gcf~YF%agt#b}T7(CC~Uo@2o$(&oQ-czmc!KG%$wRe`r4`UfsOg zrm{9^M$r^+tjS}?wRwsP+CBVUrv$+2yRPU;PzM_2<>k%6u|bi#dMCZUKE#7*s@1;z zco(94XHwDb5NT+0Y}2n>`SYsyZtzS`OarPYaR;X8@-7R)aO!k<^kH|DvoN0UXc4Xm z;!K+|@4QUoU&o8|Pd?#nzgdhm6taG9+?f9yu}|%O1bwBg(s>K3ht4lKw+x*6D(?+- z*r_^q%^_9Wj5+8UG}$d{e1m@mUH&dX7%lQXRnbROc7XOfh#Cxh$j-w%MsA0yG+xK- ze?PfUG})W4FvCvPSAFK;$no;ExET%6l@;Ly(@1Yf1 z_d$nRAy7KTL9(5fpp{G53K_gHPHx)OTG1850(>)93r9ZlY&9b#6uzXi^4ZDKp7}Z<;hxJ9NN4GBcbAy*7z;cwFC$3e9#^#2ML4&kd7))VNar4~K09GZ ze_!P;c9b+#pz`V&^Gi`tDDLQ=K{f4V*)OOxO`if7XxwA6@(*}@qdP|kDu&eCIAu|3 z+<);*p1%)XK_mj58L3jD)}eQ3qS9P{e%3kqD}&Qc8%$E6-`4bab9=rGGlVNKI|hX% zC8`k&|Hw6{by(;iw11Aml>cfvm+PVmATr0jp? zoIZNSGgf4?_0#~Y<(Ix3fBRp=b`+6*o*|%>ffy?G0aPXfH5?(n1D{(0zn6rrWH}Cr zi-$eVNnBf9u8}j{-Qb0mEgX<^)qvqqVQJjyXJsO)>PHM4sWQT^h(4W6cwPRh#lcxh zFTMHS1hm%kkkWbmDGMN<=Uzfk1vQp;y;YE4uO8N4o;6u}EE4GD&z^493*fYimJZ?! z9WkEDmvlC0>sxz4c~LNeSB#j9^HAsi;@&4QF~|T&k}S@j-MEmKd3>_@3Eof;nDHtV z@mul0#S@p6dZmMJKs*_1C$m!1srmBtboMFC@PY7t7Pw_+f5uOAEfB*2ytP@Rx_EdA z^F?|05rNTLp6Vxr9h|$E+dqR4Gk+SWxC$#fE02*Po_9_Mp>S+pIH961Y1I2M{cb=y zcx)hFUmG)C1_n;hjN)<4r+=%DB@CN|COqtCd8`@N#05PLGbZ=>YK8GLcD-VJ(YujSitbNO zDPi6jaD?~3hK(@?5G523)1fsH7>Gvy6_0W(BnKel*|+XGGqn0iu@dE9t+jJ)rMux7 zlB%M&Ru4E&Gs%DN{pghFs}@Ndy2X~W(%`Y~OHAc^8JDUOs3fefhOqI|YNpoj$*Z}g z#dx~#bE$eoaw;MmP$D8AAXqN_Wa6=1px#Ro={~~8i1f@Yq~fgefWEo3r3&i>(i;zZ z$Lu{JHRZB7^xUK5#}7{e-`gz(i$nSfg}_H>iNJRQ>U6tq9N-#-;|PbCjz9=9^v=n{ z!Jf`|rda%lkgo7+{pXD|7e?f=D`aC6H;fXKMVxc(!w4Ax`<9H@*m&!W?f?=FlQ-F( zTWE3lBm%CCAvjcQ#V6xa1=7$BP8u47)mArgN5|R~*s!jE#YE;0fRLBb=~_oBpA#)7 zXJpsLqR4fgpUb-tzof8M-@xD9Y`QjRoA$I%zuZ8FN7|8b3^a5ZaQfcbMtI?#EZ(NL z8riCDi#WGUuarSdV{(xED%8~K zi0#PaBKe@kqWnz^+UBiqO8hg!LmSYXiJnBCcVGnYOklDIf~IF3YY9!LH=I0!p*z2bQe3);Lk~umj8j{oT2!)^DSCP616X$;(vVa(b!r`V^7DZ}ycvpAhh3S5zG=btb0sL#vmvV4v>Za75 zIygs4yoqC@@cnV5YKH@1v#Y^HP8er#-Ht;`pa)S(6SAwzkXjL%NUq{Mi)MCce0!5o zC;tcB=H73-e|CRnSTJm{-|8~6Jpii$sFSXChMPd^+zt-;4IG|>Q-L7@f`0p{UB+^k*WJ`59UEwZP5bD%}pZ4S` z$Lc-beZ`{Ze-7U~)*aa&*KLv*j4?S^*&rKJXVHRKrLOM35w>2J)id0U`eDN!W>;Sv zDe_@AipcWh1%<8n<$bm4MKHtUgDM%DJ@I^Xhj8nwc_4po<>BCMp%|)pV)WaC>vv+uB!PMV_U@>!HkRol0Qg``^*6e*8v?ln4^5yP+fGi_nXlRK z@zk-btloKNVF7$U@JG+nJ*uJhYy}YF&SkCt?U`T1-kt${uo>=duMug?U*S%mI6pkQ zwq(i)t<2uP#WOKP?;|TXgj`e*jLnKaafoPUDWMc3`=d>vz%eycsSM40O*$J;DGP9pU9kU|6(;xTzCIA)vq-|ei4fuY)Vfw zbR8^do)ygyfH+cbQ9G2T@Pn4#8s0uf)YY7CSFSmhQ~2kMvHxyNa(=vffDF#_{ytnT zx|Qi9pI3RBz-Vk|xa*Q${b1+Lka=4wq%&Oe*~L>)F9O5F8;!}H2Lt5fPUI&uZ`^G$ z8>R4EPvsXfM?AkB!F8mcGf&>-^-9>v7jx!*qPK_qsLw2kfXY5wC}NZrBip&}-Le$T zLHzCjfJiC2ybTNS=~rZm;9K-Aeo{wrZaf&_D}bBw^9~hXp+O|O*_P5YsX^eZ8RPy4 ztu+9wq;fffq2|6+TxS@F}j81)QxD%__I7r{%HofR>QBR!pWjCAuR56;8;{$iX5{v5?&i|{qJ>P_ zN#`reI)4UB7S4#qe)pesHsfy-EO<$B3Vs-RG)IpAW7-{mdw%NfhV3OE$!p6%&I$R_ zm%Bc)RW-c2v!F6Qxn60V-L8EBxcamTV>lno%ecP>T`1xAl~B_3Pq+s#G`RQhBw9T% ztz53p-G+9nEL}~PG+de7ca^?zu@gA>aDS` zY3CgI%ooarT{&h%n3zc|vygB}#oY1NpgjqUMhF08SA2JZi$>0J7EZ`n#q+MPJeR!* z7?vbh$hz#S<+nZNoeg^;s?)(vmTa*{&Y7DN`9~)Z#w^+S^DS3u%kvx8RbR~0sRP8R z$2xs2Bc2nA;N+O&0iP-KG&w}WcITT{8s@2EDc98dU9z>F%v!2!*d|F9;-#p zq*ru3>$Vyk@%Uk83ES^l8ztu(K&((jf7}M3XW5JWk;a8XR*Zslajt3CsrDI=(=jE6 znyu$H7PjqguKV78_g$-zLLE(qoN@v*?-|(h|aQ4P^Y@j2!>2-A$m#bl_+d1nqPs{9S3&Y56-3rpmH`LmR zF)8-bGQNueknIn{h?+-Cgwk0vP;7QDfmuab4Rzr)L8RddI>*kgh5r_vMI|EWi@UzSm~6M%fWX7`x=wKv{9=}hLX z6^0KXs{Ul1WpMjRZ|j|ikm+HH%!doQcy-QF$72c%CssAiNuhvxbwQ)LG&jGqY14oE z-X3tlzVd2>$O%cc%$5k_cb^0ve-2(wMKtTf07ajK;-`xj9+Q!DqYzUZFO;SXOkegqWf ze6;!Ml z5pEsBX9dh15Gq~IaX+%qWArWElqUWFs(KgrUhtk@MH!&3ek3;NSL4Mq85w{_AD&lT zGIrvl zE`fKIlzBn6o*0CDXYX$#%RD{M=#r?Azil`nufJ*wB65hrD&BqEBAZ{1GqW zQg)o9H2V8#DvHO3CzMD@0g3DI?V|HAWJO+v#lhH5+t9V#8~J>6K|oSPIZVizaH1vy z+~mB7V5yctSH900%k*UXq$g^4#p4$1FaPWHSUs;3hj?IMk)?OR9@ z+KcGkagg545~mw7xAcA=>L_pr%=Ftkv83*ms|kDMgl%y4F~(Ust}~7;mFLz+^Xjf| z^a%n8x~#6?v<7!(jn$*z+VA?x+Ai*Du(MC59QGPVjE|nrSghFGo!Q?-6ikNCtQYbO z43`!V0qG~{;X;Q6u(Ynapq%o#WMi}!FWo${k?>(!i{i&1ya%OLecVb0WZ>MXGgUqbi?Iei0j%Kl0~$NB0iPOWGMDqNVVyz4_$ z)G4p|%6snn0;#<<;SILsV1)Q6i~utJ0yiPo3570*@~+65y-gstGgjJBV|;hdGNy(qzOGHo6n%Qh1B8Z{Nm zCs}q*8-m}w?_=xFEipMiKddpmWao`svw`@LhMy#0Z%4%fWuHYnj0TI@H+{WG&7bmo z4YPYZ1YL3~GL4>#X`>1nymD_mJkA679Cr33tMA?b^5gjhD%g>$$^)kk9`$XrY(h56 z8rS#k2tw|Xye}S}J#EeJUtVEv zf1DG`o4pNQEpRoE_WH>D>JN@NqGtwGj!DWlr&Zx!O~mvh{@ESgzn2>v(`$97M0Z)10=$Lm|H&@^5kI|W-N!F$HD2JZN#_oB?o$WEBHP1> z`ITkk_RO^7k8KL7lFHRB$Ive`<2$C`Gv-Q)2NmKEOwGskniq=51GxjjoP-Uk)2_~4 zIf|0Jwduw!*YBEsDATQuU5{FssP%J_)Xc0nXBJ(0cSHE+?_IW+ZJj#OpETg`lUvwt z_c{vxI)tOShQC~k%>gw1OhQ7dM8ND~hG5#8;r`UlyYVbc(6}Y;e&iyjy3{CRP~GD$ z7yZTf?y#vpkiCFYf6hmHcX~X>j7v zKadD+fw!@|gh>u_zh(`-ZKaz|?o;P9g3%K}DJPUF*@=hApW;)X< zQ&9oWU)@$GGHs-zGTvMwLHhmQ3o;VeUlfkPZzU1R?~-?~;xKQ|1d;1;G?-Rv9Q~19Ai95Tmcuda_^}wAj z`0YD#{cX60+jnAFbFPZQ5rHcfj`2U~wf{BZiNa;%f2Civ|M$}G|7TTEEKoytb{JKI zacTPo21fjagoL17!MOQ^1O)G1u3)hE7yS4fl_FWD0EU7>xJvzria9v8eMOGasjj$y zk=9bn5n$_I?#PS{^8KTK=8nt;a?G( zNBn=QEBd`OA7IeYeiE8O#;fCH%}7Ej-L+W-HzXR#(Y3>{{ML%q#l#Lm577Dfe%Q{nf-wk%(V_N$die}`o{G#>dprIgCd+) z#00-r{R&AyKtQU18}su`*URRl$V*?n*{B4Y*idiu0lFA~4bH{51yk1wI33nN z4R>P^{nJJkV{+Jmnq?{@QS7#7mlr__JIxlh4=0Mh%V@fXrNtg{uDN#nDPo@Qrg_+y@mR+(<{D6t+(FHvFmrHK<8!qgNR z9|Qe`J2u+XC|(w|^M%>fvUaQ;6e=MOET+D#`(ZwM013bqlyZZ2!_KCu-6tzH9ICN3 z3CcF4&CZ%%Gd(_xg|5<}wBI~>Q2NeDRIF$S^| z7QVy~Cy3uGlQDZu>P$ovJc91zgo`V&()L;b_P2Q*TCF<8OIh}byjXd{`W#Q)2wzSQ zDs2f)tu3JGhDEJxz1PIt28u531fKK^45L-V>g8&9Oau3q`#~blx8h$2$6A6dk0c51 z*hGXsP9;gxanxw(bw;xgGUt}3j>#P)^XYjUMNHVUdK?h3#t4R%A158}hDj4$ z7eo6rrNr%Tomg8hG7}@g4*aTozW~z^L*CU zlo5IpgQFVw1#Ix~gSuaP6YzGXq3FPPJpIy!N+r zxNoS@w}g6mD+cTyi|kz$1O^ezYbhj_dCoTROY1KkrjDZ>Sb z^}C73yk|0-e(P^4qPsG+PFjVMjKc}pej<6zS)wOR&+SX7wI+#!nNeC|HD8f#1SIzF z#gEswp_<>(W83cE*HO<&9<4LzST|dol&o*0-Rd-=$qQ|@3Dh=3r@3!zXzu}I0_;JQV zlSO%IFRYVt2&Tn-e{*k(zo%mXhL{>QQS8>ej%D53MyzMs$5l&~(`_%0T z)ti_k{fG{}*1WD2K)%U>5tU8?1 zH%-U(>5A-~SUWw1PoG-c4mEyY3GkP*lvYzqPOcrIy7auK`hqBHgQ%7^ffM8{ZB!bw z6g6H%^YO!5>+O7vae?YEtuw@Fu+oq&o}?VD16q~g4VW*{WM*HmmS#$fngyj5<4jy2 zhH#d%52VUU9j%VIwNQkb+&(3nBFN>?7)3JDHYd6EQ;8MzroZAC{MQ0cbnO6`juMe|l%aYKKyg!um9DK0E7&I>HC;>|C{gni<7J4k%g z6gnR_urw4?(vRbXM=fKJjGKh0CvuTd)(x`j%z7pl_FutQ<|ZJb5-Hk3zgqel=XWs{ zBK~}DJk;$cNK+6}kWCNr+xGoJKTzk<=G*Zp6B&TA13)7e*tMM4&f3)xrG zUcx4{bbe`Xb7<*z9uIyRYfFZ|?PAS-vZ19j&@pHHl+6PH%(!+6NsW?nXx}UfP2XR6 zYn6xFMNIt+XSe9*8DUKlJ(3rlV5uroEs^!Tzl{4QbN2Lb+7%ChKrTnwyTV#p?AF?~ z0k#1L=phH_DiX3{luny>DVMz+zxQ3^3knMShK7gnT+nHy4HPIb7k-k=%h_ImclwBOjC(=A*kbK)XL9 zh!mfx|K45fjZSVp95qb-E>~xv5b}C^goqR)d|#S5K$W3FQl|S+-+WJDGjlipfyGCM zl-pTdk9)GlMz&1_QMM+z1>@Sq(8$57;alUXj`}Kv^7f@cL2`%-nr>fK8T}zo2SG9< zQ)`trJ{;KYp=4LAT$J5At2gf(hl1um#KC7) z|DI^+J9O!pe%n7Pmc^sm35pq-8O8Fvi9mY!xugmoEIVODVW89%=3V3kCsB&ow#k=b zZDCDP$v*q)^FMyE?YCPI&gm5uEM8X!bR~@r>i|L)jl>y@0+qXp5H`-c^LMf-s_MMF zf4gg-_!knulbu4u>8+igZ!{VYPNCbY`rPH=C(ILQ0D0!x$|YzLTVwe_zgF?84%h_B z^yDoIwha^1H1O9a-l-Ob;xRoUGS71x90f7nM4_o~&S@W;s4}hwDM(rQ2x@auTpXRg z!+HJOGhM08#joYPn`W_tlN^MC6W($ib%0JdOIUcDxFZm_03ibE4Eck#Ms+_yf8-Ca zNcaV`(d`P$003nR_`ZY+SrIo*K&jiTrhVwt+SjZ{`{g&yOp_?@-PyY?%1itD`iA^Z zp zhJ*h-L0Z_OVd<5>PbAEeSnP=4pG5*!3_x)MJbS#|j-fih!50g2gMZH8Sd>uxmHz^M zfY1MGQ<10>QTTzYatY`gWWo~*pXi10(V2MP-18NgV8Q(^bSXeYMKPISRkZ*HrWV;h zF8}es4E283fghPG!_6`8*{vy+Nur*RBREvzk1_PA2P$Xs#8LjCOuNc(r_3 zDz5SFh~hup4u zH8H4b_My~dR{Ny>f2)H+*oTCTjm?A^Qj+6Grdh3rr@E`(>4(H!F7Sh?dw9G`E2!gN zV0rf_u4{9#*e1R3;fEoHC@PH(DJdyzz18h-#2<}DVl>%J!o-ADPhY=3(QJ5l7-lFf zEqzzRudJ;6cd4;r<+b%h*2SRHMjs)lpdy+NhP3Lg>khu zC7@{RDXF`5-PoxhmQ0?vfPC41OB6!p^YZ^7eQZNATK$M>>w#k5(KQ{P>W2nik6l&>G`FPvoPybV zB?|^r8Fu>QB4-E`Rendw3X#KD64$JI%{&xw;g%gzZ{^#=Bj1ThgJ7Q@ITMQ$&~Iv* zy^54A_bd<*S4XZ6O*w-tHA9z6Sl5Kcl*SEkpq*CCWfMPW8Ncfy)qFaEf3YHE>YU6Jc3FREh<4&b+; zgNToWqEcrxophh+6u*0{GMuYG>tUWeaxcfXbP{wgEQ$nT0EK@d?AYeyDaieZ#P1GD zd>1GCxR~XAebh6O#KPgcBZEoyk#W-IQxqS+sAe3J4{LD(A}^5yb5)=%ZU7+;8}yaJ zK#-idLGWq!be?3%?(So9Ipap^=r-K^ze@WyeN}_I2=^LjAIy*C1gtw%=-jT0nlwnUxQTUMD~4W4Sl>?{i}eYg%rYT`LXZ z)tPbhM7{^R=KfgBopjY*_=v%9#lf+R3~tbBL9+_knC2_p4JdAPz;pMkH(;dR?OCxZJW4-P^ZW0U)t|2P5064>?|+LRJ>zarz1J@gG`4d_ zS5ZkcKAW<4L<e_95> zy@cBhlfvR~AJ*9))e+*Eb~R@I+23Xq9@y&3-a}Q9?GHLAeyb&^5J@z}tW4L+UttL| z_*x${#TCpvZyK7u$47xbmUY)#rw{|(wqS4{t z;D8yjv$NmTbmX=M;yxIS3Iw8jY$u(%{qhxIAlhU1vtT#)~C-= zo#eMqzXUQ=?zESC5dB4IdJ%20_EuGc5BwIz$MAc}FbWYxrc#9gEvG^e&Ce9B*Cuqn zho}x$XUc8!CWxCytnf`S-^KRPwpUFMP_d5tr@f7Lzg+WD&;6$TCDQHVxu*4|)~D_O zlgo^>YV>DY6!Zp7p2e{Oiw1}6UkEC3n1>@^d>2CNZAKhW(jp5xS*3VP0P6$%^T*z` z=&+zKt;M?2qE)-)@U|JjS)PnA0w&2((Ah0tov779r>Izoh5+B$h)5?eK0c8R!gz|6 zid(Gq82>if@{6Ri?0cygK;+uyc^H9rVv{dop+Z&e_8}a(rZSDzC39ha%~Y9#>s_G- za$#$EKHvK6wbAx;l5;*w4fTp;N=lVh!#fhxzB`t7@f$hoaY|}5WpK0ARM?|$nY0ZR zL|Fl16B#ye+ndnWYjqay)EJFlQWTC}N}?iGy_=aW50z-F=jkm<#y;~Q?0DA~D!Sxu z>qr`jaFjrO+(#p`DZa6_g=t}7;hN?5%HJaMt=XN)&?|<-cwK4G=9J*;kv+VZ56(Rs z2uHnP76h!xvum{{3&783fN9cL2rm{xywADyL!kdRd{}N?D_pe_`)NLrc^BK{3bSDm z98ICxaUp0~t&8YRsL+#IOw6P}d(m%A-a|ptEOF-NFfU4X+bH)_BH2t5&i&{}B8+L` zj~)_HjO;<#hCR$AJ1Q<~&8))U-Sd+n`r`6$6l&3{H*M|V*XF{n$5M)_GkiT|)*Ky9 zqbG)Ky%$4uetvgG1(U!-3Vf=Sw*%fN9worz)YE~`XlI=q-^04u%7lua+s^s4?6Opv zbR=(sc~Sje<(HN~^%?;YO!K5GrJN5=ZCkklEHLtvjkki$8 zFWLiq{!a?6%0B0D5cpTYCNAGD?srSCAV0tTZ)R4%vjS=u$BLHG zmpfck#e+zV`_~^~%%d}iSG4g;kfZ__&F%@-`?-Q@F0qfL)f*T80QJN#?a}oSgG^;x zoNPw=Fp&ipfgAB0a*c{GUj1zG!IZH_So^G2f7Pn~S~#`Tl@>CSX6qgFwr(4UH{fX? ze)z^Ba}vgrnrzYOBNm?1A*}HEUk0)BTz|ElC^LL>z3fnNmDgn6_G15ay}z?T)A9C~ zTV|^d#-t{5gn(kQ_zYQ+l7ed)oCKtFpk!0Pm+uu3y1Z!W>+k;jO`~vIyYtIbC^{Vb zs!7KNZUvOA>iv^KfdgNF?f*(E{%805|DzO0|NW?>_st2RX>e@*pTf@s92!2hcNOp9 zi?7O0z)yid5XoN#E;JgV|EnqaIb;8Q!v98+0z@(`wz+-uhJnHD@Auzoeu!?Yud}ka z_Z9vUrlViY9sE?H;XR`sAQSWbIm!g>N9OBo(PZ?T8mUJJn_4Ng)5&(%uV47Y zcX5mv7SO77;*5F7V;j?C>$c9<`^nd&(%Ltg@wOh z?xwb#F8U3(qu(>|!GuI_qjK4acvOziAEh`x$y^x-&SXNIFRkHyrVUK0{R z0mT>w&j4K!G0(j5DYz1m;OKqWIdeF-9m;eD^Kj7KK8cL!pv$WFjf(OJH{G%a9__#F zv&&CNWQQo0g)Be(JMhRwK}_drQ&@$b$<0M!GFNfL2MDxbiG1k;dq0rS5|tyd2x_k{w)n_z0p4rHAvAB%39|gB`ah4L`+s{ZS;Mmt4l)` zDXCeZADTzper4v$7pILcJUagZG1YftGBQ7{EKg-gzvVx>ykJQ;*1b~`3u}YtjqxDG z{HP_&)72J6ALy=`-!X=|X>>XDVTCkt)t?PkXUs44h6d4tf%U*&%hwEv&13nih_V}j zwhXheegtR{E$-?>z`FioyT)**l=^xEz=E7hd7;yie&&D9B`!f*&(Rj0?1ERn^;JgV zyZa|6O=rCOxa9M!R87Ww{!j<^2POB$lPM}iBF^-4l=q^J+vEtqzrDKnD526_S)S&G68{?o`ijg|u?}h|i|% zAd43J_uaR)sW?aR)3v~DBpyw1#rD{Ho+bMzT67+~7e6#I2jQSB%d*JN)EJQ6xY%25 z%DelHY1$2_liktJ9W0Yfu!9vn#Wj2|J(_P#f1qPy(A@y|Lt991`sjPu;4jBHhO9Eg zKIYoKV7@*WJZ#;pWPDV_*w9UJ%frn$bkJYE+}B{=f3Y@d2W(tQ)tB>3)M{qpTF34fK*FRWEo)=w-OSoVF7V6=nw8+093p}u*ZIjICh;_2Ot)6o4 zA!UQ(%3vqBeQe`-4Q*?yA=hQS=+dh#0epvvd+s-tCjes9B(%nJ+@R4d_%tQPE<8_g zr4}@iljKs#Le>&AYpgIO*1ci}Tz`m)^0t=_#1WYP=XO;xLk>+j&9WXlt+@>~#1$SX zBNXd+n-#AM06L|69~1!mmfQfJy|9#f-BMwCtuP$7TrLP zg2gS(24I6?T*nBm=MxR>vK{fzy!Ut{JUOdm>S` z_i*&LWb04+{w$Z*w9-*O5Q>ir;VMBQwH17XU_zQmdKjF;e-)Qx_t-JZ6~e+7!fsnT z45Xj~lCHY!e~;TX+qu)*aq!zw`)*yss%->U1>c9&Qa23|oAvEUiH4b}*SHiUB(*7|JYBjG&hUCOZ=>RT z+*~Iak%IqAq&%dp_Tliai^+r5YC|caWzlXVL`4%rq?d*K;7m_e^eEO^I8g#^A&!f4 zl{SbMf1-E||4_(PpgG#>?TrSBJ%1O}XL~+-#9ta$cl+Y=E4zKevbxW_;b&k=9@6+n ziSM#qY&V4!(K;+7TG2%Gv(v~qQj@gkZpr4ES6B8HVb!4|X*lk3V?iYP z_t%MO5XM4EN%$fQZ2cZhx+%qN*O0Kt}uY#7~)b3~pctGHe|CrNZ4HN>`5!4tZ zxf@jz7o@-Q(ak;vy$ij%3Y8a;Avn#DmNEpx1oO<$f53r-B1CJeZH=$vUB7`o?z#ju zo-Z*$Xj?7Nz4u)&boTmQF@lPt38X&@7xFz!}0RC_>`BTF~0*%cs$0=dk~&{j9*3qoys5h zRpP^$k8bw((6BUU>=pLt7|T#{4@di!GZ|R!F$%$5Tu|!$l8j?W33!ScM$}nF91ge^Z?*3W z+y7o@8vBJu3{N0CFt=Pj=Mb(W2@@>J&4a?)hS=`Z~`d(WJeBymqc z^-6gt8WCQEM9sX*u-J&tG*9T@suBSM*K)WlOZ0}4rAQHAHu&#R!{>5T!Xf68O2p3) zp9n^7z=-xe#zm$+a=Wk;WXS})l})#bdl4X(qY8IRz$~k$Xl#r!Js#5F6h^Z*Ez7r7 z1kFNtFV^D^9xpYM+j#vTu{l*!)r|~RjE7hmldAfcP@FVD%$az&6q2Bdttpq1g-oP_ zcs05#Hz;YAD=`2&JwJi!OW9X5L=T@ZD$2CiJo~);DhTppg7bE6k20DTzom~5Y0J)c zOVR5K?x3Ct6NS1Ty9hf0Jpe-iwc7_zlhVIkmeY*cP=Wa9>p^xoradUN@*$Ob;z61o znu=(%utws#z`j9mj>ymOm4vgPMD#M*j*oA-Yt+_rC;z&Ka(@3(39?+^|8v4}wJ_cd z^(KbZ(`7<)3BtR%vtsAVQO(IZ1$s=xIrKMH|jCLku z)qSG^L6oV+Mmq51=*W<@1sl7Z75IJdaB&j}aBzVTf*nhvm>yoaDgFqy@A(gRV7Ec3)=Bvj+GXxRt_UZ@9Uu2 z^7gG)5d%}CdjD{%w7&@3GLE%yaA$`?&;X{-d_R#6jUw8E4r0s zCU`XtJwcLlv-@gSygjE4OifFrZdcemEU(bA?yVCN(xR5m|Mj)Bc48Gdo@f`ae%fzo4K3a_?##YFQ78s*8D)VoCm zdK{pMX+8tY8&K60{O7`JhBE>>3Ed=$Z#QWuguQA)HFp%X?v}I}o0fV$B6Ysw5s9USsU~)fP#Cc(OJ02Atgx$+C^WJY-)JCDKbfVET zH7|2}8Bxk_p6k#fq-Xh;0*p)e4##P+)u(shyU3N>$ffq5jRYiy@PA1^8mh{BLhwwN z%KqlX*HwZrTTPDMq?;iTRZP^Cv#YH7kof^|PfbC3_I=3eDHCydH|9mmUn4TUG1yPm znH->;)2EK(bZf;xY%3fF(_CMXe}K$G9c@I-P!J*puIL?W%rv}nP(sBSNfI?exx3{aT#Cl zwPe8YS|7#%w78J(}$k-RA2s7D()7UtM2*mt)ngN%5e{kwJEn${=*n4&H)_t z&<2UZC7Bo^FnmGyTmku8Y&BNqDtbS`sOHNskx2J2lhDV$i4Sql{d-m$$C1jsW`sHj zJ(pR#$H6a@)I1nttzz+i#@*fxKWA>tSVN=Xb2Da2i|xy}S)abArL99P8@&*{H`efg zC>dJ*AR2V&@SI_E#7bRlPuFw3Z~Yhx_3W$mYFL_%Yod;GHd?&}wcV~e!{OAC19h_d zgv6n>XZ*RtKE`}~#YmvpNX7c?VDwp1)x(&TPL>~48eQeN`V-WAxKnkX>g+NXQj|cN z+N%WFB{EpRO}6snbO*Xr$nJ*Y<$0-Y&a0}UQZp5fPjwKEOgc2j(Y_6dNrm_v$-m7T z>LxVLq^b~RsbYBk{-79=RD|Rqw1^roavC%QDE5Cy$H%UF2Xj=3o-z-`H(DP2`-{KR zCh!B^&*>i$Eg$ncfr}Q=RwG!|m9C+*!t-m$SC(iYKBN8Ggx$K7Uh50R$Q;57QgJN~ zppjSV?G5wTIWIKb)US&Eij}V;I83WPAFi5a`uk>Hoo)}AKYJakN>G7t_yc7@0u91< zA%InOH}qW(*TnG?aDH`%3o)DUJI7gb`HHWV@>V1x`Xl9|W?Q-FgLA$f#k%j&z&fMs z{P^Q9JX`KkedzdqU+KIZvqN_65)hJnbf}H3bW>7Ot5;xD!A(k|_t}8hCvp_~(Rvn= zBX}jFBQ)vUm9~3$b@n4>lE1QfpGbRb0T3eqW1o!d?ryg zvDeRga~=a$A@tW9%)q^!oBQ9U6uz73rs`2-8y}d1K39U54E3ZYE~T_ya>)+uIne-j z;|E_IK`*3Rj(`wmD``Jsegi|L~k9_MUjUIoOEds7_!^<9Cx2;qlH4Z#ED%oSOGM5qM zcH*bX!bG@K{k2DAHn+)B{d0raZ#`wZdxB<&3$Xgq{z4}k+iuan>vz;2lT;`Le+M+0 zavAf3bbiQNBh~!xMY<33KES8Ld_@C1__SSa(4X&ZKcV7a{9W>A^}Y^zxG_#^3sqMb zUw2v|f%_7c*zx2ST(e84Yp-2Jp!e{kJVf->5>YVk&e!$a2Ey${1|E(|3Q9~^4+_;w z*vutI-w0|?48n}^ByJxR2p+zzMB9PRuMR9zz+Z*K0(L6|u{Xo|6S-UJq2*v1@#Dj+ z2JBl>y)44@)(ZLghiNG)!oSVRIY+-Mf1i)yg@dK3*cWsIx+6!j5Dy354Wo(9J6rS5 z+Kq)=%g`q&34EnY1(HKLRwE3+0L@PvzE;<0vQjQ`@6{+IQ-#QTSiX22V*=MpL18bg zkv2F(T}uZ9jc}g@0s3V%TE8%~KGCn~B}p4;KRtNQb4j`O`$*w;%{~0Gwl(Jni21$y zBm9gqfVW!MyrnVV!)}aG;7#^{ML9Y(IAmVnOIeYg932`&!;&=}uIHDGA&2756W(w&>CJlE5($Ii!yZ7$W)9zj*Dt zcbZoBpB~SCu$!YMl$%w*f5vq%;B*@vyvAw&K@&1h-CsCF1os1yWpH0qOcJS|A^SrR zfTaF6GK9xu3|ZGU5or$?X^9v+mzo-lNG zZt8A?cwdWFKjG`%T}#|_58=G1#)ons0udLsAQzzV8bLm48$o~c?N~VQ%$uuP*lElC z*TQj}hjb90Xyk{Yl`}mXB zf67qckN@pZn>W#Y0LDmU_dI*p1ND=FhA|lyLDVNpOV}QKk) z)C}B17)x4OzK9&vqn95QzPw}RQ7GS>IdHG`9J?xg=*3e)RmeOPZkFZ{%VSY`Nvof% zNZwwjkYMD?6ENy<9iRej>r55xhYGt%3cGQ(_L?0R?WP&HY11tX zyn5)hSQoLWk=LB=I45G(Z6!V78iFWX$&K>Y_deKM_a2^UG4p(Nej*4z{l(aXA2!Ct z$PC{q$DWd>3n-wN%%t}Z(vRZ-I)dvLa6basz4q>9?4GKy81U|;5lu1IxnR{~-qZL* z81gVdkt(OX?uZZX6nwiCOFdvgl+8k6t+bnMsP%U}E7;Swy zo~G=HBzkDZszJJx2t|t$FBV5pfc$GdpwSAFk75EbtR$s#SyS{yqC*7wBwuvJ^|WUM zVMme>T3m1_W4I^QPvt$gMFjdn>x6W!fhD>f@M+!&i+%ee2R z85Tx%MtryWn+L*Pr%P-AZjofT@B_rFgUEGDzsc7DZ}7}9avm&q&uWGB4?asu4hN{6 zL$|JQ`mK$*YirzixGvy6d9*ejl1QN-FexKoo!*dVVuRW4fau#7f29UjJ1mQ6REhgG z`A<7i_-tFY(O$>WH5W@ko)kPr=fif5!$cR_L;*6>^(GVTXSuc&$h-Nll^n_TNIxz) zJzhP-n1w&Am3rZo>&blDuZj3k%?`sm^jEZS+`>d>Emc*?E>H{>#0tB0r<~rsaV!;0 zc#aB6yA`zX^n*uR=&!Ku(}E2>>!$uJl?%;zeiN>#iaHpM&k0}6Q%J#CjFOH}(kWP! zwZToD{D!E#A!v~9R|PC+A;33gR#e%j(~)vwo*WZd;HG!Ocw6>tn2!oi~}@{kmd_18!vRSu09dkK={N8lBf4(Gn0M0R4Pc zPIv`F+#gIBoS`XAfLn8xxe+lr*GK7VA`S4{z=Lf&h%MK6Rr-k-tsX|8t?HbjrT2rf!6!bChbuXJg8`_I~Cw{f*O)>lD41 zI)zd8DfQS+$ElU00Qsm@n~#4j`)>^Sr_ZMH;K5qO=5+n7{R!9yw=t~w9;k=%C*Zau zjWZ$omAK&qU4H8S=!evrw;FcZ>S&JR8@zjT-Dgp&(kF`S^BxOou?{q4D^RDqW-vHp z(%SKn$ASZAQspsnC8e;F%^(Hl#<>lp7kmD2; zL3Xm+P?~4{RzNmF!GwAW|IsV_iAL@vLeqN33)^=?giRCf0{h$XLtd<(buCV3wO~?S z?uYUD4zTzf(BYxC>*G&}{*q zOV%9kM<%X~_H2e+H2|-$>s~8}oyV`mmZbVN(#t;WxbQmPjA&=_yTU%r!fvdL&*sLw z;$Qz69kQRnE>B(vZA1>}EYd}5aOK9a#VeB{G%V4ub+ZFvEbWzb5oWP2Ht(Vl5pnyW zn)8hIByl4+Zw%q&l`Mn{vGPbQ;jwNNHp-vRB?~$=xDyKQzJxQI5JY8q8#y^5NQ^vU zK2;Ou9N3yy*q@4lT@G=HPxT}Z7r$vSJK{&V+wzFsksGcjo|-#(D+?%vuN3}A$C$ls zP#my1jr7j16-^}~tV5`Ku0yqyjMP?K>(nF@+=}hsot)XS2Y;T#THVb6n>G2nUX&VI zhqRu>grcr>&@LUB40&!%lvNG?1i}2vz$%#&axl|73MMlKr$mYzzq)4(e)SPyq^zqJQ7{00s4mn~sG}8Rpg{pKGirN95n= zANbPaA ztU<~szH)-fN_bn|>0l|&QRQKn><N5ReZV09r+2JYI9lSHS%-ahNnZWu^*oA z)hKTxiw?vvis}Pa;rH8()}zISEnj2M`2E!~`wOWs z0}YpKJU}E~4w3%- z+hI1{D_0D+(%g9wc&pDM=^;+R5+lO|>StAn-bE=8FO;kRGz{UFIUN1?cP(>`Hc=S-z|it%T#Dq28N!@#9*m) zWtOTSTQbhp+3=~h(I|cPf-YqEn~ZRjHjC4W;mwL8Nj`WJmDa?-GeH1dxro5CH(r6V z#+yyCO19&L;U z6R5%5m#YV0h`_0?5>1TqL$QC0?sD_TltH@;dA_@~4G`_PpM#B5Hx~YgG&p>QM=A<_ z0Ef-L${BZSBY+>zC?9h^or&A)WA1!MU3rITTZ|QEYKYM+<=M4pmR}}EfO0H@cQx;U z?Im9`jQ!xhzm69l{ZV;mv9#sfXpxpH`4Co&)Wn0pOJExuEL~RKx5aCbvs`Kg(8=cj zdAlN>Ha%^&!~G|3A1fE${RQ$?}86Rw(|`_DCs zqxmSW)S9fP?k%@vm?mi$+30UH!KmGXOdydFE1X)P8h+rFD{ zIew>knGTV0T1~-xpjY;l+6Lc!Q z=^Gf|)$aX_*Mb#@dX&n1mQV_Qzt)bq;CqvFPX; zhL5e4kx_YpC)c!S1s$?)hzgKRKE3;Pcc^~?$v8mB`eJMG@koi^%@HGp8(~c>O}c!m zJ-|RT?GTgcGt2iV-m{N_(qg*>*%ijOW{r{`14_h>xzT>$LV!+1e+^Z}!PEH-LDC-| zVxTX5H5!}jzDc`aXfa25#bPV$>dQWY{hbhxzB&I0g-|m+m4GWlt*8NLr6Jyc)ps3? zm-lrt?`_6u<8gO`k(dHths#$W=zD*?qL_-$s!d!dTQ-s%9Ok(o4q_qs#yP5LQ{}w? z?o31%L!GZc@pZF;r>Kk^27pA4JS&;mb5s)TYt=)bleQMZ(Y%L1FI)%xDhz$1(8f;! zWy_^C^CsBW-;g0B&UU4URfloqqPVz#%wWif&5GO=8+UEqP3apur2zhuTU0>h9vF zIYh4S+H&7epyagvG>o`uz0QUlKecb0VRXC|Ew^yER7EnAe4c#sv(>=?S6ly0-aTB4G9L5`} z9QQ`_(Lcy0r(7S?Gt06MW;aP3@{@-qV^J#398gK~?Dwqi&x;R|ajH%Y0=;fQQz1Wy zBT~EieOP3Tw|p0n)S?IL&L0G%#eo9S(u2-j7LCL(ZTbaA?nyLu7DsV&&Du@HySxi% z<|~Ix(|*&(IP^ds$5kfu+q_|A zpZU0t=)toza>%a$a#RCPmF(L-bRUR#?IFk9z7lU+@#1IYt)vv^k42l~zDH1uKHrE{ zofmfbGB?Lwu#*lt+9dwFexs}OUUzkHyJgW=)Acm!DmpdCbtZMRpTvi5uVO=wOIW(r zi!{sOSB-W%X3AyytmmSyiJl=XTjL>d?W$T#n9>Yq-gad_!~(@j>bfYY>GKT|v=T2e zw_aH+xMRIKb+C2{1@dhne0t)|i1`Y$G^NI;x2NQbw18`QSM~%s%;%8lM@W2nrre}<@>TL;6aig38XJ7lF2$Y-_>np?6Yz3 zmNS2#@wrHWQ+l?AE9SJ(u2%s)ss6tCpym}@!E1Oj6uad;OY*?q&hXGQmicSHa}t!8 zI4Qbh=6LX2Hj7mv9M`fkx!TH^u(cIeCq&5dC`VcDD#W`(s4k*F)Lo7^r5EK;WIf?2 zobZ<@L2Vv5#lXwT-Tpi@Hm856^$dw3X_UGbE( zJVKxhQ|ny3Nv~)ar>)K9PD13>tOucwa8V)fBq; z9x5Ke92AIFdq_>;m6kair<`V8o9_N~-Pt(QR>m}yLhDkBQD0PkXte41V~+mt=5-)oY2Kz8J4;{ScJz&TF0m5kSH)G5Y7** zL-FfI)CH1v5Yo*%SMMHJo(MOKIY_=w()NuS+e$Jd?!y4fyYWJhx7^FhjWCID*Y{V# zp*gn{7I$OM%Y&=e+McX_q4%Die+(!JJh_*lxTq{y5+KP5Oq$`~B~Qdd1W!)A zmV0I4w;%??qXT~a_ofLbOSbyJvfruf1~cFEwX~0} zV|6xf=-RF28XM_wp?@hkdyu}jHi#n*hqSlsz)W~6r?~m<~6CZAM(DhTC|@~A}ZIls6!buEYbx1swWs?gF|Gpu&f2X8s~>h zr&8Kh0bI(^zh#^VLdt8M+xwiV=N@XkwtO&(h3IFdCpw)uZ#9MZP18#WsLM|fG6Xwm z1s+szxhVWz0EwRTI!Ek%%)9Y0q&L^0*NBBDdK|BGOdK-`M6NuBYhTR@QW6U{r>1zD zwx%Yg5)4I7h5ql>I0WPWIlcS8^UHD-TCkUfoi?Oje<+M@;Y~y8vt{I*$F&AH2h!E> zqG#RQc<`{!_w&br>|R!E(0}@I46o@awpT2O57X&8CGG@AA|9bvPaAx>h7KaTZe~lR zip>ywrP}X-jsa_GP-`T+9jU*n7hs#V0EyWD&e(sukvf6o6-6TWTux|_-JPQCH_??$ zQZ7|)Y9{faYWu(T_90v2Pb_|Z+(B(CMd(g^C$1gi{qQ-ivFzcc_dIQ2el((#SgGfb zcBja1aW=%NxtZya1oLN|Jc~mZ!+1<5f6;+&3`J*iD^{)+VmJ3XF7Ejsh{p_@N<}DWXJL)* z(^J`;yR*ZySFw?xvrR6b%~}2>kLfQm7i$7*ym0*$rb0n~BqYXkVwP6g#O{|n&+SxT zSh){^52}6EwGj~V$d-ea?ENMSYbkAJeh0#5y}RfveqhzaXbQDgW%Qv&axGYY;bx5}S$8iS}3 z&K==ev`{Bm<>ZF+ya))ZdrKC-cWKAO#sV7f`tO2lEOS8en{O|2HdsS?n;92cN!)25 z01n;~rEj1*7o&9muXb8|vRIz0C0C>KtWVF)ixI7LuB5ZWyAh^w_(F6a+(`&n3Lp%U z26kUKvzxwV0#X@&Wc`@*g}Oyw_=+1v3>yuk-sl!i2Hs91Y;67b4r zb0~$lg}F=Kb!$p!eAyV0)>wN+rhTYC^+?J#>WA>|S(Pt$eI|l>pb&*9% zPTOFc=bK38FT57onQ%|Ru*y;~oj9s|yY+0N-}(QvcLC5SS?Dc?OexN+L_?u#!r0=z&#^ zaPnsn*KTS+e&!6dnzBB+wX7W4Fo){Y0gX(C>wJT@wpt&ndLAjNdqSD0ptaRK`2mkI zWHdw2fJrZRoSUhCyu;pcTu=sgVo?2_%#($WY|~v={xpBPd?LikMPt{-d{GP05a|zy zdz*GnezV?yS``IAK&i-AFsiI(KmvBZg?SZlbiv=h_NKw@`4QFhm-+iER^`yCk$i*tia{cv<0E6 zryA{%;O>N*B{9Yh$@E+2*Uv>y{l0pHEmKk)pyYMJ?K$%Y z(xM%m4_ctTIMYUYdesV+xA)HVJkp`lETdU&ZQWpa&sTM&dCa^-M!9MmX*rZEK015$ z)A5N(;!F-|d3mz*^6Z|IoX9%BUedl@)GDosBp_QT2u4u(r+zgJoxVIm{b6bamlI!` zPBU4dBmEAp0?(3p^}-+adHW~GjVmal8_`C1Chwv0*;wbn_rT3tc82BQk6 zJohd^sUYGYSjIf8YEqtcK>go$#dfFaBHUTDH{Kl2b0k%Kh+G!i{&b&A#sklzf_|`{ z^w|1H4v7}KJ5pWc!o}JnCD$p&SSEik<&viH3JVgm9`Tj_SP~2}&)-faees&oS~8KB z2K2J;ZgHj~at=<8J|8l8NIo&gYW}R|ImJHYzLrQ^OWo=}p>^IFVz<+Kfk}|)cs3c1 zaT0nUv0zc^c*x*&ws}I=BE3WLuC<3nND9@RzU6xuW(py_>R^mX-k2FcYVJxg*36i- z`UT&?gzq@zhuC(XCpeV38hnjaz}#3sn4=$y=j?Q$W(NR57xI)zZ8!4lUmQkV>iye? zyZl7Iaw!gb>p%5-Sm$ocq~xWEmh_bx(NCaOyt!V=WTCQOCB9en3#j4iU(+?QW{;Bz zYb`nl_q5>gXDU~% zlGToW*m*CmoqFN1lWHNbW|pp4AxogVwe*L1*lJ0;X;LRC=-S$%@C(hbO&Ux8hv+)l zXL;s-#(>aIdVNY{{J3dNu|An_b%+o@kisK}SEM6#HELdwt`=Geo>JJ$P^fkmE-fI~ z`%-WdETf)Qkd{?fQKC`ykiJv%e@zznpTWWN7|+4|uF0qE_0Hh?om9h~q`)S7VPWCl z>V+`?B}97v|5N!jM^Jlo#gYnP67ZfW~#laY~1;hioc4y2!tpK-hSlZP}}~u z{W%X3^_k-ScyiyD09_W8kY6eD?FNac|&z;SJ~ zGmCijFK7<+KOa+79CdKYzfu-Ul0(GFq3OGuf0apwDKWowVvOPJcpZw16Nmvcne3d9 zXg}J(B=euc@y*+>r)5zNGJ_=LY@lA<2R9MG>KHq%&?}iR80rH9s(W~W+aHx*qGvt~ zofp3YB_?1V>`B-Uzg-MHj|Y+0^(NoDvzs_9E-E=qF)=Q50bOtGVIvRDO37;K$;0_-)x9qq_nb(?A;0F3;n7or%X!)yA?LX@6 z)d*e5j_5Qdq%1#Jm{h)!0vLWDKB;HXQ7^mlYH)e6u|14AQx$#rHVt^&xSOc)c#|K5 z)t(tlscEj{}pfPy1HalrrZmsd#du0H5>=jTsl`;7A29#J>+WoHDVC$=O z{JHB?%}M3DlB`ER+8QKg%n2oKulm!FIU^t;xPyYB$0yGSf?E+^KRmBv%pz~GDW3j{ zF$M0nSK!9ONO*EPif)Tq`sz}_)u!r7O?UaS1@6SM9Zcn%n07R2#?*NS*Iq86rT+sTr{0yEI$g^v>Q zi*#ed8{u_h4C2r-n<+|#-IVgQ7{BODRTn}Uj?xOqMe=zdER(#R>S6yY_6YUKv#hG})qY4}DSH%8W}gw z3nW*eD$LbCl>I1P5H?pUT$2L&Ug?YT`v&;1#NQvH>=3YaUtPO!*tw$HlPYRInsb@k zTs#y!m8VD^ul-k>HAf%_8#|W&q^vj#j(VWVNqrJDoyzXB$8NTVy`m`nul8bK{q&7> zmzKyuSWa=L6lfP(h~O>VLy1;-Pd^V=UWd2v#hNy5TL*7E!@A$~&A$7qC28h!p3<$F z4)=}HrqwTGn}eRb_~jjIg49HWVonYhd0Tj41+^IQnfcW3^<8?}w6PSE`M4t|L1$pI z+-E~cUN+1($dS1j2_SF2B5~Vj+Td}BSe7j#e!GwxS5>|JDG}YWe6=sB!A;>}DhHzA z_Nv{5dQzebZO2->XgVp*IDhX5BAeP-murQV-H7mi84O2{mQDx=sNqFzb2~kkV(SYd z5Q&k|EGGRBoLc!c8Lud%XoT}TMEVR71(gfPq&_O}>6|a*fOQ}m5|xMq@x{QQEmLfo zKA;|R@K4-2z-8r&X<-0=3M2m_k*l;ka{vpA^w3b`LjXl^Ox!vMhaZ;SGT&} z$7j5&H}C4@d1Xe&RlH!mGy9`Yrrs^}i>@#h-YiSU3M1acSu)|g9|snU{|nJs(_e{J z%cLU!@*5CL=m15Sz=Rk<@ig>1oKp}thMCJMy@9l9k)slJqQqD9hM z#%Www%!+XT)xxDY+s0qK$>RsP#?Vuiah#Uge}{A}YeL=>3BNW7s6eCi1^-Ombr zAaiSp(vAM0_Um{1@{K>=m=z0lTgwG!%gEFX?_rkmr~LumiSV_K-9=)3DVF{~A{UL9 z{r7x=&6~NuU$5r~huaHqegY(eL>7Y9MpFMge`9vXXs>Y>CdZ~+v!W_&WTxAT9lLmvM)iJS%x9tmIb;1&9AQ% zS{#gw1IV6gZT;(>yg6g{?(^fjX9kZfq}mhcWRk?1@3iZD{Q`EhTbnKGd&@3FOqz8d zFm{~YTg@?FIk&!d$LhaG2cperfR@j%J6G|S#ghr|`ZW@WFVwvq;7UgUCLeoi)6d0ZQ|@IGfJ`j4!NI8Z79w_wc538=t^-ZUQ(lB>g3< z84zc@RLf&ZG^wwF1k0=&HpJ4tsj_3%gwIHN_q;J-owNU!8s?2!JV_ltKMc`II)k7O zTcGYL1N}I5KDflCmv4%>#BNV(Xf18) z$SrG43{~pCFt7cgs-*jkJyI<(@Qk!xx*lUE9A2XCjaLx4SaOfwk)v}w0l)e}Z1Q0y z=G2BEcJG5U%`Zli)_%^r!w8f{g=F9VZO;hfHPM*ZyMGveb%NPZDV&BKdHF+IO!nqH zBMidr`^e0RY|e0WzOhV)VxO|+a%sn?*Y_Bku~mH}8vazq`)7Fgq(3vp4?|55vAx(j zb#7~GH(NBl5qXVkF$(VJ?C11T`Np>?Kzs7YvFF8LU$SY${L7OKxWb9VZ5r+4z%Vr0 z!d`{>m`pU%QkZ<~tY~4Sp>e3A5TK7i!v-?)Z@yKIWHm(j;Ez|ct1W)7TRxHT`DUY4 zlOBVxvJZBvvp#b;SCqYJ4 zk8KXv>Yvj!_l3xY$yFxW)WOs;r8e7HB)n%l>19rQhV8T#wWgZ7y@_r!Sj)h zTf^B~6~+%%Gs^eKg&#L0diYudkC+5}8wnwkK(#RUL!}+*EP?-f%A5Jardw2GuIOY- z?mfQ~z+Xu?>?+maD0U!%8ydfDms(-@oOZL2S5mB_P|NpI+Hfob1k6x-Cv?sXLV;MF z+P!*@=tsTEvK?`9hem}>lJW_kGnr`jaI6bpbp>-i4_M z7=SPFD&*OGM`-Gw!K<^n`!w02^38n%wEky znQRy|0f4gg_ab6VBYn?5{{?2854LJf{5_wp=PV2bujU3(wi@#RtEpgddj%{+F{JlmU?oVr%;= zAsLr*$BU!%<_g>gFmV0gobvJZ@f|;<7<;{=-}2&}kQBN>$YCc0;!Jj&H0iKbm=_|_ zkE!bLb;Hh!bfh#(CUY1$`TF|27uyP>v_W##>t#O4ia*^%ycD)9Bvu80QNDeDfom=c zG42umGszQx4>}D}#WL&+Et0ReLPJSi|5uqipfnLk{eM&D)_HHv4RsR(MwuYm9N~@J z{}*kpA|(UMz-N@Cmf=gVG-sXBtt{9_qw7Uvc3mxFb$>LQSMUEvX^y4zKOEeDljbHw zgi1k-i%AQyzwfsJjxVl8fx5Qs2l&t4xU*O5BSSl8kaG3hP)L45JZ=GZ$_7=p^XAgO z$9_3*>m)r#);guoK&WP5F@ib1Id0}Brd#qzSXQHc*Z1O%6+yePd<7_0PwCdpg@sm&<&R z{XK&eENmZLljfK^KEpllxs5VLycmcB5nhQhNM1|-kLKRGtBvms`)#q{QYZusTC}(m zq)?nfDHJL04#k5Pr)Vh@C|(+@xVuYmceg-`2X~(E{hep6v(76x`E%CFteM%f_sm@P zb$>2N=}r9gp`U!hm3}X04!)0d_VBF2Rao1+^KdQyQRFz3++QJJexDtn!Bl2iF2O#F z33Ju|p4oaeqh!=L=f5xe#XNA=N+szi`ITKe)@1Vp^o zS$+GA2D%r}Irm-8dUjKmO23(eQq8cvFs6ves}#?>`6dUP{Qp2^-YeDJ5eBwo@$Xj7 zv{V6$+77?M0!#&*?+gt7U6Vq=L=aBj?et!ZLZ%W$j zp8HZyG7;Ygbcjc}5u;Z7`!Ml{yVStK%Y#YCvwFC%Jrv*3x;trHz#fN6SXsrf5kTDhX+0*JznT0*#Mh2}5E1aym#c*N z^!Z@QwO<(fZ4>GMlSDp^FQ(Zx6%&X)ED}7jy1wKXV`Br*po=)}R`U<>pqI zK)7&WhbAv!+E+PtpVJ?n7kZd2GP*hB?yru#l=$n?RvYgG6Q?nI+5uR2U+{QnBz}u@ zl%7eT-A6fru!cdGX4~7LJwhvR&Y&-?$o3KoCi-~cF+($mvR^I(xn!=*S|yMglpuICoFSBefnPnH6U}lah_m*0fjZ6MemL7@%$1cewyc6NVDkX z;gy%3uBjYQj=Tn`>9y*l(e)b~JasU>Df($4QnM(QReHbN5oU32F|bEEXgjE>M_PxG z6O~dnw7EF;aup={KS`U?ddh^7Ze6^}DlJzRV3-FEi-7Y{1$Wj-KS_Vx{)h{fCP?f~4iirN z=0zBIL{E%srI8^{(o>LVbgA(RcCO3k!!yO|CV>4?3oi<5^ECwN!=TI|hf)CU()q+3{`r3!?1klwb{z$QML!`N)Q`4 zh2V9gCxm7B`U3}!L|q@OShw(leUpxHlfh5Vpo7ih;SBDyA9S8Ar*MDc#i6E+N8@X` z@XZ=>Mc}~9C9~KHyPZ5-R5c_M$ttS=oiPwYvzL~Zwnp8XaKL5e%RT4zaD<|JoMW(? zpbX8d?cOq_dpZ(ED{z7Y=h&JgNfLGjizGouen2sR^&BspGJis`vVF@Rt}#Vu#Yzcw zRVyqu$KB)!Q|)e&uJ25$h-=WLy5o3{9XJCC!q-P}JRT%GJHX zEU3yy+{9Dcx!c+`#MB&g4SXZooaQ7NqI z^EgNT_ABhCO3eS(1&{M*ULWysMk7t>G)Qaxl;WopR&M9pIZW$7wyp3xvw8uQvk;&UZlQ{&KJFW)AS!dsuB z&%0@mApC!ynQ?Tj;x=}_BC9kU=yht)oQIc!{z^6n#k19TnT1-!oH2U+lUREGJ%}@z z6Nm}I4%>_DMBe2R@(ygog~HxNaQaO@b^w0pqU+;E9v>~vx8ZF5Hh_OJAIE)pe1;CV zTC7=?t2yQ0N`pVD8zyeA|C-AaGEMWYN!EA(H$k3e+L&k~-C2j(NU|T1tsNxK2a^u7 z9`ME$`cUzVmm|GSdqCr(U6bkL#cGcx)kU#cK(wGj56Ya(Il|Z7B0%-7A@GMeU6I`M zLiLpYt@#gBTjNn%!^#-NFtH-kz6N(o?N^rXWJf* zbffEB@c!ebC-^klg?i_~p>5q-iT=V#JN3d#+s7bTd&_x`X+UV1MW|eueO7G1pxZZ- zVdYK&jceqeW&LwGSHAZL+bexK$=xVz$wO%V4aq;8E^PR)Ty@(;YkvGpi{($fl{YcI z;l8gti4k!J7|%p|>ns@=cwiDz{i<#!{oopKAQ+33P&G>*D#aGg))@habiC5n4{16CuBAZr>UQaRR%h)4t0or(_!*DMtK20`kLp zqR7m8;(lFS9vxh5UNIG6)R2WDJO1u_Brgs&C`O~Ff)&Khgeog5WwAdqoEm{I^*^Tf z^|kn(ULeUw1)(XGFWP!PL=OzrNKwGoOT0}J*J1r**aL{>R9^l;ijxZdVWpVl*|AdX zHUlq?K`Wh9!Bi_RO10v%=~W2h=^poZE@G6XDsh6G7N}m0QV?z^_1j9K-(dQ8 zYc{;K`jJk2e2x9Fc{H@Lgupo}px1J}}v2=$qQZCUZvVHASRKpHsGLYVrg zJ{OB_>rJ=h>OoG=q^OHVDz6fDv}CQ#RXXYo!T4-Y0{2jtBM7cE1ew!A^1>QJZ6@;& zN;t_hKG?UJ4uP>;;xRl9dy!Na3_^^X?ULGXgmeugFEnRXjr=nf!0=rLuG*%Pj#mG& zvZ)cW_{L46LA1VOZZJF$`*jpzY#RbfKhggJSk@a86e)NQi%G#Age$&aF`qV75VZYfD_d~wMI^$Q%I`NSiUs``d_okcAS zgrI!igV!uR$bjj)%A}x*+Ke1w3Vvk6E=ZP!;H9#`a!4ZX9mVL-kcxhj3%SMNO44NM zQe&`&wj((~veWv&fsfbHCyH99&mBbv)N9waPH(Ll)K+$Pp6HDdXtZ+pXBu@uaP82ipXcR#o)N)9pcEjF+GHqImT$ z@3X4Ko~X}qQueqgQwN(CeMRSQX8!>`8+&VO)zY=m7}b3;MD|eRRh~4d!U9nz$A9Dk zy34bttuyG~tsMQ*VGT9I)XQ&Kg?Bt}}CzP&(Zj#BEhcnj1z zMamr%$!}FVz_>a*d;B*|;Qmmfdb&}rL}b#4hu6y!H6X-0+w(1W3Xs{ui5GU-Y|fYu zrDZ}&2m8wUpZ=myQB-L`Wjoc*WcKv#b+V@g=Ez+W66WtnRJt%is=RC?m@14NCGzOM z4o95;f|4t1`uTJ-{|ggBZV3vQ;1-TU&10-MXCWto@tv$WG%M^Z5~ASZkXV!lbcWl% zS%fkQa-p?!kqRAi445bgDDz>{I7 z1}@k^&2wZr)XHX?E;O~`ia1^0UU`{*H~}}q$0+IS0~ln5S}P^lYK=@6mXPurxc*5> zP6Vof5ojwuN8-)fr-Bpgv&4nq=zj5~C?rSn*srFgz7a-@Ovb!Ob=N22nIe;fk~dDc z*X+{q)Kk9dsl?(7)L8f`W4*RYV0f2rKJUxi*70|^@}FyCY)|#`5tg2v2A?j0Yc!mD zv{gbhuO!n`B%?SJZM6e+tvjG`rjYbZer-#=fvGYriZ4B5p4*Md1)qH27!NBbzuA$i zmJ1N?9C?JpE|Y0j3U~{f`4O?^n2^29)MezZ`ybEkN)$dbhMT^{6cxSTo0KAk9A*I7 ze}m1y&W?i&1L#_ZzSV3v&r*18TVd?X+!-Em=pcxz%Ss2%3^nFBnL-w9m@Fu`J9@?h z_Q@IRZoKR*-lWtP=?i=D6LHqy3WfbN6WJP&gd|*#$X71hqo89 z!fVqCJ;FoEAQC@9SePcMrYwuWlnd?OHMF(}^N=%q7-<8Orj5WEu2QdP0J7e_X~gpc z_l>x2ru_7C+u(HFzPV4j7)b^ms67gIqcLM!bQz5acOlQjR5Anv*tg@mZ=O$l-uM>c zU6Y=8-s6BCH9LHi(Cn8w_!44XHrhXH=8b%7Az*uYcVUuiaDk5@Gh^%9X2_Y@T3J3s zB~1(;VgXh%N(eR*Id`o|-}n9zx)ByLE8r)1b3pyAbVay(qEXJrZ1-6Lj2H>neX4nV zO|$OppbT5ZV@LVF*4%Rp<^;+(jUhmqDtg~0YSHTOgN!C)jq zCl<(^f<7hFgNR688;pE^q1XU6De!hBT5RnwO-&}}x~_E4a5>S^nB3GghlPR}yNCUT z=Wm5IP9>6@^!W}0>%AZhc^6JGa(Ci8Q^-#BJKgH-tp98AY?C)g^L*2nHN#<5GN|*& z<5SiKisie3Uzn-N*Dfzq5AGp&7L((0c+T)&8q zNyR({@WQ~?RJB99!K9`85CLy$28Qq7n0B;xF$;xheAL0C2*#~-xlu%OC^BARi!tNbvmOiqe>b^C!6THe6^M zXz67}=bnp>;B{fjKKx4pQSg}8h-*sgod&<^&5Kshk?d*& z9`Hno^{G6NNOhMS#im^v&CK?Zv(|MBXiFrzfj@KFS~`o_(T1DxNNeot z{DOVD$wEC?!USx?&!n~oh_`Kw{#TtUNfz&@Notjt*Ux|wGO}0jfQo)5c!POKv==JRn=J;d#o|O$nOjd6Kv#5NnH?}3Wh7PBt zWu+a$*^bpmU`DmWFCQ-MkT?X1ePl|_w?}N;5nyz@l{}qyJeO_0-KPh~A=&V{|5S6_ z;^f=zCMrOP+ik|;z4BICOl?RRYmn*T~Z3^0EDhNpv2b?8Rt@4XXU&AIfD z3~7=#`C;_&ZNL<+#-DK0%M`5>Ch(JL9w%wZ;rJpwoTd|CMqxUcp7r@m70)e2n84_I zMuz;FH}HSR0*H5;rErZf_3}(q(n`pCl{8@hCEpXrAbT=`6?imD!o1`5Hmk(1T=me) zWO1gGps0zfgR|BV;DHS9;EDba6b8bevZHPxg3}xsJgItg%}wYs_?aQPuwp2R`s@7S>pYeq5=;K!D!s8 z?E6Em3ggLuUL#emOc+-E209s!L(W9e=JDpfVf$!SwrkY|FwZa{Wz+?I6Qgc+z&PN< z#9SFmVNMf&IQ>&60{%(3{@yA5$Ay`ZK6&#@_q(l~j5=DYPY>s$V}uFfH8YIxoN9$?@L2ApHVKt z+JEsn?LSwZ!^H04B9*;`sH6Xh~ynT@9}fE*9qSOIGLG0q&q z2`2`s!I$=1*X;Va>Sb?mXb+tjkEM>}`-t%m<R+D zCN^uIeQP`b+fO(|8JCli`v;j=Z9`Ni-pz5qNvuT_2m1TR2`qCt z*D*aNf89VkiWuj^WiI*iEP+^baN*x|N#?kq-+~Z4~2hG~m zE=mRB9RH-Sy)b2U+rU{h1*{?&DBTJk6yu;Zu{KSN@Wfw4iCD18FZn{Ts)fHSJmru& zX@tS~>k}jcX@ps0ISBHUYl*T;^OyauAf2lUJhL%_4*OF2<&}1{GFW}y9>XtAX+&F` z+rM(UC!+Agv>Hk8h(9PQcT5f;<&3@Nv{G8EGD#|>TbNmh0|hJrX5~aRH|E*y+gfe| zBX=85pFNI6MKrb`bFnQ7*o zEPmv(3h78uj{)%eq0nbC1HekA2D5Zll{0^QMYI(^9u{_fQJj6>q@L;1pqH9)TFs|s zpsmz|FEZLMK5BL&>hR+xk$r*n$?@?d3OnNb&(kd3=gZU5N~{a!KS9B zTU640pMO6V5=!65Tw?O-fRCrTHE+Y4E;oGj)Utl>Wj=F@CXbpd@z4~gtB+Mv6Zl@zFZ-hq~TYy&@?tP&5*B?e~@faz}bmBn497x`Vd?KiecK2 zv+zSA^KyQ^jrpt*8o)xC$QH@dDPfYA@Pi-=W#{der=NT`r?T|J118n=8{M#w2}SXC zcp)z>e^=kO?&(;|ZN9_3_%tjB<)BI2HcR@|X2bYOZnXX-r)=sAUT?{5qIFdin z&>$oeCBL|(=}k*ppH5fe$<&Z**=DBl}F;1-9!4+Zp?TiMd!WGux4cWiY)8NkJlfm#6&FG10(L2w; z>GMzd9qY64YX9v+p^cvsB8v9>;&26BRw+ZgOQ3EzXfy(n-Hf7z_`dt^D%uYPt%zJs z27{wiUEL6d>H3>iwT5yy#${~x*Xz+*^G@TxVl__v{Oz=}27endo~}<{hH_QW!eV3N zxNY03On|`^a5b7IatBQ7aPXH@UfRK@Hs`LbvS)md(kyVjb6QH3N5xy#k5or#o~S^< z8y!+YsNCa%!y8P%P$_|9{AQ!055pYh-7)xa6|F2NR40atB<*Z&ba%^d50!*#I_j~& zmt`snkO8pD;bfPiBCjC@R)kG+MHYOCH`qMS$t9GGoP|4JjuU=D+Rp!t9yH63DZe_z zU0+{czyup{w?sI~grtAhZ(hRi$tQtG>@I$F8u`SSx!6Qq?(Pw_(?tq#%m~@Ar!mS~ zBj6a+Wy7RXcq~WD!}&P|ihe8O!J%4V?79av<-ruU@W99<`&K9!(HCal&30pI0e799 zX5qr56CsG1H{7s#`O4|7j8-}@@kNfnlkw_*_iyUF>c2q5^W(yb`q<2Y<-a%eXcAdT zk$}dgt<;GNrLO+U*JPbr;ah9mSYGEXQE?QMNIG8d)SLn%8Fjb6PPu>(P@Six0@~+I zt$iH{h=7q;14Zue=)d1LF)G9kAt= z8Mw+_GIT~xp+st2B;~d6;@4Roo;5Y*Qd#uIW-@{s;0yIHV>-_^*`;{08ZR|NzY*oY z$D@-j?D`f0Y}+O0R#F_kl*Mg(#xa;{{vuN2)k!5soSmQdgkTYu`dmSjm-ly_>w`vq z6?Qa+te{J=#^M#2JX;Zpm@9MVJy|l~umwG9W6!@4D{)FRhdE zCLeuonoki0U5NF|IB&FbmaL1jSxM|A%m#sK;neZ*@j#@Ki^x2#Ir1y;UQ-+zUyhqr zUrn+*yO|HKDY)6Fgh(Jq))^L6g~^GQLoqF;g$oQA(OV(v8jKqCKL(|7WC4=Pj$co! zOeEPV-MPYFFWw{)<#8qB(z&vM6zs8yrzMlkgp@y`>1DSH{mp**d`itsCMD(!xo+NQaM`IA z10AU7gzxUUD{!-{xOj*U)MX*;*tXZMtu9-i4@cv+oW8arHE$#p__K&yvlO0MsCaFw z>*~yqEF0mh9k4N{fh;7t!Fy>dpK&uSkC6ne9%wC02UtIvbW+wcW10*--)rPW9j797W4t zH>JZh9A~$pfwQG67RFEvn|0>*_|DyqEpHK?a;h@N^e4 z5czji@yg7yP{aX8x0jEy`}wP41vZk~&Ozx3(x!p4yq5}=WSg^-?^1(Om%Jd;oi7Hi z{gBT%lcyC*E~d1UQ}g4;bvFaNUe7y&5o$-$@_OP>R*YGGj{y)G35~hBep|d1U+NX5 zOSsrb(+GOn=nO67yQ*r#*WnlPZx{#w3@Ld?+%JVR(llZ|_4n{lPD6vZ)m{Sd$Z6Aa zQ(i?SZ89OpA2A6(8BYn{i8@g?ehD4#uEZ|a2$RJ5!~pv}(PwQK_)%5QWQ5CnM~2|$ z%IalFV*ZRs5&3nf;)b11kCoaf_Ll!~jxR~2D{H^Jev8hXZrlWac5~-EGx9`q|2q*p zNl8h@SFh+d=662(@Bel=JpP_HZ??{)nk*J4OsbjrmYiVCl#F4RU0WXroh|E~Un6W_ z0$FRe-rEZhW_7!WN9*j;6B7KRxaZ{DaFSFm+4H-dU*hdfwp7#;tEh}w?e775t&iJ! z$nNAfkWyE8U|Ap_em1MK&xl=i-gD+nGMxFiR{SZzH*opa2V9XbxVsY4IWuQz(!#iy zkF5e_EIRMgvlEhmVoP=L{JAFXB#=YDs8)0f(bCk+&TYXt(kokw@&SEUz7Z<$17D+1 z)7TFvl3BDiN5Ev&jl3k`h+lR`sxvv4>CA9DmIYCSa{cbtgDs6PKqu#be>&Tj@tVi{ z%9ss4EONPp26>%tztrBGD<5qfpc9*j-MrF*f_hx_I28Q6qxJL4xbU~>-5rFIs0_RO zhx&hZSz7y@>=WPZ_U8&WR%0IBo3kB?H(;ImS5xz}EyraU^@m90lG=zV%k|Jp`#yb9a4Qg_N?zq z7=s(^mg6gu>p|9>e=;5k6`g)d_>eZUjxpAKosk3EO?u>XcZ1jqVR_e*?T2Wr%PvFF z=`~I!v-2KT;=F)1ovh&F0VV|%6N8-rTkB(=38HG%vpn+z^!=C3Ttg1lsn!f# zO*JqNXP0O+isqqIGJTi%(q;=0U>6HOHpAtdjLU<*0>(MRyM768sYp8#A1pCkVA;8g znsg*#bkJ4f48!e0$QzGvyqM>bH}rp%gE@2|J7o_0VlE$rpNDuziGYt! z2+f1;?F_c)GKz^Zsxr%H*{$afZzwu=8(QdroX@%5`I9zE8Q)UfvAF+&~c@I9)|fd-_{+9}$eKwSx$LmDq}Z&*W|=wCqls z#!r8sEMgsH3y~m;8T0X4?#KMO9xe$l?X*J&j6vWxPKu{f%=uQE+r~j$Z7a@HY}YUN z{A*EMUjf>=Xo06>lst$b3C&OF6#+SvzN2N2o-G1Z3o<>A*bBQv|9vPlpgw;jILSNk Uda-)_?CGZ{tNON7+BoR{08he3;s5{u diff --git a/windows/security/threat-protection/device-control/images/create-profile.png b/windows/security/threat-protection/device-control/images/create-profile.png index ada168228ea08f5eaa533420bcc539f695216f84..b0b7eb7237e00bc620fd3873e34571a0d24026aa 100644 GIT binary patch literal 15388 zcmeIZcUV*1wmus56BGnQ1(d2$K%|NEt^x|uL24)}z4sc5ic+Kr2uMdjkX{pN2uhO@ zKmr5^y|)m0Ac62(eCM9C_u2Q}-@W&_&vX9T>mifLTv=<*HP#qozT+K(2rZ50G*rw~ zAP|T~MOje?1Ujz*d^|6m2Sy?&ZeIm{U3OJA@&JKo+s;1c5_xG^fI&)66?G-b1*+?p z1g>f~LvDaTw?Qh3PhR?_<0hddU#!Td+jL=%+j%@iURJR>8Wg+SyxFeTr<-e$y13Ot1oQKx2hLO_qHMN zpAXvx8c$aahMuR9VUDZujGJ_zScly8QGLuG1ZyhEI}E$_ z{Pn!vk;$}hTW;WmRHdhL*L`T2hkR3Y3}-sjd`fj zJZE4)xh?d2b7@)buBBbOosB~KsOtOaw=B+el?N{^E4|(jHYXc>@Z_)i%BArNc=9}r z_{3-x;)1L8`SazQM3U?2+hP+s|6y&?HK5l(mXo=?wHCT|54**3mF>DN>9Nf&Zx}6` zl&39WAa=wmtN7ttRfESf!x?3bDtY?8rnBqN?`5W11+=D8J{yDe3Z0KLkVtccDniQC zM^|CHLr&$GVsG{O8o4b_VeoEF;m30(Z;r>;q)ZKba=tsUAj=HaL!`Xw*1AD1g5@vb z61aPUJz1r9a_5udtAuU(>KHdYC!>)`S)Q4Eg}Q)5DL(FP9Mu|ChrEB!%(I(_I@r@i zr#5nrd!HJ+CwU=lGSzC?{d0Efsk69qD>XgU9JP|OZ8B2@z`IL=GX8rjBQ^YD*v!b1 zdLH$(FgkH&Qg}ED-r3-0K`p|3+%MaW>x0z=;R_rRuc~pC&J$WMUk**E&p*Nl z9r}1ZbCi>t`e`b4tHEcVAl$|?%5a-BEsCw zgfOVu$gASS*`SlVB`g@I-@XtX#~rYe(sLxyzQ3j*bG+_#h}S$tzo?#pn&ZZYPVUlx z{Y7Ly+?M0iIt8&aoQ#G$+T}A|7_W_uWMR7wP4=1({Ybs+5Zr!87J7i^sGLhow1dcL zXqZ8BYWC9iK}?Se=*o~C-iZR)s>?BDKl8T_wnuyh5;KO9GbQ{Qa(?Z932xDo3UtlL zNU&sK&ONzKR-B-=lMk1#X9d|CqmXw7;f|87 zGc8R=)IOUNW31=S&Nlf`e+uFobgo$PCBM6HL`my7QTKX$uV4uU+1f*+Bg920O_v)^ zHF2Cdcvq`NxYHWb!L|BdnA%pohJ$lX!8|;rB_$BO3`YyW%M)qh!LI?$0Dc_2T5LBg z*yVOs3-WQ}DfKp*X1Ij0o*Jk4Ndxaw$mA0U;+HxD@FvotJAhfEp5=z8-{(j8d^nn- zx5kM>mHXEtKgHP3|E4ZRx}A^+(=Z2{jGvVUnp94o2IuGI*ae7{EBGWM=iGHgyVYs_ zYTzM0MMCQ&jXSN%qRT8!mPebK5LhCKG?G2uiT-XprtD7;&RJcxIPj6o?B^v>4@5i6|6^L4?FPC$Sn-s6VF_h! z3u{R6t#LMycOs%sh|jNZ2?{m7JH^cj;JH#;%|)UcA`e)*)c>5V`$^nyEK7 zBHAec#ZU)wa(Eus(TT-&b~bJX1v5=eO&J_EWI31U-tmZc?YG8SY@qpCKXR>M%1?nu zs>wp0987aK5e*bvu5@!CP)wl=%F z1Ue46x%5KUX6A9>YlGD`9woIYVX-yN6WJ%|*X_K#->ckr@;V**Mpz}ajqNAve#!(a zbQ_o-_;R>P?z;F`orEx)9X1cvV|)4-CFYO!G5Ifl*U>Nu_~B9+NADFH!97(DlFh}; zxB$N^c$gS}N46Y!v?O;9hjrlKmXRwAB)#oQV9%0S-9Er!JEO}|lc{Z|r(lL2)T?7? zK$5HwPUyjg9d=&F=_L4p0moRqaJ3{wOkM9$1GI7^rMp{qu@7CqyOuS0>`&b5(p^+9 z{Orck*9xeuix~4{CbPRiwY<>Dg!$=U0RBa$jN8+Rm9T`7d(+at_`pJym7>yoi~?Uz ze^NN?jEjQfYq%tVm0M5p8{N&b>G#`ZlsOrySsLyBR?25DubCRec)Qd>G=LBNgQY zkDP`D@BVqT@yE?V27&_w0@z50JZnLq8n(*n*N2Em#y+OF%dwh8M%$l)B{sJ^xtou> zi??&op1i2t$D;#*e=$IXOAD7C10; z&x4C3JUU#}lf}qEW@cuIV4J@5qod?_JQbB@rYF&K7NYHzKi8Wgm0SA>U0^C-HAO*) z>X0*S@LV1IKJs=0uuHV2I`qDC4V+gNm>-YSbQ{w#Wn)+?0h`wH5uYe42*SnFLe@7B0?(0Hy`!?3_RcHG&l+~jc1;YPX#q^*2+P-l zxEt1=hTOs}!1%XxelUK9TlIX1NO=0xA8@lJBQ${Rl?3ctVNmY?{j=V^l;)&~B-8hc z?9!%YXA7WY8SEzOf&k+a2h31uA9!!#&W1<_j0XKGVCh@4cfD~FcGbAcfSEY5Z#I0q zwiUipH9xMZ(u6>i55m^n)RVI{*a8BYl=6U0L|!W9#I@$|FrrGB(?)TD%6xhzTjQsx zwCQ*1t8vBq?~s{troKaN6%{{9HilBVUz9$@5WB=gxbEFsu+9~_efxHvjq>-GD3GDJ z^Vh9IMf%H^F8xSJ-zyo4Mcb2I6fVj%Lffse)ebgG?=Dad4#L&a$et%ogr(WL2F*KF z;Tz-ix)E;n+T%(5=zR54l4B1bqfLxFm`m(nJ0d}`%^I7K-sFwxQ=?B2J1MNG5xKa@ zl$@Htd5Wm=@S(Sx4{rCuc&;+%mHU;UIy+UNgj2x4YGf0Dt-ii0P+Cy1@YatbQ@3{5 zq*RuqZc6ZqvR}P!@c=BS*@uN@5H4&I=ry_Q9X7#`s}$LJp`$bp)>X}4t!SBKWXEdBa0(`?daLB_jgOjY_2MW|8On|pVl27PZN2d!kvlbR$;GM(y>rQal6Cy$IfzElPlqt5+iRCoZOw?V&33~{$n_t$O)6+Rt z$k2_#y56z3riQ$l7}Ze96i zBpU$bAFtb9ceNTCh{Jf{-Jks7N(3L^V*}zFW``o?y)?G3fI!(^=~8YJN&90TFQ$e2 zMg*K#Jv(`Iy^01j@QIdT!KM_FR3ppeTP|HPP`Fz27 z5;-PAYTeVhnYE?#ZdkDLNia*0gyDeJxwD&ecWZnJBEfK$Mq_&K*v8>ryA0<sSWyy(3$ny(I_m-Jd&sLVQrcrI)aE*^!^ zjswv`f9*Mtz@4-H%~#Q{1TTXgi(0b$pBpocg5BN}VKSLqI(Z!gl4)(Ms;bJ#$$>SV z1HJ9^&64y8b-V!j(MAHk1h_&woHGbCBQ%wmn0R(K&a)2F)*=wrnNF&k!f4% zD=IqSk74{(Fnfb@Eg=C)ZLRZgs?O$`(h(5{{Y^8H5Iy~6k-fD^Xv@}iY{$)GnXzlk zx?kg6%Q;((cI%(!tyISjzEEt-tntEMe`c}1PXkI#EVl_kRa$8Oih_~4?KxzvrwR3e zS^cGi&YOGejvMJQW7XaPmM})zfY+Nd*-4Iv*R-l|R{W#>Uv1>%Ig8S=kQ&@_7f^To zZJh3J$O<+1IQU!zrN)*o7rAdjWXW-hdI_dMPda|DtTYEgFOnkWwe-nB&}S;D!6$|M zc5U-2;78dm)Zzg=5*0Sp;o*uhkJVn)T!%e8VgA3iTSH?Y*^qUmyU*(=gH2a4YGlqNi;n*&e8+~ znGn2L3K8*XpHmOaQkja&NJz`5?q$8FV+}E3aBOJ4o*ekO;cU(?!~LnyqsT9K$o}X? z%{BTzbeWC7eGX0=&5NyvPVESCKDGtc7%_?_<+D=?qR5@E&r>5q>`>NYINT0aGVL>RTH0ND^a7 zy01e;R(SYk2kCU%>#fFEQ*Fw0}SvkSrTciVNCB^Yo z&v#O$!yRh!$j2E1S_Ra5(&hRSD-T^qkop>I)>lT3BEk<>{Ar*fW#!@F!s`&|b?165 zd18iM!d?FruXj>`vF8$!1f$ovz;Db?;!1P8|2z^x*0>HuH&kPsjlY`Q29xQNe9YP8 zTdwAzFRr~;z-JwGyw}Dl<^}A=6AmK6vox4~piPZLKkPQ@H2P$i>z>-D8>v(a_b84} zB3~UXG*2EYDxQbNR`q_mLEmLaP|s#x=B{Ke2^g$42Z9 zOqHPUh~w@^&34(Xna^<^Rf>uW(;wB1qCN$@`teiLVti7{Q?VjkIYsugK+5X5($wbo zlTL#aG5R>?SdB7a-cjebl5&QM3$7!zVT(C9)C(S_LPG6z+o%;@a20+Rv20d+;jR8+ z+%k4Av>9v!e$y{_%_1QyKIYI=6BA2IGIKh|=l7mx40mz(ZrZP!F-;V_LFP`G@ZLb; z4H3Hn1vJDh*U@EXuahx22!027JES>dQhQ{J6Xvy^Q|yta%N?TpO*!-=JbazQR8d*E zG){lER$5W9ZJ-V+X zUgjL^lW^W_~gte~Q+fw*s2O?f+qR~MWmvJf(x zUTfA@yKclC=528MF5Y_^sTaJfe3FsCzWi+;&VoPPeHBa}R~03xYYkbKzob`%Nv*-L zS~N^gUgZIU*L8%M`>3D4es>U()w6WTW+Y}W-y5b*%n**hg53GfH1;6#?ocMSP&X0b0RAGaRg!9CJN4`!uy)LB#>5ffQ@B^M!Gu^Jb)%9-0 zwujC{S4|oJ{K$Y;o)zI=5aNLo8(w}Nfz{Ewv3rcl*9wq#*8>=6-{zyu3KzXy^V=c9 zh~zd8{0nEB^wg$1zTU^GcAVhFn5LnHrk8{?QRW33R^+R}%;#o(ywkO_?LsVOC0>u@ zj7jC&nS~vBOintPlK6L{e#Ynv)^g(heY+0pFEPBo91WX)3B=cLy&L@qendny=BAE* zVtJx~N8;Oi2|eFu5N*&Ybj+8Ak zROsAa;!h{#cnDJ7W7w%Dc-Gk za4LngGJ~bj!_=Y)4MO%q=1GAM;r_US&J$h?Dw-6c|JdfRb-@55C>&N-T#Cu%HPDDD zS&Qh~3cDHzxP?~1xmERYIia?j3xZ$(%xNe2Os7ApIFWSe)*D@^opN72#wp}CH?3xH zAvN3ZMAC9_-Rsrs3dDm!hvXIiy_l%1ee1Q*6e0Ei({S_hN)^adhVh1#p0dJ{{$p+JfJ~xq$xcI9M_1QFhptrl2qJHNKpn)s@K-B-} zjdEZ9PZ<4=!T;G_0POTbSc-8i2MFZ*LJw}Wya0EW2Z6S3EZsW?D!PLO{SP*F9gfxf zLY(;$sfMF~1lg^rG%LjRfp~;@W&S-{$&}%&xrC~$hnc&~*lXzZ&{EZ~RhXs& z-y>mB4C_L~CI}?plF3|4^ED+k?QaO;wM0J5r^A@se0m9pR=9lwG<00p#ih_@hNNsK zx34@hy*JqNQ94p3m-B^G;_V`6=^&Q8Ra~L%+&$w$dN#$&+^uS}uP=|}tUXBjdQG<^ z66V(fc6c)icF?Q*%Rw8(Y14B7BmiMgNsviyDy@>Spi;JzE~%X z>&epdd5m*Uu@uwm2%kcqz1-G4a1N6H!LR-0-eW0?XP}nF4&8Zpl%#^1hoa&=XD?^H z_>9GdG0T=-kC&n?1N$3cuUbJQ0_|n1dlVqs2bxycw<(1^%%h7d6aTvHsdKZ6HeqEEjn2+SCp z)7S6JbvR*}mZwNN*#hF*)_@UrvYvEo|IEWNB{{K=a{B>SzNZ1r7@0Z`nr}tj?gw(6 zFBRbD{<)dw2X|`f)i`rIs;bSZI;!(+D61%|xrsOgrDl6Uc`527tv$5vp?z${3bnt@<*3y|PKE(oP%V z?q2Ny@0;MzYyjSyP#Vh5&oBDM@17pvG!(lFrV%>Bu+GuYF~6^WIXb4NSFnWm3Y#P% zB_P*oCi=oNASvl}oxY$z$TjRW-8Y|5{~6g!Nozf*;<67Z_{-s&>OPz^zvzjc*K5E) z=ZfT?g^7N%E}5_3x@Q<^vgTIW^vTU$V{`B|jQv_oV1t-*x{)9_M?AJT5v}Jm6tz~w z>zQ}&gJ7kePp{V{Tgb#KG%N#`=PgL<@ZL@>-qJY7)J2z9D=-A!4jAPZC4uLl?0qA? zq-S&L)MAnCbKBkkl1C81)2f3%UMaMVJB_O^I;qFRX8JF$END7`!Ae=*ZDL}mN}*5k ztrBID0VhGSJ_alu{TAM?09VRivR+=Wmgg>qJgSM0`SL-CWaHG;^>@(4Z&9;~N+o_D z5V+80W;mRrNOQ%#kbAj{tM{GM4uS5WXDN9|^xmAKh5^H2Z&~!336wYf1`^i?K*I@s z#+2PAG0OD{uC^Zg($y6w3yj#v8q<+phKa1ynW3zpdfca@k}vh>mtxPRjsNnu_Y!@? z-yqc^yfm6y?cttG+i3ah7f1m5?b|o~;$f#IyPwuDV+DnE&YwySn}PAfcS09xDk=e? zZffLu(nKha+h32ndz7;MXa54%uQx)J5#cxSto)>1HgL=ry{_$fSjaWYOsiYB!C<&3 zW6Du_{Th>>?XlX}fl*v~sk}?EELXSIWK!FeA=QdIIo3m?H$EPyC2Kyp6YB3{6O>bQ zp+ow4mMm+Q$eAw+hP>2cUE)N=839q){;h&CcGFre%!@EtBd_Xjf83n=up@?+OIbDY zk|$|n1#dtgmh!V&fR?Z44)Cyd<8RkO05+^JLcDm`*rUQIMBRAi7U;xDn;uxLs6}@6 zyEyuTWANFt{kl3anrNy3E(&(c&bxDO#ZmeW#%46OZp0D|xJt+?}RQCGVe5fs;?q~{Uu9QLNn%{Ndvp;K41I(fTmliITPmX0X*Er+h(HB1eH z7eUDs{8Q|H3vsnm{;H|+ql!=i_gyOHn>B~qrbl&)URqHlCe z2f?Wm4EbU>w`@Cx{<7{8`AOMW55|)VIOcfo(VGle+KANe>O?)gAIOoYlkQ6P&XGF;FKUFy>S!lafM1xQ*xW{vTfYCxLUpCr&{4p7G%6nDN~Zm#9pF) z$qL5mm)1sXM@)#9XR#HlPb287tc+0O5Kj~9&{>V#a54Md&qX|_)cWR?y|1OZX*-lG zL`$#h&H{hvs(U9m%271V2^~oTicz|{He;Rkr7qF-mI(geGCglNa`$(23yoZa$#zLE z@d+Ywm9YFtDb4wFEda_CsmadHt`AYK!E`no`8*Tqnv?>c$ZQ0eOl*uQq*MqEr_R zd}v4N%IXo!zXq_XFx-s1ZPDtlvi%leV9zkoF?0dw*uOd1|9#U@U!^KD-cTuT+BI8P;P*% zc0_CHRax$8qHciB!SxO z>6?Rc8#y5C<|OTiy~-y#&7z}+En4@UF)p7?_Yw{O%ZA+r@2fDj7vRfScHF57psJ-uJ5N za=L}{m?$!5)_QsjuN`l#jrHvYxYGi7WUf&KfZlc|KF;R=knt}>zZ`Cyh$qkO{{8_J zGF=7=nSTDQq%vCp*tD_EOchzc2# z`pD+T8wF|))yNfx6Bj*}4(gnpop*gMfd<|#O*NVyPc1+)Cp`~#52GnbIAx?R*UcK$q5?{fBzw_1Geg|(FbgOjRM6`EH~;vGpxJ5$0aVyWI8V>kUu%tLuJ69~fM9H1_@yX)M;bGwD`n5ApANH71*_Zx$7i zo5lSO$=}WGEk^bqO>hP>MIH0~GIJehb|}0jN0^H92iyqfhtN>tQvKTP{EKPB_B1p! z`@W5(70G$f*q>l<{b_)HQVeEfs^I{+zFCfx2EX}q6S+!K0BDijvG>~-9F!o$&Yd|A zg6%53*hXeweDwouvnEYmwB%0NPZHhm^qNrM3%#j2-igI=`Iq9Dw?BuI(-Y4wWhrJ{ zkfLiW_<6hgWVyO(@B3N}b)!q+P#av$y!@gehU_zmIBLthPuWJ1QpfU5n@%^=MsqwDLh7_E z+56zU|9KFS#<)p#=l5L~#D0=UaD~b)KA~h8n1M+>EB<~w@6JL8ao6Sbg@V{)KAV8p z*oCrXX$<0U9Ur4?Sn8YBJT;lwK~cx+_@aX8p7Q3S)&)AB^11@ENM|QG*Oz(D-3`@v zt;!F2!+r|`K`l=3V!pjgLZz*}*iZVnvCenLsd9AgOJst!C4%7*<%wsY((<@x{IL=!4c$(|cXd6>62 zz@yxpZi&fA*RXN$0jf@8Uu&GjuhWs`Z-$HXn9KqHy&ugXPd;BZ2L%8@(SMx&mxuWO z@n@r z{PN0GFEgv&UXMt=rny(3LM7gRQ~2)iEL`v)ia`ZS)t&14I?{&)7cx*#uS$ux_9idc3rSg>z&^Qn*|WvlcjWi$$ z?tYXC(Y%m)=;E~R`pjXy3qJ>2(|r2^UqQICQUpKG9q+e5=FfAkXflS1Md~t z-s{xcl^1}h+b8O%U=sIHZ?f!uB|_dpEssZL<6yK>(3k+^iQ3>2yN6z*d^SFNPeL&2{FhUD{-b3sl**kh_uz+l(|_KfQK5`(c%Z%B%J{O_EcV zRbqI!gpW;=U~Z_=s)>N0TFODTl@FeKYBIjrYwV%#SQoC4PT$o>+blE~>JPMj6 z$XXT9S*B?oDJ4Vtx!9O7SJC{rLPH!E5+&%35RWd~&WR%o*ITeyzCNrCZ^zoA(?3H;2i?x;%!-PiFdK;+9vu02BtJd}7dxA4=d5L;D5VHr68?71gq)rFP$ z)*TX6s`Nft>5@l$ zRk04r5*tuj)#+)LK6W>A71N+|#{3_rH?P|0H0eu>#NPq3%|CO^3}2D`+C$=MJIVF_ z`V~K!O^8*&n&0+tR<4jHIFMno8mzVP(l%Yz0CRE|Q&LOyUe*DJf8)11au^tRGRI8I3 zkL(*vb&eC1E1G9%&9#8()o1J7AV=G0d5zO4gx~Oo(Z3wbdnU9emGXRE2DlO(B1=xa zzp(Q1^g!gU`&lW^*@|cjBgOS?5%H zuz8%PEU5ly4=kv2M@`1rY9X!0Jf5cB0J98+NI--n>SA1alGII|FLx)Gx+X7|oLlrx8W@mf!w9xn&N-C|DG=gKGZulQV-g^8|2?jWrp!FIbxHTsVX7_{vHF06 zK2DfndQ;MUzQJ6erp#H=hY~(U!n4S4y`nq^Lf%SNgwr4h#Qj;alSX1eu%7>3O-+3f ziUuc;V{tAh6eI{=yU=2_e(kqdAZA&e>=YzN9$*QZa;wW+IlwbXdGgEcdxVLFqPg?? z1(ai(oKG@vG(lhu8{+cw9354qJs0^gzYkLd(Y4{|qd)KvpRCn`-N|$B!0%?o^+J=8 z+sP-VD`>BiQ*V)rwyi%o@MZ*asKX==C|k+o{JN75#n&cYpT&{O@CWbMn!E$IGB6wO zKh9zTZ=jo7|D4J-tc87)Cn`?;*~d*s{AO^{U=1c`QR1hzA}28}D{sr_f*>-^&&P!5 zNe1#VHJd9`fyw&>@21(I?bTwc`~ZksNMR2)jz2IM^piOO$zI*J;S z!G7GeB80vJuIW!1Sscb+gWo9aM7XrChqALlww6Gk((L`^d-4xTuWqlpC;X-rx6#Zf z8wh%Mkr;j$l@^4qTho2sq_k(ie>mMoXS&R^vOe5lu<&xSr(iWuDFBRbF5KBHy4xAh zlsYc}@VhZ1{bD4azTEtS6PHyn&(7IcW`P4Im5(dIrj;u#HaC%gH+R_ zr#<1?;?d|~g#B!P0h99LbB>Kh=|)K+EvW7WEC{Z$8F#Vv1K*|9ilArMy_3aG#c`A2 zrBL(W=Iv7B?~FmvwffI*!=9OYETFGJA*W%^JEyk8cN8Fk^pcBTTGkt%dta602ZOmE zXhz(8-yrAP+K=DhA&m^(d6eJjewyWzxfi)Hy*czLMAw+ieh$R{V;_T6Os6(j)a;V= z+V~`*+hE@YYwrBCt}bZJnt6Q0^T&Mu_=m$(bE9tXv^kRD=($GWNzHV~DHO$0 z>yLF{59{%Ad{E@*q25``(Y&;er`Z*loT8Kf)7 z2GDXx(bH4?(AA2v(n)Gii=^+&kr+_Fz?0nW3#6ru{$JEyZ1V$$prFft6mtI!6t~F$ zZUp|DDQ#qv0w6nD>;5ZO{tq6(g?@Wy$Nrx#`oEoO`(S5h?iL92_61o!+B!{=K;aY* Q5EUR5B@M;0r?1}sFR>H}q5uE@ literal 19760 zcmcG#1#lcol&)zpGcz+YTC$i~7Pg>;7OMpoSYRYqMA@Pij&cv$cj&GQN`@E3%$ zx{Uaz$_e6Q@Cvl0n3CA1Pc<<}uRs{^I)bCDuJfl)sQv#e5J^m^M4vt>4#-K0X}TMp zWg-}3nLmGY$?3Tm#LT~4loCU#dp7-q3)j&@3=MsT@&q-ALo6cUnBgSOIC*@^b*IqQ zr{|LbsG%~bkCyzrwYTci?VmSTG*z=oH+!EH;*z7a^6Z{L@4bnu`Q>rJcj0v-eDS9} z4~l$xkR5r~^=Q5exsTm2WZeIBt)=d<54;U$@9?k=W{5rVp%)Sy7ymn=iT-7+=}`0z zS|59)wyLh~2rh9S`vwvcI2!)H#WnMRdH1dPn7B3v(R+uiC{hvFCuwP-$;zJlhv)9a zZX>2X_%&Zz07)o>6~R(`6WYteY?%D2wvl&`L3URVz98^v&h{tp=4$jTd-o%ka_Vh6 zrJ4zdaZh3xRpjNJ=rc=XJe9B~P)ynf5OF!4fkDD$?si=?C?YKx<5>g*pozYsyREz8 zxwHnuwf(ruKl{eKo)O)(evPAU>bdoPzCNAVXus}B36#f0O=lT3#TlR2)r|2t^8STj zJ@@(S>Ow-{vaAHxVp^N5Ba8vd(zs+9If5_*$ZARI`wEhjmL8>ad%IgKlR1M2rHlHC zYc@q%O7DIB>QzenrW z2J8D8z;+u|+*L%Otvw^Vd{MA;?}6ac&|I{LU)b{N^ABEL`!#xfCyhcyv6uTZJ1xDj zWEKvq8ETia6`X9}_ZDL9BN>TirLFT+PE@xHxuHPcSE6}ZyyUdi{_*tRB6&Wh_zv5T zSG%c#u8gQ8f`K7qKKNXg6N&3zfh`^PD>k7K5fVUP4zmvq4o+0G?=meqS=s~e#kjq3 z-{2K^65tLLZPAX(OaR|C!afb1d25QSvjxn>*IFVr5l)OYMGL_E9gG+Iof`DIJB|x3 zQt3xR%)n&SK)C5%;mFg*&(M^O!7;SQ?N-s}-jL{5tzTh7GOYb-mfOv)~Bx1jH*|)?8z}LJN)*9 zKKw;Pk)Y=)>o(7Z!V|HXS)Oo`?W=&hf9cnp&QKl$_VF?*3jZ>uP?+p})#+@2!WDfa zZd_D<$)1$1{1CtO;Du|L(-K>ysAIR(gw``EOL#f8ou^CXwC26fQx*2TdU~Y3kUEe!SKZmVwr|M~|_~-%&&}LPn>z7J_*Kfu65pH9mx!T-z)71X73_~;{bZ1Y2vtuz1?)7wxxYxc%Ae9=eZG z>57alg0AF=o||;*DZ6@FyO*x5L$nRa5jGyD_40kxM{kPYqOP35_}xr<^qs+fjWn4CMG6kO`6RmXd;i~g-YoQTP)NQ z;B!#kwcO-ADz#SCc-($e#)Pa$a)Nqyv_qHPKN~c>dlxuuq<*G-G+b1UcD;jg0Nw;^ zJ8n)2q<#j{KTF?BPRcsT*&L^QiQY~ldUs^;m)-|H7!I{Ru!RjObuNmHbcmdQI?%pu zAKJV}eqZqS<&VzHw@0mbmSFJ_+-Bss8lU8Mn{Q|?fB;seq*o2hH%XfIRDND6vYUMO zc3=C5X+B}I77o5*FK_Z+bDsR%D9|*WC$qcN6VSXHEwtAnpxqSP+^YoHM4F9l6w(&I zDn@57X$N_bwmGk&<ng#)T$Zf%Jv{xG*FZ#aW>6H zwdm{N5mJZRI_O~G6y$nW^%y;O(?0h8uB}OC6aq&%@9}w@_L=Dl%4wVE#))8XoPQJ1 zB-0to*(rfeWsol0i*j-#Z1QX+E{ogAuuX1@+Ut5n=CNauxE=d-2r1)b+5dX;_0ky4 zN#E{9HBIUM#eUG$_mSiSLtAs-gEy#=gQB?s1GujKPV`FpS4=BUlh45ewHm_SHsajw zRIezeKXBXjN=7-kn5qo*jfmtKwRhemcRZ{y?>yLH*)vi7`3ARn#+%<`-2mT}E6EOI zk7mbg9|;#9AFqBl!Gf4VZ@le$8E#1JZ{UZ8T__Fqo#8<6 zs6A&hiS(`EZ4O5JMz~bElPB#Ws3>xwEvPf4DX?_Ohptp5e>} zPbCad^-t=4Y6yMVT4QpAENw5&P+Bclm6FQa8x0K^l*0wIs!=;#L+uk%J8d&BB+Lu= z3K$6}JT;=*xE&q+o~H&0U~^+T zcTMnkUQp;ZBEEuKgAkzf<#-9R@vSf7R!zc0@D=Eo81T8ZV z5MjTZ_0pRWGHz0CaIA<2#6#0qI#{};)(NrsP&6wg1dFbV)vh@fn@BsobTClqxcU$rQ>g<1X`TuLQ z$7$ZgWgBupN`b(Q@C*dv7d|;gbkE}^e-U&;P0sf5-yg~*&wN8^Fv1I`d!5Gziyl0( zrgGYA(?7D9^^iv&URe1j*0Q4S$l1yi&BtWACQ4X5xZwT`^x2h#tu=q=um{xPA8>8< zUavnqYCH>}gr;LGC&+BoxVd$kEri>X9;g_GP+3Ie4ucOJwUs5n9{^#w`T9xwF07YF zPQvlN;)(oD9V#=9T-Sb}qG*;wbP~B@P?s6I(8mHl*b2D`KEqML+y52xMr75@>k8>5 z6eM0+q9$Q5`{WmLIo=p!Twgsf$o?m2yA#KIAW5U6v}k40wYa}EWfmxx7TvWM*?Zrm z*jwNH3IDe3@_p<>vg)`7o}IYwd4#L_Dv`i!4#FTI?n)Ee3t48QWBg}x3-Q<|2Oi*7g0p=p~cFO+I+Rb#1n-X9o&OZB-0 zg||x(GYEpr1msB@e<2WRcgke0tsRyr(`CVMYGbEwSs zX@-XZ;nNRKUru#Tz72IMWS_ccQc_{|%4snSqB*WIZU=wqVH9r5p>XAwV8EllP@si|oX@*0syKC^*lD0W7)FNd2Fhh*bqDD5sx zLPq|uGWNM+h~w@#uQ+c+FtTF9_sj@2C&v#UBOTWmeixi0tM-?t8tsjL0SkzOvTY!VkXE z`;WNB3HR`Qk%xWpnlc5skN^5r8-e|iHzsqxF#_570uWX6V<)YG0=W<11K)Sp@^-aB z;W)mG9t>m^P1DDFWCV|CLzMrb<0E7c0O$3N`F2%7%inwEL(6l3vSZW4To%A@I)qNv zF~+}~brOaL>Myx%t8ij`T9DK%=+&D97QWW=aZ|&KiHXUA5bI3-5QbMz84E<$4p4L` z>gM104`&8n_WYvfGRR1ZCpk^=xBIZ^8r^iD_m?s>|Ao)&yLkRuscF0W7c+4jz%4Al zMR`FM`nNsP<+@a2v>7iOCsoy}SC%f%Q&5XUV!QkNDCeQ?vfNAYcps_Hqd{DF$a<_| zSxu4|ZXPXxzGMhm96yU=e6Xi4h<@Xel5uFfAJut1K~6Y;h~J*&8Yw~*08j+I?A|<1 z;F14jj7tEyOJPEKzb_uzCy`}C;K=b`y85X%?PT%SJ=4FZe3fw4{^P%y4p-8lF)hT7 zz;s>oJEf`z1?p?PC46#nnJ6hqFvXaiIoEiQjJI1W?->TbFes0^yC0wHd>wl1w^(fB zc}SdeCVz5z6KVh@B@i8L(Fj(7SV~zW(!ba0XukJTW<{m+-?u-3pn$yT-V|uTEsn^r zk-^GLv#%}aESZM76LK4nNBKq%kc`RYk_G#arp=E4uBOXDLQ; zdh?_N>BxA91tLi?hyJeDW=?gCJ6WObMXBrq;jhQ?2 z5U#V~yWt8Xlucs|3K?zAB(TzwJt=|X(aKczE5h}gGH;tnM>jP#)-}%rwVoO!tTM^K zqu2s^?R6`-6p_y)2mwje@;0m7n@z4pPZ@p;np&aXvWM#?9#~Ge;p-3)F9(0K2P&56 zH~w7-38sI`Kf~hSr8iU_G!7hndlXfsaHr5`GW;?>`EuD;g;RgH5q-t%H|r|7+Kp+u zqAdqy26w#x^IHkdw;qMD=ZaDAj_JXqu7K>E28gaez3dAbI28Y*XFRwk5uzr`n(cFL z?exT4J=INoJ9w7r%}y4yCq2%-XACtG`zk~Ud)OTnYUlwEBh@?Li57enHY{k;TVV&O z_FW!>cz0vc7?FN(0AiR7VzH_4fvcVNO^oQh(-F=VT?4q{yMLzRoZC%Vzeblz&Q0;bn&``&t_!GF% zjFog~rkFqmy!Fm!!Y8d1_Y*`-RihP~qPHA1Gy(GdGlIDZ!O%XZP1`RYle-+dNY84& z*~&XF82!uFJ+3-KeM8DOG)p70PD+!RR-P2EbjqJwRV!^KOPf^9N|St51BuwK8*$GS(o%!JZ~Lt<>k{aRu>E9feR7YNp4VM!vjl^8x>t>PyoeD7AM2^1B51>0YTj7d|1^NkU2Fp{;ngQHWbpA@LIV1!|`&&cp73>g|QM9+!_4p@p?xQdwpY7ir5dnZvEf zB#*%>yn>1z;jWMa^&!s7g9#?c1xtgmskHc9vRnn|!lYJmVslz#&@LAtTi3IVR>@33 zRizt4GZNGMmd|pZA-x_p#cf5dh3_np`hzNZ<~x10B-TPg5QtIgv*KJ#&IiNSvwPMm zc~CrSwdPt{_FcqLBaa}UP-a@;A7pU|;-s1Vjm-_CJq_vh~(T%&BfHF0paZG#Beorz2JrsKWfP7&`4dj z>_DO9$zaiz1X$}bl6gd%UG5l$QtWHUg?*-Ebr1+aUZH3k0`62ZWMNO;@?zpE%osu( zoNIogQP62AZ<6Di!F&uxQN{`5!C~5z2ItC!QFF_UenoeV7ijvx8~I+%_b=fW*|t8k z)HPnEpn*<34v%);1!A_n><^aiFtVF!&W{hXI4u3|SM0BbFJ!`)^`Dvmi$Tv-C7VkF zc{LXcZ$~S?KfmQVtk{Ze{&@RFu2xj+?3_LZIo)X3G|cmvYWP`Sk~LY7!r_lzsB3Q! zhF`@hIK?qS)6m-5q9Y(9zFDbRxk2_2hv8=Om6VwpRnVJF64rJwF^J~KIfg8Z+1udy zHBA&V<Ren znLB1*Z=5-n&r@#s`YU}&`%*}2#=XP7E9z@O+??5=H@^!gZn6TT1U~5^Edo^^NN>Fj zhhsHPOF?f=+7n_N-Z8mmU8|64tsbH+Y2x9LOHD1QopAaQ+_A+eX()Thth0Xbac7iu46u^q`2DK@1IbKuzY!$=oL=-NwwP`u# zcwsk5`IzkP!EAsie0i#-{EkV|;zu&i6mzl$Kv>r7|&74=J79*f03VnVW!QE$GsC84AYN{us?g#9hqTx8vm zD0g8T2){VR4aX*f0E&ySg9g4S^&!a&<|ydE`;$K5PnT(&bkO9ODI@n56MOi-gjxR) zY=#`6VAtf2mJcYmHvNGJX;yK3-L7NK4ncX28&*__iM)E<4QA2Ld*eO0A`?xa9` zZu5}qHPlxi9truBew!b1w*SB;+e=xakLnr|He$^o7_^%E_LtZ~iHR;3mx(oSA}uDB zdf{~isZ8;XcaA+Sinr2xlf$UPTA)R`KWR>Y7N#Kjes6_c2-SR;|30EyAo?>~1G3$^ zBvCP0#S81|)*Rhk(|8REs%sfv%wQLjzNo-$lZNm9_?O4%^G87*LKfL}l3qy>>d(2t zE#4=V1a=)6gZ>q4k_HUjhK;m}0}Df_t}ZpcL27o-FuF#fKaD0bds2VgZ?~4|&8RJY z1`UYVRyF%XL*<`yfH-wkFwZRgc01#>*84NkdC53ZD}ZU-oKC6EfR|3w&XqvdnoM-w zM8Q^O?Enda>w_gW$V2}7_Bqb_U#o%AJ?2Ci&-w3-0*yKLMpnJH9^CH+%X!u>`uYo? za-C*esEekFA;ATSA93RL*&XaWDm<05I@NbUp%<#)o~{EH;~Y1-dYeZNJ*i!u;Uxrp zBW;M#`P_PNd7VAB9LZKbPOdq}!>U*8JKkpinvTICaLyj&q#R7D=XY4ED{48lHlyy0 zSy$`T-5e=!dW-6|dQAzy6Tkn0Af%R_t_Lm-I+gnGqQD{qP!eiBHb_S3_0;7e%?%d! zg9P4OhV)M9|A?4oqL_~96d?YAN%wzSy7K>?0^KQe;cQ0#o2f7RH5~DHTuUL z8vl0u9@Wgwo2Zrr$($90Gm*{Z=)XbUjiUvmD5~HO+4YT!I}CumQDC zLrOzqZ(Re8F_G2WvqBoKg5I-|;r#}4J$ezeMc}sbFf40UnfVoFko#fiaWlS@>O^RB z`VAE#jUD4J*sLv8ju5yrj=}}!nHh{Pg=$zJeXR!zf6WLs2N7x3Ww?aU^47LZHsYY% z^yi&)rF4qB^gxVfW@ZV@!hvVgNq;kJ7#gwB;eKu0(XkUsvJZHM*$=J6=BM2gI_LW zuV?(8Kr3=;2y6e&t)iI)twfg##P?t0OHWVIYZGPnoSesx zWeBy!vbbFLhYI+O-#9F&p<`p?%`I^3F&gvX#S&>VXQ-Q&Bg_9H>a3vk)~Aq(tv1GN z?b96B7N1Z6G-)!?n+6*CsvSYFN!ei|ZrIxmPeMRmjgFC|&kZ0Z=004t4!T{8H(J{< zEUW!|@H1$_`u25B%QuK@V(UeNuI6f94Gb3`sic{EHqsIv7vR^fKlHY{XSieO6j&=w z2ncS_`qrxWa=pB_sQ`wxwf&%)^>sR22$4>9_$!y4a|{)7btSC%BGG(*@p!Gcs(3w> zA(GD;U~th2MU@rl?|@WGYrgmlvF807x@|z1WZ>JnC<4f@^YZRW=5V3{bnuc_`;80P z`M4z?GNtKEL-ykWcOahX!Fey9CR{4H1$(U4aLCxn@@?0GoXQj$c}xblXZjCIh@9R0 znzKLdV=XAt&w&?WZsw=i_jkcmB2;x$1xM8{ql-6lBCV(afXf$rh0Xe_d!%x+q!XX? z6s@C^=6&Uv+(|@4nleY5O_IJh=kE*E_Z7^@zn2L}d{O)zl!78-i2DfE%zyELbsgJ)8CJ+*)^XvaD+ouw9CBsnoKe@NQ6MgSvb zvnoVoPQ(3an`@Yu2U9MsIVx;@T^*yPJBDF@k=Df8_LEnj%E=-^rfc^0SHvFAixR7_3;diA(GSeRz8CzU%i$)#6@Cg0~r2HOrVG%f`ks8gR+p)?CgXg1ygYyfc$2bpu9lOi0 zdSW{FWN8*$%WQ94V+ZcR*rRe%@X8j-nT??n2a7PuYQ^qIFut=ybv?kKLU*7>lw`;p z;Q6aIygtK{UVN`cULPPh%IfIFIUWLskm0^0g1)lE!ohZ;$Y`AH{+||qi*3B zV14NR3AkL?hQyw^dhp*AU%95D4mVu%_~804vg45|p7sm635Zw>oo=iY5+>-z`eN`(8GdRDr|x`{dC3 zaeEPQ#o6J*{V(y_#8(GO$2rx`&WzpTBy49W@69!f zRgAW?|Gp{G(CKM2CNCyfK+s+faJ@-WU-W#go_N?w-ALuZ2Ill!Up3$6S$iBRz`6WT zjcK`>jWbmrjBs7{l8MymEGFK?%r*Y)IHMj$hOoy1|L)X^eJd9C8Pv<}4XW+P@OCs&k3% zt<>xkzRODVs4lwwaTareA@_X91~YRi^v*oK=2PKva0oT$kfuzVR)~ZbJ;j6e(t(&tDN|S1hLsuykp2a_}FYfy9-U=c_#F7pN#ss2Pys2^WL2!Ma67vYc8JMqqPg)!;6NJ5K=B9?x z@DRym%j0lqmy}|3#r0;VjRWvmr?&@Zjd^D0J|p)Y<&z6!^-N(&42Gx^y6rBd7$s|$C>Y? z>=fjhlL6i{twEOSc=*sn55a3&j)N*eX$I|f|MA}~+TjRAMvT&E9IEOHGM-XQbUFYNum_G;887tHXH{hfIAMCBhpmGP&|HC1?WUkjFJ!X`(_{3Lm5 z2C+h6I0k+(XuX{k(-TMHj9mhcp_&&bKdq}dA;1w{E%{ZceKGeDuHm{1N=uz;T+K?M ziZ>HI4v$b!)oa8Z@e7C7ot7%d{auaz`C&aw8K}(Ki6TfY*^?Zt$B1VY_3Z*`Imz{_ z!!AQ2OoIf`Dq7TVpJ80#+}H1ihfTfV5>NEG?iXlSNe`P=QBV?UKqEi}hw?gXVjt?EV;@NGmgoedsf?QSA+K~U~en9tf zW-j$vp^8`w-obc$Sms>&v04Y;Nt4w{I{xK5Rb$Q$hrElh`BPF8Vz5@R||F-g(Z{J%2s^*YQsJ|ba|mzA(z^44En`NeGW zcdqD(_u5ujecwREq%1IBY5&`h%PFy7I#QZf`)Sm*utK?EzB-E`B<{0VOa*V5qQvR< z?hH*clAO-O0H+$K=)g{cW4OTne!u6F^&BG7xygYOlEe^zU7SpfmsDMeD-Lek$OkWU zEY7j%QqcOT+?R|l09`JnNwv>3qGl+b*K8+;4aGtj89$9q0BXf59Mz92Cw%}#@nj`Y z=*u_Z<6CJnCH-K;I?O__m#GA^Mzb^YsDHvhhs=dY4etEz49}-zj{TYcaDE z&c`z}MN|KF=XbVV$FP2-Eg+<}zW@gi9s_GM<`t?#tB8Ch1-65b5q&}CK9CB3GiWDF z?odWVntR|>>I(UDW-oWbdha~EEWpnd&0fmuuxHrOs$ofOw50lQpF3=w-$zzY0L{;N zcZxys*I%Dp3*Ka!IDNVa6Ty-^DyV7^A#@D2IqB))VhVS$58RzT33Os^44kHfmokh5 zd*tdx~%|-;k);GKK0=5`4B4@>(9rR7Jz1_xEyavtqG+5 zwPxkf2aH>2YYR3B%$6Nj=(Dv;U88F%c@WS}5pE4E(6}t3tT_-i{`KvdU;jzJ?vM z2pRrh1U&yy><6BbvM0U11}ig3g7}FZd1r%YCzYg$lkWlrSXO_T;Dj3FbQo8}GgtPB zjlKmsI!h4>7=@d^WN~}&=oGHNrK#^fPIy!I+6`5BjNQ%dnVoVKi8wN9=sOGvy9}pe zM3by{Nn5)hAv&~IMtdZyEsUO!2Z1PFIHv2q3lS@`ZEd}NGngaa#>8UoWodev>gAU*$IWgzI;iqe1EOtu52r% zvA2_4TML3iAl{9le;`48h~^!4fkYE_7~!uYADK`;=4c--0 z-OU5>B(0a;P`LKdzca|56=R8z(f4e6&$CK=UN9p(K}9M+Sj!DZ5Fl|{K2WG*uo_EP zDk5*HFQd5CPMWs9K9@|BTr?qv)VIXbp!0@IqJsY9Fr;~Qy%<&g>%g<4_Ib<_|6qqw znWaR)YNb_0D8B>rZf@hb>=!V=NWw}|5YgE{j;s-ZV5m5DfQq5b3OY_-kdY%Bals& zDRD#(1^KEi(qI=)Yj|RR0#lL1GrnFwS-X|7iYOUAj98tqn}?-8FRsTgUQtFhh6j8% z>THnU>e{cqs2@zRRbzmNHrI_=-HE7Wa5%i%;`Y!z{F~SgsM3}uAmK0}85u zli@G#F#miU^hqbiDu&44W3DZonA7N(VPT!)^25I8 z%FMT2c4TJ`a30kZKe#3IKS$Dk9aaDQ4n=amMnM|)P7l3@83Y@2b{b2rLSXq$?I`Ur z_@}|{1$@hX?}G85Rj`D{A6$3ei0b^uA%ua;9}H~A{qKlPh-(fJDZ5QUW1k|VKKHUC z&w4dWZCN8JkY@_Pjj4$CT<@yHPP_-NR3Qy;_F5wc15+bn^plxCz@!U758~Fh6G7dT zC!fqWSfvPk?KXzFdq^f~0DLX395;ms{#eYBGIsmIQbW>W*#kO1vE*J<$*e^VX9+_Q zsr<@m4=uxa?&8F{f`C1816yEn$(cPVF+~nEFPng8VguDMhNyHbwOzs_NtE{ChkZ$dVfxhZ$EpGJ0aSn^;`NcDEb>o0X&qOo7g z^di~;@O}6pPT`4(Lyo;EOMEj0m&)4$GJ>cNAO=3!K>ZV}y_nNY*}jGntgTfBY;~n5 z!V|*GjW4aT>AsdO)^{kKqKxH=Jk=P?77>j0keG@qaW}I}v|!|+4SNn!gV`A^F`U;p zI~3G3Ssy#DrXK$SHc`2zy&}81(W#Az4hyV!UR~GP9>rY`?A)~NwJ0H@ zjhdpeA(#>pCi|7H+(+5g+_V)jO|ayU>(oX|B{5e(uz5BNHfVwAq96ab+@^34qSaY` z*vtuMg5-HI^_iEEd|Iwav1qmCi=!vHf~EV|ACzB%d+;i1C3uHNT76*Go# zvtFtB)99VHQX%%85&Fl*%Qyq$k7hW>2S3ce$(l{~=OUpfmws%z=1!oB7b*r;^v+I^ zZ*PlQ-|ke&BxfwiBy85!AD5R}JliHuCYW52ebn2-C zb|MG8#XrqgKV$e)OHPX5(HY6p)-=f_ExBo`>(bkWI^I$Bv1dhvAQB&k-cbgOm1QNF zh5d3oHF^bJQe3TS1ViCQ$<9ZR=^DVra)_c?)M2iscHkIo;6%RYHscSTUh4SS;EVR( zcfi4M$p8Z#O>bh0hKRnaCCE{Ruf9(y2i;a*Jq^HmSye;rwY_+6`x0P*Ql8f zHWQ0iUM1gg?`Tc@qfaYX%Xob~jMQ(`dTBheCQfR3RlzrhRp9(bydU@tG~Rq62MZqZ z3ZMR~l}i6$YoS~h3W?2Wggp`q0RdrZ@nz}YBY2gSv)r(Q5Cj5^FZ}Do3f#sbBik&8 zJmejSn@{B1aNkv0UxP^3{C{>?l2SST4{~R*x=#Hs-zGw2aJy-l9T()e$b}?+tFe$ znulNDD1{v8nBzTZ2_JUqAhE(#@CQuKMr%q<>4}#}KHvJ_XC=ijba)Mn?j8C;N3<}E zF&YqKV~mO2_0htK;p|*TTJfTivPxbBsnTr!(##7XdA?{7XuF0230Crg+6KTT6p1amk) z_VY;<_V)Vd=`(^2S&*xZaQOb$+<D(WqtSt6;XlGDIPEM|8 zra*zH9pw9Tz3+ZpkRmL;Cv1s2aUmic$g<>+j}<;qT)K<-j6xFpE_lj8rJM|tV_;Jw z9Oq~hVri^qISJ`bpZ!!!W&I zpdYN>WhYy39~@epXjk0u{CkCWpkVi#MtRkLV92pB2~UDM8=8HtZ@7qv8{J?zuBi4h zn4{e2gtI8h^%){3=Su!r8p)hh1{N9r=fkFNmth>%4zI(8aR1<-XMfaN7L{Xb^fw|M zf29}3Z>jnBl`Pv}O?9k9`TRyXfC&Q5L_;2xEm2K1Ix9^8g>N&zFm2mh;u z6F}-Jn$$uo0zBG>(84|*WknNPbQOO1NTD|NV%kopC4S5=A#CkM6T^^6W(Iy2cN%Hv zXZLp3aR9#C8VFA0aSQ5CwrE%Munl@QwA)-vUQGf#lMltW=}yP9fb1( zbi;ADZ08uFw4NTv?i4y;>yR3^5H47D533^$%$Aj^nWa-j^`uJf?+Y{AZ$zM1fXm$K zqKB;p&a!@-U!@LlewN)TzVVc%w0N^GUwR|>bEY?zX_c9--|5T(D}DRZPr12uYUJC$ zcApD{f9yWAalgFOaP!fw!IQ(c*&Hz8{w_An7y&+`5`_BVd$CszTXDykZA0HSM zzs!KeHhXvpub^mFJ=|e%a|O=dGY)%pDhX-9Y;(QJwnqh z>0WB%v_A-vW{Kx3zZQPz>dIqx$f&^kyjG&BK&vIV+^OJ(h9_)9`D&bORXBsmNgvCoQ@N1k4=LT|95>SNhG2?CG z$_=ZUurK{W1Ke-_@+ayvFxHr(<^5j-qyD>!xtv69d$i6qG!)yUP-1fUli=0aow_{) zf^?|kyrT1^QzHNJz6p_-j_>ScZye|d6W9MYm@nO0JMm>6UJAzkkn4Q{yH3Q#mB;hU zD0tO>R??}LC^_h@a@P<}Lzzi5K;*LT!F=8bM@yMiEN>=(h__aFc9jq%xik6~3+?<1 zZWgi|!P0Fm_R6!IvdMf5HwK%}4}a+T()N5mKCP8G{JIz4^}T4r)I>eKoZ!iPVr6my zxKQszc@@Rqo*|tISozVDm?BXoS`Q8O?@k-ksSB_5-qehR^|OX5HY6lFn4=(!7;DQHAN)elgbW@l zG-$#-V~?>idpAt|A$5n6fv)1dt{Y?|S7tvKr?;K|z0pxJ8>5a09J?j1Oq(bI_P78)YjL5JYEyf@p(o_CiC@o zx#yenF`!Sz&@u(r)BwEJYR#TvIH=^N5PyH%D8-hRQM^5Jc?kw>75bV%h=^D-|0C5x zUN%OIdGqd7A>O&jG1z}O?q0)u!|?X~ykjAGzelj-K8hRxD9}3k7**_t!~ZS1`JjPc z_pegn+zg5v5i~n^g-IwJpfH|3PY@&329D0#C)vUpZE7m>;pojngSK}jXB zyf|@RCPE~YibDJpyOA0fnYAL~!MSCahvs5P(Ei-BzxMx0p8ZX>zV9*$Rg>b&x!_B$ z);$T4;~J*KIzNc_W*<2*b+dHy<;RS8(CkAV-OVyH3rsRmlndQSK7aZo2h$_#%P9X{ zEy%UeEL#q@TITM}5PJmptFHar)O&YQ-3h-F>jAt>D`(u;SZ|n5KbO zj*pFd!r{?y`ZIaJsb4(XMk%n%Ao+yP3UDC^F2Q@~1LQQSi}XcHOiNyW-XW6nbU!O zgy&1}KR*vx`b72^zwdh6#<<3@BPaRPNUosRTnBRBI)|cPR_e{uV3i-Ptb7$4S&ozU z(l+l+A;^mpc7m3UOpW#>7L9i3QVSdlAC^c@sWi28krqLW#8w%VxJq%O@E_Hy#p9vtf(hbJ9QdbHN&=>m=UGLa zjgy%q!jMIlc@90tsrMEe9*FL2b5co2D=D+?fQ_N1p>?3nJT}_9l%<)aAf`F(Dhb%s zqNgYKSkVofMY|J2gF?u_q({n(2h7RrzPr(AyUW2QQLQu}>sFy@v3Y`739)-|cO174 z8z(pUCm+71Ucbnv;W|SgkA>-JiW>#EG+T$Ti0VHpaCT1Tud!_^fb<`vIp1_ufBx-d z3=DD0=U$LB%5hK0Z*BHix-SV-2Kr1jv=UUH9c=BICN8Y-rlWKI(@=Rg4~#*7!vA!a zgzZffl6)Ed*DWGj0wR#I|Wx9u29b4n}fMLB`u zzAQrJu!!~*9R;LD{~wK-u@TgIseUj&hx#` z^98Y|a(R)qu;o;9Edc^I&7sse)NCEaAM3B7ua9S^^Bsd7kv{SB%~aq|qd92Z=K*ix z4>$H_;dPy`HGDJ-8I%=0@T?%+s+Tivf8hP`>9=-AWc6Y|Luxga=43M<_!;QV8`l|q zv0cY1iQUpxvj`O}&JqT{ycE9BJtOPG{wb-jmq}gY1GXqTOsaU9xNhWay;e* zRphp}EHFDB4^G3_Zn$d>#|yD-n})y`w_`Cy z?rhSx<4qxeadIY7j&bhBL`N4MdHT?j6%?AdA$m?2_&84W)Bu5Mrxf=Tl{CY+#igY} z_l4O?T6p-3#}D6S>yix496*J z50{ks7OllYoujwp^ztRRSrschaWu00u;{HSHM6tj5TX}@Wto57-#%0a3UBHMz1rAK zJ$Pz;43%C1!*J*&fTQx1_8`o-r=ajoDjUrqy%LIS8AU)d$xEn7qu>3(UzWS zx|*HTK%;xPwkQsdd`kX&nxyx4FT>|uC6>sC*Z-LkdTshnxPt^N6o;o-Pror7I&{=< z-&Xtgc(%GWCt|)e7MGE+O;Y;CW#kv+xKlms%0KXYAGp~*{e*#I(KSI$FVch#KZVC3 zS#F5?R)~w55PPt>_V`$VW{$3ny@X?4ll!FYb7#@)%5ZA-6*6w10uG&(rIh#RtMor1 zE{-~!lvPFdjv4AkVoIZHEAvMSa!=p6lGg>dAjVgjap-kVgml&FuVlWeNEC=l7VAfR z1w@om+CZ>ndGhDLYrZCwQn+58Ut2UyzMaumdIn`o2Y4kY!cx#UPH8=sha@MR8;#j?6%i}LbL z&H<0njLx&~7e=*Ra902+m);=u$~*Zh?W|WvwbDfDQKlMZPxJ{RRrG3>h;}AVdQRgY z|L#XkahyJtUASO@HU3Kl$v|!(P4|_h2~)sHE=cH7Kb$mSjt2q7hB`ldfuDw92+9Y0 zClY(5AkpG}JMgY*REkc43V!H)kPMtv<>_9wmMqiUyn!PyMM?Ce(Hp*4ja}Z#xy6?; z>769bWhO|nmVyDBpULQ6SUVzr-S3Q(_e0lLj4esg%P~eMBtkZk5-GsnC8q_pHXQR) z>{pk2gNs$tWg|)stSG1)O9I5I^_`EQAN>-UqGw9n^5%Rh(Kv1C&DKAh;(qTGCRrr3 zy&=>iBDY%qklbXh9{+_tZ|1uIIQ);snkr`L1o@<9DTNZ67cyA~f}TQX3KRTcHUK_? zHX1fM1XH^>oO-}W)9ZV(!H|z5JwOQKbhA&KpXJ=83ks7b=8~hQe+Gf=*KEDQ(RL<* z^LuN&l|WlN^sx!89RF?mGE~YMbIU1O%oXW2>6)hL=>$FL8l%j86!G4Md%-(OC&7pm z{wd`|dcODI_!QBV`0Z*Y#nMf08x`QZ(NZth^&2dB=;x4ZCDS|l^H{#YF8~MGh(BZe zV+Tl`uGq8!1ALTPyddySg?aA;nu& zH{j#C3Gd^Z50Lk?gK|0Fst=R7c-fknezc{y*~mzNfyR%bqdqEGw(sOhEk~IGW)bY++dP+NLnR_nPjqh ztnbj)k3Q#?T?QDh9+?t#D<>JY95rFmOCNHU;fedayzM)nhT)DBq@fTu%z|Tlw@;Kh z-sBpo9`Ia`Cj99&$I|WP%xpDMclEZ(`zmHHf-5oARcmrZnt0l|gkF|$-YK;2C~77R zWihcHl8TQ1VOdH0OA(Nm!0OH7iI2B|xWHXgWc<>Ymdv96aJNy-Hch#gi!sRjs>85f zz4tP5E*GWv6TyWS{HpR?ZQVGf3Z7L!bS1T#O|8!<HeP sx;KAd7~{X;)^D}s)4;{DLdSPuLc@j$f#~-Lc;#%L9n8t97V4k)PxRn+l>h($ From 3aef331ebadf79b44fc14ee681e038833b6d0d6f Mon Sep 17 00:00:00 2001 From: Nathaniel Chin <22572406+nathanielcwm@users.noreply.github.com> Date: Wed, 21 Oct 2020 17:16:44 +0800 Subject: [PATCH 002/486] update kms keys link --- windows/deployment/upgrade/windows-10-edition-upgrades.md | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/windows/deployment/upgrade/windows-10-edition-upgrades.md b/windows/deployment/upgrade/windows-10-edition-upgrades.md index e2806e3c0c..ff9c6ae451 100644 --- a/windows/deployment/upgrade/windows-10-edition-upgrades.md +++ b/windows/deployment/upgrade/windows-10-edition-upgrades.md @@ -93,7 +93,7 @@ You can run the changepk.exe command-line tool to upgrade devices to a supported `changepk.exe /ProductKey ` -You can also upgrade using slmgr.vbs and a [KMS client setup key](https://docs.microsoft.com/previous-versions/windows/it-pro/windows-server-2012-R2-and-2012/jj612867(v%3dws.11)). For example, the following command will upgrade to Windows 10 Enterprise. +You can also upgrade using slmgr.vbs and a [KMS client setup key](https://docs.microsoft.com/en-us/windows-server/get-started/kmsclientkeys). For example, the following command will upgrade to Windows 10 Enterprise. `Cscript.exe c:\windows\system32\slmgr.vbs /ipk NPPR9-FWDCX-D2C8J-H872K-2YT43` From 3b8e94507a3d9dc77119d132b3005d2a8f564e08 Mon Sep 17 00:00:00 2001 From: Jordan Geurten Date: Wed, 21 Oct 2020 11:22:36 -0700 Subject: [PATCH 003/486] Added entry point for WDAC Wizard topic in design-guide.md and added topic to TOC. Wrote the sub-topic for building a base policy with the Wizard. Created skeletons for other sub-topics. --- .../TOC.md | 6 + ...wdac-wizard-custom-file-attribute-rule.png | Bin 0 -> 152395 bytes .../wdac-wizard-custom-publisher-rule.png | Bin 0 -> 168464 bytes .../images/wdac-wizard-rule-options-UI.png | Bin 0 -> 113690 bytes .../images/wdac-wizard-template-selection.png | Bin 0 -> 122681 bytes .../wdac-wizard-create-base-policy.md | 136 ++++++++++++++++++ .../wdac-wizard-create-supplemental-policy.md | 21 +++ .../wdac-wizard-editing-policy.md | 21 +++ .../wdac-wizard-merging-policies.md | 21 +++ .../wdac-wizard.md | 53 +++++++ ...fender-application-control-design-guide.md | 1 + 11 files changed, 259 insertions(+) create mode 100644 windows/security/threat-protection/windows-defender-application-control/images/wdac-wizard-custom-file-attribute-rule.png create mode 100644 windows/security/threat-protection/windows-defender-application-control/images/wdac-wizard-custom-publisher-rule.png create mode 100644 windows/security/threat-protection/windows-defender-application-control/images/wdac-wizard-rule-options-UI.png create mode 100644 windows/security/threat-protection/windows-defender-application-control/images/wdac-wizard-template-selection.png create mode 100644 windows/security/threat-protection/windows-defender-application-control/wdac-wizard-create-base-policy.md create mode 100644 windows/security/threat-protection/windows-defender-application-control/wdac-wizard-create-supplemental-policy.md create mode 100644 windows/security/threat-protection/windows-defender-application-control/wdac-wizard-editing-policy.md create mode 100644 windows/security/threat-protection/windows-defender-application-control/wdac-wizard-merging-policies.md create mode 100644 windows/security/threat-protection/windows-defender-application-control/wdac-wizard.md diff --git a/windows/security/threat-protection/windows-defender-application-control/TOC.md b/windows/security/threat-protection/windows-defender-application-control/TOC.md index a8f8114e8a..731cab3d76 100644 --- a/windows/security/threat-protection/windows-defender-application-control/TOC.md +++ b/windows/security/threat-protection/windows-defender-application-control/TOC.md @@ -20,6 +20,12 @@ ##### [Create a WDAC policy for lightly-managed devices](create-wdac-policy-for-lightly-managed-devices.md) ##### [Create a WDAC policy for fully-managed devices](create-wdac-policy-for-fully-managed-devices.md) ##### [Create a WDAC policy for fixed-workload devices](create-initial-default-policy.md) +##### [Microsoft recommended block rules](microsoft-recommended-block-rules.md) +### [Using the WDAC Wizard tool](wdac-wizard.md) +#### [Create a base WDC policy](wdac-wizard-create-base-policy.md) +#### [Create a supplemental WDAC policy](wdac-wizard-create-supplemental-policy.md) +#### [Editing a WDAC policy](wdac-wizard-editing-policy.md) +#### [Merging multiple WDAC policies](wdac-wizard-merging-policies.md) ## [Windows Defender Application Control deployment guide](windows-defender-application-control-deployment-guide.md) diff --git a/windows/security/threat-protection/windows-defender-application-control/images/wdac-wizard-custom-file-attribute-rule.png b/windows/security/threat-protection/windows-defender-application-control/images/wdac-wizard-custom-file-attribute-rule.png new file mode 100644 index 0000000000000000000000000000000000000000..a285f6a6bc494b5321ed123e62e933b83041d884 GIT binary patch literal 152395 zcmd3NWmsEH*KS){TA;<<-5rWci#x@O7k3F3oVK`2C_zJUC=_=s?ogyS0TSGUOMpY) z=Y7t1exB?6IzMtHGkYd`_Uu`5uXV4;4{Gvn&`HssJbCg)Q9(xY$&+XBCr_TXy+VEL z>A>-BfBbstt|>3|q|^>E=NL;I(WXhxW?AlvgA{|>{i7&0Yy6lPEgCIZlV;!*^3_^ zKdXK`>b`^()WXJPBG&i?H2YP|uR`iIle)=;!1rDU3%xNUd}8hQK=zN7ziQ6KipDe7_UCILZF+F7NW}awxe-Q1STAw! zJs!?S3n`lH=r=@tk$F&Ob;=a=>!gKJf^SasUkOq z&fy~Beih+)4qH{`r)pjYOP$pP%0hwXiCY6MXl<3Tr#G$ZqX`4>6V@Kr?cYA*7p2%E zHYgHA5BKi5R3_Glq=J3?7hW6cl5WF?!pGoBxBI0x;}_ZPu-`P0;gaKF|F;J=7l-qs zt=AYn_#1$rFR8yujeKnxj*s0^_S-f9cMh#%)fczOWq<8|-k=DxUip$sV1Y82Q9h2G zlIlS;UC?DLw>Mhc&w1<>4X5NHh|fkXez+6??(q&cl1pMZE$Xg~q<_tAj#=@usb~zj zSoIs1;ly=EDWsml<3L2Qjl3t0&9og)u~3Gv8EYrD6MiB8afI--ZCp zPOX%%SkhDPBmc2b@3^*iDju&%_zI8r+gJ%l81rmyE8Kl%DM^9Fy)(voVw^#E{T%J4 zLBWi%WEyh#bIndrrct)E(~!0z7vK5^a?oIpyD$T~)rrbAvqm*O2N|J7?}9i4Wjv3M z__uHwJ-|CLg!0 znTrR^AlANdlc=83d6bhviJr&}G}p#fg+*^lGaO7!tLQDndCa;#ulvp!iPPJi}A*c!HEM;_>>nmvdFVl%;V4gWFQipu&Sm1*P+CHli=bUz+na zsxH+zvSfH2z-E0;g-)o^56M5>V_u$p$-?Nb*|U$Ct3JKEWTRnC_|}2!x^QBf2X0nv zGI7=m`REl&DXL{P<~wm^OU4_E3Rco_MT zz=~*v<70Qbc+1s&QB&i~K#DTs_GAiCuj+t3YjbwS(YI#{kQIn%5P_lB(4N?M;+|Kv z)o}RQjafWK*{vCG#>GBP{lWSzRgg?y^2`3zvpZhE-Lj*RK=^r4Hq}~3qaRf$Tgv&q zIGxBbsd5VYAIhT<)8lA?I(pd2*cQwj&zb1*sPkr>a53JvlNEMYf7wXbcPQioxN36rHOunczxM0Um!v?pz8_)QP2Tsj|3Zpu7E-tQ<^+7n`&JS5ae8j_>a9r?4$g`AM zHUrvgUJE!`OnIGgMoe|8tads4bqA8k2dD31VqlrtTEDL=6>`a@^Wg+mbke>C6Q7yj zvuPw(*BRn^nP+U)+b`>r3jR}iVWJsTZAGULv8``*`mg|~XfR&j^-+aPg3 z>K-Q5(59Mf9IlSS2G!VCtd+iho{kV=L{4pf_a2<&_vIq+8wcz zw*OG?NHV0u%pp^(eW#nUkLI^##K%&DpKG4>Ed7nTkN4|K$ai;j_M<%ywJj!RYvMcPXG}FnZWQ&z9z4^Ewnt zEuy%E-e;xp!C|{;A~+1>UP>Y8i*LBDK!w4YAjPY%ydD;oQnoZqbCg5 z5YVro2l^ea^7eOg40jGQGgJ{2UC$#OUE*!A-o#RCe6^uvZ;Hnh7N&7{_ZoPV*_m1( zfOvh`*cAm^>s*wy$a`rh!qz)TPB>bu06O#fC}>nz{RlR*2{E35&|72bBIY;<|KNGcqUd(`!nP!maR{VQF$cm zCBT?IM@S`7d~p@T{=$sLjb49yK?nd?uu7kI70woyim1CBbUBf#FuoKtH_9YSU={6+ z0%K>DhIP?A&p59kzPqhOOT`MC(VScv{ea?B_a>oSi{5+Qe1(#&rCtRAXJEWRAA?If zdzn#F7V>)O^yg_lPvv3mmk~GU=U>k57?v%n5iU+_Govc4+owy@{Q1!bx9ZBHiiJp@ zxjL^F5B!A-5k1wC#7Q1?C_lT2XB_R0YCcbR&F+uHvioE1V;p^So$u1it&U=@69JHy z;n-cM04)cW{HxZtp%?l>~0t-PghVovPr+~K4Oz;JF&%)K*7Ogw`)q91-W>A8)P!G zZ$M)z9`q(lbjDNkB!sE?j2{2)GhH}lbpEs?QNId_=|KOA*V})*JtUU5;b~V8)^&AZ zEz99_a$zjl1KoRPVwz(|NqN|FMowr13>wTl!uaxOyMQjm4_W_}SN@}zt1m#Qx_<(TNsF%p(LqM-fhFyb`oDo%;#RIgzlvRDB^%T6dmBU zXwA7Coh#M!EVT`Hm5PhyT1#ZU`SO(>)wZ2>UMgW6OQ5+2Bh@6Mx(u=h?YDl&D&A~_ zk4NlsxVqch0dN>Wc6Pr-eWOso8UJj#2@Ru(?vHO{1x;kIA{w)GSxjS-T zt2}lD?wZR)BA=;1z2m}Q9UE8?BuWPDG6@Fy<6avsZTVe;n5|H&yL_|W(J?N=d2B(jwHu%>vw4lyqCQ~q+tKO}96i3(?NVwN{~4!3DN zZf`e5XR)btEvd{5^)-F`1nw|$yqBhVE?(?PE)`gE11)`M^MKE zy&%H6zY}CRV3>6E6rsR8R0$ouY~_Ce4>D-YB^vNQm}&f~`;YejfSC;G$p3v2#*x$0_`ktb$_I0!e{`Hwj<@o5 zS9kXxjLZiVe~S*+l7CT__wVH#W0*8)6(CW z=)Hzg|98*z|G{lK=!EvY_Pt(WhD#&s{2p<_TKLw7N9Y-!e2zyzcvOvkn(ka}S^O`ew4 zrl!rGe_UN?hY$tOWw1^qnlNUwkW zWufZhjQTBh+eE;Kq_nVRT5GW+B4KNL7$6K$7h3U#2`FH%wBdOr8lkn>N<5_anI2n? z3$eGO&E0<7CpK-ga^BAa=I|5Ch^ffYNnHP^*>HArp^g|QC6p>sJ>ZGbdQ(e$1QQutSgIvt;=YO_m1Tvj2cB$muK@n( zF4d-Lyxq+5U*x2{pWC7!8C<8rigC^QlTf)W`Pog zY-}0Uxe+^8AEbEc;$;^&KC&l$eh4RN+a?B5K`qD2X1pWsWAHbFLgqywHp<7|f-7aU zS|uh7m+jaiP$(@Yqum#>woZ1H6Cbtky$~{^9LF5oeU;g7do=Ht+WgYiWGggEK1kE{ zPMlNCz~LL5DHP4UcP$M~l>o~5OsrS4QvX^9b0o!krjW+8yi!!HHZ@iIWDfNo$b$jx zQc*3@t*zDMwIw$~>+TyKONG>gT7A|k&%N=U{p`+Mwp9vwA^TJ2knhO`{!72dX`ECq zMvs&?rxgd2S@@{@#lJ}DWAN1mkZxk$#>{mhjwB4#O4jHUHs^y9H{lI62a8rJ*ZtvH0zuQ`QPyEmwZ z*d(-UIP>MI*y+{M!nqc~>rlkcbPivV1hp;58(1>koX^KQI2eBjlAfQ&%GX*5QT0>D z0FvFc_$%KypAs+8OR^;8)423vCM$8oA;%nXfFc=l9s4Nu)8&d;zB+@6P5csXcy<7MS$gG{VSUkze$52p+!cQZ0D~iA`0uUb1 z$EFgKjjO^1wt1Q%ssua+J@cq=7mPgZBe^w7n-aX5cG9pDv;G~uo0XOJ;O2Dv0AD`j|3841M1^dSmeV4G;l@JY3FX4k1rFqbe=EA^b z@2T}d%n^!wdw20^p2D53zr?QJm~SEczh+0_uhnrii>^;`L9wXKz^93S0ky6 z{F+Y)6@Z3{iw;e*VMEjVm0-E?#_pd|qZY3$vWD`hmhU(#QdGFtSFFQZ0dkyhD+wwn zM6+N~QgF-o|5Rj-y24Xe4av-=-%=MlDo?-kzsIg~A<;X|QF?D`ZjuRJbHjEz$@3{u z$y_+0`vQ=QKFSj5Yl?RBp2;u?9y)Othn!_qr(IaQv_Gvi9fC`6oZMHI0VFH1Z+0?I9v>8Uk?X)Xv_nw__5Xda`M!Mq#0Fg5 z@6EXN5o&P>Wic|mqN$Us@NDt%TcfMJj770oy8XI(3zS`g<;O*osv=MDIlJI3qOWRS zBnSkc@>&kOyE)rA4j>+}SVR#xT!@qiMBQ!J9>!9>z-!#pqRciOD+q_U{#ORJ9%Ufw zSLmqq-6*pQ`+P=_T$|Blae{!P>3CXqgXwusQO^hT%XF0u87ad4o>#pNAkv98%?RTLgvsRAk1isR4WE^YvgRho!2PRB1s6n0w?aS7g*c1amJ$np0~pu+TVWk< zqL8UFV}R%vJ3hvVIytXEp$+q0b&Jq&h1^iIiHStwQ~n$;ukF+dW_Z!)>J(0!qE?xt zZfSOA7L0IGch8*;uGW(9TQ~mB4bmu04qoKtbh}N{Q$05PIbp7>UQwa!ZtbRQ5R*A@ zRsv_vdMg=ygf7luQ`L%3sM#x);VRSN>4h-+lIFfWv|SS zKeeYdhjzljfa6841r6hOBCQx3eateYoPh>aSucZsSM{)s?*`Z`*wZLgdsE#pYsu#oObm1QiVM4?$nWj z{;i?f!Hs^~uYbT4jHTJ{@~|mWt?1$;4R%gv>Xn?YlBRik%ZU@<#K6KQ0Lw5GSjfK+ zYJXbJai9tv3m2wp1#43_2zDEvY->*VZ&`#T-#_Lh{)>Q)$dzI`%%E00_W`ArwJWnv zX201{f@j}z8?(;R3%OGaZ7IgAAxN4rGZdC9>Z@VhCzO&E;abBlCp<>pE(n&&NOjl} z2Fz!~cE&cIdZQhg*#C02a)K-iDiKS@rjCk_ zLrbyUd{CT9r!9~3-z*f}JYd!rGdn{5c;4fb8>$dX1ouOhZDe?>EZ9ivh<}|&+>Vgn zVrW3FPyWuKo8}@AXHFW#nc2>P?AqMo1*$lmYO))}d*hj^myh zGBBIr<_SD38q)T_F(FvbXWivH4wbZ6p0$_@gzHS5pw&o{jQ{B{yb{keZ3wB8Kk~i! ztJY}#+V!=WI0Eg`V@fAcV2)0~iGLvTr2BdWp4Tb8pStAPW8O*^vwXfcNBU(W*b zI8}|yACbd>@yiZ?`CN#TyG>ox4TB(fbz|LL^ta*EeJyW{w6; z(jM6moAE|Q$DzsC0=~uSt?*vQC66dQ|C5eI6n1(7^Z5Lh#%#)7;0^i^^~8x$gy3to(PWBlHmGfrd!G zW~bKgmdecyPRiNlMk-hB-YZA>&`k)34oYXX670@v{k7mSkJ{#m-tqfgLE^p$C!3G; zpCs5WUGjBM$*_)~TZf@qFZ-MH|=b_K!?ER9%0+!K7$B%fQ+2+wuY& z|K{u>mm865SiH{Tjgwyjc!U8ihu&Zwu5iG%326nnvKaPvn45z!z~z!ehakTOH1wwN zoC7BB<893MIL^YPZd-%`MJQY@TsT@dXTk1{3$@>rf##x=X8Uu^X+K*qkC{(=ln(?2 z+|L8eyACs{W%lKlC5ARRL?iy-8<0~OZ~g8Z=ITM{r*`TxYZqZQfo`OFJnNmIUH5Ps zH1t>+5Qscl3hoLa=HtmCtH$XB&;D|vXlWdqI(IotWs@t~y({W>yPgg~U30)SD zdkY2ccdi{y>ucZEo%E{0%%kb}^b$T;*RoHD2%yCxdA-dMSv*nC zh}L^J5g9Pkn-%Y!&UbobwU4)y~^`JK#fJFhQK<+3|%8GIMrymVRGoM;;+7jZiP zLUM&<(wcgg$+qU}H=d}A(VYUv4$Pt(sT!O`i#>D8ol;dB0!=I7$1j|t{5VS*zTNd> zR$cxQzC`0%ebt^{u+`LZ*uuNL$pPS6+W2(=0-QW&mq0``1;w?A0$q2$h#pA0WMNzR zW)x#x9RGG#p37cx1%rZlf2v;HUb}7~-+DPO-c75smml9|cHpkhgX~SUeAnb`UP3H7U;#yo}t~M3p-KyVSyqD zQ_8J}yZOD30hV#kpO((?*ccN-(XcS%_KlHHjLabNs0uVSj_a>>8EOFFIIXYxGH30+ z*NJucF9Vtz;3)CC%lV>t0Sjh}S(BMAZ#Oqe<8UO>hz81C$e=?Oi$hBnv60t|=za>6 z?r`%aYF~MHWlH5@H0E$dc1s6Dap9{Dl01Ah$lswyXHD)sl6GLIAGCjsGm!A>9c?ac zBfDdp?< zR(*5D)2!n#qLx_5cOz(ijD+taf4r^pRe=x1y8F+4CkdBTr$-+9->9y1-JSYv^L|Pq zgjIBB@T}i@8cFzsIq2S=nlIrDb@%g#wFZRZW!OwM4b!Sb;<;T;DoLbPsfN^Ka0VA* z#814oy^|2-d{J{+^nx76?%_4cMXJNdtq;Y^S=A!1jB)4ozU=cMDakmO`kvI)vC18vi%MCO^?n}*p#~QQj*I}QB^$Bkh+zI7e^Op9K&_hj$p(xw z;xLLZ-EQyc>ea}4m`aaU39#cUK^S(kTQ;LMb0wi3+Z_syFL+r{T*HU@x5YI+9+v}tC{y>;7*x8fpLg{og$*dNu8>B{S~TdyaodqlBxls}RDzBFxMjvV7s=VT?2OvH^X z<7;D9q#p*HyzIe)9!zk}lBaFoBx5ad6 z3!Nuc>&^)-$>w6>1POv0g5v9@nPP0A$?*%b{flPZ_E_J$6L382SAwm5JTqHeqf1Z< zKdGg>9uZJeyNy}qWa}uywC z-KzIx^0RP~j7{V0*YvqsUk1cLQ6(S(VYp~;pJxd|ze%*F0zQh~1PDW(_s>-8opDCZ z9;xDnd{#Jh=be@VHPMT=rOa+Tb(1S>V`ScN;i&mQPZAMba)UUT+ZV(YAp zZ=T9Cc0%TvL-t~_=7sPaW}s(|%dutzxO{$p&|+?6JjicYvP91E%?cGRvg1UhcDqDP zFo*C*RnK(;WNp5a&jKNIjJ(OuVtsiVl>_1>1ue`ecyQ_~)*c5?LWxF9w+K9VesPM~AUb=j1jn?sgW+ z2--+(w&tK(j#s;ElybKb7*TP*`&f{*TnV3L=C8LiuxzzkR*$qR)mo7?6NdSx@}}|K zm#g-eXtSEJzKOrDpXkvBjUk)U_T{OQMCnJ>9gAs(s$4ymV;pDb5pI6zZm*T4z%z}{J^(lWJY#4^7eB<2O% zsY1NJ$fU)HEp^DQ+Y%Q6#eXp$_K(}dG3G(P4ksnXOCBhKX}T4Fr`Sbs%v+{X>EYb? zIsbXZ<6Oi?15BnGg_P!>q!w@9^sE+Hj8}+O?Tx}9{N@*8=%B^+`}<7ew^;!;v^+9$ zI6m$eQ=5mgagPwJH|XhOsQRfU5$mrkCqr?+s_luLbIPZ9QjNlt3`!}C>IiE`k@l1k zU_%0v7RHEhv{t$0Q>3h#LEcZHOy@{K9CDejj-kvZ+>#vO55HQ~?d=b%%BU722|;5T z?FKK4AMykPD<O(zli>xp^nXMS=CERRt2Ia&e8Fv8+ z0~KH6V#1)Gqw!T1zlD#L48odclpO=SBkTGnPXo~!vZ@-5L;$M5AM?GDax|Ru5+>F- zf&i5e;*%?$G<0yT!aZ$_K~?lvK{b!>tsJzaE!j;U3NQWRR>sY#>*$psz`!K*QNBxt zaP+O66iPfwUY-Aq6Zu_QZ4g_iGY5_tp+!12^65QPOf2Y)gQoCPsX2RYALn;~`r#}W z%q$#`c-Sg2Q>d~YwP_A3yJ%asW_-Nc^tTTotTCNgK!9x1ht&(L8gdfij&;TFtDb(Q!9;+tX< z*yH8CeYbd_zOCGo$JAxLHoO7(u!e2bb(|q25)oIAmU93p{&U~2>M;t4x9)YDu}B zPov#)F2SA+kD{94Pc&cFB!c&5tq^(B+GQWUdZ4w*#DbDknQYvBF1UH~D|!)?#O$aj zm+^;+q6%T?pdl|)lp_W5Et z+86svF_STwwKJ?H?0xCZuF%MKw{Hr!(zF3u8ZDMIFnNlX`)qh2aR1}k~U{@6hM-bF{niB@Ru0=&*bRy;XoY2_$!|WPv~$;M8q+(D!!z; z+YiDBvzxQi+*#Le!CUcWvrM@kcKwWeU`4$=yF&!#Dr&iTWrvuN-JBsGYwMT&ycKsD z+2o?ivm!*x*{U#}+SfH{aVVmr6vdkmwuR)yWVJpm(onYy0e#(+SZ;N4<-hrad} zImkdr)hK)EGQ-{ChgwhGTAuarx(K_8)~HISRY`4z(}bq}knd=~2|AqqA%x_5QK)ap zV&Y52S!!cSn(<^Lcg0#nBxAtDv&?09pi-6H25IgH_YjO33o){CDd3RKGCQo@GXYB4$AzjfoIp(1-HIMDg3DHDVVi z-i}X-l^`yk=bgsFMq^(m24L&!c0^obkH!QMns{?aY`Kc%Y`80zlzLY4hT zqi2L_c~qHrdnCSwpD5ND6Dd^#+z{x4bkyPC=*aG8YGks`6IK#sxMr##XEmOKo78` zrx8h%)Xe%f|HbDedIk&GNl6xWRdoAwc5;2jHs^#y|U`{Gsw)AiAFIaB`eo zvHnk1AVyGE|F@)fHz#N1CXi&s(By$z$^f!JnTa#VFEPvFO9l$iQGxv^W-?_}60IVh zR-@M&&5r!!^URJf_{zQ$UdJBxUX&5!bQF!&WHib*wgBXH+>4ISD%0h9(;P4)pQfJU z@Wo2Q2Ryf1@2PeJFQ0Yc>f{o&c5Uc_S6!mJ0$`nu6sSMEdJP}ISyjFtdcmS&&73`h znOm-qAuy$z#H?YB#NsTJI}jOZPE5>}oB2H!B=_ux0CPp#Ra*Jl^96=ER@mG(R*OJ} zpxlsFy%tgy2vzZOWlbbzQ+KAjC`JvcHjO@{RohPdtKG)=w8JE5d-}!Wd!nIr9Q(F( zCqrX6Z*O@rp|vrbHC?Ut-8z=k-=7;hy74BNL2Ld*BLJ1NMYcsZ7BMmAEqC$ANBgEt z49kYN=|pR_e#C@QRejk_Jam;1eoV?Al`UnzO*QbeKm9(!^cv)Ii;qD-TDNi4P-iE0 z$jmkqOXNJCDptn5T>8g)b#k%RZX)4%38*U1CBT06P%g9zgN4;UpxT+OVe10hNAH^~ zRx9F!wJS>Bm{_wygpDq0vc|b{tH%x5%0aR+9nY#$imheGZX88VXFT|$D==*+p~jq} z>LBphT3@u3j`GwI$mP|FND?7M;VW>9N11WP1s`YS#q4-C-mNti5t)s@3J8@0aq#ww zh~3CE@`ed1@TN%iVfpnP!oB+D_Ct9f+eK`t>QrQrex2^v@pv&=`Ge`;B%dUQHKt*mBw7-9VlzTJETvt6LL+5ibn(5vF|N{Vg_@>%+DeO~ z0M?m)wqJwP*eI~q$jbGUvG(pzjBg7Q-}%Lr*9T{jXpehKCuXM%Z3g`$^w$nY@}M6F z^HKM?WE8I)NdQc+(s_$H1x$x#Wmr;p88 zCAGWyE=|$waron)mu)%wK9ox{&zfRpQE4JaiZID?P;Gu!oMcgg^1Sqn+OGSsmNhN? zv!m*@k2WW%Ud8(w4bbll*(ML+`~9cEk7P4s$2;H=R2)3DGflbn$O+>dZ=Ph)DxAJ& zy%+Act}R+A=yQDd(cHgb+5@kN(XY*B{5H(vZX_9X4pDC-Z-)d&&GtfFT2Aqf_}Uuw zSz9@zc618a35Y23pzaM10SoJPvJYArgGYeBWj?(@MBU+3fkIN~a*tj#`~7{D#ZpvI zSakTMqqc)Cc%2LL%>x;?fwu>O`DHwW(Wd+T^mxXA`#XdPA}%|*mShqnGHAHJJ(oxA zE^O~7Hl{@@oEv>E<1t;8_g@6Uo6{BnvOpANA#% zyuWNdZ=KxS+^dS|Vcs~GB6tqoY@n|EUmQV2vxgqtdm`6!ZB(H&+5DEReJk5CQ7dOpdPB*(ZrjAYWmgJ0(@kG&@(J^%Vxf`bkvHmz-Kb^SkV#xiNBso#};e1jT1<99Ws zq^s@C2s+-H_sqlFO24nf{f|#3f*Oro(Cnvjx5?IiW6o|thdQoGAK5DJLpNF#i6!Cc6psEQGydp{ z{)>pvuDeKE#&6V*3v)>d((YHtIoR79zCPVzF>M#y82V;0l+3bFv=ST~+ysD!T{NBp zUo>IEP#s?Nj~RDvPWq5yBWCU3L)Y+-kFiP#f45zkJ2fDpx#=rzB%7P02B#7}$3UK` z{M7X#h4<~%r;8X;vXJ951aD-zPDN9H9IGG3Q%WB<&O1r{s0Qp!2||sPp^mD+*3rY$ zg4K9;NUvpJGlkx}y))mKu@9*HyS<bIKkWizuq&2jUourFak$oL7`OGc6;2ph^wh!qoY}8WF{fwmLl`Wa zxP5v7cxJwG)3Lm5+07l;SdXXI8!e~>l0dhDfc0A3Bd?R0HKg#MESmYBetmxGf86=9 z)@dx*h&a(stZl8^UUp?#`wXuE9?!5?suXZB(G2HdNMnSfP{tH_sUn zO&QG-Q_+0Rum@Hq{?m-wE1M?x*1`)B6dYf#$&Sa!arksSfMvH( z&7ewFw^?+srC*QKJ2blgMtB7Lbn;`^d)}G1(Z(VDt@E#ef}*-p7pJtoUlokp#qL_W zvt$ElEkq>HhPR#$=UbVo;nyY9U@ggYEmfB&ogXr2X5(P3@M_=|))IO+on)NlO#Pxk z>R71*$wjaIemgXsdUhvPsz>B%XIO&YZZh?vJ5YuR*^BCQQtj%CAVQL-XKk#!DbU=( zoj%}C=U6$%&U!4x5m3zu%wy!=M&j5|?)JQuBAE)JmsFu(>~a|RJgx^jj)4E3i#ps9iS2FLu%Frt&g@m9ztL%w;=Y0+04t&y{tCjGPGI}doQM(-R3>Up4vMw?H zV=XssbGHJ%B*f-S=20Wv2MoN&*visk7p0UdWqjePPZt>%N6R}T(^soFU$bqahT3eZ z;_u;$QHmuAo9lx3dy6qdZ;o2Pjs>>KC#FmFqR-|_dDg;r&dRdCcom?pu_I_Oz$%-_ zRo|EeH_-O5;nil5lLv`pe7UfCQiTWC?rTWr@$RMFWv9OeR)^4>`7hXp?!-&*2tz;) zqvd&UbOuq)fk)-$p}%XU&oCwoTgsqlijJRG`R0$AnJoh$mx+|lEiNghVca0!Mj!qC ze62U7{$70_7E|KHgp6EY0*$gY$!L=gN^ zS<>>b>QkKh5A`D}-@@?>*)0G2ISa?G)Z39%vG8Kcv=Tj9CZ8YYpZc&&H5hgHwV3WA zbol9}76>-<^a3_HAgVJz^NNK7U-Dq7^O{}Ro_MD9=imEmFP~VL?U1nkp&Y!$+vGjk z@<~<)W+c3tSDeWG`KbK4Hog&*WM@;&R+tt&RwRvN3WFZmM>WpNB7Jcb%8#WY;eJ#a1tmdl1A> zWcxF2zlAV38+%DF`n6lc4dgqvCOjQBz7fSio{X9OL7%i#WPJsPnZ}e9SFoaLJnpSWtnp+? zy%>T!68B$BX*McZpfj8@>a9tIP<1FokiVNKr{{@i7S5zmHT+QOh$Cmj)(9CFlX#A29*T<0BQUw)A;ehnX$*cBeP;} zq_Eo-t`n$IY%DtcWJA@-Abya3a{M#6LbALiJgsK2Yaqvy8#jI|yY|yoJVqpbeZi0E zFOzn$`D2+_*-YR@GN(SKecT$N^3CnUJbdRX9+Eo?*Wwq3f6f1~lDSb_*u%|U#RBrU zI~~~Re%!cDYoC)kt zEea269JUK(FF4ZQ=2>k$HHu3i$g`z}WajJlHt!#E^ncGmVYXV3`H9Zah|MzXyZt7v z>>6T9xNszDX;yory`n5?5lpev)*+(0`_)9WthC}*LkxVduOi}yzu4nL9>>! zsnAaW?Ycm0oZV3-$q^fMKG3i1$oq$_!$C31jtiE}S;o{7_HdSJ>l3oosS z?qjY=ex>VXfOt!QS3|UnZ4vMQ2hHm7q)%M3x9Bii{-@A? zx=bHr*x>Br-$)|i-zcDC)gMQJ&tZ^E!e?!px6>hN{6aK7IQSL1Zx0;;!Z zzF982AJ0A#_YH4nz7A`pY)K7zyv)7;)bo2kn9wFtQ>gmgfK0EoH#1+9Z4GC;(=5z9PuPETKRt;>EY`IlBdmhE&hlQJO~>db4IDMK$YM7XVEjO9Hpbc_FQQn38*LJ6vV1rgQP_XYvPd* z(8)9|&YR)oLig1t#C*N>n{t{c#Jm%ZZArN7YK%STsK3}!L1dcXmIAvWP8uI43BH^E z$QaT0(sJOzx@*nM-x!8l;G3^(Ua+&U1_L}gC;rc7z0;O+P*IU_dJLYR_hzJ^z=eSmD zBMrEiYQSX{@SF3pmCD4r=t7WjEvA}A(6R&&R|(9N@ir;pcfZVHjb=M@rU+0k!q2Q- zSv#MHMn ze@(~(rI8F;mA>bI{|wf+?5&8W-O_i=gZ`s@rL;*8h*;#d{;2J=&y&cLKa9q>82Tsc zR$kep{El;i$;UA$QFP?RdQzZ>8+ zN7JEHDU^%$dd^rX*Y3y?0ufAj>xWwAMJ0EK#E9RlFZ8+#oBp8_el4H@CCESl?*x-A#)WifggrPH>mv4h2eacP9|siU)U>V1-iLJrs9$ zw?J@recAu>p6};Vt}CDN%w(RKS@-&_6)f=SvwE?yX2K4W)F8ScCsdl++=eSxFE-uh zW}1-$Tlv6F`;5DV=`Og06MJL3KP+;7^R9xbUZ=ryJ`n~R&5&F$qSTF1#H7i{AWIws z857Rhf-Gk5oi29AnBO;I6u@7__wsLMN)5B)-6LGAY;@7yhQms!TBz&4ZfRZmxY91a z(-@6wG0xd2wmSzA)_HxRQ9r0I@nn3vurNG!08T^q>(0S?${PHBPfh)J_DOo)iBB)S zCXzHH!;=LvgK6vq4e0lgdn3?0NJfO=uhT_;2i|mqtOZwTP$!%|y_l>0ww2z$2*-0N zYdgYTaInBWZIqY6cu;xJeBRo(6z5cl)5&lCqnd|q`V=eD@RV=&7?y^U4%rl!f`$$A zO3W>sh;*MO#xN3_OsYfnLRs7dlBhsqli*YWsuF9>Lq0SY}XT>&0%7E721d zqlS&8&^(hh=~^k>haV5|^9e3( zI}NIL^@9uyUO_j`P^BIjz>7fdheD!@ZV~Y*TkG8UslUH^@qogki0xHk4&d!6X`&(_ zxOoE+>?1R47>^CW@?ZYCV#JH(&s$zwI?nPDO0~L6bQjVM{2AA8Cv1I0@cM(Yw(%g= z2|;u^uOr!fg?@qEVhtGq@03U8sIcXk`9Nx%(|~6HtEzGMt7JJ%Z;hQ`nfP=uU^y!5 zDDPYP3$qq97>i}d3EalTkR0*bs`NKKB)UORs@vHAfi_WL!5YVpWaflBX(QQ}ezJz{ z5$Lhsqo{K@xs|6b>&jrR5(e#iCbp=e+To&O5lWgm>1YJa(MU& zWgh+{e7(K+N@Z{WzyHgf6MBlGyFBv}?V{N2atvQF`0Mf{CE5Y>KDoO*seUoh-_9Z6 z%_8WYj`4J(8MhZ*J->_euJ}(Kdsiu>B=wM3u;onDtzN9`sW)k`mo!W&f2-f>=Bc+i zktb280(o(l>E999mL8|-TA0K=RxR%Q0&2!w6lWe*!5Nk*xTtD_lElZyzS~*8y4dmI zr`!~;P+?s^N~OX*$s-L~aBqeohx**llnJYWwxKaTKJ?^FP&pGOGj1iRx1XT#a>0f7 zpZ@fu66bZ2onAy4A1%2*_3KTgL&IbGQTV+??fv`rRso ze-Z~;CX4ifH3)}n#d^Hig~P9yM1kb3-}8=G29kfk_8LI3$K0~F z3s^a?j5cO(Pl|2-=YxKYWeqlPw~oCX(Gl|>8oH&S`ah)g?fXJPP22GQ9~ODjcK)Be z#&@luR2jqsDnQtoF*>QBLS6s8`N|@DI6i{kOoO97RB=XBt8VuQ1=ubT*5t$_yBzD` z5u_`ox^!dMOGY+u-P)Pc-Vrd}S6*7o?{$Y9CiSFZ=(2p_ExEQJzDkP_zux*N7>u;G zrF?eD@N~ATK_=5K)U(&`-UJj~sV%;%+`zt_^)0o88x9@%U|iLAe1AZ1D|~QMn#h|z zd~NvTctB&=sN@JRhSgtRNKh^{+`#KEHM@Kx<#Ny6FE;F#n2&vzt#2IvGuTG`&LpPS zsrpQePHNnXK~?g@jnFv96oCD__Yp~D6zGH(3%(`{ z;pRwi|2}xSwAMz8G(%Ykw&=q7$6RBV#Ak2OJ7=3yN454;XFO-imFkMW6k|KfEHSTF&lII;!3uzlsQ%usZ!_L-U(i$ubqe;w-}{#q;xlZ+8eR37)cv^ z3(>GR3}`>%_mgl*UE!+_sl5$u0q;yI056MuTtUkuVCRCyc7fJ!nZ@fjou^zJ9@X20l z@uDXsVNmLaNGmRr(|ccHd`|s^+LJxsSkx@N`ZOX+dy5gRfor<)QkHguR}hRQB?jWB zuqq^1e~gpkVmYSMl|4a!18Ez2lSl6SPAHXE{P5{|*9(Tl__k4}YdR;WtBwG))|aL= z!Ot#aQW46QXd{^OjwXR7mcmE|f9WFz1Q)CJ(8PngcRdr+gsib$8X>)pAH*tnJ#n0` zECsH013H(7w;u%eqB4HJDivTJR`71y3(IbQ^!2p5nuA6>jZbWD+rtkLvll<(2Hm?O z%xuzBIK~s5XRxRFB8%`vB9g*$FK_&GQlBc%Zq6-s8ud%Q*C3h_kYeA{eB6RiUale) zto>}8AKWMyZDOu0@pyve$w;y<%?P_C4ch0Y&XI zCf`GJcwS>H`2J9A_pzN+-D=Li8hko@iW<}#*1AkPxfMi1_6;$1i?S|KpRFPb+*J!UK=G#5LwBI4^v3Q6siZ?!xPc$!D1sa(8 zJrjI;n}JGPF@}60_$-!7=V?OzZ+E`dBk&V+30o2xIG8q-PbQj;*4wY}eI;Kk)al_Z zNsFI?mCS)qqF01dHj77aklB5)*^^FK5PdfQ-+&s@@EoU$`~f%8kW#$T!E$L#eWi`I z2lz(_S7mp!NUoiT?^H+&Fp+ELOF4!A*JGQ2G37Mk=yOzsK?aZd&9|y=_`9EM2FFv& z-jil2HIAo*7w}sD_{D~E6P!pFiScZ!DRq#=De6{y{@dPcC?}y8L3h%jN7`D9WJUO3 zf%pz~KK&lX9Ib5!*t->}jcrxmc}a1!;MgE98en{z-93Qo}eLlEOh^7nM@9<+IQP((fwZ4koskiZ; z@T0Id*?)Gh98|+s5TRd*T9Y2z$H+u z|KJZs&r44e%q5zR6&TE-3EA5tqgk=S&0l26sh8Gh*vJ>DUd-AOc^jqhdJ5!u73`E` z#?G4~f{4O2mT!_Avr)*qKQy+2F4=9UnxK@c%=y)>7>GjTW09Y#I*(}Vl1)010076y z0Jq1u6Y+=5szph)!;rYMn>Y8)lN>PD^yR0B9n|uMgn$$w7Ad=}VlT3Y!DQ?#6)o?cn+~J8q*Yc%5T9K~ODrj-b7JH#m`Ub+%!C zci6VafQ1%!;^>QhI>ssA%RYnQN1E%(k;nzM`a>^)`05U=0EUnzq1E-_FGDrzk?JeB z5uf@g1KAGr7T6-x4jOoW6!fuRIMBI=skZd)wsw+ao>F4e;Yck#$2@1Gr5rc^Rk&jx z62dW;TVY1zw!=}8@xOJ&DP)``JY z`|Q&jeM&wKp{kW}E*<#tFiS80Y(Rcy5aDrRO%cvHQ9J%m1a66J;+9C+GSJ{Vwyebev~QvJe_+EGkNS{ ziGn*{NqpVx6GOd{d(kBC${l$6xW%Jqt=rI%+#n~V(!K3XNvgm zAEk3(tRNlZD4H;3^>qzi5yu8r!9>nA~bJbnT^?ciACWmi|Kb>@}7Qze{tz+FBa z-s8@`;aDkz(`bIRnN0G5JM^6d%;gTjCA!}FOM!xi+g#gIYaL72!wt=dZhcnlXSA)B z!OYrH>FG94RA~TT=$KoID&z&MdM5}yP)Ny+?vlCv2{dH>_tDb}bn^AkO<&97EC+v_ zSkS`y{PWAT^kljx&w~Sxz=H6$;Fw->XRb&PAC8I9aihM~S`lhwtS~lQy2@w^lrr{` zfn`|MOYy$B(`s^GTXHlwTJd=TkaYDIK6 zV)*AG)xa;z*rv8bZ3Rt^hHe?VcD(5GIedWzN2T!>&MHscrgoP%)1I)A+G$J~AKp;5 zzQd!8PpwoPr^TE~#>kW*oU>{kghfu?Fis?YX+fG^d)%@RZFa7SBc*$dQl8;%a$o&* zl+5K$BlP;P=dnEF@>)9nb&ZEM787Vc7iP~ZejbD8mCtEZXK2}XB%Gx$7{9sh*ByY6 zFLl9TD4B4$Vr?Orw%5IV-@Z)C~`gtzEDVqH^m*Uxav5vPt zrwKwoKu19;=vufQrF4f%@tL5O&(C$3OQ+68;xJ&liOiVVVB=lO?SXu(pCOhRC~}xe zL3*N1N&%|nqlm2B=%jyRE|}529;9IzxH8Y*q7^)yk&=z%@?;#fYdKxknei-o+;TtT zx0tiKbjz8TLNYt{==p$L5sVW5xh^$ay&)ndC1}ymhxVcohe@TSn@6Pi?*{bPYVt^( z>~oe~27hMBI$EAfqv}x$fyC3_XVBqddJcJ%zs+TDw7R5718kZ>Fqn|1#$t;)r97v9 z!><;My>Ep1ujs`l&@Y2MsB?Acax$)YFL+d;AF5K@AgtwkQ@wX2i~~~xlk42Em#;a> zWTxnAx$1l`%9o&p@C{eiM!s}UyUZKLz&1PY6?NV8YIhzPx|{JC1ioOnbDC`7gWg8@ z>@O90IKoohtL0n{-yk;6@XP0bZrqxcojehuK_OR_gd={G77r;{P7}KjcPojio21aD z#qW?Tq7{c~(7|*>@?}cZRev<-Xnkq>AxfNEfbDsHdTIU_W2lc(>v`+>EuI^g_+TyC zyKw9XWrBkB9+V^n`mA@tf1sS54F(gcrooU^kATLRmW8U8br;lZ!QNO_#M zyR?itS`S8(p`a>jp{uXpgzkGIhCOcn zDHIbC8k}<%B8E!N>HqSt+UiTrpe?|rAdIybq1GQU0uLZLZP0yx5Giste9H_a$&Ypz zy905pF(h0L^BOv_O9@Ng4#?f&`-Wp)Pu#sg;wpzF{m9Z1SSd+Om;sPb6ON_Dnq%fs zQBsM3s^&VJYniiO^=PC`AqJ?T{qPNUP_}DqI%*LRs7(F?Qd4WU|2?p}`li^N`NX;lUhgI~$dx1T`5WAWs|s#^$P*64h`;eV{ZLtQa*r2pv|Dk+MgpqB;Cdr_!M2 z^VF-=WjSwoQSPirI-NmbFNn1jh5xT3S1W`3X~hnkDVgW^>43AmYBe{)=SjT~Ap!g~s=WTZ|=-`V0p}|Sh@WT|o2e?A1Pu1dzO&)0_ z-}=??&SO_k$6QqEw$eSZ1%wx22Kd?mC{|@Q5k^RjP!6aPo$R&F7j79lH-uU|*f1eL z_eY}n5$+hu{zcu5w&*>3$-?+#x(Rcv+O_Yki@zp(eL-4EtT6s`XatywwpM>kJnQsL z@fG+9=IGWsbCr<3{X9rDsXcSTpK65=wO^uLPl%U!V`>%|#r$kd&=UNTWyq7|xtZKs zFJihsAwu%eP59W1@92jbzU`}NLE^q9J5!^*+pX&dXL-%Nc!-sN6M_UZTWo%aKO7m|Y&GD~=d8DJM&2W9ZQBjg z!-$cbImTq}$&sIr55^3V_o(FO(Is%*O1mk6PToKM}3_VTu_*x0=vvA>_-&GjKZK z$&7KmB>!>HDsFGm2iuHF^_@gKz6pv0@;4_?XbhhD`EA{xAT~d8W~dsjbzth zf8*td`y>?ri8_on`x-Y)SiMZ8d|f^?K`O+MSh-ktNkk zT4Yo*F;lP`*eg8@RXXcleSAVZwkwlz>eq!ZVy@ zjj#$M&>RA+lvCESzMiOA;(8Zni*K4F$MFo(&oCgta&k9>j~ z+)S_$cSiLf>A=qV(d6gCoP5Zczu3_u7^2Z6SGW+<`fM^bc(I=VN6r)Bq^aWrkn}?9 z#E1bn#-SfYyHGOe9nweH7zoNRf!Yb5up<%Hk(V7%m;Eps?ES=!I<)m9r51k+gRpch zFuFY)Sw2O&Qv}+UX?y+*F@2o!I|68tlfcEActzs-wW_t|Jq2d*0rtyQ4NeZPUSmfF z3jH_7TF_S#UI(xq_W(&Ekrg(n3Fpf@6!!b#japR=Z8lGYxA-k3S+}KRm2j0ny_w3C zbS`t7^BmSF-ARHw*IA0)=o5)BV292A8Jim7{ZrEWa3v6Q_CDlI z{kgRw5sf&W?~+S_vK_Ahh10<2gNM>k+9e; zwc0PfxQHG~^;hy5d3!{C#kySp;Sj=2Q>$uc7qXTYQsp8M8Drkvv1(^d^xp( zejH+Q?G}WaPWy=@Sek6pscP?A9X+_Wn9Y9K!t8#0dEw<5dFj(#=)@yk6aLYlLqOZH zuP@6MRFU4R>AVWuc8hP~b{=@Fx5QX^{q8N&7&gL!ggE}S+<tw`#OT@rtFRocj}UpfpLH?DkE`7y!SNU{0Ztweu>ptGU4T zH@Ba_Ca-c0P#bg9X1ABlz|BTuAlN@f&+MWGn+zCis7Y=%N4L5!V$I|h@28p%@`{XL z4v0l*Z@Oiit5iV*;CM#t;4Se6n=bP@Il$$YB7OAyk2vNX-kY*n=5B|L%F#|eST9bc zSAo5`zNm8ew3}$vQU>E6+r-nGG8_<+)x2pM`*n2f23Elvf@phsiRcn^z}HCxO3EEB zeu}2Kl(hIhrvteUypDamnShO3r!XtC%;`o;j1(c}UQJ=9R)iZP z%=%X-By_6LQANOYuM2}%WytbDJX)7+WkphZyjdY=h)oCli1tY)VQUIgr~VaOUu+27 zirA{801-}eN)%H~JY(01q7qB?HDVq+wobFbJ_}*>cH<+|$9AR(ZV-@vj5sR!@}Tlb z83p)4D1aJr8-He~@FZaV6ShUt+Nx#4F;;sI5_B`9j4ZbEr{0+s%Rwfjuc?pUqpwTm z0mqnv`&A0>uH_J(L$ZY>*X!m#G1%mWR@s;BQ9nkytl=~~1L99pwDiyEwM!B8L!%3- zPWhEXz2mtwETqTNMq^Rusw}se)jsDK&Fab~aZGdGeyWu{bfn@sgQlP_NfZ+jyG`20 zPqKLy1zYoxX0*<|!#+{2c1+x-^-^KwFINUdsqa*FmMzw5*I4i#7J;NJaa zTk)un#&%*`^W!j(sCCb-SrSQ~1SE-dfSHZ*7OfcN*jS8{{&&WSMy~0ph-rw{J_Q|ldM{W2yo+E3?J0O22;b2@_2U1`K2oK z_)9oUXl)4;X&0M`z8^jX-KberhmzZz>vWvr8rHFX{SLBgd%u($`dhHKD3&IJO?yJJ z_K8n`u$2B$$CrM@X<*Haxl3t`YA!(n%30Ws^QD25QnZJ>cu_Hdi~mk-_qxmV$Urc< zu!X){;&WtHaizw%_-K)D<-7IqobCkIN3Cmf1(r`cMv--czg)hx4gNFw@(D?qvqp}r ztH4AOsgD#Xkuw63T*>n0_L9%%SRmS&2wbxSSt=MExH-o`x&77@Ic)7nad3viJMz=f z;_`WXn9swC)6*xv+H(mtd=5RrnRZ%c3!9WMktrcG$Ck9&D;l34Bsm=To7W^pM5Xp2 zs6@o#gXr_qr_)~_|FSMqY5y?)r>1QG(?U173-46BP{*0QYkZmqJSp0N=z>Vx>*bv`RT zd(09C<~a7v8n6N-TnHZupuz};VA|Hcwh^ppmgONVJ?!QwyVAWoFwJGpmL*_V0W0=2 zRHsj`ly$)(zwa2p5d~H}HcVpSUW2U+vHAlW(_gx&Y#M%l4JBCs@&@Wp&6X=z=wUrsR!A@YV}5&q8Ds&Zej{b|DPO=?d6zFzSWWwxQ z(v2R?@PI|BQWG{^Fw{Tm%lcE{P1w%!$8+^Q&$7K_{mbn>nz348;qmBbI+e2b@9(z2 zJ|j4p>A@z;jJT;jnhdmkFI?qi@p-{g;qtQIaZ#{)rtKn;eVG}B=+@q{$1lYbhLpw4 z%nB#IptC@jMc#R2O8zq9vUM?lq@39 z2j@I_GS_@7YGnRUqZ5JqSmW~9kmS}3p|eYgwxeUX4yl+CI` zJV+Vmw`Ktv1#e94u8t7T2+`Q>Dr0qL2X?&+-S(0%LitcX+umd044604wIX3=C^?C# zG24f$@PjX^S^tz9VLFLs6vV|;jbr)tKgkU7yv=Mu+l@_x^P>%$U%LFJ z5NnTZK8DuRU~0-WqI#X9jGm=qLb;#5&F&EWP&;Nueh>_&J>Eph-{L;Rld!>8zP(!0 zqeJ;KR2!%3-cYnqZp`gUxF(tMLDn5fcE(0T#Eq8gcTWYg{hlt(C!7br;hzX^Zz9mI z&sq9JKp=70QmVObgwFTz4B44=^ar$)FFopYO@$b@ygtg2r`y%OasUvP`@RA6^E=YV z1l5YobawL9gQ7gKlp8dG+UPd-#>xD9c+%c9S^wfPuB~pOA#ok`Wvt+S0^lu@FFNlU zZfP}FE}+?{U-%eY(q==`2IwajYmM6Lvk_epzg=!)G`n0;^KZ-4>^U0%4P7@bBCtT( z$?^4&;ykZufYoa0o7F+9)7^G1@#^f`LA1YY>*w(Fs?pAn=F@4@0r9tXmysK7Q`vcc z?qkr9XUO9K1y)E&n(OpXcc&-X)dr#pED7CeAenp|rYG0hI+= zSs&AK4r^;|%syxEK4eX`uhZ>bu?)FZjCOryp|3jn=hV_E!b=ICb#aod2I|NyEyUWt zL0dm)ZXlmoNj_C1??ZbE0^03sHkENeB%e(`=Iib--tiDh89yr{#s~~Gs232b`J>-> z5Z&*YB0Nj47P-!PD6W-nkJJDbg)2V(O2z+M|BC7sU84MpMJjwzD3Ct>R_ENWe-acp zAuN4w_QL&U9UxdNL-i6kvzvzk?Y5{1@OiQAo%J@+=UmyP>xm>IU ztX{V69a7gEsmf-H4a4PZUXoroHnrpT$R25S&Wm(Q;CJNl$?hZ(^@G?+U2Kv2X3l2b z;OuiH6id=@(6Lz+m^sHd50s+{P0>-={`m(@I(2WvaeG7<^|U<|yOhMh5dQKj@ja1R98I#QKw|h~v0E+tNO%gyqEJmDCkZ$~3Bxd?)y<>qnMML0 zX?@|3u%Ls@_}%1mM2mrrhBYeWg(l@9o4m7JTLD%~n#oN13IEj68Hh_}=uwb}63OyR zGF)78IJrGmX8FPLzwQs2DcHe#Iu#0sQjrWP_)U8w^yGr*=C$gNk>%8Pr~^_XXPTXH z49UmR3p8alzKDijW7#d&g#4wOEM(LQ&);2E{rH?ZHnQJMAeSvl{;n%$T1HZv@%ztzWH8@o05~u>k}HJin~?gyF?NRC$w=|} zmuhJ?_fwemiKge28j|TKP+$zE!si;gTHpid3v0G&p{v`!Dt5-}_cB{L+P@7c37m6k z-D2nqRBx4QtY2yVO`xTScju_tQFy}~ZwCz6kk)R##^j(;I-ctV=ZO4`;pCM~=11~d zLm5b6KtUhhtJ3>?cD|E+gt?-n2ro}VT9k>-n(^bkH1xVI2Kcg{l6bcU=sRo3;A zwLt3dSg-mxk(mW8FZi~GCW*AVVG~E-S$hXmORDAiAZdWvw{JQxtIH;ef?__rTmC*o zTTZ?3WA8MoKav#uDl}W@!?ba2FO_8juB1p?U$PPEeaL9ud~6l))f}9f^v66hoWu9u zb&`A8i#j2BiKsh1@@kWARy2e3-#-f2EO`NNJ#hG~WZP8FwCQDGvf|}{Al-t`8OOW9 zg!lzP2JH*#-M&R6zH5v46K#HSZ-?fH!e~cY#=SpHx6!ym*~*1**NP9`@xm^YB(Dka zK$^bS-ZoT|CvqzCwFE-+ zbd(Dy>1TdlnAOT)XqWg|Mp+_0sCvA4*nAa63i6EFfW7AkElJQOiK$4w5;V7f_i0Go9fA&P^-q z`#<-4x?^+%z-pZkmhr%eEwjlVHVK?e;(J;(wA_~Vg$DTKAXbXL$m_h@7j9ghrSO=W zET(C(tO5dSdPApX=30-B9^>*MM^(r}!>?|vRKtlPWJOLcVS@Xy;JTq18j!5cZ_{sfrm}4Vn+Y!g_*L>5w@0uUK z{=lA};h^bvyQP7B#mOJuSuT)8s(-Q0lWsPu`*#?S1j?1Fyn;QLIi7d8uor(23aflE z=X)rg$G&GKFYTq6Q>L(r!=b4!5y~G~f?W&mGdDtZe_?j9^7q0&P*|}=Y&&P9%$xFZeLQgo&@mzU8v|u<| z?bhLG=_pEyoEhG~EA**e*E5YBQpon+Xl@0(_}SZy|Nall4CZC%GbfP#A2W^ulc_Oj z@@B#;CQ*GQ*m6ENKfj#}ZfXDo*DpTC1~>Km8b#q@qIfIkToe0W;Y-BpN9TQxM_>y# zv2t$bA-Rg6x9&jy7SOYy?SOpq#US86Gq>&k>1KIVg9&NhO9|dji-eHf;%wx^4);)Y zXzf#_286?l!=18!KP#z-&Yry3wXl!D%ei?A1lzPGD^ekMKMaT8;$$P{BQiK&LhqSe z`W)BVre}AnOFP8g^ntK%Olr@ zPqkR#I#=)`i{&}6_q)$jo521fbFMyxfBu%=uQ!i4{R`ysM{kpNGwHY;zI_P`}N&ig?=gb zK}~@FeEhJBoa%W6<#4T{yTnmr0$v2~PiD&+lNA4*)5&l$m=pSs@*H}l zeAwT{c#-G@U+dczB!XmB^9ahfNzLk^?{K`5jQWGgn7QlC)sCl=$T0`|7JGlM?Fpt- zW(V|srm{ z!%lxU2K%B!v+HTK72sto2_y`K8mzRsrEK@dx;(9zA0Ngz`%ZNP8T3$`&2e{y^gU;a zwE@i#Z6UdM4MX)>>(_=+PfKuxmGxwZqRilMObO(ny#i8}L}P4hyu?)t27^VP+j-3B z)(Ig=FSkuTDo29ie01-fg;cN1^(j;B{ce;Ct_~H<-eyB)hU=fjnnoko#jrWxfByb4 z{88mM%({za4IaZUac!Vk!X?qgEwq)<9@crdAydxdA&;=-tCkVky2zH%A^z_|kMQp! zpDV;SMD?b1&38C;T=X?UrCM$uCvb^1I;%$RH0>E4Mg>fMAp$wGdy%Hb9&bz23oYD| zjz0K?jg9Lf8;weePE1~4om@l>Uy(tE zoAbYYam6102|(6#7ly~;g=%>oI6ZF2>m|EuYP<%2q?MAfvGO*-*!fArSq28e(?KM70C~Z3TbylWfFv!Pe?+{G*)y zW#4^z?GcKwt{EPsp~^%`HO!V9zxdodi1WWx0uQ_wr;Lcy4vbP!#&O(B%o`;;$(i2f z!ZFbp7EO$}RlgX>kCQ$Jxv#TJu5yq8`PT@kD$r|)SP12!^O$nTlqa}2(qi_&5XA>O zh(c8!mO7KT%PgMp4=1ZG^&>hY|Lb{v8VPz7zTt_(b6|@^Y?bpkV~y9cq#*VP;85io zk3R>iF#C3sZ<5UJ%1lL4bP%zo)2=iaxssVX!t%?}nADu(vP_*sER&yC#w?@C%(eau zvre>75VT0|0`%QlA9X(DxNOap4BNa=d$eZHK9(PJMY)gDy`&%ed-V^c-x5LP3x9Rj zb!<@yY#aj7DE$%7^M)o5w?;;(I61L}zt!Yxjzd^Z}nc9&X-j@Jynr$ zhJB~tU_?A(57zBm@4wJ{`VT;TWvZ$0W}5y^UBm9QR3<6ezmd#=7rH0gb()o{|7@W* zNh3vGmx@^LjbjxzY`9-H-Y&w|0>e)g$9~IYRu2G*!)?=}1@QfObo(StI(AU4$I@!k&S2Mj=dc(9BwiUho3TGEAzxz_&hx!^F!m@ zR;5jq;sXB)b6U?j()RsB*G;Uk+x?+mmSm$q+Ut$yUKfWdU}0l-ZFB~ub6UpSygwO# ze=XYi)8puGRhBJb3O_cwL91qf`X2SWxlCrdN zySpb{#o5eDk7YCEqQk$I*~C-j{aO{4hOR_k z8k5*B%Y9D*Kma;l2Vq_&M>#=T3#SG$|81O=J>-$VyzZU0BU1&L>0Fynp{pbPA$SGI ztzPMc+8o>9m@i#>N-wyB{J!@sR#8Ho;g_(Fv=qFo1qvC_9tP-?R0VYeLD+D56_(db z=B3(1B}?q7h93_3rmz~L{4D}H#5)<_wgaERuI1(5ofQY|`{Cv_zT@|+ZJpO)ns;s9 zI5yuaOrT$ZgnVy<&9gd z#U|D)D?XSg`97M71~92JZ-+HOZ#a@Wbst;w;wjVl>b40*DDAeRU9#MC2I6VM84t)Q zQ!ti^kZn1}e!>ItwT^p%CtQU3_sa*C%l$WoUDOw59UJ~NwS;}z%RE;TesguWoH^$! zvTKo>tQY;5xJ)9QJar!|nhDo2ij1N4ZjZfdv*r=8TTfbh7RgnAys>My=%!~*rs8zY zDVP<-fS}v_ZCX>>TdHR|?O0C%GR02#ZhUc5evZo#_P*SIA{CD!u0r8oE3zcUk2#W0 zt-zsYKN94~%9Kou5&k{7ZJTlR9M~3~4{i`}`h)oPcYRW#q@voNEC`#sPjxk_`#tWw zJ0f?yR9~MO@xNj@4>{y$QtyxZbjO zOIG-*KX_+2o5|nxlUJj(yN03~htnr;HuvvbQ*B??%zk$u75zz}tE%SZP4dDziNWto zn-v(sVWYzRf(|fL>Kz;O?H~MB#`dD~calWZDdb4X<@_}JYpw@@2ar2ibj!7}=szwr z;`LKajz3dr$pGr`4x;ZiGBBJZJErDPE{6k;A(5ts2q$E8vuEqAl6RxaoNb$Ky^bJ| zUX6?KU3dZtdqzYd3IbbZzV_?3{Kp0>IU&m{RB^p6YDUVB>vtDfNz^I{|JZ_(kf$%+ zxLcFpOqH)Dqp^BZ!%;zdgr%69av>fn0g%O?jj^c~L8CF4hYWJb^2oB2%~glKl1P+z z4A>901)3LB&QL$UN_}t#nfShX8+NqxtKYV-(;U)>Xl#RXRHJNxR+j%U>T2aXf=e%M z;~k~(6Vc5RS^?Lrky+Qzi46Hxpu0cLH$gCIq5Y`05@HmRL7EVGH}HN#HbB@XgeLd~+M4h0O>y zF9i1Z8_P+{b~L=d(&8FFhg6{$)keX-f(y2Kv_S2DlPFubqQ1mK@`{Az9& z0i`jo5gHOUH5!Wc9RXd^xNWgh12@*7{3F8H`J}Dwmgu6S7-52RIS$qtLCS1UpXxu=IXm1&57u3wmgy-0yaYP^3_xxTI*HSaFBqMT5J$ zyK9TPyB2qMFYW|)cZZ-s0ypP>@AsRp$+Mp%d+jwd@0xjk=ZG-T!i#ea&OfB5FX@U4 z-qFbA;5sWAB=q7E(GXW1WL<%907%dksT#gY{tFbG(9H;kFlk1k5~z|exbAw~#P@7I zB#aL9-R7Ppl&k0X3%f-UJG%!R+Sb^h$@J+bN~!pNm?97W`3WLw+RCLW@*nhz3}$<^ z`8<%B-rU*jG;q2j(>{Jg+wXctsm9Er9?o%mrlbSsnDzeIxP_V{ZZ9MRBFz;jhdWts z)W##Vmfz^!THxl~LkYeI{2W5C-E1<1?v_IQh(Z{!Qv47PWN5^|0!E>=!x(%)*e9VO zR31_rbcwjnNg1Li42hoASln=_*R3}*u`D)|k6Y28(<6u93!~2QmB#boY$Uo}t=0bi zH_-Y2Jr`<+=b;V*dWH{clExQ&36BZXEN(Ck&EN_nS$ip#wavbN+ow(z7ruL4YK(j0 zU8ByUhmd3_fd)lYqqCjI&MCaW30y9Y6$;b+>V*-XGG0RCU2pHUYr^dLH!Wsxs;tD5#RZg@uM!O-+zAwGFNrr1w?$2R_`7iK&K6q8q7>a>Ek-XCF^frzanquoo5*wX4pYCK-0qF1 zXZ5JM zQ%(q^OLP%0)2`M~bw?kMX!uyx70Sv)KsK>B8c|`-w>#}b`vfW!f?-bG5|%a&m`o^1 z<3p#f)cOYxQrAX{WpgFEQQ=ADb=TsmstjjiXL3=cYgI_Ot&ZkO!Ys<=644#prHXuE zOJn^zIbO(uvTTCe+;x~+If24rbsgXL_g(bKB_MfFFDdU7TEVFTLn-H{_;HK)NKc%y zDW?hU@RZ@-J+bOqF}m@c=43k&-2${M3Cv>eP9oppD)8{+yA*Lu5ycbe<}+YzdH;8- zd)s{3o(T^3lRNvy_GWC+*Bz1+E5We?^zAfM7(6tQChC&z@U{>M+L`#1%<*5&@b)(B z`C3VDQv&5Q@`baq{@XDBdlWqX?}+;U{>A?<1bN`i$=MS|q@Mdf>TmUXI1IUZyuGV8 zpaE0~zX@+K=n*k7O_s6uH!NOjITFQ-n7H_&4bs^V-q7a(I$QPZoPpcmuD^x1~ zk8ymd)~J!seNn8n;S#btL@Af4u7&idBT|&BZMJ6HynA~3Tz$OvpZ6O}GP{*(Je73t zgz2-i%h9QpnKo0P8yesMj4HzMz2V2#JHqCI?L?(pMuJ~s22|e$qo>D^>NiG@EH4wR z2H8%El5%Psv9WQ&`kcH%(?gKls`78@S?j!A;(glECLht%u?ne8$Ty39@2KrMA`M0G zB<6UnMF*Frh$h_A)=w{aDyI9Fbb7_@w42QHtS@!{$62iQpToAZ%z{hvo8SG!A`iz> zVr*8M;=UUQ!>iy4c&=HZUYlojxxV`fdlnTJk7qU#kBJb59JuoWU=9(G9xAC=-vxrU zy+H7(*`Y#;&aE@Ok&ldmCmYS*+I=OiV>SQSW9$(Qn{TxDvSxF=?+awKf?|f6sDAi< z9ite&Lqye0rU_2;j`@NeGhJRou$mCz{Af>|-%TP-9`U>8y&wxDQEN8-Q9oDLTL41LdFDgFjp_AU7LVl5NUW@?~v>k6FICT)sHZ{|S`$S3p9s!aR zMoq+ZM4&MEVl=ZF?}Ea=B}Gf*Fati1e( zg;4#Ah;F8xhG1-Bto`NZXRbv)w&L|Ef()^1hLLt>!RqCBh!ko}?Q!v1nNG z@YWATJw9*{>S3!he8&H-8XNbE=$s%v)X)2&DcKB9G+U?56+ScX<^cJA^xI4;c@-&e z*o2poJm&rToX@yelryX6l*m3`+yvvbG#^_?t;?&Djsv9;7c z!^a^VPwyG5?954NQ*a$o64{|AF$a;ZZ`YUd*#MRD#k%J!T0{=7nAD{=>)fy?4KHuBY=rhJGNPl$bNvmw zS9YGAT5jjmxdP8yiVKZ|_)*SSG=e&2ivg(xyOn_hJ@JGU;-S9w#h}F1>GsaA>-K%0 zIDPSKSzhIO<(h?$OIWu(%#M4mGG={?1t;W7ks+F@>LIPkf(@ivgZjP`+i8oq+C5k%0l(pW+Mit3I=p9jCdXuqH=;y;FY47!t zPfiC+rX&7g&eqom#l4hLx4N3D&r;@3cH7K)$&5oKIchcT+upvf76gmrJ4@^xv__n? zX2|ONkJu|w8nVt%QqB3J9@K=3Y1cA#LTSSU$l40C^NTJ07%o!*Xw|g>d-bSigV`BS zH-aNF{1hEF_hPHlOE6Jac$lD9)i(Ji`H`SmGc+pf1Gq!xrS{XN3N-cbQe_J=2)TVN z!a#M?`%B&Ft?f+7P1g*Rp5j}%J(FyAU0?Qn+_tNz%A090l(nZ!aiT*^=bRi%)Vr81 zbYVoUH;QTRE3tc;zMj?na=aA%rQl$8!Q*JTiel4eHj5N{aob|%Mg*oExj_9_`_Xm)xD|7c#3cfFF*}hO7;(K@n8GDjL>;>4$odaTOGWvVm8Dd zF1N>dKA>c`_|xN-bF>@Rt|&yL@bk6C>kY!_1I|rCKW_J{0Eyb%wkg41dLn&>3+bwB zYPw19-Mv}y%w*nlZ%+jSr&Y$sH=P5Ic=3>@L*4lBK?{w5e4ok$Z7 zEA83G;Xh{grJW8l4Q7CFtYE-?1D+ntMq3mz^`Puz%(%ANo&8-CtMcA#P$!8e4{j6^6y(qAPf> zUC7A80@YoSww~#Ek{@S4dt35E%9y)JoUZRTyH=@kH)%HWwEGjck@SGk4ENP-Q|(px zWZ)uc@2{Tsdz@jI3?0y&v16`|&e}mOzr)8SL%HNM%s#Q#-y-5le zfz7IHPFs)#vkO;}V~51%vJQ|NI>?cG2HQ^dW$tIXL-uVV+iDlkg8FIedimyO zy7z1Z{Yk%RUoJ@MT-DGXJ#F$2x=F)Jxi4=Ra%XpeSUHC`8Dc8?#^jXBBDAVQur|+) zbM1dyBavTtWVtM*VUFOzLX?$ur(+ONt^)MQ{bg{gG}QgeY}Zq8LT+!>PWH`_#w~z+ z&k~{X3dxO~GxU_x7Tfu<=?3RHN~?b_7?c~-c-S8TU6k2i`vQU8;`9p(+8nP zw{(6VWS+)fash5}-G&aN75HK?v`UX%=MPv+{`W}{-yb7CHz(y2v_1JJZ)gQf{-U~O z2HJ*Td0*m6bLtehr_sNxburRilzqfFn%mM6zM?ode(y@cEjAam+wf#f3~~{0_j-1; zm{3O?Uja7>Wf9cV;SbICp^0_(qENSpw@Z#!4Z4Zv-j<3UFjsG=OMZXv@ zAPa1lXwI8&F%lhk;qa)}r2kSfOA21!-KP)NIAnp?z^w5}K=@N742P7?%3}-GD4wH@ zeM$s%yYyau)_p*1x%_5+qZzYL%UF-3RCNQh^#f*nAG;;;sRLR_54X0KB#AM62hZ-K zmIw=X`lstPv?e1ObDMeHNuL7Ex4-gu5hvqmivnF}3-0HPNI$IaUd^;FIn9gv*^#gl z`hn~lkkl4q4#uWKXrK-bwy!L|Ug?+|yn0Xf-cs7c_ud6B!+?o zLzn*%$!Ihk3ng@=GB@t$gB_j5`9NVZ#8X z-4zhj)v-5`jEun?s`oHcC(U~&ojsFOgfeZk$1I()mM3;9wKN}+g-#-=SO}E3klCAz zm*Y3qd>!4VvN_1yn*g4VfGI^c<>C{MArEt8d2QRl@OT5^g<>0PholJ7zqKKg1dp5S z1{dBQT@eUY^2KbdR!kU{7wYkio8GcO)A;B!S85Z0=uC{&M!Gz{n< zOO0J5T7T*paExG(B4P{J7^%}!W44=dQ!ZVNf)`mgr|GhMQJh8`T^(R^c$d+x)e0~Dh4 zjh#M3KpqGxpig~Vx+)#=Jb?I&e#P$VBepc$IT zVxm}gBHJkveNDBl{O#geuMZnVt(hGZwD{wgtq(!{XM>Edo5Dr(VERgRh1^ItftX z)V3o>5TNI)5|yx8c+Ru|8r$eBRjI}Sprq9;SzlYz%#_WrZ6BY8@LTeh=S#EH`S5lf zvBz{Z3X*#r$Rw7_OO7og^Dl%BRcLZ$Alwws<{pZ+MIIsbWGow%i9dUa(NG~O8?19I zFlda;#;=zuw*3?3j>!z62;3V3p7#!h zYlE6fEXK=h*SQNApv35x#$`$y$xUjHvWBzX3!G9vc8muQ3=OgQH2S}UuRllKOgjXG zMS@+PL|!mvOU)qzo>i(Je%hvYMNt^F=pHOP2Tnaw=6gSe7kumht-iRFw(k7{Sc-8x z@sJwD84v9t9k|f(a>vc5P&t4ni$w)Lf{oP!{|0UF2o-=h>L?!;O#LEBb)it`&CyZJ z+yyMP{#pDp3C>7XeTaK9B}QvP`uv!ituBwh+h~KRsQV6{({CfUGw&+}?s%_{I?N|r zKK8tvBK)*ko%H`kyT3+bykH9iKiQo|mN&M~i}NgUpyfTIz_IiTX!-jB6J_^CCqc)z zZ~FgGsIuqVL{QvXf9~beWbJmsB#)LYp6uYFPMVr^>0$AdSsqzd;9hpl`!*&g(|7#O z^`cN?QWme9Vrl$mzUP0-_DCm!%ge={nV9c)iQQ$}#1Gf-Xfh9YoA{T0RKJKl?#($! zW#k>HYN53%tV7Gj9K`){jZPj7BP}zsxnhXj*D`xUqV8+$FGA4tz6{S0gnlOvAThGOF6l2xXE}brc5Ka zD!80U`r>nBKyy~FI|l3-{Z<1^%f)9ZN7WYqIU-onpYgJv9UbIxZjm(k-<9eEbwmyk*)c43%piFD3vfeP7kT-#8u{3M#I-+oONCbLmLN z_e;r#&awL3!IR1uL}P=xkPkkFm8dM)*`0%$*_YKh1y~VAUq(kL5&~C-W{NyNr8kw0 zHkZfS+iH02|05UnO|Z^fo22daB~VtW%bxnMH<9NU`s9GLgO2v=56p1fTR8mzcr(^- znK#5|tm__jaGd4P&7cB&#&VAq#XiBY=!1*SxE-|Up%&f!tC<5?bdwyJ6N0xB+f>8^BO7L^d)&7lL5)*AHlw@*Ci z`2}|h^Ukd2NIWz2Sf{EeWiT_RPH1a!CY3%ADinLWQoES<>ULi%j}wdyF7qzq!Cjs2 zC?re0#xZod^X3X{_P*3%0b$*vz?od&H)`|@hU}7(kA^$v{W_X*tBsFb4K43=F^iAq z9cc7mOQH8JLo+tLKRQIBXH92mo4|nn4M01~y+2@Hk?){fX)%qxg`(}q+(z|Kr}zHT zkonU-i(=t@d_CK(rKRCZq!A@J_FdVIx+r`=T#`Ti@f@S^=XzTz?7javy)$dQaD*3k6+oCGjOK48L@sjUUZL zq$Ot**m1-^C?a5{&f(>2fa)kW*7#de{~ZgEG@6-ivtv?x%>KNy<4vJ||Ea(4NC-~5 zJ?1x|U3X*JDi!#}oMgGRpYzV|=5jG_dKIwwk^eVfk-~mTBm9e0Z>`C{?nHMVDDQ@{ z>2vVk(ONu6vU-OVtvo16rnBMrinE(#{D$zOPIXH%h2!{>w1L$17KAR*H?d_Di5-Mh zi53U(Yf}D|^-{X^L27rdR8RR7{0LODg&6x>icEU*{uXI8mH!qHQ*iv3Q%uUaI;xu| zpL67WR@G;m6=!{&2Va@!lF{GiX2*QaDC|D0)3tumlZD_h{_45Zolf)V2UdaSHb%}3 zaFE?hf$$9~OP#EufDMI-gQ%p2Z=QRpAsYTtN>e#vf>cJ44mD)6LB*V=8#wm7}^=eQe^&P~J4d6;FTBU5k z%$o@62F$uK7Ah`Rx2T&??IN<9{9Tk~UWK_EUmHtpnreQNGybC&Q-@|X9bPz6m~;X= z=Jld~1^H3_y)1Mv<9v)`ER2%XVw~NH_+9Wb|4Ul3?L1Pg`6J2GqMV%ePRzSkL>d-6 z92_w?4+$Q$W9a6h{IGqWj*GkJLKSVuw==#W+$D>iqdhl$YV0N~BR;Y5=*@V4E*t&w zYO`U!Do)_PYNKxm+p8deBCpGJ53SgCH4xlH=C4W^pz+I=J_wqeWqlfF zP)@U?i;lDQK@~^fG;{LPyWYPT+Hpb}KEMeQNga8Z7bIW(qvMU+5){u5uJyV5aR#Q) zjWr2a4vEFaw&2@BmT3M&$wH0}h(S{J=_c(%*P&j|23vHrv(O22O58D3JDFcnzGG-E z)#<=uP`fl#39w|-^v!lgBQ3!0hha38WJXSM$shq#s@vz#4#VoE_==Mr=sDucW zNw~=2M#%DfJ1*D(IP8xbbvPb=&5z*fXrT@qVjLV>wIA{@G1ayl!m`8h(1YrC{IFKW z=O9bfW%+(2=H8Bmk__cCJQI$D&9N1%S-F_o;&LD>=}IYJ8mNHOnaJ*{$~^g_uT?l( zW}>4b`;YbmmXrQWz%e5QYi?LQ21ABQPxk0PqFa!(1#Z4{cW_Hyp3YUXbNHKQ5a{ir zQ-jN;WRI6^Z+nzR3*A~hsTd4#R{V9mc$2rz zi*}C2vo%Qu2Sq;v2irsZ{>erTlKbFgO^NAnedhkWZ4>{2n4`j#i~~8W)JcV-9VdWU zLCZ~@GCMA{MRd^lBDHI2RH(`G!diIj;?c!GUl0V;v zr@oooPU1vvj)#-7rHX}YhULR&fZvvfWu2>gv?@Nunm@KKf5odb!eGx2PP>DjDz(MJ zzf2GQL@?2Zi;IE?ciNpsy!I#G$3$*UV_o5=oe`zER9tPw|4gef?qu*Xxe~lsXG;zz zumqMj6AP1L+hV^X14gf^weA8!n|p*3Khs4}#G2YzIqJ_csxqoe+<^#pNr-L)CpCGA z4H<~)W}4*W?$6f8T8`C@mdhEVOYm<=H&V}PMNh|#Zx=C1zVrqSxe?4alB$%sP*JK- z%Ru7F@GpsVsdiAr$48Mi3Ppj-xT#8UpRyJtf~kk;|(zmfhkL5U$A*)fRfp;$=EQlOwMp$>2l&h&C76;#$>(4F!yr zRrV)*4WPs9xWwxR@+$qSsh=wEFxA}oqnQ;}HoCf) zLR|k|4bP0)FrhrNifkUEvYTH{&Ch((-$G(F7ctgolmg-Ja%z z!r#QkbU^47@5dQ07*YC)3IEbS>7JMWF19@Oz)oIu6(34RiO-EvouYQk4{6Pzu2xF3 z2nsE?o!r}JaD3in@|2V5$B860G>49`w^lVGi2b=^3TyEXPx#{qViK(E@{I_kJL31r zx+|Sgm@4H+pka1l#F(Rl|9Ue=LJ!7(=XDYKMW%H;*5h+Bjy-fY;Q}U?T|fXiA~;9T zZ0e8DTDw~ewQTxSg$C=+&d$+tJrE8_#L;@bbJ(XsW6|~W8cRL))JK~EA?gW?Ocdju z#bIzc+y}GWb!U5bpo2glM!l|aIGU?CYq3H@DdU#gVdn!J^0OG3ym?*ESrU^d_L?Hd zbd2hIXyDct<@P0Ps9*3OBnJqD?SeC<@sy*^TG_0FxR!DxEx`;JWAJd_hky5L7GoBo zi(Xq+iEe`{4a+y>c3Iw}@LHnC9y$*6PWy=JA$7sh_>ub_o33h5q1u_zaK~>I3-ki> z>rg*UBAPec4-{IPP)qxEeA~Z5ykgxP(~J>(g_PNrll@{cbL|@*>CNp*tJP#{wpzx$ zCuu3$&^sU)vw32?AyyJIsH>5?LlQ`s`O5I*+!ysmGFOj3Hf$;w z-iBFgvSnPhPx!P>KE3_&(vpa)HV~8?2|GFj>spT|LZMW|XIb6B90SmB@^^aF zJxd6bOb17RNQ8$!xu-_aAI(Ps-1y0_XB1Bw0i~v4Y`dCX6e&w5zCkyy9`7oQl~}j` zYm(gQ4^ytz&7#++i=~i2=W)BJAiy&kik>&6#y+eLbwBE=h1>4sG?A>_90MnymV1W1 zXVf-X&mUfz)+TELr}|UY?RPH+a~zc*=z)-=2<$aqRwJw8ujHzs^^?DrF?$NCR~*K> z@h!4RfE*ya1B`D{_0|9-vk8m%YOBFeuc#%SQnK!QtD#7%jgB0i$nS5URQ4J^B~3h| zDmA8inG*OJO*!i>Vge^dOjN#5H!yRFJ+S0sV^aNZN&#E}SPhMZSB23}xW$hETiED? zZ=pv>jED37*CubB)JG8#IY#_mw=qU}7CrI2ir>zsH&i2)%yupdKeuJqlu_V^{k^D1$MEet#x54+b1ptU?VBWJTfxgVfpzGEaN`^NlkgsZ^45PlBmqy0 z?WNE-COww2VurDYAtpr*6}~cF)pGG;LyW1816|*Zjj?^ZH?JDjCSOU0lQQCyp zpjK^ofDU6! z8R#cPVdi?#n^^rp%t^WEXW5uGkYT}#+R+$``p_!@h8G3p=j~(Avf!{G9Lxh{Y(1>= zrSCzEO+z@A$`ef-cdMYvj1pn-Is}`S{B6z0!$Cxd-|mUUFIO&WOZ-raNZ+Ynm)q%}+E%oLQY_*9= zLqjkp#ru4JKD(wO9!)Iid^_f2b0-eEjd6=B+xiDrj#0Mx*wprnm{QFetr}?Daf}Eg zcspU?!~pNTP7*W_)_ue<`VtH`5&m98c!#Q*zkVMu_mfoYCXaTQ=Y&i|0A2qAnAD=< zhyLEOh=S*$`=O_dnBVhOe>|1BD)ueVv7La+{%c?GCoctbu|d1>Qt5Ss0q)Ln&R{M& zY7B~iGUKhQ5W)Id5EVzvsZ{m6+ILil?X($+p7KqeXOp;bS$tZ?B0&G)G4)Y!u~7Bc zF4fDroR61BPObtxJUmH%0>gBezTDtC925+2i;kqDp;J7pfgPHn^W61>c=8uCskl}N zmE-yE$rt>rDs{1%cMNhQM{w-om_0@d)YAi%{|0I_T7SJC-qhF^HD((I`Op{YUtR4j zv>Bjrr-cNGoJtlKQQY2I^F(8qtyc4gMMq*eo+b)KFyYpHE9x_N(+X|r&4_ila|nN; zQH+DQk(BYB7%3ehWnNMj$XaE&G+7&lwr&q<1#9NX@#DQw5>zLYeSUmKr;5=dX5Kia z$>0ebaRTeR6vWlkiz=V?rFdK_RgQi&)m;(Vxl@~*ycEAAa#0uj8&Po?wY|2iGHxSJ z@J5zlo;38g|0zk5MJC#5%%Kx&t%M^BnFN(NSAnw^Rn+0cgIzV+rhg7JdR+rSn}NL` z6unwmX#I_dWB(TC^g?{^_7cp|o~-oaI%B#{0HhhU6S4MCqPZ)fngfu4(dRH9-^y(? z3j+D3F#HIxUnk`44!&4ePv-^QleMNB6YzUBhE^{+d zUs1|nd|vmF@cD7beu|!D6@A!9i^c^%ZzTa$%HCIB5sK^msbQ{l^T3{_W{NaJ^!LYnV1w1{Fa0-NYu&lP^fbY(8w!b1 zEOX$+U0CDhuWuom2M#j@l2x&r;=-AWBkoy`V%&}G7@o+SQcFq847A;i`0Yf2Qx39U zk#K$JFy@iV5}$(8ic=IoDM87rOjj-gCmR z5o}rl^j~df@x&3@7!e>CN@FD1eWwnhpYx$BgM7>raIQhpDRO=@b0kC zH%!XddpD9dMDF>ow|3LTM7A%NWCiP-2(qh<@^SeYi00}P)9~+JA@P7r~&E5MTaw?Nlp6zT4_Ia2*LV)?)qnbZ7UuRf?m{qRcPS#+c}B73>Ae}GrAO-I&}%g`O`z&py%`%Oi0 z?`IT+K;*D{=2U_KD zgfW=)r%*1kS10orQnY_FL7+R9gA*&eJkK}o&fa8=-x>~rPl>Ch%j{KL*S*G{!e(2q zlM_9>-mF&|PWsNdkfu)}+VJda42BokY*xd-g3pnzn-5z@vWtbB{dKt_+@GIJtDAPo zvoT?#W*?_z%vZxXa(v_tC$o;`YO#5%1RZsrFYT8MJxJq1@3;*KI9h-)+Pk~eB3j>_ zJIjAOxK4YG3#&$+_w@`-epPuzcpqX9O;ajKuri&hRs!;PFJzC5#qc0?FR`LM+MR?7QiMHiGRnj7ySMCwA3pdZO(CJv1xYM(=bosZ^zn{I;1Y8%`Zs{5-K zQWCMTvS>vt37yY`mlh_J&+m{?J=qH-a)Q`M=duwtIrl?eooY-*e^t{__HgP1U-3yQqLC6DEp7AjsM(B`5FkBT-;285I*!if zJun?j#5@+c(sdnOQ(>Sqt$w%aAvZ`^o)$mJ=v0DJKJUYU*Ac*`R&;F zt=4hH`C6HgNnE>QfoJo>XlIc@U+~Jq&tkbO#~_|u?*X+6^&YRw&f-?mvgXw=13ZEp ze)Jv7E1e5OJ!AVDM>wG|J1&Y!@m_ zHk?5LDH2pmekhX9-+r-Q>%kBcji1nquUMfkBE=|j!t^7cN2~6LhcR%GUphUsGNsMD zbrtEwu-3RJIQn_TlB;zYIsY^=^?v=0TO|-ps7j3|kWe*C1)}d!Q=8c;=RezIrkG|- zLSg=(2X}q}iR%_q`+V~jy~yF5QuO)ppjXr4#cj*JB6K-}tjv(8+FCZ{uqYW$9Y*!K z<~SOWIdm^GKdgNlz{_|4Q+lufIdP&VA>*N@82l5Zex=Ee)W+9$awSZ!tx9AwMv(Gh z?z~|ba|};K(V>^m|NUv3lZB~O@N7IeT^HH>niHE#XYSj5-?ev*DJO!fugDm}zZEZq zNRqeUw3SjEPCD3d;sS^!#SJ%uk!f2{8XBwWVF?-NG5T^J7AN$j!>2?2#)MW*b!GH# z45LzoC6F2IVVd%gbQDML?*S@m)@iq(x@;AX1hzUsa^LrwX1I(fy6-CZ6=x;YeDQuQ0&l>NL=hB!^ znkbxchwODPy7Rnqc}R907{R9+2mG5bAI_S~tw@zHO-NYJuWL+l!! zYL3F)5G3O%!*HuihjBC;Eei<{!psIIvNz72ENEhGnhG?+*jAz!NEJOYiqI&l*3>8k zSyMthw3N87-eE5WUBlF59o7W7PWqr+oG3t|5x|BvdBV*QKD$=r0P`_2eQ=SW1&EGhxZ z<;Uy|-I;8opE@l9Ss6(~ebfgX(=u1Ng^}u>9~w;pxP1tMePNjST^T}IqIO%Tmg2NH(3X+X$oHtL-HFa<1 zyQg`;pOk70&r^QS`LfY3#|`Q8XXE$t^(D)W$*z}+fJ1}QwVT_&lsxxZg+ZPCM-a*Q z%<*2_2~#GNA~wVOrrH7@72HkL#Q+Q4+z9#XAKuQj;};L?03Yp$T&)Wl#Gstd33S53 z&u`9w!%Dp7YUQNt0@i;UaC+PkK43X`0QH)y!pF?KtCJQtxv)L>+)5fritqujjp9=emqk{DLO_gU|GZSm1r9%{RM?;iL zb&{eUvTK~&jTk1XpBZ-st1#y(rz0$Oy9y7A1uZP-&(|ZK=B?!O6`3vuKk{pD=I}I9 zPA=J%t~v-{HZRoa-ys*>W&Le%>Hh9^LNgiEMVth0jwl$T_v7auNo1#^bq2e88)1AR zYRL1+k0$Q+P1J3)VlkTLJAs=;yskQ4*4KM4>=_ZVK@&;bvSY~+#%(mx_BEedL=wVv zf=v6C5ds?Pl*`p3*oQD`OviM^KLPSwbKHbNigN_h1~_i7uPOhSD>!2S@`JP1MKWev zpDD$?XCtfq_{hm>S0p?Fh9(bgf}>K~H%F(VoYXn(uuvz(ElO$Us#DU=y{i9C$g-5c zWGZjHTIqLRC;1;rbt*p~lA!{d00x&;=fq3RK~^#6l+y^T7ehCZn#(Z_uNyN}v)2>; z(`#uQVOv~+9i5q{gl|B!qjQH$0msbuNa!^WO9VDH))+be+%|J4)GC9zwA}rvgF0$g zom1zr{3eMCTM4gje|BugW&Ls?Bo4FF@S6cl$Jj3 zss+BVgdrt=Bn5Q!W7wq2H(FRten4K9U5Yya1U4yWoT>*r#p;GS_KNExf&}BKWuH(m z)#P9QRx@em!Bz4Yy+7jp*wOFbcMO=jVmTl*dS^MB$!Gkak`?X8;iK~X6>B@cfz^N= zOPK~2+0n9J89g$uOV!O* zu#2uuqSg$*4@PX`%5DdD9;}{F zC3Aph^ogvhU#EBroy(bYUvDWDJ8D3%OtIwb2^W1gOn34V=LYVYF&x#050fCt6+UJ& z9^dIHNYkP`+yB;MO6K@{0NQhX{1=U6A!T`U&vd-0-MGH$@TqZk&Er0kA>+dSc1f}> zk@lkPltIYu08*IMaD30M!{av?YUObxPbWy$Y=@b92XiI;5cH=>Il7jsWXXcQy=mgG z_b8eeWnr6a!Nhw{DO)hcbfV%nAN^|j2zGk{RZ#kTJ@$T5a&0~5OuaI(pk2pco~|CI zW*0}+iVKC+68Rv&{pU;l*LPz+eS6F{eohP~?d<5?#7QGZohhrFa`xYhgvtt=3>=m| ze!_hs^bKJ0?dZ>BcvgSAvF~6|&0g=8ok7`Tb-fz$e%v>Gx=b4i1r#gs8RAOc15B2J zDdq^d(tqoW?cg|NfS)c*{xXKKy7B~x0P9BUIczMw|Aszp&Qy9TX*xeezoW$>W#>oC zN@C7xyD?duY&c>GI)N3(_ha>+FDZ||x=>G-7hTt!$RmEb7^|pu{BC-neQ#w8Y%j)sC-6qx`oN!MlcuR$;MX`0>rG zufa4&bF+&A;%$GZpH?+}frp!e*xk_+opB;60t%$$tUfo7qxNcxevqw1H~;z{WI&KKOtDkjss+9&ej)Xwp&JRrmxlq6zD>_5B9s@@dHv;Uzg zkJsp=QYCsVA#iA%33pWS$O;Aiz`VwDEY*|AJSAcQRzM6XJ6agQO_9n9il+hUi{*HOH*!ZAY z!Tlp~K<*%O@)Hf;gh2mb|Mk}Pd%3fxBw8iY&%{sx?u1l_qbTE%GsnwEhL2=U?gfA3 zUK=7a+T&TM$_ztOqIFm}Qzz5`AGu|cV(78v6DvON*B4>sRiy}hO553oA4cZGVYXg4o=z|{t8W{)GMvK{6o?PEmB}i|MMTY7 z!3XK%`ecM*bW4kty_DP`j?;!KayX$7Q10q2f77Gv&7`N`M~pIAYnk>|<_cc=&SY>; zrml2A{v#qG-ugG@T07)(_gPgE>&)KQAf3?avb9AWpyOQO**@({&9_fE$-lHOarTbd z6hsG;lU9;@G;cM^ZLl?cuW2VV8;YH){>k&6k>}|nQPpvv#&mrB7=rOS8W3qRoH-sY z;uCt_aZ70JPAx0(3?{shTt)ZZDEs%M&|6uQ>yuyV0K7pyZMB9RNKxQ)BjrE;xhg#k zTVb2)T_<+o>ECYw-V5JsB%6G`=5rJu+^leiMkKxLmube|4OrV9G25CzWB0&}Sk~~_ zbR9E#?XU{nX0g1@M&gZczA>3CkjuZTC4yq6^YkrGFj6>F{HsBeUefNR#Uc96?n}v9 z3(qU!DV_1gC(c*&7N5aQ7A&54&O3sf)l&N6F<3v;bP~gtdSQ5|4;{Oe*_xC>jWb`P z6E^~eucpn0E&fl4Q4W497|F& zMGSr=rsO|u4_FrkRv?6Gm~+lmAi;aZ*_+~j7A8*r-oI9A#6R45XNQ%15)(Ra^B{i4WpP{w_Z zy}r6v$Ld7itCLkP5yKymY^?@!_TL1>9B>n3-7;|Z&kNYPMT5Y5qGBJBUxQ~AXy3Av z*rYFKgf#wPAX_pMUGJ{M|s6FT46S|4Wr6c3mGv-8{ zTJA&8>=*fp+i6`CRnoCzRwoOXkc(xEt`z1NVtP!=$O`woxx5paQOX27KGS%TjDedr zBp*x0P?DKm(_|#|+W0Dt(xZY81qN!1W7y)ozDVc9_3jF%PE#Vl!cE9e>v$WcN3HU; zYFQFB{6YsYrD90_02K?2VeXOk)XN|;tQwD> z?IAON98ckIH}g%A160gCg0>5PAZ*hhBJ+*mo2Ge)h>CrqKJ>5h8CO2SckkY1>(;H> zt9>{AeNZ1?wrkh!f9*5wh8u4DJy3k^o!j)sjW@#|CF7^}Y$i>Ks-$vp%dqQvI1!N= zpRh>YE0uvm`yNuE(tDiUFr9qg?f05F)%D%Ef1NKL(S@bKmRPPgD^`vaIVw_*Mj^OYZ?pkbAZqkhG`XF{3 z5Ym+!u7{_jSh`5&|GJfEdvfYDt534HOB}iGNtxnV2)S^KJH9z7mMMU<`_{4ld=SYB zmZV9kLfkvCm8a<|@qVh8v%iVS`14z*xe}9(5_x^uzx6C7E0^H@@x55H79!&03DQ<7 zPl{(ZSh#XC@je-7(zG^DPi*6fmZm%t5!YBWV>uz7smW2i8a0Zi=Gy)ZY(0CAlo`v= zsAhgd;Vhc&ic?JDlt|6#y<13Iq6#VP_nEhBCnc&kBzFo`sSYmg*oarj8e~btq2iz2 zg`jMk_Dbg7quzKNg9O(+; z7w^S~)rw+za-Bu1w_x?nNaH58Fa@7r^2XbI(xw52%PKFa%Y?c(s; z$2k2wEoBR;8GRwbo7WRiqAt0TAm!bFPpKLtd~bSs$4-)!E>8weJuyM2S+eCQ4pTY` z=L+QH$-6Y^T!&pV=JP;p3TCxnOp}jRwaaQBm@2={{gVI1h-e|_I;`<=B zHTCh{-!pUQ#$OFpf3N#;yWxf#?=IYA{9lYeO2*%Hyh6s`Q6whgZn*Kb@lWi)>4qC_ zxZ%d%i?>O}Urr~w@sHx)GU)yrb2^@g9oWlp~7$Og!WHE`O@CMe_!*%R4WR&Ujw`GwxFJEPfyQ3 zG>h$?8F#}CH{AGl;%&~1yUF-l#+#7wB1MX5+Zn4$ewWFkY9p#Vw{PFpTtMDM!$Hl8 zt4$)5Y{`-(bCYp5-WpWDnIS_4{QUg1_U0zzZn)uw8~^{pO~(JlcoQ^*he6#&nI&$52zI!;^gTig$O zSzBs*?aMbVz0k>{o9DRm+;vlY7*{Xd-;8PHSbICqXT@>{6}7_Ve*fAi=3iO zxfVjQg1LM9I>W#3!16QUu4{?$jDd|>axL-qo^+*ocTsM7~_Oe{?2a4O-_q z`}4T7Z7fAfWyjT8%LKcXW8soU)WtPvY_Q^&{r?F=qTYfM2#;k{A)p9@n2<6MiLJ?y>6)gr3>LwrzWu zFuX7GHo5BF@|ama_G0{)pP4g#iqV^`%0N^w?gEvr)_#Hj`|nOQLrqX3Cz_E0&Ty zCnV4C6GZ3!l%n_6@>s6yS$~wejcbdz5t#H24lMnZO>2IkSFcfAb=fqJ&a7wXuyHKh za}|GI=N6#5rA>_$lnfmyl;qZCfBebD;X zkTac5(v|#`3?|p__hnJxy8jaA&%hyNQf2$=%JtVHk^Z$7rsPy|zioM)d8qm^zV*D^ zaO0naH1j_PonEi4>8$10^@1S3S=k#4C9v`u*{geji4&7hWE}_qtha zJN;MY_CI4v?_X#!^DA1Ei{R(giU0~x(>iM%W-lME>>Nw~&3Zca{G9xu>-cQ;QkD$v zkHz+cA3C?^r&Dlc&1{w@Fp{?gA%HQDZ?o>eDUKf6%b0~{C|x!u>qqotw>F9Ul+nGX z5P}!aL+*3al7gni)AD)a?gUx9HNt&o{}Se{Kh2^p%~)?LN~^+2m^EP|HZNa}AK6RR zkJ=G;WI8jBKjXyIu569VM#DNaxcbWg)`wU)y>KAIb{hHU!}naY=p13p=`)-=*y-M|3&t{aD46U#!`2<+^x`3m*zHN}k5cn}-4?`G z`IhdjK48%gpK&qx0#)11B2U8>Bt5y6!?*73ye^7|L znRAghe?ii?wt|FliQ(SQR!mFe20 z2@ihxhF?zHU|`FRP+iK{yae;UZNn*DZVF`2O3C~$cR4krD#o{82|32f=&whTznk3i z_%Yro0<`O1$$f|ob-Idp=+oe9G`^r8N9KA94 zjGGv(`TSE>UWF4Y=d*ZLKPr#DO1(x^xwK$D ziRrkPUjQ?^*PvRp$}C*CP+M#KpMe7}Y4rC(4II92;MgNQRv|5aw5L*J-a~$WFGO}3 z4<_&SAVh5P-ycB~5!A8zm?xia@?`Bpoyh9C^uK^2;s%?6A2xXM^$rhCKQ%J?pqV(4 z<@faGZPU|lmzgk$@E3@n!6+p6>=h4Y-_qeF$L}7T`d@ZP^uO7Y4WUl`D^h;@iTrC8 zBk)fVWl7g4L|eNz@o@r#h)W(1pX=Fk(Sx~n^rD~tDIW)(lEzm?hg@L>92`;{D?bu?h+LI zkkHVFTAp`;f{C-~{_w!_TQHhExV~)~lUAMo4MMKNA*AMcc+B5J$fGW?7A>Vr=Wlqja0(mGKA=JM zQm(t+7IavmmEZ1pPM$tTmBA}$mL(}xy(gYpb1>uQ?<mMTQU0Qq0ComWj{N|TcO*^;?Z zbHQ?h0bLq%r_fhSX_5s?Y`iM628aCB84|i2o3>1p*mDrFhdv`#5xiw6{pN3A?d1O4 zaH>Q@VC7ciJiCEetDaJ)T2hMUF2uogb9f$~k(@q(n8c`4Z7fap0yJw-gaS1_B<#Xn zuI$u58q;S`VAu#_5xHDbcJUzGBoilrn}t3*dwIVcF6(RPEe@n~Q&8=jBjZ zf7y%1?>}PH z+%d84v5-2GB2enefwjP+bVxmx|%$%rLX3BV#AEgedu6% zomlFpv1_B2iu;1dsXScyB!#>9nq9p0jkgfb@F`zl__rrL>@=zrU3b*~sXV#{uq1$7GUt64xXI)A(YLRwO})yQ^n13aPugb1gGx|HP!>-KbQf1M_~F%bfYkco40Z zxO!JQMrX$&c^ajsH)>%fc>s0JV@)0{NsZ7dBI3;3AcW9F$i+SEK6M`txyPvF*M1_G z$&2S#meH!~93e{n+ABrHAhdf;fBjU(@n5Htp~a6(@7J5DLJ(?(Y-R70NQ@4<5K9~J zaTZdf@ZshKrvuBQD_5{4%|g`zITxorR0)&8Zh#p9JaH{IH| zqEqKCG$@*03-q%#c*of|bS+O9A8)}Xm6s)RX7W|2NB_b7Y1yzl^-5(RIwt0SbQ7@K zEJRyPG_RGLVdIwYQMD?>L`4fRvtyNfO&PKgc<(5eC2riqJ*+x=TO0i1Ey`8Ghm_IR zIIE>(7qvEOlX4_%vShIek(IcX_;@*1 zx7*~p9lP~q9HldTl9XhRzs*6Vo(Jc-7y4WVu$PF73a5D8&a`gbhMto)lHue;_C1Dd z{*hd|;dE#@cjg|cb7UoH#3e3hA@QOIJDJiNiHVKFnz$S>S7}_S8UAJaFj@Ksg&ZaF zbLIG9?fB~1yQD3cO*>YDqg9hv4pV->ii0~D+Pe=;J}gM7dhN*e%4BmM3R@P^=VDf> z_(J9qCE54u7|g}n%Qexjl+~fqlXf7gQH9s^nJjlso*mh*rEuuTQRP)ds^n&_U%ab@ z1zo(1E`4rlW$~luqq<`IW(Znz3Ow2fD;*rFOd1he3aWl(r7_^yBZ@ZrPXU$BJdk#L)Yox{r zhjamYmY#8@xA?lWQ@Q5sb%X?ojF;{jIsVwduV+mh4Kj+6CF6%Q!gF_w+=&r+Cffd2_a>Y+Fp?(RtW3d3r50(0PeUb_){0ga5 zL{G==%Vs8tu0$1@J~z4a`O|q5k}Tem!G_C{?+G(&gADTgiY{XG%sORe?s+3N(Yc!Q zdGN@{R57MDhKh0V%1|OiS%~MEn<9s#aVkv8Dfu3|C5Ez;X|l+6GD6Kzzm!c8VV%WU z7ZcAKu}FHB7y}38o;eaWM`V-XQgjVrPmD~Ed{;?3(QCvs0m{gL)2@6^i=pJH%6row zeT|+uqW`C&M-^XewB9fvk>xMZC28oTE^Shl1)_5$vxn&K^i3nTq+e5Q z>C9~-XQYiSmomCpsYvnLljJ;11=* z+O^BWVdK=1z3kevj|(?%aN|*!bj*ren|XHsGC|K{H9~HQg<>tcGI7!r`gN;GvJB;! zIB^oA2YyesK=r!Y%BjP<*|YyD27g~1u}`=e6w1vLyV-T{6fr`auOHpXo+D?l8ocBo zbr5{xHqp-?uyeIek)+*+clMZ5^8S zJVd|QVvrq)0lX}Ga|IyGw4VZEa@JwC0%lu>o~QQ~~_Wf$(`=t;AbkStR! zAqql9OV#1}njeMWC4AUwAXDC)_`EU>c#=JLMll%u$&xXU4_fr6y6tCbw(Y^$XipqM zEdA5wBwZ32DFtbB*A1!3lFA3~)Hzo&-i7F%d81C1Y|M zRkB&gB8+X|Nh9f#ImnpA&W9Ooct#o+d%-}BJQl+5o7f`keBDtYvnCtW(pz~Np-*_x zp^-9WOTCvy($8)o>aLKgU@-t(B+)G6#1SE`QzX5@nZ=mBVB)0MczTiXfRL|KitGs) zd=g}0-UFzU-O8pD9$XR!x#z_oDK`f_mopzbnMHSf4m(M2))Y>CrjOM#=8}Q)LT0yyLH(Ta zY>B>N?K(~O`LkF_A8%yx6+O{mMuy1!g+#tgMyWqn7K*qkqu_=R$=SgU%B8h4bdOnk zceYrF^Af%X(_%vk-E}#742uoNp8)Un%P~sjoS%dbTJDrKK9u-#_jnTGW2JIh8=;ZXPF&rx`Xja!?@K$Wk;B5{nBlqf~Y~JCA#?>zR&yLcGrjqgHKc zyO8)>QmN^D9lS4j7fxm8h>-k?1{<~0*_m?Kgu`xN$PoiYvRcS#)AK;; zZuyn)3f(FHbP?U=+~>P4EvZneC=0*)l8E9BiP^J)5Bf}_S-xb%S`vn+SMjDhaPHW# zgXGDRyF%UsafIG_idU92__{*=4yd-GcHpd3sgf(?-9vD2u(pGt+Oq$zfFmY^hv7b? z5yJa>uuGgr|0T|w;?b#1EIg&-^ZNN2@JSQ0_FhZJ60f;~ybVIF)f$uk-U@1r zyv*tClU&#S3v6LLxNjqs7(@w!mObhbkD~lYlk$ZF{2Rj(7KbU|uQgo%JYslsGYtQ% zsd?2q{m&shJY0J&{>~jZm5=R_)1EA`TbWeEO0;4-LX*7hMmlcRGq83%X{6@bF7_m& z5apyoK=y^|7*{P8Td0v=?+Hm1!gRxIrE3ZUTWnT(7qoKryaz+B=qM{B=JrDqfm!4D zAkxHwr(zHZk!h7x=&|%^b};}{e!_(~E97&>GY5|z8A+Nwp1yf(VjO_CkjxodJqauv zOOw<>7B_g}FUL(&!Sv0ZWGEcZl~YC>LaeXGI(W~|!O@#WDt;J4%Tx}H#HyL@$WRkK zFT$KERt7Eipi0#kN|+3EUuWi7osZMIW}64J*kz9Iz4;u>giDRpJp)kym- zdWO}FBW1LSrdte5s1rxD7!xb*s|hLt_r$pUDy@#uXAR^QL#cB?yBHPSOp7@HcTF9_5a+N2=%g3=>NO_~` zG33`9=()yB^XjqWk@jI#vWaotVV#k|^Pg{`V<;J6;`{4TXJsuYuQN5G zd5eCAZ8s4k4WMMvIBLkywRDFETjhFLF-)3fR&R2pojA=Ot(}~_E{0UNgP>p|c?wE@ zaK(dEC1a^A_l}h^=J+s{T5|m3N>8%Oah((}VXYa5{Kelw_xv_?9Q5K$5)0l}&7_ul z>q`7FYeY_ozjwa}&8o$aORSmRD?G8K6$44++!v&0M6Ea`uJOQ>+D6Ow$-l4<5jnX`MMZWH_PmW>UOYi*LW}#Fw3F;)qQ`=dRu8+@dT8Htmr+jTrorQ@431 zx_#N3Zz=~ce)cxa?L;}XI`jqkdO!oD*TmB|meq?6QJ`{Z(q}CtX|~6F7+Km(_>)9j z!Gn_Jv#?|QP{wZ$WyUX~T;Xp3LjY+K5pe~*PpUsf#1-BhBCg;?s=tVcD@>({p=H5%ei90qQ>Cb@Go+d$W^p ztI|QNnwobV+cY9BkUt(VMmp^Nl0X}+ zrF@-B#WAUrmB>hgn1oKK8VXB-7N_gcSb)p7XEl~6)I@LVw z1a>)Ab*$u8$63-?wfg;`QY_s?=9t9uNGeNBBJF@^A=gSz>gP-^QLZn-1fs|WLWq0h zwsHBI7)i&KE2#65S=!0LGoJkX#6j1h7OG1-aY$Wi^H;9&Y3^>WV+HMzlCXr37i&aF zn77o4if@p1gtRAhNyS%T8plwO@alP_PE4qraKuDl^G-(oR3TgvYuw;^ zDAkjqGZ=B)y2MTYWcaGiEHVzeAvrBR{h0k5_po;1S}L|~gnw*|*5~{#RHFB8a_-?J zzG_jAT5YFb&Y2E-d@M$9e+=@ZtB%^+Pw1+4tY%AG#T6qWz{f;HWHbS(Q{Z?OhC?i9 zorIg?PEjTM$K3MCO{EeAB+P+T`S@Bb+R}MXZ{OzJ$(7WtQ=4xlAHXxYr*tgNWdAo% ztHb;opw?7=*Vk26R_nicBNm-^S~~O_$%IK$`K(@1SLmNZxY9*N#V?F@O8V>AaN9^wxSlQ7OxQdf1ehE= z3DVLDiL+QhCaMxG17%^@~kgvFWG3ut9`kW?6dc#MvdL3-}R{b!$* zAe;J@K#djQLMY3obFlHUiCYmmwp}t3A>GJ}63KybQ#p9g$gCqK(r2`h+U!7v5*~}b zls?0SP@cMBW?zJZrdjO7$a#RDjkHllwn-gb3(>Pn;^oa^<%X2`#3KVcMbC+s>$gbd zRm@>$=UFpHZksqH3i!xh$|=Oyri764#fm->b7;&q^84smbIr)I6DBfcwvtlfMoPJq zI#d}WMNiq&S_uy}b4cVpb;rQD2>lDgNab5Or=4xCe2Cj^WBPDncmm(cf;I@l`pcqLRvzGM!z z$nlL39Z{05HV-GiI8{z*QwQ%Dx%SA!&v&7W7@@f&{%$Gj3DMySsb8yEj8n6Y^^(T* zFsaA14%SOMyDjyo^010=Huj={5}B-|5<;$g>>u3pp#DD7OMc>p8~-5wyqijm(%f&m zfiX3c%R?@GpUH!uy`yP7GK}MU$72pTPVx6UF(qg%v)=!hYRiw4d_xOH1vg{!pd`GP z{X6EJJwhJ82tq>R@QS}k{m!FF?W?2vgvI3Yiq$%Y1ibF15-FK_SPoIH=m6%QJ3?N+ zc%our2|6~7#seR7V)tln?i@~|K~EDMhjH=1S2WFCnfl8Q(>T933%{w)wv65R#5#pB zk6N*&&ISBGyFX??o! z?}lny88c?oTu;=q@FsoeU*)Evpa_NX-Q6K%BSg9xHS1h8yN&a~dfv-m(`NpSHX$Ro zjD!l2ORapHQ#pia8MzcGhMJIYwaUqd61GF)+=+rJ`7QW_3jr5`qX=!~tTt@V4eSw; zq!(gZE}MlELSCG+$&$YiXLWCgi~;HW?IiKFlRvNpHif#gXeG+a;0BE4dJ5 z3A-r9iABhGvGfj(-xT5}y6~3r)E7O*Nf}j|9wN_9x%O1ZVx+-NOVPE`{}Czw)fmyI z#P=3*p34Vz+;+}<7ZcK*+eh>fZD8eXz4m=gkqlM}2+2Kl)4=H{9hv+@Z*s5ldAGXs zs#eN5DrEDL+)yyRmBK>C58ly}Rpdz_c^;NBXOrUqIaXy>da}go*(Uiu7yUNMCG9cF zz_AF?TN)cNkz#Dg@rRoxJjP#0@uo2XE6&A98ef$|Yt2e~+JGv+9Q~T+dvAZ1ymce^86I6$=m- z|J%g$O~`n`f(6;QaU&^Gqfu$rDLCs@T~~`rDOZ`7<#b+qz068as@_y8s@_y`s$3Q+gJ!sC$0Do5 zNnF29BA$TP^G$s3Yw;uvRSu;SrDIhW33d2J?Lut~=qQ4(-@`9MHjI%$Jhu3eK9xTnItwRH zo+3O}EaAL`$)Cc?cMV$c{@4{X6zexyJ>`iZBZ58d8TUf1WX+gD9zJ=Z!~pO%T3zYb zNSU=DSps9Z^Uy-pOeu+venL>F?ZxrEP_gz4n`xW73c34DqgY@JDRUPkTQU>R9^K=q zHGoWMlM?yxGN-RSA$`X5@=%+|mMt}rx36&e#&hzNEJhmLWA;fIZ3a)W=gCiU@0U7w z9dAO$|J(9HJX^MeW%S%|YT)&)d%PpMZ57K^0wq7SzPQ$zU?Af9dYb-ln6;~h8=5FXAMQuN@ok@_$OV4_i}n&L*m4au6M>)_j)kLarsqrpjg% zQ{1lPROOKS6T;M5#&(g{td-FrWt8*Z6xNCV-^jRXEC1J4Q*pzM{|Wyb8Fy$ihicYX zAx^s3*Jn9(@}Kgz_Aoh*|7WPa>c5xab*LFe;@Y9m%}ai17E8Md@6v9r#Fe?&E>>{gtZWcL#s8?YZH`yN|a?#??!uKLtgu zf0KkdY|hO{EKVY>U~`djZF7=@nB_KhMo)Cnuezta0v9oU1&PwJ zCL+(yYp)+$hz#?i-{OUoNFGN-bleMh63eE_rlqIIz3cvjFfEFdQMqWuD`Nh;!n)yx z8ws$5%c$(eUkHb`O2wTZBhycrn0C&@!+6!9zuF;r37Ma|+ss3=kYrcbZ^P-f;oKqf zk3jAdqBZS+2Mf-cn0?mBf+J>5i7W|5!hhn==JhVXp}BcPJU7yJw+E}P83>cmKRuBC zDX8fy9TWF?FjwmROoUpO-F4|5g4#EF(q1!9rS1K_`f^``6W7GJgK%l*(peA4_!-W^Zvi!?}|lWO%EP`h?@>VG?u z(BIq{{5b;}Hs^BUYr&gn{mE2roLI|@m1kUmFY(~mOuibh#&!1Rad+n!GWZwdMGm$T z6wsw)`Lzcu9W;XTZ%LWw*7WD2k2-NBBAU>!#08IHXw%AkSiLTFYuBPiokm=G8bXiO z{Rs*^&EP@HG+)WrabQw=CTx7*I&&i8;Vqs^GrqfLAv4!HckKKlI6miVN|mTYy?XVi zS-Cu222Xym+}fKU3hfqi&sAd|aU!8*YSg z=*Lf(y#0w5HnKwgFe$ zihHTa8zE`2R-NWQ{32ZbI=zjZTa>FXwRhQuqaN&uK>G+WF}G8*uv#1~&4hcMQ2D9t z>UTuh=~FR|E_rQOW7XQ%PM=-vKDp+02Tm0!Zv^U6?E>_Y9Fs&4rG`gOw%Hx%S?c~{_Yx`q4=aM)jC5bqkI4s-NEI?gX! z?FxwF&b1&hRHC?X;{hfKu}9qCh{(v_WX69T?9T`{ z=V0lo6|7ymkx!BwXYjJq5*|yuR+SDS!<}^L(T$rteXa;Zh<1)Oj4PM#lA%a#+SDqb z1%*AjPtXG=iLyn95`6zDwwT9+JbStDSKRYwJbC(rs90xPvBpLb6&XfINSNgIpNM%H zf!%h4C0m`kxVvmB=kerOxF=0|btkX3M7)F02SGdxRdZaDcbqHD$HEo_4=x<$@Ug2r zOPJiXM)4phh{xdxl+4b3SDfb>leRKz&abo`GnU9D?dULevlh#VIPP6{FlOUwRuULMSYn8ai{sJ#Ai~rx9xgl!xhHy;x(a`_J%nCAO@*)KvTD^T)^FX-dv`Z7 zdW&N$=LxS$pwinzsAf7&Pe`i`H*uS>Hl@ z-DVh9cl^RZTTK@2o6jd{uQ77Im_@pHE?zsuS@|WNFu$^A8q4=y=W*n#RQHj@tJZh9 z$hn#g8@DobXdTSqkGX#J?tj#|?f!1AJvtHl79jrw^;S;x@lyQjvqQjEp!WIy`KW{t$xhiyp5VnYhQy1Ig$1T``(O&Z+05=a%dHFPQk{ zoS7jKHcND;>c}j4E;u3bNSQ{QH)zJuzROaN`^+r4W6%h_6Hc9Pk$j_~4E!i^1x4za zcf>=}#qn?{n`ruHCBNuR$*%~t`UQy`vu_$SLaxa2?u#ZaNcZySp^0IlhY_L&hsby9 zo{>!t^%{A;A;&vH^&AkHSBcK29WxQ5=}OX&vh9>It(NdPa<5tf^K7)*dS1uYGbS!c z+Ulc8)%NyYbe3h=y~Jg4!wokQAl;f9?-~wG8c%_rj?pIFE*4)_9hVWKN%_UgAmimL z!9m{25-c2Epo5#>?>~<}^w+9_2vssNV8XV7` zk}{na^O{#=kv6#*Op8jLc%l~I5^}k4`f!Hy{ejP??8fflgO9Htmo|;3_w)nYST%

@L*( zv@g>pjG$$Q?-7-8anVRR^c>8L;onm_Z*!@Umr&n9m^~6|&q>;hQlDYFN7KFMJg(i? zN4x4BxGXlw;R)^OJz*ag4=tc+lTl)1UFZDOYpmFD#C5mapQOu{!pjGP7S2>R3n!y|;t(N$r%*W}!tMn>-(i_6g)4qqm(;-na0%#0wIFxL3%m zT7^QvDiI2&wUa)Hl}~cpxF%#vZ95Ns}Wz%zB~I*y4qFzK9u28H5jnZd64r|&vr zCOnyiuivw>Leh9B^0~6p+E^aZRmVaWI_0o4>xhwiPsJE`V5d`23zd^Ph;(MB&El$6 z&R3i<;+@t;jdTv?A2E?VtA#IeI;4$C-TT>jKhVJkIV@C52E$Jns4r<(^wlx`jDe@& z23B6zQ?G;t4>6eL1?e(^?x)rf<<*X2Bu|0R5G;>mCqf=ok?~DC+ zUg~JS)me`xg}9#(l55gtoki#Jw}|LGLsIAFOnXk4iAXNx%i>^y$f~CASBm_;>1=$I zTupL`4&>IXQqJ9%jHs7UMw`^hZ9PfFs_TE$K*NF-vc?#geoN2uFe9hcyo4z5(Gw#V z!gO2}!|I?^Lf!mUJY8)=xf-3nW8%Pb2aQDU*KQcOrR-=4KPQIW?Re*G`9&e(hwM@o z(e+_zbEjiomc

+;GB8#@{)FGH~h{awLC*!P~;v$-he2%gtI$9v&QAwh&95eti0A zbH?{B&7yseDU#|iXHMQ(T zVZIsNj2309Q=>^cviQ3Ml6)O_Q=rs`d{DYHC3B~fFc~ey(83-sL<4rro=D7x-!W!* zf0|X##?y#6?3OrkmTy7-5tAqoa+pK$NvU0~6m2^;Cy73ah&Y?5;xQRMXwHC|2 zrVE4WMKWvNVumh!&X8H(((a3aR5LGT@w0-|E?bIkT9tF9CNOy5{QHc#ZS`p z^Ky_vh`CN%Aw>S_)CchnR-f=-;9)ao!gbo_Gs24n&dqjwJsjE$Xn@?OWOw zJu)zQpP8LcbUcod*e<21zsiNiU-Al+uI-q}T_UTM*kAG+9R}(@NFx&mP|CBkC%Mb!>etaF)L}uNgh!qdL1CWoC znb$zRgF~*J`A?WT%a8DcF>PzlVQA6BHWbDB^>A@+4Rx1Z&B5qCs7}&wOF8 zQ{|J9y@yourZ$&}87fdBsDG#7MLC~O8keP%C<|Mv*x#g6ePp%tFbsKQo42_xw4NFT zC)cMV=Gz*DMPh}SDRG6eqmx9gvLbNM41bLUyLK2X)#rT-Uy?#U+bD!!e~}<1^};b* z?S8jmqFF39Ro+{VaLfC@jz6grlLf~3mP+2{m`{dmBJy=T`tsff7jV z{p1#o(yC>ZsY4H=G}F#$|F0BB;c0Ad-kfov#hz^g&O0~Cg-PZs{SX_>jfsJS z0W9r^BM=B+pzSE_dQ8jF?5tDK?P_x!hp13hjdl`DiMD~lyKs>3jy%>RoU}|OSCDEo6aPUAFnkpf38M@vuM~#mJR~qO=(_@ zD?+{imt)G^sG%~CN3>wk^?aKyVANy2DU{YbMb`K&e~2gxOQ!&1~h`m$Mx7FS(gi@$YMMCX)9tm8~E3l?+FxIwN>lFD$xiI?v;rth3jI}y1}CRv^?M)B#7-OkK(v=M_8m6wQie&1ol?% z$aoT2Kf4MvQ=8oYY?#r|(GWXA{s?5I@(2xzt|aV9Hc^p=DC<`0zcO^E^X96eaY~@A zg7{*jq;#+J=oNNy!3=)mdgu(x0(z)z%oYHlL@)>V$uA%;<|!xC~QmNqRHwi;=#E6)Pnw ze(EJPwK+LozoeQSrq~#kcB0Fb0nSSPKxFVCqt|Wr9j{?3!xNh|i!D@_YI;sT1^$OP zNCS78YH=9z<9GwJ#hz~8gV7>>>jEQqS5eY%meUQ}nw(=2jGAAqPL&$Y)+T;*mEQlc zF_p!+Fn$Qf@>Sy@`|^p@i9#EYByz1Av?^;?7l%&MFEut?Q~lOBn#z~K=#eE8Qo5ym zPC|2=)wlne(F{4^3@>a%#~>(V#<8x|Uf^$K9YHndw!tw;qxuk-_wN5B{;%d}sbO)f z)fdPhMrF)CrHAY-JG|}B5hIRODjBx^bBs_?JU&4$Qh4`YDrJ08x`H%_>H?QM4uY{z z8=s@lKT<~|nB1|>V|KiTluWEr!N-kgp6_zt?3ayhkF=6MQFXE6g)0W8 zjM*kwFElM?^WT3fJtH*OpMQ7 zr#vJ-DiBTx|#xs3!X~e`UVH555m(cN<6Dd--+VlS{wsPhky(t+9Eg+bt6k zznIJL1bJd3(Xd)P&q;APsPyA3vq(a=D|>IofN2%$lhyjVgozB_AUfqT2X(^SMUm+| zW5k1b2&M$wAegw_ip}QL5GhM{4%cqAe(8l{6rcQd<~;v(nL5YypNg$$`L^C(!W!?< z8T1InZ!FJeq`ieUIM2)w@rbUgn$<%Dw3hBrV^xB?E&ShTB;AROVf*uay2I#m#J(8=W1Tl$0=Szqax>C6|2(HW3?%CwHm<;>uMs>QpM<8u8lf+M1q zkThmwSwC2_oen`;YjnCzhvSS+ZDOE$*!mX2(^_VP1&|HfU^}aVb5X=^{@Ob=U}N-8 z7%Pd=)$@KyhFQEVHD;81fI4cB@3slTHx-?jfjKuV`JIfUG+$4S1>ch*7!hyr@tF5Q zE3@ZEp1aC$V77VjX6tZv#?i^l=s%<1c`p%pLRY^qTJy?zu9VaM-QVld+jFpO2BoA7 zjFq8)4y8C@sDQVwJkOc<1ZU8m3%2a6*eXf)FAN!0fZ~Md{%}(UG|qNZ!eWid?i;z- zf_>@P3%{_W^J5zd1_Ejl^B0nM-9z%ij> z2o6S8K{bSkwD$ZB!XgE?<`jB45H+hTH+jh&N)ER%NJB9sN?2}h%0;jZf<`Juc?8n( z(j%f$0CYFyf26$d!K;T#4ijJY>RI zbIrJTYOH{8xu6Q_&l)3ij;u7#VT`Y zIto%t-Ck>D!C{#w0$cI|gk(J3GA{5PkgSK28K-SEGJ+!pZn5^Vg7YLuENwzcRcjK! z>k30g1@DiM!_93M4y`bA@JIr6W3QLz9slb=%~pBz#{I=r-iUq-m%q*F*!atl2mEN} z7srIQ-+ZTQzM@Ouk1$^bV#%rXnn0i53nI0rO96^R6BgoMSVX_ohyk?=6PKN6SZ6Fx=y*c5%50-$pyqO6xT*5h2kI z7&|H7BPxv|eMevD961UucP}${(wmQDT2%7s1u4H~S2Q zW>qYzR3Yx2JBvc&E67vGaP`PVnwO*4BS|UeaCm%mH!Q`%Ou(+Pp}Ho-Z0OuONdHfJ zkQ4c)GCIV7UV7`T=A>T`VfT3_t+&LQ$2veViwc`QHc3}1T4q(JzL9L#%v$Ei{;OMJ z8LI`KY1Y~Uc_&gOB@C+TQ0+3$pD}COm{F9@EyzjG+khzoo#2KavHp*)*Jzm zA(IWVlvH^{GDTkz4EUJ`xWcez&+J^w8Sa;}MEcx>XWm`aacO z)W%IKc5m}Bs7y#mJc^HR4iO8+o8(I$er3_Ce0VE4rx-d;W$a!ZfITfu(Q*_B{=9Kb z*^ZxrdYO+Y#E47tP;^IcNlj)Bq`9lwqD7fEl&*16aDhW5_eT>C1^b`V=|PiRUxKN8 zB0l=bpQ>`6dBq|k#Ea4Pd05G@WFoljs`F)JOri(w3dgBG{@hmi8Rl`JrdyfiRWvX? z0Q{jQfl0sDBLzz;WBi#qOAl1h*7hr(>CPnKDIw$TC3vzGs^maErR>cTX7|wm)puJk zf6!YDs^<6$ibyc=mEXBvlkv|!d@NEi6-rpikRSWZpD|%t6l@_MfxL8Y=-74L>ukLWRqw$u5UVpkP|*31yi+e4Q+uXeW?N8=S#IB)Hkj)!Ep~uXrdRhc zCuU}Tnk{gU=}wMcVtb_`k{U>G5*repHZJ9tUcA*Zvy9dJY#=*TJ4o3BQ_TH?4OW}E$_dRyt%(?nBPHT!QLMmREa~A!1==rkt=X-gaZNKjbG(rQ) zPij;#nP6Nl?5gjwRoN}lauDq#7)dC@8~4p9A)tP`Q)@6$KV!s&aozw;Q%R1Bp<}XCYUyP)uGt0AuSWPWZR$JTk$h4WOGt^~;@+LP(4UN;p^~;8kz=nMS?jod@y$4)Oe1 z(m0$ct{>MHYIOL&ys(Qm*8gFx@se*1E11t$=u;^?CMHolNBq&VVNfgj$M17@zCT4d zrtsc8#8iRKyW;8N)LQ&Mn6c-#|Lh9-S-MRZid*X(fu-BN^XBTDw{O5Z?Egn5+j=8h zF3f=mbdb4Cf#ER|}p^!F#>3zi~5Vh+3r9*tCr}kLTY4!ay9|OZRJtYn| zA`iiHyauA$Oo}_yg=5=%m$mpkHVX)Ps_5xUl(lZG4rdJ)%k3J2H4?= z`*nZYKWfeW^e~J$U0p7KLW?<>$w}+iLYu|mZft$T`Ef zm#i>EwJ&UYBdF|85!jXM=ER})-GljE-nNgZ4sY3ims^E<9~#>iuGHkD48?b3J8lgV zyc&`3x-(e+HWW4;0av|U74f5`%3faAzZr&})11=hF==_UlRoMVnncn?Pp@8spO3U- zWW9b{*8UiKt%G@nS<>|?OF$d2oEQ=2*6T>Ncm*n#DHJ*O(}q|ZZv1f+lb3v8K0YugHTzwt^7NMNx z9xOC{8ld3V#0v=jxDK4+0ZpA>(;41rKVJU77ytEr)VUW3we+!wxqecgL3>G1B`jsz z*xHMnvg)5-N2`s=N$BY`>itLdP_u4#n!Yx6egNETaaB{qb_{E7j?|7owKaA`K^3B} z*(*E^k)V6{uHB+3I}!P3nK+9xJTRM~o0A45g%PGdnre-v;YBdSLFlpSCW?)p)$#fB z3qq?~Dy1gXW!$p-;fs)=8`0p;5%;#|&+Nhamb?3v2LLM`!r2-TJj_1FN}}KTECZ=R^9DC z`w93K_YrWv#cN?cCAV&3&ja<$`wqk8)49TyS*1%+Sv$?PnYH%csy%Se?YFJS{E3&t zdQcKl*v&2e|6f6!bsCRM&wlcYb$VV^qtEhc<*M!3bKPrS?vxc5VdQndjt3QaTlkHC0_@b_pgmA0 zLFDyx&*I_Nb0N?erEc5E>8#~gP$BF2ooych>$jU_cjy6_ux_}9!-#?hME!+vF4w9$ z7Q0d{`ggOc)8)@B^byu%-aovY1quc0c|wU(MlV-^;8TuodRv|r_TF@A=L&Q7S|j)M zc$-*Q_-=^a$mx=;AnJp;GMZQ33Kxebe~{*(LPMLjl{z=)-d)6#MOyHe5qD^dkpt$M zBQ9Kk(Pfa>jDzmoG-7Jl0-(ht6j77}M>0=GED!iQjzM^?ni4O$!5z+VUZD=Z7|KZ@ z#Mt?^l#4Q+IW(BTTe*{e@EqKJfsKKKD&xd?&)%wQX=ht*EVE~l_(hgDomiMR2Be#w zp*9CQ{XSu8l=*s;`Hd)sB&KXdL2W=nhlvT*Hdmi9EQmVg{-^<*-u`00>ksDJ+s0hL zlb#<6g-xBds1RjG?Rq0vqDp*EPY^HKO@QrUzvFO>Exhy04icIe(?LDCblTDpw#b0(6$bP{bp3tXI?_-yDfR`- z_$C_1{<+)X=jz@JlpgRsHjWRDs}pTTro!a4xVmq-CbH^|#%f;y2o5BZ7_=8Bb2*Kv zTi8MJA}T_Lqfk{3{1tnCuiv8<&wmmHwPw?5cR$4sC#6Z^L{R0?RE#piMIPZbz#pv% zSt_fpuzHzMAtv2Fmb%tRkY()KP%`tgykvgOHeFwl$g>uTWk^Y9AL=mJ8PqVJXl8c7 z7x4dt)gNW?av@bDzP7=viz+$UrfD&X7i{RC>av??l0Ko*(jx{#X z1NZ^8ULZqUQcsCo+>3eBlx3kQCF$+PWsNee_f~;nkAIF4&MA>~$)SR;l;yz7kU=E? zU+*1+!&-YK0Pijug8N-YaJ^Ge?00!PrF+;B+M7*~$i~9-0F(9f?*oC;Dw8oFhSi&O zo?^=@-o*2Hg~4KtewjDIrYMeDWz5gWqedn7Nn&|{0q1`@ALU$rYla=^eAe5S< zHG6|Y`{n|4XQ!cSWxeCTrONIh8Nz(7t<98hLLAN*Dmet%=FZ-`T+-&IXi#v>BuIA& zn4%C4CvYI>#ZRRWri~|+89OVpK}TyjoCk9s;&inn(NIAwvCKoV@TQh`!2lxwM=PsI z_d6{uj#{d-&yM4(hrCqtwL{rTL!92j$cDvac>3}m5J>dxnovB!RC!NNlYp zfP}_kunWogfWi@B>pCtkXkcb6#MI-}!NNX*}&CE(S zMLQx~D;#&AX(6r-%i%=PS?u;N>K8>t;+&>EXFg;ERf>>EKtv&@N0*7l7`_Z4hB673 z#6<;?C#a3&B)qQXd5Js;Oi8q5`B{;rhf289s`R}|<$c8TH+fCOPeQn`4^_n?B<>yf z`%TmYg|A3Bdd*)FbJN)_LpYFj194jtg`M!l5OA$?#Y5ci$Vl^k}09!Zf!IUy6jw*AenvlZ+IFzfp$9&4T}FL9T&Ryrg7%|3k7! z0N##`It2|sVS8674-c++gQ(f7Q|i{o?6#)nO!fIpgpU?f8usXlQYx3{F@gRR1vBr{^29VnpYF#FF1Y8+Q{I!y@vrRauiIxzbsk6cQ1*h2P&uusv(z zg;?w3r5*nr0}ghyNkXDJDWs|?%%)d&LbtCgZ??|GbP>&JB?`kfdIlzhcVYCq1q?Ys zyqU6y6%Q8&#CF=ms%ZiJAbBaf*|A_1!aT9Qqc=F7R;1{356Q# z#oHioG_~=hb!gP%u@M$dd4Cz2@!gA{$VN>Bg2|PXjpi>_4$0JwN%2g6ucBc^HaPS<4w7sw(En=M3 zCvxB_dwh~PMWxGpDlXyt_K2Xt%C89NPq>JYEMeM%n8@aqA*w}L+(zw>#W67#r}TWx zP=@z_kP#Vwll~+bUZ~WYH4loqSABI#&&a^)cwrn#WX`o;Zb-!8J6revwxdBJZB4MR z9!srF*Z5gzFtIzsx32~Zhow*^X%3&Y+-N;4BpuDky!%g7o*ea_y%J{X9E%Ld*&a3c zP>IG;MecDO>wxs(@iCU&RI)msl4??VW4KQw`YU3a-0tq^qxA~dsYgK9U|54b^tDHK zZKbvEHUiCx%Y;9;ea08;nxoYfpRCWRM3W1Vh|mPxR)lrcT0nXz6RlKKs0?-LrZ!?I z@NRTx$u|!_YS^y?cA}?7%I-*!U102$nGYS@Eb>L*n&_t5>gkBfR7UmwOAq@*eU*b0 zqugqsd~HnLv_mJ3DMoxStdXbeFQvhvHF%Tc%w?xSR=A)Ej?U(m?zzu7R5JaW>D}SaVKMI#e}}C_^qE>yu!p{Ff03bv^BS?Kowz z2LiN7wm&>9^bZ{p#HO=%I57k(C!l8K238V>vrdFmkugFm(bEJ4Yj5MD2# zzPQ8=cz{aDpl&-2D=I0Kb_!u#d0Mo-Kw_20I>9d&4ReEumW9`G{2z5orM-=H*$fHc zkwm=E0)@1on02X=&VV@F zl=ZEkw0qHb|C73UbtBy0+aeic@9T7}2LWlMS7}DS0LRyU#B>hgRkP7bjr4y8d)kw9 zIR1qeF|8NIEW!dn*ym=@-WQGpB(Jus&0S3C0l}N1`WM8$dc0=LRPdn$Cpo9Bm+RZd zDSo1rST7^XGg%!ETI8H%Fsgs#63=_haK0vveRX5ILh~r);_V~NV%&c6@>je<(1h7U zjESK4wqnh7adkr9#vYMm|8udnUOCLi3{=iqca=K!?|PkgpWqthw}(@RgTD`KNuh;> z&Tgf!z#RyxBT&2y#8??UFCwNFDrWUhs}}w0{2{Cp2z}sn_#}c~Tp`Wqq*0g^vTQu%7X{5$4K3N^y5tr zP$V9Ki|*<0r$uaEmR(-ucQ}17%sZQy>LmR)#meouv%m7m`av!)dfjZkOOL+7YN%ynPdVV<&tX7*QJjGX2Enw#8ndzuYry zeYG#>1mLH&)Ju08JzM)J_mPJ#pB{y2kZF%oTSJ}8IG#vpf!~xdKsLmN?rY6ZM^mnW@X|eisg25xTneChJx> zkN!!Uk8tjzROMD8CwVWo?un>>CCPhR%9$D963lT4h=R*^H2D+wfZnm#4emLgRr*2} zY1~CQ?9`zE;;P1oN^HdCdp`GJ)}zS5i1NgTFNaRXOo zCw30_*mTs+ObAr97`gkCJBPNT+Iu}g^wR`9o`|)$(X@_((ZTtX*4k= z)@R!_1M{1%BV1*N|9wCTyf{RO^NbTKKjN_!OsS+3Lh@Y-(cj(fftiV0Gi8#4DA}$I z`r(%X6)xq@>LtfbVFMc)qsUf$5REfuYfwzEyW)Wg;4=OS_k7a z(Jl=KkQHbd5qLH{*)wFH zBV4Mgy>~b+a`wM--5J)j$fAGq_#h8U9|2m1hODUeVd+f%kDmBpyO)YKlH#kDB{WU zk&>}?D4#n{*V0_F^9#7eA9ddTW#3b4C@(XZ&tGNi+~O8_X;X2&r8$M$oFtdGf;>8x zp#6F+CNK&^;<8#UA+3#+Bgd&=eNyrm-yJcPs5lX}n7RIDuVUnAIg!SxYAwtgrE6(v zO5_`o<0Zgxc49oYT`7OF+ITKF6HY*u>SCA9*<2fGcGXjA<{U~RC>qVND~$5QM3vB< zN$S!NGc7|)2%3UHVrO{(YYuY6MzU7MQ6C~c$R*^jZsH-A;C_2G6I#4~6ed7{qfa%Z zXkE{+aLo90?;)aSSeQSPQn0f-G=y)G6EpUZIk-O60 zDFNOaNt%EHe7wB;!rwS4W-(-bqzn1XZF0VH?y3)OB?)hdxOnM2+&~VO1G+8sFt=FI zqI1?_;Odx2x>9K$JYB7S#x&m*r|00L2yj#9-x4e<76JSm(UuQ2yUjP*mjGupme~NV zechxcyuv1+7!6)P4~qgb?hWfmdHv^uhE0+i+lXtRU0?2lC@3ovR?Hn*9)mP(lSq40 zm#}gGjpAr!QJ&y1jr)ni%vhVzrZ#%oyMZ%eRkuU%5+RU1N8a1?JG)OV26T$@h+RcK z_vi1BXCyGPfn0G@7F0Q)hc+ReavVjh(*Q15Hk@n>;?!xMQh}Y5T6iBeMLw$tys18b zO6*-U*V{l`@#+^ru|@Y^PbH3s%fm;s2(G(Fe{xpLT-yB zm2110cxBW68mBI48s^ULv7-{j8<*gL@tboX%fNX)KMzq@gnBOSFP#(R9~p8|HC6U5 z?!pSPH;8N=!`O)|3xkZ-_$nVV4Pg#i0^&#Axu&unI6Wb;hx`9{^_T3m7wpXu3<$ zEXhW=G<^k@QW5O!E+%Y79__4Dn1=~Enw2Hmo%gRn^|Xj02@!tQy#J9#_@-I=$+!@ zLYb81;5hUpLZ)CQCoGb}yx72QiR+VMF4(`8SBcw0C!B|5BxUu=33^yWdpTEMCG@Th z$!m24F=)3*XY`~&y=s(mBy~ZBZj`z=nWID+`q#oafiipv32&%nxf>dM2?tVV5Sy2v`&*;kQRJRCdqu;Yy|77NJrhwG+vA!Dr{Zhdl&CwK-0n-P1o$Qv zPrEBuo0?ZRu8tFtmpPL11!s{1U0K5V!(H{j=zCD3Fs_U;=@GLk%5d|fo05kAi4ra6sXtbkISgW z_5umXW#HpuV4Az%qf)i+096}t#;EV`7I*RV)mZw!x~H&MH3g7iDZOidU8mH7BXk%%j?vom97GfS+5F>8+iuR&goN|~JHnwOg!!lMU)hfVl~l{XLxW> zu(%2B;f|x6cx4z41y#6~vITSixZ)95bOmaLgi527tfwSOU>ZQ{vN{`=%ImBm>(J*M zN6shMh;BqjCA9pTV=uFn0Ovw;Lx@NSG~;vw!WY!Se#mE;u(D_$8Fuh!C#~7v%i5#i zlU?`ac?|Unb#f)?%V!wathU&~_b572Q$pj`7%^Z44D)iaHkAdb5SAq=#Ck$;=jjq$ ze3KC(`G6O2JJbjRgZp%lh9(hq=Rt{PX{1Dgyrc;%ASU%;J9HeFzVu^_ZYkf;Ah;WtYB}%fr_s$CZJ6BOF8v>0jMlDc69SxKVC; zwl<3BVnQ>yU9jeoe4gU&4|}Mf8cUJMz^&{$s?=J=%kx{S?v|b|QJ~%2!1a9t(o4x5 zS-XjYhZLy9L0uHR}~_)6LAYhv0^{ zPnr4|#+sIly2Aqoaz%f{WQs2}RtZw{0x6cWpAd0KS!?l7l` zu0+Up8Hb7|RLH92!@7YfPYS>TRc(OA@N#1(H^qum;{N2?iZT+-^wKyq6^}Kh8Ax~4 z({G+@pZ6(TS`~e1c&z(DbfA^bMl;$S%8_iouw1%{q7e5TU!LC? z^(pAUDj1UY3hHpNCKNwt;+w*tg$d(aD&AaGzm6q;Of$vss>5r|cl~c(BY=bZLJy}e zVauhBylfcROT*mC_F9QN5v`+h@`(2x>LN0QlrDm3&EhO`{9@w{?c8$=yNKDEDX+nH zIefMgV8eyWoUU4M-92&qKGH(lyui>6j+ z_pGTy_#!1}xiQ4)I&2;?wI(z82}SWtq~B=od*<=M6jcF1DTS^DFKGsUXfzGrK^BMF z50gADH_-E4BC55dsmYHU*6is~mGaD20KP)0rS~v_%Qat$*|t6&RC1ZsIl8bgSy>Ks znkBokuEZMfM#nOe!;q>Jo--w`>P5@t5z=bH&5&1mJ!>d%@G8by$dB(-s{;}oU{__s z_fHpP_RI&kvQ5b5I{)rASch`M8yBEZOVSR!wX*{0L9r~w?bJ8((T)i3tH|0oq++O- zKjx!Uh~__yAwO`%j>+QMRHN|x$heVvAX8hjTRNQMb{@TQ`ZIlg{lS*!*NTgJ9_lZ{ z*tF#?@R9H5pqragu8bSTfVF=f@k>H1&e#9U;Fn~>_&v0_79t1~U8?NWn3Y9Zsx{UV z&HXN2w&r9K-4DOli}`aY*aOm$1ZX(?9ue9GDokuLCi)j+EfUyKmgFj*yRPk~LjRr* z+X=EqrkUC})ok0vPB_XOj(HR%8J!_B8Ya}hMVq9nM9c!k76fwAsh@{e=D-1lX2!v_ zR|f{@fpx1*b^_4g;HYcn3bp6C;k3nx9PbM?&K`ja^mcr=ROvW)pYPd9gV47`9C%vK z#-g#e)&t6394TLXAJ(aR-&o)ZnX`}Q{9H$Ul2GPNC8WDAUpR>DPDl_g0P=ed5o|4` zd_4Ais!7a${HCWU42Vx;3oQ>!&sRm>YlJFwpijo3&&jUr_mXK-MY+v>6KH3?^jd3e zpLExyF@z^eR6Kq;_o3sAcC701wYj03NZONYoCXEPaYjoB!!ZjEjOA|;RBwO4<0-Rv zKDHgy*Yol}f%l2dFkbq5O6>2rx%IHaq~n7T(22)H!jno%!^fU2?DqR?`;eK;|7^f6 za9loYca{A(i@D*ttm$9Zp!*l4lwSlY`RtA2`z^vGDfK=gx|*ma<2#n=nKQ{PlWVfV8T}8_ zQu}kojWG#M4*ee_D}{RdR*~qE3JG2l1$!wq>4GnIBUo4n738U2Z78*;z0bWzKJ+tn zMz)*co2J$6%6?;d3gNa~^gFL-_)aH-0s*ph_(zw0A_izSv zgn$jX;o}Py1sP6iYUqHXuc~sMl0C?~$q(d$)YS1a5K@mn)rM}7R!P)Cc*E&(Ic&P= za4fFrjWZkGwqfu!-8-jHrx=`wN05Y?^>;y;5?{of4(=>CR{UtBz!X(p5q%Sr`cbj> zWChhgyrc?;r28ya{Aw!XXCN(y%{}^KR9ax?U~XV7V{~IAmF4QmF<(bwe0RLrXhr#dC87_x9acqO_!nEn%Ua`G%eme66wcDf zDlb`bvu7)OoxHBmcWcX$`W~rsD?n`OECaj0mHD{Pq>}KRz<3tmJM`C1bLR{89@(Q( zwMI%%u0J{lwX&lFr}K;vEGjYBabx3}J~oQanw@6kytM8<3VDc8{$L+CVjx7o?nN_n z#<~$+NviAh{7IBYbjDVJENGv7BZiwf;RybFK?J3Ghpg+tN(f7z5TD--f&eb_?oYt4 zztK~@zJk4}VwF|u!}P0VyeGPeJ9l>KwaOt35*Rf!PlFFvQj@z3;{FN1K@fyBn7PJd zUi+1gn~_G|X!w}fl`$nlD&J^bO90wN+$ zg*58Gw_V~!RmyfU zAml0k*;+(u;oP>ZX;36d>y3=BK)xz)+TJuWqkopdX-mA?e@$y&LWN+^b|L+HH3j8e z+O*-yAkz4!QbXg)ygmMFcHUah3nrnI*I3k6s=;w_=u!?SpS}>AI`#zRn)SMcHP6rC z3kYcm#!`{%9nIePoa{awoPfn(l4#KX%GJbZ(_M(Gr5DF_$+%h z`1kipDcaMiJzA-5(tK@Jus6*8j~PhrFiM6j&(kyUa^x8+q=JtI&Odr2ugUet4oGML{-)sxLtupTy8Z#!%hKZ# zhICgJ8|qN@3S7+t5)I6jS0T22k5jecl50Z#lKo3#UYx~DyhnOQvcVGu*M=>{f?6W+ zea3DCNv|;WjhzK@X9R;Dw_n>Hurtv}M7Nl?_E+sb@3D+xbu*_LWrWv$mUZqN;-*RR zVhl25Z4luP+Ky_=@%t|9-Xt9jCPRQn-I`pOvpNFq_1CzSHB~QTT6(qq>P2annMpQ@ zH*^j(3*l#DZV|BcrV5{9Yr(M*9Z4&sdpUskh`+=}B)8`C=(ma#dhBQt-yC;s&NVLx z6anTLrfwRFM^?pH z9vY}74&rV+s1<`5vwm8HI#~%~!x2KTG)Xr!J-f7Z(uBPUavq_z)qBv`itjp$=q>xV2gE^+zTAAHUaK`4*pXkOi!P5k6)PDvQ?mSDqRM$Ti zW2uStl6iZt>&DKi)^4fGSV$Wg&?$=H0BT}8`vnkZ==WCNi!6ILRheFf{s6WBbujCJ z3W3YA{x#Eq&7y~skwnzqexUz4fn<4!+`PNyVoeS9XK$8ll`9&(rN)ppq1~yzEqDUL zvhBwRxfK%KD1W9z4NK~e)qGT+c z>qAw<%~KlofrSqU)dT`ndFouVx*`^`9z=8POyZQ$FHD^diW=(J%BQmjs*6dGwAdxXtQ zgm05|jl&Hz&vw$Yj}2Ubww(^sS0dgPDvm={Hj4e^Zf|R48e188OUaD&v~__Bwqq8Z zqH4oL1CN2#$7`#Rkk#LRWa9!urC6=GO%Zr}e5#fje}v{*taeyM5vNeVI1?~1w|x7F zcSR?3fM7e%^wkkGBnAL?m@iG9&yWvOEurlWa8%vriSJjvC>j1xX zxZk0s2VMndhEn(8w|1U}$%xIlS^;!XJ#e(uEpp1^dHCZ|7dK1;QhKSsbq`Xm$)@n6 zRJkgeOE`+OQTcBUCEOcp1QD=4xgYz67sL~C2yvF+(5{B-aw*iI!t51XZw7gY6wEw6 zn$Ofu+fLqSiy4%i&^7!j&JrQ}vfF7=N7s8W8y;)CqmZh_((@I@MM%~TAWc%Z2R;-I z9-JXye`xr=yuyQjFj6Qm6g9E!VJ z@!}4r#Vxp7ad-C?cS>-F;O;K@a_+tF_a}eyBze}}D{HPj*BoQw_=OVBi=I>M z<5jvQ;$nU9|Naot!J)A2-3#l2#fnH;{d`Gl{>|+&YHIz+j0~FeSca8Ok_dw;eS8@f z3`J5DjL6>JRg!xCbnW_gN@eQ^Q7n9qg^PWH1P50FcQU|FmUq7s%NwYinbg!m>-3p| zP|nVd9EYBS1X>6(nZu>D?weHsS9}St??mqwaGXjz8BU}M#(uP+p5<>5F8@0S&W{6b zuvRg!!)O4YJSUmt_{0g!Z~48P3$0uC{ny+^5l;E^A=(KP?0Ih@Az}SO;rW8}s?Ki* zunB^*^l+(q&^zw@0>2!{JcCt3#$<+RNCFicX9#-+GY5iu>90zGn$KYLTCfr#)RhWhpSGSfc|R{)hi zX<I32v|Vn<%CSQ2XUs#x?zWkfoI*!j^advL7eb^Hb@A_;E# zFd0Jc!C!?n*&!O?X5G*1ICzvlxMguAxx(IUd2StH!GzW5T(%K@c5|l8oc%k0$%C7) z0jxB+l{ z|K?RfyZ`>oj9^PVwHq;A-Ma|4#2JhtE{x)|yUVXnxWc~`qBfIbq>8ojTy!TqyG>M6 z3^uUceaC^duKZqf<;W1U_?2|lA0QVsU!u~>oqp@c)psGLAb(h}?x9%-fN%~-1dSgb zycX6&yG=DiH>(>NlJuU(zN|+ZHLg@V$FFpFO`B>5D08tlbK#Lx6|7Kxa4Fm8w6)Xz zZt$le*=d_V7s_oEa=#xWqf9P3PbL`~EvOk}E7ih#i^I@kPOU&H5|1>Cx9&HOg284l zZ|1McLstpUdkRtUC?|&dRhT{_UsakuBa-YFku%S4WkMtnhsAhJ{$g+6z3YEh_1eHW zRUM)3QlY#vIXU@hAf}RXxHKj2PJOflXpUZ}#_;?$*H5XFc}x4dzwLATTVX)ab+&v% z3JZ4vvH=4+?dsi`Ru@VAEuGrq7{dSyDnD41bZ@1hG&2}Wd9r@b&|P!9Gz0qz>wH=1 zfigzO`}udy(67zUaF%@A3 z$-eM#vp4=lyRnxj=eunvDgJYT*YLaSwAxBWYCnVxI{ePhR0CbwVk2I6X+`s8msXRt z$a7!C>Yx^E((~kVL6V8O<{8!{NUcDQ%D6-f^uS1ZL*S-5B=?DH$%5ccm_0MapK4(d zm>`r=QKJke0V1+>~DSHKQr29gAJ56KdVYnt~tNMx_)x;HTHESB``O~`4HJ( zC|msc5g7F}4_VK1Z^Q270s79gu^7 z4|C_?zF2Xz0}>Jv2<)XmDeJMAU74kuA6mb$yKCvi{)%VX;hq(;V9OE5cEwor!HCu= zS}S}g@~Wf(JUZSefr^{gelYc%nWcs7vOwibv^Zv#Q%S9f|G_!Q_<2EW=L5%lqTW^#5%J2NX+-8O*OFQT z5G&5x77B_K+VrSgR2*tTQf_XiXnhIIn!A4+ko1mo3f!J9Dco{6^b8)69q?IU@q5-A zKY5BdP>uzq6fW>pv8QO=m{sR;)wd;?Pd8NAbrQ?{0l%dEHPoFQ9f6aIt47T)a9H_z zb@nS-Y`qgwBi&D}H=+=aGnQcsz{B!N3;<*Ht&1> zDmzXpOz2R*m6ee8rjS=%#ztb$jrp1h-80of1T}%H6B3fy#9csw4oCU_*FZMYmBXS- zzXwF23BsFup5v@mI{gbZ{o=ZYoFOx?|EYV`bnt?xng! zX}x6KJ1&2b%u1KYZ=7PSARqbLS=#Dpj`D|y2x{rY%D|6d=6p3mOV$)hy(i2mR70^` zJoig^Q$KOdIV$1iDAxXu36iD^U0)z(mggG!CRVAD-u`Mvo40|zv5xw(SQZ+xXdIeXs6C<{h1_vi#b{+~kZ5ou&bP7pDn z({c$f{m)JwRkg~|ckBk~Qpdfaf_uY(k3GKWCkI+%f$YkER(b2SE zv)|x@e={OQADg91|N8T_Paab<0rs{0(FXAEaz}6pn_P+&+T@~IpQ7YOmhmfrp&zaI z1JbM4uAMo&+Q@fL7c~}i2jF&sym_ScG#SqBPEYqTZ(Z)~5BUrxjz#5B)|OI+t8Kr3 zv%wM8uvM<)TGeUZCys1pr8QSlCS)S3D=^bcPbyR1lbA2HOj}qRf#ZsgDbnf7cGh#V z%R4X+5jRc!$SiDJ=_)Fy$DU|S;=f)tk&g7XiC7r2ZW&GX8s}qOb>z4X`vIYgst~js zH7E>M)Notax5)G=GJYhWlhEyRdJKzL;+siyP0XD|#bKXddcx~=`fn=O*_m59P4^L9 z2wa%$Ve*1IMUtez zQ+YM!g{9n!_MY=MovDp_qf-=SDkOG{i#6QPXTIuFF)FR$k>uX8#F6nMpBN!G`hO4Y zZ6mNrbf87jCfu<7?C=p#SR~;OABJ0Kz8=}Yn2!8sbHQ4A5^J6vx?*0rOm2z?9?t{~ z=b?#HMI<#=CzvfYG*7=NO^(Z9{}UKOGTEX@pc3vs0j}y}zvSAh64}`pDMdGO%h1=c ztC2Mbv2kb~&JyBy@=Z)`-4~Ug?b}&($%7@}OG2%mRp^!WO%{ba{0ZM7U0d~B;w7J0 z8-%Jh!4;_b=*$`I2~sZ#?5rJYv(iZyMZAbUz5nSVhSo~b0&ocbW^!=tHM1`ygW`lr z2C5p*Ti#SBzXyfMOFpe_PvtYPk^_Tow0ei))p4~A5$Bajk94*we#f9uk=sG#)s6AS zRdfn23JYds^xC=C`H{OXWwP78!O)0(;^DJ97b(V zJ*rz-<;0}!Kt=P+C=|D627TWG`|?lC2;?Lwhpb*D(x6GV;Bs-|^)5$x8bs6ZD|$om z--0f>ZQgO@jF?VBwyrnr3Q0Ph-*HAYF{E`FWSs@3Z3^OezRPb$b)Nx8J-VBr*9Djh z%l>_PflIiAxTKakC$r|*gW4d&>H2BbHV3iaD_-(U@jaBCoIw~!)=7FlR5+mXarf@w z`-9ye?&D}-HV~O_kLmfxK;5%#sq}5xG)^n}kI5C5vnwW^LWQPFf9my@`5_irWiBc- zm^H%+ZYk|{0ptN4@Xc0{F=$-d!IpF?*>&pB;|*CVu!Y?bg1+HfW~fk>wGX9+o42sA zqUlZ21biq}lXHOyAK&GVF-?8mzO(1u&DahQ@+Jz zR<tQ4JMZTYNOkQWiDvusygP}q8ea#na-cCTqpK3?^7mvsuI(LyzEbPpi4@S3w9#+aYAD*7N z>3flJRJ@8KJ{WBBE|klAh7n1bc)Z{0!kV-benp8S73RUTlc-UIHGy$dAesLFz1JfhJ`#Yn*$T4Aw&@SLWo$PG9{ zk#j<&;8vVz1;uPaWHDnFe#PJ@V)1MoQDE(X68@6B%ejNl!E~g0urA-$a1)zk2E})5 z;j2;7Pk78T{3cy>nT>5*HZn;^i@R4I(?px7skL7$9G^6h*%Mge{6Fw7Z0BoD z{zS*MA4`qvC2rj3%{gauz4My< zrs5;ZWWm7^BYs;ZReR2~_ZsyYn`7_Bh1s`Rf8Mj#tolkskU%9t5NT38#HDGApDC!4 z6Hwk%5x%H26@ZWX{p;`d``qKukq#qXZu1@w`dtoT=CqOdBv~pU<@Iri%six1EBIrK zFbl4)oZ;Vm`o$ViMziD!vSvS%C{xYA1FurxheO`1SUk1`;q(^VQLvbl`ZO-L#y*sz zp%HkF;|&SiJNv?8##Lc3v?!ycxu|f#U+&~tP207AK+%SL2fFH&EF_-)w&%OdW_FG9 zhIk-v#I={uvwY$;`R`|-v`lW8#Yv(=Y8i*6!pZuhO(>K~%i?jhJvRlMJ-5Zm6vW}_<1OOXRAdD&YeJ=3pGdii5?|*_JdU>FJS$D>T9lG-wWfs>7T4Ts z60g<|a|yQk*4|G5j3LylP|7=6IDL_9U-%=rmF2u?OS6zn@VOK#YUSWq(*xTkRNlp) z&dNMX%buE}iU5Op?Az%;>NJ5TQ3G(Z_-cJ`d|2grIW5VLWr;TEnMFm}W6H&hm#mmK zUt<8oyXKKiO)0E&lG;bN{FvAcB!f3)5PyAy3lzV^{V80`a-~ktGY3<6#ZufBa*1&F(r@W(!9p-aRxiQ8naP(O5MORX`QNZSwRu%TF9fx; zUi)(XS$EF1w?GOQE+m>Rbaq(d<13pyNj{p($1}vWL&I|z86RtFho0?gp=uDz8VLMNpD{5ABrS;ecwPGuN<do;EgS`*UlIDCUPZ6q$Qb-pXk+^XC$t$k-Mj&Yr}_Db%5tp4)S#sM`NfsqdR>k<_TBeh!g%Tch=kOFF-Oa3oWd z+g8y9D9BH+J$WG7_HThA&>^V2wW|WKDwR${e?q_g2We^kcsLRD-9GnYEM2tAM=NNX zikWV6wsgri0kf*gU-p%T$%3m4nV*k5g7|<{^*#rfnx{Gg(1&SH+;l;(HLitb&{7&j zD|;&;G36#+dX8KxR5!aD^BoXlN3#H3nS$Z%t7vSRDd=n?_8rDY5Qr*pwnss-#r$Ez%ibZoQX=^FE~A&b#0_o<`iY)aAJ67OPu?fSP~AXC#ZFa!SA+PKU>CH}8=c@5M2e=puNhs_pV~By z_kh(+Zzun=m|k*KD{YUM2bNsYyZI)C9p4d%LKa{4Fot^6N&r?y@zDkRJheV$vTo0n z(PJW~Kk)*&y6Ia!?Q=f?l49z>eQiFm+ZU;F;kAwy=WI_RHMZue6(UuIFA5duc8y3b z-?!dlqC51i8h>za>Zv#nnBZCe#IJbTKT2Jx!&{57^s9N_g8zOnm4wHUXk6{7=DCH# zNBX+2`77Jw^?u}2Bmrv|p4`G!`THW9kuljyT*I~2N!PByUiZc!#Oi zSe|h-1Y~K(s8;RVL|X|m)yFOB3`R|;Np-EEyxV4^X(Bh-90K2Ww@Br-I_+)1nTQ-_Vwu6sFhbHKSsB= z8zB4WxT6P#b<;|vlY0ui-q0Imck}FFofuC)Vkp=f@>5+~Nr2bv7Q1mr1A+}RJidx= zojutWE2O+rmQ~cNy~N8^9s0U3;)JcaQGFeke6HXcS$|1l8~$vb`t0b;z?_`FgK)Ry;;Qsrq5lTMz0MJ3+ zu^1+C$;xZH`Xjk=sm8pYxg+>@^7Ftk>un$fvo)OvRZiw=yvo?}n`54@v{Hh(Q_#sr z=*OP$MC{Kz2`Ik`z&mO#Vdkl{pMm9+&mgH&j*;0)h)Z}Q0&yoZ2QKq z`Hw!IgFV&)%v{4n^5m2n?S{2myaa+jYJm!;(PUYB=hi4Y&(x@P<-f{&6Q3LdN$!pQ zJHg6OeILp6Q{d7LzqtY#rm$Gy?NIX3$y17moh@TDqW8(`Zui}5StjD$ffG;~`T21) zrry;4LIn3$lzfo&-HqxhQYD0yPj~CPGrO9{$o_iOKhVUJO^)jCH2icok2hB8gLOfV zAI$LYfNpc>$tp6|7uo-;$4D+og@F}OruVQ~k9=|t%#e8OkJy~O83rqOXi}6|NAx$h zWnT!hzAfgFs9ACp`}1qfcsuPJ#*la2hV)b}bGm-Fsw+o-A1qE!t7v^0>6&0!D*FN} zZG}B0cSeSCeIKK?<1YTP@F9nDpLe@*A?Vg#7n-~NKKZ&zVVCs)wcDSDDrCDl;D^@K zck5nZ(-RP}h^ZLndv4p8qab3`pp{>akxdH%dJ_%8i)?2UL%|o8Uy6HwxjvSXF(0Ho z&rRNe9$T-apVc3whX~|Uip8UY|0@mzQm2fHw>J3W0OtP`b3jW3X!WM>ksm(y({8m10}%A#)q*Mb@lGxZ*vCy{?!#UW&8J z26xe!?U%@q6m717v>(94V}rFwH5c!Csi`13ud{^OSrPUC&(R%9*|hTpfIksf8+xDZ zyTjwq@p-WUPw0AcyLjfsB!PZM`kHtL9tP3=cf52GtAToZ;G39g1GsnRW zM!?`{;$J7?2ZOC+pV8ArI++;66=o*{w8h1-^5@!X0_+)-Vr&N?cJB_zI}+V6HAt3Q z@THTh=#=N*+(!*fHa^a$sqI|#P#Qf(tsAW7ECP<|OBFvE_R~9EPrWn5ECs7CFN&PZ zXCw>6)Rw8cMX+msChRuItS?ur3e0MyhGuHWO2D}bhq$Xy`}Y@un-*!bJg!^};X2-Y={^Hrqu@A=2g|(}C>skv z+{;@vK_NHX)j50Woyb}Ia{qtt9%-)GH4~gi2@_6lG^>E>pBpVHLpJNbWzCF*1czFS zRpwX-^M?n%L^_r38x{#9>~6`>#;+BQ#&^O&hxlJPJ0?Ecu;%nUVkYQZU7J7GP8AQu znz1*p10Vr76W8&oY4Qp6S7`LEL&{N0A!EbiGY&HmTrPLmE;h9Cz3Fvk>d*1JK0ZXd zy0QlyrEJSkc`vhw-A`8#tp?c?>}#y6=LeTjn}z^>RW?x|3Agz#|Ch&1K^*b%HNeH0 z?|{9%J=>)5=ghoR{9|dZqLQ8wPXU7#3fj?J#3m-Ws#}7 zH8A#(v=VIP1zgYDg;U4J3Vdt));Gw=TvXZlaRSr%`Z3_;K)0%4XSFeFC2U;cN=^rk z^W{~m|GqV=Tvn}-CJlE*^qqsUME|I2XP zNua~{VxZmia4oThti82@MKWJ?-6#uD{xW{H*mjJD(I)V)G|7ERC%;$yJF|!wbBa0L zt$aARKhg`&woj|L(7*W)zLV!fQD?3?`&*A5=vO)e?CBK1XR}L$KGd*4z+i7k)Q434 zZg(|_M#P;BbfaIDx!4I&^H_r!wxGWpX>9IgC8~148zbi62mhGZpRacYbEOg?iyqqhWRay!n6tS%D?4f*{#Tp z(%kWTRf>CUi!E)oAD+%0<3tRk9^IKjSvjd7KHREdf?1N8Jiz(*QcEA`K@OM6<{O*l zGuc;lXk?@lxn6t9%8A~_`98XqX`O0$Doy*GL6K&=uE=6Tke?&I;=+Fu2aD>-KS&c@z2;e;9 z-#j`)qXx1&EQenG3MQc*M^29$e><0ADV*%63BSX@GrnE>h0rNF(X1zTnzXqb3|oN< zRzV242I*9rXH}5;#_XbEhq7U4olw`UJoqJqfNbt!4IsyRs2H61=D01lND9L#pN)8- z!;Wfa`G%p;Ts&CR1o~V#bbQ?JQt@Yw=Ut~yGXrcn?3@y1>W#*)LK?ARx+ z;WuIlZ?Hp85vZh=&0^nvRMdQBI$i608aLIyJaSlSU>b~pKivtvW)Uk(dQXiq_f={m zz|m|M*$uzZtIP%3XXv|87&jYz==~E*qp^4vaf<#s^f!n+nlrVE(t%1E_1}eL3p-_G zX7`SfQI?Nkks359EV#@NlKOpZ1xss87p6C4=CHgddNQhwGd0$$Pn!BbId-hpePc<( zK7Xbz6<<~v0*!3OramX?{0o7p0u|glaF6NOb$VTVqir)+LDi4b7tO5= zJ891iXQd{O|4R2Te!8n9h2ZKlA)h%fISMnZi9`MH<947h;YO zrF?KFaeuAI>O#uOk2iQBRq39Tgq*E|+i%}pObKn|{jD=mWdK(T zj%=P>F{O0l&d(^xcned;0jMez!GVP!pzxw@Ut6ai?^Xuymg>Lc9(Tk8I$fiEPEa~| z4q|2@en)JxlRmYFnGz0I(@sfIf|?00-$zWHw%8WZ8H)8ZEy zmK)gsJTl1oDV#(Mx}UF}3|-IZ6sgQHg438##1V*e_V)uo6f4G` z&u_^yc4c3;-z{FAq9Y&e?tKYlvpY-+tu1uM7CPtdjX%l%3Xc@&sKF2zSCiYRQjFob zD>)^N9$*}t<%yVBWHDLy=A?rTw|MOGOSMJ)l42rZtD7&lO&;atzy@C(yM60`^E*80 zaSN2tg$}f;eH#75|Fl9ceGk5z6&!29lqLR7Pg9MBNhN$Ps>1z&KOXfC{z;|f6)2GO z^TS8(fLGs9WkCGD&pL63VXmV7{{G2CQ?yf0^;9I5Q&UrfT-mg;@&9KAa8qy&MnjFW zgipPcGQ!s!m=Vztu~p2GfQpN+e$15fVbCX6_w{tm#%oWWvd_={XgfOX@{CML?kLg! ztVrwx;f5=Q~E+RAkZl~{=@sj`O)_% zDK>;$*%wFbwoS(BMo<_q+JBIg6+75b2p%4A74*#_l@*J;P!eL^TJ$52z)KLyuz2sW z*C=V`FVT*$%G5tlkD~=mb4yc@p0*Qk3`i_H*CdJadr5z-mQ~yi`6v5No>u{6%IarkZvWt z-{UnZ6=I1Hd{q-mGD*NWQ7t9+UA zlCT)0b0Cv;sF+&6#dzR|nRk^ZUm}@0X4f~M862%Z&fsRJ>Ka$1lNp$3J-nNgHsz9B z@7(XMbdnV`%zo}Fb~K5m6MvGvplxcF7hWej@!ans2yEf|I1!@Sq=eKokuiKIRo=P_=r#>+pw0&q zf}@ zliV$Iur;4#nv|#T(w9X$uxp4oDK5WRA`o_x_4E8+6l=~5{9rP!1|O+ydaKKwNhwt< zhB|z93GPDDKm%RqqW^ZFkBROqs|3U@&B;R*7R!t0&M4P%|dDUhA#Kf=K-J&|SL9*H~^ zp&`_d;RF|5>9bD&DeeMaKfmEruKWdV-0NEkz|TNd|9WpdtIQMsvpq7NxIej!

6h z0rVKTo4WW##6R;D1%-S&Q#)meBqXD7d}fV|Zj>)cQosYNtE*DN2!K&?b02npV6hV0 z45)E(qJDlsHfLvN4Ct!{glHRf`o`23>-Ct5=ct5!xH^6DQL)SoDsA*^d2K|k%a@Sg zDkp!vt>)i+1Mmb8e=c!--4_&D(Z{=e_M0(zz3;e?K0OZi0}-J3`sVCan>s0Pz0Pv) z;QYZUA;%-M=9a$LhSB_tcK2-ctAgWhzMjGPavq5dySx>(B^x+lG^pq(pO(y}aZ5Mr zj5oG2n(vX3@kmK~24kiKeOhxdFa`>o6&QIix&WZ>D#KwBe7SNZ^_KSNR9y7r8UZH^ zL%)B29(B2}Vy9Cj$HKyLKV6YMnybVE1prE4{pHjD-wNog@{nE5#BkZ{H(-z7givr- zTJh)29!l9b$ElE5k^!?%DF(0Q(IPDVp6`c8QK^9w46h60Bg58=d%#tn*;`{!8p|6r zjQ`5YXDn0m9CD$Qf7bmaZOLy^{qXrtg-0eu3FY{_m^fa*!nB&ZWcGrGM268WDfJqZ z$$(-NT*<}{)9&Qtw(A!g)!%|SM?urK_+cHOfulm9J`4VZ@D|koD_)dM`}n3UplK(& zKTa;3Lp7B7Vt$uoeww|K?X1mcckCS3^oc}KZo+b|s;I%KKjL{L%gtbYR$mxyoTQ090{#awt}4XRurT8WZ|PwnUdz zq6gx+mX$H`>%@AYwm}0l)O@ugvL*Hu8dtdH3IS)7(pTbLIWg32D{4D&#IA6#$JO~u zKwtPyZWPH=SA*=kc8KR$u&QU$N)10b70S`nvv|3P*nS+L=fNhvL6=JJ8avTqHG${w zba`vku`f$pxrWPcK65EUDygU)k>z}K8F`}k4?gDE&84|wBF%I)hY$V7W|Gn#!|%QY zBE+gqA-l658G=x@c2D_*5hjqTZSbimPrdQgTf1t7f|GdS!{S+|RenGQebdg%_&d9$ zR*1b;M~lC8Ye}#707fOmP?N}Dfq=UqQ#qzi7EcwUNTZFqMAwx*y7PzNx}GG#K~Max zP@1sII~Blb&4VO*rEbb6#i;?;>bQC5M4?+=sg5=kCr@Pco=*|cvLhRd2HJYH#3cM{ z`LZL7;5%!OaTN}_Vn7Hg!&Qxmro?FNrZl~pwHBd6wYBNut7gUjhMvpyn1Vfj<{T%~ z1ng?kX!=*0pcVv%1WG)*L5gY<nrea zlPsV^g##7ld13S5fNlCEEs@Ia>1!!S=a3IDbY8Xd*B4R9LQ4fNbl{hnhJ^dd^cb;R z7UNOt3y0zlIT8Hrppzjsw!mk5I!D0H=lj{swN=iPC?q1M*AjzMwj zpgpqjGdDu**|YUpHP62l6{yYxU4XxFuNHUI-lJsn;=iP4G_Py-_!HBMR;5L9`y78C zh{_r&KtprSY?t2;Wa&_o$Klln`Y1m)_G+$d5@|Ws`7cvG7aGWsMG87y%gKk##N*^` z^;C^lEW4(1#s%mVlDG0ll@AKk?k(8Mzr>yk1;o|wDLXw4OOM_T7SFdhpWuc<)(E-p zjJWp6nc@TlfOFk7c18xBNewz9zp(dYa%fl_pgaUmKSVRM>h0HM)_Wsqx{0+x2&1Nu$>GcIIph$txIyXxb$saVN0jQ zKY>NnRF@x#+=us1M7(He1|b%k$KfJtd=bA=wNKaDCN}NcQ3=4?S87Mvd{%TUm@8pM zr3&Al#+2MoM26alY20tQ-#Qpud-KRx=jEP2L73fthtmpmM(qo z)v!t*-2o-CKdD@12pu=22cg}7s*jky+2~5}m`-B?(VL4xl3QbrBP$NG*WE3cL(eqc zM-omOG!AOkcD5BDJa%ApfX8daS66s_Ybb4SjMOdZLa%t*=g~Y z+JsGI;U<^JLQgKTMVd&Z08i+=@f9L(UZtVVZYK)maX3U7(7hB2&2SOGE*Tj*pV~?l zuK1wiGG{q*FPnonY#A=;oo;8I24h)eE(o}|1LE@H0S{o zc_rdhooA+UoY@FQ|G&^45OF3x#~!O$tuE*t%VWjvyfY!CicGTf9_Lky3+*C})s5bH zXG99ZdJucSXXLs7&#C~lXX=t!P8BWa&E=pGQlW}R4w)}30WVK?bsxvNWH%2j!iAb* z{YN#qbC+dsIMN;5Sn8j}I#z%&I)g_4G0Q{S`}qkhSb6EO7nFkDDB=dp zZ4=b8>#w;~(M94L3hKchNSqV(Vg)fY+e}(CV*F8_=RUnRVCUEe&+kk+x%}lUHZZFi zlK;xy9PdQYc1d+f5v{AhFg6?=I-2Z!;>Rctxz>=6+;8l{u zd`u@0rcA1wPGq!_(@yo?*K;yy{OGSmY54dP&5WZc&hy0(=aFd(oKY;N8j?A{Zp0tYa6CI;6I5IEqF;eJ zB;|#yzb=>HPVsHA0;lnDG6CeIo}M;c`6lqLt5%F;> zoGsk=PbuK0!b!MC;^Ma`Wog~I*KYq6xu=L72E%jX7gNZZ-)LsPp5(6=hKu~K%q>0# zghESqy+A8|Z>)+@c_Se=mUN*S4~`ERjhiQPY?;2~pL>yZa3POhP`IiveTS28%C(u% z-%j3^@2Bzz(HG`hxT)3j^M%)!m|K#ss-gXukFpdE{mQ%hPqS|$qn$aU9Yv6~MqKH4 zOBl%TyB39X()yvGy*18d7Udcny=@+v=A_Y>FcqbshjdMkT11}gnqG&A5S0}kNbYaE8mr7 zX)aa@g(Na=_D_VClFW9}w#xJ6YB`CUpntA~HLbMxA@9{m4buhfChw7uOm_y+DK%3& z3f)p+1iM)NvWx^Jj_oRTneI5fY(KL1wJ^rG08{Fn7fmsdtt_vWUQ4cR>JnL%>mTVZ zx-ViyD4t?j^xPjYDkryid~~|E2u}tf1(vItiC4E^hU^bOlbXKvndP{?X$rM5Cd`Zx zu6i|}$Eby|Z7{)bB0HbOs64w=_<}Ju(#+a;`9gye$*MF*;o$bvMnJr+(#^g$kRzBB zJvZ@CB(xboUv!MkOfag{yBQd_Y7j0TV!F-x^(U(=ZoK@b-Ptd?yZ}%>#`16)^v`7n zy;wPYLUjK>ahwc6dbidM#I(4?wNDic?yusN~qJ@(uwv&ZB}umA4@&I3bjg|!*) zaNi&l5CP#aiAjQ^D92O`mQQ>_nyv2t*IJ(G`cW{(O&A~awU11YUOzMOy?-otj7s<~ zpi_;z%xlkVH;(|(qc;6m#caWwooS~Iev<-#!l?9*)>(E(7qb^`sa6)RoqUPZ0Uj~YTvf}&7uan8K(T7Wd;;75#2FQWavP2PHd}2 zsL0Yn0P!H*F6qaoz#q|P+WozSEX2nmHod3!!@XWfkSnlaJw0S@kQSm9#?JU zQ8xX9HXviPt*(9sYjH76(>0?=!fY$jF>enf!-)E!NX|@>OJsli6iJ;6le*-=Z6szt zRZe2*0Pa6hST~naCRMDM8OJ6huNg(5+|Ff*lT54``WcEY0(8d-P%c!O7b7y3QnB0` z32!3EUozYEIvG(-~4T=nW1#Lkfsp3tv8)Xrv`?UUD_E`(%3(%BRgzq zAnR^QK3zOne3Y1ReXtTv-mi*HnH-cyf}c2+Ow>HmDCU>#?L}8@$=M z-iWvcw3F-=FtOH$w+J)qtkrU0kTnjLk1IHPeZduA$j!(+moZfy3hcc;Tnvu80ze(E zQR0QlWMH`BTOpMREX;-Rb81$bx1JoG$e5_)0nY6I->EJ4f;x}<) z)*lnrUk}wANS6a8{8+e+q3-%YxuJV5$FgM4A$Pqb9LD5JhUwv|C&V#EEXp9a{TI#b?3$%^;_!GQCE_ zFl1*Hh9URA`I(&@5Fs(PF@G8!VP80w-2LqXGC~)e(=D74!8>AWc6DR!NuQt-)W061 zysntr(FTa}yJanCh>79II+Skj@E6UHd%itWyfXXSZxUZ#lf+;yLmEDJ^f%R9umo1D zE<5IEYCo+5jw4uDmZy1yzWsXfI-6`JB{{02fHXr&(S(V4F})Ms#uA+#;I(KpQAAy6 z#xLLXJGmNlR!`=O(^zr$TWg3^w$V!lui3ktD|TkoG=$^uwHYbD|Kv-lbL^T# zqj5MM8_YaBh9uz&+j6Bb1(#&`kg5WGB<&7|Wi&*na@ zd8RObK-A(Y9#QC|32t|aa>9ZV`h&f2xJf{-9Jd|Z@o|AsN>2SYBw zjZ&Fy+4_A?0L$E>`u`+&yK?|S84*%Z46h>WR0m0({iZuU=ZLe&$q7fq%h0^(3L?`M zsqvpwsDC6tTwFa0S%zk74h#>yKyZC4tu8ICt#m=pD>9}X2yP5jPaFUc_m`~HOrYwW zcS%81tk58!W;k1-T;WZZ_5)Mg68gc87mGL&0xSuBAmlRq_4y4V&+0hCb0 zRqf4|Yne}GQ*<_jL6t+cx$#Iy!j+0?tf2+sZV2OPW8BhsgY~qoe|TJWaE@#g17*s> ztM-GK4Cr}xJR@1dztXQLDF?N*Ggk9H3F!{8>BBbK3_mv2FJnOf z*~JQJ+=PD+8S!u@Yjgd}1f?9YPQ+jzOk^gTA|pS>0K}VI{R8GgUe!$Xg_VR2g;m*w zF-ouQfih=ReNWpN{WmX1F6I||M0<~wEAagDfG?JTS)I6@x=*uF;%Isr&xaG1@4OSn z>X_?K9jnwXI%}JotrqJn8oo{SKnD=`WxcVj?da{v^1)JL`OZW04JTalwzT2)>mT`ftVe-AI9v(^@=w1}97^FpgrZ0D;A%?2U= zlOPwV&~1#sq!8A|=m+#6G*U(i8pb=~vU%U&i*dp?Iil6wAWFnpql(Pss-`P3Cg|(( zPhPyYk@Kj78{2v&1_q!ERdWj?maZ8E2xUg5qU?+P#g5WQe~5N3{+$nQuZ?E1lP z?zF%k;nF)@-MJYg-iBpDYnhWO>Db6x!&ojaLl0OAkCJsR>30@!l}kUH47Z~disT+8 zfcH++smGLb14n+kMm2m&`=1c1rrnRI|3k!5qDv2S)wF2r;lp`Xd#*4fwI)uVL;N}W zRhjFla70fz$ZzR8uY;#pKRu2OjZXr@`dQ)Len0qZ=jx8mt$oExhSfh|)qMs~uC_zif4mbbhO^=$`|!k6XYV}rf3(wXPcH8= z@$Co*nJwqP5>a>5Y5$GTW#c{Z*E-)gnf7}HMgPfidGaE(dsh2Gd4Ek!#&2)(bW3q8 z;{RhP=Zt{#zadj2FmL6NGJlIyuO)Glqj%Gx?6iW*B&T1bQx z*%h@3S@txot+i6uN6X2v{}0|kA-{P%{XvDPj*7JWy|;B78_x$>zH2_5r%m4>1b*jp zhCVw;%gVKBE!~IaP3S#p2GRnk--<3K!cwRFudbp}$rj?SCSZI_!>r{v`yrHFGZ*mU z2fY*Ib7m3EnhfQQPG~Oa9Hysq7xk(|+t##hJ&+~4uE*E;kPB4IR+v`0FCA3XX_D!IXkm&QWxf(c+9@hb6B%}EDgIX!sP70 zo=N>#fBhqRbtDFpObA{LliGFTVYCt3F9fgjO|Or4_c7|jSl(?E*CLHLiL#$FY6^jJ zCwxyXVa8d1ULTuD-A)TJi}ZI*=*Rk-LFi*6Ek5QBat#yO_2OAvD3e+@X5l$MWMPkK zS-Tp`FTRJMyL4(Zj#wea_s^fmd4B`SS9|F{_ZTu;IZKB%W!r-|Y?c3Bj7#(F$Er0b zWg(30F0SW&IPc#0;`jbN0pY({3QZl(D<2=CMAbD#2N4nzUx%YZgOHjk6)XP)Rx$oFqJPM~El=6A`anWJG*?gGB2F8`+0*yqZ<;BL*Y{r#5EtKxCi-&n z#hmfRAN|sk$)AV5W@fKi&*n{=DGc5ardYwf)eAfKZ()9*33CI1GsCO^9 zabp)duElQ$A6&%Fm-l%Uq@Y3n?qrK!_eG?kw{)yu5~q$umv|zxw0yqKa-J_s)nNK` zrKmr>G-F^)>nfZH7835oWu66zIFUE0)M^OTTMr|7!a0q44RM+;6s|s$SNC4>Q5&D; zr)&J;o=OYdNPKy0)Vo{6rme@u_3K%`aU)F}Zqi^}{4(?CLo8_qX+Ec+i}d5g<9D9~ z`{sdFnRZ2l2fXI`m7VOl6(8;|%4*NcJNSm$(x_h-GAFpnX@x-3Xg?K%}EDo=Y$np6z4Bg$ww+i{$-{BV=kcg^in5vv6odHVy2~*>GWu-8@X@##7j^ zehphUuY(hdSa|uP<#1i(J6=5T6HnJ?qWxcdkvA>FnpfkBxQ}PXcjj)gM(p0cjJWNC z+4?MsjYFpJI&%{gre9M+Ndi15D2U+T;LkH73H@mnb=*c}`>Fm(x6aYc1zmU)Hj3o5 z94d^G`c?3>cjD>EEx6Pi%it!B>Cvn@PU3i#5XcG}S88_XO{XR;=uj&w_piOcGiN0- zJB9HfBm#~9W1jkHP<*jimBDC3#!|(|oHifro3tiRI!ELRJ0e~mW9MEU^buibOhFu6 ze-I5G)al%Zjw1c`wX$&kx=24)WimU4@;)>I?fVBjey1U6%2MC1-I^B6XCGXehR=-hP}p^;DN)UZEyeQq#n z;CObd8O_*PmlF=MV#Uh;5>_$(6Y^-yJTfnTL|doB9FX)V3T*9cv5|Zt9i1@7y<}LE zw(L1}jDhX?a%lGo8nszwIktb*+-&oc1`!v~YuXV@*pI^odzU1nu!u_=vN)SjIhoke zr6$|oN@4!Asn(kal3;68vvKx#+O+M=*ga3d-VrAk7harM!KC#!3AucTKArl~t63Ko zY_u!6TuQ%^$9?VEBACZC=K>p-U`c^3>!e)agEvDYN$d?x>Q% zU`K;4y?C)~v1NPB)-bwtXn>O`gqf{-A(;;2Dpz92#EEpMU!NJrd_;(et)tq}s%r;2 z^k~ODp;H!gu1>eXlbA7X7%j(cw50WV&lHC3J=F=E@D` zZ9RvpyBEe6hp1R$2;J6Pr+FcFk*S+B^{&F03BzewrxAOlmE}XOGq71l_MbXR-&XxN zuzd+lI<6Hv^z^Lk&Hf-!nx_^pVA>Qqm8fkwwpHE690(9aX{W?loJT?-#7nk}DF_M_ zr4xHsq}j=mX3u8bIP=ng;lT!av>(giqZ?^db13hE-*fib4b}@G5)@-klWyI4vU-&z zt@S&j>D00g4(4E{wdsZQ`^EKDqiNcy4IMf)WWR4PCnq(dLC=ZIS$c%~d&khd?{fBT zoKCZjD=lfP8Z?SNJ^Rq6_9)&8Tjj;pp>*rF!V;%t_jQE5Il{4X&)BhW6FV=S;NXsR z_yp*2bauu?F0M!EPSvUX3E#dD-zXK8s5rsRYR57 zrOZ#K#vbh3bpv|`2i%gT5aGg-uyrM^n*(8LJ*InW>DGQchYzo#L5*R26bU}tJecnN zSFvZqG+Or9By6MWoVj|PS?f7tVn}T&vPn63|+Z%L(%J!{DB< zTB}^~sY8)GWE2VR>IURE+Z$Qkqalm#Ia04dO$ug8F3u$){dVwK7zGA{9?7gVihCjx z{|vE_*r&@&wTcyJ*lQNM7qrK$)sX1+ZIsftGqR#i z)mrtqvvVYGe$DD+#fp{x2Uaou(-F?NnYSokDjDfB*|KoiVG;IuYBF1uJ(o8w;!Ww1 z3>w;p#r?7|=fpcQ7!L9B`3>HLhH>PGFE?)8CVh!Q2}k`PZ0rbmdWxnUy3($7OQycb zOZOVN33%;8lx1kq$cMLqqBFKZYcf-*>sYpKUB&bH-MI8#>gW~dqC*J_kLB>%iM%b; zfN3*&kt2=5GV_GiIW1$Ruclw2IMyF~&W4dg2r6AeoU1b#qIa_3{0B6lez=wH%Y;!) zh+ky?YfJ_$&RMFE*5LxLMfu!IlaCt7jUrD*g5LUBejt@T=CSsvC%qdMATlBVAV~v5afS;ckgYSh@tKfN;ykgaSW^4 zpIR%{kTr>D{nQb}h&&j>f(g)T3I3?2-k^!(76yo&y(5AC?{IXnAu=S8aBVDsK?=H# z9ZAx^{?4rxD^`AStYZ8pBlhJ50$rWCy>vX+L)>_H^pFU(wTw}$)lnb#fdK@8CCI3*JNk-e1hiU8hfdz}FuzA-7Vnreu zGUt>I5OM4=>2-ufhH~}LT4v6i%M06_Xhr6dQOFnl;WcCiENEiTY)T|f> zmM_AWVw7^S!(^i*SB`j7AV)?AM8AthrxOA}hyl^*HygJ`+>b>ZYE=%Qu|X*(d76y4 zi?0SDFqAqy;c649Q%fP>m^2wG8&@ji&&z@}o2fr(6V7M*a^#Yca{1EXo+ACHV`bu4 ztxkh?-QKKPv5Hko`(X}zVKGd?V~wOr6~C&hbBdJ6V}#*jaw4^7{BUHdv|gygBgFA~ zq-mrjF>6wJ(I~4sQ`YXMVu`Alv{G4tT&YC&(I0*4oLI)-UA!rsJ}Cy7ob)NheK3R& zU+voT$WuU!+kr%9pE6rGoLLnXYIxO6SW+zXkJ% zJ-v+SOEyt$(0uX;0bI3hbzDRVTLiff;%1vPwCGq<)L$b-8`l)+l%sI|(rnx}o%1W_ zFlWt1i;q@F5p$W2OY9%@%4Gji&r7MeRzOLXF@o7asyji)y7!6HwAScdHcZ+ zpVuLl=go>0EB{+q#rRLgj@ff5F>E6f#*Ag`%vFp@cZFel?qf0uQDD#!84*Lik_CCT zaS2ae_^^EbKC+gmNtyi4tXzMRiZx1;%keH}WThzJl#u9;!l)PGNROlF!Bh@TpA3eA zRdR7|;WCbH-oU*V0iu%0`1tNEtCk;U->UK4cWF%F^hP41H1VTaLW~_=GMeWkqkKVc z0$%x8L|II1ybrcsh_om@)Nk36ESb_#uvBrOXI;pU+6{GVG-^$}T>3o>x;P@EjTCHJ zmVFzJQ=&$0Vxl6^>J4Z_`g+mzsbgZqwuo%h5gi#t^5V_N{%|gf_U&Tg=*DdFi4dYU zF8<|0LHT;kxVB~lN!yOIY#W4#-MH}($F?tF{hLCx%qWDRF_Qg9o}m$G>Lqn9%gxqh zjp$jeD{qCM)WpOJF^w=XG(<$lQMhzI9;{o+a~~g;EI34t(lx1&Psxf+7pYpK92w0Q zxZ+TO+#W{4Bcd(G8ifc~YlM*2sf9rkU-~M~QVebAOy}VjDN?1VNOKv_MR_h+aG0EB zYg4C`8{21Z;^oupOkewsN~OGU6dLx#!HWb&tBH<*;;l-vd&4P8R?S6BWPDl0iNCUJ zRjA52#%$Wk(i!cTdgc*IlMvF9@46x*4bu5AWBo0jUERg{2U)0->H%X{9wA4OQY4eB ziBP1cVfvTM+;EGhBF?&d>8Y1XNmNt}(jaG&ByQZle4OCmI6`0EW#fTk?BBbUj)T`x zfAApO^%0h9&swf5w>E4bSJ#>-Vj_r>Zl2l5^`l!ja_Asi)=p&2%dB*&o{^}CFw9B^ zQ8F^za&)7j<5}jO3#4@wPqxh7#>*$yn7ZyG)f?2Nda|d?+IX8Mmv^$^QAX-y7e=r# zoD-)Wv8G3H2A_4HUIABjZQH_|*i`iG?#$M0mo3u>{x=~RWzzc(HM-Aa;r#h5n=z0y z!ZK2;4V3THgQBTy#eS&RwFT(|9&$RuhDv2}@>V>Cl?!L5aMQX}ui2DZ#nW2m`_E9e zA$5u*N0+Pwv**oc+N3G;9N3Z@$~fM;gvI_DpCRW1Z5lRca1w?9yqEsTt(Xa8 z&;ynoc|-Nm8Htgl!aJh_w=O)VU>R@x?p(tra~>k^KOjZv;<&5dvt`RZ^sZTH+qeqv zA6y_dRcW$$h-XgwmaX$Q@WC!M1u8b6LT*>yUOmRaJHDjOUX^+kg_WXv!`8VQ`Jnn7 z=i#;Uq%2St5A#R1>^e{3s-<~*^f<3Ik`s|9#cI{TJB1Q+^gAv+)Ka=c79L-?LHaU9 zFur}nJ6USd8GYG*`X;gBQtdr+)3{*?%gB1*!;3_C6d`-cc)=X|;Tg}=Nhz4ci4&{l z^EAR4_kvYvT|NV7eAzO86CdnTQ&{A!TrO7vAD!gb3wykihw7 zvR7?Kbx~$&VW9uFVqNsd%Fm2-(VriSr00Ih6*v_NrKJ(nY#Ml+*-FR~byNy*4!Jb6h@ zG5)8`R7}mS3AuNec}rKbW%Fh>u2{;h%P$iaaS$&AX{3JAYef2;U^^_4a4gBq)ZBtM z*S4|#_%rP7ZFqfo6Vo#~xs?N?5h+b68UPL}7kGxML|6>39kzC<^ zZ+?VyCSBuX!PK5wt%ot$D8wa9=(h0~^`!|rWMuwp81$&((7X^qIbiZlf1cIGq{#xKOS?4I*nsS4^aZBf>&4vvtDB#*`3g9$SMI zu5J$K;$sL4jg)4W!pzbUcXwN^Y@Wu^@Iv%&QiQnhm%IpbqNG2ONr ziW$-XA2W!LAUHBk2!G3jrJ03rmwL37rWS;~IKYgZT9(gfPkh)z#&#V~{$cZIn9Z7? zpg>|&dTgCsak8`E{-L=X2`|f-Hl7?lbPu00MX|MzX7~suELwx9wY70TkF|}pv1eVO z*AgA8#>Up#7~i+>Ej{A}3KZbbp+m-=ajEw#B_q|9%a<=xzI^$g=O#`;NJ2ayAi&r& zkR?l&WGGM3fHXBhuhWt^<+t%G3!-i$?aTZ(knU|88yoK3yN6b*{oQBizp`iiKSol| zxTB+^EPP~A9MXHQMT-`4&v-JCoIT@zLX0a!V&KSv5j@V^jiL3j5F-StkR;gHD>yi9 z4A;!^lG9O1_A=G5da{p$ege*ij7AObZ>6*SXq!sLt9{` z7Q$UxAmZgAW^9jT_PFLkoNL%Oc?i$E2GGIdAxlm?A&aXiuOgi2+O0Jof11squyTxT zW6R*4+vz!d4EDjdSi0dLsWPSKL$Ct-=vNeNKafIc?09v4BRl=l(Z6kJwDI32M88Fh z`}p{h_xR3EwX@&hk^+Qie$Eots_iJk9@FsWN9 zE^V2_!O${H=-@!F=1b|ka6Sd>@6n~p4n{2-&y%$yxtO{&J0F?&BSX51mEb@iVwTeo;^dSt4P8n{vKg;XAz?bNl!zpbjI%fhp(G=d-2A6)#{Z+pf=4DLB7dz(UXoLc z|4Ey1g>e~UX}R?;A4<|ssVX=*r!p=bu6gIjo9IyXteV5TO&3vEniBQ?4s*s#}A`?Q*R*U9Rl&w+LOuMn#gDkp1IQU?$rllFKQCfZ&Ota&jLfq zkUp&lKL!&^OY#&ehxWNI{vV!jFVc;I>77KnzyFI(dQtxfNH6u2{$iJU?0=NEEIbMRTSxPAe#CkqB3TnF!-+ZEZ+ccpycFLrG3d0|WbmeStCn=^+K;A{vY|G$!9gEGSd`vqUmp4)3-0f39rs0A#9FJ9T4`GJw)v=>3yz#R&%^uoICuUU)|s*r_v#K8 zE}Z1>nFr{EpiY~k0I|<5aq7wgVhlPo8lBMJI#ls0qwqBdH&uK*YJ)Y!%9h~K;k8`6 zdYOHvZ(*DcF)>{d(sIr!tpaOnYpjHD*Q(=DDLtrCEF*{a?cn>L zOL0j{C5!OmbyifWUWI!HR&eh671nP&Ml6;TE|QCj*CVM>$rGLW@9A-UbN4haLXvE< z<9O)%6ty;-JHCEj<@cW@mg|QPv2XuA_Uzrm<)_l}lD~zPXE%L~OGAG~6~vvpZ;AZ) zoIB4xB|83$D&j2-{Vza z(qI}DXU?A?`a4%4P4ov&AK1saO%WWQQMM;nTimvYK0YT227`D8a;uZf`quSpJpSLnyYvF2 zFO`wlcvo6?Z;HKAT2|bHHsZInHja#Cn$f&+RwBZ+*4q|RT1x+T*St4f^^zCIS0!u9D=J1-#t zp=8XT0~_Nk8Rp~@B0arc#qTW2_MM2OPvMHxpLQm3{}qGUj3XfM3LVMOpO`G||o0_2djRww#>#G<% z`B38CpXc?dd7^<;g2SPS4t^UbR<9~M9!8?jszj47dDt;;4F2NpjpaR9cs!v|F?UE! zrXP4Jt%m=<`4iXl-Ie9^9lnY1@DPGNyk*yzR?NDTlwrYdh51E2zOrr%$3KcPKQos~ zRf}^XBEen%WDUjZR$=$^7!;a#biXhO`(CV{){di3qIh?41M4paiHL8|u})uJeu^OE zlRxA8w`c#;KQKE$^c9-6Un-hD-+&>I>67Oef3E7(kWHfg1_yoOH0(N2Sr>lGc+P*)!vk$^}<@3)CtdsnTZ_e$rxN>4b};IU21Q9_igt zCW>L>Z>18$^CK+17)>T;HP`P2Qng_N(%Bf$8DE+Pl;-xNad-HY&9F|dz&&F&5pQ-} zY!t?HSlGFcIx(&^#<+Aw+jV<4k-i++@bqvJ%@q~Lx9%W)>AGZgHWT6eIW=x)XP5Zv z*DPDMjJ9pt8hi64VtrR|R9A<*?@yAYX&q7tF?(S1O{%vjz>)p$>DZwn7uQc_*TGwy zd>BMN=Qwtp51~NL)STWdL`asx*oWTWpb%s^v$`3>{9Z_P<<+ZKczSvY(e#c(yFRdF z&1AfN3R5udG`j=SlP%x^0jcxhW*NnhKP#8@b z<{~i4ii{2_wl7)Afiw4U&0Yw*SYLj+9En-XWlr1(#mgrLX2f%K`$4Y1xR2j^1=&4a z@jJhrV>h31)Au9!@@F=-E~BENjCSMB&dvlqy2Z<21Mfm|Qol?(j!c`xb3<0jRI7<| z*n6CFWaZZ8%{+SZh%K9s;FPB@?lvZTynTelYq#<6eI$kQ=HU9lja<2XpR1RBd8)M` zZ@N^(zq!i(7f~o~pW@a#KlbfDNJMHcve`VRd&@RFPt$-B+8caKRfe$rW7%b>E8=gD zDFGZcJa8n8uDNZGq0NO1Mp>LCXoL)7VeMfvb`QRf3 z3+BW^#JzRqOio<9$3;H_CA}P&)~z1fLJL#bC6YJc3O+^Up>~Nh9GX6bXKGK%)vkkM zus;r>tW4hCV9|=zT)O*;oP`SzaDJz_K9BHy7(-rVAt|cO_`@D@wP5vxSM8Cey;?-LSc=UuTuN>&w zE)V-RULdDeRy41#vGsba@Ry2f2UoFr`yrw%J+S+5h!&kEleI~6wC4{~dHxcb6!W2Q zxf)!VJ`M9m9mp9a(mZ9kF)shu)Z`O!1>f4v!nwP!bg{+K!qQmZe(xD7-8<3@KRb8s zq;>1oiLSqm6yBeCE=&HUnLgCwd{Z+sG-|c+*(2MN%E-vb{B@+kn_rGM{9gRU5DntN zuQpEWC2f*Wl~%j_%9LA(cIky69oHrv&?cTEy>NbZ6E6_8Mw~0TNiPl|x%h+>Mp8NwLzTq$ui_HIU7MIE;iggP zDbb)Kr9ABt?AwzaJqyQdr|FWeG%Fj!nw>9&n>5>b0%n%hJo#x3lTVw{p???hg`c3$ znqBOkHIaCAAd?34VAV}{bZ8w1U&bV!l}sp2i3xbdmZN7me)J$S_V`huLQam%7{Pg? znb- zxfS>C-6BirmZ+|;VbzTgt}pD*X>}&*RIkkI9aA|FpyKYfsm#A*LFwYT_^l3SX;r|? z8;uL-=rek=s17%2(RLpB>ej_9 z=n$KphqH6`Xs*WPrcR~wY#cUDG>>4%^zrzMCc^OAg?U|9n zxie#8Va=hLJ!v!P3L_@AFs2F3Gx~JujXq0N3UZEa^M#;1G@ZFuZRs?i6WKl-V8FUv z?3^_nZTuU?4(QJ2yKraU22T3jVQ}j{kgYmihO=~>{}3w&JN$i5aO%_vjvPA5>O&7` z)1ww|_l{)l4SQplSpxPkY|RCZkM7JhyNYz})_~BR!&!baioDr8$)7(TW_lG_%QwU1 z;Tn;~0JewbqGKs%6ov@ajGe`M(HQF2YB)BfYLMIM2`kS$;O3SoEc11wMsY_5x9EXs z^?vkhR+t?V`ttaVFSUEFBvUmZ<{w|;!H16wZ`W7&=|j(^Mc6T>D_4{`$&t>De1-Cm zJ)LL-=Ms%L(LfJ>bB~?J&v5+kK4u>cqe|KAoL(`86?dFPTn-Fw-V@WBed*bxFx$uX z=Akx>{%t0Zu2dber;ZfQAw4=CFn7{gqz^K24-PYJ>m%M>TExWtFR0g|4mZ!Q;I$zm z*|TKDD^qH5-%AZ|5$CZZoY=I6;M@hMk}8TpE&5|C}H7n_yER8+f$%$UCB$c}><_i61v7W3% zKVkdzN9-8bk0l3gGk@7u;b`@FV5^B}l|Ar%PQj+laI~|bcIzsH2AEK@vJ*SD?4V@# zVT5g-$C115X;7nB;#tXs0<9{BcW+4_vojE5>8~KpCMk!*RyvOhCLBh%nqehbO0 zD^k}hoIMxraqNkjwuQ2Sr9JIB)+L8e89Ekt&*|spWb|+)Z&qtmaZ$Ke=+C2*O=(rS zH%YS-=gd=)hDAh!vP=Q|Za(MMgSQlJ+88?{Xdb+gC#?5;HBCT#@%brGDEe&Q)xe)Ck*6-L$mcpfRODZczab549 ztc*(n!#;b zM>3jz;%sz5I+ae1eWv2H@(JbgTU#=^ry@@wS2DZ0lRk5HkQUyGjl%!UE1vniqs4*) zRCf~%b~77lHmZb+hlUH01?W^##FeQ8ZHh*7aM>0frmsokqB+P{qbZi6UKzyIwNAXo z7S=X6IaqV?*d@xgAA(ob0*oI#ixP#i;pi;#Z)$FA#0R~9!~1~O?A<(*40VTKrGLlS zxI%O^##NHmMIt%4

|LHlk8qH%!g#Q~c~gGT$HR3xvGMTT0txeq4SqF)m>+nxGiB zziC<%>1F%(!~|EjE+%`YrEHlqn~lfL&@A#NPJRr>M6VO+&>5$HOq<4$XE*K}{rmae zL*br{s`+vw|LPJ8iFBwtCJm6_;c5-I2BrZ;aUR+1DDxQE?bB0fz&%&OC8Q!QJpHxC% z#wPUat5hl>@J+~>GY^GowqVkBktlU);u6i48?^7p znQ7fn6d!{$GraT#<@!^pQ5ekG$2L^*HZjg~9vLl#9ZN26Z_<<;%Al-QXgl^en3Iv73mm-48&rR{Li@?dd5!=@+BkO}X%sd=ScAj%R(a)vlO0s1z z73ar^yol-~T`LhEx_E3e6l6e`4)pHbi<;T(r4!JqRl=|MVd6yE_(xnf4xWhM;!{2O zE0@Iah*)_Suuti5xw#h1UV13^fVY zLi(WAuxC3ubm+m-eVe&4t|QTU7c!|HbKTgA3g^-@1zsidVd{64q~Xf)OYpykWC~>b zvMX=$mO?gpA*vsnKeZgb%(s(dtNDA2{+v2>%D5cUXL;8+=P0vOO4!+AvvvfD;zwj&;CXUqWKAsAxPBHh0Jrf31=g!7iobqVIz*0&U z%$mpLC!a9MT7U)P2Jv7)cb=A*PnSYJoASJW|K7N0inL1T%VW#g8B&a4EuHDzb}hGUwnjGH~3Ui}UYkDfVYq&C5?Yn&T1j5Rck}nB2^p6LUMVu4V zB3=Ktbgw;;c1ydkcjQ6Ft)GDD?JaaT;KqhA*_hsOAn|Dm@aT0kBW6#}l(e%t{_@1T5Tp8O>ToXa;)13@h1Is2AVR|v6~~MCmI>Hf$V3#F0rf*kE9K6KC$|%G1BGB|X}%X6pLM zT$wf$Mg3m9Sh$D^i>707bSc9(p1{n?kzO+v5x;3LZ^|v8t(Pf*r{^<#(PP}RSrKYc zk!2GquwY1EF8Igex;6ADjKgQ@u zO*l078sk?C$M}IIk)yM^5>j;ut@4@h@uzu=Sn^baV?mf@MV3ye&69&un7I8BSqo(6 zwSQ*T&u`7?{=+l9@ovRXCaTGc4ZpFRd zaw;SavsgE*8|iv4#{1bKk>)43iMYb8DzjvKO|CBO&6@KjbnIUjJ6m^A-(r9F87g%k z{Md{BNWE`AKhu661(Io{{%`6u`8$wI>$Ys!VqED^MkXa8-ItOrbAtvAj2&1q-yf-r zQ_u>WGJk|WD#rf^Q6ECF^GN88{=4`}jHgh(6ywRk8{h2=o9)Ne&BMi>j!7l6k!g<~ zt-ixp*~ow}?9+VTl~{irriRc@TAWi`CGLMuq6mw$#mWBvd!9rJKX$+4=UWirM2T?h z{)T6lLBtjPbzFv+FjOW^JbQK*jpp|UaQ-M_T%j<<%IZt8sW*<7F=%3mj5T0mZT<~{ zT%=pCA|@VeZ7lwPfd4fLr3t1cQg8IHO%f9t2mimH?};SF*Q{AXr%s&`U1VfZ4l7r# zq+`d9#;KZRzCXz+#(zLF6`3UdZXqrshD83$1&sMB7f8{4RkUOqqQYv!Y{Be=RcnZP9B>7(=-vjA0SaMA3^F5JTt;trNR+$(- zX)1+191o7&jSEE9O3REbbkF=iI$>eHnTob@V zyf&)}Ot?w@t*tFl3I~O$dE&k`mgdsEst|q> z_Ko41TZq3_#ubxoT{4g_cRH-hB)5d)R#w);KHW#(F$b`;Fvrd%Bl&W=VItC>Kt#mC2o`Sa%+1>_(3ocvGm z?%g{wWy)k6G?LPg8Vb^&LuoLJlatdAQJykCCP`)|K|w*rsZf9K8TuobsVGgX(1h%z zNU_x%xV{NnT{L=22f}Zi<<>J_&b{lvc4O9|)+#95b|_t|lOXr039apz}dl?Pr)(tm_HrW!CRE= zR`;v%HNWKc!G$c?dJ7E^G#tE%`UPzgkNi27R;i5D+(Wd>^X2FZnSU#*R;{8#hYqrt zN-~k0W-786PiDSFj29?SfMdswkveti6e)0%km`seD9)chPn9ZFi~=O3AvI_un{jD2 z6G`}_u zolOx^y+15|a;;|ITPST`$kk zuAyYA@)OsdZy|U?f5tp6%gK3V87mqSbq6dUuR|<eZD->8I4q%*@PK5tGbRe#_54y-8wRDoZJ?DZM=9?Z@7vdqE;e$o^QuG_NYAmyrW8u8nELgIf<%61HWoCkjskr~69&qfWFZ&ixVDQq@*qa6t z5iN;&NywWL@!%|~LTxCW+6w119=Iw^d4BUOkFK9)SdZ?UdJ;rbR6O1lYjbWwb()Xg zPNtmscyjIx1)KIHr;{c53zZ~~rwiV7>*Aft3JbG@XJh6Zh4A)tBuBI6xW0NpjHwM4 zmNulaGR4Zm3d_h_yo~gwYUjYN@a4gq;DULGomK4bk;d~jh}#rgJcGji)yvfGqG7894fX(b#57pZuoO&%~;kv zwxvYsU=}UA!QBmGIrt(Kty`By_x>r#)YP?&2Pzlw@$S2k_=PySXf)2*PBtL zVjc1os!Pi(A9?)27>YoTN^Op{)fXv>f5s7YA=;PBM59JId2#I#N{dXiXBJq;gEW4#|-xoe(m~Syoc` zzeJ}Mf=u@px-P#L$y~Po6jE<<+O%nnV=I1cyc&$+S0ZVW80n8u4C~dzDGJc4VQPl- z9nS0-QyD#d6FSR;*;Vu!HLfL_Q&w}1fs^O3bn_8nm3s14?TEwOMGT!ghhc-pbNa~( zHcuYJ#O23{Q(920LJ7R8w#Dt~a)!@eK(7HqxbQF>b5m*UUMX%#Lz@xt?iLFd&ZkMY zHFO@;k<6a?F?q9x(NkA*!#@c;*L)Nog09e}`7Bb7rS?M_rq4z54xMS&wiS&BP2!!g zTk4mDGp=EC9)D@Z_UHqAZ@j6{u+=aP^5_$^X-&{l0PJ;;g&U*Z#?>Z_JC{Kq@ z9ckOD8ErfE;Q1d|j4kBV1A@d0|LsrHNbgvXgtc7-F&D|MaATj}C-%=@!n0&r;O*MB zA=GO;l4rr6@DEN{tm5LjNi=KInl=r)GGg@^qg&|f2Yg6al=Y9H_or>$A$;zH{05>g zETh?k^8`QIKn3rL31!=|Deb!S;Z^cZW&O7z*^>V(#Kpc&g_%=1_8gjtwO(Zu++<)WwI|0~Rr?Weo~=7p8HG+E@r-D1{(3G3nn*2 zr&i;TuO8zEl@%{52fVyX(0j%zI+jh1#-adgx6h|+;hf|s)s$gfeQ4Tm3Ek_Jqsh>P zjH#6a)9m$GGPN;U5srQSCM=oK01a-e+kTj0&T7@iDdXc^V3<{Ygo*+oqbRqrozNbxt7Bp_yjBCn5 zES*!IaaHTG_C+@OH}b*WGdr%*tfb~HYZqby@#1 zJN+6+{y7;o2W9%XbfhUDGVYFT9Jkrx)-cQn`2kW zW)dRunF`))qiB=cT)sBl_(@kHIwX*2ojLBQop^U{3IjHKuwzkuLgOrPcCa-1(L_ZE zKhh^(C#=m8FY7ooS}ieg;GD|N*hBZ_qCZb}jipliSv1=f!py3cyxG`>Ol{7w;>KM% z7n1t3q+X_Yv_gc0Mr!cza7p}ht>M$hV9ab%;bdo?(8HvTM_PH`+F8VHY{qIux$Ci3 z=+TM)Lc?Nka!ZXladaq|i&~pslX_D%PUhakc<-xZZ9J9Dhb~dnM7?EH8(g@p`?a*t z;_g!1-MzR4cXxMpXp0l15Zo=eyHniVy%5~p<)mldeeU`j8yO>Ochx_COQTm>CQ$+TzFYLw+m*JlGUMFyez#ZxenuW(`_UlrJ>C=EhE+Fi&eiNfF z7=Eu^YcbyLl(}~AjC^HZF>Sv4`%qErf&8hHd!q#Nh#`1B+=Z1q5rjoTV$jXJkk~Gy zU6VW_jWbx3<1}^x#q8o>J8&N^F6gR)v;9J9O^T*wz&6B3m0ppfXEuOHyuNO<#vP~A z$&M*{t?=3t)qGf_MM8+krk;SkbM$9-eP!TFm_%{48z3YITp}$c;G-;RY)q=f+hS^) z<%HEM7F4bJtXkM(*C@OK;8Xhqyg5inY6iy_7IEZg^kd)<1*HZdK&^J4!j8jvd84T; zQZ!M6WADo4`5s}h!Zn4RiOfg8<6 z5b-giTeryK2u-%50Vv^e1XG+zh7SDZOoy?>Pcq7%ez_)!mi73CD~0K7Y-hk1!rB`; zW#3I(zsI$-wCwsmW%o2DIC!l;dcbM~Uk8h9I#b)0vdVvPw})0ZnE}|>IBh|NpT56i z@!ghG$X=N&cmrMFuo4ofgJjqDYb_w!`TmE@(>4iehfB%7qw_wHYXvN2YzfjEfl|v566!1$yOF_Rzo?%7zf7G@3;;c<6-F2#NWH zX{J-w_pJSPe|q&l1)^0sr~0p)d^co9*P>{VG4q2JxN|j8G-dyVYT6hvl=(wir|rjZ zLy>GoR-WGo@zsI&g8Mc0le{s^2YuDvI9_h%#pB;|dL8zF3re*~OpHot3?GL(XTAMPJ5mV0`{Wv^ zkS(Bakx%Y+wi-zbqMB*k=WzgrE`bjji|3sQ5iFyMlvj<#BbOYjG66+D$x{VRDUF^MFx~@8o+#IN0K$A+cs71sb;K zGgLEV5rNT?@Z`!?)LgJpes7Gs=h>{hY&DaT{Ugih_x~t6^xyqnkq`_}@^ie-dpM0h zgKN?Wri1XkLwbb9GFV?%nIr9cmEug?gu-x3&IMdK6op*J|AaH};lAN9 z3pXd)xfG|*;_yhsfmI>Yl6E>@4mtkRj=dJI6LjD zE!37+N~ukwJk70nC)A+l`8^xjpW|EK;K^qi>nc`wPxtM8_lAk! z0T{_@Xu|eHIltsZ?`=79d0%LVoHnN|m-h*xxDDdK%{?A#;>-EH(-|nK!MAFr(t$Q^ zQ#z81U=py^b(0=qhd8XbUfYj1(}-(xIV0?Q%PD`S8)YNBZSrX4NL{>UwY#oYA&Q2;a3Y9vs_USV9){IBP;pld&?OD5Wib}p`0y+)H z-F>jr<(=5_LGa*%IWTX@nA(yVLs0s>*x9Clj8dg2W&>89EFF1V;O?_6fZx8q(41bI zv8OVgl2dtl8qTP%)f)m`5@fDSSY8BNFIbV4@9|6HP{LhyR*Ms}|3sm(UXmDs>|@=?MA4Fh>S`juSdVJ(u{N1obuw`g;Fcvqi8sHL78?xr zK}WLNQ)0rm;S6YptBEnhC_`N|Up)_XzjQm~n}gubhO))#*C{@>fYv{%ht18%Dpf7P zCG`|7R)70|RKN;nS@@_+YX~G9$2yS-)ctK_WGzDDF_=f+`S%F8i~ufD=1D47Ee8nf zHiD!~ai|rNMRV{6(}+vy9g4| zf-Eh_T637HL>%K|d}ej7!4=oOexrt+^p_rPjZSHGLNmQ?H{VY+a?|0=!*@0rC!E9L zV{w=eDDt|+o5oyPRqN@F+?mk8^VA05J-K@=Yov#CzBUkB1@{tpyuiFV?$(@ zmBq{X`})R_tQTL9es5JJ*qsKlyB#zNXbVy0A5xbM$iaRGWJ9PXNw(D$8F}686~g1K@MM zC*7>Ix+FWO?r(E9@+{hBo9lps2O|2Cxgeg4DCTd2I^~CD-+Z&W2?L-QnSpzR17{+2 z5Zv_6w(-IGJ=%xmyfyjy3#IiQ4DtdzUIR7V~f+O2Hz*Mbng1XS%yUoy4B zpQJp%RWof+ykOFgXKukqNV!bD0M0N3=F&v>^ohLJE(r5SX_lATu({Xyl&SBf3K_h6_K4Q; zc%866%O-90=dP=zH6zbIHR?IpDQ4>ROm2sr2zI2%xWlV@t|PhV5sA#Z7oO-({g_6A z1vRP=&47{jdM>30h%!dQBIa?4rc-(QH);>8zL<};);S+B&@r@qKg2lYQFmg;AZVHG zax{gP>658895HN}llPYs8`YR+GxhglO{%=b zn|xk}HQHFunH~OCu4-v4cJvkddoOVm<<{7pSDyYE+OJre`V-3pa$s>i`($Do6or(w z=^OgS!v$e`N3affg!(hk@$hK7*v(Zi2avyNYC`?scgKga=A8&Cc+|<`%?tyeRHy_f z-02^o`oy3`VSsGE!@tq5Ws*A|$5%mgzA^Bd6-1vqIq7off@|>zuQJXL3a5!luId@u zPKA~4gA=`(Xy&K9i40KeM2GZU-bt_=))v0^Q)443Iv7gWr=wA`%gva}%3qA)1cyqY z6{~LR_aW%&V>)h>T{?xLHbg&^4c@O1ZQtBs(q`eXtA9Bcm6zGy`fhgtM>eLiwPmC* zv`Q`DgArxAK)7@5M0o_E-#%djJptA8yD%Z8;fldl_A;Q6c$BK3i=iE=iA$;TgBZRG z@;kg)jJG4sm{fM-+}Li#gsLKG=9-^+xBj6Oz8Y5+w|_zJ^mYPlri4M^!t#+Q#&?Mo z1%u!Eyohm`M*7Yei9bjFbzo9Jxq@uKeST!uK@Fm>ME<&d^ro0?l1$1tP0}NCoQf=A z_l3Do0XtiyI^Q=tm*7TUlm!{!pAM^5LVypL{2R#UU-zFv zbbr$(Mxu~K)t`NZ5dpVej4=Ni(_Z_EZfx+z2I#()gKIu_43&yQ$Gmq#jd<+?!(|U; z&SN$7eBh>b{kZWdjw+u3?ZX?59<=@X%O56H*m6YWf#ZS(m;7)|4>F0zvQu`5$;nyF z&OkSL`$CIqwHj@0YYO_|dqNu-1NFUM9w9j3$ng0qrnzl47rREJmY;w2Z`LaAlCd5y zF9_>aUZ>eLlcde`0$bmwNH41N9}e6ecb#q9Qep^moj$<#5t6R&5!?{m|L1AOJNSCEljB{s8( zAEMS_VfKh5{x({R`akxHxJT6?LCEk}(@hi(gVyiU)h5W_zrXX~jHKPgOX-^&Hw&$%^JuSJ zQz&|Ze*KCH`Z!ypn2oqwf@&gcjl3IdOF!PtAfKMpOn*%x()w1S0^UBHEgBH<@481! z^d0zTzzNWcud~#{{`VQ-&W?_b8kKqxiC*4?ZmdkZ`%ndSXC!fy=DP}hJTA27hkHU3 z%D32P2Mdm9KXVfepq_0}CSl28?wNEin)3EC8ntC8QMGgAvkNs@I>bNzftH! z_iq)rnL)>_|6SK8q|hO6vnx>eVlyF3oWzxp0hi)%IWT|t*^t8`r-{QX)Jw`%=vY1GPCzGT@fmt zdXvGBRGV$-VcYWp{PI@U5p+}eoru$8HUVyNQ!c*eOhTHM;#rx3Lk){)5x!sj+FhT@ z+_IVzm6(~%btl?C1GQ@1Xn{D4M$;?ypQt6EbqP*wJe^8}x_#{}2s}QoFw;NtI`zF1 z56F{Fbr&u~pe1pFa9KrJTv!jWI+Gp-oZ9w%_941BHFv*mhDdF{4VG!#Yjza zLyRHm_{1>4Ic-Q28~Cx;)FN6Zq(~7@Hi2dYJTI2w$@lH@Z?brePoGvN-_;>ozNAAB zo4 z_1jCf->GG9#?L+rCfS=3UckyN%d|RKygK=Q&ZuG5c8EXCj_MZ_RpG)|E%6k4D)^nr zhji}Ubt2HR_p5E3kBJY#g5byGDD9!Nv)EYfi*kT z!M9rN9EschPkabZObwL7z+v?+|HAJ6(3(7t0g-$h{D|t*3-9i^)halNzLt(dvAmjhNNq zPovKx=v%}jl3j!ta&0kqbbUKlZP|k=1TLYOfWr8>qGppjl7FHZ^K$>%-mnImu`g_D zZ0ANh?kD2tldp1Y4CsXqY1W<-rmrlh9g;k^BuC#}=fpjCi?oevq%O^W>Y#br8s ziXG$7vlBN9MMK#a;^D`TJzKDYxOZZ&a2#61<7$k~Kj^uokOKD;+ZuP4fxwnImAz5Z zx)E@sxM$!>i|UiXiDQ4TT$sQ*b{?XpDa8Dg-vt1K)TPV-FF`K7vT0&}T^^m0%>pm8aWw8LMr#CB@zx8;TFLlk>Y=-lC>GumUNrjY1g;agLwmC$@sc4Gj06#Nxhoq(6p|r1Ma#_Ty zp_wg`)%9^-*?kl#dp3elfxj3sr@r*oy&~dyDyf;_sO;JfU%)DRnbXPa8B;HDH`iYJ z*$TJHdnQZ0TE3G zQU9cLkJc=HLe&fSHhZ+o@f61+&`fwwM`G-S1!2q1Ae>M0_YSLW))uP4k%>iTvz8>I&vR~n!6GZ1FXrXAZ#u{{1n zU-gaEs`keohqoXd%;V8{x;JhUBiU=f>^b1SO2plV1(&C*T5ecn+$d)V1Vm=pa=SK( z2#sm97x*r4Crqrx3Rc~*&9T#eUd+k|?n@ncq>N{TFdi)43#qo*XkV7&QfA5TIORGs z(AgR76WJd5KC6JQktWvl2DeC~y)|u_LKIQ{+PqyxIqVFNIE=F#cM%VU>}nm<{1SV; zHa5?!etCzM>vr!cGkAj#%5bD``F+v#r7H6qXKgv$!<>seNpuW0y35hWt=j?-v^P(- zf(t)cH#S&Ux6Wta{!T+SKTN5XIE$~T=)s@GvjH;5i&bAM+$i6N$R&p%?YTKi4M zUpdQi%g?7~Et&6+!@D?;&gSYTQwY-xb3>N#k!LC z30b`v(eqZbZ=?ut=`2qv>~PrimH}dp8y-tiWko@_FL``Y7TkGKr?753PLav4eqL)Y z`1TvfmJVt#e1ib&w>`rTPm^W?T+*~u1>b;2$$mi~@BOHiR1o-cm3Da=xG8M7o76QzdBdPz3eMuT@>V=sLy78^~qW6dpYhdB2^KC zWoGIs5mCN{9+WgJn1-9_Cz}Eh6GXmFNB%6?8zH8~_F^S$8`&WbQ1iDtjs1-3#B9i} zt_NgSAKAA-wm>feT)~(|&3!4S8FF+sVMf0akp*@E?)}E29Krr?mgWo;yK*S;-QuuV zSE)ZW=cPPbC0gDztajr5!^pum;xsR1T^0Mip4g@&UFJESC9UlQ{1b+X8uy2pU~zg` zazPBuG4riRPSJ2pOoy+`?jbXny1MjdhJk=-*oI)>SBc0(EZX^eY-=X<60SXsm;#J9 zAsN9A4KifQLr}}o7$AiCGgj$5MnHzNrN!`|=45m6glL;yV~RPG!a$S?&duaO2#?$S zSafU?%3=B0l^O`7$K|xX`Ri)8_6tejTxDF)pl0ReSS>1NfrH64;@qW*^D!9T*V$e_ zzJ*sWQNY}OC-Fg~+C$Xm8njC8@>wRcF$+yevCj+Lus_sB?Z|Ju9mdxGF~Q^*~yF3LddQg(3c^KtP;C0q-GW(`DJWW)!zgMx&Q z6LwTBfqqY-WX62xG|i}LFKs$>aZw2MeTVEm>k%kRWiUk|e z9)2Iq8yF+PNI9BAEkL0qD@z8u4atjmn1R)QQ0|YYMP20P<3p|@YiViSujWA=e5+fm zM*XN!6oX?edvN;OXU9#YDPKg)C@0dZL8lKa@eC$W_JF?!B(Oq5UM(-h*Z6y{J-bCW z-lOQK;@!OElyh=WINPcQ_vcMK1k_c@I?~wp3q)f0kcs?dE72u}v0a0D8kY*vM2R%g>oLX93Sno>~&iKzrz_`GchfcKz0kQT#u zSFydJ7e^K~XJ3fUVzKyVRK{9E>nm|#;X&#Lq^5#biY7ziWN9b4HMEzj=BTKsG2!Up z9Fd>_8AjU24~gwd%alvIZ`h+rjQRGfjROm(ul$O|8+nvx5hfJ2Pc&zrc;e~xZLV;} zWdH?uNc>H`J0mV0L~XsxC?zRe<$~5Tsh6x|oYAE?gS~UGgC-5MS*qwnn>Zzv?LN2g zii(OgMWkv6W1?8VtKI6jkLDe`9S($=J$kh9U8v@CSmGqOe~t-ov;)tCDyYW0S6M@U zg>2h78}@JgWP1LTaWZi-FGlnRH%I+BpS2)3nak8)kC zaKc1K`sPL>_6tc_yR^KmRYpZdvQ2QFot#8TelhG2vw+8@4`&;TKjK8ljsDWho6J1{ z%ZVqKnD6}+Cuuxo0=(~|(_|g&Zinl!EEhl8AF8t}pv7&&W$7SHp*}2hQ?CCbcE5?$ z`;dx^-NR(&Pud(^B477pg;aCGkzCRC;TMc;W}qTot+^9qr#q-%L^mEWM&-QYXYrJk zOCnSE{)B!=(uER?P`_&=Y&h2KY9rNr*!md%#V7p-DZrIlp$ipzg0=rp;zHU%wGtaP zt;`k&cKM1+WKaL~b_Nw3uO3zkn3>{5>#Hzn0lh}z0+OqXQ8%VTSo+mp4OIIl&Tb)A z9d|d}q*U}5IWG&h0p^~#MnPK_`)S00Ru=@}XMDhcUdR!pYK_O7-^7E^pAI|26)gF% zXrUkSmcq(iqQCwi`}$?MItFhedH?BL_q}}0Dbjeg;0et#+B)#>!z>>NUjPf=^9+Xj znb8OMue*r9CX^LxaWmh9;j&?Z3H(_*esjxDp1B|n9tA}$O zv9Pk^jGLh~qF!2v`lhEGv^4sn+$E-Mffmp!tSDuy<9*^O3pi-SA*#%2AsW~}Zz@(` znhF`E9rL<>C#Y|2&h=q}MIG(j(&U0>3T~i*K1wDQFFj;OZQ*K9JwY>S!Io4r6g_C$ z1~vk?;y)}3W#eEor=GXpSVP}kb>0wF&hyQZC@RuU&V5tnS7V*`8<{nUJIP${)|OHz z&B!+1VXrmLw>Q??^je&8+RE{~$g}(>v}a!}yPAh6ggZMsF&VU`phJ-iaeQZ#zoS|D zr5V*B<%1NgQvm&n7H8qYW-)FjhT-bJ)UkTJccFujW@Y#f@y*Za2f-wu&C6^1_OAL6 zYbjIQIWm;l(5S+Z6PUTlO9{02a%tiZ3p+D&&gb|3Icb}#gJgs+NZ0Q zi`T0M$L&os_DYT#QH=JmJo83p$gYAN;s>wYijnZ26)iU$F1xeIO&d4W^AKWk z&UV~6JbC5nem)PUjQqm+P*t+fB7BbQug7(`u0l% z6C1aKGVi})h^XrRPGB%h=#v_*n-p)fL%LVFoA((+xfYpq^4Qn{983Gl<<@|)>(i+V$j?94;m!U9oS=A6lc;~Njd{I{NJ0ESuK>aiPP?aP30O4SpTyKAF4vBot2S{yv@a>uA ze6bwMnGjCzhbr4wx_k69IY(aaWl?x5KyZ=WqxGN_KwYWbpeN@N2j%6GNxSEv&CHou zNXTof<@i#~Rt3;pT+>k9ulC8-B*_XtkE4HW27Y#k|5Hk0u7nDvANHm2 ziWg~LG$}lyPx&d^cA`XSwd_n`tt4rTV-{=Zo_+dE-~utC1s?~UYCF(}poo2b)kg_z z_NygBBJ{*e!^->hfa#n#BiD2COb^kWqOR`i(q4|@U=mMCUtspKfgAII5QH2wm`HuI zLgjOJHhu#Ri(B~hMTj4Gd*6YpBlRR&)IBqxvNN9WaW{?Kq{n4tW#ezW^M5tazxzO< zWdLRBBQ`q}wIi{Z%(AZ+d(v2)2t-%5lul;KysYz;?R`iU;##m`w{&!T7fUD_i;Ykl zblDja(bB@TX?XI?&ZQj(NVxbuUV*0z^?Zb6o+a56bJj7Lnn2IYje*1nEif>wGD!n(a$nIatR&8e1a6)?R0}1G57~DVscky|O-Wf&B_h^{28xdP^E2&%~pR z{M2U?ZgRHdg7f+31oxn!d(T7lHer3H%)*4kq-HHn*bv%n~TVz~8!L%Irs>B6D^ zB+ri|cU{U_UTxqMj~5x@6x%91I}x$@?Q>SOBtOHYp=-ugxd3CZyj`Hmd@jB=??;Z z+Z1OX``l{@NhU7D;xGY4J2$CKc7D#0#peFFu5;Oh#C$#Ld^6+D!s{r5Q{@)APq$US zWHONHXYbt@*0U9g?o`)iVq?Ittbex^8ae1j$e-hP+`UI52(rpEcl)Ov(M~qj(x zXRBt#(mw-;=n+qQW66jmonC73`fEfxLt~)8nk|H$I}I_~4=!oJ)7XO*>O}a{xA0ll z6)h??35Bt6jh6 z!c(*Gpv(D6l>-2*7{&u-h+5jIrcKiBn9@8yBYQ^(9Zm^$Ym`YgKX(FDTelQ7=uzK2( z=-HQ>^DC#G|NA*5?_ff%>b^@t*B(3UrA~E&Jm$6}oOMm%CsIbB~bN##2bY8(A;(NKM_xI3y7teAM_38xaMV!R zZrC*si|RqY0>aL|h^$1_<4BfrnN0Ph!c)4+RNo*P9-fG}_@~nM{nx^Izf6+D#H#rt z*6?IIyBEi?2s(p|nai%2dY|3Jtz&SAHkL|2;McolN1o$A z&TQUukOXB#)FYN?MxUeNEZY+!H~scqJ2fj#X9b^Ul*& zot5qHJ~v&2>ok}y@m$HjKUL4oR=xKqr=71JP{mL-;|ra?6J~8$2F8PUgu5qkej*?m zo>0GXh1 zwGE-Jfo=q545Gk+_ia5s#I-D_I(Nx0fQ^7)IYEh~)5prd$f$My7sis?uK%1rd~0)i z>?(%im;*HEnB{aWVU=h5@okZ7woqL&6cJx^u(0FtFdr4J#*x?mRVFW1c;Hd{6|ePK zWP79OBIXIqcTMH2xczdXkx;e~vDF*KTA)bHcY_=LPEu^uX&H6< zt%9$~>=^8{g)Kd~5v|SQ`Zd$%4)Svc(>E@ZsIA&>L_7^CMIzYEW=f2!GDEr{Pu=?t z$dQpc6XnvtM_o|oDaCh3+(Vr^6kCBm`1hwEO*|z|#S@C@Qh|57qShbv9CL*Vleq(d zUt3~u(^Zq-xUvJnHe0OS2>icIqXcKB$nT0!Uv#m7&hk<4*9|t8zAsY|c|Gznq`vcI zci}>HQkJ*j(84i8F{r$3@s=>|_1E}lemyusS7YHcJDf<-TFnmD^`5)PyaOYni!G>n z-?G_>7LmP5RBh6Hvd&1gwy2Ks;Fg_%-E2?+XGE7YioM|7Ru%G!UQ+4Th_`5%r*pPU z=vzDJb+T~9#h`g(B=gE4&TH{!7%+OgFJd-gAyy?iU)*NQy}(LBqqRg}`%aW#Hvv;FwBl_mNEfeNeZ?}v&+4FJG0iu_?&_1BG#T?QMddpzyn z4|i~%^%o!qY2e$~z``z+JW}+K&sqLGkD2ZjZO*vf(v|ZSO!drqf5EC_iPcGz$;vJc z@g2vBmavJ$9+Md>;{McM8WCPIKp)G_jdF&Ow;ufhmW^X?;0>Mf)C)WalQ`1D93ri7 z!5@zfg7X497ky84G4uRd=sirPmf`{&TZG<+t79-R96ovPb{y``VsNfz%WULycKl*m zongs~XXcb>t<2UA%YTAtI(y7j;ZyoU&CJzzxuyQ4=91)VRBf(!oZf&F84U3y%lGct zan)vhKc4IKoxMj8fgk+*R#M$J?M%jSct3lF>~Jgk_Nzij+&Se~J!`#vTatZjQ+zir zIw76`@n$?6t~$N(?&$g}fm6*K#~#<%#4PX`%4oz$O`|8=B*5ZHxxD@%H8_UWzFnm= zs(-t^-Y;6~dA><397eTzjh*%S>wb5J%h-48A-mAh{}M1U=B@sNvA5LO-&?V9I*kpb z=(2d&MlwOR|HT4aL+A!Av^QyfJmE0aWim=S$8zy!&3ya$6YQ5VgMi6q&rkT|4f^@aInk$*t8rq`r=5DehIz9!3!MC)1v~D&QJQ>9_6Zl zGnm=}F@~+#nShsOdz0apul{9MdGF4(Rh7f(_^XHNFBtN&3g#0Vd-b*+arUF_R-4X@ znW3KlsD_kNn|>0^>=8aRo6nDO07u zT0pK%{rjdpLFflc<;trf&pS=b%Y)%=6e(QLJcd88vH<=T5@$}^h~if0k?spPBpl2u zqC7lw%Chd{YnSi+I=b{L*PU1yeE4C-gK;=SY~Q-;4Yxmw+4zlAbwpjhf4X7+pxK)= zwr$r~+)4FGgIO|pLOn{g#-Db8#13yX4{iZB%irX&vgF2YE;cHQZiWMYC~+dwI^Z5% zv2AWQT;5_W{~S~}|MAKW=Q7Y{?7~Na#g`?Pyavfyha%zfI?Ls40N|r}6roz87n~U& zcAt6eEnFwW&mnKEK@mI*G^n*!#NkV1klLfN9j+oCf00seuC^7zL)Y{Q^!CD(PZBCH zn_!zeTS^&enQ`{ER<#*>?i;T2<>75aRvbexLc5AM*oIkJk&@DouuoGU87P{4cEQ0h(rBL1ugh<51Cp#nSkw#8B^ z0%-Qp#<$I@nja1+Wbm&a4(KwjG6rwBvT*D9_B?EZ?I$bLd^j>hq*SIG)D;R5m;cPo zK7YwDNcOKUFz!YH7(B(iO8HLBjfMew6>4&QhxtP{?pulo&bE4m7B||Cqk~W_0wddhN9(hg#op@sNFHCoz8z@UPT!bJnkdQ&nCU0`#bvc3yDn<-S=#nXmRpVboJw= zH-=_P^m38~7#HEQefGR4e<-_KV@o@0w z`OFSqQ-KDMh#K;hY`_YxT#c;shuMOyxT8`IOC>sa?pqJ+gXNfnKX0QSqCYHRfkXrP z+SnYIa`=1T0V~b8^@bz5sbs9lOYv61B!dZRG;+xHzEn;`#7v4%9K)GlwE5w}hFunm zc0v~vE0JbbhyD;Zb{Hw`Wo}jW2F0-;pvb!MJxY^obXskEx%|;3J-@Ggs8^2l9BwNWJzl1CJDx|)x+13X5ioxy+5SDeu(j3puTNTRA*I>zWEB2m-Oib&J#g8o0O%Ce$LKotzJdN%+nRzB$l z9TLc5BH!@TrG0fHJ7SgC)G?3Dy4XT3%7B9nkqkM}iX$979Aj~xUKvmNymh^K??7ai zPhPvF9L^Din2JM#-UOrK^Z+u}0$;bUXnb`;JV3kUmM1O`7>_D@DuD$5zzk$$7>|gN zW-&uXjOhF2Rj8OH*Z=hzm)DwWzJpN78Z6?ut(V_9Z(0IWtR7wnM#C!O3I&PlxqXTb ztuWg9)o&-*fU&D+>rF0R8(o5}Od)BKx6N9Iz6*{~pkWqKD<7&V*;vATc(O*Hy!sH$ zi>;NAe{5k)ucs%VdVRRd51Fp!Ce<>RRh$6G8ngpwjJukAW-O#j>$(J|m<$T)hKJM# z+#LApFcd2Hlue%ECmtJuxi|OY+#5o!h~~cX)HE4( zCIn^L+Z~(vg!47L^;}X!eDAA-bA50@9ucrbcBN#7Ru6Elu4Mi;JpV;tUt~F*2TA)9e>*Vdl zPh%^7WmsUs?T=C9JlHPj>y_yZKIBKA44YB~9dg|xa;-=q9;^pNl*K6Jycz+rCd^DW zOU7D@3*~3yIWjhqL3OPx6^p1bylMs7tVMmO1*s76<5Qdwoe^jcO3A=(j-C07q`f4KX9vqWz&I|v?n{~oTpYk*2gP~ zo35LS5inLBa)G@c{0TPP=|nnn1Ud7I>a#=&35k9;GaZ&Uy!oJri>d?$DmpE`v;)sF zrPmXfMBNUtaDhv*n*g6M7%WCtJ|5ukY?CMYB}T>AIvbvP^;7=A!G%%11{0Yf-ACb2 zldZo$LT2~2~15@%i%an|(oa9r|!!}oW_|E!URO7?PowWKKW zl=mo;ZpC`LwPkM5Ur3d$sBt3R4(pEiGfrnsAARAD%W69u^Hv$F3O$;Hs4&T+nQ!@P zAlkz^QV*@CMTR{(IvCr1x1lTa#sIJSX`2<31OxcUyl1K)UDP0LnHQ9xkPE7ax>k6< z<3&$v#_b^^k1k{xsQOGMSR&y=(Lh3YgBD$!9OK|1&AFVTidMym=B@ZeH7%4)!#KL4 zpIJ=)dn4Zekk_CLF37)3qW>S>zWNtIM*Y8JHaW`Q7nGa?$>`Vrqz?gyNZc40Ad*6X z|F5LrZS{XSY+qmBI)`;WJ3G6m4oh0Bk{Ibn@0SNwC@L+LFXMd;kR}sgU_flpiEeB2 zjbu_xB_TL8xVX6ZdwaY%;JbC7mFqJ3f2HhLIhVVrQ4^>^2%FUaIt?{CZpH)!iACZ- zRPYPrvHZ&7nCf6Ua{b-lJ5l#OvvXR;NM(8}e^IyqlP@zQJ5G zn&{QyC7)D-ah_v;m~9%=nDqB`Bn%G5l0-yD_s`C_l{g3#m6 zTw7r19)I^gpo}#|Iz#EadokiawAY?wz{_{!89A*d^#5nym=R>M4j)TpAN?he`tJo% z(1|tx3TFS`C!haJm<+ZwmmQEzIE<&1D^@LvX2;ZAC_6HPzr7juw;Lo zlNh~xG?XkS3=6ybqbtdoB^v}*eXO=+ZsBVfWXGf1807a&sd>T+!bTQrmFqb_Gasr| zUD8R7a8bkEk7u3_5RgY`qt3W^k4s4&THJ?8*5sy@qgzILAn$` zfyib=veQ6@rojKF2X42JLMw~38f>tL_}o}3*%+^1p=C@=lkZ7nm!_BDU_g2xi?eWW zW*G`9+UZ~`CpE@%Y<+M$5@zjR67loFx7Yte)?0?f6*S$VApwHBYjAgWcM0wi+-1dxYat)Q<$&yX0+ZWB zLJRPWpOp~E69|P&6-dU0H`b(7c z*Ivj3cpVNw$*OvIF+AahkY+Syw^g`dzJbp}cF};D45nwOe*1{L3LG3mdn}_OI z;oxNQE{aU#`MxxMtIz5;O_a~?A4|NsaB}Bz9z5f3kFD|;cTTs5s6at&g%PvupQs!n z4uS2A7Csm`pGgH%hRjjNRg@{a4i2W=Z}^HBvi;u*Fe8`lQ?cP3E21fx%-h# z)sk0V*GK1ap~`*o ze{>5QBH;ac>;fNFtlPVo&WSsKR?CT{Z+aOG9i7eg^t883C7ZYttWJMyjeYzsSdX`FxFqb^bSIf64Wk%TDsm+HUb#6-NU}v1HxA zLhS;2)`0~hFDp3Scl>u(LK>d~YeJE&)b#zqfqS0*2MYp0wg1MmW%=Clbd3U^{rHCE z>PFRYOfrLxi35z;QfIZaLZ}CWF0qGS8cVPU|5iXI^rlX+vo{>7Oh{jU{F3R?5NH_wgi zHnX4ke3<2+BlrF~-tg6gdEWh=7EWB6tI`@DyO14#Aj1{(V7jQF&r|5>8cpT@iPUqC z-^0!7gEn?DSFD|&9TWzS<>ZO<2kp%T*EuLP#cQ$of>YPL(&BE5pJH>hzC`(~yFCSY`JZmeK>4eK68JTxlj$Xt5&77FVtW=m`?)srqD)rf5`8GPNJ! zK|WvpG*dk7SDtKIz-q^xZ01!2ECXK6k0a7_cB1Z{Z(FzbFapQ!#$DYqv(|rq4u)}^ z3VKJtsvhKz&d0Vnf88=Ymfmt*@|bZ>Z!Gu!<7KXb%@BT0oT)C2);pg(Jdu&K zNbqY+^y;b7Y`dCCv-Itw%E@W>sfeY#4b2~v1+|~7p{1)!Wxw5M2Fccfv=h}7`sdGB zFemmEB~fE+@|$`p&O_nYboVyM`40;hW+eg1e!{C<26;!JI$(!mdLaxlxDsWenQ4M8 zn-ULBs6{)xm5!OKXv>1j8Ga;aLxWVm|EF&pr+-@T;s;W`(D9C3g?>l)1%u(afM3+{ zijd$xOUFByzF(C&B{8E{6T?dvpvX^8)m4m9iH!CKS6q~VN+y2-KibnM5;EPVrVv7-X^A90* zXo`z`1bLmNP=mi4)sK_#4ampc1HTCmHyp^bA#76JchFHQ?a{Lf=xU4Wp7IlYB`c!_ zSR4qaY42}_K2VGG;3uhTA^wQ;z;C>W!wa=zGbOY=u}2dV_pVOa1Z^%$ghFi*Ec+#f z+uZ<0m@=u{?GuXU5X_mf!#z)Ii9pyF*HHL0h85HkmHOoLHpmSZ%L=or=C&L(3K`3V zX>7T0yd?7TiuhDu0w6{!TXZzDFcg4(;aXi10bX1bQIDddPY?UKR}2_IyPDq8zJHJ` zrW)8B7vo^>{NAsQlpVAE989-(;I{KPHR6JCKt!-FQ|vpy><;!e6Ol|yAzCQqwBN2> zhG5d+Is42zo?{YGbQ27`VrfL`HDycWpE}7ecK4RD9cJEtQ?0~3)av*w7W&XTM^9Aj z%>f7#k}mnsA8+weG#PK-In7*4wwUIf>sM{>5zl0#{E$3&i-nB@tU}_%LT750BZb9AO zl>y-u;&RmBTM_(es`il-O}jlG**qiGYOX@UE=Jh%IJzSJ*h!nw>MH5WNLw;tH<)Q; zvpSa7;jy>ax0BN$qu*JyrK@tSzzA$!Mt`4?Yv|dRsZy{k!3e|!t6dO z$x~Ur%cO^;V8 zrP9#(8_ND1vCMHRx?;3D+G*!m+20hNq={BaI5QOxh z9X8O>GQP|M!euVWv4ou144lRj&0#ijwD7z??K;F=nbg(>0NyZ?%e8uP?Xz%efW#Aw z7e(%&jH7D+bXAhsKk{nj8F8@!EZgqJ#%Pk2F@|OIRleZ2IpOMjFb5gtUTYE?j)f^U#wE;F$8BS2-B>0=7??& zrEwJiHfU_z%GHzA7!6awhh0iO({7nTC96JynRpbexNqe6&_Fz!(63Az5L~Q4n{E?eD^9Itsit8i59);@PqFWJ|O2s(-UR(syCw%v^_TtU2tEFn0 zGF^(7jB=`Rc*7#<-}~i63qE^`N@PmY;g#+qb@P7yL|YGyig-1J%AVfzWdnaE&EPjR zvT+a!J+zz6=@5%;J5M)-qYa|+ z;@z>P%^yhHcBgugdjI16!JCLj#9{F!|I(bYH5Td!xBSyDEM(OKjebwxX}_EOmI1<( z>)KQvg~S66h=z4Jm8wxMU1k8oQqEtJ)|Hlqf3K2fX_gpnW@c_A^EyJ+yH^pWrbc93^|mJOM2wqas5y*7WKfw?Y)NZIhu2Zgq}bU*GbtvenzszT}=qbZ@dxN)l7de zpa_`!y)&fKj7k;~m223D)`}R`JA$?zd_0)N*G0O{pvjmhQt44CFK2LM4ATl{PX4$i zrA(ABkH**P(}-9+^o!0`&;#eYvf-G51i{sGfoe0|j=09VpMQp)bhR}C^gI!=#d=y; zFGHpTwuu%%p(kFBrM$Jm?EJ_vIVUD}IYd~oEfSsd_TzgcL>o$isFrmh^jEzN!HhOv zBKdUopEl^vjuJT#Is8zTYwnO)y4YKXK@j}X3jtPvbgZ=>+-l~^qvw1{kNK{a`rQFT zCMmInI-33UPQ`vFLqR&+Ds6qjlF>v`XaC~2u5sXO;7xqV6GbC!1oaCRf&%Ms*h7}B zvZw4886C$&GwcI#1borPkvXdlAH~kk4JPs$6(ezkQWxZw+0OGZcc||64yzb55f&W1 zkD0SA?EC8c_tKUe5T-*>)U`hOZ~477@0HBP?a5&=S4%L;a%PG2$LiOeOlO2pI4Ro) zNmu@h{pJFjr5OF$9y3?C%^67`>{^!_Wl7#_^W`H8(TCqtN3-IRy|HD&oag7uB0(r6 zU%3eTc?`8_F&s_L2-dstLV}!}ZwH0@=_4u!BSMEk< zzA4(U==j7k6oM<3-a|~a3T4ELYYrTKPwwDaEOI{$P2=DQP_!HhVn;CfFlo>w(@bj< z^^8E`Z}qT47@1R>a8S4e-7hIUHH@qH%W12y$VgI!v}W$CwDGtBWG#V8fifa69lUhT z6nc00dL2Uw)_s4)5%~_{uQ{tF-$PE{#+a&pE;5DS<=HaQzdk~Gi7~g+*x9xtRaULo z3}w;6L6VtaR3x%AK3BUB!@W_2El~k3AN?l3?rG(cy!S^9JYv%o@L~Mw zv$JmL#WiZhQAhD=)S+fp)mKv}RD?v9;E0XjB409Q2WIdkbn{0`b-^W$pT5a;qVSaib3%}F~h|5x5|zH`tef-t=mOA z;PyW5xHHedlMvF0w|Yp*YOfog^`RKQR#qJ))0q+2v%EagJxAe5Dc?}(eQXNzWUS=8 z*|yq$FMQn>moXz@%qtA$smu{z-&YWAb^{#u+Snw7n@ij%RRrbeTeu8K7*})5Rt!|@9Nm;HIQTt|Cua2DE{}Y|tr9}=eVsxdl%bpN=(?ND zPJpg2&`cA0{j;w*wYXe@oeUCCwHO`oobXoY_A-7HTsG*&eXhUjX~IC2Y8@+L?`+Tr zaPD{=QLDGc zks`R0f^zH^I*^kq-zYI^t2qd~cy-M`nm78o*3V9nrK!sKCr3VA4JvJ=MS1%_$^07w zrjxlMJMreeu`+_Er>AIsZ|Px;s>}-<5TaIZ6V2wqFD^Av6Q>Gimm-5;C8h zHZ5}^uJ6+0u4a7a9sZ88y%^II>7nDhyI+Z37X@6V@c1agX_P45*M0Df3xU)$4ca`D zs&b>dG4Q?IuOD~ct=&>G)qiigyO1DbJXtAMLO;QKZrfW(-1gv~dZG1%1s4qcu7 zS2i;{g03p3JH1COOesaejTVl!t#dr*?B<4bpc7B~hib`bk4*D8Gm$@h6KexHV$B%Gg?iK`%7i;)|!|724HeEJG!BG#2T~w$8Z$ zFm;{oYph~el8tUM>P32Ri>Cdg?Y%MFaz-pm6lN%6TY+bk3NY*>ZfZ^?Y>T%^QmBtq z45Fs+`}gwz9u}7R-gyoIOdF2ww=+gg+m>#+lp6X&U8oH9X^y)*?=Avh(U^!o?cC75 zePC49SC2kdPL}#^K?QTTJy}qJ9Ho<~49;$9sWeTUgP=-<)z?+S3)8oIx>h%afz@{P zA%kix;)hX_i8QIyq{F^VJng|)3Notb>|*J@8q={vsEO65A%@}K;(7F1TG|PM?t-jE zZlosfuk4k&v2Su%H=({+ z(+Rng2`4u9p=b<84lIPSs8lFG0_O7#qE#MoEK>H_1_CiY_oBa?nXwnfBW7`H;wb(E z4kqCirqAyl&70W@cw~LHTTv#pv0oJ}ymXKMy)7QXiQzGnm~Aq^s9bK0%UU=h+As+AVO)8O7nN|@`g*xzG?D$lwU27Dht*%A?zM5Lws>pNWLbQ>ANX}$A-qE4fI z*5UJt^xeY)IK?9^Lek;KbLl1I)|*$VG~3Lfwij1=O&a~sv2BP>8CO4997@V(XA;jG zLj9hRy1NoxY7T6!%APtkGPq)nt<|D2ZuRp1vbTZD^VtX&SdODxdslSX!#|ySv&Kc?Yy%#{C2K$==;B!kN&TIBpY_93nSX{pG6PjeofCo+< z>Lfl6UXszBb$ycsGX{nX46^4rOe7(f-mP)dqPDW}r6}~FN?<>F!s;SFPhh^dnD;a_ zPn)lR#$E=FpW$+Alv@2Uy5}p-8Ztq?UoDo)*-{$2`Blk|dcXHa8brx7J>0Zf^7{IE z|67Vwf328$1_1E}@8N*6)W0Xlj(vzxCm5Vqzy{6$>BnqKXty5n_WNb=vu^s~K{9)p z`5#>F&`sor5BUlIPP60uIPu8c<2F6vl)Tdq*`v%~EAN?{A1`Plub`*meO&D2bgd|& zgRRQ0cl@)Q!UN^VY|6gVrFD8tWTF?`tipo?cDo!=s}Ry{h^#WreS_$(Or3=Ub=Tj< zeD9yyB9@q|ohYWqHv;=sHBMd1MN-n|B))i1s4CK0D)CTNX7{mrijr7+Fq!O~-I+%4 zNCd~@YdKSGx$imgY1h;XX7MuQs~>O%8R&HSDp2(wc#XTpKu6kUVkfO<#>zQcaV~V0 z`h0;A6iU&MvrAjJCHvwYGLxr>s>nbXt{;lH-HsnUx7g;wWZbvtgz1>$k$4`=5ZS>- z&-1;DE)dseJpdZB=H^)jGO!3~v$%^w%bYC&yilXyzX*-yzkfAUuq*MAS*fu*0$h_y z{MmZS7D>cC9*7)@Vy+#LsXc}b(3jl55CxB^N8D{D|HLCQI5_vi_w(n^kt17FAe@B| z=lyLTxD+~tZAW=Q{=cDV7QT9sZr7|I9KJX#i~^up=vFpur(dqtndON%7_bG(zv^VD z6DchN4IQuVb?JNIsT`*A^Ic!iB+^fTi)ou5hp6VbH}UhkWL`0b{p$=um?P4L?9tbo zb{L%6aLQyIWbWs_y=;b@<>EVcTLrmHzF!jxelV^-XYa0`z)V|AL=_Z%DJ|a)XLTk0 zQ;W$P_*viO8sE=ITjTZaG^9&L$!OB}*w5xdHHbuO{-#xSPt-0a>X!m!7<9RPtc;9bTyx2!}WWx?rc!=kg44xwTNy6K`h+^=B~ zYOh8lj3i9YWC`)$#FT6BcAGdAoE9J`C^(wIH9>tG$&`u_Z3-PvA{KJNuR@vPX=?}bMsJ)%949b;o-Q4^R}oyLM(Y?*(ON=!-Ki{tv53#`cJZub;zzQH7o;z@F71c@?I`kH*i%F)_$; z$@E>*)6gYWdZ_aSNCq6@sDq)p?fS^S0FDupeZ1(dHrd>?#e?3vbihqww>G=@(=SQtE zl`$VnH^Yb%`rLs*K!aGyD3?LsYZi|#^YdUd4c*<{-DKyxr!Wg^*3ku2E3EZs%? zT}o82u-1i?c>1F9=H(;K@x1ZnW9qT^ID6C&RXg&d(;I}tr2ZQN9*h1PEiEnB`6@|S zNEUuou3fvmy={!K6F+G`l@A4G#OfXy89B6ge|_o?bx&c`kNo`d5&`&PzMb_W`LOTX zayFo!^E%}K=7`E|XB#tB3y1l;qYU@0K64llQyc`;r$;Pth1LXvGs444Tcmgp+#`yoW0_xl??(di%YNI#ia zkV{yd?81Xh{B=rf&c^+X#Ut-3WINJ=cryxV1v9{h@ZI7`jy#L$N?@Au#*l)iugR7z zTT~kD3@nL4l=0k5`pxVGl2P3o8#!Q>Z0G$^+~GtT6O5A$Y?&~+rmNn_w1v?$pSes0 zheR#>4bpBQTy<6_-FE`}TwTj(-oKggT(gl$<`| zXD>xDzrRLbyPm>ga`9ek~M!wY7((73}^* zfpz!nzKtS1#HC+d3XVT>hi%sephv{>uQ9E zn329YEjffq)2a&T(9m9`A}9Y8gwAt_$L+`$8@SW70JS3UL&$gi40MK9RL;s`>94q5 zV*4_%!}2oRGy#nsgD!*>WFq(aP5~3}?G;H@PHqkNlCGlZGcy0>r<$6Y%T?!zzZLZK zvvhcYy_=&+zlK>!oBl=xYs<9)9m=-hoTiV&)#|SG*X5=Vuwv`dT9ubexIyTc(Y6T_ z5)&7GqeqLU>n6*Klm}ZZc9~O?(BGAuwO$EU_V@*=AI)xVmAj2p`L)DeU~NMqQ|enf zlp^3}9z7W0g>JHi?_}9ava7lElJnPSHA=9ukI*~GvdE+B zuG3{i{KY%HpWRYvMDp!t$kzjWW{-xfY08Y3)8j-+*;`FeA)NqDR)J^%>otNqX;MmJ zBYuk2!lbA`)^>k4_l8eE+(_|etpxA55ZzBIudh>$NcAjzbSqe))^zq?xsYqJCn1%EYJD3iYA(Gq>x0p={HjU3JAoSM(qP4O-Pb_Q;CJOPBm1|P6R z0aqJdaq4Jb*xyA zo9|isDBF%u`TSI_1WxfBpvtE$dhG~xmVx=|iD>h78A+p@?aGHFJf0sBH;Unr3kRpQ zv$tCxj+cwl$fDMCD^%XUl@K~R-D3Nso)-%f;=t_l#TW~-Lu1GlJYr(eA~%IZS5+D` zmhB9Sb)3I^jW$)jahD=y1{{XVFQ>?yoi1G=e3(LRZl1NS);*$Ex|PlY8}`iAUP-)g zlHlu=HmQL!cvsVex4Ga>8rPo-HPXO8(_3<6c}a)g(47DLAbA-hWs+o^xw?}jG-rU1 zBEW=ypoW>`KFHk1asdV5;l4Y@g=_P%mk%vexqu?jew&O?V!=5f@YhWC=C8putMIfw z@t&vQ{&9c^-&0i6$Z$!E!Pu=jA~H4C2?GHNuq4WC-ZTgqeg8X8|Q^}9yG1aVnQ%YL4>Uto!QwuMGaZ&rG-U|{+2 zEB?%b$XoR8y%dL=EJ0=Ebrl|kdiL^j{ac7JVuw-|oG2V;$|r%6R}*s&mU|0Ajo(p7 z0KT0Y*7%6m>iJ9W%X!O8xpJ*T0Q$<9fBBY+b#)6KA%M?iW>E4&_UyMYUj0k2EupW<-Tp-NOc)Iu)c&4Pwrc_IS$hu>}FCs1T_!2rL7sr1`m52 zGhd3swjh3>2+;~K`lK&S9jYbb9L=u997qlcQhQbVv>PwHM)b=cx!#HtQDvF4X6mmI zOr=sYkrk3JdHshiu@I3hG=hF^VETMLdNo1j#-k zs5uk#z8JT{FUVOIS1TvqArOSf0zU2GGtONOqK%z}w%~o9V3=ffuJ;#~WZ$qkzNydO zN* z_8-(iYrTl8vY#aR**FpTW0%0%8;@Oa<@Yv|S~kmp4p3l390HSb-5m)r=$wb@r)H_G zUtx_vt&*4n+8nkUnA%7`#(kX{~`g`Ftxdx;{6p_xs@(K zjlV4j+Rzs>!{b#BcXwt(6hh{)_GG0gZTS-S_rk!2cn5&M!>ww*E2n@{Q$yaGxz zDrrBI2nsDuHew}E=qj*UM%={;O@tLT_VbJ+933khs70>Vug1b1H0D9eId#8?fn0-d$9upYNAw&3V>v9XB`&l?p4L+^ti=hDgFMyKx z6%dQdACAo-C4!>Nm0#XC%_86-_VF|cLhnO_RMNpcmPkEPxg-o#_QC?02(6v?L!9q&02vHxYq%SnHRpXV<^E=k0jmFE^cZ1-#E`G z{Ut@?P6YpOFH^2bOOL1S_1vi<0?|&j45nCJ$Lgw$K@p$kUR2OF|-1YskF@+)C!7s6ckyuctA)v=J3O|qeJB9pAn{Aq9wgLYJhSGhHd~_8#&`SYm%-$v#y`*(cL56#-Z0KRlm$I!iI7 zfDLP{l-8sescZUs#qYq&kxAdnVe(t}i~q#H3WM+&*2V#Z>cal&;Ou*1>Q{O~Ho`-- z5VzUysK2QemRwcyJZlYwgnEa4@P4`Nh}XI+r8VFIU1-(Wr$k`q{8ysaG$FUNNQ_(I zx@xU!hA4IKmZCXcZ#=<)24e!B!^&?qL4>s4S#JIjfci0B%BLjKwAXz{Gu| z?0$-_x};u0D}niW`=@#p!tZatj2t&UWeYMz;*n=I0ri-;#vyup9usahn;S_<2r6Ih z5DD0=h`RZ{yf$&F_ZZ5|@~Sa1!ofFU)!UV?6q5LhTaU2AJ1-oTC~VJ(v2Ytk7g#B8 znAqDG@WyJ^0uXyQTRlv+#y`hp#LckiQHHE=7f3=f>Fp0(A|VlFA9uMm5DJ{3fts;> z!)hoI;VRB$&sO<<#tD3}RE(;355~66FveSL8dv6r$*nn3``~2{^DMGJnRvJ}ar8p# zBafBR!|Rl@BLv6n%aTMmD(QtvUOM0X(T=(cpys|bCt_uucmZV9@03MMBf3~A{00C1DqfgZH0H{Lx;Ol zJ}m zLZo@eHX$5FjnxXRpw^G=yfn(?23WE{Tg*gjoSVR}T=75K?q`{&f&1~j-)Z&$R-rKO zY-|uc2OiASpo3cV*Bu)sL4&e9@+Hv&_ItbNeJd+Y&v~fq0+CKBI*i*B(=8!3exOsb z|0ot}9TkKO<(enyRJX?vt)vo<}d~7o*Q`A*Ho$Paw}YHyys$0*voiAUQrs(^m#~)GquUm=qQvW**``- zgELpB^yr`nAVs3j(YBcpu!9ix(aZ+1RrJZ;1=Hv@6F-I1O+deux0!Twbc|MqE2@Eo zVhw)4teUuS;!6p{8AB^u4=ClplR0&{_xtCB_`mmAzhEkI-3WQdKrBnV*VMk&5y9C+ zh!11=yx$+17y71MDGNE6ZRqw^$O9%(UYUf-<1dxTN2Z$OQzGUsK4h#o(owja$W#gV-v4-lCahF86l{lP z@2s2TWDBUbIpWQ0_N}4dZEC7ZI};pXPF^mUI3l4RQS7`iy&&H3tcntUx#u9deK&AF z!Ea=O@guJp2U4Ja)Cf-V?p(QsjtCyQk~dX;_7_g_y^2=4x)dXWg@ql^_yqUT^)NoD z%x{ZZygiQ_vwv`qvnUhh;V~Z@ByNDJPbR~8`ZMB;xn(raWC{s!l@ktrI7+a1z5DKb~%_rInK)$!|6D7S$Xm z86N#|BQ&8{!!28kut;I73Bx=nNj7YP{c;w6D0|CWV#jMLWI**5daunN@=pa%NzV3< z@3sPG&_inG&ymSd7ar`)-$;-{@;W2yCmCyW#pY|+TPLiGV6!TPct6lq7spEYSDQUjR;9!CS;Sek+n<|>(p3qM zr|KmzgB9YqRG$(`8Gr%&QN!In1{fz&iX(U5Dfw(We%}9WYqHnVaEqfY@?BK0%apfL zXioln;g&49@<%y6Dt}S1kwhYtX+C6j7iPu+B8koay7If*U*BL1KQ8^jyQk;kd)b2f z9nY)!wV$WjE`)Y@3VA2ZEK9o(b`W#tgzXa}a(=&Qq{#Zc?oY!@Rf|c5 zax??qTptlrTccSz$fcjpdVf}uVQr74bCe~TT?cIpOuZ9o+{*c_&d?_scZcW;J|_2U z5uoKnnQph7x{qG|1;b*{M{awO3+8PbZr~nnu!SL!;{;-){;+CtPY?0CNAlMn5@VSf z`f$p&O&CF8L(h7PBCH(?+QD@i{?QZ2;0}?Wb7;OD+PY77i;y^ zV_Y}$iaaq#TZ=+M1r}rnsmsQObWPHw1OfcR^A-KplHFDDaGMo^j zAKv@ioi?<@Em))@azv>tb2$k^Cse5zEy#ZYMBP>36u&=XUTh`w&{7)$~a48If z{mWsx%HAfx&Z-$|pM@UEyVjybre7f*n>j){mqRr8JbV#XDlvS(cq`d!o8t~|)wce?%z=OxKUTq@9f7OdF^~T2ifC3iUxdh2x;{8jDLPtg5*RckO0l?7anQauV-xWJ{xM{ur3B!+8E({C5T!(pzD5s~wC z>n!~%^jrExk)px?A}B$>gTt<@N2mUCT@!|b4epSRS`kjlS8lNB10F-jEgTYKz5iT^ z{I5my|Nr;(CkqNPWJkE}E98#cvXYX+st4tEKx5EH}mu>Qx``i%t^4;Jv{)}sYD5(Rkv_rO>xGz99Uc0v%J zkN1BcN}}oi_f8J6MAz_#!Ub8E{6Rl_7gx3$=)XL5A_D$gE9J6lhlXTzdsRm`h8%M z_O~HH`^NulCg-lS#t#uf<0I+Jy&9U}Q;!_yyxJk`qrMwK?f_2&g8#Rt2bMu@65&^6 z(vdlHo!uJ~Fx_xNK77%V8!^tD)=fU~*m4&b;1?^}r;=u@cdh{zjk(CMu@7n(oti!_ zy3av>EMNZ3EGqFxc<>Zg?B1&4OBiE%=b7ziqvc;=Ab@+nQ)=CS65$4*awW-1uBt(T zM;FXqJvclZV1!d0`&La4KbFBYz_Fl*4t^0G`$bNkKJX7&M50zr{10|tX(cQ+tlR10 zJj64v*B^HBpDd?&nClKBk&E*wf4V9)mk13dS6k4+4@}7UR%|> zh}=r^5cn*XrPYx}C;TU-Fa2gX_@}vof@0A|3Sa+;X&x(T4p@F6x3~&ygwNf+aCzGq z7Z>K%3HNmPP8)fCQgxO7ag$jmb|p=Ke;X`jM4!m=D7_@;&dmXRfje^oOU!ucBEMyDBi`H=TJ?RIO@B6r^UhANe)~o?edm z|B2Zhd}d+@B_=2Jgu&1J;V>~3X?^>FNXH2GO=`zj^W{cal#ui8!d zh2Ry8Ve=@_2+&9mRMHapxj;o_#P9Vt9NSk7pqK%3t(gHd0R?36NiqYn!-FZ{(9j9> zmUtt}GPH15mc+mHNbZp13#99Ew!b%Lc`M^_K7eul3Y@S2wD(%+*$H*q)!FWT(2TIqnJ zM7v7^Ye6tAF_-dx<>Wb#Pr(Ki!jEfN#E}M@^U=o`K914#y0OTV5EudZEK55uZTz#Y1w2B4nE$A|9o+dg8Z4aKpB!$Hf84K8JbD#HjI1jNpCtt1c*&rwso1&qp@X(1B?Mx#ZB2k1 zpCt9S2LevMSPHxC$ocU7dRLE$(w+EqTg>}7qWP=)$j`SZOY=KKQebcseoBwaSL8dS zO@(26Mth(xQp)OR9W0tyk~_b}@nwM`>E5 zr?!jqrQ%Y$#WFkvph0el3!l4!mCgVUD!k0$%YaY#yfxEMN3S0fOYOLG8lfU)d3kVk5g=@S_#GZ zG6gUyrzJ2{c8F_rEajRwlpQ29)hxdZQ5XomF5JQ7CFFOOqjtTd1S`qa18fdp7`Z8e zI=BF_wYn0XJut^{4A0;dd#g!m9=FoeGz+W_hULuKZlzQUnBI)Ea$DqlYeBNMf*C2S zE)z3$bc64d7^92~-uOFw+NnYHq5$9>x|=5KOg|&lX+t*?DqOY6vjH_x7Q8Z^q&mT2 zVzlAj#1{SH5+kwm-^T<)wB8E3Uu&qV6Z4g1C;wDh+92-^cv!kG#7Q8==t{-8e4mhr zQ+(+5*Kf#k*VKDykcht?rAlzXJMm#rokr|gauZ)L^`;&E<>p-4HhFj1nGsys^d@D| zrN3W$MXCXN=^S54|L?W-H}2^?1mgJ$n;FO+ul{RG*FR0q)oalj{~!G~JQC;K|H0n{ zqAcxnB^133HKBrBK=!$EL+m-o&~gfW{MXQGwW5ipuq)YrOBT%DUX}6c&SpOo8naIU z9G#~P>ToA=Jf}Rg`MR(%|3B3h6d~68-}Mdru%mJ2IrSy(EeY?<MuYTV)epMQ59jZicIfDZ?ky_o!N{lhK$Vy3l4m0a2st1^`v z$l5i4kZwedNddPzArq|NN<8 z>|yPIEo9)snmb@Z;Niz=6X5*xVa1^%s&<@rB3)|e>yxD*fFig?!;g;dksU1{%`F>nh$qd*QUj^<& zRV>OYD)wLRjR5AeYM6pT$AxeW=R9#h z?e9Y5p<*yt`$jwC{J)A8eh!#)cQ~VKR4fI=9*K=;*eUV#f$laCr5^YU2Vwz+xrGyw zh$dvv2K*>*2I-)8#E7`5azr%Q#&4OkD6a9Y<+=@!Lkzs6ty|c(!!fzaEe$0Zx!+DL zFR3Bu4Xe>4l0%y76RN2U#RldP^Q<{JnRNZ_`g{+Ma4n~rP+Q4oN9YD6{_VlQl9Y&? z{i@&Om{*n)oudA%WrK~0`4@eTL8mS(I9WBaHbQ7GQFS$LIF-d@vcu1>&Ta+kUo45w z!`cDd1UQ3Y4*&j^^I$vuc!$IgTr;(O-WiHpmZZ*E`z7DS> z>q5E_=OFF+L_Y`W#w6a_es47LFkqK3Uyx%l87>C4)&}@hMu$Kg9Ri(*e09+H$nA** zzOE}<7@w)Lv0Sx}<0x%}=A`EYF*s|I2p^nedGPIf3!vS_-~U*Y@VUC=n(F-xyNFmB zT)Qvuda(o#ccd+c55}&r(LC=F5F_{mU%z9zyG7jtQn2B8vU|CaSr_+O zv}?_)C!HQ6Ya!OP!fqnDgqnCfu1#l4l)wB7L~uJ@+_I0tbcs_aA@An($@m= z`ht}~MaGCA!K0i{lk+1;+VGw8xbSiE?z+RM_bYl8+pbsy6EfFb3*wuUX-mL7fd2O3 z^f<17eJM!J}h245Y_|#G`D4OgX!^c#L}783h z|E>J5u7F8WQ2QYCTk$8T$6=CtrTXG4oB+jjF%WgrlU`a{dd`Ei;{!H7l@_;D4jEpI z?zi_+xlYhmr}AJXKF%m_&xLTFc(hZMKSj1TQmMqp$Hr@*7o^xzD0e_@34bCPE-vX5 z^)(=g0D({@~JyMy~p-38G*LGDZ%MEPmGnIkA|+@^52$dWB0wQ$Y(sV;OV`Q z+n*hGoxh?1eT+IuyRsHxd{(Hovb-4kRV&*A?pjnFhj7nOww(W0>4>~iviM&0VVi)@ z1}#}ZvKfwfHc|8()0$DM5+WiLBi;^Sgk8$7(`0LBeH)EY9|%wg0<^wGflJrXu*X zi=OFq{t;e|AP5#+4}us*T%rz?PeN0L`9a{#C#YM8L}N81&EB2L zdL{?i?K)NBMa<4LCK9cU%(dZ}@iKY1x7N~GhR=*ZNI{-^GbkAq=|b))zp&tKA_GH% zi+kyTplK_`qm+8{9rBh5_5msD`#^d)@sGl|$aJgl#abi2LGICff>Ay6PS+Uz$Z+%& z(vzW?%ZsazKoO7s>I|4UD5&gSQ*tWcy|viPL7&Jxr)@!)Rx|)ws@Tx!pHGEvy^d2xS zZNZ{w#n^n{v-*5W&0e|m*+j4v%EaNqKWG<{_dw(=VZ57fMuQ|z+w1l>Vb@Rd(*a*J z%F}sA^%zx_R(Dpyg)VeM#!xhfR}$Zw;xB%v(wn+0`u07BdO-ox-x!H}}*v+GVoRN}D(h(4hHp8&%JJo@+k^Ckqt<$HKj5ClOG1VK1f zDDWmL`1tNiaP6zpk(B5|g3pVO2Hk^yFWm_*zte^UciBZu;(Lm!K?#>&?WWuVo_VZz z%C(vb$Ke89fBp5?xN#%C|NeXT&716!lAfOK`i`?}3eSi)Z{8fAefAk1ee_XGnKH#) zb%p)O_k${$?)72C((f?u=Pj`4bi31fp-cO^B;frd!jrLU-2zOVzZ9VWP_I!3oPB0{ zDu)g;uoho@H4D3)WSrBlA3CJ^@zrNvU_+salY94pv0^HUGP~o9=4qJo)qmhSxj)+0 zqEV3%!u&6@kaFr-=+L-6>^(nY(&TIy4O*e$*6}!VR1!jSh9YAa^p_qq&;Dz~2OzSViXaGrAPBE1QF$#-{5OEZEyk6M61h;OuGu1kM?q2?140wDtzWeXXaDpYj>3uV0 zVI9q@sjy3T+0|6aCB_*Rm&H{Ba5-{e~;t*o>!uK&$<{kY9Ste?>pSn ztqw{-!4H`5+r%s(*v0mj+ zbfnrjxZ>KoF>}E$a8i;m@ZpgdIPDpHKUc}X{zPc6mi zv+u&=JI=vnd0)f6>P}4m+uv~7ORu3vY8d11zXnZ*t-`s>AHn5!et`R?{(>87&%_l^ z%)*!BobZQs-zHSoCpfkrugKm8OYDiL&5qD7`Q+2)mOXjDSYlAAMvUN3vv?T?hA`{?LuK`z;%HU1VIo4K@g4y zYy^vo5D0})5=g{|@h@Y|hFK^|s*eY+KNA}_ZbgAV4_|({7`tb@hCv_H#EPG$VfL+; zU}{bxf;rRiQPx^${IF*w@tfRKgri5?R0Kf~1VIqWN5#0Q@LC}X3bt*AlhzPv9@4u; z0tz<$0%SBnofHG>fB6}k^8%>Tsx9i2?na)Gfrhn{v17v;I7xL8*tr@-o=mi;p91H1 zx=vK6&$w{(h!__HK@bE%C?6Fi#u=5DCbX@+Zpf;x0~WiVDA05bDrsO|*n?jS$qR#6 z6wyuNkUmx^t{rj1elHd3GcE{%AP9mW2-N|bgmzgiZAVy$^PWSRJmR`lM@aBHB-rDk z+f76JRwP^@Li|XG7#9RV5ClOGgkyw=aX}CSK@bF?%E4|Os;VA$+kuGBcqJn~1VIpl^1=FvA9g(6 z^eNXXIXT&VqkWvcVqBA>w8z;7%iEZ1Om=kki+sT&~_x|ob-&$v{v$}il?&|99 z+VxaDJ6us-0v-kj1_%fUUP@9_83+jE4-gP=Hx$HI&6*~%<<}puld^;`Q1ukv@mB%N zTu4p`2&gU=_RSFds|;-~sp$j+gyQ_y1-xlS=ne$*StKPYr0TABmJRBUCxsibbzR9Z z_QOWcX06%w>z9eS)_iW$IJMfbcl=p#v0_pHOW*eAqk@8?Wzp2-QG0Q5v0fUq7<&K4 zJhacEp91-aA~8xJ;fb<`&GX5OgV(U*0^}fmv0UE-dxEjmiX|`ki z?;~4f?N7DP^Kw`p1A7X@uMuE9-xU0Y%*Ux4_Ej5epQX1ooj+<>CpwS_$piS}i71KN zpb3lUk?mf6;q-S0?)dRr21|_1G*h1{YIFBk+TM$W2fdn$razV|yOT%*K88}cHYYxq zyPH`rQw0q5Ho2F>S`w8#QiVI8MLr1=85c$d58rilE>~}9cF7qk{kmylMLRbR=iku? ziz)Wcb*IR>spK)P2B5m*gH59ZzV}e0viqI!CQDJ&4X%aRm_3BX43(y%g3BK5&r8NA zuje!IQ^z9)F;g&owD@UqaslchJR%Ws3F$WpMOfzpl3El{FEO@K$v&0ahI;Y|spO#5 z#K*GJ1tia_q8C2c69xT>K1XH!Y$0ZA+p^%_EaPex*x6&?G0e)fqGCMvP-* zqeZpN$7k)UN5$jU*|W1m<`xb0Gw*r1PSARyp6{!Qrw}+{-u8VkDNGO+F}xUikh(GP zn-PnBBME6}W0EnO+>L)*o-=nCdaVO^m}7iO`jQnuIhpQzX_H@nCh)QJJaT;aBSo`A zVyOP85MiRH9$AA6*VFK@0fwfcy;ZpH`xqLbg78W;7w?p^0nOxtCG`gsbxZqgtuXD1 zNPZNx7DY+hA`wDT7OGB9h#OkxJ{9hrV_%z9i31u^2?g0L2lx$5PPy|*LkD*3Iq?ue z2c8ep>Md~pK+Kz)4Riff@mKwn!jJ(g>4(R^#lLO~HIy-KB|7})p&ff)WE;Lt9i8tV z$vPdl0M6_oS5Yj2HMswDfN<#bRE&Lt%%X2R5^r$a+k#q2yhkKj4SDDGjpx6;-on>n z-_#5;^oEt_S;^{|q5g3NC;okzG}y|XYcle$fIDx3+^%O&WBTJMbPgBmT$wd~A(NRL zYqEq5Mnf=}$GFJdh9RAgXrOv@69DioM8h%mddUR%+nCCriK>V{ed15=8ybFd^R8g) zD-B?e{Wg${2D^hUVXYmgrwlL4XCE*MWXh>c>3(R2Sc^@h+=?R27OQBnJ+)&KFY^0} zwVU=wHX~d8#Ru3-*Sjs3Mte?<_)EFh4fyYJvaz#`mavVs8z4@u>-Cx+?z|jq5-Z`D zwh}0ZZWCgmuIDrPnk=0WTkf~0CbEUdpYpg|V(W>w*3Wf5=eOQ=JdXb?!E4&2S*2dr zO93J3$k!|zo?pxjg8Xg#-VAv>M|OuIk#TXYd0xa#^yx-P4G0^6ii!co>%~iqFLxvz zFpQMtAQ2}Cn7HANZ3ViohRvh~YFjy2^>5A2NX}rl2z&uS*$~u2zsb&lINa1TpCJvs zqf|DzYC~`w$D3`_(xpS_wcl-H2wC=e zUVKUHCWEwZ%9fjLVVCUI1N$%R7EjdciVb1T5SsA4fs?aYbnwXx@uxE!8fM%!xNTP2 z3DWn&f3~dnNuqGLUDqg=y`-q)_}c5g@@}og{IgR&_#K}QFZ;Brmdsub-5>6bz4Eid z9TLZaKi*&0Y`Wo_M}Dc7MNRVPleplh!&R_=C*KGRHl-#b9r?hDolrD9OZs=RN~b>( zOY*h`)pqJ`_xQEDJ3GBgH{vnDQ6GxhJ2(a(FG^*3y@7#dun+g5Q-}({Rg3_$S}ovZ z((8ssX0MvTRucY(``S?>2Qmq@I-Lg9PpOlh(;AH`tbp~+0KQl_!G-Uv)^li+Bh@J9 zTO=xiRo)zk9qf|5%?B$s5@vS=oviq^s=VAyzF?cYJ<-jHOW`Bah;+r?Y{RpdX4md} zA8{&;5K5@Xfu!C^NKha_q--1;N-<2)?ha2Fr*gjW=q1C{iOQu=H6jc(#toII$P<$ zG>Zg(f4OgH^M*WgDk@OFMC%s4UhN3podgY*QZa{3JUBz;hVLRlvwKo)#WuaY0_O2L zKt2#a2m6$h3pO+d%ah7k2#h&{{3AoZUf2V?whFU&D1bp*@(Qh}jyXVU^M_ovM-C!) z5#;6p{T$>W3MsCv%;G|2RZhc$L7w$-64uZW4&m7Jz{-{)?-r6m?@^nKjbuq5!W23PF4Rtw{H^54d$^kjg~5T zU#<$_`^i$3_3i!iOtmgg=CSd|uXFPTr$hNX3nnSM4}9_IRkG1^%1;`MN<@i8Z%n4H z0j;yPMV!!TOu?}`ZKnJog38tF9|z3D@N29i832h|?=p(^WKd5vnONHZh%?y9sK7rz z)GQ23)cOq?^T*z>jnay3Gj>+*4>_4VkkxFmDOSH#aA0w{*qr|$a}}VAl=mnEklrHL zjRXgHF?v4}**x8%tNnl)8a^I#AOhjEa}c7xnJ=s5fMGlGZ;kR8Wb_lGWR(QB!|Ny* ze(M9B@w;bR-{=x@HjX92lA)Lov)YHfyA%M*tI^vnL{>bMjom4%45*|m_Z0PWX+=}T zj8>kzwde9_Wx3%;iv@-fci+m(b>&4dzcJ%!66;>9YV?fsqhORwI-Q|r zp{|oGIqY5Y(Cv-Q^|Q~rlJ*2a7oqFJC4;&lXZz7?$9GItTUG?afRfs-?+O!7s;dd` zXZR~{9zXSDw^VBM_-r=X(NCAEUXNPbF7+~NKIvsr zXaj0;39I$m0tM>LTULAt9TTh_cVHvcLZ;n=Pk}d>yyawQFV|tS%d`92W!@Q`v~4+g zC^Smq<46V!{OsU7#16XZCWGYO9Fpy>jMT>GFzaDC@vKiOq;;b2{u5K~j{G zyIC{v?(ps>QJMKXN5a3+sVBoj}i?2l5e@6O|KDQc!)uyCT2kmAfaa}l`f)}gDh)wIj zMy47yZY8CGk^H1y^Lrqki<$QNS?*Oyn`}HGpx=*H!ho>Ef-3Fyc_`WadXQUfUPi$hONYBwb-nKOkK)}8}{EQ)ng*0*NN`UKGhy{_ex6XvlYZ5Ur-3PNgAfK z1Fo9y6a}#2#~1k0^FpcZuIJ80bqu;#m_*Ms+3{h4@?Oj80-Li-l6>5pty;J-)BXD9 z7pBAJ_EVu?a5TAsmVm!gw3>J{tBA5(y(*A`pE_&31qfR=$sNNIBC!U0^etoJ_wQzr z$>TnY#af~v4rDocSS$^qsD6wOn`L(^3)8fpn2MvWaO)uxrZ`}+;&G-~0eTxUJ3}Au zrL7;_5a@0qr#kdulru2cS#+GvqmT^xg!O<(3N#O9bnzUk#T|n%kuV?MGp!j&wt7?H zgmN}y?^BSIY0jAHZyQ5zUfzl+{#EaB#;ZSq^QQ<$180CY@k4L|W1-a{V1=tXc9plU*M%lyGg@hl)17PLXS6 zb}c@GGEcWP)<3@cCz5m#3ZLg45(SJvaFvNhhildO(P4wtBDJWvnBlfRFngw($*(MI z2K`QfvM08v?1tmpK;E2!LlI;&tNyV_Vkl^q0J&hZX_L@;0BYabBDzoHr(QwIr$i;k zLH=EefW76#E6?hJ+&v`w6CWV*{OL2D_afav;AxGA>tBd+IkC)@+0!{L-NY<4Q|#+# zla>t|`ukv{?*5s{Zi28>pAY-zLG1M>G;N5*Q_r*eXJ2hE2UJV?ryX>6fECwG{^I61 zJM2I6$@(M&+rjN#c&3Ud`4jk-EBM_CPS4KP^vnGQcOsixoA_*L#T=d;d1Nd!QO*Sa zSAtJOn6}+Z=o=EM!qol0J^8<}Q;RWrrJq8a(|>BRdLS|X{0A6KF$DSW=KcqK?YuGn zVaERbf2}pb?Djk2hO*-)VKJ}n4K7o$0k-CQCnqox5)zs4{{?Li#9Ji3{DjO8u|Ca- zpS~xt|LO1<$+8Q^a!3JM^5d0B;6Fg?P=&E<6!ZTi>Vc{NT#8Kn7ho})ICh^C|EKrc z)3~v=|3P~A-eWNT*M{^Yll^~_39cdjKS)TW^FKo%(U1NIPG;#t{f`1_0{zMo|0^%x zN>}Z_iqeP5{h#iLy+gA8dtZ~i(ErIx{gijkaqTps$F%ZK*r# zzZsAt)t*^?{(8$aK^Q7!Uu5*XwH-T#yuIpGzO$M|san13{e#VeY|tRk;|*2rk`(~8 zcI{U1*cYa@$mnp2pE(pOcIk!ev)U*IS$_C%zLx*}7I@itbNt}Nh1NP1*>bI_@jtS7 z3ovt~?)AXG{64Jp81U4&cMteoqqno#Hc6Sv#pGG@fn!+ZpABkIqZGdabZH*DjgLpi z_09-(SM?`k-34MNqlB0 z%mlXH-ye-@e?A1;>3t2upqDFlT7Mj0vca4g%TO@OEtvOxE#}|l`G5e)BtCq@7)^$G z@w2k&a3?rq(CHmo3(#2W!oqMV4|s(bo7N{b{%olKMnhG%lYyxANHcEZi&dlM)*GmT zan`yYj+;8Y`&I;db>$PG^j;xk4qhI;36XmXyKQ#+*)@t+Z*c2ESb3!K>r1qF8V$Lk zp`2S~KK(9FT=SI1fuMW7+MPP3o4ao&%nyYBp24l*U*OM|A=pfTlaj2LYnWPKyEdI9 z9AE~jmzx%g<=={@R*6==iITG&mS1NxJ{Fc(U_iG=Kl^n2G#yXDs&xkKm-U>$)qsSZ z>Z$XHgKBHWU<;u&Uo-R_jCP9kC(~4H_V1Vsk<5TcJ&Y2xl3x1kr(VEs8b0W)HChQ~ zve@jTGpp_hIhWx!KG=lJA0N6WWwIEDC%OO@Z?Xlr>Y8m6WSU_z89Za5e46`=$~r_H zhkb7mMt1!qYUi+w`VquVauo#E&DjQNtJNaoc^;CJMK`@^JF(D5t5Y7BobRwVv_=TEtcr6X<+a=o6^X6zA+SfNz* zs@e8?Bw8Nt5P9BA)W4OL^~vj)9tC@|1&f^oZKlU}sT-VgR&TNtcd{N?=t@<4v~BAC z>TWdD*c@kC83IIeYY9sR;|Sb=Q8WBP)1ALKzA-=~qlT3DxD^r`%Ml}s8#afJNp$kz z5p^tZ$#>1?BxtAOMSx1U=9N^QLkQIspky3NLNaBR?*B8Br_S$#;8^fV%!32GeR>7K zt_O3ur;s$`K?g92nG-qn7+X1bmIoi-BI%RmwI5UwIzpm9jMIF7NPec#h=E&Ew|IhCV;<)3j76$BNZeG&;4&!Cl-3x#{yt@{>GeDPBRTB)M?PV2Og}qdz5X@MJw#XEXnIg(&%g^@SN}+6@lrXe z;sdPS&36_r`uulT4+J2J<*+C{OgY~IeBohs4w?Z5iFFZ(TFQAOLLPRQ%Ovq)zjMQsp@#A|)WuFuC6KvGzc@gr6;e-wE47)tI@LZCS)Hn1rttXMG%>D8h!51RjC;`t!j!ABk| zZrW0xGpqll(afx4J3=-0M;OJ6MHXZG(`<(J^Dhay09a)e(3?`*^yF98P7=HrO%f+%Wf_9>Zgy9mfZH zPoAx#!?x%OQnDqHTT-{Ks2KkH(uE?|ZYBD(H85i3qCcTUnjlY;jel~Q669nlfoguw zgP?!7Nt0=C>;Jo9SJzwG7Z2m(%%9_J6Bz zjN|zjs$UyaFx!r&mNo;np;M$L&XW zFUpgB@GUV6yS)c6;)|dEh{$@I7a<}c|KRy)i@}s4*1im!UO@GxKA^S#sxB%Z%NRYTof{pZdg}?ukW$5>s_~4RwFw0 zB)21hzlGabVAJ*Xc2&mc2~@JkLQY+cAN2H@TKN2)z?^7&g~o(`?TZw1f$n!kD^hp4(pM@ zWH21*XG#izPM3D+o#d&xI@yQi?RLQ8@@~%ioJ%x9`_~17qaXESp(TV7h!@8CJ`E4M z${rMY4*1mzX+7)I0eOOmBLzw$lw~L%wpa+s%qqNC*z1pgzg?7g<`XL?wohLn+Q4k> zp(T74cuBDXk2`81a99D*&=z9?plQYAEdjUClrKlN^z7Ki#iPL;=!AZSXB9aF0P z3mcO>wvR3|-^cM7?4xr`^tr^mw+E6X8nGU;O0@VCtL`G)f+9_r(QF62S?{ob0)p_S zxqWV-H+{0}%EFMxd4=daKY?9c=;hPlthvkU`RK}|vJHH>3{{kxQ78wDFQa5&Fk|20 z&EpM7w0CTXZ?=5^;>q1caOdURJ~^YGO$^6`Aqg`aJ*k;($0G7?H*v}j|4SRFv=GI5 z0|svs5t00vHTgBuDX)}&$ci-cPPLYCDb07`xcAw)qwYFwgL`Y!kcB{a zhI>V;#U}hj1M4OC6AVD38DVf_7ERTE!m7p8gs`1Eg&mJ3VvIO7Bf}gYAm(BX8Z*^7 zm*o_R#Ou&u82zrD(^z5W7(Ra#&#woyjN1upE-QND&_WHINT*T_ZhS9{VK$9P;MZC3 zxkZnnqnBvHqY~{olRN&^wInE+335?wNvyLPvg@kM%dAQLglQdJJu|jW+;ewy2q>va6ApS4@CL;4L#H!>GKe62 zV~*5MPdS_fgg{>aUgcN*Xy$7CM2Uf{64>)x?GSA+7YJg_rilM0Sm<54606fo3u&FX zHP3eJreRp*3M^0N#v!8w#P%#7Vz3773?-VRdM(%-r({Ey!$+*cs!WL1kgawy5uV%B zhFGvHz|mCNP}UIp2Wxj&frvE8_A$D<#(bV^OcHyK*?OBjnmkuIsS^q~fgTUIOoq{D z=A007NwH&5{bB?^T&mrsM6>XI++g$e`{en!I|@dq>N9okxe-U<*&|j?4Fky#h1pnD z-3O=B67EoG&X!#?rw*SZ#8P3KQoe!KP3b_DQz}xCy+qkpVFb|z=o0hybw3XTOdHA=%YjgHWAh07lH_`)4{m%s$k}-!k>7QvzD~*XKZdGj zV7blDQRqYAiY@T%_jc$__O0~ZGd%WsM2uh}F^^v@mN^tBYY|TZdKk#d+ z2P}cnJLD~Q+bx?I(Zd7P%_m#2tdceHeUEYHnH2E}3_QXsgG@RX6r8!U2Yxq}WMKr2=e$t-GQ1e(9SyE+CXp zm887OeTF%&3HBl8cniA0$tS%&R$s4zLWCZvvHB>DL&D;}1z)ujW+Y-I`{jCduW_fU zKI_+Fr-6iwLwC_V_$7Cio4wEn&$Xujcav>E%A~gO$EFwixL-^!jW(m_f`zkX7l?pf zf=^Db%=m2OmfG6v^w8&-6%i1`0pJrGvZZ*HCvt+r6a~_X?Q$uW1ctp zz{~9Zhr}8i2?2;2&18X}B>ilw1=gSDM4 z;wLC8bpkmiUt9*nNzqhj30sM+NJ!6xoG|+}=e%SA z=DG2Lu!9l!vA8-g?s``>iVjn%O8r7b(}HYO?=t8 zj%*Gy)QXM%^`{vt*G!%lc&SaOA0(y(5A{fB$>sO6uI;d78VrMh=AF?}1AUyQW)+=k zMd7OFS)R7FzCQV&*!tJ#*2AhW@^5c5tp}o+lUovHg*R5`wi4_nAj$_7{#vFitF*g$ zw;}}r4PSvOrJ6Y5;#dqiahp!mMbAdxgI%PGK^_OQEAtz1N1+Q`N z29fmrc9lZ&;`cMPdZ2Jx&Ja5cQ+qRY_!hrwp~WXSrT9shy4{QyO6O2AfB5pMwEH+3 zFMR81qGlgNwiB#SiqP*=Eo~$N4`gbz1y`+JL!j_3uy@jPo8ZHj%nO_?*Y;z2|Jh*8 zXmzX0RPElMLm)I__Fb`9&#$u?D5M0E$>szE&UzVNLa$SR;lbunW5ISEYLfiNw>;wT z{8McTC2Z@wkt>0rJzLTcqd%>NrP>wr5Da{wrKzDaKh7{_qaCdG+-do94Nex{fCfBc z`xf{`>W;Tvqi`D0nDXE8qp%tw;;kf5vXaymbe*lYkQRSA56N9S2$GRMT1R`{pXTlR zqr3aL01z=MTf-7%yna6JCWc*c#>7lk{Iq!w_-Q4wUf_ep@cCGufh`j97-EZ&}XXj_gE>55) z?4^+@RVDLr(P8fXQ??oTLhsyI?RW1b;EpJz!~QZ@Gu6;19O*!6I1QKIovk%d;c?kT zN4jB&>0RBMaTl#P1hYNqYIn*PTIg-?WNg(TyTt7p;K}LIHVRO1Tr9#x6i6f$BU0>` zAOwVZ*wK~Ben4hDECDY;Vr|xQtUew|`qV?qyZ7{PlD*CPvQ{s_j!f5xormDpzGooD zFr3C}xtta_&euUTJtsm9PUraTP%Cm9~CcJTptVzopB!r6pTZJU8~zNh3lLd+93>w<-IGFNb^YyqT<&bg2VpJzqzZ}EgX!BK=qQd7ea~=Va$NMF$_K*&xh!zAE}!ejtrf`SghLSY zgr?xPE-5Atr=@cm-w%)<5#I|2<~D=ugZNw`d;r87N1os7;1PHcjsGGZ+!6`_Er$l= z_lto0`T2dkN(t!e>l2fci$BpGqzV^h0fIBh*Xp8SowQ+xtfo*V`%-_yo{PUxWw=FI z(8{hq3bT&Pvne?2$cDwvG?;+ybWi>;er)dNMl|yzR;5{yzCyL#GHli$6WLbF6J2rW zuki8;&I<~K+Tf-~Eq0@#pXd<3$ngs9TpWh(Gk=AB=CMVkeK{4TlHk}eXe2r#RQaCf zNUj_qGDz7-6{pKdNDejY zyj&#!KrnUQ_R@Akz(npw|B56p(O#0KJ)d z2>VT|+JqnQ^VKalxX1`EcR>iN?U*UOQn=!61t9Z>*vOnC&mb05cp*qkI0DTUAUJla z{T3sK6w#vfEhC6P89S;ZSPlLFN<|A3qc}Gv|7`>F*M2D#Smp(k9~l+tI!D|H<~Sg* zXc$JR4ly`HZaCbKuNfXgYpRnPOgD{OwVX$+agDFEo6!V!Tmi%=7B)HJ9y7XN+!ee18? z5ee2x4uP$kAldbgWAK9g1&sbat4r*^(zV~DNGIZJn96~jYm3Z`enEx>j|pG~_k`I^ zmoyy5Af)H*YLy(-vf^w&ZoaQ3YSi(O;N)=1Vs!iiW!RtACtN3tFWRy^5?hLBmA6=eN@tff{>j)y`+DSnjQlVl$vOS9U7flx2bx`9TWbV{7v^7qj;xI3E!$tC{8 zSL7rq{i8*9#<%#x)ueBcwD8Wt5~X7D zO(P-?=3L4_Yqk{Cq5B78l9j52NGEvikQ~%_7OWSsR3a@Dt8Y1R|}8!F3BkI zkughzD;Vv@*A-z%gD1z+c@yct?>r)%if`XB?rbn1Or%2CbS^L{y0D_ zQ2ksir{Vxxj1D;&HB$Z=R@G^0r5?JUOi0V@N)VSSE2hYG%|hlN6M{}Kr)2itX+lSoAwK7Z4T;g*X4d|w!FW-_6N z+!jPQz#trO_HA5QA6@1RArkz!;Q*2*gjScFtbTBAaWE`72)Dqo>jkU!4;Y*{D$J5) zOohk|iOT*aW1DG6U^U{k52;v)v*5yO#SEO^-75NA|b(p3S<6Dc58C%6v|eVnqtlRUb<9Ib*`#SUdYavSe22=^=?E{^#U ztQ>MXE*Y^}q|4-Y(XkII+X1BpOdjN{Uhm`}cs*QD=QBc&C*TG?a8fAp8>T7VB5J4;*w zh-RUvVUtX7A&$UPWM-Aw-mF(cnS#&@md(;O*= zNbt^HnxX`gyAEbD(Y(gprbDM$n?r&qor6aS^iT@_V8|jrIG)FRNf8zm! z@F)|o`dy23XBQ}aA_6O@QI+hfj3TSSw7=T$d|T6-J?3IF-0~c@52;e5Z&T%JlmSXN zF-QDlNfj%{}dY+|q6J^-jLN920lBpAP~ z!4s+KsHQiViDeCGoD9>Tuze|l{UXg{2O>v*GaNMg#(2Ye_J-~ZgrYixPz#!pz8DCiOT-RB|v<*hOzgr@}eB<&(s zk^q|`;CO>nxOC=&!4%uI+Q(i8n_Ld0sT(XDyq?orw!t*I+Ai=`Lm6nNmQHx90Ksid|UgA??fLq=Aplm+lh4!B%kAr z8WcInE4M_F2{)`V7+Zb(I9>3BT?m6>*m&|zUOJXLZh>$PTub_vM_kS3u`+RV7B`&y{*^7am)zWwg+n=5@v9m%5nRKhfO9a1HV@ z{d8^-Pd$6oN@Pu%+b zl}@ih2HRG!f{=9i?=CZ-<#5@AN?dJc%%_lp`PTe@nQ9wtmPgx{FTkt_xK}I|#sP7|UeJo@iwq$SC&p8%BShp5yr>lXrkzEftW6rk4g$Ochs9lp@{(fV zj~ry)A9*59PBz-G7*={^-)d?VW+pZL)9Mw$VyTi(EypM3WMG)s-cY^qd>)r3W-~}> zZu9bIEz>MF6M?QXZ9ZxLc0vOePDi%*B7!pSDZSUuNpYXWOf9aO?P{cORR?JunwF?g z;A4NW($Q=MHcl1dP%u5XV!ajBx*i8ym*?YPf6yb5`iPOxR@w7q?X2Lhn;`(TOvIPgoM=C#)FxZojNN-)spF_uH%CBDjt3*1H6`J1OzU{yHc2VVTFj#dy|xV1Q2?`+GLz5_Bb<9;4u?6)&D87}=(wN9YBZp9 zg)a8?X1L6>8S^yawQ5A!IYhErbe+Uo9DKzVKh>A-LZYgO3Fq@6j3g`VeGzQPC;txA z>#ybsLh9S02%Ssne0o!@|7^Kj|FAu@v zKsL1|4Xw>XQoj~T#xEc{?0i5)FbXD;eN*O?VR5|HfJeUaKm`sRyr@;L#RNhpbC;{t zKuc0*BYERPCgvpap(Y;z?kf$FpHcMvQ}`~q{)7cO9-bSW z_V`Yqy0Bj?66{$eaZau^*C`}tRl+`dg-je~6a$kP?Rz{ zsJojyj5t!w)y7>LTj7ZpjkG^n%VnC{ir7A-Q8?73i%gl#vBjL(X980)KT~V4%pD_C zXpDvB5Q=G^$Cn zDI0a|#esqkJhgc%_iSBIfkvoMM(k>fJ?j=na3+J5RZ0B`}qh7OF7%ww04<-Jbs#W6?^X zRv@-jXQ4(GGzqxfyAqDYQDMBhax83Ed4tKpPX{d8{W1~{?Pte@{))Ua-J7}6;%W|= z{gtxJ`lL2KbP)Q8?fpt)kb*U*JiN2b{gVax@cJT6CjZ5*^M%%l`iDzMygYvKzZ5$t zE-$+=voCA#&m)|lj5hPE|I2?10TK((fFDkt%mx>?4AP!b@b{?{t5_7S`rx>L?%%Qh zupC5GTH(L>J6o|88p|K?0LtmKPrPNipX+~F|8++<_`^5ZZ23nO`nSIZdG_@UNx|i@ z!`1(*k+X;NZ_%dwApaiqkOL5Y^ZA%7eG24Nb&~i);I*X5&0mZ7vk>?5n(*^lzhD22 z?YV^LO;D&>m3rsw4339~=O0$1FFQ;!#KXe_w6E4^&r1$5>VQR(z>go|WpZhl$0bh_ zahQ?^C3@--b`l-JSDfp)5$Z!!`W0hz$o`M@MJ-=;#T641jZup|_taw;4g9 z=AmfiT)mDh`O@l?xuWG_n1=%*-wB%7^NEX6gExQDc?W?S07rVLW4z<7N)rO0OeO!b zHn*z_-xEzT9Ddqp6GkCjhrW%5O!HS>NyKZWK)sS*$_(70nA#)g>Oqz;Ac$Q0Hm5k2LR7)BTO-;Z+mW>Mutzw5RKw7-ZZq4zsiqhQZ?cqhw zg58XiN7A17Z-SIa@y}D!LP(rcy3nL-j_rwfA5P~tD668Fz#2cseo`YbVA@n@C|DTM z`07A4TfmkRqWjD=1rZE}2qmx2R`2QJ7a#EeR>&F=z=SfL%QxWEgJjXDh0-c0YC@JD z^nNw5_l+cq%q)7x{bd0(Z&nQ@`|=0rnO0S-J7^29Zk^vF0Uoyx%nCvDKv!gxB|qE53uW*K7SbP)eV-jfp(^rgTFm*IThA|= zW*4voCS@h_pQ_)GJ|};KP5dc3y?w4Cd^h=pM%PLSJr_si%f|D*V-0rl`JF?i4^BNooJ?Qe zE`-0_pGLC$v0kba`dTR_<6$_~AM03|?6&;}lbN=}{J^?Js*b?1HF$k(=6N%vh1l2t z<)EJ>=Jt21ETc9oa5k>NlkE+;H|Gn`0QGsM4W^_!^@2Ru>LYdH7nO>YsBxaJkLt40G23c!i5Z$oCcMwpHF<%QIF`kOhsP_deez1z> zkBkXlo4&x-gtV2I9C&f5aM*XCJi}LQZ84|EAoPH~9Kl2mggVn|2IE28>YEITti2j_ zYF8RIavX=js&%J1kUs|$^Rdr#jRbZ-JLMZ4<}J4w(`l*MMKutE;d>$Qv}1m;lBW)zr@qnHgiFiHMo|u~z`0+nw>g}zektJ%>+3tZfjDB3?c-yr z7gI0022E#nmTOB%)rQQF3_jr`f@`Yp(xqZNuE>e;%gsT`hp|rP@_Q32PEa!y1_~UQ z;FYa@`;@}Y((Zaa{>GSgBIc=3I5KEcxdIX6Equfj*OT-|Ry;f!`CHq&;i#M*A24sm zrFbW9u_j;ivcoN~j(iAr2vY0KbrTc=L$6eAI>wA+#fOV;WTSuLXjJVRdHa?D9kZTG zj~VvEY(m3WI_CPU;$?y$4%f2dk_P6^=Qn#=WX-tW~J|3Ku8SnNHELn%0< z9T*(TjN_X9p7etWN5!mKRBF%k%nuK0QX5$QnZ&8|H`^J%1KbG5brQd`;( zuT%@jT4a)Avm{^x^lZn=o4L4$HrRN)#PIq=chocJW3x8S!2AP^F$7G|JQv?`9XN69 z7rS-p$1ty8Ze0hH(Xo6xA>BxpmXZaRCoC&9R|1A*SQ)Ch!R?J6XNwtO;1-_X<6@ph zk0IA^G+}JQ@wq`gOs$qI*_F$vZWlhYrHb)jVHws;6Sb<+EK<^gd$Sj<8bEz0z9_NI zYLYpa@FE-^*b#@3^QS{iI@)i%J4)03T*wRK&#ax=q?2GNRC1&Da9k{{Z=}vf1%JJG z4xi10rp&N@thWY8CsXfS?F<|(*O6k-YWV-yXg6G{)U;S_q+&Mx73^}l6wctmY{+l7 z$*UCS=eYvYp-*WL6Dew7&nPS`jD&&~JjxmQq@f~Yr1SVjM2$%o4I!72r@03~`MnV* z#yx$faL&;AHic5NjXi_IHUz_^;-|=K-O*eDI1Yz(IQMsI#KccA=YK*|sylQ~I4l4JXfbgYjb@@i^Az_cjhE5bAg4&4^4?+)&y|-0 z3jS)7&}lQB1KVKKs692V*O}C=cAj#d6&%?PErwJuJZojQ!cM_NL}$9F-Kc6i*yegC z#evl6F8K>f=1Src6mN$+_)TSUoX&s^o#IN_5aaH)znIm+fDIF=Je=6|tburu+RoTL z&!}E?rwNst$WYXn!@+|JWfOwE+fu}mbQ92)zhomWKjMeqgIL!=m147&6K`~}t8{Jm zUt}8oKzh+F=VXJ1jZ}JFlp#)S(y5dJ)lx+v@ATWLY@Ynw)>cl3^QZmsRELuVs<-PA zLM%Q{)|ZEKSPBY?+38RVJl$(&ORqx7OlU60|Hsrj##R1>ecO|5+qP|+lkEwU?RKu6 zt%;LsXWO=GGA2%T-TklY{yfk9a=%+!>s-Hc9mn@P5FKtDo3lJrXyvut%?A#>3BNmw zXjpf~Mv6i7VCvObjx&9p8K1+1O~$C)dnBC6YB^@K zx&~p+e=oBe++k8Ij$kDeez;UL(u#%3=?CQhsydH-!ZkTPRuE72x{!|iRxD)oMB?NF z05l9NgiqOK@oZIk6L!e~OpG{i3Qy9LId6M|FWL+HabOz9YE(|Jp(HT2kuG=lkVu}o zonDXpI;$p?E}1fT$d*iq3C`sKN(~_lZR#!tXXILE%Bt0xHtzRS`~FR^9Ii1vh4M=> z1QKcp`5q~Tw&SQtBs`=qUkaJ3A3lu0LFFcr-LgaPY3iBNmH=+ixPZ7d=u242AJroa zvou-_SeDrw8;WB-*Gt9A3zp{14nb2khfl-Foncrlkwe0>j2mJYo~e1gTUlCz+hqg0 z9{5%!Y|w7QHDK}EH|Zkb3%l2%R7u9{uJxxNJiRQ?O?@)7P9vdav%sjDs{|0yYrz?hLrVG?60WEpTm;mFu z7i5hXj`TMQGX&X37ypiA8D*CRxtB*%3`Zf~Z7teK9da=3`^xX3sf!?_Jztg{e1`=hOg2!+n_K(>zbprcM zU(8o66sfUx3bGj;3~zB1v&+Qf432t+OG&)lvS`We7b!OP0p}bcAB3pr6qy=KdCh8V zG#T#dzF>%zS(7)#r>b+HrEk3XORuRDi@-OkWL;EjVmXL!a$dvIGQBp5gKf#(U}sn@-Ko&06#CFnI_@4?VgpE(s5 z7-cn;Wx7=HJrW4Svc~u$K^@Vs9u3ySzUwl^)GAU=E?#&Ca`hP5EeOnC0Pw@EZNj(R zVo5Ees<0MTQJ6u(Nao>&<@l@You+D>CtTWYWN{6Vrj{K4z`!G2S!xqqE! zTGq4Td?QOk^NPxfau?eY&!wy)8U{)pdQ775OeB7N(*n zh7*1($I_vqTLI@a3i%u|W`k^FYJSXC{rt{LU+DBQNOi!h1}1lY*y?e_ zs*Y0;qB$+UDc}l^>@80Uh{4CM{MM!pjKsll5}<{mPZ|H}-Ga0S%^qt8WOFLXqp9Ni zYu>F*K4o+*8lEI_J9s(s(ytXqqg|dC#PO~PD?M^CJU!5I8VY~B?3r zt^qsWat6%aT6tgDSso%4cc65_6>+p40}-l=^S5y-CFBlfJ0}ZuU$(!I=_^j>WU9X@ z4TY3Q5HSN-|7$wrIPO+LwIQYIy?PweHmIqjb2cC8K{Tl&$E+!)>)|OvQ&`Y*twm`} zAI!*pR2}>dm97p!WK^O!xDJ41K!k><3PH35X1#H6C@4V0$gwwURYNwYVeVhEs?{Xv zo3O6eRJ!G^sCyyY($EfW)k4PTZhp+#ve!c$sKQ#|PN^F;;&1TKLDGqk!0R^uG%(+2 z3T3jKYrvtVV+OWX7a(diz(FTx-V}t$OIw<(cxHxdVzJiqllmfUG|bvUKZm3WwNZ6E z34-1lh~WPL~j>^_uF}WCyQmZW3|hBhL2=-6NMX?Xl6% zuZ`W@5DS6RxSdYW>YJGnh|~5sX%-p2G!#}W=P)o5oU80|xpNPri{dy}Wwh<8@;~Yb zG$@C_CG4X3LyGYG~vqH3{#5x~CUZYz%v%AcV6k3<+X{vSX-jD09Q zmfrBXY7-z_nE8V=ujjF#R*g<9m4f!}Ik2HDTTa2uFlOxRC|{R2)hjVp(E!p;Yet4& z<}Y+|p{!k1_AH`l0hz3JK8^A(zKA7;G?THUlGRRgk)!)^LZy0s!NhQJ&_acIlXjGWt zRnl}HLaaOe=Zob&7yd8B{a*t?aQpeMA2h}xb@Jbf_^Fe@TfYA~WM9Yk|4NkbHq-xS z>=I6IOFr;e{lBjx{$K36FD=+r?1Sa_xoZPOW-C6~{fvHQv9$(#C%onAx4Y80%L?qb`n)*LT|rUWXq0K-PX+z8 zVl?p!K0@-{nc}%v_}MoY$K*U7(;rB~!-FIagl3wpGl$`{`vX1^*V)+Sm(>J;Z*r=} zvN6Ylev3)8jx1Gnk$~nC2(yl&VMBa6hN&idDcHeKLOwZ!jGExT8P50>DicZS4i@iBRG?Wz9y zxcpcW@bo& z=sX3!BBY@0N*f14@xAL7W{#fVH0kdje?5hh+HZTHvNcPDFH>Q`A57bPeK4t55s&BL z(;lPGuXk+_v84}&M@X81KO5e_^AdZTNETrMj$pY)5O%chW+*}VGl=j%=gOEStv;#~ z#;E4ZUj6;{sZC4Rcb-oDVO42+y!z6UNy6UtlZF2nm22(&jWTRKK>INN*-ANl$TkCV zm_Xux{t!>m;7i@6l<&r_ASp>awWct_m3?~OCl7D>1rPHZS!Sfh{NK3!<9F|bF)UU3 zgF+pI059m*>8`inLIY?4U!+Tiy!hp6-`yPTa}nn8LwP1fv`5xLf0)UaTj-Fy&A~Qb z$AElVnz@R_-G3EI{~G<2JBMG_5Nl^%p4&hVNUgr$5zM{;YAFnw=S30fc_?amT|GQA z=LQ-9#>R!t7(YpPLl#Qo_fL~en8$n2jP!fRzFN}Aapx4`E{z#~kXk&?(JoLF9b%G} z&WbdF{HuOh<(h3?;PfX4Uv?f`sbg{lskn-gQ~|vETvY(lfsGI(;4Eo10F|s=N@Oz} z+VFRb6&y$Nc~?*)ltQpS%o4M{J7We9;!kMf^X)+R^Vf=yPxrzY{qKXZkzML>vh zMEAM+0168QeH2e&R8f~yY~^X@!Zl_ItduGAn2AU8a@7dcx?!6+Vpy4lx2Augini@^ zV<+JKydCze@>-QKH>tL!&p&<$-yY1Pl^GU5<8zk9WGTIL@(?J~LwIjwJ54c#H3uM7}4lG0N5qt5+kca!V#KPVwP$;cl9>H&aD!r>$HnG@ms=hONI zLHTR>4~*tqam$Du0fIS?dm==Vd7`z=MpO&9TNQ7!-R)+GEdctmz{D-hDQUOSs%XE} zbs`BI-?x=VaXjMWoNFK9(R^_(Txt>o*H6SO{xcaA#~u-*b9i;de-|A`~$Sh_rAW% z-qaR8+;{nW+nDLZbQkM)QunWaDCvP`5WEtR$_asXvrRib^m|gXeHGcIFd>T3f4NhTW?m0$r>*aH=FmpuKj=Mc`I? z&1pCNMYzwmBC36n&9@Kw%Jk`wxPS684STwrFXCvbijNv;V6Pom%mIC@4&( z*DXvOEuzEoS7Id=K#x=6_q0C9aa(Iq&atnOREV)1)yr$dlICUpWsPzVEHbanS!t-7sFg5|Rm=jKnRLmY}fz{lJs#f6dZj^TZ^Fx$LfU+X? z4&@oSQ4NvPcUaipJrlAgp7&%0%HSOfLMEg`7&2eB(V9l|3)8vujvNJp5S*hiKkcz3 zcsArG`-a<-ZnQODCQ+HOo@^}2EqSoYO~k z;9ErC&Ow0$Z{rWR=wi)2at*Pc(Sw!Rd9c<+aAo<qgW zBiQAUy?+N_869W%f1aQhOv1K^El81K-!WdI9tsL}69o7r7zX=SZn?zGCoxgB4(M2p z%6KqaSP;SC;#xetJmTPI=gQ=8@IvwvXa@%elX}fVW}`DkabYPbFD|%dleQyCNjiOq zL_IX2>3EUmmu7`FVmzv;`vydC9l;?`t*O}L6 z$+?Xos(Vw|AHH+CtZHN)gyVYkJOC0;jY&&Nl7WO@dc3jw>!g218GzA##JPF z5jnFo<_$U3ON-j6l7*4kC@(FBX)9*5|G`D0OGRf%%1P#HGINJLG2<}$5l&xrMTbx+ zkXwekIcezc9KYiSkU4`IG$dH@Z4hn5dlg6qbs_6|DjM-OH@GnX))yr&v7w2Q84QN2 zf1Z5ENjbGJ#at>DS}aRrs@TQWbQey{_DtAi2DVuc;oDa-$lvJ#7d=uaka8m)XL4jJ zs)iED4e^WJnj~z3c#OQEMTenHQ%G{>B4GmqL(i%}E2FdyEMBit;&v)~TNa^eI26l$ zzRzf9hg_ZD1B2#FZeI6ah_uALrpy&|5POA!-Hy`ct&@1LIG+ zj&MraaNfE$JUMwo79Gi=be_79Oo+hR+qn-SCXR}Th^y3ib*!2|zHO>Uh2?*9^DQm(2H1Wq7+SQKM+2;(_nRB^JbW^ZJ z6d?$*(quidjC`I<)XOs!|5e5JkijNB!0bj~p+hMj=MF;Q2jVJSwb`$`Qjhwg+f$-q zp(<(pTm^6Q75pYGg~L*kC5jHc7}J3}x44NRc6hhx@u~I}%S9>4kc#K7<~No88f$Kf zV;=D$&i&Q-L|l$`7<%L$0D{c%?%rh=?RsI?0ht3{ihJDP^-5i{jF(%HB~3?{5HaC8 z;;V~);(+c=7FD%?eACIdtr7?~i@uiuG80{#oFwR<(cAl*))#)uv+RuS_}paSjm#*0D+YD6?DNgg)SuPXRTVf3jy1CQ-(g%*0(%nB&Qv$OFb5$y6bso7JF<%gv z)|R=y85DNC4T^364e6(h^!CR8zkCSUHwfI1gyT7%%Kad8YAD$Xf=uFBXS>PycjG5tD^lUcQ>3Bc^;i+ zVT0W;Eva#{ou?9B|07r*&T|+QzAeyU?QEBaBR(acnB8%t_G7bo?*X5VZ~&(CPkxmU z1-+NwntK19ZiLX;T0nkt^7a|4$W0?j9l1hVPk_0e00zP>ArvYGkN%hYn7LwgiX4PG zal40+)j3TRJFOz?__;3xs$ef=8)lY|MFZ0OJ*O>$yB_EC(NMXN3AP#`eIWlD!TH>l zwdN{2gqUL3%;Ks!!{Y{yS+OdjZ$wTr%vij;6Umh9+Bx8!c5>SlQ(}W_Xfu_7wdxG_ zX|8GPcGCwjhaF~O7}z_?lrGn}o_3cA!YDM}e?xNI}KBbWV@5gLolkO z{?!EYKKRg1t3YOk?H`v0?{zz4>F=n%RlUQx`cHfN4NsJIp5rn)tPPHi zjQ+SVpUE6*Rgwsk+aT8|iycTw0hWujmx0v;2|88KcG zi(*&B_QC~RXkwn)ou*$r9|n9x5?POZyDMr=g<^*#O6F`ouH`3Bwg_T=LMNXjGn4LV z0AP*n^@JfRSE@&Lnu(k;q}NM-H;Nw~Nr2pj#2YI%;8Z3#LG5i|?snXLIap^-z|cCk zu5?wkUp@gQ+^3%Su}c#p1!s{$lsOV?fty~F+5FH<{4-&qX16y-Y9~Tgg5mCVQRO3f z>bbTc4?l(2JOPBkZh&;qSs#s@muL*YZ4NsMVru6pgi{bV+GzUshxxkT8 zq%t2W%VTX3FV?|4`)y1}0(U=AFlvAB_Mll+67o$fi^Uvmf$mR`Q^PCM&-WadvTY_S=))W~Q-nGHmX?@242H2B?*|U?ThB<2%~Y;L*=Uhv%EgUmOz9(JV(}v@Qg%Q%R(sqQI;60 zLK_6|`UrnatFS{K-(0)DEm z=T{2NesHsfOR_C!UT+DfEjGkdi=kHrITbC!?7QOt_w(yAHIhVzIu@itr#v1fWS{fd zPQf?uJ(dR?9tl_HjIndx3(L-qih@O5c}z@=Oeo)pB)!iRx9X4%9Zm??Mn%Gh%4D)! z3|Z^_%-qWKp~762hc0;ee%j{&MuyLAwmR9=p^17cAZB*Y3x|f>Ij#p$9RpFbl|_cv zKOhq7Rg^$-vg+{G+No#6UzP>a)G^eTJDibSMV`lo?@Qx`m?V$F+F%5+R>v2cSfghA>2#Vt zKw%Vb7h+!6Yk@2~RMK&IR9!NTi7f*UqmD0}C(l$^1Q(B9i%n$lhcD=5l%Y(dX<9E| zta**t-4{5ViPB&6W7!ePh~ zVw2YLQ>p z&D~jqF2^fbX%YGl`o`hHu?5z4cWy$VFHme{s^3m3pwadZs+?ep`Gqq}`FZmgddwWM zJB(sK=;J%6c|wOb)iz42ntq?E#FcUxc`8d&ye%BSR^#i=NKyy(T-lQUhBF*Ihw&G` zB3NO*6Su(zyu!*$8PF3`wglqCUv?X+ic3bb(jqe-^3W0V=9g|BjV+4!xjP)a3p*wN znT0{9hKaa{uXp@IwEPf$er$ve*>Ih?qDed1b$GyL32X!={kN9g8DkkpXcA7x@xYfdY z=Mc5Wl?v7x1`T?~?XwlK1s-@{R?dMttmE`vnqpj&D?_YkhOx%2*GVILR=}L#+PwF%sk`=y@m_4Mq&Q|>0v*9Myk~xhK!x`Wm=SZ$= zZ`ENFp*CdPLre<7o|Kl9k|ejjz>ef^!;Tj>yWZIW&w-Ejb@T`^ogY!>E55%3()<#u zjC3!XwZyo)eBL>5hsOyqclI7oHHbvS7N}Lji5NY>UA&ryQNwv8r*_sWR?5b%WpNbS z*~U7sxje0dPoT?Zx-WvSQC#9ub2M&9TUIDj$55AJXXD%rb{ zBq0KG_Ep?CE*goEbE$n zv7fsZEvYwJbX=gE8;^Suqx$~Pnz4hRpLX&4H`hhDY8p{&$sQDpl#wrOVDVR*GBwzM zS&)efKMfS*%S!@r!&(br$Zv1L>)8optO*SXT%=jvxiT3?QVL*F)o=^IDO}8v()Y)1 zXOuMCrChOE*Zdze`uf1XB*@iN=$<4n1-DgEqeV@ovXiBEzV?$GprC<~~9(a5xtg}u$D2pz#IVrXCm zvRxJ0rQDB3Ny>=~EM{nkKTqBoi_-L05(jo1i1#<`8hMzYmKNVne$u?L2U&XIU64!- zWfYoSeed)bR+J7K@DD5oI~gB=YWr`oaa@%$gcS+B9@kdSC7fy+lnqrN3_1?|-|Lv)Ou(v}SInDv%}zLks(~$Mrp8F-F}+DR`c< zTL31qk0ZIu5*Q(T`Q;pPMZbKz+*Nd_pekB44p`Miztf`}ZTl2n#JMKV`8x9h#8W>*(u-sy&ZXCe>0Q+y zS;te-2=o(~1scT`+@bp*APeJGcDML*oafh*|md z4FJAL6zH~~V^7C{a#fDIA1OH43;LFdXd1bhC&UA>n!5Jf%lJpYZw=^uEF=RmYOuG~ zJQ15F*!n7BhYvz6#NP>!2F#6BBxmI+3te>NMmwky(*i4qa`TZ7u*Q zLp#3r!dnYfWvUJEmxOCb4trTn?kN;<=o=J{Kp{@fpu79~qFn$o%9W5rrjfZCUy+bm z*;KJcO0Kzw?BokWtW&Wd1vPFr8}&(ukn_e2l)3d|C`VI~>-fQ z_uFiuv;g}~@iDL@`X!ov4Biy^&2SD?trcnXyEPvgP;E)Le8HwK;LyZ!iU zYeF#5nrE@}S27B#rcbTTu);mi7$YjZr=@GoZ+Du!49OBT1=f5Itz!S>I!&4SbrbER}1opv@4TRu5f$(RKQ-cHF zG1#ovoF4*6jvW)GkXC=8=^Vf*-W6t}|7hr^3$Ad3x{?{`T8l|@(~whojCQUK>Y@}} zPWG5g&4CnlKP_M>KT``NmJ+ueMaZXgZ*g%mWl_2e1a*8dE!3+PtEaKR=7)LK!`|7+*?gbh%3ADU#=PCkDoOgC=LbPP9}h-aZPD zkTR%S%511c=Sn}?M5(2-heR_dCCV3T#XqC+JW+NK$uVeM_IMQs9XJ2+l zXHd{u0zYD-^*w8nSlelaj%}U~OB8w~clD8<>E^f^eC>}|t8Ob~67*Jh(*x}0{e94T z?lUiO8X8{`B$;>Oky#tPg(94;Uz@#7nef#453^HoRTz?QzJSA}zY?%xi3rMC5WvJg zB+~UDc^JGmhpR^ykbO2)kwc;scg0bT&SiL1|6aNC`b4Jq^M@%McY$U0!^wIL(L8kl z7-7?{zRs@#M0Ns(iI_xalChg^rAma7)R9!m*navKHCjtA?`u>|s*WO=+aua6dgM83 z{3q2H>X!)<|0SE_@EkdR&=n$q{mH+@4V}gV?=*Fqi7$_Hm^ZjI_Y;O!U!|Qo=mLUty#xZm}9AP5J7uycv^g?}oqs7;$T*+{S9)ol7Rb~jK?58(5Et;123`qs2i9`Lv{+uYg z8j4b)OZ;C8I#kbTxxUP;;3OZVniLFxp4t81eOwfrH1Fg7OJ*^_8Pay}6V27SkiQ~9E^P&=s)-DQvI_{x%IQ*V8BqV3UgZ>4L} z1zAm(KtLD=PT|r#fL00oFgxmDct=h{tyYfZgyej%P~dWvqbFi2abS1QoQ$e$p1UoGX&%*m;4hA+*8~k~Di8v4GXxKz&R%>qf~)g(Zcv%|CffLjiP^ z()<2G1YuUY1+(3xwb2XQu-)9#Ju!Q;P|EU9I}Z5*<&8wv33&6}U^&@pp5BT@Q6i_W zgST?%d^hH4D$R9D7ZJbKWM~lw%s{ECg*omj zHa}&?g)C(a-a52h4g3jb0RMXWL=dsJI@$9i0j>rYSKcKaa9jwvP$#OG)!HF^OJhTV zb;$Jfu3N`_h=jT#0?Q6tqN|h$zGecxhl65OKbsQ#0JJh__Vc)p*A7-xu^3+oW>PBs zMhnrl0e(wMSqd88>v?NCSZn}?OjI_G>=vhRnMAJ6(+^_v#hjg*dn#^gpTDgyA>pXbNd@jh!3*uzRrS3WkU#1jE+T=RmM2DH^ z=Xq8nT;&Xzd@=%o#|+?kl)TD27bDp>1sevI+=c4gE$?K#8l|(SAzx~r)60Q2x^8QH zZ|(!?X@Q4?`kpp!3Zvb0tLYoQg=KF&l}6&4E?mQR=|f=uqDPUM*@sJt3;8wXMGT&V z@9sDOdR{rh&QraZSEr}&$K8y=b&AAlasw`}DRl_l=NQ97U$hp!8=)V`?aE^WQPc?! z&Pu^!h#}>h1?`$Uc2A)Fb#%vcM@nvqrMQ|8vft@qssXhXXQ8{XjV$_8lHmTD# zB;tAi4E}esyI-tCOZ7D2!Ae*YDT~%dCZg#~xSh`Em&(7wt?{W0>X)UMRw_?;%^8re zF=>|rz@?XF#2~O6S|!Ev`&1vhDbRj8iw-ZACsruxAKb3Pf2u>wHcPskzZg*yt_gW4{6;hZlj`sQU>h*&dT2f9L7%i0TMJxZ%SD zn1)V<+jhNeps9>VuE_cGgPYFgy|J^pxS?DWk@W3#L zpBj#fG{fDfqr6n@geg=oRg8Gk5okyF=p+Kq_1Ci36Cub#xK(pL2V1OKMD-|OQ8Rxb z#B}!p$X!quo<>uRzP#|hC}zaZ%5uyv;)Z&=15en-2oTadi(J3cz?q?kdB_tT-Py(X z#}my4{xK-_?u6avHj>IQ7pvN4CmNg5)HdTNH@)wPt9c(G8@G)|EZ2xqNM-lU89)%g z+jLoxSk7<4?b*e5n}(|UdCOUh2F_ai!!;$tANqd&$yBz%w5-FAB6@u!N<}=tbG6>Y zL&-{i@{5{fUY&w^7U`?SIl$f&c7c?WUlHf$2EGHIw)leHS0M6HHEGpL>269aP#Ah3 zDv3utYJzdL?i!JQ%r;7Wzjnrp81Vj8i*|tM93yzs|A)#n{(jAuNJ|VkRbJT{)IrS` z{gWM(UbpsOo+JeI`z%RxFQOXX)WhCaP|Rc_5sr1Cjuf=r;kMfD(>$GgaZ0H(X@Zfp zm-a&|1~c9uVL4bmYx4bq!iL{Uzq(FW8@ngTK}*qe6*D`eM2cLIk=nN{X&!Ss#?+F% z;r@(UmKK!WUX96efUnc}P@r{XzUpH`w@GXK$c@-n{3->q)1ruupSr{!>if1aBt~CL zh~I>#QF$B@Fp3n*QY4nQ@NnU@A{%D^=;ws=a!_ z5_PHPlEyOf)dl#r)X6Hp6cTKdO1m_a%#f}i=GAej0^J<-adMXu^(u)prDg!MKFUzoT5bD zUv&5dw}C>$9tL~4MF-bvWEz7_knCP96BmU;!(<%F4zawp{%&vtQq!|)Th3!qTDnLF zuah9s}w0kN1aWE&^tYj%Z!iDi@uYPTG}9%Jp`AK+f015r}{Y zysy04+pAqWD8Bt_l6KurPh+f$u}gsO*2n`Ty(ELa7k|F~o6N4T-Deug-ZO#@@#@rt zc`>i>1$CHt;n7m2J1>Dgj$V(2K7vU-Go@4P4=aZ)WG}C*c|FY9;)8w(J+=Ryhj>fa{iX68oc*~CT~cyH zh~{w4ln2wKL*D!hTOXe%SdB-I^}7$Q81|kux1v2P&>Zi}I|EcQMMfgLpIG1HNj=#H zwTq|rq8}gAuLH=YS&sf1Lo!e>px_*Qn*A@L+TQ|ua~14=Ec$b9z(n8p)e*q7qBb!# zzaJ2CF;SJKk-HWr0yNm%*vNm?`A=-0PJe0(@k8;=`(Gm-o*sz5!aX@$b9P>t_c^T} zG*le;#Vl)K_P4)PAb6XEQCxe7f08w31|Ly^o-FlUo*71IajY)JFIh@bjI%SU#8 zmP+s9>-s2o`79lCX1j)OiWKGcw}_A38Q3CEwN|GRFj9*FjHsqlavJ?l#P31cen|LQ zz(>>QcaH>_uHL@)SEoZ=*7J*|$h+Inz(|zo^RCd0C!9Ul2dsXZD*|4ZJxF4x%$;6g zZDwt)pct zRImVC_U`{Ol@;tpueN*Qo%e^ME{$*Nzh(t?_+ujUKv$hK8EV6-vowvX@Lf zn0H$t@nz$s4|x}9mtKwI#1wfp=+kh!=nO!0F>P#yr?)aUAIb zz|3{~`<}Rw_$j>cgu0Jz`|td79HltkMiFRHNM{C?m6i2i&Rl~Ko+mRo)LMQTVlrq= zTD`IvQ;e>q-*l=dOVu((Il1}sZ0fF&xE7ukcptzUjPqkA>mLRSGbfjfs9i^b;Zg9*v$WaARyD3s z&DZT_C)guI?%Z4vRa`vN7r1S-{vY#fymJhHQ@ds<^*gAjA-Oe>3gG|s02mmkPltxS zpVo>h_z0AGIL9+Bo$IZN2P9r3KUb>;f5#VCt&^!hj6s{Ld%60<9U-*bq>T{yPT>4T z)J-|+dA=GPgTrF>@%GG}y`9b5KK2=l{7exA1Ri#*JAI(7J`-VJ++CN4CSTqd*2@W@`iuS+X1ZWPX%OuZk%vm39JPvv#IGMS@G#niw z9;=L6vucDxv>2rux;j*KeuRe9Tw_ZRBKm!V4eY+bJgspY1a^hz47P5*LGQ0GNkuSk z&30?hF#dUjr1!m-VL_;KC?n6ikZ71*C~#jf>+8Mby=I5E9pYiuDDAJ{vK9QpLo&7Q zA-)p#1%;k!IqO%}wr=}FV(jm>ESsDR8iIIjM8+Sl`d5T+K8Q@jcRhdkTX`QieZXaS zS&4Wc2VPvs^a`scu{%0H8Er>v&lRjX?+D(cj6t{>AR;!aY>b%yUTBgX>g4UQWDwsY zciMe}lce4JV)fZK1wZkBxLN?N!+6XZv2phh_hd9kbqZGg_Hnb6&(`oE$DhY`cvlo= z01)BrD2LrD;{kbkHpQND|49M2JWmQujOND591&&{c>*>om)H0F_n)T3lv@$y_gb2EPd_Il|q*Dn4F9yN)~N#5ue|2-F{G^yRP( z6`7SuQ(Qg^N_NiN*rYK{S}q?Fz0&RwG>CAsr3P8bw2lI;>~$wgvFe&KB`a(0u}dvT zshnVGVD=pBprn~0a;c)zkh)Lb~2`ZV;0@Su_e`$t0L9Qht<0$=IGzECZ6&0 z8J0ZgIIlD^kHQjYCd;J#1*9Ja?AXH{F{%YuN`n54*!u+BqBUX)bL6E&X^JOdM4mv| zLf9}qB`{LOa4Le*{_mi@onq|PY*)eX6zZc`ZYc+Ib8f zV;8YWk13BrzvZXY)t|0y-$KkDixRV;=s@4G=ukx4YN8agd99PZJ5`(Wd=T!5&&#f& zAQJldwh&b#?){z%Ms@Box0sn!&a^B991@~4Kfl=r7i%_@~>A)!!!}|IYI}t=m4N<$RZ%vay1S*}0WKHNAK8;~jH=5_`4FrG% z5y{km2{Mhfs0n$@;yYu())?7jtO)9szK4JPtKDC7o@;dDOmp!m<|;9G-xd+Ai(t5k zBgKI9Yo=Vfq}mmz*9Y(+Ik%*C@YPSdFfl`rfIo;bI09ZG-BG=ghfe2%=%dP${rLd! zxL<;?6xreX2PpxqJ1jDQ4~07W54TC(#&2`JGNvmEeCu4b5sG|gW=oe$C&qH3r5;79 zcK=+?*Lq-duV(spraTMc?gyGy_z^R^QMYVAt_KErzY66QD$DRl98t_yIEmTecoJlM6z;wAo-ffkl>+ta6!aF&ATI#!!K=qPiKLnFusYXBa5>6M@J|mib|sYasT(dw zCkLk$;6VCA2bcN30qDmtqBzSe2rg~t57H`=L;~PK9W8xwjs1=I9;^P^VarM}1B5Us zHbw~DG%Dodv_Rt3Dxi8v_&6aDxKW!g7SZgKcxIwWE!8b3HP>#bOt|Kb7e7rbX;FYr zyK50T_OPh|(xEffirxhf;BI~Ux*=2T(qVqEgx?en#4lhA$Y6709cEewbBy=(!o`gC zt+dWpYa!F&4TR`?@82cBreZEds{+T80{qi|y&kN=q{or}n!b*4%1IXpr#G%`Vm~~<0F#@6OJX*;CO2A$*o8=50PPKJN|m#=>61T4AH3!5vNTZ<|ETlvgN4~R$P51dFn?alF2iZSQ##J;U9{9^vwmP)oGC33ga>5+ z?cL*abW*htGUZSzzf%X4OrsJ&A?eGDJL@S@>kPJJe)&ts8>;lFt-g;nt(vw6qlvP) z{9M$E8A0YFaql1;zCbMduJ&sHj@19`_kbsSF=m~qNY1jv9CHT$CB;opbbFhzsG42t>{dDeN zjnjmYTk%PSR&|_L9+0Goj*6Oy6#Q8It=wBqQ!My%Vl%AfPv6cv3C14`Lf7bfEoKYE z8$3Y5ov>s|$X{zEVw;I070m_vkwhIvMvqFY?O{4m;xyg^_k$fPRO%RrGb3dBT*OAt zXE+j_n~sX*j5Dz!EC!Ial--e$P%-;&m}ECh!&$t31TX)z7|Vp;ENm z4!&ii8U%kg-aB}n6y|IUHZio(lpb7ptsl__r|CM~&MaSYJ1_-`zCbn2A~L`UJ#px3 zo?ZaY3A!LO7Xjnw_c}EB->`#)TmnuPH{Vx}9U}AGZ%7#_;R7*g!zFDIayT%hN*JXT zf3;w*u>1;(5Qf0#whK3t8vuC>Xc-`@goIPElWKGqj^@>ZC!NihEG)Z5dQ8WVy=U#r z=W(qD{u5+x$qO=d{}7eb;nf^-El?e%Wc8o<^EVJIdv3+H>6gF#`_r|#m$!Gp|6%GK zxFhYNt?iC&n;qM>opd@$$F`kRY}>YNTOHfB*|ENQ-t(O?PW^$}ReRt2UYKiM64AK8 zC=BoEjp#<0F{hw36$y73zjV?%tZJ9Qzqg>b<75glP;LlwAY>__Du)GaJ6U^3WTLcnJu<^&Q!Iu3DrIb^+ri5=?F6De zOU1`hQlgTOv3oF%x|>W*UL%mE@Qvgu6^qQ9Gk4wO=kg8mo8rHL2orv5j-5yxxQ!Oc z5$OwM)~RQ#{a>9`T|68FS1XzJwi8r$tAKAlIV8H6;cUU)4T#W(p8}gEN3}0^o&OKS zd6K)ka??PnfsFUi1Ek8R!8zA6hsDH5uxXWuT&qRiZ6#o!-pg#$jGJ2{0zQp^P94GF5>+wPAXs^kk>0@E&zj$}D;Jwtr-OT>6r&O?HGk-aBQMtI z%Wx<)p-QeRF%!G>sM2|95(?+o(sU+XFAB{j=uc@<;SnZ)XN<^Qte4L zbQ$F;+Oam|&Zeu|8(~FwXHdn4-9XGk3Qb~A&(TQ~st-T-aAIdIc~dtsOiW6eb*^R^ zN|mkfF%d?>Dbbay;gFyV^KCYROd`+qr3BC1@BVRuAH{n~Mu<1)bw?vq0q1Rv4Z7VW zoTNNn`d7c8UmIOSq;TkU5N&FdCO2h|8 zj)*A@KB&2;rTwl^T0%<(@|Uvf3_ca+#t)rP2sSwS+s+E-49E1dcmTLFgxZ7knVif; z3T9mtf^b?Z0~uto_O8;tO@uC}C8rBi>Fs=`lev+E^cjYu4>NoyuL`SZXvO!RiciBH zIU|$#aKP@SvK$^4B9hc?OYJWrM)|{2Uz8;tIkBW0lS#sn5B&arAcc2Pka|y=(J%k@ zC5;v@=Da>oyEHc8R|Y^R0SHY`G0^SZh*wZYSZQRqBg!c3;(5wRxS|XZ=y>fKw+jB)4d+9;5=gXu$F`e z+P{ZP{IVaFL<-j8ki+N2h~zmMxJNj#q5j}|nn{n@_zQ$oU5kwE+9N$6b`6!y_jMJL zw7Hr8gylSsZHz44H=Tz+EM=PK73k|iDBbaKd6XQ~Rchff>o4)xnr)t9deOWZMyhC| zkOn!CQa>FOxwT*5$$E4LV_h;ecz}lH^7DTOQ_54ZMXy%H zggSN&eJ<7O-Ti;Fwu7&*McF^NdzpDxa)s7l*X$1rz;RVS!DuqUhSN9eYjKYo%#8|Pr)fAtW$hNR^cy!2OE;(%M9) zq66RE3>5xA{(dkP`%*4MZuUgSBvdO@EIbU04im}CJseGFz(2>F_*lb=`W674bf_0f zSx!?LfeWO#&i8a4c}k9qZ~ZC&?pMgSQB7vDq;E7nRS&*1>zvZWoUC z(5b&zv}e9r3imN3t^dduKu=jqO2LCVw)O*~fJ1-eesGno9L-C`RVb#Yr1c_y>J1w; zSJX<3(ZcwNNNG+yZFc{26s0{3Pcgk!p# zpfg^DNJU#iGSVUTD_~+wTClHSE(QT5`cjA!qV7B}n5yf3?SaJzs%r1$Tl_!27=N1c z?g)r5_RYN6G8x7u_#v3h&qD6fvi3tUmrtbSk{jjijqsWeNumYxXZ-RMqHb&rsYoWF zEeqHtYe^u_K1>WzTcF<%j#8=d^U14$Nf9N`jtG5-J|c(H#K zORT99nCU@t1w$#kG26bPlWBohy*So&q*5WR3Z)Zz?4$4u3bA7JKULq_8odG9vUm<< zRC4)LObH^zaZyvQv%o!^e322=>D#AUk^3r~ycUW5^`p)(WpkxGb7u1W!S!!8uhjow z%&*@kC)W)PnQ-^M0ll49dp9GL5U+M4rQqD553IWZ|CPMHzF!~z57#Rz7xMpdy@LMF zfVn!!M+6es|4(KHJ~Alja?=q1fxkZh@xnDqLj69zk1FNbFuVZv*Dtu!5aN-<-Dh^j zivO5lCpRRsfAOVyC}|5Q zQ(7bYH)okt&V=_{Q(a=WP*!TglKQxX{zu?n_{ufVjv>+V=D-0fTFa)#ftm-={GXgp zB#f*&R#hzvqWKMjnX(g1wu3g%$}{%=Jn?ZC>3%fJ5=Nyh!b#KdVACg<1qUFw{$$O} z4%J8L1*apR%?D16v}PD^Xo=_778oU_&maEhA;B!@vN0I!MRe~QRJ#@G1$4v=i%94x zdF?DvDYt(-|9v=-s+bl0MF7EwN2lH44D(YqC1~y?uvcn)&r1mCC?F1m)!m5JC~c6v zJb9@Sp$0&iQ4YKqlU-(9h932Ebh-aSy-uI+N91t_h?6vb%ClXZhU<*JAFM^Q-XbpK zNv#doBg@sDS)(3lnyWen?dV0^dw)7SPm0Y6?7r%Vahr)iV*RXQ`5Ew`E26|J1VY=D z<1Vz9g8=bRTm<5W`sODIeBQCBSuw<7?$@<`Qus%S+FMFJGiURtNTd=M&oE5W87CEV5(x1iPC zSdQNz`5vtW*qyi3A*nhQq!fhUxhAiVXTn7mnul7f@N6 z3%P9IIoc?5ef_>KjGsd)t1>%=XG8L{(&%xkl@4Ch&M(8^#Gl#9Lbc1JW}Sb>&U@jJ z4*cT+;ZS}Xu|;%B$5&c|{X1pGPV77$irEslUF$?`)g>3IS|Pn$MzrR61E<^u?@yh)40>h`rTr>qGFP>yUP8Ti))9MeLSlMW`mvD=)3TxR2G)+s zQXa$*mQ=ZqY||thzCR2kqYzy3v?HdA^VF3;+X1c7`-z`~PI$!a-!3sG^S@3nOOMdY~k=ok|m(S@tgoecf!1H8@&eK`?wdseSKk_RLB%4-r4Cv?)H2d&I19P_5O#f?fd%J z)%~~?ZZn#jeuE8(pVRxpXAfny)tPMDml;sf-|xYC$G7eEo{AERLH2I+)gO8c=rh}b zkIHBy+7oWAGuR<$ym*#?Pl>`0_+6Sapf5*{CjZYn%5nwg6AD3O$KSjDwom6F(Qat8 zGOgn!>-9KR-%qBHT`%)??-~UDbQ27W`qQTyV7MLfnJb6c1HnV;Pi@94T3g*$Yo?oS zE1)ZyiqeQ;z=0*uV@MdY&E?O2!I*}RO;n?QkNV)PP24h-87ABfFq*6yzKvz!*3;#{ zIRTSj$vqg%_CDPyrabZ`2AYlrGyi%@v_e-?`~x}x8`W(!VsO%Z($;Ls!_dXdi&|r? zDSbDRb|dHR0IDF#4i*cXlTT z9Vi?blxE(MV01rV!NpX?dM!z_ON!Y4a8mEy=1Xe}8S+cAR=kUiRpwarAaET6gC;4M zjuh7utyBS`P!}$l$Kxtkvruwty4t~9&TVsC3(Vw*9IV3kw>G@$8`5ge6~(wJV|drk z2eNw;Xh-!bzbaRS*)jMyaD2)4J*T)IT4BB$ZzI5+uiNiMIM`{rBC&I4h}UQbA`8zj z@akQz1YUYr)}El=bA}(yi0q$tZTVu@8cB4}Nx$~k^W5C%gPod{)7YILO&`lcQ22TG z0$=~g1o86+I=P8VxxtgwT&;$@*H4=-_o8+6U{|@cH5kzfe9cTzfS7Sq4F~B^3T`oO zap7dPW`(jC!8luJE?$1UhkYXpCmlb>&nwOkf~{iZf^=IR_17J{prjdwOYD#Gw&7mJ zP_vpEO*h@S*H=KLY$>n_%7eI&llGRxnd|Bg=4>2i3JSf*vt2PSc^M6KZa|@=*DxGU zW=K48U?6g;>kk0c1{!zc2t&?Kd-0p^T`!)2i`$Dq$ z8b`PIvhqG>y$Yj(tfnvV+=ac|gh46|x#DUod0Hy1!;hFSe?RBt=Dr7Mt=Wp?L-f7& zN3T#9s#sQ+%}yf$ogD1)fvqot`KaEdkZ7a|I|}UJefK3Z>U67>+4_)>N{c}-gkb}8 z@TmQCsS@c49B)_RMqS24E^L8bFoTl{B)h*z3fDz5jDI4(C>u9AqZMVd$Pwj3!KQCl zpb%Nd3HdG6NjyXojj1G`FtFoa-zxoRUedagewk{9VDarA1K?fuvC>x(?3;dFCtuK= zh=z}kAC#-|_2`|O9%Z#Jit-{Lv&t~Byp1?7$o-oXRhi3)Cnl++u<&eM;_lnI*5UxF z%InA<4-a5;a10iZsLBwkO%beZ0jI@FEfO;&*1DX?_LdM5w!R=xoNhro zf&p{hT6vGFOL@ybcmYsc(jxVF-(pN=>%0!2Jgv5&3fXEZ*GKks$$PuCy?OGVA!%-h z@yI)g1hmY6aoEXRKG0Gk)QR7M61fcB%uS;|vS4=82WAZX)VI&6@V@YUh8WpuYx}ts zSsT_qo;wR)72J1 zhMrkbG<&3j4rj?s$g6tm_g^w(pl|>-ws#!pTsK_nEI}+Jh1~v(rNsK@Neej*x2Yt8 z04Z{Rr;aH5=2ri}M68M;MIqE~MM_hbLBBmRCZ{8DK5iZ`eqM#qs&H>6;}i>yO}7cT zChIMfUuIW+iIH&o`;3OCWAp=!oRX>f|6B!WCL|}Z=W*pTI0uTRLLFYmAhTB6QDqq@ z8&y!cLoHZML!+z7@O9?%<$CDc-)I6>&vc?J7H}(<8N~`y&`{EZEayHEPUqSLF~4~b zr{1moIj*Un2zev-oaE17$F?9}hez+?HC9r7S=3v5nryZa3GqF_Z%10?E4gx#2frOW z4MN?vI}st-z7EcM|y6(S{8I>ppO7X?lSza?~Oh z?-_i+V!Yj7V+9{>Xdw%ZY@|nI$PPhKk2n}Pu18MU8nYpmMTwQm&vQ@g9$gIIB8+b+3bkXs1DL37ybmjK#MpyJ1^0we@sFi6@&=X z1q+p9X95_~mL;l6$*AV5uKam1ks>gr+Jwe?wjDer(P1{!=4|6RE@}B4d@evR^4)-# z*=jq;xK&9?P5sCqhF@xQoRP+!kHJQhi22v`Jl?HkV5JelGs%tQF$jISjU3&Q1)Wyi zZlu=RN@YD8e;y|)=WJ`1=v6vBw^j?yZXhYtQZhEv5fvX_0+Z7&7a#0`4=c49OO33j zKh74wV0V_}bfpvP4GA{@#2a8RxA*?dDDCmGboD~~H^K`;X8-dpd6)6pG5n8i74$H_ zaBsOfv+<4LI1%+o%r5%k35&x6}Rf1TRrDEf_U$@;jXIEI=A6OkpPh2 zPSxRdjrfe{6fchw^^PR(3VL2A#OH}7{%9i>Fo4#WdLxX~8j9Wh!E|Yz92dUi?s)?t z)?YdY7}aUY;)BShDHey1C*5vf`qk{STJOR3#IPz>za=!|!8zyUZU=v@j0P9-EG!j( znR*Q@^y#JMNpP5vOf51Yuel80KDB57xX^vfo(t?BFyru=l_YzIA9mfd(gg|a99@R{ zy+f54B2k%9h#c7<#33aK19umQsg_#DtfCG$Z>! zVjM=<;0Vb533hKZHk53>T1;Efd>KZ_Pg$rLj*7iqlEp3fp|DDPyU7EO!;KmU88`pa zHo8Xq$lY-Ui;$htz&h3$n{5qh(2c&Y3t|Bo;DKl>$Qwv9v28d!J%zncLHv&g%sHIo z7Jy1Ol#YH63xcAVmCXrB1p9Buzx!Qz^H-=`ab}@c_A<5-bM|g5No)P+EBgVH zHv+zgL-tVvks2?Y+q>UfL%k2;(a#-UxBCJNdhHRF>I?@8KW21jQ5?QeF|$3SjJM56 zXTZtog$x`DalDcg#yxD>-RLhf7w}U#tA%f3bmpAasL#=lm@I$0JD$`2xovlrDQbkLe0;BjMqC8Kd z49yev^YfKO=zjMpP)m66*^LgPSRmgq<8stk%2lp`=ZIZ*q9Y5}+KZdkvV}#4V_0hz z!}3xMdty^{N!4ONdK3B_9PFR9L&IwEu8xrp zTQ25R>O0f%qdM754@apTVy*+X?4vg0jEXp6ks z0vsN9Q8#tx(PZ%a4ysPSMbI(>Un4j$R35NEg`j z*xWjT3g{K~uGi87zLUFY25a?o`X8^%H(R#4Te`U!ra>tbV76n&sg!8YIW#~ zvfY0WIIWR>tZTz_6N?Nz0yJE_d0CX&E)pjU^~$@)+Iu1RMs!6J=}KO(kzD15BO-|m zQVU^@k!oX#vvGIl6UCZ%91#%?mh;!ZF=8$+&F=BrP+p)=^^bV8|Q}1$&QxJ-4R=T<9LKe2O&v{aUf6@OUY{QXH?Z;z<(Ml?+sA_sNKE6P?7cC zlN*4LhFWk7njNCr#_MZ)DdDB)z`&{GyQPdB|{((pj4^5$tg7h}AbG@=$;$Be2^>8Xd^5J?}}{?MBfy zu??Kw_zFX(25%tna)y<#;q#9c?KJ9Ne>`1l$G~;TjF3tvxU@NJ>oP^RD%ou_d+pj9lETgUtx^~Z9hUT_}}hz=DR!EqeDR1(u0xq^zV z^L!`4mcrTB!31{315Rr74EG`?sMIU*_X`T7L5%Qz5$u038f~9(p3eCacNN&}IUpx< zG9wOPxnx5+%rVEAnTIXE@+tR-B01aY!Z1Ww+qZBMb8vjQS*t!uMMaZVB!hT7O73RX zz+1=rrL~bqs70TqkuO$g;fAVD_jgmSFgu?k^C2pWChIpm{?)A_*1i4{n>UM{rP~U2 zJ&d!vSx|JaxGLSwaMYFQFUhXbEU4Z1Yx`pAUX@ZTSl?HxzK-)dmKz2gOSfbSLp#DUMm(wyzP9ewmz|$Z-@;0QOGP)o&uy& z{qO{4rs~s`%0#5`*Xu#nDpIhntyF&--b6Z^=O9X{mZQktd{Qdm#l%GTYvmx8m2-#H zPsHrS%!tcb{y{rKSQh8=bjRYf+xDBu z9zCQ92sux*dEu?$2Y=jG({N|SuYPmu-^2NIIC$dM=4r=x-{vVWRY1cr!$$p_?U9ki z@4O6!>XE#oD+iS^Lsj000%50R-A7K%6JPC2T)i!zo4(d1?aCbGfFC)(TYw-E%s}=< z@RC}I#^a1*HB&GiPdW?z>gt{+sWy94e8!mvkm^JLE^cN%8%(EYs8kvCdV+$k3VX=f z=o=hg6r29uz%UGchdOE)40HNtv=>=-mn70+j0q2&UUV9HAy_vUN_qNE@#^M{?z-Be z4jVnxvKr`BQW~xx4HSYN)LFPPdTsLKWC~zPc%+VUJ&nO^X_*XPf;=d9nCS)CUIri8 zO&Dxcz)Fvj?;g{;Dk%{+%g{-68-QI%6Gp zybq4=o{8oXS&U_R=*y;2sX~)HKsjE!2h^BA!@`PW^SHzzqe0xET|D6DPo%kInd5D(P@%Do|LqXyMHvO!fx8Z08i83AEmhdbt zvIb9eCb*Jvx{r|!q*;?wRDx2=^Eldz`-b0YtC57o{KMgC98I-q1;^yxxadT8ER&Tr2}dTcZXabj%l(IM zXIC0?9n8I{JW{XKiNixVHdu**NWX}ps6TCvha1pAcN@SVC#r@N0V%3@j{9w34v2Yoey<$)Qhn1XsnNJ3)^j=~})8VwCy#4emi&S%&e{K>OToduD7^Lsi>t{PEOM`|EM1Q=n__Y)Y|mhptH%cMF($ zZV;JXW54;IRf6sGuG`%|*fPoE^mGO2yHfY#Szx~_(S!N#-~i86V;W7^5l2%$P?9-q z-m1ou2dz0oVH-l-FwrNk!Y!vVMIJ}6dSbT=ofp2$v$DgQ-2{@x67fjv2uYbv=|S~+ z1Du{z#&)e)6dPR>LW5#KZjpQ z#c%;#CXj@s4dFA`5Zbd7Vd8Y&49&HdVV-NXM;l{loYVLSg6GE!Zq9`rjsgRBf5UU0 z7qWP?6ZOb1c4+u zE(TK;6zTJ+^W+ZpMcvGR8b`iN@-rA%T&w2jfdYD_L--IvSwOW0-g9r3FX0 zW?34#2+bQ`0ccq2`fBMBV{G3vo*2#jqZe?>W~T6_i(b)tp(a4&0as3zPB7H9sDp)t ztk`h*WgkZJ%qoq$(*D{k7nSqO`~{0}zK>5zmxhF1gF#5= zi{+_H!{J^SzIqgV{3syH2D-HSi*dInE&L^gUMr}r?USkgsFz-|30bOF^K-+fON=IT z42YPtBfYlfs7R8{laULUUxt*Z#+5$)TTcXIyYR83|NZqj@IE9%O%*~c_`ldAx>AA zu|XNm6DufHx^}sb>X#353tqX9%sE|JSpx|#JkP3WwO@)yVV(0ede_V>rb*+f&;yjj zwx{w|`^l^sE&w8UEa0 zwDG73o}nPLJqVk`zOhsqcZ{LUmfz?;A=13^Uf6_N-9OWA`H;S)*+XR_js2 zx+3ldTL!*u(&_**GTNFPD48`qoI8K+8UuP&M}~&<`vV{b#H63Ew}SP6jG5Us2P5nC zCTZgDUUq-d_%UE1kmF-8F^C{6EsC;BAh<(5R7l47Bb89T{#vc9?(1AKAiOmSL?1=&eyIb-*?fU3gyf{&6LdE~tq4mEj34FRjpPP}XfKw%GB#hV+mcGVhQhiqVDC>Ci;S@% zQni0laIRADakjY6F;O4}VUEpSdRp!4YpE~%MCnv5f9qFO@6GEwPSUSl9i!QfZ`2q5 zu2AYNOM`B^qE~5|vfG#Ig~cH)EPqNQT@o%Xx}|H@s4(?d6#R!9W|x=R0GQW-U^s~V z@e&%o#7R@RYOPjGxs3lbh|N|jJ{eoGF!34^L+sEtj;X@K)3hMLsHpYeAw^7^|GeQ# zc0r!K%LtTsQ^Sbkse{*qweX7VXA`AJWw-Cs_8XMPr{22K3RJurZD(E$8>U!4L_-n9 zffBq)ML7yO?HmgE4E^mck8%t+lwvY=efK4mm&Y-T&0YW$)XKD2sIKT8nPH!sDKusaoT=zmOtLIwp;|JXlrr(%Bbv#F$=nD_a%Y8JX_n z&1~tZH}+_W=7A}jKRaqTyb04rlojM`qG@EhBLUsj0;6@)W-t;)nzjvqIgcWY^&&*Y z*JVZoNI%55O~)=Rg!VD7LnUu84)~*O?B>aSSYx51B)Mu{=J4P#RF4)~O2jh-GW=dY zI0!C2b(r;otArG$3?E8z{JodhjL8zYJ=iX0C3mH(MZ6OmOW&XMi6o7t7>FnunlC~@ z8F4U*#N}(;(BO8X+Yeu4Hj^U~`o)Yb?e1HFDVfL3h)^58C1yj-c>Y)Tf%?nAx zT668t?@Fil$ooZ^g0_ct-RS9kdR4HRM?^thsM^MLb)y#5Ix60ScI*{p}NnY$RFXysEZlcO*t`UHLdzTPsK@_x`UzvsbGS54cw3dHp~auMVF z5BiED%z1BDTmGlbFv-AcZzZm5#GX_lk*pU?#wPB$77)8&^WoNAKw6c(-l#(spNC2s zMy+;x!z`vpOF9fgYatq?Lf`19J{_=IGg|3e_5hjxU-D|yfQ3K=L#k7r`g2DY%m}f-Rea{ zC2^bXIpQDr6EE~n-{^M3**C(Z+=(u~$P zYOpXcdJ{-?I_7YNJa>uQk=ccytQ$*`8Maoloz^^3mj_H$QV@q4kI?%EoH{7z=1uay4nW_tV4ja**T)WY8q@VT{ z4nEFS9e5Ju{0+u!(Pas&N-M_*i|r9Y9?tM1o8!T2gOvssY1HOzpL8_68j<-c$%`vI z2J19L_-pLoOWHDpr%4{>f7w`>tusk9R5USWF*Jog@aTeW>4&!MqNAn{0?~d(!Q( zvP?7K{u7%&u<(lz4M>M>^pGuxkcWYnlF?^jcp+EG^5eoC+ovMz<{)IbslZ-rfMyHW zsr4TqrzonU#}Y0L7psZ5Qm)P8U0f_LM>Q$qG$)VfASWf|IsQe6t?7~wr|ac4up=?@ zEf~N%(97fZp@VFy2y7Y)f~F5(K0i$kztod4Ta@C;mOK~vi^3=3RAbBVYDtOnaCIDu zhH@;;+1^u)+3EFnf~V^j=wHZ*QAos?m9CKT{1QJ`Y$Rh=2nf*u6j-*?m}~RU2Yl!m zJbcJQdpx6>)oKrBK4>{ygT;}kTl~YB-IN&-6y54@3I3bn=l8>aI9JeDAOeHd)aT8+ z@2)`_>Up&4@-B+I^H1L=@y+SLc(#avKxQ9&y;w+5-v-y~7-Ar9TfV`CrG{XrqQ^02 zBC0iJ!DvYOuei=pKIa;ButBq^!3!g}-Q0H83N8VOB8lK%oLx+wLbmvw;zb|xFm273 z(CYDDNPoEkA0}T9yuJwCFZWo!2;sdzQ{-{mJT^p$c4NiE1(H%|xp#ggMEzGG(d{@eS2m{j2Y8t>A_4iKxLPdPH z3T+f2J1VVPm5>1M&;5jd)~Is3jDafG3?!HnlUl#W^OIIZD~KfvL13h16qpTW_tqi|SZDX4$SBq8sgK;(3__{*yU)kSmVzbLc#0c!3ergWH6 zM}~Z4#pliAIGiiB{ieD0*txZ%b5ugq^2(*o)GViWZ}R93#ScA8*Jt3NLmJ)f;2M4^71c7jval;Xjp zEW&|l&vq!!Xz~h_A-$u4ovrro%k(dNx1x@2xwz+TN?uWNHbg`yADH2b<-H!5KLn5{ z*`uJ5d;*8Q+X)d~ZpVpk3KPt9RTqVOJ@G(n47omb#L{$n1-Au#gHCRG8V-UfJf|B+qb@%@9H&(Fb}M-(;aNM;Ex^lqwi&U zqD=s{SdHq8|BV2>Mid;JkdiUoz94vU1SQ2Ge}U@XdycZgyG!LC2qS;p-(PSFnkC4C zy9YmcTkR*FIS6~;nFWj0S-%QrkL|YZho>?XgK;`{>gis!^5i1|mCrx{l$=~JORV-} z&WKA%hxJ0GrLhQ`yxVguY;<`v3iYjB24V>la@qfgB@)CGXaq)1TgJyELg3VFs|}B^ z9h0~acAReL-Dpy!uDPy^a72G=^a)++$Lj+b2Zx$Q*cpPi#4?g_obl}M*9(3$Gjnkz{!V^dd_g@ zJKskPk({vC>Wtmx(goCSnt{1eIa^ht-U%AgFxqB-&Px-c~F8?WW2CV2dycU7V zoW#$>S*sVCm(8x23oHfw5x*F&@28FCE?VBy-ST!F7I?Rmg1cGo0hjr9hcT^udM^<< zvbCh1Df^d8(|>qf%57M;j!>3vTXfol-^D~F4C|420_qOtYvBLVJ%sFc)+#AD1dthe z{dTtRPWdenyll0Hhv7~f2A|p6A@lUIZNmy^4@POr7FzHKM=R?}6>Y3Nsld_djEwcH zJ#Xi{B**=3a1W{D2mpaoh%l6KB))`IfEN%+NRGbM$J8>LUpyPBMw5qwpm$#Ng-~yd zyup%4wg)tf=IEyDUw49j(}ChiSPM+C617u^^PWasAOPr}Zq}px*x2hW&AAV&cOV`k(h#X=mm82OPU=LbZ7-PX zdr&0Zi2C3F0wx>;o(iWhNd2i8)cqyo@Dy>@50iCm-imed?m)!X-px&{%|=VU)k@7O z5FZ7JL`X;X#OM9iq_34@N#qy~Khm1&Ktc`%`Dhc{fq<89+w6%g*vLzGqa7Vbj$>_e zC;~{OL7%liFz0XpYY@;2hye>JF!;v6=5t|o9QR9TJ|Dap)=8>XP4Mc>H{{0HcftZA zns_o>M9Nt@iAHcop|M-SMnxs9n%Z@|ONsH4LcSq>X#W%0PYimNufgxiBms{XkTSKg zm+Yo>`O*x>KNbF(m}w+2!+_0W%+%p(9-C}N2*YuaQu{-K<1YzB5WS9Z`$mC+D-4Zl znMB6(4AZpc-H!iVE#rC9{ziWzwy&*nDdOP9ldz^D6nV0BXn1wR-hS71TUtHuyfpz# zs`$xV{{!{%)OIjZ%$ahtEh`m}PM(5$w1@f(Yj$0(RA{Kn#}7b%GPxidbkp_K=fN)f zum8!xF%jLyJj0aNcJ}A_ym-#{f_dmY6ga`|CFS*ijP#Ft&)JR5=aD*O-9t2Qd;`=* z)?_5;{z%FG0tfx$7Cjw^zB#`BW6kr8oFkrD=XtbYLnfaw-Xu zgli=n4#Kb0ma4(%SQWOLMU1uZ#+Teb{zfYaad9M!Bd(Rvfd`fbr;k;uysbPuoR?w8 zl{ZF)U<>;-X(xEIo?iG0mpD|LxwvZJsa86D`ZMph04y0AF_fmNy#DoeK)DaUa7q%xA?KPoQc&7S5Im12i^^*6dI-pR5kP}EZK%l(tlAJ;ej61%A zKfI|!0x)ceWorZb#jPu@!yJ$LbeHN%ZNBxU$dHn3qjz%{_9hS7o3JUu8J(z*9JDfu zgY|%GRB+Uzag~~%nn??J9z9h|&VqrTqBO93`JKVIN0@tcGivxZTR%!KorvvTd$2cG z!$QO<^rvHvv3cp?p;{i9Uy-(>y1EnX0ZwX3);&;e3{@e+9WGK^17&shH2aX4l8bF- z*xCah#1LNUE<--U=#$r3_s+|s=9=!L%h@@R%Ql|*qx-*-6k*gBrx2%9ec@SJXOanU zh1vCgLZ<#hzuw8wii#Oj>#sh7yd=~@eLiWDc+WP#t}_I)K3SF+h@w2rmb{JlTWv}5 zT~#R6+K%f=O_>*^4t>-M*06z#f`RcF%K$v&JE1ooOvtVLUn&o~{b2oGKl%9Z85kI- zwA}=J#S~L#9CZws*SS zzYD3=1|9*QLg+bT4g^qlU+ut@&oIR zQw>(%;oTeExGbNJg1K*)%@;jSdwe^kAFTn|joA@-~=4p0N6H+6YHWNY~X1GDKbhe*=c?Quy(yp@|TAlpu6pn6Rvkc9|3 zbuj|*6h-3~m|?vo=}K2gnH%2Wxen=rRT%7M-A-N0nrmlku9${a&4MeV|MGCKo98+F z4e4*!HJJD{K2sfdTeFT+)1nfzwH+N!YfF6k!4kEz7YO>Z!C63I7o2aKj+~(-!Zdf48Mzr08`hm zGL=$$zQ{jPOS7%LZD3(|E{h0Ph+Ji;7ZCBTn0qjnO{?MdE8_eptKP&=u`2HZbo&l_ zu7$B_SgXK?A}<8l^K(|sapVHLVtxf0*2TdHWBHP@pI^w01F zNf&v_bee|cmBi1P3e9yE?o^v%_CoXZs1M!$)KRTm!|#YVfM8(|B3HneIRRI%og@AQ z6zY35z|yD$r3(BL%6(hQn>&T*%|Oq!Jy(^A+)&SrV^lmvXSQ!a5^hy-ISqfzqoe)$ z!?b2fs#T{i{O@c5Dv?571XzQIAhq(y!5w1z30p+6Z$o-O!I`ZKj-_tKF+@>t{i9nA z3XgQ1FSDvRwV%pKY(y?SZf-CfU7}e?X_asBZ~Pl4SiFgXq$%8cFR*K$BA)5h2gH$1 z1Iiw%xHo#8UIi!*;1w2@=LmGSx5wg`$yhwwMH16q{(k&UE($2jEY-Kl{kwt2;u$y$ z3m`pk6lRb(m(9+;BuU1#KN&(XE?WZKM*W`zb5Lf?S7dXi6W8sd#$bK18M>_vhc^HO zuRUEKIh{3#Z!|rP6nmD9(J{%w|1Eu|K)=wl&FvT(QMXli!K?2su{5tr4T|~%*%!Qs z1xI(gJ&d(9=HMTm8=aOQj)gc4m9!XJ z?KzP`l`bowN=@G%Z$wE<`x_hw2+dkRsqSPGslJ}d_x`}Gh%3}Md%!P6svUTH_;UB~ zr3@Gxx@Azo*U?fFhNNtdGquEyPa+p?+yi<#4PxSReW1!`rUvU)2d5>4vrV^fx$g2= zK4%AbE@c`#P8N@)O9VARMC2P4Cd>+ShBi&Tx)yT2H+)RtS0;|XK{bl9vf>`G?v zP@B0vQAEp1JG#2o_3wS2D8){w6hf%U>-fR`gdL>S5=MWN`%<0mr1f%lg)^Jc8|iU5 zsAp`!enW2^4sT>s>UNVf9!~=Udr#@FUXZN6aM1jBrjGOHUVY?t-GS?F$Pbj8rBDXP z(wKU-&dVeVh^0B}Y8WJOGC6GXMUh?3mY7OGAdZZcIIhsCcbL+w+NeXkFnaI&uVY$`Jla>)mw*6J-dIf2{+J(Tn@xa!BYXIXImCrV>iyQo@ zNXKynd5oD${N)u0S%?VfftWOD73&@P)XxF6gvYLPr9Q7Hm&ZYtP;h^!qrqInea=DP zPY4kh<~}><8y2U9;qS}nb8$HN4Z#;Usi*eB2gh;uLXT<%x}o4Jz4*A9M; gQhEs zF5#J*#s=r3Lj0TWFw~~un}(}5%WhimyN%D+7%<~{UE-DQlS_8w!~mB{#vNPIV41i$ zw&RMJf>ae%Bvv`>hvCb)>V96^%c=H(>^0PY(7)}p(1*zb+JX?|+N zaXI<8lfO#VQROirIiv=PUe`hFn*8&fYrB6FQv+^jS7Hxz*xbHKKt{IbAniWoAxA=D zg~L*Lgin%C7EI}e_V3u4OKtGH(7DMDo6m$CpAyUL{e?^4j4#rPmgDb9v|(p05_WZq z1VRw-{glZ<^Mli?9`cNKi!fZ{LSD%x4 z^_dQ@&*CUZkZY$(k`(oZ2ZzO_1G`~!GY3-Wv%xZtXF}bIJ)O-$d5%7r?5kOMQht(F z&d0II%V|JMjQ_Or&8W5{11HJ|(4yms#}x&%3>}IZn6ER{GF6HjzRAu9}PmX#R{am)lUUBN1)Dx1|2Icvf}TDhzL3N2iDg2(;)i( zd1$NkMEwj(;nQLM`kmnzcnBY5Zt!qaAdQzNq;7?_)y1IDx;he@LbBB|gIR4CF2bK51LWruE<>zjlenVjL6rZ(D_c#PIP2jO;^!r2q9b{2_A&}Co?oZfu{ZO4yA)XKqF zFn>12?NeZI=hj&AYb$JS)f;oBkHHarCk!p(fI`J`WAdo^sTSfom#U4t-X5q{DuZyJ zzf65(s#+Lqscj%7#@owTa2G)LS-hC(=ECXK!?0mWceHKa9f1)pa7;*o|Jzu2<}8G5 zBif-$=Zv?u%7j(qPmt z=TL0SK2#B{MZ1pe(X3k+6dke%wK67aM^Zaiq)nrMU9nooY2%I3rEH;e^gtRLDcrN= z!`5N#(Ya$+bQ`rDZ6~inQF?m@Q+ZOvZCOmg&}r0c1qh|wM66Oivmkj<=hvTGBx?C7=8#sGypd0IJj{APUS82i>AVMaG(%aBZF zS$;BwB1LQXnw-sLu`%0?8+6bZ#E_d#i6QWyBTChx`17rpn59u2hFAWHaLt_x)J$^TK38VQI%!SYgG_3=5aAF6#WR;0rR&`1*kB z;FTTO|7J4&1%8tZFj@V~rkniAEo7Ww3HvDy2@zs58E2%3J0WHQcBq{)QrDabhE&yaD(=jBaxFO~^poFQ>c zBam?hFBoQb;eeXY8ad0KpP7E;9ka5OmStBI7a9iWBsmM4(BKuVT z|0JPeLdOb$_4n`mS;@E+R#+i``U0yBxfOpJJS+Dj79@R7e9LU56;@bbg%wshPTWrX$T)Be9 zix&$gll{!#1xc4KT|$WxC4^b>pOKJr9@);lYSpU3!Z$0d_>o|fnt#fM+zKnKu)>PJ z2S1*WTW83BIR4b4&VK=THlG)D{)l6szZX(2>a@a&9|_(wnH6a(A-BQ`E3EkciyunJ zm++!a?(eO3vgqlxTe6VK`HeYy-{o_aAOz_XJP|-v}uFM~dhE3X`Yv;~r z(W@=?T#FLiKS#jX#aOuQp81ZU$A-Z}aqUAGw*RsU@4lFDS7F_t-nbWMzWvLH#)RfI zFktmn^F45Eau+n~y9yz%Z(zj^AG7QC#s`e**bYliJVJD2IF&XTu}}7+L6!RG+_fv( zw`qwPdv4?2uEp4P^(9XJx&XH$%pOxA7*o2Agy~#PGYo2c2#cYMD6F5o67Nl}e*z&G zR;4;xckYVLRDT^ibi&0qUrqe0FsNb>7M*CmGei9fV@LKw%XY0XZR<_JDf-<(bZFca zy;^j`b|2G;rm@8 zIH4~#?cars2U51JuOSX&JCDP2^WFc3w-{8RD%z0T+O%#hm~L4~xfNDeVTBcc6$T@3 zduYW^i9KshA^OEDTz+UGND%>#@G>L@fwz6|F40tNk+1yl=*35Y>>2q46*Ksd7Xf+= zRkG>wN5TKfF%;{*6zex`z|IB3uzFk=w@6 zI*7{;f=mGgL}B&(**J1BAe92+nJW{{FE^!gfBzapg@ohcy->PKz_F7)C|th$f{PJhFZ|#a5GK^OA=SHMxiIBGO>xDmw8C{Vs6D(F zW8ud2*s*h`VDD`;;reS3iHwlY?~h@GTw;WRe&18|5mVXrwiHWRbFt{&|qxNKUEi{r6-?`KD)9Sn)^TNu9rkkc-5Sm=7NL znIW8dXTJVNq4CF-51u%)z9%+s*(W$jq*6#Je^P}4b~Ym1U)}?QCho(rtuxW7-!dX~ zt#B%e$ljG1$lGKVg-~Ny?H0K6gEtuwQ@&i&rJ*YkBzDfiG5T@A=g_+CFT(Sn{j<3ul5xe|HbiP3|4qDj|Dc$TPvot-_Lr0+1Q)j+&6YA~%>q0dIN{&hd**Wu&yoe`fP zhHLy2T=36^s#z!jmqN%Ba~pod$g@>whM~PX!9B&cluO1>MWJ?+Q82S(>W(RM3*=H9 z$9p2iYp-R+$|>bYQGEqOpF*g6OV~W$jDhnn;l+^&XxMB3CXDKjrtOB{0|kw}wiRtU zw8!9KQ{W#N3ny~BG`l0l%sz}G>nEb;u$35GzYT8CnECGTaFpn_hJ3_hX#G}LJbxnw z_8*Qujp;o+ol~eJWOxuSLR7Q_AGACu{&rqC&muuyB7{Ur z@H&zDy+6qN*JW!`F#b$AIG+EV+%a*c{^f%N5uaw{$jvCmeR4~p>u=8!hbRA(ulRTg z9z~14J1H0HC{cnvR7ZDW#E^gI`2QSC_5LATf;Xh&o9aDTo*H`pWOSblBaB)xeCe6- zAI-NF{}%jZLM{?XVdv-odwYA~r<8wwl${ww#&t=Ncpnx=q+ALcJ6qBw|73S6lEBuS zj)S8k92`v7HlLk-_`g6R(IX`I9W>N2eVIEEZ z7;K2ptr^h{y?S&*i`HXMVcc3|x1sbSOvKKpjz?4iF;0UH_F2nf_M%OgQz-${m+ptH zjgmSw1EM42Ap39~i+o?8a_@c^+@~^>By%nCyb7JiW7FaJxVhl~#c>+_Hu$4vr+R4K zrZ%=r>y0e&f30t z(_!0aHg;{IK&+0%Ta7&yteAz&&-dYO!I2m>x*s;oX@V6imf`xTO?cp448te) zL5)gT@$}FtJT5*4qeiixM)+m!Dm3od3$@z!MAvQ;P^(O7jPFp!oF9@24TMsK4IHU0 zJ5pPgn%fm`(h(OK4N>T03}1K;D|YV0FROdQpypX>BQz2_beTL0`!~17!tooBr&&)_ zY0wevOJ~RX_dMHcKv<*-ou|yj{!J~ha_%9#IK2XwojYR7x~1sbG6&vAq%;PRBj)7| zbn4a@J$iIPgXYUHhDa*jtj8|_u1)-f`#)@ zxoHnHYu6ja(pg>%5h-4*oJC=N-_}6?i71vq1Qoqgmf?usGt0-5q$CyP*o2qcC*XK& zHsrPqMR@odJWotHD{X_)MRUN{=LX)TcSq$K4Uur>8g3okgS=h3!bKH|h&T ztbqB;HlvR61QDCkJHy; zaqHwoyzqaEr1v-RJbfWNKD!LYS{*TROgrSrm~vG;kr0Ut_FR8XPXFNSI1vESqgBFw1lyUu5Sa$n*zK!5BZ>L|B zLr=rVji)jkc_G6sBIa^R;A>%+c&bz)#8bbdq%e1%%Wyhe1cf>8CM3&(-6TZdShh^a zO!6`Lk<&Y|?~xRVR98gT%+J2eBgetdBt%R@LZvtpLb9T3i@Pb^&+jex(v9^-IklNR zJ_9uz?iLdABJL{r~x_dU763_o>sh;y(ui zw~4<1CgVm;0Os}`h%w{FVfff_IQB3aHvDFO2C3W@Z!RxKzsZN;kyeex<7eY(gzno( zIgxQgQUK-;8iLW3)~FF9Fq+aEHGC*mp7i@pq+9}f=THo5(iKl*cqTe!-k6N*aC+q; z+zP?pLdp+qK8oCV?6CXj1C%f1iq$*cLaIzYGF_jP2#uX5T+H`rl^PW4Gz5_=r(%_{ zCC+xxV)(pWC{wDW*~gEADlrZ%M=r&xRm-ty({>E4o*o9Rmbw*F(=r+iBu_C6dOgx- z%_+FKXLN-#DR4%i^AVBswTSkrjH{bQBks;6Y+W`T=RQQi*47SLJjshz2Zccdbwn6G z#D2v2WBah{#7op_-4u4(L^yf4;`cTo(y3I))?gHzj}5?@+Xc|Fv2(HVC|nJV8#G3{7ERzuZA!NK&erL&QK_ANKytkIJ?7LXznsdG+JnMYUn5~L532OJe}Oqnf=Hi)#(rw5rcHu zGO+_}9nukz5iZTp!Xa~E%vrh|Yu2nrog#?{drxd5HVX2z8O?q?kxmg$a!7)km%HF1 zck`e!#zIYU)qidirGJC5?b;xw^eF5c(2!m&1ze1gW}9#gB6Vp%I!FqbG88TIKbVQ1I1;K$Hr2|UHJjjH zCbES#F&?4xmSh!n8&yJK>j+&!9Q2M}V6}lqNq2b?N^~EFx3h;}r&AvsZ14^}r|(Cp z%5|}7_a0Q&yuraeOR;{h$sXPWJ#5ouN7v?c(7H|Af5>Eoi7MdpNRDOifl=kv7+YF{ zoHj;kOWc%1NYavQi3CVV#_@Emqbv%ffZnA9y5}G9LMW(l&Lu)0K+36xp3y4-o!%6N zl|&}LOxoFh61k@)4MfZ+4EyEh>_0WhpgYP2$H#H&>4u;4zicTaB|^$`IUG(+1TT?( z{P{m6q~z}`k-eG)bg1a9ha;6Oj+mL2;u8FF0$g5lOP+}|xw8y7Us}3NCPdUbQIMn< z30|lTsF6#Hz9qFtOKwb}_!*Z+&9X=lhKcM2QVe#!6ANZ!QYn#o@}DT=C0Vu>SqQSF za?c{!z9#akp=%*u1RdqOW)8jZ#fHnAKtGm>VYsc8xA$$^v!mbs;Eb6hg2 zMD}BP->4j%hWVW}jf+DIOxN-uHPaT4Qs6^`Qv^0oBLG6|YO}rjp=IX2P zJ+Tryp5;cZqU9jDw-zy(%A#z)M%cV;H!9YyV2<_2f%Bu65FHjPV9V171Y6faNT)u5 zwcB=L@wO9Yf}qFYtsAj_-%gBLb{n-DRYG)F1XMaL5)(8?dVK|>7w>_CyEk-+2@n}% z)EP(9AWISIwTOv`gvh-)`j<`vjiW1(IyEAqxqb|Yii!I))A}X!h>wm$5*(3F@c^&0 z6eqU?3X>oZ=J3dPG;UiTr+*!S_1jjU?XX^W8KFUZylI9%PsPdz-7y=Nd>&xw)YZse zyAv*M8H2qKLy;|gCPapZB5$SY2-!XpmwnmKD&(rt3Nl?RViQb+T&WGlwgcuxi3GhS z3DME1SF37>JhEMUVpJs5nM$E+t^kZ!umKxZY{c6r6}4MEVxyyp(h{^uh>1%gW!Di2 zuP);1!>340N+KUR;?l`}A|qo_s7VXNADo8GyLV&$!7HS|rfjcT#K$H=A-rk|^c^}7 zTPKYL3baJQz%|%*{4P!{9f4QwEzzi1B?NDpg{!w7;Mb|^kgIYtxHvoD$<-qyFUxFp zA_kPng~hKjBfs)3)~sBCU`;Oc>!QQR@tbjQ;VeX!Z;K*49Y@gXREUc=QS}ln24K?I z5$Hdz2hyf3i;iWo3+@)=s#pORj_gC;%B6+-isjvLIm`o9sp%z>f*O~ohE^3%@tN)G zS*fw}!ssTpm@sAmcC1^9bI<%Cb}5G1c2_ZH^9|fQya-3%7ekezRgrXQJ&gIPqguaO z*t+5nYFEyT852gsUuy?<2PdfbQ_3e85%RlDik zXp~Kln~xM2eNB#~J~G6SpZ)jbn0HH#={MwvA%E{b$S~hmjzu@+m~u;oz*sR}MvAf4 zSAkux#fXlP;um`M%M}H-1WTYKBD(IH0<*~PxN~xRB=SN33t-Z8_a*tI_~(=VCC?;~ zn7RRhsK``e^f{`;vfFZ8dnd!#i!!L_xhzSH;pb(bKadk42?~;74#hG1yc}m@MMQW^ zq=bojM3e*%VnjIgK#tu(VjR0G$IM#_45zrr8MhuQFy=ZbCcZL6Qhs<8;p&Ksm0$(M zxtP+Pa8ZsRCedcH!-VMaYbnAK#aMY;f$^v4IT0{h3U`&_n?qq{T#@62j{Ta#Fgd&R zR*Z|!Wte?aig>vQx1Y%{!$(f#Qs4uHeMe>{Og-9{zgc9@a$T5lJcPoj;Kob5=k`w1;I^`vf($&O^G2yfl)5+~2bw8;HIYCQg zde=RYCHdL*UW`{%ucIH)I89xKg4)siv!t{UVdQY!_U=&IxF0OVRLc8nlGEEDDJD~1 zCsG@^ZO+4Xk|XC~2IqmoS!SlW-8_9E#{ddDn|>!k#ZZ!bS5P~fO|lwuQznqvE3YNO z7lwH^6!3|rwoGN5b5(&J^jt~gck?AB4n>eWRT7M*I`Jo2%%eQ~N^O1mT^STqN0Uw} zg*I>?Sd7RhdQSBbsxULc*nA+vSXCwm!5I_pZ zuTRBrQW$Z|pX&KK)!hX-G?Y&z#dCq)vx}7eRC*7VQhIafebJKNcxse$>D`)kR*3^) zBo`9kIX`+%ex_5|c`^P~lKXg)(Tdyj&XT-^W?;pC4wAC_mC}fOdJ3nXr$P5t`EdQX z4+_+%18;i+w$2%d*=u%V>t#PYKf4#wTosYU&6Y^U1&my995w2cqh5jrdyx!j+}+`o z-T^na?t)i~VW^eQ4N8Sv_=L25?f^_%vKJ4+?NPgCW^5Te2#4EUR@Bp?-xv*zZM4%9)@42 zJ+j)r!h%^FaPQR<1buKonPPUBKCCyEuQ`U;bh#+3JG3T^iy0+n4ZM?SXDX z2O)DB84A^?g=!@Wz|B4fnpCZf;zcskU}B2qd*b!$*T|G9qd-Kw3YJ3tJelEalOiFx z2dY)hg;${lG;H4sRf=UpmK+68r9d_!$Kfd2wm<6TOovQ`iy&9_94Jz}Aadp}iBjol zaQPUIN?j+RW-b?GDpDLdvSgqE!4btu=12Mro~YiaB4S>>fyUkoZMrmqi;WYC6)uDf zo~GGb3tqi?g>2b)wp59{#fu`NcRJ)MQ6F_G6hIm~R}?N*fYL00B6%|-dyxt#naLLK zLbPZ_dCQwE1Bw=;^e9fLM}Ab#Z^XTuuVE}y2NOG%M)m@wAdCHgaD7G$9@~%dl@nF- z8FBYUAW*mtCUq(en=~0wD1RQLqk1e-yfAcP2jt0OnrTH zB#R2Aku$S5a_7qpB~_lciwq~OgrZ09)+kcCC^BXAg48ZON)^wGOkO!qB9}YVc3Dxc zK}C`QrCGW-GP56h@>3!ovSi3Y<#7S%-uB~NymqOC=B3h`Q?)~Z(j`s)`8G`sl*^kD z4jFQxY0VsXe&YcGor_`0ur_c{p9hum=y3OXAjHM$VPc0;P^8O^Y_4+HrOgZvd!Al1 z!aY|B)GD4CdOa!9)IQQ@FNBg6s>Alp3q;6sW9ZP?x_bQ+w`bittQG8&Hx%?DUU@^qi#i#feVywnNX-e4&=yN6#4RHgS(Rw-uVh5 zcjl}pSfc?vH9^pMmPEgvZIPYYP>nie5$byt&voh1Zy42|lN3ekR!7xhdEnxd3k|DO zLE!?~QIYcYJ~$8#*=l1{zZxm>L&{x|+(fSQ^bSZ-uwX%`)#`5|<=h8cyLJs(vu1_2 zx3}5#OK_i|)9HRYPI8tJ3E2=JL4$l+%8^)@!DJ%$;*A_{TIISwZnF`}3j zf&L0Sk?BzdZD^orV+IbtXgosbMj7I!= zTY_=b)o7W?AdpI)b!Tv|m&M(HB5ryVbpy5%2`xeG#EJ64UZgq+))A>2RacD?RB@Z1 zi%>6*9!j+YyIzS=HZ2fDMDW}r2^x}OQPEzEDZWxP%1yGRICw(V$-#&~B7cplC8468 zh`T?qs*Vb_p>iBk8<9Ryf?c^&*^n3k)rzg*;k{Jz+q7Zv(UxDbIrH62wTCU5i0Q^mzM9 zifDHorkB+smdM&;nE^GkkZj!y$WQV;N#v?fQ4KC|pGi8dA8$XXMCVfckka5TTZ$JeAFX%FbUij7bu# ze<{K*4OFNom15LG5h^>2a90gfPjA2n(nKFp<}+xeh;`Lq0@b@8$u!1QhlCJ`K)xeL z^LcC3V`_N~%DYiPH4^N611zEXs^K8QjC&H4rg~fbN`x_GHPD60aVpLT?<7(V9krNP zMh9t%Hf+Vu2kw*kl=AP5OShi=Z;BYtCd=ds$PF4i3;Kv0xzb|SxZZf3r90NFS%w_` zn=yRTLnv6q7CP`mTswXqu_6T?tQ&%Df%&j##bS(ZQX4s)6R>vIRX902`~(ZC`?@gQIZlc>)5joxw{*2`pJY3!?K& zu`jF`R&AIE^}bm+Km(W|IsnIyUqpqjbFgYeO)MBc4WUF%*iuEWp-!r5JIwuME@n>| zjO%mzkdAr1O;$ASKM;Mpwm|W$CWDRi`O6@8TI$tF)`cpT5@vgT zG`tFxCuQKvX5^fu0@^okfLwX=pg;zDD4esPWR3D@+`c0zQ^I~A$X22RTop>>DOpIc zVa!~z20FBFgUURz6LOR+0~aQ5B72l9lg~6OXXAy{{05Xn zItzm*fgLlF4BgqN-WkP8w6$SPf09<`=FR3YW~E z(zU=fYkp)Vf}W*VakxrU*t>c)4xhS-L%U9+>8Or^dcRsH{m2q-4~r*9iI2nGJ?Sa+Ii47Y!RVL5r5H(5`(4 zWD(?(2DQ6%M5k``A&B1$nVmN&CMI*5PmnmGROvh>1tAqEZ>7t?-rS~T)SfC7H<_m> zU9+GdDIIp6d5|ZgX&r%g{=&%U!0l3ra&_CGVZ{|E|rbZSwm< zZLe^7QZBfklA~y)5<>c7k6dWowmq6PEcID_Y*4ykW3-|&wr}75pD|hC{(8oAPdzPSt-ao849?n|MiG%Pcn!b~iY`Xvu#xcFYod{)@0#?tk$ zMU#u80WK1w;LZvI(>XSu;69Vh8bJ9EB+}zYr27I9xmLM}0H&NDqHs)zc}+~1(MeXsUDTnTE6ZIK?Fk0;kck|rjnlI$=CMOuBCK&Ly)Z;XWogy-`I3odd#vV z8JkR2lEHFpT~v!lw{6hjtQ=2>K+DLD!6s~_@@U{dgst&G1G zSw^lzj?)uiR*{lZo4Vrrkz(wBB1X$%I*<5(P!pArfvNMULIP#J55={4O%E2Zv+#Xo& z8vYnZ@fWAT?bHhqiV*>q#fxz#N`y+DMqGLQOr*{q$3L_^-P?wH@;6=4ya5Ws;YiGcRD%FP_yGI08M-z}*bhXCBHYo0)LC zVsoI(8MUZDjjzs5TkHrTAyYedGG;GrxZ%*$+v`CAiS6-n>qteg{Z{Kf0L_|W3 zlc&!?BuT{4gNKn6_69fo!l86>MU~2x;o#whylLH0phyuorAY%9dZVJ_lIYDbB3qe; zD3!?`UIoe^SIkZLe2|$sLx~(V>QMYLv33`zMHN1>i{XhmWkrXCWFNi#GZiEk>L}uI_ z3~(Sa(z&<>eGBPO)KP@(_hhJEMvcxyh`gxZVtZyib+rQVB)=Ico`P9)=w4ETwwd*i zYlwIh(BNP*72<;AxJcwj`0_?Sk%q|HYcYCNQlotVouKe=G@n43VIs}5s;tE&srZvU z<@2Ki!ct{&H`*BBLGNpwf?D*XH0u+wV&aohs!TeW2sshC{}4tI(epQ?G{{LQVWR)} z2TC@nxcO8L_v{+k^h{f^9K{-%WK2StWFRM_R$g1BIcMpoKe~MLS&K!rInTx1qU0w zsotqxauH!qL!|sc7!Ua(gi$?Eh*aQp)D#7bQDVH6uzw@!<qbshD1jUq6aahLryuq!>1?tU@P} ze_F~EhvhnAr3j>~q$e2^&#prcYG*Ao8el{6PEoxAv1YeGHfM1$2w(G}xs3GSKF@-4 zKIk?=Xam5_5K`u;oZPlJEmmqcko?0C@OeRFa zKxHwSO95_lV)GmeXTnH5mVJ)OXqG(!s}|41o3t%aA)6gE{B7&^KxuFRq;e&_8#2@$ zw;r9#IUz}-BQno>aO>#>;MsL8U6bC){;5M{81*{Si*95cI6YjQ_4Hy=hb+-xR?kjQ z*O-F++c%(I(R9%A>^!}3yycN8O&XARk)_@ly_ar4Ik!0BW%^&hvf`PxsHmu)`WGJ` z4-LsSGBOg;(a~S^^H2X05)y+pZ`u`;r3jG9pt%aGGTSW}jDL{UZrFl+ohiZHkZLob!zOcOo&1 zPAf3=x(u=mT2yy3n$8NKpMeN`hs;JyKc&QcUl|m(M(T-$N2VW%#)Chg(2dAej}{q3 z7<*EQlSH`E^UNU;TRXWPgNy61=%Ny1&nU6|oyC^g1Rh45IbMp)#Z`woj#OSM&;A4h zhUC%n##3-$V#NuXp{1J|d9`@?T!v{E74W06#D)A>{G`kqFZg4b*%L|1;Gsu{bRzVp z_=k}^@5P!H0t)h`z?E`n@!VfdaS}ncGs20PC`D#Nsr)Qk3(`>7yFv)WaiQiiu|w z2&BTfQJfBx&O>Tf6DXge%vzKoWsmFMnaZz;lVB{pE4((NJSnl6Cp z-RV7Wr8Y)+7)s^$i#NAF$_t5AFj-l8PmVB>X^PjtivQ=}aYQtH`4;2E)^!oD;wJxX z5KENMgdaqO>U(kH#R1sq5};CRAg30!tAA4*&oBh*2NcGVK5YO)ka6$+BX7^4$eW}wOZV`)B|-qnqY>{B^>Bf0-9b2F|}e8%4MvB0e)|w zo?a7AtE|MF_SvwbUkhBxHwH_3l*Ie{H=)g55?(~)`DOYV45XwuJ3GV9PWWK{1@`XU zi;EX8V#tso0^$9c!KV_wc<};RvSblv$^WU@!QTVhcRhXj6nXOGftJ@GSYgEv0=NGH z1qvW8F7BI%Irjl`=gvj7YSmDxR4KFTmtf^wrBeN2oXI;`2wX@wK!taz;PIc0IXF1m zVhhh{bmx7_dG?uih+sdw#h*x+;WYVS|8_(=cqa>XB-8X z(oZ11#vjf2nP7%OZv2erVR>GKi6gu4q(%azqh!+vBEp;=f2!rRKnauv`{kKr6VElp z!Ey2IBIlC{ooOcyN{jp{DNSK^n0^z0bVR`oq_Abbl+@w@U&M)Vkx1==1#&*J{ zx=Li?MSkt*8JiB7U@CnQ<)1I?NM5WsaC}eSOX2LQM|_YRi(+(GT}m&^ZVO)(C_Kl@ zN(3)LWm$i!clyiqN=~2hCPXfzMd9d{XL?x_yfcVUZz>4}Un0_7OAWRr(F^_=rn=xS zA1bPQZWsK7-9FC)mz|j<=OJaCazaV;vy`3FPoy&16S?NLDzqC4&vEeH|KyGCO=)uZ)l^;%Cp@FHS$Q>?lv&!FDWAMk z5Ir`vF}e_ZaCyw}v00Z8sTDsBxWDK2W@~FU)BKK@y!7B-Bjh5n4Ek7KjGc59Q-2)} zg+WajHMz^Q;g~;VG#-V}3tYS<7LI6#z>6!e)+a3%O)iPiZD*m;v^gm30pVoF{dXe} zZ29zB~+|fQD~SyE6$xeCy*X1toYGj zrH>WqZ!zQg-h|u)(;#j^azA8oO@3~=`rLnNx6f(7m-i{}7+;Ief-hrF{WKZB7l#R7 z#$k!wgp^?zUyCKR%jcoLOo{Pj7z>i0TS9(41&iC)t}OUH7tq@ zKSGvP{QL1k3Hjpvf89ihiD+U%YBJ6+8uUcc69oI+L?WvE+@Mnv8Rzd-M9LG0+%kKm z2Wleb>@Pl1MFUVAv<}74uT=@?RQz%DYoIVhjz5uch7gY_y#&e++ps75N$KBookWA2 zd)`{;*svg?Bcmw{Jr`EySn_5R^2_^B^RxK41R=aZr$GV@x=Cs+40EPxl&v1tQ;8vmS1Fd>SJlHgLPnEa-G_9cwM=kz}hp1Boc>rFY9Ka?U$ zEyhuQ35;g*jIZObru8#`92ewMLgB> zkD$D4uJON+@vsO9u0@c1==x^|o7(&+#l{LN{t!g;sXPA}G*=_EDk&;;>W$**c!uT2 zy%J2UU2|1KhlWK2a{bdHF&L*W-}tnSCi1l(UWUXX@U{=$CHy>HM(7h??AW{!n>KF5 z+C6&_^BW?Keg7B_Uq+bkOn7nQ2EtSc@Huq}(O(ovkLTB~2n&J!H)wJD>4)1*Z`coeEXB49QpbVjvx0)UX!K`!^s^-g+)^qB!oP}{w*X2s*{Zy z)?wHFTjZ+79g?{v%WwS7z$fqnKHQ^pW6h5L7)+$_WsnSGE+{bHM}et#WWp(e{ETh3 z1-o17;iIFZxJrbaZKW;l$uQkBS(h2bxJTqt%=X6Qo(#4ZHv6Mr>Jfuy#zi=KQ-Mb| zdQ?dR+<7a-@mEa9O}4Y9Fsb8{7(P$SlxO~Z3AWRB_pXEL| z9n-xfKgsg^JU=Es$@#T_WG)rqFvtsYIX=!LCH*~H{iep958jO6^7@ca2QA+;aj zC-|`-g}eD@ap%)K!y}})!GxUJ!q>}Ug%wr^F!Hj~a}VZ!C1hv=HW>foT{yKE6G6KG4C@-X4{+pH@k<6l?nR#p$<3q)FpI9kto{6I58)w>ustnQ#9xA~B(HT{M`!%Y3iH zls?tasM{i_?cCsK$LsLF0hayEeh(@AygiA5D~=*ZRy(YmHU^<7np>FfPK;Y}5q3@v zP{`%5wX=uM#u-?BCJ?S}X+E7Eml{DB-(eV1@<3zk6O5g+iLUshTRY*?@SnqLAC z(hD=E3Xw?IfBZ!>5nf&#M?{U=l!$tJi#zZB!Q_cIqz#A?BOq2x%F}ZSA4<=JG8#pAPH6=v zh)7vU9fwgb!fT43%kV*EI<8zvX>!@wEuQ3NDzAxrt0+!B(mjyk(^Fgqy619yq_Dg| zG$dSt2$2Ey3L_lpmylp8XFTPBO*~@AUreGHZz(UILK8&-agHT-mL-3i<^{fyQZD7A)4HIfA|Rc8_D}HQhMwjM&SgL7ju$azX4wF%Mqv_u<96Ky2S;%0u+Sv)JVu0oycbU<~uas(B+Zd+!Z; zB84rHcpI4>Z~cRW?)~}Ut(Y`&EEcTd=L$GF*yH}OLl{3|EKWa-lP#k@edI8XGZ8F%$hU|3uY|CufLuq2S+&Dig9T3S_~gD4FM!D|8r~c3+3a`!#4;I z{y;Bt5)Lg{jh$PTVCdj!cy6xy2gg@o)R<{lGix~x+`-9pxR$8hX9!%b?ZkZ=^@}zcgbCyNBYg_e|ML8LT#wFz z+6wBuXOB!i;cAgkkahEZ6|@Kn=e&xgNG2y=`(5 zd!t6Za=38HG#h{R&@&XxQVo(6)9~Dm3s!1?Mva@JZQJ%}(x8Cg?&R)<54X;u+4%EV zyYo0oyEwooR|=%;9|sA^St`QycM>G20QWQoP!kajr#ToT!394#Houh!giuB#?ew6_o3V$M!7A2Xy;o(~;uD_SyJcV8ITq4YDGlnT3ospWOB6q{a1;S(Ukif2+`-)aUE{P(cT*gfK1#6X zjvUuwnHZqt&d zNofcOmSM|FDQ=RCSG}P6&`HqafD-#DKPM>9OJDL4?jmfVy4XarJNR4*-*7Q}s2&do zOK^_zxrOTM(+(|Ep7 z7_Ysgz%6>gZD|Mzru;6aw8KNCn0;H0)0Dqy_obwaiZJJ*0v{gKfsK}5Q_ZE!wB*10pqhCt|>?gH*Qxn7rv0(tQ852dN-e*x=&Mb=bFe57y4=gOJ>vkluI) zE7vfI1S0R9#JbZjNQqFu@0ma9bR7qq3(GNn{|(sN+Q3E}i7kt^AR+h^Dh@r08ohhL z^vQyX-tl@3Gu%|V1znSwj5(m%E`}2v`8O- z*5me|aQSk`TeJjf)T)Dg*>j*q@m%KouyQ5F?S1pmscR=R>(~oE;Uq_?1PZwphZZcx z%h*VaY&!xO8Vy0K@`+eHZv%z0L&)1e$a2<3pW>nDHsUzEOIAeQLS;}puNdp*tV0YE zFmLcUBxP@cz9mA@YtjiM1nfk=Wq}wtq7S4m)?)qnlqMoXQB&)9|{ zog2c|a2>5jokfF@<1nd_JBAFMfG6ixV9GgL^qDjQP0~I``$>n9w|FHKEmA6g){vBQ}aqtUf%XS8Y248u3G$%-BHPcNZP$Kj9_YlV`Q z19X29E}=FW(5D>9*I$N#$89k05ffzz)<2X8CpYGHGh&C2R4`?d>BU&@CqYKD`|evr zx`~7yi8EkMSq+AlP@``V9X#zQ&XQ`Bb1|5=;4{sX*3G9wUJ9Fo!rmYfn@Ep%@ZdE< zj*fa1a5kb|AuSqs8ij4^Y^ZLw6S;GC)+3KQDXc`EUlCE{*;ihtliyp9j1GGAEu}^& z2Ql`(7NK`(HD(pnW6M1m)I{V=sdFOq7Mt}p(`2s*FG4AGsR0#p@iF#VeEcZIv5!DL z7d>1gVr+ga5w^8sa2{P<^=O<~kMvGP*lNYNA0@&~B8Z-(#56CWL31yIu#KGsyvRSN zHy|o|@?Sy+CmnA?NHQeH zj=A;NM@j+jPkA^%f)=?AICfWtVntNcM`{rlBtx)i%NCRD=^x8SF@?f_jwQ4xL+wCV zq)Gqt%(+6z?izA8LM41@F#R|j&yX8Pp;_xEMrLYL*`0w+H)X;prtHTGE37bsG+Zko z{|Vua2PH0CdWd=*dn1EKPD~py8@b&jNMEQhD&%rRTN8ewTz@=bbynFNnxf-@0KQvG`ZG^;U*Wu{lg*0hBDgE?FWAA`0p2?;$ z8kGU1+DyQv^_#G7^D2~bBXY%~mxzd{gCj(*AKFIR-}{ucMHTtlALosr(f4K-@k zC&exW>o9{qAS+~X*mmL^+IOr6+`54H!flYxO#-LlT~Jiyi_4duB5&j7aFmNtws`|2 zKEDDx7f-mSOK*-P8Ta;$MbD+raNzuEs$Lzn4eh7FSFe{6X*6B)?n9Pg`OvayczORC zhWG4`TX%M2=ApZSy9ru2=PHM-o7Z6Tww>g65@=i(h#i|@q{P+T>v8|)P7E8g0Iz)y zU{4T{ZHWP{*-IgPfFHK+y?}}}E5lZ!N@b9vPK-m{p-ZuT{YLEAvmd{7EJ3b`h_%Ux z-51Xw*NstFbkX#chW9K^-E;mE)WWp)vX{FKiyEo0s=5Y`pUB`J3&c|Xc#=}3)MIiv z9Uo9An3Y5kArstf^q5j!2VH^~>4>PZc>$lG$TOL|54Es&w?#M^vMw1M>=KYn`L}HoL^2{k!JHqH^M}A|7EDo!np?8|<%oIXch$@632SXBF%MC(4 zr9^BMlvm!LI$5eF(+57?g=hQuu(t{YHK;^41CA;2tDh8!8uBfpXB5^ey%v3P5or_> zqcT&NyHDkqNW_>e#}wp`^Vz$S3d#?pNS{z*_j@+=VE-miYQkYHd^~y>$w@((OH>h)pXN!v5SutiBZnu|W%A zH%^TPYPwKnD28H00Nah3jIsT?qDk$JNavs>Vy;TX4^o2(c^r*Y6;R;)EF2WqKxRiR z;*+!_Pu`YOhk|*$aP2J5=xeZT-&z{1v^1~_!i7i1ba-{sN4S1}+ZP6p+z5L29xeJz z#O4_-v1af9sM2J_8y~ZuJ3cVD=YmMDg37#GkXDm~=oHp8M!gn^RQ8n6YcU`Np41AMwP4H$u~<-LPU(Bg~(;5y)2T< zYHBCMh7uoO-34bHJG&Ee7p%w0HGQyZ&K4pHMkGknVMx6s3|Mj>^(q%eT)cU=Co_zC zJz^tx!3L#8b)X`piRq)l)eSk*x?}0O=~&agKCV+eR&P`qN7il<7N3Wa^28<`0u%XL zVT3{_#=h4QusC9gh}zm4;pRvRDls8XcLVBX)d>nYzZ*KG0a+=d>DWDs4lYEh+=u`M z2g(sdq6?2Df)-C@P>T`4a;6q%v8gsDi4j1Iy;&X|ic#IMz4hns8 zJhsGbF;;uZ3j1Rs$TPES z!w!uYrvv%;auI@JMW|R%h3#eaI2s^gnb#o_cxToM zGD*Yal$y;G@;{(*5=LbKjs=SaB548Zio#L*6h{^}J*X=}#q4^NN@D<9407CB>XWq; zrZ5SaWm1F6nMXlorXLe!;jkbgt9eNd3L?t&&2kV?c+1v$Ts~GxJX{QT6DY$6y8aj= z!80QNIjA1JsVsFeQGIa_@Y!h1gq(kDsuc230+m4w-}h8bx)<`s`Tq=hV#3wEfDtF; zC|#J}JtGQH{x1ZIkwoeGQNeQCQBstT&_pp_zm?!M5p-_dtl(H=Y60ipQdX{0Es^gy z`kj9z5!So#E-gk|Ju*|<%U~``8uH7V2Jd+w$0L=Mlv`ni0D74uW$QJaTq%DJXt)=( z;)j6uuH=2oc`@48@Z`x81O)}5PMtc4dU_epoXVkN`CQ;*{vEut;=%dD$X*~f9K7K5p%}~=xdG>IT!&Ms0q9sd3*sa1BSYCXC|$BBKHPkPRs-4#$3=f{yng)} znKEU9ghsH4fJac|uZ4W+l8K(wAu~KRCoy)#DR_A2M!GyDQ7WSjkIz5C$pfqL$g3`< zbg6?6kDnrArAp8Re?-aVwQzs^9Q?ZJ2&Bb^VtU6i2zvY&S*zAXI$0u~J&i=AdW}&p zj~4S6EW^HQzQ|v@1xlnRA`zH?npH{(gN6mKUcExLY}x2ajn_}!qez`fa3=!iTCxsG zW)tDXGd0SU&47?t2XyM+5y8h6V&>A#u+LEuHHu}1e{dpdRW1p~oJC+fHy^uC`eFCY zNKBhD9$BR?F=ys4*mXP@9mmf_gNBu$KQkA*PLLm;DDpD~X+^sB3Yn&dkLFw ziO{riULkMV*pGOpNsG!Qi3yky`ymkUE(n)|k4RgqIr`VK#mv!D@E~4-#}8HL*{?o= z9=#^zr#kG^VR-z(0gY>xMZnp$c&N#Y^tN&ouU-Nl9tELPgX*v)KYs7*(7s&`_V~tP%A`@qnZXuEc5H$yS5@RrYeNk^7HgL-LzF~`#}|)a^Oh~} ztlSQ5>$_lX->gT8nTFzC_Co49RT$ocJECf(JVe%{kny%5avh%gt5B~_3E>EK z6ZE)u_z3o0IEy2P4q@-k?J(r7gj}KsY~8&TCyyV&{{06Krjo#|R1-8So>^Ep=$gSB z*GU=4S13CaUPVx*dJepK1hj2Z9>GtZB1_ep$YA=A18sa54sP9wqi2re;QswMe(4s< z)~|(7k|)c@#wj<-c)Y=e>qd0!Hw?CK*J0MLo3QW39kgxSloZBqJH&_kfNR&TkE*TH30ppxg$bXFgAwuJGHiJ+L3$4Z(vs4V z-XOuUyHZ>a7o$~iHHy0$kxwSV+`BSd{2)O_cReyHO>yw4k=dM$IP*-7^Fb2GNlC~{ zWlwx3!!`j?21=o!dMuX4D4gFR$d6?HmSmoh;?Ck| zgkzFasKr!^uZ5h$6W-i3duJ_E_U6uI-Pe_E2>I%<=Sq+qzn4aiS< z){-*VC7S`O?#XeA+N$0`kD|^Z9C|8+OIjVWDny^YoLFJS&kpXBf5aIq7k!`c!9ZJ$ z6I<8$(+2}t@$L9w2Lowi5v_5A^Vg&OVfZf|43roi4Y`}MaHRKd;amKC8)C3(@+#zM z*9q=EzoN%!7hK&u!u;&dA@0R_%-Z__!@5_%+QA)Q?6wo5tFbA~A44A-1C^r_QZ}!| zFe;<__bB84A24y|qx1j%gMmy(&RbIDITbcN5ljZmj>1eY{pI>%(v#9%O+Pm0ARa5s z)|#!R*h;}1mnH4wbl4xes)$JPwFyRHaV>ukVZP1ru^%>JVABP@W@4RsKWkGMOIm!q zyCocd>_|SMosl|yj*HDjOp7q-n$qF41bvQzu^*nzO+JR6!ip#kPRtD9>j*t&vkFFP z|3)D$w(c^?z+@_8@yj#XoCe3o<~@R04_yn{p$BY7&1KWlGfqa>&4%OS$Ml@#o-(ZI z+LV7wU2uLl>D2YbF<4-dpI|y;zNX*;I4=Ggk(_@EOmaNxtAxL^2E#}}$qFm} z4fvr411&l5sV}$U-w4^?PsabNu>A(2{VjgJ4Njz$QKbbB5oEpCUI;wz$Zz5 z?#_Oh_$8X%_#{t_nkNpGN&NsYjgTSx}WDi8JwQPR*wc5 zjDlieaZ8;}vV1M|&9m&5Jf}p;vZRy~*O3s8;^B6cvMiSR;&4_nZiN+Q(7RwItc3jUz@M=p*P3^o_*ua-E&s~zaQK||1&n^R#;($6;}LRuoCkB2l!!&I{zVDxNt#O)X6i^ zKP$fXqE0KU_${!~7at#QCFE9EVTBd{kMW}kxz&c;ia!l*lt1IlxD{4dVTBb|SYgG# z57wjet@sYmY1L5kK{R~c^q+y5(`(fl%Vlc(Xwq*qK*L)b{3z&k(EP?W0tTJdBr}yt zSZHN|PNOmJobV<7kG*pMkQ{mY@H5?G@2t&P+qP}nwr$&*wQXZ&ZEF@YJGR;WD(P7q z|EIm%yRV~t!XN~MxiepPwvtzT{g8BqUH8U8Qyq72l=>!#E5n$Rg_QlwAl zq9Tci_!H(sKRWkczcqfnB&120<- z6is}WB;8nmOOcxRrRbX5>nF1G#1q_lwCB)=@4+tG_$mF=sOD6z*NHy8deNpwBNpy^ zCx`!-S4Sr@ZpE#XH3=Y$o6*S|^eDEgEtwI%V|_6G4w+S!p!$RLVM{ z3@cHz;Y2>{glwZ7|nY+)NjP5%P;xx>KVyjonPbwH%b($M$bOI>C&k^^AA7d z=GqCYJoA!EYgY0o;^%~)7yW8>A|z!^MiaxM7hd8=3_BKYCg^wTMIYMd%txER9BU09kr~5udVd#FO4NJAXO%_{TJBGDV!Vk&Dx6kh%N1lr`AV zwHj_uQ&xV&t0PlH`iiC&xw*lc*&wG?+xa{X zH#aVD>G}(zR1g;)ZR}Y!Boi5B^wg3V9!%0V>;RSs^LjY;h|;B|}R`v>coe;m_+=uZfYBvpywFFL_FAUG!^iow>>_&mcLjM5ONrUU_~*o?%^} zj(TN`^VXQJSBE$7A!}_0)l1Eg_D#9`?#mdBq^Kxdn@wi-j-4Dhe2l4WOA{aFPe`m8 z^@k0iL~5xp^!R*u%}4KG!os9|4MYWn5*i%KyLZNWBHHsfZF`O;ROL+95k1Hxc8iaQ zA|k|>*Pgzg`-yc4p}cwXp5Op+4<&uwm`g-$o15)>wzF&3ZVqi2%EBQlMN>(j3gpqn z%UpWwWn34iBVKaz^i^)ZGfLxECuY)T=GTJSfZM3qlpL~wqX$mmbbJcOd}CNL?kv+z zY-9bgd0byO7r7MGY7&&;1cgZRI;Noez?$`Y_$aRV577`76hX?QnqX%x${{l4{6aZ( z)1J)FZu3@N7q?M}KXE_op#Mx{3 z(6@AcLjAmn{VJXK@KEA@Za#7oCQO(xVd76<66D`2v5z>Nkc&f``f_;J0XayiP#{gE zuQ0d7&N7)(Q@XP5v_GM*j?uUGbf)*{!0`YGKQ{^2)(fOW7}ByIZ@=-FFr~Q#NwKl= zZ$t14l#W?3gr22yx8-t}-|y1(YhiIvRV@>B@N=hUy! ziuGHL^FA_Bj`Krw*kvt6M@vsmg$WV+{5+Y;b|sgK9f9|D(0$4&l0RN$@W@f@-0#NF z*%R^cy+^}ZZP>i?94{Z8reCM=ypM|J#DX!*Kkmc(6Pp=6Z8Im=tzi1>^Qgn_(zioO zocUu}eD(t`L<1n?#S>1SI)QI^1RhU5$wjcRHs|G;^~_s1k4du^@B#$)?wkj4j zYR35}xUy(0GuG_j$m$8ys4`6KG0Lrie~$SPV9)Q;DWh z0#iG5=E|E0ULBZ2uc_zIhTfuYmq~cX#&BfzD3*!i2l~9j`}IRSMShK#(R=GDMwhS> ziFxr_m7YQtA9)m>n}Q+;GLc{RR+JNDE?$Gqt(xGh{nS86WX7b;v>830{26UO&pK$t zlBB>_%$U7|IdkT+c=9sB67*P$EfH6D5!-AM=f>KI@_Hi2Rw~WqSpt6!D_aL{?3}|Q zQTEfPOk(vp>AKk9qzhwUtHyYw9?#moWsQ-gbiS$~6-wnVrfb542@@tv{86OAqJNJd zmuzGH);F1%cq#vT+ZtYHw(#6Pn%i#!@j9`LYso?~e3~a(VU9)EQc4UJP(AL&g^0d-wl?IE1U~Y%JMUmZ=HiMdxQAjeq znI+Bo4Q0lZV=>D|k0P})8I^N3rcE7)%gghG zRv$;#PA!-}r!yz^Y{J*)5uQp*a#tx$iw;$JcWy7ywI>+k%Qt~4mR!_!)6=~D9E$v%0A&0$aHt3C`x3wA_%76#VJ{HZ&rSllMa1i#^ z3dyP&3&)J~9W|6C%i6GS`5|)DZ9~~=O{iZa2eENUB4q;xD;N5X8O~A>=ji5(JUz7? z|Dpq#HF+%kJ69wo{%dba7Q}i#U}*QAbnV)Tid{D|d)qX4<;H$hQ_*m0%g}jCNWQ&{ z1KSUyYA}h;9h$Rnb~_GkTT7{0t*OR|SC zD?uq8^g3~!ga-eNQd}SDI+-wG!h{JEe(h%W>WI{uuAT6Brz_U zK8p^seb-)2>~^Dh9wllaz%?lYJmcey{+SJWA#Q9P5c?M%6&e>7w234z28ieo`X=v2(L`Fvv5^6@r{zFNlNW#KKiuB89 zlM+c+aTGZ`2C&hy3iS#*kgV1jk1ZCx5LwdfqY{!UM`p>$^9^BK9HE2Ts5zUWw(W29ta#N&G z0lBAF5_-ls;^<<3gJ^ikIZD)u(vs5FVQYFDFS8)^#E+=_`grlE}^vJ@ct?%w3)xd$zD+$6+S6wa5L!J4tzpcHbwLmQrI{Trnvf z5iTKB9MaKL$%$yc8jvazcAIWZhf!QK&gR!EDhkwzEXp8^mgeyU=rWMTSzZxH_p;yb=??wmA{UwsE9zfz0H~>q@4g`NZR3A@+{p(i1h6a@i4VQI=+| zDvoKD9HNrP!KiDBJAM+g=FDN*?0H;$7cT_VPyJGx zTiWo^V>SJ!9w&V|HCq<0=0lVaIln`cn_DUIx_XeAQ>Qa$?kpybTZ50r42z%X1y?97 z(L}h@w$)TrO6z~!C+5W02f1WcpQVFZ(XmqpM$8<;t8H`mm>{*DgizD#(55NEfO6qX znZB1JTjy~pwl)oO6~HO+0uH%KlD&Ngo}GO_)q3SqQvH^gp_Y{1SJ-8&K*>}d%viXB zt>>O%W2r=GY0bSOyI8$+0ps@v(WX^()M}0Fquop?1Y^h}rp{f)h2qf0TxGP4WYyLi@^1-AgBqmX`5zz-C{9)i z*JdfpgvL5XjGw{MwR;Im&`4Y5D6*Bj)Jtoo$I?0j=7Co^cKr!TYjbf!n#<3zw)pxP73mmsB&LYs=6y$UZ}So~`MT0XcZii6Pq1m)X!OMf z(7ID|^vCCN@W@#vP2EfFmR-r1Aq(%X@8`bXCsUz#1~#e7nYb(@KHM+LYZ9;Hb24sh zCdTwzz?yN>v1`+xLMe}}LFzd-GafvD)#mi*)|oba+mSs-d72c;B!?T3OH3+JBcg$0 zVQtBsBjZsuUcvBgZRpUxJ#&XtV(aQXD4m@-v}7g=L|rju@?_k-zTBVY)^^<5y?})a z<}!1Js85z`5V^KNVbCI3-W2M;oi^&d^xgW9CR0}seR2@f=gelplpzG%;|ucg|!geQg4(RwZVcn$Hp=8crNZ9ZB5VmV`#l_3FR_cp%7x-QoJ0@ zB#|i#y96{k(Mk}a+Qv#jLZb8{HN)D`l7qdfus6*Jmi8*f%cDzJ;*pL6M`w{n9LP+Y zM3P#Eg^fLyqHd4&J4lU2C%N)yJ2pbdS=-o({D>ENvN4{OSeJYBg&0YQPY}Y-cwXO% z-!n0gHYu8Dtu<*JzV!Nr1P99Y)&>iE%;F+Zq)CUZSv=1#UctvKGi552BE3jDF)9SL zby}Q-NR0{#!6{?uOA`Z0Gh!x$2cmPxgrnRo`vqNm055$L$R_fjx3D9X zRT5!=u|!6PVU;yMIbE!Y2?@bEU0M=DBXLfjhQ#2Hybq1TC1U}yrZpGagT(fXSea=E z35p|KMi+56sCf7KJ&6hnT=V6{7B#_P@nlHrl5%7tUnU095fLoX&yW^FLM+MV4%l01 z2n|UhwTlIj@sKu^EpegVd^TOKoM#b%7Q@^OL&qwX`O9JjPS)L)`|i-)641URdGZlC`s$` zr5iUnHWH1cBg92vlh&EHcOIe4ngeIwQ&b)NfR_)~5gQnaQ>Jt%b@2p7K&Eu|g!#QC z(JDO-W;#-(O+`dt7^za?1V<}LXBEk<7s2E!ke72)T63Y`Ja+b%8YL21aZMs|k>aO> zLvpU+Q%_(&sKhdVAxO zpiPRw=c7MK@u7H}n2oVSZOZ#kAWhL53oa%4({E-8>VAHvaF*^=Ki&*!{< z%|ACWkOEuVufGoIND^iLbJdx`+zMUfTTY(2PsTFUsgO4vTAi`M_;(;3-&!=xzaV|R zF(W?kJ^sn|eFlW#z>W-N}!BlzT=%EVjb%GHz2 z51*nvG=axidoZMFPOhw+!s|Q(=~46n73v=2%HuuQ$9uDM-ZWnLT2p7>FnZQ-<+5t(m@r}DpX8eg@)bw^TnDP;$Xsb|j=4d@$IvLUvG|+>&L> z=91>&IwtOUjg^hmg(X$giCj8(k|?ZrwR0Sso@Hdt;(7F~QGpC*!E8Qs8%Jj+o}N2M zq;(GLd5c%Fe!WSI|96n?Zx#2h+@}7(1#DU|je8pgvF}*| zHddBcC=DbhC8HPjl7*!eS|1PYdSzqS)FIR@l@o(jB?P}lh-C{T4^C#%V$jOtKg=yG zG3YcTtF+>`LYs{E2L+)w&o{@URA3b_R z!GZ37EuRk37Jejf1+m;b66pWp`gfL$- zYEGHQ@RI&Ct+5cxlIcl&0xNIccgEz*Nj|#j6{F2@7|3x zOBYMCa)oK&7D2y4i6s4a$b|_LCQSUzeA6ECm4Bv(TzXMxk_itDB+9x7Cok?IzpaiW zz0@O;l5xqtTmEGFL!?ifTD?wALi%8;)2MLDUz3(O!q~ELAs?JtP(7c+52o@~C&g21 z;1Z4=+Ct{w1Gt@kE-HE}4C2M5ko*OU7nIa1^Mluy5Fa}9#72hT;}u7X=?f{C#g$!$ z*OFiHmQGbGbM~VK>wkEVlXQWl@{(S_-}{o3lq8D3okTOQxz^6CEi=X!BP{hAoT!r}dCQoAvEdat5e2?w6< zp3m9v5^USHft*1*S#>6e79+Y-u0$IStzX2Oc|!;;KAat!Ch~0AcWn|6#X9jgvt$T#qo=33LCWsf43JZG$yZSc6 zqtH~`1{GmV|2Dj>vWCH_x6*HSHXfX4O3n1mnQ-?ZwugE$_DM+&tn9{Xk9*{(Se1n9 zb12AR#m-j(?=T{$wVJR{2F zA#uQcHZ*xf(W-~J@4c6UJ?e75%v@IYEk(%7Cq(OFiLfe0jXVZ=l`cb(^|$F$*qWqo zSnL1SY{=c+-Kkcs+CL~n{x_E|UzU3zO_=!B{4+M>DLv$cYf@+LZ9*4U;%45t?4Q(_ zV-uRQ>~%(}7jYprDw0awX3;v^4XQTr;PSo2OekN1j}==|&?cGKI2C=y4`P1nDNMex zmwblTG;(cE)=sTRt%*ZxlZoM-^V6xzC63)%f}{UoYIc0Yg3*pFzMhx;i&`L6)0UCP z$e(8hO-D3Gkr;zj#$t>Z&=o6v5=u*3g6}P*$&?tLUY?PXe^Kv^8NnkV+U;!N$Xa)5 z_pOg2LF}8U7{dp4BbAjX2UQ}XJz&Cw2^0S~-(?TE^y%A7nVM21^PozICm|^btq`5b z31+mPv!0AEm(sRvSDt0-%+hX!QP^arX#Vs_UKR_MErFFLnG$_h(LUpSx^?WzxLuc| zM9ERS0l5klr>?6r$+CZC`DpS)DydydkT<;zNeQty6z$CNiOtwJb_Ur;EywlgW_k`< zLAF|L$e-2%otX=zOXo!uXAt>WgTvifv}x6b(HpOmIjapjCiJCwn?5L;&7wn52YKQe z6Tcm)fuYrY-`|j>Jen}^-^L*O=C`zUVCc3Js1J>0=PMn#a=VbFP*Y~in!~actEgGn zL3S0X(@Nf~l;p{vCV!o=%$zfy<+G+!AYC#^$!g?DQt-=yFpu6f~l4PL(qY&o7*jLNM3H5TZ&$b{8v#OrOU5g-aRTz6KU%Up&4@?+nS_ zTp}?sQL5GDXH=(Eqj$+kRwoOFO8YL7_N|GXB7u7z=kbZR`0Rqzgb5QS{>%KK9&!mY zh2+!LTplQ@I%k{YFj4Iz)#(PeG~9>=H1g51i+ zl9My0^HkK~c6r)T-Ef3C=e$Cwsu1Mnyt}xc{kPxAlY1nK##V<8qsgBk zCE{0vy}rof=zP?zkS!&|z>U58$<(L;A5LARc!%bs{ekw-a(&MpvbE?+cH^X(zl$$| zJdvYo)}t!goc2|6$=lwX-ocfq>~yTP?Jg@0?Y9kOqB5a9OA0J3T;ZJhv*l~ z-u0N_1G^x(7QcODH@dvJi1e|dX`>YX>fujtyQ-&G8?mm9K>(tn%uFUWOWjW?{o;tl+%g^KWlj})ztxpzD z5ArqYLVSGeuZZU_{B?p{>VJ^tZb(9DWh3_@E5tu>kx^K?q{m7dOGreV)N?^p1Nl2?}as8AA;wOBg1kV;&xc%g`` z#QiGGs+%m*v9Yto+>k_QSS)&l13|je1q_vf$ z{8AGqhF+tQC$W+`aqMg@#l9h*_q8`Sh&&}=Zf%b=<<)=ZZD7L0pFd?$ijLK5Xdd8w2BQ(|1=j|lQRb30LC_Cwq~Ur{Zq zg3EJya4CB~T(*tCWz{u$6_9$TlSxurWAjP5{7rl<$hS1j&AocN8B-?}v0?5Ep8blG zXIJpUX?oz%ww|o~*p+S5tEYtM7*nz|MGxMkwR0R6sZ)y=@7E+SvUn+)-gqO#YD&=W z;ENy+rioKVt~FXp%$^ZqT}6+I_8g7sjqmGqXrmHvN%iyBvfcMOX;VVqwS0)-k;O zGUh$H#MAK&@GZND9%=5;YeOIx_Dtsf{&}p}wT>q?qj_;)Xv*Gjaz;biEJ;OJ?CviO zkNfk;H^~;y3&Zf+-kcocqdDPzibnbD=~Ar-&Byg)lbecjhesLXzgkV!{u=zQ4PjK% z$~ZNeNt;?(2)=fRNk_uDd}<|bH8YbmFMu&WqlxdV>B!=@4Olv&JaGxhC@nLQ-!+iB zS%+}M&mEr=6KK6b2>sI=I9wwOgD&|CK^`N?&i~0@Daa)x4>|@>zkEXKrI*dMB$u?( zG{xctBAK;FNNLGpSpF>BPnpE?1o`JT zLuqMA;qv9loi`sPD)pd%?lC?epR;JuVR?Jl&3!C8>x+HrG$eXmXYROO3|(;)4NB}C z9C0v@;qb=2#E7`p)-Gd6pZ<)QbX2Ta;ox9{`*t__ckRLUn?7=S{+AB2da)a8mdxX! zueev#@0mSy7PH1o#Qmd`%8${Lt!O<8guTT}tZ4)8VwPQMhPNo-v( zjBee#vf}VXk`ug`Gi?^L$4=$WM}LmY?9J?%i|IXhCeH#z^iVIBj~Ypzu0uI+!CwR< zvTte+=FD6o;>_Zm$j0_1^Lh8^75n!tV%L#_%-(%p#51BWx5P;_(43u}aCAvS76%0u z;`%z;8o01=6R(p+if^tkY+!e$44cfb;oHStsc^E;uyw@(y0-1hy*Ti^xRt$I*Rbc_ zYtC#vO1$`Q&9L#TTt1U7ZTfK|OgfsL^P8s8yZ64JyXOv&R$CIA+vcG4IW37H?QL1RBl#mq4bfQ4w8Khk7J8RGCS+%(HK)RaO2v*mjY=KM|5+eu*4Z$ZMgb?3I zQn@%2`f?|?oH{VIUtJ31DM*c;Q|XrJ3ELh7%JUuk(uV-0g|&QroSeks=!A3nR8lA| zX`Hx!cr#tyG`OGIfHY^TnU$!RjjHk=;cGE2A&YSdA+#k?|4EEXd@Z;oAuetI|SrQAq2@rCb5kem2K%)>(jSmdK}+q!t2+Dy0zv-ou9DlD*1 zdQblmyJ@j}ISZ!u<>k@2Jo7xy*@sEIIJlgZ2W~<9bJpFD!}Wi6{{AVfZ0tC`dIrmv zE@9fp-WY0+C#Qucr_Vl;x5s~Y$oa>CSXw9uh}AKCfg6<~&M;>CCG2diu~Niy^@Il+ zzl*e4evRg1#!}fak{}@@HL66EuJu_vtu1S3Z4jwFqwnO?G#J>6LG6k$W9S$nlH=HZ zK5H4fen2oyHTTM3(D1POuG&PC|{%~-RhS~$&V!X6nNb^#mZ&NS-NHuFJeW5OCdzL zg`T^|P7x9v!0^7yX)SW9X#<8wr5t&-9W>ycjEs@JxT;>))SsBowA#bidAo$W@oZEFLleLzhXIELbb{!km zuVwYVE3!+}(AQq%DpNis4I^dBjDO(pZlF)W*Pn(OBm z$?>-itb#>@0k~fZz$P)0JkBvBWzEE!n7nM8(pHZ1SMs&V%C7cBxmRNogR58*hXbVw z<|5f=Cyo32aOv!1f)7onpLZjceM=WpUT!Rs8ZgIbB7AyTyzzk+m*qf){tPHhQ*WH(RKKC zJcMBUnlC0Resrxcj)m7JGquNNoD53FZ|y*jItN&^ARjZ2r>9KBMpBK~M>kR4G7%nB z?sbS8$5wHFWgpf$k7R4t0zx(3rBeH?c&>Q`Za2Fehq0-1K8U+Z zl`ebOGcp&WE@kAv%(nEbU7m5r?~pI$@&{gC!jLn$IlQE~F+gx(c26D`ABKL_IEu~~ z%bXdPxpj7q*z%UD<<{YGcLE&>b!FwtbENZeqfnnDo}4N}?GA_WI6RSV6$UW>_DV(- z>B92oB96Bk#fIxy+3X2>Y=*O;gDd`fr!mC87DvZaH6B!?-7I?-1{^+$Iug=+EzV2o6FcQ4gNhq>`I@`yyK>lk5(|5a>-m`% zG{`!LO@1EiY*B!KmM2-=B@b&FyVCFYyT9FJMS6L^fB#-~x%f+QOqek7??C!emN+jowzb=w{uoL$JCDbol`)}zttWH*y$X|hu&=^m%OwCKa1a_WU0rJHob_P{tE z7i_|?QDvAoek*nAezMp8b|ecSk}+Rt@)j&6i*X61ZD!1(ALAby&cV}{5x20o(ezyQ zxK2z`JiGVYp=|YXB*estR=zkVwT>9?`*=iWWZi}}xccnlLe1S-c*g6g!p)D zvel$ffxPsZvzU3~`%|-IL()1*9xf7orIS)G@)(WUydZ@W+_>UggVYvD#3rcFige@R zRaC89kh6QX5)$dng0-{p4AG!UN|N`^QOK3Ir;ib@g(oM^VwblHw=W$ed!qpyTrq@8 zs~2IDqX_TL7~?!Xbq1?k}a`mbhKKL5blhA9$absgs){JOX$*472RB>_Q zphYOJeZ-Mh;k>(WihzhXQGx~%MH$E`invK?$<#wZQgi^xs%UwlCcV^K@+pownS_L7 z3RJ6v=b>GMM}@KPya!g6Uwg*Upfj_kSn=%S&RvGZ(|fUW+(IZ*6WgZ;cpD7~FZS_7 zUy3S~^Yil5aiq?T`zOwcb1aLMxq*m4pRdYZ&#qB57<48xD`xj4+Q$bhOVFx<4?Eoh zh<$dRH(6^?EX6onuh+<4jwG7R*pK^}{kZL3M8N{BnfjF&mndDi7zf-olCzHSo~~0X zflYTZ(8Cw(~!gHDV8+voD6XWri4eDn>KLdA`(KpF-xVec;Pk8a3;4=NgWsW0sy z)ztF7e;3kA;nb;9@(V%|?xw}Gn3jLHA3WIm#DadUDjGNHqgl3O8x>3CATD)jtR9@gp>=->_#b8dn%ij8Igq(`G6 zkes6y4KuvJZR;D7)gRFnYsBQvwYj`@4Ou&M*UAGl1k!kmU3hEq3tJS%tIV`y(6W3FI-2le?+B}qlU6=!BJX_?T68+OC;NuouK)M?t~m$z=0ddgb5Maw9`mx6}8~Z ziU~XoO-qQvfng&Ck<;=$Q|7u+v&T4UxH^l=p1}H9<9HSCjI)KFIMI0QG-V|vZSFID z%t15?I~tA{L6uxa)1rjnJM1}^OrP#wH5^rbtXO-Wej{3v^1UL3Xf`caN1b64$RTl z`dr<{-r$0a?@(4Wl(oeF&2A5+V@dT!mo8mWLQI%2@o&b>&5a&CddScHukrhO$PKcc zwoY#*n+GZs1}sH2r4j4@B&HtnpECXX^0M;Z<@cJb{C4!{42r*f;*9^7e#oUBY0LlN z!{oQb`AtMKf4~&dHS0+FhnrXvU6nJ7x~FXWeZ;;x&A=rO8Q!ZB`xnol;FKfuC?Ul2 zZ$YmUHTaM08vn9${O|Bj%+x6zYybZJbnDhFCB%dY6aQxZdO>c$#?p)}=dC!HXdtJJ zc(cU9fCg$R*ht=&L=;iIeEPU233utIEZoI!y+QJVB=xFGO5;-)pY?{cpI+W-_#7t9 zFY{Y43G$yZedTxMWyQqr=kFKe64DL%OG4p4%Wn~(f0 z;aIRCBU|R;#@%Ps7`N@Wi*bn`i*X5)82?T&5a{PEo7jX#CZ>cLd3<6md+vN0%$pn& zNy6uMxQ^(EX!%9_XW74M4iAF9bnK{O!wHW1Vyg8|qE{yp?C;0Nj~@w$i2oEybZ`*9 zzCI${8=t^1^m;8}0mgXV{=q5n1bQ_QAtACb`9yp~FtN#B?0xkKA$WU*f%uU3=6St;*TMTeUl*n&X6w3_q=>U z>h+iSxj6sy@-;uV{ok-SWGY3Ukt68WrKxNp@pEy0(}Ec#8+B&*h!Hd_mrY9Or*TZn zpIZL;#%Vn3h74fp;w5Zazm^db=i>KOC!33H5+{ycNm+w!-D@%DvgAZk;w3FhwZQK$ z_(19$^MX^ijqXV$V&C86!ehxT=(i!!=OLHw|F-lW?;1&+mc!VwbrXF%G+_H(Nd$Y+ zFk4CHuHMA@HLKZt)B~T#yJ%9gJ8oOIGI!Q6diC9eBo|{n_mewA2Bx1kibKhVf5kKz z>9OgdycYe|gF(Ifv)av#`P0TQdF6gN{N>)Uq)Sr(**mHr=)ndCPdmoz1LJAkeJb0w zZe-N39?V~9ygsR-o^kr_56|hfTOTr|F3Y2+-y?Qn8C$&y6P9gbi`xR)HW|o0zhCfy zo8-lzLw8eFeo88f7*3wNnX;y5L&usdy7gyo7!|kA-p4HA1!wPlYWT!6IDZBTbXu9R z4(oeVAbq9o^0=5s=kJQM`WD19aoB8{%-Kl2Q~{!aAcZM#4t>Ds2O)9{RqzYkHmqUo z%JG!QU4bR*HnM*GenS5R`cvxJ)<`$8P6+TM1Fq=|_;^{;^{gcaUMUGmRgvTsZ5F%FKom z6|0fO(OecHXYY8Cqi}VK=W)dU%?B*RZf{>}sZuSQh<{m*U#fa7GWqSN#_A-luIP?F zE|6;v-jcgmd9u1#6Zi2hm!E}GpnN^@r89nI@q2QPr=jL#aLPdba)puR|9W=&JYHe8 z)NWb@dtEfI-o#R%P&Ul8QM`GVM2^fBM2bf`?9oeZonOQDcX^pTpdrO-RwAt~fRpF% zV6VG?IPeE8ugmA9c=G;O*vel*urNd%;)aa*+tVvxI?L(s5{` z(Kdg3w~Fk{Kbs>h{HW4-2L&?}XYZ*c+*{F;v8P^&?J&#wpQe zv@VAANDmsm8p)*dI&2)vvEOYVLAMq%d~a697e2*7`+3amB;_-TAyul7X4Yk zDjipsc9heBI7T(-K(tE&cJ)`YvP&T%{XUW;nh7r-y&-e)S`^A|Bd*JP3^ppBKMA5_ z-P&ZZiJ^a~h75anlL8`@z{?w{JnA?PpPWYX+MPQe62v*%QloJV63)%0WUo7{-adg6 zB}$_CaEUizLTp*3rC#ka@&NrR{SR<`-#n3$frT~l5i{)tbEg<7f^i+Bu$P?sDoZ`@qssrG&!k~H!bnvaNd`nk*{?f zQb)bvn7b!gidLm`ZfX7iJ-0nB5gxB4XYm>o&TNAr@-@dj-ikQYL>y<5-yNb-?d43| zw}LxUx)WY&96c(RrF^>EG}vOt=C-#CX)qyzPuRzezy z^77_!yrV6!uuez4TBT7(`QjUqOu%bTwCQqCt6Xj_A3Kj_)?!pCWpsw{ElgHyt<6|= z$cBS@9i<)NU4Vk&ZIj6CW5uEn9oy?@c<*V&G;ck->uWf3)rP0()FeN%qFQYgPlaGl zHki>mr=CUc%&4z3$HP(0q@sG#nHzZLYr&-FW=trr<@#eQo;s^>E2AS(`|EX~$zTLd?(S5rTJ<;C%>GkczI<7>b2nk)TO-+!|06x+ zX2$1l@3uSi-DsSMOTx}Ejrcc;v0ZD^a8Dxri?~uX#Dkr_&{gO^Go=E>=e(MU2CTU} zGwjikt=Q|>nd;WBiMG!`m%?UDT)c}yB?@t3@)#!WSj@(*4e>17mu_{+vU}WUPTI7i zs)!$Dn}M!XYm)wECte!5Q%Iq~ee)z%y3XXtU_1JbTS}!`rC8EsKL^k6K!0&D-4@)Z zb^B6`8oZiy3BF`Fwu~+B%_*u5V3=ntZvCJ~hx2$mTZwh(WqS2^!iHH6H0pbo88e#` z6q$e~F^sqGd~q$2gL#V=<5;XLH`h+b-*zz_3V)d|SfR8aHt;=abqOxr3ZzjjX9!|GAniOqP6=DkMp;mCZ^bVz1W+vyCtHHsPCM^ms#a{{hDCOLZu z<2OVwa!5-u2EAd@u#x0%(1^{0doykCVeAeKWbTtZv@T-HEC0(B?pch!eMeHLQDYIO zCsTGGp+I~L$?9Zr{x1nn)Ds)*!<*OXs9L2SP8WOeZhmWAKb@~85xvN_Wc2juYTw#E zpTl8}6pVe(Fs~Rk4sVFJrzk@USHf?&anffVL!DPsd2%o-CN<&Wns&^|*p436vT$`x zUtZ4HL;terQd0YiF(As+K>PA4hUPF3`reAx=Pj9^57Ih_jpF}^cr(&F8+)}gIE!~@ zq8UxH8MygDLBULVG!aVf1Su$#UPps0D&F6=r13%MS58d{twLNG1Fu6A*k#brDZRLc z{|;^a9U^(7GhyO)B8iXhz32IpNsS2;|7~>mCs~j|(%?TJ6$kEy(z~$qTgl*|rP#Ln zp1ehR3ICw+Al8NU`Cyt_J zvnt}n9EegILRk^NYt=#`g|xJ2Y{MD%a3KP-)4NksoGs0`yL&BJ8qH#G-*I%w7|FR8 z0UTJom(CmZGqCp<8kTSsf-8yDGxwmdv_&bz!R<|}@kwyR!OqI~k`j#u8(Ya`loe&0 zb)b8fuJmnQm133KF>p`^Y~CK@@Fjn2^g8s(ui3G~L)z;z=9boY-#*2V=0#Z<)`(>t zr2Hm|W94V`vUw)Y0-!!S#6-(xM9p2GmL!AI*}?lS+W9v zgaq`q)}MRXC2Z5WpbnGluJt5nT$sFjDl2>U!C!6tWsjcS8+?l5JEV*zy zLJq%wazA-W)qt#Jv3`4!2gzVz?nt99{pr?!5aq3PGcJ^86HlioP<}D)2yURQh zSJdJMZ+8XR9bAZs)lr~sSJEmY!O@yG=iSLvr5gEiS7X$mZj{XKNZqFGQK+M^aJJyV zvD0E-GX@MS#HQ`fjY<88D_d9L+GZg`2Tr1$lRp*|&Z$j;RVz zxqt)lDh=9jPab-T^c6ZG=A39;Tgj!nk|~f9tty`EwT4q6VJfR`=b&Y&%p_@~cZ~u^ zXB*D1oQE?mDTa3MO4E|A)a^W6i1xbTm>FnL+l(vs zqNUUP1p-+y`;dHpnWr(}v34~9BD8T!k)Pyf%$*h7J8_XDLpmCE=tGB2T^QY=A?dS~ zr%U%<3}~F4tM0FiNqr-v!JCO1anEVZ2oNm^X+~(t)LZtnB9@FUdVB(<8bHB)e>2hu zpPL`^=nF&N}QxTCGb6F`h?94qI`& zA3Q)Neh&(1!a7?kX*BMaMPaf5GVv=&g4~1&6aO&sbEu?7ZY7tm1RBG>!rImz^Azou zsqG+K&g_HGuL*L-4Klyb7Wsmwl?wrc4=l*TPLIG zUwonv#6l>`zav9QU9ck6%a@_+R5!LxtS^UuLh6k!(PlIo&Riwq{Y4!2mO_OHv9Kmn zdRtPZPK$%Jke5~G4Rc}0Q?mXxAEJE4QnOBdUR;uF)GfsI6(U{SnuB`HXTa>6r~0&mjHwD^+SH)ygcBrb4LGGXwqBi6I}j5riERxU zt??O1NLI_PPCrpg+>g(%+)i2hIbujKPeskzwJBYrCl_w+A^nFFiql{nfPub-t;TAaV3-jb?_tS+K~`_zj5r>$5R414Qna1@#^s}Sbm z@{&1|mbR(P=ycSICpKD!uK44h)$hAe9{kX-4bJB(He9_ z28aFZ==sE$Xf%KNHZ%|y6-oTp-VhSwh>lG{uSp;*@)rg={RPB_1rrkeGxmUb72zRK zQeF6&_^@#KW%0j|%H+%I;@8n@lL-m%m#>YFzkiBH04=dGf5kZ)hzSkB&rhW7<3m{d zS7T7L(c+jN2@Lx^jOL^FN1~Fx+}yE#Uc7qrksp^}Vsz{edocy^ z@xN|&`QOA?R$W)k=I+>TT=e`%Xplc=&YmVdCWg7g+j8#n7|Rl5N_CGLki&qtg>grEIfuVRSfE+WQ^vX z(d;{amqufEuwiI1?mY98kCHK8abDj$Bj4Lf@rKdp%qUy03?7Ge6P@70?t6ZeC{v6k z)oj_d;|Xzox4HfDEn1tjR4tsu1W9nP|Jw>0BytY`oj@A2ltr;=6t zO;$;hx=3DRTp86f3!_GFA~-sd_xDb)_+l*M`;;X?q@$8Y)IrO+tB5^%ke7Nh6nZV8 z{vXA&7|zY(OPP0A$=tE^^o+*9z>=t6DVevK(xw0 zh4NLf(L@j+%0!ViBl>`QJPAx9F+3a#mkg9HR1jU5CxI%-;6Y$jf;6_bcrAXKX;cLH zd>~4cQ($NU<(ih`(*E5|@;+G|wq$HAsGEP;c1D#5w6)%otk`hE+Eq!T-*HfWMd5$k$ zf`5ECm(E?}ZBPsvd6G2IXed_^FVT<-*Tu5y%zesN&dZZ)$H>%h8W+~I=lb18WGht_ zuj@PIIJ-~Zqg2&`Vo$X=rns-gudLZ@xP9#wk)cuYdFLuzj3+mxuLLQG_f=A2(pU9Q z0V?K+=DBYo*|TLP;JK$bw^%IFWu;_+{Ak185R|MH?;3FoQI--qwd(V4X+pSU_1ABL zzY;T&)CSsBPv&^jWY*SKv8SdQOHuZ@bE+Ah-)QTt5-pxql~n9(DB@JrU@o$jXs%~X zLlrqhn=w(TXK8&ksYEu*7f|EYNX3Rm$uvuCkn8i(g;g97ad$URQ9hMHyt7k!0ZjZZ zq>fHy+S0A2Cm0IiAE_rWT7g%nf|5CPq_H>1eke`+d8C52wzmGoS-4)kdL@gd1`Qgd zgh2SI$)syEjSl_#l3MI`bIn-x2d3lI+#z_EXhV_IUwT*mZY0-g*|X;8(EN)+nUYkPc&?GzV_aZ2q z_ZtjQjeA7P_M=Hxsxo0uu8}Hteymc?FY3`o(&Vj1fu7ST>?DQUBZqxnk}7tmMxI}D zOPI{eM)k33D$2w-ht1FO?D8RWISLYVY$6>->?1P5o9nkualj*y7F7~y(_|fuy496u zo&4i?(Kcr_9;r0Eet4T5M~{%UNMmxEJ!9~&QQUjs$*nVo`Jl~3*#dG`C=)8%GB2bG zJ*yc9F?~W6aEpG^SMl`OHMZ}+LgAYANfW%CrlaRg$>3*V(pp5o5;h zqDh~2l4&e&Zyv#I@fhZvQPZVKNn?V4Gm?3fTCL`{*pN$gz|EUC$(1V?S+ZnF3H>Qj zouSoge=$ud{N>A+6fa&JrDGAA*GR>_t-HB)>kcuBT-2^okjFPKk*Q2mavJAh!Y1%0 zhdySed7DlY*4$>p&SN}FD9XlV{g4bU!mb@>{occP=`u5YLJu?x;eB8N_7hys~zKNj5pw2XJ*pMg3*Ky?JCBo7br&^&hl*|#wCb#qC zs#TvN*~mE z^Wc{I4Xmp5Wz{h0t3fJ?We8`}mV@{tSWvcjMJiUVNq(1)xb3=(OOj)r(^TcFuw~AAGmX0gR_-9uEGph>=D3zCgq?jx{P!#*s7_akSg6Qf zsS>F_S587SCR$Osb~#jWNmOmsn|#SvL^)sKS)`JBl}qBBF*k*CrN%OKehOH=XT_$& zI92S&*p?-T_qxmajk~$=A(3e-=94>PPV!s4ljAs7>d%ChMZ__*LXcZfv|>^6l`g@Z z(|fpfJBkW*N@C@Z3Ey1{@U7I7Vsh0i<;O}K%|*$vLZ#1`g-(n6H_q(q!t1)(uA#bjx=tK)!Lh5K5T30O! zNiPcNw-v65U+4Ev3}j$t=Uzl9%*oz<1j8E^z0|n8$NPUiGYeewrxmYB4)3tpq-bJ?I+|BtUhQ^aIoddz1_jvd& zoWd1qkUg~--XHvl3<@Gk=_=UxUF5=*P_%iA(7r}dIsJFH-FX|MqqW;9GIZv02|ZoZR6Czg>a?mVrV96)K~#Okw45nDfVXY*t(r|!a}7Wu?| z-j<8$MqsyZBH6ZFrE?}2Ual%{zE@m!o0GD|goNMO*{sy|VNsKxb{6dEQ;(p|`xsSC@**M;O`k%I==|~~DRb3+ z6Lg-(7<|={b^U9mg#2}UJUx?D+TJW_CLZ|jj1Q+~u+h+m1x>zf-oDLDo!=)WFDpMq z^0Hzw_xTPngk9$*t}I*ClQX-FcArXxaWWpsTY!TymW{nTaw$AB*)88PwC70X4(Y-H zFCnOoj39rTg<_9z`gR;o&|fUZe~i+?lA!nRh>i@$|Nb7LUCLn>dxq}4jlN|4PA;R* zs@vG7a^!)>2_Aa-uzK7m_CEK;Ufk3UiU3A5A4p(~C(YZ=;iKoSf4jK?!fkLK+$hR?ZxR`rs4H9K(eo;R^6p81nK5%G9GgJ!Mdo!<*4EgaAL5BF$LrxRBn2a9vsO_zQfu+5Vb zze5Wcw&fWQ+-5Rr<2Aw`US|HBlf->IE61_RZHzNw`van)B1sAj;`z(BB#8!DK-ibb zKXhs}1=^1x-JK1xf8Ax5tQgp~6y|0c?yeiiyln??KXH&|T^Goo{)T0s_zBrL6s zb|x0qwpd%5%b$FU3E|wmTVEFT&dtdqm&CpnqEb;{Wn+cX+z$JU34Dx>qhz~UWRnJ5 zncLECKyL=k9!|{dXQ(5Nv(Uqfkg#WX#+q~g>@q%vnUkhaamJ78M&Wcn_XR>vQj#T| zMm6I6w$q$Fai7NRs$&qMSfRAU$;pnR+YeD?@KS~k7|Zr~%gAPDz&T%WMh|I&jpr>a zTTGx~t%{79(VK^7ccXN+L9K`*)Y^i2?W*E+^&AduCelEPGrbpgPaL95od%Su*?>w_ z+EFrZUfS3C@~Inx2DN!1N*7gd^1@jXvKOX=iv=1Xr0pED;9y8Y`gHb$9zBU9fvp{! zY1e-swM&#3B@j#(>@;;;AOxo0SG?>BJjLprLIEJBxN#jp_N{`|ro z7A;!H+)d|czhpa^?PBH8_2%YQqA`?%R8FaIiFwc6C*B<1b%a{OmNR_dcy`ZUM*QXN z?Dh@j~7cy_w3_{C}WK8Q4s8lMs5%EJJSbpF!eiz-i z_$r8HE2YNOkBEK3&^B#I)ps@xi)2QnPO)7T7z|QlG-U;~xS~J&ys6QCiTh6=HI#qP z@>lUayB#gpY8(T*)|Q^)pT#0eX-1A7!`MMR$^0wkS0;W+&T=&2w#*0LNGHXh?_^=3S3Gl9z$?oo2qW4aHT$LRJY z1|(Yf?67Ckt^#>P3g>O2$oT?MFL`5?;| zjn~= zWQ$$QA=-Anz}Uh0*brWilas28IL9bG<}t?xIWqKoCXUSQK$q%enSTBrxl=l|0xm6L z@R@vUZWl(U*#~JgcsKc9Oyp+z_FP#!hS^UZP?ltBWT?x^;A^;dDNEW(_h_F#iP2@N zP<8cUR*hWAz8i-bmah;6*KMa$4riWTyHD}19XZ&wEQOcfBm3E2tc@DX%AsG~1M%mn z*W^0G+K00~p))5&R_4iyzAUmCM6qQFSDy*`U<2A{&#c4c_o>JSUtW(U)&mMKfallN#Wo1(v@sp~M- zzq`bzKC6i58|XMAf%At(riA>xNR1HbE5UCO$kM0IRjXD}vu4ddWwIhoezk7hI@*Xv zjC6bxCQST$k;aysIB|jj0|tR0qH7Q?7+(#mnhnACFP@5GW}36 z`J~AdGBsrGU{{898byHy?M0l66zQ{q)>bG3F@_qg#?igz zrvaIsbSXcP1-B2A>Fa7D){~KA#*<{75oLTlh1<=>(S0ak4Yx6@vT?xbojLVcVm*z6 zqbkVjdxn*!=Q$U~w=G3TNGP=iE~j;tv()Q*n#$=Md7H5;JEnC>`N;X2&gCYv`0ioZ zhFl`@)pq(XO5niOfhi$>FOiXvczSwbZvMZ!D5Z-0)TvWcuU`F63-UX6?)W$I+|Bc7>d_E;)|KBn4?xrCfiV*rqjZQ;Q5( z+E|L{$!L_;qMSt9A;D;^ZLzhm5)ZzW>_gei%1-tvEtQFdC=-Ra{xR`dob0Vgj*B8X zQH_1tbl6MZ0d>iQM5#!V$_A}Yl)dHGO%=&YfL2adC-w_V*5T-2k5W9(R^kAX`@ygn zaoyx{5YY`PA(Ep|*xHlU(dcW~h(UHoW^HHtQ)@s&BB7zN@&L}%jyB>Pl7tQm8C4~nEG%t> z=#a`=VWuY`E(t5~0+)KSl?tU%K#F&m`}{%dvF*r?VKvZ+la)Gsq(O}8qy+hbNmE4I zhypNAF*-76g|L&9l)%E;fmcUH(tCq}t;@R+@c1ONm%qU6?mluGv?!HE!KSnjVn>Kv zOS=y=&en~wS3M}5T7#LTtq?&%h-g%@e_Mq#>4M0!LF77Fh+4_6_s{bCOjf>sz82)) zD_;b;2@~HINszyL_wIiRa;Y-^D+Rd;6DCZU`1|;_g8bkg8`LRzX^6VNlhca&Ozz&8 zG9}B>YyNy{XK^BPp<+aqKV#4p~IBgO*KGrm}g}LI(8e%*Ly} zSXo+-DtiIyl+1@J<}ouTE@1Qgi3}Jpn9JT8v0aFIvqZKn9?yWmLzysg1haSCLiv?X zZ)w)Bbh!&rsX_(X_Ucbg?%?rUPsFoBEOPU}!O@YRM+aH#b`2W~D-mBI3RQ@FYfH{= znoJLo$5n?PVeRBV#Do2G>obtPgC=vwFBS_C*TfHzY-N8-Z{R=4_dMXugb5QSOqeiX z;uDfR$sg+>7h>DscbSrn$I*W9Xu7s-MpkEA98x7PszfC+EPurC3^%FTb3U`y9wJBN zQEE3`#i{tqjIqc;(e)RZRL+MQ?GLm6?g8%gE5+Gjn{eykNA~R9SbX&*MS?fbX@ePe z&d=uF($0*3QeIk>WG7*S6TQnklg_FlP( z`eYvlpUBPqV`I6oxi2G5<>%q?Ce+E&j)}MK;B;mf!`w6DHn$byI<}_ws$FdD--9L_ zE>SY!6=9Cf6v>oPl*6CvCI4SN)C@pvj7axw!=qey@4& z<;9Uhd+~6OX8D8N+-lR9G)o>(_I^*McsAhb%Jvw-o>8IZ7}h-7$;`Yh7=Gy{HFJAW zKXW_A-n~QMl&YL7vW9gny(nG#7}uWe!z^eom1+pF{(3b-s#K!pwhwg7r^ENiWa=JF z%foH`KMV5r=cd!F-wCSJ$i(xH4lLiZg<84oxwmH&W6$N{#{QAq+B#VL&d03-^@SjB z&y3sdobQ>Bm*tl;yk07H4{MA4&@;rW>w;gE(Tr+YmcqGn3N@`37a`@O{~*7`WaZkm zYb;u{h`6{f)8&7UNMctSOjfK|G5PoRD#)eT5Gz%xWD?{iz9~}WED7=7Vnc2cY#926l7qQu0c3=-46u$o8x1daG?O#_jF=N!TGdJ13U@8tV zH5>A)SFcjFYE`+1{CnlnrAySVT{~sXgo$s5$%fp72@@v%`+QqLe&CPUkeeyZN%FqW z{)?~B7<9x(`SJ9*ib|!jkesBJdnGd$C_&&I52DO13GjSOU`T@O2wtnvij$I3F{J!9 zpx0^9>I~wyUhFHxue4qIt=6EmPD|mews>5BghG+PjhoMq-0gjhL9auVoGA8nV9K(k zMDFa%{Nuj3WXMcHbO0(eJidN|SToseggCC6WHT%3R4I>*b8ZHXoxq?rjYzNb=Y=Xe z6UNVCOskUk_=lQok$(pHn*B*Lo^OqmM-wJYm@r|&go*DRNwWMwwP}XAt%1XH`_iRL z7us|jj7{eijH;6phitiVRwR<8>JY}&iKbPPW-Q(Q3@aB0^adq43b`9bJj#saSifpII|g>fKYu$~I6kLN-EIV?DNd2>k{@IRImK}m$;nh0wt-r@ zLo}$@fTlxNqq8>S%#!ictyh<0k!2X&xjc!U>9s}LRyLMs#cwkUE0lT> zt`lKaN>s^e=>YO?slz4N9vsiomPiZ{_JcJ@y+DC{S~ud z{UMVTue0=7|A0jcrr<0tgXe`^ymhIJ?VTgowH`+K4F8I#9^*4O6vr&>@ zV@9X0^Ql@OWlGAg@V~oU>V~m(dZQ zsKMU$i=XzOhliQF>H_92cIZ?|WGPXDQN7##;xy+!Mx7Xs!p2_qi~fngcUM`u?kLd~ zsTn4Ssy3s0w&v!ZS?ss$Ht3&gbnKf-5 zK_z-HwPkK0+P~O!>$U37Vq8L}R*B;XF|Cu*NRp?PPEJY`VqA*z>A2#jK{9ob@~)EO zNbyxtUgY@6e~B3Xqnz2eixc}#bJNr4btT}zRql9(@c6_LUPsG8s3QaL4@oet{6joB zv>vA#BbYgT8Z-OXVd~)C1pZ91g?nD*>Vv?PH6yq8@8fx_6HU9eApK8thmM;E_7P}o zC;kZ%xVn2MbM{|IS&wDIo<;22=Ye(B(zLEyC?#C*imL1dy5!_=fBZueQ`WvB`XxJ$ zKK>12T(pgYuFvgj!quUv#+kV|HBhRXK2VQDW5Z@Vt02l)6V!( zsnt;C&m4~S_I-->n8ftagUIpK{QVCPY$9umnarC#of$J{(YtjClKmfZ{M;*f`)AOt z;G_&;!Qkn#2--7tH0_$Tq)qD;LXKNvZ)48U6|-nsqZYG{JeAXXv28gsC$3=bgrS^% zEM#NybGo+c%7D(jIr}b3j`KtGWGqmVN)c~(q7$dcYqNqZd zKCmfu8`fs{$}Pl3J*Rv7?hNcUfUB=wvAkSiY2}m#?sT#S{)-xXg@g;y5WtKJcA0W|wEabau{6<#e$m znVEBZS_gU$8qCy{mwA443VnMmVCk&E^q+Q4-tX4tsWfiZh6xMy;+QHGv9TBFKg3Pm z=6!TA!?ryU=Mu!!{!OXZpbldw8a z514!W9<1#g*fnDi+)4dNFx-KD)br7EKjs1+8=wQ4;;!v9DNwmwx%57&DoBa)A zRveYhD9jZaKEC%y>35!?C*IL#*)j&!&rFmMODeUByv-(Y;@o0REZZ(pyH5AT_vtic z7!!sxVeyE*1SRUZ?-|3)9h+(3nqsr?1N1`dx-hbb1DlTo^Yr3TO15i>g+YTRE(E`D z6=&yRl}*KT_k$nvYkuFlzjG zMhqRmcFWH6EMdXB*DuN0S~NI@W@X5XC(Jp%ilwVoqPx40yRXhNe0?~Fjvr)R@ABxR zDTk9I@%k7lr>Tw%Bq%}8xjAEqsx*P~XD?DcJLIj=mFg{fGrDGGIi7^2jXhW0rZ9fO zScdoQ!?Nf0EE`gaeUqnR(|b8nr_W+m!)O+5J-_W3wQ(gD zjqRC|nn3A9uH0!*hd-iSi)nP+FqO2r1av7jEe2^KF5Q>U3(1lln!L$?Mq&B6r{BUt zhwiH(8&)=UT-iM7b3RwUab|Yk@+n)j=nV$h%hQihD3!c_bPW%W>tb=|b#SsQ(qHXc z!*PENHWr^;iyBSUzP1W66YKx=`o)9^6DCZ2Ur6tvZzsr2{9!KaI*6rJAk!D^C!=FL z8_z^zX>AlPW(ozG*eGJ1^QG9iT9e;JO|dRR3EH-RjWLZl(pJNyRfi~9;gfjzcBqq+ zsMTdO6UU7f`Q6OI&c#t^RI(=?33GEL=0cF^v|0)jH`>hRE0q%~O`;G!@)==nrX@CO zJ>1uH!F}^8wjSQcySM~wY#k|5Jo)g_8mEdhziq|1?+ zw7+;K3(+SUaYZ_fMR9mETdrrNea&pB)jGMS*ve9gw|^|fOBn6T>(^>cHb(_%vSq=-(rm^y24)Op*5cV*y8RsgpjfgO%4>|1GauIR0irRXL!06Q zT{7YNtU3jHjhghu>oab`M8-~-#^DW9kcJzZSy_`WhbXt`5aLtkC#xLWo+4TFc-?vk zg(`@vEy!3vBqtJ-9$=+~97`JeU@6MlDqly1c;`RWXko``AEdPI7FX8 z^J%g2GJOl!Vi0-J#u?3R^x_(s+1bm#KO<+!f>ahsBz!XSNwCKLt7sZ^G9?=Hkn=fe zPz5=k>1A8*Uq_=-(R$<~fF;Nbq* z9G)^3zc>|Yjh3X?7<6g!P|5rbTipW*dwGWa&(c%1N1b zOk7kHDk0R9lC;FVz0A^cAL!V<7pWs2;u)Ytofs$XN0FdbLtJzW78#q+p-@^%Hg8X> z2BooAX2;P^M@($|uk>mP!4(@#GMOo)JI(zJ<%OtCBsw-p2tE~2F^SY`RGw2C7I6Rh zHTqBN&+}jvNeMQ8M0k&QBTL zb#~qeCgj-(j=af2-QIo3{dyZmZ#-e=#_dGMCt;r^FBV~!dGPo#8~2?-rP0%{Q8|vU zo6o(cSLrLx4$_gh|VI-dP=0VxK_N1VhFAraOk-c7L zqMokh(Gzd>AG%5THqroFBdUZrjLwVf89ycq3uf)*-Mht&>(_Yr#!r-u7QNgRu3+KD8Mrm7 zj=Q+Gnzby+s_Aoh{NyRSmM=kFsv4h$9h)#=!h{JEe+xpyC~GutF}-uuJmkxurf_CG zg|q0%l~#|X+`;*yZZH#n2+3IA+S(dROUsmyA0kaf@9XPJg9Z&q5P~~b&4v`plG?b@ zE(cj$G~_E&nY?*i$(J{~5I?18)1(-;cJAW3uZmU!##1tj9XU$mr$X8CWKUOsa(VJn zwR&-^zri;UZ*On1XU`^23}l}!6S)c&CWGUb1DRQ8rfP8u4qtmu?G{}rTRb26a%acY z)|w}G+)3MP7(L3nVxKl0c?uUMXO@fus7%drGYMmE9D#-0pWbCXA0$2?i> zc^PO%g`&nhDlHtym@TKco>IT`7o5^$5P2+!i?tn%>J;GGuKnEb*U)~@Sc+syOQU*O zICt(QIcj#MX1O91aV<)v!Uhgr^P*wvZj>mLhZ2?RlT-JevsYizxczX-6f8nUMIgTV zEELV*A|J=fAvIZZ<|TUuV|R4kk`*u$dc8`^j@Z3F&3TX4P@*m4T9>9&i~9JT+=0i7 z2ugJxN2|gvWY3+IM=t`YP@xb~|GX|T66?&lvDJj|=Cvmw2?okms6wp*<{aDPfmOL? zjBfSClZ`{V%;LHiA-x@BDA54xR~K-<6-keo6DgePi-#U-hcsl#nU8E4jCNOfOP0ez zZ;5Mm>De$NRmM!@FOr{B#*YM_NtGoBpdN`6f5zU&R-*i0@q0tcJ|DPaT$Hc_M@3QVQ@&6mCKKd5DwNY>~uQ(9nS zWr0?mj9UB82w_R|NR55zt4PU`Uj{0hF!4Pgz4!9x&rj;qsZEW=Z@{+} z(o0^G;$!=J#Z(!Y_`CQXd!nRg)XvEXb4$zL`78)AP7>RfPNZw6&P>~M6{U?d2f`;C z)s$!gf9B+c1uPgN87m*I*7k4aLUV z8fC;Y`t%#fZGSbE=AT|&zrVrqS77?`X5xFqbYK395w8)GAU9#cgo!`H&xz81ny>Qo z`*J7Eo@!6ij^(*~=pMCdmq)2HU}0%43uuMXT<(FF#*Zi@K`nkuy~fhSRPwr5lu8A9 zWg6cd+TmeYv4wCd9kBg*nPE37Gg<5;^I%hFw>_nmgbRk;MJeH~BQrtqBt* z{z61GW)kGzE4o%T#|+T)1iX7oVAPjMgpz`# zvWi3Za8_`f)ABMhNOemUQdSgXjo$&e_D=;R6{ob~sJyHDu_b(^%Np66<-1j?F65tW!%` zHyuNe(iWvugk~0)sUNUrr$2M%3?gT`bfhmM7*a-)@s~|kv6_$V&|oNd78c^kT9{+ek1Wr zsa1p8O`B4yNe`|DNOio5%~N~OuznL7Hm=R#r^c9vr?#d0;#DWN|l?AdmTr)flB%DVf4*3=okm(UNlIdb;THlR%W+Yq(z_xHKggb){d#^PF_ z2G667>$f&cWa+U-Z0^yXLm$2eMQ#)!M+Vhn=<<`?@bKWw(M5C_wdZF=`OBk|n6TQTas^j_K z6Oj`B*An;sGTYC+7QX`MU#p|>1si&e2JO3W)8|j0)Q?DHR>PVsKXMBXcX!Tjn@_8e zOH;P}Zw&DtShf9(_!Ud{V)>{(X}@uUxJHv&6{cj&(n5oC)sLMN)$F)v>KE1XtENz8r{`N$P67E^54*M_O z#^c&WHjN(3j_a`^h8JB+ittOfaQC>zk@*7{vgx96=iflgoAd0vEQxpxQwMcp&8aKw z+BA|;%cPfkC|!s2l6!prjgnjv;}H=N`1tq`6cqH8C>QSpgARj1kL&?A_zX+;B(U}5 zSxzqQgN^nTbLL-T-rloZ+Ow2A&U$>_yd_p{JR1mjD;n5(4gT-^c>DSh>FQ46qQ_oB zHZ9__3$I{to>a^n@>G@>h-MzcA6`V{-t&B8L~BQ^F2z&OQmXhJg#m&5VtrN8#*xHK*hWP8{zMawi z2QX~iX@c&ZW6!QFOdPRM2>dA4P8!G1A=7y!3*BfoE}6#gp#zwA{H3TmpEADhKqk%F zDyO%7@n#-~#_ffJd)T;dIWyK={wyx_{#R)?_8{x8o#E7(s|>7^Q-p@IYT{Ui4V}R& zxiz8V(%OZLnJ}D(qH=c>AwJi3Fsgq)RvvvKMfl9QsZ($qw3?GA&v1F=NUY6t;xbud zV+B#qjxciIPzLlK$=!%}?z?Sa{nnKX8#j}W;yAW;wm3K$xc61~2f2+N%Cd1|7(RR` z^EO=mO0gu6pw7?16DPR5rxPny9p~AGKI}HMD9#<-c_mx)!cJG&(jYf#@@@&ORPO-!=;=1 zc)WP^XCeIqbZ_X{WdnseW-j7gocI?E3REqY!bHSk6Ct1 z>ZI{w+Z{hFyn?}6+yi2f>h_IeM>BBvC{B2O0dTjWy>Y~s5@#fr0fmJM&ok<)kO5OeX;x3sjt!pa&;D@#$kJ!b3dc`RPF z1&=3z+&g>4*mDu}nv<8F$@@Gxa~!{K>_t(p)6#b2Y(|Y8%j_9Dv3a_h*TG?2y<+T| zi1&Vk$J<0~>>W_V`fy_RDt2F&raw0qb&eJ078W?Wq>`tP559eY^($9%;H)HoEU^FfMA$kW2N?U%)xIw|d*mD^PMji2YM1E3xpLtGM|bStMaa+fv+K#0x4h8BZ;T>N zluvltoRmuIgu>E})Ty0_3wSIV6nELXWf^-;-A}3T)tuS4mQ`yv@it0@I{XcnE?#7> z+c6GbIZk9sx7S?{QN|(O+`M#!)BD%5;n+1f{LaDoOq#cxIPo%ba&bZD`<6ys=Q4EZ zWxAHjikHVpZr-_v+uD^}d}{0g)(75Y%bW!)TDgUr&x5#e@+wkaurB-sr`#oR56>^1 z;>LxG+_{&s?=wm2E3tOT$msba7&~qpQ&zbVfAAy^q#c5cX)avp#?`0Bp5=%qN7y)b z8M9XH#9O=v{BG}H(xhoT@CzkhkqYR1-pDUVmdD%N zxOaRXhCHLOvQm5{68=3%w(pLPj`E;S7jcjNoUOUg<&e27UCNtL(=`VR&j(>?o|8^3 zOEIvd6Wv$1i?@iaY{H_H-zG}g?Wn>`AsQ+QQEz3SLYd4W+=8rW?NIr?;&DPDYLymZ z!_Jwkb`D>}ggCxg`iwY41&}O`E7}VJGpt4VzBsy-53yG4+P4$EIt;gs*F}=4=-6)z zCDW?@enD;~b;%2%_oM)$+qlX>woaMImCG5I5=|)>d6xTOTI_6X&}f3#xNrt@=gnvS z{CUioJ6ALl%}G#y|oKwr6UmbPVdaiZ|ysaQtm%=FT5Od6#77bQn#cQ7fq9_?QW9x2aUU z7Ij*5pmWD2l+06=Ze6R3qZ@g3&4VJ1CXhX41Z}Y@g*iF7KOu!XGPy%)26R|S!1H5l z_q1W|oKX~Ub`a;|%jCJ27&><{VOwT%-S{ZV6mQai8!N`JdebIu_$qKzSaWO7F+x;o zrcK>WlL<4ZVi&?I-$-un*@SnFwzPBAvirzWg6?18c~Fc9-^fQ1-Zrn6{l}hhZ|yXE zT$?auRCVrbI43`sMl47c_4(?}yIHX86jjPOvUguH3uiS+*`Ahim9z5h##IW{>rabP zdfZ=p-2-n=^|JZoUk^OPDdCzPPf^Wg%P#7l7_FrRsIX0vwxMUpi( z)EP9MxMQohdG-Q%8gwL|!i+Gl2i$z*$BV6FxM*LInPdBtN#n(qMQ%9N>`c$Cnw0ravPm?ZhB8vcDnbmR7vJdxO`n zUUKKa3_hl*&;PM^7VvQ!X&-*90rG(nVFfHnVFfHnVB4B28WrWhpWzs;~c{QPDnZoh}Ey$#o{Uce)7 zc^ky8BZmNl^nn;%@hA->tRiowCwD*K0OC68iMUetasl!^PT+ z$h*54zw9cXZfvC8z@-EPRpHX=F`NjMbGT14wtTiAcQz9S&0k9Bg9CIMyA%I{K}4Qh z&B7zEMclU-GV&1eq&qaI(+izX2~2P8q2>HbxM#{r#*Dt$V~yFDyHu{$kmR7DG|8WG zL(WX^!=QDyC>ZF=$UY;40FGy1>%N$j68E&M3sZ*-Wc{rE9C!;)xAdpZV5uCuW9W>X zoLN4E!Rv2QFqb&C_YiTcIc8cV*Ur4)!Grrk@a{q#RDdF)IncLNN}R1rJ29^JK%$eM z(6-|uvej)#Gry0t>@*FvTL9h}eeiL#K<}K5-q~NUQM8%f-8g`Mr8YQO%Lu!-=*ZozRbn zvy63%5Ax~eYI-kyDfVef<`4U5Gy61N{+Y;-!2>Um1`qcP_<1^`6Jk;MUHht9Sx;_X ze1TrP;G0&;!Le(i(e`mI4}Ch5&s&B@NMgNClhTlo$Xt#B;pccD1i3aLl(V;=bN|63 zu5CDoZ?)3muH2<*$7STG--?FbZ)nwX7VoaDrvIwf)NJ33OmFwlZq6mV{Q}77?SZXZ zZbnY*Xz={8W5`%sT6MrS_A^#q9zuNn*=q2|A$ebs1oY2l-4$XQ6Dwrm)Ff)<%!;qK{!t!oAxtljXl|0ddGW}*q8{JA~J?N=JgRxf~iiF#yBIK%CekMS&7 z9dpynIEw_wx`>ho=G zT2!WjuQUD`Ghl9_$I>PX^(uIhEoVlOLZc0xO=co#RyJ9wE5ftq^g;RgGr_l_sn?_| zuD<>_nSU=h^~fw8$eJyHqP2Q4s6l0s_i_JX{&;5H0@f}N@0?A0S+wy|YUnqPO=?A0 z{{A${W`kNQ3YGL(NUt&63q!F|DMgTIU`oG50%cM;7F*Qf&)4_z_n1iI8@_X2tX7G~ zLG0&WqAtCA_7r8H8{K>KqE)R@BCcd)P6erzHI8Z9kJ6w)d6Grr#nj9kTMIR(4t=0? zw}!ZRXA^l^h>V#EQ>Bn-;Kse?sdps`x;s#_f(VljNCGV&Khyupk;xsQSjorBo7f~onYBe~MIoadEUt zHKyiPqER43sHj}4H|t7J-aM4f=*){Jk6C<4!-RpIsaT~mhb9cbREWI-l`2s}RE8bf zwc_fTW4u_m5Z|_g$!?<|sAd=HlqyJW<^0n{|i{eG-LvEOqr$c!kybIK)re7E(Th`;_2W>VxkH4`nTos>J98W@{T6;g2cT`$tx#E zD-IpJOyj;|C{?5?YiFz=r>iM`LB(lMK0EOtA!Kgah0NY=H0sexG=2_~t7>Jezg%Yd z`Ri0@QHA$6Zj-%5SFw*fjeE8b`<%uvM7^}k8 z*~Z{TFMsuVgq}UbjwQh~?O6viA?m*NP=7llnK)BN97KpRHjLmCM>%zTD+3pwVC2}A zaP>64c3dfhhTv2F68HwW9 z?k#NJv6G!Ub{PJC67o)+6o;8>aT>NRBpT`g#Kb2GIi*7-#GHA~(s;(6;6-!{H!j~I zPHd4Ur+k*n>u1W*{nwE{I>Bq(@|Z;Ivj?vbXz`r&A<5jka38Bo+0ZDG zP#7ji(-RXN!rO0JkzAGQ5_WD1=U=KwO87|d(QD)gu;l208zkKq=eH_DU{OyZZ{G&R zBW^`SBl9Uh)e1$Kxp+Mr7A+&UM`~n(o0m@zCG#aHs0cyDbD&L9qLwG46oNAA$6y}H z^*nt39EDJ_8bvb6qHL&y;8hEes}agoBYE)p8ZH_N3eo5(=%eG@*%u^)+~=t@h&T0I zlF5n4K+2XYMuo!CR|*Sy^vKN6Zi|VGlM^2HkPF*ZbIE=%w~z1U@THfO3E9BI?<_tK zPH)S+7e$%cr-EVJP2OU5gxq*e)WbKJ7b|9{Ph!Hth>edne1SIe%S{ILMPi~}@y0a= zg@l5-y?qh;?tN>OSmdgV*Ne5Bcq1AIQ8!q9B9Y1^Gw|lt8MbWO#?GBP*|B{qM=sn& zC9XSOZbF@QMRCg8i`?$XBqpiQYSbia%qU+qfMa`4k`VoY`%iA8(nxtC@XSWWm&dsq zmB^WkiTHU-7bT5{GD^C?DpFZ9-o13kXO?b{WW$~{bni8WJ*x%?;jM@BSBgQak zKqq`fn8w5wWkRT7`-4Z1k-Q<8nCN-_;gcckk*M%;)6^Cn_H;QL(XN*3fGwncb*T-8ibG?mTOI^4i35>9u5W7{yK@CN(+} z!wW;gJXcfd#_gy6Dmx~2%PC$g8s2^WVi1L2?%u^SXJJhA3Y3PPCpC6HnJAwxCmWad zXG)7^NCr7(;>DX1o#azli@Ad<4sp+UCj}ADqxV|!bsT_xR!@%S?#k|d_H-DqnVMxw zkd&PK)3MTvOq2@r=Jxa&KY&4lMzdw}c(#oi2lk#g#lIwFNKrf?p=M;x6M*{7Jq(9y zAMsY{fvu$wLWZ=8G$|6X@~cbE$3xgBglC|)4!Kez%AU9vY8_d8oVb5C#T@DMg`<3q z(};VM^4-?S)q&5?UK)PKync?x&J&HJFC#}zW?I+6Ol;Yncx!h;zwYzu1zLxU=)_Cr zYhD>%&eBG4zOPbO9dn!cr{&bBnoE?o1hg6RP}h1dgKh-UG?xR3$!f8$$OVxXUj_N~ zt@C(WxE1~+VCIpF(Ifjac<5AC4ll;S=|>?;R_+@hB!;_S>MZS85 z-qBl#DUmjVJ%pSQEt?Qx)rkG`1{%)ek*@%sA6yn?QS1QQK9Y-ZoIfjkLm#^ z9V@YH$uQb<9mIwe<8ZOb#JFjr>Day#vsbL9te1@JO~$fr{$M%}9>eLoM<`(L!H`vB zn6YXZWgW${ps;1ct__qDEt{Oh>o9!E1Ul9(hFL%^G72#*sx|{!l>*0X)mXEAHGR5t zq5HrQLSS`d-+_f#i~1s2h&zSCksWugkT0V*>rTI*bq-Mn{Jfj`Pou%a&6G|&MZbZA zS+waW4!#AbC>pWS6EVE&V2akrkB!Wg?jxr#Zp>&#j~T=Gaib8Wo+5S1h=vOcoxPRJ zqD1AaUKvjzHw)J;iGyWkW{xh$yaA$4y#Ag%LFLKqYnO7)$@B5Jw}JlipRr``NL=(W zY#h^g0ZXzRq%c?ZAs>bn$V=c>`{ zn$Vj;;@(}0Go{6(1-Rc?&%lK*S+HX;0c9GI+w2NmXC9z>&9XST6=ZS0LQL-2g^9aE z@ci!MiideD^Ck_YSFb_DORf&Z1F6xf)@PrOK3iwX5PSj~8i1)~F)#2W-3oDVWEXs$-`izp#vP#~+cy)Kui$S8OOzx3t0D{wvv9 zFJ)?pI7Sa1$oOe12s5#xe50bNTTQ9hrWhYzeKlK&<7tG9j1KP^JE%9acif=hQM`a$C||oE z&Ys!HpTmoS-N%vr;Xe9}oW?Va4;AW{A*B@LV)2~%EbZ5q*b@EdTwb#MmpY`r)|y8C zYDjnPA3rgWG_WbH{Rm68nZI>npy)fB>AzjY#+e;cHfr8euih})*2_(}Z#}H{&nCn8 z4dlKgUR3Mj@Xe|q+@cN}XE$J3`y#xnyPN3^EvQwfBh!PAlh-jNnjgv8vu7z&rYz>> zX6)@QTf@5P=PpQqkX8DM3f1GhOlvK{&n|1e( zaI;5MV!EEBQ^5qfRu&@s^b(FXYfi}(`zYolrB2E4dd;b~Z6D6N1~6f-7BAm8;+>nb zdQuJc4X?+^@IaE{pA*<<7QhcBb+ zl%rUPMp~5)B;TX;(yu!`Q6V>wGlS16DY4RLC&`-g_hN#XxeTr0SQCTLlX^tI_L}@& zWYPd5>FpsQDr>0+^4E}hZBh?d5Cgvld+6?%({XPNp z|M6>aCVu`%l8X->KfLH@iFow|%d9>IZw$Xq%05HYPk;J%?2iNbAsF6nKE4g{`8qso5UH|@fkr3m0-rl`#5M)xC&OiK!jn%I`!lqc; z#;{`QLOv_Zh#wE-hvs1lFUc>MI z7Bgp`A1cNrel1Qr@3au(5;ENXUokF`vd{loj7!*O{9cSp$jI*#2&4)Jjxp z4QiG6`xg@9-}AlSb|b%yg0=cFecFWICB`KzJPR^(%yh;X#rS{3ST6tC{NWyQNsNcy z+QqVC+YA#PS$Uf;VxhBA#Qoy7sAS`yScR7y263roy|x=yjx)f#%FrF99dT8Fh` z7^B+Gr`6246!84axV|f>-lso#GTMo^ooMArHpt?yQmHcZzDu4)EG<%cqofWbX~1BL z+ba{S?NqEDG!jj@j#LcLa(e4QWJT)Jp;mrObS9V!!7aT&)gm3%c43U|x|G(_ClhmY z4(H7)Gq`>p8&f0y9ckJ_ zKL3xJteD6!*M>7`$apFbUqU%wGsD0q$?i{`^oFA+-s10($m5T8G-_9s*C)4g?Ufwg zJSC}CDkC=!9wQ_w5xv@s{8g&plYEdsOa+RSEkM$X59AYKD*oOHo+R0!4t+_S zeE^NCmB2y>d0FgpHXpl%xw#2yg&9G0>XFUC#4zwq66EVgO~$M3WNPQIA@S2G+Ks%* z+SOx;d2o!QcRpcZ<4DD7bqMebW3&+DEhbM!_T(6!9fK&D(~ZP;x7mB)F?us|yzFey zd*`QWK_7JD`mP_@iBq8(WOKFr&7%B23G&^$cM}{OOz+;kN&3!RQhG!Z9j{)!B2%VJ zh8KT&>>ZTS_~OM2vSrI=d|?_%bEIW$K+OB>8djb-!4leU6<#~%~qCNfJ@?~c=J!Bdva8z98F!eH-hVrqdl@g{vcE~n9$ zF%-?>hWyzv)?A0Kt;(@u!5qr=9)Wv8GFHykXu_VdWW#0p%xcZbo(rkccMyfMB{8-4 za$3!tPQ>=nY!3}!c-LASUp^h@`lDzPXu`Zn6Y#4&m{J+znK^JGWv8y8hL30zX!%Ky zd$tjRJf}7BuaD4W<_i`KE5Xv$!8GmN9rc6V?7Hv5v`M8H*JeJgW=!V&h9TU~)Qf>t zEtoQV9>qEjAhT5@5zn8p`*JLU$MwKl7s99!ducym7+x|Zzt!W}Z|Nbwc<~|&7cL}G zyg<`4QY&2QA(wiG((6MnrBSkTuUN4nDucT(BSz8&N&HG>%-BQz&q2B;>3RH&k$*O7 zwc04g(}*+`s3#n~ok*Q3L6{h(bCW76Q*_EtTzUju z+SkIx&V)1DSD?;Ti~JeQiFj~|4-SsIt>R|RK#JKo&Cj(vd&1USkJ0@>U` z$AjQ=B)ewCRri6d>yMDDPD`9Vo#dr`1)7z~idP0_&K@{~f8{bfI&y_Pl`E3?_#Bb0 zCCF`hgB>9*bZc4$dpj4hE$;7zFfN@M-#Ab0FbQn!#NDrr`L--vV*t*opJLh;uK z2?^oDhY!@KQNyrLdS0Ynq4)3K8+rx5UQ>Eoq%=yOl(T2g{;S)Ki*fl;izLkCayik_ z(FP&>pOE&Kdei;={qgaUCi3`oq&h?Ty7NZ_xpa&)=uq-#q85z>Yw=flCXD%G}WttHdwF=}dpJ2bWx9N#0HLS`BLPGSLZn?d~AeKKOih!G=3j2JQU z`;nyR9~9&oEL`(ZHAgI44_-oLVrl3tihBQ?PjPaCNH+BFn3|C*AOJhp%rtD-n#NVj zk{&^S`9y3?GI|`au~L#CS79o|{a3%WlBtJ5bQ{i@()zQ^;E(L{3!>Cw zTXGohLz4{taDPHNuTDl#mBzGe*@B9Byhun)#ydwYq8{BM!Ni)#*N=!c&x*gR)Ns&B zhor=>QDftm2dD67d`=WCO>Hdi-bUeTz>;|1X&;XK}|?+>B3M{li2vpmGo$76hlR z!@i-7soZ8hpI@G1_UenNp+6R#GM>mdX+FG93~k(#uM;cJ7*?Mt2fxpUAAyQ_O{!D2 zdR^+)twXJ9RakW?Bz4ZhK-G?m`S|P%bJt%<4gJx4 zqe~O0GB%WW(f(F^ zI!^V#AnMewPwkr3Y1FzqZ-0Yj+8;41F=E7s5hF&vVe-e_9vUz)#oSD0=*do57cVAB z<%_?P{i8u+eZP;iSu3_n_KebuZep9{_FJP?V9-COor?QUUXaNzJC@qFESh_YR-=32Efc~!Rn*DM%!MM-{K5;0iDA%{Ub1&Lkr~Wd zqGbs~eNm85O;w(*fDouK&COJ`wsf~qbyrnp= z)~My;IxR(c(j!ldLuF=%li2=z?_hcc=j8OFYBbE*iSjj0Vz4%Y1Io`;j=PqMJ! zVH%B9aCApsLtNpTJ5wdND)-kkHKh5M=TgMH=Gk*4{^I$2_VlT7P^S?iMvVN8k?L@% zPEM;qoqw>0JQX33r4hZ-%fqk;VI=*P?8kqS!r$+s5yD5TOD}MZVO@<%l`NS(B4 zh+$UL)G-7i({Qu5LH_X!E!)gB1ijxsleSCl;o$1R%S*c%KV~RxdXD3v5Z<;nwm6u6 zWLW*~eA3C8(rGATMvb9k-SNZo4F&f><$U+YfS;+&-KxLK)~+rKl5!&-7s664~?9o?$Ya?mU$59>qI z!7B|ZJw3f6;}@Lb?C#lg@4tv)4Vx1zP7``;Bn8_p5ql&tymdz=c40+aa@< zWH@%U2$u%entz)}%i0cG(dd=VbLOWw#eL|xUWDjb(zyw%_grGfv_1@7_JCIpE(j5Q zmOXdg;GMfXHRO-EBp2<_$HDjnwIqkD9q(^!qU*#H5P63_J=!pMWPiF(nMLTQYt*UM zl!+4-aO3WIhBWQOiK{o5-m^O!E=TkE++MN&NG9~`$He(pA^su#8+YWyHEEw7Y`gh| zGy4zn>U=PpH!kJg%NJ}u`A{@oZG^BiT#XRJTHJ+j)`Z`uW|byPnz&G$E11DeyKwT_ zO{R74#)eB#@Z}o)yLV;S(D9sj^c)v=OLny{$Jz%{Br&ur-;rnH*Ui-vXw$zh0|&Hb z>FG<{e)f`+`?v8q5iCU`^DFjF&Z788O8yc38g=5-^&3nP=h}EB2Gyf&^zJl~3pb97 z^8epeqehGvF=E8XU+hhyN2NETe1nek?B0cLox4&bvo)%eS%K07oe=8InM={UdOj3? z(qPU{CpYq5;f&5H1K~#(a7VN)EWdVho0?-CbDvQg;+eK;1pPkld3p)-R9)IjR!RqITt&|xUcc1-8S zhW#So2z@udp-Ss&G-y_fozuJXCeDO#tpn2*PNA&7)RX;7bR>)IeS2nM-OlISICg-N z&Fdr6s?aKv3_ZQ-q$o^%OE7W9G8#C4;KYq5^zXTpHcR%fcGY&;l+24FJ`$~W5R+&1 zWO${5tlNJc?$6+XU1RclY6#b4WBjCrY#mXaiG#;bx?V@>H0wkbnJaJa-{O|e8OyK> zLQDASbHQV2Crb(Ry0~g zUddH@woaRdd-K_>Te*?pEoxz|iYHWD+swJ+aJ#>oCqYB$*S`xZCf8=wie+3owVwOl z1?W4v2eqo^;{M(>ye=_~0+#EY?GPcf+{C`e}G$Ow;RUd}Ok)Eu)U6@8e zE+|xznUXlSSftNT-rgx`GcmCgLR~?$nH|2V8C)nJlfj(I$wg`=K*n0F@p!P0VbenB zJ)#j7q8vJVW-@G(IojjxWQkHCl}$+rs&EV}&9;TJm|yw}6+5gl>}M*j+sE5Y{7Mkl zCb`Z_M(5~mXoyJIo2n?D&;IB@kP46YLBoJrEtQz{Ne~w@ftD zbcxY4oU)tg#a!95Wj52Mtl~qQ7Ps&AF&FnwAyu=yo=g3%5Zw#TpH~-%;m;qDRcM%Rc!7MRAd>KA1z^e zi}u(wY=URfYeK?uFt(c;Wty$x`iV6^Yh8Y`A%91U0=<}a?=TlS2CzQUTF#C)6~cBe zi{|8H)GiMul|04#XAN01rXuS)H6XIvA}U>+$&4r`D*KsoDmEiC3q{iBlsAWFwll>u&yjA|zzP{COwPWzE^xf`?Y@i}(4t_dQ}(k>4e zyZkkWj|`w!#a2`rJR6sHJD7JnfP?ePP_bGMX0MpV;!ZP|c4H4GTl=v)a0kanCR4uT zaTZVYWBef>mNkx{$C_)@tdO4zkDf82O$|B>Kg5-Ti%Gn{mFB}vGHiT*?(Ue!tK9vm zE8EPW&_Jqqe_`Db9rH&Qpy#l?3=#X>*(UbMJCG5X_R-^9ZuU=ULih4n$vy5Umh)?q zIPwJpzcaIzzdcO(z9+eUa3KlzHq&Cn8HSJV%dM^Rd6RztqXI6`Z_`^ES1-)m0b^)? z>K+wu3})T$g6t&0Cfn$#)6O)rIySX3}2V|BdaU={sG`vE2g= z=li_3J57(4=h#p)TJ}FGuB$IMH_zikp+WSr+s3$4j`V6*j68V@^W=%qhWwv^bU&o~ z^7!#%j5Bo_Nl!>+Q>r)e=g)5_n?`;-X=+3MM`!9Z^85Hbf?OHe^0=!as|D+zi zkjIa3b9F*z<%Vg*d(1NDz{Mn#)0+Ie zgZO?dDT2I=p*0@)@*x_JJb2pwTsX+X?sN8GEP1nKMr-YkuWc+ZABXcrq~AJsDT@2M z@cHRe>;ke9^Wq&Da|I9;a)VoMqVURAhCV?G*3gWR$905j%M(uVc*#@JZ<%ez$KtqaK%L^XSSX zyxc^ip7)qIsxAsAU&`mtB5s?4n^$h&o;x4<&k=_68~QGiKXdE7o@|z}$TQ@|(^kie zhcC&PH#;_}kDS_al(&|?RH#yw0CyP?uOFdw&54hrj92%ckvV@(qF;zS_s*Mg?1Pv1 z=F3jhlMo!T2V$RE4~L3%vuuI5={|CD^HJVeXA*H%A;3+BF5(V{_uV7ZJ%Hx5%Hkjj z$+J7>NOH)Ii%vnt>{(EUeIU`sn+*2JJbN0Czps>6GP3$Q^XbV|?!JsBZ>h@oxoCLu zGKyRQDPIVpo*d)!*$A|`3evJ-UQzfHxN`mq(Q;eLRw<2x$b?8~pWp~|IaBu0#DC^( zf;9mdor!pLlP8I8z<1Y-#s#VRUA*>$NhA!$dIEVo=Eh8g=kSBk0I>i*=}eTzjIYVe8sFee&dQCCH^o-oBn% zuh)qs<@e7pHN)CUh9X%hYN@Y57MPprP^l$%vfm$Mf~AcWTDcs}Us%I_opel^%&kzN zLPm2XBk2a|eSGfRIm3I;#l^*-JB<8T(o~QyFbeWNg+JnDB|Y=KAWyG+6XZXhr)O6% zVfA??uG=bvHN?HxM5_@I98T?7HS*6QHa7NeHFdspPH6(RWXU8@3-&HX#B=&MkQc4sV8#y{NQZu7 zc&D@$qWarsaGALUvZQBhSbGM&2)7W6nYkHJ&u(z`%oz^sy$jZsB0R;eRc5Z@laTROogc8sJ)q=vkazbK-fGxm`G z3H+8G@{1QQGJpPjgJ0_OjP!Dqdh?~;p%lOF=}(MEv&KrF?xbEwl}eQw`s0v9f;1VG zTQ`L4Sc7%`dQEQy(;mrsU7(&x5Vg*%(%sNxdp!u8!vZlQ-xroG6^vl|dz%5wvDK zc@z=2Wz9(jYw-e-$$0Z-R?&0N##2 ze%#Slk|LwAbaTN(9!pe`IT_r3{hjz9(I@ce;akJp6FEhm|2rfPT2YCXczUD^msiGq zCdo1bw(@A?RxUW%{QuAF@8S6T9xS?P%9KgdDUju>%Y|+Rbn)Z+zO;-LK{*xfzy?Zyo!NK(H+t=_ZG(97Uju$Up;P3Bmc=4x4 zK`y0H5=hyzXE)k-8cB1qX3fg8XV3mtf_z@J{Cw_romn-VI5w&b%dA@Aa4eW%!8^#y zed-sV&fKG2sgr*wjr!N)-nKmyUa*hmiAPv_`4yor+{x~Hjb|3cun7&N?To%0YTlGP zfz>Ev8O7CS4(vQWoA856nS1Un-igsf=WEK+mP-6Hj;3+1rqt-rg^;O*xKi=}+j{0B zS)Rs|D*Oh1DagaGt)j#9%LL`mL`-4=O*=QBdtg0=zYL{S*84OoxRrHx=ku?x?*y8d zI1o4e6eovOChq<^+zNE(yk3c7^&Sd#ZiF*>;$vem5klYIQYH$Jn%Gz+PR@3ylHy6$ zn&IS-60=&FL{hREOVMDmHZvh9HX6O919sMCoS)Nik^8%=0(VOGp;FNAD7Nnhia>Ua~8mY76roa`~vYlw+Y#?i?!RaA;}#Ux|z z>}YUApx5e9tCCThS|U>`P>OX)gj$;`m{h7hfqRZqS$>@>Z(ONSF#x4Fmt1RZn50V_ zEegLBf0BsL$uRNQzo3m`YKI=Y%#sKDFZZ#`(~p^b%BF7oIhSTNr1GQ~Ud0EKQ8Xl* z_*!B*{3=U|h%omu6w6|VGCmf$i8+q;wuTAblEuB1**Rcosu9Ax&f$AFsm3 zPA1Bu9A{@|PM$nT?%cVJf;^2#OF=$%-gcuP|1-8S8}jq#&r`N+**_!}{w&U% zIYXsNl~UJ?7)d++>Ne!kIleWlQv~_KnuXY(r5l~|=-6@a7LzuNV@B=KjJ&v$+$Ilc zQfd}6_P3=~jh&phzY+%_Is^L0vSWxZd#*eu`i%)+o?WK&kYTi~R~rwTNct76OVG|M zwDwP?Ti$9kzj2T~rE22TYcRzvLl`>l5(mx>p-uH|9D1?_cb$f)uurHhq@GNfVFJ1T zHQxkzk`Uwt7*eYuWtU%|j&I6#wc;ARiqFNfXL}}g^`l+MO)S1LhO-+t6Q#2f!cLD? zXG+74O<7X9Hiuk`aOS{t&Q5Q~!ZnFZf3cHGEyvJu>r_sRYs1NBT4KG+Fri2ki!Q|A zV49gB<8m>f*Cuq@WQq)3LyxRa={$G|R<;V{IlD2tz$4nvxrej072TFi=Ty_&95Sm- zqteMNnSO~DV;3@YXibCIjkvysmPWv4N&G`{_IG zJZ_F&RBhqI&Sf{Swt7oMmagocT#uE#TXQ+W99h;ntesk)F_oJVlP@Q^%hbj>nsthzm3vdi>@-gc_NS`l9-4L7i(?)?y7sQc)~?I356VrgzHNEGbRrkSOfb(; zkJS^Kux)H_4uz_T(7Li^d=qAmm`AiC8UJPzXkfjGip`GDepqvEZ(NL~aCeri8A&cX z={rXPeXG@??)nQ<_A*=oI!!ps`t;*wv<$Nx4MqGl7*U})i3M^~sAeTz&RI%i-b_4w z@R^kdcVKyPI{nwYz|qQvUaJ?u+CeOPCd0)%3$5FEuw>RAMoyW;+c$5>kt2sukf#x8 zDagnF*E4k*`9~s&h4kL@Y^;oo{8@Yxvwtll;T|3y&eNw)4YMQv5*tTnoV{}}Ytu&Z zxv5cTO)!)6g}EhWGU@9W*xIG`9(wuVEd;bQu_<~DNhSfTI5>v~b9+!IZ*9)JiO15+ z8hfb|lw>TeEip-qBTQk2pO-tPP6b)MW44GR5eo+=gSm!6slrLb>*-{XF2wlHFp+vK zU-2%gIOS8txP-Zt$QPFalyQH~_B$W3HkTp88s9A0$rg~6fPer3vS!5=6)ML(jB9Ak zh}kPSW>JZz`J7OTf018ek%ygU-XUu?ZQshF=^cpr{2uorZCJ3hH~R-nqxj@?tl2k^ z9liT=_tsh7m=P;ZN88N11bQ4Rd?=vS{vU8Z>WDukmvjK6)rs3$$crsu-8} z6!MNjqG9kAnWc=CLTHwqvR=gBpKaZG5tgh)+>#Kgq0 zdh`M+%n;|=+ndeeT;WNg4Ea@O`TD(>AKlCQ)O3B%`)MR>x#^sYjA8$gJ9HX8hfQ;a^K{255~~bn_3rhA%ou`2 z)lM`l-ijGxN6|2QWoGUemny~u+UI?-e|iQ&^A?V@kJq zQ|VBp5TT)_jGr}+F@>W!c=!s#CSPOm{xwW*>%!6nN6;n3;a$2jbLMxaV8POOBqgE{ z&v1I~Bs20K5EZI4KZy||MvNHwhaojuGi1nM=u!K*$0R+9|E3qDIy7`vjCBJa? zR=5yCDudS+DSnka8HJrcL0OWBH}|7T)rvUE6=*FrDCA1RF6UStXiS<7g+nxLt8I z3nQ@RF#1(7W5L*d^q;tk7*9X31uUJMvCt) z*FzdN+rrd+yIC=`4!W2ml11J~qk0V2X`(0D^y|6Y$Y2wXN^OC^hcuaj0t+*(*iRtJ z&G%k;ynG#be(^!-S~RyKeaN2yUfjOS=`&{y=AUOypW?xrNK8c|(JEUh>L@R=Pmzs6 z{`Q8My-h@8RHjZMLheU_)DPEowl;Wp`xqK4%9unw zXIEnMxVTDo>2`QIiTsUMqEJbbn?aI1b4IWFkAQfd?GP2b8y*>0KBA{Y8ahIo`VtIM>BJUH^Pj}ImdzaX}VLcl+Y+%jKorEQ( zZukXpAMSDIX+-K;3L)pu6DD5#H%^`>HZ|-US{|J{L&SeQCR4@LBm21cBrJ7Zr1{oa zjs!mNL~9;=y`DR5bMP~*tk(FTXyg<>5o** zDlQ+~$K|Ktsq66R##xS@4$)^1?W$!Dn{ zf1LQ&54ip^Ds}C*AoAkGRisz!!{Y~8FXgLPHf`O>=j6ZlxCBWIXDe5eJg$25YK734 zYE(KuM$c-)ra>Lq`M`nZttw+_=|zMBh#L~o)9GF-ME2m84$(xT-^$PQ9!))5N z>%b$gCJd;PpPc2&;$I_L zB3+$2TXg+~1=%!a5?iOt!?xaVKHb{DqX-uY7b%8wrmXZTA*c7~wJceAjY736q85#x zlrNeY&?FsW&EcmhLRXNnTx)_j#GvUr*|BX2niP{&0{Qj$_!hlDGEnPK~${j5KEQ#?zy z_+^b|;gn!r$IDR)ao@0Ee%6ng%$7-uu&Fx;C-Zm|O6gqES6IDa9*x1ZDseUPoA;3H zRa#>IU?Vek?`6s4kx;!Qfg(Idg@&|k-BRRn3tG2rNBKP7h8d6(k}POGq7yA^b;d#~ ziGGd2q$SD1mmWPF>DP58ixw~C^xY4l(I~cwxGYQ7Am@W6tXa8;W2!nd@_EVhEzc<$ zRG6%OnJ7`EI1g6L;J}LUyvx>(oNl6lnVLtwS)y1l{wR?ttxtg){d)&7vF{jm?byb= z`LlTFSW4vEG79N>~BU=)DzZh-@%I0mXxShnvMmc={bG_OV{3~ zXw5Pxl0-u*wLE0anUkl%+ewU%HGK6l^4CPPPca$1Y_ooBGouZ8TJlG1$R90gP2Rre zxfc3?VjggMQaeujcgJ~ce_WSbqH|zMkCs%i{@EWnzMrXcUEM4kFF1=H<(!BOKg*om zRvh0w=BMe}zjAwBd*;7s%chAHQ$sWiDo~h$yRT9~^#SL=9KRU<ll01*m)J1r<|f zOaEPb^Ftm=HES4g5=g0Gje4j}6EGaz=Ka!}sTUdD4p9vj( zsNvI`^&hWd7qWo@oj0;_^8qSk`8rAdzw-O_x1`Lec~*rKFEAuDz%d-L($bizN%$(~u7?*Bg^ zd7DX@um0a7`Lvd$p8wSziVY6t_|B=U95#~fa~JbsNqffL%geB~g}A$X0uL+9Wo=6f z`pme*q6ys%$Ne6jEbGJI_(mKVRz5Z4KaofUulg+ia*V~sePSM6*+7VX)y%N%pt2 zOTDxfR#s>f$*6TESc~|j-&#|1tSnOF&})$^by!=OAs6CQDxsDlzhqh^$;xkn?0?Cx zd0F}V;0ib2Mq=%lf%4^o`1t4}ne+HzqK@L`^CW_D|C$#N4euVm!!vhQQoX10<;ipG zb7dnYVc#1a(w$!d!5>rJO!6&Z~r?;VW zttz;gDYPThJ(hKvE^62j5R)6Z0mP%z?g!lB);};pEjf$SQsBNaoyu ztMq%2edWjT=Tk?7i?Y352ePBj8-#47RnM~Nbizwa7GoV{-EHsgao$mux%rjJVHg%(BR-SE~==y~TlTOUYTXGlK5~R3szny+0~JP zrRrhw{5HjUwZZ*uFe|TE(x+uf&a7WfoOspgT`~}I{Tx0Ox`<;lGptl;nqR(7%13S$ zm3^x+^}{*xKibc%71uEv+!ppICV`Hv7l+mb4b`Gtb&bg3iiq~&T!y?XX+I)(nh-k`o z>`3&1*<5*JPlUA_gZg(Nqe&Q>7O&)Clqt2__MvP(8%{49&CU0YMB2DBVnk<-^exIb zA--3PDon37gK4|-0YQ74v$gatHnq%bxQF|8f5L|ylxpSy8GCEiYdouOV-fshFuQ^WL8(;NC7~ zF1x|tx#M~A`0?LJkQ@1T{F)&DC-L^&a+Y7q&h+75J66&b?Z<2Eip)v#0$*pY{wMH- zAr+@G`0OG)QbT?#Mz@D)OIizZzLOc>qY8%>j^O0+l^nRM8V>&vUWMT0syfl%`-^l6-ri6fVY*j~}2?|OQLEuGo)-ZYp$qyeR&UAtF^|)9AaObXWfBEM1&k=>Y8&j>otz};H4aT z6V2+@EqRu?DxF)GVaJgpL_9mk>}?Nd)U7?f@2|07-y?COjx%fRdu&Z#GHA$3^41$b zS=m#Xj@d_!pmG!pDvcNRsGeV?Y0uHv6mDV=;}W+v&Sv#Z1>HL}W#y=GL=j4_Zu2SJ zeShLT>Hl)$0%@&fG>& z(;isfT*mnGj`W#0j3z$fUd`UezDd2W<|Mu_6BdxE@a9jXTv^?y#l%7!5$ zI2EPm-HBzazwbo5Hbt4)s43xjTGPHs0f?7OcVy_~v20x-M5asmbZo@P-yPqQZ5h@3>wwC%N9I%fA11~nJQ%ZUGC%&it&#MOQIMxYu5Vw# zwJSSl)^q?*t{-IGW3aJG`6y>%DnlLmnuk^;sh8aXvkZl)nmLX_OOp z^0JlW>)IC|nUcbln^VN!m8xy4iw4z2tew1Z_edGElVIb=wzI(m-5bV)LthMGCNeYX zHg1Glmb_$$mGk!FGoCw^rFvEi%)N?I(IwMy*1Why$MYF2GE-9=oZRs6aOBqItrV}{5#pW`;!uvNS)@3NQ!85}!F!IQDAJNZ zR~hyN+K@+kg*crHPOhGqn_82cB=V|vH=eGV&h{gTG_9K#l~N<}$`X4U3(j14ME$m% z@%7Bfxc=kGF5>aYpO2zhZ3%n&k{op!VrOnjiTX8(dvuN}eMb`T?l7%JPr)`Yr?~G= z39Q>FWuFE$Nql}C#|&OLOL=ALkE5Lfl2uGxa!#f#+r`m?%jjL!gqAhhk!YV47k6*0 z5Dlv^HSPtA(V%uQWbfXIW|t|Ma|cnQh!@#Q<|FFqCvIQ7Lf+a7e z@&&b%KP75Zr?i`rcQMJx%&jO>y*v)~T6Vs)r)TXvxMVGlzfUHSvpVT!rRJ>z*Dmg$ zbi?+dr5VBt*NRlmVvWW)A=E#P|MWHF?~2UA279}&Mm9#$22q#0e)WC+`}n7p%fAQu zpG-`Rq!&~n%->_it(U>%6sw7MR#0y2d~ym=B7MeI$>qpgz3`2>#kC|TZuOCKPfY2% zq&s(g95_4R5LfCyz^3>Lmh3v75@#ABPmCpZxrS5{>HCV(+!amiNtAjxeeo)K-@2l5 z(R20geX+F|ClBAEK*<5f&uvDd)1g*tiTxOYJX;;k44J~zVje8M+6+^jl4NN#q^VMf zY6Z6b#VD7p0Ats0A#2n#_MeF+qoaz%#AJiL>92p>*Bd6$(AX6xe?)b*dTn5wt%`(X z6w86mGw$kExkP~A0#tyiDXCzp=JCtuOTQIA}nYS!gjlMb?J)ZJEu zm$$u9zt!>h#Z#iirjN%?lBq}~EKHx05GT1`P-13hho^%Tv-Yl~V9wfQm9%lM%rf=jt5DvXk+SN)kn0>9lH+g)lFg$Cu5=j?$!e1vc#1PT4#@s1)J^ z0^ckdd3N$5G|$HCYu7OK3gqeYr?econ3B$CC|05y(+J8}2rqLO5$sh`hr7>14X@%5_Y-MF- zaO3rBNDtBb_wT7uqXx0huk+Tu6itG%8@5@vXX5#_Qv~D-#4%$oJoK@+lx<9h!g3al z-9+%s8@LzmMa!a@kS9GObMa;rEmV-0hwo_8tr^Z~U^@Ed%^Upu{E!JD68qsLwt1_N z%i~+`w3&ToeDvp-wB`(+e!0mQScITV@apOdP90j$3!j>dZd;Xzm#@fFrZj}c5Y(Uw zk2lU^{>B5C78%H-HpTh;@+Da+RKvqe!JF5Kl&)5r>bca+oxPY{7q5}6d>sm9H0Ska z6_v{d{Y;QccAku?6GVdgwX@DmNgX8${~8D4oyW5WkD=KHDR6F|1(`lrbUf*l~%l z2NyXR?atUy?eTTATF(@o3!=O4*m zw>}NCM6+<>PJ*vr$ERF>8W;8@G2toM%e16$;R3`w_(Y2?^-;WghC|_6?USq8qq38N}Ok}T_;odzBH~@mOPrXtX+GVou}{7wD(j> z7x3cUrENS`XC{+qI25Q*0yiO4y-U`hU?#oDE79;P=0mj7l~z4kibls0=C9t1Q?7DU z%%6!5;aVz{E`(E#{BU6zdrv>+;C%%X#}2{I^cAyb&SUqnk93|eiyE~{p*y#jy{E)J z55zuW2I5XAktRNr%Ik;z%Vl;va%A4zjy&DIob_9FaQUqT!)H$-i-#?5&TZk5V_o_e z(lKT7LaqxD?&DR6x;66h;bl0*YL>@Z8N;(E2U@gfipz)1Oxbt=`z*N$$Q?wFrd2pI ze;OOFU&GEd3uS9m$35{qI{&g1^s%98t?cZcJ&t2FMQL0rcti@l+_SwjPk91$`L<3v8cP=h2xVgC*7vqvH7O6Z21`3_v=x8XXM$!hU ze*L+d*dN2WYmbbBI{ys*h?kY$hU5jo3hN(VHvV5y26dK6lS28U_%^8X$D@^pvT#T@ zJUecuMImeAp01{D|47asAD+6$e}P`yQ?0nCKl0nvuf?g9qp`G3lTT#o_+-per}X}J z{FZ(G8Yqd4mH*AWtQh%E7~RVmNv{|ObEX|q9iDcBI=BBJGbJPGhCg47OZ*X$@OL64 zcpoOEdl|&IgjI&3bnQ^a@cX~UE|jl{UbZxPym4>2xbY3z;q2O^0c<6>OW z<6`8mi&2mp`Q1o@JiUJcPs>I_-kLq=-@Iz-nvi5J`DoSb&+|NBBz^HuZ=f16V#J7% z{|@OrVl-L#6OdZ1|DVaq?%lf$W+1IwxBh8xVR}Up;-R6TxVyU>3Q&6N9hB1e<;xem zyu6Hqu8gE9Qu&wsQA>8=Mw1mIMvNHw`;wL>E8`a!CkFac_)miTkK2&{ZwL+!HrSA- zXBSJSPoJi8<;tmRMvSB#f4`YJjTkXv#K@`joWjH7Jy6H|@DztwgT+^-=F? zr6MKIk`hszJrTqAH^eB>lJrDmAI*l5+NJnyV67nCF7aE1QE@_IM zZ>S?82oL|)@}d7_p%CbQ#Z$nybS8gGr%p|xG#QXmg+}CcN?!i_SdA(rpQY5dKRZ?;FkVg_l#;Bs9!!+?ZqUBRH^p z6JP#CgC#SgVJ)sm6G;A7MAEUKKQ+c5OkIbS9ZFH4<^;ZcxXZ?UcTz)tFp8(NsNH}~ z7oYLu-c97+iMyzqt0`Kr8h!frqes`y%s=>mOG`#D|HvcGty#%^Y0A%k;WgbVwjwlj z&44AMtEoyovCX(BHv3T4v2d+uj4{+qWNGn$>2_mFKD3{xgcmm)w0Bmb#Wg z(%aLt?$MXdJzCRo>{de~;qC2tH0(5*DSg^Ab@yGvexDv+V)N8)H0ig&u>O_!+iNLR zVgL!L>nXgUdFI@->phS@eft>Fx&GD%_z+C5p1tVMs4|7iG@w`at}HwGH1!w}*Xuo$ z%UO=z1NzguR}Z>&o+olj$&?25xM?_np84aNGi2LULUs&c+?tfMNrY^gM9(!hQrC`v#I|l@SjcQ%032PVTK& zXqj0$RwPmp%lj`eSiAY-Zm(iQiDH!9c8~nB54idIk}@n!O+;u6T2mRG8C=D>mgFQk ziLtR*yL(}8ky0Ujn;0mR4mrxOE3gHL`zC_&Gp*_uGY8M;I^6NXXdVY)3XBV^dY#}b}?3;T0OD1;c%F3&Gc=~i9cB!H8 zi28v;*&1>b!%&*=v@o)v&v9w%uSB39l?d!JqXU!8Rsn{@L6;a+2W=g)z+a*mJjSWry*0+Wy)?k zPsKYu@tIcAvgB#7?3-XOkbMwB#MMl?fLG|Gzjk|AU_QFQ=?0%io zrzZ1e(@=VSY{=5WhiEbB1NEwSarsdq{bo(%MyI9}ShJdaEe12@%n~Nn8;Vl_Z$4a6 zG5^vGmKD#(yUHEO@ct@qGPhv&gvPAz-J9h6HE~Zm!(*G)jBBGMfBrsHt5=7Hefvt$-D;*Cdc*UZ=1d!tk)d0i*)hn8j>8t%BQ(LC@ zYC!$!gQ?!233cjZW%1X$!wNk22lQ(57_>l2kI<4jNAAqE1}T z-5b@czT`h}5u4?GS@Rz9nuM|PkTvf<&ZD+#VR8=aO5%k>xb)paNBwN_wLir6(_7fz zeHN3iEuphRL2?f5Nz$c5ICk60%vuV%HXnvv&O#)g+DvrojqL1K!jKMlMx&g)n11Ip znXQBfyuF?>lRt3dz(9uAsDwk+epr1t%ysh?Y#!)Dn`V=!(WM)=4{Rl4+ePHM-hhtB zd^mr6C%N5z(dtt^qjI4htU5D~wslu?fN zBBT0`r|00Vv}?JNLl_Lyt$ULQ$KM1z&OL!_s6C)@N@vX z=QK8~e60rh_wAQp4y@=|TyQtaeDW{H)=l!-(^!`wf`MGy8_Ci@U$!xI>G*N>pLqhlNL*kq(ZlhTYTS(sw`?orp{86}D?;nL}HWXivug=+`lDu2o7 zNjq7;dnT>gFW~yAb*ZUK;hP};K!>uU891v5GcOjRLBcW|nssJr-;+$69KiSko>W(D z;7gr33@`6PY+MxPNe?OCZWA|8t>MLnz6_3N!GXa-#D<-qWZ#QStC+;-J5KbgoEfj& z^>Ms4j6_S}xbHdR7zU zNh$(z<>2C!j@-`I7wy8K6q+}cncY`#_|htDbhjx{cr91&PM|@S`pkQM3IC6)$=O-S zlcOc6++rtZb_}O&v2M(~zL=g_>ofP2*yqD)^7Mwy?OrkIMJ@IWE6wxOeHa$glzl_K z_WHi2s#Os7t(xN|i{s(-4~#i=o*GdLg{U{->7hPipE#OVZAzUgc{pm*f-Sv@z{kUs z9DI}geOwuM&Y#Vr>ZU~Zm4v(WYBvP;Uh^4WPD`=kt2udV5sqI4`B5RrT_F1LN?MOi zKWEh%(a=duKx5-U9)ElKWzWW!&NFbkvYd(&57IcFBiEL;W~*iZ3;Px} z9Q$a+U?wKlW9L7#hup+ehRpQaxpg}6ayKy**C<1yQl+_ly{S0&&&JTC6U@!cxpU`^ z!PRB8YTv$a88MO`Si5#D<;s=A$H&Jg$kTwd?IGV`v>{J_=-9gM0`0oiM`P;4;Ev^3 zw(1U8N-tEsp+HElDZTz%x3^v)C$Q6CG_yyt)Tsj(d#LF-elrz{r1bWsCCTwIbeg`I z6|2^rkZ*W>h36i2`hD7^r7vo6>uYi5~9^u4pyVU`uf|S`{%ac{sLh zIW@CqAb4^s7T^Djjinj(l899)Fx86}v|fi68DQr>HS;Yym`ax*RP3; zPeu{@kp(@b^U~bHV5XH;n2LK885)c3y9PmeL#Z@&U>Qk&7{A#3g%R(u@85bx(g8`2 zc5ue3E)!amqk8qKv>V=^SDU8rCdnk_B`8Fx#yu~6%S148^k#Oin#9q#YShh?4O{(b zyffz~L*w>@oV-J+YX80m?nhxFGeeR1bB`Lf8A}u7dX{n1=CJh8Eo`mKglM+m%C2=R zoIQ;J8$QsqX$4f0AQwW))Lf|U&)4bPXE?{s-z6$T2});mMI(uDNuNmtRft@zV-qIV zaU%HgH7?vZ&E*G?LV%hZTCBg2h2Nn^Ce*7mHa1@t8!UtJiB!F1P#j&cX#)}2X}Wk^StjlU)A?-dTMo7@2=k6z1Ldzb?fh%QtLg$ zW2n%mvYyTdy^edZn2r5di^drnCRLu8R3eD#IYFr9=S{O|2U}_#;hg-%n^=?uw|@KZ zHD8cz>o-8|t_CGpOuWIzMYpKXX?M>5vaQYuqRxdtxaUc2wiXx{e-KlyA(Z7| z73_9JU3VokT)9F}u_NETf7o9PItKzion2NTxs$7VoZCG`psNk;Ms|4RCMHH|`Qgu4 zgP;P2wrA=v{mL4n6OokUO9Op+9T&g`ep0gk5@sm`_TQDQ@0DZe#R^%RE6q}Rfom<4 zsvtO#fc@7^VD$)Xg`1B9Ttcy|abMtdBo0@4ik3313Hg9zKoG=wZB5Zn)wPPA>P<#R z5j)eF6(%r*DfK?*9b1RPTuS7VQlXrsW(#)Tq?0QE@W~~a z?`KXg(%QH(yIXSoL!Sv{x^PgQ0V6F9`EsrkWx8}hqoJuurd546TT>%7f>By{Z+rr% zWL-ZrCiO>Q$l>@2KarTApNV)v2FOBX>x5!P6&*K~g-Sj}6wN08o|UaYl^~g1uC(kO zEtMU3!{aKYHHsU%tKW$ynVn9`@O#a!9Vc4#z2Zdz`_|~ke3>#Y%IMEhWu!UkePaBw z&97kYLp*&P_jn{ZjnB94VG~i37!o-U*C^LM#~_U@ep6uEUkv z=AJCrUf90*tD7|>HH|u6rA!z?R8Q|bpRAS+6*-M5e2!g0fza%lhtX#Q!)_ahA+ST9 zG$93AE6$bzj!V(-T4Y$n=r{vHfI@nggt+FflQ02Fl<{|U^qosL>}=l%b2;X=(NH*~ ze(C_|P&Z6RD1QdkezJMST z&0JQrO2a}Gwok0Z{^rBj$}N$Kb?i;106gmtdq<^ccF_-|&&O0n`9Nz$3M1JWb*&u; z4qYD4nSdZDE=Ti0Azq2G5on!myoY&y_oNoJR_v;1c2aR4kgz`)*PD{Nj`J8~tt|P} z>v??&Ge1sa5yVTNhV_7(FuiU+sj^w-7D3TT4K!~@TPUZ4JbsbKKUrc{t(cN_{J0!F z;%58dO_7iSPI_`y)RG0SzFm`+3{l6O4{^tXv7xZAO3oZRZYv&43BK~=(iw})ZW;=u z)>^bvvv4FJJR;E;9b8gC9X3wDSZJaZ>ttHU99O4EX!K*XzHwGBk}Hp8&%fv^20}?G zrCbF|_#7E8N6^nlz2Wu@*B|q(3N;!SO2JLA*m;t~%yJ>^<%SZL)PMT=2Hx-NQEyIZ zaD-#ZB1+b$=PXI)sDAQP68mWsB`$AOOd%YhdjjsGA!n}=SUW-Na}10OFBXbbKwkJq zS?;aVW<~JQ6ulb_@NkCzr;{tq5!AE8@u#CZWiC*mf0z~9R zhaY0egVI5J^~#Ps5)0sox*xM5GoOjO%kX1?4%y2J>Rddhf0BkmSS^M`9cbEiuOSo< z^eY}eR9t?w;zBeP%+eF#(oQf*PFl30$mMKL)w{L(#S%Abx6du*VX?~YMY>Mtoo7~Z zyim_0e91Lz?@+h<(0M4M%@cKxUqW=-JXoh7t%hV3i_;v}O)|Ig-7@%3!Kl=l!P747 ziAe#%vwrITPxa{|>mqwTHMb{pmYz0aeZal;GY;olH=!(ugq!11G7#C)C5^hy;9i6D z*b+2+{fGuCrY%zr471Y#vth|L5x8-Xj^#%pHwMj7+)m=$>) zC1g@roN5@t^LVYL0N&sWE>tXyVp=HnO|tDf$|j0~+<*JHOC95VU2$@poX)04WBaVs z-`?9MiY5oHJ$YTS)!=ZL@+a82W0INNBEs1RWz#%*(Adj$f92k|Jl1j@~0>`gi8 znY%NVfh|e`JOCo-x%7jLak*uMa?%@6Uhd+qy z_Qc`G^<}lw-LAOF!LDlla(>;F$4+6_;gnChc0bso>iVLd`mrA2E@GPRTE^_~ma=dQto%Zaym`JNRh@6j%Bc-wMyv21zheJeKHCM9~Hy(f6$sUt4LvE8! z@qKF+&L<;W_F3^V4J(1ysw&n@WkR1U+e*w?%R#en$z(IJk0vlbcpl?FK=xzCi$t#%VFdMI=WYj|95f zKT-VBsFFycZ(Rj;jdrIsPB&jL>EjO7j z?h1Fbdu7%yeW={cB*aq6V{cnX#Gt}Ct?=jL7(aBf1596Tp9fM#B>21JnJco==CgZ4 zgu~jKBa|8LR?^E9xiw%6X-kX~$OHFeiss@nTZ?y}GblT54u9D>P-N@)2!ig1Q&nkW zB=1E3{LP>@nrF`S)KzI5nr-qeMOp|W9ppQ3!qP}xHTYvA8|3b%v+5eJ4((bnram}> z)?L$YPdz1#vUhZ$%w%pw9hoYZYswkc%|EmNuIqdn7cPg^hP=sdUz!Qi-yfvVX|p$q z(|I|*+*u0C`=O9nPU^1)zgfL)!8yWNq0v|BiRjEuElin4DH;1GNkYD|>xx?%Nd?g( zgzd6?{P8s%4g_wj6j7kR0CF?B zlQ5eBFY)JIFYou@OJ6hu#&$4H+#%kd}o}8M&A4`(fa*o`@Pas`RU|AZOTE2Vi zcv7&Q{b*&0^FJ`$(~3VyuVP#Qj1(hhwyx;5oyQ6+NJ_${CIVHG5=MTjl(LkFNc^6} z*$pz?y3(#jBTzCiM6X;5U*&}CknKIFF$>H0bDg zt4I8?UsSaNEN<+0f6f&4@ilQ_NF7bSWl&z;8SQPP1==U4P9v>2?JE8`iXl(Sx;3wR z-z{Ib&p~^Af=45dG~F#^1Ag4-duJ(y)H!T~*==HbL(C%iuR6U8pQMZMW>7?$_kl)b z(plrm>M^esKeod0*gV*2jTW9H@j5Zhe#}w}r}9|y?uAV4=vhdGlL%xPxo^QlX0)YW zso<(xf_)AS5$$i57~oX!aEGH_>9Zo9X(vl=j;X;ZR^z%KDakO#;|5hj_ zaGBD<2C#cWEM|A^4ukIg92JLq@~aHy!{HkPq4hcIEjuMw>dlXJpzWYUaP=4R^VsUY zISe<~{>Vb|DIk`RB;Y4tROjfRL^C$kI-Ta>T6SbNl}3fnxwnjPcn@K(`8Q53-s-FD zw`*!1JZtYy^YhPO^n|3k)QpVUCOtLV#g(bpu_;oK?2_d`k29X8AC~bqm#ytxBygKe zhVM_XWkg!R=+r_Vy33Z^$RS1TuMEX|a%Kj-LJM4viLg``Fy5G3GHOC)duM}#Cr+Uo z>=jTK2lM8Id$0s&^7-c^#iwo$!guaW2Q9uMXtRaElvw!HnDzobpYs>{@*8r;v@hqmUN)Hl6KCl7!ra>efpqhS^c z51`Rgnahqr3&$O%efV1`QH9NRvT*@ILs7pz*7obzH-;u9?<>S&x=p#kitbbZWm0#+ zXn35yIJ0J}>t%MHcbQ5VDs_@WVqx5!AM5z}!}mL3 z7wn{}dbK&RY+kWU#-?c_W1)*2_=$In!y{{cofrG|k4u@x=2U7%nV>a#BHFuFK3_qj%C1`Mg z%z(H~DJ!|^4BxkYIyLJR=@b~NU)N9tV(j_0=iGla|E?Gi+nYJM7EkC375v-BYP$$0 zN-vB>W3AFmzQ8xjt*H@-&mQKu&ofMDTd?Nwm7cr1x<9#1RsD${A? zVnN*KoxFaP8iW*=*OxlHClhb_67G5|_|}L#>*=Q*(Kge$hn&t~J=p{|2l)WIbXVFN zOSD(IZt|;I1e>SHk{g`P0QJ3A+mbgzvJ*@ncqhU9D3v2B*XR?vsK4!C;5!BNwVMb# zcEKIYZgc{}|A}Y)vUB9H3K@;Nm+(5q51BGjs(#=+_U6iJktk6om)e(|fm7VZJue2~i}UWDR$}*|9_KyNeySry9$r07;XT;OG`-*c(5cPr zoD6{@0tVwHvD=@Vz~%=rPV%)NNQZ;^Z6Dag_I-pD_Pl_+^Zqwb2le-xVjTrj3Pt<; zP3I>v*ZIO+Zl|Q0UB}gz?jr(ot-F*btZavMTfA$5G28xD*i-cGBZ&^)k-+oc0-wee zi)!ZmzU~$4b-v7^H%bM)wElzy!Y0#xgwp76DM&= zwU{gsyw$EHvv4NApQ{i}@;?~Sik1%XPI-{9EH(*lAN zw}gkNB8xUOMhEA}5YXFtG&ThO$&nYpwYAaa)BB(QgwTKf6N2sFmFpZ3S4r0xG@MY( z2O9dFb)0aU!GVI~5_G{=QV@=4xJdRhS?%C^xeeNNovLUM>V;P7TX6fK7!%>oAg#ZL zlS|JP&l<_5jf*l`jX6C^WZo@UpJX_V@g1h8O5Jj@=?__hFGQ-f3N*24B>>r)n!3I| z8S)2ZG?lh=q6(9HpapTiNN+NI54uxYv`P0GUY1t&pzv$$^^0!2qOs|z;OZ}P`Jpu8XvWk3*6ruq;?7J=LAZU*dCsJP&|6Wz= zo^a%plrCp0D8An0gdZy02;~{QQtv@lCag`dLD!r3c^;0E)%V_`$?4CfHR_V9c|T1J zGsn+kl)Af3{D!n!r4n6e91MGMX2q|}%G4^fbkR)%ik3nxp?j6uzr!WvD0y#pw~xZ5 z9(}dr)X;5#iGKKFc`y-TWH-y=pqLVgvGR8L5nYyj?)v>7Lgmk0kD4Jx^_YvNti_fI ze?&z2^9?S(U7ZmfJX0GoobM_Gzq#1Cy-`N$kdb}P?Jht?7-2l?=v1c>3HU@uXC-7X zfBGS%EX80v=MD;GFjFd={8qQ1WomBj(Rp^x^@U9eqxGn0jcirEqwVa_F-SoFsB5IiRkOX>r^?!$_{y7~kJxSz-2s-+`t3LzJ5+ z8J61enm~8KJ1h|PzDHPh7!CECE#0We82!;{A@4OeKN7zqUTU#>4Y~wBJdl&O4&#?q zG%xxHz3dOVh5~0X)}7`sNeP473t^#{^l%@o=- z$M7sdoz)s!60R+~ot{d_zyC}?b0N4<>4gI#6<##TTnQYy=5(gLE7_oX`tXQ=13<#61$(LKVg{ z`ia~-L4bgQ(p=cKOInQRb0TE~Ok0t9rGiiJ?)c#rATEf~aR$n4chEkG7p9XZ9*rfP zWkhi^OlBe!-DRkMEXqt7cDcUuf(-23O&UuP(qwTwT!KOc{rSs{5EeEXe0xBxp6QXn zk*_dNZ+7_gF8KSb`oeAwncMA4ESJ-7v&hqdNTP&X3#bWO+x;lkkDF1os!=$le==$p zguJwl7#H~b{$ct|v@(qYVPZ=he=E*Z0`r#P>I`l5(NT!K4xTMF&Y&{r#d6(Tl0C4) z6L@^Q9JSAP`f%9{#a&|+s$dApm@Gv5<%q_Hre{NaFhG+eMfHp!1CI2>$CjWikQ{7l{9V{qd&uG^V6#zHkvfx2v3_q=8^Z8RY^o zgkAp5KJHSSqB?29bEt=pBQ!l!g_Y}umJbB)DFxI@#2BU$Q+RxHV5t62^= zO+-GmQlPPTLVXt8f9%vTx;XG{-e40cZ*T7rlj5U0E#4dS;jR6QmV{L^@{vo3gr&?p zk^NxML`FzQT2?J=)WJ-25+%)@p~a+7=^{=YI+cI@M5Ykisj;&i!@SxBsc@DXd}RVe z(n>a4DJQ)UmZftth(XWaY>~Ov^M%%B!&B_sHf!X7QrLJ`aMr(7X*#o@|#&F6ym?#LrCsm_&Pn zkgkXWL^+`^s7uv&+llzt`3Ef&#{xIT)oL#1l-KAqgrQuencK8${w&LiO{Vsg*xYJ( zpEC`PtCpCI8UZxZ;)(Pn-|&h~{eVSMa~<9;?30-jRwYJ>G+Lp|NjQqLXE5{X)?z93 zjAXFMd4R8W*Qx6fR-<8!t|;MLdgi-paG>h7SbsOCgyF{wreHM^NVm~Gq2vJ3A-t6! zpWbEwK91SPz=|TjNOR2>0VV3oZOVI5#wkC5EJ^{9uo6A1rpB!SyQ08#@ zv~{9t`vw*J9S~DAfq+!7(Y*z*g)xL;a({cDGI)YOSj>ZEEb+nQd}Kc}`pRUq<6^~& zPRbqM1sh_NO83syqEU@FD+vC$;chgj68SZI@HW8+xp=s5Fz0Qxd+Y^$VxazU=YT6( zhjaMZ>5$9og!E$YM5#=Ug_hX07O<+9t@T=Cw)x|F!eZ9q4ifTb|L8;{PL#C60|@P3 z(s&Ba`gEL(bbdhrLNW0t%;>@n7~c2v`ikob^~nP^IjU3tAR(ujV}i+NqV>vBDp%2n z=oY(#`)?-PY$d3XTOC&MF|WmbVi)cY2r5lqUHX`Qy1tQ6e2+iF>5BSzb@m?T_t7l; zxYE~I-+FQP;Ss}i{NL_vlEodREbF^EBar%YJvfE0^6N8H;Ys>dJMeHzEAwNl5qq%Z z|C$d8Gj=J?V=LLYyX$ok-)~D+4(hKT`gD3uSKDyV5ABQ7p?<#N-85#o5EETK2Y!d(oEM7Z7)=jG!=5E4P%KSrR6BINh%SzcZ?2(cQF z&>~9u{00S!b=DU}PV+xQd?b^VRXea_0i!;=5hU>&hyXq1}A#rzxZ*wBQ6Z5-aiSvEGQGW~99oQ5U9f)3mYBx|XqzSzvm$+n0`~m}0 zNU{9+n9)h{RWUs9fVa(Le8JAlZYwP-OH!(DAPj90b-#_Nm`hpV(aVU~{r;q=A-F1o zB1a-X97&Taf=lr?J>1vTexzrGo|xF)cVDEMRr%BMC}Bu91&o7HUjbyHkw1t1`jy8| zm_on1wL0g_CNZ(T<{+uHBdi{4+Rtw7u#mlW>S<7s$`y9%E5u53Vzfg*7nr4c{f0Zk zAY{JvU9oUdo$c#8yjMgH!e!{?HSs_YX_u=Kgaz=8j7^Ctcn4@A4t^BlMGpzAj|pl2 zjIOygHz!^W6{=XTfJ!@l#jgHI54Okx>Oj)EYzo&7t6nC_I$EH)Y2Gkc6NAj~1m$L; zpYorj`--c!VC6lb1~{E+yx+OlgEOxQP+8{b;Uu{-U7nsRo~pZi;-7)d)~oqr#SVKz zJM}n|X@2mF6}s*0yL)>{7c-eUu*$JWI3JA!b&kb#c4vZ|yQjup$!@&2jqTTG%Mn** zCF9qF+)hv<^AXQ2A1}!VEudgOfXmD;ct8Wq1rEDzmO$oDcOm5A$R(UyaI$Oul zdxYj zxsiK}!^#kF5WuMw-;5xJYy^X%V4h6-(9cGGRFh_O;YuGcfICm57nt9Em>F%PFKRr! z{v|COeYprh6KcK1AtE!ROQZrf8rRcc+#3~a(`)0}Xe|U%*zmC10fWJai9jxCv_uBO zXW(cmC(>hD%$nw?)}MIU5@@h z0E1@_ADqr?t-X11-m-J2{d0jbW3H~vnRYk4c9ZSkLfBrdyL$0WK!r`}%{8Ux-J*&0 zT0&5i^s?fg@#hVVTJIRgI;%+~YmL_L>rFO;)nnBaC3Zao+OP~>Oy4eR@Wei@NKiLl z(S5>0@L-%s`!fTb+b74iC3OOG1m4gIKc0Bzo?f#W&a{EI+sZ3($zjxsI7F7~f0hK} zo4#rrN95ZkqRsA~?#36ZCVmF~tiQTlaahTuW%*`G^U9FQk1yFuL|UEcYq$A{T2MmI z*1z3dZuS;lyXPaW#F^od9D~%ZSsYyw;|_tHL@%0g8-G2r@qTrG0}s4j_|fs&yKbRe z%@*wQgt+Pb;Ei5#F}Yc%mh@hil#!&5vPnbs2E$_S>+dz4qra2wH*MfSi91U+wwE+5 zn-TeP&13C-=v3NH<#hX-$8N=#-S*anK3A5%zck0}7t4r!a%3+bl0bwF^n<}{rcB4{ zGc?xws)fn>6Fd8vp1=ICTCaIQ$Zmhkg;0;HJMPFFYcdB8G{?t3OkQ?)xM@Wbr_Upe zZ5N2G+B^q`5WOQGaRH#?sSOsF1N)E{GlqW0I|Ayt%gU1n>0`A+Ab}@J#f=BqGD!*@ z23PVHLpF;%)hyxafUb!EVZGt6;~4uR=P0oPF7@q8U4XpPcND4YAh)hRfa6O3RL%oj z=P7C=uIK3*q9vCvcEANFIN_+7LXaNNYn%^Y*)#d%LK6G52hozdPIDI*$g_WQ9&HS{x?3e)_hy$Aj z4(O{a*j|KbzP>*A^mZHgx6LN~J_Afn-dIH^+u6)k*OTnOOphTGZQO9BhPi88FT`8C zMpUdbnDA_P1OioZ@Gtq?D9nn2YL1?@uRtqM600njS=o5Ox;~!KG#-eeO3`TZTOR0_ zA8i?ic0%3S`a-+e*cRR&NgBzZ{*Jin?Tgt{0|^GBkqBN5l$2VSbB2x|VVGS(Uu`DI zHhc(XuywNu0xA|DfpdpU?DV{Vi{dJci)&C*WVg9G!f!;RJYbv@Pe8UdMrhlB$%s3o1@|{t5`z*y1jIB z2*3;sc6%TIsaXc6dkp6bU&cw4_>`asiOCV*nNAO9U6)@Ytp9CKkr5e`wiOMtfOeVm zBz%O=hz7Y4?oOrf3#XG4x0KATG&6_xR@IN)8qThQzE zJkY13w!S|$1p#h$W>=aowC_4TdG^gdr~B=PO9hZ)cQiCLSL*EqaI;)Y4#jZP(ym^- z%!Ct6>~j3YbDlBi*-@Kh0GQP>8)0b-0+ELl)&W-Ip1j=KxCevZL)ZdoV+fNKzJ#sI zW`HWvV;W%h?fL26RUUC`*A}s&BCLg~FJk)8)`InxH<9%3i%T<~NUA!{l}$7U$i0(Y zsd%|=*cMFQUJtzd8ci95=%#TXcYzOnR{3ucOzWN}4wL?@=Li}a0VpxLwcu;7pF9oZlG;ip@xtOl>HQB~RjQgRU=*WOZ zFc|7wemuB;zwoN5*A$L8$(wog#hDWzz;w*45-8xmvm!_6Qi4`)KH2xPQhV>_;oM>H zv#KXa_toh9qXy!?sflR98HoWh|5fgd6_m8jVZ30TP;373`a}g|&(lXz@hsSIrWxTd zin&|XH930}?%h(hgt*Xt;7FUpf}ddK;h@O|Z8n*Ws2y^uuzsg%!MQP;dUcTixbpM3 z>Ph9p;`-prG@lezso>Jv#Qqu4LJ94et)nBgvr%MB(eWX{B9p^7iMRZxmN?kfMzKgS zZ;XFJuNDK7Zvpe3vI1Tm??nKBYwKCa&@s;5mv9HMspaq`gF|i@NDA#j?+&N^u%g&# zY6aiXiS`fEshksuOyswjaLjPqUW)vXVc!$k(cHTdB(EM8BFAoi)?dTzlMHA^o8?^P z#(a%NPwebZOF}&_uOGIj9FVtq9^b?meT&ugBdW48w)4C@8NE&zRv!0gLeF1FanOIsY*xeXC;Z4b5H8^fe1{1Lear1Uksm#;h$>dc8JWu22$C49yD<6wR1LLEiy2F2 zz1q+Jyq`VD-YJc{x-pxYFWH;btRofK}CE-R>4q!&~ zA?eHYBFJ||>2U!4!brM*pXYz4)?L7H-2x(hERHLD91PnV7I3#*uJY7gKiVlaXi=Hq zX@rpJZ9h=h3iVBBmi}Ge8=HKez8`+s8p``UF0F96EA8OjZ>3NorK;m)=w@2bulahr zoSN8%6oEO>vs8gDgZ;{~YnAwW=)+m#q;V#DIp3vos8sP&Xu)Zagu#n&6LuZ+FN0vv z7ikNE`J*Qh=mID-M`OLX`qHMV8|;wd9Tj*>D7fr$@9^wZoj+C;vqQ70vsx(XcH5;b z;KW(wvFq9)VEJP`i0cPFUXC00KBo^R@Vo5?5tM^G*)NwX#70r1wP2h}4~2()uhIuO z#BijIfR*1cl>FAvX13$PiML1jz@5K_Cn55?jVU2USM>}AYjc`d_WQ~bVGOY5n|d8j zcl}szyAelD>j^7DQMANa0&+6)?B8`aQL`=yBh3j~F|$12MG*&2^Dp%Vat}jxR$pIs zr!dL;chdaYOizqw;QFr>V$>`)%o&5b?@%wg^GLGa%pi2=3HiN`nRut19yj}5$*I1m zAD}K+t^63D)2+!lph%hC`~5D>Fu1VVz3bCU34FX)dAoV1T%em0`&`?)y2<_h)uv*G4Qno9=ZF)Gg>#WHI7QBN7CzW-RisMTt2z<$*tFCAj%t z97*)tUNswRok;jSkJ&xn4yv!l#rHS_&2ej>qA-eG@Z z?}_5cc|uR&=%zf&zZw~p>8BIs@72DH8o=y_&g+7^`hI=|O5HE{ z0y}Mx{whje-FP>hX?25F2v-zX3oYmru1m|Q@1%WI$ zvg`U`?3jAN?Sue~{rsEll&Wr@o}84ZqjWw6yFrL2;(aOBatq;Xj=H&0OJ&KB?OSCa zw+^M<_>h^YfdEF;R<#R~*B*<>`>mV{CW4mtbYX+M&%<}~cPamV{Ak^)E4F5?J;eyYdYx9~7s8NSb{Idpg z$^Q!f(m>}Q!gD`BZpJ?H7gp@ABs|zNz}vVIe(=c`K@ z%NTi=hK42Du_eZV*9YnMu7p5Bvlwxw*~6c>xqp{(6r=&?s|t**B~aM;M$z(d-N1!w z!;Hyqc6!LmUP+N@+EiospP46LaB~-N^n+>Enuqt*b*6^2SjV^ezPCWYbpa5h>rZ#9 zyqohq$2dK?P2uq35FvJvIA;Q)n&i7)P*vIA{55GWXfE6#kRCb-I$xc8)-JpHqIoH# zRIOw3>^cLhyFCeB&20Ju>>_)RE+2c;?V@^a-KeEa|yw?@{Bu9vE(UNv_i1K69&J zSVra<>I`>q@)?4&n+~ZxckSSJM!Gm%M${L$CZ6C?D45Mu)wqjIVu^nD@r-C(wC$^$ zq|R46$7wlB{*d_CSG68%=;@t{Z*JT~jkzIU?=_F+cZ*t+z`=$!t1I@+Yh zV&2vRUIXVfgsy*z7OYq=`J~?a31!=Yu9rY>ZKZQJo)>P0MLEb&!4og2bt6`QeJqTB z89Leyk#B#0Z5}TL_FbZSvil%dBk}{1Zcuk(G7uREzfIm7LNlW z!0W4XO8qj#rMElOV(WES%-ft^$TlthX!Ui9z2d`eah*8MO;59fGx&bA^)LNxP&1F| zA=jXHzM7_$a|_J|yzoIgp>yiSowhc@Z&t4P`-7_6NZ5>t2Zz+9*dI!R$OLN}rbcwk%54ziu*jld_|^p{?59H`fq3*0&gB;jqBct5=q zeAXxEV+qjfb$;(2dPm}q_5v>_^g7!Lwn!3YiZ8v6R@w>2WIU0l;W0S$cQ#+Y*CawT zbeoJsr;DOF940&yCJ|(21ut}7qX6~XSZps{p}%`G!V(3XA_Z!fnUJ{R>K z&~@dD+01$=kZV>~2w|_aefloEi4&Fq-4QteforcmOf!2u)U|>;k17vL3z(ww*!`Cw z)_ahc<|~&&n_@^z?S5PoZGEESCp%T^myw1qxGo=GW6%z58~*p&DthPO{+k3zqfRBc z#Y|yqIzq8^hcw$?6W+&c{B=WT$Qp-xZq{=itc`uWs0KaA2)Jue6ADa4rrFSklI=M9 ztm~JS=aq!`uPFhOicLa$;pmE^h*0o}bed9pkwRe155}O^+6DgA>iJ5o?N6ihyMcse zc4OmJzqLlI-pQ?Rs_)Z3CR%g)ZIlcqtFhQjf9l~eqjy)oqh!SURjvq3&Dhgu!xY#~yS+ewKHmxo){LD4mb_l9!ik@9C=1ruz__E9|Bmirq{#ro$pZP)*KK` zueBobbQCEzYh7QZDfib-3Dff}Hw6$ci3~+)+4x+_ccBWL+&TDt`G$^sW4OBI;CMiU z#LO3Y_+!tuB&G!#Zk#u?q)lCXXh`1Sy@xNA{d)9jkx%TX3!oL4rXQfo<ZZ!x zfLR+F7v))5PYk$_mvL404V)y?_{_70h+OY$L27%FeiEOS=C+B)qL$AP36%fhVUch) zx2V_&_(1oA?vLYute7T-B)Ol@=pgJO9$ZzB6tI~m5Nk#Fi=Plln5-Bi8S!o*@g3xh z#L~Do8*cy15*L?Ld130LXA_JK)v?w@-?YVobg6?GgBRmRIj#kCSkxYgp!TPE;bi<+ z#(AC3gi7!|3njpC0U`nA(-UC+nu{omOk-xmI6eb=#u@p%D$N#J>Nj zed(GMGbqV+Eofj-Pns+f9cJNuDk770 z{WY@E$}sUNpX8Ru^q5k{qmakN*#~CHoIoteK_Gv2_mRm&NwnkL$O_*2`PW4nBUYKF z>1@Xvz0TH!Df~wphniiacuac6Y{enq?cvpfk-b__?mk%KVXZ$kD?8dI+XV~g$dUa~ z5AO}=f_Aaf@H^5%P!yc9`VfAjwu?PkUY;kwK)u1G?;Z_eLwaU<^S7E(F`{1J+BbRw zaOy!7-(h05f1f;4ZRw+LsGtuLfV_`^-zq@kG1PDMEs6tGi6TUn6-by`xO;xK~#K)f(bP-+Ar*k30na;^5a zO(!%WLRdy7(tYJee8$Zohj62jTD>SSm|UqM(Ea`2B5epS3?`F7b_n$?clKyk4lqg?E&Olpd(4 z^5Dn4+1%e;iKX5M!CS5bwnsqh3c=^C|&sp zrV~57Bj_@M+SxcAn`6N1`uSNtP>FBf36X&AL?#znik|ziqQ|8iMV+8fyUTf>IF9U& z1GoAKZxw+f3NRZPN6p1>^W1d1aPvVaQyLG2$=1k^W(=V}Cj{@=TQIARnZEw(p=sM0 z`b}J-+pS~&mh_MBw@3a04A7efCIXnj5j#P;KlG~gCo|(S5&~j(1QSnZywb3T#RTFW zYCO%iVVDuY=f*MzHPGr5ikZu*L9JVqLS2|(e=#(rM)BT0ey?`DKYrqpu6 zvuZ<+G`hX{{;5^|BajQ>ADM-=6 zkZxa_q29~16F;AXTWW%Fm2K&xI7^_izx8*q4F_X@(pj+SM&MHVeuDHZe|uANf^FQu zMZ>-OWqoylJ9B2{rN6!YP!+!^x93)VK5yQd>GFELiW5@? zWKI#$_@}GC#WLLirzdxiVz?Sh$he2jm`c7sy8D~YB>I^XqWsQ|kI%<>)4M#@EmAEA z+y2YVWY`DEY75kWyAjH_hkEAFip_zYV*Bk~QD2cMCpSe)gEKkHwc-DE8Tyn2V55Mp zExU^zzl`YLnQ2;Hx)2zR3#1HQ(}K^Pz$@LKUgdBy)tMdqMl)`AthT`+6$@g01O|NY6D zJ|Fr&Vc@@6aV9NA;2i%a1RQz5nh(_q4u6vd8Rrz({7*a{3O`B1ujT)DAUQOQ{{I_< zYh+}kP_9O&Qmyx1svU*Hb_eVJ-!5E`ZejnRS`S*{+&J&wMsOy>@w{R%WTu#VP^T1h;=y&?46_J1~5EnlElFJQMK!JbYg2l{Yt zroZcUMgQH(iN3=RBPn{`N}fKh`%Ie(TiXYWAE~T-=Ijb&?m3imsS)Edx*xyQrxw86 zTz0)8;<8&SNOyX4ZeD4EuVwMx?ek2NjW*c`J|Z**y-sQJjNNR05bA+A_f&IywVv`d7>ZXSeE%#%Xl$1j?EDWp&j|qCgkEfh0D9PR zL)g5nUIMRnluw51eDEi~of+qpy=E#ELhm*qE=ToC$2MS((&968tDtDPBm43Nu!sIp zDT`R$?wIIvF#vX!M7C!B?mIeBjXV6!xY$X&WlCg@%+zH6z#JPty(zY>xey`S?la*x zsoAam@7-&Bnfa~W@(xdnm&sf5PmubpJbKlyPbqM@Ryo#xDP!}_<-wY`X5S9-IWKuH zPdLPAZzu}%f8Uih^hb*2 zoD9!f%Zi^fy1p3(SyZx*M70~=$cqre)wLaI%y9Jahlq_)O-1H}Yxb5uZ*bmOpS{Rk zc&dtz{4b#A06)fC?PhcuG(4xu1}8h|hhQ{<-G`<4FCDSD-1XM=Xetj8=Fv0>z(mMk zk88yzF4cnk=K0{&ewW!Qr^Xa&0gs8n0xHiOz}{qMDER9onPj)XcrZ!_hyTvqI2)DS zCrnb~!9uRN=6`o|f`7+G8z^4dz8`^OyR0O;uT-&s(Q1jd<93P%I;193Mr5R@WPRqE zh9g)RnU`-eD1}2~=RkPHUBNfCGmsrNhs*;(10V}oV@-U3NLKhJS{3mtUUq5~K%3Em zf`acrVJKa_^F8?8JRbqqk&f4H2*ts!xc6^P4m}D#5y(WdmT}N`-K>~`c*X__xSv2c z)eCrJoO=KM0GKfDwQ1fiPeX+K<9;QQ^+oNHy@pnk7cbit#rL4rIwU>^V>Bj#+Wf&C z_dya1>P>ys`9jHHm$uy`aseg`^0)T5e*Y0NLd@=)x{#~|br#DEc(Q+}!ctqiQ zK9jHzypc5MMkj-}V`(ldM{RW>$V)vPGKY8P)RN+{b2qFdD7&dhgDK||ebln75NS9g zgln-f@m14aT&LP%5KSKy)o_n=wzk|Z4Z+(g?^Xugr;SLuw0luEQt9$vNV(}5$e7Ow zjA|u#(zI>3*U)gdT+M9j`JclFDELw5MqfJ#@46=D^rQED%;qfxdsmOo%E2imGFab!#Hyz{iU7YSo!?kCSE{!S05i zT@48iBND$2Q5j{lF{DB4I|Ew6-a1ns0Bav$NLz!HJcOIL#RpOEYhHYpcBtcExXnOO&&tj$1#cMsQ=nK=XQ4 znBu#lzl~|o(4Rts3D)_V3?t>>^T8xQxbgG5K_+}_(VTB_czw^XfZVy~Oujj+58lfz zQe7qd0Y{u|p@gf$$`xd2;vlnvAr5;j9(ikLGJrY9c*P8FQyJ3LOt`8Fi19l<;v{$p&uEpTb)_LIW{XIAr(+xc0C({ zccrhY;~szv`@fv4^E*|85;Ioz;zR-Msp6**9H>IpLTKkxdQ>9C97(Q8LrX|&OA6~_ zZ*^pw!n5!LbqGuKd9A??c&<0&;*zScDL)Lf?k2dq7$c0*q@3%siD1_akT0vxAZRwf zM;ep?JT{u4(+HP7=s>l*zj{lKq#1o=D4X^LPW@)2Nn~_N@;W7}DkB^!jJAsPN|p#o-D)hhnr3a>@a7Ot ze7x0QJBvg#mQJ-Ima<40j2wiS&5(48xSdpscQ{=@nOc!LX@M z+nvw?4!ed97E*0^vv%^TkKSK1>4yd3yfWEu(gez|Lb28)=n@nNRbx)3o z%zF9le#Akcyh&1NsIx5!E`|}%@7$f*dP|TrWCcc=et}m-$KTiMhzU$)$Gd4qXPFPU zqSQKOCOqZZs+$aOy z|5`H~XoFExzv3T1G%iF50px86bCEdM&8W}P7FJ z&B-C`lVkgIeXJGV4;mL!$z-^5?g)0JaK@I_io!w8tP0U5Dd@gkQP&x$PFYKrd0O-Si;vR7M|& zC7<%^xy>A+tO+CuyYTdD4Kcs@W&`Z%tq(Fj>$hR{yT3krQzXy)8E3C0Ax0#A&Z^le z#`9K~_xpa{bNk@>O8F^E_-T<1qucu0`E4vlKap-Eeh30NGo;aT=o-^cVPpb2P*YG1scaNOIb*j?oc8Q-rK%- zJsxder2CG~y~Yz(fL!CpbPln|gA4}pP9G@uj4gKW=|Q#eXLVqB`^pNj<#6asR~3x< zFD5S%@+7Vd>OxDxssk>$l)HeShlzS~5s*^O> zzu{rW+1nHvsG+Yi>bI}JF4gXhFo4WWOGJaA+{Q7 z)5~fq#X%QUUurG};$po$*iF3Z9f*bR34}P{Hsl1WR5-%|jR7r%Y& zdV}PZp!qcvl6pR%aGQudRDpCH3&NFAu zddJMhuDyB~53Axe#liY>tO)$UV0!dcG~P*xkJ)QL7K@g!l==GC-_n!i~(>?K9kVeeSzMa@4I>g%~I2x;y_Hi|t;- zv$ogsM@@+?9_$&Tpy4FMWhEd(({-?@vF{$k-ts#uH+bgC_7d&d&(j1BawUvbd^8(L zBLa7)V)XfWf3|h&+}0#NDYJO?4&O|G8r;U(pe98hma2=A=Svz2bdad0qe}c37ZBSv zj4XyVuM~m6=<}XDViDXngCp&O-dRFOh?**9lN9^i$6S)$#k#Eo(V8VBJ~Pbrg5r*} zyV@FYnBQWj+C-eX#rRw~>D-s|dg-Wu`WttxB(q(L42^`VwN!Wd4T}nO(+Lf3^{Te+L9Z-y&_%&AYcayF& zwQDBifj71oN2+i~vwJZXn1&Iz7aLej{{t8Z(~>KTvc(Em(1!VN*bQLa}+G$>U7?9`MJ@S1^#F|#ik%T)D|uE8fuo4Qb=5% z9EMuLP*e=5t7STrg6qWKZ*oN15@Kv6)e2eIao3yL(VFAS8d6CI(;=}q-eXKi6Xg7= z`M^tlma2|7wa?N|N(cU!=NjL&A6MePHVJ)R)feFz*@`W8v9NuEEF5&6~ zL&(Magk3cn^wKxn)O71yiZ`U9ZI4l`fqGt!66RQ18h&6u$J>1K52}9lf=9*Lm zK)p;LqYMf{E;Z|z!P-pUk)^w^iQz$XV4OarXo@;|c>AuR9MxBivBr<5`nB>Qi7OP+ zL!GdPJgxWC;14i<4Ndt)Ct`S^G2E?;jHWT{s8K>u)s(;D0V&FYf!f^bOj8VmnAS;* zvK2$9tuj958)0Ro#~1wr2_Q^Pfjy{U3E2Q3NuU%3u}|#t>9Ax! z0K*7IF>Z@e1zH8@WY_7J@TnNsV)A~mB>3DR0(SLjv>jGEB#>r0E#o7#TL*mNZedJ{ z*J_DRhGCXHaJn$RtQOlZXZjZ6-1CA{&jphr?~@$c#B6Lod|+L9;Q^zpR&^Hd_@c$@ z^O;;DopeMtW1Kg}t=I}jya#jjsae4O6zu>n{3j2D%FTlw4C+d~!+_?G!cscy;2`PU zF+3sJP0L)bEQl_RiymnHaG9is{oOUlgWFz)INQ_TnT=xsQdC$Axj3%)LONf~b^=1! zS*ZwwQ6tAB@Icq=uaq6l6v5mM8|6O+xSk zw>XX<4#%FDYFuHfKTL=9%B!i5pX|+C)_ASqQzmEX8ETyQ0RA_A?vX8k`|(_Sieb|D|DF!|Li#7;(6@a}uo=s{?^t}sRlH=zwS z-T!f|I1Y<(jgOO3QL(}4?2QCW*ilJo({-bzr&+k(ry1_F{~`Q*C#wy+H*65Jw@a?3 znxv<}qu5=H{E!-&qqbu2OCYdhUE3!P#h)R(Ay&K89Dxng95N!~p&9=v=jxqf-h)ff z6EE`$a!m$|gFsYjtl?pJEIAFkCUDo3&zHl{LShvGkLHQGl?rs@VTv6Z5NQ!=peK!} zNcf#PG@;kp*?!m9s4csMZ_Nr&su|X(|pVkE^Yq6)gZBqf&Cf`wtOB`GT znEz_cmL*_|QQZSw6IW?6C221E8;e%_^XUq)J=dgRifbKIqYf_%5w%hvk`JI~e@mmR zquGFh#LxA}f@dejEhA^nYK0ccF$AMpa-ZYb#uynzhcfG{2I_BCqaNy&tYLW`*RI(^ z+%|88G|Y1=%0sTXY%+SEPouuGMOuKvad&Ga_)-bLqyae~UyUMjXxfiI`946FXeN_9pq}O6e_hcY2%9<-PL*i? zoO%WCu^To(OdnlqG{6m@qlVrwBWU?~^9up6XA^sZ_OV11WQ7} zd1WT!p`J_E0+|&0VcsLvzKt%Qb}cByyKOBhy1$CMALLg@8eW(Y+_4~R z*;&foahFpm*BKkVIz;`#V0#ZLg99`k&*s})Bz#gmI19f3cYth#x2QHFJuWgs3?WxC zB@oH>iDtwa8zw9>VML$;TS~_!2g8wX2lqf|p zx2rKixGM`AtnKEFBha5xhdR(5On#$?R^f!SB!D|k=j4#_RZHNhn_7h_pam6Q`c||< z;_TM~dTj`o=(obpPb&LaEyXHGT8w%8LlnyBx|pw4OflQ>Y7hoHtc2Wa8H3l-`9CEuQNM@^t}O>vsrXSf;5phVqK z?l#d-;~Wi+vCNJ_XiUhqYYjW-N^n1{M1Bv<- z6h~yZp~Q%AR(LF17R9#?;z*U>SsOoyk&h3Of)+A5WNC(MITjE|mKUz`ID;OD*e(Je zKpLBb3Z9d3cFUx>`J59HRS@T$Wp7k^Rs&m_Vv&9DLH0ru2?LCIC>asRG_ahN=-9(6U3vz$e~ ze7s32@hz>x3p1Mc#)vgNG@8?)p*wANEtdNyEH;cC z`*ukU=5OSFwMBmL`?;0~rt8-Ow8Onm>k3GwctG=ng}l=E0Cf$dQC>G@(SQYf+;kEV z()Thm{Q*0q%WerQRig<81*hHJQ+nAHDmoy-Fe=I}J-bIV`wdaEoJnL)H~PMyWoRCj z5cgufj(E1MRDA2vWRfe}hmghx_?ZC-gv~1}8VLC82!8KR6oj59Bz(3S1zdw8H3{He zo&7bd>cR8s?pTZYVv_IQzk5GS^oadc0-{jbJc__=ev7Tny%g684!-Ux@W^5 zse1+>!i{9%TGy-qWgS^B^(_qQdD1?NnYBRup%iem2~j3o8x>&Y^fP3&*} zAS~hk!ImwMokp)6)yJoWy6A5R_c`D+N|fYAW`O6y9xaG|_*=hbszSn`u`4PL#jw>i z7F4Pu;!}J*&i7lqo8n~Z@{Aypg1=Q%Cq5 zzG;iiF&K)?Rda>G)>bn7Svg#lIbZfymoqP?LMU`wKXfcx-jXm{EdNn1p+orY+dYwN z0G7uQsWBc#>bM!gr&O!NA;PQ^BaH zSZj1`_v{g|GSNu zyOdhXzA&W}$4_ijGY?#~3HiocOQoYIXw8<*P*A?mN*!YKmO;O3al7j&%HMC=wK1f2 zyJ|G$*Pv!OS6YLud0cU>63b!Y?BA(59BVbKlYybmWGXaOdEL0O%SW<+ACWMImc%T! zcCi6B8K>E&Ka0j_n2`I;xN3ry=h7afZ-gGi1+D3uw3-%U^E*q%l z1F6MIKb@-Gwv#736-||t#}f@yyZlxx~xJmzL#3@yGu(ysCmN93V) zWZ%qL^UQbGAL`{P@O@L3c4M+|GHYJGfdnk4dS{|B;A_rzWuNM$TIWK~pB8p@L>nMn zQdfYrcT4C__$+b|jWw~x=MhzZveV!3+a@8(vIkBmI4l+2X_WYFTMyGN?JARtP!3tu zb$qnQsnNL})TtwawYW#rr$4r=X`?)Xl156^@vB zD5AgxD~cQ@t6LJ_{A6!0zb7Ng`nm?OgmC?Jc$ejR#182*r8kYkN7|FCdnxOrFrPlew%3{S8!zEebz z_+7-G^ny+kI0xy?xEaBPp-|>^0ZJn^`V^8v_B|L**69biC}L${sclba|45p=b?!%? zoO}>W%-H9d;Jx<;52V67&f6WwxvOh2Bok&mt762fDkcNNY`wgllsNjkpBEro?7OCp5BDQ>7` zm~|uqc|pWTOWC^+jB*)uPR1b8as;sh4{Ci9I57t?rNMjpk~jW!E1@h(`0TWPEQrfn ztUGRwWem4+#(o^yX-Qvwpl`j#(E17^n$YFueornYJBW%ChR!}0Y229Uj^zPD?2j!E zze28t!FB!eTI~|xVx#Z1q%L};2WODk$TjIwRJKi1A+jx1jh&UchF7@`q3}l7r}*Zu z73qK}CTBKI=61h%?@55_tRIRjuJH3xoI(@eH_hjrJpajCEhhVNfLd}{iiL-1>yM=#3hD+>0{*-!nUa7C2Ye06ojh$=s6OM70E!i}|P)x0}~BFiTFUA0lL zm4dtEA4%2@8})T03);10*ZGe~NX3e#qyWYs>a~ccwZ7ZuB$xSN@xu`tX!)9L$?$m zZf!E5b1{Ix?wYwfQe^hFK8O^p07*}Y)%Q{KVTWCreLrMxF3e-)o~koFd<- zE4@q!<}+!`g?yn&JMG?{ANm*7^ zPW89cve+plzhV#-wJsL=CwlZA263v-1QKy*)+UoWfo&pPm)*MfT4jC^RkNqiR8xRk z@mpirVVGGr6qXqZPz1|c)Q~G|Pa%{6LP$p?$EYZph)xE^!SE1bs)W-h$RaeE13=71vvIkMdsbWREL<2G9HYnV8ZzWvJtKr33tjheAwA!K2 zDEyb5qBEU_=^jqFn$=exaGA2^^K4!KvYZ7)8o+zswOtGG7CJle2`!ozVATofTzMvu z1MjU-zbftkr=ztVhIQ|xc}Vir8qC2$S32e z#-}|XMoLXI<#v}e*;rxC8E@Lfq>Y17ziw;$-XvEd1f{D;4y`Dfy(apv22-3zGP81E zrjbr^w4DaK|1DTKIY013bu;e!;%oSLVxB1bYsX^bYQ}Gz91{c0Kt$XC?^%?(kodOc z;DU(m&ntLW!0n0CL@tLOc_mR0cF{#Jn5`yZmzf{zV2-7OU)F|S^bz5 z6l-f|)yOaTq~mRn%{W8Mt_7GhRF&OEAS=xTVNsB99ODqYwa`Mg^;B33A;rhFq_A`n(sLQk_281bIcRe&VG?kTd?&|GEQ zloKLU9|}9FeB>)+p^0R9}vxo@#D?1MF|@5{#J1;)h8%*^XWme2fAVi4ouBAVCa-f;48!Rrk7JEv+MsT+LA zjn+@gP-!I^{PGA6^-7%9s|N#gGIZ`$x`c$K6!0mjyCWMr%n2=8F-qd6icDh~R+<{( zZ4^ApIK1<7K{w4N`*@LUyr{{0Ox)q(OeE2|c0$^rW{Mhe1(ueWM5<1_<6$nS1FaLk zY0>FrFrY$Wc?a zx61IkcZwj1H(pnGtO4m=PnWt{@?fr5Ds3_dz}4ciEhNcI>*Q2J7NIj^=_eXMTAG@a z)B8zJe7esHUYvxz?{&E2 z#}qw(Up$wurh`c4AUf7-O{7?e{bgr1S&w&}9XpZ7Ly)eb?-!~z=JefeiB;#d3Z>ph z0lpUkd({CqM=SkZxXjldG$6*pMi@KSiC(YCH)(fqwG52)NH2$yGbTVvTqwDfts9D4 zlL0}O=$Sn|b^UB(;_+en+60QMJ4&?CQ++K6b@0Pd8zQEVe~zB+-2Fy}2D$4bJEol) zay4527WX=oaVK4eSC1_G3S79iX2a)d(C0jdlga>N;NykPo?GQRkFZ32lpoLt+My~^ z)h!@Q5(a9TJ)JZE1@f{eM*->7+ge+lm4FpN6duvLu3z21&p_9-^8(Ms)*DJpCQCru zJ$+k|w2F$enzZjgqoU~V4afln-Q|OQuSkSQ|AJSUAbtmz&mKa^hZUq zR?MBO=og*$qy*MFhJFruYN6hi*-$zQ=;f;S)+ zYFLQYtwBa11P@knX*q)Iz(>n*(%0f5_Z6ZpFI1AT}~a z?-W?oF0KIOY1b_KP1RAb+vu!0Q}ZuTG~|IEa))ju0XCJ6%C_qo^nQP8cPGi&Sxe6( zF42SvDOPKPpI%)vpui13MrAWqm3VzSPpj|uhs0xK@JW2=zE})({V2RTW zBb07CnEz~rqRQBqt1rjl$(k9&5vW+i9r9SGW?AQYBtfWE)*2f|22@*|)2$X$rT{@= zCS!qYn$R|?s>ut@hUbugM2)aFpm%AO+2Ft>`^1W+SmcU4JJh_w^hd?jFwFed77e_B zi4UkGfJXCdtbjYwgrU#+h2h(thh~pNR}sj*m4NAn-?>WgW-5{*iXw^ba2T@K1NZJm zHxSBZ3Z66!h-qP6=0##u%1ByCwkYzqQ+_SEDLuuYKNu6KG9?G87WuOLC*8}gm*Op9 znVH}BwfG+4XZL!j-(%3THNp^9sqf^nAJ)ZwH1iBM<9zv8%4_GMVP*19p9L4uCp8hq zRs9w`;5fJ9xZz2M!@5ba9q0|m9ABObraq9sA1ZMhW{w|Ol@9xLrSq>(cZ(AFAAbwv zh4^b|@CZbUNQ*gXanXfi@`YZjtB{jf@A@ZC&>&f3f$j-i8vsXB06VdHYGLFy5eQ7V`3BIFbCwp=1vK14s#KW4%Lz|9*&zGxx%Ydobb% zCg-DIJ<{2VhFHKP;$17ceb56E!*GkXp?@(cFjZ={DdkhCR2qczxI~Gp6R%&OG3Bp! z6ZecKl@~!L25Dx6!Bz8?V!RMie6n{VUxZ3*RS(MXhF?xf9XH8|On;eqB|Qa;O6pBl zA(+kg8&9!VtN)1T>e&stH_snYy^dCCk`{*kmRu~8bojv`ED^#L}ThUvHA1lSnY%bSvp`4H};p? zOS-RhA@MdPQDa@NO32?RS!0~T&+JTDG_eycd8KwFjJwcrJlRK+q`cmKeI?5EMJy5!#G-^JQy3SzG-)89Gh=iNb z>Xdlf08f81^nthx)9+< zNII2WZ?Fi$qSFeVeor#iFH1BE5P&3o7Bw5KaK0hobGMYYCLC#eJsgHg6Gpr)cRK27 zNjYpy@=~K~yeW6SjT}j)`V0Cnd^w`=Nc$pOUT_b>9LV&Xj+XcfwB*1<-i*>u`^1E% z?r&?tWzWJ;mlHQYQGG~`#Kq7r*`f_GpOYEQ3cGOcj-Vf(ZNo+95i#+JtO+&6^3;Ja zO6ByYvdsH@)`3`2S{U=Td+(d~L>>)V1u=z#{JRedM<0R4NO}7FLHaMaT%va4kjC*U7(5lpjol*oMG{B<|bJk zgUY8!hC4c`F2C9cP!h{eziCJw&*@r&2}DB9j^rSjHzH-Ma*EYVOtCro1nKFH7FD4; zjlQ3tIMpyRAcaT5WMw}TQ?-m%(e5`4uzqv?qCL@b)Izi5Taw|oTh1gxPd1xUM~a(t zUs8+l?YIG(P!&emRpgLMGDFxi-@KH-N8MhZ9~38gf$AdK3ypr#0tuY%-sZaV7+AL( zN!tf~8f8v3dfXoi_N+quPDiqAv_;-ew_}&J`DXf0S0oQ2Q8)G27J_!0ZJ6M=O=h`J zipu|@9;+K~#cK8mgBl}(r=G4Hdqs5_Z?Y9kDLICaK>x=pQ9%KBfSM7JEN1u^RkT>L zn(>EFkA(RZZN>hV9r6l)5Trvl#FmcUmtVrS@ITH75y{;P4alu+zk4aj`<( zc)nQfWa+my=wiFzKU|kgO^iPcVa5g{DOvx1|H(}tqk=|D}MN=9e5G1M>0Q5;n0 zf@vr5dZpl|sZ3TluOfN65d}ys@bVn9la2tR-CzD*GP#_oMgsS9Q~$oamFjo%>(FB- z)9XH0e{S7`HIzvYILc|8ZLx-ZPnc1KLDF6;$2srQ`7*JT?9!^H78dV;49~M53Zd+H+ns!d4M~r0+Sw?)6=KIiv?Myu7OaF_ zGhs-J|97FdK8%B)(6}YzfBd2&Ymrm?$jJ>Ic*lEJdy$d+Z9MSO)gzs9&jjlHJHUKG z3M1=qGcg$%8-1=(`PUeKjD+>3bX+Ec3}#JC*|=V=g$M;f=YdrPB``K`(^<&Lp$K?f zMgP&}%s#RU5H&4sTJg&OPVwhSqjj-n8eq-6IECtym99}15EXcIe+G2aQaCEA3`=FQlku7gYUq8 zfWldJm=ZOrWfZr(+z}YEiUfD5;(th^i{(GOlJl!XQ~aqX#laU9lQ_|jaQxR3EoZ3I zQeQdJC-@%&TIS4>Upz@BIw!LkrXGS1Lm8}vDx*^4}@g z7MYH~nVw{cm(R-(SauWQcxt)8l1&Apm0J4yjFY|?76Jowz*7GPHv;^-hVk%*GyLP> zgns`Vcu}2jI~n8uakXILV_p4sV9-<8EQui+8 z6j1;d7xZ2v^vs0qV3K~@%>XOK5V>{@U2nkqyw1s85WGOKrokOP4*O<|m&aRjE&aqO zV~s&c0M$4_i%%T@2K4#Ky$Zfr!6l!l`5=gI=R32gxGBHVUdBf@Hg@0CB+^FbNGK(C zP0|YhOLMm=M73b&QGlQ&#^E7rXF!@Eq!sHBY>5H^e@MWFp6*0Q6LS0a4NEm#U03YWHj5N#Z)(?(}p;XYLyZ zeb0l$pEe+CW%|`Al_gJ6hmt`<1mXO;U&5wB6GbHphs3y! z(>)Q3GD;R1==^tU^}+w4AA(~vKbNxWLJaJ_oECa zNqJ^6|B27n<+gumgQcU`A7(Vle*ZigGyNE~eU`1?m2EHU#Z~*BpRfweLGj zg>-R~-nmIFABwvV9Vs2x!4b@}?iJtK7a~9a$@+KQe*Tf(I(NMeZv#8e3+}2a`Uz4pAVaI5l)Vu5P1ihD?U~{@E(MOXNQ5k-B)BVmAe%IH36BoKkQm6 zjw9}_1B*?)WfD)BC9{+mz&kyOsp+rkS#e64lA-+_`?ywuzvG|_K`gs*dQvBN{sC8HcEfO&4IB0AKp19zpp1A|8+v}fHIGf2jt{` z%l4wNQ@}WN6U-55PXtx{3Z9J&I^>R9bctLg9&{0Ubfo|0+c#Vnu29AB!Koh&k41hj z77b7Gg(mJ8ZU_}=o(#YL;nwb3*FNU{zYV@5TwDDwsQvSB;Jsgh$QSz0pHC^9bVwXj zZ{2eIYjj_q;rmZ~T*?bgUe6se8IPv&WZ}RKC@WT7=mUQ}Q!E&i2=oBG&E^ShR?iW+ zV3C6LD!^CgechDEVkZl>v4Ez3orq~l3JQ~DDou#f3kYdP?D!C1;9i;`aLl`f z7oLX9!66aqpSh;*?_PawHT*&{Z``YZe`%?Ir+y%^(3JFAii0h>6CWr0FD4C8$qKz+ zWc-JB{GYw|6&Y2?_nV1is0;(uN1Xd>7`4 zZ9$U%0Sa7%qVeN)C%gZ7!~(8Pj7ValcZRUa79D!duSox}Ms>$+Bsaxgy<7(S$!tLw zcXC){<_p7r|M`HU|LV~Sj7z{s1?4t_Hfx3=qqkq7CQJwI+um*cG`~vcE)3Gw9vOzt zV4goMfC}~MAuvq2nUx?i+-PyY;dN&OlU|Wi{Q8U<`|x~0!GVyUO*Rkx0R45$dZ!lL zoBuG+|GghBv^f!9;d#Qyn%CF6>6;l5JD(?(o?~`#m2N8}(pb+n6xv*Av8A zgN(d;)u)XQ>@rXf8+y;|jUNLUuJ6OTdyJfJIpG4xukw_FzH1~|hV_^0zx?lJL}`Zw zOvvf!Z>PWWaVrX3$)zP{Zw^qo)f~pQ!)dh#q z0D{})ELgYQHBTXj-;%f0`((At$LnGDnD22TXq>+NBEGBx!3*Pd$tQg5_jVuA>KAjP z15&zmK*eT&f7sqKYRFrL-(W6JPJiWqiK?X=KEKByRf~F8)KM1Uu&*1JYD9B^PKZoG z1~+un@^G%!ASY*}Zdh%OezaG1x_`5HOsGq5z57Xqs?K&fjvoFi|JNAX0ka$gVUK30 zzk<+Rc<-#)FV4`^`VLIeATunoVo_frv-h0gm` z{?FFIi;>0x1BUhL+-EwymW}0CbYesjIIlKF)guDQgS+`iJsS-oh{qg>i z1gcUgLE?732tOQ8skk`+lf8Su+S~D2SuymwZMl*Oq`UF5g(cj@miVlqq}@yr&xOHHKl<9qqYTYo&r>9{?@n0vl-wmhZ(T>%0a(dAXq2p-l4&*v5AsJQq_PP|t2|ZdU4m@Mp`_ zao{E;?TDwq{vW}LGhzPq(BG@mg4Hma_SZSC#0ut^%om<;FaAO^{yj9jZY1z;uWJ1_ zd{^Si>ra5&C5?uyU4&IevT!3i$9^l=x4a?$6>pB3mT;bwVRRp1=}R9J z3~_bO|G0F&IYdouG@zxgDd~S?pz!;zdz&@CWs;YTAD75v*3)U*lu4$I2oC4$&c!E;LC#@e0VfPJy5#w~90OF3;Rr7g2O73;D0;&DbQsp8-LL7G8 z7~nF&zv%cce5NNt50XPY)w(@NBez5Yrbk8u>rE$rjU>l$0XslPlNpOJ+05|cF3Y-M zT8)-@9(PBUlH=eQ5tYs7^$w&mk6MiFAh@fgN*TTOLUm5+fszAHT2JArv6=QAfWEbV zihq(;lxW&`Yj@D>AZp!$_$tqli7_f4Mvx~6!QKu~x(z7y4#$lp`{bkYn&E*64Y2&$ zGJXjCx5QY#3Y%$m)?Q4a*N_D#8Jltq$GExB=&DT&hp7--9Pu*J4g09?a^~m1;14#w zqsm^Rp3{b7D-pu=IOfj3RD)mZ94|hpd~Wn^;c`5XY+RX6XS1?D|J_WjM8DS#7Qm;} zZmN8qxm&mE{_)9owGMc)T%CjGMK9b%9J&cLy(VSupvM~;{feRDmlo(2y5%2W3^?&J zhPn4LA};20VzPBNXY>XA@$%+(M5(e|gL103DOKuZH;u-Pm=%Z{jON0(*V}xS%z0*{~!EJSyOh=1*pot_~0VIh_!}0C@^Eu zZUxRTg*&EMu3ON&POa<{){*wh7t5yQ54eI!-V1PXM0LN0CxavF)lhp;y z3i~0Z^W_#|=Sz2>5#4%zG8^`9TcXIVL$m!Od{2X(kt?P9$d?;s1scNERtitvyYF*U zn32E>e1mQHwpKZf1`LlWAPlZ% zV4oa4F2r=A!Rm(=uuAdR5p~3ug2i*k>}ITc`3PTkYH6yzMT&>1ziu#Mk>fx1ddax% z`T<|<#Rq$K4LUGxxin8l#u8Ww1U%P7{=1F$MUF_Sbz1A@lqezx&x9F`@t*bAKAj#$ z?JwH-iB|lwo6Y^8mQ8yhbsUQ6O&x4E7{Kb!LcSk*v_lZ7&ma;h`lWxpWye!{F+N|M#PS=Sv|eI@(ju`Sub5_L#MY=CDLuz3B$?o z9>+ndLE+4Mcf&0vRU!2KyJ}_$C9ioeaYWdCJ4Um3odjMQ!;_gj>0FuVmjBnonLj0g zKyln`Q?UaT#Us41P1h@r#3Rr=5;XFtEv*c&Y2A%2MRdxmdW+Nbf-Mf3=?IY9qs)AZ{Bz2JMZ)6`@>tT;4w261cS9Jk2L2$N;UH< zv);+?&!Tf?A|a>{UwQooHUcR*&DQ*!w|a{WLOo#X0n69JR<-Wjg6VpS_za>Yj>8Hk zjz#Zpn+BMVEZBjEKGB08xOSyHaq?{JWdbJ0|DkqShI+QC1Q1FQ*kkCS@p6%%vfbXJxyC=cdNcCAU0HNkk;BEp6@NwhdUa5miY7mOhoyGwA@ zVqSJDoRB$Q!?>@oy*q;dp7FeR?bmAi5+8+9L&lq7vM4UW87gnIb>Oxm2QVz}a9;Pz zhPXS0>hU%HF_LzQ6}0g{sD#CykFUdde`FL2oSfZ| zQl%c=hK+&g(?RhiCh#r0&sH9cG>}$NF@Lj{;_Eitvi{Z9#Q1BeEqFYvAp8{*9=6Vnr_8 zf9M{CoS{|^B~;@v#FM5!2z0!#U>ld`Hf4~aoltvF<#Pnoan-|-J2%8_pC&|3yC z?r9c>P0iZ+rhNXAaW-Uc34TY==x5R88@v=>zDQ`^0zeAWCED#x;(>?V7WWO+g#OW$ zWHx8XOLv`xtDSLiCeFCHh_2%lYj@hA_KM2hxq6haHi?$UPe<+vK@?<`kwz~8u4hmg zJng0awp@-*AM$SkKCiQsDq>=BkUkw?coJuY?ARe!`j1{w4UQBtj7NNmh-v^?T(L zEz{F`gD*qdRh2zndD$hs$#pk*`h>%+$S@@&b-NrJ?AqWUC47jxwKos+cse${+YR`m zov}e0M~r%3VqV~o00gjg6S`dlHaEQC1leJP!)!yVN&MGxmi4g!#8|?Mps8pR%SlAC zw}iPcwA#7Ka3f3fjKBKy`3A!+Acf|$@7SQ>GkZ%v{}9A&Cp$2?5f_g)b})9#)##63F61i z@8;Y2GHWuj*X-GA&HvAuP$dN^jMv1kpFMkqA^k;M<=L~pHlICv-u?>tcMenw+v@kv zb7vJPv1jF@q`SX`7Z#u7KRtU^6@_+h^zyfi>i9*=`PnlZm%qQySIj9qo;`cYlNSH< z)kFVa`K2MA6v?->tD{&D$qV;}Rh4uxfV+DEU+u@Nm%fGX^6=dMd@yimP^ClQ7vSZV zkCln_wO`=hhYm-Z{Wy7BN*G{pi+%Ww^Bao~XWHtg6Z6Edyldshg$bqyh`M($Z^S`V z^Ao;9dJ1IsN_}v@`9bykl)P=k+-r*Np>5{WU0v_K615=B@j3}=Aa(v0_n!0o0=Uvx zN_>}IjEZQ-xhQq>^|Xp#DLd_=`9gq$&N$z!WsuS=@4W{yxu#}QJigqh_k2iB&}z78 zGlFemINue#rE0ghyGURIPEw4-sNI7Mwy({%bWZDK&)3iB(~~U74%Vk^RXs%lueX!# z{M0(L^zlWH$NDb4f$cqw5^RHyH{PDM>r*R2%X6NdUiF?p5epta>-52IY*DLuB-<~P_VX(1}-vd+nyu5PM6oOXmy_Ix6~mszP3}f%83)RdRD$x)?+HRP}qto zKCJ#JTgw|tGVMF_Hc#)KfZp}evMR)(Y%;flDp7SezqVuwf1^5TlqY#ouhuHzMy;=~ zmZ57QE#Z`DN+n2**x-w5>deZtOPQvmnU{>at4O?`jG~O6@vXJrU~A~n-gW#7XyMmA zM})mhc5G>Q-)xl6?O@~jT@}`OtJXvHrHRc~2EBwWV7=U)fll+}eW$xO=qJyj;Cp}T z!+j;PB+W<*&Rj$`bCl1=4xZ9Uh$h7# zuDo<0X|R*DgHrmEhP<=e*OH!CXi&V*-I&5Z9T`=KJm7aBAGtc8)kdi+EOLvdk&gZQ z+J&8O1msz6ggd+^O8QS81-``x>?dI4zq0fbN1k;!dOz*IRfLuIx@=~&w;XnNQXI2Q zh7mmPj$+$B{b^4+HW#w4m=KLc>YBEd=5Nb#1vNn>54+se4G}hxjr&gzib^v5FqL1_ zNE$~wH%4K?l+6xZj9RZR^hn9lAf^Uz1S4O(JuYnhU_@xRP+J7cQ$l^2 z&QvYH#J)$=$Y`Lff{m_?kV|56#g^H%5pBQZt>mD=i0fIc$7F>Ixvt zRSr0p(2kDNv8BnA$g4WuyAr7K-*Y4vqFCZ{&ON`du&{D*+~l=2i1w)oC!8cg((CHT zPVvS$-lDWsExyXJM_#4i)coTJ1q1l$FDZva_~~*SUQyieiqv0=D)C%pv`TjT@?TaW zg*17^>;&1}1xAoDe@#rGuwl7}H@H<^O`6?uS$~9CL1%pN5^eU23?QgznB-kU5)O)i zO`l1oa;0(KlGnaW#O-@1_GQXjp{6fYO8cS6VsY8S_exZ3BPha>!!#)MFECaWz zgf0Vot9`vts_R%D|b%gK5Ad9xyZKXmBy!?1lw0zc3I}f`eFGQdV1`IY%Na4UlT0V zg>fQ`DiolIa>g%715yv_;rk28`6JK}9|w^%Hi>!FwYe?3H<0~fBI19xdW7PX>enF0Eyz{qw;kv` z{|CAiupf8pc*$}Ejq2OTpz*BS#Ia~(;{ zAZ*}c#jr6#Of6Xr3Nwc)t7y8S%l7MX1IoP1%veXukh*?e!FalT0)uH~h>1dY)wV7B zXFJwZ_PE=Jln@#}p?ogAy4d<3sk1^+Ij$)JI3;zpJ0gdvmVBa!1S2$%{W*DI1RJ3i zcZ+L_G*_~_c8x~e7(4~l_y$KSLdJR6vqZ!Po4ZNjb*X$W2%jaq?AYkRE!gg%FdU^U zw7Q|Xf#yx^@LtSfrmtVq47)pLUDdcvqM30U*DQwOw4}}V7w30p^~o%gpXXewW=V4* zS5p)MtF_sRP>K>oo^7rR5ut%c{+b zMLK6~uXygX1HqU@4~+S9-D#WUvT*!x_d;H^)T0 zyzw$Om>;qaZPmfH9la(m-^ci(BBhm^_nyINlTc@D76P<3csX6GMKeT$%M+$*E&!x9 zVAK4cJNA?O8`FcPofy`85Qzb1N^C#vA1|G(~>0`P{L=2kC$e)e|2FRzLuy z)QpEhB9bqSmeZC_98GCuE)e*WuhC_?nsv=!2a@7YNnSIW7rOa{f=;Mt(cYBMcB=qu zuq|p*4`P}$XF{&D?W~nY=l*`h*G%XBY*|28*PygK+wm$a4|pEQRV*4G-6yCu+sZ_3 zz-y=Ty8K86^@f_2&&SFj*h}SYN%u1_)6yF|6Jji*^=e<4V2c%N1LtbRwI#xK)VtVs zwB4;Fa`)r4q|422@cakqOw6&w3Gf4(U0-st#n#!MXFpJ)*TN&4$ZRy4&R^j@TdHMp zybrON%#~ikdbQfW)@3>t)0KHUXDQK`U-$SaFTp`le{(*E)tj?~NLA1!$7d^Jn13Fm zENip6oANVLQcMDQ)ywTepD<^%LT%#XElGY7qjYK_Y`&TP4T%Zp8XcJ$6H~xDw$bTO z!8`BzPFEd1h8A%XmYVJ1WlbSH8QRaF!$i({+;Li9&vkso;=I_LsUj6xM5ouEw0PRIqYR@5z4nNVi@J(_|*BKZz?8&9(g@)WDCd zi@PM@%nRGMk0?_O{K3X$y#fupW6ln>bEc(1+1jMlS99aMn82-Lzd6pinHqby) z-dwMN>tgxcc1KT4Nv5k zD0Ld9QFka#1GI*JKVRjC$cTs@z1_kOePa%b8ub#@%tYNM709JAiWx)@LtIvMBhX3!?g zMp)_ONEJnR@3g(^!}S9owPdakRX_PZ{@5=vZmJ~E_joFIATAUH%CU$dx4uglN_tXP zDxa_%_vW<;bk$7rLgd0(bwRn0N$~!Z9t?UZmNhDS9>Ri6yB%VgXQ6Nch9&bvLCoy7mA?wkeSh$mEw*AgLYP1O zOuwcZ`R#Er0Isjir_(=_D)In)_AQGMS`rCtXH`#M2n(WERQm4B7%#0b^0^3PKL+EI-xBi?CD&WyVEs1K~j&pGf5^_LOO5!c9Mu|S7H*! z;tYOOEIN5jD+YiKh*)*`-Zvx1@ef&iE&3WWbVa&QM%s8g9e~qr{$`{>;=F31 ztcZsyWc%`U*eOQA+B+s6w15yJGzehcLoI_F9aN{%zk*pX?(qBsEzkD{Wt@ z(?{SOb*jd0pndI$t^SjrNNB`%$s;PQfp;+&bQK_!@;a`-34dul8`W)OY!Dz^n9711 z%A`iUv+27Rz9dUpAH|J?Ens+Oj1|&^6iH_ zA~-!J4i{BrM0CFRC%Z+?Dd?o=)1CULdQ<4lMwt5_E7g0v=t;BBm-i$X471ZQRHcD@ z1=K|CH;FFJwWB{}a+K737@W-9)*4yWNIG^lpczWKv(yzqHR-eKw#HB?@at*Ej0`!{ zq+W9qqO9LI$DsbRc7=3zbbM!n+^ev>_fAoXGeR6JAnN^A!ihLNh{+XTB0dKUV`hWt zDQUd=%wN4pKKC+vIDaH}7;2|~A;Mn0@$o~)JIVMT+9DE( z8xR$1WjD;n+jU$!>%76y)^AK63s6xr&sfuK-ElB%;GZRii0SV(?>7oczp`c|C%VRR z9utW2jEs)WHr)^j@(H>Y(;&6o6FtEUBSEVjT^e9f!n5mlS%_^#^>F|rd|39JJNN+g z@7Yfy4aO|FRBSCecMZ#ne|`h$sM<8NXS1?*0NO)#8Fmjxz@;>S3r@St4>B}$^k4qe z@ey#*UWTFdgK{gEnd$#-|H_Mc2~z5Msab-ZKdn(vJ$z)#^GT^OG}He#J_do;n8d=2H+^kn}XJQRo};n zs6Tzi(zFe$8%T7ARiIIB!I!=N&D?d3S5j7|{1?#WUUeHMj=lS@B$<;CCHyY{%)OGz zNqFA$pTUk}jrrd~8XW)M@)zXI|7b-%@J;vM^a{aEzQTW0kJ?mK z|Id91$I|{!d7S?a55)Ap!*&cRt)}|7?s3fjq?6G5pSslL$YkPzFbah&6NR^?0Dfb5 z#aQWf4tH3UlAOLuOudKg4vNu#_qJ>D4(SYQ{^+G>EOi-jL@$CtxdoR5OSjtn0cc)3 zs^~vz(&Q}qjk1fH_%_VS^w{Y5_W6gUpN0Yj7DMIU)rqBD+d5eYa$nd6F4F>^mH(np zd1^3W`>W^H(3Ur!uP(~jhM_~?3p3vi&0ckm+a zAHBW6rXL@_YcIA4ZE2%ZIS*Np3c3FH9PAz=e9JsTa@A*f3}*wi4UajGeK4FM!z2^v z?odV|s`8;gN%Ao}UPJm>g@bLJ?;T~8F5sMMBBi0a(3(`7B4X0wSK3y<>pb4_EiG7qf{R+KB)^!NR(c52vMRUQ9&9+}D4Rlm?SJ&m2F;CQxUgn0n#TVxn{TK1RC>FL4H zy%Yd;9)DQM@~zvuZ#^m&{)6Fjulg8`k%?mc9LbNLGJ8$jCvA?*X8mB_*Kg2NN-ed_ z?FBnKwnTFtS|lnKrG(xXY!w3+76Z|5WR-;!wSiESk2xLI6VZ%PMrZI5sWqxPBKK>K zrlwIW=PM}CORzl!O{HB^f%M?;Sgg4<@V#303yIg;c`h-w*4mk|FBz0_-_yz@QaMDr z6Ffqk74&JG0CdXP;)oZ2=EMp?gnG~hMXp*-{x=~0;~Yne@K)1$k5iUvz4o{0DLK$rNx*o<7&FnjX*qdyO3LzBvNbJ!Uk*N0vNeN1U0zO|&j%cHA<3Hg@W^Go^?y~#NcLwo-}Y%H;5h9foyX_Ee@H9m zF;gMDh0l?!6Z=Ql=ym5kHfj1W%kjR$`0fYmB~hE+eCPSDLG-~(I0JsTwfP-iQ!y%c z!99%f~7i8%}OGgfc}Rvbet-w0AxDq?%$ML$lQWOww;!m($ri^(v;=~Ki`G& zd7k0f5}oL>5f!&IgH@DF_Lq31AYGQphwKV0%begdiU#!SKi~ z5x%x)z9$!|w@(}yNOw_y+XIm>?RwQ_Io!@3fs866)^;k*iWLVsdW8@l!zW8!eyKIN zm-DH)?7^ey>*HAwxe%VzA9a!?8-JL%U9b`M^QP^R(DO3?G<8~zZSEf6q@Yoi<_QAP zJ2Enoc?QfJ|KRFH&Xqd!-C%EVO5ept-miK#rMLV?G3Pe&<&b)&GLw|;uQ9U5W;MeJT&B9iy0`faUljU6jw{QpMl6WkjUfxe z3lvOH0UUW$0$wLJbW<5U2kZPf+}kZ>#1&Jv8~5`3m%-MV6sHN9<%@=aqm+nr7`c%e zVD5V+YHp00H;nH;jkN!-v-z3t(N+2Oopi!G> zl*rA+{oXjzerOVsJoTaT?n0(7mpczaP1QPdb=GRpD$%vSpdKQ9y?g3`ztgcu$;9n* z7}_~T8&}hO;2nusVW{{$*m#Mk7);sUoFt6&TGd&az4UQo+CC9DG?8c59~-Pryr7}l zP)dwByYOoldxmh154-L7qTAaeq%3DVrx1RWDXggMVS2O$!uYA}f%X-@fQp?)VA-dQset7mLJLB;JL=$n2=w5z38`{Nf=W7ttvfY^x3RK?;=AzcfMYEeu!Xrdp=ahgOm6X(rsL|zMcNFIMhfKW%xtA zOqj*YyLiQnlmbtj-KSES-l1A!b}@<@=hJ&4)|Va}PTQWSZfq*in8k1-H|FC#DZXTPys8Bja64PVYLd z(_U5%iKd&tG`x*cRMjayle#Ns;^$O_C8SO-&$bx4xP0Ajf*wn#HF<=MWPAE1YcsR0 zOzKd@Q7HbvGJaztp=EHIEyh}X0#}G1jSVs#tW}-alrF`hb9JnG=;7fIF2OW4-A_RY zASb!(Y_;~@3$d?yAyj+$X9+slQh+_@Nfhnp*!uod>-CR0d)%z8{aqIs#~Y^rTNQA7 zHYjSaR9$@dG92ey8-5uMjJt_WCNXeHlVU3>T{V|@G%o^&5&+>iE4-oxBs$nIUf zAaWkgJX`v1LLd#U2)A79T?xRxoAR+GFfe-^s>EjW@>ulqi`r;VI+gc|=Y2Vg{Mu@e z|1Fm=ZOBwnUVTR&IBC_UjGfRp;nz~;35Wdiuu$~wHA9C>1{zw~#9BX@Xd3krPPG~kNv1B+hw$~AzBzKb(mg_m7!gVxX!y1ZtaKA*ycJJ)q2ghwUSjn30BtW(&f&b z6AL{vXLn_oWt@=x2m8d40kIM+_^%#>#DzM}hkT{9_Ifafy!?H(z<@S}tI)%%Xt zcCd2c16C=lDguKPG`iyQk}3kpLO_tL~y-X zDB?x!u6fVPlX{RN3I*RZZvhQFhPZQ7!9feSt=QE-n|$Yj&7FVhd{u6X8~kd4H@?595uO6T9b84lz?-#EFzj zagFoQ+q+=Z#2htl?pHcks!4Guh8s<=B=gnh><|a4oH%fWiKc|D4&XNX@_)B$ajUZR z)|fPR_#Dt9(Zu%k%cl;P3AqQW!uhvp3$5qGYV_qlb$5_;C-F>nZ!c}3?J-pkgFnaA zQh|e%f6VFwr+DMvP~+=94B_bVU@F8Gk*D5cU2D1cHi@Hb!QC-?XK(n&auU%z2Pc`e zdY1aK$n^|KZxaTt_zu&KkmHxM*KI7fDoq{*oq~Z;i?%a-ac?PfaczBgVbi&_a~4M& z8;n!Un;U(SGnVuAlz9R^eHIEb2bO3`X>yArJH7lnT32YuER9{2Ma~0YCe%o43znkE z{I0pK$7!q0yE0&pyI8qF-+&6ux2H3ZY{r_VVlswNPn$iHcS(LnKcvJR zOLcUEQEezb%dUan<;m)u;A6pbu7>(2oG*4IHfuk*3aXavcC~9cpZ96R?LTs)Y7~i= zIq;5KJ$k>+t$MjRATwLwNJVxD^cy%|T!tuatbR}H?{93yg9uubMLiYy*M4zN%8#&C z$}>j76#r^^Gzy+h)4W_^_!83zovjhur>Y+UZJbIobXquA)GZW??-5N_ZZuRB>ee$( zk(--#?e)he=hoDEgbDQM~PkAl@IQ3rd#`LvO~<3rhbG0v7<1 zvwdSNG1fNgr-PMgTlR2n8@EdLed4`qvo+trM6TOze?U*SuU!bk!j?Z;FaFy&Y+2oV zDEObA@!pGu4}H`1lDJ)>eI-;EetXHJTyG?sEsL=|d)egujeV~L-!obI&im%{E)fxc z1qyc1R-si?>iNSC^}i@zsyg7maGs4Q`af(1kOt{Y@kijQ)YU6*94iMuzfOPhlU3!AM$SnL!Tz1Zf*2w?M;tVA&$exsekzvP847` z;M|w|+n(ad#YeJyf~ann&aBb2r>Cb+Xl6Hhp5nMuNWQ;%b#F$m{@B|MFwttc;*&y@ zo9)$RUMCzOfh5V;5^wI8~my6ASj7+nzI6(sur_BqK z$w}^MwgfO6{h@M8@3O995owCm)v{NeaOO&n*3Hl`wG^K(f_O$%?AIyT3-OM&OPK0- z1tBLUN|^7xm2&B`1mLhr@Dw93UeW}uzs#L*zLKiR>26IUn_P!=KJ51Mn0=Oh)6(Wh zQqqBzh{ZynA-CQitMnUyGX6G73B4W45ABW{S+^O&Iasm~W`+G@cyzrt?jD|EcXx%g zYWtP7ql+qUu4E2=8dvnoXv zbLw+Rr`19E*SriR3UCQx(uBq(7Z3=m+r8R0*U7&UO3&wd`bq<7L)@6AB`V!~Kg(wD zS-py98B%Ds2DEhdX15g$hCwQhNRIeAp!eNy>gD~Jnvt60+xEQ~f5w+o3ylxy9RJW$ zlYWsif2$Fza=5WLjG+28J8pdTJeHSuqyoP*T+{2T__m$q`ToZsc|ECw_)3czadL41 zkrJxx`<<-#$`+s(z-U>VRV!;Wc`KZBKFPuSV6A)DfoQy>dB=pJCTiK_aq@F?9ZQCD zb4iydoKgf3KVjW{zq!prKCI1yiulRWa zMy&%ZGoc`1^??TJ{vt~QSrn4WDq2>cI|n0NDGvC56;yuytwXeQce(VCiz#$e*cMus z1eCq~!Gm0*60u}leHqX*%gU1#0yU7$nWgytH8kPFBHidSiN%K~=Iooh#1YK{hpf*} zNA;0xN|HzYZ07{AqIn$TXvjG@U;P(s(@;>_(ysR(7jM^3r$)7b&rqUBx4T2*Y@yYW z>per&cL(f=k4tZ(Ru89{Rb$USs~11W{NuXd{RBup9;I(NC)RbqLW1~%30Yzblh#_? z&803S83g4c1x~@f7q-d?c2PfF{Eu=SL2ALF5u9O_3qNppqyj{HDkL?k!?sabh9OF|3Z^+Xf0+GDm>x&TxG$y~f230wxC4j{Z>kT#6*$`b#JwvdP4q9M9 zHgs(TnzN;gm*}WG!i5wkAyVXiWh0$&*{h*Sw$4&B3d)H}z z>rHjlZAP7mfm5+On@mChR|-c$pM3XL>cQnaUp`6Ty$XBz9Is{ZW9NlP9>B{hDwlSD zs@3J)Ac5N8Qb&axc9{D60G!dWR?@-7S#XW}A%}W}u9*0CdF{buQg8Y9QvJFxTA;%u zVEQd4dQmne)4$4?)P-s8{}-0`s*`>4x?+Bdwz9I)*u zVw&P#^Z1DIxtBGDcJoO(=mSTh<;eIcXHlj+^2VR1Eqxpz@!Lx{Ow#9^kF%ri&i{0&CxiC&q-|l6a#EpN+`mJ+ruA<4EH^&8 zu(#^h?$`2#IMCAz%g{%t7a$7eKt_i?jJ3_zfSsNX6#B^&u2-*W%!duncI-_@RU!vC zE!csNlBJ2SFb_l?uuSEQ`C5)?`VbWK{TKHB@bi{P9NWj*zs~0G=r!9fi+{%`&HuC^ z6(Tcq0BVpnwpw6aJ(+hC`dkq*x#_B=MHq`AQbZJI;5>-6jXPwIOS+RM^2vh@6f!)XkMS$!(@pQL_?l}8nDMRGAe>a z^3+Pyhtv7vmYSSvd>_0JN6WGsy%ExJbQmPO_FwPh)A`ujye>OUIgHfEYm=ixYBR*q z+f5c|$nzaO&Yh)%a%+vZG&=*Y@OWODe*jq0Vxns?8sfqHD$ z@2kjmaLi~=hMz~?p~ML}^DM3Z5QhL!J+g7n*U`*5y$A@xjh>V8JI32Qj{=-YORMmb z_4>WD{F(?|SkN+kbAgDTb3PjxB-k2K&B~=mQI^m-U@rSyd1(@b4>=oyW^0lOlpj517h%jYF zD%)ndhszjnQ^mEQEmrQA>O#`?zh@D4lAByA1h%x%O*C;@02EV6+k`dVkgqC6zx$E1 zuaJFN{|0+MJSmM@@fb#>ZCa|px~x!-aFxdO3e4Mgdt)RmlWJ;j+)r3kiTr$uFeMeYCTP<67IpHvc{Nsuc4f5Qk@f5d6?17aTK6u* z28-KNF71nWa@4%JK_Wde)+F5(j*n!OS(_$esKHSo^*IFrS^h6HW>{s~msnA#Bpo~LPfACo zqtQy$$BVBBbPN<&4IFuW&p=^w+_I+RuP%V^OdnrcAMsCK?*J6jo-2+ZsaLEFKNt$9 zOw!hmMRj%$Z1hQ|b8ur0BG-yLt#|sU(4DWXgu2=a?<4@RH0oTi zN?s_DeT~;CEe`nb&nc%fs;n#YK-%)$MbUDXL55eq(;ql-P^l^o?IHYur`qameY&d5&p2Z1&;_BmdqwHlRa zyZPi^j6IdJnnBxklg=*opyO1o9PvP6F01L}{5rlEPOa)2IabLBDSbWTgbl*FYt36 z*Xh!v-t6uh1vJvE&n8xdFS?G+RxCH=`4`T631N!7t%|g+q1Jp68QkqgT!U}2DPhe; zL3xYQ5moa2v<$M<-{xFvvlIxGq-O;$4F#RTrfdeEyXq!NL3buC=w@F4hf>V^3zY!x zvB~vG)9!>fX7!Y(qDIJAQ!Cbww!>~7J==+@UPa+CXx;38#6<3?+AYy$ZfAD-vDR_G z?4LB&?FMiRq*3W&;4oOAFnr5L4) z*5@waygV_MH%#3(i|`89YR1vqyxI-LJR`r7TIpWQn>y5kxQbBos2_{wnIfjfnS!-;Sr{j{|Dj-B}V1oW)6q``cCFtGj0H#7*d9cmrBI#iA%;l(xt3 zwSC)?EuBf-JG%@t;bCMO0w0XVkbXpt&rSBlUnXB~TA9xyQNl=jd{gTPStKd9%RZ7t zBKJ61TWc(i34;7fIJE)fuU=!~5IH!=!Qtb3ePzi@JynIAxMU{cxDVg59;C402?5Sb zQXH3-oh*mH_SOv8kK@bYANGomiCT_$I_{*-w{nrXk;(G3(=lR zfRAPf4rB@o!hEjCgn@|euCC9Aa5IIY72TAjAUrG17)}cXj(mBAzFpo^C->eF{xF!= z#kOuf<`Oy@J@WOxp?D#WNXxM zPp!*W3$D??95KN3<_Pg8f3^chv5(3*w-qKW4dw&(D$eoG0_$>LRW^DJ;mnXuGyTU4@J; z(wd%$!pg#5iG5Fy8Odp zJ>6wbB{)*lJNWV1?T4HI2Y&g-it>p5#A|_^;L`Qprj2xO$BdbrUZ;n%=Zm%W@^>OR zd@jfDt}wxyD$yyvq8FVh=l4{9t=PbS2N|q!C!&*pq>egG$8<93B1&Q=`W8g=u!l)X z@yf@)2_)>Fob%#qi8zyJS6p}}a@;Re>oz_{w-Eej^fhK`H>k~az4<|E!14Vdm=&N| z3U)?Gs&N@&NQ}@G+o*Cb(rCiYo1%RSoe;rRdo#4Hp98PVG=?229yDKyhdtwVeq_9G zPzNQ7y3v`!BMFYU`<1(+NMR z-)V=n{1!xVe@e^GqVE>X=c1|&!i{I=sG9(Ap5RD|t<4|DTE1N$i>LE;Cu(@=S}t;v zMHslDGdV^Tk(TA;TY&ILW@Dea3WK;~xNlFD70A=r6(q~}#V%M{ zhfSd>&$@!Je?1v;4({BWzr{bUb(l zMWJ2^t|+FRj9dswM*FTzhPfVtY1>f3j?yf1o77mx@-D*1PfVj67s?!IbH@r;3le?s zC6UwqapT%AbfhmjmQ`Z0z=J@sf6)^CP-A`JpbJ7g*$m~d=!DiQs{Qfq4@KW}i`>@X zaH$jyv-wIRq~9(*N2|tMTwHwq&clAO*2=o*CR+kjsMAnR+)aXBQ4ww(f=;c|SG3gR zo5E=^>UeWYMpr-bYl@I_kJdyD!POHVPZvexr>bf9P8So&LrpqtoV@X&76`!{wNzIMP^~7B9 zWAo2);W%s*>}P4+0wge!*OLC z-%3Dn&8iINBn%u%H#YTIQhjc6P}fZM5z(Bk=D7QcR;IQgczzd~;Iz^DA;}Xhw{Mfw z)02tgX=(0Yv-`rfq#G2s-&h~L3Rn|pwig|0$Rpj+ zpN(3n88r+6LjYe|LxR?U^3nQlpIJ^5F2 z;~u^Zo76y|h#d94ik;~y0x2Ya%j5;I(gAA&NR_3_DZZFXu8S*vSLkl&hWyrAAVH)h zX@;X;W9)sC_V0sA?(Mr1;ikrk7*# zz(EV*`~g(HjBfm}Kv@s-9ZJhAl^k7)T;~Q|g7b9E4ZqKzbFSlFgEh zlMzD0H7FsI%aB)i^f$Bz1%B2E389tL!=}I~>G|^Y>+m@l%$iO>hS`77mP*F-TWbwSu0LW#m(vpP zX8-aa5Y4*cRGd_%-ydk4VPLwqCm8=EB&xQbXL1@Z@#6N_OwE=`L=jHIp~@~E@{8YM zfrB&y!8u3OIo|{bEj--uXEC2%k_qRl#F4{z#_mT>pj^d6@91< zvcxWw62+hg?oPfqSQ%DjbI86&YP`A@kku%s(`j29CjXkqsX%n}7S*7L;_EWHpq${VQyPJ9F*&?S)#lRS@38tcm6$Tc7pAgAU5OC|A>lmAHGsEnEXxr*F}w}#Wbaf0f~sUL z$?6Qy*p2V&&1>fUa;id>GT8+JT8zQk^X}-rcG@xXr0;G)Jp)r2wpN^PoF3jcbWxwa zIrlv8);~g#Tusg4YOWz^Dsz^^CGWV|pPQ)?flH>1T3rhPfyGbrTJl9Rltj+GW$=kD zdE1GC?ek6P)7fSCc#)w($b(Ve77APD0W)1y`N6(CS6??_2*^uD2GW{~oe~U8!oszz zJ%k+s@v@zId|k*Er0pt{1%;t+L6_0FiR}@wardbW zRFB!1*!U(RR#oVjdb^@+IKdUoBf8>6%4aP0)5=U#5Ikn=io78^R*BVsOAvGU*A&!W z7Kmx$R*i!T5d}F1sI>bvr=vD9nth|o!@g=)0 zV7R(_DVeO#NK;*Dxn<_dXH}x_xjydN?BHj6jHo8;ErkSoy~LSA&O<&2ZQMGjzGi>A zkk61QO3KNh=5<&xJza;-&{Ug`46b(gGw3#cxI+k6fYbP$&8?>kzfV}Az0jvL|0Qi< zwx11Hl2-#onoZ&o*?inz9lj*PT{z)GGjJ{H8R^*|@}vBH252vKk~1DGFb&TJq9MDo zj;_b#NUK)xf-RhS*$+6nwkdwPrn%*wjAOfa3W5}NcIHa3fxaYzUCc9t3k57MU*l2w z7kp>BD$SLLvmlE6cxe2fX#!yEeTn1P^lb1}<#DC)XMQ>=hYnl5Ffy%@%lwaPf7KSI zfp#|vYObcuoDz%Vy}AJ-VrvS6df7WQP7&kI+B#h?<1LUA?I~iQyJMHrO7xas5*l`%sVp<&!)Z#d`Wh>C zi#7CU@vV6&TD}^j*K{m8qPE?Bvt%Y9b%BbI+wFNDg}73c6L(A~->>PHLye?q;Re2Y zK^8v@=}cmbmxLRCsO>kzw21-32>L%Q=IZB;C4o&@iDL<@KIYHs$z`-ePAz`rVmL}# z{T6B5;}F+$LKD5e)*gPH#YrA%9up%g{`f;{hJ=iXyL@1UR#gk)Nk971M&-)_!VObF zayC5U*R4sC72gR#SpL~h@0`>Ft|hKNO00g6A@YRes{kb?S|TTClHwFz|$C%45G;z_&*L!RZe7X~RFC~va~ zi{*!nTo->L?u|?t?Ep2rSIQSC5&|zr7M-1jn?KTVP6bb^A{|cC66f#>Bm|=P?_8aK z;kap3IRh~>r+q;ET+CLeR`kaA#_8ms&TJ5{86WUhVD(SjzO>$nU>S_mbq^pCNZpPW z@VMx$PZ>3zgu4+Zgdxyy;8LWfRECJnH#JcSEVt5Ue*pZp&w32zj-yzitn^ySYNypu-zBzee@>&rm6xYb|SlY8@p96_K+JH2if3%K>8aJyc`n_K zF(rXNn8Qela-imV)#>W_VbaouO5=CJ8swT!pA$_LN}+BkRRvT7i4(!yk;wI=uT3{* zD7Qg3!|5#S?d!R~vtcsdm4|4gC<)ux(>%jX+^VY`S}p_mbO*AfTE-Z5RQv5)q`@2{ zED901%e|RHhQcVprFy&H+X_pRI`y`QuhV;sgK?V1#`@=~L5+nTVLyw`;YITrPT0JX zYIJ;5Z!NG4W-k?F_oui~mqY`1;-+p|ZRzjj1puFLiBNp#%nuf1bL9Sys%RJ(9N$V_3l~|jIsltS?rKR>4rgjxh-uf+}@-lt^ z?UkUY9r6b6!xeoG^?5LRVT?7ziA|uU2jt(?AK|S;D_Grg=DDzV4W_%<196j&SbKiS zC>+z1a`+M4`V531rSw|@qE@QUuCN$uQv)peo*L6PRyrYRagFzProKfn9ciyoi_4Gf zk}5~R#Ygu72d! zA)w|!%bVULz?5m`ztJ8O<&1ks%ks$gR^x%61g3*V^f}I_M-gN+g<0c#jQO7CB;ViM zfS_>^1o5=aeCB47lWH}j-ifRNIAp7v4>dwNf6rM)M;l)!()8OGm6<6&gJqZV4U;8k zd}_w=?s)upc7O#RGjC9JyPNevWRt?nbt7E~YW`4`gSBa-c{MwK>x9IlQF&BAYK(Hu zD87K}fb{PMG67hKjR>{4um1IHc?_#)r&6II2{v}_ z%2d+W&{OMQYjl2UX504kp~O57#K_8NcHZugC2cTpm~etfZVPkCY0Bbs-$y>3CrT#9 zqGI=!#M;b}rgLo=)v0%kFOrhIvQkJvEl``&k219xG&hH*f@ReKF$(|afg#`YPJh1E zi5ysPh7+iy@3k1r!VgD-vfUFb zDtj8YXc0y-+o933k;)O3f3JC2#1H_Ki54-&q1@!v%bhNPA+M4e18O`RM1HaXSmiy5 z_lY+WeMScLU%sp0$V!u2AUNhZh?)3XZwR?x=Ug1+(bauun&8T&JSp?kuy5_GSVnCi z#_1A|2|_MxElimXcW%Vk#C#3Mk9~*oQRU{R3(l)hX9C|c!y*GK4sV5h`EWYBqyde0 zbcqk3m~pCFB>stpby%`jL97=LL*+zOrHHV(xoM)H0C(PrhLW{%scP>W=t|{%o3pxJcMCv$d)ZYV^JK1sh+ z)h;Bwi&C4%diqC}2xIHlMv8{LqbsPWSX&Y-iZS)#=&+qdzfyKf;p)+ff|SSNQ#`%# z14!YXZ7*6SOa8=S+G2$m;gcF2pz6K4$7`WiL_kMcKoi~C z6af+>`NL3%X%ittMK>YQ@YE9`aBiz^OmjmO>lR^pvLo1SrT{{MCx{dZZw^WC<$+4^ zqqE}2@kxV5r^qG2A?5nkdaJDGt#Fr>tbPp+C-FefjvMM`->l+jwNiJO%P#O-Y^S z&W0|CI2F=5cPlPdL{m5M*q2S@)x0oGN@|ueNBDxZO(UC2Qg>n5WzrV`-0DX+A5AOO zkW;oBR3iz;OBXR8PUIEQr%qFTzjWT=E<{Zi$ti?-68BdRzx{$;$v^M6YG&$fdm{;5Q@dzfv)k5+h`PsG|2LU3>l7Hba? z^X}ezJPXJ&hypvKbLwz zQI+P43O5=^=;KnaM;Y`*9-Wc2{&NoZESQm61u5EHiN~mOe$0XR%_JLt*gyCh{gM~P z9nA7U{pijvPYJxoa+bHxn?4XcYDMpzquvd<8j|oJl}4s`UhrF|2fHr)jTPaylGGq? zqz)~V{@Osh!#untk^0r{vF?b)=6ZEqY%u4RKj~vQC>_8!PC<))PZwfe7Z}Z&O)CO| zIJ`(~@=(Lh6Au0`#tMFoo89eGJ&;KmsVf0HPFl1C?!Ty?X8)7GBPBI)Ms6leEKIz+ zTNI5*N2L-!$?0DDWCTzmN{Vh+Ki>bUXeeEKa12cWs`XnnpHJR$`BNuQp1ZnrYnIaj zaCli(LpoW(v`{>LSK%P1X1gN~iX@ zX>asJ3<}eKo`rMVKmI3BnDY|Ex8Ua&f4z#6Ss*NV?<4!=IpGyGnb56HZnz+O#-Dzn zD2_Ue6g>&cQ?WR+{v+nSF*TaXMyV;`)%xKrm;S|1DKP2W!@u~J9MoTF%EA{ae^+Q) zf4A!d>)q38YqgvRc%^xN#m)^gx=i+a(DtbprKFiLZ6@C?XA?2IRq-RHKkHPn1}1g~y2#Qd}ruZng&MkFeY^2V6YVV8L| z?B9g<%csvGX^Mkhp}C@B@LQxrj25g2PK<*q_w;D|qT6|KyS3{pE9H}lmDEcs7r0tP zsg|lj1ER1?Y$v+Xyrqh`M?ufAXD7pl;)T`lJBzf5eNI*Zznzf;$<}?1;o$fWLX9_5 z-Q&&dSn|hThYg{n|KU=}mFx~4CtqQnXCX7mmn2@76XE+mRKA7%huD6zwMn3277lBB zGU>0}YJ*$7pf29M#_hMSyU|+7cv6*BculHv_$F_s#}AOn#zYEJGxlH$vs;LKeBwJ$ z+A1PCI@*`xc{e_fG^bt?2athphwot;=@xs>!6mI$S-va)a~7eY zXs_`fLL@TVLI(0WE@@H5z7ZnWFxW&&bp%O^)Tu41w$ts~U3r#Rg>thFXrCT(==a+y zL8_6|*pf1x>*J=ctHd`+UL5|(A26MKU$}9C1yqF^)3OoDsxOs^5Ku)-A6gL=mpGK5 zqeCQTI!PQaMBoz%cKZk7I?-`uVK8CTFC%ANhhLyze>U24^7Qf~+rD(ie$nKK#uhxm zm)8OzJiGGyCX2|`K29f<2|gP(A(X7;AT(?6xu^*Thw}-3FVV-17Oi%}oN*3^g%7SF z9{A1AC`K|uXKh!Br>OA2TLUbV2q4oOsY2V7hUX|h>kc`doQnO$y~Mcrl$pj|FuVOB z@rDX5b-FZUZx;im_@VN`n~VG6ZjKc7Dl1%*lAd*@w0RQd4I4qDtle48*Ku{DnU)Q$ z4v5dPN^kX3`4=^m6FHogonZFyuJ8Nlz1-5J!bm5NHlm1QDmS@OftEQ=&2VpQ?>=Aa z4N9iv87iAnxdBe{mdkc0CgUnMwBrD3rB$;tgQU(Q508l|`RC4N2r~TG3I2#cfj>VO zX^14q;V#YgcJ^@|D&huO|1 zN@}08ScxMDkO0}AOIAE1CPntOrrA;DtaEZR(~+tpgq8bh&u_&)-QE?AoX@ZbD%2RV z%(x76oZHsB({a2-4Uo)R12g^Di;eieXdhGdjUzPo%FH*IXliI(-oc#dSf3rW zRF&Q7n3$c0QInDj*@mW0GFWZc&?#8g?Hxb%}u`h>a zsD)9J0Ud^Pu;NS$P~d1;+`m3x`zEiXG-_I$$xT+n3t8a!BHXt)&W~2L=B`9%`6G|T z@&W|kLdL_!-^+OG59DBVg4eh}^_&B-rH5sGs$rBy%jVz^56;{gbuysibPVn9(!fQ= zLPn4RjvazTjBxewxlFp5!}@g>AD0fog@sB`rQ=>%V)~oK$DE;ka5+r}OqIRbchq)) z1qK6h%) zSlIw2gQoQ_L(`6YVGF(#VBZuaFsR!>cmdQoAQ2rb$j=0PkJrstL!eht0So$-my1!{ zl_!57f1X7TY9wM>kpIz;m-`EGEWO(Cvh8=Yc3c9*{@v10cOxy1P*2lf#+1*wGiCjX zf5_;xN3|I_7hi9WBexEKeA^{6EB$Cki=^A?+sWn+UDrxxy?KsmW9l z-pZwKN&>D|XOvQCzT5i4r?xO*ysr*5kLv$M)I~mUkiEPqRM&%S1n7O%Zs9T=O%D1s z&3UfcT7q>Jww`Y*hHQV@_p=CpfNn!-TVIBzdV4;lA&ndSbLLT2g7Ka61EWKn<`Tit z2+nxABo{4UV>sNaF69I3YGikZWPTo@ysRGqhnHBy4=Y=kDlgIp%)-_MJQKWD#zfKu zdRTl~m@$9sxHQ3V-2qK~7or1@T>q2iyVJ$NW71Ho?goL4f=Ub$o0J6D+sZ@FALB`lQ8qf1-2=P_iAZ>({W zBjvZo=IELp9W(tD%Q@H9b**8+#w`8qm1i4V$7jI}RNbCJCN0DVX1@mRp-wGT~e*3RK!Ta}}i% z<|8HS*W6-Y|b?Fz&-+tt_N(^Wg9G&olQmZ8N%Nn7+T2atmtjE<4 zm>U3#2m2C+224#=b11Vo7sQ8ZJ3%Mhd-VxIhoh?lur+sY2{s5?mWe_T zQS#;k!IuV3!Az1Ie_lS<<6tT74`)@cLwwPO&L1ivK3IM9QOf*#qzdkk-x7np|N0m^IJuuJ_m)>9)gHF3EPZr##;T99(Hqcn}$>SQy?>O66*F z6+))Nu}IQ)2#5YXBkiXB_Kc<t(9m*CKR&a+x~coSoaz{@5Fb+!NtcS;LSzHFNCJ-H;B@l-rp)p>oCW z_=6iiU#Cyh6ACtz6fj$)P7KDa|9z~>8vhXK50nf)I;mkjQV`r$?bo%nQyr8053_v< zstDEE=&_WF7WqUVz;(5WWbbuon3e0Zsi!8B%+~NMtcd(0KCb4P=RX*?n;7L+$N$Od zWQ|+?Z|cXfIOTsVj?w?8{gD12id#y=?7z~H6~_O$7A2|IzrBU8YwrKka!faW?&sFI z;@Q{QP^Mi|bY`DTV)D}2$@htCHF{?J!%aIs%D=}#CF6PXTre1l*jt+yjBKk9t|Jzl%=7W0DQgYO zE`E+%)7agUpPR1bI$?XaO9c%(T>O2^+x6nD#NrQZjY*TU@yiAlUprgRM)Qa=ql?wX zOzZs8Dor7vps&s>3Ms$&})C!qQS+BAa|caMfm>ifv_ikKAI zvisd>J&160g{>N#Kv;7}eReO~M&D^ax=)z)qWyXbANz@&ox5k#I$3YA8&I?FkXl4` zpjDs+FTK=Me>kNX3B}Wb>6gV^4eZlNnn;5He+U<@OWWqdI0N+s3yC|}1Lok?Cwci# zL4Z!I4GeCb27NCyLvMdo zEbMk6DMl#bEub~2@x?~+cd~+|PQK7*&(AqxV6kq7X+w!OEq8sr-tGG$in2;&)0?PHyVya;qif1vtE-6H|Tz!+SyEyOM6PUkF z0GpLosWnDnlH$}sknUt5r5WQy)mG)h#I)%A!GnQo)44qKyE#GeY;M=7&MrOB{K2wq z;k(&lgu)Mlv(JLQM?KF7ItSNj!?CMUZ04PO6f@pKgDE;XyoCyRdbNp_*66K6x>l?A zxhvc@e=Tbjpw@LEcU2+mEozI43@XB^%DDyUA-BYQ zwf49G3OKy^7n>kOE$Fh1MI+j6U^S<-O1qP2?+Z_4^V`fN)Q_5SC#5*WT3EDS0cD$2 zaxx59vXahW2;77?+ka=o_lSu5bqcWdy@}YtzW-IlrsoAh{fPd6zswcD^7eMqRdc0q zon^^72#~xE9U}xYGIKmcVfv5QrQ6{KI86WEOPdBJ&UVTO9V7hsp>QdW)`=!lV%fWRJC3A{hD& zr!~1nWdS9UFjyX@^nstCQjpcVH7O%D7|069G=2`x8BjxW8rHYdyXk|pzTFm%V7KiN z>+FKExm=qa%&;=QdqgyrtYH0Thke1x#R)ERuWb?^+JgFbn4*RnW>qGG!u%s|TZv@?W$S5Z-JJffuG9Db{QZ0p8L11w@$^qzw6W51mzeyomnx*S8-gUw{yj0gq3 z4~}X5qU?QXF2w0Ab;krR6_z?uDel#Plk&?moKTg^3bA^Zd0olU_yBwKOP+Un6r~}5 zbl-`2M|7)%`%bQ5c@UAFFxZ9gI;ydU4Ss4^QR^FB#K03>EIYeYb&m+|X^=|R>CsV` zL3w@tw~73HPc@p%#nSdu-(|Rope- z^8uk$i_ttAPedbU9|)YlASMouNnzZX!$V)v85e9`+bYm==S~a*;&qjuOIGHE2|D{P zmBAyIt6`3>?QMlsuef4VC2oX7ux}h4gtGJKFjH&pT|yfK=1JTvv0)jpP(i-tjS~4G zzWK+}idA+u zMzw!sGeuxu$X)$PHL~Gx?6XM7H~5s_xg(&5Brrn~7Pe*A_IHY0U+gO}h_S)ol%d5m zqi1d)yRv2KlEWj{C+in%S()1n1us6gr@SV=V$^e`$PbGFVpEZ&v$HA@pUwETV<=>d z3Dg*fWMt^< z#Df9<<~go%YfgMm8mbUr}a&m zjG>j2ihj7yP)~cNzE|}}-L|+%5FHf9n6hUtQSoee>bIIX<~L=Pd9+yKZ%HN%LNz;c zTV+36%>2=eV{&?N4gHba*LIkBT{nx^IyhH2i5OB<-yVK8q&BQd3am4Fnb3xKQW*zl zR5R%{-Sixet=3qqJ5(NtPaV$veQU^RH2u*l0T*AqjLiosRoiHo`wCJM`Q=7Ef3tL_ zLgG163jl6MuWcO3H^s`({SoHWp2+K6?zxuRPl-U<&L$!pl;$rZfrqdDzKO!J+Ek2k z!|o;OA%Gs+*TVo1iCQt;>=#4cn~LV|Gw{n0v|{eYk6XT5-Q6pp=7C-sqwri15I4Wb zUSCWXsx~vM7kjFjjCp$X)nj?b+uuK4FF?*GZRF_UiwLb4)Uy>wWCP2N#A{c;NBV~1 zm_2_;MNA0~lC-*uq4vVB3``~AoCihpI@&@*aUvHotlDcLezUeI_t zpUNhD)IFwWD*{NvU!C;a{aHmadeOF{K*b<@*mx2UNrJ68J7Qo)@Si0ae)2jXtrij* z{%fCi-fVV^gULR)S+nP3n8nc~|}Ok)+T$>D-Kn7i*%2$Thfb+}It? zC|2~TNhn2q1@TV5ZWrnlQeZQxXIetluI*Sk0#{7ui9;t&Qtb>PLi;Qt+)vxH*%@OFQQE>x8__pz zb}tVr*F9e*+J~HDPI1|p7Esu7xr#D|M^7#Imu24bRPZ&iz_^Mx z&njAn|2~QM{Y{2=bNr+IjIWnph1tQIaR8|lRM0;lW)hs>8jeGoKCH&7ANcrNmZPGT z6!#`wQ?N&0OR^b-*m60S@esNou5NEhTJe*#FRj?0p5JAi@3pb@{0RA-_+DfXV-NNC}lP;}Iwr~kBRyyE)JNeH=}JAjYXQpL}&6H757@-zBdf6-0lq~o``IJkkGarJfudr|;kG~G>q$agK1SR`A zpV!ye&4QrBI_FoH!q&+f!^z`Zwv$n(_kPkZnQ}jA)T%b9et{)6|ufM66s4?9qklG@&ctyUy^-$mrmHG+qRIgdu_4qzH@e@TwsM z5ZVp0RLkV*f$gCE3g-LbOM9k7*Aa{{C*9WzJR83AD~Z+H-IA^A#HLRyf74@gnVGoB zU-p}RvZ~6|ly@Q2NxPUd4L49ogfEz;bYZee*AQhD9e+Or=||IL;Iit&WZ`i=#OwYd z4XYOr12}{2*_9+#4X2r#!3xAm+N_5P;7RrWW`KgHcBB!^CktE<;BSZlh;;`H`%j<# z^b*IjB=!XS^r<-<4>$)y3!X$VeN&7K-BikrRznZtHfF91y*WL3vfHuyyaPmtkUVQI zSH~Ig9&|t1 zVkS1tyF$O1#v{B`sBlSKbh!o0S9&rW3q)v+q9^dk=SZfwavfe0YrdG8@0#QvwfC_a z;69Y&Ytjl&%lb<7WPLbub;IooqO>c6V)aM;-kBa;KitlRKeoq=W$f!c{wWPCa!>5&dZjbAM z$j9@ErZdu)g&KtEpL`NUoM?JK`{1{W{^2ySxmdO%^-U27DryvBYlUE9<9gQbfxQKf zXr)jI`z=HbES4a@Hs1R{TFf5CE}K8f6R0Jm<$iLMg=Ev#(~o>S?KLLY9PnPFJy75q z#C6e$5|Lzqk4*h?gCm)K3i(Al=R7Gp!s>ne@sseewdwciHo3sm<-emaw@J^j_dyz- zUwUXLziDPtCY@)(ZnE*8^?m%^SiTR4_@SGm)12ZyS@AnlV73?bB=jIT7(jL+M+k?) zz@R(Z31r8>;mu}lR6h37&n5vE96p0sQYb${W9TPDYzeE$QC5u=tWvg!Vp#FC+Dvh; zbZ5U3+DH^`^A|fYD?V_U?hMbzhUt6_rq2&)@`D)mL9_Jg@gJw?DTQ^BF@2J?cx~`A zul?6C4-*{k*TIwbf4X&;N{}(Mam?W60U_-Gh|-7#jk#hdSP`uJo{T0crv+Kw>e|KC z)M269T2z+)?wZ!mZ=TtlGNMpqbG8ZPGTkx!i4pfAsXv6KieTz{Z*&tAX8tf*U%xy- zpnU#JAdD~hF^Q{*v<%zVc<|;k-bzEjJ*LNjacLsA6N75rs91FtZVaFg^tA7#^W+$1 zmvF%VcC0~p!my3rFNMbh;iZrh^TWLhRMrQ8oubxk2bHOs>6fojwyO&_h zZumlfYNVv6Cz@b5YmhZNT5XxKi8pfpgLdzBluMgrGp{pjx1WWtp+^+x+QG7CH^Tp zYo%wL*aJpf`xR=Mlk`H*t-TD)*(l{OJnrbzh1gBU)>X@BjlNKWoWd}EGWCd~iZW~~%7A)Xlh~dK9o^d+Xth~cOnn$d3MVh0nIh*^0^Sv`2BS(1VLAh9S0(4^z4o=;M zn@YcF1DTXJsIJzrsH^u-zZyBpqdCOqk=HoSEo-%xuv>3=AQ7L?a?BoHoN#}C%)F%a z)LlR?JQDx>imi?GS`;2-udk^Za5ku}OQboOBxH*t$r_n;*ZIIFvHE>yX?L2#B_d); zv@XpyKbA8H&GUE95Gt56J!+dWsCrpROHaDV$^N+BIq@d&yxM}JNZWXUd!PF2^$SXF z(_mM|_i9Da;dV6TpXRj*&FmGS9I9e-C%S`fVfoksz1Ejgi0x#f%D49+p6Gr$>`0*smL(sTZo7oq>?a=L+U-L9Yt{Z zcsbLDr5pB#Dqj8;3O<(|hNNoGO3#i@zNwypie2}cl-GFeE&M&drBb(?29a`zFjXI6 zjEh7ZzqU?TKnES0Xo(el)>u3p-=)>4R%Ivsg zEVKf$<*nSWp}09-@8~hxbSU74jH(_2<#c~te-KY>y<$+5nHbA@Er|d^w-kB`V>BgS zKn*R9pAI8Zx7%nKYr*EK`45oaiI%83pDhO;%W~)O)fMz&RWM8@GI&?NPt^6ro;%@g z3W#qI?Q4m8{YL!ilEXS1Mg-!{IcE&vIeP~Hc8-i}&kML7EX;p@V8BwsJwg^jnDO-^{?~APr3>pW2FCbyqU|9~Dro}L zXg+KF<$RH=6u0mD<2Fmej`**~qAXCw>-8Vbp0p66V_f>wfW0zYIrH9Re%2=fY^Bjt zq&y}v)$w;rf-cc)tMc7M1|x-ibz;v*8xmtg=)~D+2b(uO)Odhz`*}xuR?(nuYXChH zd2>wiLEz1J)vK#10Mje35yAe!dKZ%APvac`n@sOK)zQUPC6+ulJlbBl3lz_`T;0c}$7(GV7EK3`X5*Fy--+rbJ}QCha8pUvP_(qo&GpE$T!0nh}FT+wWYOpMF>T3+3R z$3f5#0C?m5to8;KS2K&U`-3Fpb|XQO@|}|L23shc>dq<9RvoUI19Z2on|{ocJ69u;U5Kv*Tddb;XFu}h?yFvA9q;GSe|9SsU$XO^nT{* zLm}=?&L^RkPyt!^&+VecJ0k4{{(jP;bZoXz--S|BoTHepY=Vh~k1-n&#{uo5mLmIJPKOm{L zXsI@Fdk$u>3pzMEb}&DGUEd0g;dAQ=*>?1GWtm>fbHnKiQt_pLwv-Qj*COHY8NxR{ zDZ!qtYlHY;47KH66GGxvrZK@PvgPWt!5qH0ZVwWY58#eab@{&QnG?-CDrmU|0&Ojs zRHhTKi|N|S3}T*r+<-yr0X)H;71d2iZ3wawroWb?4~=7zY`oYWh^C8e>Zt=gC7H&Y#xZdIyzgt41VJo3G>WC7$_Ky;)vC(qbj;-@{gtk?TL)lx_TZglk`kHI8kg&8%x@Zfh*~yHIb}QNTJ>Wl`=UJg?pTvB$FJgTthv=vIm`g$X$a z|KNyIgvf`29`^NFJBUJA9`x4W67lJ1FxFvb{IW@M!l#?5=J zaBk=*l8q&k5q;&Q-gQT)wXNe?-;{a*K*JeNcpyLBaxI?R&|lm<{%HC-2ML;XCmfaA zbHY(pfupkKCNE{1*5wIqWorgXTm!J0oIg7PzX@uw`V?{7jQ z{1E(}G9#x)EQz*ZIngE#NE(MIsd*u^N;T4ns1qRZ-BR&Emm6ykgr=9=0q6#7&pk&MSK z9DbiD^4i2C4P5fWEVuiv|Bi7(w>#zfr)uWW0YMa~+2bYi9(kvp`Jerl+*kRbJKQh}_*2QXZ9fbd+`Jx9&$ey-| zl`WCpWIUCxDEc5s;pzuP8_7oGwdNiuue0NKkoo)=iyZ98qFm5d%;$_jD>qyyocgA zX1F*HBW)6!f4nPB@mB0QfqV4{r~jZ|o;Lc#YaLKuMg>P`j$um>Uy{;wVZd!U)r5&# z!%q+4Ec|vu=GG>EAo+ElR?be8$Rz^Vuo5$0AFgmV<0Chr%UT#a0^tn6SSm7z%Wf%z zfxF2;pc^Dc=w^~MmE2@200x@p|4DaT2mBpR!APR8Tx`G}A(+k_;bCR5O;=oiO!ILy z!ZTa*W@tQ>aizG#7SR*m`HsVX#i`E|>mmpXFCDBjJQT~Cc$^yuUYNFKcbJ;Nm1QkL z*6ZD1#T+kCgiGcwQFz#fk03Pw@kIv25K7ZrW%z*MxfY_rT48M%pt9lQ<a!5 zT```@wrKuL8SQ}Vn4+?NXa(fook`nJIVx>aGOGV3yJogb1WNL9VXD~;k&SoL{SD3v4D59Mt(|p;J%Jta+RRN(All$8NJ&W~*>79mH zBi@(ylssigqMP*lU}g`^^BtNQZaL~WhjVefqeS6~Y9c7m?&x zhPSf-0?TqsR|IALblB#h>_@{qBI`l^$_hh`tDP~wuM=U7h)ZlCJ0mHRUm%pQ&!XKG zgWCIiPPo3f532QI#0$iu{m1HXGI!bt8kZyA3X{VN7A`E>^s7j7qrauv(_%DN33C^@ z?3(Vu4E0%v_yHqOVjzZ5aD60#Vj2IP)fW#}yGDhW`Jr$1mE513FUjvL6b7Q@88;5n z_mcLorU|*e|J|Wgqfgas_05IuNMp1jx>nb$AIiQ}D_Z$UYQdmxxZ%O!cl;G4!tTpv zkotT~E-Rw|PRCYSDC8Q(t+;Z#J$yTesl&0|57zCxRZ9P5<^(_1{`E6~+mV7=bjz0P zDQLO_sa>y509shR+o@|qp_+2eHC~?O3FBFkQBJ`4FbT?5l#77yr>ig1i@Fn+`nV|< zMl`hX6!d92m2W(c{uo46F=ho+<<$0|M5YH;?f+FKc`xGOsz*n<{TvdG5CI-O2-wX( zSPfo?-rpD^Uy@$h86xLAO5E^>+R_OYI#vg?UZK*7*3-MlW0Jh7 zOD8szS9N_{WgbCajzc?+Lkh!7aCG$K*QOVf)pE>H+Ua4~*{+2>C!e3*<*~snOFLRB zX?w}OGj76RU)Jos3cB+kHhbt1E!-$qa=bHEeSG#*r90GRy6GeP`dDB&C2LxQuzc`*3agc`@^2`{K~MFmq0<~Izs}LCIMismbs9DX7n@k31lKMZy3AT zwL;+I#Y$+`s8X9qN^5artfE96k5X!L%1~Ed)$;LPlkP5I79h8rZ5!^l=JJr`c@)a! zg3LOyd#W7CdH&>fZM%OZPs14#U%J`f$anxO7g{;yM9*Q2bW(-tqXwiqXgMQ!8+&04 zk$%`3e9npeWT6-nZ5M76MHQ9MIwUH-?AK#(dGUk(Axx#}<(-*m=;}+Fa#5_7;R|@~ z)O|VXOnP^9R=;_p_2m8{;SscXV4GJ6tv(xUdPL>(d*V@zwp zE9ljps`B0MFZcB&$jJH6_z(KWgCF)#{XcQj)f?``VOCC1j=@~F&KCRF+jzs=EVbFanVKa{<#?(nikh*CBuCfX_;@ zT~n~#6hPJn*L`OKK?oQ?1Hh#*lN0Od_G@nnrShSBM}ko8I!ey6bV<8q6-XdKw_eXY zS8;O*e~?N3?9tE^&Fy1t9ZxUCbIvS7Dj3uMokYmz7qRr~-=0xMe+EGsG3G&iYdfzp zN8uplml)~`^bU7L23*#h8Nf^8=cEc9_^lWCR}?b6>H#Q4vy8OuE`j{a4!?1fyJ9a; z$WYlJWzwTwOr2evwqa1_thg<{aVs74nx~ea?-BI6qM1GYfOgHLQ$yIpekM&GjL26b zAhfL4|3~1%U6onq$g?a^=3b5Ns(;j=dEluJ5CRHUFTQ#r2k!9+3Pf{7@$z%zQraxc zwkuqjP!^Xw%DwhVd(uoStrK|m`*xWV8`M%PO(Z+f_r=2lG=JebIz5)zGccgc%pRKq zNQ$;nPrJC}(L@d3ll0JUd&Xq^tNiZbWrg@dG}V(y?3=}PTM?abi_6c z(HXzO!B7?Lr_r{`e~7AR5tqTwOMd*aGnT{-Hy53+ezzySLqosWVvI0C3b=DWGzNc1 z1ij_uDO#pSe1dR1s0cBDT>${ltp>+<+g1LH@_h|1pQ{+SUM9SAq{gf7H8632&0Ov+ zr?7fm8~0Rx(Sr~l`v~PvHap(@#cF!7hm(ovJu`_E(?jHFb5SaLznPb4^ElRqDSUsK z_i8S4KAcZEF?8Licd;;4V)+jsUFX$mr#G_kb3{cEj*fr=H%d{@Ot-nKcYF9))Qgz$dVXxhStR( zu2pL8tY~F9-!2-^c8u8P8q@MsvkiYNGAP$^ZEGVGO0p=(*SOA-cY3h?JEfR0EzS7R zc&YA$0HU{iuCX)Jbv)1Z4=i}O@|Y^HC995w%W5A@3y_6xAH1|o4ZACbuA94mdvUF` zn#G7q;Yse#(%B|GB;8xa(cb^ zU^L<-@tUB17{n%9yA_F$&M|r%{@@ICOtmw)Msv3oq2%dGW+p7ys}3;4g?QUy6aIt8 z-Op;hKowF2q>*nFVT-KU_*2c?gr(tl1|zB4!2woU?GVHn;X?g(u3%n!3TTmL7m%9H zZR!w+^Xo2%d67=7k!D5b^Zci+JlX7fp{2?QT8ZlQHT?q(R)2D60m_x9hOxp)&8haU zRHs?Y%UgkmQv8A>Ms_J_R0eNl9Ng42|6C+YhrKti?O4}<&UmobuC(VVzaRoGn9>NT zKL72_a7pr5+DD?pyr8AuZM=(7~ zw(che&0?`y+3ho~VDyte(M@I(oL;>conN1lS{+EI57ebCLaCr+S6&~t~nY{ zoHB?6I9A#9hdWudZthDG`cFQJ>%)a?IuhpVH=92HeZ122 z>jnQqKi1{8eWs4(l|JXw`hP^7Wl$Vn(C+^cG`I#2?(Px@?hrh9ki}tfmn68mTX2W4 z$l?TNad%%93A(uN<*mB!y-I}28#70YzbOM zzTQO?zC&?mI{Q}WVUH#sEU_7%38^j88@N(V-dNR-f#%1L)R>b_OiUbH`})0lKZ8OG zb2N;Ak-?MO$AfKl{uw%3P7jS-Qvga=6SL&Y8~99clsiNYT*Z={}uD-o1yP zd&S3prHoepW=SB|K++kEh2j$Ps*Yq*G7_Z>4~epu|I_06zWc`8`vrF~?oXMF{7_{R zD>()ER3$dX{oRSMFUhzb{=OlKV2zTcO3vr|6DC3Twl*O=ifePlW=+-pfdN@#McoET zqjKn!kkIz=cY2Y9kmzjQune0qqS%LFsm_aX{3`wTGo+reHUnbDjC;4wG3Dipy0ZQH7G6YL>vH@Acq{YCiHO86TBs}VjG%%%TFHwZ z)r*isrQ68kH^vskHr`7#)!_#;sv2x55C0 z)L(_KmCIc6RwNn9`7vcQeLlO#fH>1OrLANx6&f{=L4Om}3k&1A1$VuPls)g%>9wX> z(n!=bSw!F55SyyL2VWO4fae-2RPix&WQViCK(_5oaLq762nX6 zFeDOdbm=F_=S&}P0I5!X*Un$K0Q%_B?-JFUjMMZL&3}vF%@}~(_p$55;1g4ZWAByf zC%%d1eW|(Uj(V13~H;23pj*Y<2@qcipnycu7a!9HYcW)Gv!1YAhtK}MekX7xYQ#2B5Z_FmQ4;U06dH-<$;r5!sQssR zwnnc=^Xd<8>f@iGjr&Wf-M9(e7DNqUS3Vz-#$?~01v&FtOIao3x1#U&AsPO5;| zMo*Z7(777j;0&Hg}Vvp6;q?^v8ube8NOq`6;KrE0-;im_)O*zi%EXS)Y7JNzSlJvTVMxB%sb; zrVY>EURDBEW7-Jb&HC2WRP&AjqzdBdO&rK;wur_VX9RI1xXnR8u*R5=!-aCyto1S7}vjqXmyiF)@{6WoZQ zs4cBZ53i6GKDj(Jf^;bUcwdcjYAi{A$o- zk8S;L&pQ-h=L04e2zml_qN93Di(AY%qx5hdcjn5Azym*<;8PxC=7 z3gNy3$IL(?&j3MQ;u`4GHZ8fZdqRLURpQJc9>6ZHtB78T zz$4V`$*{!F0h)eM1ZTFEd~S=5u&dN;rn5{JPgk1OI_yI&x}kAd8CRt(_F5{S7{~D; zd@*k79JT2yWAJb_!_7^jIt*I$ewRucw~CwNMjZ(%KtoJUmi>E9>}62h??~S6sJ!lA zsYSp|{r!s8CxHuQ4Y{drJE$MxL1izW4FjDZA;EGNL@YmGYnol;?UNg@GcJ763+>LO zr%RfH=|ZHJS5@mw1{&_=B?z$T1-MuJEE{EQW{7CMGWDL>fB|T}V_*&(m+zl;-H&a! zPUpQ8mWzgG@&U6uPi8&u)&Oco9i?4lf3Fe8xk$eW2Uf%L-PG6I+FKO8yp&!KFR!BV z5T*z|)TFmcEbIScF742M!G?XK7ABS(s;&U%PCo%_FYAq4!G^Pmj}#Rel^>rC`HNpA zo3Cu;_*%@WWP0NSwm7BGtHlI49W_vs^4?+WV;plG4}!(jxjt{boBp?r89M9&;ItnW zW8}5mbyMeJe@jDj+F^#cz7dn)3f?QyTMq2sC@>AS!Z2|eczNWi5e=G{wI;TmJ++{5 zR7TRku%C_6GMmvh{cSr)y2gd9@hRwydHlq0*LK?xUFtHT+3N<`k&cldb!Tt7Y;1D9 zUiuOnrWD=}o!JWoUY8pZbbD z`Fj;@$(fSBwj6NZEbHVuv0POBp}Q@4nH8Jm5~!@A{hpy_`eihXo;xj~-21U^b8knz z@6O*|$mbG9r<}%SIhunNTwWX&D$jZZ=6Faex-Cq(H~n-H=uU^Mk5KIy=g*%8UT8el zrO5CWyCPBgSQUTIb2$FEnyQ06wzkw7L635}3ic8G#pz^qI%08S%EFvTIDaX4%7iIQ z=~O#c_ciH_=jOC&O7zWjWfI3>g zxH>t0>*s(5d&qhbeiDV>>_`LTHXFl^YB3QD zcx$-GUZ^)&>n|Ko272hJ6;?sG@Xiil6i8=J3z${Uvam}v?!U@SRHZIvj#-crcLGJW#LZfAOY z`I|zERZbtKwDnc-d=xq^v%g=&soL{~1Q)pf06CFwj#R_Bl~dwlLj|>FF5TSau%oog zWe=0C@0?uxx+n#7^aHIY#oBHTRMX8YS}9o4mulq)HSYJA6c7Dxh|aCU59Z6Lf*)>* z*YD>QW(-w+Nbrrvl|;n1b&_Xj+(_pu}n>I{x<_&vmErPr;d zzaWt}-o4)|F+1c*soF?86Nd~D^DZvw4RQs|l+mc)Y|WBnACGP=U1+!;t>@$BV*+-U zV$BubZ~6;l;`mu^?2$l)Spthk4a0bRW~Fu<<;3#2=t^zE}Tb!RmXc z%+Df7|C(towuk`YcQa<_3)M<%Rz8%dtF3vz!`30V2d_&zQKu2jNV2>3{e>o^ zddESoN>zLoo!YVAiuS`UkM<8W9nsnCOG7Y^?V^iKmz^E{ys$8(S?RP!$;L{PxMPyp zoqxwMRo-fcZ=Y?c(+EeCpKC_L{b%X=Ot5lWe_zqvsQ-`7!{QXX;>HZAa?uVF|0w8k zU$r+TMigmU`jo<&WxRZPx>17hZ#law;Ncv0Tthd2!h1N&adotqe=05K`Y%!SQEgi*Gb^Y~^88saEbx<&@{T{96G_)4#bA6By0i zM~W0dU{XiPNbaUv60VXSj~%^-;}(DKKTM#@`B8C_G9aT%Y?(OY z8-D=KXTPAaT{twOc_$~}{xKFqRoLe+3vYscvvPsSIOShS)Xx41vwye-nju@BAY+Z4 z_TSZYRc2x!?MRapJ_N|eVbopo6exJl`kYYpWD!DXG)(O#5Ek{8ygq;dd^~D8#K6_A z!z^vy)vS`m6C(ZYAJ5s{yHkhfUjryR{VQJ=*zeNN+_0EdIqqC>HSz?YC0jUO>OaY^ z@c*0al~rz~Jp3~Fg-VLk5dgPp{~6Ib*#TT+X|Nx{-YW|~%n)(J@JjQvemGR~I9*I5H}Hql8BB;TVHVI1H{;`t=f`@=sL^nIo>7^pV~E5HEOvEv59`q&nO0 zX?e24TbQLUF|S6AongJM5RQhXJ2J}Y$#Y()sLa5SZ!!p$ty#Q06mwTB5vt{f=L`MB z8?;nH4*XKnW)tmU`EQQ1MYNkWdQ!~H7n+naJf9b78e5>u@0Ir+0X8!aBC^#6O8C>9 zMj;1LagGo}>QLQCN@)f{9hMV1m5MRXi@w)Z*RjNR2lLg=e9dov5d5eE|I1HG0pSD@ zI|{4Mis+=?`+O#KmNCs#)EdHf_YrwcH=;S7A_!wc-G{<04z;QIKUmk`>~Tj?y-Il2 zIEHVZxzc$H(AG9@-))}Z+N${WhfwDVZ);|52iv(_tYTp-TkS?el5I)cV?=VTmpmJx zc};9T+(MV%(*O zpMTtwam*B3*uuUE@VNu^lVC@l%ycl_3y1Ki6&*g zo@V)rfh6d8y3h?>6!bpUJsusN&ts%Yies`$tIayh|vwi(0Q z3#+EmOoXJna$7kB?O^#&RyP3yj~=>kORxAWtKI`pFZP4|TL~Ick3}tIXDxXW*#k%~ z0F%Wj1)I`)NcYIh;?#=FUS}LTBFAnl2mSaB zD0f|{D6ieSe(S;uW4`%N6t#;^$hD{7Vh!le84+HliwNeDrW3y%4fn(Z!J+CXgk_o? zlEgd@LRt=AIB7iDp${LT72+w24mt1_*9txF9oE{fBgjiGK%NWcJ0a()ruDP~yh6!! z-z8@VpA$q{{UMq=?;00RrFR&JOm2$Zt>kMrqkh}G!A@gejh}{mfyk{7Z=FcpSJJn7 z?Vu7l+U3Z==(u93^29lcu~jA~e5hs{jj42Vx(0KDi9?8IyEQ6pD5}L;T*E|f)n>r^ z=3)M#NwK_T3EfA;yH_)bU=wVR+zCLw*$RWK%!J`&$M}^`@`^E z*LnHJ5?Js0Jc$JLNQq8Hhs1c|yH~!!fS8D|D058? z-f~~^aiPZEn<7cZlxUE9p5E0U#sjl8X0Z9qH&7*+_wIPBNXh&kLHI%iP1+qrDO zd5zd)CY*C^ryPIKeql_Y5@U_nPog)rTYZ{L2wuGRZrg^Ph7D|Ro%;lYObd)@R z&*9hvgtFV{?#MASoOBtH0f9OE;T#tRpHj<69*%3QaEKQ$<*n) zotS|OBWhvanG5r#^2tY?gsUzug9_&;%*btUp4`=X8rhz|m+ll2I~-a`{(8 zf>2Iq`5)@OUdyZ+r8-rJG63n6SkD#|e`6m-&BqY+xQ`9;xkT0l`u6_FG)>wu6bOBY zjRINRSbA=ZE7t#a#}!}x#c5+0Grw0G*F!jZcu{fU(B^9i9>4u!sV1z_@*3}U>OhU? zj7#mMn)+mAK$&17o4AVUb#fOS7L?;bfjAIQakj5N14t5lj068N7>;f_6l}z>QFUvs zz2JH}cFGhyEvL8}gq{qxzAf|Q{IxoiAzm)hN~UhL`J|>z>XIO=yvOTz;mmW`8~QPg zUh$^Qs^QEa_#8`$50co%-y0Z$E(%nP`o0-gQ*GLww`6p3pevdUa^%shE@A$fsgzo& z1rB^ynLZY3vUHN-rA2$JZ0Sxzd3rO*U^v}G>!0?FnSMpwOCD(vg#-jCnrl>IgdT`` z;47kW9;Bb)(OMl7r#c3=Y-07x^rL12gZkJuZRn_^v`csJ9ReYixZ*5|E7GtsOnW@| z%?*0=xds|Hyx$-MSTCRP{O0m*qR4+2cy=v^ZWFyDnv!2fJsNzha}d9l)jjI<Dx-CtSd0|qj9IVA|2+}n593n zk7tFpGwIgYs6QOGxDkI%k64xnuZ-%0DzF0m}?I^7UepGA7*H_d#a>R2O z#))L!oLcVz+8d`jRpmEHbQt+25mvcOQv%slu)&kpt}>3bR|IaybFyYJ09&xf^!;Tu zWqNsm!)4bM$vJMP9ieubPPO4riVs9AmtrD+^PB}okVTm5B48DO#Z0)=@BONcA4kd( zdtJ}J^?(vuGYqrp%~k{+fs*%Fki#=Y+%u+96@xGKF4)Kzk4dM(P<=lcWY!KpAyW4n zj#9o3)ab2|lgD11u8kE=>9k$mHns)GX=R}5YbIhtDL44o>%Q)mz??93h%T9(;jB-5 zlb7kyQAsc7zZb&ttPPbtmfSBrd^+Yh6+s4BdED@QU0!>U_EVuqB9;$h-1K)XUfkXg`7W0BZC=|fvy%2 zm{t0y-|7RDc2`4oInq;|5<-cYbj2`Hu#I)njMu=as2V>k0bjoTO#ijWHd5)IxDQQL z(#{LI*Qhu=cq%!?vv{Cs_)HNd<)P{8#Rc`1|Hl(V`CHXT*=HWLzpQuK_AC?}uNa z@p&&&GNXf(B!M)KXX(#L-I$>1q2IHtu+w!}ffohQbI--<3r=T$1j#?oe<9)1xqrWy zz6H(g%=!j8h~tI@wXwZ#i5xpRkWF(3(fVWSvQzav{lv6gY(w5hkF^RM@;7e{Q);?M zZguj3W!NgGO7BBuj*tbW@A1x#Q)WyGmF7#`Z5DGjs$NmTzNoh1$Et`mz4G}=cCx(p znjOw+0JrpVQ4FWmI5kz)^NtZAagOXLnOIuJeT+iuGTk|SGr%l%-xO+DBD1mxp3F_w zA4`(`GQJYoBLP0!wG>#H$=0hHY^>sh;+|{`lCr?@w{gO9Y%7{;zS@WXkqL zZ|-CmBJXlnJg(yFLV>O(ZmF2Blp!i_HEuUJ+=hAZ+5HtgJOMBRKQtb$ghRO{cgGHB zo4FJC{le0Lcu8=z+&7%YQQnG@1!@gQ#a>82TPzNxMd~6m zzV_1qo3RRDrhWfKE)mkju05VgfyK?o2dYCTt#SEMK30Sew=KtI0m@xy`|F2@dGr468;wACN{-X|)hM zrOhHO@vNUOtNCpB?%K=Q#RVsB?r#o~@jXbN!dG>L{e6JW8adlXtrFVK{05;&{AHdF zbom3svk6bmQ^o`P%2b;yuiUfyJ89QTUmkJ7ij2Xra342j36ECs-w_rDN^{IrPia(z zfbp!2S5p6bz;F~tk4l={?6*f9Ze%`txl0k)@T>#FtiZ{(wCVPZajiAwUi-K04*UH!S_LkiyH}K z16`JyHDf~F#SBx+G7AjJhjv2MOA)x)r&}-%6cU0LetWC6<7?X69~kd_L<(Ktv=(;y zFi$$eQaxK#oWTCAv@Cu5H0NS1Bm?Zb5K->JrEZv)z?q0Rv}EaB5}`<;Dc<;sO#S8KbZofvr=_cIbNGR?1k-dJDg|iK)MSA#d0OQ znbt!|gT_!TFplkx`LdL60+Kmzr$pC7_b7tUN2mc63(K2Ep|%thS`oUea2K?Xvat(c znOR6Yvqxp4+LLrSKNp%|J=-N8i|=EKiYn3G(2~c2v`f|FTCRD1_8t!FI>+Kkl(Q*i zz7VXI=71xPG~0US4xIU(KuFXu?j$^@Y{6VK)SjC$^0}HcCQPqJp{`_~e&@fs^?AMF zTE1x#lfk&|G&yeiGkQZYOFR!``4ma(0nn~T-AtX1K`OngAG|!JOK%h4^x1z*aC8AK zHb=yoO>03KwLkH*4jevnJ$LPgE$n`Zj)sOd67UG?3<~W4yCzvsYd`cS6D2ajew&e^z#We7`|TK}3kS}fd0VS$x6bEfmAbDP62V*_gER_~ zI}XXw;5;z{Q5!b?s^7Y4037%95|dTHk@lXWN9ZboD4wHwNI5$sxyWP*EBRt!n23^k zBnFzTS$zTgw23~B1B2d`94U>q)TN7-pzrF6TPD{*^Fu;h55@qL-KZJ{LqS#k3YL@! zKtf(*q^Wk<&rbmxuQZCyU&c;PZ$4Dy?U@CXfp@B&P1eiU)^atXO%9iwL z+?DNCsp!8g?i7HeeMK?rzLwzR<`Enfy%FIY%?)6W)LP*=TwIusJA;@zZg1VDy# zG#xTr85NVxfxSeiqEBr^X~Afai|mV)fxsQG@G%2f+-8yHp{Cf9U^1mLbgAJkIiF&& z*>R+GailI_^$}&?dA*DtFf+tkWUtd}aBA+}Bq31S(?0T=#m;PUZNO9J@WUEOrq3<^ zYc;ewu0w))G;`vY)8cGwlSSuO=L)&KNgwvBawlVXsnV)_AIq{zCa@tX*Fj#vI~gRw zHT4)X#s?JTnyLeI<#VdGW)4a|rkj^FN*Rqln+k@Kx)%;UptHtPiT$=2Sh;KKSmEK= zrADhz*5C-Q>)a$Jt1}MA`FwH5+(&9+n7cD%e|dBC(1fd~McLt}76;kuqZli%^&9(SCiv;j4Y&x;z-eOrJ#Jz|qh3|xm^ z!N{UMsmHMgU3P-0N5k;K=udOVrMhkBv0Xd@pPR1pVd-V_9sl6;!s?}CjOLl374q?Q zYf=_n_Cjqg7_Xljmj9)23N-3)vF>4UQ6Vs}d&3=()1X%r0Vg+A%^N*bP_HC_&@|&8 zg7ZaN*~*^;6$-ZVN0fcs2uN{DFfxOn8?+qjZIjDKU?H!QW*UW*s50-a?ljsYq;QOI zWqO$aUJY?jY0#y7VGwcM#q^PY_61Asjep*Z!0PB6XDtkKRBM9u#z1%>`?NRvYkMZuQk&I`t z`w1h~@|kDDw-`7PP0+3^^*q0trsc&=*e^CO^UU zn!7kUlMq=Jnx~nX_8hz}=t3VO&7|RmQVe4djscrG7O5`FWu*&@!t#G0VaVfmJt7^g zD^f4&7xD(fI@%kAmXj<)97cfA0;rfTQDFp@89gEGgJBpSiS1XI=SH3r!AM?c8=(?Q z9pCHK#HZrEgDaikEx!9dXLu7|-A@HGfG*VAkN096R|zqesfD7^ZiIGWd5@r7)7~)M z1q=GA=ULyvdBp-L3p;dDIi#5hfrp}&C3?D=(XesF@tN1j!4G^r9|2rImwbuE*<}y? z6t9JJFA>Tztg~Tl5)#VFPIj9w&M3Epo4FaZS!&01;I0JLYvnCt1TMrx{nXL$*;G(a z+8IkFGirZKI6wGi$Vt^5Ja6Zh4Q1%}F6EOPQOKvPtwenF=}rhp$|nLq3kYEFNTty` z!+WewN(t&gH)}}wUHt7E5|H^TXr%!CA_!0CHA4~fr8$EUoP^-$J^0tu7IX~dBTPl` zTh=FVgFsbaaE~PPxBu>wm%n;J;YD|h19$o+-BMT3eE^2<{Ymd5Ow{3*ks~!?NCT-g z>i^nE_DAjjOgnHm%l|V3E|2yQ!|O==KYPKS+u|eqUrR-xE_YVEzKj2Vp4QSU9ufB` z{T=2L2;~JK+-Oik+EY~cf9;~~q7123uBdNd9aB$F55Uu9X5)rLJ*etZAQp&AFVl*} zNW8x&_r;%;&miYy-^I;qXnb7Y%#teZ>Fi4t|K(K=EnW=}y=w8hv#VTOOU?h@x9|dN zcAremsu^R54}^Qfi~B!87%@n1(6T4Op_Wf2UlvGmTERgKpXF;>@l_ zyHXFbyMQy6z!FrEZkQBe8S(x1VOXSpt80i~7&K}J<}Zcc9eHgj^-qSMr<$+z-{@-z z!?ka69ZakL|D*Np8>m@HQ7B3es@RO&LK#llW-ENS8FXrUFRBuS$S7Pq+=kZI-w6^k z(re3FG<^pRf3A5i5uo;~9LjYYkR?Ru{0vTB;4-Yw97$4t8o$c!$5hW2eJd8f5Pq`9d+g2Y8L z4>j|muZX>04bM+;^)qVojBVPfbkf;2KZ96n8?R=s}r}>aP(>fgU6@3!C z)gE!m%5a>OQz=wYGCsD)O3`rxaDfwI+F!g}P@am>oR2iJyFGoQuS>Eh!nH~$6aNqd zptny`x%2VG$>8AC2U*d3uy~Ps{JE-f;&WI_Q@1|r8QAPG$>8jL zNiNdlpwJDea&f=hhS$I56-9EFO|MG=FXO7kZwVMX)hg&d=J1i5isfO|tWMXeqI6}n zhx-v@Id6>w5McoO7?VAt`H*-Ez1&FW?I(W)3%Yn}%Krb)pK53U``+|Rlxt@XZZLgf z)op$vf4c;$_~Bq~Om2p#7qUJuaPqh8zKizzDuUg5@|BKkg;?7Cy<2O@`kKnKCn?o@ zot(hr$GsY%i10GTGH`YOZaNvU{RK|nD{b>N{Q{{q8?##N2rkN-b$hJ8&__#S%T-%i zDR5{b>RXozSWxcrP+WkO(e^9xQ_O*)!oXu!4&Uh44S1c<~~+-$L^Jh<~s zx=6}ZX5gz9*G(nWG5U||6+O7z9hu}@GpU67>)VKYr^&x!9aj%-$JKR49kueXhNerm z5FABK=x%=1_+Rs}KVGMN5vH#QsS)e!Eeze{wzb4g3)ca-Q(&i^1<8yO@pFsZPgiS@ z+&HbNyhVQ05BcHc-mjSaH!L=rNw=N*jhY;K3X5FsUTh0EfN(pDPJpsS^|_5+K}kjP z#+R3rd>|3*v>7T#HaggJ6zS&@Uqt+i+xPBkmyz(=lV;-RW_kzGhn;O$DA+{VTRUg! zR+lH}YxvHgG1|!En`PQK*W*aa&gwiHOd)zP>)szX7?ixRWCiek1{>~()Hn{x7Q?)T z({p+Z4e+-H1YJE?&F!UtB$w2%_J4oP3zS6Cd(Nf=TA5aj2%|-n)a5_6L?p4gV?-aU zNC1V?sOzlOffd>{J7cf0O!9hDhF&|hetvslQY$pGn?~-nOQ2Nd7zbTeptVYnA5O=_ zcbVusyL^B7c1_BD`mB%)bpn1YUWRA~V|BbsA{UeT&SwkFs^#M1Sv&qn(+W78&jPo? zWr2aGS=kVeCEomc25F9s;7gK2t~zL`*D1x#Zi zx9zF9#q+$Qf3A4gyE&X_QVtEcd9PAZ%8F=!WtqiKL?h(_NTC@xh_DoWZu*Ez^hEZ3 z{A%P%y*eo)OB$*LN14#$ifPiO9dfiNob*+?$de%Pv#qVa(SLAu`p>k;(p^M#(9lKb z@yHluI*@Y62X+q??}CfSKf5SL_+Zai3b>wJ@Y9e#RhWthnh|l@2|CDZ|EH&d-09%1 z_rKqr#(l8OR9f}&_uX(GP?F8VJJk+Q$r3?NO?zZY&A0dVn!nhaMHQ7duvuN*pfY7{Sr^ z&?sfC^c4EZYs$dK{Y2pB088Ssvb1?&X5&D}R(D%QUAOUIn8jqdb`^#T_!Q@B2aUcz zn^=o~_;0+_l>0|Lr{rdLOtIkG2B#AZwY;_Qyllmor+>UNe*Lc3YqS^I6>5F1B$=X) zERXSGpHwG|2w1d2?Fe}rtmgJ}yie7^lWndp_rzm{pg7w2n7Inw_ce;TLK`vuTAw6z z`9EUZ(6g|d5yR0ULu6#&2eMp~(!Ji4L>w%g-QuA#GI*>k`ykiqSzFV zhA~U(K?mvw!BQsffp23%qBewHRfQK_c*OY%&ff3U^TN;h=&oX4Xkc^!^8Qk94KxJY zUAcyCi+>yo2O^FC&Xo8TE?6b$?*A(QzDjK|oSSp?8anM<5UIu$RE$z5Au(^t=pR@6 zQsmLEVU2rfm17h`H#lJ4Z0F1;!u*`bx=s_7?fc!1ac>Z82A|UGAM9ZMY))m($cFYx z_VC6BB#On6J1D&T!J$h3p_a4RjLF;#9zT+4n`Arc`&-j0)Y`_Gn8;1X&`(Qt?r4j@ z2>t$dxm+uxQLdPiTDMrQXb58SmxhH3jUoH*LIg|j|9GSly&=;c^ZKpB!^r69=zz$m zkw?iKoSm||wXM6*Dlr0Nen<-4NC;DQRO}PKH1lY!++hG@U|FGyjf6Q#}(_1M|XIQ0|&?1%FZKnePVNYn55{pKJ@?7O_gm)*B)uZus-X-vE z*Eb`LAaxGtlsLeWP~VBOG)VOEb{VGXMh{d+lr7e?6cj)<-8vVaq7cucPw$4BP{~ez zKYRI>c~g>3#J`dZq#|6Br)YT8>C!*gA{>D#K_@%K`(Iy}$gEK>%6wv7cSkZzI0CFm zxC3G_^lk5kq;+53uraV_Mx}fjUcRclex&-#f)NsJs*4W8`1E3m15J`30O3*f)}9;* zc^~jutL5+LrjWJHJT5I{_Aa->Yz)1%(WQ~KiWO7+`NUo^T}6=x z)c8F8F>2h~c-RJRZugVjnRe-4E))k)2sOI_-nfj#v?!-P2qBpMWwp4~((wSd>d8Nfu z^8ARj#H(?m7T%Jup+|cPk<MK@Fi11g)K(-VPyno+W1GjdOuiI(DP&V`5#K+- zON-7{^a(VgxVrh05P>)hMM}zDQpMZ(-p{cKY0DbK`(m>+sLfZA&GKTX|s5A0k53$@vtc zt~#-W6U@E}iBr6jBSJ9ey+@&pzF`BPE-7zzpJN**BmBQbg4=(N3K$k=amnv3732M% z;wMgE{vo1=n$KgmPiSm3lfae6pR|kg`>_H{p6m{1x|QXTreqseWDewPS_ssO96MAjthQ>r(w0hP6zlD6NB8k5M=EH+Jwn zm$fW<)7fA?n=4S&@>OaATT606PBb&z6dxLta_8q~tMB#S zbVY}Yn;_^cdt>fEFpjB}2QHqE@shM3v_(WO+xbaIZsChoQh)N$Bv*H+addlox~F5; zC+<}2!SYp%lZAYg*O_e~mtBjb`?%$KkyDtfhByD&d;R6LkLsk2Rs~5qpIi=xue(St z9^*~49FgcMF&5)(f^l^=cM?V(BHMNG>fk@eEG)$MpHeSOl0sK)l?&DAVsBqdamQ{0TLgVX zm-46qW{VZ#KKtYLz$F*`32+C#r*3--mwT1|?jL~H55+G(n*6LK&zVZU>04Y{d`c?c zD(lbikTF_*)wT*OrN49zT6> z7$sKWnZ1_?bW+~Q*SNvqqU!bL;LllNVYlnj;R_-$BjfT*GZ*AW(0$ws`_XipuB_%` zsV1rK#-P_hsGRo|O~|!hd_uW93d9P&s~qjlD{*R-;HsB^SwDaVw=~BZFM}4f~?hgOt$BW zQcN6_^R7OVYh$Cg`d%Jl+CX=@SEiEJ_;Z5FYe;LjziBhpy62*ayw!29k4FE5xxU`Q z-2SGNWMqzV9%5KXgQ-+ZyRlB?mB$;<`+fnqG8jgy2g&{X<4n&%mdZ6s*#1uf>8OmB~7BarXUP68BU-tJf($A-?q@EwIb3Rm>-8^}*MNrH&eb zt^vkAhhlp9&NYF1=|g#}kI@a{$^VY)T(-imm_O`|Z*Nt6Q%WBxXjEC-Kzz=hG=hw~ zr3-uZ{oGi$1KCe}x2jv4Jk2%q-qw%kkc=B6lL&F#r;Wf0ihu}W>pvA{@ZH!iIIi`6 zR`x{)_;ez{Z)!u0)HY*X*8hENcNFlQBUcKJZ`=0qVw4`7FnjE=xU*!HO=y4Tmp0a4 zpzT*_IfLtT4GsR4843*O4{^a??f{?|PON{rTBH6YD?GBrKBDrZRXT1U*<~JT(#5~Z zjUfA_wND#c6^GB-z4zTn;NpGjxkAcM3a=bUzJa#uY-<0>h}a zdF9K_WcBy^e})8=n(s-P$h`tssp7L4XMD&vkLl6e8zRup*~me}1M=D?wN9oZ^>xV(wl z&+;x~Uo);YkUi^i;^hY&9E`-G`>gSq?j;3aB*vT16c$z-)}s~K1ndR`*2}vjfwA0B zh6a}-PpOWm2>W?%zcu;e4stb>16mAQ&{oyr*J4)^r`n9ZQZn^rurEiI;97}7YVWY; zOa`mroz0WjL|#YlHZ6EqpQR4;H0dhL@Uvhs4;7bP^O^Pjg*f6w0H!P*K4$BdhmqCK@@occ)t<1a<_9}V)vbGDwbhO!X1Defb zB?Apnb0wuRT~}fvZDDA$MD-Sn930})T72zf4P7rG{DxS6U{lPR`%nK#5M!?DjnV3q zvQ?Yhu`_ZQG8v0~z|{jc>=eFI%u~Zc9%CqYf2taKoy(-hK9TH_#p;QPb)@uV5slpy zzwwFI8SwpsZEqt5?NuBjf28#pS-N;0%$%*?;~YLAyj=EtWNr`48hxmVXVR+pM7$U{ zJ~uBP;iWJdHf7!?GsDb_or?DFoF? z768nAZ*9--D(W`7eM$DVWK|)>{+yjQwmp6M=r3x|VO=Nswep)4-YJFEScvWMQfv5i z8P(TXZAlvSpvee*do*>NMQ46I>@vgSRzN=#VztL9u2>49Kj$v4R>{^EIaOX^Gmt&` zE}+^sj+xwrbM;X zChQ|i%5Vj_3*xC_%&0XlH`@#MBsVsv!Zb)182ogH7;^MWjpwBZrL5FxZsBSDVCF>7 zotqomdxL_v1%;FtdO2d2bwfo{x_9y&h86J>qCRbcgMu%+`w`zhv?}q8gcsiUXds{s ziBxXhP=dTj19%8Guk5;DoJkX@S>;mj&*ulNu`?_$^G`apBN(JY3Am>2*81@esGrM2 zu*sL2^I~9z8WQJB*KL6x;%Y~#s1BW*W9%jh+et`x9Jnet0;R$F;SOa@$=qJJo`J#% zva8@fh&xB4kOHNmP>t9T7d6wIu1;S~kupII&Qq>ZWnSHI%Obsf7O@SU>`XF_2-=SC z?&+mD9<_h}VgWubG@_>`X~HGrUX?Ol7SqL79ZcZ@jp2rs7#IX`eETuW=E{z{2_@^%t% zKIfr*w3MGSxtCn^PoBVWE%{>b+MT??w0y=;yJ{*{O7(H3&e1kZuyXu!wZpv~SD!%W zl-t&SWAa^AOU>2<9LBgobuoNr3$X?;Q1`645nejZSAc%hDi#i?th&o@iDY| zgVZ=$nn{ruwr^hnSfhqR=A%&hOx2vu2d_qx=O+&3WOfw%VB<|Jvx6-8D~dU)qixQQ zpID5z8TV%_he-{tC>2_tHt6IAQPYusBH3|!Z+#MfE~eKq)ZSOhN#h9xL9@GrPW;?| z8+l?%S1x{{){_nkn9B?($_5?#x3~_bM;s-=GX-K~80m36phAGkt77fdH|~|Y>U}$@ z-V6(*jilu6zOS1?%aKCk5z1h@)SX0Adf(e)sqL8FWijCqMlCSYYmC!iV&vU+UF4AH zV<{J`tZL+G1TKB=J);Wo*QZgTJ66Y$k(BvA`~U zo8=nb`O%1|{>g;JlJh&%#j*SHB)ze2Avu@`l~%>5{FOsadVwk_E)7xpz~}93_QgYq z7OLs?@Jo29pA1E=TJ-j+&3q7(M`zvFiXQoqZG&`)_`St}XaL!@2o{a$7@k3lINSSYT$VXfl>rVaEm}Q3>F_xE zZ^9S();;)%C@H6&n|KYO&2LV%;T~F2ok{&&peD_i)Un}zoGetDYki^R-n}n9KRL&& zvd{I-nf}USzRhTIrQ#O!NGeJGmFYh=-JD50S5;M+)| z$T$jXyQu7j_27h`KcB;YlY$t4-P55K5t1pP;f@3aa1_4_`+OF4Ko-dJJEp+;%QDzu z$CsiJ;v%R1&1>Mxbs@>X6FWnEhGe57QdOD%IDmR1&i@f9!1|;_aq*|6?+ZmNV;;5M z;mG@s&o)aMf(< zXrgxQCn1CY3GN!)-95NN26xwB!5tFZ-5DS-XmEE3FzDd!gS!qo=*PRh^`3M3U;pdw z>RM}8)xNGf_cPprK$Cf;>~Tq^167l%oPKAQs5#&NII1PG!*72!pl;zn`I&jamgV_j zBH>nrT6OdC%>90^R7LCZaU`vkd4+A|98oo%%k;r&vy}w*(GF*ypR<)T@7&Y+Urqeb z)mcXl~Leo!URdy2qA_xr6u+$;`erp#_0gdNd{E6#MCH%FN(W_6o6yCgz<7S0=$t zk{qSGH>n8a7*QGx#fVg2dofWw3JMy9fk_hnjwq)2E6|G3;g0!h|}4za)epeeptlj%}MjgQeT{EU1`^xnhAeYZ0BO>5$_+YjhR^6IZ`?&aXD zP&*yrQ{t#=GTABa+#Lp1eS7;Yj`;LkOsX*0;YFx$hi@vX=~mYJ4vsd&ggGerpf6LV zv+hpf`xhy?7C>VQHfq|Z#Ps)s=L9z=yz!D}9M#9xID{7hm@6e%+78?|E{};ICAy;$ z(Y^}vOa3MO)=XgODri}dA6tJlmEDdzyohTx|7KOS?oR%TQ$VM)~osWbWbMyr6Q3pAzRsi|aO z*?VLZFOjsFDFOM2d-3bDS>O+UZBE|_Q54i17mu6f)iIse0>?`N_5FhHPvTa2O(r*= zENrS-y}TlcOaU%U`~l{}OAo!`nSdR6o(-{^HQdR+`zL+~KaL z&N;Nt7M||lhsi)z&@x!PRBJ4r_NCU)Rm@X5$O3o1l1?RdczMK8c}mU6pDWN&a3ZW;dv)^5uNVbq)_UQ`qvv6{5Mvq4 zz?`emTG}G_7rO`)yH}`T5#l6@!cY3q8LwZ3H0yjZ&NpNm-)nU}UdEgjdR%{G!S_%p zw4OlIC|i%eg{Vw+{raA|^{%z0tpkT$WxT3)|C8z7iHrkaNns!V+vyLuK&!u4*e|7) z1K`kJ4vLefb)wT3eg&un$2QA|QS#Pr97dy$-G0)C+M>iuBPoO14=j|eqqBxn+@%T8 z5uaFgnJjj~myS=Zm3r97YJ=tCxrU9D)8gxyx@f3nm0?0Mn`y0Imx4VxjBymqvsT^g zWLc|G_8e`5*IJ77Z3tN#OkzNz@0yxJsJ#yP6XH< zI6&6qg|?4bI+WWCfNo)=uFQe$eGXxf#&~rK`4%e%*}FE&)U{W7HE!8{FyqU=1&HLm zylT<=EUbR*h!2(+UD{DM&Ek%!)PCQ8>bRIp3q>#vLBEiZFNU@I0y@@`Qqr2}SK$GD zM0IqzRxb;ZL+UN>`N)xxvzr`7-L5uPXE;5ew)5`*A;jM8=-PphAZ@M#NPluXvG*%VYU>YZ9@{+yIpy(8G;7TUp++LtDzNATm^>;nQ&T^DHzp`6X3?K+GDM=VpDB>Xk;NFSCDk^F z=Z*USfF?NGSb6&c0N@`$=XyG${Ztf1uMbv# z>`r+2^a}d}p{d%I#ZoK2C`-^zO`v{KiVfDs`NVznb4+r-9Ls2Y4$paX{&@nq;HN5T z6zj|k6T4lG;bWDgLtZ9{E5kTP#mJ6+1$2=uQAXzgvxi3QDCDh&Qz*EbhKMHjsTxGV zKpk3xf5_$Q8=;UXS3krhA9ila%#`)g(ZkwyX^1^UYg`!N;g-B;ZJoz5$md|gp z6S9Sbmi-B5#mmbdzsl*@B>HeJU$7GQ?rXlgkp-~jv#^&I*(O!DP}ZbregB*jxK)x?FzI=D${qWdBF3mALP4C%tE0o}htA z0q}aD4VSeExqxkW+m!0iiT$l(nX^6Rs)HyxJ3&(>u(xkCZ0dFvJmIomv z8DYnL_QYG4U3JPnofT|D5z4h8=Fm^MtU>bR=ohgbgOO*5S&O2-Kc4&xJ0>T~0&|UM z)lqR-DS`gHe6nlGZLXY*@MH4Rg}E*WF8X*WWQHdzxfD8bu$|mhFBzAM#OsCz)gHL+b3-)bOI}+z#Z4d_2oa?ek)u$i{^1bO8WIsd8Qi+qplC;~%5> z^ZXHhpRhe%ZX<<=@elS&qh^Zu(%9;w6)OnpZ_5<4&|&2a?W<6xirujFTDQ9^v0!TkD-RMR{|0Xjp=5Ur%9CyqBpW+XfgV%{3 zb7l@xeLzyn7hapPk_A-!?c1_=EWn9r7PbR{zu4s5uR)o8Vj%D4-BpJMs6a`YU3grd>1uPYMYAHYXlU zDC&;mqt1<7AWS52&b58vN*nVS1en277rvy-Zpx)ztp2<<60N2}f`7KMHd!LXM$`1JSTWjW)#wCiP+DK*sLwC;Ip@YT= zQ1F79^xW<@LFa7>rZw_ItlximK;M~}5H+7Y*i3<(R?hB>-J-|rHg@1}n2A!b##I!R zZ=IW1Om4*AE1mE?)O%Q5xv7P8#MGvBtWMZ~slh#VxEY=V!Q%1V%{c5tZ*7DwH*px! zV%Sp(kT9<_?K5Ew(FQnAPcD}CLSd~6`GK|m1^%azwDkL6eYt?&@QaK0WJTp6Ct_e` zU}AE1XXS(nk>>Oi&+-sbCIsoOO&*K)m0vYWL@rl^Xf z-mdi3*+mHa^M{{8h6om^k|<1vpDiu*LH?SCb&Q?Fi-D0>gM)+WH9y>0Bixo- z#$a6evn<()1~Xh$V##;^n5CvgrQJ4mB!c*>p6wDA*ijQfJP|x9hj8aHbbCkjEa~(= zUX4WeLJ#aeF9sC^9{g-vr%}foq9S&jBPu2Q>{kR(w5z33e}pbIc%|0Gv_JBvZK$l> zim>PE|MLb2q*oYtM5vMDfu##+7}r^KLT=cjh3S#1>xb-A0ixLbuA^G)bolY4>S>uy zWZNn=hxoVq@oHnTIu|>>aNY=I?aqiK#D85IxIO@nUTHxpTp?OsoPxfKG?wr{9NRt~ zJINgtjYLH`c9= zb%rx-&y#->YR8nsGr}*XW7*u){*+9NNNzfld3@luB@peKa^i{e$aJ0w5+{-Lz_O9t zbG0Pa_0|~qEya7X_?$jO#~C|bMZ-X7l5ZCN;zv2nw{^u~wX~B9 zsrAR@-oozNEETOz14KSD`KEoPy|Y!gb2Kc2{-oEGnJ9Mqju-Iog55|&u{Zr@ENX6+DMC%YExQr)qc3QPZwVH0xR{Qh zU-5I4G2{p~Z`4D)`PnNYJMupiDWG9rnhZ=M8UWXH4V<)z_?(7cS_&$%7LqqB^=FC{ zt%-PT`f`a)TOK}ao||%|=xK|+_qVSs(UMiAkh!_Ha2&3yDl46?2=-FRDVx8bB8%AC zNvGv;jN?T(Iyj??si8Lum^*+@DuApU;4TA3k31diLsexi)=iBTq0&;dha1S2Au5Ej ztnGHmfkmaOzOeWBPOFJso1U1r8U)6uDl)QBd+?j8j&(eTJsCf-a)CZ#o&v>Y*6XJu zvh3zK?Ri3FOeONwG*MDwcCjuL)CZj6htk%<6|T5>i4B$2N1#&K+QsmE`ou`c^dD(o zK(Wvcrj$yfH@a?ghI8 zu-}W4452&Zl&yAPE9>7D4IETz;7ZI+31MWOa>tQTLPv%!NKW+T^QPAHqUz>Ps$|jDFb31VSS~hkp2&!R1C=M8HGHpD( zocfes8@*}H9ofeN^6kf;b(+tu-X{mdCC6kt5%~cfIJNP0QVqp!i)35T1+uG%ucSCC z7b`&YvN@%5KN?_1BJ}3}4O;mrO|U9w5E?~!uc4?nKs~wLmn5E>a>}NiIFhZ{zBW2J z&X4^Vly%UXDl<1E3%LIRD)&nGJ4MYX;HS8q_PpeCiFsIO0sa~iT^@)LaNC7W3hYF_ zm`$wi(ROnemME`UBW$^+kCO@SJ|Pf7^d25Gfh=~1PdAj9j&J{r3+w-6y7?#KCt(qN zAG?KF*t)m4eG*P$FKs&tAen^inr}OaktcuOdZy9ZQ?S8ld{NS|Vy%M=&H$2L?D|Tc zD9?qv1H1R(KA+4{snlk-+($754Q~7U6wo6W64vZ+FL7FYkHb%x%0s|Ln(BgIL~gqNY?3j6Xga2U-$0kQ zh|E8W+j=9$VQ0daNR~ov?MXel&dRq-51)McUNAa%XX8p-;4Mdi1ytf7p2v#)?yOhF zHb-vTsa#l}G^P;kx;~R}v;MuhFE-oXG}rxD3l(UZ8)jFjZL(E`h?CQ3?e+O zNmuH1y)+iMddOk+h-_9h%Qu%dBUTE{;w%RZ_LMyW0KmcdS}bZ%;)t<|$`dim)|+TWyO+ZT8lV zky#Y}LNE{BIXzr-%>=08;59}*>Efyd64bDKX+wFcS zi1pWL`j~?3WG&mug`tICE=9s&ixamBVv$1;I?mO=evumJooB|IYY{e9cM~ENF_Kb~ zt*Wzgc;=3li?z3aqNt23Bzn7+09XoCG;eLu)bC{ZKB z;Kb4bb=?K`Egr0^kM`C!x=y2U<4w(cSb#IiEi7kDZ&{|13YL#+%p)4yM77=JMq&IB z!Ys`^gIJgjy$4&xU~@XKG^#A+2#}uYjA0}~Dh=@p;&&l91xQp-YHlBbV$pOc42yAE zNH#qzo=LjA%o0iIauIoTU8x^U+-*^Q4Wg~=*)9uQ5f#uEk#MSJxK_3_V7uauoP&F zI#%*V-7*WkcXJUBt7jU-hj9C7I}0Nvl8SQ!%1@P?m{U)LghlM)h4Q1>xCr={109vSs>YgR-R-vg#3xcK?E_I}v4)I`9r zS*DKDuYC8Qpr=ks7*=d}g-L(KL?Fer=DI@@nP5-WT6k)_TcPQkU84e`EDCI~ z#j8J~JC;CuYqB4DLO4BL8{q!lc!2qpi}|TTXkD33o$m3t7j9^F6>+=zS2%LL2>MI` zdbO*_=Q~)c=h|FuknpqE+>WFgdg5BUv2I~w^c09&qg44sn$Nthm!fD9&sdj8sqjgL zAtS|KTEI4KAltIl_}oWzcg=D{){tS<^`qr<7i%%p+QMdXStNYP@1ljWt&s?c=Cj)E zC%Wwcb9L^mr`&TnG*!kFDyGw8%^r0vlXbv}>0|up;_tQ5nD$dM`t!L;*47cI!h)ZaXqA(44%lQ4@R{6T}roCb-BLN z`{EV(O5vv7#q!sO)_MjD&`ZI`7NyLR#K@jV-6T@)3Eg&FoD1Fm&^5mHP+Vzhyr7gPq27vwx)oozeE7%>JM*4 zx%>e6-zSmMAcNgk1eiGq90hjzp*5y`c9Z#$M+*QC{Dnh2B>~J{mvQ}MLFnu@xnUnq zt_AQmj#O1r`vBKJawZ8qPayrTLzOckbd!ywrmi8aIsfH}=m7)>}UcI?TzP+{O|L^q* zd7=@onmS0Kn6R9naB*osw|zkkA!w$S!onhBl4`{R)nhMO%#ssR%|Db57e)SvdsYl%TM!TP57}axlJk5T3aBplK#kIE!RgFtv z2t}ytC{a`Ef#a-La|Bg&3LF;ILG|TzIpO8ei-Ve?El^w8puLDeqdS zsbujuNL*^{AFjd_d);Jq2~_Ir2!5~2j|v_2v*KZGB})nNDCjvHI%BU4qXd7HrNiIt zICErOR4x0zgHTO%bCef%IBC<+a$iiVn!B1p56$|`LYmol{n;@~j@EBB5$$w^-D2S5 zwT!iN%8J<#=@3u=q3f)QAT+{A$REQ&$gL1wa~VVag862jd$TS?2L6o5Hy#a5FCb|U zL@2A@p*7BZ-$1mO6A_*5g;BN(UNs$Ehhw0tQps8eGVhT`DEw9t$iumP0GkX1&gN>3 z`P5wB`*(Bz1v>5(^_tJ6u2k}_zRH85{?E^n`uY)Kd}1l>VNo@AIH{Z5@+chRmZ?_j zW8pdO#cKlF;V2ZmVd+aV>X{mz=loK8@??u(%I^XX&mR>bA49mWv zDk8$)d_yM@OZanlj{k4ntw~fo4J$_)YWYF|gIcV?@3>W=+UVqFDvl^uVd2JXb+h$9 z$>~Ks2WFOYrR%G5E59?hv+7|GRj;3~1btROiwm%B%nwbnavqL;-T%X3YP?9lOv~n= z=_&Oz>vVgtpwfP}dg(OtGn&Yz5ptX7z zlbc0AX!4@=%kC!bAl3V~T%P%=`TU89>K{c)I!ED<6*>V@vIzA>X*|E~7$Guo3lEPp zT6DhkxRv`JDW zB+M^ouJdS)15q=H7NcZC+mD_R5k8|`pb|Np#&_kVAE=|Q!0jIZ?Otf3xl6XtN+uo@ zOS;P*$Fml{Z|Ca>w!pPu*{Mi{{%`+_kxB1D_f+pBSrMycjwLrGbmbx3znZ?2%k>nIg>9gb~}7N_01nmz!+*Ci{hU z#fQKD5zKVK|D&L#x`q3$8mJr*h$^a!nluKDcrD#zeEa?gCD?QxsqxMFWnKCC38 zMsRs)>63F(l2S;BtjpsRb`{ij=%yVV3^mRKw`HS~T^@L|*E(M+Kz>Dyyds&6y(!gn zk#S#6?~2)LbKX!P6|;g!d{fL-gNGNCp(=)t|qNk75t`(lm)#o_X)(Y*6_wc${%>j39?p zJ}Q3DelFrPMj`easP+?P~Dey=|D4o%&$B$b|G0mcMxeiff!{(_D? z2Kvm`@sbZg5b=nRMOAKy`O0*dQoMNa;14?i{6}Jog$T3Af!wY@!LU_I#<$p;+>t*r zZ;TjrWTZT>Js{j1zv|*bmpzg;ISCqgRhi8Ew~ptZcyx9-ws*b7AE_>b4{)CqzV86< zzzF|8$^u9IS2QlOqa!i4p;ser0-(}K1`krn z-!=N2W$}okKpmRb=%?+VRWnL}FjMfEwv3`C0FD$95oy|&3px=EkkN1p<-p}}&E~*O zHN4c0I)h5#IK#h0p5XDs1~O(Xlzv-RBHTH9dsjsCtz;XI%Xi_D<|m3DoRYf(&t4kP zltzyxez}#sITAJ24J9Zkbz8UplN~pt7`9MbPkPaXCJH!Uu>4J@vTNhMO+BZjDz22t zuGIh~iW)8Tf2nO0rpx-{WyQ75s$*-3qkZde_4=9r;hWI(iNlh%aiQ8?!Gzm75<-F zl%8ZFRKXa^%OMylIbFfVKf1eLfr-saG;ukC%3s^WfQZU&4904+-1^BBwz@>rd1B)- z!Dbd?cq{*zxYWf;UxdjM7}@&uQG!}L_TL=_KV96w8uE50k_iIxT+z*tubu1PP$So) zNn7FRqCFOce2K+VE(2s9jDu5qW7r*gm#(|xeua2|7~LZl@kI5R`O5ElgKlrsSNo-( zK9COb$7|00^K4|8dm|g%PD-q8C@py3%j*h@0AwF)@0^aq-w16b-X`fEUP2CXs2$L!+cst)8 zXqsw2y`~C6T{o4k$lLoHhrB3C`w5GNFud2R_yYvwcZ>m!BvRfm_JgD51XM|hY;moA^vjZOwSTl$yUrwVVcYS`coWX6kQ<9+)r z9^1Tewsl)Kc!<8IC6&5(so5}r^=McPts8`pdb6gx+a7c$|WaGWA4=7ZF zLMdNyi&aTw!wF>!=P8vpz)*zRu&ceBnf}8!w z&qlGq?Po3J zP+(SPi{%jhVqtvsxN5kTF5|zj9Qf=`5@9|ULCa0pm~~+6t4QP<{;}xzV)5l_!VFDR zzQhrf0&na)g7xn`jy#=T{)BS>@OX;aXt6&?{j#t`M;{ew={aUkE?M`)2#uTaJ~i+1?C$3V)8= zxP;GXl=5X9>`aUY1cxNhbws4q4tC2@VrOYvuk9j*bb5iotg$+-GkDS$o|iUI`;RKi zg`?>7`f1OvtLD#nTN|0tz&5`xKFPkkTJnSTGt+PbAn$M#friw&DH=s{o`gMakaJ3yq3XHw}BX#?2i!5)ist8lAtA0)d$K~4Y(D3z(0|TgWGh);`zIfN z2zmO`zr>j-zwg4tk@2dv_UG=oxq5>IxUv_+>LLH(i-?V9NOa9V({ETx<0r&R==z6# zZST!Mb`@v{MAr{7Wl0A>PMm1#%_lHDa$Dusdl8+{L`O<5ue`GgH!oXF>Qcsnvt9p_ zMzs((_*`!t@TL|M@;=K7UlnIHSnCLJ;FI8Qyg{0`Z&A)gK}?L5Uua^s9FMv=S#kYU zg7$kyS5v1>%VwlZ;G3w6DGQdY_F{&q$wz~5?0Xo}1+ znpKczvwlb+w1;-af69Arap$`8aEnO7p-~_?HcCy)ul`rc zD6#2-77MT^OSyfK?t{cmry?+3Mf!}pNoO`Ty1OT#>{D)-*git_AT|5O(Tuj)lLN*| z%Er!~Krl zFf{+jhJw$&5K1c)>q{Vm{gP*FIlhWHy+-=qR)23FD}?R+3X_RQ{T)_Td(Wsnc}Qrh z#^VDSQUFk*r?=n62*iv$Zq(a-z~5*~=9=!bF?7Q}f;0YOWpfx=6tim^oZm@;#*xIe zN#aY^lBjuaBEeQ~Gsc6mb7Q`QF1GcRvEDV^u=snbUkmDK>eA*XP;u2)8S9PB!*Y^N zpWmb2C>sU1{VzSHX=HvfFZR98-AL5bw6%W6M!BJ3rjy5|fHrz}NZ_yL@Hg$c?5ZJf zIED9SZL=ruI_v!zjF2)vapWk9QKFQrU21Ga9E#i{w@Fmqo5=nV$(+cEm zv1E>P$H;*CNdm)n!_jIiw`Jxl*M@ej@p6szR2T3JCwFXBQcp}995_e}!wL#-FN<~H zj48wWV>Lwm{KwxD;&K>k|41vRK_lqAUhR+ENh6JWqEeU=qJ|wHH7wjBW7*tTAEzW1 zb07_WC$T2biKYu=R78J#k9Mt|n_UZaWxpE!cSs`W7P3!ky}98(1Y|)sa(vPFyYP#V z+{zrD5H-qwEdQ2r)5=vu7p%2Ld3b5M+-M7-I#-+hn-J?@+`OC3Rn>5~m=$7Z%=z<@ z@KL}B)8oMRmey(;BJS_q@SvZ&l761G9_|6n{UaV-EOkmI4drQ$4D^bq$`O>TdeC?S zyUVqnQyhxWX9?X_mj#1|?Z%^N*laFLy_uJOOf>}1Y#9sFP_KU*j%u`B$>*{(7zeZu zGGDNX)3S*OC~Eu(0Ks&ePPU>Ck5kOi{u;$F4HUSY=)^gNdgd5~I48B?qB@_#0G6+J$Z(GF*vI%(?XUnNBMoK%1_*Sj30g7( z^y(_f)7BL#O7;MC-vDJHamsi)eg1KSR!d`;_B~vnXxQW1!+!ts%FJuYV}s2~kdT-^ z7~E$nQRun9-AOCh=pfy{`msvbYvg7O%I?4Ip3hjV)@5MFsbQ;J#;tlVWlm4A#jl9u zX0b7X)POVC`n)Y0BZl#rZ(*|Z{7%DhE_38Cce3i4Ze+<toY}1k7V$=v@B7B8_-@Cj{dMFc@dHpg*9pVE!6lWrp7KH4(ZA^m* zU{D}gY!P}nzT=bHZS-~hqDD1YIIs1+{V*N&YA9% zFNgelgibr}G3=5sBz77MUs6y%mV5!7miDKVu0{Q8hfZG~n-{WuCm}Z_9+|C@y%~YG z)|q|E**R-0_c;_~oM0+%F>A zN9g*jOMtU=$G%l;EfVO*Rk#Qy?O#*ahRJNbSlLD0{4KG8}!D?zLimA1CZ zsal@CYQisOLd-B4betFXyW_w%gKT> zX)JO+ot6pLjJ;%9Uym~U*vbQrm|X(M^{;j ziO*~t`|$?i{20!b8K|>})iZubB|!G1Hy&7$m>-Fr+lApuG>rs*i;5w0(_<-4@9JaT zQ{EX%``w|-HJmQf9X*{vbz54{zCh5 zAH#tym@MEBFyIG>b{d?Z>ZzczizREQ()smAV}gKZzYwG0=EChZUmQ}$Ovbkm5T{*{ z*%|cLuze$;n6s5+;_B2x*9(!%_F%SAh;YWreB+lMb5@-kKeGs7xku5D-)<>C)(~EO zj|DKo{dcq|MoDunE-rTVMlgY6f>El(yHw^?NlGNkAG?2jU6q{RIJv5Ri}ilb=RvM^ zi|oRYz-moVXLZ%5S>Cs_hMoKRFR7&HzQc~j*$Kkc5sf~xciz9$9|>~^SEJUa)oZL8 zO7#!-x~0z8PoMa?uqAV}S_H4qx7%$w$5!JGmyu#%+08v;eOo~HGk>;KNE!>bKb${y z>xLh3&`i^dq2n?hv6#-vm46l)tc>pppmpG+$V<%cldq>)Q!n-S8l)}R)pd?x{Ds9XL~JvZ9oUrN~~5eP`ui z<^=tjZ^x9Pi)jQ}z40GrTYoMHA(v!^em?vxp~04KG%;R?xnDNdiI~2pWVys=jBR|1 zs)whdSX*q!KzIOJ<%?FulZis{oIkO>aCQMtm1=K2sQb2WrE{PYP9sg#xS|JnGHZ=@ zo2|b3=8DlH>^ost8v^n$xxW?p0TWX=@w$*uDSjdE_h&hS7&a@%s- zG{BQ{N=VpZMdjNa&&fVbKebeA_tdX&BP|+mSV0}}E1TfKzt6Uj^4ydDCaAZ}__!=s z8BKc}ImCGV6+CJs$8~J~wl78Bkta$xz?UxGF?bZ}+2TEQY^jOQZkJtsZeP zs7U+A2X;LN3gJ1d)pCy#OO=HM)7vgW-ewSd)9*j?Fdj;G6Bz|uNYH%NKhN!f#C#Qf z*ggN1c=8_DDSHsJy&UkVbN~)2kJRG@3>(p!rsQ{|OT9q!@-vRT z{4T`G5>osvQ8)%n?eYIn?|x`iD;#C3PjxuYU+t1{_ijnk)Iup{3;n4>|~jescQRERWo30P@lw451_C$Ky_Z~8s`<%Od1Y_y4V z3U#yF@cg@S-+vGX>iDxY+C8|ml}h%IwmB`fQ4P-=tm6eYUi~Pjfs9w*wpRBF!0U5M z7F`;H0&d;SyI?PW0dqv5Za;j*>Y5Jt?*US>4(rLFc zPh;NNx0 zx_culirzza;C|P3Q!Y45+!-G~sIpTZPnT{(5J6e=<@MIq~KFge|v^-9oTLwQ!t50L#~Aas(kddo5ZmruUw!%Nf! zyS`F420?eI%pz&5@GbNg1M`R|U4mhOPb-z!Wr`&&!&F+jQb9*(xUAZb4K*KaSIeH1 z$drlGF>v2R2YQPmc`$xjjyy1E5WOYPhYOol#pHUif9JX9#WeNVmz!#a%lS31*S&l1<_pPX?p$ehKKTHQ?qL3X7e(il|=sv#ft_zKw3w6#uw zQ*#OWyNs;IJfUsucF7kg>6`UCnZ|=%wa2pvdg@C*sW<`IsvhkI#`qPkHalxSiuEx4 z3xF0*`gyPH_}8Zr*Zb!`b=%X_Q>X9$f;Eia18s#o>-eboNFiM>5@t3+|NYngA}=Mb z0ca0aQQbN1^WzE-7F$I#xeIeH2=YfSx1NMJ+4{X#!+sdmQb|r^v5f?5QWJD|cY?UB zA3T^LPv=@3uHli@VvJVCFZ*&2RGI7J)&BpgNE9j_eHHr2_lLUdc7`&DB!|fgyPH!_ zSN5=yDp{7mf&y6{b%trU?v(&YnR_4ov=y(vjIt?s(y@>uoT7Uq5##}R_ef3a9IQm! zeu|SRN2mXaIK3`|YP@-nt_6RleLv&vygmKpv06I>NjAbd_o=oxx8clawafWSeR4dO z0)67$_qem?jbSQBGNV2zfQlIT6*f(q8&%&#m*Kct2dgog810i1zdMQcl;;Vpney8@ z?U@CeF2?)_UE7AQ4(W0tud@!_!+z~C>7#&BTEbOThn(|sQ?$OPG%f}i0;F3M_41M|JbpX3hpqvv~Ghj~>N?cnY6Csct;lue@0 zA{#85=(+y$OTk-_?*S;Agz?%{(-s&K0rwYx7`V&lV_t<4*8+o*c(~c9 zPS=AECj!w57d& z$ckh;j2mQWBqP2bP#D*G)?JP#Osibg zhl0Rj8NJd-d1i_;Cy%SspLdT%B&528ZVI+d{u_ccH@sh!zke}t?=nh2tCXvBD)9nF zrbw|zD)dU{9pGgTzPDFM7Z_*$;(?ej#IoE`mz|E}5G_RRYR*vqp9!g8`oQjirV?cA619EL=cXYeI5+V0@*Wp<6%aZl%V3XE=y>soEk_=#jsRb<#!lc zJ>ytTY#jWOP6i$Z*}zP(Dzp5hPRV|Dr#n(B+5C)IQ79J04p*HzFm&cJDt`R+?)qpc`OHx8^0LFwCdTOA zcjXvPL|S$dTdlJA&QdI$Yhv+rG_( z#^*-d2b0N*tDQQt^N~jmZ8OcPPDisR;3B#9qLlxSs<(`aqwC(h?}Pve?(XjH8r)qP zX&|^;<9_4PxH|!YyE`Pf6WqOVZQL2&ng27-y!EA4ovO80o$@++U)RsGr0;e{eRTdp z@!j9RTJ(&aP#Xo8qLV}T*xG8N88Hb5XuebLxXjy(-u2X2^8V-h-J~6>`@+_4F0kv~ zc&0P55`QJgLD*-y&Oo20QqaHTb8604)~RqCzZsE~`)sPBy5~RAWlkkeVlqLEW{eYK+ zwxa#Wfx&8o&uY3s*%Mo#v!NoKM`!lgpyWkRO&a0(+lHdeJNdfLec{j|AfwBo)Be>b zq_Pn*o~*rsS|qy646ky@M1|C4Sb`_@2xu-R5%9@Cs!O%H}=&|Sih&+{FBRu$_=_asn6#kWlr_HGRIOR(A3X5go+&kF$33U6CS(> zYyp}Q7+jOBM~Siq*N6gyDAUydBe?OU2abg~;gpMt-B$0Nf`&`6o{LhnmS{L)pXm-u z54{^A1;ysUaqFB^<(L(YALB@slVwgR42<|Cnr2`T#iC4myrmv^Ex}6T{lSZbd5oc6 z7`nU_umI_jq5d;|khOkCq`E)u2L0%oF}G9MJ-0d0{&f8-8ILg2aQTSa;X-*5hVpEq z8lwBg*Ma$2Tvl3r!+8O)t$Tytk7{RE$`rt;hXtCi1F|Xa=E2)O`-|r`$;PKoCPp1P zY^^&dF-Kr zai=Ae?PL0j9{Y{sAHP+WIOty;^3Yr;yyMztSIE$i1S1mUxr{g9{lA zt3@>?{8MxV>u_FI-O-vG&~ZUA+Z7C-sE*b{k&|iXc29QY3u-YCabiv8hjDJs*Rwv{ z+(F0Pp5+^R*1(yxEAxt_*n3=6k@n=pXPyirZS5uk3n7$)Y%~{d@=^1ETX@@tkVSrVcPJro?g6|0bsaQS_Z`PrEhJ-kdU~f0+`SwHafGOKZ8^9wkf4yh)?x&DGH$ zk9m=pZrPY3FRfLj>CVr3+Tts>h@o^O(g%jP6)tZM!`xy{hh$K2m+9QGh*dlBU;!)B z6=Sba#$yHPLvk3UUp|!{tdX=b)9&Kv?dmwea?tEMpN}NblQVWkA9J)+$orwRF#COT z3vqbC)~EEWW>ht2ch-%c}1^GZLlSMU)GS+y;a`(-;gkiYF-|>MDDo!~jv&@|4qs)UT42*6h zIEI3UM~(hBM~QXFHPm??Gs|i~H&US?!XCpJ#FL1|iqu-zfKg2s8Tpl(=1+8Z9$FDd zfgeN<7ySfqt7$EDf_5hTCCHZiRCl|IPeM@H&!Fe#@Zeo+#h_Y?fk9Mh<{g}cdhQMr zO&yE-N9{0LJRPAg5sOgS(-lLSJYp~HVF%Jr{jDp3sE?j)Kneqg`6^QyToTu^DtHtbhe9h)^;e4zA%|aWO-6sr)77)KbXZs1hRv>izj_G?~N&^ulOe+(jE75je#<^pF9nsAoo^=%Evn1HbJL zCf&GBU2g5L)qoYwaB7A+ENFZ8NLf5lj=k7NC7Y6iN75IH@0;e6MowKJsyvC#>`dyDx=Cb!jg`ofJv}U{047bJyO1Iuvyu( z-wN6MBHkB=j?-)Sh0%*Q zB?&tTt$_Zzjj9bvfX^G@j~yeYG5nCKWjW<@0Kvmdf(+Pout>I~AA?lc>DM=06-RPc zqGWqWc!qYBS{dC33>$-sqsFE-3Y0)L8mg9xs8GO{8tu`Uh$1_itQtT$2WcgoD}A z+8EzDmSkvnge^QPxj#fJ19Mj{ak09E!JYdNC|8#dGW7Mizy<5b0~f(qFlDuBf9R~i zf12W5CP9fHG;VXpPN$NhIYsqsl2#$Q)*{wCULcZLx{M^p@%cX}aY91pNiZ`>D2 zDX!`AfuA7*)K@!FA+7R^u@1eK%VRSNNQLW~ zpi`eeTT++T+X$msC~UlvgqMOXr;066lHvB-{!kAa9tV5?hNa0v?r zC0Chm(nCkLgyI#mQj@xrl~zN6-$chyL>Z%&*qh_!(3iH+tcSM-9v#BTU-p3j;&=GG zm%v=Y%1XTX!EVXDO|!o4!pcpLkn~p1J?_HO!BGPUG^Ag$Aapn3HB;8~$p=m=%x@Si zY~1?u(M)L=$M^nsEcBM6rDk^YSY393VvFIqNXT<<#=_r| zM#s%WJW~sD@fmir(M8B3i~wk2YjCZUKaG6vjU4*O$pVggT`R%PSZk>C8!_7Tw)@-` zx7HYXHiDD1Ne7SMuEqkLTkTcvRccnHGdEIGwt@Gq6)_T6m3|k1`fk)SW7Agsoby=# zJ@-g4^<}yJT)5f8@)72G?fUND-v%1`^r2rX3i%>GZO?`0ltOOX>(O6)NOS*D>w+Ye z6mV@hCOPCi554o%`sTB!3j5d-^8fL4WX$sFpOtegpA(Ws7tgL>#H2L8Qrh^KUax+Z zYzEu*?>iI#A(Pp;a4GVy7m?1`DLudQBXsnPe1~%mJ+n&RkOQFv^+eQ^mQsN>_>hra zVA*un8M~(Dn@qxHqn)6uJe2g$Hu^A&i+Oc(q*L2~O(DQ&5V_lwD1X)T;!u%($Wmvc3KE* z_I)R*2jbmu^zR*Pws);YXBU4&g#CzE`ae_WH++fnOZ}SE|B5Fx-*n9afd3Ige9Yg` z%gO#9ghO0>9rXX#fch9fKO9ie;PwBMOd~E|&lq7qK*M^$g_N}u*I>hI zj6zdQvNE<;0(E2_B@RIg0722hSw){U3V>12rTA4l{g&LAES`FY2_A=V+MkQvM>;5c zZ6P0?wyq@7wqCn5|LxT~2IzO8D6Jf~9v5^fL*&kOr;{^@5r6_TCB5Y1$n{B^bmrv} zi!g9@%K1b~ODRoDyH^v;mtQzt+GsXr9_vjW)kGkE4urg{vyl(qnzZS#HalaS+?wQ^ z`J&(v*^fcYxDM^cU_bO4`5veZXRdgU*L##X9!Q9TQ`?b)KZ&NMyQ_jrzw;5?@I^4j z#(@EbD8qlTyTnKU*_>X2KAAbuv7_AoIZGb}(JngE{{?4otm3|jpa{sAR99OrNEu1r zS^b-q#fX26O*O0~u{8VRrG9^4(?I3$_I2E-DT^>|(&=T6m;-lg{B5tI)$Ja~$K!%( zDL(hqS||d+Kgvawr0yM4`=vE*Xi=r%`O>-ZQ`@(zzlAM>b(Xsb?!+P!MGYlwB*tWx z(gBq?V2Z}V-0TB+NrKEp7O^MSx9pWS%2X!q%NU{Y{UkNWR6^KCTB7#V6)E((wch9T z8z`;f`@a>zOYZn5?%5FC0>tHpFBo2KqKMiTJL4G@d?m_pHDECmp@+2iLKS=|>b@Ur zOKJb@`R`oQw09t4+q})-h$y^&9YCks0#Su>hdrz65XpjtRQUJ0EOH3YjWHeDROZN({-iuugq``$-W zsjLiKe}wTde3&k^Hs#PcciHNNq1N2fdTvT@NdKtK4H0Rb#I#3yoN32|o(j;i3ajfu zObypm_iyivBi!JGQSV=W?`N@a*{g-?ukO3-y-B1pt%?U`R+Slby6*6 ze=rXdvQI_idwu;_(ltW(1j3+B4hVejorf48%6*>*Q9AHGykhp!($SIEzP(J$!`1y7p;)D)Ubi4 zOh{-Xi8f2NRk2f;{WHGB)lRQ+u`Lb@`v&#=UWJ8CuoGH1&meZEu(E1O_< zMJLwcA6%Br9K_t=kiV!fUGaxPvcs?jpjVX=A7^I3DA_V%Hb_BJF^DsigHbVHrtip8 zI6bQE#JPiZ7?RGT;QSKyfDWer)bn}%5waVIb%SI)lyGeVFViNic78>qR~InKY29zE zxTAy4dhT*I%B+rEqY^m&squ6rbd3ak{P9I&A+v;GQPQ8%8b@3|%FF8t;syRN zR$K*bFu`_eUWm75DT!wjcFGJS2R zcyj^=TmT6T%9PpFXQuO$oP3YZKV9S%B7H@G@ucZE42pN1p%DTtVWcf2TU%xD5XRIL z(~7hP>jRQpotfFvw{W~F8eQQBh2f~MC$*B%=jcjVnZXDU367YRB$jbPf=Sd{3Vl?> zAs$AeVgaa1i{^jcZ~b6;wTF<+ti*mZRi7tyuc-v&2K4E=&aa5HR3D5x8BH#9c6O?a zkc+=Z$%D)Hp~5n(`S@Jd@F$lR+!3+wrlf50dZ_EqZ~vaowJ)^6UFIGigFKkkf> z^POU&CD+!c?ge-7*jmZqwnLOm5~pdsgHamN7p>f^D(h2#!G;&#)lCxle)4svr`?7; z$dt69<>dw)H4*8xM{H#)S?TrW^-Jngi=Wrbeuc59(Hss8GfUg&xRDa!su0Qu4(1Dw z?5C>WtI^Kp{f3CLLty3+-fSCh%z@(WOh!0pfAmrT0)|cMU*3FBc?Jf$B|lW9xJg(@ z7L0moUm>duyN=PQWMgYZ@1_?_|1{FQiM)ALcXYHBZXcebSW6Kg{r=7lW&Ihkq*O}A z5ak*n>)~X{k~tYW6H&8Ddu5PhSb5s{eMsUf(<!#8}2%!W|LF8L%JU10|Ame_oL3F5=^w zU~_fjDWMB?0Eit9puL-MVLbqBY}fW64uML zEY&8@4wn0CO##68cM1Z|%BHr;&DNYCkXn(x;7k=j^o5w)#{At!6^D!gEI61boWQq= zSBq>n(q%w^PzQW0@u_~N|3&uhfrgnQmzjikCd9175&$RcGi8Q0^Edo&M{90pvbM5z zq;l0uO2OahQ6ye{mk)_ywZFtH!jQo(j8>26uhw7D6Ywgv*Gtw~5dh?WwFw%cwzS`# zbuEc5AZ~le&!HX#0=$g8<`Q4g zrs>{(#j?gdb>QbvCw8QF7MOIe`la_-vR1eaO~e`$ZKxV0Y^r*E#WFUerTQ1W;JkGE zps;r6cW2HZq2K-rMQ`m1OlM?ATGs3jR?1Og@%T*a z(%r2n_Ajq-PuW?4<=tW$9Rk+dnWA#f?>pwSrJv50-+!M?xMM5i;k8W_P%zET!}9U})4{A@xIX4HuDXPY z-v!&YT*K-+Lma@yQ+DCf6l0#q7&dQCY;q?ks)9CVc&_YmFF7l*3&?(f9+MRvgis&F zh~9oeV@`o&iHa-D%khmIn)nOsG8^Rpt3zW*K`oR&rI{SqDj!cxy=S)JZXDRE9O*Oz z&`eA;A~$PJDCheX*_xW^Kwa@O`=+=2c^)H0T~bk*pL%bwVN@aIL_2+@PZ}YLQ5Ms| zTP?7^7-w_8=alvZH$^kvD8EG3F|4boY^S2&*T2F?x9H3CfSFEZ^HPf?o=Q@FLV1}iws#>g3Q*4Nievl zsj8zcr`7~tg_Our-Q06zgRauzVd_aKBhBq@;)+QNH}A1!<@?R2AgZk5AHja_ioLU@)UWYUlAI|TTt{mlCy%Jk;j-kp zg-2Z!@Mdc;(;ats-7`=uEVhm8&0{l0J$s&47&4UE^3!2)Bsl{ZMX{jT;IAO<>og3x z8cQ}G#LS}(S#czT4r7Gf=KU_-#clJngXs$w9bd*uc=v||Um;PLHYoY@{3|_Hc6M#O z(245v;X(4gg??keD889{)Lv+P@|`GWp(9mg%W2j0rhe0HjJk?Js9(-8X8w{`*HppC zY5~naAhG$my|GsoZEbv71#G|i4Co}v5WS!%2_+N3&KW33^187)4zu_A_O9<8no~DW z38vfGaKaVI4hY+$PXVGc9~D~eKJrY(ej?`)$H$uSaKMUrxv`7pv{W_F7twReaH}h_ z6Hb-dO(j{Pvb_4+;tW)oz{R!}5hmzJaOO_USI`J`V%h=a!rBKpxDBP^T1?+g$VMS! z+jXT+9_t7PpDbNhNA#7?Axv)2_0tX~*gjWtoQR{RRsV8oT?&k4F(2Q^6%Rto+#|5< z9Y@S)0dxb!>v=XNnrrEz=D5oaDcO zQA^Nq_9J_$!e+y(ujaNtC(a@+;j78MZ;*$WSzP}1aLz{GCS^unL~id&$<0k1=q4hR z4iQB2q7O43!yI9xGo23n0_^Lolb5xetRuQ=^d=I@VUwi2Tzg|eAyuMTA4}P<#>vK5 z^m}q5FWb=-y4^$0yhZpiAJkB(1ej^~Drm`Ep_0n^vpKAd0y!!4a!P)9KSpC9+Sa6T z;th1fU)}0GJw9Jr-(tX8tbwdgRPLrv96`TVhkT^ya56f_;_#(IPi^WX{Bhy;@fp12 zN=Zc*A#o@k>2wL^TP_LT((=~n*7ulyj6Qb>wP9p^ud|A0RF|ax9)Mu_$L3`Z8>d2; zI}ETn5ouS6IX^<=|JZJ zrz;*2ieR+k2f;*NZ$wK@B%;;MT%uJnaiNMUSy)>D)8JTB{8~JDV~z3D3aTNw3RiTM z&E0n3Iro5s=vX$Zwlic6yVI7tPw90_{ZA@(Ufr%NmRg#!8qosy&%`TTl*ss6%>w8K zNW`5Lvg@QD{sV`yzT@kZghYeVF2CnYnC6dAJlxwP#9(#g_$zHL-i8vk(u6?cpqg0%r@n~g z?c^BM2H#LyffGrOX!N|%xW#?`EK#>p&QG`)=NVeggV*~AhUR=O5!k%_7-yE~t@XGx zr=3$Rpe;}D?D^eBP~R9X8s8D2A;Bv6?o9A+odo=gVh$raqb1b9i;@WQZrXSJOS#Cu zhRf}GklXcaKHo(35;Pmnbq8>^)0Iy*uqmaFx87>~SFGm+htA`~CwY$8TASBTAf&fB zl=jyOP;WkUwu^6c%_fmdILUp&>nn_11O8H_5pC|$i-Y0n z0Zv_KGGfLwd64{C8S%>nF<3)QcclF6dEU_89LeP3ZlbNm2j1-^zN=IaNJLzUeHz!1 zLOY^(@N3 z&O05W`B}}1oO9-7Z-&?9*F-Ui-ziefVkCmuUq3%>2Ek=>Fv7PbDIXa3IZ>MutMNCc zLq|^dz4B?NE#&W{oP?b_|DCc!<9)*}Iuw{otR4=Be`GhV#sVB}DaiLQiqX%roiC`= z1D%3d)a-}y>@Nn>iwA3{?|B}eKQeY^KoppX)9Kc8xzUF9S;n+iK{NW*H>y^lY+53M z3*V3nbl3Gn_0!+b_Aq~eHkK=R6Lx!n z4BZ@Pnj=5mT2B_xhS&097WDYURGS*%#1u=<_qPV+)*~dSR}XXzxYuzTLK? z{tVpXmlk~?nC}566QvJ1fJuawM#dmPR^tn_ik-AmQBISGHq#yY|I7+_?Ec`9Wbq1d zCe1C@N^8agVTqN_?a)UbKeM?j`Ak>iM3V|dX_~6?mTC5wFd*yauP32g{{9iF-7Ib^o zF~QdF9%W81H8osTb#}w?yXBUlij4GQ+s{hxs`PTYU@`1jRz^#_HYX4tR7Bj)Gk58GDT^)0f81`WPlv8?`|lkn%ub^MW3^%`+v~<;Ri6>PtPa0ShjbI07hRqV-Gjuq z8c|6_=#E>zqBo1vU-({f+Z#Sa(-K1JtdgLDx}yopNZ!}~1fL&CCH+u9$rCAR2PAks zV4eru5fZqc#0)i2-(+02IVl~~!9UkAtw?q5l6P|0{bLD^d2`H9=GKY{^_?tP{#)5R z^Owoo=3Rt}kGsI~S#^V8K3rjkT|if}9#S#zz-yy0^0tWIb;$+EE;j0sxwK&&g{}DN z?VeK_b~h4Ctc!Uj`TnM)^Rm^&Bx3aaEOSQ~bW>oRr9FrAaJ}yzK+6vsS}vEIDE+5< z!_{HoE910|1`WKb#j*M^O3spl9&dD5lXy8mMHIY}L3x#666s8SH5Kru!!#nRt1FVe zZP$v?ZO$H}AArhbcJvU&6hQVxCCR!^BFA9aT_EcaeB{Y{g{`aCs;{p;yZnG>3#*fq zq&GM+4swtzy1Z+)nvBrn=#b5L9n2PxpQ;H0!{0XX6Jd&*%`W>6Ho8bqGJJ};@){lm z=Q~hG>-eTbW=WOVly2FT@#h4^d@eCJu&f@!i5mU9R&Iyyrl%E88Z)^ElrLkTv&%WX z1QeP}GxEal*54c#sJRJ83maNPANfMsjMp0SyV6oIbqBqU6z0_%Lw3EePx*<4vh+=4 z=d;wX()ze<32o9@D#mXL$1_b&`53lKFMICeM|zYc)Vx`s-h!DK0{V`)y9fl8lGFew zrH8OjBEunYk?t$-#OLSO$blYE#Lzz%4=h9+MGe+c%OIFCfR9;J!c2)RWevdDldqmE zuK7kGj3h4}bwVGU15SBn8QpDc%?~Bq@ibL{gUip`#jJ-ST=wD-?s4YTdCZRYo?3Wo zN1Q})$oDv)ns|$o`B=(~HoS8Iecee(915^s(hBHj-esR~S>*Lkqx3$cy;~LJWp; z0evLG3HS+UZ5Ap=Fdcm*&c^pT-Iqc~D19*WN+@@IR@mPw`j(bfXYZjIH%BX(KjKz< zysa4JOQ-#r?5_dr=Offe>2FkTdjo5ys{3wU|OG$+1qaG8~2UA>?WU#o`#@% zk#xyE0p!E!{BAw#n)gGuQy=AD0exuaUY-;@@I7WNf9bW7aj|z#(eEfbJkByubrPp@ zJV-ATf(QH3`L+A9RkW|~p7k?2w=@Joz;I8(_R~5#E`HZ`%8y9KCPVFwr+%acqwegE z_fuK08IdyP=uh!ht&N4R@#vnvvdP3-7opCBJr0bSO{FSN&2dV`3;E`G`L1P4Lu+o& zy0!XK&lk!co(&E{@3Jy(pLjxPB=XGd@|qtyT7Q^ZGuLo*pu8GIU+*eP^7fU?|;Vel%bdEhtYCZugc&zaHux~`*|myvW)WPJVBc(1sfDWz|*;W#L$FJ-Ld9Lar@&*aM&0;i<%OSSI7k>Z>>6yop&+G=@tnd zl>{T`1x+RvsAeN8D=;2wd;U_B6eecs4SgicD}B2zppcDHk-RWUn z+aZno)bg`SWL9&622D*rzvT_xM1>=us@x-+iX-0+p+mOV+$17F- zRcWnoawX^=LWL*I4u=v_U-m|<$Rb5@9jSTE%;O#!%f02&+q7V0v4w@`BclG9fgDMc7r+)U!>pRW$7*-zn%{jaYQIlX+A$0(@DP|N2Ru>->^s78l#K$LppG%lm%o2&Q zGWv41XB49DyVyFf-s6LzCc7^IYhOy?z!ZcZTd-x(?*dxQDw53W9VsEKVQhJ3th zKJ3>iX-5W&xi1uI%>ZyM1&?cylv(mJhMkQS{oc=%D$2#XPVrrGM~;__MXx(3`-2vw zylZpxWlo@q-GeGZDBItSl~pNcG#Ph8Y<1sX&wDL*5ZgS}mH3(~DbFvrOvA|J7<^yo z>X*IV9rA@!1*KANaz=v!GE8lU%c}VbF9Nw`|1_TSh#{Qyc-_CVitQg&dh^*a6RvHW z@yf-$8+uYpM-Xi#Pfy?0g|?t|TsHk;SlsjQWhFhP-wa=gYSy$`BbRUj-m$YE%&K_s zW#VXIDF;Cc>R1obGzM}DF&P!y`HFW^$DDC?W11!C2u_6;j zfx4eT717~=&TuS-r8k2&P?cOSd&mI`L`f6s#mj|MzWX~uIS?p7I2AdLFqtDqE{^4! z62(@vP%+c2!uH&<@w=t0?oJyaR6S>ST(`{Ei6RaHBtAcneQ4E(s=ClxI7S}WsH4>6 z((PxspNk*bgj#iUk+ny9(u1zR{29RUKuoo4r^{azpVPlY)`*o-6+A?aH zw~&G&YDMRY+F-do0&F&5)Q0zT!0BOLjM8zbQ?*z1TGG08T90iif;Ft3Ja(C!WF%uC z*W#jaV3m&!tqwf-CU?xl)H8240F1y0VAa@v!}Nq(EP(tqOpYr=;0N%aA8ck2P=7m} z3vGDH3iWM&5qzof9b#{wX}obaSy^?wo<5CBe;+UzL=3D--`8{`0?6n#{OoMR2zR(h z^t5S1quwFLxG(FBLl$t`I$m&-jx(!!6Q_`XyZNK;ljEt;cPA~LDxjg1M1ySo*B{BT z=bgO4a>{i36!&YHMWW4yosb{H-SyK>0}U>phY6|k-Go!bvUsu_)7dg8eL=VbV=MK~ zvTUKgU3TJKN(i^TTueMp=k59P_?s0EVo#>TBHQdD2WDzB&klY@VI!>MtkkQoUH?)% zK>g3k2YK;!u=}ZfLLZZ0Cb4CMJ*@4=cKD6GJ}J2Vgep_9nPNbgp@E#v1(DHZ7LcE8 zEuT)Hz&OuU$UyTcCtSVzNJ%8J&O%Z~H0fkr4&X+%uX2!+C+WGK%c!}7x#UZE|s;d>90u(@A*Ip$%F>EuH|2i4G8Mt!h>8XKnH!`<41 zO#985dVleh@o(Rw$kPy;#jd~GtcM32KG;FEujkH+jo4DY6Qc$~;n1T46F`)!aU zIVDvs-S*UcO27+eOxoaZp@iF#$6kG%t-nr~Cj5CwB*JooU2?t{LZiGz8I391j*(;0cdS);Q34l?x{aFldmntlH9IKl9#I0 z5N^>|6CQq7G@~h*9XpyAj;^l8d6>KGuc`d^6om*c->ORpMX|07-5q zQLUX@pTq&=M8bE$bRMq7NqNXhgkA}G*<)qD5NsB&e|&fGs4t9pdv1abX*`IUU2Up8 zT>KqR3R$vKrnSMFA4&@|MESA=sJY>CwZ{K$UTor^A+DL5`^Mb)?bf3x$Awz38h2-% zEd3yh0ge&}$$sZ|_ZUA!bA_Wk3-?xvV6NgQ(kFpE7h8GKwT8#MK%^%gM%RK1$|hs! zC}V(1_*qI|(X~NyR%m!ESI?xwfY_47a7^OBYU*#Sh#57+iKYw>5a5yNx$;+ZEl`6O z;cu31Ql^1?i}EKf_ht&kUnLbEbU=9#Xl-F&4Kng^Ya)J%MEhW-^u|IzaD=Q@LusXB z-SBcA+Ssc;_w%vfvt~JV(W%C<3gfh=cWp+)(|w65LiZ9x6GO^aPftxOU%x!Y{8;0>t|%SFiG?$n|YDH$BWoqSQ^?JTxhlH8EPp4oN6nC*Lk|7XuK8JC22^R zRqn!@-U+{6O}(x{JF6NJR%V7GWn)39BLo|xb{n_r;7NX8A6t$;oC`hkG7U8KF)9+z z20q2gbqc)NQef1$Jf50o>mxy+a)l8F+~ByD?5+NdGbY`ZtUH+JZCB1RJ3PL6QXfkd z(~*R)%Jz>@j(3(E#~BAld%lrnF1#SPmTVFgeKgme&F zc(ji<(r$%2cyC{Bc>cEqT<5@<9m~8L4{{|jy6Bda&c|gYTpXZvryhbS<}9;~KfZU6 zdThV<@kk^{pv*3QU4EN4j?Uy*h~D0+psKN}l+t!miw`!eTTjs~`U$%CS zWWXx}o%|PH3%$KLx9hCeT0sd0LoQxdF&SJ?53W$S?HnJ_UBywQ04RYq?QE+q4QHmw zpFFR#Co58ec8iYWZ*I{w^zivhRYl699PL7_XbnFm+#)V)0xRmxovCWxNJwnf2<4ll z*9#{3Ox)>i#gu4Y-Rt*C)+)=#^RM;Qr#oj8%S?tZI7)hrGA^ztj`rQ-%}tD@i|^8jHG96m&hBq~ zyCVb~11&twB{zHAjmbvr>BM(gb@56&BPK64e(XgTKa@Q-g!s==rVCe4Hw9FJFYu__ z${Jtz@*)7onLw%l1V8H8#UWMN->`nxpJ?leA5Oc=r!soPok{F1X=~5+q+6Eb-gQ}| z2CkMfCys~Ri)!t3dvJ&|d44Nlg<)gseGHN>`Q0#i4Gh>gKGtBDB8+}UKg;5ROy|GO zp+5w`@>@q9V`VSg8G5#7KE=CIQ@x63?icDKp6<4pHZr+&Z{l`b+R|BUy9lBJD%+I_hFT;E~;ZP!U z_kYtW_$+?^nOs6pkyGXH~KfH zp&?T_ba@1Vld+9`T5)GrLKVq|onp1i(%VRRG{b{Hq=yM9+|E&3|LXhrHIAp{S8e~l zh4dumQn0-}lsxh~DF=z^h9OlAs3ep8(KfuefpI=C)*O=?#U17qN3noQgf_i zYbOlkh~7@$Q(&}LDH(T$Pz?5`T$UX_2?(Ns{8hs+3*ErRI=rAC{{jliF*jnpq(381 z9{|G3m@t)yku>*!drk!Ngp3Upy#;wSyHxOwrjvhy>d0^$l+rNrvs zt&~WeR!NigajIVltGXtzAoHKMc054$&e73yJ3cDPvAF=~p55h~fPVP>+Z%&e^`e#& z<=A)Pi}DqD6<=@sja>Jo7ah(ub|i0RHC+K4ul2pA;~qGeNbAsk+#@#5mY-V4Lz|tg zG1c`!rNGkb!ZO5np_6+ei|hQPf*;HPL}gnA1@axDet&9M@d(Bj9QNv^M1~95+Bn`g zloQtewY;n=RnUPBZy_gX?p42nhTMUS;m$I7m78UIo2tYOWq4lr+-6$N8K-q8Yd zQQIW1SjFju?mrUc)utsQ%yjA{)#}~~QtUPiib^B_a9TcJ-|w26=a9c`b>|Y#m(@}w zz9aa6z<56Vk#mU%g{9g7#lfQCM_p`hT?1&OmfBoMnxXBIAYKhk^}&TcT7KX2L_H6> zUZ5ANzt1}PG5)q(nIOR;in-JM-GkRlhh_RBx5Z>a&oLrY;b9K(2`p_&&2f z6QnArKyvB4ZQRr0@&_{#au5-%1UU?4q_VWA0K>g5wDPQg&I2h{j3U8vSdWOnsa&2^)w>?XJ`B-hE#*7LI*{5f7pS39-YcvXGlQhaSa9cNtB7u@wvQ zKU-sr5R2p2KD`^pkKvR2Cxi!r6!^_r%)!DTG9@MDNn=0g#q>(MkR{(n2te6er-{q+ zT$m2NuGlfVMO1LI<$_~K_DUMyo?v3CV@o4N`cIg5rU3asJ)PzFJg2}jLHByw0~D0J zPWhtc3+%lpJl2Dq$ObIyiO>j^gSq?<5g)-@JRNTf7n;ZUmk#$c^fcLp%CW>i=|?EpN*VNv=EXoD3&fe5CIHf)FgN;$_w`XbX5Se4jo|Rfj32+QglHd<-zMyQ-2`_4j z`PzqIJ5ckWUo^!negnvHw6zT$nCSTX!@O#5YbB-ssPilGEo3FE=F#rjYg`J*#8g$Q z)mN_#_+NB=WmH_vwrvs;2<~pd-Q9yb1b26LZ6v|n-QA&am*DR1p>cN_=aKWyJ?Fb` zjQ6j9^r&67Yp*ruT(h8ASy+B3D*K6jj&VFh3I-M#ku|ar%c*Q>L3gPpHF+*4J~1at zV@m&fdR}4R^f#(DJAkgX>ftbz6FZN%Qz=HesRJ2c%xSOnc>zKeJI)Pc zB+?i+Jpr$nJ{Z}#1XHS)8`9LbHTxq(TfDagW_c4n=<1fU-S7Ah5zeP4_Us~q#j_=~ zy=}Z7(I4cYM&c%FEN5*e^jd^Wwc)1wUFV?fyT@kYP_-6+fD|DR0pXkV&ozFvcoo!V zl{+(k{=I~8S|2;G*Y89Q_ti23^Q+qN zoV3KH;-cyf+OC~XdkE zN}6|@UQDhf{o;=9vzHo9P97YFZ-3v?zc1o5_Ul28oahsdb7ELGI}VYIoupC?-5tJA z`fP)SO*`KSr_;{2GXwYuyOC+aU;R*m?iBpietfv5`@NzERfTgGOQ zflKU4^u({g#WJ1-A@9;{GigOfG)JUaiKYl z&d0|Oe8Gs{NI;CLx2>~Fn}K_$twu>+VF!lNL_3jYso_?dni>iT_Hmp~1NA`6pL*ZD zSKi&<@Wacs!x%^(hTc8c-6)oHqvehq{^#`3`%Q?l1KB|!ZANGvrZ~KqZeUPb%FfaB z15gIfO_!)i=UEvA)A8#jMH-LK5$2lP+ng|EvYmtfck8%t`^}v2=T@!US=g?gY~sB{ zJr`%qLaYjT<3eNd-BW<)es`gMF^2L)?NUMr1ljuLo z@$SF=2=%1}g9a>iQx-oM78zVRrCxqFy$ro5Il-VJT1#BfV2UwUu7L^###!UBgcAn1 z3~UZ(2+@`(@kHdU8DBX{GyVz4l;sL6L{EWs0DkomH9hXvQ*ka|oGUe4S)uuSoq%hs z7G^|tNLql73z#kcQB}@SY%-Y}fx{MO3-3)uOWh5WK@A6i zTV=L<%ZjE3);2_1jFd{0dm3kmgr7eBPY~S@e@CD*aA3}<4rS{t2l>Cd>m%Cu^B|-P z3>=OVPUD%-W&gQG%kEb*d4k=ZNbMt5X!1QvdK(^gF_O>qdYPs>S(?Kml~BvRv~g*t z+_Q63!GW7z;$B|dyQX)nHk;{;#jFcnb)hJj@=~*oC9AFIyO;Y^_O=qUj1+Oe%;Kp+ z{_*2^vL))+-Ay|(kRf^C?(*k`Gx7-zwQ-3tx_Xi9wg}s*#r1y-Do*V*}09NVfo8ARK ze);>xIVR^H2mV zCfVuG>%i85u^g2z)v0m!pk^_>?!a=6uP{}S4fIjb0xSIo$=SarwcTc`v}&Nlfue3& z@{N$N$U)uTa0v34a#I>8w=_!}W2=*{%|J^ z@O`_Jwv>Qf%LpLvUp+ z)A7f+J^oV!mz4B3PVmhdk)lh^-{!(cmXtC@*cF1J);v_RM3}EvXNtbFcR+Fxr+i;i z)#KQ<%v7hvXGy`===^S}e3Q4Nc@a~XEo*}uhhl^J3IpjtL*rMDoC=XNR6u~Y0z$;e zYDlesz5xA~mYpt%P)Zh8JihTpVG1fL2F!=Gxepj*mWkM@%;D4WxsS@N^IxR$Ia#NY z-xcZTzVSUEl+I1J2#8{aud*t?Hk2{3%Hb8PLL#$K_eNNW!`%9TGo?yh zri>(y&O}qIvpd^oBFHQK1L$y&e2un5tW~G7 z9{q&4V-Els)iCDmP^k%W4!TenD-JvxAHzdm9jaj}E>3Q)XX~Qzmgcyvx7D5@BK#EY z8v<&r4QaY#?KoIC&gB=6+0?Z;5$a03n#TK3EM;S-tr>V`X69<=%K=pl#3Ke$0lrWa zCn)RjQAx>(?(X4Nv)L_iESMJiE$US4L$n0V?K49w?hA1VQ}^KD5|#s>_ER4xxK~ul zFCaGnLY-*Hyta>uiu&b5j@hsbcASgkllpUs*Ve`Cc6&F)_2XV{YTf6o=;>xYUPsCGFzg%$-X!Oiose zLIH&vk2ow4sHj)5)R^r}F&S=Fg66n^9-W_~ZL3f!@xCfBy#j_K1t#vRZV!1LysJ!A zQ?%`hnQbZXaia@{>fe;iVU;+Yn8enjcmY9Pw9PmDBygEEf-X;W?JG194`zV9Zg5oUK(zM@7X}~O&nDL*p&8c|4%~2NjR`v<8berlc%0F-dEDh{ z3p#nk=3qpyE(iV#NrJ=cJ=ciH$IG`!r&xt|1N>hjBT@}WHj5=6n;#?v{juY_Mx-B`2h*X>v?N*QGNN#95Z>9x_jzB+sIH7=++TP>$h zh-UsR_8^bO>g!lv-QEM0_&B`WwhHIp#fg&@RA2rH)zY&#S3GMaxN3{toE1JhSwvcI zIj_dO{SwdP;b?Gf8+Sdk)aFf-Y^yv|BKR%2aeTkdW#6G{Tg)`Y5=-wha<%Jc;b7^AXmjuDad=I1M)Lki4tOhxgw|{1PFh4OA#R6;y&EjY+=IY7c1>9u&zXxg6-JqLV3Hq|ygq(l< zY8BMAY!2ObL(MgGyFefsJRgVQd=NKRSI1m6cK&^sl#@`8n;~hO)CC8Q+m<39HL8M5u?zQ8hqbwnr;<_XB1! zJFiS%<#m*Swr_DX^Jm-hb-svWQ|;rr25y5RMXGkf_IeJFJjWc)KJKUe0 zBx~ukHAFx(B=ulAO#dm3qox|H20DVceJIUzW&{O^ZXiLD#% zQ?&S6(0^X(G^A6K0* z%p`qifkEA4#-lZ}-HAl^%0O8fb}*z94Xmy8>(9kbE~2||tm#(xX?C{D=`6#kKL#Su zi=%pcqt~PPbM|udDPueUmLc9QzmGak$Tk{?;5`4ex8Lc1kV4`kzsO~Eeun;Nt#Yd4 z;Ot`Z)-&0h5icm_O7+VIpty?CnZ=tjznCK${$o$RHQEN68_ujV2W(`wjWiXra+Z3+ zi{8CBDQ76}$5b&|z5$wVSfmPF76TISab=v!jN?pLr-D(WqYJn8wn8K05W3k)P8G)9 zMEc(^+$=RY+nz+JEWazgoon+_Tgn&~K2E{=Y)f=wt()#Ay*ZN)V2Ik~Mm;$eu{346 z#SNIvleJlp!5(cQb{MI$D|q9331tCB0$zQB_&KGaKdiQ2S8yhX%oYi@KV2ZXl5WBq zF}>oE6`F_)P?QGd7MHVhtg;PmY^c&%Cr+P_DCdos4PI!nnX5JxQP=yzhCN6HQvRG2 zSz~OGAdU0I+jXh*G(pX;zAlMQp7BNLNX?C&7^v)Y-$Y$tc`OYqOEwG4X*Jyv@2LL3 zkGCFA5=ds9@=B?f&Eaz>wF-tt)!UTz=+?;ccE~!qn~(1}yqMumV=eQyk^77Ym+@UR za_@7BIMY?d;=?Rw`)$UC5~5sd zNnJfxTF!7QPS}{VSl_-<5ObO_gztup!M9cC_DZJs5s&7ss7M$Md~-UOI^xLQ$(d9o zKQ>Tq3PG&KKS?rL1G zg0@X!y9c}nnk6H4(9lq_({dM}1^IQI-{pyOTS;XXRb@QRpv62ve4GWiJxuN)ySzE! zFsgUJj%y!CCACK{+U}$n^Hz?GJw6{zq3adtTFK3F+39Kh`bzmRauu|9FwR%WGgV;w zE-YFaxvndktuhfWk|pfPOBTpOvx-%a?JhB|u5NrkG6ECuflizU9=e3ffoI!A)3Y33 z+iE`-z0)R`rm}2-EFqJ6X~L-kX}~Hk^-Vam;4X z(KH2We+IG~v9xD#Y~;#%+?|g9s0qeScNudxg&R);gIWyuX)~JQiU~bJkqNDhZ}@Bu zSZ_==uoe(11K}6Q)19QXpyv61kl>IvK=Sr0^?E9COyS}>S<#NceP%WPRi4k_tyN!O zaSr8?XMs?TkSMeU>B_Y}I>czi2?MPrZ?LZlo8PZbTvse_GEx_xT1WNCN!scN!6$7P z3`RaY6g;N)A8vO28L2h#BhD>xox+Hzj+LTf(^%}zdicTus1Mk(lCvD0=AJisOps)? z*$DQzrCxI5*XZc+#oo0_WA4bk+7&;9N4&dMfSo>4_O^tBzv&+7dBzmrQx#9eredR6 zt*3~Uc(o9z8N~$3Y|mRvUSF6Yd$rh7`Sf^imCs&aKYr@vZqz@Ko}IFN%b+{nuhr#= zSrkLeksZvcw@_DVIBjro?wJ^&WSH|D?8b3&qQMjC)#)!Lu-OsOVSs&|(qj%qY`c3GCqn4Q>1(dm^wF4usx#3tP} z*E>bAj=?^Gr=4mS2p7e@F~wXd>O`QepYe4xg~_JZE@$8N_!qM8z;auc1KpJIBB@-> z%qOXChck^N@r0JWueXDobs*uYdAwewjebl*_CfzKtwy3QG5_yzt zjR5)U1vs2HVmnzp^RQqM!3WJWJ>`l8D1L%>(>>330~79%5Ased@N5t-b8=~$ejsUR z3ce>Gd&~2it={cka(1(3M?$BS62|po0`hK6EH4}%g7!c0T*BF6byPi z)Uh~s0r^Zd9d0OCV^UMOQlW?4gBBQD4yHmDOe9?)hdr<>+$XUnA_C109rU!=GSX)? zlPp9h7)1KMf2F`*8Og4`ZLl|4n*}=2SH-M_!!Cml<7xF=!u&v_8@>-*St+ccWc#!h zn{)BF7M_-nYJ|%9YFd3N=Q+&w!lEsRy_GeeIP9bg!kJA>RA|Kn-mq4atMs?a=-_;e z>xbtheq7rs8|yJGuLD>>!}|yO$wTGRcj-mL6)&otsIx<*i~f&tP062j3zKeA88Z)A zba&qsDqG`=gx_QD2mvzi zrjlq1BAoq_1_=R@(Xz&HG`$x3HRJ8kBkoS08jF;IbT|Ojy#0of2Rh3{f zM7m@$^)xA{>#i92agL#OSFz=1UZAff^}b0Q$!I#`%cS-D=J zN@qI-lT|koD$#Q@B=`jJzqssYo|s{IK9wZSxHhQWE} zHD%ic^Qo9eS*WY6HF@=m!%s<-x?VcOtB5DL!V9vwH;HjhFy>3mNYg)~f0WK5G6)Xk|h<9;=l!Tr#Ct9e}wBYY>CDk*G?mFkc1X^0Bj zTyL|J>Ybj@r~S7h2?)%y9i$nY69@9i*SEz^>il&y=N)z0F3DImbu~Tn-GY^finWds z!$S&-rKM4ZK6!BW?F8ARGaD&YT|sfr7)coSo~`NHXJT;gAKBFqflj|&ia5^aU1vFC zGteJ>@%b@799SCK!0&x+6!`#E#>>M}uTJtnaF=`P7t{f!+g)rKk4I?TdoLCo8ZGO} z$XP*+<)xBvY6IKAmMS=~E$|{{nTWiD)8C?QFIHV!tT2#*a6G+d5S2jxNSej{^-!|C z*_;Q*3SeDkEg=H&9*t^d&hO-wGSu$pOSWH}P>`ws%uYu0u|3Yc+u4s*$oVfQeR_2b z^slSNe2TD92{XpV)J!jygpKY`^gjWsG@}h>QDxj;*>tm<5#O{D2Vu_z1{RXVnYSa= zxUgUm7V;E`Vcf0CwHPW}64^{W6|6qrnTaG5lk>79K1idly36Yl?gjE+5DD3h2blDv z0i#dEoA$mCxEqkO=z64bELwP+w!9uRa3gmf5_of8tfV|f_+ET5ZGXkVWx)7jZuDzl zCary&#$*4qsRg{H0q5mHaF$?54pN+#wl*;FHaXLryT3 zTPciqEb)`-^rjhb<4;cm*5$KLEp-Px*_T9^sg;qiJ$RofBeM5zE)%UyfV--4OU`lt zn@p)wrYcybczYGsfsZlql3`4LKzi2W;Kg96f#y%QB*Vo(ga)2GP(;miwArmF z_H~-FsN(@AogQP`+KNb|9Gjhez;C%{1=1<9X3d)U4qt55#`Izq$mldM8iCE85iY<; z+~mY$1jYnjuZ&^KWV1)U$z~43l5W=!MDq@J7V1s8jGgLX2iU#tDqhor(;6BHJ#l$XC6BO z1o5&7NA4eNk<8VojRe3G_bUTU$?{&0xl%OhOfR>BVE8kQ>RFPp9GqNMExJDz^v5V|e*e0QUenmn}A z!75>8h`bRZ5^N~sybsdXNek}oh6hN)ugrK|(NsFP)&9D|%LB30xZV&=EvCk0peZ^^ zF`AFf3q~QNDb`*!xHogfWhVwkwm~JCcygBpLhgKm^8?6cxAT2zlVlOeYe{d$|*b8n@-^-rQimM`RGal0Vu6Q5H6=~nc0sHdNiQP5?b^uSnW zdWmE@KY2_1`JEb0yWA|D8ND_$(zh0R*Q^!*0JAYe(y^L-0-Gx*~ok*cn7q9#ElFA(&G2mFmOBQq9-3Rbn`xRtWwD@ z3l>kObGDwN+P;0g+n3~dW+GY8to1!JBF7v)%7j|-xlf=Jp_!kIXjD~g=Hw}(0q$aA zlzNMGiAK-}?4lNC7ehrO9s}ic-p`pce$$&Xk?p`$EF8zC3aQH7LtT0ib#Q;@C$TOt zb}!E6xGCbBPXgJMn)PyTrxK>hEKy-pbzM#O@O0M94D(fZWVX1E^m=Xz%%KQLrE82p zG~zjsp5D3X>L_DgD24&a&+DDO_oaB_7Nn1T{z5rRc*f}()Il)`{ZZFXH8tydiM5-qh~<~UGsdtB zy;7b4B(>+|CG}}W)&Ky&^&XKnli|yQfFIgU+#5ZlOJcph8GUR_Qtq8k350`B6)RgV zT9Xv8wa%RaXAv>q+i06Y`d<$KD|j}OxDkp@;X*-VjuV6x3Q!MtLstzTkb=Vi9kg>6*wr6=7fo1&7KeqZWhx#Cy@GFx{ z$p1B|RrnBJEon_nM%$;8@a4>?=shKP{|x^Rx9$TY8Z%l&^|vd3+1DKe;x8@#{w?A- z7y}C-`EL@Q)D4Yl=zpXHaXcaa)J6PPWbywr5d1@xAkk0z|F$hc+~P0sz7qdtdDn;% z=F1De{a0=A?Z3Sub%U`G{_j5p3x>n~(A9MUht0=@F4%$#o%`a>^~0^+{uyq z&mbpqW7&89MK%BBR5E+N+5B^4_5V3dTRj^1r5Am_C!?KLbG2li$y&+@Nk262X2I8LF>Wp-;Cjn}(b37$r$RC^^V_36!XoW}OSgfCU^HzV`F+T( z_UikJRy|cknZSjVR!g6f=cnyB!Wy~A-nUMsqV37tMJkW#49Cl-eMO1C`{a#qN&@%F zmoRa96}qOTdt?R1$_m%orow{z-XV(oB{;B!Ke{}M+-$#+9`(k-l+EzeIH$GAk zx^L`ofdia)kz=ea&sg4jOh+1&9#fFGmvwNbJy9i!vkL#(X|H&YEsFbHh>@u+kNTe; zyF?sai5A(te?P!yPq$p_=gAz2WD`#Q(rH_+Gvg?xr@+Q9S4ctYo;U?aQZwG|CYttF zn;p{=qeNUW-mN*fp0D?w=|D*`1(wpt?O&W_YDbKs10adz@l98|!<83*2i4+5ovn@> z;vOFPy!+``ue%00niLa3GPl;2VaE;DV4m1HFqRkPk7~YCFv>d z&W-n{CFc2fKxoS#p}pOflNFDkl6tMUsUInF%8jl4)A(l1NU>$D`yx8}=UIFw%N@}} ztZa}?`Qy6>cQ)D~BNPmWpJK5^MY5L%J9{zb2qr-F$0r*t(S4sfByyY)PB&zg<**&h zz;#aN1~XyhkKM9ZQlTNEY8*g<<;h(usy}~n&Q>*4ki0D!co4I4)lUl%K)1WF_l^^s z*2;v18NBV`9e}`WeDPt*who#$30{U>jRFib$E_&@wu~c3hQ~3cyOb=oRw}0PF}fNw z-*I?uKOX*}MZ!rl=eFIK&}iqNukA-% zf7H5J$S|eqi;BbPy)8mEh65_N#%vLx%7lstvqr1$da0B%pW=%Rd$23jVP`N21uzva zQY4FIV5|Kwv$~O0?JcYgln@8J3j-hb!Os_#tu+L2q&y8IS&EyA7`-HuT1)(`S@2ow| zZ8O+TvZ7^X0&TUv1mm{L7%aHkcQSoLwGiLKK9Lzr$Swr;2Ca`0s5S}Xaxi^$sIZNG z-bp!n^WiY*Y7h*af71-u;FW*id%pFUmq!mabx~RGIAUc~PkFA-yovO*9()3Cx>iZM z+X=tBgZ{8L{pC3>c#hA4rh6~Lw{V-d4(U%n&Dbh_du#!xl!aev%i;bCU>gGxASi+{ zGbok8k>>Ei8E9{(a1Vy(KH?^;JwF7-bZ*04@Y%AJDLmeuAc>432NSd1XnMDtW8b1W zfoE=>7Qq*ZW(Nl4c<0uX$bjkNqRkt-t%Hi!(}yD>|JF9!ysv!k)v*br@S#hucV*;5<&oQD#jWMnSS#K3 zLsj%(f;xl{67Jq|Biwb~qGtjRt76ZIcP~b)j6i_Id6P)kze0nn{nX2882=NZx8%IV z&01v}B!axxdCdLVKdFOU>Bik4r~a?V{T;86d(ngwWSK{z{e|E*-UBEHJ+HhwU52+u zYF3|6Nm=59>jMt+9*Po(ueAtcMU;*L(e01;I6Q7AfqG_uLixo{6dXhXbQ%4sY|lK5 zE&e=s{1TQ1pI2vK=3=|s?)sb##}sPNhvHxSuo~_m0gFBZgLP)pW3v%sY}t-FcrLE4 z$Zwj=;3<`x;{6aC^_yLv0s0mp4*6<}scdazAo^szQZ!Y)j{ytt77f>wKzj-&WQ{*& z5K=&tNHzr72VNuiqEcpmS)6>+^vuxIAToq%fnWC|dZET%MysMC(7!U=Q(o0oXa*Lq zg08x{Rsm4k#?PAWEX?2G$J$4)Bkn>1dF~po@uZ0A@)S-3Nj-zHm6q!z`;+PXyr9P( zORJ{CXP13`To-y{89w;LyWNc&@|qlc)!#HYB+1n_eQzepRhdgWN3+!!m z+&^Ah9P#}tT)Q%3LbcR>hdrrq#w*30Zl(Ml7d1)-tRxLr8;CNGVY_Kb1>g8LKz6*) zV$xCRytjM8IXnYA=k0w(#8_{6OY;2DhRzCI^1k!YfcUC8G=q(hNTFgi?$4q@jB3U~ zsm-0OPY|?N;Gu7qV9rh3717e(?|bs6gMlV>8f_Gq>AKNVV~T@gy0QnZZ^oUv4GLe~ zL~S*&`|}^81z++VSi=-qoJ{1Sby+Flh!FA)&U9QO%Z~7 zguN~%(C)(Ovp7u>JfAU{)=T{34>eNPefpisi;%T}6z5*GArQ%NDjd@D(T6@FUJ1Nq z27DF~kfS%17~hDtAU-|vK=7lf}Z2qB{}<)UD!FL0F(nrm(-f_3XsA*AD0SI8a}9%F?MwV z;1x`SJ}lS;1g7dXRLV&!c?!Z(EmDU`yp!Q89p}BW_Ze3gPU^SbDT87z`)hYCUJk^e z2L4dr?+o@%T0h_yJMP_Ekh7^4CVN&1s`LqY(fG=M)yRG)K&y_x!Vam9Mfv_zWitkn zYP6W(65@Ek-Zt1VQ3Py`;NmWm*C&_zqOK((ET>~B3s%jq*ZQf65bQEhVq650i2=-Z zucYASQm{$LClt%wWhe4MtCz2?ptsx^CW34`8wB6i&|sO7 zcuXZ=(pFm=_wJ_>TIr?g<16-zo}0PacLY&dk1de+qs_5M_DSOKY`;a&Wqx~JVcQy| z`>63={2{+6xVHQi5Uz5)K_nmY29G&eXZM<4mVTrZkozp#lA0_+NepK-`2DCw=E1T=fIH51(OTV-!gay~ntbL^n+q=WC*J5p z+(c)}{c@Awem$#|TXPv%@#&wa4nJ0^``_bya~hhjw#Fx+z*##;3i<4lE*Iy1@DWh?JsmIXS`%IGFh}b!8y5ieP+Pv;G;z zfbnp97w%ly|LyiG(%=hc1?<+#DQ>9^_Z#`$Ry%ileCx91f$~vlK5Tl;ahuwO>}p8( z*R~07JB6-IkTgXsczaeHmnyj~p$iAnUc-rb{!n;VYOu7;ybUXP(9=C1Uo~Ntw z*lGzb2_Sn#?wQ(H%v$a}%Bz9STO}a`sn-!|ZQv9?wgf7~_&WPmyBBq5%q(BtmDyFZ zmk(F5DP2ZrMEbky!i#x}^KYAS+!GQWrtryA4We;Ryr%3UEiT$gKxq?n_k>YR^~VN zj`NkZ6=_ zq#ZobBno`Of79f+uCGKxY$G`nYC+(_k`oHkvY2NwN}+-N{x5(h>g`ay?`mR-hA4?g z_FP29@TT{{fh9s0HZ^ zFA+0c)yN!;>!6{|#RW2)ir38{sc`*Zk}65MtBj&u49UJiY?v2ca|zcoDckp5Pr_O| zi28G82gHSQSrrz10jY?Rror!(?%)rE;`I-QeP-yP!Z_Lx!VXWlzvq%sd`Uh!VG4X| z$Cr(YLGjHbW?`^=N=L=d{3ZSaYhq8dufHg)`7>zSP}tOvmP=F1;hbNf6@0RTyOWq| zV7u#=4Mj@27s@E)P%|Beg&sVy5ssv1R*RBHImLs710tEB&>T{|tQO(7zXOI2+90CJ zwF~@Ye_I`crHNuJRQf<>dPfY`|7kxOG$ z-vGH0&5UAbm(WZkZbEu`E>ly1n0*ZO!)7N#$l)e>4INJ~zinC5>X1ycVD82=mRU`v z-O4-Piju7PQ|-ss3HEsz$Iqq2l~V7Qvv>d$Qj&gk=pmimB@u@gp(JWX6uYzUc?=gM zYAEoCFaiDQ-5oNeXr4du4ok@ltgxu}tw!`6m{(sDPc5pnLp}8MnL*c7b@y|8K!l>X z)eeM1ZX)&%(W*u)Y@s4GRzt#~o+;!_UJ9_*{^U2$84@9}7U}N1heKPT4UN$3GCRPj z9?t2W0@C-ogGnVO_#zZRQ%Oyco#q}U_G@O8z)dH>WLH8W1Xxe_7r-0V8yMrFDg5?E zaj)a|%#cTW#p8FhA#OT4d>}u;a@#HS8kuo#|JA0*Yto7*K4rR2bM%m*;N}X(t4CaE z&4OEVR$uD>qH}Hp@5O@ejL8fZg?mb-n_3$qRHLDLDQ@_9tgZgUw0RQB zcKY%{Nh6}@92ITmJ#oUJS`tqAGMivVV5%OT#LH{LG(Z;dYDul}+!KyB&V2eBn4x(` zwn|@wHG7GexA^Xw5}}qmHmQeyig@>iTX6MyeO?NSu`b6&DBvZ4&lCM;Y4f7phvsp_ zafJG{%30p`q2l`D5=l$He$wu+Nw9uRe*gxi*$+ zl5cz`^u^x3VpM5TU^1M+Td3&p{+wuUN=~lKYV2)XeaFdoQ?xc7Sm*mD*l5RPz$HuBiTe5rz@&iZ7PStDb~w8imBSDH-ORs#PLw#lx!&14eV!j@VMM|7CtbpkgDw?z?GhrcbQ@*16ZzSY5MbG zG=fte)9iwwlciZ;`_@#l)0c&6x!uT(i79Uwf6j?;>g!*A9G#-=3j;COwJI^PIZID| zJ)+>6rL3y=!b7?9+^uA--5SUmKWevobw{T?M)|%LpB^wvjSK{%H3nr6x@0s~*d}!4 zDO@)R5b)P0w_v+CO#cEMT1@XXVsHPh5i==u9^Uk;B`u4LgjZEOo z3BEGieS~qfee!$t=Fw-ME-z13w7+&mrz;Vv5-r$1D4`(Z$X?3Fq^w~pW+ll~+Mhs5 z*OrOYx5Lw3cc?D=CO{|a5{-IB)T5Ic-A;P@sSP2Mgsm8h27rlYLl=RJq--o&yFVpa zwHYFM{KvmIpNuKF%INg;S0NIdLULZUN|Q8~!=Dch4#;>sKYkyWi5uX)(IG~>eVP z7LL&EL53WstKMEgjh~S8p~qRBvEue60*}|DSd5PR{IZsY7N-$UHsN@QPM|*o^ddV- zbxDLlc`|V*aa=BYtk4!F0iQh#BzS&n*_{{p?Av?2K-7%!4&FhSl~yDE9vzO`DPN?T z#-H*G3gCA)0j9>rp-PxE~aypq4K$cw1NVxrc_htHI$tfX1 zisBO=eh7DU_|-ti!Dbozf~uz+!OCcVxdNIc%`g?ypIz&W*E&kRus%iHwK-8Q+d=xJ zRJ)BwKL8Wy&(QJbSOIki0&p2$4gpNUynoF3T{vuCfnz=wP zm>Hv%v;vCXi=i|Wu1+8!W?h4BtPa%>Ga?X%14N}2QkLtUHfMV(3&#~S%H*_AyH#v5 ziDX0==y@L39Wofj*HM6iL=n0SJ4C|(h680bgx5Q0sGe8IpO>@N8;VIoQ|J@#ym~^R zXtm8Il@wdnee-G@agXGrwDL7#)yL*l+|3SHaW_X2_BawA+bQsLZgW``jEUFn5l_N> z5GwhVPr5ZvLw&kw4Mh5L+#{x}9&>Y;i$!KH)!?>y=o ziZ_4qB!!YfQgCW`n*;>JC8(qR!WlKPgwha&gbQ#7Nl(O9&A~vr=ZL3Pr3V^maQ5qY zza7K5e;vCPMKLs_y`&Wi#_bm2%C6db6B?xswwlqcPeW&8PC{3aHr0bGgWoHI7}l;` zCvp&F!e&24vFghgBeSg0A`>+%ekV9K>k2CQt`T~oDI=$_k|Ei_wSFigCY9m-Q4V`> zSu2OVJ@~hrl8}!WwYYrNH#RMK`=7yw2Xs}oS|SxTNW;O1jL)$KO9zgj&2gc{$t*aP z4y)4ExK~x-%zG%w6WQO^^N_a(8n*sCW4G7wCo#I=o;*KSHv_gCErS=$XVXhEu^W#Vt6lW5^rc{pV_<1=2{8{@(A67I?st!%u%kAuM&SHj z!(w)!w>#8AmMpQ!B4EyZI$Cx=K4kL>qqo=^iGVtVQ6|)vx-Oew*sTU~h_AQ0bGs!a zT~t}-({3X|Omiv)|B8%-5AQaG%+qwTzi_s|08P1^qs6NBneQoJ%P|mPOGlj~!1sBt z3F~srGhZCtNp&1&gg7@`ik`ku`bo0vI1e$)>;d$p{pym4_QYrD=gj5h5SIMDVGb!&&O_si3pk+2BlVVl`?U+pNG zj*is$qtUy*doT%{1xl=>Dmzs42u!LkaF1g+GdS61kzj~2>j_aX4q@CAn2YR=W*{z9 zmKS{n-(bI@OfO4%T`h2+?P%{Gs$qVmq5?f$Dd9;0UA=Xr@f-wIMKIk@#%RP?$W!7UK(<)v;+XZBd&Kvq(0{21VFvCCo4kRMaK1FYv zjU@0o^iGA}nKT}ws0hclRur}ulRFkk4p$00f2dofvf4ovE^}bL-O~`0&r5FQs-C9S z+%WcQI?>xchAi^{72HjrP|fI-yem9xzrAN%uO5Pjd$o`9rQTgFa?U`;)6r!C=IUx`Crd2@h%^}c!5`p z+BXrBp#&Vz+4}Y33&YGqg#c#`v2h^Ssd! z-)b0h=oZmLP)kv~*Mn9TKA4-N&2@V|aj+CEa;a1bhy1vu)|)5T$cXV>A56g&)t9hl zS!8R{&eIMH7HIQ(o^jqFV2bLnG*Il(>LuKf@gYa$cHZm7SCinWONvDt$2>owN(*)~ zJ!T{7RGTzDSse`FZubKVcqX&o0@j=f*{r(0QUo*MpKY1zLLZw(8a%f{Nd4hh=6E9V zjCcz;d6p1!I~^yZD>(J^cd)Y|-8?j%alwHdAz3YP2PT zEtcP#zg3&B4y&r#i{0;JV*ey#?S0L*Hat&h&Wx!7EaaZ6YW>9wd<`)ovhgrK`~wNGBk`6 z@p*)j`ACK`{Kix8tqYg2u5Wm`TU{YtW9z^=dO%+mJS~4UCj0^ocFdn$Dt7movp1E& zm+D&}F+a(ysi`i0@|WLqj$ZQ)a@u4d*FP!dar-!MjzFr+`ad4of!JQ}+m) znww8nE6V5*wKwHr3%9-&&bTK)f%oB+6a|6s+u0+SbR`Ppizv5Kx9@o|4)V{~tWQBA zg3D@i3qcB(bzo&MK1_)IJ&a%388^cRtKr+?x%Lii^^+A%ruWYwZhUVtKrK{9+3=*a zlfxM;c$lTy=!(~lw+s9QalWQz5uk+;*hGEhp(Soo;@G_0=Aib$rPJ)I!nozWjdmeB^e=+alKcP;E`n(glP8Y1i{(1%V_%X)EsN&r}#j0A83r(3(z%jzZLJE8%Rfk zAZlo*7QVmV*b>TY z4pJ`V`(|e*;|}NLjTQ?QhXV}XiDC%tm{GUYvAvU%5Cx8EY@UK!O{--16wwwP)b*Nw z{=M_IRmQy+8xv+1#i|wWWMt;=!Du)AX;80u1zka4cJ!i!I`bQuSY&E{kBi>5 z_Wc)r9uiI3%T0%ZfnMIFi~aDNv&bW-n;o)F0UW7K0QVH#EhSScUR@gd|@^!u&vt!v6-U@0Tdf7cDa_m-BN2rHIhS;IDb9%{Yvy`aND}J#CQOV_Vz`UQt@QrB_M@JHwl+a|piV`p5_-Y1f78|^z z%&kT4*g~6qzEI5MHVg&l{l@@@dnM$lGzwQ|HE7mhNaPHAO>jKuuusVh@h?hUh0Nl_bTdx_)d)+0kTjVxb)vUh!&AIKjOy3~3G)t_i zOWV~#J#>Vx2{!?UTuhvuXdSzeyHb1cs#FpS;Gy^!hrAo=n)d_nM~Dbz2ZQdu5#rw6vTDsVR^bX&)u0~ zwQJMB%rP{v7OZo(HQ+XHt&1-ZvU1fql*zEUe;)y6sm`NnYdSxUF@Hf_DGEA0+7~V; z_Z~ZR*`7lc>$3Nr?NnSqE;&_yme0axxi(w%8#Jc|FZtg*A6 zvZrOWA8i+-8BRFk9B2mKtc1_cSkf%?X1;i6&U|5cB<5*TmrvCp?#M7G=C{M+B76My zvc)V#MKug)HlWeuuo+;1=`uU4^(-cV-dza`Nru$SRlAF;YuAhvTaVNb#R8ZvHd=3m z4_1XWGu`d8oL%PGv9KtBFKuvgRfyH#T2aa_x*w;0ky}@m06C=h&o6V0 z6hz<~xUuWrYcE=B1+IT4oXO2ueAkk-Tlp^5LI6TMPTtA4!g$5!s3r4#1WN;qjMaQD zxOjs5?qS3T7Md~J4aJBU3YwC+x#+i}p3SAv$IkC>Ddc%>&@C1bh5M7t(G?b3@MgmF zFS|38SF!0iW7PBB735h}FoMJkC!$}|(+12eir}qi_8!J@H*Q$x`q4#i72lcu+Gj#v@35Gt(8^ID=Mf`6DwNq7I%D}A~B#7 zX!--SBVjv3(mAZBm7g@IqNq zxU)}F6;%VQ?Ez@#&nn zX`~`1nZm4gGz$*)e3u~?pytoQv`iX);-Ig+sU$#XjmC1p)y;xdE=*#o7pX67$?kz#0I^-1B2Ol z>w{Qo$Ss(lb!+JLHv=x$m$FrT8|NL>WOkoV+H~lnMT*)}GoU_)V7A7m(`q>e{ka8= zh2y0k_p6p`NvLS(I~v_2BNP}Uq?~7}zH;hE=#7`Nae-sWG+msHPIwyF9N@6m2g6Mj z^A^jPV>orj8mcvf9~LOt;}KOB`#Gz_U|Vg^nn_B^+O{3Zy{WnjhQT)SYS3~WJxps| ztdMqqNjKf#ULSiJDs&5VS&g#W3dZaj!(5@PnchYnMUk>-#|=_dYdMOm0dV@)rNO1e zgot@35wjCJIfw??`DSjZfXys&8SDhlOWLACZls!WGi4&@97j3N(XmlwqUAy-7I^P& zN$V5!`lEbAH^E&l^vIA{#}KYS2p%T0*P~G^?`Crv{tHbMx9xAf4}CW?SU;#nRe95E ziKp383Wk!VUWmONVh2M){T&ZI8qW6H2X4G^PU~Q0g49$B8b1qzy;GOZ4LPy zGoG?qNX+K}DAitEFVIijto#KF^*k()4zhJ_#xwxsENQ#R#Ok*PRJ`f%Lyzkf?{-o| z!aU$*y|$mnf~Hj**rF;Fx&2?@>3n0EQwC3c?;h#W9@pC&31-zcuGWU41GVhr89JB_ z;}wjzObtjCMfO>Y;Gqh2s;p%Jrweb?9rpNHz(v_bXw{r4rL}epliJPi#7K)X*e^*JxUS7ZSDVZz5*NN_lQeY4bi1v5X*8W20%c#HHSP4@MHd^bV zkmSuj;y)fLU9ED+;KVm$o7bYm1Ci8FBgdwNZp*luq2u@SBV(}T9Gw-_Yw&zx!alGu z7A|awY`iOsyhERQ4#N?04*hM_zi<`Bf`hmAf|s^yVGd|FKQj>D=Q0^Y3pAfD6$C~C zjOaxG!yyr_wIEzJMf3y}f?2Y7IM`Jt@trMgC#~iVx0kF?Z7f4)3N0YPVHh;op;%XO zwO*j=Ojpr~>m2Af&Ut;V5h_I+uD>jFj;|-+gNh@gc1F9U;PuXpp+~M}ov3z~bBspu zKe6sMaOj$ZBD&bL#TID1Jw{J}%n2tW0O&gOF! zB3C&e0+S=aMaFM7RbP=Jk+Qn)@pRFMSVbJ~=K^ zr{lRdh1JWQes48cJ~c&7J;PP#Inwk;sDu09_+Ay*meb^TCw66ub76}X1 z@*BQ(rCpKYnJ=Bj?T!^LkCsqm_0GJ_CNcpICDK#T=GZVqOOqw|U6;0CrJNUdxVI~c zF!9x&D-!wv-R-C+ebvroP+IR3q|E-tGy=uVXQ)k_waofm!}AZ&8yNEe7>3QU`X^n( zlTpwXx9-?QHf=`S*UZdIC#87I{1_o=^R?mxfly3$c0f>2AM}=-mB{s;f(XsPCm_*MR6&E*#Wmb!ljw5IeRg zX3%E9H4TMM^P7?Fk@%b^|7qe+@FBwVv?iCPuEq=gIM-}7ch5oXCXpjYy{k=gNhwIH zHE=tcz+nMEP@~1zb+65f>!36IQR+;Qj9t8Vf5pRkWRtB0)1-k+>46D7_E*=S1(-aG z3bADk9>Eh;+NJk$23-8Sr1gtO6* zl$^aEo{&aYS3)1AGPTrmNSoDVKWO4@gY$`&oBR>mcKK}drrfU%CL7K11Cj!He7lGm zt(C-E)Z+9E<)%P{&COc+#=$Zi?i|Rch%$-rgk;pv;a>V_UW^auW%2k$pE$Y-?c(?Z zb;RPEAHn#Se+^f*<{+OIBf-gl_WlMv@!fJ?RlhQOZQruz1oU)%@EBa}j9r4ArLkYR zbol8r<$D)7KtYicmeNOCdPM9tphjC!%A6{vO`zFR=LIndd+zGLG9w!12vpip3Q+s`=7(k0227y6JTVEl ziz^VzT&l!k(#zaW)BhF$eJD<_Oy-B=*@=&VfpLCO;n&eEOp3P`O~YwsKECflU0|r(R7xKm%QNceflE8kY;o{1N~TC?>E5M zyq`HzKQ>mhJ*ui4zR3DEgGZeg8%yGr#DE%#`{}9vW5?&1sVs08#gT*A=@A;Z$SHT- z?lt@=YmGY`-33IHs2%g)=x~F7!t9c^^3>WFyKbaEFI~UHYXIzu@>z3o#WpNd_hKVi zM!I2Xv__Sxole(HPT{i$eWLA}Z(L!Z$!JLtp9GjNnR(WteEZ+_3~*ciiS?#}&rAe@ z8X!N*@g4t*&L8OxNpn*DvlBxP+`)-C8;V6v@v=$}>S&S5?0DVda`6*6upo!^N)l+! zF3L`AP#bQaD@Y!VVQI5b6O(b5$#T>BcMEX8I|_(&pk@w6w2=!$a*}y7>6q?BstTQC zzWDr_%)M)*D8oYbt}sqHIa;(X?^C+ZaJOOA!0GZ9LF<<;cSRu7v*x9Kb3mhp?cUZ9(LE2(ijS+@2Fd1Q&*HCnNRD1} zOLh&H-(h>4J@^|Ik;=zdQYPT4EnYC&=Z!${-vV>+ryo~zfOOiOvP-#&+Xton>Gy78F5 zXRS5g6sk7WnrX59na-~E=-ZD$^OW~gEgsg6HN<|tKagZ({pu?K|Da{)b54Wr>5C+~ zxSNazTDD`7Ii&NSFsF!9CO?<*N-77!nWhkoXEJgc%pd3nV=yH>Jc3_y*{85a2RrOn zJqMV*>m7Zk@Zl+X2WH^w5@?r*`tNv`(1n z5v=sECqkaJU42>8FphL{FZdpwFN@?>+;+9_z05E^#O_T2QK4K}YLkx$*{HsgbA?*Z z6I5SjTDGsQ#6J!%j;G6@;!m#2E^g9zo^ESt|od`gVLqtgWgb$!D0_>x|Zev_VO47G%I<;{F- z)JZN6ee4P3`^JKNQ^!Cea7Y_b>M8`}#=Dc&m@H1R=DX2thr2z^nk+LStMW_KP~jYN zIbxa#_$E)$qsrHt;S=CC8}4^rxL=hWjS$7Uwx)&nE2%Oh~#R%k+R*_m}@ce z!#`aOTHF&iLi2#fga78$in5sp=Nmj!3X3g%H7Jwzs_xfRvkr6#F^u#)liA?{INLp$ z@(Og#^dmi^e2x`PQwdDw+}=_J&d9np+Y)SW9usA8Zl;-qZGR-bYsLSM@=)gy>Co2siZoqJkTJ^R>Ra#`(4XI z`$4vXF27M)<3U!g47qL%2)eI|DbY76%Uf^MGN3H1ymzgz(lQg+e72+-TeK$O;`yZs zzj6xwvuLz;lv(=Bqv9!-_Opt%zY3U?XII;vN(3r!(rSBGM;vLC$RiH1%i_+jGzQD!!Hp*0UrY%BF7bFO#ibw0-ys zJ(>CCoC-0(41U?+^@*LVCqSI$-;MkyLSO(LG*MKfRM7Uf5_V9FLsAhZ4=ysHL>ehw z1kByOb&kban;Gx=47b6l22h=K;?xFXf}v#kLrYtFe3#cfjP8)BCjyht#S8EDrxqr2 z6!c_p!%2c8$pKIPO^xx=%^lQzGbK_Uf#r~`K#g$@YfgtKx31;>I0!EzN^~JTNW0*}k4rMkku&Rd z`?8irf1PAThN)b2<;# z4;Y25!T!T)u@tz;HnH5Yhx?J^oiWLld0mPmmgO0db1E#7r@G~jDvnP?uOVE66pLaT zw%r5ASJUwT?!U0~i9UbIjGNP!fXnBD*M7)nj*Kg9UX?x%`v6#9kFQ<*4TZMW#b%}0 zE=xJNI0<{E5ZlQEkFx%xLEiY(J1JZ!e39xW(AM1QH zFqlP(nmE&CC1(i^Cf~omH9`@l=~CVV3RQ(95}o{Ug8K_F$#+Cmwi0mpaEh$X6IDC? zy%KN-iF^be8ZuMjMJW!S-Opdk|Iq&q1#R^s>C5J! zhOtksO}wR^{eNdLAox*fJe>vu{MApqU3_!9)!(3)@Bd7mERm8WDZxLVa6E2$3&#J% z_x&}-jufK&{})Jzh#j5wzwka`dRWr`j{{^%bTR&4C?Fzst76GNdggCY5HrJqS^sKy zptqYPoL>2F?*P8;h8WGN@qfkqxTO5w@G8i_|GkB4I%_NnOwX&5czlog8KM`jDi^G4 z$1U}@hQB_KFu(twA*-mYYU`NvzHl7;Z13REyScduY=w7@A2rjrCX)0#^^rg5<|2?q z6RAhvWx9XfT1+mkM-|63MLoC_mt+KSJd^ zxv*=!#hqq(*0+gn@HS8GI&R)Ca#Ao08vpVkH=fxblwSF6MK!iR`(RF8F)(IF^ak7i z*8M$iSvtB))?alvE1xxguOVv4@4M!_2{B8AjF*^V{v=X{Z~NMm!_HZm^y_($h1~6D zxSA1jDr$UXO{W66VHM600BsOvshFoVpOPRh>o z`)6OfGA;1O<4py5v9~RG=?A>61+fZZ*je(HsbRKNDS z*ns*ed+-P1`pV5nm0!mqWsVaEg$=T>1& zs#)EHF%^Y!uhuZy{wR%2pAUhlyDkP6>~YHIgEuU*%)87Z-lLAOjys;I_em%8%ASl0Ubj65q<6V_F_j^U+Jn)5H=M1;EAZF zBiOWQJNCDgmiB_R1m426bg3s=;7%rBo!F0vg z)h+c*mSm${ccqBD^q}Cp?6^4{jKZ{^QDAz?fYd)SJ5M7I;xh#hu!31YT65{LUCPKghtu{Z?Q)H5${pk(wXyVzH}u^0O~_3LkuS)oXZk)b~X*^$vJc z$|W>T9;)Ex5i0$5tIIeJW zuN=usiFD;U(h8K0d=qM`zFQck*xM(G5`!U$H!vbo2n*JesiuF2#8tUQ zflB-Mu7cDNOmB zB7Irtr|lMeED=c3{SNa=e;Eg6t=$&Awe}xa@XZARpI7*v8C9J)Mdrs6n4s=?j#;X( zSN1e3-&uro#HiI9Uw{2Df*(L`x^fD`IcUJ1{k z)7iTm8K^fpVCQ=1M5G!0V`EYsyUTQ&O1}Sv-&Ih{g}me7*Xi;jp`Zr4{<7 z-l03E9McpY7DkT)>yk?ZDp%;@?sck!6b z9g=?wEodz}c5+Wwv`;`R-%1nva>^aW)$RL3h*u|m3m&|ByK%0IJ^bp{I)u~WJMLyU zGOA0*b>vS?F<}?_nqtWheum7)uglm7z4@11=9^^{wyi~cjnz_2r9LPfiM|~8wzJTk z1m531$2Z|}8X(IMXhljoG|WB5vVOGR!8e|HbHFE}d(U_l&kVp8HC<|Lv(~&D;8>4CvFf1k7?+xz&n+|ouo*?-V4c}zI zK&?yx3NFQ48Q-gR+{f~{RDjv`fPtkz;CCY@+9mN-Fsh9f3Sm*Qhs+f8+|WZR9^&bb zH=%c^+|6W}3ER$+>&T7`aMaTy-^yljqY2J%?KStdpu!K5b#keK?frrtT!=!t0R%Xd ziR4zLAz=`x5o4zKqC`op-so%B4-O% zbV$a8Z;})5k{HN11@N_+cX@DN+pPvyuwV5~Y+V3AQsjQ;VO#+g)E2_6zXQAc4PDe%M6|zDegul)ciDf6GZ0E2B}(a!2Ywj|NkJ45q_rcE|1XX7apG=7 z`0vvLxQ_o2&;$7Y5h&0O|MwqB&7tvsg$V-lAA)fGeOW;i>O+BRA3PA`=H_OIykY@c zL--#KDIUB+`5M(}slRMB+Yx{x;8zyEUA7~Pr7(y~OGl+UbG!Ea!%EU6Y$)G6D_mV& z-SGJMK!?ZO^&pO&{=sNcsdg(fJU(yO{k=0V#MJ0~xvsqHTu=Z{rbg{yzi{aTgo6fo zs1(Bn`7a+??US{k+K=80x*eDW;<1B?R7!F2@%~3Se)z!CI0vn2I>Afk!W$b|X|y-c|qruXHfdLWT_v?O4Zs$_y9te2c zu*^){j*rK+Yj655!r#&qcjP9^-uGcD}z=^*SG zXy92Pxmz%yb6{2nr|NOZVM!xt&$lbp*O5)^a#s;&TaqCkcNj>{XuY;iLMSCT{y)_# zSR#9L5d0XwHLL{5_dtYh76N&R?T- zz81YFuIGBo@C^zI>XZTIZ&jT=v-CD19|TatTVYC#RCp7gIr*T;*&+8mCpOHKg>gosWoC*3V{;iuF=hoHxClrG8AP~*D zJ&SV%=(E_<-{8h6+ZZCA(u8>^$5g10^=ffUF_@F9E7jw`FCM^G?`)w9iS~kEpc@Y2 z_d*t9m;&HkAT#;w(lD}J1&YE@Y$I2I8|5O_m_-fkFYynWWUb||<_S6D-a+Gcu;W{$ zNDl>#qz%i20ir*|j7G0nQ+4RSkqqgn{;L*7DO?`$NwL>4lPm-JF{pTB)0}$_13{$! z48%^~C;ljd95(CF?fR+x7$fj{T%g`!p9ejB;Jwylv%u=}>Wr3|F=3iiKU*k)vfy<2 z^ma2XjIeW7)2(Vj6AF(P(MT?f>@0@)(Qa>ap^Piri6;!c9=JAVD+lqsXwnwxc*eTDaXaNR|4#j(QOG_)9?* z7Pw9~hT6SW)cI9csLO_Y;eAG|Wtk4+`(v^?6Bk~L7rOpYN3S|7FV@qfqv0}2Akq={ z&sK)+kUYDq9-nNrIPW1~g1C2eWv8ot3Igk)pr=LRg;WGRuJ#eExWD=&Ne%}ojzj8x z_h8Z#HIXiUFVmFi3yv#O=g*|Hd2{Rq=RKls1oalLWB80rs5b*AYA3?Wbvsp?HRDv;71-d z3j}{`eo++=KCx{Y5+5bt``x8S2=ds7^YzxprQKJ92^=dc;p$D>Q9hLe3GrLsT zKTfsB^bkzp;L}f$s(M)DNZFm~>-W_>C7 z%{_h_eDkt%$GL+<@dZ8<#x@oMBu6|GaT(w^qHX6f&fV!=OT-X!xMm<*=`XpveCPLy z9-MTRs}rb6IV=F(%xS7e2w5}cj}ub7=elQRzEF>Kx?mN6q{LCG{Rl%D`R^o{4oNTi zT^D#}-wG)GT@MTl%uKNi4w~^;B$r9oa||BOJXp3PYBD~bCm|OXR#{n@rTKtF0(qX_ z=O41$Au<`eptqEoYrPas*lr9#DP+yY%P4$~wA!=p_`6?i*YC&GsB>dvt2;i9*)tRcaODetk39*H(g(_@f=QOCqo zJFu+Jd@Q1+OPEKddNmH{CEzeTWC5)u?8Gqjy9ihqi2FNBA9v)P=(FR*4uu%5xTo*@ z{!}Jn`{A|%Dvc#S2E%bQl~Z%s^U{wXunjzCNkOm`w##avJUE@rs$BaPjYhTf%byIp zE(N#iOdhvt=>5n!EV^rJKLoX<>HxFD?hu!&8o=0zo8kQF7x0IZh+esvzSok~-N_l0 zy4xHLbzZ-(ZH<@V47lK|)^P!`DHGy{85K7-M*;<|d&QK?*W`z$bVKQETH7o*h^T^X zVLK+1&|m$x>y%>S+_!z3Q9{Hv9JHk2!TDYxRjc(vgHb+1-2C`|wmgei54S+@iOUYG z%60pf*b9u;=DNBRKpv7r1C1x7nO2!^TbhIzX9BO_+zF7QCXAOOf{(>nkV!<8DZ(}x zaAw^sP3u%N%ooNNtG}t2tM$6O+RUB$f}p6cb!+wgAw!n7@1_LA6%~I;8d=QbgVop9 zE64d7j!I6S2^BRV7;HX=);hmJ-pfk$r zONee(V}2~QPhb9VhV9sAS$8oLh|0_f4w~%0(e~rRZ?6z|KIN%A<T$3V+01Ose)`DpqDq0E|JHc9eK5&<`@Bk_5yC0hg zZ8m3|Mc*6ROgp;%dYQM}NT~r(5^&-(K$*GI5=zVc@LTHLj;?pZJ(Ty7J9Aem7i5S$ z>D?}@#(j@?_w$TfQW(W&n1ZVDPbxcj@j?I>|4f3WzQ3zg0W&ZX@Ht#!1#|*jz+QnM5JCoW*Xa$RB-8o-P`gFGa8-K zt+J1#p=tL|U2K7#5(jvUWzk_gf5>K;UZy;NffI)dZxl> zyR=fgFh0FzvFi&EKva9q( zsi?2No=nNOzTD^M)U>z7X8;NcDJf@4C2Wj4O5}5_fywX@gK-G3JABAcXRs#jUh5}^ zl-eDfsn?wEvPGfr(t~TvaT)!#sskRl8TR}vX@<_2(vQ{50P47+MQ<1C2kej)CS2&P zxE=>rexL2wvD%xY$HshnM_VJb}H>@L3l+X(_LJ8OdGt?ydlIGm#Wt-jOg|B-1A$GbSKQHp;klAINd64-wBr zZ82$8nd}mKv9)be)SG&aoC$MT`c0vGQ5XpqVNuZ|>bF*`-a`L#0G+!a!F=pR0vxEe zUGjgxAtMJ&T_~sFfr*M+aV8i8GoDk96bVh;7TFc(^-8z&NoOcnmy8I}2MbT^|(L~Wg` zYC_itfaWBYb5Hd<;^GA)A?ruP4-3vvZ5$S@Z~H!2Ko9so3)F1Bo$J{+MF|eZJ#QLO z=$A|^!es>t6%xn`ELPkU5{L%@_`Vqm=s&(Bbu_k#sO~Hlo?PbKO4eV8HB54PpnK@3 z6W`PHyBlijZw^DtFz<({w5}VZQ$kb!fIr% z@kMIOvjBBpw_Qo1i2$I&;^%ai4o8AVY+dTnj~x+uGWDhj5X>aYQj?13zT3dbcqcJz zh|Wjj+iC>K>T2k^6DFBmnK-Ue2rDC<$>|Xh)3@ah~^7n1A*2#9cDWhq)Vq316H&}Mf50UAqouJyaE8+=cqp&BM z#P9vee~Zsw!xgZ7Y4GWL1SGDjcD+S5lV%xz{#p)Q{R5kwVPum?yl(2wFHLJsCP0%v zb#gLn2_R704_ok_x6^fE5|zr2?J$mpY}L705~M}nl4bMqet?p!4zty&Y()thBJ>lN z0K{^%k<9#DWnGmmROhnD2ryUt7{}$gtydb-epi2r}(jqpuQlD*_) z_JS@_iLVMFu)5De%#Nl0gDqC(8E;8;2#|KR(kMRZ%i$~H&QrHhvfgs+E{b=N^``Gz z!z)>Zj$md|syAJhNQbwhFxxLS6yyuph0ClpxUWlULXfDYn<;*FeRujHz57uyceW7F zF(}QiXD~#NM~$%-^n}WV-&$pTrcNiZ2>B^(-gfV6Waj%#RbP!=qYD#* zY3xGE)_~A`7SX5L#TffOQ}}4PZ(VGD?z49^zu1c(BW9e_w8gGNgkfuEIrfWcN457v zA3*T<0bGTH(v@&&#L`hOVqIijWhzA*3DIU$<2SLi?_}r`0kWLnv!9Blx3zDD6{___4LQW^VKOB@9??~(NSu61o*?iV-^zc1i{y0}u$9*S283;Knktpq;L q9tk)idI&1w=UbL_`ofRw?*ff|SG*xwAfaD?mxQRSNVSlD!2bhA!Y@An literal 0 HcmV?d00001 diff --git a/windows/security/threat-protection/windows-defender-application-control/images/wdac-wizard-template-selection.png b/windows/security/threat-protection/windows-defender-application-control/images/wdac-wizard-template-selection.png new file mode 100644 index 0000000000000000000000000000000000000000..d523a7f6b0c0ebaaf8b5c66c59144d3a955195e7 GIT binary patch literal 122681 zcmZsCV|-rC)_0oZifyy88(WQy#{+vB z&0d`UgvrZ_!NcIdfPjF&ONf701OWlv1p)ce0R{2-WJMj>{PX9FqoSA)NX0nb(PsnP zR8U3`1f)6!_EjJ7*@m_gS9b&fL2>%~_hsFL&y}7FXx|TVy1AFVRkRS1+-uPsiEnY(;k;0erq{Lv_!xI0#r^CL+ zexE0PNUGoFg_wN#mgt3Z71{iN^L-?RZ9;qt_b)!Z7WPd75!U ziRy6}`;WMNiC7GB^~%iin;V)aiFn4h{F69O_jbuX7k3PBHr+67HSYAr{4*d2o%@Ge z#fu|~$>|T@gw0aott!dW(RUd&e(2smzI}#~h@^#I5f}>WCLSmns!hx@3v9yP91Pf# z?+5ncB@7e4Mlu{#DdG@T&eH$BadEM6o41|rgnqN5rK`?x-Ptj=_HuI%^uns95Iv@M z_O#bhtX=$JCD%1$<;7vIQ6@tmpaC)8^Dc*_+mmh38Xv{4kDX8Kj#&&zuJ19eJ1^G5 z;fBjiA^CQrvQ8g!pw2JxJ8g2*$ADQ%Dm7k_Ao#;A*FR(9v5hiGvKn%oHcAZVCn9Nd z9K|KZeT+~}VAKR6VM-H^gYR|Io?yQd-)${RGGzr=vo;RlNAF;_Qoj3^TPq7(7U6mj zYppNJepU>RecLO8ZMPDRy-Z4+*S(dIws*d zIRdE+=~1j=Eemil>8@0%)c*Dqp7LF-UK?ww!EX_kI1ot)ig@=Xjq!z$GHTy-6r19o zCxKpQr!6#t|5F@#*VppX1-ivFv?azKk9> z!rr{=Ll-+34rK1hH!UQ3#ENKb_@hIiXBAbPqi3JtseZa=@7a{#xf@Xnkki`Gr1qwOB-64Lom64(&{yS<7H#0&2?h~%d7*)Pv}%{wFHTJxLJ z4gC5Hjh(O*jmmbj?MlT&Qw%o;JC#28dkqhm&gKxSGw)%(@9GigrSrM@gSBRN<+RrE z2%0^+$?TJhtzBaZFlDH;_{;#XWQM`zJDOPGG*Af6H<991-o8$Y`u%2@+l}3wbIZ#6 zj+MB--v^=WE7lav;?mL|nXHM7mBuXCVRuFwwsa=5Ng~cYZK@4=BHh|QnAptCTMH1V z^6iH*z?<^u!7nNDB?>srF<%qW6}oHi<@%Copcq#1ySd53tua+!qu4s%V4|d8nz*>T zy*`Md-8XtRF~%5;roL1Yj_=~XnkyXdoztNy1f?0M`(CP2UbUZyrZ%3zs{K0R z*iJFF^p!10XFarBN0jK9R)fvfPbCjC;%I_Wd9nocMn8oY`BJWQ)gc`Kw$xUK#iMJ* zUAN87)8dJZ|E@;gu(8IPGN#IW+HQ)xqFSyMWa){KZ9jwIMno270&f=WqCH45+Kq4V z-cPaLufI^H5#*Z^*)_f6XYj%-*GNRWl7*$shqEG7@Rj(Hr$HNG;FY+1s_h4ELtXsX zjSA`EyG@G_y=~F&-3Et>yKb3KiK62@N4)8Nz_4qraiCi-yY~GQ6lS#Ahp5gvdeg`@ z9#P>SWf0nCi_4V#+K3PRS8d(obt=5vt=1agF-p+ zsJ}n%OceJJ&NRSk`*M;dT03YqVbMKY`pbC3Kr`FI3SA!W_f(33=eXxY`ezm((#NYb z4ZR1y&IlGU&uCT=5Kszeis6~KD7ory8_!?bh5hUS>#K_`?}WazB4&H2Jfwg1rqi(^ zkjLtIwi8U1rwXXzjVIH>=_P5oHfZcDK|{8w>P!O;ho14VSA_XyF=b%*6!ELu#IcMd zYCswJrejDk@a#etioq5H6Yk0g)mudMbv{ST1bUreM2s2Nc!v8*)rvdxxUV~j3GCw- zXsig~=m&712tN8b>+bgA*o?ZFFUFUx4C_^2aV8w^BO|D(1>D8P7FO_NsUB4ANl~S` z*S-g5k7-Cs+aw|gl`dI{Ff;$+f+a)f~4 zWG(-eNe`Sh&Ud>Jj{Mc4;bw^NRECaR^kercxr!jl1ImNT!9WjlHVJNdpA z`CPs?4Q)m{B<#UUj;V3B+*#SQpW}F+@#IopNHL zcf4>oELi#v-u9E=W;dq&b{Ohl&GH&M{qM*2#}dLUBSSMkHy~8eU;%F#qg5_Xwb|NS z#hv*kXB|;doe15rx@_C`Hk_DCRzg97C)xXBE`Z6dOYo^Og`A;~C+~vQw=af;1}E2a z2DRd6aF{D2%`K%bF+GXGiqZVvSVT16;O(`JS0z$JN>~T28hVH@GgbFxQ#T+PtRsp) zR=#+K97L4b$yPwzTCU*J{fZWR+!0=!Y(OL@W4ERPAjtBB@PM;Bx9>R@i9FZTUs{H* zGz~8QuE&dN#tptgm}r~p_?=K_=ZzCAc0X`ccYATRpb z!VQJUUH3f2>R@%$!DG0bL{!ux>OU3xrM^zY*x5@c%90i&xSJ6+7Qx`e>UcQs#M?#ee~cMs23K6nIn4t z?w=V(?<)c<+e$t2Fox@b`zo=#IA4S3Tk}g~aOH)X%M~*Z6|bHW`D))YWK<7TNxgG$ zo=wXq^xj{n5jsOcuD8M+VXD=3*UHivJcQiOCOxqMRs^T4p^>t*AKoKoey}ezls!l^ zWW>uCxroaN@?t3Y7GPy+!|d>7E=|Q{#O9W3EwKb7~roZe6l>(3bXM>C>GqOUc)8X_w~ee}6Ybd-Fe{`%jn zXxRsc-y10`w(nk8QKE2%8@g7V-Y4^rfIZ0|6c`<&y$4yD-Td$D-Ud^356-(IM^G7} zVP+WY>7!ivcHx3RL0CH4qIo(7Hn~XU==cC=RuSzHeJTh=;u$DG%p2KCCpt*Wf1nv5__wR#2tE0 z#Ee`j54cC@-$?wcQ!4#&Ns36m9>+0HN=OqIfl(24(zoJk zu?cE(1AN$_D2W@vQgZCxVEyHkC~M?|HgwSKYzGmPHSG!bQ=G+GK`TOO=P{PF$`aQTTQ+~!>Bi z-hstkRJL-sSz&5;TG*4$esz(v(d5xuLn*&_KyNhmPhQfRTA+YI&!o!_li{|lnc1JY zG4l0Z+Hk~u&K;xlRi?rWa43JsR&w@K)?aB@JXe!0-=U15nM%K}U!U^Lo}LG$TAhS9 zG?xkZ4Ls&$V>;aPMJLbkG8)d)L-i=xKR50<+a+5M5+>LTCRlNk+hF|@uaaBTU>dl8S0`2wPldF(AN<9*v!XTGHtwv)Nm(l$vhX**Zk|jpoO{)`LpH6w zds}tl7`&$U+cj5*zthK7Vj~W1JmPiSBNk6~C}@-cH9%TZ(EB^kMVJhg30O)JASR~` zUnjaPA_Xt=Qceird|#oE9d6i9jsUacs#w;I8Of-hbdZEP$if>-?=OE0|1SLb>Nu&4 z6$E**GHe|ttCk!4!{*(@J+V*c!V*h`uO2Aycfd8gLa6i4wob*P{FJ?aC_oWk2)adR zsQjmq6)be+C-UDGp})h>KVcBmlRug~H5yt1>R-fePg(MC9*#!}EUz zyH)Gb({VqO`dzetUK08_HM1a4tOpPCp5^b8^(^+!6hn^SI%hd(aTK@$(-%9h|4u7G zP-)yx&i*fPAwHS{{}SG>|KwJ?5!EnkF#lyj(QV7*{~AR@Fn?tLMXZZZsUHOTk7z$d zf`pqy{BOFqJEA~I74qK%Pm~x#Jty|RtsZip;)K70KUX6nUmx-hp+GM|e6RqIIBp1}g>vhk~M zDSxu#1wiAU&?bwt(8jFx$OC@oV@n@{U}tCN;Nlvlvekp`E@9fSrz8S}NuoGzFpnai zbL@ONKl-E2VM-a1^U}*yA_>EJb%K1-j@nLc?Jrww>N5DPn!j_8`$Z52! zSZBRoDu*Y@^>6tR@4r&Z8azBYp$vJoG`w67uX8z?bbL~HdgSqvZ$5XN=Em}7z)i~q!~oQGv+rt$!}*R{D7vy&&K-Z3 zPe-g9l=VG9b0Z-jI;yM8KjL#Wl&m~BBjGYu&CyvrVTNMko6F-Zq=I% zm(v`Z-1b?b3Az36c79cZ<-j2j@JFIj$n9L;C15=p5;Sj299pvjX*Muv?d;yG3W*BY zG6a?#)-IK(-giZz=OEA7Cl)z-O&SDtVw)hT-04c&Gzu&CB70Mk-lVM>M`m28&$SmL zQ3y1OasR4Dnu5Ul59n?YhHT}#=Lu`9hj6+p&(3ED+?&TQ7`GR}Y}U(qmu={wu?Y!= ztv*X%z5*1qajsY@@)Cdf!eLN zUHh1W*bd0d&(2~i2xpU)L&|ua58~%tsXL!_4cj`~6@;~q)Idmb&Np~Bdpg|FKm5pg z$Sc1C?W41RMnH@*APZLQ!-nwXUB=;38FsMrGQIOR{_e<)}YGP^@CjsD>(=3 z$QIm-mOItPuZ(pzOJFx_8%ZJJP96ic*RP1Z#Uap+iEx^<`;o_fL1M30m)mT&R#PbL zK2P{t4hP`to^09Ltu9s{r$MMXUp}{~Ao%S@4^ac**Uv!-f^e<1Z?N7^_EW7CY+BIY z`{s4$MGHG^f`&Os48DGq*R{z?^HbR)8PHJ<74i-C~QSn#Lt1#d_&)djMdzncVjJ<&@`MT4Y;2SNU#|1 zSaCZbUJT_9$%rRae0^W_2E0EIZeE{rnkgAG;*z3zq3z-0O&QK`@?1U)ra7a=X{VrK z8uSzEUi@IV2jB~;i;3OF54wAtWewS+z^3$djRmir>}UIq;1n$yP@V@v7_2k!=a|I! z6)9Iys$^acF11Ixq|D~2F9y>WoA97Kv(EG#1luLqu*lQHzZ zLV+!MEVf)U)e%$>iscP2O}ekz3s7vXds9_;-EPv`c(`|eAZO(i9wrL<5e``Ooq_nS za&}daQcT`yRJ*>-|7M21`m`_Ue@2~aaIR9f3R!@dt*PDBPl zpo#^Na@}gR0WTD-AOy0Gd^d_x) zSy}&p_IAAsGm0uCZORq<-+CA?n>)9d=_q&vKh)(-OXY}AmjvsfkD6A9M1hbD-n(k*Cb!>Dex&Q}zgO|ue0=br2Pp(-dI zSKk=hlqjJl9E6ibylcj(w93x0a)$4ZpWfM>4hDWQ*4gil|8W7V(XE2{7TI%-^hJU$G*s~`?I#sL5K5r`rN6-K>6&g@E z0YE8pJblJzAkBUhUQAdn1Y~~p!qj+25$m`R( zv~r*B#;HPH^BC{zT*%)>Ft0T>`S372v&TK{naK6c%Cu5%&6)Vw!LeuB*UOE$QH58z z9dt+W$RWqiKMq0)dai}^Ql%a_bZrQ4G#^$z6x#>|lt-zTDojEF-VhZ+FycHp(CF2I z7T4~}(WYnRebX?i>-}@1surO!T#x=35k$Q^lnkx%k*7vp8M0>zs>k%5BsdD}ibre} z#@k9LE>XNp+Z*x7Ss!b;vyr2+{rPsV#;`lo%MDrr=8lJA-N>)s=%=6!e~lq}wq+N2urdJVhOW3JQxpw_qjraxcuHYD%P*pehw1~WjW#8$2LBkKz6 z((L8C7OLa4@Z~{?-tA*EzU|+1fe#9>t4kULV_fRecd4Ie|EPiWuF61~ER7FQDb-C2 z2X?O8>R-BGySYDx+hn&7u{x3@cy)SDyPjkbCSP;7CD8>2MT>UV;s(87yKeNR)0>9+ zAYZ4&X;h7R$w3cMQSnE$fbz1fpB?6VVM&F&QH38rW<}2cX`%fHgEB2xwlpPTEG>rk zunbV?kIf@zCG7iBOG156o+G*{CG$d$F088I%oKCe4k393A}VgtWmQJ%yCp7gnUz2$ zd>7Q$uYUfrmp0QA)Q9_e@qoNSt9?BAj+{QL6I^LNzDR|tylH%0ebM`|il3NIXCi7Q zz8tOOEmrh6r24b0bfZRRvbZ>#nN-rCu4kP7_2_u>?dx=p3@H)GuMHbXfcN&u6BFFtoAyUIvqa+3@v7@fGL1$ z2VVwvAK}4)ny1NpBgZ6VlU?Hv(eE|sEcU%HjI~{N^*Z%nOID0z>Rzyw;9C8{YlW8$ zeWb@Zi1ZX`A4HBCvo`S|8@L_uW6!V8(%ti>%2sd&hKpm8-$r_L=ip-uZn8#U>!>3D zF;O1*4pMFA;?%Bh2ty@af#rj}`W+0K8(LFj2->7~Kg?w+v3|?`q*q+`)ZK|r` zO^4*Qstg^}5wT?<_MW%8T)%`&#+Ql8=*Y1Gs@h#m+XFQxMe!(N@XKlI@E;E>z^l@u zUfx}+?2S}UKTgE7eqaiivt=eT-*5F5&s^7Jb{8iUR@sl6HAyD8vlqkog=kotkTZ{~ zld56XVp(;b-oaMx-ktKIMzu0w7>)F0DXR4o*Wcr;s&m3v${F`$zT{kXkd=qbIBI~9 zo4;Hi)49{P1lv-`CJ~U;bD^CxAr8s`J=iJ>1GR)KJJCamtS4_@39()3qw5>83y={xM8 z)@smig>o@Y*vw$|t~zdiZd&SSu``xx+Nv@Z!&xoy$RQp-)pRHX2^{xRQ_*KQXQ`A46Ba!GK#%6NW3k*&*03Iic`cP> zqeqOLq*#5qxD0e4-cp)GXCi~G**+qp`IH{;RJle+_9G#VQRki^Vt$4kKrO4YOwC6_xg6iePDHJdjC zoam)!?Hi&TACxHZ@U^p>tg>et_dZWjx~mic(rTr4SOEBQ%2KQOhE zt^5VILL<{0bDXeU=T&)bFTb3IT4R15KXViEz@Q@?Wi(ko#GC}3<*3}A^x6C#m8kLSM<1FOW-H#u zHth1LJ8aAZv~W?ny&lIA$XXSTuS*u?^%H3Oln3PXS{feH7jwWLc)C&JqYYgORJpF07!K&%GX|Mh6@r)ZJYE z;@~JFH#u$p+TiGlC@Yi@-uYDtH7bxF8sPg`ddDJVwC)w#I%eKouY(()KhmEd~24yx^+hSVU9FTd(q_~uYVNeXlC8~ z^R*bb>!X-6_)03CL{*M88zcr38Wsb28otvLW-RV%#RfzfD4_hAhUp(WEeoIc3}~fj z94PrxpBZI36ped1WEJun1(7W|4mm{kn}+GZAeO~f0?p=@1}7!zJF@#KJ?j98YCn&F zH05X|C8+_^WiEox5HVt}ZxRH9$OE({Q@w)5ZW%Lp)No)<>?)l|x&6?KFugqx;>%D9 z6)W4V4TNX2=l*l;q~$7GqH)BG&k|K+dA4XfDE6*BjY9i`;$lrcW)^i@w8TUf>i3RB znq|j3>`1CY!Hn0Vtf*SijRK?^BcxU_F%4v@WWVH8c>B|PB5Hdc6<9Tf&?G`nvqhQy zHB{ej^~?{AyoT(Jjl#)D%%$iBQj+1wA}mse##ea$WGGReX8woggxJbl3M6!h;y`J4 z>GLE2?5};a))Wgq#DW*wu7Pv@%?Fc$K9=_pg)>a>d~pCfpZGVpskqS4NEzDcgklVO zYwVx|X3al4^7@nEVrmZCU#~AC&A=*Y*1_LO*)Exn7#)V?n)vF&I0$0eypfMfjAf5~(U z)0G7HDiVQ)qDw7h)Nfr`3kAa@R9G+eyGfs3)#q_tKnI(WNEKw1AVNl1b+co&*8;=#mA_i*lzm+^3wemn+z zY#PDVt~&!(8IBRd6Bw)$sNJmxfIkZZQf7d+uApIsfD*&zTS&qS{>MaC`pTL z*Wlg$BNPwa<$AnEt`UN3W%O>#X83F_BhVY0P)#N@ktmthHR*Zw&#$aTG+G2lz{O!^ zh}yeN_yCyzyaHDt4PySid=1 zBIg0Gp)Bq-N8`l=4~G*JFL)~X-)8p*&tYD>F(c~_*~-;tzdBjIc@7ziO3T@84&kGf zs3Dl+Wp0q_k`rwXQ#}SAZ)L8d2JxKPZ5l9AC)4=_3JPCj1f}rtQlsxO>`V3pwAsC_ z8|u6gn19<7?$9z%$nw?1Dlv5y^C}%vo8f~!=MNWvnJ}PCmRZJtCh>o>+e>Cp-mXa$ zB!AlB7fR&6*YypTM3?NMCkJ_{;O|DXT0h-$kATs;*+K=)la0XZA0aIj?m@u!BV^7G zbohj95z4E{{>2%sZyaKuP!WB8T&zSC8@Xn)f40LX$y@F8HMBXS+SoB-RYy({gj>Nl z?o6FIuVz|5E(F}z7Q;Myc-@B0|M7QNyx#ce>cqRXRqDv-U%vNU8W8RVEYXI-n4T~{ zJ624%MILga+R#BLFn$(zc1ck_i`Tog@-2E>?*WUKmOnWCypWu!X?eYnEJKtNQTf11 z(Roww`;*+Y_rU)aJPor`xS*e;l_}MJFV|l0?+O7Q;B11)-76vs?142}vYUt1W^I?p_* z-yzPtKm$Ys1Ofquh#}j)kUe(%ubs8FSGJM=miS{Q&X0pUv0S;DCuZJUkD@S&;)@ec zWk9__t1q8NF8X-9M4mmBK&~JxzY)IA81|5V^fAczf|DnpQTR;1oMF7mkm zxs|L!CT7BTt(25})lztlD*FXPb^1g6q|84+^iQYULslNOYUNd`B*3x9=;^}f>|+7y zbbfGr96`g{A?XJTV=)0P8&9C8f~y;kyMM#UMK8Bj zkmOQ9Og$MRPgvK4rgwGP*a~k1hVjga-Rm~$AuA}x1+>4V3cFFYXiN0krJ14jvnOa~s|HqQgZo|$Ok<@3b;9Ch0oYTVcDIPpBkAq_K9kn3++L+57rI&cFsHQ%nfEG8Nf5Eg8Bg1W~LqVHYA z3z_t=G$&3ff_jMyzX$@c9Pm2}7UVn@Qqc$CuuPlSfX5;eQUOhA=OM28vm~ zq43`K>zSwcQ(8fF=i^>Yws0CMC$v4bdK2^kn*+R&A@F$aL1^CU9}A+n@9}Q?sWc@= zZGm5;lGg%bc<95RnOz}zh~>COi!)KYO?3s`?%~wrm!R9C3(Dn+uIZ#i;XNskyTW;e~Yh-}Dz6C^W?4`cNhkD5aZ< zjGI;#Qz~QvTG7>>BUP5-m`Ff*5o$Km$K*0o^=L1rdLQOV%dV6*D;t{iI_yxjCo~w_ zh3VbSn!~`RL{ItlLr_)NBP;jAI~;AQ>`SuimNtP?_%|ziz1!s2Rc>kQaGa|OJnb~W zY{Ov{BETwxUb=jSG}O{#j@*lHoqdQy_V!GN&E!aT#~!)7sNWYk`z3yqfW_CcyQBjOXbMQyd%Tt?+0u*6OC{JI1FOj* zXEViNX!CEad2Q_g9a@1-WaAJ*$0btR;yOE+NP*ZN0E%)nAF4!{#o{Ep22*nv4SS%* zdvMmMgskf%)zu_FTFPr4W9-<32OEDQA@0&8P90?m1Xn#o|8(=_XF+VzypA$MAz%=h z_R{2}#9e}oUwutsU_9~!0>C2qMb_$9?R#_h`O4cCuDL+j4=}NEn4^p&TBDf3V9TjR zhegbGL>@skHx~bdz5x|ndHPQ7>!s4E8V8*3&mud|Z+5%GSqSvcMF@f8q?GUjorY4Iy;?n6rKF7*U7iu;i zjLFWZv-Rp!I~F_|b;fZF*mb#rjGw;NPo07Po+NuAAAb$$?QE!#I9=7=7Xa<2Ja>b?H3rk#`QC(#iG5w;E(7}$Rc$~`PHZO!<-R-w`7El zLzZZQq3u9B49BY8?^DLJy(@95S|_ez?gNq1ZNSDaF{a~0aInT~fSukbNDEc3zSL#) zOp9O)-lw5#XNa6TY=V9eRTxx@&0cF<^`|>G-uXZVgG~m|+U*vXnpqXS_)MjvtihkY z^g3E}7;KgoMc2vFiP2D|!iN~CQtq#I93+8dStbI_&J6(4Lev2r(3dRG2XY&p6qw5) z$k`A&sPnfkVDjx;y6PI-87qbLfjEj#Y4Lpn+h{2M+7a+BmwBi_vsn(3{tI-?IccU5&x` z8uimlxe+JIv?&Cg7#XN-IqG-I#p|}VyMN#Xd`!5opzY^;{T;Y+R}(>ui^h_W88L+W z9zpthaYT4f;bO!XM!X1N{m2)EYTlf9SG0H$>}q-_c|u?8|FDgyF=AO(4foT5_kA^w zj%F7=iACwp=wZ5BHH2Gx#xX?&e`6a|U%VWLMTc z^t-j2(2q8BJoyg*lb*LPnnoW=|BI)8SsKuOYg_o$lMZxzXvE6(6;$5} z+E8K-!4dB%^4nJoD(03h8RAc197Hj5=OS%X)_g&`Pp*ZJ|Kl3_8u4J-EBugarIpv7v8kC91ZE7okbpy}-Fe6}v3-YAG4 z9AG507RnP@pt5bQ^BeXTc7arNMY>%wqe0Oy5d#Xo%rM5TdV+1BfNzUi&u@&6fnfY- z5>%bDf1nNQV_Rw4CBu}(u?Z*kL)NekXN!8~W0+WQOjJ#cs#G_p^2`=jclTqlI0~or zM^7y;i%!G*U0{?)6F|o$VQnBa<46nOTbDdsoMyYU3yn|ukxPoyPVb|{25xOA(^Mj0 zU4@X*Y=wWpQOUD88_Y57$LcAo;RS!N$|7=`iYZU@1?UsK+OtFhuw&^nXomA=s@+2a z{OCgFyAiNiOinw|0lbNnz%{^cGa842#zF5+`PI-W!IU2C`r754<#Kr*#^ufPbAK3v z*tc&w>mFNAl;BmHnp#q?gf4_VS*S)*#ey-4HavIy#-q1)XtBNsXt95xH@i3Aat0qQ z4=*((5~UmnuX1kv5EUE~uqhx+Qj~^5aJUV@KGTQ4@%hue8Ka@NLgIU9H-~8!G3ov7 zD0O38j9=%8z`u~0A$GAZp4_Z_9$^+ipt3G#d_K~knuW?nd(3X>Bs3 zzp6sl`XBUh7o2A8+-le0(u8(3cG7<-Z2U$XB|h+DLu^7MT(v&WH_+- z{`PV>l?OQxh5Jypky5RvMXGmoX@b>szg(LQgxpC{y%iZzD0PDc?ERCr?WW(Yf8k`v zjsIpWDV@oK9fiY+;y9E-uN`hNSE4_iFJU%chOJVm6UAydKP3D$0C0p;0CK_XX?H4% z<%E-zTBdk%xqFX%%IgXV!-h{VLX&90w2<*JI~<6V0bgl+Mol(*S}9uyxX70;>3gr! zU@KdtC{!kk6dnoAVa)oQI0kx|U#O43Fyx}(;?h8D^FX%gb^CL;p5wK(w=>yo3c%sA z!TI?37<6istBi`MQtPr(VJM%R>J`p~3U)ls6y>1L%o@1X&l6a9Ge+ZcMv{uf5cg&K z1;~P-TQ&KZFbLgQJZA9wc~dY5+h&1sS$;xsHX>$H-m;Cl*%908@9(PyczXVTLE2qD zVuKIX>`h9tgZv|!KriTvy8>BmZf>n6yDxL4s)Ofity2Y3n4`Z~VR=38`x2>?CUZq# z-8?)Dp04+{r80RKvzQEnv0^(*XgMdQ8v4Yxu4W3M;Ne9M6DUH%8-@CV6+Sn_*OkH| zu_AO}Of%QGcA!YUh3)=PbF*w}$G3br+bfE2szgMp&PEM2gF8y}VZD5+%ovxYNF9v% zVI!c_5+-ncF_4_KG}nA2*=(u~*<#irFhW0ivV^MeU!0s5_OPpWal(O17MHUm+<-f_ zy$)W%=U#4)097lrkYB=LVlYRdv-rGmLJ;tUGI`uDJ3rnK|7u)qZSCSjgp;gI6K^N# zwDJA-4zH(JUPle5j}^=cSr@yyh~Cln0K2tXTrbi*WbCZ~wj+9j%dY0oMn{O4LRgm5 z2xh^pOPw`Lv4-*Q@AHmG1PppIzH-v3jqvvfT}2fE@(x2Lso*Yz227g^JrK79wNU=i z!$to<2xA$9-4-km=`dhn&?tXOCQ<7jjAu0Yym2kpnFpk%Vl~Hn|GadC;yAWYp&jx0 zZAS>U{V|Gf<(ojm4O?Bq?D;sS(`xrXZ#;iCv^lT}oz~3pIu7xDGq^gb;uEJh)R#Bv z$<~D=*Y`?0Z^-yK$s@|YzvYUh@*$JNEwAp>JGilbl=KW29rZHOpv3+fUAIy z(twYeM;2z&6_LLLQ!7`t`WG?iMI7!*D{ND{w7I$Yvs|+=+?PTYNa-rEULcjyhspCP z<}i=D<8D31A?-|4LxuVQGS*KO{ds#dLu&YY)XsIj#{xBblXDqHpg>WmTWYC_h0Jn) z&l)_42w?)uJ7NxI9-6l2^WuTY8OCCB!B1XX0&*}bgd;|efp4_hZBVfL6aDdIQq?BX z++Ag+h9v*$@y!ky>v}U>a}uDfjn+*|3kW3nlSG4QG7hA|kdp|9+%l^;Kpdf3WhzL z7r#RagqzLN9vnAlei%r)79{KsR#oKq7kJqLM-bNGC@_At`P`4m!fZSo*x~(>YrWFo z5dJmC1zm@aT%DGePc#OL7Z#Yncw~r#iW-5H02@4>8R(>HLX-|$8AJyETlY_NaV=!e z6jlHwST_3~h2}YMVlEsErc%7BRJc%s9gu0g<(7@D_9|RuE*ZcQMc}T;0I|qpntt%>CWR}(!UFygE2^~^k=Jmj z>oFe2RVZ`QezcSI^a{lls1f4vIlxI_jP-tAN2oU0K^Q&M1!K!o0FwV}tFv$?c6}~> z0x@YM!aEoL1lSU!QuLqD_-f1BG{8`*hT<70n;lguff!(;qWQl@>jm z-W8cKp_^<|N8Obu_v<$DN2gXcn}lvwqUt}waXPwGI-|CmSJOA{<@`Mo!i9bvYCJ3h zK?;D{$%YO3!^3{yX7c+Im`-H&*BFmvFP!wJ zd~=@*g+7}3E#vuVwV_98H)Wv)P%pDr%_QN@-Sx%?Cw%u!-(YAb=lN-JLAzlBrfzA6 z_V=a}q5~k0cn*Luq~^Z=F`LL2>B8fVZBG=3j{BowR!cQugrJh?Y-hDKd#`|rz}wkk zrOvA$*}t~`6Z|VhTk)R#ZMSVvvL|MtBYyM8(Z6J3587S-gX@KQ5+J-*r1)2!yTS_p zh5KTP{LgPA{m)ZVf&M4tA^rpt%Om`E?a}{V3)2OsnzV}#7wK;_jgHyfZ4FCaFR zf|#!k_H&$$rYV)mkjT$u+T7l`Ygi?d435Z#4L88PKxE;YDb}-4zqP5I@4$LEfE1h{ z_OFHdr?y(rJ)=d4bVkEZ>CNIahosP9KZ0>1EMBEof|2a9U_|E`BlzGY3KhF3?bbD7 zVz}WZ|KtvJzmYg^MR_wL)L5YX*%K6=%hF1aNdE&(y(V!WM@(f^iy3rpI9c#x?_jrs zpUINe=0%KDzJuNi#$N7CFWkdltePPtRSrSUWYC=ojX?+0csL35p?lTcG501_#(^;F zCoy=QC#z_^4l2?M21WEBq7CtWH9tv0^AUR>WS12iF~{+m4Hu%cWxzKp^^yJ3=o=;n z5^%Uut-uUh$sDVCf>6o$FPCfvnS4K~NT6bNIw!~0d?5h48>|J2@a5sGi*w(z`yniE zjb|Ol_gN!`@Ykb+iv5G%=8B#oL6Wl_Ih-CD zqxq!Y`P!s2$mMH0Jts2JSF&`t!vc{UKd`Avi53T?URRz6f7#i|_<@Q@=Bk}X8Z5Wk z)h$%}{*b3qi@oE#I_ser)6(JlaG6hqc} zAwHI@spfi`IXhZ3>&0N=o8+adAe3k9%Yx%oqAgY|xf<;YpFz&rx6#!ED9kqrQUPLS zBtXJo(u9#@9u?d&4A~hnJUV8SK z!HWi$0Ke(I_g(KFvsTt36Ec%C=j{EQ{e1QdTgi_0)kDH@T^6N;^-HK5GK|x-kP0Da zed0l1Y!hPci9GyH@-c@&tASQ{u6^t|z!>H`^lH5U6~4pFp%`TRT;uH}D#PE+MMMD? zvWz}3;3h*>H{1ZybAp{xz3(9t`fzIxjvhG18aQGl)cKHS3O2ljyUcj-iy ztB((p`9ga(@1nme4VxQA)q&q0HnG?zW^XF@d#6ps?E>X|51Rt+zA{3A;^@xXIml#7 zGLq8juP}OJuMjA;`L$If3ue6ISPIUm|A7Dkr)749@Y$8nmE6az0=XE*SN-88d!DTm z2+~rDl~TRp$7--gY69E_Gct8eHjVaoQQ8&_dm+&cxxokcNHjl)pGNKtnD&>s%fa+F*MCM!?-Aj$( zvTk|iegHmPcJ7%>?D*e zz0MGXt?6#3tiY>zf0w$jV9UHRxVpc0&+%d^kR6~J+A(`B8Z0NOqpdq1m$N8RPn&mi zbr(w$p9Gx*;_J%WXJWc*$r=vpbrTJmSf&;^%Bdkpzt^f_ML1-FKU40< z-1-^vaBExr775le-T%S;n_%>kaW@|H6@%Z|@T2dW;-QTPP>0PZF+S@ds>QJCh(R-b zE$BZJwS20?_ur*rb=ycq)u$pv0duSgJvy4;b7bt4t%2KAw4fe+zlJbl{l)1FLG0Pu z8%AB-El3jT1L%QOl{I4mr_dE)v(zDbJ{WYaIr4cVC88_mu{UZ22_i}P1+YEiV^d)JsH zia@+O+-SEt3jc@WiRp1v#&SEbgmD3(W?ct7P zddeYp!ds<>(q=Ic1d>}ScIvW~$uA@)Jduq&L?F+3LK`cULzL#@!?*f~z(*zb)N*l+ zB)Bj(Ic0M8bHlyTRX>IA+@%P9ro%`8+-UQ|X6ze-UJHDSf#DOgi>WblTU)945;TUh z-Ui3re>%?SBWCn^o674q@t_IYfGK^{#@oh_eFFT;?n1@NAwPw55NU(pRSHAsFtq3M zee?REt_YTL!}IShRjr8!4W{>AE@m41pqp8*30qf|_CL;#=AcNOi$bf5Z+n5- zugT6USn@WbixNn&8!kj2b<}&kx{oC(#iH@$Wm3CoC?)kI<9;A6Lk|Yic(DHRQ3fAV zE2nw(gSNYTI4e`+qMDAzOdym;-Ve$rWcy)Btp1+`ky}m#8cYs5X`Ca7Mh2j;JPGFC z+nhG~TsBO$CxQ&Q>R{C&xx_$~kHbaA;XpCKKEncK_7rXHbg>Ox!DlIY{sWenun4^9 z?5{Kd-bV(m49PKiG|O&H-w;{ASH94Ub3&a~K%$e9VIfj4!XNBx8Zp_5Sh|QV<+R-J zN7wDbn9F_%Tqw>iT&+Al+?1!RlwtsQ3J!9(x`ICd>W<5@Xhd zXn+sj3CBkdhtSVvvT%(chu1%OPN4OSwXX73p-c%>7U(n@8~b$Ah1B1llUVADG=g7Z zrA1W7cKgjA-ur?XeWs^`K0hmE{1Kr+KWGKbedv(pACvcs4^!mivx)MLbx9X@goL~P zkw)5(bTwrt!#E7((Q%*=hS2$+u8|UH7Hog4BlADuLBaZzZ8SP4CR342c~{YV`}vQ3 zN}VcM43*hXiJ9C??H|@}e^n@Q%W|Y|xy%eB69%>?JBD8P&Q?Q5?hRSM6IAEg^-i~1 zhcr2g9f6c?F{(qs0e&3r%ShEZH$-djwbaXVI6b7PN8w^&T3dYGLQ=Q6$fm3zQ)({J zxv5Nf;|CFsW|v0SXNK2V4cK^smi5-+7W0-YsU0WkCD`T;?a?bell{F&l12pZ&PTz& znywNoZ+brbygYbcO};@wBxoCxBZ2 z^nGoU`|VH%dZ@t^o#rod!pkoXUkS}l)gh4cmHItln%HX-y zQi!e%@`A*3tqD$Q1^YgG#+w8kW)7oaJz{ZRoCn&sJ3cJ~Qzlqi`9{QQ^z`1Wn-Sr~ z`^HlaW*~>rItKOXa?e^~%{mr;gBHYfi`w5=LoQ0Rx0IeE%}z3`^RIp)T+I{_h;zT* zU2oZ{j%ZO@5DZc%};O0R;}DJXL|g2 z2KBXq3h{m$_ILoSnsbW@Ph8I8&NizO4a-Ds88}*n|Q92)&1;hpm^)!;X)C{J*B6suh9IV5DJM;>~CK8kQ>ueZdL2iO`E8G z1>3CgJLJNL468#Wo(LHC#n1@u$^JWZr(g3Kt^Rm~7*8m7Q?-K%%_}i|#nkguoJ!l8 zTn%LVHQl3A=OP)xKM7hIlWlhkqkjImB=Qu{7%0*zPFlE`EGhPAX~U+>8roiU7sO+^s<)JF%Kw|mDW)bQm%n3&HC(_H=-^D39jkzE}_ zZmD*7o>vQGbIh%3C8|ZvOMNIpL>w)$9zG!Qm)pN)6@O_NRF~}Xn?Tn83t~~B1zfD? z1@_L8!|#kD63$Wuwb*CAZ8}C2v9U?3l}6-w1qGAAdz6fx4{uYw(Lb|^FlE0HmUvlP zyZy=Gh>mX7v2)%t{I2wziJMsiZWZ?J?Xw4ZWfKKlooX}m?mB7Y@O_O%^I}jg_g#T) z6cX6}YOr$h7-}+TcU`H2i%iv>xP77b2$oa_6TB-tgnKy0#lmQznAAwvszXaCm{28k zccPB;a7Dm^Cz@W4kFFt&YM+%!qS6y;{ah%#%;|I0!?1G{sF^A>Yi1^0$4FXuLR*$b zRr3MAQPHYo*y<~l(Q-A*8#TdVqh@hqpG7L|0<~dxhWzZ@=e(WZ{J*;<0Rv9v(`Gro zwqF*0NGg{4qqT@`_DSZW@ee>O_1b@r^glMB%0l1QrN&s(0+B@PCEK?$L+-HwZ5AnF zntl$eJ?q6ExN_-J(v6QdiXRM67wyC1bA#NcNNA9zLM&LN66hv5y>4Bd^r{W%Y3vGX z83yD_u+H+n$oxSh?}6h!(M5whPU|=P^(N0DzrsqiL}`7%D^H2>erK>$&eK}auy^x{ zItd7R&a`T>sw+a`tV{eko&Vv|b=9@eA^_z_&On=KUhckobEW zQ;S8)Xp}47V)v&Ph`;N87EvDgI*QmqJnm5A&Tb{aMZ2$3XCDkCC&~}%8FiXe$An)^ z?Vp^y0*%sBnuOm4>(jd?Ma$j8=mF_Szi5c}%%G@zZ)WHh>w9n(`RR%gYTi}Dy9FiNYKba{VZ7bSf5#UfgB=4?2 zt?Gu5hG~^xPC?qx$d&BquOWA^;)Gme#HA}Ksjtl;KRpFX;P4vK28LuNdCFT;W)X^2 z(7?29|Ct+FeMsC#xf>--uE@AXJ->>PX!3V-rIV_}%r6gQ0-x|X1j{0jMZF|LqZM?x zFCV&=4ThJS;)s>v&JE26hlUKF8xGK`O1gjnt?Fc?T z-RGbihPvWVn?ggS_j1kqBNG}WCg!fkD>!yKX%hR&r}gH}25kaA3uJZ}DaW_5O3L9- zj?4U74Q86=6l3jmQ<^{ZW`%fzk9MI~J1;P%6GQqR^UHF*xHkwbP0FC+3g%aWR}lqL z`T*yd;B_!NiNKpXMRYuGHS;C8MX}QG-}l5l@_S2T4eQ<$Qh-M@(W4@CHL5hC9Qx z-#Z^^fMpeb8WQeIpkuTt0XsQFWY4o`mh~7x3iB;zAxQk1HuElS`nJ01dc3m9 zj`>Be&64yD_-mKcp7MxRC29u)F=vm1DCnD4NI1`+{||xum=l$&Mo+;K`D5x2VB0@r z4>UT`Z9-r9uzAH+Oz!<8xY5Avs*FQ&SSgewV6(8eO=65N38to+d@^-*16zZS@Cg*8 z#=7}*jxBlpn<_*h!&`bnmk*5L9odB25k-W|&fSkRJI% zk(NZg^%VX${dy$IFjN|i_VM?w}N;k#BqTbBfoSV0)KedIhu30`k(7m|Hv=G$?+^Nv!V(V03uW$eu1s#sZ`FN0+^ z+(R~38)g%2?%^Ff^~q?{SxV5~$%2x2cIR+({T}41b?=awAfo3}U|)Lz_GS@hvQF*S z^Y;E-;Szm8 zr+|3L&Nkhsx$oy=3G#%Up`fD%yWWFMz361H0JW3O&~KRpezp_s7$;!!H(US>+Wd?%du8^O2|rvIl_g|Bc<_P{pGlWVs%>V!Ot3%d4$oF1#C ze?ed?O%`?E&KwWI>Z>zs_|(vz!C@u%Z8^HYu-Um@Qf`T~Lv_~O$GuxtYU}1GbWQhJkV3sG=vfeO{`5 zWIX1txUPeeD{I@>CQR7$YfRM6Z{sCDX?(^+tW1@kh6EngEwx~tFc*173W+36knLvj zFOuEk?AvymLQ06yNPI--9bJOMVf?(+Ws%dgYur2 z;c&zU?O*M&odK91Ut#b8=Xa7b!H9|+Rh_lTI8`H2g+1H^*)DFRfw&c?;DuC`-rw^@?dgyol}7QaNIL!Y@cO_T*xDY%c&zp0pmefg^e1U0QAZs!c(0$0 zuRhp-mc@Ag=5GrLOW9qXFv8zhvv>Pe6>~-#dD(3TE@V$Hdcji*s10Zp?+`mKwXR;` z7uv`TC0~9gLwk?8NC_dxG-y@JeHnB$_lBfI>X;T!N;a{Z*ICH@5CRHM?`x(BTf=0n zywA97?KTA&NNp{4@b7sje=6s!n^~}gHjtcx9{yvegT&_#UNU{{#Lir0nPr@|-m&;d zhJPE+kQ5TZhy}7no}MFgWDGorsv67*Vv1V@nHvtRd@zn*$;7xC>=l*XAT>68Q3;tn z**v~CJJB|ESpE+&Mpa6X9{%NSiOYR&EKcx)<~)HrZg#)2;p<*Z+p!N$^Sv9>1shCX z%~TDYmdo%a93!K{UbM2Iqm2InVqru-G|{XblK@kA6(ZVT5xAUXA-6cSzPtRn_>&85 z4@^64*NaH#68fn#mVpu(y5}|$Vx8#;)Zm63Q2t);5aIW^G(fl3M!HoF$MEVK>v`xv z{T#DdX7rek2XZ|_C^74}pRx03dnqZ zW-0~u+*+y%F?Te)hHN)>DOFkFsn+U{wRNDWEPBEtW)&5Y%g_y5n`-<{nFLvE``WH? zC+i{AaEuf6mLTZsj~4z{X=*O!HYkX$doVOR0TyVbc&u&5u+VP_2aPI4w}{K(n|}?G zPT!V^#Yo#?<=>iikadAbPjgiB-w{_S>ke3b7RM zt@XCV%*M&B%L*8Be+VVvqGY+~NwDIo59`oVmaVviWfuH1A?*Ms506xoRbZ7tHJkl_aw+hn!s zDVJNYb?qye{dx!TIT;a$i>VNAEV->edr@tH?J_R$!#N`qR<=m8RhsT>oUO);8q#@M zP1w?ncHu&yQ(XQM#J9@U_mVz%=cP}Zr@d^K+@!EvU@WF{>I);ck;;Cp8PaR%uG1F; zupeq--CU`j(`_!k6rOr;zBv#-GcKa%ahr6=lnGkpjZWN?KC)ss(Tq2>Z)?=v6?ld& z?_jxEw&F|Ddzfd;?<`grKLXohSG(-z<`s+wIgh>y0oG+1sse*kS^jazs&g}0^t#>^ zUtiR!htu$}p!x)9EUFh*zhzQ9wI4c`2o1dVsIzXp)g|A!E4+?Pit8JpnaYf za*I+bo7SISf&opwIB0`h$A#dAWYGu1VXw)Ck@WI+HmJi{HOc}va{kK8-i@QN@74ZB zPBO+c^;ZaaIISL&rpZ%9UbdG)ls9?0t6qgYQn4v;=n#;Rd#-)(ahZhu9c5&y+=*Vg zNZ#FVE;FZ?Oa@S15E{Ry3C(EZr;dMym=uTAM_TsToEwNgc20)ArPkNHesbu~W4;Uf zQ?3vid8kP(!loV>7efRwE(+sc42TqttN*D<&2u`c8A8GhZJ25?ckBEd6eRVBZ zSXkH(fFpNXrUyJNI(p@?VBaoI(wSVGwp*Kr_e2o3XQJH1PhnR1$K|@`3&9V4B0*t& zZ`QISpEG@1&`uJ6JUUIjt2YeeIS!5U_+EYNS15%fRH3uNC0_AOIY7c40ZqJDK4^U! zje%2<94os(@l)}9?yEM7$cIwVVFp*`${&wk*Tp!-D^zSse#|Np5WTrKB?-Bs1KgW$ zWHInoE#}i7kJ^toZ5mN0(Jqe;L+$(t#oqS3QTOkNd1F z?>>>RAX^*s%t~hzC5mprnIPiX=+O-HJh%oDhbt8pxpld&{&13F@prdVA5ovY$$EvLnux8bh|b6GQIKb(P=Zd&mbES?>MlRE+Gb=;h=6QLc zE?mHBFXe`&YiAr#uz#zeV;yII!Xx_gx~04wf&cY(DP<`1A%Y6Th81evzJ@oqKw2o< zBN|2wnAv?aEi>n6KxDHh@a0s5!v~-00Ip}l6)GrqGLEC!B+BBs63x}GMIJY{^1Yjm zS6s~!EzD#5n8kn{^y%eHtWYwZ_G++9$Z}r^l)bkhQkc<|Qu|F!b0k;WTK{xt$*q&4 zT*szwfzycp)ihWHEZPIyHZvUWgk^g7ZsD4u40VgY z0wBLRhh{H*OgRYj7*G@nX0j(zX&tCN8Z`&z^T^@P)SZ@o9vJPz$KC1ngmb_&D zUWnB1*TRS?Z~M$rqZq}d>;mocrJY6* z+{Kc;H-#qdOTZYL`a>n4!PA>JL$~P5Dx$~gg?C);rp^grX^4BS9We3s96?a~SqYl) zQjJNrFd0(3S{TnOX24<|kB3Oba&a8k;T6D*Py1^dZRsBUaxP;&Azo+;q2VYzxTWu`s`r}zk6NWNbQ`QtLGb(3*Ne;-)n>68=l%P^5BGm# zvl_J&F9Lm4kAFoj^ynIV2%!FK))tS8C}h-prbKw4_aZvC#Fy^Gzg5)=^RqPwlY3XCwZN{CCfo-R?IFlMNOJ+0(s8ZUmdBn31 z#t?e7jH`MWHulu>x2OoN+D4U4ISoa5awzgf!h=krx_4{TlQmk#9?y`-OOEf%cS~n9 zLD>gw^CGu(I+ttT6}TrP5zm+46Jk^)01(o86{*jutu%y~H6e@?E+!BhkNHY<;#8fu zFUjaj99z>oicA=a`<4+O@K$Kjh8n0zox(yPA9GVLdczUeP2 zbQ%xTB`KA52$u<1^CN~Avf$et$x`wr?LQXi@gY(__%<>y^+u_$+m_NKNkm%Alb;C( zavm}aLfw@S%nwQ^{F;ezl>6R^j{{T7Wk0A&UYkCtyA|grpG1YT#A0V=BKOs0QY)W$ z;g{bh?MeOeLBw8uZ6#yjEJt2i0&q$S!8qiEa8+Ts2`c5%@!X@kgUjd_H|-IcHA1Ks z>0_H8BGE4;KYI!*n~%lC+AGhH?i3@pQ4yk{WoKUt2q!U({`K}f$D};|K9a-AS46of zk@Efn>L;>t6fDYmJL2*E3H=BbtA@TItue-DQgQ)j1d@;DU#4tJPJ8_T&+iyy>4I$O| zk?vk!%UpUYCp;}J-!2MJd(_%)b!d+~XM2*Ciy=+t$S@MQdBuyM^PM5}i+p!)!HRk? zpGMg13Mx0J5O&!M#shPw-c;nm55ZQc&pYZnfkj*Lvfnm6y@?ykN-$dkAt&|*s0F^!J3;qQRc z(j7I+)R9u4q-0Ua-1pJ4Z2c@Y3qR7x)r9`7t!)&nQFFQDAwKL>9b(afIJF3tI7i-5R5)zjKX<5Q6km~HSOe%ia~b!cBDMLLIX z(LU)4&q~s~i5EB?Qj+>~D#9f3-#acMl@y zixFFHblc9{fY&fz5(B;X%=m98eXB|*6oZoPjwb7|ys}1P4za#s^OuZ=O<-=@3K}_1 z57xRsd|3jW9HXprj2|M*Z>;Git z{nQrs!`_KlS%BybDT~+!jRdx)1o%DeYCB?{4wVk)eVVMlv7cBAl zD{rt|_y^xxoXn;MuOGHBrQlUO+7GR<5jgqnFt{4n^d+sU7~LK6`vX{ro);fNFM<~q z$EMyg&H{_LUzQD*s7&i*(T^Whwhxa`E+Q|)CucGK7(<<0t9FC87sjcZ7Pwp!G6Inz zoFOL-IF9N%`Kj(4ZK9W%hdZOxQA7pwVJo)8xx`L^W^#63_no{JM}~0 z^$(Sw!?Z!&5(j0f;+ciRGq&5`Z4cSH?ml;88n}HH@mM7rOLURtA^+x|A@ay~eY8M{ zJVO|;&^(-0McQPelxERTq+9j)R@f7J=7deYvM2e#+NKaRXt)sm(Q>UFUN_Y{W4=PE zMA53rCYj2IH$Qx7CO48viD)n9y9@&pi>BSyYuELUlwM^$t^)bYH(L&m`Xc_sMj)|_ z>v6@{%tjnIktN5guf(;inW1H$B8+Y)Qs2If{%q*kq$$wd`^L6ZJ0em}$Z@>;jdjXM z@0n}vOo10k&YA})Qygi#tm>CE{Hz4h*nhR;n?I~6B8tT9vEDLa{Nm5Ym-ow+21Nbp*eDnc0C zMWM>>+yAvtv0uL`bi>f>nXyo{(vXKlvD1nD{xma4a#f*NEjyfJr2UFFhJ+C{J?JU< zxQ&3EeetkJ*`}~j1@x5|e19+JPxv-C@E)vb%BqR!X0!Bp$l0y_;!qNX-+{zhM%9~- zwrH|4&uFRoWq4l++eUCJLF#_Z>g1$=gUqmz5iDF`7#kBFf1umwq&;b_S%d#Sms$6t z#+NMCpc}tRqk6D<8BdX|PS-Z_olB{{W~)8xO6v2a!SILI4-PnqXuN1evD)~oIyk9g z>EYSfXeyP#mIgzVD)g+wI}8CVxh({HI?aK_vyp9{@MJZ;!6*EK%zA&ieC(?8@0r;i zhTip`Go+pWLOF;X`olJCVhfdx^ETrG6=-=gXKEB$$SNWAxUmLtp87y^7153J*7{1e zLqJE?#GW;HgxUW!DkW613iZ2R(T09|NMtwAAKX|D!M5WymCYsneK>p}&`4sVAX)#w zN0V&fq2I_oNvT_YgV@xq*#=nna@u3BhboJ|OmRoHJ7FuCbrgSB@;FSMH?ii_ zRw~d|Nl~~Xc1g1zY@f5(R%}Cg4K7|1mqN_hLJHQeQi0v z8B&(ON`Lwg=H!OH;Qu)UwqknT*ftX5)bR~W^}(4-bY{p+RW!Lf{`p!rdL`)Qbte28 zTu70hHu=N?@Lf2OiqX2Ax{7fU z0b#G4z~q~6ERlpyF;U@ph@Es|asDQBH0dGV(ZL3Eh*Ps1oRM=^TwAamY^Uj9r}%Vf zg+qGv9Jawgy>BsdF++-;98)9^uK*B7MzyVo*2UDXs2%e@eyS;JRD$QE6%4UYz-2#@#{>IvyZZ}?v-pcdtzJjCh~Hx* zk6#lYq3w;QO9#C{@=@85~A$R+?=hfU5g# zATxJ12!-)oxQO&%Hd)OfJwM(^Kp{gQ(^1@ZX6o}}IRLx8%lx~lAm@`0FOynjXpv-$ z@kXbY=k;L{c+!%)e|#J*nO;HaXtq?T=nD#Gn`WaqhPZ^pkpJ6<4NVq8Xq$k?S&k=5 zEQJsu(1+s-U>+OvZbTzsqJ04x-bCZjNEzPzT`>N1<;ySr!hHYz16J>JjsQ*he}J73 z;MooVMzuYB@eM4Xc7Me4(?zbJoA_e2)=W=80J*5Yt}pk4pvU z`xBYh#L2$Np7MNHQj2v42|X{5a_C=}G-_G)-OIlwBbfmup9x`r56*BXnt>olN z_V{eN#GYXF5TZl+t8Q~?;6u0D6Ma7SbazfPeE`_4u&1GQE?d2D z&`!Yciin6fS`pfb!PFq$EditLFd4?=cGw{Iy4=MH*-ywVt^o`hPM3zFM?2reyOCg{ zSXgYZ=jWm95kxdXL!cds`A!VK>Ty9ceMChjucpT_|X2&!0-+*h}Y+gn1a<}2Nc z=?AXmsazqYI{i=Waht}hWEiP7J_eT#kPLFs!neAJndT31&GCMO}uv;|cI<_AMy zfH{*nUhRM9JUIU@*|tHzE}i#5ju1E<#ZT~c2eO2aS2YQ5{^E176_k;53Cg#&Zq|kh zr|~)Hn~o&HRVbH=1IDvIZB8Z(o{00ijrWzJxuOe~=$w3=D2#y54dI&Q4BZkJm?gyyD&RE(cQtA!z>FJq^bJcd?DBhR zx$pmg)#(+-3@hc)XBnEBlBa}tQ9Xt60%2D^QQhBLi3r(0o@`P7g#s~nPL~6T zi#q|&J*?fQ(gJI&(bnJt^zI``?w3o5PX$y(@H8_G{1}Oe3Jp?N~iD zG&HjP1Qy~rp2j+Gd%8L_L7~se5U}zn!sB^?{$cEb8b2}l{P$B{Bw)GqCEIAGdMFKkMmcoJWOL zSio9D0PW#0RRI2~*9@+{)_-;CDFL7s--pYeO2y&#*EfK1&sY@j8V^;fRdF~$zJQ+X zE+9-P5-)yFw$0TH__9A$@t^+3jy>+R+OR@NNy+behz(f&Xj`tZ%=Si-B&y}pHJH6` zPqaYZdM~9q`mOv}Q(l;Yb*C|8ytWzlLsP9{Z~{g_mruyMsHLRxwY84!?t}sEE4$<8 zmxgQjPYC{fI4ler1AU`7)_WbP>uL;O$4ggTFt?s=iMbDjUuW>Y%W*icgWp{5@Q5*( z-wj763ASJVMJ+6>Ya2kIpO+Kx6dZt{_B-C^JM6|M0qIciT!we z64VWkRA_KcnbE$(^uLy3FJ^};f))8(!6*aw{jzVF!N8r1nsf+Rg7n8U0*iL!=|3mu zYd7Yr|9@&+pEW?8Wln13*s58(ozY8JokY;}CwM}XWjH3U6XT`9qMwgBI5;>jjz*`&c6zL! zCz_ZD;O?*cyuN2f{cxhUp2%xwZOW`j_AFG^SIN4xZRs6q@Cz2YKj|-C&N)tP>D8Nq zov33N8y!A1g@Q>+mIkYXC*^Sn((aOiw2J6C3HQGB5%L*)I+I8jo1=~t6X@t=Xu23l zqy%IP2~-REl5feFBwXe}5p-`Sb#5fv#D|0Jq=nZ62zyvIL-s;Cj8`C~hZ`V7Qg;9$ zPfGdI#tC+ApxEf-;(EeEk)$nzI)*~MiT^^-pRhdy)vQ@mz&*Kw;$8{}0Np9Rk1{J3 z{CBxO$;^9|18rSC_nJw&I+%_zaN9TV+E=gDWmHcZxj9)@fju!{Vq#uzx1W=5PXGVi zE*@L!aOEo+LIh3>RI6Gs=sWoaBuIh^c`moCB2IrgI}_jTk;F-ULNio4FKbh`rb8+< z2-!I1+Md|={+ZQ+<1gfa^UIBb1L7_K``Cp+soNgoBYj|8+)dY_a2Ci~ti5IM)RM8< zL2eBBj-nFgA`35-QWtfNmr!7V<1SqRg49X58J;%d;*pv5_WtEjGMpm4cm0W37yhx{ z+R=?Xa}DRpE*Dh40^dXtfGmVHIgs{3;3P0?`OVrOl=W`4$LYEI9*wNies(GMZGV6N zAlBkVYwKvo&T)c<(9mXZ0D*(Uxdr{oUEgu8-BNAt+U@QAaKt^4*l5SLLEU%;XK|a} z=<0H-L%!x|meiFqw6E2SD^syrlT)=)^{af4rn@^3he6s;O!jt%hK33?>hvK`pLb8c z<%>{+AYuGi9eLV1*jd`syxQ`5fjt<1tmE8+?hG4WRb5!)V3G5`^Vf{up+eIJ8Ha&8 zjRugQSuYpc5}f5QHNFC1sVA~=q0V0fLO`Wf`}Mm@<`)&RPZr0(#F94B^)vC6uZePw zO#A}HwkrwoiPv4aZftVKEuF}^gm(+tC#vXE_(|O@eqigy%F)}!Z+>iz{8h*a;njTv z)n$5|*kBkD8jRUe5b|@*o#$3pE39y#vT!EW?q`Nn;7pdI$D{G*+F+&aKyY$T@x!J) z_+uTZb!%SmC+UNo=?2kvC`!ZzS8)Ctg<`M!AGZ7)scXH^e}e=j zad2oBXdW4XXXywyP78rx`2cva&8FKHs9Y*LYR3++67oEYM{MLq6R8Jmj^7>#toj0T z^&Z~p!9*sFKaL<=07*)^SVCN!B(UfW7O{+Ov-@8b+s^@I@AQSWEh!0u?N76d9vPFo(wi@eMLbI!i0RGw zYJ!tf!82yo7;&V?>Fj{LcE6`vXR<^9 z$e;`KAJyXMcHHhi2zFxQ=2nG`kJlW#vV8VN%o~^QcIii+2W;rXM(*DtR&M;ibZM(? z8^?WV68uD}F&1qWvqZzyk2StXF5N|UQ`j)rZwc|pT0gxR+YSIQpP44HP75^7$m^c`b)#Vz4%l@Y#dsanaE2;m3)c%Xb#-cR@srJ#ZPf4;$u25bAPcm8 z*OS<=C!;!9jqUPh!Cl_d*A(-YUE}shKV1FKe$EzOwVZK%G%bQYM?gvH@u*=%+SKnb zH-V%bpV;#tu3%6GM{DUW^KYEdz)=Btgs(S%PFaaZ2 zo&FcjTjW%{evjA2S3rl>nN|k_(1Rqfmn8;3RiKA6G@OU~=N7c|g`$^Mev^{wzbE$0 zMh@x&J1093cggEw*822A?tx071}{z={pW-qxlM>wC{Wu@)MiX~Yd9zp+6f>J%r+XX zmSI=1%wJZ@BQQ@?zYgFD8J1Qet79<6wYBZ;M`-9B{?|wRTFoC*9D|9sGA|v?7Eo-_ z-lQlnWGFKeJ<@(bhm<~BzsD7M)%&z~cw$tp1Tq(!sNf3-H_Ryxgv|lRss!9a$BqH& zE*1TQB5cODKgMdU*=8wE?dX;hh+nYs^75R?yzo#*MB}C6NP#9|cFwC;_h^%y45&*0 ze}hHum#Xc4AOAFg!rQU-p4S&L;H31`yy2LN`^U%V0}he3V-f7#ogImT_UWx-Hi>RT zS3S{AKQLzyZlAfCm^X{Di3v76a(}0%TxZZG$x1=OPG1|C9xZwY8;>l8 zn3u9jfG{gojkCZ@DPzz-c_2J0K~A|v7cPd8ygk4&#yd>dkUQHba;ab=(1;<8i_$1b zX?j2CBiRk)+Sp`AMCTusGaqew^oiKBOjbGn@4yGDAISz17j?emVkY}6>p!iWv`|}VOWW~v**lb|3)SCBQ zu5M7*|F^ys8lJ07-8_X_)jOV11@>GiDiAU(%*e*Rq$o^?!M-%#8%s^j*8gpzmI^7@8I*@=sDzipf_Q>5?70QS} z4~BK zfBd8lPaYM5j1?`g4P(x=n99L%`Ge>D z%d7S=5DxxNu{0Lw+0Fm?MgzE{yMO6i@>1#!Kz+UR+wQx`zQ}Q=>}<7OKn3#sfLlgC zeRW~AN>yVJUi?ybe@yemeR5|V}=*}EO z0jUk`R{j9HVnN{Atv4`Oq-(UB2P@IN^cFiu(56uwR$FR_Ll4GM(RyH)eyr&j;qJ1*X=o`JZZ4D}HFkCoD1h!0w$qJv~SC{-KHt7b?}9=T^5D zh%f6FFQ@meavWb$C#y8-x-Xe?My+N`qBJpc6D{zC-<4b2jPeB%NpA~m1EL5)Pu}mI zF|X@GCD-Fc3<2le#HW7{5?m;$(ni_g*l@q->a-}+ml2l|a_8ug(Ex+76viQic_4OC zggtHoWRQA~bA8T(_q4RT?Q1UL-D*xwPQcgRwS#7ww4+li7 zez_C|>TcSBafI;jaLC5Bjdv+Cyxb~O2p_$ zUbdquOh=B?27E7!=YTE|sSxeyW(|{4E1w$$uD-6nr)+dQI6$_OT(Acd=Mr~FXF}1!&0$@@9HDGNH`5V5+|V>H%EB;c6?pKMX33&!qYm(CP4xf9#1(D2P7O z`r`ukV#fI43edEo+E1WR==4S{khKqqnm2etjmZUFWqjLX&pV{!$@>5~g2U~vs#DJa z)tBvj1P@o&ln8HsD} zGESu89CYG|lTh2@A{Ht%_RW+1{o55ZfH8ay2u?%fx|dc6h=@kOf&fVfSOMFb3q9&= ziHV46xu6)>`w+q8>;R1p2r*Y7L9}%x(kW6(iglvh+#6j-(-?P(mi{2pC_&a^W2H2J|ZmS2E}4di~REwDFmar_cb zAvB0ib!i5*8;hZX{?8`d883qa5)-Fc9cCkz<6EWs0p&bD0RO}G@03Ib0(QudjXW^n{YE}N2cA0|2UkX7dWXUB zL}?QIHoT(V^b3U{eLM1Sj~K+**0JW;lc|CPro`WfbHSC+xX?@5&-64+^+kwBgx{a#c{d)b7U+4J|K9I>M9~4B1X~x zH@fG7>!dRr5Wy&;dUm^0p0@hnq0g9??!Y_K`)p1~h1{#}DQAx_vbFRV&LVMWy2p%h zHaqG%M#j{E1r`}~AD_mKlJ;`#8W^Y14trPbmrx-3-W+zY^oo;) z!ESd)@j$-b;+by#1LHBnrc*guXW5-7Ku-qD*L(6;SCLm@?0|=lRs_YsWJ&}N1(c?_ z7Z|})CH$p;4g)Ysf#bZx>#9t%b7*c358&ApG&JSI0YnB~{bV%ueaQ_<;IkqC%_%CA z2avZJH0$44&;Nu27+mel588gG0=xO;D-wtSU$2j`&K`z>?8N|4Y<<5|@QXjB)G#Lz zOS+H$p$@XyvPFP!k)H2$(~cjTjCBWhlgNy3&HsykV082=Y}v}d$=R&0O_C~ptDN(n zuCg%$_tyhsihzlKWX{RmDX6h=-nLF{{F5(#>R5DQgct|Pm}#&xV$&_=pFcMt|Fo7+ zU)A%6QhCZ)G&+NCf7hu7q+@%hd*XU)kCWWM<;3o{FMI%WhMN5e&bw9ng(9g?7kt)@;C{rt&ug-j?2;v5F*8N7vu+&f}tUT zsrXxCC4#Wt@!~6L#L#fzpc%S)CkCVQLv#%yqBbZwu%%?FHhaRbpv@05lC;$W8vT;tBS8idB|`8P&nulo~|*0*9LS)q$U~yHm2yQ2B`H4^PPdA5-TT z9a+?^>yB;Pwr!{5q+?fXJL%ZAZQHhOJL%ZQ&3ACe**|Nnsy%D%r9JVygC?dDJWS78 zMRg$!4J5dS|2E9o_9r~pBa%M<2-7^xr1-@w;78L-XKM7|y6$K09UDQAY58$w1|q@0_XA*)sUlnk)uDU~@4!#p zDDO~lc6lQGC<6NXEwl)pWJ33yBm;IC8tQIpfXo)lVVbpJ{JO;Hwn@z{(KvfNn7Lcd zL!&Qw4q|#@dcTLEeqi3d#s%wu!NvirY+)x1i(0J8! zSb=OluS||#v>)rG><(>12DbtfduPYN6Q1mS@!SHqU=^Hr`~|8JVwKm+B$RjdP~l*#vM>Oky0l=QTn>7vVn9CC+t%YGJ0 zV0QS+u+aR0S{osT3tRzM-CH>Y3c92J%$T3Qto0h3!tGv{6sx6P=S5W<^)KoXsfn@L zk7k(wK{#XiQQtHNn=V6ja4xIEAW#){#67rEydN6_kDhBHd>H|FdJAj@!6$udPEX7QPQPoQjLoLnb#ib4i;^tOWO{Y?@$Rxj()###>kzQn#P zMyGz-O*jt1?Na|_=S8me{vYJWhPIya^ z{@NuMY&X}{V524!y%r69c7?1m=rK7$vKZIBgwh?Ywean zUrNlQ!?U9qHQWel`ilE71gn|?ps^S6>rn9~I)rWOYxTE5GxURoh8i!{mTCfPi;%~C@)gXYw^bqhiU z<5h6AIgW;KzZJUjO}Qw$~w0HR?2?YTHeO8dR-k+yBYisfiM4X28RZ7Z02zZREvx z2C{wQiadfl=hY4OnH~Gpz>x<4foGr#uzw((G*^k$Zu>60M-x)6cy(-wW{eNPw(QfRIo`|3{iRrARDs7B1w{@YWLhLhG9D~5JBXq)F z5;U`Aj<%qv7k**Z4kDNFAV=XQhJIDxWEFpW1BQHovx@V6Z@-_eRAG=`wL`MOEVCR} zgl`5-7TUUCudtj{@=ln>@W}DB&gJQP8K+p&HdYR@Z{dSmHxoo zJf3y@4t1KMLBJFyE<-!PPwJn)-3Ldc?(ccoBLn!X#Q7#WJHt{3M+OAg2enpZfnesB ztlpFaB*eUH^0b&X)LzK^}g3PvuM#+!N(YpZJ-1 zZQl2BQmj_eO2&w2Yvb-~)a^cKF;50>B^M$9_XCb+DDP71KW1}a?#9)iuX9iaj^0SJ!=BTt z#%D9y`g8Ww)p>c{hDL>ObW|Hd-ulz(#{%har4DXFlo|w{0 z{na28C5`8iFRB?z@cyderk_Ra%GPM9paNU{U+X;NtI~_BU3a{1=7ErVd_H9kBEmS_ zf9LQ7#xg`=#C?VTf3Pe=r>ZsC-!-P~(qDf=l-_Q!We)jApNXF6m+ABZ;Yz#?136g4 z-u70p7}_pb!dfE^POc{C^nQ4zB{zh`Z7FdA=r}gnobcb2xsP?Anr- z`z1WhAT|L6Gk7c%^>^@g7oq1ybaT~TbIH=6B}PaN2>${zs{ar7F8lBH_CkTTNdY?7 z*T6tCC);IcU2=@meFA-jhHS`K9x`X|M?2K&1u!5fmx8UoY!bI7C^xE>B!{HyuBn0Q zZI6I8zB(Keg2d)OjWZ^T=1f9XK58%!Ed%2)F-OhUnPkW?;!dI+^jovdQaV;QhAodo zBXf;YHyqj++d89u=4OxQa&4C&e7u41IwoT$U7`yeDMAfTTdR*%FlQW>(F@&k4k-wz z_Aq=I&mmq-(yA9--e$aJ>6^)B(k;d6f7xVgJhK=-G$|O`rv=Db8mw<0xHVU(g9Kb( z{?m1)`+}345B4lYfwefNYYvS4L+m)o4^~0965F5L=$^I=>8@{|3EQQAH$W+sIiV>t z$AUkwD)(#b$Z2pJfzKb#s1e3i&imE^7*8yMUL(*Azb1F`)&yXWxIcqdO~vlPP7e+Y zBu9syFYM3cbmSVO{ZKz2X3y6cq+~gOzcrPB+cfc-hT-Mp;0^DGKDF#gV!;ko zX>dG=If@9-KOI%AqPx9eDO|3Gk5T5sDE9Y(wB0O%EX!pm6FDkU$?J%-r*`gzTF}Ik z^%YN7SueAb8kn)Nb7l$~#!~LFwD!HQUhDrI5UExsBvPTi%Wd|hQ<3a3#5g>sr>#1l zVs_$_1>=KvU+I>T>{uiNGgTEdyc}tUUA{hk04LnSooi$R0INC|+s?p>h8b}1KQYV2 zS{wGCH@R}X%xo@uT&Rgk4(Qo-W6?ccjY5~@99>)AF~cC)?d;6kpvN%{H|&g=!J1=e zD?SSNdo~#UX9W11?ijI!W0Jinq$EuU2?(CLwYf2a!7o^Fl1eM=u!O|s zrrWk4z(_@_PgIyGd@}-R+R=AmkEiNL(L+F;)fll1)-sYQ2ZKbUH#jO?DvU)NLEqiq zr)gmN2;~tX(Sa#91{`fwGCLo&KV!4;}h;v%e8=epeAW3(4E$s|*k6q-()dY+`ayxHQZ1R%0h> zVj>ZRwriSLYRKPW0gK)9cQk|;D^ZmsM$+9|CSJF9EI%n>$5cOaK707g>~ob1)X%>3|&nt_X-=~V`m z9=+cFhP+kew|iW^v`84X_2hH=xW${g7Z)n|c1GB2p@|1Jm|UvEj3@>trS$K|%@qKs-y|11?ZA!c~-~l+_(19~(k~ytv|lax&XE z*U_dy2tfZIq;SK2GMQ1kuSQ$}-+96EsN4wD_^7?eh2b2E;&djHv|q_8YUZ zUOCfXD~SnRdh}YuaNhUslK%T?CT(TfEW*IZOn>l#twzx(qLUN&TXb5mJqmB_Atl?} zIq_V_hFP9Nb-1tu4WQE$qPe2ZAQl3+tn22kS1A&UABe?NE@Wg>Lm)aB5ufzo-JsJM zjJ|6sABd{;iY~-mB&$r=;0&a1C`p9LZJxH(9lkF}ZS2DQUkyUP^{J#xRyVHgJ`Ev5 zji3lko#hv1WVZN3+X!N(6q>mn(nq?mRXPi1!|~+E;MhRjnIR_JkwJo%E$?rX;adS# zi2E9ff#)N(LsT(?uS6+MuLTU|@Od|H8!(gk`tuEE;(U#*(Z1Iskv+M4cHiU6JDfer zgGk-WI+J&kNP-TOFtRZ>fdvQvKylcg%$WT)GSK0QZ(SFH;tenCxIEK#0L~ zpW4N%qCCPt!?)yQIv+~FJ1i*6+`;)L*{m`F!x`a69asG)vI*~Vu;PbKARD~CV$sOt zlBKAUc=Wg&b#nAszz^%ZzitQBs|XC)!vbBL;K}$vG!xrT6(zdi>h84SCY9ESL%7t> zX3Z4(LD;4*XZ)|uDqdo`e6PMT8R9xO+OXH)2fb#{r0oTgkzK5@Y($2}@o9wOHnULk9H&j~eIUJN? z`QQcLf0D(-$FA434g&%PcZpS;ZWaU%Wr4QYyg(7lJ8uSu8SGi7{LcLI4B5sKZ2>dc zzK?-LjDIj{!4>`-inzHkx?=|E9yAyDTjQMDMVFrjqUYCH z3x_&bCTa|X8S2Nh(&Ix1Z1OPzu9ew6GzR(HeiC=qSS0dSUUU`*^Y9{{-)D_aohnO= z-D0t=nDz+bRENc0wsbHB%&CtVvf)@Xq-a|QDC@i`v)F+TisePF`2mQ%)P7!-Sp2{& zCR6=xF+!={4{UIjy@AIb>P{5tVK)>-so0)KjLmg2U165B9Ie{VxrE*i4gjZt|qGSOW^ z!wVQKB@rUC84=!X!0J4mS&OO}fhmC3V<3e@R;nkWhT@3pu9b2 zg6t++u-{K${oh;7)w?6&G|F-?50PW@#wskCv$UjAJ>kW?#b_Ng9><4*9+h{w+`+-y z+YU4t7m!i=3KGEBt+#xsP=W!yr=K#SnfRCCAbr9C-1mK&4_bHdegrmz5h+1`7RU_; zfEYmecl@N3O_bWQfLHc@$Nhe+?99X^bs)Ce-vy7v+zkdB@m^)cbS5UE68Szk*j%T= z96vPh<*5$&a9YQtW2$mVT~>xFu@zJJ%Qd}2-&bE&ec=QaJfby{``oI5$vzL_X)9W9 z5CoLMG`fJ2P(nBSnX9ciJn8HI%XCG~q~=Jx#`&P(bm^X>b+xCK!DLd`_a95J!5uvV z`@^c88ZH6~_F|c0O*Uh2zpfrO^NLA6UxjlG_b(!t!S`@;R4r^yc;w&J%pA> zA%b;y1iU@J&z8W2v1K^t!TqWYMxRM;(c|L%EP{j+FWM}Q09{Xdas(IuWOIVTxp$g7 ze*dq668*D6Ma-@1pz%rKLkXMQv@FtL-kDyH5{%+FCLY_8yGaz)dY9De$X%k{UH93X&%X zD3FM2I-c3>~4`NCsjI9>HquxG7AiaSx!7_JH2JdM6{XKJRr<_fIyj z90Nr|mh33NqwY?AC3M7>-e@U};X!F{aLole>O>yZNLC8k6TWMtQD12a#T`>x0EzC> zhLrAz>)*B`6%;Q=1Z^vlY_#mDq-qy6d0k5JPbt!6e=Ao_Xr4VqyjFrdu9Fr@j<&%K zH3W+Tb9wA$#*yGKZUiFuu`UTa-bnZzbs)o=mWqNTGszVS*B=T^;y~IuYY7_)=$Nhz z-bgomcoNcUtU5+~@m4F!m`Sz;5)=mU`fiHfp7Bhk2a*p*=7j?{I#!rtK0*(07m`5E z@J!0&JUd49eXrNeC;{{^8ZC(UX{%CcmE8$KX9qS&pHC>Fdx0|b%M=Vf#j(>>tYai| zUG{eaQczQ(&T^#gPn@aQpBo21L2_giF|fO9rH`;i^D_C=5yP)p%oeRbO2#_ zt55=pTvK9AbkO70_x1Bvys2@-v6VuLWHM~;wi8b#vVKCJ1Y-e5_(q=rg7uRCOsGhA z*`s0szVRaWS&|arv(;7vjMn(8jGfq86hP?x;ei#VRJ#x@?FkdSp{bF?eqg_poNObJ zKDS&cT8#`ZioLFJG;9C&J(O z6bY>j2ca&{##WelGkt>wT+X6Mzr8)0>xuBsu#JXD_S`8(T!<&|i{g8?Yzj9vX{<2A_(j&6^dtk7 zUa}0<2|c~@rF323-CI3@vFdJtaIRWRG5@vPA)S+V{@R~6K(xl94(lprb&nr~Cek=9 zlzs|1jz9388uJi<$4T~ZMrXpY&oE(1RxexsaVuDbL6%DyXdrQMk4HXiV#w0Gk<8C; z1{E@nYsQLlV>grMlsQUa034`0{R1xutW^y%`YP*@Qm;1G5oX2I<^~dw>o69eE zN*AnPi*GJ>=?_Q-Fxcm>jKAz@3Xg}wNcpT&80Hp=q|R^4ZY*5_^`B(9*>l&Wy~J)? zk=7MHRz$*)8A)LLh^kCjF5~%_QPyRACmVHc$*emWubWF7Lo!*L3z~(+zGgLzYOl*N ztNd+~)J%mhk$>mG0dFE*h*rob7))toI-5RI2$ua^kB#uD8*GSTUZb#@Hp_&Jm!)AU zVfEu}JNg~i^wBf%69<>n&^XBYs#|q?0D7$h`8g>_Sy!=YQr_R*45%#{clK3VZ`3{K z3s6JH$0;jFd7kh>LTE17J1N=9Y}z5W;J*shw_|EFQqa@TMGbSj$15$;k=+jPpqiY4 z+=rhLC|rehlPA5zW=B0h@^d%0h)Z}>l_r`Ej;-cpp!20L2rU4RDG0~k?952Knrf=Z zqACwjH@_94nG)I?48qUSW0Mm^Dp!;-VbegI*&D&gUFQb*zBOeq4WnZ6z}zqp!{=a< ziB`|Kr493QXSe)@8wN1XJtFbzerc`L3^u6HQL;_bBlXGf&9UM`x<0_j9|d$sqdgz`r z6Bg8CjK23*iq>e9BiR+OEHoO#SRJUbWAW3KIyM~I*w{d)1Y6K6I!tK20NGVGB?75# z1_giYi>)pgo@W~gpecEUc3hJ-Erab^rqyP5Joui9fMC|#!Ug;QUfk7{_`gPmx;kQF zzY$iITB0l&UUImH##^0G`ix!B$dkBQ2^2!45-wL6lky63k?)aauOX`L)E8O3{9-O3 zaS4(m2D+OhMr>!L`0p@gk0si3rPKg z1|RIc{vGP^Rq19FCR9_ZU?IkQ`y@t}eoYNX%v!I^={ppt^B>=n{(o-GjR?$D7=2|; zxUCOm%Sm9wozuwpS%C{4?NNBXpw|d)_spQ)!|;Fs!U|vwV=)!dZXxwH(5tJR0K5(t zBGL|MCcVFzP1!FuxZ-el!5|dXB%Ce4j}LBLk+4b5aiCI?g6U@%;Nmfi3+|Y$xbV3v zNZgSjHK1@oN`u3oyD&50S1yyQytCdie+RoCLGsK`*PZ-o7tP|8lrH4vXpe+Wmy8*f zJ0JYBouGbzPX$-!Iv0h`jw1n*iN-^M6T=`LbEb^;TlAG%wJ1mRbgRld?y#bsd}zy` zrbG5uREJ_)Lf_juinoSrk#AOFRgJ_+5@3+j{6ymVF+lA7cP+J6WSRZsh`Gi*agj7; z!tq+ZhcW!2RmuHPeEp_)iYhUZfAu<}l1Cn>$gNb2;i7V6ItpeQDWQ2r9)}dtB8`Xt@I2Jv!q81>SrDN`TtnC)VhL|)5PeK7j zLcO71TgF?R$rHj#hVjsVxQyX^c^sSX{&)u^EW1r{u`O5Qe26t3F&}q7K(phO`IEH@ zP$lSp+|X4K_(PJhY*!p*-sx)6;{3GDHQ9B)+9EqS%7Za)X1d|`SjK7_JsxlM!vE~| zX{NZHzGj%)4VoRKCM2zc0fI}ns&De_Y_9o?eY?R1Mgb$fe<3W9_$DC2T(y4kd^H@s z#dF)#icB$Px5@YIA|p+Jk~TnTQsrHK_+FKIT<| zh=FfhV5{c1sHQStJ}WAd!Hho;OfRhPA<N*N;h5ha#8>Lp8 zZ(7vzz=u%3>3x4ME9_(=4sqW_<2bmGbo6n2FikmSUirg&VVHlp605R;=!mX&tZbBB zPpC93_HG!vdl{$43V{x{Yf&9!w3pma0{~}tI}d%KG%oh$KnD5gEmA4H+Xdp70TYhw z>=@Ea!q24ahXtad!aALBlplzFy#*R`m{1ColRY-Mg4!)pcw@N+JwAzt4oON#tD||v%EFt? zsCwWfXt0f)febHQIDEQ%C=$4HSLi>7+ws&)(5D ziX69Q!NMQMCLk#RPHK!(vNrGqx+~(ed!Sl>_!s7PUqWnnV!<0@8-m~b%_*OJlcu&S ztzPd$cB}~SOWVI4u$mHY`*g{>hAdT_7B*H7*7~&efa54#&Kw3tvNqX6MrUu9k~K)UHGsDGcaAOnf{eN^#CD09gHeXlzI)_2t| z^Y|+PLU*dAjN&8QaJ0N^J~%l7JbQG!Xc%Onctv^5s(K3?Kt9vkI#*EpPx_Zl)jzVx zf!?XUNOP7s;{%!tjUGsx;f;U+NYW}(<0fLM5_I%En3~~&tQm1W;<3?gK^6MQ%!M4- zsSKxtyFJxJLCrrw7FZ?}M>&w~fwPS20`91=96SBOEbE;K;1=4@vw%SvnKV{(z;KO( z5$)w>1}9M=A=*3ol<;}JrCkIAC|O$Lt(;{@BJV z#^SrLb!h4hj%W`_mSxoiF(KpF&l>qhxFnmEp73eBMx_i;~5;3pt%0aL?-(fZZ6q z3?J!-pwg^DNVK>3LbEk+FhWMab6sBTg2}Pq!be1WC1sU=c{=ggdD$M_ctb58z$j`N z1ABPcN)EbsMk}!IT~B{xT}+*;AG+y6+XK5sYC~-z39Jg+3W>?Jx1u6IM^6zyc)BlS z710U(>9SkoC{<(1rhnKwm9>;%eU=bDC(ag_49#67nS&nzDBP?@qos}ftaOsY0@ zLeKOU>ZLJnN>*Ob#0Gu8=fzMC!Lw1*9jt&>%aDl;75HjXtWFT!p`O{z^O{o{+h`TR zGL^b$qZ(z=Tsbpc3-r5#2T>SDo1bmzGOO|C@YuWX?`NQO34R?oR}S?l_FM?FOBN3i z`6|IbskLv$kVO-HTi!MgnBai7TAvah`c{`+NN(rrzPHy!H`HR0s6A|PbI1y35ojkvqB#%# zU4$N-*^jS!+>x}msRO6!-ek7Ja*252<0%#b~w9+j#PNu>4*_DeDn)FtgvQW)T!cvvvD5 zjF*V4IlU<9;rPrcjf3+mygLXa{k9@5O$~G>qXSXS?cs`St}X!^f6LuJvK3*~{tC-7 zP;doUb4vP#i3@>k({P>3kiQnyLgg4F&7quBf=)9$mBkVT5T+!a>j%@!@H_(Q1dVK_~Y&h4FlxGe(1{@=Lc1@MwUYQgRtIbEyATqr=zzW2q20PL)h<$8cR9#XPj3%~o?>bnPz1x@^=>o5w zx(6yAIjye`3q5tYSeE!wvY9C{OwSFgQ89*(B`ucQV^b;Gk?UUC{i&SiFdQ7N%AZ6L z>1}wHtcp7O8D-R@LBI&UfJ`bIa<+1C-^m4)5gNw+ZBvBgD5X$@O9Yb=31&_HT^WCz zh~k5#n;6TEUTCbMUqTWTv+}-TEK&e^aQOJ`#jXP=MoI&ohL!}z zkG{C5iyRi)!&xsHAI0!~Sv4hy47WkM2pIdNXS88@OO~gA!Q1BE?xKRu+~L3sc=?PV z-22blb{$U@%W@R6=-rCj;Yw5Q@axvi;XdD@T-9$-}2SkrbVvV@5Tj z)sQ+n=!RLz*XUn&v4|ZsCBLkD-r8p=RtJZ9d(#8O)u=24JT{>5iE;DqI+`~e^xgdc zNu!b1{g(rV3yFV|Bfe~lX2yA0`Q!D-r>*n@3PsOuC|Z;J=N~r`FABMlYa(#=W)qgE z$K;0JM=9U6+*&x66p}0RCmNdmrX$b9?b0tn>9sbHB#x!_YDf!arh1(=Uysxs|_TyJUG4QlUzoHV)_Gn6OGXG>qIpO2g{(>C@_kuy#WETJcVS% zL;`Hk9W`%t;4Jr4ipIOYy{0K8ULq18|2z*4CJSO!Z7gYHO=`CxLdn~DPYi^FjKq;3 z8xS={RaBdR7XozwwK{o$oK>P^>?*m!;zG!o;c3|&M zwf!EIgc>L&SutD6f3CKI6v4yarZ_Cful7Cjf3uAMVI;6hNlq@fo;0THXu#)ZwcVSE zAyLVPAXgMqS5^GHQYQ4S&X6S>R zF-b#LH{0dy+uo=O>6qrAv5{3>Q|aJVKu}c(o6J2eG$vZuO$NMuM!^4(B&dc!YYibN z$_u!f??zZfozZ9mR+K{vPg1HPKSIQl634lCSR6OI=Si$CnM8b5y}#Jg)ahygL#*2s zQJXYo>|jK=$C^hSt5is?h%NJSN`IjUM(LAa|Fguf@p=P_TDGw?vYZ{2CSsT0gZSZ( z*|o+BCi9~vCjU0vdbm=heNCU~WrFgka}6vY^GyPoym{um zQu}h*e;lj)#DtaLS`68~8V%%FMX#~R3xX{+PXe9P35BnWwT%HmO)PJz_x4A_%3f8r zeghCKg0i~s-W`oW&s`8VwzDI+t`L|SE`lT31qM`T0p~H>MDfWD`D^;EsS(Fb3Mv~e z!8RhSx^A!eoyMlHMMqW}TUhko?}X2vc!7zOfbrJ2S=$BpWN_;}Gwq*3l1{~8Yp4x) zYkl+UUwmlhlG0K_vOCCGIvxdTTJ+VMUcoh)s+`jI#ncS?dQ$5y4*t|#M8%m&jT`+^ zIWdjYVx@~G`}Ze|futC{c_}<5uuXkSzd4Z5kiu6jykQBpF`B8-T0c+OgoRlcZ6*vJ z7S)7hHR##K6KAVjJ)f$^ZKXUsxK&hCW;@*vNMrQCIe5T;3$ig+%Pw2Mw>GQs#%T)Y ziUObx*dvHk77*C-CLIu4$W>n^y~i%oXfIC?{Mn=iW9SCsvg zzvF7>t?$|c`mNk6D~%_M*HF#Pxt#3m{emk|S!K9;r~9Fm`LgWamvy{ekwL;#lTXJE zOWKHVCm&ZGGa+IGH3k8lx9~y9Bg|G0jloD$5~a^1UJnStkxQUf8OOjnAxMnX&m#dR zUzAn{emLhLLQ1_MiTUW-7qn)@iL(_A=-E5o(T!eQoSe{V0{Z%g;v0=97c$)`G$aJf z(wcS`^FTVA61l9A$9p=Iny?yvkND`bjMq?8m4v)^F#gR03QjH75l@ZN@c5U}@-enV zgp{ChYsjYpxfJO%th!S0pIf-MPhWVVg~`25dVke5Hu|=ULEf5E`l2%A^ZxN7*)*%x zx-F_Y1CoZsD4nN(uujF^AV)$~^YP?oqzU+#jPrXBkw~+Su{9 zG+~Q3^Q6_GXcJP=iRHMOvZ9iU{P_d&&)xtM<~`Di3M4XvLCM5K7bpsO1)s^7AXcy2@# z)dhF@2crcg*_6n8b=RzLcCfTrf$6jAjXO?Ix1(CFd*md5kD6ON=ue72Ob#aBPL|pDa1?c@K9iwa-OMCxE%WM>6{`Gf(@S-`_kVZ@$jLD ziWS5pogn_txBmJrl8cQdU+v${DsP&bB^97J`)PPNSNkmGdC}=C^!Q^Nx*ie3$e#w}(xLv?*@= z-~_Nqy!QUQ8XQD>1fMkE$Q(wjD%th^>CM!2Acu!-J;EMgG?(a0{q=5?$)>}=_NpW* z52s5Y1PL~F+gs!CRd+W5%{kAKv=A`~3NtF^nSkb_v$s>Ls>niOphih3Vg8W)`xTi~ z?#F=#Dev3;Ww`ZhFLBh%NjO|K$Sr45yZbAYz+kex?|KkS4><$!o(7O4FkWhEuxAMQ*f zCX+BKvH0Xp#`E=#h`fBvpIpPiP#}0b?m)8N$)R4~TrKQRV%0;Mt5k&tcUv*)o>#y! zK^1FXuS8>v^Uh-WHt5~1NP{0)ZSMEvo12^Jo)sv6U$_6S zhOaqyJXnXwi!a~aC*>@b6WAWE3EhtWq#U>^O zMrQKj$Sdkb<5}CX)~4ZsA02gHTTqeF1TE&8N?Mr((d%Ry{z=)5WquDJe%m<&+Vh#AtYLHZP>OUL<%+WrwRsWszXJv~` zTb*Za3WbFggNqYNzW&oWr7(~Rbuc?I4tq9F=7tw52xm!FDDjdn+zrNd)ni*Xg!$k_ z4}q%-67SD1vfRq2X*rtD_zDw$e@;k46Sbdcc2*tKhzcno*%wZ5fs82`F?5o^vu0LQs%>S z?PTc!X~D>WgQh|{y1t42hOzOiq${N&)!ZNiAN=`}iYVL;4ziOz|2u7e`q@V!kihwC zeb2xG6o#|3oKh^R5@^{*!+*IR*ba1Y-1O;J(LZK!9-_s~Pl^=8SvwbO7{1{X`@BNa zFgd#N-Ny@}yQE8lypqvr9^1f?vJm5(TlFp{de#ZxU9>nMYkMq2AV)kZ7rFMv#TbGl z<~99lWj!6ge18uod?qCD^>+1oLv$yyJA1b+Y%lslA#tPGi2vK4!k0^We8O^|+K`D( zyXzGUZ%-HSaAlf{qh`I+tymwQB&BgWQSw5!wHNv@RQ-9wY%K7yW}FDxqq%?(cu6=I zK{U2fWx#=gCI!L?J$bAB2NW*&lP_+{eE=TA?tQO$sYpO3KKe9HRBT1a4OJ8PIvtyW zVrEQwI`SY{p&vtLB|JXc9oHSJfVESvvIW#ixA$D1AkJpK+2L4PpLH)GXR~VV%29;) z_5WSxyonG$qysV$B_*i}qNIM`V4uy+_WJn-+hdc?SzlPO&iDk2K*SL1OrR-iM-h^3 z;0Cv!v1YSAY+wqf&-h90V4ap{N1{kX?+=HVNh*+NZVbZHMZ(T0N&WMT%~eP!t1VF=MU|UnI%2qQ_Kj21UIofEEbk2Zbu%=LTqwFrRQKN$h60R zyd&(Uuc(=sNgoVUv8+1YuomJD=XS&acd05b=>4CSdk4aWDE^3|CN8RAOF?Ic5c(^K zv7&NR+HYX5enAe~K$Sf%&V+y8NI#k2aGudz^0!hz)^9=*2{;pYw%xQCdSj#RM@UfC zu0S=4oBDQ`KO9u$7Xo zEU3M>{Dm$s_3!^|p9t0)&1gX%Ttt}`iObS?ZR!4$qLHb3BR}=-wLcWUxa%2kf+Ddb zg$1SW$C~4z&{u@k|Fdr%AH;kGcnE=-<$~KP12X*}Ult{85kCV**8Y)eAA`tRuH3>=*|M|`>$Ls^xv^PYYG6VEi0?P9-a(3`> zn3tgsjBeIO%qa2PFR&WSlIcw0;8JY6-v#!&n_7z|VEc=31O~g`BCqdRr(C!7qt6?N zFT0rRwi|xdS{wr$Q6$hsDyF+Het4_h)->=s9=<)2Y`qZ+?}$2Y2f0zH-}LT8u6BD; zm7@@We0+ZIJ5KT-_*reCh4V_#w+T!DR8Foy6|eUmA0@ddbNO<>9d-Bh))Yxz~z) zv0!l7j4|EHtYN4#n%3qGr#Af*6KbiwwD=|IjQ%kYzgqi^K&Fvf{Y3zQ^~G~z-&?=~ z?-M^9%T&Nv9s`y9bQw$&C&Q5%^7;ubsK15*kcbgp$^dYFmI=D8=VV%*s}kpz-^x~| z?f@^HQOf8wLPc$5J4T!UzL*5!7*Mp>FGYy-kPQgP+?yZ%aG^gur^mOoINUK$a#fiw!!(EWE^7z#RS z5y{mPb;g-w&C}XJc_RpY(#bKOFd>4r(G;s&*NCR5p21oHMX0r;QDHY+e zrq8*L99=oU5ISlXQInzwbczZ?rlsuHF|i+#GOl)m)v4O8l+XxhiOGUm1+NHM0jMW*~C>Ge&!uBrYk_a1v+eM4?YYEceO?nQ|nB@#%u8Ux>j*-usIp81VAiDoJ_7SYkI#e#-%?lgD{=7AoTESg1^Ix zIG^i&4I1KBTR9B`{OQ_V`eK!Hk{URcfLm=|1*;&x7RBMg3KTsOYKWp}u5k%LwZ5{w z(g&tJla$ zd^PkbGz<8}Z@T8cz>QV`JEf1+@e_f@$XE6kgi?>*P0ZQsGtoMi4fbv~Nm z>Tv!t*26bE7*KC4ofP(J#vQInjSNglK|-DyNd)nn8xe%&QL71%;sNP=gbQh2lf2Mm zi!I*qwdBD#@TP`n(#*00tXSPRYy+mN?OL(P`)Ppf(i$;Y-kU+r9P2FKZ3@v;gtlu5 zqN{PDCJ{{QWRi*!|qnX_~tPiJ|TH{-ayF}%1G~q5Kpuk(YGN_ zBreyQUJ8uJ*U?eype+s#k(A<`yEn|`?Jr;rF*2F79ymTaBYXWlaLQB; z5hEjN)Wr_KN%ok2Wnio)gx$p--k11v^#)grO15}L+Yho;=lyWLY92FDQlH=sl)}vsR1wZs{k< z0GI2rEPa2h)K4Q44lT*fjgUaC$jZ?N%%U^;Nk}&QtnTTELL^*Bk3UUgt1?`Xb_yNl zZm$pDaLKYf;3$}ac$Kssl6XH5<-M98$hV4f2#duLv1`|hl(PZHG+}T}zN*{Md8SLTP?uAqRfpKfE_Sg0T27(!#KhzAYsjksPjPphC7@>F_!1Zi z>lZPFQL3i#VljG|MsmC^okVb6!u6jnNMspn7w&9eV~1bou8WT=el7}9hKBj0&pYCR zoVdmKvjj2dCd%_U$c`-X!ej}!>RfTW_ugXK;tWOzQ&$E;_@*dIr%l<7SM9;UhlqeT z84iKS{3~SUP93c~))W!l>N9ce6CKhdU}1j*II?7X3@M#C9z*keL4J%|DUE#?!}alG zQq`l_Z0n8qUz#Hp{tPG)F64)!8^q~dkn>v>xK!qlq}-ZMq`}!FyNmH^2-ES<_!(%) zE9dQTPcZ)v!$3U0f1)>PB8Z_;8xoaYNcw2063<0zX+1bb(wm&u$m`7>#Cg^MQc&4I zO4I$xo6qTFle-03aygV9EhjsMIFqTDqDaZREkw<_A4#EADe~G{7qlFDF1$vnsg%CiFoM`jIYmknuT$C9A@7o_ zNk!r-(nh}@VQTrFG2O|!yD?0*$mQkkWYLuf^7ZmmB4_MQQY!=`^~H8#(|bL8d_+r- zqd^%&K=0|vrkALCzsZF{| ztgU*HINJPGBs?c=6}z%Jdub07vhFrhXUfRhzMaU@dokqRJS#H!Ts#fqlLdAl_7kpA zH`T9$9LS}J6tdjah%9+r$cDwfK0yM7P9e$nNGp>rBtztFWUsp_nSLXVJY3>Rnp=$| zTej~aFCy|pN54}Md7Icfb|(Q@0#a9+O73_^kc68Hh@T}C(sR;2Qb9xW15c73gO=0!6G^BE zNlt!9CH(4S(p|@d1kkp{dxJBv9(9o(C!{X%DpAsQC0W$NsVXK<9$q1|DHqd(8#iu{ zva%nohCd3Mjy@#f&ePuwZay|GnTFxRhhhBUt;nqtg|nz($^dP={*Z<64^eRFU<5}C zGsMMZ;%T@f2KQ=B&lf;mUS8PiR@TJOVMC}}8g@3V5Fek3M;EW6^4DYA`6+LUH znOk8(Hv`D%SU|U^0I4)BiDoS@+{2A62amD6;s3-7x6fUJ)2ubnl?4oXPJ~5$D7;IG zA*XJI(E~csvlL-%03^gF;>e{BFt=%m;CDVK)-*u+%Ueh*=0Q?-Fg&c9LqXRHt@ufZ z<tU}c3AMIv7-^i1GoQ6FePBz3#?`_1!&fX? zJqI5iJ%k`G91Y#OK|@v<3PqtfaOp1m{6E98&kU$E*=~VLWkR``=rvFyQqtfF>QE}F zg}1pWm}OdxQ|FJMyPhS^g*BP7!pp&yr&XfWq^(-)|cRN5*la_}Op51zY z)Auv5blZ3+K@NS_%|zbQo5(8TLb06(dYULf#l#v~+%zQS$KgsqIohaH;Qf0)$Z9L& z>CM-WpcT4}>qr=>NWjRZBkD4vP)T#9BqM=l8d~%?&_Y8SpRXUr?RS2NYiNVM);jF% ziTMSP3LIQN3&VyD$JklRktm#*^^K9^dcg0)X9THT z_>fajfE4q7MphBshKz@zlmt3;GDUiHG+tl34BgS|(M}0aF)&4QZ8cQa`r%oQ85WLW z>Wms@&F_jkSKeayj9Ezd5&;ywL}iy#=u&zU@eRP|>N51RG=i3@46g0nf;S&NpweIr zoEqPZGVr)m>{Wjl@n(>rbu_<(2hW4=5P5MFUfjKk<-?uPcm8!z3?Z-2ABL9uHaP1^ zKwjMlBYWB6_`b{VShfn<(h@KqIU8z8-U!XEgp7$TCiF9cl(G%zHD+dvBTp z8Q8W}!q?a|+`D!k+UENB^8P(isTp1t@EFnA4OEBNV@!7=NGh4Yym=|2vzRtO9@26u z?5MiDk|tye-{au*C-4vd3P-nz-`=E&`Qt-va`D@Yza26yvE$fPJbwHHcaCp`&QBJ8 z7(BW+LM|P_gER|tZvoi1Z-an0cM+>#fj+Hh1YVOFfK-5(4{8~Bd_HZI3A?I}tenV9 zmXL%b)zgF?V^+Iqgjpe{uBsYJo?{{D^AuMfy@kV&5$N7g8rQF1hGE-&G?omGz4gQ5 zp4y22cn94b+9R+;cs_%SWhY2w1tahKX0DVH#3TYPR?O=tIp}qpiG<_?L_VB_D?3jL zqlgd)0BPx_;xAxV{%PFkmF5ysG!mcrDw!wxNRBFf<^yHn{CVo8k=eUq%7L+rD9jR_ zGSnbq{z@@7&mu`13Mtx`p_!#WQIWBmRy9yhOCSw~@BzzKnH}Q>(Xb2?qV5~vi(#_Ft?h)i>CE?sm73@FxRv3qY=8-UR-o(HM z%_Gw+G*$x%X&HKZ%=~u(K37!NxjcF=A~~dP33?x_q%*5viGm4V0!;PdlO}bFrX@-1 z6thGw_>FanrY$KzWoZRXw+00{nMg^DL#0X&oH;ZVocekiRaCgl&drjv9qw-?3Leq&&TdGvPWI zN$t+ImNrNZxQkCYQncfvOk*^y2vq+!2(=@ReOAmO4!j@Q17@2LR{1t*4LmlmLUi8C0v{ zkn)q&27*2p!^MV~Fd_lHPD2qK6^FRM-S9fG8~NW=DVrrJnWhzi38S^6i4JG>8|Se) zoQrx^e0ktgMbID;Ww!kgRs?pyh=pwrWNBJ_TF<`KDz@&kZHA}~VBoX+r|?l;R)pHJ zLfRfABPy~2E3aHadkrqFAN0DS;^s5|zO@IUJn9TU#Fuxll&!$?!xPb_&kCADF@GNZ zgRS$${58=SJQ5{$4$gVVXi_m7K=iRGCJ*wzdII zy`2#HM)(0`YLGV)v&+%kXd2qryugES=F@f_u3QX;+h9kk^P} zy6IT8Z6^{%27K^`SXlLN5qd-n95(_V&u>97)vwG-8i8L*v3Pdo9vZ)|pbGQ*$~;WtLydCklA!9(9<(Q zQBg4)n)~J$9+wzn>f{O7vuO@8zQnQNV*Ycw_3w(yYqmjav^(qX-p>S^7pzCuZmz6f zK#gz?^FWwqLygPEXUZ5PL{S@k9Od!!X*wJB__aT+8};ZkbUgAN9zZ4|DkVX<86%6) zJ(SVfxd)Oj%|ddsanMju#ljACn13`J-MU!=@%OOlZ7HTtn}p3rcR(ub3(A|k)v_3| z99@#`V)MNKVdKlqz|5I@(SO}h=%+u%xZO8U&598pL4l>{)yA(p z-FwH$=$vu0z~ zBo9_Xg>1=qZD+3?%v-obT959%_9gX}#ly`zoArhr5LVesF(7WFO@A&XLM+jkm0 zC(ppl<(uKzMjByFR})g`h?OI(uyNW(2%8Bm-X56)Kix%GJgOVQ$#8z&v3_+Q)k(_QS$BvvRm21PG1GJbq$QzQka$E z=)H@KWTri2nnPwiX~I~`lonD(hV}u#KfsH*!I9tryg9|v27sCYIJN=VOi5l=<2sYS*frb8v-w4?`KI& zn=%pmX}ML$h11TAm_HL@gIvr{aKtcIL%7*7uM;Wy9pP@)8Lp$4QEQ4+GdOp#gA`Rp zCU%`*peh_yXr^ZYD;;@soOA-iIo=pJ#1j`1R4}-=C2FaXdHD1kUhbNRVMF?%de}+q zA1?e*Z_wC*=rLZHc1veh7}~VM!~sK(c5R)v}Xx~_V*ALT7 zk}zcOaE$Qqz&p9YRH-he%GnUZjO#FAq&r59aL0j|cKCQ}f#@tD?MCjwm1zbTGH@7% zdyc~8PZ=0`b5jeJFy1_MJOHMMkJqTU&R6j%zsQv`(AJ`(SS!MeWAbCMA(};qfZZJ+7%$LZU6^n&JmSuhc2C< zBpL)Xv~qx!YICf-{|vQ9C&7KnJXFx<kr8qi*ARs1FRAzSWX7!{e_Xq2#w0 z9z#cB=+Mc~oqYorraJ&8{oq{wjD}GeAL@aeuDfx35;M)x zSk@AUA3i|Nt@#-0IRM_RXXC*FX9yH^U}ws_BBLrmMF;kl!g7FIb9QIddHTyT)NSt;cQp^uYP$%smdn3o-!@ zwu^L?nEwLC7(Unx1MO{v-sUD4Vde~*NmE36P!1hkoS{f9MZNZ&V5u#fBq68W7WQVE zFzdSkD-BZNHe?8Pe5}WaL3UtrJD zgvaS*JbQQ%O4QJ|?PL#Gc2HUZ)}1<|nW*lYc5*}uS}4q$p*IKSV$!I=I8)mPA9weI zro&9!T-+8OZbRX={4#djc?*5oGMYMef~JDd3~OQ90Vd7mVNL7rbp25D8BFh$-p7t7 z*-%z$jxJ7i>;eD`ruJRXLb?IE|3z0{Rn7<{8m^6JBm;rw= zV*bup_n!iHGx6t?V*Y)^2Dun9{~>)Qtw2v>@#wgizcWf$xM~eriATr9{LQf+u@sZ+ zm@lxzi23C(-v@{daxr4Wh!G=3j2JOu{#Q_oTx^hw`9ne~(s1U$Mr^w5B?|d@_LK7vCp{LVg}TpIK5+K^L;9~l?0?SW|NlRqe5eQx2=XYp!4VwxZ!Hps;^r7i*eT1miTpPwiI zsEL1!wyiXAz_%1tQ5WFgwo-KDx8?MTF^G`tfT^CY*y+&$7a~hVN17tQqa8ERclam_ z?dyc`Tkf-=I|sMNg{Yq_Nc%tL+0k{l`=t`q;iuv3v0fDV%Xqqe5EfqfBJ>moz@nWS z@`OGyzX3(T=V8!72bV&bWjcj?IX4LsExRC`8k7FJJTP#Ra4Emv6n+uLPgsW5y~m)3 zUKIvg_Ck{A&=1t*VAIq=@EA1)13Q~x$ID`Xn~nkIJ&`Pm^2eYGyA~}*G6(S8=8i$z zd_>{DjOATT@i1Mu&UNOS?Qj{pk9CXrttiFhHWF}Nc2DG|BAFWq2R&KLx|9e(-Yc|s zn!v7_@>}zG_f$MBG{V%8Zn!$LJ9fSnE-Cs`J{((u9>YdrxLXgnFFwJBU7XSNXXF2` z2)Mij2i|0ZJB9oqzk&%V+T9FzO)Uxq1^BaxsN<5D#M89rbV4y0Eq_43^Oi4je zP7#`{Jd4Q7vvD-h4(}e_$7Anz=r5Ou6dImP<0pyYvn$V%pQcYugX$Xgep8ZjM9Q#% z#z{j4J?EcMRh)(Nj7%CQ1J$Cz7hYWz>Nq?UyRienqxZ!Hx2gbX>Dg!yjpoQJ zDnnixP&RPHl+oXJ)GRB^5tdEh_^RfF*EaYo4=(7dd_85aPuHRRF$;qP6kCtn0DU~UH18O;ZDla+6D-x~(TqSx& zCH3Ej_8LkHs65fe(I0B)mdiejefz;*nBZLgNd!65?0?m_7)Xt+N7p-OOxJ z-KZ~R<7A8S{sV-E!W@x&=6v52pthzOd`=B}USX*)ZNjZXbpsC-g|yyKITRuZrDn|_ zNi%QiO3Sdji6|V%&J>j))iWRsv`lGzrT)yq#%++Q5FeL>?1t(})HXCAKbzi5UXwRdHDzoa$jHn_Wxc52#rzChWYRuq#Z>nPDV+7A?ljE5=wu)4NIRX z!te0|Jbe8gQ(ERBfIi}k#5fv1g^e$i&Yz}F#iF{JD$jb_9%PB)@M&IYdqDN@KO1YW zEu(c>)E<!?mCq3uB?szg;!RzVqxvJ#Ncw!+NG z?%#Htt}6LnhKzJp6bj2GBQxh)+n1FbOY3$r^2*Cl&r!wX`Lm%b`hLX4R}220B(8+ZKPaI$guQX*!$tHZCb9R_sB$ND|-=x;9rp2Y}s zll8;=10k3>z7JBK?ZAW`_feD{j|&f;qpeAE4DT}lxf~86zciqebuAW7o{yl^Ok6l| z7P1CiVP#N(*&eeIK^xV;chB)Cwi=#Y4Y6~^DBO+A!@I{95mVM0b}EtByyGfL>t!LR zOUL5}kC5LWh1Bpo*bH!jifCi9u={)QFvA@4$2d}-ENoo5LNUz?+YVesAzupVk;Q1= zy){nE9*?_GdGLO89#Mt5aJ4tUOc!Ik%;6)@ z1%^9^7UD%@8OKVJ10@wX$ras-eK{vD9jks6G@LYW73`{C`yaN*?Ui5W?_$KXE)$eWClKc zxPzNva`5b|f@8b4(|i+@r{_b{P#T+7oyUZE<51#r8k07hp~g%kjvRXdhd~2T?Y#+h z!w*o~DHD&*U4T!C7Tg?6aA^Ky-2V`TxR@~9xbp-(h7M-8TmB=HP8${#6%{mZ-dq&& z`%szu0k856;ZPg^36H605qb`<8XVC&HyDmH7NO?BS{zR?!?+&Cc)oKaR@_cPX}mYK zJj;S-^UrXeyce~lS;($4gj&Hp%-C?AKBF)kKK=#{Zf;O1euME7_8_A$4KJ^pKx&Kb z=pqx2iPM%NDl;8tj$J`3``)MwIEQ1m1F3Z>hk}BSc<>?+0%;!Ypz-0<#ay^cEUIyQ z+a^fa&%$8lLo&sd=;GWSXT!QJCk&q48kIvH%(N1|GZXZ1gf1WY=+P22!{YTJe=?awGT8lGTmKfX3 z0FSnh!0NlyV2XWRy=lH z%f{4Uo#At68rIwlMrPbg9J-K#k;A*-#`qqXa4QV_{4Y4W`4DP44?#zb6io44im$X& z@!{!Ryv>opASZLt-TgTT3JQX=GqW!D??ENi-A^%UydB;|DPdSQMQq&o79RatAXTXs zCbY}KwB@%kcg9c@`klte)n`$VnT%TxAE0?#3#{zh9-&o|hzKl%Lr+a?oH!A0<8$%& z##t0fS;Nsn5u3(OgjYl&B18Oe>-k3vcJGa|^E_}eC=a1tSK%Gk41KN3v2DXKWLHUm zLyb`H*SC;TCV{-zOc=R1K}$|p6H>iTVU zx}g^3#kn9GYCZ(x+azQ9nkSeu%>#Kp$1rOBB@|{P;rfGn&@gpHz{N%I3d=!g z@I#z!w$sNgp2RWoB{1`ECT1X?tlJ*AHB%nxm z8WC_wLw*3!Hf&G6RtbZ)_0%Gh&&3Hn(I<(T%?J|td>euOcwrbtK!5M|3?&Xz&je0c{Iax_v{ z-XC_k6UXW2SU0KpOiWw1CCSt|ynRb@F|?cw4n8uDbYFCbbrVuTJS{EB$1;((3F%)W zNlaWQ>7uJn9%d8rd0Tg4yY!y$VDf3AYUxP|i=v5^u|3IW1G!|Nu@pIADG*9zco+$OeSyd-*^&zCe>ATH8GGuB@L;JQ zQCD{+)ufyZwJ;#p;)TJHhei?O=~qeW;}t~PWtlLr@HH_tn?MNf4S|FSq1g~pmrppN zYyFY&@$n&viHRcLf0^1mwhp|0^^*8TrHKNCWWC-*EC%l&m4RD{^Qiq~&-9VxT}cHQ zWTZp9=>zdy+nID(`+*dH+Cy}lXNu0E;#E)2eYKGo4qhn=$s_$u4avPEp)YXv5Ms07 z4tcoPhBz#IA`D~@RFai0+GPIS9HIZ?P9kqJo>UZtlGfd)3d4A*#7d^gGi*Z6oBhPP zofXkgQ6&Qw9w*twG*FOEgM9z8~DarOHEi7G0p-2`s^lC#^ zy{Qp;DjpK^HXcMIo=xD9(9kdv@Z<W>D8(Q`9v@Ac7+q^y2+p9`)nin-RBGAQOe63>vCjr6gfMlIvbLuxS?^O!o-TGG{q{!@l6i-;G#f>aqRpzc;p@t zPg(i9LAXdw{)*U`7{n!|q2VX*;{?10$ZI=eYWpAzKL~8&R8~QnkAeN&rNX8p|CojbGNfYrb zS%8S3FK}|}EsUpVjxK7F2u!aAwJ1z~iC5<{w|HN$PdR^Pn)?I(G)khBSw} zqXVL8xCA}7zE&9jlW!!Pzop*}omGL*%t}ZqYraaVy%4*Gx?<+Oy9f)71GlOHg;jOzoUi6Ot%XrcY@uD6hmuMfu3-S-vgFcm)>o(H zTnK4q`!))*t+I@qJor(sP}-^&+KX1ll9W*fDG9;C?v~hoI{;r2G9X`5jBI+0%jJPn zFPcKYCy_W%v>oinC`=peOGE zjJixlWeuO!AwJmeCpnpT_f-a-14TPtcBSd3B_OY&8q%7E&|+kPpN9`gMfm!3E0!%@ zf~A}8K_JINU6VOtRhhn++oJ>aJP1W}QVwK`i@Co1v+yDkJs7MU3h_7`J^Q@in&+$P`X_ z;PUvW6X^i~ql;waQ5N(DJPQvPh~&9v|1Jm*jAHAEmX019CMl$ep4`B&jF zdpRagoC=@xe`n_IUll&GsVv0A#3C*s1&y-^8)4*6Qri+MhnB&8#z!ofdN)7LVW{a>o$;eGwJs;R>zx=GDs_`!NNeB4gC@lg5s1&h^oFwt4~<4m6&J;2v`wMqq0%VxswU9qRv@p0%Diez=rUV6 zQ*14ak(!hRDJhZZB_RoE8QP{61|vhK}S#1MkwM24JlQOo;(-JmM_PmDI=l&(^)i(Ax!^_UV9e%_fBJ9 zi}RYy(<6L7B=k%mQ=UQ1?j|r%1Om|PU^EIji?$KO=MFs z@Pp1^%V%laIlluFCrp5|kt7;tcrnHqOAgJ8ax17PNj8~t$VXBh4~DH(zg>%gDMKk* zhEk=eXu9r7=!H$Vr#T(>_RPohh4X21(ZCifp?RfNk1!H7Xb3GEIdv^)NR%K?G-1{( zP89eZA`nXQ$~~vBcl}`MsuLO^A{d#}rsbWV^5bWdOoxkoUJM%AP!*IQUu4u)(r2XD zN*jFI;SEbm#HGXg(Z2i=rXP3@OI=AMWeDS;Fde0;s!&moXQ#Wd(7$~8+#9#f{sy-e z$?SIzau_yh9G0Kh1+~mb6jg8`py#mhWz}Gy#`&Ipei};E)S$w2uBj}tNXeo(?KJkE zz6E=BZNrwWXAu#4A39B{-KR6_;BB}NcX!Uj%q26RBO@}*D3bJihQjnrXtdT7=9|hM z3#SkzL=D>NazClpe6(z>i@X%(%a89|*f0~y6VBt{ipf|ubs!XFgq;#*;S4Eiyf82+ zGv%z>+8Ba@BnUtC1hUdnphKSv^L&`}8JN7#r-FKkmUx_+gU6@#V~BAQhR-_49{+oz zfI(wsVfpf9SUhXuKUqg!fLf|!dapcz9jm5Noy2sEzH2x_ABv=UD=2gFQP`+3 z@7HAXn}kT-no^aW#I{MsP9B)ObQ>mil*h+#Dl?Mw`HSM~80sK5rLiK^A+f9+ruypa zN?kmWyvWnG%G_}XcJ19m+k>5W85NHO_DxKslvh~)G8GrDAE6z)3Fu>`1g=P~B_u`h zs&i2;se$IIGVIDnjm=kDdI|JeH>a}sy&f7Hp&Fl8 zkBYJqK*a-#I!0l}s&fbl{DebC58_K|HC5cTB4bnz+xE`EgEh18IwTNVCv8W!85_|u z`xbhRUW$OwNZNDPf}^7aMlIWn@;j?=!!Huo_HIVK*%WkD0!qs(z!fPi*MWWE|Kv7& zy~BPmVB;TegX{EN2nhK0t`atJCz3}PrEqwBeL*HdvQFeP3ZqoFx?%srk zc2m%qHaewc-_swybPF2Z9>$H2QHY8Dg7f>9A+E`Qyp&BJbX2LrlUIRw|M)mAL@@^m zYlIZW`XeUn1E!4Ij()2)Lq}BtQe~NV7Z8RgCzs)o%2+J0kfYZtM{NTSe6FYrn~%f- zn-EN2bCH(eM;ttH6au5(P|lCS$KWtrKe!gLw0pytB2Ilgk?3~^A87t^%WF_wQ3k$@ zDOQit#j3^o5fc6ei?)2i+O<=`uPaAIwa7f-b5K>?0J+L240ZRw(@&Ae%aMeIixZlQ z_c8iem}gW~E$r!74VjH09hf=n98_0UQe%X=>Z;i1X)$gCEaR4A<;713dH)de_ui!^ z^HE(V`f^Lv0joUKuzKlXghsr=(w(8$v}p$XPR_)Xt=AA05ek8-H5|J1#>Nf9ac;p3 zy!-qKYi1mU`{MOztyG87O3_H5iat8qE8^Az9|Q#@vLAf0Nb_)cwL2#6d5n;dkJvYB z6P%~5fQhaN96BiA=EDz&jIP0!onvrj-Yho#RWpynW9bIyHccPRv327p+}*JWKH<@b z3=6@*{aexW^E>Nq10hKNjL%`=IKOKn;%H$onp8%>LHI{6M18u08OOh3>*@)tF#u!u-hlh)|g)s{Uj=I5Z#u%Z$i=F4;yJFHzblnt$~t)encH4~3R zbs6(9ur*cv-4sJ`EX6JC*cbZ!fxl}2KwAy86U0gk96;L?8(BH!G`N1qTB zbG{quIeur*dBkeAJ$QCwH~gxcvD5{ybM24tx3}Q`@e8abtb^Kz%{b*9iHB#mAg2&EpWa-@u@~8_Q7kDf zgNo!(dS5F3uGl$a1wMwo$NVKXF=Nwus7O?ytWq>EM%(x5sv5|1GBIuBAl&kaLPkmzj2)aH zdRZ*ye+v1}KI&v&-O9>BT3VX^q}ZODl#C3u^2xuo9xfxu%p3h*yOuPQ54k4!V5Thm zTv8Gegc_K2kfiziz07i^vi>PP>XcG|iD^4@Y;XSU%XtQM9Ya{z*ub!*7EH`6VQJc$ zD!v7f%@0LXTqv*$2Or0Kt<=~ruZ!ts6cX!-=Y z21c;5vVgJ-AggJHk$ueY^2K{hH)3F}TB zQ1$5=uEhezid-o7oQFN*?Saa496WLjCME_bK}#Gxyn%fSp{_&kr@amITWGUoXwg;= zE~6GgDklVA;?p3bVS?dfr@*mgCHzCaK(WIJ%rGPbRn&zMUUCQl6gfTtqh~Krm%K$MK65<|IjZ;Ez!cE z)0?36C+Ld*uRiLORn~;5g*7bNG?4*FL(jM^+S^*8MGJkjv$lb$ZflI3Ivz28Z;_Ex zg0>wy!>NN6j7`j7uCK+OWz}~gG%Ldp6qW_YxtlT7Ne4y_JyD-RpF5RXeb8SE+LU?aEQbO8tP%Aw5M_00u(dT5e$*);ho1d= zA}!n>S(!PIFdL4eYdq)yN%Ze$g-E{u6jdo>;P^Q-{Zg8KJXHG9^e5BwCFQ7`Hl`1> zupNXR1{LuB^aZ(jxv=Up^M{W*RoZlgje0Sa&uFMSj>Bv>7qquB!-pG(kU*&H)mEeT z{H+*ft%8ySADnrSh_;$?s5k0Mjj*9?yU?0mk10cKT80+Z)-csGz^KWi5&8Z#GIPsd z(xD3mkDCVhq9{ZqWT4})B^cGmmev`4bm-j+<#GN<$PmE6%@yrUEnsfa5`8C5L1Dyu z#HG|>#^KX&RF{Sd)mgT79bnvC4${rE(YBox?bwe%tD0zpL?uAVzzs*1HcpNB^YHtA z)F}glHs-MHU<2jGWk4t@EexnGvqjt1+Awb04we?iXzw-)x^=M#j!p(q)J4ypUD2*h z8>(a5L6+(o1)UBUWTy(B_ra()?1NM5MngiQ9lB~)!9P3>`MkC`eRwgHl{7JSh$DPn zd7(_!1P70;gEAF#Ej=Sx(6&)SK@$3%T%l4Nim>=fm^s)|{VG&un$|sGf((47c_?aV zj`b(^z(5YrW#Siwvij3{pgZOabHck9UMQvMA3C-cN;G|Kn!crlCDdv9QqA-*Vt5yL zKY4}x+$;zT24b`m?G-d4p@Bg?&1nbFA2~8@v1*nFI@mivD)lwayvv4(h7|biJaJ-S ze;TJ+f<&>@)6Dy6KgPwPQ@w9#t;leQMHvM@r2!E>Nh9mD3ID7M1D z(G%d&K?%P8Vc?j!VZ*TQXw%LH>V^(*P)|W%L@~6@ZPCr4BP?j%+cHE(qKk(!iUNZmFtmq7OZgwBI{X}x)Dq8& z2|}i%5jtD6_~CWfFM%<}YfDlQ9Q+krniiiU4GWhpFj1EWmwCVQ1CmfwF2e357cgYi z8W^eY*;hcnHOz80YHDgwQu_IIElNsC;N#bdH?=B^z`&t1uEu`%kn{1u-qMqDOTUDw$#VV;pt_Gs1s8}A!7a; z9HIu@k|j$-J~4kJ;;u}?ROJ9AHbOpHO}Cs$(rcig;r6K-y9tUdNe zW7E<5zjDfogcKy|3vq1MUesxr(B7Fjlxwq)TUn2c*eIlzHb6>Jf}O{!pdb%<1qJr6 zBqSh5dnR&na%`BKj1;7#Bv6tTgD>f2kdc<5;q*9-qdhMWxp$a zX4*h$dH~*pm!Z9l4fHi?aB1IJB))WO41I5oU9C(DPHw;^~{6=cIt|ZER!z1 zW@9{2o)zTf*n1Eo=I3x)dIy&${rE;hQp*uxj~myo79-}b&#KeU;MrF6ErkgE-mCCr zV-v$fjF`VTZ9I42-m>rebg)Po;??VC_~V&>V*Y5b)1IicEAsww7~{4k*$2TAb{O8X z6HJWTp!fL6=%A?x&DMr6YN1MPc4<^3`Qhm4i@1K}0?u7{h-w8s-rT;8H_xBo{HbGj z8(l<=W@$9j)`PW)9yqnBxOM#z-rm1~v**s^OFo}HE{A%&e{z+kaS>N9Ucf!ycxpH| zG0G*SprYLxW~Qca>De1vNJezJ0F{{mc<3F+8u6uR{;ZoZyd@c{oEqb@GSZ0fx`C6Y zF5*RCGGr7LP?hu%C(c~Jne(@hP+TK6%EkOF3Yz+8t?`prUy=%FYp5&oh!OMGhnY^G zCikPBlvdV)A#Df5i21u9tI`q%TFpehMr2@UZ1ip8A2DKn4rYM(SB;P}Uj-|)Fo$++ zJZ?XFh5U+ob`=R}Sw7-|J|ex6D(8||9J}p{o`c7tpQAA%Kl!6pMu5=QuTi3EjY&i7 z;6sh`e4aG&V*?PCQ3YvIhIjX$LfLi@+-#L__1X&%YD|CizJ~Wj+891+1Ple4_!ynV zPF4Bd1W=cN`AS-V(yT<}N$J3*wF)W<5)m4k!;Z+;6eY248EN52jhFQkq8!QN0Adio~N z)>5IhRRCEHeK=aTg=!mPsMeOCs)i3~8Cgg((^H55%7*snWZD9nZH>Xt%Y`Jj6z_wQ zFks+dXsW8g%F2`(+-84`Fw;zmqP=nCz&5Nu^$Am#u7;r^vrL)vHv?Q!^1GWc;H4!v z2nh*+YAbzIm6bqEq8!l~TqsM`BhWtp6|#yj(A4_XADaG|sm_jqx3>@dy+c8hb%+ZB zZ(=|%2e_@fioBq^aO>>|w>77c93PMJpDt+rZ%_~$4li$S_(vv*LPRv=(VuXbR!uP{__`LH*P(;f2)h2$1%B)CuzZ2d|p=e3xe-A!VVuRrK!51Iizr(wb zAD3ur3b#5RF<-MpzF$vmaVmVhyz!o1lUdOs;G-YCUxk~~i~s=N9Z5t%R4;_ah}Wk2 zJxPxEgm+YSJ_LmSU~+#tIu(wteX;yT2)>-3P2K&l;Pi8(C8htr^7ya#>i2=l>N`Yb zHeE{ysL73G>p_HQO|#mfGz5I|!v|Uq-g)^TF8hZCNdGB`jrS7tbyeThX;%}*9I|2HU4j%M3~kD)Q5kVeYc zdf*oriaJJ!c~yuC4`$ng_df679~>`iC;kNugd^L2zgo0%_g%@uBTsSh{#9;I9OIn7_&(XJF>LsJAqP zxvdjsFJ6H@rWJVgE(J0&jL|CrW;JOH z`OI3Q%qY0VPZeREFGk6I{@p}EJFvi5_koEp(ilw)zTAb`ph+?nAKN= z(OD#DGCZ1AMNuXa;!~jM=m}esmKZl{CM;DeaCYl@JdMm_=ehr#2)VcmQ|BE-P<$K` zg709c+bjfR3zvX9xNkGY9Sy?kofC0%-v*355{%coXJhMxp?H(pWSzi&gQ|>|n6_j$ zl9E$!Zv99sxbT?`ugeO-%9*S2Aug60xyeF9C-emD`^eaZ$beZ0W_DKicc{<7Kr3h5_#DMj3H zi+sPH`tm$PhJ@j3LJ)>K+u`^#e|(7u$JZ2Qy=gJOJsez|I~(iHKS4}f9NypEg!h9pqm_^pka%zwZ%Jqx~^$L~q=W z7S_4+x5qJe-8p=YjznUPaJMSoLz6LZ**V0=#ULy+9BBpr%Ccy{d8*SkTztyji_gs+ z=reBr56g%C5~`wap-0yV_?Y+=adF|;J$oqT9e*S``Xhm-=40U*VLkp&C`wB}XhakO zU!8%S!w`I=`40<;KyKN;S%<~^YErz;V$%4{@Q;tj*RYqEJajx>eicgjwWDj{xb7WZ zA76>rXII01&3n8)u>rSNjl=cuU#F`$B|(@tdmR#KdvJH}Obp-snhocdBw*9Txp+<6 zrRbQi;4qDO`YUvE9gTNi64~~ES*_|{8RSWCPGRz-t)hE*jtQO<@j9{T!k)hbKIU|C z#*w!nh@N%)*z3mvUy;B(6H?tvE!`t$`SItVhBJ<(RN1U?_r z(4~(9s?);p;(a2zdbl9snIFu%^+YSxDtJE$hIQ{=sEYAMuCg6E=~v^0S0;K7=nRRv zbiDD&M&BW>DE#~$S@LaRXDElTcW;ouYlYtSZG@ZDNXeigI|88@3h3c%g|=<<@c!Bn zlxn-cSh0{AZx!g-(;DF~?;@UK1ov**cy-?&R(<+GyE+MpytbG$#tp`*%&IW8DB`K2 zd)Kaz$qhz|R9iT<(PTRn{|SGVWe-V#KV02+;_yc=jPB|Hhi-$>f$xRko8DrETXU@5 zcm^_x>fl$z;MB#(kd#z{wuuo8wN=s1&IwuylE@5sg3~u&AlTm*h05(<-ck`C9$&=0 zr(TH3mx8^8aQD1M%BuP3J8TmA^l(Ox)+Ly;-482f4#ej1p3t3p25ZOkgS|~Vb`Bmd z;{(oyXyVa@P3YXk1s$yngiF8u69jo5&|}CUoD6)85nY&jafeOAYYf}qjipoE@Z{PP zloo~K*8P{rDpQA*sc@IJ^x(%hbMq-aMVG?C-V9Qt5+}A@$L_cH;qK@J_mN{!^>#fL zU97~MQO@vs@&E#EF;1TkgoSHIv}~adWty&k1+z|w8UEq7=JSLrfgo*uKU}G-aY0>-sc|3UGh1eoF*qQ4> zP?mxV=g;DUe+YbIGGJ+A1qCSrujluW{N*zqy?BfKS{*d!hvC@SJIJlpgjHK+S-v_v zK70%>f`ahzeH8RM*+cCQG}-Zgwd`T)i_KVaUx1en4x)>r16=!$MCqOB*b#36yULf? zaX$(Gd_aT0t($2eF5ot+Hu{#64xpy8Gu{F-`w;XUybp(8--4%$3#<%< z>og>KT|=tHLL6T)8eO_}hN;fa&(%(Ox)IBsNaN+beZqSgFbah?r(kPzTTFJ5!KH^W zs84!`>yJVqrE7}T>dZG0e7wGUfy#|H63Ud(!L%i~`C+*6P6l@_ZG)p@7mOJ0io46) z@S`h&CuH1421#j(9p`9-n%5VD#~#4>;o8gvH>U27YEMY zg?~gE+A>S({Y)ipVQLMR&dzYLQO4Ojsd#+j2wb{3!Js))uS#+G%z1cy_=Hk96PW2J zqa@}9j$L_*&>(*VP+jBPP7kCi1Gl^bkstIN_g_aq(ZB*l!Pju%jz47d+CfiU4!nva zTsV9IzMq2-`Lz@l9ZY{%_Vtg%@4D52iia+p5jdC{Uy6*6uBscJD35cXvX6_u)|bdI6)? zhhXXSz6f~r2zA^loI3LshK{z-(Qb`aa@ly3AOQ<{?+lSIt{_#G)-|57ilt=SRPD6i|d`rtJ})46c6F$8M! zasB);cz^s1zsN)wTG&E`3bg;*2Z*N~`^V2;BCSvrhAL?|c>F3-^A%ug$t>|Iz}vGY z@z~Fwwg;h5Z)XQ>#a}&U`-kKYz3gF7?5`UkmtdxR$PxtIKZj$-kK^Fs^H6Y^h9MnV zLaBL6C`xjmX*m$XZ0fOp&t5!xp8^>rIq-=TTIjWcEHxH*JZZF~ZfOYt6g66+xw14B z2LRhve%X1a?x(!Y}k?@?A);vd(OXv zfC_Ecv+LNtbqhY%w1sDPQ*fA_K>j9tp$14kUHxFu=4-w8aK})q}Fth21 zjvcL`p`;A+4)(A#kjLpwYY<*4K>epfa9?!^R$T_5R|jQ$`C5d~({r)QrvU>!2O#(1 zI;^?(<14K035#&g(aJp(avfEU5WI6F)$c$?+~i{Ohx-9I87EJ7e&Wp)jxefFX-7)0h%CFnJV?he=Z7sXg}eHOItjX&61M z8_uqsil|zGoAdhOVxa*%2D-tp{v86-{?oCXzXo?t9)|VQSrG0CDP+mUS@6Ac27GNZ zC^yrBgL5ZXnVUdfNfXXp9idX6fR$?wv2SwT?i_*5uS?OpcOMw4*C8vr7>C9WLbPN% z3>oBviwlO}Me>iYSUNg6K&CnmLGPa6ews1%uIi1F54TXPs*KYU$D&uiKG=LMoQb2m=UxI7m%J3jHx4g;Iot?dRP)naG%YN zFuvG49%rLuF=SYO#9my410M>ZC@%vd;C|n_UqK(oH%!6RGrLiemx|dQJ#alk3%$FV zA?D5=9C?+8glAi^>rNyay)5b$rtSBJOb+ef&p(Hb{XNlME(+tPZ5QqC`|~u^GT$ii zzF(W>a_i6m_$qG+_W>PodgdU!&jl)Y^61lN06azvLiyE2SoAm-5;bv{N%cjv5;bV_ zi{NJ37Pm`G;A+Ojgqa&@S{%%9ACF4oZWz$7Ke#Cmk@o9e_Wk83dVLiB8htUqGeSJV+@+J6UGj-J#f%P zY+?bjXd5u~WFqyTa>a8bxlLGGg3uDm_Lr3dxtsOm}iuahXE-l^0|y* zLwcg$#DhY8tW5KuoQ?^eL(t7*9K!N{UXt=(9YJslH}o_7KH^|JXezAg-{1uYI5}}B zRzAwY@L_%7wQnXa#87FAyNyxHZoy%ICoBXXF?RM5dX@y3UGM8@$Dt9og}b2tn0m|~90_?CS=eK+`%u`cBw^r$U2NRT zONV2_%R-DC>4IxhyQ1eVe~cN~A1@Bi!;5SI0*;Kq&QNK1403~oVlo1girMqT{EjR? zd7V_2mXO@s+<)trmtR1Ni;GE7Q4#wqroX(rJW^OxObQC(7(iiZXgm5y_|Va&z-Yk;q+8SVRg7^6B|Znlv3IeUUrApopZ0zah^8zLM;mBywlp zdUE3V7kaGVdtM3(Nm1cgsCpuVC_d_wHSh?>B^7NDgjYN#@R-OO|XsLJI0c;grC=Lx}b4 znxa(5tY9PHWtjU)K zLh7H-Ce~ALkQ}egL}$QOQd8eRIJ`2l-cFG$dQ>7j@n>lu0}We}dr6{#;KmULV;k}+ zjVaFtlJs^n(Q{bA9?JQ6oy=OihAf-Zn`oI&XT#j=El8N?60>`@Bo9-0tb0d4J90WK zgKX-hNjlHEL`vxW)^gcHe<*x>d`MzqqR97OrYMxH1M}z3A{#DyivoqLcWp^lKhG5T zL?m4z(CJRH(gKKXmkGkKd@rKyG+yL>OSE0oG2VuVF4B>f6eF&IQr${I*L zheIB&?n>O&z7ZY#PF3b-a_rDvvTgNp@;Z%>w969+IqWkXT_Xx@g|b3O9&ysPATiac#G$Pn@yVzsb#)vP z{b)Hc?Z1x*60Z?c)A6KA6q_aHB$2inPKq)=5#8=nMS+AoU*<%*Zu~?9X*Y>+&n0Zw zokd;Avd5X^-h3xA>fi^$tFI&chB(qs&w#xB;hz4H`t+wnTd()`YsZ}-O8Oooy@Dyv z26A_)Bk|nvi9O_fbq86pdNY~e(t>oF^_&Pw-VmMcGuUIKB8r&V_9m=`5@Zqw?H(kb z6cA@ERkG^V7h0#P$se#9{J_D32Su*`5`s!{e*ZeQE-YNPgQQi6!YNs|W)qEW8%4fG ziixY4JUJ3i$Og|2QMaEPmLu9+i+mW(MSVL=9=6 zI;TA4I%%csNK^bN)#Tyvtz_4(9c0%vs(E=~q*)6i@}WR@^u#E8;=bp{IvaLs3~ANl zr+NKO+O_FK!*!d;*GK{B)>fIEPAMfLO)SWx6k-1F%WO#FsyE#oIrGRv&ZQrXJLKeGOlLv{yGO3QcL3GSUu(8QcD_Y>qv3j z1=32hH(^?fnyANQ+Jcp2^_*cuS))H2duC57@+6sclI^40k|Tj-to!PWo@DjYL~>`Y z6|wNxN%CvzNi}V|{)*hVaf6hV3Ge%l#>OLe$*+DNK?Jm?#^Hd=<+48x{n0eR<8s)! z-V&0MC`}H-g9rEE6;q3GliVO(S5MF3f{Hzp0=ObKpT`x=HD}VK=`cr|y15Mq|L_d= z?>s`eVK0nyY(>xgKE;OcdEhpgawDMWvDXm@gn6WXE~kO!k%=P^U6(oub<_Md-UFY; z|8_s3y#3{n*1&{WOR#R;I;@yA4$Yekoi*3hM8?-xkxxWTDfk?D7^u?TIW1#aTon4u z=<^b~g)q-3w_FnXI!#_0mK33|ya^R_tgz`}UmDx1Rx`qL}gM?+hC;0u^6F@NL>3cVTfxgO0VhsGVAis+C`*Vzd1eTn0&8ge=D9nG0)^CV5KxIWXPVU=+b*oq7U1=K(aM2eX z{f=^Ld(2m2naGGnvP)|5b3Gx=`Y*dNh#P52J8LgYx%L<`Ui6Z|$qN5{? z#6;o8pp9^HlAxevgl0;z5Qy%DDm_TZ)S)0PA0?HAxP5X5HmqBX^WGI0F}e$TuRkR@ z$RFC;ouI71VZZrlgsBF6ZapLn-O;JQAGEgMvA-f_c(g`RaxxM>-NA+p>#=;z85j>A z4}*Vmm%#G0B-B)9;rJe=JlDXt#u}b3%Glb!E%ryKW7Yaim@>cu^+grnOG>ccC9yP6 z`KPka)&j;YDL^%}@#x+WWO<#!@~MN-w)Yy?s{KvJ%c-2(*0hVoO5psFobqZ}e8{KU2QGafJHFR|~*f5s*a^zK(;p6qaSifN% zwj2w@(B+fykB?sop7W@loYoB|r%yzwls5F0mC#)D=GK)y+n9(1p+`hVw~>&`iNKGw z_B(3yUMkYVeta9ltwwdF1T2l!!Q)XIg0^7{e8NR-O&zlGauNIPI@Z(nVENh$upB!c zdbCYq^?XxGQ;?gf19N&KJRVaH!n(rR57drf81G?=H!s8R>XsMW={+?hMxm}O1qXL- z!rIjv5GLh_-W~qUsd@B4FUy?zBOTWjKKB(tTznBNU5F2C9!|Cdlh zpg~FDHlMmCMqNb=81))dfHEfLW8-k+%vm@!Y7MrI zmdCw^UqIoi*roe;Sd&KfOkjSca(w9`h#O5t3CJNQoinxr$-??yYiN!pWlT`L>m00F zw;t=)Z^70%{a~U;I*ufy9~%vI8m9g-0S%@sAL9IeY^#fsHfPu$;iU=v!EHzil*z~`}df!Fbc(Q+MC{sA`5sAF%09y6Bc z;&baREFanc?)M&`=D1a;QcMV`CKK5z-Srw$)8^gErdM7Ell`lg9gizdV{q`$er(u! z0OK9Pu<7z23%ef|jcb*PaIHT8 zE7q*ThV`4UWA!g^BAtCrb^?68!gU{Se+tR3dGX9*UbQJ)EDSL>FFtqeMgJ;Bxb`{* zlU9y{HAzlcRwi+aRBmjU%)6I&M^_3+9mWVDQbfW{SQE$h@4&W`=V0Z132s68&-(EZ z!lH<-J+QMW2E77`z@*U#v`Bl5?RWB5zk0BJDZ-q`qlK8{0cC+Yg>4V=>Kc+4)B-&; zZ(b2M&tKJ960(&>Xj0k~bq6iN8d864*tiWFr*d;sz>U4lC|}X^9ECt zSUqJFN{m_xc5{6NX%F(^gmo{kJ!m~-6rS#!f#u$57~9SkrWNX`?-_Zn(hVk*aX*<^a+7a)cK7_--z0@4mzmQkFJu*n;J4#MpYugF8?8N(cmBa=m&Y%9a1l*YK<; zm&-pNp`rZC7*>Ou`w`5VJplJgSA&(@4}R(vczTlEs#yagQ!|L!RPMnT`<7%R)!X1)!hp_v=atxe25ch1Yq0UZ+aqTWxGpaLpAB&w-iD9F< zqgfqS_`JS{^}C-CTYa3pwFuqkjYeP@C8Db?#Nn=G;IVuV76qB0q6q`P#Hu)SuqWrn ztPbT7(Dpj+tYE8S9^+bg_-a39&FG8UBrKM4UlNvfcyeqaIT;00b5qh8Vf` zfgvUxyNYR3Mqv2$;xHGfkRi3jj^z_bLzRi;Q)Zx~o*I5$!Km4PC)N&QI~GbV9`f7~ zi1lG+qLc2T3a#OkItltimUHG}O{QU8^I_;PVhUU>LjQDm1K2av1zOT6G&9kq6zSH$+%)f4Opf(Q_sSG|_Rhh8`F-K*ToQ@N(HOGeG)^vk zjNyaFqI@wU#D9oJ>#1uosE#9dFNoxDOumW69dDvTNhO{q*1^$jjUki(H#b~C=f1z9 zn)wHGUU41`N%q<@r!Srrt%G7I?~&Pb2G+D^KR^pbt6KFj>RuQo70J&@b`59X@B#)? zy7z)h>5@o~@quBVL)bZ>6test!or;IYBBLQl!y(IE+73Sf|(g9>nuc!o0u6xqVEX* z-3`$FNCTACCZOi*jp$PT%ZyWff7s!I?>)?#G!X-@R)L*165bi*@%GkY?yS_<^kbc3 zU`*;Mp{_kJG%;mg9isJ;(|A5%2zrcq3nxJkva2t|?vsZxVtP-EwQ+=0C5OC7S?pLm z<>Sa;F++Xy9o-FX^{XS;{WcaK*3B{Bb!7uO%$|hbZW|)fcp!F9sDrR`%Q5j(04f$Q zg2130>^bl&ckQ7m4Y5TzAMZ{K>TwB7@FnR zvl0ViQnH0;v*I*fkDrDC6C7Y8Q6pJpfF0Xb!MZrGW9k$>Z4#lf-D^Z+%PU*flJoPcU51j~?B2q+$hhxCnGw6f^aA~v# ze)3R|X5uppP0b|ab1^WR% zn=Y*1xI^e0nGtt%0hSn=kn}TwQQ{M{>v9*3OPk;W(+OKAx8%-Kz7A|^2-rE~3;MQ0 zwxZCBDayYHJ9WmK^oEU$@*AyBNl8h8o0}VY_3Fjjd_!_G5Sv5_H#xMnxBJ*@%gN5- z#4B5lW#m|&KhDX@gr1S9uCQxz5F4LH?iIk&#tsIg@=#`{AUT6{&IBS9v9W>lllCqv zJqekzTv=|wg!ojbwL)0f*us#ln9^ROjN?dL&-CU- z;66i{ff#<&Fh48|vNEzsN5X__2$ZrcFj8aai%DQq*@#JGm%<`q*vbKB#5*~}|5;hN z&@fsEq!zH{R(a4N%OdeWDl@Kb(NBn%&GyIZRD;!cmz;@_eR(w8{FgE@s8$v-IS6 z-AJ6s5O&rUTm@W^#Q0c}w*k{)cKA2|M@WeK0Ii7lfw;q>QKln-Scdr$I(qDstqysfh*_cCawypG4w;Ex)E*JP<9W$mUkuFxJ;)C|SA;M&JhPl30J2SIwp0EkaWs)!Z8=IF-hFL=EZDa z#8p7)e4Q+SSy7VL^S>G8$jMAWT9$$cMKct&$nS{duz8Y{DJxPZkYptgk(`hSr5dEJ zw&Ut*QWDVAv=Zirr=i8~%>dDmu*82J78%L=Qc{nLiT70UY^X?iGn9}3kTxeKHkHe( z`sQ}9G!jA~OGO6T9*}k&dd9G0_gLYPlXg)|>Q=5T)T&6iP{EWRq*3R{pq3heFBTjr ziE+gLS}cb2l}q^ z%kWV3XbG0tL#rBsYl{so#(UHpBDaTfDt*hR%STJA!9|!*PGoD<8_=kaC#q*1xmL(xH>d&`TPYe%3TJF!Z z(h22T!q)wnh1Np^k|RSA^Qq;(iVE+8f}!}6vZl(2Ls(2EZ=(F@ux|*dAg6r9`|K)g zxfaNqwAjC7B#yeL@#a*loVFC9@$WHj#tNkHw(NC#7R|=%INgdmxl!I&JZB1~Oqqho z^Hv~~zc4HG9_Ft(sWbdVZfu>4qp#w5)4xRudRA$N*M;iZ9L#Rp47=TR>vw+%v?(u9 ztx6}v^5);;`Q~vLv-=fq%IE6lIXLNFcr9tlm*e=NU+^G`Up`P7jo)U^L;zn56md`S z%fb`L4!es*TQ2D=37T|&{Px=hZoOZYgy&~4e)44eI%xuCY&lO#i4MPu>#+8M4{!P_ zKtYvyg2MregAM^YJ!Dmww6w56oJy^G^pTKIP@%MOb<9-(Q+_4ypSuMHgHy zREw>>n`6SI54`ycz(k^L#TxMZld=|mZZ6tPyvUpKd3JCi)?E+fO_U!6b{R@4$SEH& z7er(B+M_yy@&hhx+mCfed4VYR!1hxQNjEMFJGLG|esjs-^8Q^2$`k{#8)#8$GRpND zkA({sVNi7~y0z|$5TZuZ37*(r#=pFb zOI}G(e0YWZXV@h=b!f9Auzlw#PIw1inu89b?qJlSg_u8o7Ahy5MfL70xa*>xoW$`5 zVchXwgQPpVma*VpPJgi;3=Q=^X#hkpApeQ}ER+5}5s4+xmwvLW#wQpU89^fc)DuE( zbr<26^co#Ha-p8B?+V|LX>>7lI0vy}A4KW2??A<@P7w&QF zh=&il)E)w}79&V|un=Qf+hB0Z_ION0s9shucJ90M$s3wKhuzrbOT0H>^P6754LQh@ zB>MW$*ZYEbO(254p#eV2<^>Q-Noh1Fu+bh5>r*P-emv+1Ii(OKn)iqC+v|uS$60<4 zVAo|d?7VMsqiCr&PNHas;V5G*fz-eR`3pUXU}|ClGyPm_?LQb!OLn1ewX(3VG)K+u z^Dw)XFNQ5}mFYd*c|?Z_^n= zdiF%~_DhM43`6R5#N64#(Wz4_^ccE{-?fv$k;Nm?qJ0O{YCZ&>sk-~aFDyc%wjD8S z;0(Oak$zSYvL954_1QIwgV3*O3#_~x0>r&QpI%+jxnoQ8pM8wG&TH2w44A(O69*5& z@i&h!v`JUYn>7rbI<`X3VVn64el$3=Xarhz=zuychQd3WSV=_ey8oY{P4L2q-Yw9n z`*7^O7fRyN3^{=((QV9Zte7zrbGF<=nk)@!aV!QmYzOxwU6Um9KZmv*XLHAg7Y;`& z_E{~5!-suV)?2jhHWUXoPDj5{yGeuUhoSXbpc{$XhL!5z`kxKcQ_!+!Uj*H{!5zPP z;Eg_m2g3h>Zo{j`51ydk=)TY+9V8=my=5LfGgGb{7?NE0+w8-bd2Ju6Sy;lNXmJc$ zdJ1LV&c%i|*)TIPhJo~VI$bmcJqDI+PxD}y9`lB7F*Qz7hwC#jd{OJC+$=$Jf$5ym!Jq9-( zA3>9rxIt5^3o4rsQAz4eQ`7u3Wy^typ%{1Pj)ZC;5#o(2aqU5c789^*fD*k2 zZ%3|yIgCk%@OP?2o-j;l*AZQMbVJh`^>HF78%$Or;xlw_irf!QL(Nv5FsMf#G;A=1 z>om+H?Zb@OW6`-Y$#2~kA#Y;TjV)8rl+^tVTlU7?P~DJp;*;HI-Ju=&_ZtiMR57WZ z3;Tr4qarn54TsN_ta&WJ$@+GoxOu! zyY<3M)(@SCA9^f7GUpm_ZPOIa4-JSP?uWCvQ%u7CJE50FVfNtWXxnuNR-bvx#icss zAvzA2h<&RjV8X(4NL8dmAxOo{&K+?rRM!(y$38`?hQqiw4%atMM$>j3$g}$3K_q)V z4t+az!0xRJ(7F3cWFr<+TDK>0+Z|1+*TvCyU+|R}<*!4s0~O>y9U7!2Cn6ys0STmm zE3_e)WfjykN`wbd;2#1!VK-tUY?0xZy4bD?JL+iy$SqZ>bCdyeR&IpO&8+o)w^&A+=i3hsdzBACC+F`rFY{x z-fXRjF}-IXKJ*UiPq=|&x31yfv4yZuq~Oy{V+CS87-YZ0*v{inYTRbb?qZ3KZO3BB z`b)TS?H(G&Z^fc(kr1T6#|_V9tUq!P18S9q=i{p|YOxeouib@>-&UORO~<`it#Dq@ z5BIKL$E!_MF|6~iL=YK6^qCM*U`o$Uuo-v+S1%kuHy2|lwE}3eSGw096jG41AZTdRI3Cu_*(i?tCThu7YIrWi_ zt(Hz|ejl**HQh0Lf z0=CZS1d&{~*FZi3=ouIw@x?{d9e5aP-0q^a;v(uyeTs*7ui^Hs{dhj7Cti|PKP~7b zZl{&S%{#l%s7Njz-@lEvi>~565h!PgAK2YRXY?HimoX%76F>aw?2e(UAHsl$u+PZx zL9>q2Fn#weoIbS!rPZm>ibTlz;D;-uhq>?6A@r(gk7sx9LF`Z$j-f|zfqO+K!{(hY z(SA@B%<0k>uH%k!&ze;F6-KOi0zGvK?!OMexOGRcbWBln?=%||F5V?^dj$uU_k>=7 zQQe;x2I;9uy7nL`nOg@xpAu+QNgr>*HITo13U%LAXjjP}9+9M6Jh%uP7JfoXZ^!D08WY=hmND|%+?`z`W&Fgq}tS@Hw z8$-JBQUpD{f!wMSapl5n9O+vJp{KOgEe9NMu4ixw@y zitR^`QfT>kV+`-)fSdRH@cMoj>Q}ZzJ=ZGm_6owSP*ZemT7+mwB@|L8jF>tN(|(;o z#K=mtt|~&ViXj#3=b}4rJL0^*zmE{@yLQ0E`9rXI-+pX+CPgU;$(}+Yl1T%8`|Ncz z9zKq{($u*c>}=RZT?@vzELzvn?RMy7FF{mjI1XL+g@rf*hxYEnaj!IFg?Zt|(Zg`) z^BZ(m8pFcMc(&PtO8?H9&Ku}TOJcX*y$lEa?yYCBs@BCfwMb(BNQ|G*TA;3p0E^! z!lH@Skq#UG+!)Uya-DcF2LsV&v{E8 z>qcl?EEdmV;}GdBN3EK5Q7T7{xI}LRimRg@R}7ReDb)zS&LW+~slQ^zFTbF4ksN49 zhl(u+pQ6kEe^v%qiV*>1j_ISPVE>+-c$`{}+p1n9(T6ZI3PbU+Usy##?g3imt}5SrOyaObAnUFnzdV&~@+x5^{5}%6L(RB+4%otZ4+qQZF>2L5#QVXNY#p9G$CbIo5a?g58p7rLr zJ9k%^dYxd)z4b4KmKBUJb<8wUR(9Y;mJ4ik`*;1^Fxfb_e_F&nDU5IAiuoa+3 z|K@md{}CQu^G55&rBSb19e8^NJ+!K@bzyQxKokzt%Q@G9IgbtNasyM07 z$+6bFINH^##NA)Q-UQL%vAB8d9;DI~9NE7QM{fl{5gUj*M|LB<`Y))%?IooLYX>Xh zt%4;%0I5WP6I0saSaM73pV$ycyiYnBDx`XxC3)-+{L+DH{UA8n8zCw@1~;y`L0>-whgm<|4T3DBKi38+BgkMbXY&LRH^5f{O)3)W%h&Yjr2a0-fjGGNtd zKnHkiUx#Cfu4rry)Tmw-&+i^ZkhCnCu$vW@sj(EM64H3;o1(Fc zAs#&{JU{l~y@#k*w*kaLQf2mp35Hv!vxsYy8y8Ct-`$PBi&#b8sy4q`?L z1FP~Vsg1(BNS#Z0+v$^IzQy( ziQfuJ9~L2Lh;lher6YgpE(29=;SKAQGEyf^TL{VJ z^|*ZMI_eIYOoU7_iBkhzc-d$5UWEHcryxfrC*I=yNaA+gy*D^IZvdQ(VlkvcQ#_-^ zfaE6=jGVCoyGVPmb>%#i%%6qDQM*+KM4jD>O##KxqYO~GN;QPJAH~yf0b07SJsJ)9 zPY-q_98lE84i+W`+zzg4(wVATw=7;hc&BrS=jHwDC|0Qj%nTTkx&m$@*6-mucq2TX z96*bz<#26w2Mj+M08>N$+XGVPviEYZ`B-;E(pXE%mo6V_$u;bTd|4S8DDGT^G>e zk48pTfjq`izz^)s&N@G2qD0v$s8*#S@k0ZgczPc-t<@k^!DpzL+>dcm@H+~Ibb1S- zQ7MRGZ;Sq>-ni)g6wjCr=uy@H$;qiGQH~8S`>cjI`HVcPn40sGg7;>%Q9I%OU=NyA zDTDLV+F{gw-S;w-ZwpaOLmD&L045&{vNa?;oq zsDhx#$wpSL6f+L)Mev+~IP@|Ea-{}gZd*_Kx8sE9>O*58eVAU z%4Nur6vOn@KiFXUsD|)) z9tbDS4^ENV4sgbsCWASZP> z<h7)I~c z;`rf7kSa4F%SuBmqeePM0{lHOg0QGq`goMt0D~)M!#`1inj}A$E&}+5gpf?a)ASMHK1`kJ72V+v_X}Uqg9PajS{Qj0y6@!^h9@ z!0j$xy_KVJiz?h}M+hXSQY06fckai%>-S;XZ4nlBserVkcvzONkESiU!#v<7_FcIJ zjfEXT!!j{$Ob;Z*CZR$5max(nAUlOzTcHWs^&SnIglky4=M3C#UqgmveROQo0ks6d z*na3F0`S`AR4T4OXe@WRpuA{^f`2^aQl#HFh@ar;#i z>bGeJYbFgEhuUc9Y(?%nC4RVpOzS3SUDFQn z3At$9p()qV(IG|47FBU+?OI$8PDji7)nH$t7OL3^i7>K3iyFEuv#HV)mF$dA z%+UrRVa2fQxAvSnWttB`k=RSzv+m!yfo$$swunsu+Bd6B;#P`EmNIPIwjcLzK0t{+ zOR=P<3+L{Cors7Cn3|fx%8HHauZw|&B@&5%>@{*6H)?2LZ;$W*0ftQI0~S}Q z3GL9T0bgE8!<>+&M3WYcQL1`dv@e^94SUaE*KhrBMmPXL7iMvnsbm=l@_&n$PoCi3 z-Mfg&wnM$Dx+zaEv_X-SSJ=4sH16K;M4uHq(6*EX5@O;}rBx?%=-mZDdp6>7KrBic zr@>QE72|q3BPPWVUE0(j*;s?*gfvuZ-4eLkdEra58a3#JXt?nVEyn8WgE0dd2O9zMsz2lw#k zaU!WlYa#E2ZJFX0IJA2wZeG6)Rr$f#Fs>=GNP8eIQ46hFbbxc}8|*lH1sO*6i1rW1 z$jJkc6`z1AEn2|dM1-7-B+{|1g_a%r!i90ivMtB(kkpSKL>1AgbxX7=&0yE|19+|| zj(*h~Nx!2R><#iqq_dI}U|y*nYE`X`ZYAQe;6gNZY+8s{XSd?i#T&Tw)E^a_v`1+p z(n&COM$?LH8D>cNOGP!_5AyUR=sVR$t4{q;Uh^8uw;scTyVnsTt&R@$$|5l?m4vw+ zEIuxzB0}>{P4IZ_3S97yLH&AlVeM1}jVhZXDaROX>g%TC$kG#GSf&B$m$ig(DJMjE zsxWK8P*{?JY*W1x%Bo&r`L^SDaOXPW3~Hc#eP<*jWN?ECY!IF8jj?~%F5J3t2g2&3 zv35e!0(HQTjgOBHoSmIHJ@#MY;cI^grtdh$Ea=+~*#&xFlz$iYwUxQKIgE_*B<$y; zq@=*j%?-VJ_2O;5bK)+-uIVal+qW0ac2=lVS~pMnpOEE$1)HB`V_1h4czt9RZW|23 zuF2o)cKMXQ%7X_F;NalERiNK1;m60J`T;4PZW;z@(NZX5!%lelX9S)Yi)$9sG00Vg z?Nf)qcGfeDtM&P^Xp|q9jT<*&>eQ*c={rKv zR$h3C5xx2#=-OKBiL8#(%lq?ZDU?6v#EBDV-@ZMk$Np<9+Z=;{{-vG?IC-8 z6g&2wL+yE2sTikxKj>G*vkRLL_TV(GJ@JC_|1nEKV&#P5+C=QzvlBkT<~T{kIOPX{ zj*x!^e##MY3g!RFk1#?`q5PYCw`zaxz!F4%3jxF*?-dYt^!{|yfd7Sv+@I&C&$nRCM<8I3tIXw=P!fvuApU|| zr&B1D?+q2Q^HvYxxv^_GZU)Pc6Lts7cUFWkZHn5dTLK=rq# zK`@Y$w8&cZfn1C=5Nxp`}PFlxwh=rUa2ivO1a6-)Gy5%mtYZr{P(JGb%lbpTYt zzbndFF|LI7D^FyrMMOj^@#e`(q{`WiX823~1|mHM5pQ4N?%lhbpC0*qfT8~Ht!^TO zfl(TEuh@cEg%~Lz?(hstp`x5Zp>TL?=m!&%>UfouY`t|<+fCOsjJpLZ?(Xgyg1c)A zL5h^(?(XgmL0Yu9)8g(FC=~Zn+#TLr_jBFv`>geS|7ER7CX<=W`JJ=RKKpdTE$nD_ zo->6+wU%2id2hoy=0?Jmux1sx-7R!w^CeOi6cuNq`qTy@T1v>=kceNrtgG)=@4vGP-wDB;Ox5igsY+*g?4px<2N_%=S zNdc9ugCDbXCO*`o@&8PO zfU6$vKOK$A7ORF=dZoT{Dqr$R9*cW*YaHxvY!3CF(0yx;YQHBnieKqpdF5}xtPW52 zbkE;Yd21|R^IJ8IqaEu;?IhWd)GMqeO7xVBRULNdt1G8HCXb<|J;wCgaWS(j#TJjo z*Q%gkoEqHCGQLe*5y(MtTAz5mUShXXwQTd*6`N~{;NsWY9<4!ENU<$qTwruipt7o^ z54^e-?zGTfe?dZeL~JP{kfPDuxmZq(n!%T;(2@msJy3bPzY2-Em#tw2x#*3%?9ahBnYFnQ3Yv>8yRc z@St)}rYZ8PMwAi%@G+c8wS}DRKFL;^lp5Y zS`4?fbqb4p2D58JL`O#l%qLIG7FGF zrgmIf2jg_No?oNM*_*(%Vh6D?6Gk5rqg)5Ta~2Y<$&x8`S-ouTC6cX2&@)VsN(3h> z=%(JM1T?he@Q_P5ZuF%32Wap)R>+$8(O5ETdcFLHr%Z95qi5vDsxah1c=Yk}`xZ6- zQ!e5$ukG;S$lR@ZfTLf2M3w$RX*+7*| z0dkhA;lF7zas0(t4{Kz|*b|qquqctXG@AQjL?wEEj+Txmv=vdSAMXDCN>Aq>nq?#woLF>@gbOl8Y4bVfz+f;)iU#fpKp37FaMVtA>_b`c^!5?L}zNr z@sX#=9qgGy%akJdMITg|XBmrN$?CFoaD(M+*g;1A=Y{aJ;4DdxDuz~URJ_1G!0T<+ zbe4ME>*_bTCLL#^*bg5hv=tt%i4A*VWGGdIbN*3j)qvN>*^V>-d11||h zseKseOaIK$ChryjIp{Jsl2L5khc*+~@&_ubop|d&? zZ@Rsy^V#~7n2RTic(lzcVthv>Yb1sm$guu|_vZ8C?LGqal1>Y`{^E{s>!Q&9PU%6p zuJP+zHkEa&g8qQn#+Im!pdXUaJX_@D-gpVL8F9H?b{y~5we!gO@ zRk5rl5o9VjCn_FCYt2DR9qERlKu<#_DaRU=Uc&mfLr6-w01|W4ms}$6bib>(+UbGl z`Q4llCjLXO~zBQ4d=mjNfJ3e*K(CC{*M&osEjtt=q zkcEr?lFbsYBqqYF;A{}%@|%ZKtCRa+8jof1Zs&HbbE(;%{uD9H!tygI#)kkH&(khh zr5sMVyT9@Mf|TY@DfL-Re;L|Y(eXs@h9EzGIX~^Yvt`|p^32<@oi1ZkO|K7U!^h5g z{}C9mq{N{}4iUVo-DYT)n#Nb`C3pxzrM>|_isr8cx(Hf8d81dH(eV@FlI)WlcPzu4zhwCT_xqedm zEM_sQ7G!N8DDBdfvb#ckzbSOaFx^`-T=zU7lO7w@gE<~f}#LCHXi&N-829$9r z&VX?o^VxdU>8?*eW#fh@nWB`u-5-0pU}LzN+TTeaN!pGMAVDWV`9UZ#vNq)6`i~f! z&|m_LwRylDp@Hu!tlG(Yscl!$`k&@n3zs&M?gSK)?a}r5ojX{w_7w%bGoN;q#Qgq5 z&{hQwev3RCZI&dlHR!q#7&?^*CeeI%!L(I^@T5J@f}}b;6*3ziYG$!_Kh#fjek6py zGaPX@of|X`3u+sc;j)twJQh-(J9^fe5PyWj&Tt1tb7(sqR+1KLH9Gsb@IJR(kvW*I zMJ%d*2}-}l_E70NN0h%f4<>C|qDUhxIoDHs}X`-;)%@=TD3z=1)BjAE-XYVcoo z_ScTGR=;tGsCI|$ZuT?TY7=x$Z}cp`SDvvN@R_17OjYKxyKoQ-aKqer!XD5T__198 z)~J;h^0^`8FbPEPkW-|-=_z;K+4X1>_lkLH^(awo4bQttH>}a9II~~%_d-U0a_{XB zJRFH{OJGT_-0EqT7izQsbi~bxXQoS<&ndi7nA}mGTYkk8Zh(6Wob54D{3q z_tXiB<8hV(uRJlr4+ zO06seiHX3yyRCj?22s)62i}y_)NEessdEOj@a_HmAp~UPt1p4saX24`6HX?kPFAu? z?z+6j{ia^Daw{ZuScGH1EWZh?)sSt4o)ABe@t~i6<*G=`FC$`#sRb|*mO zX9a3=wwm(k9}Fe+p)wWSq3Ht_+A!K3`k#i4_vD2WLe0i~xeZxrWf)ogvlxvXfvWpO zwHb}#LUm%imkLy#CP_s*B}CGPy~QmgPSUm$gV>LflH1zgAZ9Ih)#d)jcAF z?vYDgy}-g_^6!`sUycl$OSaq;)&%-%Zzoc^xf}(yImNW&1fSuRiS=Q3{w(LOSj8y6 zk)=$Val=Ww{fTP-j4=}^Qh3<%m&1Cvcw%8t+NDQkf44n$A}=99rH0wQ>xVVV-%c*g zRm1J>(dO)r;~#jb4;Xl@I=}6H*3NFBSIyQ|Y@bNtDa)GVr*O$+CSo+O%jq$CUjFl>+!tUo^Qtp-+G$)Ugus;} zPLS8`@~KCMzZLAqo0<*LJ=QAu?Vh6ZdJ-HV$abB8BC8vu(KlJh~Q_Kag@kWq3F- zV5Bmf|6|o~a-1M8U{6y;tA`$nxKZbk_tSB+=f`sCEAFb;ZVnuKF zUht*WpzVRJV&kn>ic_>{%0@v@y%ZTX`R2j@ql?PKP?=qk;Y~vwhdD~3bs|`|gXWru zz#fxli(sq=QjXKAe%70vo0y!H0b8?#uT@XM7E2gf0l_zSVY8$JzIs-y!A+IfYfeqU zP?|STC%Vc9RpS0$;6NqqoMSq&AAg{xgl*T4EzLp!h5Kyx^vc^Te8oGYmkb{$L#$lN zEs=X6#2M<6&Qigqk$9%LR1uFxSk|lsfOQZtO~}j+G+=K!Ze@j?Vf<(sajuT3LHtHN zvkK?|o+i-PM!eWMZmw*+$Sr%$iS70f*C2W+KmrAGJcn9>1M^#omjmgigf~r79wUC8 zA^JM=2Fx$7KA5ym3m}Je`IOxc5CaTZEtI~6LCrNa>lzuD_$8FZ=lx`g0&w|kdCn9S zbLbdQ`1#s+Yvz9L&(C6hqXqZDEdLKt7${Q95%F%ndWqQcPA<+>h4ismUEFFD2w1im zWqYIPM8--sj-U$qjntwWV z1Zq}+RrBeki;>AFe!|25`Zs3mo!;m0QF;YMUIk8v==4&&BniYXOw9X>sV z4wXOQX|)tpSW;TLpktp#Ep=!ACkc`om<+v+IK0<=VbGp2m7^&8?QiRKVxg`;OlEY< z*$RJGokJdU;nA~Xa|75tH$yxtl6l#tC*zbMqw@5Q3nSr&@l&FgL}fN-IybWbkC(OE5@60FrxhQ&KdOATK8zxShUw8v|3f zqeb$cw_PCvpx9Q&9Su=OYa=<(WkXTWM;g6l&Y7t(5`CIdCl*7JmcRCNDb)i*$rafg zQou+aE-Kq1jf%@cblNofy-WYNjNFi_&@}jzM2oHuu097l0+v8=Q1_Cmo2oWQdAxUY z6u>a5I70JPr!+u=#m#iD;jo{>2@-z;m4#s)BXM0URhgGAJrFHU4NJ;7zbTVb`P*Wn zFdo;_-~eoL{0%z^mESKd2|V#7Py!RlDcg1Tx$l~W%-TV$Kf=Ep3t8HPQywHngGzZA z320?lMAD5gYm7ooQhHF&{Li14Nu$P^Wka`#mm2KJOWh;Er=?&f2YPD6B$IL7Td2So zUnxvQw5T2X(GMIWT@FFy{O<)X^@t@n1FUdzq2)!bUa!9?_d4PRvljQLr&DCA)eFjI zrIcAbqYdIsS}ZRKM9_^Zc+u!bt?7(}?)XbJEoQ1^$?sEQw*JO~+-wZ9@y`RFQZb-+ zT9>;{`e+ff)Z!2;mrmxbOul@YiDRyX+Ct1(ch_p?ClrE>Qnp~JMANweqZ#L;CmE<78jxCCs?somqUd}-f)BlTB z!+HkPXG#llHWag~?N01@=jn8}3py?oA!#tTy67F(_9Wl+!leimNmp{YaV)r7+Bao= ze(t}m{$pwHM-cT+ki+Z^Bp+8;m(jF>YZJ{lVNaHnPI7s%(>Ouad`j!P&D2>7hfW%B zyVSQx!Ec-}RMB|ge6cFqb&c7xi&a*XBv0*_;j5RBQe}$nV*Zn5-q?kJ_P37Q&m60^ zV0h4#(k+=G(}rD5G- zXOz^y?G)knFHhMUo(xK4ZNA<0E&~9LsE4TMFxr&YS@yfaY%jS1-|sP2!m}xq4s(RI zuF1*Zm|xP;ZT=6qU)sFP`u-ZPKAfSWR?a(Av!bj1?XT7l80`ygl=$Wg*r zLhIYppSx|quaf$`QkO|7du^QPS-xo&F_Pk+l#UZsCCE`S(YcWIHV=cPB1Cgfp+~1E zv!X=McA25CW;j~OVE)#q`cs?MjMolZ;$CcU!B=#%^+2#qcC<*|A&G>je}IaZ@}Bv? za9Oy+_8a1}0#Jqz8~!_u0F(7uT#dEb*7hKJ+sz2xyG+cW0j_tN&LX|zI9uZ}>ml^i z+kG6X%>1~%U)+Eh#apTgUL&d6WR-pcRn$;D9*{Y121vEH1PWjyc| z%yo%t#>;jF(!Y)nD74cfX%~k8QmGGcW7rYwv^Gt~(t_)C72VDxam0-UgTGfq;k$B= zrL)H$HxZS7-AiJ#M3eESZ`f^r&U4T*7CfT;35}!;u;*K_KgEI0Z{n9)57^eNcN4ci zMy$&Ze=CVH{_1>{k6cwPl-sdVrfW;-2r6RDe)L>z#Bk#)7twjw6$$v#3fpY zwmx`u)r6+$A#S`s12#PdMH#pgux6(Ex}V}T-MBLs8}%JB-a`Ad&1ukfLziHmA8$Ck z3NB*2&l--iQymI<1Q4~_ASWCbCeof6n~l!I2uXCZMzBjpH$Gv(EObCj?-sKJXHc)c zObjpc=5oDZgt|9&Q1i0pe%djdsJxT%=2d6g@W=NoIH;+WnbEg+sLL>Dd%>Tw?+#Y_ z9#I@qL*04|S*=FMm_AHsehKK`!b7fqz1F6&l%+dMt=qlaD`fw5+>n$pWgs>J;Qhij zd{H7_=RGK9|Kl_vn^b>ud9FeT6!tg<|1Mctqa6 zUAP%oO~ZN2u?l_;1I4V523MaLEiFH$cEp`UB{@|oX3tn6KumKzmfY_#)Hb5zBP;sB zdTr&}uQYF7U)632iYZEZzBhJWu%!e?hebJwe{ws~CjNTcHJAqN?6r}LViQcFkNvrC z1)rO!8Gxipj97mlZ2to<*hOF{N^#L_;2BZl`+8)5CUBnbm+rXo z@KN|H1t=3JRF9nlChbdqWyb|KvqA3LYz|CAPv;dO&;CCa)beLvKg_sRW000SUqE@@ zj!d!bz#K9J)%r`28C{>GT4>DF?K1(J5rXei&rlhf3i`2KAu(Q`u$_8-KO)4#_T>IESwW*~3YgVS-X?<&w#~96j{yNEAgqtyt~~sg8TX^n`Br z#G*@mA{ZiT%U5}V;jYIPvW@8E-XiOf#|hWxYNpW#`^k4+_DvaJlSCTkRg%J_4Wi7M zz&?-1D^d~`z-n+lyXAHG8`)EhVYJAsdhBxk_m;LaN2KUmDl-rL;HJ$Ww*QsacfYWE zj5*l~161>D600$i65B(bKdq-2d6O^)K9d@Gt1j+F;%pii{oj6A6*2vdVc3fv(6-uq zFGW+S;~{5X$BEFgXZ8t5Bk=_9AZaBzgWppj$D77lITYHNn9SNNl|Cn%RPZU`lD;M? z26cGN8kVbxB@!(G16OyE$=VS(Z;pGq?i#t+gR7c5AB>OD=l2XgHG$Q8gtPQR0j7L# zPOHz@yh)W;pnc^q>L9EXJy4~;ck!Fd7jaG9=$BkW&>hF$`>dcht{8NNjFf&%gg_Ui z0ddnr@bND3Dr4bd;aZ~?7lDc1#%21HyRpwb#&;i9TI@17caO7+F7B(95U2QIBChY` z9qcY#k;=)JIz14Tv=MGu&1J+9zt_bGCb1HLh5s{_@1hY!q-f$sazYRV%e-SS?z0YO z;9X>ticSyYqpJ=JLog3J+L_gmlk-fO>c=$Ef(M5F4oi0(&(Yi@SrN($Sg&i2n6|Hp z5ubB=5bO}V9(pV62#9QUwjTImuIoSJxZ7}f5Y_bO3zuyXP|4`NL&jxBL%5HCfUNZE zAefhaF;R5HMD^Tu0yZ#OIyeve%+GT!nh-nPa$W+a_d{xeJd>#py`-Fe=0#^Zh&H1!i_sDXn}B_nYj%NDO8#@@H<`LTKcpwRt6hmp;;rD$Th`kc?XY zgWqU(^6UZo(sZNZ>aErNhZKr9_aXcK_dYZEN@9-}C)m5kL{fDoFHGMY6iY~yCG~AO zf$%WLQw_uSj~*4$u=N(mh07Jp$DiIsDX1rFx_*Zi0+%J_y|Zyuq$dl(O|YU~0GS;{ zbP{nn!X1N3JS*8ZB5@xGVqS=J28ew6y0>qJ z8Wp(QxtxGJ2Vdt>MLNWh11-K0xN~_plR|_hSneRk2Z6@>w{B8$?WP(aLZr{_-wgP^ zy-50&J+>+U8%b*F?xNp~5nbwqRq^I-I)%Ro2{vIkUbzBWr`{gBmS&J#;YlE6?u6z% zH(ahSJVJzjoC28>RP9h&84jF_ke>pin0(Sjh zAyjXFQK$gr7w3<*2=st0wvQTR&W`gewm~MZ1i!j5JMnDo?s>&f_~p7i(joWASHnO?L2&)zGXn4#D6d|3uY0Ve3#^!gb{?IRc;A5DKKpPNRY zUDhTV6(nTc>)12_@!efQ6no<6DFs{Tu|cQmfW4yMbH+T zRBU>{Sp<4h2Kp&3(Nm;*Q#$>ZC&KiGdkkc98wvi8CIgf@@}TEe2<4RgSEKq7f^FUkdngvY%nnV z`KcR)t^n_+>zkh=-fd3Y^CuU}c7=?<_(3+lDAivl)sO0CF1jcxBhqdzSTsED(O-0# z064kvFezVM(9k|M$L!YIBczzBEWWLKU6krG=t(N|l3W_g2ILl$1+SraJ@n&ah`)1Gd_3gWh4u?gFXwH{Y*j zrc|O`o1S7(7LPwuJ{F%;Amleog$hCp%`OFVUK(r`&R?nCR!CuA*?D+p?2?gFymrn~ zl7kn~#gZmSYfbzjFA{mZe`eCsasW2~H%q%ed@`v*VkD3ApR|4ICQs@S%jA5@>azI~1Cq5ZaT5MoN0qQF>VEvxP3!7Z(S zd89FgB8N*&B1-H+s_o*dOSp=5BPy-aZE+{7$|6Fm|8mz7`t{j;Y0v)p=7u_X_cP+N z@G)+}*4CDjyZhc}rnJJ`|8gP6Vp^dghr@>-e$h~Ypo=e@QNZX>370$~BZ~MjBWN!G z^fd0-&>tX-cZ|G$%1XCakpXfGEmZHSoELZjwX}^zGrU2e+@e!od)MAwcoFAfZWtgQ zpTwCZF(yT2d7@|bk18qgwV<_z@|YRV!{E|Pi^0u-ZNMm`c&L^5foIBfy*xtc}~BnyDi z4pCsI_@UgBdY7$0sHhoZYAMDnfOzoSn3R+iKU~VmRs8|5D=8Z)4@;b6m)5pPD>Jwq zk;G`dx!bAJ6{}xd{hj)Hgg+6U7c!c>)nJNb31q(bib4%xR>&YKiUPqHDlvTciVjgy z8FIMe%UU6(;?EBzP7QTEo7<#J4X0|yA*iN9L5&&yFzuF={E4T5D2)>wr?oi5B-2+$ zy(Kaht{lBRhykXuJdYUwe^E)ug|&^M-}2X?vM8V*OVXk?k} zWI{K68#5}GA{W;%cnt;@C$i9~)J7R+FAq%i^f@pLm2Os>GT`#2M~%((jcTRThDPsK zu%&I)SE95uHTA9IIVS0qp)K+;hkVpM(NL_6SW*ar9Bn{kx=FG$SI{uW42r*2p=$BL zrSZMIoM_Y{kIuAI1I7r`i=vXFo(zd&>P}=uI3BGmoX2TU)TW>UgO}RtQi->X>*F+sEmd0tSJ;>M(`Tqnc{cau@&9abmGU(MN_C>mUxA1l!?r zFNRVC#$y6*ISV4dRfTXGV{J~O3T@Yosk7e7TnD#fJhArZQW=h5tXNtfB*}jt=j@#%j-fbw@D%c`;eV8U zrX!VtCtEixX7@Czy@;^AgN45ze+z~ygFArMf2aA1sdXjD2c-lj>mV?T8fH@A19S@r zW6Lxjvo_j@{$@1yF2xuf`(z;{ma8bJVruk{V(dKW%1+a)vWuwH%#4$u&>KC-Mqym7 zEN?;_MQ}2MReY6&a1ZD~7s@w?A^K*oux*+2V>}Yat8lR z7_4h(msng=AGk24F8|#H=abGad%&W{g~J>EwVDgWN5DV)+vB#}^f$^dCvyL{kIZhK z0{xq6^vS1BuxAZKe~gXIJ!n&IfTf$06rr>;uni1s3mrlj*ZIIFM(SG|S)^8l_D8NyqFL2hi0CCbZ{Di<#~RB{ z<|Ro}-W>{ozL!~~HDQQ$T3zd0ydJNxp@Ba){uL+Ej+X{l@{QQn^sB|MD!x2Q8*J_i zV1^dDD?C8Zea|-(&E-E%Lx8{lu3Hs2RQl#*rnLbP;L{}@Jj-Ji7gt}}j0fe##M9?1 z_oka98B67(g~OFH?o!E656_|ZX8DMqwDMqREUu%FBI!#R+0cCck%rnZUp`p9nx2k^%lEEQ3X+O($$RtF)?05b5auMwvN|6l{a!73%HHUi9Z>zrg@*zs&w-h$G!sXQD zLtec^a&m%>^wQExx$bCloSZVKi(JjEsi)vm@1M?7M4$KSNVK>Cexf}cMbx&v#ROaf zrbYue7iT(Qg%dK{p>36-ue8^g+$}P~UBm|qaTYgk?7;#BCm3SL){_q%fAK7D|6IzlQ6R~AFFqnujF zP)QOGz8dD~x>5Dkmr0K-<*mH}W&f6e$+|R=Uwq8mqR?eYyc%~X9e?}d7kvF;-JyNy z^cj*vgBQKg&Y}_}dUOOaYX=Fi`{P`Ud-7?yM};Gl^6j&whLZ@HQch1V zFl-Z)FQzx*3ZeUbs+~Rh82qb~$EN|>*dl$Hy;^BbQ1$PGVO<|4#aWI zs#5BCJEXG*U1dLo16oIf%>3D2ci4HQ)tEF3wXL-m3B@o#Bgnr}niMWE*H^Fh{gi$_|1D{m!6$2!b6?T_#7ZdLKH@~G* zUtkWTRc#r#?}#(xp~xZ)aA}U!Kl{*S6nG=6=V}q{P|3CmV0pa-wfT#}36?B~^m1_b z&Q#()`$&+c^R3=jfT266kw&m)9Z{Q;A-@Bdlhv%wg^vEg(2W=IH6 zH%g?`$A4pq!ZOd6IOJnwqwpK$UI8}+W$vj|ezsg%aY-&&h~ByB;60(BxPm%MPt5yT z?l+{1s|9=&N)tlak$7{C5aK_{TnBqddT~|JZe)@(1YpmX`r{AydOsBQ^(>h0nHXrv zSwC3OoXXH7gpZhI=f_NS!qvU1A;_Iz$wqpVX-=-9SO-*v{1WuLIBG_z?jTM;A4MY4 z{~6}F=jx-w(>qB;42@<6DH7*Edbesbe?$Bq*%og`iAIw63==S+FK4zh}N3^q0l@E|h3sCKXruD~Z= zX2JaaIFwC4g)Ykqs4JW)nNy)j%SWGim0BMSTaAfdE;^1!%J3`bdl+W7#AQKNfn0%n z2M@jKpaSi5Gaprfeib025?VkWgZq&NL^leder*!Om7YQYL(~ffOli}VGzO$#=88htf7TaRvf$>V2+G;#|2asK>fZWX!@3#@AX*lBBQE?QN7S{mnu4tC-2XtZJ}> zXD7+3kY|Jum*(?0%}oz3X1vmTC-hWmF6K;0WyrHD0^C2-i(zG!JghV6tlm?^3r3XC zJ~T59yN{acUy}L=U~y+35B1=WC1Q6T-M$JEmrIRF4XU2arlbX{?Y8kh=+X{zkgi*d zzR->6>SSpLU^PVJ6uPrUv*Ph9WZNjeHdqxSGGp5lS9H*mF?R7hR57P@V;i4oNvl2B zj%wJ<+*z{aB*okWn-Z4#0Gn#TG0C4}%xsid`Pi((2JHEOydtkxmMPgfcP4X{c z+L}4X34Mo*%yq5l=65inpb56{BbgWrM^9t2W7|mi5@o8qB~@GFI9B$b(}UpWGOu++ zw7ubNZ%Zu3q3=Mea;W!lHzeBUsl=Q|ZkD*VX75~FOTNk|()-EB)~(7Sn2ttFW@WhIKht&1X%H?p7uX1bA`Sz;G<_WEfoqLZo%%;zXckm5$}0>BoSW|jcHT`87#J={rtho8uftwP4 zz!fr}hrA5gATmtCb$SO4CP^5_;=Q(mTvS$LW@u%>-sd+GyuXG;wupFiLo9VKvLcSk z5WkIT-xM^f6x_ASY%tEl3pv(pLuf%6#gx}a8meThRgG5?H!R`3uR9;IFoZAAnySs> zNIV|%)*>+ojLu@^5Jb-s^P7v+W5RXx`M&vlEIJ9cInA>2J}M5XC(3-`O)i;3bw}It z-5*&|nH!xqH~ciW{ES>}uRMmZm4r;Nn?@OG;m8Y94^wsD_2S7jk7oue>XceB#C*oK zo&kK=fEu5NinhOnsvX5rg-Q%vn031WXqLwf5x6cPCtvnomfAy*fMQppyNmggC92-E zv7_c!MifVoE)oGbMkozTWj<1mZ)4MV4EVtZ^AOzP1d}ao7 zP>j2Ndp0{dNW?|B6(b25gZ!3InSTpyJ=^IOj-*1Jh#$C zR47ofpBb~-E#&#bd&HN0A%cu|0N(}yjVa^ZMmV}(3kg8UrQRTv9b7*V({UiIaskBB|)#K zJe-2XNLg4E`uF?dNFZ?bss7hXVNHrl!h1y;?RYtmAJN69N9dQc>P67ZH~flZkPRP) zUG6&Bu(&(YnG3L)P5i9Sl-3O+BZyS|Y~O~TUL=Qz7beeA_h3lkh`vf>M0O=&0BuW| zKSBtY{ZN%gJ%!=k6Xx?!vO_yP?Ck1bEzq(J#cI!TUqMNvNiNRkwj_RU`%J=}a&KLo zqpSGegePsXi=K%l?0}aILA?{XiW-&f@PdKqUjf2x&n)n=QRQdHm(zM2#m|0qqM^`0 z@8NK1c_G61li%0^NDSi_yY&dimxd;H&92GCX7nRu;{5USicR#%Snm-Fl^DbV^tH=XP|VDr2WeBk9ES+8keT5>NJ4o;m`S; zI6$5FOpmFmfM{pU5>XRP(RvA@=!ZUV5CP}M5z?8+qEeVtZ zjkItd>H~ia1z-S9ZahHSKYWptL`XKhD1Bcspf=peHc32YNx}Kmnz|jM(w3xhG4+Z6@OK7ub4KOIP}V8T>Vm?c`&>DlMf46A7kAeV-Wl`i0Wz zk&j2(xp0M>k)SfilefWb1iw43Zms{-N?qFXkX66 zpheg}v6j&~f?hI#RSSKqt7LL=fntSh^z?`h4i0}7s@^%uJdmuSWq?I0EMNLug`7Ef z0R0N;JvVxdP~si-198+$dkU(6dy|~vcwmb++TPjK|0vz}EH7ubLi{inCDiD<@#zLr z1f)$-Dw0vOXxem3HAa?IwJnW^3=Y8{cGqf0Qw&^gf*sS?|CV4!U-FM=*>Ud~!6o>7 zlp5sl{zMl+&HV0IWas$Vg&wef3p9Q##O{=an z$erhF;kGi0fE6sz9a@3mM&mUh1`AU#uA;{MzD9};IcNksX@$YW@$3Me@AwJvEWru7 zDqyvNNVZJsVw0$$si7sY87%3a$`-85q)-j>05_FV;4!oTR*`L4eM_zQ-%Os}b(B3E zfCHEb*h;c5#NUAcRLm|i&%0Cy>l=Qd-8F?3`KJ`yAF7QUu0`~p*RHSQw7ao_h0xJ| z-B$duR-jDl)c(eA!6gJ=MOAc)3*IrsJTwHF?A($5Itm(u{Wx6Ty(aht=%2h-5*2KN9x zJ;MFT+(;g)F{zT-e|(8)RAXlbMn)M^(?V9k<7W}HJ?n^*qKNQth)#u8Q+$!eD}%kY zfRGSTm0r!GHv4UjLE9l6!7g+*nvtubzEI#SwV9_9)eMg`H}wk z(-kwzNHh)6@P{=d0JrVWhXp#NeS_-K2^)KqVp|0`0UUE-Aa-@yU_ zDEVKc>Yq5nj}_s62M<{P9LfKUG5#z*{NMc(4Eq#cj@*`%f?@g=?&TeGGOE_E(C%%gW1^FX2&8 z6X#Wz`=~AbN-0;c885z)KpiW1q%im+-WMk;XFNC1l8DU_9Li8-n!ICUpY;R&BF`V` zV^dv-0$YUbMor%2#@0(R1=EH-ee#}ZqHc{+$(aE5h()2rQv~ZhvDO)O@>-~l5tgI2 z*Ok1b4P&zT$^qjmfgcBDU+>k2uEP~q3pxM!e2;WN|MxuN9uSjd*pc1IH%F~nX*LgO zGbG1X_}heXEQkVz^WN@ON#Z`B_G{Duwm>*3$;psvk z=xpmEtKo>7jg7u*GBFN@hI+KrTwIDcA@oR{I(~`4^nHYT@ZJ^$AiC$I-#zn{Soloi zR})s3cS%wkGY(3(-Tu3jK8D3qD)DE2H8Pjbl-4(9Ky2GsN; z-}us9!hhCf^SXDYbAO0;)CJU-WW`fY?Kz)*SDR{hxG?<;GcZ8E_+3&NYRicH*^n~3 zWTM(W3>d$Pd&3}jcwgGEMiiM} z5bL_v{Qv{kkAz4V+V}jYUu$2Q-*$8_zuvhT%G?FQqGdG&ezrF>{?pu)Ar>jg)^jku zm~34&9OKNMTst>(4yNc2UqXCDEOu!fE#ESL8;q@+bOq~F_H9|~@Pt{01BY_MX#jLu z@cCQVeZ?=aV9T%M&mT}EFf*l?!bJ43R*?mv`h@##C30v!;2o#{9xd=D}2-3F=zZ2`v zfM2`uwn;NYQN(%@D*o+yWM#6lRw!8i=agBY*X!}Ak>$0g7D4XiL5B=>Wtj~J*`+;1 za_%D1`99h|farB%x;+X56PN?MbBJJv_rdiisz*wR3^)_`47q=yOyVQJ5p2KvCT4Gh zAGZ-EQoXC+r)-$@8(zv4*n1XVgmJ!0`M`10>NpnlALCYhS6(&2l{2#&sma#ju zBL(Gf!=pW$!xe05rpfR_g+&oX1H6TjV!NxSXMBhbOIT7A(b4ZUz{vMNH7WjjVhTU9 zka!?wql?$M^knXpqOUK7yV7shyG9zDC27gcJsu)}pm04EZqdpdeBMZus34i_IA8y{ zKzdt*zS(Ao>yKkEcQCH$=g9ab{D{O)$|UO4m7ZCMiKN3CCM-15-2Dx%9e}apBI9!7 zXt7ZL7DZ(etxZGkZY6fRP;=%z zfrr$-Zg;pD{G1^YxnkaUvAEp}XAwG=rvBSs3U0hCmyKxYw~^$UJQl(S>)<#ZkJg(R z+Y99;w_8m5Ik_r>Xlu=dpF)`6rXgWv!gAM+=rYu(nLTig4;46uu)j2`Xec@U4^`hB zUrEz-`^2_w+fF9tgfp>in-kl%GqG*kHcsrE*tvP$@4nyf-oHlu3CGoy;sBh zswZ1ogBe_=x@AyQOQwO{T<|%55pZUHsE2UaPQbt9$j}-%En8t$%jMb^DYiX&_i0Xq zPO||is?~b(ZubjCEzlV)v-vUc1Q63oQ>jicqDN)_*cAai>v>PDp1_V0R6HG-{C z6UG?LI~8bKspS6=DdFTHEOkNmlpTD(GiQvXwn(*7>k;&RaZz{E$=IzBRq@YCHQC(K zTwKRaktJ5pttI#Kq9ZzqugQmM!GZaK)Pr#S$~EcY0+lX|=nkiNTPq68B(ueU_?Gk( zl-&7(W~z|%X6jiTvPBupiCQ)TRJ%LVdN~rQRM-*wX`r$950_iHg?Tgw10%22#^$UCaJ%QG;DxZjuqI-9EAv6^FJQ6i!b#Q#ZiW5~wviixkh?2Hi zg_DYD{f@Zl2o~}Dw{*n^PC3U8Q2li&LOoVN-nIHR=HmJLe7B!(>sRsTqv6FN=tzQp zPVodliddf-Wnfk=`e&gQfQ5&xGYiL|f>Oi@#nEvj5@Z1kK_2hutL6xBD=~$VqiqzM2hN!9MDZy&96- z=_cll8D z;p(3fEg?p;zH>CA7&7hzCs7(;zI!EO=s_3(ZT0Z#%^9J+NDi$o?%b*m)`7$>l*7)K zQ2Xl}$fEs+&Bbt(O?J`$IL0QGDkQ*X{Xl^(W){KJTsni>_isSKM2q~R=4D``iM{~! zdno?$xa~OTdi$S`Wuw_VY_s>U9I2=zW+raL^{ByvU-VXqVSP?9j>jRk2*VR2u?}|t z6FH{zaF_+>Y>Zp=BGcqRH8I-9Ps2Ys0wD#<>!D#VZK2O*nGON>L!?Yoef?l{H<9uo z`~r}dtTRTNkExp<5M^Hz6rDaV_*~W6BQc-9>xy>pYmG8qzil6S;D6)>GNBM%1$zS3 zm>;N7Jb+kx>vn`8IqiW@N<=rWXY9mWPfwCg5Z{z@LtUAk6Ti%9WbYFTw0kolR>{K% zuvShRe+Ldvcg%i62%U(OpSd{)87HG))l&c)>3VadiY-)e=o(&v@oBLC{7oN%Pn*(% zX3~d2Zovc@CyjW{jIaGWWxe6aCmhfBq`WnPQ4|pb@(9`D_swKwP-Z?0bSEp6B&9+i z7gN|*7?jnU(F=`H=VPpx*dM&bV=N;;_|q&Gr-)$y)Gvw=Qf_K^pDc!FKKIpHnMQ8r z20TX0Y=5duDp5jvXdOtR0qGg&1LG0{*?skU0zd4vIkP#VQJ5^xOf#ZD-NHwdWJ_2O zrLT2Bw!KhR(N^LXw?H8lqB~a3q`<)q%OVNKz-{JLSWJ72M+@>!<$)!1^ zIb}{&ygXo_JQT5#DT$9Gfr+PJ4?N+E+ZcAd#z2vZRQHDWB>Wo%S5wapIpvFGNiU<3 zv$m%H@X6l^MIuVOxUilFc|E>3tD0Gj<{8SwJ{pdqjT+bu>dS;oL_ zMp)+VMVV1%pq%1?UAQ;Je}#vQUNb-r9Okd*Z((tvwrpHc3l@3rvq- z;JQ&`kz1T-4bdDW6=7oZ}T;=a7hMms20K8LlfuLn~@H z#8!luyw_PtgQZ|d4?XRqF!)J_S2D(ni;ZT6 zg(erUc@qq_719?t4|I^f>B`MZ>F(Q;%(NxJ9BJZEj4URRd~Erh46-w~`bUECEFHY5 zCa>3zCiR`o%rVV@=~*{AfPG;jr$nn?4oiwo;fXf4Lwnu+6~y}78wDg;sTM8?=O7r^}6GqjrN z^XETX;z5aBv}_1wLWbLySCe@Q65AC@BtDP4OEce6n(DzB=hlVe@&{BR{h{Zt2oc*B@6Q9W0*N84E;au0%k z)6p7eS$>!39NEC+dr4<;>7%L`rO6b`PkL=<7(?Tbu9y=`Dl zwjOqnLxOcJcKzhV$U^7gX_62TPYEUZo|pIgKRt}u7)VSJgU|XCF54m<9B}#w8mI?i zS(OdEB*>nOE2oC!3S9-#Tx~X(b=J{@5}vcZ6sPpc25bz#Bzm40x5eVN4D!^{!)2un zHIpD!@->i3j5;{wLSwSim0$J0NvN_LV?m=Wdqls$gf)RG5|zo#TceCMm*piUuuF)^ z&%Dl8*2L4_<@8SMX$A>fM{E>X5)RD_#D+2A)NMxJ5b$MNqZSChQKH-pg)P9A77;!P zAVJ_sT7y`YiW?(FKXD+dg=g(mz@R|pYd(IUL50avCheG&!{m@aOoO)BXbYQBb*NE% zZI6f>P*|FrO7_Vjt5Brw4O@H3$}L=?6`EdAJu1)pbs}f!7z;^y5>A24YB?$>mY2+q%)U+At|4{e3ZN2^1?R?iA`6QVLrANv58HUwtq;{O~|O-^D}X(C3~~j5fVO zk?9dMTP2=X3Y@%{ixaL1$erkfIqViAU7t*RuC=7I??{yA|++ieI}& zwCB?Ll;e>$IXhzsyy`u*9^lkzT~1O(G7rW2g{*81H@F;v9cBiJk|>+E;Rm-D3*tYe zauOSe(7aQwD&J6*UC}ilmKn!MfTYA836}=UZAJG7@nEQ+jJBWfWl7rU>DM`ODR4BI zsnEDhfW+Skw@Qh($D5|G?Z4mtaKbS;xuSCFg&}-r#)HNnx>9TA}}&g$tE6m+PQ#M>7MB7W<0h+K4YyN>s>UVY{;ZRZuxMcTc@3 za{@Oa^EhO@T%w{Ca#1G@=)NGr+&v!b)gc{*iZ(DPA7c0klJ$n#qJss4uK#3E_DK8% z%C3R^i$yM$J^;h7$_uV z6#BCGJqqqgxIknJDPwRLrDMd$b9G*idV@^ak2Xr3cn1qXR~>h7y_ywnZZ`(>gP5K3 zX$z@iY3sc|2H85yh5N*vH}^w#R#q%eQjj6BCx7N_wDf=WXmUSH5_H>L8_u0!+(an# z&NgD79u)WOAO5!95)~ulyB3}S!R-I8JaisBJBn^DEvP(xXfCLaAMhA8lmn*_=9gn| z@+ZA?#g)HuvQhCEMuL!YrjCfd-YNZ!2ghh`3VJIX^qyc1D|7^YFx%|<=JCZND#rto7xFv^o&A&t^6qGAXjN&8B%UhI zJG8GhQb8h7_vKMy-MJJ8CM;w)dqQFN_&7L{PSW5qGXZytZ)gaCYg4nT`^zUPY z!AvJYdmE)`3ie#3pz;Ddi^Z_@WI7*Il@*qM!U0b6eq8GH!37+59SuB!qx8oEwpB{D zc!|stJeC@atKCL`+h=!cot>ckP?1P3T|N1ZBY^|RDLu2h{XOHhM<>;h@x2pGB=BwR zQ0ZHYaQGHjweu~r&_%9gqq)OV6kQR%Y3D|32yG6qI$Y; zF?qO^#!=V-4UCjs5XY4g^}%#jWtE>dAOk~3sbz`PTy|wR2JU!IsDny-{P*DUigHp5 z7ddG-G+M~VKam*Jyx7z4;mQ=XmsPe&x=>F*BBpug=sL`FVuY(~t=cG^pz&(P6Tx$q zn4WedsuP2erHb0t2I${(Y7)o6GfHKhC_xwHaANHB4bp4JR?>3lzRthz?GP97c?fdl zT9!#@VxlKHjIQ!{?N7OJ(oIYB^*9e+l&~J>7%#(gF%-hIrB2(u)c**$*!DW2CcrQ z0Qlph${7yUQX9(L))X1}^?JEHFk1$H?48XBrf*Xc8(t`#=L_XJsU`*fGv{mVS$~nI zNR$PeDrBud?-G_;&kQ=r^|ygR9@^r?C3(km*Mbm3-}wR($Y(3X=`o^LU$ zy|bg(h#;Q6PBp$CK`al-Kt+hY?Zz4Pu`=G3BNaLwXf2acn!+vhc{QgRq(K>od$$kv z@Pm1T%+mUP@HixBS=b{Gtz_AFOfibS(eY$-_B06k`)N4 zwe1~juN;-ZGD}+f2Ydqen%>}vQH=SnYpmvMK;npwlwidH-z9DQiX+#-`|Tyg<`MdT z?S_L!LxS&^`T2OkjXc>YKP|$J<&7My6cm1>hBP)g%PrObHLNWKv*HRz!P~dA>0)qb{~fpKQw- z_EIIR3^#ASX?FK0EdVt1mf&XhQ7+0l!;Yz?3Ir{o`+}=hjp{*sC}L^WXA2GA^9CQG zN~mVttnvc^3d>cbc$@&G!0sO!7`2?8)iYr+UgwLj7tas32{1bZ5M%R`qmRU-;aks zM?N~bETvpfp>I;NRhk~H&1ujMWw^}AXSZjS0%``H9+>6rs{O;nY>Tx`2iyPHyTJK< zRW`BJ+UY|5sv7gHtqMKqMHZtv?%^o-4q9I$fbfNS3+K9ys=hDMk@+dDDj7OCIbq{` zY`aq(ekm}n^YZHNMl-`ZQxu%T6~gle!cM6HlrFTmZ(P49S=>_cw=b~8JT4AwsCP2d z=rRrMe+YpS%(-~>fN$RV7XAHITJzE~iYNvV3A>t7Ebc@)`L7h|_M^^z0mk(?ROF>w znx6|}X38^fLk)SKUb6{SBRyTu+9}tip`~CTO1d-r_EM>jZXD-a)t855x}Sk;jOfc` z(bBjA=KwuNRpFbONVhznJ z`mf-sYSs}>?SC1gB)g#hk7fCPrCC*ZcwkEZZD$7=B>R7){r_P~_*S#SUjA3o6@1%- zGV3zh1M5t1OO&ftqf0_e{10h-*f+aQy#t3E4S6`8Ec#vS*&XlSGqz`~*6}wxf{_>S zK62da4|cNCBlOKo^)kbM>qQhl&!NFVt78Nm51=KYu=_UtjdQIS?Un3*C*vV>2NSOx zkdtvsfMA(HZHL@a@OVEnLn7dU=f_QhetQHoEcy#N+u)ttf<$jQ zgSV72!Y8BL!M8pl6O7*tmO!6KX76B)b6@a$5mroV_dgV})fIQsA%-5@P{EOXm&YiOHb-bgLpUe!R!r^s#KA&*M&8TKmgzcLqLh|vz`Ob}U!8|k0+H{4b z;YF(-*tDPF!e*-O>A(J~Nf?i<{TB<=eL;wX?1r-}aX z-=`5NbKEmY7}tkDlDor1;QK`3&we3uOo~qXQ>ZOMuXyal0CCWVz0tza?raf>S-2uB%7_suseW1 zb`OGeO#A?3fmbZ%$(kF%G`?O;41s3B#%#1c2c}XPcc(GBrprYTF9YQM?*REWP6gNbUrZl2L23ubW>G^tM35L2ss8!XXGqMX!HEWZlV8{k z)<|+`u78S%WuZfma3Thn47n3`id|N{=R?1zlw7Rs{OVI{G;z<>5a$&^2Uxe@VCkyI z|EoQ(V3eTCcdKu$cqCYVtTsm7k1vYtc(2)%-t&ntz^!No>*^dLKOIh!ohc^$vb|S9 z_(DEvuzo~@of_#LmlVLb_*6)em5tGFW`VX4LBr ze!+B8G63L&-6Kc?&d9T`&#^`qEgimELRPcaL6K~;MqbWa>W)_O<2w4r#3A zFx^iaGTIw%Vi_Y0SKNaGcxV#M0|;EMMVi5xpE20m3y4oMo8K|fjXINk&_>(2?-g=a zxU>#GiMNff0~sq}UapxsEo~ z5GplVyra2_#d*&o?}+=CimoKN*FptbDYqvqDOhLgxzCo$Y_*rl)$?;ejQM&u)AXAO zstV;}&3cs4d8+3gpjZc-pfK8W96@{KC7TnsDVUz9eB#Yg>=^kMce-IkPv zw5QiaER<;9eb*ow+~V=iQteU-5z2%rR3ecCgt48k8}?=4>BC16qoSb{hYhCG*(m*8 zu#eL41s(6@zVZ}~pEn0+Ch;|wpM=FU$vTa2mK=@B#17PXq12`X>3>}baNm++)-xlC zAv36V8kpUi>&16GdWp*p)-2YMAiqOi(7zq03hBSzu7&kD;weh@wG?q!o{s@<##Q*+ z>+lE@5L=zTkaK>1^gK?3GDqxR4$SCmO53j>Z*Fbnw=T?!)G1RVGN98buZuX)4Fy2D zrILaK$lieVp+P&eO&oTocfofuZG~%NQN3ZgDp=@Qz`DwHxjGX%~fbwJ<9GwU&s9t{&!Xsab2O6bf8-Mh)2M zZO{Gd_*YRf1hG2SsDQavzOrbpmn>O>be+wiml)i7s>L@CWGV(kiG3g-Z4aptTB%$iw>#*$TQSyCc$ z?CE#t#qM|~beMTt}o0J3(Yy!q3pZ~mP%O*1X6o4Ej!>t6)QMvvt^gqIb552fGj$16+jg?2!u(<0j3Nj{H@ja_(r^ zQ|W@~x#sE5Hs=aKtQg3zFbi+Z$*g}UPXye{MW|Xx7*ETrXNFi}cyl*9Af1yrsW7V9 zmKX7l)ZtNin3sx^NUqk>L~veC_)EfMa0k^3vB$u-$;_3QVmdUE&BeMYH4N%^tFy#5 z%1@&+sRg&$)X!P0gTNloFwMWi)YWA;Bm_Bk*PU3Q!59uK)0P@l8EQMa?y&YV;_vS( zWYoVdYIMI?0G)~Db+uIMY|&RztFnuUbpMr-L?B@TJ4(P`LW8~& zHRsanF=SP`tzoL5Fj@fKnzUJV!&fT_-{|~L1i=QNG!hN4!CJ{EAGXW=#t#2d4{zk< z6+0`F`?WoqH#s|AkHiM ztZ*qATeG6+lOyztzUg|cfwI9=j>2q6M3Y-G{$5UtITa9X85t*>IoD^+iBjVuAW{@D zV2z6Ej_$Q_=4KNpo#oU}MfJ$?L@)S>5(^U%O=>h}nbzN8|4|;uJbq?xG5?S4?^1=M z#=}))_xQ1Fnb~f2rRhk~a!woh-aU-fgmuvA* zXi=F);yLq&iI|b?3i1wD-=8(G(eA|E^OQo<$8x>4olIX+!81n|Wx5f}&^FfA4hb8! zr(<)j|-!IkD&9MUuaSue^2llJSdre^*8HG8{NY6A2-rMm-4YB!>?miNb@H8ys zsdDSZzQ$kW%H=<#2^JymSOH=*vS!xe8gaUKIt`$T@qSU99ncG2v!#bB#T!@8#lf?l zZ<>VNYsokd!?Fe`q?6L?IK)vt7|-xK6Yhi;`v@7$BZ0MQmI!bxtfS%(*m2OIh9NYN zm_<(mJRJ*{M)c+@o`_9r_yeZLqUV$8Jvzg94)DKgK>>!R3g4OC;OYt}1-#G=jav+& zE*=sE4^{PCCm zd+^!oiQ-+nY^QG^o7J0#Hci9 zwQgYZbbS%S=$1+EXJp*3Ef|``96k3Higg?mIo4HbYQ)-Vi{z3Z=^`RKl0mOrXavP$ zj*Wecz@TxuZYw8C+hq?^JfC5V#wD^d7LXpfGv;>59Q8xwOy4?QZ;~(y)D^q8&AYE= zwEA2!S~!`Y45uqu@3h!v!gSiBV&P#05DNAVGjJS69PUT;2(c9K^Qa29ldbWVl*F~* zNh;`#OfBWyC~C?4rYlc&*&Edjm?|s%)tq-E?{t03;_Fv1q9o<2zF~(Bod{7Tjt)J-Z7eJ|b^MCKN(%Ues-kp5fD;(HU z5{tV3FThmnWDU1W!3YLS5qqtE?%c=Fp?|SBOFIqHqQegH{Sfqb{xEyV=&>o&R{i|B zZAIibgl908K!F`CadCOc;ZUteEr>5inMgU#=X|0c{f%NHT1IYiQ)z`iITZumzn~xk z``U}YFJdoZsrvq!UxRX#-ZA8ZxBXv~3^0)ruJ#_q_|H(j|LhhlU$t2FU)0>m<_r*` z_1_<&L(%U+{?FduDLUy$ zcsq1tr?sSV7xxue>hW*efB~}wjFSce?TbMt9S^T=R!&cMR5+^kA2McEMI!mN)r)1| zFFi4+2j7DP?vX)w#7^yALdc6GWhPU9jjWy!b3+F7?|CELIM!c%_Z0Pg-deIVrx&0FS4(=AZoG-7gtyvTnW55oD`pf@a0DqY;mOWi8OXPSwB!_YA z!Bphv;7|s}zF6|n3sij1E|7Gup=kr>VvSY~Ir7f zT39hhDgU*7l*s zcsR$#-B4HS@eZBdxzWc5oWyl(cIT2~e5uj5EZpWWob;S=w!s}x)m*{vbL!3kIFytB z>XtX)Bi4Zr%sjIg--5{Q{v^Jw*>?#c!{iIz?SjL8uIOnd@bRLH=4Idg^EMD(xegSrRf=^KohR28pv>$OOCrw0r8rNQM3 z^?A1$|0-K9$sGfL>TDTP$<_x^lL@XzFt>I$C_YOt-M&$*3sU|h+F|vWQF05N3Z}NZ zq^(6Zsbf~z_8@wS-C8eJR28GO^U18T8+WoF#K)a{U8_}!SJm0(iM{LKCTZIl^HPT( z&A6H0Kp%nRT~vE4m5Hd1%eC%PB%#t<;`!mh`OOpKB{GHF_!!y}Udv?bjvodH(^@?9 z=WoN|ws(XIY`rlMU}s{mPP^y~x9eU?;cm9UipS4aWnkm|4 zqmiHX_O&Qw3_>P_d~W(rHo&4-e)&t>5}0Q(bYy90v+5XgQY_(u}JwZs4vTX6Cukb z^L_vW-l=X6?EX8W1@Nxppm6Kt@M5zzj(2O=@pxTal}W2NX6r4Dw;nB<5(Wg%HKZaR zCTpW7ym$i1{$Y|<@SN`_pYOs-lR1YwZikzEvG*S0CYr;!P|deo*hRhB7i<7et>9_A zK~r-_6#`hzoFkM0TNAS_5lZ9E_2Dggllj81G@e{2^8}Q$&B#RldhzC&B1JC$Jv~#8 zaNKmcB=pm0Jc!9+y_FA&ki7pxr_p>pZpLe7o39nc|{Ze}5v%AV1+(sAw1vfN*wqvWjT)_8Jc7e5ROf<8>Vw=Wl~m ze=A+(z1mt*q}i2_#Q1?C8&j=+_s6m_mFlOq1zK}Qt+g)`=9_IQ%6qpjKA$x$Th$ZQ zuS)fJd9acBl0OyAOgzE3ixlL&%2!Q^SWS*C7ciLl?ylOC@~NEZJe|H+WD?E=9+Au5 z^Z5)@k~O{fjv0gmxbuw`Dv+Oz(tN&&=KCd8k*D9jAeg#*%@9*UHX~P7D5Eh`GKY7y z-m-bkHBukELHKAZCA;HgkkcpHo0fL!M%pkFy?iU1p6-N=EYiPXjf9l zSRWxlM1;ApAO~+QaEnH1MIY4hd|jpLkp)dm{oouBW&oh&!kjlXCd0 zDeW#D-$Vy#f}<0-SN%4>7=8Xl*|@pfp`0qnIdkgE3kJ>Mi8D4eHf@~!pdeCg{p z%>)WENhgg}t)o1jC@mkU$PFPs&XMcTdVOyur5eclj8^eTzj#9gtH}1trRJKfuIeS5 zOL>cA@vv(~u57%&m^eZP#x1;y7DC`JVWdZ(4W>*cme=|88*X5dl9E-rP?QJ;tCeW{ z-K{cwSP1J#yE20l(P2OburFX*p z@IrUhZl=vn$mG_7J@$y{Cb7)_GuHON{KE0YDsKua3M|i zj<|cM1u-7a3YLMWuk-LnuAq@o66nB-?#7=AQ?ePeG>dHrO>HfCT5wW=_pLCS^PA-# zUg`W1YXJqkcP<1R8x8T`PJ8YkR%Rdk4Zo@G2ncWImtdp)R698JbvIB8KTx_;#ESF7w?NV>|q&&oDoUc4KHLY43HSBdK7Qb7oWv|YST_t8~cd(pD<1LR_*87dQ(m|kzoEAO-GXIRHIMv%tXKhk_JB-o0rmRqs(^iM2rlOXJzGQdrqZbkip0 zY=Jli90+9DkIT!>Z9{2cT2?b2i+N43+nGzha*?+Q@bfmKb!;ZX2=He6Zgj4;uVH<$ z*l>T6qkgkt)fXEhWq%NU)o>&TIxREXsCz~EhX&6%1PmGV^fw){H-D~Y`RB%9K2CrL z65;lCBH&@`@!`$qmr5R)nnZ z?Owozm-;nmprgZCO*m6N!|Nzql)K$Y>aavr4+yPc=9O^*5iDDXP!+2BtJglop5={b zw5qzC4SW1rTv&<2B1~uY(EYHv`iv%Phi>{2^3(ewyEOY6OPb~k)8(r6$Pu;nQt%_> z;qaE$z*t=GSmsI&fcuAN8lll4#4FVBP0>`gEJEcsPVYW$ymEvb?^*7 z!Kh*Jt#B^E8Q8PDJ0=kGzS;b1`wO$%oxhkgX!GyQ^A zvE#v+fRv_nYT^DPc~1unN_mw(98>P4Vgb09yQCg`H9f$=QF3T+7^OV03Ucty-mPEbbOQNCql}v8K(pgB#-TL+q&&03#L5;S0 z7f=(}m7{ng*ZC5K=nt@o8rcAIBkw5jgN&lDMsbxV1s}dVN)0&{ar-b#n>q|o@ zUXp6~HbFm~O}Iv$E(^TQRikbNdbjY@g5Bk0D-fd__hAn!L?$Sk8ZQ$l?vNjd@$ojY z8m+V-JARp1WDJF{2^UDOl>;m~BahOIa?{r>t{ToqX%N>^Db$WE4`MeZdVT$F53Gn$ z)4rJV7#RB?pU@ezG}@xzd2Ug0aTFp(Ml}3>L))l%p~8Rd`UC`0b3F*S5;mn|il=lW z7rw>Daq0OmgjW>?#(mklSO}%er!@HlgZ2%!=L-I{O*DNbY?l{P=jVKEJ7F#IkDG^i zehI!Ea$^wZWpXUG$8tfroKhli6GcWcE{V}7OFl#71D&>Ct;26?_)VgBU^=&5ctA%y z!J!eP!3u~f=*syfHoLRrcsgMs*>^GVdnrlWH?{FUmAq{5v!K_65@Rzsj`rtPR@)5N zK{AmP+Z?{r%Ci+{J)BPNZ7!@IxLaEt`ShVIaN+X}aRoHGCKS6(3A4~_>nsliRinQG zQUoZGah-#-9^1w+d{WL1t?a4nz*r+Uv+kC9DJVy8O(%HxmIUk?_7^o`c#}sYu|+)k zxx(+fqd*}{ywK{L8qrp|xpJMU8NuyTBTQ?LrB`(jcgB7`9kun55v<|sgvIiY3Y;mi zbb(>CyOMfeLc*??4-RFAwxy=!|Zm`gYJ{&OX{s@$$jcV_I0 z>f%CfKV!~&&pWV=@ge@Y_}oe{-!5glJbYBFU!J7N!bBz`SeVdl4t!d3W9*g%@-J$T zZBwx@#&haqA@8gV8D09f=A}knHm?mf*A5Eaq5%tDw*kg)m;UJhU8V#?-!0JdVD%>< z2%$)?U#zl&J_Zki>pt+0a8{mMg6j9!w~?VnmF~~@7@Q~mWXuB@GbKCvV{oGXhM_iu z1rz>V;Zp3VSDHb;@s?|?HVB7Z=!wC@pe*kD-fb`GBRU*0eX6rWcGpH(Kyi--#hgW$ zpNqJhbi4iJC5Fq1?(`SzC2aX7j;mdv79Ion@2q@23SF-S_b=$GI

#64ZeU)VI-_eW}qA z${nT}+7}F4KO{)JZNxjs=Y^?QNI-n9-qWt3ECoCg@_HAHM-#O!&_v|2pb#7ki{fvO zj9Vc*+80tvMNit>GBPJ~_obg2Th!6@hjnwQV;b&f&M&R0Z|3w>8TI;>1I^UgDhY>I zsR4!zTWu2gg8NlE9iCcV7vf++SRY$VkNThP*I5^Vr^Tr ztl!w*Q4J0BSJnnSgbJ(G8fwH!4M~5$I%@d{%c;2HJC85#m6)0V9KEg&xZM+T$<(&! zTmc}BqJu`K1u+zhzM1mVNe)<7RK1?~P_a^H^7gA!JS#ddyc9YTh>L+Em-Ou(VW@@s z1bZgChjR`ELw^LRG?Bd{_r62#WxX&?@LnwDL)1 zJ}rjm?I8r6Niq*{m?6x*trO__WOYJnCfKUwFcmXql$4}qr&*ZJr zQ=JIoLh^*YA1%`+Y0nGBx64T`P9&nbZosUYLgQ>&Qu?UGLB(@o4KO4Glz#PP7%=K> zRI@NL$-^tTlMAU}#0K#oxP2si(~(W0)f;I}$QlgHkKEk@eX6M6ks$Ih7sfCRh^pNV zId~R6H;tdSYvISn3HhIb#1I~htu`xA{W3}>W)419D^bsX(~uf5u~a#gp2oQJ8=pPl ziu_rM2b+<1s)h~;$@PL^tmomtK4I43)uF_+$xyZ_W9r=e`}<)(8+jKUg7UHUI>uAH zC4L30&4k4M8wL*Z9w`5&?Zga0mG%sRG=rN%Y-}kJtETcEbu^kSIj10B+3t@0Ponq4 zB(w%?<$i(h!4SURoQpleR}8PNRorARCNr7lp!S5Pr!DeBte|En_shzD;ybV?VWZ|; zi_3(?l4zd$%MdFsQcW|`3Bi|3ji~yhU!PB0NbjFK6n+;lgLw)3dL9QkdaK%9@o>^; zenj8@@HKtPqnuRl4njnb1WJF^{j%bUifM;o$GN4e!2FqSkc-29y&jtgCt+a=?*oN! zoPbQBEY*0j=+EFZT<;!_3@=hSEEWWdF#8AiK>Bh&0TeliKFs7eeJ*qREkYEEie`6u zDkm34M$4;v_w&K#O7v*n$OBDu9W}U=RNNvZicTTYQ%Akl8t0Dc-l%^WnUMZEN^9V{ zie?DuAQeGF$cCkwV#3kvTF&&dKBab&XwSz6R`iHLe|WI0lG{-Otq>?t0fI^-nbp@$ zfF+y7g5ouz&iQpV5e1{;p$~RyW@D@TO0*-eIxaeH@^3(!S_yPHU~2WRr&#ps5J3x7np>jdz@ zH{})E?>1&g>CKfyfW?q-CSK2OK4=%|N1=rx+s1LX&gS=ta+Z?%QAUYM=KEJV7_gdR zH(pi@_w4fYZNf||GZ~x>=+GT160ZoyL@Iku!#0Q-#m{;+HHP!GTnJ32`&;+9ic`Tt zy8b3Euq@xu$YnJUf{%V^%0!ADm1j!m^}Vw%GE!9~gBud=jJTB)cP&Nwj?KDgNx6BT zWTIv=`(+h(EgVM!TCODks?9>VCT&s`f`uA@jx=ClX#LwQ(ME+VJ2LR##eXcB&wKiG z2u!`zkvEa4eW9zFOQF9YEC!xTC%pNfl{eWAi^1gmNmQf#h`%meu+b(lop39(!FWtW zA}T{tWR-H=IenC@0Rd-RjVyIZr$@L&vogof!fx90;d$yw%@HHn^bfM8AZI}rRhh=P zP7t7pg_z|Q-?GJl6bSG@K21(!bm2c)u>q|xRREk^5?kK~mnq${iu&bHM75?j5`1Cg zSiqq+8-V)1tj8}=VezHdxM&9rXsBs8gTv93uXqhK&u(jY%M8;7yw`t(GZ?g`zzq=h@5 z3ZyLLQ?kAuP$+Qblj`*kOoXOgx&6U2Ft4kJY_9<#Fj`){45= zxtQpVT;XnhIRvxcfvBJ9rNg*qfaw}Ei$LDErMgNh3Qb~`A3FRoKZ+pfKwCH< z#vSO+7-6>0LQ;>C>U+6ZD;#zs70=nl{KJd`4O9SHP!DR`Y1b`(*(fNU(;Chh%>K#Ngz$al3q%UxdYS9ZZP0saBHN3&VM+`Uo@EA9} z>qW!1E}E^;FL3EMPwmT#s!LCcM}CH5rZho6Pz z`~uIYF<2)*W8HG{rUuPgLSlz0DWBUZFKFds3q^SJUS&V&=>?lyB|+)7)?(C${+7n} zcN!Jd;uP5EGAb8c4iOH^JLd27G-pCDl})OVpxj{h#Q4*@-Go8x#XG&#{+-KKFp6B( zAC+5NGM-FNK7R-R{cMAT)UTqPujzWV9aH#&P?nGi@e;4O+DM7-b)Giu>teMrE51Em<}zmcoj==x65#|(xs^D6$Z!X5 z@7^0xMR@&Pc%1OJsiIpnSd1BH-4PhB>y?sOE@$-R&aJh|6asR}Csk|z#&=6(eseay zcO(aFBajj-SZ(Y**%>6VQV1=Vhwn9@ERF(X#%K>cj;PTkCT?9`Tq}eiHm9@&T~qFd zVE1k5mo&hP>$JRtw^zAbI4R+l&a11XpTsZYl7nSpqg@Mm)vl-LqXhRdRQ9asHaLb2AN`7;A?%iGC z;haTNaRDQ-at9A}uQ3`hU7k?`sYH7^<(z^R)~#NLn7nFu+RA4A1L%V>0>@JJ_eIvH z??GE!2?A=gj1U)luLIbfx8YtINiL=%oL6B^8CB*Kw|^BpLpF~KS*M;Yt_>V{(#5=H z5;YptjH78Z8=ow>AtDYickK9EY9g*xH|cVCI)Sw;k#F~~gdRTjD?__IE=(otI8xUc z63|ystCai(Uss}oe@7*&=6MxhNANd2g6x$7CAIKM(}$}i7CJp*zodVWS#w!V^&$&|Q~vgPPh}*r4;?x0DGb?VH}X90Bq5l&ig!Oi6*hGTD0^LH69$_%NKgYZuMzzE}_T z+7X};mO53IxwHrQ5-Wn!gMZ}6gqr>g<|4hbQGU)8`;V7U~v=8Rew?FfWaW!^9?$QLWy$SDlZ%J+oNs9!?@ZzZ)R?#2@c(h zO@iscLvMxW>A8fN;-~6F^~rq_76hXn{T6KMVONCOsdHd3g$Ia3h+H^q+_o}p0{PYH z$79Y>ic@eLi>%6}up=US+*!hbTcL4?wNM817EzCNk+m|#Cf>l~-Y0gM7;k{jIaH|i zg4AAGr|4jh?vhCF(Z}|B?OYOlo1EVMFYIE2{}<$d&AXQ+_!0h{zo+~LCFRs=m+Jfd zDudtVIF^UtGo#CN2;m-~kOfUS^YC;^7X26PfJtJX_f7{dQ$kkSn8?Vl0#De&S;V@| z6kiLPO9B)3gdhfzTEAcf0S!PzsN+>h5VBGSKgeCd#({eB%ZMrSn$lXQPktGcf=q-K z2=08M%UX?m&%gVH^>Q5MGnOL&7`^CYdB#6i_$z78F4i^6`V0A>U;%@Zuy4-!_iUtY zpZ-vaArM75$`4*W0+doyfDpyiDhCh~)oAy$X8D`t-jH2ATF^Qe^i0f}%;k z330Lu8cknx?y5iImAGQ^p!!l`V&XUs=eyid00F73-k4QB&H3jX?opbDnZ=Ib*w?@)})}5J- zW^=16u|wTS{V;fO3u9j5jswv3U#vqw#Ayda=QHtL+FX2d?1R8;*a070+-Tu=2jg<| zbG;9(iO$I2vZ{4&PZcw8#pXdr?~+&ZY@#FK^g2-d?rGR|bQCkvuI^?ld39X*)10XJ zg9-=7)fgDO*;(jnMxc(Nj^sb7MMOcjcmF3@upy*MQ= zb=jh~%=s5xk9|y^%e2*>4Vm^$_+NIRwf5LV)~{k>a;rb)R{JyCyBK!5JSceJJ)mCq zb!O%A&-#D28}s6+J{$?_nx3AnMeWQqhp=&R=}p$SDTDV!PmT}9zMxR3pPLi#@~4gN zR5sU28!Cj|`Btr)z%%)IP^N_xA@%s3+Q+Qi znSsoDSatUkw@aOQUJq>q3@rTA?gS7s7NDfsK=GfG0WDj1QcnUSyRA;l!jZd|ja`b( z-eK*uk+R9^g?!wy=Hf&=rGB{~RSu>~L>XB$R`A+}R;OI^4XeZpXknI<+@7?;1)>Mr zTJ%614a0Xch3tz&ew5S=+>+jc53Q*0Z zd6xtqgHFz_{T`}+?7+w?XkKn}_O@GViPS+@9RwXI#hUXEUn{`WTdXz*Pf zC3l7F|0s;zX#x|5-e^%9qczG7;kGTIncZ*+HaT!Zbw;2c ziY5AoY7-RzG-9P}68qlUl9!*>dyVAAPzA*vOf-4$L~`;Md(M_;FdF8s2W|k;q^^KE zhYLFoXkAa;6yF6Gu6*8}4YKo_8zrLMh8#J>GduN3O5+__gp_#Vv2{O*5A_A`wt zMaxfWXJZ;Ni)mq9g}nfZmR)t89mX%IE@Y_q zzY|}9H&^rQ#!uZyWFZI9(!|@hTS`OwcLgH@E0G3 zM0I!WyfH3qHJ{b3%d(bQ1aq7S3{x4ZveB~fF?S-Zc{6Z-V=uN42?!u|(OI(^(L4;H zL_f%E(zC8W!?U*u%u~^=b0#})wc;nLBD-fVJ5Mp)Em=b9`#Ls&h5nK?chMUg5HW@RgSx%;LX6j;M@oW-Q1^s{M9 ziHSQ?4Q2!cIFsptg9BCKdQau&F?9YZtrB+yayT0Dj5O6eb&+XxW&jPH^ZGmg)xO*4 zzO_Tn&_eQG_>S}O_}gvt)PgE1>GeU>;*L$XF6QZwz_wnNF3k!2%@d#D6_UJa-{*yX z@CU5Rvj8*SCQDP#+ndC&`QOQ6z1^m3R=dH)gFDg1J3zZp>YB}+Tce>9k7@sf^Nj2{ z&YDvN5$bb8Olrcy5tQlHUD%p&<@M>pSozcMG(kO<7FqIc5lKl*h5BhjHdd5EGOfmd zEfhfjvF5QEL$A^|Vquzao;o)1t)x{RhmrfF?_#**^CBhpM2+`!KMG7d*3{n>7z&Qs zeVJ*cqZLZ!+uXX9Z8$zTv3Q-d{`8c^iL;50t*!FH9;14Jm$3%nVr=@LlnS2nnb^0uL z>tnw(ozJzB<Scpx;u1J_e?yMMiLRHt}!e_gFWMm0JuAB>rQZ?)d}MS1q& zM;$XpUEBgvnkfX)*BUr&MdYtHEDF7Fake?pGQ4-9YFSj5)|wTn$H@acdT%Eyrm>}< zn9T-=fwkTV6w&aZD>6gNSl0T|Vi?b2jSxGFE8E@M0Q9$?rSl%skT_CIh|-*1QB8n$ zpS9fo9It8iBEC#c{n;wYY;6lFiEvQU;5z$fBjfC)B*M&7b^Np!S*iWzk``*JVR45t z=URV!KGGI2kfRLH)0@M2VMd}3rW$;qTr+tIacR`zg;xzILI_VFeAhXG-IR`fWuexy zZ%6#bfBm#l@rHG6-kBsM99W4Myh0Y}Q+ThzQ$jj6!HThc=Xgbb3l>|hwqz=2&j=sK$qEUvy?VB!vfaP_= zj0qUv_{oE{1)9mQ;f%*jj*_YBH(n`;KtYe@2e!TCy@)Jjv?Q$W-V+}1MyyFtEr9}> z{$6K-6xV(dnIR~X$x)XMFZ=pW4Raj9uV*3=4ln$_49uL9aFNK#;lwL+O%4ng`)Z}MEQ0rzupCsW)QT`p znexM=-fPT-egca|lE*8%>s}vitB7yQl6WlHm-c%lbStejVr}MWfY3!xeqMR4r zH^9eXY(njRHin`sDV27PNsZC8#>6{Z_om=oK{?avFT88Mdc=4ARQ*&e4u$!*5B7opPdDYB@nY_7`OzsUH9C07^jy)_5SPj+ z;j%0?zi$*$@<-mdcY(XAoqLPcOUCX|!efUvW0eu4VUVs&xJ6~wrKBehN;Z`1_<0Tb zj>N9h)kn_s!=E>+E+~5Qim5UPZ{&OSjr(Vt!Dzk3XZ0A3x1-7?et_|sf}OU&rXc*G z8xthF-Hl0XD9IYd)u8l%xH(aa@=~s-ruf$R^XG3lb}(?59E8K z;v?$0wC|QJ(?l~LW;y)Q)xYKH_ALo6fT4N(`s}0Po#K2wKZBP@q{!{DCxqqU>QId! zK~MTNY~_ydC8s;Lg1;rjb19`=PvbEy)H`P-?-@~A#@p-KziTA2H-g!dQlwfh5-wJ= zp#a=U0i;emE!wQ{y)8o12blKLbTx^J0m?W-+JjogN^Ptgk$6B<&Ri+CS zZcZRn6b8Nj_`i<(ph=};{9@JP!?*xt^1AwoAmj6LHI?v~=~d#l=BH*tePe8)2iL_W z8Co|^8OVg%rRqx)6}6RLr>7T3LMm*}A^lRo(_nIeAfkEMN1067Vb;}NnX@4Wyo|67 z$F7J3zIZ|Uj=~?DTaQ~n7qi^F^^MmdWHcd(re2PlI(+E4n`*F)b zvkBtf%g^QC?r{nS4pfnzPjtk+g|E$2@kww(21g9Hy8MGLNmKLZDqf|8c_*dxclDEU z#yFNz3*KHVl!TCWg<4x%CneO>Y+z^1=_+Y?Hlw!3Tx_qo{`a&Gc6V~C4FK4OU@W&| zjB(!=QoCb`<@F2Y8f6(cIW{9{^St>IKtb<%8$i9@$CefS z*N3)j%RU2eihOz-5uDkZ){Ach~0{&bF{20KN6 zpI*LXJ)%*?x_fOjsNxSe=}(XK+0xWgv4!M;iRFI zR{xPdUd)s~#ZscdKi4xt|4Ks18P$TFdf^3 z!{l!%4pSo|S19BbDE<$MuWg?hZKL=cD@B-N?0;|ir@<6F-V=ZFvv5s+K-H<-N{|ze z_pXvQw|;xEnykl3Uz!ai!}vMS+~6p4_uHY_dB{PSxgR2;A&@ic9hXn^hzv8ZABsI_IHdH3SF=SP)M6E z-l|De!xe0qU)Nups2uhB@mP)|4Sb(GW$fNo%IJ=5@z@BEMR5oP!qgN3-#M)V-)j$* zFL|3__n09|14|M({h_~e5T87nEt2QNOl8E@QOOqN9}BEbS#Fq^o>qS%@1Nu}F{W>6 ze!#*4OO24RM}kD}$i%?-Qz~FwbrGg2g<0 z9k0jO=tOa#B?+kwRxO+c*{J2RLU6#iS!!OY2xbsdYVMP|n&KA@eDx%nGeA?7Q%2$t zd`j(5oNiksuY$KT{-l_?>Ur(h@(ZH&_(M>d$|+bsc3k@O(@Hlko3tcAntHa#5o&2kW0>1GsdxYYJ|;L0(!22%ew3;FA#@((hTJm=vNbnuk@ZwW&0Q}^{FjYF2!P6V_#fR$VZ~pGEUaYBtr@5wA!@D*N zbS!%+MUCAt=@^9soyMdZDks%@JSoQFBR(}wcFMY^E(r+mMy;B2Q{iP5@0Vg(Mpikz z^(D(92eFQ9?Zofog1%v*gxd*(dQTMW%nE& z66KTh`lq0RTzbN5F@QA8b(YW+P9|Fcq@=-_Ru=Bh8az+TN6o$RKlU+-3}R|gvID6u odE
  • Windows operating components - any binary installed by a fresh install of Windows
  • Apps installed from the Microsoft Store
  • Microsoft Office365 apps, OneDrive and Microsoft Teams
  • Third party [Windows Hardware Compatible drivers](https://docs.microsoft.com/en-us/windows-hardware/drivers/install/whql-release-signature)
| +| **Allow Microsoft Mode** | Allow mode will authorize the following components:
  • Windows operating components - any binary installed by a fresh install of Windows
  • Apps installed from the Microsoft Store
  • Microsoft Office365 apps, OneDrive and Microsoft Teams
  • Third party [Windows Hardware Compatible drivers](https://docs.microsoft.com/en-us/windows-hardware/drivers/install/whql-release-signature)
  • *All Microsoft-signed software*
| +| **Signed and Reputable Mode** | Signed and Reputable mode will authorize the following components:
  • Windows operating components - any binary installed by a fresh install of Windows
  • Apps installed from the Microsoft Store
  • Microsoft Office365 apps, OneDrive and Microsoft Teams
  • Third party [Windows Hardware Compatible drivers](https://docs.microsoft.com/en-us/windows-hardware/drivers/install/whql-release-signature)
  • All Microsoft-signed software
  • *Files with good reputation per [Microsoft Defender's Intelligent Security Graph techology](use-windows-defender-application-control-with-intelligent-security-graph)*
| + +*Italized content denotes the changes in the current policy with respect to the policy prior.* + + +![Selecting a base template for the policy](images/wdac-wizard-template-selection.png) + +Once the base template is selected, give the policy a name and choose where to save the application control policy on disk. + +## Configuring Policy Rules + +Upon page launch, policy rules will be automatically enabled/disabled depending on the chosen template from the previous page. Choose to enable or disable the desired policy rule options by pressing the slider button next to the policy rule titles. Hovering the mouse over the policy rule title will display a short description of the rule at the bottom of the page. + +**Policy Rules Description** + +A description of the policy rules, beginning with the left-most column are provided below. + +| Rule option | Description | +|------------ | ----------- | +| **Advanced Boot Options Menu** | The F8 preboot menu is disabled by default for all WDAC policies. Setting this rule option allows the F8 menu to appear to physically present users. | +| **Allow Supplemental Policies** | Use this option on a base policy to allow supplemental policies to expand it. | +| **Disable Script Enforcement** | This option disables script enforcement options. Unsigned PowerShell scripts and interactive PowerShell are no longer restricted to [Constrained Language Mode](https://docs.microsoft.com/powershell/module/microsoft.powershell.core/about/about_language_modes). NOTE: This option is only supported with the Windows 10 May 2019 Update (1903) and higher. Using it on earlier versions of Windows 10 is not supported and may have unintended results. | +|**[Hypervisor-protected code integrity](https://docs.microsoft.com/en-us/windows/security/threat-protection/device-guard/enable-virtualization-based-protection-of-code-integrity)**| When enabled, policy enforcement uses virtualization-based security to run the code integrity service inside a secure environment. This provides stronger protections against kernel malware.| +| **Intelligent Security Graph Authorization** | Use this option to automatically allow applications with "known good" reputation as defined by Microsoft’s Intelligent Security Graph (ISG). | +| **Managed Installer** | Use this option to automatically allow applications installed by a software distribution solution, such as Microsoft Endpoint Configuration Manager, that has been defined as a managed installer. | +| **Require WHQL** | By default, legacy drivers that are not Windows Hardware Quality Labs (WHQL) signed are allowed to execute. Enabling this rule requires that every executed driver is WHQL signed and removes legacy driver support. Going forward, every new Windows 10–compatible driver must be WHQL certified. | +| **Update Policy without Rebooting** | Use this option to allow future WDAC policy updates to apply without requiring a system reboot. | +| **Unsigned System Integrity Policy** | Allows the policy to remain unsigned. When this option is removed, the policy must be signed and have UpdatePolicySigners added to the policy to enable future policy modifications. | +| **User Mode Code Integrity** | WDAC policies restrict both kernel-mode and user-mode binaries. By default, only kernel-mode binaries are restricted. Enabling this rule option validates user mode executables and scripts. | + +**Advanced Policy Rules Description** + +Selecting the **+ Advanced Options** label will show another column of policy rules; advanced policy rules. A description of the policy rules are provided below. + +| Rule option | Description | +|------------ | ----------- | +| **Boot Audit on Failure** | Used when the WDAC policy is in enforcement mode. When a driver fails during startup, the WDAC policy will be placed in audit mode so that Windows will load. Administrators can validate the reason for the failure in the CodeIntegrity event log. | +| **Disable Flight Signing** | If enabled, WDAC policies will not trust flightroot-signed binaries. This would be used in the scenario in which organizations only want to run released binaries, not flighted builds. | +| **Disable Runtime FilePath Rule Protection** | Disable default FilePath rule protection (apps and executables allowed based on file path rules must come from a file path that’s only writable by an administrator) for any FileRule that allows a file based on FilePath. | +| **Dynamic Code Security** | Enables policy enforcement for .NET applications and dynamically-loaded libraries. | +| **Invalidate EAs on Reboot** | When the Intelligent Security Graph option (14) is used, WDAC sets an extended file attribute that indicates that the file was authorized to run. This option will cause WDAC to periodically re-validate the reputation for files that were authorized by the ISG.| +| **Require EV Signers** | In addition to being WHQL signed, this rule requires that drivers must have been submitted by a partner that has an Extended Verification (EV) certificate. All Windows 10 and later drivers will meet this requirement. | + + +![Rule options UI for Windows Allowed mode](images/wdac-wizard-rule-options-UI.png) + + +> [!NOTE] +> We recommend that you **enable Audit Mode** initially because it allows you to test new WDAC policies before you enforce them. With audit mode, no application is blocked—instead the policy logs an event whenever an application outside the policy is started. For this reason, all templates have Audit Mode enabled by default. + +## Creating custom file rules + +File rules in an application control policy will specify the level at which appiations will be identified and trusted. File rules are the main mechanism for defining trust in the application control policy. Selecting the **+ Custom Rules** will open the custom file rule conditions panel to create and customize targeted file rules for your policy. The Wizard supports 4 types of file rules: + +**Publisher** + +The Publisher file rule type uses properties in the code signing certificate chain to base file rules. Once the file to base the rule off of, called the *reference file*, is selected, use the slider to indicate the specifity of the rule. The table below shows the relationship between the slider placement, the corresponding WDAC rule level and its description. The lower the placement on the table and the UI slider, the greater the specificity of the rule. + +| Rule Condition | WDAC Rule Level | Description | +|------------ | ----------- | ----------- | +| **Issuing CA** | PCACertificate | Highest available certificate is added to the signers. This is typically the PCA certificate, one level below the root certificate. Any file signed by this certificate will be affected. | +| **Publisher** | Publisher | This rule is a combination of the PCACertificate rule and the common name (CN) of the leaf certificate. Any file signed by a major CA but with a leaf from a specific company, for example a device driver corp, is affected. | +| **File version** | SignedVersion | This rule is a combination of PCACertificate, Publisher and a version number. Anything from the specified publisher with a version at or above the one specified is affected. | +| **File name** | FilePublisher | Most specific. Combination of the file name, publisher and PCA certificate as well as a minimum version number. Files from the publisher with the specified name and greater or equal to the specified version are affected. | + + +![Custom filepublisher file rule creation](images/wdac-wizard-custom-publisher-rule.png) + +**Path** + +Filepath rules do not provide the same security guarantees that explicit signer rules do, as they are based on mutable access permissions. To create a fileopath rule, simply select the file using the *Browse* button. + +**File Attributes** + +The Wizard supports the creation of [file name rules](select-types-of-rules-to-create#windows-defender-application-control-filename-rules) based on authenticated file attributes. File name rules are useful when an application and its dependencies (eg. DLLs) may all share the same product name, for instance. This allows users to easily create targeted policies based on the Product Name filename rule level. To select the file attribute to create the rule, move the slider on the Wizard to the desired attribute. The table below describes each of the supported file attributes off which to create a rule. + +| Rule level | Description | +|------------ | ----------- | +| **Original Filename** | Specifies the original file name, or the name with which the file was first created, of the binary. | +| **File description** | Specifies the file description provided by the developer of the binary. | +| **Product name** | Specifies the name of the product with which the binary ships. | +| **Internal name** | Specifies the internal name of the binary. | + + +![Custom file attributes rule](images/wdac-wizard-custom-file-attribute-rule.png) + +**File Hash** + +Lastly, the Wizard supports creating file rules using the hash of the file. Although this level is specific, it can cause additional administrative overhead to maintain the current product versions’ hash values. Each time a binary is updated, the hash value changes, therefore requiring a policy update. By default, the Wizard will use file hash as the fallback in case a file rule cannot be created using the specified file rule level. + + +#### Deleting Signing Rules #### + +The policy signing rules list table on the left of the page will document the allow and deny rules in the template, as well as any custom rules you create. Template signing rules and custom rules can be deleted from the policy by selecting the rule from the rules list table. Once the rule is highlighted, press the delete button underneath the table. you will be prompted for additional confirmation. Select `Yes` to remove the rule from the policy and the rules table. + +## Up next + +- [Editing a WDAC policy using the Wizard](wdac-wizard-editing-policy.md) diff --git a/windows/security/threat-protection/windows-defender-application-control/wdac-wizard-create-supplemental-policy.md b/windows/security/threat-protection/windows-defender-application-control/wdac-wizard-create-supplemental-policy.md new file mode 100644 index 0000000000..b94efa4c7c --- /dev/null +++ b/windows/security/threat-protection/windows-defender-application-control/wdac-wizard-create-supplemental-policy.md @@ -0,0 +1,21 @@ +--- +title: Windows Defender Application Control Wizard Supplemental Policy Creation +description: Creating supplemental application control policies with the WDAC Wizard. +keywords: allowlisting, blocklisting, security, malware, supplemental policy +ms.assetid: 8d6e0474-c475-411b-b095-1c61adb2bdbb +ms.prod: w10 +ms.mktglfcycl: deploy +ms.sitesec: library +ms.pagetype: security +ms.localizationpriority: medium +audience: ITPro +ms.collection: M365-security-compliance +author: jgeurten +ms.reviewer: isbrahm +ms.author: dansimp +manager: dansimp +ms.topic: conceptual +ms.date: 10/14/2020 +--- + +# Creating a new Supplemental Policy with the Wizard \ No newline at end of file diff --git a/windows/security/threat-protection/windows-defender-application-control/wdac-wizard-editing-policy.md b/windows/security/threat-protection/windows-defender-application-control/wdac-wizard-editing-policy.md new file mode 100644 index 0000000000..cd11f70511 --- /dev/null +++ b/windows/security/threat-protection/windows-defender-application-control/wdac-wizard-editing-policy.md @@ -0,0 +1,21 @@ +--- +title: Windows Defender Application Control Wizard Base Policy Creation +description: Editing existing base and supplemental policies with the Microsoft WDAC Wizard. +keywords: allowlisting, blocklisting, security, malware +ms.assetid: 8d6e0474-c475-411b-b095-1c61adb2bdbb +ms.prod: w10 +ms.mktglfcycl: deploy +ms.sitesec: library +ms.pagetype: security +ms.localizationpriority: medium +audience: ITPro +ms.collection: M365-security-compliance +author: jgeurten +ms.reviewer: isbrahm +ms.author: dansimp +manager: dansimp +ms.topic: conceptual +ms.date: 10/14/2020 +--- + +# Editing exisiting base and supplemental WDAC policies with the Wizard \ No newline at end of file diff --git a/windows/security/threat-protection/windows-defender-application-control/wdac-wizard-merging-policies.md b/windows/security/threat-protection/windows-defender-application-control/wdac-wizard-merging-policies.md new file mode 100644 index 0000000000..7653a2e3f0 --- /dev/null +++ b/windows/security/threat-protection/windows-defender-application-control/wdac-wizard-merging-policies.md @@ -0,0 +1,21 @@ +--- +title: Windows Defender Application Control Wizard Policy Merging Operation +description: Merging multiple policies into a single application control policy with the Microsoft WDAC Wizard. +keywords: allowlisting, blocklisting, security, malware +ms.assetid: 8d6e0474-c475-411b-b095-1c61adb2bdbb +ms.prod: w10 +ms.mktglfcycl: deploy +ms.sitesec: library +ms.pagetype: security +ms.localizationpriority: medium +audience: ITPro +ms.collection: M365-security-compliance +author: jgeurten +ms.reviewer: isbrahm +ms.author: dansimp +manager: dansimp +ms.topic: conceptual +ms.date: 10/14/2020 +--- + +# Merging existing policies with the WDAC Wizard \ No newline at end of file diff --git a/windows/security/threat-protection/windows-defender-application-control/wdac-wizard.md b/windows/security/threat-protection/windows-defender-application-control/wdac-wizard.md new file mode 100644 index 0000000000..c21368ab72 --- /dev/null +++ b/windows/security/threat-protection/windows-defender-application-control/wdac-wizard.md @@ -0,0 +1,53 @@ +--- +title: Windows Defender Application Control Wizard +description: Microsoft WDAC Wizard allows users to create, edit and merge application control policies in a simple to use Windows application. +keywords: allowlisting, blocklisting, security, malware +ms.assetid: 8d6e0474-c475-411b-b095-1c61adb2bdbb +ms.prod: w10 +ms.mktglfcycl: deploy +ms.sitesec: library +ms.pagetype: security +ms.localizationpriority: medium +audience: ITPro +ms.collection: M365-security-compliance +author: jgeurten +ms.reviewer: isbrahm +ms.author: dansimp +manager: dansimp +ms.topic: conceptual +ms.date: 10/14/2020 +--- + +# Windows Defender Application Control Wizard + +**Applies to:** + +- Windows 10 +- Windows Server 2016 and above + +This topic describes the supported scenarios for the Windows Defender Application Control (WDAC) policy Wizard. The Wizard was built to provide security architects, security administrators, and system administrators with a more user-friendly means to create, edit and merge application control policies using a GUI desktop application. The Wizard uses the [ConfigCI PowerShell Cmdlets](https://docs.microsoft.com/en-us/powershell/module/configci/?view=win10-ps) in the background so the output policy of the Wizard and PowerShell cmdlets are identical. + +## Downloading the application + +The latest version of the application is available for download from the official [Microsoft WDAC Wizard installer website](https://bit.ly/3koHwYs) as an MSIX packaged application. Additionally, the source code for the Wizard is also available as part of Microsoft's Open Source Software offerings on Github at the [WDAC Wizard Repo](https://github.com/MicrosoftDocs/WDAC-Toolkit). + +**Supported Clients** + +As the WDAC Wizard uses the cmdlets in the background, the Wizard is functional on clients only where the cmdlets are supported as outlined in [WDAC feature availability](feature-availability.md). Specifically, the tool will verify that the client meets one of the following requirements: + +- Windows builds 1909+ +- For pre-1909 builds, the Enterprise SKU of Windows is installed + +If neither requirement is satisfied, the Wizard will not allow for creating, editing or merging policies. + +## In this section + +| Topic | Description | +| - | - | +| [Creating a new base policy](wdac-wizard-create-base-policy.md) | This topic describes the how to create a new base policy using one of the supplied policy templates. | +| [Creating a new supplemental policy](wdac-wizard-create-supplemental-policy.md) | This topic describes the steps necessary to create a supplemental policy, from one of the supplied templates, for an existing base policy. | +| [Editing a base or supplemental policy](wdac-wizard-edit-policy.md) | This topic demonstrates how to modify an existing policy and the Wizard's editing capabilities. | +| [Merging policies](wdac-wizard-merging-policies.md) | This topic describes how to merge policies into a single application control policy. | +| [Deploying policies from the Wizard](wdac-wizard-deploying-policies.md) | This topic describes how to deploy application control policies onto target devices. | + + diff --git a/windows/security/threat-protection/windows-defender-application-control/windows-defender-application-control-design-guide.md b/windows/security/threat-protection/windows-defender-application-control/windows-defender-application-control-design-guide.md index 1d18afd93e..bcddc618db 100644 --- a/windows/security/threat-protection/windows-defender-application-control/windows-defender-application-control-design-guide.md +++ b/windows/security/threat-protection/windows-defender-application-control/windows-defender-application-control-design-guide.md @@ -45,5 +45,6 @@ Once these business factors are in place, you are ready to begin planning your W | [Understand WDAC policy design decisions](understand-windows-defender-application-control-policy-design-decisions.md) | This topic lists the design questions, possible answers, and ramifications of the decisions when you plan a deployment of application control policies. | | [Understand WDAC policy rules and file rules](select-types-of-rules-to-create.md) | This topic lists resources you can use when selecting your application control policy rules by using WDAC. | | [Policy creation for common WDAC usage scenarios](types-of-devices.md) | This set of topics outlines common use case scenarios and helps you begin to develop a plan for deploying WDAC in your organization. | +| [Policy creation using the WDAC Wizard tool](wdac-wizard.md) | This set of topics describes how to use the WDAC Wizard desktop app to easily create, edit and merge WDAC policies. | After planning is complete, the next step is to deploy WDAC. The [Windows Defender Application Control Deployment Guide](windows-defender-application-control-deployment-guide.md) covers the creation and testing of policies, deploying the enforcement setting, and managing and maintaining the policies. From 8e585bb9451accb7410be18e05b9a8e0933f05ca Mon Sep 17 00:00:00 2001 From: ImranHabib <47118050+joinimran@users.noreply.github.com> Date: Thu, 22 Oct 2020 10:38:27 +0500 Subject: [PATCH 004/486] Create pin-reset-option.png --- .../images/pinreset/pin-reset-option.png | Bin 0 -> 83633 bytes 1 file changed, 0 insertions(+), 0 deletions(-) create mode 100644 windows/security/identity-protection/hello-for-business/images/pinreset/pin-reset-option.png diff --git a/windows/security/identity-protection/hello-for-business/images/pinreset/pin-reset-option.png b/windows/security/identity-protection/hello-for-business/images/pinreset/pin-reset-option.png new file mode 100644 index 0000000000000000000000000000000000000000..7415de9616afe073ff1ed7380086dbec46a5630b GIT binary patch literal 83633 zcmcG$WmH^C&^C%BI01rtfZ*;9!9(z%!QI`04;Ea4%isiecXxLNcXxOBhMaTW@5-OM z?z*?vVrI?E-o2~4tE!)>dYWK)SqWqWJOl^`2xQ5xqTeAP-Yq~tKpVipfWPtB|LF>T zgLL>VAq-JEO0W<9@Xka?MhF6;A`+c4yzSQ?4iFF@y5IgF<7hwNLqNRdNQw$6 zxo96PBYsgbS`j>BOwOk&W$?wWG^+MAqL+7I$0+m0GNZF0PYRV%-?1(rpQ%kMt;d_G zH7lq&G{=*ScfPMG&L#iN89O8Wi^YSJa8O=BGDcL4;q@}*G9`(%3u(ALpUX?IsgL`X z+rjwL?%}B`Q97@9&$M^Ye+@4u$>THWzb#8#cU)Zb-?jybwD8|mL44jq_-OyODA>E$ z*jQVpcUiP_R8(I_|NFX5SM2|A4U;L^f8Aa{z*zm)t0+->M)-f-_Cw=T|JN&;D}*1% ze|M0g{67-}{1Eeu>qAg>aj|qNcBFpNzde`gfMv(~f->{;{5u!AH-agr$N!V+@4ZXyzyJH3q6fZ~{6jIrmv5uE4TjeuqmZIy z0u%|!@iIV;_5LU_`vGLi(BBu9kXhkVzNAl|IGcv1Zof8T%Uq{%2D!DNe0uz&d6NMH zfI*smTn@Tz8@NBfUmUAtX}OGBntkWGyqo$abv_z+E*gZCD&ey#Wt1v{%{dfia#2FQ zoZxcXf3|mUz{jbs?%lxd{9Ph9KyufxWM6ZQSEf03$6#L|(04X!giygp!Ss%r@k-b+ zqjqmVx6&>hvS)y_n12N?Mn0lN=AKBs{>}^bVbgQSWRdt)#zu2)r{T8v=DO+DmGW)g zFRa0Hw$xodQq>!d530}jRq7gkkMtxj|KVysXinhE0R>}8Ap%mzRn*A&YV-nT(cj6O zu6|R7>3&yIdq22^?yuPo{n;9I);0dN*YF4k(GF>3$u=d&OUTp;$J=<}`G&ae&3>61 zTS%4I1VV*5q&eKi6pJdf!Oz&67`d21>{<3l#*SEroXQ1{NVsN?dSFoZiWZ5|6_INXC#}c_p22b%jUr`c?)+f~FTinW_9zHm`WsT0 zji31{@8VdH$1|B{RHG!f3P0r*|NbuqAi~zJFe`NhJ`ceDUEitvsAs4qb(w`m`a*hN zWBoO*eDE$eg0%bze~Jgi(MiR56|I+XaaoV8&hZIw#M9|)-ofSd<8wK^7C_t88hh2| znbly)`1wA-%_j2pybr)hy<3?g!dLd0HE+SdnuC|(rQupNj0gWdF!dJ})Mx0uJRa>UuZOF5>yI57Lwmdp@+=>;ih*N6Ba z#G9g=Kj2+jpSHo}H}*N2K2$rKna6Q7ku3^#QQvER55N}k0?c)*vgv7HqfAp-#Dk!t zYy%)2V(NM`?(jQ+LesU4P(izI!FLDeqj5_*?aja?zHsep#Izvd#jgB~hUz0fy2*Hi zP*!bQJ!jjJGfy3{fEO=tmP2L!!ghX)3#U1MV7$Lo9XT~_GX0lhX#dUJP(yz zOO;-{*Pw*{-P3!v6(3=as*5g9rPF_X@JG8vgBE}%9HX&7rBh97EB!3&1>=6JtT#zG z%eW*MdEhPiem5mh)`^OdvG3=qCuPC`S)pNZ*;KAQ%{cMY^>#bzXaA1Lqm%ZR%R$cr z(-ODnkqgV-DsKZ~nM-FAexs zzz~FWD}`KYx!RR3@hcxxxDRmG|SEN`?o+VZGqB{keKr`iM5!GxL@q zdBl*>n-|Km!1d$EIvfc8W{KF`QCeBR-$+H90wXBIsr$9Wz;V}3^ZuflbXoleRtX0# z>pKw!^$Pv>ZZ}5-9E8mtqicy5Rxb&u#U$Pq)$V`H`}r-A6vSeW0<93MA1w;h&_Q~t zGkF|8m7odFTiGN`#_Hsqvk)Hwl+8%O@mf1eGGupGOxAF2u;x_k3TJ@v?PU?S3+wJw zT-@SMNSgbfsK%LaeDyvdNO(~dK=9O67cp3bkNPNcc?mNtC`2*`xL&+i@s@f7q^zVr zuy3iq=|)g9{M&dW34MGX*JD1lei<@03^=HK@P%~GvMFu#eAM3gEn`a%L?~#z>NuT- z)t=Aig`)MTljFKI#H++`E*B=Fmq}dK+@Y10*fMBPqUK;|E@cYY8USOs9s7KUJ%U;T zmhx_ zp81~F$hnx+;yMXHOuXP7H&dn8Z*H)6q=pS2d45`3PxYnDO3RLFD9wlI-iwSX{1N7; zy1e5r4z#zH!UW=F4E(Sor0OCK^b8y@j@=LN+KdGy(T}3feQfj3Oe(7MQYaBP!280M zF2;>jLes?F(h$_j(|=#mhoI`&Vh!D%Ve_J{V7!Y1?UMTL?tlD@#<6 z)6j^02Ex61I{&Xt^BKM4TiYW6Q%sARhzerzM(nxPF%yH5xAkVAyE~`zgJIO zhs#I=mqKw6lE2v^7!wE-|NjKz+Bbz32jxP}XY+dOgZ~-|_+{^5Z6d=;K^$%6(NJ(@ zxt=(bwKdM-e|~OGmy?u~3{SC%rPLnl0|mB9Brq&bZyWSQWPnDN%g-j5oRWfyeSLkm z2>wNtu85IJ)%zsCfh)m1Cn@5mLRI3###fXN9uDtVSEzow|9csDM$5$CTjiKAt_O2g z|2|f2I|xUedd+BTgkfiAhl9T-c1nd?>=yWE_Q09%jcELU8I9%Lmxjd|ga3vX)U4p=%fWB>xUb3WHP1@mlj>Vzi_AV~ zP=i;wKjb6SaUh_tV<-Krr$NnP@|oN+`I#UUuWE$$ zI&}5#67eG4Dt}AoA;LIMYxp)TesO}KK`@jyU!eKjb_9vkT*3$=5aqK$)6iHzJ<#sB zjhANd zYl0V+;fm#-q0rDC4D+3Nqk;{MxE-`AmvWW+;}+;Og3Y;~`63GUgZdq4${)+n_I_&U zSh*QP4{l*K@?Ge}+&0d#Vce1n{Q8x2Pi0joG^wl@bkv4TldiIj-o%dIBxhz(=9$x< zxU*M<>Z5>iRwbVojqJix2o}Da;C{nT=uO})??s`-sF@vaimkbB zULZcSW)&P5>K5?H?bupI7@#X>4dv=%+pjcHVPgPSx&p}T(^874dON}`&L(4S*G4?; zwX)+nJU-#?Q%mBoJ2Tiv49=(uE58pxv20(!PV4j>DxLJ^c3PQ|U%K9cxXUJoI%!6H z<{g~T7ID?$7n!I^NO7wbn-_YnDu=k=wy!&s?wQc)cd^1t(-=b#db2oloI1bSMG-*2 z3+H18Mn1Bet)#yh`>cFPsgYtvq+2nU#IkdKM`De-jC4$ex-}-I>FF@6u>gJ`L<39< zAT((%OjC+|!9|)N+X@+niNNnD;U|{RvuwjF;U5}_m)g2Uc({=6GaoUgs>1N*b~$W< zgj~(S!YGGp2j_?YnxTPqb?&l(zJO+ZZn@D|YY((dlh&Y`^dvi#QioLtzRMF8%h7>O zSlajv;(~$tDibLyMFp6&v_=BhG9~t@g2?ml8`8~JUL3=!)YAozX%AVuHVOKd*sgbM z>{uNm+va5x#F4EJ3@Uj;`^$7k!y18No6>_OdYHMxW33FdGD8A7zg*206?XP^GZg8x zN9RLRPX)qkbs8exY^Yz>4@LylJoa=yfkrG*<@mxNoU5PQkBL=LCGkhD5e{RWxv(xm zbX6flqTA7z3Fd~qh|~fcEBGsMGA9%0F_Gza#f#U_S?Tohd8@HtD*DJ#*t7_4lb&Ndl20?+HH!ythDvRUz5+ z=8#fVyVPA`Kk;g?MQeaHhb?m?G_w|V`IB$I6j3(+2l#hFt&mX`VhbuOzadX_Z;m~g z+nUTF*RyISZEcRJTj-@U>cr)nPDNNXGlhL!(%UnU$>e|}jQ9$q;l#co@;Tp+sW5HR zqyXCt*QtSNi=Ei!OBBUbvjbG;%(ng$ZJm6oLt!D(PD#<(QZ|b2wC=pm;~GvFz#h_G zYD++z{J!7im^!S@BtNI?cKuem!{O9|aA}c>mF)Hz`}_);`G6`$f7Pb~Wo;jOR=3X2 zA;DO-D#anw?`1N@dbO^-Qk#&xvJj(b%2;2&n1idkeeQE}><`l^OBq2>e(bS5@^1l2 zUWvBFT#~K{i=Qzz_!hkN8!XQ!TLziUvtCmy@-(GR^K8c}C|(Ho;WM&>wNJyKxZ52f zBv52C+%#v6?f1{ zf!(JdeOshF+vK?~rWFwB9QnX2%YyoJ}vKdY?QmzwdBSCrKj zM0dk5hk(HMc5<;}SEt9Po(s;2gslv&a$C<-y!DWX>C=J|XgKU<6qA=n0_ft-f+7d} zDJ_Mg=^7Gc>-bG$qSoKSoCS<3y(p~8YOwBqv@m|-m3>0udtQLaJI%XMM{XONPETUz z>d*QP_A6Ny>YFqRg|U(WruvntMsr>Tg@fU_+1H4`+{u~O63W_Z@!y*F(6 zFk!O+R$TvS75~Pq`gRABk8(xAHS+5A3H&Xuht87gDSj7vI2_D&WAaedPH6}MgK#N_FMw3-DQuxhDTp&By4<$Nc?5INM98Fpa?qp^75X>Ry&fOi zz1LMAXzp%-ZRr-6S6&eT$@ziyba@%2*;~`qa$_&8{ne_yQ^LS@)#8JI$VJudBgkHU zi5ww#BN45GsZ7Uvb@dTqh0fLP{ud&uY7q-P($r-xEkHfEd}MNI3a9dY zkDia6PC|TYN@x(@X1nu~)N}OmNBCEKWctx_2}9{(p1=#FEsyoJP`fx>i`U=&oG9ix zdopCv6?@rqmZS3_BlrTHf@$Fr8JXD+AxqeHtCsUoO*&j36(@gF-zet}Un%jqRUJL) za3%ZX5xHvN>rF6XoR1wm8n64Q5{m%XO{qjikIV)yLtV$_TXcD}d3ZZ6)LC>=z0bhFL6i(n)sx&u5C9 zzNWM0`kSAx{x1u7x=Z@^ZnYctyxTUb(a7<)y>(+3~9JDqqHjt*j6+T znx3clo^t%>4fBtrxv$rB6wME40+@X-7R(>%p%v-+3JK)Ie64vNm}i^I_yT&!SVT39 z9IyPg=THS;i|T^Ld|2osKrimD6!;E3{6btrGK$(`5`ZpNfD2OO%etJ)J=yk4UT@c* zqsx>kNX}uK%^XL-)4qrT$P;&$t2Dv+KmFj%>FXIuG~i{kT9((igl zbOEiX5ZsHzk=JCuuNWKQ+%~)(3}Byv?Rlb_ez{I{d`bL~{f8EoqA;<+14N9+N z*R|lKIhKGHkC5lGgAOYagF*%2KJ}u)#I;`WQf$C(dhD$v($|W0=BxNN*f)LKTbRxd z;Xq3Z4q-o6Q&xVoshY`}l(EK+Oan(0Sr$?+x!dxG?oS_47gyCuHU#O2;195eLe+o` zBM(MOG>ca}+BD-kGLmL$&x7wo1KzdkI3BDH_`ewJeo~MdiDO(X(pJk>ZoQ+{aRcS* ziEDEC&Okyup)Jv3q3{#Y`duL$$pX+C%$-s$j65arj3Z}mk-g3Kz)KY(IFMUn+#Izt zuYg0lK&d+s-A7kO?qbT4_9~LUlpOx7GcZ1(+H@1)HS4~!D62t9u__)G@Iyg8C@l6f zUyFhYxtM?@ZboN-edLCY+k5yHOX$Fj>#|Q;$n)x?EZbU71{b=CJOl2_yI#Xymp1XY z&YKn%8OE|Bp4&Bb{@a)}mL{(JF9+YYTO@%+Eu3Drn>OHN&Z_dsvH%7=wF7DngQcnj zl5)f43glpe@(Zyo4 zx1C1rboz-fthSywF~-IsB;=Zo_SYm3D-;?i6{_ObGRqe_l+IGeHj?bFl<@xPV3x^0H=GmkqrgBsSB=&}W zR3-fUY9n4o#&@wf*8n`6eT=;95*d|G%LOz*$)jwW)5}n-0~R!`KpJPgu1EDm^b|+z z&Tt(DPuNe|9@JPI)?Z3TAo6nhm0L3kpHBK%0dREztPuqLz4r5L^iSu4B&|gpr)nh5 zCWGE)e=dybBmGzd)qu77n_d_^h23TuYwjn)fTlsrDf)OkMvMeEmf0z*zGk&~;#d}B zf_sP^qrnWC&qR!Zv_&!Il3$ekpP#A4gi0+Dmag^qI2MHHHaX`WR*06v%MMLBOoz@^ zo@_8kk7+#?0?EFw6#8XRS0vgUw%8z{cv?61ZZe3h6*o52)eN5QQAffw)y#WgJ&1L$ zwNh&LorK7LX3!46jnGcWG7)BTn?)cUnM)_j%6>#6-likJ5PMaCA56!NssITA!n`Vi zoG(&ZpR;4-GA=AWuNJ>o%K!4Riyzz9aW?`7iblx-`#&Xaz>wVcVsKpl50&8#`I zyE&^?223_}OWHZVw5?li!`BPO!s|`!Zw^d@z0)%H=B0oSk!jwz=8B6ynaL*YmT0a{ z*Qw@cL@G>Y=ZD_4oQ-EPEYEzZ*chH)m~r#;BUBkLNUobCLcth1t3aZhk)L6pW0Qu? zD^a+0>^`?JrMh1jQq|K3^nvVGb&h>|b}|#sK!PNNEx5SUD7ts$IMM)m==%?_68~qx3)2u3YG(kFXDTrv8n7ET#l^ z$jKDgYDy@F#S!oKzT%5GtTo;}G}fl`3(g0oigBI9LSu0O2|gIggDgz*OZ~RjP)74s z0-h#scOK6#a!c;kW(=3+v!NQy97x1vQ|miB^85d;t;}1wN{oh<_Izk`CecpEn-1_L0P)M6j}vDxJP1)qwDHq(HIKj0R>?_2$`z+rYyndU6W_NtR+B zw@u^J(|~QmVY9_!LRRVQm_bxQtIa%uFn~%F>1141gM-Ht&1Bn>o;)zqE5vJAOQnT+ zEbj%bw(Ivht9B?8#TIB>wq%cE6JfN&wfk_z*yr8020>{N%C-CIlDP(1qz7BHdnuxB zsdTO0F~+xqkCrpI(A69SH_&*enysTsY;~~Vmr<)+?>HcYx8*-qXTiJZ@UGU5v6z)+ z<%-CDx*;Bi+16X8-yr1yB{V@N>oTfU(#G6K_*9SO3wI+ySy@@r?8t5WN@a}4r``0S zY6X&1vlrT{R>e^p^?;gQG-M|+VuKlRt69!c!K+M!Ctg?$8he376A)c-Au6{8;g!&~ zlka)aV#(>qBGCNy*RPA?el?QSs`3svhZWL^_=}aNZ>O6_&ym~h&`u6uKNBYIVco1s z1@kKIfi?T7Yu~g0vwt-@`w2H}Rg|lq3|64m+DSKjVL1I+aEm5#J!-uYMQGwQ3CCKW zx00R=Nt1pVjX}JFe${(9LI9EB;+O|#jE`3+sVOMTgFl7huTGSRzf%Bigdc@7C($z5}Ixu z&+SH{*{cMQ9-P22xXTqCd6g8Ydk_CeVI6K#ob_laQtOtQ^T_e(mgeSg`jY6-y~=LK zkT12CaOdN*c3DSrU|O{2WzyNWqI0&|!@b5M=i(K!eYd-MbYytL#QSr!niaZyLN81k z4@iI{ZNTYxA3>yL(Ne`PfWnGglgN-WWBU|9`6PGs*=3GtP5i8XwIIDE<({?TCd041 z#1MO>+PzH+%{Jy{^n`(LOCMcU=jwH&Yj8Ic$7a}VV%;R~NEc?O#o+!A)Zl6GvV=u? z%SQ7JPiIqO@>g`Qek&+;gUeAvPqqaO7u%EAdFJXFN=aVDj%`+J`%;{05!jI?u?`&l z9mun&mRAt|vrfr7>p?`c(1qDU=N069p}i>pfdE_Fy{$G@Y;*uCMpt$$^$n4xig>VR9JTeN<{to=L>PvfKv+&FWkw#?Pgj9S#c0&Lx8=eh z%Xs*;IRR+(3q(N1QA=?Yvfb!HHhZx)QCIo(!S>`w(N+@anCUI#=(;qk5eY<0e5;BM5)HMmI~xX@ z5;bgyZNv^u_9KdCOSBuwH6Wg&V5ComP{v$%9SMJ3yx)^S|2VIS4wJmKg{XHBnYbYJ<`$(wh2%aEsXaAD z5$#pb{?|Akjsi9D`V^+aZ!S^{$cF@nHi#<%JHfR3WmF*J1LPp~(+qL0p7VD$H}z3^ zaYLoi=R0uFM1qWRUFf-;TM=5p;{=s;We|HA7@6ufV>W=J-y%AuAX38pbr1d1X_S4q zr!bl&5^*V1jp8j};5IkU%W9(qUQB6{;Mx<&KdE557McI!RR3nqcF28ek(wY==mFPb z!r?offF~y=N;nZj4Big>f@zY1!K=R*u}pyJ7t{3}_tixAh4Ha)&dcM=#O*Xk{x(93 z1o}SUsii~`H3CXbYpC4Rb^8(;04XUsU+6y`mdQe$c=&}N@isungmJB7Wp*ns zs}iQ7sx4OPOI>@s3+;TO66DZLde=OJ;N9I_Ms6;QkjWtPx(W!G{&52Hd$iAfg@aEl z9bHHh7LZ`aVBJdcYh;R_+;%(G8%PiZv4AN9uDEDn!6CH=h2|xdB|ex|0vls6gi?Qh z7yXAJVRbpYWW|n2LvYHT(Gduu;-Uf(=2owh|n$+1O6#G zp+(Vx%Z#qLEmk~{N)Uj$-)6P?r)9TV(gvhMR) zY!a$dpU+|W&{s!UWbjt-1fS0QmI@92w?Ov1ro7rO=n?5QPokm;lE~E*+4@%#2j)@D z1IWqoC5u_*x#30+2l}+tW>ezUGZm5lJ?iH@m>yGqEyHvCdQ+g&DwY#U8+okpxITP; zp?*kwG_RT#wfBIIf$@2l@3h9MPhqKe^5W9?!puhy>ELr6)Gp)9+9~DMSazjHW-$~i zVCMTG75yUMg9-Fgb-7HE?`W(+XUUD;fAuch2CWH-))d;+m2HFLZ4JN14HW2r_1%)^ z>200&&b^*>H$^pqXj()YCel|E6yR0Mt`xSe_zw8clg)A;L_Dlsy!damt)KnmcET8L zrn}Bop(58yCSfRbq1F#Dq++^K-0&2C;+Mhk5`P@OSyt{#j`mesl_tS5u2f3AI~uCN z@z=4A<8>OaIr{E?^1*aUoY?8=GFQUF{8zz^pSi@Mh~;0t5qQ-=^~BZGItw$y()ZRY znNIk87l$PEn>*SEm8f&M^xBI_;nC@%=CoT0E<-;(U7Hd|~I70?yfD~ZI8US?L7~yZY1A!jT<=Z-N%pb@Rj$4k|w zNSW}Bw)&3Nmz3^?CPu+O3QR5hq9c1B;HHKeOj>Y~R%&nU%q9@c^9DGG9=hBHm*+H~YM?xfU0bgcgO&JfkZvbAhjvp+ zo1rG?oLS11(kN}-2>>hAPrm-^J;448TqP?!ph@BTiDh#-@8hI%s+v$_QF#8^`UC|S zTMP@0OPDs|w?w~uup_lEihtx31^pJXXMnI%+>8}u*AwX-;x>}1LtXnl|6SRb&2-iw z2yt>}#vtsGoT2M##a@8w13G=CHsneY%CN`mgU8;p#&EasR-uq4POcoXqH5@2NZ4$d z!nYJtSJ@)~Y{6hu+f2FyLDRI`@qZ#Z9^1ENl@#I;s^4c;79v=w-(^`W-t0}@nCu-e z5-t9SU#zkGRXF&qCR%2kxG1hKK)D)HBGmcQA7EHhw`r;yy0n3^+UdR;aSLwtakAa) zB>6k%s6=Fod`kcJKY>R7)VQK%zs=_29`4=qR>zHAG5vt%eRGCy?E=pl)(R67vmR0a z?vNntY?PD76XQ{<(NPj{#@u|`^<3@8kAjh=Ls1Hq+{ivS1!M~0+B#t*8E&hhPN-fw zc~Fs$1~jaEIsCQ!yDAxgbq*6Tp8szK^?r^<(=1DbLcZPN#tq(IS~XhxQKZ}w|Bd?Z z!hAzZQ&!n%Bkzmd&!6hsIrEWoVrNj+7EZfw+q7vOlz;v|j9FLWy2t-b&d6H$pC7<%hW~d|+J7_$ ztULcFzV6#Jeka=v-b46H=mblHtPm1rM%`ZA6Lk7n75)(`V->i3zQ5t}u3wpIp#AE; zouFd0oG@wXj3Y~L<&TwOf{l6@uIEL?S*;P1Re4&I64+}|t6`{WT4=mjct-JCmf5G& z9wn~3WopVD>G3^@v2<>$Sh*t&qu`E`l{!fw-SAm2OBvL+8r+nDZd!vZG^_`|mujpa zH$9SRgQzYIyBvZXOi0ulYIPs2HUwrHt=(&HOIvq2D_0DxLb;qtC#!es8n8!ovcc6- z^OL29L{^gs%}GOJ4T$#4UH)srO3QKL25{Q5E#~v z5P?qyOpS8xDNA*bO-$n~Z8dZlw;z}XHZgWe?#>>q7kHR;_98PYJkh8)HRc5Z<8Xn3 zbpATAb}e?R3ya~Pz$y0%0Ti51=~Io!gWQ$!L~g_Z8Vq$ehkRbydQIy!({3d-+Q4hg zTpNp3>`hNHQWhSE9VF+IC7+d+#|#TlseOslbGwhP4x0k7dDW!92JS~#?{o)_PFYbWqhkYd3L9ty~+S?N3 zg?Yl#3Y}G=t?93B%SZQEQZfA4_V-X_&trAoe8pNU>Av)(~WaS3+EOf`~giyyPQUu#7mI*Bj`Ot|=$@gKBK+rKa2WUgMKNr3)43lCQn4bBofCv>G-LJTquHg?n z9GpBQS;bg}kl$7`CyU;lm6h#h8=I2b2jL{G2j^TQ?1kE&@*O+<+$m0|D>K>v7!$yS z=vQOn+2C@yQ4Udg!6o-oPmUOEWD|hSx1rGiZqlp;(L@f%J*K18HewxsXFIJhhtFSv zepH=2?d*=ebuK$rKfs28$v%j@9DxHl;C{r2321o5Vd-0IIWK{@NzuCVZA1kkAdDdF zN^%yVY;qXMs1;{NQzS=YfMaV9(@H$6Q>vsKeb)yMs{vCx7zB*>|Mj?4352qagu(lc zY}{}{ktN5XvciXru2?&Si7>HL?W3n_X!!Z&WI2>fBBGxiY!v(592Jpvsj4iqR27?Nn#jsS^j?M3x*wm|6FR>+tWEOs!bo(O7%%rdW=DQ__sJQzfcH1}^GLYWONu_?Ejp>wU_%3Y6D7Cfn|RUpz?ukG-iFdKO_hfwuCnRI4=RKu6)V|%T1oJ9M& zF2@+B^s~Myrbm2(m_akyu6*zMo;$W4I-t@`Prl5Ta&4m=oz^1$J_e4=g((e(I_U%F`hdWQ15xzvhjM{gB06Ca2R;ru zYCyS#D<5M72~N`yTEh3=Geu4myLemfw^fbQ$y1))cAuLYD9h!FM_hlBU@RlqXy~TP zv-3@951~1>mXx;o%ivgFF2tGnA)R-7qG5V-+j|m?X9pIIXaw)MQFPYK%{4WX8lrRI zKusvOcc8vOUPqMr^*B%35Tsrk3JZg=?ztLc9{;hi)w zLZ&wDwaB7J6-5y92A~M2g%(T^C0KyDL5t;C;X(aP>^T|Xek7=_kO~96zr*wOy2m~g z3H^;}`q9A~=(iyhz1v$_+q=LKd*r|SuENyz<|f(hTMukCtLN67gv)o^h+K~Lyw;|( zAMIW*dF<`&x3ECVE}P*v9F~ciq>V2wjr)5#I&P2vkDVV4qM|1oW2k6RKbsu)KhiL0 zf003UA0Z*VpddB8w3{h+871Y$I>gr3a7Hjub zTADQNb@m$#!x)l-nhW$eE>*vGM8iqX8 z!SOzyWZ?;wZV33nAY}%_mm{mUK3QmyvyWlzxcK9fW9v7qlP3oqKAv2}gg*;(Rqov+s{isOMiXp zJKjGmYl}B2>UtR~=dpX2i-H?Dvxu9iRdorztgwo;!M-GJy0l9gv~ zG~DMh+Bl70P;}9cp}E-{i#LqXyAHOpp3fh<4sD&SL=zO$Rp4K^Zp0l=)@VTxoIlNe z{YjK{F<549$o*ix#s-OUptu0pkXgVT40ttyGPdTSPQbhYy(G{PD07-VGQ51(I^#QU z1`M?G-hf234@>G+I+IvUz^Iri{_l9eL{#VTo6UJ*+mk*70>N{_(Nx~R)3(=@Rsj=<&4QR+0FM zj)?^g`J4@R)$0b%%2ddd(JEyi;|s=O0$g7P5Wj5v_!EJogdJ&}9143} z`ds23a;|64#cn5e0FNJeGV&fqe4`HFg{3tqXsn!)FeOrRbG!&XBZ4l+=W}=G;zan@ z2wVlh`su?-Nz%y%U!gaashB5Q4?b|SoCbqJL^rn69V}feO&p2V(j)wD+;<)5P}@jq zxb^{K9&Ec}9d){MlGUqgMet9U=~T-f#lxCB4zJpB>!q z!!A)<)z70lcMCxbb+sjU)9Oow5}zM%8%>TlS;X(z4nOEtqRXLJ$P?F3o zNpGN*;vKDAaUp8@R>e3~ylaPNo7&wbI4Ioa)l%J~_(Lt4$k)uw!M3i#Vn8E?=~(4l zbKvgmw>>?hMp?(X6MHwLM?T+ei}@M|(J!m=jHGCxIi9GJ|8C7M{_p89Wf9K5*3~Fb z|6J1K31q;*aT9cN#Qg+v(cUi|nbXTBK$J>^$Dtk4{0QdC40%(lUk;1)daX=SY5*O? zrF+dWI*!WqW&J%WBe~FC2$O?X3)j;X{$ul1SE&oM@yPr@CSakJn6?8euw-Ou$#fxy zgyundiGdB0XmSh!!^G3Y`!%y4^f%u=I|~%tnmI%8o)s5=*6?)q$5M4ModA$nXORp!7S9-O)t4V zm*|V&dCCF1sbyJ_PwP@Rf57euh!I92lEw5=9O<7-z}L6%L;Hrj7VwDID$t;^G0TOkiKZWsgB?+41X>=7Itf3tgRh0R>u8nJ5kf|9-N}%jluALbFxo9ZX;R@fSDh1>y(>#RdThK9G zm1xW@hjcQ#i)O$d>GonH@2II!oFl;$Hvbb;s*e8s=bUB&q13OH7&ES9veQ78`I}1$ zn!^y=Q`6@fS{~T!!#bJj2Kv9+kH(%1W)-*Ey#DeG6zG_Rw#m9PWuBaxT22#qJYsd_ zfW2w+QyQ+mvdEP?G(k4M%YX~WO@@RHfWA!s$v^k~G3XKL6a%sgmMdf)3Kh3Ra}i?` z0xoH=Sq)dqgq3DHY76LH85IU7f(AJhdMFC#MU{a9RA9z7xM>lC_rHajyZ56B z${V|_nR}BBh}Lb-&UJY@FBb_HmNmgIqcGh01n7|SpXy-5P|5rUL+XPj<_KDdro^ho zGPvl}@O-DaJb^5@63``L76OeA1Kxs*I#=~pIu`m zEhrAQz-Eq)R{4B?O!~C_lf-;`!B?U&yRHCP{QA%vAp1&A>RuD$-dL&=Z3>ed%I|h5 zBeG_QlqTBGak-~9)Hp4=7{cKm{-H;7CNTxG@g`gpl(MYqfeK}X>c4_)0{+(ZpG^j)n7^?EXXdH4EmiN5>yU& zT5t*Mo|yySl3}*aD5A3rC3|0lmqGq_-e7*-RMl#;%*1uRyvj2h*xh1K zroLK;C~xoD3Kes?&x%Qk;j0_pAQzmkPk!yAm}-EHwlvD3Xnk&=6)rCB0ncAgbm0Zg z-}s&)d)Y?>C9_D7X!tF=VG9dP0t0BKVj6JnLIk2s7^U6G;rqJ#Qy-k?i>q}etM;PP z=s;~gSvu3;#0WD?LGLBin9ry^u*mWua4IM_tsq#8BRff;KCjL405_=VG`IrSY1(MR zjsAHIcMjP%W3h^|Na(p|qDIW$>fsaIh62j!-*ig<<69Pcnw!svz%% z$={&`WjzcQ&I{$F_7xsCVt0a*dyWQ-%G3(tR9 zm#m^l@Nt=cx(WKf9FYbWN5D5l&z5S@g0UsIE%p6>d+zz4F~22iB4Mqzu`Q2BP%P#&IX^}J@ z!xXr6$+&Q;OYA8~3Ch=sY+Z5rhxZQ77j2E;VOC?N7I%YIRr6!=_1)d2l9r&Hw2PUbFaCOp zDhA`l*9)#JCQz3W_?;YL8!S$X4?q08ui~6L)F3vnLM+rGlc3|o8f;dknXIZhcktqN z-MwBu9D;MrUo?L&Mg1K(_@z1d?Ld*A1OuwF1z?CTTcu)VJGUMGOi9!IU9ANJXjYGEeYWqh3uZK6?M2*#{isgn+dq z)ZhOdSTk2PCUd0n>s=t(*$Jw_@eB}L-D|HiqOCTa5H4+aNM^Tzsb}FP^{qi11g;7?j^EtqITV-h9s!!u%HzNcd#@U_JQk1pO>-a`S?N zV8?Wm4%Rpt)k!$~;Rte9i?z}UwA z9Xw1(1FZZZbH!<%(fvIlhej_78`WAH}5io+L z)825--+o&4en9FRmd3TDCoC)00*5l8C3-kfa7T&hg~hm$XqD6^bErn?sRb?)%My0N zhnq6TZ8D|b!5rr-x2H=Y{N^u*yb*hYG|MdrZ>9bA#fPj_D-pZZ7{u~(AT9CF)P**f zqLt-v{RZiOQnHTxXJ5xvyeeSaKWHiKQX<`|QVJELFXEL!oDPG4{)5WqmkPSq912qu zBJ4tJ^fNoLp1DOnDLJktnlwxn{8(WH%kJuP(?;qJ)7UATVD6dyNst&7s%Le<<$^q45tnWkuhh}{lbSkeX0@G|A5jSXFo;ED@Y#V+faW+zv(f~`>(hvKBf-2KVB#4VP8 zoa@AOhJqi-UM&GvWMmsvAMwc@t}v91JSbQ}{PkrZvff5l1(<5;`Y=4)fT+FA>ym+mGSGZ6bXNC?zX&z8^#jT^ zoru?iG+&J+?>Dj4K*@qcRx=2wWa#^{>z-~K3SIHMWtZpd2$!Af6}59U7%#Gj!<^K? zrxoaWMt;1a*J~yQ2DHbqj=a##nS+Uqa7O)E9nh!OFu~3~ip{aezAi^$f!n5yhPc!Z z3=&JwWd_}oEr}C4KUV4>pedEtY+M1tf41L)F^x6>l21SHvy!t4_}@@Oahe~l%8qJz z5*3(E!HSKGa0r2ODpu+b{p_NS^8|AdHQUg?xn@x-;Ya-JK=qG4zQO6SSu?YL^2tk_bhr$@>NFkzY*;b|wISR>OY^>sc25627(CoII}-njj9+i?GSl;lXtN ziDj0-z&IQHW0N!CoJxu5cUOF1va*=I470NhmFS%fOqaihVHp$IMaMwU(E;MB>_iYD z{MPP{2JriBBk}q3b%%^FS{zQuM#?klSQuGT`T7^G4YFhW(0J0H&oH`2hM%u4{ugV1 z85Y(1#*d;P2q+!WA)p}LUD8ql(jnd5-Hnupgfv5Ur<8Pu#J~(8-5{LVJY=d-#I$)u)UFzwO!5E8p*PI95R$5|i zj}s*o^-cClcQJr?Tn_bj0rr|)U~^^z;j}JWUpwtUlGD{f+e!DKmNBgnxd@j8hcCzaLy#&3|qYvaVJsQS|p6%koD;u$6N%?}3 z_5FzQ^YcA!b_&_d$4Fbxe#-5(qRdPDqPaLGH?OkpM!s_B)=U3t?PB*-YO@?;+)*n7 zfHP@>9ERI2SC%MgLNF%DBO|tli~(%~x|lchl0Css@SXx+euqdTABS;at=SFD^$i&>9_x{p@DyNwC9ac9mp_^!!qd`XmZ}>=;NGF>iXkQFUH#yIksSa$LhAAV3xoIc9Mq zW@DLE$l!m$pkDUbx=oU#u8VTN1;4cF?k?k@EheHUa<17Kc`V)Wz`blvao@lEcmQ}X z*2#fwDjO>|b}6}rB&P$0OCG!bTz{i-fak>9_yW=!0ZvOK*9wm8xF$pymhMMx zSltkie4-I}2R{7K!vtgVzE_oSKkuCfq2Y061qgK4S;4LSLTXvPOu%ZyKw&}Yf${lw zXB^a@_rY>>!9^XJz2g3Iy&)5BMZC3S&~}o5tDIGNvoeKNWFnMMx}7W!zdVtX2lBw3 zqubS0`y>N%gc5iF_rwH&Y>DJazAhhStka9CT8|=c7Ijo^2s416jVls%_V z>uHyHmuy|Wr4(TulL$7Q?}$C;w(7WtfS;SlNBs~yka)hK%McKmWX-7?m#{T`sLW~R z&!NE=*C4D}hC4Ga_93-z&s=#wZa5>xC`i zP-iKs*5$+1(sYwrdsEnqQO0`KdY3==eHY^-c#&vBr8E`kDrRDmck>3|&!}F$>@@qR zvJNpo0lqmc7WSu;bg?VRUZc0jwoyeE(9l4_Md^Fftuwu{alQ~#2#)r7gmPmftbv@L z7W@RhaWQ-a+w6ZFzJ|{9?9O{<+PY+u}!EePluWT_uS9HqxOKwVog3iEIy9@H(O+% zyc24VRcK+J3fp8aqJxq7LHc#*|h&AqN{ zYu}O|Mly@E)t=+BQsER<%aZ=4dxxB}@YVE$bk$4U5Y&HTkNTJKI=bHM0%10!q!2de z?abE}@)Je+y6rbzl%VgLb^V4ye!a`A-OMtx8RHA#23Fl$Qf1WJ7|VkZHEr~*L6+u% zciIWT8|+LvXnL4UKYuB-_qfrey5eD%_JH@iwGm!_o>NpPoI11<&edB4F?}vqm{xvh zxf0}+omjiYXO-h#8e&X=%;q;^*?>M=6@*6Dpct*Dti@=0 z_H`I0RDqIVtJd<$<@;PxxT410GvyP_`br|{2jZmzzXQ1$xoYlU{JH(*1&S3J|88Wy z)mHE7>)Z~?>O$AgUo#VC>GsMWaE?f>X zOE;?hW0sB_lh#&x%wNJJA+Av+V1DiFB^{i&6h_#!fY6xonDu=|^?L&hiFl>Dz?a-i-*Mbra5EOuLu6mR|D3KwDg- zP1?XJIwrE8fFr(}25yE*MY7V4C`;r5tl=9!~(H$|=$XQG{KCz3pO`zB`pT{!q?$-0K>^i%B>ZejZE;s~t!oQHvq%|k2CQ5myy3?%0MR4yyET3fcgJE1p zngX5dC#EgNK@YRsgz3zXzG6b&#l6M(6cGW^Ti)`8N^T2t_ohBSU++3=Z;XxiHFa?Q z8scT#zfafQXHLZD=%skn3K>c18ug6JZ^b0mL&zKc$6Sw*{Kw)>a`ih(62_8A9gZ$$ zXs{-dhVj*W5B_1z*}Hkbx|l~%&Q+<>49|5lV#JY-`(zOv%!CZl8VMK8|#B*e5 zD`xc|tpBD~Zh7qMiWu}_)~b%*@`XYDe5FWmt%xVpt6I!Gi8)$x60tLM+O(YA1ii&S zg!G)t*NAjnL&!uj8UqLF>C)6*g={>V ze+55I{p$!h9kcQvNFyBX6wOO*+g+kqi{x9J1Tg!c_KI5Sx114z?sV%S7l!#TQaQ=A zcrH$~CLzc~Tw3Wu^DKn;BK;E*H+7qh3GUCxo44pe+X9t=hS}TR3TIPhuaJbW65{8~ zC$dGI22lrT^7M&rh*9q(&Fg;NN~;WRe&d-{V=2K^5FVdDd-zK{S8`45qp9S6>VYtb z1luZUTL@J`dQ`?xLF{9Y{h8>|u)r5qY_7Ez=;qSjSwd%@cTRab7R9PyV?XnnQ&&}8 ze?gh{H{foY7!RvalVqWDVtq3Giz$ay5hOX4PR=gwM{C*?8nrh47f|5!$(4-R$dbW< zIbdRA9J%kC%loPAYNn_=Tu5g&pI5^oWs7tCt*qu}n#-67T0%ZZA-bSAiwB91dc(C; zfdjoiVlWi0yu$hg?5C)0EM4&1dX^To-TLTmY3U4PQn?cxWuj0;P#N4Lb1PT?FYkAk)&>TO0OXNRGX z74FK9-_GDk{tx3E>|2K&k1ElGPvV`d5n>bcH_U|=#PI4(QRa#ufL{?SglG*LKz=n5 zri|bxNh5e8py#T}3yK-&Z zz*PQEZvZOR;%^@aSWO?{FOarGz{S~=;v{v{=3`vg zHSy(Lw%$s_(=n7J*psGRpSVG#0RTuT;c{IKih1WQq*0dv$bWRueMf#&hD)dB;b3#U zRwxF=03k$b|CW5na0*Z(AN3XF{sjntPra}|x(ooX;G&?QcofPl6%@l_&8L(>rJYj> z(wF=50QtOawGFP!N~fj*6>R?x0J_^12lARE1~#EJFSP3{D8ahE04BV}teUI9&>!ls z`gHb^qSDILnd3ef=i}C#^uO@M_)A9y3jrOynBrkY$|7;pjd!M@ydQ)cPR@S}EZti` zTZl05^?L}y$DuX^arfnExf%9cW($jYTB0s6KzIH3KL^xi6&AOPtGJps(+@=}-z<=< z`82;-9;yV>Uu8GfD5ZqhaO-`51XLQ8<4o|)0couEH1QXD$T zx1w;>6U_Xs1pEZot;C~e?#~4%n*lBCWV+Diep^7Jh)}p|^9Jwl<U}8 z-214D;n5f@ZZ1qf0J#27&kkSzp(c$bQluHwp*G z>F4A^MSvJAllt4o1CL$7FrfC8Fqs{yzaj74&ZW{Vg>7fD%8%=W9q%y2dx}+v!Q*Su zFMVO!lRTYRcg=?c$?iA4yRN-x_~|-0ThdJQZKAPAL4L!l@RsB3zu!s~jC3)%DLYVb zK+Dc09e0S@9nnKJ*D8mo5AxgrqHM}MhDl>b9ko;Nx&JcGVjTMqXr;K)Z=|6(IrH25 zE1E2&n@N&7V8uRmEty90?pkTF`$!?9pycMzL4 zFYS$<4pEJsmhdM@YzFKvmY1Yf{&rc0As!gbeUy&(jbc@PIrUVr17xD27%EFrTCgnk zeRln-`}7~k-Chl14!0!Jwnkb9rpoi=3+;TF?YY6c`>86aeCWB{l511F$9LC%pDYkf zZ}}(ghuP7p?VMPTwfIi2LYe@#LUj+kjJ?s9SOKgGk2dB z50nOlsKDzS02P(C!+qg!8pvn$B9&Jf=jRN1Fq@7@@*M32E9k>WN^%WZz|j)P|BhCn@ksup#G25*Id+X2Ot~hRg`TeDOWAB6Yt_dWO<<&dCN+_L<0h=Kv+jTL3D14bKpr=zwal z=={RzGsrHDOg+BT`mNj`g{rDr0{=QbI&1DR0seiMjkA_53_`1 zQ)~BX*Fz`(xiCp1=FYs-;wC#F+Gw`P<7SxYW|;I*EhR6Vk>H>k<&OwTXY_5J#~n{j z3iaV4bpC0ghW+h}sr&o+qcp#}>TcFZ>+NYWn&vVt)Bhp_8375VUN$(UoUP7WM=qs6 zBvp=iwexbzy1e6fi;1;WL%_4HwCnggo`K#zrwL&$huL@yhVIMMI3pF}nivJn znO_WpF_SWqr;};}e&e331;UE5pAOD7BR0#-82zWvR0ygW#|oKB6}0}bpn}n&B=N~9 zyi`~n+uKnkR+A=mQU`GdqvP*an=fNElO$Dssx$epp2xnonEDB$cmTAXbG2O|p4DC| z3Z@^VPwPk`Rc(b^p6~FG+^PW>2fDLCrU|b)n(oU+eh@c>LMb)j9$uW}1^6^oxHU*! zE7`gz43)x6tYWDr@h`hL(Cs5DD?8^&Joy6uuf1zD9rx;Tt8irvVehJaC|a{UKaHZG z-%V;_oOnV6s5xB?4j}dK-o5+$*MoQXhi%p!%U0lZuO{|<&EL z5~MvS1gI9V|0-Ok2?6P4MbI!A5U8!({g-_P^%?xn!6xzl_u%dS%CZxSp+%=^}mh4;mVfcQ}t}!+2U#{rmliz*GyLV{bngW&M2}FF#Uc%&xQuwzUlkK z4OC~5Ky|;g^S9g%W@-{gx0@~uAV$0aXMeQTOgcX}&<4LO z%5c?Me*dR#ami-|cB>OTg#&k=;GhP5L^z(O)4vGF>ige|Ao$HfT1crV{AY<#tdNIm z+85RG_r73bSED?2`u5+KEh@HBqOcvWXv@2(r}-d0Nj^J`y-hxirlqe|JUoQt>g`f# z#+p_3V+D7H`?iDi0?D(W1xfk<&@{xm-xTkc0j&p> z{q$@{M*8;~V%14?t&hR7lLTo#c)5{Q)KONzH?OX!fwYv_yAS@~b(}WVkZIY**H7PQ z;sCxpTkSf1J5_`h6O+SniJAp`wnzOysevG~XNDu{pBwggkau%3TBwNETBZG#S1lz< z?!B-w)sw%t{SGpKT18XfApJ>}dn}LbCh`^g%*9WD!dm_thcf5u`Kob@y!NMpv<-Aq zHRQ#FZ4#(^67P73hU?b8TK-6Za~1mEA2H^%nVu}MQdJ-NT~;Got_yUA?Pc}^D}bbR z|FRPNPtR!OJo%Vx7dZNTpMD%CSt~682_S<5z2RiJv30;&JM~$air}O2WA(zM6npkzchC7Wlhd)exj99^y@Frp zbcAEqSX~`|Xn1&o+@=1}PeS2WBo7^dw4Qj>KQ@(nml^TEOAii5dTQ$)vKS!HmAIpR z;Q02^tf^Ur19%SF!fWi_UT)T3R4P8o5#xEE7&>VonhuPWbCB*4v%eeT!!i+zNSFNQ z7bD}Od)$3n%!(+1?0~64ui&aMRDU0q3qf+`Z{J%Dm^`$H==`#IpEJwa^AhWccec@*j z4uc)8wMC`*z5K@h|{8Dk>`D0u7V8e^) zkrUzGOUDt_$q@b7rtg7d@d>5qYX|D6*8UsKgh22oi*@a)Ez*G=>2$qs;A?#Z$cV(-w*jLq1zj20=-4@L#_2-zRT+_7CK{%n zM@v*CI-?NOy{_BMdFpJ`Q64@vSpT-u_R_E^xQjgvcITxj#y7cs${^P<1roD;BR1p7 z!R=q9J7t^Uc!GM}DhjJB;lkecH9VNm7Bt^F66vJ$x7M`qX;&Azq5Q3xbHZN_rp-LP ziV54p+q!K}^Rhc{su|n9n4%=516NAx4wG-Fysi`F>GrK@W*ORR$scwkeMD!Fs048h z(@@5DpF;tj%6&AB--_sW_7Fc@5JWo7P)l%j;C>$1;i3o;4V7F>$~!ob&oCdL0Mm*!o7)YNqjzM5@|ybDdUXY&&83gdW7!kqtzfw#4%EKxwL1i9(l1dFkr z_D`JK0fW>~-HBOu`z^k~bb*CWiM{xjd@T@h4N+r^ssU?y+R&BUiO4IAU8ew+ZZyP@O4}8%@=qD*Ja6bzV&fz)zDfMwz;!l0+Khv3;BsCmF zac(TZNROiu!G*eCPzEjr-paM!N4`tAHKnvtiB?D$S@_x=fe*#+N8r9aEGMhsGx5>? z`8g$NJ$ul+8?h(f;DRSpAS-@5n2Cl)irMlp75=@HQ5Kni+d#hcw`bk<*1^=CW2yeB z)qGo6kOeo2!xsu%0Qvo^n$dr&+gHhZ~IxBi_o3hZv(7bbMBSdf+4sSI=;NxxvFNQ>fvE%?v z*MLyKJtUWZ&16h{BRZ&wr5~H{b)zI)I9d)hcKk~*4j>;7OCiKEwuz*Miwm99weI4x?w3N=EW8Vn5lVD&dY=w@Pn zJ@~;8-yz}I)n--Mu4Ce{?=xu^9GkHtRT-pBdN980_uRc%x~xboXM=`k)UJ@Ne99Rc zei0F9g}y|#8AVB?Z>yOSA`qzj^8(9_Z#(&5y$dgW(@BFXjh#m4V1gxm<5dEAp%)O{a0F2C4z zD_m`+5SMI4c44w_G0H~EEr-5jK?=be>C~mH%Kk!buw%X%I&x=VYxN*P?kkGpi4i8| z&!d2lLLxsVWe=Amc4X4X9Ka@b3ptq40vxoPrEMq14jp1(Hy0M*3(}zs6HEB}iZD&v zUt5DmB^%*YYSDHj@3nY8*tPX(Uxr2uJQK3Hy*pjJx`0x-X7GgAhykVSMh9lkZhtW2 z)V?=#Z7G7Ad#~r!>}Y#s@Mz11f7KnyAHS97+p9ILlo%Tu=h=|jb=Hyi#T?0x0AgWp zRIHeE4;|svHRn*W*4Kwr51qEmktI)c4$)z!M+z^WZOPV_T5yz@>nAgeOX%C)@U5>` zVR9+FT`+Q`;Bq+iXfkcZ2P3C6=_PhJfjkj&ovl3( zmY$#vubu|G;o!YZpcP}kt$H8g>(oFgvFuPoR3f}H<9l(LUl$Dsdk6Ti3((2<(QYq~ zG?0aUhkaJCP?~V7FCG=ih{Yog+lfv6@(2%mM){)J1mjH#{w%1m5!h@iL>2*3%tZ(Y z`4HiU9>Ss#H%Hx717D}I)AtiKM8?b8UgE0R2OECzm7Vd^>j(UlQhC)PHDAz7rU?)u z9k9Zl3ryarj?I1mw}Xf*4|PWpVH1%`%-!tvuk;>Dkko>?%7}J0Ks=OO>Tp(S5$Nd4 z63f=0EN*JH?ZA}i9^qi584>mcE=g`m*w6%6^A`($ZsL+isx0?->!c>nZnVXT=UBl* zW0$W{`-NBeH#74TVzpPZde@$|!9T_JJZES!o%FC09cRrd&1|^Q%9Nst)9USc1^(X* zmLb;ce@K>=igTHu9fkR_3B#$bA1Ss&U!caUN1L2-<}lE6IWkgF5%q6pa8jI-Ty|*| z4fak%u|y2=vzv*hnBD8Lk~)C-81k}nP5Y z4@Pyijjw85YmS>VIX+K90EC;#Gj*8MIWyNJ0WKD8eqKt z#=5Xs&yXN&5ZuH9dcrDQF^=F>1%$vj1)_kBjE_zLMZ#}7I=bTcQwf()#HXGu>mRI# zsBZ?J`MZ&+$JQSp7g8NbqItWZ(^GBznkqPx1SWJbBeW6a?~S5I?o$7MW5BHbKQLe? z?AMkg4pp+uMMIxYA7)=xl`>=~Jpw^9G*9XZv;2t5bsGDISvsOcU^|LH$HJ`V4|A=5 zwgZ%%sWt;r4bK}7L@kwg!fb%x8(@|Rl|B1~-z(COv2m#DH4f{>W%GD3nT>=3ITf8h zF3pXMY(gOGrUv_*c@#wx+=(UzEj4y4((@j4mPIu}Pu8}~b2TxKWE+fE5-tsZqTK8a zO}oLIx>|HP!Ix=U1Y>imwKjr8U$jxXp_BM~2{fdkEgxt1sqN7)p#9yYEt!*wB`prK zVrjnu-Ms1IvA1E~Rd|00HL%?*me+?(BZ!AL{mcT=aJUd3|I<|-Lglr9`mDpC=uv~Q z(YGs2h&}F!463HQd+r4HceCpI3-{P&3$0|R4_Dk6L*-qN@qNuMR32SMciy-D(`H5aM0a zTMB*!w>}swQUo7Y(hX`_9~_1P?f|hfnLe{zi9BrIy7_3F-9SIUS~0-)h>hiw-Nbnk z1|F45#uE0m0g-?^rXC(6a97p>@8GvZyjbNkd{*|%#m)wPbWYYby=i>@tfP%WNZ^{< zqvs=G4r7|!x~3YBGmAGo8;dB{jzNG$tm#n>n!7a(2s@t#_!lZ|kUra`EJ2vp z)Z-+KlnKV(FC{I_RI|8=uyCycgd&sz{Fs7v$^!d{ZYl zInxJjjUwVl3XrW{E{b~n=0KPVp}I!Q=I&PhPWTvpfgmx&#kSn3%Lp$C0p?AZN<}!P zY{e|`v_VI@s2T^Nz6fP-ZI3(12W>Eg`f*~ENtix>e=>R z^kX~dnt=gnJ+l^qS+xY-?N#riR(X*C2^Am{ZfDYA1Cpyw#8%zEUy&_;{cmVli`e71 zko3Z@RL0t9n~UjTLUG{;rt= z$i`zuw6%^4NDp`?)kKI!>BcP2aA71x;dto7h&N*{v%1hp5}Z(V>`!34A>QUl`QR#e z-$U%8FxUm+)nCtx?wQJxUb)uDk~A5Hd8{2B#73%P-;$${*L*7ygko;d4g%Z|??tXRNAh|wNs9ASPjq0ht}FBcXq zz#Sb6AF>?o%*J3SSfYz5(p9TQZ_3u9uc>$A><#-yzq4wjyU#MC`I!VQ6#Pc-kM1Z0 zJ-EyLHrQ7}qeut|mG;GE%axyeg)n+wy zb?dmHJQfXblN#s$l5$)|k1ZzLic4hC=a?e{%C!ZphG%9p=q#WeDA;n(*TtyQAN|qn z?1}>$)=Gf)Mq*?@qWF*h;m;o!KXH)Mi6O4hVu03}UeZHk}RGLO2J<1)*wP1x^_Sfv-#?C?Nz~7rcGlK23`m^zPfFre zqb0EMeJsNcOn2;f!uTmAdS>^|gHh+X{1W$LoDL~z>3%gQ=9IVfsTg2yALc&4YTZG> ztp)8^=wj2946pL3Q<>~I*kpeBL}ui@%D(43q5&@2AFuo{{yMJooD^fWG`dnQvoWgX z0kzYaTg~dmHv!DcfLMI0@#qNhz!)#B6tSnb84C^MIF^l5^&zYwNA25oED&7UT>3)m z=`}qm8RPpY1Ne(4BZlKSlI<+G!tO<- zB08j}X0ffN!>pPSLAFIO)w?d~E0FK_R(d?__|Kxbm^Q&&JKTA)L+v@rwTcLTXMYf; zAC?kFxTJ1{Q7-(v7r2_%?K)iiK2uy&^zKkOne1Im?ZsqL>)6Da)+#$u9-Y1f5?X)u zqwxp-kFB-GeuMiZ+Ej9E^68fq&B-H3&mTEK`gg#@0t}Y1M(Ou@Q0If1t@D$@8Gbfg z1^`pUPq9ru8FVy4&=vwgkAlOGjX0&awA$T`OVq4OCoRG%2pns!{aSj)AHQ15JFvas z5YGCG?moihf3E>DK+DpIq(NQvQEr|T zyVf4$jzaP#-+z8a>7+i>ZGt|eI|0ZJ(s9KMYUo~~1QbgjD2-r4Pp4nQIie=RtJJ|w znz06*4bJ|ckl-TzWFQRxm7K0C`*Vd;;jm;#XzB4cFQKPbjJ|?WO?aDs_b*@vs}Mz> z>%;gh3TGZ%7`bQP+h`?r`B-3ywG2qcJ?nPidW#pR!_L0p{K;>cF<7K1q26;Rma1)b|Kyom zN+ihkX-$w_h*RQ!@8Wta&{Hn@=>;!iSjBML0_lE;wyVnS=35_8Y&@khj+PsfZ{|vq zFW!hXjHdCFo|5Nt`#zMK{=fI zq{cPD*j9=@wbSVSbk>?fDXqUiu|d5fQW(Ue#hmU^v&mf*%Z`V7&wWTe!|K}FjOUik ztwmIXX2_G~-ey4Qk{(Gl&&WZw$`M^OBMo)<^|aYn7Te5BTlxa+&)ks@Y})?s3lWH? z#Sfqg0&xmcN{NJdZ!<-VIJu=O!8dxSpSpwcDH|$1BYk>}(vDqwZIPzwzq8)C;WPFN z#zm&^DG7Bwg^%!d5LAzH9-HXyg_DpXFg(v0CSv|ix#P(KY+v=43XzygV{H*fu^E!4 zYUqBG=jI*;1`O#UHx%Ir6cIFeu-nUIz@2tbl(r7oJI2@ewtQFP`yHm0sY+0#{~k3h z+*~(%_oEqBzfEl9&`=H{L>m!TkCmBbtQr9YSy4`Ekpb=#1caH*Tt7d*U3M-mP_Zov z4f}uGG?f)r-1N*{nJYSZOc?*u`l;vZkHsu7<6~z^`Xhc^Gp4#o4wryVrYnBd zp-9{ zpJRR>S;Qk}D{8Zt)R>sU|Jlo40BW~^VNUB!>Mg+oPHtg$WT_Z-`Qi2?Xazf$<}EG8 zfTT++?x{#dxPZXWzvB?Z0Gz(@$riI+$d*$G)%%$6O`01X(YV#Zw%XY(6vTJ~=xfZ_0jfk6$NMjsv+Ay0sdAzg^9zmzvN#Kr&Kc`LNXVqI*y zN=;2I2N;>8vl61cx4D)pvHh~E{20{{2t#2{asidhTuhXltAEgWoaCVozMi7?$a;^3Wnqma`j^=>tS1B;$o($?~%=wYt2A2ara zP@qQrIY!(+8r_NP@g7hH)ylm{R`M+Vprag~O03vpqra9lNU_=;*zsk!Gk~@ql$fSOa!3Io>?A&VCYnBbn>Lm6ZJ!#`4X1k`HR8807nDg1ES)3i=_uaPxg z%s)1>66?8JL)^rbsI2<;sohR}OuM$8E*h0$V9{cLcp*0SL%<73qu>zXepRAZ_)!;&U>A$^^ii%~bDEr`) z-9W|>{pUqy@6o+>gh<7`p4}vAJ6!sgYv^p7w8Np#;{O73u_x(_c|B)Fqbp>vx*dTwqRPEIIea{=u?-qeSLm*06#2%C(`Dg3&j9*yL9mx>T z$jJ2EBsynfU_jm2*l@z60`Kdb5^mblB?6?bY8Dc*?ea%B{sy?4`lo)gB}9j03)ndY z_;X46AiD?ed&@IxH~4s-o3&ty)Rn^1e|l8H0-|q25Qa(v8N@H(V-fnt z6FEi=VBKH^rXIhJT&^`ebRP9*1eGt3i3`lR4?0N5`J510I_}tI<>Zb5)wA(fI-kc* ze)6;@c1>ib!oGOy*VP0K^6u&4u$@FEhYb?6?xL`ths_&HiFQAHhGF_qH~u4-M$N~t zpR_RFTE1mtO}!#=6UrqX-?RAfP~QHZr0>;}*j zSvyS3%JQA)zEENc|4>v`(g*gw%yC9G%?GXS^Z7Jv3G73R`yM(MbJUUlHXC)8T5+m^ zP$C;hC*1^StjbGhF5A7G=z;C4p_gvbZh;7%O?U_anp4FJ&|CgT5=g z&6iHiqT6kES@(5}(2FGAHjqwjI8IGo!$hoe)GdN;7WQDMg>?Le_MyK@u2$QriAKB1%{|g%=dw0xS17DURzxt+e^- zjE?)L+QlPFlpE5QnSHHOx|oDFQ1A6rJ1~ce83(e{g%4zbqXrW6 z&`PNnb6lqS#E+tpQQ*L50e%b2kk`w&V zJJRQrc5BtvFo3r~{${VYo{`7$l-Lt})yt4KYlYu77W-%|Z7~tN<9D8Aflr?rLCi4! zK7&7B7|0`3_QjLH{R!6h|G0SRb*wV4#iv1lEme+4?lXjQu`N-=_2A2KBk%hW-ErDf zdGHm(l7vNd#i_oDY0`qZ;PQ-NyTOO9{sL%g|M58FnzEJ$xyvWv=M)Qh$x}cPPS!iXu}OUEBT?-=_H3$G?#4JB;p+K74JMV z1T!sQK>=DeUb&x~$w_pau|H=13}J(9)2Mlxx9_vUT(xodqYah!O%R9Kop)@mEJZJt zc>Z)bY;s^jNBU_Ftvy~9W5&7GPuW_=x=jXX=2Q*&ew}d5b7)m6 z`eNK}92qp}Zg|lWSI`l=r#1X?u7A!<@*wr3Z(CHevwYj0om>FTm^AbqzX~l8;*6P|*2=2iBhUf0RIMxe5UhO(k>M){d*wuQ; z{`t6osMegQyYiW)WidYL+dFZ$oP>B{;X%*pqqW)7h+l(T*B$~-8^9B^&uZgiY#~>= zpMHcLtVFzjGP2Bf?X7F#jyOF3bHtSWWdg%=wo{d^(wR(ydVBGu^w?#jsL`R}cD2?$ zKFs%77@gCj+~AxWu&S=}gxBBZr8gS-&NqjPrg1d**72c>?xLu2x&^ zHvHl?va!oDo(QL~Z>)bUl}VEtri~!r>QqdZi86m5W0zEA@3r{CRwERpQ+^x&4S^(w z_;>K`2NlJ%=j<`IbJX;GXyYn{!B;*|*1ML9Ep&y>Zt-Z!Y}=Wo<1a@6B#Y<_2V#=g zvqU9l(Gt!ILUZizD=va(J?A7`t3n~Zi+m4d=Q~332kwVg$=?I@m#vyA!u*6I2VMZT z+P^86>|U@TxV!jf;qvOFv~pTzL;xZ!-$8Q7GQRnVRbC%Rqa$EX)Zc-Rhz?74x9Pug zU+;W6J_N2!#f3UYfnBHKZvYUeje(u-Z2cmc3m_12SmhLq`ncYf{Hg)=p2y|&6 z>!_uWY5sr!vdOziEqya94mA$5IJv%~4*{M>LKHymRr#|gXWzFlM&OmAY57Yss*QxPljV$A)Zzbc7S?8L8fD{ ztBYw>n9mF5Hu^3mFb{>y_9o^3qV2t-n&{fMQ7nLph!q5+*eKFeI!IFi=^dm7rI!Fo zlNtrVLhnMP_Yyh@Jt7LydrKe@fk0@Xg_?2(pXYtQ-&yBd=bUxcI{P1zFlEo|nc4ST z*L7dFr{(|Fo|=PoN}^aa`j%OW{DZS^UyKgP?@^Uu^3@rg!Fk%eJ3JwWue$fX0_7RH zxYb&d7wXx4(UP8CPZq1vHyWA?4hUG=>$cgvoEZXue4*v#Yq9u}+jWPY2L0kho*wbi zQ?g4&#yPjCG9fpITx&fYR^D=@(Rj(YyBFpU7JxygHN`JDZ`}2P+WqFI zlk(V2dzv&I^Sv$hO35|4+Gk;hsMMc= ztmu8|)94*Nl`&73B+Cvx)m%U`#7oaOsQTxsbBs($pG)obQlH3`1Rib<)R~fdm*hX; z^2#G+O4f7tUh!Bpt+m4UI)1gujb)ltashfY^yxd_&nL`2CyKj$hBqanaud(}Ih1>_ zT*UqVAYnjS)k`e%S-uL7yT5WP&9Z!DXLNzF>imywQx!#{@>juXwd_d_Prby&^7T~N zIck$g9-NQ>5fCHl#w8`R!QA&D{32{2t>*)P9vs&m0tiXH(1!Lmlk$U2$sc1iBGa7D z(y;gYWjPF}T|}L^W!Tf#XQaw52cbMNL%6}{+;SS0h-O_KS+L@JKY1%0ldStg1*>!< zWaLsk><&w>%wjM9p1q6OUNhg8O#E@ZWaeX$+E!y0Z2m)|tmWE{rviWt(gASM$6qUN zo($TT4VFrBmqwJ%rWR(zEFZhk|7!9x0x*qrz`X}Z3hopLfp?5Rt9Tm4&IwxbAFtR9 zfSfrifKm4GT_OM+2av|>qOJs0{TF>chBz9nfWk$`A8u9P{-~G%t z4+wnexPsDUK<5Mq;oVjuJ`q@Yyp6BZ+YNNc)zaW#+u4%; zDo=v{QJ(M}&M?2*+^*3RJk?B^*jbj+Q)2;29&~rt-l@xRo0SJ={(&*vmy>vGDM`vG z+`zfH2&MawPUa0jXim99!y_*@{HGIaxT-AJ(o0Vgas*bHmlq`ywDUyZOOp3fFWLh} zl~F0{;}UD+!c zELDNsw#|OJvg%1q9K3{mUZ3Eq>znEG{}_h?kJvAOff#9veWOAYwlVV)cac`aNc>xz zMqiv?>s^S04l71fFRo5>@ZaoO@4`* z3C|OnMWA+nU-EtNzS>n-x)^+agUIy0qT=C5H3tcO)Q<4ue?8%@_;b>>_c~iy8H3`$ ztC-o@a(j{hLRa?LlDER2Becb}e<-&haoCWOxoHxUynxHu(U19TqlN+oTH+<8KMcdZ zj`VHVUGiJ>ku^;ub`L7Bz+T$qSYd*IV@-Nf`q z`9Pt~Zx>Ln+iB-ap1hl(?@Pv&ep5?K%Qo)(=g2Pkm8#H#3q=gGw_eiT6L!o_W3HZ( z&uG=<-{Z*|}SyKd*8{%WITqKedOO>%oLq0Rr#&H)oV zufcIPqj24|khM9#%{P}|qZ#OrOP@EnLiS$?&B_X&&|6!O$;D;Aah%eBG#$uT@Z-YI z4SIdu8%2nQsoA!ic!Do**6MuB=e9(~wl_GK zi3cye+`rlUBDmu!c11qvcNa@HI#TS4iifmw74C^TBf;X`R8B_sm~yb&;P^x-O~ftZ zTX#H9{0W)AcZ_6#Xfn*Nf1qjjykvImsx8UmU%^S7q@x!g3LNiyAhkrNA*u(9??btI zdGLZHAOA}V9fuMIxuFuXCYHhBm^OuW#-ijGXl1d|^2Y?XwFgTq3JC#z#>cver%xS6 z04IR)gTud-%2GZlza&R$eyqCkQzi&I?_C~Q@ZYjh^Urfb;1Of;`x{;Yf%{JczU~q} zD#TpqoVy*sKO*$((@H28n)by4zk;ifCvu`tW)1ZI*f&#Ngvsw^8XL}o{7@5qcF?C+ z)!?hBe_x`Jv`v1yl_)8pV^W+e35jQhgtPV6614o9-&~^CNpFu~xi^OY-IeJK#`=>k3mbMNNR3^) zdCE6y>5IiEhrst}PM(#Ixh;h*ee%k`?ay`tqLYI0tD_Ic9;iEg`$D@c@BG_-Y2ZIX zfsel|fi!=gO(h0*Nvh18Gb zI!a1PfV1<*w99%!$+5BA|M>Av&-o~$@!Lrk`xNWmT`22&JY&kd_+P_}Egr@aNAv2r zfE$OiC!G_i2Ygh|#Rp}c=8tw(gts)GPVnlO)UHj{sP|=?!5%S(%1NhQvh;WV8>VSopyco->Kow@fwonJ68YZ_Xnw; z;;CW-F2yCYr2oCImC+0HtHM?39{PNxeI-@6<9K3wM z1JiHS>ix-Qmu?*9(5$_3aAQqieCiQMjjn*bya(scDs%bLSPmtlnFpfqnQHu;YHm+3 zTR;5$EAIBO%Z;9y+2><}v^Lf81C@%%x(IG0dSuq0J81EY2Zw-0JK195IoHP&Q z#BZ{&3^j`#Ly4GUDAAZ<e!5{xi`QXfvoIx{A`)sB@IcpVJp11 zw2X)U<^Z+Zm%@+Me&*EEocGptr}yal4k~(h2p85vZ|+~FYE@F6d?L{^)3<#&)5|t|EkwYQ>!arcG3JR$PXM9i z!>hTDo5I2u013xyp;5mox8>2|=T$GmECS>n%&s?7*mPZ%mXki8zQEjg{#?x_fxXaX zypqOlmOFW1DvGj28DKl&NN&3B^*!;e>0tnTo`3qLcHzYnQ?E5sRtj^sk09fZVY+sZ z1rop(ss6(jEgVoonvkIRDcv#K@0)kek9}-b1LmRTOtY-tfec_iBd#pKHzLMJet+MK z!Q#&u)YFM5>k(_PJ;2?(xDZ_U!5}@H``&P5d(P!7o%5GHnR1__Lr6lUu~KEmz2RW! z+o_sAH>ttzH>4h9#vrH)0n}3u#TPNz`kdHgx(uc9$ddI5#Smj)tpDyd? z&g9LZcPhH504@dUqn%o$^hn$jDXIQcwAG`>0|a?9L9y>U{zX>&p$k^$ukxNAVx?SH z*?9fF?-K3Ff_tYg9_*QC*0s72>U?*#ec~CXZdN#Om6}qiYe{#H5(XBJU^_U4tL31g z>LVV$-4`Q}`K!UOXNSKPdq5JZ3h8HZ4i@np<}SZ=lT^wX6c-Wx#N`Vd)hQPJ$UpEf zvo9Y`r1yyUbCrlwLqFS}G{0iFEHt2el#`yC6oCmoT4Q@?`w@Djx8|m850HQ#kMp(* zRvCd%A-AXWUW^;Y#t~meA^Iz*36ctz?yEu77S2{Na@;C6*go$ps}_AE(XE2?#S z*LsWWTUWX&@<*xq#2zI~rIVse;NcL6nj^}{yirVh>llh5o8U#dXDHrH1wl>EnlOwH zhv`V0nd(T)TdR191_vKLjBoR!_d2x=v#89}W2|WZSKrSvYPxccOj^ zbU4u}z`Qsqc0QhuxxsX&0A z_7Fdif-5V7JgN6y-%U}nS88A$bJJV>C{)>tNJ2SM?-hY^Srk5=p8q3nTn2ykUrA6_)=lrY-?1Tv>0^eQeQ~rwpWdLDfPUNsc_%s-W6NIiKS-y z{;yNBPs|Te+vE0fK;?K$>X2YLce}GzP9O%v%wMR}wckA!90|U%E+9R5O=vMD(b=rH zbRHlE6*Eo_ z*uLBuiTN;3^_i4!22Tj@rpQ$}Cqc+VobS)J3}$*O|sK zEhTY{oeJOZDdS-U^6*L1u)}TY26o3WRqQvKI%O_lusZ;q*DRryDUeN4)D~`#y;~?h zlJmR1$R4^AH_OU1<$WrA#8cK1cfVF&8d2bA5q%v=jo}QClt~Zl%|%jp@v|FWTMHm& z7ljctn9KMF2-n%nWze6VUg#l9-)4%O{|D$b=Y2`C#;O(h6BJTQdBS+z!}I=Zlj)Ps zFJ-)@wIn*5m|k4G_bO9iD0^~ZRDrYtb5NvKsBv*HuItTmt>{F^C+?M^BI(8;hIu!G zX7cc8(5aV1CxWN`CnsA+{!?z>T0BXb4Fzq#-clb0UF|{zXihmCov8nVy5U&!zAik$ zA>=oTm9WU76uYJ&8T4n>PpDKr8*=cwj15^|)Ch>9g5k4ID<8Zq{XpASV(;?$x>)J6 zL~!_%FVgm)lO`>uh2aQE^}QrNs+d-%-8bYV;R(Y%o3w;oBop3s zC7b#DYdcIERLK`;m`=O|kDl^HhG)7^b<9jJr(YxgdWgjdx?ho4WRF z+KBL`>NR94-qb+6c$6I1z4#D0$BF^72(gGW>uNBTOvzYQ7`*>NaZ(DWQJcE5X&qocChpRlMV!9MRwC1oB%8nN#cOtOLu#9KQAz11Uu5{CnzOGa-?q z_<5Sqx9$UcI%+Jl6R`y4QpBu3oprxBW3jNXWG(1ZT zE)87AAJ(QvXpLsJcRcR!xn#bp{z2UvsFdwiO}Qpr zClg=0JQ@$Xr=mdu`3~O|6B!!iF7vnRbomIt%FbZWlp~->t8Q9mDOu{8QCvKk)nCjN zThm}qA6P?N+DUHB3t!$LO?zowxg+q^3ZL=?{`IB<&(k!qXP%a=j~QEpW=MwR{O_M# zIm>35eSj)T+b8;W_KX^akoVLRjOk|(+ zuS|!j6gmQAo9Zsk{g1@^EE%J}f=ElH{fB zT135@v)`39lfEA;x^ptc@Q;{@*`?sKo5)}96LPHW$=ZkV(#8ORSQa0Dc?=FhiNVB znp{mqhDc{TwnQM=_2IKM@# z^0rH#__kn7%1d$LDTSbx*itU3tMX$YCcu&O4Z!Y~Z~wotM00f2Hi4 zjKU<*f08q8<=ah+^y6xHN_6=5%fpU5xpF#H^SgVbc*{LjnqRWu3$<&~BTodPiKD6$ z*s?-uU?QbGQDIngWPNnwlJX&Ov4vO~I4Z*KeF#2`-FxwW5^}J2TfNFC&&&n zoDbjZ`5unRT`@upXgSmx4RDYeGuPm6()Pmrd_S#2c8!G?M1PNKkK*uMZFTmrv_foB z7@G2o9!WUq4aY`ZA^O*2J5^{`PSMcJGo}=;q+rY&vg5lq&^#tbuX5gfvy2eu1)f#; z_VmKJl>o0L_$wXP{YTy=8s?-I@u4uyLBek_+(a_4k`_t=|?jSe4 zm3r=kreqc(%VEUmY#8wP84ID}$)JR^uR*gTyUYQ^z<@ zUvThYgeLwZxUyFo(kgBc%M*%9S(m>v`HH1vI6Z;5f_fK1!RrOBegOJm7hDp^7x@g?d379iGom4wY5au2B=QX7CAl9Pc7Nt|S-$^lC% znYTnF#f_@+q@*ar(3HK(n&Wa zj~hC5r1#oAPi>vl*t$J#Kh}XZ=@~cX&~$pbyU_+~^nQlMB&(q@2Tye+4n>_X1}-fo zax^qROd?ihS@67Bbz-_I3l+3CQ%K9eyo4mBQ2$U#vrLdl+8*VhSLcX})a-nTUf1*+ zbW^X(#WjwU#;1emduSCHOYz^oTokK!>PA{sk;g=bJx6lWS!?rj^AkE(Ot3MvT|TZbR_cxK zCmihcT(*(G<<9Mt4``M1%|>%rnWA>L%RsN|UCUOzG(QzIKQLvmP!p!1`Q;81=73GV zHUxb|E)`U7w+u!ZI=_U*U~v+v%BM;L7~uXgbp6L5FrB{q9F|3z-?F zJ++!ji}as{hdvz+Q5JWm&EenQkol&4y_%K+vpD!TXo3B`2L8M)H7|6_U7M0*!tWIh z9Dr*YR8SUB*VMwr#GMhYJ;K6nEM&NDh|WU$Gz#cr`Hhoc8V~Q4(RXmsMd78~fq};2 zRZkZrTaVALX-4d z#%Vq3_Q|o3#g5~SyszLqxhj+YuXj_81DemmCJtt@*Jnh!|a_k`0d%?_50G7r+#pBd+Sq|A_ zUjUkjW)<}H5sLnr0KA1SzJe9|*8Dw8M=ya4@d%{nr#R}c9jOWlZ#bd^tgSO`5d8AtH0iBs5wUrr)&m-7N z0z_x6Xq=?)G`{sig3+DpSs5Y_ZroRwWpU^&TJvz^T-P`;CPklz;rMhbiUMJqtT&#G zyi3w5k;bYLtd$ejY;;qCq`xg zid;=yilO7Am-+T`@n>FN!^)c1RsAr_PrCN{X2VrPQIS`~OVw#x(Q}0W!t^;xctTJT zB@@Qx550O+sbCks-%+u53Cn!P?4@G8098|GaSTQDb&4b|{mgL|O3mP(0C?PNBg_}O zd|D2+yp`YFRaV>w`$OI^FR!_lIPlt6te`LJn@`(9FxT~Fn)w>9^qUsz;qJg_#DZl0 zVBdrL9gnv3C4)S+Li#ggaz%M{@DUv&GINX|v5cXE3air2f|(-fb}{9UX~ccBFR1Yd zy+aK4>ElMb39%x698t%s*E*cKn%t^c8CNpK>kG%1)p4`Ofos%}(@Mp;bffUq>f7{& z0qDV}YPh9B%YykwLek2q#fKT z7J{&o>iu#&`8sh@0vzC)2>m`*p=-CNHCO_ADl1qtvh8W&Jl^7TPGQb251wATG$qEt zQL8R$mq(<(Y7iG5p6b(7ayu2QHKRXo*$Iv7XCj?%HcX5=c|7oDg?;bfRx|k_p3K&= zb0IEDDp1-PfB)^H9S;G2!36O89@_w?Z8f+l|u_W3d|(HS59mSB6^ROeZV1(X-)P1)nV zH$P+^ZQ#tuEvT$!x~wB#J!T}YbvbI7PT({%3r&r#xgp2Wnge|*OAuatb8cLi`>IBX z(SN&JJzg$>+70s27NN#miN`)N&xwMkw!07h`u>zD52sM>JV<>MjNziTx618+?CUlb zh?D=sM6LmkU-Ty?sbZ+BZ)dRn(@?1uLsg%zE9EsqiMo~0Q95>nrNgW*~_j-NV$ z6dtZQR5f@{2#@as1951RB>m!@nS_n~xlBJxNGVcdS~dm}`L0baW4~94U;$Ub$rXC^ z{k9m!#iq5X z%QMJVIaa=`Zarcm#b3QvY6S9-uX^ms>f3+7AJ)bR&2?nK25`lSs=qd5;*XDUH69kA zbJ0;96rbvcWZp?*0l~FE6`xKQ2bvS7+bZaLAiEso<)b;VavquV2029UL~5*mAjA8E z{CrF+nLAZdL@)YK06dO8T$ySP_r2i!2W8##qoFoXfn>AJw9DZt(5G?FfLMNzGK@X! zNx{pO;=Daffhiqmif(oMgZ4^rMi3^;a&t?#;KgS9?VUFwn;bfBH(*fy z<%$9Fhr{j(YYNoEJ&KR`&;HNqc%PBYtkn(CX-4bNv8Jaco>_FhCI^j%)`*iJ-pCoQ{{J4_X0{kmp`?$ zF4%6_KHDPiSF?`rbn#xKH^$-DU)5UFDi=>!6y>}y_r7o0PRvk3z;W7tLk608q%l28 zUS5EMMAATZ>LC$&?vt-}5``_Bi_(cvN*ilCER?N^X^eTO`+7FjPMu3msyxMQeZ&&6 z+cdsbT-ULp`a;b{Do+TnY2S7qx%Lpzw=yu#^KFC_Z18Y6`e(DWNiyi3^P(Mqi7w>h z!@%Fe_N2tGR7e+_zG3{l##LcX->CM_$tkrcJq7kgDsY{ivbevtiWilknC4=R=4<7h zrSLkcDLUzs=6e)9ouHMBlR`oBIEmzFGpB-`X)HoQRzoJxqqGAn^Gi#-$j3&M6%32@ zLmD$T7!AO*Pa}LPw7rBq^6N?>N14v3JRHH0Et6Tn>uI@}15MPTMKQg6lUp@Re|y2r zR4X&MJLHhuwHwyz=*0@A42bOL5IEG*E~G#Lab@W0Ai*atQyCxFI^46c*Owcya0K-#^FyO}q8K;==q~ zMfxnSt2DwQ>Z&Ki3bV770(MvR1er&wY&yM`NBNOYBxw{oE2G5&h|3EQ6XARJh5<6x z==t-dWVoejV)SLlQ!>ZFWqmUcS3c`J=?ax}AE%Iy#GOa^7}+H>Ptl#%RZ@Ca-Vpwh zi)M+BMa0U`#wItKQ*IfV>r23_A#-`PzfP9FWd{P^h~s!Qg$3AJG29(n4wN==8qQO@ zCnR*Yl8(l&_oRDWT^*{{DWO0MS^#vf@h%K_M_alD?D*RP5FRTUYH39+FE8(WJH_M( z)W@MTGb|3QkPbXC9vRhod3O1(a{fCT;Vxq{M^ik&8Dvm7QOn&&=$UQ*Km?-i;`;jM zc6N4dZo4wK20Joe9iJ(SI>Cg#5Z4-qf!$D77GaCQ)R97OT(48QtZy_o`@?F7_KZsb z#;d7S4uxZ9s!vR5Y#+TOfCC`tfN9KP`iZ|mch;4f;j}OYmcw=sl?XagC@n4ZKHPCa zs7%;_t4)vJj)83X&ViS*o`;FT7E*+9nrfSYNb2gFfs1bidN9~sPQ+eA%fvRvzgv^> zT8a%O&2b%pWP zpnhWJcI6R!{;jwF4!+l8AfK|D(|_rvR;IiqkbBeu6@X0R70NMAjH zy*@<3=PBy=qQb zydWPEJ#Fg0vW?4^^Sf(~hv$p_fJnS6&;RG9MnzewLGZzJ_Wix;6c}hozW!?t@5^zu>88=T-m&r$QY{PvOG7EEbfvZ z@CL0Nvq^H;;%pOUlR!2M|&sQ(guFhy>hXXtOz_ zq~p6x)H))DA*~e1L!poYS<>bg31p+CQm~!~W2%^u@65c8m(wxaQW1h_doO23lKW=E z3O*8lgNpKp%s4d8%@$*t9$A|@bIqjvx-7f3TT%Cd&}IF&McfO8F!HHMQm3fUv(30N z8mifHo$Xp7-q_UYYerM*+&i)HXYQDXqptdX)4>co%NA}9_rp|4rn5diZn8{AHIICH zUmPx_5K0gb?Y8M9nV?RcSh)WLJ`>u6J3rw(N5I~HOdGJb{HE=U*1@Hr7{XA@MSDNP&U#nMYu`us%3@v-Fz%;rxgxa;?bYs5!y%|@N3g@ zm_19_cbOIsTSQMcD2txR?TLR#XkL2)4;~KMSYNn;X{PhV=Ae}cp2L1*)Di1c$D}lB zvpqA#z+^3GXSCSh9v|OE=h^D898<6`bS;Mb5h~#>Q_`BynorNQ6aHX0AXvJX76;d` znI_Q#i^XRY_Z$gKA4~_vbgPItJEUFK$F>qtl?cVVOanv>ae)HH@i_057Aohpl2vn0 zqlbKFLX5<&*vdZqk&NEGB6eRM62V4Z3n3>vYN(%GzO?oTC?X>deqZaGfTfsjCN`u! z%<=88G23t{1c)1UIkl{~1J^q$pCl4;^w zNP^74k@drxAXI}1n+(s8wfSb^S=hb0b?HCl&pOiTXnh@SJpu3ECxS_uo$W{Zu5I;i zAxxpjYgq|SzFBKYSjbPV-LLprob7H$fNGu3gsR&)#YN*H)|g&n@amj(HGt}TbZ8RV zZFM|d7U;Rk;LW zi;P(U5f0XVPxOrqm37mc&JmJ9(X45k^LGi1oPq+a6V$kiQ`%$^yq>#%0&TK>vmt*U zC5F}5MI{hue(vqLn?z){I3BJhT znIs8bsQQUn974UeumM+?%7XR6!onzk^dgc=0i)$D)Z$Onx3P)6@X{{$OhXymrqfVr zvU=*P4Vt)IT2bGouB?OqQ8>(Dx3C&_YX7;21} zw;-2Q(px2WjOPkXNhhd#nRw02?{DtkQ(GoM8H|3@R}J%zG6qdMMx66{BCH|FqVG!LCPJF`)7&Pm@E9G>4J&w)w1p^r9cW-KH{ zLe1kPG~tfUud^!PsXm|PR{YSKW(0eQPT9rrhkg)vaPZ8@;X zp)Q_Uc!wd&Pl4nr#?bAz(!YT_X!b6MRJ+kb`FNSBAipxp{tK(gBKd0)+q`T3@UZ^c zbc4Z%3mmUKL;NJ(yQadfq)#M0ht{jca1uKMb{wVovoxwA#fc+te-ZXg!jqb|21g$b z0fB%a^ukFuEq|f4ocIj>KlOM!!JFVTH6PM;!oB+91IV?`bjOdj#mag8)I6mqT1i}1 zZp{6QxXIudNAuHnOUk`QxxPzG>Jv0Vwe@Aveg_Y%wqy{%83@@ypBeEKFL#0ndFhWi zum95O&jR;UNy^$sjKb^3Of%#UjSatLBw2tvwQvyt=vw)%mcCef2rK!La)t)L{mM|M z+E}h$v9w43tf~241~WG_Y|QUUNnqYXn_V;V@3!N-ijgzTpKbLqa*AWVQ+-+RIy?~0 zu9HNufZiL8SJN+j3BGM9{NO!f&UqA4NRH7m-ioN^=E(iXvKZJo;s4 z_AXuM^UAqsDZ-iOtYohK>_R6v$ymLM!kY3lG{%V zQxH4-g>EWliE%2Mns&T`H?_PZbc@j8JL8*<1!!J(Jh}apxRhRcYAVRN!9;u$KCw$X zr-ch3pg98aZ?=y(Anm~QbWAeEr(`d;Jx03^#=YY=B!oPhT4^Q5xqzL2SGH}!XX6`= z^cPVs+xvC}Za2>U6F9mUWPw#}d^r?S_B(%N*GvHA3xVozoBG3n21g3fD^YvVOCJnW zOLnkveRN)K$7-_ccNnV6zJE)yiwJ8IHHWKLy4({`U>uOM3AgC^oLM%WCs}q!qM?SK#!<)xDVWw`_b&Gi zWn#bKM*fx@JmJaF=|9B^_?%o+(2+dNH9|qpFQes4koxa+u^&l zfnc3UNB14_5nszAyuu6GTQ^ zz%9r!qA>s9r!3r9M@OMZ8l5r7Cs`_PmP#{LfMz7}xj(rS%QpOs)q zbOo23&&YP=oS{o~Qm~ogD$A3)oBAE8Gk(1N-YV3@ZMB&~Eu`uCZi@eUoM)99bj~s& zsR4ktS_>x5bGJk&h zD`FDW`~|tMCKnZODtOQ6?o1ZDa*el|^AVe)Xz5`j(Pp^ec++BhqFrA)G+pO`tR?Uo-RLnJ(*L!ekg+@{z0=&9(&$TAFBn`1+)6ffPwpmJJ$-d|Y;<%9a5V7W zXrrI`n(X}pc@~{GBmv)3wv>WcAz>+$g^>su&-EPP3}jXWi}3Qo?KaT7ysK0`2rM_b z%#HqENc*opl_FCJE2uYKe$KxI+0LuW1vhd-yRO=b4sk=(MFkgF!Tdj@+ z*V;)!QehRFFD0k)`dNX;~1@}{+^t6QsNuU^t#SmfSK8ZQ-Z5e?;- zNeJzkGE08r$Fg9QSj#TTMdsC?_n>ta+uM4(AI7U3Iv_rLtZT2AC7yOaf*i1OEQ#La zy<7Y%qXoGp=SJ8b#nf%U`4P2!Ob`b) z2iHnGAFuWDLL^5*3qc2Sal}VMb1@JeJ{GVKwgXG`L@o2QuRX?B@cUoL2nf!bXmOEU zvJ9`?bPRp2(mqmS?Ne(vQ`yo%VB=Dm+z~U-zNa%VnXvqSh3$;!tmz)p1g2dzT83DP;(-LISSt z){*mH+Tkps#b`halr!UI8bZ5-Q&aF)n}r?a2F%m5BJ9pxg{3XhSG%GoGUGCijy8fPUrDDBFU|7hq6_B7)hQ7}lL@!=5mX$X%mB`G+suS5=4V1A#H ziqty&-W44XoR7_i&l1-amZjY*Al`-0b(4}$dp8VwWmRTl&GX4sweMP%T2+&Rcw4R7 z8?POXmDvSn-PZ*$YKSVbr0SyHQH5Gu5DP|J50F;ytyoG)t$+PN+=Z4SgY283j@>7N zm5$zQ@021kM#z2eBolx_7;bwq6)trpje5R=cP2tl6q2`D8oW4@PX{9}RP3Z@-hH^R z3dmm6DWndCZIe$6iZwY4S%9oE`*X77+73YKdRf_YMvvLV$l)aO$j7kL%0$IPYtRuX z{?5^3dYUDvT~7F3RZGem*_GfF073_#G1zpqCUsSvbh!#DX{+fohitK%@Xo%ZC}A{t zApdZLg?!aj10jSzqCebgH=7axJ0IAiUiZ&eKfNNNbz=#JeTfIsAN%&pUxj^=8dos#)%Q3U`}@=tujE&1DdhgByOSBfS2Yc{%r?)>uh=A$lU~LRJiOYH zQE=quPmsBspG)K6rzdkROPZ095mn<5^Rns-Re2qNXA)yhD$-X^>H&Z~iO{XAtjs3; z+EyE7v+@yg1ui}4vmCKqLK+kPxvbMDtzWU?U$l&W7W~0x?Ay@_TK$ISpGm(bdj>2~8j}@Fvt7~=#AeTX- zzw!~qLZ@5+t6(s3Y136LfgAnAeq$xpdA*#;-Y;2=H^R6k?z%XdslE?HIJD zSxQ4)bqsh#rj|0v%goYG3DmLNu#?9iXbyDqN<@tRr-{Guz&fm&UOTWK6|kc-Rqf_Yt_t3WCeR zHGn(s+Q}A-LDPl&4?SI}-4Wd(QY z@K4~NJ(>&|1!1qNOez|Xw;}Nle%aGu_pizM5n#)~vtP?w-YDhL!K)2UTW|)m^5!T1?Fdc7aDgHeKelZ~ zcBl4OvdI+1Koh27q2&_{5Yrs$VM;Ffl^4y*Gj73}+Swy|Vs2eulG$I%pC(HjHNC?3 z7M}Yb`iX{S&b-aD$Peck&7 zQBV=F0ZS0Dfzm{!Ne5|4?=3W?mjKdhP*|d%fPe%c(tGcr21KP3LPrt^2vS0o-r@cN zuD$j?=iIaRefK(d-1m;xKO8!SGtPvWIiKhIe7@i3-OoO$gD)Y5OlJQoUG==<-1D;% zmM2NxC1@8I<;Cz=RN^}Lf^wB5q*D+l#pe3sN(MW1=?QkGL^4zD`Yt07zQLsme zbow+sJw3=pWNLVN53Cha%utR4`$K(Xjy(_U&VvZ7&GfY$;0-i2Q^Cra?83rMF0|iq zEI4z(jxApVL%Z2R65J#jQRa653!&$e{}M>m^PH4SQ&lz5Hb3bn1&L5=!yCH3Z{IRg z^9;Pq}D}gKTL#}gin9p{lyb>_TS-@lXi{x@3cTXptu!b3*WfsdF zF!EMvXlP*P;BaheeSECVn2=Hw-Egc`{UH+hcl!+!wA$@|&4q0!44E z=YHcc#VF^THzO;Kp4@1_HgLL>?$GI|pE!XSk=?u*nmA`lM#D?YGj#GK2_s?REuT;PyF&qTF2>@FAKBb~QS zk34O&f@l7Wk66sUcLU(k_lB|EvwwGFe!2xk!!|ANo*~{T!I!zQxstsS9*FwI3S))40 zfV{5xquU?poW0#iI_-LiWI1w82-{UWyViS*H>#VblG07r#6sRK9x1LjH+d5b)#%=2 zgWfy|5lJPCacW>1%*v3h){Bce5eK`c$pG(AwOx={!Fu}5eZ+IB?8FRCRjNiUVcHIS zMn23X)ah^Lj&~cBh*B^t&if=x5zWWIRcl?bk+wBQXSpjoUoAqJjT(XY@s~;a?p>z! z@m8Q0Adb&467YP~y1wB?RJ{FZQp!?PPNRP$`)%d3ntDIyQXnOiMuSz0BR|1VOxWE4 z55MBMGmzbt%Hh=x*OSGuT8|NjXowT@xN;R7658Wlw__-9OB{S>4u|d%J7#A~Uy_#4 zWOsgKNAO6l4BYBpiPo_{#mWoea1-I8Eax3ojx7^8ulks(bkL>3$lAP$TA!UGH(O@p1>IJcvs?*?$6{gavx01r8KW>xRkewSdCLXROe1=Yyp{!6 zZ0bsRL|Yc6)+~3?j!}My^`eUN6tk$M19MxNpdLBa9~!Vy%>t^BeX*P3x7Il|bEfGg z^e-7mjQK?7b8Pt_hEgn3UusZWshcal+4ZHsSPbI67eyrW8Em(xz>*hz7rkLOuo?6! z-PM_xW43)@=vU5L)Ql+ogp-q6HHi^eA}FJ3t?O!k4$NkVd;P??yb@>XnbaxwcDUN3 zAjNwAJth0CCit%!OD4&In466 zd#?y7#kQNa=*Vc5DKgJAaQe%v9vn8D`9*{^{w-b$1F zWM9oJT}<-i<YpZs-pfO@;c$h&p>Wt=!i{Cyn_+0_mYMM~JbrmD8hm(hT5 z6C>J=xjn@ID1@?D&%}OMj{X7HH=UO!_KiH-gn7b-qoo4)8W=Ma7iIlJPx=8J-+pn! z=g={bsDT}$VEfEp5#g^zqqW3Y___L4PU-q{v9syC<1NyvnVa}Q`}QEajD4O}s|H%A zO*g-CoKg0BU>}F={j5DREFf7#U2-yPF1!0WSEs)RJj(qnHP<_QrnReM+D}`VZVC#p zoVKAd1SaH^XC8a0G<<{|5W&{9n`zE(g5}F^)816(O^I1?-&m;rE(l5NIQ9grjZ1o% z!`_MjTQ3)+zF^JqVmB~vMUBJS`?Ccu*5lGQtdLBu33Uf{>B>zBS_bE38t9Yvyb98l zU!7j~NoLvPjw%R*)q4PXjV4}k>q{7jA|oG z;m`Zg8`GhZa;s|m&+=HIeyM@08g$2^i&Nwem|!j;2`=0Y2L6It*?1MVxS* z9*G#ssR8(C>yh(2_UY8SUK2m$l*Q$z-@U>kn%h1X*Jr0z)-S~_?k2{psG!`rGV?gY z7Mm~;3Xo)6?T)Ix%Nqt~^0Qjjkt9}4vwbe=x>x$$e9&Tv>K7|ML>_(0jQmG%O?d1#SWpu-mNH(rnw^K0(x(7%`^`C*$ZIO?pH zd<829%rnK^PJEP>`vrP(h_m97%foZI7vDP?8ELcIG!;LGY)1@9@JuB*Ez*lA&fmWu zQx@HC#{3xT#~ge7Uf2~?CN60>Yt6z!sZh$ z5)0<(>${&6Z=O`&u#lI9^c72!SPeWyXT|2VEERuJEn>|;&cpM%CStX!RVi7Z=lzQKumy}fAD9QSKIVZ8+Tbm)T{j7#=8)7ou9qP zV`uYJ^vAktckYIg@44-~U3!wZ(nYb&w0JF=@G~g#ysZX#bd^9`;w+6OD44 zFN4_wX)oUc$LFO7T&R^SL^!Q^s+x$#;3n#wkgP#&q%9@rI zlhOJMT1quR0lxJfkz05M=O!cT=AWyB4tfmv^#RH=pF*VzJJ%Up%uG)ARbN$KuX6DH zp^u<{VCPr^tuR}t?X6tLiojyB807p9C&CVg6{d@P3rnDB6Q{C9L}ad`SK6eX>iH3i z6m^^xf>U&MT|gjxYxbh3l`M_8UR-HHk?DPNt4jXrT(fTO#nRk-b{ZLZ`V`TaboP&8 zDka&U!OX(xCK*PE>NT@pe(7gEWWsQz-j0P#(9XsjDNUJh3YSwJ5+l&I7fN=lza#@8 zo=y~(-R5J{@ClP0Bf^$-0l|*2V!%cP7>~@ZE=v_{N$2E&+0!%ae7^L7ta($5~QEhu>fJ*eK^~xIg@Px#c~R{2sDz zeZLU`&!2Ots9pMboMy8vpt~&+#%eI*Gds^S7gFjQoZ-_$O&hoa+HfldD1MEGx_2pW zLI3R86=CP*=}B*1XCDw_;s3w;^O;;6^@dY%2UQFuG2nVMk5NK9dg&0b`k?MhJb=Oj61m^ z0yH!(bKmZXZjJ`nEAJm!WPTCc%#kzyO;uld^<>IK;FPbJ@^ z$unPk=AD4^7G(z5rwhsbL(@_XC>?D<=@={Ojoe-(j9VgoJ=b$LR%#$*Rv=wuzutA= zyxFY(3_quey*sq?xRzo|x}@NbR?wl9I!(xjFbF6Eeb3c-h4OFCr0L(Z?f-1KPEg(c zv*oIC2`Z4Y%7&EN!xoeKmn0E5vl6*CMvq_2rEd8aDI$NhTreJzt>9m698eIiwAq0p z;#iepQ^9QB(3y&BhD4&aIF#DP)^^XS%ep6h0?G<`{pSI>fq~>ue2pGhV>^(kmcncI z?Jm`CcO^i1aU4&QNTz3!S5%}%9OjR7^;c)2Qu36LpFgi}FnL#=|5Z7YJl{1TEeEU9 zZqvTm68#2>li+1Fl4%L;?BN_8?gMXUFp>tVj0V|`*hIs265>by+`Z#aX81+}*d6%R>X|;zUfFpVhfr3llU4bB zXQ?R#ha5?gdbK*veDDqPdK-B8GKtnc=Kb%?yU!>qxC|;fje$7i!g%Qa5=uM8-uDn? zCYgGP$~M|MiU9+u&MuusvU9~4rDwR!^|~>@F>s=}2LZDwg_I|=>n;>%q{?W}ah%s* zS@=TH)=l0CI=M`Jf&6`*(yvHgK`GUIDkIpIx#()ARIHe8v2 zNhEX*9c77;u`VNad0sqxj+z~DDMocs}P25veZF2iHzEm#u2-xnw2>?m$bevxM~ z{KNGEz$2MPR2mg|+AMa6chK^*&%L~|I#w`iMT)T(W!D$Q9wG3`E%=rEjRtC3E7(f} ze+tN!F(}$vdWvL8|hMKvS z)7_sFFS~us>1Wc(8e$EKWQuOs7c=H6A(xk(1ZWCBA*j@l9sPNb;Y*;e$AXIvJfKQX zYq=#{pLj==?I{&|pz4&ad(J0E{{2%g9NOb%dtk|#iXTwG0CaN-#EV9!tv8=>SbQ<& zZJEQrUWAZW6VfcN=<2u9g=ERZ<`(bUgVb~@jA zjI6ldZ#lq=Hc`k}e}4Z`6f!0%J3kiky<9Dt4KY9djh4oj>*VLM44&h*-e|1#8+K04 z)mOJ6mb;rv_JG+pm_K@Yy1~&}NvZ2y5gu*PxyFgQHMu1QMRIP9I6DqlvHptqqxY8f zH3C>!ge`_^XdUg8_j>)uWi`+%X%8V)HHKhzk8r})2ltiaX9RiWc9|aEGHaiq#M&bg zlV5;q=fAYjGl8q8ipVqky?96BqE=12BUwGKVpI?Bb@EZ9Oyx4JHDF<3fdxWzuiH!{ z!&`vIrqX%Jrup49;3gz-TmxFF3kmVFvOh>u!KB%2kJl60>9Avh4#t$eXk;3_!$_5T%R_J2U^{a=2`PkJb? zG6rz5lIVy1^`6{+{j{q31_q3s#!2$u!S=Q*?~zD|5l;*xSrO7nTu%Hsxe5jSibjSq z@S)URCzX&RfLSpJC!6qd_`+)9cs=2wV49ynr0resN#a(16gp-!%7l(}#<8{MRw5}h>`)ZbL`+UY&zt>@i zy0jkjsFb)T{=w;lKR*;uAfRy2NE!Y?(*;yv0p=l&kF}b(=nmB+L~X7cSM7aC)cf($ z9eNGm!#cw?SVT066O_#`@uKv6Htzv~5VfOrXFCS3cM#0qG-P&r9pmM?r_AUcX%!=? z@cv!;xW5)dtZe2CzZr8yv8zs7n&`e zGuRgV>^cl1Fg!CmOVFpN_zYI-5{>Lu6m1W@N(^v|d1ql_dULeLW9&7auIzetJxhop zQ8vuPn#hA>F8%w%JL=~bFnLoB8;xdAM?E!ulxkFc)p>29?Wbx{tSGf4nSJG3R{Ps` zS6bxdqO)#WS3S(J>($gu`#3OFPZGzT8wlJZ%9JTUVv56-;BHt9LJqN1JtQ~H{ z(YOOul-ZQ3-j8|rG(Qw&&FrJ9TWmPAempBB_e3pAe-Si?Z%`ceX`!Xj+kK{*IdF>U zXZhvd45m_mNb9UaPMN%MjbH#4x-F=J zESk=`tJh^BSG!v;N!PqgcwJfiT;xzKP9CbBR%a)bRK1rJJgO)2eYG*c`{Pdo0NY=a0-o>yNoD1)=zt59}kE8puE4iZQ zwkHtyDi}!{?#}rdNR}XNuS*k0h##z8RQ_X|8C1S1x&@b2+&yw<<=MlS{32xrEt>X{ zoyp<(mw<_1-Y?$d%wgX(N#Ro1pUbZS&ylRe#81q(nrVYA$|~)Uf0eGA{?ByX#X8a! zmQ1|12;N!}t`NqQs_1Ds0I@znKS?dPsXM`{-_NU@L6T(mhBavFP7LjSU^Kuo< zVngyfcQ;|z4`FO8$(x;8yPd}fA+e80EPxE#M!6WD+ucjRUj0dD&{WfWuZ^#bOToc^ zQoMK7Hr7GMby<`kF2xgj9M1V+&1HFM$O_lqAAGkb*Dr=O%3iI#*09ohb$GM#Tk(gp zUjs5PBW)iy+Jce5(p!PWH}k$1hdd~Yw>WP!y@9z&LL7ANAgIu{+56AU4|wyr3TZmN zVtyc8JL}80O4%6T8kqTW_3@%JO3n9lsz!p}BrVAx5L9kbDM21$6Jx7x%m|BJ=&age z8ooFETC6pFXf@JTDEU15n*&lSkGr*tjEs+B7f}g~Z{M9A+)jGIeu`(vo+TB5yJAXA?vZccMSM!7?@%wz(=7*(^fA?iWnizbldsRPj zy7ScG-G2IadOSW88@#+J{tZE%d!K`=sv$)1sC~gBB@TA(` zZgU?_Q^<)W{S)s;@b4|WH3vw=D@l!c@GN+CxtCubSi9gbo!6*RvRN>=DBcqz_HxNY zGop7(fG+zJ_0u$sOor`>E?S!DKm)iv6Mk&Np8gD+aUc`37cYar(@9s1@EpR=BS#;Q zOYU1|1*gOo?AaU;AXz+pDTyC`;k2NWMA;pyr!jK0g*iK&Q9);~%%q!2#@J}nyNm{$ zVwc~TZ=#-->19^Ub;&F~<(yW$-txJ)!Q^%6NWZ+&!sCmyW+lkU&!$>sJSlmX`}_5} zUDG&*?NBZQzai6TnJlHufeD-SRl>xC#r!yvs8=uZA{f0NTnshO%}OAb9R0z?)e# z+IYof^*s6KE4Ts%=$l08zNpY`sc+l$o z#Br9ym@O6`EgDILT`kaOU)s*1H}xJftc@{rt5WLgc_!OcHAiKo>p=8qFq)vdCd3)X z-q)zB;jtp))ZAEpNT@CT(VoeJFf5)PeHMCJK@OGFs6LR(^ZVDD4PNbyu-bdy(kV+UTjJTwZrr{$ zPe^b7R9%fz@#ID_O0yg5C1&Cl#iF!>c4DA zul^(_VQfBT8xj&CH)yd_H4mM ziAQ4?^I{m8Va$mkBEh1|Ik{ot4iXVsG9R{;cMcDhus?igRLGlOlqhjk z=NSS2pp*Zw^UHtOzaCrGLraW%pazQO=F&J((ImkJ9R07ErKOs}?hCy@mLB?O5>Isv zVlgW{1x6l;^Z!wPAi2Z*PjxDiQtCg337`2lgJ zVPCHxeTI>?2Y@`5?P;r~8Iq&8_lEs+dhh9p03 z&AOJRm=DZmohW2avxM8o`U&L3acWrqNf|zGdm{q`AQay<+P{YkYF4`eDro;P(Azi`1AEr!&|BM9l8D_wtyyX)^bRCEsV^^2 zeWu|$ptOI+i~w?K`dp0(g!FTT61Zv`&IeikV?QLKPGH2U_^L;v@^<#AMta+;3x+*^b!<<$lwZ2#+6j8e~yjUf;_2Q4AD)yFhBG;J@d8#ib zH3vVQimekXim$72Qn;HmsQ>+#tWtTT1((Y4W_7YV{EYcJ`Z0ITX=F?_X&!-u(4Ra> z>XSN}d<;W44~LtN%594pYxS6n#d`!xee7SPdY=~z8`aO@C4`*j$}STO+POqs3QXti zhStszNVJPz4>a1xUQ+e`10xr`RTzsOyk3m1b>wSx9mfJLlaA*&R^QJ^UMRs40U2_R zAn>&5h;Oy1tfCfuF%Hr@n&XeX=+?l@S089Oa8_E+NLr5_tJh4NE39I}Spx#|19bad zd#iHP`!NeYn@q90Gj5C4d?;SC3zC98M8cVUno;pvip*j%6XicDP>lxF2UJNH55=diHAHiHv{NroI?i zV@>)OnczbK!7Vv-*zl#Mg_yt-SOgS*Zk(> zhDtqq)YjrwxkNV;1>T0^SK1zP-7PnyAD&o@#ZQvbWvhVa8M4dV9Z$g7UJ{WqYXac!+oa!xRBw5z4+N6#J z8=>y+B`r*SmJ+VQaBY70N4cN2h1wIbV2*Lrco)mtQcsVY$n(T2mKJFFEZPZx{AZ1W%U-2V-|+KUGh`@pYss%L zpRR*>7zZvOz~oo&c-tS6(s=e}(ur;cKKwv(KijT;_-g%&_w&V~IB+`T?bjNp%Fz~-++}yw=Y}&83y-_+3F?CS7Z=D z0_A=J@B~^7HPUW~4NtDjkE5*WWlJ^sCX(n~`y1!D*#CPmY2`nONuot8O4W8$*;&HL zwc|HP^AL+&i~*t3DRx-L9kYZ`tKVD4SmM6~Ecq@@OLY4zq692{cWLgY28lu+zPqhB zQh|G5WF0jt4=y9lJ1xod0$)Lc25Uw4?A+>=XF9w30m#t>MYBvQ=JeW-1cHZ$aWL0! zbUzoL{477_a_nfn!NPIFWl$0SE=xpx?^Ual=2-6T{WGDzr-fY}Qh(3p7>fB>6u+M@Kn~$&B3|L)cVlG#?@~m5 zU+_DK=~!iZOOXJ^XPV8#! z)z5qXaAoQ|sfQb%35h;uZyX;x_rEaNaHQ~ z>v}flvsT2dRZZ(d@><0dxX=79h%^?!(n{YJ=sZkCM;q6&f0vh)bW6%&!z*ws1&% zSd$sR)yikkKOeYyiAk|)C%@&zIhRCqTj5+QyTMxDP7|{wWDM zd-SMjq34hKCReJ0FVWCgAMEe#dxS9!Y>S5*jfh{lI`5~j=rd!HDs$QT5=PSvWIIS( zlD({gK5}3Tv#9c2hU3LWR0A&d#l&o-!M(LEI*geZ-^H8NZs2i6I`sENeAglUfwn&r zBZUfYoaZdvBWJw);o;hy*Y8ma5a!DMbn>$dR~#7b#8h*;=A-z-j4fsw!%Ys8%8pRc zICZC>AK&ghxv>>Pqg>FtOU*upv(uEf&}c9t=#|%1-a{KF)ROLw-O7nv=W$cqR=zmb z_W7-x1qDki%rnFFooZTg>+&YDD_&6pz$H@@vHq?(e1Z`{QN3c{46I+a$+oQzaWdF9 zK)Z_DBUa;BOCP@35J>6WQBV4i@OT=%A)NN;qiKyI^3ad|-h(_oiV58*3&CO9gvo5B zFyaO9gaRM_|APV^HoE@@1^lZ~z)n3qZAn+xGI1D)Wi<5LTZ3tT14_r z74Je}*O^NbDI}dQay6@g?7zP;3FO?6D}ule`R#8~ROe;BTwenX_VPz*l&d3)xXd~q z(_((kxTMhCi~>L9B2VnTSrH;~k(i`@+ImY_ln>h&on^JBj-Fnm&Cmd(pW;!U;G*N1 zwop&R{g&IfXV-BKI-Z`MBAFKT{FF6%Bnw4NOg-XoG)TL;TP za>pg%(z)0C+~VuFr`|jjE&JkcXJ34==qgT%S~Qi=lX1&Df3N~wauv5c(Kc*ALQ=(g zs1r4-hX?XUd%nzpo9F1ULU3pu_EOtAZL(tPdy!(#xENp&_OCa|-~3{Zzvm8u z!4N_79M2YrROAnzUBVAjvzp0NTX_SAwy7&Lq6c3+zafL1?<3=dWm{2-A0zX?3iiw8 z&*o}hwjrwhF6UPgwk$CJh3e%Zdh}37fJG(^SUFsg1`hffiPq9e3fZXII#jpM_ZE$I zf25|piG3VoA(_q)cF<9_7H$-*bHkKyckS!^ zsuWSsC$s~NSe|gVK0s8~@@J>x{TgdA~)G_yO|VBL%zD2J#ceWTDibT^%ewAP5ZXFbY#hjGgfAp z$7;?rYOL#QOcEjZlU}sSenMLn_N9Vo2ObE=7-`>V$>Y<@f@nkMrO3yq9lr4Pcg}BX^)LD@rPi2d7}>^< zNkNIa$ld4KiWDD0+`!_HCN)(^5;tr)aw;9noC=wdBKO=`EYKDU@nwWtNyTh!4s z?X9eMoR;-yQxR8qqNdHKG)W4v4*=S$*M#cEUKRpFHR!2`H2G8gd_KQ9o1)n?2YtKK z%V%9aMFrv2f250l03L+r+AH!LIfj+y4>*;~yv;$Py3}# zaVOg0S+_YyR@>|$-L25rEjz3qT1gLQ+pi4KeDWko97wz4O=0dp+Wq4qFX_GCooyZz zxb9A@T<+dBAJl@6n6U)9DkCbKfyD@WUBTmY0&wr5-?kkTIQ8JyEA_?+@w# zP-xCIV&-h;ptN_wDnqTG(0PyS55RH&M~7I$%wo#A%D@uL*bDYMZ<4Tuy=8+I6Pd87 zQ}%-&uD;>uvVcHnX0uZFv~8VIL-;B8c?pI*KPU*u%-d&f>j`EdA7!!R$8547W%POZ zM34fdoj7Za{&WK~X5vaP^($<*nGM$@Q=Q2dE5LTW{L%piyk^^FD3?7Cu6kYGosk%7 zpK)O42>{=C}S{RjpM$CsYQ4pe!1wR)Ol03QpeyPd->^mhAW89U` zNOT_6!S+Bfz}195)BUUbfop-d%eqKcu_=_XCrcy4g>b<*oFp;DWwu`lzKVFFQ6Vh|V0!)yNf!5hw_~Z+($tMz;OP8i&ZEx?AJ`Z&Q zvGaWV{4>*CDf_}+U`h&p2d!aXSdpKx1#3!o)iIxyBl8fcFjsV#4sa#SCrjkz( z!2a?>v8ljqVLkV)$o?_WUVk`dd6xj5{5o~9vGjd?eS{YjOdwl3VAqqbBVk}`Wvb@8 zhk41KHIZB}#K$Gqi7ySxLr@M1OfjJzF+lr19)oQEO}K(9rIe1bgE3 z;d1JbQXVX^+>u05(%qSEC-ew8PnLGX3Cq2sx;$9&1oK*yW4--bNsrC(!RK>nz(2Bq z{1pb}bF>WSlNJVRR^p`AW;WZC5th*4Ho3|M3^w>YQnRM`%Lju?@z+Rn;77;&X`m;` z_v&AIQPx6>F%x#i9=d3f_|1`|R&;+GmmVUWy~K4izDXTQd|De1gTPLh1V2IGVigrn zm&PnQMKV<*i|``VFu$6Z9Y;OlSJ{oplnKad0@Q*}^r-ut<6M1AYDK*J4^EZRVY>UQ z5@0)R6WPmwBMX#`e$^PRnY+LVFfow5^;PM!-=S@%1bb9s5uG9xlxJUl8Mm#e++uxz zu~MB4UJ1~76Lm5U+zT0n*Ltl42wZ+eHb`xc6<~1B9lI5f0PTx^ZZ_OTnbr!n)E}ak zG0j21;bPUBsRrCQ+6!`()0SSAdmPv+&XGyq#Ao}~gk6V}lFipS)gH!%Qffo3=##Q> z?|esF`wjQjqxK4L;pHQJOOh8gmwp=fnr=G!emNk}UU&FLoGBCe$W@`!E+k%HklvCPb33P*8}?utW{ki6JszHDHos$kVcq*vr2+t*F?K@H#pmZ zr#YfSpf*ggsoa+v7)ZitwemFyLk>A^TLl48BK2O(6tmw%1&eh}r}AAC0%qfOE#wpJ zbX?+o!dQ%@3XQiU8)VAtEoM+u1=r@+$Vpp3_>t?jcn9!lA(UsWTEoRPDq{0;r z_N@|S*jax}iF_nJ)3HgZE-a@(1-5(+LL>IwXR z9|k_`{Zt8rflI4)9Nwl*dr@3mx9Y0SY&!OjIp9kh3O0%8V-SY*_%p1%5UC8kyDi5Q z>cG-%0SKAag+aN8%U+^#ze@@V@580t(#A=n;L1Zf({s-cd3{ZwvA3K;t`v&5 znKoTX4})#xd+khJY7fcpao;^|o#P(2Us-9};g~1c>G=EU^@YAA|MRiSdEUI8;?XFf z@q##?kglC>=dZ`9L{{&-K)%}%6$Sxwu>F;USqkw@$-CkzszOBgqAV->Cr=7;@mm&E zRCluFmtyrr%Exxa{JJq9d^1xwOR#Ib`8p12TqjXfNx+>hA?diHbz&Cmd`cB)?Ro!7 zKgfbeSCZz=!=ASvlLzI4zGtd1g_ap-*(#ZggLKD6?bqG*rjcZs!&SUZuph>9SAtr4Q{LRRA>f)A>{`K-Cr%Z$~*C5}ZkAt_Cw%10MDi0hhN_Ffh?n`1+ zd049LBX3j?^x{S~(8@uF^78>TSMMJI3Vh6NV zOXAg&+Fgq8=9|w!>~SicpEh^7Y*x!D*CAtj<<}~Yuf29-x(OeU zbh%4-{2te4nTDiZ7F7VXtiPw;gOUv%DkPMv+2Tc|E3@@zsfjTS?WXqx*J8VfoAFty z{!8v3@1qz_30>b6EjjdAQXN7J%GPgamAHb+yWp2AK-%eA*r-x;T3nzxjxkEx=W{T`a>?ewB5)l1;F{B>XA zm-d#rROA*kVpvbi&t?E9zV7Gx(xYY3f{+slvd;AVcY3m?r@qfWX}nQVHiLe2H}|Pg zVD}UEq2@}8geiIG+v77t2_CnD`Ak8vi>W^rvo*ZV?3A9VD^+T|*w;%?t!IRd&TZyz z^mTIoM%{lo`E$=L)YPc#8rwT%-~AW}iJ9f-a3t^QS2*u{vFGB}e?l^;%2n10uVphi zjm88;ejC{cJ$n8icHKOZFr>~~ACe}2c3IE! zDS!Qq5vbI-21?r zFXcFwD8gUz<9VjI+2tCW3nC(*?aX@7`ZhM+dlIuUWBG3@=~{n*k}eSvCCi$n54Vbh z{xaWZ&BL>FBXQXHfoUf+AZlNR-yf)orURSS(@rrBK0``_h1&gww&U{;U^&NGvT`O_ zv3#~aLye~_u`|hY}mVadxZ+9$M2{Y`a<9ly@YLM?Q zmDESV{>}L4+M`~VjU`$olreIs(^u$a4+q~tK=39%LljmP_ji&yUF$zc>i#47AEK1E zp}u+)r?l9!Il~+fyy=kB=V5?7=_lCV;jfdK>_p0i~f?1ili$>4_bC1F+{+DSfcvaIZ z+y2WBpW?mgb9UrLezWU&Iap$bxm0}q{kwG+4U5s?k^W0VK<1iTzgAb&C8#A4Lb^TF+S2 z_6!L5tOuBIar}Q9$h@(M()kEGLR1K_uDzK_l;ZJ{mf@9W==gjz7G6B%RMV zOQ3&tey(V~(o8avtyUqiOu*W;$z&)Y;N>xYI^Ib-i-_TH|7F*C&V%gvS+f^qjg7L5 z0QUBigDfVmha$m_bxPcb_uRxEJtqmta=`ynf-e`S~?mbu3 z#B0`k&QA;+!2IU{%fLymOD(#p+9(lwVhql0oDcl;6@mbeGwy7?MI6f$5f_nszUuzz zpnELzwxA#D9ffD(C%OA$%ffcr;zwxOk;N*0h7KN2p%qBn0JdSte1E%IJ)IFJ=L0!- z@Li0~+uP|rTIKwlZHT*%1M254kG<{G<&F&yc#c+%U8Lfc4z<_`#?v|2p~t@?TLu{G z(wkl7!bV0H%(14a`3^gegzVQjA?W*q$&&mCOQ~jf)cf~0(Lf3!qC3CP0oXOJZ$Rco zJt5vESm;T*4=qA-SzVHe%?=Q>aUBuu2s_?c^VzUMIvqJ_ab@@E@&c+TserzkEe-sKTq>o|Z~{|lTvVWbrPccrc)Qodu1Ndg znRIZ{wMQm#Hl@y8OU?&0w_#Q<=z0vjJ2+VA!mGO(4V_EfO%Z{(>p zzF>?PZL1wg0In9E=7)bQKTYi^bc@l}YIlBdHw zl#1e)H_YqPrK_#e!qq!WPAZ5(;GPgln?V=(!5rqF!B$IRytkCxVu5+6sZDD597b2c zj~aV}xVa`Wb_*!7#C5|!JS3LTs4KL={8s1^%Cw!HNBNoZs^}XV^%#3xCVhEbU|E#DCc|3+n)f}jxD;F6>P9dG z2MrcvX6UNAEEa5u&z{2J2$IPQ^i;aZ8_(s|G`1ZjvC}+f_6yS6$QCX~O-Gd+B;`B2pf;{`Pq#X0$ zO4?u$otWAiNQd%{sGx4xwoe<|fn<8d8qd(C5uNz_nvJ|o^R}%Fv|^N#J8?=CTl~i_ zyIx+96n+nf+e~%D5qGO0F1D9kGi$Spn-&45$NZl_X6)x>o9RX?C#{tD|mXH|{WQ_Vvn`xl|B?J+zvgC!ZvjzGY= zKM3wj#(&(II>inrI?KTOdno@A<+9NkDG(KU`0Iao>+}DtKzjJjz}xuWTCo04mjsDR z>i?>?3kIvYv?jP3&l0c!r2xca68Fy0-!*v-z&95(-=%#L3Asw(cA;lra0TgF2aG6C zq#ZDdJ{$Y0eBSYIxeg?ZmOJb7`hTYA9J3{P*Tne~?5)pHLhxII=pdqP0}?^ha{sVx zWM*akSzYipC%FHuy3pVcF3o+P2O@Ovj(Jty;<&F&dG__UpVNXEA3;zT{i-f;5p$u*>_aU zMzJGw-VV4O9C0xr2G~D{S2r-kEAeyCl_?^{e786C>@1ZNx?fTf%_(kkF-r-IiwWDH+OgwBEFMhk}LZbigc*1tup{?Pr;*{L*0 zjVvO$3?B2qDX#=_O{+J$$oDIwt>(;yk%l@!@gozg&h37U%*H7kYnLE5z5%g%^;O;e zY~8w_wvNv1Dq+sw{NKu0ogSkvoqR^=Asxu^n?$pbV|+A+V>jCxaRN7kwrul=*^3bQPg(qBBWqdnwFs&M*8wMgtY=eM0wJ|2w-D z_vyBpaf>sXiKntXJo0Pr`Bcq|e3c=0%?tl&r;?}e?*yPTpD(C#teq(yj%eH6omf(= zXprZkRk9oKN!M~gt+J$Plk4WolyzrU;=PvMRws(w9YUr#^`$z0D|=wQr#RKQTp2U% zDZQwczQwvVwC7yn)S7Dd5ah($Sxzl~#q!m=A>)l<)*GVey`ou#7R572j0@F^QLl>$ z=G~T8@CBRCE+$WWMvs(SU9nfzYPGz~%>u15EL`Nfvr5!oq9rO$B%fd@XX)PF?`Fx zx@_KIWSbSIM?MU)Qg1Ys?%j;G!wP+OleD(>u|Av!C&v(Y<1vHVDI9SzwC+xbQeMsVa{*S1l<=}0qdzq5TJ7_CIb zdxG=PJvpsAi2Oqu`QrPM`=4yk+))->8~y)RdFLI~)S9kwjumMhj$)x&K}tZnf`EW@ zq)I5EO0NN_(jp>KEvWP+(yP=^Ll>mi07)P;0Wm;`Kmr7kyYZYkb7qz^>)yHl-TU{q zlC`q4_qX5o{hsIdY>KW6Sn6jcS_B`mOhG49N7Q7)(@aEUb~J*0md~YzuQu*)f5=IV z-No@ZkB;4(eJG#)wc%l+6h!IU*9wKCs_js zsZV&TWE8lq^BnoNQ`)rSsdNU!k~+SN*AA06p{TKUz8QcJ2wh@o03*){uc5GAadJjQvZ%d{dPC2nf}5* z-V0c{mh<;PY8n0dx-8J;!j1KAz7m=DuR?kI{Y02od7FIUY@Syz#*l}vz%IkN+_2cv zQH?nHC)~3^<+aeK54r4^KTQ5!&&S@?A}G>lOFEfw%-+~fCN1uT9_7W@2DpW>`lpbP zcf6aVoAI6akmGp|r7T-h%#bE=k6?B-sCXksTcuSjInwG6P2gwU{K)w=Zse?ZhF;@;a>}- z-%Tk)Mg^|rQHQ?t6{!|XPuB5I_iX{#vDr?&>nC?}AGmq6rV30+h;bhKj@tcnG^FI_ zo}+6mG%I)V_O&>Oov$0v1YIhLw#BT=E;;u+q#?s;P|w9D*@nt%W~Y zGelCG4AvX$-qhm-FkMFN{wPf=3i&!QQ zC_KC)L&ef&v`>9A=XuUFvtimTO+EEs+NDq8kGTFVr*Wi&jaTKAVA0y7FbmVmK&LKv z!*?Avc);M?zY$oA#J?tj@gM7T^YDxa4K+1vSWq^J{Dea9qJMS#RwKz zWQj|x+kd%^HgELc+DQBU;*I6cFPo3Od!Pi6X~4eXs-d< z3$j-+;L@v_GIbhC-|Ql8eZrhOsYf+b1g#{*BdZYrMteI~B7fS~7HmaDMO6Wb2!}9S z=YtH@k9aPo*TiO|g38H1^9-w*n2!7#k@pHsD;HE`CSZAOlArNnx-1#w+%E1nq{cBB zOM4C-JXq_|kpAEI`CrPpClWOHvYRf?(1~)Ah2Sc|SN#IsJyPig^Rx!cUO|9Whj@Nk zdlY+Hv2?oBPdje>m%DLMe4%gT*?^$B0V5*dw@c^Rp&Kt5|Dt*#UHl!F9L4k#hPQWp zs#uuf{y1`GHrSmByStlq_gefX4c?OJ(ytYVzJGT3d!w1^=UdbEisZqf10xm#0G^`=S&{03)FMcCFS^s6JdtPdmeVh<)7 zHA!;D-|XuM*f9z8ckQ2w%{1%*^$Z#jP$OvGn7=OLpC8~`fflJRxJP=mlB1Z?Hlhp7 zFCP=fFt z_JIsP=ri{$(rG-vshYbctDMT@X^hucH@f7y`+bp*mzN+q)%Kh2VY?(jUvVg3Q+&=q zSe9Hy8d_{q8Npz1?(fQ)eOv)kn)V?nY-e02FxJb_IQSrL%^5_wT z`@!_!79jEh(qj|t0SEn9(MS@w`6$XM38E<_usKf!GU zoGX70*ZY%YK&2Abg_H~V29NH%I%)s<#L3ajRtJ1`M+fXoTSiA@mB=xF&B^<;k+K_? zG&%_Va>E@p!eSm4F_FqaUZ2YLW<#$%vr+h6{a$p7(>7dh`#m9-58{5>EK) z=M;)2x3rrmY5rqGLUaA_KLVySr;Y)laT*$(BSkOUSS*pcH1DnOSVTE6vUH&WK5Aj> z&X}(&E0H-G33g=DM$tUjXA(_fl-)qR;7r5!2f%mSj0%|qFc#${a&iJ1RJdOtVRDdT zl42zActs~zEXj0#`4MnB<44(DwzjmqlpegdGFj_keTOvVi3+Bh0`B>D)9pxHL#Xsa zTsU(7YoLm3pfu&t#)IGoxlWDE+iQNX>>3K??!GN<{ni^UEywFy-o<$4_o~3p*ngT+ zW}_=$97rMV5JUFUi@Gus(BzHz*8Mgc_l+>4?~`yePkKrNw>g%oUYwM|W$`TYz`SB7 zEHP$yN(YMA1{a$(NC0t5)8M*z;%J=;SCE(l6q}l{I3mrGvF;}gcLTXdGj;gxB8xPx z$Inpj3Vi$$j+{;?5y}b==cSoq&Ir!nlE}VUjB4^%og~VLDU^=Ax;*jC>Y;zX(6w8~ zxMhHAzd=8K(b@d=uVmr`oP#ZkXZ#b+u^EnNtQT!wc5=UAZrXT*GYYibWP=&V57eQB z=Vtrspt1O)1TBk>@(TV9_4wz}Sbto}@bq+AMnQ%KM6n+3F#G}TY3jr=jF=CprBVVR z)i;*D7}loN&kuC^zJ>>|MOxjTcr(6>9%nccQqukZ*l(lECl5{Tk=puy;E0bL{rn;GC^ubVQRwA5j?bp zDHri6aXKAFBqCS|%X`}s6BFsutERT$^9T^BBWmWAdB_BIK#?$CNP4KW*5yIOrd;K8 zdIl*l!-yxfHbgrV~{oH%^R!x?_89L$1 z1wYtZ6Q_92FV#pQ_jLT0M9X<4UflNb4LsmPwx%(s;12Fk8w$5`OsJfd-#Ue56X=D# zGDFYiGcqDaWE`6$xI^BO=R59i^A*}|UVRB0x$w=8uP|@*+XU%=7 zQM@S>3u!);%16B%kDBZeDAH3o2=`p-BHGP;ll=}HqQJ3}mB5AiG zF54vmQx=lYdf~LBoU?V&k>c@zW?xB+_`#RhMl;@uTCJ2{>NOv-8#O9YJ2SAIzqRt?pxNy+X^0jKo`PP2zYIAAd`}>Xu zYy@*F^Xl}brX_YedPWq~^s$R13L!n8qMcJWvwHTuXGn_7^K(Tx(x#|bu- zd?l1Vf+OCyoX^d4a}*R<$g*cUW6+dQu$_Y%ESF8t&=~T$&DcpWD{;z$yB9dCiDoBn zVjc@0tgh@+yHFkzh?2{>HPd1?-n(tM`8_4!X6G`Ncj5*M8^aOnGvaQVAtsma@+WSl zyu3wn6{p{AB7eKr!MJ&awTpToW+0_gI=+H`-G!mMvFSHYJBCiwmJd?VHEZ`sd%P%xULTVXH^i`Hkr zH0>^>?7K`OIV-LM@9HNSxuR}O*Joq~WsGgrhhM}!bP(@glL^CfL@CP(uaDn++dN}kI7k4) zX0XD1W1YZu;CAO1lX`oHMYaSzGP~R=PffjD^6CwjAFt`8d#{Mu_I`jll0W{Gx!?6OyW^QS z1vt6zl~@KzYsT+LJw47>gAV1NwdbD2CEb;;!-n%rN)#iRB|+D={OTZ~>3Q~O-pQ;5$@YUM>=iV3(NWPfVg?V*C%SLx9>@+1Xtv+eSB>ZD zYRuOZ^J5)I(qBV5&tyckUaU-JNjty3mpGiC$}i zMql@MGl&w@TW|CjyKid^DU;|I8iyqI$z61)#aCMe4H)DW@ zBoYTyCPz;)bpVIQo1)vEj?StRBQl>nHDw)Z?aI~p80B0>Q_01-_0mikt5J`a7wxw< zie24mbh8UKH%jHK^ST`}(k$y00_bG9OC??^U8q>T zMJGP`57N(#y}gX$jDo3ezJ3NXmDDVLEyj-DM7LGK-41HUH+F>)!PnpRKbGhz%yRU2 zUMwO2BaWA}_Xmv2s$j-l3`Rv_ur*_F+s%_Hcmx@fv{QCXYV?jrPW36(Idq`` z_0Dw#xQz)6MjhOhbx-p0ej%GpL$hP6nu*3D0xFTpuzf;TEkKv6v;;ApH|PeZ|5GJ< z%+>w);ax4rCC}C}CXw`1Lh(oP=+9e^T%hRAT@0Yn6o0!0Z9HsB5=Vl!aVu>SPk3+q zQFZ^Vo(9(Z59{Q=*4l>^IStLbyZ@pT|39;wI6ebJr8k{6%GHuH6^Wkr3#i${|oW`tpWf5 literal 0 HcmV?d00001 From 2854c31f490d6b9a4ce88579bb07ef21e0c7cc1a Mon Sep 17 00:00:00 2001 From: VLG17 <41186174+VLG17@users.noreply.github.com> Date: Tue, 27 Oct 2020 09:20:07 +0200 Subject: [PATCH 005/486] add info about setting for Edge > 77 https://github.com/MicrosoftDocs/windows-itpro-docs/issues/8409 --- ...rosoft-defender-smartscreen-available-settings.md | 12 ++++++------ 1 file changed, 6 insertions(+), 6 deletions(-) diff --git a/windows/security/threat-protection/microsoft-defender-smartscreen/microsoft-defender-smartscreen-available-settings.md b/windows/security/threat-protection/microsoft-defender-smartscreen/microsoft-defender-smartscreen-available-settings.md index 263e076dda..e0ab6e4909 100644 --- a/windows/security/threat-protection/microsoft-defender-smartscreen/microsoft-defender-smartscreen-available-settings.md +++ b/windows/security/threat-protection/microsoft-defender-smartscreen/microsoft-defender-smartscreen-available-settings.md @@ -45,17 +45,17 @@ SmartScreen uses registry-based Administrative Template policy settings. For mor This policy setting is intended to prevent malicious content from affecting your user's devices when downloading executable content from the internet.

This setting does not protect against malicious content from USB devices, network shares or other non-internet sources.

Important: Using a trustworthy browser helps ensure that these protections work as expected.

-Windows 10, version 2004:
Administrative Templates\Windows Components\Windows Defender SmartScreen\Microsoft Edge\Configure Windows Defender SmartScreen

Windows 10, version 1703:
Administrative Templates\Windows Components\Windows Defender SmartScreen\Microsoft Edge\Configure Windows Defender SmartScreen

Windows 10, Version 1607 and earlier:
Administrative Templates\Windows Components\Microsoft Edge\Configure Windows SmartScreen +Windows 10, version 2004:
Administrative Templates\Windows Components\Windows Defender SmartScreen\Microsoft Edge\Configure Windows Defender SmartScreen (Microsoft Edge version 45 and earlier)

Administrative Templates\Microsoft Edge\SmartScreen settings\Configure Microsoft Defender SmartScreen (Microsoft Edge version 77 or later)

Windows 10, version 1703:
Administrative Templates\Windows Components\Windows Defender SmartScreen\Microsoft Edge\Configure Windows Defender SmartScreen (Microsoft Edge version 45 and earlier)

Administrative Templates\Microsoft Edge\SmartScreen settings\Configure Microsoft Defender SmartScreen (Microsoft Edge version 77 or later)

Windows 10, Version 1607 and earlier:
Administrative Templates\Windows Components\Microsoft Edge\Configure Windows SmartScreen Microsoft Edge on Windows 10 or later This policy setting turns on Microsoft Defender SmartScreen.

If you enable this setting, it turns on Microsoft Defender SmartScreen and your employees are unable to turn it off.

If you disable this setting, it turns off Microsoft Defender SmartScreen and your employees are unable to turn it on.

If you don't configure this setting, your employees can decide whether to use Microsoft Defender SmartScreen. -Windows 10, version 2004:
Administrative Templates\Windows Components\Windows Defender SmartScreen\Microsoft Edge\Prevent bypassing Windows Defender SmartScreen prompts for files

Windows 10, version 1703:
Administrative Templates\Windows Components\Windows Defender SmartScreen\Microsoft Edge\Prevent bypassing Windows Defender SmartScreen prompts for files

Windows 10, Version 1511 and 1607:
Administrative Templates\Windows Components\Microsoft Edge\Prevent bypassing Windows SmartScreen prompts for files +Windows 10, version 2004:
Administrative Templates\Windows Components\Windows Defender SmartScreen\Microsoft Edge\Prevent bypassing Windows Defender SmartScreen prompts for files (Microsoft Edge version 45 and earlier)

Administrative Templates\Microsoft Edge\SmartScreen settings\Prevent bypassing of Microsoft Defender SmartScreen warnings about downloads (Microsoft Edge version 77 or later)

Windows 10, version 1703:
Administrative Templates\Windows Components\Windows Defender SmartScreen\Microsoft Edge\Prevent bypassing Windows Defender SmartScreen prompts for files (Microsoft Edge version 45 and earlier)

Administrative Templates\Microsoft Edge\SmartScreen settings\Prevent bypassing of Microsoft Defender SmartScreen warnings about downloads (Microsoft Edge version 77 or later)

Windows 10, Version 1511 and 1607:
Administrative Templates\Windows Components\Microsoft Edge\Prevent bypassing Windows SmartScreen prompts for files Microsoft Edge on Windows 10, version 1511 or later This policy setting stops employees from bypassing the Microsoft Defender SmartScreen warnings about potentially malicious files.

If you enable this setting, it stops employees from bypassing the warning, stopping the file download.

If you disable or don't configure this setting, your employees can bypass the warnings and continue to download potentially malicious files. -Windows 10, version 2004:
Administrative Templates\Windows Components\Windows Defender SmartScreen\Microsoft Edge\Prevent bypassing Windows Defender SmartScreen prompts for sites

Windows 10, version 1703:
Administrative Templates\Windows Components\Windows Defender SmartScreen\Microsoft Edge\Prevent bypassing Windows Defender SmartScreen prompts for sites

Windows 10, Version 1511 and 1607:
Administrative Templates\Windows Components\Microsoft Edge\Prevent bypassing Windows SmartScreen prompts for sites +Windows 10, version 2004:
Administrative Templates\Windows Components\Windows Defender SmartScreen\Microsoft Edge\Prevent bypassing Windows Defender SmartScreen prompts for sites (Microsoft Edge version 45 and earlier)

Administrative Templates\Microsoft Edge\SmartScreen settings\Prevent bypassing Microsoft Defender SmartScreen prompts for sites (Microsoft Edge version 77 or later)

Windows 10, version 1703:
Administrative Templates\Windows Components\Windows Defender SmartScreen\Microsoft Edge\Prevent bypassing Windows Defender SmartScreen prompts for sites (Microsoft Edge version 45 and earlier)

Administrative Templates\Microsoft Edge\SmartScreen settings\Prevent bypassing Microsoft Defender SmartScreen prompts for sites (Microsoft Edge version 77 or later)

Windows 10, Version 1511 and 1607:
Administrative Templates\Windows Components\Microsoft Edge\Prevent bypassing Windows SmartScreen prompts for sites Microsoft Edge on Windows 10, version 1511 or later This policy setting stops employees from bypassing the Microsoft Defender SmartScreen warnings about potentially malicious sites.

If you enable this setting, it stops employees from bypassing the warning, stopping them from going to the site.

If you disable or don't configure this setting, your employees can bypass the warnings and continue to visit a potentially malicious site. @@ -169,15 +169,15 @@ To better help you protect your organization, we recommend turning on and using Recommendation -Administrative Templates\Windows Components\Microsoft Edge\Configure Windows Defender SmartScreen +Administrative Templates\Windows Components\Microsoft Edge\Configure Windows Defender SmartScreen (Microsoft Edge version 45 and earlier)

Administrative Templates\Microsoft Edge\SmartScreen settings\Configure Microsoft Defender SmartScreen (Microsoft Edge version 77 or later) Enable. Turns on Microsoft Defender SmartScreen. -Administrative Templates\Windows Components\Microsoft Edge\Prevent bypassing Windows Defender SmartScreen prompts for sites +Administrative Templates\Windows Components\Microsoft Edge\Prevent bypassing Windows Defender SmartScreen prompts for sites (Microsoft Edge version 45 and earlier)

Administrative Templates\Microsoft Edge\SmartScreen settings\Prevent bypassing Windows Defender SmartScreen prompts for sites (Microsoft Edge version 77 or later) Enable. Stops employees from ignoring warning messages and continuing to a potentially malicious website. -Administrative Templates\Windows Components\Microsoft Edge\Prevent bypassing Windows Defender SmartScreen prompts for files +Administrative Templates\Windows Components\Microsoft Edge\Prevent bypassing Windows Defender SmartScreen prompts for files (Microsoft Edge version 45 and earlier)

d^+$+@B z2)uz-?F5v{f=|00)Ds+kK9n9iv7N)Rr~%nO(pDcgy3A)utupRzUW$_{6r zr=tCtv$qg%(TVnwCk@)Qq$De!xch;#b1zXLYQ zg5rK~)5Xmx@Gwr1@;N^)*VByKb2%73%Bf0G(Wh9oJfP&a|A!jFeoS7zzEH%Kd_r=& zjx*fQC3qp)O6$Cti1ydq^@Bx_p!Hf@j6;q0@17$&0WOStPt0p%b+Cg}mtFMF-j5a9 zV$|uRzq`p8YZILI7d>Nln8aAc!s4bpFP{qEc-ffmJgy5mF!$MRx#bKO4`-|1ad^kx zokRq)j68NPV*_Ij?WY3-c3Dwe5Pa6(`FXk71@Tb0C!EWA4?&B-?b!6Q0+`kuu|YY{ z4+0LorfyGXi-8{9vQxF1l=AXn`CJIxd8wA-xizfDT0hEJL~h)}OS~En`-LVhGck)K zztg1$@qvfj%)#L7MvYqM!8(c6e&QyV|`)H zZKN0TBVm8h3%;tXQ2zcfrJyA651)Q4t6&b}M}!E-)5LoN3sA_MsN^d&#rXEmmc$H% zb0q|6BF43Oj>AZmKI&k_G0IkpOeK=n%48b#CYMKG3{M#i4M)r>tkjm87Q0ZE@?k7w z)bw2#-<&#)(X#n)P&%8PZww{@Q`!LLBP2viqgRd58Ix8hLjJS$b>Vw6v*f)-?Zf8s3?Q&eFJS?lBI*d{xvr@Pu5EK%W`)u_RlF(7@4uv>Y9r`z? z(C3DKQPo?r{GzG8jNu*I^O`6lqprhVu$!KopA@kK{)4_xGM0RUV&5vc56+!EXXl$T zJ-AiUHU!YUUK(*-ihM)^iK(Ykv=9g9apn5PTJO619@z-4eYaF-KscnrBl{X^hm0mK zlB!FG%>69H!A@EkYPQCauvznFCIkIsv;b3bdezOv@nJP)+kgZ6TBTd?K7iyyu+9UU zDewHHX@quj>9AoP!s!A!;c9siyA%DYy=7q*J!UtXB!fChd$OCWLoxcB7ObJ*aC#%` zp8fcKekp_XR@Wf=2Pz5*%Ja*v#Y80`=iest@wA5D-}|1xYoV77>*_|~qoO|JVFT$^ zM=Kqnn{|C9&mQ-P&&CodmG`~HovqjiS!|x`{cxR0@Ya$aX^zZx(?ahugr*Zl3^3pH zU<1HyMOh46F~5m}JC-ef;+rtxrt^xJ(Sd1cHV)P)HYe!A^A#joYZ(7y!FQ+OO}G{1 z_0M#h-6xz5`=jkFoYacv!%G5x+`0M}*X1W|SIQu8hCNbn_sFcDj-YEChXJfD0q8ob zfzM$W;f8FO?$v#hGB-WC0~!^EspmVf)Cl6XD1=p~oj}!cJ^oEPLn3cKLW6gwI$}nN zo?$Mz?{H{RQ1*W^dQvmOSHeb$dIm3+(-AZyJM~1~d(d(dv3@P~_n-UYm-E6jTli~Z zi+s*Ktf0TJmdypLM{x#tgG)=dw6M~y#9{3)oJUGDk<4rXrl&U+PsZF`=`g(q$*6__ z_Qw+`^VU-redXOe*qv8eg%V1PMh)d>$8_MgdEZIt!~ zY07R{K79_(*bmx2$f0fMOy!!d<^PbQTEh4-M;6yK)~O{`1`Q}b$~!p7+Bp9 z7lNiVWxI`rw5aVu7&V|No5~$4TU&)BR?IQgfwTD7wgNd+sSmV_Vn#R-h8UGSvSsx9 zg(&)a_p6ZAte10Bgx_lVilb+oy!mn2+{r&rM+#a<`gqnN(eA=T9l!-4WKI};ZyY9H zha;df6!SH}*zhtcbDN{%k`wb>tsf2c2zCmJ_EQqp%6+}~DkThCVT$eEU!QWjyDD5D4{%b}`9hII$h%tcuiM=x;5WE36>8sj zL^fQ$QHEnNL4c4hPz=px%vCQgEesiz=r}0M6b99cT$#UgY6q&&PMreHRz$+EEW$XNu~;2XavSJ6|o|Tsu&??Z3Maw!1nQgqs`EDH#?H- z$(u(pJvMf>RG##IS6J+d;k=B9X0~NY6yFC8EiElM%^}PHeP~I`PjRJNu=iWNk_0CE zvhz8ytdhKfk_Z{eke2UVF#@%9adR+Qi-dVV)p-pC6&)=Fazq}w%r*}4va8bNhgUuS zw}Q=#Ama1--MC7e;$!i`q_WeNB9p~MW>%e_qXQ#%sS=U+!iad`NF9aU&{L;->E(OmIL;i zeF;;1Bj1Wrbho&OYIT1cxR6vqo%vE37^59}84W9-JpreL|H*Nn-l;76{d^mfF!Z~q z0-ScPrB`4e(06!}b*Yv=MnDQv@&NQ_Nf;L;G+N#DoJ)W-5}#vtggpnXTXgYPN|849 z=4>RLOU_!g^z4yNuXX&loQs3=?BU=9=4*oZEwTyJnwjI5D`_U9?qeQb?AUQ5kd>SE z*gBnei@E8WzxiIqzcMzaW&~A^6pU6~Og49dDKpIJqaf!&IJ<&9Ll7;V-b6Q9V&E{V zCJIasVSj{%H1=qG3-)c(_CF=>q~-yye1O?7hfB1dtY(`E?%1&!9mxTZ0$FYR#Y$X- zcY+z}pl>hO=j`5wE_)=|?w>_;K$o|%DvZwf8=YL7sL)IV#7TZ+Z;!q^z@Nj#dU{RF1Hnz3;Ah|E3Th+$Y+BZv{ zVh*(46WjmI#^_(gG2-==%2C1GS!KoUEZXepa#Rc^MkLWtke?j!d#lH< zN~-=L=;7+6g1vBm$Xw5x!@V;30v@E=ri#?G!?ZW>-XMpW5}q$BstI;Gk00E*C*qboikgf2@gm7U%dTebfjU! zwhIOwyJOqxj&0kvZQHhO8y(xWZFFp7s-NebnQvxmt^H&FOjRXWb>qT`<1V{-#jefn zLgSpZJ@pW!Z`~(HR#h}sC>BX!X}(OQ54&^fuc7b1ilVJnI)uZWsx zH^%3Y=vL;Dku((yDN61_I2fHg3T4|mj907x5mD!U(()kEdnjYMd}Eu9o$U9>Wi1Khk&NbPZL#K57L=4d z$(2m#B^I37 za=?t{?G4L(!g)0U%r!V|Hu)+IoK|ALQDXq1B>l&D;6>-X*lM|G8p8J` zcl(g%i=Az4eq(cXyC(%ADLrH z?A`OzJ@(m^4|gg|W$zZ!MQ4Rb6P%>aMc6apmVVgh)p^_Ow0pxwVYcW+G>(~I4uB-l zgMl3wB}In1wdQaLJXy6CzarN{ORm$+)>Q3LrZ(2E>DXd;Epe9J z%Z~2N*^B!MwNrtS$>znbT z;IH^nor!Mx7kSTiL7K-=XBMt@2MRQE_Zlq8Xf}QhUruEb?>+fjS6al2Ai&)? zIRlK{g0iX_dG~?#XN9Zc=*u_u&_^o+T$lA$@x-w5y%?1#R_c z=J@Hn{;WUm&-D1-3jFa<>|BcaeVA%I)T#O}R~TK%=zlJ0#7*%*-{&I9)}0Y=e&6Px zpJCgda>2d3ObDroKJ0Ub69g==_-f1hqR8W$ieK3KLI998f3uP!G*c8z5amVl$@q+sfkAt@v)Q>7bqEM0FeKv{-QJck$ zQtt~IO;S@u0i)TrH(FjiX9>^7(JqB^AZpMc#<$o|IMV*e*{<5{{`Tw5ea4xS#TH|` z4I+u5{)f-3gAG|MEYx3fDa<-@+)WML(C_3mcLw!BBE^!nBH3MWzuiZo)57y_Iz|gM%KTHwSA^lRk4BE{ z^8XBsqaGDA7P?-oCfYeYvaK#Ya$bLn>n=`!Mo=I^3*BG9!^swltmix zMxM5!%oa#!sq%{smm11Y7_3}DpisFSq5+f8?>$2fH9Sc>W7jlC(HhZsJwaVdQ`At> zBB7Y_YhHoy(lHkQy_s|55VT}+F``}G$3aK;`w$V+4}^UwpD7C-|zAMdxnzF)l6M@)b`VnKM& zr&HPmNv)6S&`Dxo%B%#XZPQEU0CNkEP*F$pj~P@=Nu~j^6byQ=oaJl??}k3-#^HsQlc}VDkY(V z%i#G)7ui>sQFdq>A%@GlrmDL!`KP!X`Xs;Ox)qrodYfnLVrwZwNO85@CO_C3KSHg4 z5W6i6k)hD`IfZ{B1zxj@rrfk=`Wt8cL!^oLd;JP}V()X~l(ZH;r|s!@cCKc2@)b*poG`m`E5m z5sxLMQpF1QbX9Tk2>554{5_ggI*^B@pHKh`^6YSJIy!IPJE`!!e2qtMoJzzSng&yR zQvMZF(MZM7??CN076u0Sl37j7%y3eo<MG>Krg@Hu~4N74k*d`i7rxktCP{ll^fM zsm%+-sVz4Sr8pUlcR-~BL1Q|BoOcM*n$CWPjPB!kDStjD&?DhCSQV*f+VB71Y;vTx zT8_9J@Zxi~I5 z1PzB;aTu-n>=>@n$;wLdx>|!c2c8a`jFO;wspe$qepH%YUd&6}0@7|0vCc3PAC;h$ za{d8=q$$trGSCnh8Z&skZM?pr8453@iG=_OFS%AX$JPzC9BugebZ^^xMY=NItY5FJqIhI zi#2W6p|$w_#XZrhq)PMkmyzIxI>unh2f{5W>U-W;A)ZgbWWH|Jo6~hLtVk&#jXX&n zRXyp>0e;hTR-J}27eZSW(ga2bnks^v82u#uLAfhe$~BF>S4h3L8iijp2Hwpefgy4j zU6RxbI9m9`{#6Q0nB!S^wMvk1+uBfZrzYc2Hy|65v~hJ+p+K4^c2c2V=1?*S6$d!` zbIyd40vPE5cZh^aTiu^6x38K4REb5>AKE#ax;LiAOp4`!wjL%Gk%8qW9X{_F5p@N{ zo<0;Qkw2e=31eMmNs&Rk8dab{NOIn9Oe0K!2{$jwNO3YA_f>3ty+${8$d-bD@xc)( z6(u7T6$eZyVX{D?!}~}HiSDKyBZhQN*DD-O7n;=f$ZHP457ylRNdFN&Kw7YspDd9Q z1=`0DchW!CO}rC&pZ<8Hzq~lpRI2$euf^&R<4NI+Dc++E$1iqMzZxeQUc-$b>csV6 zBNI`UIsET4o4kUp_=pF%A+CgnJ&%>vW5%SG9s5=0WgI(UBX?r$3ogx}BF%9fQ5a#@ zNm!H4accK?;gle1!~_9i*cMqcU1JEMxFsCQt-lEEPOG3t>gOWu)h zZMN^EQGUQ09DtUA4mO?1advbhMgzpAuyEMy@(f2}V8H`rN(GC9`ojY)$!Yv1$oH>H z;PFcN2!M>vINn7fB=3fsA*Q1r(Ys|`m$2_I1dWip>QwR3{$kOLd%Mc@o+OwR^?7?H zqB_Cj%23c##4ni{txybzHH~gmW}I6}kJGUs@m36Yeox4;?L>DDYitYIOULw3UMTga z%BPX+7Ku4@Qra($B7a!vWz|9hl!VAY-DLmVI--xk;KZ2|M>ZT=TiZ@pKowA2K|!Iz zLwaPA93;&4J3>=2>{3-L#~IdJoc)DM6(4_j|k;?ek9I zFdNr`>nL~Y+)!AkrRHzSALGh}5|MNd^%!|=0pG}E3+KJJ#+Kdn|!WbUZ7b&@y#znIfi%(7ACAeb}WZ#O*&UO zrKuDmS#(9_$6ZF0lWALy8ix}vg)pYp>*eyV2y=N^?p>eLNBAQ&DaFxvVz7><$cSc3 z-IvmMtu52j!`2EtB^8;ufr^!?I-HFkB2adAe}au6T9h8_bQ0ZJs)Tpsd9)unV>Q?) zXWQhT?d|5?>{@Q@d@Xm50FI&4I#|mQ1ayMeafvw4sKvrKhg*?khrFf!Z%gN)@RQnh`d{Nk(c$C)!tSyT8+|0SV(@Ud#_OtvUDvze4_G$x-^nC@X0i!D7l znzCK@L<$NM6?>mDM^-Z45HwGYApVG2X|$Z)hqX8h(o!tu`~tR%YJDQ=|67;${eye~ z4R3+T@PsoImlu_>IXg0yMcXq-wuLZT6W|<~v~9yPDcr&h;gvffz{G(xPQLKd#mI;% zHJJhZh{X(Vc|wv%B&dbYJAY^`CI*_t`fF~;xTu=R~K>)##S;r`4N2h_Y3 z+`GTKSE%cE$w#r%-MZO2zi+sbI!>*zj#KVjzX*}-q69`PALgN=@((kn0V zUlYfRQKCq_wPpdFQK{m1chsZQS}l9$PZFR2RYgJmT;RpcP4XKj%Wj zL@U5g5Hk4Kv(3@sJ74vjbSh{&5w{oZQ&t!Dk;vH2E;F{Sh1Mtbm(|!%neM|=co8kX zdL%1z(D9!JnNa-8MDe)XszYv;hK@~-ym+z4B3^*>8OVhYf6llzBGr;H_ zc0K0@N}vaDPf$3rr%f7@Q88gjnYmPG14DSr|22}sY5`rmf6BHpz-aoH)Z1l6m7xk0 zE?j(P7X&DSEcF)u8V&M^8c^h#>e|x6fKH^aaQKjtimHjv?Rq)ZM;#yPf5K2@86hDc z2Z?ub%=o2)TAuXPx|jbv3-n4fz`caX{913-1$zYLzZ?YB-2dQ=&93txnq*%qr;)O%K0ELK3h=(HI8EkAQ-}#8#F#qSK#QzPSNucZ9P-K&r9f>FuXWZ1TvU}>-BzKoLPqf%D$rUNKdX27^ z_{3|Y_>#w((Xj*x8`^82uO0}#7fypEK(7P`AiM&<#*a{#1H}Hn)>V>r+>yIObZjs?sP7uYrJ|iB?D{ex*C;DuR1UX9SFQHPyVE z8O~TS{k=xVWyyOF3M79Hg&W_4`Oc#!`=CWq@xEK=>eX$RB0~-rB4Oa7AcAt|!qdHJ zf=~tooMbgprf$dd|63j^cQj%aaSnle0% zZ5VQXtRKg;FB_?@v;hAN;cV}`{swl zvB~+}7MX2YndT(9c5aq`8k61^rP@|%=(Ua(JMFjR2vUnavm~kPWSReD;+t`HG^SLE z`3!0z6%K`)pgK)F{6yS+W?!Jz#3si;2#~BnGAK661RPrl9OkF8AcEL0nM_(%Zev0(}Uxz5X z3bcPhKVsOrf@Z8D$xp>HCE!x6ak&ym>Y=vhT#CoDbv1*+g;%{NW!&`Eyt<_FDw(}h ziL{EPTpU7mLB)E&b$u|W*ny|r=n|C?$LO`gHsMeM2}GquqNI4#z^v0tXzspT%+VCAP8`WDUuZN0r`1SUHg75#w%?6m*rxFYp52%JXI3a9R-Oj^? z5e#N1E5gi{pa9ns`QIr7EGWcigYG4Z_8o$c-wEE4HGf5bCE#bRA>XjM_`~Smj@peN z1otSju>wB*-$U7ctN5=QPAU38yfo;)4h5s?@GA873hS3w;7t;v+|OpD1N@=}3$jvH#j@lIyElQE2jRdLarZ3X_f?9A!h z$X~S<`FgvHk%{StpAaGAx<=++`f;EL$&CF3t5Z``^PgrWk2ZSqqq#}LIYy(O<^IN+ z!XXWss&ME#a_!#zgWb`_cYs#>*lPQAkPZp!_ZX@6`;)beQ2tz170oSpr3azn=(viD z3|V_fHSI&05^AMNG!udF0{3=_UGIN$7AEV{Fz$`k)QiRK-?%!TI zM#Fpep4uM}HI7f~PRzEud0%L>b)lw!BAh9g`<)N~QQfCEYsM6T;{Ye-5LOV@gRUSW z0}n7t^G4*mWx0ncxSfgb_c8+*;B|%l*T%&x^+X*FfI)6U1Mx)p`Fx&^34|{FdPw^# zWPRGvUnEmM+tr#3@_VhvfD;5a^QPJqYs%<-^k8}O;T-jNv?P)M5ZV~1PaR#Ctm-}M#Au%d;J2CGtr}9kg1H;wXLaS5zo=%5pwVFbQ*kuYUqXZjAL&1 zP-EfKR2R91`&vB^Vy6sT2JY0J<%Q(-OSEW;PsocgFy;5nAC9(XQf^Cpp1ra7Qg2*M z`WJ1`hyaSRkcL`|NmYN0WOMSc%Oai+EMNRuRC#|P9>U!dM@M3Nj zB5ELbMWb%PXXxPJ;IFQDaLGKeFl1rzmNw0~;&^!LeZM!Y$?KtkNUYa<4B};xfRMGT z4hx5t;Y}N|m&$hYTF>e8EvD`N0;@V2D%7-xL{I_UAB~NE2AA&d-<;iV)n%Qz$FZJk zgJamv@9XuH08-Y+H15@B3@(;WuC!b)vFc1p(rG~z>~mVrD(~!VCun^n>BB~RvWh7y z1#ZRo=&aI5=pDt)!lrj$-g~%JM2;VDBCSYc9|s+3c>N*rcsh16f&&s~Cq#v>s)* z!7oQoJcL0NP}r0}#kiv?i2|ZcHu$5bzfL~UQ4wr2*oR9Y%9)>-SbpRNl??_c183*U z{z8nQFCn3+Kjwq{T^<{0H%sWH1+E#U>{+t!}e7i+ls-I5waoj?B zpO@qB`FYFNDyTHKG@GSF#KmnsHtn8O&sNi(M|^yRLFL#%9y+E4O*aiMmnU+E-b)DF zteclxVPK%(=8~1!yK^I3ry~@TTE#d}nCF|c4sz4w;ouz{Lf^x2!VDEhw7P}0*>nfK z|55iw?95?Q@s*;B7R&|DsnTWuL9X#CPz4Js$nCZHX@9uE(()m>!4h8A8zMypXnLHO z>OcWo?d02`5-mJUxmnE8TUONy8DV(k%GM#z2A2tCaDimNhOqL&5%dZ1{!taW(DgdFcvAf>CGHsDK6Oyzv+JDqAa?}7#Q7H{`xoul2zt3FvQ zs6+v7u;o!On1t)_lScv+d*M`(%PyH}s9$D6KJA?Ne&dTEpx9t4$BMrZx!Ncbka&?h z(gn3VZFF$z+1DGizncQJXspnzw&!<(U{!MzW2}c9+^wn#8nC*hg(*cTKqN}a2hAKe z_-XyjER1ouVZTL2t{|vFj_;NxJDm1EH=aR^xw+JR-eKL6hmgYj+OJIS{g|l}`qxO_ zs&_$>D>Rmj2{`C3kZVqO^o|S3pKC9+-z1=|Qh!usddO2zA*g3|y7C@tLH`&hDHE|G zHi(nuRbyT7O7joS-E8{C_!vB~&Ql+WJ=gSq)Rgb*<8jB|p{2K6c6`2Cy?sh4CPh^s zII;r+hnBKxzJ~0d+MZ$es9JE3m7X~?gd9-uy}R|&eNA6Ukui+L<33wZ{(fvms!-(7 zli>y;>h^;+3!Tw7T=gKSEM+%io%wEzP@hx0+bY<5p}X2t$zNOS7vq6?R*1Z|W@0t3 zzXmodsd-uZHyV(_X#uh%>%Q2PE(htQe3IV>)qG1yVMg`Vd*ty|;3#DMd$?*ect>I_ouZ!*8iSPNP#jBHAGdF;nU+tGT{9W;_|7Emui1 zJ*LX|wkWBYOUN|)L{q;k>+kN@2R|dFo+`P(n+>sQRdvnydtgm@yH?N_(=3uz!Lf$G z^ZIy4_u}~YETM2Q1B6@7N^lM97Jh!i({-7s+kNVdZPc`b_II&iA!SmtsR=V4Zo}v% zDkmqm8jmeR%;dY3clJg0F1gnES!QO4C!+4Piy#Cwa4{ZehRnJfZTp-_Qz>;;1Fy@BRy}dy^UI`3zi3#|0Ic4cFJksc60r010A>KV5#?)$19@?#gp_ zvu!En^8%Sg2FKkzbwhh+kPNU@J~mU=Z7*?p7lKJ}iK^0zx8JC)y{;b8EaO&|RqMW7 zFkgC&66@`-IqMJRypLDvzOOswRt=p;{X*T}4GEIG~T79ax z*otQ@XMd;tTN2n0QM8%D-CgG#oG6RT8(PSDeZ}6s7*)MFMeG&Gb%r+=`BIW8+Zkf9 za5@F*)k*B{(E?w~;>7D>ZHlmvRbstU@h6PYciy(=IHL_Xbl4p}r^U?Ubh_mg%DXy% zHbY$4dN_Jv2gzf#HCiAe}MOJY#tE6Pxb2Etl@Z<5YWW=Q9#!}bY;N7wc{@Ig~ zPU%-xyM+b<(RnJ!$j$U(?Le&UJea(ko}8~*FreoL^gXK{LE~Xv zlOms_tgN?D2gA{1;$D`KWhh$v3quMuS(d9(S7152e@k5PsAR~>R+w>yPrJRjRB^){ z-G+pNgB{GO$K9*C{JYLs$A`~zu*5l%C)Q1qbumET5(*h;B+QbYC<`9uP1cUVdhfS1 zqf58r>aF5$!;LmK^MxkS7boobw&2J}!<6$&K4R1zxeJXLPc=W3G~;0e2YV-uf(o!$ zvVf7OLCtr_V(~ath*@WkO$E208s_u#pE^v++j^+6hy193yd_80nYyTsCT7Urf!uWd2 zEb}v1q|)uTkB?I2a<%YvE+s+^S3@G2tQ3*BkN~CL@6(%FIU3`-G&y-vqVNERE4gP} z(U=960r>Gi7ReF;qtvY@0H_7RD?3Nz|t`n*kzZ@W)8h?8@p9qM&9Wh%j zA3?67Kr2TowA*a8Z+Y&|Y-MV?J*PmSAE? z@5_rAqPjl@y9-tz)qi?xvSh{QaNk$TAWD)e>0cWd`#EguZ4LdE0$IuP`d4R{9v5#Q z>E6##mn#MeK?Q6Z#05>$+Q(>|-1!>2|o+bq=Ea zM!#w%wz4!wGUHT_ZEyF^kUPbBfQF~R(a^br)kV#yfMJ8gGcKcVig2BUv%kkgcpTJ! zDZN*kUf-BC&Te3Q^pUqa*vbtvR?PYy#e;TP-AY+Hu^unIg>y1oG70~**=@Q5$(nk4 z7}yAUAxbA9L*;4rKDk|%azOmva22KI=DYB726~z`d%E^Nfm-Us5Qk@rReP%(Zq{n+{<6W6zVbA9<+<^9lb=wj3=4 z&CI9P(l`AZ|FKK*xb(W~-eJS*-bw%YM0yQu8cmy2v(2j8U?~zid{;tHfCj!SyZzZX z!uaQ)yX<(z1&j;t)Ptu&@(>dJyAZwJhg(KV=3-^+*=pFP0DNB-9H2PBw$6Ow;oq@e zE4(A*lJ6#sEx0EqBXow$?A^L=o|JlWz6e{X@vaw}&L<{lBZKy*R6W+adaJ!IuULl2 z5wUkN7|m4AD_V|R$jqQa;d{bm(o(naI8Ack#SVBoS*=Fl0wVlsft%zx-df95n&;;S znYRs03|?kun*7G3uIDJVl54gfAu}msIv#MjHfnIvLCzl&7tz3(PgM&eJXSslm)IZhS*2BLa>M>#B2tY_eLqqHK`Q%_{Pghgn zyfWzq4n*#)O4WNyjQt+Kzv@(m=H(p=G6pB_y%U;}#XLR_!j>WKG;R>^&Ha5q4vUMF z1LA1%@|4kb`;;A4{`Y6Pl$-J9K8)K~>N^O_W}o!hEA4~;S1ETsWj5Wqu3ak4HG46426oCQfUi^ z1Zlumff?1A`QBcCPacAC*X3FUeMoQ&8-Cq zV@8aa%mQv=LnPXfxB7;xBGy*r(u&F?s7VqiC~Ei)LKzxr-0ql^vx|AjD!^@ZKb)_qYc0h;OFF#%}YD|^UlhcW0A?$#4lKc4L-4c6bCN9ppqbee}YpX|%hbNLc_=a|+! z5jc(;*I!CZ!5r+k>Y%L_&#oE2=O1AIJOSTQVOpT``U+YiwU|eIEni0%;Bp}$p`)Td z0b&TIorKHnS}q9h=R|!EyA^p7G>E~)H{@lz(;E+AJRgurI!iS{7q!-TGn$DCR5)Ru zCd27_-j^-N4D1F)5&Phx%_1#JojtyPy;*(zkE-9)#a@=7d#6#aJK+aRER(w}OageY z6fmH*=C?@YfEX^ItoQqOONdkobPy~HE;9RtKQb7WI29-faO{kNlAjGlH2*_|8VGW;;VKoD?En=XQyip^G z0;W3I{td~UuvaJ0HtvUx1hDbJgI%gIHgjw7j%$+-MV2^rKSxybuM$0bgQ?9684}*d z$B$$VRZ{bSWPd`09|qk8ciYmronJR|b7r%|s{&tjFf8DyJoX!S%VF)R&D0#$LUo|= zZ{W&ZC{lNt%;YY`|AHkEdD`a)rq13yn9kQL(BwiiD6pEz4!a!aW*9)mw0y+_G;%sX z5!-F+b;u>K`Sag}oNX!K>^l?$*6dDlsiOcV0uG>K#eFj!;%(Y)b9Y>8m;iT_OQ%_$ z>^tm}XyOw7#yEmNFm2~_-h=MO?bn))4QiYWDOxuO?|jN^P(V|eVtumY^+mj zV(|8E?i}qYl$h6XHSZ$%^nnGU$97Ijb!3cDgXQatZR>xNB7eoENqMMm=60-nCwCp~ zzA|WI`viV6sJfP0n(+QvJ~dq0Fndfen&PDBy0BG*STN|iclW~zEs!3Jgr_BIpv~c^ zp|KIB{-Tua|6i3K`F>CyfE4-!v_^o-9~FP}fSkswJ>J9O^ZG2t!Sez(3+a4$7YZ;- zAB5@h`FlqV1%j)Y9~d+&!BX-|i*#&kCUM`}T?<)cG+LWJv)}}rg7Xfc#?c!xgO;Bt zMrfK}FChO5ngezC{~FD~|2SXk=3#S|w42gZzagi}_DX^$ap#f-WzE=pH;UxQ6Rt^% z)(Q{P(?bX1SISj5tKwmS^rVds+zl+=)E#Y~}tkn$ith3O*&rlTYZpcBmzu*NMlSajX_ zPVYhC-q;g|sO3rt_0Bs`U1Bz0iIVM4mm8a50)>D?!#*Y`JzfJUdo zv$hwqKVrC0QN;Do5LlqtZe)Xg9$5|C{znH0jGds|N4lxi~Y0*f;;98l!|df z{V}XPc|{$}%7KMo%9FM8Hng!^RonOMAN!~lVhbn8@4tnsn--ye&ckzona_#4j;ZnQ z*b!{+(`?(sf}b&nFv|Zj7Gbuth}?i&6`Cj+gl`hE=!+u2B@7Dz1yGw1ohq7r#zsd^ z7t4|3%UHjp>E*}(!Ic{zNWg5|VzcGo{P~fs3pix~fV+sl)Z!fdbok#Q#j%TTEC{t; ztm&H$V2%6pF;V<)*hmt|ZzB1*S) zhoMo)J4Z>0m6J>TEYU+i8uNNt|4ilmXFIbIOm9j-{LJ#`*^QWvd}V$0u{ zi8=)(nr*7O?0nQZJe5BfCpG@xu%ex)8+ZV26VM5lDFp@4W`%=`3rgU>%gW>^PPzVb zwI_miMFK>JbISjG*^i)K zQvcQ4?Bsxg-i~4;mCvnj_6FA$^9Q(Iy_|}X{a=2NCH@1=12_wS|BM2ZPZ$`~==1tX z452?d$kiRzXK*_n5i!n|N~i7M=qLyveS3kUOoKwer)2_4MpnCk2+t$r2jQm{${NS* zLf7b_7g}Y?#E}CVj;^jQASC|JUv$W`BO@m#27pFm0e||yU`b#p2(PrGgA;HCgv|gF z1ik#R?JM-N(Zp46hbJEX2~gDkqlu9Juc!6DulbiD|5x6u9jqu;pb&x@#E*myeCYTj z7f}J-U*Em{@tfhteh1TOW*|dh=k?1K`|jp*Z<}K!?)w_KRTkUbJY7piceu2NrS{ZZ zL${Ok-=}ail1mKrKB9wWP2C;M$QC)zikv#HjnajRd(3!0*RA2_MV!Z?0(FE>zN%NE zDYZapMcuT&hupt18)o!6bYrb2KDK7)&eiKLmDf6mZ514!H0Pxuf)T{pXg$63&jA!9 zG9P$R*X=Dwr*cfqwoK6%aQ8*-0`yyH)?7EZrINW!h!;0ekVhL_9pNW-7as!g6~{Zd zPQZw}AduK>tE_SH+jssu&!$Y1Kwm0SvGH~Po2M71~-`Ce)^jAWbm;8S=vFIGAyg2|; z)JwzY6Bk*yfTT=|1q2{4?N@sT&6A8)f}V14+x&$D`Xl18zUl^U1}dW0%BcmZ3DkRW z#iIER5V67ESgww@7BC#CH=+>cm*zvk!~5Rs^qQW}Dyu!65`5mRQ1@l|seT;wjQFzs z1i;`x!1&5^zk1c0+C*gmDfQ>wLLf+A8Y(K3glB5;qOC~_j+K7unzz1V;B>s8?nC~y7U5J;)sRI@I=<|$du1=M)Y-M| zGm2-pHjy^J=saNKB6ed-Skh3&rzJo3$xe^`6$6MTm685WotEg!^J}VH!`L|+s^(J_ zPy7zI{?Mp@zWx)ZH*Xj2Kx{HKi2<-ZvqHFuTrVa(6<)tPPxe57UFKnqZ9b`w=GT z&vXI8LS$(;yz;ubva$f;G?uxe*C{QYojh9Oo|(II9Lf{Ros4e;0U65F5#!8|GKOhL z=-_zlOO8`l%-OBtg`~d*PRYRXGl15tRcpP)4v!a1g~3w8nw7CIxS)9S^wjj;Y?_l( ztU+K&LxY3m;c`L&*B0F#`OM`y3hHq2bC(;@*~Qo*+2qe#*-hMsN+btK&nf9gYaNZa zTyE?4jpFHy{b8SUSy@s%PMaOb8{beuqAv?ToZCbsI3#r<0zQ~Ov(G?r6h&G3G9b_p z{PlW^bIQEGf9Mjz8mNJhgw|DUx%E=0b6J+(r2c3{+YJnSn2fTo8c^oDj9^CKvN2e< z+6oHC1AUufS1l{9E*$9D8M2XHAAjW`MD}2D0Osr2|Jzos7@+wCAJFu_S)fwYi&P@Q zXoUvv=%NGnD(1+WQFAvzzE3{`L0;>hU0vHS`dl^AUWs%GB+zf;Y>yv~Csu~6e*#ln zSsvkC9b>gK9ZcEiw%iDgNqS$ICM!~&8mR_?TabUCz_1mQ8Xq0ulncpeXy_=sX_k?} zFUoX(ge5A#eR}(cSz|8#ui%S-Z z_Kp3vBN&L^daAM3yUX2+$rAU8A*4x(KPRnzg()%T0L!&eu&b9JIisnDZZAw zr;O>IVU}tUt)1W9)bY(=@-gd}I!6{9_8hfbiLTIdGwvu@5c$E0*v9wE^Fc0=hd7O6 znY(P|3D?ajotmT0eQYXdYf9@<2G{-4n%W*peZAzn-@S0kRX8^UHCE*M43{h5asSVI z(Nr}EIW3MshvSKkuP=Qkdja}bM|L>-SI)8L&sVPdBJfI|)f z@o%K|0T5e$hNFC~=Jy>X!3-KvMNigNu{l0fWnx47-I#(lCD!?1TU3z2qvY(Id1mLbW4gK$Du{{&eI15kl- z&%q?fs?>1H&{*>VzQ|ZD0Z-E=m&2-DLc+R3W<8~Q2m$*!9RmL`H85c0R20Rx`14~V zAds9;j1wCL01?1;tJ2V74krm0Dgl6pP;3$WU+`Wi)y0}z1oVEIn-1jr>mJZF5|%fw zy_i{=O^|+eaNtKkIq^6>PSVh*R7>gR($e2umwCt?I;Sp6&R>rJ-89IDy0fz$gbe`= zzNb-F%{a~XUXXfMSZ&aI|wFZ}68Q=_ksJr)1)S%@v|aiKkG47N-K_ z4=$Joi71mrAnVjf^5?^x<06WU&Q$Lzk;Zns#R}*Alt>bQpy8T9o_Tiey>F@50MDMo zw_K?^BCUjrn&IeIiH3y`u9!1%PPAJh^%LrwSeXo2#1UjxI%ADxzX46ET^9J@@4cP@ zXf@SURcbWLrmp|5=Dsqht|eL%NpK791b24{9$bPu1lQmi+#x{&1cF0wcMk6Et_OGb zgERZy_hxFQ=Fikjy{b7s`*iQ_-Mf4Bl3w2j*L8|4Vk<|##abYSY-y1QAzA+fpZ-M3 z=V4!OD)JN(jU{ckyz9QeTP^EQUdpdKpIku?7M=>qBcWu}Hd}Q+KK8b~#I;dQ%4_@o zGoD%j#8Y3E-`CsFU^S4CtPOd{^}IZP{s4O-RJJ1gA zar&p){Bn<)=oDTsz4gkcpK5^qHNhJl*$(C`Ykb~@zUBKL-mfvSNf?ur=P5m|2J3Cr zOpu+D@>Q|%X^F#{cFib3JWvMQjB>vGcZny8O8KYh)5Bp2T6F6noUgh{T3_~8!PO7e z$US8)U`s__7zfQtP#LoGw?f6RyIlT43l^jhX#{z8%7Bs0nG_^$!5<7~?BI6($R{(| z(GeZ2Q;XSQCoiKD+SunWWKkPF zqI=hiP)7>8c!B?(X&_qq$^QyHwJJ2JF;t!H-VtS7+G;sV>;Y>QF~PWm)K;Q=fqr=u z_)f^tBE_7}aWvi9rTlW&3Lz1&C^0Ja%h<~tTg12FbnKcEEx%LY^szf5)fL`qW#Z}F z?L7?6x}lJ3B)cu+ep(Bdr+CfYDF11XPLokZ%x~8J@Y~YTBcN|uYiXUtnJKZMX<*IW z+T~kjFDRW?*U4v2Ce<+E09^fdW$CQlMd$s+_uCuolTqPy=bvM9ImNgiy1tnc=ctPr z=qZkV@_4nfx^K-3M=xl4%J|e|9-^0RQEMUHV8B2AlWfI!Zb@(Dr5qlvvL?;9?6N5d zEzsb!hxJ5zAGhd7Qj=@CH%ng2df&*v>9V_?|EIZoKcD^EbWU4huK+iTisSioi*IfW z=$Wkd7vy6@xyL1S*uFYTY!IgsilKDM%Sm@0pkh*M$v4Y(-roz;qmk^hA_Hk7jdqcoXNZ9!RGP)?q1?O)4@80-#a z63%j=fOU;$#PH>(bcKMQD})%?fR^!gs|6Fv6TOBCjzcW}3z8%Z zTIf)i^n8i#@=x#jbl>u6H_1s+ZVUdTQM`m=baXQ=!gep)JS4gt4l5tDEQK5dPoL-p z&B_TQliI$8vroyNigd!d_OJ4&O7cw}!1{aF-pSMf~ukNbgM+;dg3d3VPcB3N_9Hvp~@wcmbckdIgGhn{*{va1e~L zv@Q3a3r&yaEyZVCetUA=Ou~U2@Lzl#z6&h38+sH_XjR2=tbEkC$ah@-K@=f^>_gdI z3H#jp9@9b-$gRYaN4Ue1Oy(zoOO#EZ`LMT+Ahf8ZqC$?T@xKC0;f_vfegN|vt`-)1 z$%jRKXt(MAK9G|(-Y&b;SWq1r#?bPOHcd>RL;x(HvoUwv+v0JKf{MDy&bS)hSkKeL zIrd-b<0~h$*1kikXSqd4Jr*>su4a(XSzrA!V~6lEc=9i(lj8M(C$r7-b2I@h>%bB` zUu7fYhrpY#(}GlURB4gr+DO6N<8AdFkZq{nKC(Co@x~pGT|ES`SXbo`{ymTjTTA&k zG*p!l{)py&x;pfW#-h%CL7xGa=TyKhWytp}-%=>d+trcG_S$SB1RP$?!Bb9vS<}?C z6bIF~IJCyE80P8#?w*!J9!CvTn6|RXL19q*_S7!p4-zs_4T(MPXKZ38n!ks;`FV34 zem7opTds>QEp_JPcsfxqU188BmyB}~33hvFvl~whr7ZxiS&*NDIo6ybz<&r#vok=Z zB`E{JXHb!Oiv=XT`u;I$YpL`gl zk3{_b2=m%s-Oxq$+>iAvCp(9xDl*Sklu~a;W#875;*y=H=zZJ5#;PuvXlt z&{R{qKAI~97zr^W-?7Ht2M7FmSfZ`A-W@bh99`%YaeDvx8JrD;a4SDoy!^OZ=p8sP z&^w_|gBvk~@_@=FWS{?TG6295_=SU?SaT&uuNgCH!Z=AsMIPIOC!1nN{c&%&Na0{k zjFn)IU7L$kx$|qaq!8(!E{hpilSu656fPb+Sk@lXDtzq|Pt4C^Dq=LaLwOXL&og2*e4VpR73Gz zhJle!m7pmMH90}&Do_mh%1hd3Q#u%`GKSnir!zp9C4=Gv5}%Klo14`aDj2b7EfMjd zR`*lFe-Ackhl?tU%dI|uQjn4HX-f!tOBrgR?>s=BCZs6fzErGRr{noGKG=pL0k(|- zR2dHU8Yz(|>H~Y=rQh!JP}+^SUkmIw01tn?$%PhkTm)MmyYxM#2Un@f2CZS)vgk9I zOY$GEr_y50UK_VwR0Q?0R9P?j-i1IHa}$$a85yXJ@8dOKL9>gCo@c8~03qh??jnwD zZ`S+gS1ox9Zf=*a1S!2gH#IQ)dH>a|nPO`Rn>0<-S3HHc^hAeR0TNITq4A|!%k$;> zpCh}NO%WpS_b-*2lKQN+gdl@j6u@zfX!&xLX0#nLXs!b10ew*`5J@zb6+s3=eXUn$ z;}q*MU#27IeuCi#af^*uC)TGg6)8o%=PXvDAcQ%>2iCZ<6g}dI%TNv8+nHYR>xf7RdSnclBEG@v0qFMadA8x5V;F z{;Tkf^d>En1OT96R^m^2&lB1~B82!&5;i9X*%I&-=wUseK|gV9bohh*h70l4?27Tb z3;Kzh-DhBmzDNQ=6kn`6tpIr=1BHv*yQ^DLVT&~>Z9?4NBF$pzB@NXb>PO|U$GoJi zw7gxa9Yf|HJx=@8*aGn?WXGgzM5EySgoQxv^YilBS1%ftTCvqwwC^81;aDO=`6ZW> z1C}s0f2csO`T0qJ!45muyVQ|zyXq_2DiI&gQ+ogeOQMI#abLoHd+wY27l<8=L_6yX zu@`c03{K+*f4Vun+Q($o3`s6J!h0H4y-&i*VOu7<`$;a?UTgY4ddS%TQ%PbT0?wM8snnJQ$T)?>$CTbJkl8 zYmCIIpO6|o8-R~qw$*lb@GJXFQ?pHUyCNKoif3dLA#w$ebL70VT+DK1xP%O9i;|bl z+r$(?OC4I**dKK6+Z?3PFj_*wq+ev#v|%+|y|OJJ4D~hcEhn$#2|hs?$(+jvrUR+L zMuRizUZSfVDU0yl;xpGjx%2-w&XzxmMuvfb)v|JqrHhS|j8Xq(&X$T;sP%w6U9fmW zd2vfe%h-L>L<5NTP{eo)1wvjs0~ObBAaJvlNJ`Qs^&RCv1mfe>9~~8~@>Gwi5EJd> z(ZWydX6OJ_Q-A6H7!`KPmxgaJ-fA+n>gx)*n}DL94N267hNz41T)a>@M4Zkqn+Ha47t48P3w36ZCe7jSO_@o)N>>258(S@Sj*f=%0x+)LQ z0<@3OtE;JWB0+cNP8~pjhP5WYAP-YbfvVTOD#<>!wcw4nPGRq51wBlNu%+&06f|~G z5!4+~V*R|#IJE2x%_4{p!M2m2!~lXCmP|3qIzro157#YMfiSRXNbhmYop+8C5Y-AK zN&TEo#T-htEb+)rm;Mf&ZddncGIs)@;Qt+SAFAsA9dn;0_Tu%!9~n`HQba?;W#Y|R zzKDTM`Vw2!e*sU|#P3QM3t#SNP8FKl{fv#@`%jm+CH$sNGSJuba(*Y3Trs5*H{^V?Qi`r`Sj)Us7uIkmw4Pl}F7b!*EIn)f`_8l_?MAOu#-Je2H(gg~ zd&~Y<7k3h2-|nj1?yc-T;rKMxHmKBZhcF)^jqS2GIq5Hl4moKj+RiHbRUOuCU1obj zf07jpGPWzEmrSc8Sz2El9nSKuAo*5Zrl-pbG9B<1od;xRUp9P#hw#4c9DgGB@e+O* z&wv?TZZfSKGpjo53?*-F{`7d~WK;R|=19&*#?y1XAh8SnJcu?8X_wLSe}?}j{ZIJ+ zm*}c_V&;0{3ZXA?i9aS!)et0M|3V{M!bWH??l@74>eBlkkTzt`=c#E%gX+!A7fCXw zdZK0}7SeW-S5UKoD}Bjg9D>DuuY?PjJGro}JAX7@8EHTG;46Ql|yOSgRT zKJwcqxMoGOT4#8K0j(*k40Pn?f>2@_^VE@K@*ntXJ-&fKUj9-kX7lEgVK00Br(k$b zwOvB^3y4`PkM&I32un*MMbO8OA0tk3v@y&Og0iE2>i>?Q<6zOcSC&9DT~IKFbEGIZ)w3MqGzU~>vhlR@@)WHaPX%uY4QpQS>LUCy=gyRhIp`C zX&6X*dJ$?f^A!^Ki^}6N$uxCW98MzG(B=tvuu<=do3!*^d#hGOBUfTlw-oc5wxs%R zJkNOb{58jTZQb1=G(PM&Gd|<)79`KR%Bi-g{(A+S%OVV|?y%A7^HtSVAtjNgVKlgH zT+j2MdKI_7^|{#v9~j$5Nv?H|f6^1hyrwp8idZ(VWMPwP`QJs&wLQ5ZMOk6wA^5h1 zdS-pfb8?kwlj5c}DbO`ZKC7uL7+tflD$+(x&O>7b41Kw9%RFV_WNgk z$z*?h5VuNn5Dvz2&GBxVNJs63??NEB-R}%J_{ndY8F8iM*V_lR%C!>$#wV&ae4SeR zwn@TohE~~TlAgratv9#mYs#cczQ+$6)om-0y<7KEw?>|(0Z)->BKAe}XAjF(OFxeX zT4$fVs$Fitzd5DqBcQ7BV->0{FT`wvL$pyzixwZF>nN;lmm@L~q(;Hd>tfq*+zYAR zXoSqiSA8INW4|y7+TOWTE#%S#8T{r3ox1e$gLwyCOa3v zo6i02(UqaU7!2>7<@4Pv>3v`x@E66QB~Oatg|mDrJj$zEg?Ha%rc%ab^lBRJ^EWC- z+|nbP^T8apWX{93uvc9l)PfyP<3~~wXAp7tq*1yj77bB;?0*^#d1`qaxziN3&C#Rh z-H#2x*dl3tB`j1&t>6`x!|sd_y$TUl=?vJJH`3IfdWmo%S{;+_z5Ht2<@|*F+p9`& z#nZteH0=~}ZpZ@b!GgO2a$h()+uLx|3n9?I-X6Op_~7bI?rHi~6{45WpvU>#ZkxH~ zzYbAF3#!69D_A)lV_cDtMkuao739m;<>MmI_K#!OxasIpfhzRJt-->oV}eKQ65{Ec z0*kww*pR+#tt~|sd-wJED4OaHT;>nK3(Wmn{6X^ctCUXrYuYgzfcv^z)+Q~YEML1 ze>68}F8kr7WF+LI&Sl~gN&2(yPKn=#tajo|42G=Bvh#B4)n&iGf1g}7jW&cTrF_;H zzdX_bgQ6!`k)sUBiauVI!*ia%u5*bdIv{*njn8mDYY&gX*eY-3=j;187Ls`Dc!f{L zeId`mXWz{#ElL8U7*!34ZXzS$L||u6Ls8-^$I85$HsPyA_kr!=MNqPX`9p{;5Vw6* zy_SSvt7Rpcj}w%D43i`hLAJTy9UM56qGqn|{1}&|{rXpi&Z5iad_fzYroq5uGVpvF zo=IVbN;0;1STqN$)5b4KUs{OGGKEN;@xcKtCz_kFfn7I5){=;FX#*-j!fLy1?hl!J z#X>E#{DM9Kh|l*KLcQ*voH5K`!PS@E^EldskyiW6UHzr|wR`w2^CNs)@xYaB@b3bL z>IlHazDXUVUI)2|ZZEAs)%ErLD&gjCF?3UTEAGW$hXPNte+OIZ>u|@&H*vL!YwRq@ zg4I|u$dXuCK{D{iDdA%6Ouv4KT=M)>2`|l4PM(ad3Pfq33n!^g$Z_SceDGr@~KP6*`}yhP>)s_)u! z2<@3jMl3LgZrWVx2kR|lb@5e}Tue4_fBHy)$_~*m$am&MCng}B&ek*>1EYn~u$!4< zA8*vcMyGBv_e{&#-0LR&SIgUkC-_eg*PHnER2Bo%Mv+SO1%zfU;qP;T^{kM2s)p!l z<>>GEndikFePbu2sq6yph;95-R&zJ!IM-sdFEz_6my7h5biRzfm^z*;t5i>fve&*E zLUckYTS7GE&|h=2-Y!VlXKW$`Z=>!R=x=6&2!(0wL;4<&KjdQss#dpUT6r}~3|cUe z<)b7cFFoHZfrE^W8K@`lyQA&*z50|Cll3Zf6b%`Qk>8X!GX_%>`WgyXLy<{Z|;igE#?zJH8Xo4w*&QD zdFosv8vd+XO}ZUN!NPd}8Y$gKUxY4M-e)&;HiiD z4P(II`E)Psr%R_j$(57EOtWx>jdFPaJy8X!Ho#L#Xj@xjQMOvPD&qbAs&ATZoIPJp zMu}yeLgBJ6hKQQyPAl%gBt&OPm{nR)HyLdzm099%<1J!<-N>>|J?+@1WK@o?AR-zx zH5)r;n@Ve~7D&`$N3G*mc#-|v&r3%~G0LphMpQ$S1Nh?L#{F7-UK= z7wQ?Bc%o7DM)qPki)i5FtJHS4dD{bJJT=HIP!>=rwJc(^y-wGg%7XTlb(kvJkn5`5 zHJ1nXQb2`#ozfhpYPyhJFNw7K=8Eprvei?GM#k_aGptPW;)3G!j~@?4qgAr3N5%c-Tdx<=49XXr_^Fnm>E}bWxf}Dy=;N&L!uK#wPP#Fi(?Gi zx9!|>$WcP6iq%)W_)71-Zs!haAoVc{OWqF#y}LP_bmzYzdjEC;jfto&AL2#2xldud zVb)%u2$C8W4~X&SC1wkhM8TKyf#q&z7@}R_3@dBp*$*PwiHa3RkyA<4SQZKhhth}w zzq&xrkn0kwt9{$|EY{9TVxRn&t!Oy4u4yUA=7KNvGbvZ@gc9rQa{Mz3&I5gQ5O%P( zmFeLDEnWtr39%u<+H}~C zo+g{XtjdfwFqQV$rM>F(N3|`D{Fogn(N)$$)ci9_^SAc;DLvX++-7V3am#SqkWP}2 z083XIlJ0VD_pt=`V@4x$+ssvW9lA-h`x+TUhPwGvZb;VSe9qGt+~t{RH~ZF!tBbfV zS)6RM)JW}gh?e>;`|Nx29o9~wff9p8yQ!p93Gx?s8Dbba=!lYlQ$9&yRA}yic(Fp` zs!MK}v7j@Tk1}Xm%NPqtDWVZYFzMlxC>Oc!6uS^5pm0^87!aayes>CHudO(mk`ON; z)i;Y~;B8#AT+Gnp*CFx29vlVrLQjiM9tQY>(%ai`-#G?~L@{kKR%EQ%y)r3tyVM9q1@-VZ7=)v$twm($N-z6JxDRLMR)8tCdVO5Dd5@#| z)J>FI@MNDOmZhTgNA{F?uw!`+{UYY{A?h4!0#M=uK)b+3 z6MDKhhR_5*rdJIdWLk1_xl#Qpf=lR4)*RRb1vvLo7ft1=t(^Ge-q3*nY}t{|ak^2=rMm?ByIag3>@zwP4QB1{=KH9ty8Bq=_}BLzS;ll$jQ3By zi(Pa;W}_nem?1pE?_){FH@-tKDqvz6Dv*(lR!KJzw!1w$vvGcn_BEkaWWjXPaaWtJ z7nwfno&2&jDYFj^-Tvj|1~RHpUD#S?*uM%T`z=GKaXMauY1!|#*+bmmK_N`M%h^AZCd%pmw>1?@jC0vPb?!*UooT)>Y*{T)l7IT^AxSp&k0Rb0$P2g68GT&($OKh-@hMq3F$1d}g-JN>oDt{Ks_cTa zs<172KASGFgNI@fbBEW2T0M69Kc5djefOc>q%ejgQrYe()6?W19pCk)-Xz2`awXY* z5X-pk_kblfP#S_Ej`5zBJOpD48t4y!ycZUD0ET!3JRKh*P>TM=5fdmS&EB8_N`*wb zWM!5d`H1hlyZn^!U*j-TWq}H+JX_n_$6)zjI8+!|Sb9OkVlFzqET(FZkd!`iR(;&G zvALIs&^aM~CWb13=XRVoKy9^FZ7L094SPREb_vPL%m0jyHeaIU8}xoC3r&QH^-)lW zlFRQ7NR*+v*V{kp0MA=-Nra;rRGWmB0`$E(UZ#!>-&Wl3PL`;tsm~5+5!K3xugZMp z#n0gV$86?GcF)gQF(Z{Sg_d$ZBexk=sxwTa^JC%Rg~zG_!~NsAU920keSxn3(23a# z{{HJ<3n=R1v;?5ZU}rM&e{n0z@`3zPo7r;%upWF;q7DJPdwA6Ca3NGh=_=l1wlmeBsgGx%~5Jy`hMV~ zq-qB=w;+%wA^cNT2?C|qD2g*MI{0XPE7dID8_&=aJ};qOgYq8(a9~{pz%Nq#*&cKM zjM&r>cv+X-;Uu`=u1~&rk&;{X@!@-8?{W9?HA`_K&%9s5f)e6}dx?TM>FKSv`=k5% z`pypD!i&9*X6c8OVmF*(Vq+m!C$5cWq5n~_(y6&$q^HA`MVk&lsfC1K-9<#wUPLs- zX5fLI@Zg&K>JiA-I#&w@iM@~M%Mq;EOqnvAl@3K1y37h z4kX@X3Hu7TpI9}nfZIY=vwAkIrgHltv1p}Yh-H^#BRsCwHhQNwNB?l9q&`8;D-GM4 zd5y9tNvDo)M}9K{M9skJxw^e|gJ6ochC$$HY0QC_NaJ;QeSJC~G2`%HB}dOyX8@W# zj`6PllL-;V_puk*>$X^ziA4D2MonSz_2o(JP?R+6Sn_i?8VQfX8Zi-(JS_vlrTE(G z-pA4LP-MIcgO)qLEG6Rv3vTQ8JR zC7-s>^)%#$BSi3`2P=&Z&dxQ*GwB|t_%y7nm5C}}2f=K7!9hW19x{lps<+1r4n1M0 zXV&5}pZB7>_^l>CE-av}qv!8YW{W||8CPqEp%TqEyV*jx$nz+!`~Tffqy$Nt|8BOT zEvg--Xnx%jTE^3z4*B@#w>(7OqsTaqe6Zx_6T}VhV!MvBVkP1M*;aG^2j+8{`D&P#<_` zB0;>28Bba)kPbAANW>?*ZH=KiH0f_Go|!#8P(%@;F8ObznC(Qlf4<&!MioFsZN(-o z&Oq?b!=fZ9oEpy@CzQlx`aY9MlkYesy*ee5`9C`WOs*&QM28c#zA)v<>lmRw3&cyR6+1sV>S2*5QFB&T{xE7+KauBSo>pX zyq*^u+O&2XRPI|6XMfIm*_`XqaRF+P&m7{pB`z%zNt4 z6_}TmHg69gcsme7vOkfvUZ9vZIyxE*58wiLad30j>owY2)GmGEHIXET&RHKzWAgz2 z&bm4&$J*}fx;`6NeTM1j)ZE$-rBZ{pO_Hj`QF8%HJ77z@MckT#L`Gjc`C?{l>dz2? zZg;Aa+)Fem;=da5*e%9+SY!>ErSiMb@Blp)s3NW}jj)Zfc032U752O&L85pT{biyk z{v2Q2$#bhgeE!7qJzNyNpjc?;YyRMyx8kr4mJod82v)j)wW$hgtF5CPzsBR$X8K)! z-7o3xdwxjQl(MNEug+quKrIDdKu6i_CW~L?B4o*_N7AaF|4Y8NY|N%cn+(6kwd6No zf7i9PwnjyvRBNAPz9xJn_#GFwVUvuTu39{6#id!QiFzy#z#fp1i5PdkJIMlWoC6Z~ z#NB(QK(SK4DOasqbTExbSM_?i61zIwDfmGdk-`K|QbxtXyaT&le2Tmap5kDa+s$Pwb7ag{S ziOf$c?Y`a%X4VUQu&}TOT3qZO*|}NuK>;|l-Ec}YG&E=g9PcbUmsXWGh#NL6ZN%Nh zli7*<6cUEaiDmM5Ayz$@ef2h>N$F@RB9v&5jwkbA)m`ACd3r6iD$8*pV5a}^qBBZu z&(o~s4F>K`*3ZT~Jd4xyw7<>Q!Se1rtshUGg3l=_gLtCJyhP6_^Oa{X#AWisazcwA z3b7*nCeo%E#wRDgq~G4TTnN+B!ao7oWB6fR%{b=<(W|Ta3u^fBOrjcGhc81S_N%T` zM4Bh8OuCa+fBvdfF55_LJ}pIgh)nEu*md13jzNmMe?Nmd-!kOyB;+q5S*18+pY99& zNLMdQduJ6Xp~pED;MW>r;&1mKP|`QI4Xd@_h>`SE{r`U7X?Md4R=4prj2UtZyMF~F zUq~F%>1?qYG&D56=-HtNY#8L>dLIbrAEz>voArF@eKPI|Ya#?>^(?<}&n=y>t2YlG zinbx9u<7Gbu#V5=nYF|kVU{I(c+u|nHeudl-Sc=#qQ{^q7#^$xRH?s1@5(Y73CG5< z+E_GATTvy_d-z9g`9T=0m@bA)`|*QkWTXMN?ml<+8$PDN2v5%YA#O6Lw{ZKN%rDYY2$&)%;FT6U3QuVdD@ zpEQneAr1A7=*Wc%nLkzhNqfym>**j&<38^wMmo&$0Vqbq2aO`B_?UV%)T~|oFfA7h zQU-|o3+sSG6`%2Q%yuf5^>mf7#NVliT?Syi@qAlOG}lSrgdnB5I8K#k4!>yr_)OQM zutHGfKejTVuqMQ^C1?qsFzHQmHZdDZqo|BcQ`v|=r&ohYq^!73-2gM6;a*GLF?gW= zJ2;r>6W5|Zp{;Eb+ciO{0+UJ#YuPVEwNdxm10d;2QFET36VMfdivRpgq(@1$GRQW1 zOI0?QdKfZy&R3;RmhDvy)u+HT4lGQdrgfNkM94z*;zGygmnoc4Okp$LAI~s0HU=)2 z88o}nyQ7f_Kd&~q-1jPF2mms+GCRAIyH=Fy@_J^A$0VU%?~)vz_G<3&sVIarrhac9 z@Q1bs`U&$TC8wPeVdTYe%x{S+Z932oJIQeQA`;FzQvP5P5ty!?{{6xdHBkWw~{KgsOD^W?q#@PXL2E!( zWeO2^Ta2Z0yX*lXe)RKC+@>{_n~-}eSXy^H0CK~{4e0is zMBYwfHvzlsg5IaYiI>(|Vy^#ZHxe6;*3 z+;(DUNLEhHSrM=ifF`70IXF4NW5W^VO9uy5kaxfezgol(?s|aBll!sFSFU-S`4Lba mNQtf|$zp&%#al@`-=MV7y +
  • [Configuring policy rules](#Configuring-Policy-Rules)
    • +
  • [Adding new allow or block file rules to existing policies](#Adding-File-Rules)
    • +
  • [Removing allow or block file rules on existing policies](#Removing-File-Rules)
    • +
  • + + +# Configuring Policy Rules + +The `Policy Rules` page will load with the in-edit policy rules configured per the set rules. Selecting the `+ Advanced Options` button will reveal the advanced policy rule options panel. This grouping of rules contains additional policy rule options which are less common to the majority of users. To edit any of the rules, flip the corresponding policy rule state. For instance, to disable Audit Mode and enable Enforcement Mode in the figure below, the button beside the `Audit Mode` label needs only to be pressed. Once the policy rules are configured, select the Next button to continue the next stage of editing: [Adding File Rules](#Adding-File-Rules). + +![Configuring the policy rules](images/wdac-wizard-edit-policy-rules.png) + +Hovering the mouse over the policy rule names will display a short description of the ruleat the bottom of the page.For a complete list of the policy rules and their capabilities see the [Windows Defender Application Control policy rules table](select-types-of-rules-to-create.md#windows-defender-application-control-policy-rules). + +## Adding File Rules + +Previously, to add rules to an existing policy, users would be required to create a new policy and merge it with their existing policy, or edit the policy by hand. The WDAC Wizard allows users to add rules to their exising policy seamlessly. + +Selecting the `+ Custom Rules` button will open the Custom Rules panel. For more information on creating new policy file rules, see the guidelines provided in the [creating policy file rules section](wdac-wizard-create-base-policy.md#Creating-custom-file-rules). + +## Removing File Rules + +The WDAC Wizard makes deleting file rules from an existing policy quick and easy. To remove any type of file rule: publisher rule, path rule, filename rule or a hash rule, simply click on the rule in the `Policy Signing Rules List` table on the lefthand side of the page. Selecting the rule will highlight the entire row. Once the row is highlighted, select the remove icon underneath the table. The Wizard will prompt for user confirmation before removing the file rule. Once removed, the rule will no longer appear in the policy or the table. + +![Removing file rule from policy during edit](image/wdac-wizard-edit-remove-file-rule.png) + +**Note:** removing a publisher rule will also remove the associated File Attribute rules. For instance, in the xml block below, removing ID_SIGNER_CONTOSO_PUBLISHER would also remove the rules ID_FILEATTRIB_LOB_APP_1 and ID_FILEATTRIB_LOB_APP_2. + +```xml + + + + + +``` + +[comment]: <> (## Editing File Rules Coming soon!) + +### Policy Creation + +Once the WDAC Wizard finalizes creation of your edited policy, the new policy will be written to the same file path and name as the in-edit policy with the new version appended to the end of the file name. For instance, if the in-edit policy is saved at MyDocuments\BasePolicy.xml, after edit, the new policy will be saved at MyDocuments\BasePolicy_v10.0.0.1.xml. + +## Up next + +- [Merging WDAC policies using the Wizard](wdac-wizard-merging-policies.md) \ No newline at end of file From 8830749a15bd2b3f035caffb45a97d4dad5ef36d Mon Sep 17 00:00:00 2001 From: Jordan Geurten Date: Mon, 2 Nov 2020 15:46:27 -0800 Subject: [PATCH 016/486] Created the merging workflow documentation --- .../images/wdac-wizard-merge.png | Bin 0 -> 26245 bytes .../wdac-wizard-merging-policies.md | 13 ++++++++++++- 2 files changed, 12 insertions(+), 1 deletion(-) create mode 100644 windows/security/threat-protection/windows-defender-application-control/images/wdac-wizard-merge.png diff --git a/windows/security/threat-protection/windows-defender-application-control/images/wdac-wizard-merge.png b/windows/security/threat-protection/windows-defender-application-control/images/wdac-wizard-merge.png new file mode 100644 index 0000000000000000000000000000000000000000..13d3a31cec43e8608133e6265cf991db5f661cd7 GIT binary patch literal 26245 zcmd42g;Sed^e#$;Qd*n>#fujS6n7|4+=@FCcXuzv-Q9{?aYC8|DemqP+yVrL;9S1* zyLaZCKj7ZEGw+_v-aC`5*?Y;e*0bKo?@H2`??~REprByN%6wBrL3wF~g7U)U?aSwt z(a-e(&mS*bRi(vIYDUT6&y&}dVv1rYDE0C0?~PHP=jcu{I<6=vcy9lV7b_N&UMMIQ zB(mSc)V&N5FjRfDrB`Stu0(cUe*Ap-%f!>zq`fQ<`a%p>Qu6D!4=OAd3ornaM>P37 z3*I_x)L@>n?vDKBC%q-@G5^EO9t+Rw;@c_1Mj>oA7ZrICbi2WJY1i! z5WDbib|~IDSW*%(4Wzh9rpXm-MqV72a80lN_E+k|8vt_W3ueCQ6?sj0M}++j<)8BU z!NJnDe^aQzm48l7&V14e+RWHwz~W)p%3U0Ww$i7b#`v+Z)U+$4%8+w)`zSYLjMo!L^$S5?s8_qYEf3)g@ z*z|6)(8-w<7KkL?Yt`g%Hu)uazUOVeNJL|9ktR=U11PtOx95+jUADgJU)+5k@OIZuJgZ%m{Uo5H@Ey8^}+Ns+S*{36cTblt`^{$O^ap1S>^Xy6^-A*^D`lkXKnio9@j?KJb?1;v+t;O_;&nY6}@ zM(be)KG#r!%a5f-G7)Fm(+5|^nB-Oy3t%P{m?x_q-S}8*(i7LBs${#Tbh-!a=5kw6 z_@dH^3qxn@k!{auaqg>SOwr2)3=<0*`ZbQ*5nL?ga?vtYU`~G!Zf@fhuFhLiEnh6b zO8PD5(6bo&7v<<(FpewEZ%*~XN zTGob(%SAofnP)a7EYHgHm1hy+UX`An9-vSzG4!8GRr#E4$@&ZH{>W~N!W?I*S)Osw z*6-eaA6%`49AirnY^jF<)2@o@xfOO$f zatDZqA$YKClg9t}&Cv*4^XW>zvR3%arrktYdox)ValJ+_5k{W7Kc`Ws$VS6jJk7>q zwGT@JSW^Ps^GO#5N_5u#i9I~LpS>smhzKJm4KkeN?>X(XAMVX8E1Ro*r5D{jhIrzE z@q#|AMdsV}>jihT?-$c}|7aJAA$_A;(uJoTRUNgScA(q3)qbAmk5DUMkgdP}c_Te$ zS;^6X@L_~QLhE4FdWVAlc`yM%u;-q^>&{nA>SO^*vk%{i#bNM$xwwe3!$+-mPtrjN>=r-N>-ML-X(7zh5X#5EA&TMO=mt^LDoNo z+e*oVZE1#tsndTGLzCeO5&NThFVa3Tw8{2oGw*ZQ- zIPhre2_s5Nv*^B;8Z4SMsj_#>PuXfPT~3ddO8Gdwxo&Wjb%Wol9OdWdf|}T#GQ=6V z;Z2;6UL-x)QP~VG$r&RWALUTW+US{r`cVL;XpBFOOj+)P5gZ@Jd!=Ul5#^aZ^tbd3 zdxIK!Bm{M2t>(B8&83Z;51X(dj;kR_{sZKh;U%iLyZy)EFU!C$JTk6VqGJ0NHye&r zQsvk~SJ}%07F%k{1TJq~gG9MY*y=c@)O<&@TajD*$iYIQcM#0|RuM8RSvk(3ky)7% z{RWj*EzFN9!PS9BRO7jzi^50Vbj)&@ehtB@p!1y(d!3G?njhvhg8kWJc@5Z6kIX3l zC~JOn{6f353bMb=!VaDiypZxKT{g_AP#xsSv617#6RcmJRa#rx6CSRDT)o|Qz!a2E3o9TN+9zmR-A5#Be)xJ5SEe%!%K9D>w}7+8LC$F$O}J@3YZ zMb>rP!#N?`Yg#fQcf&kC&5qn^W@M*}n;T`?-Nm^;9`2ZLFYIBge5LE{3T2fPsOe){@$Y7j_q9OgZ>fH5(Hd-7w8RbcBSG0Nf3pLz^Hr**CW}q6 z$2k7*IXb>n&SX{j$fI0rDb-rj;56D25#jAhsL{%E_0Cy=4+m#luswOH5;IqWxGVN~c9{3a&TB?X|;9dGED-6;W6Yi>v zOdKdiDp1pPFCq}i!q&--`&AikU@DqO)vPlCu|U(sh8{HkJ!^GYwGBgC2C^&z!N7vJ zkppri>fqiPQs-GQ&)~aQWs%opxD3VRC6Tdpjh@iWcvt8LDDHCYQAKyQFO_>^AiOtZ4-p*;tx5J8jfx6RjY z(!11|OjRHm38J%1^ z3`Y~O&2I!I>Q;~Di;Diwnu3A?hTc7!YK8i$z>@HP*yW#V&NCE|`rjeU|NWCV|DSDK zPX(XrUTmzb<<%}^jV{=``d*Rc_0KjKY@Fl?KLf6zSvNx@29_b2e{8k?+J<@<<4D?S z#&VY{0{kcZUJ3twuj6?cQ7gW0sq6L2W`+Jlpjw$Exg~SRw-C>^BsnGfoCT2MYC=N7 zxJW^60*M0_>TyHbF*YHtbI z=#?6yNM0yqG0fMy8}LB+NqMM@JsM4FIg-uG>(&8Xc5y}Udmfe7hK{vg`Ajc^g$qP^V)7oHb1@yLS?TnS$#Fgx&5k{c(LtYZ{BloTo~Ntd#kCi7m!|^5c=vi z6iC{sDPtFp&dkzdw%ZbP?zvo#lSx+wtI3TYF!IEK>Pzoz3)-aAf?}%oxjt}kXOH3S z;FXp131o5x$G3PsdVIr}v>#cfMrZ!JX^`08{Tm0u z3@~Sw&KDPe?>X4jT|%-FHeMJeU7a73?pH%L@m zYzLN@2*1z)i%J*;G+${{aBN*;`iJHiNGa?SmX?J&J)V(pc-)8RaPry!btfhwQ*Rx< zxFsHv=jvB!G4yq_qj6vY)b#Wye+V@#_Hp*cW%IjMXl5@g-?kn^bxkz62RA*L38MVNzA8g2)6C4&Ve$GF+b2A?_eNHvLq%{l zR_kLLE?&ENSOR+;--lXT^gsR6`+NlfA{1SFy;545p~QqltY(8-u5*{4&J4}TF=Dr& zqcb4CPsSaK)d#Cv>xnEylUSFvCBYO%l)RK7-;s>8jWko%Df_&PwL-#i2O;XF z;sL#;2cAVQ%bLJwJUS~QpLsHTT-mtW>;A?w`1DmrVrvr)0r5ljw-JL)pD zE}xexxDRa!ubB9i(08j+Vb-bQ-rh#Q9CD>bnOiP;w8XWqH@yar%C~ed|41zgn6wYQ zyY}8XT9y-;GTg&<%FHjxmE?rPOdvmT2`akf>g_f}H}6#)7v>t$U{i^A8604bI`!|w zFmIAd4fvzjupt#}Wd;<)9>ha~_S?%I`!?GZno$z7NO0Iured@5XDO=F( zhn3ap#6cduOS;8xDOUSQXnboxPh#tB>Z#FsG21RcJ);~xpb-66R{xMKG&BtBEhRmE z<}nPc)-J@XC_uGz6$97%wUE``n9Z2@nd>lVOn%_IS#ir#H?yLHYOhh?So61dS*~OU zT$4_kQtD(FCHaj;7n5TK?~%+#^OPt~A@-_+%F<+oec6GY*3=aywrn3gSG=fVdMuGe zg}uhI_k zhe7K@MS&d4u)J@1l%y6`Rtp8F11Y#zu==fF&KAo%tZ=`$t*gn*XzVE!`%KLmFvbB2 z$`;0JhLWLbg2avxwN=n3y%Ot_6L%JAKsuwfM)Jo#bW$8Sno!Lx)d~kXaXj;+`zr{+ zXP}(o-wU(J6zV92iX+W3uIlf}4#tSVj{;^Tg-cJiGPvUOHM+e#aBE=5kfm#c_fz7; zxOx89#;LEgvuGmWRQg8@ar(m)XL=?3@A|`}(U%Oj9IX{2%wJV)S%u!lWFhAmu+k~! ztx29x;eXv{k`T1k!6Gj+&qG);TcQ$@xFDW+rJ_@o6aBmx=@tD{xmNPxrQORZkIp8a zSWkA=bT9yP_(=y{3@-c^TYg?)zC4~yNF54pQLmoA9y^dto6`YKRFnh*oE#RYhilXR zE4$D~Rr=z95>@BUhD~~fyaG=9!IMNTlZLj4GR;KQaJHN;Db@BPkx^mN#IEAHm=ydY zb)!uchO8wR24|y?UhFq3!htz`qQFSr4-GWFxTIqgOApieCJQvVkDX4!4PCv zsd+-mR*LEa($8;;a&Nxpd~ie_vH1F9<%=T(7P-J|Lt|}0<%CsSHK`!2-}f;bY=MX& zJI<56y0ERmEwtjV=|W+wAzN@W2?_ZXirqZ@LW z#K=+*uyJu#4e|*nk_us0z>McV>^KNuP5sqBX>~cg?2&uM5#TQ!=FW7W-N0VYK@;V+ z_}D@0@a1wAT-Qz7lK+dZN|2xvW9--nH ziue;H8My|xy?gO0?t=Ey;NI6jzp2$f^_uSOZ<1{ci%YI%?UD+j%a#H3R-A?c+A_)b z=4yqGFg**e3WOfk10;sSbm-4M`5Uam@41Bfx6-S+BKt=Y108*gqztzjbyVHWKItmL zdxa#y9{GkVysWa+Jj&-3eB~OlFA`m<@H9BZZ1zx{^GP&T87opnj%{6 zEClfiW$Oby{muxY?uj~8ZhOnj>qZIdyRd=px2ZNUD&0f<81Mn)Zg`76j83!@A*ldo z)J2dtKf`U&*Lj=wSVGA^!$RF_rHwP>d!(Pnr;E3UL%QqDpHa5TmyOpbC|_Pm{l5y9 zX?`UeeY$2!_M*}J0J&za&aF7Hb! zFG2iVViaA={x#LvDPHj13B0W4la`id+8a}_IZ7iP=a-Pn#SKkc_kf)wSuiM$q?1Bi zhTI-X8rA$)yNUppN!9Ho?8XXQb~pHw$KRx-R*jh{Z>->2%~wJFxHOXs)VAN2n(Y^x z;l|jUFeS1$HvRRuX7fhI%@#w0K+liOdwC z3pgzEL1aFEaN(nL=$H(%w7#|Iwze6VDx+VW7Q%)l1P2?ivZqhPej`7$cRk2v`Bn-> zxY5aT;x8r-@y^VVoy~7=5IfV{tje-kP55p0mY4SgONd)G+Ox#9jz7M?(-Mk^iwJlw zg`Q1J*4iOn;nGOkEEJB`EELd%*DQYEp6;!Dw{#)-(luLu=jH88??$Vr?Q25HX1~ew zKrWP@qRUzVnNuhSlO@sN;nKUKxorA>zkfZxzd3J8WHqQa2~AB+EwI$wSjM8Z)zh<0 zlyG3Lc6nX+H`tZWEn@J?Mik7;n`{Gw%HBd%M~!}$ZE-=p-h2G_}$zZi2J>QNZGZTYgg&i5*u#s84>iz*t8Uc3W%0u zYG95T!i33~Ur+AKwKvSP{E8xE^$2ikE!Z zXIH!GnA`FTfPRa>Yp|Pn<8zYhFI5HflqX~)o^EwMg+SVqF<6xx2l&+Yr=S{CcRmKc zpc(_)b^M_`qC*fxy)gJ4Mg)jy3S+4woc(FE%S3up{p)8h|8C9xn*_m5L(vCPlHMJfn8`W`Y0@6fSl^hd5G$js-NI zNr8@p{hxNH?KTJy11H#NJDhA;?zWnQm~c>)UfC6#_a{}HE<#fL-5wEqddG!xenT+4 zZ+hSuno?~A+${yZTS%3AZ%U$9v)DLQX_L`*!^H@Ha*1_>_QX>F9Ok?)qk}X;9OG{~ zG3J!2@?sy146phQ)x91PB`z%I=2pD#irm?HU?oPL-wZ4|00u#YcbKp$L4ouQZ?{V* z?u_p-AckxVZmjnG)PH=>R|`FC#*vNEoE7IMYUAA~~v-JUj z>QP4OEf%3!{kXeYCG1>=+5=!C5y4lxxI zd&ndv;D_iH`{Xbimx%|k;qfD77o=M53R|pF$Z)R>P%_K6)e3nQ>nHd`{+CVWp*HoNjeV!fc zT796~=knR|8KzXJB08p$qd=gPsm0maO%mlxt@-w+32u(JD6) za=SvCw|}Uo!KYnPJ{>?Yt1259)$O%0UGV+3EAyPNMjPBxsUhBeq|y53@b`mqZhI1M zU;z<&#clN-UH2&y=5I!PVz77#)h{9MRXw>Tcm=u+NR!ubf0Hj@RfOA0h+LDM&^o-! zL6A-VOQ4wT(4}WYEHIMQdqt+TzC~tpO1Ii!P6vIY8m_fUQ2&JSk)%-}y@Ihyda?PK zMOis*aK;AA#jYVxoF2WNF=o`-L$}{OJ!~ifoTqe6Vc6Z(l$yUkk z$JdxTOxec8S3~D~xEd$eXqmw3rPG(gDP~r1?9wC#TFa2@=~18kNlx0PSD@0R#=V=S zI)?#jV3rx8sQ>l@>vKVEn^~D^(2RroAs5-Z*%#l~OKb2=ur8H%OEp!0pzWu6QA!oZ zWQ3%IW1nS==@iwgVEtQ%kNn2prED7HDp%vAWH~PN#w&sQW+p3jMi0RXH4Uv2KAu*F z%~r|vvuUM}68_>QWYO}q7s#d z(V>R+KE~IVFo*8xnj6HmIZTEeTM(>W!pxXyDTYtUFS#Qg0U2|1x7BU@bkp)fEfm}~ zOLfLCEYb)kn5FE6PUaUYzphgGk3=XaqLn_S$(6XcxR@|M0T`rabkseTI6OT*UEA7x z&vJIa4LCl#q`UK+Z?JzRR6w<8mNqsvryD((GmVyGn&scu5x%^~Fen3IbmJQa$;RZ* zB`&EB;{)sH3OC=x(b6&chKFPNw);!)z^V^5xm}z@XB=+9N^vr@2{OeO39rRDgV42# zROC51+Znhko}8Xp=6}kkscXen9*c_&MWNl@-$*1qJUn6oW?QeXud!9nwSw1Pqx?L) zyj;7lrs8{n^2yhKyXToAM@b;~h5uabefw7Fc|!B)c?%`x=ks?_zI0MPR4)Ge_pd7) zyD{~+clSJ1j!y5zwaT=Odx3c9Ap*gjr5w0brCG(z$*I?1hOUS9^Y~mE%@TP8ySqHl zYT8?ZZ?z50RB7er<}SSZ7cZ%HzKPxEKQuPx_h?`2kftbdpFh$^~kg&0y@+ zVV!{i2&2sl3{}ziIKBlXlmzk<{yH3_sFf}mylbx{jG(fU9_==Jbfs&*rUs>KCCP*a5S0bK=8)P({9z{>Je%; z<=e3Rb{!2jx+fqYfX%3li+f~1negRxFcqI`_vWjieg4N1W;&zHw)LnsgliJf=*^>c z6wD_L>e3U1d45Y+zF%aU(B@b1^a()|Z2{ZZM&K`NYu&^oM~6el^c!vLQ`}^;&9N7x zf};pXaXW|NXhJB1N-g3kgwJ+H4iE^%M*K~spE*C*hH>%uE$>1*G+NVf`j)}xd{SsB z`j0UQmP7KMtH9|hzvO=}dInR8$yeAsMY1e!RFBC%j*HgGR3EwZ3^<6W=<&GOac88- zXXxCz6W`h^=eQ`0gg}lby~0~iH+j)`FAW+?1E(mWDHpZ}Oxd72lU5B^`eqfqv01## z1YoWfoogy_F4UoW<#yKf_mX}Op}!TCSS^%wxtaKW8)?tfG|KLGFl)sbs1(amQWQ#S z-v&P39-TxNN(@Itye(1Xw;0aAB<109Sk|V+s~?*9LYqRY6eBax+PxkjhM{f+8#rGPsY=g z>q|D-L;*}fHd6ahhqIxOddoS~H>h4$(QSX-o1V%KpmUeUqMpc2%!j`(ao69z6WBh3 z6S?~yx9u5#UitNvQD&z&dwmTqu*G1GX6fk?M0Gp8;v#h~N&`<$v?TQ_T-(5ffPVv$ zZ)*q?{@4xj7D;RK-W-{By*rUFOw_5-2lw~)Pfx20?CC>2s=rYir@#1mCFZpAwnQQ6 zBJ1xMe`9HE{4eGYQ6FWgW%+^11;!s#Wtpfdh>0(>bZx>?l>0+TL2#ynIhYH!gW-J5 z;osBEzWc@jVK!O0Lh^Q%QVsq&RNO?;ow&l(ms=Cw2AjFkIn*7Q+_5NtORX2?3bb>H-G1Hq)^o()T`q^0GLr6}d0 zk@Td6tA-wRZLMjQs8%p({*h5jPAgHh9!R3IjyA?cF{62H8CSlxQ1%O0<3zhtr^S7s zTNEdpu?^8!`P`(zo{se*E@b)?b2bp+Ag{m>%7tNl;J|G%fI5T z3(pTQUG0SEImtK6^#5VjD%6ESJPiB-=CGA zh}G8CR0?}`Ry}$Rv>LX6!6MJ{vEoy=1hOLotIL}{f3)T@d7-=4@Id-&cXLI#V*0OG zH&YB>Pmsu3)slC5Pa+J;d4Dvj2=xZM2L=XaXP=n*i;>LfwT*k4`jRB0Cq{{Rd5>Up zoNv^)^j}f>r2=mw&fh0je~cdT7qq# z73GUZ_drIZLP^r_syTfUTRfld#ok1d^)oZEblhGcsm964SmTDv0Ms4f*`^IM#^d|| zmwS`kiPE|ym-6}aaG_DT?Iwg3pjzDjFX$Bw4b1{Q%C$&7hLVzluV4vR^3d)Ohbrf` zqeN(FsmJX+YLG;yon&YC9D079>MbUIq6Vvc@|<(+j4t&TP;>oSThzlK)51{|$Oh_u zpjn|x*Zk;TiM`;#Q-ZPnn81)W-BOu0Hx}z@T6NMV=zrVv_0tb#ooCMwa4l2 z(zz@0eZ#2k3)Qz`I_ld?wEJ3u_s-{-C~FMY(`-i7Qa|>a%+@;@tfhT;uJD%Tk8)s3 zT}6n~*J>i^w)9^{Xj{D1c2CT0e2rVu)3wT!+Rh0_7rbdQd&>?dj_ATEh#S%o4#xJna#&2pU}qBfgd`1*`*b8c|gP$TJ>Ve5FMH)Tz5SIq(yLhve^-BvQJ z1lUz}TfD37VIf+b_Br5WoaC7*O<)U4JJpGO$WlYE92?^Y}ru{{9}~_WQvC&@RH$Qm>m_ zWmrHx3DwK@pO#L_Ntt5g@;=)V^gOCd4UCQB1}N-;oU>F7zI_ngGZ&lzFpp~2c?UQO zE=~GhV0KDQFvCG=rU#0AMUK~RdH{~G^K?Ka3xQ8|1l3a2ANifP9CR~20vW6?|ITvG z)x>615l^)|i5YktQHWZb?J2-)^5+E)j;1BC(Ia78UPt9K@DTl&!}F$}me_$FN$s`Y zVfpO1m@}8H-RdbXKM$6kSFW-I59$sa+xqwC0xB%=h#V_)jL^Q^1V_i$nWJ1U zhBdSOs;^xJLu0-o-HKJ| zbHDtxuDB-#QGgf9IIJ{m$k(>=Qq(nAWtZ1YlQG3$fr(+ z2Y@osXNX-ox1IP&V&(pM-mB;5&=W>yb6LA=bfY&v9)H0YNboQs!|!@faXr+}qT7Qi zA+r*MR!%{s3^_)`?$X3*dfu6jZ$ty^IwrR(r_S#%wLu<*f!&N6A$k?avVqiHW4>3n zo^y)H2OQsHY9ngWb2;Dd(Sf^fsmM@y&b>={yJ7FsKjfnF_ib;_r5XG;sYFs8;AXAq5HkdW zsh*jMIURG^Z=~TY&IXDd?o4o78!KiNuKU)e-ps=NvU!-AclY!56-x)lSij^z`1?4J zu^347eYLp>4JGC2tBR0_HcOWuX_Arrjm;l4nCF?O2oP>dO@IX}P3iPfN6Lzqijk46 z;LOMZY?OPq{1%NW*@WJb@>E$_*+}#OPS7!#ZoAB`k~^<0+I1TB80QA}H+(kln$g|* z@~gJ{K=(6O0A<^bN+ed}!1;7QH96<@A%HWKmX3}_jR|ymR$iz+w8yk~Z{L?Xuhp#M z>o~>(xK-dV|6t9Lsz9yN;%hv&vEBMofYLu}n0fwaQzQ&?=kslqJ}q7>NlA9Y5!C4; z^}V%Y){wzWnZ0b=&4@|Dwh;Q2~5pwsU%xx621 zu-NGHXqsQbA}UNH8xD3HY*)a3_~?y4#LUviZyOXcjW;i7onKpQT}BC`DPhG43D#PA zngA@){fgDUUKb&%=t#tZ!i?t_hP|x~|D`x7C~%EHlx-_T2qA#xu%CQUOi{xj=*&b@ zd;LbOkM|KTTJO_ymY~M_h45M-_jmEvR)TWd*&RZ{V}zx&ei!?>rk#!y zLVpE2N%muCYT+IvDI9WZVA&=IdeJ;t9 zUs)zz?YwCm-JYwz5QqUc#>?_%XKyD$7^%W^u3xNaot%nFD|XuEeWP24ui6)?45Whf z9af>-Y$iyA#JY2RCUND(*8G-R>Ni}{C7XT3oi7ccV=GUyeb6qN6d{~riiKvzNjbID zqM9lk3$r3Mi7ItqE6jdUW4V;Fz0O%>tAXG^`c2w#qpf0}ctz&fv{^?1(cG-05~x3W z$dJnQp?nOxe>5g0ronvZXbBWw9Y~4$Bpu7g9NJ&z4G-ILwmlqd0qYD_&?qdXDuu=5aVK{-%nItX;{cPj@|7r&$!X*=&Wd7MpU9Bv}?~ktSaS=QnXNtgO>P zkpA%PuX`Q}7n~!?i22He9A}BF5F=$lPKTpWM!K5(y5oPtc2Daom>-FB%=)G+9^N{u z!;Z`!k)m9*>iR0fEj*icy~>WM;riaZjI6B|wAR*cbVS+HuXK}I92><8Xp5u17z3zA zDeV~~Kna6FiwKjR#jXBJJp4HYvOsBHnwFcBh&q!a3FV1U@^1R$)yjt*xF4k?f}fx$ zVL)E6uFS#b=>@VW)bUVv_iyFnv|jPZMS z%YE6l1EWc0HIEQbyLI^S4n>rRmxUz;&{i}u%+V91S@d6?4_06*dUC^zp2uPeRcA_` zk|YW9edrE_AOv?dn7JKi)tSvXwwKz=R%^sf)s-uX$+ws=yVk8$DK3u%%`OLv^hS?N z@iyUaMEANJy1YnYrC1&h%dMW-gH$FB7dN+J^TkHT)wZy!K+Ek3Xnaa@h(vsv3eHF- z(Yqv9UOQk;C;e&eep<2QlT*H7kjMnD3nh$;`lfR*mhD_%m%Fi;YU_yIXDug_bWSoH zO>wbqh^@OXs>_{8Pi%NoFtzIQ4ti8NGsJRYGJ6-fixqE^tZW89yg&5wgG(urp9yGI zsK?9`5@_#MsI|s`V-YRRrbV;lHKIb5wmOfmlKn=Q(n{{CRm;W`t1LKok^2Pm9d(`$ ziLGkCf4jd2h0O{j%}qk&s!HQ5y7g0bjh8Vm8*Q1>0QFXajd~mV6wDwVwyoac|I*T~WIPGBCH z&^TXldeISQHe#5L!S+@Wz!HDB;Mn|>HWX|3Y>l*QE?xwcDPPpHJdU}FfXJ2yWlw3v z9c%8JL3JFPn-`{1)d%a4n;L_B)@qG+N+5O`kA3A_N2Ap&lM1LKTXLFhSGGV#I`h++ zi^2f)1q&6@^ZgwRoLwB;$Xw0_u{IX1_wiYOLBBMSgP)RfTEL|{JUFmL z(H3sKhja>lqTAj5&G=)=M?vCO`hq>WIxdm)G#Y%aL!B*lcgn7|2RZ8pN|7P-Ox_l7 z3;#EF(?5vre;hv}II^`x_Hd>DGNWtbF9W{KsFtvG!8o}=9Hm)?YL}R>JJ8-vV&bs~ zF6yJxTcw|rJI_qB0}MjIW~g6rzc%6})yTn%nboorC&X*yS;f=G$erV|Q(uAh2OZ@^?f)q= z4F@!aySZYL^=byZ9@e;nj%wUhr@z~&M7>V^#MiiRuNjIj2v~;v)~z6cEWiU$hBf4q zuRL?AW+UWLU1wh2%i-iK{JFc5rjf%z^eksYCnf?ez<9?T(L~a1D zp&^@v?p%~0N7UtINHT-+Y^6qY^;XN_Jo!%L1Cce5%exv!Or?2^O-)Ui`foki6-TD|r)D#=GMAQ? z>g;{Q{Q1)g$Q|3K$!BfMF#^zr`EAxV25D3p6U#>;j`0(J9(pKXQzlE(~16$4zX1kweu4G@Hu9#V(kgMrBR0Q!)edPEmyFGg>_?@ zV-sGV3;4#$gF|1$9^~ny4Tn!#^w4DG9`lT@Pe`WiSUgog2T)K>^lo&WTu^u7(=G+{ zE`2U4L*<((v}dGg>K6H->DjxV@e}`j`yr(^MV;PS5PJNBc@$CS>T!HU?nkenpU2t` zpP*+k$oD2mrFUE*l&2;V^=&JX$7f?E)myAq%x?B104umHSc^v>I>D}!oHO7Lo~=T{ zix^o`e~*VdV&9$iG?f`|Vqx9SkuQ2TA-F^DY%O<(Pk#O@aGf8F|M{%4b6}hHOVtj2 zAWC~uEh>YeP+5C-ye8x-AApycnW<-xx8Iz$>bja!$SokH9XWDMeVS@*j{ykul@y9Q z#L1knxSQnKvgHPFg4M% z|3&-2EwX#}S$UrgkvF&MN{@};KSgGKK3$s`biDJ|u^#qF7l)ZMJz$30;bG5oWAuHW zgRkG?>-aIEcdtp2WZX^N`p`OyrM#ouY=%Bp+gXpn;S{D6RS6pxFZ#3eaLAi$0;U=3 zW4K}?A%b+iDpS>*=)0ilF*BACQp7zjGZfXk_1OGo7VDjCy)HL^&(D=}eJOTT*t@vO zs1b5C+KMg2WZ4_Y786JZ1BsFpE~s&QvayiSXl9f)u3235u35xp{a-TcUF$ljVn`RI z*q+b8T&}G43#`!IyFNvp69HCoeLOD@Lezm$$krQcfOu~ zrd$O!HQ={KBNCkRM3@zZeXXUh#*2%Kx3;!c5(P_vj2lyx;(pPm+cLU#e(w+oIF!my zI}~&G?xAUj_Zmn|*VITI9tt7%q3h8=;Q3XX-gv7ud*+#zzpS-P#d6;sZ(OxP1xM2s z%m3*ou^(OWF`q!0DH)k(96P4Yr!HU?8X5_vIhC2>6XbYxJ2K08_DoH9Jm;bk#uFi@n?$S}DXybSFl%5f)YJ7q#7h7`mupnNp)Ul; zS@xC5_67lu-|FVEmqYbHM{K~wM%(mWYoO&U%S50-Vuhmh_rlSiN(jpw?~ah@c^u|osVakJGhj`XCgIVXi^X(W zs_*gSVC0^#4a8>_(Nem)jsM`^D%gxo((+4_f-<5dpuAQB+a3$p??&3rK!A?z>OQ)Kn%&GB>9xX=df^_nF#8i0AH1}h35~J?Wtf_-kI(W* z^-M&BJVXQNe5aIS)Y$Emh9S}p6q~vrXC*AJ@?{Y@xl)yd{I%K4gsL&Xm99(SQ=nRH z<-qS(iMmjIPzSdo<&m2jAoFr$hm+~1;R@laT@ zFP@T@{igf;H%V-%cD>2^`g#V+i%-x`eC)0`_e8~IWv+br0XvekcsDmU0K=Ay>R11e z&))AjCI>i%$zHMm0Ki3MasCH)$oo(IPo$^Ih^M_P(a$_u@pXywYuhXPQKOsH)V`??oCX>GFUX+v zYi-!!jPoJx(NX`LNz_W|>;Gv3@86Ev6+`D9(#ylXI6rj0x(j22Sz0|L{s#oOv=Dv& z18@Lq`KCOR4+5g4lcU7kHDaexUH+uRx~_!J=5N1S`Eadz^9Z(4R8;g9$}6xlHa7l@ z^7U#XEHt#f=ZQL2ie}bdeW(nv3~p2{k&BCqvwOG`3VeKi?(IUm7*$JtJsKJ+c|!&N zf0Zye|9_e=Fv1FQ!CPjE?G>ThiNbdySF0}IMElvh?U$_KS_N|G5+&A1B~D%6v85+B z&uOzf&E#4I)Pgk1FBa1fikj@>#Y_04ZpoS(DW^%<D!N)c=@n_~ZJgNa>ts zB=amALccf3zj$x%ok>urE0|YnuB_jTgOjt7-*snxadB~JDf$~VB_$;r8(XM270%mc z$JG^xyKOTwiXSCCJ$)G9k?1*&u|30B(QfR_Djt6Rh3@Vx_*7Y5UY>M31v$6Pht_NB zxYDvR)0eM*9)_-U4~v}`{m9^dX0$H0htjzOZD;@RKaXdE3-Y!DJ)!lvTen*ucmloq zPt|khYK?03!3|X0jISBKUUf#`(;IW+r2z zj0n5ADa{>dApAFfY?KYHEI;4K%*-t7u^LHP0Kh}Ss(uM$Nm7kj}&b1L17hy>aQlZNOh(GT0eLeBmUt5@@Ssc@jDVdxGxS0G+6_F za9B#f?Fx_Q6RwArD$#^5)1hG=-ny)2F`p_dr#|@R>%~xvn{=OmJv=rHJD!{F;x0aS zEjV4L{R_$6_!j=ym~Q4&?J7FYZ=K(?n1LH)8tlWUI6@4=Ew0wBpX-f6hqJT(=r5lg zrNd`E6w0Nq(=>p&>sY6nlRmwCa6cy`@6yrHnW(kPHMTOFtmnX9Gb$j$ZVj1_X3X~U zOC_lz;zHSKaU_*Df6%I!&?c-^nT=Bsg4}*BTeH=EN!;h2oWa{0PW z7>yO^uuq++!^;Y2{m?Zb3Ln7D$V{9cibS>DRxO<;WL<2Nco5E3&R=PPst|dGviRl| zb8&O~Kis-M_fi}$gCzpD>#I@P@qElD50VW_E_6$@SeBk^S+jG$)T&f>EB8LMAIEi0 zieK#Xh}jT4D4PPB>sc3=i;>HU;Y**94xF|^u1@(jk}P{1C0RpbE`e$#suO=_Vi_eZ zDlae!#uYyICn=B+B$p{z$&B&4?xr+v>Sc1CGTJ2ebMZ)JE@^`D+Tz2uMthWHiLxR? zgiH(}sK*0W2<2;lT;|Zs!pR}-ga5_W0KT&F*z;?3Y0O$mp8rtVDgJkPA3I-NGq#Cr zq!csLk7SF0)5n%k6J5i?sv%@->2l~QLtfhuzP{I(*?h&G*ZyS?Zwkju5!a2HWMvJ7 z0+KlFFa_;I@sxKZQdA=e6;{m^Q>tnj_YFs=`Jswg0@fXxFP;$Zt!AtTDpV`DBx=on zT#qt}B}>0%P(RX*Vvtoz{Wz;}Hh8NUg-yX3@HH zs+h&as9ugEjMq%CHYZW5?2|fan`&79(e35^hgGf@FT1uQ6+$6MQ71kUu=o#)q_onz zucr8FxcL)S=rrkr3L}zk9|ws}IMvi{EC^$y3h4a`Q><>Nr5F>d_|nqEBfoh(!OwLy zm__6AAhZ=q?K`NP|5tnG8P-Jmt$Wlzf>aR!0YO2EfPm7aDu{HH4hc=1c?qf3EHX(aP`VvzQH%`s`j=SD|r{?Bs6p?>H zeY%B^DbjrZ{yklRezqwpBqRg~@2>SrhXr&&uQ0 z@9i$UF$$$2xMf!6=o760)kc&*z0%O(%%=F|NAE%e8cDFQuqduhi#&2G65!`%O(f&Z zk2_K>(&ria0j+ZDRA||LA7%Z3t~D;q@_qE9@>k_YQkbseA_X)xn%IY~+QBIGK?KG% zfdr`VLy_jAB3fNDI@Y_tlFZh`XwiF5FVcSjMGd=ZMk~Y1GeHDbykXW6=heyIDJHjY zVJ(&LOg~yXH?FT`QzAU_O>2B$2X(W5r?s(-jUqv2=%&c4)sVdeAaA8*y46`vP!c_I zzHL?}ix%P_jO|8nZwe(HsjRIRzj`W>qi1Ua4ps-@{t1AahGwa+L*mnyGv#wZ|G z>0Ecd2lViO)Xb`s^xGX6=m)y}&GR7c;P_v~Qn&vz71h5TNWo*Wd__X}=+X0mf*7d* zYw2vKwlDY~dm+D0>ze)J<12SE6g@)D4?UI-D5I{w12QMB=g*%rGk<|yk_8mqDQG*N z|2n$oHHc^YaG`ieuVp|N3tPej0S?ZW|M-0W-IRN6RwP{O*mAxocdnG<%Xj(SPIjc> z2liP_O7&yYk^Ke&f`(cc9ekg0zCbvq23tRP)TI>j`}ig&DqurNn3(X-6ikf+*Hkv! zy=OLK@iE8|Aqq*gONU&_=U-5kIqDs}JH54uw_hmZbZxec6Z2TmsibP!udbLx{yE)| zT9I05=i3{;W0*3d`ylSHz^-`jeR#2S=IFWWrbD!7pszbGJpUSIV9;=qOkrYg%e8#Z zWg~|x_S5H5iBMU2M%lf9JRIyvxm8*KatRXJkyXp@($@YJ=TL^-DZu6Ru?DlNrtl?F z^VrWfTBCkkE5#TYO0swjlg+s}s}okz{l(u zPeYFzuWm;fJ-h8(s!xp)s(&XQ=jUubKn>$<(jGQoRM1hAn5#aK{_+X9*D_B<0tii#E~79kPc1X33?rx)~miS0<6eZsh{U1L+K5wzl;{m7XTuK`1Q8Pd4F1LIYT!J zwBpfnu8WJ(FwM851+THmk@sR_nhD4SL_Qv;#OD74pTU)*? zU#5caqd^a}3sq<0)IP&VxTh_nHLwn0AtkSnD)_e!;_nw@mW6VaqLp{I^ZFg;)O|4_ne^ERhqlLp%~*hZc!GdbJ928RXF=EW#sH z#f3&YfwE7;RZ%XqpX+5WHY#N$;E3+GnOF0Jbj<~)XLWusqU~w?ASr?`SoVS4a+my` z1}3HXPt&}18GqHzloEVbs#>0}7mIvvZt=%J9?<;Jv@!ApLEJC+Vs@cE43s_8_fqF7 z-|(09#RsQT9i^nv;gm}gq`V<@F5fKw65t8;ww%18m1u5T_RqL$VRy5XDZnbpq@bf) zb(m$d2u`R})j9n@T7AthO>@txa>4aDw3;-`>|e?3ckaST zzImyo{!kbXYc`N=>GPbQD0h56+_!P#Y-(vLEVIPFfpnI9K1Z}o zhDBQ7?zBF+L-};QGrXc>7sl6q|wJXiJUwJj0!uXg@*0n~rN)8+9XHTV$v4&9BM7 z!Wj$UuvBo}_LN{IBdbY@3|{>(xH*CAuxu!`XI)ne|JsZ#cKBL2^&bcb0x?VqnZ;J)KH(he&`d+bjclXt@X#aPwGcs%NRKE@U|{j+KQfk z?7|{C8h{k7q@whqK(V4%%W2b2s@7wTpuI&S zrXIz9?A+4HHW_vlb-Mf=X1n8Fc-$~pAqR;lx~G=lAZDRFKUU@A*F{+7VQ9eqelT^A z%!Wpp9>$lj=zzVtGgUTLdeuv{zVWu>R)z{Y3ufP6`ttUr_T$C|?@1pF&K5ae>!ReA zP}s0@!5?t}2&3^nnV2*m-(B952c)F0UzaDwSdAz@h#AYrhfU7Op4xdd z4?I@WO)=TNX3`?!8&rW!MSO~@noF4ctTimW>s^?8K1LEq;Bqk$fav-vBbZxz%!3BC z`dyAk0^&M@7^{Z5(J@+;cS4Z{aVLTdg8-SQrY&}=kX`Vn)|}knNOG}X?9v1}^{768 z)y3Ioz=9^N1%zy>V0C@20^S;89LTbBs<=40E><&L&;B%+kebnEk8y7l$v-|8JFPvn z`pCC!oxVV$sJY~GI{2u=BV&+Aa>UQ1@1^y{WabAU5jFGgJ1`HoM1D)vWRFrC>;7D1 zr(c++`5z3LCs4ccA&QPXK7ZZXFZdMKlB<*%VC6#@X@V|nBR*dEcM znkavMbh4#k>lAnF%cD7EJ z6gf!X_-y6(+a{ggMGDT!%9G?Y^HoOD18(kpHPtKeC-mAyhE1WUlV)LpAKBSrT2OZa z#qh5po>SF^Wd_|T-{xvu3n%$hXQNoIV-JkZg*M;Hi~tUD>&PIJ}!e6sYCny#{aIO??q_2l3l~lFnX@ z0CVT+Gx{O9B52xKGg2mI)$UIIq*Wb0aSsxnT_&MaKAm$pKTX?#GXJs7=95lH^G#nHUA8HB&W;f`UgEHTM1rH+$Vhkfi zorOB<%|4!XLm$e_3EK%l7a%r7g>_i%0mnnV5_*JS zUef?y;j1C2aFziCxmH9OTV^P(pqM;9B zS+9;gp>$}HO+2O3mTGie3`gQfp%1MYD?A5Ug$ds9-J_jt`7~s)2p&c%D+R{7!zz1d zIwk!Rm?y7TV~-TsdcrC3-t5H$L}PVaeWY_Y%yUq+RVF)2-A$U;__bNH6@qwpy?S-G zPKo<&Y8}5bcS|xWRQnY^6$GlAL{}YO)bzTk6Wufbl%l2yu zv&@vUQx=`rG}XL{XJGs@exPCHvhb(U?DAe*Y5M8usRh&1m1>1D8#}7yks~>R%_w@| z6AaSU#H4-dRC?%dSzuHy)%oOV^=TyVqg!>ov~~-*qxJifB2OiDP=v==cQ9|6L3J7o)ff*IR+w4U zdE{HVl@vd_n(T+W<(ITQ8)_dqB7=|TMgB#jP{-Z!H0VthXn1YOFNbY&Yr!84Z~v-d ztA512gxQ5BmK<(LNq~l44pJI?e)t@;w)N8|KOO&s&~91tcVTl>FWHglqmD3z_;qZ0 zCRCf`2+NHqj>+y?UQ^i^GQxD%NTgmI>Nu@E(}qxGejhx^om=0_XfZ52;bFZ@&NNLw zQY~FbJF`yb#M*_{&U9=4*{E9`v{tLP90CmBZrfW(N2d9I;Ym?_iO-;)eww{AH55y%4QZq^oOBx>{7tXE zDkfmuK8STgzlkA(&AA)ize@Sx%MBJVa%Yac<^-1u@Kt46o)v3+$h8#moMau^fTh=z zKvw1~{>6?0Z(Fi0T+%>NC@{yOzDrJ&rc;fRm>2eKG zV?ST-Yt<5BPe6X+IG0{pXYsB3j-0F)Tks}K*B66Xc{^lnzcD%m3*H?4 z(yD1?ZK|T-dHToD0b@_Tr12WnHw0;2E3*!Z-|2?e*OxZLp~Wg1R(@?2bi?!-ocj8Y z`Eej{_{biTiuP6iB&_h;{d1%}24XKUA3A1eVNtMWP_g8M2iX-J)_b|r>w3lR%xvZ<}{c;HStjg7YNWppNj zoj_>#Y2S4l*s^5lX}YFwl+50iw-%9`VW9n0FV0-L_C)RBiO~l|gge2gy9CfT1^KQF z=9qr3m4)b4;3kv0+#BjS^IR0t0)*WOK)cAdVM6pq-(=XL>7*>k5RVZ;XsFRic8u_3 zooCN+2YVHo-*&Q}6^wE$PKt43sC>oAxqba+T8E{{J~)tV5900oXDRF(kN&HM)7^Cz zlO?A4m~SR-D=sJQ0V8r)kUnmy#vU?~K3s3^$SzssHV$z|TI9JcRJ`V#M&|D1lDk{I z((t@ZAgDBHc$~_%RAFvQb?vX-x#Xm2fm%IiW@vCn&p5AcEA4oefM2~pn$Jv8k@nZ7 zJbRAt!G``Kg{Es`^{ma!3zl}pj3k0ccXR}M_eQy%XPnSe+}Awb%egoX*YOAk;$32+<3nqqE zA6QFC!!A~*v(mg+Wv^)C$n*Jpg0ph|t(=eBj$x2`w<{Z`kHYR< zpl!{Kn>4{3m2={&GBsA|#{(j^taS0WkGbxvH<&K=oRaJ`=Pl{`JtUxU&`G1AdAQl{ zQ4)>{f!{CEhs{HV2O@8q_ik{EJdvUkFnfEMG#jD;@x38y*uV3{v6x8B_3TLASCmg9 zeodAo*S2YU*Z1xdA0CZg3jQA);bVvP99N=aJZ#Y*q-y2WFRQtsEyQ92vh>ImJ7uT5 zs~&@LU`K7e?GADL#5#AMs?zuuh9PhRtoGYJDVw)Qo+!h2JS9+3 zw@$(=Rnl%4_vz7F%atj4 z4AMIp+^nZKa#d2`66=-YjaWuO?qKikh48P$9Ua_VMI3!_U%#*lm300iT zEY@9`VmiVd@MpOu*1xD<#WY`lP6JYG(l&z`3+M00aU`asjNe`DhVq@BtwVO%7UV@= zfBI9b$8B1$RC~auC$Uq?(-F-mR=jgG9G0Hr{R@@mkg*f{@=yUxEFDMwN6@;(V|bx> ziq~9G3-k?>+5sAl+vp+m_E{;H_RQs*kKq(#60*9O6Woy-JG|MBqmmdcV~C%z5nTO@*9O*)!dHCg8Lr+7{jDw;ytyzywS>{ z+#mgU>JirqoD=%j35Hj>s#)p$+4lM-aDC44B^Pu5`CC@ePoh#Q`eQm?8YHRaOSpTk z@e}rmNDf#mtVb55=YS^E`)NQ(nE-r4m1jF1_xVuuT#8vD%^$zqq+v7oN#rbC~o*AEy+Ikqq9 zT2NRI$!4DUot14ABgN2<)z1O$)?x4f38GPK565Wk&Q0BA)z2COAMv7wA|1UB_$K=n zCL)T65&63A8MhaKdm3Xg?#gh$aUHd|Xb6Ec87UxTJDI!`Y3CHNz9-a+leTM)MSXT< z9=mgpn92#^7VJR*-C1o+;@qqe-R1_mS$N#teV&GKw{e?f*2>X@atkWf?h#8KQn?Vi zH=%mZ<_&ZO?SEqW4u3s>W!E2%#d$4CG0a=G59M?ZZ)A!5aP6(HwmFrJ^i#iu*IfRimCO zf=k7nJ@dtC1N3cOeJNA2;&RuSq;<#(wIhb76ED!t`VQz- z3HH2=fpJ^j@9DMAVK`!o%|C|U$-9rh@S-F^rvAcbI!H#$e8}@BF(7xx6i3rIXQ=)3 z3Y`ihir#X3ST2b)v*on8zuSCmVMNmON(+!u1W7vuaERP$rm!Hpedcm)BwwOAKB~%P3l=gG`e|sOl?>4^7Fg?Wkr4Iw)GJhP=Smep@7M|+X67e zbmO}J-p+DY=S`jJc%A3`Dml4>pSJmasvg5wo(+F2hg@!wnZ>u=LxFN*KVEAwDvd%0 zI(9O6Zc{CYEgqKgIIV0ld|UN4PcBfq-DZqWWl}>tG#7C*5)XYY2#S*C)Un35u(-{r z1N&jwzivdTw@{3acLwX~>5=k1i5%FdIL-)_NXHhUh(A#(25{EnGJJ&%yVi0ErO z5f$gr-cnW#K%zSDPvla}uK-os0QUC>5$~!>z@JT5TQe;F+^L>Re#en){Rk! z&@(JVRpB?6sB62`aBwDT23Q;YNWJ%k<1Iu%+rU_`1T@*2E^X&LP1+%M7b0sP!KHcG zwP;>A-u*7JTH9>>0kLHaZc`fGXY{q?1(&by#2}4?solhR*jIY^*Sbj!^8i*cKuLzz zQVrm50htYbx1$ts)NZ=4qmbRq=*O!u*9>45DkPq(a3`(+1>A6Sczg~%2&SI@Ei3EE z?wf{kE-Ou<22huRa(+@a^n>^-iWDotm@Kc4e?EQ%=Y+^~3;L>Ym*yV#1PZ03>6JVZ zKCrlJggw;E5~_ZmrMfH?^<3@Q%+xSXW3-4{8&W*dN3(ZytqfmIPQXFpk9>1ujoK%P z=)yGYfdd_0(2W2cNI)=9lx)*r(a*XwmHh+b-0`mHk*%HG3wuu|C*wz<(O|TW3=Q7 zeOmoD(1dUktY75mC)hxJsY;EO_oK<+A7Uiqx=`J|6t@YRECkv3{6oJ9bd}7zdchpV zFdecgLCXB@9t%3m{XoXQz-BGgTso!e{fXc2-Ur{%T6rziyA}pqU4(8YhuR4|L{9?_ z0$L&f2vLd1#qUsuZ`ljqq5BPjto5!8s5Va&>@jT9JfP-{pZor=qM{;a-Ymd%y<+#4 zg)gUmOY#JPzAO)MTWeIYy z(_Rvn$?(hb)jDr4VBU+@8grb#t{^Y(1+a=%yS|TPNqyjNc^C0O2B2+g11P5kK*BTk z*~3(4`JO$7mv{N~M`MS6RTyM>S~s0ek-}1u^q88V}oKttXB<95ZKac;AnsO@9b3vNX&jvkJ*Rc7^c`~M=>JwH1T2O6w504~y7PmS@AU6V^t5fkKu!8gqI_7D$aqt#yRyAhe7o zG3d5=X=0v^+HrjmoSW!XNCkbbjvm8920W+{^b&PTR5>)K)7i zV!)dBPhJcIu~II;bJ*LhXw3XlP>?ERzs@f^sApyL79^?A6P1Ai!a6}gEAXriRgG&`IdXm()pKW)GRi89dw0tL93y8bDl#*8kCFW__#7s1`&&mz8+HI z!*#dF6H-a9XzY##2GL7GMmC(xyEK|DLqN``4DJTngg!@GK-eG56r0|6$$o6YGb}MW z$zu{o#I3ViyS}g`RNfbQuvIG!Xap{&B8gPF(k;2^No^3?M&226j5x^Vy#fjj%7l}S#+TJgu{W_+pH2Q*-w?@D?v3X>( z77i@)&%eH>`pu$HPf?w2W&h8v{R30V5EG?R?T(cn%K6&z>*^+)qZTe-P4s*Yg$vls zkNz6#1ucarCZ{F5Kju8C{$|CeuAx3Y7N;?`9(SY}A [!NOTE] +> The policy type and ID of the final output policy will be determined based on the type and ID of the **first policy** in the policy list table. For instance, if a legacy policy format policy and a multi-policy format policy are merged together, the output format of the policy will be whichever policy is specified first in the table. For more information on policy formats, visit the [Multiple WDAC Policies page](deploy-multiple-windows-defender-application-control-policies). + +Lastly, select a filepath save location for the final merged policy on disk using the Browse button. Once at least two policies to merge are specified, and the output file location is set, click Next to build the policy. + +![Merging WDAC policies into a final WDAC policy](images/wdac-wizard-merge.png) \ No newline at end of file From c9c6672bc3c1ab923aaf98951317500241de05f7 Mon Sep 17 00:00:00 2001 From: Shannon Leavitt Date: Tue, 3 Nov 2020 12:19:21 -0700 Subject: [PATCH 017/486] Update bitlocker-how-to-enable-network-unlock.md Added commas --- .../bitlocker-how-to-enable-network-unlock.md | 18 +++++++++--------- 1 file changed, 9 insertions(+), 9 deletions(-) diff --git a/windows/security/information-protection/bitlocker/bitlocker-how-to-enable-network-unlock.md b/windows/security/information-protection/bitlocker/bitlocker-how-to-enable-network-unlock.md index 092a234e68..b69e88d45f 100644 --- a/windows/security/information-protection/bitlocker/bitlocker-how-to-enable-network-unlock.md +++ b/windows/security/information-protection/bitlocker/bitlocker-how-to-enable-network-unlock.md @@ -124,7 +124,7 @@ Install-WindowsFeature BitLocker-NetworkUnlock A properly configured Active Directory Services Certification Authority can use the certificate template to create and issue Network Unlock certificates. To create a certificate template: 1. Open the certificate template snap-in (`certtmpl.msc`). -2. Locate the user template. Right-click the template name and then select **Duplicate Template**. +2. Locate the user template. Right-click the template name, and then select **Duplicate Template**. 3. On the **Compatibility** tab, change the **Certification Authority** and **Certificate recipient** fields to **Windows Server 2012** and **Windows 8**, respectively. Ensure **Show resulting changes** is selected. 4. Select the **General** tab of the template. The **Template display name** and **Template name** should clearly identify that the template will be used for Network Unlock. Clear the check box for **Publish certificate in Active Directory**. 5. Select the **Request Handling** tab. In the **Purpose** drop-down menu, select **Encryption**. Ensure the **Allow private key to be exported** option is selected. @@ -135,17 +135,17 @@ A properly configured Active Directory Services Certification Authority can use 10. Select the **Extensions** tab. Then select **Application Policies** > **Edit**. 11. In the **Edit Application Policies Extension** dialog box, select **Client Authentication**, **Encrypting File System**, and **Secure Email**. Then choose **Remove**. 12. In the **Edit Application Policies Extension** dialog box, select **Add**. -13. In the **Add Application Policy** dialog box, select **New**. In the **New Application Policy** dialog box, enter the following information in the space provided and then select **OK** to create the BitLocker Network Unlock application policy. +13. In the **Add Application Policy** dialog box, select **New**. In the **New Application Policy** dialog box, enter the following information in the space provided, and then select **OK** to create the BitLocker Network Unlock application policy. - **Name**: **BitLocker Network Unlock** - **Object Identifier**: **1.3.6.1.4.1.311.67.1.1** -14. Select the newly created **BitLocker Network Unlock** application policy and then select **OK**. +14. Select the newly created **BitLocker Network Unlock** application policy, and then select **OK**. 15. With the **Extensions** tab still open, select **Edit Key Usage Extension**, and then select **Allow key exchange only with key encryption (key encipherment)**. Then select **Make this extension critical**. 16. Select the **Security** tab. Confirm that the **Domain Admins** group has been granted **Enroll** permission. 17. Select **OK** to complete configuration of the template. -To add the Network Unlock template to the certificate authority, open the certificate authority snap-in (`certsrv.msc`). Right-click **Certificate Templates** and then choose **New, Certificate Template to issue**. Select the previously created BitLocker Network Unlock certificate. +To add the Network Unlock template to the certificate authority, open the certificate authority snap-in (`certsrv.msc`). Right-click **Certificate Templates**, and then choose **New, Certificate Template to issue**. Select the previously created BitLocker Network Unlock certificate. After you add the Network Unlock template to the certificate authority, you can use this certificate to configure BitLocker Network Unlock. @@ -167,7 +167,7 @@ To enroll a certificate from an existing certificate authority: 1. Create a *.cer* file by right-clicking the previously created certificate and choosing **All Tasks** > **Export**. 2. Select **No, do not export the private key**. - 3. Select **DER encoded binary X.509** and then finish exporting the certificate to a file. + 3. Select **DER encoded binary X.509**, and then finish exporting the certificate to a file. 4. Give the file a name, such as *BitLocker-NetworkUnlock.cer*. 9. Export the public key with a private key for Network Unlock: 1. Create a *.pfx* file by right-clicking the previously created certificate. Then choose **All Tasks** > **Export**. @@ -220,8 +220,8 @@ Here's a `certreq` example: Now that you've created the certificate and key, deploy them to the infrastructure to properly unlock systems. To deploy the certificates: -1. On the WDS server, open a new Microsoft Management Console (MMC) and then add the certificates snap-in. When you're prompted, select the computer account and local computer. -2. Right-click **Certificates (Local Computer) - BitLocker Drive Encryption Network Unlock** and then choose **All Tasks** > **Import**. +1. On the WDS server, open a new Microsoft Management Console (MMC), and then add the certificates snap-in. When you're prompted, select the computer account and local computer. +2. Right-click **Certificates (Local Computer) - BitLocker Drive Encryption Network Unlock**, and then choose **All Tasks** > **Import**. 3. In the **File to Import** dialog box, choose the *.pfx* file that you created previously. 4. Enter the password that you used to create the *.pfx* file, and finish the steps. @@ -246,7 +246,7 @@ To deploy the required Group Policy setting: 4. Deploy the public certificate to clients: 1. In Group Policy Management Console, go to *Computer Configuration\\Policies\\Windows Settings\\Security Settings\\Public Key Policies\\BitLocker Drive Encryption Network Unlock Certificate*. - 2. Right-click the folder and then choose **Add Network Unlock Certificate**. + 2. Right-click the folder, and then choose **Add Network Unlock Certificate**. 3. Follow the steps and import the *.cer* file that you copied earlier. > [!NOTE] @@ -336,7 +336,7 @@ Gather the following files to troubleshoot BitLocker Network Unlock. Debug logging is turned off by default for the WDS server role, so you need to enable it before you can retrieve it. Use either of the following two methods to turn on WDS debug logging. - - Start an elevated command prompt and then run the following command: + - Start an elevated command prompt, and then run the following command: ```cmd wevtutil sl Microsoft-Windows-Deployment-Services-Diagnostics/Debug /e:true From 1f6e2b45bb0ffb7bccd709a236208985eb82d073 Mon Sep 17 00:00:00 2001 From: denrea Date: Thu, 5 Nov 2020 10:37:50 -0800 Subject: [PATCH 018/486] edit pass: mac-sysext-preview --- .../images/mac-system-extension-filter.png | Bin 25122 -> 15868 bytes .../mac-sysext-preview.md | 109 +++++++++--------- 2 files changed, 54 insertions(+), 55 deletions(-) diff --git a/windows/security/threat-protection/microsoft-defender-atp/images/mac-system-extension-filter.png b/windows/security/threat-protection/microsoft-defender-atp/images/mac-system-extension-filter.png index d2f1c35a83dcd3f85e43e6e9e24417da30ad7c51..db725b26fa5ae952cec16d6d6d26abe4627b9ecf 100644 GIT binary patch literal 15868 zcmcJ0gL_=jyLD{aoUlp5#x@(Yv2EM7-86O^+cp~8W@9_|^nUldf5Gpb=b6czXC^cI zoW1vY-*>I`Mks!jL`EP$00RR*J}zl|1wKj2Qvk|JQ06GX?r z36zep(yVdOmmaOEpIL2q7ZUdd;=9 zto+h>inJC8ga{$Gpb(L~Lb}X%zyE&o*NhTv@@*JBG4M&h|Ln<9gVo}R^uJ&EwzROI z`aeU6(WS$Zc@|BH1x6wG{h0PYe&Ph0P-rr98&73iZM551Uz(abzk-2Guvg#W4jMNY znQ%JXGfTVwl*MciIA-9$bM`ENg%DC}7fV*O+B$x-9On1tdmO6Mma#(6QQlh@9l(Z% zAKRcVKY;yIX&puznaxqPxf?}i=+M6_ zrp`ypi4*F|#Bw#NvCMK;z02@Hyw|(gD*2vgbhE=Oq$R)<9t@7Dxk&J9K;Q0b7F#CrYB1v0@{Xda|-LbW-ry^r@?>;b+T; znOxg>@fghQd{ytD!hjLEXs}&N#m7VYf}6 zhZ$KW?yL#Hw_^p4jI*CsmD5ecno~ung0GkS4{J^f8fIsI=V&du4PL|ypK4P$|FrHd z)98&eF$y}I2E&rJz5PDCXuFNP2}LF}X4MoSXJMd47=w93&lw`U3oH5s5-YM-M+(W` z))z}$Y7gv9`by+7&Hatk^Kqi>ysMzzdTEi=*X5zYjql-m^x z4hwR&L?MUE!H^a!lI9j!6LKnB%dR7(yz_p=O5Nw=cggTcAT(litNAoV?TXXR+4SN= zt;H<$UX^x>vfiS9<~A+ontf1bXId7on@Dqqt{n)YN7wJ;W%CZ1zqqjx2P0ze=r8}) zUXp@@5yor4yfrRC-Lh)UCVRo@VlM;jCsCNMq)=91BZlR(5QuiKSEEfWe`2c zb->m0uF?F(>HijRVQy#Vw;RJLg#toNZLh7x@Qj3d#rlK33?&gq5<>+grGy1it6cL=akZ6ylW1-J}*am)#Hh zdnO;o&&gwEIfACI5%LY&9!-4r4~v3RaX)43Z^B@(v9K8QI{A2cc_}F&)8n!6aEA39 z99UEjC$e~*4&=CMWtlo|PwOUq@0ZOYo&qOD-d`@ds#N=#)3hDoRi#^Hzw+OGXXtv| zL9A`{daz{x_D7e^DhFswqux4eW@aWopMnT(5K8#=WWFo`{$^%wE?BOazHXV%aZk$F zP-^n$7pu`^I$&?zbbY+p+1MSVYS{`KZMDaT+KE4>n`M({>6h{p3CSW>b4 zvHPv$X~u_jH`2^&U?35TYU}BaVvbTNwnO*p4{NVe3k`QZGV~K2x3|B|a{kbU=At4D z4S>ET&?d3S0J({xrddE^o3&c;vvaU3NrCLu_p+YFh&B72wqMjRu972dfM&vIe0E8r7UNow<}Hdz${V6Ns!IPdOjtLG6{5D0i}n!R&mLGtzd) zuFlS{uZMzRa0h#PWMIK;Gn}_z=1}xvNw+Sc!u#>E=4)RTwZADT)!1+Mrs;Z)*fvf6 zU@_Vqi~+FG&2Tbz86^x7KKx5;tkcJK80o=y1^}cyM*_ygP4Pn{UeQ=zA4(gL_q~3dHIGdS@6vX{2tu#W3b62$@X@e|3gu|g zBpOuuv?8jNUGJWS20~H?z5(QCuDeio&nzeQid;jVDw`qThkvP_2u2h0;>bq(Vbu3Z z;3L5l<~gfV@q{ZyQfaE`p+zqjRIyJ-?DMYp}qTVNw>SNa^*%Bnh_dl8ws&l8A7(TB;ETYs)M zbY;Fc_YbAqeai8E{&AW~v2n_7uf2q8I{&bxu4JIC@i~2al~;^oZ~(1l6i#zqJ;gko z-mLUw!0_bdrJUk70gdo6h?W9j$XIw}q8=C5n4Wcv{#@&! z(HuV$T4qb-2+S*~u2eN+AeoZ~SIDbR~Vn=GZ zAN~Yr-3JE;B2Ia592v+WqH+`oFi?i-A`~?s8!Jo8URL;PmFP$Ri#!2Wcw2a8jqv1) zt`A?Rlq3GAfxu9o_oqWW-zTcIWmr;ge}5&WEHL;=VG9eo)GuGYsP8!Qk)W<@7J=yi zNwnbX(L19OghR-BQ&@X=GG(Ud6$PXB$=Sh*qOEO@gONmQrbgtwL+QM2OsE)z3QQ6m z=j5{X1@ktg%6888>#7PuRBzgICMqf__4gwhw>_T@AbCPdpcIi! zTt)^Cyg}8nhAODPm@LMVK^S#UOU?-MU_gd+iHp6tbhKELIER1fCyv z_tACR2^hV_&eMiRIg{Czw}kdz{1 zLFC%^u1t^ITI>&(&$Dyzp{E6Mex21~r4JDG^49le@#>wX^Tm&(X|cYdT^FYCqlL?K zUJVl3b=;{ctcY^=O1I4TykDhRr7^g*%D^BKChofqJ^Bf6 zrfJO)F_h(c+Y>FVXVwSEbZ3j@DMN(Y`7eXe%xQZ8Ko7Hje7%`eSo;YlBA84bufWKQ z+n4tbirTa*6$Ia~V&P{ZvW0Wsfb33$wyNV^^ZH$fD0uZS%Z;QGl@|R(a6kFm!9*6~ z>K%}RQlN#Zix%AFf5@jXp03Tanf}4!b7z+O{3O;eb{~JOqbkKcBXwp6BGBTC+q|)! zGW$$-v0CMqH=@ssKMqsSV_t_uprNXE7E&?BG)_!#)-1X0XxIhs;k5MjP83#u#yH7`D>jy?#Y}{gWk%Piiq8E7=g#3( z)V@5gK%Qma+hp9=dlAsQ7GD3%V45RLGd%Bj*Z{B;p#aw*J-Y!FBEX+vY>%z;yk$F- zFqdvp@PjX*LKmtDjf)b)nI>?I@?ChZ(|@Y)$ZZJjD|*<$zRN=aZn#eV0vVE|!u{*l zDSqjcheG~j%A`5^b-VY+hg4F_ym)#}Juyi--MXpoXgfr;LIm4qUZxG}Clv%lY;L z9f_@hmr#X`cBu9yD=6&XaG%@t!cymE9Yw*XjTRxFVs5d1?#u!${r=@}bE#xA&;6sh zrR6E|Q>Fiv$63Ro=YC_C^>QtcAM|LDP0iK;)$F8H-i%Gf%3GVHE-8;`^Hk50yhPH7 zVX)RNGLcpF;mW5_Y`gWDnG(C=S%c-8nvs4M)e>>j$1_69jKAI?Mfc>CH>0ozrl#B# zu9UXZ%*1fAke$^`Xc}Fu27M#=6lx+yt1l>?lG+xH*8K@!t(2&aVd2WU|)g>y0$3G*ClM ziXQ7vacv}A(358BEu!Hq3AR~&tHVOGb~P$f+i0%oD34>`{{#L8i!F?Q7uhOw@9x9v zR`2`V^O-y!iBxH8bbMlRSBt>A0$D&K-Z4^pU|)k!O|@y>GX;+l4qYR%v9Z31y*{|V zF-Oo*UIY3~6D-6LDWOyWMDSOO(Dg~Kef}G6J#V?F0&QFk%voEfcJ%%p-cYr*Qr_$$ zI`Wfv!F08S)mZD@omq~a_ghv{D9QzFdQikFZVg^qN;3V!-p>RAPJ$U!R3 z@4V4Zk76t!j?-I?g=f}Uo7!g^-gG06&~4(c8ROe~8ZWq{jI&w*BNB^@6Rti*K!b99A3{1+?9qi-$*SCXtpyLRoQMK?|k*n>-B?@q${aQ6dO^cL7szY2TT|&0AU;zUk!U z45lo_h+D!yBQyp^QQ^-)b-%Gh7P?SGO?1!sL~ZMu$dBb}nKxgp>k#SY_%C+1=V0=4#A@!Hvk zT&WG3F_m(wCTibN@YF>>U)ii)0%&D$qR!S3R-s*gM5m&s36?SYs*ZxVW&3Mh_l2t|j5V#kfPOBOp7 z09^E|=a7fMiIKDO^+^+p>{hxe#pgN7A#r>vmKv4Dbfgc%l|2!oE)~O%Iiabbw=~rA zGj4kh!45B=jdX2$dreRA%^BKFi>3~GW~2>;Z;*_^!5rJtCnE6QWf7U{uQe@bs2L=T z0r{0Y_y@H9iy6kYNDv@(1(yNv$qLs?p+#R{+>H$lS>RMK;YkqiinxqZs@4X;1&Fx6uWgHnw-LpfRhzAsW+f#3w zv}+J)_=CofYBHk0>i4)EHeaSzr3v5p_qEA#-qGge1pAXJ07xNRypKJJiLWEy92;#P zMAp%2YRiS;WZFlD@wtA;d^Vl3)`>R5OX{H&PjBS8OUv#McX7FUeY&|zf$DrZ$k4KF zF#+mMHEjoIBwRQF zcvo`r%g$~BR1pdMX*dVp^HITGnTJEsU&lz!aLN(~4~-pq1*?iKu=zs<>+7MwhtW67Kx`4k12Hq^t!5HX~qb67sCz!WTh zckm{+f3uqQ(1OvUKa&o2SUkHXG2!bKl#!ZQop63}fWAKdQ3H^wQe$tcTnt z`1RFl?dIw}hLlOG5kn>nJSZ=O7<>>!w0h*=qpo`?seeaiS&o;$Xc`o7Xs8Kh72dOq zkIYxU*xirx<;!?sPlt$s!FEZG@AHP&#qnQ)_*1>t9o#n8Gm0)P&3g0czg1nfC+tm{ zwzi*xfnr>qD@&zJm0aHU4mzd0s*03Zzq_;e-`z4Oo3~`7r&mV(J^j4t)N$Oha-m?b zqy2d?8lO!Hr4W_?!9&DT?_0ZYphGf1wV=OQ*DVhlw+~D1&eP)!p1Br)hiBy_DjGBo zZ1;uv0eOg+w^uW-^fy|%{D+j!M9~t^%le9b%iSz662`9O<%rM0d6>^w-;GBQ2rr|~ zHZDW&7+V5GSWCI^%5T!+qYNGK6QD&UD)-7 z3TX_(O}pXlmopr0K26h*y6}b& zS#JSk3cJ|^QSFLHWfPb2MnWOJK&}i}#CeH(&~Wd5Le8^jcnx+8%{M9j_s3meDtJ~< z#Rz5ugYtXR%z#}8KGMCXOTTv{^_aw_6J|J; z(i$~yw@?-&g3Rq>ID2Z$K$9<_CU_hDqIdSiQgzYKSK;@?ag}+p`U&~zEWQ!3;izcIFqd=%BD??}mOT_E-8qLOiC71N=BZaMGbf|0+ zd%i!5qB^HCPT9J0A5NBESGba(UJP;x;Ug!l!WxMS3NnN@`X&GFN|i1|w=qGwo+Tnp z*HPs>9i9t^VCU}=*!oN8uRSU%M+hgA-4>VY(xtXqaZv*!k&#%E^jmtGE{5W}K zrR_vf!#qTflXDv#z0kPY{`zQF#hsmQ=f#qwKDV+lr~;2$XHA>b8A7jF?$Lg~@RV9v zj0U@Jg;_?79C8g6iI#Yd)DG$P;ErJVi@>eYxfV0B%fMR#5N+-3J^=KWLWy+;7~%2k zig&)s!*A_W!rr9I#Gey08MJ98nrPV2`)w#g5_vrJj>UwPyV@iK&ZBEi!s69qen002 z8?%584pyRMGL43C9_SimXZ(QG-NJ0kqI$-WF=CAhbGB{YtJjZ%uq-xxZojOL%#7mD zELJ3HW6Ea7K~G`D{9}B@da$%)*3`E*2V8S#6rnwTId1}AoM0_VNPF0yCjR&4zc>l- zdxAHA*Z>-srml`^ydsnx3waQk9^Qg1&TXmH#mdx_nnK%o7})E76AN25ZncrWyWEU( zQi5M)aoUkk*j}p=q}v~Z6}waNgq!1{IQNI6?#_h32_!q@ffVlvYS5YZGG4K@=fD`J1o zQ?`RqEOjx#`@s|r=Nws{?fZNTXMtYM|8_e|>if9;c(p5yl)>Ia;3x$a)sgGW<;MDr zJDmaZ)C!@+CxA8LABqtGSak)=K1$Bx-J+fmW~|GqO_PqxyvkC272U>gOS}mNbI>o# ztDOO>h4O$ujM~j;jaNl!x`C=9#iV|(4#xNPZv0Uq(#Rbjh#&kacYeB;!l`US5N;;* zm*MQl)Fjii5HgT}U8Gg{G zucU$4HNMjrUmP8E({=#VPbdm;WXDdQv}!&R!nH8|4L_kTHcu-Gg<|33hpmBSB93%p_yZd> zu2Q=MPf0iEbS`4HFCDT>h2OBMxgTy^TT1#$Ot7WRGe&gO@(0{~W+RbXQBiTK=npti z(IG2rqBFv_)1(QCVtN4)1h8|;IWVCRt_wPaOW=uP!PSa=7{KOt=Jd8CvDzYT+; z&OmTV?G;*-TUGYjyhgqoMK6I3?X%4|W|@D6&IM`<@(qg;;Z_CUxQ@Hr6tPOcUhhRb z+4Okpc&_TY6q5sdSnj){rrdap0UoPPQT@fNa3i%s_Un>SoPl&FHWIgJGJ+1|NroF= z+!mb6nh%ilt-Gk1nihB7=u#Na^(E-2pEHn{S7oYyXQ8#SH_^?Bl*^G^YA&@IdT0=l z#1dwS)^qKA-ujLZ;>a-dB4gJ0!y4zSsqvj#ab*5GR@8K7A56!$kMCwQ5-FK-R(NndQ4-B87cY zadO(N6AxQVI=5=u*l_=kR31MooncFkJuIy{86BJw>1{*k6SitPtWg%>i%-O~^i1)f zy9eDVt~0GRG_Jz!<6N&3O}X#ds&#mK1b-nF1(HEfLBe0OZEQ&deP1)Vo%A;?EiF&J zoSd9gmzS0ju$dw~@q@`UHa3bJ40kHZ&DC3505Vy&{N@*1-Q`v@ElCjVb31zWp$v>k z8|z%v5?tTydau)yw6r`Tg zBTgU);=IH2x3Uzc)judv%f=!?Rva1bNdaGeWFB1EZV7z_7U_ZSp_JgV!V zO*RVuPPbk?{br*fAsj80$k4s~n>15ocg}1vTxt1)RdkHZ6}>7s&B|(>;#~8u_~Quv ztv{A5mcQFy3}ydhb}f0uxrUquQ!_IxCXbvEv?_SR zO&t42V4?NSW}2hM!|J8cjzF{N8RS>rTvgZ3I+SRH4&lo#6dw8R?{}Nrqw3{${& zHf4wmtZ+J)kvrKQX1rn*4beYr~aUiXZ{Fn+=-2riUr zgZlWfIs~p|)~H2fo7zy5UoMt!;FQYh@J!p`^V@j2*2K6s-+iZgDoPR+CI|@8A)VKo z-__KT!gPorC=!Neie&FnI*3MLZa-&m+I{_rcPA-~%Anhh=QS|-3`YN?G&QnEh+-jX zxmn3$adPGHMwBPT1<{ZshHgkBBf`8gP2{?-)xf!@o^2#A0XccyQ~Ya^Fwsa(U!nY+ zx8)v|F&HwS>_aVvZmFCU{5FGz1ltg@* z4S!qr=i?Hl<}C;xaijTC6`E{!igfxX`vB8j+rp~b=vCXcGl0~*dGfxhi&dM6dh@$f zn@EsANI^-Up1k>1MTD#3y{*rMfld+MLffle## zbLYNLWUgi5AQ%^czjJqf1o8Aml$H>PQ+|qF@N8kwlmYf+c=HFE7zN6?bVm;otdTY+ zhfvB4)OB!1$S@0q@2S0HAu0Dfe%*xiOItI>brEN5e~8EQf409DtLn*$N?KJ2PGQuv z{5cnqe2E2{#8)R$^6&r6N)uK4?8SCx5N-2*aBt6rf%JS9a$3}Mg4z$!@yQiP2(JK1 zy^cfx`y)~Ivj-s80NS7D+udT7R#U9;`};#zj)2ee(_xMRiPU2^Bh#R z>!7u6lDBTv%_w=MqROdMkooHLW&%Slatfdqg|Kj=b`K0E+2^t z9iTWkss}{Nus<=afbK$Q*N(1AY!*|HWC+E60cbV70gCTces7;0a*jV{7~?>h-*yOY z{>q~UX5uqx)d7?572+)hfoQR_MBQ`}AYRj1h|W;KPI+-5W+Fn>%ij2YPZCj(6c9`S z9oHXYKFbfo1;6I$(_%!F8W=17+T5u*{J|Xs-iswF4Bt9j6U{?R{7P)c4j0bfuSK*V z^Kz}DGky9ZRLjKQPO9&9+I688Ic@9E;Gz+vva{Rl(6Fi*qR8Cq9i@>01DE95`w{TXx6lp6me(z3E-A_9i*H2UXRd(Zw(v4``u)0ZrugW3fnX< z34#DgeN%#j!p*V=@>|h02Z};wDQg(j)zwviATeNOV`T+a5%FF;3|YW5un-P= zwRexCR}dxyUQPkVFTSo@7?Anol2Ob$j7KnN=~$JpuMVbuOD9op7YVb_hPQs`D#AR+ zPDnES^IZYfiGZUeYYqlpwJ(-)wC4C8Jh11aMuXAhDg6Pa|3tsY2pG(ah($!pkPSjE zdoo>BWh8r|Fj|r-E>FBF&DU~x>9@Gm(7tUUNI;wCsfT@wxCT63kfXUYyn2qmwgHMP zWNU|DVseru>AeIKNO#&d#16nD;20kMWK2xp4?exU>ytqxVMj>td+}&mc`swT-i^6V zk=jVQaJ1p|(VvJ8?D>DMYi;nfl3c%!mEUBaE4QmN`SB7x&Pb4LGs@id%#{yLH;1+D z{*}!!nqfrwJ67+>Trb5K$C-IVut;~Sj1Y_!J=J%y{3`4FGFz4(r1n6JSy zW)b8+OBxF^8T%eW-(_EX&^8YdiZNPo7oP;z@3b#(U5x(arNpM z-q+^-k(XI$Xy|5LrLIO!$e{pqN5JBiFweC#z39^Lz>fc#}CqvgyHsWWpX)C5JXEQ z8N0$9BGL_Elt`0+lfV|d{iD7CYApCYAZyy`A@G|hH3-Av*7enf*Bo{aoBBM4bHkrv ztEhiEuf*QwXt1oZHPU@Vj7;5}FV=7-TOrt#61L5`5&_y?@fN!k;`4Ph+r(7a5~62r zeLXu96RJG;p*XV2@%cEH9qRSfxF2wg?piVhL^LIFeeGgyutPmS*9+*6{c7zPrI zgNk~EY9{Mwyyr~lhFYr_Gf?-7X!pJ(_nNwd5g@o@B@N*3vh3p))WC^h#(c|G@1*Ok8 zeZk0xSuji~Wc13Jz`RKR+_O+9mYMT*Y6iD_>A2=N#;DVY9Hx&f6Q(NMJN(TSJQE$l zRm`t?q<=q8dWxa8L3SrA+OTj|>S;m+JX3%NoHdNnHTw(CF?K&=zdmz(6gY7>T$c5^ zo;?Edbs>r2NdmqdM-h0z3!l=KLzP%K%U-XB(+Rge`3Lnbx!-<%AK@z^O!$)Kca?8^&>+=@~~WWtFUD^ z!8ck^$6~1<>rLIx0m(!@m%s^w_f!yU4;q#pCYfMP{`dnU_S>eRbLDQ_MQepm{#{5C zL=Sh4VWlgmHjKMeQ>p3fRjkcl@2yDZjYChy*dw0%MMgeJB5{F)xmiwudq25(eyAv@ zjdQ}k{GE1hB0>pZn**aTwh0H>wDDM3=np1yP>X~JWWu=2UmvfeM0ZEW#v4;@DFNE}3QH=!!T#*d(8AZZ)D9?mB^QLiJN#HwN9xd4;mEi!z6oVe6!Org9G zZ|Bbl+kWW;h41!(#-GS_VLD=%k!ikOgO_7U2=tx-=sOsLhw^Ye#+2iE@*A)Zcq^+& z$6Lbds6tP{AFYn)@V8;?MB&1|Z}*0nZ;PVx&yCv%@#cM;ME1Yuu$iHV zc){V@Y96INw&4d)q!GD_XQRx#etPOe}{SN)Jq))`jdY#nn}QD{E zpxn+vt9|Cc&mu+`Mhdqij#9jB;2i{UFZYPiuh{Nk3jfnylKPIW zh$=56YKYD)b_^shd-#K(knGk0hTgaskDen~8)(GP(_ShimLY;Av_$J=fMe2hfTC?2 zr)}QWb&m@#Ap-uy?j=v6xm4*-qQNNfkLl)~PmU_uz2Z{zJ2}rv z!Emd%DR0_eb1!~mb_UJ;mLaorPghBpU{Qc(yuZvZ&?R+u~ zj$~@T6nVxkDhS7-C&myv4qxhF5ZZ<7U&~WB(z&Trk?-N>BXwD3;E0m-p+@;68a%i8 zQKo=ZXMfIWR!zqMGgm@DpJ-Tr!@_}cD~5H~!|A!-BL$m5I7(`G?59mv1B&MW<=Q&b zi2fWVvTdaGhe~Ogn=UfoyRx?MhT4tqw2*l6l0HF;@LTk55>y2x2h|# zmCf*r>#tvpi5|CZB#4I7Q;`?(F%3h{E5i$QW<@BdMkre)|0$`$vmr1fj3s{#UmIa(e#qI5%RnN0F^sXc8@MFcPce z95Pw}CA{I$jx9dIc59ro|F`Iq4Rd%~g!WQOQHk=88BeRu+lTpvJ12oz#*#Ju+buq4&X z)<91KoU!NrXbPLzM6}=WEx-+Eb$Gg{sHph(yfrN9w)wo=1FrSj_V(8Zn(X1RF~krN zz;kzWy+4)^>YD{rpS*78-ay^J#>SQaf58D%p{J*(PdA5g_-rst`1SBKA-`^Zmt>1b z?-ld{w)-`&i;lPFyS^ILa`k`2Mqpr|S+)lZBcKv}9Nl@A$fXB*Rs&vQLZzolowf8^dKn(Bi7cm z8I-_sLHCYr>wpaPISrBCXr3ff>JKqlm~7S`0ObV%rPb-+Pe8Mf@Nhq`Ku%R&9{9D} z2vu6VAzAwcJacu!n1*z2G%&COAcKM=206jzn$AIj^8tAWJEi_&pp3fb(%FYm}Qb~F;gJu=#b*9KD z^?-4rX~Pq-3B0`ctsEOm#tbEBrU=ts7fm%WbeLj?`WO^L+0T~O%j^#lcC4m!rLh1h zGGd@HB|@@@z$wf~lkL%{pvOy~U|bpH(a%9nL;YhH{*c9DZ$d|iI?3iLqA-0wMu|kH zlpy;GsuOMpic|jd)B;&g)=$zDXjOo&1R5P3C9^a}KwwCah*cGXRRMev-Sl5`1c)iZ zAKmooRLNpvC#`_aDg1w51RMYra0P^H5q3=#l`nvH?$Z~Suvh5otcsybBAY10*XDk; z^DnhM2H35ge_H%m{j9G0b_g^g&aWa&Ar+tj;9v6!K(8R^1YHUr@Jwo=BZT}@0Od0{ z5;|y;*>|UW?tgBGp*V{qh~1ZATqij5xuS&iEqr7LF`#2f1Qc@9Cz@6W;ZqaVzqJsaclc{trx()>foFo&CIWmP0X|`d=vuY@ba&LpK@Y^Bj*7gnXGj#6e`y6g1Q z)6&u^ckvHH>O=!GEl~gWec&o?1p>*s8;?F6BTk^3l~&#Q8x?9P_rKq}VgTUYf!bSN zco<(q#WnO;_s6T3WrmT?(9eq(zSKE+g9az+`1b}G8XSn)p2Z@@ngxVa)Op*w_v$Iz%mo{5_-OnX{qN3QUU4Qnj!W zmX8i$0N#^Sc>YqKa0UfR`pg#&j(pNayUk9QzYG7o&QI6-x>ahMjX8jTH#a|@a0>uM zQawY$1V8D;W#7yVFk}l^Ny#uWIEFF6o^-4+L~q;VwbtxF12~lc{zB(7uJQ22!{60= z*fknQM@K0F)~2ear`hsDU@WobTPC%2bxuxB|Cq;eAOC7wpqWHAm7ymQY2xI>l8dYs z+m@EZ<_zdTT&&aq`LG+-EyJLaSU0WiE|lN2KxV#V^Ls4-3X=1&@-PJyN;*}0N?yYPylSxjx*0l_0TU{3k%_&(flAX%oShB zPt}_7L?0q2yMIxNP+XxWEKq9!IqJ^HkajKs|P{+bpL z{1+bI;qv-x?31sr9glX;*W0E$xF{@OP9nr8KntNK#FchSz$zhX(T~>`GBq`&P-n{+ z2ae~^uR`s)RzP$Zs4Xu?+D{1TiF1G>2cu3J*|zWgravcMpfvaU!eh>`MtxWkQzx63 zE{GOeImDOt^XJgfTuw3@4Gj(BPwnKbxOZTQm?ek&q;q%xDI+7|Jq@<@eYkTkhR>X6 z4o6aw0R3wF!~EM~-ZGgd-i=anK z6zJamqQXKzH(S|nNn#hH&z5@C-nN$xaqy5Wnc(K1QQn*zeL#^FP`X5$!+h;nZH?rswpci4IC6+DJ?5=_$Dl1NtTn|uLoC% zYBc!`n72Ir_Wgr{lTQR59v;lB&!f6%LmymyDw;oQz{5c*4Sl=pLWF=8B0mFW{OoHnNmvjES=4QONcGGbJADx1iY#M%i z1$|&D;R%}!2M~^!o*VP?1F^_jB?uskg0k=+l$4tdfL!6N<3+Y8os)jo1pEBD zqyAy6>YYpC1L=v29$3=l zHXz?r4wRrK6578lh{h%W!1%JdD*fNUXIiI`x({e4&JE05Oqs+J4qcsW3HR%X6e#7u z@8?Jz#Is5(Vc){&?DwaccM;4R{k4$N| zlqwb#;}F~6D!AXokHLT6RNS=tKcT`W=ReaNtnK5|kzEL=aqJ6-e+&bI zj%_I+p#qkWpj2_RGqbcdg@KU`Pf9`3QXj<`Dvy8#M|y%@lT4=*rWNM zB_}&G7z4(&VUst-7%;(Vg@SB=R1R*TKnV{7)>}i^_XZblP>Fbig^4@P%bq;l-N-2S zuOkvZABa@E%;quR(Idc6oHQRU88=>`okp@E9tC zhmT*vhgPk7t?%skQk3?jn=m%^G#Y3%f#+B(NyV_1@|d%JyINQ&dS!!7qGf61Zj#p& z?9iO1k5_2+eoJQZaIS&sfgxOFv!c!y=LbNYk^@H6!5;uL4!a6^94{85NTg;8`><-x zZ4ycf=CxBndK*vYKDhcQ6;TNsV09X|a97W_#3>&dgP}#|A5GR)kmAFPvV}JHUzqmEtK-vsJ5kp*q ze?tc&CF+3~hJmup58(aj9vsR0?{`*+L_2&lvWCTr zq2%wh253M$_G2E0*Ynd$MS4OGfMW4?Nk(Bg^$R{UeVNfLU;v|7&gW`_Z^m*b% zR8DbnCVXmv*5braeQ4l-!xp+DN@K7y^%ztnPMI!bQU(7@#6oVqid|x)^w+^%2q!^S zP;#E>u2BtfnS@)O;;zFbsmI$Ras6EH(+X)cV`KbO+&|I51`b+?$$^7aL|Sh?2G1Bq zYcc%x*X?YoOqr9(4C8RXI7YZ&!cp#ga|`rBY(uW-tY24z2>84?>GM3RK;Z8TT9Z8m zogy2fGzJX@If}nCL|cbh2d)!;4LyyK1y&nkcw$qB@AU|7XlwvB_&01f*fu~L5=Io^ zlI#G!_(!kp|t~lOf(&N`2rb1V^o@P^$D?1mV_MW13f>U zRRjwt22hZwlB}{%UzUiLNG>PxA?1tw)i)aTi{hUpGt<)h;CD%IX;4YCf$eXRz-zUH)=h?s0 zB+BHJP`pn;nkhfrA?-{qBhRL6WF|XT_q%RktMWs@wLDowOtexMhQ4`-QrW0j774$1 zlY%b6GVikZvQ*Qe%h;~)4E5gpZtxz;)zBsPLDsnEKu>D&FRUUzzLZa6f`f;K*q`bc z$r)ll3@-HYkL}OQPPxr0&*bFk|M1mnkBqLenGgj5IID3MV&_{6LFC&bM!@%Md3!#l2q^rTRu7xTBWYCc2-6h zdWJ4@iz$*S;3yWQTXXMm?s0H&M6)KPm9q&M-cLr^;F~0y*G(RV&2u;vx%)Ntcop8M zUhI&1W2C5el>Di2@?cV61TbmfXE2UxUt-piWwU#Yo-TKvd{Sd-WpZNF{9O0x`g59g zua@G^1w)s`bfY61raC>FWy7bHzTY$>W^IZ;N7S_?w6kqWjxZLRU7edno58Lwu9`>T z*DKd|*9V6z{J9w97)GI=L(yW2^S|ZyIAm=WVh3RhQx{P0OE1~y@i}BgWV!OX#G1rL zk@K0GTnuRDmr9#PedhjdJgsStxdXT3u_M6j!ECJar=h0lac_U^y?vQW>%O!bnp?)+ z?~Ut)H2!( zxrqHgtr6POb+kW^-x8pA zrT?B-r*Sm>YdU25#`3G>@KjS@46%UsVWab=GuT5Ok)E2%SYCRyq0-?;-<65St5fJv z*a`Ry-EzG86rKXFpsFXpccYC_{Nv}}*QH~Rygp>@EEy@S+|8O;04*j66*^8io-poR zWO8Ko*6j}Cn0xv`PBY*pjaNkn zTI?c@@%9o&aYEyRLCSL7^1j&-%I_3xGR)X)u4|6>mi98tC^@RlYes4^KXLyw|JYM% z^RwjVh4~A2zx(JppWRN;hz%15Q^tpDd%d0(vh65G_q*sjp9>zw4gy*HO#R(D`;o4S zcU=)blSY$1B;^pG;AcGzZhza)LB!u-6mIWv8oV#;DV!{vO?kt-Sf}IWzIPtVVDyo* zY^$_X>&|ti=Y#q8r61g-MdcsMj=#s0+kP^xHQP%c+ZMc5oUvC;d z2>i`s%et)6xIQI4*q4z3;O3f{pZ;J&W6Qkq*dScnwrPHnLsCa*SF&_&`or03wywwK z=&jz{w~LB(Ec5=yDo2ny4yT=7-LK7`iL;1#j?7NVm*B69uLWN~2Pp@h`PX$v7b~+3 zs~#^4@W0^SDaxvY)$M*ZH2wg!ZclcyAuWD>`i%L=e?D6l%7`&T{#&GF3;9ZRKF&YC zQ05_KFs4;7+w;+Iv8PUewlBM3A$#2C*<^Zf>RXp`*6x}ssnC({{W#Go2hx~Fj*ak+ zdwI!J{zZo!c{>^JiF?~#z-(}Gq%eUtOLUv_mgCy?rlxpBX46o!$MNUGTKQS^^3|3& z_xyvR(?3(%Z|e0{ncJ3q&4255Ek}6r-+VvLSgLqPd1`lcb9W^>#yC3mf?lqTN_2J; z#Nx#Y-y{kZiIjU7Jr}H(985`!b>--K2_L(Uq0L7=r);+$JhxpZE&q7(MR=N+7pSY> zseQca$cbDbY@NUV{bZx9@3s2m7JPEQs_DggUwM>&(;uU3nUj5~{H$=V^VIt+e=u8I z;f92YglOW$r~mU^hk=xnBh0N6gP>gjd`Am%ec~qK7-xC_dUiJ_!gDy%m{9r#N(W5? zg;LAH?|d^1X#z%eA&g3ADDpj_pD*1D;`D}wNPbAo=<6Ecqp23yOi>Z${c9N+ z1~$|Z2H~{?`+5<-UNA85@gXosuXmi+OEMSkzqPRWx$yrj!{ol!!HB6#fWfbKbz?_U zQ(GqsJLk|0CqTawJWi zj2$iQoh|KbDgTjcXk_Q&ECc}jqv-#B{$r;p#PWYM**g7g)@uV<{;6SMV`gRfzp`Ih z1^;==uVM)?wbqifw0VW+RfjMq8=v66^#8A#|Izp#&JRwejuLh@uZ+&Z|AX&e=Ko#! z|784E<){Bq$;Qq4zg7OPn!lWaEdR9peza=17<%K~w*Q-)2G%`q}Aj<{pl=B*lpI5~lu z?bmWB!EhTFjUcQ`Fn89woPLnMpG*sRy~!kzL!%Jjm@&q)H_H`_`d~Cs0937G9O|=@ zc=iLTp_G&}#(j{t0v#yHdjV;VmIEh$bJ1? zg3{=Km3kZKqazYzOum(tBuN7r)R1n8#|JkR(5WZ@{g_TiHiQQ_NzubsPuRv1q>3gW z;zo36V<;gJpe#kOU;MxfZu!R9~u9EsH^FonRVWJ2_q{`(2(ILXbB(v&gcTy}}T9 zR+^Y1c`8V>cN{*%oOqWvG7Q|38#aE3k^NvPi=UJPXy;ss%+=8NI3W7shd>QWACb7` zjWYQ4sjPbQRLt@SzPzN=eRMQi4@@2F3}C2&NWUMB1Zm*m5v=4xR~aU>;D2T_Yg=2sU5k6?GHpuFrObh8Hfg%qODuQlrkKN&L z$fD$VapKour}J50qC5-k>?3aE)S2qc$k7rW4gGle*)^8Fp4+E!-qpyf zAKVqoE^k~nvrq@8JTZ`ML6IcH1@+A&yrtpk2|LVcI~ohpsVr!Uot?D1KGq7N?-N5O;e~KMyqPei{D~Rt#S@yoSWxtRsD&EE z>!w7K)a5VNSMn6K*ZNQEYw&Ict6Ja|qV>FuVS6y}5jlnBL^E)U0rQBm$&{DnrtG z4k$$1ApH`Bw|gOngdI0HP*}l8k}>iQ4$mcMFa$qG6R4Bk=?b?dF5NFt`~q0RPZ?b) zhB%PUL_XkyfuwjWth>8M-4Ff?qRaUPYO17(lJO@L$483!-kS{0t0YMa7x2yo^^@Gu1WUwUU`W1=|&9WG~eze*UaYdD8-&ARlOga@LY} zy6vW*dbuGjcog#D#fM0}yHzrpocN8|M%U*V;YM_Gxeki$I~`pYViA9S#E=jkplZn} zUteFh79{5}VPj_xK#hpOPDoHVbX8W4#e4UTOiKEiF#9>xB$n+2(`PLUi%zU%O;|_d z{o#|S;4llZh!9rsARdgoiivseffJE`dT*nYp;y5znxQTN0PW#vgTYar81AQ=0bzh& zkl#>`%*T)v1~hT|Ks<@tx1Ztnz6PkniNz8SCyhQhON9bM2r_$2kS7k{F;v01;_oD6=wO^6s6+m>x2;GJv2eKwsa1C5`K3$XqZ|;0eiKlIC@nIF z9?V$|4)DUcB^08w1H^TPrUe+F$yy`BA+vm-R6ziQt)~V436#xSo47^J?q}#V6eh`r zeU~jZFVSg)?2n*l5R3g8YCd<;7mC{*+J#BZ!gfwU7~y|7g=I+Twl!iUbi4K>W{;y6 z#T#Ue%Hl;#(a53|EXoq1%`TDKUN9R2a?w6KLN?katdx<)eRbSfqyj;7o&V3LOuAd}td<2wFe)9IXhLSQBDmHPb9^vOao!p*B=y+JRK+l9%bMY zS+(7XPdMI(H63K=caPWXEIQkn3NdZII z*W+F$DwhGVTn|e_USIrvg149+GeA@#L?cu*KFJieq}U)ZU-SOnQ!H1C9VXtSn+t2L z9<{3@2k9-a&D@gtRxbd;!&9Mc8f1h?>|oasR(aw9fj1?QB+ zZpAPn`(y2h->O{HZbFDp==Eqb(Y{&}_wdroQ-$5&zC>BWoKi!Ho~R+xUQU{VFL*7@ zZ1c6>bakLqg%%c&@din4I9^&sp}tcah!++=)mcAlvt$BFBUjj)q zIg!HR5yM%mk4byFkwMJwR{MCIu)yw>1Ht!WVQ#TI>bBgI zmPm;Hc+r}NohYeC1T`ZfuCYpCNpc!p1UAz0dAb)0nFUtDgl z!d_+iJ77`L6Ma^*u^7R7M<87rIcpJzXSiY$W8sbipL2+e=EV5M^H zk)y83-yJ`DnE&^cLCu(~!(TI15KzPYzDNg4>YtST#~1@F74}I2vH!FqcMX}2=v@nH z4a~o0(!t3|-(&o>8IKeelpmn!kN>ZIuWcTbUHzx!{}>xUook|T`hFblFD)I>p1{8* zznW-|kQjxk_vZ6!ru<(eAZl-Hj;XYfKOnvs{=^4Dz@v0k`37GNi(?THSjO z4^s#o&4h(`i*0OBWT4t7b(#;gN!5^EqsFxWG+=-?2qeW}?=~X-pFUla#Da%=eHfzdchi4>-=y1k{C_z=()8ccM?m6!6lzkZjs~XU2 zK&IQ@3mpd|N0Ua(Z9A@U=))7kX5oKO|8i{0U0sV)C;+~V4kI(Rof7yHufWZ4rlrB( z>`_?TDucmUKa|z}lpuH+`T)eUAC^jK*LuDWu`;>(p1x=Fx$>YIQfKG;uqch@)i1C@ z#hh{wG*s>V;Ci=7@j{ouZ4)2K+$8Jse32tBFCW>m|DhuO_}JFz@E6Be;>D=INzgHe zCV{}PzNV(zFPnPX<@dh#Q#o6gQ_3kjLMQJ1q&XJ-B9Gl71352`=6A<#?PwQv;a&&Y ztMT@{jCStB+B8k2YyDd7Id{LzwI^j<< z8BZ2hpRbK$9QvQ19^Q)GTwlvE;&a?RZqbSidLC=Ia&vJJ85z%i%gBCt+{vi^`8aC2 z+UDK$7#bS7J^odK=0PV)b`N_=Gr3*z)Fwsrwksx_G`t;xy{{OtS?JRs&YA` zSAP4Pp3+{UKus(x~g2XgnVxGME}n?h= z!D+l^sz{vNP)nVwX6M99(O^e|WsDzaT4T}#GNvp& z0vVmun@bvu!7Xa+2u$C9)b?Abec(!RoF8V6vs%4>&-dWI1NKzc5WYVi>y*4bNb9%{ zx-ei!0*ZE?j!R&IO-&0ElatfE=m+T0!5VMhzBOBw5kALmyx;#3jd*cC+pbsMuz}im z_a`H|uM4+0{PecM=Ze8e_@(vOrGn$3&sCw)VXrVHJ^yuXo1OcFgh|f1h?m{$cEY`A zowifd8%ZGV?cGX`roHUU>b?<9`^(b0u)e-N!+4q(&fkxUhrGa`?YQY+D_)*C&aLet z>pWEC(U9@Lt^HxS=#Z0&T{U6r!uxJmpIo57Q4G*>)ej^73@TL!5JQt5H`% z#m@4>khfx6I62Kl)F$X{-pk|IOQKbIqqN>>0KtIg>cdKvxtrci2Rvp}($gSqPGWuA zRoUdi!WX4=wl7I7*>^tM4Ek(uadxg67kzKse9h0P$#rBi+i!bWf=*CK-Zh4w40+!y zo4cwD+)sZKHm#$5FH&n}^n4cUt5dw*wgqBgJJGjYx!1-XkTO__n`je4+LkzJ0lNy# z1LTP{hZyu;#N8*}VVM!dqGS45Oxg|>EyaW5qL%Dc{E`u>_d-80quIPi`#l&CUTukm zIa(zj(%wkHbc+6)9$Dm1=M%8*Ya8}fpfP2=)Y~h^y+VS4MuKdRm~x@lX7Wo&@^!1u z;h#&MHv-yA-!dH|4(ER&1qnK9$j^MiI$W&^4~Psn)qlCtFRZKkts}t{Ql?Aur++gr zFz_1ZLLf(!OrW!>%66Im?9NLZuDXa{Z`gY$$G45`$lmicE{pk*y)5_|e~n;XD>{62 zw|ct2GNVuoT#|_n^5(UkQ0G;nJD*S6i6Il%vU|C<>qjtia{5W{`#y=?eOzboTt#45 z@#*R5d>zww4(sEG4@qnvo^Ja^Mulu9+v$VcS%d>Q&Q^f@@mLSBAIo*<>z5oOy$HPJ zrKF@Bx05u7)Rl!m6pw32BUhtVcfWdjd(8+?(zb!wu_Dh6UYGe4@6s*6_drK(M&X;r zF+LU%vy6tS^2YI?p&k$8#tTcQOV-+Syx}h-!njEyak8n8$BjGWcSm-<4ATveG8(Bh z2=Xrmj^&kQq%B;E#};(gLX*4iNsbd}V~O{@(e@KDqE191cW*I}r^A+rz#X3qRZUR@ zweJNa9cg~NRk0dU z#M9wCQ!%J|GxCv3yOcJaj&OKwWNv=m@?M^FXDi zz=bzlo2ay@|r0;qY&_Y)$C4k!?bAqGG^e#K=s=Z>3yP$lL^0Sn<{Bys?)OvU52#AEo77qs-_e4=9I8DwOJr{rY z(Vc?kfpm#xf)`gYJ^}nYtwUIZi-wug=De}kds|*p*JVa)l}xc^3f#}o4x&ysND3MaWMH6r(f+8S*j) z736c!=%xSeU;`Hmk?)E!r_LL+!c!U2HX;pLNH=5$up}vTw|546lN-ayO)lO160bk8 z=cVj5%whaq2L01Y*7CKqkGF`E(Eb6J{O(HmBthzG#&P?HjCNzb8{MNXgU)%HcAwLk z*+EjcWQXM2&?i`R@ZmS3@5RNbL#BUp(sM16^TXp7x*7D&P=DrNv%h*pJ0VNk{{ENz z)^VMF3^!EB7fvrddAhobtgGRkov)wbyWCq$mXos(Sjp5#SbUGoyZxR_FI661LlgSf z3H(N(G0%I2AO-^tEW@g?xF3e|u)YPbmLeBl^ znKkg@d6()qro%*u*DLkETgesV7i!|L6>|!!KrPUhTgN2P7kYDKZ!JOn4 zD)f*A)kqvWLSj{P3=GSyjCj1!^0G+69b`RC9F%aRvS&O}fEqZ3QForwAr<-N#BtDO z^-ko|Pus%MWoY}GeFR8(9SI4^NZD?T(7Z`&zR#=ugf^D%XV1wG6Y?mxC^z?@*cZ9K zCD;M;b5%k>>Ly1g3PpDXJX>p*m*<;yo+pNuQGPvpbUfUgP|3^rF`thX8|edN>7TJ` z8Btx*cXkOKce32ly=d&UCpy zxJC>PUp7vLS=t|qOBpRE{r$bo>^!D2&^sqM@2)C*mn}X6ZR6iO?8)MBq%k&DRmA;~ z^!TEr;q#+x#Ds{mA_3liqR0U@=W29ynMrx&1uMvxI_QC3O%*?m@pCxyqx+KHR8y3U zdPvk-B~$I&ZT4}3gy&JJ!8}abcgndev^Jb6cmqSc%zj?7GG;YD+_^12U|Ht^FWJ_K zEd;<&1^$CxAB&HaO;XXE+K{ciBb#b(s|2D94L#lW!ZjZcl4k}Zt{7M;uNC-qa8fa? z4z{g$RwIsCzwUGFvAS_BqJqrigFi+FMm?@sh{)f~ROT_%*11n)M}8^domB9qzd-cWWJn z?8ZTTZkkt#Sol1dW=GGbN_#uA@#;87CNu^*TN-!L$YOjs$rx;_IcfRO3SKBE1LJyZ9nwyJFxWMnZMIqwM z(Xs_M+2EB{s`UX$1_2YX3USTCPZrglT&vl=gp=Z!YeDsB1GU61Y`{M&Ya{r+OBRis zm*aLkWvjnS_$vfGQ2#3!w2}WL{zxY%oPuC*ym^HJRUtiI0;et)TY_|jOG>UJByjjz z+DZDS;{7!BHYeFFb#xGCPp}d6$l|&^7exak=8hAVmAfB`zbP^|Sm(EFXK5a^=!y zV>_5NI80G?ie$u!i;JsKYUm+@W?F|zIRSKF(-iIB!ZY-fW3~0$=V!tBeP$^GbpL?# zJ)hf15lSB&q5)b!qVcs<9lfy4u4Dz7GHz-`Ps3KBvs2Zh6fV z1JP^7YuarzhQ(LaTx`M__4VFRsWKvA78G1{U=vwWgh(eP`pqKIhN|&?j-nJ^`RLxc zy)zvDE`QUbPlah5aXD~a?S*+MME|ynfSkIak0Du|g!m+L>4~&k;wO3k?k^B_6{&S^ ztc;|fQknVt5-iD{^Ego&c}YQ$l&}Un04c<)NUhCNx%QFc1OAA)AwY$deWCUym$c2U zqEy5)0eC+#kM_sjw5mhHEXtY^m=apGwKfrLNPQKJZ6Rm@uESW@$%OOAi!?P^yr$W+ zAcr>fN;%#q6Mt$eBF=UN?OL6u#b%XRguolsgup5=R2_wXM3A#d3fWF_Tp)UD_C4IS zr%C=B(a~a{1GXupY?JGa#Nv4v(gc|ip~bLREi*we=95~|hw;?4-q}T@lqHH~W}fE} z?Va95u};^Aqxv!MCkx@9n@NARLOgI^b5~m9$aqmvJ}!$#<9=|25_r;HjneZ^TDVQl zx!4Y{uxTp7<59BGhP=2M8hC>%-}aW1v01{3YC$2L0p8WlV7YSl9n0!3HbMiNbEDd~ zTw!A*tXVU)#X~bc4z@Oi5lvp&nD3q{asqHArMa`3WC1ftYTBDgqrYMKTE3}I?rQJb zlE7Jh$W@=C?WU9@Q1G~fzcGx6V7HJN)DpiIo&khjbCDp0zIiIz?WX@Hfyo+)tkR!) zG5ve;&D1Q+#!zsd{wRz+$8?{}J_X1E@VP?%z zx30V7G2_TBP_36&8Eh2c)jku2Jn-~W7aDQ{eLV{akGI#2BvIYo4eGXg+mEtMlf3`O z#!4s_9Ws&7Z9gp#kGYQ!fWQ+>Q**T5J?<0WcrV3Ji15S-{E8kV44?B+^WESEqU(6m zy7(bHwu`K%U3<&XGRf9mN;xb_a6hsI`@8O#In^$l)UEw(n-hLzW^cp%$9?m~H9FV; zbkXKK{=PFg!kuXk3oMiHXHfeXWWSM>jiR63y~HL-8c6y+X<2*X+jJ~4cKYA+Wl?ZP zW&(C=U7b)9(i8tXwZ>v}AxU!ZW$*Uj1BR^rO<3vT5*^9tCq@^B_a;Y8Up6IGKD<-}<|SGVfIfqKJk zJ0e0|gZ#_kh1gK=?>Z&@&`h~}RkFS8A;=+-Ds?!L=5rhecBnEJPJ-dlAtNM?QCL|h zgstxEmai+kv|rwtJJ2Xzax|IUO zoqcdLwj2BLf-BCM&@$85g7AZ%)4zTpkxE%$dia+_tzswQ- zEM*)I#B>w-5%)mIAmwDcan(No)kf-BoI=5T7L=RIgcOOSV0p~GE5?uvuI|Ti_gp&z zEMnwvpaF7_u_EtjT>dQhJt>ly(V&@(vBft0@|z11p$+@*R2(?ax8!n)KdP!eGB*{- z9k+ke9GwqqOvnpE@NdDjFGNe~^a`!Ee@s|x$TiQMFcr(Smk)I#gY%bnbE==NC>?e? zAX@I9IOVQUXp176$XM6r)yM2cVEfFOZ_e?Vhgy$g{?38-OOC@7-64@)2s|Cpj32xV z-=t4>$lE`9r0tjC%3k710!N(G9eck=WRXa-l#hD9m_;cm{v^&PV#VR2CY^J)xBldw zd1De7Fy$fu?-{Sb7nU6EK99VXSsykFje>~K2xD@+p3?rREzph3w!yQCghR}>hTxZZ z5I)6eFNjC2%A(()iLe`f!qxe$f&<7@)d?eLj7Po*n9Lt2W&c7SwxBMTnlRHz9s?H3G0$md&(OV4sjAKL-!C$P1&N@tFVnt#Juqj#b z!SUpYg~mz)VP`{xpF=p@{wTfaY_ydn#>+;h?uH5-R($<4Ku>lEqq+0Qi!Lp)Q80Po5pn$R-C{@h!IqYTiITO5ZbY&i4)L!dMm{5Q;OV-RxS1GRA?($}Q`dxf&{_ zKomIwmK2PQM#IU^is{mmuXe(~s&%@r#1_8*p@gfORQh+FpJq|+#ToEX;7II1MZtcV zH~oC9$x{ZbZR8{2nUyiKY&}@3EFtdzduoB{O4)UfO&?#kjl!{0)!8F3`a!Sj%Q4)( z)DP(F+c27R><{EN$@eoe)z1N-N!XLxm}Kmrb+DX13yqAx9E+*~W}5}u$d?ti3sQ3$+eNC=hUi1)38Y`(SAh$VZzogunjeRzR^{F;WZm8;kxg7J%&x7lw~lbab7dK`}uW8herC3>A`d!W-l^8kcYv;8|63c&>sb}=wojfW0 z`JZh_2W;NYMzNj?zeo*`d=YWyCLZ4~WP}Tt8|h6fy;)~nB2Oa2tR)Uus4O8~aT43x zj}d>SWy=o3u9HCt>k2~iz3@ms^g10f_M1_NkjGlFhlLL88eJDkP{w18o~2#5zkQ?K zCP-lT9wo<3(g+!QYdy$o>-{NZH#`weudf=m#G8pM{~)=a#&|tkntL-9KDB$_))g{G zO}@n&=#MYEt=iyAM?CK-`|bQ4sYCtsl&HSc;ZIEbIU$V#5tBS6rfzFzP6+kN&vu zEhIf}Y@#_P5F?)KA*p->>w{~G{R(O6^Je(L#3 z{je?RPWhjt4yLTrj*_Lh`EV$Gf5vi4^`G`Nqi0DjYMoFWJX=h5ZoW1~1H~^sz5WPW z1egH6I+jzWgWN@E1V-Q=!c*sHd(5|;w}CLDzMS)X-lg&+1w5vjshe_p0Fp!*^4P zU*J*M(|>zYzkr1j6ghbE+Ej$iw?T#GK)R>1N_2xgWx=04kp%=nc!91Oq!^tFJ3j3i=H>9W4 z=qka)t`zw$Q$aEW_Sf_d8-k-eJwDV$UKgA8?OZc#6!F++1@>muxJwQX5GT~L%y1kM z*v5;8t?aSq^qbZbZ)x28DOfJt#mRt zAg`XP_U8%UoDUo$`AZl?{?mQ_%H;f)TgLss+QcC4#6)eoMJi2QO;eGa%e%$hJ1o-s zxCB4BM`$8bTz$l@<${llZ^YyGW9mr@Zq`)jNytp1&GS^&=Ad2tV1GGi$i*J2T|xa zCOIfu)_0Cc;n9p%2y#I#-gDf3i!|=gtZTZCvLW8 znWXc!7sTX6g%hTh;`PNcYgWZ2uHfgN*y_WuD}o4`Sw9G-bWNgaKmX}!Lpa_^FJiLQ zE*s1q_IALM2V`UM@SozQrY{Amh)NZTDR5wO{_MMlw>RtXn=en+n}4~*4mT!t_TXi` zZ}@uz#lM7_^_vM^NF|0r$Zu=B0`WRAc4D00QOfZ2qlCdNidzOb@piHX1w2^znZxGSNUU{8)RFZeD9l)<>}kYF}M?!&=B z>5+a%=?~SBl}y$_4g?W>k>cEBBPT-%3zDp0KQ?Yhs-TcheGp8rA5NA}Huh47c~WDh z?{A{p2n>V+NN{4xXca zbD_WKege{F$a0g`JC1P8rmEfo=`muqe12f32?$GsVG57?`}_dV-%#VJ{HBc_j>Jyu zv?~(YX_1SzVp!LSgTi8|z}fDG6Vg68NhAay1^%}a>8V+FOlqu`apqlDsRj|IDsBDI zb87_;dSLL4coCrp-dIsGq{t;jrCP3nE7Z~Q)I}#dbc%?v3QnW~RgF1Q7+M#ZxNpCR zktRqG=;9C(&|;tIi1ZOm0OxA#w0@VpPbMsiISri%4H7MRLRJjQldBO4fl9I7)w;=9 z=j!9whlTa!scF1stl!IL)=%5~J!S+3{A1OZZk#A2oCXhJasIB`ar{uV<@2yK`S2Kms7~m{+DBfV@tOfgS~Z7XRnyQE1e@o7!q$Hd zJrPp)PmsUvkdEEPZA?~burLKO%2-gMRYdFn(HQov^t|{X60ikV$_SDcGMYkS*B%evgtL3yRw^nBn}T zGY+jBSH~a)e!9d3ZCav8VG&>uW1`Ui&WKOnuXH|A81kp}TnCH}yv^SX(qfJ$7z52K z)XX`#3#(IZr4V*u2)WA;+-J$LB}oNq7>HV#+6*+frf495P=4y{e1+Y!i8h8ZC`6^Y zQU+HSO}tL0n1g@Nlm>s4rIGB4{B@;GfC?6SUgQlCK}BHmH5M{mFbGXeyqLVyG9x4q`*C?PvA5Jys{rHKn0`qp;yT%MmF?kDN+>;FT;>U)^X zb(_u_L=RB@o*~<$el^L+A=~Y4Z-XATvxjnN{gThZU>3S8+pndCG8>Xno!Vf$02Z}Aq({&z0NgwXg6 zBYJ(D_&+wwI44SS{pG^*Pv1W7EpSnmbT)7@GQ@4~%AkIHV^~eXX{y+R-SckIT(=tI z29w=N@vm`HlDP&ZlCVDONf{;2o)BS*x7%A;T24lm828~;$~^Kx^ll*X#xNzbUMc33uBiGCJvHl^e3&6^osiB3 z!%M?XNrFfjkV;$}n!alv=hvM1VREn2&MG#|(WA81;a`8a3ARl{Hgw&VxePn`Xr~gC zh56R`oZO*RxD=2z|CahpJJS*EflqUTmfIJK4ZKO(*qYK7=E6#(=75uu#6XwfY72g1 z|A08`NQdW0rIhq{z3c%F{8b1=KxL4aC?yb548k(|)=vE%`*JyTg)9i=T>Rq9_};Dp zEv{y9lYLwOu!cs&pO};^@~v>s;nxa3%r_(+qj9jxq=Ui%>sGRb%*Xp1VBwvZg0atR zn6ohKMqrKv-b9l(b}Tw&p7?i)@+C@Ep0wD`Fjh1hRBz3R^`I!q&u&vOQU=lu;=*EV2Dh#rFI zy^9`okRf^dWas;NifmAlRWRc*0TVB5bZZw;khuRxASq6rip z+4r+*o5bUgPWskZ8s^rkw;#G`k(Km~1jebV^%UX{601cu{7fN9B*Vy2y*jZwzc|2}P-#S>QPAk}ca)IQWn2 z6+b>FGMOj8+ve8x(HxooBf?b5tSw&6_N9jcb?$yveKX2FFM3RA3)ZUcvVrl<6-(>f zl&D7hGW7z#lW?9+(ixK4kwQf>NDreyh%kWEfn@J6EFH$xuDOUV2X5usAO4&j1kOOZc=GV+MbDXgeK5QP05lpyO7wcbl!?NHm-ZCU02M$*AYE=kA2%^ zFRO|hHA9ynBKK?PM`E%2GPyY42epWpm(=Uhv*OpqqRF_j<g2xg&^dbi1WEp<- ztIl_4x_0;mNMZD#35F5RKs|hvJd+D;{?!QAH)8o-b*=dTi?>M&RSNx6!*0UvqH|7o zo_ep5G@#Z~SF(6#5vK>s!heX%jXNyo5oST##rFAE1K4-q%N4R=0BaI#b9NcI_z19p z=~_aq%Df4#T1$Z}@Z&%DVb!3Zm}t<#!jgSTt=+DRdA-~exjODtp7h>tDENfVrmpRH zh+oH&yV?_pmL}dSN(IXpg4>>429VOYEdWLS`9Xe5tfrWjpy_5SUo%>6Gz=pgvO;X{ z6bQ*wXB)H~9@;C-3(~A=+m{Ih9(EUx4LNhHzOV1Er}NBfqQ?l@q6zM448!uds(}>C z@A3Gg(=HqQdyHxR?Q2Y`3_K|nsf)eP4*>M2ZEVym4@_vpeYAhrzxST_m_OMx{?1H^ z{MEMZrtz*jAlQ%QdhIpNAj@_>0?cPJQ{n0GhxHB+;EiiR*)yl^Ve>3}zdYY$@>q2k z8+maPG6p_^>1GG9f>HOgVPoi^;Hw==dBdfUW%4n*$M^A9pHwDz>0)XLsA7_gNIF?V zK;K&qqq59d`Gt5@ZYBzn6iyQQL@@klU(f8%CVr>tPoFC+K5Quh$PFF1t|YJj<)24%4vNbd zk%5P|?#e*)M1%V6a-zLLi`qrb)G%;#sZIpDHeF21eO6RU_^Xl89VA9Y)89(`?U&uk;mm&_nVUzx&I5q4UikI-^4#zuciU8#Q0Rgc1| z!?(;m`yL#B=15Ii>8cZ*@8IGHi$7Zq|LEv*NPEyNhfvoxZF0Ha${!5c|0#@``%JQn7t-G}{0iS2>^1GV6(~r~{`Rntw&Cr!I z(Iu(gcKOrVRJz+6XC|hm&PxWty5{n){?xQAHMNu%OKJ*;LVuCIQ2%llZ7wd&+oQyx zN({3KA7gV6Q@i`l%PyU6q31om;bji+iAGNI+rQ;qyuQ~uObA4x=(L0p*6rcgCy-nJ zRD8?W3(`2{{tuOW6NiUp!rEf`X|^X*{6kw5r?hJTk%bqG_ipQ|Ff6M%l*M}dt*>}Y z%3*-Lo>1HMv!aow3G-VuF}+)ek>1o~7LZ2lP8t0E@ac>2UoY%Gco79q+@r*MfJdp3 zXx{~g!;2cYy(z9ee|y5&c9MF%etmht;I*pesG~ro>C!=M)yV@ik#gH%?1CK&we3Fg z4$t8+ouZ;MJ?!GSX(2?_-ZSFwZ3W*;41AC4~v9GvE9&; z@!~UX30bEE@dvuEcO|Bl5=a?tbMiq~#VB8ZS!jq<_v>LuV!U|(gm%b#V_(0uEROA z7(0pRIu@Ct0wl|LUl^HMuWEhXKr&RnhWqk0a9`Nbnh@ZHk(AUbg?B$&W{rmjwHOwC zzPv}m$FzzT;|;WPY+rdyml_Nqvd%?_Ce&@j zM)Pp(_~<2b)2KtD)y``{qp8QS6A{mcq^2w()I=dj?-sptm!)=WwoBmXWU-dc zj@MkBUBAyMzz)-4`mkI1?xRo($gMHga>8{YPYZ>SSH1Ql?yXWC0I8d7s1T`X1*K%b zp`tL*pt9Zpy3#G^&Ll7Q!W76X53v>ts_;W);Btf3d7sr)>c{-!6 zZK=*kXGg_V*&_h`57svD$g^p74CA6Z0;vlCZb2Qefv6hrj69oitL*QEvcj~vK|7f< zvma__43yCRWSctLFhN+t2EF^{Qpmvr25M9ry0fij*mo@97=pIG>o*hxFE z3!Iq>1duiha$i<%8{?LoO2`L)C3H7tgS`Dj#Br3CW^u7UTzvdf0GwvwpfR3C9t3T1 zS3i}Xez>IHBJ~p1jS;#>${icVMS+=(FczVVMwD2eClr8N;R!<#Vcb#){BaJ8S88$J z^7a4&fvav4W#TB^Xy!Dd^3K{fol3&GuH!>Q48tA$=2mTbsZ7{Hsv~>QUC#ZTj8{wT zs*p^HY9t~|h)7aN0*Bn&fCSsG>hqeG4({f1L$i2@XJn^%8gM$T| zaQ~mt6QjFM*6yJ@raIxoct{=2;r#2Lr6s6#vWp6b5}P5x`i?kfB5-E@Z2?OjNm%rz zUT22n5&bGezgQBUa~|TtJMPmHyU<$FzUb@~uKNsV>9*&Nyi{l8bUBTcZWIkpG0%wM zd*=Ab%SlBJa(V7TwK{cqE+isoT-V#+D1o%c!J!QK(+gm;axfi<^})LeIQtfwz~Wgn z{U&uc@E)b$tp=2yA-PRwvjE57o8&iH9lLh@6LIsCJ_c@AC(OH2)=N`e*s6uQxhKqP zp-NNh>IxqLQha3Fg4>BJJ|~h}^I9l6%RHR$mE&HT!r1Yg7iOSA5{EZ=Xs_NJ=8fQnVYay(0T{l;gA8&M;JTT8c3ShZOzJicFN7q{fFWDOvzIZF6a zm=*=H>Z9|{tSqTUo^bLLy*l<%HdXV=M2tD)XAC5;;T0M1d*vy?*Fs^HeQ#zM9^%9kd)-*_voJzwjVqk7xr175TfkpmSa_CH`~rqDSfR~!D6B> zD^pqP;U#zafJ?!)Gr^SFT}Vo~*?Ga@=(XC$VwRhTFpK5GCW}4AHsLQm$a?{3p^)80 zvh<5QV%V>)I@u920jV9>1vV)|r$VbV(5Y@_LpJrD0(=bW480R~HrN*;W9PS&bJifO zXHZDK9zcbx?bpg|-}PO~m0G&qevN2JdpRrbT?nJcS#}Q#ZiSt_y!iqvIodx0k`aQ+*6>ZS z{m*stwqmH7YSi{4Wn*5&^V|rk7b|PgifKAYch&7$SZU-ovZJ!E-v;TFHMk!1b-h3* ziHS10M<2I zSdUEqk}^BQMK~AxuGdD}b%e?5Tdf}*IEH}uC?O`=iqN`(9QFxM%Kcij;2~3|c{YBT ziz8v7xH1=EH7H2RRza?lz1mjP&w*B~#lAo>J!H2d-sWocALjIVgQ&V64ShD1t`uaZ zOPnk`Y)8#s5@+EJ$etq;$k<@>I;YT2Ws^A#lHnwgv0@hNTQa`JU1l~gp zu;fw8gL6*KCjH@u?E0te3Cg;upN?KC1l{x3XrGDYUH0IE#PwzT>WRMhZc53TKKCFY zg(NA0s2N|QW%WC;re*X`p1sM%;M_s{eA@tIfCWmGuR1QjzLdfB90U5{KTZ^mXWYZ&W zEWxq&CbecRE}Uew_hw4gP-C~MGeK}M!V9_B%9%VzPAcMhU9~a|`RlLdC}{n)wbj1gNe#=_n|e@C8JT z^;bcDEX{lFRT|2ED~|)@wHQyC&Ae+lfq5uER#zlbJzY;~oO7gRcx-+H%)8v_Y|?}N z$oP5&kL2MRC%_El^cZ))41l?_CGyHV$_+eyJZq+ zxv6{Gw)a+lL%p4K1C)Ze2WX(StSz@px0gME3?v;m7715XdszeFPWE$oIUb(ar4gyn zEm3r&=SLJu(LI<)3(J11IU70F%iBdYEh$M za;-VN7nF>H0niOO$02xkB60gxQ@6RRK#ft!boNC|C$x7u>LR;w^2}z*zk%ao zR}zB2Jd{OD3w*-pdsn4^&P_}d8K|X7Ote84K#N>Ky#v-j$0qCLnSjB-Bu?GR#6gX7 z^sB)6Ue~3J!R-#!M@57_h02uwbi_YS{n(m6Xw1A6ja>*Z&$0+An=mqFhB7buWzKAt zJO6p&X#ZMHpCWwx@}km{9hVB}UR~Mj79q41J`ZNbVRgCY{oFb^UpF;L*5_cf(>z?> zSyy3mF1#rZhP%qA`o9aReJaEr1WcrWta8K>{oOhN(M=CG&lE7>AFKU%m0k_H663JK zpjG2>Pg!($HZUS36s`*vV~t-+u=`8F2ND>%8g100iyh0G4+!aG(E(`&`_A62!g^dL zep^DHaH#vM>LH2K~%RjNMXVNqOEjQu)8Aw#Mb*RGMSex=dtdox^ z4KaVK1p)zp@=qP|VCT-?SRyw-EaZ*vJFb6+*$oV{;aj;8%fGSy@1(ej@GSd&NBoV2 z4hLdwhBG-5{vD>#AwdAmCFKtwGDbO~ey{}NsKK3KuTiXzK|8KkZvG1D+d4tSid{kc zsV(|K!ankgJs-p7=@0UpqENJwML{k;3HxZhMLk=|B(%087G}69xYgJ{jB!}u`n_a4TCfDKd7JnuD>3@Pc zcoD_-B=%8}vs#EZ>PYczVpQDRs%0mFMqik46@|S24pzY-s1XYlnj9ZbBOxJS^e!(c z;dXR&mAD8D8AxFoK#8&VqX^u1yj;Noaq;oRrKM08Sf4c(BKtOUS8aP|C&!CHE*0!?uq~-3um$&7Tmh|sS&)xria3B>b@N;%& ze;+)zlKp0jM*|hS-|BUZ-5NHA=Gv)8DJvX&M5w!nKYRW>*-pi^U&cCV4?Q;?G9(P+naKEV>_dACup0YN0xr??Zqvf6o)-0*%Y2kfB9l( zR=7R1xUeA0rz=jR+_Vci-JUYgmH3n%l_2O91TrRl^{KYL9&_0Q!ILw5_RMF}YA@ua z(_5-lLop1japXGoe>nuN0Va|R&|5C{Fq45W19+RcDM?hV=hxIHa< z(CE4#X~3Kr&8e&}8*o@qX5eHKf}eeEQ5&9gKt(wSbDKK>@zITJ%}>+`I^gn(@OI7m zcVFY3+WGkSFrFbacsXM%SNaigU30@G+P&*a)6>&MNj=%+1R*ZGv%RiP zQWzZ`{eucEsIh~eE!LQMTB1YPv2HC`WzPl3;gl@3j%gq_o{m4miikY`!ZcI^5;B=tJ`=9I@3u7K1A67bP3~WkvnUI2qiE`Fb zS>Jm3!SXHcrL3z+A9T$<{t(G)`yyy353oyED4BHP!GI?9;4#ptR+`2B2n+Y9$;e`aHXgc)+ck^Thrr)?FOEDLdhURR66rcwXlJUIM0MMa z7B{J37F{;v5sy&nkGF;`CH}jPQXMPhyWpXv*sWW2ahoYy{pzxHe3rCVKnr8(&eu8L z5%xQ?+VVv*B4|S$$Ih`p-1F}G>L-}>`>YnDX{s3?y?$!NbioaS;B)8n5WRsi9ego*xP#~|JglW@`!(hg7)K?HFp=Am@q`+^#nBs z5ut)VSBox0@xMTt<(~kzn87wlWc=@2;NPZ7V=O9EUdQ2rW<)u0ceGKRFh*<*jv=a` zTQ+4VLIz>7;`Xl`1zlvHeF_Hz(>Rj^_|fF zxGMcXqo4m@zkhRcbVQT~Z~u3MRFUljEoXZRS!WUZf4?yPG~U@Hx+SHw=B)oOuJfnu cQP&NA;_b1%)iJ! [!IMPORTANT] -> Between subsequent approvals, you must close and re-open the **System Preferences** > **Security & Privacy** window, otherwise macOS will not display the next approval. + > [!IMPORTANT] + > You must close and reopen the **System Preferences** > **Security & Privacy** window between subsequent approvals. Otherwise, macOS will not display the next approval. -> [!IMPORTANT] -> There is a one minute timeout before the product falls back to the kernel extension (to ensure that the device is protected). -> -> If more than one minute has elapsed, restart the daemon (by rebooting the device or using `sudo killall -9 wdavdaemon`) in order to trigger the approval flow again. + > [!IMPORTANT] + > There is a one-minute timeout before the product falls back to the kernel extension. This ensures that the device is protected. + > + > If more than one minute elapses, restart the daemon by rebooting the device or by using `sudo killall -9 wdavdaemon` to trigger the approval flow again. -![System extension approval pop-up](images/mac-system-extension-approval.png) + ![System extension approval pop-up](images/mac-system-extension-approval.png) -![System extension approval window](images/mac-system-extension-pref.png) + ![System extension approval window](images/mac-system-extension-pref.png) -Following the approval of the system extensions, macOS will prompt for an approval to allow network traffic to be filtered. Click **Allow**. +1. After the system extensions are approved, macOS prompts for an approval to allow network traffic to be filtered. Click **Allow**. -![Network extension approval pop-up](images/mac-system-extension-filter.png) + ![Network extension approval pop-up](images/mac-system-extension-filter.png) #### Grant Full Disk Access to the Endpoint Security system extension -Open **System Preferences** > **Security & Privacy** > **Privacy** tab and grant **Full Disk Access** to the **Microsoft Defender Endpoint Security Extension**. +Open the **System Preferences** > **Security & Privacy** > **Privacy** tab and grant **Full Disk Access** to the **Microsoft Defender Endpoint Security Extension**. ![Full disk access for Endpoint Security system extension](images/mac-system-extension-fda.png) @@ -107,46 +106,46 @@ Terminal output `endpoint_security_extension` indicates the product is using the ### Managed deployment -Refer to [this page](mac-sysext-policies.md#jamf) for the new configuration profiles that must be deployed for this new feature. +Refer to [New configuration profiles for macOS Catalina and newer versions of macOS: JAMF](mac-sysext-policies.md#jamf) for the new configuration profiles you must deploy for this new feature. -In addition to those profiles, make sure the target devices are also configured to be in the Insider Fast update channel, as described in [this section](#deployment-prerequisites). +In addition to those profiles, make sure to configure the target devices to be in the Insider Fast update channel, as described in [Deployment prerequisites](#deployment-prerequisites). -On a device where all prerequisites are met and the new configuration profiles have been deployed, run: +On a device where all prerequisites are met and the new configuration profiles have been deployed, run the following command: ```bash $ mdatp health --field real_time_protection_subsystem ``` -If this command prints `endpoint_security_extension`, then the product is using the system extensions functionality. +If this command prints `endpoint_security_extension`, the product is using the system extensions functionality. ## Validate basic scenarios -1. Test EICAR detection. From a Terminal window, run: +1. Test European Institute for Computer Antivirus Research (EICAR) detection. From a Terminal window, run the following command: -```bash -curl -o eicar.txt https://secure.eicar.org/eicar.com.txt -``` + ```bash + curl -o eicar.txt https://secure.eicar.org/eicar.com.txt + ``` - Verify that the EICAR file is quarantined. This verification can be done from the user interface (from the Protection History page) or command line using the following command: + Verify that the EICAR file is quarantined. You can verify the file's status on the Protection History page in the user interface, or from a command line by using the following command: -```bash -mdatp threat list -``` + ```bash + mdatp threat list + ``` -2. Test EDR DIY scenario. From a terminal window, run: +2. Test the Endpoint Detection and Response (EDR) DIY scenario. From a terminal window, run the following command: -```bash -curl -o "MDATP MacOS DIY.zip" https://aka.ms/mdatpmacosdiy -``` + ```bash + curl -o "MDATP MacOS DIY.zip" https://aka.ms/mdatpmacosdiy + ``` - Validate that two alerts have popped up in the portal in the machine page for EICAR and EDR DIY scenarios. + Validate that two alerts popped up in the portal on the machine page for EICAR and EDR DIY scenarios. ## Frequently asked questions - Q: Why am I still seeing `kernel_extension` when I run `mdatp health --field real_time_protection_subsystem`? - - A: Refer back to the [Deployment prerequisites](#deployment-prerequisites) section and double-check all of them are met. If all prerequisites are met, restart your device and check again. -- Q: When is macOS 11 Big Sur going to be supported? + A: Refer back to the [Deployment prerequisites](#deployment-prerequisites) section and double-check that all prerequisites are met. If all prerequisites are met, restart your device and check again. - A: We are actively working on adding support for macOS 11. We will post more information to the [What's new](mac-whatsnew.md). +- Q: When will macOS 11 Big Sur be supported? + + A: We are actively working on adding support for macOS 11. We will post more information to the [What's new](mac-whatsnew.md) page. From 8abdf182ca0c6b774adb99212ca143586890fbfd Mon Sep 17 00:00:00 2001 From: Samantha Robertson Date: Tue, 10 Nov 2020 13:18:48 -0800 Subject: [PATCH 019/486] Updating art for defender atp deployment and migration guides --- .../phase-diagrams/deployment-phases.png | Bin 0 -> 5744 bytes .../media/phase-diagrams/migration-phases.png | Bin 0 -> 5711 bytes windows/media/phase-diagrams/onboard.png | Bin 0 -> 1960 bytes windows/media/phase-diagrams/prepare.png | Bin 0 -> 1713 bytes windows/media/phase-diagrams/setup.png | Bin 0 -> 1508 bytes .../deployment-phases.md | 8 +++-- .../mcafee-to-microsoft-defender-migration.md | 8 +++-- .../mcafee-to-microsoft-defender-onboard.md | 4 +-- .../mcafee-to-microsoft-defender-prepare.md | 2 +- .../mcafee-to-microsoft-defender-setup.md | 2 +- .../microsoft-defender-atp/onboarding.md | 25 ++----------- .../prepare-deployment.md | 33 ++---------------- .../production-deployment.md | 25 ++----------- .../switch-to-microsoft-defender-migration.md | 8 +++-- .../switch-to-microsoft-defender-onboard.md | 2 +- .../switch-to-microsoft-defender-prepare.md | 2 +- .../switch-to-microsoft-defender-setup.md | 2 +- ...tec-to-microsoft-defender-atp-migration.md | 8 +++-- ...antec-to-microsoft-defender-atp-onboard.md | 2 +- ...antec-to-microsoft-defender-atp-prepare.md | 2 +- ...ymantec-to-microsoft-defender-atp-setup.md | 2 +- 21 files changed, 38 insertions(+), 97 deletions(-) create mode 100644 windows/media/phase-diagrams/deployment-phases.png create mode 100644 windows/media/phase-diagrams/migration-phases.png create mode 100644 windows/media/phase-diagrams/onboard.png create mode 100644 windows/media/phase-diagrams/prepare.png create mode 100644 windows/media/phase-diagrams/setup.png diff --git a/windows/media/phase-diagrams/deployment-phases.png b/windows/media/phase-diagrams/deployment-phases.png new file mode 100644 index 0000000000000000000000000000000000000000..4d2a4fa94646c72b26e978c0c02cad12efb50a7f GIT binary patch literal 5744 zcmb_gXEYo@*A`JDSUu5+7DS2OdssCh(R&TDi!7q|MBhcCTU{h<^cFo>y$8##7Q|w; z=-uc2`JMBf@7Mcd?#wy&oS8fK%slr#PwY#5P4Wkf5Ag8t$bnkwuki5h9o?;MNr>(& z&N$5dZX)&6GK1jZkx~C=+?!koxx&Mv=LD*&y!Ol4frq{`M)~)#MI%M;-LkUua(Qj1 zIp#n3@JaXC1UsYF`Td9%I-ZY?MUV%vueqUL2~RW`OV1rR5M7D<+yyEUi810E^ahUR zJb^vBC01m+30X-hZhcWIu4 zmkMK$T!?=7b`Z81u(I5>N*BZ(1)yeyF7^y_Mgdg2C<);JRgzddT5nYn4lewc zNhHcDymwAcy#JQ-id8I`AiS$f^*aLLXziF39v*HM`l+m}?9TFuN=x(6(9qOg#AlRd za)0*MCi`C@jsMjr8Q{adP)dgsq1Le2P~JmqDCcqfx_0oJ<#V%J`$5=R%>Qy1xs=(V$twhOonSTsI>?aI6V@EUapyPG{oX?I z*2(pacgIADf3S>=ZIUuTlzmC7Co4w0rGPxucuz+g4ZEUY$&-ze7X_T0bhIvz-~$sa ziIBg3AHZ*~l+I7v*G@0XmH0o;kdv9|yC@SK9`Rwuf%@S|x5phJTROwPPGRJOS#8(P z<#!DPwZP#Sx93WU7xWNM-?OrT-?`yl>&D6|?G=H+J?R;d*By*$Syp>u1}={u$PPRP z97gU1rycC*QzRHo-6s*0j`_JXm^spaCJ`5)JfUq~c0MQ%59Zt8;_Vz!q!Be?-?E^D zyEqfZtW$Ux3}vDHbHP3&%7=eo!MFLlyI`|MFr1c_Hp2-SN5>Hi`9)a$OzcN7P|$!W z^om1Zsg{5czD7`o^bd!H-a@&Z;W42yK4#4q6(ZgEonwm4ZiTZ8%B&PhkjAdcxkqjha?V%s?2uULDvH-=jz=}u4GekLeG%12}nzo&)PTx;`0WVdv|w| zjY+!RIKYy6{66%9w_g8Xq!CO_XxOzI6Qf{}rEOfUnwp-@4Cbn34ifgl@N?!e*~sx8 z3!h{;)u2>Y;>>Z?YiyyW*x=yc8rR=n&)Tthp^BS6!-2P*vPypZ)ePiqG-$T=h1cWe zGam+1W1y(uW~CC5$w_+CDS3B1q9$T%E9 zxw+UDSjy6;X+?Ms>>uR!Cq+|3S-`(}tYLNsgsA=j4vx`Kd_xjKzo)pRzglDexw3z0 z{S9620%bBbL|z!+v9>8t*=j%N?&0Cl>iV&mf)MV=a%6K{SaL{n_~-P#BJFpAg?E^S z5rmwaT;{~%o}pFy`$NpZX>E$T{YFZl3KkZYR~8oT>dHuSdwSM`)5#K@7qsm2v(eft z{P(_1*@gQ1`%eb4>s^g~(_uSR4LI*?0S551FOx6QlE@C)&ROmWxeXAo>@lX+vdH=N zCT{;|jD)o|A63mz#x-BQOWv=UscNu_auaPXfe~)L zWdzSSy`DqAeEp>Ixb2Bey*!%r5#geg!l(LxRZohFS_P>r zXMU$gea@52B1}>GN3a(`NnKj&+X-3kzaM==;UJ$ z;vCG4cN|t~AG*t)h5mld;^-{6K|T%9TbE6Ter24izBs*qT?7O_eJa?0u2A0#Maw>D zxt@6GWgV;z`{X)5v_}kCL%8@PyvP-?ytkNI z**fd~BC5OJb2AB1xF%RT`@-4*gk^$qYDY+9Hb8u` zVZ3DwmZ>{Kh#6bDC4Rqxsjn+E!lUDA6>Dwz_HP=Q$%35|us5H`mj-FpPvBS3M}X$I z-QAI*K_vTjFUv7I%+*oq3V6-4ixE{Tsigpjsb}JlcEX!z!b|Gv`946^ne8gP97hw8 zsLWqKBXMRZ;GBh>g~4iwkgg%F-r|!!>u}@Fy5||f^TsO%6iJQWzHtjgXME`+ixE5M zdF&Sh+BPWV{7d_m_j{V1+yeV&uk_2&#v7A{4zFJ%QvxR+}Tr(kFx&AJOYwq!4 zQpDrECCJA*WNZ&KFQly77C%kG*Q0k?jLWjqK3Yt+EBQ;rTX;F#xaEHd^V1w3UhV{tdd zChEk0?p3f|p%>lJtCTx_({87OAIt>v6#d*{A1Xi^H&d4--ap}S|0iZhHb^}9 znPut|X#13GkhbFY!8eqBq66aJRLj zz&0J;H|ud!b)eHPL+hxqfdU&Csf7{Z->-Fyvtu zX>!Hc?rp}k7LDsFYg76_|7@E$OEA43#mhOoCWhVbV?~=Q9^2jLO%!j@RfQZq-w+#z z#Rn}%%x#UiPeeHyE3-k*6)@=25K-qe?@l~!>msNV^-fFfz;c=8=bgD3ksM(jG%#8L z$3WyPJ1w&2-{4}QW^?3mRol@-EX;nD^Jl2bGOxpVATSRtkL4+;UMQF(DfrLt?XD83aN4!cATOMqp^!=z)fA26uX?yjk0wRL+yuU{|VZ?k_h^&Ckm@_1em zxnXbUHG}PBM7bh=_3CThvNA&UMw18k-s_;i(0<~Ox^~kWLF9KyZl3k3;qzn?)}`yu z79~e%5ntMbGq9`+Xs!LQd?hLFBKvpDp!gd852FZ? zsCRQ2@5fe7Ry!z&PFqU6^P%e&WOd8jc+Hte@9V(=RyYK5>$cd{ev4shQ zOoKkYG6Uiglk)Ms`d+<3zGr;xJP&&Id#wwHgMixiLi3UA0nvvn)I;-=c9H_nZ5?vjO1!_N{Nm9rSxp0*UI`bUei=Wtn zGRsg8cFwj^dGCl(h#E*eg04wfSy`>0qEILuv&TgNqyt3!>yJX{j3Gi{ym;2(VlJco zo4-r{RqZGR(cDw^e98p zkBrD?!faL~P4?4=X)4S%(26zz1pPPbLnL8Yj*1`pQX-q%+{0u4%S(?fa&Wn6H13l) z&bLDeMB(!v!igvb6{x9mAOJSHQ%9mQ_c{l2)gnSEe6W){WqI)5D2>m8OV)9BN>GEY(AYQt4zWiyv+<|0~=0(|nn_ z{AE68_|dU6RApZ(_~(>-9t3<8l!;6zrbPdm>&pR96HU^4m!_5%Zf<}5ddaCjWDvy!frM6mhdr1bcNy;$?Vu!ku!`n#_m4 z*BNvxQ0Or3tTv5;0F30tkyUE@99vE4=IDSWbzNini`CDy?^<{p4})p$^Z*|J@KQ>$ zQhjnZt6-A^te&faDUiWuvzlc~_#z*;j#fS+my++uOCq!zk%9i4oF=)lg zd)|Qe+ui0*HvTm>V4jHRFC0h{ky+bQ?WNd%j9g&dKG+&<5|RZ^)XX$B#5q z!n+cYzzp~OD0RA)rw{F0orcoRd~e66n=<07hlPO_r~6-|CLnh62+>7#)4m)ni*b%D z-%w9puu=L-&?Tek&?p$(u*{QfPB&)TSSn}sFS7md)$^3Sy1eFh=+U9|MXqP=9kvKx z&y^n1F{#?O6P&dG)%VfQHu%?LKC1lmk%X}eIXecqd7fmUEml#s%?mY!`y)zS$txsY z_arVVJ5K(5xqrumz%wxUgBYwpB%y&oZqj_jQ!pKgEE?HyU|%^0(KI_a-?yvoejh!4 zyTLSFQ_m5kCS^2E>QxZ>)~&JkPxaV&mTH%gfdY5Bu#Nsjm2m5RgxTtqV^p<*#FFQz z$q7ziZJ zRW!0x5`L|hq+6%l0rN#jFEOiM=NA z&N+_ts!l3`=zB!~w$*pmf$Ihg{V5+0)zZuB#z}#A^IrTLcH}7>zg1oqu@Hxgp4kK+ zzcJssS5#mBhT^V(XhNBRo4>}t9Lz(;GQ;zm8>V|O6WlXadiD!bcs-WH39n8NHhd%H z{H46i_;*;>6c&~x5qP;;ANXS=9tJdhM9ZL?m6bIN`B`77MleMPll18T2c}rrf-nnX zukIQ9>0pshO*)Yji+*RmG`x{Lm5|&}vlAK<5HNbGg6uM;S%6%H^h z$fr>y86aDBZoF?<#JM)8_sj3$U4e-zzW;w}n4S63)FeDSJdU=u7a45}fw5g2d~L^@^YkQ!>}k{0QXVTP0* zP>>E^{_DH_F5mTDoLJ{voU_h8>v{J6ebUiVqo#O3K|nx2t)c!*mw(5H^jH6|mj3&lonn)&e_3w@MTiq3WH!DAWrB{^Rd$ z_NL6JjBSRK|G#G7>gpo>uOQxVARXIXOED=($%|^pwLh~J-tU_La5MEXAv zhHeOmc-@}OL#8u!2NWK6PbpOn#G|7{6D&}SKn+xm+?d*o-sm}O4ks=AR4x&12^GtT z6IO=u`&(>9?;g5BxDT~X-<(gUmq|!^m^@PukFB|?e^-;Y!8fm?uSy#U{CBm&e3%?{`CJvH{{ACiY69)wgnqXg&m`2P+->aj-R)5ETsJZq`jVmVW z!ksWT+=Fta#}DR6`x(N{vj6e_!zJFpKAfu+PSga54sMeG9%<85QzO?I0Ow}cyPNGj ztXF4l9p!WLLh$aJp0IVM$n)&$!8liO@?x^e40-$xi;YVJ!}{(|u;>MyXVoPbuG@xh z7@CxS3gwp}wroG`7L#blR<~P31pq=x$;D5NWNMqFgJSa7bM3!b&|$; zey$CQXTja=wL|5=@u_{h{kvC>2PZ4;651{N`*fiAt+w{{Ta>ZDWRd3MK@(pr<2abv z6o`=+f1bf}h+Zk?s69mTKiuNs&k-4+47v&gi%IV4U0t2=Zf`XWQBe|h$a_vdtL7*6 zmpc}c$g%FBpQXx@|4o~}Z8qe>Gf)jjKhTn@@4vEO3&}*LB*=K8XSgbO| zX2=G#wt;g{s1f0_xc$W@&qep3sW-solzs%WsJ|WwI-&T|DH@CGdw|)QK^VL&r05hw z?&lBK8yH(3GM;15<%_kKpu@%3P14mEd2F>6LZA|h#cEAb46stj4#;kG?5G@tY7Zlp zXwG!3>AWWA=Imz3@3NY!l1HZY_mZW^TnGmSFUA+c7K||%Okq(`Ut~yB9gnd5`auLG z^XG?3jny>CvU)^1CEYhQH8to{rHr%eSE&m75r2z_I108)LPEfPuQ|6K!V4d_wR|h2 z_iA<28+qc2+w(Jx>zGr8)ePC({qJ2mI6ibxnWh_jr&c)JndmlDe7Lh;tI{=S*uCIG zTiTl@94xG^HmPo7(w9u_T{v;_WBBkIJX%yy<&At{rUB=CIt7|i5^)bY`;#T5{W~zv zGKY~sLys)J{YJY7c{+M2r2k-V&U-&9w)Sdm-#R1!S>96sV?+<^sZ;O{t zvmiX(kocx?$;SfS(ofF>x&fx$o;$odJOeQV9J- zFC@fkCW{&;ge#1anfbv%ozk6`$3X%UzLb9SH^R4<1;26T!i^(kYR)dA6N_{8Ybe20 znrP`Tz0#`Y9K{y_SuriXl>&*Dq}q9{t7$23F4NA0yEE?IETLZ_((h2p_S{R4Chba# z+V8k7k|FQXDB|lSo%Fczb&O%F^Jeh5%+Fm#S>|l!@qM8QfvLBaOI38{tHxfR^!ICV zoX(z@Q~-NAledzKtA?t-tL%a|K-h2Yeg{79Uo3$XT7jOI+_6Du#WNq=w_nBn+g~ca z*W-VxU0D2!B=237!EuM?+dC~R1#>RJN-&=Ri1-!0r_E6bEkl+p{xNk(SLu&IU9hVe ztFvsSrfIL=m=Uv%_xEO>{^k7y204*f=FYwumW*bJglYPBHeP?l$=cqCpIo2nXql1= z|2~PCUK3>Zy?z~=^l$5fwRxDR@oMbB5RFf!ZDpjr3VapKHmyq8Xb7l(pNgtr?Eek= zj(}F|TW?14^6U_f^`0<2W2}^qNb3%BG%$85mld8%jp9}K7}875a$szd4Rj*WEvZ9w z#u|!G%J;*9lB6DL9lglUk4MQJpoxl-J4?ETdvDeW{G+1`n>`{m{98k$xwRKV5p#Vv z19}CEM0mbQ38!Kf8$OXO2(xNSC68xzWm|1enj~OjkHs18Qk6|cLQw@5j;+gOw`z4{B#Rks0oLJSSOW*#0Pi=YlO+x`? zNwl*F)X&+sg+fYLs3q^Ce1F~C%!!{78h^RmT4ITWUpn-$m{9}>aF((;8f;QWM@{rW z%vYJje!IjY9?~0*RP{YMxx8wx8yH?XSyS0}I=EudT5*ZvQdDGgFm( z;hxhH2xjPH{bVg>>FEBZ;eGhpSX zNt-ICMPYZF$Q@|^@h(o<8HG?+2F8yxgGbUR!m@~`L{NlI)z>*)QIwO5 zTUEF`<50@5gOQHTr0Ic>=MQ@26-l_Zfbs@)4_J#k-2`j4bykkKZw5xX+m>l{^qZnw z`BtMOtCZ5PjCb~)8u~0}U$SD0Fc7KA3c&;wv%%IbD>6R&@(nev@T;vru%T4NfV{YWo^W&$JCnt=cWQDqt!%my* z5fQyv)c2?rWuja&`N-J?2Y!^ozp`1i74Ob4NTO%1hzb3Uw4;Ok%^#U6UWn(%%H9zZ z5wabaIl!*B3o&YbtyamsdQd%2>9d$K2Wqf~^Dk;%s zC%)n|GZMq{R+_1;QUvGFRAz*HdDp;O@ta6ewioqRAA?hMk27gbWhSX$MUyG@o6s^Q z%8dzFv2D-&-L@R_sfjYAz8zP7diFTsdxrRflAk3!f_8uu$L8WLeIV8QZW8TllKgXMM8geBEiy;SmswU%(#=#hxBs|NjA(H$N7}d;|BL4y z@D-&+f7rV$Eh??V)m6(9QK1}1NSAQdD!GfLPA2t7eb#TePkezzlE9X&3ufE z`J&z_)4yrA#wu?^IMZy#c>_>@^Ollr>-;}S+`&^IJ(Sptt``Uq021+x%WY{E*nn1Mn_LYkGw{+ARg;KXq&w3 z4^6hOYP_~}-*v#+7#K;xk;%+ZA0x`CU+g>!q{8WSng9^Y9?u$A@y}i1_i4nkLLZ5B ztZkOR>dC=U_R*y!x*1MRqv|oYqyvy$XdNfJ+aSHT2Rve<`8-2}4Ia5O0A^!j+qmQ4 z=vatO%Fm=tpw=4_zY;9pFecC@XeHv;&Pt-^*ZP5PSYj_}rH;tSH5c6P3@?4{Vyj=ZfGn9_J-K51kHTqdTqm$)6Ct;K%L zHSr`RF`-*!mr@38ZQZq@`So1=p1p&EM-QuUtKT>v$kkO$`RPC~M_lX8@lB?U-kq z>R*dIfAJz3U0*MYImHE5Zh8+74_|d~hFc@cDFbQ*p5InSKssTsCi>M?tnZSy&v)d_ z)NAeZB}{`W808~ui6p1QDxh+Puji_*g4)94GH+Aq9+lD)x5&ESq2R1bY2sf1P*ZrA zR;2b69e;S-BMA#=f9BdfFq>6oey}nBGib*jP1oa?UBxf&=G_s(vkoG3^x0g9+q!@ASz37+& zRiz5ZbNeBnjkF-rSuT-9;!$f3wE%TEd?wE8dyGp%NuWhTHodYsDjl8EoiOA70~80; ziIisw{3uaZ1o{?mSJ>u?y>6$2PT!cEu>Ym4<*@4)$KIOnysvVVREV~B-C5zw|Jk~H zHYB@=oxg|1j@*{RQ(2uM4V}|cVa%xM3zou)&9H7f+0jBM?bbE->6JPZc2D%zM@jUs zE~kz3qNb9TmS1j`PL`Dl;b82_3FCiH_z%~*uXS~$pBm1-)#%O}pHDUQ|HU|Z8et*m zDWk^=3RgD>TSZ^9D7Sdb3UJr&yJJ_rAikBor?F^2L`OKX&%h+y*irCal=Gjt{`5t4 z!ACaW+yBMd&L`5bbtI51;=a)hZTjX3IJapY7J@JS(Uois~9I8#kEZ;0+h!6}U~y`Yh*pvToPsYiFYVs;l%o=%RJtz=`+AJsIDF**IN&JAkjna#i4 zshC=MxNyAP6y)gvQ*W7m-d4k`sezLa#t}Jn{bhS3J)J1$I?D+%`88aB*fW_)EA?Y< z@5qq9L4IpPd4^-rOOr;oTn0u)6;Wn>k*$1XQx_7whG~kE!T+53$JuS3xItmC>cb#M zVm6r?PH76?bE9$zXvBNRhpV7wc~-z>WU28!AC`|}`&sP**O_Wzf5+7zX7`2t4F80$ zGre>#QyLo=y}_q84`&&@m>fmWM6;#Hh2PYXmsvkG`TNnOD2F~F92Z)ReL!9rG%(9R zn+3bDZ@LxK1w`;l1oO~?&0_8-e93F-)1c#Fas_V~X5U8x5aj(Xw7PFvmt!~Kpg4z~ zj(IuHNcY{t{tH#i^j?><5z#hv-0!@uhys%Fd& zM$E-We$>iwEYbsIe%XeL_VD%AD8NmJlR`{do`7Bz?|vfXldbpKpenvLPB0(}k6Z2p z#N3MU#QeNHlj2Yo1Y@u0`p(3j3xluscvkat$Rd;*aF z&!tZwYFyJB%YVT0v=5%6DtDL2>UYP*P8oXYsp_o+?#umqsisLY+N~_e&~`*Z%pDIkt1dwmU5@6>nlwrhbO7=-g1SSi@3YQw{Q92XzCvJ zUv2M?7k|8271#>rAtYV!nchZ(glFG63J;^RSOb0_ksrBKwTzv8x+icrPGq8mHJSAJ zXEWB*Z^t6r>ZW;l*>`OsO*11$ij2FbBUd^08Cc9g;*@Ad;D~Yk>L_6v^rzQ7kQOj7 z_sNbBdUNyDwjc8N1VqHHX}@nS{eC!)%c|{`J<5VKl!jTM?iEPlqGgP;!>wrry$9J0 zXGm$}=S^ys=9inc8J3oo_U&1XMr@5&HL7RevMd&c$5rrSYG%}GUql@SnrljaxPB9g zUSE3opAUF?9;LBuT}>=zog3}oH6a0@0rsu>q|e-HU(T90yJ-|(o(51U6}I{wfz^aI zgS)N5))EN8^5qu~Zz)qx?@Wc!`EyHv$;N9MXJR#1Mi$B9&O(=##TMPhrF@cGZDP2Z z(0$h)ho{0LEJNaNh(Vy z;1frr(}7*)`+zbu8;6IbC0eMoMJzxs_dg(+PWOG-g}kv(#z=!PmR2hJOA2dFS^#=e{JR}V7j)5Lm=^-q^z*c|NL92q zYEO|P6+{>ASB5aJG*|pM(-9V)nRz@R^HmG})EFysds2NPm;LQv(rt)4x>fpQUsYP6 zy$p;HL~!r&h?Yp?b3puW$+=o~xG^+5+|@?t7$27|2Y@W~{u|NNRaMIR`V-4nE@jv# z&h zfsrNb6*c+d_0Q>1R8z@sz@VY;3~HdM^4WOFv(UW*3gRz*Vi9k`hde3gqQHH5quqPr zUW2Bd$L4$}TIL!gsB!i&$$jeWc-7a6eo=GhwcPrjw$fWE{XU(4T$ruPZy}E7TkZHE0bOM13mltP$_NaN%2Ov*a`;S zo0NUHy_@E88W+b9tz|F>Ii4S5a0F_^T_Il4_Ek2+)us^kMi)1{$K_63-V1qdeH2V4hv8S2&w6{LpbYL(0ZjE zgj3^p=vP)_akfZ>288~Juyb(ej@7$+j8Q#2LXKV8L_>C?`K6)8eKOhw%KkwVW))CC zX%am0IbajTLUZyF25|c6#wY5;hU+*J^d9o&pI~K}t&% z^5i5^nXocG@B4~7DI%a((jBpo#gfhk!k~8b4~UTWX%yAEqi1fdnHPO+(1pQm4Qt+h zj4f8)>kkjlhDuGh--uug{$?rI7o(3Gkg%9$_SdfgPR^Fi>>bOiKE+w%`1ssp=kdn9i#5c*XH_7%7b$q&@2t@PB(v^$K z^G}Z(EashMshn7=C6B&rX*tiS2Y`DeB_*h53$nm7&BZ2z+5pG~&)e>kYHDiPhmqwd zZ|BoKcijJUMN(=he-V_GoP&Z!8opP;UY>wt%=p&;V`k6q@_GL0YAvjc!HAno47!CJ zk`D9_XLEmQbAF=&of6d-T{P&Eg5jd@#EgOL;Gkj81M!_N1GnC+fEwv3LrV+?cY+*T zR`$i--c8o7xw$#+xKK2*^W%L8TC=8~Oc&x5;+68ux4ZCI7*z{CgkinX-}L|E7ck58X!e2RyJr@gg3 z=Ihth5#@FxG3L{o>xS;D*7byYJmB#Duk{%}w{1UBb^MpoeRnRi?|y`sg3mm_%D_>Q zbE~3;v}&Fh@~&=UL7PtpX-^4T!%)yOD2iu@5(yOcn@iI%l@~Z9y>V>cmY0VVdU?oq z-A2~)i5z2^fPKmfOhBI3@EIw9l6!Ye-#5$=rt{9$IX;h64}VS0=qU0(j(|7^HJ+*P zLhI=;MCy_jk4L+Ih@^EQ)_=}4w50Nh%z$6JaY^1SvLS6otxFjesD0^PRr+Xb5)IPR z(K?4xyxB@ XSz?>75Vz#;3%y)s#@0B%&^_iqEKr?r literal 0 HcmV?d00001 diff --git a/windows/media/phase-diagrams/prepare.png b/windows/media/phase-diagrams/prepare.png new file mode 100644 index 0000000000000000000000000000000000000000..1001e41e0dbf403ec43cf619766ba4096db69553 GIT binary patch literal 1713 zcmV;i22S~jP)h2TO9oLUKx;8<`K z!7YUz0-TC_K+sEoQ$bvkD-{w5sZu~u0p-xDR6x{^3rI$4AQzCyhf|dT<|{E!LiL|8 zmYu}*u0Pi6xAT)$-jA8_c>aDfZ}-h?ireizB?Vi~DQS751ZIvBm^n&d<|u)gqXcG- z5|}wkVCE=+nWF?|PFk#gUT$tKrKhJ`ycY3kUXn>I;A?G)&8)fNnEh*Ii@eh9+Knk-;sQsA_{a149mTGXO|xD zz0m!ww|?KG-kE=tUIwCD;IHoP(e6>?vwZq~-JrR(19SX(3!qEj+bf6k=ac_}UbkhW zQg7`gI{mIRWH~JpPpsbVhM`N~@#WxSZrSAwa&=uH$EP`A%fXl&&WbB4Dkvo-#kVyz zH5uJDEYK`4#@+zllC(1tdNK<)}%i%r4#>PfEJw2t>)m2(tT%@+PHZJXM7@7tC zYa_V0z_oo$Ba0r*^>(_wn$s2*7E*0(EzQi#XwIW}Ny46F!Qvw&CnraA*+oS~zOK8w zyW7{D*VWb0_V%{0dK|;@kw;#W3=9nT@}MlF2PhLm1kxg3u=10E#0mUdyTEApiHQkn zZEX!Wx3I84VVw08%;bD!k>&G>T z92P>ApA2ZW;14oWWBPLnvd@Q2Bb_X4{r&v`*QB@r76mb6T5Pb^U?499 z^38+}fzMINyRj45UYZ%RvZMnBiw8qPL%w}F>j~)060yNjVZAah_N7%vQofnd)kRlC5i1BI{oGcg~O}bV04rQjNMEr%#pV(B`&_Hwx zT>4%r-MN|>k;o8tr15=owE%M>4)`M`eB<6h$j6rw%c%6g`><_G(GA>eDS{jw*Wr*;hB08cKIHpgsFh1wz zUNH5V9%wNJ{=9LXjr<1Cyt7&Iv$9FC(D@&X&C@4s1 z-GZT3Ht4`^w+Dy|aO`k6OkVTIv6R5;>+9kZR@>9l<2ye!HI=|x#TOO=&&|yROz#P{ zNno+Py}i`Y(cwF%Cx0?w>7^^2ohwPg;=%Evxw$#OVS;tf&(Di}*)7A-^8bWqJvurn z_Cw`QMp$^!5TT}~M(oed&iaG{=!*OL`ouosxbeszPfT?mY<3{ln}7v##Zm%GOSBSd zeK2#_TQD9)`j4sMC@U*VR8`{wdx7B*oAoiI5wH~)D=q9}4{7PCSA;Dmzswiwr@-{| zG`ZdGkohsy2V1hkR$#0{hPZUL*bT>%*Yd?N9!-XtMG4y5+gS+A*2#he`{Q}8f5AEj z*b40UEH~iTUTV#Wer&sF%-o#4ULfXaR~No5Hp%etaH6Yc7_7Z$OdIn5v?6Q;c0Tn| z^^l8pyeDE-C#LJl`PhSlgY@9RgOK?f8XBm+zTTkP#t+tB^v>BDWPINIZPO<(#0}>~ zS5{UUQqOp!9#t}juLaj$qPewaJ}dV3s*8(@!{*P+%ZqFMjDoGecxvVRx`*1Z4*RIKXs5z|WKOmkZ81AIGS16DOt( z*x;tXhUeO0x~cWOaJfmG8C}*!c`RVRLqo!M(36T^^NBM^$t+voD|qdsj-3r2c(Yr{ zMaLhCaG83=w%Qoj{$sBXGu3g5DZ+_m^GAw{a9$EgGzxw8hg=tII6d_lP zl`k6_e;jD)AQqG+*{3F(ZF$Tn27wc#boR+obN(8jGksyTEEY2?EDXK9*_aw&;>2dN zkrohzZwpBFoW=^QXbhf9VIb$*D-FKfC!Jf%To|TY)T1Q}t|o5kAxX)g++ATOQ8YYq zxovQ|lw)CVm%nj1D+c4fMCZhVcV3dBazQ$c3wCqktFX#$g)hakP71u=glyx8D9%*` z{W7J=#X`UW?^5jUhJX*g+Kt*SO#b>I3+6D-XetlEh&PILH0SiGL{ghSSkZ&}Ol=QI&=2t6wNm6txGnFfx^ey4bI4#uHYT!kRj8 ziHWf4>gqv(K&Ny#R7F*_*!4uln$l8aLkrM3bM@;JXIurI&Cl z34^`37fVs(!Pt{MgNiz!a^3EBkBRsiuXX+Ui&jq=+eUmuSQs6JLdhVh+?0 zS>S+ym6QcO2cOiE(lhw<9C3Slx^@D9wnESX?GS};%BD}H>wC_-Nx5_mbbJPZS@bn@ z$y{BC7RKkep&J1LUmo`HHpVKZNQL)6sub<~m9eBoTplj1wDU~@&uc@O$$;MC98{0m z?Py@e;+kmYoCuY!F6~RoD;XvR+vFv)DrI5at!uA;w@I7Y8WdkRS~o*0Wl(loA6Jcb zE=w!EC1@eoBcJ=G)-Pn)@Adj;HM>D#z#EG+_V-LpBLv*GI~))-u+Pfc8smF7g&rF) zGe+VaD871>Q{>ER?tNR3^3l_bcA^%Y!-Z;Lf@b;%BSBB%N^_Gn4mfXQ$`NIV>Fw?9 z^w`z7RHTphub=W6SAMb#4(m~(^aV@GHJq^v9XwtCL&733zQ2vW=u;So3u{U zL^T@a9X=xvL5-))Od_-blaFW@8sOWO9v%WO7d28quCR)wu!Ww_JxPxE=~STNLQ9mT)pN7a-6|a z)DQ6+zbBoU+>gg};7a-{;>E0~{MJi9(6I*{6>iJ)Sb?Gj`}~4Ae9ByNbv0y4`n0q) zH8!XcEuW@9_Vc3(K7ERaB$3J4drun?*{lZjo+Lnb5Gy4-KEJvBb+o3F!oRux8~CwQ zaq;sN#MA457Wtg)><2<&>~LgSLJJm)eH%?8HPdJEqjqe)PH?G7 zs;a7wxJye*<#v|-P=9k9ISIApA_xS6smsgB$*G52nl3V})i-055uVX91;EIW(C~0; zH+zUFNh(cotZ!(tC{~Qtf_7}7!|xxeah=`7!NLDcFfNOlMz%pqNW2#{r{B>a-)mPN p(;?_)x+BX^btC^j`7G@bA|PrE{aouA4YU{A04F3GQDcWo{sV3X&OiVF literal 0 HcmV?d00001 diff --git a/windows/security/threat-protection/microsoft-defender-atp/deployment-phases.md b/windows/security/threat-protection/microsoft-defender-atp/deployment-phases.md index 298867cbc0..20309cfdd3 100644 --- a/windows/security/threat-protection/microsoft-defender-atp/deployment-phases.md +++ b/windows/security/threat-protection/microsoft-defender-atp/deployment-phases.md @@ -29,11 +29,13 @@ ms.topic: article There are three phases in deploying Defender for Endpoint: +![deployment phases - prepare, setup, onboard](/windows/media/phase-diagrams/deployment-phases.png) + |Phase | Description | |:-------|:-----| -| ![Phase 1: Prepare](images/prepare.png)
    [Phase 1: Prepare](prepare-deployment.md)| Learn about what you need to consider when deploying Defender for Endpoint:

    - Stakeholders and sign-off
    - Environment considerations
    - Access
    - Adoption order -| ![Phase 2: Setup](images/setup.png)
    [Phase 2: Setup](production-deployment.md)| Take the initial steps to access Microsoft Defender Security Center. You'll be guided on:

    - Validating the licensing
    - Completing the setup wizard within the portal
    - Network configuration| -| ![Phase 3: Onboard](images/onboard.png)
    [Phase 3: Onboard](onboarding.md) | Onboard devices to the service so the Microsoft Defender ATP service can get sensor data from them. +| [Phase 1: Prepare](prepare-deployment.md)| Learn about what you need to consider when deploying Defender for Endpoint:

    - Stakeholders and sign-off
    - Environment considerations
    - Access
    - Adoption order +| [Phase 2: Setup](production-deployment.md)| Take the initial steps to access Microsoft Defender Security Center. You'll be guided on:

    - Validating the licensing
    - Completing the setup wizard within the portal
    - Network configuration| +| [Phase 3: Onboard](onboarding.md) | Onboard devices to the service so the Microsoft Defender ATP service can get sensor data from them. diff --git a/windows/security/threat-protection/microsoft-defender-atp/mcafee-to-microsoft-defender-migration.md b/windows/security/threat-protection/microsoft-defender-atp/mcafee-to-microsoft-defender-migration.md index e9fa0412b0..8bfa46379d 100644 --- a/windows/security/threat-protection/microsoft-defender-atp/mcafee-to-microsoft-defender-migration.md +++ b/windows/security/threat-protection/microsoft-defender-atp/mcafee-to-microsoft-defender-migration.md @@ -35,11 +35,13 @@ If you are planning to switch from McAfee Endpoint Security (McAfee) to [Microso When you switch from McAfee to Microsoft Defender for Endpoint, you follow a process that can be divided into three phases, as described in the following table: +![Migration phases - prepare, setup, onboard](/windows/media/phase-diagrams/migration-phases.png) + |Phase |Description | |--|--| -|[![Phase 1: Prepare](images/prepare.png)](mcafee-to-microsoft-defender-prepare.md)
    [Prepare for your migration](mcafee-to-microsoft-defender-prepare.md) |During [the **Prepare** phase](mcafee-to-microsoft-defender-prepare.md), you update your organization's devices, get Microsoft Defender for Endpoint, plan your roles and permissions, and grant access to the Microsoft Defender Security Center. You also configure your device proxy and internet settings to enable communication between your organization's devices and Microsoft Defender for Endpoint. | -|[![Phase 2: Set up](images/setup.png)](mcafee-to-microsoft-defender-setup.md)
    [Set up Microsoft Defender for Endpoint](mcafee-to-microsoft-defender-setup.md) |During [the **Setup** phase](mcafee-to-microsoft-defender-setup.md), you enable Microsoft Defender Antivirus and make sure it's in passive mode, and you configure settings & exclusions for Microsoft Defender Antivirus, Microsoft Defender for Endpoint, and McAfee. You also create device groups, collections, and organizational units. Finally, you configure your antimalware policies and real-time protection settings.| -|[![Phase 3: Onboard](images/onboard.png)](mcafee-to-microsoft-defender-onboard.md)
    [Onboard to Microsoft Defender for Endpoint](mcafee-to-microsoft-defender-onboard.md) |During [the **Onboard** phase](mcafee-to-microsoft-defender-onboard.md), you onboard your devices to Microsoft Defender for Endpoint and verify that those devices are communicating with Microsoft Defender for Endpoint. Last, you uninstall McAfee and make sure that protection through Microsoft Defender Antivirus & Microsoft Defender for Endpoint is in active mode. | +|[Prepare for your migration](mcafee-to-microsoft-defender-prepare.md) |During [the **Prepare** phase](mcafee-to-microsoft-defender-prepare.md), you update your organization's devices, get Microsoft Defender for Endpoint, plan your roles and permissions, and grant access to the Microsoft Defender Security Center. You also configure your device proxy and internet settings to enable communication between your organization's devices and Microsoft Defender for Endpoint. | +|[Set up Microsoft Defender for Endpoint](mcafee-to-microsoft-defender-setup.md) |During [the **Setup** phase](mcafee-to-microsoft-defender-setup.md), you enable Microsoft Defender Antivirus and make sure it's in passive mode, and you configure settings & exclusions for Microsoft Defender Antivirus, Microsoft Defender for Endpoint, and McAfee. You also create device groups, collections, and organizational units. Finally, you configure your antimalware policies and real-time protection settings.| +|[Onboard to Microsoft Defender for Endpoint](mcafee-to-microsoft-defender-onboard.md) |During [the **Onboard** phase](mcafee-to-microsoft-defender-onboard.md), you onboard your devices to Microsoft Defender for Endpoint and verify that those devices are communicating with Microsoft Defender for Endpoint. Last, you uninstall McAfee and make sure that protection through Microsoft Defender Antivirus & Microsoft Defender for Endpoint is in active mode. | ## What's included in Microsoft Defender for Endpoint? diff --git a/windows/security/threat-protection/microsoft-defender-atp/mcafee-to-microsoft-defender-onboard.md b/windows/security/threat-protection/microsoft-defender-atp/mcafee-to-microsoft-defender-onboard.md index d38a5977e8..703d353b4c 100644 --- a/windows/security/threat-protection/microsoft-defender-atp/mcafee-to-microsoft-defender-onboard.md +++ b/windows/security/threat-protection/microsoft-defender-atp/mcafee-to-microsoft-defender-onboard.md @@ -28,12 +28,10 @@ ms.reviewer: jesquive, chventou, jonix, chriggs, owtho [!INCLUDE [Microsoft 365 Defender rebranding](../../includes/microsoft-defender.md)] - -|[![Phase 1: Prepare](images/prepare.png)](mcafee-to-microsoft-defender-prepare.md)
    [Phase 1: Prepare](mcafee-to-microsoft-defender-prepare.md) |[![Phase 2: Set up](images/setup.png)](mcafee-to-microsoft-defender-setup.md)
    [Phase 2: Set up](mcafee-to-microsoft-defender-setup.md) |![Phase 3: Onboard](images/onboard.png)
    Phase 3: Onboard | +|[![Phase 1: Prepare](/windows/media/phase-diagrams/prepare.png)](mcafee-to-microsoft-defender-prepare.md)
    [Phase 1: Prepare](mcafee-to-microsoft-defender-prepare.md) |[![Phase 2: Set up](/windows/media/phase-diagrams/setup.png)](mcafee-to-microsoft-defender-setup.md)
    [Phase 2: Set up](mcafee-to-microsoft-defender-setup.md) |![Phase 3: Onboard](/windows/media/phase-diagrams/onboard.png)
    Phase 3: Onboard | |--|--|--| || |*You are here!* | - **Welcome to Phase 3 of [migrating from McAfee Endpoint Security (McAfee) to Microsoft Defender Advanced Threat Protection (Microsoft Defender for Endpoint)](mcafee-to-microsoft-defender-migration.md#the-migration-process)**. This migration phase includes the following steps: 1. [Onboard devices to Microsoft Defender for Endpoint](#onboard-devices-to-microsoft-defender-for-endpoint). diff --git a/windows/security/threat-protection/microsoft-defender-atp/mcafee-to-microsoft-defender-prepare.md b/windows/security/threat-protection/microsoft-defender-atp/mcafee-to-microsoft-defender-prepare.md index fe973d1a59..8adafc0254 100644 --- a/windows/security/threat-protection/microsoft-defender-atp/mcafee-to-microsoft-defender-prepare.md +++ b/windows/security/threat-protection/microsoft-defender-atp/mcafee-to-microsoft-defender-prepare.md @@ -29,7 +29,7 @@ ms.reviewer: jesquive, chventou, jonix, chriggs, owtho [!INCLUDE [Microsoft 365 Defender rebranding](../../includes/microsoft-defender.md)] -|![Phase 1: Prepare](images/prepare.png)
    Phase 1: Prepare |[![Phase 2: Set up](images/setup.png)](mcafee-to-microsoft-defender-setup.md)
    [Phase 2: Set up](mcafee-to-microsoft-defender-setup.md) |[![Phase 3: Onboard](images/onboard.png)](mcafee-to-microsoft-defender-onboard.md)
    [Phase 3: Onboard](mcafee-to-microsoft-defender-onboard.md) | +|![Phase 1: Prepare](/windows/media/phase-diagrams/prepare.png)
    Phase 1: Prepare |[![Phase 2: Set up](/windows/media/phase-diagrams/setup.png)](mcafee-to-microsoft-defender-setup.md)
    [Phase 2: Set up](mcafee-to-microsoft-defender-setup.md) |[![Phase 3: Onboard](/windows/media/phase-diagrams/onboard.png)](mcafee-to-microsoft-defender-onboard.md)
    [Phase 3: Onboard](mcafee-to-microsoft-defender-onboard.md) | |--|--|--| |*You are here!*| | | diff --git a/windows/security/threat-protection/microsoft-defender-atp/mcafee-to-microsoft-defender-setup.md b/windows/security/threat-protection/microsoft-defender-atp/mcafee-to-microsoft-defender-setup.md index 8813e53523..ae66d91bd0 100644 --- a/windows/security/threat-protection/microsoft-defender-atp/mcafee-to-microsoft-defender-setup.md +++ b/windows/security/threat-protection/microsoft-defender-atp/mcafee-to-microsoft-defender-setup.md @@ -29,7 +29,7 @@ ms.reviewer: jesquive, chventou, jonix, chriggs, owtho [!INCLUDE [Microsoft 365 Defender rebranding](../../includes/microsoft-defender.md)] -|[![Phase 1: Prepare](images/prepare.png)](mcafee-to-microsoft-defender-prepare.md)
    [Phase 1: Prepare](mcafee-to-microsoft-defender-prepare.md) |![Phase 2: Set up](images/setup.png)
    Phase 2: Set up |[![Phase 3: Onboard](images/onboard.png)](mcafee-to-microsoft-defender-onboard.md)
    [Phase 3: Onboard](mcafee-to-microsoft-defender-onboard.md) | +|[![Phase 1: Prepare](/windows/media/phase-diagrams/prepare.png)](mcafee-to-microsoft-defender-prepare.md)
    [Phase 1: Prepare](mcafee-to-microsoft-defender-prepare.md) |![Phase 2: Set up](/windows/media/phase-diagrams/setup.png)
    Phase 2: Set up |[![Phase 3: Onboard](/windows/media/phase-diagrams/onboard.png)](mcafee-to-microsoft-defender-onboard.md)
    [Phase 3: Onboard](mcafee-to-microsoft-defender-onboard.md) | |--|--|--| ||*You are here!* | | diff --git a/windows/security/threat-protection/microsoft-defender-atp/onboarding.md b/windows/security/threat-protection/microsoft-defender-atp/onboarding.md index f26781b856..98a43bce92 100644 --- a/windows/security/threat-protection/microsoft-defender-atp/onboarding.md +++ b/windows/security/threat-protection/microsoft-defender-atp/onboarding.md @@ -29,28 +29,9 @@ ms.topic: article Deploying Microsoft Defender ATP is a three-phase process: -
    - - - - - - - - -
    - - Prepare to deploy Microsoft Defender ATP -
    Phase 1: Prepare
    -     		- - Setup the Microsoft Defender ATP service -
    Phase 2: Set up
    -     		- - Onboard diagram -
    Phase 3: Onboard
    -
    +| [![deployment phase - prepare](/windows/media/phase-diagrams/prepare.png)](prepare-deployment.md)
    [Phase 1: Prepare](prepare-deployment.md) | [![deployment phase - setup](/windows/media/phase-diagrams/setup.png)](production-deployment.md)
    [Phase 2: Setup](production-deployment.md) | ![deployment phase - onboard](/windows/media/phase-diagrams/onboard.png)
    Phase 3: Onboard | +| ----- | ----- | ----- | +| | |*You are here!*| You are currently in the onboarding phase. diff --git a/windows/security/threat-protection/microsoft-defender-atp/prepare-deployment.md b/windows/security/threat-protection/microsoft-defender-atp/prepare-deployment.md index fe2d128e37..d645d5a8db 100644 --- a/windows/security/threat-protection/microsoft-defender-atp/prepare-deployment.md +++ b/windows/security/threat-protection/microsoft-defender-atp/prepare-deployment.md @@ -33,37 +33,10 @@ ms.topic: article Deploying Microsoft Defender ATP is a three-phase process: -
    - - - - - - - - - - - -
    - - Plan to deploy Microsoft Defender ATP -
    Phase 1: Prepare
    -     		- - Onboard to the Microsoft Defender ATP service -
    Phase 2: Set up
    -     		- - Configure capabilities -
    Phase 3: Onboard
    -
    - - - - +| ![deployment phase - prepare](/windows/media/phase-diagrams/prepare.png)
    Phase 1: Prepare | [![deployment phase - setup](/windows/media/phase-diagrams/setup.png)](production-deployment.md)
    [Phase 2: Setup](production-deployment.md) | [![deployment phase - onboard](/windows/media/phase-diagrams/onboard.png)](onboarding.md)
    [Phase 3: Onboard](onboarding.md) | +| ----- | ----- | ----- | +|*You are here!* | || -
    You are currently in the preparation phase. diff --git a/windows/security/threat-protection/microsoft-defender-atp/production-deployment.md b/windows/security/threat-protection/microsoft-defender-atp/production-deployment.md index a1c3772e14..a002f9c23b 100644 --- a/windows/security/threat-protection/microsoft-defender-atp/production-deployment.md +++ b/windows/security/threat-protection/microsoft-defender-atp/production-deployment.md @@ -31,28 +31,9 @@ ms.topic: article Deploying Microsoft Defender ATP is a three-phase process: -
    - - - - - - - - -
    - - Prepare to deploy Microsoft Defender ATP -
    Phase 1: Prepare
    -     		- - Onboard to the Microsoft Defender ATP service -
    Phase 2: Set up
    -     		- - Onboard image -
    Phase 3: Onboard
    -
    +| [![deployment phase - prepare](/windows/media/phase-diagrams/prepare.png)](prepare-deployment.md)
    [Phase 1: Prepare](prepare-deployment.md) | ![deployment phase - setup](/windows/media/phase-diagrams/setup.png)
    Phase 2: Setup | [![deployment phase - onboard](/windows/media/phase-diagrams/onboard.png)](onboarding.md)
    [Phase 3: Onboard](onboarding.md) | +| ----- | ----- | ----- | +| | *You are here!*|| You are currently in the set-up phase. diff --git a/windows/security/threat-protection/microsoft-defender-atp/switch-to-microsoft-defender-migration.md b/windows/security/threat-protection/microsoft-defender-atp/switch-to-microsoft-defender-migration.md index c9b60c2b17..1a9ceac19e 100644 --- a/windows/security/threat-protection/microsoft-defender-atp/switch-to-microsoft-defender-migration.md +++ b/windows/security/threat-protection/microsoft-defender-atp/switch-to-microsoft-defender-migration.md @@ -35,11 +35,13 @@ If you are planning to switch from a non-Microsoft endpoint protection solution When you switch to Microsoft Defender for Endpoint, you follow a process that can be divided into three phases, as described in the following table: +![Migration phases - prepare, setup, onboard](/windows/media/phase-diagrams/migration-phases.png) + |Phase |Description | |--|--| -|[![Phase 1: Prepare](images/prepare.png)](switch-to-microsoft-defender-prepare.md)
    [Prepare for your migration](switch-to-microsoft-defender-prepare.md) |During [the **Prepare** phase](switch-to-microsoft-defender-prepare.md), you update your organization's devices, get Microsoft Defender for Endpoint, plan your roles and permissions, and grant access to the Microsoft Defender Security Center. You also configure your device proxy and internet settings to enable communication between your organization's devices and Microsoft Defender for Endpoint. | -|[![Phase 2: Set up](images/setup.png)](switch-to-microsoft-defender-setup.md)
    [Set up Microsoft Defender for Endpoint](switch-to-microsoft-defender-setup.md) |During [the **Setup** phase](switch-to-microsoft-defender-setup.md), you enable Microsoft Defender Antivirus and make sure it's in passive mode, and you configure settings & exclusions for Microsoft Defender Antivirus, Microsoft Defender for Endpoint, and your existing endpoint protection solution. You also create device groups, collections, and organizational units. Finally, you configure your antimalware policies and real-time protection settings.| -|[![Phase 3: Onboard](images/onboard.png)](switch-to-microsoft-defender-onboard.md)
    [Onboard to Microsoft Defender for Endpoint](switch-to-microsoft-defender-onboard.md) |During [the **Onboard** phase](switch-to-microsoft-defender-onboard.md), you onboard your devices to Microsoft Defender for Endpoint and verify that those devices are communicating with Microsoft Defender for Endpoint. Last, you uninstall your existing endpoint protection solution and make sure that protection through Microsoft Defender Antivirus & Microsoft Defender for Endpoint is in active mode. | +|[Prepare for your migration](switch-to-microsoft-defender-prepare.md) |During [the **Prepare** phase](switch-to-microsoft-defender-prepare.md), you update your organization's devices, get Microsoft Defender for Endpoint, plan your roles and permissions, and grant access to the Microsoft Defender Security Center. You also configure your device proxy and internet settings to enable communication between your organization's devices and Microsoft Defender for Endpoint. | +|[Set up Microsoft Defender for Endpoint](switch-to-microsoft-defender-setup.md) |During [the **Setup** phase](switch-to-microsoft-defender-setup.md), you enable Microsoft Defender Antivirus and make sure it's in passive mode, and you configure settings & exclusions for Microsoft Defender Antivirus, Microsoft Defender for Endpoint, and your existing endpoint protection solution. You also create device groups, collections, and organizational units. Finally, you configure your antimalware policies and real-time protection settings.| +|[Onboard to Microsoft Defender for Endpoint](switch-to-microsoft-defender-onboard.md) |During [the **Onboard** phase](switch-to-microsoft-defender-onboard.md), you onboard your devices to Microsoft Defender for Endpoint and verify that those devices are communicating with Microsoft Defender for Endpoint. Last, you uninstall your existing endpoint protection solution and make sure that protection through Microsoft Defender Antivirus & Microsoft Defender for Endpoint is in active mode. | ## What's included in Microsoft Defender for Endpoint? diff --git a/windows/security/threat-protection/microsoft-defender-atp/switch-to-microsoft-defender-onboard.md b/windows/security/threat-protection/microsoft-defender-atp/switch-to-microsoft-defender-onboard.md index 4852139083..40074d3a9c 100644 --- a/windows/security/threat-protection/microsoft-defender-atp/switch-to-microsoft-defender-onboard.md +++ b/windows/security/threat-protection/microsoft-defender-atp/switch-to-microsoft-defender-onboard.md @@ -25,7 +25,7 @@ ms.reviewer: jesquive, chventou, jonix, chriggs, owtho # Switch to Microsoft Defender for Endpoint - Phase 3: Onboard -|[![Phase 1: Prepare](images/prepare.png)](switch-to-microsoft-defender-prepare.md)
    [Phase 1: Prepare](switch-to-microsoft-defender-prepare.md) |[![Phase 2: Set up](images/setup.png)](switch-to-microsoft-defender-setup.md)
    [Phase 2: Set up](switch-to-microsoft-defender-setup.md) |![Phase 3: Onboard](images/onboard.png)
    Phase 3: Onboard | +|[![Phase 1: Prepare](/windows/media/phase-diagrams/prepare.png)](switch-to-microsoft-defender-prepare.md)
    [Phase 1: Prepare](switch-to-microsoft-defender-prepare.md) |[![Phase 2: Set up](/windows/media/phase-diagrams/setup.png)](switch-to-microsoft-defender-setup.md)
    [Phase 2: Set up](switch-to-microsoft-defender-setup.md) |![Phase 3: Onboard](/windows/media/phase-diagrams/onboard.png)
    Phase 3: Onboard | |--|--|--| || |*You are here!* | diff --git a/windows/security/threat-protection/microsoft-defender-atp/switch-to-microsoft-defender-prepare.md b/windows/security/threat-protection/microsoft-defender-atp/switch-to-microsoft-defender-prepare.md index 5896bc9f4e..beb6a69b45 100644 --- a/windows/security/threat-protection/microsoft-defender-atp/switch-to-microsoft-defender-prepare.md +++ b/windows/security/threat-protection/microsoft-defender-atp/switch-to-microsoft-defender-prepare.md @@ -25,7 +25,7 @@ ms.reviewer: jesquive, chventou, jonix, chriggs, owtho # Switch to Microsoft Defender for Endpoint - Phase 1: Prepare -|![Phase 1: Prepare](images/prepare.png)
    Phase 1: Prepare |[![Phase 2: Set up](images/setup.png)](switch-to-microsoft-defender-setup.md)
    [Phase 2: Set up](switch-to-microsoft-defender-setup.md) |[![Phase 3: Onboard](images/onboard.png)](switch-to-microsoft-defender-onboard.md)
    [Phase 3: Onboard](switch-to-microsoft-defender-onboard.md) | +|![Phase 1: Prepare](/windows/media/phase-diagrams/prepare.png)
    Phase 1: Prepare |[![Phase 2: Set up](/windows/media/phase-diagrams/setup.png)](switch-to-microsoft-defender-setup.md)
    [Phase 2: Set up](switch-to-microsoft-defender-setup.md) |[![Phase 3: Onboard](/windows/media/phase-diagrams/onboard.png)](switch-to-microsoft-defender-onboard.md)
    [Phase 3: Onboard](switch-to-microsoft-defender-onboard.md) | |--|--|--| |*You are here!*| | | diff --git a/windows/security/threat-protection/microsoft-defender-atp/switch-to-microsoft-defender-setup.md b/windows/security/threat-protection/microsoft-defender-atp/switch-to-microsoft-defender-setup.md index b8c66898af..65b638af0e 100644 --- a/windows/security/threat-protection/microsoft-defender-atp/switch-to-microsoft-defender-setup.md +++ b/windows/security/threat-protection/microsoft-defender-atp/switch-to-microsoft-defender-setup.md @@ -25,7 +25,7 @@ ms.reviewer: jesquive, chventou, jonix, chriggs, owtho # Switch to Microsoft Defender for Endpoint - Phase 2: Setup -|[![Phase 1: Prepare](images/prepare.png)](switch-to-microsoft-defender-prepare.md)
    [Phase 1: Prepare](switch-to-microsoft-defender-prepare.md) |![Phase 2: Set up](images/setup.png)
    Phase 2: Set up |[![Phase 3: Onboard](images/onboard.png)](switch-to-microsoft-defender-onboard.md)
    [Phase 3: Onboard](switch-to-microsoft-defender-onboard.md) | +|[![Phase 1: Prepare](/windows/media/phase-diagrams/prepare.png)](switch-to-microsoft-defender-prepare.md)
    [Phase 1: Prepare](switch-to-microsoft-defender-prepare.md) |![Phase 2: Set up](/windows/media/phase-diagrams/setup.png)
    Phase 2: Set up |[![Phase 3: Onboard](/windows/media/phase-diagrams/onboard.png)](switch-to-microsoft-defender-onboard.md)
    [Phase 3: Onboard](switch-to-microsoft-defender-onboard.md) | |--|--|--| ||*You are here!* | | diff --git a/windows/security/threat-protection/microsoft-defender-atp/symantec-to-microsoft-defender-atp-migration.md b/windows/security/threat-protection/microsoft-defender-atp/symantec-to-microsoft-defender-atp-migration.md index 371f380e63..cd4d8387d3 100644 --- a/windows/security/threat-protection/microsoft-defender-atp/symantec-to-microsoft-defender-atp-migration.md +++ b/windows/security/threat-protection/microsoft-defender-atp/symantec-to-microsoft-defender-atp-migration.md @@ -35,11 +35,13 @@ If you are planning to switch from Symantec Endpoint Protection (Symantec) to [M When you switch from Symantec to Microsoft Defender for Endpoint, you follow a process that can be divided into three phases, as described in the following table: +![Migration phases - prepare, setup, onboard](/windows/media/phase-diagrams/migration-phases.png) + |Phase |Description | |--|--| -|[![Phase 1: Prepare](images/prepare.png)](symantec-to-microsoft-defender-atp-prepare.md)
    [Prepare for your migration](symantec-to-microsoft-defender-atp-prepare.md) |During the **Prepare** phase, you get Microsoft Defender for Endpoint, plan your roles and permissions, and grant access to the Microsoft Defender Security Center. You also configure your device proxy and internet settings to enable communication between your organization's devices and Microsoft Defender for Endpoint. | -|[![Phase 2: Set up](images/setup.png)](symantec-to-microsoft-defender-atp-setup.md)
    [Set up Microsoft Defender for Endpoint](symantec-to-microsoft-defender-atp-setup.md) |During the **Setup** phase, you configure settings and exclusions for Microsoft Defender Antivirus, Microsoft Defender for Endpoint, and Symantec Endpoint Protection. You also create device groups, collections, and organizational units. Finally, you configure your antimalware policies and real-time protection settings.| -|[![Phase 3: Onboard](images/onboard.png)](symantec-to-microsoft-defender-atp-onboard.md)
    [Onboard to Microsoft Defender for Endpoint](symantec-to-microsoft-defender-atp-onboard.md) |During the **Onboard** phase, you onboard your devices to Microsoft Defender for Endpoint and verify that those devices are communicating with Microsoft Defender for Endpoint. Last, you uninstall Symantec and make sure protection through Microsoft Defender for Endpoint is in active mode. | +|[Prepare for your migration](symantec-to-microsoft-defender-atp-prepare.md) |During the **Prepare** phase, you get Microsoft Defender for Endpoint, plan your roles and permissions, and grant access to the Microsoft Defender Security Center. You also configure your device proxy and internet settings to enable communication between your organization's devices and Microsoft Defender for Endpoint. | +|[Set up Microsoft Defender for Endpoint](symantec-to-microsoft-defender-atp-setup.md) |During the **Setup** phase, you configure settings and exclusions for Microsoft Defender Antivirus, Microsoft Defender for Endpoint, and Symantec Endpoint Protection. You also create device groups, collections, and organizational units. Finally, you configure your antimalware policies and real-time protection settings.| +|[Onboard to Microsoft Defender for Endpoint](symantec-to-microsoft-defender-atp-onboard.md) |During the **Onboard** phase, you onboard your devices to Microsoft Defender for Endpoint and verify that those devices are communicating with Microsoft Defender for Endpoint. Last, you uninstall Symantec and make sure protection through Microsoft Defender for Endpoint is in active mode. | ## What's included in Microsoft Defender for Endpoint? diff --git a/windows/security/threat-protection/microsoft-defender-atp/symantec-to-microsoft-defender-atp-onboard.md b/windows/security/threat-protection/microsoft-defender-atp/symantec-to-microsoft-defender-atp-onboard.md index 38143cfd5f..d2eac41797 100644 --- a/windows/security/threat-protection/microsoft-defender-atp/symantec-to-microsoft-defender-atp-onboard.md +++ b/windows/security/threat-protection/microsoft-defender-atp/symantec-to-microsoft-defender-atp-onboard.md @@ -28,7 +28,7 @@ ms.reviewer: depicker, yongrhee, chriggs [!INCLUDE [Microsoft 365 Defender rebranding](../../includes/microsoft-defender.md)] -|[![Phase 1: Prepare](images/prepare.png)](symantec-to-microsoft-defender-atp-prepare.md)
    [Phase 1: Prepare](symantec-to-microsoft-defender-atp-prepare.md) |[![Phase 2: Set up](images/setup.png)](symantec-to-microsoft-defender-atp-setup.md)
    [Phase 2: Set up](symantec-to-microsoft-defender-atp-setup.md) |![Phase 3: Onboard](images/onboard.png)
    Phase 3: Onboard | +|[![Phase 1: Prepare](/windows/media/phase-diagrams/prepare.png)](symantec-to-microsoft-defender-atp-prepare.md)
    [Phase 1: Prepare](symantec-to-microsoft-defender-atp-prepare.md) |[![Phase 2: Set up](/windows/media/phase-diagrams/setup.png)](symantec-to-microsoft-defender-atp-setup.md)
    [Phase 2: Set up](symantec-to-microsoft-defender-atp-setup.md) |![Phase 3: Onboard](/windows/media/phase-diagrams/onboard.png)
    Phase 3: Onboard | |--|--|--| || |*You are here!* | diff --git a/windows/security/threat-protection/microsoft-defender-atp/symantec-to-microsoft-defender-atp-prepare.md b/windows/security/threat-protection/microsoft-defender-atp/symantec-to-microsoft-defender-atp-prepare.md index cc678c90eb..1e14e2a392 100644 --- a/windows/security/threat-protection/microsoft-defender-atp/symantec-to-microsoft-defender-atp-prepare.md +++ b/windows/security/threat-protection/microsoft-defender-atp/symantec-to-microsoft-defender-atp-prepare.md @@ -28,7 +28,7 @@ ms.reviewer: depicker, yongrhee, chriggs [!INCLUDE [Microsoft 365 Defender rebranding](../../includes/microsoft-defender.md)] -|![Phase 1: Prepare](images/prepare.png)
    Phase 1: Prepare |[![Phase 2: Set up](images/setup.png)](symantec-to-microsoft-defender-atp-setup.md)
    [Phase 2: Set up](symantec-to-microsoft-defender-atp-setup.md) |[![Phase 3: Onboard](images/onboard.png)](symantec-to-microsoft-defender-atp-onboard.md)
    [Phase 3: Onboard](symantec-to-microsoft-defender-atp-onboard.md) | +|![Phase 1: Prepare](/windows/media/phase-diagrams/prepare.png)
    Phase 1: Prepare |[![Phase 2: Set up](/windows/media/phase-diagrams/setup.png)](symantec-to-microsoft-defender-atp-setup.md)
    [Phase 2: Set up](symantec-to-microsoft-defender-atp-setup.md) |[![Phase 3: Onboard](/windows/media/phase-diagrams/onboard.png)](symantec-to-microsoft-defender-atp-onboard.md)
    [Phase 3: Onboard](symantec-to-microsoft-defender-atp-onboard.md) | |--|--|--| |*You are here!*| | | diff --git a/windows/security/threat-protection/microsoft-defender-atp/symantec-to-microsoft-defender-atp-setup.md b/windows/security/threat-protection/microsoft-defender-atp/symantec-to-microsoft-defender-atp-setup.md index f36e72d95c..9945105685 100644 --- a/windows/security/threat-protection/microsoft-defender-atp/symantec-to-microsoft-defender-atp-setup.md +++ b/windows/security/threat-protection/microsoft-defender-atp/symantec-to-microsoft-defender-atp-setup.md @@ -28,7 +28,7 @@ ms.reviewer: depicker, yongrhee, chriggs [!INCLUDE [Microsoft 365 Defender rebranding](../../includes/microsoft-defender.md)] -|[![Phase 1: Prepare](images/prepare.png)](symantec-to-microsoft-defender-atp-prepare.md)
    [Phase 1: Prepare](symantec-to-microsoft-defender-atp-prepare.md) |![Phase 2: Set up](images/setup.png)
    Phase 2: Set up |[![Phase 3: Onboard](images/onboard.png)](symantec-to-microsoft-defender-atp-onboard.md)
    [Phase 3: Onboard](symantec-to-microsoft-defender-atp-onboard.md) | +|[![Phase 1: Prepare](/windows/media/phase-diagrams/prepare.png)](symantec-to-microsoft-defender-atp-prepare.md)
    [Phase 1: Prepare](symantec-to-microsoft-defender-atp-prepare.md) |![Phase 2: Set up](/windows/media/phase-diagrams/setup.png)
    Phase 2: Set up |[![Phase 3: Onboard](/windows/media/phase-diagrams/onboard.png)](symantec-to-microsoft-defender-atp-onboard.md)
    [Phase 3: Onboard](symantec-to-microsoft-defender-atp-onboard.md) | |--|--|--| ||*You are here!* | | From 059f8a3903ed77043d2b97a99c890bc18443a81a Mon Sep 17 00:00:00 2001 From: Dennis Rea Date: Wed, 11 Nov 2020 11:30:25 -0800 Subject: [PATCH 020/486] Update mac-sysext-preview.md --- .../microsoft-defender-atp/mac-sysext-preview.md | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/windows/security/threat-protection/microsoft-defender-atp/mac-sysext-preview.md b/windows/security/threat-protection/microsoft-defender-atp/mac-sysext-preview.md index edac918fc2..79da63c6c7 100644 --- a/windows/security/threat-protection/microsoft-defender-atp/mac-sysext-preview.md +++ b/windows/security/threat-protection/microsoft-defender-atp/mac-sysext-preview.md @@ -1,5 +1,5 @@ --- -title: Microsoft Defender ATP for Mac: system extensions (Preview) +title: Microsoft Defender ATP for Mac - system extensions (Preview) description: This article contains instructions for trying out the system extensions functionality of Microsoft Defender ATP for Mac. This functionality is currently in public preview. keywords: microsoft, defender, atp, mac, kernel, system, extensions, catalina search.product: eADQiWindows 10XVcnh From 026b8130c8ba91cfefa92978510df7f5668fae6e Mon Sep 17 00:00:00 2001 From: Denise Vangel-MSFT Date: Thu, 12 Nov 2020 08:45:46 -0800 Subject: [PATCH 021/486] Update mcafee-to-microsoft-defender-migration.md --- .../mcafee-to-microsoft-defender-migration.md | 3 ++- 1 file changed, 2 insertions(+), 1 deletion(-) diff --git a/windows/security/threat-protection/microsoft-defender-atp/mcafee-to-microsoft-defender-migration.md b/windows/security/threat-protection/microsoft-defender-atp/mcafee-to-microsoft-defender-migration.md index 8bfa46379d..16cc4033c6 100644 --- a/windows/security/threat-protection/microsoft-defender-atp/mcafee-to-microsoft-defender-migration.md +++ b/windows/security/threat-protection/microsoft-defender-atp/mcafee-to-microsoft-defender-migration.md @@ -35,7 +35,8 @@ If you are planning to switch from McAfee Endpoint Security (McAfee) to [Microso When you switch from McAfee to Microsoft Defender for Endpoint, you follow a process that can be divided into three phases, as described in the following table: -![Migration phases - prepare, setup, onboard](/windows/media/phase-diagrams/migration-phases.png) +![Migration phases - prepare, setup, onboard](../../../media/phase-diagrams/migration-phases.png) + |Phase |Description | |--|--| From ba7ff8684cd6993e70a70502e21ed98f036f61d9 Mon Sep 17 00:00:00 2001 From: Denise Vangel-MSFT Date: Thu, 12 Nov 2020 08:51:38 -0800 Subject: [PATCH 022/486] Update mcafee-to-microsoft-defender-migration.md --- .../mcafee-to-microsoft-defender-migration.md | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/windows/security/threat-protection/microsoft-defender-atp/mcafee-to-microsoft-defender-migration.md b/windows/security/threat-protection/microsoft-defender-atp/mcafee-to-microsoft-defender-migration.md index 16cc4033c6..d4673240b7 100644 --- a/windows/security/threat-protection/microsoft-defender-atp/mcafee-to-microsoft-defender-migration.md +++ b/windows/security/threat-protection/microsoft-defender-atp/mcafee-to-microsoft-defender-migration.md @@ -35,7 +35,7 @@ If you are planning to switch from McAfee Endpoint Security (McAfee) to [Microso When you switch from McAfee to Microsoft Defender for Endpoint, you follow a process that can be divided into three phases, as described in the following table: -![Migration phases - prepare, setup, onboard](../../../media/phase-diagrams/migration-phases.png) +![Migration phases - prepare, setup, onboard](/../../../media/phase-diagrams/migration-phases.png) |Phase |Description | From 4eef25e115f8cb1792b93c01f5fd06a143c9a29a Mon Sep 17 00:00:00 2001 From: Denise Vangel-MSFT Date: Thu, 12 Nov 2020 08:52:48 -0800 Subject: [PATCH 023/486] Update mcafee-to-microsoft-defender-migration.md --- .../mcafee-to-microsoft-defender-migration.md | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/windows/security/threat-protection/microsoft-defender-atp/mcafee-to-microsoft-defender-migration.md b/windows/security/threat-protection/microsoft-defender-atp/mcafee-to-microsoft-defender-migration.md index d4673240b7..277a421663 100644 --- a/windows/security/threat-protection/microsoft-defender-atp/mcafee-to-microsoft-defender-migration.md +++ b/windows/security/threat-protection/microsoft-defender-atp/mcafee-to-microsoft-defender-migration.md @@ -35,7 +35,7 @@ If you are planning to switch from McAfee Endpoint Security (McAfee) to [Microso When you switch from McAfee to Microsoft Defender for Endpoint, you follow a process that can be divided into three phases, as described in the following table: -![Migration phases - prepare, setup, onboard](/../../../media/phase-diagrams/migration-phases.png) +:::image type="content" source="../../../media/phase-diagrams/migration-phases.png" alt-text="Migration phases - prepare setup onboard"::: |Phase |Description | From 9ee17c956a4d55a88f76bebb5863138b47e53bef Mon Sep 17 00:00:00 2001 From: "Trond B. Krokli" <38162891+illfated@users.noreply.github.com> Date: Fri, 13 Nov 2020 20:42:08 +0100 Subject: [PATCH 024/486] Microsoft Defender SmartScreen: Column corrections There are 2 cells divided from column 2, which makes them create a third column without a correct description, whereas column 3 has been moved to column 4 for row 1 and 2. This commit aims to rectify this by moving the content of column 3 back to column 2 and column 4 back to column 3. --- .../microsoft-defender-smartscreen-available-settings.md | 5 ++--- 1 file changed, 2 insertions(+), 3 deletions(-) diff --git a/windows/security/threat-protection/microsoft-defender-smartscreen/microsoft-defender-smartscreen-available-settings.md b/windows/security/threat-protection/microsoft-defender-smartscreen/microsoft-defender-smartscreen-available-settings.md index e0ab6e4909..a25aed7eab 100644 --- a/windows/security/threat-protection/microsoft-defender-smartscreen/microsoft-defender-smartscreen-available-settings.md +++ b/windows/security/threat-protection/microsoft-defender-smartscreen/microsoft-defender-smartscreen-available-settings.md @@ -34,14 +34,13 @@ SmartScreen uses registry-based Administrative Template policy settings. For mor Windows 10, version 2004:
    Administrative Templates\Windows Components\Windows Defender SmartScreen\Explorer\Configure Windows Defender SmartScreen

    -Windows 10, version 1703:
    Administrative Templates\Windows Components\Windows Defender SmartScreen\Explorer\Configure Windows Defender SmartScreen

    Windows 10, Version 1607 and earlier:
    Administrative Templates\Windows Components\File Explorer\Configure Windows SmartScreen -At least Windows Server 2012, Windows 8 or Windows RT +Windows 10, version 1703:
    Administrative Templates\Windows Components\Windows Defender SmartScreen\Explorer\Configure Windows Defender SmartScreen

    Windows 10, Version 1607 and earlier:
    Administrative Templates\Windows Components\File Explorer\Configure Windows SmartScreen

    +At least Windows Server 2012, Windows 8 or Windows RT This policy setting turns on Microsoft Defender SmartScreen.

    If you enable this setting, it turns on Microsoft Defender SmartScreen and your employees are unable to turn it off. Additionally, when enabling this feature, you must also pick whether Microsoft Defender SmartScreen should Warn your employees or Warn and prevent bypassing the message (effectively blocking the employee from the site).

    If you disable this setting, it turns off Microsoft Defender SmartScreen and your employees are unable to turn it on.

    If you don't configure this setting, your employees can decide whether to use Microsoft Defender SmartScreen. Windows 10, version 2004:
    Administrative Templates\Windows Components\Windows Defender SmartScreen\Explorer\Configure App Install Control Windows 10, version 1703:
    Administrative Templates\Windows Components\Windows Defender SmartScreen\Explorer\Configure App Install Control -Windows 10, version 1703 This policy setting is intended to prevent malicious content from affecting your user's devices when downloading executable content from the internet.

    This setting does not protect against malicious content from USB devices, network shares or other non-internet sources.

    Important: Using a trustworthy browser helps ensure that these protections work as expected.

    From 6b778b47406acb2ea456b663a467ea87853275fe Mon Sep 17 00:00:00 2001 From: Graham Williams Date: Mon, 16 Nov 2020 10:05:45 +0000 Subject: [PATCH 025/486] Updates Jamf Signing Step 4 for Clarity Changes for #8631 as suggested. --- .../microsoft-defender-atp/mac-sysext-policies.md | 4 ++-- 1 file changed, 2 insertions(+), 2 deletions(-) diff --git a/windows/security/threat-protection/microsoft-defender-atp/mac-sysext-policies.md b/windows/security/threat-protection/microsoft-defender-atp/mac-sysext-policies.md index 9b20ff2260..73bb94faf9 100644 --- a/windows/security/threat-protection/microsoft-defender-atp/mac-sysext-policies.md +++ b/windows/security/threat-protection/microsoft-defender-atp/mac-sysext-policies.md @@ -150,13 +150,13 @@ As part of the Endpoint Detection and Response capabilities, Microsoft Defender 4. After the certificate is created and installed to your device, run the following command from the Terminal to sign the file: ```bash - $ security cms -S -N "" -i /com.apple.webcontent-filter.mobileconfig -o /com.microsoft.network-extension.signed.mobileconfig + $ security cms -S -N "" -i /com.microsoft.network-extension.mobileconfig -o /com.microsoft.network-extension.signed.mobileconfig ``` For example, if the certificate name is **SigningCertificate** and the signed file is going to be stored in Documents: ```bash - $ security cms -S -N "SigningCertificate" -i ~/Documents/com.apple.webcontent-filter.mobileconfig -o ~/Documents/com.microsoft.network-extension.signed.mobileconfig + $ security cms -S -N "SigningCertificate" -i ~/Documents/com.microsoft.network-extension.mobileconfig -o ~/Documents/com.microsoft.network-extension.signed.mobileconfig ``` 5. From the JAMF portal, navigate to **Configuration Profiles** and click the **Upload** button. Select `com.microsoft.network-extension.signed.mobileconfig` when prompted for the file. From c023c7d42a21d09c588689b5f91f0f1d7df1c57e Mon Sep 17 00:00:00 2001 From: Benny Shilpa Date: Tue, 17 Nov 2020 10:22:56 +0530 Subject: [PATCH 026/486] Create firewall-settings-lost-on-upgrade.md --- .../firewall-settings-lost-on-upgrade.md | 44 +++++++++++++++++++ 1 file changed, 44 insertions(+) create mode 100644 windows/security/threat-protection/windows-firewall/firewall-settings-lost-on-upgrade.md diff --git a/windows/security/threat-protection/windows-firewall/firewall-settings-lost-on-upgrade.md b/windows/security/threat-protection/windows-firewall/firewall-settings-lost-on-upgrade.md new file mode 100644 index 0000000000..77e0fa9ee4 --- /dev/null +++ b/windows/security/threat-protection/windows-firewall/firewall-settings-lost-on-upgrade.md @@ -0,0 +1,44 @@ +--- +title: Firewall Settings Lost on Upgrade +description: Firewall Settings Lost on Upgrade + +ms.reviewer: +ms.author: Benny-54 +ms.prod: w10 +ms.sitesec: library +ms.pagetype: security +ms.localizationpriority: medium +author: Benny-54 +manager: dansimp +ms.collection: +- m365-security-compliance +- m365-initiative-windows-security +ms.topic: troubleshooting +--- + +# Firewall Settings Lost on Upgrade + +This article describes a scenario whereby previously enabled firewall rules revert to a disabled state after performing a Windows upgrade. + +## Rule Groups + +Individual built-in firewall rules are categorized within a group. For example, the following individual rules form part of the ‘Remote Desktop’ group. + +- Remote Desktop – Shadow (TCP-In) + +- Remote Desktop – User Mode (TCP-In) + +- Remote Desktop – User-Mode (UDP-In) + +Other examples include the Core Networking, File and Print Sharing, and Network Discovery groups. Administrators can filter on individual categories in the firewall interface (wf.msc) by selecting and right-clicking on ‘Inbound’ or ‘Outbound Rules’ and selecting ‘Filter by Group’; or via PowerShell using the Get-NetFirewallRule cmdlet with the -Group switch. + +```Powershell +Get-NetFirewallRule -Group +``` + +> [!NOTE] +> It is recommended to enable an entire group instead of individual rules if the expectation is the ruleset is going to be migrated at some point. + +It is recommended to enable/disable all rules within a group, as opposed to enabling/disabling just one or two of the individual rules to help avoid unexpected behaviors. For example, while rule groups can be used to organize rules by influence and allows batch rule modifications, they are also used as a way to maintain rule state across a Windows upgrade. Rule groups, as opposed to individual rules, are the unit by which the process determines what should be enabled/disabled when the upgrade is complete. + +Take the Remote Desktop group example mentioned above. It consists of three rules. To ensure that the ruleset is properly maintained once the upgrade is complete, all three rules should be enabled. If only one rule is enabled, the upgrade process will see that two of three rules is disabled and subsequently disable the entire group to maintain an as pristine out-of-the-box configuration as possible. Obviously, in this scenario, this brings the unintended consequence of being unable to establish RDP connection to the host. From a9cff113deab0cbfbf190f95468cdf762b2ac3cb Mon Sep 17 00:00:00 2001 From: Benny Shilpa Date: Tue, 17 Nov 2020 10:34:57 +0530 Subject: [PATCH 027/486] Update firewall-settings-lost-on-upgrade.md --- .../windows-firewall/firewall-settings-lost-on-upgrade.md | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/windows/security/threat-protection/windows-firewall/firewall-settings-lost-on-upgrade.md b/windows/security/threat-protection/windows-firewall/firewall-settings-lost-on-upgrade.md index 77e0fa9ee4..f1cf50da2e 100644 --- a/windows/security/threat-protection/windows-firewall/firewall-settings-lost-on-upgrade.md +++ b/windows/security/threat-protection/windows-firewall/firewall-settings-lost-on-upgrade.md @@ -30,7 +30,7 @@ Individual built-in firewall rules are categorized within a group. For example, - Remote Desktop – User-Mode (UDP-In) -Other examples include the Core Networking, File and Print Sharing, and Network Discovery groups. Administrators can filter on individual categories in the firewall interface (wf.msc) by selecting and right-clicking on ‘Inbound’ or ‘Outbound Rules’ and selecting ‘Filter by Group’; or via PowerShell using the Get-NetFirewallRule cmdlet with the -Group switch. +Other examples include the Core Networking, File and Print Sharing, and Network Discovery groups. Admins can filter on individual categories in the firewall interface (wf.msc) by selecting and right-clicking on ‘Inbound’ or ‘Outbound Rules’ and selecting ‘Filter by Group’; or via PowerShell using the `Get-NetFirewallRule` cmdlet with the `-Group` switch. ```Powershell Get-NetFirewallRule -Group From 30bc25b178bb4a052c5cf31bc4e6923457d3ab71 Mon Sep 17 00:00:00 2001 From: Benny Shilpa Date: Tue, 17 Nov 2020 10:37:28 +0530 Subject: [PATCH 028/486] Update firewall-settings-lost-on-upgrade.md --- .../windows-firewall/firewall-settings-lost-on-upgrade.md | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/windows/security/threat-protection/windows-firewall/firewall-settings-lost-on-upgrade.md b/windows/security/threat-protection/windows-firewall/firewall-settings-lost-on-upgrade.md index f1cf50da2e..5455669ae8 100644 --- a/windows/security/threat-protection/windows-firewall/firewall-settings-lost-on-upgrade.md +++ b/windows/security/threat-protection/windows-firewall/firewall-settings-lost-on-upgrade.md @@ -3,7 +3,7 @@ title: Firewall Settings Lost on Upgrade description: Firewall Settings Lost on Upgrade ms.reviewer: -ms.author: Benny-54 +ms.author: v-bshilpa ms.prod: w10 ms.sitesec: library ms.pagetype: security From 3c0d7031ed623dd7a035e58e66f038779e95d424 Mon Sep 17 00:00:00 2001 From: Benny Shilpa Date: Tue, 17 Nov 2020 10:39:56 +0530 Subject: [PATCH 029/486] Update firewall-settings-lost-on-upgrade.md --- .../windows-firewall/firewall-settings-lost-on-upgrade.md | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/windows/security/threat-protection/windows-firewall/firewall-settings-lost-on-upgrade.md b/windows/security/threat-protection/windows-firewall/firewall-settings-lost-on-upgrade.md index 5455669ae8..0492170b3a 100644 --- a/windows/security/threat-protection/windows-firewall/firewall-settings-lost-on-upgrade.md +++ b/windows/security/threat-protection/windows-firewall/firewall-settings-lost-on-upgrade.md @@ -8,7 +8,7 @@ ms.prod: w10 ms.sitesec: library ms.pagetype: security ms.localizationpriority: medium -author: Benny-54 +author: v-bshilpa manager: dansimp ms.collection: - m365-security-compliance From 433f39b90d91d83d964f607c31f209db02cd15f0 Mon Sep 17 00:00:00 2001 From: Benny Shilpa Date: Tue, 17 Nov 2020 11:21:58 +0530 Subject: [PATCH 030/486] Create quarantine.md --- .../windows-firewall/quarantine.md | 214 ++++++++++++++++++ 1 file changed, 214 insertions(+) create mode 100644 windows/security/threat-protection/windows-firewall/quarantine.md diff --git a/windows/security/threat-protection/windows-firewall/quarantine.md b/windows/security/threat-protection/windows-firewall/quarantine.md new file mode 100644 index 0000000000..b1f76da025 --- /dev/null +++ b/windows/security/threat-protection/windows-firewall/quarantine.md @@ -0,0 +1,214 @@ +--- +title: "Quarantine" +description: Quarantine behavior is explained in detail. +ms.author: v-bshilpa +author: v-bshilpa +manager: dansimp +ms.assetid: +ms.reviewer: +ms.prod: w10 +ms.mktglfcycl: deploy +ms.sitesec: library +ms.pagetype: security +ms.localizationpriority: normal +audience: ITPro +ms.collection: M365-security-compliance +ms.topic: conceptual +ms.date: 11/17/2020 +--- + +# Quarantine + +One of the security challenges that network administrators face is configuring a machine properly after a network change. + +Network changes can happen frequently. Additionally, the operations required to re-categorize the network after a change and apply the correct security policies on a machine are non-trivial and may require considerable CPU time. This is especially true for machines that are domain joined. In the past, the delay in applying security policies during network re-categorization has been successfully exploited for vulnerabilities. + +To counter this potential exploitation, Windows Firewall will "quarantine" an interface until the system has successfully re-categorized the network and WFP has the correct filters applied for the updated interface configuration. During quarantine, all new inbound connections without exceptions are blocked to the machine. + +While the quarantine feature has long been a part of Windows Firewall, the feature’s behavior has often caused confusion for customers unaware of quarantine and its motivations. + +Ultimately, the goal of this document is to describe the feature at a high level and help network administrators understand why application traffic is sometimes blocked by quarantine. + +## Quarantine Filters + +The quarantine feature creates filters which can be split into three categories: + +1. Quarantine Default Inbound Block Filter + +2. Quarantine Default Exception Filters + +3. Interface Un-quarantine Filters + +These filters are added in the FWPM_SUBLAYER_MPSSVC_QUARANTINE sublayer and these layers: + +1. FWPM_LAYER_ALE_AUTH_CONNECT_V4 + +2. FWPM_LAYER_ALE_AUTH_CONNECT_V6 + +3. FWPM_LAYER_ALE_AUTH_RECV_ACCEPT_V4 + +4. FWPM_LAYER_ALE_AUTH_RECV_ACCEPT_V6 + +It’s important to note that any FW rules customers add will not affect the filters in the quarantine sublayer as filters from FW rules are added in the FWPM_SUBLAYER_MPSSVC_WF sublayer. In other words, customers cannot add their own exception filters to prevent packets from being evaluated by quarantine filters. + +For more information about WFP layers and sublayers, see [WFP Operation](https://docs.microsoft.com/en-us/windows/win32/fwp/basic-operation). + +### Quarantine Default Inbound Block Filter + +The Quarantine Default Inbound Block filter effectively blocks any new non-loopback inbound connections if the packet is not explicitly permitted by another filter in the quarantine sublayer. + +### Quarantine Default Exception Filters + +When the interface is in quarantine state, the Quarantine Default Exception filters will permit new inbound connections given that they meet the conditions of an exception filter. One example of the exception filters is the Quarantine Default Inbound Loopback Exception filter. This exception filter allows all loopback packets when the interface is in quarantine state. + +### Interface Un-quarantine filter + +The Interface Un-quarantine filters allows all non-loopback packets if the interface is successfully categorized. + +## Quarantine Flow + +The following describes the general flow of quarantine: + +1. There is some change on the current network interface. + +2. The Interface Un-quarantine filters will no longer permit new inbound connections. The interface is now in quarantine state. + +3. All non-loopback inbound connections are either permitted by Quarantine Default Exception Filters OR dropped by the Quarantine Default Inbound Block filter. + +4. The WFP filters applicable to the old interface state are removed. + +5. The WFP filters applicable to the new interface state are added, and the Interface Un-quarantine filters are updated with the current interface’s state. + +6. The interface has now exited quarantine state as the Interface Un-quarantine filters permit any new non-loopback packets. + +## Quarantine Diagnostics + +There are two methods of identifying packet drops from the Quarantine Default Inbound Block Filter. + +Given that the network connectivity issue is reproducible, diagnostic traces can be collected by running the following in an administrative command prompt: + +```console +Netsh wfp cap start + +Netsh wfp cap stop +``` + +These commands generate a wfpdiag.cab. Inside the .cab exists a wfpdiag.xml, which contains drop netEvents and filters that existed during that repro. + +Inside the wfpdiag.xml, search for netEvents which have FWPM_NET_EVENT_TYPE_CLASSIFY_DROP as the netEvent type. To find the relevant drop events, search for the drop events with matching destination IP address, package SID, or application ID name. + +The characters in the application ID name will be separated by periods: + +```XML + \\.d.e.v.i.c.e.\\.h.a.r.d.d.i.s.k.v.o.l.u.m.e.1.\\.w.i.n.d.o.w.s.\\.s.y.s.t.e.m.3.2.\\.s.v.c.h.o.s.t...e.x.e... +``` + +The netEvent will have more information about the packet that was dropped including information about its capabilities, the filter that dropped the packet, and much more. + +If the filter that dropped that packet was by the Quarantine Default Inbound Block filter, then the drop netEvent will have filterOrigin as “Quarantine Default”. + +Sample netEventwith filterOrigin “Quarantine Default” + +```XML + +
    + 2020-10-07T01:03:56.281Z + + FWPM_NET_EVENT_FLAG_IP_PROTOCOL_SET + FWPM_NET_EVENT_FLAG_LOCAL_ADDR_SET + FWPM_NET_EVENT_FLAG_REMOTE_ADDR_SET + FWPM_NET_EVENT_FLAG_LOCAL_PORT_SET + FWPM_NET_EVENT_FLAG_REMOTE_PORT_SET + FWPM_NET_EVENT_FLAG_APP_ID_SET + FWPM_NET_EVENT_FLAG_USER_ID_SET + FWPM_NET_EVENT_FLAG_IP_VERSION_SET + FWPM_NET_EVENT_FLAG_PACKAGE_ID_SET + + FWP_IP_VERSION_V4 + 17 + 255.255.255.255 + 10.195.33.252 + 21 + 61706 + 0 + + 5c00640065006d00330032005c0073007600630068006f00730074002e006500780065000000 + \.d.e.v.i.c.e.\.h.a.r.d.d.i.s.k.v.o.l.u.m.e.1.\.w.i.n.d.o.w.s.\.s.y.s.t.e.m.3.2.\.s.v.c.h.o.s.t...e.x.e... + + S-1-5-19 + FWP_AF_INET + S-1-0-0 + + 0 + +
    + FWPM_NET_EVENT_TYPE_CLASSIFY_DROP + + 66241 + 44 + 0 + 0 + 0 + MS_FWP_DIRECTION_OUT + false + + 0 + 0 + + + + FWPM_NET_EVENT_INTERNAL_FLAG_FILTER_ORIGIN_SET + + + 0 + + + + 66241 + FWPP_SUBLAYER_INTERNAL_FIREWALL_QUARANTINE + FWP_ACTION_BLOCK + + + 74045 + FWPP_SUBLAYER_INTERNAL_FIREWALL_WSH + FWP_ACTION_BLOCK + + + 73602 + FWPP_SUBLAYER_INTERNAL_FIREWALL_WF + FWP_ACTION_BLOCK + + + Quarantine Default + 5 + +     + +``` + +Alternatively, If the Filtering Platform Connection failure auditing is enabled, the drop event will be logged in Windows Event Viewer: + +To enable Filtering Platform Connection audits, run the following command in an administrative command prompt + +```console +Auditpol /set /category:"System" /SubCategory:"Filtering Platform Connection" /success:enable /failure:enable +``` + +Sample Drop Audit with Filter Origin “Quarantine Default” + +[image] + +Once the drop’s filter origin has been identified as the Quarantine Default Inbound Block filter, the interface should be further investigated. To find the relevant interface, use the interface index value from the netEvent or event audit in the following PowerShell command to generate more information about the interface: + +```Powershell +Get-NetIPInterface –InterfaceIndex +Get-NetIPInterface –InterfaceIndex 5 +``` + +[image] + +Using the interface name, Event Viewer can be searched for any interface related changes. + +To enable more networking audit events, see [Enable IPsec and Windows Firewall Audit Events](https://docs.microsoft.com/en-us/previous-versions/windows/it-pro/windows-server-2008-R2-and-2008/cc754714(v=ws.10)?redirectedfrom=MSDN). + +Packet drops from the Quarantine Default Inbound Block filter are often transient and do not signify anything more than a network change on the interface. From 5c3b29d45770374c04c475511e64b249506deb09 Mon Sep 17 00:00:00 2001 From: Benny Shilpa Date: Tue, 17 Nov 2020 11:39:21 +0530 Subject: [PATCH 031/486] Add files via upload --- .../windows-firewall/quarantine-default.PNG | Bin 0 -> 186402 bytes .../quarantine-interfaceindex.PNG | Bin 0 -> 79691 bytes 2 files changed, 0 insertions(+), 0 deletions(-) create mode 100644 windows/security/threat-protection/windows-firewall/quarantine-default.PNG create mode 100644 windows/security/threat-protection/windows-firewall/quarantine-interfaceindex.PNG diff --git a/windows/security/threat-protection/windows-firewall/quarantine-default.PNG b/windows/security/threat-protection/windows-firewall/quarantine-default.PNG new file mode 100644 index 0000000000000000000000000000000000000000..6c1fb5c0070afea312826ceec8c33831143177f4 GIT binary patch literal 186402 zcmY(q1yq||vo>6%rA3Mqm*Vcht+=}tr$`9yZY}No-0CCSqA+b(Yt5Qo}tUhN~%A5_5%L*34Dw4w}nw`gYWOx za~E|P@n=1ni|_1afcW-biBY}yc{5W`qh^a9s`!7i_FWo5-Mu=PJ5iMJm-QdcVI7O2NPfV|&7 z?~E`VT%9(!-1!i>A1$YIS&l8= z*M9kvfB=!GsOXEAFC(I(H*PQXBqb$3;NteeGk90-W)Q!Bn{@Z|tlVj}eEat7%1KR4 z?eIv`|J{YdMb;u@(tNu#R?BN+R3kZWcz8@>AvadzF4>Mz)WXI+`|x_BRuZ5$T!muGDH^^5+1OG zSm;pmDm!{4L@Z}PYS-)owkrmn!a9#OGxmjG$UCFQv8n;ljO~Dte~9Lsc(|uO89!=! z{UtPht-s*uk-hMjneC^@&Z99dOW{ZS`^w!DnH#~@(Z6h5oyG{Twvu_=>CcF5rW+Oy zpV=esb^p$OfNdw*B6@p!m+|0Sz|sFF>#N@>Ap5D}{|f#e`8U65lsx;ZnSYf*1Q%|i z0c&VzaQ}~X{@ak4nD~Dhe&y@_qqzUf$J7JZ{5$zdEDHE9=`E3am;43WF6&0K&i5I8 z(KkjrPf=+sJhly)?t0L)quMFkK5Lk1qwe9Y(WI^&e=J-;WRGBk^k%D9qrcMkFoG~@ z!w#nKI2-Uo+qZIZfhKF_z_`oQjePsYH_nWVx>sfR2?II@Y#-_D3|g>GZINq-^LJiN zFEQSf964-Lb!b?~uI{FZj`2>4@C?bEx-~X#u?jg^xeVO4Uy91gGB=IuKFO1-J6YTy zb}au{%1waG`2ShUnn?aaXwOIa@GH}{j>k+&ht9r?o8Y$U#G`}8QqeP#yP!$A`jx$T zQH(@6I8o6LX%q&Y8;@GlDMPDK9=hUr)j*y4yj9HCo(J`*UQ|bPZ8y@Ev}Db(0n+c> z^%=*|elIG9@*YS==(+HlH)1=~n|Ks{eJ2FJ+2Lk*?7Q25-*HxVXact$lM{K7m|nT8=ZKI{)kY|nQX<_~KX;J;|-h@D!LVWl$YWgkn$ zCr-8_B2>CJYnIh8VJ}B{-JLpR;i91&Xrb_p*zwUYrFHhxIi_?et7 ztyfG(MxL3jn{i(M`2{Pp*)RNy^qQ_WM@>uyhATOdlVPE@9sM_w_*P>TXAy=ErfWaH zwux<=I88tN)@f0k?|Zy<-N!T$o%*|X;Q?`X;Xpx#bpPutB8ithFkBYh#4=K!$x4kk z0vK_@UTtNVY``+GH&7l#|;ndK9{BkGbxw#<5-~s5gU*$QS_eA(rCd zDjwmvol~rhARfB-VKSf&Biu5S*Rxq(lxH=Zrk|1WSX+3MFTBrEi`;vg+l1X$vVOsm zk0zgUeVVA>Bm3u~hS)Wc3)xw&NnZ+)$|xLOQJIqC&{-}vvBgE$c}vhWgg?*ejAElh zvZmNJ#Zp!KI%Odxkb(6Dg5!1Rv>A2GZ2u36m#DA>l+rNWB^Y)Hx>sq#bSf-f8*6pv zOLsLkcQrG4UAj!pj7)@JWA=$5ZH>|W(UrqZKkd4(G>XOE&fRPyfL=7Ic`g0WPY=K} ztxm}`)}*m-%$I>0gb$Eosx8md;HuZvZ<&hhshWLLegWsV%-9gOfqGr)3gNGqM}2JV z`QEeByOY!zTT$Qb40WqccAbX~8;2D-$rFY7YTE?BhcGygw?=oLPjmW;9aV}M)R`xI z)wuzt(&aDgP_oX4DZz8{=hppfBSttAT-6VFG8rO*jaGl|6OpSn1#rpZgSx&|hrx9B z!=ZYzNt(`wj+2gqeN(oH?`^zib#(RDzw=idXeJZcyl5thS8O>@ z&JgmHbdlc@*_yTLVhhE*UV}JTb+CNnQo}Gf)b)1Dd@HqWG#gzu1PP_{TsZ#7f}goA zOKA@+X^6%>nX1%vuSc1q5Yc+ne8lcbb9pG%Sd^?}(e@uTYOS1ou>@QC8FYGL=j3Ub ztvoa}g;J&nRg3Lh30<%#bN2{OeSzA>u8pD-H|e>ri$Tj2l}HU2Xc4{p7-OUI)vFEk zl^d37nB5o4&wv+uRUn@6)mQYKJy!E(Y?pe*frH6AIp3t?h413thp=ioS%0hEo2(7h z@#+#`AQx=>3k8?PN6FCMe4iB2@AIJdMeCp`uZ=yg}RMX=TqJHll`*BWmqU8|a)QTX@vES+Uc> z%f47%M^?C6$9Og%6cZqQ;3-xHjni@drSjRWCFc|>cb{Qs(;ZkoAS}jXzEZ^Jw$O0j zO~AtBs~iO!X+7BsGYb8vG zuF4hS>dK#!X(%W=Mwc^X)@_Iy_*iWSazn?O@bi$x6PE0TZE|@EJrzOcIFl;+HcX80f zr-6Dw!`QgARB{oh)YSCYD|bTcDzDPj4itLny=aDwJ&0~H%ryt}`a%^l4LHJ4nxm#X z3NRt-)6u34swXCH#n{CABU@VtPUlT`o-hF@K@rIiau)k7mb`qf-Gw^79?V;3PIcBT^)PDW0jE&O`RO-^E{ILO0dh-hM6LPZiqCAD>V|BR9sB=<^0}_)3U2|0b7pT?0e~ z^jh|3y2W!QBXCw8&#yHX$}U?UN=3>aBG#u0ZH;~IeecpC;$EIKETpR$p;zqB$I;)Kokvd_9`0 zQ1A$_?M%tAQcgHv2(Gg2natZPD0mdlLCepi556PqRkorCJtXn9L{nFpvCO-aDt!oN&Sg- zM}pCP)`oIo0m%%Rx_?7}%k8o96GD2XCygr0dLVPN#NT6y^&`Y%tKf2*dBCpm&Qk?# zdF8ObFw@;~MxqGEN9%F8a~L8QajIkMQha3TAJj4((20et0;9_P5DPx%^$_v6UNEx} zA9E2?))Y>(UrNtipE+O}haTQ*t~ihuoNBloU-xLdkvp>YNS5JjsN1_Hxd`9NcCq-8 z48u&X;NxO-v7Rv@+F+DMpwIC+?fE)4I@At3-O&oBINzQ&DDfkyIYv4J4`%=IwNC<1 zlZq~#MLK+Y>Cy2l$-7%KMtziu~A1Ty78ZRlZKA=86Vy|xE3--pcz>fxBgSky)& zDnXd1Cu1;`AKRt*zS_3ftwm^DI`h0v)DImcJ(FH5H@AB#gJ+&(s|IJ7OhG7eI(t+)oI1`#WEU_O%Igjt(kDr0EA%jm6W_q@Na}JsbEg$RC@@?Ry1}86BmAkrPUM%*R;C$gulf1Z6n|KRAaxO&@(m{YIX1w zjd+)HqM>1=#!U}o=rtw?9<*)%e zWox{-*{<~BxJSs!Gf9SQs7J)C76B>6{=Pw~+KSDD&6&FO#?Ig}iwMrjF5??upz@hk`EE zqpV!?@1NgP2snJO6x!pTi&Mr%BS))OBA;Ijz*q%>s3Umu8*5w_O!Zi8PDWkYZWs5avz@y9j6Z{g1&v1eIN`6zjDMb!8~|0b#;KQ>+O)+2KUgY0 zAHZ^tc93*}?#<{Jt)B?FfjCSt=gjFLzTod6OibPrcNs!$*R}Hx8%Wn~|Opa=01#jN8K}JGm+NCQlh_z70wwQ zhUMo4?a_{gW4X-{a#9wjDHePTcP_Q?tLxyV)laO zsTwEE>sa7~m2ebzf$qcjYM-oUgDCDK^7`ua$SF6NrH))aWM4H4r;MvKrTNb{7p=tWS zSfATpbv=6oOXVC|&f9!BzKEz|rnq>L_K3U?Yfjfm|JeEU2=p&KKgWsK9X``7)>rpx zs0fdYRJV%_Jtx+6)6LSb&F16qSuZ>`i#r?MtJd(omt5377#$pb`Q=Z;(&;nS(#d}e zN$0RA1^DH$s9;12X1n5A^~j0eLCbXMOlFIlWi2;fQhA0CJG9SZgV---?<=J=C&kIB zbnNBG2p!8D$5l7_y$Z91^2K7^u1Khu8HBS)1yj1=KymNj`?Y{dZFvC8FriWY=P0o{ za=wHKyOF8icilopt^&j_Se+jK0Hn1TySAH8)mrR*z=})5!-*7!Ic>0j?E3j=>fUQd z=LNoE4D!+3uF5}?P@XZs?I>U-l;YO+L<7bjpj_{40?#ky79=b3I`jVe{&tGL3dHLjNM zXMFY}KM7pFWfd@LK-_V_jR#%1&;1DZxic;3Od}M}w*HLHYH|umL5th17VS7jJV=nv z)Argtw~@Oa^;BV-Z`)8@fhKzn3|h5JE5(_8f;=S12&ks*ufP@-0WSCXXDAq#rbAHK zK*`U+*=b`HjIVF<)K&Cc$ynDrI97;L^Fc#cic2ow0*E$y`A!^V;p*?DQ>8ymCfp;J zwm`clf%|hskq+i-9IdcX)9|-XzX-6>cxcl4MAvy+N4md@Z4%D5y$c#IN=$N(^iuL+ z&mX|$F%<2)78m7oI@4vP$wuzp`fofrlh~+)toO!^EQP8MsQ#!LX>0yLNPXv{3O|08 zqrIp2@SGF0xA@Jz(|6SDbr^?j1{*4;Vie{Qd=Vw2gw|c#P9!tWsGUHdhS6A9<44Y( z(pM=(#-Wt6{euT8mVl~Jm5VSgM-$ODfs}O}LfM&v+C+&w=yK*Ux0ZKw?jw9(UDk^F_2{50<(yh11(uS-M(Cg$%_^5_$tYR{bC{F}B2; zrAuNSx^F(xX5_1u$6yqM@_VKe-)yVmD zKK0qfI~q!1+>GHCOL zzioNMFpgnrQ60H0ko4rm?9(&)h5u*faB^vK^>Z@^z6eeMNs1gxL=x*XyRSm0AC`ef zA5NPOZX%Pf^v!<02vzMH%0Ao#otQ}t&k*EG{y!ardn43VJpRx~P%zO`y#t45{AV}+gi9+h1-#H@*zDZ<}|;J7;jKvo}9 zFUC-4fm)A<1ishiHxhLLTC`^zCk{r(IAX9cndMFhGg$vMsy#jYz-U2d zh^)|ir^qfQ(_UignIdf#TQgqVf%6=@HQng7Xue*-#ArJ~w37tYDm@~ZmTUY&PP_k7 zGUdy>#QpT?U~+VaNhcX>-sxJ^by)%4s9Ux+<)F3Jg+xqQ@EMaV}=j*3qJT zJ5^=B!J7mbDwHrt0=*Lz1(#uVDxbx_;VZF~kD>tDu|#&>Gf3?zTDnEge-zGX7;l$O z-ZlI3qg_Pgg3o2|;b*n6j^(i~*JZ)W(ph@~i?Ez-`&bJ1uZFjEj6(zU-l}7J%veKm z1~~><&;5L+OgBG{W@MbI6^&__L#ODU}o?g4l8c?%+Ptc7NF+QQZ$#21*%bK+DZ^ef?Q<{6I{zsCKyawDlPTnhxpqbb=VZ)aQt}c9%9%@nTE(JD0Gi%DV zErvKmZEA5)ovbg^V?1^C(j#$tT>7TJsv;wedWMIDy>`NG4Bp1+c;Gl%j7awDJOt;3 zVK?Jt(5_rwVxuQ6u;w7;Vw?IqgnjsYO&K4C9|qYRrY(B4-k%VL=^8+IVnnREs1ddk zzVSg^K2yigS~PxKCDmao_vn%l6&3%XZv~~!#XnfA-`u@P-k`yP!?%oo2NHQ65+h?1 zSDEacV?Zx1V;~k)lW3wJqH^x$V2=5LcoS+@2$hRE&|t2+NC4zBT6Q9^>_CrVr(O=}c7aU41B zBa5Y)GT)LE9ijUV%^_hMi015oj4*J;8tB^S(#I`#ZDfYPqfhaN97FA%!76tskP=te zl>XbuUK=Q>_0`LUTPIeAi&(drtL~HpxeA1CLj$L3!+>Hxi7a(bslRf2BdEhixYls= ztq7mQq_FrJMcBOijI6ZvyOdt`id1RU)&a^kJj0L1o~QSI&XHTYfX7;{se4I!l(9U8 zcK^CR%`plSA{ADr^rR45Qwz`wtZiYN!PfB>1pr%Te^DAvCU`Zu+NJ*MWznY>TpBe9 zMulKud_H!=h)8k*cj|WzZsRFCfH~fC-DHVjVaeA8v7}iSYT6*Aj z2u8!2RHIP%b1wN+0DYlrHJmv3kXRgQYWAgRF05%3VB7E|BJ}|6?);73Oj>Vk4POFV zbm1*ijMa+GOGt0|Fz_Qz>h`RO=>TQjqAks1zrii{o(!xiqY0P1zXi`CU9gji1tk`8 zuY$v$=$g$RW5Zr^_9Z0*%@xOm zj&>k>>x^tk*N1lb!A9ED6c9_S@yCE!l&wtUJp8;UOz2@qwT6sF+MecS{jGJ|q~!kU zAR$((we}nr%*I1Bg!VEA8?H~N`-e{NULaE{UwlR>mypEF;;tBgD<*hZrhD%my{WW2 z#U6k|Yvl1^4X-Yhzr#_e@~qBe^@5%-d(gyY2LOI#4?BaRQVYNw0OuwRf^w}5-~EC* zdOlsSmv|Ex{m!ah;y3|^^x96`JH4kxC;-S~DX3j>%KI^Lr^j9Rt7lIH)eC1Iud~6@ zOjqD7m&`E=@Lfe)zf?pb6R~C{F63z|BU5RZn#ypU8svmAK_XLE=ddReIq7$AbUADy zGJ_R0)13VE_3&iv;;R&tzu74gshOOx$$&*Qto_n;n?%VGEWGJb1stePLO4)(s^YH` z4?ur>J;98h%TLG8EKaSof_h{`M6s?CY`&jtxPPPw-zA$@>6hwaXc6SZJ)c!wz(;uGMbI}#Y<=33=4rLa%mB%U)ALW;gd zpZ5h^Ub$vAhowU{UK})?H6ff+L9Em9R?jh_FPWI_7LvMRb~&vEg#76zlNXlSA}BL| zRuHotF@Ou=oSd!k-w`fy9hDIkhJ!k|Z8BKEKFv}gb8E6~GaAg%kfx3fHYw+N^Xb|5 zl-wFneNswo4SwzomfH&lg`5WyxkzeC`n2-BQ1;rfR-wDaR)7&na3jJWt32zPRz)Wz zR1zD^>O>*HE3%y0PKs7X*a!~kIC&}t;YreCH$-Y_gq=u5K=;Xvqhrr_xDF+0cZR-x z8AHqKs@a*oEh2>3=$QUId1c>^h)vAQzZv$9NHm}!C|U1KlRy(z3yzg=uVq^opzsM( zt?PY-chsqz?>S2QV(4%YKKNo2R3Pb65}tQPRdVahrFXU3t1DL!3^6qA_7UTz^|(&} zW@Jjz`M??^6i^zhyOM0~K*qk$h_CF;Rw6CXSZBbbyb#rLY2%g)M6a7$P{FB#BmHVd zKYQuP8=;eCLNrKnj+qdCr_4uB%kj{GqH!;kT(|Gu znw3Ja7x9k<&E6l6m~@)g@x@gCpkv+jlwA92ES|42_spHQO2WWaMv8ZIkx?L{krdB3 zkh}Szh5C@O6+^z)7|X;x6+D2nKk#@oKpe0n1<;psEBfH)%_7)>yA2`KnQzK{6D8fa zb%&)B5zf16lu&>o4}8Dll%cy^g`*{U*bOKh2s!4e*j)f;e_D7yA;Y> z9KGfOc8J4^Pj%7gjLJ4Ote&L=m$UDRH-PY-*O>ugW~A)v-xequvsRJG8uoag38u9R zA;<88(w5`$og>?ZRG=BH)B+n&_b!mTzKiFP?|ZG&r=Uba*A z10|T4Ud@RSOp%Guw9mz{IHxjoD)?;VZhe?Z+9>=g1@_L;=A=F_sZ2O#W`feTd;8aEvq!0sCH9C#?w?fy%P-S~JQoVQU#-Ivn{b(Ufo>+w ziGiAbX0!9rd27$)(Y_97*LGMrg(@BX)TzXq3K-(H-Qko~!zr>J38(X&dmF0h7t!tK z&VH1XKAL1JX4MUn!@5bXmm)J$Ku}JX=?A@Y36hJ{6@OBBf8rN!AN_7v-o-|Nn&0&O z%Z}@B^5`fWx4_xCT8rXl$D+Ou#L#3h@{Z3Ve{*}AM#`V0S4b3k0{gDZ_D%4B5nE~@ z!xQ(Zc~74KThD$r1|;ONhD-1G2kWGp6H-T4usc-Sco6i|LkOmH$E zZ)kBSPJUkh_WrOwBcX9r-FHRX$V4MmdYXCq$H`npZ)+8_!;W9i|Bfq&trcJ9^C=I{ zRe4v2*YL!XDq7wp(w1}~+?g%a;yzsytE#r|2sxN`+GaDupz|*@ceE9ArEo5M7@R+u9_DE)2 zS3wuxfbsY0*lcr+*i&ZSaiLrG)KGThDDrHA_+u%;jDMAHbKQZ8n=9BxFqG?j$>aJO z(&0+ZlUVeAo85Aa6L{1rmV{)_@ZpBcCVnJvUzPo)HneJEu*?(f9V&kQWsL>D{gtnW zV(wnKgKFiTtar6Y*JF9S{mEv!l*YJR44ud=XBa-K$xdbn^M^IQ;xjhf$BH**jRpe) z6+kbcZt9qa(ek-u;L(Lg=Q4FauxBTn_P*cgauf^?^m?x=)cks7SF2bOipAVcq5yJ! zR~79TSY1&(U{gd;d(JMyyhHg)NL+~K6q_!V#1j5!BbhFRTb6+Wv(?Dw=XSx=@V`xN zA#XI#Hzwj3qKq z_#;F|LP&jU543B1k#tkUba1C=3B7iC6mR}yEcZ#|fitYwy(lH`)k_RXN17oiX=$|h z$GxMbwsV$+kaXxVPDKcgiTc`sqW1#uvoQQv)pS=#g;8S63r zuGJC~am*MC*NCg@<{|3aIODO?1tZ1Xg(UJwWnfpH$+`s}uA_CryrJs8NVfMjEMh+U!+#fAm>%gw*jeZyy6oT zw~_^$*Jm_asnK>~1*h$xRi`(plXe88JM&|)mS6uyO;?-UN!d;z1z769U)p2J%tO_b zLQ&}ReVHSaA6T5y{4i_%Hz|QE3HQayrt&@HCERA@Hhu~A5AX7O3#oRAL}Yk5Z7vPA z*o?=Q$1eU%6bZ6;yh=0?9q%v_)!5ER@YS^>fziObn_+2CZ+v3b;CNf~t&Qn-brnVt z&KGp-0gpmkW7%CTFY%kPGXgm-Iei36xSNzpCj&l4ZL3%gC878}tke0b0Y9D9+P@;X zbz&e&A@0qr`5Su%TU739+=W<2x0zB1tfZ0(?@sMMjF<8QQIUl13VT&$usPto2t*k(mqS! z?nKQTomfWP@6-!>C~3zGdcik_R)$bMwry64qnGiV-=exav@lWdJwwFdKz5ViciLlz za!>tIo?@oZo#nGkoC#l-@wX9)Y=2l^j=NMz-n%QEXR5SB=g#eNk(^x7vYJ1ybWzAW zUl>*9p7Qmhg%^@HkVAtGb_tOf7ucETXr9%tVi=>%^CEHfP?w^W}a*_Dy=oUliguh5me1Kw>&K{j8i z6~?E-eR}JT8%nlPPIR`D;noWRmj&4${1VvLIFA1IDJyjR34bX24nIuTt}Pd?PcwWP zXglX0uS1M&{^py6&8AwKIRQ;t8nPs)Moz4op^B>kL4{~;iG|*ZCXA^NUzG>ikJqNt zx}(MBBTu*$;-Y|G{nw$Um+T&B)im`>fG%N(Mg|a9`~~P zQn?9pvICi!^`oY}TiXubq%=S>9=SHqWTdnrTr)0HLm{exy;Fi;Bmod7k|HySSJ+Z`ekP|Xzxk;zICn)coQ*nn9v!dCkfKS1V^dZjcnG}?p~YpxbR7dCMZ ziCad9-rk=HO_y;euimA1)eqG2i3>a1<0s1N6eNb9T43!;>%h=dm1{dJ-z?&S#-?rX zDEp#+RJIfTtqw9%5emxNMFS4~ma~iCSR*;S=gXP4R!F|_-=)j0@CW0-(8`g`P5E@f z)I6HPXvVVzl0#+Z4olyyM0mR4J0EJ|4~#awB**yUwuVF2=8UiF#LaHo46~rvh}E(d zHM$dh%^aPafJs9LFO5!RrLYT@9)j!UB&fb zdF-^FbJ|7;_qmtCy7>kx#^5KReh<_YBNmxXhP#!ZpSV61Xk#Ai#b2}pcr$w=ODg!9 zg+jzGI$Tq;wuk6$yyrhz`x<7%8kZR-+fp}Uz)F-Q7LyNpmUD5hmT)ep{`|+B{8NvI zg#x@d{r-jWBM+|VJuObKTqwrSxgdptL^WrUWy?&u*etaO_vhcG+G$Zv7d%ZHH`x;I;)hX-_d z0bRqA43%!S1W!+5!}=uEecOD=H=z=6WyGlmy_))fYVjRrr^x#1xCsO29ITYOO712st0^19Z^PdWp>eULYAE98y($x9PY zf-mN%`mOcw@lov6D`_l<(fOx4VLO7vnNam&>TpV%F z8WNljik~Ih?l!SHvD9{*zD@Q=aD06g+V>&x(`M<>@|}e$9?H~gsN|~=CoB$owSwUq zYK07`Q0$G%u*e9LZime^=n}KldI1$G{Irp7Hi4a15{Kx=!FxG}gxg-357@YAn~2X= zToEDE5la=uOtpK~@dQy(Xz}hB=Uk$ls^V1ZvaS#fn{1q-QO7{oW%=UdbL4(@rUDNOPVz9`8S^j!azIR5o!Zma`jB27IQ~DyC*SnPHK{J zwoQA4B+9ZN0=4+bPEEqHD(Mps*Du<_G)igH8e<%4jF-zNm8QH{1-2S1r=W!?gPY8f1a`h3OJvY1PSXdO# zSmM^YP$*DwsI%og3(;G4*i=w*N^sr_&9T)abI;u6OBI-aSD}D{I+sX^`**oDEy^_h(u_lGdE%2upVvu&$a+%2Uw? z`$qG!pCw#mF>0WiK$b+tPs&)`u^JlVMpz}7 zZeON&@y-Y;?2|I2QH`NIjZHOEuh0Wpr;@epGb1 zlPuDywstRMSlXQ5Kb_$izQi5p$mUVRdfFJA+Wo}MJ>tP?MXsenv$5i^q~RVOU>*Qw z)VSF>}9WbmEdoivze)uaJuwH zEIjDWJh(5@w=OG?X&TO;SJ<}-xw%EM)gq~-+G+Wihn#rAlF~QXQm=cx zm@wneX|3Lr_c{!-1TY!P*@lxcl#MbQo8R$D4Lhfn`sUr2#||}j2$ma^PtP5gc{DQ= zh8w0-xMp)^H7=>uht)~Rr#L8L+gJw-v$Pr>B4LPpEA@jkLl3t$i3J)roob}}KyhzM zZ%5Aq{~kdy#5<%VsbI3i8(buEnY1rd*l~DAnox6BU3lX$L)c)#wyl`1>$Uo_G|u~D zvxI4n9YnyR#Cc|K0XE#U`QAgACgz-ChRtE1QJ(6tf!|?$u0rgjqj^+jjOw2@=EqL56L`jOvyr_JR@ z|2+rB-9-W6qMunv!#`qq2KU+F)i`&_*{?fB4IM-(6R=qaisUHEhw*-ZNCCZaO{At%WG$=y9(dhKQ!79B%c^;eCzeUdqt z|8WuIEZ`@z(Li*F0z7!J23%`d2mp7!WPDWOn-u3`FGg`&9qe&&m^R(mA-EqcEi@P9 zK(dAPJ>X4lY%o<=UC@Yb!22ZPww*ey@8V^MChWQxe1}}CwdMl3N-OI z&;0moTF*Po65giQ>NDVd+sO&Mx^=3T7SdWV``y20^v3T>&+VT|    uR;t5;mmzo9J ze?b;8v{8bRumxLM4vzT2LD_#n6w--(r1`qSyF*J$8B$SrP}>F0|Lvk$rT}Lt)1|T+ zn%zD8A%7(D|pCOMPH>r{?CMKVrKYtz^ z7G`t!{WRt@9&Gnm?oxgIKggAv@>8}5Ak8}@5;?Kd-WVMGx0X|pb_x;b(-;0%1Ps2} z)U1@1M3;fQ?Er-ic$wRfMq1Sh!z94#x3v z@J6-YFjQ%h@Vrkk=K@BdZ&!{#-6N6z>h{cIV;l!g$a73Alj;z#wVg8nqv783Ss2|O zb2Oj-bQ$3Y0Qz11w)4-_We*3&J@lrz;E6v~5&=#=YAd0nq#`BiA>c~jvhhEE zrN4V)>u4~C8vNG*8-I0+fmkj0plGlG{j%yU%5=5Ef&do|<2s$44_Hz8PnANC^b@vN z@fnix{a7iDjN=|CFXM!6!!ry{kMN_W^AF1imI6?H_?N?E zTDlZm^~5n37Z(S4(MuLPNX~C_dE73D<*&zuBf_Q)<^gO&K9(!KOS1nzTV~LeG?{{J zg(<(==gO9TcX#?ELn3E8dS!fwkF33x#(*NR0n+Q1tJlu1izHjTgg+1MkR_@e%sKeX zk~i8f3H=u3!0M}qa9O=S^0!G$N(79;)N_}$I{4#9)dFJCwDHrQ4BjEilRcFVSNE8ii4u=!x z*~%+ZlRabl_(rs%ev;q80VI4C9;7)qOv*aXcw;L~Y;RbZ`LGAM3&OVps6FA@6~%8& z?^U3FL)x*15tOt&ITyQHX~?b@>zqD5bK5#SHuv*YIGvgqKQmXlUd;#bi#9$NUTn;j8i`D*Hi*EKkKQ!N)i_04 zyYCitEarD1p9-iHgE_Qt8P_>Q-o3@adNaV8KOeSn>-dW6>dv%3f?v0{q%W2WF6Awa zLP)q%2#Mn3Vd4%*WD=BC)p_NR!_sA-RxFV0$!+G=BcWIp~2{6&eoo{fPF?Bp^ zbNOb(pou`%TwMrNPG(-Xl1t0^WB$doT}21wPCmBOa%4adE7E0?WP2Sk482}{Agr7GwCmYn28)A7pehYRj5@Lf|y7Cf<>W7?&uvW|l*&f_+9TB5#3?~yy z94>F91P~ite~`!!4lX3IkXZr(?n*vRiFd7MvtJIEc}}FLUD51Qo~SavZo(^$0ZwEydl5)8&UrkNS-Q-fS!iwjFep<7FbRWyMj>k1n|&iwZ$sD^?fdmvMxfiSu>UYNt{nZjGtj&rNqIgA026iOCe{taPY?dZnw(g$E(`TW(5!eC zjM3vU8~3bM?#;Jsf7ljhrY3-YIamDe`3Ky|ACLf2rke4OzxeoG<7U9$Ri89e*ankQ zdR%!=2`1xjx}k+XL}IA{K}qs!!84<*O<0CzS$ZM+0Z&cnFiMyu_+?Yga@1DbBmIjx zc_Dm$K>kMr@i5mkuTQ(<*a4%ycYT5Gs<$F~@T&{0NxaKAo1sLuXkftX^Zo}7tEbhg zXrY@YdhnDa;LV|h-ps?^a|NW0MMNBQ9tFJ>80GJykSUTDM>;ep32vaG8Bf4dO6|cJbY;%j)Km(-&$JTt5PMg+y zLR4XeorAGPcA$G_JKERg5nJ~XnM}kI8c%6N*k4lu@W=FjhZcz(4|RG%1+;sdTDk0CoWpV^2S9H#uB25^m^frR%l)oie}`3`V>84 zV7!u=AKD+i=pJvAu3RBaB^@$Et8I+z-ok2>g0*mQ-VnvhgsLB&pqytqe^ZzbM_(Q< zOh9m&%-UamdHN2@4gmK=u&VF#M9ZNDvzAKKtDp;A`dcj?$xhh(8*2oM{)J}}aD@1{ zoDXuul8cT(sbu(&q@Q!ak{$I$>$TF3$Z1q%QXDmp^S3f8#v78kSeBu$HDuYlRw;Um z0%ckSpfu9hzGJDNas`o6xKuIKI|LVm?_dl`KcJk2Obfu)PJL}-PSBP5GD0anNmp-W zQ;~9P`<0~%$>wphO=c&aY+BBSl>&a0I+RY9a9cP>&ol?xYPAy(Ypm~WmY6wmH8NC5I&76_7b>~VMzoN)5;O=Rp<4{x_@+5gAe zSBABySoN=*HsF|-9sQP?(PB7;-2D8aCdiZ);@cmbML?V z<39KI%#%6ueVKEc6o?0t#CojqR)+2RZf!?}wiSNlJlTG)d7v4E zpgh3$dWmD-{RwO)5>g%JM%x2`dffJ3!luM^eI~zzaK6>n6XyI3n^~yfr-PS#>W6~I zip5Fi8XV-4`eCyu4shn=71q$x%Wf8pt=^w|>F_)LliptSY6;oE`+7k(UymG1SWmL= zsW>0Xs-lqYv9drji_?R_IkF+<8!D6g#dq?TfJ zF*kl8^YSMqJw)q2i1NPe<_rXWlA1q?+_a#!8^NS#P>MGE`YU1=%j{DwngY@nte(oB<5XtpJ=&vS;Pds(h;;{h z`L9xEb9$$VnAuwpkepVJ&8xLU|9_r%b=HqB8vUX+ z?T6CYs6Ul!l{LmAh;AOe#`F)BD#u!!2Go6YMea1f`bf*dM(=jw38str5^Q(8_WnU007zhON=x!@I`Hp8Uofq)6?Hp7#KlJ7Z(9w0b9U0k)Jvv%cTK9XcF4(jj%`hQjc zWsUv6WHbKn@-6;fp5%!Kg`YF4=MVmyQh9+0lH_Lj4M|RxFfsX&i3&Xl4i5hB6+lmX zinMN+wU>~Ttajf~+Z@j94Sx0Je-5WUfvsa>W36sZH_rE_<2(=MMhg^4|7#0T3-omz z&J5Nr)A`&ROAZk6j-blPdcoNw|7YdCw!KYV#cl|%k@vmP}1{_^nYBl z=gT>W%l3_h8MS(i_5C%*&6z8~^FxUC^9YD`@2^t)k`<|P*7nm;U z!&RHc20GX|+c$0vO)7L;PP6FEk(d`beF9bKkavaMt=0xn^j1jYlWhI6)gu0!gt2B) zu|J0xEoW#>weDryK~>91E?*^X$Si;VCVlzJcy;b8d6{li*7yp&nIx9Zlck@;r_s6-8(Pwm#*Y~b_07<+X_? zg+Dgl`-#yip9C4KOP)MECxYz>r4)}_0o4aYaNkMSg&V+lo+X{oGiW<*Y**VYB+uN1 z5&O|~4fB%OtfFVuRr`I&ySJkgxqJ<}EHgPh_Ziah`@WZOl1@7uBrP1SXq9^&`ib3f ze)#7>VbiW-XHd|)>p0cNSUTR-*I~r6Fe6Mloz;gCPeNmzN68>0G0#WEc6-x-z;b`6$Q9LhvVtGf+XXTHaj8T;)S|3&MMDPyE(bnXo3yz*lbWf+1ZPW-y7}q-Zy=L_U-tO`T9so=5+gG z@KI0nkAj~c$YJc34)*k(gYclQHTj>fo8Oi>*#EelP%nd}O0{${n=vF1OndgEGRxP; zWdd(~U%N;FJwbvy(|oR;R^(W3r>gG$JfHG%lG$n8<2p=?_|SYU)Rpa*a&b4~Qh@%> z-$PIl3p(n!&hFU-TE0&^yPk9Bb8I07(SQBqW zu%h{EXTRP+tNl16=Q=sEEHaoXYHrberRWJU~#BAPYfu?UxZQ zgWK2ZY20?4X(^l;Tpz9{7U!8!>~Lv8>O_d^ecYPA^R~9 zk2Ih|R?e*nGo$a)u(K!RXQGU${Ap+k*)TzlCg@bbRTIP!j&VGWnv|{5o>vEVhQ_LqbT1-AgpK zpX0TXHb@5nQWQ4|u~+WIbp?mh)%!G0nn~?r{iPiVnZb7s<;XFP;PW}E$I~z%K=pGY zG>B=lbcdE!kS8}Lxa!k6&a~a{DBjE3kHKN?pCUFteQ5=a@2)s)b2;L`BqZ+nB;A<9 zbpHI{y;v<Wr-fP$zDS|L~=QIy@SfXdg{OFZ_i)FQ!`VmJ*!@;`_~3Ep(U1ms>oyVFys=tf zLaHl2fNWbod|K`*=OS31B!Yp-k#NzNT`JS_jqVwaB&4pGMFs84+0MP0?(MK($M2Ui z9$k^27JJe;jPvDYr`(Y#3f2;2vL#3N(-PnChN;)bJwG;hzXB&8c9y-HhO&UWk&mFl z(S_r;iv^UXL1wpxClwO4@AE8fU*LTq0sdV7!KP*m|dVJ9C0Wp-AI>p*Z8QCa5 zTC<{&YBLH61${DAnCpsHX8BXU_I#?_qUphbvl}0uYAenepg}quG?2*h&vUuf`;){O z*VveWYmOovo#w{-zL*F6^$xx0ucQIZ+bYQJL^4=#1tLg({?KkFv8;V?ZcJUKdXcCi z`=Uxfd&4R|+qM@xu4MOmq^XpaVpse(w3pNV<`t_&BIHAkv%2|ruiJ<(^|vPv%Sl~5 z@9E+!Dk`AACiE<~tJsp?BshvM>bE32sM>v1A9t43Wn#*ya&pM9;AcC0Q+%2v`*3eB zPv@swTB03{G?)`sn_&ZcF)-qqdRCGv4GzgA)?4Q3ND7BL*LzQy!D^<>U}-PBrz8uD zFP08Ha$G+r3L6w-z$s$HZ2Rj>0E~Iz`8%jLIKT7U z#E{DX+x+-JHO1(C4Bl|3E^=Gz&t0Yl0Vf~J>W`Ty zkPDGt^>cjQv$+!IU)|S2oCi3I6KHRub4L8AX@$y6;KL!DfrKK)OiJ^Ya@-)3BwjrH z{CYS09c-I84JH;y`VYyv)X&BUU68;IHeu~dT_)90pyZ(7xN!Stf7{{H7+|53h5BAs zz5(5?f|QL{;ehtsbiP`CQbH=Vr9jO+Rr`Qvsy*}4zGqnYN*TvQYPMX-^@&nKB5HBD zDncge6@oUUWG-s4snqAXR&MG)-AqvvDmCYJ;2kKH3MmtQ(>Lo;n`X9@M%LS;99qkij;2{MDRXmICun%=| zvny_cLc*Ks&wX=g%k>#Yv9zw*UfQZ(RC({3YS~>b8e2KApJZyTBE}03_tSW})Ok6V z7snh&TkrXDbl-+|aa@JthiT5OdQI2J-^qq=3Dd)lUS%DS0@_)d+}+lBImbR&*zHEC?(W=ztM^ohU4vtBqlj6rEB^{1LA)|>?B?JDPJ z?epflJ7TAVEgfIUne21EaihGtNOR8$)@mJtXZyg2+he66V2U%Z(KVx zz;U=n`=8FK0>!&g$k`5H*W$12}usm-53yQQK{;*v19bMMdOdkN`)(4gyZ z`}5~Y#hPA@xIr+hy}Js?j%v`IAGQTIvB?LDRA~TQ?r$@(7ipOn0|&ob;7)nEVPLk) zTdSAwh!-BN<`}$HT$g!|f?_nN#tg~kh%Ec)VqDnQ_oirV-xGKsz{)pjwxWFC<*>b=0g zW0iukjQ&;!p!J!Gsjrd>aF|+e-7L|zWvHDFn8EBp!fW<2w@1OGGt~Oa5H+0Izo{kw z54}Qam9lgSi#|Siz4Ir)j^A}(Fp%25ygy=QjlE{;m@d``yAwjtHCd0JArcre!xMrz zzE!nR64CdvnFI#9JtP_~Psc^0&ws}Sl<+Sccr_h9dDuI9p+D1hNs@+_SXE#Ta$k8} zS27c3v$QqKTk&erC@`+$Rbato(M|N+uA)jEqXceFf+$Rv%k`zXG?sbQv>8!(8)IN{ zR5tMMH~LpKDCL`{y*{-=OGLmlhs(;CswZNptN$I%N$f}eI7+LdvU&qS*tZNI1MES_ zbcAclIF^Q&Q&%F-a5piW?T}R;q-fT${5jgVDSm?iQR{ST8=KX-VnpeuKe0|Q9J(WV z#)#ha#IDWSa4r(q*4^5c0UsQFW;qLIYDnOwm(P|i?O^dta zrz0rm4|Js!&mRV{&JQJoD*&)`B^g6-omXB86;_x%jdUwyH+?4*id!Rh3l$lkc6nUI zygV`*ETb}telL`um=+WA(qQdq`AQ*9MQP|HiXrV~FKaJG3cJBeb0?IW1$ZrW+a z5m{FKGn~<+g3(N+p4HQQx@NNecFI({bE4QBq(glPxg?zK{GDls76Z?GSVa%~CpB=q3?%BRuo6w`_+5NyPvV_u}maQLd5O z17MqWI&ea}E!Cp$H}y;+PV*vSnl9zed?S{)TUQa)mpS2|2|Guy&^f1Z+)QGLbERX< zil$AhDussn`%q0&@EzmmfJ2qvkdwGi|f9V z4$s)7=no?)%sHADgDm^Tf>Hh7T1oiqsH2oQ^3V42cP1?6oUFjZD199u4oU99CAr!a zwudY0nynVVKF=47p%OL8d|=w;g!rPRc-di>P6qVlW{E?06GzK0_9R4ZEu4th%zXSl zAmF^;wPO#+e@dox0^nzO#Z>Gopl(gCzLm5-;~31E6OtU_iEu4v)r+Ol1G#Iny0 zL?~toxI356Lp#66op;Iph{Wf4*BJFTHr4jM7Lkl@t~7R9AS_r@s1=j=S=mef$a$o6 z7gD_T{-FDwZGP6{5F=BXJEsG9q;j6gJV6Re#uN$&=e=ERGe?JM@2?p|$8=es17cO4 zk2qScI5UZlOfx@jmCg4u0cK{put9PkMWwN;y)Fg4kWfyV(j$c7$aj{LuI9TyY%yC@ z<_NUwDb+ewPiZ=>JwG6qsP1qck`pI3@}?O}_@eVK!Ai{TRBGy9%)}vsQR#~XWR#+( zv>a{M&*Mnt)SKsDd(LDXatZHAv+0o2C*oCBZBILG^VzerOi2*%lUw&84 zprdXBya`?nUm?-|j$L52^vpg+nL1u;=5g|w*%VMthYHHqLKNy#5(d{`|Nw)0N+N2dL-uQbx&@mFk=y_+>BfYL90 z@YlxK4Y;J>AkAJcE~MOQE_7ATnJ3cn5ntaJE^{*bahkVQmVmH$iMuA0MUN9C*QPY6 zgNw;jz_`DKu2wjxfcq^>_S{hM$P971BJbmUo)Cr#QBs|Ag<2ekJlaeD{pC%k=Y^KA~&he(*uG#>0JuLbp*H2j>EN~F~$hpL$}b5$$cGYBq0QxFrF+I$=8>^a#&pU9 zRC}W^LR3QbNeejiINwU5FTjU@A5$a5XfCdc1iSAjKNy85mK?mcyVcI~H+q2(zGGDu zeZ)Xs>Gjvx;UNyM2QC}M9=8g{SATwS-x-hT87@`b{%Ih5Wx;M#&KZLV%cWC{*5|%* zj@k?@i%I$%$rK%8F1~Xa@Yx6`Ol2uNJgzof304A)eSRZ#1$K$Z?~2;b9)o;8+FHHY z%63DNo+x(WDm2^E%r>RAJEi71u;8v%bA}iK6bt!`HuE{=R02jd0cBF}g4_uf2Z&b7 zrSlLXSAvN33b|fF27xu#6`7`;!?cSx?T9yc`j!5tRQYYUswX>6Hq&NkEQff*L;!2r zZb?_2)x0mC2^o}+7fLzIuN}$GF7J{Ocbm+8!gbNm`ukNSUfF}B+Jck)52z>x&+_Jx zlZ6lv9Lvn`WUINkf=vvbkd{Uf7|8(j4o@@kjde9*m_01dmcx@MLSTVqS{qA^G;h@f zvc1o7v+>1*wQZh@H}=Yab(larB1Rl?>h-B@;vU&Pn}BT3URj~{>=?gjUCgR8KN=f% zmMo<(9?t+12uyo zZWA2by}FC_8RrjiJFHt%S7L#P@hjwYc$^>kmVr!;K^SeS+qK$1bspAZm_)6?pPbaO zyNg0^c4ghji=|j)f5v`&JyrT3p4VE&v^82v=f$veoqKJ)r`_(>cf^=I7F^g^CLI$I z69xqPqSYnPDNS9XOnmb%STI3hWv|Lng%&d^CQr63c^u2xO*@Eab%dp2J7}ocyF*#Q z^8Wa+btaHl6*H$S+4^u1jK-mfqNeD;i0ZcaI0C-b0rBB!*YyGn$s-?D2V+2I5_yIT zTcY=KepnHkB86Wfm^%IP709HuDmW%fbVIe1cp}|BIf>~c#4!ES9fPZSd9M_ap{HpS zOzJ%1w}wwS?c{v9$=)z&S49zmg^ifYKaSC&*;%sE{ue@0Y-_OxNK(a-G0~;+yddr8 zW_-8zu+cZD{Uw~=Gfmz8M{jOXJ-P%PCL zfQ^^sm;NX&2`1PZ-dDk;mg6RV%&-#k;S{6J2)X9Lx-G&|WX3U9`uiIR?wk!XqG8zj z(bT-hxc*%tv1oRzy8JN`$4V*mZ)a7X(1lQ z8rNN0$!Xh)57t}lsxw=x1)ZLPY|W3tQ>oR3-y-NkSV;Z;+$TsEiEd)eKj-2!T<6+~K+6W|&ak;nY6P(1@OHx0mniXR!R0ylgbSPvk-kp0+Bl z=AkbJ1lF@s{r!jZ%=*m2r6p!=I1tzPb0Nd{`OnH7eoqE{8udI@+<@xR?K>kT@Dxe+ z{U?T#2&t1{S*<$O&*hEnIkPRa6=9h&Q96j0&u_1HBVJ<(ykp|pMrqo(3&1N(uP+u6 z4e}8dMWiH%xWdWKW}o#G--!(0;6MD7Icbw?Ytxi#qpRgMG%xzE(=i}0A@#LV=2k;1 zF2C`8TABOO*)>#Q$2T5y8-nxp=*+d=hwOFSZ8@ zF=2vwo^A3ue#%vz`#34xHJ(i|vCkQum>ak9u^XQhU(r4|&x7Mt-_Fse=P8SEjIcd5 z(5Y$!dQgsX$u;}uNvk(AtO1u(AMzK~c)0BmB4=2$=DX~nv7~?6Nb-y z4ptwnyhx_(@_W+9?b{RNZIqU5*PXx=lgMQqq(DQXZ!9z;BRZ4WB*0l-=61pWj!CiD#LdLp(+Pb)Aq$vP=!$UIj^*!(5o=52y?bAN2?tKx@24vm3RuV5@G zv$Ytma8)=Kd#>NoDz}qxhU9PNC48CT1wn?O*w+~cQN^Mc@F89SJcKaxrmq1O$P6(+ixeSb3?7ndj&Q8cBH`$aUZ(Mrtq@2 zy6&@+dG3EL2T+?SO3wguN%KW*2VWn(G@IZO4ddgxI?wOuMETKrhYy?8tDIUrXy93Lp%3Gf({E1hgP#)w``Kk#fr+P z+)HX{JtS7BH`ZK^3EXS*ti~`P3p6Sn_Oa50CsT7AuLq29eEkZ1T$0{Tco$<0gB(mw zc0J1U>mh7@u`cXGA(}6z)@!K2QAj#)5Lr)$HM-|CwiFSgbS4;IH{pZi3>)?CG-vr| zOkB&jghmt9c2>3ML`u;?QYhhOLW2+{@1col3ba_Wis>7NjPR^_SCiX5*=z)wvbIT+ zKDV*S^sj;m?-qg>zE^8@YH#E#ooy6@1^@$poX!+07@(Wit47KGaJr}w3EZ8_N{-*s z=&Cm-l{TW@!1*8=@CyunF;$6$asT68SnF9gv41N3-3|01qv!0ZT4+Eal4bXDs8Da5 zHF&@@!S@xbnRnQ(zt%B+`|WB#Hqie|mMS`bB3P!ZGJHEMa?GvA1v|4l)}2nNk#qf9 zO;D zZWSgFk@RB8UC-f|F&>RC@IA$uc76q&C49q4aKFg5Jd@DZ-&0m_j9 z>ggSlXGvG1{siw%fGgnh{6TYT<3pekiwZQ`??BhiQ8HR@Qg8wCc*(H5Kmf=KU(C`D zUnEM2BryN0^gUeu&hZ6_-((~cm7Rb>*oHmPXJRi$0zyi5@p;pEe(DTRo?ySTL`}1s zsvuvvG(4AA;cL{6?l#DF>izJTH?dNEsv#RoqPMG{h#mN@O*&pp>Leg73yI$L_JZtNXpiVA!QY`hCA@X85U0ZCE3*(h*z{rakpVEmcIQ@JRFuXIZk)SH27)!qx-<3wzh@eCtUe%Qf1 z_TROw)Rolt++{FRS4c)I4V?o`+Xb^5j8k)#_34TxS~xFuCv%M!ZzpzyVpirIn?T@l zUEpv(5pF<%MAOG;DMN;1!-tgx1A~a?M(8@eqiCjn8|#Kpr&}kGe-yLA9x~!mC`slc zGogERoq#qM<>5~Yq6d; zYY(%cXFh4P18+@NDksIwe`HZ(H=E@Xv9w6EB34apkBUGd#krrjlV2rhRlDJfi!sSZ z*_!LH_OgiK*Ti$y2X3qh8=uNYeV?$=f%K~%(l4aA*lQ>-t=%BQh@nwkR7pAO zsl%3^d1uEUaQv6P9^X%+i}%Tn8gYU=r7HXNU+S_Opx+vFs4Ir@HpD}BcyIplll)L9 zkSqDa(Zb~M$XXZlTs}8mhdU7&b$K(A6C0YaG z(S@Y%%E_RK9sY{UWWCd&_|p2{55(Ck=^+-ra@_rwY*>LXR`Sddi~4ZCDBWQzN=wy6 zLGHUI0Dgr~1XrZB=iPFHHHCgFHCqr#SE5dySgF1lqT0hm2;8ocumXw+p}%np7$uR? zsOV}OE41Y;R&0JQ$@pYWN-yiz)eA90o_{^Jn~J`C(Yn1D^zn_S(Yl&N$$2B>aYSz% zQcC+R6@qVCboi9SUqe>|-y3v4SW5ZIupeRh^8oKf}fN)+L;AV5{Kuq zM5Oy8I`#lRz{%2;yYq0T$?p&+M$J3iw)E=kETh6{ zQ*i{jS6vVLeEq*Baar0EfA52k<0YpgM3R0IXMcNj9a`1uFr3&V{H_&J+AZd{>3>NH zEXV``jyrMuZ@=IMIxL2_Tue4=n6*t?+*XQwKFv3s2!hdFWR|su!6(P%rpE3R>%R-{ z^~ig%S`BjtjjEz~xKgxpW+)lg=h$}pkR{dnBwmjsJp1h@T~+d+KA}&9;Hfq}2kT7#RH&8w9EvSz}`E1|LN!7)aRhxQZSag6A#oz>^ zU07d##;0F$ewU$ck|FZ=D2*DgGao+PiwaeW17*}DfF~Io0l6%EISaiHx@*Z%P4kIm zY>Ntdn??oq8lgQ%cQap;_bAlX9A>>V3V-|7sBHDp>u*&<{(z=dH*Q4@NLlmmlo@<7 z{js#wSAI2{YP6%PNcTdqpTs??9LlD8I7?j(NZst8T_AXO8o%G(roYEp?yK4v*F9Wo zIc_h#?$qPI%r4!xYQr)|K`WLLnTZr$;U|)GaXYXX^BCMw;crCEk$(bqaj{E0#)>%| zM}?OiN6BhKR^SsGz0ccp=*&L+rotX@UWM5SCNZ}u%zIE7RNXrJ>v_FjXX^c9K5775 zA{w6M`*@gE4P~Lb!?n)0nY4aCn2$vVHY77~JecFY&7({5&yqkrvE%*~V0mup8Sbl8 zi#N5UQgN&>MJr-@2TbmiolFd{Z|K5P|_Q(YH;TA(Us zSn!T9J&p(`qFR3bepG&zFex-82!Uw zeRveiX$~?o{xW{6TtmP?6{?sh{qasp>*t&s8ih{@ z>!KIB8=b5O9$N?oJj30e9Y-0^o@X&mM>eF;$@u)tm}pr4+j0N-+E8%n#K;A~+s!a% zJlq6!}?wbtzg9bROX~1JjZiTiQv6|aF+JkLR_hu(`;?a(GanroBMlGw3Phg zz9`74@@Xr@9S+{GZNV%Jcw==xuq;j2-y@okOcDn#RF=CVd_k;>Hr;3r0^8@CXlmBhKwA1j>H?zzE%mk0PSoO*qDw$(FwO7+5c0@|6U z?ul!%qEi{0+rx5UJ?ikHP_`qzjjRC0!1PyRuDsd4AL`Vw5zYdLQi~p(QxrHDgU|Hzw8Z7POK8K18$0wKIq= zXKs3x+cXp=y!TB!&VTEpx0-k5s|=Aiq+E_jTA4pG$fj~wk&&lePsCb=a~?Z{g(?V8 z<+7!9E;_MU!Rm5RWwJ-gbzr)ndfO~9m6ecxxF}b0P25EObabw_e4WItg-FLKl5m)^ z(X6I2g?9ScruJj>SY_a#vTJ*!T%AmGaUjbJS=?V*Cs(^Yl;Loehgf*69?5W7nxOy&(>;A^PK#fpEw3CEk$hlEU1tRcr^QM>TD&E_zvRh^cy95G~lrmF}P1 zs8;J!YXI5-#_|`nT|PV%U;P#hG%TME{5B@Mt$eiOtRgU$_ zdd?HKv=)_;)8gCQ<27;H`XcF@0j-|71VOB+MV3?lUEkh10t&r%+S;ghbtn>EYxPrf zyNvmJR!3bOLw`P%LTtVB*hnn(P6ChSLd~nOH#FPS=hX{kf+D5a(ZcEip>>j|@GSGP z!-aTToTomMt8rj#ZH*0EiHK%`XD4N9UG1a(Pf!8g0amlz;5NE_?9q znKC>*t|MjeR6b2BncM$U>8Rff-L&jQ5kJ&&xcH)btMzOZ1w#+f*Mn+F>d}sz#o9+` zJ&OUZTa&o%EVlxbaDAvKs9d5L$|jyxRkEi{(04}8#*6MI%Bg<-3$ud5_VZU|(ba=1 zBm?ry_;fOjoWzd?Y*HNM+p5uEt%QHWSy~bvt8L3U*84dGgB20FNK*w_JyJ#bE0+gn zrQ=cO2v`C;McF@-qa?%E!<5 z4qeD1E8e!|rpZBahO9J$)g}@A!XqW6E2aUv8`0$m;-%HSQ{;&ql3k*iu*S5yUP1Ox`IsV?0vzgT)K#+DRiRmg&p0(T<;YbTiJb}Er+ z$UcUEiocvTZoU?bd)D->JBw`|HoyZU_m$tRToJ)jnIuPF)A?KtPt&$T*XL9BbeuIp z8ZmS>jxGm~idMB>lmxVL#eQeDj6K4fytif>eV!h0yssv|+|SuCMJaVB6rlwY(O{a& zXH0JpM{WeB;N%^_Q?3XDQKDv_X$!c^E5mGNi6p5r2}XK+7svPCm|GE`P*N4Y{b$e1 zsJHn%3uF@z-Xh9Ir$NWrmZ*$yLBM`=r4IUawMV_pTA0--(C_BOLap{;ZyY1xp zsrs!VkmhB!+E81RzdinqE4k~{Ln#Ewt#cdrtfiu9gw9`}u?an8!{CocE(a)a>~OdD zAAvCR?5{|x<{wcqn9VJ5DQyKc2L?qLv>r4HtgHK}+ zwhi2R$+w2L7`IuYlSQ&--rQU-maFY(Hk%>TQ533->a0w-;957Ot7P-J7E<9AWULf;5VKotB*&0NG{Dl} zd3mo~J&vTbupqq@K{VA&pA8nPmG0aA92_wwVN_{E;2#B)x%SFp1g;vVapGlO*|y$# z7TDy{pOeg{ak3PuFia!P$>B-gF3-y{mkG3R%M&EfC`=WPnCw*%_dJ3N$~{fwl&h5b zWIcIq_9x(xmW#rs^s?;lxI^8c4RzjfSQXEGPeYgH7itX5J=TT3n4KvUE|XCNN(y9|w?Mo@MiBFn4%zwe$hMx>&12x!klf-s(_v za>9;ctp{PY*K$FI#nbErHso%{c}vRoQ*-aK&bmHb5%ev5#C=o8c=yChBOc>av{pyV zN!YyivcM*3v(9loVpdwbsiF%mQV3Tb_{E`Urm{#!|Cq^_7^wJO_R+y+$^T_k+zsw> z@^5RcM|QJgk)~jQ;Y{Cs`?2`1K)xE_Cp7PZH};gG-|9=_+(sevTd~&cLwo(pk86PT zU9JRAQoz)k{R|pQZaaF*x*U(eO>VNb)NY1cnY6%+LwH6pjqhlkskq?z&fs=Hn67{| z{rnVaxTRL6uhnFCuO~nu{Yz7m%m^j3lHl7PsF2K4RCXD7d1zN(S7t%~pr0Rj&o69> z(V5AcUkvHgYec=Tvf2$Ihmv(XlyI zd9T-*mp*G*$&ri9t5dEShHG?}MC8lvsLVp*Sx&iCi*D2Ed3=W0eSQE8ERM^&bH{b; zg|_PD&SXx@J0B^gU&3`4os00L#7mr5X1=6&G(up*6}ve-I#R>Az}zbYto`of76^P^L_9Vg;Aqi~!@*%jFX6=W|^qX~G*juYJ+ zWNIKB8b}-(R1c?FO2Pat6a&@LcnMYCngi@Ny_byF)AEo;r9J+uwo~CQ<@?0+GbdXB zyb^dDtf{np*r<~+ITnK@TWX}R$~2xANTj69z(zwTed)E^O(%eK&2Lah17&>C0(epP z&Zgy+k(70QXc`VBd&l{Dl}8Q!HX za=c9P4WIFx7MF=YX?8j?Uj3BYYsv(L0QeZ_MT}>K7vm5rFc5KismI0 z6i+35&zDXcOSEJ8Wrr_gBnJldjP{lwq9IP!JzL7$xrpF3gS3h4-f|!3t)GE`+CKbw z(PWQpp?B3b*)#I;9^OmLj0fBA(tJypo)GT_xil$C-o|7%;R*@g8Lm3wIvi$boumx< z3~D=)*7zqKaMfEDLc7qI>d~*z ze30Eu1gBn1Jl_!$Fp^`;9CS$YO)?s(5%%<3(n(8YuZGfm7|T+NE8{a*S~)@`GMxm5 zr8!$(WX#``^1DP7Iyz;r@5~?S_Sz#Y>VIA@juYnN$dWO;Jk4`iz%EjSs|VRrw`Q`a zw!|jq)!eS{uu(V-kS)IcB(Sz_w4(_yD^!2oZxcGtmuS?c(iJdnGIf=$IQKi1oVXE* z;oW<)9y_DHvB06^2vxTCf|slLXp7(*ldlEpZ?xUB1$?^HSC`oKYxjV@VVwEu->qk0v+SZ$BL5H>M z1;n0K(%q6xACm_9r2MUG%?K$Uq;4nW$@uE8XC@YB1 zAD_P@YccJZyKb_Vmw(~h)NH9)QAC7r&y)MyZ_QK*yL;;7I*fT$ zOZUugfNFD+awJ`;lt25hi}8*XF6+lYZzmXXv^8^n+nU8eiAWtzRFiojc$9ut30B_!3FUu&__f+$j@oD0kP}{=;SvrN~q2*@k852GG~I@Ar!>6Jo6IKj zuHxR2=8is749)buhciH^IwlK$qb5OO2dScXG8F zc1^`b*_%{=oMYKGQk4GKWoBk^#rExFvhky_2g-(X|GsmMI=-PsaoXgeIW7On@$}d8 z#8`|Z&fDv=QMiEb5zD4&0nqeX1=j+vPL&|a zD)FJgqEOW?)&ZWOI7~D=574X=F)ST2aVq%7t5Y zepxzOSbQmw^k=_`j1dUQ3db^FS*)iuQ^nWJQ@)iS=#2_ts-GX|qkL zP~So8=9zh!pDYT`x+3yaeRS+~+eaGy%ac8fj6hf7)>r2Wp9Mw|eq%m6XeuQG7=O(c z|32nyldiAQELn>u-b0&+hsXIohL)Z_{)1;XLm!g1zCaU``eHggMQV(m&UXw0Q&uXP z9@p9{d{eS4X80F9^%P?-Z85iiJ#YU>1ZMUcVT4-jsK_2uP!cU-Kfp}9wdQk(pR7BDDxf|2?LdmZj*O6^W7f=Q zd^o5GyH}Kv!K1XC)*OiUY^r^`o=%&>D?kqG4+twqEPjJF{r7u^}WS<$UzhDaRezFeD`bMjNy-ssgO-lrrhcWLAOG;vh!E_MC{+Zay!;- z@CXd8JQEwl_sL$piIYD&jPHDz5$kNC!WPI&;@x$O;gj7bet6_JZa>MHn9IwRXX4RH ze`IC+JWmIY%JXe!Y2aX?PxksOvC(pOno<5?SuI)kJK%UucdroOE&v)Uc z`!~X8L$w69oL{S@74sI~t1zN0F152^uWHRHfhBbyg&3=7(rJjckxxb;)IajMM;nPR z_w!5_e0(|o4v<;x@8frf)=Q#L^nKIP#%my3bRLVk&Fzj*>)km}_~Kl>^})upWuMD! zoE-1jOG6_iB+lN)A2-U$OqxjudB18N9|rNDcQC)VCSy6z?ioGdw3exqt)Y_)FPcS* zxuNZM@8d)sU)~Jz6dV*-<09zCfd7lKw+d@(Yuj*F4QVM9XmNL^xI=M*yGwC`yGtn) z2<|S$i%W1zf#3v+J3&KnciUO(+y6e_@7X-aHIvLS$9VO*DQ*Ty5Yv9q9W`B0u!?Y> z2Cc!_`FAjX&-YY|tc)j1z&Z}s-x*It^jBYKzzaiOkls~1d_Lzm z$?2$8=;VyEdF5T0M+pF&H%NVWbGCoWAmUD+AJ)cZDMfv_SlS8S-KItOUbNWQco-IbYR;R-4|U(^^np&{4V zlaJ~uBowO^K!P>59#z^nY**g*Y(aiBb=9|90zF z?LteJw3SX#ZBIJ#K$w({EVBf(@oZIG>(`ykGh!ZQ!RBp?8It!My6pad5L{QayX6tp z@wW}1{beddi5IK@-2`<>GcjF7ckHmT1z!wm6t95_BbVXizfz?f^eq-jGz$%pT|V%w zk>(NAf&u;x6s)iAkK;E*sv?mM@L-k9_l44-;H3d16-D4c_DX<{qu_VA|M?`}$0Nbi z?vU`$O)ivggN$-ih-=mhE^$!tJWIFf^UfB|O-}6M5~5cEUzwP{Hl;7&Dx9=Vu9(cy zUXkIl{lewT!>Tl~VXQb$^5xgrwO$-jM6e8<$B)fy_InkTA#ygj%HRJ{A0Y2ZKV-J<^@AQF09Az&dxBF{z{nP?85NC&~BQ|QmCWmE9#JNb{5KnK0pygXGD~}Sj z%e!P&MwbuX8J$u06Q?8JKlR2b>Zzn58+Jo$cl`sB7gg$J5gKzY^ znv`2ynn;0Yx)sHnH zG>=qVt4yKS^nTt!3z!{WoAYE6B;Tn2Dg(~~f1)GSl)OXyX*^TSLn&GQ_4?GVVI@u; z-oZe*MK}h-==`#1SDH=JS5HUt9=_Y#i@&Y@*B)QHK73*s%GE;OxK0*-R3N&`K3;foqX^+3_S+KrHr zg+6YrjFCC~Xyrgm@O=#t$iO_#mCeho=dYrdma4vn7{~;3`&2yMp+Ul7nTT+1 zaatByrf2U&xiI}pNL+G*>=l1(t`%C$J6U;TOsHTCNzMJ3ff&XqCL85NokernNafjx zx;Fm3W;}aB6DO*ljkzDtnu`5<+kJbyp(Z@ zibp(~?^6zQr{G}wBLOc&j@N3&?Rcx(*oP*&4`K*ASj45Z)K&3%tssp9K7Cj~&)N%8 zLT|$Zyix!R{%f}$+;^YPjy4VJcFnd<25kga}4L8S|cZ6Rtum?yes z2~wjdwD*g-1iBZ;s(^YwkxIh`fI-pzVdUa^0x*}n<_9UefWE=In@m?2p4|CTf5_mb zu0vBYX`i~r$m0CH6^+L^PrZ`iiZFP<&iw{;8`sJw>bkmwr{l;K2SmNGglrX|jwieA zeCVu6gSAY2lrC6u?}AFy?S5)+=nO-Ir0Hx?mI9stwCTpZC$2%M%MpE09%Y+?)|Z7m6WQWcB|ql>AlW}(f8PFi z&w_=Agj5YaCXh>U=Y5>O0G1^}c)m3%nUr)6AOYXzjySs_@yG9vFbq60_r0R5?3jQh zZZ}RufGYf~&BiMVQP7L*dCu@|X@!l(N20*p=V%*D3i}<3z`?oH1mbb|Ay;WIb;uO8 znAzaBs|%q->P%FKPAX=V6_`$2Dw|Fe3;a`DQa^Aa7RdJ`Fd=-mAK6ePkV&hykZCiv z!EYzXc)B13E!}=95O5JP2=^?UpAykUDr0z;NJ2~fNqj;cjWFD^Ta@>tp`~=03Tpz_ z{NWakNeRrEs2y2$Udu+FeD=xa*GkwhI@-)fe&JGbSl&a1sq6+?j2N`KyR%HK7I%ux zaKpb6iLSUTG5N6=eaVHJ^oT@?rayXP;kW1Q-ZHm4tv30&e2rakINzQR&^?%i1`gAq zFik8=Ag9cmxk&2`iv*y}L7!JW-2bzudmnzO^UU`aLgp^HI!IY|&X_A%G-0 z^rQ??ua_Z0e1&5|oRU&C4!d3a%E~#i;nyE4Tn2|;cb-M9Ld&O>-Q|<1Wj3wjA~N3 zMAAyVSq)@f=^?fr-}G}$7YAw+w}Deg;dm*Gon;^%_M9tT#Y~Qhl0TVQ;A2?BO~E5M z4(y0WrjGwC*2cIBgeXCBu&nB6d(%3T49>y%A97KnmsLj?<$By*2#=fsWXF9_1yTtW zZUksEqo(}EYNXGd4z&wf`*se~%NMGo&fj2;A1R!dGJQVK9W&ZzB-KCLXg+T(s!!U5 z=C6~MUAvI>8-Kbnfk-SBKq-*S*D`x5$>Ge|18La?CnH{Z?E>`MzxFigV)DOj?6J+ z#l>&jw4>pBF%Nm^-`~CVn5P3lN?1gM#)tt=bHdN&$V}L^wR+8B@`JD7JIrtpw>s8K z<&wif_A_%BnR|N2_ieWU&hZMtZ3uDjT*pW#b3Q2~(Q!ObcIj$lp;F2XiX%+MEOEcO zKW~M{k?I`$NG-40Ec1@2A#XTQ`aE683)5g+3dd!WCXm_h1Tb;uPQ(j(Q$fd3V4%?z zbVl4(1Bo>8<>d2JDY1TfIlU_yDQY+FOf#Q%V-N*&VvraJHdwH9izn$y`2q2lSZV9D z*>6lNJ}<5Ps{771m8^S>a0e}6vM7CSV&@X4!I4wRKp)vkhJu=I1m=wqv+paqXB(d% z8+2NnDBiQb0v7l%_r6WZ_bJY2i5SF%$?8osF}^pc8X$1+L5e){l*>|MPi)o*fpEmL z7`r;yl7deyMGNGkhA`4=vp>0oaV&s8ed@{^+n{ci+rsNEEty&C|1l(B1O456Pb9X(ZHon07%X>W<5Tah zW-(PUykaQg+^PU9!OuUM({vmpvy$+R5Dd%vvPt;B>pd~AnjC20=*mc)@FxV)=rBtqkwOAzuo_`FRU-5sj|LUcjzCNyGK3fZHmi+bf#J_fHvX%bM=M>t^4~BSY1gj$tB4lygYKco8|LeRyQvTWMnTKtD>p{zj*V8}q+9dg0x_!!G8(Y0#ZldNZ?Ooi`kLIi4R;hZb zG>+O0osY@FXChB8RfN^Ts)^ZLR?Dxxs8KlzQAbYy)Y%_T{CpJ+ut!L3{qV*=X#)H(ZE z8G_^EJrXa;4o?|Ye+clAP}$Hb84v;S%I@7ZZFEnxj5Pv3cPKw$Wpb`3f>agoEZ$)I z2fkP_t{9A`E#)sy6(}m#*gr<%{14Kq-d7pcpEdJ_DyL-87x+??YqZQS zaw*t;>5MG|*I1Vsu;)4D~7l# z%l>OSK{4SH+%<_oMrD{dg_04`N;IMZ(n~YPS6(c5>WV`Io7CvYY+j~Muz3{9LdprL(AU^FzEOXRJ}O$#1ND$@7PSs;FR^eK9&evN2QdF&pQ=pOA#!jR0DPMU-i-qLiV4H^8`h=pb zLurT_xmgy&7|e8ZX*ed(1#Ziab&;c%HU+)r5qx^w*#1k_ZxwJ(u{oeJwDFY>j6nlG z6o}MZXqHoC%%Y1ZoBAr=i%r8Pm|)A0#)f2a#Ug^u2#oiXG`hn?A0_@)F>Ey0ZFNML zCUNAZ|3Nb=jviXHe*W#q8YkpwP^nIjUMCeUgOg_8Pji)-xUtpVooMn|JW)p1`(xci zVyW6TurK?gf??5gyC69>yGv4K0KLBb;5p0>p8v=3vj_M8BcPqX%E zcB6@5O2rAOSu(5eR^V!DA(Po8Q{X4^oq2}mND*6sh&Gv}SbYZ`R!^bipy!_}d-t{# zuGV)s+^oFeH#BqPX3YxDMTiBn zU%F;>6IsnQO|+zFxaey_`hS)q)*n=CqrCZ+UMHq_>HdAXJ4<3kiKhB7HWX8xD+Il( zHhuL?1((?^FqYo>VUOtlK1Z4p6#FbOk(~&}a+Uxad!PG9aj>@;kwZ6 zSit1OEwNc$qM27hLWWG{)gN2sj*6-+quq>2%)n373mFzxB^#<(3Hq*Nc(8Uljm4;5 zPkPT$?aO$(u_ zqHb>A-~#2bgGrS%YatCO8jH74;%ZWK`n5w)#l9SBfoy}|G=86rBL8ESG>Od!KGw~G+!e<%7Fa+@- zMYt65=ZMY~o~yEx0{hGqsm$~wiSPo%qoQPKM7ht(JWttbx@N*@6X;096?Et8etE_e zeBFPeDCS7BwEf5UaIh5}!||lmlMP-NckXh{TG{qhUFhw~9NB+MEe9@%4+|2I=cbRa zS?x|gmRGxvl5scii+2$6tS>RpE1$8EsOt_#SF4!@@7RaBKD(1ykrcUsz*+R0RyIQq zZp{%C@ovobNY*PlOoq++YBq#q8Is*N(yqGSsB%*|K_f$g@v4+9`#D$F*$TSe+#f~h zQPj1>SCXDj7I5#l#h;;Dq{4xcvoXDHWWQP;bGYPHYkqCo6k8@fK=+Ap+J#+*waebq zNn*#f$_C;uwB-4|=W(gu-5#7BKqtgl)>TF+Zh~xV=G8vhi2*ElZ|@#GPxXPor1BpwD(iy(KY@Wv6XiA<&V^)g0ZGIK#ThOrwF*feFjf)EkcuyJu~nY4s3zF8^M}u+~|@Au516zJh+t?Qu`f zA9=92s1 zLOBMHrsN!=eAyEUBN$H67!dIM3dt5@1HS%{Yu}S?+ebhwf3hG+aw#zSLg3i%i1S4q z@90@)3-M0tmY=G^`Ja5r>~?G=sl?>{CW_mDiDh9EVAuir`u7Q1s%1(z$9EUf5c%0s z0L;a{mY+k~WM^ZW*bp#u|__pU;?C^35cP&U`f@VaOp;bbW@HKtTzOUH}6E8Q>G zFunvme8x$<#96-I=6^oe!mxVEJY%MtrRM%~sp+@xY{#(L5&MHV+wAul%B zia(?sj)bw1ar@jc>o+hB6^6C7C<*pxQALOerW4hO41inhkm-I#vG=J`&UBnH?%|8Z z`cie9f>}bJws+Fps?{EZhr=DZ)f1XNMDNH>ZH3Hv8w*_vs)$a3GIXdx-94~QT!NF< zU~4j%k&ymk%#&yafkW`Y(dDZYlh!1wR@3{1j|_rxP=95@XMu?Wb+1NNx`XO0`-78D zIhowW<3}_s21{xU^6cet%PJPy<*6l4;5+!6cBo~;Lpvz&%@SwJ&K*3`s^XP`E6HxV z(1b@1j_|B(LT>qyCTe|G05wV@>F&Cx+tE9B za<}|#QHIt!szOi7?Q@ohXm6p5q_3mG@3t;<@>F}3-52ekK~ErXuizG0T$Tc(EopKMouMI$`uh-r>5P+A*1BiL=J$Ft^cuuR+4h`>xX|qQld_l=k?x8wOp0l=EGRbpKm^7{ac2QGsA{5vRFS-t+P+QtyN12r zzcf5Y)0#PhZrQZS-cpDMeLivOe51WKs9gN9I}-O{Yp^FZF`Db?W4jK^ zS9`elS?AHk-}NDi8n)4uro30yjvIVU1U%tY=4b0rp@M}{awU<@8`pUbBkuiwy`l$7 zcO;`di9XYdtN5Y$BcE`u9eI#^zKYoTikHxaz!JX0WvF3RH!gem=;+-Z)zw<5sNaG&i@t>TUE~&ny1(C4%Y^D;tf2H!9M^K@ z?W>Txrjpfch1ZJAvOl^j2wQc!l5&{}^cMfDjx`+cg(hx}?G@<#7yM!6Mgi_z>qfS&IO5Tr5%Qmm8_|U06sb+Fm6U7O25bf;ZhEcN`rOxC7J}M zx{JURAi8Dj%2OrM#(1ROO+56FM5@dmMp(DY@T_$LF{F644)s@&7oH5;Ee(+_ zvQ9jzwY%J^)sr67ua(c#HfL$ZdyvTR!Vtc82oT1yO8DB4$d<{wy&>4-8JOme@`@JK z7fiVpR|UM{Dp^l_U@0LWnWLLHs?g@PuZ{0*`JADY9!(cbXY~2`@n)c4A(M&26G%@l z^YrC@ru(2XL&ho-Ds{m6vNW}1Vr{|OF>c25PJ_63O(;9CH(a%LN?x6}{oE&9&%5#h zKfj9XH8+m%HGUfgk^Bgc+9E>W{{o07y?+;%8~FqYYr(>mN`zICex6G(^}9v2l@pw! zeX|p{U;3cm-d0RJxs}m79lhCoGNXMd7!O-6!+zCYR~whFdxsJdGG&?u|GqO2DYNv> zcN>JmqAL#?T_e{Z0-s7zXt$OOMEPEh_o?+HaNHRyb4tfl6Wx z!hz!SzTkFMXABepG8w4-u5zYOxEn3D(UXc3ytzhU+e9RJuQvc1bG8NAdQo~jp*&De z*!N{*DEf6kqMmj?}2pQ|wEmaH-4Z=(D@X@A;*%_ei{m&3le2*jS;I0iXv6 zaD_6xSplwik=t&odZuFGim}G}RSb>3AN$SrT@N4jKc|A_Utg?lCj!w>g~6&B*)Miw z-h@oaB)2!+!LaiPNzBxee5d`2*$Qj;BR&hrjVsdZP3rS{Fv3*ebEWEyblhbIAz@nk zs?ELHO?T2sicBS;%!c!SzNcC;t39<7aXU_alX*|f>A(4Dj8^b7%JEn08rS5TGx{!e zqb#dEe+@oc<@xam$t8hiU$n-3o}VsJv(wDRAUX$G&O3j81lK#lrDjqdV(xsG0KPr^ zGN~+S)CDqA%EK$(d0V%nsO*K$!C_$~qoRepe68KBDI&js-r4N(Geu^-R@@HD@%=F? zHv6IxZ|+~Vq*4`#uG5tf?loS{ut<`Lo|gHBbC>z0qjqlF9eAs zB>$bdxj0t5*KcH;{Y4i;oU)ciw3*R_AnNADUWL?2|CbHex&ALq`4q(i2n}Jc5WeHg zKgRLwF9H&WEVsT(r54rTdOXSf9L52Y0kc76D)p*{+!L(gx{2yDUucb}BBE4o56&l( ztLM`!yR{1rY z|9CL8L4jXat;nfiDUm<`+PtAzyv%_8{$w4YmzI{j6_vvXSRE`6N9#i8aEd@H#q6BN`E#=%#SO3r^#uRYUAeOfYQV49G8ohl& zRu3%QDdI7ki~W044PpQE#7Wd3-_vu7%TUCfJ3K(v<$j|f>l-Z7&7 zMLKbW_lxOp3CNHvvPU$sl7|F~q#k$f1ZFw0?df|w!K65+ z zN%w~5;|aJ?sU5nC_t$1>QH}1v3U#W+DMZcT-TA>2{hw9&&5s840I!8QJIlvQ53l9` ztt%miXYs>H`zBMb;si>a_USCSX=_Lu0xrG1?p(ZsNH{}&r8x6`mOzgZYx(ekJvDzT zbtiupP|ogTcm(_z7Px2+pk-x_stn>%9$hp@O*Yai8oDvnXoBywiRCQSrR8__^Es3>myEvKU?O zvd;l0R{60z^DLBkEIyz8Q{(XyncA9kHL;^lH|O|4YJFarVxJ^j10V}}+J_|9jB?t9 zx>_Fl&a&zcP{A2kWoGvK8|n=dbshKw+JW?_UfCP21xCc0PlaYO^!S%y(H5W>I}#J0 zkMNK=kQ{hrr>%XcV(P<#=h6D_{zAj(X47Q1MLVo#20R{{zONk~*)d!?^^a?o)x^&! zx}(4}PwNk9*LiDeAu@6A=tJgT@>~7xcbg{Yb=?1rM zv|6Fh<%gxOUCm~+G09sLzc?7AvWwQ#du)*I`BD&ZtH)=y)m@Buz5(DS1L`&q0jp~<3-s2I}O zUDmk7zZDS640tXJz_jPgPaX>Kb@&T6Oy5WD5Ix_iXQW3jds*x()^6YCIGea)Um9=S zn>^PPG_l2|pfm;}wK0E6uas3rC_)eT60FFR2deHlo1m6J(nH8>iz`tD2S?b+ez#OV zZIVTbUNvJxk=rKlL|H)JyV}anKeZ|4G;itKO!TT85vr~#_;Vh?D#GRZlOdWCl+vY? zcXV(e*abN$$RIg2`IwHITl`)%=VR|gcX+#w2-8pi`Kq$HH(+y``1zKTY3 z&}rgJ8qvz1*da~FNml-jkK<)UjzJaJVmh@Sj1rdR8j|F#l z=q!uv4a+Cx5M;e?_cUH`c!*g!eJ)?YlAtKSo!(+Xt`O{Zo}!- zD|L|P%OE^VY^COixB8#~a~=X-WR#*uMRV+Tm?u5<{)2`q%lZq>F(_TaFR6=wnny3S zI$(E-N7UxI(8Q7Ct8tNMVHE-le`7le$xc#EJ>~A*23J#%kcd37_u1}_Hv;hLmKn=* z?Ft+UH^ygTL1KWj2p>!Z7I|`e zBL6C~lt|$e(Ei;_l6yib`LPC|ZDo$T3yPZLQrbQ6n~wgrOyN%u-Y9sA77mOfnK&30 z{oO-XRrb|8!)c^bW~6aFJ93bsm+e)u((490dhwMJf6$o?>r2!@0b*=<41DkJ+sEfO2WPXp&f2xMjO z@bMbVTr0-^w$P{i^cE`1lvDGXp~ZXFY=6eyOUwDtQ^WeRce8I-bSz5*qz9qS6cT z4UytDs1s14q0cr09yT)=g3)S{ZKaoX1i>3tAF(-~ejMdOANt29JSDm5sV4!=aQ2)a zOxkQ*3#0-yfMVC=h&aWjtEW|o8fbbG9BlB4-(2xN=mTsrFb7B@gHl_(o#dWV8_}B9 zed%4 zgO?J%-y&F=?3c#BuM9!^R;eZ$KrWy5){IU0x!A*M`w!8574?Q*1~uBA1l~Sm%r~|_ zYcJt-yiF-}ctmH38oNu9cB@XUwKtbqw{`c(gDs}Bus(`urHe@+T@}injnV!+2ufat z2jj92F?ca@jfD4`XM4;dTd-|uhtU2^y^Fv$e6(^oGoBh2E7>lyva7XUTF(tBDYe`( zrjV6kD%%LE82!RC@sJRKpp)kgnaND`Qxjy%=w{B+)c0&G_BbN+uqYLB(ckXqixe?> z8hbPp;+!6Hux;F8l^7d?uBb+f6Nj`EDav^bLMhm>b_Z#(8d-Xf&?iqX6jzHp%+th*LNLOh#Qt1_NS7J!4SvEO21#m0-R45Q$&oyHzc{uNX|G|JO$H%kmGL*M6 zRtP>3dysuuV|8mL6UMLhaFusE^h60Y!zD=%xc}_?;Jl~ub{gd}dz;IvTEk_1c=S9o z^1OGn$~YVk?qRN7ebb;v%728O%fi{nGt6W)?JC(0O_&azu1PHsnS<|^ovkd(k0?{~ z@Zrr=XI*gvsCS}0Ew=j#i1=rqSF7LBy#HC+eq(R)Cs_T}m>U<1p2Pst+)jT%1R?_| zCwtgk`I!dAEpC}#EhK$UvdRS~25h8KcO6wlv5?nDZBchH8g?I8 zeVrJBKY0p5=4{Gl;j8A&Mw2VUYgogR%2MaU1i<^|SGtV~yW_>N*@=Hwq+#yE*W44! zn@Do8_S5LJt!&kyrjLySjZ;i%WYBID30s{ov(_Dbqd_65-=0xGqF_BVj*5z91MEH) zVRIC@^bYd*P7xu*ls7v}d0S4(3@&zR&`o~a8>BN@`KoHS-p8&lR{fCX zWufpEvS%_axFkf2xxN^ymT5zl%$%t)gZOd{1&rlS)|I4hWxp%6NTBQ)r@O3quxl(u z+{~2)3aH)62`l8+Yd$;ajK3~gZTHlP<#yvf^)r|pwxfL1k*_Ts@@RdM!#1g)^(!}8 z6{x3G$-=wd-IZU4lk$~K((gcHjQWWNYWnk8So6^eLhzo}jMp0U?Xwe>tTc0m zL$Agt9c1oaRRAXEX7P6}cgm9m!g-JQX+)2A$B%E8%+P7+*mC8t^MK{+o4tuLE5KXv zpxLNA9Gn_wW|q{Sx}ZFa(rn03f7AQZ%DE80lT43i^UuaPoUlstIWyYQO2~26#Zs5r ze!=ls%*|7*(-s$FlGetvBRGLKemyd!sgp;CTgA#!;z+<_nJcjT?y=J|1Kee7Fn*{y z?zrs1fXkV*MeY>VWq^m(>|@_lFs07r1&{=kg#ni&b8~b3H}ebrwX0-W%0(h zB&a-nh3B{%vYW9bFwrP!&iQB$-Lu-HXFBi|fv6|WySQ-NkH_&8QS=v%kABh|I7L$sX z=LEW3g=DpzwtkKKvf7|xU777I29UHc2I9h3GGVPHF+f=4gbbaxB(Bg?>&>rtfx zkeUQ7cByBnfGjtA^k6@YXDGSRU|Ys30&Z^xBtF6HZ$H-!3VqaXxqgd_owel{5;5;@ zh4fyWP7(OMQ1X$0?=8N}VZVC81bn{yuTb8bZcMTsbg+@exD)WwK9F$GygsyE7+jCO zBBGfawL~ONy%w^hXxZ*PBK6a2Sjr=q8Ty49c@znP(3clBMW_o6*E5$DT4 zer-<|PUoWqEBgIY+RSRY_$?TNTqN;_we|$W-AGv8-Q22HKbJB@-4-o)fbX-cnRN?V z=8F*Ry7hRm?*0lAJxER&(#{ z-rBIeK8ZpT8^$u5=H1+6V7CK*vIOgJ9%^qK)$S;uznsK`!8P1{-dj@-kE36~#uU%b^<*hJC7#_Er zTOCQ40-Pd)X27JJ!G9X0C;}_!rp`c^EbZ6;=dcJ?gAZy?%r>g6d{NCg^b&Lf0`2Ph ztv=o_WU-DnymiC2@&gml2H<{Jeu%?0!;Tm!M!U>iI=-45)5{}fn#`9cOKmYm%$Ux+ z#s~HAwTrtP662;|+yPz=+by)ynGbX|^Fz7+fYIK}91B=ZevmZ$wr3K?p?m6Y_ZP&rizeLLKn! zj)zGEfs+<{WcqNnx%`>_!$y0q!xReea8lvG1mT8p9I~%BT}MPq<`b?CX(+gzem^Qk zQa;027Hl{VeyA2S8jnq)T`5e~fB6Tk2W#|e z!^PYyR38w;Yx%Uf$WCMFY{Wv8SpjNt#wpWuELqHSeu^8M#nQtw!?xMb_JRVpn){{h z;cV)Y2TDDQxTwl<-&*XeljK0A->zv+>V141bFH;zA2nomZmfDLZ|$|Z^cXK)*9fek zeEQG7Zu_wy)PCu;%W1^ubQZ~!rwDY+al+AG*pnqiq9s-Huyun;NQ4d9ot|YI4-qsw zNmh@+!Ep;oXwnOckQB#rU~Q7#VCW^xZyb^C)odrpoMO|FYmZhxoTTC~r9@<6$s&e) zb_-EJCe}{#&@u49Jm+$ZiLq~9!H){npe=tH$94%_`+DBiwyEO^;b~X{>uA~?G3D(A zc}uodI~$H!Yj<5=ppBKr#ty|I!nz?<{xxUxs`=LVVz$QHn|#LvZ|*O} zS(y&W5MGf}T>?eLssCd_d{f)b7WPO4|n3OYU*V#oOC+vABG1le_8;CQ_4^ zL+H$Z@0RBpDkqY8Lj=|Le&Bl>+27P})1Ztl^^|n=`P6&~%uV8i-1yMS$8HGku`F{-?_ zEX+!PYs9$*NXE%xPLriqcN zz~0}sWI580Vb2ZB;5&zmork$jAGW7kK4oPX4}ZDLUrIktQ%+S7G}|)LLhfjE#AQR zM0+fHFI>~{@ZvVluIF2)PD`W_bW;XTlR>#A248^SkjjXz)u+HG6>1ix!aNaxpkV4W zh`**$&b{xTDwZ*#VbMdGvqux*kI{?C-KgR_Kfhy+GiT7usqs6Y98Q;@6J_zVQ+(gs zKJ9+5cjhSFEIn}2Y`ivHubmvU>0s=$1r)t0`}pbZDnB)!L4^L$IuAV?FozCb2r2m? zw$9Uw9K@WlP9~qt+ZzvvlU;gKsiKUHU5D&Bmut80jK2gaN9QjQ8gCnQ`J4lD1CI1o zpVl<=Ya%z=jOb>Qq`Ad(q+dHwy+ChYpn8;C*b&>9VVfdEVp|0p52a+Cu;VxhmNdAK z3M?rpj}_(&eBn8i6X_Cj^<7S%-fsH=hHr`3g@J2@i99YQIK4_4!j`V7MwvF%Y(6x& zv{b%se0+N%S}E)J79^Zy_dp$fhzG&@_dj+U5rX(&Cs)(UfA$n0^T2~IM4Hc_nxcTN zr$vQi;?0pWLe4>67AV)a=s<;v9C4LkSg--LbIDS1>;^!TD;xkD(fC`2UwjA|dKdPV zo3QIgC)IaNzlI21`JI;osfs^ma7p#5rQF&S`dPV7O}i>9wO@`eEa_3d6o8rH=Wncy zo{axp>5buCnriFUI#0AWqEj&!-L^rtD@s<3+%tz z!kc2?r}|unocak2IiFQDBK0l@g@pyqCO5kzZ@5SEIP89qq|PL578&zNiHy$#GAnfPPQLVEKq<=xiiwvKU%=k3eO66M0@ z_}~VAPV(_V{_`!|xP%&Au3<${YBTQGWH6WzUc{2OHM<)XCeKaWiJEudO*ogjc6yW6 zVEZR=Hel(j5PD-5N5rt~$ZLE)TUV{4_O{~^WjqRE@=#7ErgSp*;DBqIo%jKuSu18e zp1ZwhtD+y1-oyTmEr~KfXKc$56c`>2kWt@2aCMk@wM`pE*2pa-UpQZRIYDccbED6^ zfDmUUcnj28oE|Yz_4nLA@mcy5rs1zIe-}lXmSKFTrSE>AQWHYR>7tW_bsBRlXXReg zSNI8k9rsh*#9rL^Lv_RL1^TN0qgJlZ8Al{9$?s5bVyOo+HRO))I*<4dP!Vgm^Nz_$ zp*5FvA`HdNDc)Y^2`{Ur#>_|zm=?DROe0UN6wjiaSdIY4ueS|N(24-hCJH+)`|X79 zr>Bw~;klwCsgswD_&x*iakA&zn?rH(XIA4Yh8Ri|T$f`j?olhDx5N6gR~3D8<6Q;C zrycnpwU%IJz>^nNGv2Z49@1z|G5x>}`T1!Xf3;RIM{ocL<_RFGqshr0`zup?dsBw* zP5o@paU*A`uejVNUaHW(`SeVg?J@D7`qQeIx88iV&KdfZNizeMK?D3r6^Ny>H@-G} znc?3z%<52!wl-P)f;&Zg?j(@jx4KoXrgI)qS2X|QX;=5;)S$+v|1TXW8gz&}%s=$3p`4fDjz6F>AO&OGr`{)He z(!Uqwk$~>#`$C?m$#Qh+wT5#@I*XAd7HEuy}98^Y;q zp^U4?_Ktg7LQx{m=$6-@?#+pnkh7q)O<#O= zOKk9)ynN3U(`b=b{Vksz$0}qNz8`D+oc;$99{EddX<#(ZZsMx+#b{En=#YH~b#FS4 zm!L-}X>UulK%Qr&5|8I5wg%&kPuC*JRXF|HSr)VVpwef3^I4&t z^R1aR(SYvCOb+5r7RL}=LgETA+x(aiIUXcmHbiCP2zp_-35^_U@P7ajjkWZ5JJ%W- zkH?akoP_41dC-$~^YMV>AVc1R|L6|5y&HM8m1$5aAXM`DP2N-JhC^DdmK0b3NE&eV zEH~h2H&5oAGT-RnT?WIUJ4UA%F{Ki}d$a)V0I6&`2d<0y-lY)ic%|$*bQOdfX!stE z(-_l%NcN%zzP<3@@-Rf4ke;C}ZG%#FP z){wfOCJ;U9{^l^p(Vt86)#|;mKOH&y3|Vi)BcP}s4y`YK56Am8j&)=w9b3`uFGLNg zlpE+z(j#NVwMj}C4amjF63jv{_cpeNX-DbLU)oI^B)ciIpqtL~HRsQSdSJ|dVn+5p zu~bC%iC+*cr+J~?A}c*ph3T_bexgh>-zKN3u?g65qa-Euwq_!Z>5b_o>(itgi^lJo z+7;hw`5#-0Z>!vH-5w9Zk10&+0M1q)U)fD>EL?XM{XguTWm_9<+ph24ZK1SC32vph zTX1i22~wbFf#U9v;FPww6%9_&;1qW#4uOOc+>2{)*Olja-?e_l%C~&Uwq=sJX68DN zW8X~^-1HphmRbQZCb!>7_Y#^Yp|QtTbl)vlP< zXIB%IPru2g3@b2gfISCzyHi%2k`&%1-S0;rUI!2|pq)8nrSB=?NXP3p6xo34Rw{44 z!8nWVQ_51;bb0?)Y6U$fn7xii1$o#rezTA4T&CiD z5F+GBoKH$THCQqEr-$L1SBHFHP_j#@aBJZ?5dImbR27O`Tw1i<7ELL;kqmxadBnOh%T$d{$u$yl1#+3M)4qt{B--pH- zR&BIhai1$m8$N1g2uG<|YLxaiD&3H%MQJ_uXrZ{BP~2RWeU6rD%SEE-6FGV}mLi~= zr;Ev6HFT!widypL4Zeeb!cG;ozb4jYf1*BsnTY9llIBTw088I6Bn5Hy6p>6BS=A#@b{}q zeI@>UFFDT)F0mmAEecQ`(CfW9Q>z{E1CqU-*;BN zEuPoBXW!7LnCJ?|?UcCS&l=d@OvU|Wz`f&I7`(sz;p-cxbl~5DUT6R|QRKrrG_d_h z%w-^L_p7H1X`Oq%eQ*k>(~gN={(H>S=RmG>@hDqx{5sI=)5g%>O35qlNLq~I$@)%T zaO?f=7lc;2JB19wHIDj3FG<+t;^_~Mzplu#*Bf;gSrY0;IP6?bO;5ykK~O$B#N%i! z(f{;1h@}I@09CKJLH2mM7laM?J4$^vySxwP!0P_?@;!sJQ7h8yPEA6o$0G7RY2S#i zAyR#R?8Ue4kc6IScEvmA_~Iq#?c<+qT1rmf>v?te>p=ngkDr1^H(n4v0X74d8Ha-C z>pSd}b8!5Qq3`L{#4aXg`n;1X-kk%oM{pWG{9;W)b+8HEIR;97)=wkCSqaVU~^J{zOqV{50A19l$Z11!DN8RS2fg%9-^ej z%oe~G^EE>%!!ZzwLSO|M&dg*+4z9-0)E@0oVEiia{fR{f+tssBm9?EtwXdxF)E+aO zhEvAB?><8LR_HND@aagUNr)J&VD4=;D}7-FL!NgAw0CH{p8OE{?x*2)=Dy<0g;dhr zg;B@DrsR_U360dlFD45fBc+iGE495A0pCXMr|Jd~wW=1?Xq!t%La7`tvzQ?IJhB4W zj(&vfw~}N14`QIR6@8h1-rt6OxX7OZEe3|Xp6u5uq`^`zLd-MSq1>gY+~qx%?+TB$ zYtqpxxxIdn)iS-M%{|gneP3hLN5ypD3GQtXF2L;uuT$XW>k0Z6=#KD_LCnt80z?{l z+bx3ZNz=MZJSqM*Bbm=n1J(%lqY{PK&8_sC#dPi~rOV_M(~Vc79L4p7Vn17M2-jin z-l3tQ0-GjdZL&m&^M_zt{7ux&`zDHxyq%={{Wu*de3pk*#$BnKCtiM4^8FtNc@vV` z5=?URip&s0`H?$pFOlOn8aU)(HANb>R*}4acNQz%F&daNiIH_b|6hxdk_%2W zv$NU#tm-qT!+|g>n_tH=z?FfN+I$i&BmD?>XD5UX~@|DXWQ&d+H6G*$VkB8FD`;l|Sq)S@?@|7O=TUpW|C$?OWxP z5_lD;yq%fmZ}5@c4Ukst$KP3N?%oalM!sPGFE&vD+LTglkM`B^)HI5PdXS1{lCYcW z@!E4x?<*!9?XI&B%MVcftFs{Op8>grsViLIq)po{??0{Yo^X-~*&(YC z0a|{kDYsD?0^HphV=I^>@J+HIM~H(iNrO7|bCmU>zZ)8hn7a%<^Oc@&aPISSlb#c{ zRWB?`oN*mi&s44_#3tO*<8NHD(K#bW=(q&Q0G#F+wIqk*ofeTd*Wz+zINs4k>+`y1#G9-%!vMQBY*<)m3^=%4VZavuGat1 zlpKB2%>A)*XTaWW*av;GTl68i^iIr4xF6tZN2A&b-Q0jiqAY!$5!w$mhyhn!2fcUC z$27bJazaKH-IoZmg;Ppw^hbsY1}Z;WPP$zEJ|e!BevIv2_E$W<%w7+vf}fUdeE^iZ zkqbxL$o1s;>ojnxVP~x+VYErsEg*O|uW1IT46?kQHDJ1d?k-jDEGjM?PtbyCb0-|= z4BxstZ{Gj6{}Ov6YWOdMx)Z&fP@BW0Gg{tf8jV05wwpJhJj^v0T6LZa z!bkJ$-})FfC~A32XfdZ>11pC6VvlC zz|n@ZR=_(rm8!)&OM%hygn*tg7STVA9B;gK zwWrzzE9M1qKXtjd?$w6JM6jjXUijzZF8WoNx1L$3m-$vKno)RC{^{`M*$lBs_^eBy za$W6Wt}!Q}m$t%^5b<)k7Z~U3e=!4@*q;gAME7o{aM?}vL>+L9dhmZR;$#a;k{s=P z*_r?)KHeiZcE8d&`t4zNjU;nKw^E9=ZkC)wuJCUtsLg8c~sFy z4#UPhxjnnqSs%X8auDGv8(FGJE6{?Od%(zivT{|<&rd;eE@>Z;N3N70^1g4Vz@*Nn zfxahz2uCQ?)#9AEf3jH3K)F#ljC6ukH?q{qkoUcuhs=eWZoQ-WaNHtOwy~U%+&g&} z>*4ZT;W5FVig+6t9^hP)Nf)raH zBuDpWVBe_aZwy$_~_J~O*rTt$BcU@m4ru+r3RQcm|`fW z;0qU;l$gzaJvc#XtPgZzJq4HNDVu3rd|Le76dbUv<02wXWTgcS_#xUk(X1-q$6xQL zHkVA>s}+%9S*wL(#7xii;D+rxsi82CsvWDuW8IT`n1QvA;r zhkhZ>K>WLNC*VKhC!E zAFG0eZudZ9yyeH>JX4*5;L>s3W-l>wrc?h>i=>9-wL;VxbzQ__-mGy0W7;nDXW!;I zPge0S^6>_cJIV4_6{e;A#rz7+1xi$^Bopg$G-F|D(;c{lL7Zw;`G9-ytFZy$8lUgj z_kLczs&_$Lx)WCEzP$S9ETlV#Jj|?L!sMep@G&9cb=r=lzRU~p)|8#Bxv^FaT7)nI zGtcKOL8|_8SO2gJYs(7cnIx6!ddPd+eaSQ=12>$JExzveaZ}J#N=to;vg%MTV>jQ{ zG`y|RrWpGP$KNqe$~`M;-NPE>`m?fyjPXs`9n(9mRA;1_<~2TQc_ab6^L8j@o;yyt zb4)a+Zdgfu8F%%jGA-I}OFb_5>CV9{bZGd}T|(t7$2NkFHaS0_)~8L_Th|x(=fBDVVb?+bL_KR@%GOz9$4cTx zLPN=XF4rJFTUiiR&7c1~m-Y^8JSAI2_)n6%|HXR0unNB*#NY+hwl<(g$p$pD3ekkE z6xWLmbq9^#Hwc*lUrA9rB|LWgw)`2EQ|VkZrNe=t&Gj8W)e@bf+sgyRmPY=V@{ImD zz>qUN9I1!4V1NEj+Iy0BL_9@;P?@_!=Gb5xth9)ZXXS_Nwfz^-^F)!9`P5zF6z6I< zSQR26RdYZ89?7BAH6JITqD(YIX&)|^>|&$nSI%rpB|juruC*V3)W8u(165;eAUUYB zQ;aIZ02WTml+Lkg62KV6U`5JFqd|(1t(OQQmhCuW9^U88%4d46@8~yI+i-f=x4lF2 zS(Mya%g;@`8Akn)ehV6bJNmw zsPV+QbvI$s1>w2xb_ps;yGLxQ!=U$XM%I-19JfOiyu$eC+V`h zQS1sSRUjHKn5a@OyrTK+uH}hW+306TrK$^U8h6A~LMw4YKHK%T7#!f&r|ps2E}MZV zrU|}q%s{Qd)?^gfWV@;X`gw6WxefFolLDF-sJ4mgw27lEHN}S~E55N=6f@A=ef-y> zc1RSpZWtlX7Cmdbc{dZc&F4vee_#K+yR3mn!Sj+=N>$FItVrOom?^PJJUpR`D&JS6lBclapl8zo zr?)Iaw&ck(T3Y%0fygmsxzn+$y=Q1Dg`H7xe!ok>ZmZaomFRwQv5eT~fxj#IB%IVv zoyPX7!@bx$Cd>HO2RqtQYTzlZJZJ8dz+cZ66&!7#xR}A1`eIkH3x{$LFvW^c0bOZ1+_?9rt;e1a z7eb4oE8J+uTMKkZPqt0*0FE_^)ienm+9=@Jg7(hwLCp2|k`cA96oG}hZW54@pSm%k zoQ45k9i|ERJ7pww9S_tNvx#gM5E55Qp52QOM9w5E^3snp(=xiC!^v{$f5<6YX$4djV zg?>K22*zbmri1D0+>*3_40y~9<$R9JNcA34=w37Y^}DmS94o#^8-|%vI@ti4cV2Jv2UXo0*@+t7m}Tl(>v; zMIw+0elqq7t7E$C!?unLmKt}1DB<-0N zO>eT1*$y-GiAFF0f?^4z^}xL-JiRQ0Se_5{>{erDv#>;w6SG-_@TGafCfd*NRK!iQ zmm}Gn<+pzgtAn~lbWGGr&5jed%2;8o6Ip|D}yA6oQI@axTsxDx~)`q&6Kmi<1fL)stDUyL*(E~yb?pt z*Lz&0#ww5W=##mrV^I0AP*wxnQlHs*F5ZmU%!$7=(DpC-1ij;>R39AU9iX3m;mmK4 z@s_T53KI31pc5RkN9OF#q1?Y-ERV}NnYvrpU-L0NMK{Msv1n#bg<1I~m=G`W2t1b1 z6w?l$HA+zTrBwG|-Q-BLee1SdbjeI{e<;Ps2dx`_gk`8>%8q66!BZ)(Lml)KBR?Lz zx8iZ3n2}>;&rxC7QPQBlIy3Jl75?K7SH2kh8`#rI>m2Iuzv%O-j9avz5Bs%;=QC;P zS=>~DEj$JMZw}R(tupT`wTTKXE zn0%~})ekD;^<`p&^<=nl0R<0X4U9}$^0aBh+H@~!@DYeD$TeJ-4Wt(;bHLng(^Z_u)x)6MaTQt9*|Xy0;?emCj8%r#_r3ym3C zvDw|G-k&Na1vdUGm=c<3OT3bcrJv?s+(=g3DrT@UoF>&qwd_BKdwDqj>*xfp5@r*B z5ZT0#?l<@hnHkKt`=j8JaU-3e@G!eKQ?I3@Zi0iLR^~;@`*tU(r}F7Ys}r|#U6S($ z+hjdwgSs3#HOr+;wa$2cJJFK@ToY>weR%;6zB9kP>$-T6Wt`~keI!SHiu-$WL4GqD z{`85zw_g!;;_or}w^sRD<$EFD=gWmOb|-`50%^1(ZWQIHe;aIn-15z>4S1~Kka0+7Ww-7)*GkyYDD z+9WKeUqt{+54G2XyJ-0xOx?WZWutVYPy&x6nDl_MqNM;mIX^Vf={ z^;F#iL_8jX5~4N=5COd@=AH_-pmSd}v18m}EzVJ@50n+KlO;=0xJDKv}4 zqx%exo1ks`Zl=gh1hI+*!?PBVfHIsw25Rit?b=WtVr{ecU+jy2yIt9x^L1hDAUU=Io9eM zTdXb!Y>vF#*bN>_a%>Oo+3Fr@8xS^Nq$VFOrR&sm|0)e-=o22g6=}*NSXS|&3>Zrt zqPp}Dr$1a$BZ`);_h&4m$O}ef+|m{%Ah&^r`ZSp6J9i zPGmi`0yJjK(rS1_#X9okxlX(26|16eM^72Tntx=Ayb)impm~L#a9 z)qz9OUch%J`n+)*mfe1OG3iS#yy2uGM}$_}=|x7{WxoZnOMSFKnB`PPg^6h6o6+eg zRQV=j3QMG|x{3VdR^*>{`&OucMa0dZi+B~IQ55kfa)kx=-mQguTX_2}Xo&<8tZt%hxK>T!qoeauJ*U%u1|g1n$FMzw{*9k%jQg4T@RR zTWGzr(&Cl_?@2<85%aBNo+zG6(Zi>Z8`?VS)fjRgQV;Ik+1c8Q+6unapBCIQmOQG zhnN}L%C@RoMr@X*XHI)sGqS4#=h;kQesgu&B7?)p?6}JZ-k|qOK`heGJ1TxF20(}! zrm~984UgOxtv=nG5+m3EQ7ALR#5iD!LO@$6mvtxZ9qBliIhjyl7Xht>cgsJtBsbq9 z=}F;RJjz*BlBx8o{9`HMJ7)q#4eV;c{#Bw!>tapPoKjZ@xck98Gs^#1B$tE#3zvxiG zOb%7yIVu9I1*>xC7sadV0^*^N!HC4Qhy@j#^`jB+g#XrumrCM(x3C-H`#VKSXvM%_ z6l$s_?pNJ=r``6YFMN7ga&X46WbW?WU9kEYN7t}R!0&OMj=sjuqk%5kQn!W>|cNUQ7wMW9!M5+&udvV@Xo1iJv=x(~i?4Jzd z+q#4AIsgINoyU3BNOHvORvlGST7}jCw_+PE(un+Ij6i@*JiIyHAeD=ck(#3K$6TL} zYG3@s&h7K1zsc}LySl%5FG@275%w0)o>K+XpFdwif(f5l6>LUYha^Xzy}LlrC{O34 zSMRsH;M{pyYjNpjZv9j$`KDOY&5{EB2ogVL z`Y&V;&CTnSB67f?irhlhGBJydrn=deyF~Yq8qz@d;0Ibn-dZl~N_o(Nb&M^@6a!ULM)F z44~dd3upzP^ff0*-0SF#O1=g9pIVgzyXq;|hD3y3#)&cch&~zt75w4z8oEXIt36ln z>-7vp1Fgy5Ti3J$N3!CjNC_4%O8M3Jc--O-Ny4;|7N^JfD%)`@ z(LE3OS`H8F{7x>#9+#HLPX5EIR*l%sc4TTe&deZuN$`5NzOhbV*=G+Ya_YqLXwJJE z0EjU8loh$$#!QqVe09}xdHv2f(X@XM&Sh6C7CpmQ8!nk9(wx`iWyjF2qGNH=p!)24 z<|gWsu+-JNO6bMoX6>?On~tgVf(pGBv!kWLYNx|9w6y;-*&Q>`3=!*E+zUvAWK^_Y z(TrO8d8sNzPg&mc^;?%VP#S4ZD)>EfNCO_OcdH1ZG}bZ~l$wMgald{=Ia#<=c3vnQ zuiWGdz3L0$JamJ!-h~55{D785&*I`?()kR|iPFVO@HyI21zREi>le-M4T z%r0(k>bN{2JbNRagrt$&o^*Lpc9+mxc<{@zw9B0DjRrI~%8%zpomN%v*kig_re!8fc%UhG7P+c|ZBGcMNiU@jS% zB?ff6S61)04F4x3*#7u!zc08T;L+_Yrz2bKbnDll)@xzQU+NKfE4vp@qIagBToS6L zfww71YuEXlrHmT0x_AuQQ{XBMXaF`wM58}&;Ymm(4#^%&*Y5f*Vin4^I$?jh^>>8H z(J=7GI8Nztag5SekxnOuJ(lu578$vaxrKMFYcPKs(p;L~5hP`^ybe?Y7W>7pmUst6z~ej}Qh&Q+vZ`>?4G0;``|xJPmX>6R&P) z>}3v5@xU~ryP2MVJa_!o7A1J%}`y!RlUm|C^ zS+?U2H<~?|<6qk(wR!Ftd$m5RXvV&vrwrJBt7DZk_eCJ9&0q^h8emwvVx`+;rgEuh zMD!2ikt~taSa-F|IGUI>&&RH8XnSr>5Uf%=s)`pUv zs9pDSdZlc%$sd)}gAV4D;d3Du==Rj6^?%45XMtvQt17Qn;KAr}+WKf&It8bDFj(tt zV=Py`DNl(70f9sjsK;SQ4D5@rc`UT;&f@!ijkftV{qKcw1fdyJrIbImH+9^RN(xGY zeb;R6X*PY6$U&XSbU#${6qVD|Ta;X`o^VmqbSKg%Y0xw7wZ^iRJT^m?2YK8o)&3v6{RBEUy;isN~}xPIYw->8yQIZ zJ`ZzFi>MC&qDHz*Z7O4WthN*=WK;W z@&*M7pD>G#c}8K8xodWoB)9LzGQ;ckghTJzbu5XW8J5PqT5JE@W1wO~t~^UFqID!( zJ98NrqMp?{*o0C>WgyQsY;X{s>lbFLwK_WxhC7k*d|WPOC!49<;ohr}T*bHpfHuwX z5&7u0ogxmX-YiM#cRY?86kIdB_#65ZT(cehyk1!$k}YDQEW<#==LK5KGwJ5IK=sng z`!;O&jFZa4pZG~@D6jI(L4)iTul2NAi8i4R5G!+049bVn{g?&T_7Vd#)yBa^81Jtu z$50m#)4vH*7iu%T%ZdkUE{_58y~`YeK`bn$tLvc@(YA-Vg*$W?AbpNiW3@p}g;k9z z%gMT~v;8GW7LD8}ML&sw5$l67azG*8Y{l+1y|^+;LEQ_}R_98(?~P$*_JVR#XgT3&^mC z5|JK`+Cg>24RXUoez{Yl#o2?v$znO92{aFRuTe~D*ee4z)#mf>6h?&NI-yKcIs!fERMf8=sP`0Q~b=Yq;6HU8w1dw!MOgXz0#burHRS`%x-C1()~ zM*}%um*Y6788vA6&yrYVO5EM=pIK&~5Pq?sSP%>lYd>A0N&j^6+n2r_zK7Rgr`hhw z462l6vh#Fm5vpm&@J#;u3!21C<3m(EtlMK(XTFb}K~<{V!?Li1=1H=#XzSHF^{hMn zw`j+DS?Ekz_REGj*J63ox%l@fz9i%KC%+cjPcZ?FdgDNMa4x)_Up(;)1ob??wCw99 zxy>l%HVHaO)8PjbAS;a)3_od%bt|*R$ZOjGZtjG3P*1mK16^dfTNfslz*n`vrH6~l z!X;_u(1!d^OO?t(`;`LK>^7IcGF`0t%@1g4uS>dSnE3jsfU8Z<&6=`PN8Gt6qDiePB_1$Dq#CqfV`$cYu8{ zvrq$|m$D!>83=CEhOsXl#`XubG5n+k$nFXnG)_;Hgk%T{d$v)yFD>F~XiamCN`7V2bE;OWAKFk$RU<8;w}dP9HC1TmD~ILc8r7`X zLiGc%#YNRz!=jfB_PfbY&@ODVbZG-dHi@8ChMy|3H!{hUx}lj@x>6$}P4mL`WI~9!g_+@@@pz1SiLraKWumqI%hgf} zvD#)yHLhU|ltKze%jt5Wg_M8SOeMqkyLVC6k2TvyQ6Lnl#pF zHmT3>6Dl7TXIyeVd|+dho(C`tiHL><(t~VhRqrZXCh*hQ)e!h44#)8g7C##@3U>$G z@5{6FMv0VW-8(WpEH|BUDp!r+?8~j%+=WC32O2ujcWYofK!*0=&K;wAZ;(&xaS4;K zD8@cF=gk~Yn-WI(?GV0JNki^|e+-*D)_fS!5&t(5VO^pvs8Hsn&z0B;QT%;7QS!;7 z%K2s#LxX%|*OBdnUprx}IufplBQ4Q8&3J1_L1eVV*r%@t`QU1!d6mlp2T#v8GCGPS z%mR-DkXH|D#jQ?S+4EJ#sB7By-(jT?rqV;dhoIM!mG!OXm!hzEh9XoRq}t{9v&x-F za{H4HjQ2bXO5Q(RJl_amu!^Q3hE@BcvuY*+n&M^^t=&Vn;hPiDuj&8Yv~{?iBbe>K z=yh}|g18upi4joD{c|Ern65<{#U8bE@Gvl##krGrjo7lr98P^d!eS%Wd_9=l$?IVyEb0lmMF&*D?4AF6M=|VremuE?%eT>BQ{fJA2{Oa zV*U_nn2-2efIjsvSxn>bik*v_{Fik|KnSeX9KIWA6lnziJC2QKbGIOw$=|}u&gZjy zh(V9m|K~Gt>%l`QtzeCLFU4ECJ-z8glVPZu?}1^5AM(F|(rpRi8BNvgdauekepb;v z@57*qSfptbcl!T2b}*#+H<&%H|Nrhk$o@CKWtr0}W~kLO)y45MHiVbQk>WHnj=JTY zqL;tSy4W}B#P?@7FU21nbY?dUTS zr?l*~|0RfHuzrvH1ZlQH7D5z!>7dk+%iGFK;Zl#2Ll>l^V{uJ*MYpt#1M=K@oR%x& zlZ%j<0DEW2V^F8V8wGcaqaonoa;E%$RaKpES^D(pgfy!@^VxxgU8bwtPb~I4&F@pj z^A_ENU^CS)g+%h!EIuYmet%3>m)ZJrW5L}4jY_S-Vz5_&0y8%ZFC)C}*7$PEf@Gwr zM!mXP!{tVo<~QmscC~q2&1K{C{4af?LjSN-Z3y|AU*(!yiYgJ3pe4h(!RlR;FgDBd z7NT)!C4@GNzweeZBCUjAGRwPmHk5%Y>uldst3u00mxV%EiaLGv8~kv>?5xY^6JK+k z$K`Fu|2-0>i2r3?rz#s&jaZq zmX=Lih}?3%^wfvYg&2+(PB~r-H9l6`>Z3>vVnDzzdbNK_5PEOBnTD|%rfO2Wo#ySe8hZCqkk|?h|^YTw^?-0#^Cq| zT_m>`Z94{?n9?gmnADOh7Y~}UTuQZj3nz;LgfsF-DvUG5o(Gv-eHh2(NNVfYs>jD|^}Q7z&yy1>z6&FfWhZS8Ds`R){y0Ih^kQI9W1* zaC@-`&DPay(eH>j!PU!Ve4-1T@obM&0{WK+8J9MDne0SSwe{q1ca@HWP=gAO2NrZg zghr;hpGhDbW{+-CVUTAw5DkRaYW$CWL~(0*Etd%KO{x-9b;GsYXiF(gN{iflmD^iX z7{%MtY1>dhuB;NyqK=A+i6H_g3q`z8ZSDV}-z`6*d`3$Kes^z1wFsD{lAW~rZ zEfCMS9H;u0Z77`Y5@{PLnpR*buikusUTgMHXG0pqlzQqPn^%FIL&2W{d@PJxnI1HXeuHoM{Lz2U|0d-dq zO-N*nTW4JL=*;-(pFgF_5`lJW#;}qoJ@yvO$55*3gQ76HEusVu|20>%&4(yv0iP;9 z3nYshgUKwL)Q=k_Vyc9CuZ8CGV~x2iPATOdVq+%>duz!tK!ZOhUgpg!aB>`>Lj2rI^N?qS+^z8013*--9xU@;HIVVF;YSJZ}xm~ z&*#D$3HRw0_`7xg3c87Y+ccqP5PS}p;xAgd^uM@Dl(_7E)ppc9Jdpv;Y$r6=H7uWL z4;xCJTf6pnzOYbw3NJG@Ag>F?p)nfYOl$z*d77^P#l=46-Ocy0iTr)tXr8F-Q7T^D zNs5RPjV6f-;L$Ftv-tE)H~P)^SEz|^1T4oleKaH5eEnEyUzv)+=!`)s5lH!c>y!** z>Y@XiddS>x0gxJbJ7F%zNdD22^>K}3YFb@6Pu*hum0rP?;yhxHle&0DtK%3mFr}Yh zWgegQJQo|rU-n+g#BakY+wX)en|(6aUKRPb&e_6nmgh>PmY-Im^G@uVlKb;e$l5bM z4cGwod79@oDHLIz!m!>2&M}UJ&9vL<=%ovAjIL?1RILYvp%^ZzC3)3$cL8ojz9(K; z5z#a55#L8979wK)?*iM2lx0mH9?R{c*IjtIRRq!ACARDPa;%6m0!$=M#qw^`s(f4PTS6Rhfnyeaosst!rVQ|3>0Q;x zGo#_{o;(z_FkcS!yLQOSW8-nVXtA8w;mj{?Fe-!u%Q$#Q-Z283G0w$Svz;rZ1!S?B z`aXKkAT}rH?B|**Ez%&`{1Pj)?eR_F5|7%(!zqQZvp5-|HEps*^dMxOUs5DCfQVxZ zW@ka^X*yJQAKc55<_-;7&=4?^6L7JX%O$uLdb~{9mQ3TbP~b(y;39cq^kt|3XqCqU2-ePnr8%Pa58k5{7yHUucaaPSGSbahVq^ z(QlW>1o$Q7hj!7J&<%;|^!`eX9bWqq`@8tY;SWW_&zPg%bgic>Yu#*}_?uKwNruJQ zOf*G+_H?o-3j;UnBUME+e|%@-|Mr~ad z{i)nCC)5t|znYszKNklPUwr>~=DUF{cD^*o?LqCP#~iio3$;JTTCKl+;U~mxaruLm zZNZr?fWV}ivLRFbI`H$+%OGSKRq__={E$8{Ny zEX#2&^$RZL+m%=39xA=)4V(%7w#bZW=ZhJgi1FWbaVye+@{3{tsg&z)`)Wesb4b=< zK*?i?Z0>2+*qU;Ahjh|%g-ffo9sPRpduzu5ab0z*xoZ18mt^Tc4FMO6yJ^}J`P?EM zmF<_$iPxb2%X-MB!Kr*_DY}ssV$qKfk`{mSX6r1LOhV6H!A2^=)m<7#)~8U(A_cBsP8YwN?LA0!H77XFKT+j5YU}!) zuOWq8i<4%S2+r+(f#rSs8sZcCqI}gGDT$=Zx1CISJ@TM!tMB%cQ4?JDD5 zzv=qy9rD$*!TPR{7*M0}tHIbKz4NfYzyVCJW)6F?L&VW;`(R5Ex*zkFwLc^4ThPEk zES8x1A~QJ3Rw~)z^0(ENNVZL*57E4)z4{OKUFwtLe&; zM#^%e>-C3YZfJh2y!^cOW!JOvUQn_PGIr36Iy>l$Fy_ncr6!k|Wl8_zaiWXQ6mj$t zmy!1fE4UG$})*a zZ$&Bn$oqxOfg1n?XZ@1=#&%vTE~}SKJeHZlk7^Ovf0kyo7Wm-}F%3I2_?+%bx`&&!E&oyo?^ zO|pbxx&elyJH63A1qc!NY&|{~8aryIHtc-e!tqB<0geab-%OYG;QM9M#~N)T7b}w6 zrp;1oasmTZ_a1pZVd0z0jeZ;)Ujql6F=T;=MVfh}MNG|nngUpXojdIRJ=s1`zcCr3 z&Z>y8_DlcvJ#kzgeJvRx%`+q(%3}w#q`C#U^%`d@J(Yb@>Sa7E=ET*tIH2~gI;bcF zQySpx?0#PFPG^L(AcDj#i-r2R!9Dk7ed3;eiokGH&y{rjl8Q!qrTkYqLN*lT?g27a z&2AHXZSPOb{AS9|@-PC}rQsu54peC$xo(CdrhIcFa*5ykVu5;$^J{~ZQ+k_mF!!s* zm9cg4xmbhWksS7m!K%HDOnQIrEyflamY$_VOz8${=lNVq0}$3MmTzpP$%O-j{3Bs; z$)D>pzj^~kIe+%;$?vqUle5(374rA*a`q*7CTkDcFAds8p8<$ z`xOBh)ENo=0$*Az7@fEe^?mv{>lQEhbfM(bP8O~1(RO8S#UY&DK7Y_S%#ZQ?WXJo) zep}0UOazm4b}rIDYuE(R*BQp`Br(@a|9{UnDE_-!Atn~|@;^^Q@0J@?P&G?(DVR}t zRG%`~o^`qruke~`7Z3M2>!J&hpBCe?zKgCPCuo+IQnLghvWdvu*o@ zreQmZG--f@t_>2e?fL3Af-Okv6(MPvgy>YK-2emzLd0Q`(>z|$;Hyy!KxB~LEydLp zOQp*<=ZUJWp8*;}1xA)r-Ryl7F6c<7O6Btj41sK#ay zB$tghX&Nyv6OTD+H{0(dPzQNRNka=`<_d6``z)#Q* zfo#3jShYc#uNI`Qk}#MGUd$Z+-x!!ktNrU3+`jE9$rq_g+Yg^wGZqI95(yewz2>bP zI}SANRw>D)c0+Gv?%%)rpQR~FIxI|1pvPmAG2Q&6?yHz_n;)Ahv3c>3R}+sf%okd zCOF|?SWh)1&H);dA5$tFcwCXpd598BN-D~&5sgggoQ(a_QGT%g9!l%Wdsy@|QK^GJ zad&JV6FaHs{}*48`LoJLs>pSx{B|fC$t|$_o-)=U&xasUWf}&(<(!hYu?rl=xS#yM zxvIyNBRF*lNj_ie(eq>VjxMB1qN^jM`war9iub))6sq4KCTlSRCuZL3TuayGf*79( zPNOB<@-MTnIs!J3@sXnAMuKGmMWTnxye6bTTq2*d#4!Va#vsh;x%OC9jatUfw*onF z-RvCFYn#JI+j2c0ei9~X^bw_7t!-Wq;&P?OL9+v}dLU|7$FP3foj>tudYp2iblvk& zIQ6&^k9SezyCW7W*ZI%T*)q_^zGZ9|H|2Ks|HIc?2DP=e;ljJ68+WH@aCZwSP~4$F zi%W5L2o4q8U4jR9cXudO+@ZL;20iJ1&&-+meth}0k~NuG>zP}xTdr}6C*4-jR|N3g za#v< z4!$UnL`hK`9s%(HE#%~=0rX)*=Z-xtDB)2I?28fotZIBBKZ-&)d#Fu94EY&8AZcF6>g3&$9gbL5 z9{)i|(g(%3s1P?3arA1{Sjj$GYf`6`){7u{n#}tq+K8pSW~+fU1|_q`By$6bi{_nA z>m&8UDIXP0-{C-1sQVnMX@}gM`B89|XA!B?H0;!|Pij}3LtYax-1mxo661rVMkIXK zQy4`wtimcsjVqb7ZKF{qhB=s%_V=~q7zUN=TXVF>8TyK@a029Dc#+aDRuhMJbtP7itOVw7!*A-{lWm+f2 zO;dV#LbfaIJM|KFC+V35C=OCy)@y_lgk@2@@UqlFMfyqUtotZ4rQMMo0~qJap>iHB zSflml3~#+%Ev}>cp54S4jj%xU=X7h9(`Ej(LHk;QwC#=0%U(7;O13zUvvV_6)}XWX zkmhu@GIC{LVYypU=UH-rM1HEt-N}cUx%s<1hTGEeJeTJj$Ktb`hQ^Yi@fXP|Ai+1vU2|O|Nrgj z_t)OkOfkeoQ;WSf+6U}a+GMobLE+IYd6oX=9DRe~i=%NfP7ms2^&{A1+w|V_n_og95q0vcga>k@HnGXVn zdu3eY$tQjXFKLW#ObEm(40tS*=w>|vLnMB}V8zCD#0`tUSH_BfV{1Ut5eZ&+vxBtoEyMH zyY2R!OLt0;f&<52xBfZ{FEadPf~$|b#T@X_gtP>vP1z6}9V61ga<_y+2Ef)~x0qy+zpxlSA}Tcsr~* zFIYc8)OoZa3Hh7kyfOo!z@NEg2TNIV4mUlqi^bVLKP#E4c+k>F1F-0N&dc7P zZlFIF3##~i$aM2-qm*W};9eaXcO?=6mm_^=}^9~8SoTW|u?0dWJU22J!ao5G_{j}I8EXO_Ns}_o% zmXG%S{KI>bUCG-W&*nOe5a;E9#VB=SKDORK^|XlHr;}d^NA?0A zhS?>KU5lKHY-R>N9BL!XqFzOj-j|cgU-{&d)aZ6j|JCFx_m6+665S=QQlN=e>Yj{f zG~8UF9(6iqF<=;8l?m@GWo1v5e)5Gvqe)atXy=6XTbg*;I=WbFoPgJjTD?{u+^k-U zb74~Px-n*Ps)%p3gBOeKq-X6&7i;dRq?4h8E(KbjC@Tctgm^wmUPOR86xS)|)DfiC)9klPEaH7DOX0oP z>L9xJV>6V$SpRXRVF%}3dfSkasAz>DXwaZ}VA-2P=J_p3M7^;Bmr;1fKw$X1po?&v zY4y>I-xTc8(SMRGE$QRTtc{+qUuMi71u_wznAO%h$KQ9XejD_P^dN0{-U)IlD2zdx zvTZao9{0=}TzhuTrHsUY<4`vgpoC(}1D79d3SCX2*6FKOfI@C!oO}_C=bUU%Ng5#(@IdUGrBP?xfLh~$I6tJh#`MX-? zW_i9%t(jw$F7~s++v79&e4Pwf#Sx+S6nTnN#F2vN%lMNHFV=6#S`@=MS6h{|G|30V{$LlkTNPzUc}K>N4WdCYIL-Y2|38n+=n9PLsYfDW>DBU+xZ zz%hL3U;R#XFPC-(qmj)%uuD~|6(;cdXMqA5*$929=w$iLNnar877idIf@M05X{U6$ z#*}h5U{TKL#JDHgZC|J9ZRXGS=L;s$)>iH3z6vWE(w3bGMHU#`xY3TrerO%4Fk}Y- ztB+E5YfYl6(uV)j7Xh)q`htZ$mMX2p8_i*rJuGPm9$=jOfGYss{owE!3JeIhX_@+c z{%+k>t7|**B|uV-PSA&krn5+#vhoY-UHJAc9R3}(iGEacFxQvuBWnrXvH!RDxA{8+ zB8tr?E5oSAhfPWfDXj&+hDbY=8=0`*;9rDES&_872Z&BN3g;eB#tbAoi|AEx@gY=c z-wSRx9Yxdq78^am>a_SHp-)@2OT4E|LGAQRS)K^JB0d>E{$*BmT>vY?DEj@CC76BG zqg4(owoR?M57z8p7lj%=#~qp3u7x4y&q@gX4yPQDv22Lce%jRU)VDjeoZFY72o@j>)fn&N(PU9h>udpy3IW=fO;##eTBma(f%kJzjW>8 z;O~5*d#Mb+roB~=limJ{P_7K4;gcNB6s!=5iAs}8tbg|#w#h_xIV;ZID~-tbea(jN zpC|6*%jEUmMtDEg`K#FU3kyIplT1vhmjxeI@V?XaP$3$V?LgzkF0&kznt2qBeZmtf z&EX?G(kuhCoGDS$m4FnKTXl5j>u)*v=dsdY4Pa-NlSWbrnKET$F^SFRv@SZJGHfn5 zmJoOJnJnQ%*^CHJQ}stL@`>huVNs#iBbYQ=8>)&H$^Wda(n2X0Ys1~$1~DQy`t&fe z#u{30gnn)Q{IJTp@`lZ#o5FSPFbh;P9Xh}hH(4~?5;+hX3vaJCMw@sc;|c{ir+UPSO_BP`oHTxH-gfJ*@tr)F^dj0H5=S*ATrntAG!+wgg*=66UWY zvsreqeCJI}asgfG3gj=?*u6xz*M5sW+Mikx?Q-Co3{|x1$;krfm_m@1c!>&@i=N3so0NW6 zbmNcDe6QB!aM49JFC7k=L|ohI{Mr}Oa4l*zEqN8QVz$2o##s)?79hESXz8pK0qi>L z`gwDPdh-S2qHXdQcs}G6-LLOpt?(>01GBQsrl{<2sY)c*vESc)Kw49R+EjHtf9W?`^ z?|(dUKjJ*Krsld!;;uepEU8}@kZ9DpPA#XN&~Iy0%9AMAMAsAB;Y@QO%NHbuZM@_yL@hM zF4x(A?ZX;ZHid?5%oe;sQ)GUk9veI}8-e%Iu6~H27BX6Y4D_{`?{hAi z556WB`5`x-XKA3ao*o!zY0ysy2(eS+ZN25Hw{?TS_10IB>2v5DK~S}zAn*%smWe_Z z*kh+;LNZIz7(tV({*J0dKr1MESnZVd^OXsyCbIINOPuXB0l{ z(V6#dg2Vhzaw;Rxl7+>Ap|BwTPtBqf`FvBAk)V=mKCv%v97s7erCZqK-T+e@igJ~~ zdf6uXQ_Op@A~g`FCwY3~3c_nspYoFl>MzcV^|B3*6{9m!4zfZn`WTm7iIpQ`kx*RW zJ3L}*yt&qOt7c!)WeLO{$xWGAI^VTA zkF=#rNzg;@eiBz@dweF$b#2z`hp1#jwf_lb=MT7Gl7-9gg50@Jlh2s4AHSWI@MmkB zEX`DCr%6YGxILcUV+y-s+r%8+2qib7cm%^)G4_B`Z?6gP0F+0`jgT5`=m^){)*1;ce}g1OnOmMou8rLjQ2Cey3w)A z0oVcyC?A?bRM$H{W)W%#WdxbP2n;D|&c2 zY14>m5BU!Ef=3w855OA1Ivle^j4P{ROyCu%Kd)^zsv(|}{Zj&EBL?22QXLn}u7 z->WPAV3?vX{yQdmGVvJOlLh3;EPr~Hjy8NIorKd;2S+a4i0?##T;=%n@_QRc^mqrI zM>W{P!Ks?93|AT%yS8mjxAX}6Sk*q2%cyO*&lOm6+y6XpqjBHOI!>F?YTA% zp2Fj8%Lv`Nk#DQMiR~tXT+Lf#4WhhXTX?fJa`&cuUr5AH2;JcOV<@668yH~DKHaG1 zyoLktA&2jzWNBQfa%}X~z%IqS?l2HcL?F8Ca^Wt}@vT1A1*j@0l%SQz+t~YXj%^}( z{Z(@D5Wc9dyQfzWNx7CFJVjlO%R62#ku@`TQz*`9I*SpC$f5$GvyRszO5I66}FDa=c0g_*W*=*GMn{&H+I*I@81Yd9H!J^YAqG7w z7zr~OEtwb%NWq?r&^q=5$flFp_qETm;j7CpxK~(TvMJrGKL`cYNuz0~7N{pN{eD?0 zU-Cpe=@#W7l(Ej>)}JYsLRZAULHTaqFnlKokw|dhw>r}{6Xq5S8-;gXo2H%UtX;dR z2G0VI+RD{S|y9a^w>9YQ%hfC8W@fR#$NQH zeyyVnyP@W3OKtf4YzBq!6_j)Klgbu4APnOihTVYKibNWxA?E-kQ8xqTzX!n)`u89< z!)IyxcH=*ceG%(mn2K0Reo!|kysG2w_dbC6rM+lDE{0t`z#^mT52AnFx4Q)V{=Jm` zkona3@%CoYGprLKda+yGz{c{-tg7^S-rv+6SEa+BIhs*-BzX-nHB&z5%5Pcu;w<7M zcIU&QeV};Gr>A^Xs5abtz#l<8=N>P?QsaM@aDVcS4npwvSNP2^QL#|-|6Rf#RR!*7 zfIVLuwj6C#mDHk5nmH>yfkbL1`FfrF+d|%m!M+o<}J(tS3*v~3pEr!g%fjlaEsgLZZ zq~wrcMc)z!iyr^lOGKesheuBu( z-K=baO+MNHc&yGhq~_pj^{Wvl&ci^DrjdRnkYLje{=6~kQnKHGKI*n% zxNuCG3}%i0q5*plX=to&Y_UG-i_VaZc|3IHP(=Hip3VWwy*CySjLM_wZJW zc^k+xMLAgSp9Y~j|~in#x+QjxR-)nxJ=r^&dO@;Vm7FM7#J)deW_v}DHK zLIa$&NhB;ZzM%G4k;*-HRQwpiMcapS)EZnqV!>@+mi|+n7-UW=V~>c#zI1I_Dx?~X zJ;;?K0POU7Tgwn_wmrl(s?(5Z(yhGN|6|;U2ix-%w=gN%XesZ4+L!lg{$$rxD{ju= z3a`Psh7QN&EWPRxM=_oAJ6EoxCuy|f{dbf!Eqn-@#w43V#fjmsgwU;2PCwRMX;!nv zf$){;Fd#J{xvFNPlj9DubTm1~lIZt;k$jrSm>=i^Tn1YH3gks)j^q`O45}31A9OBa zIO~*0d)8$8gV18F#g>`A)#3GWpK7qeNSc%X;vOX+WK_JUFSxpKQ07Ukf2Sr8b zO5D-KNh^iXfMrjw^oVRx?;{51EQOff%VvoMfkqQezRcZI1Hu-OIlwb~%X5)Rj z4i-D=m5HpPBvHalBoeO3FVm>1hphsWW?mV#4jqF>l?}%C6*f?GhNSBj)0iB_x4s%Y z6_((R(bU9b?t}aDF-k}x_5B5q z>hAmPI!{vd7w*`t^5eFbuqgL1-rS30Qb}6kYC*umZ$|UEiJ;SdThrkOA&vuiwU!OF zs1{pdRxkDm2gzV4$GLS$*Wpv=`$Y5udM>f z%A$4IR=NKk*S-%82^;vsleX#&<~fUz7+wq=~{;-LyB-XR4UUhCut*n2M&N7K}l zjc|h2p;(Z_#+Y1;gNNvVr^zoDV&2{~z@W8O#IcGRVeVqgt2(EzSg93E82C^nIF$d~ z5<~b+64kMGHtXcXKS!}S+B4tF26CuVbv}e)A2z|14EX2g8SneHYXJ7n_mA)1Jh{Vc1Wtzl)wpD4ZF=d zjLGdAa&i-NB&EcrARImU7|&2S8T8DRWg+XdT%C5K)6)I5J2N2w)Sq~Y#_H?OhDl@( zkj%3QQ1w2+uT*!mG0T65Jv8(4L{jpS7ZHj(rUxjZ6X$VO3rd|v1mmTl|Do!LnSP89 zn}kRjhhV*7VOH-r6Y{FJnW%Z;D{7$+@Wu&kVpS9LynHX&nJ#BlFAsN%iX5teNhFfB za?bLv!}!6rsECKyq?5Sw~-+C!JZHbl+tT_cTTQS zdMm*=X-0Vg`Io`jMMGD*(N4ZMawA|6rP}%y`CQT{S6ZF-4H2fx;U+U-d8W9ozQQhL z+c=xk39DH0g`rj`_ZT6!rzR(+lbKxsQu?WO9RG6x_j$m-E{cMWpgpt80tB)uj|w1l zp~TXmNtRPjK?F`8!#h0uO>BO^$ynAAs9;)hJ_Sg0x{-w|W2{HqougdFZ{<5L2(*ci zbr_EO=19>LKyJo3f$x$Q6Z7>nptZgk3qVG?9{;Algl88L`ib<1p^Mn<=VLe5J81^A$HuVgOAEW)!|R*F!Q)3cTE@w;zrixUJg=yYBEKS>xWIQ% zt1FCQGlX|Haxeiw^pBE1!s13{7v<6b29NmIQfE*c^ME; zI|~lJIufXMfxTgu*6t(9m-Bgp{vmk41P`23E7r8!Njs{2s*KWEZH|7RZHS~W)7wv{r(-1E~p zJw%AianKL~P^q7yYD)W~d3AkK#~zbhZ0%Y6tm~u0-%M&{aGN&tNyfqG8Ro~#j3*4x zDfrT1dz#aGdnK++qFN#52bo3$LEtP>84aFX6-q=5vc6+=7LvIlK5`diUq2gX97Em+RfDbSn z6Ms4}mOTZdAJoV4Y`XLpMfWy!phO}@<@7+8dv3>4%9$2aqD^1!=X^xAsk>ECjQ#T1 z8Tk}@Dz*#N7&kPNem?|ii~|3#Y}3%L0ekafJ&QO`kVh(LQD+bOV!l#2yO}LvWXZO& z;iNzvsv5>Ec#Cv@zF!UEHom4MOvj+%9Jto){L0lBVSKu@%0BU96dV?Q6mn|iHE(qDGZkniRa8kA2D_2aM^alEBgw(_cLeV!zW>~MJuwBf_ zXsn4gw?=_Oi7Z6G+Wq_D@lQb~id4+1KB@)B7S^Gty!Qx%{8XgdFPGg`wi~$N%IKfEM<*pQK)9u4ZhCb2<8@@$PMpinS6yuv;1yBlz z(US{!%C((DJOQn9chtT@pNbvXAU=zFA?7sIQ-h18Z)RPyK9w(4w#Ca^0JG_G%5$DPi+Zkma_{1L9{ykM5njWD|N2&K5`07BZ4Sr*xd$n8{jI!UmaNMiGo0EC{D`=GE}VE|qIx-T&Gv zGD%O4m!|k|qBEI|87r@*e@-WS9+>vDU@SMMV4)<;pqICPvyipOo9m8^r*4cJsj>4kM5mxdb~| zeQ^--gVMw+%M_~)E;t#Y*MQU_F8G7|V`Z&ww!5KKCQK_W@VrEd2hwuhzn58c{<0E!;frx@n}`b1h4BZf8UG`Oj+doQH=L^Wq;P&*EfKIlh4p?If#22 zY-D32VgkT%}&4;|#y*Uyj_iM>d25MW~2E^-`e z*})y}iPv)Bwf8K}JGk|PBw2fH1(wlcFf!p08J+qDp}BRD7&13`l1lpG8;=_4HEAYO zH;5s@VJou6D0!(*v8MI0H97pZ_b&iuznpuN%*~L#=(U*0y&`L$0MK<`q*7**DY?%g zZO^`PF;lT8!z7*LmgcO3e#+lkWmT%9X@`9G^Y=%OR$<~X4FJS0o$>;{3!OjvusP7-_aGPlV#{O7Ey#;biSFcq0RR&HE2lUej z7xlk+@+&vo%L=4a361szt`EL02w}2YiS3;EXL}ua+MW{~yi8j?fu(d@wa1JE1dsXE z^iaqsbu+$4%1=KRC29@g5Ng19CVdipC3Geky@3xD(KKBNZyQ+j4ERz|D>ZNpYv!BH zV!RX*VM_u1iNW(NK?Hv7GkmKaWv`GV1siJS{{&PcGUj` z>j_QB(vD0G@9%FHFJwz!EG3pRkD91|H7p*}9yD@SYTGgUALp-HMacnsTaw%?@2!M` z^my^iaNKm1ojnfKmojwgTDuW3PqM}!2KgQ!Z;|&E=#x*<^)wgkLDRlWunQy~ZBJTt z_QD5UhDFB#VXE^64jGPB23FL0A&{t$VFqLU{CO13YUR%r#2x zAj9|SC{1?JeT9>z1K5;O*C#ybg5U%i(n79Qe>6Y#-=V{UeLWNV1Mi8Xo7S14$V5h~ zZ?=f1n@M2u*XAAWv~LiPOsMrly#I8`>kT<+@I8ewmm_hyPMe)dhx?5@(3+zW8a;x! z?&7N){lwWGW>_U>cfP+1_c1odc61iuvG!A1Jmt~$dBOx-KvkljQS<)883^F+5NR91 z?D7rIg_Lb$c;%644h2T?;_pMyuQ^MF`oJ|>0}6?9chGOEA^VCAd_$--tDK|77xLZP zhrpy|Tghciu1+;_ooyn+(eLcW{X|Y-*uzK+Hw8DOiRx0d0^UgOQ0?&+MFL}s{z0^6=OoX3>#5>nM?$1Nlk3!v@m}%!d@x?8g?cZwb0e8bW!L*ErxHt% zG03h#-F*w2%P9z1;FoaAOVKJ(v)e0b<1L4|e6sR2=~UMEsyC+-%uiVae^WLjnQaS+ z2WlbEg0-(O;U}Tx#EkrU|GAf_rk|Zs{E@-V@Pf9J26E#>JSWg?bFNjw+N=<_JDnbJ zHEOvV?I3X~wucgxAnHlG;ksO1fYj{?u_Sb!p(S)9ytvyHno~NH8kzGwm~j)DUh#xHRc=7 zl|tOSvG6#efSJ9b<$|TGfvG z3r1T^u;T=`HoEBhf>x&F{ZbXwj*+xx8$~?b7GV#|9QViJ6ZhBCDzK-KiTlkohoNE? z$#4{Jpa~k??yq;udsc%*{T59ukfQ{52u%_3#Y(a zSJ4#OcS(Dvf^S+ErtcU;MhkM!_pgpGLa9a0=^5G)kfSx-|GF<0Nc}3$wXvJCJ!j++ z2CZSG1aaIBI|Ka_5q!vSuwX`?R9w=B7$72!@4XJ-T%*B^R3R7}pUGfW)C!2qrwnb> zo_gT%QcCZ=)a|JlrPd#1DP8@pi+s_9WTCCMy%u^<4_#74r!ku&(18PVK6m{6aia_Mtr* z6dEnk`ve}_pL2TKs@T)k-ve4?8YjxCC#)yP{fiRI{0~epj==1#@x>iczOTB;SrKP9 z2st<^vwL9TE9J{SD0rkk(~$N}jf8wbG;Xm}$-KZiwDKkZascR+OvH(bL7XFwQXqf5ZgJ5S0N}xgZ*XSEo5sqICp&V}Q z*nx=Q*en9TMkpSJTjixor^Im^4nxPp&P$aSAZZ8eTI?H(C4(Z!lWt(Qd};9fMNc5~ zu8*j5(Gtg4ayznfG_J&9s$}_Hfk9&ocJ&Vthjv*w&19-C9xE4CGiZKm`l%T%@DFCo zBMDDu>a~_Eh#7(Je5r9r(-Z3H31nP3qG-b5TxfE9=WyaU6tsV+nZaU`gC#;b8ujx7P-)nejwt z*zNvUx{@zclSuBrFxuQBb75%x#BE!cnkxEq+Y3ewVNy-k3GW>FDFiSJv3nPULWJ6gjN+Ra-bA^^fYctFgo z{#^~`%`;&b?df2_>`FON$-^Gr%tDCWQ!%|~u~aGjA0pNGSBPl(@`i~c`M?PArODZU zY=A>I-QGU;VwkRh%hP@@asa>lBMHGthC$9Y4SX6CXsFRsUhR3u8C{rVm505$*4^c>P3wEC=Jm=vS}Z`) z4!VK)MsslLqLc%6yF<1;ni#Jl@)$=ra^@()jbd?+!p>$ZpF>7@ZlIz1>J9XK4W}Gl zwBmX6>Fu`aw!Cz78+G^KE0!NVxZ~84f?;|Nj)p1enS}3`z6SUtSgyoU^8}`IiO^a* zA(U)CqOU3dVb@0-i~?<>W;Hv7MxigG81nSpWIvsBRUSUS=xh)7BT@Q%4E3{PN-liM zw_ZL-Y)He!jV=AGGcz_DgVJcL^AAC*en@b(%*lA-+$o3u_6hqku+aqZ2vLLDCd&Q( zd`rbcK{Mg7eZHE78@o3%^GRo4w`RvDSP$5-n|q8w?DGHs%o9}=7}~jtmaOu;@E}jx zqT%@q{HD>xdjRXOROF%CQ&akd15W?g?$)yoj5s%@q^B~?Sbo5BAHZWHOya*|A9&LG z;pN%Fb(O>5oF^4x&d}K8=G>sg%4fQ?W+R?Szf~uVBGwjOoPVXx`D) z?b}34m|T(P2>mh7b6DswoV=y)-1aQg?Bf41&}eVLzxT(_$CXx2DOR#h=+>x9I%Y@r zNqq(r)9%J#^V(iUdgb|-H7IYYbNEQNMjUmNv$F;oYDau{^g5Bt%?S~#!UJPz+&jdu z2}OWtk*9{7&rRGkOQFj`oyhA2f|tP#q73C0eb|>+^9GS-?Xajs!u;O7pK!4><*~LH z9{28facM8!+H2`0sg_}-GU-8q7$)_shfPE%0*9V2f_)f&4JFdB7;4(91S{qA9bqgX zgsF5Q{wKhHtzarmUxi%suv2htcp*=%uDjRGfy8>p^M3OaZ?MB)p@=ENoz?B$RFstB z;iOXDU7<{LahVV}-n+rnwuTiz9GC0U)Z)PP{CEvDgmY8rHKbdG^E+BDc`4_ePWv34 z+czjLb`4V@#3IIH`rt+;U*QZ2 zclN#`qz0cmdR4Tf98TNzSYA8c{f3XptaND@PI63ET+0SY16~5F_z z8SVz^0?DmuyKldhE;rWLjbn}nq=oVkOSSXciaWkGtkUc^?{YU*l5MZ-lDHmCswXT4 zQwS&5-u~97&fuao(4Uy8mXOkMcN%9z#8@BcXB6IDD7`0J9az}0=x-|Wg}d2pzd@(X zGdIk!mEqXujurPj`!jlS_pJ(-$9-|9RqyFiZ;sv5_OQl#WM^&Mst}l?7fc9TCP;hS zS8^g{8^=!E;MhZ{XF8a2lHN%!UZiio%vh1wo%S3*$Z4>keP@tMBItvqxplq2s%)EN zxd|PwHrf6pjpn_-rf^Ck63W)dDoLzI3#17_{xC7lr6A}ChzWl91Rq#3G3fL|KV-8l z^mdn4)*m_zHjcHZi??m*J()gASu7Pm2xz~>zVcf6aYKeKwyZI}gWC5x!5o=#XRJ9=e)z=Gb@n^qyROG#+^67PK7KZVM-P4W;cQQd- zlhC#*$ZV|)_eW4;rG_-+1(3^hKwd*XK3i-Afes=!=eDIEu#bgUTt zjfpEHFk5aRybi-|9z!+LwHsFM>s?W-S`cnyk3Y{ZJY{eQuv=g~5p5sEPw%lGGj_79 z`K3t`ZCc%t*kFPEcI`+1O8`cw=YAbA?=tWHG_{M@ZqDLiAB>bHQ6{V*BUdiLf`Ej3 z`~^Q*zs^t^A+eKNI5WvFFNEX*boJ@Kl%DLrPQw2czy0Ce3V$sDJaI$q&&rmp{of_L zQpxZ?nEk(-PbhE{z=3!NL5{>jC$saN$~8@5;og_06PP+kPRV=8TZK-dBjQXH?Drnp zAv%`(Hx29r!T%#etf*m&DZm70-(_G3?_^I0hu>bmPG5>v4rL&Y@{>>tN*x7D%j4Q7 zliNIu6QTz8Q3aH&$WfEH$JN0YP9zsPR(}27q+(jk39PyuMFQBDE9;%+UBlv}!&bO@ z?0Tsul3RxbchWBxpt_?BB!b(jmR1P#stv1&)}@N=KfrE&q5cDWj3up8Km5JXhKs`a_J8vT47;iNYT7JL~tHi~b&2Rf{=?0mW zy0!x`@l4$h(8V!r{<{)6CVhGlX00IT&M)=j@Jhy*%J*)XYn$c?6s71vmowZi$TZUG zKd?b}O?76Jg;B6SlpF}1MXmGxQW5417h)oMOF}=svt6p^i>sm%l!^6%rx)(K6eEC{ ze^`QnEzXSUL35kr`ff|g!U2uKSFIP@QmDTylrLlmU|!<7?#>RSab@Bg&vcH=(;XZ z;s2BAO_aZhVoF)cwb6n@RPKw#SkbyIxn_S;OS~GDGkKv3h50aGBEww0WFmjqRDMs6 za)zhV6CovHy_$-2posQgvPoQ%~{^MO^SYp6oVu2TEbGRE3}X{AUl1m}<OJ{s|`3FAg1hDyLC|QT&8-Uki+nXuJHWVegJ}7*D|hUuEBR33)7iC1YYV^+c?yY z*5XsPA#@@lnJG;(ZSX132h@=v_hLcYDH$HOCwMQ@rq=>l!*#1E#J_qrNO(+z_qiS~ zjd6r7H_XZp%H1hj3vxmRP>+C{^%mH;$?6%P5LINKR*#AN*^@rH+{REZ3Y5JFXfvC^ z*{sQw8=hFGJwVzAE=un(c#@45F#Xw&GBT09qZ47089E94X#4=EExdh7rY7cds5tG3 z$qbR%!8TvA5(>9<4mOZ5Z9iHG??W`2XaAK9BqQBoB!c9+0vH@_&X9y({YeoQO!s^* zC6Zh9{l3W3*x2`?vo?-hTZh|k004ljX8x=BAU;fOD}-74$fBK4mzdLZu`E5f%r4;RMmLu(|$mI)jjQsD%- zA76gBrqm}R7*Utfy=lEd1qDSKc~u4;qt@eDaBj)p?rjbPDq3;=xbZ`gl=t7NA4$=x z1=SXUvwc!ut}}dp=+c^~g#9`0qj#-Hh|anq$Tm%NzFzjp8iD$d8PSSp_5QIYDEjor z!f$x}TM34S<5D(*2AVM2BfOW^Aqfgh#vbdCrl22c^}uTKbbO!TDmv}Hr8M3b-gq3F zf*`w;pPe}n{TLbU>bSgv`qF-{5O^#squ9ouKTG18rLW*;wn@R_wU#qH*5 zPplb@iwlnb^8wNSHQ%&I(0&E4{#m%kye`woU>FR0z})O-AU=s%rlb+_6_%({uH|8+hDJTsSQ zy1yv+qq!&Zdt`Chh}_~_Ig_p@KHhw0ufSv$OWMO^uKm9y$t*I7%!$Qc3Mq2I!rRh6 zVi!nT7ZwYFktG5J;C5-=lFvkyzx0V69{}?vN`j*l-RblYo)(L~U%}0aGJ-;#Y@W4q z7QbR2R}^Zn-ECM}9}@CyUrG{~_0u4UXsY$s?)VOMKgxj~i17HVctb^H3BbumzuXwb0KHRBf60!Z35Ej1xj!ai3<9 zJnHhj6SF8oRJok_CjOj%W~J?omoBv8GWY?Iep4Z?Z}dOu<2na%ap(AUGvpJ8)vHiX ze$8h)&ssm7D_99lEO%dg3NO-KatQ*%ryT+}9U|e%_3!1#qCB_x>2X?Dm7#0fO-s~U zeT|y?GC1iheozzN^$?7n&pN{VRswiw&v|NYedC<)+#QbMCob3&Rh8|`rh|Xnz4DJ{ z$^W;Og%muS_WvTwi8s+AQ#h(J1KKtLGwMn1sd}E3_KjPUxS2IV2_ra#y zsQE6xLn6NV;@QG$*rnl_De-jH z-m1qWbNi{do7ce-&ZPCXq(8m2PkUC8tR+dK`SB+WM66cCx;3A%na;RG=7X^=7g)sY zL!%zm{{eSw@L}?E$nFo{77__U@|px1M*X7c1P7(x-P#HN^LK+cy{qs#ue6FhKb?d8MCPiPzBd?i?|J$kSjb zA(e*t0^hF~1MOKH*%9ctl+lOySe-k@;+ol(v~#x^ z(!>=FPQ98oSyIJBopu31Ia3>WuEVG596tQy!x6U)b>bo2dezBIF3#Njkn-KG=3ry+ zNAYazF+4Oiw>~^5tVxEKXum!sfUVr4wV!(6v;$$-Sh-*3&&qTr_bUA-vxdf^W$6E+ z@hMd(%=2TIdMS2^IS+q0K`F7ig)tS8baJlrG#EeCBcYGQr1;t1TL@!~&a_h9CzZ4s z+3im!l;6ecMSSFhA8HqzVpxnhc6DbimL0D3GZnwW$2vpI@!}T@>J4cK?U7w~C6Zi@G+W5G1$;x5C{$K;afbaCdk25F8434-UcIy$W}C zg1bxM{FV3nM)&Bx=!?Ftt2$$!b@rNT&S!DORP+X)ckd5VYG70k%cq`M8^8A0?zeF{ z9O&kwRg4K^jY?=C1{0(=Hx(1t?+N`~5u~8C#VuqJHdLM6Y1JLxZ{6}&w+S1^WhFsg z{xa#X{oycbRpH5#xyBhi_rd&k6@i0-H%G>yY*+;*4f~D&?RSnMp>L)CdZeI#-}?I) zJ#Pky^=a+Tky{#rKAjcj3bHq0X zKkDCZJ(q#`nX79=EHslX$F}+P6B}0;9v2oG(LL76`pjXPF~{V}+sZ~O){Q^@@Nl>b zw)QU5QirCaVy!M}JZ3X#zs04TmICAIiOkl)CAE{PNj}7e% zkqzbx%$cOlQu}!bsl}ZF(MHqp@1*gUV0oHS>(X8j|6dw@w_~G?(<5LC=uo6<4_}@m zoz$Ln%hLt$TFKs&62ou|hk=T0WRQI6&3pJ|{&hyMH+0r!=cQw@%vLXMEd-+p=b(#h zJghzBrb+!14v|!P32sbhGiAhm4J-)7=bS#YzvT>kmYl47oJVlbpMRuzgGnr1ATYGKIt#&*< zrMP4fXrmNk{pb~fpBAD3i>2%e;im0qRfAz4^wtOB;CN{dIa6bY6&+R|-{CUpf|;eF z$#~zapS(Y~nAGxS4m=zgHESZ98rN$Z;eGwqV|1NTA5thV@E1VfRaYoIwj_7Xdil++ z+jMBbu2vmGpvw*V?ZG!LAnm2_IXxE5EmVy!3Ixd+6E8pYP$SewMt zPbWZ^fZ6_f2_5IQLNr~*1kYzm+P?>K?{KS3zE-2MCCgLD>F)%(PLzgGm zS6Iy?ToKs~nd^9yu$ByKYt`iXwSd<~bKLkKb2>wq-~U!`CP%UJgfQOs4B;^)wum8f zS7Zkto_lLWSgP{c4*GUB%P*y zne)>_zJk;(5~T~LjE&cx+c4`xu7-YtQADTsLbd;o(bPl+%~Xwn2Ul!3;?Ld8Yx0Ot zgr+1wS~S9B256ejkB!^W^?H2f378QNBUW3sMtTvnPF0&w3t4p#`@yUrUp^7oL$bDp zh8nOY+Pmnd;5y1BW5f39NV&6u7S6&0cQN z@8taVOu@;WlcXQ)c%b9i+cRT2$7`+0?Y~xW&o)R3=T}I!bvV;$L2uTt2-oXn^UsW+ z6`0x`M50Z+oGn>shz(7o@1DnM?Z$0yPZueMn!tlsYb$&QqnT3g5q8Z*pY8rSZPK~r zVTNJe$iAA#^P}*h_wXpy zkB)Cdln~T8vP~7U<&va+Jy&cwO({#ZsY><<$&RE%=8iOZWwE)P8P3~YKnF}t!C%5~ zMb`|YD3~7J&PQu^o%!-?z*Tp}ysR5CL|fl^sD*E zCoPZPwZ`m~>{jLr=>%YtCSvc%#fCPuc<%VGqU274t93=*KDCJW%s$Xa5 z1juRrWF^UF8-g8ywra71SLb6>!0vRo;ToT@-IKc6!xR(>`m%4o8CPi%*j4vXFd$WD zsHosk_Iavux=j27mMG-7>$%v`ArzNMsS}OV!e(ZP6kL8&;vx{nF#Y15N^5H~Zl-K# z3H%!WnOd61+LYn4ea30@mQq_&4Dy_g{KeP|WmmOe z-U9Itu#H~-1!!XaU)tcmr}3X~`2Q&+W9n<2e@&tCGz-&c>6BSSc41a=)$f#*anK91IzLDa!;X5=Tf2 zy5BJyb(v$#LmuF7nWh;VkezyhXDxj>c9&ek@TY?qi_R)8v_Pf~9gK{XMCon5_{VEB z(4esx+s5JBPy7=?Tlt^0ss&?hU)sO&_1wz!+)nM)$tPqQB;zYSZ28nKvR%tBY}ie) z-##N4FEd2n$b(jmjA$R?9Lfrw(;(^vlCM}NkMb?YUcqetwJIRkY544kvAG!<5k>}h zU+r)KKFUsd6%H!q)}0|BQ0#d#>vSo9e)o_CPQ|s${FWh-@G9j+s473KiN)yc%*B85K zzq1y648x%EqMb-8RozZxSGx%$0(oY|7wjw1CI5!VoH_$uwJa&zY`@NO=75ueIb8ZZ zsF4rmL2g@}bGcwOLi9sn=BxX<;TBuIu)npJcV9IK*C^gW!RjD7nfhctror4@^TE%i z0v76mTt&nFBO$wlG9k{RgDOX*T*0wj?A2;U+tnDq@%Sa5-aHYwD-U3!#hJddzKS^f zOK>o9+NA$a*c%FI^z_vA2HHfwgRTrMfas0m*-BC7V|0AOPDaCMCM<}eXKb9h}Ch57zF~bSk4sGP1+oYI3bT|7Dkv7aGp-GW2aG!ZW1!w7BrL zvPLiNW|Z5VzrWvjcqvJ#)u)MG=x78T+T58-tAgk&GiR;gPQSdDJ7zo5W*`02IE1=b zhA!bbX{X!H-|jYr})fcAbMq%*pxgqxXb08ljx&-}A^3w<~E;nrbUP2hep$ zC2_92dR!Lh}v(YDCx_=Vo|Y}dF>Ox6kP;pDmX z1xImxqy&v(67J&T6Eo7+Xtc&=TPKHJ#H8!g@wJdJAmx(%ms8j=QoxDQ9_ctT_;6UR z{vsSyI4Ku*PmJ3bm7~-#e#c=aCSlXjrQ`0%$FpI2!u?^O-)nc5bKxG0LNYet zFRRi1_ytOo73#ahiEg-9hT3ayM?Y)^G6VmO1re@>7>FGyzw9Z1GQ83VR9S!@9c;fb zS019-6h0C_pj7=Xd;N4&_o|^%3Kw#;=Mc`p%JV z!ax0FVv|cET5Pcs!I~u0SaRaZ2jP*));hs`pVyzw?Sef0!1Qq_etyCLGXi;0Z&CHa zt{ikN^fVi@WzlnM&%Vd3W0+iNinG}?-mxaC?W+_&*@4q@VsGS+TkEA_4E{WI@&hlX ziiFjbi`%R}(dcqQRW70N*K`!+veDab+bOA=?^y1b&8{@w`=YbOM^g4HN%-9%WqL6g zwBM=AV&!_+g}A|1p3!R=*2RHiLCb)Oa>lR$uQh9{8^C)m-OVa8&Q!{br5o=yA*+1@ zTfNo(hlow~DaI@Dzpb_$nd<}NUA<&0SUyNg+=)9j!UeAypX8%EH)l@OBWQr?266y z_>HMxf`@=)II@CqLyltTo__QSD1|e6XQL#nXDU9BDE<0%Wv>->d3maYMgQ3MV$F%O zJITxGqx7Yv;&#m}aC(>_?r*bi#AtG?dh(5Y@2GgI5xQwRY4Un{KOudl;^4@rs>0jc zc0ucrd9dk|2n>fBYto=AZPp8AG^Io$Kjt8h(tS2LJpqd5ZHhl5P=di|MCgo{p|^N2 z$U+nuKp?JZ!CXlqMO8u_h^2Hv{3?+*xqop2^86uLEEOF(Yqg_cEvdfR%=>x0e6YCI zKpPeJi~ys~RXjx8^C_Z0{aIev*kc3OPwhEXU_aMyu?L0#F|n}^N@VM3$@{h*AG~@d zjor{&3aFie>+?sDNxV%H3T~=2oYx7%r;}V8bsI#Om$1e1Y1kPk+&k}Y;z!8`G5oo$>u)zwpatXZvg^>%? z`{m@s0;M}u7(unVp!$JqzF^0)yv=LMP}ji=`OaW6vOq}*%y`nFc$>)Z$ssAI_;V>a zi8K3PQ2JiIAaAIckr#WJr*h#cMmGAbvG*R-Om`drY9;K=)HfhVBdO_!8|5M}>#H~2 z{aYc|p7d2e6i@hI`sqjOIfM6z;fnlJW;fuNdYAlaDA{x$tYRI3naj%t`x~+>wv%+K z>vIvj=nDB&7QDCxtxDVNN7gnPF_TBo>J!^{)v=pP5d5rDdgj9zB-wGXNB|)%y7nqt z#H9Ez+o>GQiztWiN+SrnT$cS3{GLe&M9#&hS?lA`F`F59_6LFC^hf68UT-rxo(L!- zx#mo9j!OC@9c(@o@iAHWNNdi_JcNt^MH)SK5nMuclgelMskY)Ms6DJY{APr#Rz2nr zvLZ0?tOgiM8Qj!@BZp*wu($v|xvwn|?68aV-S~e;6BSr{NABE|=V9-QK;i3~sp>RV z#r_q!h4I7H$zt6zD>sShTZY71w>8fIH8zu7$df!R7gPY}iWuj|Q&4ujr|#cG?lqvA z6Ibn6Cg5&Hz|&hj0Kx0*Z#nLB)rXu;)_5E}zX5pW_K^tYPH<~;XI}4^yRC%m5hCgN zuI0mS#pti@O!KuGfmF73skvibS{8G70&fh6y1+pNIi&cl)pxv*kUCT2S`<(_UB^>p zRGxA~Y#pI{%mihrBy5^RnQn*a>`lqJHmZO!xjX)4F6UvQ+Ia%obl{7f0@Z+Put76> zG>Wj_&?C8GMQ%_D4OqN18FA8Y-}N>v@F(I**WXHliAr6Ip~TXj5WPr!BM?IC)`wP! zxvgYewhPlaZg9#>!R%e{N)O|beS~1<<@bwt+{yMk47;5X@qnPl=9s^L%_q^qME67} z_^yNW@ToyYQi5>KNPy?3=4kM=`;dd^D%UvqZuQG+Vhj>RvwiG5L#%N{RZj0$KEKuI zNYQW9Xk&xb_2vn(3ot#yLuFxryWEWJ0CYVq58n0es>p&AKQu`B-G8oWO9~?KsxS&` zRPtu=7<#htxvczHO8>6im-)Gt+jKi+HKSMDdtZ7tdA!HXF8q?MT{J4Xqwrczj|na< z2t8DMx130hws>o+EEVkH9qZP?B)3BaZ6;z`vh}JFqMe#PWRK`r-5iOtsPilMD0>zG z$)-8m?Gw4a`_VtFu|^tS6|G3;Qh1f+K59doN;5WMA%BGG+;*<1symdC%KRnDa6sw3 zZ3J3>rv{71AseExZHtw&A46hWgewM7bs zgL6cLExxG%wfxh6+be0VeN58ibRh}tzQD!knrboSFWbe#O-BI3?_*UR9vU+HLc2#% z@p!BzT(S?U1rCc-#*7U=eR3u#DO0ly zeVOBzZu86MVSDpJprE3Z**3=ZB{}0xp`Z_BOc@^>e6IBS5+9=2s zsqXKBdYm=3A{yCaKb=vHl%9V~Jp7!qg*F+CAArAHM4sJwj(HPuvKva3wf}f!{wk`9 zh-=5NrZpV5BiUrp(R2H;BWVChblW34Zj8vd%=C(ZF)#{GKQ97utg z>19lWgJ^B-TufvX;vG<~cWF+u z7yHH_)2Tu>gwtjmc@i(G&S$lmNO09O=sUu^TvI#!OhS!v8@SCZ&(tz%S%V`d(7>;a zzoU`5%;vwVj%Rj*QUmbVYY=ui4u|SK&o>*n8HQq9SslGg8b#k5IUJ7hC4W9zW8m}7 zel*=v_PLHU+&IFz5zjvCFRQ?&S+s9dFYYsvVM9ChOTsKQV>9b>HXS|q+WH`0qT-3+ zMf@eK`T*fduxA6CJ%!3zKM8F@H!*E8e@*~Jaw#;?R#k(&?x* zZU^S7*R&F2V_u6bmhX=GJTAUBvs!mr0BCRc$cFs4ojtN6)(Pu@v)Zgil`webUthz&59^@`QZ&ZjSSVloGToW_38f$#U zDdA=-M4K5B@m;%tgpE7`W%M@dc0Gg#iY52XYnww+)pZlt2Imc4cZ-!ywg&t|M?yLM zYv#5V9@ltwW%;Y{&F5e0Gl?!PfGa7|{mE_j1o!H``FUstnCzkr0Q2;a{#GK?JQhR(tj#wEk1yAOPbwYPQLo)bj}o&f*I;t z6;n}ZmS;U&Fmjdr5#Iq)SvZdCLG$dQ!&kmA+$W#D$ldaelOMHkJ5&(QwSnC2K8hpF zH4QC9K$6(d+HTbBAXLJbi9JqUNTMz$HUv$mA>wME-w}agP8Tq>v52tEOrHib;^d;j zk*QYNXmx>aAqOn3h_%cF4xeI8WjMl}p?NP6R8wPfDi&HzT!IStp&;%J85!w%2M+_= z+7?H2O_hUzzY(T3D1sgR%}OKGnCQM{3*5Eb&zd-SR}b_VzBCMA@-yV&RpmNZ=h%;?5{DBUws5Q1hC3b9^>qzGV}EBi1Eiz?T_U&O(9ck|6Ef6TcMC%w}+N7JS@j~ZZ!O3D?| zpg(uyxy6y5H~807q(wp;N;$G zE?A6J5-Ip^*77=2Cwyo`3ZYL}D2}}LsQt7GZ*7##8@2y9y#Hj0?isz_|8{WP`j(jX9k@!1rfsfegZ{xt18pYge#B`u#`gyyAxkF90FD&b32Cbrs+ zp@h)42cRz*8>69tgO9HXT;rf@DlaNR1gpLx_Mgjc>3GQK4$Lk))q%*F6l~!nh2)&u zEIr_jU?{TFzqX-buFOQz$%IG+3>`Oa#ha%-WJl5heQq8WF^EX?k~iFcagPIb)HyFE zNxdo`TUTP9=nft$BjodJ-^LO2*<$Y>xPu57RQLaAW2_}x!k_^9pNoZ}jM7elg z6-!;FBlrjrJ$v$b-nt2+b+&SG>T7%e`K+u0`^%u&r&JUw0!jDMwz2a)cB4e;7(sncAJ*l>dH@8w`5)JIfFpq_mK<4ZQzId&8DAN7JUz|SQ8?NR8J(t2{ zkDFOFPTfID-6L2Sb|r5CEB+_1E5$I3s&i(P>!Aua>Aed}Tt7?ZdX&JN1N*G5sEciiH)qmNocX^qb$oO8cktA3`_Sw;loMSd$*3m{?bDOHnIpVG6Oh-!Iu+DjoLjGFh zeh)Y0CGy@?G5#JMSGT-FNj?_J=t7Mp&!H9H#PLEM47HPs4xlweNp)x;TBwuqVhar+ zA^4(Zv^`P6a4SnnK6ll8!@+9aP=rR{86BX*HfeB4x2uajKl4DN6TTqzI(>|j+q{#} zTh_|tmR1!mUh%$k5kx^1wcM}DUYe1@&d=n;Fz{3NmEQ+bebwG>9xbWCFQo9u=mMc$ zNH<#ws&xQ49$TL_EDiceLoeNfa%}k4gj1U2h4dC`H@q;XlX6G|36Q$~cA5t#Gq3n0Q*M9T}ET*RTj-Z58aC`%=) zx}(iApHx>g9xZ%n1$83y(+5L1nJNxMK9ap0GPR6Rl~_!pHjAffT`kT;ncJa6G6bv1 zGXG)nlKSOAZ`ARc*idg;vq(ARx0Mx3mzK_*v#7?HO`bN)vguCQJ-^FdspV9&tuvsa zfy&J*)Ih;0R5Hc`Gf43EHxQRwWK18y*s-?uz6Si0(Te*W)T4qFC|i-(b>59=f_sFU zKOC`gIxKSU@j|wyfLC0>LNK=i5zm$_hMys+u(wXMrcE%r-7_K%vnDuKJVK+|mzZLC zwxD}nnC0C49qQ=bf>0Y-=Ptu2Sa#4niKseVtatcaR{{zuH}pTBYD8Ya7&+m9f(khA zBwEanV^8s;BX-+!GZkd9=I&;%U#_)ea1TaPKw7zj6pJE;OF=RUq}LNb0QddRcVf{s z50)*JaNq}fXE|EUI?JyRUTCPWV2FrO5{vh!2|3%T_>-FGLncyF?XR%BkZ-w1p1-D7 ziML~OSD!g8QIDyLTCnm%QPZ79O4WWXQGH=sqE0RTKt`y%jq~#ojc(39u$sy*SNCL1 zu9IF!5oD&ZZoyJpbh`6Hil&c!i)PgrE3aW?=r0ag6r}+-<i77`nxJ$B=j9)od>0 z%fC4l5fm;M&17^0N=4E&o%hVAbCgz3f+4jxy^8_#hw_?+p|@kQpS6gReW zF({usYqty22R^_L(r$dv)fj3U(u*&0*Gh9G8a_UVPZ4l|+iKA19p58tjH)nQ0T0S$ z)}}}^9!}Nwqj_e160y5ARVmNq7}5i!ZK<+ZK;;G%lTpGGp-}&Q@oiAB9B;h0nlxJh7LJn0w8~)9+&fT7=*o~%(gse) z^G%Vt+0sF?MPFUi&OHtTembS-91zgWk%%;s)usyO2phF{Dpeo9OUnL)fx#F0^-P0f z{#k0CR+1-%DUEyj^|`06STJm7gBE7rp#0&#F(<(L;Y2jdHHBFPst27SBEne|nX^%SYltw3!$cYA6lXBClziB}$|quKS;V;A43>emK0 zYP5Fk4?57vigwXca_T}s`7}xBVn+tc-c35(DY%BwZdL*G8y@Z5zp12Q(Mo3>ia|It zN9v@v@LH{LtrS)$FLrH{Mzg!`4z5!84Ds@g)N(JvBM4h}N1rjR@R%z%Rv>b=D%q!k zA)ye+XSwvlE0b>3r%N?ov~Q=3)@(-Wv;K4P^uOt6BNnFt>_&%JfGCpTx{vf4UP2(e zt@lqT*2beL2y$s0SqJa^3Oo;RI8JLaF(*xtlUm*FGzP<~<5M^sD3u=*3%n<9>quM^ zWcxlCP{Y`=H}HpQsY7uDZU|Y*;S5x5G;@x4vSx}#HBH3v0Fcq`t}l_BafQJuJ4D^ynEqT%IMVATLBO%V8Kf`yq9_UO`zk?a=O8)P@%=Xj+Rz#-#))Ku;R<`f$(+?N-^2PJ|J)_$|J)_{B>BjBJ_!Yp z!^*ey^B(M8s*E!yvMnUVOJdC^*bw#O8^dcYP?hqR-kii(l-#G z8;D@`>k85HWWDixhbm7SgZ1@qq{{WUPNb6Tm_41)$09}<(7X@;w^H$yDPj>L^?~&F z-S=eS)DX`zW2a?u%kM0j783FH#>!0;PLly^SHtX6A{r~K1&*V z(y~`}-eRBa5cj41b{`?rS`?}xWQI{CHEKHm6$aRr&Z}W=-x=oe-j{4}{sK4-^Umuz z5A%{uZ4>vQw?42pjj82E+gTc26_O4Qr@BK!rhcRyNmdEb+Ad^Fg{)X&C#lc!Q1yCan1y!JlXc0i=$Wt9a6R_hB-d^dvz<{r z_Sut(d7aKnnwV1cJY!cphNqxS>3`ilqHnq8QAg*Fy)JX~$FkLj4#zy)sU=;NlK0a| zkF1#Ex1JSgISv{2@+ur$Oi;hHon!C<`E^G!!rsY;upYr_hCX63Rh#7}qiv+Z+G33v zwLh)ua%krDy};g7i4YME|w?Wk%5dUuZT!ZW{YIxcb}Hc);SVU*)B7NDwH=`$kLWa z3V9fZ?Usghq_1?a7mIt~H@OlpCL#W& zrJF#2i7v1G3+t5aXE?Gg#%YN#TiO6D1q1P5s|vhMoSVuMJTRDK`x~f>^dnBSFYhnF z0ayeTdrCYgF>(Ku4#p%vFZc-b;6Ophwbjrgya)yvQ5?<=>yx7c`@?*n0Ruq;^i!Cd zxzho8DaQ7gtN?WMtc&oNw*W&Eee}sFkchhRH}uJ|bCy_Y8SNsTMchdyjcA7Dm?edi zn>;RjaV<)N|cP+)uzn@cBzP2RR}_cQ`lCM|H$A+^%;yCe1y>ced3$y@fos~$ zL$k`#AX6|Wss4$)a*)9dy(-LUdZ^06B;`BFmw42-8Yc=FD6KdWT1dhA)#1>xlE;y7 z*8!HLO_wFbnx$TiTy4fW*QL`p2L@TncCK9AJnK#|B=+Z->;!QSM{mMQ z?O0nhlR?%CP$DufQ?GVWgEEpu=8{6K%JpP?Kbf_VV05wM@+nh&rekC9^~o6rkRRxC zFt2i}3@W$I_Qs=c9|7e|C@bc`>A3zX7g~Mcrb&XjE|u}f&7r355s1AT@1{XCt0Rx zeh+G(8TT-Tp93|db$7@El!|7vmMS;|o~x|5$S;x7WscJOZ;gwuXBviisdsmb4pfKp zI`ECxcLWm8!ni&WBpIyv@h6c-H*l`T8||c00F<)K+&)jbO_C_K6e%#~KThw){2K$y z|Np~BH+TOUP25IsC4JBJX*>4VbyMy$_S36>Hw_7welzi!Xth*|4I}`VRU)Jas(@}axux?*uw@co^)9XlI6<3 zH|1jeKhqFe(yn@0l+OsmE2i*)^FCWlxjTVo1?n{Lmzh>sQQ`$NsTe-e+Z4i%V2jVC z%G>dUa?J(+b-TG!9^sn|KkWF-{HCppv}ONy%vc5ETz*W{P4+3-anSW1x;|FW!T=}o z6AyKEezcKkx7$o+Q?yw1;OqSh?F&^IQ&XeYhpl1Z8tAb}%ans`py`pR#Tj`#`}MmV z`n0&`0tt?6A7s51#l>Kye=*|lS3Ow5bXRJUq1XJ()Vm{Y=CR=8dsm&!{c23@>#T8b z(hhA#9;q-$(BDp7`8d*$>7X#JZ6nq*dc( z@%RuhbZc7TM@|MukFw>r1^Z=`3@lMrDA|y0u5QP(6@6!a`PY`q?IlR>k89CwSp=|| zQByz0uOr)ZvT<2^SunY~v(9*|ME~j9m8$2}A}}*lJe|V+y`*cU>1FOT3^;a`Y{p&_ ziz|NCqk*AH5yLdU{_+J6Ld;K>qP)IXh>uvH* zv{18ocXS<--|T*fz{`?U-HEeNKTch|>|d)*%n|5>=$zgXnc+g&?@5;ZW8Y5;y|6V6xyrGt%5z8V># z!!qz*)OzTs{G)QrWWY2^Y?gIn_{#zq$*uuvD;Cdf$+{y1=GURrve8VjI!kTnV*LaXIBOHeHh*4Q~*hT%n zPY9huM+R{S8zm-N+!^U+)5iSWi*O+0l<&bjz*a$V%aH4m`gFltYbhe6Nl$}p3m4%o zv*}N1hlp%X?#ON?+1je3dr6e7I8EfNoH3wH=s80LgF(^xRp;nEJPg$&LilCHpV-5S zwQpWDMSXu&xGEvh$!pT)-hHWUCc~mO+Fp9q;vbkE!v6K&ScYO!K*&#AQ;o1YE{5`2 z)IC*Bbd2w*sn$(^Q@5h)Tu?~60r9PwOc$XaEI^1-<=5}(dMp6$2;lZeAq^}>%fHBR zYw~f#eY`z3?Y|`=6!b&L4tcpFB$NzMy!u{ZkMv;8+gm~J52OmjINTeq$DD5>h!0&O z>=s);TH$eseRON*wbv(E7RQHI(A}1a(X~p37*a7E6T6MunN=1W?L}oC3;2e`LvsVs zJ_GibFaUFZq?#LLCTuT=RkNChpF>$Tdrvo=_5~V$8HI94b!Yu#y=6*9Ju`b9%giO= z7Z;AQ=LAcYNi}L1hDG@PJTsU~B2a^EF2mvn>a;>n_qHST-{nQBleB7ODskWzIGxp7 zM@l4MG6$aF<0Oq zeXbzljX0}UK3@0x8PJcz>h+DC&iDbn(xEiPsfT2pA9Vu$!G8P6#x?}3&mudY3_AHP z@Hs#oZE*Zut9sesyuv$PmRx2rx;p(iA0#r*h&%0=Y&K6qhxGjySmZ=OIRAeVSy}&Z z2u?8mV|paOS{mVlwr+QR4_}%B|6r1r;Y6fc7$18^3&{>?=`K=Q1cRNc!Rd)TxpbG` zyt$`O!B#!4pl|N_Oqq01BE7}q5Pe(rA^)G@Bm$jbM(rqpfvl`@i%VTGz#0pBykpud zqt?{J2{{OFIiqoH?9YzhN$K~5beE9d=Isr=k`seLBc&xtg5>snGy7(0`#44 zpvFP{&M^P7XLB)Q>ANon|0vf2D;NF^NTN@110+#OO1LGihws96`=oDG@k3$jeLibq zo%R3v%I#pdg0S9mxQ2cABO&?VqoQy}*<3_yQJ@^=R`!VWoU^530IuI}i-=!ssn7K@ zLLQexuKVG)d62+@z)IUb+4~T7OQ?%sJkjfJZ?GS?Km@Ycr9o2Tsp2DvMD?;MV9BtD zyt0Hnv^d7ad2}h<;eT`f`2PvrBCKcS;H|5|7I&O0?9V`QZw0PbC>Hq?jucyFqQ8qDDdnF4Z22H5tqQd@Yl<9m;8#!~G|Si{rNRE?Nnd+)UP5_jg+9F>i?-`-|4^{jgFtMgZ5a>ITr`|BBvL* zS^$-Px*=p5ZrDJyyWGivD!+oR}mF4+rdkS?&>Y118&m)S9RxD4svFf(= z_EKh=o$D#7Q036tVYrq5Ys7r}c$ZpX@98QjbBM^k`2!2e(Qk+p<_2Z`^VL-|a&e?D z)ScXRq_8)FM5(P;2IoQcV_8TSFUOEdR?8@ERc}f@f@!o=B8(uoESR_cn5}eO`wPoz z0wm#bqqXYK%=7 zCtiWGnBwrze&A~YA=10^RlcaX)M1ue>F7z{)$ii};kvjB{UbbGN#-sFFBA1VPt)(;YiRTx zL;IO;$&+#FcBxmrysxGepMKDgc=)}fwn6B>>BA=4o+Mj+!DMxenjp>RJvNU)Pn67- zaJ>ZLcpGk`s~^ARZ>kxPc*I*Zk2C zA(#kxBe-b|!ECO&Sq!^_Atu`Ha%bZRwS#IL^#+La!zWxc`DMBWrRH z0v&T8o^0EC+Xy3NIg2V@cC4h&qKf@La-$}fbU14mx%a#O=AT13`?pM^L0Gm;UuuEVGn zvr&DzrM%H%UcV;*fsX-1?HZFef^A%s82Y^9yHSi5FB(Xu>$RAcF^B8PPFBIw47GR> z&u_KmtBe|#Sgbl4r70JK^k1m=de^bz|tvLU(s^LR+$#(&jnrL~AQG*`6CB z?c3YRk9$iB0xWL7<4X`m{x!H`;({JXt#LnA@va4ieW+k0>K&L;!D9wGnTMl|`mlwX z_QJO1J^I*+XK#WN{_o6m*zNLvnd$Z$E9cajC~Q<%W|~agNyKwppl^f6e(_&km-Sy_ z`oC%3AZ(d2NA|9v^HFEms;D{ja80Hv!zHy}o(fW(VJm-p!#YQfL2nSDw5tKj7l)>} z=IRFcT1{V(*37UEOZn!u616MxsfW}ga>Jx)>>j`?&T3Nop`UaYtUw?HJ(+a(*BlPy zEWU*^hyQ1<@&o&CQ9;;BI0W`ZhXRTB-p)n3|67Yl{&!9#2-6nL%AGSORF zY#P2)xbkR#T8qWIrLkOzAUZfMH-b*_mroto515kG>WT_aKWmnMhAdNFeZX+@MNHHy zlj#&MYLcKN6MFq)&Lop8bhJn|R;>jV6_tpczEo#P1-olCvOa~NmS|Qn8rg+8?!+uY zYs+l3hWu7i6DPwAY3-9f+rY4s|FcQY*#ystE!gX_WT5y;Kz%)v`H!O6u7TfX-0@J+ zeRPb!%LnbOk>9am_XdBJKnKgXg)tf1eI{4h%mM#fI~4w-!vQm}M#nNik30OAM{7H! zi1o$a>*-YJREm7J#*i~xVvYP=H;rS^)C82=pf!H_9}#_ZK;HMm%6Xbpe`dj`g@Gox{jj1gT=+qOb6lQI9Y>=iea~F;g zaN=)Sk*8rYlxoGdoN?(tF%lT0eY@Vhd(xem+%fCw{&p&^1LHC;u`U?r*+Q~kzk!2m!*%_lwYXYI zXaX_J2^>&6nRom_uN(j;2(8}pBs6{Z={!qBd9~3w%{k>+^iAstx+sTTuHD!ZM>(s% ziGgC18Bai1n7T*^uJ3P^{vB%&Tq*5VrmRQf;?F^xfpQl?e5E3e&L^5a%_z5vO~aAk z3A-2hQ>|?rbJ$LoCMK7fdDG+1NZp?FgLq9o=EQj&^A|ojhEEetoKC9c-Y;4&js z>ZUi(v+Alscm&7EedPXcr;Q)UKOYQ$?A;ct7IU?eIxb%#jYvrxgjOk+=c8|lVst7z zFST>&GF_iM+>=zD5ia>MaYMl1sO9%^dxLN+M!7IH>;Yk8=6-194!A99oB2oJCM4q9 z@2_?bio)GGWE>cyOz&<{^c`EaBI9xrtD(6kK+QLqS7JzIiHdZ?_*DB9 z1m$Z$W)=;aqPlPH=bO`QmARWOm#bWiRxu;qEK(#}#0lcHN6I@?DRj(v+GeKt;9kB_ z=4Vdc69=qe51jDwO3`UWm37tbzCRzimGn1 z5Z-0x?Ms~zOeP_5I(SD4H+wp~2wN1dQT&Dq;=VULADUGgNK=cD!+6QN+Ci8q7-?Zs zRCAJ(DiwgxDt3Lc#;YL5ESY)v@xJ=RTB34Maiki5=Bzd9GcGaOS)D1`LHK%%XA$q^ zw)HL)H=_MJRZx5K1dS>U$C2e@)-C;ADgXUHna3Rt zR?JrP`!?-23~E13LbvY_C(UXM-J0zSc3fJeY9iW1jZ$8onz2cqxqgRo7ZH5>fLd>s*Fb>TjWF!8i``Cko?Mv@ghP+x0Z_r>^>m%RlkK zkEZloN>QrO$`8o=Rbf{GZZ0O^uLpD+(u$6ue(Bqrr1i+PN;CAhZxnCEo?Hs%$foN< zf8to%QgcNh)Vedb&{5TNYD9nwU6MH24GzNrgG_Zf0dGQnx)ssNxR|Wf_j}C z`b&oeqQGby#CU~2`Fy%0BT^Ib=3iil`2S5-kBgLjHc2!7n=~(VzoS_FGU6p_rt{Tr z>m)Jy@OwnuK}Oj-%mqQPLhZl~lOlsidHNZ(uh2YnpP5Q5u>5(vH4%#&3nb2;B}&%<{&{s|tY>YY{s@qRX3QCkSpE*_~b*&Yc+ z%v;A#1=&e^f6;c;UcDj{v5vkR1rH99VKh<_s7K2=W?m*&|9e%qf3Av|gKmYBiTEbb z$z7DU?UqwyxxatE*>J;&JG4X+fFIm$2{~Sw=b#P+5IAt(rX8MxYayJm zHMNQodu>K(AR#N^k9>j?6US_KYNV>tr1HTpy?`WXBtjdHjI>^#%|g9VP3Dumc+KBl zln(|Du<0$WWqU5+ZP0B~h`Kdc z(sX|L2V)F`dR$>In?yc!h30xXVs?}@q~C?KeAGrL;(G1W#H&>hg($kXkDxSkAL-0EfW6^H{%JN>vtCP0If7eg_PsYd`WIJpUQJ>OV z$xB}5!A#mv^);U)Mbc?7PYfV^>cR0bCzB8*q!%54@5nKqiz($glgy{Q49K@FV%%rIT)Us-QXvYMM=mDZOcreX4 z^B+liFo=NCCAOuQz)pIYJQ1z^obL^_iQorL(fx^UpxJhY5^WLLOHsS2rTL)^f2{)EJJOh6ry32xSCxb37=o`Ms}<#!gLGX5 znGUSd*qI$oQM649JOwj7Zev-F1OP06jCk;{^}E5U+Wpqtu<#KoqR)SU<$q-x#RH0) zR5vx)Nz5ng>ypgj-HB?j@2M>UCpTyz1{ZUq{m>6n{<3w}DVHlj9;e10&zGTth6V_^ zxw!U~{07O5ThHZ{iAAJlz!6#O(<>JrcN#DRMLy@omBgq_Y|OP3dCbRUrhv_SH{=DF zVUs@8Sz6DJlUln)hz9%^i+hks_iTznk+4&b#y!Jg&}Zzt7~zNN4{ObqU<=vvu()Yr zSc~S_;Zn5$L?!xh4qRU5$9YR-#v<8j3m1MkKU~KLxkOIA=MP+pED<8$q1sV7`vLQ+ z7$bKSW8YCdj=h}d0iYmpa zYJ0|`n{A?$AMBZFLA%D0kBf_ooj0lc#8%*ro7r9?`1er0(bkt!uy=IV8oua(2C3=- z8S2bnvTQUdfutK4@vI=2-NtQ7iSWLjiqFX)!ada4O#!H%JRqMTa)B8+Zb2eFZ^|8Y zVj`GjegU=yGcW9TIkJ96uV&F7$wS+UT7-ARD7itZru=1U^g%LbxgjF%wSg!FCwqw{ER zg)Ex}Jw*_si;s&$s35xZctmXeP>8q6<M&9AJ5e0xqAkZk^X1cU&ENG(J3Q04P=HxsIC z=5ou=CgONP+jgE{-x1N_)yLmT324kuspZQJ4}dc^7)!zewB|&jH;2tk>^o-?Frkcy zc9Ez%xdn~FN$KHdJOoaHKGaKmdOW*bRoALTS2_p4aX$_cXVaHfvx&5(I!@XigK|k{ zfQRhcbBnYGZ{M(WOn+F%a|homE@<3TpnCJ>Sg^+ly+VB{GT%GgczYPfl31_LrO5r8 zE-?K$+0;!o(Ste}=TpqpZ{~GM=9`mik*tj&_mFLw$oUj2hjASeZUEcN&c$6 z6poY%6XPoH#W~Km4drsu_TRjo5wAApABwhq_>?n&TO;+FEK}<@KhpBlQ{=nWH?gjf zH`0FWKf|!dj7vC(uvDybC!%Q?gY#tu$A738D~%j&ztt^!i9-FEK^XM|<8s$sGEZ_& zCb#z{hDRvBVzqoSk?HpJG>v|a_QGO|eZLmtfu=tg_o5IKgyRRdCh$yFKUvP|l{<;= zm92T^>%t&(&SCD>fgdgT`x6^Tjq+oh)1Mm@fAr@KRv`Cyu_N3ma-#9_pDm!lu!JiA zV4shB$+ZVn&vNa@gfoN(U&J>Xl-^ikH8QZ%*QvD|P0x9C!A!K-;oqJ=@bswv$K;Ny85p7`)9@B_+VA z@(d-}bay&38}{@*iP7mZ$S1HEX244$4MXiwTGw&*+hi=^TeT{m>qr%Q1)+w-3DlFf zqWrV0V&qzufqjkp(%4ix(y)&(ZwN}i&bMco8tocowuXG_V@ZNlp=KvS%MO?i(kN&; zT15;zkndM;*VU_v!2nYUI0Zg-xD!(jI+ozE)5OdC7*m$&ILb^*1%7gUx z`Uu>{dK+f3ZRCbwV}x$d%S-^9peyB8UyXg1cqq@K-(wZ`wg7d*krGS-9%~AZn(W|o z%tNXS=*=_#T?uayJ{+l+GpcA6`MA<+ZQlGqlTd6jX-EK{p6e;og?+!S6$Q36B^1wN zpJgEw+cG${SSX3u!E~9bNxeoZ8Sm3F>THPE9hZtXJ;1-X%6^3Crkqtj+`>S=g#@u> zn7%X8Mvqu*&+Ybg`lHl-9xj)`s&>=XKj!T#9Izw$0LSi!M0(|X5N4xCYBmAx3IU!> zGOUbP_ishUgpO6Mub{>BjAWkGk1|oa>#TA=VVi(E<}Op;;E=bN_O#;c>VU^8oxlW7 zXSwD^NkIO~SG@RNJ;JkMm*X(g5w&Kp(WgNj!E;+atv8e5pQ>Nvgnv>`Uac>_Snu~> zj;tT(3;iDc>G_K$mfAHaqa;QFZXjTR4{M;F6N>#c3f ze2v2b)M@QKPW2ssPU_vg%15}m>NT_Xxkbrkm|{bdytqIv`kbSSte5B_i(*K3le!iM zYs;oe<`dy-Vlhrn{C-DfwahC>^NXx{nXsuyxI^!;lfzr)-)6O@1pbu^P+g`w*ZPu6 zC%T_8{a?Bd>CiIZGSygVi*MIUuKuRBULJo!J_?~}S8r^pnfru2*XNTR=K{eszZ8`N zn^41IA1nmEF?V+Wyt=~<>i;YuiQPMO<>vT4p*6*K6ttyCt*=4{yEJ(@!h}FyalI#2 zO(y%Amn{1#c*S3TNve~*hbQqeoq*jzGCpK5)>UvggH|DW&AZdq-MrB?Iq5{~-N6iR zGN(~==M(+W)_or}tc57PsE|p`Va-2ce`|VwQg3;{~bea z3{bq32}ST5zrM4eFyZQ5;hDT4s9lFzPU?N!%T8zsbB_~q*!=eDLT=QtS;*VdoWS1@ z7BGkOrOC=lEgt`9ow>Iu18#Tc+ow9-K6lGqXr@AXdN`4r*D8j-yWwz;ZDkP>Snicm zDNKtP)g=~yDV@{2eqZ1wGLUMooSBm;T>778B;TK>FkQl|ma2s;se!0JS~u68Db* z`D+sDO&*DjXtlf`+k(O98G9+Ue&sCtv12LYi}lR{RHk_K&8eHZQJ`BpA&isL)$Q=H zzBS(YOG3r3#HNhp+3Kg8LRdkyqKH`|GpPK}{A~ld-9=xHg*?soawnSewD33Y_q{$8 zxgq1vA}-LfY>2uwsgS7`LNgcU0oPo+K98l@j|mtf7#dU~to}w>&p#&w?PHbd2@d(E z9&44QYQ7c)5;YP=XwyEl;+LXl%`(%=@2UO$jo{=l6^fF$ow`d%o6HaS@TyqE|%q;e2ihAVhBl0j)FWfudgL!cx zKqH5xcPoBuQQR9rOkkZK{ULqN1o84Ls(#R;FWiZk^~1zS+Ko296yZTll!ua(QxqbN zrE3@8DjebwMOYoTr(W8%tAuBPuWCNz6kuRbp1z6R%s= z`3@v^&b>O$U^j0)FmJV_ifc>tyqwt6x@qadOc9zqr9qJb}5-h?w8pQ}b(Vu4> zkDzcX#{HH#h7qZn%+WVM;C)4dvy%-3+2nRH>$^3CkhD3@$w-7-^W7#tsF8fOZ1Qoe zYI?@+?CgS&Q!6BoAl7+O3NJXA0%lFy;^VjN`7N-n;<9K3m+&_VLzF|jH-Q^3lp~`y zxLn2deUOq#U`NBUPQF)@9s(zhp0+Dz{d4bip-6)8mm_#%GEnNwY@{fH-|<5b7vvJm z>#jfUEC2W#s-!@VO1d)9xyR8)dVTN1<*Dlcf4Ta#0M^c>ALuEz?w~f_4}^cOSGbjb zrpEdp*Jb-VvggF)yBP5(3{vWrWT^SUb~9{N-Z;Al%o9WND0An|XiLf18#rwv;KZgb2Az}E`x(_E8hQG^6dN7z<%rP zny;Tp%M&eT$_-gtmU#-X+41}*ssWCwNyNsrKc~{`-FA*8;r_nhD zmW&&C$AnF<24Ar)Isv+}}A4$ZPZ75^%MW3-*@gk+gX% zuY72IwhgE5&Kh4dQgFprG~66*6r7xFl@3vB`wnlWQhn{G+KrT=SFcO4Z>MH<E< z`hn?BT5PHtEkMsx^adm~ATqd|mI2v-8(~{E47y-@40fx*6*NLa-Vdfou+`f8wH!K? zpzsTo!hSFjZvA3^qOt=wnT2`JVTQ_3wfbukP)aH5FFKU|wcskj6~fO&Fm6vc-kQYv zWO?=0(@t|E?H_fsu;Bue5Yg7#erLf9d*LH9qZ8uV`+BjcwO@N~5hP2`u(C#4dc3vniq>+K0laqnb6lUs=1q!_5pEqT&$m zZDWLo^w%uRpG6(7{_f83lDMLx3OlfL`VmtgMuECJW*zV_ftK0ry2u}<4IVP^oiNQ@ z#1-XiVTr=Tf5pC}Lg`$9d^L;$NE{mM zGPa6>VRZPv5tm4e5NKZVc+`VZeX1 zJ*ITR$kD=OE%zz*yI5Mdp+@e`sCO~9jRUG4|yuXNsc)KuC&?S`70=h z3fCCF>GO`~AI#aJioU8AcL>bs8}GyR#BqMgtUFiF2$Qmfor*EN=T)oD)1cS)pGwgC zjI*X0a!^ERIdbXa_igMbdFvU!x+LS>)K~92B7W6r5c?W;Z;xAk_h22_b}6$gl28W~ z`*Kmy3mD1c)%9X{f81HOob-jLu-KP+A}Lw=a}<<7Jt`1VaF=Y6rG!c60ui#xbsP?_ z+iqm4odLtyY&}-SjaCNcV+n~CB-rA(*1X=|TyG?)=amR10mEcMj0|c9R^E>L#dHz) zj^A|uh!#)!MU~x3i}~w*(oH`~7^AGQXY(@Z(($-RHvxqX&1&XgtT2hhf*q~XK9elY z+lERZNpNtIOi9MQH|>HRNSt;p{@%#%)qzm(C!VZH4l350yP8(LLJ|vg>#roBjLk>E zPbGYeo-6i?p2nHqAOi6YDYvz#NM~+jl++;I2euMG!K=~zpc$RN8BVV3pQv+D=zU6( zvNP*UZnp-i$Q&k{u60t}$JOUOOO4pTP;_0xsmDHe(_#1mwbYv7j^R<`x*%AO6oDQp zn-vI;RNC2+=(iv9B~=vS{~#&qJfIx+%Xalq5DH21vv?x&ysp3%S)wA}OLOUOmGl=V>pwhw4-Pt#V)lh%@tIx;_~j3~0E2|2QuX@G?pd(O z)DS;~XQWh08x zb9^z9wmU2vs8JzjsGa|yO_-!byf%E)k@(>S$v#?%(E@Liva#yXNwdGg?bI5$H^W(X zQs(pDl0f_&`m|or1Ai)9|JKwcOX7eP>rVY-C$JnA3@_t$Cn~KY`yp;qT#y7iJZ<*axJNYy;q%uw^4LwL}Yz4j|;t$!Wz7s?f zs%ngP3l>y&kkgsVXwL3 zzIjz|ns@G5c!MQ1>ikO($JRozQ9NQEj08%$(8veC==yy!#sJwiCKK9T?muKVw}N(- z@5O03DN1m}fMaPWv8tG=K{Z!;re{HCx!J6!Kr#`mg6>1YnI%o9zHrm~qo-~xnppwG zh~Pq9Xv{!RgVw)i5r966%m!djp5F_xr@&Y8Bk|*{*$KJHg{trfb_g4cS#NhL+8W7k zGr+;uzneBU`4g`k^8GFHKoS8VR*me+-8XnTzJIH8Rekl)+CjKy6RTL*drO@8Hjk%q zxYFVs26(Hq`*QF-SV96ebFTWeu&DB-B`q3%)aVpg?UT5yRk4{@GaTt3^cAkm6S8t4 zDwx_aqU5&DixcVY@j$+7GLvdn5rY<<6pOg;G3W#ZpNd*ww(y7H<+ef_>Uz0t$29Q5 zbOV0#_f~}Akr#KH|E?>Z3&EA&iZ0%)G1BEI5YbRL`38am!7aS`BR0ye|9Gkmo<`H` zHq54-aB?Kr6mcVBY)WPwo+NoJ^<1p*PUF5FU;~eo@S3t+$4Ez7G;o)X?h|q>grsWX zuF|iGbF7JjIMNMh!-OH;EOo{^y;}xhdSZ5TZA*5r#zET4Oxd|b{ekIK_c1@7RCgiz zu@a02_ktS*l00vPntX1OzY7&N*809`vzspT>(?m5;UQoy)R(~g{s(*Qear}p%c7Kk zEqfN3U=e7>o4o0g_X|Nf9<}8Wq2$owNgEtsVy`y%P75m2o}ZC^Wl7Jm@F1d zgHSINZ}L{#I#e?DqEf9n%L*4Cs?vbl8h^zhI7FN3uvpfz1WjWBr>$08_C}d00>9aXwCs04A@h*$!7+aW`{C zf{^c(=E&C)kti}3m1as280XxCxaY(2-2EOfJ5W;m8#B!0d(SN8IJ+-+0ka7SIeo~i z+0BE0qcAu6Wn_6^eJOB>OR5-(cF^%J!t}@ZX;J$9XZ@sX*4q;@LlhS61f-{=WGTD) z>?2Pz!j6#IH^Ehd6Cnwy%rns7?`Ep`4WQdyrI_Pu5Al*p;b_PkEo24WLDs$d_*EBK z4yfnC2Sk4Mr^NtxH|Y*F_$K@QRWZ-{6D#l@n(>?RcfZ_lrMRcSgX%%Idu+dO8m~^D zy`*!?(O^F<2Y0bFTT$$l!;0Y(C@UIS;Fkyzq9U2+S>MU{D*fYw| z=*_JiYL(o85KFSx9ca&9DoPaI!%$wCS-dKF3<}E}^ys;aiW&^`fB06E{A1O-X;){;4!~jLYLF6%iTZX*Rw` z8|^XHLmn8zL;M%c#x69x4U-c4ROntRZSmoVCH9&ZkgQ-ZJN$spXl-_P*PIF~wJhCo zQBX%zL^H(5qsF(%7w{&@2+CFu)87iPg8kkS3B@1_nq!)Vxp@IrN24z0K;RHlt6tza zbhk3{BtEyFwVOk2oKIZ7j}X;_Fwa)0ij`5Q)a`8x%zx1mezGJiOI8?h+X5At??zb; zF=>S2qzOMmRkVV*BVFsn;7E941z_}Y;b?=uIHL4wpA8Nqalfwc&;1j2rBUeW<$q8k zFH9xyUu@=22nhTCU!XyV|Ggwfq>8R!UF(jVoVS4K_8OB6PBEOQhz~W{wL@;>l*H^V zCIB`Z)RI{m@?IZ1@L5pw;AeVR=#_eI>4TvD$nJzgkqB%I4{w}MjPh$QGX(*QdJ)B5 z#sPTvu9RN=U+A2L@cxN7(|BuaEq{wHvFd1dO_qe$r=Ty7Fdko@yG(8i1|&QqT|=(8 zZm_4_(uEUW^VoJZxsQh}JQ$PRN6QW{u?wUHO7FREN^SZJdN3U_W4Ff=JQ_H4&>~0GnU2o zj0SGiYbP^^qVoG$-sUY%6;I>=LT&h$HLvODE*wQl?Yszy)x&hQ3}I zVZaamN1hlia@$a|_CT>ez!CcN2I9sg@KXfyJ6X+!$pHZ>sqs8{@6q0*YS30f?22o(Ee^X;L|dpz)XS)iv1}#{ZS!U8u<%#gY)Sm3cu8Zg zQZu`!ke9U)BPfPQU1pwsQFQ`YVv_enb3b0E-tcH9W3=)y*L$8sli4$vHD8Yv_`)& zy>7?-o1v65xO65z++CJ{aseg}yx#o&o?A>?@xw=0fTQHxrX(5bW$b6A^yH*y@ z<$w@F(9v>#y4-%&?P;z7Pl0eq-)>hU=<=bC8uj{Q$-4al=-E932dnj5iw_zXSm9pt zQ%zVD*$rCWJ-LL7Z!c{Zp~b#@w?t>q<{#J{kF#?61A| z(TWWs4K^5JLQ#!E4(7c%j|?OE6YML^8<>(PX`m@>HjO@aEMd6WmLuOvgNs644`!b@ znlufR|6-$@YYpL8OYf}+As{bi>_@(A@r-m`XpDf%kE{}KPJFP`Lz_o7!wxhlX6xOt zGP{pqVI!{W+|)HZ(JNRdq(*fQH;p-E7OocbTsm`qHQK(X@k%J*H9zrFk_m(~~?P?1`A9wqmwuFI8*!LbNMcNv$rycu_*D-alMBw-ILy$>1?*>+033 z5>L5)BDvoXcMw3#4QH?qGglf11a zN8WSCJCtPZqTW97nQ>Buu)@a>g(pLIU z$|dn7Er+o!$I4tw6c>5UoEzaSb>Y6U#Y`VcG$-4JlfE>}msuyo314iKGL+k?wbKRd z)SfV=fZ6~~HadQ8d7|+d z-%rp@D6PVf(ZydLocd#sqR`qEO0NC^!DM~&AxRWDW3kg=a2foO$L6t%m203+yVj>% zc`A#8{&$@}9k=>A>j?)8Sr3KR5m)nGvQ)CC%iU0%%v9}kA^VvXGxP3S_fl!SYv0M13`yo z&_aY6a9NH2>MPNSV-Fr_T~G)tpy+&GfUNOCwD*u95$y3|8J2JRjdgf5oA%NQu-+gb zc9^dRa%!URL_U!`Y|Q6W2ld|ip_Xcm0&>C!F&cSqnU}oaQ9em(1okL;Z}&$zw?()P z#5wd282@9gdne{KRNzgK-+uFX&t&Rr)dhb~9L>nA#uEE{z-Q%WiUrW}LiM{fxBZ3; z3C}{kEq>&-E%<@a#_MJ&&8*L^BQEnyUtD`EVh!KS#7S)ornMK?uAkT1k9|4cTwZ|< zWV7;|5CYKiyRh6N*P4u>7k$Ah*EAdaT+M8-q`=FBNc21FEFDM3=jp5mZ!wTSseLNp z3QxOgno+RMLA8ZTl!xp2DR0SaKvo-p=sSRBYL%qEG#m&aKJ`53F0wVASDEimy|m2Z z8u@yggdBI?c;L~~ht?^fsOMhGulWA10Hf^!YTBprXq~u6hXdN+G*hqu!V=Bs%??Ox zvk=wTC=o^1W>FA!3=2&C+z_{q>vGB!uakct*|mGuJ;?W0H6NLoooJwUSa#?~yaO?` zU=PGaWdbJlA`-C|s6rvAhrLCX-Tpiw@ypP*E-KHVl#Ij1!SngP$TxG>S<*f`l;mxO z2|d}`l{%%p&URADf@rs^Gt64vimL}_f1B0lM+CIalelF<^B6I2%_FwK_ffAxMMre^ zr$VCn%=mR7hQdi-8)Y>Uo~JKfb`GaBvLsCSdr<8p%g_wd*xuk5zpQ(U=c!z8$MWP@ z^$SQtTA6sAx4qwM3Xb1TRiEy(fvH%fpTtNnA$xwm0uoC*EOa+Im5yC)_m`=6N_;R7 zC7GRUd*QI`I0W5iO5|0mDbnK8_n!|X>ol~8>9kGqsPvcR3h)c~XWwEie7G|5nBXHB z#Xy84xv2U=U-dt3RT4^+m~cjlN0cDqS* zZ`sW(K$ra4Q?`u7m5ol?+CeQGq(#-Dpsk{0d!m3t=?M^J?q|@-ZPIo^6w>ZA5X|-z zpO>pr3kpBZW>RSaGD&m6u9+m!nGSQ-r&$>U&1QtJksGDPMK|1P{;B68kB$Tg*Tf@% zuY~u|3p*7}^@s2q=?`0LQKn}fM?T;8(C68^*KhmNn*NhIe-IBCztIp8<4;P5ftd)0wMVc2$h~s-mn(4*f{dsQynL?Cd3aS6=gub2fvcshWBo?-L zSbyjXsx%U>b)zaAf(r6*cjX!qj$nTEvznJcuTT8U)Z3$%WsQ%_krBR8Vu$59jqqx& zwVZojPzyJZAUsByjz=!+t!jGSeG}EY(DKqXKtp?Rf4%8rG6>_I{9@qbu#w*H?hSZ>18w0-I!`5WSv39lX$3^ZyxFMG z=HETPtXSbmv~G*viaGVYk_XRZK&xj}8n~BJtcz7fbk*cxGqt*DQ}WAJ9!R-WdDz-~jxmLWfhfT}CB*dISM}@1lz~!)nk%^EnCq&$MeD71~Jl zxwVUIoU^RX>@@GsdQ@5+=mAb0yW{wQu2{ZLb&3!TDJ;fi_$f+hMM}G({8WCyGIye7 z(tt-Js)Z$6uFb=u{i}qmxm9`5GZSLV7qzzB*+hEdh_#olr85P0Vz3MZ@|7AFl8_T* z>w~)ojO4x46{n5R5#}%EBa#dV!zX(EuHDLR;9fU0x4m>&!Q_z!5WqQdpm3os&}z{7 zdKq_i`0%Udr32Mle^|rm0{N#3Sm@obKPc@=;4sKj9E6db>mhU~bI}X8r=_^LRn*hK zf)&GocY|bWpx1wA$MsYh<%Cjyz5f^>|Pp z*K90u;*!+807`8JI_Y4ab6%2Q2lMcR?w5kc^UZjk3sJu*wGtW~Skl=RP~)Uf^QHA6 zV$&{=&PXJ*6ZwTFW=nFcS}3X%~~(;|k=tFKt{R$c7Gi(v0wk@m~Ojm@w3oDSJja zqJftLb#j!9N>fE@Ng(@(>UdL70<9xX-XX%wxa)1%EV5T18>>Yi;zO6-v>SED7ZG2P zgygN9chDS|t!o|X$g4|#n>-gHG}+_m|3t)Y*ikufs_5pK`SAdRtgMg#BL-g_(6 zo)@|1R+WSIzzx`4uW z8bG}^y$6tsi}f7O^qK^X9W~fDc%=Zlq)V7(#*AM>*?({oY7=S#pmEeh22*NARa4e1 zl{UNdb0mCN;m6n)BhCgr?!l3bYqu+71@|Ai%Pi2z98M@tkV=&?7{=!vN;`#S%0N>D z_Dz~Eh3Hi=%e00`ZBdjHoYM){joayZm}GUL2XvgE#WD>6dmyjc0$g~L;We=aF;3c} z(yVrac28mFg1M?C`Zek1&FH}6RREcMs9)dMY7Wl`ODr;nXVj8tJ0%qM(Iq#nLt@k2 zBMXum^A_rU&tpkxU8<_kN|33CP=>PEJgzPF9yZGH1dDm7XC0^WQfKnnHNDg;Rb2d) zUha8eHW0abPu##_0`h;);bEwT7nd~)HA?+&Js^cHy~W^z(b8qnhsn_xuJ^~wWypYB z7}7sSZn}E8?E2NA0kba+#E7}q23Nl~X8Xjq(J6cR7I7zBQxDm$LEJ9i-vv-N-n5S# z{&cM-rdNl>)bZd&rUD)0t8;1P3< zDBR_w&~9oUi%h~EABSEqNAn+hTKqEQx2P?&d2+VTHeuFdo|x|;ZYzfSG@lYiZzQ|l zc}VTB-m$+4eKkCix+Q5rx%J^fR>;K`f>B<2=>(WG(r6fpU7qw)Xs~D?y{~kXXzvpQ zcCySngnsYl6nPB`%tK4c*~wnJjHm_P4_ft_U9lYiYF(2qB|+9ESj;%3!eNlh+W@H? zJpYXgou|Vs^!wsoMt@$YS$}$>2~s|yD#U@q6$a2R-(*My-MD2!vCZDyOGfKg#=zPW z3ILQ=2bU(gb-R>0XVMIAGa}-4jMwKTTcOjj{k9#nj~7t#GTXO-=9QQr^_Z@;h7?u{ zd2Z8RZ=Sx`895qDO80#InWa1hyCr;AXu$_?R>^qf>^8-_r9RgeVN0OsGPEZ}UJkYG z{Mpu1m~EFK_E98E#tk~KdUj_^(H%(p6hyz(X|Evd31oF;_L+d(zj}&G-WUI^YZr3P zo7VY4`mQXl%~FwvUk?g1vj+PL%O$nqamyy*d&L(nx#~eKB3rWW%-Ze;F(1@1FZ%u$DrE&;}b%NWI#1O(_;0$!O@*WlbQ>)m|Ykqc3Uu2PpEo`2)pQnesB5xgVOp zUsb<+pTD|0v$Pf?w6rpnX1r3<9JJGNMqDDaJz8R_I)7?BXxv6^H2$%9`!`O7N0eS} zI%mLF3rtj-qO&bKXbt1WiDDf6*vcuioey}N2JhIAWssisLCs)IN=GqPGO?a%HMA^qEu135AwOc54y2aVL+{7 z?H&)+v=(}&8dgAHnNF=e6cw9m@Q;snn>KhK&`~$F+jvYZ_gWHI`T3D!83cUZy7KgH zzho&wLgdEpfz7^bz{Qo$P&58XKY0j;=MmnrcM0fQUfB(%@@N9P7!Gw~`5*SIF$*wY zBVA$~G20a^tp(JydK}f6U9jU;u;;!L{AwQ_m?QXgCgOe?OQf#%tLow#h>r4j;kCX; z!JcA-u_`i6Y1CrJ+JnjJ#$Rffn0Zlucz}~=Y~!{1eURCrLVePf0+XmI37?XL>MqU% znePYXP&j=*r2Es`oUj$H+Y((z`r#|c$;e4$n3;=Z-iclx*yG8Vtv=sgI?V%45wrM^ znUg6b)jv#AD#lZC7C4)6SgnitA1 zFOWzMl5s@z%kkF4L$nf6i|w@-KCj#rqiOwtnRQ0o^ou~zQ0B@RHbgkUE@OkmeVc(Sz=rvsG?nx8O-z}(Wde$`$YI`Mn%I9i-=SRlJg zQyX{D7#;YiX_EP+TwIh~1?IJAx+1+QXYGaM=H|l6bFV^V5fih`QQE6F>2$531qA2XJ ztlNniv>hbONXiIU9T0IlXKCF2@|}izfPaLQT9og5>YzrATX^&KOLwj*);l)B`}GN6 zDQi!k|JY(eX~co1Dvl@Bhysa&UQUZfR?uu**Jfvm76i@(sxeKw>eX|fPMXNIXcCr6 z^977&E!T+@HVL-@4$UEN%XVv56_jarC%piZjy*cL>Z`UtVi`1^GF|ywq~KXXc>9N5 zI_UY~NS1vZ`=?@L{#Y5C4p5b&MY(-30O(;I=y^Q=)x0~Ndo)%LFL|8@i#p5FZn<2} zG@M^c*!s56^^EDc6lzIXGZnOb8r(EE;C8Wy&PLWia(~zzIzZ}s3wO~Q{si~6u#toG zwG_^P6{=~=swIJQbvT6 z88{`xo8$44Lt$OYWXo0b63w24Mq%FUbD$*Bf^d`V(Xu-G44$CED4WszUUHnL-7js@ z0tM6B)J3zJyM}(~q!eu~GzBW0@h;D9Bp4@YM6sQ56ATD^bB!vo=UM2+MZAcG8TFipC|ItrwpQclH&f7d>Bz`dEqyjnGs0#@Oo_G5I04q?}X>f^FQg9--LQ zRXAlgdpf8#3^f>gCQ>8T)wubSc~DMb4BrX%3e_WtGwi^;=jz$)hEUmNEzNLc>fvz5 zv3VtF;8_itv=^+%1ymeH>G|^pi}C0Px9Cn5FTr;vzY!Sq3|Sx&oG)T@e0)fSVh=3_ z`$7y~x;qV}e>-fRahl{O&W>a5ryR;|(-j<|V~Y^k<)P85?qD?7T*tRNTfztTIXCOnrWp>&gsK+WdusDKG&D9IkN`Ywx#r*D z&U@;2Hs^bWGur%+RReMY;#L=CQ<6WcE^!w{ifu?^EeQ&odxr z$M;9QdTox+mo}dtUlBNImO0w(sn2%~@ZklH68!v=^L7r21=cM1h z>%e4buRIN|`RdfW&WVFVsf1$k_s$_hMd~4(lRuinYi36yX)H&A!~oIKIj~{VdbjUA z@oJAUh+frK*>_wgnNNBh@C^uj9|@zuF||5+%H(MaSidg(YTFXchweU)w2hU)qX)Gh83tiJhECHoKf7q{EZi3u^mbdKF*)Nc6~PjK*6C zNzi(>WYaox#a&F_{X+T|-89aRpshiWJt_{6X5Dp@d8{q&Qox@%)QEFlIJgqf%6DAm zD@%IyPIvf>eQoKrsk?HI`(=)~W_L^uTI=++cHyecK?ZdeAn~oCD`&N@8?%PG63>ka z-RDlCbv2lcM&``b+R4b(>H5QsyFKQ1WOa6B@`rD$y?WEFk^=n5cllbXOa2XfGSl!C zza6uBH{USnWxt+Yn)V@OlhoC609paAggHnVaqP&ow{%^5u$+TbCSHa6siV%tXpTL? z9%V&I4UUl=*d7^j8jo(!nS4&`*E9-0>(L}#(-~Df5peKzv`iBTfv!BMo$^x|{8(4A z^xJ01|3pA?sF>ENkmq!nFjU0oTn%eXTr{a4#&&YBPjfV9lY4R(r3IAKR;YSAx!ZCD zhcLrjGBkGTQk6@a*Nm8GRCSnL1;!!;oJp>G1&fESb5U2lG{?rD-zQgy#EZ}_kQ$+U zBPFl+N5m7NbfoUU$Ls3O?Ceyxu!Az>G4ZlZifTL8Aj-H#U@=-Se)viKxt(eoGaK)5 zV$Q2JgkXDjU7Lk%!BwO&o8taFJ$!ue zUO-*#L@l4%VTjyk6Hh8jroK|ykSr#I| z^PcMot}yv#+o4@MPZ=kt5Y-J=W?bV1ck|RqgSW>Z2i#zfd6iFHkxS{fqp^w#HPlfY zpJEOqi(MyDu|*GFO|>TVKQSquorwX~(^4nRnlKgX{SOBYP1Hn-5=gzjXiIbxOIFKb zC0HN(7X9PyfqJ`c_BUpNV20(D*$v~`KFuHy$@}m%QF-~9!Y@oxajPuP>kwy&zVfcRC>%khBHDi{vj;eh6ZuYP+8TA&ah9zbg zldtGA->_;gSqr6+Q~G(gc*eT@iRO3e0ngCus7#r@m`Ti~ZGpIAxH&`jTASL6XLw`y z%8*N;#7+Wc$1mt3GSCBl?F=a={))SE4<7eYh|7pJ$Fasa5ib~S9YqJ!_8CQt6%#z` zjnhn`(2z?aQH_d0;3^PVw})w3kVgvcb?*?og}&@5mmolm6WZ)dFI?`>@<}8@cLYv{ z46+;_HB^n1F|)eSww;K}{6sd7xfx;Vnu89JD&K?xi@f&hvSd<61VQV1vF9;GRj;X| zpGsteU32@*8-jmEJEtXWe`}XQ11#1LNmAXd6iS3_+ccCvb*D)L%}?A+`KYv}Dt#9r zaAaSHCQ1@!`(?*Z(w8|+MQfYX+GxiIJ(d|p(>VvX@UNL8Jg%e#da{y)YIM-H9#|aD zC(SyoBsv^{?OicJNpgCG7Du8|KdpnG1BZu!IIDthFMm?2l@<^39y>G4yim(Jv@7}( zmWBR=<+)ul-;58n4^<;;EoLQ6)UrgocL{n?O?c9cYUlh;W_`X8de~Z+Dh)*KhLogu zyV3!HCpF7ir7jPpdz$(?xplqg>XMOm-DGNOT|=H56G(k62hyL+{B;xW z=6QEoF`hLwK`9z0xhZy{nes&1ABhA`TX;OKDfE94>Ol@gys3(b-vXJWe7#c7&!EWq ztcB1_7cDL151a)98&r1kw0Y}|g!Tl|2lZsgO9V+W>Io3pvkBzV9{@SwB+p$S{82R9 zs|U7O75H%6?w18=ilstL^$rYm{8psZFx=%0!uOp>=Q|(aDt(DigsXt z?f38Uu=KM5x4w)0c}>@ppG4Nt&{!A9?#^FG+IU#>yxBQNt#!FbeSEhVO-i9_`nIM|`4r78h0RHgb|gLhIhkH=i1$F2mzY zyup4*|IbA*$D0>nv*SgK#wH%7YT;1~pqR3AY~CcNZ}8=`PLseM10>(DJ> zE1byc=6W1KCSgG&aYC4Xy`qXxz?)$dpzh87KYX2KRGVAWtxrn}rMMKA;!xZjibIhU zXrZ`E3Ium6#e%yeSaEmv7Pp|qtyplE;N0|_@4NTk{g*K^M&8J~_s&{t&S#RkuzU)Z z&bpUvb(GnaH2w$W7U#$6g)5toYxnZh!GjWmh+r1%R(45zz&$iS-jvQ6dZ_@J`tcg} z&V!rjbsZ{!K<)^zA)Fc{4uQ)=axMlT&%7#_Wta8*uN}^JQ^jk1GmL*$v|C~=-2t_F z(5RgUe-rCQN4|rG6cRRR5W6}4PvKLPRbg#8c?=--LlmEp<#829omagC@54wC`nqCAu@+CP&!?SF9yeFfwlyHCWLAs^7q=MVQ;Ou9uwJeiI+?) za9;CTYGRizhyen@SNIBOC_lTzup{Xx87eE!7Wevo^X zcwH?)*@tEJ&ARd74kvH*K$T6B5>8}!^KHG`8CqFozhq42Kdzscavcp`9$0t7y1Bin zsk@+(&7wge9j}yp=pQv1iQcDQz^*Ov)YSEzh=x3KbN6# zMM|T2Pa>K_Jh@RS^1GZnA;Ueic)%~e=?PQpV8hA9S|o6~niTP&R!_gD-ig84Q_Bun zU`yq52Q1C#IGQ&(47OP(~Lid`J)z*Cl^A35#Ho zcwgo&@NK|6qqR_HOHm?vpv9smUv#vEin8cj$`>^glm5M;F_cx+hghg;Q3KrB9#?#* zH&vW3C~8)oSCD0))c&=OWg>Goz&MuoQvsz_sJrMpcrgpTnzHn`X+h)3`czDT!>GX+ zK{HoAwePUNS)P?5@an7lFrY2fuU|e=eaWY{%v37I4(D;$a&=!hIuzfqE@l}#p_I~35?_HJ?=dT- zb7#3-VK+hVW#A`i=wT}~PP0UM_2}V$UiD4e%iZuO3zwwqaxUsDwY=F{*%`ujG_xCC$ltbL2;5-% zx^%4#6bKg}YKJEIE}pq{;89c!T}CeH@MbiJnB{~$D}NJ8@4PScAE7A1N{(s8nl zrAaaU56%fly9SX{I$U&EXS$qbtYaL~+}Qn!4^o}_fZoCrh25N){c&SnMTA{NoE^P3 z79MBx$)k#|)foz-x5~8g9q!`u=p;FGOMRtO7hC85w!74CK-2SR7?>;$_Lqk?zHr>$ z^Ky#>g%s?3a(mI!&f#w!f*Biqq=4rclpU`INppU(*xZ#> zC#GhE%?9x)I9aXAE{L(LRJM)`2Jsz4zrr`m<0EdZ{5yC~y~}Ghwpf@U84LG-tkP@d- z_8`KPdJcw<*6NGTyA}z_eB;iaou*z6uHU^^j@OC^G-CtO=G~mL0R_U&+azM-WZDJ{ zOo-5AdT+xPb*5|ag3o7+FK*1c47@5h_6Mq*?59la#8Pr7a;yca+^zZfpzAJQ{K-34 zFZjHjpn8&e;o08Ldt7UpLQ95q1pi8Y9RE6Zn7rkGW=IPtPu2Z4hAUVu(ZPt)RL17s zXWdIqmQ3i+0Q31O3lxsN*8w|a73*TBg8pe}98!qW=C_t8|CO@B6o&Wxps6;|lXB>! z0WNIFa>DcSY!g1;#m>xoPJ+6@7}D`MG1--|noVFTqx7B}m^}3dda+Y^yfs$@Z96?8 z-yBNIy7$c7g5j*>UNub}G$*Un{Q5o(eVgZr5xB}Cf4*n-1^+P4az3!WP6vgoO@CF~ zOTKRU!vbWN?dld4rg`Ie8Z1V5FrL1LwK&NJkZX%Uy1i^D$fm+>p*4{XF`15G1`m3g zPxJ30&yX0xw%%!RGwZUO5DD_<&90vOdZE)Y=dc$Iw-`XJTr07efzW4~mrAnw3!@Ew z!8f-Xvja&?l9g@oSt%HsZzeCv^1Ul9HN)=<9OK}1Yht`%&4xy~o@We(L###G5CBGU zp_k$#g{Pq$2>* zDuBPNck77K8!Y#Ay(3#0LC{0jeSsbD7saQnyZ4)ob^G-!HW!h>$eLEQe{FG|rQ<`! zjBMG}VdQllJ!}ZeOvGB8sBfiyr*PQeLO^Kbzuru zZCS{@r*k%oU~06DeHb|%zgNirR=9CDVInl6&(if;lTh>k&iwOxj|64gXtL27G=;y~ zVS^0h!cE7o8-qTQyZBKUH3f7lR5go3B8iho3v7@2_UXu{J)Z>m?;Mm|)JWo$QRnmXIt*AG|gBdYCp4LSOtifXR0 z#g|McBVK(mqztBHu*vpLu8!5Wd)uHP3P~E+?rBh#O+$1-@?9LJ1kDM}@)a0AJxs-PY zzQM3kGY&#n_eE0n&vBbUMCy1Apn?UK`IdYjIP7dVY~7m<_i4k1RM3mwOg^g1`vH}x zV)@r#@S-qr1>J-R&DsoiG$&cFhx)3*$m+;slAch9JvFgu1beYu}vty=NAD4XHq6tPr&AN(5bh@Q*m?F*zki7;}2jsPq69|C*%w9f+Q>tbW<)ZOOQ_6Ya>p+kzrW`jCqO2-`b*1GJT zTaeXWPj%!K(VbpPB&i<4$z{e%?XDM}0fcFKly0$FhLzqzpin1_B6DE}I!YTD38N#e zvF1$Ulxwv|_0v@NyIphtYdlFOe9McX9n$^qW4V1;y#0e3kD~MZG9A_cq<86f%67fo zuuYJbmqm=%*CJj#ZQkDMMPj83Pq6-g?~o_zmW03eNID4@35>)7d)JpU1qPmfF#e%G zMo{RTwcD8)D)k{G{h8{0)-rvMzM_B0+^l#)q#V1YT%(B3$pWrGKRxcg!=C}}sZ{mR zd$`Z|h}pV=UV5dbV(Xx-9PHKgYDf`X4hTZosnmkD$kGsfmebcC%xu`e$~z{%o&}Zi z@``rdDocRudRWF^{AN#JS8W^f3v1z6_zW%bKQrOgi8(5cphXoX$VmUC#(3{xsBF-Tun)h}U+7w*X$JZ6M>s%#qetyg1c5ZUp8xNS<){7vy(aP=>%(*WU6oPa6c? z2`@%Ygg<1GKHC~*C}|KbEw`ZQnb~>dXnINt8wTO^kIYwWoywNw`1olq0G&MKNjup{ zg(C`S6y}Be^aOS@YvL@j1$BEahw*F*=Db^$VhRnQa*>RswuMe1?{5raCTus3W|az< z_0phtACbezM`obb{rM~Iafbc`Tmq#}E_{wkB5Hu*55qjiCr%GZ>0!$9oPH(sJWvgB3Gw8Gr&FAb?}1}^U-+D=SCe9+39 z>RZ{F!W|{T{YQaD-P2>4s~jj7M9f12|38%+-{0$Rq?RiMrLXp8$|XP~oEdqo)T|cj z%56nA0qGQ#h@-N=|J6Pq``&M!#8Byo`hA6A=J60v_Zjhi{Qo#JBm?5%{jc0{Y-X}@ zj%g*GpLBFN5}q=aF}$Ddo+vuWXHjMzV%9i9?@R{*nB<#BB`H$q@8%F~{vRWS8`PJ& z#b>VsXFs-eGO2EK)I4_EIloPQSjcpul_VJcG+OufB9H$dD{!ncbYC>=n+q>pGT`%+ z>tnu9th9M%zmxL0W!`+9nm#H4vp2_fM~J6iD>{Mb5r>VA!jxyf%KR&|zexPDcMm7g z&m=jb9ag;G$Gse<8CFP4kyD(IWRyHoC*1UC78q+$a6&@6aD882;gL0OF_p^66wU|(mK~ER)KHz*DE4Mg8W1j39--FE%)WzFpocM z$1|`Pl)PZ*?d*O1ChzMki;57gV#(7x`QJxB|2T>YmGGJ>3Xe__pub6Me7 zY}J`QbgykZvN?@>5*OI!#|BU$T*GR!9fGp2~arG=mnP9=!!+;Cezg=ggU~ z-I{5sh_pSWlq6(fFlAQAC!0pHm1(y=5auR=%eTPUb#`-s9py~bG{2?4Cq6tG>r;)) zO+7T%*wFEkjci!kzGew>GMiPAPv%re;^EQqq{L9~P*e6gPESx07#v~x3O&1cZk!e+_kGEjY+I1BrTvgLboe9m1}p$OfdSIkTz z@70y^2+jOB<~9{F@k*(&8RsZ)t=?KuJCZq9M48}c4Gav z&raL(F*b&hZ_4iSDPbkEe^gcV;Anlg$>KyU|Lz9Df2A$l-bguE=&7VuVK;z4r!>V` zz@vbAK+*Y6?01Wr1bNg7K4M_BwFbW6`0;eS%Wg+<2BY}G+#8n}ALUR#^100KRvM^? zM~jYvSlwFETJqCXcW1%g&iUpa&zlcsB~_8H9_Jb4Sx-J*@R6E`>Dy=2H?7e8L-LdR z+QTm-nTkQnA*x3knTIcV0H6Gl*(=>wt*FNcrm_ZOk_ogt;MUczuz9YgKDgM_e=BD^ z72r+4v?AMu>^>Lf4oqZ_n(=Ht|6Dt^`e1l4MJeM386Xi`y!TRpY~1djc@Hy^M>H{} z2;C0Lwq+joK~LyukmPf*YC-n%-==%2qTENRnu;y$-=tn<%AX(p(^AnK#ww$j0hSs) zVjO!~d3Y49%5QDzXkpse>r}|^RSzOD*9p@O(frL+y|ndby$lr-c!t71oA;yMo5;#C z&upsSteHP8Dimezm`O4T1Hhg8@g-7tF?tWibPo^FsUr{FcsGl<$eyV6^tf%WxG>yO z#uso=k|+aS;K}JFuC>3**iBN<@BTv~y-a{AE@b(4@45H>cV&ErG7*-1SS+E_K_(`i zY^it)TTBMY4HQqmJ9l$dbZ&G#h!-AH+TTqm6lxDSHqMHTaY<7+!!#9jA1#-$WjgoU zQZaY(0=j#B8)2w7tsZ>P?R8R)HhX*rJGYrFbp2H^g6%DB$v7;pdsPOb(j9o@XJm?VwjexAK`?q%H zTo`TEd6p-E@!PbcG@_`8<}d`2qo1XteyLEj0mYc*b`oHjbybEmCa@1U6 z)9rDWg*J86bdXqN)<}WtM!%_XF2)+_S1y(T)kCwFHM{F!RIN@Yy8uD4{KVjji@n50M(IN2YiwzHXq)sra(eAD^ zA%4(X3M=)EOqH~%hz->8>+03_Puj!dRy*behq_2m!^-+HQznytz^rF!Jn@@CqqmGo zuPXLm7p5QzAFZ-ZeSg{C>?BlNqknZHDk9SzG4`k(tVNMtF0>U5*4>??Jb{7}4u)&Qk9 zEmbG)aoy7=g3|TIdd`;Tt9{rgMQ1iPVk9^EHIhzr{gNWq7g0f!%nc2 z-rGdl?$N2GAWwXgdA8~^6#B+{(hF{ZpI&Tkn5Kwu^u5k$AB#BvR^6yHh;Bv|lBy4s8S;d3wD&pfZt|6AlXa)QEDRfs zon*5w+st|nax&Taq|5rRvbvZ0F9(P&Ul`duGAu}br&Qmle5Tnsfk`P4NrQ6BV|GcS zCJPMav;T3dEID4YMltg>YA2Wv$Dc&zq{U7{QJvSg#3NJNA{oY4rc$)BlUlz9ZJ)*+h>}St`;m z!A&Gsq6YJMSv=!Sh!PrQ*_DTfnRb+SC0gIB^ z0G8c^XG%M9SOhuS%zoUnInyXmNBio!t5mvR0sOehp2;a3rF0h<^h#J(XHIE&;4K|* zf(ir_2O@r+l_7E}I%&%XCW)@8@-x`$TuBUbAF<|*uDUL)`Q!n29zr0s)XJP9i4Wkj zEoJqpW%Iu19jO#GJD^rME-%ycxP46U8OO z;%@pI=IKaGROXr_D@lBb?*+#EBA@KTwWr{ToZ0~;s;xZRIZZ@&w^J>uZ!#Y`P%~`!a`V3!wwRNCZKNKE z-`9=5EIwNCk3eCAzvw~;W`FK|c0uhL{!!MTrVzKSO|-ksYSK5KQ>`=XUf+UnL#jIg$+DV6#`xj3>hy z>pXi`xjp^krUnCRTR#O2Z_?CF60_09Tu^uOF6=a=?#1p_D%#^UWtu#>syb?U$FHpm z=I2*f+0AerC;l%(T{b)eT#?=_rxgW6>;;rvOj9A;5+ssY5&B~8$+cFT&bv;pCTOYJ zMfuke`SZQ#$&G}jmq1a=YYd>8+L_gm#_| z=X%HBULW;j{xB|M*aOKGPLBS0G3KHJMAp&yq%r{>u|fK=m4XvY9-6P7Y3thEAu+Oh zO_~+eq}UVv=)!E2Jgbat7TBa!qs35R^K;-T_y*KvmxJHyN<7;Yi$9jJp_jV4$4{p6 zrB~XBbuNCQpTbx-P(G5PGdWk65>B2_tm(;@OPo3En2_@y55XV%@2nBY6bUY!EI4x@ z3K3SE`O3Xhx8ow+R3=>&#E0W~{A_Z`mt9ojGEcU$z$(+!g}N;)Lz?TL7+vT)e4_K9 zu#GK9JE520Y&GWV>19(l2uOAA=_$eo`BjpN>27#h+1xun=@WG0x;Ir~>~6U{k=@E0 zK_yuS-_C+NtAIn*1^|6o@o)#wA(euSDmSWqbMH$#M$!sJ{9LUGaeK!WoWL9a|> zF!MfSE{SbNBYX|-jG1i+G{NTy3m5CSTGz7vfdrp_1%57|-&v38 ziH}-#yjQr+w}$zF$gqoPB4&|XMEw)R(|j3^^Z90ib;+3V?b=5No!X(DO2yhyb{H$! zC$qVq#cVMHxPnYxm|o(yopXMV`$!$d6y1)v%iCitG5DaQ8+hN*?4>B&WvjSB4_$XQ zSU{#v!x|Y1sWqWy{{1W;a?evO%IPBd-lNS>Uy@RL7GY()CPql+38izdGtaa75z`dC zdJ%um=R`N9MkW^s{^{Y%Q@=Fnqowp8DVpc6#6UQ&`Qv}W*B4?5>;vesY}mF}bI3MZ z>CuOC>_)!+jgu^?{$nzY{E_!?1EHZzU+?)wD^71U!>zWaWO*7Goka2bLd)7OD!O%l@)CgLsQKAmbk455`mW6^la)>ozmj0O|<2g&fape(4I z6%8y9xgmSdz!*rYyQ!(yL`iqm>HEs^-3>_*L~e|8TzxB>_rD$}=Gr3+TBDtigftT` z6cI#skiROFc=nB>|7wQk8b>_xg9Ufz}=m5WL&?2cLL@ z!`aNj-tYIlO6QHu7k~IGG+D@@xC7WXCCIoxuZi0BB5@)s4jJ50oBoP1?jnfa#ivu^ zP=p=+J_NkTp`fV5GzA>oTOQ-MdvdJFznL>`i6I%%%k_28(Wn-c&3<8Pyt*!74Xvbe z@YK`w0Kof6XEzu|>fjqBe&je~s*|Bvp$7oO#|C*v<{mhvR0= zUkv811?zL3FD+)BUv5*M?%q|NnN|=FKIjnmQF()nY1UB_KI{LF6V^lM-(N0Y*!v>V z_I(fgpLkgsa@+#pN{oJcQEcycE=%*X`@@j2o^UB4e^KIZ*0Uk?+Ff2u{wDq(; z7JgJ}?{tW)bN)(i^narR-4Mv3NZ|pHsHRgK-Bv3U_s@YgDufgpvB@&u{@uU6P}uu7 z4ghd&fjzdP5V8G^7p~%y%!h$@1yR0Zig*RQTKhhcwYZ3;E_E(WIeSgx!rsrC;nK>Y zFm@7{C)^+F>=#`|vt5>IdR3eMnWiKu4U8yxZ%VNaHC*mW?7f?JlL#VgWw6P5dcHKt z25OMa$e1hTl^X)AMb0GnWv_|`-DI$y_BPoB89;ig8ZwH%*wbkDYz^buAkE+XbE8<- zjzd@)pbB&2!W9>a_Rspg>748fCxK;q^D)^5qEq=c#3J?fQlWjlH-E~HZyNeO%7Z$j z6X%0|S-){r_-_eOMgPw^W~u)xysknhT`mqM9uC9wseN&%J7N{62c4Y|^j8;g)9Dom zjO|H1jP!US*Y%7t9$8yV#{u_jij5^-F%+M>0>cq2BLOlBLY@a)p`(V|rq)HVuyRcA zPCh$wH8YEYKyPRUBov}o%K_^=>M46mljQ~RBpV85pxe1|qR}mD8hx1&{p~OiqPx%j zE=FYFOq{s6#UJ(D>+_m0ET)cl(nnkzv(v!Lx`JioEhLjBUsyaos3^&0*Z|CdB2dH5 zLSQpPGTh0|q}0G?|3(luzh?bP(OINlXQ7T8CSeWZV}X$>=v-({y-zX?`1BK)%mUAefkklY4PZ|qE%QM6I0IFwywW?B+U zP(XO2lK~iOuMsLBCv#J6GKo_Z${^fINuOj4;)WUv9ZB7eOBV4I{k0}r=~M0TisJrS zBgBuvGR>a22jhj#XJfI>*dRyKq4%hMpCgWjV`}a$)GRNG)b`1yQ(b1HOm9`Ov36uv zyHt1Ek6xew>@01E*Xw{Q(eqXs6BTwU*>Lfj>Q&u}3{jej3H4|sgXt7QunEuZm-wXe z6)Rob$Pd!r6?_5c!yMVfuQ{w968zg^cS)Iu0eQU%lwWA_=kxzN)jI!b!jY6U1W&dD z|AKf?;e5svo9yXBjmw#?OJkwuPn-Om1+$lnLEp#{a)bp=us(E@NS%K`H$3)F9FV2k zK~#HwQI(jm_TUkfL?np#h)ReSHs^S^ZAcyfE2h59th$@2Rmlt#;&efXE1$cC_-jb89;J)JU_jT#!W$uFztQNsl}vc@nD&hw;9OH~SMrIk zf3t_D@0CWSYR~(Mi?C9MUKD<$~J^yso0Bvi# zb#!Jl%fjFa7+vh)i}6q2rjEdaw?!7bwso^Ls1Fn^twYCN8A*A884pAp%po%2r|3799*WuzW_ zas9PZsgkFauO6B15AT@Zt#J4{PuS+p~b{~|d#WmS|@%}dI1mVnAoq9{nWbcD! zf((5u`EKM~pc$B7%zCCh-8@B(jizJX(ObTT3qk;HaZVFWc|Zqn zn{qMWdIFZ@N7mu=5@KLcVh}F0h)HgVBo(Gxr-XMM(e#}bA1wHan;0K76EWs9=B$=J zjP5?4u|8M-QF_DaifqNxZz*@o|GrVBF+-EE>rQ;T*tM>L`n zblGx+nGN0B`tpRNit4veMf#i5-uf@UV8W;AD=@Efe5Q|Q;i@~My1J+z6>Gt^57D`2 z1&GnnJcwz>|9uE$7?FZ2Q0Sf#APAc?Ka0`uwrn2X+D_~%y zLP(UKwTU&)7O%s*ZJnFWosU6GSMhO25V8e2Gg?c?tc_#1GJ_Q+;q1G9i6_-2tFlDT zgPJn)Uc9Z%ng=fwCMIU?#q={rr7BJL4qxh z3Lw&3YWlie8gYEC*Q{2S=XAZ^r|2%PShMY|xV@((p>^;WM z6ry~r$0DcKeww7zE<&l};-9#=fMLiVMq5-)E5sN4Mermm6tv1%y=C!gnG z=!1C!>I_s(qjWvY3Q$EF7J-n|YkK^8r_{E)J;XM<-pmSCzn2&dkSsMO#@_Jm`yYo-sF9W$Sh|z6T3jubb|py% z{av_dVe28&XYO^P%49(96s3i!6hv#e*`xY|;Up5SV3k05pK`C#c$IW*TE;1oLA7l* zy}?!yGr?Py`vAas`FCkO-Tn0unvcC|N|-Q8%J-b7VFQm0aMS(S`1VFm_l0A2#4dDS zX2oai&4(+>!Q{8H=^8viOXjHf9ww;le5>Qmqb%5k=6^m;mU+CT0=hXS!+g^|YM!I> zqXDdbkKC}4eaZq!Cap!C4bM}MDC7+9WggxBy1VIoYc_7C+R`-`l{Qzkhns>wVr?-r z@YK8-{_Xx^PvaZ1kUom%CsByB+(u z%O_q-L|GaOIx-g0O=x%~9WEVy&aFy{j2{U1C;D4{B4J(sIwbGXfOYk-bCU{+J zxK}vCLr*gbum8T8rH~>8_?)q{=q`r?ynpB8K4CIx4_#ija`Z=zz8;au72{X$In$5O01$^wPt>SU|(Y3LR z3-(vs{xHO-M2Iy&z;U#otZCC};%E~Q(8}JL62UVNt=D7htEktgE89BkNTpWYKF@pw zp^A{OU^nQ&a_H|!o3kJcHY2uE4nvl&*D1Mwb)?(*I^@)9pPFK)ei(o6t$!7*Mypha zbh^Hk;Q5_F&Eh>ICJ91C;JBD0*(;7L(%9yYmb8v>CPAn#@hB+XUEwKz*Rr)2081PQjXDHH%{m!fU` zK$%xDsz)sai>7GmM*Z8hNY?V{^4$vs85UD9H%?DQ(XbMrpApwf)UQ+la0(aMRVqbDya;Nm5LwPqL+lJinY zOzGtG#(_$)he)+TsZpVe;I1rXOa#Lx5Zx-d+;T(&?LBCjKrrT%WhW@HWo+!=t+**~ z>ugl6Y>b(#EEAGoFBl>1osx7tQlye?QYhr1S+;Sag3ieuPA+Sp z!B%ZD-~WnMOt%iboGD6%W0nytl2tGEg)PRR5f8A$C=+kJzouhn;G_Mb|9)YnKC>Y+ zm43lUC9x1I>^R}XgPq06O;+{L&+Ubv@_~3>ySkov}$R}wO`IvxRYrXi~511HQ!^`Q+GspNAXXyFu z4_@2-*a(23w?Cn&IrLf6}%VP(}^G_`u8d08$mXj53EE2f;o4(t;A_rW~ zo{Js@f_}=j2>P+jA(-~EcJ*~mfC^s1NVR-p+MD*0v*tNQ?TYOlughH_gqW0@Kfa** z+Q!!nl7^diN~Bky(!h;EwI zz`C?F6H(Kg$#6X7beBU|Q4QWO73D=5mulF>SuZWG>M>L*uimxyR~R>EU4s(DI~iGD z1*G#-p&kD=imsf&ga_JETo4$w>>F}aced0)T)^Z_ORg~6Vfx*1hlY`poGp0*yfAsh z?^B{sHSmKD(dTzve{SyP2|S`=ePx(6yhKU?FJj|O2m}LbY*kDFUKJHbGL>WeV*3&y zA=K>!Tz5QQM&u`z)(;}#bvGZo2>_DA38tRK5~Vth7?UG|<~?jyUy|%S6nq|grYcV^ zYBN%O#K2#2&?RcW9lb2!_U<+JYIq9c>=9`;8Ug%5W;GD{hK{3jTXRTwtG|sYy{W=H z2D_2dh?6lA)xHQ$f^Y`ee}`<0sC{LgQc^sD9m z!GK^-vp*8a1}ZOTs9TyGK#_h?Ez5=D?)I;$)x9A``Bc7WFw3*shXcdbNV~wrNzkrv zgWNLhHCRxUe@vrk?QM(N%3y`BHabyPS&F!)yE8POk2rremF^&{V>If}@RM)h8_k&| z*%J4;d|~(eo2C;}XD7mEg|pS}{Q_=>8N-p>87v4lWjJNn+mN>vWyi3w_0;3UL#e_r zWgS5qt|>j={{3K9&4zYCI?GDat$QHbu`ak#a{v9IdOx~+V(^w&+CrVl$I@Szdetd* zdJR>Jt#l~cAdAVP4SM#a~@HCR!$X8;aHQjWtZPomv? z#tg4O?e2*kZ9LXoSkKcOPeDql!f{w>YNMy5H}RP9;dn)zzJG*snAf^*a#figdPyDG zuOgOnoeuM7tTP~ZQRlOA)>sUTKCXrj7`OK|QJ)vDs_bvM;E`lXX~-0vd7PRiEdwYr z-2f=q)hyD$_r@ELzuTwi@P%8C_m!ST*xK^mM@P$l)ZrMm#|v>ZusdG!8^Z?B@=#`6 z1}TpnX}21KnLvIxnS1E+viF)nzTo*rde870eXx(HNuN z@x4B^*lbIBNrXHfpqW=xe9qYu~pe&2!hrza2UVm+PS z*KSqiGmlTio<7!~`FOowPcL_5re1%0aVVG(wtrP?v;4XN2PD(qTR4a77YeT32qKgm zZk6;M4J|-i)FM1n84c^i~ci3y8&rA6%jbC z%^=+9UeaCV0?nJKA(2}myii@JV9}EG+lLfeOBg4?mxTxKl`GxR)Q#;h5&q;E=<`pM zuJI4tHN#_Jay@^-xC{A+bNj&=6m=M+QKEf&@x8_3=A!4)-<6tAhYf%dC4nvxnIp1B zZg#q3HJ>*~rgCZWk)0(Q=eM)G(#_S)lB#^1=SmN~Wlao`0oE>|-skmjB?+7QpqI~T zLLfBOuP;}N<@1r6nf-CINImIBLCM^U*-N0HJ&JM)o2Bp5dLl?P@*P2Ryq6!1fr7p1 zW$}BB^s}|ngY%DKRLJJYOE+wrQ9#a$@8=H2>EVvC;Vi+;J2$l6@;HprWvP%2F(x9n z>^3<2*DFZhjz!uWS3Ay>C@~!%borpki7Knv!1{iam~WXVxKn9{bZppyKYn+vKVE>J zg=OKx1Nv}kvn^#>A76oX>jL49Z@lsHGc7@oO6hlT2)T6^DOVIcDpa#^+c3M%t!$Uu z_ULm2_d`gP$VdQ#iLkHaefVV7OaW{O3zWUg^@H$@E~234x9HJn{sf1abgO#Z*E;l0 z7Yvcw5rA4hnQQpBa!QsJQvyAo_$6-L1d!7}=_?qMz47R0yf$&2y3+PYjx$n8ev*Nm zv>J9VL&z>N+rU&2dqwsMu(DRD#+yo+SpTt&XL54TWrgNo-DA&sCC@ZN;zFklGJVce z+omA3a<1DG8%PXpy&flq9hj@z+2Db zEwDj_siP$4DF74YFBm_D_20cQ!IFlA$4Zkt5VZJKMEl`6jJJ6(<(MIJ#^=MKiQXJj zvdxD3`hzZkyee^gI+gTAxn~{o6Gj?NsEO+hUR^FzzS9yymCx zwG@Ki=+5weIYUoih4wjv8EM2$?J6t8%2VFjuiSaQH`RdX%QN4NHEm2R5mrc93Qf?k z?m|jmJTM(?|G>2mWk*+D@MH8ff?(G(R@3T7obJiCb=-f`<{LYa4)Dog>$z#Wem<7G z`ysGbuu62QwPSsE{^5P{yFlvd-eO2&5-olIN$mGz)a zI*N>m$jY92KNfqcv$n)p-}3X02htl65PS#Hdq6UtKzoB$t6E4W01KC+>VB9dr6Zl# zPo1q0I}RhS7R#yFgfTVvKMH3)wLPcCl6c=_B3YWp=f4;wOrzxjvC>hmWqq(wF$+`* zm9Ti(tvhBuvcpSnPH);F9DKFvJ5mZQ^e^}31h;6H(A5(ovGyu`HN|u&R%|&N74(yN zToG45HD`Q(KYnD!R5uPvL(TP1ep>0?sEyza3hEp2%4rJO+#5l;`lw$nc4Cs9Ga+u` zjZR@M2-U2+zA^Luf>zaaNZhA^=@7rEXa^a#&byx#^8uRP8RNdbEC?To*J5|+t>xPU zTgie?tedxrA3$Z|0# zIC_5&UWnF{8k@H{%`gmDUtyYa?S4UIbl-@TeNDhlT7Qb!At0_)UER~yiWF% zqDZCBYbFU4)Zb3$IP6$kr+N#^A)90ODoai)vwgr47tzk$IK!%&B{Vr%SJqc-iC$eW zN%WtIP(rJ8;^oauLrdlr&ylAm0EBYLrZAM(n!$W5igi|XtE2{rxDy@JF3joY~f4-?H_HZ#J zcKMs&$j3aYKy2Fk7|s($QVGagBQFOonh_A!oaG^1X`=KQl&V|Xx>Hs|G!@}n2*uhX z9vbgZ^|L`DOg%>m>edzKj_S+?klXTFLz5IJmt{0|Iz>2_c#>@)*3dn8%k^x$;ZCSP zUvu(rP#g|Ya{hnmFEh{)RN)@Y(UdEq5K6}M(dDlchJG9;J-v{&EQzL~V; zrZ+n$eZOtk&1}%dPvFNPAG(~a4|bLck(9FP*U&!a`HXgGdDouuvF&+N%drHo!%8Cz zO|kZxCP@=WUS6D+PS$-e+Iv&V3VH}wN(MX!ubTfKxko@Sr2XpEG_FS z(Rlpo{k=KB85`IU&klR0GbzRq%D3p|nb$l+uhkdkf!`bT%jQ_Kq3dH`tEP}sn+A%a z7++k=athD!xLy2|?Oy+5^@bm?Vl2<5IB3wzUSw!@y1nSiQj{o5>21KG{+Fe&A!uW9 z>n65#kiye#ysKy|9k0m5*#k~dD@~*xa-E2Zce}>smzREIOtEGSRn0UxJnCS}b58Vh z&F6EsY>0)w$So=j!1%&ni)N%vGFWsrO2|xS%y0c#@b9*s@xO(|%#9q?LE;+)t|Z+3-9Gj#h3o-{DIwOnbH7W4|8`836|;0NT;bp15RL>1#uQ zy8D3m-aYl^(|`J+iSCH|NvaMA3v+#%oE^ke`Bo?0Vf+YNzs@AMgQ*PBlwtI;h(|;# zVi4}fJU}}lkctr@GWCaH-t6in7LgJB!zLEUmgFbmCF?|vw~@RGxjbS9i}`XLaX~cc zqd5?LTq4Ey`+neuIL-BIAR})g^V7?9vhG};J;4S&tPX+pCjE=7Ar4G=?OJ^A)q>+^nL z@RK?-Bz??KUBWKFbptU>b>4&HmuG5vIKe0T!(YB2Y&uwGpnZp^yrAD)Au&{Ae_SP& zz{)g(_Wb*yiFuy}v0e6fg5v0UL^QXnZb|}V6$l#zu}sbLkCEL`s}=-lAIUKdCgd8! z3@LY;@5l<~x0%@45KzHz!MDfN0=16BF|-$5j54($Hr^&@w#(EUOz`h==~O!Vm{aN| zvULk4c{eY{mU*LWA6o7nb@v>Dq{=50bbQ~TPl~lKGp0r4l~a<=H;8e%3Vrw?hh3g> zZn3_%BkjRoq1^mZx=odPY2`p}wQrhPvpS{K4~Jm&rL#cBAC<(Srx08Y_ELpAk@{l& zcAQ-Kuq_$1TH{#@4yG{jz&ROPpk``K@1917ls`a^S|a_KvYG?m!E2Lk3$^p%#JgtJ zas?HWgYgQ?<1bK+d`oUuP25xI9L@D;-uCgk-yB9sS$$>3LlXY@nipTDjqH&XXXn2f zeBmg!aNKT!vWpU>%jcZu3;UI43pSPNZ^xW{&NQjL4x<^S@kgqEZ2?boK!zU2qAT~n zw+8#aE%t^e4s6_Zd(-^IzKwIeWL9&F;AA0 zaG_C~%J|Ypih?X*<+3pzRKFP{f!*F&XST1}9mN<3S{X=dFJE>3zA{zpH=3hJ3y@N5JBV94 zSWb;!*Ef7)ak;0=8DDB@1XWuM@mqZx&JP)UK_jQM`*onXA18)Sw0Wchy?e(fM-;=p z5WiS3;y3|QgRa6sL2<2-UxC|Y!%o9us4L^f<>8c9!k0zzBxtQtCPricRkBNxeL(^3(N9{c-8J!PRs=wO_4k%W?PkNp= zFBX@1b7~!ZXnu4S;`zZQ)1$hUed3Z%G}a6~Jko3T`1Jb!fud&YekJ?5I z{wu^qBIe>Y_88iYJ8yv)3FJv@t;81phpV%WYHN$S{cTGNE$$A*9f~`&6xRa9-2%bg zr7iAGaEh1WEM#=l=ps>5RO!;SNy#@VC{VsZR@`m z@NE#~$Uek8#{vB&`6GV2jp6 z&#=`>>MVqw`+o3nHDh*|N|9C*uUpGEX3E6>+p zLD~qfDDr8F#liEGBZE>{YaT_!wdLY(KwdR>xxFjouxxUE(R*XeM-{;dI$fQeX$07l zKI#cWWk_4@X_=A^(>-#x5zTf!nC^8LTY*bfmj^sZ@B6i20a6h|60liIciGI9rz(XFDHNL9y8s;_kD!qYX= zVH`W$6|Vb+h1MBH$7*pS*%n#ZBr3XFpF07QPMTB@9@0Fc!(Q=5uNiAVxe%%kMQzTV z;S%@A_H)uZ@qrWi=0>Cg;@qrMyp}mc9z6gT z$qV1+mB?FWYWT&}!y%Pky&vlVc-EllS#_evJpp_Ie2!;Z-E>P~^iv5rq zUs2taweof&c{Tb>_!+_v!FP`6w{IM5%6u?l8#!J%K`$4bvENHOU0t1_EW-a)xk&}2 zYPcoau_{HX*;gBL!mw$ZvB%ES6s@bBziOxx((n<)FH4gnQs6{wjR>j206yS1ii}!Z z^qXGr@>`G_abe7EGQLEZap7;fR z_&d(i6`lltvQ?flWI@R>9!(i`Ivvl_+HKz@AcmUa_uPZU`~U6JyhLh-ABc5$3QXMq zhwYKoW06O>JH-Erp?=7TxBue8kw=_w$ai}d!{en37X)m7`ALNwj5sxgAcF7oUW`yn zc6~>FV$>?qf$h@$_Q`#}XRpozd{+ar2>I|hx8OXuo>E^GaK*N4)@|E{7`l5xE68o7 z{_QFyJ5w8UK0HcqG*#?=8l)OdI3lT+c5Jr`S+6tm+-cCSDYm{B(5{V}{7I$JPF=_! z%cny|3Yc&DzIlcS7@Z!20{X| zU6Vp<(i?Ug^RFpIN5_}JbB%UPqFzUMhwJw_Bn9rCh?H*ZmB*70abLcx#nCN!5r-p= zOz+~B4_E3z0jP+2FPNj}(Oh@uM^s^-A6VMCMHmfv*cDYWBj8z%ZWsX>1VVN!IcvLq4{Bn9#&T)fkg$NW4I4 z#tscdZwSDUuGt77D@<4s@Co4;CV_Jkp6wIZGFy{@7gQu`g*&Acwk zKL21S=@(&FZ>RaEe&+LGV=|l25(`<^!{qI1@Ms^OO>zYK#rn?^tE!cSzL}RDWyLp{ zO`1)$@IwzrOK;!tr3nR7L?gQI?(POzphk5?^UOs)#G74gA2;!gNIfoy zh`DapcDlZiR)*eh-+fh+rQ88X^JECXOo$$H(zzFtW%MYmRTF1@b~31MT6*CW6ZYMi zY4VB_oQ(e06gS2d(zPG%{Jk$VXhC1fxIY|fRf}4vw@A3cxgqq zmIOEFhITaWi4y5>z>o5eJTh#O#G|Q|6uyZR($i^MdYiPC%!|Yq4-Mwf7=pmV1UqY^W3-+d z35%o-8(olEX-YSdiDS4W*sWH^s6ogrMIkKWz_GJ-bdpHJI+-E)VfgLGxIVvTdwL{x z0;JFf9xok}ifbwMLB>J-biemuJ-FELc70BE0innpgy?S%o_C`NEJwW6g8)F=Z$}JE zD3|I_o~$rPDoN9mz9|U(PLfdhc{)yfR5rnhjJQe3#~gJ5y#l~#p*N1DfhVC}K}+pm!Ofm%p_+UzXw&LVa0R zzW0#@q!uy-2qTH{m3%uAx^PbMI-K_U&2LL% zHn(;L;TdO|W2`vmxV5=wYjgM-z0>ie?nNjvuS+dmvV6Ec78$C{nr-nt!tjIC&Qvb` zIyHDLEj@s<2~Ng5m~9>LxO1WQr-PjKamUCCe>4z#olh*>;>bZhQw7-m`QlLWSgit@ z{c!;afk4+TSyr>qBg#463l)4L?76ZrR&{!RZ}_qudkL45@X(&n@bGYk9g# z6AU=q@a?;$w3NxyA2sF=3v(#_UDU^VAHsJqO5{S9F0~s9W#4RE~ha4g9(fMcVSR&^@kB<(o|N}m;AW6BTOH3VnD+hTd5v2@ak|T?QZN}${pnZEQ&wInAM{iL?>$NWl7vtO zAhQ~%w}ZO!@SW8pEn`dq9BNswfM%J-7hd`O4n1^_$A*%e&Y?(pNfum*-*}I!X&EV_o9uQ=F*7ftc)UNOpAiopNR;kK zu&IS+JW4a}ov1F_rI@GmRa-G4N8&z)u|;jQOuGj?%86X*!c>v6_Md-obOCK%rRQJZ z{%moVDc=Ww<&3V@h{JqcdM1jsudaF zparNgnp(GX(KK@zINK?nXLtN!zb7Ka$!_M#jR_5G?T-vbqDz}zXZC2$;o<~yLif|I z{9uS6oO(*@i)Ukw)Jp4EerO_sS*;)CG|J25GA{*C_tp*OS^;7gP86-9=HIjNh6%Ql5D(Lhh3jj}MaY z@Oy?jTTjVaBY>T!ke5|}KZ}GULIFqvUkv@t9ZqB23n<|A*Guq+ITt7WH{9%Vz7m=U zl!#48GIJ4xHzqp;&b-kJn%GGNd7GRQsEI#``K;WA+*5*T_oe^wt$ba`f#mICwTIp} z-TC0LA;$s~w3~pc=LjU%8rk28nY6dj%BIe{{o-#V;5>@JVnOX7o&3QFYd?U7rAwPn zW(yr6p_{xzIF?Can)2;8jz)KMKx3t9|GwP`KRU3AZxS8RB-5(fR#4e1!my)XJ7Wyb zi3Rhw1gn$5^7#6kEs)Es=E%jF9M5e#&9wm_MFKXqYlhJSc%tJwF+QwsjW{)CeU7~e zO0EiJ=ni4nbkUYA)87h8?#sXT zMgjH?e4ZF7Iao6PqD-^&73O~G+6!pu)KPs#N2F9km0JGAU2sNSkIs*X(4sl~m`dH~ z`GYanNdg7PIL+tj_Q4&K)O`0|ZN9r!*4QY*_nLMBbaB~?`%}{Tb`m&v0bdIvNfR1an8WnesE45>1GmMgJFRhLm;*$`=}o zwoxn7Js0VVZV2o$wMyZO{J=W8F#7U2UH_&aL*giLt#Abpe#De9{C*f$%A8H3UY372 zbq^Nd!_=}~2S%`H%2F{yrH+#~XU0W?UbkH>(--NR$zgdsqsLQ zo8>U(&p&v3xk@*kBi)E*O@PP@2 zq2){FM|GB#!!w%BuDQwVe7da-k&@K=FA@h;E)$X|XsaLD=R7lhg%Duy!0sLApRj2U z>eUSgMtIXDfy|WsRE&o3LUKV~yFno`?<0D}sm#x-r^;tk3McbBks#pC5F5z^Q0(aT znC=6+V1_hlwCC9`i+`)+Q^9|?DI6eCk`>`j zCZ(l_oV+hFuzoEpU^HmW(%yXSGQM^uR^uhupN;)It!Onx)6iMCW?5HdRqf}b!?@Yi z?!-`o64IECuuer{j?A~)%;qhgj*TU+?763(f$Yp`Z?*l$i9 z;r93ee7uw142B1w#t$^BkfKN38uABgigo>4lT@U&V?7f56cRuo@NF_FhJO=hGU{F$ zWLv058qVxQM|xdT86>yRX&nDrM?(S2pf?+?b$vaAV4)wb_^hW6C^%FSI8^NQA&!Wc z-KZJnOX@eH~LYp~SKG?(pqn!IBZ2 zjs2&7ZoUPmmiyW00!jf$r`vAIUmyD+baSPTMI0I)@Ypk0fjmU>XHR4TV&+|f|M6Mp z;ekA%XLFwR=h-0!ODVMItYd_!QP^d%kvP@y=w(J3oZ1Fj%v+e*T8Rw>P@e`0COuct zTbRxJb!M~F@ihZE00Ezlk)>`LOM)j?*es=MBa=7*-*db>8v5BN@&psoT3LDar7;9A zfh`nR*?XLZoFE((RIDuKa%ylw%mm6ZTdaLwb9MQYn2Zu}lHmG!uq)6eAWqeYcDi z0_thV^gW(Nav9@8=r<*rkk%LyJoDGliu5vE3ljlA;U@##cX~z&G>i{llLxyekvQ==<}2vOg3k^3M9(w+xqADyF3}{j$X* zudu3QlR=XCLub;CjFADaDlKNGINLQWB<_MYe+yIb#a=w&o!!x9g#3`F?ekK!u}QxJ zGpr9Qhk5R+Oy8ah5#p=pN~0v^=ZA#J;E)}v9ri`K+uuLUiK72uu6i&lJwE0nVEy#H z!N$c45%S*I>%TwjV>~pR4Nh>DhtgT#&L|^}&BDaWisVJ0b>2<@a&|H95pX_snBms; z34Eh5M!zeM0~9C0M=lLy>kNTRqL`~i#&EQTs!Ika8CMHlH+*7=B4X>WetD)|+w0wb zh)FB#OeoH}gD-WD+4cE{^69J26oQRu`(IMpGOvLGq|PKC=Y)S^O$S2zK$xX#)Y%a$ z_Pw@(2?PO|yvYX|rvrIIkK0@+%*H9^eNktcJE`nlt}%;uvY%!TP(`>p25afPh$bkM zKmRt&^a)Ul&b8xLZ#IxNX)6%stsz_KV>|nZ5H}Qr;5IIR#-;-7eCAvH!hZeF;M!%%4yS>mDyZYWSrJ9`hgnOB`o=eV^^)I4L|C91BY)m$8%n+B zvL{a}TavO_HiO7~P~`!OiSn0m-^V8RS;-uG&dl87d{-w0O>-~;)0`@;_3{hL9rXG^4$`T(2dwY48vPhHaNgWi` zESj5W*BE8tw_#$&PNx~Wn)5_mM4TU?VMZhZPQ*;Khr8?>KX=bC(k?5$>0FsrfN@Ws zhJwEU*s;b396`(3PWy3wHA0isUh>exjA%x6CD~dN8Qa)glrmBpIvOdvLKK`7kUG_ zmUpEu9uA00r9GTjz4C@2odJ4{2WXEjSfh;i0Kuh9%}gqlz_)jEU_?MtPLRu6r?Y*q@VSg%wOL=N62y3MtU~sMp3fntUleg zN9A1#9brC?H@tqMR&p(=-od0g!wyx4#@!gJxD{YBxtf);Poz|`oC$b}zi*(3Vao3y zUPnk0K~M?<2WqWznWS~BuS<7A>ylLeXk7=auI$MM5U)S-NP>E6Nf(#$&pl|&N_J7f z9!rsN;w{;f3n&5qd{?uPcAD+;cf*XN6vw%^1zt64vdKeIFUQ&(i}UZH?37&~B}Y2h z5j{_g167?$H7h@zBFkF9MGlfUh9$j9Z_za8yevK#dC6-d<}GU7v-x|(j9G8yCWsK` z{w;3zg}q^2rpqLj9~=$T#W{E+JKi5gZ;uPs<+0KAp@O3`E1tY0%&)~pN|CuWR`sf7Gd zohEh0*l_Px-e8${r{~h5*#KN>Xt1KJ>C);cYINzi`aDlw)^da$C-}de*!!LTrz`u2!T?o!^9tQl zm{-;pyy90Z}wN;HdTO2XdgN%Ky1^R)uYu71RD0PzEbL8s1wNKaHPbD972w#ypj7H zK192NmfL+nwY)dpLB0(3DAX+FRMu|<;g3g1-Vep|VJ-&6Ua;&?0398MtGgsnq*bv& zUyQvHjW&sEJQnphndaXCvDq?fM5J0hT(QYz+2OyAP-sKE)1TO|c>oOv4=m{Xa8;vq z>o)Q$wDs4%)XYd)d0dvh^V*w>>_+#h+iarDE*R6;uT$1MolPL7aTN=EH;dr3TK`>( zvE&+FBP8yaWpB~C{Fbx8(Z%;jUto0ZTTsL6VEzQn5uI9>V=PsO?(d;|1zDPoCKB^r z)mp1LF;A+lUP`6swO$YNeC||Wwbkt=<1x+L#O9brG$~GM%iiBF55Yt-5eY6M)R4^X zLs}VX>7{vwi-Y-K&K%K+{9avIWwAkiB_3G>C8zyDZ`vMe3#&Q(JSn7@BRYfW>S+37 z_6TjRh}Z7>r^skM&%T&mz__LO`O9zr{!smqJ|#~cZIq?qU6amrKQ1og>uYq0heKY8 zz@g~FV*LqQtLN$)@on4|wc$^0(w&Tyw?)p+)r{%?sM4!T**@v(Rb*Ds_i+_2pG!_m zIbpF`^!0tI0NK0{+?f+>#cynX^BeJgiw?O~y%bEEmRcj9&1X$i4clMQ>{~DY`g0;l zC+B+?gq%C_zg~${}(04Nln5O_ zb#4&l?21&0cQZ(}etz1)r|y6CMnQGHcM5O&M^+&N{z*#&F|jL=4-LpS>pQyUpR3!r zCJQW=Intr!O$*@Kr8p&k!a7Jpu|zkCO#vAc@-uMi^fvLB+|hYoaHQY5pLs(@ZenQK zeorIKtMfYBOENGIVR9Fl7mWo_m*(-ss%=rX_Ln&B^=+NQl+&H~qodA+t3(|*Hjo#{ zX}-rG0o9B#0Xv$_7Qfr@*eH1a#xu?5?~310Kn`(PFd1!7ERtTj`P>g2*2;NCsQCzAd+cfBh`6&k}-^Gg!xZt@5lDHaDI$# zkGxNrw4vef&PnB~Leg}Ve)@HM(K&jFjG?c>RJd`-{ri;l)c@2ZY_wDU(Y3C`0{A^LUO#kBr)t0L~1rw8{4m~Uf5@V4&I7A?`0qN0}} zbD49Pb3yq5@+jEC1wHWd=-Fv}evz{;_qfkX+I*Oqpn7BU2SvXA&?K2~EDm5}C%MAj zk-+B4Kfoubs!1^vX}0uQtv}N@y_kb43GRD&`jF2*d0c`-xF%%U_7Sv&Zzg9ZY)-3U zn7GB6s(*CoQ~bMi-Lw5Y9JF#l>CUx^tWw7-l+#$*jc*B+Z6`yPgu(R!5cvl6!A!c4 z8aFo5sdIaKX z?i13T@SY^|I$NKmLobfwQFul$b;q4?+8^Za-@T(sr4J|L*q}_(~iL`Q^xZC zJ$eGzIj{wm!VEDNb_da_wNIbLY6V&=uJV?FR3jUMpDULb3qMBq;ye@W-#`R%wmIQm zw!0;=`Dy>QyQQg;Wiqe1pEhHS8l7mb^0Uhf{2Uv}q&nWAO}cPN+Iw%Hnhoe^ImDe{ z-#T|$1v2{b*Mq0&7n!v7>bcV7v&4ioUFPiP*oRtVP&iIUHjrIWj&uqeCVi(K^Q4hr zxny^{mpKwJ1#m6-Jp0B|*STHPza=9%vJg6yM*^zxnuBX!DrpEhS+rFOLz*bT!kz7s zIlfr=XWu)P2!p0nI4NK6%+};P1q42@GD*Vka}Q4liw!GXMk5KHgW95j3`&|09nY_0 zj@25MB$IYLxH>tEbM_0p>U?cfScylVJ13nGP+rhjxJq;VooxFj1N7Sne8cP=mDH2K ztpn`3bLcGf*^!QuX2XN_j0t!+BZm(7bh_xjc1c^^^+@DIe4c-OjStzUQxFq~1|qpn z=R2#XoAIrKkJ@_sm%785(l8h-7nS7c8y|J#dX+>%VRW0u=AGB|=^cgt&0cs4kUM*i zSc98{E@DA6S3Pz(8FB73lzJfN+OCD0hifnojQ&7epMJ#^C|6AFs`*3l#o4`BHh(_1 zw1^DpV-jChO(|K+rew5BXa_RAN@T!`-CQeg-}~WR6o*&A_>ky6;#T9-#xe=+$noc< z1=pfV*o?m{ z6*gJidPA*LuLVi!%TP9i&;UTEJz$uBNlr2h1V}CY-vSc3FBkbRX(~Pq#v2=Zzs^m1 zA|h9Y#Wug4&R>SQzmC*hs^E^5u!CG55cQ}y3Q5LR*88d3^bpdj`01%jQVVxGeA#2PNuB3UZp|Q)Mv-Ye@)NHCew^B?eHgQ;Yx7sL7ST2{|JVqW54cUZvcrPkX;Lo z0^Gh5`*RU7ac@o0Sn?s<1UPP8u`%gdyQpz1bCn znI$K%8JeUyAE1NQ)_d!1&3~hlq?c*1@$kW@-%yb;jo04hAo_$jmNZ~mUTPmVjn5ky z*TNkwh9SMW(x0*cJI@yqlq~z5K_fTWKq{s|Et9F@I)g=7n}3(Ce=qER$7OzH#qc-U z;nWFf#I<0u@b1UzCtz0T?V%)TLZn|8uEd#B^Ox!&9F_=<*tdB(JTWJ;2-ew7A98DZ#1W$T=PE6!cTBD=VPtn#Fo5H7&BameALhtBY;0RUC0`UEHfF&bv z1|29cVBRGf?f9}2PFG#(vmLB)-P2<=KD*`!LfkST2S%D-h{e0=Wgv1N_ZQwo-zhjLvAYgGkblz!z4_uybM6ak z(cv)aD?G2^o1G~V{v2l}$&Z82<_IAb>z>Nl_#=& zL2GPoHs^;h_YCh8x+`X>M|GfpdEH<*K7K??VBD`4y?Z(c;-{RtZ`_aUj9)^}G7Jm5KS z(l{I=%!cxNjVSN+YjNS&8Dq&ww{?aw*_^GV!{e=hpS*5JUkM4hfZZG4(}Bm&UBr7L z=Ij=LW8YM{t>(t0hO)?hi#gTj5)_d7=u}T`mE9h9f76^B~`%MPNJ{#O%mTtc^?%aLgrOk@{efNI%Ul>iV6&X`9oM8jYT)9bj#WaP@`U2l`32 z@rlwfB$Q_{X&@REV}xCUl{h&L`;?;6f6SW11ccJt0XyyFUrx%5IZ{d2_Vi`=c+&OS zH5WLHrAcLS(6^4&*D27oY47zv=jaUO%d&4d6hsr2$jCG%+^zq^M;x(r92umViAh8b zh)!@j?XYr-j2=rNsbaTRDyz@0%nCG%gER9n3*NL5yGx3fFK3*!iA zCiQmyMg&ALVI$9dId>BkD#AK}IOlZlojlFN=VKE)7B$Mw109(%6viv9%wu1rjLoFV z^yC*mt^{Sc6dzeA-jH3xPex%MqWL=#t`Qtni3$sLTf@d>7W zbM^~>YN<-H$+@%NqvS>2{d|5zDBR{vjD>0#ran1h4TnN0iA)%}8iqnLfn#5QqsO1Z ztLrhXsHq=4yo_G zcJimV_#_q8D`HVX-lm1;Ov93}S)4+^gSu&a@3&^Rx-DZ63A=;j2!bFihzN zOSPCo8p{|q2&>aF&J_@G^freT^~dtYPyRo&2)k*U#JQ+o;-c$o3;Dm zG$t^L_A*B$*Ny0+S)kVXlS3esJ0{YgIx<=lOom;Jyx&i>e@~*w0@PJ1vsZJRJVt6^ ztgcK>$zSrv*muoH>5^OvgIS)>KBA&8WwX}}O;K*INeT*(eAk$Pv^o$nnIOnVH&gUA zubsW~~|Qq>gqkTy(SjGSo%L`|5SRpN;<0Lst+HAIr$f7&j;V@WO*%?{GI6@09wC zFf@=wnX@a^P#(`}mQ+}{Q%r*2^(-*2P#Uu5oOMY*+|~!dOEz6QHm63y*+1lL3n~aW zSZr`nYY3@*+~;bSv5!fZPiL;Jj-z*De$B0si9U{um=&<3f#zPNS=1KuaUn~2$&@0! z>HN`7D_RlOD9eLDqFch^E2f*h7MM(gvCVy>9{b)bPW5yAIou*DlzTtRG&qrWR~`+N z$evc#J`Cpq)IWJ0J?q_nz#zdfk-FDRK|i-PlhoG0a?Z^~oQKRmpn=R~qu7&m?=Eni zOO-d;cQAM59lK7N7!y1y?*LKfNC9uTwISiVlj+`cO%3JQMv?^7KI1L7v~pVscCc20Bjg!!XzT<8dDJ_Wt(vZ+O~&JZGw*m$1xyf>jxnu%epz4gl; zH2SP|)~)@fpS+!B>u%2<6X}3%V5H9Fh89%G3Uf|jP8~z_#xKi$18^5BXjfuRNw}2FESK;7-=6tz zswD1=z}B@|#2bkyX@vtxkMdw2&yg&9a=Dp_!zIXfr>yb(eTpk3V3VVzWfkm3R^kiG z$VGov`!%weeHUx}*vd?c2bC%?at4Y-`%ZVWo#-}|&GSAoA|q7XVziC|ew@29gc-@h ztNtoieU?NHIXJ_`E`2Q5CA;BH2HblkIV8cDrQ3`HAdkZN9pm;(_(A*GzLMCvDwRZ; zP|{^{2m$#~k!$!bd^#Ze?U_pTj?YzWv-jq-j`w+G^U!jDs6lWwPD>#%|91T|SjXtO z`Q1Tv``{vVpzLFJ_&oV{rfE(Kt+dIQ#ckNJiwX-gWek4-{pq4}^p->p~7Fj(SzL_=i>c?~2{HL5L#;PZs zJBEt?TjC@!uN4fFW~jNPE&$bUmI^MF{W3>>5rDmOwby%?(HyF2CPG6+WRGmV4N*NuM<;)HCL6dq*1{%s{yG;6QbEU< zG6I>!sOx!2JCS;b1W#ap3>9?FWi!3w4mr_S7=e9eJ=?&dJlo`F?z{vU8WnZU z%1V4?PfF}tmtDntoV_yCk4x8ZJ#%K*lDfUK;rvFyQz*E#?t}zYJDdJfoE!1w8=;!W z#?1ll50J^Z+Cmw2sOkDGz9C_0bRR9X=_pB4(cjV|2wgEVj{rlP0$A3fNjVp@cf_(d z%^sp9;h(}NK^&BTIpiwy-m7F9v8B}RrWe|-S6f`Prs`&p({&QCTsvI0tF0d*a9*GAg4pqLny za$a!(>TCXA!Q*KKvDC8t^+Vqs1S75l^e790c)O$risvRu2}dKGP!YNFqxX2+^rb<( zk?#ZFJx-X=zS>?I;mI4_ZkV%T;q5veX#QXv(UwCiiK^`rQvr&AhQrWs*AV-OiB13Z z9>o7Yc>=j4kq>xeXFu=zf6<12U%1Bqf5N|lkk)dhS9G#BUnZPz@~m5*x>93&$*41@ zH)vuIi<^06NUGH)byMja;GXGxl&ny@`EL978K2)-z!yo|yeC|qg}Zf9?PDj{lJ?nC z*KGLS;&J1A?+G=ncxRy3ofFRX2=jsXG3euE+1~@h2~rh}><;MzAQh(%O){@Mvk0U2 zsvA#|W3!?C`d{B}||zxeFy z9479Rufh*|V-VO^`8G_2*^#|*TB@Q<61RW+~BOum3^}%%bMO>`Z?xd z->&$>f_U~^;kHJJl+#g zSTG{tr9Fmh*6=>U^5hAHg-n*5bHZ6T^ez39Rw77>ES&T7pJ+0jeBXL*_f;|^kue|a zq@g;>nFNDbs6Ul_{>htOJd5{w5`75w?A|mp{#$$25BwzG%u8`pp3V`&CfNlA9!p0x z79QE9TCkq@4^b7iE3;FmCGCY2C^#pqX2NwhFy2#4?yt6T}9*zN0c z0+!u9M0=~NMuEEEEronPBWI?@A)`y2RVuuTP|a^q^SMy%cdq5(+2V^LbQD>}ubNX@ zi;lnGoxkF6=|~pMdB~+yb}4t}1WeI37htAtEjiM-$$-L?RcBg92P=)@xX~5ojFBcG z+G+<=snEF5WtZ4!5xJ5;J`1l^nzcVX{o1=d1)DS|yP<|pA0){ufC=6i5tISU#y|e? zIfv8EVqgAPug~7prr9+#e+s!#cI-^qBvQYcVx!1hijI4ErYZDbm=>Tv0VaOHCUqH< zAar@^nl44&lhdwvWQbr~Xbj;qIrziZd$jsqrO$3c!>;S@>#y#=?QN_}{9VbtxB7-uY> zRB9|Ws`6^|*m(@2Onw^F@y9oxBH(_rwYVARb_2+{qBbL%$Yw@y5G@R1k?Ejb-(3FCFQ>xXC(1Xx!6RUw&FjwMbon?~G(xNMV}uo%sz>Uu4(oU1XW6}cu9j*8 z*$VbT6D%_29ctU}d$}M1_*^EHqvlUSZu0?D7hc9NtS%_0#JG|;0vVBL*pTl~`5nsQ z?H3@o$Q>?p7_)VJTFdw6HW!OGu3mD8SFV-GsazhxQ>uMg7&ja5zUmyTDWX$yglz$_ z#h`WWRW6w+Q~bKnSf*P_#IH098L&p1tfo)?MU%#N90D5%n9xBH8!c#KxSl>x>8#X^ zw=GaRnB`EOKVx9|Z1(n}fC(Hh^`xKoe?xRc_eMlSn|OIlWc0O3p~IFAdpKx0eF?1m z-iTmTb|oG>heY(mLD5de(E>~cqSK6<6}3?fk zYUwgi*LSJtG>lGD8hvYm0(wMkL>mK|u<=NZqR)-g;FMh66kxXu#StCYWM?7GdxjH% zsKY{>-2i7V(dnAf_<1}Bjk^a^10m@HZ_)c zHQUQpA#r#;#K@$3v~mcN9$)iQ%Sk^#Fa)YSUn-}oTm4MMtZzb!8V34jZQW#4y z`$IY^BGDXA)ezz;(rFmM`LVfH3EPnd?aceet&Kp7gNq{|{bO-HUJ z%3rt@vls$F`;b&;)?}d=LvN)fH+*ppKccX*IS=HQMFXadm@PIU(Q`gFRs<7lBVLl& z>T-JF7Xb|-5l;rA8O5zk^-`MLgQsPlNIo7^JU{6&;fQfT4PO)HC;UpUX{UoPD7pH& ztL5#GjgxRu59`40%3^M3{95ybe~gtx?4O$wmSo3;2JoUlIiSuGj`cc*(+tdhl#TNi(E}X$Al%H3}$nr5Xt$MrMn`k1 z#+%#tNg7wTe>wMk@d|epAS|Zff3kNmBz25kTXYjV(f%Ws-3y&@wGQ9mU8Hx7g_@Y$ z@2kN3TSMMgoTocKnIpH?#r}0~LjH~-x|w8d=fJhK2I>}4R*<=`Buh(K@o!=+gDMie z-J)#%{Ns2`s#ZX|(C9dt!_Gdxvt*=Bl-44k`3RdOF#kI)@ivqgd*rf20HY*N*f zr%NsnS1;H*5&tVHYTu4Qa;MG_KZdMNwmm>|ywJ}rW6q}9az6ua7$p6lDDwiw!yGl^ zot5OjRuszRo+!B?uoWj-E2(ps;tH>bE#`13RNSKy-pKL1#zh)6zoRS@VU?&aRyFw4 zCnW&XUy(~wXF>0Y@{-QOPlg_~1Ujo0iMu?SUG$2?^g`N&B06e=88BTxF(bVEALp3} zs%I0&ABo)KI+WQA;;&=^GTQx+_O0QMD_osL&h=k0M2mWh1d~{&+@Ge#F)A1GtiBFG zz+AOn_bB~Zz<~wA7cAO*UGnGXZ)R*&5R}{yMiOUTL)xcz?$6wIKM7HHS>9#Cx_-W| zRdf@w=Sx__c_@fAg5vZ^CIUKe*pn07{KO(@7D+O9==3p6Mi$NmU#|+J;BgSu-EUDQ z8O{vwecs7?o6P6s6nY}pNa}Tkg&z=9WHoz?@uzvci9|Yx!aSETFaA`uzJ)}w@em+W z&AR2cj%v$=z8U8kILrVSCpN6ADAG#~pn)O>PbTlCjw6^PY1@R zW~6c_I^JYqEi!E{eb-b-;w_;cG35wIWs`~|?ke>z{oww`P65m_&tlX@(wY@#I{1aN zpkr}Or|};xbbr`LF}!|XgTR#la0rFkJ3g_cM$MK=HKy?)$`q4-3bPmjX*IoadY&$L z7-w0PkF8fW!PL>}1(V)w)g8(OdyF7B2B4@J+at@p#G+Ky{paUA&tT$rEWhxHbMrAW zif%dz+{wj2r*=B;4o9d-eA!dbhj`MZB0D=XOIr7N+-Ai9$`taGv#d4~{)^8~LCy7U zikc#kVr`z4vbA^~%*Fw%kBMhA+;q4*X?5nvCZE=iuz2QpuU=nwDzQ{TkPK$dUAj># zJ)z{F+B|3Q?(XcjE2}PAwazpDNlQ`U%U3j#$UgjHx;~e-c{=l_81JqUAFE;S0L8?s z0Gp{gj!HIo5rpfdcj>+@Rv3dRV{T2do$j<^M70-cX7hpaj;zX_ZWo;q_DeU0F=ogh zU1U5bl#zYoIjzJ#v)i!m`mz(tc~jon%!Q(Nz)J8lgX)9?`1NYSzrx!O8jGrh*1Bqj z7nxHf`kT{+IK&p(-gHG zcV&+k_v_}m9l`G*%3)DB9wyTjcU(=7zq9*5;Td71kyMj4J8^O+^?77AbDc@5#s5;o zj4f-tI7l)|r9FSys>x;|T`x2GckP`vQO?}Rip0q$rzMuAR}ouyakw>|gfgsLrptXt z_IcyUjMdsxMK>iYAAV|8W3IM%Ua~fSoPF17tYRDRDSTZj%EIBR{fTkftg!d;o6|Fl2)tdY4vk1N1;c0EUMq3*3Bm#u#oRBEGL^2bQ} z$c7Z{5ubrb%KGe1*ZQ)=K&u_WK)PpLeUOFmr7h%oL|v+a%hkr*fYoQaOIlG-4>*kc?prD0?3xl0=eB^D#gFTX{r_UAsaRCu3e;Wb$Fti zSkh?lqU<-sBYwTK{%KX9;VGZf0eb-dKw|Vv7SrZz83|A`Qjm8;rp4Tx+3Sm+qZ=_% zZvUW*N(fTUOzuNuY26X_;&^>a#q5NG5FOV)Lj;e~P+Zvb4GAJ8jIK((GOhCVBQQmO zUEo!Zn-6NhP0r=LwEy$<4E^me?L7X$a8Py&#bw7(pugD{A`3bWcFIbnVA5I?HOpXGI;DMr(p!PTOu~b@5IHZyi2AODwKGq?mr~M3dL6rg-BX4SU|| z!ZHkvN`-ZxodcBw-VT*JYSw@4N*|ZtkjctTU0Hd!y{F^k6cgT6p7he3~u%H zd^VER@$KXcZH&Ci#nRup-9!llU^$}!3yD{WsY#|L!pQxT!2FxlWaFWn0Cz&k;T`fJ z0dT1IO@gWKoo&5!%ZVhK5U=i7t{D-Cwsc;gNPNXf+iFXXGO?ht>0*!_%A`9vjGD(q z#{1Y7>fF)(rgb!OJNS=J3CRmYh#S)t+TFm^hNyaODevslw%4g`%eNy?0nQBP@TpF* zaAHe@g))bF`m;%aIu;Satf9AKjp3U+tAo80h6c%SQ#Ue0gHbq(gZIxqKo!%WrAKl< z_7X7n0o5zhz^ZNXUQO{lKx|tzR)3%Za5MNY(|qlq%s6@sTbK#rgldnM*5-$2XjI_5 z061FN#T-snoc*_5AOi~rQ~|)M_vcanhqJeeYwPQyH-8nZxVyVsaBFd=K=A;@0zr#A zw8h=siWhgcqQTv@1TRi-owV=#KQnVX*Ia~?oOAZx-?i4Wdi8Kv_bf2>j((H4obY|s zM%q?;9Kx#k8pr3u^r$6LlqEb`DTO51>_GVtowap4#x+_gHu_UH0ff-XBLWC|tCBuZ zW8{UW|(jf8+=Ro{Fb?SS7>=4WYnG=JBzEaWys9&)0V=tNk1WOHoFazdcS< z_Jw`Ow#G>n?xO&5CYY&TH*Q=@fc8`{P72G7XLv(RQ;shqhvTkWxwhOysST!r^Mi%$ zyxvsEX|8{FxN^F1q=|EpMw_`M|C*vC=eEm+74sO}4vw=4Klus$AdGTu01dAD9*MRk zEFEV|)tH(M7-CzriG<|t=xgj2E0E#rsMW(I3Hq|BqXnZ;bTxW~gk4@+%H?ki4xdc= z(l!!y831?FAw!Z@v;c7D@DP3g_+D8Z@d#tjZI+@D(^h4jkd)hLkE1bDaFlwA@d1-^ zZ!(FCX3O<}*T*~*nxj_X3*S8X`M^?}YSJia7;@;054){2-$I}%q(Lp4P z>2H7OvUtpy{|a}O45Mv6e8F4?H!gA+1ZGA&$780oW`cSe(Jk7Isf~`SLtr&+i?f{@ zl!|rzboaAxBO9k`@v`&WzL=#%vBui+=r#uTG%S8(ujMASLCoOFT@@6@&Zv7 zw+N?pGQKBra>u5fUo`Q3VIG(8jOrO3$giTj4!U&U!1y^W0lHRcUH6tkR+w zYKZ!2)m@;*eUP&~*^G<#1}Th}I?(_EXV4bCgxh2$Q0F`=;&1SVA`5q@!c*J9$1%G_ zjKt@Pv~wl|-!ri5@-m&+F0}k#R~h$iFx{NBi~OtXifTxo--(SKf&k2FE4*R21BvCc4!lZ=?sO4Tmo!bp~;zJn*qM|Z4tq_<6*53b!n zH{YI)2>e0IVNUx-{DtDQ=nYZ*;X87A&@dfU3MbCR_ck^?RLVMSd&!-q>OzngfYo9ToIXggLp6V3KZ=<+z( z&7IUFI@x9t5NKioya%Q#fW&@JMX$^%Q$yYUv~-rDzd78c_MZtV*KNx3ZEJG;y(m;E z`=_Saox4U?rXA*P;nfQ0Wo|^Xl?q5<hl)TckbBi^3+ypB&GH*$&YaBgz2&YiOp+DdP3hSQ`UmcSF^@53u}^fqNnXrt88 zMngbWo15dA1|9cx8E}y+HrQzCoT4#NZv`{-cx9=`|DiIFncJOSay? zI{wT7pFgLFTQ~rt%0%*Jd6rWzkpNzuZY}hylt2vpeD$8+dfF#d=BiX3)=^up*O(I} zavd&iI6C?)4j4B|edUeYlKp$Y?pfeP|1W>#<>haCMZ(_$kLC{?b`}hi4<6yMyXNP5 zB(1o-y2~wGYJ_AX7fRfM^?YyDM;%bn23U2A zt!==ia3~{**z;5s#%@oMqZna{I^{hDjz*r4=L`Pa3_v`!Jv|RjK2Z{Vabos5>KwuE zKyB)k(NJbW^74D1d((G~8Ga5v?Ukk{`p}gy*TH%oC3sR2$+PoQbv-T(0x$>!jNrdo zn1uD3)}J<~UezGyCXUc=fXw!~m5&7D*6fiKWFwkC4>GyqtDn4;)NlbBPDNoDdwUK5 zUOpzY-?2A)Dt*SvS1!t4fy>6k@&# z7Vo__$+EgoMVBp(0k1FD;dfFlSZ2Bv-_hBu0Qv^k0N>8H0WvGV zSVh_R{GFYr6@i*L+)UdJK$_&6;D2sB4==S90%_@3+w&Tu9&0DzOtGDkE4w07)IH$!@U|G^|R?Oq;oR_;=10j6mvvO;G(6nE5P;h z-QgkJOkv0GxX+Mt3Gc9(ro1V72$tg(LsKOpHplcCn{fPlWqGWoaU?7p2Py^muS=QI z8bG3^aibl3X;DYX$}w3n21BB6gyT-K1)i%fc#LYsTa}`+iBgqZR+EQesNxez&JaPj zT^`HRK5O^B9kPk3?pMIen>}-{wCJ3!f&MnfgR8UI8Kw&^qCDi*FHs`yG@(2m1n;@w zhl{sCIM{fynL>w7hk>6NWDu}jrV=3MsIP#nIPWJb3<4P#@^Qg>9z5}Pa^SHot&bT%#%OY+y!OeTTdZ%#qSKWNXdu%#LIXCMIY z`xWzO+KX{Rd*gQu`hE<PSkwmXHP>YQL@)2&G8^>v|Sg|5Yp zh~W;%Q({6E?#xMucVallj!7J|LtTIKi>q3*q>R+Q|lKZVUJ0; zYW2-3qv=YxxxZv1tO|41J)A+B`CroK4LrMq2C}s$#7IFeXbj~_QQNe{ zxfsP0;!SHel@%1!1d=|r7!H;ytZ+=@YM3?_|Bg3%uL&%$@*Fu$^Vw0>9+!s2ea3 zcymw37X)aj4%@FAk4M6TZx=l>mu-=6 zGMcO9pD9yiq-4vS{unX9%*dQ)=ycPm&#Dr{?W7GH)PAHs|c7OVrDn z0|oPyP-9{N<~%hvD2?>>LWkf`{TjRJGTShecqTJ0J5naZ^5xQ(7t(a3SvFq`B};-> z`5v_{6lXhuF2P=-{~mSYkobSi=YP}LP__TTDgKI%A0JWv$K?5|>4r=EziXQq;TE1A zuECJR?OxkFF?c#XcxLmLeO#TIx$mf0Btdze1RTlGCg&r(L1pP*y;Ln?yUdL#5qZ@V zi>az-w;bTBS5zXVOFztf$oS{LW!Ou&A>_>to)PBJg8+AG`QlL?dKN~e8)}iV-PVwl zcp!-I;nCTX<(Wo5Gt|#XoQ(0}oBG|yGV-#yad%`9zms{8V15LJxAjC4CuopB~~z(W;;h@rqDZ0AL)EXe=t!T$cF%Iy<(OZig$%N_lF6Ek%lF@Pmb*-$7H%6 z8<$wNT3&#Sha!u^sGZObmssgLKTI0uJWjnYR226)R}|krY9j{s&Np7()&sAm1|^0F z_agODJWAWQ^zRqzPXYf|u@GC_Wa}lG2mrs=1dMiC_Kbet6}Nk^8u$&5caCJ~;tGm7 zqe*-zpUNAm;`N~LRnjhy3|k*Xb+d+^wYg_TW%rY6KI$&(Jd;$VIG?M}9b~o&CfQrCXcit(5d`bWH=dfw2Hm?< z3ItnV+aG_IUdwvyqM=nCuXg?Dl?hZ~kdDAbB{0BKK*=C_l*0GA)*ni4o|U-6@2h(s z+us8!|lP=C|jU+V1y%qi|NX#QUD{m4U}*EWEF1N zYZJn?n3aAwjR=+tUL`Zr3SpS_?qH$iAUUnLOjcKAL`pR%rb#jympjIGP6K$0<7Olk zx%IPblY6Avpa?7TPxLVA?ZLd^%rK}z_{v0h=?3x#`}cRx8M^IPWG2{_Ld|}-8S^>6 zo$@g1%vgJ!lYX`78iPU#k=1pkAN}QIGs!Gn<&6JyXa{W`j99Jo%fwi=T;aQT@llQ$ zjGDn)JaXjgWDEcUrW>Qb9U?Y0L0Hbcntb5@bBp}_MqWG7^Oj|&YKgm408?W|R4lv! z$Z*5*{9u5s&7F`$67kTlBmo7*29$4HX3j#@5pK?cWXnA$poEC}OS4sm00v^G(b}ay zztW%s$8KBoOMTC7j^$#$%*IHSmu4Dl8p_)qW*NzibJhz3pV~AvzKD7)+yy?}iMJ*ycoEY1$ z7XwGljG9P%(kocY?E7%Qjb=^5GHjXIHA8u#7#YL~Wct(`T((YRE?!x57-cA$wMG0!3aR;+0IIWGZ5JG8zMtY%U8cS_ ziuN9tr|qAqT7E4^A-WeyZs|qA^PGi|F$jT)S=I{I3_H_3`3}$sU0))APqN&dUQuJ$ zT>$3>CL-F!_7WLYQZ&h68K|HCzF0*|{#qcBnRySYQ#osY7-8u1Uz#n-)QgyFSfk6f zNPZTaU#YXY^z+qsHR#9AC6$#TQ+Jm{=^~Z>a%O11j>b5TrS?ge2)jG3Z$Ao(*`!{O zAn)^u$^G@~X2&hWCR!R~^eCzeRiY^c8edJEbL`E)ksIMOV;aXzZ0S`LY6juRU%xWm z0x_w$m;xsSThf2TA|{~tnxb)2zoOY7eH&W;rtkT~l(0IbC(`*_n-}Tyy}2^Agi`~a zyW}jZj&{-Jftr@5GjI5a4^!4@j_R!tM|kzGHt9elY!BYlwoOO6Fqg<+U7GLq*i0~d z*H%Z~*jU{T%a&7fbqH+6>Q2_r$3WHM!+X)qnpz-AUvTL4yJ%|F*(vB^_dXJw;kPXG ztvU3weQ}f4`}fEuQ(^l%7aNY7t0>VlH2eznaX48okzF)n5xRsa--Yxzw8$mvLr>4n zKC|!EdtfAt7)788D)}&gDaLz3@#0lzl26y6^A&$pzEIJf+O=HipkN$q?D%yEP1Gb) z9uDt``G~PTjzTB~{k{>|+b@iCl9`l}HkWkgXQ+~d4^zx$9#$k~2L(g0ffU9V2o)F!bGh3V|@cOMF|YFM18Ku5jxKGsp& zji7@}n$yf5Fb3c#eOUV$z-1^8?f#hU(C8Z(w0SSv+lb5cn5BEpv>GB*IOO>KVXo!N=q@mm{lWmxZ>h6| zHJCY`Sm=M7xVwP;dE~kK(Y&}kS}p2IWK{gh(0l%ONpbf4^j+SweDIN4k3}3|H8hi( z%=G3qcpHDk$Y&gPV?*n3bRYFIkAV;$4QDS>gJo)$V28A?hG2hsw4D`93Kg_oi(}#< zxoUrHpRU@1VGufdY#QcZ;I&=Rv*@Ve2^-UC0Bo>MhcejY$xjp4(=Yk2sQzo3TTa^9IYI~y@aJ-*MxHMM?s0dFkw61bx)342()9fh8x)BlgDkkV1 zCk;(<4>AxadTw(ia_yJ)S$5QZNd6JJQ0%kr#iB`2Y5I^lP+$5nJ;g75H2F*yN7Hb> z$HD1oU*FAkqkBCdfq1c$ILU8+F#JC;1xY&r*B96(@fZ*0L^E$zS{BRsi9m-QY3lph z*!?H7_7doo@STXV*lT z1P77K84szZh1>0SToWO^&f^ks=c%zmAbDAhBF??|@Cyx0(es^YYJEPT{05fqzO{}9 zY{@xZX{>ROHn>+Y7@K5=$m?s6S2>74#bAQmd5Cb30`7A!PVx8a?$L$YLL$+HW*Kp96OKIz zL4XCeUz`(rR0bi$qXb}kQuT=7!eJOFPVY!bnWo!*YI?Y}1HLPlJg56h+jUk;hiq!r zGLE&`Z-SDieUb_r>ZWpMxEPS+!A1%>m=bxwu_;Nx`fRKtGp~PHneov!$&a`?lTB9G z)>``$;Y6ZlUT+w9YGpsv`s&806BYn+Or=6Vw?50Ejyi<^)Uaz-r4oU67bB7XnVQ#D z1{{${y=}uN z>#7&&xpgxlQERp*8?8JyEeDoy!R{zJ&zln*Z^*62UeM93E?EzHKHH

    &C0xcC34T zR1RlF(nvd6b~pHd-1kH8JZ{i`Bi!o-`wyzztye2O6d8;CCB1328DaEg)AjNWAe%bN z0wrh9JIzjPv&h(5&aQm<#^GCKV9zKqukLEge=@$_8n(9|B8&HC>@K~MDNyL9OthvS zDL3OlcT_(fW%AD3(%|{4B*N*;=47K&!aTc`LfctJRIrg`Oq0ZRNNvErn=WDiZcowl zQJW$jD{pj^Hm@x8m>F!LK>eAdK7A3Piv^#!?wEgJJBG3^ccH@K7hw*}tXmbZkwhns z>qsUNb0SlEuC)HDe0Jpg(1s|JlQPNAdgPJ``~KqNcR|rgdUWUQf*C*ZnmrJY&u59+ zrqvITOb(BVH4aUAco%kZ>)Ikhlv#rng@$RXMI7h?vRGy!zvA^}Zm)W4@eHs6r`Y51 z2%A|&?qZLFWR*Mc)vEi$RmAH579yzu;Dty6vO=P?hz65n%TFIOg0G5ed(+~<9>IE~ z*(TFj=GHC4m&X!0=y@Gi=Vb@yM%=u9M=`=Zcyhm7nJ`*$Y+Hy7W+m#ZZFv`K+yX^ZC%rofl9bkvArX;t?cQr(i4;reV^6>$TjS6>fsZ z=LMxZ*lut9W7ee*xuB86zN?C@9ftqQS*hNJ31NrC?kW`4#_qnO)y2!}_3$LCaPsec zFycHLKsr6UUU7h3lRBI!p7YP9dlQ$@%G3v-rubAJat^dXO?XZKIUutte!xRH##UwO z$r`wEnP#%T{0FS9AH3p7zryB)Lko`?T^S!N`@a!!%~N9!Tb#b;F7&X_x8nT~D&Amc zrcslgc;OZ9;QthOMCfaeTBNIJhjcfOJeUP|NSIS;rFg%V0&1zh0uDRIS&T5VFj%&Xzg( z{R66{hVTZ~^}5h7^h4HxW*IK3RK>m~23MJe-QznKGe2pPbHs?rtB9kl$tX}&qQy^t zQ2`hJqh+DIzsFEU{J#S~p=gbmey^+@aUrX<$qYY6EIXEEg=cKOr5X}RZq!$m4@R{5 zSBrE2oe&PV{(`;iraRiITP@Bu<{k(@QZ8~0=&t|M7BKlK22hMlytdlJt^()MraS<8 z7`=HJ*6OhfQ>J~w@=@)SWh ziIT{q~ zztOJT1rmOUcfr!hdjD-+5?H%k0!9P(W_~uEa$tTr;x&J0cx^P+_+?u*G8VKa20nRG zP+zW3?X^CyNdyrhr5e^@s9d<1FSDyxuFM?VJM&s=XEQen!uw8wS5|_ntNTR&dRc?6 zz5vEzO!JS0@06Q6laiAlHDA^lqO(`V&Ws-yeSF@IwV@Zrox+JnQMyYLk&1lhPc67J z0l;(sE!6vFk;9`)BYTrk#wP-%{I8N*bP0a?z=_oy*NdNW0L#E3VIEb3G^z!lM}RHO z`GBPCu1D7Cu=3}=Putt2N@^Ld=JarU=KLVDVtdO<)X#o zCI4OzZ9+a}mq8;v0|ZxaHuK0S>^993-Xyb7HL+7qGD$~-V~~E&Ml9dK(EXC zB5F%FiC=^o@dR{IT#Nim7VfHtWUu8s81$6Ggon=kPGQ!YewX@=Qkh6KeL`!`fXxYL-}bDI!1k-v~a4;FZ{))tKQ>=de=hMkj!ga^PRF{LM zaAT$Nm1)I(8a8=d66<;*l>;AM&4firC84r zA5&$6@xvfyJ(B1^sX{Vn@Ik>)HZx)RXd;~e{U=OTMHa}74Z$Xut58^rA>m^9C0k&G zVcq#FcWJF;D=A0Zn-=Ar(BM2u#ZW>Uo!?sPjQ1yZk`xxH5>8gG+sJ5nYAC6Q2b}RY zjMilZAD&9i^Gc=PaMxM${qZ~LZO*{RyJE2O>hQM9Re&)!qJ!Bl*v8)<@7XXiGoMRu zERX(SxcjMHgW#Hu{=+}!`qEZEfj@ zZBy|S+7;DriJ+x)MW0`Y^D%64Csh}kZJq|L=p@n*0+kZrC1dIMVt=IpG>?h>`{J2Q zz26@>eHWu{uc=};rPppZ{Ia{OG6BY3T)aR<7$_LT8SJp5Fp8-F-3=G6zb;XU($<7` zb^dJjFp$|3@GnZcaY;r2H>SEshTrg1_*ne$J%$9XxZ#jB2?=yCcd#b?(7p0o7Mkg@ zGfba7kxWqaZlRJk*dw^xSpU_HEi-fu-Wz%0E!T|+<#mBBU?S39>MSg>9A^&fVt0oH1J5kkJ)Nf7T)Rqb@i9aOX ztUr8p-|z{b4F6QvCDBJ>Sg_0{$)Bg7xY)gz7ey@WL)*5c$@i+dEe0;aBHhnZ_J?yZ zqL}(i@>g4bL0|WNuoJ)k{YDY(P%6M0eiU+)Vld*x%JK^9puL}J`-DmGmPFx8j)l!B z#bxDUOuu`1A5nP$&ab7bgoCV=l!NEERfPs@H**5b;V!vGHSyn3#u*x|vZS)^fBG`Z zyzOyeo}X*YC z;Y)eC5=4tk`(gtgnXab-$}zx)ktZpS_t&t}Gg9 zT~Y@Mco`vR%r&xqYuA>t#qypVgmV(U#syo1j0!{D_@)|tTEH#&8+99nHNNAg15f1(ZdHJy=1z8_0k zWkFdE(d70TidRJ(U`r6ni+h{9l6ebik)W;-VvbP;(#mZm;0Av(;s*ccqsBuZPq>Yq z8B_3Ag!;P{j~lmBT|%^I>u`hkMDRow2{jg#a@D zTRx`#E+5#(B@2g?@1q_4zDT@5>;T$I#~wHzKfTHETtDpZbb1w&n5s2uJD+Zva}CP6 zWg7+!(A=beEmUb|yrVXJ7&a^u)r#2Hm8P34(_|T*ZQBM;PiQ43R>h%DZ;liEfJGPb z^*3qa-nUOrjb4Iw*c%tlb}tVH%+Ji`Z6JH+Z?>?In>$ipmYF1o=QM84ixJ5MEJS<+ zm>m)`H7I!E(3dScaGoZi`PUtc8v)OpVdOVTH>hyTWPF<|6~nvzy{3W-DnqE#1kX65mo6Fw!=O;@MyaMQ3K+dIgT5GdcAJP-2> z(HDt53_1FRQ-?G|ZmGEFkcg-F4 zbb3s?GLY`NqRTU&LfUZM_OkArsZbx(DD8ykL>U+DgEh%=opiU#8UoGfW_lP&E?L`o z^DU2)A{4!){lVek)4=MJxUvKz&sEKkDSizz76h!+H*(zNKE67lHsG);hy{_rV$Am4 z7W$lI(Mss;l$ylIZ!!9)N6|&P@o)G*1CNnOggtKAVfp{0ZK<|@J>w0?x5#j-$F(!O z%OJz6n2mHZsKjPCjTNKH_@@EEcZTKgiG@TMmI*w5{$O|=WBqkw0uD1LG(NvtFupiv zWIq5L5H%^xoCJz_+$jIc{{>0L;loek5N;Bc)a{S&oDnZ99r*g*|L z)dP=j;_tyd3;c5DPpCq7N}>26`;5h!m$~QaUB+ySnwno)ju$EJi2lxJnJCcV19v<) zN|BX8imnO6!F;dCwcM~R*)^lFZu2+#_pJmj{cRvbkNkm%+XIAD9bRiGhWmAuLJfG! zH*UYua~(yh+vP`oIB#bHyT%2^%qLjYKU(6jMmHVyz^NyRDl|`gZ5&^Y$I(v^GfiFw zq=4^~Xg(xTvz+nlxrK}7U-l`*`F{>Z?0=yLDFLWcIKSARg6;bl5}3B+E2F{FCX-0c z7N^{B!70Cj=?>BrIf!I@1#RYfjgj;Fap=Djx*>e-x^S6)*YZs9cL~_0^r+(t{(;I$ ztaTE$JsWU+4lFNa~$u> z`Ksrnm}g}tyLyKa8nMVi?3!9qtswS(x6NH&=RW*NDl9)uS1WiRGZKPBy04Vy)$F9c z5i0S1_NQ}i8IDuP0-q_vxBC&Btw!4=1c@GKgCaw+t7Micdmw;E*Z-H&Yg}g}3%{IuI{Og;OeAHg^<aomrecUwTn;W0JSCXN7Fwz;h}MlHra{Z9{6O@r;qf~*holGr)=0D2lZ<`MmvKe! zY%N4`u;tQh3!3=GcJ6ige;7byT7Hi2siAGF&3N)wnb@RzO9C~lQQ4ehAK@peI5hCJ zrQO0Vz^jQNpVK0F7rp^5+rL(&)^F1Ll`faOTY>ga0~lk$u=w^r751?g{(3zc%*jvS zUV=7@c2PW$5)?bF^xLAkn0)bA792}cR_tLOH;kd@nhhW0fb0}OtJAqgYT6Nn`ZHAq zZAz`=sLA1y$PjEjDPC5;lx**?j|CD|)Y@MIE@;;5x8xvmnnDWD+ve09^$0VAKV93m z-~cS*rjdl4-mFf;_UYATy9>rIE!Q{rZkVU?TYD@#*B}4(Q zU8hkOkB24Gf_WTS6SBl~Lj0*t;nt#ICRdRu-%5Qu1yd7)I6?XN<@xYI6`)DVoVIX@ zW_1eqGQ!Eq6L?&8RXkdQvp?6ly-qw7<$3B(L}a;Z8)X04*OkjE(R z2<$ecJw!B`mt{!vs!1yf-p6q+Ul)N}emIYFifPR&EAM>vX1YE7Qw}= zRXu5YBK%DgdC09exAk;;6t?HcRQm;241jdIKi#J=l%pY3bOxeO917rpXoSBh z?)Nw)#0gOEOAoyojd&eLGl4&GlerWZ+nfLyn%osoHc-N4a(g#47Jb2 zx8O$FmoXu_73k*m|6?tV)*Q?EztYEv%m*a8(mBIt>i< zBYiEHL|2e%74MR<|Da*C>}oL9`j)XsTKxo_cxSyke6F}9m)E35=F82aA3uBQ1hhXQ zO~U_`L9`JA)etiWj=huXja4flTTc~bV!={<65908p{Gv!g%Biw-aBO8!5U}%GKrPDA$iai3TgF{6FnyZhwQZOlZM-MvKfX$%@s519*9FE+pOdR9pEo_oKv?v{3ffcBP)#g() z*fy}G<`+C2sAf=m2C_s~5bB=l7v|~QIS4cqdOehox$2bp^)0RfG_#Rd5(T|=d>z+a zp69LicVA_^R?q`gin?9shY+&ZLc-V#DFdYQN*H ze{QNqvcI>x=DJYZKueUA)qYY;_F<*7A`+N6w=bAIZ>-J}yyp96g*~iqJzJ@)7&cWc z&*8LJ^($nlwMMlo+UTxq`YfL;u}nR4FWY8((5wlWH|uwwi-Vuny^xWob~GOWBr)@s zFmu?ErFKK>ZKuxHlK>Lfu0fT}R=M$WC5=U~A@zKFLW`C^Lls#uo5yaNxqB;ccf9`3cjTBq>p~rIV<_SgGCkJ2UhnH?;Vbj2jeSCEuYsYo2+`1 zt%5mWqS^k>p6pd*THd@zKcjE^T+t?;5QL^j&Q@6+&U|BhkI*F`LG&FZoHD*@Z=0lv zqgCOKTU~o1P5CI;UeB~Pp5K9m(aeAzd@#Ol!lpK9CNfXjb+6*tb)r$Jr@T+8OQLsv zbH_T}9yvAyAHWgJoa{WhlxQTi`t8*F`DveNCt+W%5QK~*c^IdcMS>hZ@t|-k5hcT< z#2*V75Q@mKoLYm|DG3XuYTg0B#zDn7e!;~uaD&6ihqeZ6Xpb_GE?m4Zq})QQ>YWdJ zW5;bK<9sLErc#U{hAFzXD*Cu;mA%S-HByB*7)qwMZIH4|Id8HkgKILx5vn_pY|%Tk z*A$1mroF3OB{zeKI&Jsa%*Y?c$3CXx_fx*5k_Hm4P_TSgaNvwq$>4KRB!;e#^Dvu zKc=L^k z`r4(RH#TO%SA7|CxxHJztQXQs4kp0G(wpg4mM3J zHtbbb7V%D9vdHPR{PnJgk{c(7Ec!!Ja<_5E*h7w1?yuC|z}0tDZc&u@P74g)J9lI% z_)i&bneqi|Aek8!a-63`ThP-8@Jv$;-N!YoSrJ5n=dyEn6`(|G!pM}$pFYxL- ztWS__xw^D`Md|O3S?%@TX+H5Z85hB6j>uHOl@|x<+JhLllQBmPe?C~qYWnC}-Wjs+ zZaQ~@!A&ndv`s9=jnhx&$=*hnn8kaT>RwS%M%+4OzdMw*q#5YOWoKbur?GwMmF1wc z@Ix|6c$V{?-V>Ezdx^iTC4XgXI2ga=(SqH_eE|7f6_=O-bofIX&$E-kj5EAF(1(I# zEvU#r+wzf5B+kjF{_2@XU9Dy3h&bT<+AE6Ek4^d6X@@zjiU^^rTsmJSWQj74jgAF4 z__4?-B*L_q9*Uf!lEE3S-ZtPdZ}4l!En;FzP;@?H+yXXblB1Ql$#!VK-+j80Jc@Ot zQY+Zsof7!pP48X{4w|2C`V%g)0GYYwY3cU4R~lJ=nMR|m;h&`2WJv@k=$s2_u_^@= zs^G6p+591rUsQ_y9c>mw6fB$aU!C`SjF4IReih4?HtEf{X~g z@LtmSS6l;)Ga=32o(5OUQFB48O`toTGGk&E_XC;iWmX|#{O%ULETX-YuNX+Uq0VHV zO|E!8;e6k4(IN9{%XELDB7JE5F&NPx?F(%&t2fb<0{k`Yg~7`sw`4PN1Tk#-ti4`< zB&YYZdRc7Gx*0MeYY((6bW-czcvs{%OWlf>Acs2l4rsq4#iM2uznIeMOl!$IGpeNT zoJAtk`{r`3L5@IGM$vK6y`~9usGojlMRBu5;FGXV)B7-M`mn@39oXWPYD8=741X;8 z#H`5oN4ZysF_ixlWO9snyK^}D82Sl{rac`vPno%#u*;bQ8jSP!9+Y`PK2LEfP|9^- zi_>&99|9`$&`pmxQ#y!GWSNS!zDoWA82ZY=htR~D8u|;Neu$~b3aOa-_2C>h;Jy^j zIMa64FQA*Lf0xoymrIT+;un2Gf}1M|pnxXzHLDG&R;k+K_l#$JA+ zpFn10tX{35rvtJ)FP>H%%jqr9f-<4Of5-@Ji0$arn|tOXsgQ@t4r0&8?8m4jeK=A@1G&MH+2A-5 z=0ieFUUy2jjn#qe&b57Dn*^z81zqupC8%&2z&V)}6bJ4jWrLEn4tAofop~3cNyR{% zrNk3UK~C_^X*eUvKZVCT_*ETkDtVUkRHvV-ez^)2+j`)T?EsslI~NJpfmtYij-H0S zljDkfy4Ve`@BGH^dMxDC+&+Y{{Qfcos~Jn)wo?V?SHdxi-KtX-#M7dp?t1AuK?U`V})s+}^U(;t2z)cz5tR4LJ1 z$^Wj=lBR)4>U&pjiERZbQl0O*H;J9DBg-yix$HHz6+l(we)B_fN z!^WS3PJnaLcM>{4RnT(7C<9(I#V9iqoo3teb{i8049&!Wn*v9XCUPO1=s(r{XjZc9 zFQJdlZH7PtfmmjAiTt@;Y5UYmV7fqHjh4T~@6DjuGSR3YB}~VIdx7(Tz z&=}{^7kNaj7rZKWr)jUYq&7q~(qdhjFYB43tL)Tdm^@fMwmboTKEXw>H-b!Wzi*Gw zm0#|z?ZG})zVKs+#{-JN)0xBE+KtQ#2YYpz*7jTrduIKb9`Lc+_4YUc5+Yj%X_{UPzGirX-O*j+?<*z2IpgljoDJ1}pov}(5$SiT$ zfA;F#g%dv$<`CmjenNP1x~Sl_B4ENLkpe{gcJbc}%&&mqNv>+W?0rDhVn~>Yi`7~h zr9tIRFn^IAd&iTSDgGK!b0z7U5%CFLdduo(Py*V z3cX>FBhhuQt#vjC@0bau=T?voi@}K*HI;gBxNUIZcBqNu%Qz)m{Lp?^zK>tnWm8W zlRuSn^jqhJ_~5(oSL2vNa*e>dJ3+Zueiho`-`TA%5*8M2FINXK;LQ@>c!PfU$&I|q zSfXhi1t-83?F(KA5x}}m|JC&t0vOGl8L)homxsHyc;Fqmq0No;nCAckY8Y^(QRvyFY7? zJJ|#EB<}v(f+rIx<;kluT?~DraD|0V?RNRAP2D%>A9u@eoGYunXrFVLTGQuho3)=M`(Agshyu!{^H3 zoXimJbaEoo@h`TXNY=hj7@ilqyTv_0gD_2#&T-?IY=dzpIP)^&`p4mGeXpml#t@70 zhy=$tDyRi3?FC-(y4qSQ1xKMC5a?@|I$$BoBe1I6S5kv!Lv>&8p-B?6GN{t4DBPY* zxDl+WN5a16H;3ThkSRA~T}F z=#9#->WE$ZPcgHjH?2W_is{FuDp<<>ClY2`!H*3eh}f9nPt%mKLI31EUx`lPJFU`B z1&Udq+5L{Fgj{Z-9U9cI&D06@A4(&^pEz`)huIC(EeCvdZ!t`tf}Md_Jh4QMq5bT^ z)wVEC4!V}=bX;z|@fz?i-Ceci(OliOatPN7f1b3-LV!hD=k!E>bA{fa)G>o zhix(~242JDrt;VavRMAUe6%EUxqfq{pGtt=hNJY=&4wLMD2xY&Wt8^C9|Ut5Xc518 zVVzO-QE@D5*wV=un!ikX)tBoeDdMw!Ec7EKK@(Aa-%gRyOjW0ADjz8}T-(^ITYLZ3 zQd(4Lvtf~=+N@7{Hwp;(rYn?kC)9{R26;ru5Q^XL`=bhlW@230uSLzzTstwsJ2hLQ zOwYeR-7+@Uo2c>c;a{ty4P-t?ERvhheyC*HZXVh>PB_qRq2VjjDFiMhU#2w%X!dOE zpb>)d5kk%hK0HH3uPBCDUa0KTH2N&n>5xv%B}YDt0-XY3G@Z(_V%iXkYvt6Q)$Wl+ zT;@MET;RRQe!G#hH80T&2L@~g=+!eX+CM1(2QCE!n#l8`w7C9OO^EO>=-MVSXi^FN zjwL@ekC>13wk#oW_EJn^n+V7_4rtoPoS4;;&BqV%IGtRNFsr|0Ukq{)F?1q3e-h_K zHc2Xj4&@A-?xeB2T{ppwXVQVnYKG`&dP7+GiCn+!PI zjFrc%v+Nx1F`~<-;qA}asiK?7488o4Kx5iZw`KgeasFksnIhbwCa0fc;Z!NclGsMo zF)qa~(k;_%e6Sh&z@mJV*`J$d$uUec6LW`J2hAlM^}n=`J>HhjYO-t~KE{8MlWf5M z7jyXkCsIQbTlaQw>D4ywH9wnwt{5+<_De!|uc@+sxWu6^Jh^nRX)dM#*C}p5?`|y> zCZuL>x>7=*FRz8l0{b`TK_wn%NwTGDfkRA|C4=|6=mDANQhoZRn*HDY&KaH${|=T@ zxkwVY^eSupmt`BPM2A#Dv=V|Oa&Q*|=dcH|>b!M%KVx`TLa;6tcfIkixad(h>fEPA z=Q%|N)81w@9_M7N=-zsy-dlII@x|@lRa%M_hhoK{xD&Lv zhvM$;?$+Y&8mxG63+@tJibHSCa^!{89SMe4!FMS<8pG2qf%n1}FA;7GOHN`}oJIQ1t<8RVj zeS5~B7L!OPW~w6oKl^e2(v@}$EV8Kc7sP59l7A+Nq)k`9zWT!1H#e8UqGe|VXBlGNVQ_;SLRh_ja&eOa05^Nk*iPy1Z?Ve(3z47_7GEvV~X9pKtw zwEK1po&9TLXxAvR)#N+DIK84`0(H0LNTtMOOE(NhX92p9*}^zCOz$suf6WgyVcF4C za-p>f;IJQ*xs`|dMjZ&Z95%vFo-VsAzLe>95uS(^#FtUAFa#xyq}1?bqRwOAqrGV- zDsrxSBkq<+--P<=b>+`eu1#3CPuD;A5RD~kJ7Qs~?00`il}>~egZ~y5uE9MJi0PpT zMi&|!@bLON?z6&)RE`l|hKfEysod2QnTsWRE*>wwUkBo>nB-4n~wOZn++d9E35^)LkZ!{N8`eZmfUY*8VY($t8W#5N1Q<)v-`2 z2+i|y(bnU-m*e)3Si~JJH{k~Qr}1h(s!{O~SAN9T1oQmhZ|?=};!bL|Hy*4{PK}O9 zXjUKayeg>;>_HPDBs)tZ!OG9;)HQyf1d{frNbQBy?YY?lbw^nVM@{Ytx1GOB2Qrpw zH-$nwoXSJb9D=@gtR%_1Vkz%m_bzO|jncx)YQaN6QiizMqm}H8NVSjat!=)E`onVg zPDqMsBwE?lj-Xp~)p~2}0kh-rl9uUZKDETh4Z{E&Z#|1i0#1+G1WhoX6g{TWQLlPm z;bSjGnv9vS4faJLKNnKifJTfpMB%il<_RJ2c!LSTgeUYHM)Gv$!6GAA-9B7BXVp(& zMC{B@CYU|jSftW)+NbWTFB?~l`4bK&96wRd{{cW?C~POUJ?84L?#=`hKzEo7{pRC} zNo%c6Eid>e znRW6>;j5R@JyHAM`v9>Fwi;QDB$a<2*}OtHI^h~y8b$_YEhb}L$le*-YKK=Pj7kn zJ8(d|FVEe7Oj8}hhWFGoq3pqccGX;Anm+Mec-OnR?TM_iRW<6IJO-U%YlVn4{ThIz z)ZYCANA%M=_9WkWiu~R50d)<>s^m`^u4Wh63Z*c;4$IzoD;%;*)5Baw@jQ)QAQ|Tk zabaS)bb@zgs_WdZ6`X-WRY0*)GxAJwpFXpOlmoO{^Dvi)wU0feux*v5?@+zFN-ryC z;qc-x{PT9Spu~u!pa8ua)R z_Re{Q0{iuSTGlX=Js-YeH}G>yGa@A9$SlW?-U8KuCD}ydAEYqn6s}~bzKCV#((GPO zbeG*hP`W5>xC4LZZ9c->pw(kUQk}|+w!kqo1jm9J)3$Xq&kqO~)IS$ecduih9#h;8 z5#vmIM&r~*S8w*2Ff#3tQZ%C)p{;I+OMjz9W=% z@Q1E+{X(pBKY&BqPukSnp$8(4NyGz7yu$IvV@3VrF2zbdd<3$nafKRNMqSo522y^X z?aeDRmECVdd~MW!ItI8o@-d?)sD!#WlHKpNXrmyLv-2o?Y-kREo2p6S5UACjm|(l4 zg8pPALT5+7 zt%5kaH{rEOoNW9=Bs3*AP5C9_(@~&S>gf!nF7ROM>8Skv0ACbVN)UV@mF~R*T;a{E z5wy-}enb)+%^~&K)m{lf$P;HaUU~(>rv2sCvog|b(uu{4&_T%XN6QS~41Jr~bcBM; zY&;ZuvNg=W!#6iD_IHf$U0TY$HZ_gviU3x;E!Yt2>Mf}@@XYT?FXG>ria$x;&)$$f zD1nmd&6~u1WHF}f5VzfDJG&`)X*Ty$z&Xx=Rk3%_9i6%(oV$1~Ax$VPze!XO7Cb-E zpRuzW4jB2e6wtm5QYn@-i(3HU55(}4py5C-h|=a-5(k(P<|+`k8CM|*9JqW z#*_8uyUgEg$yorDg3RSxR9ab%^~JdK!rQddiyP!bn@w^}bI0wBohQ(C8*eE>$SNE? zJh;L=lZ;P~7qwF~iZrW5vyDu*D|flA8D+>(D1sUDH%k{Rrab_|JzE08L*>+|y4z;n zRxZYmDCs*ur?Ko}wRXYHx07JUP7Y4jO0lU&lf46`t%nU7D2|=x z9}75S~Pm1o#(Mdwc+ z(sv%$(tb@23%!t8y+_pllx#14|K57I!>!e3(rnybUoxDWlhuE~{q6ePBY-#eBX)?5 zA?(cECd^>G8s7S^PKrKFSUs6U2lip&;sZrRDHP5I=bO5_1_f^0?_Q&ruEHdLo4=gu z5T?&Xy#nq?hkeQ2JUH4 znm1xw<6c3_7B9c+vIF26_JnqDCXL-iDAnk5nSS8?yC^chNGG_0Ev;zVjqNYo9UAtD znw2VyBB6DvHSV=uO1@5n$%vp^bf!&Ko_oWcEMHxr@FtU_qqVMfPK5 z0{>fAVZm#wui$xZYys^y;{8x0?%l{PaNgU33-91Lw(--+3zG98wyWKamoI8WuGTlt zop26LrK6<@b%}?^*+wnX`C)10+4;pd+>Vl+;J535`abRJI-VKsz2fOMm-}YZjt8vR z?T+4y-}3~S`l~J@#0G-pmh_iM=g-+Tb?ea;^0?p&j$OM#VsZrI8p&Q~5{|g@sUc6h z2HpwTdm2pvYNk-Iu4i9_9+ckbxESlu7O=g9fB>VB8jW#MtQcczz27h8V;Z{FscT1u z+DMpju7UN;E;=ohefuMJbiE>QKg|}caow4(PsI&3X!la5+pFKydWiZ+hZ*VlZL4IV zzdWnApc#!10zBs?ZZ_ZC&VqX5@put)7Sj|iFx#Knzfq<~!McYK_%e&Ak8rc8fZ9Ld zukj>&v6F68w!bElsrHTSP?**29|@Yj_ZwqH85s~krAWGvoAz{c9DI5_lE|wFa$`PD zQDmo|4$*LweHdd@9(;MPD=#=I!{ps5qg%JvwuzAfH?8;Tkvp5Im3Uv1+PU)&4>NUi z(%H2}sVy&z2w=QnnkP zPN_T>%(QqIO%Zu5Z<91+pqf?j6h#$(g8vRSNYQkc}tE`8R?#BIYz=18>H@0{1E z7x=8cuu(;uE!{4RXf?+~NO3w-v6+${nPM+jt$hp^6#Gg%O8R2ZFWt-~@7knmYH$PU049Mp}3)V)x`UPw7Fpz(-Z z&Bz5#eyq0L%eZth4aH0kpZ{&x`X7NNhq>ni;N=8}y z%e#hT{|jsQ{_$s5IQeMMluZxWmQaPIn;i%L(RQ~1r-A36aufu(W*5`u&$&n?dy%#V z1Adz}`j5j4eNWpsT}P^%M2ro0noQ*kM~zKmBvmz<2{+uS=j}JnU)s|n5&5_1W-K67 zW>>M>z~n1UG>%F%F%&cMM8NyTnCVEOXs9+D7LL<_9~_|FjtKj*9?BHk2|XAp}<4~-=+&qSre zv7vXsd7%C84}LtN!GYUhLXyRUfrAv!Pi;qV2kz?fvs)Z1{Ru@ni)Lw@PckM?(E26PhqxR$ z{AK*}&b(cF$h#O<;7i>t{DHsF!~0FVz^eH&^|B45OSgKhE!T)!$5F?J)!wh|oeZjF zs3Ef{#Jw*jx-Uvb$=megoYorCQ}=cyMH6L^Un;$Ws}XO}C0y|(HqcJm#*LBZtDvF} z>d)JgWsq92(majO)9kRI3B!I<>>~@`Y0p(bdB2V)ld>=$Yn*aqjg!3F7fcT!N;8C^ zTh!(lxvT^~946NG(HLU5QhFm>>|cF{qFoddLZa@M+;BWNpM|u5bJY8_-lP3Hgv3lH zc!*Ux32 zEE|zv)*&}SE0MC^!QuCS%cRvP7KKh9=0(L=2!~r%3OUqD?mo z>eBRPy@?CFL0K)%e4L*t#FY>F&ws8)*uh`X)qiC*iGf&nfxjuO3*cKI6t^;hEHh&~ z;FK~%&Wq4v+1!4IDd0j~!~Ml(F>i1ZZq`G#QK_$2q20UU0hDqUCc7ztlAp59gOCzR z?|k8K>fdgUJ#Gyo_%WxTk=KMeRq-}f(T)OLg*IN7NC>r(eU}>eru(aTP<{b6=80E&gf+nBh zD{Fj&>=`F5yQ`7C3=h4DWL1Zp5+uOLeDi87xtYSyrTUmkCQ+Lt^?^F>PBA4;tqZ@8 zAf05Mqev=2T%k?N>NBhBW#fE*~zVRqs;yxmC^!vZ26k^cy`HC=8LWO z0rRjXrycxNw+>lHYkl!FR>>688(XU6GT;TqTlIK~l<>GpdqxIxxy`xN?$S%b*=(da zoT1q58?X;TZuwSKXk>M#W>zlHkpm)ob)I#m(T=ZdKI=DLs{@2hMkXz5`L*@rv{9MD+n0Hk)2OSW}duM_`!5;`+GmX%?<$qwQR1bMv4)t#K^`vpILd ze_O-AT9D%&U$wEtgWC|(cT=2;ynx?#C0oi>z$2;`KA*6&60o|QD=$VrpziDtKKd5A z@ubQjo;l^Qp@n)dK!}8v@vv8&Mq3_|Z3Z8R{@FYFqi-=DS|;hAzgy~6;FFP3l24@+ zBqENJSlo$y>!4?=_oyHC(;+l7Y54~x`01cF8n_q4?U2M~6*Add`thk@WuuJIhf?59 zLSuONVmn>qN1fp5xlf-6W7_$pu1FVsHh;LycPm zmQ*zb&ST<6rj#U(goTFZl;%P%+E<^m{7B}rvVvO&{`TJey2f}YAW3&vdO9E2+-s#gFmk#Ee1XNsZh7(aL;A-+K(GWL!ya+Kl^f=e>>5o!85;U6&^P| zm?b?K^^}3H6N*6|!)jzKk&I#|dS=mp7&Wu$uCMJT-gGFOidhA%XTA(sm9CxD6NZky zRJL9G94i^Rcbl$`q}E4D(sv&bKj+W=co(-~^(SZUhcMC} z%B0sxTl?O4!%6zP0M;I^Rn3=zmo%q2Pn@l`n>M#>pKHL5+gQs<+eXo(Svc&|A{~_` zh>32zvXbkl)(l*{I%ARa@~x6OTdmIL>F&}sl*tz}BwP?lCD#Lc6B)|-vSpMpS;y7( z4CD6USDl5Y$j*}^Gbg>^>JI&MeTP>P$<;T2-GfJ`?f57fg=p3h{*L z^3u51I9O8Zfw5bwB`zt6U-vS9kqNZFQ@yvLo-;j7f&@me;n>yH)kEQ*o5rjRdH-y3^;U zsOWW7)$btASmpbho7^UKCXiF@1uZ?00($XzR&J%o`37IrS{uT-DKNh@N=*;Q_J2dv z-21A=w!Cn7ezdHiBXFvXoSuVy<8nppk-3$CL!bn*Q_jm`xk|o74ylM&RLp(bShp+V zi9ef@oY*2%YU^EhPppd$)%4|l9UZbw*f*~W9ma^L_P*(oV7Fa~Zc=kPZE`~9Ep_$Q zZg_n~;4RH{Kz?{LfbCZhS2^WqX;w92{lRPloMC#Wy+OWv&ZFv9DU~N4^+)GIq@8PZ z#I|zZf-fl-0An_N*&UgbqLS5X3T0~6s#+JqTgL}r9YAt9xn+WO1lRTpX)ph1M933x zoKi{(*0&qV;_OSZ1^`%}=@qD$@d9DtoZijJ3_%MTt zdU*<}Df;zHMbMm7zo3{LrYf-8G{wW^6Ih8}n~i2TK30AsMcLlMF)lKAg3jMeNl=Wh z*ubo4;- zw^4^6n0P*1VU%%%xIWmY8l%~f(8H}-OCYO)#78u*FKVyFhzJvk*8g}=Y>hlbUN?|d z>y%R4_+XDS^72cbAhq_gOt88)VgHOxT+eSz&BaP_b2H0(&W`KmympWxwsl#mxOU%-P1Ph;? zZ_qwi$VUzGOB-P$T!zw|05Ch8m2pL9loG1l}s!lnEtoTlKLyr+Q z&`3tyRGI^S#&`7h*D?}QQ)~RlQ7|JuAJk-#b_4aIK5tfI0aK?P);UWYB?&bBNw+$W zylq8T_9=CeHmhPrBTEObQ8U_aCla%#=N3me z&Y=3wn{8w7ir!;-8qjI=M;hnHVY4ypu()k;n}X;~k9*$bDvJHsHaB_P$ptX+hCIg0 z8a@JR_q5*j!5L#b>DY&$zZnRe?TtYZ=HCJ$I~UyvNomdw^8!sMV-K*uz->0HKpc`2Oc@k zm|lC6uMSO3lh2NHS&+;GAn=!9^ubQG^|ZSHZBwwwwR!c>%1Ps!VOs*eP zIA_;u8m=UNNb_A<HIb1iA=O2mam2~G zUs`?W5)`H*jZ+i%>QjsNRWUdvt2oF2g=FZo!GexiZD{J{3HGy^BDUt$| zqpipoUPfR&At9GP3+9gGLn0@~%EyQ^r_}Awa?YLju9a!P2ivz*sVq^0m<7NasMDfg zwDL|AG9hbZj$mZ6J6E4^AAS9b4Ec6FidE5N&su5SQlt!N8}msvUzo&M|L-tUzt&26 zqp~gu=Ux6}lEU%6CFd_}X5$7S(_XP7f>XjIj%E#rNH7f+yJyM!8xqmsYndht8XHV5 zMngF11W7zW5imPH*2*|Trrf$$Wvtwj zUtVaaj%gh4i2|AXhWL4RV77z`(_F1h%s#hT=zsUAMauX%MIV|o-{nu`w+H$C9@hcq zE*0ZE0{N>QbMGZ{|7DKKyEI(&b2&Os7fv%H^RRjM^r&)ABUbab{dJIJL!0g8tmRFF zaJ+-wk&CRQbL6ihwgQWy>@y9n5GEcu)G1ZDmpXGs8Xz@vE*j-Xx8HnIr=o?g^I+au z_oP0dbcH1`0=HWSSZ%ZRFw%h3&A^4Qn!tun#n}Nk#_JCNBX53H97|Q4`i+)QzuH$< zCL5^930XLMcQ^QT&n;~@WQS$oH|>;L0jvVO~s5K&3Qz2cnt=+b`ws0Y9iRf2zQ;iJs} zYCU(a(3TBxskmcPp0CT)7DYI;qEfRrcz830l6T|K2wv!{B~hSmIrU7CslE;h>cbKMaxJVO{|Ga+z*u-=l636+}Ck{VOjg1)*b0|jW{-m=tV=OyT=VQqN$i&@&a zqwozaJc)xyn*C+nJoj!d1IEu{Vr&}mXUY+?_F`~~QgX-jel7zhiawfFY;X1&vt=6c z{ax&@E}3pKWOWy!kU+@|TlL8+4)iiI*5nn*LhhG_(oZV6O{_&t*EF;IW2F51uS&&! zUYWQ1BQ<-+Uzjiht9SOHIqY!1mPA5+qOZ!Cm+uS+vfZ zSx+iFu)#4Y+Hq0XZ`x=|hHX5YlLj-;g2EU?BF@{6c3GDoU>lasN{Dq3WNj-)!9I+b_Ya`4{|>`%=d`~AX+bP#9_WnuCe z&ZRSO&rea(#Q|EM>dNY}^?KilF%GV&Bz_U<3MzIsCli=lybk{>jUaBvCzJaT++fg} zJm)_0!KSOej5|0nFmJ@Og{ZI=)rkl3+-Zu2zD?D@jhC)oVmq#&rI$wpeUu-9i*8{o zsN0{~Y=p;k$9&W4r^|efToVz!&fk&U;iD!yI&iuv`7iT4U-Juy(M^^xV@38e? z*9}(TUwJOKBY64Vl6^QhmZ)CF5hivqKHN*42JYQVbo?;M5K~S6X-BZ|zAL+nTnU z?|pSx=tQcrj>)q3@l1~U{Q~S*9qsDN{eG1JU5yEiO^2HUiL>mU7nsnBt1jwqnH$|? zpIH5+d>aFwPacCjGwIV@gs8MUW*k%NyyvO!%EAS4<#*V%vM(XDd4Xi*&tT7~=)n{z zoka2+-Vf*3>6+O&5J-BfiqYo?BBjuBjL{SGTtGl?D%)Y&U+s;20UPVqvx>+B@2~`{ zB1+_vJG7^6NW$%;Ie+H5m-i(Xaf!MD%`<qyhiIJUG5 zAgcAvR_yS=h3QCBepR@6$bd;tw32?8P!vKncwkUBV~rG`-V6gKycRej+ewzqyQ9lf zciHAiSte{cS?kRF09?9=qRi`!laVQkFh3st5+f_jS~oNI-P_KtQ&RNev4;#KhPN-~ zw2w%?YNtjDG9s69RhKQAqhhgZc`M*Kks)J??rvi}S^{`tZu|CTUn3V_DtHham8V05 zS>GtoxpGE)!=6sue8J2dJ$*ScM4$EWOQv)!0Lux5RWrHh57yc9v9V7O3Rw>b$m&@|-3=WqNk)@h zUyD9BdwQW5a6>uJqhz>IgveQA#oprcK(Dt5@N;fWMAo zfjMK#7*(~Ge<;i*Zbt0l)3sQB{83xH0S6VUZ^=i7xJb>+XPJqz<&U>Ft|Qv+{%k01Y?`zxKX*Lt{w$4l!KJw$}sB%728ab;!dOMZut z5y}pITd(xBC!bxO2l@v>V@_%^9+pGa2 zHlg~l)sPiNuBPAGndScJGPentiIIWDY?AlMFJY<-B1{#e=r>pPf%!WoTBToa2#2LY z5l~0qdF`b20UAN}EwT!WB|#k~a$83UzH=r2VE6v3Vqoi|@u#69jVUni6oSp#4`U3C zW4gULE0lVs31Lt(uMgdhvqh>j?D zX7-}Ci|>z#LPDL!6I>BTM|KB;*NwV7L&ZTlclWhW=gg)A@^+K0{6O^G^|2=(r|Rc* zqS-%29k%rZS>+8mC$tY~gCvO30R9OMOTT`0_ zDfvE7|4eMpieweG%Zg-Le=_)~2#ai(PRz*!=%fyZQr~k|Z#$c0IHxtmUeDp22(-YwDF=s035tiaN6DYe3@t-o}qR=6;0Z}u;*SxdWUnrTpi{4Oq$ z_j-phfsQVV6g>6X;hFLX0F#O(O=>>^aQCI>8}y{2ig|Epi=%5CV&3Y0kMtavnr<}a zif%M`grDMVt8W1y7`!!<1lyAkeWZvxcjpg4`NHg)MWhBUL+U;CHmgV8{WXE+G*3(} zT-_OMlI>=u_>%o?k}Vvpy?|s*G?5Z*ht>&gQ1&a`s!R_J&aghy2=Xfxy*MEOq=?@p znUozt`l5TEZdAxC zwXmGMvI&y;H{|vNzu)Ray>>>frA|?z;sG_%5^OpqsictCt&y` zrr9<0Y!xTLq^n;RlVHTd^8}ePs!M=mu_41Rn;;tanHU=`ElmD_RgzB z>*|BAwY=b*<=$*{*k`5yPpam8pOHU{@x(efwJI%@m&N7kz3QkQXd~6yRX<(ZV6_(^ zO!%bR%~;>+e#Fab8os)of*Js7sWV4aSireNmr!OvWSkc=}FLwI)^b-f{aMFp-oOGRs(2A;*v#W)}zWR(q@6tt+Kmj}bD%qJ_p@CZorG+bTb<>R zM>hhtc^GF(f-qv0-k3j=<=_05Z#XspNS%xszzM$b2Q;9-UfG$&12wzbRhx+f`_jX90_@>M>fEmm0yRY@eG~8x`eF6L)YrsvBJFy%%c&ZL1###%sK|+iA1;A_OyDI#7wT&T^c4 z6)uC{&SwIKgKCQaCMN?7dJHNw3FnCfhZ?5B{Zux4kINtH0b-vsR78c^FFzC`Qe+U1 zQS|UkKbd|bA1{cF*N{BUY&uMz4Uf*Gny^v(Y#RraB$jBDrBUU2iS@w9hF~SwN$Heqi<~@3!R~1JWFceL`iR((!q0Vz;D@yX z3KJf$xC=E~duT4&6pmfzxg$4VeN4N>70WdzBGQdyLVjc0nImvusDz z`_mqe3;9|$($O|myL*P-7)?O3IU~@sU%Nc`o;X}X^ca!{-v}ajZ3DeFaI~{|f5w#y(8C;ceVngC zq7vujPNOoUT}D}qyE1roqej%1Idt- zB5!Bb6U}j5DM^BTAWUZoL%foxU3Z9nt}6=?GciU0thF{X*b$6D&KpTIOyVe3^kh43 zUiwx`95+|oJIIOvhg3InTFlQ+uge@{$VHhzb(fLZ%)VCyWijr%K?ZOtK`0DUedZpO z?c#05q~hnANtzfy=VZH{f{5QrN>C+U-5n8zR zyVSP*Z(Qfnk|-Ty!Y?RaT5}hsBi*1;{kQ4Y^gIVa5saYU1P7^?`wjHm>pea2rV2C~ zxvP511|yt-ryrKHA4peTINb=z?wgM?K1tVxzS!MMXV52cPplB8k+)y34V}kbCf2l_ zb|ZNTdb4=b9%%pV|C=B&hHVKLl}No>X-H+_hTLtjqQd}N*vS{>R$P6)YS|4BM>_`6 zINKU20Mk4Es4Zj_$KAAi&jbTBlk@Gfm)>;5@#Vuyq7;?K*_aHUWG zp-h*%nI#v8>OB9$6Kbkf_EyGxW+lokXuusDaWti=Hc#!%V}c?nrqYlO_-)mWx&q$Hn8(p}xgg^D; zIf2K|J#`0oDy6*1d2>$8x?Woux2rP)GM_C%v)KAgCl7f6$wEP2PJ=I%5Kz3%i`Vr>9?*=FWIidFWNB+z z_T7FFp=@W9a$4$~G{CM_L#J-TZ-ITuVr?6blOl5nsm7lz*;ql_yU_jnY-3aC2*M73 zA%{))2I7GhV`Zdu1IxwgYqtY+g_6s7Zz^w=O=HYQv ziyaNAudiqyWn5yiw5RMV;$z#!#>S5V?suYbUw4MFsuiB77Y{RxH+r^OVuVA1!(<{4 z^jc%tS+bUqf?4hBfslf*?{Pf9D6)a!w`gi=+B!P+E;qfD%+bA<6!CdIh-au|-zXED zs{z#1QQ&-YVg9GEP+zAoW$jrArJrwKzboRS9aSwYe2ll_~ zr%H%t@YkqSI+Th+`MOoj#(1pTh|n*CUwfI$%0P-NNL$omnxLvWF3}i5p*(CcJ4E|D zDurQi5R;uwXPeZ>?X^xoDB|tfuFI!#Cx-b$1HhAk>)nYwTrAt6nCpk)Sm9a=1b(AE ziwpF8|2Zv{(eTGmQUXxilh8o-IZ%Q!KL3u1Jgo5*n)i~9Jx)5GkH|-)Q)V6v17kCX!G zJL$XSB`}X$A2qY^zHmCb@=Tp89J|2L3Kvf3R^lxT+O`PuQkF}%uURNEjUC5x3% z9ESopR(T%Yg>wUEvza=u-k?SrZ*C!63T8-|8={KIJ8na6@ErnW_&y+r?ry>boa3X? z6pVcD1S`MhD%D;(&NGczI$&sh4qv&S7KO~z13##z_S!84D0 zGIYI8#R7ZeRwh~fR-}=0d!vwhCm(PPcWZo#_%u*??YZ>{JSI16LN8pTM>~6MMHfhk zm6EKaswr&YKpF&rU~O5EiHM5%q8AhtBqk*x)^y~5@92I^{P7t~P;u^jz8o*y##}aE ziPA`>jugJ#3RS`u&9E3h9cB0}Ii^t}SoAwn&kLuF%KDQtRx-|>+7&x`B5nW97EDQ< ziqpa_r{qzVE~Emiz9B9X@Q22%Fm%?RtVz{l+hdy-D#PYTcVo4+YZppiq&=kRAa|EV z#drRRHu>byG9g2Py8hrsjjr_LzUe(B z))0$)$5rL0V%#&4>e~uQuddL?%rv?kI>rKR@6x)WjW^XwhjR@*C5~Z7&AAv)EFcsp zi!RLqvL(J3NWuS!s$VQ< zCdz)8m%8~^&=VK&Po--2|Lka;M6aD{cQ;N_83sJsQHA)&vv=#<)Iv|iR#?p?xrU9j zfm6D34-eQn|M}3Kr+(yW?|=1AVs+ zC3$Wa3WQL^+W5u*97rY#+oEcjfO(eq*oP9JqVA7J{HlMhbqE;`Ts z&un-*E*|#3PyxWdTmMhk4Udz9E1~{71%4oW=eKC>|47E+>sP`=^MBg<|E`u5fHC?% z-{4|6s-`}_y7L@y0czG literal 0 HcmV?d00001 diff --git a/windows/security/threat-protection/windows-firewall/quarantine-interfaceindex.PNG b/windows/security/threat-protection/windows-firewall/quarantine-interfaceindex.PNG new file mode 100644 index 0000000000000000000000000000000000000000..d6679e1e0e616b1430d006fbb2bd90d59b42f5d4 GIT binary patch literal 79691 zcmcG#Wmp`|);1a(0>NE_ySs)`Gh9D+k|cZcAEyF2qe``i0H=iTT3 z`O)1~SC{tcTD4Z)>yA`bl>YLW@bjlnpT5Y-NT`1L1QYsCIu#NApZm{NDV~2GP_C-d zfKN43#K-?+U@gTI#6Eqhk4JtphWjUv#q8-ii`WqUx23fi0&**05ht(ZZ+tS{^3QJwAv z=cDQ)JKq>Xo{Ud?ceEoBs|iBcW9eu~5fVI4r7EE;IQ!Mw1}j_E?!V^ZMYMNE8ydww znNY?Cg$x3$swwR%nrLD8;F24z!L;dwQ;2d;blbf=MfS`?MlVNtk7<({^W=WcYw+*5 za!<(R{q)FvxIAk*{{CMx4Mz=|M>I}%8r@2G%aPn}sz`@74UJJyW8^o+9ak+22MdJd zQ%#`DuEv~@t@cSxX4s#0J{(BzlyLa?Ogw~mo*`a>c*vi^zyXu6`ndC;arY|y~wUb6KN!D_u z`XWS)N=pHZm~;?A`4h79bSaiav6Qx-PAv1!*1mm4i}XsU_ z4935{yrq33f%;QLzRIg0NCbIDjq>s|CzU}Oteh_YbH0f-?!@k#KKI4DkgXa8l#;M2 z^-cIVnpi7v(RxR%d7|%G{*YRi4x4IQO9}7290DlKmpM=2>~h(3Q~dw@iDrQE2YGZZ zc*GIhIn^*XYqXV6c>?jLF!g7!<+mIr38ps#V=pzgnesULxKe%k*OS&>85w&hGV)p= zrM=AyJ>Uh!f;?b|EfEF2SpHt?XV!G(S2%W)t^O|x^z-pr7O2z+2hKyF_D~WXXK(R+ zO)mRm(~fIT@FMXDJ?ITT(3#^6BeF(+$c|)=vfd3;ZSLQ0bB@sT_>1t+r4q>YfV98B)q&)UG z3Xe`HuC)(^3cZACSAGIlE3?oKTTyr0iJUIg7XB5G)jgzxs@T$PdtnXQ+N1Csz5g3< zFE=6n%FlC#hxzu%vVVr?wc!;4KcU*vgNNOFZ}WS19$M5LrkCrsyNm;me9b|!iCTa1 z8b=l4S4w(X`6Q!Ap)HE>&&JYx|wA#m%XX`_nkk;>O&U-R|mE=_$?Aysr-jd6F&qP6>v&7 zGcGgx8WHJ$Lg7F=~x| ziT~DY*B(Pj)Ic`B1J1lJ?`OQVPPb*E6G`fV>h;N%`WKw+BE65)mSrORL4%f01z zk|8|vCDN6TB8)3<9k;{BwuyJwk9Q>mF6jFfKw@ttP_(c5^bnLr_kejb|NPeSyz7sU zjv0)JqAfewmC(`sfoda9)7j>5HS^8)SEUnE-h zyIAlRwG1cAE(~P-|6zW^h#xVyx{e<4|x&qFZPd?j1CK)k3Cy}ReY{huGAPV4dQA2q#= zv)WVA0p83C!=!t!O0me~h}-zY#qKji{Ck0D3w`Q?tilb);k9v6?h&wB>ml58%GS;Lju;T_YG+GI-Ne&6~KYigT6^Orn3sGvgHKIk$qrg9@sgo%m6U1@x^RUXd!QjZOFWXnsNEWMm zq-YwQc25by&OpHu(O?iE)h_<@5L_+#;4QmDI2HzM7mK)@Wn%s^Csc>YF1*&9ft z_&{QMxwP!HUxMfToI-Eo;E&*b@#V}Wr!OgeG*fpA`1TVrtQF9bc6|q@*Tj_*RIPiI zezQlf*B>t8MWWG7ib_fr08}zhVUqGiL3ZfOp59RYc1an3>$v3;hv!=wp)^fH$HTrY z2*aLL68!_VO@Vjo5A{#|x0}TRL~E z-Pia%0W~27*Ix++shJ$=8uxeux5q^{6syRio0li4eZ78&ha>R2l!uWZz}H!tb2Oh* zi@fG&c?TS#t6ew+YM7S`OcJ@dSLFl&AVtvMAa@M(%g|8|N(yY0uU5 zhF={bO;34wt_C&($Y-!(_)E+w4ky4w&#tO@stu9>Kb=uCC~n@EmCXgi+pR=5Kl9(p zTm)te8;X7#{=*l*j?NrN4Z<|hT+PhG09XO1Xhb=YdQ2mB>gnyJ`d3d~UG%9`KGfWm z&&fNI_&`hnX|2#FHl_rB-4jf^DEagpVx4lofdzVH&29J+Jyg3tA0}Aa)P+1ec*O9# zMqc_y4)YS{`_4FP>Sx#2oYX#@CjGK1g@?z_bt{PUk8^4E$VugN**ta^fJ-9H(h@h7 zrI03r&=@{lTzcJI(|Q@-iup+CWwLsKi2rTp#|8S7(}og~|84HcY8$U4@P6m*^fJN> zAC~iwWyx^cIZ-HW>V~KBtT(TM1^83)ZKz=ig_j|Fo8Q_ND-T(d2ie??e>+Rd=i$6` zap*Z05-?~BxfB)orqlx~p(r{m^|#6MP9}jE_~*Fv2biB_06@Mj#v;kQ)09S z>*qaVKyEI^Ti-h2um|OxjD}fIiHT_2OptgtU0KQ6PrLqljKir9BO>wnWq*5L{Oj8f z_-p!p_eGG4qu@fO)(hg$;znZ1;m&>O1BvBY zfwww6GY#glVd;#0G~9}4yZu`IPE)zOIV3H5E4%p^XWRNwx~`o()7L9LTvzjg*Zt8J z@1$bSKwpBa?R%Y~$LL)GVz^DynFf5tY`C{M3$W2TK7UJhR(MY! z%rX~Ef`;07EN}I}`=!q4{%XkE+u%o|kgRg(jG~wZE`c>WJ_4~k%A;%Rvdn6Os>^%G z*(zhG6UWGy@8&pKkINUbo>#xkW}4g()}}ejxP#!pcl5xQzYMs^)GBRWBA4x^B##EV z!QQQ)vTb8g$?xdG6-S2hPO2bDA|+G>;LE&4+}fhP=`Elimg4r0l+t|Qs~}=z z*>IImp|-+o-=0Uv(+=(QVF;NHKrI>c&g#Kt#BOruea+hX!!Qt%<9Bb!vMbEXl)t$) zeu^-B^^~H(vJH73-tgPoE8GJjvpoXWTjKU|XfOk*p+(S0>vM{e+Nk0$P0AMLFY%Nt zn-VpZr#ro4)o~9vJntC@8-Q}Z@inqmL-WPh5+|-VnXCyd@?f2zx4K2 zTq>K1DPL3dw)a zL6X+iLUF$xehzdmcC6S)b+(g(lC?$)7xC&%#7LSo+E%hbF>wL|wE#AT#J`!;zXToW zZx6Xuv=Y7<*`yaB)jkXebUAPz%If2CbI+(J{_$G=gmqF;M5l7xcX|s_7YZL>pA9?W zedF3vw5ZSC;tP*Tg3i>e&hMs!$vQHz^OGBjM89rJnK11BX&!wztF7}*sws^$(ccL$ zk})cOT{zzA^bCE#y`Y?GZIW;L31QYuvo_&H3!QsW{Php^=x)`LUV9YrBis8)#p$YF zNRzL;1wpf9Ma)@XE}o}52M~FQ4J4j3N~c zMg^zIw!>IOhoSg~u}pjIQ86=*dXMhW@4To><7j$}g^|Y;njAJqatmbrppb+BP(n#P z!d($3b9{f#!>#j@VUa#!Wy6@{kmq=hD7vqGmej@a5@Iq>zGIf5*6sZv_vrc{UT?Qg zKBS#pZb+ld!2+n~JZ(5H)b<1eS?SB}!}AVpMLXi(Bhzj^ycIv*Y><(3FlRQe$yFcy zvV0+Xo}IG-QQS1}fz#|hD3ZTA{BR;+YHy=21JhoA3()0kN#xom_3vF{;#=$q2V_qf zr@=-8aM@J4Z+tj>NR3=u!uWapB7j0@&dZQjmU!V0y6NtQuvBv9V71yAS>5BzhmWF#nuZn0@~dk%o+Mh*Y}Q)Py{mX7_Anv63+$Jv6duV)*#b4s_?j`ow~z1 zw?Rw}DUX|h(jwR~P3Q4;pBKXqYQy)bS}*Xdw3j4w5k?D?)}x4l{|m;?Th@}gXF)$O zP;@VGI2YV@Ztq3Ctw3MCzoxqt=6=ijwBSiroJUMZWQ)lE;#9_4|BE8CV(R^=VLX!T zw7`}vVvtY9*O#%&)F5U_yU_G(AlYC{0k5A(G(ho=syDBxz(;HP6b%t0g0jcs3o?=4 zS>S;RDhe_`4-vjlL)beO|F5p+?+oI@*2hO_-*hTYCXBOZEsAUwg;*GFZeNOCS7y(t z88#K0CS%0TM)sZ5{H_Q6u1hI?e|$iRygVbU5_0D$8D#a=bmb7QwdYA+2Idrur6gax ze8Jm#=j(atClY#+>fwpiWYhp_ZuO#wo+CR(p&u-QRg5(+N95j3jjqzuV!Xr55a3sv zi^AtTyQ7sB(QYpx0is(U$F}kdhJC}DFJ4DsJaKk^r{=RdBIp?kZ_z||UzCLU9Z5I) zQ;V>YeA7o@{Y2z6naqvPzSi2=6d580y)2bdgeu%$qnvGy*GzpXEtbb+ouc%p%bDzW zC3pxeMx&W$t4(fA&V;Y4O|;3%6g@K;#KCV%@y2g4(&w<7|hvP8PNtnF&C;C=?v- zgt(RN*PYyyPzk-lT)aIVdY7*DwR_eSWU?4+%?&v{() zqoaBz{Qc>(>A4QbW)&Vo=)Pi-9@Jc}W-@AM2`>_^6wPIPL#rqiMk-s&pwKxsk1bXt z0e@>5QzGHU%F6}nD2UvVnVb>{9)VuUXjU_bkIUY*qZ4>V4-&$EhpewOxg)%03KHbF z*{Yq~;{7r=0EpIhKfwE<{x%vh_$FQ&eGq4y&<)aW`w_NZ(Yp5gdIC6!f5Si*5QEnph->3usS9lz&b{V8nHs^)a&34?p@V=TXu*row1_e^DcZV{<$p;YlN|R&T+1I##=o9!`MD+W5zt)K-$0phB-nvpi8ZND|9uSS=t~DE599tU1quU$ z-J)DMs9Wg@rg%oKKE&_7G+mvEZ|(a!x`BK)5uV1xeUZvS@nXks=)B-=3${>IATl`aBJ>%r+ zKy<^^0Hz6m05zY@aqm8pvBsodA#|dKObLpTJn<~j;F|tzQkXaPz#zx*)hsVp#PVUE z@V=3m-o~mHmqsEB(kt|d>AjRZE)g?YV9J)gy`_~|u>Y`c9nOK83^qFw^5~?M<@jw@ zh7%utp4+Y_$|AP7i6ZKCDtp|eki6D1Vwd1!!(nUm${PyD8&*sQb$OBuC8V$887!!k zl%)=kYKQ&mBHsnt=MAe%UZ~@v$)qD^=u^zVlp=`(PH3Zqd%25q%7(>a;}v6I_7#g& zkKozU@|Q(au4tPu!83c^Mv45bQRKP6-c6&rp|wcJ(34S=`|&$9gio)~tLI3RI;HT; zPtK&MKI^?zNW}i+`wS;_?-ITm05h1h;&h<(;m)M5LSz<0954p$(g@EVAaO?-YHQ_{ zEeqrt^lmGLl{&^s>b92V-3Ui@-u?si;HHFx1f-N&lUi&s*?4`LNP|Q>2JWgRWqP`P zJK4#K>jQ|{OAf^F$Lcvx5@$OKP1_K7982E$UH3@c5c3`DX4PJam6_+)p=v}4^z2obw3Xg}q17%ZjQuD0TTO7Sq7*z+= zq#*a;$Q6}%kz#46o?_L>8KQBLhwN0s1GC&=r^aBir0+_LV|qY%!lqg6Xm;7aV3DYQ9 ztsh^n%?`0aq@s$Jr-%=9jQZzAF%j|#aHEJgNv>1yHFh+t%IOUIfy_z#Cfew^<%LPkTIrX{1pZ@Rs6lvzRj?V74k7W} zjmo6~+8vtd*d+B96Dbg}oF81=;*FN|yT!`i)y@p%I@ik=?dC-7@w%++H!ws0%zKBP zwEL1gH^3XOYnM}K4+bC=KYQ3@gv(E?nD$#aJ+mGi$DCGpX-LA6k@>wyUNH<$Plfj} z*eoF>kJ34{9|Sk8ZeIj{&;Y3a=kQ_ug- z1Fo3GB?XpF3TX-eFk)u+K=Kd>*G4<7k>=-(x81Y zJ;p!1=Kun-_s(A4wVp?(P--AIT2D)OBICmj-=#V?h*=DcIEaqcTcS-5uunqWN}?zh zPqH@)cnkuslsef}Cfp$}{M|1ZXwK)EKD(g_p;SlN0t)~>52G{w(2 zEj!lUDO->;jJUGe-6>YT5VC+B(j{i5-qPSHnQz4><%rs5S|MV`6v9~zyHYhTS3TDy zfv;R-ZRZq~^MwnRAMEQPYp;$rC)p2Lzke*4z6||PadUpMuFnW;3-`SUAnVD~8-{ee zLnjqc{YnlFQ8n;;R%P*h^ra{9`Wa5@l_Ca`Y$SoZZ;MY@RgCdzKg^}7Z_P#V{e|A` zgw9X&U7il1i!@Q}tl!~!cB>&}dgEH{;{C?syQGn86ztn|y*kVHKV61xIffr^4gnCy z+tDxI>uJN-ben%!xH)59CvW{sr#jGgMiPDAe|?^uzSu@E>vzhCYUr8nP$vh9%P05PCeA5K}k)cUb0kp||SSr<+>FP@`3KrCzKV8f>iVk}+o$)u%bhe)U(ufTJ^_~6$lhZ$GwQ_P zGb(6MNX&@)j_gUMvQZ0WPNMvMw!p>PoA1+Nyu+bjo_60~^^Wf-1VFc^CQiVbfRSQp zlQEL*lK#M2GoJJ8AdoIL9v9l}ceI6=qRM$`X~&d^ZnJHx@~Q;u4#a|7Al1qiMQ0IN zr^|x*ltn17WU&HPe^)T2Q&lu1fgtTEh5gu+<`%YE&~U$bk{P8c3s;2PWzM6L>{&yw z9p_p775+G@B6&h*s2#Wj?8d9BERdJUU!bwV48{-Npz$9(|5HW^QV_pqyf)>D&RHn* zNzL^nKV|toy%zSIu21ueomMswcZ7cojjpFMhXqpJgPRotWkN<#<|}8Wo&&rqQZKHM zb;B@?rEc*+I@GU=i)Imum&Bom4ZDhrG86hV?IgOfLAjQ`Lwr(T`EA2I`*%>|w@`fk zD~_%A5pKOY2jMh*PsT03jo~QWt-(Rp+q#@Ni+>}&!|OO00K}E{vY%Y7`v zXYzQ*)30CmsxuAt?pvJ&Xb8y8jb0BX?fAK5v#?U+O; zk+ef)oX3|7;>U#rAnK-(;qwYoX5R#sms`=pKKrX;u1SkFDzKdBrxy2 zfw3>r`R0(-@P(XyguI5+r>g-i3ekqsVX02yI$=*v^zm?hRg_sn-RBzfq4K+;=aXP( zEU0UOVCgU;Lgi<{`*_O97_7aKMAJ{$P`ba+r>&SUe}(-zHnSX*YuX)RFM#GkGLkz0 zoo`I$j+z~)YbvL6NGP>XREX)poOj+8DY-l%T<#bKK2a={T<&a+Gc^5C40%Z&p3yYe zIHu^S$nBKx@W}C*iw}Uf&WS+AJPnBR9rk@Rmo1|cFu4>-3Z7f@`bud|Y&kN7 z{6a~?b$yc zgF(v-K;NaZQc}B&9u55cMpNUnOfo?h`13Mw53h5R8CH2wBN6=`Rl|-Ub~*3|nxUci zx<91%u*aDUL0WI;vABuDLJSqQBvuf$Y2H}gxoRy|6QwXI~cOPm3N+&udAZt1l%w!_Maq8+&b?kd1f;kVV@`!75?)@ z%Rgki_Fc)L`!pb+u|8a7{7x8$QVN2Iu;x!yT&k*q9X80&@bG0$_`v8gB;NUv1Tw0z z92mk_`@xW=2SE;SrRx0Ky$0>#AA?TB{;l-ySU^87W$+wN0J~oNNP+(*Kv?IR;ig8W zI4Ci-|LyD+GPuYakYy`+Lx<*gvW$y6Tl$axq^wlFa7g!7sAi0@hGo}w$Hd3qOL;g% zv%(%t%B4@2q31v&=(E!1&${(|)Y5tYKRcXaxR)syFs@{9g4=-zl9P1NaIguY%X33X zqXjfra_3s)HpoT;H<-Y<%hwmSoU1R@klpsI?m>mTfVe{ep_R$XQYadI1CBA*(YSis zya8pU_QeH@fm-EjLTg&amHmJ|RM zre50ntX|p+T%g5A;V*n+$LF#~DWAP~lF7*{I+c2evM>qvyi6w{pYy8*q(EY76N3~F z`UoNNeu(Uf+yOu?%2>o z-9!UF=1tGeZmoEO6^{U5%pR`lXtt@Zi2}tkEp$p7PHMKc!r!aq2X`tP{ZO7GKB(4KXmf@Zx52=xXKtG&5sQIrb}kQ!z_TR>MCpt}Y=dD@h2e!ktk+ zG96aa<>SFu=)XUu=jG>XcgE5$R@2my*53o9E`d#xzK+--vT^Slxr|NyWvnT6IwCMw z<)sj-soSk|?<_M;8YWxmvr>khAL8apA-pPCZgg8!J;Bl^UT+EMV#cC6)KbyRkd*fm z(uhv0FK7DsV86cVUY?U)S;D0AJ^c9!S*Tky^OiMN+FKnVUZ^W;=Nl8X!fgff6gekl z>|HjB>RuuKW=|w@wW;>P0$oLQC@=;tDQrRA_>3Q5JKdU4gfez=8fFGYf>NO777Pj9 zrW!^i&G#Rn7t2YQRK`SR(UWK2=)78iUt8$#5o=7Sqo_Qwp&y?nr({+Evr_ag4wjN2 z5M1!l8o1(mb<*SX?D7bsQ3a zewC>!Ki8!SwyPq8tD3HeV{vlx@S)CjVyM%5znDhnTGu4>%u+e|(?+3qT4uW~I%Z13 zbhB2f5g|%~N~&zZQDO5|HQYRdmq&DOXpeJwurWDDsnzEbWa|;0*~X68^YCo222R6M z9|g*Ae53biz}j1zUMmxxL#Cj*pE-Bkg|4V0#iqk(*Ctu{ARug6;U-Bm=qLW6bH_ur*nE0F$H2w4GQ0*ebrc zk>4MoCF$gf86=0BzJu`XETXDx=%-uQF_hIJK(d$}_(WNKSZQO0rGAAu;%6&c)1l}X z_aB>fc*gRqI3_uAui^+R!Uwp~T9cL(Qg-g60`(!iEbTC1Ou8Itwo~yX_T$C|D+^*| zD(X2})5M^#bg)F!*qkhP2SKunKcGCCfq{-SqSwC8R$wZEn}dhkY?g#Z+%iN?6-@IL ztc$^OjQUOHwCL`m;}M z4DQs(+CL1+qWhvrnyaW}#1u7$1XVa?RitDVfjCA+Vg@P9My#fb^S@@@J$-`F7ru+< z|H_hhcjvY%8UOGkfjNjq04*ZaEo+Tzo<{)Kl-DjSl$DpE>cyQYO{^j(XQ_(#D?cmg z%uip49DYQx2FB^&N=VNY|6Uk0d%^Rw%VW0$Vm?HeespR+U{9&=rl|_RUIG(;zC|7d zqRcIC4*q#U7l}Ti;KisdjrPJ!VL>q%`b%EeSed@8uGlv~zPU0pA)$wgQ$irovG5vh zKweC{zKm4Yn1x#B7}c8=kG;J z(kpagGe$?pLM%J(mme<&eJx$C3; zuGd@>5YpZ|f0B-?cO5oXK&?XOa)hWnT#5uUwk1g(=1KcoBqw~Ml_FQ)9}UP{U)V*0 zN@|$DZn8HG3>Ob(udvl4^ad33*xMS92$Kh8=S1-@VoJOo3$({?ysi_R@K4R+Hd7e< zczVN(J;SE);%nNWHdvzqk8!g=eWxLC7C-ZK=aqgyGiFv840J=7zC5Qgn=;xQOsi|H zOfM|NjN<%tcjosKAy+t5iSo}5A)^ZkK2b`9KY#RReK#J@owzZ}+y%=3d;USmFtat9 zmDeF#yVd2`rXOrLNM0ec*h@>sm);?Vo=q}eadHK+z6*s@SEbG?8%QL=Ho+|^<_0|R zKOkK%LCaX5%9688-O1T7d@hMa9zk)x9V!U$W4Tvc$F8_XPS^eZO+}2fLPg}|1tC2- znE3*u-AC&B^CoaK z1{laEjpf*YbdsaPRpFxV-)hGAtU)f~QdqO~Jii?w3wa`cw31;$3PIS}E*?cAYG|QM0)Q9xZVo;g%pq zmMkUjzMC<^jbu@P;KXsM#I{7~1I*IiPeUUt5Treh{+s^L+ z)l`C5OSkk8d(<;oByHmNGr^VG>hAc@OR;W*|r#-VUPZO_0bF`wI8&Q)!`F8{y@t~Pn_DoW65Ki2YcKetby++!|c59$iNewct}5hN0?7a>Uwy3Ns?G4$hmz8 zP)vtulN{i7h2Ax%MU(Bo#C}|yUW!jh&`(yOSsDzv26olEVGlZ;!sYZnmt zdJ!1al>^Ftudn}4Ea!t5xc@E>$^Ug75;kZ-4t53p5b#Y<56aX5s$C-5&=-6aX$BN4 zAr9-}D=lK7gBIiT{b%&2(BR%(x`-kT`(9n*R_z8&P+5};6|4nulET@Gl1gr)*gein zPlHJPa1%%A8mulS@!5f2EjVDQ9P?lsF=J$$On5@erYdltW5vi=?5{)7EwV^V{}gqJ z7hU*N(W`s7%IF?_J0~;~WsqaWr)YSA0obLW*irmZqSNJDW~TaF?zjIG3Jms237QKz zn!&a0tvQoZVD<2EehFR!b>nwrx|G}L9Ls)}Idhw%%oyXgIOg4{2xTbJNw{4&BtJXJ z5m|I-sNL+jYkilO6-@uNBlJ!Yp7}xh6Yy*CtN*vrD%p}z^GMt|Yc+d1b@4R|)w$;R zk~j}*@#dOj0oJcRZj}`^yV$=htUc=;FWn#lI4AE$9T+_efu&4Ag-tZpc~AJ}yeB!z zvRbjFU|fBx%kNRy?Ch#Fca+VSAfaqkgp^pHO7oUz`$)xPc^efP?sv^<%-5Dbbp9j1 zMnaOy6t>h~Q0TVMfBU<`D4a*9Sn=X4RM=FuYkD?YpPNOkIIqOZ_wfGOY}Vi%QjZeQ z5w1{I^GktNH;{|x+dJqp>m$TPx27HMxg4jQdZ?d zFN&Fg$#`sIQ>IgsN3V7pvh#vpVrbj_&7-e9q1{F;k+MC(^u+&~Z8Wb0*}NvHOm@HO zrTyTCI!~h;d-Wlrx=7`P4GIT=1R8_kx%zC`h@<*&acsX<9@1E@or$f=&Ib#}tI%%v zUz^H@NSFUaVYF~AgdcMQo~j-F)!>2rg>a`k0|ezkhW3g2Ve=P-JxEP(Knrtp8n{G~ zpwu3_GSa*+%_q6km{ygZ+UiDFN!x0|J9E%nk=W`h#pl4aQK+Q8ySAjX&&pIi87ty& z)STW5m$vjL4EIV;T72xPn)r?G&Mv}=BiOmAZa40P;P%EO5~N^kvH8uwh2U{e?c!KU zK3zp?qNGCe!UC?bKxd+Ku3uPD5eu{Syc4{Bw(NAKB1Ml<(rMFazmIYS?IGb$0gZ;` zfNa0jvv#@M`Omqr8LoZps;_~OISPBl?Q{}1vo1?u0ogj4*X%!|(H+^j0Sp#5g3U3j z`?(DB70+YOw0Fd9ib+aoTI4R(9^vEW8L5)eSw_iy8u|r`N3nC zQTIgKetTL-o-Ey$%6BDJ;EtIghN8ym1h{0Bzv{2f`%?_ZsJkW39`i0(sEj?wQ6io* zEc8)hH`0W1m?FJ8ZT?n-+>!5G?p)hm$1l%RLv%o0+Px21Z7cP#MC5H38*o;+x`T>2!)&vuMXJ&<*B9k`^*4 zRS#Cf=w*hG($e7QeY%LFz&rS~$$qK1j65Ir=E@2=svJeBOH*IK-+kn=)N%_x*WVd= zcvvrS(2OEstFbn#`$0WB8Ny$y)vg>C4#{l~yDtxz?v~<_6%68Ro<4I0`>bj`zjO0} zaxGn!%(8O=d>xf0D|kr)*jnr!398@E-x> zCOFd6j$Cjlc7I5m9J@@`R3#lRWLxY_nA2z5@y_38xgS*Q=O(+sXG~EK>4uIy-Z3Z9 zH7mc;qRYmgg|YijRvhNiU&;h;FTBrVw9z#1644$KY+CF!-HkYZDJvc2iB*daZ^@9b zhrlYX#uw)`NhV<{0tKnJICEYtln=8lu>K$Nk2F38;3*J_BVqi1<5FZI@Y3biJL6`sH z`CMxjVD&*x)48eT0y)b6LooZ7wBveU1;`ivcWZGi^lpIvT?CcHQSB&H`G2@;|F`mH z=?qfAf6>J{6$-Eb|HWhS$^y`a{`V+&!W0qzi>tP0|2YT!xF1QP%Y6I2&xu4aENTKdI0 z+^Dz^h!uh6E<0TY2i%%o_rovDlV)@q)K}J&BHKX(UJ0)0tFxW8%`tA;adIo_>=*loA-j z1FK4llTS}Vm!p(s8WlxdRh+vvC&YnSge2>$)c(eKj~a#|F<7RioGq=I3{^WHVtC&W zn4T}-7LgKq)w#v7XzBXp0{&`gui9$lHVn( zf;DOHX+!A+BG39b#(>cyO0m6{SQ*9oed*l~5*s)fi#JLB=MitHpb?qPKsfma2@cLd z8kB&)4(3>u*>w|~S=o^EkQE)|#j@D^b%THP}tn zjKd!zn50FP_Ac6yxG0$sK-RCKf~X<3dUgl3mz0pQe7|QVe>%pOErZLt9zK0V>TYU= zM7zjpPAvPU9G1=xqt+mZRQ3gy;_u_0rErDA`^UvsJATS60VcTYMnrz4So_gujRkdV zP+mqTGuUEbCqskvSX>O59u7wxhZZY4d*I%4m!NEvSo0`m0utf8dl^d&OwIlpDrJhz zuff=M{JyMuWN*3EP1;FQq%OmN$7KR!GT%Hw*6wIeJc;`J854l==($r@tfs9lXB>dK zy1KfSii1FjHPv&3+R5?V_Fl5{u;KgL`LH!vCWVzB7UdIT{sk%(cu`s9yNrQi>IhM) zAm^I&W%+6LK0U$YgV!77ckEA;|H z=%YuAzYMU(%K)kru%74Q#1aR|hg&bTs@rH9^zI+B8X35Yd=%h5xW|~{b|^2yy<2cp zX*u;*rzw-3m+oofVL|xB+&ec4pg-Au9>m$lwvgH*%}WX>5HO+=4o;YrcU#4*(O#C> zl_0YhHhn7dmmP`M@>{J0E;mw5D%ra7g61M2w8YKAT{3S8=*2?&A!g(9v{Tzg1MC|x z5FdO6B=y?X7@}I;DF6J})Hq{5c%<=jBJQ)Tb-@+K`TRAd;dKQNX9n-E{#dl5m!5IQHJq)o-Ft=G;_d%1WO`Qr`>_rh8`pUjr?yn!rHDl^J_}C zCN$1_++h{&EK2g0s4-Qf2p5iio|HtuuhA+vsl#BxbtZPenmJPpcQk4!8*u(jf5^~% zZ^jB(&=QqniXgl`LqN8M6m0sQsh3y`Lr=W%C=UX69B^avx6QUAcFN;Rr7@Pd& z5;a$Z#7Etp)NFK7O@YmUnYJ__C<?$k1+!2N5;Rb+gLELOY!!DSfCAvN*EotPmpgiY&OTPRXEqs-={xE{!WRnv&2@T z?G1ErU|BU$qJe}S5Pcx%J!b(DVO`akRtHmx@udkeK2O{jGYsLX=Be~k^BPXys0wa` z>k_E?YYtWSkTOVdCZ?-N=y+!gfONp%gG6I3|GrqmmmjlsG}U!UD5uz_ipLR-7z}Z7 za#Iwdlt^kbvATYDTPVk7Qa}^}IO^n7>_plRMp{~Z6MGngde^+05KEPCD|AzJAxY#V zm+NOnK1W%YicKCK62h5mp!OoU--R~r=9`$vTO0%Y@AI9ftF19kiD4+L>tk>1w9jZs z^+M9S4>9SVK#Kp6|27Vi`vg9l=*7tUG`~Y)`6AH?V{lEd{y6}UH+fqLKy5`wJe#vU8m*1rsl=38uHtjxD=27e_T+vGO`yg~#y@XP$2? z+DjBai`7O4{T6SEg_9j;{<_kUmQ!tt0iZ+7h>)G4V&x60xY*-rd0_J%BS|~vP@>oD zk8GOXpDWl?4-F=jhqLv*>?qk{nKm}M6l)*Orrq*SBV$mGAFH;IRe-;Eut4>Ul|n3d z!~47)JznA*Ang5N@IZWIWWqz9{d@RolSv}ZRu??Olq~~dcCjP0lm~qxx4rj$UJ;xs zl85hUxRGN3-b7~ESSSsffr~-4!e1KW^O79c)?~)U$Qf5JUmD*Fb%8U(!tI@U8b}j>}2#~t|gf|b~id9nF2x^)x`WFvNqS4ES+9Z z1ierK-`A}LJrYdS>XY{eX18Yh>Mv9Xbb|pC2hQ`-Tm4~!s1Iky1NMsMs~w_KB!_tH z^{?)zUwmb%zxT#28%nONXnMGL)n#K}cSrikC?~UrYaFuDta>Ko2%>Rrvn6J4jhMG= zjJ;5&VB@K?IjT@nN5cCE`rv!ydT-}eBR6tq-d?`YXbp7ss`>Wwjwym9rnHu`Wy5y% z5}94(-_el=G4uz*@VGEM-_jSh$cy%}D7PP#>%iYx^c!Ptm-PE8+Xe~A{|^9nK#0GL za`&;nZTO@-rpuj1DBvTZcpjHtyp~*J567g>_)fpqGE3&jff-EK;nZ|>x7;iN(;UuQ zJCB(DS9$1<5AotQ8CQBoaY-TS)U)S1jp_8$PdIUHBuz-Y*U-efK79`t6_2rfM+bqp zJkEd52f1cWB7+BZ(C$#zX&0Y-tso?QB)MWKSFB%6TA-U_J>#e7Le8K5JAJ*jAAt~H zTXZU=^+kj_ce7+7g0h@x9!kg-ue zS#wsgpbR>8Zlq<*BDQ$ud}ri6OSx}VrvFh08H_8aXQ9MzH!ZKGu%e2p(roO$LE1Zq za0gW#&QaIt{WGP_;4If_I9J-q<<6WTel9wrgez{pm$}|odF6-`t9d$A{S}*uNhY@- z3$vq_qlb<&;y(FK$%%X;2Tp-1?L?W1s2GSzt>nBbFK5k)c~lEwsjR7^$kM~!mOgFv zfz2Mr>RUg_%IJM;Y95Q^ax$jNosFQ+OV+&0xnWHmq49RQhMZ@Zf*FxV+aia~0rgZZ zD!!QWZn%xB*Dau;AfM`{xzrS;6YTG2aBLD!ehs;$rf$GD(iJ5ttlfN{m(A$+IVAQczq*epVWp<#U*q z2S>N<<=Bt|b4)y$1!WZGW|5f|k5wGK%OwMKR1(?w`DDf!a5`NCO?K_BLUxi3|Kt=N zWm#u|QG&(sjstAn@FM=&cTm&)Q$F*Z2Y7vdFX~}~Me@!mDke4BN_ue-*{MlH8v}TR zl-ZK9D646psjiA-n;)0oOk!NLjKp4T`jdJn9G_7{p%}8dyO@z|!!sfBsN3M;#Nx9= z2l4VdxtQ{T9MY3xG5aUOcf93lUqU5oE-NRrV>7RAI>xBqhfhW#RU2z`JXr;$nl3Uj z60u9z;8s&KwMv;a*-8ov$j#1@eB-eMU1E$PQ%H2Ih<;J2cGoy7EtZhmHFMW96tGZx z-TPS5{|K8?R#V>lA{)ECVZ)PaeO?d7ge=O7^YL}?BLTnI5n7+03D% z$LUi~g(cHzyNu5)qNpHGbdfJUoLdFAC4WT%snnN3QZg@AKJ>`H>F zztOOD{4*k?x)~)G+`v*x3vJdcVn>c}w0lHsD(noS;#0^e4BrXOE~%t8*T%r%gB+G~ zh>9Uid|Y8(HW~S4G}Pu3HPXt?eQmg6q<^HvV2Mj1J2#&^=|ib@Ax;i=$s z;KL(nUVn(>+BK|+JIH_j__sXu+)HfOxP^V~4mWa&4VS=l5?u$h#fM^=jT?Wqa8mN?RL^GGmE(tb$l-_gsM_~UTD3gP!S z@mZ58FE1m;(Zh_5E4l*Zx&285`G389e5>_#qKl1Hrgh~6y+ z7_*jf!6ntiit;;mZek#>~?%=G9kVada_C3VA6}c->PtTn5q#%gKy(Yftw41`E+? z(jF;RoRcm@&6uJRsa?K;`h;;diJtfODY9o0|5Q$OWePp7|AJrq<|+2Oa#*>nM*LJO z2fHQ6E-E0^BEH@2)#MD>GbyXgCCWKUFr`d_&;lBkucst*l;+7;a?;f_B^M(OFD8=& zt*O}*6qd-imqKEU1;4brx=9+sOl(Rfc@ck|nUO)f#e>tOrre8YK_Bk^Hpb$XaPiV; z_U$>!go=dT#4j3U92oBs!nO_P|1lDqmPch>ql|6k#D*M9g`!DMlu^bfdR1eEj0N%8B|@C@$r68_DPx;!%pn1q za`&X$)~bd>^n=wwv+@c0SDtwb(2)awuE%@i`6(HbxV)K z;Bn!ca^cNdz_lw2q+WJ9Hy^+iSH2 z5;OCts-Mrinqr~?lQ<1AWF&~aN#1Ilx1<(Qlq@55d=AC=xnyT%l4NmecmG2oZ$fSb zrCDb2J$u==|0takUTK?fk?CKF zKjL?fy};J?F-#Jt#EMVvby`S}Hk|g!nc0b$98=-fn}{N-w48LCnG|V*T&Z_btQEib zO;5;5LaOK@Jymp(D!Ry(J`j!3=MsAqT}a_k@yeeUlP_%-wm0$hTE1Zz62*2(!|`8w zdK&ReG9qp-F{gss>IxbcE+xg?Ot)8jdrAyJuM>wSr1^^Mj5s_4Z5%#$l#Y>!@J$F! z`C*$ZC{+1oke(KYamtBH`iRjcF>-z(Y0*)ns`_M$Ek>L1ImU2I#k1gsySTP~oTq>B zJ%01ZD{S2GI-3vmXt7~*Mk!TgMKmlvk32&cy)HXxNn#g4xAA4h0-^`Uh zk|cd3sHUXMBNxtYw*;b+n$A|;vdCzK3 z(zdpkEGp~E@gIGZ-~IY`ynM(--on+?rv>Rfa*RQ-*Tk%Rktv@X(M4KnECz>Dd&NvV zv^KVRtw~hW){`{0k5?tG*OV9vV2;b8xJ<@=viKU?KQUS z?_x~)UQ}ukG)q$XPNitp2AP5l*^A%xp@AEa*m9lZO> zRVCdO8;=ZPwpxiz&LmfYtm?W7O44J5aCsm$nkZ8UuMA*5aqP-brZ=pm-gcY~ zJB~0o;gOE3?s!yj<7fVj^%-W$*R5g6{3R@&TZ*B16T1eyM8zgCZ|(J5b>$T-Zm6Q6 zx{NH#Alo+V5+@p*3!Z|EjSW9knknZ+g9I+LwyZQz$ofj{GMW;CXa;|#c zovh9e(zU0VfrzrsXn1m5-3|4K^UqsxGY#&Sd1zz17?gTSAWkB8DYt&&qpZ%hQ+>gO zENz-gv5>gI-T|Vj&f~I+E}*GG3`T;n!tz?0iW8X}?xnqN3~ORGD=)v5i_Txpg2sAQ zEUARfHd+S8B(O?g?)Cr5T}y0O>aXJJE!V$yEv{F7z|&JJxv{#JXEt_) ziKZG1WFU#lD4@Em0B?j4nv4>}#ididWF41Zbq&|7timjv?9lOkaZ+js0kaHx3og8x zOV+Gl;k>!5Si69PwqrE+O8}3R+`9GL@xfbIP$_{z(|pR)O^h7hPV1;y2&Y!K4jm^T z4&7@gVD0r6lhFGdZ}eo)nCs=BkQo(p+JrpSE?viES6nSVtVVoEDcSZ(4(-@OOWzb3 zRr9#$s&{a~@&z=_siC$Ynvs_MY~9@gbFSvSmq|aLvyi0=mau5~I@Z>~VF~62Cw$u7 z#;e}-LC&9FMPp+FiyCto+_RrH3H0m`08VxJf zbHz26vUFYpbLTdaXX(?@#+*SCs#dZhZHSk)9%NJv0DcJJqS{yIK+%Vi?xTo$dpmc^Ng)LgKJ)r)Hg9Nk2xIiJNB-N5yiUBIfE zG)B6bInp&T6O^j_O^G=|)+&jaIv##P==I{YRdD59cXCO=6fH;F7@G28seA|j{>k+i z4{YSnfLj8eGkR5w(Ww-Q|4tGzG156Af%O<;{&Y&pQ}J{ksXxzy6mP*NK1)`Qp<-o`uDGzhVhKrJJO(wZig6h+Y~q_Vlw z!i69H5|`yPv+s})4MP&eYj5NI%i=h=t(h?y@a@_4EL~cOp=~Q0Hn-tadI$<35WiVj zosF+^HwTaP2PFSwK|FI*!DkKWPOOR8&+*pqz=#H6{LE0(rqIOOrbIP(XjT~Zc$0QcJjH%~e&6QVQ#ge(zEMM6` znsR7+bFJo^mX^unm$JJ0_>Se?p&FKCu^qVqSu;xlGy=1-g%^DhO@-dF~ z)8n*Kw(N4QShJYQ0?|cQE+ti>i$XhHLbf`3heKZ<}O*wn$iij zZEs;RWTSNLd%5GPRjgXQii*$y9^Tr8)ojw5NcFqw)t7Vg5#90K3PA>1l7L-)SH^sf^WEUB~5@oF}Bd zmPP9pQ{))pc$)<2zHF}f?3cN$Aco2{D@A_`nOl`h;P_sSIg)9-@OrMj^gQO*moRtL zc`O!k67TG$Rr;pe97p}~^;~?}FIYgHZJd2a zI~aHQFiK1sn_AAQ%dcepg)5ma{$hcYn=ZE6);)qDxsGe@`7rBBlf|x9N>IO?MV0B| zH+OMxz)ty+l~m_=>Dni;)qoR^$mtdTpr)5+F1wj`U9pOqq8!rFGbkvlp{^*6z*q+d zIwyo|ikb%I=Y%*YeQ$We zO}r4`OK-W03m4C!ac%?478Wyk;Ghs9m)O%;3`$&|H9DQL`bzBM2iSX{mCjKciP^;z zCpqb8k^U7`%IYhxW}U>9^JFYuu&j=h!9MX(LrjUU*Iw&N$fABu1Bv582=|2vp?Z2~ zFI&OoSBTsaN8eCyV#D?W^p3eDo)vlI9BXzJ%dUPm?_1X-gtCtEOgj^O$LTj$vi_PY zSd!zTqq&6vV>a{GUc==}vYBe{$DCVBS%Hzq(S__4KkiDsH$e(@+OL+0`whiW!REL{hDjJX3ZQb z8kVqh$!b>3DfxzKtbdATz=UltZXO|7Mev)Q5m&Or6h{e?rrPUoVI!j zmEE|GhUgBq>^rUvo@&~J*(L+u6>F)CZR5euf0pmRa1?vx8dhZV@#Gurl$?JncU)Y~ z)}McdFaG2KHVnp4n{N|Y_A_KJ=HhEFC;H%@`Q{IQ#nx^+a~BJ#@OE)v-#(7^c*v|@ zKvkjzdtMV&2|c`W|ATDnS1)j%Vd~CoC<6%wC|-3lbA7M#__p52<8BEOl1f-|>0<0% zFY$}7e~;(8OcYm?VjelnD=)mn{#G$CvxUyB5A&0s{ER<6vxQ?lV?v58G~M`NuFLP` zcR&9zzrX)6x{@#FT^Gi%ZR0^Ef+q5o2zgpoz|`hn@wqSD$MJ+lE?Anvc-t67Ldb7k zQ%_M&Cg~FN6xY^JSsu^$J_$;VN#vFmi(`3~Rt*&o>9YT%~Js~KoMNV^O|mb&YB z?*)@Q^`qC>6Dr|`D@tg7`VG3(;H2qFbdp{`)ht42mccFLanOBmGncYeC#vdn}>C^_dN99Zr!!DxZ;k2k06LkX5^a%hop0^Xzx| z>Q5iw^$s6dY0*r!9Hq;fF2U^8A(RF=4;Lb1nlowy$hPm-BZkRK`voALjSJlMIrL_z{ z{{z1KU%%z~S2wb^RR$+d5PLx#=dWlWbmT>T@snTj;G>W8`ra-^gbb>|FHs2L>S7x` zqi$joQbU2{w1fvEqt#WH|N<8BS)+)$6dm@oioh zE?{nLBD?N?mhnvSQ~g`mwzr)_+h1cxPk^-41V%d!a_A&NC;_4jChCs$3?Wo^N}UeK zlEJ&$PWzE&+WWm!U-@p$FUgK~!bDn0 z3cj9cLKq?{`wWCIy`D9VF>K%Jl)9L3C8y)r+fBmUxfl-ok^3HalC454vNMv|{fE!+ zZ{L4_r#I}TYs5v!A4By8>&bJfdUrDsiXp9X9`ln&*}C}%<3Tf7(ngD<%=Ud7+1};Q z-mg;c#mA%+QZu)LB*PdEe=4=abct-i-1)4iHq(5dnQjT%YOlGSHI66w z_Os3O?|YT!Uw#c^?KLF6@h`mhOMj64*V!$;+-i%bZslcMP#4eZzy1n8eqtY{tU1gn ziKnlv1xMN()~_sQWb32+^k={2(I=kdjRXCRD>A4-lq^0pWSSzi;$j-bE;sDz2@mq; z9M}YMf|@d2w&-H=ojYVq@6+DVQ)>idmew(UNddzf@8@Sf{u6s#nIcmPea8;4^_Azf zsmd{SD~F%|8UOW@-}2B4J7^ce=l7af{GQKpQ`S+w|K0D&*!D1888`ExOQU2=+=oNP z&739Ial^_od^>*4XFmT2T4Lsi?PuZXbxJUND_1VBl3+NS?7TwC=Twjr2gA+nOr_RP zn(XAzD}Un8_dm`7zYw{#WsDs@O#7&ZtaW$u(ZwDf{jaa^-QPdT(=Tllk~yUwqEfi@ zTHbTTTn_*Fi+trre`M!WEjL^>4@c{6j<`#>WJNq%-k7AJMrsw}38i^>+IJ8v zS;3ipipGQ4O^3 zqSa8wd6%pt>hL4{?YdpOc%V9w?1sY&hQiLZZ&Uy2Vm z7c8VUevmDPC&{mGqMy-|f!W?5)!?ZjSnAvc^~MdvHO<%d82HJeAv zxnf-vO`LZ&cE^P-#*Hd&pgMb76*o)m)_ma@yf1N63dq`^4LfD z=r{@8xkuafvUSHk#w-~mhK4zK^f=>FV&tX_mRx&1%ab~Jfj6}#vfm)Jd;l)`G#{Kt9yp`Y-;YsZNy znkW7un(kd&c>RSZIp9bj)7Z~5fA}Fk`t^N0_WA)v)vTI83>V(}b*}I}$|t|}6P|qT z6OAnr?9P!I_WQO`UaA2I$ORi?2y@mUJ z_CtRCz%v|jR&vp06*vwb67r~KsL9wS#JuhlLTEIZ@edwj>kE&tQGCP7yZ{@w?G{4l z(FmcM#ZY|tz1&mP!B4*U1%C42v%Iu<5AA~(sB*&!a z7-G~3lDT$=L$>g|UFD2q@U~P^RvgdB#1z@N#mtpphT#q-3(8m!XTc=rnSxGwcRtF0 z{_Hiz@GvTa&yM2*3?AFTeP6zlTR!+5o;`ek*MIwMK7RY1eCS_($jiMFtV|5hyn7b| zwhHPR8ns8re)oj-Ai-*hp&~nli6fiX&@#Z31VEaBi%dadE;+dcBI7uws5I?PbewC1 z!K8HNq$Uy@v{JRak@$T(*e(Q_?QgIxYA(y`>}Qw{er9N@i2R<0LE33#*Rw+6qsS;} zph0vI@{DMArPKu>pPS*q9wu`ZaMj!dQYWNmva1C{c^z}DL0pb;hQ;@0 zS1e}j+&NU2=8_Pth6Mvb=NP^207*GjET21%g>@yQCq-+%KtWl%F?%l8+;9u;dC%>< z>y{f>R$`X^W5he$$-a$m&=)_C1@oG;KJS_wl3e9lqXo<4F1G9%qFD&Y)Zxu+><%xS zk(ih&^$YtY<M$_ja^bgHNw(Usssd%3*0VOQY4#H!V6LaCJchoZ3G(vGnKyqv!R}^8i)&dPr|K;K zg}jU&c$lyJ=L?J){EQ#n%T5Ve+V*eYmtXoQ_kQJ9JiF;N9{J&y`N+FJB&7a9c8*Lj z-nox`NBRgQS5Yszh_gz0J|X%duh|^S+>$JMH$TRU9qI{bI7U%+7BFU$m0OP0JcQqn zN|W@F1n)Qlaf#HWr;w15D1mhd&)%K%XD*~Js*fXsVpB?1OD1XQdEz&wu*FHhSt0pI zJxNHSBq@$qgOon4gXwnG%8i(rn#MZ(2H%yS{=m4KP|p$RiwEhNiWr`{M!Pn=tDsU$ z<|vBNlL+=7WYd8bhWwWB>lfiu{z5447P(gHX|&oI+4B&8e&{I<3`^Tij52ADCOgW8 zB^1T{+A{h#J;X~L>M4IjK9!67Rjb9f?|g=5UVek-P8WTLIv5PuMMu%t%_sM#|4}G8 zlx|a!NR$}EsM=|^Y|>x+$psV@SsC2Fo93e~Y<4Rn8(wA0XbR=!3B=meSmI;fV?W}h zE}u5laK!BK!UCtom68{;agoIkv0!{hShHlLEBx-8skm#Re zBq3GEWdiZoSU9JOiB0$M_^~N`l9%QarW;qYiLifAzE&lK{m0A+nvH3_T-8b2f&`QE z$jb`Sd+->&-A*|cVqo)j4*60kF0^B}8S#wvvi-^5v9VuG?{+ij^AewsK#Ivi@79O- z+8001b3-Mpz5ZYM(kE_b?TRWAt?HdtRi=_bD?Kc)vPaoej5g4`k0aeK;)~}~SyqHu zVphM`ql_jjzY=}=w^mnmKw{yj1=LprIVSQ}*VNHaSBJCnDDH|mEQu2R%UNfGivA5k zVw18tebMHHsxkYIDu)76I48)Rtz zOZ@md|H0G8V`y4;H=p^~9jrgUp0pTSIFE>qH7#p8R(V4(DvqRz5)wy*U~e47Vly*w z_$Y_koy6s5lMy55`y90IdW8oc+emwFKYgu-In>s}Sg44Cyd+#=ujyHZ)YsKum>R*G zl}}w<6gJ8KT&g%5PK+|5No~2*nQYWwsf_A)7Ar=xNqaBCESpsruzIOqGYEC2IyG{c z%Ht$SG=-Q5zdswkKwE+}Du&op$$Mmi$w@IzNwQj$gESFRdB;YRl2**(i?8P$x7@<5 zS1zHz>SuV;fnRDH^amJkYoTLkl!;Lpc)Fw$3g38ZI8jUOw^sMau0VBLlafJ`S9O(H zRSH)@gF2=iSJzA9+e|SO&AWihuD_X^Mdn-1&tdGyFwPk1Bqz7%LpC}hbMckq!9y^q^&m3%K*L2YilWT~|Dg1HOEN{qR*auBA z7%y04z}=TdPNav=)s6+sB-dWX`|f!^cijF?Zn^m;Zdy@J zv^XK<7=z9cw*T>){A>fvf6pD?D<{>+CF1wize&D@ad%--?678BFQ6ZiG z@MC=D6CdJ^J8tLB5C03l-s(~74`4|sWA%+6<^O&Bc5c4)o!oxqc{F6lqTW4JJuV!m zs{S95U-Hv>PNWlt`(wDbs=tv`4cfkzKAjeU_#9K~KK2gAQBaab=7Qza1UB&EwkcfV zBWAh2GeZ=rp5zX7Hq+}gk&=}|l0||VNeY)T%SX&ETmFWG@v0-x`9YR2R{0`hI z_LwR4#4m*ta;va7EL*r<;hmXt<%gQVqFxd3dR>u&VHnL8JVQr$=BJksqq;8JTPrA%b#U%`z^# z`8~YnmaAA(mqlPg#yZi4t9vI;{PA)2cr#dh&24=6?ss$fs(O-S44Dn}&BO^c-bujf znyK%bK+{3E-IX#<=t)6zsM(E-yW!n1v{RHG<%b-L)F^zd+Jvmyuv5J7BCdLej6b*B z#yc;}q;F3j&V)$*GG6!xhv}1kXE9IFw)X*k`kxPS$Sr+S`kGqJ&?I(hGFl{XQ|HLY zCWB&hb`zK0{9f+5>vnE?=WX1!Za#U^UsY=xjhQ4Sn#B$rvZvl(4a+3W86MlB>|_c1;8J!4di;NDA4dhC{=2dUuLV_0q9-H~j%89OinN^_8YRO3PtKQTMsi34GoXdFEXj65JGI{=l6b@N87@$OQ>@-Ikn#> zHls0-n3y=}t4{nvO4PYC=lumx*965+S>xic%DC^)mev=kB(5+^prsKdK{$UE6J(Q; zEaALoQgkkQoGsrpBm?D33?}(&mwY5__j{!8DqU-p`dAL5=_e3AclwBu zMoSh#Zdhw#X~>Qe%MXH|oEcvMqL^`?m7yuYN>g#}D(B z?TOs}i95NdECusSfto;(Yr>ns97}Hf1>ADyJ$&H(@8-4}uHvHkLSF19v56Dcg{u;| zP90SC5+6g1A&%-b*K*^{%3s{bwTohD+tr6BMXpfioDGtXNr+N$(?wi!(|fsUQ63$y zJ;;5}Z>LYZmQC8*A5^c8C=tY#l`cFsqM}usDY-N$)SolpMB2<>?L4WkQO2qyaJd{9 zRUVN|HI_ka$V@1@^ULN}1=eg^SkMX6~;L6)? z;i9Tc>|$hE8DSM`1{xl!F`y+hzM-Q{3R}GR%{h~*2kktHgGUBBELJF0P+Fd}$5F>*<9N+U2 zzx>L_<=Xdi=UpG*?mO@0$1gWCoHvj9gkcO>7jenu*K+mM*OC|NBfeoJ_0dvKDPP%y z`oOoc1*I#^E;P~9U)AnXA7!jcnVS8m^0QcV@iG$HALi?y{vdbX{r~u{mk%-J3*Q@3 zQ<`v&vHf?S=Fa!NhkO3(84QirbLWLcGGI&OsYAzX$Y2=As-PqTVpHl^vR0hm6_-;i z0YOSxHKoF@0#3J@r$}P56+>(~H5FwPrp8MD6cXrk;tj=+m}JKi6-!=`5Xzzq?e4rX zTMg1VXYSUDH?^oc>t;FDxtGHu4i5b8vl6sQpMJk=cYTP@e(e`*8?#}S{xEW66TklQ zJ>2=pukd7h6pL3Zqe{q|9}~X*gFN-~ukf*Z-pgm6>ZNhnGUk+|Yd3yWXIDX-Eh-AT z-Hu)Us(U7ZKomJei&(SB%nSeVK0a{w2l)7R?`Qk4m#EWTusz{0lxNj;rBccdYv1jY zO)XfZ4MN&kk|w@STO=itZZ=4|mZ}2EHg;_4AW8+=SIlK<%KMc-X;mSWF%zEpT5fXpE-il*~|EN*v~5W z=$C;pApSBgCI*WNR+V3pdKhE?b$k58#ieMvw8rL9RUpBRDXgbZ$R|F%`fQ2NLD5Ak+c$I(Ti(Qlm(?-;#$Gx-F7fw~iv>=fpO~a% z>>>3rWF?avbPNkAKEjSyALVA!zaYo9ys`~d&*Z{OvKJ-s*sLWh*z#3rJ}{wxw`s;OwIKWXAC zJ6CoS-V>Ox+QnZelT+tuF_74{3Vh`svr%2Ee!6ga#a7b`$xcbZ6!b;To2{d>Kx-pu z6OlztmyJrPV*ZMHq6hb}_295ZVoriOKP;?llMIi0$gOT7P2vv~>uGwNZa4)MjEcNQ z2~g7tGl&m57#MWo@+-^u-vW`u@4>xy7e{@i%)hvfyjby<;x~v+Afup&jLANFMuH^f z7myPx-pCsuK7SGQc@DadJ8($=e|n8(9Z^4KC2K!LXGZ@h0_=)B^6Y@#-6#D(;N5fwZeSEg*I@ z{ar;ZLD|_*KLb-jL^9L0#bVUWt>l7wic==&?egH&W(J;IpKuk_zmk{8p)IUsjv~s^ z#mkRv$D0TT;5wF3`BZg!p~~g*9_YinN`ok4iQe)MAz$w0BLA zQc_P{MH-IwPKGAKpR5S;2{9A1kaSBgZ@jRLBLgOq64WbDVV~jhc!^FHIsPEgX+;$0#o-bzAu0^_Yo%|k0;(M)PpcW@SPy*zy&QV^kNn4{ zKRl!3Pkj2DJaKp&kLXLg<}ZZy4&jbH?KEAmmL-jIXsD|uOFEKIG7Neq8ByQxF~yQy zQAI_%iT*=JX_o*gpoon)mc-%)7S5l~;$svX}H$q(IT;?yTCpkTv zipnZ#3R4Kl;O>YmX4&O8acN;M&))YKFYOv7W!W0meAyU!j=Ce zO%-|S!_S!s60f=$cXTu1&S25Xr9$9xC@3tWrly+8bOT+Yi;zj(VO`Hc(|+!Iz4del zE*;8eD`dsGIoOZyW5>ZRT-se!8EoQnDX1$ZKfy|J_B@u(Uqn->fwuko*w@^~sI*Uh zt&qFqbg~MHDJ#wLw4HLd5`26*Z}|D7-Y^iMqT)QjwBF;KI79&x>! z+1U=cbC%LHM+S@1M&>uvQ5rMBp&dIp&@xPP(L5F}EF!V6oXVypEGmp<;`n|x?>>ev zZ$9g4;y8L>FD*S2vj$lCYv{t^Z{n)!mJl*0NuREzwz7;&n}fCi4{3RoEIe-&^J}Z9 ztSBZc(aL!1QT85eClH%M!{Q|@XlkIYs*HkyOw5Bqxb_?o!ZbxbLr|l2DWddH+3P)Ge+5R*h$&^ zI&4BT4vr-;SN!q9rbZen3y6=Ffyx+Qa(oi6^xNtMi&(s9AqyI+$WD$WN(PvK`1;`q zmyAF#(CMW3qN}*JYLfeY^dyIe)F*(>HM|%wMW<0NI?p$Bv;EbBj2h#qUf4uYj)jix zJL&T#Qa*2y<}Vgh=Mx(nONu?j=-4<(br-TWXNp(09}*v`ZaN7Wicb|kyq>(tt-P>* z2(OUj%*r{;mmnoMI-RQGL|hZ266g-$OKjlM^X6fXPobz`8EeWjF?x=(Q3Wso37Ra4 z;*WE&j(2dRd60lAKwDI%h`CGVQIcjSHaV9$OXgD%>*m1bt?cg^!6$X@@0_Ci^6R;# zWQgB=?@5k{j?_C#s?ORCvFHNMzj!f8{%8uz^GOJe(Ka{;mU!{IE2yX`AT_f{{AUU2 zF)%jn!k$(_RG3HPUH|4PE!WAT?sa3(%>algyq=z`(D`T4w=)5IYbAHrL ze);0D@arG5pslK!QNogUX1Zb2L)1AW9b zT*cKT4xZhx2jN0OuGOldIn0%@GiqQ1n~w)5tyxM%ZLtKHMbyjqmYZl|d_qWrkT##l zmZ28ekiMQJ*OlkQX=B^i#1wJ0Yq`9{#S5GEGpZKZoADPC@>tVpxL_Si8|!G4@v$^9 zghSOcI7Zj-nDjr%x4eOdoP2V!^C(hdwP8x~acV2fp0Rz^JA@Joty@zg!K%a`#q}&) zw3;PFZM^W%)4bg5B7e>b<`xAww(WIVhQt|7C*?dC`P1(q;sAo=n5lJy|6iFXjSdq!l;oZEt{}>Zq)gRAgb^qN^!Tu2bs3K~Y zt!I9!#2UHf)X$qsWljtehqlu?mdTu@^C+uICm}hXOWt`Yx&7OC=+Vt|PR6s~%1cN% z{upl@brH0S�SAg|U+@yM{@tnL|OsB**vdrBi%XUZwc^WIt^O_R-w$A-{4Vm9^z! zGx^%*1?GsoO^D4*c}7K-W{Q@d$2@Daj6r2oN^Fy59Heb1{C#VG&_qmD6)RRWkcjBI zD3y>?u5(3EGDl+QrQ#dKhZbihVz-(k)^##EG=S4D=-2cRG zdR=~P)mw973CmW`Bi)ifZb7;b!$}4l7E+4KDJe`MF(!+Ws+F9#ppYnc7rS@J_%-Rm z6^s#oJD2K$d@?f&sLZx9G&(8$vIB>=iuG44!y27JrIcM;T}es2hhx1H8lgNRgz#8n zGO28=C(+x&(PMo$rSE7rX4NG^puFVMu%w3E!ffrv?wU)NU_H8#r(ZtIgei@>6)RXW zf1dc(T5=>_R__LyeB*Qv`N^)H&l2(XO$(N=xGV{udVf~9O2@z$Zr>OVV=8q^ms4$x zA-z)M&5jo)H!MC`xQmcYw;@T!h(-#{1HAUkCR)_{)wW~`s^_v~@qFrQCEl;7&=$tZ z7}~{C&+VaW!Yw4!ApJg@m6t3dooMpPOURFQ(A+shz+oV{LVWhhRLu5#&bxRS#kNsi zfBXdwO^Q9$HcA{b&YlC!sP7Ypd4p_*F(G|v%w4oZ+ANQ}0`bXWZ))}90kuM{Uq*|w zsQGM&EGo0=^SkzT2q9ced4hq7fo{eE(WFNQ=?0{SMR9+m9imm}(i!wWVwAB2#Y8o_zbTf z?Pl0Hg78ODw+!^+pz_p$ zHQD6aCfIkho!G=I90z4^>>R^jl%UZjn{${+qVNtLqr;WXg7cSCX!kQR*pJH)O|sQR zS7$Gih7@Y%EtJ7Kj;WCWZO}`P3DVcsCvDNe;kH5IB&aRS&nG=?l1=wLNAo}@hYpEd z2mzlXLG+w_(NSg&Sut)7z4{OjzH%IMwB?NLrsM4k^`s&rBMXD{?QMrznDAS$TV#;% zIuQQA)NmWSn>!dBH;`3WL{_Me%^Tie``#A1)yjYa{qzh@VNWlhB25C~{hN64js0}B zAE&K*2#-+)9oLWyK*t%L^q%BM)yl&?dxUtU)v>5l`c`@dnW+gFCt8J&I>;!fVg9lO zlx3x9%e8xY_Ve;fZ_wQ1A~CmwS|MfHGUS=rqz2k~{^^(4cYHAX$qI86q0x5sxAtl8 zvV>s}r>{O7+$8~|ovO-u^7C!hn41 zJ$8&Sa}IMB%_Bd`!{E>e0dovVW(Te9GQg^SyKoV;670K%`xy4x$c{HM+}A~Wf0%UO zaF9IjVrnK{;*Xp5iH{D59?sq?HEJZj$}GNWytkd!wtmD@%781uumq#c`&w|=bEuxb zfYO8zg99=Un&Zffa?;Y)&8Ra(Q1oy>0ss|^Yk5k3YBs{)@qIGzdI^jVi*Fgjl3PYu zkpxCD9*(!QiBI-0(kFF~j;BQYTeRmOPyGIMI>x$1jzI}pLii-8O%VTAo@8R6xtTtR z;Z=|;akdP?LI%YTW@Y7)VI5}kQ%~^RwpOM@25s=2bdb96GOCB3;y0U*2r-h8C87#- zhk3mD2qVd5REuq7CPm{JInJKrqhgao3`*N%l~q!nt3J~ZE5Y9otsNsm@Qaxa^`4mWo*BqV9%_#O_ABvCe}n7kY{w%KHi zKf;lIpZx9N_`oEIr4qE~r<10}wkQXOTG}MYma%)HjeRZM;gzpdd#jt+elNZ1J)9$* z^iTQ8kf5?WHh64+2*OmdWsm?#Uq`(Ebp7q?2x;hTBV z{=WsP9fLj}od>pXWHg$5iFwqA>5~IP?0@}fHukw0Z#zzpCz^t)O3HHcu?=qE=RbIm zJp&Gm77NxW7;N4n@sWxXP4b_gslIla)go6CpE{&H+B?J!yz14c5T4OKI>at|r7x(3 zOX6~hD9@L;B{Pd0yOSfWof543adqrqduKFdb4$s~mRKt-73=5$cC<;kVtYZi#E5Mj zc(W?0QmgseC0>%avTNK*dE){aD)TTo1{jpSo*ZkzIVOE|U_gAjw5c(k{Nf@CGSl(4 zzsm1_{~RsSk5pi8G`Q(Ic8ILKRa6{Z)UNwQfFQwX9D=*M2X}XOcXvo|Z`>`o6Wk$a z;~m^x8VK$*&}{bkZ_adw~{UT?vcde+nLZabn$j62pX|e zP)K!E{$lDFkv9fIg?6)HQ|I6%vmMKn=X67#7!BrS68fa|J=pl!QUcb{^%n+lj|0qW zyLb;L%gR*EqT)C)89yWyYwlseU)@>ZH#Oeeu%cd=&*h7w@P7)ck;T^LVXglq_EPki zR6~?pet!iq7U}N|+CfZ06{?9rZh33+OAF``V<95T0#5#&h8r5Eswk#m}r}--3S&@>qg2!zL{x|mOi?RxKYgxwO zwWyYA(3mitdf*lnK@Kkhm*Q}F2-jVO7ThnlB){>al9A)fd+v*4q3YM~QR zRQHL{c-ExHQPlT14%#3orinTSAItwc{|VMAdyM!fa_n&`tF>5*pL8;^q|B?H1wD~E~JgHo1zvh}=Uz-qm-#V175x*H0~2@FsA zLo9GZ%Cw|7;dHc~TCZ{^7a77NYC+@Z^W#Ee1+fOIv*3l2sk!G`)mwtnC(S!WCiVBs z+iM5mmEfIX(2W|0Imyfz-EJQI@thoP(4AAt6l1U969O;}U&_@QP}u=3J9aSqvcFC{ z6M2n8(#OWQ<*^38@Z^N}*Fg+cdOmA(((?@nZMECi%Q2{Cg0P&G_u^Dsb4Q`E>zAgh z)!mwh$7siUAC1<%ykI7{@#A%SpVV7%acN)|I!N7_Iy$7ds^5iPQdPyz-?shkwsTOI zKL(FddYQIKo1(P4LccB#OO-vRlV2Kffu%ZBZ6^{%b_g0sgucUshx=CZEJiL`;8&IltLglyFN0QItcK4`vTv@< z`vfQ4YhE1E`{!nbR5;b?pXmt=_^I$~gmKCR0EtrAb4h*)kQZMEBiZ$1A3&OkG&*(% z&CHuJ+s+992VXB|FM`KLl&(yRB54=A$pf!~shVM>X1%su=z&qSc5Fb=)fFaa<}rd9 z$WE?)HuO6Fyb%Z5on1!uU^XaSY&5uV^$=?eaes^`{*-YioI_PrWwdgpt z(vX^&bCEe$8Ldt0iO|g3yqU=ADk4UOa(+iCX=SF|@G_vKFeOo`;I<=WSE|817JxAR zSOU#|oXvvLZqZydEm~{7VffCM8#hCv;;WbEt$%+j54%Ih7au@3l!%R=w9~&c0TuTO zRI>w@s~SOx1brpF!ff-$!z!u4n(Ba-@{ze${6GHu{Z63&FcdJHoG0 z)k6bG!YrPbbRvM`ZhGfZ8Vi>>alw|IFYkYSBazp1MKo04X2l9u zVKZl%W=6KKN4Ns&oD=ht!`Sx{7@Tceudhe3wjIuO!Y%!%eK?!jvbI^9D5co{dDDA zaPYTXJ?iG|szEfqc?6qY+j#mQ)&yb>yqe7yeZkz$tF)5CWlMv&ubfCu>Kn!$96Ue5 zE{scte{Hh7Ap8@v;99xSd7S|^SRIK5T{bNp`^Y<}yfZG*&9toa0kO>f2n_NFKCrev zbg>F2REb&7BOiTnK666bgPRVM4Y)~$=%R-^T%X4)ZCfpl=y{abVDfhqYL9rk?Hu+0 za4JD-cv7*%UHBtG6Bi5(?@@~Km%(pv6$^(bDQ6BrmJDZhI7mr1Zvliyk6Q?q8e}5s z=7G&^By(j)9Sh{_oejr-$yBCwri_}*ka&+*`@)yFPfG$PC284n_6iV_=!&8L1K#xM z5?8Feu~jddp9ftwF9lPFX@5sm4n|V8=NFj2r6>T`AB!pOsLl<;o(s#6o?7U1PJ~1P zEf%kUq1laPMl`DG#|zj!qo(f=PaBoj!3%BmiG|zeONcuRzbo2LtU?*}e>k0Dsq@c( z6D+)w*T~>rGG+h1zeFT|w@_AT7|A;yFQ`J1Xf}0c_uPr!bSfV57yR@1@#lZNqe<&? zFiLwkYBtwitk0?c|3ZAanx(0VeYO(*YyVeRjPHhQNF~vPmGee*J`1Q}XGS0LhTP`BzTg7ZO;c*@?$X-x_ESvMReY~ZJo78Mej65HCRxYym zY}NTC!{5rV0?1;|u9#6>+QVg-o9nD|h}HS`{Q;ooVCoCy{|U$Ny|#X%hzMC^0kXK2gDsZDYDmJACl$*qdT3-3_7G3c)DrEeq!~i76Jm<6pgFL zh!X7w{j-^^gv0z}m?@2G*KM`CM>jDJ=}kwpJ}X zICS!6h@j_+;&QM{U+1;D*RJaZ!g75$3}v!7u0ppB*!w&UUs%Ga>m8Cd)ID7rMc$A- zFl1wa+YEHat21{AcT!ZtD>$Lf~ zkyiJym#xxR_nkg%+;L{|E@x5PxuxC?=IQ);Igu4+B@&2cubn!tChku2Xj=IwHnX=D z;Y&F0l_}Ku4OjK*T^%-LiuplIlqDg_R7#4-M-fmngIH2ViEhpj`|+iHL<*lI|IY!g zwS58=lTdgVp8dXSaqLb)&`6J6mR6;Y2NK^qh*VN4lq?FwH*Nx9RjSk&wV`3-N^6$r zy4MU6dtVIT@!kEt;4w)IQzhjS02S4L0O^u!b;e5QonmR2n4*_yTllrU6xfIS+B7YD zA%Ek$Ba>^UOwLIWyPd?d3v^R(IeNV zbB8I@W%K3F-&$avk|S$IMrCYLCxwsFk81n)YNwyszNBLf{Q!}uyixeqO%!^xJ$z@UW|AG^Ipl3RXJ1g zO0aS1qSjMBhVc)=VpIZM;(<8Hb?km zZZ??8zN$7l;YqHoi9?3%GUwSEiGd$0)s*K0Y5$5fg&H5vy1WMTmsnw~o~O&gwkFal zU4j=G+z`4&i{I6jTF;iSDofF+Oc6aHLPCk{NxY}+GRGtJuS9Jat5Pz1^YcGGCLUmc z7a?z@rkJ2=m8yx(tv_%)8!jdSj!6ZmX#l7#FT{G^?NZV$uJ-N{XH|xLR8#p6b8G)b z%5$@2Pkp6gsLea7475+5R+QjB_P;|gLQPp?g>dy#a!qjgA`oL3;X9x4FbM(da&NrD zMwHQvoYE)O71cRGmFnMD{>vF9AC#R8V;qSXR`%G#;FCnrB9g`Ol1b|NZ}8o-LvLIN z1trT^X(74p7NjzUnC~L5`r)g3X`C8|a7flwpBifb&d-hDg@k928}3}k$YXsRVp3z{ z(u6L~a(G3|xG`KM%-zN=~t}}0@NlHqRh`R+gLPWRFH;Nz> zq)Q*SE{7u>YY`` z`tw@}bZad4g5u-xZFIU{QW>W`*lD5EB17O<#zw5+{0Yz0f`=%^{Z8Se@G*kOIV%3r z_hsF=3 za;oLA?fLD1HWnr8(NkDYNI7@_tb;J>F&*kHAge3AadK8g)u0=E>HmTYHv?r82R#=M4c-aOQ zzdX7iqj$lAjXJ0|R(R$nkvi6*GDSUw;-r&;JQg)6Jh|b>PED?{tomf+yUQd+;}P)W z#F{eWElb5<95aXUo}7&yc}LBB@Y4Wkn7piKu>rkedup@v{G81-+h6iV^qiVi^JZzj zO2s|F0U;^);}jUaX5(-EqQ)rodu4}cuz26-z#cL>c30I3Wr; z67!{gk^qucwJ)R7KA*+BlQ#Z6^Y?J+xM#Szy||Ra)Q{yG<_3tF|K$B=gMl4vWA+OE zuV}Md98ua=R9DJlbr#9Hrxo-JPQ2gNT~to6ll^qUwXMo%zJRnmF}Dr@2^*EG6p(B) zSy}lsHfJoVq=^`3LYwmv<10C;SUg<50omeiwd?Wrvv(;wjiqfTeWS{{(HME*an_<>5F4!4%WnoSe(yzp<#I}k>lsM#cL7ENG0vT^jIy!-BAX(+Yw%&_-tzwQ9mz{+ z`ErfT(*H289AD$fksHKM@|vw0Om*b|*>Rs#6aF#pcGL+LZd&H4^Lun6aaVWQAY6_qTfeL0Q>V4N7UkVs)p<@S~tsa~(U0QO-Y%;TLu$l$B>*e;uRyyz*zKb|}_=2oUL zv`qz@5f45m+R9CB!4fE)9^*a~TahmR1)tFOzTxInxD4CDQ(*E9eG0yoZGLMwXuUi7X@~OU)CLm3Js;#$a%v`glsYTUn@1CL8Hz-lLBYa51fkXE_ ze4RlyP&HTF<&=`;W$jb9Ya?+zIxyxb!*vd)Nj9aB1@qkOf&+a0;(R~LjFhI*9z|GZ zEN_^P6^qwbSA223?+AAP!zAjjz{bFBJcctd;S#0VIOK6TqI|xy(qoN>35Q%(zZd+{ zCQpZvT$ptFC+PfnPTyBq!m_bkt>sp)*Y}R|lss1TLAO=p4uz%9Gc#WY*OEiqeYg~v zP7ye0b`IHY0^h7p2-p%O{g~k@&<}c3v%)R4`^1RNJC5}RVQ#JXriEf)^{V+Y%!8X) z(sSbw7Euen`om(hQ}cOl9OdXQ8=R>~@m13kw5`rm*OERWF|oP#eZ;p|+Na(*O2q(` zL)&1w};c~YXyzZ6Qyh7e-`vqJ6mRD+B;optPgMep! z!U{PcZaINji8C7Tr4M2GAjM=jS*|6nN2IftMEbu;woj+QFRCQIFGBn^Vyl>to7xMb zsqS5iI5O9fye^*?5U^4IY0p-6eAKpW}1WxUC zY?5QBNyF$gMu9(RNP;6ddQ}4uIohuXwHuqMKiNxsscHFH4ujNouX26=?ywpuTEUXO z&#q;h;0uF0eN6XUYWVEN(=ld7CNDjjDK*wJtSs^w1 z0$Y009Slkq7}$L0+ev+aQ9UrWmqnBlZDTO0k*0i{u?5B&sP38cumSh}FVl<;tuNx% zYYIbFQqH$~gSs^+3Gnq1@jh0Zn-b9IvTAv4#?Q^~2$Ql2HC!amI^md5^NG(O|&~EB1_j#!g8YX-lBuB<#v(&x{ zhPm;LnGK>~#(CuV52&6lBCwou+KtzDrFX1qBHBFNbg%Z8k~` zI%~4A5xL_>v^G2LFpShZF@r58j0e5@TGGw9I>`DjzRziqz#^qrSi+7dI=>TA^v|aS zT=?fyV&o`D7(N)1ydJ9)VZPbP(OZs1Oc}H`>!gI2U*I{fzhOHQJ6Qb5ms$wZ;M}xQ zkorZx5{F{qNqmZa5FgF&mor;|@4bm+7){~Nk{lt9+}z$Nkn;~4MK~?3>4fUl8LGzV zjzn>_hAssM;DS$`Oh(CtxxGJay=}rHQ5{hTimlD?_})Um?qa8Th8~^^mN_~CG-!l& z1Mee}>u-!}O5W_yU!KtV5Oh1lAVbZJ%e*apIj#~Ul{A67g#&2U0`nGrPfFREH#HiC2J)ymjXx3!b;@xndjdq>8ywF?tIqtanDORLQ z;&zJcv!S8_@pgY-d*0cesNr-j;bXP)G?kUYNR;glaTbxWVl>BJQ_MrXK4jX4P5HW# zN;7n5@d8`>9n!{-qaVxJB?QbJPpCAIGxKlT`YmmE4bm6xXg$T#|q!Axr}_5THq61Y9~nFAET{ zX>GY#1fN5EchW+OfIE|(0dHU)6~^w_lBYtU^|uV~-|8qjoDwhJDr8BH*BVO={HN^7 z4#pqZQD%Ohapeb|GATtlBfrx>o?0>*JoH*W>&TdR<>JEb$Tpo$(tG1+oENQNM~84F zl@D;Mg1G@_x+EPBUkQf$;CD|tU=MYs3%4jq;g1Z@y7^DWeY*$g!XuM_Tutq3+$|%y zs?Sb4f4`Nt_D*6w^vM~R)aEFQx20Btj zqXQO>DGlCeEF`vOwB+zY)}P*9!AmLi)I*dfglAi0fx(_U{&BlqlXM!4T}c-k8o;S? zCnC>=y&37@^K+bpyzg2Ia&>)vd})}@nJ7+5-FHY};V0Dc;WkM%E0=|@8I2Y6SY4g{ zoE~8i*d0b|v%J5C2|x3Ka?H(#U-xFv3Uwf$Xm?_4SP>Rzn!WuAH7^p6L-ys58`Xc& zuv}j5r*+_1vnTs8t$16?kG5k92okbNptt_<$}%^4g!?8QF5xM zPH-<*o)T!;N8YEDwexZ%XM$er-z$#HyDeOdQB})TtR%Zz8>qC>Yws99`3!Wf%X9}M9w#?0*;$na3?vabKr+ zXM5u~x{4(JGwTp=P~SfF&VZdl|9yhrbgaDADyAkhoX!Gm_G@rdfh-O z;{{lxbXxsZEGSsZu;=$W@{J;2Nf509k&5p^JzAd@=j%X#v5E{AIF?Hf@^Cl9C!y~} zqHg(%2_#V7g;lD^{2VI(`c2{N7qT6tWS|_@)z8PmfE1u%X3(#3MOkeTY-YwwbF$i$ zk$_pZ@{&Nt&H8G{^#pFM&C^x?fg$Z3a=qY__w92B#dyS6+l^y(_Cs+{&)Wl~LPLDW zgXbvRF{$PvoQgHQjkU4PdHK+@u|hq4S>Uv>&BvL&JzHGL@fq1;+(YbK`L1vERoz~v z0ZRYQJO7zy%#OCz+~5l(^2qAu(@XM`1)pW z;nq#JY z2=ryaqfozA+Rrr@nD16EL{*TRbJ*mi4yhRPW$8ZO=X`pOHs#G=fo270h6Cxn<+5Mg znd|Q*1$=}J1q6*k9+Pf-i;vY=sT76xBDoYAASWEMn4~J_B^p18GE=GF5=e0?u)w8~ zBI<>fnKJ6WG{)LgdCEC@JHURL_Vd(6mOuN=bYrC2=cyidh5~*hRo(8#7s|Q0UZzz< zM9Oo$N+Fo@`)(jKTb z;k!2t1t#wpCAv6B)}zADbW_1CI9X#EgFo`~)^hgX()e;9sW1YQGN<9rK=%npk~ckd z0x)<4m_NAh#-h-jcw_J*dXF?!_}~%Fb~U`LZ=)ne3L(z z>UO{pq!UViI5>;FnIU}F2}!UoxC+HmL7<);L3`!S^oYC+8Tt4B7H~x-!~!n*#Q(Pe zjK7!t@2CH*_j-&GL;L^8ycm##zWr~PSUv6Sk4yD$n5bB47deQ5!UE8M9duOoGNTb8 z*iCGdj6_e^8aNXi2_`*@-GU?ELI2QUbTp7x-up+T5edFz`UGxc5A;7BBgrq~VJ@`a zgx6Vuu5PY&$1mRL9am)6fiKGz68nCzhK33eRGa!8m_t+rt``F0XK|a0ho!4uQD2mA zZ)^T=I{K*wBdDY}qcPDeuSRwR2muVJzFBdp-YZjB& z`JF`=MSYwIjGGhyxg}RHVT>5p2FnnO1-!_2wss74DqUN@UPSb zF$$}V*u@R8{mXW~Dd(B`<9&ic99kSEqWDA_Qo)>0T7bKH>LLSonF9KUi-rtfjDipA zLd`chkAEY5+k4qv&1RW)aIy>iG*X$SHVuc*yq*=m`k(rG5nOKfqu>S_hxRjC(W;_Dt6U@LnS!&-Q5$ z@Nh=Ks(ytsBAB`16LGWW7~cr^#6g&1-^|Wya&AlXA~QU9ohYQIoY$w-`6UcZlrm~7 z9TXz(d?*m?ftAB8S76*2&2WOn>)D!h{;L7#GCDq^BRf^lKTvuQM--H{*OSf?@Vz4B z=?5QRsTr=OPTq3g0xNG!4jHdw}0W7zleYjuWN&gsFQ z$`1yZzqc;mNoG?S&K83ao;60Q;zeD+ghitO(lskGN^?{zqdSCv8?-)Z{@&XqlN%$WG5O+UpQXe041STZhTQ6s6+us$O~2LxtOH(xZ3_hK+0Dd$ z&G_vliZd<4!j$*vQJ4}wCQ5i1P@Sc&QjCa)v(A=`w9!xVFkr@Rj-#6+%_Io=YzC*Ol zH*(cZ2Wj|L4`0QSow)e0bF}`9=)-bX4tq}RZcVuZBmAm<{PsXxnp7^c-E!57?9Nv1 zvnl+@Z_b$2V*k`5(jD^z$30Vz8X@f9q97&_Qn!3-wrF(cc|sgdj3oiJ_Z9Fg{&ulI`O-qx*k58cKJw-9u z`Q+T*TNrLQpecOdF?NAM|83r;cE*fKm```~d~V(EnRwk394L5|L(F*($7(FmUkJ}8 zyx6Q(28zA%+YdT#zfpQe7dYjwZd4!V%sBKXZBw>Y#MPwYOsB#fY(zv-8$5Y=GfZP8^$`D0IfJEsS$btmyJVJ?+ zox4?1$493aifz&`oS3aHA=-*89j7QDz3?w!6DXx~`jETz3~=Wsg)HK(hJUXvHuEtv z+{eL9CUEZ8)S9S)s*z8D_-2-+RR|^E<5K=r6L2KBJLXXW-QiVE>aHtqruJ;p$L=&g zzAuKeoP1RpuHP~7Zn+BfeZ-LiH~)fGqG(f-*oKmfaw95Vzp-q+!_J^Ugk{sr;R0A& zeG@MaehT*<{VPo%hpKUGVpsG`b&KYSy~Z6Th{VzPcK3w2c%}sERum|843h0@IaC-u zevw9|*W8*YxCs=1C2`xYh^PSeRNUrID3=Jq&Wm3vOJold%k%cuTHUBM{&Z7u4S}*- zxP$Ob8<&rSdc$chVBW2sATv__fhM5Hq`KJmks<9N>XM!2=b_Q9L7@l1Kdn-+pM91Z z%IXq7ld>)?Zn{%=Jm zleE3)zYK1zOGqt`H&+SnauJe8$21Sq?0mWV4M{_2ziVAe<1%83shWkMk zaKtzDEeYmInXIj+C~9}=gAd^g3o*sa@FNY*NlY0vo+zI!&vkMAzJbrlN4X4U`9>j} zK9u|Mde&Sr0peKDDbJt9B56q#JYt!vuOS!Y7m#XR-3!3C?*^HWQ8WM9u@0I>3vwY` zTSGup9@V{D;}cR*If!=;i>8n|#*I#!Hg*rdw7R0^W|=Pa-f~~}e#l#QeRdRlTs4J8 zeA3I)=qtrpR7uLAe8rure>~??SR6*oi{i(WReNEs648UE@>kWQ+$zSeUF{X%tP&68 zJ)D@uDrY}=V#J4 zYJZ}+dZ=))-<=wL>PGKvLRaQ2@-2xyuZziG2#ivvuwt zeoEn>#NF!F-XUS#&a5YcE(c4>rg^*v@bM3c@)Xt9Zl@mGhCA%X#fA^v1VjrR!Z*Dc z@n2fC)AscNau$a(zkPjILi~hP5_>@UNJ3D6DMh8Er$hHs*Lu6{S9^eF5;jp$t@#&7 z+}CxV*Sng0by-nSwuL6ZZ@VC3d@CMMwm)K+@S&3_r3@uRt@k0%;2w4x)apSySZ6{` z))Kaw74DOxgrVLM6|iL*baSgkApJUiyE9pBwve{9-C50SJ$J%Ci&E_2b^8wXbeZl* zCxp;osZ-o_nQ;&<)|*)&9cZo{3!jFn)MBL|MW^O+-uOcX#hL&55-!3!}+xSx1{RaBn81({ydf%b`QjO`|_(4sD^7gGi=onY}e3I6Db<)k? z9?#17HPWEfg5X$+CvVD7=jO1%ZYsdd@zulojxCixrMk{Qs$oUi`{BPJarlYedqt;C zDEnfq-XK(-+4OE#m-5zm&&EG2HAHg#@l|ARbwOUY#p_ds)9TP^F6%}-IZ*VIrhV@; zPw$l{vvF6ZMawzW>Q4=<9n_d`+^ zQ^vUNN|?UVEdO>&@pwQ`M`6f$Az0klTR?Wfo)(dKzm&(@rFD&=a#myoClzLIgntMI`@i;?9O z7_&(9W8Nt47E1sxQs-i4lf<2wANNtykzzjKOg-6DO=m>Dr#N1mTr=}R3Y4`8!!4+* zUft4>_V5{7*N(ldzHqTOQ@MhkF&sjhSN|#SM)pKa!1lrK!*P0A(at&QY2xkvBJr_IxdJy8!!F_p2up3%HZMo6`tz=mN$_g=%H8`5P6tq)VLRFREpcnBIc$N!D#@I5=XOSGXiDDY)a*VY zr~P>3eV?`tXefk& z;(G;$mDPH#*9${1e)q^Q==AvlqRE>^riFLZbR8ZyjT`7G@_pOZhYmFvGIg^jN3+a5 z;0))PJHz4`G8%2J3>FRDaTv;Q%}AY!YyA^duMl)wCfau+wjd{p|4L7hYCZ|=s>5H& z>ua*w6u5s9d0cF%(Qk^unMhZ0;vGpy|I(uUinG-h1eX@RVu72^Vc(CWr35yu>5Im4 z92}yuW_?T6Z@-H8x6%533fLc%n+Qapy4`2^| zZ+Ti1Mhi4$z}goHledblMc0Clh3h zIHk7*8^h?dYxTzEj-Mz0qSuz|;k#0*cbL3W%+jOZckyZ32E&~z?A$%X&G#r++aKiPQ4M&*2?ix$G9P22 zRz&4us$s70~GA!0pxVs>rt^4DG zFWl8Rz4N)A}SPA0-qwzEpV zP5YWc#`r;p9G`Ecgo=+<)^lP>_D8|R-Ucqo-h1^HjnP66Hz)k9KQ1S`>w2EGq~3Rr z&4Dj0c?0=ltx}VnGQ473ss1WUKO?RuG0MeqG$?oednyejXq)xUMyd$XP||?` zTcu0GTNDdY$w=1Z&8|FO zR*Ye2FbLWkZX08A5SRV%$=@qs2{EzJ^PUWda&GC;+XpO0GjAqtgy=EmD;DPDT{G6$ z-iSO~3qZ&3b_9F^6s#11l!I71x=Ds&ULI7?tsXsAqz&KsNM@p_=&Re}Gy^$b$Bz&c z#WT-@dZ9_=;6ra`2v*7PjRG*N2Y3W7HM~ zG^V@#SlTv%7|MG*UA!@0Owpn0~CatuUy`;r0dT^)kJm#qVxHt0f^#Q#td zH8<@)*XOzQ;0NM$*eLR;@J9KDz<1#2fR!mnlfnXfu7zd)jv!HWdE5iH|I{;G+&BAeM^%>=BgS&1+0ACY* zlZtHHH1s|7GRIc^lmO0D2i~b2go8KXYSO zJQ}|zei>~J64jU1 z`wt_z#~L`67#HV-4LjJ5?WeLmNhF9^WAl1lr>Vrycqif!6=&Lz?nCyDj<+$roR z(*)(I@}llIl|BDcJ3MmQej`duc{M#gUp^&rax`yaw5j+FpAw}sIQDN2)QSy^J0z{b zujJ0>%TxVl&%9hjqQeyQ?MMlzE&=~iy1QTh^PhJ(sfg}g_b?m8Y*)zmzPza%Ts>+S zHMe5L6K$4ipRy;RH%=Ucn%Ii}LJ}cOHexz#k~bD|Fiak49_O>)9*{tELFIgBb~0rr ztMnPjyOHNC46?r<+8@n_hrTpWT9uQl90W=WjIn@OU`lZcd(cY?O}piJjSF<1C46OxZrFsCKMtdoGrT z>INF4HOFE_6i(Bep0k@P3ZdEIQ`0m|(~?e3Y|QGUG^nJ%K=%E1$|ba}VXtdOJN*b3 zkjfZcj8{{6+PD|c!CS^QNfPR_`@=u?i!k4ihCE$E)J+hB}B=caFL zu~?i#HoHbx0>ydUwu`e%w>7QZWmC1(>o zC;CO@wOY&{pQU;}$FU8K=px3W&IUohNrS!E8LN1Fb+gzXsB`d(v;TXDXXEFTan?rI zAdyYvCCvpqxd+b6( zf*W_=%CS#UxFdn^t4Pi2ussU5K)~@{t&x9gcg*_%*;#NPsTjmNcb4KuXXKk(OauN4 zNxE>PSq?s8l~&@K5g?+Z?#(Qk{pj%13BIfA$mXJy2UA>Bmc-W;E>$z#jL2^LF`t-7 z*e$Gh%8cQqZ#bdOSfxVta|%;>O}E17AaO3gXYz;_Pl-iRiro@5(sfKVZB%oEImF*# z%R94}d@n+2hOi-PFz;)wU|{kg9%VIglfJ%qZfLdG6baqkY`6cBLs1T|(eHw{YP!#iEcZJWVGqOB-| zrq~4vbPCft~UK)PoVIKTAR*QE1m;$~$uQWvhIGHTe1ek^V z0&86262Oy9iv2AJh9Z&#-l~!Wp0c&(5gU^*yeSAim$vA`p`LKSgic9Kf48N4h^8Eo z;1-o-trkSZr9*Tr!3J9l9xPqA>ncgDOYLG(RwF^hf&`~%me)9GKWu+d^v~Zv zU(1I)RwRB-!RYJC$^RKNvOgf&GMG%;Fzf)z&y>=WLY+%D7>MWDnAEJcP9!l;h01<6 zRky6>uR@agSFzx|`yefbe~y>Ddv<&0Ir^jf+qYCdAB5-QBa#7KzR=?iR0Xs30nBc_ zy2s8a6*2Rve^?7JuI3 z4*gtS9ERyOn*2w|ch$}b9Y6T2j8IqIw6GfVLqpnKFsMGq2(fdx7oFs8Pn$47N8_?I ztk!~#h7Lc*eD>VJZY|jNGAh#Ra8b?3P+IX$q0BPO_Vg&FNisNOcB}t0QaMv$O#nX! z15$MC?cD4hHRj$xR%TSS3xRzdy6$>KezZIWIeLHDnArFO>def#jQAU?d2zghKa4Fu z_(9^fE}XJD2=C_E73kCAc_dXDg-b_dOEszQjm2Zc(r@7Oqo-aNye7ToiuT}s_y?oY zB{4Tw(#Z%(%Nx0zkkaQKS(lygNWed;7&DPnFd#9I<+M;T*F&`T^M+Kd_InzSbowcr zE|DS${ZqNu^=*#`MEgN-K)v3fd{ApBSu?g$#ufbwwYrA3oTvifv$0PY$aopFBHWOa zEI`DH8B=X?EQc%JWxRiEEHdpJR`ED&6h6EehjwyQ>Jf1DEkO)JUph$0-uaP#A!(x< zdb;NEnW{bcTiwmyoEK=mu^Z?;PvU%PP1}-=!*HlZNjd#^#nBG=ma4)VrWjT5IimN6 zjp6(z!)(AWuL{VnK%3y7L4i+`y}N$BS9kU9bCx$_3NcA;3PY3!9QFrRPLCrOu5&FJ zO-0OTo++Yd>y=Ck5BGC(bKz^a6ZBE~xMU>pg^-zwapZ^a4wLnV0 z#r3QHi1vvF^?jVDX?31Rld_Gm!lhEuDW0~FORu?^n=W5TO}3Cm(FcnJ@vc-Op3Yu| zw8uc?TEYue*%uu|mUc%LMFlxHV$8VG<4BCPl8~G$K06hgDT#Df3WiY$$_Cu{g0oA$l0@YqB5bI*M*vuCV`tAFom78kj+)pF{OqH0>l zYjucTKO*Gap6bNzZl$?DB-J$%@bu9)7{C%APh5^)Xiw@v7enMYuO@FO81$A?B2bbU3(4)iSH#4n@F}R z97Mh!kjCZ3+SzOtF)~8@)q8lvFepSjS9Pk^ zw^69yzCH%MK89Nk^UkX;^2{?&i!;BAfB*4ayxs2Awk6k`MKFk8&NmuE!sRD_PeoGSP6hq&vPck$HLWAp^n9XlknP{E;1S{9c2ijz<; z4*FQA>-iY+_(_(aQ{Cd80)qr<-cF7l+d)&Ph-Ir*QSGvV&&QYqB18RMG#uE@YcD>_ zb5B0Zo&RwwkGy$+Hf0c1*%B~I^)&s7L}bvMZlq^qVrFZ+t>eEGlo2(C2c$k883YaN zcC?-McJYKfp~?3mj0pj*b~guAR^9 z+%b+FZ^hfyM2`eoo|Es2jGy7@r=Q}EFe)%X$BiF-N2%P2!~#MiZ_n9F$D%i79$L`pJdx_p63~<)8h}_#jUqJ%Fa%&_8JMq zD5>p^L(;fN#7lo?JDoie9ID;mq|K_X>f!1H(dUsN=`$6qM#b?ZgS1ceov3v{ZSSnU zOQ0K^G-2iKYhvHqs_&lWktbhd%kJY0j0VKXkI*Cf)G`o5L2VxC;%ocPHqbOI1OhKU z(FJpy1BW6DQl8N)#6d=s(lu4~WF6I^V*;VTnD)*$wKQKnI~GtYPXbCGBlz51oH;7~ zW!Elt>_5ht!4L^)$)qCoqJIqkz#vDD?BUJ#_S0s{q%_V)SC1cGa|7*zVr`mt@!~u0 zvFB(fF*%jwN4hxPC&X1WR$C^m;|mDsdGVR1j7ruDv7cu>$cxTMw0R9Ar#XqYeS(!6V#|X{&r|^D$f0spg^<<;j+}9ejgsTyTGb@A+R-v7 zwowI0N>>y)^mLryoyYIz{->Ve)g7mZt6R_I3koHWNv6DZHnllHPQLpL&%g2x2by|O zj|XaOAnHV!RYf$oqJ!_ z{P;6Z{+fGlyOoDt+CxXkfJuTzwMhy_3rWct6lbRqW7RzEhd^-(@%JZB(i$nCdSO1v z;yeAqM}lIr6VozD_PcR=AuctAM61+i)Q{CwOo1ziyI1jsXp<(tZfe55Ph59O5TT%c zh;JPo75~}W%Hi#=^Wt;Q2CB{lj*HlMD}yJF(kKBIz9BsBKH3`&vHdmGKacU?owsw(W3O_kYZ$+j9}FP(stLP|5^ka$tkD>Xi1gkzZHnwrm$-v-5F`-cc5XOkTl(Z;pe;UYcNA?1yr zwjNOv028k@k_>nTI_c=_)9T|Eo;=Wel&!D5z|&7X$>R^+#V>#HFk4$aVsE1S@6$rt zRA%?Sla$VwMRjojg@xtRR1}kH?qTn)eVkD5c$>7-&X*lZDH5k&%H=h&v=2qd$jXy8 z7m#Lg(>0`K+QdHD;>jwhr7|yGyuKY*axB47>76(+!d3a0hfZ_iR4aoqMa-R1Ozc1# z$4;DJ$dXBUPQv(xJSsr5Vj1h@O!o*_Vkn%mo;l`2JofHcEm%;7M;YsIz(VefWz^?- zIk97_kOwP{;yJ9Uut^ZOkH*1KoS8)=+X8gCecF0xYuHO){~&Jl@U;vi^_*c%Wezb0 z8!5?2#F+yOs*P@u;t8{n@8u{53{2^k@8vd zC`&QW*VxK{FN8BKi=YV^vBwuM zXU%LP2cKZ;*)ZYwZ0hFCqIB#Ouf2N+Z%jHB1zC)G`WO)7t_HVpw2#(aFQ!-*#nrV` z*VZw!x`cS6a!3J!W1}*FK4jNXWuUDYOq(w{?y`wNkhW#cX4%?W@_Yw*;>A5QceTkN zp3cmi2*+F9B4aByaaP8W4jOtwxN@qPvve8`PY)(nDfQD!Ns9Edcjqn|JvIuslHSl5 zBc4G9x;yFY9TGVXisR3sB0o)Y7(-)97D61n;yn6BFv+!QYio#eA7{sjF3qq-o!NO~ z5EjRqm{G>;nWgy8>|jqrk2shM9Nw1zDj0NRmQqz!$*cv-s7emtmH8Y#vFJQq$83 zG#+GcbCB%HI?D4*47asw6PKms`J`IPtuzJ8P6+q;CFv%HsxjZ`*E8 zwvOQ{t)aTCn5sD|Sd<$?h5#9{e%kwlH-@~#WzVD}afoAWqY?syQsG&BfezhJ6Q4f5dAiByjK#W6i3jsva6lKQaJA0CT zV*xeOibzT{V~NjT!G;agI$C-Ag?BmC6T{5S8%a3(EZa_v5{^lsP|3#7%#QtixT>d- zmoUtk!v|^gCy`T8Bfdu3b@(tX!v?amvoSL!zS*z69>x(KqOI30G9Do)yrpth4X)u3 zF`3!q=H-xLa?|aWwrBxQ45`KS%qUI7=dntllPHmbhrtn%lQWB~6o>XKoKFJ47-I;} z@F2bY9!$w4VrR05ONb@0bOsCRr&EzQz|Ob#(JayLMX{-j;+^7uv+5QwGjogsZ@tP} zyN+_=WIJOb*Su5{y^Y6c@>)e-E6BCR;7CXzBR59^#WCCxJq5!O=$T?kEvluqIE6^i zPF6+|X3@hwcZlS?GODV}shF{trKNH74Eag2hUj%m-w9WU7{icQ$%e(b_(w-M_U7xH z_5`)bjhKW~GF(acyu)|`MqeXR;ixkg&7(TY$gy|ckzg|{X)`E^ z9pd28Q}lZR5{jvb3>7qZF*-6R&PviAZyJ?&!)`TW7>#m66$F1;wK(@4!o3HZs1p)Y zlb=auMkg-As%F6X1}m?YEXrbR3~hP98o%_oxL+f{P5x5T}owrnP54 z0tpkz;zV*Y)1~Z8GU6mK>*=OP0>p@#of;X#=925CXNX~mBO(D*qk1vz$0&w@Ansuc zGcH+zW6u`$^#!ybRi#*C5=cmZwgcNa)}$h{L{eNajI_7V(%Ow%WR#GRLyp$oEOMP@ z2Ku5eK{q92kYViO(1}LeUWsHTAOqiQjUzeDLGO|69PgGZSsfC@#$oI}#r_lR^!E)A zj7=q{sDSLWRI;VbNroZLwDx0+mmp~F94cfWn8E=q5KWNax2L;HoQzM}`azA28e^w3 z1()<^Tv7_@Vo2jW`LNuB+_y+ zNQ{XmB{h|pU=Ig(@8H0x4o3W9NGuLqBKwR?2mT%jWV>29ed;ugVgNFy&7?db!k7d# z5rY|fLMd}*q|zbI%M+8&v{|*J`Fa^tTSJ+WDHfuTo$RHt@eEz%$PHsl5DZnP8p-E2iPhBUqkmGzQJL}3|8W^^2JA_k>YP= z>lU#?ErSdXy9suRuI6QvlT}D&vYFA-+j-`#z4VF?PmM z$r0NX8<$A3@CsL4fTrCq@SClt>Gc?dt5h*_o&;Y`ixv!q&GBT!jB>iEU4j=Yx{as@?t82+~Imyb( zAuGv>r>~u}o&AjZ%_L<=;FOu9-G%9tfV88rfzyqhANpc?gF)Rf@zUGbiPxSha&(a_ zWn{z~wYw$9n!D&}_Yg@;CATzBNPHIA&S7@G@Cw_Hwd0N0apkAuJ^da>+x-$i*ojMw z$2{1?QStNU!~~4KE*cw}==a-+PlzMNKS0x&CR#dr88wQZ&&${3n3W}UPYBZ7CS1tt z!_(DFw*=H>xndKt6#tW8*K>v=Z6n$Zfbdv=Q3)iIipqpnI!R41;qK|6xqCqPTL7y| z|rEi!C?#1)6q!7*=BmiVuiPhoU$|I|1=!_PSGc~w&E)6_v0H4k&shB zmhiOfWE;au-#YwcRn1`5%xM%Ps5{(a7=_PfT8B7vrc?MtNCt3(kmPmdW#Mn!$9sFu zGAbid-OcrS#xNxcH^|Q=TXY61~8G2ajA#Z}Z#ucSbDaHi6UL=XF4dxM?AWj*6N z?s|p8Tk=ZDm3~jpaFGz`u%d^;WmTQBMHWd$H>ZUgMmLnyPW{AC0iodsKlnl9-+p!* zX`+Z?pF}8O{3C<(^z=j@PS(~kUPO>iHz%Z%krJ=%q&k7Iffky3)%{_Cj4%}pxnw}c zo5KV~hv@0;XCx?2JRt@{z=Ov#O2FhGDKQq4f0W^oQN{x5c6NpYiSbyqt;3|KkzP?& zA@$-cVw2Kv8r-z?33-?V^@8J=L>Gy6Ar}3;j0B9@%jQ$#j0_LB@d|M@+2Tl%4o|de zouthybxYu(-fN}q3>j5ml$JqCf*otbFZp`u==W%M2tOJ!2#j$o`}*HW+sv z(yKOwQM=^Dk(d-Kvgu?kj2si4_Tf>XV>YnX1eL_$uFNlqs-&56w@>FN%j zr;pZdw*+1yhxAn9EHY5TGT0P3lIv=+7>(ZHeLo~1G}wqwO4b5TtGeSYdOh0HL|d;% z`X;(2KO8iWlvhBS!>pB~Zr2BfIyuuhf=va2%J_)RXv=a(2IQLkcvMhfv|tlQ?Mg|K zpd>5yHf%-Ar@Br+ITXlCCx*(t4}kc5Zo9d_!dA;8E$AHCgPA^mB%lH;+6UZ_WP+<FiLwp&t^+sc|a=Px%I;-%YDp!siQUt5}SQ+1fksEE;c);OiG&**B(Iu3Wd~gIqb; z2#t~e(L--fFMUF^jmnp&rje59&^9tNh#Urm!}ThgA-(EMmB2Sa+8UI=c~AmGt8m4E zAx4EPT{MAtsr0>4WGp>#+EIv7db+ zCv}%kWNfmDj3r=KT-g-#(kuGbHQ*;+ar2Y};l}}Om6Uqtx7pW6LwjFzHIe)=iM~4} zV6%+&($%Z(zDm6`J+=^^>>|Y}++GH?+7D!SP|k4&iB-#}ozid8=c*KAV2HNXZakAG zHN>_j<>cXVs4*DA@9yGk*Ra%Ac($}BvoIBhTqmqJbY~a+5`Y>lHe%xwi8cCh4~5aNh4L&Nqbf?%9C5V2emt%pBCT${`aE+;ZJ`2BXKn0^NJ-Mqh82(u`Wwd z2Jw9Y)1Co4-(Kb9CuE`=uzE48GN#d27KnV*fLDe|-KJKCL0b-~oWJCo9EGWes};$V zuj;v{u#}<<*oDxpr|gyX0&O{cdZju$Y{bRb2bMO%ycW&QI<-hM03zDXE5XE~-w^wyO3=U*0-iC#iJwngXe(df-`m zc22cN4o4q=jwYXjrb)M3PNX~q|`JJ1o?BB<((_IXU zjW9cFnOEWAtp^_9aPGDI_v>cR``UBtc8fE!q)=E{L2}<~JpAx)IO(xrRL^5vSZ}$u z+Rad1Q)~Z(9*je+r8g(#G4s+(S(4Dh_Ge$^z19JOQs0k~(ia(%$K(Vi_fJ$57KdunbbYr4yNtZEuvD!Z!pAXdCx(nTiS{83oyKPL-RT*>YxO|jtP``uf zxo7o^mzvrzo3Pt#nm#JOq=LfG_>8qWU3&?$=&RCiwLC0paxS>AjxPwp2EgET?jW$!U}8tm<=)d&spl->uG3{iFIuf{O$(|f>A*Q| ztolG?bzvW9x;*)O<>$}ooRU*iFT&C{>KVi-Q2nRI$oS8RylO+oDI7sArk>5!_`h}_ zTE}R)qCfIEkIDKrfvIC~g10Cr?h+iolQ_A)3hJ8Y^-()C2~j;iU#F?%ep;Ll2!HaE za|*5FtBG*XO6shQTv5})6A$dBfBd+P-v%;JEe;B2uV!g!ine2=xFTVAVY+s|%GRSD z_>u~kw{#tKNj`=HVhSx50{x8~-nNB99i!UDF`s2*s+lLdGnblqHN{A|Ic4jno^AIPv&|6)=R zp9FUywG3QrK=iJnnuV5Qa!9)?A?K=~P%Q~mGsG%jjP5Y1@~HoH=+L1U!e`J}HFE zMMm9px3|#L)D-=+bV@LIe!0ikUwdBueP|t)L2?r$zlz>ky302FY)bl7>5NKB0@T+A~(YzSsiyjQ> z_}nnQEK)uns8t&0`JDW%R+d^`r|a);1u+KErMBb0b$lwQC8ug7#_x(dewm={GP-^H zcI}6neLVM32gEsDlq6CarpaxUk2F@Bk&WX0$FwDQi5V1?6_e@+;2lv9UQf>RUyEpc zRhNC%3Q7LNYE~}FV4$&QJSbFhkpIT@VB#86W%av61e3!_QQaaI&8ed@Hw6M7`ql17 zp8ykmeeRDz#YFY{Q5%nN{^m&3$iYWP0>)+3RCSOx~9&t+gZ!cf9?%Woa zMsZas&WH!ksM?4n+K*paT-bl|QHbii{1y-S!D*iyimYonCEu4?RyuxXn9!Lix;9A< zqo47^>d6-M!(x%(&xCqL8wm#0j_1m#gscX!HbyK#gSMf8-)zJbGGh))aA=SdP1@T> z1-f>Akr90sZM@$n+Y&i2m3ydzpU~c4m{&Xa+xZHEDVFqta!T?N348h&@t-eG5oc3E z8l`pfSTK7Ab%n_UeI5oppJB>a#z;8EMNxGvrSSo}d!ifK{8m~#SsvPf-%b|43n*JL zMISybB(FK6lKD01gxy1osP*L+C8STsBi>K%!?i*80lE+&6tIy~zmO%fatQYJG4!FY zH~Ey9tc%+9FR1qi`G_wV&b@YG$DRY^&sfRw+0~SnS5Q$_N^Y`^G0y<*(eqoKUJTIQ zXI4Cq<@0AzTU9}Mg|xS#oJ>T9*Ghi1Hb&G31s{rzFLIdsw{#G4d%DPpN7Sv#>0_RF zl))G@Cs9x}g9YKZmq`DWS5lUr zj@8#m$6!F)EFvMNf|+v{FsoK^k4nlVJ%$kmhkXP;!aS>8LtPc~Svt3#s!FkOl~s~A z4SS%MPPhMK{MU!WWJ#uC-f9+2OJMNKA=-u~aT@WPrr2b13QMW1pU2ASISh3*a;glj4Uv?=A;=0+nzlFf0%{)FGgmjziBo@zN)q)vRRaJ?cU0BBY==v>W z@t+A52wEIYs%9-F$IwR0fO@Cgr?02l5Y1M*j&H6np!eu$+J{E9RRtFhq;CyY5;Dt~ zJ$D*;PBWf?A$%V-IL4u5Y>i8%eA+CstOIlns&@#hY!msy1bp$rbHB~EFE6BZ+aAvJ zj{KGr6A}o9WNa4I$he-v^lGv7Rn-(F`so=EF0OXA739oZOTBZD=HBQ#xxa`|0ii}~ z%`x$mFT09Oiz~^=%_l!Um#j1=4y)Q@>f%Bq6dcRaBG~l9!h!?ae34X;rb6 z7+&>moB|fFzk+!saj0l;Vz(i+gOAl}!)j4GN0~6Ghy4`+h!!o70<`nT(=Lb_w4JJy z@<};r%UhK`VH4DA5GL*rMf1Kt*i^fHPNbbva{1pHn?TjV4Xl}0L2{fmn)kxY9|1L^ zku&Q`u9^{I+v|JjS8|YmFfpx~6`L=mHX}l8dMOK5u4PGm2}xG9-LDK>$s65OFDj48 z69>_|UaGC*@=%|1bsBH0oUh42?Z_m*&*xSZkaNb%J-6GF919Nja^$TidFrEI=*A$f^07`66DAg%gFWE|bdLG_<%rF5$} zWLu0Ki&^S*u7AdBtm-=6o{8VlUCGY3XhIHZN2>{WobMvl*756(rzu%QvnyFhSr^Je zVdA>#+zaxl9nyTmot$duB(``qbF1>TS1KqS|1u(K>{H0d%3;pB>$!I0VycSsNOw9! zj#gZG^{l$=5*AG_prEjb`X#H_xN()}u2aJKsGQC_1|=iu5BVKEqKvwg?CGmmb@>f^ z=aw~8sB*{qUWbnNLG;I3G?$I**RgElwfx~tOUVg@P%UOS=1exXKl$F+V>E=}| zsZAziieL;|h1Y!1XQRHV5dUGeQ9So@@x|F>=a-2cx>S75bkZzALIxp@rL$PRayheW zipW)Zk&~&tD(V8NFco674JI48b1&nDOBPX5RG@K|e94>aFh_0rgfCEbP5BD(CFlK1 z6cfHp^F1n2xfc0jve>ZMtmD2Z>i1N2)cK*IP7c2D1dqP5jfQ@;0g?*hCKoJ)jQh4| z+3#C=|7e$z&l))tYUmrHR)6*VuO9cu=hLFlcATF`SMnI|1UX7< zN*0SR{|0NS6C^Z=?glwIc%8zf-q(4P+GC9&HpX_Y?28IY*RAp7R4roTr5jndYA%H- zv51x{=|@jd(p3F3u2&l8k>lzUo07wV^;fZ?Hg&x3)i@ZJliK~(7NNgkKU=pRq}}6J z^EcyZB6}%wvP36zVdB{P`$zEx6VBXeEM2jbIn&E2EKu=NJ~^og(N{re^)ykn_8VNg zC=ZLo4pE((awUyZM#rBT!{@FzUWbWt#>eKltV$oFV^7mHrBCB2pB362!kzmMlV3dx z>;7NyqX*t#@7{eJI@L_S_u{%csGtJE_`1uuBIO`|`?LFbbIW#i@7~Rk7LOQnD_OOR zSvt3l>dFd|EPgCWIpm3>9`kqz+S4g5DW8RSON#o*7F zUQ1^-tuIV!$#iPei`a8BDW6tH zc~K6rz5xb2UhVxpj^s=#>gO}Ps+7`#G-ASIxQBhjWS28z=4|bS-FZ$62D_8o> z4?!77F-ani+L_eVR8v`!iNg?Jc*u)C7$PROmijyy$m!)wudSBgyOgZhVcPq=m_&}1 zbLUg&u#!J}HnnBNWG7qk^>pA4it>w5NGYmg=B(LNmlaZ&6_0OVF#4_^shN67x!IXV zbxAJ%j-wnr+o#p|Lm_PpS~93xTtRHZyZrjjM|pYM9vWk&bImn#v79=K ztC%~jl#=2iin46vu zBZu0WLXwR^?R}LY;whRjhx*z|N=r&8tEix~FbA8riLN07vB~*NU$ls6B}EjMmQh(* zMNVP_&p;<`pMkW}8O)qHgDTOz{0s-)zClLDL%i}p@hN&` z%bd+M*Dex~g(*xNV)xtoI6J7`Lv(T3KOLVB3??Vl*WJL{q!AAF#W1gMgf|~~mo`N{ z#d#-Ym69Jf!k!oI;lUTSvhTnV8ru5t34th?zn)dIis{+%G*3VI2B+*ZS+t}GZ*K#g z{SH=q?faCCZsD=p@8^yE{W#`rW?7ksGyBid=No4*`g4R|JV=+QcSYt@mDBs`&w1eG zqx4zISh1>tk%L<}=C+VtP(e1Wy!p(7Jn_nQ_8mG(Q|AyLw|K)~v6C}xG1JE0<)3eT zly|qi$L<41wL1=ql)4IQsVXTXCntl_y6IF^6q6Ei)8`(>A67x1m4dpZ%$`;*J}95e zWE-QMecFrGvr4KdOt)yyv8I*QQ#nai~lOkiDj_0S9^!65{SAhRylVyv#atcEUTfeJd<$CLALL2C7=RB zt#zLq+M^H&Wvu!7*H~cO!{hfpz%#FJW1rM1XpYC?Zlib9PF9)lhuJfz5I5@64$r@FM5tdtl61KoJS4(T6hM{yzfg}Id1)=-q0jKwE@V?_Lh zxYUHqBC4m)Vp?UHl%0xcbVPiLPm_lVRLr?`tejIvSy>51g$20iro|m0y=F1X=T2i< zT^%lyn_yfXW!XuDyo2-%jbV+ABd=m6_0#L9D$OP(#>j~DoqErp7!+IuBD?8Q-*VxV zRnw?T^Rj>2K`HyonV-^QFqEpjVAC%>i9&g4wG{mrQi>ftO zv931E-j^QXi5K2t`+Gatf4WOsc@|eNlLfPCm@#(=#ql0I=2VIcW&GJZG;|J&8Mly_ zUc`(=3#iffUpDb!Uvy(fTP$h$WfbSQaOIU#Q&S^4lZZjarh7!K&@+=Ral`cKGTs$W z&U7$3;1+He)Ohlz#knP;JNF%;uzoSQp5456#)s7$eIJW@`1gx=`~A0p77*5~=aSq( zUfp?8d-+EDKsaOI~QQYEuoH0tX?KtD?1cy60Ed=D_`cN(9NSyag{$x=H_x#6ew4Zw)ih6FY zglTiivATP4wfmOc}dExV(rFF zOe@YJB_)}%+A5r5{hVp*#;2CUO6}~a1x%BH>F+%D2?N4(YUWju=4s*Jz6J*H(%v*i z{-Whng^%&x(RPw*S8(+ut8gXQak*U7&6|s(>jVd-PR^_fW-pnI#E2y36p>d@LP4sP zQPGQ_YdR~|%)u3Erm3lm!L+&DaMfb6e7&5N-;R=HTy@2Aa#EeRQVN*AVG|2;q2b_G z&JHC|zv6l>Un9Y)C6a;3!Z_4IQ@aGX;ygoMpEyb~}A^fIPO3HJwyBkHPvsiK2Y6`m96pK@z zL85y1mPRe>j3ky^2Uh6CVRLp`0aw*NnJ!wj5}d zz-IiNz2N|3J}ae5ui?h)Hc*plBvy1Ld-`G)x<)v9qJb_?ki?>yEL&JlL1r3Rd3n^- zRblHmOJi?{wDLOYs*6cah!sCqAilhmytn`Zt)29ZsCR9Kux3;;uR;RCmWhBcB5qXz zo$7^b-nfSB)CA!?$<)r9N6Nri4m9^;usWz+wu#GD%q20_iYq;voQzn8Pw(Ts1D_=z zRCnL4B;+h*^M+K8J$MJNoKiua_&JZ8p7vIHMlBlGSby0nYKzlJic2DQ=4__LhiGeP zq{o}eWqn%$;!_Y4w*(!g48w%4C1mYSiX8KwWWEu zgjc3z<&YE8&+aV;Xt}7CjH#tdo?D+r-`SJ6Bf^<%BQy$+Qh|;kxq#^_FX56| z#abUECM99@ws5+8l%$e5%%4_Der^^Hg9J<>~0ywo>s<^%dTWmribH)nusl)!O~^Rs4C1NJv)oC z!fcG{CGcG%GPbIOd!%D>x6s);q%9Lw?-f+5n&M05vAC{;!jf_=aP>wUq)H#!M_br^ zvY)t=QkGnD8Ovto5f_s{PDLf9X>klUo~0}7plbP5T(!EM!h8ur(~2Z06n!)g(A?aG zExU%5t5;KzpDElhnabK~;mLh8wDm@L@~2dbb4x~5ST3dsmk4y_ie)TYJe%smbYd=A zG9<(@v4D9C7PCw`dD+sXRA(3o`@I}~?ic+0?q9R(cr)9c_!)oyPe0}t55L0U7K!GS z5stNE@O87}>AU&qtxs}%)Imm8CU&Ef+BH`(C#i!spSp`*{py!IyvxjzE0>DVuxWR_ z)U$qRdBqs_J;Xo!@LzdwOApC4GbxV^iUL8b81wdBFLCSN{Ug74=@bb?<)kMj;>?`J zf`xVX4?V>lxBilQUO0-Wa5}T9G8sAWDv#WA8!v1>!O?Bca{JHznZNtj+jwHjN&FxC zETPCD97pYfY1ob*_}*{`v3u;eR~B zzL8Yw>Ps;NtduRghE)}?>+zrQAHTeVr}sywU$uae6bHr++YRm0!eEjCECE~>q~@h# zwq&vNmTxoN{R(%9jDPW~+j+Jjm#e<9oDA)n>UkkEo{nQY`LloGSHIrQkh4?*uzV5> z(HEzxicQo_&2*{n;joSJsGQRb0UOZ}L_L_MVCB3(gBQ0Ls(x=gIfePeThy+GpNj;)a8S#7?XmGBBqWfT zkxZO1z+nFXeXR{be8Qv@6q4kKBQ-mhoP;r2P6$~SXPi{Ngym&cj=c32hgy2ISFS`i zg@~4`L&t>(huV4T-sd>3mJy8~(;((njZ39J=J*WC>lcepUBbdy)nq$ku_U;#C4(>Q zA){zI3)XF7)pRQsi^{cH=3(tlgxaCp=FFpZ_7YaDT+ICXaxxNPrs~iKLIp!+V$#c4uvqNX z@)azaqn@!EPZj?Yn_{5*(Cggww?E{E_wB@5Tti`+6Jscd%~ih3wD~XqK)lxXKO}NLwH@NqwKjFTYPhl&mqbfHAyWzw9tqNq5nS1p&n9Uv@zwcIl z`O9DO=%HjbePac=(pY;^HEXZC6!Y6Z=7)d(kNo4W9^lpELd?~=>CXyPSE*N0sEhV9 zYIoG};~IpB8&jFSemygVhrRgkf6w3lar+-K0U^KtIJ?PvV* znX_cfnMb{FWt&taZT@w9qk4pw?)w@4^3VUwKmX__-2ZMj1V%Xi+|T&&FYjY_;}Az) z`nmY}f8bwkf1Dks28c_{WBP)nr*@Ea7zGsvC(spzd<;1N?s00kseMRZl<{}NPK1jhDJi2``CBZMDdIY;tf`usTpKBLo^*ZN{=x|#_K|g>|MP5>!0(p zyPxC8h?8k^>L_seX+8Wl@13<$Sig#OYu2z~X+1gViQ0{(zFkl7i+}qOFC6jEwc}xa z^rL^~pMLyr-0_y%9;2fp1Z`H5tO+D0 z6^T-qaHJKne8ozp6{cadn{i37m@L7U_Dq`?V71;@)mK~luDs93LIn+}lodMZ>T1?V z%oIqQ&GtAPj(EbO{X$}_n8lz*j1Dnk*(5q0B&BCFbM9hh6sBTyI7my3C)ujxC3WfD z&!dmM#i>Crq26P>{pvd$=?iGj*!YKgIrQe!92|+xst)@7#5rP!G31h+oi2tULSFf7 z3Dy^p>j)8uPo^N=h7|p|Ks_BBk)SX-bMGe-JA61^D}lL?f}9jWW+Nrl^H{cc0h#tOf(a=UI4qb|7kfK7 zxb1D;*we^}r-Ng=x3lMT7oPDQa1}Z6j`|oF^ON9o5pR+PPgLz9gDp`A_>5(&SiY1M z^%;yd9cK6OHoE$|IeoGPe|#Eg37Hh+=Hc+Rar8(7ZbvptmQN$0>nM901~FPCS#wynZXL_#){<_w6C9DiFRzvb zOXjnGqJf~;*Eq`7tYzb(a$JU1UU=vYT876kjRn+(q=X`$#J21B zFN5^I$>E}E#X45cv2*H`S2@@vzS9uG-Fa49DyE*vub(rYRU6i`WJWnDw&-*D9}4AC z#3xu1CCC)MQdw0+c~KrIvC(9s#meA`9c?Y5`5OhTO|mcL0-}cw!GDVS$lTMC_L!5u&G*gg;&H0Cox&DXnuDb zB0IHVV91$8PPU1@lgDXl3t+Wd@EqF7{((da3gg74i!ToZIQ90E?CF&NQe-eB+`}&1 zC0@xQ;G_Nc9uA&5MQi&MOV-xi&{0si}#?Bs!^?v4FWX#l*#0h)akk zEvb;)tQfkRPt)5yq{&cwhD|y5iwtT4+bRKYeqJV4-w-3CeRw=07?Lu{&5p-nvQvTviqA!5qvRTu@g!M^?#R!m+@nX%Asp)B;JZf%7gUoUlR$EM z9*O>D4jybKC>+7%O2Oew5FR#%1@%=V#aW3FK9?n&b@a?0p1%K=JiV(EvuhS>FT0%0 zmo1_w*&%fvf9_M%Ud0cJTWEEb3PfyiBoyWn*Sn8hhexo84H#`{;!K;D*o;(?9dc4& zgtntQc;%f#bPe{(_g(BbaEh*A4p|vV80@iB)Xrh$vZZ9lihoEm5L_t)bjn0tQ&4H)?gTMXZ5BcHW{|mQ1cL0j!u(&>t7I$(%s4ah zC@d+Xw4{_$r<;9m?58CXKy4wern5pr9)`pqSS%8RAAgM}AAEy`QE?WkJS~_LqM^`R7Ocj38k50{2NYktfhxhQE+vp_As+iDZ0Arr`}QXNqbF#5$R*K z6z_dGq>Q1?M)n^$hP8G*mo6xlU@saRsfTf`F^Od66;oPXK~+H>u z#C8ebPKz^=0UYd=Ks$l5Ih$FsY#r-n77^;)&yM5W;)o>hRDohz9z|spl$92d8#~C6 z9Y<+XL9DufUo9E(;S&oJ4z{!Z&6jy|M*{-^t;W$h$)C{J7(TC;QEC5|79wZGVWR!6 z`f#eATkHv>Nj`a2+~60BQnl!q%!k%C1DWN)I#8ASB`Tf8ziB z&EN3DpWee8EhZ}G%%UVklE;#nmX*uE@t63;-~WWij}8kNh+!-ki^uCB#;}luIo;g% zZ-2+X{p>joTJuPk>v)D`JS)A|uCC(?31yG$iIgtBj7wI|!u{6$JoDCZd=gX`!a;hD zyu-u4_y@Ew^N;aVuf3U@E}KJTd8ziSUr~CTD)k(c|1v7BA-UD_hGzM$ z9yd|CJ@J|Fx6zNBDqJ8UKGT(3LXqY(ODIX`Ve9jIX^)ZeBwBU&MCH6N+k7Cl4qj{AA-SM*=S!xX29O-LiRNZKmgq*{XE*1d;0-q(-M=)@5x zeJmBQ$_Sm{D3jZ&zD0SOx?uE?EG<$7m%bQGz2aQoop>g}CXSR7l^?{^ZCKp+Hn2`&llgFAz} zyAN)IOK^ABK?e8W9)i0QTn2Y{JA8Y;`#sS65drsbBqfhO_I*!^@_% z&(CW@YsmE*78w^mr+MR18uNgb%+WA$#oyUeY+NkKZ+M^c(z@j1?_AJot+YRUj)MD1 zLnlkl$A&<%o3XFTp$+vZV``kdprNmXmT>y3+fq?QW#%Zks?1q*0$kHLh+8s!?iYR5 z#4C}RwPY?68d3I(bo6w3i!fyODq(bn-E3{~miT1399Xz@4sn8<)uM03t*L3BFqV;B zyQ)_5D;NkA= zLGw-5A{9JkM*Ck z+Ccead|L};b~NgA@*n_Nd)dN1XqPMpPoeE&lFwaVb zeu4t4Sf+oV7CF$b;|`INB_-j5?3Jo9lC=lAICC&hw?+%g_+K7+gmRx?;I3jFbp#W6 zrg=S0a95a?>O^>ds+h)bK%4}!-tX-l=h;qwGg*|7#u84_mB@#SZz@Juuu>+E6HNWaO$iVxfyCtlNh~Ol}+^eYs>JZ$39^?ab~C zP}n5iaYDs6nt*p|-4$%rxzq-iKe8-2hrCYY#GluRUqT^#r=O?*trNIHdxbd$6Q%U= za4QtX-5)>z=P-JN0wa^9<7Mw3VwIxsVsGw1FefWyMP_FE9;x}sleDP)ar-xA7H$r$ zbEGW`^Ydcbl4$l!s`jU1-wqy0RQiXM~GG9))9exdz0%1+Iz?VMUc`g3zO{C-o&JvLsDED`NGe;YU~z>@(_o zwQO1whNtAt`yC%}B7hWvhY4w_%G`d1P%*AxccNh;ToYGUcw71Tt!Sp<-z?v&L&;kd zDSSSF=nHpO8olCL(H{l7x^3$=S>n1{w^UrOc?NkKRy&`f+d9{E&ottQcvUV{taLp+ z(TZ{DKYdcFc3*b7bPIgZuqP)EFOTdpjl9<~^F&fD#Wi}dmu0;f2k*)dHQ$Un@?AW8 z_>9y?ea%@>ZSMV9l$HgIV~PI>s!7d+ysCDNeJHk-Xq*q_B_Om@Xt6;ByU~yj;y8U$ z`&ROuO3BmIC_K6G(P1!LyL$+SF0DEM&y1l^EP_>{tM6{;u(t= zjc7be)RGSz;G*a5=W(Lkev5qEd_|wN`X`Kg4QpjmRH)}IZG51A4^;@yhJ8_=nKIWo z!iTp=cfEFlDWi6h+Mc?J4QL?T4^9Up#dc5&; zdN9l|W0Dx@H|&wKvyBfC;DFL&6vDk~hOPZ`CC+MUk94Xq0^IQG-@%Q~ zMNdDDIUGVGQ-`F0^&dGM*Eo5_!03hk^}R|2^H20+FZcB2J~kakvP5pr)=^H8p=9#k zw&Mb@3nY0^3ofj_(H)UZ?oCqDXeRP;a{l10iOJ{|K|_O%Rx6sV!XF2T-J_MJ=p@Se zk@;r)l$88wy>QX;)P*)@LEx^fm;afv#*R3A4o$9fSL>Th@ajgBcpz12HPzDT^GArW z)tJj-}(XtN|J)QObII97L1gT$zf1)(*>cr@ax8h!(h^TItb&V zPHXi$ifW1e`IU+BX0nqjW;s@~1m~Z^UlH8$rLY9X!dK8VraG2I21)4_W$e&=G6IZ& z`Wp?$SamFi6r8fr;xfKjkCLu8ap#<}VW9prOHo^b zPV80)S7_WG7{hE^Aq@g-g>#_e6*lxtRKV|;e)uYhj$6Q?J=i<5m*HwcMfe=bolgl< z+SIJmxU}*LJ1Tr6R~t4obt`eEsw%ep%Q08G)EN-i)02>-qM()#vC1vovFP8X&yHBr zI|p7PZxh~GZOc7E+wM1A@WXrj2r)5>=PYYJXAS-Bu><|=`7UFH69;x>?yESEhI7~4FnphYgI z<$!mWD5ar}neDbH#Z%X&5+Q-@{|+>~SQVh0teK=FDx>oLeH2L)>*w`hYJ+W9sxg<9 zF@_3D`E=;Rq2NlAey-89w7X5GL^-VVSt? zrk^C*A9LtM`6fa!56drh4B)gU$`?hrge-_pWus6bgi-aT-2XX=)(^91auFn~&%ttT ztqYgc3qZwfdEM3OyS84OtGE8P=&t>pfe<#}^Yng<5ci&LRROwT7)Uzty7go<(rQsc zJ46i(MfD-{Cu0)v>G~R)Sfk!-fm>5j+9Mu97;5k6Iwo6B%ng)#LAlO-OVZCmJuqUX ztMMUIe08giSA6ftO1~Q-vR$&L3{_K5$P#qZ{*kQbp7vyIlrppZs^!%f;(0Fmjtvz> zYvi8)ggf3BanPuK)!NVHE=amMwSWG70mLnL_Mdp1}$7G?C?c1gI=MR%Gb7jo{$a zfUZ27oh&M$OpwzMK2GfU9P^@`MR6&$2u}O9G*ekmHL5rzHGNsKG z^}_T*6v^}OYnkU9mTtA` z9pG&QptwU`IuhraoC_w&%g~JVF^Ii=3}a@tMvFlF^Et#*Snyp^z;_F?nRrN?sAx`j zh+SoG)L(8>*zi6nV`U4plFVp~fPgVXxmU`s)EX{N)#ZIeC^Mg#!J+k9rrL^;fc?Q~ z(cCrMIc<;bPzv35+Pn&$Xx9yDLSa*fgmOKe0;GeGv8Z?>iV`fXsi&7y5o$yTz8YA-S~sN z=94Tm_Va`5!^ms)XzXA~T?95Nt2o{%%U40kS`aE-_PH|zX8ce@*&Sn>(0NQGHjH+s z)pg7J?p5mv_={<9PJ*A%`pD_aeQj#RcnGwveu8b+B)csZ%Qm192cJD&a1hfC*~P95 z_*N)%Scvb-GTrBlJ-nz{qqmCD68++O;$$)-ZH9*d!zHOzd`#DL%SesE-HcAmv{yiR z7TJ=e3BiTMmfiRt@?vkuc+YjYdFGQ%T8dYsR=4Uhi>S|xcNb2Uy!-w33QB3OmbxU zveu!XE?l9*{oI6E$TheH1mcvs39)GJpWqfSo6=y4B6D?L1nuK@VnGBlfLuRNyo-Yu z>UBtsm@j^Yd`22~s`rh0gTUVR0fec6)W3GWR!^%)OtMDUNp5_01fk2}Z zgrk{|9UT7HI3MwL7Z<3yOJo~vzb(mp)4G56)p{eIHp#lI$I+epi0O5YM@QTt+ut`v zQ|lO7W`kPyI*36ge9fQ8RE;epqmNRT!4mZJC(HnyBnuK_EE8Zny~@p>ilqY(EJ6dA z_|o?-k`xVXH_PcBDCV9W+MP+!5MUB?Um3n7R@VzJ$hvguOT_ogJDdFFh4k5Ja(1C} zE%3xUaU0Kn(uYiUiHxXOmT=ouikQzD|6sS-o9)07Fm zKk6wd_?gR|L`*BX`a+*Yx8)UQrms$ZN||CF7*>`FN_g4b9FJ<4|9QiD%yh;?RA5zKPnQI7@TzA5N0bxj#11j^NfGcsLGWAe z4NgxIIq=tXU#CtX4r{L=DzRVZn4JsNku}j_>b!9Qr2%>y4xyF7*lfd`chUQ+IajCD z#g78Wr3u+SNMj*#T397fB9BDw-07f$n{eOD35Het^cI|JL?09eA{_IL%T(ukac-`u z>F|+b3_fhbsvFKlpBkB4*^h+FHoXBCcfEeUF^5IEgCX-Bkqs`y`Ff2JWD}xd&Xo4P z-gw=5E(j+~p&crvIT(V3764$)s$^JKm?loilBvW3Se;Xjk@dS#PJ9(v=~I6_=sB2W5c!R$9yIhFynUPKD~iviD)=8K<;r z(5Tf`G1baitp`%xynw*|>dMz81Np~lm|dQYyH+}A&wk?~Iz)QW{Di<*`G|h|hIwvA zR?7?$F>kZ*uoN(}Oi>4?zHf+gl$Vq5PokGnT@g=U{RstvS86Y{<^rJK~%n14-795~fj}U#%IQ@;s_Pex|m9!Hi;779VM5=5Zjb;PXO?a;CH*a(F zX*!3qlwQVc<4l#^w;pBs57cf8NT~N|W8>q+>@FT}*G}UL zJ5(!)Vq%gR_4hL6LWoX>8$H-7`3Cx%OFBNbi?|D(>@Y&ph~FljUUUSO_+P2dM26<+ zN$IgeVM;-Z(P!J=Dt~r>;vVsK&uoypuYs7f0U zZ&f__w$>E?h5!5b@39{Zt&~r*ks>u`i=26Din7JHuMGWaf&Cjrq&x9=X0_cYjyC8B zBrAd>i{3t$Hevl;wEhaXJfcEmVpoi%2udOVfkn7qMZ7#E00CU%!L7Ry0d*K711hFkZ37W89VQ*7r!1?+naCP?)3=Q&7f!NSp#o3}Wgowyc zROE0p+CF2{cMhFkKDgL%Y7qE^nE%!rVEeN80t@xB(1`m4?~lg)k*PS6U7A^)JVv#K zabHIY%jB#U0Q`|(QOsOKk*cT%cA-SOB+K|PeyU5;wyE;PUrvD61B5BWPZIvcPa@{W^eQpuDu-B&jxqV@ zh4$4Z0p!aI)cV(Ftn_-2yu@24@Upq0Q$$gHiKT_*RAPGweLy#Ls>xR=Dv2i8*V4)j z$jgqH81V~@OFPA=-S7|ICx_>IDofB~&&zh=A^(neGF;Qfn0Nm-*j!i8cdXUNoh4;Bn|w*lO>sR|d6+z@Qr)-TsM1^ZQ+~gRzV4Ea z+(>h{_!b_$+BrR`z&eM)9q&9eQfVjjlcoqZ8$S6xq1WY_Fot%Y4;QHgOg_YD+Fw@S zUhgqp#ZyN8F54ch(hu&cHS6axc4PmIaE7Wnr{6-xAwh$Dw1K*{;R{llZ4x;RgT)Kd zel_+Pc)xk!!t}RW>wa_Eb3d3(4>Y|GrNn)U?hIb~L;Fyqs!rX3g|kD5o{aes`kqR` z=Ucn`aN+!l;|yAQ8Rx6}@#rgiFr?wV%91NBkPt}REnmF%{t$v9G)XDC$>t{AFT@Kl zMCqVzcbC3%2UlDdh1g+%8k&prJX_s)lT|hg?tmZ<`Ajlza&ia6;F&z^k_uXx1qNoN zjzoU>9a`dCUZvte)eO;v5?!0h?5o)GnGI{Dr2#&WBlDJjujlVN3Y|zJ6|<`}jw_z@ zxSC#unb2JPFm4SI(+}%Xv@-G4C50K4hd3-`NxdTOqse3YSc@g8w%$&1 zcM#S}vAtBJB@K{g@wdM`oru5t4SC$8 zf)xKnh>a*x-J3D}^!x(rkn!+;xl?19pce;6-qMkLAWeuF2|IWWDJ><4DA8B4=Mn$j zb@G%JthXekcP!NYd}YfxG%0jp2WMnOupNta&3p0J*fFRJU7^>awN(y@i3KeMz-+1R zwk&p@zPh%D?L4uMUTUwvg+d5uw~ApZf(dTf_VD453Pwt62I7>oV1}u~&4|5SkpFDK zt+Zg}OafK4e-`qqr67iYmF!>f-B)6ETTqi_V|^+^^J$jWWMB{$|~FhzqPO&6uLF2s}{UxCp$C$a8P+WIs#2 z^h|61W}cd1I+bN|%k!atG;(5x{Zd~(IEvwevT2^Rb1c>+Ln(|qJ_$cE{ zfHAG?A57Zw_`hn#8!mxo0t}z7OkjE0f&Lr8n-E9hJ3636oOlQKKN`qRqchtx6_0V><>P<4^2>jflD+%Jg<8xXu>-HS{MO{2GBMy}k&*wyPLCnJrojG( z>>g!oFOGn7*DT^V>(D1%O6O!oMats;=i=_|W6uAzjfS=gB3Wt5mVaVF&~(3C>(2a- za`OiN|7x!y2gZZB>!n^*n12wP{rB_Tjs+8;?Eh~u=sq=!|K7phI5#q(p2B~-KI{{M#lahd&JAUL(Yt_*ES~kKkZx$nmx`1ufN!y4Et>~kG^}l za_|t$t48~J?M24^_UoItubragB#P6p2$P{=Wf=>_t%kF7J#BimJqkIc4O;$23nJwW zX;KCz-SGZrAemK))NoObh#@SbliXVxcJSUx_Ghu{zY=suuElT za6GmPiT&tT!KTB*0&%<*0H`p85}k#cpZ8l9aB*TC=+h|o+;J=H^&DJb$%+>#mN#L} zn&zWqB_2iKc7H#|+?REaMRjvE!9OmiXUmd53+H?HSNdH4>cp?CJSr~lOB7*`o5?@w zLiFvjUt2>tD>45xR~x`aV5G|%S~U6&{GQa<8@S=|Im-|Wj~j{^4j?jUII0w?*y zO9PUgg)dd8QnS>_(-hwi5SK=#*@Whm2aL%7h;+r0q7PSr`{{9t(zd0stu`BK3or-R z1@Zehe3^eRijb*@i8)tB(Bm|`#id~q$EN$R5~M2@^gtax3M49pTEoU6l9d6b2ULkC z!QfjQw&vSC557q4{`{(hV^b%m7{7jujrfC2XvWyqWoj*PBE^m)B=n_br=77pW5{^2 zmf*#fM;l$=lm2lc#F2FPK*T5wb)~dBsX(<~xgnV~> z)v0J~2o5uB;2L30AJMnRo|<&|krPFW)Z#m2WM*^>V0hW4sF1FVdzAPbvZu7AiAy)#boTv?SZINwq`4o;(D+INit~vig@%6aQ9$3JjJRN0-{m6beJ zu^#W_I(rs8>6(UYw;k)xx;4NOD;xja3N~J>fGnv8xMbD*=PSUA++Ia;3^-jV7j-5! zH@W8U8Ch+2hvXNf2etD~&p+M1b#o#lf-*XVV!u2$wA!ChZp1snv7;F$Lafa$xkOqC z?%H_HR$u(0?so20$DX4&DwZ~n57F>JACs!0uP}_2koP~zozCqoLuTd6fl)y3IG zC*%4?XJylt-cVAhg#vvgfAG{T9~Rd;`WX7<+lg(`hf{Q9%tqjC1t)pWL$%$!eaf`?jKIh zs_^3q9oA$`jb_LA>SD%~H1_K#g7shHME4&Tik-DW%HSl_uI&|}w3wgK!>pn+Bz4P! zA%>0Le?8^nRODhs@tjdVcmVeH_VVkRe?VV|q)@r*6QGV#O~T+R&d#TvT`DmI!h~68 zhto~_pnG@n0{W6R8ur0uO%iC}LAv zIc(mxr)f@A_4D^tY{Xl!!9lnSEx|#gi1oh#0B&y3z!!TX(`AeqLhun1#5F_s$=Zok zWlcgveYw9nuQ+(U)7w2bXijBSz(|<4?PIX{B^18$y@rPSuP1J!rDkyWqDyiyu21fVV%Crr(ukp~m z3;jDn{!gI1`%}#;)F?wQPM=N@FN==75IS|-Us!R2LiR2)VVm1-&bpgJ6v_;WJCm6djYJ~m z5oihdGppR6G0hNNA1i)$&mlLVlR?%*lRL{a*g&)&^RrV$zO#Lz54XexU1^Iv9y&vv z$f~ju_2K>t($uPE5LpXwQbYE}R~YH2q(^CGxII=7KpSq?bbi)MsHo>(;AJ+qYMhc6 zcJ+~H<1B|ZE>tGB8Yle>4&(?Zu8oW}eqJys*f6PesaM!nPTwzzshPWwnyWj3f8ZV* zpoDcBS_H6LOBT)?=eM7HCG)pVXe^)O$v?zPNLd(S`i^^OQXWCTE#xB8u2CV0ua?(B zdmtSb&>bUP>Menm%)Yp^#9H|+=LSQq=B1nLQf+=-+JvUa#_Xl)Qb~p@f5d~!)127D zU31Rm5PI2Z@E5_nmcmldb%EW&qNOL;HRZ+sSXf`lojHk(4bj8t0teM zYYMWFa-ZhaU{jf}U_!+DjD{-7^g4g*c-+(AOZgJVRLEB%P2uI4nZJiS8}Ug~(-|gT zOdek(p)hDCe^_pM64O7PBe);Vv+dL)A_+&&*_XJ=-^ZZq4)OSAU!%<;r_?Uu&5S1O z9M<4{<>PieZ+5rm;hlDKRM1UoU6lvP>7?D(^$hB8yEfyw8Eje7nNQ$cPGGH{npYNC z+vm!9X@Q)^o9V8ZLSuSYOh3U$W~Vf?vFcJs;QMas6c1_1R^ure+hs>B@~WzlZ9RRp zcE-;3znQt6EiEoxYYZ1>suSWI+%!6T6EKj%2V>rCicBZ`rL}AmMk`faF>>B{u)}q8 zt})udKPtp1>fn`j(2!iEHmjhZEDf@!xZ>77u9vt;>(0RE-W^Q330nTMFk{d1WRH;?WS;WmjJ9*0G}_yM*L| zZu9HZd0Ih!mDX!c+5v{gVFn|ekc`Rn(<-zk{Eu^g2$>(L^q&F)z>9Zz&8QFqlCwM?Gpa33GE zsO<-&+BUNb>`UHof{TDrT0f~?MlTH2ms}&tKWk3A^H(#WzD=hwV~?dOB=bMH#(%t4 z+iBz?CTXMlWKo_qgJ!hM(P{Nd$W04B5t)h|SjZIB00zjPBkQ;Y9+cuTle)*c;+$X5s9Nqzrqf`#H90OukC^DY z%*ptUEMzo>UsO|dmC*-;6ds{`s@jz^pc%}QIG>XUZJn3eU05D@j`g43Qd3kUplU@< z-TlCVt+y@&%@mh~z=l)fGw_ZJ#zD!u(*Ox>WUU__$(0)nR@wQ*L2oh3;j*I298PBG zl8(v=@Cmm&^nJ^6?fF z`gFhXg=t)o!UX7{euP$e>AMUZHBD|88r?DIzsrEnX=#itaR?7N{n{5zY~tehzCv5` zepob1WgipiT%SwE$s|<;5-q^$zaGaP$CK!~Gf7$&8i3nX{xKhkz^dzrvC3G{G;?`| z5DDUz;``HWh5G@^#ovOCYOW^tS<(CV%MUG%W218GLZ1`*L1=k~h4S>HTo&rylpN9j za)#b|6wTqiTpBmG)d5|-?9)C-}Ut3&z7G=q~ zC~3b0rNy+|K+;nBP&S6R%zNqkozww##&M+xEfLaq$=~j*@PYumt7pVHqW665<=PM`Ou_c@?b);mJ)!w8F(~Xmir^B@VdaskitAs`5(0D2iPEfGQtM{M<@IPM56xuD z!^8Vh-EKs)9!5Nt79#|8X@ZIGSfVcf#A4Vhtpb#JUz2;%;LsC_6=- zHH@CY4*sNk5>H!Bga(O2gj)#V04Zb&gb_#pz3WO9@%k@tPjLS~@&@ zlj)aD`0(UU>DYE(Ppxz%K@Dhh$yo#fsPWm>8O6; z=-O@%gcZ^iC^gN{&mz7fsD0hK6rtEIM;u1FXV4>drNNcO3LmC%b zC^HBw)#FPkzgo|ErqH2(%2Wj3`U&ey{dYBSIYBTZh>-kCjtY?=8y5R7$rrrP_M zT5`y!k<8T9)q-oQOY=g*2$2n+;ota3!b#{3qtkpZCU>R?FbrT8mheQ_jPRO03Ck zkC^|^Yj4eFeiT_&xtw(u)g+umr1{CkCgYrXHWbc@&n-f|yiK1Tlo#_8#-ljI(FDGt zHJUQuSy3!OnuQJf#CBr7}k`x)!4Q4?b*w z0LyJW>}^;=E$fu_eh(Rps0NP}nP{t8{AMCWcfGBq^8CDMXxNq#VW=i8##^aFT3)m9 zs=>T{Syn{_v%I{#wzk%D-`vtNueEi_bM)Vl3EoIwN=t-p6Ccn~jcz@?lBIqBcgZ$- zn5_B~mZTInE@$mn#?OY*>d?_qw6bRuwbho9+n-|?fI5~!O)|4~o6=Yo$J%~Lo=q|g zDRdj&&Mq07 zsg4O}YS}kYb<&JXW`u>MG9@O-|L77MdH3k=_|h+>e~Zv-m1wN;Z4;Mc9G?-)XNh8A zfMoWttE#=bokepB>F2`cTkB1UhOT!OneWISQQAT}hJ}XxYigs&x*}brM5#Y>ukXIY zD(GuuNrE%Oty?}~WoI8>ZjVo~4MW_iWNg9fsjg8O#a#1wk;D?jsGSbpFlyz`)#uU{9H zaWQCQA=Vj{fe%PxmAIDN+<300mA09fnSZZ$1@i-<2)QX?mW=G|rcoFcOw<1crg~>w zOcI{QOK#gtGcUKOkBCE7|)hYQrsj1=N_Y&Qt1u^fpiS15i2`T-tkbtF%l)t@APh^<9 zZFS+8L4)}s1{Dw`aduoIvUoWeBbw1j6G}5Ibqy{3`)A$))3;@!e@@3nn7N$O2kuM^ zRSUaKP|jo=HttOdu+?5uH;3se(PKF$E%}b+?%)HA6qCAfwM^DK{j~KA$cRX)nB_RJ zx;i+AZtEg+wX20XFqdey?YIoHAve3u$ zv5WLjvtevXWA5sZa22z^`*@v>==e7nk#PFrLr|) zsh?FhqW$WqAN(ojeO>;O^k$4<6kYwCiG!QWYmJ5DNr5}Lmwd%eKS~RGW#cztM^nXk zPFC^=%}R%Rd|(|leyOF^Ek*r%Vnkmsnhi%qKSA#Qh_eu-%-y<5{jnxsXy_i_bva+$GuvK zP_F}{ZQ^*AKP&l4S`bcohXUQ-N6zVPMQTnIetJRfXR3-RQdA=He4buvEfN5`Ic3en z1yWcHW&Uj9fLr?AQQO!ytqTCLcu6AyRm*Ika`vD&rEG3SQ@}DxSy84bVUGNZ6uotC znTTMda*0EtehJv$xmcezHRd8HfeIXRI}COO4S#9XqO&MBNHbO(m3owPRYAt814h0U z_Pj9gkcfzDNGmBaWL&0=k8=-^kU|QAH>8avwYFblo&G?LW+Z8>R+kqhZm0tK?6^5p zw%J#d{;AZQ&N1uZM(bwaZ8Rmzb^%1`;xeH#cKbmE^1)cc3Jamg(&VZ_6CN48QnoFuBNnH;;lOsU2zY6`3j&{OufR9=fw)|QQ@b+tDe)^K< zGqLO5Al$*=^z$bEuF*7n@t=b&kJX1)xHWIljDMuk=gD%~ktn+FWrP3Vzy8tj?xiU} z{=yA9mJzu1S}sxF_;=ZGC7LR6;;N?hO`=fbeX)#50uHUs-=)*E zN?J|$7dS@#!dR7f+lImh@4yG9Oj)1eQyQAuVy=#Vtwi>UAmr#uUqJ}MXX@*s&LHWU z_n4j9N+29PS99F|hBv-wE}`2E;urO36pMdN;Ekw-oOteVt7m!NgW8HD|7S`3pJv+~ be(}GdU+hj|$nTi^>-7MN%8FD7>HGa3$D$@V literal 0 HcmV?d00001 From ffaa29a3709f40a851f19e061eeb6a5a102573fc Mon Sep 17 00:00:00 2001 From: Benny Shilpa Date: Tue, 17 Nov 2020 11:44:02 +0530 Subject: [PATCH 032/486] Delete quarantine-default.PNG --- .../windows-firewall/quarantine-default.PNG | Bin 186402 -> 0 bytes 1 file changed, 0 insertions(+), 0 deletions(-) delete mode 100644 windows/security/threat-protection/windows-firewall/quarantine-default.PNG diff --git a/windows/security/threat-protection/windows-firewall/quarantine-default.PNG b/windows/security/threat-protection/windows-firewall/quarantine-default.PNG deleted file mode 100644 index 6c1fb5c0070afea312826ceec8c33831143177f4..0000000000000000000000000000000000000000 GIT binary patch literal 0 HcmV?d00001 literal 186402 zcmY(q1yq||vo>6%rA3Mqm*Vcht+=}tr$`9yZY}No-0CCSqA+b(Yt5Qo}tUhN~%A5_5%L*34Dw4w}nw`gYWOx za~E|P@n=1ni|_1afcW-biBY}yc{5W`qh^a9s`!7i_FWo5-Mu=PJ5iMJm-QdcVI7O2NPfV|&7 z?~E`VT%9(!-1!i>A1$YIS&l8= z*M9kvfB=!GsOXEAFC(I(H*PQXBqb$3;NteeGk90-W)Q!Bn{@Z|tlVj}eEat7%1KR4 z?eIv`|J{YdMb;u@(tNu#R?BN+R3kZWcz8@>AvadzF4>Mz)WXI+`|x_BRuZ5$T!muGDH^^5+1OG zSm;pmDm!{4L@Z}PYS-)owkrmn!a9#OGxmjG$UCFQv8n;ljO~Dte~9Lsc(|uO89!=! z{UtPht-s*uk-hMjneC^@&Z99dOW{ZS`^w!DnH#~@(Z6h5oyG{Twvu_=>CcF5rW+Oy zpV=esb^p$OfNdw*B6@p!m+|0Sz|sFF>#N@>Ap5D}{|f#e`8U65lsx;ZnSYf*1Q%|i z0c&VzaQ}~X{@ak4nD~Dhe&y@_qqzUf$J7JZ{5$zdEDHE9=`E3am;43WF6&0K&i5I8 z(KkjrPf=+sJhly)?t0L)quMFkK5Lk1qwe9Y(WI^&e=J-;WRGBk^k%D9qrcMkFoG~@ z!w#nKI2-Uo+qZIZfhKF_z_`oQjePsYH_nWVx>sfR2?II@Y#-_D3|g>GZINq-^LJiN zFEQSf964-Lb!b?~uI{FZj`2>4@C?bEx-~X#u?jg^xeVO4Uy91gGB=IuKFO1-J6YTy zb}au{%1waG`2ShUnn?aaXwOIa@GH}{j>k+&ht9r?o8Y$U#G`}8QqeP#yP!$A`jx$T zQH(@6I8o6LX%q&Y8;@GlDMPDK9=hUr)j*y4yj9HCo(J`*UQ|bPZ8y@Ev}Db(0n+c> z^%=*|elIG9@*YS==(+HlH)1=~n|Ks{eJ2FJ+2Lk*?7Q25-*HxVXact$lM{K7m|nT8=ZKI{)kY|nQX<_~KX;J;|-h@D!LVWl$YWgkn$ zCr-8_B2>CJYnIh8VJ}B{-JLpR;i91&Xrb_p*zwUYrFHhxIi_?et7 ztyfG(MxL3jn{i(M`2{Pp*)RNy^qQ_WM@>uyhATOdlVPE@9sM_w_*P>TXAy=ErfWaH zwux<=I88tN)@f0k?|Zy<-N!T$o%*|X;Q?`X;Xpx#bpPutB8ithFkBYh#4=K!$x4kk z0vK_@UTtNVY``+GH&7l#|;ndK9{BkGbxw#<5-~s5gU*$QS_eA(rCd zDjwmvol~rhARfB-VKSf&Biu5S*Rxq(lxH=Zrk|1WSX+3MFTBrEi`;vg+l1X$vVOsm zk0zgUeVVA>Bm3u~hS)Wc3)xw&NnZ+)$|xLOQJIqC&{-}vvBgE$c}vhWgg?*ejAElh zvZmNJ#Zp!KI%Odxkb(6Dg5!1Rv>A2GZ2u36m#DA>l+rNWB^Y)Hx>sq#bSf-f8*6pv zOLsLkcQrG4UAj!pj7)@JWA=$5ZH>|W(UrqZKkd4(G>XOE&fRPyfL=7Ic`g0WPY=K} ztxm}`)}*m-%$I>0gb$Eosx8md;HuZvZ<&hhshWLLegWsV%-9gOfqGr)3gNGqM}2JV z`QEeByOY!zTT$Qb40WqccAbX~8;2D-$rFY7YTE?BhcGygw?=oLPjmW;9aV}M)R`xI z)wuzt(&aDgP_oX4DZz8{=hppfBSttAT-6VFG8rO*jaGl|6OpSn1#rpZgSx&|hrx9B z!=ZYzNt(`wj+2gqeN(oH?`^zib#(RDzw=idXeJZcyl5thS8O>@ z&JgmHbdlc@*_yTLVhhE*UV}JTb+CNnQo}Gf)b)1Dd@HqWG#gzu1PP_{TsZ#7f}goA zOKA@+X^6%>nX1%vuSc1q5Yc+ne8lcbb9pG%Sd^?}(e@uTYOS1ou>@QC8FYGL=j3Ub ztvoa}g;J&nRg3Lh30<%#bN2{OeSzA>u8pD-H|e>ri$Tj2l}HU2Xc4{p7-OUI)vFEk zl^d37nB5o4&wv+uRUn@6)mQYKJy!E(Y?pe*frH6AIp3t?h413thp=ioS%0hEo2(7h z@#+#`AQx=>3k8?PN6FCMe4iB2@AIJdMeCp`uZ=yg}RMX=TqJHll`*BWmqU8|a)QTX@vES+Uc> z%f47%M^?C6$9Og%6cZqQ;3-xHjni@drSjRWCFc|>cb{Qs(;ZkoAS}jXzEZ^Jw$O0j zO~AtBs~iO!X+7BsGYb8vG zuF4hS>dK#!X(%W=Mwc^X)@_Iy_*iWSazn?O@bi$x6PE0TZE|@EJrzOcIFl;+HcX80f zr-6Dw!`QgARB{oh)YSCYD|bTcDzDPj4itLny=aDwJ&0~H%ryt}`a%^l4LHJ4nxm#X z3NRt-)6u34swXCH#n{CABU@VtPUlT`o-hF@K@rIiau)k7mb`qf-Gw^79?V;3PIcBT^)PDW0jE&O`RO-^E{ILO0dh-hM6LPZiqCAD>V|BR9sB=<^0}_)3U2|0b7pT?0e~ z^jh|3y2W!QBXCw8&#yHX$}U?UN=3>aBG#u0ZH;~IeecpC;$EIKETpR$p;zqB$I;)Kokvd_9`0 zQ1A$_?M%tAQcgHv2(Gg2natZPD0mdlLCepi556PqRkorCJtXn9L{nFpvCO-aDt!oN&Sg- zM}pCP)`oIo0m%%Rx_?7}%k8o96GD2XCygr0dLVPN#NT6y^&`Y%tKf2*dBCpm&Qk?# zdF8ObFw@;~MxqGEN9%F8a~L8QajIkMQha3TAJj4((20et0;9_P5DPx%^$_v6UNEx} zA9E2?))Y>(UrNtipE+O}haTQ*t~ihuoNBloU-xLdkvp>YNS5JjsN1_Hxd`9NcCq-8 z48u&X;NxO-v7Rv@+F+DMpwIC+?fE)4I@At3-O&oBINzQ&DDfkyIYv4J4`%=IwNC<1 zlZq~#MLK+Y>Cy2l$-7%KMtziu~A1Ty78ZRlZKA=86Vy|xE3--pcz>fxBgSky)& zDnXd1Cu1;`AKRt*zS_3ftwm^DI`h0v)DImcJ(FH5H@AB#gJ+&(s|IJ7OhG7eI(t+)oI1`#WEU_O%Igjt(kDr0EA%jm6W_q@Na}JsbEg$RC@@?Ry1}86BmAkrPUM%*R;C$gulf1Z6n|KRAaxO&@(m{YIX1w zjd+)HqM>1=#!U}o=rtw?9<*)%e zWox{-*{<~BxJSs!Gf9SQs7J)C76B>6{=Pw~+KSDD&6&FO#?Ig}iwMrjF5??upz@hk`EE zqpV!?@1NgP2snJO6x!pTi&Mr%BS))OBA;Ijz*q%>s3Umu8*5w_O!Zi8PDWkYZWs5avz@y9j6Z{g1&v1eIN`6zjDMb!8~|0b#;KQ>+O)+2KUgY0 zAHZ^tc93*}?#<{Jt)B?FfjCSt=gjFLzTod6OibPrcNs!$*R}Hx8%Wn~|Opa=01#jN8K}JGm+NCQlh_z70wwQ zhUMo4?a_{gW4X-{a#9wjDHePTcP_Q?tLxyV)laO zsTwEE>sa7~m2ebzf$qcjYM-oUgDCDK^7`ua$SF6NrH))aWM4H4r;MvKrTNb{7p=tWS zSfATpbv=6oOXVC|&f9!BzKEz|rnq>L_K3U?Yfjfm|JeEU2=p&KKgWsK9X``7)>rpx zs0fdYRJV%_Jtx+6)6LSb&F16qSuZ>`i#r?MtJd(omt5377#$pb`Q=Z;(&;nS(#d}e zN$0RA1^DH$s9;12X1n5A^~j0eLCbXMOlFIlWi2;fQhA0CJG9SZgV---?<=J=C&kIB zbnNBG2p!8D$5l7_y$Z91^2K7^u1Khu8HBS)1yj1=KymNj`?Y{dZFvC8FriWY=P0o{ za=wHKyOF8icilopt^&j_Se+jK0Hn1TySAH8)mrR*z=})5!-*7!Ic>0j?E3j=>fUQd z=LNoE4D!+3uF5}?P@XZs?I>U-l;YO+L<7bjpj_{40?#ky79=b3I`jVe{&tGL3dHLjNM zXMFY}KM7pFWfd@LK-_V_jR#%1&;1DZxic;3Od}M}w*HLHYH|umL5th17VS7jJV=nv z)Argtw~@Oa^;BV-Z`)8@fhKzn3|h5JE5(_8f;=S12&ks*ufP@-0WSCXXDAq#rbAHK zK*`U+*=b`HjIVF<)K&Cc$ynDrI97;L^Fc#cic2ow0*E$y`A!^V;p*?DQ>8ymCfp;J zwm`clf%|hskq+i-9IdcX)9|-XzX-6>cxcl4MAvy+N4md@Z4%D5y$c#IN=$N(^iuL+ z&mX|$F%<2)78m7oI@4vP$wuzp`fofrlh~+)toO!^EQP8MsQ#!LX>0yLNPXv{3O|08 zqrIp2@SGF0xA@Jz(|6SDbr^?j1{*4;Vie{Qd=Vw2gw|c#P9!tWsGUHdhS6A9<44Y( z(pM=(#-Wt6{euT8mVl~Jm5VSgM-$ODfs}O}LfM&v+C+&w=yK*Ux0ZKw?jw9(UDk^F_2{50<(yh11(uS-M(Cg$%_^5_$tYR{bC{F}B2; zrAuNSx^F(xX5_1u$6yqM@_VKe-)yVmD zKK0qfI~q!1+>GHCOL zzioNMFpgnrQ60H0ko4rm?9(&)h5u*faB^vK^>Z@^z6eeMNs1gxL=x*XyRSm0AC`ef zA5NPOZX%Pf^v!<02vzMH%0Ao#otQ}t&k*EG{y!ardn43VJpRx~P%zO`y#t45{AV}+gi9+h1-#H@*zDZ<}|;J7;jKvo}9 zFUC-4fm)A<1ishiHxhLLTC`^zCk{r(IAX9cndMFhGg$vMsy#jYz-U2d zh^)|ir^qfQ(_UignIdf#TQgqVf%6=@HQng7Xue*-#ArJ~w37tYDm@~ZmTUY&PP_k7 zGUdy>#QpT?U~+VaNhcX>-sxJ^by)%4s9Ux+<)F3Jg+xqQ@EMaV}=j*3qJT zJ5^=B!J7mbDwHrt0=*Lz1(#uVDxbx_;VZF~kD>tDu|#&>Gf3?zTDnEge-zGX7;l$O z-ZlI3qg_Pgg3o2|;b*n6j^(i~*JZ)W(ph@~i?Ez-`&bJ1uZFjEj6(zU-l}7J%veKm z1~~><&;5L+OgBG{W@MbI6^&__L#ODU}o?g4l8c?%+Ptc7NF+QQZ$#21*%bK+DZ^ef?Q<{6I{zsCKyawDlPTnhxpqbb=VZ)aQt}c9%9%@nTE(JD0Gi%DV zErvKmZEA5)ovbg^V?1^C(j#$tT>7TJsv;wedWMIDy>`NG4Bp1+c;Gl%j7awDJOt;3 zVK?Jt(5_rwVxuQ6u;w7;Vw?IqgnjsYO&K4C9|qYRrY(B4-k%VL=^8+IVnnREs1ddk zzVSg^K2yigS~PxKCDmao_vn%l6&3%XZv~~!#XnfA-`u@P-k`yP!?%oo2NHQ65+h?1 zSDEacV?Zx1V;~k)lW3wJqH^x$V2=5LcoS+@2$hRE&|t2+NC4zBT6Q9^>_CrVr(O=}c7aU41B zBa5Y)GT)LE9ijUV%^_hMi015oj4*J;8tB^S(#I`#ZDfYPqfhaN97FA%!76tskP=te zl>XbuUK=Q>_0`LUTPIeAi&(drtL~HpxeA1CLj$L3!+>Hxi7a(bslRf2BdEhixYls= ztq7mQq_FrJMcBOijI6ZvyOdt`id1RU)&a^kJj0L1o~QSI&XHTYfX7;{se4I!l(9U8 zcK^CR%`plSA{ADr^rR45Qwz`wtZiYN!PfB>1pr%Te^DAvCU`Zu+NJ*MWznY>TpBe9 zMulKud_H!=h)8k*cj|WzZsRFCfH~fC-DHVjVaeA8v7}iSYT6*Aj z2u8!2RHIP%b1wN+0DYlrHJmv3kXRgQYWAgRF05%3VB7E|BJ}|6?);73Oj>Vk4POFV zbm1*ijMa+GOGt0|Fz_Qz>h`RO=>TQjqAks1zrii{o(!xiqY0P1zXi`CU9gji1tk`8 zuY$v$=$g$RW5Zr^_9Z0*%@xOm zj&>k>>x^tk*N1lb!A9ED6c9_S@yCE!l&wtUJp8;UOz2@qwT6sF+MecS{jGJ|q~!kU zAR$((we}nr%*I1Bg!VEA8?H~N`-e{NULaE{UwlR>mypEF;;tBgD<*hZrhD%my{WW2 z#U6k|Yvl1^4X-Yhzr#_e@~qBe^@5%-d(gyY2LOI#4?BaRQVYNw0OuwRf^w}5-~EC* zdOlsSmv|Ex{m!ah;y3|^^x96`JH4kxC;-S~DX3j>%KI^Lr^j9Rt7lIH)eC1Iud~6@ zOjqD7m&`E=@Lfe)zf?pb6R~C{F63z|BU5RZn#ypU8svmAK_XLE=ddReIq7$AbUADy zGJ_R0)13VE_3&iv;;R&tzu74gshOOx$$&*Qto_n;n?%VGEWGJb1stePLO4)(s^YH` z4?ur>J;98h%TLG8EKaSof_h{`M6s?CY`&jtxPPPw-zA$@>6hwaXc6SZJ)c!wz(;uGMbI}#Y<=33=4rLa%mB%U)ALW;gd zpZ5h^Ub$vAhowU{UK})?H6ff+L9Em9R?jh_FPWI_7LvMRb~&vEg#76zlNXlSA}BL| zRuHotF@Ou=oSd!k-w`fy9hDIkhJ!k|Z8BKEKFv}gb8E6~GaAg%kfx3fHYw+N^Xb|5 zl-wFneNswo4SwzomfH&lg`5WyxkzeC`n2-BQ1;rfR-wDaR)7&na3jJWt32zPRz)Wz zR1zD^>O>*HE3%y0PKs7X*a!~kIC&}t;YreCH$-Y_gq=u5K=;Xvqhrr_xDF+0cZR-x z8AHqKs@a*oEh2>3=$QUId1c>^h)vAQzZv$9NHm}!C|U1KlRy(z3yzg=uVq^opzsM( zt?PY-chsqz?>S2QV(4%YKKNo2R3Pb65}tQPRdVahrFXU3t1DL!3^6qA_7UTz^|(&} zW@Jjz`M??^6i^zhyOM0~K*qk$h_CF;Rw6CXSZBbbyb#rLY2%g)M6a7$P{FB#BmHVd zKYQuP8=;eCLNrKnj+qdCr_4uB%kj{GqH!;kT(|Gu znw3Ja7x9k<&E6l6m~@)g@x@gCpkv+jlwA92ES|42_spHQO2WWaMv8ZIkx?L{krdB3 zkh}Szh5C@O6+^z)7|X;x6+D2nKk#@oKpe0n1<;psEBfH)%_7)>yA2`KnQzK{6D8fa zb%&)B5zf16lu&>o4}8Dll%cy^g`*{U*bOKh2s!4e*j)f;e_D7yA;Y> z9KGfOc8J4^Pj%7gjLJ4Ote&L=m$UDRH-PY-*O>ugW~A)v-xequvsRJG8uoag38u9R zA;<88(w5`$og>?ZRG=BH)B+n&_b!mTzKiFP?|ZG&r=Uba*A z10|T4Ud@RSOp%Guw9mz{IHxjoD)?;VZhe?Z+9>=g1@_L;=A=F_sZ2O#W`feTd;8aEvq!0sCH9C#?w?fy%P-S~JQoVQU#-Ivn{b(Ufo>+w ziGiAbX0!9rd27$)(Y_97*LGMrg(@BX)TzXq3K-(H-Qko~!zr>J38(X&dmF0h7t!tK z&VH1XKAL1JX4MUn!@5bXmm)J$Ku}JX=?A@Y36hJ{6@OBBf8rN!AN_7v-o-|Nn&0&O z%Z}@B^5`fWx4_xCT8rXl$D+Ou#L#3h@{Z3Ve{*}AM#`V0S4b3k0{gDZ_D%4B5nE~@ z!xQ(Zc~74KThD$r1|;ONhD-1G2kWGp6H-T4usc-Sco6i|LkOmH$E zZ)kBSPJUkh_WrOwBcX9r-FHRX$V4MmdYXCq$H`npZ)+8_!;W9i|Bfq&trcJ9^C=I{ zRe4v2*YL!XDq7wp(w1}~+?g%a;yzsytE#r|2sxN`+GaDupz|*@ceE9ArEo5M7@R+u9_DE)2 zS3wuxfbsY0*lcr+*i&ZSaiLrG)KGThDDrHA_+u%;jDMAHbKQZ8n=9BxFqG?j$>aJO z(&0+ZlUVeAo85Aa6L{1rmV{)_@ZpBcCVnJvUzPo)HneJEu*?(f9V&kQWsL>D{gtnW zV(wnKgKFiTtar6Y*JF9S{mEv!l*YJR44ud=XBa-K$xdbn^M^IQ;xjhf$BH**jRpe) z6+kbcZt9qa(ek-u;L(Lg=Q4FauxBTn_P*cgauf^?^m?x=)cks7SF2bOipAVcq5yJ! zR~79TSY1&(U{gd;d(JMyyhHg)NL+~K6q_!V#1j5!BbhFRTb6+Wv(?Dw=XSx=@V`xN zA#XI#Hzwj3qKq z_#;F|LP&jU543B1k#tkUba1C=3B7iC6mR}yEcZ#|fitYwy(lH`)k_RXN17oiX=$|h z$GxMbwsV$+kaXxVPDKcgiTc`sqW1#uvoQQv)pS=#g;8S63r zuGJC~am*MC*NCg@<{|3aIODO?1tZ1Xg(UJwWnfpH$+`s}uA_CryrJs8NVfMjEMh+U!+#fAm>%gw*jeZyy6oT zw~_^$*Jm_asnK>~1*h$xRi`(plXe88JM&|)mS6uyO;?-UN!d;z1z769U)p2J%tO_b zLQ&}ReVHSaA6T5y{4i_%Hz|QE3HQayrt&@HCERA@Hhu~A5AX7O3#oRAL}Yk5Z7vPA z*o?=Q$1eU%6bZ6;yh=0?9q%v_)!5ER@YS^>fziObn_+2CZ+v3b;CNf~t&Qn-brnVt z&KGp-0gpmkW7%CTFY%kPGXgm-Iei36xSNzpCj&l4ZL3%gC878}tke0b0Y9D9+P@;X zbz&e&A@0qr`5Su%TU739+=W<2x0zB1tfZ0(?@sMMjF<8QQIUl13VT&$usPto2t*k(mqS! z?nKQTomfWP@6-!>C~3zGdcik_R)$bMwry64qnGiV-=exav@lWdJwwFdKz5ViciLlz za!>tIo?@oZo#nGkoC#l-@wX9)Y=2l^j=NMz-n%QEXR5SB=g#eNk(^x7vYJ1ybWzAW zUl>*9p7Qmhg%^@HkVAtGb_tOf7ucETXr9%tVi=>%^CEHfP?w^W}a*_Dy=oUliguh5me1Kw>&K{j8i z6~?E-eR}JT8%nlPPIR`D;noWRmj&4${1VvLIFA1IDJyjR34bX24nIuTt}Pd?PcwWP zXglX0uS1M&{^py6&8AwKIRQ;t8nPs)Moz4op^B>kL4{~;iG|*ZCXA^NUzG>ikJqNt zx}(MBBTu*$;-Y|G{nw$Um+T&B)im`>fG%N(Mg|a9`~~P zQn?9pvICi!^`oY}TiXubq%=S>9=SHqWTdnrTr)0HLm{exy;Fi;Bmod7k|HySSJ+Z`ekP|Xzxk;zICn)coQ*nn9v!dCkfKS1V^dZjcnG}?p~YpxbR7dCMZ ziCad9-rk=HO_y;euimA1)eqG2i3>a1<0s1N6eNb9T43!;>%h=dm1{dJ-z?&S#-?rX zDEp#+RJIfTtqw9%5emxNMFS4~ma~iCSR*;S=gXP4R!F|_-=)j0@CW0-(8`g`P5E@f z)I6HPXvVVzl0#+Z4olyyM0mR4J0EJ|4~#awB**yUwuVF2=8UiF#LaHo46~rvh}E(d zHM$dh%^aPafJs9LFO5!RrLYT@9)j!UB&fb zdF-^FbJ|7;_qmtCy7>kx#^5KReh<_YBNmxXhP#!ZpSV61Xk#Ai#b2}pcr$w=ODg!9 zg+jzGI$Tq;wuk6$yyrhz`x<7%8kZR-+fp}Uz)F-Q7LyNpmUD5hmT)ep{`|+B{8NvI zg#x@d{r-jWBM+|VJuObKTqwrSxgdptL^WrUWy?&u*etaO_vhcG+G$Zv7d%ZHH`x;I;)hX-_d z0bRqA43%!S1W!+5!}=uEecOD=H=z=6WyGlmy_))fYVjRrr^x#1xCsO29ITYOO712st0^19Z^PdWp>eULYAE98y($x9PY zf-mN%`mOcw@lov6D`_l<(fOx4VLO7vnNam&>TpV%F z8WNljik~Ih?l!SHvD9{*zD@Q=aD06g+V>&x(`M<>@|}e$9?H~gsN|~=CoB$owSwUq zYK07`Q0$G%u*e9LZime^=n}KldI1$G{Irp7Hi4a15{Kx=!FxG}gxg-357@YAn~2X= zToEDE5la=uOtpK~@dQy(Xz}hB=Uk$ls^V1ZvaS#fn{1q-QO7{oW%=UdbL4(@rUDNOPVz9`8S^j!azIR5o!Zma`jB27IQ~DyC*SnPHK{J zwoQA4B+9ZN0=4+bPEEqHD(Mps*Du<_G)igH8e<%4jF-zNm8QH{1-2S1r=W!?gPY8f1a`h3OJvY1PSXdO# zSmM^YP$*DwsI%og3(;G4*i=w*N^sr_&9T)abI;u6OBI-aSD}D{I+sX^`**oDEy^_h(u_lGdE%2upVvu&$a+%2Uw? z`$qG!pCw#mF>0WiK$b+tPs&)`u^JlVMpz}7 zZeON&@y-Y;?2|I2QH`NIjZHOEuh0Wpr;@epGb1 zlPuDywstRMSlXQ5Kb_$izQi5p$mUVRdfFJA+Wo}MJ>tP?MXsenv$5i^q~RVOU>*Qw z)VSF>}9WbmEdoivze)uaJuwH zEIjDWJh(5@w=OG?X&TO;SJ<}-xw%EM)gq~-+G+Wihn#rAlF~QXQm=cx zm@wneX|3Lr_c{!-1TY!P*@lxcl#MbQo8R$D4Lhfn`sUr2#||}j2$ma^PtP5gc{DQ= zh8w0-xMp)^H7=>uht)~Rr#L8L+gJw-v$Pr>B4LPpEA@jkLl3t$i3J)roob}}KyhzM zZ%5Aq{~kdy#5<%VsbI3i8(buEnY1rd*l~DAnox6BU3lX$L)c)#wyl`1>$Uo_G|u~D zvxI4n9YnyR#Cc|K0XE#U`QAgACgz-ChRtE1QJ(6tf!|?$u0rgjqj^+jjOw2@=EqL56L`jOvyr_JR@ z|2+rB-9-W6qMunv!#`qq2KU+F)i`&_*{?fB4IM-(6R=qaisUHEhw*-ZNCCZaO{At%WG$=y9(dhKQ!79B%c^;eCzeUdqt z|8WuIEZ`@z(Li*F0z7!J23%`d2mp7!WPDWOn-u3`FGg`&9qe&&m^R(mA-EqcEi@P9 zK(dAPJ>X4lY%o<=UC@Yb!22ZPww*ey@8V^MChWQxe1}}CwdMl3N-OI z&;0moTF*Po65giQ>NDVd+sO&Mx^=3T7SdWV``y20^v3T>&+VT|uR;t5;mmzo9J ze?b;8v{8bRumxLM4vzT2LD_#n6w--(r1`qSyF*J$8B$SrP}>F0|Lvk$rT}Lt)1|T+ zn%zD8A%7(D|pCOMPH>r{?CMKVrKYtz^ z7G`t!{WRt@9&Gnm?oxgIKggAv@>8}5Ak8}@5;?Kd-WVMGx0X|pb_x;b(-;0%1Ps2} z)U1@1M3;fQ?Er-ic$wRfMq1Sh!z94#x3v z@J6-YFjQ%h@Vrkk=K@BdZ&!{#-6N6z>h{cIV;l!g$a73Alj;z#wVg8nqv783Ss2|O zb2Oj-bQ$3Y0Qz11w)4-_We*3&J@lrz;E6v~5&=#=YAd0nq#`BiA>c~jvhhEE zrN4V)>u4~C8vNG*8-I0+fmkj0plGlG{j%yU%5=5Ef&do|<2s$44_Hz8PnANC^b@vN z@fnix{a7iDjN=|CFXM!6!!ry{kMN_W^AF1imI6?H_?N?E zTDlZm^~5n37Z(S4(MuLPNX~C_dE73D<*&zuBf_Q)<^gO&K9(!KOS1nzTV~LeG?{{J zg(<(==gO9TcX#?ELn3E8dS!fwkF33x#(*NR0n+Q1tJlu1izHjTgg+1MkR_@e%sKeX zk~i8f3H=u3!0M}qa9O=S^0!G$N(79;)N_}$I{4#9)dFJCwDHrQ4BjEilRcFVSNE8ii4u=!x z*~%+ZlRabl_(rs%ev;q80VI4C9;7)qOv*aXcw;L~Y;RbZ`LGAM3&OVps6FA@6~%8& z?^U3FL)x*15tOt&ITyQHX~?b@>zqD5bK5#SHuv*YIGvgqKQmXlUd;#bi#9$NUTn;j8i`D*Hi*EKkKQ!N)i_04 zyYCitEarD1p9-iHgE_Qt8P_>Q-o3@adNaV8KOeSn>-dW6>dv%3f?v0{q%W2WF6Awa zLP)q%2#Mn3Vd4%*WD=BC)p_NR!_sA-RxFV0$!+G=BcWIp~2{6&eoo{fPF?Bp^ zbNOb(pou`%TwMrNPG(-Xl1t0^WB$doT}21wPCmBOa%4adE7E0?WP2Sk482}{Agr7GwCmYn28)A7pehYRj5@Lf|y7Cf<>W7?&uvW|l*&f_+9TB5#3?~yy z94>F91P~ite~`!!4lX3IkXZr(?n*vRiFd7MvtJIEc}}FLUD51Qo~SavZo(^$0ZwEydl5)8&UrkNS-Q-fS!iwjFep<7FbRWyMj>k1n|&iwZ$sD^?fdmvMxfiSu>UYNt{nZjGtj&rNqIgA026iOCe{taPY?dZnw(g$E(`TW(5!eC zjM3vU8~3bM?#;Jsf7ljhrY3-YIamDe`3Ky|ACLf2rke4OzxeoG<7U9$Ri89e*ankQ zdR%!=2`1xjx}k+XL}IA{K}qs!!84<*O<0CzS$ZM+0Z&cnFiMyu_+?Yga@1DbBmIjx zc_Dm$K>kMr@i5mkuTQ(<*a4%ycYT5Gs<$F~@T&{0NxaKAo1sLuXkftX^Zo}7tEbhg zXrY@YdhnDa;LV|h-ps?^a|NW0MMNBQ9tFJ>80GJykSUTDM>;ep32vaG8Bf4dO6|cJbY;%j)Km(-&$JTt5PMg+y zLR4XeorAGPcA$G_JKERg5nJ~XnM}kI8c%6N*k4lu@W=FjhZcz(4|RG%1+;sdTDk0CoWpV^2S9H#uB25^m^frR%l)oie}`3`V>84 zV7!u=AKD+i=pJvAu3RBaB^@$Et8I+z-ok2>g0*mQ-VnvhgsLB&pqytqe^ZzbM_(Q< zOh9m&%-UamdHN2@4gmK=u&VF#M9ZNDvzAKKtDp;A`dcj?$xhh(8*2oM{)J}}aD@1{ zoDXuul8cT(sbu(&q@Q!ak{$I$>$TF3$Z1q%QXDmp^S3f8#v78kSeBu$HDuYlRw;Um z0%ckSpfu9hzGJDNas`o6xKuIKI|LVm?_dl`KcJk2Obfu)PJL}-PSBP5GD0anNmp-W zQ;~9P`<0~%$>wphO=c&aY+BBSl>&a0I+RY9a9cP>&ol?xYPAy(Ypm~WmY6wmH8NC5I&76_7b>~VMzoN)5;O=Rp<4{x_@+5gAe zSBABySoN=*HsF|-9sQP?(PB7;-2D8aCdiZ);@cmbML?V z<39KI%#%6ueVKEc6o?0t#CojqR)+2RZf!?}wiSNlJlTG)d7v4E zpgh3$dWmD-{RwO)5>g%JM%x2`dffJ3!luM^eI~zzaK6>n6XyI3n^~yfr-PS#>W6~I zip5Fi8XV-4`eCyu4shn=71q$x%Wf8pt=^w|>F_)LliptSY6;oE`+7k(UymG1SWmL= zsW>0Xs-lqYv9drji_?R_IkF+<8!D6g#dq?TfJ zF*kl8^YSMqJw)q2i1NPe<_rXWlA1q?+_a#!8^NS#P>MGE`YU1=%j{DwngY@nte(oB<5XtpJ=&vS;Pds(h;;{h z`L9xEb9$$VnAuwpkepVJ&8xLU|9_r%b=HqB8vUX+ z?T6CYs6Ul!l{LmAh;AOe#`F)BD#u!!2Go6YMea1f`bf*dM(=jw38str5^Q(8_WnU007zhON=x!@I`Hp8Uofq)6?Hp7#KlJ7Z(9w0b9U0k)Jvv%cTK9XcF4(jj%`hQjc zWsUv6WHbKn@-6;fp5%!Kg`YF4=MVmyQh9+0lH_Lj4M|RxFfsX&i3&Xl4i5hB6+lmX zinMN+wU>~Ttajf~+Z@j94Sx0Je-5WUfvsa>W36sZH_rE_<2(=MMhg^4|7#0T3-omz z&J5Nr)A`&ROAZk6j-blPdcoNw|7YdCw!KYV#cl|%k@vmP}1{_^nYBl z=gT>W%l3_h8MS(i_5C%*&6z8~^FxUC^9YD`@2^t)k`<|P*7nm;U z!&RHc20GX|+c$0vO)7L;PP6FEk(d`beF9bKkavaMt=0xn^j1jYlWhI6)gu0!gt2B) zu|J0xEoW#>weDryK~>91E?*^X$Si;VCVlzJcy;b8d6{li*7yp&nIx9Zlck@;r_s6-8(Pwm#*Y~b_07<+X_? zg+Dgl`-#yip9C4KOP)MECxYz>r4)}_0o4aYaNkMSg&V+lo+X{oGiW<*Y**VYB+uN1 z5&O|~4fB%OtfFVuRr`I&ySJkgxqJ<}EHgPh_Ziah`@WZOl1@7uBrP1SXq9^&`ib3f ze)#7>VbiW-XHd|)>p0cNSUTR-*I~r6Fe6Mloz;gCPeNmzN68>0G0#WEc6-x-z;b`6$Q9LhvVtGf+XXTHaj8T;)S|3&MMDPyE(bnXo3yz*lbWf+1ZPW-y7}q-Zy=L_U-tO`T9so=5+gG z@KI0nkAj~c$YJc34)*k(gYclQHTj>fo8Oi>*#EelP%nd}O0{${n=vF1OndgEGRxP; zWdd(~U%N;FJwbvy(|oR;R^(W3r>gG$JfHG%lG$n8<2p=?_|SYU)Rpa*a&b4~Qh@%> z-$PIl3p(n!&hFU-TE0&^yPk9Bb8I07(SQBqW zu%h{EXTRP+tNl16=Q=sEEHaoXYHrberRWJU~#BAPYfu?UxZQ zgWK2ZY20?4X(^l;Tpz9{7U!8!>~Lv8>O_d^ecYPA^R~9 zk2Ih|R?e*nGo$a)u(K!RXQGU${Ap+k*)TzlCg@bbRTIP!j&VGWnv|{5o>vEVhQ_LqbT1-AgpK zpX0TXHb@5nQWQ4|u~+WIbp?mh)%!G0nn~?r{iPiVnZb7s<;XFP;PW}E$I~z%K=pGY zG>B=lbcdE!kS8}Lxa!k6&a~a{DBjE3kHKN?pCUFteQ5=a@2)s)b2;L`BqZ+nB;A<9 zbpHI{y;v<Wr-fP$zDS|L~=QIy@SfXdg{OFZ_i)FQ!`VmJ*!@;`_~3Ep(U1ms>oyVFys=tf zLaHl2fNWbod|K`*=OS31B!Yp-k#NzNT`JS_jqVwaB&4pGMFs84+0MP0?(MK($M2Ui z9$k^27JJe;jPvDYr`(Y#3f2;2vL#3N(-PnChN;)bJwG;hzXB&8c9y-HhO&UWk&mFl z(S_r;iv^UXL1wpxClwO4@AE8fU*LTq0sdV7!KP*m|dVJ9C0Wp-AI>p*Z8QCa5 zTC<{&YBLH61${DAnCpsHX8BXU_I#?_qUphbvl}0uYAenepg}quG?2*h&vUuf`;){O z*VveWYmOovo#w{-zL*F6^$xx0ucQIZ+bYQJL^4=#1tLg({?KkFv8;V?ZcJUKdXcCi z`=Uxfd&4R|+qM@xu4MOmq^XpaVpse(w3pNV<`t_&BIHAkv%2|ruiJ<(^|vPv%Sl~5 z@9E+!Dk`AACiE<~tJsp?BshvM>bE32sM>v1A9t43Wn#*ya&pM9;AcC0Q+%2v`*3eB zPv@swTB03{G?)`sn_&ZcF)-qqdRCGv4GzgA)?4Q3ND7BL*LzQy!D^<>U}-PBrz8uD zFP08Ha$G+r3L6w-z$s$HZ2Rj>0E~Iz`8%jLIKT7U z#E{DX+x+-JHO1(C4Bl|3E^=Gz&t0Yl0Vf~J>W`Ty zkPDGt^>cjQv$+!IU)|S2oCi3I6KHRub4L8AX@$y6;KL!DfrKK)OiJ^Ya@-)3BwjrH z{CYS09c-I84JH;y`VYyv)X&BUU68;IHeu~dT_)90pyZ(7xN!Stf7{{H7+|53h5BAs zz5(5?f|QL{;ehtsbiP`CQbH=Vr9jO+Rr`Qvsy*}4zGqnYN*TvQYPMX-^@&nKB5HBD zDncge6@oUUWG-s4snqAXR&MG)-AqvvDmCYJ;2kKH3MmtQ(>Lo;n`X9@M%LS;99qkij;2{MDRXmICun%=| zvny_cLc*Ks&wX=g%k>#Yv9zw*UfQZ(RC({3YS~>b8e2KApJZyTBE}03_tSW})Ok6V z7snh&TkrXDbl-+|aa@JthiT5OdQI2J-^qq=3Dd)lUS%DS0@_)d+}+lBImbR&*zHEC?(W=ztM^ohU4vtBqlj6rEB^{1LA)|>?B?JDPJ z?epflJ7TAVEgfIUne21EaihGtNOR8$)@mJtXZyg2+he66V2U%Z(KVx zz;U=n`=8FK0>!&g$k`5H*W$12}usm-53yQQK{;*v19bMMdOdkN`)(4gyZ z`}5~Y#hPA@xIr+hy}Js?j%v`IAGQTIvB?LDRA~TQ?r$@(7ipOn0|&ob;7)nEVPLk) zTdSAwh!-BN<`}$HT$g!|f?_nN#tg~kh%Ec)VqDnQ_oirV-xGKsz{)pjwxWFC<*>b=0g zW0iukjQ&;!p!J!Gsjrd>aF|+e-7L|zWvHDFn8EBp!fW<2w@1OGGt~Oa5H+0Izo{kw z54}Qam9lgSi#|Siz4Ir)j^A}(Fp%25ygy=QjlE{;m@d``yAwjtHCd0JArcre!xMrz zzE!nR64CdvnFI#9JtP_~Psc^0&ws}Sl<+Sccr_h9dDuI9p+D1hNs@+_SXE#Ta$k8} zS27c3v$QqKTk&erC@`+$Rbato(M|N+uA)jEqXceFf+$Rv%k`zXG?sbQv>8!(8)IN{ zR5tMMH~LpKDCL`{y*{-=OGLmlhs(;CswZNptN$I%N$f}eI7+LdvU&qS*tZNI1MES_ zbcAclIF^Q&Q&%F-a5piW?T}R;q-fT${5jgVDSm?iQR{ST8=KX-VnpeuKe0|Q9J(WV z#)#ha#IDWSa4r(q*4^5c0UsQFW;qLIYDnOwm(P|i?O^dta zrz0rm4|Js!&mRV{&JQJoD*&)`B^g6-omXB86;_x%jdUwyH+?4*id!Rh3l$lkc6nUI zygV`*ETb}telL`um=+WA(qQdq`AQ*9MQP|HiXrV~FKaJG3cJBeb0?IW1$ZrW+a z5m{FKGn~<+g3(N+p4HQQx@NNecFI({bE4QBq(glPxg?zK{GDls76Z?GSVa%~CpB=q3?%BRuo6w`_+5NyPvV_u}maQLd5O z17MqWI&ea}E!Cp$H}y;+PV*vSnl9zed?S{)TUQa)mpS2|2|Guy&^f1Z+)QGLbERX< zil$AhDussn`%q0&@EzmmfJ2qvkdwGi|f9V z4$s)7=no?)%sHADgDm^Tf>Hh7T1oiqsH2oQ^3V42cP1?6oUFjZD199u4oU99CAr!a zwudY0nynVVKF=47p%OL8d|=w;g!rPRc-di>P6qVlW{E?06GzK0_9R4ZEu4th%zXSl zAmF^;wPO#+e@dox0^nzO#Z>Gopl(gCzLm5-;~31E6OtU_iEu4v)r+Ol1G#Iny0 zL?~toxI356Lp#66op;Iph{Wf4*BJFTHr4jM7Lkl@t~7R9AS_r@s1=j=S=mef$a$o6 z7gD_T{-FDwZGP6{5F=BXJEsG9q;j6gJV6Re#uN$&=e=ERGe?JM@2?p|$8=es17cO4 zk2qScI5UZlOfx@jmCg4u0cK{put9PkMWwN;y)Fg4kWfyV(j$c7$aj{LuI9TyY%yC@ z<_NUwDb+ewPiZ=>JwG6qsP1qck`pI3@}?O}_@eVK!Ai{TRBGy9%)}vsQR#~XWR#+( zv>a{M&*Mnt)SKsDd(LDXatZHAv+0o2C*oCBZBILG^VzerOi2*%lUw&84 zprdXBya`?nUm?-|j$L52^vpg+nL1u;=5g|w*%VMthYHHqLKNy#5(d{`|Nw)0N+N2dL-uQbx&@mFk=y_+>BfYL90 z@YlxK4Y;J>AkAJcE~MOQE_7ATnJ3cn5ntaJE^{*bahkVQmVmH$iMuA0MUN9C*QPY6 zgNw;jz_`DKu2wjxfcq^>_S{hM$P971BJbmUo)Cr#QBs|Ag<2ekJlaeD{pC%k=Y^KA~&he(*uG#>0JuLbp*H2j>EN~F~$hpL$}b5$$cGYBq0QxFrF+I$=8>^a#&pU9 zRC}W^LR3QbNeejiINwU5FTjU@A5$a5XfCdc1iSAjKNy85mK?mcyVcI~H+q2(zGGDu zeZ)Xs>Gjvx;UNyM2QC}M9=8g{SATwS-x-hT87@`b{%Ih5Wx;M#&KZLV%cWC{*5|%* zj@k?@i%I$%$rK%8F1~Xa@Yx6`Ol2uNJgzof304A)eSRZ#1$K$Z?~2;b9)o;8+FHHY z%63DNo+x(WDm2^E%r>RAJEi71u;8v%bA}iK6bt!`HuE{=R02jd0cBF}g4_uf2Z&b7 zrSlLXSAvN33b|fF27xu#6`7`;!?cSx?T9yc`j!5tRQYYUswX>6Hq&NkEQff*L;!2r zZb?_2)x0mC2^o}+7fLzIuN}$GF7J{Ocbm+8!gbNm`ukNSUfF}B+Jck)52z>x&+_Jx zlZ6lv9Lvn`WUINkf=vvbkd{Uf7|8(j4o@@kjde9*m_01dmcx@MLSTVqS{qA^G;h@f zvc1o7v+>1*wQZh@H}=Yab(larB1Rl?>h-B@;vU&Pn}BT3URj~{>=?gjUCgR8KN=f% zmMo<(9?t+12uyo zZWA2by}FC_8RrjiJFHt%S7L#P@hjwYc$^>kmVr!;K^SeS+qK$1bspAZm_)6?pPbaO zyNg0^c4ghji=|j)f5v`&JyrT3p4VE&v^82v=f$veoqKJ)r`_(>cf^=I7F^g^CLI$I z69xqPqSYnPDNS9XOnmb%STI3hWv|Lng%&d^CQr63c^u2xO*@Eab%dp2J7}ocyF*#Q z^8Wa+btaHl6*H$S+4^u1jK-mfqNeD;i0ZcaI0C-b0rBB!*YyGn$s-?D2V+2I5_yIT zTcY=KepnHkB86Wfm^%IP709HuDmW%fbVIe1cp}|BIf>~c#4!ES9fPZSd9M_ap{HpS zOzJ%1w}wwS?c{v9$=)z&S49zmg^ifYKaSC&*;%sE{ue@0Y-_OxNK(a-G0~;+yddr8 zW_-8zu+cZD{Uw~=Gfmz8M{jOXJ-P%PCL zfQ^^sm;NX&2`1PZ-dDk;mg6RV%&-#k;S{6J2)X9Lx-G&|WX3U9`uiIR?wk!XqG8zj z(bT-hxc*%tv1oRzy8JN`$4V*mZ)a7X(1lQ z8rNN0$!Xh)57t}lsxw=x1)ZLPY|W3tQ>oR3-y-NkSV;Z;+$TsEiEd)eKj-2!T<6+~K+6W|&ak;nY6P(1@OHx0mniXR!R0ylgbSPvk-kp0+Bl z=AkbJ1lF@s{r!jZ%=*m2r6p!=I1tzPb0Nd{`OnH7eoqE{8udI@+<@xR?K>kT@Dxe+ z{U?T#2&t1{S*<$O&*hEnIkPRa6=9h&Q96j0&u_1HBVJ<(ykp|pMrqo(3&1N(uP+u6 z4e}8dMWiH%xWdWKW}o#G--!(0;6MD7Icbw?Ytxi#qpRgMG%xzE(=i}0A@#LV=2k;1 zF2C`8TABOO*)>#Q$2T5y8-nxp=*+d=hwOFSZ8@ zF=2vwo^A3ue#%vz`#34xHJ(i|vCkQum>ak9u^XQhU(r4|&x7Mt-_Fse=P8SEjIcd5 z(5Y$!dQgsX$u;}uNvk(AtO1u(AMzK~c)0BmB4=2$=DX~nv7~?6Nb-y z4ptwnyhx_(@_W+9?b{RNZIqU5*PXx=lgMQqq(DQXZ!9z;BRZ4WB*0l-=61pWj!CiD#LdLp(+Pb)Aq$vP=!$UIj^*!(5o=52y?bAN2?tKx@24vm3RuV5@G zv$Ytma8)=Kd#>NoDz}qxhU9PNC48CT1wn?O*w+~cQN^Mc@F89SJcKaxrmq1O$P6(+ixeSb3?7ndj&Q8cBH`$aUZ(Mrtq@2 zy6&@+dG3EL2T+?SO3wguN%KW*2VWn(G@IZO4ddgxI?wOuMETKrhYy?8tDIUrXy93Lp%3Gf({E1hgP#)w``Kk#fr+P z+)HX{JtS7BH`ZK^3EXS*ti~`P3p6Sn_Oa50CsT7AuLq29eEkZ1T$0{Tco$<0gB(mw zc0J1U>mh7@u`cXGA(}6z)@!K2QAj#)5Lr)$HM-|CwiFSgbS4;IH{pZi3>)?CG-vr| zOkB&jghmt9c2>3ML`u;?QYhhOLW2+{@1col3ba_Wis>7NjPR^_SCiX5*=z)wvbIT+ zKDV*S^sj;m?-qg>zE^8@YH#E#ooy6@1^@$poX!+07@(Wit47KGaJr}w3EZ8_N{-*s z=&Cm-l{TW@!1*8=@CyunF;$6$asT68SnF9gv41N3-3|01qv!0ZT4+Eal4bXDs8Da5 zHF&@@!S@xbnRnQ(zt%B+`|WB#Hqie|mMS`bB3P!ZGJHEMa?GvA1v|4l)}2nNk#qf9 zO;D zZWSgFk@RB8UC-f|F&>RC@IA$uc76q&C49q4aKFg5Jd@DZ-&0m_j9 z>ggSlXGvG1{siw%fGgnh{6TYT<3pekiwZQ`??BhiQ8HR@Qg8wCc*(H5Kmf=KU(C`D zUnEM2BryN0^gUeu&hZ6_-((~cm7Rb>*oHmPXJRi$0zyi5@p;pEe(DTRo?ySTL`}1s zsvuvvG(4AA;cL{6?l#DF>izJTH?dNEsv#RoqPMG{h#mN@O*&pp>Leg73yI$L_JZtNXpiVA!QY`hCA@X85U0ZCE3*(h*z{rakpVEmcIQ@JRFuXIZk)SH27)!qx-<3wzh@eCtUe%Qf1 z_TROw)Rolt++{FRS4c)I4V?o`+Xb^5j8k)#_34TxS~xFuCv%M!ZzpzyVpirIn?T@l zUEpv(5pF<%MAOG;DMN;1!-tgx1A~a?M(8@eqiCjn8|#Kpr&}kGe-yLA9x~!mC`slc zGogERoq#qM<>5~Yq6d; zYY(%cXFh4P18+@NDksIwe`HZ(H=E@Xv9w6EB34apkBUGd#krrjlV2rhRlDJfi!sSZ z*_!LH_OgiK*Ti$y2X3qh8=uNYeV?$=f%K~%(l4aA*lQ>-t=%BQh@nwkR7pAO zsl%3^d1uEUaQv6P9^X%+i}%Tn8gYU=r7HXNU+S_Opx+vFs4Ir@HpD}BcyIplll)L9 zkSqDa(Zb~M$XXZlTs}8mhdU7&b$K(A6C0YaG z(S@Y%%E_RK9sY{UWWCd&_|p2{55(Ck=^+-ra@_rwY*>LXR`Sddi~4ZCDBWQzN=wy6 zLGHUI0Dgr~1XrZB=iPFHHHCgFHCqr#SE5dySgF1lqT0hm2;8ocumXw+p}%np7$uR? zsOV}OE41Y;R&0JQ$@pYWN-yiz)eA90o_{^Jn~J`C(Yn1D^zn_S(Yl&N$$2B>aYSz% zQcC+R6@qVCboi9SUqe>|-y3v4SW5ZIupeRh^8oKf}fN)+L;AV5{Kuq zM5Oy8I`#lRz{%2;yYq0T$?p&+M$J3iw)E=kETh6{ zQ*i{jS6vVLeEq*Baar0EfA52k<0YpgM3R0IXMcNj9a`1uFr3&V{H_&J+AZd{>3>NH zEXV``jyrMuZ@=IMIxL2_Tue4=n6*t?+*XQwKFv3s2!hdFWR|su!6(P%rpE3R>%R-{ z^~ig%S`BjtjjEz~xKgxpW+)lg=h$}pkR{dnBwmjsJp1h@T~+d+KA}&9;Hfq}2kT7#RH&8w9EvSz}`E1|LN!7)aRhxQZSag6A#oz>^ zU07d##;0F$ewU$ck|FZ=D2*DgGao+PiwaeW17*}DfF~Io0l6%EISaiHx@*Z%P4kIm zY>Ntdn??oq8lgQ%cQap;_bAlX9A>>V3V-|7sBHDp>u*&<{(z=dH*Q4@NLlmmlo@<7 z{js#wSAI2{YP6%PNcTdqpTs??9LlD8I7?j(NZst8T_AXO8o%G(roYEp?yK4v*F9Wo zIc_h#?$qPI%r4!xYQr)|K`WLLnTZr$;U|)GaXYXX^BCMw;crCEk$(bqaj{E0#)>%| zM}?OiN6BhKR^SsGz0ccp=*&L+rotX@UWM5SCNZ}u%zIE7RNXrJ>v_FjXX^c9K5775 zA{w6M`*@gE4P~Lb!?n)0nY4aCn2$vVHY77~JecFY&7({5&yqkrvE%*~V0mup8Sbl8 zi#N5UQgN&>MJr-@2TbmiolFd{Z|K5P|_Q(YH;TA(Us zSn!T9J&p(`qFR3bepG&zFex-82!Uw zeRveiX$~?o{xW{6TtmP?6{?sh{qasp>*t&s8ih{@ z>!KIB8=b5O9$N?oJj30e9Y-0^o@X&mM>eF;$@u)tm}pr4+j0N-+E8%n#K;A~+s!a% zJlq6!}?wbtzg9bROX~1JjZiTiQv6|aF+JkLR_hu(`;?a(GanroBMlGw3Phg zz9`74@@Xr@9S+{GZNV%Jcw==xuq;j2-y@okOcDn#RF=CVd_k;>Hr;3r0^8@CXlmBhKwA1j>H?zzE%mk0PSoO*qDw$(FwO7+5c0@|6U z?ul!%qEi{0+rx5UJ?ikHP_`qzjjRC0!1PyRuDsd4AL`Vw5zYdLQi~p(QxrHDgU|Hzw8Z7POK8K18$0wKIq= zXKs3x+cXp=y!TB!&VTEpx0-k5s|=Aiq+E_jTA4pG$fj~wk&&lePsCb=a~?Z{g(?V8 z<+7!9E;_MU!Rm5RWwJ-gbzr)ndfO~9m6ecxxF}b0P25EObabw_e4WItg-FLKl5m)^ z(X6I2g?9ScruJj>SY_a#vTJ*!T%AmGaUjbJS=?V*Cs(^Yl;Loehgf*69?5W7nxOy&(>;A^PK#fpEw3CEk$hlEU1tRcr^QM>TD&E_zvRh^cy95G~lrmF}P1 zs8;J!YXI5-#_|`nT|PV%U;P#hG%TME{5B@Mt$eiOtRgU$_ zdd?HKv=)_;)8gCQ<27;H`XcF@0j-|71VOB+MV3?lUEkh10t&r%+S;ghbtn>EYxPrf zyNvmJR!3bOLw`P%LTtVB*hnn(P6ChSLd~nOH#FPS=hX{kf+D5a(ZcEip>>j|@GSGP z!-aTToTomMt8rj#ZH*0EiHK%`XD4N9UG1a(Pf!8g0amlz;5NE_?9q znKC>*t|MjeR6b2BncM$U>8Rff-L&jQ5kJ&&xcH)btMzOZ1w#+f*Mn+F>d}sz#o9+` zJ&OUZTa&o%EVlxbaDAvKs9d5L$|jyxRkEi{(04}8#*6MI%Bg<-3$ud5_VZU|(ba=1 zBm?ry_;fOjoWzd?Y*HNM+p5uEt%QHWSy~bvt8L3U*84dGgB20FNK*w_JyJ#bE0+gn zrQ=cO2v`C;McF@-qa?%E!<5 z4qeD1E8e!|rpZBahO9J$)g}@A!XqW6E2aUv8`0$m;-%HSQ{;&ql3k*iu*S5yUP1Ox`IsV?0vzgT)K#+DRiRmg&p0(T<;YbTiJb}Er+ z$UcUEiocvTZoU?bd)D->JBw`|HoyZU_m$tRToJ)jnIuPF)A?KtPt&$T*XL9BbeuIp z8ZmS>jxGm~idMB>lmxVL#eQeDj6K4fytif>eV!h0yssv|+|SuCMJaVB6rlwY(O{a& zXH0JpM{WeB;N%^_Q?3XDQKDv_X$!c^E5mGNi6p5r2}XK+7svPCm|GE`P*N4Y{b$e1 zsJHn%3uF@z-Xh9Ir$NWrmZ*$yLBM`=r4IUawMV_pTA0--(C_BOLap{;ZyY1xp zsrs!VkmhB!+E81RzdinqE4k~{Ln#Ewt#cdrtfiu9gw9`}u?an8!{CocE(a)a>~OdD zAAvCR?5{|x<{wcqn9VJ5DQyKc2L?qLv>r4HtgHK}+ zwhi2R$+w2L7`IuYlSQ&--rQU-maFY(Hk%>TQ533->a0w-;957Ot7P-J7E<9AWULf;5VKotB*&0NG{Dl} zd3mo~J&vTbupqq@K{VA&pA8nPmG0aA92_wwVN_{E;2#B)x%SFp1g;vVapGlO*|y$# z7TDy{pOeg{ak3PuFia!P$>B-gF3-y{mkG3R%M&EfC`=WPnCw*%_dJ3N$~{fwl&h5b zWIcIq_9x(xmW#rs^s?;lxI^8c4RzjfSQXEGPeYgH7itX5J=TT3n4KvUE|XCNN(y9|w?Mo@MiBFn4%zwe$hMx>&12x!klf-s(_v za>9;ctp{PY*K$FI#nbErHso%{c}vRoQ*-aK&bmHb5%ev5#C=o8c=yChBOc>av{pyV zN!YyivcM*3v(9loVpdwbsiF%mQV3Tb_{E`Urm{#!|Cq^_7^wJO_R+y+$^T_k+zsw> z@^5RcM|QJgk)~jQ;Y{Cs`?2`1K)xE_Cp7PZH};gG-|9=_+(sevTd~&cLwo(pk86PT zU9JRAQoz)k{R|pQZaaF*x*U(eO>VNb)NY1cnY6%+LwH6pjqhlkskq?z&fs=Hn67{| z{rnVaxTRL6uhnFCuO~nu{Yz7m%m^j3lHl7PsF2K4RCXD7d1zN(S7t%~pr0Rj&o69> z(V5AcUkvHgYec=Tvf2$Ihmv(XlyI zd9T-*mp*G*$&ri9t5dEShHG?}MC8lvsLVp*Sx&iCi*D2Ed3=W0eSQE8ERM^&bH{b; zg|_PD&SXx@J0B^gU&3`4os00L#7mr5X1=6&G(up*6}ve-I#R>Az}zbYto`of76^P^L_9Vg;Aqi~!@*%jFX6=W|^qX~G*juYJ+ zWNIKB8b}-(R1c?FO2Pat6a&@LcnMYCngi@Ny_byF)AEo;r9J+uwo~CQ<@?0+GbdXB zyb^dDtf{np*r<~+ITnK@TWX}R$~2xANTj69z(zwTed)E^O(%eK&2Lah17&>C0(epP z&Zgy+k(70QXc`VBd&l{Dl}8Q!HX za=c9P4WIFx7MF=YX?8j?Uj3BYYsv(L0QeZ_MT}>K7vm5rFc5KismI0 z6i+35&zDXcOSEJ8Wrr_gBnJldjP{lwq9IP!JzL7$xrpF3gS3h4-f|!3t)GE`+CKbw z(PWQpp?B3b*)#I;9^OmLj0fBA(tJypo)GT_xil$C-o|7%;R*@g8Lm3wIvi$boumx< z3~D=)*7zqKaMfEDLc7qI>d~*z ze30Eu1gBn1Jl_!$Fp^`;9CS$YO)?s(5%%<3(n(8YuZGfm7|T+NE8{a*S~)@`GMxm5 zr8!$(WX#``^1DP7Iyz;r@5~?S_Sz#Y>VIA@juYnN$dWO;Jk4`iz%EjSs|VRrw`Q`a zw!|jq)!eS{uu(V-kS)IcB(Sz_w4(_yD^!2oZxcGtmuS?c(iJdnGIf=$IQKi1oVXE* z;oW<)9y_DHvB06^2vxTCf|slLXp7(*ldlEpZ?xUB1$?^HSC`oKYxjV@VVwEu->qk0v+SZ$BL5H>M z1;n0K(%q6xACm_9r2MUG%?K$Uq;4nW$@uE8XC@YB1 zAD_P@YccJZyKb_Vmw(~h)NH9)QAC7r&y)MyZ_QK*yL;;7I*fT$ zOZUugfNFD+awJ`;lt25hi}8*XF6+lYZzmXXv^8^n+nU8eiAWtzRFiojc$9ut30B_!3FUu&__f+$j@oD0kP}{=;SvrN~q2*@k852GG~I@Ar!>6Jo6IKj zuHxR2=8is749)buhciH^IwlK$qb5OO2dScXG8F zc1^`b*_%{=oMYKGQk4GKWoBk^#rExFvhky_2g-(X|GsmMI=-PsaoXgeIW7On@$}d8 z#8`|Z&fDv=QMiEb5zD4&0nqeX1=j+vPL&|a zD)FJgqEOW?)&ZWOI7~D=574X=F)ST2aVq%7t5Y zepxzOSbQmw^k=_`j1dUQ3db^FS*)iuQ^nWJQ@)iS=#2_ts-GX|qkL zP~So8=9zh!pDYT`x+3yaeRS+~+eaGy%ac8fj6hf7)>r2Wp9Mw|eq%m6XeuQG7=O(c z|32nyldiAQELn>u-b0&+hsXIohL)Z_{)1;XLm!g1zCaU``eHggMQV(m&UXw0Q&uXP z9@p9{d{eS4X80F9^%P?-Z85iiJ#YU>1ZMUcVT4-jsK_2uP!cU-Kfp}9wdQk(pR7BDDxf|2?LdmZj*O6^W7f=Q zd^o5GyH}Kv!K1XC)*OiUY^r^`o=%&>D?kqG4+twqEPjJF{r7u^}WS<$UzhDaRezFeD`bMjNy-ssgO-lrrhcWLAOG;vh!E_MC{+Zay!;- z@CXd8JQEwl_sL$piIYD&jPHDz5$kNC!WPI&;@x$O;gj7bet6_JZa>MHn9IwRXX4RH ze`IC+JWmIY%JXe!Y2aX?PxksOvC(pOno<5?SuI)kJK%UucdroOE&v)Uc z`!~X8L$w69oL{S@74sI~t1zN0F152^uWHRHfhBbyg&3=7(rJjckxxb;)IajMM;nPR z_w!5_e0(|o4v<;x@8frf)=Q#L^nKIP#%my3bRLVk&Fzj*>)km}_~Kl>^})upWuMD! zoE-1jOG6_iB+lN)A2-U$OqxjudB18N9|rNDcQC)VCSy6z?ioGdw3exqt)Y_)FPcS* zxuNZM@8d)sU)~Jz6dV*-<09zCfd7lKw+d@(Yuj*F4QVM9XmNL^xI=M*yGwC`yGtn) z2<|S$i%W1zf#3v+J3&KnciUO(+y6e_@7X-aHIvLS$9VO*DQ*Ty5Yv9q9W`B0u!?Y> z2Cc!_`FAjX&-YY|tc)j1z&Z}s-x*It^jBYKzzaiOkls~1d_Lzm z$?2$8=;VyEdF5T0M+pF&H%NVWbGCoWAmUD+AJ)cZDMfv_SlS8S-KItOUbNWQco-IbYR;R-4|U(^^np&{4V zlaJ~uBowO^K!P>59#z^nY**g*Y(aiBb=9|90zF z?LteJw3SX#ZBIJ#K$w({EVBf(@oZIG>(`ykGh!ZQ!RBp?8It!My6pad5L{QayX6tp z@wW}1{beddi5IK@-2`<>GcjF7ckHmT1z!wm6t95_BbVXizfz?f^eq-jGz$%pT|V%w zk>(NAf&u;x6s)iAkK;E*sv?mM@L-k9_l44-;H3d16-D4c_DX<{qu_VA|M?`}$0Nbi z?vU`$O)ivggN$-ih-=mhE^$!tJWIFf^UfB|O-}6M5~5cEUzwP{Hl;7&Dx9=Vu9(cy zUXkIl{lewT!>Tl~VXQb$^5xgrwO$-jM6e8<$B)fy_InkTA#ygj%HRJ{A0Y2ZKV-J<^@AQF09Az&dxBF{z{nP?85NC&~BQ|QmCWmE9#JNb{5KnK0pygXGD~}Sj z%e!P&MwbuX8J$u06Q?8JKlR2b>Zzn58+Jo$cl`sB7gg$J5gKzY^ znv`2ynn;0Yx)sHnH zG>=qVt4yKS^nTt!3z!{WoAYE6B;Tn2Dg(~~f1)GSl)OXyX*^TSLn&GQ_4?GVVI@u; z-oZe*MK}h-==`#1SDH=JS5HUt9=_Y#i@&Y@*B)QHK73*s%GE;OxK0*-R3N&`K3;foqX^+3_S+KrHr zg+6YrjFCC~Xyrgm@O=#t$iO_#mCeho=dYrdma4vn7{~;3`&2yMp+Ul7nTT+1 zaatByrf2U&xiI}pNL+G*>=l1(t`%C$J6U;TOsHTCNzMJ3ff&XqCL85NokernNafjx zx;Fm3W;}aB6DO*ljkzDtnu`5<+kJbyp(Z@ zibp(~?^6zQr{G}wBLOc&j@N3&?Rcx(*oP*&4`K*ASj45Z)K&3%tssp9K7Cj~&)N%8 zLT|$Zyix!R{%f}$+;^YPjy4VJcFnd<25kga}4L8S|cZ6Rtum?yes z2~wjdwD*g-1iBZ;s(^YwkxIh`fI-pzVdUa^0x*}n<_9UefWE=In@m?2p4|CTf5_mb zu0vBYX`i~r$m0CH6^+L^PrZ`iiZFP<&iw{;8`sJw>bkmwr{l;K2SmNGglrX|jwieA zeCVu6gSAY2lrC6u?}AFy?S5)+=nO-Ir0Hx?mI9stwCTpZC$2%M%MpE09%Y+?)|Z7m6WQWcB|ql>AlW}(f8PFi z&w_=Agj5YaCXh>U=Y5>O0G1^}c)m3%nUr)6AOYXzjySs_@yG9vFbq60_r0R5?3jQh zZZ}RufGYf~&BiMVQP7L*dCu@|X@!l(N20*p=V%*D3i}<3z`?oH1mbb|Ay;WIb;uO8 znAzaBs|%q->P%FKPAX=V6_`$2Dw|Fe3;a`DQa^Aa7RdJ`Fd=-mAK6ePkV&hykZCiv z!EYzXc)B13E!}=95O5JP2=^?UpAykUDr0z;NJ2~fNqj;cjWFD^Ta@>tp`~=03Tpz_ z{NWakNeRrEs2y2$Udu+FeD=xa*GkwhI@-)fe&JGbSl&a1sq6+?j2N`KyR%HK7I%ux zaKpb6iLSUTG5N6=eaVHJ^oT@?rayXP;kW1Q-ZHm4tv30&e2rakINzQR&^?%i1`gAq zFik8=Ag9cmxk&2`iv*y}L7!JW-2bzudmnzO^UU`aLgp^HI!IY|&X_A%G-0 z^rQ??ua_Z0e1&5|oRU&C4!d3a%E~#i;nyE4Tn2|;cb-M9Ld&O>-Q|<1Wj3wjA~N3 zMAAyVSq)@f=^?fr-}G}$7YAw+w}Deg;dm*Gon;^%_M9tT#Y~Qhl0TVQ;A2?BO~E5M z4(y0WrjGwC*2cIBgeXCBu&nB6d(%3T49>y%A97KnmsLj?<$By*2#=fsWXF9_1yTtW zZUksEqo(}EYNXGd4z&wf`*se~%NMGo&fj2;A1R!dGJQVK9W&ZzB-KCLXg+T(s!!U5 z=C6~MUAvI>8-Kbnfk-SBKq-*S*D`x5$>Ge|18La?CnH{Z?E>`MzxFigV)DOj?6J+ z#l>&jw4>pBF%Nm^-`~CVn5P3lN?1gM#)tt=bHdN&$V}L^wR+8B@`JD7JIrtpw>s8K z<&wif_A_%BnR|N2_ieWU&hZMtZ3uDjT*pW#b3Q2~(Q!ObcIj$lp;F2XiX%+MEOEcO zKW~M{k?I`$NG-40Ec1@2A#XTQ`aE683)5g+3dd!WCXm_h1Tb;uPQ(j(Q$fd3V4%?z zbVl4(1Bo>8<>d2JDY1TfIlU_yDQY+FOf#Q%V-N*&VvraJHdwH9izn$y`2q2lSZV9D z*>6lNJ}<5Ps{771m8^S>a0e}6vM7CSV&@X4!I4wRKp)vkhJu=I1m=wqv+paqXB(d% z8+2NnDBiQb0v7l%_r6WZ_bJY2i5SF%$?8osF}^pc8X$1+L5e){l*>|MPi)o*fpEmL z7`r;yl7deyMGNGkhA`4=vp>0oaV&s8ed@{^+n{ci+rsNEEty&C|1l(B1O456Pb9X(ZHon07%X>W<5Tah zW-(PUykaQg+^PU9!OuUM({vmpvy$+R5Dd%vvPt;B>pd~AnjC20=*mc)@FxV)=rBtqkwOAzuo_`FRU-5sj|LUcjzCNyGK3fZHmi+bf#J_fHvX%bM=M>t^4~BSY1gj$tB4lygYKco8|LeRyQvTWMnTKtD>p{zj*V8}q+9dg0x_!!G8(Y0#ZldNZ?Ooi`kLIi4R;hZb zG>+O0osY@FXChB8RfN^Ts)^ZLR?Dxxs8KlzQAbYy)Y%_T{CpJ+ut!L3{qV*=X#)H(ZE z8G_^EJrXa;4o?|Ye+clAP}$Hb84v;S%I@7ZZFEnxj5Pv3cPKw$Wpb`3f>agoEZ$)I z2fkP_t{9A`E#)sy6(}m#*gr<%{14Kq-d7pcpEdJ_DyL-87x+??YqZQS zaw*t;>5MG|*I1Vsu;)4D~7l# z%l>OSK{4SH+%<_oMrD{dg_04`N;IMZ(n~YPS6(c5>WV`Io7CvYY+j~Muz3{9LdprL(AU^FzEOXRJ}O$#1ND$@7PSs;FR^eK9&evN2QdF&pQ=pOA#!jR0DPMU-i-qLiV4H^8`h=pb zLurT_xmgy&7|e8ZX*ed(1#Ziab&;c%HU+)r5qx^w*#1k_ZxwJ(u{oeJwDFY>j6nlG z6o}MZXqHoC%%Y1ZoBAr=i%r8Pm|)A0#)f2a#Ug^u2#oiXG`hn?A0_@)F>Ey0ZFNML zCUNAZ|3Nb=jviXHe*W#q8YkpwP^nIjUMCeUgOg_8Pji)-xUtpVooMn|JW)p1`(xci zVyW6TurK?gf??5gyC69>yGv4K0KLBb;5p0>p8v=3vj_M8BcPqX%E zcB6@5O2rAOSu(5eR^V!DA(Po8Q{X4^oq2}mND*6sh&Gv}SbYZ`R!^bipy!_}d-t{# zuGV)s+^oFeH#BqPX3YxDMTiBn zU%F;>6IsnQO|+zFxaey_`hS)q)*n=CqrCZ+UMHq_>HdAXJ4<3kiKhB7HWX8xD+Il( zHhuL?1((?^FqYo>VUOtlK1Z4p6#FbOk(~&}a+Uxad!PG9aj>@;kwZ6 zSit1OEwNc$qM27hLWWG{)gN2sj*6-+quq>2%)n373mFzxB^#<(3Hq*Nc(8Uljm4;5 zPkPT$?aO$(u_ zqHb>A-~#2bgGrS%YatCO8jH74;%ZWK`n5w)#l9SBfoy}|G=86rBL8ESG>Od!KGw~G+!e<%7Fa+@- zMYt65=ZMY~o~yEx0{hGqsm$~wiSPo%qoQPKM7ht(JWttbx@N*@6X;096?Et8etE_e zeBFPeDCS7BwEf5UaIh5}!||lmlMP-NckXh{TG{qhUFhw~9NB+MEe9@%4+|2I=cbRa zS?x|gmRGxvl5scii+2$6tS>RpE1$8EsOt_#SF4!@@7RaBKD(1ykrcUsz*+R0RyIQq zZp{%C@ovobNY*PlOoq++YBq#q8Is*N(yqGSsB%*|K_f$g@v4+9`#D$F*$TSe+#f~h zQPj1>SCXDj7I5#l#h;;Dq{4xcvoXDHWWQP;bGYPHYkqCo6k8@fK=+Ap+J#+*waebq zNn*#f$_C;uwB-4|=W(gu-5#7BKqtgl)>TF+Zh~xV=G8vhi2*ElZ|@#GPxXPor1BpwD(iy(KY@Wv6XiA<&V^)g0ZGIK#ThOrwF*feFjf)EkcuyJu~nY4s3zF8^M}u+~|@Au516zJh+t?Qu`f zA9=92s1 zLOBMHrsN!=eAyEUBN$H67!dIM3dt5@1HS%{Yu}S?+ebhwf3hG+aw#zSLg3i%i1S4q z@90@)3-M0tmY=G^`Ja5r>~?G=sl?>{CW_mDiDh9EVAuir`u7Q1s%1(z$9EUf5c%0s z0L;a{mY+k~WM^ZW*bp#u|__pU;?C^35cP&U`f@VaOp;bbW@HKtTzOUH}6E8Q>G zFunvme8x$<#96-I=6^oe!mxVEJY%MtrRM%~sp+@xY{#(L5&MHV+wAul%B zia(?sj)bw1ar@jc>o+hB6^6C7C<*pxQALOerW4hO41inhkm-I#vG=J`&UBnH?%|8Z z`cie9f>}bJws+Fps?{EZhr=DZ)f1XNMDNH>ZH3Hv8w*_vs)$a3GIXdx-94~QT!NF< zU~4j%k&ymk%#&yafkW`Y(dDZYlh!1wR@3{1j|_rxP=95@XMu?Wb+1NNx`XO0`-78D zIhowW<3}_s21{xU^6cet%PJPy<*6l4;5+!6cBo~;Lpvz&%@SwJ&K*3`s^XP`E6HxV z(1b@1j_|B(LT>qyCTe|G05wV@>F&Cx+tE9B za<}|#QHIt!szOi7?Q@ohXm6p5q_3mG@3t;<@>F}3-52ekK~ErXuizG0T$Tc(EopKMouMI$`uh-r>5P+A*1BiL=J$Ft^cuuR+4h`>xX|qQld_l=k?x8wOp0l=EGRbpKm^7{ac2QGsA{5vRFS-t+P+QtyN12r zzcf5Y)0#PhZrQZS-cpDMeLivOe51WKs9gN9I}-O{Yp^FZF`Db?W4jK^ zS9`elS?AHk-}NDi8n)4uro30yjvIVU1U%tY=4b0rp@M}{awU<@8`pUbBkuiwy`l$7 zcO;`di9XYdtN5Y$BcE`u9eI#^zKYoTikHxaz!JX0WvF3RH!gem=;+-Z)zw<5sNaG&i@t>TUE~&ny1(C4%Y^D;tf2H!9M^K@ z?W>Txrjpfch1ZJAvOl^j2wQc!l5&{}^cMfDjx`+cg(hx}?G@<#7yM!6Mgi_z>qfS&IO5Tr5%Qmm8_|U06sb+Fm6U7O25bf;ZhEcN`rOxC7J}M zx{JURAi8Dj%2OrM#(1ROO+56FM5@dmMp(DY@T_$LF{F644)s@&7oH5;Ee(+_ zvQ9jzwY%J^)sr67ua(c#HfL$ZdyvTR!Vtc82oT1yO8DB4$d<{wy&>4-8JOme@`@JK z7fiVpR|UM{Dp^l_U@0LWnWLLHs?g@PuZ{0*`JADY9!(cbXY~2`@n)c4A(M&26G%@l z^YrC@ru(2XL&ho-Ds{m6vNW}1Vr{|OF>c25PJ_63O(;9CH(a%LN?x6}{oE&9&%5#h zKfj9XH8+m%HGUfgk^Bgc+9E>W{{o07y?+;%8~FqYYr(>mN`zICex6G(^}9v2l@pw! zeX|p{U;3cm-d0RJxs}m79lhCoGNXMd7!O-6!+zCYR~whFdxsJdGG&?u|GqO2DYNv> zcN>JmqAL#?T_e{Z0-s7zXt$OOMEPEh_o?+HaNHRyb4tfl6Wx z!hz!SzTkFMXABepG8w4-u5zYOxEn3D(UXc3ytzhU+e9RJuQvc1bG8NAdQo~jp*&De z*!N{*DEf6kqMmj?}2pQ|wEmaH-4Z=(D@X@A;*%_ei{m&3le2*jS;I0iXv6 zaD_6xSplwik=t&odZuFGim}G}RSb>3AN$SrT@N4jKc|A_Utg?lCj!w>g~6&B*)Miw z-h@oaB)2!+!LaiPNzBxee5d`2*$Qj;BR&hrjVsdZP3rS{Fv3*ebEWEyblhbIAz@nk zs?ELHO?T2sicBS;%!c!SzNcC;t39<7aXU_alX*|f>A(4Dj8^b7%JEn08rS5TGx{!e zqb#dEe+@oc<@xam$t8hiU$n-3o}VsJv(wDRAUX$G&O3j81lK#lrDjqdV(xsG0KPr^ zGN~+S)CDqA%EK$(d0V%nsO*K$!C_$~qoRepe68KBDI&js-r4N(Geu^-R@@HD@%=F? zHv6IxZ|+~Vq*4`#uG5tf?loS{ut<`Lo|gHBbC>z0qjqlF9eAs zB>$bdxj0t5*KcH;{Y4i;oU)ciw3*R_AnNADUWL?2|CbHex&ALq`4q(i2n}Jc5WeHg zKgRLwF9H&WEVsT(r54rTdOXSf9L52Y0kc76D)p*{+!L(gx{2yDUucb}BBE4o56&l( ztLM`!yR{1rY z|9CL8L4jXat;nfiDUm<`+PtAzyv%_8{$w4YmzI{j6_vvXSRE`6N9#i8aEd@H#q6BN`E#=%#SO3r^#uRYUAeOfYQV49G8ohl& zRu3%QDdI7ki~W044PpQE#7Wd3-_vu7%TUCfJ3K(v<$j|f>l-Z7&7 zMLKbW_lxOp3CNHvvPU$sl7|F~q#k$f1ZFw0?df|w!K65+ z zN%w~5;|aJ?sU5nC_t$1>QH}1v3U#W+DMZcT-TA>2{hw9&&5s840I!8QJIlvQ53l9` ztt%miXYs>H`zBMb;si>a_USCSX=_Lu0xrG1?p(ZsNH{}&r8x6`mOzgZYx(ekJvDzT zbtiupP|ogTcm(_z7Px2+pk-x_stn>%9$hp@O*Yai8oDvnXoBywiRCQSrR8__^Es3>myEvKU?O zvd;l0R{60z^DLBkEIyz8Q{(XyncA9kHL;^lH|O|4YJFarVxJ^j10V}}+J_|9jB?t9 zx>_Fl&a&zcP{A2kWoGvK8|n=dbshKw+JW?_UfCP21xCc0PlaYO^!S%y(H5W>I}#J0 zkMNK=kQ{hrr>%XcV(P<#=h6D_{zAj(X47Q1MLVo#20R{{zONk~*)d!?^^a?o)x^&! zx}(4}PwNk9*LiDeAu@6A=tJgT@>~7xcbg{Yb=?1rM zv|6Fh<%gxOUCm~+G09sLzc?7AvWwQ#du)*I`BD&ZtH)=y)m@Buz5(DS1L`&q0jp~<3-s2I}O zUDmk7zZDS640tXJz_jPgPaX>Kb@&T6Oy5WD5Ix_iXQW3jds*x()^6YCIGea)Um9=S zn>^PPG_l2|pfm;}wK0E6uas3rC_)eT60FFR2deHlo1m6J(nH8>iz`tD2S?b+ez#OV zZIVTbUNvJxk=rKlL|H)JyV}anKeZ|4G;itKO!TT85vr~#_;Vh?D#GRZlOdWCl+vY? zcXV(e*abN$$RIg2`IwHITl`)%=VR|gcX+#w2-8pi`Kq$HH(+y``1zKTY3 z&}rgJ8qvz1*da~FNml-jkK<)UjzJaJVmh@Sj1rdR8j|F#l z=q!uv4a+Cx5M;e?_cUH`c!*g!eJ)?YlAtKSo!(+Xt`O{Zo}!- zD|L|P%OE^VY^COixB8#~a~=X-WR#*uMRV+Tm?u5<{)2`q%lZq>F(_TaFR6=wnny3S zI$(E-N7UxI(8Q7Ct8tNMVHE-le`7le$xc#EJ>~A*23J#%kcd37_u1}_Hv;hLmKn=* z?Ft+UH^ygTL1KWj2p>!Z7I|`e zBL6C~lt|$e(Ei;_l6yib`LPC|ZDo$T3yPZLQrbQ6n~wgrOyN%u-Y9sA77mOfnK&30 z{oO-XRrb|8!)c^bW~6aFJ93bsm+e)u((490dhwMJf6$o?>r2!@0b*=<41DkJ+sEfO2WPXp&f2xMjO z@bMbVTr0-^w$P{i^cE`1lvDGXp~ZXFY=6eyOUwDtQ^WeRce8I-bSz5*qz9qS6cT z4UytDs1s14q0cr09yT)=g3)S{ZKaoX1i>3tAF(-~ejMdOANt29JSDm5sV4!=aQ2)a zOxkQ*3#0-yfMVC=h&aWjtEW|o8fbbG9BlB4-(2xN=mTsrFb7B@gHl_(o#dWV8_}B9 zed%4 zgO?J%-y&F=?3c#BuM9!^R;eZ$KrWy5){IU0x!A*M`w!8574?Q*1~uBA1l~Sm%r~|_ zYcJt-yiF-}ctmH38oNu9cB@XUwKtbqw{`c(gDs}Bus(`urHe@+T@}injnV!+2ufat z2jj92F?ca@jfD4`XM4;dTd-|uhtU2^y^Fv$e6(^oGoBh2E7>lyva7XUTF(tBDYe`( zrjV6kD%%LE82!RC@sJRKpp)kgnaND`Qxjy%=w{B+)c0&G_BbN+uqYLB(ckXqixe?> z8hbPp;+!6Hux;F8l^7d?uBb+f6Nj`EDav^bLMhm>b_Z#(8d-Xf&?iqX6jzHp%+th*LNLOh#Qt1_NS7J!4SvEO21#m0-R45Q$&oyHzc{uNX|G|JO$H%kmGL*M6 zRtP>3dysuuV|8mL6UMLhaFusE^h60Y!zD=%xc}_?;Jl~ub{gd}dz;IvTEk_1c=S9o z^1OGn$~YVk?qRN7ebb;v%728O%fi{nGt6W)?JC(0O_&azu1PHsnS<|^ovkd(k0?{~ z@Zrr=XI*gvsCS}0Ew=j#i1=rqSF7LBy#HC+eq(R)Cs_T}m>U<1p2Pst+)jT%1R?_| zCwtgk`I!dAEpC}#EhK$UvdRS~25h8KcO6wlv5?nDZBchH8g?I8 zeVrJBKY0p5=4{Gl;j8A&Mw2VUYgogR%2MaU1i<^|SGtV~yW_>N*@=Hwq+#yE*W44! zn@Do8_S5LJt!&kyrjLySjZ;i%WYBID30s{ov(_Dbqd_65-=0xGqF_BVj*5z91MEH) zVRIC@^bYd*P7xu*ls7v}d0S4(3@&zR&`o~a8>BN@`KoHS-p8&lR{fCX zWufpEvS%_axFkf2xxN^ymT5zl%$%t)gZOd{1&rlS)|I4hWxp%6NTBQ)r@O3quxl(u z+{~2)3aH)62`l8+Yd$;ajK3~gZTHlP<#yvf^)r|pwxfL1k*_Ts@@RdM!#1g)^(!}8 z6{x3G$-=wd-IZU4lk$~K((gcHjQWWNYWnk8So6^eLhzo}jMp0U?Xwe>tTc0m zL$Agt9c1oaRRAXEX7P6}cgm9m!g-JQX+)2A$B%E8%+P7+*mC8t^MK{+o4tuLE5KXv zpxLNA9Gn_wW|q{Sx}ZFa(rn03f7AQZ%DE80lT43i^UuaPoUlstIWyYQO2~26#Zs5r ze!=ls%*|7*(-s$FlGetvBRGLKemyd!sgp;CTgA#!;z+<_nJcjT?y=J|1Kee7Fn*{y z?zrs1fXkV*MeY>VWq^m(>|@_lFs07r1&{=kg#ni&b8~b3H}ebrwX0-W%0(h zB&a-nh3B{%vYW9bFwrP!&iQB$-Lu-HXFBi|fv6|WySQ-NkH_&8QS=v%kABh|I7L$sX z=LEW3g=DpzwtkKKvf7|xU777I29UHc2I9h3GGVPHF+f=4gbbaxB(Bg?>&>rtfx zkeUQ7cByBnfGjtA^k6@YXDGSRU|Ys30&Z^xBtF6HZ$H-!3VqaXxqgd_owel{5;5;@ zh4fyWP7(OMQ1X$0?=8N}VZVC81bn{yuTb8bZcMTsbg+@exD)WwK9F$GygsyE7+jCO zBBGfawL~ONy%w^hXxZ*PBK6a2Sjr=q8Ty49c@znP(3clBMW_o6*E5$DT4 zer-<|PUoWqEBgIY+RSRY_$?TNTqN;_we|$W-AGv8-Q22HKbJB@-4-o)fbX-cnRN?V z=8F*Ry7hRm?*0lAJxER&(#{ z-rBIeK8ZpT8^$u5=H1+6V7CK*vIOgJ9%^qK)$S;uznsK`!8P1{-dj@-kE36~#uU%b^<*hJC7#_Er zTOCQ40-Pd)X27JJ!G9X0C;}_!rp`c^EbZ6;=dcJ?gAZy?%r>g6d{NCg^b&Lf0`2Ph ztv=o_WU-DnymiC2@&gml2H<{Jeu%?0!;Tm!M!U>iI=-45)5{}fn#`9cOKmYm%$Ux+ z#s~HAwTrtP662;|+yPz=+by)ynGbX|^Fz7+fYIK}91B=ZevmZ$wr3K?p?m6Y_ZP&rizeLLKn! zj)zGEfs+<{WcqNnx%`>_!$y0q!xReea8lvG1mT8p9I~%BT}MPq<`b?CX(+gzem^Qk zQa;027Hl{VeyA2S8jnq)T`5e~fB6Tk2W#|e z!^PYyR38w;Yx%Uf$WCMFY{Wv8SpjNt#wpWuELqHSeu^8M#nQtw!?xMb_JRVpn){{h z;cV)Y2TDDQxTwl<-&*XeljK0A->zv+>V141bFH;zA2nomZmfDLZ|$|Z^cXK)*9fek zeEQG7Zu_wy)PCu;%W1^ubQZ~!rwDY+al+AG*pnqiq9s-Huyun;NQ4d9ot|YI4-qsw zNmh@+!Ep;oXwnOckQB#rU~Q7#VCW^xZyb^C)odrpoMO|FYmZhxoTTC~r9@<6$s&e) zb_-EJCe}{#&@u49Jm+$ZiLq~9!H){npe=tH$94%_`+DBiwyEO^;b~X{>uA~?G3D(A zc}uodI~$H!Yj<5=ppBKr#ty|I!nz?<{xxUxs`=LVVz$QHn|#LvZ|*O} zS(y&W5MGf}T>?eLssCd_d{f)b7WPO4|n3OYU*V#oOC+vABG1le_8;CQ_4^ zL+H$Z@0RBpDkqY8Lj=|Le&Bl>+27P})1Ztl^^|n=`P6&~%uV8i-1yMS$8HGku`F{-?_ zEX+!PYs9$*NXE%xPLriqcN zz~0}sWI580Vb2ZB;5&zmork$jAGW7kK4oPX4}ZDLUrIktQ%+S7G}|)LLhfjE#AQR zM0+fHFI>~{@ZvVluIF2)PD`W_bW;XTlR>#A248^SkjjXz)u+HG6>1ix!aNaxpkV4W zh`**$&b{xTDwZ*#VbMdGvqux*kI{?C-KgR_Kfhy+GiT7usqs6Y98Q;@6J_zVQ+(gs zKJ9+5cjhSFEIn}2Y`ivHubmvU>0s=$1r)t0`}pbZDnB)!L4^L$IuAV?FozCb2r2m? zw$9Uw9K@WlP9~qt+ZzvvlU;gKsiKUHU5D&Bmut80jK2gaN9QjQ8gCnQ`J4lD1CI1o zpVl<=Ya%z=jOb>Qq`Ad(q+dHwy+ChYpn8;C*b&>9VVfdEVp|0p52a+Cu;VxhmNdAK z3M?rpj}_(&eBn8i6X_Cj^<7S%-fsH=hHr`3g@J2@i99YQIK4_4!j`V7MwvF%Y(6x& zv{b%se0+N%S}E)J79^Zy_dp$fhzG&@_dj+U5rX(&Cs)(UfA$n0^T2~IM4Hc_nxcTN zr$vQi;?0pWLe4>67AV)a=s<;v9C4LkSg--LbIDS1>;^!TD;xkD(fC`2UwjA|dKdPV zo3QIgC)IaNzlI21`JI;osfs^ma7p#5rQF&S`dPV7O}i>9wO@`eEa_3d6o8rH=Wncy zo{axp>5buCnriFUI#0AWqEj&!-L^rtD@s<3+%tz z!kc2?r}|unocak2IiFQDBK0l@g@pyqCO5kzZ@5SEIP89qq|PL578&zNiHy$#GAnfPPQLVEKq<=xiiwvKU%=k3eO66M0@ z_}~VAPV(_V{_`!|xP%&Au3<${YBTQGWH6WzUc{2OHM<)XCeKaWiJEudO*ogjc6yW6 zVEZR=Hel(j5PD-5N5rt~$ZLE)TUV{4_O{~^WjqRE@=#7ErgSp*;DBqIo%jKuSu18e zp1ZwhtD+y1-oyTmEr~KfXKc$56c`>2kWt@2aCMk@wM`pE*2pa-UpQZRIYDccbED6^ zfDmUUcnj28oE|Yz_4nLA@mcy5rs1zIe-}lXmSKFTrSE>AQWHYR>7tW_bsBRlXXReg zSNI8k9rsh*#9rL^Lv_RL1^TN0qgJlZ8Al{9$?s5bVyOo+HRO))I*<4dP!Vgm^Nz_$ zp*5FvA`HdNDc)Y^2`{Ur#>_|zm=?DROe0UN6wjiaSdIY4ueS|N(24-hCJH+)`|X79 zr>Bw~;klwCsgswD_&x*iakA&zn?rH(XIA4Yh8Ri|T$f`j?olhDx5N6gR~3D8<6Q;C zrycnpwU%IJz>^nNGv2Z49@1z|G5x>}`T1!Xf3;RIM{ocL<_RFGqshr0`zup?dsBw* zP5o@paU*A`uejVNUaHW(`SeVg?J@D7`qQeIx88iV&KdfZNizeMK?D3r6^Ny>H@-G} znc?3z%<52!wl-P)f;&Zg?j(@jx4KoXrgI)qS2X|QX;=5;)S$+v|1TXW8gz&}%s=$3p`4fDjz6F>AO&OGr`{)He z(!Uqwk$~>#`$C?m$#Qh+wT5#@I*XAd7HEuy}98^Y;q zp^U4?_Ktg7LQx{m=$6-@?#+pnkh7q)O<#O= zOKk9)ynN3U(`b=b{Vksz$0}qNz8`D+oc;$99{EddX<#(ZZsMx+#b{En=#YH~b#FS4 zm!L-}X>UulK%Qr&5|8I5wg%&kPuC*JRXF|HSr)VVpwef3^I4&t z^R1aR(SYvCOb+5r7RL}=LgETA+x(aiIUXcmHbiCP2zp_-35^_U@P7ajjkWZ5JJ%W- zkH?akoP_41dC-$~^YMV>AVc1R|L6|5y&HM8m1$5aAXM`DP2N-JhC^DdmK0b3NE&eV zEH~h2H&5oAGT-RnT?WIUJ4UA%F{Ki}d$a)V0I6&`2d<0y-lY)ic%|$*bQOdfX!stE z(-_l%NcN%zzP<3@@-Rf4ke;C}ZG%#FP z){wfOCJ;U9{^l^p(Vt86)#|;mKOH&y3|Vi)BcP}s4y`YK56Am8j&)=w9b3`uFGLNg zlpE+z(j#NVwMj}C4amjF63jv{_cpeNX-DbLU)oI^B)ciIpqtL~HRsQSdSJ|dVn+5p zu~bC%iC+*cr+J~?A}c*ph3T_bexgh>-zKN3u?g65qa-Euwq_!Z>5b_o>(itgi^lJo z+7;hw`5#-0Z>!vH-5w9Zk10&+0M1q)U)fD>EL?XM{XguTWm_9<+ph24ZK1SC32vph zTX1i22~wbFf#U9v;FPww6%9_&;1qW#4uOOc+>2{)*Olja-?e_l%C~&Uwq=sJX68DN zW8X~^-1HphmRbQZCb!>7_Y#^Yp|QtTbl)vlP< zXIB%IPru2g3@b2gfISCzyHi%2k`&%1-S0;rUI!2|pq)8nrSB=?NXP3p6xo34Rw{44 z!8nWVQ_51;bb0?)Y6U$fn7xii1$o#rezTA4T&CiD z5F+GBoKH$THCQqEr-$L1SBHFHP_j#@aBJZ?5dImbR27O`Tw1i<7ELL;kqmxadBnOh%T$d{$u$yl1#+3M)4qt{B--pH- zR&BIhai1$m8$N1g2uG<|YLxaiD&3H%MQJ_uXrZ{BP~2RWeU6rD%SEE-6FGV}mLi~= zr;Ev6HFT!widypL4Zeeb!cG;ozb4jYf1*BsnTY9llIBTw088I6Bn5Hy6p>6BS=A#@b{}q zeI@>UFFDT)F0mmAEecQ`(CfW9Q>z{E1CqU-*;BN zEuPoBXW!7LnCJ?|?UcCS&l=d@OvU|Wz`f&I7`(sz;p-cxbl~5DUT6R|QRKrrG_d_h z%w-^L_p7H1X`Oq%eQ*k>(~gN={(H>S=RmG>@hDqx{5sI=)5g%>O35qlNLq~I$@)%T zaO?f=7lc;2JB19wHIDj3FG<+t;^_~Mzplu#*Bf;gSrY0;IP6?bO;5ykK~O$B#N%i! z(f{;1h@}I@09CKJLH2mM7laM?J4$^vySxwP!0P_?@;!sJQ7h8yPEA6o$0G7RY2S#i zAyR#R?8Ue4kc6IScEvmA_~Iq#?c<+qT1rmf>v?te>p=ngkDr1^H(n4v0X74d8Ha-C z>pSd}b8!5Qq3`L{#4aXg`n;1X-kk%oM{pWG{9;W)b+8HEIR;97)=wkCSqaVU~^J{zOqV{50A19l$Z11!DN8RS2fg%9-^ej z%oe~G^EE>%!!ZzwLSO|M&dg*+4z9-0)E@0oVEiia{fR{f+tssBm9?EtwXdxF)E+aO zhEvAB?><8LR_HND@aagUNr)J&VD4=;D}7-FL!NgAw0CH{p8OE{?x*2)=Dy<0g;dhr zg;B@DrsR_U360dlFD45fBc+iGE495A0pCXMr|Jd~wW=1?Xq!t%La7`tvzQ?IJhB4W zj(&vfw~}N14`QIR6@8h1-rt6OxX7OZEe3|Xp6u5uq`^`zLd-MSq1>gY+~qx%?+TB$ zYtqpxxxIdn)iS-M%{|gneP3hLN5ypD3GQtXF2L;uuT$XW>k0Z6=#KD_LCnt80z?{l z+bx3ZNz=MZJSqM*Bbm=n1J(%lqY{PK&8_sC#dPi~rOV_M(~Vc79L4p7Vn17M2-jin z-l3tQ0-GjdZL&m&^M_zt{7ux&`zDHxyq%={{Wu*de3pk*#$BnKCtiM4^8FtNc@vV` z5=?URip&s0`H?$pFOlOn8aU)(HANb>R*}4acNQz%F&daNiIH_b|6hxdk_%2W zv$NU#tm-qT!+|g>n_tH=z?FfN+I$i&BmD?>XD5UX~@|DXWQ&d+H6G*$VkB8FD`;l|Sq)S@?@|7O=TUpW|C$?OWxP z5_lD;yq%fmZ}5@c4Ukst$KP3N?%oalM!sPGFE&vD+LTglkM`B^)HI5PdXS1{lCYcW z@!E4x?<*!9?XI&B%MVcftFs{Op8>grsViLIq)po{??0{Yo^X-~*&(YC z0a|{kDYsD?0^HphV=I^>@J+HIM~H(iNrO7|bCmU>zZ)8hn7a%<^Oc@&aPISSlb#c{ zRWB?`oN*mi&s44_#3tO*<8NHD(K#bW=(q&Q0G#F+wIqk*ofeTd*Wz+zINs4k>+`y1#G9-%!vMQBY*<)m3^=%4VZavuGat1 zlpKB2%>A)*XTaWW*av;GTl68i^iIr4xF6tZN2A&b-Q0jiqAY!$5!w$mhyhn!2fcUC z$27bJazaKH-IoZmg;Ppw^hbsY1}Z;WPP$zEJ|e!BevIv2_E$W<%w7+vf}fUdeE^iZ zkqbxL$o1s;>ojnxVP~x+VYErsEg*O|uW1IT46?kQHDJ1d?k-jDEGjM?PtbyCb0-|= z4BxstZ{Gj6{}Ov6YWOdMx)Z&fP@BW0Gg{tf8jV05wwpJhJj^v0T6LZa z!bkJ$-})FfC~A32XfdZ>11pC6VvlC zz|n@ZR=_(rm8!)&OM%hygn*tg7STVA9B;gK zwWrzzE9M1qKXtjd?$w6JM6jjXUijzZF8WoNx1L$3m-$vKno)RC{^{`M*$lBs_^eBy za$W6Wt}!Q}m$t%^5b<)k7Z~U3e=!4@*q;gAME7o{aM?}vL>+L9dhmZR;$#a;k{s=P z*_r?)KHeiZcE8d&`t4zNjU;nKw^E9=ZkC)wuJCUtsLg8c~sFy z4#UPhxjnnqSs%X8auDGv8(FGJE6{?Od%(zivT{|<&rd;eE@>Z;N3N70^1g4Vz@*Nn zfxahz2uCQ?)#9AEf3jH3K)F#ljC6ukH?q{qkoUcuhs=eWZoQ-WaNHtOwy~U%+&g&} z>*4ZT;W5FVig+6t9^hP)Nf)raH zBuDpWVBe_aZwy$_~_J~O*rTt$BcU@m4ru+r3RQcm|`fW z;0qU;l$gzaJvc#XtPgZzJq4HNDVu3rd|Le76dbUv<02wXWTgcS_#xUk(X1-q$6xQL zHkVA>s}+%9S*wL(#7xii;D+rxsi82CsvWDuW8IT`n1QvA;r zhkhZ>K>WLNC*VKhC!E zAFG0eZudZ9yyeH>JX4*5;L>s3W-l>wrc?h>i=>9-wL;VxbzQ__-mGy0W7;nDXW!;I zPge0S^6>_cJIV4_6{e;A#rz7+1xi$^Bopg$G-F|D(;c{lL7Zw;`G9-ytFZy$8lUgj z_kLczs&_$Lx)WCEzP$S9ETlV#Jj|?L!sMep@G&9cb=r=lzRU~p)|8#Bxv^FaT7)nI zGtcKOL8|_8SO2gJYs(7cnIx6!ddPd+eaSQ=12>$JExzveaZ}J#N=to;vg%MTV>jQ{ zG`y|RrWpGP$KNqe$~`M;-NPE>`m?fyjPXs`9n(9mRA;1_<~2TQc_ab6^L8j@o;yyt zb4)a+Zdgfu8F%%jGA-I}OFb_5>CV9{bZGd}T|(t7$2NkFHaS0_)~8L_Th|x(=fBDVVb?+bL_KR@%GOz9$4cTx zLPN=XF4rJFTUiiR&7c1~m-Y^8JSAI2_)n6%|HXR0unNB*#NY+hwl<(g$p$pD3ekkE z6xWLmbq9^#Hwc*lUrA9rB|LWgw)`2EQ|VkZrNe=t&Gj8W)e@bf+sgyRmPY=V@{ImD zz>qUN9I1!4V1NEj+Iy0BL_9@;P?@_!=Gb5xth9)ZXXS_Nwfz^-^F)!9`P5zF6z6I< zSQR26RdYZ89?7BAH6JITqD(YIX&)|^>|&$nSI%rpB|juruC*V3)W8u(165;eAUUYB zQ;aIZ02WTml+Lkg62KV6U`5JFqd|(1t(OQQmhCuW9^U88%4d46@8~yI+i-f=x4lF2 zS(Mya%g;@`8Akn)ehV6bJNmw zsPV+QbvI$s1>w2xb_ps;yGLxQ!=U$XM%I-19JfOiyu$eC+V`h zQS1sSRUjHKn5a@OyrTK+uH}hW+306TrK$^U8h6A~LMw4YKHK%T7#!f&r|ps2E}MZV zrU|}q%s{Qd)?^gfWV@;X`gw6WxefFolLDF-sJ4mgw27lEHN}S~E55N=6f@A=ef-y> zc1RSpZWtlX7Cmdbc{dZc&F4vee_#K+yR3mn!Sj+=N>$FItVrOom?^PJJUpR`D&JS6lBclapl8zo zr?)Iaw&ck(T3Y%0fygmsxzn+$y=Q1Dg`H7xe!ok>ZmZaomFRwQv5eT~fxj#IB%IVv zoyPX7!@bx$Cd>HO2RqtQYTzlZJZJ8dz+cZ66&!7#xR}A1`eIkH3x{$LFvW^c0bOZ1+_?9rt;e1a z7eb4oE8J+uTMKkZPqt0*0FE_^)ienm+9=@Jg7(hwLCp2|k`cA96oG}hZW54@pSm%k zoQ45k9i|ERJ7pww9S_tNvx#gM5E55Qp52QOM9w5E^3snp(=xiC!^v{$f5<6YX$4djV zg?>K22*zbmri1D0+>*3_40y~9<$R9JNcA34=w37Y^}DmS94o#^8-|%vI@ti4cV2Jv2UXo0*@+t7m}Tl(>v; zMIw+0elqq7t7E$C!?unLmKt}1DB<-0N zO>eT1*$y-GiAFF0f?^4z^}xL-JiRQ0Se_5{>{erDv#>;w6SG-_@TGafCfd*NRK!iQ zmm}Gn<+pzgtAn~lbWGGr&5jed%2;8o6Ip|D}yA6oQI@axTsxDx~)`q&6Kmi<1fL)stDUyL*(E~yb?pt z*Lz&0#ww5W=##mrV^I0AP*wxnQlHs*F5ZmU%!$7=(DpC-1ij;>R39AU9iX3m;mmK4 z@s_T53KI31pc5RkN9OF#q1?Y-ERV}NnYvrpU-L0NMK{Msv1n#bg<1I~m=G`W2t1b1 z6w?l$HA+zTrBwG|-Q-BLee1SdbjeI{e<;Ps2dx`_gk`8>%8q66!BZ)(Lml)KBR?Lz zx8iZ3n2}>;&rxC7QPQBlIy3Jl75?K7SH2kh8`#rI>m2Iuzv%O-j9avz5Bs%;=QC;P zS=>~DEj$JMZw}R(tupT`wTTKXE zn0%~})ekD;^<`p&^<=nl0R<0X4U9}$^0aBh+H@~!@DYeD$TeJ-4Wt(;bHLng(^Z_u)x)6MaTQt9*|Xy0;?emCj8%r#_r3ym3C zvDw|G-k&Na1vdUGm=c<3OT3bcrJv?s+(=g3DrT@UoF>&qwd_BKdwDqj>*xfp5@r*B z5ZT0#?l<@hnHkKt`=j8JaU-3e@G!eKQ?I3@Zi0iLR^~;@`*tU(r}F7Ys}r|#U6S($ z+hjdwgSs3#HOr+;wa$2cJJFK@ToY>weR%;6zB9kP>$-T6Wt`~keI!SHiu-$WL4GqD z{`85zw_g!;;_or}w^sRD<$EFD=gWmOb|-`50%^1(ZWQIHe;aIn-15z>4S1~Kka0+7Ww-7)*GkyYDD z+9WKeUqt{+54G2XyJ-0xOx?WZWutVYPy&x6nDl_MqNM;mIX^Vf={ z^;F#iL_8jX5~4N=5COd@=AH_-pmSd}v18m}EzVJ@50n+KlO;=0xJDKv}4 zqx%exo1ks`Zl=gh1hI+*!?PBVfHIsw25Rit?b=WtVr{ecU+jy2yIt9x^L1hDAUU=Io9eM zTdXb!Y>vF#*bN>_a%>Oo+3Fr@8xS^Nq$VFOrR&sm|0)e-=o22g6=}*NSXS|&3>Zrt zqPp}Dr$1a$BZ`);_h&4m$O}ef+|m{%Ah&^r`ZSp6J9i zPGmi`0yJjK(rS1_#X9okxlX(26|16eM^72Tntx=Ayb)impm~L#a9 z)qz9OUch%J`n+)*mfe1OG3iS#yy2uGM}$_}=|x7{WxoZnOMSFKnB`PPg^6h6o6+eg zRQV=j3QMG|x{3VdR^*>{`&OucMa0dZi+B~IQ55kfa)kx=-mQguTX_2}Xo&<8tZt%hxK>T!qoeauJ*U%u1|g1n$FMzw{*9k%jQg4T@RR zTWGzr(&Cl_?@2<85%aBNo+zG6(Zi>Z8`?VS)fjRgQV;Ik+1c8Q+6unapBCIQmOQG zhnN}L%C@RoMr@X*XHI)sGqS4#=h;kQesgu&B7?)p?6}JZ-k|qOK`heGJ1TxF20(}! zrm~984UgOxtv=nG5+m3EQ7ALR#5iD!LO@$6mvtxZ9qBliIhjyl7Xht>cgsJtBsbq9 z=}F;RJjz*BlBx8o{9`HMJ7)q#4eV;c{#Bw!>tapPoKjZ@xck98Gs^#1B$tE#3zvxiG zOb%7yIVu9I1*>xC7sadV0^*^N!HC4Qhy@j#^`jB+g#XrumrCM(x3C-H`#VKSXvM%_ z6l$s_?pNJ=r``6YFMN7ga&X46WbW?WU9kEYN7t}R!0&OMj=sjuqk%5kQn!W>|cNUQ7wMW9!M5+&udvV@Xo1iJv=x(~i?4Jzd z+q#4AIsgINoyU3BNOHvORvlGST7}jCw_+PE(un+Ij6i@*JiIyHAeD=ck(#3K$6TL} zYG3@s&h7K1zsc}LySl%5FG@275%w0)o>K+XpFdwif(f5l6>LUYha^Xzy}LlrC{O34 zSMRsH;M{pyYjNpjZv9j$`KDOY&5{EB2ogVL z`Y&V;&CTnSB67f?irhlhGBJydrn=deyF~Yq8qz@d;0Ibn-dZl~N_o(Nb&M^@6a!ULM)F z44~dd3upzP^ff0*-0SF#O1=g9pIVgzyXq;|hD3y3#)&cch&~zt75w4z8oEXIt36ln z>-7vp1Fgy5Ti3J$N3!CjNC_4%O8M3Jc--O-Ny4;|7N^JfD%)`@ z(LE3OS`H8F{7x>#9+#HLPX5EIR*l%sc4TTe&deZuN$`5NzOhbV*=G+Ya_YqLXwJJE z0EjU8loh$$#!QqVe09}xdHv2f(X@XM&Sh6C7CpmQ8!nk9(wx`iWyjF2qGNH=p!)24 z<|gWsu+-JNO6bMoX6>?On~tgVf(pGBv!kWLYNx|9w6y;-*&Q>`3=!*E+zUvAWK^_Y z(TrO8d8sNzPg&mc^;?%VP#S4ZD)>EfNCO_OcdH1ZG}bZ~l$wMgald{=Ia#<=c3vnQ zuiWGdz3L0$JamJ!-h~55{D785&*I`?()kR|iPFVO@HyI21zREi>le-M4T z%r0(k>bN{2JbNRagrt$&o^*Lpc9+mxc<{@zw9B0DjRrI~%8%zpomN%v*kig_re!8fc%UhG7P+c|ZBGcMNiU@jS% zB?ff6S61)04F4x3*#7u!zc08T;L+_Yrz2bKbnDll)@xzQU+NKfE4vp@qIagBToS6L zfww71YuEXlrHmT0x_AuQQ{XBMXaF`wM58}&;Ymm(4#^%&*Y5f*Vin4^I$?jh^>>8H z(J=7GI8Nztag5SekxnOuJ(lu578$vaxrKMFYcPKs(p;L~5hP`^ybe?Y7W>7pmUst6z~ej}Qh&Q+vZ`>?4G0;``|xJPmX>6R&P) z>}3v5@xU~ryP2MVJa_!o7A1J%}`y!RlUm|C^ zS+?U2H<~?|<6qk(wR!Ftd$m5RXvV&vrwrJBt7DZk_eCJ9&0q^h8emwvVx`+;rgEuh zMD!2ikt~taSa-F|IGUI>&&RH8XnSr>5Uf%=s)`pUv zs9pDSdZlc%$sd)}gAV4D;d3Du==Rj6^?%45XMtvQt17Qn;KAr}+WKf&It8bDFj(tt zV=Py`DNl(70f9sjsK;SQ4D5@rc`UT;&f@!ijkftV{qKcw1fdyJrIbImH+9^RN(xGY zeb;R6X*PY6$U&XSbU#${6qVD|Ta;X`o^VmqbSKg%Y0xw7wZ^iRJT^m?2YK8o)&3v6{RBEUy;isN~}xPIYw->8yQIZ zJ`ZzFi>MC&qDHz*Z7O4WthN*=WK;W z@&*M7pD>G#c}8K8xodWoB)9LzGQ;ckghTJzbu5XW8J5PqT5JE@W1wO~t~^UFqID!( zJ98NrqMp?{*o0C>WgyQsY;X{s>lbFLwK_WxhC7k*d|WPOC!49<;ohr}T*bHpfHuwX z5&7u0ogxmX-YiM#cRY?86kIdB_#65ZT(cehyk1!$k}YDQEW<#==LK5KGwJ5IK=sng z`!;O&jFZa4pZG~@D6jI(L4)iTul2NAi8i4R5G!+049bVn{g?&T_7Vd#)yBa^81Jtu z$50m#)4vH*7iu%T%ZdkUE{_58y~`YeK`bn$tLvc@(YA-Vg*$W?AbpNiW3@p}g;k9z z%gMT~v;8GW7LD8}ML&sw5$l67azG*8Y{l+1y|^+;LEQ_}R_98(?~P$*_JVR#XgT3&^mC z5|JK`+Cg>24RXUoez{Yl#o2?v$znO92{aFRuTe~D*ee4z)#mf>6h?&NI-yKcIs!fERMf8=sP`0Q~b=Yq;6HU8w1dw!MOgXz0#burHRS`%x-C1()~ zM*}%um*Y6788vA6&yrYVO5EM=pIK&~5Pq?sSP%>lYd>A0N&j^6+n2r_zK7Rgr`hhw z462l6vh#Fm5vpm&@J#;u3!21C<3m(EtlMK(XTFb}K~<{V!?Li1=1H=#XzSHF^{hMn zw`j+DS?Ekz_REGj*J63ox%l@fz9i%KC%+cjPcZ?FdgDNMa4x)_Up(;)1ob??wCw99 zxy>l%HVHaO)8PjbAS;a)3_od%bt|*R$ZOjGZtjG3P*1mK16^dfTNfslz*n`vrH6~l z!X;_u(1!d^OO?t(`;`LK>^7IcGF`0t%@1g4uS>dSnE3jsfU8Z<&6=`PN8Gt6qDiePB_1$Dq#CqfV`$cYu8{ zvrq$|m$D!>83=CEhOsXl#`XubG5n+k$nFXnG)_;Hgk%T{d$v)yFD>F~XiamCN`7V2bE;OWAKFk$RU<8;w}dP9HC1TmD~ILc8r7`X zLiGc%#YNRz!=jfB_PfbY&@ODVbZG-dHi@8ChMy|3H!{hUx}lj@x>6$}P4mL`WI~9!g_+@@@pz1SiLraKWumqI%hgf} zvD#)yHLhU|ltKze%jt5Wg_M8SOeMqkyLVC6k2TvyQ6Lnl#pF zHmT3>6Dl7TXIyeVd|+dho(C`tiHL><(t~VhRqrZXCh*hQ)e!h44#)8g7C##@3U>$G z@5{6FMv0VW-8(WpEH|BUDp!r+?8~j%+=WC32O2ujcWYofK!*0=&K;wAZ;(&xaS4;K zD8@cF=gk~Yn-WI(?GV0JNki^|e+-*D)_fS!5&t(5VO^pvs8Hsn&z0B;QT%;7QS!;7 z%K2s#LxX%|*OBdnUprx}IufplBQ4Q8&3J1_L1eVV*r%@t`QU1!d6mlp2T#v8GCGPS z%mR-DkXH|D#jQ?S+4EJ#sB7By-(jT?rqV;dhoIM!mG!OXm!hzEh9XoRq}t{9v&x-F za{H4HjQ2bXO5Q(RJl_amu!^Q3hE@BcvuY*+n&M^^t=&Vn;hPiDuj&8Yv~{?iBbe>K z=yh}|g18upi4joD{c|Ern65<{#U8bE@Gvl##krGrjo7lr98P^d!eS%Wd_9=l$?IVyEb0lmMF&*D?4AF6M=|VremuE?%eT>BQ{fJA2{Oa zV*U_nn2-2efIjsvSxn>bik*v_{Fik|KnSeX9KIWA6lnziJC2QKbGIOw$=|}u&gZjy zh(V9m|K~Gt>%l`QtzeCLFU4ECJ-z8glVPZu?}1^5AM(F|(rpRi8BNvgdauekepb;v z@57*qSfptbcl!T2b}*#+H<&%H|Nrhk$o@CKWtr0}W~kLO)y45MHiVbQk>WHnj=JTY zqL;tSy4W}B#P?@7FU21nbY?dUTS zr?l*~|0RfHuzrvH1ZlQH7D5z!>7dk+%iGFK;Zl#2Ll>l^V{uJ*MYpt#1M=K@oR%x& zlZ%j<0DEW2V^F8V8wGcaqaonoa;E%$RaKpES^D(pgfy!@^VxxgU8bwtPb~I4&F@pj z^A_ENU^CS)g+%h!EIuYmet%3>m)ZJrW5L}4jY_S-Vz5_&0y8%ZFC)C}*7$PEf@Gwr zM!mXP!{tVo<~QmscC~q2&1K{C{4af?LjSN-Z3y|AU*(!yiYgJ3pe4h(!RlR;FgDBd z7NT)!C4@GNzweeZBCUjAGRwPmHk5%Y>uldst3u00mxV%EiaLGv8~kv>?5xY^6JK+k z$K`Fu|2-0>i2r3?rz#s&jaZq zmX=Lih}?3%^wfvYg&2+(PB~r-H9l6`>Z3>vVnDzzdbNK_5PEOBnTD|%rfO2Wo#ySe8hZCqkk|?h|^YTw^?-0#^Cq| zT_m>`Z94{?n9?gmnADOh7Y~}UTuQZj3nz;LgfsF-DvUG5o(Gv-eHh2(NNVfYs>jD|^}Q7z&yy1>z6&FfWhZS8Ds`R){y0Ih^kQI9W1* zaC@-`&DPay(eH>j!PU!Ve4-1T@obM&0{WK+8J9MDne0SSwe{q1ca@HWP=gAO2NrZg zghr;hpGhDbW{+-CVUTAw5DkRaYW$CWL~(0*Etd%KO{x-9b;GsYXiF(gN{iflmD^iX z7{%MtY1>dhuB;NyqK=A+i6H_g3q`z8ZSDV}-z`6*d`3$Kes^z1wFsD{lAW~rZ zEfCMS9H;u0Z77`Y5@{PLnpR*buikusUTgMHXG0pqlzQqPn^%FIL&2W{d@PJxnI1HXeuHoM{Lz2U|0d-dq zO-N*nTW4JL=*;-(pFgF_5`lJW#;}qoJ@yvO$55*3gQ76HEusVu|20>%&4(yv0iP;9 z3nYshgUKwL)Q=k_Vyc9CuZ8CGV~x2iPATOdVq+%>duz!tK!ZOhUgpg!aB>`>Lj2rI^N?qS+^z8013*--9xU@;HIVVF;YSJZ}xm~ z&*#D$3HRw0_`7xg3c87Y+ccqP5PS}p;xAgd^uM@Dl(_7E)ppc9Jdpv;Y$r6=H7uWL z4;xCJTf6pnzOYbw3NJG@Ag>F?p)nfYOl$z*d77^P#l=46-Ocy0iTr)tXr8F-Q7T^D zNs5RPjV6f-;L$Ftv-tE)H~P)^SEz|^1T4oleKaH5eEnEyUzv)+=!`)s5lH!c>y!** z>Y@XiddS>x0gxJbJ7F%zNdD22^>K}3YFb@6Pu*hum0rP?;yhxHle&0DtK%3mFr}Yh zWgegQJQo|rU-n+g#BakY+wX)en|(6aUKRPb&e_6nmgh>PmY-Im^G@uVlKb;e$l5bM z4cGwod79@oDHLIz!m!>2&M}UJ&9vL<=%ovAjIL?1RILYvp%^ZzC3)3$cL8ojz9(K; z5z#a55#L8979wK)?*iM2lx0mH9?R{c*IjtIRRq!ACARDPa;%6m0!$=M#qw^`s(f4PTS6Rhfnyeaosst!rVQ|3>0Q;x zGo#_{o;(z_FkcS!yLQOSW8-nVXtA8w;mj{?Fe-!u%Q$#Q-Z283G0w$Svz;rZ1!S?B z`aXKkAT}rH?B|**Ez%&`{1Pj)?eR_F5|7%(!zqQZvp5-|HEps*^dMxOUs5DCfQVxZ zW@ka^X*yJQAKc55<_-;7&=4?^6L7JX%O$uLdb~{9mQ3TbP~b(y;39cq^kt|3XqCqU2-ePnr8%Pa58k5{7yHUucaaPSGSbahVq^ z(QlW>1o$Q7hj!7J&<%;|^!`eX9bWqq`@8tY;SWW_&zPg%bgic>Yu#*}_?uKwNruJQ zOf*G+_H?o-3j;UnBUME+e|%@-|Mr~ad z{i)nCC)5t|znYszKNklPUwr>~=DUF{cD^*o?LqCP#~iio3$;JTTCKl+;U~mxaruLm zZNZr?fWV}ivLRFbI`H$+%OGSKRq__={E$8{Ny zEX#2&^$RZL+m%=39xA=)4V(%7w#bZW=ZhJgi1FWbaVye+@{3{tsg&z)`)Wesb4b=< zK*?i?Z0>2+*qU;Ahjh|%g-ffo9sPRpduzu5ab0z*xoZ18mt^Tc4FMO6yJ^}J`P?EM zmF<_$iPxb2%X-MB!Kr*_DY}ssV$qKfk`{mSX6r1LOhV6H!A2^=)m<7#)~8U(A_cBsP8YwN?LA0!H77XFKT+j5YU}!) zuOWq8i<4%S2+r+(f#rSs8sZcCqI}gGDT$=Zx1CISJ@TM!tMB%cQ4?JDD5 zzv=qy9rD$*!TPR{7*M0}tHIbKz4NfYzyVCJW)6F?L&VW;`(R5Ex*zkFwLc^4ThPEk zES8x1A~QJ3Rw~)z^0(ENNVZL*57E4)z4{OKUFwtLe&; zM#^%e>-C3YZfJh2y!^cOW!JOvUQn_PGIr36Iy>l$Fy_ncr6!k|Wl8_zaiWXQ6mj$t zmy!1fE4UG$})*a zZ$&Bn$oqxOfg1n?XZ@1=#&%vTE~}SKJeHZlk7^Ovf0kyo7Wm-}F%3I2_?+%bx`&&!E&oyo?^ zO|pbxx&elyJH63A1qc!NY&|{~8aryIHtc-e!tqB<0geab-%OYG;QM9M#~N)T7b}w6 zrp;1oasmTZ_a1pZVd0z0jeZ;)Ujql6F=T;=MVfh}MNG|nngUpXojdIRJ=s1`zcCr3 z&Z>y8_DlcvJ#kzgeJvRx%`+q(%3}w#q`C#U^%`d@J(Yb@>Sa7E=ET*tIH2~gI;bcF zQySpx?0#PFPG^L(AcDj#i-r2R!9Dk7ed3;eiokGH&y{rjl8Q!qrTkYqLN*lT?g27a z&2AHXZSPOb{AS9|@-PC}rQsu54peC$xo(CdrhIcFa*5ykVu5;$^J{~ZQ+k_mF!!s* zm9cg4xmbhWksS7m!K%HDOnQIrEyflamY$_VOz8${=lNVq0}$3MmTzpP$%O-j{3Bs; z$)D>pzj^~kIe+%;$?vqUle5(374rA*a`q*7CTkDcFAds8p8<$ z`xOBh)ENo=0$*Az7@fEe^?mv{>lQEhbfM(bP8O~1(RO8S#UY&DK7Y_S%#ZQ?WXJo) zep}0UOazm4b}rIDYuE(R*BQp`Br(@a|9{UnDE_-!Atn~|@;^^Q@0J@?P&G?(DVR}t zRG%`~o^`qruke~`7Z3M2>!J&hpBCe?zKgCPCuo+IQnLghvWdvu*o@ zreQmZG--f@t_>2e?fL3Af-Okv6(MPvgy>YK-2emzLd0Q`(>z|$;Hyy!KxB~LEydLp zOQp*<=ZUJWp8*;}1xA)r-Ryl7F6c<7O6Btj41sK#ay zB$tghX&Nyv6OTD+H{0(dPzQNRNka=`<_d6``z)#Q* zfo#3jShYc#uNI`Qk}#MGUd$Z+-x!!ktNrU3+`jE9$rq_g+Yg^wGZqI95(yewz2>bP zI}SANRw>D)c0+Gv?%%)rpQR~FIxI|1pvPmAG2Q&6?yHz_n;)Ahv3c>3R}+sf%okd zCOF|?SWh)1&H);dA5$tFcwCXpd598BN-D~&5sgggoQ(a_QGT%g9!l%Wdsy@|QK^GJ zad&JV6FaHs{}*48`LoJLs>pSx{B|fC$t|$_o-)=U&xasUWf}&(<(!hYu?rl=xS#yM zxvIyNBRF*lNj_ie(eq>VjxMB1qN^jM`war9iub))6sq4KCTlSRCuZL3TuayGf*79( zPNOB<@-MTnIs!J3@sXnAMuKGmMWTnxye6bTTq2*d#4!Va#vsh;x%OC9jatUfw*onF z-RvCFYn#JI+j2c0ei9~X^bw_7t!-Wq;&P?OL9+v}dLU|7$FP3foj>tudYp2iblvk& zIQ6&^k9SezyCW7W*ZI%T*)q_^zGZ9|H|2Ks|HIc?2DP=e;ljJ68+WH@aCZwSP~4$F zi%W5L2o4q8U4jR9cXudO+@ZL;20iJ1&&-+meth}0k~NuG>zP}xTdr}6C*4-jR|N3g za#v< z4!$UnL`hK`9s%(HE#%~=0rX)*=Z-xtDB)2I?28fotZIBBKZ-&)d#Fu94EY&8AZcF6>g3&$9gbL5 z9{)i|(g(%3s1P?3arA1{Sjj$GYf`6`){7u{n#}tq+K8pSW~+fU1|_q`By$6bi{_nA z>m&8UDIXP0-{C-1sQVnMX@}gM`B89|XA!B?H0;!|Pij}3LtYax-1mxo661rVMkIXK zQy4`wtimcsjVqb7ZKF{qhB=s%_V=~q7zUN=TXVF>8TyK@a029Dc#+aDRuhMJbtP7itOVw7!*A-{lWm+f2 zO;dV#LbfaIJM|KFC+V35C=OCy)@y_lgk@2@@UqlFMfyqUtotZ4rQMMo0~qJap>iHB zSflml3~#+%Ev}>cp54S4jj%xU=X7h9(`Ej(LHk;QwC#=0%U(7;O13zUvvV_6)}XWX zkmhu@GIC{LVYypU=UH-rM1HEt-N}cUx%s<1hTGEeJeTJj$Ktb`hQ^Yi@fXP|Ai+1vU2|O|Nrgj z_t)OkOfkeoQ;WSf+6U}a+GMobLE+IYd6oX=9DRe~i=%NfP7ms2^&{A1+w|V_n_og95q0vcga>k@HnGXVn zdu3eY$tQjXFKLW#ObEm(40tS*=w>|vLnMB}V8zCD#0`tUSH_BfV{1Ut5eZ&+vxBtoEyMH zyY2R!OLt0;f&<52xBfZ{FEadPf~$|b#T@X_gtP>vP1z6}9V61ga<_y+2Ef)~x0qy+zpxlSA}Tcsr~* zFIYc8)OoZa3Hh7kyfOo!z@NEg2TNIV4mUlqi^bVLKP#E4c+k>F1F-0N&dc7P zZlFIF3##~i$aM2-qm*W};9eaXcO?=6mm_^=}^9~8SoTW|u?0dWJU22J!ao5G_{j}I8EXO_Ns}_o% zmXG%S{KI>bUCG-W&*nOe5a;E9#VB=SKDORK^|XlHr;}d^NA?0A zhS?>KU5lKHY-R>N9BL!XqFzOj-j|cgU-{&d)aZ6j|JCFx_m6+665S=QQlN=e>Yj{f zG~8UF9(6iqF<=;8l?m@GWo1v5e)5Gvqe)atXy=6XTbg*;I=WbFoPgJjTD?{u+^k-U zb74~Px-n*Ps)%p3gBOeKq-X6&7i;dRq?4h8E(KbjC@Tctgm^wmUPOR86xS)|)DfiC)9klPEaH7DOX0oP z>L9xJV>6V$SpRXRVF%}3dfSkasAz>DXwaZ}VA-2P=J_p3M7^;Bmr;1fKw$X1po?&v zY4y>I-xTc8(SMRGE$QRTtc{+qUuMi71u_wznAO%h$KQ9XejD_P^dN0{-U)IlD2zdx zvTZao9{0=}TzhuTrHsUY<4`vgpoC(}1D79d3SCX2*6FKOfI@C!oO}_C=bUU%Ng5#(@IdUGrBP?xfLh~$I6tJh#`MX-? zW_i9%t(jw$F7~s++v79&e4Pwf#Sx+S6nTnN#F2vN%lMNHFV=6#S`@=MS6h{|G|30V{$LlkTNPzUc}K>N4WdCYIL-Y2|38n+=n9PLsYfDW>DBU+xZ zz%hL3U;R#XFPC-(qmj)%uuD~|6(;cdXMqA5*$929=w$iLNnar877idIf@M05X{U6$ z#*}h5U{TKL#JDHgZC|J9ZRXGS=L;s$)>iH3z6vWE(w3bGMHU#`xY3TrerO%4Fk}Y- ztB+E5YfYl6(uV)j7Xh)q`htZ$mMX2p8_i*rJuGPm9$=jOfGYss{owE!3JeIhX_@+c z{%+k>t7|**B|uV-PSA&krn5+#vhoY-UHJAc9R3}(iGEacFxQvuBWnrXvH!RDxA{8+ zB8tr?E5oSAhfPWfDXj&+hDbY=8=0`*;9rDES&_872Z&BN3g;eB#tbAoi|AEx@gY=c z-wSRx9Yxdq78^am>a_SHp-)@2OT4E|LGAQRS)K^JB0d>E{$*BmT>vY?DEj@CC76BG zqg4(owoR?M57z8p7lj%=#~qp3u7x4y&q@gX4yPQDv22Lce%jRU)VDjeoZFY72o@j>)fn&N(PU9h>udpy3IW=fO;##eTBma(f%kJzjW>8 z;O~5*d#Mb+roB~=limJ{P_7K4;gcNB6s!=5iAs}8tbg|#w#h_xIV;ZID~-tbea(jN zpC|6*%jEUmMtDEg`K#FU3kyIplT1vhmjxeI@V?XaP$3$V?LgzkF0&kznt2qBeZmtf z&EX?G(kuhCoGDS$m4FnKTXl5j>u)*v=dsdY4Pa-NlSWbrnKET$F^SFRv@SZJGHfn5 zmJoOJnJnQ%*^CHJQ}stL@`>huVNs#iBbYQ=8>)&H$^Wda(n2X0Ys1~$1~DQy`t&fe z#u{30gnn)Q{IJTp@`lZ#o5FSPFbh;P9Xh}hH(4~?5;+hX3vaJCMw@sc;|c{ir+UPSO_BP`oHTxH-gfJ*@tr)F^dj0H5=S*ATrntAG!+wgg*=66UWY zvsreqeCJI}asgfG3gj=?*u6xz*M5sW+Mikx?Q-Co3{|x1$;krfm_m@1c!>&@i=N3so0NW6 zbmNcDe6QB!aM49JFC7k=L|ohI{Mr}Oa4l*zEqN8QVz$2o##s)?79hESXz8pK0qi>L z`gwDPdh-S2qHXdQcs}G6-LLOpt?(>01GBQsrl{<2sY)c*vESc)Kw49R+EjHtf9W?`^ z?|(dUKjJ*Krsld!;;uepEU8}@kZ9DpPA#XN&~Iy0%9AMAMAsAB;Y@QO%NHbuZM@_yL@hM zF4x(A?ZX;ZHid?5%oe;sQ)GUk9veI}8-e%Iu6~H27BX6Y4D_{`?{hAi z556WB`5`x-XKA3ao*o!zY0ysy2(eS+ZN25Hw{?TS_10IB>2v5DK~S}zAn*%smWe_Z z*kh+;LNZIz7(tV({*J0dKr1MESnZVd^OXsyCbIINOPuXB0l{ z(V6#dg2Vhzaw;Rxl7+>Ap|BwTPtBqf`FvBAk)V=mKCv%v97s7erCZqK-T+e@igJ~~ zdf6uXQ_Op@A~g`FCwY3~3c_nspYoFl>MzcV^|B3*6{9m!4zfZn`WTm7iIpQ`kx*RW zJ3L}*yt&qOt7c!)WeLO{$xWGAI^VTA zkF=#rNzg;@eiBz@dweF$b#2z`hp1#jwf_lb=MT7Gl7-9gg50@Jlh2s4AHSWI@MmkB zEX`DCr%6YGxILcUV+y-s+r%8+2qib7cm%^)G4_B`Z?6gP0F+0`jgT5`=m^){)*1;ce}g1OnOmMou8rLjQ2Cey3w)A z0oVcyC?A?bRM$H{W)W%#WdxbP2n;D|&c2 zY14>m5BU!Ef=3w855OA1Ivle^j4P{ROyCu%Kd)^zsv(|}{Zj&EBL?22QXLn}u7 z->WPAV3?vX{yQdmGVvJOlLh3;EPr~Hjy8NIorKd;2S+a4i0?##T;=%n@_QRc^mqrI zM>W{P!Ks?93|AT%yS8mjxAX}6Sk*q2%cyO*&lOm6+y6XpqjBHOI!>F?YTA% zp2Fj8%Lv`Nk#DQMiR~tXT+Lf#4WhhXTX?fJa`&cuUr5AH2;JcOV<@668yH~DKHaG1 zyoLktA&2jzWNBQfa%}X~z%IqS?l2HcL?F8Ca^Wt}@vT1A1*j@0l%SQz+t~YXj%^}( z{Z(@D5Wc9dyQfzWNx7CFJVjlO%R62#ku@`TQz*`9I*SpC$f5$GvyRszO5I66}FDa=c0g_*W*=*GMn{&H+I*I@81Yd9H!J^YAqG7w z7zr~OEtwb%NWq?r&^q=5$flFp_qETm;j7CpxK~(TvMJrGKL`cYNuz0~7N{pN{eD?0 zU-Cpe=@#W7l(Ej>)}JYsLRZAULHTaqFnlKokw|dhw>r}{6Xq5S8-;gXo2H%UtX;dR z2G0VI+RD{S|y9a^w>9YQ%hfC8W@fR#$NQH zeyyVnyP@W3OKtf4YzBq!6_j)Klgbu4APnOihTVYKibNWxA?E-kQ8xqTzX!n)`u89< z!)IyxcH=*ceG%(mn2K0Reo!|kysG2w_dbC6rM+lDE{0t`z#^mT52AnFx4Q)V{=Jm` zkona3@%CoYGprLKda+yGz{c{-tg7^S-rv+6SEa+BIhs*-BzX-nHB&z5%5Pcu;w<7M zcIU&QeV};Gr>A^Xs5abtz#l<8=N>P?QsaM@aDVcS4npwvSNP2^QL#|-|6Rf#RR!*7 zfIVLuwj6C#mDHk5nmH>yfkbL1`FfrF+d|%m!M+o<}J(tS3*v~3pEr!g%fjlaEsgLZZ zq~wrcMc)z!iyr^lOGKesheuBu( z-K=baO+MNHc&yGhq~_pj^{Wvl&ci^DrjdRnkYLje{=6~kQnKHGKI*n% zxNuCG3}%i0q5*plX=to&Y_UG-i_VaZc|3IHP(=Hip3VWwy*CySjLM_wZJW zc^k+xMLAgSp9Y~j|~in#x+QjxR-)nxJ=r^&dO@;Vm7FM7#J)deW_v}DHK zLIa$&NhB;ZzM%G4k;*-HRQwpiMcapS)EZnqV!>@+mi|+n7-UW=V~>c#zI1I_Dx?~X zJ;;?K0POU7Tgwn_wmrl(s?(5Z(yhGN|6|;U2ix-%w=gN%XesZ4+L!lg{$$rxD{ju= z3a`Psh7QN&EWPRxM=_oAJ6EoxCuy|f{dbf!Eqn-@#w43V#fjmsgwU;2PCwRMX;!nv zf$){;Fd#J{xvFNPlj9DubTm1~lIZt;k$jrSm>=i^Tn1YH3gks)j^q`O45}31A9OBa zIO~*0d)8$8gV18F#g>`A)#3GWpK7qeNSc%X;vOX+WK_JUFSxpKQ07Ukf2Sr8b zO5D-KNh^iXfMrjw^oVRx?;{51EQOff%VvoMfkqQezRcZI1Hu-OIlwb~%X5)Rj z4i-D=m5HpPBvHalBoeO3FVm>1hphsWW?mV#4jqF>l?}%C6*f?GhNSBj)0iB_x4s%Y z6_((R(bU9b?t}aDF-k}x_5B5q z>hAmPI!{vd7w*`t^5eFbuqgL1-rS30Qb}6kYC*umZ$|UEiJ;SdThrkOA&vuiwU!OF zs1{pdRxkDm2gzV4$GLS$*Wpv=`$Y5udM>f z%A$4IR=NKk*S-%82^;vsleX#&<~fUz7+wq=~{;-LyB-XR4UUhCut*n2M&N7K}l zjc|h2p;(Z_#+Y1;gNNvVr^zoDV&2{~z@W8O#IcGRVeVqgt2(EzSg93E82C^nIF$d~ z5<~b+64kMGHtXcXKS!}S+B4tF26CuVbv}e)A2z|14EX2g8SneHYXJ7n_mA)1Jh{Vc1Wtzl)wpD4ZF=d zjLGdAa&i-NB&EcrARImU7|&2S8T8DRWg+XdT%C5K)6)I5J2N2w)Sq~Y#_H?OhDl@( zkj%3QQ1w2+uT*!mG0T65Jv8(4L{jpS7ZHj(rUxjZ6X$VO3rd|v1mmTl|Do!LnSP89 zn}kRjhhV*7VOH-r6Y{FJnW%Z;D{7$+@Wu&kVpS9LynHX&nJ#BlFAsN%iX5teNhFfB za?bLv!}!6rsECKyq?5Sw~-+C!JZHbl+tT_cTTQS zdMm*=X-0Vg`Io`jMMGD*(N4ZMawA|6rP}%y`CQT{S6ZF-4H2fx;U+U-d8W9ozQQhL z+c=xk39DH0g`rj`_ZT6!rzR(+lbKxsQu?WO9RG6x_j$m-E{cMWpgpt80tB)uj|w1l zp~TXmNtRPjK?F`8!#h0uO>BO^$ynAAs9;)hJ_Sg0x{-w|W2{HqougdFZ{<5L2(*ci zbr_EO=19>LKyJo3f$x$Q6Z7>nptZgk3qVG?9{;Algl88L`ib<1p^Mn<=VLe5J81^A$HuVgOAEW)!|R*F!Q)3cTE@w;zrixUJg=yYBEKS>xWIQ% zt1FCQGlX|Haxeiw^pBE1!s13{7v<6b29NmIQfE*c^ME; zI|~lJIufXMfxTgu*6t(9m-Bgp{vmk41P`23E7r8!Njs{2s*KWEZH|7RZHS~W)7wv{r(-1E~p zJw%AianKL~P^q7yYD)W~d3AkK#~zbhZ0%Y6tm~u0-%M&{aGN&tNyfqG8Ro~#j3*4x zDfrT1dz#aGdnK++qFN#52bo3$LEtP>84aFX6-q=5vc6+=7LvIlK5`diUq2gX97Em+RfDbSn z6Ms4}mOTZdAJoV4Y`XLpMfWy!phO}@<@7+8dv3>4%9$2aqD^1!=X^xAsk>ECjQ#T1 z8Tk}@Dz*#N7&kPNem?|ii~|3#Y}3%L0ekafJ&QO`kVh(LQD+bOV!l#2yO}LvWXZO& z;iNzvsv5>Ec#Cv@zF!UEHom4MOvj+%9Jto){L0lBVSKu@%0BU96dV?Q6mn|iHE(qDGZkniRa8kA2D_2aM^alEBgw(_cLeV!zW>~MJuwBf_ zXsn4gw?=_Oi7Z6G+Wq_D@lQb~id4+1KB@)B7S^Gty!Qx%{8XgdFPGg`wi~$N%IKfEM<*pQK)9u4ZhCb2<8@@$PMpinS6yuv;1yBlz z(US{!%C((DJOQn9chtT@pNbvXAU=zFA?7sIQ-h18Z)RPyK9w(4w#Ca^0JG_G%5$DPi+Zkma_{1L9{ykM5njWD|N2&K5`07BZ4Sr*xd$n8{jI!UmaNMiGo0EC{D`=GE}VE|qIx-T&Gv zGD%O4m!|k|qBEI|87r@*e@-WS9+>vDU@SMMV4)<;pqICPvyipOo9m8^r*4cJsj>4kM5mxdb~| zeQ^--gVMw+%M_~)E;t#Y*MQU_F8G7|V`Z&ww!5KKCQK_W@VrEd2hwuhzn58c{<0E!;frx@n}`b1h4BZf8UG`Oj+doQH=L^Wq;P&*EfKIlh4p?If#22 zY-D32VgkT%}&4;|#y*Uyj_iM>d25MW~2E^-`e z*})y}iPv)Bwf8K}JGk|PBw2fH1(wlcFf!p08J+qDp}BRD7&13`l1lpG8;=_4HEAYO zH;5s@VJou6D0!(*v8MI0H97pZ_b&iuznpuN%*~L#=(U*0y&`L$0MK<`q*7**DY?%g zZO^`PF;lT8!z7*LmgcO3e#+lkWmT%9X@`9G^Y=%OR$<~X4FJS0o$>;{3!OjvusP7-_aGPlV#{O7Ey#;biSFcq0RR&HE2lUej z7xlk+@+&vo%L=4a361szt`EL02w}2YiS3;EXL}ua+MW{~yi8j?fu(d@wa1JE1dsXE z^iaqsbu+$4%1=KRC29@g5Ng19CVdipC3Geky@3xD(KKBNZyQ+j4ERz|D>ZNpYv!BH zV!RX*VM_u1iNW(NK?Hv7GkmKaWv`GV1siJS{{&PcGUj` z>j_QB(vD0G@9%FHFJwz!EG3pRkD91|H7p*}9yD@SYTGgUALp-HMacnsTaw%?@2!M` z^my^iaNKm1ojnfKmojwgTDuW3PqM}!2KgQ!Z;|&E=#x*<^)wgkLDRlWunQy~ZBJTt z_QD5UhDFB#VXE^64jGPB23FL0A&{t$VFqLU{CO13YUR%r#2x zAj9|SC{1?JeT9>z1K5;O*C#ybg5U%i(n79Qe>6Y#-=V{UeLWNV1Mi8Xo7S14$V5h~ zZ?=f1n@M2u*XAAWv~LiPOsMrly#I8`>kT<+@I8ewmm_hyPMe)dhx?5@(3+zW8a;x! z?&7N){lwWGW>_U>cfP+1_c1odc61iuvG!A1Jmt~$dBOx-KvkljQS<)883^F+5NR91 z?D7rIg_Lb$c;%644h2T?;_pMyuQ^MF`oJ|>0}6?9chGOEA^VCAd_$--tDK|77xLZP zhrpy|Tghciu1+;_ooyn+(eLcW{X|Y-*uzK+Hw8DOiRx0d0^UgOQ0?&+MFL}s{z0^6=OoX3>#5>nM?$1Nlk3!v@m}%!d@x?8g?cZwb0e8bW!L*ErxHt% zG03h#-F*w2%P9z1;FoaAOVKJ(v)e0b<1L4|e6sR2=~UMEsyC+-%uiVae^WLjnQaS+ z2WlbEg0-(O;U}Tx#EkrU|GAf_rk|Zs{E@-V@Pf9J26E#>JSWg?bFNjw+N=<_JDnbJ zHEOvV?I3X~wucgxAnHlG;ksO1fYj{?u_Sb!p(S)9ytvyHno~NH8kzGwm~j)DUh#xHRc=7 zl|tOSvG6#efSJ9b<$|TGfvG z3r1T^u;T=`HoEBhf>x&F{ZbXwj*+xx8$~?b7GV#|9QViJ6ZhBCDzK-KiTlkohoNE? z$#4{Jpa~k??yq;udsc%*{T59ukfQ{52u%_3#Y(a zSJ4#OcS(Dvf^S+ErtcU;MhkM!_pgpGLa9a0=^5G)kfSx-|GF<0Nc}3$wXvJCJ!j++ z2CZSG1aaIBI|Ka_5q!vSuwX`?R9w=B7$72!@4XJ-T%*B^R3R7}pUGfW)C!2qrwnb> zo_gT%QcCZ=)a|JlrPd#1DP8@pi+s_9WTCCMy%u^<4_#74r!ku&(18PVK6m{6aia_Mtr* z6dEnk`ve}_pL2TKs@T)k-ve4?8YjxCC#)yP{fiRI{0~epj==1#@x>iczOTB;SrKP9 z2st<^vwL9TE9J{SD0rkk(~$N}jf8wbG;Xm}$-KZiwDKkZascR+OvH(bL7XFwQXqf5ZgJ5S0N}xgZ*XSEo5sqICp&V}Q z*nx=Q*en9TMkpSJTjixor^Im^4nxPp&P$aSAZZ8eTI?H(C4(Z!lWt(Qd};9fMNc5~ zu8*j5(Gtg4ayznfG_J&9s$}_Hfk9&ocJ&Vthjv*w&19-C9xE4CGiZKm`l%T%@DFCo zBMDDu>a~_Eh#7(Je5r9r(-Z3H31nP3qG-b5TxfE9=WyaU6tsV+nZaU`gC#;b8ujx7P-)nejwt z*zNvUx{@zclSuBrFxuQBb75%x#BE!cnkxEq+Y3ewVNy-k3GW>FDFiSJv3nPULWJ6gjN+Ra-bA^^fYctFgo z{#^~`%`;&b?df2_>`FON$-^Gr%tDCWQ!%|~u~aGjA0pNGSBPl(@`i~c`M?PArODZU zY=A>I-QGU;VwkRh%hP@@asa>lBMHGthC$9Y4SX6CXsFRsUhR3u8C{rVm505$*4^c>P3wEC=Jm=vS}Z`) z4!VK)MsslLqLc%6yF<1;ni#Jl@)$=ra^@()jbd?+!p>$ZpF>7@ZlIz1>J9XK4W}Gl zwBmX6>Fu`aw!Cz78+G^KE0!NVxZ~84f?;|Nj)p1enS}3`z6SUtSgyoU^8}`IiO^a* zA(U)CqOU3dVb@0-i~?<>W;Hv7MxigG81nSpWIvsBRUSUS=xh)7BT@Q%4E3{PN-liM zw_ZL-Y)He!jV=AGGcz_DgVJcL^AAC*en@b(%*lA-+$o3u_6hqku+aqZ2vLLDCd&Q( zd`rbcK{Mg7eZHE78@o3%^GRo4w`RvDSP$5-n|q8w?DGHs%o9}=7}~jtmaOu;@E}jx zqT%@q{HD>xdjRXOROF%CQ&akd15W?g?$)yoj5s%@q^B~?Sbo5BAHZWHOya*|A9&LG z;pN%Fb(O>5oF^4x&d}K8=G>sg%4fQ?W+R?Szf~uVBGwjOoPVXx`D) z?b}34m|T(P2>mh7b6DswoV=y)-1aQg?Bf41&}eVLzxT(_$CXx2DOR#h=+>x9I%Y@r zNqq(r)9%J#^V(iUdgb|-H7IYYbNEQNMjUmNv$F;oYDau{^g5Bt%?S~#!UJPz+&jdu z2}OWtk*9{7&rRGkOQFj`oyhA2f|tP#q73C0eb|>+^9GS-?Xajs!u;O7pK!4><*~LH z9{28facM8!+H2`0sg_}-GU-8q7$)_shfPE%0*9V2f_)f&4JFdB7;4(91S{qA9bqgX zgsF5Q{wKhHtzarmUxi%suv2htcp*=%uDjRGfy8>p^M3OaZ?MB)p@=ENoz?B$RFstB z;iOXDU7<{LahVV}-n+rnwuTiz9GC0U)Z)PP{CEvDgmY8rHKbdG^E+BDc`4_ePWv34 z+czjLb`4V@#3IIH`rt+;U*QZ2 zclN#`qz0cmdR4Tf98TNzSYA8c{f3XptaND@PI63ET+0SY16~5F_z z8SVz^0?DmuyKldhE;rWLjbn}nq=oVkOSSXciaWkGtkUc^?{YU*l5MZ-lDHmCswXT4 zQwS&5-u~97&fuao(4Uy8mXOkMcN%9z#8@BcXB6IDD7`0J9az}0=x-|Wg}d2pzd@(X zGdIk!mEqXujurPj`!jlS_pJ(-$9-|9RqyFiZ;sv5_OQl#WM^&Mst}l?7fc9TCP;hS zS8^g{8^=!E;MhZ{XF8a2lHN%!UZiio%vh1wo%S3*$Z4>keP@tMBItvqxplq2s%)EN zxd|PwHrf6pjpn_-rf^Ck63W)dDoLzI3#17_{xC7lr6A}ChzWl91Rq#3G3fL|KV-8l z^mdn4)*m_zHjcHZi??m*J()gASu7Pm2xz~>zVcf6aYKeKwyZI}gWC5x!5o=#XRJ9=e)z=Gb@n^qyROG#+^67PK7KZVM-P4W;cQQd- zlhC#*$ZV|)_eW4;rG_-+1(3^hKwd*XK3i-Afes=!=eDIEu#bgUTt zjfpEHFk5aRybi-|9z!+LwHsFM>s?W-S`cnyk3Y{ZJY{eQuv=g~5p5sEPw%lGGj_79 z`K3t`ZCc%t*kFPEcI`+1O8`cw=YAbA?=tWHG_{M@ZqDLiAB>bHQ6{V*BUdiLf`Ej3 z`~^Q*zs^t^A+eKNI5WvFFNEX*boJ@Kl%DLrPQw2czy0Ce3V$sDJaI$q&&rmp{of_L zQpxZ?nEk(-PbhE{z=3!NL5{>jC$saN$~8@5;og_06PP+kPRV=8TZK-dBjQXH?Drnp zAv%`(Hx29r!T%#etf*m&DZm70-(_G3?_^I0hu>bmPG5>v4rL&Y@{>>tN*x7D%j4Q7 zliNIu6QTz8Q3aH&$WfEH$JN0YP9zsPR(}27q+(jk39PyuMFQBDE9;%+UBlv}!&bO@ z?0Tsul3RxbchWBxpt_?BB!b(jmR1P#stv1&)}@N=KfrE&q5cDWj3up8Km5JXhKs`a_J8vT47;iNYT7JL~tHi~b&2Rf{=?0mW zy0!x`@l4$h(8V!r{<{)6CVhGlX00IT&M)=j@Jhy*%J*)XYn$c?6s71vmowZi$TZUG zKd?b}O?76Jg;B6SlpF}1MXmGxQW5417h)oMOF}=svt6p^i>sm%l!^6%rx)(K6eEC{ ze^`QnEzXSUL35kr`ff|g!U2uKSFIP@QmDTylrLlmU|!<7?#>RSab@Bg&vcH=(;XZ z;s2BAO_aZhVoF)cwb6n@RPKw#SkbyIxn_S;OS~GDGkKv3h50aGBEww0WFmjqRDMs6 za)zhV6CovHy_$-2posQgvPoQ%~{^MO^SYp6oVu2TEbGRE3}X{AUl1m}<OJ{s|`3FAg1hDyLC|QT&8-Uki+nXuJHWVegJ}7*D|hUuEBR33)7iC1YYV^+c?yY z*5XsPA#@@lnJG;(ZSX132h@=v_hLcYDH$HOCwMQ@rq=>l!*#1E#J_qrNO(+z_qiS~ zjd6r7H_XZp%H1hj3vxmRP>+C{^%mH;$?6%P5LINKR*#AN*^@rH+{REZ3Y5JFXfvC^ z*{sQw8=hFGJwVzAE=un(c#@45F#Xw&GBT09qZ47089E94X#4=EExdh7rY7cds5tG3 z$qbR%!8TvA5(>9<4mOZ5Z9iHG??W`2XaAK9BqQBoB!c9+0vH@_&X9y({YeoQO!s^* zC6Zh9{l3W3*x2`?vo?-hTZh|k004ljX8x=BAU;fOD}-74$fBK4mzdLZu`E5f%r4;RMmLu(|$mI)jjQsD%- zA76gBrqm}R7*Utfy=lEd1qDSKc~u4;qt@eDaBj)p?rjbPDq3;=xbZ`gl=t7NA4$=x z1=SXUvwc!ut}}dp=+c^~g#9`0qj#-Hh|anq$Tm%NzFzjp8iD$d8PSSp_5QIYDEjor z!f$x}TM34S<5D(*2AVM2BfOW^Aqfgh#vbdCrl22c^}uTKbbO!TDmv}Hr8M3b-gq3F zf*`w;pPe}n{TLbU>bSgv`qF-{5O^#squ9ouKTG18rLW*;wn@R_wU#qH*5 zPplb@iwlnb^8wNSHQ%&I(0&E4{#m%kye`woU>FR0z})O-AU=s%rlb+_6_%({uH|8+hDJTsSQ zy1yv+qq!&Zdt`Chh}_~_Ig_p@KHhw0ufSv$OWMO^uKm9y$t*I7%!$Qc3Mq2I!rRh6 zVi!nT7ZwYFktG5J;C5-=lFvkyzx0V69{}?vN`j*l-RblYo)(L~U%}0aGJ-;#Y@W4q z7QbR2R}^Zn-ECM}9}@CyUrG{~_0u4UXsY$s?)VOMKgxj~i17HVctb^H3BbumzuXwb0KHRBf60!Z35Ej1xj!ai3<9 zJnHhj6SF8oRJok_CjOj%W~J?omoBv8GWY?Iep4Z?Z}dOu<2na%ap(AUGvpJ8)vHiX ze$8h)&ssm7D_99lEO%dg3NO-KatQ*%ryT+}9U|e%_3!1#qCB_x>2X?Dm7#0fO-s~U zeT|y?GC1iheozzN^$?7n&pN{VRswiw&v|NYedC<)+#QbMCob3&Rh8|`rh|Xnz4DJ{ z$^W;Og%muS_WvTwi8s+AQ#h(J1KKtLGwMn1sd}E3_KjPUxS2IV2_ra#y zsQE6xLn6NV;@QG$*rnl_De-jH z-m1qWbNi{do7ce-&ZPCXq(8m2PkUC8tR+dK`SB+WM66cCx;3A%na;RG=7X^=7g)sY zL!%zm{{eSw@L}?E$nFo{77__U@|px1M*X7c1P7(x-P#HN^LK+cy{qs#ue6FhKb?d8MCPiPzBd?i?|J$kSjb zA(e*t0^hF~1MOKH*%9ctl+lOySe-k@;+ol(v~#x^ z(!>=FPQ98oSyIJBopu31Ia3>WuEVG596tQy!x6U)b>bo2dezBIF3#Njkn-KG=3ry+ zNAYazF+4Oiw>~^5tVxEKXum!sfUVr4wV!(6v;$$-Sh-*3&&qTr_bUA-vxdf^W$6E+ z@hMd(%=2TIdMS2^IS+q0K`F7ig)tS8baJlrG#EeCBcYGQr1;t1TL@!~&a_h9CzZ4s z+3im!l;6ecMSSFhA8HqzVpxnhc6DbimL0D3GZnwW$2vpI@!}T@>J4cK?U7w~C6Zi@G+W5G1$;x5C{$K;afbaCdk25F8434-UcIy$W}C zg1bxM{FV3nM)&Bx=!?Ftt2$$!b@rNT&S!DORP+X)ckd5VYG70k%cq`M8^8A0?zeF{ z9O&kwRg4K^jY?=C1{0(=Hx(1t?+N`~5u~8C#VuqJHdLM6Y1JLxZ{6}&w+S1^WhFsg z{xa#X{oycbRpH5#xyBhi_rd&k6@i0-H%G>yY*+;*4f~D&?RSnMp>L)CdZeI#-}?I) zJ#Pky^=a+Tky{#rKAjcj3bHq0X zKkDCZJ(q#`nX79=EHslX$F}+P6B}0;9v2oG(LL76`pjXPF~{V}+sZ~O){Q^@@Nl>b zw)QU5QirCaVy!M}JZ3X#zs04TmICAIiOkl)CAE{PNj}7e% zkqzbx%$cOlQu}!bsl}ZF(MHqp@1*gUV0oHS>(X8j|6dw@w_~G?(<5LC=uo6<4_}@m zoz$Ln%hLt$TFKs&62ou|hk=T0WRQI6&3pJ|{&hyMH+0r!=cQw@%vLXMEd-+p=b(#h zJghzBrb+!14v|!P32sbhGiAhm4J-)7=bS#YzvT>kmYl47oJVlbpMRuzgGnr1ATYGKIt#&*< zrMP4fXrmNk{pb~fpBAD3i>2%e;im0qRfAz4^wtOB;CN{dIa6bY6&+R|-{CUpf|;eF z$#~zapS(Y~nAGxS4m=zgHESZ98rN$Z;eGwqV|1NTA5thV@E1VfRaYoIwj_7Xdil++ z+jMBbu2vmGpvw*V?ZG!LAnm2_IXxE5EmVy!3Ixd+6E8pYP$SewMt zPbWZ^fZ6_f2_5IQLNr~*1kYzm+P?>K?{KS3zE-2MCCgLD>F)%(PLzgGm zS6Iy?ToKs~nd^9yu$ByKYt`iXwSd<~bKLkKb2>wq-~U!`CP%UJgfQOs4B;^)wum8f zS7Zkto_lLWSgP{c4*GUB%P*y zne)>_zJk;(5~T~LjE&cx+c4`xu7-YtQADTsLbd;o(bPl+%~Xwn2Ul!3;?Ld8Yx0Ot zgr+1wS~S9B256ejkB!^W^?H2f378QNBUW3sMtTvnPF0&w3t4p#`@yUrUp^7oL$bDp zh8nOY+Pmnd;5y1BW5f39NV&6u7S6&0cQN z@8taVOu@;WlcXQ)c%b9i+cRT2$7`+0?Y~xW&o)R3=T}I!bvV;$L2uTt2-oXn^UsW+ z6`0x`M50Z+oGn>shz(7o@1DnM?Z$0yPZueMn!tlsYb$&QqnT3g5q8Z*pY8rSZPK~r zVTNJe$iAA#^P}*h_wXpy zkB)Cdln~T8vP~7U<&va+Jy&cwO({#ZsY><<$&RE%=8iOZWwE)P8P3~YKnF}t!C%5~ zMb`|YD3~7J&PQu^o%!-?z*Tp}ysR5CL|fl^sD*E zCoPZPwZ`m~>{jLr=>%YtCSvc%#fCPuc<%VGqU274t93=*KDCJW%s$Xa5 z1juRrWF^UF8-g8ywra71SLb6>!0vRo;ToT@-IKc6!xR(>`m%4o8CPi%*j4vXFd$WD zsHosk_Iavux=j27mMG-7>$%v`ArzNMsS}OV!e(ZP6kL8&;vx{nF#Y15N^5H~Zl-K# z3H%!WnOd61+LYn4ea30@mQq_&4Dy_g{KeP|WmmOe z-U9Itu#H~-1!!XaU)tcmr}3X~`2Q&+W9n<2e@&tCGz-&c>6BSSc41a=)$f#*anK91IzLDa!;X5=Tf2 zy5BJyb(v$#LmuF7nWh;VkezyhXDxj>c9&ek@TY?qi_R)8v_Pf~9gK{XMCon5_{VEB z(4esx+s5JBPy7=?Tlt^0ss&?hU)sO&_1wz!+)nM)$tPqQB;zYSZ28nKvR%tBY}ie) z-##N4FEd2n$b(jmjA$R?9Lfrw(;(^vlCM}NkMb?YUcqetwJIRkY544kvAG!<5k>}h zU+r)KKFUsd6%H!q)}0|BQ0#d#>vSo9e)o_CPQ|s${FWh-@G9j+s473KiN)yc%*B85K zzq1y648x%EqMb-8RozZxSGx%$0(oY|7wjw1CI5!VoH_$uwJa&zY`@NO=75ueIb8ZZ zsF4rmL2g@}bGcwOLi9sn=BxX<;TBuIu)npJcV9IK*C^gW!RjD7nfhctror4@^TE%i z0v76mTt&nFBO$wlG9k{RgDOX*T*0wj?A2;U+tnDq@%Sa5-aHYwD-U3!#hJddzKS^f zOK>o9+NA$a*c%FI^z_vA2HHfwgRTrMfas0m*-BC7V|0AOPDaCMCM<}eXKb9h}Ch57zF~bSk4sGP1+oYI3bT|7Dkv7aGp-GW2aG!ZW1!w7BrL zvPLiNW|Z5VzrWvjcqvJ#)u)MG=x78T+T58-tAgk&GiR;gPQSdDJ7zo5W*`02IE1=b zhA!bbX{X!H-|jYr})fcAbMq%*pxgqxXb08ljx&-}A^3w<~E;nrbUP2hep$ zC2_92dR!Lh}v(YDCx_=Vo|Y}dF>Ox6kP;pDmX z1xImxqy&v(67J&T6Eo7+Xtc&=TPKHJ#H8!g@wJdJAmx(%ms8j=QoxDQ9_ctT_;6UR z{vsSyI4Ku*PmJ3bm7~-#e#c=aCSlXjrQ`0%$FpI2!u?^O-)nc5bKxG0LNYet zFRRi1_ytOo73#ahiEg-9hT3ayM?Y)^G6VmO1re@>7>FGyzw9Z1GQ83VR9S!@9c;fb zS019-6h0C_pj7=Xd;N4&_o|^%3Kw#;=Mc`p%JV z!ax0FVv|cET5Pcs!I~u0SaRaZ2jP*));hs`pVyzw?Sef0!1Qq_etyCLGXi;0Z&CHa zt{ikN^fVi@WzlnM&%Vd3W0+iNinG}?-mxaC?W+_&*@4q@VsGS+TkEA_4E{WI@&hlX ziiFjbi`%R}(dcqQRW70N*K`!+veDab+bOA=?^y1b&8{@w`=YbOM^g4HN%-9%WqL6g zwBM=AV&!_+g}A|1p3!R=*2RHiLCb)Oa>lR$uQh9{8^C)m-OVa8&Q!{br5o=yA*+1@ zTfNo(hlow~DaI@Dzpb_$nd<}NUA<&0SUyNg+=)9j!UeAypX8%EH)l@OBWQr?266y z_>HMxf`@=)II@CqLyltTo__QSD1|e6XQL#nXDU9BDE<0%Wv>->d3maYMgQ3MV$F%O zJITxGqx7Yv;&#m}aC(>_?r*bi#AtG?dh(5Y@2GgI5xQwRY4Un{KOudl;^4@rs>0jc zc0ucrd9dk|2n>fBYto=AZPp8AG^Io$Kjt8h(tS2LJpqd5ZHhl5P=di|MCgo{p|^N2 z$U+nuKp?JZ!CXlqMO8u_h^2Hv{3?+*xqop2^86uLEEOF(Yqg_cEvdfR%=>x0e6YCI zKpPeJi~ys~RXjx8^C_Z0{aIev*kc3OPwhEXU_aMyu?L0#F|n}^N@VM3$@{h*AG~@d zjor{&3aFie>+?sDNxV%H3T~=2oYx7%r;}V8bsI#Om$1e1Y1kPk+&k}Y;z!8`G5oo$>u)zwpatXZvg^>%? z`{m@s0;M}u7(unVp!$JqzF^0)yv=LMP}ji=`OaW6vOq}*%y`nFc$>)Z$ssAI_;V>a zi8K3PQ2JiIAaAIckr#WJr*h#cMmGAbvG*R-Om`drY9;K=)HfhVBdO_!8|5M}>#H~2 z{aYc|p7d2e6i@hI`sqjOIfM6z;fnlJW;fuNdYAlaDA{x$tYRI3naj%t`x~+>wv%+K z>vIvj=nDB&7QDCxtxDVNN7gnPF_TBo>J!^{)v=pP5d5rDdgj9zB-wGXNB|)%y7nqt z#H9Ez+o>GQiztWiN+SrnT$cS3{GLe&M9#&hS?lA`F`F59_6LFC^hf68UT-rxo(L!- zx#mo9j!OC@9c(@o@iAHWNNdi_JcNt^MH)SK5nMuclgelMskY)Ms6DJY{APr#Rz2nr zvLZ0?tOgiM8Qj!@BZp*wu($v|xvwn|?68aV-S~e;6BSr{NABE|=V9-QK;i3~sp>RV z#r_q!h4I7H$zt6zD>sShTZY71w>8fIH8zu7$df!R7gPY}iWuj|Q&4ujr|#cG?lqvA z6Ibn6Cg5&Hz|&hj0Kx0*Z#nLB)rXu;)_5E}zX5pW_K^tYPH<~;XI}4^yRC%m5hCgN zuI0mS#pti@O!KuGfmF73skvibS{8G70&fh6y1+pNIi&cl)pxv*kUCT2S`<(_UB^>p zRGxA~Y#pI{%mihrBy5^RnQn*a>`lqJHmZO!xjX)4F6UvQ+Ia%obl{7f0@Z+Put76> zG>Wj_&?C8GMQ%_D4OqN18FA8Y-}N>v@F(I**WXHliAr6Ip~TXj5WPr!BM?IC)`wP! zxvgYewhPlaZg9#>!R%e{N)O|beS~1<<@bwt+{yMk47;5X@qnPl=9s^L%_q^qME67} z_^yNW@ToyYQi5>KNPy?3=4kM=`;dd^D%UvqZuQG+Vhj>RvwiG5L#%N{RZj0$KEKuI zNYQW9Xk&xb_2vn(3ot#yLuFxryWEWJ0CYVq58n0es>p&AKQu`B-G8oWO9~?KsxS&` zRPtu=7<#htxvczHO8>6im-)Gt+jKi+HKSMDdtZ7tdA!HXF8q?MT{J4Xqwrczj|na< z2t8DMx130hws>o+EEVkH9qZP?B)3BaZ6;z`vh}JFqMe#PWRK`r-5iOtsPilMD0>zG z$)-8m?Gw4a`_VtFu|^tS6|G3;Qh1f+K59doN;5WMA%BGG+;*<1symdC%KRnDa6sw3 zZ3J3>rv{71AseExZHtw&A46hWgewM7bs zgL6cLExxG%wfxh6+be0VeN58ibRh}tzQD!knrboSFWbe#O-BI3?_*UR9vU+HLc2#% z@p!BzT(S?U1rCc-#*7U=eR3u#DO0ly zeVOBzZu86MVSDpJprE3Z**3=ZB{}0xp`Z_BOc@^>e6IBS5+9=2s zsqXKBdYm=3A{yCaKb=vHl%9V~Jp7!qg*F+CAArAHM4sJwj(HPuvKva3wf}f!{wk`9 zh-=5NrZpV5BiUrp(R2H;BWVChblW34Zj8vd%=C(ZF)#{GKQ97utg z>19lWgJ^B-TufvX;vG<~cWF+u z7yHH_)2Tu>gwtjmc@i(G&S$lmNO09O=sUu^TvI#!OhS!v8@SCZ&(tz%S%V`d(7>;a zzoU`5%;vwVj%Rj*QUmbVYY=ui4u|SK&o>*n8HQq9SslGg8b#k5IUJ7hC4W9zW8m}7 zel*=v_PLHU+&IFz5zjvCFRQ?&S+s9dFYYsvVM9ChOTsKQV>9b>HXS|q+WH`0qT-3+ zMf@eK`T*fduxA6CJ%!3zKM8F@H!*E8e@*~Jaw#;?R#k(&?x* zZU^S7*R&F2V_u6bmhX=GJTAUBvs!mr0BCRc$cFs4ojtN6)(Pu@v)Zgil`webUthz&59^@`QZ&ZjSSVloGToW_38f$#U zDdA=-M4K5B@m;%tgpE7`W%M@dc0Gg#iY52XYnww+)pZlt2Imc4cZ-!ywg&t|M?yLM zYv#5V9@ltwW%;Y{&F5e0Gl?!PfGa7|{mE_j1o!H``FUstnCzkr0Q2;a{#GK?JQhR(tj#wEk1yAOPbwYPQLo)bj}o&f*I;t z6;n}ZmS;U&Fmjdr5#Iq)SvZdCLG$dQ!&kmA+$W#D$ldaelOMHkJ5&(QwSnC2K8hpF zH4QC9K$6(d+HTbBAXLJbi9JqUNTMz$HUv$mA>wME-w}agP8Tq>v52tEOrHib;^d;j zk*QYNXmx>aAqOn3h_%cF4xeI8WjMl}p?NP6R8wPfDi&HzT!IStp&;%J85!w%2M+_= z+7?H2O_hUzzY(T3D1sgR%}OKGnCQM{3*5Eb&zd-SR}b_VzBCMA@-yV&RpmNZ=h%;?5{DBUws5Q1hC3b9^>qzGV}EBi1Eiz?T_U&O(9ck|6Ef6TcMC%w}+N7JS@j~ZZ!O3D?| zpg(uyxy6y5H~807q(wp;N;$G zE?A6J5-Ip^*77=2Cwyo`3ZYL}D2}}LsQt7GZ*7##8@2y9y#Hj0?isz_|8{WP`j(jX9k@!1rfsfegZ{xt18pYge#B`u#`gyyAxkF90FD&b32Cbrs+ zp@h)42cRz*8>69tgO9HXT;rf@DlaNR1gpLx_Mgjc>3GQK4$Lk))q%*F6l~!nh2)&u zEIr_jU?{TFzqX-buFOQz$%IG+3>`Oa#ha%-WJl5heQq8WF^EX?k~iFcagPIb)HyFE zNxdo`TUTP9=nft$BjodJ-^LO2*<$Y>xPu57RQLaAW2_}x!k_^9pNoZ}jM7elg z6-!;FBlrjrJ$v$b-nt2+b+&SG>T7%e`K+u0`^%u&r&JUw0!jDMwz2a)cB4e;7(sncAJ*l>dH@8w`5)JIfFpq_mK<4ZQzId&8DAN7JUz|SQ8?NR8J(t2{ zkDFOFPTfID-6L2Sb|r5CEB+_1E5$I3s&i(P>!Aua>Aed}Tt7?ZdX&JN1N*G5sEciiH)qmNocX^qb$oO8cktA3`_Sw;loMSd$*3m{?bDOHnIpVG6Oh-!Iu+DjoLjGFh zeh)Y0CGy@?G5#JMSGT-FNj?_J=t7Mp&!H9H#PLEM47HPs4xlweNp)x;TBwuqVhar+ zA^4(Zv^`P6a4SnnK6ll8!@+9aP=rR{86BX*HfeB4x2uajKl4DN6TTqzI(>|j+q{#} zTh_|tmR1!mUh%$k5kx^1wcM}DUYe1@&d=n;Fz{3NmEQ+bebwG>9xbWCFQo9u=mMc$ zNH<#ws&xQ49$TL_EDiceLoeNfa%}k4gj1U2h4dC`H@q;XlX6G|36Q$~cA5t#Gq3n0Q*M9T}ET*RTj-Z58aC`%=) zx}(iApHx>g9xZ%n1$83y(+5L1nJNxMK9ap0GPR6Rl~_!pHjAffT`kT;ncJa6G6bv1 zGXG)nlKSOAZ`ARc*idg;vq(ARx0Mx3mzK_*v#7?HO`bN)vguCQJ-^FdspV9&tuvsa zfy&J*)Ih;0R5Hc`Gf43EHxQRwWK18y*s-?uz6Si0(Te*W)T4qFC|i-(b>59=f_sFU zKOC`gIxKSU@j|wyfLC0>LNK=i5zm$_hMys+u(wXMrcE%r-7_K%vnDuKJVK+|mzZLC zwxD}nnC0C49qQ=bf>0Y-=Ptu2Sa#4niKseVtatcaR{{zuH}pTBYD8Ya7&+m9f(khA zBwEanV^8s;BX-+!GZkd9=I&;%U#_)ea1TaPKw7zj6pJE;OF=RUq}LNb0QddRcVf{s z50)*JaNq}fXE|EUI?JyRUTCPWV2FrO5{vh!2|3%T_>-FGLncyF?XR%BkZ-w1p1-D7 ziML~OSD!g8QIDyLTCnm%QPZ79O4WWXQGH=sqE0RTKt`y%jq~#ojc(39u$sy*SNCL1 zu9IF!5oD&ZZoyJpbh`6Hil&c!i)PgrE3aW?=r0ag6r}+-<i77`nxJ$B=j9)od>0 z%fC4l5fm;M&17^0N=4E&o%hVAbCgz3f+4jxy^8_#hw_?+p|@kQpS6gReW zF({usYqty22R^_L(r$dv)fj3U(u*&0*Gh9G8a_UVPZ4l|+iKA19p58tjH)nQ0T0S$ z)}}}^9!}Nwqj_e160y5ARVmNq7}5i!ZK<+ZK;;G%lTpGGp-}&Q@oiAB9B;h0nlxJh7LJn0w8~)9+&fT7=*o~%(gse) z^G%Vt+0sF?MPFUi&OHtTembS-91zgWk%%;s)usyO2phF{Dpeo9OUnL)fx#F0^-P0f z{#k0CR+1-%DUEyj^|`06STJm7gBE7rp#0&#F(<(L;Y2jdHHBFPst27SBEne|nX^%SYltw3!$cYA6lXBClziB}$|quKS;V;A43>emK0 zYP5Fk4?57vigwXca_T}s`7}xBVn+tc-c35(DY%BwZdL*G8y@Z5zp12Q(Mo3>ia|It zN9v@v@LH{LtrS)$FLrH{Mzg!`4z5!84Ds@g)N(JvBM4h}N1rjR@R%z%Rv>b=D%q!k zA)ye+XSwvlE0b>3r%N?ov~Q=3)@(-Wv;K4P^uOt6BNnFt>_&%JfGCpTx{vf4UP2(e zt@lqT*2beL2y$s0SqJa^3Oo;RI8JLaF(*xtlUm*FGzP<~<5M^sD3u=*3%n<9>quM^ zWcxlCP{Y`=H}HpQsY7uDZU|Y*;S5x5G;@x4vSx}#HBH3v0Fcq`t}l_BafQJuJ4D^ynEqT%IMVATLBO%V8Kf`yq9_UO`zk?a=O8)P@%=Xj+Rz#-#))Ku;R<`f$(+?N-^2PJ|J)_$|J)_{B>BjBJ_!Yp z!^*ey^B(M8s*E!yvMnUVOJdC^*bw#O8^dcYP?hqR-kii(l-#G z8;D@`>k85HWWDixhbm7SgZ1@qq{{WUPNb6Tm_41)$09}<(7X@;w^H$yDPj>L^?~&F z-S=eS)DX`zW2a?u%kM0j783FH#>!0;PLly^SHtX6A{r~K1&*V z(y~`}-eRBa5cj41b{`?rS`?}xWQI{CHEKHm6$aRr&Z}W=-x=oe-j{4}{sK4-^Umuz z5A%{uZ4>vQw?42pjj82E+gTc26_O4Qr@BK!rhcRyNmdEb+Ad^Fg{)X&C#lc!Q1yCan1y!JlXc0i=$Wt9a6R_hB-d^dvz<{r z_Sut(d7aKnnwV1cJY!cphNqxS>3`ilqHnq8QAg*Fy)JX~$FkLj4#zy)sU=;NlK0a| zkF1#Ex1JSgISv{2@+ur$Oi;hHon!C<`E^G!!rsY;upYr_hCX63Rh#7}qiv+Z+G33v zwLh)ua%krDy};g7i4YME|w?Wk%5dUuZT!ZW{YIxcb}Hc);SVU*)B7NDwH=`$kLWa z3V9fZ?Usghq_1?a7mIt~H@OlpCL#W& zrJF#2i7v1G3+t5aXE?Gg#%YN#TiO6D1q1P5s|vhMoSVuMJTRDK`x~f>^dnBSFYhnF z0ayeTdrCYgF>(Ku4#p%vFZc-b;6Ophwbjrgya)yvQ5?<=>yx7c`@?*n0Ruq;^i!Cd zxzho8DaQ7gtN?WMtc&oNw*W&Eee}sFkchhRH}uJ|bCy_Y8SNsTMchdyjcA7Dm?edi zn>;RjaV<)N|cP+)uzn@cBzP2RR}_cQ`lCM|H$A+^%;yCe1y>ced3$y@fos~$ zL$k`#AX6|Wss4$)a*)9dy(-LUdZ^06B;`BFmw42-8Yc=FD6KdWT1dhA)#1>xlE;y7 z*8!HLO_wFbnx$TiTy4fW*QL`p2L@TncCK9AJnK#|B=+Z->;!QSM{mMQ z?O0nhlR?%CP$DufQ?GVWgEEpu=8{6K%JpP?Kbf_VV05wM@+nh&rekC9^~o6rkRRxC zFt2i}3@W$I_Qs=c9|7e|C@bc`>A3zX7g~Mcrb&XjE|u}f&7r355s1AT@1{XCt0Rx zeh+G(8TT-Tp93|db$7@El!|7vmMS;|o~x|5$S;x7WscJOZ;gwuXBviisdsmb4pfKp zI`ECxcLWm8!ni&WBpIyv@h6c-H*l`T8||c00F<)K+&)jbO_C_K6e%#~KThw){2K$y z|Np~BH+TOUP25IsC4JBJX*>4VbyMy$_S36>Hw_7welzi!Xth*|4I}`VRU)Jas(@}axux?*uw@co^)9XlI6<3 zH|1jeKhqFe(yn@0l+OsmE2i*)^FCWlxjTVo1?n{Lmzh>sQQ`$NsTe-e+Z4i%V2jVC z%G>dUa?J(+b-TG!9^sn|KkWF-{HCppv}ONy%vc5ETz*W{P4+3-anSW1x;|FW!T=}o z6AyKEezcKkx7$o+Q?yw1;OqSh?F&^IQ&XeYhpl1Z8tAb}%ans`py`pR#Tj`#`}MmV z`n0&`0tt?6A7s51#l>Kye=*|lS3Ow5bXRJUq1XJ()Vm{Y=CR=8dsm&!{c23@>#T8b z(hhA#9;q-$(BDp7`8d*$>7X#JZ6nq*dc( z@%RuhbZc7TM@|MukFw>r1^Z=`3@lMrDA|y0u5QP(6@6!a`PY`q?IlR>k89CwSp=|| zQByz0uOr)ZvT<2^SunY~v(9*|ME~j9m8$2}A}}*lJe|V+y`*cU>1FOT3^;a`Y{p&_ ziz|NCqk*AH5yLdU{_+J6Ld;K>qP)IXh>uvH* zv{18ocXS<--|T*fz{`?U-HEeNKTch|>|d)*%n|5>=$zgXnc+g&?@5;ZW8Y5;y|6V6xyrGt%5z8V># z!!qz*)OzTs{G)QrWWY2^Y?gIn_{#zq$*uuvD;Cdf$+{y1=GURrve8VjI!kTnV*LaXIBOHeHh*4Q~*hT%n zPY9huM+R{S8zm-N+!^U+)5iSWi*O+0l<&bjz*a$V%aH4m`gFltYbhe6Nl$}p3m4%o zv*}N1hlp%X?#ON?+1je3dr6e7I8EfNoH3wH=s80LgF(^xRp;nEJPg$&LilCHpV-5S zwQpWDMSXu&xGEvh$!pT)-hHWUCc~mO+Fp9q;vbkE!v6K&ScYO!K*&#AQ;o1YE{5`2 z)IC*Bbd2w*sn$(^Q@5h)Tu?~60r9PwOc$XaEI^1-<=5}(dMp6$2;lZeAq^}>%fHBR zYw~f#eY`z3?Y|`=6!b&L4tcpFB$NzMy!u{ZkMv;8+gm~J52OmjINTeq$DD5>h!0&O z>=s);TH$eseRON*wbv(E7RQHI(A}1a(X~p37*a7E6T6MunN=1W?L}oC3;2e`LvsVs zJ_GibFaUFZq?#LLCTuT=RkNChpF>$Tdrvo=_5~V$8HI94b!Yu#y=6*9Ju`b9%giO= z7Z;AQ=LAcYNi}L1hDG@PJTsU~B2a^EF2mvn>a;>n_qHST-{nQBleB7ODskWzIGxp7 zM@l4MG6$aF<0Oq zeXbzljX0}UK3@0x8PJcz>h+DC&iDbn(xEiPsfT2pA9Vu$!G8P6#x?}3&mudY3_AHP z@Hs#oZE*Zut9sesyuv$PmRx2rx;p(iA0#r*h&%0=Y&K6qhxGjySmZ=OIRAeVSy}&Z z2u?8mV|paOS{mVlwr+QR4_}%B|6r1r;Y6fc7$18^3&{>?=`K=Q1cRNc!Rd)TxpbG` zyt$`O!B#!4pl|N_Oqq01BE7}q5Pe(rA^)G@Bm$jbM(rqpfvl`@i%VTGz#0pBykpud zqt?{J2{{OFIiqoH?9YzhN$K~5beE9d=Isr=k`seLBc&xtg5>snGy7(0`#44 zpvFP{&M^P7XLB)Q>ANon|0vf2D;NF^NTN@110+#OO1LGihws96`=oDG@k3$jeLibq zo%R3v%I#pdg0S9mxQ2cABO&?VqoQy}*<3_yQJ@^=R`!VWoU^530IuI}i-=!ssn7K@ zLLQexuKVG)d62+@z)IUb+4~T7OQ?%sJkjfJZ?GS?Km@Ycr9o2Tsp2DvMD?;MV9BtD zyt0Hnv^d7ad2}h<;eT`f`2PvrBCKcS;H|5|7I&O0?9V`QZw0PbC>Hq?jucyFqQ8qDDdnF4Z22H5tqQd@Yl<9m;8#!~G|Si{rNRE?Nnd+)UP5_jg+9F>i?-`-|4^{jgFtMgZ5a>ITr`|BBvL* zS^$-Px*=p5ZrDJyyWGivD!+oR}mF4+rdkS?&>Y118&m)S9RxD4svFf(= z_EKh=o$D#7Q036tVYrq5Ys7r}c$ZpX@98QjbBM^k`2!2e(Qk+p<_2Z`^VL-|a&e?D z)ScXRq_8)FM5(P;2IoQcV_8TSFUOEdR?8@ERc}f@f@!o=B8(uoESR_cn5}eO`wPoz z0wm#bqqXYK%=7 zCtiWGnBwrze&A~YA=10^RlcaX)M1ue>F7z{)$ii};kvjB{UbbGN#-sFFBA1VPt)(;YiRTx zL;IO;$&+#FcBxmrysxGepMKDgc=)}fwn6B>>BA=4o+Mj+!DMxenjp>RJvNU)Pn67- zaJ>ZLcpGk`s~^ARZ>kxPc*I*Zk2C zA(#kxBe-b|!ECO&Sq!^_Atu`Ha%bZRwS#IL^#+La!zWxc`DMBWrRH z0v&T8o^0EC+Xy3NIg2V@cC4h&qKf@La-$}fbU14mx%a#O=AT13`?pM^L0Gm;UuuEVGn zvr&DzrM%H%UcV;*fsX-1?HZFef^A%s82Y^9yHSi5FB(Xu>$RAcF^B8PPFBIw47GR> z&u_KmtBe|#Sgbl4r70JK^k1m=de^bz|tvLU(s^LR+$#(&jnrL~AQG*`6CB z?c3YRk9$iB0xWL7<4X`m{x!H`;({JXt#LnA@va4ieW+k0>K&L;!D9wGnTMl|`mlwX z_QJO1J^I*+XK#WN{_o6m*zNLvnd$Z$E9cajC~Q<%W|~agNyKwppl^f6e(_&km-Sy_ z`oC%3AZ(d2NA|9v^HFEms;D{ja80Hv!zHy}o(fW(VJm-p!#YQfL2nSDw5tKj7l)>} z=IRFcT1{V(*37UEOZn!u616MxsfW}ga>Jx)>>j`?&T3Nop`UaYtUw?HJ(+a(*BlPy zEWU*^hyQ1<@&o&CQ9;;BI0W`ZhXRTB-p)n3|67Yl{&!9#2-6nL%AGSORF zY#P2)xbkR#T8qWIrLkOzAUZfMH-b*_mroto515kG>WT_aKWmnMhAdNFeZX+@MNHHy zlj#&MYLcKN6MFq)&Lop8bhJn|R;>jV6_tpczEo#P1-olCvOa~NmS|Qn8rg+8?!+uY zYs+l3hWu7i6DPwAY3-9f+rY4s|FcQY*#ystE!gX_WT5y;Kz%)v`H!O6u7TfX-0@J+ zeRPb!%LnbOk>9am_XdBJKnKgXg)tf1eI{4h%mM#fI~4w-!vQm}M#nNik30OAM{7H! zi1o$a>*-YJREm7J#*i~xVvYP=H;rS^)C82=pf!H_9}#_ZK;HMm%6Xbpe`dj`g@Gox{jj1gT=+qOb6lQI9Y>=iea~F;g zaN=)Sk*8rYlxoGdoN?(tF%lT0eY@Vhd(xem+%fCw{&p&^1LHC;u`U?r*+Q~kzk!2m!*%_lwYXYI zXaX_J2^>&6nRom_uN(j;2(8}pBs6{Z={!qBd9~3w%{k>+^iAstx+sTTuHD!ZM>(s% ziGgC18Bai1n7T*^uJ3P^{vB%&Tq*5VrmRQf;?F^xfpQl?e5E3e&L^5a%_z5vO~aAk z3A-2hQ>|?rbJ$LoCMK7fdDG+1NZp?FgLq9o=EQj&^A|ojhEEetoKC9c-Y;4&js z>ZUi(v+Alscm&7EedPXcr;Q)UKOYQ$?A;ct7IU?eIxb%#jYvrxgjOk+=c8|lVst7z zFST>&GF_iM+>=zD5ia>MaYMl1sO9%^dxLN+M!7IH>;Yk8=6-194!A99oB2oJCM4q9 z@2_?bio)GGWE>cyOz&<{^c`EaBI9xrtD(6kK+QLqS7JzIiHdZ?_*DB9 z1m$Z$W)=;aqPlPH=bO`QmARWOm#bWiRxu;qEK(#}#0lcHN6I@?DRj(v+GeKt;9kB_ z=4Vdc69=qe51jDwO3`UWm37tbzCRzimGn1 z5Z-0x?Ms~zOeP_5I(SD4H+wp~2wN1dQT&Dq;=VULADUGgNK=cD!+6QN+Ci8q7-?Zs zRCAJ(DiwgxDt3Lc#;YL5ESY)v@xJ=RTB34Maiki5=Bzd9GcGaOS)D1`LHK%%XA$q^ zw)HL)H=_MJRZx5K1dS>U$C2e@)-C;ADgXUHna3Rt zR?JrP`!?-23~E13LbvY_C(UXM-J0zSc3fJeY9iW1jZ$8onz2cqxqgRo7ZH5>fLd>s*Fb>TjWF!8i``Cko?Mv@ghP+x0Z_r>^>m%RlkK zkEZloN>QrO$`8o=Rbf{GZZ0O^uLpD+(u$6ue(Bqrr1i+PN;CAhZxnCEo?Hs%$foN< zf8to%QgcNh)Vedb&{5TNYD9nwU6MH24GzNrgG_Zf0dGQnx)ssNxR|Wf_j}C z`b&oeqQGby#CU~2`Fy%0BT^Ib=3iil`2S5-kBgLjHc2!7n=~(VzoS_FGU6p_rt{Tr z>m)Jy@OwnuK}Oj-%mqQPLhZl~lOlsidHNZ(uh2YnpP5Q5u>5(vH4%#&3nb2;B}&%<{&{s|tY>YY{s@qRX3QCkSpE*_~b*&Yc+ z%v;A#1=&e^f6;c;UcDj{v5vkR1rH99VKh<_s7K2=W?m*&|9e%qf3Av|gKmYBiTEbb z$z7DU?UqwyxxatE*>J;&JG4X+fFIm$2{~Sw=b#P+5IAt(rX8MxYayJm zHMNQodu>K(AR#N^k9>j?6US_KYNV>tr1HTpy?`WXBtjdHjI>^#%|g9VP3Dumc+KBl zln(|Du<0$WWqU5+ZP0B~h`Kdc z(sX|L2V)F`dR$>In?yc!h30xXVs?}@q~C?KeAGrL;(G1W#H&>hg($kXkDxSkAL-0EfW6^H{%JN>vtCP0If7eg_PsYd`WIJpUQJ>OV z$xB}5!A#mv^);U)Mbc?7PYfV^>cR0bCzB8*q!%54@5nKqiz($glgy{Q49K@FV%%rIT)Us-QXvYMM=mDZOcreX4 z^B+liFo=NCCAOuQz)pIYJQ1z^obL^_iQorL(fx^UpxJhY5^WLLOHsS2rTL)^f2{)EJJOh6ry32xSCxb37=o`Ms}<#!gLGX5 znGUSd*qI$oQM649JOwj7Zev-F1OP06jCk;{^}E5U+Wpqtu<#KoqR)SU<$q-x#RH0) zR5vx)Nz5ng>ypgj-HB?j@2M>UCpTyz1{ZUq{m>6n{<3w}DVHlj9;e10&zGTth6V_^ zxw!U~{07O5ThHZ{iAAJlz!6#O(<>JrcN#DRMLy@omBgq_Y|OP3dCbRUrhv_SH{=DF zVUs@8Sz6DJlUln)hz9%^i+hks_iTznk+4&b#y!Jg&}Zzt7~zNN4{ObqU<=vvu()Yr zSc~S_;Zn5$L?!xh4qRU5$9YR-#v<8j3m1MkKU~KLxkOIA=MP+pED<8$q1sV7`vLQ+ z7$bKSW8YCdj=h}d0iYmpa zYJ0|`n{A?$AMBZFLA%D0kBf_ooj0lc#8%*ro7r9?`1er0(bkt!uy=IV8oua(2C3=- z8S2bnvTQUdfutK4@vI=2-NtQ7iSWLjiqFX)!ada4O#!H%JRqMTa)B8+Zb2eFZ^|8Y zVj`GjegU=yGcW9TIkJ96uV&F7$wS+UT7-ARD7itZru=1U^g%LbxgjF%wSg!FCwqw{ER zg)Ex}Jw*_si;s&$s35xZctmXeP>8q6<M&9AJ5e0xqAkZk^X1cU&ENG(J3Q04P=HxsIC z=5ou=CgONP+jgE{-x1N_)yLmT324kuspZQJ4}dc^7)!zewB|&jH;2tk>^o-?Frkcy zc9Ez%xdn~FN$KHdJOoaHKGaKmdOW*bRoALTS2_p4aX$_cXVaHfvx&5(I!@XigK|k{ zfQRhcbBnYGZ{M(WOn+F%a|homE@<3TpnCJ>Sg^+ly+VB{GT%GgczYPfl31_LrO5r8 zE-?K$+0;!o(Ste}=TpqpZ{~GM=9`mik*tj&_mFLw$oUj2hjASeZUEcN&c$6 z6poY%6XPoH#W~Km4drsu_TRjo5wAApABwhq_>?n&TO;+FEK}<@KhpBlQ{=nWH?gjf zH`0FWKf|!dj7vC(uvDybC!%Q?gY#tu$A738D~%j&ztt^!i9-FEK^XM|<8s$sGEZ_& zCb#z{hDRvBVzqoSk?HpJG>v|a_QGO|eZLmtfu=tg_o5IKgyRRdCh$yFKUvP|l{<;= zm92T^>%t&(&SCD>fgdgT`x6^Tjq+oh)1Mm@fAr@KRv`Cyu_N3ma-#9_pDm!lu!JiA zV4shB$+ZVn&vNa@gfoN(U&J>Xl-^ikH8QZ%*QvD|P0x9C!A!K-;oqJ=@bswv$K;Ny85p7`)9@B_+VA z@(d-}bay&38}{@*iP7mZ$S1HEX244$4MXiwTGw&*+hi=^TeT{m>qr%Q1)+w-3DlFf zqWrV0V&qzufqjkp(%4ix(y)&(ZwN}i&bMco8tocowuXG_V@ZNlp=KvS%MO?i(kN&; zT15;zkndM;*VU_v!2nYUI0Zg-xD!(jI+ozE)5OdC7*m$&ILb^*1%7gUx z`Uu>{dK+f3ZRCbwV}x$d%S-^9peyB8UyXg1cqq@K-(wZ`wg7d*krGS-9%~AZn(W|o z%tNXS=*=_#T?uayJ{+l+GpcA6`MA<+ZQlGqlTd6jX-EK{p6e;og?+!S6$Q36B^1wN zpJgEw+cG${SSX3u!E~9bNxeoZ8Sm3F>THPE9hZtXJ;1-X%6^3Crkqtj+`>S=g#@u> zn7%X8Mvqu*&+Ybg`lHl-9xj)`s&>=XKj!T#9Izw$0LSi!M0(|X5N4xCYBmAx3IU!> zGOUbP_ishUgpO6Mub{>BjAWkGk1|oa>#TA=VVi(E<}Op;;E=bN_O#;c>VU^8oxlW7 zXSwD^NkIO~SG@RNJ;JkMm*X(g5w&Kp(WgNj!E;+atv8e5pQ>Nvgnv>`Uac>_Snu~> zj;tT(3;iDc>G_K$mfAHaqa;QFZXjTR4{M;F6N>#c3f ze2v2b)M@QKPW2ssPU_vg%15}m>NT_Xxkbrkm|{bdytqIv`kbSSte5B_i(*K3le!iM zYs;oe<`dy-Vlhrn{C-DfwahC>^NXx{nXsuyxI^!;lfzr)-)6O@1pbu^P+g`w*ZPu6 zC%T_8{a?Bd>CiIZGSygVi*MIUuKuRBULJo!J_?~}S8r^pnfru2*XNTR=K{eszZ8`N zn^41IA1nmEF?V+Wyt=~<>i;YuiQPMO<>vT4p*6*K6ttyCt*=4{yEJ(@!h}FyalI#2 zO(y%Amn{1#c*S3TNve~*hbQqeoq*jzGCpK5)>UvggH|DW&AZdq-MrB?Iq5{~-N6iR zGN(~==M(+W)_or}tc57PsE|p`Va-2ce`|VwQg3;{~bea z3{bq32}ST5zrM4eFyZQ5;hDT4s9lFzPU?N!%T8zsbB_~q*!=eDLT=QtS;*VdoWS1@ z7BGkOrOC=lEgt`9ow>Iu18#Tc+ow9-K6lGqXr@AXdN`4r*D8j-yWwz;ZDkP>Snicm zDNKtP)g=~yDV@{2eqZ1wGLUMooSBm;T>778B;TK>FkQl|ma2s;se!0JS~u68Db* z`D+sDO&*DjXtlf`+k(O98G9+Ue&sCtv12LYi}lR{RHk_K&8eHZQJ`BpA&isL)$Q=H zzBS(YOG3r3#HNhp+3Kg8LRdkyqKH`|GpPK}{A~ld-9=xHg*?soawnSewD33Y_q{$8 zxgq1vA}-LfY>2uwsgS7`LNgcU0oPo+K98l@j|mtf7#dU~to}w>&p#&w?PHbd2@d(E z9&44QYQ7c)5;YP=XwyEl;+LXl%`(%=@2UO$jo{=l6^fF$ow`d%o6HaS@TyqE|%q;e2ihAVhBl0j)FWfudgL!cx zKqH5xcPoBuQQR9rOkkZK{ULqN1o84Ls(#R;FWiZk^~1zS+Ko296yZTll!ua(QxqbN zrE3@8DjebwMOYoTr(W8%tAuBPuWCNz6kuRbp1z6R%s= z`3@v^&b>O$U^j0)FmJV_ifc>tyqwt6x@qadOc9zqr9qJb}5-h?w8pQ}b(Vu4> zkDzcX#{HH#h7qZn%+WVM;C)4dvy%-3+2nRH>$^3CkhD3@$w-7-^W7#tsF8fOZ1Qoe zYI?@+?CgS&Q!6BoAl7+O3NJXA0%lFy;^VjN`7N-n;<9K3m+&_VLzF|jH-Q^3lp~`y zxLn2deUOq#U`NBUPQF)@9s(zhp0+Dz{d4bip-6)8mm_#%GEnNwY@{fH-|<5b7vvJm z>#jfUEC2W#s-!@VO1d)9xyR8)dVTN1<*Dlcf4Ta#0M^c>ALuEz?w~f_4}^cOSGbjb zrpEdp*Jb-VvggF)yBP5(3{vWrWT^SUb~9{N-Z;Al%o9WND0An|XiLf18#rwv;KZgb2Az}E`x(_E8hQG^6dN7z<%rP zny;Tp%M&eT$_-gtmU#-X+41}*ssWCwNyNsrKc~{`-FA*8;r_nhD zmW&&C$AnF<24Ar)Isv+}}A4$ZPZ75^%MW3-*@gk+gX% zuY72IwhgE5&Kh4dQgFprG~66*6r7xFl@3vB`wnlWQhn{G+KrT=SFcO4Z>MH<E< z`hn?BT5PHtEkMsx^adm~ATqd|mI2v-8(~{E47y-@40fx*6*NLa-Vdfou+`f8wH!K? zpzsTo!hSFjZvA3^qOt=wnT2`JVTQ_3wfbukP)aH5FFKU|wcskj6~fO&Fm6vc-kQYv zWO?=0(@t|E?H_fsu;Bue5Yg7#erLf9d*LH9qZ8uV`+BjcwO@N~5hP2`u(C#4dc3vniq>+K0laqnb6lUs=1q!_5pEqT&$m zZDWLo^w%uRpG6(7{_f83lDMLx3OlfL`VmtgMuECJW*zV_ftK0ry2u}<4IVP^oiNQ@ z#1-XiVTr=Tf5pC}Lg`$9d^L;$NE{mM zGPa6>VRZPv5tm4e5NKZVc+`VZeX1 zJ*ITR$kD=OE%zz*yI5Mdp+@e`sCO~9jRUG4|yuXNsc)KuC&?S`70=h z3fCCF>GO`~AI#aJioU8AcL>bs8}GyR#BqMgtUFiF2$Qmfor*EN=T)oD)1cS)pGwgC zjI*X0a!^ERIdbXa_igMbdFvU!x+LS>)K~92B7W6r5c?W;Z;xAk_h22_b}6$gl28W~ z`*Kmy3mD1c)%9X{f81HOob-jLu-KP+A}Lw=a}<<7Jt`1VaF=Y6rG!c60ui#xbsP?_ z+iqm4odLtyY&}-SjaCNcV+n~CB-rA(*1X=|TyG?)=amR10mEcMj0|c9R^E>L#dHz) zj^A|uh!#)!MU~x3i}~w*(oH`~7^AGQXY(@Z(($-RHvxqX&1&XgtT2hhf*q~XK9elY z+lERZNpNtIOi9MQH|>HRNSt;p{@%#%)qzm(C!VZH4l350yP8(LLJ|vg>#roBjLk>E zPbGYeo-6i?p2nHqAOi6YDYvz#NM~+jl++;I2euMG!K=~zpc$RN8BVV3pQv+D=zU6( zvNP*UZnp-i$Q&k{u60t}$JOUOOO4pTP;_0xsmDHe(_#1mwbYv7j^R<`x*%AO6oDQp zn-vI;RNC2+=(iv9B~=vS{~#&qJfIx+%Xalq5DH21vv?x&ysp3%S)wA}OLOUOmGl=V>pwhw4-Pt#V)lh%@tIx;_~j3~0E2|2QuX@G?pd(O z)DS;~XQWh08x zb9^z9wmU2vs8JzjsGa|yO_-!byf%E)k@(>S$v#?%(E@Liva#yXNwdGg?bI5$H^W(X zQs(pDl0f_&`m|or1Ai)9|JKwcOX7eP>rVY-C$JnA3@_t$Cn~KY`yp;qT#y7iJZ<*axJNYy;q%uw^4LwL}Yz4j|;t$!Wz7s?f zs%ngP3l>y&kkgsVXwL3 zzIjz|ns@G5c!MQ1>ikO($JRozQ9NQEj08%$(8veC==yy!#sJwiCKK9T?muKVw}N(- z@5O03DN1m}fMaPWv8tG=K{Z!;re{HCx!J6!Kr#`mg6>1YnI%o9zHrm~qo-~xnppwG zh~Pq9Xv{!RgVw)i5r966%m!djp5F_xr@&Y8Bk|*{*$KJHg{trfb_g4cS#NhL+8W7k zGr+;uzneBU`4g`k^8GFHKoS8VR*me+-8XnTzJIH8Rekl)+CjKy6RTL*drO@8Hjk%q zxYFVs26(Hq`*QF-SV96ebFTWeu&DB-B`q3%)aVpg?UT5yRk4{@GaTt3^cAkm6S8t4 zDwx_aqU5&DixcVY@j$+7GLvdn5rY<<6pOg;G3W#ZpNd*ww(y7H<+ef_>Uz0t$29Q5 zbOV0#_f~}Akr#KH|E?>Z3&EA&iZ0%)G1BEI5YbRL`38am!7aS`BR0ye|9Gkmo<`H` zHq54-aB?Kr6mcVBY)WPwo+NoJ^<1p*PUF5FU;~eo@S3t+$4Ez7G;o)X?h|q>grsWX zuF|iGbF7JjIMNMh!-OH;EOo{^y;}xhdSZ5TZA*5r#zET4Oxd|b{ekIK_c1@7RCgiz zu@a02_ktS*l00vPntX1OzY7&N*809`vzspT>(?m5;UQoy)R(~g{s(*Qear}p%c7Kk zEqfN3U=e7>o4o0g_X|Nf9<}8Wq2$owNgEtsVy`y%P75m2o}ZC^Wl7Jm@F1d zgHSINZ}L{#I#e?DqEf9n%L*4Cs?vbl8h^zhI7FN3uvpfz1WjWBr>$08_C}d00>9aXwCs04A@h*$!7+aW`{C zf{^c(=E&C)kti}3m1as280XxCxaY(2-2EOfJ5W;m8#B!0d(SN8IJ+-+0ka7SIeo~i z+0BE0qcAu6Wn_6^eJOB>OR5-(cF^%J!t}@ZX;J$9XZ@sX*4q;@LlhS61f-{=WGTD) z>?2Pz!j6#IH^Ehd6Cnwy%rns7?`Ep`4WQdyrI_Pu5Al*p;b_PkEo24WLDs$d_*EBK z4yfnC2Sk4Mr^NtxH|Y*F_$K@QRWZ-{6D#l@n(>?RcfZ_lrMRcSgX%%Idu+dO8m~^D zy`*!?(O^F<2Y0bFTT$$l!;0Y(C@UIS;Fkyzq9U2+S>MU{D*fYw| z=*_JiYL(o85KFSx9ca&9DoPaI!%$wCS-dKF3<}E}^ys;aiW&^`fB06E{A1O-X;){;4!~jLYLF6%iTZX*Rw` z8|^XHLmn8zL;M%c#x69x4U-c4ROntRZSmoVCH9&ZkgQ-ZJN$spXl-_P*PIF~wJhCo zQBX%zL^H(5qsF(%7w{&@2+CFu)87iPg8kkS3B@1_nq!)Vxp@IrN24z0K;RHlt6tza zbhk3{BtEyFwVOk2oKIZ7j}X;_Fwa)0ij`5Q)a`8x%zx1mezGJiOI8?h+X5At??zb; zF=>S2qzOMmRkVV*BVFsn;7E941z_}Y;b?=uIHL4wpA8Nqalfwc&;1j2rBUeW<$q8k zFH9xyUu@=22nhTCU!XyV|Ggwfq>8R!UF(jVoVS4K_8OB6PBEOQhz~W{wL@;>l*H^V zCIB`Z)RI{m@?IZ1@L5pw;AeVR=#_eI>4TvD$nJzgkqB%I4{w}MjPh$QGX(*QdJ)B5 z#sPTvu9RN=U+A2L@cxN7(|BuaEq{wHvFd1dO_qe$r=Ty7Fdko@yG(8i1|&QqT|=(8 zZm_4_(uEUW^VoJZxsQh}JQ$PRN6QW{u?wUHO7FREN^SZJdN3U_W4Ff=JQ_H4&>~0GnU2o zj0SGiYbP^^qVoG$-sUY%6;I>=LT&h$HLvODE*wQl?Yszy)x&hQ3}I zVZaamN1hlia@$a|_CT>ez!CcN2I9sg@KXfyJ6X+!$pHZ>sqs8{@6q0*YS30f?22o(Ee^X;L|dpz)XS)iv1}#{ZS!U8u<%#gY)Sm3cu8Zg zQZu`!ke9U)BPfPQU1pwsQFQ`YVv_enb3b0E-tcH9W3=)y*L$8sli4$vHD8Yv_`)& zy>7?-o1v65xO65z++CJ{aseg}yx#o&o?A>?@xw=0fTQHxrX(5bW$b6A^yH*y@ z<$w@F(9v>#y4-%&?P;z7Pl0eq-)>hU=<=bC8uj{Q$-4al=-E932dnj5iw_zXSm9pt zQ%zVD*$rCWJ-LL7Z!c{Zp~b#@w?t>q<{#J{kF#?61A| z(TWWs4K^5JLQ#!E4(7c%j|?OE6YML^8<>(PX`m@>HjO@aEMd6WmLuOvgNs644`!b@ znlufR|6-$@YYpL8OYf}+As{bi>_@(A@r-m`XpDf%kE{}KPJFP`Lz_o7!wxhlX6xOt zGP{pqVI!{W+|)HZ(JNRdq(*fQH;p-E7OocbTsm`qHQK(X@k%J*H9zrFk_m(~~?P?1`A9wqmwuFI8*!LbNMcNv$rycu_*D-alMBw-ILy$>1?*>+033 z5>L5)BDvoXcMw3#4QH?qGglf11a zN8WSCJCtPZqTW97nQ>Buu)@a>g(pLIU z$|dn7Er+o!$I4tw6c>5UoEzaSb>Y6U#Y`VcG$-4JlfE>}msuyo314iKGL+k?wbKRd z)SfV=fZ6~~HadQ8d7|+d z-%rp@D6PVf(ZydLocd#sqR`qEO0NC^!DM~&AxRWDW3kg=a2foO$L6t%m203+yVj>% zc`A#8{&$@}9k=>A>j?)8Sr3KR5m)nGvQ)CC%iU0%%v9}kA^VvXGxP3S_fl!SYv0M13`yo z&_aY6a9NH2>MPNSV-Fr_T~G)tpy+&GfUNOCwD*u95$y3|8J2JRjdgf5oA%NQu-+gb zc9^dRa%!URL_U!`Y|Q6W2ld|ip_Xcm0&>C!F&cSqnU}oaQ9em(1okL;Z}&$zw?()P z#5wd282@9gdne{KRNzgK-+uFX&t&Rr)dhb~9L>nA#uEE{z-Q%WiUrW}LiM{fxBZ3; z3C}{kEq>&-E%<@a#_MJ&&8*L^BQEnyUtD`EVh!KS#7S)ornMK?uAkT1k9|4cTwZ|< zWV7;|5CYKiyRh6N*P4u>7k$Ah*EAdaT+M8-q`=FBNc21FEFDM3=jp5mZ!wTSseLNp z3QxOgno+RMLA8ZTl!xp2DR0SaKvo-p=sSRBYL%qEG#m&aKJ`53F0wVASDEimy|m2Z z8u@yggdBI?c;L~~ht?^fsOMhGulWA10Hf^!YTBprXq~u6hXdN+G*hqu!V=Bs%??Ox zvk=wTC=o^1W>FA!3=2&C+z_{q>vGB!uakct*|mGuJ;?W0H6NLoooJwUSa#?~yaO?` zU=PGaWdbJlA`-C|s6rvAhrLCX-Tpiw@ypP*E-KHVl#Ij1!SngP$TxG>S<*f`l;mxO z2|d}`l{%%p&URADf@rs^Gt64vimL}_f1B0lM+CIalelF<^B6I2%_FwK_ffAxMMre^ zr$VCn%=mR7hQdi-8)Y>Uo~JKfb`GaBvLsCSdr<8p%g_wd*xuk5zpQ(U=c!z8$MWP@ z^$SQtTA6sAx4qwM3Xb1TRiEy(fvH%fpTtNnA$xwm0uoC*EOa+Im5yC)_m`=6N_;R7 zC7GRUd*QI`I0W5iO5|0mDbnK8_n!|X>ol~8>9kGqsPvcR3h)c~XWwEie7G|5nBXHB z#Xy84xv2U=U-dt3RT4^+m~cjlN0cDqS* zZ`sW(K$ra4Q?`u7m5ol?+CeQGq(#-Dpsk{0d!m3t=?M^J?q|@-ZPIo^6w>ZA5X|-z zpO>pr3kpBZW>RSaGD&m6u9+m!nGSQ-r&$>U&1QtJksGDPMK|1P{;B68kB$Tg*Tf@% zuY~u|3p*7}^@s2q=?`0LQKn}fM?T;8(C68^*KhmNn*NhIe-IBCztIp8<4;P5ftd)0wMVc2$h~s-mn(4*f{dsQynL?Cd3aS6=gub2fvcshWBo?-L zSbyjXsx%U>b)zaAf(r6*cjX!qj$nTEvznJcuTT8U)Z3$%WsQ%_krBR8Vu$59jqqx& zwVZojPzyJZAUsByjz=!+t!jGSeG}EY(DKqXKtp?Rf4%8rG6>_I{9@qbu#w*H?hSZ>18w0-I!`5WSv39lX$3^ZyxFMG z=HETPtXSbmv~G*viaGVYk_XRZK&xj}8n~BJtcz7fbk*cxGqt*DQ}WAJ9!R-WdDz-~jxmLWfhfT}CB*dISM}@1lz~!)nk%^EnCq&$MeD71~Jl zxwVUIoU^RX>@@GsdQ@5+=mAb0yW{wQu2{ZLb&3!TDJ;fi_$f+hMM}G({8WCyGIye7 z(tt-Js)Z$6uFb=u{i}qmxm9`5GZSLV7qzzB*+hEdh_#olr85P0Vz3MZ@|7AFl8_T* z>w~)ojO4x46{n5R5#}%EBa#dV!zX(EuHDLR;9fU0x4m>&!Q_z!5WqQdpm3os&}z{7 zdKq_i`0%Udr32Mle^|rm0{N#3Sm@obKPc@=;4sKj9E6db>mhU~bI}X8r=_^LRn*hK zf)&GocY|bWpx1wA$MsYh<%Cjyz5f^>|Pp z*K90u;*!+807`8JI_Y4ab6%2Q2lMcR?w5kc^UZjk3sJu*wGtW~Skl=RP~)Uf^QHA6 zV$&{=&PXJ*6ZwTFW=nFcS}3X%~~(;|k=tFKt{R$c7Gi(v0wk@m~Ojm@w3oDSJja zqJftLb#j!9N>fE@Ng(@(>UdL70<9xX-XX%wxa)1%EV5T18>>Yi;zO6-v>SED7ZG2P zgygN9chDS|t!o|X$g4|#n>-gHG}+_m|3t)Y*ikufs_5pK`SAdRtgMg#BL-g_(6 zo)@|1R+WSIzzx`4uW z8bG}^y$6tsi}f7O^qK^X9W~fDc%=Zlq)V7(#*AM>*?({oY7=S#pmEeh22*NARa4e1 zl{UNdb0mCN;m6n)BhCgr?!l3bYqu+71@|Ai%Pi2z98M@tkV=&?7{=!vN;`#S%0N>D z_Dz~Eh3Hi=%e00`ZBdjHoYM){joayZm}GUL2XvgE#WD>6dmyjc0$g~L;We=aF;3c} z(yVrac28mFg1M?C`Zek1&FH}6RREcMs9)dMY7Wl`ODr;nXVj8tJ0%qM(Iq#nLt@k2 zBMXum^A_rU&tpkxU8<_kN|33CP=>PEJgzPF9yZGH1dDm7XC0^WQfKnnHNDg;Rb2d) zUha8eHW0abPu##_0`h;);bEwT7nd~)HA?+&Js^cHy~W^z(b8qnhsn_xuJ^~wWypYB z7}7sSZn}E8?E2NA0kba+#E7}q23Nl~X8Xjq(J6cR7I7zBQxDm$LEJ9i-vv-N-n5S# z{&cM-rdNl>)bZd&rUD)0t8;1P3< zDBR_w&~9oUi%h~EABSEqNAn+hTKqEQx2P?&d2+VTHeuFdo|x|;ZYzfSG@lYiZzQ|l zc}VTB-m$+4eKkCix+Q5rx%J^fR>;K`f>B<2=>(WG(r6fpU7qw)Xs~D?y{~kXXzvpQ zcCySngnsYl6nPB`%tK4c*~wnJjHm_P4_ft_U9lYiYF(2qB|+9ESj;%3!eNlh+W@H? zJpYXgou|Vs^!wsoMt@$YS$}$>2~s|yD#U@q6$a2R-(*My-MD2!vCZDyOGfKg#=zPW z3ILQ=2bU(gb-R>0XVMIAGa}-4jMwKTTcOjj{k9#nj~7t#GTXO-=9QQr^_Z@;h7?u{ zd2Z8RZ=Sx`895qDO80#InWa1hyCr;AXu$_?R>^qf>^8-_r9RgeVN0OsGPEZ}UJkYG z{Mpu1m~EFK_E98E#tk~KdUj_^(H%(p6hyz(X|Evd31oF;_L+d(zj}&G-WUI^YZr3P zo7VY4`mQXl%~FwvUk?g1vj+PL%O$nqamyy*d&L(nx#~eKB3rWW%-Ze;F(1@1FZ%u$DrE&;}b%NWI#1O(_;0$!O@*WlbQ>)m|Ykqc3Uu2PpEo`2)pQnesB5xgVOp zUsb<+pTD|0v$Pf?w6rpnX1r3<9JJGNMqDDaJz8R_I)7?BXxv6^H2$%9`!`O7N0eS} zI%mLF3rtj-qO&bKXbt1WiDDf6*vcuioey}N2JhIAWssisLCs)IN=GqPGO?a%HMA^qEu135AwOc54y2aVL+{7 z?H&)+v=(}&8dgAHnNF=e6cw9m@Q;snn>KhK&`~$F+jvYZ_gWHI`T3D!83cUZy7KgH zzho&wLgdEpfz7^bz{Qo$P&58XKY0j;=MmnrcM0fQUfB(%@@N9P7!Gw~`5*SIF$*wY zBVA$~G20a^tp(JydK}f6U9jU;u;;!L{AwQ_m?QXgCgOe?OQf#%tLow#h>r4j;kCX; z!JcA-u_`i6Y1CrJ+JnjJ#$Rffn0Zlucz}~=Y~!{1eURCrLVePf0+XmI37?XL>MqU% znePYXP&j=*r2Es`oUj$H+Y((z`r#|c$;e4$n3;=Z-iclx*yG8Vtv=sgI?V%45wrM^ znUg6b)jv#AD#lZC7C4)6SgnitA1 zFOWzMl5s@z%kkF4L$nf6i|w@-KCj#rqiOwtnRQ0o^ou~zQ0B@RHbgkUE@OkmeVc(Sz=rvsG?nx8O-z}(Wde$`$YI`Mn%I9i-=SRlJg zQyX{D7#;YiX_EP+TwIh~1?IJAx+1+QXYGaM=H|l6bFV^V5fih`QQE6F>2$531qA2XJ ztlNniv>hbONXiIU9T0IlXKCF2@|}izfPaLQT9og5>YzrATX^&KOLwj*);l)B`}GN6 zDQi!k|JY(eX~co1Dvl@Bhysa&UQUZfR?uu**Jfvm76i@(sxeKw>eX|fPMXNIXcCr6 z^977&E!T+@HVL-@4$UEN%XVv56_jarC%piZjy*cL>Z`UtVi`1^GF|ywq~KXXc>9N5 zI_UY~NS1vZ`=?@L{#Y5C4p5b&MY(-30O(;I=y^Q=)x0~Ndo)%LFL|8@i#p5FZn<2} zG@M^c*!s56^^EDc6lzIXGZnOb8r(EE;C8Wy&PLWia(~zzIzZ}s3wO~Q{si~6u#toG zwG_^P6{=~=swIJQbvT6 z88{`xo8$44Lt$OYWXo0b63w24Mq%FUbD$*Bf^d`V(Xu-G44$CED4WszUUHnL-7js@ z0tM6B)J3zJyM}(~q!eu~GzBW0@h;D9Bp4@YM6sQ56ATD^bB!vo=UM2+MZAcG8TFipC|ItrwpQclH&f7d>Bz`dEqyjnGs0#@Oo_G5I04q?}X>f^FQg9--LQ zRXAlgdpf8#3^f>gCQ>8T)wubSc~DMb4BrX%3e_WtGwi^;=jz$)hEUmNEzNLc>fvz5 zv3VtF;8_itv=^+%1ymeH>G|^pi}C0Px9Cn5FTr;vzY!Sq3|Sx&oG)T@e0)fSVh=3_ z`$7y~x;qV}e>-fRahl{O&W>a5ryR;|(-j<|V~Y^k<)P85?qD?7T*tRNTfztTIXCOnrWp>&gsK+WdusDKG&D9IkN`Ywx#r*D z&U@;2Hs^bWGur%+RReMY;#L=CQ<6WcE^!w{ifu?^EeQ&odxr z$M;9QdTox+mo}dtUlBNImO0w(sn2%~@ZklH68!v=^L7r21=cM1h z>%e4buRIN|`RdfW&WVFVsf1$k_s$_hMd~4(lRuinYi36yX)H&A!~oIKIj~{VdbjUA z@oJAUh+frK*>_wgnNNBh@C^uj9|@zuF||5+%H(MaSidg(YTFXchweU)w2hU)qX)Gh83tiJhECHoKf7q{EZi3u^mbdKF*)Nc6~PjK*6C zNzi(>WYaox#a&F_{X+T|-89aRpshiWJt_{6X5Dp@d8{q&Qox@%)QEFlIJgqf%6DAm zD@%IyPIvf>eQoKrsk?HI`(=)~W_L^uTI=++cHyecK?ZdeAn~oCD`&N@8?%PG63>ka z-RDlCbv2lcM&``b+R4b(>H5QsyFKQ1WOa6B@`rD$y?WEFk^=n5cllbXOa2XfGSl!C zza6uBH{USnWxt+Yn)V@OlhoC609paAggHnVaqP&ow{%^5u$+TbCSHa6siV%tXpTL? z9%V&I4UUl=*d7^j8jo(!nS4&`*E9-0>(L}#(-~Df5peKzv`iBTfv!BMo$^x|{8(4A z^xJ01|3pA?sF>ENkmq!nFjU0oTn%eXTr{a4#&&YBPjfV9lY4R(r3IAKR;YSAx!ZCD zhcLrjGBkGTQk6@a*Nm8GRCSnL1;!!;oJp>G1&fESb5U2lG{?rD-zQgy#EZ}_kQ$+U zBPFl+N5m7NbfoUU$Ls3O?Ceyxu!Az>G4ZlZifTL8Aj-H#U@=-Se)viKxt(eoGaK)5 zV$Q2JgkXDjU7Lk%!BwO&o8taFJ$!ue zUO-*#L@l4%VTjyk6Hh8jroK|ykSr#I| z^PcMot}yv#+o4@MPZ=kt5Y-J=W?bV1ck|RqgSW>Z2i#zfd6iFHkxS{fqp^w#HPlfY zpJEOqi(MyDu|*GFO|>TVKQSquorwX~(^4nRnlKgX{SOBYP1Hn-5=gzjXiIbxOIFKb zC0HN(7X9PyfqJ`c_BUpNV20(D*$v~`KFuHy$@}m%QF-~9!Y@oxajPuP>kwy&zVfcRC>%khBHDi{vj;eh6ZuYP+8TA&ah9zbg zldtGA->_;gSqr6+Q~G(gc*eT@iRO3e0ngCus7#r@m`Ti~ZGpIAxH&`jTASL6XLw`y z%8*N;#7+Wc$1mt3GSCBl?F=a={))SE4<7eYh|7pJ$Fasa5ib~S9YqJ!_8CQt6%#z` zjnhn`(2z?aQH_d0;3^PVw})w3kVgvcb?*?og}&@5mmolm6WZ)dFI?`>@<}8@cLYv{ z46+;_HB^n1F|)eSww;K}{6sd7xfx;Vnu89JD&K?xi@f&hvSd<61VQV1vF9;GRj;X| zpGsteU32@*8-jmEJEtXWe`}XQ11#1LNmAXd6iS3_+ccCvb*D)L%}?A+`KYv}Dt#9r zaAaSHCQ1@!`(?*Z(w8|+MQfYX+GxiIJ(d|p(>VvX@UNL8Jg%e#da{y)YIM-H9#|aD zC(SyoBsv^{?OicJNpgCG7Du8|KdpnG1BZu!IIDthFMm?2l@<^39y>G4yim(Jv@7}( zmWBR=<+)ul-;58n4^<;;EoLQ6)UrgocL{n?O?c9cYUlh;W_`X8de~Z+Dh)*KhLogu zyV3!HCpF7ir7jPpdz$(?xplqg>XMOm-DGNOT|=H56G(k62hyL+{B;xW z=6QEoF`hLwK`9z0xhZy{nes&1ABhA`TX;OKDfE94>Ol@gys3(b-vXJWe7#c7&!EWq ztcB1_7cDL151a)98&r1kw0Y}|g!Tl|2lZsgO9V+W>Io3pvkBzV9{@SwB+p$S{82R9 zs|U7O75H%6?w18=ilstL^$rYm{8psZFx=%0!uOp>=Q|(aDt(DigsXt z?f38Uu=KM5x4w)0c}>@ppG4Nt&{!A9?#^FG+IU#>yxBQNt#!FbeSEhVO-i9_`nIM|`4r78h0RHgb|gLhIhkH=i1$F2mzY zyup4*|IbA*$D0>nv*SgK#wH%7YT;1~pqR3AY~CcNZ}8=`PLseM10>(DJ> zE1byc=6W1KCSgG&aYC4Xy`qXxz?)$dpzh87KYX2KRGVAWtxrn}rMMKA;!xZjibIhU zXrZ`E3Ium6#e%yeSaEmv7Pp|qtyplE;N0|_@4NTk{g*K^M&8J~_s&{t&S#RkuzU)Z z&bpUvb(GnaH2w$W7U#$6g)5toYxnZh!GjWmh+r1%R(45zz&$iS-jvQ6dZ_@J`tcg} z&V!rjbsZ{!K<)^zA)Fc{4uQ)=axMlT&%7#_Wta8*uN}^JQ^jk1GmL*$v|C~=-2t_F z(5RgUe-rCQN4|rG6cRRR5W6}4PvKLPRbg#8c?=--LlmEp<#829omagC@54wC`nqCAu@+CP&!?SF9yeFfwlyHCWLAs^7q=MVQ;Ou9uwJeiI+?) za9;CTYGRizhyen@SNIBOC_lTzup{Xx87eE!7Wevo^X zcwH?)*@tEJ&ARd74kvH*K$T6B5>8}!^KHG`8CqFozhq42Kdzscavcp`9$0t7y1Bin zsk@+(&7wge9j}yp=pQv1iQcDQz^*Ov)YSEzh=x3KbN6# zMM|T2Pa>K_Jh@RS^1GZnA;Ueic)%~e=?PQpV8hA9S|o6~niTP&R!_gD-ig84Q_Bun zU`yq52Q1C#IGQ&(47OP(~Lid`J)z*Cl^A35#Ho zcwgo&@NK|6qqR_HOHm?vpv9smUv#vEin8cj$`>^glm5M;F_cx+hghg;Q3KrB9#?#* zH&vW3C~8)oSCD0))c&=OWg>Goz&MuoQvsz_sJrMpcrgpTnzHn`X+h)3`czDT!>GX+ zK{HoAwePUNS)P?5@an7lFrY2fuU|e=eaWY{%v37I4(D;$a&=!hIuzfqE@l}#p_I~35?_HJ?=dT- zb7#3-VK+hVW#A`i=wT}~PP0UM_2}V$UiD4e%iZuO3zwwqaxUsDwY=F{*%`ujG_xCC$ltbL2;5-% zx^%4#6bKg}YKJEIE}pq{;89c!T}CeH@MbiJnB{~$D}NJ8@4PScAE7A1N{(s8nl zrAaaU56%fly9SX{I$U&EXS$qbtYaL~+}Qn!4^o}_fZoCrh25N){c&SnMTA{NoE^P3 z79MBx$)k#|)foz-x5~8g9q!`u=p;FGOMRtO7hC85w!74CK-2SR7?>;$_Lqk?zHr>$ z^Ky#>g%s?3a(mI!&f#w!f*Biqq=4rclpU`INppU(*xZ#> zC#GhE%?9x)I9aXAE{L(LRJM)`2Jsz4zrr`m<0EdZ{5yC~y~}Ghwpf@U84LG-tkP@d- z_8`KPdJcw<*6NGTyA}z_eB;iaou*z6uHU^^j@OC^G-CtO=G~mL0R_U&+azM-WZDJ{ zOo-5AdT+xPb*5|ag3o7+FK*1c47@5h_6Mq*?59la#8Pr7a;yca+^zZfpzAJQ{K-34 zFZjHjpn8&e;o08Ldt7UpLQ95q1pi8Y9RE6Zn7rkGW=IPtPu2Z4hAUVu(ZPt)RL17s zXWdIqmQ3i+0Q31O3lxsN*8w|a73*TBg8pe}98!qW=C_t8|CO@B6o&Wxps6;|lXB>! z0WNIFa>DcSY!g1;#m>xoPJ+6@7}D`MG1--|noVFTqx7B}m^}3dda+Y^yfs$@Z96?8 z-yBNIy7$c7g5j*>UNub}G$*Un{Q5o(eVgZr5xB}Cf4*n-1^+P4az3!WP6vgoO@CF~ zOTKRU!vbWN?dld4rg`Ie8Z1V5FrL1LwK&NJkZX%Uy1i^D$fm+>p*4{XF`15G1`m3g zPxJ30&yX0xw%%!RGwZUO5DD_<&90vOdZE)Y=dc$Iw-`XJTr07efzW4~mrAnw3!@Ew z!8f-Xvja&?l9g@oSt%HsZzeCv^1Ul9HN)=<9OK}1Yht`%&4xy~o@We(L###G5CBGU zp_k$#g{Pq$2>* zDuBPNck77K8!Y#Ay(3#0LC{0jeSsbD7saQnyZ4)ob^G-!HW!h>$eLEQe{FG|rQ<`! zjBMG}VdQllJ!}ZeOvGB8sBfiyr*PQeLO^Kbzuru zZCS{@r*k%oU~06DeHb|%zgNirR=9CDVInl6&(if;lTh>k&iwOxj|64gXtL27G=;y~ zVS^0h!cE7o8-qTQyZBKUH3f7lR5go3B8iho3v7@2_UXu{J)Z>m?;Mm|)JWo$QRnmXIt*AG|gBdYCp4LSOtifXR0 z#g|McBVK(mqztBHu*vpLu8!5Wd)uHP3P~E+?rBh#O+$1-@?9LJ1kDM}@)a0AJxs-PY zzQM3kGY&#n_eE0n&vBbUMCy1Apn?UK`IdYjIP7dVY~7m<_i4k1RM3mwOg^g1`vH}x zV)@r#@S-qr1>J-R&DsoiG$&cFhx)3*$m+;slAch9JvFgu1beYu}vty=NAD4XHq6tPr&AN(5bh@Q*m?F*zki7;}2jsPq69|C*%w9f+Q>tbW<)ZOOQ_6Ya>p+kzrW`jCqO2-`b*1GJT zTaeXWPj%!K(VbpPB&i<4$z{e%?XDM}0fcFKly0$FhLzqzpin1_B6DE}I!YTD38N#e zvF1$Ulxwv|_0v@NyIphtYdlFOe9McX9n$^qW4V1;y#0e3kD~MZG9A_cq<86f%67fo zuuYJbmqm=%*CJj#ZQkDMMPj83Pq6-g?~o_zmW03eNID4@35>)7d)JpU1qPmfF#e%G zMo{RTwcD8)D)k{G{h8{0)-rvMzM_B0+^l#)q#V1YT%(B3$pWrGKRxcg!=C}}sZ{mR zd$`Z|h}pV=UV5dbV(Xx-9PHKgYDf`X4hTZosnmkD$kGsfmebcC%xu`e$~z{%o&}Zi z@``rdDocRudRWF^{AN#JS8W^f3v1z6_zW%bKQrOgi8(5cphXoX$VmUC#(3{xsBF-Tun)h}U+7w*X$JZ6M>s%#qetyg1c5ZUp8xNS<){7vy(aP=>%(*WU6oPa6c? z2`@%Ygg<1GKHC~*C}|KbEw`ZQnb~>dXnINt8wTO^kIYwWoywNw`1olq0G&MKNjup{ zg(C`S6y}Be^aOS@YvL@j1$BEahw*F*=Db^$VhRnQa*>RswuMe1?{5raCTus3W|az< z_0phtACbezM`obb{rM~Iafbc`Tmq#}E_{wkB5Hu*55qjiCr%GZ>0!$9oPH(sJWvgB3Gw8Gr&FAb?}1}^U-+D=SCe9+39 z>RZ{F!W|{T{YQaD-P2>4s~jj7M9f12|38%+-{0$Rq?RiMrLXp8$|XP~oEdqo)T|cj z%56nA0qGQ#h@-N=|J6Pq``&M!#8Byo`hA6A=J60v_Zjhi{Qo#JBm?5%{jc0{Y-X}@ zj%g*GpLBFN5}q=aF}$Ddo+vuWXHjMzV%9i9?@R{*nB<#BB`H$q@8%F~{vRWS8`PJ& z#b>VsXFs-eGO2EK)I4_EIloPQSjcpul_VJcG+OufB9H$dD{!ncbYC>=n+q>pGT`%+ z>tnu9th9M%zmxL0W!`+9nm#H4vp2_fM~J6iD>{Mb5r>VA!jxyf%KR&|zexPDcMm7g z&m=jb9ag;G$Gse<8CFP4kyD(IWRyHoC*1UC78q+$a6&@6aD882;gL0OF_p^66wU|(mK~ER)KHz*DE4Mg8W1j39--FE%)WzFpocM z$1|`Pl)PZ*?d*O1ChzMki;57gV#(7x`QJxB|2T>YmGGJ>3Xe__pub6Me7 zY}J`QbgykZvN?@>5*OI!#|BU$T*GR!9fGp2~arG=mnP9=!!+;Cezg=ggU~ z-I{5sh_pSWlq6(fFlAQAC!0pHm1(y=5auR=%eTPUb#`-s9py~bG{2?4Cq6tG>r;)) zO+7T%*wFEkjci!kzGew>GMiPAPv%re;^EQqq{L9~P*e6gPESx07#v~x3O&1cZk!e+_kGEjY+I1BrTvgLboe9m1}p$OfdSIkTz z@70y^2+jOB<~9{F@k*(&8RsZ)t=?KuJCZq9M48}c4Gav z&raL(F*b&hZ_4iSDPbkEe^gcV;Anlg$>KyU|Lz9Df2A$l-bguE=&7VuVK;z4r!>V` zz@vbAK+*Y6?01Wr1bNg7K4M_BwFbW6`0;eS%Wg+<2BY}G+#8n}ALUR#^100KRvM^? zM~jYvSlwFETJqCXcW1%g&iUpa&zlcsB~_8H9_Jb4Sx-J*@R6E`>Dy=2H?7e8L-LdR z+QTm-nTkQnA*x3knTIcV0H6Gl*(=>wt*FNcrm_ZOk_ogt;MUczuz9YgKDgM_e=BD^ z72r+4v?AMu>^>Lf4oqZ_n(=Ht|6Dt^`e1l4MJeM386Xi`y!TRpY~1djc@Hy^M>H{} z2;C0Lwq+joK~LyukmPf*YC-n%-==%2qTENRnu;y$-=tn<%AX(p(^AnK#ww$j0hSs) zVjO!~d3Y49%5QDzXkpse>r}|^RSzOD*9p@O(frL+y|ndby$lr-c!t71oA;yMo5;#C z&upsSteHP8Dimezm`O4T1Hhg8@g-7tF?tWibPo^FsUr{FcsGl<$eyV6^tf%WxG>yO z#uso=k|+aS;K}JFuC>3**iBN<@BTv~y-a{AE@b(4@45H>cV&ErG7*-1SS+E_K_(`i zY^it)TTBMY4HQqmJ9l$dbZ&G#h!-AH+TTqm6lxDSHqMHTaY<7+!!#9jA1#-$WjgoU zQZaY(0=j#B8)2w7tsZ>P?R8R)HhX*rJGYrFbp2H^g6%DB$v7;pdsPOb(j9o@XJm?VwjexAK`?q%H zTo`TEd6p-E@!PbcG@_`8<}d`2qo1XteyLEj0mYc*b`oHjbybEmCa@1U6 z)9rDWg*J86bdXqN)<}WtM!%_XF2)+_S1y(T)kCwFHM{F!RIN@Yy8uD4{KVjji@n50M(IN2YiwzHXq)sra(eAD^ zA%4(X3M=)EOqH~%hz->8>+03_Puj!dRy*behq_2m!^-+HQznytz^rF!Jn@@CqqmGo zuPXLm7p5QzAFZ-ZeSg{C>?BlNqknZHDk9SzG4`k(tVNMtF0>U5*4>??Jb{7}4u)&Qk9 zEmbG)aoy7=g3|TIdd`;Tt9{rgMQ1iPVk9^EHIhzr{gNWq7g0f!%nc2 z-rGdl?$N2GAWwXgdA8~^6#B+{(hF{ZpI&Tkn5Kwu^u5k$AB#BvR^6yHh;Bv|lBy4s8S;d3wD&pfZt|6AlXa)QEDRfs zon*5w+st|nax&Taq|5rRvbvZ0F9(P&Ul`duGAu}br&Qmle5Tnsfk`P4NrQ6BV|GcS zCJPMav;T3dEID4YMltg>YA2Wv$Dc&zq{U7{QJvSg#3NJNA{oY4rc$)BlUlz9ZJ)*+h>}St`;m z!A&Gsq6YJMSv=!Sh!PrQ*_DTfnRb+SC0gIB^ z0G8c^XG%M9SOhuS%zoUnInyXmNBio!t5mvR0sOehp2;a3rF0h<^h#J(XHIE&;4K|* zf(ir_2O@r+l_7E}I%&%XCW)@8@-x`$TuBUbAF<|*uDUL)`Q!n29zr0s)XJP9i4Wkj zEoJqpW%Iu19jO#GJD^rME-%ycxP46U8OO z;%@pI=IKaGROXr_D@lBb?*+#EBA@KTwWr{ToZ0~;s;xZRIZZ@&w^J>uZ!#Y`P%~`!a`V3!wwRNCZKNKE z-`9=5EIwNCk3eCAzvw~;W`FK|c0uhL{!!MTrVzKSO|-ksYSK5KQ>`=XUf+UnL#jIg$+DV6#`xj3>hy z>pXi`xjp^krUnCRTR#O2Z_?CF60_09Tu^uOF6=a=?#1p_D%#^UWtu#>syb?U$FHpm z=I2*f+0AerC;l%(T{b)eT#?=_rxgW6>;;rvOj9A;5+ssY5&B~8$+cFT&bv;pCTOYJ zMfuke`SZQ#$&G}jmq1a=YYd>8+L_gm#_| z=X%HBULW;j{xB|M*aOKGPLBS0G3KHJMAp&yq%r{>u|fK=m4XvY9-6P7Y3thEAu+Oh zO_~+eq}UVv=)!E2Jgbat7TBa!qs35R^K;-T_y*KvmxJHyN<7;Yi$9jJp_jV4$4{p6 zrB~XBbuNCQpTbx-P(G5PGdWk65>B2_tm(;@OPo3En2_@y55XV%@2nBY6bUY!EI4x@ z3K3SE`O3Xhx8ow+R3=>&#E0W~{A_Z`mt9ojGEcU$z$(+!g}N;)Lz?TL7+vT)e4_K9 zu#GK9JE520Y&GWV>19(l2uOAA=_$eo`BjpN>27#h+1xun=@WG0x;Ir~>~6U{k=@E0 zK_yuS-_C+NtAIn*1^|6o@o)#wA(euSDmSWqbMH$#M$!sJ{9LUGaeK!WoWL9a|> zF!MfSE{SbNBYX|-jG1i+G{NTy3m5CSTGz7vfdrp_1%57|-&v38 ziH}-#yjQr+w}$zF$gqoPB4&|XMEw)R(|j3^^Z90ib;+3V?b=5No!X(DO2yhyb{H$! zC$qVq#cVMHxPnYxm|o(yopXMV`$!$d6y1)v%iCitG5DaQ8+hN*?4>B&WvjSB4_$XQ zSU{#v!x|Y1sWqWy{{1W;a?evO%IPBd-lNS>Uy@RL7GY()CPql+38izdGtaa75z`dC zdJ%um=R`N9MkW^s{^{Y%Q@=Fnqowp8DVpc6#6UQ&`Qv}W*B4?5>;vesY}mF}bI3MZ z>CuOC>_)!+jgu^?{$nzY{E_!?1EHZzU+?)wD^71U!>zWaWO*7Goka2bLd)7OD!O%l@)CgLsQKAmbk455`mW6^la)>ozmj0O|<2g&fape(4I z6%8y9xgmSdz!*rYyQ!(yL`iqm>HEs^-3>_*L~e|8TzxB>_rD$}=Gr3+TBDtigftT` z6cI#skiROFc=nB>|7wQk8b>_xg9Ufz}=m5WL&?2cLL@ z!`aNj-tYIlO6QHu7k~IGG+D@@xC7WXCCIoxuZi0BB5@)s4jJ50oBoP1?jnfa#ivu^ zP=p=+J_NkTp`fV5GzA>oTOQ-MdvdJFznL>`i6I%%%k_28(Wn-c&3<8Pyt*!74Xvbe z@YK`w0Kof6XEzu|>fjqBe&je~s*|Bvp$7oO#|C*v<{mhvR0= zUkv811?zL3FD+)BUv5*M?%q|NnN|=FKIjnmQF()nY1UB_KI{LF6V^lM-(N0Y*!v>V z_I(fgpLkgsa@+#pN{oJcQEcycE=%*X`@@j2o^UB4e^KIZ*0Uk?+Ff2u{wDq(; z7JgJ}?{tW)bN)(i^narR-4Mv3NZ|pHsHRgK-Bv3U_s@YgDufgpvB@&u{@uU6P}uu7 z4ghd&fjzdP5V8G^7p~%y%!h$@1yR0Zig*RQTKhhcwYZ3;E_E(WIeSgx!rsrC;nK>Y zFm@7{C)^+F>=#`|vt5>IdR3eMnWiKu4U8yxZ%VNaHC*mW?7f?JlL#VgWw6P5dcHKt z25OMa$e1hTl^X)AMb0GnWv_|`-DI$y_BPoB89;ig8ZwH%*wbkDYz^buAkE+XbE8<- zjzd@)pbB&2!W9>a_Rspg>748fCxK;q^D)^5qEq=c#3J?fQlWjlH-E~HZyNeO%7Z$j z6X%0|S-){r_-_eOMgPw^W~u)xysknhT`mqM9uC9wseN&%J7N{62c4Y|^j8;g)9Dom zjO|H1jP!US*Y%7t9$8yV#{u_jij5^-F%+M>0>cq2BLOlBLY@a)p`(V|rq)HVuyRcA zPCh$wH8YEYKyPRUBov}o%K_^=>M46mljQ~RBpV85pxe1|qR}mD8hx1&{p~OiqPx%j zE=FYFOq{s6#UJ(D>+_m0ET)cl(nnkzv(v!Lx`JioEhLjBUsyaos3^&0*Z|CdB2dH5 zLSQpPGTh0|q}0G?|3(luzh?bP(OINlXQ7T8CSeWZV}X$>=v-({y-zX?`1BK)%mUAefkklY4PZ|qE%QM6I0IFwywW?B+U zP(XO2lK~iOuMsLBCv#J6GKo_Z${^fINuOj4;)WUv9ZB7eOBV4I{k0}r=~M0TisJrS zBgBuvGR>a22jhj#XJfI>*dRyKq4%hMpCgWjV`}a$)GRNG)b`1yQ(b1HOm9`Ov36uv zyHt1Ek6xew>@01E*Xw{Q(eqXs6BTwU*>Lfj>Q&u}3{jej3H4|sgXt7QunEuZm-wXe z6)Rob$Pd!r6?_5c!yMVfuQ{w968zg^cS)Iu0eQU%lwWA_=kxzN)jI!b!jY6U1W&dD z|AKf?;e5svo9yXBjmw#?OJkwuPn-Om1+$lnLEp#{a)bp=us(E@NS%K`H$3)F9FV2k zK~#HwQI(jm_TUkfL?np#h)ReSHs^S^ZAcyfE2h59th$@2Rmlt#;&efXE1$cC_-jb89;J)JU_jT#!W$uFztQNsl}vc@nD&hw;9OH~SMrIk zf3t_D@0CWSYR~(Mi?C9MUKD<$~J^yso0Bvi# zb#!Jl%fjFa7+vh)i}6q2rjEdaw?!7bwso^Ls1Fn^twYCN8A*A884pAp%po%2r|3799*WuzW_ zas9PZsgkFauO6B15AT@Zt#J4{PuS+p~b{~|d#WmS|@%}dI1mVnAoq9{nWbcD! zf((5u`EKM~pc$B7%zCCh-8@B(jizJX(ObTT3qk;HaZVFWc|Zqn zn{qMWdIFZ@N7mu=5@KLcVh}F0h)HgVBo(Gxr-XMM(e#}bA1wHan;0K76EWs9=B$=J zjP5?4u|8M-QF_DaifqNxZz*@o|GrVBF+-EE>rQ;T*tM>L`n zblGx+nGN0B`tpRNit4veMf#i5-uf@UV8W;AD=@Efe5Q|Q;i@~My1J+z6>Gt^57D`2 z1&GnnJcwz>|9uE$7?FZ2Q0Sf#APAc?Ka0`uwrn2X+D_~%y zLP(UKwTU&)7O%s*ZJnFWosU6GSMhO25V8e2Gg?c?tc_#1GJ_Q+;q1G9i6_-2tFlDT zgPJn)Uc9Z%ng=fwCMIU?#q={rr7BJL4qxh z3Lw&3YWlie8gYEC*Q{2S=XAZ^r|2%PShMY|xV@((p>^;WM z6ry~r$0DcKeww7zE<&l};-9#=fMLiVMq5-)E5sN4Mermm6tv1%y=C!gnG z=!1C!>I_s(qjWvY3Q$EF7J-n|YkK^8r_{E)J;XM<-pmSCzn2&dkSsMO#@_Jm`yYo-sF9W$Sh|z6T3jubb|py% z{av_dVe28&XYO^P%49(96s3i!6hv#e*`xY|;Up5SV3k05pK`C#c$IW*TE;1oLA7l* zy}?!yGr?Py`vAas`FCkO-Tn0unvcC|N|-Q8%J-b7VFQm0aMS(S`1VFm_l0A2#4dDS zX2oai&4(+>!Q{8H=^8viOXjHf9ww;le5>Qmqb%5k=6^m;mU+CT0=hXS!+g^|YM!I> zqXDdbkKC}4eaZq!Cap!C4bM}MDC7+9WggxBy1VIoYc_7C+R`-`l{Qzkhns>wVr?-r z@YK8-{_Xx^PvaZ1kUom%CsByB+(u z%O_q-L|GaOIx-g0O=x%~9WEVy&aFy{j2{U1C;D4{B4J(sIwbGXfOYk-bCU{+J zxK}vCLr*gbum8T8rH~>8_?)q{=q`r?ynpB8K4CIx4_#ija`Z=zz8;au72{X$In$5O01$^wPt>SU|(Y3LR z3-(vs{xHO-M2Iy&z;U#otZCC};%E~Q(8}JL62UVNt=D7htEktgE89BkNTpWYKF@pw zp^A{OU^nQ&a_H|!o3kJcHY2uE4nvl&*D1Mwb)?(*I^@)9pPFK)ei(o6t$!7*Mypha zbh^Hk;Q5_F&Eh>ICJ91C;JBD0*(;7L(%9yYmb8v>CPAn#@hB+XUEwKz*Rr)2081PQjXDHH%{m!fU` zK$%xDsz)sai>7GmM*Z8hNY?V{^4$vs85UD9H%?DQ(XbMrpApwf)UQ+la0(aMRVqbDya;Nm5LwPqL+lJinY zOzGtG#(_$)he)+TsZpVe;I1rXOa#Lx5Zx-d+;T(&?LBCjKrrT%WhW@HWo+!=t+**~ z>ugl6Y>b(#EEAGoFBl>1osx7tQlye?QYhr1S+;Sag3ieuPA+Sp z!B%ZD-~WnMOt%iboGD6%W0nytl2tGEg)PRR5f8A$C=+kJzouhn;G_Mb|9)YnKC>Y+ zm43lUC9x1I>^R}XgPq06O;+{L&+Ubv@_~3>ySkov}$R}wO`IvxRYrXi~511HQ!^`Q+GspNAXXyFu z4_@2-*a(23w?Cn&IrLf6}%VP(}^G_`u8d08$mXj53EE2f;o4(t;A_rW~ zo{Js@f_}=j2>P+jA(-~EcJ*~mfC^s1NVR-p+MD*0v*tNQ?TYOlughH_gqW0@Kfa** z+Q!!nl7^diN~Bky(!h;EwI zz`C?F6H(Kg$#6X7beBU|Q4QWO73D=5mulF>SuZWG>M>L*uimxyR~R>EU4s(DI~iGD z1*G#-p&kD=imsf&ga_JETo4$w>>F}aced0)T)^Z_ORg~6Vfx*1hlY`poGp0*yfAsh z?^B{sHSmKD(dTzve{SyP2|S`=ePx(6yhKU?FJj|O2m}LbY*kDFUKJHbGL>WeV*3&y zA=K>!Tz5QQM&u`z)(;}#bvGZo2>_DA38tRK5~Vth7?UG|<~?jyUy|%S6nq|grYcV^ zYBN%O#K2#2&?RcW9lb2!_U<+JYIq9c>=9`;8Ug%5W;GD{hK{3jTXRTwtG|sYy{W=H z2D_2dh?6lA)xHQ$f^Y`ee}`<0sC{LgQc^sD9m z!GK^-vp*8a1}ZOTs9TyGK#_h?Ez5=D?)I;$)x9A``Bc7WFw3*shXcdbNV~wrNzkrv zgWNLhHCRxUe@vrk?QM(N%3y`BHabyPS&F!)yE8POk2rremF^&{V>If}@RM)h8_k&| z*%J4;d|~(eo2C;}XD7mEg|pS}{Q_=>8N-p>87v4lWjJNn+mN>vWyi3w_0;3UL#e_r zWgS5qt|>j={{3K9&4zYCI?GDat$QHbu`ak#a{v9IdOx~+V(^w&+CrVl$I@Szdetd* zdJR>Jt#l~cAdAVP4SM#a~@HCR!$X8;aHQjWtZPomv? z#tg4O?e2*kZ9LXoSkKcOPeDql!f{w>YNMy5H}RP9;dn)zzJG*snAf^*a#figdPyDG zuOgOnoeuM7tTP~ZQRlOA)>sUTKCXrj7`OK|QJ)vDs_bvM;E`lXX~-0vd7PRiEdwYr z-2f=q)hyD$_r@ELzuTwi@P%8C_m!ST*xK^mM@P$l)ZrMm#|v>ZusdG!8^Z?B@=#`6 z1}TpnX}21KnLvIxnS1E+viF)nzTo*rde870eXx(HNuN z@x4B^*lbIBNrXHfpqW=xe9qYu~pe&2!hrza2UVm+PS z*KSqiGmlTio<7!~`FOowPcL_5re1%0aVVG(wtrP?v;4XN2PD(qTR4a77YeT32qKgm zZk6;M4J|-i)FM1n84c^i~ci3y8&rA6%jbC z%^=+9UeaCV0?nJKA(2}myii@JV9}EG+lLfeOBg4?mxTxKl`GxR)Q#;h5&q;E=<`pM zuJI4tHN#_Jay@^-xC{A+bNj&=6m=M+QKEf&@x8_3=A!4)-<6tAhYf%dC4nvxnIp1B zZg#q3HJ>*~rgCZWk)0(Q=eM)G(#_S)lB#^1=SmN~Wlao`0oE>|-skmjB?+7QpqI~T zLLfBOuP;}N<@1r6nf-CINImIBLCM^U*-N0HJ&JM)o2Bp5dLl?P@*P2Ryq6!1fr7p1 zW$}BB^s}|ngY%DKRLJJYOE+wrQ9#a$@8=H2>EVvC;Vi+;J2$l6@;HprWvP%2F(x9n z>^3<2*DFZhjz!uWS3Ay>C@~!%borpki7Knv!1{iam~WXVxKn9{bZppyKYn+vKVE>J zg=OKx1Nv}kvn^#>A76oX>jL49Z@lsHGc7@oO6hlT2)T6^DOVIcDpa#^+c3M%t!$Uu z_ULm2_d`gP$VdQ#iLkHaefVV7OaW{O3zWUg^@H$@E~234x9HJn{sf1abgO#Z*E;l0 z7Yvcw5rA4hnQQpBa!QsJQvyAo_$6-L1d!7}=_?qMz47R0yf$&2y3+PYjx$n8ev*Nm zv>J9VL&z>N+rU&2dqwsMu(DRD#+yo+SpTt&XL54TWrgNo-DA&sCC@ZN;zFklGJVce z+omA3a<1DG8%PXpy&flq9hj@z+2Db zEwDj_siP$4DF74YFBm_D_20cQ!IFlA$4Zkt5VZJKMEl`6jJJ6(<(MIJ#^=MKiQXJj zvdxD3`hzZkyee^gI+gTAxn~{o6Gj?NsEO+hUR^FzzS9yymCx zwG@Ki=+5weIYUoih4wjv8EM2$?J6t8%2VFjuiSaQH`RdX%QN4NHEm2R5mrc93Qf?k z?m|jmJTM(?|G>2mWk*+D@MH8ff?(G(R@3T7obJiCb=-f`<{LYa4)Dog>$z#Wem<7G z`ysGbuu62QwPSsE{^5P{yFlvd-eO2&5-olIN$mGz)a zI*N>m$jY92KNfqcv$n)p-}3X02htl65PS#Hdq6UtKzoB$t6E4W01KC+>VB9dr6Zl# zPo1q0I}RhS7R#yFgfTVvKMH3)wLPcCl6c=_B3YWp=f4;wOrzxjvC>hmWqq(wF$+`* zm9Ti(tvhBuvcpSnPH);F9DKFvJ5mZQ^e^}31h;6H(A5(ovGyu`HN|u&R%|&N74(yN zToG45HD`Q(KYnD!R5uPvL(TP1ep>0?sEyza3hEp2%4rJO+#5l;`lw$nc4Cs9Ga+u` zjZR@M2-U2+zA^Luf>zaaNZhA^=@7rEXa^a#&byx#^8uRP8RNdbEC?To*J5|+t>xPU zTgie?tedxrA3$Z|0# zIC_5&UWnF{8k@H{%`gmDUtyYa?S4UIbl-@TeNDhlT7Qb!At0_)UER~yiWF% zqDZCBYbFU4)Zb3$IP6$kr+N#^A)90ODoai)vwgr47tzk$IK!%&B{Vr%SJqc-iC$eW zN%WtIP(rJ8;^oauLrdlr&ylAm0EBYLrZAM(n!$W5igi|XtE2{rxDy@JF3joY~f4-?H_HZ#J zcKMs&$j3aYKy2Fk7|s($QVGagBQFOonh_A!oaG^1X`=KQl&V|Xx>Hs|G!@}n2*uhX z9vbgZ^|L`DOg%>m>edzKj_S+?klXTFLz5IJmt{0|Iz>2_c#>@)*3dn8%k^x$;ZCSP zUvu(rP#g|Ya{hnmFEh{)RN)@Y(UdEq5K6}M(dDlchJG9;J-v{&EQzL~V; zrZ+n$eZOtk&1}%dPvFNPAG(~a4|bLck(9FP*U&!a`HXgGdDouuvF&+N%drHo!%8Cz zO|kZxCP@=WUS6D+PS$-e+Iv&V3VH}wN(MX!ubTfKxko@Sr2XpEG_FS z(Rlpo{k=KB85`IU&klR0GbzRq%D3p|nb$l+uhkdkf!`bT%jQ_Kq3dH`tEP}sn+A%a z7++k=athD!xLy2|?Oy+5^@bm?Vl2<5IB3wzUSw!@y1nSiQj{o5>21KG{+Fe&A!uW9 z>n65#kiye#ysKy|9k0m5*#k~dD@~*xa-E2Zce}>smzREIOtEGSRn0UxJnCS}b58Vh z&F6EsY>0)w$So=j!1%&ni)N%vGFWsrO2|xS%y0c#@b9*s@xO(|%#9q?LE;+)t|Z+3-9Gj#h3o-{DIwOnbH7W4|8`836|;0NT;bp15RL>1#uQ zy8D3m-aYl^(|`J+iSCH|NvaMA3v+#%oE^ke`Bo?0Vf+YNzs@AMgQ*PBlwtI;h(|;# zVi4}fJU}}lkctr@GWCaH-t6in7LgJB!zLEUmgFbmCF?|vw~@RGxjbS9i}`XLaX~cc zqd5?LTq4Ey`+neuIL-BIAR})g^V7?9vhG};J;4S&tPX+pCjE=7Ar4G=?OJ^A)q>+^nL z@RK?-Bz??KUBWKFbptU>b>4&HmuG5vIKe0T!(YB2Y&uwGpnZp^yrAD)Au&{Ae_SP& zz{)g(_Wb*yiFuy}v0e6fg5v0UL^QXnZb|}V6$l#zu}sbLkCEL`s}=-lAIUKdCgd8! z3@LY;@5l<~x0%@45KzHz!MDfN0=16BF|-$5j54($Hr^&@w#(EUOz`h==~O!Vm{aN| zvULk4c{eY{mU*LWA6o7nb@v>Dq{=50bbQ~TPl~lKGp0r4l~a<=H;8e%3Vrw?hh3g> zZn3_%BkjRoq1^mZx=odPY2`p}wQrhPvpS{K4~Jm&rL#cBAC<(Srx08Y_ELpAk@{l& zcAQ-Kuq_$1TH{#@4yG{jz&ROPpk``K@1917ls`a^S|a_KvYG?m!E2Lk3$^p%#JgtJ zas?HWgYgQ?<1bK+d`oUuP25xI9L@D;-uCgk-yB9sS$$>3LlXY@nipTDjqH&XXXn2f zeBmg!aNKT!vWpU>%jcZu3;UI43pSPNZ^xW{&NQjL4x<^S@kgqEZ2?boK!zU2qAT~n zw+8#aE%t^e4s6_Zd(-^IzKwIeWL9&F;AA0 zaG_C~%J|Ypih?X*<+3pzRKFP{f!*F&XST1}9mN<3S{X=dFJE>3zA{zpH=3hJ3y@N5JBV94 zSWb;!*Ef7)ak;0=8DDB@1XWuM@mqZx&JP)UK_jQM`*onXA18)Sw0Wchy?e(fM-;=p z5WiS3;y3|QgRa6sL2<2-UxC|Y!%o9us4L^f<>8c9!k0zzBxtQtCPricRkBNxeL(^3(N9{c-8J!PRs=wO_4k%W?PkNp= zFBX@1b7~!ZXnu4S;`zZQ)1$hUed3Z%G}a6~Jko3T`1Jb!fud&YekJ?5I z{wu^qBIe>Y_88iYJ8yv)3FJv@t;81phpV%WYHN$S{cTGNE$$A*9f~`&6xRa9-2%bg zr7iAGaEh1WEM#=l=ps>5RO!;SNy#@VC{VsZR@`m z@NE#~$Uek8#{vB&`6GV2jp6 z&#=`>>MVqw`+o3nHDh*|N|9C*uUpGEX3E6>+p zLD~qfDDr8F#liEGBZE>{YaT_!wdLY(KwdR>xxFjouxxUE(R*XeM-{;dI$fQeX$07l zKI#cWWk_4@X_=A^(>-#x5zTf!nC^8LTY*bfmj^sZ@B6i20a6h|60liIciGI9rz(XFDHNL9y8s;_kD!qYX= zVH`W$6|Vb+h1MBH$7*pS*%n#ZBr3XFpF07QPMTB@9@0Fc!(Q=5uNiAVxe%%kMQzTV z;S%@A_H)uZ@qrWi=0>Cg;@qrMyp}mc9z6gT z$qV1+mB?FWYWT&}!y%Pky&vlVc-EllS#_evJpp_Ie2!;Z-E>P~^iv5rq zUs2taweof&c{Tb>_!+_v!FP`6w{IM5%6u?l8#!J%K`$4bvENHOU0t1_EW-a)xk&}2 zYPcoau_{HX*;gBL!mw$ZvB%ES6s@bBziOxx((n<)FH4gnQs6{wjR>j206yS1ii}!Z z^qXGr@>`G_abe7EGQLEZap7;fR z_&d(i6`lltvQ?flWI@R>9!(i`Ivvl_+HKz@AcmUa_uPZU`~U6JyhLh-ABc5$3QXMq zhwYKoW06O>JH-Erp?=7TxBue8kw=_w$ai}d!{en37X)m7`ALNwj5sxgAcF7oUW`yn zc6~>FV$>?qf$h@$_Q`#}XRpozd{+ar2>I|hx8OXuo>E^GaK*N4)@|E{7`l5xE68o7 z{_QFyJ5w8UK0HcqG*#?=8l)OdI3lT+c5Jr`S+6tm+-cCSDYm{B(5{V}{7I$JPF=_! z%cny|3Yc&DzIlcS7@Z!20{X| zU6Vp<(i?Ug^RFpIN5_}JbB%UPqFzUMhwJw_Bn9rCh?H*ZmB*70abLcx#nCN!5r-p= zOz+~B4_E3z0jP+2FPNj}(Oh@uM^s^-A6VMCMHmfv*cDYWBj8z%ZWsX>1VVN!IcvLq4{Bn9#&T)fkg$NW4I4 z#tscdZwSDUuGt77D@<4s@Co4;CV_Jkp6wIZGFy{@7gQu`g*&Acwk zKL21S=@(&FZ>RaEe&+LGV=|l25(`<^!{qI1@Ms^OO>zYK#rn?^tE!cSzL}RDWyLp{ zO`1)$@IwzrOK;!tr3nR7L?gQI?(POzphk5?^UOs)#G74gA2;!gNIfoy zh`DapcDlZiR)*eh-+fh+rQ88X^JECXOo$$H(zzFtW%MYmRTF1@b~31MT6*CW6ZYMi zY4VB_oQ(e06gS2d(zPG%{Jk$VXhC1fxIY|fRf}4vw@A3cxgqq zmIOEFhITaWi4y5>z>o5eJTh#O#G|Q|6uyZR($i^MdYiPC%!|Yq4-Mwf7=pmV1UqY^W3-+d z35%o-8(olEX-YSdiDS4W*sWH^s6ogrMIkKWz_GJ-bdpHJI+-E)VfgLGxIVvTdwL{x z0;JFf9xok}ifbwMLB>J-biemuJ-FELc70BE0innpgy?S%o_C`NEJwW6g8)F=Z$}JE zD3|I_o~$rPDoN9mz9|U(PLfdhc{)yfR5rnhjJQe3#~gJ5y#l~#p*N1DfhVC}K}+pm!Ofm%p_+UzXw&LVa0R zzW0#@q!uy-2qTH{m3%uAx^PbMI-K_U&2LL% zHn(;L;TdO|W2`vmxV5=wYjgM-z0>ie?nNjvuS+dmvV6Ec78$C{nr-nt!tjIC&Qvb` zIyHDLEj@s<2~Ng5m~9>LxO1WQr-PjKamUCCe>4z#olh*>;>bZhQw7-m`QlLWSgit@ z{c!;afk4+TSyr>qBg#463l)4L?76ZrR&{!RZ}_qudkL45@X(&n@bGYk9g# z6AU=q@a?;$w3NxyA2sF=3v(#_UDU^VAHsJqO5{S9F0~s9W#4RE~ha4g9(fMcVSR&^@kB<(o|N}m;AW6BTOH3VnD+hTd5v2@ak|T?QZN}${pnZEQ&wInAM{iL?>$NWl7vtO zAhQ~%w}ZO!@SW8pEn`dq9BNswfM%J-7hd`O4n1^_$A*%e&Y?(pNfum*-*}I!X&EV_o9uQ=F*7ftc)UNOpAiopNR;kK zu&IS+JW4a}ov1F_rI@GmRa-G4N8&z)u|;jQOuGj?%86X*!c>v6_Md-obOCK%rRQJZ z{%moVDc=Ww<&3V@h{JqcdM1jsudaF zparNgnp(GX(KK@zINK?nXLtN!zb7Ka$!_M#jR_5G?T-vbqDz}zXZC2$;o<~yLif|I z{9uS6oO(*@i)Ukw)Jp4EerO_sS*;)CG|J25GA{*C_tp*OS^;7gP86-9=HIjNh6%Ql5D(Lhh3jj}MaY z@Oy?jTTjVaBY>T!ke5|}KZ}GULIFqvUkv@t9ZqB23n<|A*Guq+ITt7WH{9%Vz7m=U zl!#48GIJ4xHzqp;&b-kJn%GGNd7GRQsEI#``K;WA+*5*T_oe^wt$ba`f#mICwTIp} z-TC0LA;$s~w3~pc=LjU%8rk28nY6dj%BIe{{o-#V;5>@JVnOX7o&3QFYd?U7rAwPn zW(yr6p_{xzIF?Can)2;8jz)KMKx3t9|GwP`KRU3AZxS8RB-5(fR#4e1!my)XJ7Wyb zi3Rhw1gn$5^7#6kEs)Es=E%jF9M5e#&9wm_MFKXqYlhJSc%tJwF+QwsjW{)CeU7~e zO0EiJ=ni4nbkUYA)87h8?#sXT zMgjH?e4ZF7Iao6PqD-^&73O~G+6!pu)KPs#N2F9km0JGAU2sNSkIs*X(4sl~m`dH~ z`GYanNdg7PIL+tj_Q4&K)O`0|ZN9r!*4QY*_nLMBbaB~?`%}{Tb`m&v0bdIvNfR1an8WnesE45>1GmMgJFRhLm;*$`=}o zwoxn7Js0VVZV2o$wMyZO{J=W8F#7U2UH_&aL*giLt#Abpe#De9{C*f$%A8H3UY372 zbq^Nd!_=}~2S%`H%2F{yrH+#~XU0W?UbkH>(--NR$zgdsqsLQ zo8>U(&p&v3xk@*kBi)E*O@PP@2 zq2){FM|GB#!!w%BuDQwVe7da-k&@K=FA@h;E)$X|XsaLD=R7lhg%Duy!0sLApRj2U z>eUSgMtIXDfy|WsRE&o3LUKV~yFno`?<0D}sm#x-r^;tk3McbBks#pC5F5z^Q0(aT znC=6+V1_hlwCC9`i+`)+Q^9|?DI6eCk`>`j zCZ(l_oV+hFuzoEpU^HmW(%yXSGQM^uR^uhupN;)It!Onx)6iMCW?5HdRqf}b!?@Yi z?!-`o64IECuuer{j?A~)%;qhgj*TU+?763(f$Yp`Z?*l$i9 z;r93ee7uw142B1w#t$^BkfKN38uABgigo>4lT@U&V?7f56cRuo@NF_FhJO=hGU{F$ zWLv058qVxQM|xdT86>yRX&nDrM?(S2pf?+?b$vaAV4)wb_^hW6C^%FSI8^NQA&!Wc z-KZJnOX@eH~LYp~SKG?(pqn!IBZ2 zjs2&7ZoUPmmiyW00!jf$r`vAIUmyD+baSPTMI0I)@Ypk0fjmU>XHR4TV&+|f|M6Mp z;ekA%XLFwR=h-0!ODVMItYd_!QP^d%kvP@y=w(J3oZ1Fj%v+e*T8Rw>P@e`0COuct zTbRxJb!M~F@ihZE00Ezlk)>`LOM)j?*es=MBa=7*-*db>8v5BN@&psoT3LDar7;9A zfh`nR*?XLZoFE((RIDuKa%ylw%mm6ZTdaLwb9MQYn2Zu}lHmG!uq)6eAWqeYcDi z0_thV^gW(Nav9@8=r<*rkk%LyJoDGliu5vE3ljlA;U@##cX~z&G>i{llLxyekvQ==<}2vOg3k^3M9(w+xqADyF3}{j$X* zudu3QlR=XCLub;CjFADaDlKNGINLQWB<_MYe+yIb#a=w&o!!x9g#3`F?ekK!u}QxJ zGpr9Qhk5R+Oy8ah5#p=pN~0v^=ZA#J;E)}v9ri`K+uuLUiK72uu6i&lJwE0nVEy#H z!N$c45%S*I>%TwjV>~pR4Nh>DhtgT#&L|^}&BDaWisVJ0b>2<@a&|H95pX_snBms; z34Eh5M!zeM0~9C0M=lLy>kNTRqL`~i#&EQTs!Ika8CMHlH+*7=B4X>WetD)|+w0wb zh)FB#OeoH}gD-WD+4cE{^69J26oQRu`(IMpGOvLGq|PKC=Y)S^O$S2zK$xX#)Y%a$ z_Pw@(2?PO|yvYX|rvrIIkK0@+%*H9^eNktcJE`nlt}%;uvY%!TP(`>p25afPh$bkM zKmRt&^a)Ul&b8xLZ#IxNX)6%stsz_KV>|nZ5H}Qr;5IIR#-;-7eCAvH!hZeF;M!%%4yS>mDyZYWSrJ9`hgnOB`o=eV^^)I4L|C91BY)m$8%n+B zvL{a}TavO_HiO7~P~`!OiSn0m-^V8RS;-uG&dl87d{-w0O>-~;)0`@;_3{hL9rXG^4$`T(2dwY48vPhHaNgWi` zESj5W*BE8tw_#$&PNx~Wn)5_mM4TU?VMZhZPQ*;Khr8?>KX=bC(k?5$>0FsrfN@Ws zhJwEU*s;b396`(3PWy3wHA0isUh>exjA%x6CD~dN8Qa)glrmBpIvOdvLKK`7kUG_ zmUpEu9uA00r9GTjz4C@2odJ4{2WXEjSfh;i0Kuh9%}gqlz_)jEU_?MtPLRu6r?Y*q@VSg%wOL=N62y3MtU~sMp3fntUleg zN9A1#9brC?H@tqMR&p(=-od0g!wyx4#@!gJxD{YBxtf);Poz|`oC$b}zi*(3Vao3y zUPnk0K~M?<2WqWznWS~BuS<7A>ylLeXk7=auI$MM5U)S-NP>E6Nf(#$&pl|&N_J7f z9!rsN;w{;f3n&5qd{?uPcAD+;cf*XN6vw%^1zt64vdKeIFUQ&(i}UZH?37&~B}Y2h z5j{_g167?$H7h@zBFkF9MGlfUh9$j9Z_za8yevK#dC6-d<}GU7v-x|(j9G8yCWsK` z{w;3zg}q^2rpqLj9~=$T#W{E+JKi5gZ;uPs<+0KAp@O3`E1tY0%&)~pN|CuWR`sf7Gd zohEh0*l_Px-e8${r{~h5*#KN>Xt1KJ>C);cYINzi`aDlw)^da$C-}de*!!LTrz`u2!T?o!^9tQl zm{-;pyy90Z}wN;HdTO2XdgN%Ky1^R)uYu71RD0PzEbL8s1wNKaHPbD972w#ypj7H zK192NmfL+nwY)dpLB0(3DAX+FRMu|<;g3g1-Vep|VJ-&6Ua;&?0398MtGgsnq*bv& zUyQvHjW&sEJQnphndaXCvDq?fM5J0hT(QYz+2OyAP-sKE)1TO|c>oOv4=m{Xa8;vq z>o)Q$wDs4%)XYd)d0dvh^V*w>>_+#h+iarDE*R6;uT$1MolPL7aTN=EH;dr3TK`>( zvE&+FBP8yaWpB~C{Fbx8(Z%;jUto0ZTTsL6VEzQn5uI9>V=PsO?(d;|1zDPoCKB^r z)mp1LF;A+lUP`6swO$YNeC||Wwbkt=<1x+L#O9brG$~GM%iiBF55Yt-5eY6M)R4^X zLs}VX>7{vwi-Y-K&K%K+{9avIWwAkiB_3G>C8zyDZ`vMe3#&Q(JSn7@BRYfW>S+37 z_6TjRh}Z7>r^skM&%T&mz__LO`O9zr{!smqJ|#~cZIq?qU6amrKQ1og>uYq0heKY8 zz@g~FV*LqQtLN$)@on4|wc$^0(w&Tyw?)p+)r{%?sM4!T**@v(Rb*Ds_i+_2pG!_m zIbpF`^!0tI0NK0{+?f+>#cynX^BeJgiw?O~y%bEEmRcj9&1X$i4clMQ>{~DY`g0;l zC+B+?gq%C_zg~${}(04Nln5O_ zb#4&l?21&0cQZ(}etz1)r|y6CMnQGHcM5O&M^+&N{z*#&F|jL=4-LpS>pQyUpR3!r zCJQW=Intr!O$*@Kr8p&k!a7Jpu|zkCO#vAc@-uMi^fvLB+|hYoaHQY5pLs(@ZenQK zeorIKtMfYBOENGIVR9Fl7mWo_m*(-ss%=rX_Ln&B^=+NQl+&H~qodA+t3(|*Hjo#{ zX}-rG0o9B#0Xv$_7Qfr@*eH1a#xu?5?~310Kn`(PFd1!7ERtTj`P>g2*2;NCsQCzAd+cfBh`6&k}-^Gg!xZt@5lDHaDI$# zkGxNrw4vef&PnB~Leg}Ve)@HM(K&jFjG?c>RJd`-{ri;l)c@2ZY_wDU(Y3C`0{A^LUO#kBr)t0L~1rw8{4m~Uf5@V4&I7A?`0qN0}} zbD49Pb3yq5@+jEC1wHWd=-Fv}evz{;_qfkX+I*Oqpn7BU2SvXA&?K2~EDm5}C%MAj zk-+B4Kfoubs!1^vX}0uQtv}N@y_kb43GRD&`jF2*d0c`-xF%%U_7Sv&Zzg9ZY)-3U zn7GB6s(*CoQ~bMi-Lw5Y9JF#l>CUx^tWw7-l+#$*jc*B+Z6`yPgu(R!5cvl6!A!c4 z8aFo5sdIaKX z?i13T@SY^|I$NKmLobfwQFul$b;q4?+8^Za-@T(sr4J|L*q}_(~iL`Q^xZC zJ$eGzIj{wm!VEDNb_da_wNIbLY6V&=uJV?FR3jUMpDULb3qMBq;ye@W-#`R%wmIQm zw!0;=`Dy>QyQQg;Wiqe1pEhHS8l7mb^0Uhf{2Uv}q&nWAO}cPN+Iw%Hnhoe^ImDe{ z-#T|$1v2{b*Mq0&7n!v7>bcV7v&4ioUFPiP*oRtVP&iIUHjrIWj&uqeCVi(K^Q4hr zxny^{mpKwJ1#m6-Jp0B|*STHPza=9%vJg6yM*^zxnuBX!DrpEhS+rFOLz*bT!kz7s zIlfr=XWu)P2!p0nI4NK6%+};P1q42@GD*Vka}Q4liw!GXMk5KHgW95j3`&|09nY_0 zj@25MB$IYLxH>tEbM_0p>U?cfScylVJ13nGP+rhjxJq;VooxFj1N7Sne8cP=mDH2K ztpn`3bLcGf*^!QuX2XN_j0t!+BZm(7bh_xjc1c^^^+@DIe4c-OjStzUQxFq~1|qpn z=R2#XoAIrKkJ@_sm%785(l8h-7nS7c8y|J#dX+>%VRW0u=AGB|=^cgt&0cs4kUM*i zSc98{E@DA6S3Pz(8FB73lzJfN+OCD0hifnojQ&7epMJ#^C|6AFs`*3l#o4`BHh(_1 zw1^DpV-jChO(|K+rew5BXa_RAN@T!`-CQeg-}~WR6o*&A_>ky6;#T9-#xe=+$noc< z1=pfV*o?m{ z6*gJidPA*LuLVi!%TP9i&;UTEJz$uBNlr2h1V}CY-vSc3FBkbRX(~Pq#v2=Zzs^m1 zA|h9Y#Wug4&R>SQzmC*hs^E^5u!CG55cQ}y3Q5LR*88d3^bpdj`01%jQVVxGeA#2PNuB3UZp|Q)Mv-Ye@)NHCew^B?eHgQ;Yx7sL7ST2{|JVqW54cUZvcrPkX;Lo z0^Gh5`*RU7ac@o0Sn?s<1UPP8u`%gdyQpz1bCn znI$K%8JeUyAE1NQ)_d!1&3~hlq?c*1@$kW@-%yb;jo04hAo_$jmNZ~mUTPmVjn5ky z*TNkwh9SMW(x0*cJI@yqlq~z5K_fTWKq{s|Et9F@I)g=7n}3(Ce=qER$7OzH#qc-U z;nWFf#I<0u@b1UzCtz0T?V%)TLZn|8uEd#B^Ox!&9F_=<*tdB(JTWJ;2-ew7A98DZ#1W$T=PE6!cTBD=VPtn#Fo5H7&BameALhtBY;0RUC0`UEHfF&bv z1|29cVBRGf?f9}2PFG#(vmLB)-P2<=KD*`!LfkST2S%D-h{e0=Wgv1N_ZQwo-zhjLvAYgGkblz!z4_uybM6ak z(cv)aD?G2^o1G~V{v2l}$&Z82<_IAb>z>Nl_#=& zL2GPoHs^;h_YCh8x+`X>M|GfpdEH<*K7K??VBD`4y?Z(c;-{RtZ`_aUj9)^}G7Jm5KS z(l{I=%!cxNjVSN+YjNS&8Dq&ww{?aw*_^GV!{e=hpS*5JUkM4hfZZG4(}Bm&UBr7L z=Ij=LW8YM{t>(t0hO)?hi#gTj5)_d7=u}T`mE9h9f76^B~`%MPNJ{#O%mTtc^?%aLgrOk@{efNI%Ul>iV6&X`9oM8jYT)9bj#WaP@`U2l`32 z@rlwfB$Q_{X&@REV}xCUl{h&L`;?;6f6SW11ccJt0XyyFUrx%5IZ{d2_Vi`=c+&OS zH5WLHrAcLS(6^4&*D27oY47zv=jaUO%d&4d6hsr2$jCG%+^zq^M;x(r92umViAh8b zh)!@j?XYr-j2=rNsbaTRDyz@0%nCG%gER9n3*NL5yGx3fFK3*!iA zCiQmyMg&ALVI$9dId>BkD#AK}IOlZlojlFN=VKE)7B$Mw109(%6viv9%wu1rjLoFV z^yC*mt^{Sc6dzeA-jH3xPex%MqWL=#t`Qtni3$sLTf@d>7W zbM^~>YN<-H$+@%NqvS>2{d|5zDBR{vjD>0#ran1h4TnN0iA)%}8iqnLfn#5QqsO1Z ztLrhXsHq=4yo_G zcJimV_#_q8D`HVX-lm1;Ov93}S)4+^gSu&a@3&^Rx-DZ63A=;j2!bFihzN zOSPCo8p{|q2&>aF&J_@G^freT^~dtYPyRo&2)k*U#JQ+o;-c$o3;Dm zG$t^L_A*B$*Ny0+S)kVXlS3esJ0{YgIx<=lOom;Jyx&i>e@~*w0@PJ1vsZJRJVt6^ ztgcK>$zSrv*muoH>5^OvgIS)>KBA&8WwX}}O;K*INeT*(eAk$Pv^o$nnIOnVH&gUA zubsW~~|Qq>gqkTy(SjGSo%L`|5SRpN;<0Lst+HAIr$f7&j;V@WO*%?{GI6@09wC zFf@=wnX@a^P#(`}mQ+}{Q%r*2^(-*2P#Uu5oOMY*+|~!dOEz6QHm63y*+1lL3n~aW zSZr`nYY3@*+~;bSv5!fZPiL;Jj-z*De$B0si9U{um=&<3f#zPNS=1KuaUn~2$&@0! z>HN`7D_RlOD9eLDqFch^E2f*h7MM(gvCVy>9{b)bPW5yAIou*DlzTtRG&qrWR~`+N z$evc#J`Cpq)IWJ0J?q_nz#zdfk-FDRK|i-PlhoG0a?Z^~oQKRmpn=R~qu7&m?=Eni zOO-d;cQAM59lK7N7!y1y?*LKfNC9uTwISiVlj+`cO%3JQMv?^7KI1L7v~pVscCc20Bjg!!XzT<8dDJ_Wt(vZ+O~&JZGw*m$1xyf>jxnu%epz4gl; zH2SP|)~)@fpS+!B>u%2<6X}3%V5H9Fh89%G3Uf|jP8~z_#xKi$18^5BXjfuRNw}2FESK;7-=6tz zswD1=z}B@|#2bkyX@vtxkMdw2&yg&9a=Dp_!zIXfr>yb(eTpk3V3VVzWfkm3R^kiG z$VGov`!%weeHUx}*vd?c2bC%?at4Y-`%ZVWo#-}|&GSAoA|q7XVziC|ew@29gc-@h ztNtoieU?NHIXJ_`E`2Q5CA;BH2HblkIV8cDrQ3`HAdkZN9pm;(_(A*GzLMCvDwRZ; zP|{^{2m$#~k!$!bd^#Ze?U_pTj?YzWv-jq-j`w+G^U!jDs6lWwPD>#%|91T|SjXtO z`Q1Tv``{vVpzLFJ_&oV{rfE(Kt+dIQ#ckNJiwX-gWek4-{pq4}^p->p~7Fj(SzL_=i>c?~2{HL5L#;PZs zJBEt?TjC@!uN4fFW~jNPE&$bUmI^MF{W3>>5rDmOwby%?(HyF2CPG6+WRGmV4N*NuM<;)HCL6dq*1{%s{yG;6QbEU< zG6I>!sOx!2JCS;b1W#ap3>9?FWi!3w4mr_S7=e9eJ=?&dJlo`F?z{vU8WnZU z%1V4?PfF}tmtDntoV_yCk4x8ZJ#%K*lDfUK;rvFyQz*E#?t}zYJDdJfoE!1w8=;!W z#?1ll50J^Z+Cmw2sOkDGz9C_0bRR9X=_pB4(cjV|2wgEVj{rlP0$A3fNjVp@cf_(d z%^sp9;h(}NK^&BTIpiwy-m7F9v8B}RrWe|-S6f`Prs`&p({&QCTsvI0tF0d*a9*GAg4pqLny za$a!(>TCXA!Q*KKvDC8t^+Vqs1S75l^e790c)O$risvRu2}dKGP!YNFqxX2+^rb<( zk?#ZFJx-X=zS>?I;mI4_ZkV%T;q5veX#QXv(UwCiiK^`rQvr&AhQrWs*AV-OiB13Z z9>o7Yc>=j4kq>xeXFu=zf6<12U%1Bqf5N|lkk)dhS9G#BUnZPz@~m5*x>93&$*41@ zH)vuIi<^06NUGH)byMja;GXGxl&ny@`EL978K2)-z!yo|yeC|qg}Zf9?PDj{lJ?nC z*KGLS;&J1A?+G=ncxRy3ofFRX2=jsXG3euE+1~@h2~rh}><;MzAQh(%O){@Mvk0U2 zsvA#|W3!?C`d{B}||zxeFy z9479Rufh*|V-VO^`8G_2*^#|*TB@Q<61RW+~BOum3^}%%bMO>`Z?xd z->&$>f_U~^;kHJJl+#g zSTG{tr9Fmh*6=>U^5hAHg-n*5bHZ6T^ez39Rw77>ES&T7pJ+0jeBXL*_f;|^kue|a zq@g;>nFNDbs6Ul_{>htOJd5{w5`75w?A|mp{#$$25BwzG%u8`pp3V`&CfNlA9!p0x z79QE9TCkq@4^b7iE3;FmCGCY2C^#pqX2NwhFy2#4?yt6T}9*zN0c z0+!u9M0=~NMuEEEEronPBWI?@A)`y2RVuuTP|a^q^SMy%cdq5(+2V^LbQD>}ubNX@ zi;lnGoxkF6=|~pMdB~+yb}4t}1WeI37htAtEjiM-$$-L?RcBg92P=)@xX~5ojFBcG z+G+<=snEF5WtZ4!5xJ5;J`1l^nzcVX{o1=d1)DS|yP<|pA0){ufC=6i5tISU#y|e? zIfv8EVqgAPug~7prr9+#e+s!#cI-^qBvQYcVx!1hijI4ErYZDbm=>Tv0VaOHCUqH< zAar@^nl44&lhdwvWQbr~Xbj;qIrziZd$jsqrO$3c!>;S@>#y#=?QN_}{9VbtxB7-uY> zRB9|Ws`6^|*m(@2Onw^F@y9oxBH(_rwYVARb_2+{qBbL%$Yw@y5G@R1k?Ejb-(3FCFQ>xXC(1Xx!6RUw&FjwMbon?~G(xNMV}uo%sz>Uu4(oU1XW6}cu9j*8 z*$VbT6D%_29ctU}d$}M1_*^EHqvlUSZu0?D7hc9NtS%_0#JG|;0vVBL*pTl~`5nsQ z?H3@o$Q>?p7_)VJTFdw6HW!OGu3mD8SFV-GsazhxQ>uMg7&ja5zUmyTDWX$yglz$_ z#h`WWRW6w+Q~bKnSf*P_#IH098L&p1tfo)?MU%#N90D5%n9xBH8!c#KxSl>x>8#X^ zw=GaRnB`EOKVx9|Z1(n}fC(Hh^`xKoe?xRc_eMlSn|OIlWc0O3p~IFAdpKx0eF?1m z-iTmTb|oG>heY(mLD5de(E>~cqSK6<6}3?fk zYUwgi*LSJtG>lGD8hvYm0(wMkL>mK|u<=NZqR)-g;FMh66kxXu#StCYWM?7GdxjH% zsKY{>-2i7V(dnAf_<1}Bjk^a^10m@HZ_)c zHQUQpA#r#;#K@$3v~mcN9$)iQ%Sk^#Fa)YSUn-}oTm4MMtZzb!8V34jZQW#4y z`$IY^BGDXA)ezz;(rFmM`LVfH3EPnd?aceet&Kp7gNq{|{bO-HUJ z%3rt@vls$F`;b&;)?}d=LvN)fH+*ppKccX*IS=HQMFXadm@PIU(Q`gFRs<7lBVLl& z>T-JF7Xb|-5l;rA8O5zk^-`MLgQsPlNIo7^JU{6&;fQfT4PO)HC;UpUX{UoPD7pH& ztL5#GjgxRu59`40%3^M3{95ybe~gtx?4O$wmSo3;2JoUlIiSuGj`cc*(+tdhl#TNi(E}X$Al%H3}$nr5Xt$MrMn`k1 z#+%#tNg7wTe>wMk@d|epAS|Zff3kNmBz25kTXYjV(f%Ws-3y&@wGQ9mU8Hx7g_@Y$ z@2kN3TSMMgoTocKnIpH?#r}0~LjH~-x|w8d=fJhK2I>}4R*<=`Buh(K@o!=+gDMie z-J)#%{Ns2`s#ZX|(C9dt!_Gdxvt*=Bl-44k`3RdOF#kI)@ivqgd*rf20HY*N*f zr%NsnS1;H*5&tVHYTu4Qa;MG_KZdMNwmm>|ywJ}rW6q}9az6ua7$p6lDDwiw!yGl^ zot5OjRuszRo+!B?uoWj-E2(ps;tH>bE#`13RNSKy-pKL1#zh)6zoRS@VU?&aRyFw4 zCnW&XUy(~wXF>0Y@{-QOPlg_~1Ujo0iMu?SUG$2?^g`N&B06e=88BTxF(bVEALp3} zs%I0&ABo)KI+WQA;;&=^GTQx+_O0QMD_osL&h=k0M2mWh1d~{&+@Ge#F)A1GtiBFG zz+AOn_bB~Zz<~wA7cAO*UGnGXZ)R*&5R}{yMiOUTL)xcz?$6wIKM7HHS>9#Cx_-W| zRdf@w=Sx__c_@fAg5vZ^CIUKe*pn07{KO(@7D+O9==3p6Mi$NmU#|+J;BgSu-EUDQ z8O{vwecs7?o6P6s6nY}pNa}Tkg&z=9WHoz?@uzvci9|Yx!aSETFaA`uzJ)}w@em+W z&AR2cj%v$=z8U8kILrVSCpN6ADAG#~pn)O>PbTlCjw6^PY1@R zW~6c_I^JYqEi!E{eb-b-;w_;cG35wIWs`~|?ke>z{oww`P65m_&tlX@(wY@#I{1aN zpkr}Or|};xbbr`LF}!|XgTR#la0rFkJ3g_cM$MK=HKy?)$`q4-3bPmjX*IoadY&$L z7-w0PkF8fW!PL>}1(V)w)g8(OdyF7B2B4@J+at@p#G+Ky{paUA&tT$rEWhxHbMrAW zif%dz+{wj2r*=B;4o9d-eA!dbhj`MZB0D=XOIr7N+-Ai9$`taGv#d4~{)^8~LCy7U zikc#kVr`z4vbA^~%*Fw%kBMhA+;q4*X?5nvCZE=iuz2QpuU=nwDzQ{TkPK$dUAj># zJ)z{F+B|3Q?(XcjE2}PAwazpDNlQ`U%U3j#$UgjHx;~e-c{=l_81JqUAFE;S0L8?s z0Gp{gj!HIo5rpfdcj>+@Rv3dRV{T2do$j<^M70-cX7hpaj;zX_ZWo;q_DeU0F=ogh zU1U5bl#zYoIjzJ#v)i!m`mz(tc~jon%!Q(Nz)J8lgX)9?`1NYSzrx!O8jGrh*1Bqj z7nxHf`kT{+IK&p(-gHG zcV&+k_v_}m9l`G*%3)DB9wyTjcU(=7zq9*5;Td71kyMj4J8^O+^?77AbDc@5#s5;o zj4f-tI7l)|r9FSys>x;|T`x2GckP`vQO?}Rip0q$rzMuAR}ouyakw>|gfgsLrptXt z_IcyUjMdsxMK>iYAAV|8W3IM%Ua~fSoPF17tYRDRDSTZj%EIBR{fTkftg!d;o6|Fl2)tdY4vk1N1;c0EUMq3*3Bm#u#oRBEGL^2bQ} z$c7Z{5ubrb%KGe1*ZQ)=K&u_WK)PpLeUOFmr7h%oL|v+a%hkr*fYoQaOIlG-4>*kc?prD0?3xl0=eB^D#gFTX{r_UAsaRCu3e;Wb$Fti zSkh?lqU<-sBYwTK{%KX9;VGZf0eb-dKw|Vv7SrZz83|A`Qjm8;rp4Tx+3Sm+qZ=_% zZvUW*N(fTUOzuNuY26X_;&^>a#q5NG5FOV)Lj;e~P+Zvb4GAJ8jIK((GOhCVBQQmO zUEo!Zn-6NhP0r=LwEy$<4E^me?L7X$a8Py&#bw7(pugD{A`3bWcFIbnVA5I?HOpXGI;DMr(p!PTOu~b@5IHZyi2AODwKGq?mr~M3dL6rg-BX4SU|| z!ZHkvN`-ZxodcBw-VT*JYSw@4N*|ZtkjctTU0Hd!y{F^k6cgT6p7he3~u%H zd^VER@$KXcZH&Ci#nRup-9!llU^$}!3yD{WsY#|L!pQxT!2FxlWaFWn0Cz&k;T`fJ z0dT1IO@gWKoo&5!%ZVhK5U=i7t{D-Cwsc;gNPNXf+iFXXGO?ht>0*!_%A`9vjGD(q z#{1Y7>fF)(rgb!OJNS=J3CRmYh#S)t+TFm^hNyaODevslw%4g`%eNy?0nQBP@TpF* zaAHe@g))bF`m;%aIu;Satf9AKjp3U+tAo80h6c%SQ#Ue0gHbq(gZIxqKo!%WrAKl< z_7X7n0o5zhz^ZNXUQO{lKx|tzR)3%Za5MNY(|qlq%s6@sTbK#rgldnM*5-$2XjI_5 z061FN#T-snoc*_5AOi~rQ~|)M_vcanhqJeeYwPQyH-8nZxVyVsaBFd=K=A;@0zr#A zw8h=siWhgcqQTv@1TRi-owV=#KQnVX*Ia~?oOAZx-?i4Wdi8Kv_bf2>j((H4obY|s zM%q?;9Kx#k8pr3u^r$6LlqEb`DTO51>_GVtowap4#x+_gHu_UH0ff-XBLWC|tCBuZ zW8{UW|(jf8+=Ro{Fb?SS7>=4WYnG=JBzEaWys9&)0V=tNk1WOHoFazdcS< z_Jw`Ow#G>n?xO&5CYY&TH*Q=@fc8`{P72G7XLv(RQ;shqhvTkWxwhOysST!r^Mi%$ zyxvsEX|8{FxN^F1q=|EpMw_`M|C*vC=eEm+74sO}4vw=4Klus$AdGTu01dAD9*MRk zEFEV|)tH(M7-CzriG<|t=xgj2E0E#rsMW(I3Hq|BqXnZ;bTxW~gk4@+%H?ki4xdc= z(l!!y831?FAw!Z@v;c7D@DP3g_+D8Z@d#tjZI+@D(^h4jkd)hLkE1bDaFlwA@d1-^ zZ!(FCX3O<}*T*~*nxj_X3*S8X`M^?}YSJia7;@;054){2-$I}%q(Lp4P z>2H7OvUtpy{|a}O45Mv6e8F4?H!gA+1ZGA&$780oW`cSe(Jk7Isf~`SLtr&+i?f{@ zl!|rzboaAxBO9k`@v`&WzL=#%vBui+=r#uTG%S8(ujMASLCoOFT@@6@&Zv7 zw+N?pGQKBra>u5fUo`Q3VIG(8jOrO3$giTj4!U&U!1y^W0lHRcUH6tkR+w zYKZ!2)m@;*eUP&~*^G<#1}Th}I?(_EXV4bCgxh2$Q0F`=;&1SVA`5q@!c*J9$1%G_ zjKt@Pv~wl|-!ri5@-m&+F0}k#R~h$iFx{NBi~OtXifTxo--(SKf&k2FE4*R21BvCc4!lZ=?sO4Tmo!bp~;zJn*qM|Z4tq_<6*53b!n zH{YI)2>e0IVNUx-{DtDQ=nYZ*;X87A&@dfU3MbCR_ck^?RLVMSd&!-q>OzngfYo9ToIXggLp6V3KZ=<+z( z&7IUFI@x9t5NKioya%Q#fW&@JMX$^%Q$yYUv~-rDzd78c_MZtV*KNx3ZEJG;y(m;E z`=_Saox4U?rXA*P;nfQ0Wo|^Xl?q5<hl)TckbBi^3+ypB&GH*$&YaBgz2&YiOp+DdP3hSQ`UmcSF^@53u}^fqNnXrt88 zMngbWo15dA1|9cx8E}y+HrQzCoT4#NZv`{-cx9=`|DiIFncJOSay? zI{wT7pFgLFTQ~rt%0%*Jd6rWzkpNzuZY}hylt2vpeD$8+dfF#d=BiX3)=^up*O(I} zavd&iI6C?)4j4B|edUeYlKp$Y?pfeP|1W>#<>haCMZ(_$kLC{?b`}hi4<6yMyXNP5 zB(1o-y2~wGYJ_AX7fRfM^?YyDM;%bn23U2A zt!==ia3~{**z;5s#%@oMqZna{I^{hDjz*r4=L`Pa3_v`!Jv|RjK2Z{Vabos5>KwuE zKyB)k(NJbW^74D1d((G~8Ga5v?Ukk{`p}gy*TH%oC3sR2$+PoQbv-T(0x$>!jNrdo zn1uD3)}J<~UezGyCXUc=fXw!~m5&7D*6fiKWFwkC4>GyqtDn4;)NlbBPDNoDdwUK5 zUOpzY-?2A)Dt*SvS1!t4fy>6k@&# z7Vo__$+EgoMVBp(0k1FD;dfFlSZ2Bv-_hBu0Qv^k0N>8H0WvGV zSVh_R{GFYr6@i*L+)UdJK$_&6;D2sB4==S90%_@3+w&Tu9&0DzOtGDkE4w07)IH$!@U|G^|R?Oq;oR_;=10j6mvvO;G(6nE5P;h z-QgkJOkv0GxX+Mt3Gc9(ro1V72$tg(LsKOpHplcCn{fPlWqGWoaU?7p2Py^muS=QI z8bG3^aibl3X;DYX$}w3n21BB6gyT-K1)i%fc#LYsTa}`+iBgqZR+EQesNxez&JaPj zT^`HRK5O^B9kPk3?pMIen>}-{wCJ3!f&MnfgR8UI8Kw&^qCDi*FHs`yG@(2m1n;@w zhl{sCIM{fynL>w7hk>6NWDu}jrV=3MsIP#nIPWJb3<4P#@^Qg>9z5}Pa^SHot&bT%#%OY+y!OeTTdZ%#qSKWNXdu%#LIXCMIY z`xWzO+KX{Rd*gQu`hE<PSkwmXHP>YQL@)2&G8^>v|Sg|5Yp zh~W;%Q({6E?#xMucVallj!7J|LtTIKi>q3*q>R+Q|lKZVUJ0; zYW2-3qv=YxxxZv1tO|41J)A+B`CroK4LrMq2C}s$#7IFeXbj~_QQNe{ zxfsP0;!SHel@%1!1d=|r7!H;ytZ+=@YM3?_|Bg3%uL&%$@*Fu$^Vw0>9+!s2ea3 zcymw37X)aj4%@FAk4M6TZx=l>mu-=6 zGMcO9pD9yiq-4vS{unX9%*dQ)=ycPm&#Dr{?W7GH)PAHs|c7OVrDn z0|oPyP-9{N<~%hvD2?>>LWkf`{TjRJGTShecqTJ0J5naZ^5xQ(7t(a3SvFq`B};-> z`5v_{6lXhuF2P=-{~mSYkobSi=YP}LP__TTDgKI%A0JWv$K?5|>4r=EziXQq;TE1A zuECJR?OxkFF?c#XcxLmLeO#TIx$mf0Btdze1RTlGCg&r(L1pP*y;Ln?yUdL#5qZ@V zi>az-w;bTBS5zXVOFztf$oS{LW!Ou&A>_>to)PBJg8+AG`QlL?dKN~e8)}iV-PVwl zcp!-I;nCTX<(Wo5Gt|#XoQ(0}oBG|yGV-#yad%`9zms{8V15LJxAjC4CuopB~~z(W;;h@rqDZ0AL)EXe=t!T$cF%Iy<(OZig$%N_lF6Ek%lF@Pmb*-$7H%6 z8<$wNT3&#Sha!u^sGZObmssgLKTI0uJWjnYR226)R}|krY9j{s&Np7()&sAm1|^0F z_agODJWAWQ^zRqzPXYf|u@GC_Wa}lG2mrs=1dMiC_Kbet6}Nk^8u$&5caCJ~;tGm7 zqe*-zpUNAm;`N~LRnjhy3|k*Xb+d+^wYg_TW%rY6KI$&(Jd;$VIG?M}9b~o&CfQrCXcit(5d`bWH=dfw2Hm?< z3ItnV+aG_IUdwvyqM=nCuXg?Dl?hZ~kdDAbB{0BKK*=C_l*0GA)*ni4o|U-6@2h(s z+us8!|lP=C|jU+V1y%qi|NX#QUD{m4U}*EWEF1N zYZJn?n3aAwjR=+tUL`Zr3SpS_?qH$iAUUnLOjcKAL`pR%rb#jympjIGP6K$0<7Olk zx%IPblY6Avpa?7TPxLVA?ZLd^%rK}z_{v0h=?3x#`}cRx8M^IPWG2{_Ld|}-8S^>6 zo$@g1%vgJ!lYX`78iPU#k=1pkAN}QIGs!Gn<&6JyXa{W`j99Jo%fwi=T;aQT@llQ$ zjGDn)JaXjgWDEcUrW>Qb9U?Y0L0Hbcntb5@bBp}_MqWG7^Oj|&YKgm408?W|R4lv! z$Z*5*{9u5s&7F`$67kTlBmo7*29$4HX3j#@5pK?cWXnA$poEC}OS4sm00v^G(b}ay zztW%s$8KBoOMTC7j^$#$%*IHSmu4Dl8p_)qW*NzibJhz3pV~AvzKD7)+yy?}iMJ*ycoEY1$ z7XwGljG9P%(kocY?E7%Qjb=^5GHjXIHA8u#7#YL~Wct(`T((YRE?!x57-cA$wMG0!3aR;+0IIWGZ5JG8zMtY%U8cS_ ziuN9tr|qAqT7E4^A-WeyZs|qA^PGi|F$jT)S=I{I3_H_3`3}$sU0))APqN&dUQuJ$ zT>$3>CL-F!_7WLYQZ&h68K|HCzF0*|{#qcBnRySYQ#osY7-8u1Uz#n-)QgyFSfk6f zNPZTaU#YXY^z+qsHR#9AC6$#TQ+Jm{=^~Z>a%O11j>b5TrS?ge2)jG3Z$Ao(*`!{O zAn)^u$^G@~X2&hWCR!R~^eCzeRiY^c8edJEbL`E)ksIMOV;aXzZ0S`LY6juRU%xWm z0x_w$m;xsSThf2TA|{~tnxb)2zoOY7eH&W;rtkT~l(0IbC(`*_n-}Tyy}2^Agi`~a zyW}jZj&{-Jftr@5GjI5a4^!4@j_R!tM|kzGHt9elY!BYlwoOO6Fqg<+U7GLq*i0~d z*H%Z~*jU{T%a&7fbqH+6>Q2_r$3WHM!+X)qnpz-AUvTL4yJ%|F*(vB^_dXJw;kPXG ztvU3weQ}f4`}fEuQ(^l%7aNY7t0>VlH2eznaX48okzF)n5xRsa--Yxzw8$mvLr>4n zKC|!EdtfAt7)788D)}&gDaLz3@#0lzl26y6^A&$pzEIJf+O=HipkN$q?D%yEP1Gb) z9uDt``G~PTjzTB~{k{>|+b@iCl9`l}HkWkgXQ+~d4^zx$9#$k~2L(g0ffU9V2o)F!bGh3V|@cOMF|YFM18Ku5jxKGsp& zji7@}n$yf5Fb3c#eOUV$z-1^8?f#hU(C8Z(w0SSv+lb5cn5BEpv>GB*IOO>KVXo!N=q@mm{lWmxZ>h6| zHJCY`Sm=M7xVwP;dE~kK(Y&}kS}p2IWK{gh(0l%ONpbf4^j+SweDIN4k3}3|H8hi( z%=G3qcpHDk$Y&gPV?*n3bRYFIkAV;$4QDS>gJo)$V28A?hG2hsw4D`93Kg_oi(}#< zxoUrHpRU@1VGufdY#QcZ;I&=Rv*@Ve2^-UC0Bo>MhcejY$xjp4(=Yk2sQzo3TTa^9IYI~y@aJ-*MxHMM?s0dFkw61bx)342()9fh8x)BlgDkkV1 zCk;(<4>AxadTw(ia_yJ)S$5QZNd6JJQ0%kr#iB`2Y5I^lP+$5nJ;g75H2F*yN7Hb> z$HD1oU*FAkqkBCdfq1c$ILU8+F#JC;1xY&r*B96(@fZ*0L^E$zS{BRsi9m-QY3lph z*!?H7_7doo@STXV*lT z1P77K84szZh1>0SToWO^&f^ks=c%zmAbDAhBF??|@Cyx0(es^YYJEPT{05fqzO{}9 zY{@xZX{>ROHn>+Y7@K5=$m?s6S2>74#bAQmd5Cb30`7A!PVx8a?$L$YLL$+HW*Kp96OKIz zL4XCeUz`(rR0bi$qXb}kQuT=7!eJOFPVY!bnWo!*YI?Y}1HLPlJg56h+jUk;hiq!r zGLE&`Z-SDieUb_r>ZWpMxEPS+!A1%>m=bxwu_;Nx`fRKtGp~PHneov!$&a`?lTB9G z)>``$;Y6ZlUT+w9YGpsv`s&806BYn+Or=6Vw?50Ejyi<^)Uaz-r4oU67bB7XnVQ#D z1{{${y=}uN z>#7&&xpgxlQERp*8?8JyEeDoy!R{zJ&zln*Z^*62UeM93E?EzHKHH

    &C0xcC34T zR1RlF(nvd6b~pHd-1kH8JZ{i`Bi!o-`wyzztye2O6d8;CCB1328DaEg)AjNWAe%bN z0wrh9JIzjPv&h(5&aQm<#^GCKV9zKqukLEge=@$_8n(9|B8&HC>@K~MDNyL9OthvS zDL3OlcT_(fW%AD3(%|{4B*N*;=47K&!aTc`LfctJRIrg`Oq0ZRNNvErn=WDiZcowl zQJW$jD{pj^Hm@x8m>F!LK>eAdK7A3Piv^#!?wEgJJBG3^ccH@K7hw*}tXmbZkwhns z>qsUNb0SlEuC)HDe0Jpg(1s|JlQPNAdgPJ``~KqNcR|rgdUWUQf*C*ZnmrJY&u59+ zrqvITOb(BVH4aUAco%kZ>)Ikhlv#rng@$RXMI7h?vRGy!zvA^}Zm)W4@eHs6r`Y51 z2%A|&?qZLFWR*Mc)vEi$RmAH579yzu;Dty6vO=P?hz65n%TFIOg0G5ed(+~<9>IE~ z*(TFj=GHC4m&X!0=y@Gi=Vb@yM%=u9M=`=Zcyhm7nJ`*$Y+Hy7W+m#ZZFv`K+yX^ZC%rofl9bkvArX;t?cQr(i4;reV^6>$TjS6>fsZ z=LMxZ*lut9W7ee*xuB86zN?C@9ftqQS*hNJ31NrC?kW`4#_qnO)y2!}_3$LCaPsec zFycHLKsr6UUU7h3lRBI!p7YP9dlQ$@%G3v-rubAJat^dXO?XZKIUutte!xRH##UwO z$r`wEnP#%T{0FS9AH3p7zryB)Lko`?T^S!N`@a!!%~N9!Tb#b;F7&X_x8nT~D&Amc zrcslgc;OZ9;QthOMCfaeTBNIJhjcfOJeUP|NSIS;rFg%V0&1zh0uDRIS&T5VFj%&Xzg( z{R66{hVTZ~^}5h7^h4HxW*IK3RK>m~23MJe-QznKGe2pPbHs?rtB9kl$tX}&qQy^t zQ2`hJqh+DIzsFEU{J#S~p=gbmey^+@aUrX<$qYY6EIXEEg=cKOr5X}RZq!$m4@R{5 zSBrE2oe&PV{(`;iraRiITP@Bu<{k(@QZ8~0=&t|M7BKlK22hMlytdlJt^()MraS<8 z7`=HJ*6OhfQ>J~w@=@)SWh ziIT{q~ zztOJT1rmOUcfr!hdjD-+5?H%k0!9P(W_~uEa$tTr;x&J0cx^P+_+?u*G8VKa20nRG zP+zW3?X^CyNdyrhr5e^@s9d<1FSDyxuFM?VJM&s=XEQen!uw8wS5|_ntNTR&dRc?6 zz5vEzO!JS0@06Q6laiAlHDA^lqO(`V&Ws-yeSF@IwV@Zrox+JnQMyYLk&1lhPc67J z0l;(sE!6vFk;9`)BYTrk#wP-%{I8N*bP0a?z=_oy*NdNW0L#E3VIEb3G^z!lM}RHO z`GBPCu1D7Cu=3}=Putt2N@^Ld=JarU=KLVDVtdO<)X#o zCI4OzZ9+a}mq8;v0|ZxaHuK0S>^993-Xyb7HL+7qGD$~-V~~E&Ml9dK(EXC zB5F%FiC=^o@dR{IT#Nim7VfHtWUu8s81$6Ggon=kPGQ!YewX@=Qkh6KeL`!`fXxYL-}bDI!1k-v~a4;FZ{))tKQ>=de=hMkj!ga^PRF{LM zaAT$Nm1)I(8a8=d66<;*l>;AM&4firC84r zA5&$6@xvfyJ(B1^sX{Vn@Ik>)HZx)RXd;~e{U=OTMHa}74Z$Xut58^rA>m^9C0k&G zVcq#FcWJF;D=A0Zn-=Ar(BM2u#ZW>Uo!?sPjQ1yZk`xxH5>8gG+sJ5nYAC6Q2b}RY zjMilZAD&9i^Gc=PaMxM${qZ~LZO*{RyJE2O>hQM9Re&)!qJ!Bl*v8)<@7XXiGoMRu zERX(SxcjMHgW#Hu{=+}!`qEZEfj@ zZBy|S+7;DriJ+x)MW0`Y^D%64Csh}kZJq|L=p@n*0+kZrC1dIMVt=IpG>?h>`{J2Q zz26@>eHWu{uc=};rPppZ{Ia{OG6BY3T)aR<7$_LT8SJp5Fp8-F-3=G6zb;XU($<7` zb^dJjFp$|3@GnZcaY;r2H>SEshTrg1_*ne$J%$9XxZ#jB2?=yCcd#b?(7p0o7Mkg@ zGfba7kxWqaZlRJk*dw^xSpU_HEi-fu-Wz%0E!T|+<#mBBU?S39>MSg>9A^&fVt0oH1J5kkJ)Nf7T)Rqb@i9aOX ztUr8p-|z{b4F6QvCDBJ>Sg_0{$)Bg7xY)gz7ey@WL)*5c$@i+dEe0;aBHhnZ_J?yZ zqL}(i@>g4bL0|WNuoJ)k{YDY(P%6M0eiU+)Vld*x%JK^9puL}J`-DmGmPFx8j)l!B z#bxDUOuu`1A5nP$&ab7bgoCV=l!NEERfPs@H**5b;V!vGHSyn3#u*x|vZS)^fBG`Z zyzOyeo}X*YC z;Y)eC5=4tk`(gtgnXab-$}zx)ktZpS_t&t}Gg9 zT~Y@Mco`vR%r&xqYuA>t#qypVgmV(U#syo1j0!{D_@)|tTEH#&8+99nHNNAg15f1(ZdHJy=1z8_0k zWkFdE(d70TidRJ(U`r6ni+h{9l6ebik)W;-VvbP;(#mZm;0Av(;s*ccqsBuZPq>Yq z8B_3Ag!;P{j~lmBT|%^I>u`hkMDRow2{jg#a@D zTRx`#E+5#(B@2g?@1q_4zDT@5>;T$I#~wHzKfTHETtDpZbb1w&n5s2uJD+Zva}CP6 zWg7+!(A=beEmUb|yrVXJ7&a^u)r#2Hm8P34(_|T*ZQBM;PiQ43R>h%DZ;liEfJGPb z^*3qa-nUOrjb4Iw*c%tlb}tVH%+Ji`Z6JH+Z?>?In>$ipmYF1o=QM84ixJ5MEJS<+ zm>m)`H7I!E(3dScaGoZi`PUtc8v)OpVdOVTH>hyTWPF<|6~nvzy{3W-DnqE#1kX65mo6Fw!=O;@MyaMQ3K+dIgT5GdcAJP-2> z(HDt53_1FRQ-?G|ZmGEFkcg-F4 zbb3s?GLY`NqRTU&LfUZM_OkArsZbx(DD8ykL>U+DgEh%=opiU#8UoGfW_lP&E?L`o z^DU2)A{4!){lVek)4=MJxUvKz&sEKkDSizz76h!+H*(zNKE67lHsG);hy{_rV$Am4 z7W$lI(Mss;l$ylIZ!!9)N6|&P@o)G*1CNnOggtKAVfp{0ZK<|@J>w0?x5#j-$F(!O z%OJz6n2mHZsKjPCjTNKH_@@EEcZTKgiG@TMmI*w5{$O|=WBqkw0uD1LG(NvtFupiv zWIq5L5H%^xoCJz_+$jIc{{>0L;loek5N;Bc)a{S&oDnZ99r*g*|L z)dP=j;_tyd3;c5DPpCq7N}>26`;5h!m$~QaUB+ySnwno)ju$EJi2lxJnJCcV19v<) zN|BX8imnO6!F;dCwcM~R*)^lFZu2+#_pJmj{cRvbkNkm%+XIAD9bRiGhWmAuLJfG! zH*UYua~(yh+vP`oIB#bHyT%2^%qLjYKU(6jMmHVyz^NyRDl|`gZ5&^Y$I(v^GfiFw zq=4^~Xg(xTvz+nlxrK}7U-l`*`F{>Z?0=yLDFLWcIKSARg6;bl5}3B+E2F{FCX-0c z7N^{B!70Cj=?>BrIf!I@1#RYfjgj;Fap=Djx*>e-x^S6)*YZs9cL~_0^r+(t{(;I$ ztaTE$JsWU+4lFNa~$u> z`Ksrnm}g}tyLyKa8nMVi?3!9qtswS(x6NH&=RW*NDl9)uS1WiRGZKPBy04Vy)$F9c z5i0S1_NQ}i8IDuP0-q_vxBC&Btw!4=1c@GKgCaw+t7Micdmw;E*Z-H&Yg}g}3%{IuI{Og;OeAHg^<aomrecUwTn;W0JSCXN7Fwz;h}MlHra{Z9{6O@r;qf~*holGr)=0D2lZ<`MmvKe! zY%N4`u;tQh3!3=GcJ6ige;7byT7Hi2siAGF&3N)wnb@RzO9C~lQQ4ehAK@peI5hCJ zrQO0Vz^jQNpVK0F7rp^5+rL(&)^F1Ll`faOTY>ga0~lk$u=w^r751?g{(3zc%*jvS zUV=7@c2PW$5)?bF^xLAkn0)bA792}cR_tLOH;kd@nhhW0fb0}OtJAqgYT6Nn`ZHAq zZAz`=sLA1y$PjEjDPC5;lx**?j|CD|)Y@MIE@;;5x8xvmnnDWD+ve09^$0VAKV93m z-~cS*rjdl4-mFf;_UYATy9>rIE!Q{rZkVU?TYD@#*B}4(Q zU8hkOkB24Gf_WTS6SBl~Lj0*t;nt#ICRdRu-%5Qu1yd7)I6?XN<@xYI6`)DVoVIX@ zW_1eqGQ!Eq6L?&8RXkdQvp?6ly-qw7<$3B(L}a;Z8)X04*OkjE(R z2<$ecJw!B`mt{!vs!1yf-p6q+Ul)N}emIYFifPR&EAM>vX1YE7Qw}= zRXu5YBK%DgdC09exAk;;6t?HcRQm;241jdIKi#J=l%pY3bOxeO917rpXoSBh z?)Nw)#0gOEOAoyojd&eLGl4&GlerWZ+nfLyn%osoHc-N4a(g#47Jb2 zx8O$FmoXu_73k*m|6?tV)*Q?EztYEv%m*a8(mBIt>i< zBYiEHL|2e%74MR<|Da*C>}oL9`j)XsTKxo_cxSyke6F}9m)E35=F82aA3uBQ1hhXQ zO~U_`L9`JA)etiWj=huXja4flTTc~bV!={<65908p{Gv!g%Biw-aBO8!5U}%GKrPDA$iai3TgF{6FnyZhwQZOlZM-MvKfX$%@s519*9FE+pOdR9pEo_oKv?v{3ffcBP)#g() z*fy}G<`+C2sAf=m2C_s~5bB=l7v|~QIS4cqdOehox$2bp^)0RfG_#Rd5(T|=d>z+a zp69LicVA_^R?q`gin?9shY+&ZLc-V#DFdYQN*H ze{QNqvcI>x=DJYZKueUA)qYY;_F<*7A`+N6w=bAIZ>-J}yyp96g*~iqJzJ@)7&cWc z&*8LJ^($nlwMMlo+UTxq`YfL;u}nR4FWY8((5wlWH|uwwi-Vuny^xWob~GOWBr)@s zFmu?ErFKK>ZKuxHlK>Lfu0fT}R=M$WC5=U~A@zKFLW`C^Lls#uo5yaNxqB;ccf9`3cjTBq>p~rIV<_SgGCkJ2UhnH?;Vbj2jeSCEuYsYo2+`1 zt%5mWqS^k>p6pd*THd@zKcjE^T+t?;5QL^j&Q@6+&U|BhkI*F`LG&FZoHD*@Z=0lv zqgCOKTU~o1P5CI;UeB~Pp5K9m(aeAzd@#Ol!lpK9CNfXjb+6*tb)r$Jr@T+8OQLsv zbH_T}9yvAyAHWgJoa{WhlxQTi`t8*F`DveNCt+W%5QK~*c^IdcMS>hZ@t|-k5hcT< z#2*V75Q@mKoLYm|DG3XuYTg0B#zDn7e!;~uaD&6ihqeZ6Xpb_GE?m4Zq})QQ>YWdJ zW5;bK<9sLErc#U{hAFzXD*Cu;mA%S-HByB*7)qwMZIH4|Id8HkgKILx5vn_pY|%Tk z*A$1mroF3OB{zeKI&Jsa%*Y?c$3CXx_fx*5k_Hm4P_TSgaNvwq$>4KRB!;e#^Dvu zKc=L^k z`r4(RH#TO%SA7|CxxHJztQXQs4kp0G(wpg4mM3J zHtbbb7V%D9vdHPR{PnJgk{c(7Ec!!Ja<_5E*h7w1?yuC|z}0tDZc&u@P74g)J9lI% z_)i&bneqi|Aek8!a-63`ThP-8@Jv$;-N!YoSrJ5n=dyEn6`(|G!pM}$pFYxL- ztWS__xw^D`Md|O3S?%@TX+H5Z85hB6j>uHOl@|x<+JhLllQBmPe?C~qYWnC}-Wjs+ zZaQ~@!A&ndv`s9=jnhx&$=*hnn8kaT>RwS%M%+4OzdMw*q#5YOWoKbur?GwMmF1wc z@Ix|6c$V{?-V>Ezdx^iTC4XgXI2ga=(SqH_eE|7f6_=O-bofIX&$E-kj5EAF(1(I# zEvU#r+wzf5B+kjF{_2@XU9Dy3h&bT<+AE6Ek4^d6X@@zjiU^^rTsmJSWQj74jgAF4 z__4?-B*L_q9*Uf!lEE3S-ZtPdZ}4l!En;FzP;@?H+yXXblB1Ql$#!VK-+j80Jc@Ot zQY+Zsof7!pP48X{4w|2C`V%g)0GYYwY3cU4R~lJ=nMR|m;h&`2WJv@k=$s2_u_^@= zs^G6p+591rUsQ_y9c>mw6fB$aU!C`SjF4IReih4?HtEf{X~g z@LtmSS6l;)Ga=32o(5OUQFB48O`toTGGk&E_XC;iWmX|#{O%ULETX-YuNX+Uq0VHV zO|E!8;e6k4(IN9{%XELDB7JE5F&NPx?F(%&t2fb<0{k`Yg~7`sw`4PN1Tk#-ti4`< zB&YYZdRc7Gx*0MeYY((6bW-czcvs{%OWlf>Acs2l4rsq4#iM2uznIeMOl!$IGpeNT zoJAtk`{r`3L5@IGM$vK6y`~9usGojlMRBu5;FGXV)B7-M`mn@39oXWPYD8=741X;8 z#H`5oN4ZysF_ixlWO9snyK^}D82Sl{rac`vPno%#u*;bQ8jSP!9+Y`PK2LEfP|9^- zi_>&99|9`$&`pmxQ#y!GWSNS!zDoWA82ZY=htR~D8u|;Neu$~b3aOa-_2C>h;Jy^j zIMa64FQA*Lf0xoymrIT+;un2Gf}1M|pnxXzHLDG&R;k+K_l#$JA+ zpFn10tX{35rvtJ)FP>H%%jqr9f-<4Of5-@Ji0$arn|tOXsgQ@t4r0&8?8m4jeK=A@1G&MH+2A-5 z=0ieFUUy2jjn#qe&b57Dn*^z81zqupC8%&2z&V)}6bJ4jWrLEn4tAofop~3cNyR{% zrNk3UK~C_^X*eUvKZVCT_*ETkDtVUkRHvV-ez^)2+j`)T?EsslI~NJpfmtYij-H0S zljDkfy4Ve`@BGH^dMxDC+&+Y{{Qfcos~Jn)wo?V?SHdxi-KtX-#M7dp?t1AuK?U`V})s+}^U(;t2z)cz5tR4LJ1 z$^Wj=lBR)4>U&pjiERZbQl0O*H;J9DBg-yix$HHz6+l(we)B_fN z!^WS3PJnaLcM>{4RnT(7C<9(I#V9iqoo3teb{i8049&!Wn*v9XCUPO1=s(r{XjZc9 zFQJdlZH7PtfmmjAiTt@;Y5UYmV7fqHjh4T~@6DjuGSR3YB}~VIdx7(Tz z&=}{^7kNaj7rZKWr)jUYq&7q~(qdhjFYB43tL)Tdm^@fMwmboTKEXw>H-b!Wzi*Gw zm0#|z?ZG})zVKs+#{-JN)0xBE+KtQ#2YYpz*7jTrduIKb9`Lc+_4YUc5+Yj%X_{UPzGirX-O*j+?<*z2IpgljoDJ1}pov}(5$SiT$ zfA;F#g%dv$<`CmjenNP1x~Sl_B4ENLkpe{gcJbc}%&&mqNv>+W?0rDhVn~>Yi`7~h zr9tIRFn^IAd&iTSDgGK!b0z7U5%CFLdduo(Py*V z3cX>FBhhuQt#vjC@0bau=T?voi@}K*HI;gBxNUIZcBqNu%Qz)m{Lp?^zK>tnWm8W zlRuSn^jqhJ_~5(oSL2vNa*e>dJ3+Zueiho`-`TA%5*8M2FINXK;LQ@>c!PfU$&I|q zSfXhi1t-83?F(KA5x}}m|JC&t0vOGl8L)homxsHyc;Fqmq0No;nCAckY8Y^(QRvyFY7? zJJ|#EB<}v(f+rIx<;kluT?~DraD|0V?RNRAP2D%>A9u@eoGYunXrFVLTGQuho3)=M`(Agshyu!{^H3 zoXimJbaEoo@h`TXNY=hj7@ilqyTv_0gD_2#&T-?IY=dzpIP)^&`p4mGeXpml#t@70 zhy=$tDyRi3?FC-(y4qSQ1xKMC5a?@|I$$BoBe1I6S5kv!Lv>&8p-B?6GN{t4DBPY* zxDl+WN5a16H;3ThkSRA~T}F z=#9#->WE$ZPcgHjH?2W_is{FuDp<<>ClY2`!H*3eh}f9nPt%mKLI31EUx`lPJFU`B z1&Udq+5L{Fgj{Z-9U9cI&D06@A4(&^pEz`)huIC(EeCvdZ!t`tf}Md_Jh4QMq5bT^ z)wVEC4!V}=bX;z|@fz?i-Ceci(OliOatPN7f1b3-LV!hD=k!E>bA{fa)G>o zhix(~242JDrt;VavRMAUe6%EUxqfq{pGtt=hNJY=&4wLMD2xY&Wt8^C9|Ut5Xc518 zVVzO-QE@D5*wV=un!ikX)tBoeDdMw!Ec7EKK@(Aa-%gRyOjW0ADjz8}T-(^ITYLZ3 zQd(4Lvtf~=+N@7{Hwp;(rYn?kC)9{R26;ru5Q^XL`=bhlW@230uSLzzTstwsJ2hLQ zOwYeR-7+@Uo2c>c;a{ty4P-t?ERvhheyC*HZXVh>PB_qRq2VjjDFiMhU#2w%X!dOE zpb>)d5kk%hK0HH3uPBCDUa0KTH2N&n>5xv%B}YDt0-XY3G@Z(_V%iXkYvt6Q)$Wl+ zT;@MET;RRQe!G#hH80T&2L@~g=+!eX+CM1(2QCE!n#l8`w7C9OO^EO>=-MVSXi^FN zjwL@ekC>13wk#oW_EJn^n+V7_4rtoPoS4;;&BqV%IGtRNFsr|0Ukq{)F?1q3e-h_K zHc2Xj4&@A-?xeB2T{ppwXVQVnYKG`&dP7+GiCn+!PI zjFrc%v+Nx1F`~<-;qA}asiK?7488o4Kx5iZw`KgeasFksnIhbwCa0fc;Z!NclGsMo zF)qa~(k;_%e6Sh&z@mJV*`J$d$uUec6LW`J2hAlM^}n=`J>HhjYO-t~KE{8MlWf5M z7jyXkCsIQbTlaQw>D4ywH9wnwt{5+<_De!|uc@+sxWu6^Jh^nRX)dM#*C}p5?`|y> zCZuL>x>7=*FRz8l0{b`TK_wn%NwTGDfkRA|C4=|6=mDANQhoZRn*HDY&KaH${|=T@ zxkwVY^eSupmt`BPM2A#Dv=V|Oa&Q*|=dcH|>b!M%KVx`TLa;6tcfIkixad(h>fEPA z=Q%|N)81w@9_M7N=-zsy-dlII@x|@lRa%M_hhoK{xD&Lv zhvM$;?$+Y&8mxG63+@tJibHSCa^!{89SMe4!FMS<8pG2qf%n1}FA;7GOHN`}oJIQ1t<8RVj zeS5~B7L!OPW~w6oKl^e2(v@}$EV8Kc7sP59l7A+Nq)k`9zWT!1H#e8UqGe|VXBlGNVQ_;SLRh_ja&eOa05^Nk*iPy1Z?Ve(3z47_7GEvV~X9pKtw zwEK1po&9TLXxAvR)#N+DIK84`0(H0LNTtMOOE(NhX92p9*}^zCOz$suf6WgyVcF4C za-p>f;IJQ*xs`|dMjZ&Z95%vFo-VsAzLe>95uS(^#FtUAFa#xyq}1?bqRwOAqrGV- zDsrxSBkq<+--P<=b>+`eu1#3CPuD;A5RD~kJ7Qs~?00`il}>~egZ~y5uE9MJi0PpT zMi&|!@bLON?z6&)RE`l|hKfEysod2QnTsWRE*>wwUkBo>nB-4n~wOZn++d9E35^)LkZ!{N8`eZmfUY*8VY($t8W#5N1Q<)v-`2 z2+i|y(bnU-m*e)3Si~JJH{k~Qr}1h(s!{O~SAN9T1oQmhZ|?=};!bL|Hy*4{PK}O9 zXjUKayeg>;>_HPDBs)tZ!OG9;)HQyf1d{frNbQBy?YY?lbw^nVM@{Ytx1GOB2Qrpw zH-$nwoXSJb9D=@gtR%_1Vkz%m_bzO|jncx)YQaN6QiizMqm}H8NVSjat!=)E`onVg zPDqMsBwE?lj-Xp~)p~2}0kh-rl9uUZKDETh4Z{E&Z#|1i0#1+G1WhoX6g{TWQLlPm z;bSjGnv9vS4faJLKNnKifJTfpMB%il<_RJ2c!LSTgeUYHM)Gv$!6GAA-9B7BXVp(& zMC{B@CYU|jSftW)+NbWTFB?~l`4bK&96wRd{{cW?C~POUJ?84L?#=`hKzEo7{pRC} zNo%c6Eid>e znRW6>;j5R@JyHAM`v9>Fwi;QDB$a<2*}OtHI^h~y8b$_YEhb}L$le*-YKK=Pj7kn zJ8(d|FVEe7Oj8}hhWFGoq3pqccGX;Anm+Mec-OnR?TM_iRW<6IJO-U%YlVn4{ThIz z)ZYCANA%M=_9WkWiu~R50d)<>s^m`^u4Wh63Z*c;4$IzoD;%;*)5Baw@jQ)QAQ|Tk zabaS)bb@zgs_WdZ6`X-WRY0*)GxAJwpFXpOlmoO{^Dvi)wU0feux*v5?@+zFN-ryC z;qc-x{PT9Spu~u!pa8ua)R z_Re{Q0{iuSTGlX=Js-YeH}G>yGa@A9$SlW?-U8KuCD}ydAEYqn6s}~bzKCV#((GPO zbeG*hP`W5>xC4LZZ9c->pw(kUQk}|+w!kqo1jm9J)3$Xq&kqO~)IS$ecduih9#h;8 z5#vmIM&r~*S8w*2Ff#3tQZ%C)p{;I+OMjz9W=% z@Q1E+{X(pBKY&BqPukSnp$8(4NyGz7yu$IvV@3VrF2zbdd<3$nafKRNMqSo522y^X z?aeDRmECVdd~MW!ItI8o@-d?)sD!#WlHKpNXrmyLv-2o?Y-kREo2p6S5UACjm|(l4 zg8pPALT5+7 zt%5kaH{rEOoNW9=Bs3*AP5C9_(@~&S>gf!nF7ROM>8Skv0ACbVN)UV@mF~R*T;a{E z5wy-}enb)+%^~&K)m{lf$P;HaUU~(>rv2sCvog|b(uu{4&_T%XN6QS~41Jr~bcBM; zY&;ZuvNg=W!#6iD_IHf$U0TY$HZ_gviU3x;E!Yt2>Mf}@@XYT?FXG>ria$x;&)$$f zD1nmd&6~u1WHF}f5VzfDJG&`)X*Ty$z&Xx=Rk3%_9i6%(oV$1~Ax$VPze!XO7Cb-E zpRuzW4jB2e6wtm5QYn@-i(3HU55(}4py5C-h|=a-5(k(P<|+`k8CM|*9JqW z#*_8uyUgEg$yorDg3RSxR9ab%^~JdK!rQddiyP!bn@w^}bI0wBohQ(C8*eE>$SNE? zJh;L=lZ;P~7qwF~iZrW5vyDu*D|flA8D+>(D1sUDH%k{Rrab_|JzE08L*>+|y4z;n zRxZYmDCs*ur?Ko}wRXYHx07JUP7Y4jO0lU&lf46`t%nU7D2|=x z9}75S~Pm1o#(Mdwc+ z(sv%$(tb@23%!t8y+_pllx#14|K57I!>!e3(rnybUoxDWlhuE~{q6ePBY-#eBX)?5 zA?(cECd^>G8s7S^PKrKFSUs6U2lip&;sZrRDHP5I=bO5_1_f^0?_Q&ruEHdLo4=gu z5T?&Xy#nq?hkeQ2JUH4 znm1xw<6c3_7B9c+vIF26_JnqDCXL-iDAnk5nSS8?yC^chNGG_0Ev;zVjqNYo9UAtD znw2VyBB6DvHSV=uO1@5n$%vp^bf!&Ko_oWcEMHxr@FtU_qqVMfPK5 z0{>fAVZm#wui$xZYys^y;{8x0?%l{PaNgU33-91Lw(--+3zG98wyWKamoI8WuGTlt zop26LrK6<@b%}?^*+wnX`C)10+4;pd+>Vl+;J535`abRJI-VKsz2fOMm-}YZjt8vR z?T+4y-}3~S`l~J@#0G-pmh_iM=g-+Tb?ea;^0?p&j$OM#VsZrI8p&Q~5{|g@sUc6h z2HpwTdm2pvYNk-Iu4i9_9+ckbxESlu7O=g9fB>VB8jW#MtQcczz27h8V;Z{FscT1u z+DMpju7UN;E;=ohefuMJbiE>QKg|}caow4(PsI&3X!la5+pFKydWiZ+hZ*VlZL4IV zzdWnApc#!10zBs?ZZ_ZC&VqX5@put)7Sj|iFx#Knzfq<~!McYK_%e&Ak8rc8fZ9Ld zukj>&v6F68w!bElsrHTSP?**29|@Yj_ZwqH85s~krAWGvoAz{c9DI5_lE|wFa$`PD zQDmo|4$*LweHdd@9(;MPD=#=I!{ps5qg%JvwuzAfH?8;Tkvp5Im3Uv1+PU)&4>NUi z(%H2}sVy&z2w=QnnkP zPN_T>%(QqIO%Zu5Z<91+pqf?j6h#$(g8vRSNYQkc}tE`8R?#BIYz=18>H@0{1E z7x=8cuu(;uE!{4RXf?+~NO3w-v6+${nPM+jt$hp^6#Gg%O8R2ZFWt-~@7knmYH$PU049Mp}3)V)x`UPw7Fpz(-Z z&Bz5#eyq0L%eZth4aH0kpZ{&x`X7NNhq>ni;N=8}y z%e#hT{|jsQ{_$s5IQeMMluZxWmQaPIn;i%L(RQ~1r-A36aufu(W*5`u&$&n?dy%#V z1Adz}`j5j4eNWpsT}P^%M2ro0noQ*kM~zKmBvmz<2{+uS=j}JnU)s|n5&5_1W-K67 zW>>M>z~n1UG>%F%F%&cMM8NyTnCVEOXs9+D7LL<_9~_|FjtKj*9?BHk2|XAp}<4~-=+&qSre zv7vXsd7%C84}LtN!GYUhLXyRUfrAv!Pi;qV2kz?fvs)Z1{Ru@ni)Lw@PckM?(E26PhqxR$ z{AK*}&b(cF$h#O<;7i>t{DHsF!~0FVz^eH&^|B45OSgKhE!T)!$5F?J)!wh|oeZjF zs3Ef{#Jw*jx-Uvb$=megoYorCQ}=cyMH6L^Un;$Ws}XO}C0y|(HqcJm#*LBZtDvF} z>d)JgWsq92(majO)9kRI3B!I<>>~@`Y0p(bdB2V)ld>=$Yn*aqjg!3F7fcT!N;8C^ zTh!(lxvT^~946NG(HLU5QhFm>>|cF{qFoddLZa@M+;BWNpM|u5bJY8_-lP3Hgv3lH zc!*Ux32 zEE|zv)*&}SE0MC^!QuCS%cRvP7KKh9=0(L=2!~r%3OUqD?mo z>eBRPy@?CFL0K)%e4L*t#FY>F&ws8)*uh`X)qiC*iGf&nfxjuO3*cKI6t^;hEHh&~ z;FK~%&Wq4v+1!4IDd0j~!~Ml(F>i1ZZq`G#QK_$2q20UU0hDqUCc7ztlAp59gOCzR z?|k8K>fdgUJ#Gyo_%WxTk=KMeRq-}f(T)OLg*IN7NC>r(eU}>eru(aTP<{b6=80E&gf+nBh zD{Fj&>=`F5yQ`7C3=h4DWL1Zp5+uOLeDi87xtYSyrTUmkCQ+Lt^?^F>PBA4;tqZ@8 zAf05Mqev=2T%k?N>NBhBW#fE*~zVRqs;yxmC^!vZ26k^cy`HC=8LWO z0rRjXrycxNw+>lHYkl!FR>>688(XU6GT;TqTlIK~l<>GpdqxIxxy`xN?$S%b*=(da zoT1q58?X;TZuwSKXk>M#W>zlHkpm)ob)I#m(T=ZdKI=DLs{@2hMkXz5`L*@rv{9MD+n0Hk)2OSW}duM_`!5;`+GmX%?<$qwQR1bMv4)t#K^`vpILd ze_O-AT9D%&U$wEtgWC|(cT=2;ynx?#C0oi>z$2;`KA*6&60o|QD=$VrpziDtKKd5A z@ubQjo;l^Qp@n)dK!}8v@vv8&Mq3_|Z3Z8R{@FYFqi-=DS|;hAzgy~6;FFP3l24@+ zBqENJSlo$y>!4?=_oyHC(;+l7Y54~x`01cF8n_q4?U2M~6*Add`thk@WuuJIhf?59 zLSuONVmn>qN1fp5xlf-6W7_$pu1FVsHh;LycPm zmQ*zb&ST<6rj#U(goTFZl;%P%+E<^m{7B}rvVvO&{`TJey2f}YAW3&vdO9E2+-s#gFmk#Ee1XNsZh7(aL;A-+K(GWL!ya+Kl^f=e>>5o!85;U6&^P| zm?b?K^^}3H6N*6|!)jzKk&I#|dS=mp7&Wu$uCMJT-gGFOidhA%XTA(sm9CxD6NZky zRJL9G94i^Rcbl$`q}E4D(sv&bKj+W=co(-~^(SZUhcMC} z%B0sxTl?O4!%6zP0M;I^Rn3=zmo%q2Pn@l`n>M#>pKHL5+gQs<+eXo(Svc&|A{~_` zh>32zvXbkl)(l*{I%ARa@~x6OTdmIL>F&}sl*tz}BwP?lCD#Lc6B)|-vSpMpS;y7( z4CD6USDl5Y$j*}^Gbg>^>JI&MeTP>P$<;T2-GfJ`?f57fg=p3h{*L z^3u51I9O8Zfw5bwB`zt6U-vS9kqNZFQ@yvLo-;j7f&@me;n>yH)kEQ*o5rjRdH-y3^;U zsOWW7)$btASmpbho7^UKCXiF@1uZ?00($XzR&J%o`37IrS{uT-DKNh@N=*;Q_J2dv z-21A=w!Cn7ezdHiBXFvXoSuVy<8nppk-3$CL!bn*Q_jm`xk|o74ylM&RLp(bShp+V zi9ef@oY*2%YU^EhPppd$)%4|l9UZbw*f*~W9ma^L_P*(oV7Fa~Zc=kPZE`~9Ep_$Q zZg_n~;4RH{Kz?{LfbCZhS2^WqX;w92{lRPloMC#Wy+OWv&ZFv9DU~N4^+)GIq@8PZ z#I|zZf-fl-0An_N*&UgbqLS5X3T0~6s#+JqTgL}r9YAt9xn+WO1lRTpX)ph1M933x zoKi{(*0&qV;_OSZ1^`%}=@qD$@d9DtoZijJ3_%MTt zdU*<}Df;zHMbMm7zo3{LrYf-8G{wW^6Ih8}n~i2TK30AsMcLlMF)lKAg3jMeNl=Wh z*ubo4;- zw^4^6n0P*1VU%%%xIWmY8l%~f(8H}-OCYO)#78u*FKVyFhzJvk*8g}=Y>hlbUN?|d z>y%R4_+XDS^72cbAhq_gOt88)VgHOxT+eSz&BaP_b2H0(&W`KmympWxwsl#mxOU%-P1Ph;? zZ_qwi$VUzGOB-P$T!zw|05Ch8m2pL9loG1l}s!lnEtoTlKLyr+Q z&`3tyRGI^S#&`7h*D?}QQ)~RlQ7|JuAJk-#b_4aIK5tfI0aK?P);UWYB?&bBNw+$W zylq8T_9=CeHmhPrBTEObQ8U_aCla%#=N3me z&Y=3wn{8w7ir!;-8qjI=M;hnHVY4ypu()k;n}X;~k9*$bDvJHsHaB_P$ptX+hCIg0 z8a@JR_q5*j!5L#b>DY&$zZnRe?TtYZ=HCJ$I~UyvNomdw^8!sMV-K*uz->0HKpc`2Oc@k zm|lC6uMSO3lh2NHS&+;GAn=!9^ubQG^|ZSHZBwwwwR!c>%1Ps!VOs*eP zIA_;u8m=UNNb_A<HIb1iA=O2mam2~G zUs`?W5)`H*jZ+i%>QjsNRWUdvt2oF2g=FZo!GexiZD{J{3HGy^BDUt$| zqpipoUPfR&At9GP3+9gGLn0@~%EyQ^r_}Awa?YLju9a!P2ivz*sVq^0m<7NasMDfg zwDL|AG9hbZj$mZ6J6E4^AAS9b4Ec6FidE5N&su5SQlt!N8}msvUzo&M|L-tUzt&26 zqp~gu=Ux6}lEU%6CFd_}X5$7S(_XP7f>XjIj%E#rNH7f+yJyM!8xqmsYndht8XHV5 zMngF11W7zW5imPH*2*|Trrf$$Wvtwj zUtVaaj%gh4i2|AXhWL4RV77z`(_F1h%s#hT=zsUAMauX%MIV|o-{nu`w+H$C9@hcq zE*0ZE0{N>QbMGZ{|7DKKyEI(&b2&Os7fv%H^RRjM^r&)ABUbab{dJIJL!0g8tmRFF zaJ+-wk&CRQbL6ihwgQWy>@y9n5GEcu)G1ZDmpXGs8Xz@vE*j-Xx8HnIr=o?g^I+au z_oP0dbcH1`0=HWSSZ%ZRFw%h3&A^4Qn!tun#n}Nk#_JCNBX53H97|Q4`i+)QzuH$< zCL5^930XLMcQ^QT&n;~@WQS$oH|>;L0jvVO~s5K&3Qz2cnt=+b`ws0Y9iRf2zQ;iJs} zYCU(a(3TBxskmcPp0CT)7DYI;qEfRrcz830l6T|K2wv!{B~hSmIrU7CslE;h>cbKMaxJVO{|Ga+z*u-=l636+}Ck{VOjg1)*b0|jW{-m=tV=OyT=VQqN$i&@&a zqwozaJc)xyn*C+nJoj!d1IEu{Vr&}mXUY+?_F`~~QgX-jel7zhiawfFY;X1&vt=6c z{ax&@E}3pKWOWy!kU+@|TlL8+4)iiI*5nn*LhhG_(oZV6O{_&t*EF;IW2F51uS&&! zUYWQ1BQ<-+Uzjiht9SOHIqY!1mPA5+qOZ!Cm+uS+vfZ zSx+iFu)#4Y+Hq0XZ`x=|hHX5YlLj-;g2EU?BF@{6c3GDoU>lasN{Dq3WNj-)!9I+b_Ya`4{|>`%=d`~AX+bP#9_WnuCe z&ZRSO&rea(#Q|EM>dNY}^?KilF%GV&Bz_U<3MzIsCli=lybk{>jUaBvCzJaT++fg} zJm)_0!KSOej5|0nFmJ@Og{ZI=)rkl3+-Zu2zD?D@jhC)oVmq#&rI$wpeUu-9i*8{o zsN0{~Y=p;k$9&W4r^|efToVz!&fk&U;iD!yI&iuv`7iT4U-Juy(M^^xV@38e? z*9}(TUwJOKBY64Vl6^QhmZ)CF5hivqKHN*42JYQVbo?;M5K~S6X-BZ|zAL+nTnU z?|pSx=tQcrj>)q3@l1~U{Q~S*9qsDN{eG1JU5yEiO^2HUiL>mU7nsnBt1jwqnH$|? zpIH5+d>aFwPacCjGwIV@gs8MUW*k%NyyvO!%EAS4<#*V%vM(XDd4Xi*&tT7~=)n{z zoka2+-Vf*3>6+O&5J-BfiqYo?BBjuBjL{SGTtGl?D%)Y&U+s;20UPVqvx>+B@2~`{ zB1+_vJG7^6NW$%;Ie+H5m-i(Xaf!MD%`<qyhiIJUG5 zAgcAvR_yS=h3QCBepR@6$bd;tw32?8P!vKncwkUBV~rG`-V6gKycRej+ewzqyQ9lf zciHAiSte{cS?kRF09?9=qRi`!laVQkFh3st5+f_jS~oNI-P_KtQ&RNev4;#KhPN-~ zw2w%?YNtjDG9s69RhKQAqhhgZc`M*Kks)J??rvi}S^{`tZu|CTUn3V_DtHham8V05 zS>GtoxpGE)!=6sue8J2dJ$*ScM4$EWOQv)!0Lux5RWrHh57yc9v9V7O3Rw>b$m&@|-3=WqNk)@h zUyD9BdwQW5a6>uJqhz>IgveQA#oprcK(Dt5@N;fWMAo zfjMK#7*(~Ge<;i*Zbt0l)3sQB{83xH0S6VUZ^=i7xJb>+XPJqz<&U>Ft|Qv+{%k01Y?`zxKX*Lt{w$4l!KJw$}sB%728ab;!dOMZut z5y}pITd(xBC!bxO2l@v>V@_%^9+pGa2 zHlg~l)sPiNuBPAGndScJGPentiIIWDY?AlMFJY<-B1{#e=r>pPf%!WoTBToa2#2LY z5l~0qdF`b20UAN}EwT!WB|#k~a$83UzH=r2VE6v3Vqoi|@u#69jVUni6oSp#4`U3C zW4gULE0lVs31Lt(uMgdhvqh>j?D zX7-}Ci|>z#LPDL!6I>BTM|KB;*NwV7L&ZTlclWhW=gg)A@^+K0{6O^G^|2=(r|Rc* zqS-%29k%rZS>+8mC$tY~gCvO30R9OMOTT`0_ zDfvE7|4eMpieweG%Zg-Le=_)~2#ai(PRz*!=%fyZQr~k|Z#$c0IHxtmUeDp22(-YwDF=s035tiaN6DYe3@t-o}qR=6;0Z}u;*SxdWUnrTpi{4Oq$ z_j-phfsQVV6g>6X;hFLX0F#O(O=>>^aQCI>8}y{2ig|Epi=%5CV&3Y0kMtavnr<}a zif%M`grDMVt8W1y7`!!<1lyAkeWZvxcjpg4`NHg)MWhBUL+U;CHmgV8{WXE+G*3(} zT-_OMlI>=u_>%o?k}Vvpy?|s*G?5Z*ht>&gQ1&a`s!R_J&aghy2=Xfxy*MEOq=?@p znUozt`l5TEZdAxC zwXmGMvI&y;H{|vNzu)Ray>>>frA|?z;sG_%5^OpqsictCt&y` zrr9<0Y!xTLq^n;RlVHTd^8}ePs!M=mu_41Rn;;tanHU=`ElmD_RgzB z>*|BAwY=b*<=$*{*k`5yPpam8pOHU{@x(efwJI%@m&N7kz3QkQXd~6yRX<(ZV6_(^ zO!%bR%~;>+e#Fab8os)of*Js7sWV4aSireNmr!OvWSkc=}FLwI)^b-f{aMFp-oOGRs(2A;*v#W)}zWR(q@6tt+Kmj}bD%qJ_p@CZorG+bTb<>R zM>hhtc^GF(f-qv0-k3j=<=_05Z#XspNS%xszzM$b2Q;9-UfG$&12wzbRhx+f`_jX90_@>M>fEmm0yRY@eG~8x`eF6L)YrsvBJFy%%c&ZL1###%sK|+iA1;A_OyDI#7wT&T^c4 z6)uC{&SwIKgKCQaCMN?7dJHNw3FnCfhZ?5B{Zux4kINtH0b-vsR78c^FFzC`Qe+U1 zQS|UkKbd|bA1{cF*N{BUY&uMz4Uf*Gny^v(Y#RraB$jBDrBUU2iS@w9hF~SwN$Heqi<~@3!R~1JWFceL`iR((!q0Vz;D@yX z3KJf$xC=E~duT4&6pmfzxg$4VeN4N>70WdzBGQdyLVjc0nImvusDz z`_mqe3;9|$($O|myL*P-7)?O3IU~@sU%Nc`o;X}X^ca!{-v}ajZ3DeFaI~{|f5w#y(8C;ceVngC zq7vujPNOoUT}D}qyE1roqej%1Idt- zB5!Bb6U}j5DM^BTAWUZoL%foxU3Z9nt}6=?GciU0thF{X*b$6D&KpTIOyVe3^kh43 zUiwx`95+|oJIIOvhg3InTFlQ+uge@{$VHhzb(fLZ%)VCyWijr%K?ZOtK`0DUedZpO z?c#05q~hnANtzfy=VZH{f{5QrN>C+U-5n8zR zyVSP*Z(Qfnk|-Ty!Y?RaT5}hsBi*1;{kQ4Y^gIVa5saYU1P7^?`wjHm>pea2rV2C~ zxvP511|yt-ryrKHA4peTINb=z?wgM?K1tVxzS!MMXV52cPplB8k+)y34V}kbCf2l_ zb|ZNTdb4=b9%%pV|C=B&hHVKLl}No>X-H+_hTLtjqQd}N*vS{>R$P6)YS|4BM>_`6 zINKU20Mk4Es4Zj_$KAAi&jbTBlk@Gfm)>;5@#Vuyq7;?K*_aHUWG zp-h*%nI#v8>OB9$6Kbkf_EyGxW+lokXuusDaWti=Hc#!%V}c?nrqYlO_-)mWx&q$Hn8(p}xgg^D; zIf2K|J#`0oDy6*1d2>$8x?Woux2rP)GM_C%v)KAgCl7f6$wEP2PJ=I%5Kz3%i`Vr>9?*=FWIidFWNB+z z_T7FFp=@W9a$4$~G{CM_L#J-TZ-ITuVr?6blOl5nsm7lz*;ql_yU_jnY-3aC2*M73 zA%{))2I7GhV`Zdu1IxwgYqtY+g_6s7Zz^w=O=HYQv ziyaNAudiqyWn5yiw5RMV;$z#!#>S5V?suYbUw4MFsuiB77Y{RxH+r^OVuVA1!(<{4 z^jc%tS+bUqf?4hBfslf*?{Pf9D6)a!w`gi=+B!P+E;qfD%+bA<6!CdIh-au|-zXED zs{z#1QQ&-YVg9GEP+zAoW$jrArJrwKzboRS9aSwYe2ll_~ zr%H%t@YkqSI+Th+`MOoj#(1pTh|n*CUwfI$%0P-NNL$omnxLvWF3}i5p*(CcJ4E|D zDurQi5R;uwXPeZ>?X^xoDB|tfuFI!#Cx-b$1HhAk>)nYwTrAt6nCpk)Sm9a=1b(AE ziwpF8|2Zv{(eTGmQUXxilh8o-IZ%Q!KL3u1Jgo5*n)i~9Jx)5GkH|-)Q)V6v17kCX!G zJL$XSB`}X$A2qY^zHmCb@=Tp89J|2L3Kvf3R^lxT+O`PuQkF}%uURNEjUC5x3% z9ESopR(T%Yg>wUEvza=u-k?SrZ*C!63T8-|8={KIJ8na6@ErnW_&y+r?ry>boa3X? z6pVcD1S`MhD%D;(&NGczI$&sh4qv&S7KO~z13##z_S!84D0 zGIYI8#R7ZeRwh~fR-}=0d!vwhCm(PPcWZo#_%u*??YZ>{JSI16LN8pTM>~6MMHfhk zm6EKaswr&YKpF&rU~O5EiHM5%q8AhtBqk*x)^y~5@92I^{P7t~P;u^jz8o*y##}aE ziPA`>jugJ#3RS`u&9E3h9cB0}Ii^t}SoAwn&kLuF%KDQtRx-|>+7&x`B5nW97EDQ< ziqpa_r{qzVE~Emiz9B9X@Q22%Fm%?RtVz{l+hdy-D#PYTcVo4+YZppiq&=kRAa|EV z#drRRHu>byG9g2Py8hrsjjr_LzUe(B z))0$)$5rL0V%#&4>e~uQuddL?%rv?kI>rKR@6x)WjW^XwhjR@*C5~Z7&AAv)EFcsp zi!RLqvL(J3NWuS!s$VQ< zCdz)8m%8~^&=VK&Po--2|Lka;M6aD{cQ;N_83sJsQHA)&vv=#<)Iv|iR#?p?xrU9j zfm6D34-eQn|M}3Kr+(yW?|=1AVs+ zC3$Wa3WQL^+W5u*97rY#+oEcjfO(eq*oP9JqVA7J{HlMhbqE;`Ts z&un-*E*|#3PyxWdTmMhk4Udz9E1~{71%4oW=eKC>|47E+>sP`=^MBg<|E`u5fHC?% z-{4|6s-`}_y7L@y0czG From 808f7310c6c749099ae2b7ff9c14e2cde0ae7b48 Mon Sep 17 00:00:00 2001 From: Benny Shilpa Date: Tue, 17 Nov 2020 11:44:26 +0530 Subject: [PATCH 033/486] Delete quarantine-interfaceindex.PNG --- .../quarantine-interfaceindex.PNG | Bin 79691 -> 0 bytes 1 file changed, 0 insertions(+), 0 deletions(-) delete mode 100644 windows/security/threat-protection/windows-firewall/quarantine-interfaceindex.PNG diff --git a/windows/security/threat-protection/windows-firewall/quarantine-interfaceindex.PNG b/windows/security/threat-protection/windows-firewall/quarantine-interfaceindex.PNG deleted file mode 100644 index d6679e1e0e616b1430d006fbb2bd90d59b42f5d4..0000000000000000000000000000000000000000 GIT binary patch literal 0 HcmV?d00001 literal 79691 zcmcG#Wmp`|);1a(0>NE_ySs)`Gh9D+k|cZcAEyF2qe``i0H=iTT3 z`O)1~SC{tcTD4Z)>yA`bl>YLW@bjlnpT5Y-NT`1L1QYsCIu#NApZm{NDV~2GP_C-d zfKN43#K-?+U@gTI#6Eqhk4JtphWjUv#q8-ii`WqUx23fi0&**05ht(ZZ+tS{^3QJwAv z=cDQ)JKq>Xo{Ud?ceEoBs|iBcW9eu~5fVI4r7EE;IQ!Mw1}j_E?!V^ZMYMNE8ydww znNY?Cg$x3$swwR%nrLD8;F24z!L;dwQ;2d;blbf=MfS`?MlVNtk7<({^W=WcYw+*5 za!<(R{q)FvxIAk*{{CMx4Mz=|M>I}%8r@2G%aPn}sz`@74UJJyW8^o+9ak+22MdJd zQ%#`DuEv~@t@cSxX4s#0J{(BzlyLa?Ogw~mo*`a>c*vi^zyXu6`ndC;arY|y~wUb6KN!D_u z`XWS)N=pHZm~;?A`4h79bSaiav6Qx-PAv1!*1mm4i}XsU_ z4935{yrq33f%;QLzRIg0NCbIDjq>s|CzU}Oteh_YbH0f-?!@k#KKI4DkgXa8l#;M2 z^-cIVnpi7v(RxR%d7|%G{*YRi4x4IQO9}7290DlKmpM=2>~h(3Q~dw@iDrQE2YGZZ zc*GIhIn^*XYqXV6c>?jLF!g7!<+mIr38ps#V=pzgnesULxKe%k*OS&>85w&hGV)p= zrM=AyJ>Uh!f;?b|EfEF2SpHt?XV!G(S2%W)t^O|x^z-pr7O2z+2hKyF_D~WXXK(R+ zO)mRm(~fIT@FMXDJ?ITT(3#^6BeF(+$c|)=vfd3;ZSLQ0bB@sT_>1t+r4q>YfV98B)q&)UG z3Xe`HuC)(^3cZACSAGIlE3?oKTTyr0iJUIg7XB5G)jgzxs@T$PdtnXQ+N1Csz5g3< zFE=6n%FlC#hxzu%vVVr?wc!;4KcU*vgNNOFZ}WS19$M5LrkCrsyNm;me9b|!iCTa1 z8b=l4S4w(X`6Q!Ap)HE>&&JYx|wA#m%XX`_nkk;>O&U-R|mE=_$?Aysr-jd6F&qP6>v&7 zGcGgx8WHJ$Lg7F=~x| ziT~DY*B(Pj)Ic`B1J1lJ?`OQVPPb*E6G`fV>h;N%`WKw+BE65)mSrORL4%f01z zk|8|vCDN6TB8)3<9k;{BwuyJwk9Q>mF6jFfKw@ttP_(c5^bnLr_kejb|NPeSyz7sU zjv0)JqAfewmC(`sfoda9)7j>5HS^8)SEUnE-h zyIAlRwG1cAE(~P-|6zW^h#xVyx{e<4|x&qFZPd?j1CK)k3Cy}ReY{huGAPV4dQA2q#= zv)WVA0p83C!=!t!O0me~h}-zY#qKji{Ck0D3w`Q?tilb);k9v6?h&wB>ml58%GS;Lju;T_YG+GI-Ne&6~KYigT6^Orn3sGvgHKIk$qrg9@sgo%m6U1@x^RUXd!QjZOFWXnsNEWMm zq-YwQc25by&OpHu(O?iE)h_<@5L_+#;4QmDI2HzM7mK)@Wn%s^Csc>YF1*&9ft z_&{QMxwP!HUxMfToI-Eo;E&*b@#V}Wr!OgeG*fpA`1TVrtQF9bc6|q@*Tj_*RIPiI zezQlf*B>t8MWWG7ib_fr08}zhVUqGiL3ZfOp59RYc1an3>$v3;hv!=wp)^fH$HTrY z2*aLL68!_VO@Vjo5A{#|x0}TRL~E z-Pia%0W~27*Ix++shJ$=8uxeux5q^{6syRio0li4eZ78&ha>R2l!uWZz}H!tb2Oh* zi@fG&c?TS#t6ew+YM7S`OcJ@dSLFl&AVtvMAa@M(%g|8|N(yY0uU5 zhF={bO;34wt_C&($Y-!(_)E+w4ky4w&#tO@stu9>Kb=uCC~n@EmCXgi+pR=5Kl9(p zTm)te8;X7#{=*l*j?NrN4Z<|hT+PhG09XO1Xhb=YdQ2mB>gnyJ`d3d~UG%9`KGfWm z&&fNI_&`hnX|2#FHl_rB-4jf^DEagpVx4lofdzVH&29J+Jyg3tA0}Aa)P+1ec*O9# zMqc_y4)YS{`_4FP>Sx#2oYX#@CjGK1g@?z_bt{PUk8^4E$VugN**ta^fJ-9H(h@h7 zrI03r&=@{lTzcJI(|Q@-iup+CWwLsKi2rTp#|8S7(}og~|84HcY8$U4@P6m*^fJN> zAC~iwWyx^cIZ-HW>V~KBtT(TM1^83)ZKz=ig_j|Fo8Q_ND-T(d2ie??e>+Rd=i$6` zap*Z05-?~BxfB)orqlx~p(r{m^|#6MP9}jE_~*Fv2biB_06@Mj#v;kQ)09S z>*qaVKyEI^Ti-h2um|OxjD}fIiHT_2OptgtU0KQ6PrLqljKir9BO>wnWq*5L{Oj8f z_-p!p_eGG4qu@fO)(hg$;znZ1;m&>O1BvBY zfwww6GY#glVd;#0G~9}4yZu`IPE)zOIV3H5E4%p^XWRNwx~`o()7L9LTvzjg*Zt8J z@1$bSKwpBa?R%Y~$LL)GVz^DynFf5tY`C{M3$W2TK7UJhR(MY! z%rX~Ef`;07EN}I}`=!q4{%XkE+u%o|kgRg(jG~wZE`c>WJ_4~k%A;%Rvdn6Os>^%G z*(zhG6UWGy@8&pKkINUbo>#xkW}4g()}}ejxP#!pcl5xQzYMs^)GBRWBA4x^B##EV z!QQQ)vTb8g$?xdG6-S2hPO2bDA|+G>;LE&4+}fhP=`Elimg4r0l+t|Qs~}=z z*>IImp|-+o-=0Uv(+=(QVF;NHKrI>c&g#Kt#BOruea+hX!!Qt%<9Bb!vMbEXl)t$) zeu^-B^^~H(vJH73-tgPoE8GJjvpoXWTjKU|XfOk*p+(S0>vM{e+Nk0$P0AMLFY%Nt zn-VpZr#ro4)o~9vJntC@8-Q}Z@inqmL-WPh5+|-VnXCyd@?f2zx4K2 zTq>K1DPL3dw)a zL6X+iLUF$xehzdmcC6S)b+(g(lC?$)7xC&%#7LSo+E%hbF>wL|wE#AT#J`!;zXToW zZx6Xuv=Y7<*`yaB)jkXebUAPz%If2CbI+(J{_$G=gmqF;M5l7xcX|s_7YZL>pA9?W zedF3vw5ZSC;tP*Tg3i>e&hMs!$vQHz^OGBjM89rJnK11BX&!wztF7}*sws^$(ccL$ zk})cOT{zzA^bCE#y`Y?GZIW;L31QYuvo_&H3!QsW{Php^=x)`LUV9YrBis8)#p$YF zNRzL;1wpf9Ma)@XE}o}52M~FQ4J4j3N~c zMg^zIw!>IOhoSg~u}pjIQ86=*dXMhW@4To><7j$}g^|Y;njAJqatmbrppb+BP(n#P z!d($3b9{f#!>#j@VUa#!Wy6@{kmq=hD7vqGmej@a5@Iq>zGIf5*6sZv_vrc{UT?Qg zKBS#pZb+ld!2+n~JZ(5H)b<1eS?SB}!}AVpMLXi(Bhzj^ycIv*Y><(3FlRQe$yFcy zvV0+Xo}IG-QQS1}fz#|hD3ZTA{BR;+YHy=21JhoA3()0kN#xom_3vF{;#=$q2V_qf zr@=-8aM@J4Z+tj>NR3=u!uWapB7j0@&dZQjmU!V0y6NtQuvBv9V71yAS>5BzhmWF#nuZn0@~dk%o+Mh*Y}Q)Py{mX7_Anv63+$Jv6duV)*#b4s_?j`ow~z1 zw?Rw}DUX|h(jwR~P3Q4;pBKXqYQy)bS}*Xdw3j4w5k?D?)}x4l{|m;?Th@}gXF)$O zP;@VGI2YV@Ztq3Ctw3MCzoxqt=6=ijwBSiroJUMZWQ)lE;#9_4|BE8CV(R^=VLX!T zw7`}vVvtY9*O#%&)F5U_yU_G(AlYC{0k5A(G(ho=syDBxz(;HP6b%t0g0jcs3o?=4 zS>S;RDhe_`4-vjlL)beO|F5p+?+oI@*2hO_-*hTYCXBOZEsAUwg;*GFZeNOCS7y(t z88#K0CS%0TM)sZ5{H_Q6u1hI?e|$iRygVbU5_0D$8D#a=bmb7QwdYA+2Idrur6gax ze8Jm#=j(atClY#+>fwpiWYhp_ZuO#wo+CR(p&u-QRg5(+N95j3jjqzuV!Xr55a3sv zi^AtTyQ7sB(QYpx0is(U$F}kdhJC}DFJ4DsJaKk^r{=RdBIp?kZ_z||UzCLU9Z5I) zQ;V>YeA7o@{Y2z6naqvPzSi2=6d580y)2bdgeu%$qnvGy*GzpXEtbb+ouc%p%bDzW zC3pxeMx&W$t4(fA&V;Y4O|;3%6g@K;#KCV%@y2g4(&w<7|hvP8PNtnF&C;C=?v- zgt(RN*PYyyPzk-lT)aIVdY7*DwR_eSWU?4+%?&v{() zqoaBz{Qc>(>A4QbW)&Vo=)Pi-9@Jc}W-@AM2`>_^6wPIPL#rqiMk-s&pwKxsk1bXt z0e@>5QzGHU%F6}nD2UvVnVb>{9)VuUXjU_bkIUY*qZ4>V4-&$EhpewOxg)%03KHbF z*{Yq~;{7r=0EpIhKfwE<{x%vh_$FQ&eGq4y&<)aW`w_NZ(Yp5gdIC6!f5Si*5QEnph->3usS9lz&b{V8nHs^)a&34?p@V=TXu*row1_e^DcZV{<$p;YlN|R&T+1I##=o9!`MD+W5zt)K-$0phB-nvpi8ZND|9uSS=t~DE599tU1quU$ z-J)DMs9Wg@rg%oKKE&_7G+mvEZ|(a!x`BK)5uV1xeUZvS@nXks=)B-=3${>IATl`aBJ>%r+ zKy<^^0Hz6m05zY@aqm8pvBsodA#|dKObLpTJn<~j;F|tzQkXaPz#zx*)hsVp#PVUE z@V=3m-o~mHmqsEB(kt|d>AjRZE)g?YV9J)gy`_~|u>Y`c9nOK83^qFw^5~?M<@jw@ zh7%utp4+Y_$|AP7i6ZKCDtp|eki6D1Vwd1!!(nUm${PyD8&*sQb$OBuC8V$887!!k zl%)=kYKQ&mBHsnt=MAe%UZ~@v$)qD^=u^zVlp=`(PH3Zqd%25q%7(>a;}v6I_7#g& zkKozU@|Q(au4tPu!83c^Mv45bQRKP6-c6&rp|wcJ(34S=`|&$9gio)~tLI3RI;HT; zPtK&MKI^?zNW}i+`wS;_?-ITm05h1h;&h<(;m)M5LSz<0954p$(g@EVAaO?-YHQ_{ zEeqrt^lmGLl{&^s>b92V-3Ui@-u?si;HHFx1f-N&lUi&s*?4`LNP|Q>2JWgRWqP`P zJK4#K>jQ|{OAf^F$Lcvx5@$OKP1_K7982E$UH3@c5c3`DX4PJam6_+)p=v}4^z2obw3Xg}q17%ZjQuD0TTO7Sq7*z+= zq#*a;$Q6}%kz#46o?_L>8KQBLhwN0s1GC&=r^aBir0+_LV|qY%!lqg6Xm;7aV3DYQ9 ztsh^n%?`0aq@s$Jr-%=9jQZzAF%j|#aHEJgNv>1yHFh+t%IOUIfy_z#Cfew^<%LPkTIrX{1pZ@Rs6lvzRj?V74k7W} zjmo6~+8vtd*d+B96Dbg}oF81=;*FN|yT!`i)y@p%I@ik=?dC-7@w%++H!ws0%zKBP zwEL1gH^3XOYnM}K4+bC=KYQ3@gv(E?nD$#aJ+mGi$DCGpX-LA6k@>wyUNH<$Plfj} z*eoF>kJ34{9|Sk8ZeIj{&;Y3a=kQ_ug- z1Fo3GB?XpF3TX-eFk)u+K=Kd>*G4<7k>=-(x81Y zJ;p!1=Kun-_s(A4wVp?(P--AIT2D)OBICmj-=#V?h*=DcIEaqcTcS-5uunqWN}?zh zPqH@)cnkuslsef}Cfp$}{M|1ZXwK)EKD(g_p;SlN0t)~>52G{w(2 zEj!lUDO->;jJUGe-6>YT5VC+B(j{i5-qPSHnQz4><%rs5S|MV`6v9~zyHYhTS3TDy zfv;R-ZRZq~^MwnRAMEQPYp;$rC)p2Lzke*4z6||PadUpMuFnW;3-`SUAnVD~8-{ee zLnjqc{YnlFQ8n;;R%P*h^ra{9`Wa5@l_Ca`Y$SoZZ;MY@RgCdzKg^}7Z_P#V{e|A` zgw9X&U7il1i!@Q}tl!~!cB>&}dgEH{;{C?syQGn86ztn|y*kVHKV61xIffr^4gnCy z+tDxI>uJN-ben%!xH)59CvW{sr#jGgMiPDAe|?^uzSu@E>vzhCYUr8nP$vh9%P05PCeA5K}k)cUb0kp||SSr<+>FP@`3KrCzKV8f>iVk}+o$)u%bhe)U(ufTJ^_~6$lhZ$GwQ_P zGb(6MNX&@)j_gUMvQZ0WPNMvMw!p>PoA1+Nyu+bjo_60~^^Wf-1VFc^CQiVbfRSQp zlQEL*lK#M2GoJJ8AdoIL9v9l}ceI6=qRM$`X~&d^ZnJHx@~Q;u4#a|7Al1qiMQ0IN zr^|x*ltn17WU&HPe^)T2Q&lu1fgtTEh5gu+<`%YE&~U$bk{P8c3s;2PWzM6L>{&yw z9p_p775+G@B6&h*s2#Wj?8d9BERdJUU!bwV48{-Npz$9(|5HW^QV_pqyf)>D&RHn* zNzL^nKV|toy%zSIu21ueomMswcZ7cojjpFMhXqpJgPRotWkN<#<|}8Wo&&rqQZKHM zb;B@?rEc*+I@GU=i)Imum&Bom4ZDhrG86hV?IgOfLAjQ`Lwr(T`EA2I`*%>|w@`fk zD~_%A5pKOY2jMh*PsT03jo~QWt-(Rp+q#@Ni+>}&!|OO00K}E{vY%Y7`v zXYzQ*)30CmsxuAt?pvJ&Xb8y8jb0BX?fAK5v#?U+O; zk+ef)oX3|7;>U#rAnK-(;qwYoX5R#sms`=pKKrX;u1SkFDzKdBrxy2 zfw3>r`R0(-@P(XyguI5+r>g-i3ekqsVX02yI$=*v^zm?hRg_sn-RBzfq4K+;=aXP( zEU0UOVCgU;Lgi<{`*_O97_7aKMAJ{$P`ba+r>&SUe}(-zHnSX*YuX)RFM#GkGLkz0 zoo`I$j+z~)YbvL6NGP>XREX)poOj+8DY-l%T<#bKK2a={T<&a+Gc^5C40%Z&p3yYe zIHu^S$nBKx@W}C*iw}Uf&WS+AJPnBR9rk@Rmo1|cFu4>-3Z7f@`bud|Y&kN7 z{6a~?b$yc zgF(v-K;NaZQc}B&9u55cMpNUnOfo?h`13Mw53h5R8CH2wBN6=`Rl|-Ub~*3|nxUci zx<91%u*aDUL0WI;vABuDLJSqQBvuf$Y2H}gxoRy|6QwXI~cOPm3N+&udAZt1l%w!_Maq8+&b?kd1f;kVV@`!75?)@ z%Rgki_Fc)L`!pb+u|8a7{7x8$QVN2Iu;x!yT&k*q9X80&@bG0$_`v8gB;NUv1Tw0z z92mk_`@xW=2SE;SrRx0Ky$0>#AA?TB{;l-ySU^87W$+wN0J~oNNP+(*Kv?IR;ig8W zI4Ci-|LyD+GPuYakYy`+Lx<*gvW$y6Tl$axq^wlFa7g!7sAi0@hGo}w$Hd3qOL;g% zv%(%t%B4@2q31v&=(E!1&${(|)Y5tYKRcXaxR)syFs@{9g4=-zl9P1NaIguY%X33X zqXjfra_3s)HpoT;H<-Y<%hwmSoU1R@klpsI?m>mTfVe{ep_R$XQYadI1CBA*(YSis zya8pU_QeH@fm-EjLTg&amHmJ|RM zre50ntX|p+T%g5A;V*n+$LF#~DWAP~lF7*{I+c2evM>qvyi6w{pYy8*q(EY76N3~F z`UoNNeu(Uf+yOu?%2>o z-9!UF=1tGeZmoEO6^{U5%pR`lXtt@Zi2}tkEp$p7PHMKc!r!aq2X`tP{ZO7GKB(4KXmf@Zx52=xXKtG&5sQIrb}kQ!z_TR>MCpt}Y=dD@h2e!ktk+ zG96aa<>SFu=)XUu=jG>XcgE5$R@2my*53o9E`d#xzK+--vT^Slxr|NyWvnT6IwCMw z<)sj-soSk|?<_M;8YWxmvr>khAL8apA-pPCZgg8!J;Bl^UT+EMV#cC6)KbyRkd*fm z(uhv0FK7DsV86cVUY?U)S;D0AJ^c9!S*Tky^OiMN+FKnVUZ^W;=Nl8X!fgff6gekl z>|HjB>RuuKW=|w@wW;>P0$oLQC@=;tDQrRA_>3Q5JKdU4gfez=8fFGYf>NO777Pj9 zrW!^i&G#Rn7t2YQRK`SR(UWK2=)78iUt8$#5o=7Sqo_Qwp&y?nr({+Evr_ag4wjN2 z5M1!l8o1(mb<*SX?D7bsQ3a zewC>!Ki8!SwyPq8tD3HeV{vlx@S)CjVyM%5znDhnTGu4>%u+e|(?+3qT4uW~I%Z13 zbhB2f5g|%~N~&zZQDO5|HQYRdmq&DOXpeJwurWDDsnzEbWa|;0*~X68^YCo222R6M z9|g*Ae53biz}j1zUMmxxL#Cj*pE-Bkg|4V0#iqk(*Ctu{ARug6;U-Bm=qLW6bH_ur*nE0F$H2w4GQ0*ebrc zk>4MoCF$gf86=0BzJu`XETXDx=%-uQF_hIJK(d$}_(WNKSZQO0rGAAu;%6&c)1l}X z_aB>fc*gRqI3_uAui^+R!Uwp~T9cL(Qg-g60`(!iEbTC1Ou8Itwo~yX_T$C|D+^*| zD(X2})5M^#bg)F!*qkhP2SKunKcGCCfq{-SqSwC8R$wZEn}dhkY?g#Z+%iN?6-@IL ztc$^OjQUOHwCL`m;}M z4DQs(+CL1+qWhvrnyaW}#1u7$1XVa?RitDVfjCA+Vg@P9My#fb^S@@@J$-`F7ru+< z|H_hhcjvY%8UOGkfjNjq04*ZaEo+Tzo<{)Kl-DjSl$DpE>cyQYO{^j(XQ_(#D?cmg z%uip49DYQx2FB^&N=VNY|6Uk0d%^Rw%VW0$Vm?HeespR+U{9&=rl|_RUIG(;zC|7d zqRcIC4*q#U7l}Ti;KisdjrPJ!VL>q%`b%EeSed@8uGlv~zPU0pA)$wgQ$irovG5vh zKweC{zKm4Yn1x#B7}c8=kG;J z(kpagGe$?pLM%J(mme<&eJx$C3; zuGd@>5YpZ|f0B-?cO5oXK&?XOa)hWnT#5uUwk1g(=1KcoBqw~Ml_FQ)9}UP{U)V*0 zN@|$DZn8HG3>Ob(udvl4^ad33*xMS92$Kh8=S1-@VoJOo3$({?ysi_R@K4R+Hd7e< zczVN(J;SE);%nNWHdvzqk8!g=eWxLC7C-ZK=aqgyGiFv840J=7zC5Qgn=;xQOsi|H zOfM|NjN<%tcjosKAy+t5iSo}5A)^ZkK2b`9KY#RReK#J@owzZ}+y%=3d;USmFtat9 zmDeF#yVd2`rXOrLNM0ec*h@>sm);?Vo=q}eadHK+z6*s@SEbG?8%QL=Ho+|^<_0|R zKOkK%LCaX5%9688-O1T7d@hMa9zk)x9V!U$W4Tvc$F8_XPS^eZO+}2fLPg}|1tC2- znE3*u-AC&B^CoaK z1{laEjpf*YbdsaPRpFxV-)hGAtU)f~QdqO~Jii?w3wa`cw31;$3PIS}E*?cAYG|QM0)Q9xZVo;g%pq zmMkUjzMC<^jbu@P;KXsM#I{7~1I*IiPeUUt5Treh{+s^L+ z)l`C5OSkk8d(<;oByHmNGr^VG>hAc@OR;W*|r#-VUPZO_0bF`wI8&Q)!`F8{y@t~Pn_DoW65Ki2YcKetby++!|c59$iNewct}5hN0?7a>Uwy3Ns?G4$hmz8 zP)vtulN{i7h2Ax%MU(Bo#C}|yUW!jh&`(yOSsDzv26olEVGlZ;!sYZnmt zdJ!1al>^Ftudn}4Ea!t5xc@E>$^Ug75;kZ-4t53p5b#Y<56aX5s$C-5&=-6aX$BN4 zAr9-}D=lK7gBIiT{b%&2(BR%(x`-kT`(9n*R_z8&P+5};6|4nulET@Gl1gr)*gein zPlHJPa1%%A8mulS@!5f2EjVDQ9P?lsF=J$$On5@erYdltW5vi=?5{)7EwV^V{}gqJ z7hU*N(W`s7%IF?_J0~;~WsqaWr)YSA0obLW*irmZqSNJDW~TaF?zjIG3Jms237QKz zn!&a0tvQoZVD<2EehFR!b>nwrx|G}L9Ls)}Idhw%%oyXgIOg4{2xTbJNw{4&BtJXJ z5m|I-sNL+jYkilO6-@uNBlJ!Yp7}xh6Yy*CtN*vrD%p}z^GMt|Yc+d1b@4R|)w$;R zk~j}*@#dOj0oJcRZj}`^yV$=htUc=;FWn#lI4AE$9T+_efu&4Ag-tZpc~AJ}yeB!z zvRbjFU|fBx%kNRy?Ch#Fca+VSAfaqkgp^pHO7oUz`$)xPc^efP?sv^<%-5Dbbp9j1 zMnaOy6t>h~Q0TVMfBU<`D4a*9Sn=X4RM=FuYkD?YpPNOkIIqOZ_wfGOY}Vi%QjZeQ z5w1{I^GktNH;{|x+dJqp>m$TPx27HMxg4jQdZ?d zFN&Fg$#`sIQ>IgsN3V7pvh#vpVrbj_&7-e9q1{F;k+MC(^u+&~Z8Wb0*}NvHOm@HO zrTyTCI!~h;d-Wlrx=7`P4GIT=1R8_kx%zC`h@<*&acsX<9@1E@or$f=&Ib#}tI%%v zUz^H@NSFUaVYF~AgdcMQo~j-F)!>2rg>a`k0|ezkhW3g2Ve=P-JxEP(Knrtp8n{G~ zpwu3_GSa*+%_q6km{ygZ+UiDFN!x0|J9E%nk=W`h#pl4aQK+Q8ySAjX&&pIi87ty& z)STW5m$vjL4EIV;T72xPn)r?G&Mv}=BiOmAZa40P;P%EO5~N^kvH8uwh2U{e?c!KU zK3zp?qNGCe!UC?bKxd+Ku3uPD5eu{Syc4{Bw(NAKB1Ml<(rMFazmIYS?IGb$0gZ;` zfNa0jvv#@M`Omqr8LoZps;_~OISPBl?Q{}1vo1?u0ogj4*X%!|(H+^j0Sp#5g3U3j z`?(DB70+YOw0Fd9ib+aoTI4R(9^vEW8L5)eSw_iy8u|r`N3nC zQTIgKetTL-o-Ey$%6BDJ;EtIghN8ym1h{0Bzv{2f`%?_ZsJkW39`i0(sEj?wQ6io* zEc8)hH`0W1m?FJ8ZT?n-+>!5G?p)hm$1l%RLv%o0+Px21Z7cP#MC5H38*o;+x`T>2!)&vuMXJ&<*B9k`^*4 zRS#Cf=w*hG($e7QeY%LFz&rS~$$qK1j65Ir=E@2=svJeBOH*IK-+kn=)N%_x*WVd= zcvvrS(2OEstFbn#`$0WB8Ny$y)vg>C4#{l~yDtxz?v~<_6%68Ro<4I0`>bj`zjO0} zaxGn!%(8O=d>xf0D|kr)*jnr!398@E-x> zCOFd6j$Cjlc7I5m9J@@`R3#lRWLxY_nA2z5@y_38xgS*Q=O(+sXG~EK>4uIy-Z3Z9 zH7mc;qRYmgg|YijRvhNiU&;h;FTBrVw9z#1644$KY+CF!-HkYZDJvc2iB*daZ^@9b zhrlYX#uw)`NhV<{0tKnJICEYtln=8lu>K$Nk2F38;3*J_BVqi1<5FZI@Y3biJL6`sH z`CMxjVD&*x)48eT0y)b6LooZ7wBveU1;`ivcWZGi^lpIvT?CcHQSB&H`G2@;|F`mH z=?qfAf6>J{6$-Eb|HWhS$^y`a{`V+&!W0qzi>tP0|2YT!xF1QP%Y6I2&xu4aENTKdI0 z+^Dz^h!uh6E<0TY2i%%o_rovDlV)@q)K}J&BHKX(UJ0)0tFxW8%`tA;adIo_>=*loA-j z1FK4llTS}Vm!p(s8WlxdRh+vvC&YnSge2>$)c(eKj~a#|F<7RioGq=I3{^WHVtC&W zn4T}-7LgKq)w#v7XzBXp0{&`gui9$lHVn( zf;DOHX+!A+BG39b#(>cyO0m6{SQ*9oed*l~5*s)fi#JLB=MitHpb?qPKsfma2@cLd z8kB&)4(3>u*>w|~S=o^EkQE)|#j@D^b%THP}tn zjKd!zn50FP_Ac6yxG0$sK-RCKf~X<3dUgl3mz0pQe7|QVe>%pOErZLt9zK0V>TYU= zM7zjpPAvPU9G1=xqt+mZRQ3gy;_u_0rErDA`^UvsJATS60VcTYMnrz4So_gujRkdV zP+mqTGuUEbCqskvSX>O59u7wxhZZY4d*I%4m!NEvSo0`m0utf8dl^d&OwIlpDrJhz zuff=M{JyMuWN*3EP1;FQq%OmN$7KR!GT%Hw*6wIeJc;`J854l==($r@tfs9lXB>dK zy1KfSii1FjHPv&3+R5?V_Fl5{u;KgL`LH!vCWVzB7UdIT{sk%(cu`s9yNrQi>IhM) zAm^I&W%+6LK0U$YgV!77ckEA;|H z=%YuAzYMU(%K)kru%74Q#1aR|hg&bTs@rH9^zI+B8X35Yd=%h5xW|~{b|^2yy<2cp zX*u;*rzw-3m+oofVL|xB+&ec4pg-Au9>m$lwvgH*%}WX>5HO+=4o;YrcU#4*(O#C> zl_0YhHhn7dmmP`M@>{J0E;mw5D%ra7g61M2w8YKAT{3S8=*2?&A!g(9v{Tzg1MC|x z5FdO6B=y?X7@}I;DF6J})Hq{5c%<=jBJQ)Tb-@+K`TRAd;dKQNX9n-E{#dl5m!5IQHJq)o-Ft=G;_d%1WO`Qr`>_rh8`pUjr?yn!rHDl^J_}C zCN$1_++h{&EK2g0s4-Qf2p5iio|HtuuhA+vsl#BxbtZPenmJPpcQk4!8*u(jf5^~% zZ^jB(&=QqniXgl`LqN8M6m0sQsh3y`Lr=W%C=UX69B^avx6QUAcFN;Rr7@Pd& z5;a$Z#7Etp)NFK7O@YmUnYJ__C<?$k1+!2N5;Rb+gLELOY!!DSfCAvN*EotPmpgiY&OTPRXEqs-={xE{!WRnv&2@T z?G1ErU|BU$qJe}S5Pcx%J!b(DVO`akRtHmx@udkeK2O{jGYsLX=Be~k^BPXys0wa` z>k_E?YYtWSkTOVdCZ?-N=y+!gfONp%gG6I3|GrqmmmjlsG}U!UD5uz_ipLR-7z}Z7 za#Iwdlt^kbvATYDTPVk7Qa}^}IO^n7>_plRMp{~Z6MGngde^+05KEPCD|AzJAxY#V zm+NOnK1W%YicKCK62h5mp!OoU--R~r=9`$vTO0%Y@AI9ftF19kiD4+L>tk>1w9jZs z^+M9S4>9SVK#Kp6|27Vi`vg9l=*7tUG`~Y)`6AH?V{lEd{y6}UH+fqLKy5`wJe#vU8m*1rsl=38uHtjxD=27e_T+vGO`yg~#y@XP$2? z+DjBai`7O4{T6SEg_9j;{<_kUmQ!tt0iZ+7h>)G4V&x60xY*-rd0_J%BS|~vP@>oD zk8GOXpDWl?4-F=jhqLv*>?qk{nKm}M6l)*Orrq*SBV$mGAFH;IRe-;Eut4>Ul|n3d z!~47)JznA*Ang5N@IZWIWWqz9{d@RolSv}ZRu??Olq~~dcCjP0lm~qxx4rj$UJ;xs zl85hUxRGN3-b7~ESSSsffr~-4!e1KW^O79c)?~)U$Qf5JUmD*Fb%8U(!tI@U8b}j>}2#~t|gf|b~id9nF2x^)x`WFvNqS4ES+9Z z1ierK-`A}LJrYdS>XY{eX18Yh>Mv9Xbb|pC2hQ`-Tm4~!s1Iky1NMsMs~w_KB!_tH z^{?)zUwmb%zxT#28%nONXnMGL)n#K}cSrikC?~UrYaFuDta>Ko2%>Rrvn6J4jhMG= zjJ;5&VB@K?IjT@nN5cCE`rv!ydT-}eBR6tq-d?`YXbp7ss`>Wwjwym9rnHu`Wy5y% z5}94(-_el=G4uz*@VGEM-_jSh$cy%}D7PP#>%iYx^c!Ptm-PE8+Xe~A{|^9nK#0GL za`&;nZTO@-rpuj1DBvTZcpjHtyp~*J567g>_)fpqGE3&jff-EK;nZ|>x7;iN(;UuQ zJCB(DS9$1<5AotQ8CQBoaY-TS)U)S1jp_8$PdIUHBuz-Y*U-efK79`t6_2rfM+bqp zJkEd52f1cWB7+BZ(C$#zX&0Y-tso?QB)MWKSFB%6TA-U_J>#e7Le8K5JAJ*jAAt~H zTXZU=^+kj_ce7+7g0h@x9!kg-ue zS#wsgpbR>8Zlq<*BDQ$ud}ri6OSx}VrvFh08H_8aXQ9MzH!ZKGu%e2p(roO$LE1Zq za0gW#&QaIt{WGP_;4If_I9J-q<<6WTel9wrgez{pm$}|odF6-`t9d$A{S}*uNhY@- z3$vq_qlb<&;y(FK$%%X;2Tp-1?L?W1s2GSzt>nBbFK5k)c~lEwsjR7^$kM~!mOgFv zfz2Mr>RUg_%IJM;Y95Q^ax$jNosFQ+OV+&0xnWHmq49RQhMZ@Zf*FxV+aia~0rgZZ zD!!QWZn%xB*Dau;AfM`{xzrS;6YTG2aBLD!ehs;$rf$GD(iJ5ttlfN{m(A$+IVAQczq*epVWp<#U*q z2S>N<<=Bt|b4)y$1!WZGW|5f|k5wGK%OwMKR1(?w`DDf!a5`NCO?K_BLUxi3|Kt=N zWm#u|QG&(sjstAn@FM=&cTm&)Q$F*Z2Y7vdFX~}~Me@!mDke4BN_ue-*{MlH8v}TR zl-ZK9D646psjiA-n;)0oOk!NLjKp4T`jdJn9G_7{p%}8dyO@z|!!sfBsN3M;#Nx9= z2l4VdxtQ{T9MY3xG5aUOcf93lUqU5oE-NRrV>7RAI>xBqhfhW#RU2z`JXr;$nl3Uj z60u9z;8s&KwMv;a*-8ov$j#1@eB-eMU1E$PQ%H2Ih<;J2cGoy7EtZhmHFMW96tGZx z-TPS5{|K8?R#V>lA{)ECVZ)PaeO?d7ge=O7^YL}?BLTnI5n7+03D% z$LUi~g(cHzyNu5)qNpHGbdfJUoLdFAC4WT%snnN3QZg@AKJ>`H>F zztOOD{4*k?x)~)G+`v*x3vJdcVn>c}w0lHsD(noS;#0^e4BrXOE~%t8*T%r%gB+G~ zh>9Uid|Y8(HW~S4G}Pu3HPXt?eQmg6q<^HvV2Mj1J2#&^=|ib@Ax;i=$s z;KL(nUVn(>+BK|+JIH_j__sXu+)HfOxP^V~4mWa&4VS=l5?u$h#fM^=jT?Wqa8mN?RL^GGmE(tb$l-_gsM_~UTD3gP!S z@mZ58FE1m;(Zh_5E4l*Zx&285`G389e5>_#qKl1Hrgh~6y+ z7_*jf!6ntiit;;mZek#>~?%=G9kVada_C3VA6}c->PtTn5q#%gKy(Yftw41`E+? z(jF;RoRcm@&6uJRsa?K;`h;;diJtfODY9o0|5Q$OWePp7|AJrq<|+2Oa#*>nM*LJO z2fHQ6E-E0^BEH@2)#MD>GbyXgCCWKUFr`d_&;lBkucst*l;+7;a?;f_B^M(OFD8=& zt*O}*6qd-imqKEU1;4brx=9+sOl(Rfc@ck|nUO)f#e>tOrre8YK_Bk^Hpb$XaPiV; z_U$>!go=dT#4j3U92oBs!nO_P|1lDqmPch>ql|6k#D*M9g`!DMlu^bfdR1eEj0N%8B|@C@$r68_DPx;!%pn1q za`&X$)~bd>^n=wwv+@c0SDtwb(2)awuE%@i`6(HbxV)K z;Bn!ca^cNdz_lw2q+WJ9Hy^+iSH2 z5;OCts-Mrinqr~?lQ<1AWF&~aN#1Ilx1<(Qlq@55d=AC=xnyT%l4NmecmG2oZ$fSb zrCDb2J$u==|0takUTK?fk?CKF zKjL?fy};J?F-#Jt#EMVvby`S}Hk|g!nc0b$98=-fn}{N-w48LCnG|V*T&Z_btQEib zO;5;5LaOK@Jymp(D!Ry(J`j!3=MsAqT}a_k@yeeUlP_%-wm0$hTE1Zz62*2(!|`8w zdK&ReG9qp-F{gss>IxbcE+xg?Ot)8jdrAyJuM>wSr1^^Mj5s_4Z5%#$l#Y>!@J$F! z`C*$ZC{+1oke(KYamtBH`iRjcF>-z(Y0*)ns`_M$Ek>L1ImU2I#k1gsySTP~oTq>B zJ%01ZD{S2GI-3vmXt7~*Mk!TgMKmlvk32&cy)HXxNn#g4xAA4h0-^`Uh zk|cd3sHUXMBNxtYw*;b+n$A|;vdCzK3 z(zdpkEGp~E@gIGZ-~IY`ynM(--on+?rv>Rfa*RQ-*Tk%Rktv@X(M4KnECz>Dd&NvV zv^KVRtw~hW){`{0k5?tG*OV9vV2;b8xJ<@=viKU?KQUS z?_x~)UQ}ukG)q$XPNitp2AP5l*^A%xp@AEa*m9lZO> zRVCdO8;=ZPwpxiz&LmfYtm?W7O44J5aCsm$nkZ8UuMA*5aqP-brZ=pm-gcY~ zJB~0o;gOE3?s!yj<7fVj^%-W$*R5g6{3R@&TZ*B16T1eyM8zgCZ|(J5b>$T-Zm6Q6 zx{NH#Alo+V5+@p*3!Z|EjSW9knknZ+g9I+LwyZQz$ofj{GMW;CXa;|#c zovh9e(zU0VfrzrsXn1m5-3|4K^UqsxGY#&Sd1zz17?gTSAWkB8DYt&&qpZ%hQ+>gO zENz-gv5>gI-T|Vj&f~I+E}*GG3`T;n!tz?0iW8X}?xnqN3~ORGD=)v5i_Txpg2sAQ zEUARfHd+S8B(O?g?)Cr5T}y0O>aXJJE!V$yEv{F7z|&JJxv{#JXEt_) ziKZG1WFU#lD4@Em0B?j4nv4>}#ididWF41Zbq&|7timjv?9lOkaZ+js0kaHx3og8x zOV+Gl;k>!5Si69PwqrE+O8}3R+`9GL@xfbIP$_{z(|pR)O^h7hPV1;y2&Y!K4jm^T z4&7@gVD0r6lhFGdZ}eo)nCs=BkQo(p+JrpSE?viES6nSVtVVoEDcSZ(4(-@OOWzb3 zRr9#$s&{a~@&z=_siC$Ynvs_MY~9@gbFSvSmq|aLvyi0=mau5~I@Z>~VF~62Cw$u7 z#;e}-LC&9FMPp+FiyCto+_RrH3H0m`08VxJf zbHz26vUFYpbLTdaXX(?@#+*SCs#dZhZHSk)9%NJv0DcJJqS{yIK+%Vi?xTo$dpmc^Ng)LgKJ)r)Hg9Nk2xIiJNB-N5yiUBIfE zG)B6bInp&T6O^j_O^G=|)+&jaIv##P==I{YRdD59cXCO=6fH;F7@G28seA|j{>k+i z4{YSnfLj8eGkR5w(Ww-Q|4tGzG156Af%O<;{&Y&pQ}J{ksXxzy6mP*NK1)`Qp<-o`uDGzhVhKrJJO(wZig6h+Y~q_Vlw z!i69H5|`yPv+s})4MP&eYj5NI%i=h=t(h?y@a@_4EL~cOp=~Q0Hn-tadI$<35WiVj zosF+^HwTaP2PFSwK|FI*!DkKWPOOR8&+*pqz=#H6{LE0(rqIOOrbIP(XjT~Zc$0QcJjH%~e&6QVQ#ge(zEMM6` znsR7+bFJo^mX^unm$JJ0_>Se?p&FKCu^qVqSu;xlGy=1-g%^DhO@-dF~ z)8n*Kw(N4QShJYQ0?|cQE+ti>i$XhHLbf`3heKZ<}O*wn$iij zZEs;RWTSNLd%5GPRjgXQii*$y9^Tr8)ojw5NcFqw)t7Vg5#90K3PA>1l7L-)SH^sf^WEUB~5@oF}Bd zmPP9pQ{))pc$)<2zHF}f?3cN$Aco2{D@A_`nOl`h;P_sSIg)9-@OrMj^gQO*moRtL zc`O!k67TG$Rr;pe97p}~^;~?}FIYgHZJd2a zI~aHQFiK1sn_AAQ%dcepg)5ma{$hcYn=ZE6);)qDxsGe@`7rBBlf|x9N>IO?MV0B| zH+OMxz)ty+l~m_=>Dni;)qoR^$mtdTpr)5+F1wj`U9pOqq8!rFGbkvlp{^*6z*q+d zIwyo|ikb%I=Y%*YeQ$We zO}r4`OK-W03m4C!ac%?478Wyk;Ghs9m)O%;3`$&|H9DQL`bzBM2iSX{mCjKciP^;z zCpqb8k^U7`%IYhxW}U>9^JFYuu&j=h!9MX(LrjUU*Iw&N$fABu1Bv582=|2vp?Z2~ zFI&OoSBTsaN8eCyV#D?W^p3eDo)vlI9BXzJ%dUPm?_1X-gtCtEOgj^O$LTj$vi_PY zSd!zTqq&6vV>a{GUc==}vYBe{$DCVBS%Hzq(S__4KkiDsH$e(@+OL+0`whiW!REL{hDjJX3ZQb z8kVqh$!b>3DfxzKtbdATz=UltZXO|7Mev)Q5m&Or6h{e?rrPUoVI!j zmEE|GhUgBq>^rUvo@&~J*(L+u6>F)CZR5euf0pmRa1?vx8dhZV@#Gurl$?JncU)Y~ z)}McdFaG2KHVnp4n{N|Y_A_KJ=HhEFC;H%@`Q{IQ#nx^+a~BJ#@OE)v-#(7^c*v|@ zKvkjzdtMV&2|c`W|ATDnS1)j%Vd~CoC<6%wC|-3lbA7M#__p52<8BEOl1f-|>0<0% zFY$}7e~;(8OcYm?VjelnD=)mn{#G$CvxUyB5A&0s{ER<6vxQ?lV?v58G~M`NuFLP` zcR&9zzrX)6x{@#FT^Gi%ZR0^Ef+q5o2zgpoz|`hn@wqSD$MJ+lE?Anvc-t67Ldb7k zQ%_M&Cg~FN6xY^JSsu^$J_$;VN#vFmi(`3~Rt*&o>9YT%~Js~KoMNV^O|mb&YB z?*)@Q^`qC>6Dr|`D@tg7`VG3(;H2qFbdp{`)ht42mccFLanOBmGncYeC#vdn}>C^_dN99Zr!!DxZ;k2k06LkX5^a%hop0^Xzx| z>Q5iw^$s6dY0*r!9Hq;fF2U^8A(RF=4;Lb1nlowy$hPm-BZkRK`voALjSJlMIrL_z{ z{{z1KU%%z~S2wb^RR$+d5PLx#=dWlWbmT>T@snTj;G>W8`ra-^gbb>|FHs2L>S7x` zqi$joQbU2{w1fvEqt#WH|N<8BS)+)$6dm@oioh zE?{nLBD?N?mhnvSQ~g`mwzr)_+h1cxPk^-41V%d!a_A&NC;_4jChCs$3?Wo^N}UeK zlEJ&$PWzE&+WWm!U-@p$FUgK~!bDn0 z3cj9cLKq?{`wWCIy`D9VF>K%Jl)9L3C8y)r+fBmUxfl-ok^3HalC454vNMv|{fE!+ zZ{L4_r#I}TYs5v!A4By8>&bJfdUrDsiXp9X9`ln&*}C}%<3Tf7(ngD<%=Ud7+1};Q z-mg;c#mA%+QZu)LB*PdEe=4=abct-i-1)4iHq(5dnQjT%YOlGSHI66w z_Os3O?|YT!Uw#c^?KLF6@h`mhOMj64*V!$;+-i%bZslcMP#4eZzy1n8eqtY{tU1gn ziKnlv1xMN()~_sQWb32+^k={2(I=kdjRXCRD>A4-lq^0pWSSzi;$j-bE;sDz2@mq; z9M}YMf|@d2w&-H=ojYVq@6+DVQ)>idmew(UNddzf@8@Sf{u6s#nIcmPea8;4^_Azf zsmd{SD~F%|8UOW@-}2B4J7^ce=l7af{GQKpQ`S+w|K0D&*!D1888`ExOQU2=+=oNP z&739Ial^_od^>*4XFmT2T4Lsi?PuZXbxJUND_1VBl3+NS?7TwC=Twjr2gA+nOr_RP zn(XAzD}Un8_dm`7zYw{#WsDs@O#7&ZtaW$u(ZwDf{jaa^-QPdT(=Tllk~yUwqEfi@ zTHbTTTn_*Fi+trre`M!WEjL^>4@c{6j<`#>WJNq%-k7AJMrsw}38i^>+IJ8v zS;3ipipGQ4O^3 zqSa8wd6%pt>hL4{?YdpOc%V9w?1sY&hQiLZZ&Uy2Vm z7c8VUevmDPC&{mGqMy-|f!W?5)!?ZjSnAvc^~MdvHO<%d82HJeAv zxnf-vO`LZ&cE^P-#*Hd&pgMb76*o)m)_ma@yf1N63dq`^4LfD z=r{@8xkuafvUSHk#w-~mhK4zK^f=>FV&tX_mRx&1%ab~Jfj6}#vfm)Jd;l)`G#{Kt9yp`Y-;YsZNy znkW7un(kd&c>RSZIp9bj)7Z~5fA}Fk`t^N0_WA)v)vTI83>V(}b*}I}$|t|}6P|qT z6OAnr?9P!I_WQO`UaA2I$ORi?2y@mUJ z_CtRCz%v|jR&vp06*vwb67r~KsL9wS#JuhlLTEIZ@edwj>kE&tQGCP7yZ{@w?G{4l z(FmcM#ZY|tz1&mP!B4*U1%C42v%Iu<5AA~(sB*&!a z7-G~3lDT$=L$>g|UFD2q@U~P^RvgdB#1z@N#mtpphT#q-3(8m!XTc=rnSxGwcRtF0 z{_Hiz@GvTa&yM2*3?AFTeP6zlTR!+5o;`ek*MIwMK7RY1eCS_($jiMFtV|5hyn7b| zwhHPR8ns8re)oj-Ai-*hp&~nli6fiX&@#Z31VEaBi%dadE;+dcBI7uws5I?PbewC1 z!K8HNq$Uy@v{JRak@$T(*e(Q_?QgIxYA(y`>}Qw{er9N@i2R<0LE33#*Rw+6qsS;} zph0vI@{DMArPKu>pPS*q9wu`ZaMj!dQYWNmva1C{c^z}DL0pb;hQ;@0 zS1e}j+&NU2=8_Pth6Mvb=NP^207*GjET21%g>@yQCq-+%KtWl%F?%l8+;9u;dC%>< z>y{f>R$`X^W5he$$-a$m&=)_C1@oG;KJS_wl3e9lqXo<4F1G9%qFD&Y)Zxu+><%xS zk(ih&^$YtY<M$_ja^bgHNw(Usssd%3*0VOQY4#H!V6LaCJchoZ3G(vGnKyqv!R}^8i)&dPr|K;K zg}jU&c$lyJ=L?J){EQ#n%T5Ve+V*eYmtXoQ_kQJ9JiF;N9{J&y`N+FJB&7a9c8*Lj z-nox`NBRgQS5Yszh_gz0J|X%duh|^S+>$JMH$TRU9qI{bI7U%+7BFU$m0OP0JcQqn zN|W@F1n)Qlaf#HWr;w15D1mhd&)%K%XD*~Js*fXsVpB?1OD1XQdEz&wu*FHhSt0pI zJxNHSBq@$qgOon4gXwnG%8i(rn#MZ(2H%yS{=m4KP|p$RiwEhNiWr`{M!Pn=tDsU$ z<|vBNlL+=7WYd8bhWwWB>lfiu{z5447P(gHX|&oI+4B&8e&{I<3`^Tij52ADCOgW8 zB^1T{+A{h#J;X~L>M4IjK9!67Rjb9f?|g=5UVek-P8WTLIv5PuMMu%t%_sM#|4}G8 zlx|a!NR$}EsM=|^Y|>x+$psV@SsC2Fo93e~Y<4Rn8(wA0XbR=!3B=meSmI;fV?W}h zE}u5laK!BK!UCtom68{;agoIkv0!{hShHlLEBx-8skm#Re zBq3GEWdiZoSU9JOiB0$M_^~N`l9%QarW;qYiLifAzE&lK{m0A+nvH3_T-8b2f&`QE z$jb`Sd+->&-A*|cVqo)j4*60kF0^B}8S#wvvi-^5v9VuG?{+ij^AewsK#Ivi@79O- z+8001b3-Mpz5ZYM(kE_b?TRWAt?HdtRi=_bD?Kc)vPaoej5g4`k0aeK;)~}~SyqHu zVphM`ql_jjzY=}=w^mnmKw{yj1=LprIVSQ}*VNHaSBJCnDDH|mEQu2R%UNfGivA5k zVw18tebMHHsxkYIDu)76I48)Rtz zOZ@md|H0G8V`y4;H=p^~9jrgUp0pTSIFE>qH7#p8R(V4(DvqRz5)wy*U~e47Vly*w z_$Y_koy6s5lMy55`y90IdW8oc+emwFKYgu-In>s}Sg44Cyd+#=ujyHZ)YsKum>R*G zl}}w<6gJ8KT&g%5PK+|5No~2*nQYWwsf_A)7Ar=xNqaBCESpsruzIOqGYEC2IyG{c z%Ht$SG=-Q5zdswkKwE+}Du&op$$Mmi$w@IzNwQj$gESFRdB;YRl2**(i?8P$x7@<5 zS1zHz>SuV;fnRDH^amJkYoTLkl!;Lpc)Fw$3g38ZI8jUOw^sMau0VBLlafJ`S9O(H zRSH)@gF2=iSJzA9+e|SO&AWihuD_X^Mdn-1&tdGyFwPk1Bqz7%LpC}hbMckq!9y^q^&m3%K*L2YilWT~|Dg1HOEN{qR*auBA z7%y04z}=TdPNav=)s6+sB-dWX`|f!^cijF?Zn^m;Zdy@J zv^XK<7=z9cw*T>){A>fvf6pD?D<{>+CF1wize&D@ad%--?678BFQ6ZiG z@MC=D6CdJ^J8tLB5C03l-s(~74`4|sWA%+6<^O&Bc5c4)o!oxqc{F6lqTW4JJuV!m zs{S95U-Hv>PNWlt`(wDbs=tv`4cfkzKAjeU_#9K~KK2gAQBaab=7Qza1UB&EwkcfV zBWAh2GeZ=rp5zX7Hq+}gk&=}|l0||VNeY)T%SX&ETmFWG@v0-x`9YR2R{0`hI z_LwR4#4m*ta;va7EL*r<;hmXt<%gQVqFxd3dR>u&VHnL8JVQr$=BJksqq;8JTPrA%b#U%`z^# z`8~YnmaAA(mqlPg#yZi4t9vI;{PA)2cr#dh&24=6?ss$fs(O-S44Dn}&BO^c-bujf znyK%bK+{3E-IX#<=t)6zsM(E-yW!n1v{RHG<%b-L)F^zd+Jvmyuv5J7BCdLej6b*B z#yc;}q;F3j&V)$*GG6!xhv}1kXE9IFw)X*k`kxPS$Sr+S`kGqJ&?I(hGFl{XQ|HLY zCWB&hb`zK0{9f+5>vnE?=WX1!Za#U^UsY=xjhQ4Sn#B$rvZvl(4a+3W86MlB>|_c1;8J!4di;NDA4dhC{=2dUuLV_0q9-H~j%89OinN^_8YRO3PtKQTMsi34GoXdFEXj65JGI{=l6b@N87@$OQ>@-Ikn#> zHls0-n3y=}t4{nvO4PYC=lumx*965+S>xic%DC^)mev=kB(5+^prsKdK{$UE6J(Q; zEaALoQgkkQoGsrpBm?D33?}(&mwY5__j{!8DqU-p`dAL5=_e3AclwBu zMoSh#Zdhw#X~>Qe%MXH|oEcvMqL^`?m7yuYN>g#}D(B z?TOs}i95NdECusSfto;(Yr>ns97}Hf1>ADyJ$&H(@8-4}uHvHkLSF19v56Dcg{u;| zP90SC5+6g1A&%-b*K*^{%3s{bwTohD+tr6BMXpfioDGtXNr+N$(?wi!(|fsUQ63$y zJ;;5}Z>LYZmQC8*A5^c8C=tY#l`cFsqM}usDY-N$)SolpMB2<>?L4WkQO2qyaJd{9 zRUVN|HI_ka$V@1@^ULN}1=eg^SkMX6~;L6)? z;i9Tc>|$hE8DSM`1{xl!F`y+hzM-Q{3R}GR%{h~*2kktHgGUBBELJF0P+Fd}$5F>*<9N+U2 zzx>L_<=Xdi=UpG*?mO@0$1gWCoHvj9gkcO>7jenu*K+mM*OC|NBfeoJ_0dvKDPP%y z`oOoc1*I#^E;P~9U)AnXA7!jcnVS8m^0QcV@iG$HALi?y{vdbX{r~u{mk%-J3*Q@3 zQ<`v&vHf?S=Fa!NhkO3(84QirbLWLcGGI&OsYAzX$Y2=As-PqTVpHl^vR0hm6_-;i z0YOSxHKoF@0#3J@r$}P56+>(~H5FwPrp8MD6cXrk;tj=+m}JKi6-!=`5Xzzq?e4rX zTMg1VXYSUDH?^oc>t;FDxtGHu4i5b8vl6sQpMJk=cYTP@e(e`*8?#}S{xEW66TklQ zJ>2=pukd7h6pL3Zqe{q|9}~X*gFN-~ukf*Z-pgm6>ZNhnGUk+|Yd3yWXIDX-Eh-AT z-Hu)Us(U7ZKomJei&(SB%nSeVK0a{w2l)7R?`Qk4m#EWTusz{0lxNj;rBccdYv1jY zO)XfZ4MN&kk|w@STO=itZZ=4|mZ}2EHg;_4AW8+=SIlK<%KMc-X;mSWF%zEpT5fXpE-il*~|EN*v~5W z=$C;pApSBgCI*WNR+V3pdKhE?b$k58#ieMvw8rL9RUpBRDXgbZ$R|F%`fQ2NLD5Ak+c$I(Ti(Qlm(?-;#$Gx-F7fw~iv>=fpO~a% z>>>3rWF?avbPNkAKEjSyALVA!zaYo9ys`~d&*Z{OvKJ-s*sLWh*z#3rJ}{wxw`s;OwIKWXAC zJ6CoS-V>Ox+QnZelT+tuF_74{3Vh`svr%2Ee!6ga#a7b`$xcbZ6!b;To2{d>Kx-pu z6OlztmyJrPV*ZMHq6hb}_295ZVoriOKP;?llMIi0$gOT7P2vv~>uGwNZa4)MjEcNQ z2~g7tGl&m57#MWo@+-^u-vW`u@4>xy7e{@i%)hvfyjby<;x~v+Afup&jLANFMuH^f z7myPx-pCsuK7SGQc@DadJ8($=e|n8(9Z^4KC2K!LXGZ@h0_=)B^6Y@#-6#D(;N5fwZeSEg*I@ z{ar;ZLD|_*KLb-jL^9L0#bVUWt>l7wic==&?egH&W(J;IpKuk_zmk{8p)IUsjv~s^ z#mkRv$D0TT;5wF3`BZg!p~~g*9_YinN`ok4iQe)MAz$w0BLA zQc_P{MH-IwPKGAKpR5S;2{9A1kaSBgZ@jRLBLgOq64WbDVV~jhc!^FHIsPEgX+;$0#o-bzAu0^_Yo%|k0;(M)PpcW@SPy*zy&QV^kNn4{ zKRl!3Pkj2DJaKp&kLXLg<}ZZy4&jbH?KEAmmL-jIXsD|uOFEKIG7Neq8ByQxF~yQy zQAI_%iT*=JX_o*gpoon)mc-%)7S5l~;$svX}H$q(IT;?yTCpkTv zipnZ#3R4Kl;O>YmX4&O8acN;M&))YKFYOv7W!W0meAyU!j=Ce zO%-|S!_S!s60f=$cXTu1&S25Xr9$9xC@3tWrly+8bOT+Yi;zj(VO`Hc(|+!Iz4del zE*;8eD`dsGIoOZyW5>ZRT-se!8EoQnDX1$ZKfy|J_B@u(Uqn->fwuko*w@^~sI*Uh zt&qFqbg~MHDJ#wLw4HLd5`26*Z}|D7-Y^iMqT)QjwBF;KI79&x>! z+1U=cbC%LHM+S@1M&>uvQ5rMBp&dIp&@xPP(L5F}EF!V6oXVypEGmp<;`n|x?>>ev zZ$9g4;y8L>FD*S2vj$lCYv{t^Z{n)!mJl*0NuREzwz7;&n}fCi4{3RoEIe-&^J}Z9 ztSBZc(aL!1QT85eClH%M!{Q|@XlkIYs*HkyOw5Bqxb_?o!ZbxbLr|l2DWddH+3P)Ge+5R*h$&^ zI&4BT4vr-;SN!q9rbZen3y6=Ffyx+Qa(oi6^xNtMi&(s9AqyI+$WD$WN(PvK`1;`q zmyAF#(CMW3qN}*JYLfeY^dyIe)F*(>HM|%wMW<0NI?p$Bv;EbBj2h#qUf4uYj)jix zJL&T#Qa*2y<}Vgh=Mx(nONu?j=-4<(br-TWXNp(09}*v`ZaN7Wicb|kyq>(tt-P>* z2(OUj%*r{;mmnoMI-RQGL|hZ266g-$OKjlM^X6fXPobz`8EeWjF?x=(Q3Wso37Ra4 z;*WE&j(2dRd60lAKwDI%h`CGVQIcjSHaV9$OXgD%>*m1bt?cg^!6$X@@0_Ci^6R;# zWQgB=?@5k{j?_C#s?ORCvFHNMzj!f8{%8uz^GOJe(Ka{;mU!{IE2yX`AT_f{{AUU2 zF)%jn!k$(_RG3HPUH|4PE!WAT?sa3(%>algyq=z`(D`T4w=)5IYbAHrL ze);0D@arG5pslK!QNogUX1Zb2L)1AW9b zT*cKT4xZhx2jN0OuGOldIn0%@GiqQ1n~w)5tyxM%ZLtKHMbyjqmYZl|d_qWrkT##l zmZ28ekiMQJ*OlkQX=B^i#1wJ0Yq`9{#S5GEGpZKZoADPC@>tVpxL_Si8|!G4@v$^9 zghSOcI7Zj-nDjr%x4eOdoP2V!^C(hdwP8x~acV2fp0Rz^JA@Joty@zg!K%a`#q}&) zw3;PFZM^W%)4bg5B7e>b<`xAww(WIVhQt|7C*?dC`P1(q;sAo=n5lJy|6iFXjSdq!l;oZEt{}>Zq)gRAgb^qN^!Tu2bs3K~Y zt!I9!#2UHf)X$qsWljtehqlu?mdTu@^C+uICm}hXOWt`Yx&7OC=+Vt|PR6s~%1cN% z{upl@brH0S�SAg|U+@yM{@tnL|OsB**vdrBi%XUZwc^WIt^O_R-w$A-{4Vm9^z! zGx^%*1?GsoO^D4*c}7K-W{Q@d$2@Daj6r2oN^Fy59Heb1{C#VG&_qmD6)RRWkcjBI zD3y>?u5(3EGDl+QrQ#dKhZbihVz-(k)^##EG=S4D=-2cRG zdR=~P)mw973CmW`Bi)ifZb7;b!$}4l7E+4KDJe`MF(!+Ws+F9#ppYnc7rS@J_%-Rm z6^s#oJD2K$d@?f&sLZx9G&(8$vIB>=iuG44!y27JrIcM;T}es2hhx1H8lgNRgz#8n zGO28=C(+x&(PMo$rSE7rX4NG^puFVMu%w3E!ffrv?wU)NU_H8#r(ZtIgei@>6)RXW zf1dc(T5=>_R__LyeB*Qv`N^)H&l2(XO$(N=xGV{udVf~9O2@z$Zr>OVV=8q^ms4$x zA-z)M&5jo)H!MC`xQmcYw;@T!h(-#{1HAUkCR)_{)wW~`s^_v~@qFrQCEl;7&=$tZ z7}~{C&+VaW!Yw4!ApJg@m6t3dooMpPOURFQ(A+shz+oV{LVWhhRLu5#&bxRS#kNsi zfBXdwO^Q9$HcA{b&YlC!sP7Ypd4p_*F(G|v%w4oZ+ANQ}0`bXWZ))}90kuM{Uq*|w zsQGM&EGo0=^SkzT2q9ced4hq7fo{eE(WFNQ=?0{SMR9+m9imm}(i!wWVwAB2#Y8o_zbTf z?Pl0Hg78ODw+!^+pz_p$ zHQD6aCfIkho!G=I90z4^>>R^jl%UZjn{${+qVNtLqr;WXg7cSCX!kQR*pJH)O|sQR zS7$Gih7@Y%EtJ7Kj;WCWZO}`P3DVcsCvDNe;kH5IB&aRS&nG=?l1=wLNAo}@hYpEd z2mzlXLG+w_(NSg&Sut)7z4{OjzH%IMwB?NLrsM4k^`s&rBMXD{?QMrznDAS$TV#;% zIuQQA)NmWSn>!dBH;`3WL{_Me%^Tie``#A1)yjYa{qzh@VNWlhB25C~{hN64js0}B zAE&K*2#-+)9oLWyK*t%L^q%BM)yl&?dxUtU)v>5l`c`@dnW+gFCt8J&I>;!fVg9lO zlx3x9%e8xY_Ve;fZ_wQ1A~CmwS|MfHGUS=rqz2k~{^^(4cYHAX$qI86q0x5sxAtl8 zvV>s}r>{O7+$8~|ovO-u^7C!hn41 zJ$8&Sa}IMB%_Bd`!{E>e0dovVW(Te9GQg^SyKoV;670K%`xy4x$c{HM+}A~Wf0%UO zaF9IjVrnK{;*Xp5iH{D59?sq?HEJZj$}GNWytkd!wtmD@%781uumq#c`&w|=bEuxb zfYO8zg99=Un&Zffa?;Y)&8Ra(Q1oy>0ss|^Yk5k3YBs{)@qIGzdI^jVi*Fgjl3PYu zkpxCD9*(!QiBI-0(kFF~j;BQYTeRmOPyGIMI>x$1jzI}pLii-8O%VTAo@8R6xtTtR z;Z=|;akdP?LI%YTW@Y7)VI5}kQ%~^RwpOM@25s=2bdb96GOCB3;y0U*2r-h8C87#- zhk3mD2qVd5REuq7CPm{JInJKrqhgao3`*N%l~q!nt3J~ZE5Y9otsNsm@Qaxa^`4mWo*BqV9%_#O_ABvCe}n7kY{w%KHi zKf;lIpZx9N_`oEIr4qE~r<10}wkQXOTG}MYma%)HjeRZM;gzpdd#jt+elNZ1J)9$* z^iTQ8kf5?WHh64+2*OmdWsm?#Uq`(Ebp7q?2x;hTBV z{=WsP9fLj}od>pXWHg$5iFwqA>5~IP?0@}fHukw0Z#zzpCz^t)O3HHcu?=qE=RbIm zJp&Gm77NxW7;N4n@sWxXP4b_gslIla)go6CpE{&H+B?J!yz14c5T4OKI>at|r7x(3 zOX6~hD9@L;B{Pd0yOSfWof543adqrqduKFdb4$s~mRKt-73=5$cC<;kVtYZi#E5Mj zc(W?0QmgseC0>%avTNK*dE){aD)TTo1{jpSo*ZkzIVOE|U_gAjw5c(k{Nf@CGSl(4 zzsm1_{~RsSk5pi8G`Q(Ic8ILKRa6{Z)UNwQfFQwX9D=*M2X}XOcXvo|Z`>`o6Wk$a z;~m^x8VK$*&}{bkZ_adw~{UT?vcde+nLZabn$j62pX|e zP)K!E{$lDFkv9fIg?6)HQ|I6%vmMKn=X67#7!BrS68fa|J=pl!QUcb{^%n+lj|0qW zyLb;L%gR*EqT)C)89yWyYwlseU)@>ZH#Oeeu%cd=&*h7w@P7)ck;T^LVXglq_EPki zR6~?pet!iq7U}N|+CfZ06{?9rZh33+OAF``V<95T0#5#&h8r5Eswk#m}r}--3S&@>qg2!zL{x|mOi?RxKYgxwO zwWyYA(3mitdf*lnK@Kkhm*Q}F2-jVO7ThnlB){>al9A)fd+v*4q3YM~QR zRQHL{c-ExHQPlT14%#3orinTSAItwc{|VMAdyM!fa_n&`tF>5*pL8;^q|B?H1wD~E~JgHo1zvh}=Uz-qm-#V175x*H0~2@FsA zLo9GZ%Cw|7;dHc~TCZ{^7a77NYC+@Z^W#Ee1+fOIv*3l2sk!G`)mwtnC(S!WCiVBs z+iM5mmEfIX(2W|0Imyfz-EJQI@thoP(4AAt6l1U969O;}U&_@QP}u=3J9aSqvcFC{ z6M2n8(#OWQ<*^38@Z^N}*Fg+cdOmA(((?@nZMECi%Q2{Cg0P&G_u^Dsb4Q`E>zAgh z)!mwh$7siUAC1<%ykI7{@#A%SpVV7%acN)|I!N7_Iy$7ds^5iPQdPyz-?shkwsTOI zKL(FddYQIKo1(P4LccB#OO-vRlV2Kffu%ZBZ6^{%b_g0sgucUshx=CZEJiL`;8&IltLglyFN0QItcK4`vTv@< z`vfQ4YhE1E`{!nbR5;b?pXmt=_^I$~gmKCR0EtrAb4h*)kQZMEBiZ$1A3&OkG&*(% z&CHuJ+s+992VXB|FM`KLl&(yRB54=A$pf!~shVM>X1%su=z&qSc5Fb=)fFaa<}rd9 z$WE?)HuO6Fyb%Z5on1!uU^XaSY&5uV^$=?eaes^`{*-YioI_PrWwdgpt z(vX^&bCEe$8Ldt0iO|g3yqU=ADk4UOa(+iCX=SF|@G_vKFeOo`;I<=WSE|817JxAR zSOU#|oXvvLZqZydEm~{7VffCM8#hCv;;WbEt$%+j54%Ih7au@3l!%R=w9~&c0TuTO zRI>w@s~SOx1brpF!ff-$!z!u4n(Ba-@{ze${6GHu{Z63&FcdJHoG0 z)k6bG!YrPbbRvM`ZhGfZ8Vi>>alw|IFYkYSBazp1MKo04X2l9u zVKZl%W=6KKN4Ns&oD=ht!`Sx{7@Tceudhe3wjIuO!Y%!%eK?!jvbI^9D5co{dDDA zaPYTXJ?iG|szEfqc?6qY+j#mQ)&yb>yqe7yeZkz$tF)5CWlMv&ubfCu>Kn!$96Ue5 zE{scte{Hh7Ap8@v;99xSd7S|^SRIK5T{bNp`^Y<}yfZG*&9toa0kO>f2n_NFKCrev zbg>F2REb&7BOiTnK666bgPRVM4Y)~$=%R-^T%X4)ZCfpl=y{abVDfhqYL9rk?Hu+0 za4JD-cv7*%UHBtG6Bi5(?@@~Km%(pv6$^(bDQ6BrmJDZhI7mr1Zvliyk6Q?q8e}5s z=7G&^By(j)9Sh{_oejr-$yBCwri_}*ka&+*`@)yFPfG$PC284n_6iV_=!&8L1K#xM z5?8Feu~jddp9ftwF9lPFX@5sm4n|V8=NFj2r6>T`AB!pOsLl<;o(s#6o?7U1PJ~1P zEf%kUq1laPMl`DG#|zj!qo(f=PaBoj!3%BmiG|zeONcuRzbo2LtU?*}e>k0Dsq@c( z6D+)w*T~>rGG+h1zeFT|w@_AT7|A;yFQ`J1Xf}0c_uPr!bSfV57yR@1@#lZNqe<&? zFiLwkYBtwitk0?c|3ZAanx(0VeYO(*YyVeRjPHhQNF~vPmGee*J`1Q}XGS0LhTP`BzTg7ZO;c*@?$X-x_ESvMReY~ZJo78Mej65HCRxYym zY}NTC!{5rV0?1;|u9#6>+QVg-o9nD|h}HS`{Q;ooVCoCy{|U$Ny|#X%hzMC^0kXK2gDsZDYDmJACl$*qdT3-3_7G3c)DrEeq!~i76Jm<6pgFL zh!X7w{j-^^gv0z}m?@2G*KM`CM>jDJ=}kwpJ}X zICS!6h@j_+;&QM{U+1;D*RJaZ!g75$3}v!7u0ppB*!w&UUs%Ga>m8Cd)ID7rMc$A- zFl1wa+YEHat21{AcT!ZtD>$Lf~ zkyiJym#xxR_nkg%+;L{|E@x5PxuxC?=IQ);Igu4+B@&2cubn!tChku2Xj=IwHnX=D z;Y&F0l_}Ku4OjK*T^%-LiuplIlqDg_R7#4-M-fmngIH2ViEhpj`|+iHL<*lI|IY!g zwS58=lTdgVp8dXSaqLb)&`6J6mR6;Y2NK^qh*VN4lq?FwH*Nx9RjSk&wV`3-N^6$r zy4MU6dtVIT@!kEt;4w)IQzhjS02S4L0O^u!b;e5QonmR2n4*_yTllrU6xfIS+B7YD zA%Ek$Ba>^UOwLIWyPd?d3v^R(IeNV zbB8I@W%K3F-&$avk|S$IMrCYLCxwsFk81n)YNwyszNBLf{Q!}uyixeqO%!^xJ$z@UW|AG^Ipl3RXJ1g zO0aS1qSjMBhVc)=VpIZM;(<8Hb?km zZZ??8zN$7l;YqHoi9?3%GUwSEiGd$0)s*K0Y5$5fg&H5vy1WMTmsnw~o~O&gwkFal zU4j=G+z`4&i{I6jTF;iSDofF+Oc6aHLPCk{NxY}+GRGtJuS9Jat5Pz1^YcGGCLUmc z7a?z@rkJ2=m8yx(tv_%)8!jdSj!6ZmX#l7#FT{G^?NZV$uJ-N{XH|xLR8#p6b8G)b z%5$@2Pkp6gsLea7475+5R+QjB_P;|gLQPp?g>dy#a!qjgA`oL3;X9x4FbM(da&NrD zMwHQvoYE)O71cRGmFnMD{>vF9AC#R8V;qSXR`%G#;FCnrB9g`Ol1b|NZ}8o-LvLIN z1trT^X(74p7NjzUnC~L5`r)g3X`C8|a7flwpBifb&d-hDg@k928}3}k$YXsRVp3z{ z(u6L~a(G3|xG`KM%-zN=~t}}0@NlHqRh`R+gLPWRFH;Nz> zq)Q*SE{7u>YY`` z`tw@}bZad4g5u-xZFIU{QW>W`*lD5EB17O<#zw5+{0Yz0f`=%^{Z8Se@G*kOIV%3r z_hsF=3 za;oLA?fLD1HWnr8(NkDYNI7@_tb;J>F&*kHAge3AadK8g)u0=E>HmTYHv?r82R#=M4c-aOQ zzdX7iqj$lAjXJ0|R(R$nkvi6*GDSUw;-r&;JQg)6Jh|b>PED?{tomf+yUQd+;}P)W z#F{eWElb5<95aXUo}7&yc}LBB@Y4Wkn7piKu>rkedup@v{G81-+h6iV^qiVi^JZzj zO2s|F0U;^);}jUaX5(-EqQ)rodu4}cuz26-z#cL>c30I3Wr; z67!{gk^qucwJ)R7KA*+BlQ#Z6^Y?J+xM#Szy||Ra)Q{yG<_3tF|K$B=gMl4vWA+OE zuV}Md98ua=R9DJlbr#9Hrxo-JPQ2gNT~to6ll^qUwXMo%zJRnmF}Dr@2^*EG6p(B) zSy}lsHfJoVq=^`3LYwmv<10C;SUg<50omeiwd?Wrvv(;wjiqfTeWS{{(HME*an_<>5F4!4%WnoSe(yzp<#I}k>lsM#cL7ENG0vT^jIy!-BAX(+Yw%&_-tzwQ9mz{+ z`ErfT(*H289AD$fksHKM@|vw0Om*b|*>Rs#6aF#pcGL+LZd&H4^Lun6aaVWQAY6_qTfeL0Q>V4N7UkVs)p<@S~tsa~(U0QO-Y%;TLu$l$B>*e;uRyyz*zKb|}_=2oUL zv`qz@5f45m+R9CB!4fE)9^*a~TahmR1)tFOzTxInxD4CDQ(*E9eG0yoZGLMwXuUi7X@~OU)CLm3Js;#$a%v`glsYTUn@1CL8Hz-lLBYa51fkXE_ ze4RlyP&HTF<&=`;W$jb9Ya?+zIxyxb!*vd)Nj9aB1@qkOf&+a0;(R~LjFhI*9z|GZ zEN_^P6^qwbSA223?+AAP!zAjjz{bFBJcctd;S#0VIOK6TqI|xy(qoN>35Q%(zZd+{ zCQpZvT$ptFC+PfnPTyBq!m_bkt>sp)*Y}R|lss1TLAO=p4uz%9Gc#WY*OEiqeYg~v zP7ye0b`IHY0^h7p2-p%O{g~k@&<}c3v%)R4`^1RNJC5}RVQ#JXriEf)^{V+Y%!8X) z(sSbw7Euen`om(hQ}cOl9OdXQ8=R>~@m13kw5`rm*OERWF|oP#eZ;p|+Na(*O2q(` zL)&1w};c~YXyzZ6Qyh7e-`vqJ6mRD+B;optPgMep! z!U{PcZaINji8C7Tr4M2GAjM=jS*|6nN2IftMEbu;woj+QFRCQIFGBn^Vyl>to7xMb zsqS5iI5O9fye^*?5U^4IY0p-6eAKpW}1WxUC zY?5QBNyF$gMu9(RNP;6ddQ}4uIohuXwHuqMKiNxsscHFH4ujNouX26=?ywpuTEUXO z&#q;h;0uF0eN6XUYWVEN(=ld7CNDjjDK*wJtSs^w1 z0$Y009Slkq7}$L0+ev+aQ9UrWmqnBlZDTO0k*0i{u?5B&sP38cumSh}FVl<;tuNx% zYYIbFQqH$~gSs^+3Gnq1@jh0Zn-b9IvTAv4#?Q^~2$Ql2HC!amI^md5^NG(O|&~EB1_j#!g8YX-lBuB<#v(&x{ zhPm;LnGK>~#(CuV52&6lBCwou+KtzDrFX1qBHBFNbg%Z8k~` zI%~4A5xL_>v^G2LFpShZF@r58j0e5@TGGw9I>`DjzRziqz#^qrSi+7dI=>TA^v|aS zT=?fyV&o`D7(N)1ydJ9)VZPbP(OZs1Oc}H`>!gI2U*I{fzhOHQJ6Qb5ms$wZ;M}xQ zkorZx5{F{qNqmZa5FgF&mor;|@4bm+7){~Nk{lt9+}z$Nkn;~4MK~?3>4fUl8LGzV zjzn>_hAssM;DS$`Oh(CtxxGJay=}rHQ5{hTimlD?_})Um?qa8Th8~^^mN_~CG-!l& z1Mee}>u-!}O5W_yU!KtV5Oh1lAVbZJ%e*apIj#~Ul{A67g#&2U0`nGrPfFREH#HiC2J)ymjXx3!b;@xndjdq>8ywF?tIqtanDORLQ z;&zJcv!S8_@pgY-d*0cesNr-j;bXP)G?kUYNR;glaTbxWVl>BJQ_MrXK4jX4P5HW# zN;7n5@d8`>9n!{-qaVxJB?QbJPpCAIGxKlT`YmmE4bm6xXg$T#|q!Axr}_5THq61Y9~nFAET{ zX>GY#1fN5EchW+OfIE|(0dHU)6~^w_lBYtU^|uV~-|8qjoDwhJDr8BH*BVO={HN^7 z4#pqZQD%Ohapeb|GATtlBfrx>o?0>*JoH*W>&TdR<>JEb$Tpo$(tG1+oENQNM~84F zl@D;Mg1G@_x+EPBUkQf$;CD|tU=MYs3%4jq;g1Z@y7^DWeY*$g!XuM_Tutq3+$|%y zs?Sb4f4`Nt_D*6w^vM~R)aEFQx20Btj zqXQO>DGlCeEF`vOwB+zY)}P*9!AmLi)I*dfglAi0fx(_U{&BlqlXM!4T}c-k8o;S? zCnC>=y&37@^K+bpyzg2Ia&>)vd})}@nJ7+5-FHY};V0Dc;WkM%E0=|@8I2Y6SY4g{ zoE~8i*d0b|v%J5C2|x3Ka?H(#U-xFv3Uwf$Xm?_4SP>Rzn!WuAH7^p6L-ys58`Xc& zuv}j5r*+_1vnTs8t$16?kG5k92okbNptt_<$}%^4g!?8QF5xM zPH-<*o)T!;N8YEDwexZ%XM$er-z$#HyDeOdQB})TtR%Zz8>qC>Yws99`3!Wf%X9}M9w#?0*;$na3?vabKr+ zXM5u~x{4(JGwTp=P~SfF&VZdl|9yhrbgaDADyAkhoX!Gm_G@rdfh-O z;{{lxbXxsZEGSsZu;=$W@{J;2Nf509k&5p^JzAd@=j%X#v5E{AIF?Hf@^Cl9C!y~} zqHg(%2_#V7g;lD^{2VI(`c2{N7qT6tWS|_@)z8PmfE1u%X3(#3MOkeTY-YwwbF$i$ zk$_pZ@{&Nt&H8G{^#pFM&C^x?fg$Z3a=qY__w92B#dyS6+l^y(_Cs+{&)Wl~LPLDW zgXbvRF{$PvoQgHQjkU4PdHK+@u|hq4S>Uv>&BvL&JzHGL@fq1;+(YbK`L1vERoz~v z0ZRYQJO7zy%#OCz+~5l(^2qAu(@XM`1)pW z;nq#JY z2=ryaqfozA+Rrr@nD16EL{*TRbJ*mi4yhRPW$8ZO=X`pOHs#G=fo270h6Cxn<+5Mg znd|Q*1$=}J1q6*k9+Pf-i;vY=sT76xBDoYAASWEMn4~J_B^p18GE=GF5=e0?u)w8~ zBI<>fnKJ6WG{)LgdCEC@JHURL_Vd(6mOuN=bYrC2=cyidh5~*hRo(8#7s|Q0UZzz< zM9Oo$N+Fo@`)(jKTb z;k!2t1t#wpCAv6B)}zADbW_1CI9X#EgFo`~)^hgX()e;9sW1YQGN<9rK=%npk~ckd z0x)<4m_NAh#-h-jcw_J*dXF?!_}~%Fb~U`LZ=)ne3L(z z>UO{pq!UViI5>;FnIU}F2}!UoxC+HmL7<);L3`!S^oYC+8Tt4B7H~x-!~!n*#Q(Pe zjK7!t@2CH*_j-&GL;L^8ycm##zWr~PSUv6Sk4yD$n5bB47deQ5!UE8M9duOoGNTb8 z*iCGdj6_e^8aNXi2_`*@-GU?ELI2QUbTp7x-up+T5edFz`UGxc5A;7BBgrq~VJ@`a zgx6Vuu5PY&$1mRL9am)6fiKGz68nCzhK33eRGa!8m_t+rt``F0XK|a0ho!4uQD2mA zZ)^T=I{K*wBdDY}qcPDeuSRwR2muVJzFBdp-YZjB& z`JF`=MSYwIjGGhyxg}RHVT>5p2FnnO1-!_2wss74DqUN@UPSb zF$$}V*u@R8{mXW~Dd(B`<9&ic99kSEqWDA_Qo)>0T7bKH>LLSonF9KUi-rtfjDipA zLd`chkAEY5+k4qv&1RW)aIy>iG*X$SHVuc*yq*=m`k(rG5nOKfqu>S_hxRjC(W;_Dt6U@LnS!&-Q5$ z@Nh=Ks(ytsBAB`16LGWW7~cr^#6g&1-^|Wya&AlXA~QU9ohYQIoY$w-`6UcZlrm~7 z9TXz(d?*m?ftAB8S76*2&2WOn>)D!h{;L7#GCDq^BRf^lKTvuQM--H{*OSf?@Vz4B z=?5QRsTr=OPTq3g0xNG!4jHdw}0W7zleYjuWN&gsFQ z$`1yZzqc;mNoG?S&K83ao;60Q;zeD+ghitO(lskGN^?{zqdSCv8?-)Z{@&XqlN%$WG5O+UpQXe041STZhTQ6s6+us$O~2LxtOH(xZ3_hK+0Dd$ z&G_vliZd<4!j$*vQJ4}wCQ5i1P@Sc&QjCa)v(A=`w9!xVFkr@Rj-#6+%_Io=YzC*Ol zH*(cZ2Wj|L4`0QSow)e0bF}`9=)-bX4tq}RZcVuZBmAm<{PsXxnp7^c-E!57?9Nv1 zvnl+@Z_b$2V*k`5(jD^z$30Vz8X@f9q97&_Qn!3-wrF(cc|sgdj3oiJ_Z9Fg{&ulI`O-qx*k58cKJw-9u z`Q+T*TNrLQpecOdF?NAM|83r;cE*fKm```~d~V(EnRwk394L5|L(F*($7(FmUkJ}8 zyx6Q(28zA%+YdT#zfpQe7dYjwZd4!V%sBKXZBw>Y#MPwYOsB#fY(zv-8$5Y=GfZP8^$`D0IfJEsS$btmyJVJ?+ zox4?1$493aifz&`oS3aHA=-*89j7QDz3?w!6DXx~`jETz3~=Wsg)HK(hJUXvHuEtv z+{eL9CUEZ8)S9S)s*z8D_-2-+RR|^E<5K=r6L2KBJLXXW-QiVE>aHtqruJ;p$L=&g zzAuKeoP1RpuHP~7Zn+BfeZ-LiH~)fGqG(f-*oKmfaw95Vzp-q+!_J^Ugk{sr;R0A& zeG@MaehT*<{VPo%hpKUGVpsG`b&KYSy~Z6Th{VzPcK3w2c%}sERum|843h0@IaC-u zevw9|*W8*YxCs=1C2`xYh^PSeRNUrID3=Jq&Wm3vOJold%k%cuTHUBM{&Z7u4S}*- zxP$Ob8<&rSdc$chVBW2sATv__fhM5Hq`KJmks<9N>XM!2=b_Q9L7@l1Kdn-+pM91Z z%IXq7ld>)?Zn{%=Jm zleE3)zYK1zOGqt`H&+SnauJe8$21Sq?0mWV4M{_2ziVAe<1%83shWkMk zaKtzDEeYmInXIj+C~9}=gAd^g3o*sa@FNY*NlY0vo+zI!&vkMAzJbrlN4X4U`9>j} zK9u|Mde&Sr0peKDDbJt9B56q#JYt!vuOS!Y7m#XR-3!3C?*^HWQ8WM9u@0I>3vwY` zTSGup9@V{D;}cR*If!=;i>8n|#*I#!Hg*rdw7R0^W|=Pa-f~~}e#l#QeRdRlTs4J8 zeA3I)=qtrpR7uLAe8rure>~??SR6*oi{i(WReNEs648UE@>kWQ+$zSeUF{X%tP&68 zJ)D@uDrY}=V#J4 zYJZ}+dZ=))-<=wL>PGKvLRaQ2@-2xyuZziG2#ivvuwt zeoEn>#NF!F-XUS#&a5YcE(c4>rg^*v@bM3c@)Xt9Zl@mGhCA%X#fA^v1VjrR!Z*Dc z@n2fC)AscNau$a(zkPjILi~hP5_>@UNJ3D6DMh8Er$hHs*Lu6{S9^eF5;jp$t@#&7 z+}CxV*Sng0by-nSwuL6ZZ@VC3d@CMMwm)K+@S&3_r3@uRt@k0%;2w4x)apSySZ6{` z))Kaw74DOxgrVLM6|iL*baSgkApJUiyE9pBwve{9-C50SJ$J%Ci&E_2b^8wXbeZl* zCxp;osZ-o_nQ;&<)|*)&9cZo{3!jFn)MBL|MW^O+-uOcX#hL&55-!3!}+xSx1{RaBn81({ydf%b`QjO`|_(4sD^7gGi=onY}e3I6Db<)k? z9?#17HPWEfg5X$+CvVD7=jO1%ZYsdd@zulojxCixrMk{Qs$oUi`{BPJarlYedqt;C zDEnfq-XK(-+4OE#m-5zm&&EG2HAHg#@l|ARbwOUY#p_ds)9TP^F6%}-IZ*VIrhV@; zPw$l{vvF6ZMawzW>Q4=<9n_d`+^ zQ^vUNN|?UVEdO>&@pwQ`M`6f$Az0klTR?Wfo)(dKzm&(@rFD&=a#myoClzLIgntMI`@i;?9O z7_&(9W8Nt47E1sxQs-i4lf<2wANNtykzzjKOg-6DO=m>Dr#N1mTr=}R3Y4`8!!4+* zUft4>_V5{7*N(ldzHqTOQ@MhkF&sjhSN|#SM)pKa!1lrK!*P0A(at&QY2xkvBJr_IxdJy8!!F_p2up3%HZMo6`tz=mN$_g=%H8`5P6tq)VLRFREpcnBIc$N!D#@I5=XOSGXiDDY)a*VY zr~P>3eV?`tXefk& z;(G;$mDPH#*9${1e)q^Q==AvlqRE>^riFLZbR8ZyjT`7G@_pOZhYmFvGIg^jN3+a5 z;0))PJHz4`G8%2J3>FRDaTv;Q%}AY!YyA^duMl)wCfau+wjd{p|4L7hYCZ|=s>5H& z>ua*w6u5s9d0cF%(Qk^unMhZ0;vGpy|I(uUinG-h1eX@RVu72^Vc(CWr35yu>5Im4 z92}yuW_?T6Z@-H8x6%533fLc%n+Qapy4`2^| zZ+Ti1Mhi4$z}goHledblMc0Clh3h zIHk7*8^h?dYxTzEj-Mz0qSuz|;k#0*cbL3W%+jOZckyZ32E&~z?A$%X&G#r++aKiPQ4M&*2?ix$G9P22 zRz&4us$s70~GA!0pxVs>rt^4DG zFWl8Rz4N)A}SPA0-qwzEpV zP5YWc#`r;p9G`Ecgo=+<)^lP>_D8|R-Ucqo-h1^HjnP66Hz)k9KQ1S`>w2EGq~3Rr z&4Dj0c?0=ltx}VnGQ473ss1WUKO?RuG0MeqG$?oednyejXq)xUMyd$XP||?` zTcu0GTNDdY$w=1Z&8|FO zR*Ye2FbLWkZX08A5SRV%$=@qs2{EzJ^PUWda&GC;+XpO0GjAqtgy=EmD;DPDT{G6$ z-iSO~3qZ&3b_9F^6s#11l!I71x=Ds&ULI7?tsXsAqz&KsNM@p_=&Re}Gy^$b$Bz&c z#WT-@dZ9_=;6ra`2v*7PjRG*N2Y3W7HM~ zG^V@#SlTv%7|MG*UA!@0Owpn0~CatuUy`;r0dT^)kJm#qVxHt0f^#Q#td zH8<@)*XOzQ;0NM$*eLR;@J9KDz<1#2fR!mnlfnXfu7zd)jv!HWdE5iH|I{;G+&BAeM^%>=BgS&1+0ACY* zlZtHHH1s|7GRIc^lmO0D2i~b2go8KXYSO zJQ}|zei>~J64jU1 z`wt_z#~L`67#HV-4LjJ5?WeLmNhF9^WAl1lr>Vrycqif!6=&Lz?nCyDj<+$roR z(*)(I@}llIl|BDcJ3MmQej`duc{M#gUp^&rax`yaw5j+FpAw}sIQDN2)QSy^J0z{b zujJ0>%TxVl&%9hjqQeyQ?MMlzE&=~iy1QTh^PhJ(sfg}g_b?m8Y*)zmzPza%Ts>+S zHMe5L6K$4ipRy;RH%=Ucn%Ii}LJ}cOHexz#k~bD|Fiak49_O>)9*{tELFIgBb~0rr ztMnPjyOHNC46?r<+8@n_hrTpWT9uQl90W=WjIn@OU`lZcd(cY?O}piJjSF<1C46OxZrFsCKMtdoGrT z>INF4HOFE_6i(Bep0k@P3ZdEIQ`0m|(~?e3Y|QGUG^nJ%K=%E1$|ba}VXtdOJN*b3 zkjfZcj8{{6+PD|c!CS^QNfPR_`@=u?i!k4ihCE$E)J+hB}B=caFL zu~?i#HoHbx0>ydUwu`e%w>7QZWmC1(>o zC;CO@wOY&{pQU;}$FU8K=px3W&IUohNrS!E8LN1Fb+gzXsB`d(v;TXDXXEFTan?rI zAdyYvCCvpqxd+b6( zf*W_=%CS#UxFdn^t4Pi2ussU5K)~@{t&x9gcg*_%*;#NPsTjmNcb4KuXXKk(OauN4 zNxE>PSq?s8l~&@K5g?+Z?#(Qk{pj%13BIfA$mXJy2UA>Bmc-W;E>$z#jL2^LF`t-7 z*e$Gh%8cQqZ#bdOSfxVta|%;>O}E17AaO3gXYz;_Pl-iRiro@5(sfKVZB%oEImF*# z%R94}d@n+2hOi-PFz;)wU|{kg9%VIglfJ%qZfLdG6baqkY`6cBLs1T|(eHw{YP!#iEcZJWVGqOB-| zrq~4vbPCft~UK)PoVIKTAR*QE1m;$~$uQWvhIGHTe1ek^V z0&86262Oy9iv2AJh9Z&#-l~!Wp0c&(5gU^*yeSAim$vA`p`LKSgic9Kf48N4h^8Eo z;1-o-trkSZr9*Tr!3J9l9xPqA>ncgDOYLG(RwF^hf&`~%me)9GKWu+d^v~Zv zU(1I)RwRB-!RYJC$^RKNvOgf&GMG%;Fzf)z&y>=WLY+%D7>MWDnAEJcP9!l;h01<6 zRky6>uR@agSFzx|`yefbe~y>Ddv<&0Ir^jf+qYCdAB5-QBa#7KzR=?iR0Xs30nBc_ zy2s8a6*2Rve^?7JuI3 z4*gtS9ERyOn*2w|ch$}b9Y6T2j8IqIw6GfVLqpnKFsMGq2(fdx7oFs8Pn$47N8_?I ztk!~#h7Lc*eD>VJZY|jNGAh#Ra8b?3P+IX$q0BPO_Vg&FNisNOcB}t0QaMv$O#nX! z15$MC?cD4hHRj$xR%TSS3xRzdy6$>KezZIWIeLHDnArFO>def#jQAU?d2zghKa4Fu z_(9^fE}XJD2=C_E73kCAc_dXDg-b_dOEszQjm2Zc(r@7Oqo-aNye7ToiuT}s_y?oY zB{4Tw(#Z%(%Nx0zkkaQKS(lygNWed;7&DPnFd#9I<+M;T*F&`T^M+Kd_InzSbowcr zE|DS${ZqNu^=*#`MEgN-K)v3fd{ApBSu?g$#ufbwwYrA3oTvifv$0PY$aopFBHWOa zEI`DH8B=X?EQc%JWxRiEEHdpJR`ED&6h6EehjwyQ>Jf1DEkO)JUph$0-uaP#A!(x< zdb;NEnW{bcTiwmyoEK=mu^Z?;PvU%PP1}-=!*HlZNjd#^#nBG=ma4)VrWjT5IimN6 zjp6(z!)(AWuL{VnK%3y7L4i+`y}N$BS9kU9bCx$_3NcA;3PY3!9QFrRPLCrOu5&FJ zO-0OTo++Yd>y=Ck5BGC(bKz^a6ZBE~xMU>pg^-zwapZ^a4wLnV0 z#r3QHi1vvF^?jVDX?31Rld_Gm!lhEuDW0~FORu?^n=W5TO}3Cm(FcnJ@vc-Op3Yu| zw8uc?TEYue*%uu|mUc%LMFlxHV$8VG<4BCPl8~G$K06hgDT#Df3WiY$$_Cu{g0oA$l0@YqB5bI*M*vuCV`tAFom78kj+)pF{OqH0>l zYjucTKO*Gap6bNzZl$?DB-J$%@bu9)7{C%APh5^)Xiw@v7enMYuO@FO81$A?B2bbU3(4)iSH#4n@F}R z97Mh!kjCZ3+SzOtF)~8@)q8lvFepSjS9Pk^ zw^69yzCH%MK89Nk^UkX;^2{?&i!;BAfB*4ayxs2Awk6k`MKFk8&NmuE!sRD_PeoGSP6hq&vPck$HLWAp^n9XlknP{E;1S{9c2ijz<; z4*FQA>-iY+_(_(aQ{Cd80)qr<-cF7l+d)&Ph-Ir*QSGvV&&QYqB18RMG#uE@YcD>_ zb5B0Zo&RwwkGy$+Hf0c1*%B~I^)&s7L}bvMZlq^qVrFZ+t>eEGlo2(C2c$k883YaN zcC?-McJYKfp~?3mj0pj*b~guAR^9 z+%b+FZ^hfyM2`eoo|Es2jGy7@r=Q}EFe)%X$BiF-N2%P2!~#MiZ_n9F$D%i79$L`pJdx_p63~<)8h}_#jUqJ%Fa%&_8JMq zD5>p^L(;fN#7lo?JDoie9ID;mq|K_X>f!1H(dUsN=`$6qM#b?ZgS1ceov3v{ZSSnU zOQ0K^G-2iKYhvHqs_&lWktbhd%kJY0j0VKXkI*Cf)G`o5L2VxC;%ocPHqbOI1OhKU z(FJpy1BW6DQl8N)#6d=s(lu4~WF6I^V*;VTnD)*$wKQKnI~GtYPXbCGBlz51oH;7~ zW!Elt>_5ht!4L^)$)qCoqJIqkz#vDD?BUJ#_S0s{q%_V)SC1cGa|7*zVr`mt@!~u0 zvFB(fF*%jwN4hxPC&X1WR$C^m;|mDsdGVR1j7ruDv7cu>$cxTMw0R9Ar#XqYeS(!6V#|X{&r|^D$f0spg^<<;j+}9ejgsTyTGb@A+R-v7 zwowI0N>>y)^mLryoyYIz{->Ve)g7mZt6R_I3koHWNv6DZHnllHPQLpL&%g2x2by|O zj|XaOAnHV!RYf$oqJ!_ z{P;6Z{+fGlyOoDt+CxXkfJuTzwMhy_3rWct6lbRqW7RzEhd^-(@%JZB(i$nCdSO1v z;yeAqM}lIr6VozD_PcR=AuctAM61+i)Q{CwOo1ziyI1jsXp<(tZfe55Ph59O5TT%c zh;JPo75~}W%Hi#=^Wt;Q2CB{lj*HlMD}yJF(kKBIz9BsBKH3`&vHdmGKacU?owsw(W3O_kYZ$+j9}FP(stLP|5^ka$tkD>Xi1gkzZHnwrm$-v-5F`-cc5XOkTl(Z;pe;UYcNA?1yr zwjNOv028k@k_>nTI_c=_)9T|Eo;=Wel&!D5z|&7X$>R^+#V>#HFk4$aVsE1S@6$rt zRA%?Sla$VwMRjojg@xtRR1}kH?qTn)eVkD5c$>7-&X*lZDH5k&%H=h&v=2qd$jXy8 z7m#Lg(>0`K+QdHD;>jwhr7|yGyuKY*axB47>76(+!d3a0hfZ_iR4aoqMa-R1Ozc1# z$4;DJ$dXBUPQv(xJSsr5Vj1h@O!o*_Vkn%mo;l`2JofHcEm%;7M;YsIz(VefWz^?- zIk97_kOwP{;yJ9Uut^ZOkH*1KoS8)=+X8gCecF0xYuHO){~&Jl@U;vi^_*c%Wezb0 z8!5?2#F+yOs*P@u;t8{n@8u{53{2^k@8vd zC`&QW*VxK{FN8BKi=YV^vBwuM zXU%LP2cKZ;*)ZYwZ0hFCqIB#Ouf2N+Z%jHB1zC)G`WO)7t_HVpw2#(aFQ!-*#nrV` z*VZw!x`cS6a!3J!W1}*FK4jNXWuUDYOq(w{?y`wNkhW#cX4%?W@_Yw*;>A5QceTkN zp3cmi2*+F9B4aByaaP8W4jOtwxN@qPvve8`PY)(nDfQD!Ns9Edcjqn|JvIuslHSl5 zBc4G9x;yFY9TGVXisR3sB0o)Y7(-)97D61n;yn6BFv+!QYio#eA7{sjF3qq-o!NO~ z5EjRqm{G>;nWgy8>|jqrk2shM9Nw1zDj0NRmQqz!$*cv-s7emtmH8Y#vFJQq$83 zG#+GcbCB%HI?D4*47asw6PKms`J`IPtuzJ8P6+q;CFv%HsxjZ`*E8 zwvOQ{t)aTCn5sD|Sd<$?h5#9{e%kwlH-@~#WzVD}afoAWqY?syQsG&BfezhJ6Q4f5dAiByjK#W6i3jsva6lKQaJA0CT zV*xeOibzT{V~NjT!G;agI$C-Ag?BmC6T{5S8%a3(EZa_v5{^lsP|3#7%#QtixT>d- zmoUtk!v|^gCy`T8Bfdu3b@(tX!v?amvoSL!zS*z69>x(KqOI30G9Do)yrpth4X)u3 zF`3!q=H-xLa?|aWwrBxQ45`KS%qUI7=dntllPHmbhrtn%lQWB~6o>XKoKFJ47-I;} z@F2bY9!$w4VrR05ONb@0bOsCRr&EzQz|Ob#(JayLMX{-j;+^7uv+5QwGjogsZ@tP} zyN+_=WIJOb*Su5{y^Y6c@>)e-E6BCR;7CXzBR59^#WCCxJq5!O=$T?kEvluqIE6^i zPF6+|X3@hwcZlS?GODV}shF{trKNH74Eag2hUj%m-w9WU7{icQ$%e(b_(w-M_U7xH z_5`)bjhKW~GF(acyu)|`MqeXR;ixkg&7(TY$gy|ckzg|{X)`E^ z9pd28Q}lZR5{jvb3>7qZF*-6R&PviAZyJ?&!)`TW7>#m66$F1;wK(@4!o3HZs1p)Y zlb=auMkg-As%F6X1}m?YEXrbR3~hP98o%_oxL+f{P5x5T}owrnP54 z0tpkz;zV*Y)1~Z8GU6mK>*=OP0>p@#of;X#=925CXNX~mBO(D*qk1vz$0&w@Ansuc zGcH+zW6u`$^#!ybRi#*C5=cmZwgcNa)}$h{L{eNajI_7V(%Ow%WR#GRLyp$oEOMP@ z2Ku5eK{q92kYViO(1}LeUWsHTAOqiQjUzeDLGO|69PgGZSsfC@#$oI}#r_lR^!E)A zj7=q{sDSLWRI;VbNroZLwDx0+mmp~F94cfWn8E=q5KWNax2L;HoQzM}`azA28e^w3 z1()<^Tv7_@Vo2jW`LNuB+_y+ zNQ{XmB{h|pU=Ig(@8H0x4o3W9NGuLqBKwR?2mT%jWV>29ed;ugVgNFy&7?db!k7d# z5rY|fLMd}*q|zbI%M+8&v{|*J`Fa^tTSJ+WDHfuTo$RHt@eEz%$PHsl5DZnP8p-E2iPhBUqkmGzQJL}3|8W^^2JA_k>YP= z>lU#?ErSdXy9suRuI6QvlT}D&vYFA-+j-`#z4VF?PmM z$r0NX8<$A3@CsL4fTrCq@SClt>Gc?dt5h*_o&;Y`ixv!q&GBT!jB>iEU4j=Yx{as@?t82+~Imyb( zAuGv>r>~u}o&AjZ%_L<=;FOu9-G%9tfV88rfzyqhANpc?gF)Rf@zUGbiPxSha&(a_ zWn{z~wYw$9n!D&}_Yg@;CATzBNPHIA&S7@G@Cw_Hwd0N0apkAuJ^da>+x-$i*ojMw z$2{1?QStNU!~~4KE*cw}==a-+PlzMNKS0x&CR#dr88wQZ&&${3n3W}UPYBZ7CS1tt z!_(DFw*=H>xndKt6#tW8*K>v=Z6n$Zfbdv=Q3)iIipqpnI!R41;qK|6xqCqPTL7y| z|rEi!C?#1)6q!7*=BmiVuiPhoU$|I|1=!_PSGc~w&E)6_v0H4k&shB zmhiOfWE;au-#YwcRn1`5%xM%Ps5{(a7=_PfT8B7vrc?MtNCt3(kmPmdW#Mn!$9sFu zGAbid-OcrS#xNxcH^|Q=TXY61~8G2ajA#Z}Z#ucSbDaHi6UL=XF4dxM?AWj*6N z?s|p8Tk=ZDm3~jpaFGz`u%d^;WmTQBMHWd$H>ZUgMmLnyPW{AC0iodsKlnl9-+p!* zX`+Z?pF}8O{3C<(^z=j@PS(~kUPO>iHz%Z%krJ=%q&k7Iffky3)%{_Cj4%}pxnw}c zo5KV~hv@0;XCx?2JRt@{z=Ov#O2FhGDKQq4f0W^oQN{x5c6NpYiSbyqt;3|KkzP?& zA@$-cVw2Kv8r-z?33-?V^@8J=L>Gy6Ar}3;j0B9@%jQ$#j0_LB@d|M@+2Tl%4o|de zouthybxYu(-fN}q3>j5ml$JqCf*otbFZp`u==W%M2tOJ!2#j$o`}*HW+sv z(yKOwQM=^Dk(d-Kvgu?kj2si4_Tf>XV>YnX1eL_$uFNlqs-&56w@>FN%j zr;pZdw*+1yhxAn9EHY5TGT0P3lIv=+7>(ZHeLo~1G}wqwO4b5TtGeSYdOh0HL|d;% z`X;(2KO8iWlvhBS!>pB~Zr2BfIyuuhf=va2%J_)RXv=a(2IQLkcvMhfv|tlQ?Mg|K zpd>5yHf%-Ar@Br+ITXlCCx*(t4}kc5Zo9d_!dA;8E$AHCgPA^mB%lH;+6UZ_WP+<FiLwp&t^+sc|a=Px%I;-%YDp!siQUt5}SQ+1fksEE;c);OiG&**B(Iu3Wd~gIqb; z2#t~e(L--fFMUF^jmnp&rje59&^9tNh#Urm!}ThgA-(EMmB2Sa+8UI=c~AmGt8m4E zAx4EPT{MAtsr0>4WGp>#+EIv7db+ zCv}%kWNfmDj3r=KT-g-#(kuGbHQ*;+ar2Y};l}}Om6Uqtx7pW6LwjFzHIe)=iM~4} zV6%+&($%Z(zDm6`J+=^^>>|Y}++GH?+7D!SP|k4&iB-#}ozid8=c*KAV2HNXZakAG zHN>_j<>cXVs4*DA@9yGk*Ra%Ac($}BvoIBhTqmqJbY~a+5`Y>lHe%xwi8cCh4~5aNh4L&Nqbf?%9C5V2emt%pBCT${`aE+;ZJ`2BXKn0^NJ-Mqh82(u`Wwd z2Jw9Y)1Co4-(Kb9CuE`=uzE48GN#d27KnV*fLDe|-KJKCL0b-~oWJCo9EGWes};$V zuj;v{u#}<<*oDxpr|gyX0&O{cdZju$Y{bRb2bMO%ycW&QI<-hM03zDXE5XE~-w^wyO3=U*0-iC#iJwngXe(df-`m zc22cN4o4q=jwYXjrb)M3PNX~q|`JJ1o?BB<((_IXU zjW9cFnOEWAtp^_9aPGDI_v>cR``UBtc8fE!q)=E{L2}<~JpAx)IO(xrRL^5vSZ}$u z+Rad1Q)~Z(9*je+r8g(#G4s+(S(4Dh_Ge$^z19JOQs0k~(ia(%$K(Vi_fJ$57KdunbbYr4yNtZEuvD!Z!pAXdCx(nTiS{83oyKPL-RT*>YxO|jtP``uf zxo7o^mzvrzo3Pt#nm#JOq=LfG_>8qWU3&?$=&RCiwLC0paxS>AjxPwp2EgET?jW$!U}8tm<=)d&spl->uG3{iFIuf{O$(|f>A*Q| ztolG?bzvW9x;*)O<>$}ooRU*iFT&C{>KVi-Q2nRI$oS8RylO+oDI7sArk>5!_`h}_ zTE}R)qCfIEkIDKrfvIC~g10Cr?h+iolQ_A)3hJ8Y^-()C2~j;iU#F?%ep;Ll2!HaE za|*5FtBG*XO6shQTv5})6A$dBfBd+P-v%;JEe;B2uV!g!ine2=xFTVAVY+s|%GRSD z_>u~kw{#tKNj`=HVhSx50{x8~-nNB99i!UDF`s2*s+lLdGnblqHN{A|Ic4jno^AIPv&|6)=R zp9FUywG3QrK=iJnnuV5Qa!9)?A?K=~P%Q~mGsG%jjP5Y1@~HoH=+L1U!e`J}HFE zMMm9px3|#L)D-=+bV@LIe!0ikUwdBueP|t)L2?r$zlz>ky302FY)bl7>5NKB0@T+A~(YzSsiyjQ> z_}nnQEK)uns8t&0`JDW%R+d^`r|a);1u+KErMBb0b$lwQC8ug7#_x(dewm={GP-^H zcI}6neLVM32gEsDlq6CarpaxUk2F@Bk&WX0$FwDQi5V1?6_e@+;2lv9UQf>RUyEpc zRhNC%3Q7LNYE~}FV4$&QJSbFhkpIT@VB#86W%av61e3!_QQaaI&8ed@Hw6M7`ql17 zp8ykmeeRDz#YFY{Q5%nN{^m&3$iYWP0>)+3RCSOx~9&t+gZ!cf9?%Woa zMsZas&WH!ksM?4n+K*paT-bl|QHbii{1y-S!D*iyimYonCEu4?RyuxXn9!Lix;9A< zqo47^>d6-M!(x%(&xCqL8wm#0j_1m#gscX!HbyK#gSMf8-)zJbGGh))aA=SdP1@T> z1-f>Akr90sZM@$n+Y&i2m3ydzpU~c4m{&Xa+xZHEDVFqta!T?N348h&@t-eG5oc3E z8l`pfSTK7Ab%n_UeI5oppJB>a#z;8EMNxGvrSSo}d!ifK{8m~#SsvPf-%b|43n*JL zMISybB(FK6lKD01gxy1osP*L+C8STsBi>K%!?i*80lE+&6tIy~zmO%fatQYJG4!FY zH~Ey9tc%+9FR1qi`G_wV&b@YG$DRY^&sfRw+0~SnS5Q$_N^Y`^G0y<*(eqoKUJTIQ zXI4Cq<@0AzTU9}Mg|xS#oJ>T9*Ghi1Hb&G31s{rzFLIdsw{#G4d%DPpN7Sv#>0_RF zl))G@Cs9x}g9YKZmq`DWS5lUr zj@8#m$6!F)EFvMNf|+v{FsoK^k4nlVJ%$kmhkXP;!aS>8LtPc~Svt3#s!FkOl~s~A z4SS%MPPhMK{MU!WWJ#uC-f9+2OJMNKA=-u~aT@WPrr2b13QMW1pU2ASISh3*a;glj4Uv?=A;=0+nzlFf0%{)FGgmjziBo@zN)q)vRRaJ?cU0BBY==v>W z@t+A52wEIYs%9-F$IwR0fO@Cgr?02l5Y1M*j&H6np!eu$+J{E9RRtFhq;CyY5;Dt~ zJ$D*;PBWf?A$%V-IL4u5Y>i8%eA+CstOIlns&@#hY!msy1bp$rbHB~EFE6BZ+aAvJ zj{KGr6A}o9WNa4I$he-v^lGv7Rn-(F`so=EF0OXA739oZOTBZD=HBQ#xxa`|0ii}~ z%`x$mFT09Oiz~^=%_l!Um#j1=4y)Q@>f%Bq6dcRaBG~l9!h!?ae34X;rb6 z7+&>moB|fFzk+!saj0l;Vz(i+gOAl}!)j4GN0~6Ghy4`+h!!o70<`nT(=Lb_w4JJy z@<};r%UhK`VH4DA5GL*rMf1Kt*i^fHPNbbva{1pHn?TjV4Xl}0L2{fmn)kxY9|1L^ zku&Q`u9^{I+v|JjS8|YmFfpx~6`L=mHX}l8dMOK5u4PGm2}xG9-LDK>$s65OFDj48 z69>_|UaGC*@=%|1bsBH0oUh42?Z_m*&*xSZkaNb%J-6GF919Nja^$TidFrEI=*A$f^07`66DAg%gFWE|bdLG_<%rF5$} zWLu0Ki&^S*u7AdBtm-=6o{8VlUCGY3XhIHZN2>{WobMvl*756(rzu%QvnyFhSr^Je zVdA>#+zaxl9nyTmot$duB(``qbF1>TS1KqS|1u(K>{H0d%3;pB>$!I0VycSsNOw9! zj#gZG^{l$=5*AG_prEjb`X#H_xN()}u2aJKsGQC_1|=iu5BVKEqKvwg?CGmmb@>f^ z=aw~8sB*{qUWbnNLG;I3G?$I**RgElwfx~tOUVg@P%UOS=1exXKl$F+V>E=}| zsZAziieL;|h1Y!1XQRHV5dUGeQ9So@@x|F>=a-2cx>S75bkZzALIxp@rL$PRayheW zipW)Zk&~&tD(V8NFco674JI48b1&nDOBPX5RG@K|e94>aFh_0rgfCEbP5BD(CFlK1 z6cfHp^F1n2xfc0jve>ZMtmD2Z>i1N2)cK*IP7c2D1dqP5jfQ@;0g?*hCKoJ)jQh4| z+3#C=|7e$z&l))tYUmrHR)6*VuO9cu=hLFlcATF`SMnI|1UX7< zN*0SR{|0NS6C^Z=?glwIc%8zf-q(4P+GC9&HpX_Y?28IY*RAp7R4roTr5jndYA%H- zv51x{=|@jd(p3F3u2&l8k>lzUo07wV^;fZ?Hg&x3)i@ZJliK~(7NNgkKU=pRq}}6J z^EcyZB6}%wvP36zVdB{P`$zEx6VBXeEM2jbIn&E2EKu=NJ~^og(N{re^)ykn_8VNg zC=ZLo4pE((awUyZM#rBT!{@FzUWbWt#>eKltV$oFV^7mHrBCB2pB362!kzmMlV3dx z>;7NyqX*t#@7{eJI@L_S_u{%csGtJE_`1uuBIO`|`?LFbbIW#i@7~Rk7LOQnD_OOR zSvt3l>dFd|EPgCWIpm3>9`kqz+S4g5DW8RSON#o*7F zUQ1^-tuIV!$#iPei`a8BDW6tH zc~K6rz5xb2UhVxpj^s=#>gO}Ps+7`#G-ASIxQBhjWS28z=4|bS-FZ$62D_8o> z4?!77F-ani+L_eVR8v`!iNg?Jc*u)C7$PROmijyy$m!)wudSBgyOgZhVcPq=m_&}1 zbLUg&u#!J}HnnBNWG7qk^>pA4it>w5NGYmg=B(LNmlaZ&6_0OVF#4_^shN67x!IXV zbxAJ%j-wnr+o#p|Lm_PpS~93xTtRHZyZrjjM|pYM9vWk&bImn#v79=K ztC%~jl#=2iin46vu zBZu0WLXwR^?R}LY;whRjhx*z|N=r&8tEix~FbA8riLN07vB~*NU$ls6B}EjMmQh(* zMNVP_&p;<`pMkW}8O)qHgDTOz{0s-)zClLDL%i}p@hN&` z%bd+M*Dex~g(*xNV)xtoI6J7`Lv(T3KOLVB3??Vl*WJL{q!AAF#W1gMgf|~~mo`N{ z#d#-Ym69Jf!k!oI;lUTSvhTnV8ru5t34th?zn)dIis{+%G*3VI2B+*ZS+t}GZ*K#g z{SH=q?faCCZsD=p@8^yE{W#`rW?7ksGyBid=No4*`g4R|JV=+QcSYt@mDBs`&w1eG zqx4zISh1>tk%L<}=C+VtP(e1Wy!p(7Jn_nQ_8mG(Q|AyLw|K)~v6C}xG1JE0<)3eT zly|qi$L<41wL1=ql)4IQsVXTXCntl_y6IF^6q6Ei)8`(>A67x1m4dpZ%$`;*J}95e zWE-QMecFrGvr4KdOt)yyv8I*QQ#nai~lOkiDj_0S9^!65{SAhRylVyv#atcEUTfeJd<$CLALL2C7=RB zt#zLq+M^H&Wvu!7*H~cO!{hfpz%#FJW1rM1XpYC?Zlib9PF9)lhuJfz5I5@64$r@FM5tdtl61KoJS4(T6hM{yzfg}Id1)=-q0jKwE@V?_Lh zxYUHqBC4m)Vp?UHl%0xcbVPiLPm_lVRLr?`tejIvSy>51g$20iro|m0y=F1X=T2i< zT^%lyn_yfXW!XuDyo2-%jbV+ABd=m6_0#L9D$OP(#>j~DoqErp7!+IuBD?8Q-*VxV zRnw?T^Rj>2K`HyonV-^QFqEpjVAC%>i9&g4wG{mrQi>ftO zv931E-j^QXi5K2t`+Gatf4WOsc@|eNlLfPCm@#(=#ql0I=2VIcW&GJZG;|J&8Mly_ zUc`(=3#iffUpDb!Uvy(fTP$h$WfbSQaOIU#Q&S^4lZZjarh7!K&@+=Ral`cKGTs$W z&U7$3;1+He)Ohlz#knP;JNF%;uzoSQp5456#)s7$eIJW@`1gx=`~A0p77*5~=aSq( zUfp?8d-+EDKsaOI~QQYEuoH0tX?KtD?1cy60Ed=D_`cN(9NSyag{$x=H_x#6ew4Zw)ih6FY zglTiivATP4wfmOc}dExV(rFF zOe@YJB_)}%+A5r5{hVp*#;2CUO6}~a1x%BH>F+%D2?N4(YUWju=4s*Jz6J*H(%v*i z{-Whng^%&x(RPw*S8(+ut8gXQak*U7&6|s(>jVd-PR^_fW-pnI#E2y36p>d@LP4sP zQPGQ_YdR~|%)u3Erm3lm!L+&DaMfb6e7&5N-;R=HTy@2Aa#EeRQVN*AVG|2;q2b_G z&JHC|zv6l>Un9Y)C6a;3!Z_4IQ@aGX;ygoMpEyb~}A^fIPO3HJwyBkHPvsiK2Y6`m96pK@z zL85y1mPRe>j3ky^2Uh6CVRLp`0aw*NnJ!wj5}d zz-IiNz2N|3J}ae5ui?h)Hc*plBvy1Ld-`G)x<)v9qJb_?ki?>yEL&JlL1r3Rd3n^- zRblHmOJi?{wDLOYs*6cah!sCqAilhmytn`Zt)29ZsCR9Kux3;;uR;RCmWhBcB5qXz zo$7^b-nfSB)CA!?$<)r9N6Nri4m9^;usWz+wu#GD%q20_iYq;voQzn8Pw(Ts1D_=z zRCnL4B;+h*^M+K8J$MJNoKiua_&JZ8p7vIHMlBlGSby0nYKzlJic2DQ=4__LhiGeP zq{o}eWqn%$;!_Y4w*(!g48w%4C1mYSiX8KwWWEu zgjc3z<&YE8&+aV;Xt}7CjH#tdo?D+r-`SJ6Bf^<%BQy$+Qh|;kxq#^_FX56| z#abUECM99@ws5+8l%$e5%%4_Der^^Hg9J<>~0ywo>s<^%dTWmribH)nusl)!O~^Rs4C1NJv)oC z!fcG{CGcG%GPbIOd!%D>x6s);q%9Lw?-f+5n&M05vAC{;!jf_=aP>wUq)H#!M_br^ zvY)t=QkGnD8Ovto5f_s{PDLf9X>klUo~0}7plbP5T(!EM!h8ur(~2Z06n!)g(A?aG zExU%5t5;KzpDElhnabK~;mLh8wDm@L@~2dbb4x~5ST3dsmk4y_ie)TYJe%smbYd=A zG9<(@v4D9C7PCw`dD+sXRA(3o`@I}~?ic+0?q9R(cr)9c_!)oyPe0}t55L0U7K!GS z5stNE@O87}>AU&qtxs}%)Imm8CU&Ef+BH`(C#i!spSp`*{py!IyvxjzE0>DVuxWR_ z)U$qRdBqs_J;Xo!@LzdwOApC4GbxV^iUL8b81wdBFLCSN{Ug74=@bb?<)kMj;>?`J zf`xVX4?V>lxBilQUO0-Wa5}T9G8sAWDv#WA8!v1>!O?Bca{JHznZNtj+jwHjN&FxC zETPCD97pYfY1ob*_}*{`v3u;eR~B zzL8Yw>Ps;NtduRghE)}?>+zrQAHTeVr}sywU$uae6bHr++YRm0!eEjCECE~>q~@h# zwq&vNmTxoN{R(%9jDPW~+j+Jjm#e<9oDA)n>UkkEo{nQY`LloGSHIrQkh4?*uzV5> z(HEzxicQo_&2*{n;joSJsGQRb0UOZ}L_L_MVCB3(gBQ0Ls(x=gIfePeThy+GpNj;)a8S#7?XmGBBqWfT zkxZO1z+nFXeXR{be8Qv@6q4kKBQ-mhoP;r2P6$~SXPi{Ngym&cj=c32hgy2ISFS`i zg@~4`L&t>(huV4T-sd>3mJy8~(;((njZ39J=J*WC>lcepUBbdy)nq$ku_U;#C4(>Q zA){zI3)XF7)pRQsi^{cH=3(tlgxaCp=FFpZ_7YaDT+ICXaxxNPrs~iKLIp!+V$#c4uvqNX z@)azaqn@!EPZj?Yn_{5*(Cggww?E{E_wB@5Tti`+6Jscd%~ih3wD~XqK)lxXKO}NLwH@NqwKjFTYPhl&mqbfHAyWzw9tqNq5nS1p&n9Uv@zwcIl z`O9DO=%HjbePac=(pY;^HEXZC6!Y6Z=7)d(kNo4W9^lpELd?~=>CXyPSE*N0sEhV9 zYIoG};~IpB8&jFSemygVhrRgkf6w3lar+-K0U^KtIJ?PvV* znX_cfnMb{FWt&taZT@w9qk4pw?)w@4^3VUwKmX__-2ZMj1V%Xi+|T&&FYjY_;}Az) z`nmY}f8bwkf1Dks28c_{WBP)nr*@Ea7zGsvC(spzd<;1N?s00kseMRZl<{}NPK1jhDJi2``CBZMDdIY;tf`usTpKBLo^*ZN{=x|#_K|g>|MP5>!0(p zyPxC8h?8k^>L_seX+8Wl@13<$Sig#OYu2z~X+1gViQ0{(zFkl7i+}qOFC6jEwc}xa z^rL^~pMLyr-0_y%9;2fp1Z`H5tO+D0 z6^T-qaHJKne8ozp6{cadn{i37m@L7U_Dq`?V71;@)mK~luDs93LIn+}lodMZ>T1?V z%oIqQ&GtAPj(EbO{X$}_n8lz*j1Dnk*(5q0B&BCFbM9hh6sBTyI7my3C)ujxC3WfD z&!dmM#i>Crq26P>{pvd$=?iGj*!YKgIrQe!92|+xst)@7#5rP!G31h+oi2tULSFf7 z3Dy^p>j)8uPo^N=h7|p|Ks_BBk)SX-bMGe-JA61^D}lL?f}9jWW+Nrl^H{cc0h#tOf(a=UI4qb|7kfK7 zxb1D;*we^}r-Ng=x3lMT7oPDQa1}Z6j`|oF^ON9o5pR+PPgLz9gDp`A_>5(&SiY1M z^%;yd9cK6OHoE$|IeoGPe|#Eg37Hh+=Hc+Rar8(7ZbvptmQN$0>nM901~FPCS#wynZXL_#){<_w6C9DiFRzvb zOXjnGqJf~;*Eq`7tYzb(a$JU1UU=vYT876kjRn+(q=X`$#J21B zFN5^I$>E}E#X45cv2*H`S2@@vzS9uG-Fa49DyE*vub(rYRU6i`WJWnDw&-*D9}4AC z#3xu1CCC)MQdw0+c~KrIvC(9s#meA`9c?Y5`5OhTO|mcL0-}cw!GDVS$lTMC_L!5u&G*gg;&H0Cox&DXnuDb zB0IHVV91$8PPU1@lgDXl3t+Wd@EqF7{((da3gg74i!ToZIQ90E?CF&NQe-eB+`}&1 zC0@xQ;G_Nc9uA&5MQi&MOV-xi&{0si}#?Bs!^?v4FWX#l*#0h)akk zEvb;)tQfkRPt)5yq{&cwhD|y5iwtT4+bRKYeqJV4-w-3CeRw=07?Lu{&5p-nvQvTviqA!5qvRTu@g!M^?#R!m+@nX%Asp)B;JZf%7gUoUlR$EM z9*O>D4jybKC>+7%O2Oew5FR#%1@%=V#aW3FK9?n&b@a?0p1%K=JiV(EvuhS>FT0%0 zmo1_w*&%fvf9_M%Ud0cJTWEEb3PfyiBoyWn*Sn8hhexo84H#`{;!K;D*o;(?9dc4& zgtntQc;%f#bPe{(_g(BbaEh*A4p|vV80@iB)Xrh$vZZ9lihoEm5L_t)bjn0tQ&4H)?gTMXZ5BcHW{|mQ1cL0j!u(&>t7I$(%s4ah zC@d+Xw4{_$r<;9m?58CXKy4wern5pr9)`pqSS%8RAAgM}AAEy`QE?WkJS~_LqM^`R7Ocj38k50{2NYktfhxhQE+vp_As+iDZ0Arr`}QXNqbF#5$R*K z6z_dGq>Q1?M)n^$hP8G*mo6xlU@saRsfTf`F^Od66;oPXK~+H>u z#C8ebPKz^=0UYd=Ks$l5Ih$FsY#r-n77^;)&yM5W;)o>hRDohz9z|spl$92d8#~C6 z9Y<+XL9DufUo9E(;S&oJ4z{!Z&6jy|M*{-^t;W$h$)C{J7(TC;QEC5|79wZGVWR!6 z`f#eATkHv>Nj`a2+~60BQnl!q%!k%C1DWN)I#8ASB`Tf8ziB z&EN3DpWee8EhZ}G%%UVklE;#nmX*uE@t63;-~WWij}8kNh+!-ki^uCB#;}luIo;g% zZ-2+X{p>joTJuPk>v)D`JS)A|uCC(?31yG$iIgtBj7wI|!u{6$JoDCZd=gX`!a;hD zyu-u4_y@Ew^N;aVuf3U@E}KJTd8ziSUr~CTD)k(c|1v7BA-UD_hGzM$ z9yd|CJ@J|Fx6zNBDqJ8UKGT(3LXqY(ODIX`Ve9jIX^)ZeBwBU&MCH6N+k7Cl4qj{AA-SM*=S!xX29O-LiRNZKmgq*{XE*1d;0-q(-M=)@5x zeJmBQ$_Sm{D3jZ&zD0SOx?uE?EG<$7m%bQGz2aQoop>g}CXSR7l^?{^ZCKp+Hn2`&llgFAz} zyAN)IOK^ABK?e8W9)i0QTn2Y{JA8Y;`#sS65drsbBqfhO_I*!^@_% z&(CW@YsmE*78w^mr+MR18uNgb%+WA$#oyUeY+NkKZ+M^c(z@j1?_AJot+YRUj)MD1 zLnlkl$A&<%o3XFTp$+vZV``kdprNmXmT>y3+fq?QW#%Zks?1q*0$kHLh+8s!?iYR5 z#4C}RwPY?68d3I(bo6w3i!fyODq(bn-E3{~miT1399Xz@4sn8<)uM03t*L3BFqV;B zyQ)_5D;NkA= zLGw-5A{9JkM*Ck z+Ccead|L};b~NgA@*n_Nd)dN1XqPMpPoeE&lFwaVb zeu4t4Sf+oV7CF$b;|`INB_-j5?3Jo9lC=lAICC&hw?+%g_+K7+gmRx?;I3jFbp#W6 zrg=S0a95a?>O^>ds+h)bK%4}!-tX-l=h;qwGg*|7#u84_mB@#SZz@Juuu>+E6HNWaO$iVxfyCtlNh~Ol}+^eYs>JZ$39^?ab~C zP}n5iaYDs6nt*p|-4$%rxzq-iKe8-2hrCYY#GluRUqT^#r=O?*trNIHdxbd$6Q%U= za4QtX-5)>z=P-JN0wa^9<7Mw3VwIxsVsGw1FefWyMP_FE9;x}sleDP)ar-xA7H$r$ zbEGW`^Ydcbl4$l!s`jU1-wqy0RQiXM~GG9))9exdz0%1+Iz?VMUc`g3zO{C-o&JvLsDED`NGe;YU~z>@(_o zwQO1whNtAt`yC%}B7hWvhY4w_%G`d1P%*AxccNh;ToYGUcw71Tt!Sp<-z?v&L&;kd zDSSSF=nHpO8olCL(H{l7x^3$=S>n1{w^UrOc?NkKRy&`f+d9{E&ottQcvUV{taLp+ z(TZ{DKYdcFc3*b7bPIgZuqP)EFOTdpjl9<~^F&fD#Wi}dmu0;f2k*)dHQ$Un@?AW8 z_>9y?ea%@>ZSMV9l$HgIV~PI>s!7d+ysCDNeJHk-Xq*q_B_Om@Xt6;ByU~yj;y8U$ z`&ROuO3BmIC_K6G(P1!LyL$+SF0DEM&y1l^EP_>{tM6{;u(t= zjc7be)RGSz;G*a5=W(Lkev5qEd_|wN`X`Kg4QpjmRH)}IZG51A4^;@yhJ8_=nKIWo z!iTp=cfEFlDWi6h+Mc?J4QL?T4^9Up#dc5&; zdN9l|W0Dx@H|&wKvyBfC;DFL&6vDk~hOPZ`CC+MUk94Xq0^IQG-@%Q~ zMNdDDIUGVGQ-`F0^&dGM*Eo5_!03hk^}R|2^H20+FZcB2J~kakvP5pr)=^H8p=9#k zw&Mb@3nY0^3ofj_(H)UZ?oCqDXeRP;a{l10iOJ{|K|_O%Rx6sV!XF2T-J_MJ=p@Se zk@;r)l$88wy>QX;)P*)@LEx^fm;afv#*R3A4o$9fSL>Th@ajgBcpz12HPzDT^GArW z)tJj-}(XtN|J)QObII97L1gT$zf1)(*>cr@ax8h!(h^TItb&V zPHXi$ifW1e`IU+BX0nqjW;s@~1m~Z^UlH8$rLY9X!dK8VraG2I21)4_W$e&=G6IZ& z`Wp?$SamFi6r8fr;xfKjkCLu8ap#<}VW9prOHo^b zPV80)S7_WG7{hE^Aq@g-g>#_e6*lxtRKV|;e)uYhj$6Q?J=i<5m*HwcMfe=bolgl< z+SIJmxU}*LJ1Tr6R~t4obt`eEsw%ep%Q08G)EN-i)02>-qM()#vC1vovFP8X&yHBr zI|p7PZxh~GZOc7E+wM1A@WXrj2r)5>=PYYJXAS-Bu><|=`7UFH69;x>?yESEhI7~4FnphYgI z<$!mWD5ar}neDbH#Z%X&5+Q-@{|+>~SQVh0teK=FDx>oLeH2L)>*w`hYJ+W9sxg<9 zF@_3D`E=;Rq2NlAey-89w7X5GL^-VVSt? zrk^C*A9LtM`6fa!56drh4B)gU$`?hrge-_pWus6bgi-aT-2XX=)(^91auFn~&%ttT ztqYgc3qZwfdEM3OyS84OtGE8P=&t>pfe<#}^Yng<5ci&LRROwT7)Uzty7go<(rQsc zJ46i(MfD-{Cu0)v>G~R)Sfk!-fm>5j+9Mu97;5k6Iwo6B%ng)#LAlO-OVZCmJuqUX ztMMUIe08giSA6ftO1~Q-vR$&L3{_K5$P#qZ{*kQbp7vyIlrppZs^!%f;(0Fmjtvz> zYvi8)ggf3BanPuK)!NVHE=amMwSWG70mLnL_Mdp1}$7G?C?c1gI=MR%Gb7jo{$a zfUZ27oh&M$OpwzMK2GfU9P^@`MR6&$2u}O9G*ekmHL5rzHGNsKG z^}_T*6v^}OYnkU9mTtA` z9pG&QptwU`IuhraoC_w&%g~JVF^Ii=3}a@tMvFlF^Et#*Snyp^z;_F?nRrN?sAx`j zh+SoG)L(8>*zi6nV`U4plFVp~fPgVXxmU`s)EX{N)#ZIeC^Mg#!J+k9rrL^;fc?Q~ z(cCrMIc<;bPzv35+Pn&$Xx9yDLSa*fgmOKe0;GeGv8Z?>iV`fXsi&7y5o$yTz8YA-S~sN z=94Tm_Va`5!^ms)XzXA~T?95Nt2o{%%U40kS`aE-_PH|zX8ce@*&Sn>(0NQGHjH+s z)pg7J?p5mv_={<9PJ*A%`pD_aeQj#RcnGwveu8b+B)csZ%Qm192cJD&a1hfC*~P95 z_*N)%Scvb-GTrBlJ-nz{qqmCD68++O;$$)-ZH9*d!zHOzd`#DL%SesE-HcAmv{yiR z7TJ=e3BiTMmfiRt@?vkuc+YjYdFGQ%T8dYsR=4Uhi>S|xcNb2Uy!-w33QB3OmbxU zveu!XE?l9*{oI6E$TheH1mcvs39)GJpWqfSo6=y4B6D?L1nuK@VnGBlfLuRNyo-Yu z>UBtsm@j^Yd`22~s`rh0gTUVR0fec6)W3GWR!^%)OtMDUNp5_01fk2}Z zgrk{|9UT7HI3MwL7Z<3yOJo~vzb(mp)4G56)p{eIHp#lI$I+epi0O5YM@QTt+ut`v zQ|lO7W`kPyI*36ge9fQ8RE;epqmNRT!4mZJC(HnyBnuK_EE8Zny~@p>ilqY(EJ6dA z_|o?-k`xVXH_PcBDCV9W+MP+!5MUB?Um3n7R@VzJ$hvguOT_ogJDdFFh4k5Ja(1C} zE%3xUaU0Kn(uYiUiHxXOmT=ouikQzD|6sS-o9)07Fm zKk6wd_?gR|L`*BX`a+*Yx8)UQrms$ZN||CF7*>`FN_g4b9FJ<4|9QiD%yh;?RA5zKPnQI7@TzA5N0bxj#11j^NfGcsLGWAe z4NgxIIq=tXU#CtX4r{L=DzRVZn4JsNku}j_>b!9Qr2%>y4xyF7*lfd`chUQ+IajCD z#g78Wr3u+SNMj*#T397fB9BDw-07f$n{eOD35Het^cI|JL?09eA{_IL%T(ukac-`u z>F|+b3_fhbsvFKlpBkB4*^h+FHoXBCcfEeUF^5IEgCX-Bkqs`y`Ff2JWD}xd&Xo4P z-gw=5E(j+~p&crvIT(V3764$)s$^JKm?loilBvW3Se;Xjk@dS#PJ9(v=~I6_=sB2W5c!R$9yIhFynUPKD~iviD)=8K<;r z(5Tf`G1baitp`%xynw*|>dMz81Np~lm|dQYyH+}A&wk?~Iz)QW{Di<*`G|h|hIwvA zR?7?$F>kZ*uoN(}Oi>4?zHf+gl$Vq5PokGnT@g=U{RstvS86Y{<^rJK~%n14-795~fj}U#%IQ@;s_Pex|m9!Hi;779VM5=5Zjb;PXO?a;CH*a(F zX*!3qlwQVc<4l#^w;pBs57cf8NT~N|W8>q+>@FT}*G}UL zJ5(!)Vq%gR_4hL6LWoX>8$H-7`3Cx%OFBNbi?|D(>@Y&ph~FljUUUSO_+P2dM26<+ zN$IgeVM;-Z(P!J=Dt~r>;vVsK&uoypuYs7f0U zZ&f__w$>E?h5!5b@39{Zt&~r*ks>u`i=26Din7JHuMGWaf&Cjrq&x9=X0_cYjyC8B zBrAd>i{3t$Hevl;wEhaXJfcEmVpoi%2udOVfkn7qMZ7#E00CU%!L7Ry0d*K711hFkZ37W89VQ*7r!1?+naCP?)3=Q&7f!NSp#o3}Wgowyc zROE0p+CF2{cMhFkKDgL%Y7qE^nE%!rVEeN80t@xB(1`m4?~lg)k*PS6U7A^)JVv#K zabHIY%jB#U0Q`|(QOsOKk*cT%cA-SOB+K|PeyU5;wyE;PUrvD61B5BWPZIvcPa@{W^eQpuDu-B&jxqV@ zh4$4Z0p!aI)cV(Ftn_-2yu@24@Upq0Q$$gHiKT_*RAPGweLy#Ls>xR=Dv2i8*V4)j z$jgqH81V~@OFPA=-S7|ICx_>IDofB~&&zh=A^(neGF;Qfn0Nm-*j!i8cdXUNoh4;Bn|w*lO>sR|d6+z@Qr)-TsM1^ZQ+~gRzV4Ea z+(>h{_!b_$+BrR`z&eM)9q&9eQfVjjlcoqZ8$S6xq1WY_Fot%Y4;QHgOg_YD+Fw@S zUhgqp#ZyN8F54ch(hu&cHS6axc4PmIaE7Wnr{6-xAwh$Dw1K*{;R{llZ4x;RgT)Kd zel_+Pc)xk!!t}RW>wa_Eb3d3(4>Y|GrNn)U?hIb~L;Fyqs!rX3g|kD5o{aes`kqR` z=Ucn`aN+!l;|yAQ8Rx6}@#rgiFr?wV%91NBkPt}REnmF%{t$v9G)XDC$>t{AFT@Kl zMCqVzcbC3%2UlDdh1g+%8k&prJX_s)lT|hg?tmZ<`Ajlza&ia6;F&z^k_uXx1qNoN zjzoU>9a`dCUZvte)eO;v5?!0h?5o)GnGI{Dr2#&WBlDJjujlVN3Y|zJ6|<`}jw_z@ zxSC#unb2JPFm4SI(+}%Xv@-G4C50K4hd3-`NxdTOqse3YSc@g8w%$&1 zcM#S}vAtBJB@K{g@wdM`oru5t4SC$8 zf)xKnh>a*x-J3D}^!x(rkn!+;xl?19pce;6-qMkLAWeuF2|IWWDJ><4DA8B4=Mn$j zb@G%JthXekcP!NYd}YfxG%0jp2WMnOupNta&3p0J*fFRJU7^>awN(y@i3KeMz-+1R zwk&p@zPh%D?L4uMUTUwvg+d5uw~ApZf(dTf_VD453Pwt62I7>oV1}u~&4|5SkpFDK zt+Zg}OafK4e-`qqr67iYmF!>f-B)6ETTqi_V|^+^^J$jWWMB{$|~FhzqPO&6uLF2s}{UxCp$C$a8P+WIs#2 z^h|61W}cd1I+bN|%k!atG;(5x{Zd~(IEvwevT2^Rb1c>+Ln(|qJ_$cE{ zfHAG?A57Zw_`hn#8!mxo0t}z7OkjE0f&Lr8n-E9hJ3636oOlQKKN`qRqchtx6_0V><>P<4^2>jflD+%Jg<8xXu>-HS{MO{2GBMy}k&*wyPLCnJrojG( z>>g!oFOGn7*DT^V>(D1%O6O!oMats;=i=_|W6uAzjfS=gB3Wt5mVaVF&~(3C>(2a- za`OiN|7x!y2gZZB>!n^*n12wP{rB_Tjs+8;?Eh~u=sq=!|K7phI5#q(p2B~-KI{{M#lahd&JAUL(Yt_*ES~kKkZx$nmx`1ufN!y4Et>~kG^}l za_|t$t48~J?M24^_UoItubragB#P6p2$P{=Wf=>_t%kF7J#BimJqkIc4O;$23nJwW zX;KCz-SGZrAemK))NoObh#@SbliXVxcJSUx_Ghu{zY=suuElT za6GmPiT&tT!KTB*0&%<*0H`p85}k#cpZ8l9aB*TC=+h|o+;J=H^&DJb$%+>#mN#L} zn&zWqB_2iKc7H#|+?REaMRjvE!9OmiXUmd53+H?HSNdH4>cp?CJSr~lOB7*`o5?@w zLiFvjUt2>tD>45xR~x`aV5G|%S~U6&{GQa<8@S=|Im-|Wj~j{^4j?jUII0w?*y zO9PUgg)dd8QnS>_(-hwi5SK=#*@Whm2aL%7h;+r0q7PSr`{{9t(zd0stu`BK3or-R z1@Zehe3^eRijb*@i8)tB(Bm|`#id~q$EN$R5~M2@^gtax3M49pTEoU6l9d6b2ULkC z!QfjQw&vSC557q4{`{(hV^b%m7{7jujrfC2XvWyqWoj*PBE^m)B=n_br=77pW5{^2 zmf*#fM;l$=lm2lc#F2FPK*T5wb)~dBsX(<~xgnV~> z)v0J~2o5uB;2L30AJMnRo|<&|krPFW)Z#m2WM*^>V0hW4sF1FVdzAPbvZu7AiAy)#boTv?SZINwq`4o;(D+INit~vig@%6aQ9$3JjJRN0-{m6beJ zu^#W_I(rs8>6(UYw;k)xx;4NOD;xja3N~J>fGnv8xMbD*=PSUA++Ia;3^-jV7j-5! zH@W8U8Ch+2hvXNf2etD~&p+M1b#o#lf-*XVV!u2$wA!ChZp1snv7;F$Lafa$xkOqC z?%H_HR$u(0?so20$DX4&DwZ~n57F>JACs!0uP}_2koP~zozCqoLuTd6fl)y3IG zC*%4?XJylt-cVAhg#vvgfAG{T9~Rd;`WX7<+lg(`hf{Q9%tqjC1t)pWL$%$!eaf`?jKIh zs_^3q9oA$`jb_LA>SD%~H1_K#g7shHME4&Tik-DW%HSl_uI&|}w3wgK!>pn+Bz4P! zA%>0Le?8^nRODhs@tjdVcmVeH_VVkRe?VV|q)@r*6QGV#O~T+R&d#TvT`DmI!h~68 zhto~_pnG@n0{W6R8ur0uO%iC}LAv zIc(mxr)f@A_4D^tY{Xl!!9lnSEx|#gi1oh#0B&y3z!!TX(`AeqLhun1#5F_s$=Zok zWlcgveYw9nuQ+(U)7w2bXijBSz(|<4?PIX{B^18$y@rPSuP1J!rDkyWqDyiyu21fVV%Crr(ukp~m z3;jDn{!gI1`%}#;)F?wQPM=N@FN==75IS|-Us!R2LiR2)VVm1-&bpgJ6v_;WJCm6djYJ~m z5oihdGppR6G0hNNA1i)$&mlLVlR?%*lRL{a*g&)&^RrV$zO#Lz54XexU1^Iv9y&vv z$f~ju_2K>t($uPE5LpXwQbYE}R~YH2q(^CGxII=7KpSq?bbi)MsHo>(;AJ+qYMhc6 zcJ+~H<1B|ZE>tGB8Yle>4&(?Zu8oW}eqJys*f6PesaM!nPTwzzshPWwnyWj3f8ZV* zpoDcBS_H6LOBT)?=eM7HCG)pVXe^)O$v?zPNLd(S`i^^OQXWCTE#xB8u2CV0ua?(B zdmtSb&>bUP>Menm%)Yp^#9H|+=LSQq=B1nLQf+=-+JvUa#_Xl)Qb~p@f5d~!)127D zU31Rm5PI2Z@E5_nmcmldb%EW&qNOL;HRZ+sSXf`lojHk(4bj8t0teM zYYMWFa-ZhaU{jf}U_!+DjD{-7^g4g*c-+(AOZgJVRLEB%P2uI4nZJiS8}Ug~(-|gT zOdek(p)hDCe^_pM64O7PBe);Vv+dL)A_+&&*_XJ=-^ZZq4)OSAU!%<;r_?Uu&5S1O z9M<4{<>PieZ+5rm;hlDKRM1UoU6lvP>7?D(^$hB8yEfyw8Eje7nNQ$cPGGH{npYNC z+vm!9X@Q)^o9V8ZLSuSYOh3U$W~Vf?vFcJs;QMas6c1_1R^ure+hs>B@~WzlZ9RRp zcE-;3znQt6EiEoxYYZ1>suSWI+%!6T6EKj%2V>rCicBZ`rL}AmMk`faF>>B{u)}q8 zt})udKPtp1>fn`j(2!iEHmjhZEDf@!xZ>77u9vt;>(0RE-W^Q330nTMFk{d1WRH;?WS;WmjJ9*0G}_yM*L| zZu9HZd0Ih!mDX!c+5v{gVFn|ekc`Rn(<-zk{Eu^g2$>(L^q&F)z>9Zz&8QFqlCwM?Gpa33GE zsO<-&+BUNb>`UHof{TDrT0f~?MlTH2ms}&tKWk3A^H(#WzD=hwV~?dOB=bMH#(%t4 z+iBz?CTXMlWKo_qgJ!hM(P{Nd$W04B5t)h|SjZIB00zjPBkQ;Y9+cuTle)*c;+$X5s9Nqzrqf`#H90OukC^DY z%*ptUEMzo>UsO|dmC*-;6ds{`s@jz^pc%}QIG>XUZJn3eU05D@j`g43Qd3kUplU@< z-TlCVt+y@&%@mh~z=l)fGw_ZJ#zD!u(*Ox>WUU__$(0)nR@wQ*L2oh3;j*I298PBG zl8(v=@Cmm&^nJ^6?fF z`gFhXg=t)o!UX7{euP$e>AMUZHBD|88r?DIzsrEnX=#itaR?7N{n{5zY~tehzCv5` zepob1WgipiT%SwE$s|<;5-q^$zaGaP$CK!~Gf7$&8i3nX{xKhkz^dzrvC3G{G;?`| z5DDUz;``HWh5G@^#ovOCYOW^tS<(CV%MUG%W218GLZ1`*L1=k~h4S>HTo&rylpN9j za)#b|6wTqiTpBmG)d5|-?9)C-}Ut3&z7G=q~ zC~3b0rNy+|K+;nBP&S6R%zNqkozww##&M+xEfLaq$=~j*@PYumt7pVHqW665<=PM`Ou_c@?b);mJ)!w8F(~Xmir^B@VdaskitAs`5(0D2iPEfGQtM{M<@IPM56xuD z!^8Vh-EKs)9!5Nt79#|8X@ZIGSfVcf#A4Vhtpb#JUz2;%;LsC_6=- zHH@CY4*sNk5>H!Bga(O2gj)#V04Zb&gb_#pz3WO9@%k@tPjLS~@&@ zlj)aD`0(UU>DYE(Ppxz%K@Dhh$yo#fsPWm>8O6; z=-O@%gcZ^iC^gN{&mz7fsD0hK6rtEIM;u1FXV4>drNNcO3LmC%b zC^HBw)#FPkzgo|ErqH2(%2Wj3`U&ey{dYBSIYBTZh>-kCjtY?=8y5R7$rrrP_M zT5`y!k<8T9)q-oQOY=g*2$2n+;ota3!b#{3qtkpZCU>R?FbrT8mheQ_jPRO03Ck zkC^|^Yj4eFeiT_&xtw(u)g+umr1{CkCgYrXHWbc@&n-f|yiK1Tlo#_8#-ljI(FDGt zHJUQuSy3!OnuQJf#CBr7}k`x)!4Q4?b*w z0LyJW>}^;=E$fu_eh(Rps0NP}nP{t8{AMCWcfGBq^8CDMXxNq#VW=i8##^aFT3)m9 zs=>T{Syn{_v%I{#wzk%D-`vtNueEi_bM)Vl3EoIwN=t-p6Ccn~jcz@?lBIqBcgZ$- zn5_B~mZTInE@$mn#?OY*>d?_qw6bRuwbho9+n-|?fI5~!O)|4~o6=Yo$J%~Lo=q|g zDRdj&&Mq07 zsg4O}YS}kYb<&JXW`u>MG9@O-|L77MdH3k=_|h+>e~Zv-m1wN;Z4;Mc9G?-)XNh8A zfMoWttE#=bokepB>F2`cTkB1UhOT!OneWISQQAT}hJ}XxYigs&x*}brM5#Y>ukXIY zD(GuuNrE%Oty?}~WoI8>ZjVo~4MW_iWNg9fsjg8O#a#1wk;D?jsGSbpFlyz`)#uU{9H zaWQCQA=Vj{fe%PxmAIDN+<300mA09fnSZZ$1@i-<2)QX?mW=G|rcoFcOw<1crg~>w zOcI{QOK#gtGcUKOkBCE7|)hYQrsj1=N_Y&Qt1u^fpiS15i2`T-tkbtF%l)t@APh^<9 zZFS+8L4)}s1{Dw`aduoIvUoWeBbw1j6G}5Ibqy{3`)A$))3;@!e@@3nn7N$O2kuM^ zRSUaKP|jo=HttOdu+?5uH;3se(PKF$E%}b+?%)HA6qCAfwM^DK{j~KA$cRX)nB_RJ zx;i+AZtEg+wX20XFqdey?YIoHAve3u$ zv5WLjvtevXWA5sZa22z^`*@v>==e7nk#PFrLr|) zsh?FhqW$WqAN(ojeO>;O^k$4<6kYwCiG!QWYmJ5DNr5}Lmwd%eKS~RGW#cztM^nXk zPFC^=%}R%Rd|(|leyOF^Ek*r%Vnkmsnhi%qKSA#Qh_eu-%-y<5{jnxsXy_i_bva+$GuvK zP_F}{ZQ^*AKP&l4S`bcohXUQ-N6zVPMQTnIetJRfXR3-RQdA=He4buvEfN5`Ic3en z1yWcHW&Uj9fLr?AQQO!ytqTCLcu6AyRm*Ika`vD&rEG3SQ@}DxSy84bVUGNZ6uotC znTTMda*0EtehJv$xmcezHRd8HfeIXRI}COO4S#9XqO&MBNHbO(m3owPRYAt814h0U z_Pj9gkcfzDNGmBaWL&0=k8=-^kU|QAH>8avwYFblo&G?LW+Z8>R+kqhZm0tK?6^5p zw%J#d{;AZQ&N1uZM(bwaZ8Rmzb^%1`;xeH#cKbmE^1)cc3Jamg(&VZ_6CN48QnoFuBNnH;;lOsU2zY6`3j&{OufR9=fw)|QQ@b+tDe)^K< zGqLO5Al$*=^z$bEuF*7n@t=b&kJX1)xHWIljDMuk=gD%~ktn+FWrP3Vzy8tj?xiU} z{=yA9mJzu1S}sxF_;=ZGC7LR6;;N?hO`=fbeX)#50uHUs-=)*E zN?J|$7dS@#!dR7f+lImh@4yG9Oj)1eQyQAuVy=#Vtwi>UAmr#uUqJ}MXX@*s&LHWU z_n4j9N+29PS99F|hBv-wE}`2E;urO36pMdN;Ekw-oOteVt7m!NgW8HD|7S`3pJv+~ be(}GdU+hj|$nTi^>-7MN%8FD7>HGa3$D$@V From 5e2cda1063a89b7bb0f44bc0393129b489b0739a Mon Sep 17 00:00:00 2001 From: Benny Shilpa Date: Tue, 17 Nov 2020 11:45:06 +0530 Subject: [PATCH 034/486] Add files via upload --- .../images/quarantine-default.PNG | Bin 0 -> 186402 bytes .../images/quarantine-interfaceindex.PNG | Bin 0 -> 79691 bytes 2 files changed, 0 insertions(+), 0 deletions(-) create mode 100644 windows/security/threat-protection/windows-firewall/images/quarantine-default.PNG create mode 100644 windows/security/threat-protection/windows-firewall/images/quarantine-interfaceindex.PNG diff --git a/windows/security/threat-protection/windows-firewall/images/quarantine-default.PNG b/windows/security/threat-protection/windows-firewall/images/quarantine-default.PNG new file mode 100644 index 0000000000000000000000000000000000000000..6c1fb5c0070afea312826ceec8c33831143177f4 GIT binary patch literal 186402 zcmY(q1yq||vo>6%rA3Mqm*Vcht+=}tr$`9yZY}No-0CCSqA+b(Yt5Qo}tUhN~%A5_5%L*34Dw4w}nw`gYWOx za~E|P@n=1ni|_1afcW-biBY}yc{5W`qh^a9s`!7i_FWo5-Mu=PJ5iMJm-QdcVI7O2NPfV|&7 z?~E`VT%9(!-1!i>A1$YIS&l8= z*M9kvfB=!GsOXEAFC(I(H*PQXBqb$3;NteeGk90-W)Q!Bn{@Z|tlVj}eEat7%1KR4 z?eIv`|J{YdMb;u@(tNu#R?BN+R3kZWcz8@>AvadzF4>Mz)WXI+`|x_BRuZ5$T!muGDH^^5+1OG zSm;pmDm!{4L@Z}PYS-)owkrmn!a9#OGxmjG$UCFQv8n;ljO~Dte~9Lsc(|uO89!=! z{UtPht-s*uk-hMjneC^@&Z99dOW{ZS`^w!DnH#~@(Z6h5oyG{Twvu_=>CcF5rW+Oy zpV=esb^p$OfNdw*B6@p!m+|0Sz|sFF>#N@>Ap5D}{|f#e`8U65lsx;ZnSYf*1Q%|i z0c&VzaQ}~X{@ak4nD~Dhe&y@_qqzUf$J7JZ{5$zdEDHE9=`E3am;43WF6&0K&i5I8 z(KkjrPf=+sJhly)?t0L)quMFkK5Lk1qwe9Y(WI^&e=J-;WRGBk^k%D9qrcMkFoG~@ z!w#nKI2-Uo+qZIZfhKF_z_`oQjePsYH_nWVx>sfR2?II@Y#-_D3|g>GZINq-^LJiN zFEQSf964-Lb!b?~uI{FZj`2>4@C?bEx-~X#u?jg^xeVO4Uy91gGB=IuKFO1-J6YTy zb}au{%1waG`2ShUnn?aaXwOIa@GH}{j>k+&ht9r?o8Y$U#G`}8QqeP#yP!$A`jx$T zQH(@6I8o6LX%q&Y8;@GlDMPDK9=hUr)j*y4yj9HCo(J`*UQ|bPZ8y@Ev}Db(0n+c> z^%=*|elIG9@*YS==(+HlH)1=~n|Ks{eJ2FJ+2Lk*?7Q25-*HxVXact$lM{K7m|nT8=ZKI{)kY|nQX<_~KX;J;|-h@D!LVWl$YWgkn$ zCr-8_B2>CJYnIh8VJ}B{-JLpR;i91&Xrb_p*zwUYrFHhxIi_?et7 ztyfG(MxL3jn{i(M`2{Pp*)RNy^qQ_WM@>uyhATOdlVPE@9sM_w_*P>TXAy=ErfWaH zwux<=I88tN)@f0k?|Zy<-N!T$o%*|X;Q?`X;Xpx#bpPutB8ithFkBYh#4=K!$x4kk z0vK_@UTtNVY``+GH&7l#|;ndK9{BkGbxw#<5-~s5gU*$QS_eA(rCd zDjwmvol~rhARfB-VKSf&Biu5S*Rxq(lxH=Zrk|1WSX+3MFTBrEi`;vg+l1X$vVOsm zk0zgUeVVA>Bm3u~hS)Wc3)xw&NnZ+)$|xLOQJIqC&{-}vvBgE$c}vhWgg?*ejAElh zvZmNJ#Zp!KI%Odxkb(6Dg5!1Rv>A2GZ2u36m#DA>l+rNWB^Y)Hx>sq#bSf-f8*6pv zOLsLkcQrG4UAj!pj7)@JWA=$5ZH>|W(UrqZKkd4(G>XOE&fRPyfL=7Ic`g0WPY=K} ztxm}`)}*m-%$I>0gb$Eosx8md;HuZvZ<&hhshWLLegWsV%-9gOfqGr)3gNGqM}2JV z`QEeByOY!zTT$Qb40WqccAbX~8;2D-$rFY7YTE?BhcGygw?=oLPjmW;9aV}M)R`xI z)wuzt(&aDgP_oX4DZz8{=hppfBSttAT-6VFG8rO*jaGl|6OpSn1#rpZgSx&|hrx9B z!=ZYzNt(`wj+2gqeN(oH?`^zib#(RDzw=idXeJZcyl5thS8O>@ z&JgmHbdlc@*_yTLVhhE*UV}JTb+CNnQo}Gf)b)1Dd@HqWG#gzu1PP_{TsZ#7f}goA zOKA@+X^6%>nX1%vuSc1q5Yc+ne8lcbb9pG%Sd^?}(e@uTYOS1ou>@QC8FYGL=j3Ub ztvoa}g;J&nRg3Lh30<%#bN2{OeSzA>u8pD-H|e>ri$Tj2l}HU2Xc4{p7-OUI)vFEk zl^d37nB5o4&wv+uRUn@6)mQYKJy!E(Y?pe*frH6AIp3t?h413thp=ioS%0hEo2(7h z@#+#`AQx=>3k8?PN6FCMe4iB2@AIJdMeCp`uZ=yg}RMX=TqJHll`*BWmqU8|a)QTX@vES+Uc> z%f47%M^?C6$9Og%6cZqQ;3-xHjni@drSjRWCFc|>cb{Qs(;ZkoAS}jXzEZ^Jw$O0j zO~AtBs~iO!X+7BsGYb8vG zuF4hS>dK#!X(%W=Mwc^X)@_Iy_*iWSazn?O@bi$x6PE0TZE|@EJrzOcIFl;+HcX80f zr-6Dw!`QgARB{oh)YSCYD|bTcDzDPj4itLny=aDwJ&0~H%ryt}`a%^l4LHJ4nxm#X z3NRt-)6u34swXCH#n{CABU@VtPUlT`o-hF@K@rIiau)k7mb`qf-Gw^79?V;3PIcBT^)PDW0jE&O`RO-^E{ILO0dh-hM6LPZiqCAD>V|BR9sB=<^0}_)3U2|0b7pT?0e~ z^jh|3y2W!QBXCw8&#yHX$}U?UN=3>aBG#u0ZH;~IeecpC;$EIKETpR$p;zqB$I;)Kokvd_9`0 zQ1A$_?M%tAQcgHv2(Gg2natZPD0mdlLCepi556PqRkorCJtXn9L{nFpvCO-aDt!oN&Sg- zM}pCP)`oIo0m%%Rx_?7}%k8o96GD2XCygr0dLVPN#NT6y^&`Y%tKf2*dBCpm&Qk?# zdF8ObFw@;~MxqGEN9%F8a~L8QajIkMQha3TAJj4((20et0;9_P5DPx%^$_v6UNEx} zA9E2?))Y>(UrNtipE+O}haTQ*t~ihuoNBloU-xLdkvp>YNS5JjsN1_Hxd`9NcCq-8 z48u&X;NxO-v7Rv@+F+DMpwIC+?fE)4I@At3-O&oBINzQ&DDfkyIYv4J4`%=IwNC<1 zlZq~#MLK+Y>Cy2l$-7%KMtziu~A1Ty78ZRlZKA=86Vy|xE3--pcz>fxBgSky)& zDnXd1Cu1;`AKRt*zS_3ftwm^DI`h0v)DImcJ(FH5H@AB#gJ+&(s|IJ7OhG7eI(t+)oI1`#WEU_O%Igjt(kDr0EA%jm6W_q@Na}JsbEg$RC@@?Ry1}86BmAkrPUM%*R;C$gulf1Z6n|KRAaxO&@(m{YIX1w zjd+)HqM>1=#!U}o=rtw?9<*)%e zWox{-*{<~BxJSs!Gf9SQs7J)C76B>6{=Pw~+KSDD&6&FO#?Ig}iwMrjF5??upz@hk`EE zqpV!?@1NgP2snJO6x!pTi&Mr%BS))OBA;Ijz*q%>s3Umu8*5w_O!Zi8PDWkYZWs5avz@y9j6Z{g1&v1eIN`6zjDMb!8~|0b#;KQ>+O)+2KUgY0 zAHZ^tc93*}?#<{Jt)B?FfjCSt=gjFLzTod6OibPrcNs!$*R}Hx8%Wn~|Opa=01#jN8K}JGm+NCQlh_z70wwQ zhUMo4?a_{gW4X-{a#9wjDHePTcP_Q?tLxyV)laO zsTwEE>sa7~m2ebzf$qcjYM-oUgDCDK^7`ua$SF6NrH))aWM4H4r;MvKrTNb{7p=tWS zSfATpbv=6oOXVC|&f9!BzKEz|rnq>L_K3U?Yfjfm|JeEU2=p&KKgWsK9X``7)>rpx zs0fdYRJV%_Jtx+6)6LSb&F16qSuZ>`i#r?MtJd(omt5377#$pb`Q=Z;(&;nS(#d}e zN$0RA1^DH$s9;12X1n5A^~j0eLCbXMOlFIlWi2;fQhA0CJG9SZgV---?<=J=C&kIB zbnNBG2p!8D$5l7_y$Z91^2K7^u1Khu8HBS)1yj1=KymNj`?Y{dZFvC8FriWY=P0o{ za=wHKyOF8icilopt^&j_Se+jK0Hn1TySAH8)mrR*z=})5!-*7!Ic>0j?E3j=>fUQd z=LNoE4D!+3uF5}?P@XZs?I>U-l;YO+L<7bjpj_{40?#ky79=b3I`jVe{&tGL3dHLjNM zXMFY}KM7pFWfd@LK-_V_jR#%1&;1DZxic;3Od}M}w*HLHYH|umL5th17VS7jJV=nv z)Argtw~@Oa^;BV-Z`)8@fhKzn3|h5JE5(_8f;=S12&ks*ufP@-0WSCXXDAq#rbAHK zK*`U+*=b`HjIVF<)K&Cc$ynDrI97;L^Fc#cic2ow0*E$y`A!^V;p*?DQ>8ymCfp;J zwm`clf%|hskq+i-9IdcX)9|-XzX-6>cxcl4MAvy+N4md@Z4%D5y$c#IN=$N(^iuL+ z&mX|$F%<2)78m7oI@4vP$wuzp`fofrlh~+)toO!^EQP8MsQ#!LX>0yLNPXv{3O|08 zqrIp2@SGF0xA@Jz(|6SDbr^?j1{*4;Vie{Qd=Vw2gw|c#P9!tWsGUHdhS6A9<44Y( z(pM=(#-Wt6{euT8mVl~Jm5VSgM-$ODfs}O}LfM&v+C+&w=yK*Ux0ZKw?jw9(UDk^F_2{50<(yh11(uS-M(Cg$%_^5_$tYR{bC{F}B2; zrAuNSx^F(xX5_1u$6yqM@_VKe-)yVmD zKK0qfI~q!1+>GHCOL zzioNMFpgnrQ60H0ko4rm?9(&)h5u*faB^vK^>Z@^z6eeMNs1gxL=x*XyRSm0AC`ef zA5NPOZX%Pf^v!<02vzMH%0Ao#otQ}t&k*EG{y!ardn43VJpRx~P%zO`y#t45{AV}+gi9+h1-#H@*zDZ<}|;J7;jKvo}9 zFUC-4fm)A<1ishiHxhLLTC`^zCk{r(IAX9cndMFhGg$vMsy#jYz-U2d zh^)|ir^qfQ(_UignIdf#TQgqVf%6=@HQng7Xue*-#ArJ~w37tYDm@~ZmTUY&PP_k7 zGUdy>#QpT?U~+VaNhcX>-sxJ^by)%4s9Ux+<)F3Jg+xqQ@EMaV}=j*3qJT zJ5^=B!J7mbDwHrt0=*Lz1(#uVDxbx_;VZF~kD>tDu|#&>Gf3?zTDnEge-zGX7;l$O z-ZlI3qg_Pgg3o2|;b*n6j^(i~*JZ)W(ph@~i?Ez-`&bJ1uZFjEj6(zU-l}7J%veKm z1~~><&;5L+OgBG{W@MbI6^&__L#ODU}o?g4l8c?%+Ptc7NF+QQZ$#21*%bK+DZ^ef?Q<{6I{zsCKyawDlPTnhxpqbb=VZ)aQt}c9%9%@nTE(JD0Gi%DV zErvKmZEA5)ovbg^V?1^C(j#$tT>7TJsv;wedWMIDy>`NG4Bp1+c;Gl%j7awDJOt;3 zVK?Jt(5_rwVxuQ6u;w7;Vw?IqgnjsYO&K4C9|qYRrY(B4-k%VL=^8+IVnnREs1ddk zzVSg^K2yigS~PxKCDmao_vn%l6&3%XZv~~!#XnfA-`u@P-k`yP!?%oo2NHQ65+h?1 zSDEacV?Zx1V;~k)lW3wJqH^x$V2=5LcoS+@2$hRE&|t2+NC4zBT6Q9^>_CrVr(O=}c7aU41B zBa5Y)GT)LE9ijUV%^_hMi015oj4*J;8tB^S(#I`#ZDfYPqfhaN97FA%!76tskP=te zl>XbuUK=Q>_0`LUTPIeAi&(drtL~HpxeA1CLj$L3!+>Hxi7a(bslRf2BdEhixYls= ztq7mQq_FrJMcBOijI6ZvyOdt`id1RU)&a^kJj0L1o~QSI&XHTYfX7;{se4I!l(9U8 zcK^CR%`plSA{ADr^rR45Qwz`wtZiYN!PfB>1pr%Te^DAvCU`Zu+NJ*MWznY>TpBe9 zMulKud_H!=h)8k*cj|WzZsRFCfH~fC-DHVjVaeA8v7}iSYT6*Aj z2u8!2RHIP%b1wN+0DYlrHJmv3kXRgQYWAgRF05%3VB7E|BJ}|6?);73Oj>Vk4POFV zbm1*ijMa+GOGt0|Fz_Qz>h`RO=>TQjqAks1zrii{o(!xiqY0P1zXi`CU9gji1tk`8 zuY$v$=$g$RW5Zr^_9Z0*%@xOm zj&>k>>x^tk*N1lb!A9ED6c9_S@yCE!l&wtUJp8;UOz2@qwT6sF+MecS{jGJ|q~!kU zAR$((we}nr%*I1Bg!VEA8?H~N`-e{NULaE{UwlR>mypEF;;tBgD<*hZrhD%my{WW2 z#U6k|Yvl1^4X-Yhzr#_e@~qBe^@5%-d(gyY2LOI#4?BaRQVYNw0OuwRf^w}5-~EC* zdOlsSmv|Ex{m!ah;y3|^^x96`JH4kxC;-S~DX3j>%KI^Lr^j9Rt7lIH)eC1Iud~6@ zOjqD7m&`E=@Lfe)zf?pb6R~C{F63z|BU5RZn#ypU8svmAK_XLE=ddReIq7$AbUADy zGJ_R0)13VE_3&iv;;R&tzu74gshOOx$$&*Qto_n;n?%VGEWGJb1stePLO4)(s^YH` z4?ur>J;98h%TLG8EKaSof_h{`M6s?CY`&jtxPPPw-zA$@>6hwaXc6SZJ)c!wz(;uGMbI}#Y<=33=4rLa%mB%U)ALW;gd zpZ5h^Ub$vAhowU{UK})?H6ff+L9Em9R?jh_FPWI_7LvMRb~&vEg#76zlNXlSA}BL| zRuHotF@Ou=oSd!k-w`fy9hDIkhJ!k|Z8BKEKFv}gb8E6~GaAg%kfx3fHYw+N^Xb|5 zl-wFneNswo4SwzomfH&lg`5WyxkzeC`n2-BQ1;rfR-wDaR)7&na3jJWt32zPRz)Wz zR1zD^>O>*HE3%y0PKs7X*a!~kIC&}t;YreCH$-Y_gq=u5K=;Xvqhrr_xDF+0cZR-x z8AHqKs@a*oEh2>3=$QUId1c>^h)vAQzZv$9NHm}!C|U1KlRy(z3yzg=uVq^opzsM( zt?PY-chsqz?>S2QV(4%YKKNo2R3Pb65}tQPRdVahrFXU3t1DL!3^6qA_7UTz^|(&} zW@Jjz`M??^6i^zhyOM0~K*qk$h_CF;Rw6CXSZBbbyb#rLY2%g)M6a7$P{FB#BmHVd zKYQuP8=;eCLNrKnj+qdCr_4uB%kj{GqH!;kT(|Gu znw3Ja7x9k<&E6l6m~@)g@x@gCpkv+jlwA92ES|42_spHQO2WWaMv8ZIkx?L{krdB3 zkh}Szh5C@O6+^z)7|X;x6+D2nKk#@oKpe0n1<;psEBfH)%_7)>yA2`KnQzK{6D8fa zb%&)B5zf16lu&>o4}8Dll%cy^g`*{U*bOKh2s!4e*j)f;e_D7yA;Y> z9KGfOc8J4^Pj%7gjLJ4Ote&L=m$UDRH-PY-*O>ugW~A)v-xequvsRJG8uoag38u9R zA;<88(w5`$og>?ZRG=BH)B+n&_b!mTzKiFP?|ZG&r=Uba*A z10|T4Ud@RSOp%Guw9mz{IHxjoD)?;VZhe?Z+9>=g1@_L;=A=F_sZ2O#W`feTd;8aEvq!0sCH9C#?w?fy%P-S~JQoVQU#-Ivn{b(Ufo>+w ziGiAbX0!9rd27$)(Y_97*LGMrg(@BX)TzXq3K-(H-Qko~!zr>J38(X&dmF0h7t!tK z&VH1XKAL1JX4MUn!@5bXmm)J$Ku}JX=?A@Y36hJ{6@OBBf8rN!AN_7v-o-|Nn&0&O z%Z}@B^5`fWx4_xCT8rXl$D+Ou#L#3h@{Z3Ve{*}AM#`V0S4b3k0{gDZ_D%4B5nE~@ z!xQ(Zc~74KThD$r1|;ONhD-1G2kWGp6H-T4usc-Sco6i|LkOmH$E zZ)kBSPJUkh_WrOwBcX9r-FHRX$V4MmdYXCq$H`npZ)+8_!;W9i|Bfq&trcJ9^C=I{ zRe4v2*YL!XDq7wp(w1}~+?g%a;yzsytE#r|2sxN`+GaDupz|*@ceE9ArEo5M7@R+u9_DE)2 zS3wuxfbsY0*lcr+*i&ZSaiLrG)KGThDDrHA_+u%;jDMAHbKQZ8n=9BxFqG?j$>aJO z(&0+ZlUVeAo85Aa6L{1rmV{)_@ZpBcCVnJvUzPo)HneJEu*?(f9V&kQWsL>D{gtnW zV(wnKgKFiTtar6Y*JF9S{mEv!l*YJR44ud=XBa-K$xdbn^M^IQ;xjhf$BH**jRpe) z6+kbcZt9qa(ek-u;L(Lg=Q4FauxBTn_P*cgauf^?^m?x=)cks7SF2bOipAVcq5yJ! zR~79TSY1&(U{gd;d(JMyyhHg)NL+~K6q_!V#1j5!BbhFRTb6+Wv(?Dw=XSx=@V`xN zA#XI#Hzwj3qKq z_#;F|LP&jU543B1k#tkUba1C=3B7iC6mR}yEcZ#|fitYwy(lH`)k_RXN17oiX=$|h z$GxMbwsV$+kaXxVPDKcgiTc`sqW1#uvoQQv)pS=#g;8S63r zuGJC~am*MC*NCg@<{|3aIODO?1tZ1Xg(UJwWnfpH$+`s}uA_CryrJs8NVfMjEMh+U!+#fAm>%gw*jeZyy6oT zw~_^$*Jm_asnK>~1*h$xRi`(plXe88JM&|)mS6uyO;?-UN!d;z1z769U)p2J%tO_b zLQ&}ReVHSaA6T5y{4i_%Hz|QE3HQayrt&@HCERA@Hhu~A5AX7O3#oRAL}Yk5Z7vPA z*o?=Q$1eU%6bZ6;yh=0?9q%v_)!5ER@YS^>fziObn_+2CZ+v3b;CNf~t&Qn-brnVt z&KGp-0gpmkW7%CTFY%kPGXgm-Iei36xSNzpCj&l4ZL3%gC878}tke0b0Y9D9+P@;X zbz&e&A@0qr`5Su%TU739+=W<2x0zB1tfZ0(?@sMMjF<8QQIUl13VT&$usPto2t*k(mqS! z?nKQTomfWP@6-!>C~3zGdcik_R)$bMwry64qnGiV-=exav@lWdJwwFdKz5ViciLlz za!>tIo?@oZo#nGkoC#l-@wX9)Y=2l^j=NMz-n%QEXR5SB=g#eNk(^x7vYJ1ybWzAW zUl>*9p7Qmhg%^@HkVAtGb_tOf7ucETXr9%tVi=>%^CEHfP?w^W}a*_Dy=oUliguh5me1Kw>&K{j8i z6~?E-eR}JT8%nlPPIR`D;noWRmj&4${1VvLIFA1IDJyjR34bX24nIuTt}Pd?PcwWP zXglX0uS1M&{^py6&8AwKIRQ;t8nPs)Moz4op^B>kL4{~;iG|*ZCXA^NUzG>ikJqNt zx}(MBBTu*$;-Y|G{nw$Um+T&B)im`>fG%N(Mg|a9`~~P zQn?9pvICi!^`oY}TiXubq%=S>9=SHqWTdnrTr)0HLm{exy;Fi;Bmod7k|HySSJ+Z`ekP|Xzxk;zICn)coQ*nn9v!dCkfKS1V^dZjcnG}?p~YpxbR7dCMZ ziCad9-rk=HO_y;euimA1)eqG2i3>a1<0s1N6eNb9T43!;>%h=dm1{dJ-z?&S#-?rX zDEp#+RJIfTtqw9%5emxNMFS4~ma~iCSR*;S=gXP4R!F|_-=)j0@CW0-(8`g`P5E@f z)I6HPXvVVzl0#+Z4olyyM0mR4J0EJ|4~#awB**yUwuVF2=8UiF#LaHo46~rvh}E(d zHM$dh%^aPafJs9LFO5!RrLYT@9)j!UB&fb zdF-^FbJ|7;_qmtCy7>kx#^5KReh<_YBNmxXhP#!ZpSV61Xk#Ai#b2}pcr$w=ODg!9 zg+jzGI$Tq;wuk6$yyrhz`x<7%8kZR-+fp}Uz)F-Q7LyNpmUD5hmT)ep{`|+B{8NvI zg#x@d{r-jWBM+|VJuObKTqwrSxgdptL^WrUWy?&u*etaO_vhcG+G$Zv7d%ZHH`x;I;)hX-_d z0bRqA43%!S1W!+5!}=uEecOD=H=z=6WyGlmy_))fYVjRrr^x#1xCsO29ITYOO712st0^19Z^PdWp>eULYAE98y($x9PY zf-mN%`mOcw@lov6D`_l<(fOx4VLO7vnNam&>TpV%F z8WNljik~Ih?l!SHvD9{*zD@Q=aD06g+V>&x(`M<>@|}e$9?H~gsN|~=CoB$owSwUq zYK07`Q0$G%u*e9LZime^=n}KldI1$G{Irp7Hi4a15{Kx=!FxG}gxg-357@YAn~2X= zToEDE5la=uOtpK~@dQy(Xz}hB=Uk$ls^V1ZvaS#fn{1q-QO7{oW%=UdbL4(@rUDNOPVz9`8S^j!azIR5o!Zma`jB27IQ~DyC*SnPHK{J zwoQA4B+9ZN0=4+bPEEqHD(Mps*Du<_G)igH8e<%4jF-zNm8QH{1-2S1r=W!?gPY8f1a`h3OJvY1PSXdO# zSmM^YP$*DwsI%og3(;G4*i=w*N^sr_&9T)abI;u6OBI-aSD}D{I+sX^`**oDEy^_h(u_lGdE%2upVvu&$a+%2Uw? z`$qG!pCw#mF>0WiK$b+tPs&)`u^JlVMpz}7 zZeON&@y-Y;?2|I2QH`NIjZHOEuh0Wpr;@epGb1 zlPuDywstRMSlXQ5Kb_$izQi5p$mUVRdfFJA+Wo}MJ>tP?MXsenv$5i^q~RVOU>*Qw z)VSF>}9WbmEdoivze)uaJuwH zEIjDWJh(5@w=OG?X&TO;SJ<}-xw%EM)gq~-+G+Wihn#rAlF~QXQm=cx zm@wneX|3Lr_c{!-1TY!P*@lxcl#MbQo8R$D4Lhfn`sUr2#||}j2$ma^PtP5gc{DQ= zh8w0-xMp)^H7=>uht)~Rr#L8L+gJw-v$Pr>B4LPpEA@jkLl3t$i3J)roob}}KyhzM zZ%5Aq{~kdy#5<%VsbI3i8(buEnY1rd*l~DAnox6BU3lX$L)c)#wyl`1>$Uo_G|u~D zvxI4n9YnyR#Cc|K0XE#U`QAgACgz-ChRtE1QJ(6tf!|?$u0rgjqj^+jjOw2@=EqL56L`jOvyr_JR@ z|2+rB-9-W6qMunv!#`qq2KU+F)i`&_*{?fB4IM-(6R=qaisUHEhw*-ZNCCZaO{At%WG$=y9(dhKQ!79B%c^;eCzeUdqt z|8WuIEZ`@z(Li*F0z7!J23%`d2mp7!WPDWOn-u3`FGg`&9qe&&m^R(mA-EqcEi@P9 zK(dAPJ>X4lY%o<=UC@Yb!22ZPww*ey@8V^MChWQxe1}}CwdMl3N-OI z&;0moTF*Po65giQ>NDVd+sO&Mx^=3T7SdWV``y20^v3T>&+VT|uR;t5;mmzo9J ze?b;8v{8bRumxLM4vzT2LD_#n6w--(r1`qSyF*J$8B$SrP}>F0|Lvk$rT}Lt)1|T+ zn%zD8A%7(D|pCOMPH>r{?CMKVrKYtz^ z7G`t!{WRt@9&Gnm?oxgIKggAv@>8}5Ak8}@5;?Kd-WVMGx0X|pb_x;b(-;0%1Ps2} z)U1@1M3;fQ?Er-ic$wRfMq1Sh!z94#x3v z@J6-YFjQ%h@Vrkk=K@BdZ&!{#-6N6z>h{cIV;l!g$a73Alj;z#wVg8nqv783Ss2|O zb2Oj-bQ$3Y0Qz11w)4-_We*3&J@lrz;E6v~5&=#=YAd0nq#`BiA>c~jvhhEE zrN4V)>u4~C8vNG*8-I0+fmkj0plGlG{j%yU%5=5Ef&do|<2s$44_Hz8PnANC^b@vN z@fnix{a7iDjN=|CFXM!6!!ry{kMN_W^AF1imI6?H_?N?E zTDlZm^~5n37Z(S4(MuLPNX~C_dE73D<*&zuBf_Q)<^gO&K9(!KOS1nzTV~LeG?{{J zg(<(==gO9TcX#?ELn3E8dS!fwkF33x#(*NR0n+Q1tJlu1izHjTgg+1MkR_@e%sKeX zk~i8f3H=u3!0M}qa9O=S^0!G$N(79;)N_}$I{4#9)dFJCwDHrQ4BjEilRcFVSNE8ii4u=!x z*~%+ZlRabl_(rs%ev;q80VI4C9;7)qOv*aXcw;L~Y;RbZ`LGAM3&OVps6FA@6~%8& z?^U3FL)x*15tOt&ITyQHX~?b@>zqD5bK5#SHuv*YIGvgqKQmXlUd;#bi#9$NUTn;j8i`D*Hi*EKkKQ!N)i_04 zyYCitEarD1p9-iHgE_Qt8P_>Q-o3@adNaV8KOeSn>-dW6>dv%3f?v0{q%W2WF6Awa zLP)q%2#Mn3Vd4%*WD=BC)p_NR!_sA-RxFV0$!+G=BcWIp~2{6&eoo{fPF?Bp^ zbNOb(pou`%TwMrNPG(-Xl1t0^WB$doT}21wPCmBOa%4adE7E0?WP2Sk482}{Agr7GwCmYn28)A7pehYRj5@Lf|y7Cf<>W7?&uvW|l*&f_+9TB5#3?~yy z94>F91P~ite~`!!4lX3IkXZr(?n*vRiFd7MvtJIEc}}FLUD51Qo~SavZo(^$0ZwEydl5)8&UrkNS-Q-fS!iwjFep<7FbRWyMj>k1n|&iwZ$sD^?fdmvMxfiSu>UYNt{nZjGtj&rNqIgA026iOCe{taPY?dZnw(g$E(`TW(5!eC zjM3vU8~3bM?#;Jsf7ljhrY3-YIamDe`3Ky|ACLf2rke4OzxeoG<7U9$Ri89e*ankQ zdR%!=2`1xjx}k+XL}IA{K}qs!!84<*O<0CzS$ZM+0Z&cnFiMyu_+?Yga@1DbBmIjx zc_Dm$K>kMr@i5mkuTQ(<*a4%ycYT5Gs<$F~@T&{0NxaKAo1sLuXkftX^Zo}7tEbhg zXrY@YdhnDa;LV|h-ps?^a|NW0MMNBQ9tFJ>80GJykSUTDM>;ep32vaG8Bf4dO6|cJbY;%j)Km(-&$JTt5PMg+y zLR4XeorAGPcA$G_JKERg5nJ~XnM}kI8c%6N*k4lu@W=FjhZcz(4|RG%1+;sdTDk0CoWpV^2S9H#uB25^m^frR%l)oie}`3`V>84 zV7!u=AKD+i=pJvAu3RBaB^@$Et8I+z-ok2>g0*mQ-VnvhgsLB&pqytqe^ZzbM_(Q< zOh9m&%-UamdHN2@4gmK=u&VF#M9ZNDvzAKKtDp;A`dcj?$xhh(8*2oM{)J}}aD@1{ zoDXuul8cT(sbu(&q@Q!ak{$I$>$TF3$Z1q%QXDmp^S3f8#v78kSeBu$HDuYlRw;Um z0%ckSpfu9hzGJDNas`o6xKuIKI|LVm?_dl`KcJk2Obfu)PJL}-PSBP5GD0anNmp-W zQ;~9P`<0~%$>wphO=c&aY+BBSl>&a0I+RY9a9cP>&ol?xYPAy(Ypm~WmY6wmH8NC5I&76_7b>~VMzoN)5;O=Rp<4{x_@+5gAe zSBABySoN=*HsF|-9sQP?(PB7;-2D8aCdiZ);@cmbML?V z<39KI%#%6ueVKEc6o?0t#CojqR)+2RZf!?}wiSNlJlTG)d7v4E zpgh3$dWmD-{RwO)5>g%JM%x2`dffJ3!luM^eI~zzaK6>n6XyI3n^~yfr-PS#>W6~I zip5Fi8XV-4`eCyu4shn=71q$x%Wf8pt=^w|>F_)LliptSY6;oE`+7k(UymG1SWmL= zsW>0Xs-lqYv9drji_?R_IkF+<8!D6g#dq?TfJ zF*kl8^YSMqJw)q2i1NPe<_rXWlA1q?+_a#!8^NS#P>MGE`YU1=%j{DwngY@nte(oB<5XtpJ=&vS;Pds(h;;{h z`L9xEb9$$VnAuwpkepVJ&8xLU|9_r%b=HqB8vUX+ z?T6CYs6Ul!l{LmAh;AOe#`F)BD#u!!2Go6YMea1f`bf*dM(=jw38str5^Q(8_WnU007zhON=x!@I`Hp8Uofq)6?Hp7#KlJ7Z(9w0b9U0k)Jvv%cTK9XcF4(jj%`hQjc zWsUv6WHbKn@-6;fp5%!Kg`YF4=MVmyQh9+0lH_Lj4M|RxFfsX&i3&Xl4i5hB6+lmX zinMN+wU>~Ttajf~+Z@j94Sx0Je-5WUfvsa>W36sZH_rE_<2(=MMhg^4|7#0T3-omz z&J5Nr)A`&ROAZk6j-blPdcoNw|7YdCw!KYV#cl|%k@vmP}1{_^nYBl z=gT>W%l3_h8MS(i_5C%*&6z8~^FxUC^9YD`@2^t)k`<|P*7nm;U z!&RHc20GX|+c$0vO)7L;PP6FEk(d`beF9bKkavaMt=0xn^j1jYlWhI6)gu0!gt2B) zu|J0xEoW#>weDryK~>91E?*^X$Si;VCVlzJcy;b8d6{li*7yp&nIx9Zlck@;r_s6-8(Pwm#*Y~b_07<+X_? zg+Dgl`-#yip9C4KOP)MECxYz>r4)}_0o4aYaNkMSg&V+lo+X{oGiW<*Y**VYB+uN1 z5&O|~4fB%OtfFVuRr`I&ySJkgxqJ<}EHgPh_Ziah`@WZOl1@7uBrP1SXq9^&`ib3f ze)#7>VbiW-XHd|)>p0cNSUTR-*I~r6Fe6Mloz;gCPeNmzN68>0G0#WEc6-x-z;b`6$Q9LhvVtGf+XXTHaj8T;)S|3&MMDPyE(bnXo3yz*lbWf+1ZPW-y7}q-Zy=L_U-tO`T9so=5+gG z@KI0nkAj~c$YJc34)*k(gYclQHTj>fo8Oi>*#EelP%nd}O0{${n=vF1OndgEGRxP; zWdd(~U%N;FJwbvy(|oR;R^(W3r>gG$JfHG%lG$n8<2p=?_|SYU)Rpa*a&b4~Qh@%> z-$PIl3p(n!&hFU-TE0&^yPk9Bb8I07(SQBqW zu%h{EXTRP+tNl16=Q=sEEHaoXYHrberRWJU~#BAPYfu?UxZQ zgWK2ZY20?4X(^l;Tpz9{7U!8!>~Lv8>O_d^ecYPA^R~9 zk2Ih|R?e*nGo$a)u(K!RXQGU${Ap+k*)TzlCg@bbRTIP!j&VGWnv|{5o>vEVhQ_LqbT1-AgpK zpX0TXHb@5nQWQ4|u~+WIbp?mh)%!G0nn~?r{iPiVnZb7s<;XFP;PW}E$I~z%K=pGY zG>B=lbcdE!kS8}Lxa!k6&a~a{DBjE3kHKN?pCUFteQ5=a@2)s)b2;L`BqZ+nB;A<9 zbpHI{y;v<Wr-fP$zDS|L~=QIy@SfXdg{OFZ_i)FQ!`VmJ*!@;`_~3Ep(U1ms>oyVFys=tf zLaHl2fNWbod|K`*=OS31B!Yp-k#NzNT`JS_jqVwaB&4pGMFs84+0MP0?(MK($M2Ui z9$k^27JJe;jPvDYr`(Y#3f2;2vL#3N(-PnChN;)bJwG;hzXB&8c9y-HhO&UWk&mFl z(S_r;iv^UXL1wpxClwO4@AE8fU*LTq0sdV7!KP*m|dVJ9C0Wp-AI>p*Z8QCa5 zTC<{&YBLH61${DAnCpsHX8BXU_I#?_qUphbvl}0uYAenepg}quG?2*h&vUuf`;){O z*VveWYmOovo#w{-zL*F6^$xx0ucQIZ+bYQJL^4=#1tLg({?KkFv8;V?ZcJUKdXcCi z`=Uxfd&4R|+qM@xu4MOmq^XpaVpse(w3pNV<`t_&BIHAkv%2|ruiJ<(^|vPv%Sl~5 z@9E+!Dk`AACiE<~tJsp?BshvM>bE32sM>v1A9t43Wn#*ya&pM9;AcC0Q+%2v`*3eB zPv@swTB03{G?)`sn_&ZcF)-qqdRCGv4GzgA)?4Q3ND7BL*LzQy!D^<>U}-PBrz8uD zFP08Ha$G+r3L6w-z$s$HZ2Rj>0E~Iz`8%jLIKT7U z#E{DX+x+-JHO1(C4Bl|3E^=Gz&t0Yl0Vf~J>W`Ty zkPDGt^>cjQv$+!IU)|S2oCi3I6KHRub4L8AX@$y6;KL!DfrKK)OiJ^Ya@-)3BwjrH z{CYS09c-I84JH;y`VYyv)X&BUU68;IHeu~dT_)90pyZ(7xN!Stf7{{H7+|53h5BAs zz5(5?f|QL{;ehtsbiP`CQbH=Vr9jO+Rr`Qvsy*}4zGqnYN*TvQYPMX-^@&nKB5HBD zDncge6@oUUWG-s4snqAXR&MG)-AqvvDmCYJ;2kKH3MmtQ(>Lo;n`X9@M%LS;99qkij;2{MDRXmICun%=| zvny_cLc*Ks&wX=g%k>#Yv9zw*UfQZ(RC({3YS~>b8e2KApJZyTBE}03_tSW})Ok6V z7snh&TkrXDbl-+|aa@JthiT5OdQI2J-^qq=3Dd)lUS%DS0@_)d+}+lBImbR&*zHEC?(W=ztM^ohU4vtBqlj6rEB^{1LA)|>?B?JDPJ z?epflJ7TAVEgfIUne21EaihGtNOR8$)@mJtXZyg2+he66V2U%Z(KVx zz;U=n`=8FK0>!&g$k`5H*W$12}usm-53yQQK{;*v19bMMdOdkN`)(4gyZ z`}5~Y#hPA@xIr+hy}Js?j%v`IAGQTIvB?LDRA~TQ?r$@(7ipOn0|&ob;7)nEVPLk) zTdSAwh!-BN<`}$HT$g!|f?_nN#tg~kh%Ec)VqDnQ_oirV-xGKsz{)pjwxWFC<*>b=0g zW0iukjQ&;!p!J!Gsjrd>aF|+e-7L|zWvHDFn8EBp!fW<2w@1OGGt~Oa5H+0Izo{kw z54}Qam9lgSi#|Siz4Ir)j^A}(Fp%25ygy=QjlE{;m@d``yAwjtHCd0JArcre!xMrz zzE!nR64CdvnFI#9JtP_~Psc^0&ws}Sl<+Sccr_h9dDuI9p+D1hNs@+_SXE#Ta$k8} zS27c3v$QqKTk&erC@`+$Rbato(M|N+uA)jEqXceFf+$Rv%k`zXG?sbQv>8!(8)IN{ zR5tMMH~LpKDCL`{y*{-=OGLmlhs(;CswZNptN$I%N$f}eI7+LdvU&qS*tZNI1MES_ zbcAclIF^Q&Q&%F-a5piW?T}R;q-fT${5jgVDSm?iQR{ST8=KX-VnpeuKe0|Q9J(WV z#)#ha#IDWSa4r(q*4^5c0UsQFW;qLIYDnOwm(P|i?O^dta zrz0rm4|Js!&mRV{&JQJoD*&)`B^g6-omXB86;_x%jdUwyH+?4*id!Rh3l$lkc6nUI zygV`*ETb}telL`um=+WA(qQdq`AQ*9MQP|HiXrV~FKaJG3cJBeb0?IW1$ZrW+a z5m{FKGn~<+g3(N+p4HQQx@NNecFI({bE4QBq(glPxg?zK{GDls76Z?GSVa%~CpB=q3?%BRuo6w`_+5NyPvV_u}maQLd5O z17MqWI&ea}E!Cp$H}y;+PV*vSnl9zed?S{)TUQa)mpS2|2|Guy&^f1Z+)QGLbERX< zil$AhDussn`%q0&@EzmmfJ2qvkdwGi|f9V z4$s)7=no?)%sHADgDm^Tf>Hh7T1oiqsH2oQ^3V42cP1?6oUFjZD199u4oU99CAr!a zwudY0nynVVKF=47p%OL8d|=w;g!rPRc-di>P6qVlW{E?06GzK0_9R4ZEu4th%zXSl zAmF^;wPO#+e@dox0^nzO#Z>Gopl(gCzLm5-;~31E6OtU_iEu4v)r+Ol1G#Iny0 zL?~toxI356Lp#66op;Iph{Wf4*BJFTHr4jM7Lkl@t~7R9AS_r@s1=j=S=mef$a$o6 z7gD_T{-FDwZGP6{5F=BXJEsG9q;j6gJV6Re#uN$&=e=ERGe?JM@2?p|$8=es17cO4 zk2qScI5UZlOfx@jmCg4u0cK{put9PkMWwN;y)Fg4kWfyV(j$c7$aj{LuI9TyY%yC@ z<_NUwDb+ewPiZ=>JwG6qsP1qck`pI3@}?O}_@eVK!Ai{TRBGy9%)}vsQR#~XWR#+( zv>a{M&*Mnt)SKsDd(LDXatZHAv+0o2C*oCBZBILG^VzerOi2*%lUw&84 zprdXBya`?nUm?-|j$L52^vpg+nL1u;=5g|w*%VMthYHHqLKNy#5(d{`|Nw)0N+N2dL-uQbx&@mFk=y_+>BfYL90 z@YlxK4Y;J>AkAJcE~MOQE_7ATnJ3cn5ntaJE^{*bahkVQmVmH$iMuA0MUN9C*QPY6 zgNw;jz_`DKu2wjxfcq^>_S{hM$P971BJbmUo)Cr#QBs|Ag<2ekJlaeD{pC%k=Y^KA~&he(*uG#>0JuLbp*H2j>EN~F~$hpL$}b5$$cGYBq0QxFrF+I$=8>^a#&pU9 zRC}W^LR3QbNeejiINwU5FTjU@A5$a5XfCdc1iSAjKNy85mK?mcyVcI~H+q2(zGGDu zeZ)Xs>Gjvx;UNyM2QC}M9=8g{SATwS-x-hT87@`b{%Ih5Wx;M#&KZLV%cWC{*5|%* zj@k?@i%I$%$rK%8F1~Xa@Yx6`Ol2uNJgzof304A)eSRZ#1$K$Z?~2;b9)o;8+FHHY z%63DNo+x(WDm2^E%r>RAJEi71u;8v%bA}iK6bt!`HuE{=R02jd0cBF}g4_uf2Z&b7 zrSlLXSAvN33b|fF27xu#6`7`;!?cSx?T9yc`j!5tRQYYUswX>6Hq&NkEQff*L;!2r zZb?_2)x0mC2^o}+7fLzIuN}$GF7J{Ocbm+8!gbNm`ukNSUfF}B+Jck)52z>x&+_Jx zlZ6lv9Lvn`WUINkf=vvbkd{Uf7|8(j4o@@kjde9*m_01dmcx@MLSTVqS{qA^G;h@f zvc1o7v+>1*wQZh@H}=Yab(larB1Rl?>h-B@;vU&Pn}BT3URj~{>=?gjUCgR8KN=f% zmMo<(9?t+12uyo zZWA2by}FC_8RrjiJFHt%S7L#P@hjwYc$^>kmVr!;K^SeS+qK$1bspAZm_)6?pPbaO zyNg0^c4ghji=|j)f5v`&JyrT3p4VE&v^82v=f$veoqKJ)r`_(>cf^=I7F^g^CLI$I z69xqPqSYnPDNS9XOnmb%STI3hWv|Lng%&d^CQr63c^u2xO*@Eab%dp2J7}ocyF*#Q z^8Wa+btaHl6*H$S+4^u1jK-mfqNeD;i0ZcaI0C-b0rBB!*YyGn$s-?D2V+2I5_yIT zTcY=KepnHkB86Wfm^%IP709HuDmW%fbVIe1cp}|BIf>~c#4!ES9fPZSd9M_ap{HpS zOzJ%1w}wwS?c{v9$=)z&S49zmg^ifYKaSC&*;%sE{ue@0Y-_OxNK(a-G0~;+yddr8 zW_-8zu+cZD{Uw~=Gfmz8M{jOXJ-P%PCL zfQ^^sm;NX&2`1PZ-dDk;mg6RV%&-#k;S{6J2)X9Lx-G&|WX3U9`uiIR?wk!XqG8zj z(bT-hxc*%tv1oRzy8JN`$4V*mZ)a7X(1lQ z8rNN0$!Xh)57t}lsxw=x1)ZLPY|W3tQ>oR3-y-NkSV;Z;+$TsEiEd)eKj-2!T<6+~K+6W|&ak;nY6P(1@OHx0mniXR!R0ylgbSPvk-kp0+Bl z=AkbJ1lF@s{r!jZ%=*m2r6p!=I1tzPb0Nd{`OnH7eoqE{8udI@+<@xR?K>kT@Dxe+ z{U?T#2&t1{S*<$O&*hEnIkPRa6=9h&Q96j0&u_1HBVJ<(ykp|pMrqo(3&1N(uP+u6 z4e}8dMWiH%xWdWKW}o#G--!(0;6MD7Icbw?Ytxi#qpRgMG%xzE(=i}0A@#LV=2k;1 zF2C`8TABOO*)>#Q$2T5y8-nxp=*+d=hwOFSZ8@ zF=2vwo^A3ue#%vz`#34xHJ(i|vCkQum>ak9u^XQhU(r4|&x7Mt-_Fse=P8SEjIcd5 z(5Y$!dQgsX$u;}uNvk(AtO1u(AMzK~c)0BmB4=2$=DX~nv7~?6Nb-y z4ptwnyhx_(@_W+9?b{RNZIqU5*PXx=lgMQqq(DQXZ!9z;BRZ4WB*0l-=61pWj!CiD#LdLp(+Pb)Aq$vP=!$UIj^*!(5o=52y?bAN2?tKx@24vm3RuV5@G zv$Ytma8)=Kd#>NoDz}qxhU9PNC48CT1wn?O*w+~cQN^Mc@F89SJcKaxrmq1O$P6(+ixeSb3?7ndj&Q8cBH`$aUZ(Mrtq@2 zy6&@+dG3EL2T+?SO3wguN%KW*2VWn(G@IZO4ddgxI?wOuMETKrhYy?8tDIUrXy93Lp%3Gf({E1hgP#)w``Kk#fr+P z+)HX{JtS7BH`ZK^3EXS*ti~`P3p6Sn_Oa50CsT7AuLq29eEkZ1T$0{Tco$<0gB(mw zc0J1U>mh7@u`cXGA(}6z)@!K2QAj#)5Lr)$HM-|CwiFSgbS4;IH{pZi3>)?CG-vr| zOkB&jghmt9c2>3ML`u;?QYhhOLW2+{@1col3ba_Wis>7NjPR^_SCiX5*=z)wvbIT+ zKDV*S^sj;m?-qg>zE^8@YH#E#ooy6@1^@$poX!+07@(Wit47KGaJr}w3EZ8_N{-*s z=&Cm-l{TW@!1*8=@CyunF;$6$asT68SnF9gv41N3-3|01qv!0ZT4+Eal4bXDs8Da5 zHF&@@!S@xbnRnQ(zt%B+`|WB#Hqie|mMS`bB3P!ZGJHEMa?GvA1v|4l)}2nNk#qf9 zO;D zZWSgFk@RB8UC-f|F&>RC@IA$uc76q&C49q4aKFg5Jd@DZ-&0m_j9 z>ggSlXGvG1{siw%fGgnh{6TYT<3pekiwZQ`??BhiQ8HR@Qg8wCc*(H5Kmf=KU(C`D zUnEM2BryN0^gUeu&hZ6_-((~cm7Rb>*oHmPXJRi$0zyi5@p;pEe(DTRo?ySTL`}1s zsvuvvG(4AA;cL{6?l#DF>izJTH?dNEsv#RoqPMG{h#mN@O*&pp>Leg73yI$L_JZtNXpiVA!QY`hCA@X85U0ZCE3*(h*z{rakpVEmcIQ@JRFuXIZk)SH27)!qx-<3wzh@eCtUe%Qf1 z_TROw)Rolt++{FRS4c)I4V?o`+Xb^5j8k)#_34TxS~xFuCv%M!ZzpzyVpirIn?T@l zUEpv(5pF<%MAOG;DMN;1!-tgx1A~a?M(8@eqiCjn8|#Kpr&}kGe-yLA9x~!mC`slc zGogERoq#qM<>5~Yq6d; zYY(%cXFh4P18+@NDksIwe`HZ(H=E@Xv9w6EB34apkBUGd#krrjlV2rhRlDJfi!sSZ z*_!LH_OgiK*Ti$y2X3qh8=uNYeV?$=f%K~%(l4aA*lQ>-t=%BQh@nwkR7pAO zsl%3^d1uEUaQv6P9^X%+i}%Tn8gYU=r7HXNU+S_Opx+vFs4Ir@HpD}BcyIplll)L9 zkSqDa(Zb~M$XXZlTs}8mhdU7&b$K(A6C0YaG z(S@Y%%E_RK9sY{UWWCd&_|p2{55(Ck=^+-ra@_rwY*>LXR`Sddi~4ZCDBWQzN=wy6 zLGHUI0Dgr~1XrZB=iPFHHHCgFHCqr#SE5dySgF1lqT0hm2;8ocumXw+p}%np7$uR? zsOV}OE41Y;R&0JQ$@pYWN-yiz)eA90o_{^Jn~J`C(Yn1D^zn_S(Yl&N$$2B>aYSz% zQcC+R6@qVCboi9SUqe>|-y3v4SW5ZIupeRh^8oKf}fN)+L;AV5{Kuq zM5Oy8I`#lRz{%2;yYq0T$?p&+M$J3iw)E=kETh6{ zQ*i{jS6vVLeEq*Baar0EfA52k<0YpgM3R0IXMcNj9a`1uFr3&V{H_&J+AZd{>3>NH zEXV``jyrMuZ@=IMIxL2_Tue4=n6*t?+*XQwKFv3s2!hdFWR|su!6(P%rpE3R>%R-{ z^~ig%S`BjtjjEz~xKgxpW+)lg=h$}pkR{dnBwmjsJp1h@T~+d+KA}&9;Hfq}2kT7#RH&8w9EvSz}`E1|LN!7)aRhxQZSag6A#oz>^ zU07d##;0F$ewU$ck|FZ=D2*DgGao+PiwaeW17*}DfF~Io0l6%EISaiHx@*Z%P4kIm zY>Ntdn??oq8lgQ%cQap;_bAlX9A>>V3V-|7sBHDp>u*&<{(z=dH*Q4@NLlmmlo@<7 z{js#wSAI2{YP6%PNcTdqpTs??9LlD8I7?j(NZst8T_AXO8o%G(roYEp?yK4v*F9Wo zIc_h#?$qPI%r4!xYQr)|K`WLLnTZr$;U|)GaXYXX^BCMw;crCEk$(bqaj{E0#)>%| zM}?OiN6BhKR^SsGz0ccp=*&L+rotX@UWM5SCNZ}u%zIE7RNXrJ>v_FjXX^c9K5775 zA{w6M`*@gE4P~Lb!?n)0nY4aCn2$vVHY77~JecFY&7({5&yqkrvE%*~V0mup8Sbl8 zi#N5UQgN&>MJr-@2TbmiolFd{Z|K5P|_Q(YH;TA(Us zSn!T9J&p(`qFR3bepG&zFex-82!Uw zeRveiX$~?o{xW{6TtmP?6{?sh{qasp>*t&s8ih{@ z>!KIB8=b5O9$N?oJj30e9Y-0^o@X&mM>eF;$@u)tm}pr4+j0N-+E8%n#K;A~+s!a% zJlq6!}?wbtzg9bROX~1JjZiTiQv6|aF+JkLR_hu(`;?a(GanroBMlGw3Phg zz9`74@@Xr@9S+{GZNV%Jcw==xuq;j2-y@okOcDn#RF=CVd_k;>Hr;3r0^8@CXlmBhKwA1j>H?zzE%mk0PSoO*qDw$(FwO7+5c0@|6U z?ul!%qEi{0+rx5UJ?ikHP_`qzjjRC0!1PyRuDsd4AL`Vw5zYdLQi~p(QxrHDgU|Hzw8Z7POK8K18$0wKIq= zXKs3x+cXp=y!TB!&VTEpx0-k5s|=Aiq+E_jTA4pG$fj~wk&&lePsCb=a~?Z{g(?V8 z<+7!9E;_MU!Rm5RWwJ-gbzr)ndfO~9m6ecxxF}b0P25EObabw_e4WItg-FLKl5m)^ z(X6I2g?9ScruJj>SY_a#vTJ*!T%AmGaUjbJS=?V*Cs(^Yl;Loehgf*69?5W7nxOy&(>;A^PK#fpEw3CEk$hlEU1tRcr^QM>TD&E_zvRh^cy95G~lrmF}P1 zs8;J!YXI5-#_|`nT|PV%U;P#hG%TME{5B@Mt$eiOtRgU$_ zdd?HKv=)_;)8gCQ<27;H`XcF@0j-|71VOB+MV3?lUEkh10t&r%+S;ghbtn>EYxPrf zyNvmJR!3bOLw`P%LTtVB*hnn(P6ChSLd~nOH#FPS=hX{kf+D5a(ZcEip>>j|@GSGP z!-aTToTomMt8rj#ZH*0EiHK%`XD4N9UG1a(Pf!8g0amlz;5NE_?9q znKC>*t|MjeR6b2BncM$U>8Rff-L&jQ5kJ&&xcH)btMzOZ1w#+f*Mn+F>d}sz#o9+` zJ&OUZTa&o%EVlxbaDAvKs9d5L$|jyxRkEi{(04}8#*6MI%Bg<-3$ud5_VZU|(ba=1 zBm?ry_;fOjoWzd?Y*HNM+p5uEt%QHWSy~bvt8L3U*84dGgB20FNK*w_JyJ#bE0+gn zrQ=cO2v`C;McF@-qa?%E!<5 z4qeD1E8e!|rpZBahO9J$)g}@A!XqW6E2aUv8`0$m;-%HSQ{;&ql3k*iu*S5yUP1Ox`IsV?0vzgT)K#+DRiRmg&p0(T<;YbTiJb}Er+ z$UcUEiocvTZoU?bd)D->JBw`|HoyZU_m$tRToJ)jnIuPF)A?KtPt&$T*XL9BbeuIp z8ZmS>jxGm~idMB>lmxVL#eQeDj6K4fytif>eV!h0yssv|+|SuCMJaVB6rlwY(O{a& zXH0JpM{WeB;N%^_Q?3XDQKDv_X$!c^E5mGNi6p5r2}XK+7svPCm|GE`P*N4Y{b$e1 zsJHn%3uF@z-Xh9Ir$NWrmZ*$yLBM`=r4IUawMV_pTA0--(C_BOLap{;ZyY1xp zsrs!VkmhB!+E81RzdinqE4k~{Ln#Ewt#cdrtfiu9gw9`}u?an8!{CocE(a)a>~OdD zAAvCR?5{|x<{wcqn9VJ5DQyKc2L?qLv>r4HtgHK}+ zwhi2R$+w2L7`IuYlSQ&--rQU-maFY(Hk%>TQ533->a0w-;957Ot7P-J7E<9AWULf;5VKotB*&0NG{Dl} zd3mo~J&vTbupqq@K{VA&pA8nPmG0aA92_wwVN_{E;2#B)x%SFp1g;vVapGlO*|y$# z7TDy{pOeg{ak3PuFia!P$>B-gF3-y{mkG3R%M&EfC`=WPnCw*%_dJ3N$~{fwl&h5b zWIcIq_9x(xmW#rs^s?;lxI^8c4RzjfSQXEGPeYgH7itX5J=TT3n4KvUE|XCNN(y9|w?Mo@MiBFn4%zwe$hMx>&12x!klf-s(_v za>9;ctp{PY*K$FI#nbErHso%{c}vRoQ*-aK&bmHb5%ev5#C=o8c=yChBOc>av{pyV zN!YyivcM*3v(9loVpdwbsiF%mQV3Tb_{E`Urm{#!|Cq^_7^wJO_R+y+$^T_k+zsw> z@^5RcM|QJgk)~jQ;Y{Cs`?2`1K)xE_Cp7PZH};gG-|9=_+(sevTd~&cLwo(pk86PT zU9JRAQoz)k{R|pQZaaF*x*U(eO>VNb)NY1cnY6%+LwH6pjqhlkskq?z&fs=Hn67{| z{rnVaxTRL6uhnFCuO~nu{Yz7m%m^j3lHl7PsF2K4RCXD7d1zN(S7t%~pr0Rj&o69> z(V5AcUkvHgYec=Tvf2$Ihmv(XlyI zd9T-*mp*G*$&ri9t5dEShHG?}MC8lvsLVp*Sx&iCi*D2Ed3=W0eSQE8ERM^&bH{b; zg|_PD&SXx@J0B^gU&3`4os00L#7mr5X1=6&G(up*6}ve-I#R>Az}zbYto`of76^P^L_9Vg;Aqi~!@*%jFX6=W|^qX~G*juYJ+ zWNIKB8b}-(R1c?FO2Pat6a&@LcnMYCngi@Ny_byF)AEo;r9J+uwo~CQ<@?0+GbdXB zyb^dDtf{np*r<~+ITnK@TWX}R$~2xANTj69z(zwTed)E^O(%eK&2Lah17&>C0(epP z&Zgy+k(70QXc`VBd&l{Dl}8Q!HX za=c9P4WIFx7MF=YX?8j?Uj3BYYsv(L0QeZ_MT}>K7vm5rFc5KismI0 z6i+35&zDXcOSEJ8Wrr_gBnJldjP{lwq9IP!JzL7$xrpF3gS3h4-f|!3t)GE`+CKbw z(PWQpp?B3b*)#I;9^OmLj0fBA(tJypo)GT_xil$C-o|7%;R*@g8Lm3wIvi$boumx< z3~D=)*7zqKaMfEDLc7qI>d~*z ze30Eu1gBn1Jl_!$Fp^`;9CS$YO)?s(5%%<3(n(8YuZGfm7|T+NE8{a*S~)@`GMxm5 zr8!$(WX#``^1DP7Iyz;r@5~?S_Sz#Y>VIA@juYnN$dWO;Jk4`iz%EjSs|VRrw`Q`a zw!|jq)!eS{uu(V-kS)IcB(Sz_w4(_yD^!2oZxcGtmuS?c(iJdnGIf=$IQKi1oVXE* z;oW<)9y_DHvB06^2vxTCf|slLXp7(*ldlEpZ?xUB1$?^HSC`oKYxjV@VVwEu->qk0v+SZ$BL5H>M z1;n0K(%q6xACm_9r2MUG%?K$Uq;4nW$@uE8XC@YB1 zAD_P@YccJZyKb_Vmw(~h)NH9)QAC7r&y)MyZ_QK*yL;;7I*fT$ zOZUugfNFD+awJ`;lt25hi}8*XF6+lYZzmXXv^8^n+nU8eiAWtzRFiojc$9ut30B_!3FUu&__f+$j@oD0kP}{=;SvrN~q2*@k852GG~I@Ar!>6Jo6IKj zuHxR2=8is749)buhciH^IwlK$qb5OO2dScXG8F zc1^`b*_%{=oMYKGQk4GKWoBk^#rExFvhky_2g-(X|GsmMI=-PsaoXgeIW7On@$}d8 z#8`|Z&fDv=QMiEb5zD4&0nqeX1=j+vPL&|a zD)FJgqEOW?)&ZWOI7~D=574X=F)ST2aVq%7t5Y zepxzOSbQmw^k=_`j1dUQ3db^FS*)iuQ^nWJQ@)iS=#2_ts-GX|qkL zP~So8=9zh!pDYT`x+3yaeRS+~+eaGy%ac8fj6hf7)>r2Wp9Mw|eq%m6XeuQG7=O(c z|32nyldiAQELn>u-b0&+hsXIohL)Z_{)1;XLm!g1zCaU``eHggMQV(m&UXw0Q&uXP z9@p9{d{eS4X80F9^%P?-Z85iiJ#YU>1ZMUcVT4-jsK_2uP!cU-Kfp}9wdQk(pR7BDDxf|2?LdmZj*O6^W7f=Q zd^o5GyH}Kv!K1XC)*OiUY^r^`o=%&>D?kqG4+twqEPjJF{r7u^}WS<$UzhDaRezFeD`bMjNy-ssgO-lrrhcWLAOG;vh!E_MC{+Zay!;- z@CXd8JQEwl_sL$piIYD&jPHDz5$kNC!WPI&;@x$O;gj7bet6_JZa>MHn9IwRXX4RH ze`IC+JWmIY%JXe!Y2aX?PxksOvC(pOno<5?SuI)kJK%UucdroOE&v)Uc z`!~X8L$w69oL{S@74sI~t1zN0F152^uWHRHfhBbyg&3=7(rJjckxxb;)IajMM;nPR z_w!5_e0(|o4v<;x@8frf)=Q#L^nKIP#%my3bRLVk&Fzj*>)km}_~Kl>^})upWuMD! zoE-1jOG6_iB+lN)A2-U$OqxjudB18N9|rNDcQC)VCSy6z?ioGdw3exqt)Y_)FPcS* zxuNZM@8d)sU)~Jz6dV*-<09zCfd7lKw+d@(Yuj*F4QVM9XmNL^xI=M*yGwC`yGtn) z2<|S$i%W1zf#3v+J3&KnciUO(+y6e_@7X-aHIvLS$9VO*DQ*Ty5Yv9q9W`B0u!?Y> z2Cc!_`FAjX&-YY|tc)j1z&Z}s-x*It^jBYKzzaiOkls~1d_Lzm z$?2$8=;VyEdF5T0M+pF&H%NVWbGCoWAmUD+AJ)cZDMfv_SlS8S-KItOUbNWQco-IbYR;R-4|U(^^np&{4V zlaJ~uBowO^K!P>59#z^nY**g*Y(aiBb=9|90zF z?LteJw3SX#ZBIJ#K$w({EVBf(@oZIG>(`ykGh!ZQ!RBp?8It!My6pad5L{QayX6tp z@wW}1{beddi5IK@-2`<>GcjF7ckHmT1z!wm6t95_BbVXizfz?f^eq-jGz$%pT|V%w zk>(NAf&u;x6s)iAkK;E*sv?mM@L-k9_l44-;H3d16-D4c_DX<{qu_VA|M?`}$0Nbi z?vU`$O)ivggN$-ih-=mhE^$!tJWIFf^UfB|O-}6M5~5cEUzwP{Hl;7&Dx9=Vu9(cy zUXkIl{lewT!>Tl~VXQb$^5xgrwO$-jM6e8<$B)fy_InkTA#ygj%HRJ{A0Y2ZKV-J<^@AQF09Az&dxBF{z{nP?85NC&~BQ|QmCWmE9#JNb{5KnK0pygXGD~}Sj z%e!P&MwbuX8J$u06Q?8JKlR2b>Zzn58+Jo$cl`sB7gg$J5gKzY^ znv`2ynn;0Yx)sHnH zG>=qVt4yKS^nTt!3z!{WoAYE6B;Tn2Dg(~~f1)GSl)OXyX*^TSLn&GQ_4?GVVI@u; z-oZe*MK}h-==`#1SDH=JS5HUt9=_Y#i@&Y@*B)QHK73*s%GE;OxK0*-R3N&`K3;foqX^+3_S+KrHr zg+6YrjFCC~Xyrgm@O=#t$iO_#mCeho=dYrdma4vn7{~;3`&2yMp+Ul7nTT+1 zaatByrf2U&xiI}pNL+G*>=l1(t`%C$J6U;TOsHTCNzMJ3ff&XqCL85NokernNafjx zx;Fm3W;}aB6DO*ljkzDtnu`5<+kJbyp(Z@ zibp(~?^6zQr{G}wBLOc&j@N3&?Rcx(*oP*&4`K*ASj45Z)K&3%tssp9K7Cj~&)N%8 zLT|$Zyix!R{%f}$+;^YPjy4VJcFnd<25kga}4L8S|cZ6Rtum?yes z2~wjdwD*g-1iBZ;s(^YwkxIh`fI-pzVdUa^0x*}n<_9UefWE=In@m?2p4|CTf5_mb zu0vBYX`i~r$m0CH6^+L^PrZ`iiZFP<&iw{;8`sJw>bkmwr{l;K2SmNGglrX|jwieA zeCVu6gSAY2lrC6u?}AFy?S5)+=nO-Ir0Hx?mI9stwCTpZC$2%M%MpE09%Y+?)|Z7m6WQWcB|ql>AlW}(f8PFi z&w_=Agj5YaCXh>U=Y5>O0G1^}c)m3%nUr)6AOYXzjySs_@yG9vFbq60_r0R5?3jQh zZZ}RufGYf~&BiMVQP7L*dCu@|X@!l(N20*p=V%*D3i}<3z`?oH1mbb|Ay;WIb;uO8 znAzaBs|%q->P%FKPAX=V6_`$2Dw|Fe3;a`DQa^Aa7RdJ`Fd=-mAK6ePkV&hykZCiv z!EYzXc)B13E!}=95O5JP2=^?UpAykUDr0z;NJ2~fNqj;cjWFD^Ta@>tp`~=03Tpz_ z{NWakNeRrEs2y2$Udu+FeD=xa*GkwhI@-)fe&JGbSl&a1sq6+?j2N`KyR%HK7I%ux zaKpb6iLSUTG5N6=eaVHJ^oT@?rayXP;kW1Q-ZHm4tv30&e2rakINzQR&^?%i1`gAq zFik8=Ag9cmxk&2`iv*y}L7!JW-2bzudmnzO^UU`aLgp^HI!IY|&X_A%G-0 z^rQ??ua_Z0e1&5|oRU&C4!d3a%E~#i;nyE4Tn2|;cb-M9Ld&O>-Q|<1Wj3wjA~N3 zMAAyVSq)@f=^?fr-}G}$7YAw+w}Deg;dm*Gon;^%_M9tT#Y~Qhl0TVQ;A2?BO~E5M z4(y0WrjGwC*2cIBgeXCBu&nB6d(%3T49>y%A97KnmsLj?<$By*2#=fsWXF9_1yTtW zZUksEqo(}EYNXGd4z&wf`*se~%NMGo&fj2;A1R!dGJQVK9W&ZzB-KCLXg+T(s!!U5 z=C6~MUAvI>8-Kbnfk-SBKq-*S*D`x5$>Ge|18La?CnH{Z?E>`MzxFigV)DOj?6J+ z#l>&jw4>pBF%Nm^-`~CVn5P3lN?1gM#)tt=bHdN&$V}L^wR+8B@`JD7JIrtpw>s8K z<&wif_A_%BnR|N2_ieWU&hZMtZ3uDjT*pW#b3Q2~(Q!ObcIj$lp;F2XiX%+MEOEcO zKW~M{k?I`$NG-40Ec1@2A#XTQ`aE683)5g+3dd!WCXm_h1Tb;uPQ(j(Q$fd3V4%?z zbVl4(1Bo>8<>d2JDY1TfIlU_yDQY+FOf#Q%V-N*&VvraJHdwH9izn$y`2q2lSZV9D z*>6lNJ}<5Ps{771m8^S>a0e}6vM7CSV&@X4!I4wRKp)vkhJu=I1m=wqv+paqXB(d% z8+2NnDBiQb0v7l%_r6WZ_bJY2i5SF%$?8osF}^pc8X$1+L5e){l*>|MPi)o*fpEmL z7`r;yl7deyMGNGkhA`4=vp>0oaV&s8ed@{^+n{ci+rsNEEty&C|1l(B1O456Pb9X(ZHon07%X>W<5Tah zW-(PUykaQg+^PU9!OuUM({vmpvy$+R5Dd%vvPt;B>pd~AnjC20=*mc)@FxV)=rBtqkwOAzuo_`FRU-5sj|LUcjzCNyGK3fZHmi+bf#J_fHvX%bM=M>t^4~BSY1gj$tB4lygYKco8|LeRyQvTWMnTKtD>p{zj*V8}q+9dg0x_!!G8(Y0#ZldNZ?Ooi`kLIi4R;hZb zG>+O0osY@FXChB8RfN^Ts)^ZLR?Dxxs8KlzQAbYy)Y%_T{CpJ+ut!L3{qV*=X#)H(ZE z8G_^EJrXa;4o?|Ye+clAP}$Hb84v;S%I@7ZZFEnxj5Pv3cPKw$Wpb`3f>agoEZ$)I z2fkP_t{9A`E#)sy6(}m#*gr<%{14Kq-d7pcpEdJ_DyL-87x+??YqZQS zaw*t;>5MG|*I1Vsu;)4D~7l# z%l>OSK{4SH+%<_oMrD{dg_04`N;IMZ(n~YPS6(c5>WV`Io7CvYY+j~Muz3{9LdprL(AU^FzEOXRJ}O$#1ND$@7PSs;FR^eK9&evN2QdF&pQ=pOA#!jR0DPMU-i-qLiV4H^8`h=pb zLurT_xmgy&7|e8ZX*ed(1#Ziab&;c%HU+)r5qx^w*#1k_ZxwJ(u{oeJwDFY>j6nlG z6o}MZXqHoC%%Y1ZoBAr=i%r8Pm|)A0#)f2a#Ug^u2#oiXG`hn?A0_@)F>Ey0ZFNML zCUNAZ|3Nb=jviXHe*W#q8YkpwP^nIjUMCeUgOg_8Pji)-xUtpVooMn|JW)p1`(xci zVyW6TurK?gf??5gyC69>yGv4K0KLBb;5p0>p8v=3vj_M8BcPqX%E zcB6@5O2rAOSu(5eR^V!DA(Po8Q{X4^oq2}mND*6sh&Gv}SbYZ`R!^bipy!_}d-t{# zuGV)s+^oFeH#BqPX3YxDMTiBn zU%F;>6IsnQO|+zFxaey_`hS)q)*n=CqrCZ+UMHq_>HdAXJ4<3kiKhB7HWX8xD+Il( zHhuL?1((?^FqYo>VUOtlK1Z4p6#FbOk(~&}a+Uxad!PG9aj>@;kwZ6 zSit1OEwNc$qM27hLWWG{)gN2sj*6-+quq>2%)n373mFzxB^#<(3Hq*Nc(8Uljm4;5 zPkPT$?aO$(u_ zqHb>A-~#2bgGrS%YatCO8jH74;%ZWK`n5w)#l9SBfoy}|G=86rBL8ESG>Od!KGw~G+!e<%7Fa+@- zMYt65=ZMY~o~yEx0{hGqsm$~wiSPo%qoQPKM7ht(JWttbx@N*@6X;096?Et8etE_e zeBFPeDCS7BwEf5UaIh5}!||lmlMP-NckXh{TG{qhUFhw~9NB+MEe9@%4+|2I=cbRa zS?x|gmRGxvl5scii+2$6tS>RpE1$8EsOt_#SF4!@@7RaBKD(1ykrcUsz*+R0RyIQq zZp{%C@ovobNY*PlOoq++YBq#q8Is*N(yqGSsB%*|K_f$g@v4+9`#D$F*$TSe+#f~h zQPj1>SCXDj7I5#l#h;;Dq{4xcvoXDHWWQP;bGYPHYkqCo6k8@fK=+Ap+J#+*waebq zNn*#f$_C;uwB-4|=W(gu-5#7BKqtgl)>TF+Zh~xV=G8vhi2*ElZ|@#GPxXPor1BpwD(iy(KY@Wv6XiA<&V^)g0ZGIK#ThOrwF*feFjf)EkcuyJu~nY4s3zF8^M}u+~|@Au516zJh+t?Qu`f zA9=92s1 zLOBMHrsN!=eAyEUBN$H67!dIM3dt5@1HS%{Yu}S?+ebhwf3hG+aw#zSLg3i%i1S4q z@90@)3-M0tmY=G^`Ja5r>~?G=sl?>{CW_mDiDh9EVAuir`u7Q1s%1(z$9EUf5c%0s z0L;a{mY+k~WM^ZW*bp#u|__pU;?C^35cP&U`f@VaOp;bbW@HKtTzOUH}6E8Q>G zFunvme8x$<#96-I=6^oe!mxVEJY%MtrRM%~sp+@xY{#(L5&MHV+wAul%B zia(?sj)bw1ar@jc>o+hB6^6C7C<*pxQALOerW4hO41inhkm-I#vG=J`&UBnH?%|8Z z`cie9f>}bJws+Fps?{EZhr=DZ)f1XNMDNH>ZH3Hv8w*_vs)$a3GIXdx-94~QT!NF< zU~4j%k&ymk%#&yafkW`Y(dDZYlh!1wR@3{1j|_rxP=95@XMu?Wb+1NNx`XO0`-78D zIhowW<3}_s21{xU^6cet%PJPy<*6l4;5+!6cBo~;Lpvz&%@SwJ&K*3`s^XP`E6HxV z(1b@1j_|B(LT>qyCTe|G05wV@>F&Cx+tE9B za<}|#QHIt!szOi7?Q@ohXm6p5q_3mG@3t;<@>F}3-52ekK~ErXuizG0T$Tc(EopKMouMI$`uh-r>5P+A*1BiL=J$Ft^cuuR+4h`>xX|qQld_l=k?x8wOp0l=EGRbpKm^7{ac2QGsA{5vRFS-t+P+QtyN12r zzcf5Y)0#PhZrQZS-cpDMeLivOe51WKs9gN9I}-O{Yp^FZF`Db?W4jK^ zS9`elS?AHk-}NDi8n)4uro30yjvIVU1U%tY=4b0rp@M}{awU<@8`pUbBkuiwy`l$7 zcO;`di9XYdtN5Y$BcE`u9eI#^zKYoTikHxaz!JX0WvF3RH!gem=;+-Z)zw<5sNaG&i@t>TUE~&ny1(C4%Y^D;tf2H!9M^K@ z?W>Txrjpfch1ZJAvOl^j2wQc!l5&{}^cMfDjx`+cg(hx}?G@<#7yM!6Mgi_z>qfS&IO5Tr5%Qmm8_|U06sb+Fm6U7O25bf;ZhEcN`rOxC7J}M zx{JURAi8Dj%2OrM#(1ROO+56FM5@dmMp(DY@T_$LF{F644)s@&7oH5;Ee(+_ zvQ9jzwY%J^)sr67ua(c#HfL$ZdyvTR!Vtc82oT1yO8DB4$d<{wy&>4-8JOme@`@JK z7fiVpR|UM{Dp^l_U@0LWnWLLHs?g@PuZ{0*`JADY9!(cbXY~2`@n)c4A(M&26G%@l z^YrC@ru(2XL&ho-Ds{m6vNW}1Vr{|OF>c25PJ_63O(;9CH(a%LN?x6}{oE&9&%5#h zKfj9XH8+m%HGUfgk^Bgc+9E>W{{o07y?+;%8~FqYYr(>mN`zICex6G(^}9v2l@pw! zeX|p{U;3cm-d0RJxs}m79lhCoGNXMd7!O-6!+zCYR~whFdxsJdGG&?u|GqO2DYNv> zcN>JmqAL#?T_e{Z0-s7zXt$OOMEPEh_o?+HaNHRyb4tfl6Wx z!hz!SzTkFMXABepG8w4-u5zYOxEn3D(UXc3ytzhU+e9RJuQvc1bG8NAdQo~jp*&De z*!N{*DEf6kqMmj?}2pQ|wEmaH-4Z=(D@X@A;*%_ei{m&3le2*jS;I0iXv6 zaD_6xSplwik=t&odZuFGim}G}RSb>3AN$SrT@N4jKc|A_Utg?lCj!w>g~6&B*)Miw z-h@oaB)2!+!LaiPNzBxee5d`2*$Qj;BR&hrjVsdZP3rS{Fv3*ebEWEyblhbIAz@nk zs?ELHO?T2sicBS;%!c!SzNcC;t39<7aXU_alX*|f>A(4Dj8^b7%JEn08rS5TGx{!e zqb#dEe+@oc<@xam$t8hiU$n-3o}VsJv(wDRAUX$G&O3j81lK#lrDjqdV(xsG0KPr^ zGN~+S)CDqA%EK$(d0V%nsO*K$!C_$~qoRepe68KBDI&js-r4N(Geu^-R@@HD@%=F? zHv6IxZ|+~Vq*4`#uG5tf?loS{ut<`Lo|gHBbC>z0qjqlF9eAs zB>$bdxj0t5*KcH;{Y4i;oU)ciw3*R_AnNADUWL?2|CbHex&ALq`4q(i2n}Jc5WeHg zKgRLwF9H&WEVsT(r54rTdOXSf9L52Y0kc76D)p*{+!L(gx{2yDUucb}BBE4o56&l( ztLM`!yR{1rY z|9CL8L4jXat;nfiDUm<`+PtAzyv%_8{$w4YmzI{j6_vvXSRE`6N9#i8aEd@H#q6BN`E#=%#SO3r^#uRYUAeOfYQV49G8ohl& zRu3%QDdI7ki~W044PpQE#7Wd3-_vu7%TUCfJ3K(v<$j|f>l-Z7&7 zMLKbW_lxOp3CNHvvPU$sl7|F~q#k$f1ZFw0?df|w!K65+ z zN%w~5;|aJ?sU5nC_t$1>QH}1v3U#W+DMZcT-TA>2{hw9&&5s840I!8QJIlvQ53l9` ztt%miXYs>H`zBMb;si>a_USCSX=_Lu0xrG1?p(ZsNH{}&r8x6`mOzgZYx(ekJvDzT zbtiupP|ogTcm(_z7Px2+pk-x_stn>%9$hp@O*Yai8oDvnXoBywiRCQSrR8__^Es3>myEvKU?O zvd;l0R{60z^DLBkEIyz8Q{(XyncA9kHL;^lH|O|4YJFarVxJ^j10V}}+J_|9jB?t9 zx>_Fl&a&zcP{A2kWoGvK8|n=dbshKw+JW?_UfCP21xCc0PlaYO^!S%y(H5W>I}#J0 zkMNK=kQ{hrr>%XcV(P<#=h6D_{zAj(X47Q1MLVo#20R{{zONk~*)d!?^^a?o)x^&! zx}(4}PwNk9*LiDeAu@6A=tJgT@>~7xcbg{Yb=?1rM zv|6Fh<%gxOUCm~+G09sLzc?7AvWwQ#du)*I`BD&ZtH)=y)m@Buz5(DS1L`&q0jp~<3-s2I}O zUDmk7zZDS640tXJz_jPgPaX>Kb@&T6Oy5WD5Ix_iXQW3jds*x()^6YCIGea)Um9=S zn>^PPG_l2|pfm;}wK0E6uas3rC_)eT60FFR2deHlo1m6J(nH8>iz`tD2S?b+ez#OV zZIVTbUNvJxk=rKlL|H)JyV}anKeZ|4G;itKO!TT85vr~#_;Vh?D#GRZlOdWCl+vY? zcXV(e*abN$$RIg2`IwHITl`)%=VR|gcX+#w2-8pi`Kq$HH(+y``1zKTY3 z&}rgJ8qvz1*da~FNml-jkK<)UjzJaJVmh@Sj1rdR8j|F#l z=q!uv4a+Cx5M;e?_cUH`c!*g!eJ)?YlAtKSo!(+Xt`O{Zo}!- zD|L|P%OE^VY^COixB8#~a~=X-WR#*uMRV+Tm?u5<{)2`q%lZq>F(_TaFR6=wnny3S zI$(E-N7UxI(8Q7Ct8tNMVHE-le`7le$xc#EJ>~A*23J#%kcd37_u1}_Hv;hLmKn=* z?Ft+UH^ygTL1KWj2p>!Z7I|`e zBL6C~lt|$e(Ei;_l6yib`LPC|ZDo$T3yPZLQrbQ6n~wgrOyN%u-Y9sA77mOfnK&30 z{oO-XRrb|8!)c^bW~6aFJ93bsm+e)u((490dhwMJf6$o?>r2!@0b*=<41DkJ+sEfO2WPXp&f2xMjO z@bMbVTr0-^w$P{i^cE`1lvDGXp~ZXFY=6eyOUwDtQ^WeRce8I-bSz5*qz9qS6cT z4UytDs1s14q0cr09yT)=g3)S{ZKaoX1i>3tAF(-~ejMdOANt29JSDm5sV4!=aQ2)a zOxkQ*3#0-yfMVC=h&aWjtEW|o8fbbG9BlB4-(2xN=mTsrFb7B@gHl_(o#dWV8_}B9 zed%4 zgO?J%-y&F=?3c#BuM9!^R;eZ$KrWy5){IU0x!A*M`w!8574?Q*1~uBA1l~Sm%r~|_ zYcJt-yiF-}ctmH38oNu9cB@XUwKtbqw{`c(gDs}Bus(`urHe@+T@}injnV!+2ufat z2jj92F?ca@jfD4`XM4;dTd-|uhtU2^y^Fv$e6(^oGoBh2E7>lyva7XUTF(tBDYe`( zrjV6kD%%LE82!RC@sJRKpp)kgnaND`Qxjy%=w{B+)c0&G_BbN+uqYLB(ckXqixe?> z8hbPp;+!6Hux;F8l^7d?uBb+f6Nj`EDav^bLMhm>b_Z#(8d-Xf&?iqX6jzHp%+th*LNLOh#Qt1_NS7J!4SvEO21#m0-R45Q$&oyHzc{uNX|G|JO$H%kmGL*M6 zRtP>3dysuuV|8mL6UMLhaFusE^h60Y!zD=%xc}_?;Jl~ub{gd}dz;IvTEk_1c=S9o z^1OGn$~YVk?qRN7ebb;v%728O%fi{nGt6W)?JC(0O_&azu1PHsnS<|^ovkd(k0?{~ z@Zrr=XI*gvsCS}0Ew=j#i1=rqSF7LBy#HC+eq(R)Cs_T}m>U<1p2Pst+)jT%1R?_| zCwtgk`I!dAEpC}#EhK$UvdRS~25h8KcO6wlv5?nDZBchH8g?I8 zeVrJBKY0p5=4{Gl;j8A&Mw2VUYgogR%2MaU1i<^|SGtV~yW_>N*@=Hwq+#yE*W44! zn@Do8_S5LJt!&kyrjLySjZ;i%WYBID30s{ov(_Dbqd_65-=0xGqF_BVj*5z91MEH) zVRIC@^bYd*P7xu*ls7v}d0S4(3@&zR&`o~a8>BN@`KoHS-p8&lR{fCX zWufpEvS%_axFkf2xxN^ymT5zl%$%t)gZOd{1&rlS)|I4hWxp%6NTBQ)r@O3quxl(u z+{~2)3aH)62`l8+Yd$;ajK3~gZTHlP<#yvf^)r|pwxfL1k*_Ts@@RdM!#1g)^(!}8 z6{x3G$-=wd-IZU4lk$~K((gcHjQWWNYWnk8So6^eLhzo}jMp0U?Xwe>tTc0m zL$Agt9c1oaRRAXEX7P6}cgm9m!g-JQX+)2A$B%E8%+P7+*mC8t^MK{+o4tuLE5KXv zpxLNA9Gn_wW|q{Sx}ZFa(rn03f7AQZ%DE80lT43i^UuaPoUlstIWyYQO2~26#Zs5r ze!=ls%*|7*(-s$FlGetvBRGLKemyd!sgp;CTgA#!;z+<_nJcjT?y=J|1Kee7Fn*{y z?zrs1fXkV*MeY>VWq^m(>|@_lFs07r1&{=kg#ni&b8~b3H}ebrwX0-W%0(h zB&a-nh3B{%vYW9bFwrP!&iQB$-Lu-HXFBi|fv6|WySQ-NkH_&8QS=v%kABh|I7L$sX z=LEW3g=DpzwtkKKvf7|xU777I29UHc2I9h3GGVPHF+f=4gbbaxB(Bg?>&>rtfx zkeUQ7cByBnfGjtA^k6@YXDGSRU|Ys30&Z^xBtF6HZ$H-!3VqaXxqgd_owel{5;5;@ zh4fyWP7(OMQ1X$0?=8N}VZVC81bn{yuTb8bZcMTsbg+@exD)WwK9F$GygsyE7+jCO zBBGfawL~ONy%w^hXxZ*PBK6a2Sjr=q8Ty49c@znP(3clBMW_o6*E5$DT4 zer-<|PUoWqEBgIY+RSRY_$?TNTqN;_we|$W-AGv8-Q22HKbJB@-4-o)fbX-cnRN?V z=8F*Ry7hRm?*0lAJxER&(#{ z-rBIeK8ZpT8^$u5=H1+6V7CK*vIOgJ9%^qK)$S;uznsK`!8P1{-dj@-kE36~#uU%b^<*hJC7#_Er zTOCQ40-Pd)X27JJ!G9X0C;}_!rp`c^EbZ6;=dcJ?gAZy?%r>g6d{NCg^b&Lf0`2Ph ztv=o_WU-DnymiC2@&gml2H<{Jeu%?0!;Tm!M!U>iI=-45)5{}fn#`9cOKmYm%$Ux+ z#s~HAwTrtP662;|+yPz=+by)ynGbX|^Fz7+fYIK}91B=ZevmZ$wr3K?p?m6Y_ZP&rizeLLKn! zj)zGEfs+<{WcqNnx%`>_!$y0q!xReea8lvG1mT8p9I~%BT}MPq<`b?CX(+gzem^Qk zQa;027Hl{VeyA2S8jnq)T`5e~fB6Tk2W#|e z!^PYyR38w;Yx%Uf$WCMFY{Wv8SpjNt#wpWuELqHSeu^8M#nQtw!?xMb_JRVpn){{h z;cV)Y2TDDQxTwl<-&*XeljK0A->zv+>V141bFH;zA2nomZmfDLZ|$|Z^cXK)*9fek zeEQG7Zu_wy)PCu;%W1^ubQZ~!rwDY+al+AG*pnqiq9s-Huyun;NQ4d9ot|YI4-qsw zNmh@+!Ep;oXwnOckQB#rU~Q7#VCW^xZyb^C)odrpoMO|FYmZhxoTTC~r9@<6$s&e) zb_-EJCe}{#&@u49Jm+$ZiLq~9!H){npe=tH$94%_`+DBiwyEO^;b~X{>uA~?G3D(A zc}uodI~$H!Yj<5=ppBKr#ty|I!nz?<{xxUxs`=LVVz$QHn|#LvZ|*O} zS(y&W5MGf}T>?eLssCd_d{f)b7WPO4|n3OYU*V#oOC+vABG1le_8;CQ_4^ zL+H$Z@0RBpDkqY8Lj=|Le&Bl>+27P})1Ztl^^|n=`P6&~%uV8i-1yMS$8HGku`F{-?_ zEX+!PYs9$*NXE%xPLriqcN zz~0}sWI580Vb2ZB;5&zmork$jAGW7kK4oPX4}ZDLUrIktQ%+S7G}|)LLhfjE#AQR zM0+fHFI>~{@ZvVluIF2)PD`W_bW;XTlR>#A248^SkjjXz)u+HG6>1ix!aNaxpkV4W zh`**$&b{xTDwZ*#VbMdGvqux*kI{?C-KgR_Kfhy+GiT7usqs6Y98Q;@6J_zVQ+(gs zKJ9+5cjhSFEIn}2Y`ivHubmvU>0s=$1r)t0`}pbZDnB)!L4^L$IuAV?FozCb2r2m? zw$9Uw9K@WlP9~qt+ZzvvlU;gKsiKUHU5D&Bmut80jK2gaN9QjQ8gCnQ`J4lD1CI1o zpVl<=Ya%z=jOb>Qq`Ad(q+dHwy+ChYpn8;C*b&>9VVfdEVp|0p52a+Cu;VxhmNdAK z3M?rpj}_(&eBn8i6X_Cj^<7S%-fsH=hHr`3g@J2@i99YQIK4_4!j`V7MwvF%Y(6x& zv{b%se0+N%S}E)J79^Zy_dp$fhzG&@_dj+U5rX(&Cs)(UfA$n0^T2~IM4Hc_nxcTN zr$vQi;?0pWLe4>67AV)a=s<;v9C4LkSg--LbIDS1>;^!TD;xkD(fC`2UwjA|dKdPV zo3QIgC)IaNzlI21`JI;osfs^ma7p#5rQF&S`dPV7O}i>9wO@`eEa_3d6o8rH=Wncy zo{axp>5buCnriFUI#0AWqEj&!-L^rtD@s<3+%tz z!kc2?r}|unocak2IiFQDBK0l@g@pyqCO5kzZ@5SEIP89qq|PL578&zNiHy$#GAnfPPQLVEKq<=xiiwvKU%=k3eO66M0@ z_}~VAPV(_V{_`!|xP%&Au3<${YBTQGWH6WzUc{2OHM<)XCeKaWiJEudO*ogjc6yW6 zVEZR=Hel(j5PD-5N5rt~$ZLE)TUV{4_O{~^WjqRE@=#7ErgSp*;DBqIo%jKuSu18e zp1ZwhtD+y1-oyTmEr~KfXKc$56c`>2kWt@2aCMk@wM`pE*2pa-UpQZRIYDccbED6^ zfDmUUcnj28oE|Yz_4nLA@mcy5rs1zIe-}lXmSKFTrSE>AQWHYR>7tW_bsBRlXXReg zSNI8k9rsh*#9rL^Lv_RL1^TN0qgJlZ8Al{9$?s5bVyOo+HRO))I*<4dP!Vgm^Nz_$ zp*5FvA`HdNDc)Y^2`{Ur#>_|zm=?DROe0UN6wjiaSdIY4ueS|N(24-hCJH+)`|X79 zr>Bw~;klwCsgswD_&x*iakA&zn?rH(XIA4Yh8Ri|T$f`j?olhDx5N6gR~3D8<6Q;C zrycnpwU%IJz>^nNGv2Z49@1z|G5x>}`T1!Xf3;RIM{ocL<_RFGqshr0`zup?dsBw* zP5o@paU*A`uejVNUaHW(`SeVg?J@D7`qQeIx88iV&KdfZNizeMK?D3r6^Ny>H@-G} znc?3z%<52!wl-P)f;&Zg?j(@jx4KoXrgI)qS2X|QX;=5;)S$+v|1TXW8gz&}%s=$3p`4fDjz6F>AO&OGr`{)He z(!Uqwk$~>#`$C?m$#Qh+wT5#@I*XAd7HEuy}98^Y;q zp^U4?_Ktg7LQx{m=$6-@?#+pnkh7q)O<#O= zOKk9)ynN3U(`b=b{Vksz$0}qNz8`D+oc;$99{EddX<#(ZZsMx+#b{En=#YH~b#FS4 zm!L-}X>UulK%Qr&5|8I5wg%&kPuC*JRXF|HSr)VVpwef3^I4&t z^R1aR(SYvCOb+5r7RL}=LgETA+x(aiIUXcmHbiCP2zp_-35^_U@P7ajjkWZ5JJ%W- zkH?akoP_41dC-$~^YMV>AVc1R|L6|5y&HM8m1$5aAXM`DP2N-JhC^DdmK0b3NE&eV zEH~h2H&5oAGT-RnT?WIUJ4UA%F{Ki}d$a)V0I6&`2d<0y-lY)ic%|$*bQOdfX!stE z(-_l%NcN%zzP<3@@-Rf4ke;C}ZG%#FP z){wfOCJ;U9{^l^p(Vt86)#|;mKOH&y3|Vi)BcP}s4y`YK56Am8j&)=w9b3`uFGLNg zlpE+z(j#NVwMj}C4amjF63jv{_cpeNX-DbLU)oI^B)ciIpqtL~HRsQSdSJ|dVn+5p zu~bC%iC+*cr+J~?A}c*ph3T_bexgh>-zKN3u?g65qa-Euwq_!Z>5b_o>(itgi^lJo z+7;hw`5#-0Z>!vH-5w9Zk10&+0M1q)U)fD>EL?XM{XguTWm_9<+ph24ZK1SC32vph zTX1i22~wbFf#U9v;FPww6%9_&;1qW#4uOOc+>2{)*Olja-?e_l%C~&Uwq=sJX68DN zW8X~^-1HphmRbQZCb!>7_Y#^Yp|QtTbl)vlP< zXIB%IPru2g3@b2gfISCzyHi%2k`&%1-S0;rUI!2|pq)8nrSB=?NXP3p6xo34Rw{44 z!8nWVQ_51;bb0?)Y6U$fn7xii1$o#rezTA4T&CiD z5F+GBoKH$THCQqEr-$L1SBHFHP_j#@aBJZ?5dImbR27O`Tw1i<7ELL;kqmxadBnOh%T$d{$u$yl1#+3M)4qt{B--pH- zR&BIhai1$m8$N1g2uG<|YLxaiD&3H%MQJ_uXrZ{BP~2RWeU6rD%SEE-6FGV}mLi~= zr;Ev6HFT!widypL4Zeeb!cG;ozb4jYf1*BsnTY9llIBTw088I6Bn5Hy6p>6BS=A#@b{}q zeI@>UFFDT)F0mmAEecQ`(CfW9Q>z{E1CqU-*;BN zEuPoBXW!7LnCJ?|?UcCS&l=d@OvU|Wz`f&I7`(sz;p-cxbl~5DUT6R|QRKrrG_d_h z%w-^L_p7H1X`Oq%eQ*k>(~gN={(H>S=RmG>@hDqx{5sI=)5g%>O35qlNLq~I$@)%T zaO?f=7lc;2JB19wHIDj3FG<+t;^_~Mzplu#*Bf;gSrY0;IP6?bO;5ykK~O$B#N%i! z(f{;1h@}I@09CKJLH2mM7laM?J4$^vySxwP!0P_?@;!sJQ7h8yPEA6o$0G7RY2S#i zAyR#R?8Ue4kc6IScEvmA_~Iq#?c<+qT1rmf>v?te>p=ngkDr1^H(n4v0X74d8Ha-C z>pSd}b8!5Qq3`L{#4aXg`n;1X-kk%oM{pWG{9;W)b+8HEIR;97)=wkCSqaVU~^J{zOqV{50A19l$Z11!DN8RS2fg%9-^ej z%oe~G^EE>%!!ZzwLSO|M&dg*+4z9-0)E@0oVEiia{fR{f+tssBm9?EtwXdxF)E+aO zhEvAB?><8LR_HND@aagUNr)J&VD4=;D}7-FL!NgAw0CH{p8OE{?x*2)=Dy<0g;dhr zg;B@DrsR_U360dlFD45fBc+iGE495A0pCXMr|Jd~wW=1?Xq!t%La7`tvzQ?IJhB4W zj(&vfw~}N14`QIR6@8h1-rt6OxX7OZEe3|Xp6u5uq`^`zLd-MSq1>gY+~qx%?+TB$ zYtqpxxxIdn)iS-M%{|gneP3hLN5ypD3GQtXF2L;uuT$XW>k0Z6=#KD_LCnt80z?{l z+bx3ZNz=MZJSqM*Bbm=n1J(%lqY{PK&8_sC#dPi~rOV_M(~Vc79L4p7Vn17M2-jin z-l3tQ0-GjdZL&m&^M_zt{7ux&`zDHxyq%={{Wu*de3pk*#$BnKCtiM4^8FtNc@vV` z5=?URip&s0`H?$pFOlOn8aU)(HANb>R*}4acNQz%F&daNiIH_b|6hxdk_%2W zv$NU#tm-qT!+|g>n_tH=z?FfN+I$i&BmD?>XD5UX~@|DXWQ&d+H6G*$VkB8FD`;l|Sq)S@?@|7O=TUpW|C$?OWxP z5_lD;yq%fmZ}5@c4Ukst$KP3N?%oalM!sPGFE&vD+LTglkM`B^)HI5PdXS1{lCYcW z@!E4x?<*!9?XI&B%MVcftFs{Op8>grsViLIq)po{??0{Yo^X-~*&(YC z0a|{kDYsD?0^HphV=I^>@J+HIM~H(iNrO7|bCmU>zZ)8hn7a%<^Oc@&aPISSlb#c{ zRWB?`oN*mi&s44_#3tO*<8NHD(K#bW=(q&Q0G#F+wIqk*ofeTd*Wz+zINs4k>+`y1#G9-%!vMQBY*<)m3^=%4VZavuGat1 zlpKB2%>A)*XTaWW*av;GTl68i^iIr4xF6tZN2A&b-Q0jiqAY!$5!w$mhyhn!2fcUC z$27bJazaKH-IoZmg;Ppw^hbsY1}Z;WPP$zEJ|e!BevIv2_E$W<%w7+vf}fUdeE^iZ zkqbxL$o1s;>ojnxVP~x+VYErsEg*O|uW1IT46?kQHDJ1d?k-jDEGjM?PtbyCb0-|= z4BxstZ{Gj6{}Ov6YWOdMx)Z&fP@BW0Gg{tf8jV05wwpJhJj^v0T6LZa z!bkJ$-})FfC~A32XfdZ>11pC6VvlC zz|n@ZR=_(rm8!)&OM%hygn*tg7STVA9B;gK zwWrzzE9M1qKXtjd?$w6JM6jjXUijzZF8WoNx1L$3m-$vKno)RC{^{`M*$lBs_^eBy za$W6Wt}!Q}m$t%^5b<)k7Z~U3e=!4@*q;gAME7o{aM?}vL>+L9dhmZR;$#a;k{s=P z*_r?)KHeiZcE8d&`t4zNjU;nKw^E9=ZkC)wuJCUtsLg8c~sFy z4#UPhxjnnqSs%X8auDGv8(FGJE6{?Od%(zivT{|<&rd;eE@>Z;N3N70^1g4Vz@*Nn zfxahz2uCQ?)#9AEf3jH3K)F#ljC6ukH?q{qkoUcuhs=eWZoQ-WaNHtOwy~U%+&g&} z>*4ZT;W5FVig+6t9^hP)Nf)raH zBuDpWVBe_aZwy$_~_J~O*rTt$BcU@m4ru+r3RQcm|`fW z;0qU;l$gzaJvc#XtPgZzJq4HNDVu3rd|Le76dbUv<02wXWTgcS_#xUk(X1-q$6xQL zHkVA>s}+%9S*wL(#7xii;D+rxsi82CsvWDuW8IT`n1QvA;r zhkhZ>K>WLNC*VKhC!E zAFG0eZudZ9yyeH>JX4*5;L>s3W-l>wrc?h>i=>9-wL;VxbzQ__-mGy0W7;nDXW!;I zPge0S^6>_cJIV4_6{e;A#rz7+1xi$^Bopg$G-F|D(;c{lL7Zw;`G9-ytFZy$8lUgj z_kLczs&_$Lx)WCEzP$S9ETlV#Jj|?L!sMep@G&9cb=r=lzRU~p)|8#Bxv^FaT7)nI zGtcKOL8|_8SO2gJYs(7cnIx6!ddPd+eaSQ=12>$JExzveaZ}J#N=to;vg%MTV>jQ{ zG`y|RrWpGP$KNqe$~`M;-NPE>`m?fyjPXs`9n(9mRA;1_<~2TQc_ab6^L8j@o;yyt zb4)a+Zdgfu8F%%jGA-I}OFb_5>CV9{bZGd}T|(t7$2NkFHaS0_)~8L_Th|x(=fBDVVb?+bL_KR@%GOz9$4cTx zLPN=XF4rJFTUiiR&7c1~m-Y^8JSAI2_)n6%|HXR0unNB*#NY+hwl<(g$p$pD3ekkE z6xWLmbq9^#Hwc*lUrA9rB|LWgw)`2EQ|VkZrNe=t&Gj8W)e@bf+sgyRmPY=V@{ImD zz>qUN9I1!4V1NEj+Iy0BL_9@;P?@_!=Gb5xth9)ZXXS_Nwfz^-^F)!9`P5zF6z6I< zSQR26RdYZ89?7BAH6JITqD(YIX&)|^>|&$nSI%rpB|juruC*V3)W8u(165;eAUUYB zQ;aIZ02WTml+Lkg62KV6U`5JFqd|(1t(OQQmhCuW9^U88%4d46@8~yI+i-f=x4lF2 zS(Mya%g;@`8Akn)ehV6bJNmw zsPV+QbvI$s1>w2xb_ps;yGLxQ!=U$XM%I-19JfOiyu$eC+V`h zQS1sSRUjHKn5a@OyrTK+uH}hW+306TrK$^U8h6A~LMw4YKHK%T7#!f&r|ps2E}MZV zrU|}q%s{Qd)?^gfWV@;X`gw6WxefFolLDF-sJ4mgw27lEHN}S~E55N=6f@A=ef-y> zc1RSpZWtlX7Cmdbc{dZc&F4vee_#K+yR3mn!Sj+=N>$FItVrOom?^PJJUpR`D&JS6lBclapl8zo zr?)Iaw&ck(T3Y%0fygmsxzn+$y=Q1Dg`H7xe!ok>ZmZaomFRwQv5eT~fxj#IB%IVv zoyPX7!@bx$Cd>HO2RqtQYTzlZJZJ8dz+cZ66&!7#xR}A1`eIkH3x{$LFvW^c0bOZ1+_?9rt;e1a z7eb4oE8J+uTMKkZPqt0*0FE_^)ienm+9=@Jg7(hwLCp2|k`cA96oG}hZW54@pSm%k zoQ45k9i|ERJ7pww9S_tNvx#gM5E55Qp52QOM9w5E^3snp(=xiC!^v{$f5<6YX$4djV zg?>K22*zbmri1D0+>*3_40y~9<$R9JNcA34=w37Y^}DmS94o#^8-|%vI@ti4cV2Jv2UXo0*@+t7m}Tl(>v; zMIw+0elqq7t7E$C!?unLmKt}1DB<-0N zO>eT1*$y-GiAFF0f?^4z^}xL-JiRQ0Se_5{>{erDv#>;w6SG-_@TGafCfd*NRK!iQ zmm}Gn<+pzgtAn~lbWGGr&5jed%2;8o6Ip|D}yA6oQI@axTsxDx~)`q&6Kmi<1fL)stDUyL*(E~yb?pt z*Lz&0#ww5W=##mrV^I0AP*wxnQlHs*F5ZmU%!$7=(DpC-1ij;>R39AU9iX3m;mmK4 z@s_T53KI31pc5RkN9OF#q1?Y-ERV}NnYvrpU-L0NMK{Msv1n#bg<1I~m=G`W2t1b1 z6w?l$HA+zTrBwG|-Q-BLee1SdbjeI{e<;Ps2dx`_gk`8>%8q66!BZ)(Lml)KBR?Lz zx8iZ3n2}>;&rxC7QPQBlIy3Jl75?K7SH2kh8`#rI>m2Iuzv%O-j9avz5Bs%;=QC;P zS=>~DEj$JMZw}R(tupT`wTTKXE zn0%~})ekD;^<`p&^<=nl0R<0X4U9}$^0aBh+H@~!@DYeD$TeJ-4Wt(;bHLng(^Z_u)x)6MaTQt9*|Xy0;?emCj8%r#_r3ym3C zvDw|G-k&Na1vdUGm=c<3OT3bcrJv?s+(=g3DrT@UoF>&qwd_BKdwDqj>*xfp5@r*B z5ZT0#?l<@hnHkKt`=j8JaU-3e@G!eKQ?I3@Zi0iLR^~;@`*tU(r}F7Ys}r|#U6S($ z+hjdwgSs3#HOr+;wa$2cJJFK@ToY>weR%;6zB9kP>$-T6Wt`~keI!SHiu-$WL4GqD z{`85zw_g!;;_or}w^sRD<$EFD=gWmOb|-`50%^1(ZWQIHe;aIn-15z>4S1~Kka0+7Ww-7)*GkyYDD z+9WKeUqt{+54G2XyJ-0xOx?WZWutVYPy&x6nDl_MqNM;mIX^Vf={ z^;F#iL_8jX5~4N=5COd@=AH_-pmSd}v18m}EzVJ@50n+KlO;=0xJDKv}4 zqx%exo1ks`Zl=gh1hI+*!?PBVfHIsw25Rit?b=WtVr{ecU+jy2yIt9x^L1hDAUU=Io9eM zTdXb!Y>vF#*bN>_a%>Oo+3Fr@8xS^Nq$VFOrR&sm|0)e-=o22g6=}*NSXS|&3>Zrt zqPp}Dr$1a$BZ`);_h&4m$O}ef+|m{%Ah&^r`ZSp6J9i zPGmi`0yJjK(rS1_#X9okxlX(26|16eM^72Tntx=Ayb)impm~L#a9 z)qz9OUch%J`n+)*mfe1OG3iS#yy2uGM}$_}=|x7{WxoZnOMSFKnB`PPg^6h6o6+eg zRQV=j3QMG|x{3VdR^*>{`&OucMa0dZi+B~IQ55kfa)kx=-mQguTX_2}Xo&<8tZt%hxK>T!qoeauJ*U%u1|g1n$FMzw{*9k%jQg4T@RR zTWGzr(&Cl_?@2<85%aBNo+zG6(Zi>Z8`?VS)fjRgQV;Ik+1c8Q+6unapBCIQmOQG zhnN}L%C@RoMr@X*XHI)sGqS4#=h;kQesgu&B7?)p?6}JZ-k|qOK`heGJ1TxF20(}! zrm~984UgOxtv=nG5+m3EQ7ALR#5iD!LO@$6mvtxZ9qBliIhjyl7Xht>cgsJtBsbq9 z=}F;RJjz*BlBx8o{9`HMJ7)q#4eV;c{#Bw!>tapPoKjZ@xck98Gs^#1B$tE#3zvxiG zOb%7yIVu9I1*>xC7sadV0^*^N!HC4Qhy@j#^`jB+g#XrumrCM(x3C-H`#VKSXvM%_ z6l$s_?pNJ=r``6YFMN7ga&X46WbW?WU9kEYN7t}R!0&OMj=sjuqk%5kQn!W>|cNUQ7wMW9!M5+&udvV@Xo1iJv=x(~i?4Jzd z+q#4AIsgINoyU3BNOHvORvlGST7}jCw_+PE(un+Ij6i@*JiIyHAeD=ck(#3K$6TL} zYG3@s&h7K1zsc}LySl%5FG@275%w0)o>K+XpFdwif(f5l6>LUYha^Xzy}LlrC{O34 zSMRsH;M{pyYjNpjZv9j$`KDOY&5{EB2ogVL z`Y&V;&CTnSB67f?irhlhGBJydrn=deyF~Yq8qz@d;0Ibn-dZl~N_o(Nb&M^@6a!ULM)F z44~dd3upzP^ff0*-0SF#O1=g9pIVgzyXq;|hD3y3#)&cch&~zt75w4z8oEXIt36ln z>-7vp1Fgy5Ti3J$N3!CjNC_4%O8M3Jc--O-Ny4;|7N^JfD%)`@ z(LE3OS`H8F{7x>#9+#HLPX5EIR*l%sc4TTe&deZuN$`5NzOhbV*=G+Ya_YqLXwJJE z0EjU8loh$$#!QqVe09}xdHv2f(X@XM&Sh6C7CpmQ8!nk9(wx`iWyjF2qGNH=p!)24 z<|gWsu+-JNO6bMoX6>?On~tgVf(pGBv!kWLYNx|9w6y;-*&Q>`3=!*E+zUvAWK^_Y z(TrO8d8sNzPg&mc^;?%VP#S4ZD)>EfNCO_OcdH1ZG}bZ~l$wMgald{=Ia#<=c3vnQ zuiWGdz3L0$JamJ!-h~55{D785&*I`?()kR|iPFVO@HyI21zREi>le-M4T z%r0(k>bN{2JbNRagrt$&o^*Lpc9+mxc<{@zw9B0DjRrI~%8%zpomN%v*kig_re!8fc%UhG7P+c|ZBGcMNiU@jS% zB?ff6S61)04F4x3*#7u!zc08T;L+_Yrz2bKbnDll)@xzQU+NKfE4vp@qIagBToS6L zfww71YuEXlrHmT0x_AuQQ{XBMXaF`wM58}&;Ymm(4#^%&*Y5f*Vin4^I$?jh^>>8H z(J=7GI8Nztag5SekxnOuJ(lu578$vaxrKMFYcPKs(p;L~5hP`^ybe?Y7W>7pmUst6z~ej}Qh&Q+vZ`>?4G0;``|xJPmX>6R&P) z>}3v5@xU~ryP2MVJa_!o7A1J%}`y!RlUm|C^ zS+?U2H<~?|<6qk(wR!Ftd$m5RXvV&vrwrJBt7DZk_eCJ9&0q^h8emwvVx`+;rgEuh zMD!2ikt~taSa-F|IGUI>&&RH8XnSr>5Uf%=s)`pUv zs9pDSdZlc%$sd)}gAV4D;d3Du==Rj6^?%45XMtvQt17Qn;KAr}+WKf&It8bDFj(tt zV=Py`DNl(70f9sjsK;SQ4D5@rc`UT;&f@!ijkftV{qKcw1fdyJrIbImH+9^RN(xGY zeb;R6X*PY6$U&XSbU#${6qVD|Ta;X`o^VmqbSKg%Y0xw7wZ^iRJT^m?2YK8o)&3v6{RBEUy;isN~}xPIYw->8yQIZ zJ`ZzFi>MC&qDHz*Z7O4WthN*=WK;W z@&*M7pD>G#c}8K8xodWoB)9LzGQ;ckghTJzbu5XW8J5PqT5JE@W1wO~t~^UFqID!( zJ98NrqMp?{*o0C>WgyQsY;X{s>lbFLwK_WxhC7k*d|WPOC!49<;ohr}T*bHpfHuwX z5&7u0ogxmX-YiM#cRY?86kIdB_#65ZT(cehyk1!$k}YDQEW<#==LK5KGwJ5IK=sng z`!;O&jFZa4pZG~@D6jI(L4)iTul2NAi8i4R5G!+049bVn{g?&T_7Vd#)yBa^81Jtu z$50m#)4vH*7iu%T%ZdkUE{_58y~`YeK`bn$tLvc@(YA-Vg*$W?AbpNiW3@p}g;k9z z%gMT~v;8GW7LD8}ML&sw5$l67azG*8Y{l+1y|^+;LEQ_}R_98(?~P$*_JVR#XgT3&^mC z5|JK`+Cg>24RXUoez{Yl#o2?v$znO92{aFRuTe~D*ee4z)#mf>6h?&NI-yKcIs!fERMf8=sP`0Q~b=Yq;6HU8w1dw!MOgXz0#burHRS`%x-C1()~ zM*}%um*Y6788vA6&yrYVO5EM=pIK&~5Pq?sSP%>lYd>A0N&j^6+n2r_zK7Rgr`hhw z462l6vh#Fm5vpm&@J#;u3!21C<3m(EtlMK(XTFb}K~<{V!?Li1=1H=#XzSHF^{hMn zw`j+DS?Ekz_REGj*J63ox%l@fz9i%KC%+cjPcZ?FdgDNMa4x)_Up(;)1ob??wCw99 zxy>l%HVHaO)8PjbAS;a)3_od%bt|*R$ZOjGZtjG3P*1mK16^dfTNfslz*n`vrH6~l z!X;_u(1!d^OO?t(`;`LK>^7IcGF`0t%@1g4uS>dSnE3jsfU8Z<&6=`PN8Gt6qDiePB_1$Dq#CqfV`$cYu8{ zvrq$|m$D!>83=CEhOsXl#`XubG5n+k$nFXnG)_;Hgk%T{d$v)yFD>F~XiamCN`7V2bE;OWAKFk$RU<8;w}dP9HC1TmD~ILc8r7`X zLiGc%#YNRz!=jfB_PfbY&@ODVbZG-dHi@8ChMy|3H!{hUx}lj@x>6$}P4mL`WI~9!g_+@@@pz1SiLraKWumqI%hgf} zvD#)yHLhU|ltKze%jt5Wg_M8SOeMqkyLVC6k2TvyQ6Lnl#pF zHmT3>6Dl7TXIyeVd|+dho(C`tiHL><(t~VhRqrZXCh*hQ)e!h44#)8g7C##@3U>$G z@5{6FMv0VW-8(WpEH|BUDp!r+?8~j%+=WC32O2ujcWYofK!*0=&K;wAZ;(&xaS4;K zD8@cF=gk~Yn-WI(?GV0JNki^|e+-*D)_fS!5&t(5VO^pvs8Hsn&z0B;QT%;7QS!;7 z%K2s#LxX%|*OBdnUprx}IufplBQ4Q8&3J1_L1eVV*r%@t`QU1!d6mlp2T#v8GCGPS z%mR-DkXH|D#jQ?S+4EJ#sB7By-(jT?rqV;dhoIM!mG!OXm!hzEh9XoRq}t{9v&x-F za{H4HjQ2bXO5Q(RJl_amu!^Q3hE@BcvuY*+n&M^^t=&Vn;hPiDuj&8Yv~{?iBbe>K z=yh}|g18upi4joD{c|Ern65<{#U8bE@Gvl##krGrjo7lr98P^d!eS%Wd_9=l$?IVyEb0lmMF&*D?4AF6M=|VremuE?%eT>BQ{fJA2{Oa zV*U_nn2-2efIjsvSxn>bik*v_{Fik|KnSeX9KIWA6lnziJC2QKbGIOw$=|}u&gZjy zh(V9m|K~Gt>%l`QtzeCLFU4ECJ-z8glVPZu?}1^5AM(F|(rpRi8BNvgdauekepb;v z@57*qSfptbcl!T2b}*#+H<&%H|Nrhk$o@CKWtr0}W~kLO)y45MHiVbQk>WHnj=JTY zqL;tSy4W}B#P?@7FU21nbY?dUTS zr?l*~|0RfHuzrvH1ZlQH7D5z!>7dk+%iGFK;Zl#2Ll>l^V{uJ*MYpt#1M=K@oR%x& zlZ%j<0DEW2V^F8V8wGcaqaonoa;E%$RaKpES^D(pgfy!@^VxxgU8bwtPb~I4&F@pj z^A_ENU^CS)g+%h!EIuYmet%3>m)ZJrW5L}4jY_S-Vz5_&0y8%ZFC)C}*7$PEf@Gwr zM!mXP!{tVo<~QmscC~q2&1K{C{4af?LjSN-Z3y|AU*(!yiYgJ3pe4h(!RlR;FgDBd z7NT)!C4@GNzweeZBCUjAGRwPmHk5%Y>uldst3u00mxV%EiaLGv8~kv>?5xY^6JK+k z$K`Fu|2-0>i2r3?rz#s&jaZq zmX=Lih}?3%^wfvYg&2+(PB~r-H9l6`>Z3>vVnDzzdbNK_5PEOBnTD|%rfO2Wo#ySe8hZCqkk|?h|^YTw^?-0#^Cq| zT_m>`Z94{?n9?gmnADOh7Y~}UTuQZj3nz;LgfsF-DvUG5o(Gv-eHh2(NNVfYs>jD|^}Q7z&yy1>z6&FfWhZS8Ds`R){y0Ih^kQI9W1* zaC@-`&DPay(eH>j!PU!Ve4-1T@obM&0{WK+8J9MDne0SSwe{q1ca@HWP=gAO2NrZg zghr;hpGhDbW{+-CVUTAw5DkRaYW$CWL~(0*Etd%KO{x-9b;GsYXiF(gN{iflmD^iX z7{%MtY1>dhuB;NyqK=A+i6H_g3q`z8ZSDV}-z`6*d`3$Kes^z1wFsD{lAW~rZ zEfCMS9H;u0Z77`Y5@{PLnpR*buikusUTgMHXG0pqlzQqPn^%FIL&2W{d@PJxnI1HXeuHoM{Lz2U|0d-dq zO-N*nTW4JL=*;-(pFgF_5`lJW#;}qoJ@yvO$55*3gQ76HEusVu|20>%&4(yv0iP;9 z3nYshgUKwL)Q=k_Vyc9CuZ8CGV~x2iPATOdVq+%>duz!tK!ZOhUgpg!aB>`>Lj2rI^N?qS+^z8013*--9xU@;HIVVF;YSJZ}xm~ z&*#D$3HRw0_`7xg3c87Y+ccqP5PS}p;xAgd^uM@Dl(_7E)ppc9Jdpv;Y$r6=H7uWL z4;xCJTf6pnzOYbw3NJG@Ag>F?p)nfYOl$z*d77^P#l=46-Ocy0iTr)tXr8F-Q7T^D zNs5RPjV6f-;L$Ftv-tE)H~P)^SEz|^1T4oleKaH5eEnEyUzv)+=!`)s5lH!c>y!** z>Y@XiddS>x0gxJbJ7F%zNdD22^>K}3YFb@6Pu*hum0rP?;yhxHle&0DtK%3mFr}Yh zWgegQJQo|rU-n+g#BakY+wX)en|(6aUKRPb&e_6nmgh>PmY-Im^G@uVlKb;e$l5bM z4cGwod79@oDHLIz!m!>2&M}UJ&9vL<=%ovAjIL?1RILYvp%^ZzC3)3$cL8ojz9(K; z5z#a55#L8979wK)?*iM2lx0mH9?R{c*IjtIRRq!ACARDPa;%6m0!$=M#qw^`s(f4PTS6Rhfnyeaosst!rVQ|3>0Q;x zGo#_{o;(z_FkcS!yLQOSW8-nVXtA8w;mj{?Fe-!u%Q$#Q-Z283G0w$Svz;rZ1!S?B z`aXKkAT}rH?B|**Ez%&`{1Pj)?eR_F5|7%(!zqQZvp5-|HEps*^dMxOUs5DCfQVxZ zW@ka^X*yJQAKc55<_-;7&=4?^6L7JX%O$uLdb~{9mQ3TbP~b(y;39cq^kt|3XqCqU2-ePnr8%Pa58k5{7yHUucaaPSGSbahVq^ z(QlW>1o$Q7hj!7J&<%;|^!`eX9bWqq`@8tY;SWW_&zPg%bgic>Yu#*}_?uKwNruJQ zOf*G+_H?o-3j;UnBUME+e|%@-|Mr~ad z{i)nCC)5t|znYszKNklPUwr>~=DUF{cD^*o?LqCP#~iio3$;JTTCKl+;U~mxaruLm zZNZr?fWV}ivLRFbI`H$+%OGSKRq__={E$8{Ny zEX#2&^$RZL+m%=39xA=)4V(%7w#bZW=ZhJgi1FWbaVye+@{3{tsg&z)`)Wesb4b=< zK*?i?Z0>2+*qU;Ahjh|%g-ffo9sPRpduzu5ab0z*xoZ18mt^Tc4FMO6yJ^}J`P?EM zmF<_$iPxb2%X-MB!Kr*_DY}ssV$qKfk`{mSX6r1LOhV6H!A2^=)m<7#)~8U(A_cBsP8YwN?LA0!H77XFKT+j5YU}!) zuOWq8i<4%S2+r+(f#rSs8sZcCqI}gGDT$=Zx1CISJ@TM!tMB%cQ4?JDD5 zzv=qy9rD$*!TPR{7*M0}tHIbKz4NfYzyVCJW)6F?L&VW;`(R5Ex*zkFwLc^4ThPEk zES8x1A~QJ3Rw~)z^0(ENNVZL*57E4)z4{OKUFwtLe&; zM#^%e>-C3YZfJh2y!^cOW!JOvUQn_PGIr36Iy>l$Fy_ncr6!k|Wl8_zaiWXQ6mj$t zmy!1fE4UG$})*a zZ$&Bn$oqxOfg1n?XZ@1=#&%vTE~}SKJeHZlk7^Ovf0kyo7Wm-}F%3I2_?+%bx`&&!E&oyo?^ zO|pbxx&elyJH63A1qc!NY&|{~8aryIHtc-e!tqB<0geab-%OYG;QM9M#~N)T7b}w6 zrp;1oasmTZ_a1pZVd0z0jeZ;)Ujql6F=T;=MVfh}MNG|nngUpXojdIRJ=s1`zcCr3 z&Z>y8_DlcvJ#kzgeJvRx%`+q(%3}w#q`C#U^%`d@J(Yb@>Sa7E=ET*tIH2~gI;bcF zQySpx?0#PFPG^L(AcDj#i-r2R!9Dk7ed3;eiokGH&y{rjl8Q!qrTkYqLN*lT?g27a z&2AHXZSPOb{AS9|@-PC}rQsu54peC$xo(CdrhIcFa*5ykVu5;$^J{~ZQ+k_mF!!s* zm9cg4xmbhWksS7m!K%HDOnQIrEyflamY$_VOz8${=lNVq0}$3MmTzpP$%O-j{3Bs; z$)D>pzj^~kIe+%;$?vqUle5(374rA*a`q*7CTkDcFAds8p8<$ z`xOBh)ENo=0$*Az7@fEe^?mv{>lQEhbfM(bP8O~1(RO8S#UY&DK7Y_S%#ZQ?WXJo) zep}0UOazm4b}rIDYuE(R*BQp`Br(@a|9{UnDE_-!Atn~|@;^^Q@0J@?P&G?(DVR}t zRG%`~o^`qruke~`7Z3M2>!J&hpBCe?zKgCPCuo+IQnLghvWdvu*o@ zreQmZG--f@t_>2e?fL3Af-Okv6(MPvgy>YK-2emzLd0Q`(>z|$;Hyy!KxB~LEydLp zOQp*<=ZUJWp8*;}1xA)r-Ryl7F6c<7O6Btj41sK#ay zB$tghX&Nyv6OTD+H{0(dPzQNRNka=`<_d6``z)#Q* zfo#3jShYc#uNI`Qk}#MGUd$Z+-x!!ktNrU3+`jE9$rq_g+Yg^wGZqI95(yewz2>bP zI}SANRw>D)c0+Gv?%%)rpQR~FIxI|1pvPmAG2Q&6?yHz_n;)Ahv3c>3R}+sf%okd zCOF|?SWh)1&H);dA5$tFcwCXpd598BN-D~&5sgggoQ(a_QGT%g9!l%Wdsy@|QK^GJ zad&JV6FaHs{}*48`LoJLs>pSx{B|fC$t|$_o-)=U&xasUWf}&(<(!hYu?rl=xS#yM zxvIyNBRF*lNj_ie(eq>VjxMB1qN^jM`war9iub))6sq4KCTlSRCuZL3TuayGf*79( zPNOB<@-MTnIs!J3@sXnAMuKGmMWTnxye6bTTq2*d#4!Va#vsh;x%OC9jatUfw*onF z-RvCFYn#JI+j2c0ei9~X^bw_7t!-Wq;&P?OL9+v}dLU|7$FP3foj>tudYp2iblvk& zIQ6&^k9SezyCW7W*ZI%T*)q_^zGZ9|H|2Ks|HIc?2DP=e;ljJ68+WH@aCZwSP~4$F zi%W5L2o4q8U4jR9cXudO+@ZL;20iJ1&&-+meth}0k~NuG>zP}xTdr}6C*4-jR|N3g za#v< z4!$UnL`hK`9s%(HE#%~=0rX)*=Z-xtDB)2I?28fotZIBBKZ-&)d#Fu94EY&8AZcF6>g3&$9gbL5 z9{)i|(g(%3s1P?3arA1{Sjj$GYf`6`){7u{n#}tq+K8pSW~+fU1|_q`By$6bi{_nA z>m&8UDIXP0-{C-1sQVnMX@}gM`B89|XA!B?H0;!|Pij}3LtYax-1mxo661rVMkIXK zQy4`wtimcsjVqb7ZKF{qhB=s%_V=~q7zUN=TXVF>8TyK@a029Dc#+aDRuhMJbtP7itOVw7!*A-{lWm+f2 zO;dV#LbfaIJM|KFC+V35C=OCy)@y_lgk@2@@UqlFMfyqUtotZ4rQMMo0~qJap>iHB zSflml3~#+%Ev}>cp54S4jj%xU=X7h9(`Ej(LHk;QwC#=0%U(7;O13zUvvV_6)}XWX zkmhu@GIC{LVYypU=UH-rM1HEt-N}cUx%s<1hTGEeJeTJj$Ktb`hQ^Yi@fXP|Ai+1vU2|O|Nrgj z_t)OkOfkeoQ;WSf+6U}a+GMobLE+IYd6oX=9DRe~i=%NfP7ms2^&{A1+w|V_n_og95q0vcga>k@HnGXVn zdu3eY$tQjXFKLW#ObEm(40tS*=w>|vLnMB}V8zCD#0`tUSH_BfV{1Ut5eZ&+vxBtoEyMH zyY2R!OLt0;f&<52xBfZ{FEadPf~$|b#T@X_gtP>vP1z6}9V61ga<_y+2Ef)~x0qy+zpxlSA}Tcsr~* zFIYc8)OoZa3Hh7kyfOo!z@NEg2TNIV4mUlqi^bVLKP#E4c+k>F1F-0N&dc7P zZlFIF3##~i$aM2-qm*W};9eaXcO?=6mm_^=}^9~8SoTW|u?0dWJU22J!ao5G_{j}I8EXO_Ns}_o% zmXG%S{KI>bUCG-W&*nOe5a;E9#VB=SKDORK^|XlHr;}d^NA?0A zhS?>KU5lKHY-R>N9BL!XqFzOj-j|cgU-{&d)aZ6j|JCFx_m6+665S=QQlN=e>Yj{f zG~8UF9(6iqF<=;8l?m@GWo1v5e)5Gvqe)atXy=6XTbg*;I=WbFoPgJjTD?{u+^k-U zb74~Px-n*Ps)%p3gBOeKq-X6&7i;dRq?4h8E(KbjC@Tctgm^wmUPOR86xS)|)DfiC)9klPEaH7DOX0oP z>L9xJV>6V$SpRXRVF%}3dfSkasAz>DXwaZ}VA-2P=J_p3M7^;Bmr;1fKw$X1po?&v zY4y>I-xTc8(SMRGE$QRTtc{+qUuMi71u_wznAO%h$KQ9XejD_P^dN0{-U)IlD2zdx zvTZao9{0=}TzhuTrHsUY<4`vgpoC(}1D79d3SCX2*6FKOfI@C!oO}_C=bUU%Ng5#(@IdUGrBP?xfLh~$I6tJh#`MX-? zW_i9%t(jw$F7~s++v79&e4Pwf#Sx+S6nTnN#F2vN%lMNHFV=6#S`@=MS6h{|G|30V{$LlkTNPzUc}K>N4WdCYIL-Y2|38n+=n9PLsYfDW>DBU+xZ zz%hL3U;R#XFPC-(qmj)%uuD~|6(;cdXMqA5*$929=w$iLNnar877idIf@M05X{U6$ z#*}h5U{TKL#JDHgZC|J9ZRXGS=L;s$)>iH3z6vWE(w3bGMHU#`xY3TrerO%4Fk}Y- ztB+E5YfYl6(uV)j7Xh)q`htZ$mMX2p8_i*rJuGPm9$=jOfGYss{owE!3JeIhX_@+c z{%+k>t7|**B|uV-PSA&krn5+#vhoY-UHJAc9R3}(iGEacFxQvuBWnrXvH!RDxA{8+ zB8tr?E5oSAhfPWfDXj&+hDbY=8=0`*;9rDES&_872Z&BN3g;eB#tbAoi|AEx@gY=c z-wSRx9Yxdq78^am>a_SHp-)@2OT4E|LGAQRS)K^JB0d>E{$*BmT>vY?DEj@CC76BG zqg4(owoR?M57z8p7lj%=#~qp3u7x4y&q@gX4yPQDv22Lce%jRU)VDjeoZFY72o@j>)fn&N(PU9h>udpy3IW=fO;##eTBma(f%kJzjW>8 z;O~5*d#Mb+roB~=limJ{P_7K4;gcNB6s!=5iAs}8tbg|#w#h_xIV;ZID~-tbea(jN zpC|6*%jEUmMtDEg`K#FU3kyIplT1vhmjxeI@V?XaP$3$V?LgzkF0&kznt2qBeZmtf z&EX?G(kuhCoGDS$m4FnKTXl5j>u)*v=dsdY4Pa-NlSWbrnKET$F^SFRv@SZJGHfn5 zmJoOJnJnQ%*^CHJQ}stL@`>huVNs#iBbYQ=8>)&H$^Wda(n2X0Ys1~$1~DQy`t&fe z#u{30gnn)Q{IJTp@`lZ#o5FSPFbh;P9Xh}hH(4~?5;+hX3vaJCMw@sc;|c{ir+UPSO_BP`oHTxH-gfJ*@tr)F^dj0H5=S*ATrntAG!+wgg*=66UWY zvsreqeCJI}asgfG3gj=?*u6xz*M5sW+Mikx?Q-Co3{|x1$;krfm_m@1c!>&@i=N3so0NW6 zbmNcDe6QB!aM49JFC7k=L|ohI{Mr}Oa4l*zEqN8QVz$2o##s)?79hESXz8pK0qi>L z`gwDPdh-S2qHXdQcs}G6-LLOpt?(>01GBQsrl{<2sY)c*vESc)Kw49R+EjHtf9W?`^ z?|(dUKjJ*Krsld!;;uepEU8}@kZ9DpPA#XN&~Iy0%9AMAMAsAB;Y@QO%NHbuZM@_yL@hM zF4x(A?ZX;ZHid?5%oe;sQ)GUk9veI}8-e%Iu6~H27BX6Y4D_{`?{hAi z556WB`5`x-XKA3ao*o!zY0ysy2(eS+ZN25Hw{?TS_10IB>2v5DK~S}zAn*%smWe_Z z*kh+;LNZIz7(tV({*J0dKr1MESnZVd^OXsyCbIINOPuXB0l{ z(V6#dg2Vhzaw;Rxl7+>Ap|BwTPtBqf`FvBAk)V=mKCv%v97s7erCZqK-T+e@igJ~~ zdf6uXQ_Op@A~g`FCwY3~3c_nspYoFl>MzcV^|B3*6{9m!4zfZn`WTm7iIpQ`kx*RW zJ3L}*yt&qOt7c!)WeLO{$xWGAI^VTA zkF=#rNzg;@eiBz@dweF$b#2z`hp1#jwf_lb=MT7Gl7-9gg50@Jlh2s4AHSWI@MmkB zEX`DCr%6YGxILcUV+y-s+r%8+2qib7cm%^)G4_B`Z?6gP0F+0`jgT5`=m^){)*1;ce}g1OnOmMou8rLjQ2Cey3w)A z0oVcyC?A?bRM$H{W)W%#WdxbP2n;D|&c2 zY14>m5BU!Ef=3w855OA1Ivle^j4P{ROyCu%Kd)^zsv(|}{Zj&EBL?22QXLn}u7 z->WPAV3?vX{yQdmGVvJOlLh3;EPr~Hjy8NIorKd;2S+a4i0?##T;=%n@_QRc^mqrI zM>W{P!Ks?93|AT%yS8mjxAX}6Sk*q2%cyO*&lOm6+y6XpqjBHOI!>F?YTA% zp2Fj8%Lv`Nk#DQMiR~tXT+Lf#4WhhXTX?fJa`&cuUr5AH2;JcOV<@668yH~DKHaG1 zyoLktA&2jzWNBQfa%}X~z%IqS?l2HcL?F8Ca^Wt}@vT1A1*j@0l%SQz+t~YXj%^}( z{Z(@D5Wc9dyQfzWNx7CFJVjlO%R62#ku@`TQz*`9I*SpC$f5$GvyRszO5I66}FDa=c0g_*W*=*GMn{&H+I*I@81Yd9H!J^YAqG7w z7zr~OEtwb%NWq?r&^q=5$flFp_qETm;j7CpxK~(TvMJrGKL`cYNuz0~7N{pN{eD?0 zU-Cpe=@#W7l(Ej>)}JYsLRZAULHTaqFnlKokw|dhw>r}{6Xq5S8-;gXo2H%UtX;dR z2G0VI+RD{S|y9a^w>9YQ%hfC8W@fR#$NQH zeyyVnyP@W3OKtf4YzBq!6_j)Klgbu4APnOihTVYKibNWxA?E-kQ8xqTzX!n)`u89< z!)IyxcH=*ceG%(mn2K0Reo!|kysG2w_dbC6rM+lDE{0t`z#^mT52AnFx4Q)V{=Jm` zkona3@%CoYGprLKda+yGz{c{-tg7^S-rv+6SEa+BIhs*-BzX-nHB&z5%5Pcu;w<7M zcIU&QeV};Gr>A^Xs5abtz#l<8=N>P?QsaM@aDVcS4npwvSNP2^QL#|-|6Rf#RR!*7 zfIVLuwj6C#mDHk5nmH>yfkbL1`FfrF+d|%m!M+o<}J(tS3*v~3pEr!g%fjlaEsgLZZ zq~wrcMc)z!iyr^lOGKesheuBu( z-K=baO+MNHc&yGhq~_pj^{Wvl&ci^DrjdRnkYLje{=6~kQnKHGKI*n% zxNuCG3}%i0q5*plX=to&Y_UG-i_VaZc|3IHP(=Hip3VWwy*CySjLM_wZJW zc^k+xMLAgSp9Y~j|~in#x+QjxR-)nxJ=r^&dO@;Vm7FM7#J)deW_v}DHK zLIa$&NhB;ZzM%G4k;*-HRQwpiMcapS)EZnqV!>@+mi|+n7-UW=V~>c#zI1I_Dx?~X zJ;;?K0POU7Tgwn_wmrl(s?(5Z(yhGN|6|;U2ix-%w=gN%XesZ4+L!lg{$$rxD{ju= z3a`Psh7QN&EWPRxM=_oAJ6EoxCuy|f{dbf!Eqn-@#w43V#fjmsgwU;2PCwRMX;!nv zf$){;Fd#J{xvFNPlj9DubTm1~lIZt;k$jrSm>=i^Tn1YH3gks)j^q`O45}31A9OBa zIO~*0d)8$8gV18F#g>`A)#3GWpK7qeNSc%X;vOX+WK_JUFSxpKQ07Ukf2Sr8b zO5D-KNh^iXfMrjw^oVRx?;{51EQOff%VvoMfkqQezRcZI1Hu-OIlwb~%X5)Rj z4i-D=m5HpPBvHalBoeO3FVm>1hphsWW?mV#4jqF>l?}%C6*f?GhNSBj)0iB_x4s%Y z6_((R(bU9b?t}aDF-k}x_5B5q z>hAmPI!{vd7w*`t^5eFbuqgL1-rS30Qb}6kYC*umZ$|UEiJ;SdThrkOA&vuiwU!OF zs1{pdRxkDm2gzV4$GLS$*Wpv=`$Y5udM>f z%A$4IR=NKk*S-%82^;vsleX#&<~fUz7+wq=~{;-LyB-XR4UUhCut*n2M&N7K}l zjc|h2p;(Z_#+Y1;gNNvVr^zoDV&2{~z@W8O#IcGRVeVqgt2(EzSg93E82C^nIF$d~ z5<~b+64kMGHtXcXKS!}S+B4tF26CuVbv}e)A2z|14EX2g8SneHYXJ7n_mA)1Jh{Vc1Wtzl)wpD4ZF=d zjLGdAa&i-NB&EcrARImU7|&2S8T8DRWg+XdT%C5K)6)I5J2N2w)Sq~Y#_H?OhDl@( zkj%3QQ1w2+uT*!mG0T65Jv8(4L{jpS7ZHj(rUxjZ6X$VO3rd|v1mmTl|Do!LnSP89 zn}kRjhhV*7VOH-r6Y{FJnW%Z;D{7$+@Wu&kVpS9LynHX&nJ#BlFAsN%iX5teNhFfB za?bLv!}!6rsECKyq?5Sw~-+C!JZHbl+tT_cTTQS zdMm*=X-0Vg`Io`jMMGD*(N4ZMawA|6rP}%y`CQT{S6ZF-4H2fx;U+U-d8W9ozQQhL z+c=xk39DH0g`rj`_ZT6!rzR(+lbKxsQu?WO9RG6x_j$m-E{cMWpgpt80tB)uj|w1l zp~TXmNtRPjK?F`8!#h0uO>BO^$ynAAs9;)hJ_Sg0x{-w|W2{HqougdFZ{<5L2(*ci zbr_EO=19>LKyJo3f$x$Q6Z7>nptZgk3qVG?9{;Algl88L`ib<1p^Mn<=VLe5J81^A$HuVgOAEW)!|R*F!Q)3cTE@w;zrixUJg=yYBEKS>xWIQ% zt1FCQGlX|Haxeiw^pBE1!s13{7v<6b29NmIQfE*c^ME; zI|~lJIufXMfxTgu*6t(9m-Bgp{vmk41P`23E7r8!Njs{2s*KWEZH|7RZHS~W)7wv{r(-1E~p zJw%AianKL~P^q7yYD)W~d3AkK#~zbhZ0%Y6tm~u0-%M&{aGN&tNyfqG8Ro~#j3*4x zDfrT1dz#aGdnK++qFN#52bo3$LEtP>84aFX6-q=5vc6+=7LvIlK5`diUq2gX97Em+RfDbSn z6Ms4}mOTZdAJoV4Y`XLpMfWy!phO}@<@7+8dv3>4%9$2aqD^1!=X^xAsk>ECjQ#T1 z8Tk}@Dz*#N7&kPNem?|ii~|3#Y}3%L0ekafJ&QO`kVh(LQD+bOV!l#2yO}LvWXZO& z;iNzvsv5>Ec#Cv@zF!UEHom4MOvj+%9Jto){L0lBVSKu@%0BU96dV?Q6mn|iHE(qDGZkniRa8kA2D_2aM^alEBgw(_cLeV!zW>~MJuwBf_ zXsn4gw?=_Oi7Z6G+Wq_D@lQb~id4+1KB@)B7S^Gty!Qx%{8XgdFPGg`wi~$N%IKfEM<*pQK)9u4ZhCb2<8@@$PMpinS6yuv;1yBlz z(US{!%C((DJOQn9chtT@pNbvXAU=zFA?7sIQ-h18Z)RPyK9w(4w#Ca^0JG_G%5$DPi+Zkma_{1L9{ykM5njWD|N2&K5`07BZ4Sr*xd$n8{jI!UmaNMiGo0EC{D`=GE}VE|qIx-T&Gv zGD%O4m!|k|qBEI|87r@*e@-WS9+>vDU@SMMV4)<;pqICPvyipOo9m8^r*4cJsj>4kM5mxdb~| zeQ^--gVMw+%M_~)E;t#Y*MQU_F8G7|V`Z&ww!5KKCQK_W@VrEd2hwuhzn58c{<0E!;frx@n}`b1h4BZf8UG`Oj+doQH=L^Wq;P&*EfKIlh4p?If#22 zY-D32VgkT%}&4;|#y*Uyj_iM>d25MW~2E^-`e z*})y}iPv)Bwf8K}JGk|PBw2fH1(wlcFf!p08J+qDp}BRD7&13`l1lpG8;=_4HEAYO zH;5s@VJou6D0!(*v8MI0H97pZ_b&iuznpuN%*~L#=(U*0y&`L$0MK<`q*7**DY?%g zZO^`PF;lT8!z7*LmgcO3e#+lkWmT%9X@`9G^Y=%OR$<~X4FJS0o$>;{3!OjvusP7-_aGPlV#{O7Ey#;biSFcq0RR&HE2lUej z7xlk+@+&vo%L=4a361szt`EL02w}2YiS3;EXL}ua+MW{~yi8j?fu(d@wa1JE1dsXE z^iaqsbu+$4%1=KRC29@g5Ng19CVdipC3Geky@3xD(KKBNZyQ+j4ERz|D>ZNpYv!BH zV!RX*VM_u1iNW(NK?Hv7GkmKaWv`GV1siJS{{&PcGUj` z>j_QB(vD0G@9%FHFJwz!EG3pRkD91|H7p*}9yD@SYTGgUALp-HMacnsTaw%?@2!M` z^my^iaNKm1ojnfKmojwgTDuW3PqM}!2KgQ!Z;|&E=#x*<^)wgkLDRlWunQy~ZBJTt z_QD5UhDFB#VXE^64jGPB23FL0A&{t$VFqLU{CO13YUR%r#2x zAj9|SC{1?JeT9>z1K5;O*C#ybg5U%i(n79Qe>6Y#-=V{UeLWNV1Mi8Xo7S14$V5h~ zZ?=f1n@M2u*XAAWv~LiPOsMrly#I8`>kT<+@I8ewmm_hyPMe)dhx?5@(3+zW8a;x! z?&7N){lwWGW>_U>cfP+1_c1odc61iuvG!A1Jmt~$dBOx-KvkljQS<)883^F+5NR91 z?D7rIg_Lb$c;%644h2T?;_pMyuQ^MF`oJ|>0}6?9chGOEA^VCAd_$--tDK|77xLZP zhrpy|Tghciu1+;_ooyn+(eLcW{X|Y-*uzK+Hw8DOiRx0d0^UgOQ0?&+MFL}s{z0^6=OoX3>#5>nM?$1Nlk3!v@m}%!d@x?8g?cZwb0e8bW!L*ErxHt% zG03h#-F*w2%P9z1;FoaAOVKJ(v)e0b<1L4|e6sR2=~UMEsyC+-%uiVae^WLjnQaS+ z2WlbEg0-(O;U}Tx#EkrU|GAf_rk|Zs{E@-V@Pf9J26E#>JSWg?bFNjw+N=<_JDnbJ zHEOvV?I3X~wucgxAnHlG;ksO1fYj{?u_Sb!p(S)9ytvyHno~NH8kzGwm~j)DUh#xHRc=7 zl|tOSvG6#efSJ9b<$|TGfvG z3r1T^u;T=`HoEBhf>x&F{ZbXwj*+xx8$~?b7GV#|9QViJ6ZhBCDzK-KiTlkohoNE? z$#4{Jpa~k??yq;udsc%*{T59ukfQ{52u%_3#Y(a zSJ4#OcS(Dvf^S+ErtcU;MhkM!_pgpGLa9a0=^5G)kfSx-|GF<0Nc}3$wXvJCJ!j++ z2CZSG1aaIBI|Ka_5q!vSuwX`?R9w=B7$72!@4XJ-T%*B^R3R7}pUGfW)C!2qrwnb> zo_gT%QcCZ=)a|JlrPd#1DP8@pi+s_9WTCCMy%u^<4_#74r!ku&(18PVK6m{6aia_Mtr* z6dEnk`ve}_pL2TKs@T)k-ve4?8YjxCC#)yP{fiRI{0~epj==1#@x>iczOTB;SrKP9 z2st<^vwL9TE9J{SD0rkk(~$N}jf8wbG;Xm}$-KZiwDKkZascR+OvH(bL7XFwQXqf5ZgJ5S0N}xgZ*XSEo5sqICp&V}Q z*nx=Q*en9TMkpSJTjixor^Im^4nxPp&P$aSAZZ8eTI?H(C4(Z!lWt(Qd};9fMNc5~ zu8*j5(Gtg4ayznfG_J&9s$}_Hfk9&ocJ&Vthjv*w&19-C9xE4CGiZKm`l%T%@DFCo zBMDDu>a~_Eh#7(Je5r9r(-Z3H31nP3qG-b5TxfE9=WyaU6tsV+nZaU`gC#;b8ujx7P-)nejwt z*zNvUx{@zclSuBrFxuQBb75%x#BE!cnkxEq+Y3ewVNy-k3GW>FDFiSJv3nPULWJ6gjN+Ra-bA^^fYctFgo z{#^~`%`;&b?df2_>`FON$-^Gr%tDCWQ!%|~u~aGjA0pNGSBPl(@`i~c`M?PArODZU zY=A>I-QGU;VwkRh%hP@@asa>lBMHGthC$9Y4SX6CXsFRsUhR3u8C{rVm505$*4^c>P3wEC=Jm=vS}Z`) z4!VK)MsslLqLc%6yF<1;ni#Jl@)$=ra^@()jbd?+!p>$ZpF>7@ZlIz1>J9XK4W}Gl zwBmX6>Fu`aw!Cz78+G^KE0!NVxZ~84f?;|Nj)p1enS}3`z6SUtSgyoU^8}`IiO^a* zA(U)CqOU3dVb@0-i~?<>W;Hv7MxigG81nSpWIvsBRUSUS=xh)7BT@Q%4E3{PN-liM zw_ZL-Y)He!jV=AGGcz_DgVJcL^AAC*en@b(%*lA-+$o3u_6hqku+aqZ2vLLDCd&Q( zd`rbcK{Mg7eZHE78@o3%^GRo4w`RvDSP$5-n|q8w?DGHs%o9}=7}~jtmaOu;@E}jx zqT%@q{HD>xdjRXOROF%CQ&akd15W?g?$)yoj5s%@q^B~?Sbo5BAHZWHOya*|A9&LG z;pN%Fb(O>5oF^4x&d}K8=G>sg%4fQ?W+R?Szf~uVBGwjOoPVXx`D) z?b}34m|T(P2>mh7b6DswoV=y)-1aQg?Bf41&}eVLzxT(_$CXx2DOR#h=+>x9I%Y@r zNqq(r)9%J#^V(iUdgb|-H7IYYbNEQNMjUmNv$F;oYDau{^g5Bt%?S~#!UJPz+&jdu z2}OWtk*9{7&rRGkOQFj`oyhA2f|tP#q73C0eb|>+^9GS-?Xajs!u;O7pK!4><*~LH z9{28facM8!+H2`0sg_}-GU-8q7$)_shfPE%0*9V2f_)f&4JFdB7;4(91S{qA9bqgX zgsF5Q{wKhHtzarmUxi%suv2htcp*=%uDjRGfy8>p^M3OaZ?MB)p@=ENoz?B$RFstB z;iOXDU7<{LahVV}-n+rnwuTiz9GC0U)Z)PP{CEvDgmY8rHKbdG^E+BDc`4_ePWv34 z+czjLb`4V@#3IIH`rt+;U*QZ2 zclN#`qz0cmdR4Tf98TNzSYA8c{f3XptaND@PI63ET+0SY16~5F_z z8SVz^0?DmuyKldhE;rWLjbn}nq=oVkOSSXciaWkGtkUc^?{YU*l5MZ-lDHmCswXT4 zQwS&5-u~97&fuao(4Uy8mXOkMcN%9z#8@BcXB6IDD7`0J9az}0=x-|Wg}d2pzd@(X zGdIk!mEqXujurPj`!jlS_pJ(-$9-|9RqyFiZ;sv5_OQl#WM^&Mst}l?7fc9TCP;hS zS8^g{8^=!E;MhZ{XF8a2lHN%!UZiio%vh1wo%S3*$Z4>keP@tMBItvqxplq2s%)EN zxd|PwHrf6pjpn_-rf^Ck63W)dDoLzI3#17_{xC7lr6A}ChzWl91Rq#3G3fL|KV-8l z^mdn4)*m_zHjcHZi??m*J()gASu7Pm2xz~>zVcf6aYKeKwyZI}gWC5x!5o=#XRJ9=e)z=Gb@n^qyROG#+^67PK7KZVM-P4W;cQQd- zlhC#*$ZV|)_eW4;rG_-+1(3^hKwd*XK3i-Afes=!=eDIEu#bgUTt zjfpEHFk5aRybi-|9z!+LwHsFM>s?W-S`cnyk3Y{ZJY{eQuv=g~5p5sEPw%lGGj_79 z`K3t`ZCc%t*kFPEcI`+1O8`cw=YAbA?=tWHG_{M@ZqDLiAB>bHQ6{V*BUdiLf`Ej3 z`~^Q*zs^t^A+eKNI5WvFFNEX*boJ@Kl%DLrPQw2czy0Ce3V$sDJaI$q&&rmp{of_L zQpxZ?nEk(-PbhE{z=3!NL5{>jC$saN$~8@5;og_06PP+kPRV=8TZK-dBjQXH?Drnp zAv%`(Hx29r!T%#etf*m&DZm70-(_G3?_^I0hu>bmPG5>v4rL&Y@{>>tN*x7D%j4Q7 zliNIu6QTz8Q3aH&$WfEH$JN0YP9zsPR(}27q+(jk39PyuMFQBDE9;%+UBlv}!&bO@ z?0Tsul3RxbchWBxpt_?BB!b(jmR1P#stv1&)}@N=KfrE&q5cDWj3up8Km5JXhKs`a_J8vT47;iNYT7JL~tHi~b&2Rf{=?0mW zy0!x`@l4$h(8V!r{<{)6CVhGlX00IT&M)=j@Jhy*%J*)XYn$c?6s71vmowZi$TZUG zKd?b}O?76Jg;B6SlpF}1MXmGxQW5417h)oMOF}=svt6p^i>sm%l!^6%rx)(K6eEC{ ze^`QnEzXSUL35kr`ff|g!U2uKSFIP@QmDTylrLlmU|!<7?#>RSab@Bg&vcH=(;XZ z;s2BAO_aZhVoF)cwb6n@RPKw#SkbyIxn_S;OS~GDGkKv3h50aGBEww0WFmjqRDMs6 za)zhV6CovHy_$-2posQgvPoQ%~{^MO^SYp6oVu2TEbGRE3}X{AUl1m}<OJ{s|`3FAg1hDyLC|QT&8-Uki+nXuJHWVegJ}7*D|hUuEBR33)7iC1YYV^+c?yY z*5XsPA#@@lnJG;(ZSX132h@=v_hLcYDH$HOCwMQ@rq=>l!*#1E#J_qrNO(+z_qiS~ zjd6r7H_XZp%H1hj3vxmRP>+C{^%mH;$?6%P5LINKR*#AN*^@rH+{REZ3Y5JFXfvC^ z*{sQw8=hFGJwVzAE=un(c#@45F#Xw&GBT09qZ47089E94X#4=EExdh7rY7cds5tG3 z$qbR%!8TvA5(>9<4mOZ5Z9iHG??W`2XaAK9BqQBoB!c9+0vH@_&X9y({YeoQO!s^* zC6Zh9{l3W3*x2`?vo?-hTZh|k004ljX8x=BAU;fOD}-74$fBK4mzdLZu`E5f%r4;RMmLu(|$mI)jjQsD%- zA76gBrqm}R7*Utfy=lEd1qDSKc~u4;qt@eDaBj)p?rjbPDq3;=xbZ`gl=t7NA4$=x z1=SXUvwc!ut}}dp=+c^~g#9`0qj#-Hh|anq$Tm%NzFzjp8iD$d8PSSp_5QIYDEjor z!f$x}TM34S<5D(*2AVM2BfOW^Aqfgh#vbdCrl22c^}uTKbbO!TDmv}Hr8M3b-gq3F zf*`w;pPe}n{TLbU>bSgv`qF-{5O^#squ9ouKTG18rLW*;wn@R_wU#qH*5 zPplb@iwlnb^8wNSHQ%&I(0&E4{#m%kye`woU>FR0z})O-AU=s%rlb+_6_%({uH|8+hDJTsSQ zy1yv+qq!&Zdt`Chh}_~_Ig_p@KHhw0ufSv$OWMO^uKm9y$t*I7%!$Qc3Mq2I!rRh6 zVi!nT7ZwYFktG5J;C5-=lFvkyzx0V69{}?vN`j*l-RblYo)(L~U%}0aGJ-;#Y@W4q z7QbR2R}^Zn-ECM}9}@CyUrG{~_0u4UXsY$s?)VOMKgxj~i17HVctb^H3BbumzuXwb0KHRBf60!Z35Ej1xj!ai3<9 zJnHhj6SF8oRJok_CjOj%W~J?omoBv8GWY?Iep4Z?Z}dOu<2na%ap(AUGvpJ8)vHiX ze$8h)&ssm7D_99lEO%dg3NO-KatQ*%ryT+}9U|e%_3!1#qCB_x>2X?Dm7#0fO-s~U zeT|y?GC1iheozzN^$?7n&pN{VRswiw&v|NYedC<)+#QbMCob3&Rh8|`rh|Xnz4DJ{ z$^W;Og%muS_WvTwi8s+AQ#h(J1KKtLGwMn1sd}E3_KjPUxS2IV2_ra#y zsQE6xLn6NV;@QG$*rnl_De-jH z-m1qWbNi{do7ce-&ZPCXq(8m2PkUC8tR+dK`SB+WM66cCx;3A%na;RG=7X^=7g)sY zL!%zm{{eSw@L}?E$nFo{77__U@|px1M*X7c1P7(x-P#HN^LK+cy{qs#ue6FhKb?d8MCPiPzBd?i?|J$kSjb zA(e*t0^hF~1MOKH*%9ctl+lOySe-k@;+ol(v~#x^ z(!>=FPQ98oSyIJBopu31Ia3>WuEVG596tQy!x6U)b>bo2dezBIF3#Njkn-KG=3ry+ zNAYazF+4Oiw>~^5tVxEKXum!sfUVr4wV!(6v;$$-Sh-*3&&qTr_bUA-vxdf^W$6E+ z@hMd(%=2TIdMS2^IS+q0K`F7ig)tS8baJlrG#EeCBcYGQr1;t1TL@!~&a_h9CzZ4s z+3im!l;6ecMSSFhA8HqzVpxnhc6DbimL0D3GZnwW$2vpI@!}T@>J4cK?U7w~C6Zi@G+W5G1$;x5C{$K;afbaCdk25F8434-UcIy$W}C zg1bxM{FV3nM)&Bx=!?Ftt2$$!b@rNT&S!DORP+X)ckd5VYG70k%cq`M8^8A0?zeF{ z9O&kwRg4K^jY?=C1{0(=Hx(1t?+N`~5u~8C#VuqJHdLM6Y1JLxZ{6}&w+S1^WhFsg z{xa#X{oycbRpH5#xyBhi_rd&k6@i0-H%G>yY*+;*4f~D&?RSnMp>L)CdZeI#-}?I) zJ#Pky^=a+Tky{#rKAjcj3bHq0X zKkDCZJ(q#`nX79=EHslX$F}+P6B}0;9v2oG(LL76`pjXPF~{V}+sZ~O){Q^@@Nl>b zw)QU5QirCaVy!M}JZ3X#zs04TmICAIiOkl)CAE{PNj}7e% zkqzbx%$cOlQu}!bsl}ZF(MHqp@1*gUV0oHS>(X8j|6dw@w_~G?(<5LC=uo6<4_}@m zoz$Ln%hLt$TFKs&62ou|hk=T0WRQI6&3pJ|{&hyMH+0r!=cQw@%vLXMEd-+p=b(#h zJghzBrb+!14v|!P32sbhGiAhm4J-)7=bS#YzvT>kmYl47oJVlbpMRuzgGnr1ATYGKIt#&*< zrMP4fXrmNk{pb~fpBAD3i>2%e;im0qRfAz4^wtOB;CN{dIa6bY6&+R|-{CUpf|;eF z$#~zapS(Y~nAGxS4m=zgHESZ98rN$Z;eGwqV|1NTA5thV@E1VfRaYoIwj_7Xdil++ z+jMBbu2vmGpvw*V?ZG!LAnm2_IXxE5EmVy!3Ixd+6E8pYP$SewMt zPbWZ^fZ6_f2_5IQLNr~*1kYzm+P?>K?{KS3zE-2MCCgLD>F)%(PLzgGm zS6Iy?ToKs~nd^9yu$ByKYt`iXwSd<~bKLkKb2>wq-~U!`CP%UJgfQOs4B;^)wum8f zS7Zkto_lLWSgP{c4*GUB%P*y zne)>_zJk;(5~T~LjE&cx+c4`xu7-YtQADTsLbd;o(bPl+%~Xwn2Ul!3;?Ld8Yx0Ot zgr+1wS~S9B256ejkB!^W^?H2f378QNBUW3sMtTvnPF0&w3t4p#`@yUrUp^7oL$bDp zh8nOY+Pmnd;5y1BW5f39NV&6u7S6&0cQN z@8taVOu@;WlcXQ)c%b9i+cRT2$7`+0?Y~xW&o)R3=T}I!bvV;$L2uTt2-oXn^UsW+ z6`0x`M50Z+oGn>shz(7o@1DnM?Z$0yPZueMn!tlsYb$&QqnT3g5q8Z*pY8rSZPK~r zVTNJe$iAA#^P}*h_wXpy zkB)Cdln~T8vP~7U<&va+Jy&cwO({#ZsY><<$&RE%=8iOZWwE)P8P3~YKnF}t!C%5~ zMb`|YD3~7J&PQu^o%!-?z*Tp}ysR5CL|fl^sD*E zCoPZPwZ`m~>{jLr=>%YtCSvc%#fCPuc<%VGqU274t93=*KDCJW%s$Xa5 z1juRrWF^UF8-g8ywra71SLb6>!0vRo;ToT@-IKc6!xR(>`m%4o8CPi%*j4vXFd$WD zsHosk_Iavux=j27mMG-7>$%v`ArzNMsS}OV!e(ZP6kL8&;vx{nF#Y15N^5H~Zl-K# z3H%!WnOd61+LYn4ea30@mQq_&4Dy_g{KeP|WmmOe z-U9Itu#H~-1!!XaU)tcmr}3X~`2Q&+W9n<2e@&tCGz-&c>6BSSc41a=)$f#*anK91IzLDa!;X5=Tf2 zy5BJyb(v$#LmuF7nWh;VkezyhXDxj>c9&ek@TY?qi_R)8v_Pf~9gK{XMCon5_{VEB z(4esx+s5JBPy7=?Tlt^0ss&?hU)sO&_1wz!+)nM)$tPqQB;zYSZ28nKvR%tBY}ie) z-##N4FEd2n$b(jmjA$R?9Lfrw(;(^vlCM}NkMb?YUcqetwJIRkY544kvAG!<5k>}h zU+r)KKFUsd6%H!q)}0|BQ0#d#>vSo9e)o_CPQ|s${FWh-@G9j+s473KiN)yc%*B85K zzq1y648x%EqMb-8RozZxSGx%$0(oY|7wjw1CI5!VoH_$uwJa&zY`@NO=75ueIb8ZZ zsF4rmL2g@}bGcwOLi9sn=BxX<;TBuIu)npJcV9IK*C^gW!RjD7nfhctror4@^TE%i z0v76mTt&nFBO$wlG9k{RgDOX*T*0wj?A2;U+tnDq@%Sa5-aHYwD-U3!#hJddzKS^f zOK>o9+NA$a*c%FI^z_vA2HHfwgRTrMfas0m*-BC7V|0AOPDaCMCM<}eXKb9h}Ch57zF~bSk4sGP1+oYI3bT|7Dkv7aGp-GW2aG!ZW1!w7BrL zvPLiNW|Z5VzrWvjcqvJ#)u)MG=x78T+T58-tAgk&GiR;gPQSdDJ7zo5W*`02IE1=b zhA!bbX{X!H-|jYr})fcAbMq%*pxgqxXb08ljx&-}A^3w<~E;nrbUP2hep$ zC2_92dR!Lh}v(YDCx_=Vo|Y}dF>Ox6kP;pDmX z1xImxqy&v(67J&T6Eo7+Xtc&=TPKHJ#H8!g@wJdJAmx(%ms8j=QoxDQ9_ctT_;6UR z{vsSyI4Ku*PmJ3bm7~-#e#c=aCSlXjrQ`0%$FpI2!u?^O-)nc5bKxG0LNYet zFRRi1_ytOo73#ahiEg-9hT3ayM?Y)^G6VmO1re@>7>FGyzw9Z1GQ83VR9S!@9c;fb zS019-6h0C_pj7=Xd;N4&_o|^%3Kw#;=Mc`p%JV z!ax0FVv|cET5Pcs!I~u0SaRaZ2jP*));hs`pVyzw?Sef0!1Qq_etyCLGXi;0Z&CHa zt{ikN^fVi@WzlnM&%Vd3W0+iNinG}?-mxaC?W+_&*@4q@VsGS+TkEA_4E{WI@&hlX ziiFjbi`%R}(dcqQRW70N*K`!+veDab+bOA=?^y1b&8{@w`=YbOM^g4HN%-9%WqL6g zwBM=AV&!_+g}A|1p3!R=*2RHiLCb)Oa>lR$uQh9{8^C)m-OVa8&Q!{br5o=yA*+1@ zTfNo(hlow~DaI@Dzpb_$nd<}NUA<&0SUyNg+=)9j!UeAypX8%EH)l@OBWQr?266y z_>HMxf`@=)II@CqLyltTo__QSD1|e6XQL#nXDU9BDE<0%Wv>->d3maYMgQ3MV$F%O zJITxGqx7Yv;&#m}aC(>_?r*bi#AtG?dh(5Y@2GgI5xQwRY4Un{KOudl;^4@rs>0jc zc0ucrd9dk|2n>fBYto=AZPp8AG^Io$Kjt8h(tS2LJpqd5ZHhl5P=di|MCgo{p|^N2 z$U+nuKp?JZ!CXlqMO8u_h^2Hv{3?+*xqop2^86uLEEOF(Yqg_cEvdfR%=>x0e6YCI zKpPeJi~ys~RXjx8^C_Z0{aIev*kc3OPwhEXU_aMyu?L0#F|n}^N@VM3$@{h*AG~@d zjor{&3aFie>+?sDNxV%H3T~=2oYx7%r;}V8bsI#Om$1e1Y1kPk+&k}Y;z!8`G5oo$>u)zwpatXZvg^>%? z`{m@s0;M}u7(unVp!$JqzF^0)yv=LMP}ji=`OaW6vOq}*%y`nFc$>)Z$ssAI_;V>a zi8K3PQ2JiIAaAIckr#WJr*h#cMmGAbvG*R-Om`drY9;K=)HfhVBdO_!8|5M}>#H~2 z{aYc|p7d2e6i@hI`sqjOIfM6z;fnlJW;fuNdYAlaDA{x$tYRI3naj%t`x~+>wv%+K z>vIvj=nDB&7QDCxtxDVNN7gnPF_TBo>J!^{)v=pP5d5rDdgj9zB-wGXNB|)%y7nqt z#H9Ez+o>GQiztWiN+SrnT$cS3{GLe&M9#&hS?lA`F`F59_6LFC^hf68UT-rxo(L!- zx#mo9j!OC@9c(@o@iAHWNNdi_JcNt^MH)SK5nMuclgelMskY)Ms6DJY{APr#Rz2nr zvLZ0?tOgiM8Qj!@BZp*wu($v|xvwn|?68aV-S~e;6BSr{NABE|=V9-QK;i3~sp>RV z#r_q!h4I7H$zt6zD>sShTZY71w>8fIH8zu7$df!R7gPY}iWuj|Q&4ujr|#cG?lqvA z6Ibn6Cg5&Hz|&hj0Kx0*Z#nLB)rXu;)_5E}zX5pW_K^tYPH<~;XI}4^yRC%m5hCgN zuI0mS#pti@O!KuGfmF73skvibS{8G70&fh6y1+pNIi&cl)pxv*kUCT2S`<(_UB^>p zRGxA~Y#pI{%mihrBy5^RnQn*a>`lqJHmZO!xjX)4F6UvQ+Ia%obl{7f0@Z+Put76> zG>Wj_&?C8GMQ%_D4OqN18FA8Y-}N>v@F(I**WXHliAr6Ip~TXj5WPr!BM?IC)`wP! zxvgYewhPlaZg9#>!R%e{N)O|beS~1<<@bwt+{yMk47;5X@qnPl=9s^L%_q^qME67} z_^yNW@ToyYQi5>KNPy?3=4kM=`;dd^D%UvqZuQG+Vhj>RvwiG5L#%N{RZj0$KEKuI zNYQW9Xk&xb_2vn(3ot#yLuFxryWEWJ0CYVq58n0es>p&AKQu`B-G8oWO9~?KsxS&` zRPtu=7<#htxvczHO8>6im-)Gt+jKi+HKSMDdtZ7tdA!HXF8q?MT{J4Xqwrczj|na< z2t8DMx130hws>o+EEVkH9qZP?B)3BaZ6;z`vh}JFqMe#PWRK`r-5iOtsPilMD0>zG z$)-8m?Gw4a`_VtFu|^tS6|G3;Qh1f+K59doN;5WMA%BGG+;*<1symdC%KRnDa6sw3 zZ3J3>rv{71AseExZHtw&A46hWgewM7bs zgL6cLExxG%wfxh6+be0VeN58ibRh}tzQD!knrboSFWbe#O-BI3?_*UR9vU+HLc2#% z@p!BzT(S?U1rCc-#*7U=eR3u#DO0ly zeVOBzZu86MVSDpJprE3Z**3=ZB{}0xp`Z_BOc@^>e6IBS5+9=2s zsqXKBdYm=3A{yCaKb=vHl%9V~Jp7!qg*F+CAArAHM4sJwj(HPuvKva3wf}f!{wk`9 zh-=5NrZpV5BiUrp(R2H;BWVChblW34Zj8vd%=C(ZF)#{GKQ97utg z>19lWgJ^B-TufvX;vG<~cWF+u z7yHH_)2Tu>gwtjmc@i(G&S$lmNO09O=sUu^TvI#!OhS!v8@SCZ&(tz%S%V`d(7>;a zzoU`5%;vwVj%Rj*QUmbVYY=ui4u|SK&o>*n8HQq9SslGg8b#k5IUJ7hC4W9zW8m}7 zel*=v_PLHU+&IFz5zjvCFRQ?&S+s9dFYYsvVM9ChOTsKQV>9b>HXS|q+WH`0qT-3+ zMf@eK`T*fduxA6CJ%!3zKM8F@H!*E8e@*~Jaw#;?R#k(&?x* zZU^S7*R&F2V_u6bmhX=GJTAUBvs!mr0BCRc$cFs4ojtN6)(Pu@v)Zgil`webUthz&59^@`QZ&ZjSSVloGToW_38f$#U zDdA=-M4K5B@m;%tgpE7`W%M@dc0Gg#iY52XYnww+)pZlt2Imc4cZ-!ywg&t|M?yLM zYv#5V9@ltwW%;Y{&F5e0Gl?!PfGa7|{mE_j1o!H``FUstnCzkr0Q2;a{#GK?JQhR(tj#wEk1yAOPbwYPQLo)bj}o&f*I;t z6;n}ZmS;U&Fmjdr5#Iq)SvZdCLG$dQ!&kmA+$W#D$ldaelOMHkJ5&(QwSnC2K8hpF zH4QC9K$6(d+HTbBAXLJbi9JqUNTMz$HUv$mA>wME-w}agP8Tq>v52tEOrHib;^d;j zk*QYNXmx>aAqOn3h_%cF4xeI8WjMl}p?NP6R8wPfDi&HzT!IStp&;%J85!w%2M+_= z+7?H2O_hUzzY(T3D1sgR%}OKGnCQM{3*5Eb&zd-SR}b_VzBCMA@-yV&RpmNZ=h%;?5{DBUws5Q1hC3b9^>qzGV}EBi1Eiz?T_U&O(9ck|6Ef6TcMC%w}+N7JS@j~ZZ!O3D?| zpg(uyxy6y5H~807q(wp;N;$G zE?A6J5-Ip^*77=2Cwyo`3ZYL}D2}}LsQt7GZ*7##8@2y9y#Hj0?isz_|8{WP`j(jX9k@!1rfsfegZ{xt18pYge#B`u#`gyyAxkF90FD&b32Cbrs+ zp@h)42cRz*8>69tgO9HXT;rf@DlaNR1gpLx_Mgjc>3GQK4$Lk))q%*F6l~!nh2)&u zEIr_jU?{TFzqX-buFOQz$%IG+3>`Oa#ha%-WJl5heQq8WF^EX?k~iFcagPIb)HyFE zNxdo`TUTP9=nft$BjodJ-^LO2*<$Y>xPu57RQLaAW2_}x!k_^9pNoZ}jM7elg z6-!;FBlrjrJ$v$b-nt2+b+&SG>T7%e`K+u0`^%u&r&JUw0!jDMwz2a)cB4e;7(sncAJ*l>dH@8w`5)JIfFpq_mK<4ZQzId&8DAN7JUz|SQ8?NR8J(t2{ zkDFOFPTfID-6L2Sb|r5CEB+_1E5$I3s&i(P>!Aua>Aed}Tt7?ZdX&JN1N*G5sEciiH)qmNocX^qb$oO8cktA3`_Sw;loMSd$*3m{?bDOHnIpVG6Oh-!Iu+DjoLjGFh zeh)Y0CGy@?G5#JMSGT-FNj?_J=t7Mp&!H9H#PLEM47HPs4xlweNp)x;TBwuqVhar+ zA^4(Zv^`P6a4SnnK6ll8!@+9aP=rR{86BX*HfeB4x2uajKl4DN6TTqzI(>|j+q{#} zTh_|tmR1!mUh%$k5kx^1wcM}DUYe1@&d=n;Fz{3NmEQ+bebwG>9xbWCFQo9u=mMc$ zNH<#ws&xQ49$TL_EDiceLoeNfa%}k4gj1U2h4dC`H@q;XlX6G|36Q$~cA5t#Gq3n0Q*M9T}ET*RTj-Z58aC`%=) zx}(iApHx>g9xZ%n1$83y(+5L1nJNxMK9ap0GPR6Rl~_!pHjAffT`kT;ncJa6G6bv1 zGXG)nlKSOAZ`ARc*idg;vq(ARx0Mx3mzK_*v#7?HO`bN)vguCQJ-^FdspV9&tuvsa zfy&J*)Ih;0R5Hc`Gf43EHxQRwWK18y*s-?uz6Si0(Te*W)T4qFC|i-(b>59=f_sFU zKOC`gIxKSU@j|wyfLC0>LNK=i5zm$_hMys+u(wXMrcE%r-7_K%vnDuKJVK+|mzZLC zwxD}nnC0C49qQ=bf>0Y-=Ptu2Sa#4niKseVtatcaR{{zuH}pTBYD8Ya7&+m9f(khA zBwEanV^8s;BX-+!GZkd9=I&;%U#_)ea1TaPKw7zj6pJE;OF=RUq}LNb0QddRcVf{s z50)*JaNq}fXE|EUI?JyRUTCPWV2FrO5{vh!2|3%T_>-FGLncyF?XR%BkZ-w1p1-D7 ziML~OSD!g8QIDyLTCnm%QPZ79O4WWXQGH=sqE0RTKt`y%jq~#ojc(39u$sy*SNCL1 zu9IF!5oD&ZZoyJpbh`6Hil&c!i)PgrE3aW?=r0ag6r}+-<i77`nxJ$B=j9)od>0 z%fC4l5fm;M&17^0N=4E&o%hVAbCgz3f+4jxy^8_#hw_?+p|@kQpS6gReW zF({usYqty22R^_L(r$dv)fj3U(u*&0*Gh9G8a_UVPZ4l|+iKA19p58tjH)nQ0T0S$ z)}}}^9!}Nwqj_e160y5ARVmNq7}5i!ZK<+ZK;;G%lTpGGp-}&Q@oiAB9B;h0nlxJh7LJn0w8~)9+&fT7=*o~%(gse) z^G%Vt+0sF?MPFUi&OHtTembS-91zgWk%%;s)usyO2phF{Dpeo9OUnL)fx#F0^-P0f z{#k0CR+1-%DUEyj^|`06STJm7gBE7rp#0&#F(<(L;Y2jdHHBFPst27SBEne|nX^%SYltw3!$cYA6lXBClziB}$|quKS;V;A43>emK0 zYP5Fk4?57vigwXca_T}s`7}xBVn+tc-c35(DY%BwZdL*G8y@Z5zp12Q(Mo3>ia|It zN9v@v@LH{LtrS)$FLrH{Mzg!`4z5!84Ds@g)N(JvBM4h}N1rjR@R%z%Rv>b=D%q!k zA)ye+XSwvlE0b>3r%N?ov~Q=3)@(-Wv;K4P^uOt6BNnFt>_&%JfGCpTx{vf4UP2(e zt@lqT*2beL2y$s0SqJa^3Oo;RI8JLaF(*xtlUm*FGzP<~<5M^sD3u=*3%n<9>quM^ zWcxlCP{Y`=H}HpQsY7uDZU|Y*;S5x5G;@x4vSx}#HBH3v0Fcq`t}l_BafQJuJ4D^ynEqT%IMVATLBO%V8Kf`yq9_UO`zk?a=O8)P@%=Xj+Rz#-#))Ku;R<`f$(+?N-^2PJ|J)_$|J)_{B>BjBJ_!Yp z!^*ey^B(M8s*E!yvMnUVOJdC^*bw#O8^dcYP?hqR-kii(l-#G z8;D@`>k85HWWDixhbm7SgZ1@qq{{WUPNb6Tm_41)$09}<(7X@;w^H$yDPj>L^?~&F z-S=eS)DX`zW2a?u%kM0j783FH#>!0;PLly^SHtX6A{r~K1&*V z(y~`}-eRBa5cj41b{`?rS`?}xWQI{CHEKHm6$aRr&Z}W=-x=oe-j{4}{sK4-^Umuz z5A%{uZ4>vQw?42pjj82E+gTc26_O4Qr@BK!rhcRyNmdEb+Ad^Fg{)X&C#lc!Q1yCan1y!JlXc0i=$Wt9a6R_hB-d^dvz<{r z_Sut(d7aKnnwV1cJY!cphNqxS>3`ilqHnq8QAg*Fy)JX~$FkLj4#zy)sU=;NlK0a| zkF1#Ex1JSgISv{2@+ur$Oi;hHon!C<`E^G!!rsY;upYr_hCX63Rh#7}qiv+Z+G33v zwLh)ua%krDy};g7i4YME|w?Wk%5dUuZT!ZW{YIxcb}Hc);SVU*)B7NDwH=`$kLWa z3V9fZ?Usghq_1?a7mIt~H@OlpCL#W& zrJF#2i7v1G3+t5aXE?Gg#%YN#TiO6D1q1P5s|vhMoSVuMJTRDK`x~f>^dnBSFYhnF z0ayeTdrCYgF>(Ku4#p%vFZc-b;6Ophwbjrgya)yvQ5?<=>yx7c`@?*n0Ruq;^i!Cd zxzho8DaQ7gtN?WMtc&oNw*W&Eee}sFkchhRH}uJ|bCy_Y8SNsTMchdyjcA7Dm?edi zn>;RjaV<)N|cP+)uzn@cBzP2RR}_cQ`lCM|H$A+^%;yCe1y>ced3$y@fos~$ zL$k`#AX6|Wss4$)a*)9dy(-LUdZ^06B;`BFmw42-8Yc=FD6KdWT1dhA)#1>xlE;y7 z*8!HLO_wFbnx$TiTy4fW*QL`p2L@TncCK9AJnK#|B=+Z->;!QSM{mMQ z?O0nhlR?%CP$DufQ?GVWgEEpu=8{6K%JpP?Kbf_VV05wM@+nh&rekC9^~o6rkRRxC zFt2i}3@W$I_Qs=c9|7e|C@bc`>A3zX7g~Mcrb&XjE|u}f&7r355s1AT@1{XCt0Rx zeh+G(8TT-Tp93|db$7@El!|7vmMS;|o~x|5$S;x7WscJOZ;gwuXBviisdsmb4pfKp zI`ECxcLWm8!ni&WBpIyv@h6c-H*l`T8||c00F<)K+&)jbO_C_K6e%#~KThw){2K$y z|Np~BH+TOUP25IsC4JBJX*>4VbyMy$_S36>Hw_7welzi!Xth*|4I}`VRU)Jas(@}axux?*uw@co^)9XlI6<3 zH|1jeKhqFe(yn@0l+OsmE2i*)^FCWlxjTVo1?n{Lmzh>sQQ`$NsTe-e+Z4i%V2jVC z%G>dUa?J(+b-TG!9^sn|KkWF-{HCppv}ONy%vc5ETz*W{P4+3-anSW1x;|FW!T=}o z6AyKEezcKkx7$o+Q?yw1;OqSh?F&^IQ&XeYhpl1Z8tAb}%ans`py`pR#Tj`#`}MmV z`n0&`0tt?6A7s51#l>Kye=*|lS3Ow5bXRJUq1XJ()Vm{Y=CR=8dsm&!{c23@>#T8b z(hhA#9;q-$(BDp7`8d*$>7X#JZ6nq*dc( z@%RuhbZc7TM@|MukFw>r1^Z=`3@lMrDA|y0u5QP(6@6!a`PY`q?IlR>k89CwSp=|| zQByz0uOr)ZvT<2^SunY~v(9*|ME~j9m8$2}A}}*lJe|V+y`*cU>1FOT3^;a`Y{p&_ ziz|NCqk*AH5yLdU{_+J6Ld;K>qP)IXh>uvH* zv{18ocXS<--|T*fz{`?U-HEeNKTch|>|d)*%n|5>=$zgXnc+g&?@5;ZW8Y5;y|6V6xyrGt%5z8V># z!!qz*)OzTs{G)QrWWY2^Y?gIn_{#zq$*uuvD;Cdf$+{y1=GURrve8VjI!kTnV*LaXIBOHeHh*4Q~*hT%n zPY9huM+R{S8zm-N+!^U+)5iSWi*O+0l<&bjz*a$V%aH4m`gFltYbhe6Nl$}p3m4%o zv*}N1hlp%X?#ON?+1je3dr6e7I8EfNoH3wH=s80LgF(^xRp;nEJPg$&LilCHpV-5S zwQpWDMSXu&xGEvh$!pT)-hHWUCc~mO+Fp9q;vbkE!v6K&ScYO!K*&#AQ;o1YE{5`2 z)IC*Bbd2w*sn$(^Q@5h)Tu?~60r9PwOc$XaEI^1-<=5}(dMp6$2;lZeAq^}>%fHBR zYw~f#eY`z3?Y|`=6!b&L4tcpFB$NzMy!u{ZkMv;8+gm~J52OmjINTeq$DD5>h!0&O z>=s);TH$eseRON*wbv(E7RQHI(A}1a(X~p37*a7E6T6MunN=1W?L}oC3;2e`LvsVs zJ_GibFaUFZq?#LLCTuT=RkNChpF>$Tdrvo=_5~V$8HI94b!Yu#y=6*9Ju`b9%giO= z7Z;AQ=LAcYNi}L1hDG@PJTsU~B2a^EF2mvn>a;>n_qHST-{nQBleB7ODskWzIGxp7 zM@l4MG6$aF<0Oq zeXbzljX0}UK3@0x8PJcz>h+DC&iDbn(xEiPsfT2pA9Vu$!G8P6#x?}3&mudY3_AHP z@Hs#oZE*Zut9sesyuv$PmRx2rx;p(iA0#r*h&%0=Y&K6qhxGjySmZ=OIRAeVSy}&Z z2u?8mV|paOS{mVlwr+QR4_}%B|6r1r;Y6fc7$18^3&{>?=`K=Q1cRNc!Rd)TxpbG` zyt$`O!B#!4pl|N_Oqq01BE7}q5Pe(rA^)G@Bm$jbM(rqpfvl`@i%VTGz#0pBykpud zqt?{J2{{OFIiqoH?9YzhN$K~5beE9d=Isr=k`seLBc&xtg5>snGy7(0`#44 zpvFP{&M^P7XLB)Q>ANon|0vf2D;NF^NTN@110+#OO1LGihws96`=oDG@k3$jeLibq zo%R3v%I#pdg0S9mxQ2cABO&?VqoQy}*<3_yQJ@^=R`!VWoU^530IuI}i-=!ssn7K@ zLLQexuKVG)d62+@z)IUb+4~T7OQ?%sJkjfJZ?GS?Km@Ycr9o2Tsp2DvMD?;MV9BtD zyt0Hnv^d7ad2}h<;eT`f`2PvrBCKcS;H|5|7I&O0?9V`QZw0PbC>Hq?jucyFqQ8qDDdnF4Z22H5tqQd@Yl<9m;8#!~G|Si{rNRE?Nnd+)UP5_jg+9F>i?-`-|4^{jgFtMgZ5a>ITr`|BBvL* zS^$-Px*=p5ZrDJyyWGivD!+oR}mF4+rdkS?&>Y118&m)S9RxD4svFf(= z_EKh=o$D#7Q036tVYrq5Ys7r}c$ZpX@98QjbBM^k`2!2e(Qk+p<_2Z`^VL-|a&e?D z)ScXRq_8)FM5(P;2IoQcV_8TSFUOEdR?8@ERc}f@f@!o=B8(uoESR_cn5}eO`wPoz z0wm#bqqXYK%=7 zCtiWGnBwrze&A~YA=10^RlcaX)M1ue>F7z{)$ii};kvjB{UbbGN#-sFFBA1VPt)(;YiRTx zL;IO;$&+#FcBxmrysxGepMKDgc=)}fwn6B>>BA=4o+Mj+!DMxenjp>RJvNU)Pn67- zaJ>ZLcpGk`s~^ARZ>kxPc*I*Zk2C zA(#kxBe-b|!ECO&Sq!^_Atu`Ha%bZRwS#IL^#+La!zWxc`DMBWrRH z0v&T8o^0EC+Xy3NIg2V@cC4h&qKf@La-$}fbU14mx%a#O=AT13`?pM^L0Gm;UuuEVGn zvr&DzrM%H%UcV;*fsX-1?HZFef^A%s82Y^9yHSi5FB(Xu>$RAcF^B8PPFBIw47GR> z&u_KmtBe|#Sgbl4r70JK^k1m=de^bz|tvLU(s^LR+$#(&jnrL~AQG*`6CB z?c3YRk9$iB0xWL7<4X`m{x!H`;({JXt#LnA@va4ieW+k0>K&L;!D9wGnTMl|`mlwX z_QJO1J^I*+XK#WN{_o6m*zNLvnd$Z$E9cajC~Q<%W|~agNyKwppl^f6e(_&km-Sy_ z`oC%3AZ(d2NA|9v^HFEms;D{ja80Hv!zHy}o(fW(VJm-p!#YQfL2nSDw5tKj7l)>} z=IRFcT1{V(*37UEOZn!u616MxsfW}ga>Jx)>>j`?&T3Nop`UaYtUw?HJ(+a(*BlPy zEWU*^hyQ1<@&o&CQ9;;BI0W`ZhXRTB-p)n3|67Yl{&!9#2-6nL%AGSORF zY#P2)xbkR#T8qWIrLkOzAUZfMH-b*_mroto515kG>WT_aKWmnMhAdNFeZX+@MNHHy zlj#&MYLcKN6MFq)&Lop8bhJn|R;>jV6_tpczEo#P1-olCvOa~NmS|Qn8rg+8?!+uY zYs+l3hWu7i6DPwAY3-9f+rY4s|FcQY*#ystE!gX_WT5y;Kz%)v`H!O6u7TfX-0@J+ zeRPb!%LnbOk>9am_XdBJKnKgXg)tf1eI{4h%mM#fI~4w-!vQm}M#nNik30OAM{7H! zi1o$a>*-YJREm7J#*i~xVvYP=H;rS^)C82=pf!H_9}#_ZK;HMm%6Xbpe`dj`g@Gox{jj1gT=+qOb6lQI9Y>=iea~F;g zaN=)Sk*8rYlxoGdoN?(tF%lT0eY@Vhd(xem+%fCw{&p&^1LHC;u`U?r*+Q~kzk!2m!*%_lwYXYI zXaX_J2^>&6nRom_uN(j;2(8}pBs6{Z={!qBd9~3w%{k>+^iAstx+sTTuHD!ZM>(s% ziGgC18Bai1n7T*^uJ3P^{vB%&Tq*5VrmRQf;?F^xfpQl?e5E3e&L^5a%_z5vO~aAk z3A-2hQ>|?rbJ$LoCMK7fdDG+1NZp?FgLq9o=EQj&^A|ojhEEetoKC9c-Y;4&js z>ZUi(v+Alscm&7EedPXcr;Q)UKOYQ$?A;ct7IU?eIxb%#jYvrxgjOk+=c8|lVst7z zFST>&GF_iM+>=zD5ia>MaYMl1sO9%^dxLN+M!7IH>;Yk8=6-194!A99oB2oJCM4q9 z@2_?bio)GGWE>cyOz&<{^c`EaBI9xrtD(6kK+QLqS7JzIiHdZ?_*DB9 z1m$Z$W)=;aqPlPH=bO`QmARWOm#bWiRxu;qEK(#}#0lcHN6I@?DRj(v+GeKt;9kB_ z=4Vdc69=qe51jDwO3`UWm37tbzCRzimGn1 z5Z-0x?Ms~zOeP_5I(SD4H+wp~2wN1dQT&Dq;=VULADUGgNK=cD!+6QN+Ci8q7-?Zs zRCAJ(DiwgxDt3Lc#;YL5ESY)v@xJ=RTB34Maiki5=Bzd9GcGaOS)D1`LHK%%XA$q^ zw)HL)H=_MJRZx5K1dS>U$C2e@)-C;ADgXUHna3Rt zR?JrP`!?-23~E13LbvY_C(UXM-J0zSc3fJeY9iW1jZ$8onz2cqxqgRo7ZH5>fLd>s*Fb>TjWF!8i``Cko?Mv@ghP+x0Z_r>^>m%RlkK zkEZloN>QrO$`8o=Rbf{GZZ0O^uLpD+(u$6ue(Bqrr1i+PN;CAhZxnCEo?Hs%$foN< zf8to%QgcNh)Vedb&{5TNYD9nwU6MH24GzNrgG_Zf0dGQnx)ssNxR|Wf_j}C z`b&oeqQGby#CU~2`Fy%0BT^Ib=3iil`2S5-kBgLjHc2!7n=~(VzoS_FGU6p_rt{Tr z>m)Jy@OwnuK}Oj-%mqQPLhZl~lOlsidHNZ(uh2YnpP5Q5u>5(vH4%#&3nb2;B}&%<{&{s|tY>YY{s@qRX3QCkSpE*_~b*&Yc+ z%v;A#1=&e^f6;c;UcDj{v5vkR1rH99VKh<_s7K2=W?m*&|9e%qf3Av|gKmYBiTEbb z$z7DU?UqwyxxatE*>J;&JG4X+fFIm$2{~Sw=b#P+5IAt(rX8MxYayJm zHMNQodu>K(AR#N^k9>j?6US_KYNV>tr1HTpy?`WXBtjdHjI>^#%|g9VP3Dumc+KBl zln(|Du<0$WWqU5+ZP0B~h`Kdc z(sX|L2V)F`dR$>In?yc!h30xXVs?}@q~C?KeAGrL;(G1W#H&>hg($kXkDxSkAL-0EfW6^H{%JN>vtCP0If7eg_PsYd`WIJpUQJ>OV z$xB}5!A#mv^);U)Mbc?7PYfV^>cR0bCzB8*q!%54@5nKqiz($glgy{Q49K@FV%%rIT)Us-QXvYMM=mDZOcreX4 z^B+liFo=NCCAOuQz)pIYJQ1z^obL^_iQorL(fx^UpxJhY5^WLLOHsS2rTL)^f2{)EJJOh6ry32xSCxb37=o`Ms}<#!gLGX5 znGUSd*qI$oQM649JOwj7Zev-F1OP06jCk;{^}E5U+Wpqtu<#KoqR)SU<$q-x#RH0) zR5vx)Nz5ng>ypgj-HB?j@2M>UCpTyz1{ZUq{m>6n{<3w}DVHlj9;e10&zGTth6V_^ zxw!U~{07O5ThHZ{iAAJlz!6#O(<>JrcN#DRMLy@omBgq_Y|OP3dCbRUrhv_SH{=DF zVUs@8Sz6DJlUln)hz9%^i+hks_iTznk+4&b#y!Jg&}Zzt7~zNN4{ObqU<=vvu()Yr zSc~S_;Zn5$L?!xh4qRU5$9YR-#v<8j3m1MkKU~KLxkOIA=MP+pED<8$q1sV7`vLQ+ z7$bKSW8YCdj=h}d0iYmpa zYJ0|`n{A?$AMBZFLA%D0kBf_ooj0lc#8%*ro7r9?`1er0(bkt!uy=IV8oua(2C3=- z8S2bnvTQUdfutK4@vI=2-NtQ7iSWLjiqFX)!ada4O#!H%JRqMTa)B8+Zb2eFZ^|8Y zVj`GjegU=yGcW9TIkJ96uV&F7$wS+UT7-ARD7itZru=1U^g%LbxgjF%wSg!FCwqw{ER zg)Ex}Jw*_si;s&$s35xZctmXeP>8q6<M&9AJ5e0xqAkZk^X1cU&ENG(J3Q04P=HxsIC z=5ou=CgONP+jgE{-x1N_)yLmT324kuspZQJ4}dc^7)!zewB|&jH;2tk>^o-?Frkcy zc9Ez%xdn~FN$KHdJOoaHKGaKmdOW*bRoALTS2_p4aX$_cXVaHfvx&5(I!@XigK|k{ zfQRhcbBnYGZ{M(WOn+F%a|homE@<3TpnCJ>Sg^+ly+VB{GT%GgczYPfl31_LrO5r8 zE-?K$+0;!o(Ste}=TpqpZ{~GM=9`mik*tj&_mFLw$oUj2hjASeZUEcN&c$6 z6poY%6XPoH#W~Km4drsu_TRjo5wAApABwhq_>?n&TO;+FEK}<@KhpBlQ{=nWH?gjf zH`0FWKf|!dj7vC(uvDybC!%Q?gY#tu$A738D~%j&ztt^!i9-FEK^XM|<8s$sGEZ_& zCb#z{hDRvBVzqoSk?HpJG>v|a_QGO|eZLmtfu=tg_o5IKgyRRdCh$yFKUvP|l{<;= zm92T^>%t&(&SCD>fgdgT`x6^Tjq+oh)1Mm@fAr@KRv`Cyu_N3ma-#9_pDm!lu!JiA zV4shB$+ZVn&vNa@gfoN(U&J>Xl-^ikH8QZ%*QvD|P0x9C!A!K-;oqJ=@bswv$K;Ny85p7`)9@B_+VA z@(d-}bay&38}{@*iP7mZ$S1HEX244$4MXiwTGw&*+hi=^TeT{m>qr%Q1)+w-3DlFf zqWrV0V&qzufqjkp(%4ix(y)&(ZwN}i&bMco8tocowuXG_V@ZNlp=KvS%MO?i(kN&; zT15;zkndM;*VU_v!2nYUI0Zg-xD!(jI+ozE)5OdC7*m$&ILb^*1%7gUx z`Uu>{dK+f3ZRCbwV}x$d%S-^9peyB8UyXg1cqq@K-(wZ`wg7d*krGS-9%~AZn(W|o z%tNXS=*=_#T?uayJ{+l+GpcA6`MA<+ZQlGqlTd6jX-EK{p6e;og?+!S6$Q36B^1wN zpJgEw+cG${SSX3u!E~9bNxeoZ8Sm3F>THPE9hZtXJ;1-X%6^3Crkqtj+`>S=g#@u> zn7%X8Mvqu*&+Ybg`lHl-9xj)`s&>=XKj!T#9Izw$0LSi!M0(|X5N4xCYBmAx3IU!> zGOUbP_ishUgpO6Mub{>BjAWkGk1|oa>#TA=VVi(E<}Op;;E=bN_O#;c>VU^8oxlW7 zXSwD^NkIO~SG@RNJ;JkMm*X(g5w&Kp(WgNj!E;+atv8e5pQ>Nvgnv>`Uac>_Snu~> zj;tT(3;iDc>G_K$mfAHaqa;QFZXjTR4{M;F6N>#c3f ze2v2b)M@QKPW2ssPU_vg%15}m>NT_Xxkbrkm|{bdytqIv`kbSSte5B_i(*K3le!iM zYs;oe<`dy-Vlhrn{C-DfwahC>^NXx{nXsuyxI^!;lfzr)-)6O@1pbu^P+g`w*ZPu6 zC%T_8{a?Bd>CiIZGSygVi*MIUuKuRBULJo!J_?~}S8r^pnfru2*XNTR=K{eszZ8`N zn^41IA1nmEF?V+Wyt=~<>i;YuiQPMO<>vT4p*6*K6ttyCt*=4{yEJ(@!h}FyalI#2 zO(y%Amn{1#c*S3TNve~*hbQqeoq*jzGCpK5)>UvggH|DW&AZdq-MrB?Iq5{~-N6iR zGN(~==M(+W)_or}tc57PsE|p`Va-2ce`|VwQg3;{~bea z3{bq32}ST5zrM4eFyZQ5;hDT4s9lFzPU?N!%T8zsbB_~q*!=eDLT=QtS;*VdoWS1@ z7BGkOrOC=lEgt`9ow>Iu18#Tc+ow9-K6lGqXr@AXdN`4r*D8j-yWwz;ZDkP>Snicm zDNKtP)g=~yDV@{2eqZ1wGLUMooSBm;T>778B;TK>FkQl|ma2s;se!0JS~u68Db* z`D+sDO&*DjXtlf`+k(O98G9+Ue&sCtv12LYi}lR{RHk_K&8eHZQJ`BpA&isL)$Q=H zzBS(YOG3r3#HNhp+3Kg8LRdkyqKH`|GpPK}{A~ld-9=xHg*?soawnSewD33Y_q{$8 zxgq1vA}-LfY>2uwsgS7`LNgcU0oPo+K98l@j|mtf7#dU~to}w>&p#&w?PHbd2@d(E z9&44QYQ7c)5;YP=XwyEl;+LXl%`(%=@2UO$jo{=l6^fF$ow`d%o6HaS@TyqE|%q;e2ihAVhBl0j)FWfudgL!cx zKqH5xcPoBuQQR9rOkkZK{ULqN1o84Ls(#R;FWiZk^~1zS+Ko296yZTll!ua(QxqbN zrE3@8DjebwMOYoTr(W8%tAuBPuWCNz6kuRbp1z6R%s= z`3@v^&b>O$U^j0)FmJV_ifc>tyqwt6x@qadOc9zqr9qJb}5-h?w8pQ}b(Vu4> zkDzcX#{HH#h7qZn%+WVM;C)4dvy%-3+2nRH>$^3CkhD3@$w-7-^W7#tsF8fOZ1Qoe zYI?@+?CgS&Q!6BoAl7+O3NJXA0%lFy;^VjN`7N-n;<9K3m+&_VLzF|jH-Q^3lp~`y zxLn2deUOq#U`NBUPQF)@9s(zhp0+Dz{d4bip-6)8mm_#%GEnNwY@{fH-|<5b7vvJm z>#jfUEC2W#s-!@VO1d)9xyR8)dVTN1<*Dlcf4Ta#0M^c>ALuEz?w~f_4}^cOSGbjb zrpEdp*Jb-VvggF)yBP5(3{vWrWT^SUb~9{N-Z;Al%o9WND0An|XiLf18#rwv;KZgb2Az}E`x(_E8hQG^6dN7z<%rP zny;Tp%M&eT$_-gtmU#-X+41}*ssWCwNyNsrKc~{`-FA*8;r_nhD zmW&&C$AnF<24Ar)Isv+}}A4$ZPZ75^%MW3-*@gk+gX% zuY72IwhgE5&Kh4dQgFprG~66*6r7xFl@3vB`wnlWQhn{G+KrT=SFcO4Z>MH<E< z`hn?BT5PHtEkMsx^adm~ATqd|mI2v-8(~{E47y-@40fx*6*NLa-Vdfou+`f8wH!K? zpzsTo!hSFjZvA3^qOt=wnT2`JVTQ_3wfbukP)aH5FFKU|wcskj6~fO&Fm6vc-kQYv zWO?=0(@t|E?H_fsu;Bue5Yg7#erLf9d*LH9qZ8uV`+BjcwO@N~5hP2`u(C#4dc3vniq>+K0laqnb6lUs=1q!_5pEqT&$m zZDWLo^w%uRpG6(7{_f83lDMLx3OlfL`VmtgMuECJW*zV_ftK0ry2u}<4IVP^oiNQ@ z#1-XiVTr=Tf5pC}Lg`$9d^L;$NE{mM zGPa6>VRZPv5tm4e5NKZVc+`VZeX1 zJ*ITR$kD=OE%zz*yI5Mdp+@e`sCO~9jRUG4|yuXNsc)KuC&?S`70=h z3fCCF>GO`~AI#aJioU8AcL>bs8}GyR#BqMgtUFiF2$Qmfor*EN=T)oD)1cS)pGwgC zjI*X0a!^ERIdbXa_igMbdFvU!x+LS>)K~92B7W6r5c?W;Z;xAk_h22_b}6$gl28W~ z`*Kmy3mD1c)%9X{f81HOob-jLu-KP+A}Lw=a}<<7Jt`1VaF=Y6rG!c60ui#xbsP?_ z+iqm4odLtyY&}-SjaCNcV+n~CB-rA(*1X=|TyG?)=amR10mEcMj0|c9R^E>L#dHz) zj^A|uh!#)!MU~x3i}~w*(oH`~7^AGQXY(@Z(($-RHvxqX&1&XgtT2hhf*q~XK9elY z+lERZNpNtIOi9MQH|>HRNSt;p{@%#%)qzm(C!VZH4l350yP8(LLJ|vg>#roBjLk>E zPbGYeo-6i?p2nHqAOi6YDYvz#NM~+jl++;I2euMG!K=~zpc$RN8BVV3pQv+D=zU6( zvNP*UZnp-i$Q&k{u60t}$JOUOOO4pTP;_0xsmDHe(_#1mwbYv7j^R<`x*%AO6oDQp zn-vI;RNC2+=(iv9B~=vS{~#&qJfIx+%Xalq5DH21vv?x&ysp3%S)wA}OLOUOmGl=V>pwhw4-Pt#V)lh%@tIx;_~j3~0E2|2QuX@G?pd(O z)DS;~XQWh08x zb9^z9wmU2vs8JzjsGa|yO_-!byf%E)k@(>S$v#?%(E@Liva#yXNwdGg?bI5$H^W(X zQs(pDl0f_&`m|or1Ai)9|JKwcOX7eP>rVY-C$JnA3@_t$Cn~KY`yp;qT#y7iJZ<*axJNYy;q%uw^4LwL}Yz4j|;t$!Wz7s?f zs%ngP3l>y&kkgsVXwL3 zzIjz|ns@G5c!MQ1>ikO($JRozQ9NQEj08%$(8veC==yy!#sJwiCKK9T?muKVw}N(- z@5O03DN1m}fMaPWv8tG=K{Z!;re{HCx!J6!Kr#`mg6>1YnI%o9zHrm~qo-~xnppwG zh~Pq9Xv{!RgVw)i5r966%m!djp5F_xr@&Y8Bk|*{*$KJHg{trfb_g4cS#NhL+8W7k zGr+;uzneBU`4g`k^8GFHKoS8VR*me+-8XnTzJIH8Rekl)+CjKy6RTL*drO@8Hjk%q zxYFVs26(Hq`*QF-SV96ebFTWeu&DB-B`q3%)aVpg?UT5yRk4{@GaTt3^cAkm6S8t4 zDwx_aqU5&DixcVY@j$+7GLvdn5rY<<6pOg;G3W#ZpNd*ww(y7H<+ef_>Uz0t$29Q5 zbOV0#_f~}Akr#KH|E?>Z3&EA&iZ0%)G1BEI5YbRL`38am!7aS`BR0ye|9Gkmo<`H` zHq54-aB?Kr6mcVBY)WPwo+NoJ^<1p*PUF5FU;~eo@S3t+$4Ez7G;o)X?h|q>grsWX zuF|iGbF7JjIMNMh!-OH;EOo{^y;}xhdSZ5TZA*5r#zET4Oxd|b{ekIK_c1@7RCgiz zu@a02_ktS*l00vPntX1OzY7&N*809`vzspT>(?m5;UQoy)R(~g{s(*Qear}p%c7Kk zEqfN3U=e7>o4o0g_X|Nf9<}8Wq2$owNgEtsVy`y%P75m2o}ZC^Wl7Jm@F1d zgHSINZ}L{#I#e?DqEf9n%L*4Cs?vbl8h^zhI7FN3uvpfz1WjWBr>$08_C}d00>9aXwCs04A@h*$!7+aW`{C zf{^c(=E&C)kti}3m1as280XxCxaY(2-2EOfJ5W;m8#B!0d(SN8IJ+-+0ka7SIeo~i z+0BE0qcAu6Wn_6^eJOB>OR5-(cF^%J!t}@ZX;J$9XZ@sX*4q;@LlhS61f-{=WGTD) z>?2Pz!j6#IH^Ehd6Cnwy%rns7?`Ep`4WQdyrI_Pu5Al*p;b_PkEo24WLDs$d_*EBK z4yfnC2Sk4Mr^NtxH|Y*F_$K@QRWZ-{6D#l@n(>?RcfZ_lrMRcSgX%%Idu+dO8m~^D zy`*!?(O^F<2Y0bFTT$$l!;0Y(C@UIS;Fkyzq9U2+S>MU{D*fYw| z=*_JiYL(o85KFSx9ca&9DoPaI!%$wCS-dKF3<}E}^ys;aiW&^`fB06E{A1O-X;){;4!~jLYLF6%iTZX*Rw` z8|^XHLmn8zL;M%c#x69x4U-c4ROntRZSmoVCH9&ZkgQ-ZJN$spXl-_P*PIF~wJhCo zQBX%zL^H(5qsF(%7w{&@2+CFu)87iPg8kkS3B@1_nq!)Vxp@IrN24z0K;RHlt6tza zbhk3{BtEyFwVOk2oKIZ7j}X;_Fwa)0ij`5Q)a`8x%zx1mezGJiOI8?h+X5At??zb; zF=>S2qzOMmRkVV*BVFsn;7E941z_}Y;b?=uIHL4wpA8Nqalfwc&;1j2rBUeW<$q8k zFH9xyUu@=22nhTCU!XyV|Ggwfq>8R!UF(jVoVS4K_8OB6PBEOQhz~W{wL@;>l*H^V zCIB`Z)RI{m@?IZ1@L5pw;AeVR=#_eI>4TvD$nJzgkqB%I4{w}MjPh$QGX(*QdJ)B5 z#sPTvu9RN=U+A2L@cxN7(|BuaEq{wHvFd1dO_qe$r=Ty7Fdko@yG(8i1|&QqT|=(8 zZm_4_(uEUW^VoJZxsQh}JQ$PRN6QW{u?wUHO7FREN^SZJdN3U_W4Ff=JQ_H4&>~0GnU2o zj0SGiYbP^^qVoG$-sUY%6;I>=LT&h$HLvODE*wQl?Yszy)x&hQ3}I zVZaamN1hlia@$a|_CT>ez!CcN2I9sg@KXfyJ6X+!$pHZ>sqs8{@6q0*YS30f?22o(Ee^X;L|dpz)XS)iv1}#{ZS!U8u<%#gY)Sm3cu8Zg zQZu`!ke9U)BPfPQU1pwsQFQ`YVv_enb3b0E-tcH9W3=)y*L$8sli4$vHD8Yv_`)& zy>7?-o1v65xO65z++CJ{aseg}yx#o&o?A>?@xw=0fTQHxrX(5bW$b6A^yH*y@ z<$w@F(9v>#y4-%&?P;z7Pl0eq-)>hU=<=bC8uj{Q$-4al=-E932dnj5iw_zXSm9pt zQ%zVD*$rCWJ-LL7Z!c{Zp~b#@w?t>q<{#J{kF#?61A| z(TWWs4K^5JLQ#!E4(7c%j|?OE6YML^8<>(PX`m@>HjO@aEMd6WmLuOvgNs644`!b@ znlufR|6-$@YYpL8OYf}+As{bi>_@(A@r-m`XpDf%kE{}KPJFP`Lz_o7!wxhlX6xOt zGP{pqVI!{W+|)HZ(JNRdq(*fQH;p-E7OocbTsm`qHQK(X@k%J*H9zrFk_m(~~?P?1`A9wqmwuFI8*!LbNMcNv$rycu_*D-alMBw-ILy$>1?*>+033 z5>L5)BDvoXcMw3#4QH?qGglf11a zN8WSCJCtPZqTW97nQ>Buu)@a>g(pLIU z$|dn7Er+o!$I4tw6c>5UoEzaSb>Y6U#Y`VcG$-4JlfE>}msuyo314iKGL+k?wbKRd z)SfV=fZ6~~HadQ8d7|+d z-%rp@D6PVf(ZydLocd#sqR`qEO0NC^!DM~&AxRWDW3kg=a2foO$L6t%m203+yVj>% zc`A#8{&$@}9k=>A>j?)8Sr3KR5m)nGvQ)CC%iU0%%v9}kA^VvXGxP3S_fl!SYv0M13`yo z&_aY6a9NH2>MPNSV-Fr_T~G)tpy+&GfUNOCwD*u95$y3|8J2JRjdgf5oA%NQu-+gb zc9^dRa%!URL_U!`Y|Q6W2ld|ip_Xcm0&>C!F&cSqnU}oaQ9em(1okL;Z}&$zw?()P z#5wd282@9gdne{KRNzgK-+uFX&t&Rr)dhb~9L>nA#uEE{z-Q%WiUrW}LiM{fxBZ3; z3C}{kEq>&-E%<@a#_MJ&&8*L^BQEnyUtD`EVh!KS#7S)ornMK?uAkT1k9|4cTwZ|< zWV7;|5CYKiyRh6N*P4u>7k$Ah*EAdaT+M8-q`=FBNc21FEFDM3=jp5mZ!wTSseLNp z3QxOgno+RMLA8ZTl!xp2DR0SaKvo-p=sSRBYL%qEG#m&aKJ`53F0wVASDEimy|m2Z z8u@yggdBI?c;L~~ht?^fsOMhGulWA10Hf^!YTBprXq~u6hXdN+G*hqu!V=Bs%??Ox zvk=wTC=o^1W>FA!3=2&C+z_{q>vGB!uakct*|mGuJ;?W0H6NLoooJwUSa#?~yaO?` zU=PGaWdbJlA`-C|s6rvAhrLCX-Tpiw@ypP*E-KHVl#Ij1!SngP$TxG>S<*f`l;mxO z2|d}`l{%%p&URADf@rs^Gt64vimL}_f1B0lM+CIalelF<^B6I2%_FwK_ffAxMMre^ zr$VCn%=mR7hQdi-8)Y>Uo~JKfb`GaBvLsCSdr<8p%g_wd*xuk5zpQ(U=c!z8$MWP@ z^$SQtTA6sAx4qwM3Xb1TRiEy(fvH%fpTtNnA$xwm0uoC*EOa+Im5yC)_m`=6N_;R7 zC7GRUd*QI`I0W5iO5|0mDbnK8_n!|X>ol~8>9kGqsPvcR3h)c~XWwEie7G|5nBXHB z#Xy84xv2U=U-dt3RT4^+m~cjlN0cDqS* zZ`sW(K$ra4Q?`u7m5ol?+CeQGq(#-Dpsk{0d!m3t=?M^J?q|@-ZPIo^6w>ZA5X|-z zpO>pr3kpBZW>RSaGD&m6u9+m!nGSQ-r&$>U&1QtJksGDPMK|1P{;B68kB$Tg*Tf@% zuY~u|3p*7}^@s2q=?`0LQKn}fM?T;8(C68^*KhmNn*NhIe-IBCztIp8<4;P5ftd)0wMVc2$h~s-mn(4*f{dsQynL?Cd3aS6=gub2fvcshWBo?-L zSbyjXsx%U>b)zaAf(r6*cjX!qj$nTEvznJcuTT8U)Z3$%WsQ%_krBR8Vu$59jqqx& zwVZojPzyJZAUsByjz=!+t!jGSeG}EY(DKqXKtp?Rf4%8rG6>_I{9@qbu#w*H?hSZ>18w0-I!`5WSv39lX$3^ZyxFMG z=HETPtXSbmv~G*viaGVYk_XRZK&xj}8n~BJtcz7fbk*cxGqt*DQ}WAJ9!R-WdDz-~jxmLWfhfT}CB*dISM}@1lz~!)nk%^EnCq&$MeD71~Jl zxwVUIoU^RX>@@GsdQ@5+=mAb0yW{wQu2{ZLb&3!TDJ;fi_$f+hMM}G({8WCyGIye7 z(tt-Js)Z$6uFb=u{i}qmxm9`5GZSLV7qzzB*+hEdh_#olr85P0Vz3MZ@|7AFl8_T* z>w~)ojO4x46{n5R5#}%EBa#dV!zX(EuHDLR;9fU0x4m>&!Q_z!5WqQdpm3os&}z{7 zdKq_i`0%Udr32Mle^|rm0{N#3Sm@obKPc@=;4sKj9E6db>mhU~bI}X8r=_^LRn*hK zf)&GocY|bWpx1wA$MsYh<%Cjyz5f^>|Pp z*K90u;*!+807`8JI_Y4ab6%2Q2lMcR?w5kc^UZjk3sJu*wGtW~Skl=RP~)Uf^QHA6 zV$&{=&PXJ*6ZwTFW=nFcS}3X%~~(;|k=tFKt{R$c7Gi(v0wk@m~Ojm@w3oDSJja zqJftLb#j!9N>fE@Ng(@(>UdL70<9xX-XX%wxa)1%EV5T18>>Yi;zO6-v>SED7ZG2P zgygN9chDS|t!o|X$g4|#n>-gHG}+_m|3t)Y*ikufs_5pK`SAdRtgMg#BL-g_(6 zo)@|1R+WSIzzx`4uW z8bG}^y$6tsi}f7O^qK^X9W~fDc%=Zlq)V7(#*AM>*?({oY7=S#pmEeh22*NARa4e1 zl{UNdb0mCN;m6n)BhCgr?!l3bYqu+71@|Ai%Pi2z98M@tkV=&?7{=!vN;`#S%0N>D z_Dz~Eh3Hi=%e00`ZBdjHoYM){joayZm}GUL2XvgE#WD>6dmyjc0$g~L;We=aF;3c} z(yVrac28mFg1M?C`Zek1&FH}6RREcMs9)dMY7Wl`ODr;nXVj8tJ0%qM(Iq#nLt@k2 zBMXum^A_rU&tpkxU8<_kN|33CP=>PEJgzPF9yZGH1dDm7XC0^WQfKnnHNDg;Rb2d) zUha8eHW0abPu##_0`h;);bEwT7nd~)HA?+&Js^cHy~W^z(b8qnhsn_xuJ^~wWypYB z7}7sSZn}E8?E2NA0kba+#E7}q23Nl~X8Xjq(J6cR7I7zBQxDm$LEJ9i-vv-N-n5S# z{&cM-rdNl>)bZd&rUD)0t8;1P3< zDBR_w&~9oUi%h~EABSEqNAn+hTKqEQx2P?&d2+VTHeuFdo|x|;ZYzfSG@lYiZzQ|l zc}VTB-m$+4eKkCix+Q5rx%J^fR>;K`f>B<2=>(WG(r6fpU7qw)Xs~D?y{~kXXzvpQ zcCySngnsYl6nPB`%tK4c*~wnJjHm_P4_ft_U9lYiYF(2qB|+9ESj;%3!eNlh+W@H? zJpYXgou|Vs^!wsoMt@$YS$}$>2~s|yD#U@q6$a2R-(*My-MD2!vCZDyOGfKg#=zPW z3ILQ=2bU(gb-R>0XVMIAGa}-4jMwKTTcOjj{k9#nj~7t#GTXO-=9QQr^_Z@;h7?u{ zd2Z8RZ=Sx`895qDO80#InWa1hyCr;AXu$_?R>^qf>^8-_r9RgeVN0OsGPEZ}UJkYG z{Mpu1m~EFK_E98E#tk~KdUj_^(H%(p6hyz(X|Evd31oF;_L+d(zj}&G-WUI^YZr3P zo7VY4`mQXl%~FwvUk?g1vj+PL%O$nqamyy*d&L(nx#~eKB3rWW%-Ze;F(1@1FZ%u$DrE&;}b%NWI#1O(_;0$!O@*WlbQ>)m|Ykqc3Uu2PpEo`2)pQnesB5xgVOp zUsb<+pTD|0v$Pf?w6rpnX1r3<9JJGNMqDDaJz8R_I)7?BXxv6^H2$%9`!`O7N0eS} zI%mLF3rtj-qO&bKXbt1WiDDf6*vcuioey}N2JhIAWssisLCs)IN=GqPGO?a%HMA^qEu135AwOc54y2aVL+{7 z?H&)+v=(}&8dgAHnNF=e6cw9m@Q;snn>KhK&`~$F+jvYZ_gWHI`T3D!83cUZy7KgH zzho&wLgdEpfz7^bz{Qo$P&58XKY0j;=MmnrcM0fQUfB(%@@N9P7!Gw~`5*SIF$*wY zBVA$~G20a^tp(JydK}f6U9jU;u;;!L{AwQ_m?QXgCgOe?OQf#%tLow#h>r4j;kCX; z!JcA-u_`i6Y1CrJ+JnjJ#$Rffn0Zlucz}~=Y~!{1eURCrLVePf0+XmI37?XL>MqU% znePYXP&j=*r2Es`oUj$H+Y((z`r#|c$;e4$n3;=Z-iclx*yG8Vtv=sgI?V%45wrM^ znUg6b)jv#AD#lZC7C4)6SgnitA1 zFOWzMl5s@z%kkF4L$nf6i|w@-KCj#rqiOwtnRQ0o^ou~zQ0B@RHbgkUE@OkmeVc(Sz=rvsG?nx8O-z}(Wde$`$YI`Mn%I9i-=SRlJg zQyX{D7#;YiX_EP+TwIh~1?IJAx+1+QXYGaM=H|l6bFV^V5fih`QQE6F>2$531qA2XJ ztlNniv>hbONXiIU9T0IlXKCF2@|}izfPaLQT9og5>YzrATX^&KOLwj*);l)B`}GN6 zDQi!k|JY(eX~co1Dvl@Bhysa&UQUZfR?uu**Jfvm76i@(sxeKw>eX|fPMXNIXcCr6 z^977&E!T+@HVL-@4$UEN%XVv56_jarC%piZjy*cL>Z`UtVi`1^GF|ywq~KXXc>9N5 zI_UY~NS1vZ`=?@L{#Y5C4p5b&MY(-30O(;I=y^Q=)x0~Ndo)%LFL|8@i#p5FZn<2} zG@M^c*!s56^^EDc6lzIXGZnOb8r(EE;C8Wy&PLWia(~zzIzZ}s3wO~Q{si~6u#toG zwG_^P6{=~=swIJQbvT6 z88{`xo8$44Lt$OYWXo0b63w24Mq%FUbD$*Bf^d`V(Xu-G44$CED4WszUUHnL-7js@ z0tM6B)J3zJyM}(~q!eu~GzBW0@h;D9Bp4@YM6sQ56ATD^bB!vo=UM2+MZAcG8TFipC|ItrwpQclH&f7d>Bz`dEqyjnGs0#@Oo_G5I04q?}X>f^FQg9--LQ zRXAlgdpf8#3^f>gCQ>8T)wubSc~DMb4BrX%3e_WtGwi^;=jz$)hEUmNEzNLc>fvz5 zv3VtF;8_itv=^+%1ymeH>G|^pi}C0Px9Cn5FTr;vzY!Sq3|Sx&oG)T@e0)fSVh=3_ z`$7y~x;qV}e>-fRahl{O&W>a5ryR;|(-j<|V~Y^k<)P85?qD?7T*tRNTfztTIXCOnrWp>&gsK+WdusDKG&D9IkN`Ywx#r*D z&U@;2Hs^bWGur%+RReMY;#L=CQ<6WcE^!w{ifu?^EeQ&odxr z$M;9QdTox+mo}dtUlBNImO0w(sn2%~@ZklH68!v=^L7r21=cM1h z>%e4buRIN|`RdfW&WVFVsf1$k_s$_hMd~4(lRuinYi36yX)H&A!~oIKIj~{VdbjUA z@oJAUh+frK*>_wgnNNBh@C^uj9|@zuF||5+%H(MaSidg(YTFXchweU)w2hU)qX)Gh83tiJhECHoKf7q{EZi3u^mbdKF*)Nc6~PjK*6C zNzi(>WYaox#a&F_{X+T|-89aRpshiWJt_{6X5Dp@d8{q&Qox@%)QEFlIJgqf%6DAm zD@%IyPIvf>eQoKrsk?HI`(=)~W_L^uTI=++cHyecK?ZdeAn~oCD`&N@8?%PG63>ka z-RDlCbv2lcM&``b+R4b(>H5QsyFKQ1WOa6B@`rD$y?WEFk^=n5cllbXOa2XfGSl!C zza6uBH{USnWxt+Yn)V@OlhoC609paAggHnVaqP&ow{%^5u$+TbCSHa6siV%tXpTL? z9%V&I4UUl=*d7^j8jo(!nS4&`*E9-0>(L}#(-~Df5peKzv`iBTfv!BMo$^x|{8(4A z^xJ01|3pA?sF>ENkmq!nFjU0oTn%eXTr{a4#&&YBPjfV9lY4R(r3IAKR;YSAx!ZCD zhcLrjGBkGTQk6@a*Nm8GRCSnL1;!!;oJp>G1&fESb5U2lG{?rD-zQgy#EZ}_kQ$+U zBPFl+N5m7NbfoUU$Ls3O?Ceyxu!Az>G4ZlZifTL8Aj-H#U@=-Se)viKxt(eoGaK)5 zV$Q2JgkXDjU7Lk%!BwO&o8taFJ$!ue zUO-*#L@l4%VTjyk6Hh8jroK|ykSr#I| z^PcMot}yv#+o4@MPZ=kt5Y-J=W?bV1ck|RqgSW>Z2i#zfd6iFHkxS{fqp^w#HPlfY zpJEOqi(MyDu|*GFO|>TVKQSquorwX~(^4nRnlKgX{SOBYP1Hn-5=gzjXiIbxOIFKb zC0HN(7X9PyfqJ`c_BUpNV20(D*$v~`KFuHy$@}m%QF-~9!Y@oxajPuP>kwy&zVfcRC>%khBHDi{vj;eh6ZuYP+8TA&ah9zbg zldtGA->_;gSqr6+Q~G(gc*eT@iRO3e0ngCus7#r@m`Ti~ZGpIAxH&`jTASL6XLw`y z%8*N;#7+Wc$1mt3GSCBl?F=a={))SE4<7eYh|7pJ$Fasa5ib~S9YqJ!_8CQt6%#z` zjnhn`(2z?aQH_d0;3^PVw})w3kVgvcb?*?og}&@5mmolm6WZ)dFI?`>@<}8@cLYv{ z46+;_HB^n1F|)eSww;K}{6sd7xfx;Vnu89JD&K?xi@f&hvSd<61VQV1vF9;GRj;X| zpGsteU32@*8-jmEJEtXWe`}XQ11#1LNmAXd6iS3_+ccCvb*D)L%}?A+`KYv}Dt#9r zaAaSHCQ1@!`(?*Z(w8|+MQfYX+GxiIJ(d|p(>VvX@UNL8Jg%e#da{y)YIM-H9#|aD zC(SyoBsv^{?OicJNpgCG7Du8|KdpnG1BZu!IIDthFMm?2l@<^39y>G4yim(Jv@7}( zmWBR=<+)ul-;58n4^<;;EoLQ6)UrgocL{n?O?c9cYUlh;W_`X8de~Z+Dh)*KhLogu zyV3!HCpF7ir7jPpdz$(?xplqg>XMOm-DGNOT|=H56G(k62hyL+{B;xW z=6QEoF`hLwK`9z0xhZy{nes&1ABhA`TX;OKDfE94>Ol@gys3(b-vXJWe7#c7&!EWq ztcB1_7cDL151a)98&r1kw0Y}|g!Tl|2lZsgO9V+W>Io3pvkBzV9{@SwB+p$S{82R9 zs|U7O75H%6?w18=ilstL^$rYm{8psZFx=%0!uOp>=Q|(aDt(DigsXt z?f38Uu=KM5x4w)0c}>@ppG4Nt&{!A9?#^FG+IU#>yxBQNt#!FbeSEhVO-i9_`nIM|`4r78h0RHgb|gLhIhkH=i1$F2mzY zyup4*|IbA*$D0>nv*SgK#wH%7YT;1~pqR3AY~CcNZ}8=`PLseM10>(DJ> zE1byc=6W1KCSgG&aYC4Xy`qXxz?)$dpzh87KYX2KRGVAWtxrn}rMMKA;!xZjibIhU zXrZ`E3Ium6#e%yeSaEmv7Pp|qtyplE;N0|_@4NTk{g*K^M&8J~_s&{t&S#RkuzU)Z z&bpUvb(GnaH2w$W7U#$6g)5toYxnZh!GjWmh+r1%R(45zz&$iS-jvQ6dZ_@J`tcg} z&V!rjbsZ{!K<)^zA)Fc{4uQ)=axMlT&%7#_Wta8*uN}^JQ^jk1GmL*$v|C~=-2t_F z(5RgUe-rCQN4|rG6cRRR5W6}4PvKLPRbg#8c?=--LlmEp<#829omagC@54wC`nqCAu@+CP&!?SF9yeFfwlyHCWLAs^7q=MVQ;Ou9uwJeiI+?) za9;CTYGRizhyen@SNIBOC_lTzup{Xx87eE!7Wevo^X zcwH?)*@tEJ&ARd74kvH*K$T6B5>8}!^KHG`8CqFozhq42Kdzscavcp`9$0t7y1Bin zsk@+(&7wge9j}yp=pQv1iQcDQz^*Ov)YSEzh=x3KbN6# zMM|T2Pa>K_Jh@RS^1GZnA;Ueic)%~e=?PQpV8hA9S|o6~niTP&R!_gD-ig84Q_Bun zU`yq52Q1C#IGQ&(47OP(~Lid`J)z*Cl^A35#Ho zcwgo&@NK|6qqR_HOHm?vpv9smUv#vEin8cj$`>^glm5M;F_cx+hghg;Q3KrB9#?#* zH&vW3C~8)oSCD0))c&=OWg>Goz&MuoQvsz_sJrMpcrgpTnzHn`X+h)3`czDT!>GX+ zK{HoAwePUNS)P?5@an7lFrY2fuU|e=eaWY{%v37I4(D;$a&=!hIuzfqE@l}#p_I~35?_HJ?=dT- zb7#3-VK+hVW#A`i=wT}~PP0UM_2}V$UiD4e%iZuO3zwwqaxUsDwY=F{*%`ujG_xCC$ltbL2;5-% zx^%4#6bKg}YKJEIE}pq{;89c!T}CeH@MbiJnB{~$D}NJ8@4PScAE7A1N{(s8nl zrAaaU56%fly9SX{I$U&EXS$qbtYaL~+}Qn!4^o}_fZoCrh25N){c&SnMTA{NoE^P3 z79MBx$)k#|)foz-x5~8g9q!`u=p;FGOMRtO7hC85w!74CK-2SR7?>;$_Lqk?zHr>$ z^Ky#>g%s?3a(mI!&f#w!f*Biqq=4rclpU`INppU(*xZ#> zC#GhE%?9x)I9aXAE{L(LRJM)`2Jsz4zrr`m<0EdZ{5yC~y~}Ghwpf@U84LG-tkP@d- z_8`KPdJcw<*6NGTyA}z_eB;iaou*z6uHU^^j@OC^G-CtO=G~mL0R_U&+azM-WZDJ{ zOo-5AdT+xPb*5|ag3o7+FK*1c47@5h_6Mq*?59la#8Pr7a;yca+^zZfpzAJQ{K-34 zFZjHjpn8&e;o08Ldt7UpLQ95q1pi8Y9RE6Zn7rkGW=IPtPu2Z4hAUVu(ZPt)RL17s zXWdIqmQ3i+0Q31O3lxsN*8w|a73*TBg8pe}98!qW=C_t8|CO@B6o&Wxps6;|lXB>! z0WNIFa>DcSY!g1;#m>xoPJ+6@7}D`MG1--|noVFTqx7B}m^}3dda+Y^yfs$@Z96?8 z-yBNIy7$c7g5j*>UNub}G$*Un{Q5o(eVgZr5xB}Cf4*n-1^+P4az3!WP6vgoO@CF~ zOTKRU!vbWN?dld4rg`Ie8Z1V5FrL1LwK&NJkZX%Uy1i^D$fm+>p*4{XF`15G1`m3g zPxJ30&yX0xw%%!RGwZUO5DD_<&90vOdZE)Y=dc$Iw-`XJTr07efzW4~mrAnw3!@Ew z!8f-Xvja&?l9g@oSt%HsZzeCv^1Ul9HN)=<9OK}1Yht`%&4xy~o@We(L###G5CBGU zp_k$#g{Pq$2>* zDuBPNck77K8!Y#Ay(3#0LC{0jeSsbD7saQnyZ4)ob^G-!HW!h>$eLEQe{FG|rQ<`! zjBMG}VdQllJ!}ZeOvGB8sBfiyr*PQeLO^Kbzuru zZCS{@r*k%oU~06DeHb|%zgNirR=9CDVInl6&(if;lTh>k&iwOxj|64gXtL27G=;y~ zVS^0h!cE7o8-qTQyZBKUH3f7lR5go3B8iho3v7@2_UXu{J)Z>m?;Mm|)JWo$QRnmXIt*AG|gBdYCp4LSOtifXR0 z#g|McBVK(mqztBHu*vpLu8!5Wd)uHP3P~E+?rBh#O+$1-@?9LJ1kDM}@)a0AJxs-PY zzQM3kGY&#n_eE0n&vBbUMCy1Apn?UK`IdYjIP7dVY~7m<_i4k1RM3mwOg^g1`vH}x zV)@r#@S-qr1>J-R&DsoiG$&cFhx)3*$m+;slAch9JvFgu1beYu}vty=NAD4XHq6tPr&AN(5bh@Q*m?F*zki7;}2jsPq69|C*%w9f+Q>tbW<)ZOOQ_6Ya>p+kzrW`jCqO2-`b*1GJT zTaeXWPj%!K(VbpPB&i<4$z{e%?XDM}0fcFKly0$FhLzqzpin1_B6DE}I!YTD38N#e zvF1$Ulxwv|_0v@NyIphtYdlFOe9McX9n$^qW4V1;y#0e3kD~MZG9A_cq<86f%67fo zuuYJbmqm=%*CJj#ZQkDMMPj83Pq6-g?~o_zmW03eNID4@35>)7d)JpU1qPmfF#e%G zMo{RTwcD8)D)k{G{h8{0)-rvMzM_B0+^l#)q#V1YT%(B3$pWrGKRxcg!=C}}sZ{mR zd$`Z|h}pV=UV5dbV(Xx-9PHKgYDf`X4hTZosnmkD$kGsfmebcC%xu`e$~z{%o&}Zi z@``rdDocRudRWF^{AN#JS8W^f3v1z6_zW%bKQrOgi8(5cphXoX$VmUC#(3{xsBF-Tun)h}U+7w*X$JZ6M>s%#qetyg1c5ZUp8xNS<){7vy(aP=>%(*WU6oPa6c? z2`@%Ygg<1GKHC~*C}|KbEw`ZQnb~>dXnINt8wTO^kIYwWoywNw`1olq0G&MKNjup{ zg(C`S6y}Be^aOS@YvL@j1$BEahw*F*=Db^$VhRnQa*>RswuMe1?{5raCTus3W|az< z_0phtACbezM`obb{rM~Iafbc`Tmq#}E_{wkB5Hu*55qjiCr%GZ>0!$9oPH(sJWvgB3Gw8Gr&FAb?}1}^U-+D=SCe9+39 z>RZ{F!W|{T{YQaD-P2>4s~jj7M9f12|38%+-{0$Rq?RiMrLXp8$|XP~oEdqo)T|cj z%56nA0qGQ#h@-N=|J6Pq``&M!#8Byo`hA6A=J60v_Zjhi{Qo#JBm?5%{jc0{Y-X}@ zj%g*GpLBFN5}q=aF}$Ddo+vuWXHjMzV%9i9?@R{*nB<#BB`H$q@8%F~{vRWS8`PJ& z#b>VsXFs-eGO2EK)I4_EIloPQSjcpul_VJcG+OufB9H$dD{!ncbYC>=n+q>pGT`%+ z>tnu9th9M%zmxL0W!`+9nm#H4vp2_fM~J6iD>{Mb5r>VA!jxyf%KR&|zexPDcMm7g z&m=jb9ag;G$Gse<8CFP4kyD(IWRyHoC*1UC78q+$a6&@6aD882;gL0OF_p^66wU|(mK~ER)KHz*DE4Mg8W1j39--FE%)WzFpocM z$1|`Pl)PZ*?d*O1ChzMki;57gV#(7x`QJxB|2T>YmGGJ>3Xe__pub6Me7 zY}J`QbgykZvN?@>5*OI!#|BU$T*GR!9fGp2~arG=mnP9=!!+;Cezg=ggU~ z-I{5sh_pSWlq6(fFlAQAC!0pHm1(y=5auR=%eTPUb#`-s9py~bG{2?4Cq6tG>r;)) zO+7T%*wFEkjci!kzGew>GMiPAPv%re;^EQqq{L9~P*e6gPESx07#v~x3O&1cZk!e+_kGEjY+I1BrTvgLboe9m1}p$OfdSIkTz z@70y^2+jOB<~9{F@k*(&8RsZ)t=?KuJCZq9M48}c4Gav z&raL(F*b&hZ_4iSDPbkEe^gcV;Anlg$>KyU|Lz9Df2A$l-bguE=&7VuVK;z4r!>V` zz@vbAK+*Y6?01Wr1bNg7K4M_BwFbW6`0;eS%Wg+<2BY}G+#8n}ALUR#^100KRvM^? zM~jYvSlwFETJqCXcW1%g&iUpa&zlcsB~_8H9_Jb4Sx-J*@R6E`>Dy=2H?7e8L-LdR z+QTm-nTkQnA*x3knTIcV0H6Gl*(=>wt*FNcrm_ZOk_ogt;MUczuz9YgKDgM_e=BD^ z72r+4v?AMu>^>Lf4oqZ_n(=Ht|6Dt^`e1l4MJeM386Xi`y!TRpY~1djc@Hy^M>H{} z2;C0Lwq+joK~LyukmPf*YC-n%-==%2qTENRnu;y$-=tn<%AX(p(^AnK#ww$j0hSs) zVjO!~d3Y49%5QDzXkpse>r}|^RSzOD*9p@O(frL+y|ndby$lr-c!t71oA;yMo5;#C z&upsSteHP8Dimezm`O4T1Hhg8@g-7tF?tWibPo^FsUr{FcsGl<$eyV6^tf%WxG>yO z#uso=k|+aS;K}JFuC>3**iBN<@BTv~y-a{AE@b(4@45H>cV&ErG7*-1SS+E_K_(`i zY^it)TTBMY4HQqmJ9l$dbZ&G#h!-AH+TTqm6lxDSHqMHTaY<7+!!#9jA1#-$WjgoU zQZaY(0=j#B8)2w7tsZ>P?R8R)HhX*rJGYrFbp2H^g6%DB$v7;pdsPOb(j9o@XJm?VwjexAK`?q%H zTo`TEd6p-E@!PbcG@_`8<}d`2qo1XteyLEj0mYc*b`oHjbybEmCa@1U6 z)9rDWg*J86bdXqN)<}WtM!%_XF2)+_S1y(T)kCwFHM{F!RIN@Yy8uD4{KVjji@n50M(IN2YiwzHXq)sra(eAD^ zA%4(X3M=)EOqH~%hz->8>+03_Puj!dRy*behq_2m!^-+HQznytz^rF!Jn@@CqqmGo zuPXLm7p5QzAFZ-ZeSg{C>?BlNqknZHDk9SzG4`k(tVNMtF0>U5*4>??Jb{7}4u)&Qk9 zEmbG)aoy7=g3|TIdd`;Tt9{rgMQ1iPVk9^EHIhzr{gNWq7g0f!%nc2 z-rGdl?$N2GAWwXgdA8~^6#B+{(hF{ZpI&Tkn5Kwu^u5k$AB#BvR^6yHh;Bv|lBy4s8S;d3wD&pfZt|6AlXa)QEDRfs zon*5w+st|nax&Taq|5rRvbvZ0F9(P&Ul`duGAu}br&Qmle5Tnsfk`P4NrQ6BV|GcS zCJPMav;T3dEID4YMltg>YA2Wv$Dc&zq{U7{QJvSg#3NJNA{oY4rc$)BlUlz9ZJ)*+h>}St`;m z!A&Gsq6YJMSv=!Sh!PrQ*_DTfnRb+SC0gIB^ z0G8c^XG%M9SOhuS%zoUnInyXmNBio!t5mvR0sOehp2;a3rF0h<^h#J(XHIE&;4K|* zf(ir_2O@r+l_7E}I%&%XCW)@8@-x`$TuBUbAF<|*uDUL)`Q!n29zr0s)XJP9i4Wkj zEoJqpW%Iu19jO#GJD^rME-%ycxP46U8OO z;%@pI=IKaGROXr_D@lBb?*+#EBA@KTwWr{ToZ0~;s;xZRIZZ@&w^J>uZ!#Y`P%~`!a`V3!wwRNCZKNKE z-`9=5EIwNCk3eCAzvw~;W`FK|c0uhL{!!MTrVzKSO|-ksYSK5KQ>`=XUf+UnL#jIg$+DV6#`xj3>hy z>pXi`xjp^krUnCRTR#O2Z_?CF60_09Tu^uOF6=a=?#1p_D%#^UWtu#>syb?U$FHpm z=I2*f+0AerC;l%(T{b)eT#?=_rxgW6>;;rvOj9A;5+ssY5&B~8$+cFT&bv;pCTOYJ zMfuke`SZQ#$&G}jmq1a=YYd>8+L_gm#_| z=X%HBULW;j{xB|M*aOKGPLBS0G3KHJMAp&yq%r{>u|fK=m4XvY9-6P7Y3thEAu+Oh zO_~+eq}UVv=)!E2Jgbat7TBa!qs35R^K;-T_y*KvmxJHyN<7;Yi$9jJp_jV4$4{p6 zrB~XBbuNCQpTbx-P(G5PGdWk65>B2_tm(;@OPo3En2_@y55XV%@2nBY6bUY!EI4x@ z3K3SE`O3Xhx8ow+R3=>&#E0W~{A_Z`mt9ojGEcU$z$(+!g}N;)Lz?TL7+vT)e4_K9 zu#GK9JE520Y&GWV>19(l2uOAA=_$eo`BjpN>27#h+1xun=@WG0x;Ir~>~6U{k=@E0 zK_yuS-_C+NtAIn*1^|6o@o)#wA(euSDmSWqbMH$#M$!sJ{9LUGaeK!WoWL9a|> zF!MfSE{SbNBYX|-jG1i+G{NTy3m5CSTGz7vfdrp_1%57|-&v38 ziH}-#yjQr+w}$zF$gqoPB4&|XMEw)R(|j3^^Z90ib;+3V?b=5No!X(DO2yhyb{H$! zC$qVq#cVMHxPnYxm|o(yopXMV`$!$d6y1)v%iCitG5DaQ8+hN*?4>B&WvjSB4_$XQ zSU{#v!x|Y1sWqWy{{1W;a?evO%IPBd-lNS>Uy@RL7GY()CPql+38izdGtaa75z`dC zdJ%um=R`N9MkW^s{^{Y%Q@=Fnqowp8DVpc6#6UQ&`Qv}W*B4?5>;vesY}mF}bI3MZ z>CuOC>_)!+jgu^?{$nzY{E_!?1EHZzU+?)wD^71U!>zWaWO*7Goka2bLd)7OD!O%l@)CgLsQKAmbk455`mW6^la)>ozmj0O|<2g&fape(4I z6%8y9xgmSdz!*rYyQ!(yL`iqm>HEs^-3>_*L~e|8TzxB>_rD$}=Gr3+TBDtigftT` z6cI#skiROFc=nB>|7wQk8b>_xg9Ufz}=m5WL&?2cLL@ z!`aNj-tYIlO6QHu7k~IGG+D@@xC7WXCCIoxuZi0BB5@)s4jJ50oBoP1?jnfa#ivu^ zP=p=+J_NkTp`fV5GzA>oTOQ-MdvdJFznL>`i6I%%%k_28(Wn-c&3<8Pyt*!74Xvbe z@YK`w0Kof6XEzu|>fjqBe&je~s*|Bvp$7oO#|C*v<{mhvR0= zUkv811?zL3FD+)BUv5*M?%q|NnN|=FKIjnmQF()nY1UB_KI{LF6V^lM-(N0Y*!v>V z_I(fgpLkgsa@+#pN{oJcQEcycE=%*X`@@j2o^UB4e^KIZ*0Uk?+Ff2u{wDq(; z7JgJ}?{tW)bN)(i^narR-4Mv3NZ|pHsHRgK-Bv3U_s@YgDufgpvB@&u{@uU6P}uu7 z4ghd&fjzdP5V8G^7p~%y%!h$@1yR0Zig*RQTKhhcwYZ3;E_E(WIeSgx!rsrC;nK>Y zFm@7{C)^+F>=#`|vt5>IdR3eMnWiKu4U8yxZ%VNaHC*mW?7f?JlL#VgWw6P5dcHKt z25OMa$e1hTl^X)AMb0GnWv_|`-DI$y_BPoB89;ig8ZwH%*wbkDYz^buAkE+XbE8<- zjzd@)pbB&2!W9>a_Rspg>748fCxK;q^D)^5qEq=c#3J?fQlWjlH-E~HZyNeO%7Z$j z6X%0|S-){r_-_eOMgPw^W~u)xysknhT`mqM9uC9wseN&%J7N{62c4Y|^j8;g)9Dom zjO|H1jP!US*Y%7t9$8yV#{u_jij5^-F%+M>0>cq2BLOlBLY@a)p`(V|rq)HVuyRcA zPCh$wH8YEYKyPRUBov}o%K_^=>M46mljQ~RBpV85pxe1|qR}mD8hx1&{p~OiqPx%j zE=FYFOq{s6#UJ(D>+_m0ET)cl(nnkzv(v!Lx`JioEhLjBUsyaos3^&0*Z|CdB2dH5 zLSQpPGTh0|q}0G?|3(luzh?bP(OINlXQ7T8CSeWZV}X$>=v-({y-zX?`1BK)%mUAefkklY4PZ|qE%QM6I0IFwywW?B+U zP(XO2lK~iOuMsLBCv#J6GKo_Z${^fINuOj4;)WUv9ZB7eOBV4I{k0}r=~M0TisJrS zBgBuvGR>a22jhj#XJfI>*dRyKq4%hMpCgWjV`}a$)GRNG)b`1yQ(b1HOm9`Ov36uv zyHt1Ek6xew>@01E*Xw{Q(eqXs6BTwU*>Lfj>Q&u}3{jej3H4|sgXt7QunEuZm-wXe z6)Rob$Pd!r6?_5c!yMVfuQ{w968zg^cS)Iu0eQU%lwWA_=kxzN)jI!b!jY6U1W&dD z|AKf?;e5svo9yXBjmw#?OJkwuPn-Om1+$lnLEp#{a)bp=us(E@NS%K`H$3)F9FV2k zK~#HwQI(jm_TUkfL?np#h)ReSHs^S^ZAcyfE2h59th$@2Rmlt#;&efXE1$cC_-jb89;J)JU_jT#!W$uFztQNsl}vc@nD&hw;9OH~SMrIk zf3t_D@0CWSYR~(Mi?C9MUKD<$~J^yso0Bvi# zb#!Jl%fjFa7+vh)i}6q2rjEdaw?!7bwso^Ls1Fn^twYCN8A*A884pAp%po%2r|3799*WuzW_ zas9PZsgkFauO6B15AT@Zt#J4{PuS+p~b{~|d#WmS|@%}dI1mVnAoq9{nWbcD! zf((5u`EKM~pc$B7%zCCh-8@B(jizJX(ObTT3qk;HaZVFWc|Zqn zn{qMWdIFZ@N7mu=5@KLcVh}F0h)HgVBo(Gxr-XMM(e#}bA1wHan;0K76EWs9=B$=J zjP5?4u|8M-QF_DaifqNxZz*@o|GrVBF+-EE>rQ;T*tM>L`n zblGx+nGN0B`tpRNit4veMf#i5-uf@UV8W;AD=@Efe5Q|Q;i@~My1J+z6>Gt^57D`2 z1&GnnJcwz>|9uE$7?FZ2Q0Sf#APAc?Ka0`uwrn2X+D_~%y zLP(UKwTU&)7O%s*ZJnFWosU6GSMhO25V8e2Gg?c?tc_#1GJ_Q+;q1G9i6_-2tFlDT zgPJn)Uc9Z%ng=fwCMIU?#q={rr7BJL4qxh z3Lw&3YWlie8gYEC*Q{2S=XAZ^r|2%PShMY|xV@((p>^;WM z6ry~r$0DcKeww7zE<&l};-9#=fMLiVMq5-)E5sN4Mermm6tv1%y=C!gnG z=!1C!>I_s(qjWvY3Q$EF7J-n|YkK^8r_{E)J;XM<-pmSCzn2&dkSsMO#@_Jm`yYo-sF9W$Sh|z6T3jubb|py% z{av_dVe28&XYO^P%49(96s3i!6hv#e*`xY|;Up5SV3k05pK`C#c$IW*TE;1oLA7l* zy}?!yGr?Py`vAas`FCkO-Tn0unvcC|N|-Q8%J-b7VFQm0aMS(S`1VFm_l0A2#4dDS zX2oai&4(+>!Q{8H=^8viOXjHf9ww;le5>Qmqb%5k=6^m;mU+CT0=hXS!+g^|YM!I> zqXDdbkKC}4eaZq!Cap!C4bM}MDC7+9WggxBy1VIoYc_7C+R`-`l{Qzkhns>wVr?-r z@YK8-{_Xx^PvaZ1kUom%CsByB+(u z%O_q-L|GaOIx-g0O=x%~9WEVy&aFy{j2{U1C;D4{B4J(sIwbGXfOYk-bCU{+J zxK}vCLr*gbum8T8rH~>8_?)q{=q`r?ynpB8K4CIx4_#ija`Z=zz8;au72{X$In$5O01$^wPt>SU|(Y3LR z3-(vs{xHO-M2Iy&z;U#otZCC};%E~Q(8}JL62UVNt=D7htEktgE89BkNTpWYKF@pw zp^A{OU^nQ&a_H|!o3kJcHY2uE4nvl&*D1Mwb)?(*I^@)9pPFK)ei(o6t$!7*Mypha zbh^Hk;Q5_F&Eh>ICJ91C;JBD0*(;7L(%9yYmb8v>CPAn#@hB+XUEwKz*Rr)2081PQjXDHH%{m!fU` zK$%xDsz)sai>7GmM*Z8hNY?V{^4$vs85UD9H%?DQ(XbMrpApwf)UQ+la0(aMRVqbDya;Nm5LwPqL+lJinY zOzGtG#(_$)he)+TsZpVe;I1rXOa#Lx5Zx-d+;T(&?LBCjKrrT%WhW@HWo+!=t+**~ z>ugl6Y>b(#EEAGoFBl>1osx7tQlye?QYhr1S+;Sag3ieuPA+Sp z!B%ZD-~WnMOt%iboGD6%W0nytl2tGEg)PRR5f8A$C=+kJzouhn;G_Mb|9)YnKC>Y+ zm43lUC9x1I>^R}XgPq06O;+{L&+Ubv@_~3>ySkov}$R}wO`IvxRYrXi~511HQ!^`Q+GspNAXXyFu z4_@2-*a(23w?Cn&IrLf6}%VP(}^G_`u8d08$mXj53EE2f;o4(t;A_rW~ zo{Js@f_}=j2>P+jA(-~EcJ*~mfC^s1NVR-p+MD*0v*tNQ?TYOlughH_gqW0@Kfa** z+Q!!nl7^diN~Bky(!h;EwI zz`C?F6H(Kg$#6X7beBU|Q4QWO73D=5mulF>SuZWG>M>L*uimxyR~R>EU4s(DI~iGD z1*G#-p&kD=imsf&ga_JETo4$w>>F}aced0)T)^Z_ORg~6Vfx*1hlY`poGp0*yfAsh z?^B{sHSmKD(dTzve{SyP2|S`=ePx(6yhKU?FJj|O2m}LbY*kDFUKJHbGL>WeV*3&y zA=K>!Tz5QQM&u`z)(;}#bvGZo2>_DA38tRK5~Vth7?UG|<~?jyUy|%S6nq|grYcV^ zYBN%O#K2#2&?RcW9lb2!_U<+JYIq9c>=9`;8Ug%5W;GD{hK{3jTXRTwtG|sYy{W=H z2D_2dh?6lA)xHQ$f^Y`ee}`<0sC{LgQc^sD9m z!GK^-vp*8a1}ZOTs9TyGK#_h?Ez5=D?)I;$)x9A``Bc7WFw3*shXcdbNV~wrNzkrv zgWNLhHCRxUe@vrk?QM(N%3y`BHabyPS&F!)yE8POk2rremF^&{V>If}@RM)h8_k&| z*%J4;d|~(eo2C;}XD7mEg|pS}{Q_=>8N-p>87v4lWjJNn+mN>vWyi3w_0;3UL#e_r zWgS5qt|>j={{3K9&4zYCI?GDat$QHbu`ak#a{v9IdOx~+V(^w&+CrVl$I@Szdetd* zdJR>Jt#l~cAdAVP4SM#a~@HCR!$X8;aHQjWtZPomv? z#tg4O?e2*kZ9LXoSkKcOPeDql!f{w>YNMy5H}RP9;dn)zzJG*snAf^*a#figdPyDG zuOgOnoeuM7tTP~ZQRlOA)>sUTKCXrj7`OK|QJ)vDs_bvM;E`lXX~-0vd7PRiEdwYr z-2f=q)hyD$_r@ELzuTwi@P%8C_m!ST*xK^mM@P$l)ZrMm#|v>ZusdG!8^Z?B@=#`6 z1}TpnX}21KnLvIxnS1E+viF)nzTo*rde870eXx(HNuN z@x4B^*lbIBNrXHfpqW=xe9qYu~pe&2!hrza2UVm+PS z*KSqiGmlTio<7!~`FOowPcL_5re1%0aVVG(wtrP?v;4XN2PD(qTR4a77YeT32qKgm zZk6;M4J|-i)FM1n84c^i~ci3y8&rA6%jbC z%^=+9UeaCV0?nJKA(2}myii@JV9}EG+lLfeOBg4?mxTxKl`GxR)Q#;h5&q;E=<`pM zuJI4tHN#_Jay@^-xC{A+bNj&=6m=M+QKEf&@x8_3=A!4)-<6tAhYf%dC4nvxnIp1B zZg#q3HJ>*~rgCZWk)0(Q=eM)G(#_S)lB#^1=SmN~Wlao`0oE>|-skmjB?+7QpqI~T zLLfBOuP;}N<@1r6nf-CINImIBLCM^U*-N0HJ&JM)o2Bp5dLl?P@*P2Ryq6!1fr7p1 zW$}BB^s}|ngY%DKRLJJYOE+wrQ9#a$@8=H2>EVvC;Vi+;J2$l6@;HprWvP%2F(x9n z>^3<2*DFZhjz!uWS3Ay>C@~!%borpki7Knv!1{iam~WXVxKn9{bZppyKYn+vKVE>J zg=OKx1Nv}kvn^#>A76oX>jL49Z@lsHGc7@oO6hlT2)T6^DOVIcDpa#^+c3M%t!$Uu z_ULm2_d`gP$VdQ#iLkHaefVV7OaW{O3zWUg^@H$@E~234x9HJn{sf1abgO#Z*E;l0 z7Yvcw5rA4hnQQpBa!QsJQvyAo_$6-L1d!7}=_?qMz47R0yf$&2y3+PYjx$n8ev*Nm zv>J9VL&z>N+rU&2dqwsMu(DRD#+yo+SpTt&XL54TWrgNo-DA&sCC@ZN;zFklGJVce z+omA3a<1DG8%PXpy&flq9hj@z+2Db zEwDj_siP$4DF74YFBm_D_20cQ!IFlA$4Zkt5VZJKMEl`6jJJ6(<(MIJ#^=MKiQXJj zvdxD3`hzZkyee^gI+gTAxn~{o6Gj?NsEO+hUR^FzzS9yymCx zwG@Ki=+5weIYUoih4wjv8EM2$?J6t8%2VFjuiSaQH`RdX%QN4NHEm2R5mrc93Qf?k z?m|jmJTM(?|G>2mWk*+D@MH8ff?(G(R@3T7obJiCb=-f`<{LYa4)Dog>$z#Wem<7G z`ysGbuu62QwPSsE{^5P{yFlvd-eO2&5-olIN$mGz)a zI*N>m$jY92KNfqcv$n)p-}3X02htl65PS#Hdq6UtKzoB$t6E4W01KC+>VB9dr6Zl# zPo1q0I}RhS7R#yFgfTVvKMH3)wLPcCl6c=_B3YWp=f4;wOrzxjvC>hmWqq(wF$+`* zm9Ti(tvhBuvcpSnPH);F9DKFvJ5mZQ^e^}31h;6H(A5(ovGyu`HN|u&R%|&N74(yN zToG45HD`Q(KYnD!R5uPvL(TP1ep>0?sEyza3hEp2%4rJO+#5l;`lw$nc4Cs9Ga+u` zjZR@M2-U2+zA^Luf>zaaNZhA^=@7rEXa^a#&byx#^8uRP8RNdbEC?To*J5|+t>xPU zTgie?tedxrA3$Z|0# zIC_5&UWnF{8k@H{%`gmDUtyYa?S4UIbl-@TeNDhlT7Qb!At0_)UER~yiWF% zqDZCBYbFU4)Zb3$IP6$kr+N#^A)90ODoai)vwgr47tzk$IK!%&B{Vr%SJqc-iC$eW zN%WtIP(rJ8;^oauLrdlr&ylAm0EBYLrZAM(n!$W5igi|XtE2{rxDy@JF3joY~f4-?H_HZ#J zcKMs&$j3aYKy2Fk7|s($QVGagBQFOonh_A!oaG^1X`=KQl&V|Xx>Hs|G!@}n2*uhX z9vbgZ^|L`DOg%>m>edzKj_S+?klXTFLz5IJmt{0|Iz>2_c#>@)*3dn8%k^x$;ZCSP zUvu(rP#g|Ya{hnmFEh{)RN)@Y(UdEq5K6}M(dDlchJG9;J-v{&EQzL~V; zrZ+n$eZOtk&1}%dPvFNPAG(~a4|bLck(9FP*U&!a`HXgGdDouuvF&+N%drHo!%8Cz zO|kZxCP@=WUS6D+PS$-e+Iv&V3VH}wN(MX!ubTfKxko@Sr2XpEG_FS z(Rlpo{k=KB85`IU&klR0GbzRq%D3p|nb$l+uhkdkf!`bT%jQ_Kq3dH`tEP}sn+A%a z7++k=athD!xLy2|?Oy+5^@bm?Vl2<5IB3wzUSw!@y1nSiQj{o5>21KG{+Fe&A!uW9 z>n65#kiye#ysKy|9k0m5*#k~dD@~*xa-E2Zce}>smzREIOtEGSRn0UxJnCS}b58Vh z&F6EsY>0)w$So=j!1%&ni)N%vGFWsrO2|xS%y0c#@b9*s@xO(|%#9q?LE;+)t|Z+3-9Gj#h3o-{DIwOnbH7W4|8`836|;0NT;bp15RL>1#uQ zy8D3m-aYl^(|`J+iSCH|NvaMA3v+#%oE^ke`Bo?0Vf+YNzs@AMgQ*PBlwtI;h(|;# zVi4}fJU}}lkctr@GWCaH-t6in7LgJB!zLEUmgFbmCF?|vw~@RGxjbS9i}`XLaX~cc zqd5?LTq4Ey`+neuIL-BIAR})g^V7?9vhG};J;4S&tPX+pCjE=7Ar4G=?OJ^A)q>+^nL z@RK?-Bz??KUBWKFbptU>b>4&HmuG5vIKe0T!(YB2Y&uwGpnZp^yrAD)Au&{Ae_SP& zz{)g(_Wb*yiFuy}v0e6fg5v0UL^QXnZb|}V6$l#zu}sbLkCEL`s}=-lAIUKdCgd8! z3@LY;@5l<~x0%@45KzHz!MDfN0=16BF|-$5j54($Hr^&@w#(EUOz`h==~O!Vm{aN| zvULk4c{eY{mU*LWA6o7nb@v>Dq{=50bbQ~TPl~lKGp0r4l~a<=H;8e%3Vrw?hh3g> zZn3_%BkjRoq1^mZx=odPY2`p}wQrhPvpS{K4~Jm&rL#cBAC<(Srx08Y_ELpAk@{l& zcAQ-Kuq_$1TH{#@4yG{jz&ROPpk``K@1917ls`a^S|a_KvYG?m!E2Lk3$^p%#JgtJ zas?HWgYgQ?<1bK+d`oUuP25xI9L@D;-uCgk-yB9sS$$>3LlXY@nipTDjqH&XXXn2f zeBmg!aNKT!vWpU>%jcZu3;UI43pSPNZ^xW{&NQjL4x<^S@kgqEZ2?boK!zU2qAT~n zw+8#aE%t^e4s6_Zd(-^IzKwIeWL9&F;AA0 zaG_C~%J|Ypih?X*<+3pzRKFP{f!*F&XST1}9mN<3S{X=dFJE>3zA{zpH=3hJ3y@N5JBV94 zSWb;!*Ef7)ak;0=8DDB@1XWuM@mqZx&JP)UK_jQM`*onXA18)Sw0Wchy?e(fM-;=p z5WiS3;y3|QgRa6sL2<2-UxC|Y!%o9us4L^f<>8c9!k0zzBxtQtCPricRkBNxeL(^3(N9{c-8J!PRs=wO_4k%W?PkNp= zFBX@1b7~!ZXnu4S;`zZQ)1$hUed3Z%G}a6~Jko3T`1Jb!fud&YekJ?5I z{wu^qBIe>Y_88iYJ8yv)3FJv@t;81phpV%WYHN$S{cTGNE$$A*9f~`&6xRa9-2%bg zr7iAGaEh1WEM#=l=ps>5RO!;SNy#@VC{VsZR@`m z@NE#~$Uek8#{vB&`6GV2jp6 z&#=`>>MVqw`+o3nHDh*|N|9C*uUpGEX3E6>+p zLD~qfDDr8F#liEGBZE>{YaT_!wdLY(KwdR>xxFjouxxUE(R*XeM-{;dI$fQeX$07l zKI#cWWk_4@X_=A^(>-#x5zTf!nC^8LTY*bfmj^sZ@B6i20a6h|60liIciGI9rz(XFDHNL9y8s;_kD!qYX= zVH`W$6|Vb+h1MBH$7*pS*%n#ZBr3XFpF07QPMTB@9@0Fc!(Q=5uNiAVxe%%kMQzTV z;S%@A_H)uZ@qrWi=0>Cg;@qrMyp}mc9z6gT z$qV1+mB?FWYWT&}!y%Pky&vlVc-EllS#_evJpp_Ie2!;Z-E>P~^iv5rq zUs2taweof&c{Tb>_!+_v!FP`6w{IM5%6u?l8#!J%K`$4bvENHOU0t1_EW-a)xk&}2 zYPcoau_{HX*;gBL!mw$ZvB%ES6s@bBziOxx((n<)FH4gnQs6{wjR>j206yS1ii}!Z z^qXGr@>`G_abe7EGQLEZap7;fR z_&d(i6`lltvQ?flWI@R>9!(i`Ivvl_+HKz@AcmUa_uPZU`~U6JyhLh-ABc5$3QXMq zhwYKoW06O>JH-Erp?=7TxBue8kw=_w$ai}d!{en37X)m7`ALNwj5sxgAcF7oUW`yn zc6~>FV$>?qf$h@$_Q`#}XRpozd{+ar2>I|hx8OXuo>E^GaK*N4)@|E{7`l5xE68o7 z{_QFyJ5w8UK0HcqG*#?=8l)OdI3lT+c5Jr`S+6tm+-cCSDYm{B(5{V}{7I$JPF=_! z%cny|3Yc&DzIlcS7@Z!20{X| zU6Vp<(i?Ug^RFpIN5_}JbB%UPqFzUMhwJw_Bn9rCh?H*ZmB*70abLcx#nCN!5r-p= zOz+~B4_E3z0jP+2FPNj}(Oh@uM^s^-A6VMCMHmfv*cDYWBj8z%ZWsX>1VVN!IcvLq4{Bn9#&T)fkg$NW4I4 z#tscdZwSDUuGt77D@<4s@Co4;CV_Jkp6wIZGFy{@7gQu`g*&Acwk zKL21S=@(&FZ>RaEe&+LGV=|l25(`<^!{qI1@Ms^OO>zYK#rn?^tE!cSzL}RDWyLp{ zO`1)$@IwzrOK;!tr3nR7L?gQI?(POzphk5?^UOs)#G74gA2;!gNIfoy zh`DapcDlZiR)*eh-+fh+rQ88X^JECXOo$$H(zzFtW%MYmRTF1@b~31MT6*CW6ZYMi zY4VB_oQ(e06gS2d(zPG%{Jk$VXhC1fxIY|fRf}4vw@A3cxgqq zmIOEFhITaWi4y5>z>o5eJTh#O#G|Q|6uyZR($i^MdYiPC%!|Yq4-Mwf7=pmV1UqY^W3-+d z35%o-8(olEX-YSdiDS4W*sWH^s6ogrMIkKWz_GJ-bdpHJI+-E)VfgLGxIVvTdwL{x z0;JFf9xok}ifbwMLB>J-biemuJ-FELc70BE0innpgy?S%o_C`NEJwW6g8)F=Z$}JE zD3|I_o~$rPDoN9mz9|U(PLfdhc{)yfR5rnhjJQe3#~gJ5y#l~#p*N1DfhVC}K}+pm!Ofm%p_+UzXw&LVa0R zzW0#@q!uy-2qTH{m3%uAx^PbMI-K_U&2LL% zHn(;L;TdO|W2`vmxV5=wYjgM-z0>ie?nNjvuS+dmvV6Ec78$C{nr-nt!tjIC&Qvb` zIyHDLEj@s<2~Ng5m~9>LxO1WQr-PjKamUCCe>4z#olh*>;>bZhQw7-m`QlLWSgit@ z{c!;afk4+TSyr>qBg#463l)4L?76ZrR&{!RZ}_qudkL45@X(&n@bGYk9g# z6AU=q@a?;$w3NxyA2sF=3v(#_UDU^VAHsJqO5{S9F0~s9W#4RE~ha4g9(fMcVSR&^@kB<(o|N}m;AW6BTOH3VnD+hTd5v2@ak|T?QZN}${pnZEQ&wInAM{iL?>$NWl7vtO zAhQ~%w}ZO!@SW8pEn`dq9BNswfM%J-7hd`O4n1^_$A*%e&Y?(pNfum*-*}I!X&EV_o9uQ=F*7ftc)UNOpAiopNR;kK zu&IS+JW4a}ov1F_rI@GmRa-G4N8&z)u|;jQOuGj?%86X*!c>v6_Md-obOCK%rRQJZ z{%moVDc=Ww<&3V@h{JqcdM1jsudaF zparNgnp(GX(KK@zINK?nXLtN!zb7Ka$!_M#jR_5G?T-vbqDz}zXZC2$;o<~yLif|I z{9uS6oO(*@i)Ukw)Jp4EerO_sS*;)CG|J25GA{*C_tp*OS^;7gP86-9=HIjNh6%Ql5D(Lhh3jj}MaY z@Oy?jTTjVaBY>T!ke5|}KZ}GULIFqvUkv@t9ZqB23n<|A*Guq+ITt7WH{9%Vz7m=U zl!#48GIJ4xHzqp;&b-kJn%GGNd7GRQsEI#``K;WA+*5*T_oe^wt$ba`f#mICwTIp} z-TC0LA;$s~w3~pc=LjU%8rk28nY6dj%BIe{{o-#V;5>@JVnOX7o&3QFYd?U7rAwPn zW(yr6p_{xzIF?Can)2;8jz)KMKx3t9|GwP`KRU3AZxS8RB-5(fR#4e1!my)XJ7Wyb zi3Rhw1gn$5^7#6kEs)Es=E%jF9M5e#&9wm_MFKXqYlhJSc%tJwF+QwsjW{)CeU7~e zO0EiJ=ni4nbkUYA)87h8?#sXT zMgjH?e4ZF7Iao6PqD-^&73O~G+6!pu)KPs#N2F9km0JGAU2sNSkIs*X(4sl~m`dH~ z`GYanNdg7PIL+tj_Q4&K)O`0|ZN9r!*4QY*_nLMBbaB~?`%}{Tb`m&v0bdIvNfR1an8WnesE45>1GmMgJFRhLm;*$`=}o zwoxn7Js0VVZV2o$wMyZO{J=W8F#7U2UH_&aL*giLt#Abpe#De9{C*f$%A8H3UY372 zbq^Nd!_=}~2S%`H%2F{yrH+#~XU0W?UbkH>(--NR$zgdsqsLQ zo8>U(&p&v3xk@*kBi)E*O@PP@2 zq2){FM|GB#!!w%BuDQwVe7da-k&@K=FA@h;E)$X|XsaLD=R7lhg%Duy!0sLApRj2U z>eUSgMtIXDfy|WsRE&o3LUKV~yFno`?<0D}sm#x-r^;tk3McbBks#pC5F5z^Q0(aT znC=6+V1_hlwCC9`i+`)+Q^9|?DI6eCk`>`j zCZ(l_oV+hFuzoEpU^HmW(%yXSGQM^uR^uhupN;)It!Onx)6iMCW?5HdRqf}b!?@Yi z?!-`o64IECuuer{j?A~)%;qhgj*TU+?763(f$Yp`Z?*l$i9 z;r93ee7uw142B1w#t$^BkfKN38uABgigo>4lT@U&V?7f56cRuo@NF_FhJO=hGU{F$ zWLv058qVxQM|xdT86>yRX&nDrM?(S2pf?+?b$vaAV4)wb_^hW6C^%FSI8^NQA&!Wc z-KZJnOX@eH~LYp~SKG?(pqn!IBZ2 zjs2&7ZoUPmmiyW00!jf$r`vAIUmyD+baSPTMI0I)@Ypk0fjmU>XHR4TV&+|f|M6Mp z;ekA%XLFwR=h-0!ODVMItYd_!QP^d%kvP@y=w(J3oZ1Fj%v+e*T8Rw>P@e`0COuct zTbRxJb!M~F@ihZE00Ezlk)>`LOM)j?*es=MBa=7*-*db>8v5BN@&psoT3LDar7;9A zfh`nR*?XLZoFE((RIDuKa%ylw%mm6ZTdaLwb9MQYn2Zu}lHmG!uq)6eAWqeYcDi z0_thV^gW(Nav9@8=r<*rkk%LyJoDGliu5vE3ljlA;U@##cX~z&G>i{llLxyekvQ==<}2vOg3k^3M9(w+xqADyF3}{j$X* zudu3QlR=XCLub;CjFADaDlKNGINLQWB<_MYe+yIb#a=w&o!!x9g#3`F?ekK!u}QxJ zGpr9Qhk5R+Oy8ah5#p=pN~0v^=ZA#J;E)}v9ri`K+uuLUiK72uu6i&lJwE0nVEy#H z!N$c45%S*I>%TwjV>~pR4Nh>DhtgT#&L|^}&BDaWisVJ0b>2<@a&|H95pX_snBms; z34Eh5M!zeM0~9C0M=lLy>kNTRqL`~i#&EQTs!Ika8CMHlH+*7=B4X>WetD)|+w0wb zh)FB#OeoH}gD-WD+4cE{^69J26oQRu`(IMpGOvLGq|PKC=Y)S^O$S2zK$xX#)Y%a$ z_Pw@(2?PO|yvYX|rvrIIkK0@+%*H9^eNktcJE`nlt}%;uvY%!TP(`>p25afPh$bkM zKmRt&^a)Ul&b8xLZ#IxNX)6%stsz_KV>|nZ5H}Qr;5IIR#-;-7eCAvH!hZeF;M!%%4yS>mDyZYWSrJ9`hgnOB`o=eV^^)I4L|C91BY)m$8%n+B zvL{a}TavO_HiO7~P~`!OiSn0m-^V8RS;-uG&dl87d{-w0O>-~;)0`@;_3{hL9rXG^4$`T(2dwY48vPhHaNgWi` zESj5W*BE8tw_#$&PNx~Wn)5_mM4TU?VMZhZPQ*;Khr8?>KX=bC(k?5$>0FsrfN@Ws zhJwEU*s;b396`(3PWy3wHA0isUh>exjA%x6CD~dN8Qa)glrmBpIvOdvLKK`7kUG_ zmUpEu9uA00r9GTjz4C@2odJ4{2WXEjSfh;i0Kuh9%}gqlz_)jEU_?MtPLRu6r?Y*q@VSg%wOL=N62y3MtU~sMp3fntUleg zN9A1#9brC?H@tqMR&p(=-od0g!wyx4#@!gJxD{YBxtf);Poz|`oC$b}zi*(3Vao3y zUPnk0K~M?<2WqWznWS~BuS<7A>ylLeXk7=auI$MM5U)S-NP>E6Nf(#$&pl|&N_J7f z9!rsN;w{;f3n&5qd{?uPcAD+;cf*XN6vw%^1zt64vdKeIFUQ&(i}UZH?37&~B}Y2h z5j{_g167?$H7h@zBFkF9MGlfUh9$j9Z_za8yevK#dC6-d<}GU7v-x|(j9G8yCWsK` z{w;3zg}q^2rpqLj9~=$T#W{E+JKi5gZ;uPs<+0KAp@O3`E1tY0%&)~pN|CuWR`sf7Gd zohEh0*l_Px-e8${r{~h5*#KN>Xt1KJ>C);cYINzi`aDlw)^da$C-}de*!!LTrz`u2!T?o!^9tQl zm{-;pyy90Z}wN;HdTO2XdgN%Ky1^R)uYu71RD0PzEbL8s1wNKaHPbD972w#ypj7H zK192NmfL+nwY)dpLB0(3DAX+FRMu|<;g3g1-Vep|VJ-&6Ua;&?0398MtGgsnq*bv& zUyQvHjW&sEJQnphndaXCvDq?fM5J0hT(QYz+2OyAP-sKE)1TO|c>oOv4=m{Xa8;vq z>o)Q$wDs4%)XYd)d0dvh^V*w>>_+#h+iarDE*R6;uT$1MolPL7aTN=EH;dr3TK`>( zvE&+FBP8yaWpB~C{Fbx8(Z%;jUto0ZTTsL6VEzQn5uI9>V=PsO?(d;|1zDPoCKB^r z)mp1LF;A+lUP`6swO$YNeC||Wwbkt=<1x+L#O9brG$~GM%iiBF55Yt-5eY6M)R4^X zLs}VX>7{vwi-Y-K&K%K+{9avIWwAkiB_3G>C8zyDZ`vMe3#&Q(JSn7@BRYfW>S+37 z_6TjRh}Z7>r^skM&%T&mz__LO`O9zr{!smqJ|#~cZIq?qU6amrKQ1og>uYq0heKY8 zz@g~FV*LqQtLN$)@on4|wc$^0(w&Tyw?)p+)r{%?sM4!T**@v(Rb*Ds_i+_2pG!_m zIbpF`^!0tI0NK0{+?f+>#cynX^BeJgiw?O~y%bEEmRcj9&1X$i4clMQ>{~DY`g0;l zC+B+?gq%C_zg~${}(04Nln5O_ zb#4&l?21&0cQZ(}etz1)r|y6CMnQGHcM5O&M^+&N{z*#&F|jL=4-LpS>pQyUpR3!r zCJQW=Intr!O$*@Kr8p&k!a7Jpu|zkCO#vAc@-uMi^fvLB+|hYoaHQY5pLs(@ZenQK zeorIKtMfYBOENGIVR9Fl7mWo_m*(-ss%=rX_Ln&B^=+NQl+&H~qodA+t3(|*Hjo#{ zX}-rG0o9B#0Xv$_7Qfr@*eH1a#xu?5?~310Kn`(PFd1!7ERtTj`P>g2*2;NCsQCzAd+cfBh`6&k}-^Gg!xZt@5lDHaDI$# zkGxNrw4vef&PnB~Leg}Ve)@HM(K&jFjG?c>RJd`-{ri;l)c@2ZY_wDU(Y3C`0{A^LUO#kBr)t0L~1rw8{4m~Uf5@V4&I7A?`0qN0}} zbD49Pb3yq5@+jEC1wHWd=-Fv}evz{;_qfkX+I*Oqpn7BU2SvXA&?K2~EDm5}C%MAj zk-+B4Kfoubs!1^vX}0uQtv}N@y_kb43GRD&`jF2*d0c`-xF%%U_7Sv&Zzg9ZY)-3U zn7GB6s(*CoQ~bMi-Lw5Y9JF#l>CUx^tWw7-l+#$*jc*B+Z6`yPgu(R!5cvl6!A!c4 z8aFo5sdIaKX z?i13T@SY^|I$NKmLobfwQFul$b;q4?+8^Za-@T(sr4J|L*q}_(~iL`Q^xZC zJ$eGzIj{wm!VEDNb_da_wNIbLY6V&=uJV?FR3jUMpDULb3qMBq;ye@W-#`R%wmIQm zw!0;=`Dy>QyQQg;Wiqe1pEhHS8l7mb^0Uhf{2Uv}q&nWAO}cPN+Iw%Hnhoe^ImDe{ z-#T|$1v2{b*Mq0&7n!v7>bcV7v&4ioUFPiP*oRtVP&iIUHjrIWj&uqeCVi(K^Q4hr zxny^{mpKwJ1#m6-Jp0B|*STHPza=9%vJg6yM*^zxnuBX!DrpEhS+rFOLz*bT!kz7s zIlfr=XWu)P2!p0nI4NK6%+};P1q42@GD*Vka}Q4liw!GXMk5KHgW95j3`&|09nY_0 zj@25MB$IYLxH>tEbM_0p>U?cfScylVJ13nGP+rhjxJq;VooxFj1N7Sne8cP=mDH2K ztpn`3bLcGf*^!QuX2XN_j0t!+BZm(7bh_xjc1c^^^+@DIe4c-OjStzUQxFq~1|qpn z=R2#XoAIrKkJ@_sm%785(l8h-7nS7c8y|J#dX+>%VRW0u=AGB|=^cgt&0cs4kUM*i zSc98{E@DA6S3Pz(8FB73lzJfN+OCD0hifnojQ&7epMJ#^C|6AFs`*3l#o4`BHh(_1 zw1^DpV-jChO(|K+rew5BXa_RAN@T!`-CQeg-}~WR6o*&A_>ky6;#T9-#xe=+$noc< z1=pfV*o?m{ z6*gJidPA*LuLVi!%TP9i&;UTEJz$uBNlr2h1V}CY-vSc3FBkbRX(~Pq#v2=Zzs^m1 zA|h9Y#Wug4&R>SQzmC*hs^E^5u!CG55cQ}y3Q5LR*88d3^bpdj`01%jQVVxGeA#2PNuB3UZp|Q)Mv-Ye@)NHCew^B?eHgQ;Yx7sL7ST2{|JVqW54cUZvcrPkX;Lo z0^Gh5`*RU7ac@o0Sn?s<1UPP8u`%gdyQpz1bCn znI$K%8JeUyAE1NQ)_d!1&3~hlq?c*1@$kW@-%yb;jo04hAo_$jmNZ~mUTPmVjn5ky z*TNkwh9SMW(x0*cJI@yqlq~z5K_fTWKq{s|Et9F@I)g=7n}3(Ce=qER$7OzH#qc-U z;nWFf#I<0u@b1UzCtz0T?V%)TLZn|8uEd#B^Ox!&9F_=<*tdB(JTWJ;2-ew7A98DZ#1W$T=PE6!cTBD=VPtn#Fo5H7&BameALhtBY;0RUC0`UEHfF&bv z1|29cVBRGf?f9}2PFG#(vmLB)-P2<=KD*`!LfkST2S%D-h{e0=Wgv1N_ZQwo-zhjLvAYgGkblz!z4_uybM6ak z(cv)aD?G2^o1G~V{v2l}$&Z82<_IAb>z>Nl_#=& zL2GPoHs^;h_YCh8x+`X>M|GfpdEH<*K7K??VBD`4y?Z(c;-{RtZ`_aUj9)^}G7Jm5KS z(l{I=%!cxNjVSN+YjNS&8Dq&ww{?aw*_^GV!{e=hpS*5JUkM4hfZZG4(}Bm&UBr7L z=Ij=LW8YM{t>(t0hO)?hi#gTj5)_d7=u}T`mE9h9f76^B~`%MPNJ{#O%mTtc^?%aLgrOk@{efNI%Ul>iV6&X`9oM8jYT)9bj#WaP@`U2l`32 z@rlwfB$Q_{X&@REV}xCUl{h&L`;?;6f6SW11ccJt0XyyFUrx%5IZ{d2_Vi`=c+&OS zH5WLHrAcLS(6^4&*D27oY47zv=jaUO%d&4d6hsr2$jCG%+^zq^M;x(r92umViAh8b zh)!@j?XYr-j2=rNsbaTRDyz@0%nCG%gER9n3*NL5yGx3fFK3*!iA zCiQmyMg&ALVI$9dId>BkD#AK}IOlZlojlFN=VKE)7B$Mw109(%6viv9%wu1rjLoFV z^yC*mt^{Sc6dzeA-jH3xPex%MqWL=#t`Qtni3$sLTf@d>7W zbM^~>YN<-H$+@%NqvS>2{d|5zDBR{vjD>0#ran1h4TnN0iA)%}8iqnLfn#5QqsO1Z ztLrhXsHq=4yo_G zcJimV_#_q8D`HVX-lm1;Ov93}S)4+^gSu&a@3&^Rx-DZ63A=;j2!bFihzN zOSPCo8p{|q2&>aF&J_@G^freT^~dtYPyRo&2)k*U#JQ+o;-c$o3;Dm zG$t^L_A*B$*Ny0+S)kVXlS3esJ0{YgIx<=lOom;Jyx&i>e@~*w0@PJ1vsZJRJVt6^ ztgcK>$zSrv*muoH>5^OvgIS)>KBA&8WwX}}O;K*INeT*(eAk$Pv^o$nnIOnVH&gUA zubsW~~|Qq>gqkTy(SjGSo%L`|5SRpN;<0Lst+HAIr$f7&j;V@WO*%?{GI6@09wC zFf@=wnX@a^P#(`}mQ+}{Q%r*2^(-*2P#Uu5oOMY*+|~!dOEz6QHm63y*+1lL3n~aW zSZr`nYY3@*+~;bSv5!fZPiL;Jj-z*De$B0si9U{um=&<3f#zPNS=1KuaUn~2$&@0! z>HN`7D_RlOD9eLDqFch^E2f*h7MM(gvCVy>9{b)bPW5yAIou*DlzTtRG&qrWR~`+N z$evc#J`Cpq)IWJ0J?q_nz#zdfk-FDRK|i-PlhoG0a?Z^~oQKRmpn=R~qu7&m?=Eni zOO-d;cQAM59lK7N7!y1y?*LKfNC9uTwISiVlj+`cO%3JQMv?^7KI1L7v~pVscCc20Bjg!!XzT<8dDJ_Wt(vZ+O~&JZGw*m$1xyf>jxnu%epz4gl; zH2SP|)~)@fpS+!B>u%2<6X}3%V5H9Fh89%G3Uf|jP8~z_#xKi$18^5BXjfuRNw}2FESK;7-=6tz zswD1=z}B@|#2bkyX@vtxkMdw2&yg&9a=Dp_!zIXfr>yb(eTpk3V3VVzWfkm3R^kiG z$VGov`!%weeHUx}*vd?c2bC%?at4Y-`%ZVWo#-}|&GSAoA|q7XVziC|ew@29gc-@h ztNtoieU?NHIXJ_`E`2Q5CA;BH2HblkIV8cDrQ3`HAdkZN9pm;(_(A*GzLMCvDwRZ; zP|{^{2m$#~k!$!bd^#Ze?U_pTj?YzWv-jq-j`w+G^U!jDs6lWwPD>#%|91T|SjXtO z`Q1Tv``{vVpzLFJ_&oV{rfE(Kt+dIQ#ckNJiwX-gWek4-{pq4}^p->p~7Fj(SzL_=i>c?~2{HL5L#;PZs zJBEt?TjC@!uN4fFW~jNPE&$bUmI^MF{W3>>5rDmOwby%?(HyF2CPG6+WRGmV4N*NuM<;)HCL6dq*1{%s{yG;6QbEU< zG6I>!sOx!2JCS;b1W#ap3>9?FWi!3w4mr_S7=e9eJ=?&dJlo`F?z{vU8WnZU z%1V4?PfF}tmtDntoV_yCk4x8ZJ#%K*lDfUK;rvFyQz*E#?t}zYJDdJfoE!1w8=;!W z#?1ll50J^Z+Cmw2sOkDGz9C_0bRR9X=_pB4(cjV|2wgEVj{rlP0$A3fNjVp@cf_(d z%^sp9;h(}NK^&BTIpiwy-m7F9v8B}RrWe|-S6f`Prs`&p({&QCTsvI0tF0d*a9*GAg4pqLny za$a!(>TCXA!Q*KKvDC8t^+Vqs1S75l^e790c)O$risvRu2}dKGP!YNFqxX2+^rb<( zk?#ZFJx-X=zS>?I;mI4_ZkV%T;q5veX#QXv(UwCiiK^`rQvr&AhQrWs*AV-OiB13Z z9>o7Yc>=j4kq>xeXFu=zf6<12U%1Bqf5N|lkk)dhS9G#BUnZPz@~m5*x>93&$*41@ zH)vuIi<^06NUGH)byMja;GXGxl&ny@`EL978K2)-z!yo|yeC|qg}Zf9?PDj{lJ?nC z*KGLS;&J1A?+G=ncxRy3ofFRX2=jsXG3euE+1~@h2~rh}><;MzAQh(%O){@Mvk0U2 zsvA#|W3!?C`d{B}||zxeFy z9479Rufh*|V-VO^`8G_2*^#|*TB@Q<61RW+~BOum3^}%%bMO>`Z?xd z->&$>f_U~^;kHJJl+#g zSTG{tr9Fmh*6=>U^5hAHg-n*5bHZ6T^ez39Rw77>ES&T7pJ+0jeBXL*_f;|^kue|a zq@g;>nFNDbs6Ul_{>htOJd5{w5`75w?A|mp{#$$25BwzG%u8`pp3V`&CfNlA9!p0x z79QE9TCkq@4^b7iE3;FmCGCY2C^#pqX2NwhFy2#4?yt6T}9*zN0c z0+!u9M0=~NMuEEEEronPBWI?@A)`y2RVuuTP|a^q^SMy%cdq5(+2V^LbQD>}ubNX@ zi;lnGoxkF6=|~pMdB~+yb}4t}1WeI37htAtEjiM-$$-L?RcBg92P=)@xX~5ojFBcG z+G+<=snEF5WtZ4!5xJ5;J`1l^nzcVX{o1=d1)DS|yP<|pA0){ufC=6i5tISU#y|e? zIfv8EVqgAPug~7prr9+#e+s!#cI-^qBvQYcVx!1hijI4ErYZDbm=>Tv0VaOHCUqH< zAar@^nl44&lhdwvWQbr~Xbj;qIrziZd$jsqrO$3c!>;S@>#y#=?QN_}{9VbtxB7-uY> zRB9|Ws`6^|*m(@2Onw^F@y9oxBH(_rwYVARb_2+{qBbL%$Yw@y5G@R1k?Ejb-(3FCFQ>xXC(1Xx!6RUw&FjwMbon?~G(xNMV}uo%sz>Uu4(oU1XW6}cu9j*8 z*$VbT6D%_29ctU}d$}M1_*^EHqvlUSZu0?D7hc9NtS%_0#JG|;0vVBL*pTl~`5nsQ z?H3@o$Q>?p7_)VJTFdw6HW!OGu3mD8SFV-GsazhxQ>uMg7&ja5zUmyTDWX$yglz$_ z#h`WWRW6w+Q~bKnSf*P_#IH098L&p1tfo)?MU%#N90D5%n9xBH8!c#KxSl>x>8#X^ zw=GaRnB`EOKVx9|Z1(n}fC(Hh^`xKoe?xRc_eMlSn|OIlWc0O3p~IFAdpKx0eF?1m z-iTmTb|oG>heY(mLD5de(E>~cqSK6<6}3?fk zYUwgi*LSJtG>lGD8hvYm0(wMkL>mK|u<=NZqR)-g;FMh66kxXu#StCYWM?7GdxjH% zsKY{>-2i7V(dnAf_<1}Bjk^a^10m@HZ_)c zHQUQpA#r#;#K@$3v~mcN9$)iQ%Sk^#Fa)YSUn-}oTm4MMtZzb!8V34jZQW#4y z`$IY^BGDXA)ezz;(rFmM`LVfH3EPnd?aceet&Kp7gNq{|{bO-HUJ z%3rt@vls$F`;b&;)?}d=LvN)fH+*ppKccX*IS=HQMFXadm@PIU(Q`gFRs<7lBVLl& z>T-JF7Xb|-5l;rA8O5zk^-`MLgQsPlNIo7^JU{6&;fQfT4PO)HC;UpUX{UoPD7pH& ztL5#GjgxRu59`40%3^M3{95ybe~gtx?4O$wmSo3;2JoUlIiSuGj`cc*(+tdhl#TNi(E}X$Al%H3}$nr5Xt$MrMn`k1 z#+%#tNg7wTe>wMk@d|epAS|Zff3kNmBz25kTXYjV(f%Ws-3y&@wGQ9mU8Hx7g_@Y$ z@2kN3TSMMgoTocKnIpH?#r}0~LjH~-x|w8d=fJhK2I>}4R*<=`Buh(K@o!=+gDMie z-J)#%{Ns2`s#ZX|(C9dt!_Gdxvt*=Bl-44k`3RdOF#kI)@ivqgd*rf20HY*N*f zr%NsnS1;H*5&tVHYTu4Qa;MG_KZdMNwmm>|ywJ}rW6q}9az6ua7$p6lDDwiw!yGl^ zot5OjRuszRo+!B?uoWj-E2(ps;tH>bE#`13RNSKy-pKL1#zh)6zoRS@VU?&aRyFw4 zCnW&XUy(~wXF>0Y@{-QOPlg_~1Ujo0iMu?SUG$2?^g`N&B06e=88BTxF(bVEALp3} zs%I0&ABo)KI+WQA;;&=^GTQx+_O0QMD_osL&h=k0M2mWh1d~{&+@Ge#F)A1GtiBFG zz+AOn_bB~Zz<~wA7cAO*UGnGXZ)R*&5R}{yMiOUTL)xcz?$6wIKM7HHS>9#Cx_-W| zRdf@w=Sx__c_@fAg5vZ^CIUKe*pn07{KO(@7D+O9==3p6Mi$NmU#|+J;BgSu-EUDQ z8O{vwecs7?o6P6s6nY}pNa}Tkg&z=9WHoz?@uzvci9|Yx!aSETFaA`uzJ)}w@em+W z&AR2cj%v$=z8U8kILrVSCpN6ADAG#~pn)O>PbTlCjw6^PY1@R zW~6c_I^JYqEi!E{eb-b-;w_;cG35wIWs`~|?ke>z{oww`P65m_&tlX@(wY@#I{1aN zpkr}Or|};xbbr`LF}!|XgTR#la0rFkJ3g_cM$MK=HKy?)$`q4-3bPmjX*IoadY&$L z7-w0PkF8fW!PL>}1(V)w)g8(OdyF7B2B4@J+at@p#G+Ky{paUA&tT$rEWhxHbMrAW zif%dz+{wj2r*=B;4o9d-eA!dbhj`MZB0D=XOIr7N+-Ai9$`taGv#d4~{)^8~LCy7U zikc#kVr`z4vbA^~%*Fw%kBMhA+;q4*X?5nvCZE=iuz2QpuU=nwDzQ{TkPK$dUAj># zJ)z{F+B|3Q?(XcjE2}PAwazpDNlQ`U%U3j#$UgjHx;~e-c{=l_81JqUAFE;S0L8?s z0Gp{gj!HIo5rpfdcj>+@Rv3dRV{T2do$j<^M70-cX7hpaj;zX_ZWo;q_DeU0F=ogh zU1U5bl#zYoIjzJ#v)i!m`mz(tc~jon%!Q(Nz)J8lgX)9?`1NYSzrx!O8jGrh*1Bqj z7nxHf`kT{+IK&p(-gHG zcV&+k_v_}m9l`G*%3)DB9wyTjcU(=7zq9*5;Td71kyMj4J8^O+^?77AbDc@5#s5;o zj4f-tI7l)|r9FSys>x;|T`x2GckP`vQO?}Rip0q$rzMuAR}ouyakw>|gfgsLrptXt z_IcyUjMdsxMK>iYAAV|8W3IM%Ua~fSoPF17tYRDRDSTZj%EIBR{fTkftg!d;o6|Fl2)tdY4vk1N1;c0EUMq3*3Bm#u#oRBEGL^2bQ} z$c7Z{5ubrb%KGe1*ZQ)=K&u_WK)PpLeUOFmr7h%oL|v+a%hkr*fYoQaOIlG-4>*kc?prD0?3xl0=eB^D#gFTX{r_UAsaRCu3e;Wb$Fti zSkh?lqU<-sBYwTK{%KX9;VGZf0eb-dKw|Vv7SrZz83|A`Qjm8;rp4Tx+3Sm+qZ=_% zZvUW*N(fTUOzuNuY26X_;&^>a#q5NG5FOV)Lj;e~P+Zvb4GAJ8jIK((GOhCVBQQmO zUEo!Zn-6NhP0r=LwEy$<4E^me?L7X$a8Py&#bw7(pugD{A`3bWcFIbnVA5I?HOpXGI;DMr(p!PTOu~b@5IHZyi2AODwKGq?mr~M3dL6rg-BX4SU|| z!ZHkvN`-ZxodcBw-VT*JYSw@4N*|ZtkjctTU0Hd!y{F^k6cgT6p7he3~u%H zd^VER@$KXcZH&Ci#nRup-9!llU^$}!3yD{WsY#|L!pQxT!2FxlWaFWn0Cz&k;T`fJ z0dT1IO@gWKoo&5!%ZVhK5U=i7t{D-Cwsc;gNPNXf+iFXXGO?ht>0*!_%A`9vjGD(q z#{1Y7>fF)(rgb!OJNS=J3CRmYh#S)t+TFm^hNyaODevslw%4g`%eNy?0nQBP@TpF* zaAHe@g))bF`m;%aIu;Satf9AKjp3U+tAo80h6c%SQ#Ue0gHbq(gZIxqKo!%WrAKl< z_7X7n0o5zhz^ZNXUQO{lKx|tzR)3%Za5MNY(|qlq%s6@sTbK#rgldnM*5-$2XjI_5 z061FN#T-snoc*_5AOi~rQ~|)M_vcanhqJeeYwPQyH-8nZxVyVsaBFd=K=A;@0zr#A zw8h=siWhgcqQTv@1TRi-owV=#KQnVX*Ia~?oOAZx-?i4Wdi8Kv_bf2>j((H4obY|s zM%q?;9Kx#k8pr3u^r$6LlqEb`DTO51>_GVtowap4#x+_gHu_UH0ff-XBLWC|tCBuZ zW8{UW|(jf8+=Ro{Fb?SS7>=4WYnG=JBzEaWys9&)0V=tNk1WOHoFazdcS< z_Jw`Ow#G>n?xO&5CYY&TH*Q=@fc8`{P72G7XLv(RQ;shqhvTkWxwhOysST!r^Mi%$ zyxvsEX|8{FxN^F1q=|EpMw_`M|C*vC=eEm+74sO}4vw=4Klus$AdGTu01dAD9*MRk zEFEV|)tH(M7-CzriG<|t=xgj2E0E#rsMW(I3Hq|BqXnZ;bTxW~gk4@+%H?ki4xdc= z(l!!y831?FAw!Z@v;c7D@DP3g_+D8Z@d#tjZI+@D(^h4jkd)hLkE1bDaFlwA@d1-^ zZ!(FCX3O<}*T*~*nxj_X3*S8X`M^?}YSJia7;@;054){2-$I}%q(Lp4P z>2H7OvUtpy{|a}O45Mv6e8F4?H!gA+1ZGA&$780oW`cSe(Jk7Isf~`SLtr&+i?f{@ zl!|rzboaAxBO9k`@v`&WzL=#%vBui+=r#uTG%S8(ujMASLCoOFT@@6@&Zv7 zw+N?pGQKBra>u5fUo`Q3VIG(8jOrO3$giTj4!U&U!1y^W0lHRcUH6tkR+w zYKZ!2)m@;*eUP&~*^G<#1}Th}I?(_EXV4bCgxh2$Q0F`=;&1SVA`5q@!c*J9$1%G_ zjKt@Pv~wl|-!ri5@-m&+F0}k#R~h$iFx{NBi~OtXifTxo--(SKf&k2FE4*R21BvCc4!lZ=?sO4Tmo!bp~;zJn*qM|Z4tq_<6*53b!n zH{YI)2>e0IVNUx-{DtDQ=nYZ*;X87A&@dfU3MbCR_ck^?RLVMSd&!-q>OzngfYo9ToIXggLp6V3KZ=<+z( z&7IUFI@x9t5NKioya%Q#fW&@JMX$^%Q$yYUv~-rDzd78c_MZtV*KNx3ZEJG;y(m;E z`=_Saox4U?rXA*P;nfQ0Wo|^Xl?q5<hl)TckbBi^3+ypB&GH*$&YaBgz2&YiOp+DdP3hSQ`UmcSF^@53u}^fqNnXrt88 zMngbWo15dA1|9cx8E}y+HrQzCoT4#NZv`{-cx9=`|DiIFncJOSay? zI{wT7pFgLFTQ~rt%0%*Jd6rWzkpNzuZY}hylt2vpeD$8+dfF#d=BiX3)=^up*O(I} zavd&iI6C?)4j4B|edUeYlKp$Y?pfeP|1W>#<>haCMZ(_$kLC{?b`}hi4<6yMyXNP5 zB(1o-y2~wGYJ_AX7fRfM^?YyDM;%bn23U2A zt!==ia3~{**z;5s#%@oMqZna{I^{hDjz*r4=L`Pa3_v`!Jv|RjK2Z{Vabos5>KwuE zKyB)k(NJbW^74D1d((G~8Ga5v?Ukk{`p}gy*TH%oC3sR2$+PoQbv-T(0x$>!jNrdo zn1uD3)}J<~UezGyCXUc=fXw!~m5&7D*6fiKWFwkC4>GyqtDn4;)NlbBPDNoDdwUK5 zUOpzY-?2A)Dt*SvS1!t4fy>6k@&# z7Vo__$+EgoMVBp(0k1FD;dfFlSZ2Bv-_hBu0Qv^k0N>8H0WvGV zSVh_R{GFYr6@i*L+)UdJK$_&6;D2sB4==S90%_@3+w&Tu9&0DzOtGDkE4w07)IH$!@U|G^|R?Oq;oR_;=10j6mvvO;G(6nE5P;h z-QgkJOkv0GxX+Mt3Gc9(ro1V72$tg(LsKOpHplcCn{fPlWqGWoaU?7p2Py^muS=QI z8bG3^aibl3X;DYX$}w3n21BB6gyT-K1)i%fc#LYsTa}`+iBgqZR+EQesNxez&JaPj zT^`HRK5O^B9kPk3?pMIen>}-{wCJ3!f&MnfgR8UI8Kw&^qCDi*FHs`yG@(2m1n;@w zhl{sCIM{fynL>w7hk>6NWDu}jrV=3MsIP#nIPWJb3<4P#@^Qg>9z5}Pa^SHot&bT%#%OY+y!OeTTdZ%#qSKWNXdu%#LIXCMIY z`xWzO+KX{Rd*gQu`hE<PSkwmXHP>YQL@)2&G8^>v|Sg|5Yp zh~W;%Q({6E?#xMucVallj!7J|LtTIKi>q3*q>R+Q|lKZVUJ0; zYW2-3qv=YxxxZv1tO|41J)A+B`CroK4LrMq2C}s$#7IFeXbj~_QQNe{ zxfsP0;!SHel@%1!1d=|r7!H;ytZ+=@YM3?_|Bg3%uL&%$@*Fu$^Vw0>9+!s2ea3 zcymw37X)aj4%@FAk4M6TZx=l>mu-=6 zGMcO9pD9yiq-4vS{unX9%*dQ)=ycPm&#Dr{?W7GH)PAHs|c7OVrDn z0|oPyP-9{N<~%hvD2?>>LWkf`{TjRJGTShecqTJ0J5naZ^5xQ(7t(a3SvFq`B};-> z`5v_{6lXhuF2P=-{~mSYkobSi=YP}LP__TTDgKI%A0JWv$K?5|>4r=EziXQq;TE1A zuECJR?OxkFF?c#XcxLmLeO#TIx$mf0Btdze1RTlGCg&r(L1pP*y;Ln?yUdL#5qZ@V zi>az-w;bTBS5zXVOFztf$oS{LW!Ou&A>_>to)PBJg8+AG`QlL?dKN~e8)}iV-PVwl zcp!-I;nCTX<(Wo5Gt|#XoQ(0}oBG|yGV-#yad%`9zms{8V15LJxAjC4CuopB~~z(W;;h@rqDZ0AL)EXe=t!T$cF%Iy<(OZig$%N_lF6Ek%lF@Pmb*-$7H%6 z8<$wNT3&#Sha!u^sGZObmssgLKTI0uJWjnYR226)R}|krY9j{s&Np7()&sAm1|^0F z_agODJWAWQ^zRqzPXYf|u@GC_Wa}lG2mrs=1dMiC_Kbet6}Nk^8u$&5caCJ~;tGm7 zqe*-zpUNAm;`N~LRnjhy3|k*Xb+d+^wYg_TW%rY6KI$&(Jd;$VIG?M}9b~o&CfQrCXcit(5d`bWH=dfw2Hm?< z3ItnV+aG_IUdwvyqM=nCuXg?Dl?hZ~kdDAbB{0BKK*=C_l*0GA)*ni4o|U-6@2h(s z+us8!|lP=C|jU+V1y%qi|NX#QUD{m4U}*EWEF1N zYZJn?n3aAwjR=+tUL`Zr3SpS_?qH$iAUUnLOjcKAL`pR%rb#jympjIGP6K$0<7Olk zx%IPblY6Avpa?7TPxLVA?ZLd^%rK}z_{v0h=?3x#`}cRx8M^IPWG2{_Ld|}-8S^>6 zo$@g1%vgJ!lYX`78iPU#k=1pkAN}QIGs!Gn<&6JyXa{W`j99Jo%fwi=T;aQT@llQ$ zjGDn)JaXjgWDEcUrW>Qb9U?Y0L0Hbcntb5@bBp}_MqWG7^Oj|&YKgm408?W|R4lv! z$Z*5*{9u5s&7F`$67kTlBmo7*29$4HX3j#@5pK?cWXnA$poEC}OS4sm00v^G(b}ay zztW%s$8KBoOMTC7j^$#$%*IHSmu4Dl8p_)qW*NzibJhz3pV~AvzKD7)+yy?}iMJ*ycoEY1$ z7XwGljG9P%(kocY?E7%Qjb=^5GHjXIHA8u#7#YL~Wct(`T((YRE?!x57-cA$wMG0!3aR;+0IIWGZ5JG8zMtY%U8cS_ ziuN9tr|qAqT7E4^A-WeyZs|qA^PGi|F$jT)S=I{I3_H_3`3}$sU0))APqN&dUQuJ$ zT>$3>CL-F!_7WLYQZ&h68K|HCzF0*|{#qcBnRySYQ#osY7-8u1Uz#n-)QgyFSfk6f zNPZTaU#YXY^z+qsHR#9AC6$#TQ+Jm{=^~Z>a%O11j>b5TrS?ge2)jG3Z$Ao(*`!{O zAn)^u$^G@~X2&hWCR!R~^eCzeRiY^c8edJEbL`E)ksIMOV;aXzZ0S`LY6juRU%xWm z0x_w$m;xsSThf2TA|{~tnxb)2zoOY7eH&W;rtkT~l(0IbC(`*_n-}Tyy}2^Agi`~a zyW}jZj&{-Jftr@5GjI5a4^!4@j_R!tM|kzGHt9elY!BYlwoOO6Fqg<+U7GLq*i0~d z*H%Z~*jU{T%a&7fbqH+6>Q2_r$3WHM!+X)qnpz-AUvTL4yJ%|F*(vB^_dXJw;kPXG ztvU3weQ}f4`}fEuQ(^l%7aNY7t0>VlH2eznaX48okzF)n5xRsa--Yxzw8$mvLr>4n zKC|!EdtfAt7)788D)}&gDaLz3@#0lzl26y6^A&$pzEIJf+O=HipkN$q?D%yEP1Gb) z9uDt``G~PTjzTB~{k{>|+b@iCl9`l}HkWkgXQ+~d4^zx$9#$k~2L(g0ffU9V2o)F!bGh3V|@cOMF|YFM18Ku5jxKGsp& zji7@}n$yf5Fb3c#eOUV$z-1^8?f#hU(C8Z(w0SSv+lb5cn5BEpv>GB*IOO>KVXo!N=q@mm{lWmxZ>h6| zHJCY`Sm=M7xVwP;dE~kK(Y&}kS}p2IWK{gh(0l%ONpbf4^j+SweDIN4k3}3|H8hi( z%=G3qcpHDk$Y&gPV?*n3bRYFIkAV;$4QDS>gJo)$V28A?hG2hsw4D`93Kg_oi(}#< zxoUrHpRU@1VGufdY#QcZ;I&=Rv*@Ve2^-UC0Bo>MhcejY$xjp4(=Yk2sQzo3TTa^9IYI~y@aJ-*MxHMM?s0dFkw61bx)342()9fh8x)BlgDkkV1 zCk;(<4>AxadTw(ia_yJ)S$5QZNd6JJQ0%kr#iB`2Y5I^lP+$5nJ;g75H2F*yN7Hb> z$HD1oU*FAkqkBCdfq1c$ILU8+F#JC;1xY&r*B96(@fZ*0L^E$zS{BRsi9m-QY3lph z*!?H7_7doo@STXV*lT z1P77K84szZh1>0SToWO^&f^ks=c%zmAbDAhBF??|@Cyx0(es^YYJEPT{05fqzO{}9 zY{@xZX{>ROHn>+Y7@K5=$m?s6S2>74#bAQmd5Cb30`7A!PVx8a?$L$YLL$+HW*Kp96OKIz zL4XCeUz`(rR0bi$qXb}kQuT=7!eJOFPVY!bnWo!*YI?Y}1HLPlJg56h+jUk;hiq!r zGLE&`Z-SDieUb_r>ZWpMxEPS+!A1%>m=bxwu_;Nx`fRKtGp~PHneov!$&a`?lTB9G z)>``$;Y6ZlUT+w9YGpsv`s&806BYn+Or=6Vw?50Ejyi<^)Uaz-r4oU67bB7XnVQ#D z1{{${y=}uN z>#7&&xpgxlQERp*8?8JyEeDoy!R{zJ&zln*Z^*62UeM93E?EzHKHH

    &C0xcC34T zR1RlF(nvd6b~pHd-1kH8JZ{i`Bi!o-`wyzztye2O6d8;CCB1328DaEg)AjNWAe%bN z0wrh9JIzjPv&h(5&aQm<#^GCKV9zKqukLEge=@$_8n(9|B8&HC>@K~MDNyL9OthvS zDL3OlcT_(fW%AD3(%|{4B*N*;=47K&!aTc`LfctJRIrg`Oq0ZRNNvErn=WDiZcowl zQJW$jD{pj^Hm@x8m>F!LK>eAdK7A3Piv^#!?wEgJJBG3^ccH@K7hw*}tXmbZkwhns z>qsUNb0SlEuC)HDe0Jpg(1s|JlQPNAdgPJ``~KqNcR|rgdUWUQf*C*ZnmrJY&u59+ zrqvITOb(BVH4aUAco%kZ>)Ikhlv#rng@$RXMI7h?vRGy!zvA^}Zm)W4@eHs6r`Y51 z2%A|&?qZLFWR*Mc)vEi$RmAH579yzu;Dty6vO=P?hz65n%TFIOg0G5ed(+~<9>IE~ z*(TFj=GHC4m&X!0=y@Gi=Vb@yM%=u9M=`=Zcyhm7nJ`*$Y+Hy7W+m#ZZFv`K+yX^ZC%rofl9bkvArX;t?cQr(i4;reV^6>$TjS6>fsZ z=LMxZ*lut9W7ee*xuB86zN?C@9ftqQS*hNJ31NrC?kW`4#_qnO)y2!}_3$LCaPsec zFycHLKsr6UUU7h3lRBI!p7YP9dlQ$@%G3v-rubAJat^dXO?XZKIUutte!xRH##UwO z$r`wEnP#%T{0FS9AH3p7zryB)Lko`?T^S!N`@a!!%~N9!Tb#b;F7&X_x8nT~D&Amc zrcslgc;OZ9;QthOMCfaeTBNIJhjcfOJeUP|NSIS;rFg%V0&1zh0uDRIS&T5VFj%&Xzg( z{R66{hVTZ~^}5h7^h4HxW*IK3RK>m~23MJe-QznKGe2pPbHs?rtB9kl$tX}&qQy^t zQ2`hJqh+DIzsFEU{J#S~p=gbmey^+@aUrX<$qYY6EIXEEg=cKOr5X}RZq!$m4@R{5 zSBrE2oe&PV{(`;iraRiITP@Bu<{k(@QZ8~0=&t|M7BKlK22hMlytdlJt^()MraS<8 z7`=HJ*6OhfQ>J~w@=@)SWh ziIT{q~ zztOJT1rmOUcfr!hdjD-+5?H%k0!9P(W_~uEa$tTr;x&J0cx^P+_+?u*G8VKa20nRG zP+zW3?X^CyNdyrhr5e^@s9d<1FSDyxuFM?VJM&s=XEQen!uw8wS5|_ntNTR&dRc?6 zz5vEzO!JS0@06Q6laiAlHDA^lqO(`V&Ws-yeSF@IwV@Zrox+JnQMyYLk&1lhPc67J z0l;(sE!6vFk;9`)BYTrk#wP-%{I8N*bP0a?z=_oy*NdNW0L#E3VIEb3G^z!lM}RHO z`GBPCu1D7Cu=3}=Putt2N@^Ld=JarU=KLVDVtdO<)X#o zCI4OzZ9+a}mq8;v0|ZxaHuK0S>^993-Xyb7HL+7qGD$~-V~~E&Ml9dK(EXC zB5F%FiC=^o@dR{IT#Nim7VfHtWUu8s81$6Ggon=kPGQ!YewX@=Qkh6KeL`!`fXxYL-}bDI!1k-v~a4;FZ{))tKQ>=de=hMkj!ga^PRF{LM zaAT$Nm1)I(8a8=d66<;*l>;AM&4firC84r zA5&$6@xvfyJ(B1^sX{Vn@Ik>)HZx)RXd;~e{U=OTMHa}74Z$Xut58^rA>m^9C0k&G zVcq#FcWJF;D=A0Zn-=Ar(BM2u#ZW>Uo!?sPjQ1yZk`xxH5>8gG+sJ5nYAC6Q2b}RY zjMilZAD&9i^Gc=PaMxM${qZ~LZO*{RyJE2O>hQM9Re&)!qJ!Bl*v8)<@7XXiGoMRu zERX(SxcjMHgW#Hu{=+}!`qEZEfj@ zZBy|S+7;DriJ+x)MW0`Y^D%64Csh}kZJq|L=p@n*0+kZrC1dIMVt=IpG>?h>`{J2Q zz26@>eHWu{uc=};rPppZ{Ia{OG6BY3T)aR<7$_LT8SJp5Fp8-F-3=G6zb;XU($<7` zb^dJjFp$|3@GnZcaY;r2H>SEshTrg1_*ne$J%$9XxZ#jB2?=yCcd#b?(7p0o7Mkg@ zGfba7kxWqaZlRJk*dw^xSpU_HEi-fu-Wz%0E!T|+<#mBBU?S39>MSg>9A^&fVt0oH1J5kkJ)Nf7T)Rqb@i9aOX ztUr8p-|z{b4F6QvCDBJ>Sg_0{$)Bg7xY)gz7ey@WL)*5c$@i+dEe0;aBHhnZ_J?yZ zqL}(i@>g4bL0|WNuoJ)k{YDY(P%6M0eiU+)Vld*x%JK^9puL}J`-DmGmPFx8j)l!B z#bxDUOuu`1A5nP$&ab7bgoCV=l!NEERfPs@H**5b;V!vGHSyn3#u*x|vZS)^fBG`Z zyzOyeo}X*YC z;Y)eC5=4tk`(gtgnXab-$}zx)ktZpS_t&t}Gg9 zT~Y@Mco`vR%r&xqYuA>t#qypVgmV(U#syo1j0!{D_@)|tTEH#&8+99nHNNAg15f1(ZdHJy=1z8_0k zWkFdE(d70TidRJ(U`r6ni+h{9l6ebik)W;-VvbP;(#mZm;0Av(;s*ccqsBuZPq>Yq z8B_3Ag!;P{j~lmBT|%^I>u`hkMDRow2{jg#a@D zTRx`#E+5#(B@2g?@1q_4zDT@5>;T$I#~wHzKfTHETtDpZbb1w&n5s2uJD+Zva}CP6 zWg7+!(A=beEmUb|yrVXJ7&a^u)r#2Hm8P34(_|T*ZQBM;PiQ43R>h%DZ;liEfJGPb z^*3qa-nUOrjb4Iw*c%tlb}tVH%+Ji`Z6JH+Z?>?In>$ipmYF1o=QM84ixJ5MEJS<+ zm>m)`H7I!E(3dScaGoZi`PUtc8v)OpVdOVTH>hyTWPF<|6~nvzy{3W-DnqE#1kX65mo6Fw!=O;@MyaMQ3K+dIgT5GdcAJP-2> z(HDt53_1FRQ-?G|ZmGEFkcg-F4 zbb3s?GLY`NqRTU&LfUZM_OkArsZbx(DD8ykL>U+DgEh%=opiU#8UoGfW_lP&E?L`o z^DU2)A{4!){lVek)4=MJxUvKz&sEKkDSizz76h!+H*(zNKE67lHsG);hy{_rV$Am4 z7W$lI(Mss;l$ylIZ!!9)N6|&P@o)G*1CNnOggtKAVfp{0ZK<|@J>w0?x5#j-$F(!O z%OJz6n2mHZsKjPCjTNKH_@@EEcZTKgiG@TMmI*w5{$O|=WBqkw0uD1LG(NvtFupiv zWIq5L5H%^xoCJz_+$jIc{{>0L;loek5N;Bc)a{S&oDnZ99r*g*|L z)dP=j;_tyd3;c5DPpCq7N}>26`;5h!m$~QaUB+ySnwno)ju$EJi2lxJnJCcV19v<) zN|BX8imnO6!F;dCwcM~R*)^lFZu2+#_pJmj{cRvbkNkm%+XIAD9bRiGhWmAuLJfG! zH*UYua~(yh+vP`oIB#bHyT%2^%qLjYKU(6jMmHVyz^NyRDl|`gZ5&^Y$I(v^GfiFw zq=4^~Xg(xTvz+nlxrK}7U-l`*`F{>Z?0=yLDFLWcIKSARg6;bl5}3B+E2F{FCX-0c z7N^{B!70Cj=?>BrIf!I@1#RYfjgj;Fap=Djx*>e-x^S6)*YZs9cL~_0^r+(t{(;I$ ztaTE$JsWU+4lFNa~$u> z`Ksrnm}g}tyLyKa8nMVi?3!9qtswS(x6NH&=RW*NDl9)uS1WiRGZKPBy04Vy)$F9c z5i0S1_NQ}i8IDuP0-q_vxBC&Btw!4=1c@GKgCaw+t7Micdmw;E*Z-H&Yg}g}3%{IuI{Og;OeAHg^<aomrecUwTn;W0JSCXN7Fwz;h}MlHra{Z9{6O@r;qf~*holGr)=0D2lZ<`MmvKe! zY%N4`u;tQh3!3=GcJ6ige;7byT7Hi2siAGF&3N)wnb@RzO9C~lQQ4ehAK@peI5hCJ zrQO0Vz^jQNpVK0F7rp^5+rL(&)^F1Ll`faOTY>ga0~lk$u=w^r751?g{(3zc%*jvS zUV=7@c2PW$5)?bF^xLAkn0)bA792}cR_tLOH;kd@nhhW0fb0}OtJAqgYT6Nn`ZHAq zZAz`=sLA1y$PjEjDPC5;lx**?j|CD|)Y@MIE@;;5x8xvmnnDWD+ve09^$0VAKV93m z-~cS*rjdl4-mFf;_UYATy9>rIE!Q{rZkVU?TYD@#*B}4(Q zU8hkOkB24Gf_WTS6SBl~Lj0*t;nt#ICRdRu-%5Qu1yd7)I6?XN<@xYI6`)DVoVIX@ zW_1eqGQ!Eq6L?&8RXkdQvp?6ly-qw7<$3B(L}a;Z8)X04*OkjE(R z2<$ecJw!B`mt{!vs!1yf-p6q+Ul)N}emIYFifPR&EAM>vX1YE7Qw}= zRXu5YBK%DgdC09exAk;;6t?HcRQm;241jdIKi#J=l%pY3bOxeO917rpXoSBh z?)Nw)#0gOEOAoyojd&eLGl4&GlerWZ+nfLyn%osoHc-N4a(g#47Jb2 zx8O$FmoXu_73k*m|6?tV)*Q?EztYEv%m*a8(mBIt>i< zBYiEHL|2e%74MR<|Da*C>}oL9`j)XsTKxo_cxSyke6F}9m)E35=F82aA3uBQ1hhXQ zO~U_`L9`JA)etiWj=huXja4flTTc~bV!={<65908p{Gv!g%Biw-aBO8!5U}%GKrPDA$iai3TgF{6FnyZhwQZOlZM-MvKfX$%@s519*9FE+pOdR9pEo_oKv?v{3ffcBP)#g() z*fy}G<`+C2sAf=m2C_s~5bB=l7v|~QIS4cqdOehox$2bp^)0RfG_#Rd5(T|=d>z+a zp69LicVA_^R?q`gin?9shY+&ZLc-V#DFdYQN*H ze{QNqvcI>x=DJYZKueUA)qYY;_F<*7A`+N6w=bAIZ>-J}yyp96g*~iqJzJ@)7&cWc z&*8LJ^($nlwMMlo+UTxq`YfL;u}nR4FWY8((5wlWH|uwwi-Vuny^xWob~GOWBr)@s zFmu?ErFKK>ZKuxHlK>Lfu0fT}R=M$WC5=U~A@zKFLW`C^Lls#uo5yaNxqB;ccf9`3cjTBq>p~rIV<_SgGCkJ2UhnH?;Vbj2jeSCEuYsYo2+`1 zt%5mWqS^k>p6pd*THd@zKcjE^T+t?;5QL^j&Q@6+&U|BhkI*F`LG&FZoHD*@Z=0lv zqgCOKTU~o1P5CI;UeB~Pp5K9m(aeAzd@#Ol!lpK9CNfXjb+6*tb)r$Jr@T+8OQLsv zbH_T}9yvAyAHWgJoa{WhlxQTi`t8*F`DveNCt+W%5QK~*c^IdcMS>hZ@t|-k5hcT< z#2*V75Q@mKoLYm|DG3XuYTg0B#zDn7e!;~uaD&6ihqeZ6Xpb_GE?m4Zq})QQ>YWdJ zW5;bK<9sLErc#U{hAFzXD*Cu;mA%S-HByB*7)qwMZIH4|Id8HkgKILx5vn_pY|%Tk z*A$1mroF3OB{zeKI&Jsa%*Y?c$3CXx_fx*5k_Hm4P_TSgaNvwq$>4KRB!;e#^Dvu zKc=L^k z`r4(RH#TO%SA7|CxxHJztQXQs4kp0G(wpg4mM3J zHtbbb7V%D9vdHPR{PnJgk{c(7Ec!!Ja<_5E*h7w1?yuC|z}0tDZc&u@P74g)J9lI% z_)i&bneqi|Aek8!a-63`ThP-8@Jv$;-N!YoSrJ5n=dyEn6`(|G!pM}$pFYxL- ztWS__xw^D`Md|O3S?%@TX+H5Z85hB6j>uHOl@|x<+JhLllQBmPe?C~qYWnC}-Wjs+ zZaQ~@!A&ndv`s9=jnhx&$=*hnn8kaT>RwS%M%+4OzdMw*q#5YOWoKbur?GwMmF1wc z@Ix|6c$V{?-V>Ezdx^iTC4XgXI2ga=(SqH_eE|7f6_=O-bofIX&$E-kj5EAF(1(I# zEvU#r+wzf5B+kjF{_2@XU9Dy3h&bT<+AE6Ek4^d6X@@zjiU^^rTsmJSWQj74jgAF4 z__4?-B*L_q9*Uf!lEE3S-ZtPdZ}4l!En;FzP;@?H+yXXblB1Ql$#!VK-+j80Jc@Ot zQY+Zsof7!pP48X{4w|2C`V%g)0GYYwY3cU4R~lJ=nMR|m;h&`2WJv@k=$s2_u_^@= zs^G6p+591rUsQ_y9c>mw6fB$aU!C`SjF4IReih4?HtEf{X~g z@LtmSS6l;)Ga=32o(5OUQFB48O`toTGGk&E_XC;iWmX|#{O%ULETX-YuNX+Uq0VHV zO|E!8;e6k4(IN9{%XELDB7JE5F&NPx?F(%&t2fb<0{k`Yg~7`sw`4PN1Tk#-ti4`< zB&YYZdRc7Gx*0MeYY((6bW-czcvs{%OWlf>Acs2l4rsq4#iM2uznIeMOl!$IGpeNT zoJAtk`{r`3L5@IGM$vK6y`~9usGojlMRBu5;FGXV)B7-M`mn@39oXWPYD8=741X;8 z#H`5oN4ZysF_ixlWO9snyK^}D82Sl{rac`vPno%#u*;bQ8jSP!9+Y`PK2LEfP|9^- zi_>&99|9`$&`pmxQ#y!GWSNS!zDoWA82ZY=htR~D8u|;Neu$~b3aOa-_2C>h;Jy^j zIMa64FQA*Lf0xoymrIT+;un2Gf}1M|pnxXzHLDG&R;k+K_l#$JA+ zpFn10tX{35rvtJ)FP>H%%jqr9f-<4Of5-@Ji0$arn|tOXsgQ@t4r0&8?8m4jeK=A@1G&MH+2A-5 z=0ieFUUy2jjn#qe&b57Dn*^z81zqupC8%&2z&V)}6bJ4jWrLEn4tAofop~3cNyR{% zrNk3UK~C_^X*eUvKZVCT_*ETkDtVUkRHvV-ez^)2+j`)T?EsslI~NJpfmtYij-H0S zljDkfy4Ve`@BGH^dMxDC+&+Y{{Qfcos~Jn)wo?V?SHdxi-KtX-#M7dp?t1AuK?U`V})s+}^U(;t2z)cz5tR4LJ1 z$^Wj=lBR)4>U&pjiERZbQl0O*H;J9DBg-yix$HHz6+l(we)B_fN z!^WS3PJnaLcM>{4RnT(7C<9(I#V9iqoo3teb{i8049&!Wn*v9XCUPO1=s(r{XjZc9 zFQJdlZH7PtfmmjAiTt@;Y5UYmV7fqHjh4T~@6DjuGSR3YB}~VIdx7(Tz z&=}{^7kNaj7rZKWr)jUYq&7q~(qdhjFYB43tL)Tdm^@fMwmboTKEXw>H-b!Wzi*Gw zm0#|z?ZG})zVKs+#{-JN)0xBE+KtQ#2YYpz*7jTrduIKb9`Lc+_4YUc5+Yj%X_{UPzGirX-O*j+?<*z2IpgljoDJ1}pov}(5$SiT$ zfA;F#g%dv$<`CmjenNP1x~Sl_B4ENLkpe{gcJbc}%&&mqNv>+W?0rDhVn~>Yi`7~h zr9tIRFn^IAd&iTSDgGK!b0z7U5%CFLdduo(Py*V z3cX>FBhhuQt#vjC@0bau=T?voi@}K*HI;gBxNUIZcBqNu%Qz)m{Lp?^zK>tnWm8W zlRuSn^jqhJ_~5(oSL2vNa*e>dJ3+Zueiho`-`TA%5*8M2FINXK;LQ@>c!PfU$&I|q zSfXhi1t-83?F(KA5x}}m|JC&t0vOGl8L)homxsHyc;Fqmq0No;nCAckY8Y^(QRvyFY7? zJJ|#EB<}v(f+rIx<;kluT?~DraD|0V?RNRAP2D%>A9u@eoGYunXrFVLTGQuho3)=M`(Agshyu!{^H3 zoXimJbaEoo@h`TXNY=hj7@ilqyTv_0gD_2#&T-?IY=dzpIP)^&`p4mGeXpml#t@70 zhy=$tDyRi3?FC-(y4qSQ1xKMC5a?@|I$$BoBe1I6S5kv!Lv>&8p-B?6GN{t4DBPY* zxDl+WN5a16H;3ThkSRA~T}F z=#9#->WE$ZPcgHjH?2W_is{FuDp<<>ClY2`!H*3eh}f9nPt%mKLI31EUx`lPJFU`B z1&Udq+5L{Fgj{Z-9U9cI&D06@A4(&^pEz`)huIC(EeCvdZ!t`tf}Md_Jh4QMq5bT^ z)wVEC4!V}=bX;z|@fz?i-Ceci(OliOatPN7f1b3-LV!hD=k!E>bA{fa)G>o zhix(~242JDrt;VavRMAUe6%EUxqfq{pGtt=hNJY=&4wLMD2xY&Wt8^C9|Ut5Xc518 zVVzO-QE@D5*wV=un!ikX)tBoeDdMw!Ec7EKK@(Aa-%gRyOjW0ADjz8}T-(^ITYLZ3 zQd(4Lvtf~=+N@7{Hwp;(rYn?kC)9{R26;ru5Q^XL`=bhlW@230uSLzzTstwsJ2hLQ zOwYeR-7+@Uo2c>c;a{ty4P-t?ERvhheyC*HZXVh>PB_qRq2VjjDFiMhU#2w%X!dOE zpb>)d5kk%hK0HH3uPBCDUa0KTH2N&n>5xv%B}YDt0-XY3G@Z(_V%iXkYvt6Q)$Wl+ zT;@MET;RRQe!G#hH80T&2L@~g=+!eX+CM1(2QCE!n#l8`w7C9OO^EO>=-MVSXi^FN zjwL@ekC>13wk#oW_EJn^n+V7_4rtoPoS4;;&BqV%IGtRNFsr|0Ukq{)F?1q3e-h_K zHc2Xj4&@A-?xeB2T{ppwXVQVnYKG`&dP7+GiCn+!PI zjFrc%v+Nx1F`~<-;qA}asiK?7488o4Kx5iZw`KgeasFksnIhbwCa0fc;Z!NclGsMo zF)qa~(k;_%e6Sh&z@mJV*`J$d$uUec6LW`J2hAlM^}n=`J>HhjYO-t~KE{8MlWf5M z7jyXkCsIQbTlaQw>D4ywH9wnwt{5+<_De!|uc@+sxWu6^Jh^nRX)dM#*C}p5?`|y> zCZuL>x>7=*FRz8l0{b`TK_wn%NwTGDfkRA|C4=|6=mDANQhoZRn*HDY&KaH${|=T@ zxkwVY^eSupmt`BPM2A#Dv=V|Oa&Q*|=dcH|>b!M%KVx`TLa;6tcfIkixad(h>fEPA z=Q%|N)81w@9_M7N=-zsy-dlII@x|@lRa%M_hhoK{xD&Lv zhvM$;?$+Y&8mxG63+@tJibHSCa^!{89SMe4!FMS<8pG2qf%n1}FA;7GOHN`}oJIQ1t<8RVj zeS5~B7L!OPW~w6oKl^e2(v@}$EV8Kc7sP59l7A+Nq)k`9zWT!1H#e8UqGe|VXBlGNVQ_;SLRh_ja&eOa05^Nk*iPy1Z?Ve(3z47_7GEvV~X9pKtw zwEK1po&9TLXxAvR)#N+DIK84`0(H0LNTtMOOE(NhX92p9*}^zCOz$suf6WgyVcF4C za-p>f;IJQ*xs`|dMjZ&Z95%vFo-VsAzLe>95uS(^#FtUAFa#xyq}1?bqRwOAqrGV- zDsrxSBkq<+--P<=b>+`eu1#3CPuD;A5RD~kJ7Qs~?00`il}>~egZ~y5uE9MJi0PpT zMi&|!@bLON?z6&)RE`l|hKfEysod2QnTsWRE*>wwUkBo>nB-4n~wOZn++d9E35^)LkZ!{N8`eZmfUY*8VY($t8W#5N1Q<)v-`2 z2+i|y(bnU-m*e)3Si~JJH{k~Qr}1h(s!{O~SAN9T1oQmhZ|?=};!bL|Hy*4{PK}O9 zXjUKayeg>;>_HPDBs)tZ!OG9;)HQyf1d{frNbQBy?YY?lbw^nVM@{Ytx1GOB2Qrpw zH-$nwoXSJb9D=@gtR%_1Vkz%m_bzO|jncx)YQaN6QiizMqm}H8NVSjat!=)E`onVg zPDqMsBwE?lj-Xp~)p~2}0kh-rl9uUZKDETh4Z{E&Z#|1i0#1+G1WhoX6g{TWQLlPm z;bSjGnv9vS4faJLKNnKifJTfpMB%il<_RJ2c!LSTgeUYHM)Gv$!6GAA-9B7BXVp(& zMC{B@CYU|jSftW)+NbWTFB?~l`4bK&96wRd{{cW?C~POUJ?84L?#=`hKzEo7{pRC} zNo%c6Eid>e znRW6>;j5R@JyHAM`v9>Fwi;QDB$a<2*}OtHI^h~y8b$_YEhb}L$le*-YKK=Pj7kn zJ8(d|FVEe7Oj8}hhWFGoq3pqccGX;Anm+Mec-OnR?TM_iRW<6IJO-U%YlVn4{ThIz z)ZYCANA%M=_9WkWiu~R50d)<>s^m`^u4Wh63Z*c;4$IzoD;%;*)5Baw@jQ)QAQ|Tk zabaS)bb@zgs_WdZ6`X-WRY0*)GxAJwpFXpOlmoO{^Dvi)wU0feux*v5?@+zFN-ryC z;qc-x{PT9Spu~u!pa8ua)R z_Re{Q0{iuSTGlX=Js-YeH}G>yGa@A9$SlW?-U8KuCD}ydAEYqn6s}~bzKCV#((GPO zbeG*hP`W5>xC4LZZ9c->pw(kUQk}|+w!kqo1jm9J)3$Xq&kqO~)IS$ecduih9#h;8 z5#vmIM&r~*S8w*2Ff#3tQZ%C)p{;I+OMjz9W=% z@Q1E+{X(pBKY&BqPukSnp$8(4NyGz7yu$IvV@3VrF2zbdd<3$nafKRNMqSo522y^X z?aeDRmECVdd~MW!ItI8o@-d?)sD!#WlHKpNXrmyLv-2o?Y-kREo2p6S5UACjm|(l4 zg8pPALT5+7 zt%5kaH{rEOoNW9=Bs3*AP5C9_(@~&S>gf!nF7ROM>8Skv0ACbVN)UV@mF~R*T;a{E z5wy-}enb)+%^~&K)m{lf$P;HaUU~(>rv2sCvog|b(uu{4&_T%XN6QS~41Jr~bcBM; zY&;ZuvNg=W!#6iD_IHf$U0TY$HZ_gviU3x;E!Yt2>Mf}@@XYT?FXG>ria$x;&)$$f zD1nmd&6~u1WHF}f5VzfDJG&`)X*Ty$z&Xx=Rk3%_9i6%(oV$1~Ax$VPze!XO7Cb-E zpRuzW4jB2e6wtm5QYn@-i(3HU55(}4py5C-h|=a-5(k(P<|+`k8CM|*9JqW z#*_8uyUgEg$yorDg3RSxR9ab%^~JdK!rQddiyP!bn@w^}bI0wBohQ(C8*eE>$SNE? zJh;L=lZ;P~7qwF~iZrW5vyDu*D|flA8D+>(D1sUDH%k{Rrab_|JzE08L*>+|y4z;n zRxZYmDCs*ur?Ko}wRXYHx07JUP7Y4jO0lU&lf46`t%nU7D2|=x z9}75S~Pm1o#(Mdwc+ z(sv%$(tb@23%!t8y+_pllx#14|K57I!>!e3(rnybUoxDWlhuE~{q6ePBY-#eBX)?5 zA?(cECd^>G8s7S^PKrKFSUs6U2lip&;sZrRDHP5I=bO5_1_f^0?_Q&ruEHdLo4=gu z5T?&Xy#nq?hkeQ2JUH4 znm1xw<6c3_7B9c+vIF26_JnqDCXL-iDAnk5nSS8?yC^chNGG_0Ev;zVjqNYo9UAtD znw2VyBB6DvHSV=uO1@5n$%vp^bf!&Ko_oWcEMHxr@FtU_qqVMfPK5 z0{>fAVZm#wui$xZYys^y;{8x0?%l{PaNgU33-91Lw(--+3zG98wyWKamoI8WuGTlt zop26LrK6<@b%}?^*+wnX`C)10+4;pd+>Vl+;J535`abRJI-VKsz2fOMm-}YZjt8vR z?T+4y-}3~S`l~J@#0G-pmh_iM=g-+Tb?ea;^0?p&j$OM#VsZrI8p&Q~5{|g@sUc6h z2HpwTdm2pvYNk-Iu4i9_9+ckbxESlu7O=g9fB>VB8jW#MtQcczz27h8V;Z{FscT1u z+DMpju7UN;E;=ohefuMJbiE>QKg|}caow4(PsI&3X!la5+pFKydWiZ+hZ*VlZL4IV zzdWnApc#!10zBs?ZZ_ZC&VqX5@put)7Sj|iFx#Knzfq<~!McYK_%e&Ak8rc8fZ9Ld zukj>&v6F68w!bElsrHTSP?**29|@Yj_ZwqH85s~krAWGvoAz{c9DI5_lE|wFa$`PD zQDmo|4$*LweHdd@9(;MPD=#=I!{ps5qg%JvwuzAfH?8;Tkvp5Im3Uv1+PU)&4>NUi z(%H2}sVy&z2w=QnnkP zPN_T>%(QqIO%Zu5Z<91+pqf?j6h#$(g8vRSNYQkc}tE`8R?#BIYz=18>H@0{1E z7x=8cuu(;uE!{4RXf?+~NO3w-v6+${nPM+jt$hp^6#Gg%O8R2ZFWt-~@7knmYH$PU049Mp}3)V)x`UPw7Fpz(-Z z&Bz5#eyq0L%eZth4aH0kpZ{&x`X7NNhq>ni;N=8}y z%e#hT{|jsQ{_$s5IQeMMluZxWmQaPIn;i%L(RQ~1r-A36aufu(W*5`u&$&n?dy%#V z1Adz}`j5j4eNWpsT}P^%M2ro0noQ*kM~zKmBvmz<2{+uS=j}JnU)s|n5&5_1W-K67 zW>>M>z~n1UG>%F%F%&cMM8NyTnCVEOXs9+D7LL<_9~_|FjtKj*9?BHk2|XAp}<4~-=+&qSre zv7vXsd7%C84}LtN!GYUhLXyRUfrAv!Pi;qV2kz?fvs)Z1{Ru@ni)Lw@PckM?(E26PhqxR$ z{AK*}&b(cF$h#O<;7i>t{DHsF!~0FVz^eH&^|B45OSgKhE!T)!$5F?J)!wh|oeZjF zs3Ef{#Jw*jx-Uvb$=megoYorCQ}=cyMH6L^Un;$Ws}XO}C0y|(HqcJm#*LBZtDvF} z>d)JgWsq92(majO)9kRI3B!I<>>~@`Y0p(bdB2V)ld>=$Yn*aqjg!3F7fcT!N;8C^ zTh!(lxvT^~946NG(HLU5QhFm>>|cF{qFoddLZa@M+;BWNpM|u5bJY8_-lP3Hgv3lH zc!*Ux32 zEE|zv)*&}SE0MC^!QuCS%cRvP7KKh9=0(L=2!~r%3OUqD?mo z>eBRPy@?CFL0K)%e4L*t#FY>F&ws8)*uh`X)qiC*iGf&nfxjuO3*cKI6t^;hEHh&~ z;FK~%&Wq4v+1!4IDd0j~!~Ml(F>i1ZZq`G#QK_$2q20UU0hDqUCc7ztlAp59gOCzR z?|k8K>fdgUJ#Gyo_%WxTk=KMeRq-}f(T)OLg*IN7NC>r(eU}>eru(aTP<{b6=80E&gf+nBh zD{Fj&>=`F5yQ`7C3=h4DWL1Zp5+uOLeDi87xtYSyrTUmkCQ+Lt^?^F>PBA4;tqZ@8 zAf05Mqev=2T%k?N>NBhBW#fE*~zVRqs;yxmC^!vZ26k^cy`HC=8LWO z0rRjXrycxNw+>lHYkl!FR>>688(XU6GT;TqTlIK~l<>GpdqxIxxy`xN?$S%b*=(da zoT1q58?X;TZuwSKXk>M#W>zlHkpm)ob)I#m(T=ZdKI=DLs{@2hMkXz5`L*@rv{9MD+n0Hk)2OSW}duM_`!5;`+GmX%?<$qwQR1bMv4)t#K^`vpILd ze_O-AT9D%&U$wEtgWC|(cT=2;ynx?#C0oi>z$2;`KA*6&60o|QD=$VrpziDtKKd5A z@ubQjo;l^Qp@n)dK!}8v@vv8&Mq3_|Z3Z8R{@FYFqi-=DS|;hAzgy~6;FFP3l24@+ zBqENJSlo$y>!4?=_oyHC(;+l7Y54~x`01cF8n_q4?U2M~6*Add`thk@WuuJIhf?59 zLSuONVmn>qN1fp5xlf-6W7_$pu1FVsHh;LycPm zmQ*zb&ST<6rj#U(goTFZl;%P%+E<^m{7B}rvVvO&{`TJey2f}YAW3&vdO9E2+-s#gFmk#Ee1XNsZh7(aL;A-+K(GWL!ya+Kl^f=e>>5o!85;U6&^P| zm?b?K^^}3H6N*6|!)jzKk&I#|dS=mp7&Wu$uCMJT-gGFOidhA%XTA(sm9CxD6NZky zRJL9G94i^Rcbl$`q}E4D(sv&bKj+W=co(-~^(SZUhcMC} z%B0sxTl?O4!%6zP0M;I^Rn3=zmo%q2Pn@l`n>M#>pKHL5+gQs<+eXo(Svc&|A{~_` zh>32zvXbkl)(l*{I%ARa@~x6OTdmIL>F&}sl*tz}BwP?lCD#Lc6B)|-vSpMpS;y7( z4CD6USDl5Y$j*}^Gbg>^>JI&MeTP>P$<;T2-GfJ`?f57fg=p3h{*L z^3u51I9O8Zfw5bwB`zt6U-vS9kqNZFQ@yvLo-;j7f&@me;n>yH)kEQ*o5rjRdH-y3^;U zsOWW7)$btASmpbho7^UKCXiF@1uZ?00($XzR&J%o`37IrS{uT-DKNh@N=*;Q_J2dv z-21A=w!Cn7ezdHiBXFvXoSuVy<8nppk-3$CL!bn*Q_jm`xk|o74ylM&RLp(bShp+V zi9ef@oY*2%YU^EhPppd$)%4|l9UZbw*f*~W9ma^L_P*(oV7Fa~Zc=kPZE`~9Ep_$Q zZg_n~;4RH{Kz?{LfbCZhS2^WqX;w92{lRPloMC#Wy+OWv&ZFv9DU~N4^+)GIq@8PZ z#I|zZf-fl-0An_N*&UgbqLS5X3T0~6s#+JqTgL}r9YAt9xn+WO1lRTpX)ph1M933x zoKi{(*0&qV;_OSZ1^`%}=@qD$@d9DtoZijJ3_%MTt zdU*<}Df;zHMbMm7zo3{LrYf-8G{wW^6Ih8}n~i2TK30AsMcLlMF)lKAg3jMeNl=Wh z*ubo4;- zw^4^6n0P*1VU%%%xIWmY8l%~f(8H}-OCYO)#78u*FKVyFhzJvk*8g}=Y>hlbUN?|d z>y%R4_+XDS^72cbAhq_gOt88)VgHOxT+eSz&BaP_b2H0(&W`KmympWxwsl#mxOU%-P1Ph;? zZ_qwi$VUzGOB-P$T!zw|05Ch8m2pL9loG1l}s!lnEtoTlKLyr+Q z&`3tyRGI^S#&`7h*D?}QQ)~RlQ7|JuAJk-#b_4aIK5tfI0aK?P);UWYB?&bBNw+$W zylq8T_9=CeHmhPrBTEObQ8U_aCla%#=N3me z&Y=3wn{8w7ir!;-8qjI=M;hnHVY4ypu()k;n}X;~k9*$bDvJHsHaB_P$ptX+hCIg0 z8a@JR_q5*j!5L#b>DY&$zZnRe?TtYZ=HCJ$I~UyvNomdw^8!sMV-K*uz->0HKpc`2Oc@k zm|lC6uMSO3lh2NHS&+;GAn=!9^ubQG^|ZSHZBwwwwR!c>%1Ps!VOs*eP zIA_;u8m=UNNb_A<HIb1iA=O2mam2~G zUs`?W5)`H*jZ+i%>QjsNRWUdvt2oF2g=FZo!GexiZD{J{3HGy^BDUt$| zqpipoUPfR&At9GP3+9gGLn0@~%EyQ^r_}Awa?YLju9a!P2ivz*sVq^0m<7NasMDfg zwDL|AG9hbZj$mZ6J6E4^AAS9b4Ec6FidE5N&su5SQlt!N8}msvUzo&M|L-tUzt&26 zqp~gu=Ux6}lEU%6CFd_}X5$7S(_XP7f>XjIj%E#rNH7f+yJyM!8xqmsYndht8XHV5 zMngF11W7zW5imPH*2*|Trrf$$Wvtwj zUtVaaj%gh4i2|AXhWL4RV77z`(_F1h%s#hT=zsUAMauX%MIV|o-{nu`w+H$C9@hcq zE*0ZE0{N>QbMGZ{|7DKKyEI(&b2&Os7fv%H^RRjM^r&)ABUbab{dJIJL!0g8tmRFF zaJ+-wk&CRQbL6ihwgQWy>@y9n5GEcu)G1ZDmpXGs8Xz@vE*j-Xx8HnIr=o?g^I+au z_oP0dbcH1`0=HWSSZ%ZRFw%h3&A^4Qn!tun#n}Nk#_JCNBX53H97|Q4`i+)QzuH$< zCL5^930XLMcQ^QT&n;~@WQS$oH|>;L0jvVO~s5K&3Qz2cnt=+b`ws0Y9iRf2zQ;iJs} zYCU(a(3TBxskmcPp0CT)7DYI;qEfRrcz830l6T|K2wv!{B~hSmIrU7CslE;h>cbKMaxJVO{|Ga+z*u-=l636+}Ck{VOjg1)*b0|jW{-m=tV=OyT=VQqN$i&@&a zqwozaJc)xyn*C+nJoj!d1IEu{Vr&}mXUY+?_F`~~QgX-jel7zhiawfFY;X1&vt=6c z{ax&@E}3pKWOWy!kU+@|TlL8+4)iiI*5nn*LhhG_(oZV6O{_&t*EF;IW2F51uS&&! zUYWQ1BQ<-+Uzjiht9SOHIqY!1mPA5+qOZ!Cm+uS+vfZ zSx+iFu)#4Y+Hq0XZ`x=|hHX5YlLj-;g2EU?BF@{6c3GDoU>lasN{Dq3WNj-)!9I+b_Ya`4{|>`%=d`~AX+bP#9_WnuCe z&ZRSO&rea(#Q|EM>dNY}^?KilF%GV&Bz_U<3MzIsCli=lybk{>jUaBvCzJaT++fg} zJm)_0!KSOej5|0nFmJ@Og{ZI=)rkl3+-Zu2zD?D@jhC)oVmq#&rI$wpeUu-9i*8{o zsN0{~Y=p;k$9&W4r^|efToVz!&fk&U;iD!yI&iuv`7iT4U-Juy(M^^xV@38e? z*9}(TUwJOKBY64Vl6^QhmZ)CF5hivqKHN*42JYQVbo?;M5K~S6X-BZ|zAL+nTnU z?|pSx=tQcrj>)q3@l1~U{Q~S*9qsDN{eG1JU5yEiO^2HUiL>mU7nsnBt1jwqnH$|? zpIH5+d>aFwPacCjGwIV@gs8MUW*k%NyyvO!%EAS4<#*V%vM(XDd4Xi*&tT7~=)n{z zoka2+-Vf*3>6+O&5J-BfiqYo?BBjuBjL{SGTtGl?D%)Y&U+s;20UPVqvx>+B@2~`{ zB1+_vJG7^6NW$%;Ie+H5m-i(Xaf!MD%`<qyhiIJUG5 zAgcAvR_yS=h3QCBepR@6$bd;tw32?8P!vKncwkUBV~rG`-V6gKycRej+ewzqyQ9lf zciHAiSte{cS?kRF09?9=qRi`!laVQkFh3st5+f_jS~oNI-P_KtQ&RNev4;#KhPN-~ zw2w%?YNtjDG9s69RhKQAqhhgZc`M*Kks)J??rvi}S^{`tZu|CTUn3V_DtHham8V05 zS>GtoxpGE)!=6sue8J2dJ$*ScM4$EWOQv)!0Lux5RWrHh57yc9v9V7O3Rw>b$m&@|-3=WqNk)@h zUyD9BdwQW5a6>uJqhz>IgveQA#oprcK(Dt5@N;fWMAo zfjMK#7*(~Ge<;i*Zbt0l)3sQB{83xH0S6VUZ^=i7xJb>+XPJqz<&U>Ft|Qv+{%k01Y?`zxKX*Lt{w$4l!KJw$}sB%728ab;!dOMZut z5y}pITd(xBC!bxO2l@v>V@_%^9+pGa2 zHlg~l)sPiNuBPAGndScJGPentiIIWDY?AlMFJY<-B1{#e=r>pPf%!WoTBToa2#2LY z5l~0qdF`b20UAN}EwT!WB|#k~a$83UzH=r2VE6v3Vqoi|@u#69jVUni6oSp#4`U3C zW4gULE0lVs31Lt(uMgdhvqh>j?D zX7-}Ci|>z#LPDL!6I>BTM|KB;*NwV7L&ZTlclWhW=gg)A@^+K0{6O^G^|2=(r|Rc* zqS-%29k%rZS>+8mC$tY~gCvO30R9OMOTT`0_ zDfvE7|4eMpieweG%Zg-Le=_)~2#ai(PRz*!=%fyZQr~k|Z#$c0IHxtmUeDp22(-YwDF=s035tiaN6DYe3@t-o}qR=6;0Z}u;*SxdWUnrTpi{4Oq$ z_j-phfsQVV6g>6X;hFLX0F#O(O=>>^aQCI>8}y{2ig|Epi=%5CV&3Y0kMtavnr<}a zif%M`grDMVt8W1y7`!!<1lyAkeWZvxcjpg4`NHg)MWhBUL+U;CHmgV8{WXE+G*3(} zT-_OMlI>=u_>%o?k}Vvpy?|s*G?5Z*ht>&gQ1&a`s!R_J&aghy2=Xfxy*MEOq=?@p znUozt`l5TEZdAxC zwXmGMvI&y;H{|vNzu)Ray>>>frA|?z;sG_%5^OpqsictCt&y` zrr9<0Y!xTLq^n;RlVHTd^8}ePs!M=mu_41Rn;;tanHU=`ElmD_RgzB z>*|BAwY=b*<=$*{*k`5yPpam8pOHU{@x(efwJI%@m&N7kz3QkQXd~6yRX<(ZV6_(^ zO!%bR%~;>+e#Fab8os)of*Js7sWV4aSireNmr!OvWSkc=}FLwI)^b-f{aMFp-oOGRs(2A;*v#W)}zWR(q@6tt+Kmj}bD%qJ_p@CZorG+bTb<>R zM>hhtc^GF(f-qv0-k3j=<=_05Z#XspNS%xszzM$b2Q;9-UfG$&12wzbRhx+f`_jX90_@>M>fEmm0yRY@eG~8x`eF6L)YrsvBJFy%%c&ZL1###%sK|+iA1;A_OyDI#7wT&T^c4 z6)uC{&SwIKgKCQaCMN?7dJHNw3FnCfhZ?5B{Zux4kINtH0b-vsR78c^FFzC`Qe+U1 zQS|UkKbd|bA1{cF*N{BUY&uMz4Uf*Gny^v(Y#RraB$jBDrBUU2iS@w9hF~SwN$Heqi<~@3!R~1JWFceL`iR((!q0Vz;D@yX z3KJf$xC=E~duT4&6pmfzxg$4VeN4N>70WdzBGQdyLVjc0nImvusDz z`_mqe3;9|$($O|myL*P-7)?O3IU~@sU%Nc`o;X}X^ca!{-v}ajZ3DeFaI~{|f5w#y(8C;ceVngC zq7vujPNOoUT}D}qyE1roqej%1Idt- zB5!Bb6U}j5DM^BTAWUZoL%foxU3Z9nt}6=?GciU0thF{X*b$6D&KpTIOyVe3^kh43 zUiwx`95+|oJIIOvhg3InTFlQ+uge@{$VHhzb(fLZ%)VCyWijr%K?ZOtK`0DUedZpO z?c#05q~hnANtzfy=VZH{f{5QrN>C+U-5n8zR zyVSP*Z(Qfnk|-Ty!Y?RaT5}hsBi*1;{kQ4Y^gIVa5saYU1P7^?`wjHm>pea2rV2C~ zxvP511|yt-ryrKHA4peTINb=z?wgM?K1tVxzS!MMXV52cPplB8k+)y34V}kbCf2l_ zb|ZNTdb4=b9%%pV|C=B&hHVKLl}No>X-H+_hTLtjqQd}N*vS{>R$P6)YS|4BM>_`6 zINKU20Mk4Es4Zj_$KAAi&jbTBlk@Gfm)>;5@#Vuyq7;?K*_aHUWG zp-h*%nI#v8>OB9$6Kbkf_EyGxW+lokXuusDaWti=Hc#!%V}c?nrqYlO_-)mWx&q$Hn8(p}xgg^D; zIf2K|J#`0oDy6*1d2>$8x?Woux2rP)GM_C%v)KAgCl7f6$wEP2PJ=I%5Kz3%i`Vr>9?*=FWIidFWNB+z z_T7FFp=@W9a$4$~G{CM_L#J-TZ-ITuVr?6blOl5nsm7lz*;ql_yU_jnY-3aC2*M73 zA%{))2I7GhV`Zdu1IxwgYqtY+g_6s7Zz^w=O=HYQv ziyaNAudiqyWn5yiw5RMV;$z#!#>S5V?suYbUw4MFsuiB77Y{RxH+r^OVuVA1!(<{4 z^jc%tS+bUqf?4hBfslf*?{Pf9D6)a!w`gi=+B!P+E;qfD%+bA<6!CdIh-au|-zXED zs{z#1QQ&-YVg9GEP+zAoW$jrArJrwKzboRS9aSwYe2ll_~ zr%H%t@YkqSI+Th+`MOoj#(1pTh|n*CUwfI$%0P-NNL$omnxLvWF3}i5p*(CcJ4E|D zDurQi5R;uwXPeZ>?X^xoDB|tfuFI!#Cx-b$1HhAk>)nYwTrAt6nCpk)Sm9a=1b(AE ziwpF8|2Zv{(eTGmQUXxilh8o-IZ%Q!KL3u1Jgo5*n)i~9Jx)5GkH|-)Q)V6v17kCX!G zJL$XSB`}X$A2qY^zHmCb@=Tp89J|2L3Kvf3R^lxT+O`PuQkF}%uURNEjUC5x3% z9ESopR(T%Yg>wUEvza=u-k?SrZ*C!63T8-|8={KIJ8na6@ErnW_&y+r?ry>boa3X? z6pVcD1S`MhD%D;(&NGczI$&sh4qv&S7KO~z13##z_S!84D0 zGIYI8#R7ZeRwh~fR-}=0d!vwhCm(PPcWZo#_%u*??YZ>{JSI16LN8pTM>~6MMHfhk zm6EKaswr&YKpF&rU~O5EiHM5%q8AhtBqk*x)^y~5@92I^{P7t~P;u^jz8o*y##}aE ziPA`>jugJ#3RS`u&9E3h9cB0}Ii^t}SoAwn&kLuF%KDQtRx-|>+7&x`B5nW97EDQ< ziqpa_r{qzVE~Emiz9B9X@Q22%Fm%?RtVz{l+hdy-D#PYTcVo4+YZppiq&=kRAa|EV z#drRRHu>byG9g2Py8hrsjjr_LzUe(B z))0$)$5rL0V%#&4>e~uQuddL?%rv?kI>rKR@6x)WjW^XwhjR@*C5~Z7&AAv)EFcsp zi!RLqvL(J3NWuS!s$VQ< zCdz)8m%8~^&=VK&Po--2|Lka;M6aD{cQ;N_83sJsQHA)&vv=#<)Iv|iR#?p?xrU9j zfm6D34-eQn|M}3Kr+(yW?|=1AVs+ zC3$Wa3WQL^+W5u*97rY#+oEcjfO(eq*oP9JqVA7J{HlMhbqE;`Ts z&un-*E*|#3PyxWdTmMhk4Udz9E1~{71%4oW=eKC>|47E+>sP`=^MBg<|E`u5fHC?% z-{4|6s-`}_y7L@y0czG literal 0 HcmV?d00001 diff --git a/windows/security/threat-protection/windows-firewall/images/quarantine-interfaceindex.PNG b/windows/security/threat-protection/windows-firewall/images/quarantine-interfaceindex.PNG new file mode 100644 index 0000000000000000000000000000000000000000..d6679e1e0e616b1430d006fbb2bd90d59b42f5d4 GIT binary patch literal 79691 zcmcG#Wmp`|);1a(0>NE_ySs)`Gh9D+k|cZcAEyF2qe``i0H=iTT3 z`O)1~SC{tcTD4Z)>yA`bl>YLW@bjlnpT5Y-NT`1L1QYsCIu#NApZm{NDV~2GP_C-d zfKN43#K-?+U@gTI#6Eqhk4JtphWjUv#q8-ii`WqUx23fi0&**05ht(ZZ+tS{^3QJwAv z=cDQ)JKq>Xo{Ud?ceEoBs|iBcW9eu~5fVI4r7EE;IQ!Mw1}j_E?!V^ZMYMNE8ydww znNY?Cg$x3$swwR%nrLD8;F24z!L;dwQ;2d;blbf=MfS`?MlVNtk7<({^W=WcYw+*5 za!<(R{q)FvxIAk*{{CMx4Mz=|M>I}%8r@2G%aPn}sz`@74UJJyW8^o+9ak+22MdJd zQ%#`DuEv~@t@cSxX4s#0J{(BzlyLa?Ogw~mo*`a>c*vi^zyXu6`ndC;arY|y~wUb6KN!D_u z`XWS)N=pHZm~;?A`4h79bSaiav6Qx-PAv1!*1mm4i}XsU_ z4935{yrq33f%;QLzRIg0NCbIDjq>s|CzU}Oteh_YbH0f-?!@k#KKI4DkgXa8l#;M2 z^-cIVnpi7v(RxR%d7|%G{*YRi4x4IQO9}7290DlKmpM=2>~h(3Q~dw@iDrQE2YGZZ zc*GIhIn^*XYqXV6c>?jLF!g7!<+mIr38ps#V=pzgnesULxKe%k*OS&>85w&hGV)p= zrM=AyJ>Uh!f;?b|EfEF2SpHt?XV!G(S2%W)t^O|x^z-pr7O2z+2hKyF_D~WXXK(R+ zO)mRm(~fIT@FMXDJ?ITT(3#^6BeF(+$c|)=vfd3;ZSLQ0bB@sT_>1t+r4q>YfV98B)q&)UG z3Xe`HuC)(^3cZACSAGIlE3?oKTTyr0iJUIg7XB5G)jgzxs@T$PdtnXQ+N1Csz5g3< zFE=6n%FlC#hxzu%vVVr?wc!;4KcU*vgNNOFZ}WS19$M5LrkCrsyNm;me9b|!iCTa1 z8b=l4S4w(X`6Q!Ap)HE>&&JYx|wA#m%XX`_nkk;>O&U-R|mE=_$?Aysr-jd6F&qP6>v&7 zGcGgx8WHJ$Lg7F=~x| ziT~DY*B(Pj)Ic`B1J1lJ?`OQVPPb*E6G`fV>h;N%`WKw+BE65)mSrORL4%f01z zk|8|vCDN6TB8)3<9k;{BwuyJwk9Q>mF6jFfKw@ttP_(c5^bnLr_kejb|NPeSyz7sU zjv0)JqAfewmC(`sfoda9)7j>5HS^8)SEUnE-h zyIAlRwG1cAE(~P-|6zW^h#xVyx{e<4|x&qFZPd?j1CK)k3Cy}ReY{huGAPV4dQA2q#= zv)WVA0p83C!=!t!O0me~h}-zY#qKji{Ck0D3w`Q?tilb);k9v6?h&wB>ml58%GS;Lju;T_YG+GI-Ne&6~KYigT6^Orn3sGvgHKIk$qrg9@sgo%m6U1@x^RUXd!QjZOFWXnsNEWMm zq-YwQc25by&OpHu(O?iE)h_<@5L_+#;4QmDI2HzM7mK)@Wn%s^Csc>YF1*&9ft z_&{QMxwP!HUxMfToI-Eo;E&*b@#V}Wr!OgeG*fpA`1TVrtQF9bc6|q@*Tj_*RIPiI zezQlf*B>t8MWWG7ib_fr08}zhVUqGiL3ZfOp59RYc1an3>$v3;hv!=wp)^fH$HTrY z2*aLL68!_VO@Vjo5A{#|x0}TRL~E z-Pia%0W~27*Ix++shJ$=8uxeux5q^{6syRio0li4eZ78&ha>R2l!uWZz}H!tb2Oh* zi@fG&c?TS#t6ew+YM7S`OcJ@dSLFl&AVtvMAa@M(%g|8|N(yY0uU5 zhF={bO;34wt_C&($Y-!(_)E+w4ky4w&#tO@stu9>Kb=uCC~n@EmCXgi+pR=5Kl9(p zTm)te8;X7#{=*l*j?NrN4Z<|hT+PhG09XO1Xhb=YdQ2mB>gnyJ`d3d~UG%9`KGfWm z&&fNI_&`hnX|2#FHl_rB-4jf^DEagpVx4lofdzVH&29J+Jyg3tA0}Aa)P+1ec*O9# zMqc_y4)YS{`_4FP>Sx#2oYX#@CjGK1g@?z_bt{PUk8^4E$VugN**ta^fJ-9H(h@h7 zrI03r&=@{lTzcJI(|Q@-iup+CWwLsKi2rTp#|8S7(}og~|84HcY8$U4@P6m*^fJN> zAC~iwWyx^cIZ-HW>V~KBtT(TM1^83)ZKz=ig_j|Fo8Q_ND-T(d2ie??e>+Rd=i$6` zap*Z05-?~BxfB)orqlx~p(r{m^|#6MP9}jE_~*Fv2biB_06@Mj#v;kQ)09S z>*qaVKyEI^Ti-h2um|OxjD}fIiHT_2OptgtU0KQ6PrLqljKir9BO>wnWq*5L{Oj8f z_-p!p_eGG4qu@fO)(hg$;znZ1;m&>O1BvBY zfwww6GY#glVd;#0G~9}4yZu`IPE)zOIV3H5E4%p^XWRNwx~`o()7L9LTvzjg*Zt8J z@1$bSKwpBa?R%Y~$LL)GVz^DynFf5tY`C{M3$W2TK7UJhR(MY! z%rX~Ef`;07EN}I}`=!q4{%XkE+u%o|kgRg(jG~wZE`c>WJ_4~k%A;%Rvdn6Os>^%G z*(zhG6UWGy@8&pKkINUbo>#xkW}4g()}}ejxP#!pcl5xQzYMs^)GBRWBA4x^B##EV z!QQQ)vTb8g$?xdG6-S2hPO2bDA|+G>;LE&4+}fhP=`Elimg4r0l+t|Qs~}=z z*>IImp|-+o-=0Uv(+=(QVF;NHKrI>c&g#Kt#BOruea+hX!!Qt%<9Bb!vMbEXl)t$) zeu^-B^^~H(vJH73-tgPoE8GJjvpoXWTjKU|XfOk*p+(S0>vM{e+Nk0$P0AMLFY%Nt zn-VpZr#ro4)o~9vJntC@8-Q}Z@inqmL-WPh5+|-VnXCyd@?f2zx4K2 zTq>K1DPL3dw)a zL6X+iLUF$xehzdmcC6S)b+(g(lC?$)7xC&%#7LSo+E%hbF>wL|wE#AT#J`!;zXToW zZx6Xuv=Y7<*`yaB)jkXebUAPz%If2CbI+(J{_$G=gmqF;M5l7xcX|s_7YZL>pA9?W zedF3vw5ZSC;tP*Tg3i>e&hMs!$vQHz^OGBjM89rJnK11BX&!wztF7}*sws^$(ccL$ zk})cOT{zzA^bCE#y`Y?GZIW;L31QYuvo_&H3!QsW{Php^=x)`LUV9YrBis8)#p$YF zNRzL;1wpf9Ma)@XE}o}52M~FQ4J4j3N~c zMg^zIw!>IOhoSg~u}pjIQ86=*dXMhW@4To><7j$}g^|Y;njAJqatmbrppb+BP(n#P z!d($3b9{f#!>#j@VUa#!Wy6@{kmq=hD7vqGmej@a5@Iq>zGIf5*6sZv_vrc{UT?Qg zKBS#pZb+ld!2+n~JZ(5H)b<1eS?SB}!}AVpMLXi(Bhzj^ycIv*Y><(3FlRQe$yFcy zvV0+Xo}IG-QQS1}fz#|hD3ZTA{BR;+YHy=21JhoA3()0kN#xom_3vF{;#=$q2V_qf zr@=-8aM@J4Z+tj>NR3=u!uWapB7j0@&dZQjmU!V0y6NtQuvBv9V71yAS>5BzhmWF#nuZn0@~dk%o+Mh*Y}Q)Py{mX7_Anv63+$Jv6duV)*#b4s_?j`ow~z1 zw?Rw}DUX|h(jwR~P3Q4;pBKXqYQy)bS}*Xdw3j4w5k?D?)}x4l{|m;?Th@}gXF)$O zP;@VGI2YV@Ztq3Ctw3MCzoxqt=6=ijwBSiroJUMZWQ)lE;#9_4|BE8CV(R^=VLX!T zw7`}vVvtY9*O#%&)F5U_yU_G(AlYC{0k5A(G(ho=syDBxz(;HP6b%t0g0jcs3o?=4 zS>S;RDhe_`4-vjlL)beO|F5p+?+oI@*2hO_-*hTYCXBOZEsAUwg;*GFZeNOCS7y(t z88#K0CS%0TM)sZ5{H_Q6u1hI?e|$iRygVbU5_0D$8D#a=bmb7QwdYA+2Idrur6gax ze8Jm#=j(atClY#+>fwpiWYhp_ZuO#wo+CR(p&u-QRg5(+N95j3jjqzuV!Xr55a3sv zi^AtTyQ7sB(QYpx0is(U$F}kdhJC}DFJ4DsJaKk^r{=RdBIp?kZ_z||UzCLU9Z5I) zQ;V>YeA7o@{Y2z6naqvPzSi2=6d580y)2bdgeu%$qnvGy*GzpXEtbb+ouc%p%bDzW zC3pxeMx&W$t4(fA&V;Y4O|;3%6g@K;#KCV%@y2g4(&w<7|hvP8PNtnF&C;C=?v- zgt(RN*PYyyPzk-lT)aIVdY7*DwR_eSWU?4+%?&v{() zqoaBz{Qc>(>A4QbW)&Vo=)Pi-9@Jc}W-@AM2`>_^6wPIPL#rqiMk-s&pwKxsk1bXt z0e@>5QzGHU%F6}nD2UvVnVb>{9)VuUXjU_bkIUY*qZ4>V4-&$EhpewOxg)%03KHbF z*{Yq~;{7r=0EpIhKfwE<{x%vh_$FQ&eGq4y&<)aW`w_NZ(Yp5gdIC6!f5Si*5QEnph->3usS9lz&b{V8nHs^)a&34?p@V=TXu*row1_e^DcZV{<$p;YlN|R&T+1I##=o9!`MD+W5zt)K-$0phB-nvpi8ZND|9uSS=t~DE599tU1quU$ z-J)DMs9Wg@rg%oKKE&_7G+mvEZ|(a!x`BK)5uV1xeUZvS@nXks=)B-=3${>IATl`aBJ>%r+ zKy<^^0Hz6m05zY@aqm8pvBsodA#|dKObLpTJn<~j;F|tzQkXaPz#zx*)hsVp#PVUE z@V=3m-o~mHmqsEB(kt|d>AjRZE)g?YV9J)gy`_~|u>Y`c9nOK83^qFw^5~?M<@jw@ zh7%utp4+Y_$|AP7i6ZKCDtp|eki6D1Vwd1!!(nUm${PyD8&*sQb$OBuC8V$887!!k zl%)=kYKQ&mBHsnt=MAe%UZ~@v$)qD^=u^zVlp=`(PH3Zqd%25q%7(>a;}v6I_7#g& zkKozU@|Q(au4tPu!83c^Mv45bQRKP6-c6&rp|wcJ(34S=`|&$9gio)~tLI3RI;HT; zPtK&MKI^?zNW}i+`wS;_?-ITm05h1h;&h<(;m)M5LSz<0954p$(g@EVAaO?-YHQ_{ zEeqrt^lmGLl{&^s>b92V-3Ui@-u?si;HHFx1f-N&lUi&s*?4`LNP|Q>2JWgRWqP`P zJK4#K>jQ|{OAf^F$Lcvx5@$OKP1_K7982E$UH3@c5c3`DX4PJam6_+)p=v}4^z2obw3Xg}q17%ZjQuD0TTO7Sq7*z+= zq#*a;$Q6}%kz#46o?_L>8KQBLhwN0s1GC&=r^aBir0+_LV|qY%!lqg6Xm;7aV3DYQ9 ztsh^n%?`0aq@s$Jr-%=9jQZzAF%j|#aHEJgNv>1yHFh+t%IOUIfy_z#Cfew^<%LPkTIrX{1pZ@Rs6lvzRj?V74k7W} zjmo6~+8vtd*d+B96Dbg}oF81=;*FN|yT!`i)y@p%I@ik=?dC-7@w%++H!ws0%zKBP zwEL1gH^3XOYnM}K4+bC=KYQ3@gv(E?nD$#aJ+mGi$DCGpX-LA6k@>wyUNH<$Plfj} z*eoF>kJ34{9|Sk8ZeIj{&;Y3a=kQ_ug- z1Fo3GB?XpF3TX-eFk)u+K=Kd>*G4<7k>=-(x81Y zJ;p!1=Kun-_s(A4wVp?(P--AIT2D)OBICmj-=#V?h*=DcIEaqcTcS-5uunqWN}?zh zPqH@)cnkuslsef}Cfp$}{M|1ZXwK)EKD(g_p;SlN0t)~>52G{w(2 zEj!lUDO->;jJUGe-6>YT5VC+B(j{i5-qPSHnQz4><%rs5S|MV`6v9~zyHYhTS3TDy zfv;R-ZRZq~^MwnRAMEQPYp;$rC)p2Lzke*4z6||PadUpMuFnW;3-`SUAnVD~8-{ee zLnjqc{YnlFQ8n;;R%P*h^ra{9`Wa5@l_Ca`Y$SoZZ;MY@RgCdzKg^}7Z_P#V{e|A` zgw9X&U7il1i!@Q}tl!~!cB>&}dgEH{;{C?syQGn86ztn|y*kVHKV61xIffr^4gnCy z+tDxI>uJN-ben%!xH)59CvW{sr#jGgMiPDAe|?^uzSu@E>vzhCYUr8nP$vh9%P05PCeA5K}k)cUb0kp||SSr<+>FP@`3KrCzKV8f>iVk}+o$)u%bhe)U(ufTJ^_~6$lhZ$GwQ_P zGb(6MNX&@)j_gUMvQZ0WPNMvMw!p>PoA1+Nyu+bjo_60~^^Wf-1VFc^CQiVbfRSQp zlQEL*lK#M2GoJJ8AdoIL9v9l}ceI6=qRM$`X~&d^ZnJHx@~Q;u4#a|7Al1qiMQ0IN zr^|x*ltn17WU&HPe^)T2Q&lu1fgtTEh5gu+<`%YE&~U$bk{P8c3s;2PWzM6L>{&yw z9p_p775+G@B6&h*s2#Wj?8d9BERdJUU!bwV48{-Npz$9(|5HW^QV_pqyf)>D&RHn* zNzL^nKV|toy%zSIu21ueomMswcZ7cojjpFMhXqpJgPRotWkN<#<|}8Wo&&rqQZKHM zb;B@?rEc*+I@GU=i)Imum&Bom4ZDhrG86hV?IgOfLAjQ`Lwr(T`EA2I`*%>|w@`fk zD~_%A5pKOY2jMh*PsT03jo~QWt-(Rp+q#@Ni+>}&!|OO00K}E{vY%Y7`v zXYzQ*)30CmsxuAt?pvJ&Xb8y8jb0BX?fAK5v#?U+O; zk+ef)oX3|7;>U#rAnK-(;qwYoX5R#sms`=pKKrX;u1SkFDzKdBrxy2 zfw3>r`R0(-@P(XyguI5+r>g-i3ekqsVX02yI$=*v^zm?hRg_sn-RBzfq4K+;=aXP( zEU0UOVCgU;Lgi<{`*_O97_7aKMAJ{$P`ba+r>&SUe}(-zHnSX*YuX)RFM#GkGLkz0 zoo`I$j+z~)YbvL6NGP>XREX)poOj+8DY-l%T<#bKK2a={T<&a+Gc^5C40%Z&p3yYe zIHu^S$nBKx@W}C*iw}Uf&WS+AJPnBR9rk@Rmo1|cFu4>-3Z7f@`bud|Y&kN7 z{6a~?b$yc zgF(v-K;NaZQc}B&9u55cMpNUnOfo?h`13Mw53h5R8CH2wBN6=`Rl|-Ub~*3|nxUci zx<91%u*aDUL0WI;vABuDLJSqQBvuf$Y2H}gxoRy|6QwXI~cOPm3N+&udAZt1l%w!_Maq8+&b?kd1f;kVV@`!75?)@ z%Rgki_Fc)L`!pb+u|8a7{7x8$QVN2Iu;x!yT&k*q9X80&@bG0$_`v8gB;NUv1Tw0z z92mk_`@xW=2SE;SrRx0Ky$0>#AA?TB{;l-ySU^87W$+wN0J~oNNP+(*Kv?IR;ig8W zI4Ci-|LyD+GPuYakYy`+Lx<*gvW$y6Tl$axq^wlFa7g!7sAi0@hGo}w$Hd3qOL;g% zv%(%t%B4@2q31v&=(E!1&${(|)Y5tYKRcXaxR)syFs@{9g4=-zl9P1NaIguY%X33X zqXjfra_3s)HpoT;H<-Y<%hwmSoU1R@klpsI?m>mTfVe{ep_R$XQYadI1CBA*(YSis zya8pU_QeH@fm-EjLTg&amHmJ|RM zre50ntX|p+T%g5A;V*n+$LF#~DWAP~lF7*{I+c2evM>qvyi6w{pYy8*q(EY76N3~F z`UoNNeu(Uf+yOu?%2>o z-9!UF=1tGeZmoEO6^{U5%pR`lXtt@Zi2}tkEp$p7PHMKc!r!aq2X`tP{ZO7GKB(4KXmf@Zx52=xXKtG&5sQIrb}kQ!z_TR>MCpt}Y=dD@h2e!ktk+ zG96aa<>SFu=)XUu=jG>XcgE5$R@2my*53o9E`d#xzK+--vT^Slxr|NyWvnT6IwCMw z<)sj-soSk|?<_M;8YWxmvr>khAL8apA-pPCZgg8!J;Bl^UT+EMV#cC6)KbyRkd*fm z(uhv0FK7DsV86cVUY?U)S;D0AJ^c9!S*Tky^OiMN+FKnVUZ^W;=Nl8X!fgff6gekl z>|HjB>RuuKW=|w@wW;>P0$oLQC@=;tDQrRA_>3Q5JKdU4gfez=8fFGYf>NO777Pj9 zrW!^i&G#Rn7t2YQRK`SR(UWK2=)78iUt8$#5o=7Sqo_Qwp&y?nr({+Evr_ag4wjN2 z5M1!l8o1(mb<*SX?D7bsQ3a zewC>!Ki8!SwyPq8tD3HeV{vlx@S)CjVyM%5znDhnTGu4>%u+e|(?+3qT4uW~I%Z13 zbhB2f5g|%~N~&zZQDO5|HQYRdmq&DOXpeJwurWDDsnzEbWa|;0*~X68^YCo222R6M z9|g*Ae53biz}j1zUMmxxL#Cj*pE-Bkg|4V0#iqk(*Ctu{ARug6;U-Bm=qLW6bH_ur*nE0F$H2w4GQ0*ebrc zk>4MoCF$gf86=0BzJu`XETXDx=%-uQF_hIJK(d$}_(WNKSZQO0rGAAu;%6&c)1l}X z_aB>fc*gRqI3_uAui^+R!Uwp~T9cL(Qg-g60`(!iEbTC1Ou8Itwo~yX_T$C|D+^*| zD(X2})5M^#bg)F!*qkhP2SKunKcGCCfq{-SqSwC8R$wZEn}dhkY?g#Z+%iN?6-@IL ztc$^OjQUOHwCL`m;}M z4DQs(+CL1+qWhvrnyaW}#1u7$1XVa?RitDVfjCA+Vg@P9My#fb^S@@@J$-`F7ru+< z|H_hhcjvY%8UOGkfjNjq04*ZaEo+Tzo<{)Kl-DjSl$DpE>cyQYO{^j(XQ_(#D?cmg z%uip49DYQx2FB^&N=VNY|6Uk0d%^Rw%VW0$Vm?HeespR+U{9&=rl|_RUIG(;zC|7d zqRcIC4*q#U7l}Ti;KisdjrPJ!VL>q%`b%EeSed@8uGlv~zPU0pA)$wgQ$irovG5vh zKweC{zKm4Yn1x#B7}c8=kG;J z(kpagGe$?pLM%J(mme<&eJx$C3; zuGd@>5YpZ|f0B-?cO5oXK&?XOa)hWnT#5uUwk1g(=1KcoBqw~Ml_FQ)9}UP{U)V*0 zN@|$DZn8HG3>Ob(udvl4^ad33*xMS92$Kh8=S1-@VoJOo3$({?ysi_R@K4R+Hd7e< zczVN(J;SE);%nNWHdvzqk8!g=eWxLC7C-ZK=aqgyGiFv840J=7zC5Qgn=;xQOsi|H zOfM|NjN<%tcjosKAy+t5iSo}5A)^ZkK2b`9KY#RReK#J@owzZ}+y%=3d;USmFtat9 zmDeF#yVd2`rXOrLNM0ec*h@>sm);?Vo=q}eadHK+z6*s@SEbG?8%QL=Ho+|^<_0|R zKOkK%LCaX5%9688-O1T7d@hMa9zk)x9V!U$W4Tvc$F8_XPS^eZO+}2fLPg}|1tC2- znE3*u-AC&B^CoaK z1{laEjpf*YbdsaPRpFxV-)hGAtU)f~QdqO~Jii?w3wa`cw31;$3PIS}E*?cAYG|QM0)Q9xZVo;g%pq zmMkUjzMC<^jbu@P;KXsM#I{7~1I*IiPeUUt5Treh{+s^L+ z)l`C5OSkk8d(<;oByHmNGr^VG>hAc@OR;W*|r#-VUPZO_0bF`wI8&Q)!`F8{y@t~Pn_DoW65Ki2YcKetby++!|c59$iNewct}5hN0?7a>Uwy3Ns?G4$hmz8 zP)vtulN{i7h2Ax%MU(Bo#C}|yUW!jh&`(yOSsDzv26olEVGlZ;!sYZnmt zdJ!1al>^Ftudn}4Ea!t5xc@E>$^Ug75;kZ-4t53p5b#Y<56aX5s$C-5&=-6aX$BN4 zAr9-}D=lK7gBIiT{b%&2(BR%(x`-kT`(9n*R_z8&P+5};6|4nulET@Gl1gr)*gein zPlHJPa1%%A8mulS@!5f2EjVDQ9P?lsF=J$$On5@erYdltW5vi=?5{)7EwV^V{}gqJ z7hU*N(W`s7%IF?_J0~;~WsqaWr)YSA0obLW*irmZqSNJDW~TaF?zjIG3Jms237QKz zn!&a0tvQoZVD<2EehFR!b>nwrx|G}L9Ls)}Idhw%%oyXgIOg4{2xTbJNw{4&BtJXJ z5m|I-sNL+jYkilO6-@uNBlJ!Yp7}xh6Yy*CtN*vrD%p}z^GMt|Yc+d1b@4R|)w$;R zk~j}*@#dOj0oJcRZj}`^yV$=htUc=;FWn#lI4AE$9T+_efu&4Ag-tZpc~AJ}yeB!z zvRbjFU|fBx%kNRy?Ch#Fca+VSAfaqkgp^pHO7oUz`$)xPc^efP?sv^<%-5Dbbp9j1 zMnaOy6t>h~Q0TVMfBU<`D4a*9Sn=X4RM=FuYkD?YpPNOkIIqOZ_wfGOY}Vi%QjZeQ z5w1{I^GktNH;{|x+dJqp>m$TPx27HMxg4jQdZ?d zFN&Fg$#`sIQ>IgsN3V7pvh#vpVrbj_&7-e9q1{F;k+MC(^u+&~Z8Wb0*}NvHOm@HO zrTyTCI!~h;d-Wlrx=7`P4GIT=1R8_kx%zC`h@<*&acsX<9@1E@or$f=&Ib#}tI%%v zUz^H@NSFUaVYF~AgdcMQo~j-F)!>2rg>a`k0|ezkhW3g2Ve=P-JxEP(Knrtp8n{G~ zpwu3_GSa*+%_q6km{ygZ+UiDFN!x0|J9E%nk=W`h#pl4aQK+Q8ySAjX&&pIi87ty& z)STW5m$vjL4EIV;T72xPn)r?G&Mv}=BiOmAZa40P;P%EO5~N^kvH8uwh2U{e?c!KU zK3zp?qNGCe!UC?bKxd+Ku3uPD5eu{Syc4{Bw(NAKB1Ml<(rMFazmIYS?IGb$0gZ;` zfNa0jvv#@M`Omqr8LoZps;_~OISPBl?Q{}1vo1?u0ogj4*X%!|(H+^j0Sp#5g3U3j z`?(DB70+YOw0Fd9ib+aoTI4R(9^vEW8L5)eSw_iy8u|r`N3nC zQTIgKetTL-o-Ey$%6BDJ;EtIghN8ym1h{0Bzv{2f`%?_ZsJkW39`i0(sEj?wQ6io* zEc8)hH`0W1m?FJ8ZT?n-+>!5G?p)hm$1l%RLv%o0+Px21Z7cP#MC5H38*o;+x`T>2!)&vuMXJ&<*B9k`^*4 zRS#Cf=w*hG($e7QeY%LFz&rS~$$qK1j65Ir=E@2=svJeBOH*IK-+kn=)N%_x*WVd= zcvvrS(2OEstFbn#`$0WB8Ny$y)vg>C4#{l~yDtxz?v~<_6%68Ro<4I0`>bj`zjO0} zaxGn!%(8O=d>xf0D|kr)*jnr!398@E-x> zCOFd6j$Cjlc7I5m9J@@`R3#lRWLxY_nA2z5@y_38xgS*Q=O(+sXG~EK>4uIy-Z3Z9 zH7mc;qRYmgg|YijRvhNiU&;h;FTBrVw9z#1644$KY+CF!-HkYZDJvc2iB*daZ^@9b zhrlYX#uw)`NhV<{0tKnJICEYtln=8lu>K$Nk2F38;3*J_BVqi1<5FZI@Y3biJL6`sH z`CMxjVD&*x)48eT0y)b6LooZ7wBveU1;`ivcWZGi^lpIvT?CcHQSB&H`G2@;|F`mH z=?qfAf6>J{6$-Eb|HWhS$^y`a{`V+&!W0qzi>tP0|2YT!xF1QP%Y6I2&xu4aENTKdI0 z+^Dz^h!uh6E<0TY2i%%o_rovDlV)@q)K}J&BHKX(UJ0)0tFxW8%`tA;adIo_>=*loA-j z1FK4llTS}Vm!p(s8WlxdRh+vvC&YnSge2>$)c(eKj~a#|F<7RioGq=I3{^WHVtC&W zn4T}-7LgKq)w#v7XzBXp0{&`gui9$lHVn( zf;DOHX+!A+BG39b#(>cyO0m6{SQ*9oed*l~5*s)fi#JLB=MitHpb?qPKsfma2@cLd z8kB&)4(3>u*>w|~S=o^EkQE)|#j@D^b%THP}tn zjKd!zn50FP_Ac6yxG0$sK-RCKf~X<3dUgl3mz0pQe7|QVe>%pOErZLt9zK0V>TYU= zM7zjpPAvPU9G1=xqt+mZRQ3gy;_u_0rErDA`^UvsJATS60VcTYMnrz4So_gujRkdV zP+mqTGuUEbCqskvSX>O59u7wxhZZY4d*I%4m!NEvSo0`m0utf8dl^d&OwIlpDrJhz zuff=M{JyMuWN*3EP1;FQq%OmN$7KR!GT%Hw*6wIeJc;`J854l==($r@tfs9lXB>dK zy1KfSii1FjHPv&3+R5?V_Fl5{u;KgL`LH!vCWVzB7UdIT{sk%(cu`s9yNrQi>IhM) zAm^I&W%+6LK0U$YgV!77ckEA;|H z=%YuAzYMU(%K)kru%74Q#1aR|hg&bTs@rH9^zI+B8X35Yd=%h5xW|~{b|^2yy<2cp zX*u;*rzw-3m+oofVL|xB+&ec4pg-Au9>m$lwvgH*%}WX>5HO+=4o;YrcU#4*(O#C> zl_0YhHhn7dmmP`M@>{J0E;mw5D%ra7g61M2w8YKAT{3S8=*2?&A!g(9v{Tzg1MC|x z5FdO6B=y?X7@}I;DF6J})Hq{5c%<=jBJQ)Tb-@+K`TRAd;dKQNX9n-E{#dl5m!5IQHJq)o-Ft=G;_d%1WO`Qr`>_rh8`pUjr?yn!rHDl^J_}C zCN$1_++h{&EK2g0s4-Qf2p5iio|HtuuhA+vsl#BxbtZPenmJPpcQk4!8*u(jf5^~% zZ^jB(&=QqniXgl`LqN8M6m0sQsh3y`Lr=W%C=UX69B^avx6QUAcFN;Rr7@Pd& z5;a$Z#7Etp)NFK7O@YmUnYJ__C<?$k1+!2N5;Rb+gLELOY!!DSfCAvN*EotPmpgiY&OTPRXEqs-={xE{!WRnv&2@T z?G1ErU|BU$qJe}S5Pcx%J!b(DVO`akRtHmx@udkeK2O{jGYsLX=Be~k^BPXys0wa` z>k_E?YYtWSkTOVdCZ?-N=y+!gfONp%gG6I3|GrqmmmjlsG}U!UD5uz_ipLR-7z}Z7 za#Iwdlt^kbvATYDTPVk7Qa}^}IO^n7>_plRMp{~Z6MGngde^+05KEPCD|AzJAxY#V zm+NOnK1W%YicKCK62h5mp!OoU--R~r=9`$vTO0%Y@AI9ftF19kiD4+L>tk>1w9jZs z^+M9S4>9SVK#Kp6|27Vi`vg9l=*7tUG`~Y)`6AH?V{lEd{y6}UH+fqLKy5`wJe#vU8m*1rsl=38uHtjxD=27e_T+vGO`yg~#y@XP$2? z+DjBai`7O4{T6SEg_9j;{<_kUmQ!tt0iZ+7h>)G4V&x60xY*-rd0_J%BS|~vP@>oD zk8GOXpDWl?4-F=jhqLv*>?qk{nKm}M6l)*Orrq*SBV$mGAFH;IRe-;Eut4>Ul|n3d z!~47)JznA*Ang5N@IZWIWWqz9{d@RolSv}ZRu??Olq~~dcCjP0lm~qxx4rj$UJ;xs zl85hUxRGN3-b7~ESSSsffr~-4!e1KW^O79c)?~)U$Qf5JUmD*Fb%8U(!tI@U8b}j>}2#~t|gf|b~id9nF2x^)x`WFvNqS4ES+9Z z1ierK-`A}LJrYdS>XY{eX18Yh>Mv9Xbb|pC2hQ`-Tm4~!s1Iky1NMsMs~w_KB!_tH z^{?)zUwmb%zxT#28%nONXnMGL)n#K}cSrikC?~UrYaFuDta>Ko2%>Rrvn6J4jhMG= zjJ;5&VB@K?IjT@nN5cCE`rv!ydT-}eBR6tq-d?`YXbp7ss`>Wwjwym9rnHu`Wy5y% z5}94(-_el=G4uz*@VGEM-_jSh$cy%}D7PP#>%iYx^c!Ptm-PE8+Xe~A{|^9nK#0GL za`&;nZTO@-rpuj1DBvTZcpjHtyp~*J567g>_)fpqGE3&jff-EK;nZ|>x7;iN(;UuQ zJCB(DS9$1<5AotQ8CQBoaY-TS)U)S1jp_8$PdIUHBuz-Y*U-efK79`t6_2rfM+bqp zJkEd52f1cWB7+BZ(C$#zX&0Y-tso?QB)MWKSFB%6TA-U_J>#e7Le8K5JAJ*jAAt~H zTXZU=^+kj_ce7+7g0h@x9!kg-ue zS#wsgpbR>8Zlq<*BDQ$ud}ri6OSx}VrvFh08H_8aXQ9MzH!ZKGu%e2p(roO$LE1Zq za0gW#&QaIt{WGP_;4If_I9J-q<<6WTel9wrgez{pm$}|odF6-`t9d$A{S}*uNhY@- z3$vq_qlb<&;y(FK$%%X;2Tp-1?L?W1s2GSzt>nBbFK5k)c~lEwsjR7^$kM~!mOgFv zfz2Mr>RUg_%IJM;Y95Q^ax$jNosFQ+OV+&0xnWHmq49RQhMZ@Zf*FxV+aia~0rgZZ zD!!QWZn%xB*Dau;AfM`{xzrS;6YTG2aBLD!ehs;$rf$GD(iJ5ttlfN{m(A$+IVAQczq*epVWp<#U*q z2S>N<<=Bt|b4)y$1!WZGW|5f|k5wGK%OwMKR1(?w`DDf!a5`NCO?K_BLUxi3|Kt=N zWm#u|QG&(sjstAn@FM=&cTm&)Q$F*Z2Y7vdFX~}~Me@!mDke4BN_ue-*{MlH8v}TR zl-ZK9D646psjiA-n;)0oOk!NLjKp4T`jdJn9G_7{p%}8dyO@z|!!sfBsN3M;#Nx9= z2l4VdxtQ{T9MY3xG5aUOcf93lUqU5oE-NRrV>7RAI>xBqhfhW#RU2z`JXr;$nl3Uj z60u9z;8s&KwMv;a*-8ov$j#1@eB-eMU1E$PQ%H2Ih<;J2cGoy7EtZhmHFMW96tGZx z-TPS5{|K8?R#V>lA{)ECVZ)PaeO?d7ge=O7^YL}?BLTnI5n7+03D% z$LUi~g(cHzyNu5)qNpHGbdfJUoLdFAC4WT%snnN3QZg@AKJ>`H>F zztOOD{4*k?x)~)G+`v*x3vJdcVn>c}w0lHsD(noS;#0^e4BrXOE~%t8*T%r%gB+G~ zh>9Uid|Y8(HW~S4G}Pu3HPXt?eQmg6q<^HvV2Mj1J2#&^=|ib@Ax;i=$s z;KL(nUVn(>+BK|+JIH_j__sXu+)HfOxP^V~4mWa&4VS=l5?u$h#fM^=jT?Wqa8mN?RL^GGmE(tb$l-_gsM_~UTD3gP!S z@mZ58FE1m;(Zh_5E4l*Zx&285`G389e5>_#qKl1Hrgh~6y+ z7_*jf!6ntiit;;mZek#>~?%=G9kVada_C3VA6}c->PtTn5q#%gKy(Yftw41`E+? z(jF;RoRcm@&6uJRsa?K;`h;;diJtfODY9o0|5Q$OWePp7|AJrq<|+2Oa#*>nM*LJO z2fHQ6E-E0^BEH@2)#MD>GbyXgCCWKUFr`d_&;lBkucst*l;+7;a?;f_B^M(OFD8=& zt*O}*6qd-imqKEU1;4brx=9+sOl(Rfc@ck|nUO)f#e>tOrre8YK_Bk^Hpb$XaPiV; z_U$>!go=dT#4j3U92oBs!nO_P|1lDqmPch>ql|6k#D*M9g`!DMlu^bfdR1eEj0N%8B|@C@$r68_DPx;!%pn1q za`&X$)~bd>^n=wwv+@c0SDtwb(2)awuE%@i`6(HbxV)K z;Bn!ca^cNdz_lw2q+WJ9Hy^+iSH2 z5;OCts-Mrinqr~?lQ<1AWF&~aN#1Ilx1<(Qlq@55d=AC=xnyT%l4NmecmG2oZ$fSb zrCDb2J$u==|0takUTK?fk?CKF zKjL?fy};J?F-#Jt#EMVvby`S}Hk|g!nc0b$98=-fn}{N-w48LCnG|V*T&Z_btQEib zO;5;5LaOK@Jymp(D!Ry(J`j!3=MsAqT}a_k@yeeUlP_%-wm0$hTE1Zz62*2(!|`8w zdK&ReG9qp-F{gss>IxbcE+xg?Ot)8jdrAyJuM>wSr1^^Mj5s_4Z5%#$l#Y>!@J$F! z`C*$ZC{+1oke(KYamtBH`iRjcF>-z(Y0*)ns`_M$Ek>L1ImU2I#k1gsySTP~oTq>B zJ%01ZD{S2GI-3vmXt7~*Mk!TgMKmlvk32&cy)HXxNn#g4xAA4h0-^`Uh zk|cd3sHUXMBNxtYw*;b+n$A|;vdCzK3 z(zdpkEGp~E@gIGZ-~IY`ynM(--on+?rv>Rfa*RQ-*Tk%Rktv@X(M4KnECz>Dd&NvV zv^KVRtw~hW){`{0k5?tG*OV9vV2;b8xJ<@=viKU?KQUS z?_x~)UQ}ukG)q$XPNitp2AP5l*^A%xp@AEa*m9lZO> zRVCdO8;=ZPwpxiz&LmfYtm?W7O44J5aCsm$nkZ8UuMA*5aqP-brZ=pm-gcY~ zJB~0o;gOE3?s!yj<7fVj^%-W$*R5g6{3R@&TZ*B16T1eyM8zgCZ|(J5b>$T-Zm6Q6 zx{NH#Alo+V5+@p*3!Z|EjSW9knknZ+g9I+LwyZQz$ofj{GMW;CXa;|#c zovh9e(zU0VfrzrsXn1m5-3|4K^UqsxGY#&Sd1zz17?gTSAWkB8DYt&&qpZ%hQ+>gO zENz-gv5>gI-T|Vj&f~I+E}*GG3`T;n!tz?0iW8X}?xnqN3~ORGD=)v5i_Txpg2sAQ zEUARfHd+S8B(O?g?)Cr5T}y0O>aXJJE!V$yEv{F7z|&JJxv{#JXEt_) ziKZG1WFU#lD4@Em0B?j4nv4>}#ididWF41Zbq&|7timjv?9lOkaZ+js0kaHx3og8x zOV+Gl;k>!5Si69PwqrE+O8}3R+`9GL@xfbIP$_{z(|pR)O^h7hPV1;y2&Y!K4jm^T z4&7@gVD0r6lhFGdZ}eo)nCs=BkQo(p+JrpSE?viES6nSVtVVoEDcSZ(4(-@OOWzb3 zRr9#$s&{a~@&z=_siC$Ynvs_MY~9@gbFSvSmq|aLvyi0=mau5~I@Z>~VF~62Cw$u7 z#;e}-LC&9FMPp+FiyCto+_RrH3H0m`08VxJf zbHz26vUFYpbLTdaXX(?@#+*SCs#dZhZHSk)9%NJv0DcJJqS{yIK+%Vi?xTo$dpmc^Ng)LgKJ)r)Hg9Nk2xIiJNB-N5yiUBIfE zG)B6bInp&T6O^j_O^G=|)+&jaIv##P==I{YRdD59cXCO=6fH;F7@G28seA|j{>k+i z4{YSnfLj8eGkR5w(Ww-Q|4tGzG156Af%O<;{&Y&pQ}J{ksXxzy6mP*NK1)`Qp<-o`uDGzhVhKrJJO(wZig6h+Y~q_Vlw z!i69H5|`yPv+s})4MP&eYj5NI%i=h=t(h?y@a@_4EL~cOp=~Q0Hn-tadI$<35WiVj zosF+^HwTaP2PFSwK|FI*!DkKWPOOR8&+*pqz=#H6{LE0(rqIOOrbIP(XjT~Zc$0QcJjH%~e&6QVQ#ge(zEMM6` znsR7+bFJo^mX^unm$JJ0_>Se?p&FKCu^qVqSu;xlGy=1-g%^DhO@-dF~ z)8n*Kw(N4QShJYQ0?|cQE+ti>i$XhHLbf`3heKZ<}O*wn$iij zZEs;RWTSNLd%5GPRjgXQii*$y9^Tr8)ojw5NcFqw)t7Vg5#90K3PA>1l7L-)SH^sf^WEUB~5@oF}Bd zmPP9pQ{))pc$)<2zHF}f?3cN$Aco2{D@A_`nOl`h;P_sSIg)9-@OrMj^gQO*moRtL zc`O!k67TG$Rr;pe97p}~^;~?}FIYgHZJd2a zI~aHQFiK1sn_AAQ%dcepg)5ma{$hcYn=ZE6);)qDxsGe@`7rBBlf|x9N>IO?MV0B| zH+OMxz)ty+l~m_=>Dni;)qoR^$mtdTpr)5+F1wj`U9pOqq8!rFGbkvlp{^*6z*q+d zIwyo|ikb%I=Y%*YeQ$We zO}r4`OK-W03m4C!ac%?478Wyk;Ghs9m)O%;3`$&|H9DQL`bzBM2iSX{mCjKciP^;z zCpqb8k^U7`%IYhxW}U>9^JFYuu&j=h!9MX(LrjUU*Iw&N$fABu1Bv582=|2vp?Z2~ zFI&OoSBTsaN8eCyV#D?W^p3eDo)vlI9BXzJ%dUPm?_1X-gtCtEOgj^O$LTj$vi_PY zSd!zTqq&6vV>a{GUc==}vYBe{$DCVBS%Hzq(S__4KkiDsH$e(@+OL+0`whiW!REL{hDjJX3ZQb z8kVqh$!b>3DfxzKtbdATz=UltZXO|7Mev)Q5m&Or6h{e?rrPUoVI!j zmEE|GhUgBq>^rUvo@&~J*(L+u6>F)CZR5euf0pmRa1?vx8dhZV@#Gurl$?JncU)Y~ z)}McdFaG2KHVnp4n{N|Y_A_KJ=HhEFC;H%@`Q{IQ#nx^+a~BJ#@OE)v-#(7^c*v|@ zKvkjzdtMV&2|c`W|ATDnS1)j%Vd~CoC<6%wC|-3lbA7M#__p52<8BEOl1f-|>0<0% zFY$}7e~;(8OcYm?VjelnD=)mn{#G$CvxUyB5A&0s{ER<6vxQ?lV?v58G~M`NuFLP` zcR&9zzrX)6x{@#FT^Gi%ZR0^Ef+q5o2zgpoz|`hn@wqSD$MJ+lE?Anvc-t67Ldb7k zQ%_M&Cg~FN6xY^JSsu^$J_$;VN#vFmi(`3~Rt*&o>9YT%~Js~KoMNV^O|mb&YB z?*)@Q^`qC>6Dr|`D@tg7`VG3(;H2qFbdp{`)ht42mccFLanOBmGncYeC#vdn}>C^_dN99Zr!!DxZ;k2k06LkX5^a%hop0^Xzx| z>Q5iw^$s6dY0*r!9Hq;fF2U^8A(RF=4;Lb1nlowy$hPm-BZkRK`voALjSJlMIrL_z{ z{{z1KU%%z~S2wb^RR$+d5PLx#=dWlWbmT>T@snTj;G>W8`ra-^gbb>|FHs2L>S7x` zqi$joQbU2{w1fvEqt#WH|N<8BS)+)$6dm@oioh zE?{nLBD?N?mhnvSQ~g`mwzr)_+h1cxPk^-41V%d!a_A&NC;_4jChCs$3?Wo^N}UeK zlEJ&$PWzE&+WWm!U-@p$FUgK~!bDn0 z3cj9cLKq?{`wWCIy`D9VF>K%Jl)9L3C8y)r+fBmUxfl-ok^3HalC454vNMv|{fE!+ zZ{L4_r#I}TYs5v!A4By8>&bJfdUrDsiXp9X9`ln&*}C}%<3Tf7(ngD<%=Ud7+1};Q z-mg;c#mA%+QZu)LB*PdEe=4=abct-i-1)4iHq(5dnQjT%YOlGSHI66w z_Os3O?|YT!Uw#c^?KLF6@h`mhOMj64*V!$;+-i%bZslcMP#4eZzy1n8eqtY{tU1gn ziKnlv1xMN()~_sQWb32+^k={2(I=kdjRXCRD>A4-lq^0pWSSzi;$j-bE;sDz2@mq; z9M}YMf|@d2w&-H=ojYVq@6+DVQ)>idmew(UNddzf@8@Sf{u6s#nIcmPea8;4^_Azf zsmd{SD~F%|8UOW@-}2B4J7^ce=l7af{GQKpQ`S+w|K0D&*!D1888`ExOQU2=+=oNP z&739Ial^_od^>*4XFmT2T4Lsi?PuZXbxJUND_1VBl3+NS?7TwC=Twjr2gA+nOr_RP zn(XAzD}Un8_dm`7zYw{#WsDs@O#7&ZtaW$u(ZwDf{jaa^-QPdT(=Tllk~yUwqEfi@ zTHbTTTn_*Fi+trre`M!WEjL^>4@c{6j<`#>WJNq%-k7AJMrsw}38i^>+IJ8v zS;3ipipGQ4O^3 zqSa8wd6%pt>hL4{?YdpOc%V9w?1sY&hQiLZZ&Uy2Vm z7c8VUevmDPC&{mGqMy-|f!W?5)!?ZjSnAvc^~MdvHO<%d82HJeAv zxnf-vO`LZ&cE^P-#*Hd&pgMb76*o)m)_ma@yf1N63dq`^4LfD z=r{@8xkuafvUSHk#w-~mhK4zK^f=>FV&tX_mRx&1%ab~Jfj6}#vfm)Jd;l)`G#{Kt9yp`Y-;YsZNy znkW7un(kd&c>RSZIp9bj)7Z~5fA}Fk`t^N0_WA)v)vTI83>V(}b*}I}$|t|}6P|qT z6OAnr?9P!I_WQO`UaA2I$ORi?2y@mUJ z_CtRCz%v|jR&vp06*vwb67r~KsL9wS#JuhlLTEIZ@edwj>kE&tQGCP7yZ{@w?G{4l z(FmcM#ZY|tz1&mP!B4*U1%C42v%Iu<5AA~(sB*&!a z7-G~3lDT$=L$>g|UFD2q@U~P^RvgdB#1z@N#mtpphT#q-3(8m!XTc=rnSxGwcRtF0 z{_Hiz@GvTa&yM2*3?AFTeP6zlTR!+5o;`ek*MIwMK7RY1eCS_($jiMFtV|5hyn7b| zwhHPR8ns8re)oj-Ai-*hp&~nli6fiX&@#Z31VEaBi%dadE;+dcBI7uws5I?PbewC1 z!K8HNq$Uy@v{JRak@$T(*e(Q_?QgIxYA(y`>}Qw{er9N@i2R<0LE33#*Rw+6qsS;} zph0vI@{DMArPKu>pPS*q9wu`ZaMj!dQYWNmva1C{c^z}DL0pb;hQ;@0 zS1e}j+&NU2=8_Pth6Mvb=NP^207*GjET21%g>@yQCq-+%KtWl%F?%l8+;9u;dC%>< z>y{f>R$`X^W5he$$-a$m&=)_C1@oG;KJS_wl3e9lqXo<4F1G9%qFD&Y)Zxu+><%xS zk(ih&^$YtY<M$_ja^bgHNw(Usssd%3*0VOQY4#H!V6LaCJchoZ3G(vGnKyqv!R}^8i)&dPr|K;K zg}jU&c$lyJ=L?J){EQ#n%T5Ve+V*eYmtXoQ_kQJ9JiF;N9{J&y`N+FJB&7a9c8*Lj z-nox`NBRgQS5Yszh_gz0J|X%duh|^S+>$JMH$TRU9qI{bI7U%+7BFU$m0OP0JcQqn zN|W@F1n)Qlaf#HWr;w15D1mhd&)%K%XD*~Js*fXsVpB?1OD1XQdEz&wu*FHhSt0pI zJxNHSBq@$qgOon4gXwnG%8i(rn#MZ(2H%yS{=m4KP|p$RiwEhNiWr`{M!Pn=tDsU$ z<|vBNlL+=7WYd8bhWwWB>lfiu{z5447P(gHX|&oI+4B&8e&{I<3`^Tij52ADCOgW8 zB^1T{+A{h#J;X~L>M4IjK9!67Rjb9f?|g=5UVek-P8WTLIv5PuMMu%t%_sM#|4}G8 zlx|a!NR$}EsM=|^Y|>x+$psV@SsC2Fo93e~Y<4Rn8(wA0XbR=!3B=meSmI;fV?W}h zE}u5laK!BK!UCtom68{;agoIkv0!{hShHlLEBx-8skm#Re zBq3GEWdiZoSU9JOiB0$M_^~N`l9%QarW;qYiLifAzE&lK{m0A+nvH3_T-8b2f&`QE z$jb`Sd+->&-A*|cVqo)j4*60kF0^B}8S#wvvi-^5v9VuG?{+ij^AewsK#Ivi@79O- z+8001b3-Mpz5ZYM(kE_b?TRWAt?HdtRi=_bD?Kc)vPaoej5g4`k0aeK;)~}~SyqHu zVphM`ql_jjzY=}=w^mnmKw{yj1=LprIVSQ}*VNHaSBJCnDDH|mEQu2R%UNfGivA5k zVw18tebMHHsxkYIDu)76I48)Rtz zOZ@md|H0G8V`y4;H=p^~9jrgUp0pTSIFE>qH7#p8R(V4(DvqRz5)wy*U~e47Vly*w z_$Y_koy6s5lMy55`y90IdW8oc+emwFKYgu-In>s}Sg44Cyd+#=ujyHZ)YsKum>R*G zl}}w<6gJ8KT&g%5PK+|5No~2*nQYWwsf_A)7Ar=xNqaBCESpsruzIOqGYEC2IyG{c z%Ht$SG=-Q5zdswkKwE+}Du&op$$Mmi$w@IzNwQj$gESFRdB;YRl2**(i?8P$x7@<5 zS1zHz>SuV;fnRDH^amJkYoTLkl!;Lpc)Fw$3g38ZI8jUOw^sMau0VBLlafJ`S9O(H zRSH)@gF2=iSJzA9+e|SO&AWihuD_X^Mdn-1&tdGyFwPk1Bqz7%LpC}hbMckq!9y^q^&m3%K*L2YilWT~|Dg1HOEN{qR*auBA z7%y04z}=TdPNav=)s6+sB-dWX`|f!^cijF?Zn^m;Zdy@J zv^XK<7=z9cw*T>){A>fvf6pD?D<{>+CF1wize&D@ad%--?678BFQ6ZiG z@MC=D6CdJ^J8tLB5C03l-s(~74`4|sWA%+6<^O&Bc5c4)o!oxqc{F6lqTW4JJuV!m zs{S95U-Hv>PNWlt`(wDbs=tv`4cfkzKAjeU_#9K~KK2gAQBaab=7Qza1UB&EwkcfV zBWAh2GeZ=rp5zX7Hq+}gk&=}|l0||VNeY)T%SX&ETmFWG@v0-x`9YR2R{0`hI z_LwR4#4m*ta;va7EL*r<;hmXt<%gQVqFxd3dR>u&VHnL8JVQr$=BJksqq;8JTPrA%b#U%`z^# z`8~YnmaAA(mqlPg#yZi4t9vI;{PA)2cr#dh&24=6?ss$fs(O-S44Dn}&BO^c-bujf znyK%bK+{3E-IX#<=t)6zsM(E-yW!n1v{RHG<%b-L)F^zd+Jvmyuv5J7BCdLej6b*B z#yc;}q;F3j&V)$*GG6!xhv}1kXE9IFw)X*k`kxPS$Sr+S`kGqJ&?I(hGFl{XQ|HLY zCWB&hb`zK0{9f+5>vnE?=WX1!Za#U^UsY=xjhQ4Sn#B$rvZvl(4a+3W86MlB>|_c1;8J!4di;NDA4dhC{=2dUuLV_0q9-H~j%89OinN^_8YRO3PtKQTMsi34GoXdFEXj65JGI{=l6b@N87@$OQ>@-Ikn#> zHls0-n3y=}t4{nvO4PYC=lumx*965+S>xic%DC^)mev=kB(5+^prsKdK{$UE6J(Q; zEaALoQgkkQoGsrpBm?D33?}(&mwY5__j{!8DqU-p`dAL5=_e3AclwBu zMoSh#Zdhw#X~>Qe%MXH|oEcvMqL^`?m7yuYN>g#}D(B z?TOs}i95NdECusSfto;(Yr>ns97}Hf1>ADyJ$&H(@8-4}uHvHkLSF19v56Dcg{u;| zP90SC5+6g1A&%-b*K*^{%3s{bwTohD+tr6BMXpfioDGtXNr+N$(?wi!(|fsUQ63$y zJ;;5}Z>LYZmQC8*A5^c8C=tY#l`cFsqM}usDY-N$)SolpMB2<>?L4WkQO2qyaJd{9 zRUVN|HI_ka$V@1@^ULN}1=eg^SkMX6~;L6)? z;i9Tc>|$hE8DSM`1{xl!F`y+hzM-Q{3R}GR%{h~*2kktHgGUBBELJF0P+Fd}$5F>*<9N+U2 zzx>L_<=Xdi=UpG*?mO@0$1gWCoHvj9gkcO>7jenu*K+mM*OC|NBfeoJ_0dvKDPP%y z`oOoc1*I#^E;P~9U)AnXA7!jcnVS8m^0QcV@iG$HALi?y{vdbX{r~u{mk%-J3*Q@3 zQ<`v&vHf?S=Fa!NhkO3(84QirbLWLcGGI&OsYAzX$Y2=As-PqTVpHl^vR0hm6_-;i z0YOSxHKoF@0#3J@r$}P56+>(~H5FwPrp8MD6cXrk;tj=+m}JKi6-!=`5Xzzq?e4rX zTMg1VXYSUDH?^oc>t;FDxtGHu4i5b8vl6sQpMJk=cYTP@e(e`*8?#}S{xEW66TklQ zJ>2=pukd7h6pL3Zqe{q|9}~X*gFN-~ukf*Z-pgm6>ZNhnGUk+|Yd3yWXIDX-Eh-AT z-Hu)Us(U7ZKomJei&(SB%nSeVK0a{w2l)7R?`Qk4m#EWTusz{0lxNj;rBccdYv1jY zO)XfZ4MN&kk|w@STO=itZZ=4|mZ}2EHg;_4AW8+=SIlK<%KMc-X;mSWF%zEpT5fXpE-il*~|EN*v~5W z=$C;pApSBgCI*WNR+V3pdKhE?b$k58#ieMvw8rL9RUpBRDXgbZ$R|F%`fQ2NLD5Ak+c$I(Ti(Qlm(?-;#$Gx-F7fw~iv>=fpO~a% z>>>3rWF?avbPNkAKEjSyALVA!zaYo9ys`~d&*Z{OvKJ-s*sLWh*z#3rJ}{wxw`s;OwIKWXAC zJ6CoS-V>Ox+QnZelT+tuF_74{3Vh`svr%2Ee!6ga#a7b`$xcbZ6!b;To2{d>Kx-pu z6OlztmyJrPV*ZMHq6hb}_295ZVoriOKP;?llMIi0$gOT7P2vv~>uGwNZa4)MjEcNQ z2~g7tGl&m57#MWo@+-^u-vW`u@4>xy7e{@i%)hvfyjby<;x~v+Afup&jLANFMuH^f z7myPx-pCsuK7SGQc@DadJ8($=e|n8(9Z^4KC2K!LXGZ@h0_=)B^6Y@#-6#D(;N5fwZeSEg*I@ z{ar;ZLD|_*KLb-jL^9L0#bVUWt>l7wic==&?egH&W(J;IpKuk_zmk{8p)IUsjv~s^ z#mkRv$D0TT;5wF3`BZg!p~~g*9_YinN`ok4iQe)MAz$w0BLA zQc_P{MH-IwPKGAKpR5S;2{9A1kaSBgZ@jRLBLgOq64WbDVV~jhc!^FHIsPEgX+;$0#o-bzAu0^_Yo%|k0;(M)PpcW@SPy*zy&QV^kNn4{ zKRl!3Pkj2DJaKp&kLXLg<}ZZy4&jbH?KEAmmL-jIXsD|uOFEKIG7Neq8ByQxF~yQy zQAI_%iT*=JX_o*gpoon)mc-%)7S5l~;$svX}H$q(IT;?yTCpkTv zipnZ#3R4Kl;O>YmX4&O8acN;M&))YKFYOv7W!W0meAyU!j=Ce zO%-|S!_S!s60f=$cXTu1&S25Xr9$9xC@3tWrly+8bOT+Yi;zj(VO`Hc(|+!Iz4del zE*;8eD`dsGIoOZyW5>ZRT-se!8EoQnDX1$ZKfy|J_B@u(Uqn->fwuko*w@^~sI*Uh zt&qFqbg~MHDJ#wLw4HLd5`26*Z}|D7-Y^iMqT)QjwBF;KI79&x>! z+1U=cbC%LHM+S@1M&>uvQ5rMBp&dIp&@xPP(L5F}EF!V6oXVypEGmp<;`n|x?>>ev zZ$9g4;y8L>FD*S2vj$lCYv{t^Z{n)!mJl*0NuREzwz7;&n}fCi4{3RoEIe-&^J}Z9 ztSBZc(aL!1QT85eClH%M!{Q|@XlkIYs*HkyOw5Bqxb_?o!ZbxbLr|l2DWddH+3P)Ge+5R*h$&^ zI&4BT4vr-;SN!q9rbZen3y6=Ffyx+Qa(oi6^xNtMi&(s9AqyI+$WD$WN(PvK`1;`q zmyAF#(CMW3qN}*JYLfeY^dyIe)F*(>HM|%wMW<0NI?p$Bv;EbBj2h#qUf4uYj)jix zJL&T#Qa*2y<}Vgh=Mx(nONu?j=-4<(br-TWXNp(09}*v`ZaN7Wicb|kyq>(tt-P>* z2(OUj%*r{;mmnoMI-RQGL|hZ266g-$OKjlM^X6fXPobz`8EeWjF?x=(Q3Wso37Ra4 z;*WE&j(2dRd60lAKwDI%h`CGVQIcjSHaV9$OXgD%>*m1bt?cg^!6$X@@0_Ci^6R;# zWQgB=?@5k{j?_C#s?ORCvFHNMzj!f8{%8uz^GOJe(Ka{;mU!{IE2yX`AT_f{{AUU2 zF)%jn!k$(_RG3HPUH|4PE!WAT?sa3(%>algyq=z`(D`T4w=)5IYbAHrL ze);0D@arG5pslK!QNogUX1Zb2L)1AW9b zT*cKT4xZhx2jN0OuGOldIn0%@GiqQ1n~w)5tyxM%ZLtKHMbyjqmYZl|d_qWrkT##l zmZ28ekiMQJ*OlkQX=B^i#1wJ0Yq`9{#S5GEGpZKZoADPC@>tVpxL_Si8|!G4@v$^9 zghSOcI7Zj-nDjr%x4eOdoP2V!^C(hdwP8x~acV2fp0Rz^JA@Joty@zg!K%a`#q}&) zw3;PFZM^W%)4bg5B7e>b<`xAww(WIVhQt|7C*?dC`P1(q;sAo=n5lJy|6iFXjSdq!l;oZEt{}>Zq)gRAgb^qN^!Tu2bs3K~Y zt!I9!#2UHf)X$qsWljtehqlu?mdTu@^C+uICm}hXOWt`Yx&7OC=+Vt|PR6s~%1cN% z{upl@brH0S�SAg|U+@yM{@tnL|OsB**vdrBi%XUZwc^WIt^O_R-w$A-{4Vm9^z! zGx^%*1?GsoO^D4*c}7K-W{Q@d$2@Daj6r2oN^Fy59Heb1{C#VG&_qmD6)RRWkcjBI zD3y>?u5(3EGDl+QrQ#dKhZbihVz-(k)^##EG=S4D=-2cRG zdR=~P)mw973CmW`Bi)ifZb7;b!$}4l7E+4KDJe`MF(!+Ws+F9#ppYnc7rS@J_%-Rm z6^s#oJD2K$d@?f&sLZx9G&(8$vIB>=iuG44!y27JrIcM;T}es2hhx1H8lgNRgz#8n zGO28=C(+x&(PMo$rSE7rX4NG^puFVMu%w3E!ffrv?wU)NU_H8#r(ZtIgei@>6)RXW zf1dc(T5=>_R__LyeB*Qv`N^)H&l2(XO$(N=xGV{udVf~9O2@z$Zr>OVV=8q^ms4$x zA-z)M&5jo)H!MC`xQmcYw;@T!h(-#{1HAUkCR)_{)wW~`s^_v~@qFrQCEl;7&=$tZ z7}~{C&+VaW!Yw4!ApJg@m6t3dooMpPOURFQ(A+shz+oV{LVWhhRLu5#&bxRS#kNsi zfBXdwO^Q9$HcA{b&YlC!sP7Ypd4p_*F(G|v%w4oZ+ANQ}0`bXWZ))}90kuM{Uq*|w zsQGM&EGo0=^SkzT2q9ced4hq7fo{eE(WFNQ=?0{SMR9+m9imm}(i!wWVwAB2#Y8o_zbTf z?Pl0Hg78ODw+!^+pz_p$ zHQD6aCfIkho!G=I90z4^>>R^jl%UZjn{${+qVNtLqr;WXg7cSCX!kQR*pJH)O|sQR zS7$Gih7@Y%EtJ7Kj;WCWZO}`P3DVcsCvDNe;kH5IB&aRS&nG=?l1=wLNAo}@hYpEd z2mzlXLG+w_(NSg&Sut)7z4{OjzH%IMwB?NLrsM4k^`s&rBMXD{?QMrznDAS$TV#;% zIuQQA)NmWSn>!dBH;`3WL{_Me%^Tie``#A1)yjYa{qzh@VNWlhB25C~{hN64js0}B zAE&K*2#-+)9oLWyK*t%L^q%BM)yl&?dxUtU)v>5l`c`@dnW+gFCt8J&I>;!fVg9lO zlx3x9%e8xY_Ve;fZ_wQ1A~CmwS|MfHGUS=rqz2k~{^^(4cYHAX$qI86q0x5sxAtl8 zvV>s}r>{O7+$8~|ovO-u^7C!hn41 zJ$8&Sa}IMB%_Bd`!{E>e0dovVW(Te9GQg^SyKoV;670K%`xy4x$c{HM+}A~Wf0%UO zaF9IjVrnK{;*Xp5iH{D59?sq?HEJZj$}GNWytkd!wtmD@%781uumq#c`&w|=bEuxb zfYO8zg99=Un&Zffa?;Y)&8Ra(Q1oy>0ss|^Yk5k3YBs{)@qIGzdI^jVi*Fgjl3PYu zkpxCD9*(!QiBI-0(kFF~j;BQYTeRmOPyGIMI>x$1jzI}pLii-8O%VTAo@8R6xtTtR z;Z=|;akdP?LI%YTW@Y7)VI5}kQ%~^RwpOM@25s=2bdb96GOCB3;y0U*2r-h8C87#- zhk3mD2qVd5REuq7CPm{JInJKrqhgao3`*N%l~q!nt3J~ZE5Y9otsNsm@Qaxa^`4mWo*BqV9%_#O_ABvCe}n7kY{w%KHi zKf;lIpZx9N_`oEIr4qE~r<10}wkQXOTG}MYma%)HjeRZM;gzpdd#jt+elNZ1J)9$* z^iTQ8kf5?WHh64+2*OmdWsm?#Uq`(Ebp7q?2x;hTBV z{=WsP9fLj}od>pXWHg$5iFwqA>5~IP?0@}fHukw0Z#zzpCz^t)O3HHcu?=qE=RbIm zJp&Gm77NxW7;N4n@sWxXP4b_gslIla)go6CpE{&H+B?J!yz14c5T4OKI>at|r7x(3 zOX6~hD9@L;B{Pd0yOSfWof543adqrqduKFdb4$s~mRKt-73=5$cC<;kVtYZi#E5Mj zc(W?0QmgseC0>%avTNK*dE){aD)TTo1{jpSo*ZkzIVOE|U_gAjw5c(k{Nf@CGSl(4 zzsm1_{~RsSk5pi8G`Q(Ic8ILKRa6{Z)UNwQfFQwX9D=*M2X}XOcXvo|Z`>`o6Wk$a z;~m^x8VK$*&}{bkZ_adw~{UT?vcde+nLZabn$j62pX|e zP)K!E{$lDFkv9fIg?6)HQ|I6%vmMKn=X67#7!BrS68fa|J=pl!QUcb{^%n+lj|0qW zyLb;L%gR*EqT)C)89yWyYwlseU)@>ZH#Oeeu%cd=&*h7w@P7)ck;T^LVXglq_EPki zR6~?pet!iq7U}N|+CfZ06{?9rZh33+OAF``V<95T0#5#&h8r5Eswk#m}r}--3S&@>qg2!zL{x|mOi?RxKYgxwO zwWyYA(3mitdf*lnK@Kkhm*Q}F2-jVO7ThnlB){>al9A)fd+v*4q3YM~QR zRQHL{c-ExHQPlT14%#3orinTSAItwc{|VMAdyM!fa_n&`tF>5*pL8;^q|B?H1wD~E~JgHo1zvh}=Uz-qm-#V175x*H0~2@FsA zLo9GZ%Cw|7;dHc~TCZ{^7a77NYC+@Z^W#Ee1+fOIv*3l2sk!G`)mwtnC(S!WCiVBs z+iM5mmEfIX(2W|0Imyfz-EJQI@thoP(4AAt6l1U969O;}U&_@QP}u=3J9aSqvcFC{ z6M2n8(#OWQ<*^38@Z^N}*Fg+cdOmA(((?@nZMECi%Q2{Cg0P&G_u^Dsb4Q`E>zAgh z)!mwh$7siUAC1<%ykI7{@#A%SpVV7%acN)|I!N7_Iy$7ds^5iPQdPyz-?shkwsTOI zKL(FddYQIKo1(P4LccB#OO-vRlV2Kffu%ZBZ6^{%b_g0sgucUshx=CZEJiL`;8&IltLglyFN0QItcK4`vTv@< z`vfQ4YhE1E`{!nbR5;b?pXmt=_^I$~gmKCR0EtrAb4h*)kQZMEBiZ$1A3&OkG&*(% z&CHuJ+s+992VXB|FM`KLl&(yRB54=A$pf!~shVM>X1%su=z&qSc5Fb=)fFaa<}rd9 z$WE?)HuO6Fyb%Z5on1!uU^XaSY&5uV^$=?eaes^`{*-YioI_PrWwdgpt z(vX^&bCEe$8Ldt0iO|g3yqU=ADk4UOa(+iCX=SF|@G_vKFeOo`;I<=WSE|817JxAR zSOU#|oXvvLZqZydEm~{7VffCM8#hCv;;WbEt$%+j54%Ih7au@3l!%R=w9~&c0TuTO zRI>w@s~SOx1brpF!ff-$!z!u4n(Ba-@{ze${6GHu{Z63&FcdJHoG0 z)k6bG!YrPbbRvM`ZhGfZ8Vi>>alw|IFYkYSBazp1MKo04X2l9u zVKZl%W=6KKN4Ns&oD=ht!`Sx{7@Tceudhe3wjIuO!Y%!%eK?!jvbI^9D5co{dDDA zaPYTXJ?iG|szEfqc?6qY+j#mQ)&yb>yqe7yeZkz$tF)5CWlMv&ubfCu>Kn!$96Ue5 zE{scte{Hh7Ap8@v;99xSd7S|^SRIK5T{bNp`^Y<}yfZG*&9toa0kO>f2n_NFKCrev zbg>F2REb&7BOiTnK666bgPRVM4Y)~$=%R-^T%X4)ZCfpl=y{abVDfhqYL9rk?Hu+0 za4JD-cv7*%UHBtG6Bi5(?@@~Km%(pv6$^(bDQ6BrmJDZhI7mr1Zvliyk6Q?q8e}5s z=7G&^By(j)9Sh{_oejr-$yBCwri_}*ka&+*`@)yFPfG$PC284n_6iV_=!&8L1K#xM z5?8Feu~jddp9ftwF9lPFX@5sm4n|V8=NFj2r6>T`AB!pOsLl<;o(s#6o?7U1PJ~1P zEf%kUq1laPMl`DG#|zj!qo(f=PaBoj!3%BmiG|zeONcuRzbo2LtU?*}e>k0Dsq@c( z6D+)w*T~>rGG+h1zeFT|w@_AT7|A;yFQ`J1Xf}0c_uPr!bSfV57yR@1@#lZNqe<&? zFiLwkYBtwitk0?c|3ZAanx(0VeYO(*YyVeRjPHhQNF~vPmGee*J`1Q}XGS0LhTP`BzTg7ZO;c*@?$X-x_ESvMReY~ZJo78Mej65HCRxYym zY}NTC!{5rV0?1;|u9#6>+QVg-o9nD|h}HS`{Q;ooVCoCy{|U$Ny|#X%hzMC^0kXK2gDsZDYDmJACl$*qdT3-3_7G3c)DrEeq!~i76Jm<6pgFL zh!X7w{j-^^gv0z}m?@2G*KM`CM>jDJ=}kwpJ}X zICS!6h@j_+;&QM{U+1;D*RJaZ!g75$3}v!7u0ppB*!w&UUs%Ga>m8Cd)ID7rMc$A- zFl1wa+YEHat21{AcT!ZtD>$Lf~ zkyiJym#xxR_nkg%+;L{|E@x5PxuxC?=IQ);Igu4+B@&2cubn!tChku2Xj=IwHnX=D z;Y&F0l_}Ku4OjK*T^%-LiuplIlqDg_R7#4-M-fmngIH2ViEhpj`|+iHL<*lI|IY!g zwS58=lTdgVp8dXSaqLb)&`6J6mR6;Y2NK^qh*VN4lq?FwH*Nx9RjSk&wV`3-N^6$r zy4MU6dtVIT@!kEt;4w)IQzhjS02S4L0O^u!b;e5QonmR2n4*_yTllrU6xfIS+B7YD zA%Ek$Ba>^UOwLIWyPd?d3v^R(IeNV zbB8I@W%K3F-&$avk|S$IMrCYLCxwsFk81n)YNwyszNBLf{Q!}uyixeqO%!^xJ$z@UW|AG^Ipl3RXJ1g zO0aS1qSjMBhVc)=VpIZM;(<8Hb?km zZZ??8zN$7l;YqHoi9?3%GUwSEiGd$0)s*K0Y5$5fg&H5vy1WMTmsnw~o~O&gwkFal zU4j=G+z`4&i{I6jTF;iSDofF+Oc6aHLPCk{NxY}+GRGtJuS9Jat5Pz1^YcGGCLUmc z7a?z@rkJ2=m8yx(tv_%)8!jdSj!6ZmX#l7#FT{G^?NZV$uJ-N{XH|xLR8#p6b8G)b z%5$@2Pkp6gsLea7475+5R+QjB_P;|gLQPp?g>dy#a!qjgA`oL3;X9x4FbM(da&NrD zMwHQvoYE)O71cRGmFnMD{>vF9AC#R8V;qSXR`%G#;FCnrB9g`Ol1b|NZ}8o-LvLIN z1trT^X(74p7NjzUnC~L5`r)g3X`C8|a7flwpBifb&d-hDg@k928}3}k$YXsRVp3z{ z(u6L~a(G3|xG`KM%-zN=~t}}0@NlHqRh`R+gLPWRFH;Nz> zq)Q*SE{7u>YY`` z`tw@}bZad4g5u-xZFIU{QW>W`*lD5EB17O<#zw5+{0Yz0f`=%^{Z8Se@G*kOIV%3r z_hsF=3 za;oLA?fLD1HWnr8(NkDYNI7@_tb;J>F&*kHAge3AadK8g)u0=E>HmTYHv?r82R#=M4c-aOQ zzdX7iqj$lAjXJ0|R(R$nkvi6*GDSUw;-r&;JQg)6Jh|b>PED?{tomf+yUQd+;}P)W z#F{eWElb5<95aXUo}7&yc}LBB@Y4Wkn7piKu>rkedup@v{G81-+h6iV^qiVi^JZzj zO2s|F0U;^);}jUaX5(-EqQ)rodu4}cuz26-z#cL>c30I3Wr; z67!{gk^qucwJ)R7KA*+BlQ#Z6^Y?J+xM#Szy||Ra)Q{yG<_3tF|K$B=gMl4vWA+OE zuV}Md98ua=R9DJlbr#9Hrxo-JPQ2gNT~to6ll^qUwXMo%zJRnmF}Dr@2^*EG6p(B) zSy}lsHfJoVq=^`3LYwmv<10C;SUg<50omeiwd?Wrvv(;wjiqfTeWS{{(HME*an_<>5F4!4%WnoSe(yzp<#I}k>lsM#cL7ENG0vT^jIy!-BAX(+Yw%&_-tzwQ9mz{+ z`ErfT(*H289AD$fksHKM@|vw0Om*b|*>Rs#6aF#pcGL+LZd&H4^Lun6aaVWQAY6_qTfeL0Q>V4N7UkVs)p<@S~tsa~(U0QO-Y%;TLu$l$B>*e;uRyyz*zKb|}_=2oUL zv`qz@5f45m+R9CB!4fE)9^*a~TahmR1)tFOzTxInxD4CDQ(*E9eG0yoZGLMwXuUi7X@~OU)CLm3Js;#$a%v`glsYTUn@1CL8Hz-lLBYa51fkXE_ ze4RlyP&HTF<&=`;W$jb9Ya?+zIxyxb!*vd)Nj9aB1@qkOf&+a0;(R~LjFhI*9z|GZ zEN_^P6^qwbSA223?+AAP!zAjjz{bFBJcctd;S#0VIOK6TqI|xy(qoN>35Q%(zZd+{ zCQpZvT$ptFC+PfnPTyBq!m_bkt>sp)*Y}R|lss1TLAO=p4uz%9Gc#WY*OEiqeYg~v zP7ye0b`IHY0^h7p2-p%O{g~k@&<}c3v%)R4`^1RNJC5}RVQ#JXriEf)^{V+Y%!8X) z(sSbw7Euen`om(hQ}cOl9OdXQ8=R>~@m13kw5`rm*OERWF|oP#eZ;p|+Na(*O2q(` zL)&1w};c~YXyzZ6Qyh7e-`vqJ6mRD+B;optPgMep! z!U{PcZaINji8C7Tr4M2GAjM=jS*|6nN2IftMEbu;woj+QFRCQIFGBn^Vyl>to7xMb zsqS5iI5O9fye^*?5U^4IY0p-6eAKpW}1WxUC zY?5QBNyF$gMu9(RNP;6ddQ}4uIohuXwHuqMKiNxsscHFH4ujNouX26=?ywpuTEUXO z&#q;h;0uF0eN6XUYWVEN(=ld7CNDjjDK*wJtSs^w1 z0$Y009Slkq7}$L0+ev+aQ9UrWmqnBlZDTO0k*0i{u?5B&sP38cumSh}FVl<;tuNx% zYYIbFQqH$~gSs^+3Gnq1@jh0Zn-b9IvTAv4#?Q^~2$Ql2HC!amI^md5^NG(O|&~EB1_j#!g8YX-lBuB<#v(&x{ zhPm;LnGK>~#(CuV52&6lBCwou+KtzDrFX1qBHBFNbg%Z8k~` zI%~4A5xL_>v^G2LFpShZF@r58j0e5@TGGw9I>`DjzRziqz#^qrSi+7dI=>TA^v|aS zT=?fyV&o`D7(N)1ydJ9)VZPbP(OZs1Oc}H`>!gI2U*I{fzhOHQJ6Qb5ms$wZ;M}xQ zkorZx5{F{qNqmZa5FgF&mor;|@4bm+7){~Nk{lt9+}z$Nkn;~4MK~?3>4fUl8LGzV zjzn>_hAssM;DS$`Oh(CtxxGJay=}rHQ5{hTimlD?_})Um?qa8Th8~^^mN_~CG-!l& z1Mee}>u-!}O5W_yU!KtV5Oh1lAVbZJ%e*apIj#~Ul{A67g#&2U0`nGrPfFREH#HiC2J)ymjXx3!b;@xndjdq>8ywF?tIqtanDORLQ z;&zJcv!S8_@pgY-d*0cesNr-j;bXP)G?kUYNR;glaTbxWVl>BJQ_MrXK4jX4P5HW# zN;7n5@d8`>9n!{-qaVxJB?QbJPpCAIGxKlT`YmmE4bm6xXg$T#|q!Axr}_5THq61Y9~nFAET{ zX>GY#1fN5EchW+OfIE|(0dHU)6~^w_lBYtU^|uV~-|8qjoDwhJDr8BH*BVO={HN^7 z4#pqZQD%Ohapeb|GATtlBfrx>o?0>*JoH*W>&TdR<>JEb$Tpo$(tG1+oENQNM~84F zl@D;Mg1G@_x+EPBUkQf$;CD|tU=MYs3%4jq;g1Z@y7^DWeY*$g!XuM_Tutq3+$|%y zs?Sb4f4`Nt_D*6w^vM~R)aEFQx20Btj zqXQO>DGlCeEF`vOwB+zY)}P*9!AmLi)I*dfglAi0fx(_U{&BlqlXM!4T}c-k8o;S? zCnC>=y&37@^K+bpyzg2Ia&>)vd})}@nJ7+5-FHY};V0Dc;WkM%E0=|@8I2Y6SY4g{ zoE~8i*d0b|v%J5C2|x3Ka?H(#U-xFv3Uwf$Xm?_4SP>Rzn!WuAH7^p6L-ys58`Xc& zuv}j5r*+_1vnTs8t$16?kG5k92okbNptt_<$}%^4g!?8QF5xM zPH-<*o)T!;N8YEDwexZ%XM$er-z$#HyDeOdQB})TtR%Zz8>qC>Yws99`3!Wf%X9}M9w#?0*;$na3?vabKr+ zXM5u~x{4(JGwTp=P~SfF&VZdl|9yhrbgaDADyAkhoX!Gm_G@rdfh-O z;{{lxbXxsZEGSsZu;=$W@{J;2Nf509k&5p^JzAd@=j%X#v5E{AIF?Hf@^Cl9C!y~} zqHg(%2_#V7g;lD^{2VI(`c2{N7qT6tWS|_@)z8PmfE1u%X3(#3MOkeTY-YwwbF$i$ zk$_pZ@{&Nt&H8G{^#pFM&C^x?fg$Z3a=qY__w92B#dyS6+l^y(_Cs+{&)Wl~LPLDW zgXbvRF{$PvoQgHQjkU4PdHK+@u|hq4S>Uv>&BvL&JzHGL@fq1;+(YbK`L1vERoz~v z0ZRYQJO7zy%#OCz+~5l(^2qAu(@XM`1)pW z;nq#JY z2=ryaqfozA+Rrr@nD16EL{*TRbJ*mi4yhRPW$8ZO=X`pOHs#G=fo270h6Cxn<+5Mg znd|Q*1$=}J1q6*k9+Pf-i;vY=sT76xBDoYAASWEMn4~J_B^p18GE=GF5=e0?u)w8~ zBI<>fnKJ6WG{)LgdCEC@JHURL_Vd(6mOuN=bYrC2=cyidh5~*hRo(8#7s|Q0UZzz< zM9Oo$N+Fo@`)(jKTb z;k!2t1t#wpCAv6B)}zADbW_1CI9X#EgFo`~)^hgX()e;9sW1YQGN<9rK=%npk~ckd z0x)<4m_NAh#-h-jcw_J*dXF?!_}~%Fb~U`LZ=)ne3L(z z>UO{pq!UViI5>;FnIU}F2}!UoxC+HmL7<);L3`!S^oYC+8Tt4B7H~x-!~!n*#Q(Pe zjK7!t@2CH*_j-&GL;L^8ycm##zWr~PSUv6Sk4yD$n5bB47deQ5!UE8M9duOoGNTb8 z*iCGdj6_e^8aNXi2_`*@-GU?ELI2QUbTp7x-up+T5edFz`UGxc5A;7BBgrq~VJ@`a zgx6Vuu5PY&$1mRL9am)6fiKGz68nCzhK33eRGa!8m_t+rt``F0XK|a0ho!4uQD2mA zZ)^T=I{K*wBdDY}qcPDeuSRwR2muVJzFBdp-YZjB& z`JF`=MSYwIjGGhyxg}RHVT>5p2FnnO1-!_2wss74DqUN@UPSb zF$$}V*u@R8{mXW~Dd(B`<9&ic99kSEqWDA_Qo)>0T7bKH>LLSonF9KUi-rtfjDipA zLd`chkAEY5+k4qv&1RW)aIy>iG*X$SHVuc*yq*=m`k(rG5nOKfqu>S_hxRjC(W;_Dt6U@LnS!&-Q5$ z@Nh=Ks(ytsBAB`16LGWW7~cr^#6g&1-^|Wya&AlXA~QU9ohYQIoY$w-`6UcZlrm~7 z9TXz(d?*m?ftAB8S76*2&2WOn>)D!h{;L7#GCDq^BRf^lKTvuQM--H{*OSf?@Vz4B z=?5QRsTr=OPTq3g0xNG!4jHdw}0W7zleYjuWN&gsFQ z$`1yZzqc;mNoG?S&K83ao;60Q;zeD+ghitO(lskGN^?{zqdSCv8?-)Z{@&XqlN%$WG5O+UpQXe041STZhTQ6s6+us$O~2LxtOH(xZ3_hK+0Dd$ z&G_vliZd<4!j$*vQJ4}wCQ5i1P@Sc&QjCa)v(A=`w9!xVFkr@Rj-#6+%_Io=YzC*Ol zH*(cZ2Wj|L4`0QSow)e0bF}`9=)-bX4tq}RZcVuZBmAm<{PsXxnp7^c-E!57?9Nv1 zvnl+@Z_b$2V*k`5(jD^z$30Vz8X@f9q97&_Qn!3-wrF(cc|sgdj3oiJ_Z9Fg{&ulI`O-qx*k58cKJw-9u z`Q+T*TNrLQpecOdF?NAM|83r;cE*fKm```~d~V(EnRwk394L5|L(F*($7(FmUkJ}8 zyx6Q(28zA%+YdT#zfpQe7dYjwZd4!V%sBKXZBw>Y#MPwYOsB#fY(zv-8$5Y=GfZP8^$`D0IfJEsS$btmyJVJ?+ zox4?1$493aifz&`oS3aHA=-*89j7QDz3?w!6DXx~`jETz3~=Wsg)HK(hJUXvHuEtv z+{eL9CUEZ8)S9S)s*z8D_-2-+RR|^E<5K=r6L2KBJLXXW-QiVE>aHtqruJ;p$L=&g zzAuKeoP1RpuHP~7Zn+BfeZ-LiH~)fGqG(f-*oKmfaw95Vzp-q+!_J^Ugk{sr;R0A& zeG@MaehT*<{VPo%hpKUGVpsG`b&KYSy~Z6Th{VzPcK3w2c%}sERum|843h0@IaC-u zevw9|*W8*YxCs=1C2`xYh^PSeRNUrID3=Jq&Wm3vOJold%k%cuTHUBM{&Z7u4S}*- zxP$Ob8<&rSdc$chVBW2sATv__fhM5Hq`KJmks<9N>XM!2=b_Q9L7@l1Kdn-+pM91Z z%IXq7ld>)?Zn{%=Jm zleE3)zYK1zOGqt`H&+SnauJe8$21Sq?0mWV4M{_2ziVAe<1%83shWkMk zaKtzDEeYmInXIj+C~9}=gAd^g3o*sa@FNY*NlY0vo+zI!&vkMAzJbrlN4X4U`9>j} zK9u|Mde&Sr0peKDDbJt9B56q#JYt!vuOS!Y7m#XR-3!3C?*^HWQ8WM9u@0I>3vwY` zTSGup9@V{D;}cR*If!=;i>8n|#*I#!Hg*rdw7R0^W|=Pa-f~~}e#l#QeRdRlTs4J8 zeA3I)=qtrpR7uLAe8rure>~??SR6*oi{i(WReNEs648UE@>kWQ+$zSeUF{X%tP&68 zJ)D@uDrY}=V#J4 zYJZ}+dZ=))-<=wL>PGKvLRaQ2@-2xyuZziG2#ivvuwt zeoEn>#NF!F-XUS#&a5YcE(c4>rg^*v@bM3c@)Xt9Zl@mGhCA%X#fA^v1VjrR!Z*Dc z@n2fC)AscNau$a(zkPjILi~hP5_>@UNJ3D6DMh8Er$hHs*Lu6{S9^eF5;jp$t@#&7 z+}CxV*Sng0by-nSwuL6ZZ@VC3d@CMMwm)K+@S&3_r3@uRt@k0%;2w4x)apSySZ6{` z))Kaw74DOxgrVLM6|iL*baSgkApJUiyE9pBwve{9-C50SJ$J%Ci&E_2b^8wXbeZl* zCxp;osZ-o_nQ;&<)|*)&9cZo{3!jFn)MBL|MW^O+-uOcX#hL&55-!3!}+xSx1{RaBn81({ydf%b`QjO`|_(4sD^7gGi=onY}e3I6Db<)k? z9?#17HPWEfg5X$+CvVD7=jO1%ZYsdd@zulojxCixrMk{Qs$oUi`{BPJarlYedqt;C zDEnfq-XK(-+4OE#m-5zm&&EG2HAHg#@l|ARbwOUY#p_ds)9TP^F6%}-IZ*VIrhV@; zPw$l{vvF6ZMawzW>Q4=<9n_d`+^ zQ^vUNN|?UVEdO>&@pwQ`M`6f$Az0klTR?Wfo)(dKzm&(@rFD&=a#myoClzLIgntMI`@i;?9O z7_&(9W8Nt47E1sxQs-i4lf<2wANNtykzzjKOg-6DO=m>Dr#N1mTr=}R3Y4`8!!4+* zUft4>_V5{7*N(ldzHqTOQ@MhkF&sjhSN|#SM)pKa!1lrK!*P0A(at&QY2xkvBJr_IxdJy8!!F_p2up3%HZMo6`tz=mN$_g=%H8`5P6tq)VLRFREpcnBIc$N!D#@I5=XOSGXiDDY)a*VY zr~P>3eV?`tXefk& z;(G;$mDPH#*9${1e)q^Q==AvlqRE>^riFLZbR8ZyjT`7G@_pOZhYmFvGIg^jN3+a5 z;0))PJHz4`G8%2J3>FRDaTv;Q%}AY!YyA^duMl)wCfau+wjd{p|4L7hYCZ|=s>5H& z>ua*w6u5s9d0cF%(Qk^unMhZ0;vGpy|I(uUinG-h1eX@RVu72^Vc(CWr35yu>5Im4 z92}yuW_?T6Z@-H8x6%533fLc%n+Qapy4`2^| zZ+Ti1Mhi4$z}goHledblMc0Clh3h zIHk7*8^h?dYxTzEj-Mz0qSuz|;k#0*cbL3W%+jOZckyZ32E&~z?A$%X&G#r++aKiPQ4M&*2?ix$G9P22 zRz&4us$s70~GA!0pxVs>rt^4DG zFWl8Rz4N)A}SPA0-qwzEpV zP5YWc#`r;p9G`Ecgo=+<)^lP>_D8|R-Ucqo-h1^HjnP66Hz)k9KQ1S`>w2EGq~3Rr z&4Dj0c?0=ltx}VnGQ473ss1WUKO?RuG0MeqG$?oednyejXq)xUMyd$XP||?` zTcu0GTNDdY$w=1Z&8|FO zR*Ye2FbLWkZX08A5SRV%$=@qs2{EzJ^PUWda&GC;+XpO0GjAqtgy=EmD;DPDT{G6$ z-iSO~3qZ&3b_9F^6s#11l!I71x=Ds&ULI7?tsXsAqz&KsNM@p_=&Re}Gy^$b$Bz&c z#WT-@dZ9_=;6ra`2v*7PjRG*N2Y3W7HM~ zG^V@#SlTv%7|MG*UA!@0Owpn0~CatuUy`;r0dT^)kJm#qVxHt0f^#Q#td zH8<@)*XOzQ;0NM$*eLR;@J9KDz<1#2fR!mnlfnXfu7zd)jv!HWdE5iH|I{;G+&BAeM^%>=BgS&1+0ACY* zlZtHHH1s|7GRIc^lmO0D2i~b2go8KXYSO zJQ}|zei>~J64jU1 z`wt_z#~L`67#HV-4LjJ5?WeLmNhF9^WAl1lr>Vrycqif!6=&Lz?nCyDj<+$roR z(*)(I@}llIl|BDcJ3MmQej`duc{M#gUp^&rax`yaw5j+FpAw}sIQDN2)QSy^J0z{b zujJ0>%TxVl&%9hjqQeyQ?MMlzE&=~iy1QTh^PhJ(sfg}g_b?m8Y*)zmzPza%Ts>+S zHMe5L6K$4ipRy;RH%=Ucn%Ii}LJ}cOHexz#k~bD|Fiak49_O>)9*{tELFIgBb~0rr ztMnPjyOHNC46?r<+8@n_hrTpWT9uQl90W=WjIn@OU`lZcd(cY?O}piJjSF<1C46OxZrFsCKMtdoGrT z>INF4HOFE_6i(Bep0k@P3ZdEIQ`0m|(~?e3Y|QGUG^nJ%K=%E1$|ba}VXtdOJN*b3 zkjfZcj8{{6+PD|c!CS^QNfPR_`@=u?i!k4ihCE$E)J+hB}B=caFL zu~?i#HoHbx0>ydUwu`e%w>7QZWmC1(>o zC;CO@wOY&{pQU;}$FU8K=px3W&IUohNrS!E8LN1Fb+gzXsB`d(v;TXDXXEFTan?rI zAdyYvCCvpqxd+b6( zf*W_=%CS#UxFdn^t4Pi2ussU5K)~@{t&x9gcg*_%*;#NPsTjmNcb4KuXXKk(OauN4 zNxE>PSq?s8l~&@K5g?+Z?#(Qk{pj%13BIfA$mXJy2UA>Bmc-W;E>$z#jL2^LF`t-7 z*e$Gh%8cQqZ#bdOSfxVta|%;>O}E17AaO3gXYz;_Pl-iRiro@5(sfKVZB%oEImF*# z%R94}d@n+2hOi-PFz;)wU|{kg9%VIglfJ%qZfLdG6baqkY`6cBLs1T|(eHw{YP!#iEcZJWVGqOB-| zrq~4vbPCft~UK)PoVIKTAR*QE1m;$~$uQWvhIGHTe1ek^V z0&86262Oy9iv2AJh9Z&#-l~!Wp0c&(5gU^*yeSAim$vA`p`LKSgic9Kf48N4h^8Eo z;1-o-trkSZr9*Tr!3J9l9xPqA>ncgDOYLG(RwF^hf&`~%me)9GKWu+d^v~Zv zU(1I)RwRB-!RYJC$^RKNvOgf&GMG%;Fzf)z&y>=WLY+%D7>MWDnAEJcP9!l;h01<6 zRky6>uR@agSFzx|`yefbe~y>Ddv<&0Ir^jf+qYCdAB5-QBa#7KzR=?iR0Xs30nBc_ zy2s8a6*2Rve^?7JuI3 z4*gtS9ERyOn*2w|ch$}b9Y6T2j8IqIw6GfVLqpnKFsMGq2(fdx7oFs8Pn$47N8_?I ztk!~#h7Lc*eD>VJZY|jNGAh#Ra8b?3P+IX$q0BPO_Vg&FNisNOcB}t0QaMv$O#nX! z15$MC?cD4hHRj$xR%TSS3xRzdy6$>KezZIWIeLHDnArFO>def#jQAU?d2zghKa4Fu z_(9^fE}XJD2=C_E73kCAc_dXDg-b_dOEszQjm2Zc(r@7Oqo-aNye7ToiuT}s_y?oY zB{4Tw(#Z%(%Nx0zkkaQKS(lygNWed;7&DPnFd#9I<+M;T*F&`T^M+Kd_InzSbowcr zE|DS${ZqNu^=*#`MEgN-K)v3fd{ApBSu?g$#ufbwwYrA3oTvifv$0PY$aopFBHWOa zEI`DH8B=X?EQc%JWxRiEEHdpJR`ED&6h6EehjwyQ>Jf1DEkO)JUph$0-uaP#A!(x< zdb;NEnW{bcTiwmyoEK=mu^Z?;PvU%PP1}-=!*HlZNjd#^#nBG=ma4)VrWjT5IimN6 zjp6(z!)(AWuL{VnK%3y7L4i+`y}N$BS9kU9bCx$_3NcA;3PY3!9QFrRPLCrOu5&FJ zO-0OTo++Yd>y=Ck5BGC(bKz^a6ZBE~xMU>pg^-zwapZ^a4wLnV0 z#r3QHi1vvF^?jVDX?31Rld_Gm!lhEuDW0~FORu?^n=W5TO}3Cm(FcnJ@vc-Op3Yu| zw8uc?TEYue*%uu|mUc%LMFlxHV$8VG<4BCPl8~G$K06hgDT#Df3WiY$$_Cu{g0oA$l0@YqB5bI*M*vuCV`tAFom78kj+)pF{OqH0>l zYjucTKO*Gap6bNzZl$?DB-J$%@bu9)7{C%APh5^)Xiw@v7enMYuO@FO81$A?B2bbU3(4)iSH#4n@F}R z97Mh!kjCZ3+SzOtF)~8@)q8lvFepSjS9Pk^ zw^69yzCH%MK89Nk^UkX;^2{?&i!;BAfB*4ayxs2Awk6k`MKFk8&NmuE!sRD_PeoGSP6hq&vPck$HLWAp^n9XlknP{E;1S{9c2ijz<; z4*FQA>-iY+_(_(aQ{Cd80)qr<-cF7l+d)&Ph-Ir*QSGvV&&QYqB18RMG#uE@YcD>_ zb5B0Zo&RwwkGy$+Hf0c1*%B~I^)&s7L}bvMZlq^qVrFZ+t>eEGlo2(C2c$k883YaN zcC?-McJYKfp~?3mj0pj*b~guAR^9 z+%b+FZ^hfyM2`eoo|Es2jGy7@r=Q}EFe)%X$BiF-N2%P2!~#MiZ_n9F$D%i79$L`pJdx_p63~<)8h}_#jUqJ%Fa%&_8JMq zD5>p^L(;fN#7lo?JDoie9ID;mq|K_X>f!1H(dUsN=`$6qM#b?ZgS1ceov3v{ZSSnU zOQ0K^G-2iKYhvHqs_&lWktbhd%kJY0j0VKXkI*Cf)G`o5L2VxC;%ocPHqbOI1OhKU z(FJpy1BW6DQl8N)#6d=s(lu4~WF6I^V*;VTnD)*$wKQKnI~GtYPXbCGBlz51oH;7~ zW!Elt>_5ht!4L^)$)qCoqJIqkz#vDD?BUJ#_S0s{q%_V)SC1cGa|7*zVr`mt@!~u0 zvFB(fF*%jwN4hxPC&X1WR$C^m;|mDsdGVR1j7ruDv7cu>$cxTMw0R9Ar#XqYeS(!6V#|X{&r|^D$f0spg^<<;j+}9ejgsTyTGb@A+R-v7 zwowI0N>>y)^mLryoyYIz{->Ve)g7mZt6R_I3koHWNv6DZHnllHPQLpL&%g2x2by|O zj|XaOAnHV!RYf$oqJ!_ z{P;6Z{+fGlyOoDt+CxXkfJuTzwMhy_3rWct6lbRqW7RzEhd^-(@%JZB(i$nCdSO1v z;yeAqM}lIr6VozD_PcR=AuctAM61+i)Q{CwOo1ziyI1jsXp<(tZfe55Ph59O5TT%c zh;JPo75~}W%Hi#=^Wt;Q2CB{lj*HlMD}yJF(kKBIz9BsBKH3`&vHdmGKacU?owsw(W3O_kYZ$+j9}FP(stLP|5^ka$tkD>Xi1gkzZHnwrm$-v-5F`-cc5XOkTl(Z;pe;UYcNA?1yr zwjNOv028k@k_>nTI_c=_)9T|Eo;=Wel&!D5z|&7X$>R^+#V>#HFk4$aVsE1S@6$rt zRA%?Sla$VwMRjojg@xtRR1}kH?qTn)eVkD5c$>7-&X*lZDH5k&%H=h&v=2qd$jXy8 z7m#Lg(>0`K+QdHD;>jwhr7|yGyuKY*axB47>76(+!d3a0hfZ_iR4aoqMa-R1Ozc1# z$4;DJ$dXBUPQv(xJSsr5Vj1h@O!o*_Vkn%mo;l`2JofHcEm%;7M;YsIz(VefWz^?- zIk97_kOwP{;yJ9Uut^ZOkH*1KoS8)=+X8gCecF0xYuHO){~&Jl@U;vi^_*c%Wezb0 z8!5?2#F+yOs*P@u;t8{n@8u{53{2^k@8vd zC`&QW*VxK{FN8BKi=YV^vBwuM zXU%LP2cKZ;*)ZYwZ0hFCqIB#Ouf2N+Z%jHB1zC)G`WO)7t_HVpw2#(aFQ!-*#nrV` z*VZw!x`cS6a!3J!W1}*FK4jNXWuUDYOq(w{?y`wNkhW#cX4%?W@_Yw*;>A5QceTkN zp3cmi2*+F9B4aByaaP8W4jOtwxN@qPvve8`PY)(nDfQD!Ns9Edcjqn|JvIuslHSl5 zBc4G9x;yFY9TGVXisR3sB0o)Y7(-)97D61n;yn6BFv+!QYio#eA7{sjF3qq-o!NO~ z5EjRqm{G>;nWgy8>|jqrk2shM9Nw1zDj0NRmQqz!$*cv-s7emtmH8Y#vFJQq$83 zG#+GcbCB%HI?D4*47asw6PKms`J`IPtuzJ8P6+q;CFv%HsxjZ`*E8 zwvOQ{t)aTCn5sD|Sd<$?h5#9{e%kwlH-@~#WzVD}afoAWqY?syQsG&BfezhJ6Q4f5dAiByjK#W6i3jsva6lKQaJA0CT zV*xeOibzT{V~NjT!G;agI$C-Ag?BmC6T{5S8%a3(EZa_v5{^lsP|3#7%#QtixT>d- zmoUtk!v|^gCy`T8Bfdu3b@(tX!v?amvoSL!zS*z69>x(KqOI30G9Do)yrpth4X)u3 zF`3!q=H-xLa?|aWwrBxQ45`KS%qUI7=dntllPHmbhrtn%lQWB~6o>XKoKFJ47-I;} z@F2bY9!$w4VrR05ONb@0bOsCRr&EzQz|Ob#(JayLMX{-j;+^7uv+5QwGjogsZ@tP} zyN+_=WIJOb*Su5{y^Y6c@>)e-E6BCR;7CXzBR59^#WCCxJq5!O=$T?kEvluqIE6^i zPF6+|X3@hwcZlS?GODV}shF{trKNH74Eag2hUj%m-w9WU7{icQ$%e(b_(w-M_U7xH z_5`)bjhKW~GF(acyu)|`MqeXR;ixkg&7(TY$gy|ckzg|{X)`E^ z9pd28Q}lZR5{jvb3>7qZF*-6R&PviAZyJ?&!)`TW7>#m66$F1;wK(@4!o3HZs1p)Y zlb=auMkg-As%F6X1}m?YEXrbR3~hP98o%_oxL+f{P5x5T}owrnP54 z0tpkz;zV*Y)1~Z8GU6mK>*=OP0>p@#of;X#=925CXNX~mBO(D*qk1vz$0&w@Ansuc zGcH+zW6u`$^#!ybRi#*C5=cmZwgcNa)}$h{L{eNajI_7V(%Ow%WR#GRLyp$oEOMP@ z2Ku5eK{q92kYViO(1}LeUWsHTAOqiQjUzeDLGO|69PgGZSsfC@#$oI}#r_lR^!E)A zj7=q{sDSLWRI;VbNroZLwDx0+mmp~F94cfWn8E=q5KWNax2L;HoQzM}`azA28e^w3 z1()<^Tv7_@Vo2jW`LNuB+_y+ zNQ{XmB{h|pU=Ig(@8H0x4o3W9NGuLqBKwR?2mT%jWV>29ed;ugVgNFy&7?db!k7d# z5rY|fLMd}*q|zbI%M+8&v{|*J`Fa^tTSJ+WDHfuTo$RHt@eEz%$PHsl5DZnP8p-E2iPhBUqkmGzQJL}3|8W^^2JA_k>YP= z>lU#?ErSdXy9suRuI6QvlT}D&vYFA-+j-`#z4VF?PmM z$r0NX8<$A3@CsL4fTrCq@SClt>Gc?dt5h*_o&;Y`ixv!q&GBT!jB>iEU4j=Yx{as@?t82+~Imyb( zAuGv>r>~u}o&AjZ%_L<=;FOu9-G%9tfV88rfzyqhANpc?gF)Rf@zUGbiPxSha&(a_ zWn{z~wYw$9n!D&}_Yg@;CATzBNPHIA&S7@G@Cw_Hwd0N0apkAuJ^da>+x-$i*ojMw z$2{1?QStNU!~~4KE*cw}==a-+PlzMNKS0x&CR#dr88wQZ&&${3n3W}UPYBZ7CS1tt z!_(DFw*=H>xndKt6#tW8*K>v=Z6n$Zfbdv=Q3)iIipqpnI!R41;qK|6xqCqPTL7y| z|rEi!C?#1)6q!7*=BmiVuiPhoU$|I|1=!_PSGc~w&E)6_v0H4k&shB zmhiOfWE;au-#YwcRn1`5%xM%Ps5{(a7=_PfT8B7vrc?MtNCt3(kmPmdW#Mn!$9sFu zGAbid-OcrS#xNxcH^|Q=TXY61~8G2ajA#Z}Z#ucSbDaHi6UL=XF4dxM?AWj*6N z?s|p8Tk=ZDm3~jpaFGz`u%d^;WmTQBMHWd$H>ZUgMmLnyPW{AC0iodsKlnl9-+p!* zX`+Z?pF}8O{3C<(^z=j@PS(~kUPO>iHz%Z%krJ=%q&k7Iffky3)%{_Cj4%}pxnw}c zo5KV~hv@0;XCx?2JRt@{z=Ov#O2FhGDKQq4f0W^oQN{x5c6NpYiSbyqt;3|KkzP?& zA@$-cVw2Kv8r-z?33-?V^@8J=L>Gy6Ar}3;j0B9@%jQ$#j0_LB@d|M@+2Tl%4o|de zouthybxYu(-fN}q3>j5ml$JqCf*otbFZp`u==W%M2tOJ!2#j$o`}*HW+sv z(yKOwQM=^Dk(d-Kvgu?kj2si4_Tf>XV>YnX1eL_$uFNlqs-&56w@>FN%j zr;pZdw*+1yhxAn9EHY5TGT0P3lIv=+7>(ZHeLo~1G}wqwO4b5TtGeSYdOh0HL|d;% z`X;(2KO8iWlvhBS!>pB~Zr2BfIyuuhf=va2%J_)RXv=a(2IQLkcvMhfv|tlQ?Mg|K zpd>5yHf%-Ar@Br+ITXlCCx*(t4}kc5Zo9d_!dA;8E$AHCgPA^mB%lH;+6UZ_WP+<FiLwp&t^+sc|a=Px%I;-%YDp!siQUt5}SQ+1fksEE;c);OiG&**B(Iu3Wd~gIqb; z2#t~e(L--fFMUF^jmnp&rje59&^9tNh#Urm!}ThgA-(EMmB2Sa+8UI=c~AmGt8m4E zAx4EPT{MAtsr0>4WGp>#+EIv7db+ zCv}%kWNfmDj3r=KT-g-#(kuGbHQ*;+ar2Y};l}}Om6Uqtx7pW6LwjFzHIe)=iM~4} zV6%+&($%Z(zDm6`J+=^^>>|Y}++GH?+7D!SP|k4&iB-#}ozid8=c*KAV2HNXZakAG zHN>_j<>cXVs4*DA@9yGk*Ra%Ac($}BvoIBhTqmqJbY~a+5`Y>lHe%xwi8cCh4~5aNh4L&Nqbf?%9C5V2emt%pBCT${`aE+;ZJ`2BXKn0^NJ-Mqh82(u`Wwd z2Jw9Y)1Co4-(Kb9CuE`=uzE48GN#d27KnV*fLDe|-KJKCL0b-~oWJCo9EGWes};$V zuj;v{u#}<<*oDxpr|gyX0&O{cdZju$Y{bRb2bMO%ycW&QI<-hM03zDXE5XE~-w^wyO3=U*0-iC#iJwngXe(df-`m zc22cN4o4q=jwYXjrb)M3PNX~q|`JJ1o?BB<((_IXU zjW9cFnOEWAtp^_9aPGDI_v>cR``UBtc8fE!q)=E{L2}<~JpAx)IO(xrRL^5vSZ}$u z+Rad1Q)~Z(9*je+r8g(#G4s+(S(4Dh_Ge$^z19JOQs0k~(ia(%$K(Vi_fJ$57KdunbbYr4yNtZEuvD!Z!pAXdCx(nTiS{83oyKPL-RT*>YxO|jtP``uf zxo7o^mzvrzo3Pt#nm#JOq=LfG_>8qWU3&?$=&RCiwLC0paxS>AjxPwp2EgET?jW$!U}8tm<=)d&spl->uG3{iFIuf{O$(|f>A*Q| ztolG?bzvW9x;*)O<>$}ooRU*iFT&C{>KVi-Q2nRI$oS8RylO+oDI7sArk>5!_`h}_ zTE}R)qCfIEkIDKrfvIC~g10Cr?h+iolQ_A)3hJ8Y^-()C2~j;iU#F?%ep;Ll2!HaE za|*5FtBG*XO6shQTv5})6A$dBfBd+P-v%;JEe;B2uV!g!ine2=xFTVAVY+s|%GRSD z_>u~kw{#tKNj`=HVhSx50{x8~-nNB99i!UDF`s2*s+lLdGnblqHN{A|Ic4jno^AIPv&|6)=R zp9FUywG3QrK=iJnnuV5Qa!9)?A?K=~P%Q~mGsG%jjP5Y1@~HoH=+L1U!e`J}HFE zMMm9px3|#L)D-=+bV@LIe!0ikUwdBueP|t)L2?r$zlz>ky302FY)bl7>5NKB0@T+A~(YzSsiyjQ> z_}nnQEK)uns8t&0`JDW%R+d^`r|a);1u+KErMBb0b$lwQC8ug7#_x(dewm={GP-^H zcI}6neLVM32gEsDlq6CarpaxUk2F@Bk&WX0$FwDQi5V1?6_e@+;2lv9UQf>RUyEpc zRhNC%3Q7LNYE~}FV4$&QJSbFhkpIT@VB#86W%av61e3!_QQaaI&8ed@Hw6M7`ql17 zp8ykmeeRDz#YFY{Q5%nN{^m&3$iYWP0>)+3RCSOx~9&t+gZ!cf9?%Woa zMsZas&WH!ksM?4n+K*paT-bl|QHbii{1y-S!D*iyimYonCEu4?RyuxXn9!Lix;9A< zqo47^>d6-M!(x%(&xCqL8wm#0j_1m#gscX!HbyK#gSMf8-)zJbGGh))aA=SdP1@T> z1-f>Akr90sZM@$n+Y&i2m3ydzpU~c4m{&Xa+xZHEDVFqta!T?N348h&@t-eG5oc3E z8l`pfSTK7Ab%n_UeI5oppJB>a#z;8EMNxGvrSSo}d!ifK{8m~#SsvPf-%b|43n*JL zMISybB(FK6lKD01gxy1osP*L+C8STsBi>K%!?i*80lE+&6tIy~zmO%fatQYJG4!FY zH~Ey9tc%+9FR1qi`G_wV&b@YG$DRY^&sfRw+0~SnS5Q$_N^Y`^G0y<*(eqoKUJTIQ zXI4Cq<@0AzTU9}Mg|xS#oJ>T9*Ghi1Hb&G31s{rzFLIdsw{#G4d%DPpN7Sv#>0_RF zl))G@Cs9x}g9YKZmq`DWS5lUr zj@8#m$6!F)EFvMNf|+v{FsoK^k4nlVJ%$kmhkXP;!aS>8LtPc~Svt3#s!FkOl~s~A z4SS%MPPhMK{MU!WWJ#uC-f9+2OJMNKA=-u~aT@WPrr2b13QMW1pU2ASISh3*a;glj4Uv?=A;=0+nzlFf0%{)FGgmjziBo@zN)q)vRRaJ?cU0BBY==v>W z@t+A52wEIYs%9-F$IwR0fO@Cgr?02l5Y1M*j&H6np!eu$+J{E9RRtFhq;CyY5;Dt~ zJ$D*;PBWf?A$%V-IL4u5Y>i8%eA+CstOIlns&@#hY!msy1bp$rbHB~EFE6BZ+aAvJ zj{KGr6A}o9WNa4I$he-v^lGv7Rn-(F`so=EF0OXA739oZOTBZD=HBQ#xxa`|0ii}~ z%`x$mFT09Oiz~^=%_l!Um#j1=4y)Q@>f%Bq6dcRaBG~l9!h!?ae34X;rb6 z7+&>moB|fFzk+!saj0l;Vz(i+gOAl}!)j4GN0~6Ghy4`+h!!o70<`nT(=Lb_w4JJy z@<};r%UhK`VH4DA5GL*rMf1Kt*i^fHPNbbva{1pHn?TjV4Xl}0L2{fmn)kxY9|1L^ zku&Q`u9^{I+v|JjS8|YmFfpx~6`L=mHX}l8dMOK5u4PGm2}xG9-LDK>$s65OFDj48 z69>_|UaGC*@=%|1bsBH0oUh42?Z_m*&*xSZkaNb%J-6GF919Nja^$TidFrEI=*A$f^07`66DAg%gFWE|bdLG_<%rF5$} zWLu0Ki&^S*u7AdBtm-=6o{8VlUCGY3XhIHZN2>{WobMvl*756(rzu%QvnyFhSr^Je zVdA>#+zaxl9nyTmot$duB(``qbF1>TS1KqS|1u(K>{H0d%3;pB>$!I0VycSsNOw9! zj#gZG^{l$=5*AG_prEjb`X#H_xN()}u2aJKsGQC_1|=iu5BVKEqKvwg?CGmmb@>f^ z=aw~8sB*{qUWbnNLG;I3G?$I**RgElwfx~tOUVg@P%UOS=1exXKl$F+V>E=}| zsZAziieL;|h1Y!1XQRHV5dUGeQ9So@@x|F>=a-2cx>S75bkZzALIxp@rL$PRayheW zipW)Zk&~&tD(V8NFco674JI48b1&nDOBPX5RG@K|e94>aFh_0rgfCEbP5BD(CFlK1 z6cfHp^F1n2xfc0jve>ZMtmD2Z>i1N2)cK*IP7c2D1dqP5jfQ@;0g?*hCKoJ)jQh4| z+3#C=|7e$z&l))tYUmrHR)6*VuO9cu=hLFlcATF`SMnI|1UX7< zN*0SR{|0NS6C^Z=?glwIc%8zf-q(4P+GC9&HpX_Y?28IY*RAp7R4roTr5jndYA%H- zv51x{=|@jd(p3F3u2&l8k>lzUo07wV^;fZ?Hg&x3)i@ZJliK~(7NNgkKU=pRq}}6J z^EcyZB6}%wvP36zVdB{P`$zEx6VBXeEM2jbIn&E2EKu=NJ~^og(N{re^)ykn_8VNg zC=ZLo4pE((awUyZM#rBT!{@FzUWbWt#>eKltV$oFV^7mHrBCB2pB362!kzmMlV3dx z>;7NyqX*t#@7{eJI@L_S_u{%csGtJE_`1uuBIO`|`?LFbbIW#i@7~Rk7LOQnD_OOR zSvt3l>dFd|EPgCWIpm3>9`kqz+S4g5DW8RSON#o*7F zUQ1^-tuIV!$#iPei`a8BDW6tH zc~K6rz5xb2UhVxpj^s=#>gO}Ps+7`#G-ASIxQBhjWS28z=4|bS-FZ$62D_8o> z4?!77F-ani+L_eVR8v`!iNg?Jc*u)C7$PROmijyy$m!)wudSBgyOgZhVcPq=m_&}1 zbLUg&u#!J}HnnBNWG7qk^>pA4it>w5NGYmg=B(LNmlaZ&6_0OVF#4_^shN67x!IXV zbxAJ%j-wnr+o#p|Lm_PpS~93xTtRHZyZrjjM|pYM9vWk&bImn#v79=K ztC%~jl#=2iin46vu zBZu0WLXwR^?R}LY;whRjhx*z|N=r&8tEix~FbA8riLN07vB~*NU$ls6B}EjMmQh(* zMNVP_&p;<`pMkW}8O)qHgDTOz{0s-)zClLDL%i}p@hN&` z%bd+M*Dex~g(*xNV)xtoI6J7`Lv(T3KOLVB3??Vl*WJL{q!AAF#W1gMgf|~~mo`N{ z#d#-Ym69Jf!k!oI;lUTSvhTnV8ru5t34th?zn)dIis{+%G*3VI2B+*ZS+t}GZ*K#g z{SH=q?faCCZsD=p@8^yE{W#`rW?7ksGyBid=No4*`g4R|JV=+QcSYt@mDBs`&w1eG zqx4zISh1>tk%L<}=C+VtP(e1Wy!p(7Jn_nQ_8mG(Q|AyLw|K)~v6C}xG1JE0<)3eT zly|qi$L<41wL1=ql)4IQsVXTXCntl_y6IF^6q6Ei)8`(>A67x1m4dpZ%$`;*J}95e zWE-QMecFrGvr4KdOt)yyv8I*QQ#nai~lOkiDj_0S9^!65{SAhRylVyv#atcEUTfeJd<$CLALL2C7=RB zt#zLq+M^H&Wvu!7*H~cO!{hfpz%#FJW1rM1XpYC?Zlib9PF9)lhuJfz5I5@64$r@FM5tdtl61KoJS4(T6hM{yzfg}Id1)=-q0jKwE@V?_Lh zxYUHqBC4m)Vp?UHl%0xcbVPiLPm_lVRLr?`tejIvSy>51g$20iro|m0y=F1X=T2i< zT^%lyn_yfXW!XuDyo2-%jbV+ABd=m6_0#L9D$OP(#>j~DoqErp7!+IuBD?8Q-*VxV zRnw?T^Rj>2K`HyonV-^QFqEpjVAC%>i9&g4wG{mrQi>ftO zv931E-j^QXi5K2t`+Gatf4WOsc@|eNlLfPCm@#(=#ql0I=2VIcW&GJZG;|J&8Mly_ zUc`(=3#iffUpDb!Uvy(fTP$h$WfbSQaOIU#Q&S^4lZZjarh7!K&@+=Ral`cKGTs$W z&U7$3;1+He)Ohlz#knP;JNF%;uzoSQp5456#)s7$eIJW@`1gx=`~A0p77*5~=aSq( zUfp?8d-+EDKsaOI~QQYEuoH0tX?KtD?1cy60Ed=D_`cN(9NSyag{$x=H_x#6ew4Zw)ih6FY zglTiivATP4wfmOc}dExV(rFF zOe@YJB_)}%+A5r5{hVp*#;2CUO6}~a1x%BH>F+%D2?N4(YUWju=4s*Jz6J*H(%v*i z{-Whng^%&x(RPw*S8(+ut8gXQak*U7&6|s(>jVd-PR^_fW-pnI#E2y36p>d@LP4sP zQPGQ_YdR~|%)u3Erm3lm!L+&DaMfb6e7&5N-;R=HTy@2Aa#EeRQVN*AVG|2;q2b_G z&JHC|zv6l>Un9Y)C6a;3!Z_4IQ@aGX;ygoMpEyb~}A^fIPO3HJwyBkHPvsiK2Y6`m96pK@z zL85y1mPRe>j3ky^2Uh6CVRLp`0aw*NnJ!wj5}d zz-IiNz2N|3J}ae5ui?h)Hc*plBvy1Ld-`G)x<)v9qJb_?ki?>yEL&JlL1r3Rd3n^- zRblHmOJi?{wDLOYs*6cah!sCqAilhmytn`Zt)29ZsCR9Kux3;;uR;RCmWhBcB5qXz zo$7^b-nfSB)CA!?$<)r9N6Nri4m9^;usWz+wu#GD%q20_iYq;voQzn8Pw(Ts1D_=z zRCnL4B;+h*^M+K8J$MJNoKiua_&JZ8p7vIHMlBlGSby0nYKzlJic2DQ=4__LhiGeP zq{o}eWqn%$;!_Y4w*(!g48w%4C1mYSiX8KwWWEu zgjc3z<&YE8&+aV;Xt}7CjH#tdo?D+r-`SJ6Bf^<%BQy$+Qh|;kxq#^_FX56| z#abUECM99@ws5+8l%$e5%%4_Der^^Hg9J<>~0ywo>s<^%dTWmribH)nusl)!O~^Rs4C1NJv)oC z!fcG{CGcG%GPbIOd!%D>x6s);q%9Lw?-f+5n&M05vAC{;!jf_=aP>wUq)H#!M_br^ zvY)t=QkGnD8Ovto5f_s{PDLf9X>klUo~0}7plbP5T(!EM!h8ur(~2Z06n!)g(A?aG zExU%5t5;KzpDElhnabK~;mLh8wDm@L@~2dbb4x~5ST3dsmk4y_ie)TYJe%smbYd=A zG9<(@v4D9C7PCw`dD+sXRA(3o`@I}~?ic+0?q9R(cr)9c_!)oyPe0}t55L0U7K!GS z5stNE@O87}>AU&qtxs}%)Imm8CU&Ef+BH`(C#i!spSp`*{py!IyvxjzE0>DVuxWR_ z)U$qRdBqs_J;Xo!@LzdwOApC4GbxV^iUL8b81wdBFLCSN{Ug74=@bb?<)kMj;>?`J zf`xVX4?V>lxBilQUO0-Wa5}T9G8sAWDv#WA8!v1>!O?Bca{JHznZNtj+jwHjN&FxC zETPCD97pYfY1ob*_}*{`v3u;eR~B zzL8Yw>Ps;NtduRghE)}?>+zrQAHTeVr}sywU$uae6bHr++YRm0!eEjCECE~>q~@h# zwq&vNmTxoN{R(%9jDPW~+j+Jjm#e<9oDA)n>UkkEo{nQY`LloGSHIrQkh4?*uzV5> z(HEzxicQo_&2*{n;joSJsGQRb0UOZ}L_L_MVCB3(gBQ0Ls(x=gIfePeThy+GpNj;)a8S#7?XmGBBqWfT zkxZO1z+nFXeXR{be8Qv@6q4kKBQ-mhoP;r2P6$~SXPi{Ngym&cj=c32hgy2ISFS`i zg@~4`L&t>(huV4T-sd>3mJy8~(;((njZ39J=J*WC>lcepUBbdy)nq$ku_U;#C4(>Q zA){zI3)XF7)pRQsi^{cH=3(tlgxaCp=FFpZ_7YaDT+ICXaxxNPrs~iKLIp!+V$#c4uvqNX z@)azaqn@!EPZj?Yn_{5*(Cggww?E{E_wB@5Tti`+6Jscd%~ih3wD~XqK)lxXKO}NLwH@NqwKjFTYPhl&mqbfHAyWzw9tqNq5nS1p&n9Uv@zwcIl z`O9DO=%HjbePac=(pY;^HEXZC6!Y6Z=7)d(kNo4W9^lpELd?~=>CXyPSE*N0sEhV9 zYIoG};~IpB8&jFSemygVhrRgkf6w3lar+-K0U^KtIJ?PvV* znX_cfnMb{FWt&taZT@w9qk4pw?)w@4^3VUwKmX__-2ZMj1V%Xi+|T&&FYjY_;}Az) z`nmY}f8bwkf1Dks28c_{WBP)nr*@Ea7zGsvC(spzd<;1N?s00kseMRZl<{}NPK1jhDJi2``CBZMDdIY;tf`usTpKBLo^*ZN{=x|#_K|g>|MP5>!0(p zyPxC8h?8k^>L_seX+8Wl@13<$Sig#OYu2z~X+1gViQ0{(zFkl7i+}qOFC6jEwc}xa z^rL^~pMLyr-0_y%9;2fp1Z`H5tO+D0 z6^T-qaHJKne8ozp6{cadn{i37m@L7U_Dq`?V71;@)mK~luDs93LIn+}lodMZ>T1?V z%oIqQ&GtAPj(EbO{X$}_n8lz*j1Dnk*(5q0B&BCFbM9hh6sBTyI7my3C)ujxC3WfD z&!dmM#i>Crq26P>{pvd$=?iGj*!YKgIrQe!92|+xst)@7#5rP!G31h+oi2tULSFf7 z3Dy^p>j)8uPo^N=h7|p|Ks_BBk)SX-bMGe-JA61^D}lL?f}9jWW+Nrl^H{cc0h#tOf(a=UI4qb|7kfK7 zxb1D;*we^}r-Ng=x3lMT7oPDQa1}Z6j`|oF^ON9o5pR+PPgLz9gDp`A_>5(&SiY1M z^%;yd9cK6OHoE$|IeoGPe|#Eg37Hh+=Hc+Rar8(7ZbvptmQN$0>nM901~FPCS#wynZXL_#){<_w6C9DiFRzvb zOXjnGqJf~;*Eq`7tYzb(a$JU1UU=vYT876kjRn+(q=X`$#J21B zFN5^I$>E}E#X45cv2*H`S2@@vzS9uG-Fa49DyE*vub(rYRU6i`WJWnDw&-*D9}4AC z#3xu1CCC)MQdw0+c~KrIvC(9s#meA`9c?Y5`5OhTO|mcL0-}cw!GDVS$lTMC_L!5u&G*gg;&H0Cox&DXnuDb zB0IHVV91$8PPU1@lgDXl3t+Wd@EqF7{((da3gg74i!ToZIQ90E?CF&NQe-eB+`}&1 zC0@xQ;G_Nc9uA&5MQi&MOV-xi&{0si}#?Bs!^?v4FWX#l*#0h)akk zEvb;)tQfkRPt)5yq{&cwhD|y5iwtT4+bRKYeqJV4-w-3CeRw=07?Lu{&5p-nvQvTviqA!5qvRTu@g!M^?#R!m+@nX%Asp)B;JZf%7gUoUlR$EM z9*O>D4jybKC>+7%O2Oew5FR#%1@%=V#aW3FK9?n&b@a?0p1%K=JiV(EvuhS>FT0%0 zmo1_w*&%fvf9_M%Ud0cJTWEEb3PfyiBoyWn*Sn8hhexo84H#`{;!K;D*o;(?9dc4& zgtntQc;%f#bPe{(_g(BbaEh*A4p|vV80@iB)Xrh$vZZ9lihoEm5L_t)bjn0tQ&4H)?gTMXZ5BcHW{|mQ1cL0j!u(&>t7I$(%s4ah zC@d+Xw4{_$r<;9m?58CXKy4wern5pr9)`pqSS%8RAAgM}AAEy`QE?WkJS~_LqM^`R7Ocj38k50{2NYktfhxhQE+vp_As+iDZ0Arr`}QXNqbF#5$R*K z6z_dGq>Q1?M)n^$hP8G*mo6xlU@saRsfTf`F^Od66;oPXK~+H>u z#C8ebPKz^=0UYd=Ks$l5Ih$FsY#r-n77^;)&yM5W;)o>hRDohz9z|spl$92d8#~C6 z9Y<+XL9DufUo9E(;S&oJ4z{!Z&6jy|M*{-^t;W$h$)C{J7(TC;QEC5|79wZGVWR!6 z`f#eATkHv>Nj`a2+~60BQnl!q%!k%C1DWN)I#8ASB`Tf8ziB z&EN3DpWee8EhZ}G%%UVklE;#nmX*uE@t63;-~WWij}8kNh+!-ki^uCB#;}luIo;g% zZ-2+X{p>joTJuPk>v)D`JS)A|uCC(?31yG$iIgtBj7wI|!u{6$JoDCZd=gX`!a;hD zyu-u4_y@Ew^N;aVuf3U@E}KJTd8ziSUr~CTD)k(c|1v7BA-UD_hGzM$ z9yd|CJ@J|Fx6zNBDqJ8UKGT(3LXqY(ODIX`Ve9jIX^)ZeBwBU&MCH6N+k7Cl4qj{AA-SM*=S!xX29O-LiRNZKmgq*{XE*1d;0-q(-M=)@5x zeJmBQ$_Sm{D3jZ&zD0SOx?uE?EG<$7m%bQGz2aQoop>g}CXSR7l^?{^ZCKp+Hn2`&llgFAz} zyAN)IOK^ABK?e8W9)i0QTn2Y{JA8Y;`#sS65drsbBqfhO_I*!^@_% z&(CW@YsmE*78w^mr+MR18uNgb%+WA$#oyUeY+NkKZ+M^c(z@j1?_AJot+YRUj)MD1 zLnlkl$A&<%o3XFTp$+vZV``kdprNmXmT>y3+fq?QW#%Zks?1q*0$kHLh+8s!?iYR5 z#4C}RwPY?68d3I(bo6w3i!fyODq(bn-E3{~miT1399Xz@4sn8<)uM03t*L3BFqV;B zyQ)_5D;NkA= zLGw-5A{9JkM*Ck z+Ccead|L};b~NgA@*n_Nd)dN1XqPMpPoeE&lFwaVb zeu4t4Sf+oV7CF$b;|`INB_-j5?3Jo9lC=lAICC&hw?+%g_+K7+gmRx?;I3jFbp#W6 zrg=S0a95a?>O^>ds+h)bK%4}!-tX-l=h;qwGg*|7#u84_mB@#SZz@Juuu>+E6HNWaO$iVxfyCtlNh~Ol}+^eYs>JZ$39^?ab~C zP}n5iaYDs6nt*p|-4$%rxzq-iKe8-2hrCYY#GluRUqT^#r=O?*trNIHdxbd$6Q%U= za4QtX-5)>z=P-JN0wa^9<7Mw3VwIxsVsGw1FefWyMP_FE9;x}sleDP)ar-xA7H$r$ zbEGW`^Ydcbl4$l!s`jU1-wqy0RQiXM~GG9))9exdz0%1+Iz?VMUc`g3zO{C-o&JvLsDED`NGe;YU~z>@(_o zwQO1whNtAt`yC%}B7hWvhY4w_%G`d1P%*AxccNh;ToYGUcw71Tt!Sp<-z?v&L&;kd zDSSSF=nHpO8olCL(H{l7x^3$=S>n1{w^UrOc?NkKRy&`f+d9{E&ottQcvUV{taLp+ z(TZ{DKYdcFc3*b7bPIgZuqP)EFOTdpjl9<~^F&fD#Wi}dmu0;f2k*)dHQ$Un@?AW8 z_>9y?ea%@>ZSMV9l$HgIV~PI>s!7d+ysCDNeJHk-Xq*q_B_Om@Xt6;ByU~yj;y8U$ z`&ROuO3BmIC_K6G(P1!LyL$+SF0DEM&y1l^EP_>{tM6{;u(t= zjc7be)RGSz;G*a5=W(Lkev5qEd_|wN`X`Kg4QpjmRH)}IZG51A4^;@yhJ8_=nKIWo z!iTp=cfEFlDWi6h+Mc?J4QL?T4^9Up#dc5&; zdN9l|W0Dx@H|&wKvyBfC;DFL&6vDk~hOPZ`CC+MUk94Xq0^IQG-@%Q~ zMNdDDIUGVGQ-`F0^&dGM*Eo5_!03hk^}R|2^H20+FZcB2J~kakvP5pr)=^H8p=9#k zw&Mb@3nY0^3ofj_(H)UZ?oCqDXeRP;a{l10iOJ{|K|_O%Rx6sV!XF2T-J_MJ=p@Se zk@;r)l$88wy>QX;)P*)@LEx^fm;afv#*R3A4o$9fSL>Th@ajgBcpz12HPzDT^GArW z)tJj-}(XtN|J)QObII97L1gT$zf1)(*>cr@ax8h!(h^TItb&V zPHXi$ifW1e`IU+BX0nqjW;s@~1m~Z^UlH8$rLY9X!dK8VraG2I21)4_W$e&=G6IZ& z`Wp?$SamFi6r8fr;xfKjkCLu8ap#<}VW9prOHo^b zPV80)S7_WG7{hE^Aq@g-g>#_e6*lxtRKV|;e)uYhj$6Q?J=i<5m*HwcMfe=bolgl< z+SIJmxU}*LJ1Tr6R~t4obt`eEsw%ep%Q08G)EN-i)02>-qM()#vC1vovFP8X&yHBr zI|p7PZxh~GZOc7E+wM1A@WXrj2r)5>=PYYJXAS-Bu><|=`7UFH69;x>?yESEhI7~4FnphYgI z<$!mWD5ar}neDbH#Z%X&5+Q-@{|+>~SQVh0teK=FDx>oLeH2L)>*w`hYJ+W9sxg<9 zF@_3D`E=;Rq2NlAey-89w7X5GL^-VVSt? zrk^C*A9LtM`6fa!56drh4B)gU$`?hrge-_pWus6bgi-aT-2XX=)(^91auFn~&%ttT ztqYgc3qZwfdEM3OyS84OtGE8P=&t>pfe<#}^Yng<5ci&LRROwT7)Uzty7go<(rQsc zJ46i(MfD-{Cu0)v>G~R)Sfk!-fm>5j+9Mu97;5k6Iwo6B%ng)#LAlO-OVZCmJuqUX ztMMUIe08giSA6ftO1~Q-vR$&L3{_K5$P#qZ{*kQbp7vyIlrppZs^!%f;(0Fmjtvz> zYvi8)ggf3BanPuK)!NVHE=amMwSWG70mLnL_Mdp1}$7G?C?c1gI=MR%Gb7jo{$a zfUZ27oh&M$OpwzMK2GfU9P^@`MR6&$2u}O9G*ekmHL5rzHGNsKG z^}_T*6v^}OYnkU9mTtA` z9pG&QptwU`IuhraoC_w&%g~JVF^Ii=3}a@tMvFlF^Et#*Snyp^z;_F?nRrN?sAx`j zh+SoG)L(8>*zi6nV`U4plFVp~fPgVXxmU`s)EX{N)#ZIeC^Mg#!J+k9rrL^;fc?Q~ z(cCrMIc<;bPzv35+Pn&$Xx9yDLSa*fgmOKe0;GeGv8Z?>iV`fXsi&7y5o$yTz8YA-S~sN z=94Tm_Va`5!^ms)XzXA~T?95Nt2o{%%U40kS`aE-_PH|zX8ce@*&Sn>(0NQGHjH+s z)pg7J?p5mv_={<9PJ*A%`pD_aeQj#RcnGwveu8b+B)csZ%Qm192cJD&a1hfC*~P95 z_*N)%Scvb-GTrBlJ-nz{qqmCD68++O;$$)-ZH9*d!zHOzd`#DL%SesE-HcAmv{yiR z7TJ=e3BiTMmfiRt@?vkuc+YjYdFGQ%T8dYsR=4Uhi>S|xcNb2Uy!-w33QB3OmbxU zveu!XE?l9*{oI6E$TheH1mcvs39)GJpWqfSo6=y4B6D?L1nuK@VnGBlfLuRNyo-Yu z>UBtsm@j^Yd`22~s`rh0gTUVR0fec6)W3GWR!^%)OtMDUNp5_01fk2}Z zgrk{|9UT7HI3MwL7Z<3yOJo~vzb(mp)4G56)p{eIHp#lI$I+epi0O5YM@QTt+ut`v zQ|lO7W`kPyI*36ge9fQ8RE;epqmNRT!4mZJC(HnyBnuK_EE8Zny~@p>ilqY(EJ6dA z_|o?-k`xVXH_PcBDCV9W+MP+!5MUB?Um3n7R@VzJ$hvguOT_ogJDdFFh4k5Ja(1C} zE%3xUaU0Kn(uYiUiHxXOmT=ouikQzD|6sS-o9)07Fm zKk6wd_?gR|L`*BX`a+*Yx8)UQrms$ZN||CF7*>`FN_g4b9FJ<4|9QiD%yh;?RA5zKPnQI7@TzA5N0bxj#11j^NfGcsLGWAe z4NgxIIq=tXU#CtX4r{L=DzRVZn4JsNku}j_>b!9Qr2%>y4xyF7*lfd`chUQ+IajCD z#g78Wr3u+SNMj*#T397fB9BDw-07f$n{eOD35Het^cI|JL?09eA{_IL%T(ukac-`u z>F|+b3_fhbsvFKlpBkB4*^h+FHoXBCcfEeUF^5IEgCX-Bkqs`y`Ff2JWD}xd&Xo4P z-gw=5E(j+~p&crvIT(V3764$)s$^JKm?loilBvW3Se;Xjk@dS#PJ9(v=~I6_=sB2W5c!R$9yIhFynUPKD~iviD)=8K<;r z(5Tf`G1baitp`%xynw*|>dMz81Np~lm|dQYyH+}A&wk?~Iz)QW{Di<*`G|h|hIwvA zR?7?$F>kZ*uoN(}Oi>4?zHf+gl$Vq5PokGnT@g=U{RstvS86Y{<^rJK~%n14-795~fj}U#%IQ@;s_Pex|m9!Hi;779VM5=5Zjb;PXO?a;CH*a(F zX*!3qlwQVc<4l#^w;pBs57cf8NT~N|W8>q+>@FT}*G}UL zJ5(!)Vq%gR_4hL6LWoX>8$H-7`3Cx%OFBNbi?|D(>@Y&ph~FljUUUSO_+P2dM26<+ zN$IgeVM;-Z(P!J=Dt~r>;vVsK&uoypuYs7f0U zZ&f__w$>E?h5!5b@39{Zt&~r*ks>u`i=26Din7JHuMGWaf&Cjrq&x9=X0_cYjyC8B zBrAd>i{3t$Hevl;wEhaXJfcEmVpoi%2udOVfkn7qMZ7#E00CU%!L7Ry0d*K711hFkZ37W89VQ*7r!1?+naCP?)3=Q&7f!NSp#o3}Wgowyc zROE0p+CF2{cMhFkKDgL%Y7qE^nE%!rVEeN80t@xB(1`m4?~lg)k*PS6U7A^)JVv#K zabHIY%jB#U0Q`|(QOsOKk*cT%cA-SOB+K|PeyU5;wyE;PUrvD61B5BWPZIvcPa@{W^eQpuDu-B&jxqV@ zh4$4Z0p!aI)cV(Ftn_-2yu@24@Upq0Q$$gHiKT_*RAPGweLy#Ls>xR=Dv2i8*V4)j z$jgqH81V~@OFPA=-S7|ICx_>IDofB~&&zh=A^(neGF;Qfn0Nm-*j!i8cdXUNoh4;Bn|w*lO>sR|d6+z@Qr)-TsM1^ZQ+~gRzV4Ea z+(>h{_!b_$+BrR`z&eM)9q&9eQfVjjlcoqZ8$S6xq1WY_Fot%Y4;QHgOg_YD+Fw@S zUhgqp#ZyN8F54ch(hu&cHS6axc4PmIaE7Wnr{6-xAwh$Dw1K*{;R{llZ4x;RgT)Kd zel_+Pc)xk!!t}RW>wa_Eb3d3(4>Y|GrNn)U?hIb~L;Fyqs!rX3g|kD5o{aes`kqR` z=Ucn`aN+!l;|yAQ8Rx6}@#rgiFr?wV%91NBkPt}REnmF%{t$v9G)XDC$>t{AFT@Kl zMCqVzcbC3%2UlDdh1g+%8k&prJX_s)lT|hg?tmZ<`Ajlza&ia6;F&z^k_uXx1qNoN zjzoU>9a`dCUZvte)eO;v5?!0h?5o)GnGI{Dr2#&WBlDJjujlVN3Y|zJ6|<`}jw_z@ zxSC#unb2JPFm4SI(+}%Xv@-G4C50K4hd3-`NxdTOqse3YSc@g8w%$&1 zcM#S}vAtBJB@K{g@wdM`oru5t4SC$8 zf)xKnh>a*x-J3D}^!x(rkn!+;xl?19pce;6-qMkLAWeuF2|IWWDJ><4DA8B4=Mn$j zb@G%JthXekcP!NYd}YfxG%0jp2WMnOupNta&3p0J*fFRJU7^>awN(y@i3KeMz-+1R zwk&p@zPh%D?L4uMUTUwvg+d5uw~ApZf(dTf_VD453Pwt62I7>oV1}u~&4|5SkpFDK zt+Zg}OafK4e-`qqr67iYmF!>f-B)6ETTqi_V|^+^^J$jWWMB{$|~FhzqPO&6uLF2s}{UxCp$C$a8P+WIs#2 z^h|61W}cd1I+bN|%k!atG;(5x{Zd~(IEvwevT2^Rb1c>+Ln(|qJ_$cE{ zfHAG?A57Zw_`hn#8!mxo0t}z7OkjE0f&Lr8n-E9hJ3636oOlQKKN`qRqchtx6_0V><>P<4^2>jflD+%Jg<8xXu>-HS{MO{2GBMy}k&*wyPLCnJrojG( z>>g!oFOGn7*DT^V>(D1%O6O!oMats;=i=_|W6uAzjfS=gB3Wt5mVaVF&~(3C>(2a- za`OiN|7x!y2gZZB>!n^*n12wP{rB_Tjs+8;?Eh~u=sq=!|K7phI5#q(p2B~-KI{{M#lahd&JAUL(Yt_*ES~kKkZx$nmx`1ufN!y4Et>~kG^}l za_|t$t48~J?M24^_UoItubragB#P6p2$P{=Wf=>_t%kF7J#BimJqkIc4O;$23nJwW zX;KCz-SGZrAemK))NoObh#@SbliXVxcJSUx_Ghu{zY=suuElT za6GmPiT&tT!KTB*0&%<*0H`p85}k#cpZ8l9aB*TC=+h|o+;J=H^&DJb$%+>#mN#L} zn&zWqB_2iKc7H#|+?REaMRjvE!9OmiXUmd53+H?HSNdH4>cp?CJSr~lOB7*`o5?@w zLiFvjUt2>tD>45xR~x`aV5G|%S~U6&{GQa<8@S=|Im-|Wj~j{^4j?jUII0w?*y zO9PUgg)dd8QnS>_(-hwi5SK=#*@Whm2aL%7h;+r0q7PSr`{{9t(zd0stu`BK3or-R z1@Zehe3^eRijb*@i8)tB(Bm|`#id~q$EN$R5~M2@^gtax3M49pTEoU6l9d6b2ULkC z!QfjQw&vSC557q4{`{(hV^b%m7{7jujrfC2XvWyqWoj*PBE^m)B=n_br=77pW5{^2 zmf*#fM;l$=lm2lc#F2FPK*T5wb)~dBsX(<~xgnV~> z)v0J~2o5uB;2L30AJMnRo|<&|krPFW)Z#m2WM*^>V0hW4sF1FVdzAPbvZu7AiAy)#boTv?SZINwq`4o;(D+INit~vig@%6aQ9$3JjJRN0-{m6beJ zu^#W_I(rs8>6(UYw;k)xx;4NOD;xja3N~J>fGnv8xMbD*=PSUA++Ia;3^-jV7j-5! zH@W8U8Ch+2hvXNf2etD~&p+M1b#o#lf-*XVV!u2$wA!ChZp1snv7;F$Lafa$xkOqC z?%H_HR$u(0?so20$DX4&DwZ~n57F>JACs!0uP}_2koP~zozCqoLuTd6fl)y3IG zC*%4?XJylt-cVAhg#vvgfAG{T9~Rd;`WX7<+lg(`hf{Q9%tqjC1t)pWL$%$!eaf`?jKIh zs_^3q9oA$`jb_LA>SD%~H1_K#g7shHME4&Tik-DW%HSl_uI&|}w3wgK!>pn+Bz4P! zA%>0Le?8^nRODhs@tjdVcmVeH_VVkRe?VV|q)@r*6QGV#O~T+R&d#TvT`DmI!h~68 zhto~_pnG@n0{W6R8ur0uO%iC}LAv zIc(mxr)f@A_4D^tY{Xl!!9lnSEx|#gi1oh#0B&y3z!!TX(`AeqLhun1#5F_s$=Zok zWlcgveYw9nuQ+(U)7w2bXijBSz(|<4?PIX{B^18$y@rPSuP1J!rDkyWqDyiyu21fVV%Crr(ukp~m z3;jDn{!gI1`%}#;)F?wQPM=N@FN==75IS|-Us!R2LiR2)VVm1-&bpgJ6v_;WJCm6djYJ~m z5oihdGppR6G0hNNA1i)$&mlLVlR?%*lRL{a*g&)&^RrV$zO#Lz54XexU1^Iv9y&vv z$f~ju_2K>t($uPE5LpXwQbYE}R~YH2q(^CGxII=7KpSq?bbi)MsHo>(;AJ+qYMhc6 zcJ+~H<1B|ZE>tGB8Yle>4&(?Zu8oW}eqJys*f6PesaM!nPTwzzshPWwnyWj3f8ZV* zpoDcBS_H6LOBT)?=eM7HCG)pVXe^)O$v?zPNLd(S`i^^OQXWCTE#xB8u2CV0ua?(B zdmtSb&>bUP>Menm%)Yp^#9H|+=LSQq=B1nLQf+=-+JvUa#_Xl)Qb~p@f5d~!)127D zU31Rm5PI2Z@E5_nmcmldb%EW&qNOL;HRZ+sSXf`lojHk(4bj8t0teM zYYMWFa-ZhaU{jf}U_!+DjD{-7^g4g*c-+(AOZgJVRLEB%P2uI4nZJiS8}Ug~(-|gT zOdek(p)hDCe^_pM64O7PBe);Vv+dL)A_+&&*_XJ=-^ZZq4)OSAU!%<;r_?Uu&5S1O z9M<4{<>PieZ+5rm;hlDKRM1UoU6lvP>7?D(^$hB8yEfyw8Eje7nNQ$cPGGH{npYNC z+vm!9X@Q)^o9V8ZLSuSYOh3U$W~Vf?vFcJs;QMas6c1_1R^ure+hs>B@~WzlZ9RRp zcE-;3znQt6EiEoxYYZ1>suSWI+%!6T6EKj%2V>rCicBZ`rL}AmMk`faF>>B{u)}q8 zt})udKPtp1>fn`j(2!iEHmjhZEDf@!xZ>77u9vt;>(0RE-W^Q330nTMFk{d1WRH;?WS;WmjJ9*0G}_yM*L| zZu9HZd0Ih!mDX!c+5v{gVFn|ekc`Rn(<-zk{Eu^g2$>(L^q&F)z>9Zz&8QFqlCwM?Gpa33GE zsO<-&+BUNb>`UHof{TDrT0f~?MlTH2ms}&tKWk3A^H(#WzD=hwV~?dOB=bMH#(%t4 z+iBz?CTXMlWKo_qgJ!hM(P{Nd$W04B5t)h|SjZIB00zjPBkQ;Y9+cuTle)*c;+$X5s9Nqzrqf`#H90OukC^DY z%*ptUEMzo>UsO|dmC*-;6ds{`s@jz^pc%}QIG>XUZJn3eU05D@j`g43Qd3kUplU@< z-TlCVt+y@&%@mh~z=l)fGw_ZJ#zD!u(*Ox>WUU__$(0)nR@wQ*L2oh3;j*I298PBG zl8(v=@Cmm&^nJ^6?fF z`gFhXg=t)o!UX7{euP$e>AMUZHBD|88r?DIzsrEnX=#itaR?7N{n{5zY~tehzCv5` zepob1WgipiT%SwE$s|<;5-q^$zaGaP$CK!~Gf7$&8i3nX{xKhkz^dzrvC3G{G;?`| z5DDUz;``HWh5G@^#ovOCYOW^tS<(CV%MUG%W218GLZ1`*L1=k~h4S>HTo&rylpN9j za)#b|6wTqiTpBmG)d5|-?9)C-}Ut3&z7G=q~ zC~3b0rNy+|K+;nBP&S6R%zNqkozww##&M+xEfLaq$=~j*@PYumt7pVHqW665<=PM`Ou_c@?b);mJ)!w8F(~Xmir^B@VdaskitAs`5(0D2iPEfGQtM{M<@IPM56xuD z!^8Vh-EKs)9!5Nt79#|8X@ZIGSfVcf#A4Vhtpb#JUz2;%;LsC_6=- zHH@CY4*sNk5>H!Bga(O2gj)#V04Zb&gb_#pz3WO9@%k@tPjLS~@&@ zlj)aD`0(UU>DYE(Ppxz%K@Dhh$yo#fsPWm>8O6; z=-O@%gcZ^iC^gN{&mz7fsD0hK6rtEIM;u1FXV4>drNNcO3LmC%b zC^HBw)#FPkzgo|ErqH2(%2Wj3`U&ey{dYBSIYBTZh>-kCjtY?=8y5R7$rrrP_M zT5`y!k<8T9)q-oQOY=g*2$2n+;ota3!b#{3qtkpZCU>R?FbrT8mheQ_jPRO03Ck zkC^|^Yj4eFeiT_&xtw(u)g+umr1{CkCgYrXHWbc@&n-f|yiK1Tlo#_8#-ljI(FDGt zHJUQuSy3!OnuQJf#CBr7}k`x)!4Q4?b*w z0LyJW>}^;=E$fu_eh(Rps0NP}nP{t8{AMCWcfGBq^8CDMXxNq#VW=i8##^aFT3)m9 zs=>T{Syn{_v%I{#wzk%D-`vtNueEi_bM)Vl3EoIwN=t-p6Ccn~jcz@?lBIqBcgZ$- zn5_B~mZTInE@$mn#?OY*>d?_qw6bRuwbho9+n-|?fI5~!O)|4~o6=Yo$J%~Lo=q|g zDRdj&&Mq07 zsg4O}YS}kYb<&JXW`u>MG9@O-|L77MdH3k=_|h+>e~Zv-m1wN;Z4;Mc9G?-)XNh8A zfMoWttE#=bokepB>F2`cTkB1UhOT!OneWISQQAT}hJ}XxYigs&x*}brM5#Y>ukXIY zD(GuuNrE%Oty?}~WoI8>ZjVo~4MW_iWNg9fsjg8O#a#1wk;D?jsGSbpFlyz`)#uU{9H zaWQCQA=Vj{fe%PxmAIDN+<300mA09fnSZZ$1@i-<2)QX?mW=G|rcoFcOw<1crg~>w zOcI{QOK#gtGcUKOkBCE7|)hYQrsj1=N_Y&Qt1u^fpiS15i2`T-tkbtF%l)t@APh^<9 zZFS+8L4)}s1{Dw`aduoIvUoWeBbw1j6G}5Ibqy{3`)A$))3;@!e@@3nn7N$O2kuM^ zRSUaKP|jo=HttOdu+?5uH;3se(PKF$E%}b+?%)HA6qCAfwM^DK{j~KA$cRX)nB_RJ zx;i+AZtEg+wX20XFqdey?YIoHAve3u$ zv5WLjvtevXWA5sZa22z^`*@v>==e7nk#PFrLr|) zsh?FhqW$WqAN(ojeO>;O^k$4<6kYwCiG!QWYmJ5DNr5}Lmwd%eKS~RGW#cztM^nXk zPFC^=%}R%Rd|(|leyOF^Ek*r%Vnkmsnhi%qKSA#Qh_eu-%-y<5{jnxsXy_i_bva+$GuvK zP_F}{ZQ^*AKP&l4S`bcohXUQ-N6zVPMQTnIetJRfXR3-RQdA=He4buvEfN5`Ic3en z1yWcHW&Uj9fLr?AQQO!ytqTCLcu6AyRm*Ika`vD&rEG3SQ@}DxSy84bVUGNZ6uotC znTTMda*0EtehJv$xmcezHRd8HfeIXRI}COO4S#9XqO&MBNHbO(m3owPRYAt814h0U z_Pj9gkcfzDNGmBaWL&0=k8=-^kU|QAH>8avwYFblo&G?LW+Z8>R+kqhZm0tK?6^5p zw%J#d{;AZQ&N1uZM(bwaZ8Rmzb^%1`;xeH#cKbmE^1)cc3Jamg(&VZ_6CN48QnoFuBNnH;;lOsU2zY6`3j&{OufR9=fw)|QQ@b+tDe)^K< zGqLO5Al$*=^z$bEuF*7n@t=b&kJX1)xHWIljDMuk=gD%~ktn+FWrP3Vzy8tj?xiU} z{=yA9mJzu1S}sxF_;=ZGC7LR6;;N?hO`=fbeX)#50uHUs-=)*E zN?J|$7dS@#!dR7f+lImh@4yG9Oj)1eQyQAuVy=#Vtwi>UAmr#uUqJ}MXX@*s&LHWU z_n4j9N+29PS99F|hBv-wE}`2E;urO36pMdN;Ekw-oOteVt7m!NgW8HD|7S`3pJv+~ be(}GdU+hj|$nTi^>-7MN%8FD7>HGa3$D$@V literal 0 HcmV?d00001 From ab380bc58cb49a1edb21b1931a31ea9e3e069bc8 Mon Sep 17 00:00:00 2001 From: Benny Shilpa Date: Tue, 17 Nov 2020 11:51:44 +0530 Subject: [PATCH 035/486] name changed --- ...ine-default.PNG => quarantine-default-audit.png} | Bin ...faceindex.PNG => quarantine-interfaceindex1.png} | Bin 2 files changed, 0 insertions(+), 0 deletions(-) rename windows/security/threat-protection/windows-firewall/images/{quarantine-default.PNG => quarantine-default-audit.png} (100%) rename windows/security/threat-protection/windows-firewall/images/{quarantine-interfaceindex.PNG => quarantine-interfaceindex1.png} (100%) diff --git a/windows/security/threat-protection/windows-firewall/images/quarantine-default.PNG b/windows/security/threat-protection/windows-firewall/images/quarantine-default-audit.png similarity index 100% rename from windows/security/threat-protection/windows-firewall/images/quarantine-default.PNG rename to windows/security/threat-protection/windows-firewall/images/quarantine-default-audit.png diff --git a/windows/security/threat-protection/windows-firewall/images/quarantine-interfaceindex.PNG b/windows/security/threat-protection/windows-firewall/images/quarantine-interfaceindex1.png similarity index 100% rename from windows/security/threat-protection/windows-firewall/images/quarantine-interfaceindex.PNG rename to windows/security/threat-protection/windows-firewall/images/quarantine-interfaceindex1.png From 390633dab67119ef5e88425fcdc5f0eaf7c7e093 Mon Sep 17 00:00:00 2001 From: Benny Shilpa Date: Tue, 17 Nov 2020 13:32:45 +0530 Subject: [PATCH 036/486] Update quarantine.md --- .../windows-firewall/quarantine.md | 45 ++++++++++--------- 1 file changed, 23 insertions(+), 22 deletions(-) diff --git a/windows/security/threat-protection/windows-firewall/quarantine.md b/windows/security/threat-protection/windows-firewall/quarantine.md index b1f76da025..59f4c6ccdf 100644 --- a/windows/security/threat-protection/windows-firewall/quarantine.md +++ b/windows/security/threat-protection/windows-firewall/quarantine.md @@ -1,8 +1,8 @@ --- title: "Quarantine" description: Quarantine behavior is explained in detail. -ms.author: v-bshilpa -author: v-bshilpa +ms.author: Benny-54 +author: Benny-54 manager: dansimp ms.assetid: ms.reviewer: @@ -19,15 +19,15 @@ ms.date: 11/17/2020 # Quarantine -One of the security challenges that network administrators face is configuring a machine properly after a network change. +One of the security challenges that network admins face is configuring a machine properly after a network change. -Network changes can happen frequently. Additionally, the operations required to re-categorize the network after a change and apply the correct security policies on a machine are non-trivial and may require considerable CPU time. This is especially true for machines that are domain joined. In the past, the delay in applying security policies during network re-categorization has been successfully exploited for vulnerabilities. +Network changes can happen frequently. Additionally, the operations required to re-categorize the network after a change and apply the correct security policies on a machine are non-trivial and may require considerable CPU time. This is especially true for machines that are part of the domain. In the past, the delay in applying security policies during network re-categorization has been successfully exploited for vulnerabilities. To counter this potential exploitation, Windows Firewall will "quarantine" an interface until the system has successfully re-categorized the network and WFP has the correct filters applied for the updated interface configuration. During quarantine, all new inbound connections without exceptions are blocked to the machine. While the quarantine feature has long been a part of Windows Firewall, the feature’s behavior has often caused confusion for customers unaware of quarantine and its motivations. -Ultimately, the goal of this document is to describe the feature at a high level and help network administrators understand why application traffic is sometimes blocked by quarantine. +Ultimately, the goal of this document is to describe the quarantine feature at a high level and help network admins understand why the application traffic is sometimes blocked by quarantine. ## Quarantine Filters @@ -39,7 +39,7 @@ The quarantine feature creates filters which can be split into three categories: 3. Interface Un-quarantine Filters -These filters are added in the FWPM_SUBLAYER_MPSSVC_QUARANTINE sublayer and these layers: +These filters are added in the FWPM_SUBLAYER_MPSSVC_QUARANTINE sublayer and these layers are: 1. FWPM_LAYER_ALE_AUTH_CONNECT_V4 @@ -49,9 +49,10 @@ These filters are added in the FWPM_SUBLAYER_MPSSVC_QUARANTINE sublayer and thes 4. FWPM_LAYER_ALE_AUTH_RECV_ACCEPT_V6 -It’s important to note that any FW rules customers add will not affect the filters in the quarantine sublayer as filters from FW rules are added in the FWPM_SUBLAYER_MPSSVC_WF sublayer. In other words, customers cannot add their own exception filters to prevent packets from being evaluated by quarantine filters. +>[!NOTE] +> Any FW rules added by the customers will not affect the filters in the quarantine sublayer as filters from FW rules are added in the FWPM_SUBLAYER_MPSSVC_WF sublayer. In other words, customers cannot add their own exception filters to prevent packets from being evaluated by quarantine filters. -For more information about WFP layers and sublayers, see [WFP Operation](https://docs.microsoft.com/en-us/windows/win32/fwp/basic-operation). +For more information about WFP layers and sublayers, see [WFP Operation](https://docs.microsoft.com/windows/win32/fwp/basic-operation). ### Quarantine Default Inbound Block Filter @@ -73,11 +74,11 @@ The following describes the general flow of quarantine: 2. The Interface Un-quarantine filters will no longer permit new inbound connections. The interface is now in quarantine state. -3. All non-loopback inbound connections are either permitted by Quarantine Default Exception Filters OR dropped by the Quarantine Default Inbound Block filter. +3. All non-loopback inbound connections are either permitted by Quarantine Default Exception Filters or dropped by the Quarantine Default Inbound Block filter. 4. The WFP filters applicable to the old interface state are removed. -5. The WFP filters applicable to the new interface state are added, and the Interface Un-quarantine filters are updated with the current interface’s state. +5. The WFP filters applicable to the new interface state are added, which include the un-quarantine filters for this interface. These filters are updated to match the interface's current state. 6. The interface has now exited quarantine state as the Interface Un-quarantine filters permit any new non-loopback packets. @@ -93,9 +94,9 @@ Netsh wfp cap start Netsh wfp cap stop ``` -These commands generate a wfpdiag.cab. Inside the .cab exists a wfpdiag.xml, which contains drop netEvents and filters that existed during that repro. +These commands generate a wfpdiag.cab. Inside the .cab exists a wfpdiag.xml, which contains drop `netEvents` and filters that existed during that reproduction. -Inside the wfpdiag.xml, search for netEvents which have FWPM_NET_EVENT_TYPE_CLASSIFY_DROP as the netEvent type. To find the relevant drop events, search for the drop events with matching destination IP address, package SID, or application ID name. +Inside the wfpdiag.xml, search for `netEvents` which have `FWPM_NET_EVENT_TYPE_CLASSIFY_DROP` as the `netEvent` type. To find the relevant drop events, search for the drop events with matching destination IP address, package SID, or application ID name. The characters in the application ID name will be separated by periods: @@ -103,11 +104,11 @@ The characters in the application ID name will be separated by periods: \\.d.e.v.i.c.e.\\.h.a.r.d.d.i.s.k.v.o.l.u.m.e.1.\\.w.i.n.d.o.w.s.\\.s.y.s.t.e.m.3.2.\\.s.v.c.h.o.s.t...e.x.e... ``` -The netEvent will have more information about the packet that was dropped including information about its capabilities, the filter that dropped the packet, and much more. +The `netEvent` will have more information about the packet that was dropped including information about its capabilities, the filter that dropped the packet, and much more. -If the filter that dropped that packet was by the Quarantine Default Inbound Block filter, then the drop netEvent will have filterOrigin as “Quarantine Default”. +If the filter that dropped that packet was by the Quarantine Default Inbound Block filter, then the drop `netEvent` will have `filterOrigin` as `Quarantine Default`. -Sample netEventwith filterOrigin “Quarantine Default” +The following is a sample `netEvent` with `filterOrigin` as `Quarantine Default`. ```XML @@ -186,29 +187,29 @@ Sample netEventwith filterOrigin “Quarantine Default” ``` -Alternatively, If the Filtering Platform Connection failure auditing is enabled, the drop event will be logged in Windows Event Viewer: +Alternatively, If the Filtering Platform Connection failure auditing is enabled, the drop event will be logged in Windows Event Viewer. -To enable Filtering Platform Connection audits, run the following command in an administrative command prompt +To enable Filtering Platform Connection audits, run the following command in an administrative command prompt: ```console Auditpol /set /category:"System" /SubCategory:"Filtering Platform Connection" /success:enable /failure:enable ``` -Sample Drop Audit with Filter Origin “Quarantine Default” +Sample Drop Audit with `filterOrigin` as `Quarantine Default`. -[image] +![Quarantine Default](images/quarantine-default-audit.png) -Once the drop’s filter origin has been identified as the Quarantine Default Inbound Block filter, the interface should be further investigated. To find the relevant interface, use the interface index value from the netEvent or event audit in the following PowerShell command to generate more information about the interface: +Once the drop’s filter origin has been identified as the Quarantine Default Inbound Block filter, the interface should be further investigated. To find the relevant interface, use the `InterfaceIndex` value from the `netEvent` or event audit in the following PowerShell command to generate more information about the interface: ```Powershell Get-NetIPInterface –InterfaceIndex Get-NetIPInterface –InterfaceIndex 5 ``` -[image] +![Quarantine Interfaceindex](images/quarantine-interfaceindex1.png) Using the interface name, Event Viewer can be searched for any interface related changes. -To enable more networking audit events, see [Enable IPsec and Windows Firewall Audit Events](https://docs.microsoft.com/en-us/previous-versions/windows/it-pro/windows-server-2008-R2-and-2008/cc754714(v=ws.10)?redirectedfrom=MSDN). +To enable more networking audit events, see [Enable IPsec and Windows Firewall Audit Events](https://docs.microsoft.com/previous-versions/windows/it-pro/windows-server-2008-R2-and-2008/cc754714(v=ws.10)?redirectedfrom=MSDN). Packet drops from the Quarantine Default Inbound Block filter are often transient and do not signify anything more than a network change on the interface. From 84df09adee64819e05f796f9ec2a4056081bd754 Mon Sep 17 00:00:00 2001 From: Benny Shilpa Date: Tue, 17 Nov 2020 14:09:04 +0530 Subject: [PATCH 037/486] Update quarantine.md --- .../security/threat-protection/windows-firewall/quarantine.md | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/windows/security/threat-protection/windows-firewall/quarantine.md b/windows/security/threat-protection/windows-firewall/quarantine.md index 59f4c6ccdf..ec93d0c0a9 100644 --- a/windows/security/threat-protection/windows-firewall/quarantine.md +++ b/windows/security/threat-protection/windows-firewall/quarantine.md @@ -1,7 +1,7 @@ --- title: "Quarantine" description: Quarantine behavior is explained in detail. -ms.author: Benny-54 +ms.author: v-bshilpa author: Benny-54 manager: dansimp ms.assetid: From 02f0b7c9c17ef086e30b4b2e83c1f0b023237440 Mon Sep 17 00:00:00 2001 From: Benny Shilpa Date: Tue, 17 Nov 2020 14:13:27 +0530 Subject: [PATCH 038/486] Update TOC.md --- windows/security/threat-protection/windows-firewall/TOC.md | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/windows/security/threat-protection/windows-firewall/TOC.md b/windows/security/threat-protection/windows-firewall/TOC.md index 34b7c1beb1..3bf2022518 100644 --- a/windows/security/threat-protection/windows-firewall/TOC.md +++ b/windows/security/threat-protection/windows-firewall/TOC.md @@ -165,7 +165,7 @@ ## [Troubleshooting]() ### [Troubleshooting UWP app connectivity issues in Windows Firewall](troubleshooting-uwp-firewall.md) - +### [Quarantine](quarantine.md) From a9a76448a996bb5241765be32a44ade8f3ca0792 Mon Sep 17 00:00:00 2001 From: Benny Shilpa Date: Tue, 17 Nov 2020 14:19:00 +0530 Subject: [PATCH 039/486] Update firewall-settings-lost-on-upgrade.md --- .../windows-firewall/firewall-settings-lost-on-upgrade.md | 3 +-- 1 file changed, 1 insertion(+), 2 deletions(-) diff --git a/windows/security/threat-protection/windows-firewall/firewall-settings-lost-on-upgrade.md b/windows/security/threat-protection/windows-firewall/firewall-settings-lost-on-upgrade.md index 0492170b3a..45fc0886f1 100644 --- a/windows/security/threat-protection/windows-firewall/firewall-settings-lost-on-upgrade.md +++ b/windows/security/threat-protection/windows-firewall/firewall-settings-lost-on-upgrade.md @@ -1,14 +1,13 @@ --- title: Firewall Settings Lost on Upgrade description: Firewall Settings Lost on Upgrade - ms.reviewer: ms.author: v-bshilpa ms.prod: w10 ms.sitesec: library ms.pagetype: security ms.localizationpriority: medium -author: v-bshilpa +author: Benny-54 manager: dansimp ms.collection: - m365-security-compliance From 70f5d6d5fb1313c59503220e98c293905c0af086 Mon Sep 17 00:00:00 2001 From: Benny Shilpa Date: Tue, 17 Nov 2020 14:20:36 +0530 Subject: [PATCH 040/486] Update TOC.md --- windows/security/threat-protection/windows-firewall/TOC.md | 1 + 1 file changed, 1 insertion(+) diff --git a/windows/security/threat-protection/windows-firewall/TOC.md b/windows/security/threat-protection/windows-firewall/TOC.md index 34b7c1beb1..0720ca4cc1 100644 --- a/windows/security/threat-protection/windows-firewall/TOC.md +++ b/windows/security/threat-protection/windows-firewall/TOC.md @@ -165,6 +165,7 @@ ## [Troubleshooting]() ### [Troubleshooting UWP app connectivity issues in Windows Firewall](troubleshooting-uwp-firewall.md) +### [Firewall Settings Lost on Upgrade](firewall-settings-lost-on-upgrade.md) From c19a082099d79f7a6d5819c67531cb7cbcf3d4c3 Mon Sep 17 00:00:00 2001 From: Benny Shilpa Date: Tue, 17 Nov 2020 15:24:45 +0530 Subject: [PATCH 041/486] Delete quarantine-default-audit.png --- .../images/quarantine-default-audit.png | Bin 186402 -> 0 bytes 1 file changed, 0 insertions(+), 0 deletions(-) delete mode 100644 windows/security/threat-protection/windows-firewall/images/quarantine-default-audit.png diff --git a/windows/security/threat-protection/windows-firewall/images/quarantine-default-audit.png b/windows/security/threat-protection/windows-firewall/images/quarantine-default-audit.png deleted file mode 100644 index 6c1fb5c0070afea312826ceec8c33831143177f4..0000000000000000000000000000000000000000 GIT binary patch literal 0 HcmV?d00001 literal 186402 zcmY(q1yq||vo>6%rA3Mqm*Vcht+=}tr$`9yZY}No-0CCSqA+b(Yt5Qo}tUhN~%A5_5%L*34Dw4w}nw`gYWOx za~E|P@n=1ni|_1afcW-biBY}yc{5W`qh^a9s`!7i_FWo5-Mu=PJ5iMJm-QdcVI7O2NPfV|&7 z?~E`VT%9(!-1!i>A1$YIS&l8= z*M9kvfB=!GsOXEAFC(I(H*PQXBqb$3;NteeGk90-W)Q!Bn{@Z|tlVj}eEat7%1KR4 z?eIv`|J{YdMb;u@(tNu#R?BN+R3kZWcz8@>AvadzF4>Mz)WXI+`|x_BRuZ5$T!muGDH^^5+1OG zSm;pmDm!{4L@Z}PYS-)owkrmn!a9#OGxmjG$UCFQv8n;ljO~Dte~9Lsc(|uO89!=! z{UtPht-s*uk-hMjneC^@&Z99dOW{ZS`^w!DnH#~@(Z6h5oyG{Twvu_=>CcF5rW+Oy zpV=esb^p$OfNdw*B6@p!m+|0Sz|sFF>#N@>Ap5D}{|f#e`8U65lsx;ZnSYf*1Q%|i z0c&VzaQ}~X{@ak4nD~Dhe&y@_qqzUf$J7JZ{5$zdEDHE9=`E3am;43WF6&0K&i5I8 z(KkjrPf=+sJhly)?t0L)quMFkK5Lk1qwe9Y(WI^&e=J-;WRGBk^k%D9qrcMkFoG~@ z!w#nKI2-Uo+qZIZfhKF_z_`oQjePsYH_nWVx>sfR2?II@Y#-_D3|g>GZINq-^LJiN zFEQSf964-Lb!b?~uI{FZj`2>4@C?bEx-~X#u?jg^xeVO4Uy91gGB=IuKFO1-J6YTy zb}au{%1waG`2ShUnn?aaXwOIa@GH}{j>k+&ht9r?o8Y$U#G`}8QqeP#yP!$A`jx$T zQH(@6I8o6LX%q&Y8;@GlDMPDK9=hUr)j*y4yj9HCo(J`*UQ|bPZ8y@Ev}Db(0n+c> z^%=*|elIG9@*YS==(+HlH)1=~n|Ks{eJ2FJ+2Lk*?7Q25-*HxVXact$lM{K7m|nT8=ZKI{)kY|nQX<_~KX;J;|-h@D!LVWl$YWgkn$ zCr-8_B2>CJYnIh8VJ}B{-JLpR;i91&Xrb_p*zwUYrFHhxIi_?et7 ztyfG(MxL3jn{i(M`2{Pp*)RNy^qQ_WM@>uyhATOdlVPE@9sM_w_*P>TXAy=ErfWaH zwux<=I88tN)@f0k?|Zy<-N!T$o%*|X;Q?`X;Xpx#bpPutB8ithFkBYh#4=K!$x4kk z0vK_@UTtNVY``+GH&7l#|;ndK9{BkGbxw#<5-~s5gU*$QS_eA(rCd zDjwmvol~rhARfB-VKSf&Biu5S*Rxq(lxH=Zrk|1WSX+3MFTBrEi`;vg+l1X$vVOsm zk0zgUeVVA>Bm3u~hS)Wc3)xw&NnZ+)$|xLOQJIqC&{-}vvBgE$c}vhWgg?*ejAElh zvZmNJ#Zp!KI%Odxkb(6Dg5!1Rv>A2GZ2u36m#DA>l+rNWB^Y)Hx>sq#bSf-f8*6pv zOLsLkcQrG4UAj!pj7)@JWA=$5ZH>|W(UrqZKkd4(G>XOE&fRPyfL=7Ic`g0WPY=K} ztxm}`)}*m-%$I>0gb$Eosx8md;HuZvZ<&hhshWLLegWsV%-9gOfqGr)3gNGqM}2JV z`QEeByOY!zTT$Qb40WqccAbX~8;2D-$rFY7YTE?BhcGygw?=oLPjmW;9aV}M)R`xI z)wuzt(&aDgP_oX4DZz8{=hppfBSttAT-6VFG8rO*jaGl|6OpSn1#rpZgSx&|hrx9B z!=ZYzNt(`wj+2gqeN(oH?`^zib#(RDzw=idXeJZcyl5thS8O>@ z&JgmHbdlc@*_yTLVhhE*UV}JTb+CNnQo}Gf)b)1Dd@HqWG#gzu1PP_{TsZ#7f}goA zOKA@+X^6%>nX1%vuSc1q5Yc+ne8lcbb9pG%Sd^?}(e@uTYOS1ou>@QC8FYGL=j3Ub ztvoa}g;J&nRg3Lh30<%#bN2{OeSzA>u8pD-H|e>ri$Tj2l}HU2Xc4{p7-OUI)vFEk zl^d37nB5o4&wv+uRUn@6)mQYKJy!E(Y?pe*frH6AIp3t?h413thp=ioS%0hEo2(7h z@#+#`AQx=>3k8?PN6FCMe4iB2@AIJdMeCp`uZ=yg}RMX=TqJHll`*BWmqU8|a)QTX@vES+Uc> z%f47%M^?C6$9Og%6cZqQ;3-xHjni@drSjRWCFc|>cb{Qs(;ZkoAS}jXzEZ^Jw$O0j zO~AtBs~iO!X+7BsGYb8vG zuF4hS>dK#!X(%W=Mwc^X)@_Iy_*iWSazn?O@bi$x6PE0TZE|@EJrzOcIFl;+HcX80f zr-6Dw!`QgARB{oh)YSCYD|bTcDzDPj4itLny=aDwJ&0~H%ryt}`a%^l4LHJ4nxm#X z3NRt-)6u34swXCH#n{CABU@VtPUlT`o-hF@K@rIiau)k7mb`qf-Gw^79?V;3PIcBT^)PDW0jE&O`RO-^E{ILO0dh-hM6LPZiqCAD>V|BR9sB=<^0}_)3U2|0b7pT?0e~ z^jh|3y2W!QBXCw8&#yHX$}U?UN=3>aBG#u0ZH;~IeecpC;$EIKETpR$p;zqB$I;)Kokvd_9`0 zQ1A$_?M%tAQcgHv2(Gg2natZPD0mdlLCepi556PqRkorCJtXn9L{nFpvCO-aDt!oN&Sg- zM}pCP)`oIo0m%%Rx_?7}%k8o96GD2XCygr0dLVPN#NT6y^&`Y%tKf2*dBCpm&Qk?# zdF8ObFw@;~MxqGEN9%F8a~L8QajIkMQha3TAJj4((20et0;9_P5DPx%^$_v6UNEx} zA9E2?))Y>(UrNtipE+O}haTQ*t~ihuoNBloU-xLdkvp>YNS5JjsN1_Hxd`9NcCq-8 z48u&X;NxO-v7Rv@+F+DMpwIC+?fE)4I@At3-O&oBINzQ&DDfkyIYv4J4`%=IwNC<1 zlZq~#MLK+Y>Cy2l$-7%KMtziu~A1Ty78ZRlZKA=86Vy|xE3--pcz>fxBgSky)& zDnXd1Cu1;`AKRt*zS_3ftwm^DI`h0v)DImcJ(FH5H@AB#gJ+&(s|IJ7OhG7eI(t+)oI1`#WEU_O%Igjt(kDr0EA%jm6W_q@Na}JsbEg$RC@@?Ry1}86BmAkrPUM%*R;C$gulf1Z6n|KRAaxO&@(m{YIX1w zjd+)HqM>1=#!U}o=rtw?9<*)%e zWox{-*{<~BxJSs!Gf9SQs7J)C76B>6{=Pw~+KSDD&6&FO#?Ig}iwMrjF5??upz@hk`EE zqpV!?@1NgP2snJO6x!pTi&Mr%BS))OBA;Ijz*q%>s3Umu8*5w_O!Zi8PDWkYZWs5avz@y9j6Z{g1&v1eIN`6zjDMb!8~|0b#;KQ>+O)+2KUgY0 zAHZ^tc93*}?#<{Jt)B?FfjCSt=gjFLzTod6OibPrcNs!$*R}Hx8%Wn~|Opa=01#jN8K}JGm+NCQlh_z70wwQ zhUMo4?a_{gW4X-{a#9wjDHePTcP_Q?tLxyV)laO zsTwEE>sa7~m2ebzf$qcjYM-oUgDCDK^7`ua$SF6NrH))aWM4H4r;MvKrTNb{7p=tWS zSfATpbv=6oOXVC|&f9!BzKEz|rnq>L_K3U?Yfjfm|JeEU2=p&KKgWsK9X``7)>rpx zs0fdYRJV%_Jtx+6)6LSb&F16qSuZ>`i#r?MtJd(omt5377#$pb`Q=Z;(&;nS(#d}e zN$0RA1^DH$s9;12X1n5A^~j0eLCbXMOlFIlWi2;fQhA0CJG9SZgV---?<=J=C&kIB zbnNBG2p!8D$5l7_y$Z91^2K7^u1Khu8HBS)1yj1=KymNj`?Y{dZFvC8FriWY=P0o{ za=wHKyOF8icilopt^&j_Se+jK0Hn1TySAH8)mrR*z=})5!-*7!Ic>0j?E3j=>fUQd z=LNoE4D!+3uF5}?P@XZs?I>U-l;YO+L<7bjpj_{40?#ky79=b3I`jVe{&tGL3dHLjNM zXMFY}KM7pFWfd@LK-_V_jR#%1&;1DZxic;3Od}M}w*HLHYH|umL5th17VS7jJV=nv z)Argtw~@Oa^;BV-Z`)8@fhKzn3|h5JE5(_8f;=S12&ks*ufP@-0WSCXXDAq#rbAHK zK*`U+*=b`HjIVF<)K&Cc$ynDrI97;L^Fc#cic2ow0*E$y`A!^V;p*?DQ>8ymCfp;J zwm`clf%|hskq+i-9IdcX)9|-XzX-6>cxcl4MAvy+N4md@Z4%D5y$c#IN=$N(^iuL+ z&mX|$F%<2)78m7oI@4vP$wuzp`fofrlh~+)toO!^EQP8MsQ#!LX>0yLNPXv{3O|08 zqrIp2@SGF0xA@Jz(|6SDbr^?j1{*4;Vie{Qd=Vw2gw|c#P9!tWsGUHdhS6A9<44Y( z(pM=(#-Wt6{euT8mVl~Jm5VSgM-$ODfs}O}LfM&v+C+&w=yK*Ux0ZKw?jw9(UDk^F_2{50<(yh11(uS-M(Cg$%_^5_$tYR{bC{F}B2; zrAuNSx^F(xX5_1u$6yqM@_VKe-)yVmD zKK0qfI~q!1+>GHCOL zzioNMFpgnrQ60H0ko4rm?9(&)h5u*faB^vK^>Z@^z6eeMNs1gxL=x*XyRSm0AC`ef zA5NPOZX%Pf^v!<02vzMH%0Ao#otQ}t&k*EG{y!ardn43VJpRx~P%zO`y#t45{AV}+gi9+h1-#H@*zDZ<}|;J7;jKvo}9 zFUC-4fm)A<1ishiHxhLLTC`^zCk{r(IAX9cndMFhGg$vMsy#jYz-U2d zh^)|ir^qfQ(_UignIdf#TQgqVf%6=@HQng7Xue*-#ArJ~w37tYDm@~ZmTUY&PP_k7 zGUdy>#QpT?U~+VaNhcX>-sxJ^by)%4s9Ux+<)F3Jg+xqQ@EMaV}=j*3qJT zJ5^=B!J7mbDwHrt0=*Lz1(#uVDxbx_;VZF~kD>tDu|#&>Gf3?zTDnEge-zGX7;l$O z-ZlI3qg_Pgg3o2|;b*n6j^(i~*JZ)W(ph@~i?Ez-`&bJ1uZFjEj6(zU-l}7J%veKm z1~~><&;5L+OgBG{W@MbI6^&__L#ODU}o?g4l8c?%+Ptc7NF+QQZ$#21*%bK+DZ^ef?Q<{6I{zsCKyawDlPTnhxpqbb=VZ)aQt}c9%9%@nTE(JD0Gi%DV zErvKmZEA5)ovbg^V?1^C(j#$tT>7TJsv;wedWMIDy>`NG4Bp1+c;Gl%j7awDJOt;3 zVK?Jt(5_rwVxuQ6u;w7;Vw?IqgnjsYO&K4C9|qYRrY(B4-k%VL=^8+IVnnREs1ddk zzVSg^K2yigS~PxKCDmao_vn%l6&3%XZv~~!#XnfA-`u@P-k`yP!?%oo2NHQ65+h?1 zSDEacV?Zx1V;~k)lW3wJqH^x$V2=5LcoS+@2$hRE&|t2+NC4zBT6Q9^>_CrVr(O=}c7aU41B zBa5Y)GT)LE9ijUV%^_hMi015oj4*J;8tB^S(#I`#ZDfYPqfhaN97FA%!76tskP=te zl>XbuUK=Q>_0`LUTPIeAi&(drtL~HpxeA1CLj$L3!+>Hxi7a(bslRf2BdEhixYls= ztq7mQq_FrJMcBOijI6ZvyOdt`id1RU)&a^kJj0L1o~QSI&XHTYfX7;{se4I!l(9U8 zcK^CR%`plSA{ADr^rR45Qwz`wtZiYN!PfB>1pr%Te^DAvCU`Zu+NJ*MWznY>TpBe9 zMulKud_H!=h)8k*cj|WzZsRFCfH~fC-DHVjVaeA8v7}iSYT6*Aj z2u8!2RHIP%b1wN+0DYlrHJmv3kXRgQYWAgRF05%3VB7E|BJ}|6?);73Oj>Vk4POFV zbm1*ijMa+GOGt0|Fz_Qz>h`RO=>TQjqAks1zrii{o(!xiqY0P1zXi`CU9gji1tk`8 zuY$v$=$g$RW5Zr^_9Z0*%@xOm zj&>k>>x^tk*N1lb!A9ED6c9_S@yCE!l&wtUJp8;UOz2@qwT6sF+MecS{jGJ|q~!kU zAR$((we}nr%*I1Bg!VEA8?H~N`-e{NULaE{UwlR>mypEF;;tBgD<*hZrhD%my{WW2 z#U6k|Yvl1^4X-Yhzr#_e@~qBe^@5%-d(gyY2LOI#4?BaRQVYNw0OuwRf^w}5-~EC* zdOlsSmv|Ex{m!ah;y3|^^x96`JH4kxC;-S~DX3j>%KI^Lr^j9Rt7lIH)eC1Iud~6@ zOjqD7m&`E=@Lfe)zf?pb6R~C{F63z|BU5RZn#ypU8svmAK_XLE=ddReIq7$AbUADy zGJ_R0)13VE_3&iv;;R&tzu74gshOOx$$&*Qto_n;n?%VGEWGJb1stePLO4)(s^YH` z4?ur>J;98h%TLG8EKaSof_h{`M6s?CY`&jtxPPPw-zA$@>6hwaXc6SZJ)c!wz(;uGMbI}#Y<=33=4rLa%mB%U)ALW;gd zpZ5h^Ub$vAhowU{UK})?H6ff+L9Em9R?jh_FPWI_7LvMRb~&vEg#76zlNXlSA}BL| zRuHotF@Ou=oSd!k-w`fy9hDIkhJ!k|Z8BKEKFv}gb8E6~GaAg%kfx3fHYw+N^Xb|5 zl-wFneNswo4SwzomfH&lg`5WyxkzeC`n2-BQ1;rfR-wDaR)7&na3jJWt32zPRz)Wz zR1zD^>O>*HE3%y0PKs7X*a!~kIC&}t;YreCH$-Y_gq=u5K=;Xvqhrr_xDF+0cZR-x z8AHqKs@a*oEh2>3=$QUId1c>^h)vAQzZv$9NHm}!C|U1KlRy(z3yzg=uVq^opzsM( zt?PY-chsqz?>S2QV(4%YKKNo2R3Pb65}tQPRdVahrFXU3t1DL!3^6qA_7UTz^|(&} zW@Jjz`M??^6i^zhyOM0~K*qk$h_CF;Rw6CXSZBbbyb#rLY2%g)M6a7$P{FB#BmHVd zKYQuP8=;eCLNrKnj+qdCr_4uB%kj{GqH!;kT(|Gu znw3Ja7x9k<&E6l6m~@)g@x@gCpkv+jlwA92ES|42_spHQO2WWaMv8ZIkx?L{krdB3 zkh}Szh5C@O6+^z)7|X;x6+D2nKk#@oKpe0n1<;psEBfH)%_7)>yA2`KnQzK{6D8fa zb%&)B5zf16lu&>o4}8Dll%cy^g`*{U*bOKh2s!4e*j)f;e_D7yA;Y> z9KGfOc8J4^Pj%7gjLJ4Ote&L=m$UDRH-PY-*O>ugW~A)v-xequvsRJG8uoag38u9R zA;<88(w5`$og>?ZRG=BH)B+n&_b!mTzKiFP?|ZG&r=Uba*A z10|T4Ud@RSOp%Guw9mz{IHxjoD)?;VZhe?Z+9>=g1@_L;=A=F_sZ2O#W`feTd;8aEvq!0sCH9C#?w?fy%P-S~JQoVQU#-Ivn{b(Ufo>+w ziGiAbX0!9rd27$)(Y_97*LGMrg(@BX)TzXq3K-(H-Qko~!zr>J38(X&dmF0h7t!tK z&VH1XKAL1JX4MUn!@5bXmm)J$Ku}JX=?A@Y36hJ{6@OBBf8rN!AN_7v-o-|Nn&0&O z%Z}@B^5`fWx4_xCT8rXl$D+Ou#L#3h@{Z3Ve{*}AM#`V0S4b3k0{gDZ_D%4B5nE~@ z!xQ(Zc~74KThD$r1|;ONhD-1G2kWGp6H-T4usc-Sco6i|LkOmH$E zZ)kBSPJUkh_WrOwBcX9r-FHRX$V4MmdYXCq$H`npZ)+8_!;W9i|Bfq&trcJ9^C=I{ zRe4v2*YL!XDq7wp(w1}~+?g%a;yzsytE#r|2sxN`+GaDupz|*@ceE9ArEo5M7@R+u9_DE)2 zS3wuxfbsY0*lcr+*i&ZSaiLrG)KGThDDrHA_+u%;jDMAHbKQZ8n=9BxFqG?j$>aJO z(&0+ZlUVeAo85Aa6L{1rmV{)_@ZpBcCVnJvUzPo)HneJEu*?(f9V&kQWsL>D{gtnW zV(wnKgKFiTtar6Y*JF9S{mEv!l*YJR44ud=XBa-K$xdbn^M^IQ;xjhf$BH**jRpe) z6+kbcZt9qa(ek-u;L(Lg=Q4FauxBTn_P*cgauf^?^m?x=)cks7SF2bOipAVcq5yJ! zR~79TSY1&(U{gd;d(JMyyhHg)NL+~K6q_!V#1j5!BbhFRTb6+Wv(?Dw=XSx=@V`xN zA#XI#Hzwj3qKq z_#;F|LP&jU543B1k#tkUba1C=3B7iC6mR}yEcZ#|fitYwy(lH`)k_RXN17oiX=$|h z$GxMbwsV$+kaXxVPDKcgiTc`sqW1#uvoQQv)pS=#g;8S63r zuGJC~am*MC*NCg@<{|3aIODO?1tZ1Xg(UJwWnfpH$+`s}uA_CryrJs8NVfMjEMh+U!+#fAm>%gw*jeZyy6oT zw~_^$*Jm_asnK>~1*h$xRi`(plXe88JM&|)mS6uyO;?-UN!d;z1z769U)p2J%tO_b zLQ&}ReVHSaA6T5y{4i_%Hz|QE3HQayrt&@HCERA@Hhu~A5AX7O3#oRAL}Yk5Z7vPA z*o?=Q$1eU%6bZ6;yh=0?9q%v_)!5ER@YS^>fziObn_+2CZ+v3b;CNf~t&Qn-brnVt z&KGp-0gpmkW7%CTFY%kPGXgm-Iei36xSNzpCj&l4ZL3%gC878}tke0b0Y9D9+P@;X zbz&e&A@0qr`5Su%TU739+=W<2x0zB1tfZ0(?@sMMjF<8QQIUl13VT&$usPto2t*k(mqS! z?nKQTomfWP@6-!>C~3zGdcik_R)$bMwry64qnGiV-=exav@lWdJwwFdKz5ViciLlz za!>tIo?@oZo#nGkoC#l-@wX9)Y=2l^j=NMz-n%QEXR5SB=g#eNk(^x7vYJ1ybWzAW zUl>*9p7Qmhg%^@HkVAtGb_tOf7ucETXr9%tVi=>%^CEHfP?w^W}a*_Dy=oUliguh5me1Kw>&K{j8i z6~?E-eR}JT8%nlPPIR`D;noWRmj&4${1VvLIFA1IDJyjR34bX24nIuTt}Pd?PcwWP zXglX0uS1M&{^py6&8AwKIRQ;t8nPs)Moz4op^B>kL4{~;iG|*ZCXA^NUzG>ikJqNt zx}(MBBTu*$;-Y|G{nw$Um+T&B)im`>fG%N(Mg|a9`~~P zQn?9pvICi!^`oY}TiXubq%=S>9=SHqWTdnrTr)0HLm{exy;Fi;Bmod7k|HySSJ+Z`ekP|Xzxk;zICn)coQ*nn9v!dCkfKS1V^dZjcnG}?p~YpxbR7dCMZ ziCad9-rk=HO_y;euimA1)eqG2i3>a1<0s1N6eNb9T43!;>%h=dm1{dJ-z?&S#-?rX zDEp#+RJIfTtqw9%5emxNMFS4~ma~iCSR*;S=gXP4R!F|_-=)j0@CW0-(8`g`P5E@f z)I6HPXvVVzl0#+Z4olyyM0mR4J0EJ|4~#awB**yUwuVF2=8UiF#LaHo46~rvh}E(d zHM$dh%^aPafJs9LFO5!RrLYT@9)j!UB&fb zdF-^FbJ|7;_qmtCy7>kx#^5KReh<_YBNmxXhP#!ZpSV61Xk#Ai#b2}pcr$w=ODg!9 zg+jzGI$Tq;wuk6$yyrhz`x<7%8kZR-+fp}Uz)F-Q7LyNpmUD5hmT)ep{`|+B{8NvI zg#x@d{r-jWBM+|VJuObKTqwrSxgdptL^WrUWy?&u*etaO_vhcG+G$Zv7d%ZHH`x;I;)hX-_d z0bRqA43%!S1W!+5!}=uEecOD=H=z=6WyGlmy_))fYVjRrr^x#1xCsO29ITYOO712st0^19Z^PdWp>eULYAE98y($x9PY zf-mN%`mOcw@lov6D`_l<(fOx4VLO7vnNam&>TpV%F z8WNljik~Ih?l!SHvD9{*zD@Q=aD06g+V>&x(`M<>@|}e$9?H~gsN|~=CoB$owSwUq zYK07`Q0$G%u*e9LZime^=n}KldI1$G{Irp7Hi4a15{Kx=!FxG}gxg-357@YAn~2X= zToEDE5la=uOtpK~@dQy(Xz}hB=Uk$ls^V1ZvaS#fn{1q-QO7{oW%=UdbL4(@rUDNOPVz9`8S^j!azIR5o!Zma`jB27IQ~DyC*SnPHK{J zwoQA4B+9ZN0=4+bPEEqHD(Mps*Du<_G)igH8e<%4jF-zNm8QH{1-2S1r=W!?gPY8f1a`h3OJvY1PSXdO# zSmM^YP$*DwsI%og3(;G4*i=w*N^sr_&9T)abI;u6OBI-aSD}D{I+sX^`**oDEy^_h(u_lGdE%2upVvu&$a+%2Uw? z`$qG!pCw#mF>0WiK$b+tPs&)`u^JlVMpz}7 zZeON&@y-Y;?2|I2QH`NIjZHOEuh0Wpr;@epGb1 zlPuDywstRMSlXQ5Kb_$izQi5p$mUVRdfFJA+Wo}MJ>tP?MXsenv$5i^q~RVOU>*Qw z)VSF>}9WbmEdoivze)uaJuwH zEIjDWJh(5@w=OG?X&TO;SJ<}-xw%EM)gq~-+G+Wihn#rAlF~QXQm=cx zm@wneX|3Lr_c{!-1TY!P*@lxcl#MbQo8R$D4Lhfn`sUr2#||}j2$ma^PtP5gc{DQ= zh8w0-xMp)^H7=>uht)~Rr#L8L+gJw-v$Pr>B4LPpEA@jkLl3t$i3J)roob}}KyhzM zZ%5Aq{~kdy#5<%VsbI3i8(buEnY1rd*l~DAnox6BU3lX$L)c)#wyl`1>$Uo_G|u~D zvxI4n9YnyR#Cc|K0XE#U`QAgACgz-ChRtE1QJ(6tf!|?$u0rgjqj^+jjOw2@=EqL56L`jOvyr_JR@ z|2+rB-9-W6qMunv!#`qq2KU+F)i`&_*{?fB4IM-(6R=qaisUHEhw*-ZNCCZaO{At%WG$=y9(dhKQ!79B%c^;eCzeUdqt z|8WuIEZ`@z(Li*F0z7!J23%`d2mp7!WPDWOn-u3`FGg`&9qe&&m^R(mA-EqcEi@P9 zK(dAPJ>X4lY%o<=UC@Yb!22ZPww*ey@8V^MChWQxe1}}CwdMl3N-OI z&;0moTF*Po65giQ>NDVd+sO&Mx^=3T7SdWV``y20^v3T>&+VT|uR;t5;mmzo9J ze?b;8v{8bRumxLM4vzT2LD_#n6w--(r1`qSyF*J$8B$SrP}>F0|Lvk$rT}Lt)1|T+ zn%zD8A%7(D|pCOMPH>r{?CMKVrKYtz^ z7G`t!{WRt@9&Gnm?oxgIKggAv@>8}5Ak8}@5;?Kd-WVMGx0X|pb_x;b(-;0%1Ps2} z)U1@1M3;fQ?Er-ic$wRfMq1Sh!z94#x3v z@J6-YFjQ%h@Vrkk=K@BdZ&!{#-6N6z>h{cIV;l!g$a73Alj;z#wVg8nqv783Ss2|O zb2Oj-bQ$3Y0Qz11w)4-_We*3&J@lrz;E6v~5&=#=YAd0nq#`BiA>c~jvhhEE zrN4V)>u4~C8vNG*8-I0+fmkj0plGlG{j%yU%5=5Ef&do|<2s$44_Hz8PnANC^b@vN z@fnix{a7iDjN=|CFXM!6!!ry{kMN_W^AF1imI6?H_?N?E zTDlZm^~5n37Z(S4(MuLPNX~C_dE73D<*&zuBf_Q)<^gO&K9(!KOS1nzTV~LeG?{{J zg(<(==gO9TcX#?ELn3E8dS!fwkF33x#(*NR0n+Q1tJlu1izHjTgg+1MkR_@e%sKeX zk~i8f3H=u3!0M}qa9O=S^0!G$N(79;)N_}$I{4#9)dFJCwDHrQ4BjEilRcFVSNE8ii4u=!x z*~%+ZlRabl_(rs%ev;q80VI4C9;7)qOv*aXcw;L~Y;RbZ`LGAM3&OVps6FA@6~%8& z?^U3FL)x*15tOt&ITyQHX~?b@>zqD5bK5#SHuv*YIGvgqKQmXlUd;#bi#9$NUTn;j8i`D*Hi*EKkKQ!N)i_04 zyYCitEarD1p9-iHgE_Qt8P_>Q-o3@adNaV8KOeSn>-dW6>dv%3f?v0{q%W2WF6Awa zLP)q%2#Mn3Vd4%*WD=BC)p_NR!_sA-RxFV0$!+G=BcWIp~2{6&eoo{fPF?Bp^ zbNOb(pou`%TwMrNPG(-Xl1t0^WB$doT}21wPCmBOa%4adE7E0?WP2Sk482}{Agr7GwCmYn28)A7pehYRj5@Lf|y7Cf<>W7?&uvW|l*&f_+9TB5#3?~yy z94>F91P~ite~`!!4lX3IkXZr(?n*vRiFd7MvtJIEc}}FLUD51Qo~SavZo(^$0ZwEydl5)8&UrkNS-Q-fS!iwjFep<7FbRWyMj>k1n|&iwZ$sD^?fdmvMxfiSu>UYNt{nZjGtj&rNqIgA026iOCe{taPY?dZnw(g$E(`TW(5!eC zjM3vU8~3bM?#;Jsf7ljhrY3-YIamDe`3Ky|ACLf2rke4OzxeoG<7U9$Ri89e*ankQ zdR%!=2`1xjx}k+XL}IA{K}qs!!84<*O<0CzS$ZM+0Z&cnFiMyu_+?Yga@1DbBmIjx zc_Dm$K>kMr@i5mkuTQ(<*a4%ycYT5Gs<$F~@T&{0NxaKAo1sLuXkftX^Zo}7tEbhg zXrY@YdhnDa;LV|h-ps?^a|NW0MMNBQ9tFJ>80GJykSUTDM>;ep32vaG8Bf4dO6|cJbY;%j)Km(-&$JTt5PMg+y zLR4XeorAGPcA$G_JKERg5nJ~XnM}kI8c%6N*k4lu@W=FjhZcz(4|RG%1+;sdTDk0CoWpV^2S9H#uB25^m^frR%l)oie}`3`V>84 zV7!u=AKD+i=pJvAu3RBaB^@$Et8I+z-ok2>g0*mQ-VnvhgsLB&pqytqe^ZzbM_(Q< zOh9m&%-UamdHN2@4gmK=u&VF#M9ZNDvzAKKtDp;A`dcj?$xhh(8*2oM{)J}}aD@1{ zoDXuul8cT(sbu(&q@Q!ak{$I$>$TF3$Z1q%QXDmp^S3f8#v78kSeBu$HDuYlRw;Um z0%ckSpfu9hzGJDNas`o6xKuIKI|LVm?_dl`KcJk2Obfu)PJL}-PSBP5GD0anNmp-W zQ;~9P`<0~%$>wphO=c&aY+BBSl>&a0I+RY9a9cP>&ol?xYPAy(Ypm~WmY6wmH8NC5I&76_7b>~VMzoN)5;O=Rp<4{x_@+5gAe zSBABySoN=*HsF|-9sQP?(PB7;-2D8aCdiZ);@cmbML?V z<39KI%#%6ueVKEc6o?0t#CojqR)+2RZf!?}wiSNlJlTG)d7v4E zpgh3$dWmD-{RwO)5>g%JM%x2`dffJ3!luM^eI~zzaK6>n6XyI3n^~yfr-PS#>W6~I zip5Fi8XV-4`eCyu4shn=71q$x%Wf8pt=^w|>F_)LliptSY6;oE`+7k(UymG1SWmL= zsW>0Xs-lqYv9drji_?R_IkF+<8!D6g#dq?TfJ zF*kl8^YSMqJw)q2i1NPe<_rXWlA1q?+_a#!8^NS#P>MGE`YU1=%j{DwngY@nte(oB<5XtpJ=&vS;Pds(h;;{h z`L9xEb9$$VnAuwpkepVJ&8xLU|9_r%b=HqB8vUX+ z?T6CYs6Ul!l{LmAh;AOe#`F)BD#u!!2Go6YMea1f`bf*dM(=jw38str5^Q(8_WnU007zhON=x!@I`Hp8Uofq)6?Hp7#KlJ7Z(9w0b9U0k)Jvv%cTK9XcF4(jj%`hQjc zWsUv6WHbKn@-6;fp5%!Kg`YF4=MVmyQh9+0lH_Lj4M|RxFfsX&i3&Xl4i5hB6+lmX zinMN+wU>~Ttajf~+Z@j94Sx0Je-5WUfvsa>W36sZH_rE_<2(=MMhg^4|7#0T3-omz z&J5Nr)A`&ROAZk6j-blPdcoNw|7YdCw!KYV#cl|%k@vmP}1{_^nYBl z=gT>W%l3_h8MS(i_5C%*&6z8~^FxUC^9YD`@2^t)k`<|P*7nm;U z!&RHc20GX|+c$0vO)7L;PP6FEk(d`beF9bKkavaMt=0xn^j1jYlWhI6)gu0!gt2B) zu|J0xEoW#>weDryK~>91E?*^X$Si;VCVlzJcy;b8d6{li*7yp&nIx9Zlck@;r_s6-8(Pwm#*Y~b_07<+X_? zg+Dgl`-#yip9C4KOP)MECxYz>r4)}_0o4aYaNkMSg&V+lo+X{oGiW<*Y**VYB+uN1 z5&O|~4fB%OtfFVuRr`I&ySJkgxqJ<}EHgPh_Ziah`@WZOl1@7uBrP1SXq9^&`ib3f ze)#7>VbiW-XHd|)>p0cNSUTR-*I~r6Fe6Mloz;gCPeNmzN68>0G0#WEc6-x-z;b`6$Q9LhvVtGf+XXTHaj8T;)S|3&MMDPyE(bnXo3yz*lbWf+1ZPW-y7}q-Zy=L_U-tO`T9so=5+gG z@KI0nkAj~c$YJc34)*k(gYclQHTj>fo8Oi>*#EelP%nd}O0{${n=vF1OndgEGRxP; zWdd(~U%N;FJwbvy(|oR;R^(W3r>gG$JfHG%lG$n8<2p=?_|SYU)Rpa*a&b4~Qh@%> z-$PIl3p(n!&hFU-TE0&^yPk9Bb8I07(SQBqW zu%h{EXTRP+tNl16=Q=sEEHaoXYHrberRWJU~#BAPYfu?UxZQ zgWK2ZY20?4X(^l;Tpz9{7U!8!>~Lv8>O_d^ecYPA^R~9 zk2Ih|R?e*nGo$a)u(K!RXQGU${Ap+k*)TzlCg@bbRTIP!j&VGWnv|{5o>vEVhQ_LqbT1-AgpK zpX0TXHb@5nQWQ4|u~+WIbp?mh)%!G0nn~?r{iPiVnZb7s<;XFP;PW}E$I~z%K=pGY zG>B=lbcdE!kS8}Lxa!k6&a~a{DBjE3kHKN?pCUFteQ5=a@2)s)b2;L`BqZ+nB;A<9 zbpHI{y;v<Wr-fP$zDS|L~=QIy@SfXdg{OFZ_i)FQ!`VmJ*!@;`_~3Ep(U1ms>oyVFys=tf zLaHl2fNWbod|K`*=OS31B!Yp-k#NzNT`JS_jqVwaB&4pGMFs84+0MP0?(MK($M2Ui z9$k^27JJe;jPvDYr`(Y#3f2;2vL#3N(-PnChN;)bJwG;hzXB&8c9y-HhO&UWk&mFl z(S_r;iv^UXL1wpxClwO4@AE8fU*LTq0sdV7!KP*m|dVJ9C0Wp-AI>p*Z8QCa5 zTC<{&YBLH61${DAnCpsHX8BXU_I#?_qUphbvl}0uYAenepg}quG?2*h&vUuf`;){O z*VveWYmOovo#w{-zL*F6^$xx0ucQIZ+bYQJL^4=#1tLg({?KkFv8;V?ZcJUKdXcCi z`=Uxfd&4R|+qM@xu4MOmq^XpaVpse(w3pNV<`t_&BIHAkv%2|ruiJ<(^|vPv%Sl~5 z@9E+!Dk`AACiE<~tJsp?BshvM>bE32sM>v1A9t43Wn#*ya&pM9;AcC0Q+%2v`*3eB zPv@swTB03{G?)`sn_&ZcF)-qqdRCGv4GzgA)?4Q3ND7BL*LzQy!D^<>U}-PBrz8uD zFP08Ha$G+r3L6w-z$s$HZ2Rj>0E~Iz`8%jLIKT7U z#E{DX+x+-JHO1(C4Bl|3E^=Gz&t0Yl0Vf~J>W`Ty zkPDGt^>cjQv$+!IU)|S2oCi3I6KHRub4L8AX@$y6;KL!DfrKK)OiJ^Ya@-)3BwjrH z{CYS09c-I84JH;y`VYyv)X&BUU68;IHeu~dT_)90pyZ(7xN!Stf7{{H7+|53h5BAs zz5(5?f|QL{;ehtsbiP`CQbH=Vr9jO+Rr`Qvsy*}4zGqnYN*TvQYPMX-^@&nKB5HBD zDncge6@oUUWG-s4snqAXR&MG)-AqvvDmCYJ;2kKH3MmtQ(>Lo;n`X9@M%LS;99qkij;2{MDRXmICun%=| zvny_cLc*Ks&wX=g%k>#Yv9zw*UfQZ(RC({3YS~>b8e2KApJZyTBE}03_tSW})Ok6V z7snh&TkrXDbl-+|aa@JthiT5OdQI2J-^qq=3Dd)lUS%DS0@_)d+}+lBImbR&*zHEC?(W=ztM^ohU4vtBqlj6rEB^{1LA)|>?B?JDPJ z?epflJ7TAVEgfIUne21EaihGtNOR8$)@mJtXZyg2+he66V2U%Z(KVx zz;U=n`=8FK0>!&g$k`5H*W$12}usm-53yQQK{;*v19bMMdOdkN`)(4gyZ z`}5~Y#hPA@xIr+hy}Js?j%v`IAGQTIvB?LDRA~TQ?r$@(7ipOn0|&ob;7)nEVPLk) zTdSAwh!-BN<`}$HT$g!|f?_nN#tg~kh%Ec)VqDnQ_oirV-xGKsz{)pjwxWFC<*>b=0g zW0iukjQ&;!p!J!Gsjrd>aF|+e-7L|zWvHDFn8EBp!fW<2w@1OGGt~Oa5H+0Izo{kw z54}Qam9lgSi#|Siz4Ir)j^A}(Fp%25ygy=QjlE{;m@d``yAwjtHCd0JArcre!xMrz zzE!nR64CdvnFI#9JtP_~Psc^0&ws}Sl<+Sccr_h9dDuI9p+D1hNs@+_SXE#Ta$k8} zS27c3v$QqKTk&erC@`+$Rbato(M|N+uA)jEqXceFf+$Rv%k`zXG?sbQv>8!(8)IN{ zR5tMMH~LpKDCL`{y*{-=OGLmlhs(;CswZNptN$I%N$f}eI7+LdvU&qS*tZNI1MES_ zbcAclIF^Q&Q&%F-a5piW?T}R;q-fT${5jgVDSm?iQR{ST8=KX-VnpeuKe0|Q9J(WV z#)#ha#IDWSa4r(q*4^5c0UsQFW;qLIYDnOwm(P|i?O^dta zrz0rm4|Js!&mRV{&JQJoD*&)`B^g6-omXB86;_x%jdUwyH+?4*id!Rh3l$lkc6nUI zygV`*ETb}telL`um=+WA(qQdq`AQ*9MQP|HiXrV~FKaJG3cJBeb0?IW1$ZrW+a z5m{FKGn~<+g3(N+p4HQQx@NNecFI({bE4QBq(glPxg?zK{GDls76Z?GSVa%~CpB=q3?%BRuo6w`_+5NyPvV_u}maQLd5O z17MqWI&ea}E!Cp$H}y;+PV*vSnl9zed?S{)TUQa)mpS2|2|Guy&^f1Z+)QGLbERX< zil$AhDussn`%q0&@EzmmfJ2qvkdwGi|f9V z4$s)7=no?)%sHADgDm^Tf>Hh7T1oiqsH2oQ^3V42cP1?6oUFjZD199u4oU99CAr!a zwudY0nynVVKF=47p%OL8d|=w;g!rPRc-di>P6qVlW{E?06GzK0_9R4ZEu4th%zXSl zAmF^;wPO#+e@dox0^nzO#Z>Gopl(gCzLm5-;~31E6OtU_iEu4v)r+Ol1G#Iny0 zL?~toxI356Lp#66op;Iph{Wf4*BJFTHr4jM7Lkl@t~7R9AS_r@s1=j=S=mef$a$o6 z7gD_T{-FDwZGP6{5F=BXJEsG9q;j6gJV6Re#uN$&=e=ERGe?JM@2?p|$8=es17cO4 zk2qScI5UZlOfx@jmCg4u0cK{put9PkMWwN;y)Fg4kWfyV(j$c7$aj{LuI9TyY%yC@ z<_NUwDb+ewPiZ=>JwG6qsP1qck`pI3@}?O}_@eVK!Ai{TRBGy9%)}vsQR#~XWR#+( zv>a{M&*Mnt)SKsDd(LDXatZHAv+0o2C*oCBZBILG^VzerOi2*%lUw&84 zprdXBya`?nUm?-|j$L52^vpg+nL1u;=5g|w*%VMthYHHqLKNy#5(d{`|Nw)0N+N2dL-uQbx&@mFk=y_+>BfYL90 z@YlxK4Y;J>AkAJcE~MOQE_7ATnJ3cn5ntaJE^{*bahkVQmVmH$iMuA0MUN9C*QPY6 zgNw;jz_`DKu2wjxfcq^>_S{hM$P971BJbmUo)Cr#QBs|Ag<2ekJlaeD{pC%k=Y^KA~&he(*uG#>0JuLbp*H2j>EN~F~$hpL$}b5$$cGYBq0QxFrF+I$=8>^a#&pU9 zRC}W^LR3QbNeejiINwU5FTjU@A5$a5XfCdc1iSAjKNy85mK?mcyVcI~H+q2(zGGDu zeZ)Xs>Gjvx;UNyM2QC}M9=8g{SATwS-x-hT87@`b{%Ih5Wx;M#&KZLV%cWC{*5|%* zj@k?@i%I$%$rK%8F1~Xa@Yx6`Ol2uNJgzof304A)eSRZ#1$K$Z?~2;b9)o;8+FHHY z%63DNo+x(WDm2^E%r>RAJEi71u;8v%bA}iK6bt!`HuE{=R02jd0cBF}g4_uf2Z&b7 zrSlLXSAvN33b|fF27xu#6`7`;!?cSx?T9yc`j!5tRQYYUswX>6Hq&NkEQff*L;!2r zZb?_2)x0mC2^o}+7fLzIuN}$GF7J{Ocbm+8!gbNm`ukNSUfF}B+Jck)52z>x&+_Jx zlZ6lv9Lvn`WUINkf=vvbkd{Uf7|8(j4o@@kjde9*m_01dmcx@MLSTVqS{qA^G;h@f zvc1o7v+>1*wQZh@H}=Yab(larB1Rl?>h-B@;vU&Pn}BT3URj~{>=?gjUCgR8KN=f% zmMo<(9?t+12uyo zZWA2by}FC_8RrjiJFHt%S7L#P@hjwYc$^>kmVr!;K^SeS+qK$1bspAZm_)6?pPbaO zyNg0^c4ghji=|j)f5v`&JyrT3p4VE&v^82v=f$veoqKJ)r`_(>cf^=I7F^g^CLI$I z69xqPqSYnPDNS9XOnmb%STI3hWv|Lng%&d^CQr63c^u2xO*@Eab%dp2J7}ocyF*#Q z^8Wa+btaHl6*H$S+4^u1jK-mfqNeD;i0ZcaI0C-b0rBB!*YyGn$s-?D2V+2I5_yIT zTcY=KepnHkB86Wfm^%IP709HuDmW%fbVIe1cp}|BIf>~c#4!ES9fPZSd9M_ap{HpS zOzJ%1w}wwS?c{v9$=)z&S49zmg^ifYKaSC&*;%sE{ue@0Y-_OxNK(a-G0~;+yddr8 zW_-8zu+cZD{Uw~=Gfmz8M{jOXJ-P%PCL zfQ^^sm;NX&2`1PZ-dDk;mg6RV%&-#k;S{6J2)X9Lx-G&|WX3U9`uiIR?wk!XqG8zj z(bT-hxc*%tv1oRzy8JN`$4V*mZ)a7X(1lQ z8rNN0$!Xh)57t}lsxw=x1)ZLPY|W3tQ>oR3-y-NkSV;Z;+$TsEiEd)eKj-2!T<6+~K+6W|&ak;nY6P(1@OHx0mniXR!R0ylgbSPvk-kp0+Bl z=AkbJ1lF@s{r!jZ%=*m2r6p!=I1tzPb0Nd{`OnH7eoqE{8udI@+<@xR?K>kT@Dxe+ z{U?T#2&t1{S*<$O&*hEnIkPRa6=9h&Q96j0&u_1HBVJ<(ykp|pMrqo(3&1N(uP+u6 z4e}8dMWiH%xWdWKW}o#G--!(0;6MD7Icbw?Ytxi#qpRgMG%xzE(=i}0A@#LV=2k;1 zF2C`8TABOO*)>#Q$2T5y8-nxp=*+d=hwOFSZ8@ zF=2vwo^A3ue#%vz`#34xHJ(i|vCkQum>ak9u^XQhU(r4|&x7Mt-_Fse=P8SEjIcd5 z(5Y$!dQgsX$u;}uNvk(AtO1u(AMzK~c)0BmB4=2$=DX~nv7~?6Nb-y z4ptwnyhx_(@_W+9?b{RNZIqU5*PXx=lgMQqq(DQXZ!9z;BRZ4WB*0l-=61pWj!CiD#LdLp(+Pb)Aq$vP=!$UIj^*!(5o=52y?bAN2?tKx@24vm3RuV5@G zv$Ytma8)=Kd#>NoDz}qxhU9PNC48CT1wn?O*w+~cQN^Mc@F89SJcKaxrmq1O$P6(+ixeSb3?7ndj&Q8cBH`$aUZ(Mrtq@2 zy6&@+dG3EL2T+?SO3wguN%KW*2VWn(G@IZO4ddgxI?wOuMETKrhYy?8tDIUrXy93Lp%3Gf({E1hgP#)w``Kk#fr+P z+)HX{JtS7BH`ZK^3EXS*ti~`P3p6Sn_Oa50CsT7AuLq29eEkZ1T$0{Tco$<0gB(mw zc0J1U>mh7@u`cXGA(}6z)@!K2QAj#)5Lr)$HM-|CwiFSgbS4;IH{pZi3>)?CG-vr| zOkB&jghmt9c2>3ML`u;?QYhhOLW2+{@1col3ba_Wis>7NjPR^_SCiX5*=z)wvbIT+ zKDV*S^sj;m?-qg>zE^8@YH#E#ooy6@1^@$poX!+07@(Wit47KGaJr}w3EZ8_N{-*s z=&Cm-l{TW@!1*8=@CyunF;$6$asT68SnF9gv41N3-3|01qv!0ZT4+Eal4bXDs8Da5 zHF&@@!S@xbnRnQ(zt%B+`|WB#Hqie|mMS`bB3P!ZGJHEMa?GvA1v|4l)}2nNk#qf9 zO;D zZWSgFk@RB8UC-f|F&>RC@IA$uc76q&C49q4aKFg5Jd@DZ-&0m_j9 z>ggSlXGvG1{siw%fGgnh{6TYT<3pekiwZQ`??BhiQ8HR@Qg8wCc*(H5Kmf=KU(C`D zUnEM2BryN0^gUeu&hZ6_-((~cm7Rb>*oHmPXJRi$0zyi5@p;pEe(DTRo?ySTL`}1s zsvuvvG(4AA;cL{6?l#DF>izJTH?dNEsv#RoqPMG{h#mN@O*&pp>Leg73yI$L_JZtNXpiVA!QY`hCA@X85U0ZCE3*(h*z{rakpVEmcIQ@JRFuXIZk)SH27)!qx-<3wzh@eCtUe%Qf1 z_TROw)Rolt++{FRS4c)I4V?o`+Xb^5j8k)#_34TxS~xFuCv%M!ZzpzyVpirIn?T@l zUEpv(5pF<%MAOG;DMN;1!-tgx1A~a?M(8@eqiCjn8|#Kpr&}kGe-yLA9x~!mC`slc zGogERoq#qM<>5~Yq6d; zYY(%cXFh4P18+@NDksIwe`HZ(H=E@Xv9w6EB34apkBUGd#krrjlV2rhRlDJfi!sSZ z*_!LH_OgiK*Ti$y2X3qh8=uNYeV?$=f%K~%(l4aA*lQ>-t=%BQh@nwkR7pAO zsl%3^d1uEUaQv6P9^X%+i}%Tn8gYU=r7HXNU+S_Opx+vFs4Ir@HpD}BcyIplll)L9 zkSqDa(Zb~M$XXZlTs}8mhdU7&b$K(A6C0YaG z(S@Y%%E_RK9sY{UWWCd&_|p2{55(Ck=^+-ra@_rwY*>LXR`Sddi~4ZCDBWQzN=wy6 zLGHUI0Dgr~1XrZB=iPFHHHCgFHCqr#SE5dySgF1lqT0hm2;8ocumXw+p}%np7$uR? zsOV}OE41Y;R&0JQ$@pYWN-yiz)eA90o_{^Jn~J`C(Yn1D^zn_S(Yl&N$$2B>aYSz% zQcC+R6@qVCboi9SUqe>|-y3v4SW5ZIupeRh^8oKf}fN)+L;AV5{Kuq zM5Oy8I`#lRz{%2;yYq0T$?p&+M$J3iw)E=kETh6{ zQ*i{jS6vVLeEq*Baar0EfA52k<0YpgM3R0IXMcNj9a`1uFr3&V{H_&J+AZd{>3>NH zEXV``jyrMuZ@=IMIxL2_Tue4=n6*t?+*XQwKFv3s2!hdFWR|su!6(P%rpE3R>%R-{ z^~ig%S`BjtjjEz~xKgxpW+)lg=h$}pkR{dnBwmjsJp1h@T~+d+KA}&9;Hfq}2kT7#RH&8w9EvSz}`E1|LN!7)aRhxQZSag6A#oz>^ zU07d##;0F$ewU$ck|FZ=D2*DgGao+PiwaeW17*}DfF~Io0l6%EISaiHx@*Z%P4kIm zY>Ntdn??oq8lgQ%cQap;_bAlX9A>>V3V-|7sBHDp>u*&<{(z=dH*Q4@NLlmmlo@<7 z{js#wSAI2{YP6%PNcTdqpTs??9LlD8I7?j(NZst8T_AXO8o%G(roYEp?yK4v*F9Wo zIc_h#?$qPI%r4!xYQr)|K`WLLnTZr$;U|)GaXYXX^BCMw;crCEk$(bqaj{E0#)>%| zM}?OiN6BhKR^SsGz0ccp=*&L+rotX@UWM5SCNZ}u%zIE7RNXrJ>v_FjXX^c9K5775 zA{w6M`*@gE4P~Lb!?n)0nY4aCn2$vVHY77~JecFY&7({5&yqkrvE%*~V0mup8Sbl8 zi#N5UQgN&>MJr-@2TbmiolFd{Z|K5P|_Q(YH;TA(Us zSn!T9J&p(`qFR3bepG&zFex-82!Uw zeRveiX$~?o{xW{6TtmP?6{?sh{qasp>*t&s8ih{@ z>!KIB8=b5O9$N?oJj30e9Y-0^o@X&mM>eF;$@u)tm}pr4+j0N-+E8%n#K;A~+s!a% zJlq6!}?wbtzg9bROX~1JjZiTiQv6|aF+JkLR_hu(`;?a(GanroBMlGw3Phg zz9`74@@Xr@9S+{GZNV%Jcw==xuq;j2-y@okOcDn#RF=CVd_k;>Hr;3r0^8@CXlmBhKwA1j>H?zzE%mk0PSoO*qDw$(FwO7+5c0@|6U z?ul!%qEi{0+rx5UJ?ikHP_`qzjjRC0!1PyRuDsd4AL`Vw5zYdLQi~p(QxrHDgU|Hzw8Z7POK8K18$0wKIq= zXKs3x+cXp=y!TB!&VTEpx0-k5s|=Aiq+E_jTA4pG$fj~wk&&lePsCb=a~?Z{g(?V8 z<+7!9E;_MU!Rm5RWwJ-gbzr)ndfO~9m6ecxxF}b0P25EObabw_e4WItg-FLKl5m)^ z(X6I2g?9ScruJj>SY_a#vTJ*!T%AmGaUjbJS=?V*Cs(^Yl;Loehgf*69?5W7nxOy&(>;A^PK#fpEw3CEk$hlEU1tRcr^QM>TD&E_zvRh^cy95G~lrmF}P1 zs8;J!YXI5-#_|`nT|PV%U;P#hG%TME{5B@Mt$eiOtRgU$_ zdd?HKv=)_;)8gCQ<27;H`XcF@0j-|71VOB+MV3?lUEkh10t&r%+S;ghbtn>EYxPrf zyNvmJR!3bOLw`P%LTtVB*hnn(P6ChSLd~nOH#FPS=hX{kf+D5a(ZcEip>>j|@GSGP z!-aTToTomMt8rj#ZH*0EiHK%`XD4N9UG1a(Pf!8g0amlz;5NE_?9q znKC>*t|MjeR6b2BncM$U>8Rff-L&jQ5kJ&&xcH)btMzOZ1w#+f*Mn+F>d}sz#o9+` zJ&OUZTa&o%EVlxbaDAvKs9d5L$|jyxRkEi{(04}8#*6MI%Bg<-3$ud5_VZU|(ba=1 zBm?ry_;fOjoWzd?Y*HNM+p5uEt%QHWSy~bvt8L3U*84dGgB20FNK*w_JyJ#bE0+gn zrQ=cO2v`C;McF@-qa?%E!<5 z4qeD1E8e!|rpZBahO9J$)g}@A!XqW6E2aUv8`0$m;-%HSQ{;&ql3k*iu*S5yUP1Ox`IsV?0vzgT)K#+DRiRmg&p0(T<;YbTiJb}Er+ z$UcUEiocvTZoU?bd)D->JBw`|HoyZU_m$tRToJ)jnIuPF)A?KtPt&$T*XL9BbeuIp z8ZmS>jxGm~idMB>lmxVL#eQeDj6K4fytif>eV!h0yssv|+|SuCMJaVB6rlwY(O{a& zXH0JpM{WeB;N%^_Q?3XDQKDv_X$!c^E5mGNi6p5r2}XK+7svPCm|GE`P*N4Y{b$e1 zsJHn%3uF@z-Xh9Ir$NWrmZ*$yLBM`=r4IUawMV_pTA0--(C_BOLap{;ZyY1xp zsrs!VkmhB!+E81RzdinqE4k~{Ln#Ewt#cdrtfiu9gw9`}u?an8!{CocE(a)a>~OdD zAAvCR?5{|x<{wcqn9VJ5DQyKc2L?qLv>r4HtgHK}+ zwhi2R$+w2L7`IuYlSQ&--rQU-maFY(Hk%>TQ533->a0w-;957Ot7P-J7E<9AWULf;5VKotB*&0NG{Dl} zd3mo~J&vTbupqq@K{VA&pA8nPmG0aA92_wwVN_{E;2#B)x%SFp1g;vVapGlO*|y$# z7TDy{pOeg{ak3PuFia!P$>B-gF3-y{mkG3R%M&EfC`=WPnCw*%_dJ3N$~{fwl&h5b zWIcIq_9x(xmW#rs^s?;lxI^8c4RzjfSQXEGPeYgH7itX5J=TT3n4KvUE|XCNN(y9|w?Mo@MiBFn4%zwe$hMx>&12x!klf-s(_v za>9;ctp{PY*K$FI#nbErHso%{c}vRoQ*-aK&bmHb5%ev5#C=o8c=yChBOc>av{pyV zN!YyivcM*3v(9loVpdwbsiF%mQV3Tb_{E`Urm{#!|Cq^_7^wJO_R+y+$^T_k+zsw> z@^5RcM|QJgk)~jQ;Y{Cs`?2`1K)xE_Cp7PZH};gG-|9=_+(sevTd~&cLwo(pk86PT zU9JRAQoz)k{R|pQZaaF*x*U(eO>VNb)NY1cnY6%+LwH6pjqhlkskq?z&fs=Hn67{| z{rnVaxTRL6uhnFCuO~nu{Yz7m%m^j3lHl7PsF2K4RCXD7d1zN(S7t%~pr0Rj&o69> z(V5AcUkvHgYec=Tvf2$Ihmv(XlyI zd9T-*mp*G*$&ri9t5dEShHG?}MC8lvsLVp*Sx&iCi*D2Ed3=W0eSQE8ERM^&bH{b; zg|_PD&SXx@J0B^gU&3`4os00L#7mr5X1=6&G(up*6}ve-I#R>Az}zbYto`of76^P^L_9Vg;Aqi~!@*%jFX6=W|^qX~G*juYJ+ zWNIKB8b}-(R1c?FO2Pat6a&@LcnMYCngi@Ny_byF)AEo;r9J+uwo~CQ<@?0+GbdXB zyb^dDtf{np*r<~+ITnK@TWX}R$~2xANTj69z(zwTed)E^O(%eK&2Lah17&>C0(epP z&Zgy+k(70QXc`VBd&l{Dl}8Q!HX za=c9P4WIFx7MF=YX?8j?Uj3BYYsv(L0QeZ_MT}>K7vm5rFc5KismI0 z6i+35&zDXcOSEJ8Wrr_gBnJldjP{lwq9IP!JzL7$xrpF3gS3h4-f|!3t)GE`+CKbw z(PWQpp?B3b*)#I;9^OmLj0fBA(tJypo)GT_xil$C-o|7%;R*@g8Lm3wIvi$boumx< z3~D=)*7zqKaMfEDLc7qI>d~*z ze30Eu1gBn1Jl_!$Fp^`;9CS$YO)?s(5%%<3(n(8YuZGfm7|T+NE8{a*S~)@`GMxm5 zr8!$(WX#``^1DP7Iyz;r@5~?S_Sz#Y>VIA@juYnN$dWO;Jk4`iz%EjSs|VRrw`Q`a zw!|jq)!eS{uu(V-kS)IcB(Sz_w4(_yD^!2oZxcGtmuS?c(iJdnGIf=$IQKi1oVXE* z;oW<)9y_DHvB06^2vxTCf|slLXp7(*ldlEpZ?xUB1$?^HSC`oKYxjV@VVwEu->qk0v+SZ$BL5H>M z1;n0K(%q6xACm_9r2MUG%?K$Uq;4nW$@uE8XC@YB1 zAD_P@YccJZyKb_Vmw(~h)NH9)QAC7r&y)MyZ_QK*yL;;7I*fT$ zOZUugfNFD+awJ`;lt25hi}8*XF6+lYZzmXXv^8^n+nU8eiAWtzRFiojc$9ut30B_!3FUu&__f+$j@oD0kP}{=;SvrN~q2*@k852GG~I@Ar!>6Jo6IKj zuHxR2=8is749)buhciH^IwlK$qb5OO2dScXG8F zc1^`b*_%{=oMYKGQk4GKWoBk^#rExFvhky_2g-(X|GsmMI=-PsaoXgeIW7On@$}d8 z#8`|Z&fDv=QMiEb5zD4&0nqeX1=j+vPL&|a zD)FJgqEOW?)&ZWOI7~D=574X=F)ST2aVq%7t5Y zepxzOSbQmw^k=_`j1dUQ3db^FS*)iuQ^nWJQ@)iS=#2_ts-GX|qkL zP~So8=9zh!pDYT`x+3yaeRS+~+eaGy%ac8fj6hf7)>r2Wp9Mw|eq%m6XeuQG7=O(c z|32nyldiAQELn>u-b0&+hsXIohL)Z_{)1;XLm!g1zCaU``eHggMQV(m&UXw0Q&uXP z9@p9{d{eS4X80F9^%P?-Z85iiJ#YU>1ZMUcVT4-jsK_2uP!cU-Kfp}9wdQk(pR7BDDxf|2?LdmZj*O6^W7f=Q zd^o5GyH}Kv!K1XC)*OiUY^r^`o=%&>D?kqG4+twqEPjJF{r7u^}WS<$UzhDaRezFeD`bMjNy-ssgO-lrrhcWLAOG;vh!E_MC{+Zay!;- z@CXd8JQEwl_sL$piIYD&jPHDz5$kNC!WPI&;@x$O;gj7bet6_JZa>MHn9IwRXX4RH ze`IC+JWmIY%JXe!Y2aX?PxksOvC(pOno<5?SuI)kJK%UucdroOE&v)Uc z`!~X8L$w69oL{S@74sI~t1zN0F152^uWHRHfhBbyg&3=7(rJjckxxb;)IajMM;nPR z_w!5_e0(|o4v<;x@8frf)=Q#L^nKIP#%my3bRLVk&Fzj*>)km}_~Kl>^})upWuMD! zoE-1jOG6_iB+lN)A2-U$OqxjudB18N9|rNDcQC)VCSy6z?ioGdw3exqt)Y_)FPcS* zxuNZM@8d)sU)~Jz6dV*-<09zCfd7lKw+d@(Yuj*F4QVM9XmNL^xI=M*yGwC`yGtn) z2<|S$i%W1zf#3v+J3&KnciUO(+y6e_@7X-aHIvLS$9VO*DQ*Ty5Yv9q9W`B0u!?Y> z2Cc!_`FAjX&-YY|tc)j1z&Z}s-x*It^jBYKzzaiOkls~1d_Lzm z$?2$8=;VyEdF5T0M+pF&H%NVWbGCoWAmUD+AJ)cZDMfv_SlS8S-KItOUbNWQco-IbYR;R-4|U(^^np&{4V zlaJ~uBowO^K!P>59#z^nY**g*Y(aiBb=9|90zF z?LteJw3SX#ZBIJ#K$w({EVBf(@oZIG>(`ykGh!ZQ!RBp?8It!My6pad5L{QayX6tp z@wW}1{beddi5IK@-2`<>GcjF7ckHmT1z!wm6t95_BbVXizfz?f^eq-jGz$%pT|V%w zk>(NAf&u;x6s)iAkK;E*sv?mM@L-k9_l44-;H3d16-D4c_DX<{qu_VA|M?`}$0Nbi z?vU`$O)ivggN$-ih-=mhE^$!tJWIFf^UfB|O-}6M5~5cEUzwP{Hl;7&Dx9=Vu9(cy zUXkIl{lewT!>Tl~VXQb$^5xgrwO$-jM6e8<$B)fy_InkTA#ygj%HRJ{A0Y2ZKV-J<^@AQF09Az&dxBF{z{nP?85NC&~BQ|QmCWmE9#JNb{5KnK0pygXGD~}Sj z%e!P&MwbuX8J$u06Q?8JKlR2b>Zzn58+Jo$cl`sB7gg$J5gKzY^ znv`2ynn;0Yx)sHnH zG>=qVt4yKS^nTt!3z!{WoAYE6B;Tn2Dg(~~f1)GSl)OXyX*^TSLn&GQ_4?GVVI@u; z-oZe*MK}h-==`#1SDH=JS5HUt9=_Y#i@&Y@*B)QHK73*s%GE;OxK0*-R3N&`K3;foqX^+3_S+KrHr zg+6YrjFCC~Xyrgm@O=#t$iO_#mCeho=dYrdma4vn7{~;3`&2yMp+Ul7nTT+1 zaatByrf2U&xiI}pNL+G*>=l1(t`%C$J6U;TOsHTCNzMJ3ff&XqCL85NokernNafjx zx;Fm3W;}aB6DO*ljkzDtnu`5<+kJbyp(Z@ zibp(~?^6zQr{G}wBLOc&j@N3&?Rcx(*oP*&4`K*ASj45Z)K&3%tssp9K7Cj~&)N%8 zLT|$Zyix!R{%f}$+;^YPjy4VJcFnd<25kga}4L8S|cZ6Rtum?yes z2~wjdwD*g-1iBZ;s(^YwkxIh`fI-pzVdUa^0x*}n<_9UefWE=In@m?2p4|CTf5_mb zu0vBYX`i~r$m0CH6^+L^PrZ`iiZFP<&iw{;8`sJw>bkmwr{l;K2SmNGglrX|jwieA zeCVu6gSAY2lrC6u?}AFy?S5)+=nO-Ir0Hx?mI9stwCTpZC$2%M%MpE09%Y+?)|Z7m6WQWcB|ql>AlW}(f8PFi z&w_=Agj5YaCXh>U=Y5>O0G1^}c)m3%nUr)6AOYXzjySs_@yG9vFbq60_r0R5?3jQh zZZ}RufGYf~&BiMVQP7L*dCu@|X@!l(N20*p=V%*D3i}<3z`?oH1mbb|Ay;WIb;uO8 znAzaBs|%q->P%FKPAX=V6_`$2Dw|Fe3;a`DQa^Aa7RdJ`Fd=-mAK6ePkV&hykZCiv z!EYzXc)B13E!}=95O5JP2=^?UpAykUDr0z;NJ2~fNqj;cjWFD^Ta@>tp`~=03Tpz_ z{NWakNeRrEs2y2$Udu+FeD=xa*GkwhI@-)fe&JGbSl&a1sq6+?j2N`KyR%HK7I%ux zaKpb6iLSUTG5N6=eaVHJ^oT@?rayXP;kW1Q-ZHm4tv30&e2rakINzQR&^?%i1`gAq zFik8=Ag9cmxk&2`iv*y}L7!JW-2bzudmnzO^UU`aLgp^HI!IY|&X_A%G-0 z^rQ??ua_Z0e1&5|oRU&C4!d3a%E~#i;nyE4Tn2|;cb-M9Ld&O>-Q|<1Wj3wjA~N3 zMAAyVSq)@f=^?fr-}G}$7YAw+w}Deg;dm*Gon;^%_M9tT#Y~Qhl0TVQ;A2?BO~E5M z4(y0WrjGwC*2cIBgeXCBu&nB6d(%3T49>y%A97KnmsLj?<$By*2#=fsWXF9_1yTtW zZUksEqo(}EYNXGd4z&wf`*se~%NMGo&fj2;A1R!dGJQVK9W&ZzB-KCLXg+T(s!!U5 z=C6~MUAvI>8-Kbnfk-SBKq-*S*D`x5$>Ge|18La?CnH{Z?E>`MzxFigV)DOj?6J+ z#l>&jw4>pBF%Nm^-`~CVn5P3lN?1gM#)tt=bHdN&$V}L^wR+8B@`JD7JIrtpw>s8K z<&wif_A_%BnR|N2_ieWU&hZMtZ3uDjT*pW#b3Q2~(Q!ObcIj$lp;F2XiX%+MEOEcO zKW~M{k?I`$NG-40Ec1@2A#XTQ`aE683)5g+3dd!WCXm_h1Tb;uPQ(j(Q$fd3V4%?z zbVl4(1Bo>8<>d2JDY1TfIlU_yDQY+FOf#Q%V-N*&VvraJHdwH9izn$y`2q2lSZV9D z*>6lNJ}<5Ps{771m8^S>a0e}6vM7CSV&@X4!I4wRKp)vkhJu=I1m=wqv+paqXB(d% z8+2NnDBiQb0v7l%_r6WZ_bJY2i5SF%$?8osF}^pc8X$1+L5e){l*>|MPi)o*fpEmL z7`r;yl7deyMGNGkhA`4=vp>0oaV&s8ed@{^+n{ci+rsNEEty&C|1l(B1O456Pb9X(ZHon07%X>W<5Tah zW-(PUykaQg+^PU9!OuUM({vmpvy$+R5Dd%vvPt;B>pd~AnjC20=*mc)@FxV)=rBtqkwOAzuo_`FRU-5sj|LUcjzCNyGK3fZHmi+bf#J_fHvX%bM=M>t^4~BSY1gj$tB4lygYKco8|LeRyQvTWMnTKtD>p{zj*V8}q+9dg0x_!!G8(Y0#ZldNZ?Ooi`kLIi4R;hZb zG>+O0osY@FXChB8RfN^Ts)^ZLR?Dxxs8KlzQAbYy)Y%_T{CpJ+ut!L3{qV*=X#)H(ZE z8G_^EJrXa;4o?|Ye+clAP}$Hb84v;S%I@7ZZFEnxj5Pv3cPKw$Wpb`3f>agoEZ$)I z2fkP_t{9A`E#)sy6(}m#*gr<%{14Kq-d7pcpEdJ_DyL-87x+??YqZQS zaw*t;>5MG|*I1Vsu;)4D~7l# z%l>OSK{4SH+%<_oMrD{dg_04`N;IMZ(n~YPS6(c5>WV`Io7CvYY+j~Muz3{9LdprL(AU^FzEOXRJ}O$#1ND$@7PSs;FR^eK9&evN2QdF&pQ=pOA#!jR0DPMU-i-qLiV4H^8`h=pb zLurT_xmgy&7|e8ZX*ed(1#Ziab&;c%HU+)r5qx^w*#1k_ZxwJ(u{oeJwDFY>j6nlG z6o}MZXqHoC%%Y1ZoBAr=i%r8Pm|)A0#)f2a#Ug^u2#oiXG`hn?A0_@)F>Ey0ZFNML zCUNAZ|3Nb=jviXHe*W#q8YkpwP^nIjUMCeUgOg_8Pji)-xUtpVooMn|JW)p1`(xci zVyW6TurK?gf??5gyC69>yGv4K0KLBb;5p0>p8v=3vj_M8BcPqX%E zcB6@5O2rAOSu(5eR^V!DA(Po8Q{X4^oq2}mND*6sh&Gv}SbYZ`R!^bipy!_}d-t{# zuGV)s+^oFeH#BqPX3YxDMTiBn zU%F;>6IsnQO|+zFxaey_`hS)q)*n=CqrCZ+UMHq_>HdAXJ4<3kiKhB7HWX8xD+Il( zHhuL?1((?^FqYo>VUOtlK1Z4p6#FbOk(~&}a+Uxad!PG9aj>@;kwZ6 zSit1OEwNc$qM27hLWWG{)gN2sj*6-+quq>2%)n373mFzxB^#<(3Hq*Nc(8Uljm4;5 zPkPT$?aO$(u_ zqHb>A-~#2bgGrS%YatCO8jH74;%ZWK`n5w)#l9SBfoy}|G=86rBL8ESG>Od!KGw~G+!e<%7Fa+@- zMYt65=ZMY~o~yEx0{hGqsm$~wiSPo%qoQPKM7ht(JWttbx@N*@6X;096?Et8etE_e zeBFPeDCS7BwEf5UaIh5}!||lmlMP-NckXh{TG{qhUFhw~9NB+MEe9@%4+|2I=cbRa zS?x|gmRGxvl5scii+2$6tS>RpE1$8EsOt_#SF4!@@7RaBKD(1ykrcUsz*+R0RyIQq zZp{%C@ovobNY*PlOoq++YBq#q8Is*N(yqGSsB%*|K_f$g@v4+9`#D$F*$TSe+#f~h zQPj1>SCXDj7I5#l#h;;Dq{4xcvoXDHWWQP;bGYPHYkqCo6k8@fK=+Ap+J#+*waebq zNn*#f$_C;uwB-4|=W(gu-5#7BKqtgl)>TF+Zh~xV=G8vhi2*ElZ|@#GPxXPor1BpwD(iy(KY@Wv6XiA<&V^)g0ZGIK#ThOrwF*feFjf)EkcuyJu~nY4s3zF8^M}u+~|@Au516zJh+t?Qu`f zA9=92s1 zLOBMHrsN!=eAyEUBN$H67!dIM3dt5@1HS%{Yu}S?+ebhwf3hG+aw#zSLg3i%i1S4q z@90@)3-M0tmY=G^`Ja5r>~?G=sl?>{CW_mDiDh9EVAuir`u7Q1s%1(z$9EUf5c%0s z0L;a{mY+k~WM^ZW*bp#u|__pU;?C^35cP&U`f@VaOp;bbW@HKtTzOUH}6E8Q>G zFunvme8x$<#96-I=6^oe!mxVEJY%MtrRM%~sp+@xY{#(L5&MHV+wAul%B zia(?sj)bw1ar@jc>o+hB6^6C7C<*pxQALOerW4hO41inhkm-I#vG=J`&UBnH?%|8Z z`cie9f>}bJws+Fps?{EZhr=DZ)f1XNMDNH>ZH3Hv8w*_vs)$a3GIXdx-94~QT!NF< zU~4j%k&ymk%#&yafkW`Y(dDZYlh!1wR@3{1j|_rxP=95@XMu?Wb+1NNx`XO0`-78D zIhowW<3}_s21{xU^6cet%PJPy<*6l4;5+!6cBo~;Lpvz&%@SwJ&K*3`s^XP`E6HxV z(1b@1j_|B(LT>qyCTe|G05wV@>F&Cx+tE9B za<}|#QHIt!szOi7?Q@ohXm6p5q_3mG@3t;<@>F}3-52ekK~ErXuizG0T$Tc(EopKMouMI$`uh-r>5P+A*1BiL=J$Ft^cuuR+4h`>xX|qQld_l=k?x8wOp0l=EGRbpKm^7{ac2QGsA{5vRFS-t+P+QtyN12r zzcf5Y)0#PhZrQZS-cpDMeLivOe51WKs9gN9I}-O{Yp^FZF`Db?W4jK^ zS9`elS?AHk-}NDi8n)4uro30yjvIVU1U%tY=4b0rp@M}{awU<@8`pUbBkuiwy`l$7 zcO;`di9XYdtN5Y$BcE`u9eI#^zKYoTikHxaz!JX0WvF3RH!gem=;+-Z)zw<5sNaG&i@t>TUE~&ny1(C4%Y^D;tf2H!9M^K@ z?W>Txrjpfch1ZJAvOl^j2wQc!l5&{}^cMfDjx`+cg(hx}?G@<#7yM!6Mgi_z>qfS&IO5Tr5%Qmm8_|U06sb+Fm6U7O25bf;ZhEcN`rOxC7J}M zx{JURAi8Dj%2OrM#(1ROO+56FM5@dmMp(DY@T_$LF{F644)s@&7oH5;Ee(+_ zvQ9jzwY%J^)sr67ua(c#HfL$ZdyvTR!Vtc82oT1yO8DB4$d<{wy&>4-8JOme@`@JK z7fiVpR|UM{Dp^l_U@0LWnWLLHs?g@PuZ{0*`JADY9!(cbXY~2`@n)c4A(M&26G%@l z^YrC@ru(2XL&ho-Ds{m6vNW}1Vr{|OF>c25PJ_63O(;9CH(a%LN?x6}{oE&9&%5#h zKfj9XH8+m%HGUfgk^Bgc+9E>W{{o07y?+;%8~FqYYr(>mN`zICex6G(^}9v2l@pw! zeX|p{U;3cm-d0RJxs}m79lhCoGNXMd7!O-6!+zCYR~whFdxsJdGG&?u|GqO2DYNv> zcN>JmqAL#?T_e{Z0-s7zXt$OOMEPEh_o?+HaNHRyb4tfl6Wx z!hz!SzTkFMXABepG8w4-u5zYOxEn3D(UXc3ytzhU+e9RJuQvc1bG8NAdQo~jp*&De z*!N{*DEf6kqMmj?}2pQ|wEmaH-4Z=(D@X@A;*%_ei{m&3le2*jS;I0iXv6 zaD_6xSplwik=t&odZuFGim}G}RSb>3AN$SrT@N4jKc|A_Utg?lCj!w>g~6&B*)Miw z-h@oaB)2!+!LaiPNzBxee5d`2*$Qj;BR&hrjVsdZP3rS{Fv3*ebEWEyblhbIAz@nk zs?ELHO?T2sicBS;%!c!SzNcC;t39<7aXU_alX*|f>A(4Dj8^b7%JEn08rS5TGx{!e zqb#dEe+@oc<@xam$t8hiU$n-3o}VsJv(wDRAUX$G&O3j81lK#lrDjqdV(xsG0KPr^ zGN~+S)CDqA%EK$(d0V%nsO*K$!C_$~qoRepe68KBDI&js-r4N(Geu^-R@@HD@%=F? zHv6IxZ|+~Vq*4`#uG5tf?loS{ut<`Lo|gHBbC>z0qjqlF9eAs zB>$bdxj0t5*KcH;{Y4i;oU)ciw3*R_AnNADUWL?2|CbHex&ALq`4q(i2n}Jc5WeHg zKgRLwF9H&WEVsT(r54rTdOXSf9L52Y0kc76D)p*{+!L(gx{2yDUucb}BBE4o56&l( ztLM`!yR{1rY z|9CL8L4jXat;nfiDUm<`+PtAzyv%_8{$w4YmzI{j6_vvXSRE`6N9#i8aEd@H#q6BN`E#=%#SO3r^#uRYUAeOfYQV49G8ohl& zRu3%QDdI7ki~W044PpQE#7Wd3-_vu7%TUCfJ3K(v<$j|f>l-Z7&7 zMLKbW_lxOp3CNHvvPU$sl7|F~q#k$f1ZFw0?df|w!K65+ z zN%w~5;|aJ?sU5nC_t$1>QH}1v3U#W+DMZcT-TA>2{hw9&&5s840I!8QJIlvQ53l9` ztt%miXYs>H`zBMb;si>a_USCSX=_Lu0xrG1?p(ZsNH{}&r8x6`mOzgZYx(ekJvDzT zbtiupP|ogTcm(_z7Px2+pk-x_stn>%9$hp@O*Yai8oDvnXoBywiRCQSrR8__^Es3>myEvKU?O zvd;l0R{60z^DLBkEIyz8Q{(XyncA9kHL;^lH|O|4YJFarVxJ^j10V}}+J_|9jB?t9 zx>_Fl&a&zcP{A2kWoGvK8|n=dbshKw+JW?_UfCP21xCc0PlaYO^!S%y(H5W>I}#J0 zkMNK=kQ{hrr>%XcV(P<#=h6D_{zAj(X47Q1MLVo#20R{{zONk~*)d!?^^a?o)x^&! zx}(4}PwNk9*LiDeAu@6A=tJgT@>~7xcbg{Yb=?1rM zv|6Fh<%gxOUCm~+G09sLzc?7AvWwQ#du)*I`BD&ZtH)=y)m@Buz5(DS1L`&q0jp~<3-s2I}O zUDmk7zZDS640tXJz_jPgPaX>Kb@&T6Oy5WD5Ix_iXQW3jds*x()^6YCIGea)Um9=S zn>^PPG_l2|pfm;}wK0E6uas3rC_)eT60FFR2deHlo1m6J(nH8>iz`tD2S?b+ez#OV zZIVTbUNvJxk=rKlL|H)JyV}anKeZ|4G;itKO!TT85vr~#_;Vh?D#GRZlOdWCl+vY? zcXV(e*abN$$RIg2`IwHITl`)%=VR|gcX+#w2-8pi`Kq$HH(+y``1zKTY3 z&}rgJ8qvz1*da~FNml-jkK<)UjzJaJVmh@Sj1rdR8j|F#l z=q!uv4a+Cx5M;e?_cUH`c!*g!eJ)?YlAtKSo!(+Xt`O{Zo}!- zD|L|P%OE^VY^COixB8#~a~=X-WR#*uMRV+Tm?u5<{)2`q%lZq>F(_TaFR6=wnny3S zI$(E-N7UxI(8Q7Ct8tNMVHE-le`7le$xc#EJ>~A*23J#%kcd37_u1}_Hv;hLmKn=* z?Ft+UH^ygTL1KWj2p>!Z7I|`e zBL6C~lt|$e(Ei;_l6yib`LPC|ZDo$T3yPZLQrbQ6n~wgrOyN%u-Y9sA77mOfnK&30 z{oO-XRrb|8!)c^bW~6aFJ93bsm+e)u((490dhwMJf6$o?>r2!@0b*=<41DkJ+sEfO2WPXp&f2xMjO z@bMbVTr0-^w$P{i^cE`1lvDGXp~ZXFY=6eyOUwDtQ^WeRce8I-bSz5*qz9qS6cT z4UytDs1s14q0cr09yT)=g3)S{ZKaoX1i>3tAF(-~ejMdOANt29JSDm5sV4!=aQ2)a zOxkQ*3#0-yfMVC=h&aWjtEW|o8fbbG9BlB4-(2xN=mTsrFb7B@gHl_(o#dWV8_}B9 zed%4 zgO?J%-y&F=?3c#BuM9!^R;eZ$KrWy5){IU0x!A*M`w!8574?Q*1~uBA1l~Sm%r~|_ zYcJt-yiF-}ctmH38oNu9cB@XUwKtbqw{`c(gDs}Bus(`urHe@+T@}injnV!+2ufat z2jj92F?ca@jfD4`XM4;dTd-|uhtU2^y^Fv$e6(^oGoBh2E7>lyva7XUTF(tBDYe`( zrjV6kD%%LE82!RC@sJRKpp)kgnaND`Qxjy%=w{B+)c0&G_BbN+uqYLB(ckXqixe?> z8hbPp;+!6Hux;F8l^7d?uBb+f6Nj`EDav^bLMhm>b_Z#(8d-Xf&?iqX6jzHp%+th*LNLOh#Qt1_NS7J!4SvEO21#m0-R45Q$&oyHzc{uNX|G|JO$H%kmGL*M6 zRtP>3dysuuV|8mL6UMLhaFusE^h60Y!zD=%xc}_?;Jl~ub{gd}dz;IvTEk_1c=S9o z^1OGn$~YVk?qRN7ebb;v%728O%fi{nGt6W)?JC(0O_&azu1PHsnS<|^ovkd(k0?{~ z@Zrr=XI*gvsCS}0Ew=j#i1=rqSF7LBy#HC+eq(R)Cs_T}m>U<1p2Pst+)jT%1R?_| zCwtgk`I!dAEpC}#EhK$UvdRS~25h8KcO6wlv5?nDZBchH8g?I8 zeVrJBKY0p5=4{Gl;j8A&Mw2VUYgogR%2MaU1i<^|SGtV~yW_>N*@=Hwq+#yE*W44! zn@Do8_S5LJt!&kyrjLySjZ;i%WYBID30s{ov(_Dbqd_65-=0xGqF_BVj*5z91MEH) zVRIC@^bYd*P7xu*ls7v}d0S4(3@&zR&`o~a8>BN@`KoHS-p8&lR{fCX zWufpEvS%_axFkf2xxN^ymT5zl%$%t)gZOd{1&rlS)|I4hWxp%6NTBQ)r@O3quxl(u z+{~2)3aH)62`l8+Yd$;ajK3~gZTHlP<#yvf^)r|pwxfL1k*_Ts@@RdM!#1g)^(!}8 z6{x3G$-=wd-IZU4lk$~K((gcHjQWWNYWnk8So6^eLhzo}jMp0U?Xwe>tTc0m zL$Agt9c1oaRRAXEX7P6}cgm9m!g-JQX+)2A$B%E8%+P7+*mC8t^MK{+o4tuLE5KXv zpxLNA9Gn_wW|q{Sx}ZFa(rn03f7AQZ%DE80lT43i^UuaPoUlstIWyYQO2~26#Zs5r ze!=ls%*|7*(-s$FlGetvBRGLKemyd!sgp;CTgA#!;z+<_nJcjT?y=J|1Kee7Fn*{y z?zrs1fXkV*MeY>VWq^m(>|@_lFs07r1&{=kg#ni&b8~b3H}ebrwX0-W%0(h zB&a-nh3B{%vYW9bFwrP!&iQB$-Lu-HXFBi|fv6|WySQ-NkH_&8QS=v%kABh|I7L$sX z=LEW3g=DpzwtkKKvf7|xU777I29UHc2I9h3GGVPHF+f=4gbbaxB(Bg?>&>rtfx zkeUQ7cByBnfGjtA^k6@YXDGSRU|Ys30&Z^xBtF6HZ$H-!3VqaXxqgd_owel{5;5;@ zh4fyWP7(OMQ1X$0?=8N}VZVC81bn{yuTb8bZcMTsbg+@exD)WwK9F$GygsyE7+jCO zBBGfawL~ONy%w^hXxZ*PBK6a2Sjr=q8Ty49c@znP(3clBMW_o6*E5$DT4 zer-<|PUoWqEBgIY+RSRY_$?TNTqN;_we|$W-AGv8-Q22HKbJB@-4-o)fbX-cnRN?V z=8F*Ry7hRm?*0lAJxER&(#{ z-rBIeK8ZpT8^$u5=H1+6V7CK*vIOgJ9%^qK)$S;uznsK`!8P1{-dj@-kE36~#uU%b^<*hJC7#_Er zTOCQ40-Pd)X27JJ!G9X0C;}_!rp`c^EbZ6;=dcJ?gAZy?%r>g6d{NCg^b&Lf0`2Ph ztv=o_WU-DnymiC2@&gml2H<{Jeu%?0!;Tm!M!U>iI=-45)5{}fn#`9cOKmYm%$Ux+ z#s~HAwTrtP662;|+yPz=+by)ynGbX|^Fz7+fYIK}91B=ZevmZ$wr3K?p?m6Y_ZP&rizeLLKn! zj)zGEfs+<{WcqNnx%`>_!$y0q!xReea8lvG1mT8p9I~%BT}MPq<`b?CX(+gzem^Qk zQa;027Hl{VeyA2S8jnq)T`5e~fB6Tk2W#|e z!^PYyR38w;Yx%Uf$WCMFY{Wv8SpjNt#wpWuELqHSeu^8M#nQtw!?xMb_JRVpn){{h z;cV)Y2TDDQxTwl<-&*XeljK0A->zv+>V141bFH;zA2nomZmfDLZ|$|Z^cXK)*9fek zeEQG7Zu_wy)PCu;%W1^ubQZ~!rwDY+al+AG*pnqiq9s-Huyun;NQ4d9ot|YI4-qsw zNmh@+!Ep;oXwnOckQB#rU~Q7#VCW^xZyb^C)odrpoMO|FYmZhxoTTC~r9@<6$s&e) zb_-EJCe}{#&@u49Jm+$ZiLq~9!H){npe=tH$94%_`+DBiwyEO^;b~X{>uA~?G3D(A zc}uodI~$H!Yj<5=ppBKr#ty|I!nz?<{xxUxs`=LVVz$QHn|#LvZ|*O} zS(y&W5MGf}T>?eLssCd_d{f)b7WPO4|n3OYU*V#oOC+vABG1le_8;CQ_4^ zL+H$Z@0RBpDkqY8Lj=|Le&Bl>+27P})1Ztl^^|n=`P6&~%uV8i-1yMS$8HGku`F{-?_ zEX+!PYs9$*NXE%xPLriqcN zz~0}sWI580Vb2ZB;5&zmork$jAGW7kK4oPX4}ZDLUrIktQ%+S7G}|)LLhfjE#AQR zM0+fHFI>~{@ZvVluIF2)PD`W_bW;XTlR>#A248^SkjjXz)u+HG6>1ix!aNaxpkV4W zh`**$&b{xTDwZ*#VbMdGvqux*kI{?C-KgR_Kfhy+GiT7usqs6Y98Q;@6J_zVQ+(gs zKJ9+5cjhSFEIn}2Y`ivHubmvU>0s=$1r)t0`}pbZDnB)!L4^L$IuAV?FozCb2r2m? zw$9Uw9K@WlP9~qt+ZzvvlU;gKsiKUHU5D&Bmut80jK2gaN9QjQ8gCnQ`J4lD1CI1o zpVl<=Ya%z=jOb>Qq`Ad(q+dHwy+ChYpn8;C*b&>9VVfdEVp|0p52a+Cu;VxhmNdAK z3M?rpj}_(&eBn8i6X_Cj^<7S%-fsH=hHr`3g@J2@i99YQIK4_4!j`V7MwvF%Y(6x& zv{b%se0+N%S}E)J79^Zy_dp$fhzG&@_dj+U5rX(&Cs)(UfA$n0^T2~IM4Hc_nxcTN zr$vQi;?0pWLe4>67AV)a=s<;v9C4LkSg--LbIDS1>;^!TD;xkD(fC`2UwjA|dKdPV zo3QIgC)IaNzlI21`JI;osfs^ma7p#5rQF&S`dPV7O}i>9wO@`eEa_3d6o8rH=Wncy zo{axp>5buCnriFUI#0AWqEj&!-L^rtD@s<3+%tz z!kc2?r}|unocak2IiFQDBK0l@g@pyqCO5kzZ@5SEIP89qq|PL578&zNiHy$#GAnfPPQLVEKq<=xiiwvKU%=k3eO66M0@ z_}~VAPV(_V{_`!|xP%&Au3<${YBTQGWH6WzUc{2OHM<)XCeKaWiJEudO*ogjc6yW6 zVEZR=Hel(j5PD-5N5rt~$ZLE)TUV{4_O{~^WjqRE@=#7ErgSp*;DBqIo%jKuSu18e zp1ZwhtD+y1-oyTmEr~KfXKc$56c`>2kWt@2aCMk@wM`pE*2pa-UpQZRIYDccbED6^ zfDmUUcnj28oE|Yz_4nLA@mcy5rs1zIe-}lXmSKFTrSE>AQWHYR>7tW_bsBRlXXReg zSNI8k9rsh*#9rL^Lv_RL1^TN0qgJlZ8Al{9$?s5bVyOo+HRO))I*<4dP!Vgm^Nz_$ zp*5FvA`HdNDc)Y^2`{Ur#>_|zm=?DROe0UN6wjiaSdIY4ueS|N(24-hCJH+)`|X79 zr>Bw~;klwCsgswD_&x*iakA&zn?rH(XIA4Yh8Ri|T$f`j?olhDx5N6gR~3D8<6Q;C zrycnpwU%IJz>^nNGv2Z49@1z|G5x>}`T1!Xf3;RIM{ocL<_RFGqshr0`zup?dsBw* zP5o@paU*A`uejVNUaHW(`SeVg?J@D7`qQeIx88iV&KdfZNizeMK?D3r6^Ny>H@-G} znc?3z%<52!wl-P)f;&Zg?j(@jx4KoXrgI)qS2X|QX;=5;)S$+v|1TXW8gz&}%s=$3p`4fDjz6F>AO&OGr`{)He z(!Uqwk$~>#`$C?m$#Qh+wT5#@I*XAd7HEuy}98^Y;q zp^U4?_Ktg7LQx{m=$6-@?#+pnkh7q)O<#O= zOKk9)ynN3U(`b=b{Vksz$0}qNz8`D+oc;$99{EddX<#(ZZsMx+#b{En=#YH~b#FS4 zm!L-}X>UulK%Qr&5|8I5wg%&kPuC*JRXF|HSr)VVpwef3^I4&t z^R1aR(SYvCOb+5r7RL}=LgETA+x(aiIUXcmHbiCP2zp_-35^_U@P7ajjkWZ5JJ%W- zkH?akoP_41dC-$~^YMV>AVc1R|L6|5y&HM8m1$5aAXM`DP2N-JhC^DdmK0b3NE&eV zEH~h2H&5oAGT-RnT?WIUJ4UA%F{Ki}d$a)V0I6&`2d<0y-lY)ic%|$*bQOdfX!stE z(-_l%NcN%zzP<3@@-Rf4ke;C}ZG%#FP z){wfOCJ;U9{^l^p(Vt86)#|;mKOH&y3|Vi)BcP}s4y`YK56Am8j&)=w9b3`uFGLNg zlpE+z(j#NVwMj}C4amjF63jv{_cpeNX-DbLU)oI^B)ciIpqtL~HRsQSdSJ|dVn+5p zu~bC%iC+*cr+J~?A}c*ph3T_bexgh>-zKN3u?g65qa-Euwq_!Z>5b_o>(itgi^lJo z+7;hw`5#-0Z>!vH-5w9Zk10&+0M1q)U)fD>EL?XM{XguTWm_9<+ph24ZK1SC32vph zTX1i22~wbFf#U9v;FPww6%9_&;1qW#4uOOc+>2{)*Olja-?e_l%C~&Uwq=sJX68DN zW8X~^-1HphmRbQZCb!>7_Y#^Yp|QtTbl)vlP< zXIB%IPru2g3@b2gfISCzyHi%2k`&%1-S0;rUI!2|pq)8nrSB=?NXP3p6xo34Rw{44 z!8nWVQ_51;bb0?)Y6U$fn7xii1$o#rezTA4T&CiD z5F+GBoKH$THCQqEr-$L1SBHFHP_j#@aBJZ?5dImbR27O`Tw1i<7ELL;kqmxadBnOh%T$d{$u$yl1#+3M)4qt{B--pH- zR&BIhai1$m8$N1g2uG<|YLxaiD&3H%MQJ_uXrZ{BP~2RWeU6rD%SEE-6FGV}mLi~= zr;Ev6HFT!widypL4Zeeb!cG;ozb4jYf1*BsnTY9llIBTw088I6Bn5Hy6p>6BS=A#@b{}q zeI@>UFFDT)F0mmAEecQ`(CfW9Q>z{E1CqU-*;BN zEuPoBXW!7LnCJ?|?UcCS&l=d@OvU|Wz`f&I7`(sz;p-cxbl~5DUT6R|QRKrrG_d_h z%w-^L_p7H1X`Oq%eQ*k>(~gN={(H>S=RmG>@hDqx{5sI=)5g%>O35qlNLq~I$@)%T zaO?f=7lc;2JB19wHIDj3FG<+t;^_~Mzplu#*Bf;gSrY0;IP6?bO;5ykK~O$B#N%i! z(f{;1h@}I@09CKJLH2mM7laM?J4$^vySxwP!0P_?@;!sJQ7h8yPEA6o$0G7RY2S#i zAyR#R?8Ue4kc6IScEvmA_~Iq#?c<+qT1rmf>v?te>p=ngkDr1^H(n4v0X74d8Ha-C z>pSd}b8!5Qq3`L{#4aXg`n;1X-kk%oM{pWG{9;W)b+8HEIR;97)=wkCSqaVU~^J{zOqV{50A19l$Z11!DN8RS2fg%9-^ej z%oe~G^EE>%!!ZzwLSO|M&dg*+4z9-0)E@0oVEiia{fR{f+tssBm9?EtwXdxF)E+aO zhEvAB?><8LR_HND@aagUNr)J&VD4=;D}7-FL!NgAw0CH{p8OE{?x*2)=Dy<0g;dhr zg;B@DrsR_U360dlFD45fBc+iGE495A0pCXMr|Jd~wW=1?Xq!t%La7`tvzQ?IJhB4W zj(&vfw~}N14`QIR6@8h1-rt6OxX7OZEe3|Xp6u5uq`^`zLd-MSq1>gY+~qx%?+TB$ zYtqpxxxIdn)iS-M%{|gneP3hLN5ypD3GQtXF2L;uuT$XW>k0Z6=#KD_LCnt80z?{l z+bx3ZNz=MZJSqM*Bbm=n1J(%lqY{PK&8_sC#dPi~rOV_M(~Vc79L4p7Vn17M2-jin z-l3tQ0-GjdZL&m&^M_zt{7ux&`zDHxyq%={{Wu*de3pk*#$BnKCtiM4^8FtNc@vV` z5=?URip&s0`H?$pFOlOn8aU)(HANb>R*}4acNQz%F&daNiIH_b|6hxdk_%2W zv$NU#tm-qT!+|g>n_tH=z?FfN+I$i&BmD?>XD5UX~@|DXWQ&d+H6G*$VkB8FD`;l|Sq)S@?@|7O=TUpW|C$?OWxP z5_lD;yq%fmZ}5@c4Ukst$KP3N?%oalM!sPGFE&vD+LTglkM`B^)HI5PdXS1{lCYcW z@!E4x?<*!9?XI&B%MVcftFs{Op8>grsViLIq)po{??0{Yo^X-~*&(YC z0a|{kDYsD?0^HphV=I^>@J+HIM~H(iNrO7|bCmU>zZ)8hn7a%<^Oc@&aPISSlb#c{ zRWB?`oN*mi&s44_#3tO*<8NHD(K#bW=(q&Q0G#F+wIqk*ofeTd*Wz+zINs4k>+`y1#G9-%!vMQBY*<)m3^=%4VZavuGat1 zlpKB2%>A)*XTaWW*av;GTl68i^iIr4xF6tZN2A&b-Q0jiqAY!$5!w$mhyhn!2fcUC z$27bJazaKH-IoZmg;Ppw^hbsY1}Z;WPP$zEJ|e!BevIv2_E$W<%w7+vf}fUdeE^iZ zkqbxL$o1s;>ojnxVP~x+VYErsEg*O|uW1IT46?kQHDJ1d?k-jDEGjM?PtbyCb0-|= z4BxstZ{Gj6{}Ov6YWOdMx)Z&fP@BW0Gg{tf8jV05wwpJhJj^v0T6LZa z!bkJ$-})FfC~A32XfdZ>11pC6VvlC zz|n@ZR=_(rm8!)&OM%hygn*tg7STVA9B;gK zwWrzzE9M1qKXtjd?$w6JM6jjXUijzZF8WoNx1L$3m-$vKno)RC{^{`M*$lBs_^eBy za$W6Wt}!Q}m$t%^5b<)k7Z~U3e=!4@*q;gAME7o{aM?}vL>+L9dhmZR;$#a;k{s=P z*_r?)KHeiZcE8d&`t4zNjU;nKw^E9=ZkC)wuJCUtsLg8c~sFy z4#UPhxjnnqSs%X8auDGv8(FGJE6{?Od%(zivT{|<&rd;eE@>Z;N3N70^1g4Vz@*Nn zfxahz2uCQ?)#9AEf3jH3K)F#ljC6ukH?q{qkoUcuhs=eWZoQ-WaNHtOwy~U%+&g&} z>*4ZT;W5FVig+6t9^hP)Nf)raH zBuDpWVBe_aZwy$_~_J~O*rTt$BcU@m4ru+r3RQcm|`fW z;0qU;l$gzaJvc#XtPgZzJq4HNDVu3rd|Le76dbUv<02wXWTgcS_#xUk(X1-q$6xQL zHkVA>s}+%9S*wL(#7xii;D+rxsi82CsvWDuW8IT`n1QvA;r zhkhZ>K>WLNC*VKhC!E zAFG0eZudZ9yyeH>JX4*5;L>s3W-l>wrc?h>i=>9-wL;VxbzQ__-mGy0W7;nDXW!;I zPge0S^6>_cJIV4_6{e;A#rz7+1xi$^Bopg$G-F|D(;c{lL7Zw;`G9-ytFZy$8lUgj z_kLczs&_$Lx)WCEzP$S9ETlV#Jj|?L!sMep@G&9cb=r=lzRU~p)|8#Bxv^FaT7)nI zGtcKOL8|_8SO2gJYs(7cnIx6!ddPd+eaSQ=12>$JExzveaZ}J#N=to;vg%MTV>jQ{ zG`y|RrWpGP$KNqe$~`M;-NPE>`m?fyjPXs`9n(9mRA;1_<~2TQc_ab6^L8j@o;yyt zb4)a+Zdgfu8F%%jGA-I}OFb_5>CV9{bZGd}T|(t7$2NkFHaS0_)~8L_Th|x(=fBDVVb?+bL_KR@%GOz9$4cTx zLPN=XF4rJFTUiiR&7c1~m-Y^8JSAI2_)n6%|HXR0unNB*#NY+hwl<(g$p$pD3ekkE z6xWLmbq9^#Hwc*lUrA9rB|LWgw)`2EQ|VkZrNe=t&Gj8W)e@bf+sgyRmPY=V@{ImD zz>qUN9I1!4V1NEj+Iy0BL_9@;P?@_!=Gb5xth9)ZXXS_Nwfz^-^F)!9`P5zF6z6I< zSQR26RdYZ89?7BAH6JITqD(YIX&)|^>|&$nSI%rpB|juruC*V3)W8u(165;eAUUYB zQ;aIZ02WTml+Lkg62KV6U`5JFqd|(1t(OQQmhCuW9^U88%4d46@8~yI+i-f=x4lF2 zS(Mya%g;@`8Akn)ehV6bJNmw zsPV+QbvI$s1>w2xb_ps;yGLxQ!=U$XM%I-19JfOiyu$eC+V`h zQS1sSRUjHKn5a@OyrTK+uH}hW+306TrK$^U8h6A~LMw4YKHK%T7#!f&r|ps2E}MZV zrU|}q%s{Qd)?^gfWV@;X`gw6WxefFolLDF-sJ4mgw27lEHN}S~E55N=6f@A=ef-y> zc1RSpZWtlX7Cmdbc{dZc&F4vee_#K+yR3mn!Sj+=N>$FItVrOom?^PJJUpR`D&JS6lBclapl8zo zr?)Iaw&ck(T3Y%0fygmsxzn+$y=Q1Dg`H7xe!ok>ZmZaomFRwQv5eT~fxj#IB%IVv zoyPX7!@bx$Cd>HO2RqtQYTzlZJZJ8dz+cZ66&!7#xR}A1`eIkH3x{$LFvW^c0bOZ1+_?9rt;e1a z7eb4oE8J+uTMKkZPqt0*0FE_^)ienm+9=@Jg7(hwLCp2|k`cA96oG}hZW54@pSm%k zoQ45k9i|ERJ7pww9S_tNvx#gM5E55Qp52QOM9w5E^3snp(=xiC!^v{$f5<6YX$4djV zg?>K22*zbmri1D0+>*3_40y~9<$R9JNcA34=w37Y^}DmS94o#^8-|%vI@ti4cV2Jv2UXo0*@+t7m}Tl(>v; zMIw+0elqq7t7E$C!?unLmKt}1DB<-0N zO>eT1*$y-GiAFF0f?^4z^}xL-JiRQ0Se_5{>{erDv#>;w6SG-_@TGafCfd*NRK!iQ zmm}Gn<+pzgtAn~lbWGGr&5jed%2;8o6Ip|D}yA6oQI@axTsxDx~)`q&6Kmi<1fL)stDUyL*(E~yb?pt z*Lz&0#ww5W=##mrV^I0AP*wxnQlHs*F5ZmU%!$7=(DpC-1ij;>R39AU9iX3m;mmK4 z@s_T53KI31pc5RkN9OF#q1?Y-ERV}NnYvrpU-L0NMK{Msv1n#bg<1I~m=G`W2t1b1 z6w?l$HA+zTrBwG|-Q-BLee1SdbjeI{e<;Ps2dx`_gk`8>%8q66!BZ)(Lml)KBR?Lz zx8iZ3n2}>;&rxC7QPQBlIy3Jl75?K7SH2kh8`#rI>m2Iuzv%O-j9avz5Bs%;=QC;P zS=>~DEj$JMZw}R(tupT`wTTKXE zn0%~})ekD;^<`p&^<=nl0R<0X4U9}$^0aBh+H@~!@DYeD$TeJ-4Wt(;bHLng(^Z_u)x)6MaTQt9*|Xy0;?emCj8%r#_r3ym3C zvDw|G-k&Na1vdUGm=c<3OT3bcrJv?s+(=g3DrT@UoF>&qwd_BKdwDqj>*xfp5@r*B z5ZT0#?l<@hnHkKt`=j8JaU-3e@G!eKQ?I3@Zi0iLR^~;@`*tU(r}F7Ys}r|#U6S($ z+hjdwgSs3#HOr+;wa$2cJJFK@ToY>weR%;6zB9kP>$-T6Wt`~keI!SHiu-$WL4GqD z{`85zw_g!;;_or}w^sRD<$EFD=gWmOb|-`50%^1(ZWQIHe;aIn-15z>4S1~Kka0+7Ww-7)*GkyYDD z+9WKeUqt{+54G2XyJ-0xOx?WZWutVYPy&x6nDl_MqNM;mIX^Vf={ z^;F#iL_8jX5~4N=5COd@=AH_-pmSd}v18m}EzVJ@50n+KlO;=0xJDKv}4 zqx%exo1ks`Zl=gh1hI+*!?PBVfHIsw25Rit?b=WtVr{ecU+jy2yIt9x^L1hDAUU=Io9eM zTdXb!Y>vF#*bN>_a%>Oo+3Fr@8xS^Nq$VFOrR&sm|0)e-=o22g6=}*NSXS|&3>Zrt zqPp}Dr$1a$BZ`);_h&4m$O}ef+|m{%Ah&^r`ZSp6J9i zPGmi`0yJjK(rS1_#X9okxlX(26|16eM^72Tntx=Ayb)impm~L#a9 z)qz9OUch%J`n+)*mfe1OG3iS#yy2uGM}$_}=|x7{WxoZnOMSFKnB`PPg^6h6o6+eg zRQV=j3QMG|x{3VdR^*>{`&OucMa0dZi+B~IQ55kfa)kx=-mQguTX_2}Xo&<8tZt%hxK>T!qoeauJ*U%u1|g1n$FMzw{*9k%jQg4T@RR zTWGzr(&Cl_?@2<85%aBNo+zG6(Zi>Z8`?VS)fjRgQV;Ik+1c8Q+6unapBCIQmOQG zhnN}L%C@RoMr@X*XHI)sGqS4#=h;kQesgu&B7?)p?6}JZ-k|qOK`heGJ1TxF20(}! zrm~984UgOxtv=nG5+m3EQ7ALR#5iD!LO@$6mvtxZ9qBliIhjyl7Xht>cgsJtBsbq9 z=}F;RJjz*BlBx8o{9`HMJ7)q#4eV;c{#Bw!>tapPoKjZ@xck98Gs^#1B$tE#3zvxiG zOb%7yIVu9I1*>xC7sadV0^*^N!HC4Qhy@j#^`jB+g#XrumrCM(x3C-H`#VKSXvM%_ z6l$s_?pNJ=r``6YFMN7ga&X46WbW?WU9kEYN7t}R!0&OMj=sjuqk%5kQn!W>|cNUQ7wMW9!M5+&udvV@Xo1iJv=x(~i?4Jzd z+q#4AIsgINoyU3BNOHvORvlGST7}jCw_+PE(un+Ij6i@*JiIyHAeD=ck(#3K$6TL} zYG3@s&h7K1zsc}LySl%5FG@275%w0)o>K+XpFdwif(f5l6>LUYha^Xzy}LlrC{O34 zSMRsH;M{pyYjNpjZv9j$`KDOY&5{EB2ogVL z`Y&V;&CTnSB67f?irhlhGBJydrn=deyF~Yq8qz@d;0Ibn-dZl~N_o(Nb&M^@6a!ULM)F z44~dd3upzP^ff0*-0SF#O1=g9pIVgzyXq;|hD3y3#)&cch&~zt75w4z8oEXIt36ln z>-7vp1Fgy5Ti3J$N3!CjNC_4%O8M3Jc--O-Ny4;|7N^JfD%)`@ z(LE3OS`H8F{7x>#9+#HLPX5EIR*l%sc4TTe&deZuN$`5NzOhbV*=G+Ya_YqLXwJJE z0EjU8loh$$#!QqVe09}xdHv2f(X@XM&Sh6C7CpmQ8!nk9(wx`iWyjF2qGNH=p!)24 z<|gWsu+-JNO6bMoX6>?On~tgVf(pGBv!kWLYNx|9w6y;-*&Q>`3=!*E+zUvAWK^_Y z(TrO8d8sNzPg&mc^;?%VP#S4ZD)>EfNCO_OcdH1ZG}bZ~l$wMgald{=Ia#<=c3vnQ zuiWGdz3L0$JamJ!-h~55{D785&*I`?()kR|iPFVO@HyI21zREi>le-M4T z%r0(k>bN{2JbNRagrt$&o^*Lpc9+mxc<{@zw9B0DjRrI~%8%zpomN%v*kig_re!8fc%UhG7P+c|ZBGcMNiU@jS% zB?ff6S61)04F4x3*#7u!zc08T;L+_Yrz2bKbnDll)@xzQU+NKfE4vp@qIagBToS6L zfww71YuEXlrHmT0x_AuQQ{XBMXaF`wM58}&;Ymm(4#^%&*Y5f*Vin4^I$?jh^>>8H z(J=7GI8Nztag5SekxnOuJ(lu578$vaxrKMFYcPKs(p;L~5hP`^ybe?Y7W>7pmUst6z~ej}Qh&Q+vZ`>?4G0;``|xJPmX>6R&P) z>}3v5@xU~ryP2MVJa_!o7A1J%}`y!RlUm|C^ zS+?U2H<~?|<6qk(wR!Ftd$m5RXvV&vrwrJBt7DZk_eCJ9&0q^h8emwvVx`+;rgEuh zMD!2ikt~taSa-F|IGUI>&&RH8XnSr>5Uf%=s)`pUv zs9pDSdZlc%$sd)}gAV4D;d3Du==Rj6^?%45XMtvQt17Qn;KAr}+WKf&It8bDFj(tt zV=Py`DNl(70f9sjsK;SQ4D5@rc`UT;&f@!ijkftV{qKcw1fdyJrIbImH+9^RN(xGY zeb;R6X*PY6$U&XSbU#${6qVD|Ta;X`o^VmqbSKg%Y0xw7wZ^iRJT^m?2YK8o)&3v6{RBEUy;isN~}xPIYw->8yQIZ zJ`ZzFi>MC&qDHz*Z7O4WthN*=WK;W z@&*M7pD>G#c}8K8xodWoB)9LzGQ;ckghTJzbu5XW8J5PqT5JE@W1wO~t~^UFqID!( zJ98NrqMp?{*o0C>WgyQsY;X{s>lbFLwK_WxhC7k*d|WPOC!49<;ohr}T*bHpfHuwX z5&7u0ogxmX-YiM#cRY?86kIdB_#65ZT(cehyk1!$k}YDQEW<#==LK5KGwJ5IK=sng z`!;O&jFZa4pZG~@D6jI(L4)iTul2NAi8i4R5G!+049bVn{g?&T_7Vd#)yBa^81Jtu z$50m#)4vH*7iu%T%ZdkUE{_58y~`YeK`bn$tLvc@(YA-Vg*$W?AbpNiW3@p}g;k9z z%gMT~v;8GW7LD8}ML&sw5$l67azG*8Y{l+1y|^+;LEQ_}R_98(?~P$*_JVR#XgT3&^mC z5|JK`+Cg>24RXUoez{Yl#o2?v$znO92{aFRuTe~D*ee4z)#mf>6h?&NI-yKcIs!fERMf8=sP`0Q~b=Yq;6HU8w1dw!MOgXz0#burHRS`%x-C1()~ zM*}%um*Y6788vA6&yrYVO5EM=pIK&~5Pq?sSP%>lYd>A0N&j^6+n2r_zK7Rgr`hhw z462l6vh#Fm5vpm&@J#;u3!21C<3m(EtlMK(XTFb}K~<{V!?Li1=1H=#XzSHF^{hMn zw`j+DS?Ekz_REGj*J63ox%l@fz9i%KC%+cjPcZ?FdgDNMa4x)_Up(;)1ob??wCw99 zxy>l%HVHaO)8PjbAS;a)3_od%bt|*R$ZOjGZtjG3P*1mK16^dfTNfslz*n`vrH6~l z!X;_u(1!d^OO?t(`;`LK>^7IcGF`0t%@1g4uS>dSnE3jsfU8Z<&6=`PN8Gt6qDiePB_1$Dq#CqfV`$cYu8{ zvrq$|m$D!>83=CEhOsXl#`XubG5n+k$nFXnG)_;Hgk%T{d$v)yFD>F~XiamCN`7V2bE;OWAKFk$RU<8;w}dP9HC1TmD~ILc8r7`X zLiGc%#YNRz!=jfB_PfbY&@ODVbZG-dHi@8ChMy|3H!{hUx}lj@x>6$}P4mL`WI~9!g_+@@@pz1SiLraKWumqI%hgf} zvD#)yHLhU|ltKze%jt5Wg_M8SOeMqkyLVC6k2TvyQ6Lnl#pF zHmT3>6Dl7TXIyeVd|+dho(C`tiHL><(t~VhRqrZXCh*hQ)e!h44#)8g7C##@3U>$G z@5{6FMv0VW-8(WpEH|BUDp!r+?8~j%+=WC32O2ujcWYofK!*0=&K;wAZ;(&xaS4;K zD8@cF=gk~Yn-WI(?GV0JNki^|e+-*D)_fS!5&t(5VO^pvs8Hsn&z0B;QT%;7QS!;7 z%K2s#LxX%|*OBdnUprx}IufplBQ4Q8&3J1_L1eVV*r%@t`QU1!d6mlp2T#v8GCGPS z%mR-DkXH|D#jQ?S+4EJ#sB7By-(jT?rqV;dhoIM!mG!OXm!hzEh9XoRq}t{9v&x-F za{H4HjQ2bXO5Q(RJl_amu!^Q3hE@BcvuY*+n&M^^t=&Vn;hPiDuj&8Yv~{?iBbe>K z=yh}|g18upi4joD{c|Ern65<{#U8bE@Gvl##krGrjo7lr98P^d!eS%Wd_9=l$?IVyEb0lmMF&*D?4AF6M=|VremuE?%eT>BQ{fJA2{Oa zV*U_nn2-2efIjsvSxn>bik*v_{Fik|KnSeX9KIWA6lnziJC2QKbGIOw$=|}u&gZjy zh(V9m|K~Gt>%l`QtzeCLFU4ECJ-z8glVPZu?}1^5AM(F|(rpRi8BNvgdauekepb;v z@57*qSfptbcl!T2b}*#+H<&%H|Nrhk$o@CKWtr0}W~kLO)y45MHiVbQk>WHnj=JTY zqL;tSy4W}B#P?@7FU21nbY?dUTS zr?l*~|0RfHuzrvH1ZlQH7D5z!>7dk+%iGFK;Zl#2Ll>l^V{uJ*MYpt#1M=K@oR%x& zlZ%j<0DEW2V^F8V8wGcaqaonoa;E%$RaKpES^D(pgfy!@^VxxgU8bwtPb~I4&F@pj z^A_ENU^CS)g+%h!EIuYmet%3>m)ZJrW5L}4jY_S-Vz5_&0y8%ZFC)C}*7$PEf@Gwr zM!mXP!{tVo<~QmscC~q2&1K{C{4af?LjSN-Z3y|AU*(!yiYgJ3pe4h(!RlR;FgDBd z7NT)!C4@GNzweeZBCUjAGRwPmHk5%Y>uldst3u00mxV%EiaLGv8~kv>?5xY^6JK+k z$K`Fu|2-0>i2r3?rz#s&jaZq zmX=Lih}?3%^wfvYg&2+(PB~r-H9l6`>Z3>vVnDzzdbNK_5PEOBnTD|%rfO2Wo#ySe8hZCqkk|?h|^YTw^?-0#^Cq| zT_m>`Z94{?n9?gmnADOh7Y~}UTuQZj3nz;LgfsF-DvUG5o(Gv-eHh2(NNVfYs>jD|^}Q7z&yy1>z6&FfWhZS8Ds`R){y0Ih^kQI9W1* zaC@-`&DPay(eH>j!PU!Ve4-1T@obM&0{WK+8J9MDne0SSwe{q1ca@HWP=gAO2NrZg zghr;hpGhDbW{+-CVUTAw5DkRaYW$CWL~(0*Etd%KO{x-9b;GsYXiF(gN{iflmD^iX z7{%MtY1>dhuB;NyqK=A+i6H_g3q`z8ZSDV}-z`6*d`3$Kes^z1wFsD{lAW~rZ zEfCMS9H;u0Z77`Y5@{PLnpR*buikusUTgMHXG0pqlzQqPn^%FIL&2W{d@PJxnI1HXeuHoM{Lz2U|0d-dq zO-N*nTW4JL=*;-(pFgF_5`lJW#;}qoJ@yvO$55*3gQ76HEusVu|20>%&4(yv0iP;9 z3nYshgUKwL)Q=k_Vyc9CuZ8CGV~x2iPATOdVq+%>duz!tK!ZOhUgpg!aB>`>Lj2rI^N?qS+^z8013*--9xU@;HIVVF;YSJZ}xm~ z&*#D$3HRw0_`7xg3c87Y+ccqP5PS}p;xAgd^uM@Dl(_7E)ppc9Jdpv;Y$r6=H7uWL z4;xCJTf6pnzOYbw3NJG@Ag>F?p)nfYOl$z*d77^P#l=46-Ocy0iTr)tXr8F-Q7T^D zNs5RPjV6f-;L$Ftv-tE)H~P)^SEz|^1T4oleKaH5eEnEyUzv)+=!`)s5lH!c>y!** z>Y@XiddS>x0gxJbJ7F%zNdD22^>K}3YFb@6Pu*hum0rP?;yhxHle&0DtK%3mFr}Yh zWgegQJQo|rU-n+g#BakY+wX)en|(6aUKRPb&e_6nmgh>PmY-Im^G@uVlKb;e$l5bM z4cGwod79@oDHLIz!m!>2&M}UJ&9vL<=%ovAjIL?1RILYvp%^ZzC3)3$cL8ojz9(K; z5z#a55#L8979wK)?*iM2lx0mH9?R{c*IjtIRRq!ACARDPa;%6m0!$=M#qw^`s(f4PTS6Rhfnyeaosst!rVQ|3>0Q;x zGo#_{o;(z_FkcS!yLQOSW8-nVXtA8w;mj{?Fe-!u%Q$#Q-Z283G0w$Svz;rZ1!S?B z`aXKkAT}rH?B|**Ez%&`{1Pj)?eR_F5|7%(!zqQZvp5-|HEps*^dMxOUs5DCfQVxZ zW@ka^X*yJQAKc55<_-;7&=4?^6L7JX%O$uLdb~{9mQ3TbP~b(y;39cq^kt|3XqCqU2-ePnr8%Pa58k5{7yHUucaaPSGSbahVq^ z(QlW>1o$Q7hj!7J&<%;|^!`eX9bWqq`@8tY;SWW_&zPg%bgic>Yu#*}_?uKwNruJQ zOf*G+_H?o-3j;UnBUME+e|%@-|Mr~ad z{i)nCC)5t|znYszKNklPUwr>~=DUF{cD^*o?LqCP#~iio3$;JTTCKl+;U~mxaruLm zZNZr?fWV}ivLRFbI`H$+%OGSKRq__={E$8{Ny zEX#2&^$RZL+m%=39xA=)4V(%7w#bZW=ZhJgi1FWbaVye+@{3{tsg&z)`)Wesb4b=< zK*?i?Z0>2+*qU;Ahjh|%g-ffo9sPRpduzu5ab0z*xoZ18mt^Tc4FMO6yJ^}J`P?EM zmF<_$iPxb2%X-MB!Kr*_DY}ssV$qKfk`{mSX6r1LOhV6H!A2^=)m<7#)~8U(A_cBsP8YwN?LA0!H77XFKT+j5YU}!) zuOWq8i<4%S2+r+(f#rSs8sZcCqI}gGDT$=Zx1CISJ@TM!tMB%cQ4?JDD5 zzv=qy9rD$*!TPR{7*M0}tHIbKz4NfYzyVCJW)6F?L&VW;`(R5Ex*zkFwLc^4ThPEk zES8x1A~QJ3Rw~)z^0(ENNVZL*57E4)z4{OKUFwtLe&; zM#^%e>-C3YZfJh2y!^cOW!JOvUQn_PGIr36Iy>l$Fy_ncr6!k|Wl8_zaiWXQ6mj$t zmy!1fE4UG$})*a zZ$&Bn$oqxOfg1n?XZ@1=#&%vTE~}SKJeHZlk7^Ovf0kyo7Wm-}F%3I2_?+%bx`&&!E&oyo?^ zO|pbxx&elyJH63A1qc!NY&|{~8aryIHtc-e!tqB<0geab-%OYG;QM9M#~N)T7b}w6 zrp;1oasmTZ_a1pZVd0z0jeZ;)Ujql6F=T;=MVfh}MNG|nngUpXojdIRJ=s1`zcCr3 z&Z>y8_DlcvJ#kzgeJvRx%`+q(%3}w#q`C#U^%`d@J(Yb@>Sa7E=ET*tIH2~gI;bcF zQySpx?0#PFPG^L(AcDj#i-r2R!9Dk7ed3;eiokGH&y{rjl8Q!qrTkYqLN*lT?g27a z&2AHXZSPOb{AS9|@-PC}rQsu54peC$xo(CdrhIcFa*5ykVu5;$^J{~ZQ+k_mF!!s* zm9cg4xmbhWksS7m!K%HDOnQIrEyflamY$_VOz8${=lNVq0}$3MmTzpP$%O-j{3Bs; z$)D>pzj^~kIe+%;$?vqUle5(374rA*a`q*7CTkDcFAds8p8<$ z`xOBh)ENo=0$*Az7@fEe^?mv{>lQEhbfM(bP8O~1(RO8S#UY&DK7Y_S%#ZQ?WXJo) zep}0UOazm4b}rIDYuE(R*BQp`Br(@a|9{UnDE_-!Atn~|@;^^Q@0J@?P&G?(DVR}t zRG%`~o^`qruke~`7Z3M2>!J&hpBCe?zKgCPCuo+IQnLghvWdvu*o@ zreQmZG--f@t_>2e?fL3Af-Okv6(MPvgy>YK-2emzLd0Q`(>z|$;Hyy!KxB~LEydLp zOQp*<=ZUJWp8*;}1xA)r-Ryl7F6c<7O6Btj41sK#ay zB$tghX&Nyv6OTD+H{0(dPzQNRNka=`<_d6``z)#Q* zfo#3jShYc#uNI`Qk}#MGUd$Z+-x!!ktNrU3+`jE9$rq_g+Yg^wGZqI95(yewz2>bP zI}SANRw>D)c0+Gv?%%)rpQR~FIxI|1pvPmAG2Q&6?yHz_n;)Ahv3c>3R}+sf%okd zCOF|?SWh)1&H);dA5$tFcwCXpd598BN-D~&5sgggoQ(a_QGT%g9!l%Wdsy@|QK^GJ zad&JV6FaHs{}*48`LoJLs>pSx{B|fC$t|$_o-)=U&xasUWf}&(<(!hYu?rl=xS#yM zxvIyNBRF*lNj_ie(eq>VjxMB1qN^jM`war9iub))6sq4KCTlSRCuZL3TuayGf*79( zPNOB<@-MTnIs!J3@sXnAMuKGmMWTnxye6bTTq2*d#4!Va#vsh;x%OC9jatUfw*onF z-RvCFYn#JI+j2c0ei9~X^bw_7t!-Wq;&P?OL9+v}dLU|7$FP3foj>tudYp2iblvk& zIQ6&^k9SezyCW7W*ZI%T*)q_^zGZ9|H|2Ks|HIc?2DP=e;ljJ68+WH@aCZwSP~4$F zi%W5L2o4q8U4jR9cXudO+@ZL;20iJ1&&-+meth}0k~NuG>zP}xTdr}6C*4-jR|N3g za#v< z4!$UnL`hK`9s%(HE#%~=0rX)*=Z-xtDB)2I?28fotZIBBKZ-&)d#Fu94EY&8AZcF6>g3&$9gbL5 z9{)i|(g(%3s1P?3arA1{Sjj$GYf`6`){7u{n#}tq+K8pSW~+fU1|_q`By$6bi{_nA z>m&8UDIXP0-{C-1sQVnMX@}gM`B89|XA!B?H0;!|Pij}3LtYax-1mxo661rVMkIXK zQy4`wtimcsjVqb7ZKF{qhB=s%_V=~q7zUN=TXVF>8TyK@a029Dc#+aDRuhMJbtP7itOVw7!*A-{lWm+f2 zO;dV#LbfaIJM|KFC+V35C=OCy)@y_lgk@2@@UqlFMfyqUtotZ4rQMMo0~qJap>iHB zSflml3~#+%Ev}>cp54S4jj%xU=X7h9(`Ej(LHk;QwC#=0%U(7;O13zUvvV_6)}XWX zkmhu@GIC{LVYypU=UH-rM1HEt-N}cUx%s<1hTGEeJeTJj$Ktb`hQ^Yi@fXP|Ai+1vU2|O|Nrgj z_t)OkOfkeoQ;WSf+6U}a+GMobLE+IYd6oX=9DRe~i=%NfP7ms2^&{A1+w|V_n_og95q0vcga>k@HnGXVn zdu3eY$tQjXFKLW#ObEm(40tS*=w>|vLnMB}V8zCD#0`tUSH_BfV{1Ut5eZ&+vxBtoEyMH zyY2R!OLt0;f&<52xBfZ{FEadPf~$|b#T@X_gtP>vP1z6}9V61ga<_y+2Ef)~x0qy+zpxlSA}Tcsr~* zFIYc8)OoZa3Hh7kyfOo!z@NEg2TNIV4mUlqi^bVLKP#E4c+k>F1F-0N&dc7P zZlFIF3##~i$aM2-qm*W};9eaXcO?=6mm_^=}^9~8SoTW|u?0dWJU22J!ao5G_{j}I8EXO_Ns}_o% zmXG%S{KI>bUCG-W&*nOe5a;E9#VB=SKDORK^|XlHr;}d^NA?0A zhS?>KU5lKHY-R>N9BL!XqFzOj-j|cgU-{&d)aZ6j|JCFx_m6+665S=QQlN=e>Yj{f zG~8UF9(6iqF<=;8l?m@GWo1v5e)5Gvqe)atXy=6XTbg*;I=WbFoPgJjTD?{u+^k-U zb74~Px-n*Ps)%p3gBOeKq-X6&7i;dRq?4h8E(KbjC@Tctgm^wmUPOR86xS)|)DfiC)9klPEaH7DOX0oP z>L9xJV>6V$SpRXRVF%}3dfSkasAz>DXwaZ}VA-2P=J_p3M7^;Bmr;1fKw$X1po?&v zY4y>I-xTc8(SMRGE$QRTtc{+qUuMi71u_wznAO%h$KQ9XejD_P^dN0{-U)IlD2zdx zvTZao9{0=}TzhuTrHsUY<4`vgpoC(}1D79d3SCX2*6FKOfI@C!oO}_C=bUU%Ng5#(@IdUGrBP?xfLh~$I6tJh#`MX-? zW_i9%t(jw$F7~s++v79&e4Pwf#Sx+S6nTnN#F2vN%lMNHFV=6#S`@=MS6h{|G|30V{$LlkTNPzUc}K>N4WdCYIL-Y2|38n+=n9PLsYfDW>DBU+xZ zz%hL3U;R#XFPC-(qmj)%uuD~|6(;cdXMqA5*$929=w$iLNnar877idIf@M05X{U6$ z#*}h5U{TKL#JDHgZC|J9ZRXGS=L;s$)>iH3z6vWE(w3bGMHU#`xY3TrerO%4Fk}Y- ztB+E5YfYl6(uV)j7Xh)q`htZ$mMX2p8_i*rJuGPm9$=jOfGYss{owE!3JeIhX_@+c z{%+k>t7|**B|uV-PSA&krn5+#vhoY-UHJAc9R3}(iGEacFxQvuBWnrXvH!RDxA{8+ zB8tr?E5oSAhfPWfDXj&+hDbY=8=0`*;9rDES&_872Z&BN3g;eB#tbAoi|AEx@gY=c z-wSRx9Yxdq78^am>a_SHp-)@2OT4E|LGAQRS)K^JB0d>E{$*BmT>vY?DEj@CC76BG zqg4(owoR?M57z8p7lj%=#~qp3u7x4y&q@gX4yPQDv22Lce%jRU)VDjeoZFY72o@j>)fn&N(PU9h>udpy3IW=fO;##eTBma(f%kJzjW>8 z;O~5*d#Mb+roB~=limJ{P_7K4;gcNB6s!=5iAs}8tbg|#w#h_xIV;ZID~-tbea(jN zpC|6*%jEUmMtDEg`K#FU3kyIplT1vhmjxeI@V?XaP$3$V?LgzkF0&kznt2qBeZmtf z&EX?G(kuhCoGDS$m4FnKTXl5j>u)*v=dsdY4Pa-NlSWbrnKET$F^SFRv@SZJGHfn5 zmJoOJnJnQ%*^CHJQ}stL@`>huVNs#iBbYQ=8>)&H$^Wda(n2X0Ys1~$1~DQy`t&fe z#u{30gnn)Q{IJTp@`lZ#o5FSPFbh;P9Xh}hH(4~?5;+hX3vaJCMw@sc;|c{ir+UPSO_BP`oHTxH-gfJ*@tr)F^dj0H5=S*ATrntAG!+wgg*=66UWY zvsreqeCJI}asgfG3gj=?*u6xz*M5sW+Mikx?Q-Co3{|x1$;krfm_m@1c!>&@i=N3so0NW6 zbmNcDe6QB!aM49JFC7k=L|ohI{Mr}Oa4l*zEqN8QVz$2o##s)?79hESXz8pK0qi>L z`gwDPdh-S2qHXdQcs}G6-LLOpt?(>01GBQsrl{<2sY)c*vESc)Kw49R+EjHtf9W?`^ z?|(dUKjJ*Krsld!;;uepEU8}@kZ9DpPA#XN&~Iy0%9AMAMAsAB;Y@QO%NHbuZM@_yL@hM zF4x(A?ZX;ZHid?5%oe;sQ)GUk9veI}8-e%Iu6~H27BX6Y4D_{`?{hAi z556WB`5`x-XKA3ao*o!zY0ysy2(eS+ZN25Hw{?TS_10IB>2v5DK~S}zAn*%smWe_Z z*kh+;LNZIz7(tV({*J0dKr1MESnZVd^OXsyCbIINOPuXB0l{ z(V6#dg2Vhzaw;Rxl7+>Ap|BwTPtBqf`FvBAk)V=mKCv%v97s7erCZqK-T+e@igJ~~ zdf6uXQ_Op@A~g`FCwY3~3c_nspYoFl>MzcV^|B3*6{9m!4zfZn`WTm7iIpQ`kx*RW zJ3L}*yt&qOt7c!)WeLO{$xWGAI^VTA zkF=#rNzg;@eiBz@dweF$b#2z`hp1#jwf_lb=MT7Gl7-9gg50@Jlh2s4AHSWI@MmkB zEX`DCr%6YGxILcUV+y-s+r%8+2qib7cm%^)G4_B`Z?6gP0F+0`jgT5`=m^){)*1;ce}g1OnOmMou8rLjQ2Cey3w)A z0oVcyC?A?bRM$H{W)W%#WdxbP2n;D|&c2 zY14>m5BU!Ef=3w855OA1Ivle^j4P{ROyCu%Kd)^zsv(|}{Zj&EBL?22QXLn}u7 z->WPAV3?vX{yQdmGVvJOlLh3;EPr~Hjy8NIorKd;2S+a4i0?##T;=%n@_QRc^mqrI zM>W{P!Ks?93|AT%yS8mjxAX}6Sk*q2%cyO*&lOm6+y6XpqjBHOI!>F?YTA% zp2Fj8%Lv`Nk#DQMiR~tXT+Lf#4WhhXTX?fJa`&cuUr5AH2;JcOV<@668yH~DKHaG1 zyoLktA&2jzWNBQfa%}X~z%IqS?l2HcL?F8Ca^Wt}@vT1A1*j@0l%SQz+t~YXj%^}( z{Z(@D5Wc9dyQfzWNx7CFJVjlO%R62#ku@`TQz*`9I*SpC$f5$GvyRszO5I66}FDa=c0g_*W*=*GMn{&H+I*I@81Yd9H!J^YAqG7w z7zr~OEtwb%NWq?r&^q=5$flFp_qETm;j7CpxK~(TvMJrGKL`cYNuz0~7N{pN{eD?0 zU-Cpe=@#W7l(Ej>)}JYsLRZAULHTaqFnlKokw|dhw>r}{6Xq5S8-;gXo2H%UtX;dR z2G0VI+RD{S|y9a^w>9YQ%hfC8W@fR#$NQH zeyyVnyP@W3OKtf4YzBq!6_j)Klgbu4APnOihTVYKibNWxA?E-kQ8xqTzX!n)`u89< z!)IyxcH=*ceG%(mn2K0Reo!|kysG2w_dbC6rM+lDE{0t`z#^mT52AnFx4Q)V{=Jm` zkona3@%CoYGprLKda+yGz{c{-tg7^S-rv+6SEa+BIhs*-BzX-nHB&z5%5Pcu;w<7M zcIU&QeV};Gr>A^Xs5abtz#l<8=N>P?QsaM@aDVcS4npwvSNP2^QL#|-|6Rf#RR!*7 zfIVLuwj6C#mDHk5nmH>yfkbL1`FfrF+d|%m!M+o<}J(tS3*v~3pEr!g%fjlaEsgLZZ zq~wrcMc)z!iyr^lOGKesheuBu( z-K=baO+MNHc&yGhq~_pj^{Wvl&ci^DrjdRnkYLje{=6~kQnKHGKI*n% zxNuCG3}%i0q5*plX=to&Y_UG-i_VaZc|3IHP(=Hip3VWwy*CySjLM_wZJW zc^k+xMLAgSp9Y~j|~in#x+QjxR-)nxJ=r^&dO@;Vm7FM7#J)deW_v}DHK zLIa$&NhB;ZzM%G4k;*-HRQwpiMcapS)EZnqV!>@+mi|+n7-UW=V~>c#zI1I_Dx?~X zJ;;?K0POU7Tgwn_wmrl(s?(5Z(yhGN|6|;U2ix-%w=gN%XesZ4+L!lg{$$rxD{ju= z3a`Psh7QN&EWPRxM=_oAJ6EoxCuy|f{dbf!Eqn-@#w43V#fjmsgwU;2PCwRMX;!nv zf$){;Fd#J{xvFNPlj9DubTm1~lIZt;k$jrSm>=i^Tn1YH3gks)j^q`O45}31A9OBa zIO~*0d)8$8gV18F#g>`A)#3GWpK7qeNSc%X;vOX+WK_JUFSxpKQ07Ukf2Sr8b zO5D-KNh^iXfMrjw^oVRx?;{51EQOff%VvoMfkqQezRcZI1Hu-OIlwb~%X5)Rj z4i-D=m5HpPBvHalBoeO3FVm>1hphsWW?mV#4jqF>l?}%C6*f?GhNSBj)0iB_x4s%Y z6_((R(bU9b?t}aDF-k}x_5B5q z>hAmPI!{vd7w*`t^5eFbuqgL1-rS30Qb}6kYC*umZ$|UEiJ;SdThrkOA&vuiwU!OF zs1{pdRxkDm2gzV4$GLS$*Wpv=`$Y5udM>f z%A$4IR=NKk*S-%82^;vsleX#&<~fUz7+wq=~{;-LyB-XR4UUhCut*n2M&N7K}l zjc|h2p;(Z_#+Y1;gNNvVr^zoDV&2{~z@W8O#IcGRVeVqgt2(EzSg93E82C^nIF$d~ z5<~b+64kMGHtXcXKS!}S+B4tF26CuVbv}e)A2z|14EX2g8SneHYXJ7n_mA)1Jh{Vc1Wtzl)wpD4ZF=d zjLGdAa&i-NB&EcrARImU7|&2S8T8DRWg+XdT%C5K)6)I5J2N2w)Sq~Y#_H?OhDl@( zkj%3QQ1w2+uT*!mG0T65Jv8(4L{jpS7ZHj(rUxjZ6X$VO3rd|v1mmTl|Do!LnSP89 zn}kRjhhV*7VOH-r6Y{FJnW%Z;D{7$+@Wu&kVpS9LynHX&nJ#BlFAsN%iX5teNhFfB za?bLv!}!6rsECKyq?5Sw~-+C!JZHbl+tT_cTTQS zdMm*=X-0Vg`Io`jMMGD*(N4ZMawA|6rP}%y`CQT{S6ZF-4H2fx;U+U-d8W9ozQQhL z+c=xk39DH0g`rj`_ZT6!rzR(+lbKxsQu?WO9RG6x_j$m-E{cMWpgpt80tB)uj|w1l zp~TXmNtRPjK?F`8!#h0uO>BO^$ynAAs9;)hJ_Sg0x{-w|W2{HqougdFZ{<5L2(*ci zbr_EO=19>LKyJo3f$x$Q6Z7>nptZgk3qVG?9{;Algl88L`ib<1p^Mn<=VLe5J81^A$HuVgOAEW)!|R*F!Q)3cTE@w;zrixUJg=yYBEKS>xWIQ% zt1FCQGlX|Haxeiw^pBE1!s13{7v<6b29NmIQfE*c^ME; zI|~lJIufXMfxTgu*6t(9m-Bgp{vmk41P`23E7r8!Njs{2s*KWEZH|7RZHS~W)7wv{r(-1E~p zJw%AianKL~P^q7yYD)W~d3AkK#~zbhZ0%Y6tm~u0-%M&{aGN&tNyfqG8Ro~#j3*4x zDfrT1dz#aGdnK++qFN#52bo3$LEtP>84aFX6-q=5vc6+=7LvIlK5`diUq2gX97Em+RfDbSn z6Ms4}mOTZdAJoV4Y`XLpMfWy!phO}@<@7+8dv3>4%9$2aqD^1!=X^xAsk>ECjQ#T1 z8Tk}@Dz*#N7&kPNem?|ii~|3#Y}3%L0ekafJ&QO`kVh(LQD+bOV!l#2yO}LvWXZO& z;iNzvsv5>Ec#Cv@zF!UEHom4MOvj+%9Jto){L0lBVSKu@%0BU96dV?Q6mn|iHE(qDGZkniRa8kA2D_2aM^alEBgw(_cLeV!zW>~MJuwBf_ zXsn4gw?=_Oi7Z6G+Wq_D@lQb~id4+1KB@)B7S^Gty!Qx%{8XgdFPGg`wi~$N%IKfEM<*pQK)9u4ZhCb2<8@@$PMpinS6yuv;1yBlz z(US{!%C((DJOQn9chtT@pNbvXAU=zFA?7sIQ-h18Z)RPyK9w(4w#Ca^0JG_G%5$DPi+Zkma_{1L9{ykM5njWD|N2&K5`07BZ4Sr*xd$n8{jI!UmaNMiGo0EC{D`=GE}VE|qIx-T&Gv zGD%O4m!|k|qBEI|87r@*e@-WS9+>vDU@SMMV4)<;pqICPvyipOo9m8^r*4cJsj>4kM5mxdb~| zeQ^--gVMw+%M_~)E;t#Y*MQU_F8G7|V`Z&ww!5KKCQK_W@VrEd2hwuhzn58c{<0E!;frx@n}`b1h4BZf8UG`Oj+doQH=L^Wq;P&*EfKIlh4p?If#22 zY-D32VgkT%}&4;|#y*Uyj_iM>d25MW~2E^-`e z*})y}iPv)Bwf8K}JGk|PBw2fH1(wlcFf!p08J+qDp}BRD7&13`l1lpG8;=_4HEAYO zH;5s@VJou6D0!(*v8MI0H97pZ_b&iuznpuN%*~L#=(U*0y&`L$0MK<`q*7**DY?%g zZO^`PF;lT8!z7*LmgcO3e#+lkWmT%9X@`9G^Y=%OR$<~X4FJS0o$>;{3!OjvusP7-_aGPlV#{O7Ey#;biSFcq0RR&HE2lUej z7xlk+@+&vo%L=4a361szt`EL02w}2YiS3;EXL}ua+MW{~yi8j?fu(d@wa1JE1dsXE z^iaqsbu+$4%1=KRC29@g5Ng19CVdipC3Geky@3xD(KKBNZyQ+j4ERz|D>ZNpYv!BH zV!RX*VM_u1iNW(NK?Hv7GkmKaWv`GV1siJS{{&PcGUj` z>j_QB(vD0G@9%FHFJwz!EG3pRkD91|H7p*}9yD@SYTGgUALp-HMacnsTaw%?@2!M` z^my^iaNKm1ojnfKmojwgTDuW3PqM}!2KgQ!Z;|&E=#x*<^)wgkLDRlWunQy~ZBJTt z_QD5UhDFB#VXE^64jGPB23FL0A&{t$VFqLU{CO13YUR%r#2x zAj9|SC{1?JeT9>z1K5;O*C#ybg5U%i(n79Qe>6Y#-=V{UeLWNV1Mi8Xo7S14$V5h~ zZ?=f1n@M2u*XAAWv~LiPOsMrly#I8`>kT<+@I8ewmm_hyPMe)dhx?5@(3+zW8a;x! z?&7N){lwWGW>_U>cfP+1_c1odc61iuvG!A1Jmt~$dBOx-KvkljQS<)883^F+5NR91 z?D7rIg_Lb$c;%644h2T?;_pMyuQ^MF`oJ|>0}6?9chGOEA^VCAd_$--tDK|77xLZP zhrpy|Tghciu1+;_ooyn+(eLcW{X|Y-*uzK+Hw8DOiRx0d0^UgOQ0?&+MFL}s{z0^6=OoX3>#5>nM?$1Nlk3!v@m}%!d@x?8g?cZwb0e8bW!L*ErxHt% zG03h#-F*w2%P9z1;FoaAOVKJ(v)e0b<1L4|e6sR2=~UMEsyC+-%uiVae^WLjnQaS+ z2WlbEg0-(O;U}Tx#EkrU|GAf_rk|Zs{E@-V@Pf9J26E#>JSWg?bFNjw+N=<_JDnbJ zHEOvV?I3X~wucgxAnHlG;ksO1fYj{?u_Sb!p(S)9ytvyHno~NH8kzGwm~j)DUh#xHRc=7 zl|tOSvG6#efSJ9b<$|TGfvG z3r1T^u;T=`HoEBhf>x&F{ZbXwj*+xx8$~?b7GV#|9QViJ6ZhBCDzK-KiTlkohoNE? z$#4{Jpa~k??yq;udsc%*{T59ukfQ{52u%_3#Y(a zSJ4#OcS(Dvf^S+ErtcU;MhkM!_pgpGLa9a0=^5G)kfSx-|GF<0Nc}3$wXvJCJ!j++ z2CZSG1aaIBI|Ka_5q!vSuwX`?R9w=B7$72!@4XJ-T%*B^R3R7}pUGfW)C!2qrwnb> zo_gT%QcCZ=)a|JlrPd#1DP8@pi+s_9WTCCMy%u^<4_#74r!ku&(18PVK6m{6aia_Mtr* z6dEnk`ve}_pL2TKs@T)k-ve4?8YjxCC#)yP{fiRI{0~epj==1#@x>iczOTB;SrKP9 z2st<^vwL9TE9J{SD0rkk(~$N}jf8wbG;Xm}$-KZiwDKkZascR+OvH(bL7XFwQXqf5ZgJ5S0N}xgZ*XSEo5sqICp&V}Q z*nx=Q*en9TMkpSJTjixor^Im^4nxPp&P$aSAZZ8eTI?H(C4(Z!lWt(Qd};9fMNc5~ zu8*j5(Gtg4ayznfG_J&9s$}_Hfk9&ocJ&Vthjv*w&19-C9xE4CGiZKm`l%T%@DFCo zBMDDu>a~_Eh#7(Je5r9r(-Z3H31nP3qG-b5TxfE9=WyaU6tsV+nZaU`gC#;b8ujx7P-)nejwt z*zNvUx{@zclSuBrFxuQBb75%x#BE!cnkxEq+Y3ewVNy-k3GW>FDFiSJv3nPULWJ6gjN+Ra-bA^^fYctFgo z{#^~`%`;&b?df2_>`FON$-^Gr%tDCWQ!%|~u~aGjA0pNGSBPl(@`i~c`M?PArODZU zY=A>I-QGU;VwkRh%hP@@asa>lBMHGthC$9Y4SX6CXsFRsUhR3u8C{rVm505$*4^c>P3wEC=Jm=vS}Z`) z4!VK)MsslLqLc%6yF<1;ni#Jl@)$=ra^@()jbd?+!p>$ZpF>7@ZlIz1>J9XK4W}Gl zwBmX6>Fu`aw!Cz78+G^KE0!NVxZ~84f?;|Nj)p1enS}3`z6SUtSgyoU^8}`IiO^a* zA(U)CqOU3dVb@0-i~?<>W;Hv7MxigG81nSpWIvsBRUSUS=xh)7BT@Q%4E3{PN-liM zw_ZL-Y)He!jV=AGGcz_DgVJcL^AAC*en@b(%*lA-+$o3u_6hqku+aqZ2vLLDCd&Q( zd`rbcK{Mg7eZHE78@o3%^GRo4w`RvDSP$5-n|q8w?DGHs%o9}=7}~jtmaOu;@E}jx zqT%@q{HD>xdjRXOROF%CQ&akd15W?g?$)yoj5s%@q^B~?Sbo5BAHZWHOya*|A9&LG z;pN%Fb(O>5oF^4x&d}K8=G>sg%4fQ?W+R?Szf~uVBGwjOoPVXx`D) z?b}34m|T(P2>mh7b6DswoV=y)-1aQg?Bf41&}eVLzxT(_$CXx2DOR#h=+>x9I%Y@r zNqq(r)9%J#^V(iUdgb|-H7IYYbNEQNMjUmNv$F;oYDau{^g5Bt%?S~#!UJPz+&jdu z2}OWtk*9{7&rRGkOQFj`oyhA2f|tP#q73C0eb|>+^9GS-?Xajs!u;O7pK!4><*~LH z9{28facM8!+H2`0sg_}-GU-8q7$)_shfPE%0*9V2f_)f&4JFdB7;4(91S{qA9bqgX zgsF5Q{wKhHtzarmUxi%suv2htcp*=%uDjRGfy8>p^M3OaZ?MB)p@=ENoz?B$RFstB z;iOXDU7<{LahVV}-n+rnwuTiz9GC0U)Z)PP{CEvDgmY8rHKbdG^E+BDc`4_ePWv34 z+czjLb`4V@#3IIH`rt+;U*QZ2 zclN#`qz0cmdR4Tf98TNzSYA8c{f3XptaND@PI63ET+0SY16~5F_z z8SVz^0?DmuyKldhE;rWLjbn}nq=oVkOSSXciaWkGtkUc^?{YU*l5MZ-lDHmCswXT4 zQwS&5-u~97&fuao(4Uy8mXOkMcN%9z#8@BcXB6IDD7`0J9az}0=x-|Wg}d2pzd@(X zGdIk!mEqXujurPj`!jlS_pJ(-$9-|9RqyFiZ;sv5_OQl#WM^&Mst}l?7fc9TCP;hS zS8^g{8^=!E;MhZ{XF8a2lHN%!UZiio%vh1wo%S3*$Z4>keP@tMBItvqxplq2s%)EN zxd|PwHrf6pjpn_-rf^Ck63W)dDoLzI3#17_{xC7lr6A}ChzWl91Rq#3G3fL|KV-8l z^mdn4)*m_zHjcHZi??m*J()gASu7Pm2xz~>zVcf6aYKeKwyZI}gWC5x!5o=#XRJ9=e)z=Gb@n^qyROG#+^67PK7KZVM-P4W;cQQd- zlhC#*$ZV|)_eW4;rG_-+1(3^hKwd*XK3i-Afes=!=eDIEu#bgUTt zjfpEHFk5aRybi-|9z!+LwHsFM>s?W-S`cnyk3Y{ZJY{eQuv=g~5p5sEPw%lGGj_79 z`K3t`ZCc%t*kFPEcI`+1O8`cw=YAbA?=tWHG_{M@ZqDLiAB>bHQ6{V*BUdiLf`Ej3 z`~^Q*zs^t^A+eKNI5WvFFNEX*boJ@Kl%DLrPQw2czy0Ce3V$sDJaI$q&&rmp{of_L zQpxZ?nEk(-PbhE{z=3!NL5{>jC$saN$~8@5;og_06PP+kPRV=8TZK-dBjQXH?Drnp zAv%`(Hx29r!T%#etf*m&DZm70-(_G3?_^I0hu>bmPG5>v4rL&Y@{>>tN*x7D%j4Q7 zliNIu6QTz8Q3aH&$WfEH$JN0YP9zsPR(}27q+(jk39PyuMFQBDE9;%+UBlv}!&bO@ z?0Tsul3RxbchWBxpt_?BB!b(jmR1P#stv1&)}@N=KfrE&q5cDWj3up8Km5JXhKs`a_J8vT47;iNYT7JL~tHi~b&2Rf{=?0mW zy0!x`@l4$h(8V!r{<{)6CVhGlX00IT&M)=j@Jhy*%J*)XYn$c?6s71vmowZi$TZUG zKd?b}O?76Jg;B6SlpF}1MXmGxQW5417h)oMOF}=svt6p^i>sm%l!^6%rx)(K6eEC{ ze^`QnEzXSUL35kr`ff|g!U2uKSFIP@QmDTylrLlmU|!<7?#>RSab@Bg&vcH=(;XZ z;s2BAO_aZhVoF)cwb6n@RPKw#SkbyIxn_S;OS~GDGkKv3h50aGBEww0WFmjqRDMs6 za)zhV6CovHy_$-2posQgvPoQ%~{^MO^SYp6oVu2TEbGRE3}X{AUl1m}<OJ{s|`3FAg1hDyLC|QT&8-Uki+nXuJHWVegJ}7*D|hUuEBR33)7iC1YYV^+c?yY z*5XsPA#@@lnJG;(ZSX132h@=v_hLcYDH$HOCwMQ@rq=>l!*#1E#J_qrNO(+z_qiS~ zjd6r7H_XZp%H1hj3vxmRP>+C{^%mH;$?6%P5LINKR*#AN*^@rH+{REZ3Y5JFXfvC^ z*{sQw8=hFGJwVzAE=un(c#@45F#Xw&GBT09qZ47089E94X#4=EExdh7rY7cds5tG3 z$qbR%!8TvA5(>9<4mOZ5Z9iHG??W`2XaAK9BqQBoB!c9+0vH@_&X9y({YeoQO!s^* zC6Zh9{l3W3*x2`?vo?-hTZh|k004ljX8x=BAU;fOD}-74$fBK4mzdLZu`E5f%r4;RMmLu(|$mI)jjQsD%- zA76gBrqm}R7*Utfy=lEd1qDSKc~u4;qt@eDaBj)p?rjbPDq3;=xbZ`gl=t7NA4$=x z1=SXUvwc!ut}}dp=+c^~g#9`0qj#-Hh|anq$Tm%NzFzjp8iD$d8PSSp_5QIYDEjor z!f$x}TM34S<5D(*2AVM2BfOW^Aqfgh#vbdCrl22c^}uTKbbO!TDmv}Hr8M3b-gq3F zf*`w;pPe}n{TLbU>bSgv`qF-{5O^#squ9ouKTG18rLW*;wn@R_wU#qH*5 zPplb@iwlnb^8wNSHQ%&I(0&E4{#m%kye`woU>FR0z})O-AU=s%rlb+_6_%({uH|8+hDJTsSQ zy1yv+qq!&Zdt`Chh}_~_Ig_p@KHhw0ufSv$OWMO^uKm9y$t*I7%!$Qc3Mq2I!rRh6 zVi!nT7ZwYFktG5J;C5-=lFvkyzx0V69{}?vN`j*l-RblYo)(L~U%}0aGJ-;#Y@W4q z7QbR2R}^Zn-ECM}9}@CyUrG{~_0u4UXsY$s?)VOMKgxj~i17HVctb^H3BbumzuXwb0KHRBf60!Z35Ej1xj!ai3<9 zJnHhj6SF8oRJok_CjOj%W~J?omoBv8GWY?Iep4Z?Z}dOu<2na%ap(AUGvpJ8)vHiX ze$8h)&ssm7D_99lEO%dg3NO-KatQ*%ryT+}9U|e%_3!1#qCB_x>2X?Dm7#0fO-s~U zeT|y?GC1iheozzN^$?7n&pN{VRswiw&v|NYedC<)+#QbMCob3&Rh8|`rh|Xnz4DJ{ z$^W;Og%muS_WvTwi8s+AQ#h(J1KKtLGwMn1sd}E3_KjPUxS2IV2_ra#y zsQE6xLn6NV;@QG$*rnl_De-jH z-m1qWbNi{do7ce-&ZPCXq(8m2PkUC8tR+dK`SB+WM66cCx;3A%na;RG=7X^=7g)sY zL!%zm{{eSw@L}?E$nFo{77__U@|px1M*X7c1P7(x-P#HN^LK+cy{qs#ue6FhKb?d8MCPiPzBd?i?|J$kSjb zA(e*t0^hF~1MOKH*%9ctl+lOySe-k@;+ol(v~#x^ z(!>=FPQ98oSyIJBopu31Ia3>WuEVG596tQy!x6U)b>bo2dezBIF3#Njkn-KG=3ry+ zNAYazF+4Oiw>~^5tVxEKXum!sfUVr4wV!(6v;$$-Sh-*3&&qTr_bUA-vxdf^W$6E+ z@hMd(%=2TIdMS2^IS+q0K`F7ig)tS8baJlrG#EeCBcYGQr1;t1TL@!~&a_h9CzZ4s z+3im!l;6ecMSSFhA8HqzVpxnhc6DbimL0D3GZnwW$2vpI@!}T@>J4cK?U7w~C6Zi@G+W5G1$;x5C{$K;afbaCdk25F8434-UcIy$W}C zg1bxM{FV3nM)&Bx=!?Ftt2$$!b@rNT&S!DORP+X)ckd5VYG70k%cq`M8^8A0?zeF{ z9O&kwRg4K^jY?=C1{0(=Hx(1t?+N`~5u~8C#VuqJHdLM6Y1JLxZ{6}&w+S1^WhFsg z{xa#X{oycbRpH5#xyBhi_rd&k6@i0-H%G>yY*+;*4f~D&?RSnMp>L)CdZeI#-}?I) zJ#Pky^=a+Tky{#rKAjcj3bHq0X zKkDCZJ(q#`nX79=EHslX$F}+P6B}0;9v2oG(LL76`pjXPF~{V}+sZ~O){Q^@@Nl>b zw)QU5QirCaVy!M}JZ3X#zs04TmICAIiOkl)CAE{PNj}7e% zkqzbx%$cOlQu}!bsl}ZF(MHqp@1*gUV0oHS>(X8j|6dw@w_~G?(<5LC=uo6<4_}@m zoz$Ln%hLt$TFKs&62ou|hk=T0WRQI6&3pJ|{&hyMH+0r!=cQw@%vLXMEd-+p=b(#h zJghzBrb+!14v|!P32sbhGiAhm4J-)7=bS#YzvT>kmYl47oJVlbpMRuzgGnr1ATYGKIt#&*< zrMP4fXrmNk{pb~fpBAD3i>2%e;im0qRfAz4^wtOB;CN{dIa6bY6&+R|-{CUpf|;eF z$#~zapS(Y~nAGxS4m=zgHESZ98rN$Z;eGwqV|1NTA5thV@E1VfRaYoIwj_7Xdil++ z+jMBbu2vmGpvw*V?ZG!LAnm2_IXxE5EmVy!3Ixd+6E8pYP$SewMt zPbWZ^fZ6_f2_5IQLNr~*1kYzm+P?>K?{KS3zE-2MCCgLD>F)%(PLzgGm zS6Iy?ToKs~nd^9yu$ByKYt`iXwSd<~bKLkKb2>wq-~U!`CP%UJgfQOs4B;^)wum8f zS7Zkto_lLWSgP{c4*GUB%P*y zne)>_zJk;(5~T~LjE&cx+c4`xu7-YtQADTsLbd;o(bPl+%~Xwn2Ul!3;?Ld8Yx0Ot zgr+1wS~S9B256ejkB!^W^?H2f378QNBUW3sMtTvnPF0&w3t4p#`@yUrUp^7oL$bDp zh8nOY+Pmnd;5y1BW5f39NV&6u7S6&0cQN z@8taVOu@;WlcXQ)c%b9i+cRT2$7`+0?Y~xW&o)R3=T}I!bvV;$L2uTt2-oXn^UsW+ z6`0x`M50Z+oGn>shz(7o@1DnM?Z$0yPZueMn!tlsYb$&QqnT3g5q8Z*pY8rSZPK~r zVTNJe$iAA#^P}*h_wXpy zkB)Cdln~T8vP~7U<&va+Jy&cwO({#ZsY><<$&RE%=8iOZWwE)P8P3~YKnF}t!C%5~ zMb`|YD3~7J&PQu^o%!-?z*Tp}ysR5CL|fl^sD*E zCoPZPwZ`m~>{jLr=>%YtCSvc%#fCPuc<%VGqU274t93=*KDCJW%s$Xa5 z1juRrWF^UF8-g8ywra71SLb6>!0vRo;ToT@-IKc6!xR(>`m%4o8CPi%*j4vXFd$WD zsHosk_Iavux=j27mMG-7>$%v`ArzNMsS}OV!e(ZP6kL8&;vx{nF#Y15N^5H~Zl-K# z3H%!WnOd61+LYn4ea30@mQq_&4Dy_g{KeP|WmmOe z-U9Itu#H~-1!!XaU)tcmr}3X~`2Q&+W9n<2e@&tCGz-&c>6BSSc41a=)$f#*anK91IzLDa!;X5=Tf2 zy5BJyb(v$#LmuF7nWh;VkezyhXDxj>c9&ek@TY?qi_R)8v_Pf~9gK{XMCon5_{VEB z(4esx+s5JBPy7=?Tlt^0ss&?hU)sO&_1wz!+)nM)$tPqQB;zYSZ28nKvR%tBY}ie) z-##N4FEd2n$b(jmjA$R?9Lfrw(;(^vlCM}NkMb?YUcqetwJIRkY544kvAG!<5k>}h zU+r)KKFUsd6%H!q)}0|BQ0#d#>vSo9e)o_CPQ|s${FWh-@G9j+s473KiN)yc%*B85K zzq1y648x%EqMb-8RozZxSGx%$0(oY|7wjw1CI5!VoH_$uwJa&zY`@NO=75ueIb8ZZ zsF4rmL2g@}bGcwOLi9sn=BxX<;TBuIu)npJcV9IK*C^gW!RjD7nfhctror4@^TE%i z0v76mTt&nFBO$wlG9k{RgDOX*T*0wj?A2;U+tnDq@%Sa5-aHYwD-U3!#hJddzKS^f zOK>o9+NA$a*c%FI^z_vA2HHfwgRTrMfas0m*-BC7V|0AOPDaCMCM<}eXKb9h}Ch57zF~bSk4sGP1+oYI3bT|7Dkv7aGp-GW2aG!ZW1!w7BrL zvPLiNW|Z5VzrWvjcqvJ#)u)MG=x78T+T58-tAgk&GiR;gPQSdDJ7zo5W*`02IE1=b zhA!bbX{X!H-|jYr})fcAbMq%*pxgqxXb08ljx&-}A^3w<~E;nrbUP2hep$ zC2_92dR!Lh}v(YDCx_=Vo|Y}dF>Ox6kP;pDmX z1xImxqy&v(67J&T6Eo7+Xtc&=TPKHJ#H8!g@wJdJAmx(%ms8j=QoxDQ9_ctT_;6UR z{vsSyI4Ku*PmJ3bm7~-#e#c=aCSlXjrQ`0%$FpI2!u?^O-)nc5bKxG0LNYet zFRRi1_ytOo73#ahiEg-9hT3ayM?Y)^G6VmO1re@>7>FGyzw9Z1GQ83VR9S!@9c;fb zS019-6h0C_pj7=Xd;N4&_o|^%3Kw#;=Mc`p%JV z!ax0FVv|cET5Pcs!I~u0SaRaZ2jP*));hs`pVyzw?Sef0!1Qq_etyCLGXi;0Z&CHa zt{ikN^fVi@WzlnM&%Vd3W0+iNinG}?-mxaC?W+_&*@4q@VsGS+TkEA_4E{WI@&hlX ziiFjbi`%R}(dcqQRW70N*K`!+veDab+bOA=?^y1b&8{@w`=YbOM^g4HN%-9%WqL6g zwBM=AV&!_+g}A|1p3!R=*2RHiLCb)Oa>lR$uQh9{8^C)m-OVa8&Q!{br5o=yA*+1@ zTfNo(hlow~DaI@Dzpb_$nd<}NUA<&0SUyNg+=)9j!UeAypX8%EH)l@OBWQr?266y z_>HMxf`@=)II@CqLyltTo__QSD1|e6XQL#nXDU9BDE<0%Wv>->d3maYMgQ3MV$F%O zJITxGqx7Yv;&#m}aC(>_?r*bi#AtG?dh(5Y@2GgI5xQwRY4Un{KOudl;^4@rs>0jc zc0ucrd9dk|2n>fBYto=AZPp8AG^Io$Kjt8h(tS2LJpqd5ZHhl5P=di|MCgo{p|^N2 z$U+nuKp?JZ!CXlqMO8u_h^2Hv{3?+*xqop2^86uLEEOF(Yqg_cEvdfR%=>x0e6YCI zKpPeJi~ys~RXjx8^C_Z0{aIev*kc3OPwhEXU_aMyu?L0#F|n}^N@VM3$@{h*AG~@d zjor{&3aFie>+?sDNxV%H3T~=2oYx7%r;}V8bsI#Om$1e1Y1kPk+&k}Y;z!8`G5oo$>u)zwpatXZvg^>%? z`{m@s0;M}u7(unVp!$JqzF^0)yv=LMP}ji=`OaW6vOq}*%y`nFc$>)Z$ssAI_;V>a zi8K3PQ2JiIAaAIckr#WJr*h#cMmGAbvG*R-Om`drY9;K=)HfhVBdO_!8|5M}>#H~2 z{aYc|p7d2e6i@hI`sqjOIfM6z;fnlJW;fuNdYAlaDA{x$tYRI3naj%t`x~+>wv%+K z>vIvj=nDB&7QDCxtxDVNN7gnPF_TBo>J!^{)v=pP5d5rDdgj9zB-wGXNB|)%y7nqt z#H9Ez+o>GQiztWiN+SrnT$cS3{GLe&M9#&hS?lA`F`F59_6LFC^hf68UT-rxo(L!- zx#mo9j!OC@9c(@o@iAHWNNdi_JcNt^MH)SK5nMuclgelMskY)Ms6DJY{APr#Rz2nr zvLZ0?tOgiM8Qj!@BZp*wu($v|xvwn|?68aV-S~e;6BSr{NABE|=V9-QK;i3~sp>RV z#r_q!h4I7H$zt6zD>sShTZY71w>8fIH8zu7$df!R7gPY}iWuj|Q&4ujr|#cG?lqvA z6Ibn6Cg5&Hz|&hj0Kx0*Z#nLB)rXu;)_5E}zX5pW_K^tYPH<~;XI}4^yRC%m5hCgN zuI0mS#pti@O!KuGfmF73skvibS{8G70&fh6y1+pNIi&cl)pxv*kUCT2S`<(_UB^>p zRGxA~Y#pI{%mihrBy5^RnQn*a>`lqJHmZO!xjX)4F6UvQ+Ia%obl{7f0@Z+Put76> zG>Wj_&?C8GMQ%_D4OqN18FA8Y-}N>v@F(I**WXHliAr6Ip~TXj5WPr!BM?IC)`wP! zxvgYewhPlaZg9#>!R%e{N)O|beS~1<<@bwt+{yMk47;5X@qnPl=9s^L%_q^qME67} z_^yNW@ToyYQi5>KNPy?3=4kM=`;dd^D%UvqZuQG+Vhj>RvwiG5L#%N{RZj0$KEKuI zNYQW9Xk&xb_2vn(3ot#yLuFxryWEWJ0CYVq58n0es>p&AKQu`B-G8oWO9~?KsxS&` zRPtu=7<#htxvczHO8>6im-)Gt+jKi+HKSMDdtZ7tdA!HXF8q?MT{J4Xqwrczj|na< z2t8DMx130hws>o+EEVkH9qZP?B)3BaZ6;z`vh}JFqMe#PWRK`r-5iOtsPilMD0>zG z$)-8m?Gw4a`_VtFu|^tS6|G3;Qh1f+K59doN;5WMA%BGG+;*<1symdC%KRnDa6sw3 zZ3J3>rv{71AseExZHtw&A46hWgewM7bs zgL6cLExxG%wfxh6+be0VeN58ibRh}tzQD!knrboSFWbe#O-BI3?_*UR9vU+HLc2#% z@p!BzT(S?U1rCc-#*7U=eR3u#DO0ly zeVOBzZu86MVSDpJprE3Z**3=ZB{}0xp`Z_BOc@^>e6IBS5+9=2s zsqXKBdYm=3A{yCaKb=vHl%9V~Jp7!qg*F+CAArAHM4sJwj(HPuvKva3wf}f!{wk`9 zh-=5NrZpV5BiUrp(R2H;BWVChblW34Zj8vd%=C(ZF)#{GKQ97utg z>19lWgJ^B-TufvX;vG<~cWF+u z7yHH_)2Tu>gwtjmc@i(G&S$lmNO09O=sUu^TvI#!OhS!v8@SCZ&(tz%S%V`d(7>;a zzoU`5%;vwVj%Rj*QUmbVYY=ui4u|SK&o>*n8HQq9SslGg8b#k5IUJ7hC4W9zW8m}7 zel*=v_PLHU+&IFz5zjvCFRQ?&S+s9dFYYsvVM9ChOTsKQV>9b>HXS|q+WH`0qT-3+ zMf@eK`T*fduxA6CJ%!3zKM8F@H!*E8e@*~Jaw#;?R#k(&?x* zZU^S7*R&F2V_u6bmhX=GJTAUBvs!mr0BCRc$cFs4ojtN6)(Pu@v)Zgil`webUthz&59^@`QZ&ZjSSVloGToW_38f$#U zDdA=-M4K5B@m;%tgpE7`W%M@dc0Gg#iY52XYnww+)pZlt2Imc4cZ-!ywg&t|M?yLM zYv#5V9@ltwW%;Y{&F5e0Gl?!PfGa7|{mE_j1o!H``FUstnCzkr0Q2;a{#GK?JQhR(tj#wEk1yAOPbwYPQLo)bj}o&f*I;t z6;n}ZmS;U&Fmjdr5#Iq)SvZdCLG$dQ!&kmA+$W#D$ldaelOMHkJ5&(QwSnC2K8hpF zH4QC9K$6(d+HTbBAXLJbi9JqUNTMz$HUv$mA>wME-w}agP8Tq>v52tEOrHib;^d;j zk*QYNXmx>aAqOn3h_%cF4xeI8WjMl}p?NP6R8wPfDi&HzT!IStp&;%J85!w%2M+_= z+7?H2O_hUzzY(T3D1sgR%}OKGnCQM{3*5Eb&zd-SR}b_VzBCMA@-yV&RpmNZ=h%;?5{DBUws5Q1hC3b9^>qzGV}EBi1Eiz?T_U&O(9ck|6Ef6TcMC%w}+N7JS@j~ZZ!O3D?| zpg(uyxy6y5H~807q(wp;N;$G zE?A6J5-Ip^*77=2Cwyo`3ZYL}D2}}LsQt7GZ*7##8@2y9y#Hj0?isz_|8{WP`j(jX9k@!1rfsfegZ{xt18pYge#B`u#`gyyAxkF90FD&b32Cbrs+ zp@h)42cRz*8>69tgO9HXT;rf@DlaNR1gpLx_Mgjc>3GQK4$Lk))q%*F6l~!nh2)&u zEIr_jU?{TFzqX-buFOQz$%IG+3>`Oa#ha%-WJl5heQq8WF^EX?k~iFcagPIb)HyFE zNxdo`TUTP9=nft$BjodJ-^LO2*<$Y>xPu57RQLaAW2_}x!k_^9pNoZ}jM7elg z6-!;FBlrjrJ$v$b-nt2+b+&SG>T7%e`K+u0`^%u&r&JUw0!jDMwz2a)cB4e;7(sncAJ*l>dH@8w`5)JIfFpq_mK<4ZQzId&8DAN7JUz|SQ8?NR8J(t2{ zkDFOFPTfID-6L2Sb|r5CEB+_1E5$I3s&i(P>!Aua>Aed}Tt7?ZdX&JN1N*G5sEciiH)qmNocX^qb$oO8cktA3`_Sw;loMSd$*3m{?bDOHnIpVG6Oh-!Iu+DjoLjGFh zeh)Y0CGy@?G5#JMSGT-FNj?_J=t7Mp&!H9H#PLEM47HPs4xlweNp)x;TBwuqVhar+ zA^4(Zv^`P6a4SnnK6ll8!@+9aP=rR{86BX*HfeB4x2uajKl4DN6TTqzI(>|j+q{#} zTh_|tmR1!mUh%$k5kx^1wcM}DUYe1@&d=n;Fz{3NmEQ+bebwG>9xbWCFQo9u=mMc$ zNH<#ws&xQ49$TL_EDiceLoeNfa%}k4gj1U2h4dC`H@q;XlX6G|36Q$~cA5t#Gq3n0Q*M9T}ET*RTj-Z58aC`%=) zx}(iApHx>g9xZ%n1$83y(+5L1nJNxMK9ap0GPR6Rl~_!pHjAffT`kT;ncJa6G6bv1 zGXG)nlKSOAZ`ARc*idg;vq(ARx0Mx3mzK_*v#7?HO`bN)vguCQJ-^FdspV9&tuvsa zfy&J*)Ih;0R5Hc`Gf43EHxQRwWK18y*s-?uz6Si0(Te*W)T4qFC|i-(b>59=f_sFU zKOC`gIxKSU@j|wyfLC0>LNK=i5zm$_hMys+u(wXMrcE%r-7_K%vnDuKJVK+|mzZLC zwxD}nnC0C49qQ=bf>0Y-=Ptu2Sa#4niKseVtatcaR{{zuH}pTBYD8Ya7&+m9f(khA zBwEanV^8s;BX-+!GZkd9=I&;%U#_)ea1TaPKw7zj6pJE;OF=RUq}LNb0QddRcVf{s z50)*JaNq}fXE|EUI?JyRUTCPWV2FrO5{vh!2|3%T_>-FGLncyF?XR%BkZ-w1p1-D7 ziML~OSD!g8QIDyLTCnm%QPZ79O4WWXQGH=sqE0RTKt`y%jq~#ojc(39u$sy*SNCL1 zu9IF!5oD&ZZoyJpbh`6Hil&c!i)PgrE3aW?=r0ag6r}+-<i77`nxJ$B=j9)od>0 z%fC4l5fm;M&17^0N=4E&o%hVAbCgz3f+4jxy^8_#hw_?+p|@kQpS6gReW zF({usYqty22R^_L(r$dv)fj3U(u*&0*Gh9G8a_UVPZ4l|+iKA19p58tjH)nQ0T0S$ z)}}}^9!}Nwqj_e160y5ARVmNq7}5i!ZK<+ZK;;G%lTpGGp-}&Q@oiAB9B;h0nlxJh7LJn0w8~)9+&fT7=*o~%(gse) z^G%Vt+0sF?MPFUi&OHtTembS-91zgWk%%;s)usyO2phF{Dpeo9OUnL)fx#F0^-P0f z{#k0CR+1-%DUEyj^|`06STJm7gBE7rp#0&#F(<(L;Y2jdHHBFPst27SBEne|nX^%SYltw3!$cYA6lXBClziB}$|quKS;V;A43>emK0 zYP5Fk4?57vigwXca_T}s`7}xBVn+tc-c35(DY%BwZdL*G8y@Z5zp12Q(Mo3>ia|It zN9v@v@LH{LtrS)$FLrH{Mzg!`4z5!84Ds@g)N(JvBM4h}N1rjR@R%z%Rv>b=D%q!k zA)ye+XSwvlE0b>3r%N?ov~Q=3)@(-Wv;K4P^uOt6BNnFt>_&%JfGCpTx{vf4UP2(e zt@lqT*2beL2y$s0SqJa^3Oo;RI8JLaF(*xtlUm*FGzP<~<5M^sD3u=*3%n<9>quM^ zWcxlCP{Y`=H}HpQsY7uDZU|Y*;S5x5G;@x4vSx}#HBH3v0Fcq`t}l_BafQJuJ4D^ynEqT%IMVATLBO%V8Kf`yq9_UO`zk?a=O8)P@%=Xj+Rz#-#))Ku;R<`f$(+?N-^2PJ|J)_$|J)_{B>BjBJ_!Yp z!^*ey^B(M8s*E!yvMnUVOJdC^*bw#O8^dcYP?hqR-kii(l-#G z8;D@`>k85HWWDixhbm7SgZ1@qq{{WUPNb6Tm_41)$09}<(7X@;w^H$yDPj>L^?~&F z-S=eS)DX`zW2a?u%kM0j783FH#>!0;PLly^SHtX6A{r~K1&*V z(y~`}-eRBa5cj41b{`?rS`?}xWQI{CHEKHm6$aRr&Z}W=-x=oe-j{4}{sK4-^Umuz z5A%{uZ4>vQw?42pjj82E+gTc26_O4Qr@BK!rhcRyNmdEb+Ad^Fg{)X&C#lc!Q1yCan1y!JlXc0i=$Wt9a6R_hB-d^dvz<{r z_Sut(d7aKnnwV1cJY!cphNqxS>3`ilqHnq8QAg*Fy)JX~$FkLj4#zy)sU=;NlK0a| zkF1#Ex1JSgISv{2@+ur$Oi;hHon!C<`E^G!!rsY;upYr_hCX63Rh#7}qiv+Z+G33v zwLh)ua%krDy};g7i4YME|w?Wk%5dUuZT!ZW{YIxcb}Hc);SVU*)B7NDwH=`$kLWa z3V9fZ?Usghq_1?a7mIt~H@OlpCL#W& zrJF#2i7v1G3+t5aXE?Gg#%YN#TiO6D1q1P5s|vhMoSVuMJTRDK`x~f>^dnBSFYhnF z0ayeTdrCYgF>(Ku4#p%vFZc-b;6Ophwbjrgya)yvQ5?<=>yx7c`@?*n0Ruq;^i!Cd zxzho8DaQ7gtN?WMtc&oNw*W&Eee}sFkchhRH}uJ|bCy_Y8SNsTMchdyjcA7Dm?edi zn>;RjaV<)N|cP+)uzn@cBzP2RR}_cQ`lCM|H$A+^%;yCe1y>ced3$y@fos~$ zL$k`#AX6|Wss4$)a*)9dy(-LUdZ^06B;`BFmw42-8Yc=FD6KdWT1dhA)#1>xlE;y7 z*8!HLO_wFbnx$TiTy4fW*QL`p2L@TncCK9AJnK#|B=+Z->;!QSM{mMQ z?O0nhlR?%CP$DufQ?GVWgEEpu=8{6K%JpP?Kbf_VV05wM@+nh&rekC9^~o6rkRRxC zFt2i}3@W$I_Qs=c9|7e|C@bc`>A3zX7g~Mcrb&XjE|u}f&7r355s1AT@1{XCt0Rx zeh+G(8TT-Tp93|db$7@El!|7vmMS;|o~x|5$S;x7WscJOZ;gwuXBviisdsmb4pfKp zI`ECxcLWm8!ni&WBpIyv@h6c-H*l`T8||c00F<)K+&)jbO_C_K6e%#~KThw){2K$y z|Np~BH+TOUP25IsC4JBJX*>4VbyMy$_S36>Hw_7welzi!Xth*|4I}`VRU)Jas(@}axux?*uw@co^)9XlI6<3 zH|1jeKhqFe(yn@0l+OsmE2i*)^FCWlxjTVo1?n{Lmzh>sQQ`$NsTe-e+Z4i%V2jVC z%G>dUa?J(+b-TG!9^sn|KkWF-{HCppv}ONy%vc5ETz*W{P4+3-anSW1x;|FW!T=}o z6AyKEezcKkx7$o+Q?yw1;OqSh?F&^IQ&XeYhpl1Z8tAb}%ans`py`pR#Tj`#`}MmV z`n0&`0tt?6A7s51#l>Kye=*|lS3Ow5bXRJUq1XJ()Vm{Y=CR=8dsm&!{c23@>#T8b z(hhA#9;q-$(BDp7`8d*$>7X#JZ6nq*dc( z@%RuhbZc7TM@|MukFw>r1^Z=`3@lMrDA|y0u5QP(6@6!a`PY`q?IlR>k89CwSp=|| zQByz0uOr)ZvT<2^SunY~v(9*|ME~j9m8$2}A}}*lJe|V+y`*cU>1FOT3^;a`Y{p&_ ziz|NCqk*AH5yLdU{_+J6Ld;K>qP)IXh>uvH* zv{18ocXS<--|T*fz{`?U-HEeNKTch|>|d)*%n|5>=$zgXnc+g&?@5;ZW8Y5;y|6V6xyrGt%5z8V># z!!qz*)OzTs{G)QrWWY2^Y?gIn_{#zq$*uuvD;Cdf$+{y1=GURrve8VjI!kTnV*LaXIBOHeHh*4Q~*hT%n zPY9huM+R{S8zm-N+!^U+)5iSWi*O+0l<&bjz*a$V%aH4m`gFltYbhe6Nl$}p3m4%o zv*}N1hlp%X?#ON?+1je3dr6e7I8EfNoH3wH=s80LgF(^xRp;nEJPg$&LilCHpV-5S zwQpWDMSXu&xGEvh$!pT)-hHWUCc~mO+Fp9q;vbkE!v6K&ScYO!K*&#AQ;o1YE{5`2 z)IC*Bbd2w*sn$(^Q@5h)Tu?~60r9PwOc$XaEI^1-<=5}(dMp6$2;lZeAq^}>%fHBR zYw~f#eY`z3?Y|`=6!b&L4tcpFB$NzMy!u{ZkMv;8+gm~J52OmjINTeq$DD5>h!0&O z>=s);TH$eseRON*wbv(E7RQHI(A}1a(X~p37*a7E6T6MunN=1W?L}oC3;2e`LvsVs zJ_GibFaUFZq?#LLCTuT=RkNChpF>$Tdrvo=_5~V$8HI94b!Yu#y=6*9Ju`b9%giO= z7Z;AQ=LAcYNi}L1hDG@PJTsU~B2a^EF2mvn>a;>n_qHST-{nQBleB7ODskWzIGxp7 zM@l4MG6$aF<0Oq zeXbzljX0}UK3@0x8PJcz>h+DC&iDbn(xEiPsfT2pA9Vu$!G8P6#x?}3&mudY3_AHP z@Hs#oZE*Zut9sesyuv$PmRx2rx;p(iA0#r*h&%0=Y&K6qhxGjySmZ=OIRAeVSy}&Z z2u?8mV|paOS{mVlwr+QR4_}%B|6r1r;Y6fc7$18^3&{>?=`K=Q1cRNc!Rd)TxpbG` zyt$`O!B#!4pl|N_Oqq01BE7}q5Pe(rA^)G@Bm$jbM(rqpfvl`@i%VTGz#0pBykpud zqt?{J2{{OFIiqoH?9YzhN$K~5beE9d=Isr=k`seLBc&xtg5>snGy7(0`#44 zpvFP{&M^P7XLB)Q>ANon|0vf2D;NF^NTN@110+#OO1LGihws96`=oDG@k3$jeLibq zo%R3v%I#pdg0S9mxQ2cABO&?VqoQy}*<3_yQJ@^=R`!VWoU^530IuI}i-=!ssn7K@ zLLQexuKVG)d62+@z)IUb+4~T7OQ?%sJkjfJZ?GS?Km@Ycr9o2Tsp2DvMD?;MV9BtD zyt0Hnv^d7ad2}h<;eT`f`2PvrBCKcS;H|5|7I&O0?9V`QZw0PbC>Hq?jucyFqQ8qDDdnF4Z22H5tqQd@Yl<9m;8#!~G|Si{rNRE?Nnd+)UP5_jg+9F>i?-`-|4^{jgFtMgZ5a>ITr`|BBvL* zS^$-Px*=p5ZrDJyyWGivD!+oR}mF4+rdkS?&>Y118&m)S9RxD4svFf(= z_EKh=o$D#7Q036tVYrq5Ys7r}c$ZpX@98QjbBM^k`2!2e(Qk+p<_2Z`^VL-|a&e?D z)ScXRq_8)FM5(P;2IoQcV_8TSFUOEdR?8@ERc}f@f@!o=B8(uoESR_cn5}eO`wPoz z0wm#bqqXYK%=7 zCtiWGnBwrze&A~YA=10^RlcaX)M1ue>F7z{)$ii};kvjB{UbbGN#-sFFBA1VPt)(;YiRTx zL;IO;$&+#FcBxmrysxGepMKDgc=)}fwn6B>>BA=4o+Mj+!DMxenjp>RJvNU)Pn67- zaJ>ZLcpGk`s~^ARZ>kxPc*I*Zk2C zA(#kxBe-b|!ECO&Sq!^_Atu`Ha%bZRwS#IL^#+La!zWxc`DMBWrRH z0v&T8o^0EC+Xy3NIg2V@cC4h&qKf@La-$}fbU14mx%a#O=AT13`?pM^L0Gm;UuuEVGn zvr&DzrM%H%UcV;*fsX-1?HZFef^A%s82Y^9yHSi5FB(Xu>$RAcF^B8PPFBIw47GR> z&u_KmtBe|#Sgbl4r70JK^k1m=de^bz|tvLU(s^LR+$#(&jnrL~AQG*`6CB z?c3YRk9$iB0xWL7<4X`m{x!H`;({JXt#LnA@va4ieW+k0>K&L;!D9wGnTMl|`mlwX z_QJO1J^I*+XK#WN{_o6m*zNLvnd$Z$E9cajC~Q<%W|~agNyKwppl^f6e(_&km-Sy_ z`oC%3AZ(d2NA|9v^HFEms;D{ja80Hv!zHy}o(fW(VJm-p!#YQfL2nSDw5tKj7l)>} z=IRFcT1{V(*37UEOZn!u616MxsfW}ga>Jx)>>j`?&T3Nop`UaYtUw?HJ(+a(*BlPy zEWU*^hyQ1<@&o&CQ9;;BI0W`ZhXRTB-p)n3|67Yl{&!9#2-6nL%AGSORF zY#P2)xbkR#T8qWIrLkOzAUZfMH-b*_mroto515kG>WT_aKWmnMhAdNFeZX+@MNHHy zlj#&MYLcKN6MFq)&Lop8bhJn|R;>jV6_tpczEo#P1-olCvOa~NmS|Qn8rg+8?!+uY zYs+l3hWu7i6DPwAY3-9f+rY4s|FcQY*#ystE!gX_WT5y;Kz%)v`H!O6u7TfX-0@J+ zeRPb!%LnbOk>9am_XdBJKnKgXg)tf1eI{4h%mM#fI~4w-!vQm}M#nNik30OAM{7H! zi1o$a>*-YJREm7J#*i~xVvYP=H;rS^)C82=pf!H_9}#_ZK;HMm%6Xbpe`dj`g@Gox{jj1gT=+qOb6lQI9Y>=iea~F;g zaN=)Sk*8rYlxoGdoN?(tF%lT0eY@Vhd(xem+%fCw{&p&^1LHC;u`U?r*+Q~kzk!2m!*%_lwYXYI zXaX_J2^>&6nRom_uN(j;2(8}pBs6{Z={!qBd9~3w%{k>+^iAstx+sTTuHD!ZM>(s% ziGgC18Bai1n7T*^uJ3P^{vB%&Tq*5VrmRQf;?F^xfpQl?e5E3e&L^5a%_z5vO~aAk z3A-2hQ>|?rbJ$LoCMK7fdDG+1NZp?FgLq9o=EQj&^A|ojhEEetoKC9c-Y;4&js z>ZUi(v+Alscm&7EedPXcr;Q)UKOYQ$?A;ct7IU?eIxb%#jYvrxgjOk+=c8|lVst7z zFST>&GF_iM+>=zD5ia>MaYMl1sO9%^dxLN+M!7IH>;Yk8=6-194!A99oB2oJCM4q9 z@2_?bio)GGWE>cyOz&<{^c`EaBI9xrtD(6kK+QLqS7JzIiHdZ?_*DB9 z1m$Z$W)=;aqPlPH=bO`QmARWOm#bWiRxu;qEK(#}#0lcHN6I@?DRj(v+GeKt;9kB_ z=4Vdc69=qe51jDwO3`UWm37tbzCRzimGn1 z5Z-0x?Ms~zOeP_5I(SD4H+wp~2wN1dQT&Dq;=VULADUGgNK=cD!+6QN+Ci8q7-?Zs zRCAJ(DiwgxDt3Lc#;YL5ESY)v@xJ=RTB34Maiki5=Bzd9GcGaOS)D1`LHK%%XA$q^ zw)HL)H=_MJRZx5K1dS>U$C2e@)-C;ADgXUHna3Rt zR?JrP`!?-23~E13LbvY_C(UXM-J0zSc3fJeY9iW1jZ$8onz2cqxqgRo7ZH5>fLd>s*Fb>TjWF!8i``Cko?Mv@ghP+x0Z_r>^>m%RlkK zkEZloN>QrO$`8o=Rbf{GZZ0O^uLpD+(u$6ue(Bqrr1i+PN;CAhZxnCEo?Hs%$foN< zf8to%QgcNh)Vedb&{5TNYD9nwU6MH24GzNrgG_Zf0dGQnx)ssNxR|Wf_j}C z`b&oeqQGby#CU~2`Fy%0BT^Ib=3iil`2S5-kBgLjHc2!7n=~(VzoS_FGU6p_rt{Tr z>m)Jy@OwnuK}Oj-%mqQPLhZl~lOlsidHNZ(uh2YnpP5Q5u>5(vH4%#&3nb2;B}&%<{&{s|tY>YY{s@qRX3QCkSpE*_~b*&Yc+ z%v;A#1=&e^f6;c;UcDj{v5vkR1rH99VKh<_s7K2=W?m*&|9e%qf3Av|gKmYBiTEbb z$z7DU?UqwyxxatE*>J;&JG4X+fFIm$2{~Sw=b#P+5IAt(rX8MxYayJm zHMNQodu>K(AR#N^k9>j?6US_KYNV>tr1HTpy?`WXBtjdHjI>^#%|g9VP3Dumc+KBl zln(|Du<0$WWqU5+ZP0B~h`Kdc z(sX|L2V)F`dR$>In?yc!h30xXVs?}@q~C?KeAGrL;(G1W#H&>hg($kXkDxSkAL-0EfW6^H{%JN>vtCP0If7eg_PsYd`WIJpUQJ>OV z$xB}5!A#mv^);U)Mbc?7PYfV^>cR0bCzB8*q!%54@5nKqiz($glgy{Q49K@FV%%rIT)Us-QXvYMM=mDZOcreX4 z^B+liFo=NCCAOuQz)pIYJQ1z^obL^_iQorL(fx^UpxJhY5^WLLOHsS2rTL)^f2{)EJJOh6ry32xSCxb37=o`Ms}<#!gLGX5 znGUSd*qI$oQM649JOwj7Zev-F1OP06jCk;{^}E5U+Wpqtu<#KoqR)SU<$q-x#RH0) zR5vx)Nz5ng>ypgj-HB?j@2M>UCpTyz1{ZUq{m>6n{<3w}DVHlj9;e10&zGTth6V_^ zxw!U~{07O5ThHZ{iAAJlz!6#O(<>JrcN#DRMLy@omBgq_Y|OP3dCbRUrhv_SH{=DF zVUs@8Sz6DJlUln)hz9%^i+hks_iTznk+4&b#y!Jg&}Zzt7~zNN4{ObqU<=vvu()Yr zSc~S_;Zn5$L?!xh4qRU5$9YR-#v<8j3m1MkKU~KLxkOIA=MP+pED<8$q1sV7`vLQ+ z7$bKSW8YCdj=h}d0iYmpa zYJ0|`n{A?$AMBZFLA%D0kBf_ooj0lc#8%*ro7r9?`1er0(bkt!uy=IV8oua(2C3=- z8S2bnvTQUdfutK4@vI=2-NtQ7iSWLjiqFX)!ada4O#!H%JRqMTa)B8+Zb2eFZ^|8Y zVj`GjegU=yGcW9TIkJ96uV&F7$wS+UT7-ARD7itZru=1U^g%LbxgjF%wSg!FCwqw{ER zg)Ex}Jw*_si;s&$s35xZctmXeP>8q6<M&9AJ5e0xqAkZk^X1cU&ENG(J3Q04P=HxsIC z=5ou=CgONP+jgE{-x1N_)yLmT324kuspZQJ4}dc^7)!zewB|&jH;2tk>^o-?Frkcy zc9Ez%xdn~FN$KHdJOoaHKGaKmdOW*bRoALTS2_p4aX$_cXVaHfvx&5(I!@XigK|k{ zfQRhcbBnYGZ{M(WOn+F%a|homE@<3TpnCJ>Sg^+ly+VB{GT%GgczYPfl31_LrO5r8 zE-?K$+0;!o(Ste}=TpqpZ{~GM=9`mik*tj&_mFLw$oUj2hjASeZUEcN&c$6 z6poY%6XPoH#W~Km4drsu_TRjo5wAApABwhq_>?n&TO;+FEK}<@KhpBlQ{=nWH?gjf zH`0FWKf|!dj7vC(uvDybC!%Q?gY#tu$A738D~%j&ztt^!i9-FEK^XM|<8s$sGEZ_& zCb#z{hDRvBVzqoSk?HpJG>v|a_QGO|eZLmtfu=tg_o5IKgyRRdCh$yFKUvP|l{<;= zm92T^>%t&(&SCD>fgdgT`x6^Tjq+oh)1Mm@fAr@KRv`Cyu_N3ma-#9_pDm!lu!JiA zV4shB$+ZVn&vNa@gfoN(U&J>Xl-^ikH8QZ%*QvD|P0x9C!A!K-;oqJ=@bswv$K;Ny85p7`)9@B_+VA z@(d-}bay&38}{@*iP7mZ$S1HEX244$4MXiwTGw&*+hi=^TeT{m>qr%Q1)+w-3DlFf zqWrV0V&qzufqjkp(%4ix(y)&(ZwN}i&bMco8tocowuXG_V@ZNlp=KvS%MO?i(kN&; zT15;zkndM;*VU_v!2nYUI0Zg-xD!(jI+ozE)5OdC7*m$&ILb^*1%7gUx z`Uu>{dK+f3ZRCbwV}x$d%S-^9peyB8UyXg1cqq@K-(wZ`wg7d*krGS-9%~AZn(W|o z%tNXS=*=_#T?uayJ{+l+GpcA6`MA<+ZQlGqlTd6jX-EK{p6e;og?+!S6$Q36B^1wN zpJgEw+cG${SSX3u!E~9bNxeoZ8Sm3F>THPE9hZtXJ;1-X%6^3Crkqtj+`>S=g#@u> zn7%X8Mvqu*&+Ybg`lHl-9xj)`s&>=XKj!T#9Izw$0LSi!M0(|X5N4xCYBmAx3IU!> zGOUbP_ishUgpO6Mub{>BjAWkGk1|oa>#TA=VVi(E<}Op;;E=bN_O#;c>VU^8oxlW7 zXSwD^NkIO~SG@RNJ;JkMm*X(g5w&Kp(WgNj!E;+atv8e5pQ>Nvgnv>`Uac>_Snu~> zj;tT(3;iDc>G_K$mfAHaqa;QFZXjTR4{M;F6N>#c3f ze2v2b)M@QKPW2ssPU_vg%15}m>NT_Xxkbrkm|{bdytqIv`kbSSte5B_i(*K3le!iM zYs;oe<`dy-Vlhrn{C-DfwahC>^NXx{nXsuyxI^!;lfzr)-)6O@1pbu^P+g`w*ZPu6 zC%T_8{a?Bd>CiIZGSygVi*MIUuKuRBULJo!J_?~}S8r^pnfru2*XNTR=K{eszZ8`N zn^41IA1nmEF?V+Wyt=~<>i;YuiQPMO<>vT4p*6*K6ttyCt*=4{yEJ(@!h}FyalI#2 zO(y%Amn{1#c*S3TNve~*hbQqeoq*jzGCpK5)>UvggH|DW&AZdq-MrB?Iq5{~-N6iR zGN(~==M(+W)_or}tc57PsE|p`Va-2ce`|VwQg3;{~bea z3{bq32}ST5zrM4eFyZQ5;hDT4s9lFzPU?N!%T8zsbB_~q*!=eDLT=QtS;*VdoWS1@ z7BGkOrOC=lEgt`9ow>Iu18#Tc+ow9-K6lGqXr@AXdN`4r*D8j-yWwz;ZDkP>Snicm zDNKtP)g=~yDV@{2eqZ1wGLUMooSBm;T>778B;TK>FkQl|ma2s;se!0JS~u68Db* z`D+sDO&*DjXtlf`+k(O98G9+Ue&sCtv12LYi}lR{RHk_K&8eHZQJ`BpA&isL)$Q=H zzBS(YOG3r3#HNhp+3Kg8LRdkyqKH`|GpPK}{A~ld-9=xHg*?soawnSewD33Y_q{$8 zxgq1vA}-LfY>2uwsgS7`LNgcU0oPo+K98l@j|mtf7#dU~to}w>&p#&w?PHbd2@d(E z9&44QYQ7c)5;YP=XwyEl;+LXl%`(%=@2UO$jo{=l6^fF$ow`d%o6HaS@TyqE|%q;e2ihAVhBl0j)FWfudgL!cx zKqH5xcPoBuQQR9rOkkZK{ULqN1o84Ls(#R;FWiZk^~1zS+Ko296yZTll!ua(QxqbN zrE3@8DjebwMOYoTr(W8%tAuBPuWCNz6kuRbp1z6R%s= z`3@v^&b>O$U^j0)FmJV_ifc>tyqwt6x@qadOc9zqr9qJb}5-h?w8pQ}b(Vu4> zkDzcX#{HH#h7qZn%+WVM;C)4dvy%-3+2nRH>$^3CkhD3@$w-7-^W7#tsF8fOZ1Qoe zYI?@+?CgS&Q!6BoAl7+O3NJXA0%lFy;^VjN`7N-n;<9K3m+&_VLzF|jH-Q^3lp~`y zxLn2deUOq#U`NBUPQF)@9s(zhp0+Dz{d4bip-6)8mm_#%GEnNwY@{fH-|<5b7vvJm z>#jfUEC2W#s-!@VO1d)9xyR8)dVTN1<*Dlcf4Ta#0M^c>ALuEz?w~f_4}^cOSGbjb zrpEdp*Jb-VvggF)yBP5(3{vWrWT^SUb~9{N-Z;Al%o9WND0An|XiLf18#rwv;KZgb2Az}E`x(_E8hQG^6dN7z<%rP zny;Tp%M&eT$_-gtmU#-X+41}*ssWCwNyNsrKc~{`-FA*8;r_nhD zmW&&C$AnF<24Ar)Isv+}}A4$ZPZ75^%MW3-*@gk+gX% zuY72IwhgE5&Kh4dQgFprG~66*6r7xFl@3vB`wnlWQhn{G+KrT=SFcO4Z>MH<E< z`hn?BT5PHtEkMsx^adm~ATqd|mI2v-8(~{E47y-@40fx*6*NLa-Vdfou+`f8wH!K? zpzsTo!hSFjZvA3^qOt=wnT2`JVTQ_3wfbukP)aH5FFKU|wcskj6~fO&Fm6vc-kQYv zWO?=0(@t|E?H_fsu;Bue5Yg7#erLf9d*LH9qZ8uV`+BjcwO@N~5hP2`u(C#4dc3vniq>+K0laqnb6lUs=1q!_5pEqT&$m zZDWLo^w%uRpG6(7{_f83lDMLx3OlfL`VmtgMuECJW*zV_ftK0ry2u}<4IVP^oiNQ@ z#1-XiVTr=Tf5pC}Lg`$9d^L;$NE{mM zGPa6>VRZPv5tm4e5NKZVc+`VZeX1 zJ*ITR$kD=OE%zz*yI5Mdp+@e`sCO~9jRUG4|yuXNsc)KuC&?S`70=h z3fCCF>GO`~AI#aJioU8AcL>bs8}GyR#BqMgtUFiF2$Qmfor*EN=T)oD)1cS)pGwgC zjI*X0a!^ERIdbXa_igMbdFvU!x+LS>)K~92B7W6r5c?W;Z;xAk_h22_b}6$gl28W~ z`*Kmy3mD1c)%9X{f81HOob-jLu-KP+A}Lw=a}<<7Jt`1VaF=Y6rG!c60ui#xbsP?_ z+iqm4odLtyY&}-SjaCNcV+n~CB-rA(*1X=|TyG?)=amR10mEcMj0|c9R^E>L#dHz) zj^A|uh!#)!MU~x3i}~w*(oH`~7^AGQXY(@Z(($-RHvxqX&1&XgtT2hhf*q~XK9elY z+lERZNpNtIOi9MQH|>HRNSt;p{@%#%)qzm(C!VZH4l350yP8(LLJ|vg>#roBjLk>E zPbGYeo-6i?p2nHqAOi6YDYvz#NM~+jl++;I2euMG!K=~zpc$RN8BVV3pQv+D=zU6( zvNP*UZnp-i$Q&k{u60t}$JOUOOO4pTP;_0xsmDHe(_#1mwbYv7j^R<`x*%AO6oDQp zn-vI;RNC2+=(iv9B~=vS{~#&qJfIx+%Xalq5DH21vv?x&ysp3%S)wA}OLOUOmGl=V>pwhw4-Pt#V)lh%@tIx;_~j3~0E2|2QuX@G?pd(O z)DS;~XQWh08x zb9^z9wmU2vs8JzjsGa|yO_-!byf%E)k@(>S$v#?%(E@Liva#yXNwdGg?bI5$H^W(X zQs(pDl0f_&`m|or1Ai)9|JKwcOX7eP>rVY-C$JnA3@_t$Cn~KY`yp;qT#y7iJZ<*axJNYy;q%uw^4LwL}Yz4j|;t$!Wz7s?f zs%ngP3l>y&kkgsVXwL3 zzIjz|ns@G5c!MQ1>ikO($JRozQ9NQEj08%$(8veC==yy!#sJwiCKK9T?muKVw}N(- z@5O03DN1m}fMaPWv8tG=K{Z!;re{HCx!J6!Kr#`mg6>1YnI%o9zHrm~qo-~xnppwG zh~Pq9Xv{!RgVw)i5r966%m!djp5F_xr@&Y8Bk|*{*$KJHg{trfb_g4cS#NhL+8W7k zGr+;uzneBU`4g`k^8GFHKoS8VR*me+-8XnTzJIH8Rekl)+CjKy6RTL*drO@8Hjk%q zxYFVs26(Hq`*QF-SV96ebFTWeu&DB-B`q3%)aVpg?UT5yRk4{@GaTt3^cAkm6S8t4 zDwx_aqU5&DixcVY@j$+7GLvdn5rY<<6pOg;G3W#ZpNd*ww(y7H<+ef_>Uz0t$29Q5 zbOV0#_f~}Akr#KH|E?>Z3&EA&iZ0%)G1BEI5YbRL`38am!7aS`BR0ye|9Gkmo<`H` zHq54-aB?Kr6mcVBY)WPwo+NoJ^<1p*PUF5FU;~eo@S3t+$4Ez7G;o)X?h|q>grsWX zuF|iGbF7JjIMNMh!-OH;EOo{^y;}xhdSZ5TZA*5r#zET4Oxd|b{ekIK_c1@7RCgiz zu@a02_ktS*l00vPntX1OzY7&N*809`vzspT>(?m5;UQoy)R(~g{s(*Qear}p%c7Kk zEqfN3U=e7>o4o0g_X|Nf9<}8Wq2$owNgEtsVy`y%P75m2o}ZC^Wl7Jm@F1d zgHSINZ}L{#I#e?DqEf9n%L*4Cs?vbl8h^zhI7FN3uvpfz1WjWBr>$08_C}d00>9aXwCs04A@h*$!7+aW`{C zf{^c(=E&C)kti}3m1as280XxCxaY(2-2EOfJ5W;m8#B!0d(SN8IJ+-+0ka7SIeo~i z+0BE0qcAu6Wn_6^eJOB>OR5-(cF^%J!t}@ZX;J$9XZ@sX*4q;@LlhS61f-{=WGTD) z>?2Pz!j6#IH^Ehd6Cnwy%rns7?`Ep`4WQdyrI_Pu5Al*p;b_PkEo24WLDs$d_*EBK z4yfnC2Sk4Mr^NtxH|Y*F_$K@QRWZ-{6D#l@n(>?RcfZ_lrMRcSgX%%Idu+dO8m~^D zy`*!?(O^F<2Y0bFTT$$l!;0Y(C@UIS;Fkyzq9U2+S>MU{D*fYw| z=*_JiYL(o85KFSx9ca&9DoPaI!%$wCS-dKF3<}E}^ys;aiW&^`fB06E{A1O-X;){;4!~jLYLF6%iTZX*Rw` z8|^XHLmn8zL;M%c#x69x4U-c4ROntRZSmoVCH9&ZkgQ-ZJN$spXl-_P*PIF~wJhCo zQBX%zL^H(5qsF(%7w{&@2+CFu)87iPg8kkS3B@1_nq!)Vxp@IrN24z0K;RHlt6tza zbhk3{BtEyFwVOk2oKIZ7j}X;_Fwa)0ij`5Q)a`8x%zx1mezGJiOI8?h+X5At??zb; zF=>S2qzOMmRkVV*BVFsn;7E941z_}Y;b?=uIHL4wpA8Nqalfwc&;1j2rBUeW<$q8k zFH9xyUu@=22nhTCU!XyV|Ggwfq>8R!UF(jVoVS4K_8OB6PBEOQhz~W{wL@;>l*H^V zCIB`Z)RI{m@?IZ1@L5pw;AeVR=#_eI>4TvD$nJzgkqB%I4{w}MjPh$QGX(*QdJ)B5 z#sPTvu9RN=U+A2L@cxN7(|BuaEq{wHvFd1dO_qe$r=Ty7Fdko@yG(8i1|&QqT|=(8 zZm_4_(uEUW^VoJZxsQh}JQ$PRN6QW{u?wUHO7FREN^SZJdN3U_W4Ff=JQ_H4&>~0GnU2o zj0SGiYbP^^qVoG$-sUY%6;I>=LT&h$HLvODE*wQl?Yszy)x&hQ3}I zVZaamN1hlia@$a|_CT>ez!CcN2I9sg@KXfyJ6X+!$pHZ>sqs8{@6q0*YS30f?22o(Ee^X;L|dpz)XS)iv1}#{ZS!U8u<%#gY)Sm3cu8Zg zQZu`!ke9U)BPfPQU1pwsQFQ`YVv_enb3b0E-tcH9W3=)y*L$8sli4$vHD8Yv_`)& zy>7?-o1v65xO65z++CJ{aseg}yx#o&o?A>?@xw=0fTQHxrX(5bW$b6A^yH*y@ z<$w@F(9v>#y4-%&?P;z7Pl0eq-)>hU=<=bC8uj{Q$-4al=-E932dnj5iw_zXSm9pt zQ%zVD*$rCWJ-LL7Z!c{Zp~b#@w?t>q<{#J{kF#?61A| z(TWWs4K^5JLQ#!E4(7c%j|?OE6YML^8<>(PX`m@>HjO@aEMd6WmLuOvgNs644`!b@ znlufR|6-$@YYpL8OYf}+As{bi>_@(A@r-m`XpDf%kE{}KPJFP`Lz_o7!wxhlX6xOt zGP{pqVI!{W+|)HZ(JNRdq(*fQH;p-E7OocbTsm`qHQK(X@k%J*H9zrFk_m(~~?P?1`A9wqmwuFI8*!LbNMcNv$rycu_*D-alMBw-ILy$>1?*>+033 z5>L5)BDvoXcMw3#4QH?qGglf11a zN8WSCJCtPZqTW97nQ>Buu)@a>g(pLIU z$|dn7Er+o!$I4tw6c>5UoEzaSb>Y6U#Y`VcG$-4JlfE>}msuyo314iKGL+k?wbKRd z)SfV=fZ6~~HadQ8d7|+d z-%rp@D6PVf(ZydLocd#sqR`qEO0NC^!DM~&AxRWDW3kg=a2foO$L6t%m203+yVj>% zc`A#8{&$@}9k=>A>j?)8Sr3KR5m)nGvQ)CC%iU0%%v9}kA^VvXGxP3S_fl!SYv0M13`yo z&_aY6a9NH2>MPNSV-Fr_T~G)tpy+&GfUNOCwD*u95$y3|8J2JRjdgf5oA%NQu-+gb zc9^dRa%!URL_U!`Y|Q6W2ld|ip_Xcm0&>C!F&cSqnU}oaQ9em(1okL;Z}&$zw?()P z#5wd282@9gdne{KRNzgK-+uFX&t&Rr)dhb~9L>nA#uEE{z-Q%WiUrW}LiM{fxBZ3; z3C}{kEq>&-E%<@a#_MJ&&8*L^BQEnyUtD`EVh!KS#7S)ornMK?uAkT1k9|4cTwZ|< zWV7;|5CYKiyRh6N*P4u>7k$Ah*EAdaT+M8-q`=FBNc21FEFDM3=jp5mZ!wTSseLNp z3QxOgno+RMLA8ZTl!xp2DR0SaKvo-p=sSRBYL%qEG#m&aKJ`53F0wVASDEimy|m2Z z8u@yggdBI?c;L~~ht?^fsOMhGulWA10Hf^!YTBprXq~u6hXdN+G*hqu!V=Bs%??Ox zvk=wTC=o^1W>FA!3=2&C+z_{q>vGB!uakct*|mGuJ;?W0H6NLoooJwUSa#?~yaO?` zU=PGaWdbJlA`-C|s6rvAhrLCX-Tpiw@ypP*E-KHVl#Ij1!SngP$TxG>S<*f`l;mxO z2|d}`l{%%p&URADf@rs^Gt64vimL}_f1B0lM+CIalelF<^B6I2%_FwK_ffAxMMre^ zr$VCn%=mR7hQdi-8)Y>Uo~JKfb`GaBvLsCSdr<8p%g_wd*xuk5zpQ(U=c!z8$MWP@ z^$SQtTA6sAx4qwM3Xb1TRiEy(fvH%fpTtNnA$xwm0uoC*EOa+Im5yC)_m`=6N_;R7 zC7GRUd*QI`I0W5iO5|0mDbnK8_n!|X>ol~8>9kGqsPvcR3h)c~XWwEie7G|5nBXHB z#Xy84xv2U=U-dt3RT4^+m~cjlN0cDqS* zZ`sW(K$ra4Q?`u7m5ol?+CeQGq(#-Dpsk{0d!m3t=?M^J?q|@-ZPIo^6w>ZA5X|-z zpO>pr3kpBZW>RSaGD&m6u9+m!nGSQ-r&$>U&1QtJksGDPMK|1P{;B68kB$Tg*Tf@% zuY~u|3p*7}^@s2q=?`0LQKn}fM?T;8(C68^*KhmNn*NhIe-IBCztIp8<4;P5ftd)0wMVc2$h~s-mn(4*f{dsQynL?Cd3aS6=gub2fvcshWBo?-L zSbyjXsx%U>b)zaAf(r6*cjX!qj$nTEvznJcuTT8U)Z3$%WsQ%_krBR8Vu$59jqqx& zwVZojPzyJZAUsByjz=!+t!jGSeG}EY(DKqXKtp?Rf4%8rG6>_I{9@qbu#w*H?hSZ>18w0-I!`5WSv39lX$3^ZyxFMG z=HETPtXSbmv~G*viaGVYk_XRZK&xj}8n~BJtcz7fbk*cxGqt*DQ}WAJ9!R-WdDz-~jxmLWfhfT}CB*dISM}@1lz~!)nk%^EnCq&$MeD71~Jl zxwVUIoU^RX>@@GsdQ@5+=mAb0yW{wQu2{ZLb&3!TDJ;fi_$f+hMM}G({8WCyGIye7 z(tt-Js)Z$6uFb=u{i}qmxm9`5GZSLV7qzzB*+hEdh_#olr85P0Vz3MZ@|7AFl8_T* z>w~)ojO4x46{n5R5#}%EBa#dV!zX(EuHDLR;9fU0x4m>&!Q_z!5WqQdpm3os&}z{7 zdKq_i`0%Udr32Mle^|rm0{N#3Sm@obKPc@=;4sKj9E6db>mhU~bI}X8r=_^LRn*hK zf)&GocY|bWpx1wA$MsYh<%Cjyz5f^>|Pp z*K90u;*!+807`8JI_Y4ab6%2Q2lMcR?w5kc^UZjk3sJu*wGtW~Skl=RP~)Uf^QHA6 zV$&{=&PXJ*6ZwTFW=nFcS}3X%~~(;|k=tFKt{R$c7Gi(v0wk@m~Ojm@w3oDSJja zqJftLb#j!9N>fE@Ng(@(>UdL70<9xX-XX%wxa)1%EV5T18>>Yi;zO6-v>SED7ZG2P zgygN9chDS|t!o|X$g4|#n>-gHG}+_m|3t)Y*ikufs_5pK`SAdRtgMg#BL-g_(6 zo)@|1R+WSIzzx`4uW z8bG}^y$6tsi}f7O^qK^X9W~fDc%=Zlq)V7(#*AM>*?({oY7=S#pmEeh22*NARa4e1 zl{UNdb0mCN;m6n)BhCgr?!l3bYqu+71@|Ai%Pi2z98M@tkV=&?7{=!vN;`#S%0N>D z_Dz~Eh3Hi=%e00`ZBdjHoYM){joayZm}GUL2XvgE#WD>6dmyjc0$g~L;We=aF;3c} z(yVrac28mFg1M?C`Zek1&FH}6RREcMs9)dMY7Wl`ODr;nXVj8tJ0%qM(Iq#nLt@k2 zBMXum^A_rU&tpkxU8<_kN|33CP=>PEJgzPF9yZGH1dDm7XC0^WQfKnnHNDg;Rb2d) zUha8eHW0abPu##_0`h;);bEwT7nd~)HA?+&Js^cHy~W^z(b8qnhsn_xuJ^~wWypYB z7}7sSZn}E8?E2NA0kba+#E7}q23Nl~X8Xjq(J6cR7I7zBQxDm$LEJ9i-vv-N-n5S# z{&cM-rdNl>)bZd&rUD)0t8;1P3< zDBR_w&~9oUi%h~EABSEqNAn+hTKqEQx2P?&d2+VTHeuFdo|x|;ZYzfSG@lYiZzQ|l zc}VTB-m$+4eKkCix+Q5rx%J^fR>;K`f>B<2=>(WG(r6fpU7qw)Xs~D?y{~kXXzvpQ zcCySngnsYl6nPB`%tK4c*~wnJjHm_P4_ft_U9lYiYF(2qB|+9ESj;%3!eNlh+W@H? zJpYXgou|Vs^!wsoMt@$YS$}$>2~s|yD#U@q6$a2R-(*My-MD2!vCZDyOGfKg#=zPW z3ILQ=2bU(gb-R>0XVMIAGa}-4jMwKTTcOjj{k9#nj~7t#GTXO-=9QQr^_Z@;h7?u{ zd2Z8RZ=Sx`895qDO80#InWa1hyCr;AXu$_?R>^qf>^8-_r9RgeVN0OsGPEZ}UJkYG z{Mpu1m~EFK_E98E#tk~KdUj_^(H%(p6hyz(X|Evd31oF;_L+d(zj}&G-WUI^YZr3P zo7VY4`mQXl%~FwvUk?g1vj+PL%O$nqamyy*d&L(nx#~eKB3rWW%-Ze;F(1@1FZ%u$DrE&;}b%NWI#1O(_;0$!O@*WlbQ>)m|Ykqc3Uu2PpEo`2)pQnesB5xgVOp zUsb<+pTD|0v$Pf?w6rpnX1r3<9JJGNMqDDaJz8R_I)7?BXxv6^H2$%9`!`O7N0eS} zI%mLF3rtj-qO&bKXbt1WiDDf6*vcuioey}N2JhIAWssisLCs)IN=GqPGO?a%HMA^qEu135AwOc54y2aVL+{7 z?H&)+v=(}&8dgAHnNF=e6cw9m@Q;snn>KhK&`~$F+jvYZ_gWHI`T3D!83cUZy7KgH zzho&wLgdEpfz7^bz{Qo$P&58XKY0j;=MmnrcM0fQUfB(%@@N9P7!Gw~`5*SIF$*wY zBVA$~G20a^tp(JydK}f6U9jU;u;;!L{AwQ_m?QXgCgOe?OQf#%tLow#h>r4j;kCX; z!JcA-u_`i6Y1CrJ+JnjJ#$Rffn0Zlucz}~=Y~!{1eURCrLVePf0+XmI37?XL>MqU% znePYXP&j=*r2Es`oUj$H+Y((z`r#|c$;e4$n3;=Z-iclx*yG8Vtv=sgI?V%45wrM^ znUg6b)jv#AD#lZC7C4)6SgnitA1 zFOWzMl5s@z%kkF4L$nf6i|w@-KCj#rqiOwtnRQ0o^ou~zQ0B@RHbgkUE@OkmeVc(Sz=rvsG?nx8O-z}(Wde$`$YI`Mn%I9i-=SRlJg zQyX{D7#;YiX_EP+TwIh~1?IJAx+1+QXYGaM=H|l6bFV^V5fih`QQE6F>2$531qA2XJ ztlNniv>hbONXiIU9T0IlXKCF2@|}izfPaLQT9og5>YzrATX^&KOLwj*);l)B`}GN6 zDQi!k|JY(eX~co1Dvl@Bhysa&UQUZfR?uu**Jfvm76i@(sxeKw>eX|fPMXNIXcCr6 z^977&E!T+@HVL-@4$UEN%XVv56_jarC%piZjy*cL>Z`UtVi`1^GF|ywq~KXXc>9N5 zI_UY~NS1vZ`=?@L{#Y5C4p5b&MY(-30O(;I=y^Q=)x0~Ndo)%LFL|8@i#p5FZn<2} zG@M^c*!s56^^EDc6lzIXGZnOb8r(EE;C8Wy&PLWia(~zzIzZ}s3wO~Q{si~6u#toG zwG_^P6{=~=swIJQbvT6 z88{`xo8$44Lt$OYWXo0b63w24Mq%FUbD$*Bf^d`V(Xu-G44$CED4WszUUHnL-7js@ z0tM6B)J3zJyM}(~q!eu~GzBW0@h;D9Bp4@YM6sQ56ATD^bB!vo=UM2+MZAcG8TFipC|ItrwpQclH&f7d>Bz`dEqyjnGs0#@Oo_G5I04q?}X>f^FQg9--LQ zRXAlgdpf8#3^f>gCQ>8T)wubSc~DMb4BrX%3e_WtGwi^;=jz$)hEUmNEzNLc>fvz5 zv3VtF;8_itv=^+%1ymeH>G|^pi}C0Px9Cn5FTr;vzY!Sq3|Sx&oG)T@e0)fSVh=3_ z`$7y~x;qV}e>-fRahl{O&W>a5ryR;|(-j<|V~Y^k<)P85?qD?7T*tRNTfztTIXCOnrWp>&gsK+WdusDKG&D9IkN`Ywx#r*D z&U@;2Hs^bWGur%+RReMY;#L=CQ<6WcE^!w{ifu?^EeQ&odxr z$M;9QdTox+mo}dtUlBNImO0w(sn2%~@ZklH68!v=^L7r21=cM1h z>%e4buRIN|`RdfW&WVFVsf1$k_s$_hMd~4(lRuinYi36yX)H&A!~oIKIj~{VdbjUA z@oJAUh+frK*>_wgnNNBh@C^uj9|@zuF||5+%H(MaSidg(YTFXchweU)w2hU)qX)Gh83tiJhECHoKf7q{EZi3u^mbdKF*)Nc6~PjK*6C zNzi(>WYaox#a&F_{X+T|-89aRpshiWJt_{6X5Dp@d8{q&Qox@%)QEFlIJgqf%6DAm zD@%IyPIvf>eQoKrsk?HI`(=)~W_L^uTI=++cHyecK?ZdeAn~oCD`&N@8?%PG63>ka z-RDlCbv2lcM&``b+R4b(>H5QsyFKQ1WOa6B@`rD$y?WEFk^=n5cllbXOa2XfGSl!C zza6uBH{USnWxt+Yn)V@OlhoC609paAggHnVaqP&ow{%^5u$+TbCSHa6siV%tXpTL? z9%V&I4UUl=*d7^j8jo(!nS4&`*E9-0>(L}#(-~Df5peKzv`iBTfv!BMo$^x|{8(4A z^xJ01|3pA?sF>ENkmq!nFjU0oTn%eXTr{a4#&&YBPjfV9lY4R(r3IAKR;YSAx!ZCD zhcLrjGBkGTQk6@a*Nm8GRCSnL1;!!;oJp>G1&fESb5U2lG{?rD-zQgy#EZ}_kQ$+U zBPFl+N5m7NbfoUU$Ls3O?Ceyxu!Az>G4ZlZifTL8Aj-H#U@=-Se)viKxt(eoGaK)5 zV$Q2JgkXDjU7Lk%!BwO&o8taFJ$!ue zUO-*#L@l4%VTjyk6Hh8jroK|ykSr#I| z^PcMot}yv#+o4@MPZ=kt5Y-J=W?bV1ck|RqgSW>Z2i#zfd6iFHkxS{fqp^w#HPlfY zpJEOqi(MyDu|*GFO|>TVKQSquorwX~(^4nRnlKgX{SOBYP1Hn-5=gzjXiIbxOIFKb zC0HN(7X9PyfqJ`c_BUpNV20(D*$v~`KFuHy$@}m%QF-~9!Y@oxajPuP>kwy&zVfcRC>%khBHDi{vj;eh6ZuYP+8TA&ah9zbg zldtGA->_;gSqr6+Q~G(gc*eT@iRO3e0ngCus7#r@m`Ti~ZGpIAxH&`jTASL6XLw`y z%8*N;#7+Wc$1mt3GSCBl?F=a={))SE4<7eYh|7pJ$Fasa5ib~S9YqJ!_8CQt6%#z` zjnhn`(2z?aQH_d0;3^PVw})w3kVgvcb?*?og}&@5mmolm6WZ)dFI?`>@<}8@cLYv{ z46+;_HB^n1F|)eSww;K}{6sd7xfx;Vnu89JD&K?xi@f&hvSd<61VQV1vF9;GRj;X| zpGsteU32@*8-jmEJEtXWe`}XQ11#1LNmAXd6iS3_+ccCvb*D)L%}?A+`KYv}Dt#9r zaAaSHCQ1@!`(?*Z(w8|+MQfYX+GxiIJ(d|p(>VvX@UNL8Jg%e#da{y)YIM-H9#|aD zC(SyoBsv^{?OicJNpgCG7Du8|KdpnG1BZu!IIDthFMm?2l@<^39y>G4yim(Jv@7}( zmWBR=<+)ul-;58n4^<;;EoLQ6)UrgocL{n?O?c9cYUlh;W_`X8de~Z+Dh)*KhLogu zyV3!HCpF7ir7jPpdz$(?xplqg>XMOm-DGNOT|=H56G(k62hyL+{B;xW z=6QEoF`hLwK`9z0xhZy{nes&1ABhA`TX;OKDfE94>Ol@gys3(b-vXJWe7#c7&!EWq ztcB1_7cDL151a)98&r1kw0Y}|g!Tl|2lZsgO9V+W>Io3pvkBzV9{@SwB+p$S{82R9 zs|U7O75H%6?w18=ilstL^$rYm{8psZFx=%0!uOp>=Q|(aDt(DigsXt z?f38Uu=KM5x4w)0c}>@ppG4Nt&{!A9?#^FG+IU#>yxBQNt#!FbeSEhVO-i9_`nIM|`4r78h0RHgb|gLhIhkH=i1$F2mzY zyup4*|IbA*$D0>nv*SgK#wH%7YT;1~pqR3AY~CcNZ}8=`PLseM10>(DJ> zE1byc=6W1KCSgG&aYC4Xy`qXxz?)$dpzh87KYX2KRGVAWtxrn}rMMKA;!xZjibIhU zXrZ`E3Ium6#e%yeSaEmv7Pp|qtyplE;N0|_@4NTk{g*K^M&8J~_s&{t&S#RkuzU)Z z&bpUvb(GnaH2w$W7U#$6g)5toYxnZh!GjWmh+r1%R(45zz&$iS-jvQ6dZ_@J`tcg} z&V!rjbsZ{!K<)^zA)Fc{4uQ)=axMlT&%7#_Wta8*uN}^JQ^jk1GmL*$v|C~=-2t_F z(5RgUe-rCQN4|rG6cRRR5W6}4PvKLPRbg#8c?=--LlmEp<#829omagC@54wC`nqCAu@+CP&!?SF9yeFfwlyHCWLAs^7q=MVQ;Ou9uwJeiI+?) za9;CTYGRizhyen@SNIBOC_lTzup{Xx87eE!7Wevo^X zcwH?)*@tEJ&ARd74kvH*K$T6B5>8}!^KHG`8CqFozhq42Kdzscavcp`9$0t7y1Bin zsk@+(&7wge9j}yp=pQv1iQcDQz^*Ov)YSEzh=x3KbN6# zMM|T2Pa>K_Jh@RS^1GZnA;Ueic)%~e=?PQpV8hA9S|o6~niTP&R!_gD-ig84Q_Bun zU`yq52Q1C#IGQ&(47OP(~Lid`J)z*Cl^A35#Ho zcwgo&@NK|6qqR_HOHm?vpv9smUv#vEin8cj$`>^glm5M;F_cx+hghg;Q3KrB9#?#* zH&vW3C~8)oSCD0))c&=OWg>Goz&MuoQvsz_sJrMpcrgpTnzHn`X+h)3`czDT!>GX+ zK{HoAwePUNS)P?5@an7lFrY2fuU|e=eaWY{%v37I4(D;$a&=!hIuzfqE@l}#p_I~35?_HJ?=dT- zb7#3-VK+hVW#A`i=wT}~PP0UM_2}V$UiD4e%iZuO3zwwqaxUsDwY=F{*%`ujG_xCC$ltbL2;5-% zx^%4#6bKg}YKJEIE}pq{;89c!T}CeH@MbiJnB{~$D}NJ8@4PScAE7A1N{(s8nl zrAaaU56%fly9SX{I$U&EXS$qbtYaL~+}Qn!4^o}_fZoCrh25N){c&SnMTA{NoE^P3 z79MBx$)k#|)foz-x5~8g9q!`u=p;FGOMRtO7hC85w!74CK-2SR7?>;$_Lqk?zHr>$ z^Ky#>g%s?3a(mI!&f#w!f*Biqq=4rclpU`INppU(*xZ#> zC#GhE%?9x)I9aXAE{L(LRJM)`2Jsz4zrr`m<0EdZ{5yC~y~}Ghwpf@U84LG-tkP@d- z_8`KPdJcw<*6NGTyA}z_eB;iaou*z6uHU^^j@OC^G-CtO=G~mL0R_U&+azM-WZDJ{ zOo-5AdT+xPb*5|ag3o7+FK*1c47@5h_6Mq*?59la#8Pr7a;yca+^zZfpzAJQ{K-34 zFZjHjpn8&e;o08Ldt7UpLQ95q1pi8Y9RE6Zn7rkGW=IPtPu2Z4hAUVu(ZPt)RL17s zXWdIqmQ3i+0Q31O3lxsN*8w|a73*TBg8pe}98!qW=C_t8|CO@B6o&Wxps6;|lXB>! z0WNIFa>DcSY!g1;#m>xoPJ+6@7}D`MG1--|noVFTqx7B}m^}3dda+Y^yfs$@Z96?8 z-yBNIy7$c7g5j*>UNub}G$*Un{Q5o(eVgZr5xB}Cf4*n-1^+P4az3!WP6vgoO@CF~ zOTKRU!vbWN?dld4rg`Ie8Z1V5FrL1LwK&NJkZX%Uy1i^D$fm+>p*4{XF`15G1`m3g zPxJ30&yX0xw%%!RGwZUO5DD_<&90vOdZE)Y=dc$Iw-`XJTr07efzW4~mrAnw3!@Ew z!8f-Xvja&?l9g@oSt%HsZzeCv^1Ul9HN)=<9OK}1Yht`%&4xy~o@We(L###G5CBGU zp_k$#g{Pq$2>* zDuBPNck77K8!Y#Ay(3#0LC{0jeSsbD7saQnyZ4)ob^G-!HW!h>$eLEQe{FG|rQ<`! zjBMG}VdQllJ!}ZeOvGB8sBfiyr*PQeLO^Kbzuru zZCS{@r*k%oU~06DeHb|%zgNirR=9CDVInl6&(if;lTh>k&iwOxj|64gXtL27G=;y~ zVS^0h!cE7o8-qTQyZBKUH3f7lR5go3B8iho3v7@2_UXu{J)Z>m?;Mm|)JWo$QRnmXIt*AG|gBdYCp4LSOtifXR0 z#g|McBVK(mqztBHu*vpLu8!5Wd)uHP3P~E+?rBh#O+$1-@?9LJ1kDM}@)a0AJxs-PY zzQM3kGY&#n_eE0n&vBbUMCy1Apn?UK`IdYjIP7dVY~7m<_i4k1RM3mwOg^g1`vH}x zV)@r#@S-qr1>J-R&DsoiG$&cFhx)3*$m+;slAch9JvFgu1beYu}vty=NAD4XHq6tPr&AN(5bh@Q*m?F*zki7;}2jsPq69|C*%w9f+Q>tbW<)ZOOQ_6Ya>p+kzrW`jCqO2-`b*1GJT zTaeXWPj%!K(VbpPB&i<4$z{e%?XDM}0fcFKly0$FhLzqzpin1_B6DE}I!YTD38N#e zvF1$Ulxwv|_0v@NyIphtYdlFOe9McX9n$^qW4V1;y#0e3kD~MZG9A_cq<86f%67fo zuuYJbmqm=%*CJj#ZQkDMMPj83Pq6-g?~o_zmW03eNID4@35>)7d)JpU1qPmfF#e%G zMo{RTwcD8)D)k{G{h8{0)-rvMzM_B0+^l#)q#V1YT%(B3$pWrGKRxcg!=C}}sZ{mR zd$`Z|h}pV=UV5dbV(Xx-9PHKgYDf`X4hTZosnmkD$kGsfmebcC%xu`e$~z{%o&}Zi z@``rdDocRudRWF^{AN#JS8W^f3v1z6_zW%bKQrOgi8(5cphXoX$VmUC#(3{xsBF-Tun)h}U+7w*X$JZ6M>s%#qetyg1c5ZUp8xNS<){7vy(aP=>%(*WU6oPa6c? z2`@%Ygg<1GKHC~*C}|KbEw`ZQnb~>dXnINt8wTO^kIYwWoywNw`1olq0G&MKNjup{ zg(C`S6y}Be^aOS@YvL@j1$BEahw*F*=Db^$VhRnQa*>RswuMe1?{5raCTus3W|az< z_0phtACbezM`obb{rM~Iafbc`Tmq#}E_{wkB5Hu*55qjiCr%GZ>0!$9oPH(sJWvgB3Gw8Gr&FAb?}1}^U-+D=SCe9+39 z>RZ{F!W|{T{YQaD-P2>4s~jj7M9f12|38%+-{0$Rq?RiMrLXp8$|XP~oEdqo)T|cj z%56nA0qGQ#h@-N=|J6Pq``&M!#8Byo`hA6A=J60v_Zjhi{Qo#JBm?5%{jc0{Y-X}@ zj%g*GpLBFN5}q=aF}$Ddo+vuWXHjMzV%9i9?@R{*nB<#BB`H$q@8%F~{vRWS8`PJ& z#b>VsXFs-eGO2EK)I4_EIloPQSjcpul_VJcG+OufB9H$dD{!ncbYC>=n+q>pGT`%+ z>tnu9th9M%zmxL0W!`+9nm#H4vp2_fM~J6iD>{Mb5r>VA!jxyf%KR&|zexPDcMm7g z&m=jb9ag;G$Gse<8CFP4kyD(IWRyHoC*1UC78q+$a6&@6aD882;gL0OF_p^66wU|(mK~ER)KHz*DE4Mg8W1j39--FE%)WzFpocM z$1|`Pl)PZ*?d*O1ChzMki;57gV#(7x`QJxB|2T>YmGGJ>3Xe__pub6Me7 zY}J`QbgykZvN?@>5*OI!#|BU$T*GR!9fGp2~arG=mnP9=!!+;Cezg=ggU~ z-I{5sh_pSWlq6(fFlAQAC!0pHm1(y=5auR=%eTPUb#`-s9py~bG{2?4Cq6tG>r;)) zO+7T%*wFEkjci!kzGew>GMiPAPv%re;^EQqq{L9~P*e6gPESx07#v~x3O&1cZk!e+_kGEjY+I1BrTvgLboe9m1}p$OfdSIkTz z@70y^2+jOB<~9{F@k*(&8RsZ)t=?KuJCZq9M48}c4Gav z&raL(F*b&hZ_4iSDPbkEe^gcV;Anlg$>KyU|Lz9Df2A$l-bguE=&7VuVK;z4r!>V` zz@vbAK+*Y6?01Wr1bNg7K4M_BwFbW6`0;eS%Wg+<2BY}G+#8n}ALUR#^100KRvM^? zM~jYvSlwFETJqCXcW1%g&iUpa&zlcsB~_8H9_Jb4Sx-J*@R6E`>Dy=2H?7e8L-LdR z+QTm-nTkQnA*x3knTIcV0H6Gl*(=>wt*FNcrm_ZOk_ogt;MUczuz9YgKDgM_e=BD^ z72r+4v?AMu>^>Lf4oqZ_n(=Ht|6Dt^`e1l4MJeM386Xi`y!TRpY~1djc@Hy^M>H{} z2;C0Lwq+joK~LyukmPf*YC-n%-==%2qTENRnu;y$-=tn<%AX(p(^AnK#ww$j0hSs) zVjO!~d3Y49%5QDzXkpse>r}|^RSzOD*9p@O(frL+y|ndby$lr-c!t71oA;yMo5;#C z&upsSteHP8Dimezm`O4T1Hhg8@g-7tF?tWibPo^FsUr{FcsGl<$eyV6^tf%WxG>yO z#uso=k|+aS;K}JFuC>3**iBN<@BTv~y-a{AE@b(4@45H>cV&ErG7*-1SS+E_K_(`i zY^it)TTBMY4HQqmJ9l$dbZ&G#h!-AH+TTqm6lxDSHqMHTaY<7+!!#9jA1#-$WjgoU zQZaY(0=j#B8)2w7tsZ>P?R8R)HhX*rJGYrFbp2H^g6%DB$v7;pdsPOb(j9o@XJm?VwjexAK`?q%H zTo`TEd6p-E@!PbcG@_`8<}d`2qo1XteyLEj0mYc*b`oHjbybEmCa@1U6 z)9rDWg*J86bdXqN)<}WtM!%_XF2)+_S1y(T)kCwFHM{F!RIN@Yy8uD4{KVjji@n50M(IN2YiwzHXq)sra(eAD^ zA%4(X3M=)EOqH~%hz->8>+03_Puj!dRy*behq_2m!^-+HQznytz^rF!Jn@@CqqmGo zuPXLm7p5QzAFZ-ZeSg{C>?BlNqknZHDk9SzG4`k(tVNMtF0>U5*4>??Jb{7}4u)&Qk9 zEmbG)aoy7=g3|TIdd`;Tt9{rgMQ1iPVk9^EHIhzr{gNWq7g0f!%nc2 z-rGdl?$N2GAWwXgdA8~^6#B+{(hF{ZpI&Tkn5Kwu^u5k$AB#BvR^6yHh;Bv|lBy4s8S;d3wD&pfZt|6AlXa)QEDRfs zon*5w+st|nax&Taq|5rRvbvZ0F9(P&Ul`duGAu}br&Qmle5Tnsfk`P4NrQ6BV|GcS zCJPMav;T3dEID4YMltg>YA2Wv$Dc&zq{U7{QJvSg#3NJNA{oY4rc$)BlUlz9ZJ)*+h>}St`;m z!A&Gsq6YJMSv=!Sh!PrQ*_DTfnRb+SC0gIB^ z0G8c^XG%M9SOhuS%zoUnInyXmNBio!t5mvR0sOehp2;a3rF0h<^h#J(XHIE&;4K|* zf(ir_2O@r+l_7E}I%&%XCW)@8@-x`$TuBUbAF<|*uDUL)`Q!n29zr0s)XJP9i4Wkj zEoJqpW%Iu19jO#GJD^rME-%ycxP46U8OO z;%@pI=IKaGROXr_D@lBb?*+#EBA@KTwWr{ToZ0~;s;xZRIZZ@&w^J>uZ!#Y`P%~`!a`V3!wwRNCZKNKE z-`9=5EIwNCk3eCAzvw~;W`FK|c0uhL{!!MTrVzKSO|-ksYSK5KQ>`=XUf+UnL#jIg$+DV6#`xj3>hy z>pXi`xjp^krUnCRTR#O2Z_?CF60_09Tu^uOF6=a=?#1p_D%#^UWtu#>syb?U$FHpm z=I2*f+0AerC;l%(T{b)eT#?=_rxgW6>;;rvOj9A;5+ssY5&B~8$+cFT&bv;pCTOYJ zMfuke`SZQ#$&G}jmq1a=YYd>8+L_gm#_| z=X%HBULW;j{xB|M*aOKGPLBS0G3KHJMAp&yq%r{>u|fK=m4XvY9-6P7Y3thEAu+Oh zO_~+eq}UVv=)!E2Jgbat7TBa!qs35R^K;-T_y*KvmxJHyN<7;Yi$9jJp_jV4$4{p6 zrB~XBbuNCQpTbx-P(G5PGdWk65>B2_tm(;@OPo3En2_@y55XV%@2nBY6bUY!EI4x@ z3K3SE`O3Xhx8ow+R3=>&#E0W~{A_Z`mt9ojGEcU$z$(+!g}N;)Lz?TL7+vT)e4_K9 zu#GK9JE520Y&GWV>19(l2uOAA=_$eo`BjpN>27#h+1xun=@WG0x;Ir~>~6U{k=@E0 zK_yuS-_C+NtAIn*1^|6o@o)#wA(euSDmSWqbMH$#M$!sJ{9LUGaeK!WoWL9a|> zF!MfSE{SbNBYX|-jG1i+G{NTy3m5CSTGz7vfdrp_1%57|-&v38 ziH}-#yjQr+w}$zF$gqoPB4&|XMEw)R(|j3^^Z90ib;+3V?b=5No!X(DO2yhyb{H$! zC$qVq#cVMHxPnYxm|o(yopXMV`$!$d6y1)v%iCitG5DaQ8+hN*?4>B&WvjSB4_$XQ zSU{#v!x|Y1sWqWy{{1W;a?evO%IPBd-lNS>Uy@RL7GY()CPql+38izdGtaa75z`dC zdJ%um=R`N9MkW^s{^{Y%Q@=Fnqowp8DVpc6#6UQ&`Qv}W*B4?5>;vesY}mF}bI3MZ z>CuOC>_)!+jgu^?{$nzY{E_!?1EHZzU+?)wD^71U!>zWaWO*7Goka2bLd)7OD!O%l@)CgLsQKAmbk455`mW6^la)>ozmj0O|<2g&fape(4I z6%8y9xgmSdz!*rYyQ!(yL`iqm>HEs^-3>_*L~e|8TzxB>_rD$}=Gr3+TBDtigftT` z6cI#skiROFc=nB>|7wQk8b>_xg9Ufz}=m5WL&?2cLL@ z!`aNj-tYIlO6QHu7k~IGG+D@@xC7WXCCIoxuZi0BB5@)s4jJ50oBoP1?jnfa#ivu^ zP=p=+J_NkTp`fV5GzA>oTOQ-MdvdJFznL>`i6I%%%k_28(Wn-c&3<8Pyt*!74Xvbe z@YK`w0Kof6XEzu|>fjqBe&je~s*|Bvp$7oO#|C*v<{mhvR0= zUkv811?zL3FD+)BUv5*M?%q|NnN|=FKIjnmQF()nY1UB_KI{LF6V^lM-(N0Y*!v>V z_I(fgpLkgsa@+#pN{oJcQEcycE=%*X`@@j2o^UB4e^KIZ*0Uk?+Ff2u{wDq(; z7JgJ}?{tW)bN)(i^narR-4Mv3NZ|pHsHRgK-Bv3U_s@YgDufgpvB@&u{@uU6P}uu7 z4ghd&fjzdP5V8G^7p~%y%!h$@1yR0Zig*RQTKhhcwYZ3;E_E(WIeSgx!rsrC;nK>Y zFm@7{C)^+F>=#`|vt5>IdR3eMnWiKu4U8yxZ%VNaHC*mW?7f?JlL#VgWw6P5dcHKt z25OMa$e1hTl^X)AMb0GnWv_|`-DI$y_BPoB89;ig8ZwH%*wbkDYz^buAkE+XbE8<- zjzd@)pbB&2!W9>a_Rspg>748fCxK;q^D)^5qEq=c#3J?fQlWjlH-E~HZyNeO%7Z$j z6X%0|S-){r_-_eOMgPw^W~u)xysknhT`mqM9uC9wseN&%J7N{62c4Y|^j8;g)9Dom zjO|H1jP!US*Y%7t9$8yV#{u_jij5^-F%+M>0>cq2BLOlBLY@a)p`(V|rq)HVuyRcA zPCh$wH8YEYKyPRUBov}o%K_^=>M46mljQ~RBpV85pxe1|qR}mD8hx1&{p~OiqPx%j zE=FYFOq{s6#UJ(D>+_m0ET)cl(nnkzv(v!Lx`JioEhLjBUsyaos3^&0*Z|CdB2dH5 zLSQpPGTh0|q}0G?|3(luzh?bP(OINlXQ7T8CSeWZV}X$>=v-({y-zX?`1BK)%mUAefkklY4PZ|qE%QM6I0IFwywW?B+U zP(XO2lK~iOuMsLBCv#J6GKo_Z${^fINuOj4;)WUv9ZB7eOBV4I{k0}r=~M0TisJrS zBgBuvGR>a22jhj#XJfI>*dRyKq4%hMpCgWjV`}a$)GRNG)b`1yQ(b1HOm9`Ov36uv zyHt1Ek6xew>@01E*Xw{Q(eqXs6BTwU*>Lfj>Q&u}3{jej3H4|sgXt7QunEuZm-wXe z6)Rob$Pd!r6?_5c!yMVfuQ{w968zg^cS)Iu0eQU%lwWA_=kxzN)jI!b!jY6U1W&dD z|AKf?;e5svo9yXBjmw#?OJkwuPn-Om1+$lnLEp#{a)bp=us(E@NS%K`H$3)F9FV2k zK~#HwQI(jm_TUkfL?np#h)ReSHs^S^ZAcyfE2h59th$@2Rmlt#;&efXE1$cC_-jb89;J)JU_jT#!W$uFztQNsl}vc@nD&hw;9OH~SMrIk zf3t_D@0CWSYR~(Mi?C9MUKD<$~J^yso0Bvi# zb#!Jl%fjFa7+vh)i}6q2rjEdaw?!7bwso^Ls1Fn^twYCN8A*A884pAp%po%2r|3799*WuzW_ zas9PZsgkFauO6B15AT@Zt#J4{PuS+p~b{~|d#WmS|@%}dI1mVnAoq9{nWbcD! zf((5u`EKM~pc$B7%zCCh-8@B(jizJX(ObTT3qk;HaZVFWc|Zqn zn{qMWdIFZ@N7mu=5@KLcVh}F0h)HgVBo(Gxr-XMM(e#}bA1wHan;0K76EWs9=B$=J zjP5?4u|8M-QF_DaifqNxZz*@o|GrVBF+-EE>rQ;T*tM>L`n zblGx+nGN0B`tpRNit4veMf#i5-uf@UV8W;AD=@Efe5Q|Q;i@~My1J+z6>Gt^57D`2 z1&GnnJcwz>|9uE$7?FZ2Q0Sf#APAc?Ka0`uwrn2X+D_~%y zLP(UKwTU&)7O%s*ZJnFWosU6GSMhO25V8e2Gg?c?tc_#1GJ_Q+;q1G9i6_-2tFlDT zgPJn)Uc9Z%ng=fwCMIU?#q={rr7BJL4qxh z3Lw&3YWlie8gYEC*Q{2S=XAZ^r|2%PShMY|xV@((p>^;WM z6ry~r$0DcKeww7zE<&l};-9#=fMLiVMq5-)E5sN4Mermm6tv1%y=C!gnG z=!1C!>I_s(qjWvY3Q$EF7J-n|YkK^8r_{E)J;XM<-pmSCzn2&dkSsMO#@_Jm`yYo-sF9W$Sh|z6T3jubb|py% z{av_dVe28&XYO^P%49(96s3i!6hv#e*`xY|;Up5SV3k05pK`C#c$IW*TE;1oLA7l* zy}?!yGr?Py`vAas`FCkO-Tn0unvcC|N|-Q8%J-b7VFQm0aMS(S`1VFm_l0A2#4dDS zX2oai&4(+>!Q{8H=^8viOXjHf9ww;le5>Qmqb%5k=6^m;mU+CT0=hXS!+g^|YM!I> zqXDdbkKC}4eaZq!Cap!C4bM}MDC7+9WggxBy1VIoYc_7C+R`-`l{Qzkhns>wVr?-r z@YK8-{_Xx^PvaZ1kUom%CsByB+(u z%O_q-L|GaOIx-g0O=x%~9WEVy&aFy{j2{U1C;D4{B4J(sIwbGXfOYk-bCU{+J zxK}vCLr*gbum8T8rH~>8_?)q{=q`r?ynpB8K4CIx4_#ija`Z=zz8;au72{X$In$5O01$^wPt>SU|(Y3LR z3-(vs{xHO-M2Iy&z;U#otZCC};%E~Q(8}JL62UVNt=D7htEktgE89BkNTpWYKF@pw zp^A{OU^nQ&a_H|!o3kJcHY2uE4nvl&*D1Mwb)?(*I^@)9pPFK)ei(o6t$!7*Mypha zbh^Hk;Q5_F&Eh>ICJ91C;JBD0*(;7L(%9yYmb8v>CPAn#@hB+XUEwKz*Rr)2081PQjXDHH%{m!fU` zK$%xDsz)sai>7GmM*Z8hNY?V{^4$vs85UD9H%?DQ(XbMrpApwf)UQ+la0(aMRVqbDya;Nm5LwPqL+lJinY zOzGtG#(_$)he)+TsZpVe;I1rXOa#Lx5Zx-d+;T(&?LBCjKrrT%WhW@HWo+!=t+**~ z>ugl6Y>b(#EEAGoFBl>1osx7tQlye?QYhr1S+;Sag3ieuPA+Sp z!B%ZD-~WnMOt%iboGD6%W0nytl2tGEg)PRR5f8A$C=+kJzouhn;G_Mb|9)YnKC>Y+ zm43lUC9x1I>^R}XgPq06O;+{L&+Ubv@_~3>ySkov}$R}wO`IvxRYrXi~511HQ!^`Q+GspNAXXyFu z4_@2-*a(23w?Cn&IrLf6}%VP(}^G_`u8d08$mXj53EE2f;o4(t;A_rW~ zo{Js@f_}=j2>P+jA(-~EcJ*~mfC^s1NVR-p+MD*0v*tNQ?TYOlughH_gqW0@Kfa** z+Q!!nl7^diN~Bky(!h;EwI zz`C?F6H(Kg$#6X7beBU|Q4QWO73D=5mulF>SuZWG>M>L*uimxyR~R>EU4s(DI~iGD z1*G#-p&kD=imsf&ga_JETo4$w>>F}aced0)T)^Z_ORg~6Vfx*1hlY`poGp0*yfAsh z?^B{sHSmKD(dTzve{SyP2|S`=ePx(6yhKU?FJj|O2m}LbY*kDFUKJHbGL>WeV*3&y zA=K>!Tz5QQM&u`z)(;}#bvGZo2>_DA38tRK5~Vth7?UG|<~?jyUy|%S6nq|grYcV^ zYBN%O#K2#2&?RcW9lb2!_U<+JYIq9c>=9`;8Ug%5W;GD{hK{3jTXRTwtG|sYy{W=H z2D_2dh?6lA)xHQ$f^Y`ee}`<0sC{LgQc^sD9m z!GK^-vp*8a1}ZOTs9TyGK#_h?Ez5=D?)I;$)x9A``Bc7WFw3*shXcdbNV~wrNzkrv zgWNLhHCRxUe@vrk?QM(N%3y`BHabyPS&F!)yE8POk2rremF^&{V>If}@RM)h8_k&| z*%J4;d|~(eo2C;}XD7mEg|pS}{Q_=>8N-p>87v4lWjJNn+mN>vWyi3w_0;3UL#e_r zWgS5qt|>j={{3K9&4zYCI?GDat$QHbu`ak#a{v9IdOx~+V(^w&+CrVl$I@Szdetd* zdJR>Jt#l~cAdAVP4SM#a~@HCR!$X8;aHQjWtZPomv? z#tg4O?e2*kZ9LXoSkKcOPeDql!f{w>YNMy5H}RP9;dn)zzJG*snAf^*a#figdPyDG zuOgOnoeuM7tTP~ZQRlOA)>sUTKCXrj7`OK|QJ)vDs_bvM;E`lXX~-0vd7PRiEdwYr z-2f=q)hyD$_r@ELzuTwi@P%8C_m!ST*xK^mM@P$l)ZrMm#|v>ZusdG!8^Z?B@=#`6 z1}TpnX}21KnLvIxnS1E+viF)nzTo*rde870eXx(HNuN z@x4B^*lbIBNrXHfpqW=xe9qYu~pe&2!hrza2UVm+PS z*KSqiGmlTio<7!~`FOowPcL_5re1%0aVVG(wtrP?v;4XN2PD(qTR4a77YeT32qKgm zZk6;M4J|-i)FM1n84c^i~ci3y8&rA6%jbC z%^=+9UeaCV0?nJKA(2}myii@JV9}EG+lLfeOBg4?mxTxKl`GxR)Q#;h5&q;E=<`pM zuJI4tHN#_Jay@^-xC{A+bNj&=6m=M+QKEf&@x8_3=A!4)-<6tAhYf%dC4nvxnIp1B zZg#q3HJ>*~rgCZWk)0(Q=eM)G(#_S)lB#^1=SmN~Wlao`0oE>|-skmjB?+7QpqI~T zLLfBOuP;}N<@1r6nf-CINImIBLCM^U*-N0HJ&JM)o2Bp5dLl?P@*P2Ryq6!1fr7p1 zW$}BB^s}|ngY%DKRLJJYOE+wrQ9#a$@8=H2>EVvC;Vi+;J2$l6@;HprWvP%2F(x9n z>^3<2*DFZhjz!uWS3Ay>C@~!%borpki7Knv!1{iam~WXVxKn9{bZppyKYn+vKVE>J zg=OKx1Nv}kvn^#>A76oX>jL49Z@lsHGc7@oO6hlT2)T6^DOVIcDpa#^+c3M%t!$Uu z_ULm2_d`gP$VdQ#iLkHaefVV7OaW{O3zWUg^@H$@E~234x9HJn{sf1abgO#Z*E;l0 z7Yvcw5rA4hnQQpBa!QsJQvyAo_$6-L1d!7}=_?qMz47R0yf$&2y3+PYjx$n8ev*Nm zv>J9VL&z>N+rU&2dqwsMu(DRD#+yo+SpTt&XL54TWrgNo-DA&sCC@ZN;zFklGJVce z+omA3a<1DG8%PXpy&flq9hj@z+2Db zEwDj_siP$4DF74YFBm_D_20cQ!IFlA$4Zkt5VZJKMEl`6jJJ6(<(MIJ#^=MKiQXJj zvdxD3`hzZkyee^gI+gTAxn~{o6Gj?NsEO+hUR^FzzS9yymCx zwG@Ki=+5weIYUoih4wjv8EM2$?J6t8%2VFjuiSaQH`RdX%QN4NHEm2R5mrc93Qf?k z?m|jmJTM(?|G>2mWk*+D@MH8ff?(G(R@3T7obJiCb=-f`<{LYa4)Dog>$z#Wem<7G z`ysGbuu62QwPSsE{^5P{yFlvd-eO2&5-olIN$mGz)a zI*N>m$jY92KNfqcv$n)p-}3X02htl65PS#Hdq6UtKzoB$t6E4W01KC+>VB9dr6Zl# zPo1q0I}RhS7R#yFgfTVvKMH3)wLPcCl6c=_B3YWp=f4;wOrzxjvC>hmWqq(wF$+`* zm9Ti(tvhBuvcpSnPH);F9DKFvJ5mZQ^e^}31h;6H(A5(ovGyu`HN|u&R%|&N74(yN zToG45HD`Q(KYnD!R5uPvL(TP1ep>0?sEyza3hEp2%4rJO+#5l;`lw$nc4Cs9Ga+u` zjZR@M2-U2+zA^Luf>zaaNZhA^=@7rEXa^a#&byx#^8uRP8RNdbEC?To*J5|+t>xPU zTgie?tedxrA3$Z|0# zIC_5&UWnF{8k@H{%`gmDUtyYa?S4UIbl-@TeNDhlT7Qb!At0_)UER~yiWF% zqDZCBYbFU4)Zb3$IP6$kr+N#^A)90ODoai)vwgr47tzk$IK!%&B{Vr%SJqc-iC$eW zN%WtIP(rJ8;^oauLrdlr&ylAm0EBYLrZAM(n!$W5igi|XtE2{rxDy@JF3joY~f4-?H_HZ#J zcKMs&$j3aYKy2Fk7|s($QVGagBQFOonh_A!oaG^1X`=KQl&V|Xx>Hs|G!@}n2*uhX z9vbgZ^|L`DOg%>m>edzKj_S+?klXTFLz5IJmt{0|Iz>2_c#>@)*3dn8%k^x$;ZCSP zUvu(rP#g|Ya{hnmFEh{)RN)@Y(UdEq5K6}M(dDlchJG9;J-v{&EQzL~V; zrZ+n$eZOtk&1}%dPvFNPAG(~a4|bLck(9FP*U&!a`HXgGdDouuvF&+N%drHo!%8Cz zO|kZxCP@=WUS6D+PS$-e+Iv&V3VH}wN(MX!ubTfKxko@Sr2XpEG_FS z(Rlpo{k=KB85`IU&klR0GbzRq%D3p|nb$l+uhkdkf!`bT%jQ_Kq3dH`tEP}sn+A%a z7++k=athD!xLy2|?Oy+5^@bm?Vl2<5IB3wzUSw!@y1nSiQj{o5>21KG{+Fe&A!uW9 z>n65#kiye#ysKy|9k0m5*#k~dD@~*xa-E2Zce}>smzREIOtEGSRn0UxJnCS}b58Vh z&F6EsY>0)w$So=j!1%&ni)N%vGFWsrO2|xS%y0c#@b9*s@xO(|%#9q?LE;+)t|Z+3-9Gj#h3o-{DIwOnbH7W4|8`836|;0NT;bp15RL>1#uQ zy8D3m-aYl^(|`J+iSCH|NvaMA3v+#%oE^ke`Bo?0Vf+YNzs@AMgQ*PBlwtI;h(|;# zVi4}fJU}}lkctr@GWCaH-t6in7LgJB!zLEUmgFbmCF?|vw~@RGxjbS9i}`XLaX~cc zqd5?LTq4Ey`+neuIL-BIAR})g^V7?9vhG};J;4S&tPX+pCjE=7Ar4G=?OJ^A)q>+^nL z@RK?-Bz??KUBWKFbptU>b>4&HmuG5vIKe0T!(YB2Y&uwGpnZp^yrAD)Au&{Ae_SP& zz{)g(_Wb*yiFuy}v0e6fg5v0UL^QXnZb|}V6$l#zu}sbLkCEL`s}=-lAIUKdCgd8! z3@LY;@5l<~x0%@45KzHz!MDfN0=16BF|-$5j54($Hr^&@w#(EUOz`h==~O!Vm{aN| zvULk4c{eY{mU*LWA6o7nb@v>Dq{=50bbQ~TPl~lKGp0r4l~a<=H;8e%3Vrw?hh3g> zZn3_%BkjRoq1^mZx=odPY2`p}wQrhPvpS{K4~Jm&rL#cBAC<(Srx08Y_ELpAk@{l& zcAQ-Kuq_$1TH{#@4yG{jz&ROPpk``K@1917ls`a^S|a_KvYG?m!E2Lk3$^p%#JgtJ zas?HWgYgQ?<1bK+d`oUuP25xI9L@D;-uCgk-yB9sS$$>3LlXY@nipTDjqH&XXXn2f zeBmg!aNKT!vWpU>%jcZu3;UI43pSPNZ^xW{&NQjL4x<^S@kgqEZ2?boK!zU2qAT~n zw+8#aE%t^e4s6_Zd(-^IzKwIeWL9&F;AA0 zaG_C~%J|Ypih?X*<+3pzRKFP{f!*F&XST1}9mN<3S{X=dFJE>3zA{zpH=3hJ3y@N5JBV94 zSWb;!*Ef7)ak;0=8DDB@1XWuM@mqZx&JP)UK_jQM`*onXA18)Sw0Wchy?e(fM-;=p z5WiS3;y3|QgRa6sL2<2-UxC|Y!%o9us4L^f<>8c9!k0zzBxtQtCPricRkBNxeL(^3(N9{c-8J!PRs=wO_4k%W?PkNp= zFBX@1b7~!ZXnu4S;`zZQ)1$hUed3Z%G}a6~Jko3T`1Jb!fud&YekJ?5I z{wu^qBIe>Y_88iYJ8yv)3FJv@t;81phpV%WYHN$S{cTGNE$$A*9f~`&6xRa9-2%bg zr7iAGaEh1WEM#=l=ps>5RO!;SNy#@VC{VsZR@`m z@NE#~$Uek8#{vB&`6GV2jp6 z&#=`>>MVqw`+o3nHDh*|N|9C*uUpGEX3E6>+p zLD~qfDDr8F#liEGBZE>{YaT_!wdLY(KwdR>xxFjouxxUE(R*XeM-{;dI$fQeX$07l zKI#cWWk_4@X_=A^(>-#x5zTf!nC^8LTY*bfmj^sZ@B6i20a6h|60liIciGI9rz(XFDHNL9y8s;_kD!qYX= zVH`W$6|Vb+h1MBH$7*pS*%n#ZBr3XFpF07QPMTB@9@0Fc!(Q=5uNiAVxe%%kMQzTV z;S%@A_H)uZ@qrWi=0>Cg;@qrMyp}mc9z6gT z$qV1+mB?FWYWT&}!y%Pky&vlVc-EllS#_evJpp_Ie2!;Z-E>P~^iv5rq zUs2taweof&c{Tb>_!+_v!FP`6w{IM5%6u?l8#!J%K`$4bvENHOU0t1_EW-a)xk&}2 zYPcoau_{HX*;gBL!mw$ZvB%ES6s@bBziOxx((n<)FH4gnQs6{wjR>j206yS1ii}!Z z^qXGr@>`G_abe7EGQLEZap7;fR z_&d(i6`lltvQ?flWI@R>9!(i`Ivvl_+HKz@AcmUa_uPZU`~U6JyhLh-ABc5$3QXMq zhwYKoW06O>JH-Erp?=7TxBue8kw=_w$ai}d!{en37X)m7`ALNwj5sxgAcF7oUW`yn zc6~>FV$>?qf$h@$_Q`#}XRpozd{+ar2>I|hx8OXuo>E^GaK*N4)@|E{7`l5xE68o7 z{_QFyJ5w8UK0HcqG*#?=8l)OdI3lT+c5Jr`S+6tm+-cCSDYm{B(5{V}{7I$JPF=_! z%cny|3Yc&DzIlcS7@Z!20{X| zU6Vp<(i?Ug^RFpIN5_}JbB%UPqFzUMhwJw_Bn9rCh?H*ZmB*70abLcx#nCN!5r-p= zOz+~B4_E3z0jP+2FPNj}(Oh@uM^s^-A6VMCMHmfv*cDYWBj8z%ZWsX>1VVN!IcvLq4{Bn9#&T)fkg$NW4I4 z#tscdZwSDUuGt77D@<4s@Co4;CV_Jkp6wIZGFy{@7gQu`g*&Acwk zKL21S=@(&FZ>RaEe&+LGV=|l25(`<^!{qI1@Ms^OO>zYK#rn?^tE!cSzL}RDWyLp{ zO`1)$@IwzrOK;!tr3nR7L?gQI?(POzphk5?^UOs)#G74gA2;!gNIfoy zh`DapcDlZiR)*eh-+fh+rQ88X^JECXOo$$H(zzFtW%MYmRTF1@b~31MT6*CW6ZYMi zY4VB_oQ(e06gS2d(zPG%{Jk$VXhC1fxIY|fRf}4vw@A3cxgqq zmIOEFhITaWi4y5>z>o5eJTh#O#G|Q|6uyZR($i^MdYiPC%!|Yq4-Mwf7=pmV1UqY^W3-+d z35%o-8(olEX-YSdiDS4W*sWH^s6ogrMIkKWz_GJ-bdpHJI+-E)VfgLGxIVvTdwL{x z0;JFf9xok}ifbwMLB>J-biemuJ-FELc70BE0innpgy?S%o_C`NEJwW6g8)F=Z$}JE zD3|I_o~$rPDoN9mz9|U(PLfdhc{)yfR5rnhjJQe3#~gJ5y#l~#p*N1DfhVC}K}+pm!Ofm%p_+UzXw&LVa0R zzW0#@q!uy-2qTH{m3%uAx^PbMI-K_U&2LL% zHn(;L;TdO|W2`vmxV5=wYjgM-z0>ie?nNjvuS+dmvV6Ec78$C{nr-nt!tjIC&Qvb` zIyHDLEj@s<2~Ng5m~9>LxO1WQr-PjKamUCCe>4z#olh*>;>bZhQw7-m`QlLWSgit@ z{c!;afk4+TSyr>qBg#463l)4L?76ZrR&{!RZ}_qudkL45@X(&n@bGYk9g# z6AU=q@a?;$w3NxyA2sF=3v(#_UDU^VAHsJqO5{S9F0~s9W#4RE~ha4g9(fMcVSR&^@kB<(o|N}m;AW6BTOH3VnD+hTd5v2@ak|T?QZN}${pnZEQ&wInAM{iL?>$NWl7vtO zAhQ~%w}ZO!@SW8pEn`dq9BNswfM%J-7hd`O4n1^_$A*%e&Y?(pNfum*-*}I!X&EV_o9uQ=F*7ftc)UNOpAiopNR;kK zu&IS+JW4a}ov1F_rI@GmRa-G4N8&z)u|;jQOuGj?%86X*!c>v6_Md-obOCK%rRQJZ z{%moVDc=Ww<&3V@h{JqcdM1jsudaF zparNgnp(GX(KK@zINK?nXLtN!zb7Ka$!_M#jR_5G?T-vbqDz}zXZC2$;o<~yLif|I z{9uS6oO(*@i)Ukw)Jp4EerO_sS*;)CG|J25GA{*C_tp*OS^;7gP86-9=HIjNh6%Ql5D(Lhh3jj}MaY z@Oy?jTTjVaBY>T!ke5|}KZ}GULIFqvUkv@t9ZqB23n<|A*Guq+ITt7WH{9%Vz7m=U zl!#48GIJ4xHzqp;&b-kJn%GGNd7GRQsEI#``K;WA+*5*T_oe^wt$ba`f#mICwTIp} z-TC0LA;$s~w3~pc=LjU%8rk28nY6dj%BIe{{o-#V;5>@JVnOX7o&3QFYd?U7rAwPn zW(yr6p_{xzIF?Can)2;8jz)KMKx3t9|GwP`KRU3AZxS8RB-5(fR#4e1!my)XJ7Wyb zi3Rhw1gn$5^7#6kEs)Es=E%jF9M5e#&9wm_MFKXqYlhJSc%tJwF+QwsjW{)CeU7~e zO0EiJ=ni4nbkUYA)87h8?#sXT zMgjH?e4ZF7Iao6PqD-^&73O~G+6!pu)KPs#N2F9km0JGAU2sNSkIs*X(4sl~m`dH~ z`GYanNdg7PIL+tj_Q4&K)O`0|ZN9r!*4QY*_nLMBbaB~?`%}{Tb`m&v0bdIvNfR1an8WnesE45>1GmMgJFRhLm;*$`=}o zwoxn7Js0VVZV2o$wMyZO{J=W8F#7U2UH_&aL*giLt#Abpe#De9{C*f$%A8H3UY372 zbq^Nd!_=}~2S%`H%2F{yrH+#~XU0W?UbkH>(--NR$zgdsqsLQ zo8>U(&p&v3xk@*kBi)E*O@PP@2 zq2){FM|GB#!!w%BuDQwVe7da-k&@K=FA@h;E)$X|XsaLD=R7lhg%Duy!0sLApRj2U z>eUSgMtIXDfy|WsRE&o3LUKV~yFno`?<0D}sm#x-r^;tk3McbBks#pC5F5z^Q0(aT znC=6+V1_hlwCC9`i+`)+Q^9|?DI6eCk`>`j zCZ(l_oV+hFuzoEpU^HmW(%yXSGQM^uR^uhupN;)It!Onx)6iMCW?5HdRqf}b!?@Yi z?!-`o64IECuuer{j?A~)%;qhgj*TU+?763(f$Yp`Z?*l$i9 z;r93ee7uw142B1w#t$^BkfKN38uABgigo>4lT@U&V?7f56cRuo@NF_FhJO=hGU{F$ zWLv058qVxQM|xdT86>yRX&nDrM?(S2pf?+?b$vaAV4)wb_^hW6C^%FSI8^NQA&!Wc z-KZJnOX@eH~LYp~SKG?(pqn!IBZ2 zjs2&7ZoUPmmiyW00!jf$r`vAIUmyD+baSPTMI0I)@Ypk0fjmU>XHR4TV&+|f|M6Mp z;ekA%XLFwR=h-0!ODVMItYd_!QP^d%kvP@y=w(J3oZ1Fj%v+e*T8Rw>P@e`0COuct zTbRxJb!M~F@ihZE00Ezlk)>`LOM)j?*es=MBa=7*-*db>8v5BN@&psoT3LDar7;9A zfh`nR*?XLZoFE((RIDuKa%ylw%mm6ZTdaLwb9MQYn2Zu}lHmG!uq)6eAWqeYcDi z0_thV^gW(Nav9@8=r<*rkk%LyJoDGliu5vE3ljlA;U@##cX~z&G>i{llLxyekvQ==<}2vOg3k^3M9(w+xqADyF3}{j$X* zudu3QlR=XCLub;CjFADaDlKNGINLQWB<_MYe+yIb#a=w&o!!x9g#3`F?ekK!u}QxJ zGpr9Qhk5R+Oy8ah5#p=pN~0v^=ZA#J;E)}v9ri`K+uuLUiK72uu6i&lJwE0nVEy#H z!N$c45%S*I>%TwjV>~pR4Nh>DhtgT#&L|^}&BDaWisVJ0b>2<@a&|H95pX_snBms; z34Eh5M!zeM0~9C0M=lLy>kNTRqL`~i#&EQTs!Ika8CMHlH+*7=B4X>WetD)|+w0wb zh)FB#OeoH}gD-WD+4cE{^69J26oQRu`(IMpGOvLGq|PKC=Y)S^O$S2zK$xX#)Y%a$ z_Pw@(2?PO|yvYX|rvrIIkK0@+%*H9^eNktcJE`nlt}%;uvY%!TP(`>p25afPh$bkM zKmRt&^a)Ul&b8xLZ#IxNX)6%stsz_KV>|nZ5H}Qr;5IIR#-;-7eCAvH!hZeF;M!%%4yS>mDyZYWSrJ9`hgnOB`o=eV^^)I4L|C91BY)m$8%n+B zvL{a}TavO_HiO7~P~`!OiSn0m-^V8RS;-uG&dl87d{-w0O>-~;)0`@;_3{hL9rXG^4$`T(2dwY48vPhHaNgWi` zESj5W*BE8tw_#$&PNx~Wn)5_mM4TU?VMZhZPQ*;Khr8?>KX=bC(k?5$>0FsrfN@Ws zhJwEU*s;b396`(3PWy3wHA0isUh>exjA%x6CD~dN8Qa)glrmBpIvOdvLKK`7kUG_ zmUpEu9uA00r9GTjz4C@2odJ4{2WXEjSfh;i0Kuh9%}gqlz_)jEU_?MtPLRu6r?Y*q@VSg%wOL=N62y3MtU~sMp3fntUleg zN9A1#9brC?H@tqMR&p(=-od0g!wyx4#@!gJxD{YBxtf);Poz|`oC$b}zi*(3Vao3y zUPnk0K~M?<2WqWznWS~BuS<7A>ylLeXk7=auI$MM5U)S-NP>E6Nf(#$&pl|&N_J7f z9!rsN;w{;f3n&5qd{?uPcAD+;cf*XN6vw%^1zt64vdKeIFUQ&(i}UZH?37&~B}Y2h z5j{_g167?$H7h@zBFkF9MGlfUh9$j9Z_za8yevK#dC6-d<}GU7v-x|(j9G8yCWsK` z{w;3zg}q^2rpqLj9~=$T#W{E+JKi5gZ;uPs<+0KAp@O3`E1tY0%&)~pN|CuWR`sf7Gd zohEh0*l_Px-e8${r{~h5*#KN>Xt1KJ>C);cYINzi`aDlw)^da$C-}de*!!LTrz`u2!T?o!^9tQl zm{-;pyy90Z}wN;HdTO2XdgN%Ky1^R)uYu71RD0PzEbL8s1wNKaHPbD972w#ypj7H zK192NmfL+nwY)dpLB0(3DAX+FRMu|<;g3g1-Vep|VJ-&6Ua;&?0398MtGgsnq*bv& zUyQvHjW&sEJQnphndaXCvDq?fM5J0hT(QYz+2OyAP-sKE)1TO|c>oOv4=m{Xa8;vq z>o)Q$wDs4%)XYd)d0dvh^V*w>>_+#h+iarDE*R6;uT$1MolPL7aTN=EH;dr3TK`>( zvE&+FBP8yaWpB~C{Fbx8(Z%;jUto0ZTTsL6VEzQn5uI9>V=PsO?(d;|1zDPoCKB^r z)mp1LF;A+lUP`6swO$YNeC||Wwbkt=<1x+L#O9brG$~GM%iiBF55Yt-5eY6M)R4^X zLs}VX>7{vwi-Y-K&K%K+{9avIWwAkiB_3G>C8zyDZ`vMe3#&Q(JSn7@BRYfW>S+37 z_6TjRh}Z7>r^skM&%T&mz__LO`O9zr{!smqJ|#~cZIq?qU6amrKQ1og>uYq0heKY8 zz@g~FV*LqQtLN$)@on4|wc$^0(w&Tyw?)p+)r{%?sM4!T**@v(Rb*Ds_i+_2pG!_m zIbpF`^!0tI0NK0{+?f+>#cynX^BeJgiw?O~y%bEEmRcj9&1X$i4clMQ>{~DY`g0;l zC+B+?gq%C_zg~${}(04Nln5O_ zb#4&l?21&0cQZ(}etz1)r|y6CMnQGHcM5O&M^+&N{z*#&F|jL=4-LpS>pQyUpR3!r zCJQW=Intr!O$*@Kr8p&k!a7Jpu|zkCO#vAc@-uMi^fvLB+|hYoaHQY5pLs(@ZenQK zeorIKtMfYBOENGIVR9Fl7mWo_m*(-ss%=rX_Ln&B^=+NQl+&H~qodA+t3(|*Hjo#{ zX}-rG0o9B#0Xv$_7Qfr@*eH1a#xu?5?~310Kn`(PFd1!7ERtTj`P>g2*2;NCsQCzAd+cfBh`6&k}-^Gg!xZt@5lDHaDI$# zkGxNrw4vef&PnB~Leg}Ve)@HM(K&jFjG?c>RJd`-{ri;l)c@2ZY_wDU(Y3C`0{A^LUO#kBr)t0L~1rw8{4m~Uf5@V4&I7A?`0qN0}} zbD49Pb3yq5@+jEC1wHWd=-Fv}evz{;_qfkX+I*Oqpn7BU2SvXA&?K2~EDm5}C%MAj zk-+B4Kfoubs!1^vX}0uQtv}N@y_kb43GRD&`jF2*d0c`-xF%%U_7Sv&Zzg9ZY)-3U zn7GB6s(*CoQ~bMi-Lw5Y9JF#l>CUx^tWw7-l+#$*jc*B+Z6`yPgu(R!5cvl6!A!c4 z8aFo5sdIaKX z?i13T@SY^|I$NKmLobfwQFul$b;q4?+8^Za-@T(sr4J|L*q}_(~iL`Q^xZC zJ$eGzIj{wm!VEDNb_da_wNIbLY6V&=uJV?FR3jUMpDULb3qMBq;ye@W-#`R%wmIQm zw!0;=`Dy>QyQQg;Wiqe1pEhHS8l7mb^0Uhf{2Uv}q&nWAO}cPN+Iw%Hnhoe^ImDe{ z-#T|$1v2{b*Mq0&7n!v7>bcV7v&4ioUFPiP*oRtVP&iIUHjrIWj&uqeCVi(K^Q4hr zxny^{mpKwJ1#m6-Jp0B|*STHPza=9%vJg6yM*^zxnuBX!DrpEhS+rFOLz*bT!kz7s zIlfr=XWu)P2!p0nI4NK6%+};P1q42@GD*Vka}Q4liw!GXMk5KHgW95j3`&|09nY_0 zj@25MB$IYLxH>tEbM_0p>U?cfScylVJ13nGP+rhjxJq;VooxFj1N7Sne8cP=mDH2K ztpn`3bLcGf*^!QuX2XN_j0t!+BZm(7bh_xjc1c^^^+@DIe4c-OjStzUQxFq~1|qpn z=R2#XoAIrKkJ@_sm%785(l8h-7nS7c8y|J#dX+>%VRW0u=AGB|=^cgt&0cs4kUM*i zSc98{E@DA6S3Pz(8FB73lzJfN+OCD0hifnojQ&7epMJ#^C|6AFs`*3l#o4`BHh(_1 zw1^DpV-jChO(|K+rew5BXa_RAN@T!`-CQeg-}~WR6o*&A_>ky6;#T9-#xe=+$noc< z1=pfV*o?m{ z6*gJidPA*LuLVi!%TP9i&;UTEJz$uBNlr2h1V}CY-vSc3FBkbRX(~Pq#v2=Zzs^m1 zA|h9Y#Wug4&R>SQzmC*hs^E^5u!CG55cQ}y3Q5LR*88d3^bpdj`01%jQVVxGeA#2PNuB3UZp|Q)Mv-Ye@)NHCew^B?eHgQ;Yx7sL7ST2{|JVqW54cUZvcrPkX;Lo z0^Gh5`*RU7ac@o0Sn?s<1UPP8u`%gdyQpz1bCn znI$K%8JeUyAE1NQ)_d!1&3~hlq?c*1@$kW@-%yb;jo04hAo_$jmNZ~mUTPmVjn5ky z*TNkwh9SMW(x0*cJI@yqlq~z5K_fTWKq{s|Et9F@I)g=7n}3(Ce=qER$7OzH#qc-U z;nWFf#I<0u@b1UzCtz0T?V%)TLZn|8uEd#B^Ox!&9F_=<*tdB(JTWJ;2-ew7A98DZ#1W$T=PE6!cTBD=VPtn#Fo5H7&BameALhtBY;0RUC0`UEHfF&bv z1|29cVBRGf?f9}2PFG#(vmLB)-P2<=KD*`!LfkST2S%D-h{e0=Wgv1N_ZQwo-zhjLvAYgGkblz!z4_uybM6ak z(cv)aD?G2^o1G~V{v2l}$&Z82<_IAb>z>Nl_#=& zL2GPoHs^;h_YCh8x+`X>M|GfpdEH<*K7K??VBD`4y?Z(c;-{RtZ`_aUj9)^}G7Jm5KS z(l{I=%!cxNjVSN+YjNS&8Dq&ww{?aw*_^GV!{e=hpS*5JUkM4hfZZG4(}Bm&UBr7L z=Ij=LW8YM{t>(t0hO)?hi#gTj5)_d7=u}T`mE9h9f76^B~`%MPNJ{#O%mTtc^?%aLgrOk@{efNI%Ul>iV6&X`9oM8jYT)9bj#WaP@`U2l`32 z@rlwfB$Q_{X&@REV}xCUl{h&L`;?;6f6SW11ccJt0XyyFUrx%5IZ{d2_Vi`=c+&OS zH5WLHrAcLS(6^4&*D27oY47zv=jaUO%d&4d6hsr2$jCG%+^zq^M;x(r92umViAh8b zh)!@j?XYr-j2=rNsbaTRDyz@0%nCG%gER9n3*NL5yGx3fFK3*!iA zCiQmyMg&ALVI$9dId>BkD#AK}IOlZlojlFN=VKE)7B$Mw109(%6viv9%wu1rjLoFV z^yC*mt^{Sc6dzeA-jH3xPex%MqWL=#t`Qtni3$sLTf@d>7W zbM^~>YN<-H$+@%NqvS>2{d|5zDBR{vjD>0#ran1h4TnN0iA)%}8iqnLfn#5QqsO1Z ztLrhXsHq=4yo_G zcJimV_#_q8D`HVX-lm1;Ov93}S)4+^gSu&a@3&^Rx-DZ63A=;j2!bFihzN zOSPCo8p{|q2&>aF&J_@G^freT^~dtYPyRo&2)k*U#JQ+o;-c$o3;Dm zG$t^L_A*B$*Ny0+S)kVXlS3esJ0{YgIx<=lOom;Jyx&i>e@~*w0@PJ1vsZJRJVt6^ ztgcK>$zSrv*muoH>5^OvgIS)>KBA&8WwX}}O;K*INeT*(eAk$Pv^o$nnIOnVH&gUA zubsW~~|Qq>gqkTy(SjGSo%L`|5SRpN;<0Lst+HAIr$f7&j;V@WO*%?{GI6@09wC zFf@=wnX@a^P#(`}mQ+}{Q%r*2^(-*2P#Uu5oOMY*+|~!dOEz6QHm63y*+1lL3n~aW zSZr`nYY3@*+~;bSv5!fZPiL;Jj-z*De$B0si9U{um=&<3f#zPNS=1KuaUn~2$&@0! z>HN`7D_RlOD9eLDqFch^E2f*h7MM(gvCVy>9{b)bPW5yAIou*DlzTtRG&qrWR~`+N z$evc#J`Cpq)IWJ0J?q_nz#zdfk-FDRK|i-PlhoG0a?Z^~oQKRmpn=R~qu7&m?=Eni zOO-d;cQAM59lK7N7!y1y?*LKfNC9uTwISiVlj+`cO%3JQMv?^7KI1L7v~pVscCc20Bjg!!XzT<8dDJ_Wt(vZ+O~&JZGw*m$1xyf>jxnu%epz4gl; zH2SP|)~)@fpS+!B>u%2<6X}3%V5H9Fh89%G3Uf|jP8~z_#xKi$18^5BXjfuRNw}2FESK;7-=6tz zswD1=z}B@|#2bkyX@vtxkMdw2&yg&9a=Dp_!zIXfr>yb(eTpk3V3VVzWfkm3R^kiG z$VGov`!%weeHUx}*vd?c2bC%?at4Y-`%ZVWo#-}|&GSAoA|q7XVziC|ew@29gc-@h ztNtoieU?NHIXJ_`E`2Q5CA;BH2HblkIV8cDrQ3`HAdkZN9pm;(_(A*GzLMCvDwRZ; zP|{^{2m$#~k!$!bd^#Ze?U_pTj?YzWv-jq-j`w+G^U!jDs6lWwPD>#%|91T|SjXtO z`Q1Tv``{vVpzLFJ_&oV{rfE(Kt+dIQ#ckNJiwX-gWek4-{pq4}^p->p~7Fj(SzL_=i>c?~2{HL5L#;PZs zJBEt?TjC@!uN4fFW~jNPE&$bUmI^MF{W3>>5rDmOwby%?(HyF2CPG6+WRGmV4N*NuM<;)HCL6dq*1{%s{yG;6QbEU< zG6I>!sOx!2JCS;b1W#ap3>9?FWi!3w4mr_S7=e9eJ=?&dJlo`F?z{vU8WnZU z%1V4?PfF}tmtDntoV_yCk4x8ZJ#%K*lDfUK;rvFyQz*E#?t}zYJDdJfoE!1w8=;!W z#?1ll50J^Z+Cmw2sOkDGz9C_0bRR9X=_pB4(cjV|2wgEVj{rlP0$A3fNjVp@cf_(d z%^sp9;h(}NK^&BTIpiwy-m7F9v8B}RrWe|-S6f`Prs`&p({&QCTsvI0tF0d*a9*GAg4pqLny za$a!(>TCXA!Q*KKvDC8t^+Vqs1S75l^e790c)O$risvRu2}dKGP!YNFqxX2+^rb<( zk?#ZFJx-X=zS>?I;mI4_ZkV%T;q5veX#QXv(UwCiiK^`rQvr&AhQrWs*AV-OiB13Z z9>o7Yc>=j4kq>xeXFu=zf6<12U%1Bqf5N|lkk)dhS9G#BUnZPz@~m5*x>93&$*41@ zH)vuIi<^06NUGH)byMja;GXGxl&ny@`EL978K2)-z!yo|yeC|qg}Zf9?PDj{lJ?nC z*KGLS;&J1A?+G=ncxRy3ofFRX2=jsXG3euE+1~@h2~rh}><;MzAQh(%O){@Mvk0U2 zsvA#|W3!?C`d{B}||zxeFy z9479Rufh*|V-VO^`8G_2*^#|*TB@Q<61RW+~BOum3^}%%bMO>`Z?xd z->&$>f_U~^;kHJJl+#g zSTG{tr9Fmh*6=>U^5hAHg-n*5bHZ6T^ez39Rw77>ES&T7pJ+0jeBXL*_f;|^kue|a zq@g;>nFNDbs6Ul_{>htOJd5{w5`75w?A|mp{#$$25BwzG%u8`pp3V`&CfNlA9!p0x z79QE9TCkq@4^b7iE3;FmCGCY2C^#pqX2NwhFy2#4?yt6T}9*zN0c z0+!u9M0=~NMuEEEEronPBWI?@A)`y2RVuuTP|a^q^SMy%cdq5(+2V^LbQD>}ubNX@ zi;lnGoxkF6=|~pMdB~+yb}4t}1WeI37htAtEjiM-$$-L?RcBg92P=)@xX~5ojFBcG z+G+<=snEF5WtZ4!5xJ5;J`1l^nzcVX{o1=d1)DS|yP<|pA0){ufC=6i5tISU#y|e? zIfv8EVqgAPug~7prr9+#e+s!#cI-^qBvQYcVx!1hijI4ErYZDbm=>Tv0VaOHCUqH< zAar@^nl44&lhdwvWQbr~Xbj;qIrziZd$jsqrO$3c!>;S@>#y#=?QN_}{9VbtxB7-uY> zRB9|Ws`6^|*m(@2Onw^F@y9oxBH(_rwYVARb_2+{qBbL%$Yw@y5G@R1k?Ejb-(3FCFQ>xXC(1Xx!6RUw&FjwMbon?~G(xNMV}uo%sz>Uu4(oU1XW6}cu9j*8 z*$VbT6D%_29ctU}d$}M1_*^EHqvlUSZu0?D7hc9NtS%_0#JG|;0vVBL*pTl~`5nsQ z?H3@o$Q>?p7_)VJTFdw6HW!OGu3mD8SFV-GsazhxQ>uMg7&ja5zUmyTDWX$yglz$_ z#h`WWRW6w+Q~bKnSf*P_#IH098L&p1tfo)?MU%#N90D5%n9xBH8!c#KxSl>x>8#X^ zw=GaRnB`EOKVx9|Z1(n}fC(Hh^`xKoe?xRc_eMlSn|OIlWc0O3p~IFAdpKx0eF?1m z-iTmTb|oG>heY(mLD5de(E>~cqSK6<6}3?fk zYUwgi*LSJtG>lGD8hvYm0(wMkL>mK|u<=NZqR)-g;FMh66kxXu#StCYWM?7GdxjH% zsKY{>-2i7V(dnAf_<1}Bjk^a^10m@HZ_)c zHQUQpA#r#;#K@$3v~mcN9$)iQ%Sk^#Fa)YSUn-}oTm4MMtZzb!8V34jZQW#4y z`$IY^BGDXA)ezz;(rFmM`LVfH3EPnd?aceet&Kp7gNq{|{bO-HUJ z%3rt@vls$F`;b&;)?}d=LvN)fH+*ppKccX*IS=HQMFXadm@PIU(Q`gFRs<7lBVLl& z>T-JF7Xb|-5l;rA8O5zk^-`MLgQsPlNIo7^JU{6&;fQfT4PO)HC;UpUX{UoPD7pH& ztL5#GjgxRu59`40%3^M3{95ybe~gtx?4O$wmSo3;2JoUlIiSuGj`cc*(+tdhl#TNi(E}X$Al%H3}$nr5Xt$MrMn`k1 z#+%#tNg7wTe>wMk@d|epAS|Zff3kNmBz25kTXYjV(f%Ws-3y&@wGQ9mU8Hx7g_@Y$ z@2kN3TSMMgoTocKnIpH?#r}0~LjH~-x|w8d=fJhK2I>}4R*<=`Buh(K@o!=+gDMie z-J)#%{Ns2`s#ZX|(C9dt!_Gdxvt*=Bl-44k`3RdOF#kI)@ivqgd*rf20HY*N*f zr%NsnS1;H*5&tVHYTu4Qa;MG_KZdMNwmm>|ywJ}rW6q}9az6ua7$p6lDDwiw!yGl^ zot5OjRuszRo+!B?uoWj-E2(ps;tH>bE#`13RNSKy-pKL1#zh)6zoRS@VU?&aRyFw4 zCnW&XUy(~wXF>0Y@{-QOPlg_~1Ujo0iMu?SUG$2?^g`N&B06e=88BTxF(bVEALp3} zs%I0&ABo)KI+WQA;;&=^GTQx+_O0QMD_osL&h=k0M2mWh1d~{&+@Ge#F)A1GtiBFG zz+AOn_bB~Zz<~wA7cAO*UGnGXZ)R*&5R}{yMiOUTL)xcz?$6wIKM7HHS>9#Cx_-W| zRdf@w=Sx__c_@fAg5vZ^CIUKe*pn07{KO(@7D+O9==3p6Mi$NmU#|+J;BgSu-EUDQ z8O{vwecs7?o6P6s6nY}pNa}Tkg&z=9WHoz?@uzvci9|Yx!aSETFaA`uzJ)}w@em+W z&AR2cj%v$=z8U8kILrVSCpN6ADAG#~pn)O>PbTlCjw6^PY1@R zW~6c_I^JYqEi!E{eb-b-;w_;cG35wIWs`~|?ke>z{oww`P65m_&tlX@(wY@#I{1aN zpkr}Or|};xbbr`LF}!|XgTR#la0rFkJ3g_cM$MK=HKy?)$`q4-3bPmjX*IoadY&$L z7-w0PkF8fW!PL>}1(V)w)g8(OdyF7B2B4@J+at@p#G+Ky{paUA&tT$rEWhxHbMrAW zif%dz+{wj2r*=B;4o9d-eA!dbhj`MZB0D=XOIr7N+-Ai9$`taGv#d4~{)^8~LCy7U zikc#kVr`z4vbA^~%*Fw%kBMhA+;q4*X?5nvCZE=iuz2QpuU=nwDzQ{TkPK$dUAj># zJ)z{F+B|3Q?(XcjE2}PAwazpDNlQ`U%U3j#$UgjHx;~e-c{=l_81JqUAFE;S0L8?s z0Gp{gj!HIo5rpfdcj>+@Rv3dRV{T2do$j<^M70-cX7hpaj;zX_ZWo;q_DeU0F=ogh zU1U5bl#zYoIjzJ#v)i!m`mz(tc~jon%!Q(Nz)J8lgX)9?`1NYSzrx!O8jGrh*1Bqj z7nxHf`kT{+IK&p(-gHG zcV&+k_v_}m9l`G*%3)DB9wyTjcU(=7zq9*5;Td71kyMj4J8^O+^?77AbDc@5#s5;o zj4f-tI7l)|r9FSys>x;|T`x2GckP`vQO?}Rip0q$rzMuAR}ouyakw>|gfgsLrptXt z_IcyUjMdsxMK>iYAAV|8W3IM%Ua~fSoPF17tYRDRDSTZj%EIBR{fTkftg!d;o6|Fl2)tdY4vk1N1;c0EUMq3*3Bm#u#oRBEGL^2bQ} z$c7Z{5ubrb%KGe1*ZQ)=K&u_WK)PpLeUOFmr7h%oL|v+a%hkr*fYoQaOIlG-4>*kc?prD0?3xl0=eB^D#gFTX{r_UAsaRCu3e;Wb$Fti zSkh?lqU<-sBYwTK{%KX9;VGZf0eb-dKw|Vv7SrZz83|A`Qjm8;rp4Tx+3Sm+qZ=_% zZvUW*N(fTUOzuNuY26X_;&^>a#q5NG5FOV)Lj;e~P+Zvb4GAJ8jIK((GOhCVBQQmO zUEo!Zn-6NhP0r=LwEy$<4E^me?L7X$a8Py&#bw7(pugD{A`3bWcFIbnVA5I?HOpXGI;DMr(p!PTOu~b@5IHZyi2AODwKGq?mr~M3dL6rg-BX4SU|| z!ZHkvN`-ZxodcBw-VT*JYSw@4N*|ZtkjctTU0Hd!y{F^k6cgT6p7he3~u%H zd^VER@$KXcZH&Ci#nRup-9!llU^$}!3yD{WsY#|L!pQxT!2FxlWaFWn0Cz&k;T`fJ z0dT1IO@gWKoo&5!%ZVhK5U=i7t{D-Cwsc;gNPNXf+iFXXGO?ht>0*!_%A`9vjGD(q z#{1Y7>fF)(rgb!OJNS=J3CRmYh#S)t+TFm^hNyaODevslw%4g`%eNy?0nQBP@TpF* zaAHe@g))bF`m;%aIu;Satf9AKjp3U+tAo80h6c%SQ#Ue0gHbq(gZIxqKo!%WrAKl< z_7X7n0o5zhz^ZNXUQO{lKx|tzR)3%Za5MNY(|qlq%s6@sTbK#rgldnM*5-$2XjI_5 z061FN#T-snoc*_5AOi~rQ~|)M_vcanhqJeeYwPQyH-8nZxVyVsaBFd=K=A;@0zr#A zw8h=siWhgcqQTv@1TRi-owV=#KQnVX*Ia~?oOAZx-?i4Wdi8Kv_bf2>j((H4obY|s zM%q?;9Kx#k8pr3u^r$6LlqEb`DTO51>_GVtowap4#x+_gHu_UH0ff-XBLWC|tCBuZ zW8{UW|(jf8+=Ro{Fb?SS7>=4WYnG=JBzEaWys9&)0V=tNk1WOHoFazdcS< z_Jw`Ow#G>n?xO&5CYY&TH*Q=@fc8`{P72G7XLv(RQ;shqhvTkWxwhOysST!r^Mi%$ zyxvsEX|8{FxN^F1q=|EpMw_`M|C*vC=eEm+74sO}4vw=4Klus$AdGTu01dAD9*MRk zEFEV|)tH(M7-CzriG<|t=xgj2E0E#rsMW(I3Hq|BqXnZ;bTxW~gk4@+%H?ki4xdc= z(l!!y831?FAw!Z@v;c7D@DP3g_+D8Z@d#tjZI+@D(^h4jkd)hLkE1bDaFlwA@d1-^ zZ!(FCX3O<}*T*~*nxj_X3*S8X`M^?}YSJia7;@;054){2-$I}%q(Lp4P z>2H7OvUtpy{|a}O45Mv6e8F4?H!gA+1ZGA&$780oW`cSe(Jk7Isf~`SLtr&+i?f{@ zl!|rzboaAxBO9k`@v`&WzL=#%vBui+=r#uTG%S8(ujMASLCoOFT@@6@&Zv7 zw+N?pGQKBra>u5fUo`Q3VIG(8jOrO3$giTj4!U&U!1y^W0lHRcUH6tkR+w zYKZ!2)m@;*eUP&~*^G<#1}Th}I?(_EXV4bCgxh2$Q0F`=;&1SVA`5q@!c*J9$1%G_ zjKt@Pv~wl|-!ri5@-m&+F0}k#R~h$iFx{NBi~OtXifTxo--(SKf&k2FE4*R21BvCc4!lZ=?sO4Tmo!bp~;zJn*qM|Z4tq_<6*53b!n zH{YI)2>e0IVNUx-{DtDQ=nYZ*;X87A&@dfU3MbCR_ck^?RLVMSd&!-q>OzngfYo9ToIXggLp6V3KZ=<+z( z&7IUFI@x9t5NKioya%Q#fW&@JMX$^%Q$yYUv~-rDzd78c_MZtV*KNx3ZEJG;y(m;E z`=_Saox4U?rXA*P;nfQ0Wo|^Xl?q5<hl)TckbBi^3+ypB&GH*$&YaBgz2&YiOp+DdP3hSQ`UmcSF^@53u}^fqNnXrt88 zMngbWo15dA1|9cx8E}y+HrQzCoT4#NZv`{-cx9=`|DiIFncJOSay? zI{wT7pFgLFTQ~rt%0%*Jd6rWzkpNzuZY}hylt2vpeD$8+dfF#d=BiX3)=^up*O(I} zavd&iI6C?)4j4B|edUeYlKp$Y?pfeP|1W>#<>haCMZ(_$kLC{?b`}hi4<6yMyXNP5 zB(1o-y2~wGYJ_AX7fRfM^?YyDM;%bn23U2A zt!==ia3~{**z;5s#%@oMqZna{I^{hDjz*r4=L`Pa3_v`!Jv|RjK2Z{Vabos5>KwuE zKyB)k(NJbW^74D1d((G~8Ga5v?Ukk{`p}gy*TH%oC3sR2$+PoQbv-T(0x$>!jNrdo zn1uD3)}J<~UezGyCXUc=fXw!~m5&7D*6fiKWFwkC4>GyqtDn4;)NlbBPDNoDdwUK5 zUOpzY-?2A)Dt*SvS1!t4fy>6k@&# z7Vo__$+EgoMVBp(0k1FD;dfFlSZ2Bv-_hBu0Qv^k0N>8H0WvGV zSVh_R{GFYr6@i*L+)UdJK$_&6;D2sB4==S90%_@3+w&Tu9&0DzOtGDkE4w07)IH$!@U|G^|R?Oq;oR_;=10j6mvvO;G(6nE5P;h z-QgkJOkv0GxX+Mt3Gc9(ro1V72$tg(LsKOpHplcCn{fPlWqGWoaU?7p2Py^muS=QI z8bG3^aibl3X;DYX$}w3n21BB6gyT-K1)i%fc#LYsTa}`+iBgqZR+EQesNxez&JaPj zT^`HRK5O^B9kPk3?pMIen>}-{wCJ3!f&MnfgR8UI8Kw&^qCDi*FHs`yG@(2m1n;@w zhl{sCIM{fynL>w7hk>6NWDu}jrV=3MsIP#nIPWJb3<4P#@^Qg>9z5}Pa^SHot&bT%#%OY+y!OeTTdZ%#qSKWNXdu%#LIXCMIY z`xWzO+KX{Rd*gQu`hE<PSkwmXHP>YQL@)2&G8^>v|Sg|5Yp zh~W;%Q({6E?#xMucVallj!7J|LtTIKi>q3*q>R+Q|lKZVUJ0; zYW2-3qv=YxxxZv1tO|41J)A+B`CroK4LrMq2C}s$#7IFeXbj~_QQNe{ zxfsP0;!SHel@%1!1d=|r7!H;ytZ+=@YM3?_|Bg3%uL&%$@*Fu$^Vw0>9+!s2ea3 zcymw37X)aj4%@FAk4M6TZx=l>mu-=6 zGMcO9pD9yiq-4vS{unX9%*dQ)=ycPm&#Dr{?W7GH)PAHs|c7OVrDn z0|oPyP-9{N<~%hvD2?>>LWkf`{TjRJGTShecqTJ0J5naZ^5xQ(7t(a3SvFq`B};-> z`5v_{6lXhuF2P=-{~mSYkobSi=YP}LP__TTDgKI%A0JWv$K?5|>4r=EziXQq;TE1A zuECJR?OxkFF?c#XcxLmLeO#TIx$mf0Btdze1RTlGCg&r(L1pP*y;Ln?yUdL#5qZ@V zi>az-w;bTBS5zXVOFztf$oS{LW!Ou&A>_>to)PBJg8+AG`QlL?dKN~e8)}iV-PVwl zcp!-I;nCTX<(Wo5Gt|#XoQ(0}oBG|yGV-#yad%`9zms{8V15LJxAjC4CuopB~~z(W;;h@rqDZ0AL)EXe=t!T$cF%Iy<(OZig$%N_lF6Ek%lF@Pmb*-$7H%6 z8<$wNT3&#Sha!u^sGZObmssgLKTI0uJWjnYR226)R}|krY9j{s&Np7()&sAm1|^0F z_agODJWAWQ^zRqzPXYf|u@GC_Wa}lG2mrs=1dMiC_Kbet6}Nk^8u$&5caCJ~;tGm7 zqe*-zpUNAm;`N~LRnjhy3|k*Xb+d+^wYg_TW%rY6KI$&(Jd;$VIG?M}9b~o&CfQrCXcit(5d`bWH=dfw2Hm?< z3ItnV+aG_IUdwvyqM=nCuXg?Dl?hZ~kdDAbB{0BKK*=C_l*0GA)*ni4o|U-6@2h(s z+us8!|lP=C|jU+V1y%qi|NX#QUD{m4U}*EWEF1N zYZJn?n3aAwjR=+tUL`Zr3SpS_?qH$iAUUnLOjcKAL`pR%rb#jympjIGP6K$0<7Olk zx%IPblY6Avpa?7TPxLVA?ZLd^%rK}z_{v0h=?3x#`}cRx8M^IPWG2{_Ld|}-8S^>6 zo$@g1%vgJ!lYX`78iPU#k=1pkAN}QIGs!Gn<&6JyXa{W`j99Jo%fwi=T;aQT@llQ$ zjGDn)JaXjgWDEcUrW>Qb9U?Y0L0Hbcntb5@bBp}_MqWG7^Oj|&YKgm408?W|R4lv! z$Z*5*{9u5s&7F`$67kTlBmo7*29$4HX3j#@5pK?cWXnA$poEC}OS4sm00v^G(b}ay zztW%s$8KBoOMTC7j^$#$%*IHSmu4Dl8p_)qW*NzibJhz3pV~AvzKD7)+yy?}iMJ*ycoEY1$ z7XwGljG9P%(kocY?E7%Qjb=^5GHjXIHA8u#7#YL~Wct(`T((YRE?!x57-cA$wMG0!3aR;+0IIWGZ5JG8zMtY%U8cS_ ziuN9tr|qAqT7E4^A-WeyZs|qA^PGi|F$jT)S=I{I3_H_3`3}$sU0))APqN&dUQuJ$ zT>$3>CL-F!_7WLYQZ&h68K|HCzF0*|{#qcBnRySYQ#osY7-8u1Uz#n-)QgyFSfk6f zNPZTaU#YXY^z+qsHR#9AC6$#TQ+Jm{=^~Z>a%O11j>b5TrS?ge2)jG3Z$Ao(*`!{O zAn)^u$^G@~X2&hWCR!R~^eCzeRiY^c8edJEbL`E)ksIMOV;aXzZ0S`LY6juRU%xWm z0x_w$m;xsSThf2TA|{~tnxb)2zoOY7eH&W;rtkT~l(0IbC(`*_n-}Tyy}2^Agi`~a zyW}jZj&{-Jftr@5GjI5a4^!4@j_R!tM|kzGHt9elY!BYlwoOO6Fqg<+U7GLq*i0~d z*H%Z~*jU{T%a&7fbqH+6>Q2_r$3WHM!+X)qnpz-AUvTL4yJ%|F*(vB^_dXJw;kPXG ztvU3weQ}f4`}fEuQ(^l%7aNY7t0>VlH2eznaX48okzF)n5xRsa--Yxzw8$mvLr>4n zKC|!EdtfAt7)788D)}&gDaLz3@#0lzl26y6^A&$pzEIJf+O=HipkN$q?D%yEP1Gb) z9uDt``G~PTjzTB~{k{>|+b@iCl9`l}HkWkgXQ+~d4^zx$9#$k~2L(g0ffU9V2o)F!bGh3V|@cOMF|YFM18Ku5jxKGsp& zji7@}n$yf5Fb3c#eOUV$z-1^8?f#hU(C8Z(w0SSv+lb5cn5BEpv>GB*IOO>KVXo!N=q@mm{lWmxZ>h6| zHJCY`Sm=M7xVwP;dE~kK(Y&}kS}p2IWK{gh(0l%ONpbf4^j+SweDIN4k3}3|H8hi( z%=G3qcpHDk$Y&gPV?*n3bRYFIkAV;$4QDS>gJo)$V28A?hG2hsw4D`93Kg_oi(}#< zxoUrHpRU@1VGufdY#QcZ;I&=Rv*@Ve2^-UC0Bo>MhcejY$xjp4(=Yk2sQzo3TTa^9IYI~y@aJ-*MxHMM?s0dFkw61bx)342()9fh8x)BlgDkkV1 zCk;(<4>AxadTw(ia_yJ)S$5QZNd6JJQ0%kr#iB`2Y5I^lP+$5nJ;g75H2F*yN7Hb> z$HD1oU*FAkqkBCdfq1c$ILU8+F#JC;1xY&r*B96(@fZ*0L^E$zS{BRsi9m-QY3lph z*!?H7_7doo@STXV*lT z1P77K84szZh1>0SToWO^&f^ks=c%zmAbDAhBF??|@Cyx0(es^YYJEPT{05fqzO{}9 zY{@xZX{>ROHn>+Y7@K5=$m?s6S2>74#bAQmd5Cb30`7A!PVx8a?$L$YLL$+HW*Kp96OKIz zL4XCeUz`(rR0bi$qXb}kQuT=7!eJOFPVY!bnWo!*YI?Y}1HLPlJg56h+jUk;hiq!r zGLE&`Z-SDieUb_r>ZWpMxEPS+!A1%>m=bxwu_;Nx`fRKtGp~PHneov!$&a`?lTB9G z)>``$;Y6ZlUT+w9YGpsv`s&806BYn+Or=6Vw?50Ejyi<^)Uaz-r4oU67bB7XnVQ#D z1{{${y=}uN z>#7&&xpgxlQERp*8?8JyEeDoy!R{zJ&zln*Z^*62UeM93E?EzHKHH

    &C0xcC34T zR1RlF(nvd6b~pHd-1kH8JZ{i`Bi!o-`wyzztye2O6d8;CCB1328DaEg)AjNWAe%bN z0wrh9JIzjPv&h(5&aQm<#^GCKV9zKqukLEge=@$_8n(9|B8&HC>@K~MDNyL9OthvS zDL3OlcT_(fW%AD3(%|{4B*N*;=47K&!aTc`LfctJRIrg`Oq0ZRNNvErn=WDiZcowl zQJW$jD{pj^Hm@x8m>F!LK>eAdK7A3Piv^#!?wEgJJBG3^ccH@K7hw*}tXmbZkwhns z>qsUNb0SlEuC)HDe0Jpg(1s|JlQPNAdgPJ``~KqNcR|rgdUWUQf*C*ZnmrJY&u59+ zrqvITOb(BVH4aUAco%kZ>)Ikhlv#rng@$RXMI7h?vRGy!zvA^}Zm)W4@eHs6r`Y51 z2%A|&?qZLFWR*Mc)vEi$RmAH579yzu;Dty6vO=P?hz65n%TFIOg0G5ed(+~<9>IE~ z*(TFj=GHC4m&X!0=y@Gi=Vb@yM%=u9M=`=Zcyhm7nJ`*$Y+Hy7W+m#ZZFv`K+yX^ZC%rofl9bkvArX;t?cQr(i4;reV^6>$TjS6>fsZ z=LMxZ*lut9W7ee*xuB86zN?C@9ftqQS*hNJ31NrC?kW`4#_qnO)y2!}_3$LCaPsec zFycHLKsr6UUU7h3lRBI!p7YP9dlQ$@%G3v-rubAJat^dXO?XZKIUutte!xRH##UwO z$r`wEnP#%T{0FS9AH3p7zryB)Lko`?T^S!N`@a!!%~N9!Tb#b;F7&X_x8nT~D&Amc zrcslgc;OZ9;QthOMCfaeTBNIJhjcfOJeUP|NSIS;rFg%V0&1zh0uDRIS&T5VFj%&Xzg( z{R66{hVTZ~^}5h7^h4HxW*IK3RK>m~23MJe-QznKGe2pPbHs?rtB9kl$tX}&qQy^t zQ2`hJqh+DIzsFEU{J#S~p=gbmey^+@aUrX<$qYY6EIXEEg=cKOr5X}RZq!$m4@R{5 zSBrE2oe&PV{(`;iraRiITP@Bu<{k(@QZ8~0=&t|M7BKlK22hMlytdlJt^()MraS<8 z7`=HJ*6OhfQ>J~w@=@)SWh ziIT{q~ zztOJT1rmOUcfr!hdjD-+5?H%k0!9P(W_~uEa$tTr;x&J0cx^P+_+?u*G8VKa20nRG zP+zW3?X^CyNdyrhr5e^@s9d<1FSDyxuFM?VJM&s=XEQen!uw8wS5|_ntNTR&dRc?6 zz5vEzO!JS0@06Q6laiAlHDA^lqO(`V&Ws-yeSF@IwV@Zrox+JnQMyYLk&1lhPc67J z0l;(sE!6vFk;9`)BYTrk#wP-%{I8N*bP0a?z=_oy*NdNW0L#E3VIEb3G^z!lM}RHO z`GBPCu1D7Cu=3}=Putt2N@^Ld=JarU=KLVDVtdO<)X#o zCI4OzZ9+a}mq8;v0|ZxaHuK0S>^993-Xyb7HL+7qGD$~-V~~E&Ml9dK(EXC zB5F%FiC=^o@dR{IT#Nim7VfHtWUu8s81$6Ggon=kPGQ!YewX@=Qkh6KeL`!`fXxYL-}bDI!1k-v~a4;FZ{))tKQ>=de=hMkj!ga^PRF{LM zaAT$Nm1)I(8a8=d66<;*l>;AM&4firC84r zA5&$6@xvfyJ(B1^sX{Vn@Ik>)HZx)RXd;~e{U=OTMHa}74Z$Xut58^rA>m^9C0k&G zVcq#FcWJF;D=A0Zn-=Ar(BM2u#ZW>Uo!?sPjQ1yZk`xxH5>8gG+sJ5nYAC6Q2b}RY zjMilZAD&9i^Gc=PaMxM${qZ~LZO*{RyJE2O>hQM9Re&)!qJ!Bl*v8)<@7XXiGoMRu zERX(SxcjMHgW#Hu{=+}!`qEZEfj@ zZBy|S+7;DriJ+x)MW0`Y^D%64Csh}kZJq|L=p@n*0+kZrC1dIMVt=IpG>?h>`{J2Q zz26@>eHWu{uc=};rPppZ{Ia{OG6BY3T)aR<7$_LT8SJp5Fp8-F-3=G6zb;XU($<7` zb^dJjFp$|3@GnZcaY;r2H>SEshTrg1_*ne$J%$9XxZ#jB2?=yCcd#b?(7p0o7Mkg@ zGfba7kxWqaZlRJk*dw^xSpU_HEi-fu-Wz%0E!T|+<#mBBU?S39>MSg>9A^&fVt0oH1J5kkJ)Nf7T)Rqb@i9aOX ztUr8p-|z{b4F6QvCDBJ>Sg_0{$)Bg7xY)gz7ey@WL)*5c$@i+dEe0;aBHhnZ_J?yZ zqL}(i@>g4bL0|WNuoJ)k{YDY(P%6M0eiU+)Vld*x%JK^9puL}J`-DmGmPFx8j)l!B z#bxDUOuu`1A5nP$&ab7bgoCV=l!NEERfPs@H**5b;V!vGHSyn3#u*x|vZS)^fBG`Z zyzOyeo}X*YC z;Y)eC5=4tk`(gtgnXab-$}zx)ktZpS_t&t}Gg9 zT~Y@Mco`vR%r&xqYuA>t#qypVgmV(U#syo1j0!{D_@)|tTEH#&8+99nHNNAg15f1(ZdHJy=1z8_0k zWkFdE(d70TidRJ(U`r6ni+h{9l6ebik)W;-VvbP;(#mZm;0Av(;s*ccqsBuZPq>Yq z8B_3Ag!;P{j~lmBT|%^I>u`hkMDRow2{jg#a@D zTRx`#E+5#(B@2g?@1q_4zDT@5>;T$I#~wHzKfTHETtDpZbb1w&n5s2uJD+Zva}CP6 zWg7+!(A=beEmUb|yrVXJ7&a^u)r#2Hm8P34(_|T*ZQBM;PiQ43R>h%DZ;liEfJGPb z^*3qa-nUOrjb4Iw*c%tlb}tVH%+Ji`Z6JH+Z?>?In>$ipmYF1o=QM84ixJ5MEJS<+ zm>m)`H7I!E(3dScaGoZi`PUtc8v)OpVdOVTH>hyTWPF<|6~nvzy{3W-DnqE#1kX65mo6Fw!=O;@MyaMQ3K+dIgT5GdcAJP-2> z(HDt53_1FRQ-?G|ZmGEFkcg-F4 zbb3s?GLY`NqRTU&LfUZM_OkArsZbx(DD8ykL>U+DgEh%=opiU#8UoGfW_lP&E?L`o z^DU2)A{4!){lVek)4=MJxUvKz&sEKkDSizz76h!+H*(zNKE67lHsG);hy{_rV$Am4 z7W$lI(Mss;l$ylIZ!!9)N6|&P@o)G*1CNnOggtKAVfp{0ZK<|@J>w0?x5#j-$F(!O z%OJz6n2mHZsKjPCjTNKH_@@EEcZTKgiG@TMmI*w5{$O|=WBqkw0uD1LG(NvtFupiv zWIq5L5H%^xoCJz_+$jIc{{>0L;loek5N;Bc)a{S&oDnZ99r*g*|L z)dP=j;_tyd3;c5DPpCq7N}>26`;5h!m$~QaUB+ySnwno)ju$EJi2lxJnJCcV19v<) zN|BX8imnO6!F;dCwcM~R*)^lFZu2+#_pJmj{cRvbkNkm%+XIAD9bRiGhWmAuLJfG! zH*UYua~(yh+vP`oIB#bHyT%2^%qLjYKU(6jMmHVyz^NyRDl|`gZ5&^Y$I(v^GfiFw zq=4^~Xg(xTvz+nlxrK}7U-l`*`F{>Z?0=yLDFLWcIKSARg6;bl5}3B+E2F{FCX-0c z7N^{B!70Cj=?>BrIf!I@1#RYfjgj;Fap=Djx*>e-x^S6)*YZs9cL~_0^r+(t{(;I$ ztaTE$JsWU+4lFNa~$u> z`Ksrnm}g}tyLyKa8nMVi?3!9qtswS(x6NH&=RW*NDl9)uS1WiRGZKPBy04Vy)$F9c z5i0S1_NQ}i8IDuP0-q_vxBC&Btw!4=1c@GKgCaw+t7Micdmw;E*Z-H&Yg}g}3%{IuI{Og;OeAHg^<aomrecUwTn;W0JSCXN7Fwz;h}MlHra{Z9{6O@r;qf~*holGr)=0D2lZ<`MmvKe! zY%N4`u;tQh3!3=GcJ6ige;7byT7Hi2siAGF&3N)wnb@RzO9C~lQQ4ehAK@peI5hCJ zrQO0Vz^jQNpVK0F7rp^5+rL(&)^F1Ll`faOTY>ga0~lk$u=w^r751?g{(3zc%*jvS zUV=7@c2PW$5)?bF^xLAkn0)bA792}cR_tLOH;kd@nhhW0fb0}OtJAqgYT6Nn`ZHAq zZAz`=sLA1y$PjEjDPC5;lx**?j|CD|)Y@MIE@;;5x8xvmnnDWD+ve09^$0VAKV93m z-~cS*rjdl4-mFf;_UYATy9>rIE!Q{rZkVU?TYD@#*B}4(Q zU8hkOkB24Gf_WTS6SBl~Lj0*t;nt#ICRdRu-%5Qu1yd7)I6?XN<@xYI6`)DVoVIX@ zW_1eqGQ!Eq6L?&8RXkdQvp?6ly-qw7<$3B(L}a;Z8)X04*OkjE(R z2<$ecJw!B`mt{!vs!1yf-p6q+Ul)N}emIYFifPR&EAM>vX1YE7Qw}= zRXu5YBK%DgdC09exAk;;6t?HcRQm;241jdIKi#J=l%pY3bOxeO917rpXoSBh z?)Nw)#0gOEOAoyojd&eLGl4&GlerWZ+nfLyn%osoHc-N4a(g#47Jb2 zx8O$FmoXu_73k*m|6?tV)*Q?EztYEv%m*a8(mBIt>i< zBYiEHL|2e%74MR<|Da*C>}oL9`j)XsTKxo_cxSyke6F}9m)E35=F82aA3uBQ1hhXQ zO~U_`L9`JA)etiWj=huXja4flTTc~bV!={<65908p{Gv!g%Biw-aBO8!5U}%GKrPDA$iai3TgF{6FnyZhwQZOlZM-MvKfX$%@s519*9FE+pOdR9pEo_oKv?v{3ffcBP)#g() z*fy}G<`+C2sAf=m2C_s~5bB=l7v|~QIS4cqdOehox$2bp^)0RfG_#Rd5(T|=d>z+a zp69LicVA_^R?q`gin?9shY+&ZLc-V#DFdYQN*H ze{QNqvcI>x=DJYZKueUA)qYY;_F<*7A`+N6w=bAIZ>-J}yyp96g*~iqJzJ@)7&cWc z&*8LJ^($nlwMMlo+UTxq`YfL;u}nR4FWY8((5wlWH|uwwi-Vuny^xWob~GOWBr)@s zFmu?ErFKK>ZKuxHlK>Lfu0fT}R=M$WC5=U~A@zKFLW`C^Lls#uo5yaNxqB;ccf9`3cjTBq>p~rIV<_SgGCkJ2UhnH?;Vbj2jeSCEuYsYo2+`1 zt%5mWqS^k>p6pd*THd@zKcjE^T+t?;5QL^j&Q@6+&U|BhkI*F`LG&FZoHD*@Z=0lv zqgCOKTU~o1P5CI;UeB~Pp5K9m(aeAzd@#Ol!lpK9CNfXjb+6*tb)r$Jr@T+8OQLsv zbH_T}9yvAyAHWgJoa{WhlxQTi`t8*F`DveNCt+W%5QK~*c^IdcMS>hZ@t|-k5hcT< z#2*V75Q@mKoLYm|DG3XuYTg0B#zDn7e!;~uaD&6ihqeZ6Xpb_GE?m4Zq})QQ>YWdJ zW5;bK<9sLErc#U{hAFzXD*Cu;mA%S-HByB*7)qwMZIH4|Id8HkgKILx5vn_pY|%Tk z*A$1mroF3OB{zeKI&Jsa%*Y?c$3CXx_fx*5k_Hm4P_TSgaNvwq$>4KRB!;e#^Dvu zKc=L^k z`r4(RH#TO%SA7|CxxHJztQXQs4kp0G(wpg4mM3J zHtbbb7V%D9vdHPR{PnJgk{c(7Ec!!Ja<_5E*h7w1?yuC|z}0tDZc&u@P74g)J9lI% z_)i&bneqi|Aek8!a-63`ThP-8@Jv$;-N!YoSrJ5n=dyEn6`(|G!pM}$pFYxL- ztWS__xw^D`Md|O3S?%@TX+H5Z85hB6j>uHOl@|x<+JhLllQBmPe?C~qYWnC}-Wjs+ zZaQ~@!A&ndv`s9=jnhx&$=*hnn8kaT>RwS%M%+4OzdMw*q#5YOWoKbur?GwMmF1wc z@Ix|6c$V{?-V>Ezdx^iTC4XgXI2ga=(SqH_eE|7f6_=O-bofIX&$E-kj5EAF(1(I# zEvU#r+wzf5B+kjF{_2@XU9Dy3h&bT<+AE6Ek4^d6X@@zjiU^^rTsmJSWQj74jgAF4 z__4?-B*L_q9*Uf!lEE3S-ZtPdZ}4l!En;FzP;@?H+yXXblB1Ql$#!VK-+j80Jc@Ot zQY+Zsof7!pP48X{4w|2C`V%g)0GYYwY3cU4R~lJ=nMR|m;h&`2WJv@k=$s2_u_^@= zs^G6p+591rUsQ_y9c>mw6fB$aU!C`SjF4IReih4?HtEf{X~g z@LtmSS6l;)Ga=32o(5OUQFB48O`toTGGk&E_XC;iWmX|#{O%ULETX-YuNX+Uq0VHV zO|E!8;e6k4(IN9{%XELDB7JE5F&NPx?F(%&t2fb<0{k`Yg~7`sw`4PN1Tk#-ti4`< zB&YYZdRc7Gx*0MeYY((6bW-czcvs{%OWlf>Acs2l4rsq4#iM2uznIeMOl!$IGpeNT zoJAtk`{r`3L5@IGM$vK6y`~9usGojlMRBu5;FGXV)B7-M`mn@39oXWPYD8=741X;8 z#H`5oN4ZysF_ixlWO9snyK^}D82Sl{rac`vPno%#u*;bQ8jSP!9+Y`PK2LEfP|9^- zi_>&99|9`$&`pmxQ#y!GWSNS!zDoWA82ZY=htR~D8u|;Neu$~b3aOa-_2C>h;Jy^j zIMa64FQA*Lf0xoymrIT+;un2Gf}1M|pnxXzHLDG&R;k+K_l#$JA+ zpFn10tX{35rvtJ)FP>H%%jqr9f-<4Of5-@Ji0$arn|tOXsgQ@t4r0&8?8m4jeK=A@1G&MH+2A-5 z=0ieFUUy2jjn#qe&b57Dn*^z81zqupC8%&2z&V)}6bJ4jWrLEn4tAofop~3cNyR{% zrNk3UK~C_^X*eUvKZVCT_*ETkDtVUkRHvV-ez^)2+j`)T?EsslI~NJpfmtYij-H0S zljDkfy4Ve`@BGH^dMxDC+&+Y{{Qfcos~Jn)wo?V?SHdxi-KtX-#M7dp?t1AuK?U`V})s+}^U(;t2z)cz5tR4LJ1 z$^Wj=lBR)4>U&pjiERZbQl0O*H;J9DBg-yix$HHz6+l(we)B_fN z!^WS3PJnaLcM>{4RnT(7C<9(I#V9iqoo3teb{i8049&!Wn*v9XCUPO1=s(r{XjZc9 zFQJdlZH7PtfmmjAiTt@;Y5UYmV7fqHjh4T~@6DjuGSR3YB}~VIdx7(Tz z&=}{^7kNaj7rZKWr)jUYq&7q~(qdhjFYB43tL)Tdm^@fMwmboTKEXw>H-b!Wzi*Gw zm0#|z?ZG})zVKs+#{-JN)0xBE+KtQ#2YYpz*7jTrduIKb9`Lc+_4YUc5+Yj%X_{UPzGirX-O*j+?<*z2IpgljoDJ1}pov}(5$SiT$ zfA;F#g%dv$<`CmjenNP1x~Sl_B4ENLkpe{gcJbc}%&&mqNv>+W?0rDhVn~>Yi`7~h zr9tIRFn^IAd&iTSDgGK!b0z7U5%CFLdduo(Py*V z3cX>FBhhuQt#vjC@0bau=T?voi@}K*HI;gBxNUIZcBqNu%Qz)m{Lp?^zK>tnWm8W zlRuSn^jqhJ_~5(oSL2vNa*e>dJ3+Zueiho`-`TA%5*8M2FINXK;LQ@>c!PfU$&I|q zSfXhi1t-83?F(KA5x}}m|JC&t0vOGl8L)homxsHyc;Fqmq0No;nCAckY8Y^(QRvyFY7? zJJ|#EB<}v(f+rIx<;kluT?~DraD|0V?RNRAP2D%>A9u@eoGYunXrFVLTGQuho3)=M`(Agshyu!{^H3 zoXimJbaEoo@h`TXNY=hj7@ilqyTv_0gD_2#&T-?IY=dzpIP)^&`p4mGeXpml#t@70 zhy=$tDyRi3?FC-(y4qSQ1xKMC5a?@|I$$BoBe1I6S5kv!Lv>&8p-B?6GN{t4DBPY* zxDl+WN5a16H;3ThkSRA~T}F z=#9#->WE$ZPcgHjH?2W_is{FuDp<<>ClY2`!H*3eh}f9nPt%mKLI31EUx`lPJFU`B z1&Udq+5L{Fgj{Z-9U9cI&D06@A4(&^pEz`)huIC(EeCvdZ!t`tf}Md_Jh4QMq5bT^ z)wVEC4!V}=bX;z|@fz?i-Ceci(OliOatPN7f1b3-LV!hD=k!E>bA{fa)G>o zhix(~242JDrt;VavRMAUe6%EUxqfq{pGtt=hNJY=&4wLMD2xY&Wt8^C9|Ut5Xc518 zVVzO-QE@D5*wV=un!ikX)tBoeDdMw!Ec7EKK@(Aa-%gRyOjW0ADjz8}T-(^ITYLZ3 zQd(4Lvtf~=+N@7{Hwp;(rYn?kC)9{R26;ru5Q^XL`=bhlW@230uSLzzTstwsJ2hLQ zOwYeR-7+@Uo2c>c;a{ty4P-t?ERvhheyC*HZXVh>PB_qRq2VjjDFiMhU#2w%X!dOE zpb>)d5kk%hK0HH3uPBCDUa0KTH2N&n>5xv%B}YDt0-XY3G@Z(_V%iXkYvt6Q)$Wl+ zT;@MET;RRQe!G#hH80T&2L@~g=+!eX+CM1(2QCE!n#l8`w7C9OO^EO>=-MVSXi^FN zjwL@ekC>13wk#oW_EJn^n+V7_4rtoPoS4;;&BqV%IGtRNFsr|0Ukq{)F?1q3e-h_K zHc2Xj4&@A-?xeB2T{ppwXVQVnYKG`&dP7+GiCn+!PI zjFrc%v+Nx1F`~<-;qA}asiK?7488o4Kx5iZw`KgeasFksnIhbwCa0fc;Z!NclGsMo zF)qa~(k;_%e6Sh&z@mJV*`J$d$uUec6LW`J2hAlM^}n=`J>HhjYO-t~KE{8MlWf5M z7jyXkCsIQbTlaQw>D4ywH9wnwt{5+<_De!|uc@+sxWu6^Jh^nRX)dM#*C}p5?`|y> zCZuL>x>7=*FRz8l0{b`TK_wn%NwTGDfkRA|C4=|6=mDANQhoZRn*HDY&KaH${|=T@ zxkwVY^eSupmt`BPM2A#Dv=V|Oa&Q*|=dcH|>b!M%KVx`TLa;6tcfIkixad(h>fEPA z=Q%|N)81w@9_M7N=-zsy-dlII@x|@lRa%M_hhoK{xD&Lv zhvM$;?$+Y&8mxG63+@tJibHSCa^!{89SMe4!FMS<8pG2qf%n1}FA;7GOHN`}oJIQ1t<8RVj zeS5~B7L!OPW~w6oKl^e2(v@}$EV8Kc7sP59l7A+Nq)k`9zWT!1H#e8UqGe|VXBlGNVQ_;SLRh_ja&eOa05^Nk*iPy1Z?Ve(3z47_7GEvV~X9pKtw zwEK1po&9TLXxAvR)#N+DIK84`0(H0LNTtMOOE(NhX92p9*}^zCOz$suf6WgyVcF4C za-p>f;IJQ*xs`|dMjZ&Z95%vFo-VsAzLe>95uS(^#FtUAFa#xyq}1?bqRwOAqrGV- zDsrxSBkq<+--P<=b>+`eu1#3CPuD;A5RD~kJ7Qs~?00`il}>~egZ~y5uE9MJi0PpT zMi&|!@bLON?z6&)RE`l|hKfEysod2QnTsWRE*>wwUkBo>nB-4n~wOZn++d9E35^)LkZ!{N8`eZmfUY*8VY($t8W#5N1Q<)v-`2 z2+i|y(bnU-m*e)3Si~JJH{k~Qr}1h(s!{O~SAN9T1oQmhZ|?=};!bL|Hy*4{PK}O9 zXjUKayeg>;>_HPDBs)tZ!OG9;)HQyf1d{frNbQBy?YY?lbw^nVM@{Ytx1GOB2Qrpw zH-$nwoXSJb9D=@gtR%_1Vkz%m_bzO|jncx)YQaN6QiizMqm}H8NVSjat!=)E`onVg zPDqMsBwE?lj-Xp~)p~2}0kh-rl9uUZKDETh4Z{E&Z#|1i0#1+G1WhoX6g{TWQLlPm z;bSjGnv9vS4faJLKNnKifJTfpMB%il<_RJ2c!LSTgeUYHM)Gv$!6GAA-9B7BXVp(& zMC{B@CYU|jSftW)+NbWTFB?~l`4bK&96wRd{{cW?C~POUJ?84L?#=`hKzEo7{pRC} zNo%c6Eid>e znRW6>;j5R@JyHAM`v9>Fwi;QDB$a<2*}OtHI^h~y8b$_YEhb}L$le*-YKK=Pj7kn zJ8(d|FVEe7Oj8}hhWFGoq3pqccGX;Anm+Mec-OnR?TM_iRW<6IJO-U%YlVn4{ThIz z)ZYCANA%M=_9WkWiu~R50d)<>s^m`^u4Wh63Z*c;4$IzoD;%;*)5Baw@jQ)QAQ|Tk zabaS)bb@zgs_WdZ6`X-WRY0*)GxAJwpFXpOlmoO{^Dvi)wU0feux*v5?@+zFN-ryC z;qc-x{PT9Spu~u!pa8ua)R z_Re{Q0{iuSTGlX=Js-YeH}G>yGa@A9$SlW?-U8KuCD}ydAEYqn6s}~bzKCV#((GPO zbeG*hP`W5>xC4LZZ9c->pw(kUQk}|+w!kqo1jm9J)3$Xq&kqO~)IS$ecduih9#h;8 z5#vmIM&r~*S8w*2Ff#3tQZ%C)p{;I+OMjz9W=% z@Q1E+{X(pBKY&BqPukSnp$8(4NyGz7yu$IvV@3VrF2zbdd<3$nafKRNMqSo522y^X z?aeDRmECVdd~MW!ItI8o@-d?)sD!#WlHKpNXrmyLv-2o?Y-kREo2p6S5UACjm|(l4 zg8pPALT5+7 zt%5kaH{rEOoNW9=Bs3*AP5C9_(@~&S>gf!nF7ROM>8Skv0ACbVN)UV@mF~R*T;a{E z5wy-}enb)+%^~&K)m{lf$P;HaUU~(>rv2sCvog|b(uu{4&_T%XN6QS~41Jr~bcBM; zY&;ZuvNg=W!#6iD_IHf$U0TY$HZ_gviU3x;E!Yt2>Mf}@@XYT?FXG>ria$x;&)$$f zD1nmd&6~u1WHF}f5VzfDJG&`)X*Ty$z&Xx=Rk3%_9i6%(oV$1~Ax$VPze!XO7Cb-E zpRuzW4jB2e6wtm5QYn@-i(3HU55(}4py5C-h|=a-5(k(P<|+`k8CM|*9JqW z#*_8uyUgEg$yorDg3RSxR9ab%^~JdK!rQddiyP!bn@w^}bI0wBohQ(C8*eE>$SNE? zJh;L=lZ;P~7qwF~iZrW5vyDu*D|flA8D+>(D1sUDH%k{Rrab_|JzE08L*>+|y4z;n zRxZYmDCs*ur?Ko}wRXYHx07JUP7Y4jO0lU&lf46`t%nU7D2|=x z9}75S~Pm1o#(Mdwc+ z(sv%$(tb@23%!t8y+_pllx#14|K57I!>!e3(rnybUoxDWlhuE~{q6ePBY-#eBX)?5 zA?(cECd^>G8s7S^PKrKFSUs6U2lip&;sZrRDHP5I=bO5_1_f^0?_Q&ruEHdLo4=gu z5T?&Xy#nq?hkeQ2JUH4 znm1xw<6c3_7B9c+vIF26_JnqDCXL-iDAnk5nSS8?yC^chNGG_0Ev;zVjqNYo9UAtD znw2VyBB6DvHSV=uO1@5n$%vp^bf!&Ko_oWcEMHxr@FtU_qqVMfPK5 z0{>fAVZm#wui$xZYys^y;{8x0?%l{PaNgU33-91Lw(--+3zG98wyWKamoI8WuGTlt zop26LrK6<@b%}?^*+wnX`C)10+4;pd+>Vl+;J535`abRJI-VKsz2fOMm-}YZjt8vR z?T+4y-}3~S`l~J@#0G-pmh_iM=g-+Tb?ea;^0?p&j$OM#VsZrI8p&Q~5{|g@sUc6h z2HpwTdm2pvYNk-Iu4i9_9+ckbxESlu7O=g9fB>VB8jW#MtQcczz27h8V;Z{FscT1u z+DMpju7UN;E;=ohefuMJbiE>QKg|}caow4(PsI&3X!la5+pFKydWiZ+hZ*VlZL4IV zzdWnApc#!10zBs?ZZ_ZC&VqX5@put)7Sj|iFx#Knzfq<~!McYK_%e&Ak8rc8fZ9Ld zukj>&v6F68w!bElsrHTSP?**29|@Yj_ZwqH85s~krAWGvoAz{c9DI5_lE|wFa$`PD zQDmo|4$*LweHdd@9(;MPD=#=I!{ps5qg%JvwuzAfH?8;Tkvp5Im3Uv1+PU)&4>NUi z(%H2}sVy&z2w=QnnkP zPN_T>%(QqIO%Zu5Z<91+pqf?j6h#$(g8vRSNYQkc}tE`8R?#BIYz=18>H@0{1E z7x=8cuu(;uE!{4RXf?+~NO3w-v6+${nPM+jt$hp^6#Gg%O8R2ZFWt-~@7knmYH$PU049Mp}3)V)x`UPw7Fpz(-Z z&Bz5#eyq0L%eZth4aH0kpZ{&x`X7NNhq>ni;N=8}y z%e#hT{|jsQ{_$s5IQeMMluZxWmQaPIn;i%L(RQ~1r-A36aufu(W*5`u&$&n?dy%#V z1Adz}`j5j4eNWpsT}P^%M2ro0noQ*kM~zKmBvmz<2{+uS=j}JnU)s|n5&5_1W-K67 zW>>M>z~n1UG>%F%F%&cMM8NyTnCVEOXs9+D7LL<_9~_|FjtKj*9?BHk2|XAp}<4~-=+&qSre zv7vXsd7%C84}LtN!GYUhLXyRUfrAv!Pi;qV2kz?fvs)Z1{Ru@ni)Lw@PckM?(E26PhqxR$ z{AK*}&b(cF$h#O<;7i>t{DHsF!~0FVz^eH&^|B45OSgKhE!T)!$5F?J)!wh|oeZjF zs3Ef{#Jw*jx-Uvb$=megoYorCQ}=cyMH6L^Un;$Ws}XO}C0y|(HqcJm#*LBZtDvF} z>d)JgWsq92(majO)9kRI3B!I<>>~@`Y0p(bdB2V)ld>=$Yn*aqjg!3F7fcT!N;8C^ zTh!(lxvT^~946NG(HLU5QhFm>>|cF{qFoddLZa@M+;BWNpM|u5bJY8_-lP3Hgv3lH zc!*Ux32 zEE|zv)*&}SE0MC^!QuCS%cRvP7KKh9=0(L=2!~r%3OUqD?mo z>eBRPy@?CFL0K)%e4L*t#FY>F&ws8)*uh`X)qiC*iGf&nfxjuO3*cKI6t^;hEHh&~ z;FK~%&Wq4v+1!4IDd0j~!~Ml(F>i1ZZq`G#QK_$2q20UU0hDqUCc7ztlAp59gOCzR z?|k8K>fdgUJ#Gyo_%WxTk=KMeRq-}f(T)OLg*IN7NC>r(eU}>eru(aTP<{b6=80E&gf+nBh zD{Fj&>=`F5yQ`7C3=h4DWL1Zp5+uOLeDi87xtYSyrTUmkCQ+Lt^?^F>PBA4;tqZ@8 zAf05Mqev=2T%k?N>NBhBW#fE*~zVRqs;yxmC^!vZ26k^cy`HC=8LWO z0rRjXrycxNw+>lHYkl!FR>>688(XU6GT;TqTlIK~l<>GpdqxIxxy`xN?$S%b*=(da zoT1q58?X;TZuwSKXk>M#W>zlHkpm)ob)I#m(T=ZdKI=DLs{@2hMkXz5`L*@rv{9MD+n0Hk)2OSW}duM_`!5;`+GmX%?<$qwQR1bMv4)t#K^`vpILd ze_O-AT9D%&U$wEtgWC|(cT=2;ynx?#C0oi>z$2;`KA*6&60o|QD=$VrpziDtKKd5A z@ubQjo;l^Qp@n)dK!}8v@vv8&Mq3_|Z3Z8R{@FYFqi-=DS|;hAzgy~6;FFP3l24@+ zBqENJSlo$y>!4?=_oyHC(;+l7Y54~x`01cF8n_q4?U2M~6*Add`thk@WuuJIhf?59 zLSuONVmn>qN1fp5xlf-6W7_$pu1FVsHh;LycPm zmQ*zb&ST<6rj#U(goTFZl;%P%+E<^m{7B}rvVvO&{`TJey2f}YAW3&vdO9E2+-s#gFmk#Ee1XNsZh7(aL;A-+K(GWL!ya+Kl^f=e>>5o!85;U6&^P| zm?b?K^^}3H6N*6|!)jzKk&I#|dS=mp7&Wu$uCMJT-gGFOidhA%XTA(sm9CxD6NZky zRJL9G94i^Rcbl$`q}E4D(sv&bKj+W=co(-~^(SZUhcMC} z%B0sxTl?O4!%6zP0M;I^Rn3=zmo%q2Pn@l`n>M#>pKHL5+gQs<+eXo(Svc&|A{~_` zh>32zvXbkl)(l*{I%ARa@~x6OTdmIL>F&}sl*tz}BwP?lCD#Lc6B)|-vSpMpS;y7( z4CD6USDl5Y$j*}^Gbg>^>JI&MeTP>P$<;T2-GfJ`?f57fg=p3h{*L z^3u51I9O8Zfw5bwB`zt6U-vS9kqNZFQ@yvLo-;j7f&@me;n>yH)kEQ*o5rjRdH-y3^;U zsOWW7)$btASmpbho7^UKCXiF@1uZ?00($XzR&J%o`37IrS{uT-DKNh@N=*;Q_J2dv z-21A=w!Cn7ezdHiBXFvXoSuVy<8nppk-3$CL!bn*Q_jm`xk|o74ylM&RLp(bShp+V zi9ef@oY*2%YU^EhPppd$)%4|l9UZbw*f*~W9ma^L_P*(oV7Fa~Zc=kPZE`~9Ep_$Q zZg_n~;4RH{Kz?{LfbCZhS2^WqX;w92{lRPloMC#Wy+OWv&ZFv9DU~N4^+)GIq@8PZ z#I|zZf-fl-0An_N*&UgbqLS5X3T0~6s#+JqTgL}r9YAt9xn+WO1lRTpX)ph1M933x zoKi{(*0&qV;_OSZ1^`%}=@qD$@d9DtoZijJ3_%MTt zdU*<}Df;zHMbMm7zo3{LrYf-8G{wW^6Ih8}n~i2TK30AsMcLlMF)lKAg3jMeNl=Wh z*ubo4;- zw^4^6n0P*1VU%%%xIWmY8l%~f(8H}-OCYO)#78u*FKVyFhzJvk*8g}=Y>hlbUN?|d z>y%R4_+XDS^72cbAhq_gOt88)VgHOxT+eSz&BaP_b2H0(&W`KmympWxwsl#mxOU%-P1Ph;? zZ_qwi$VUzGOB-P$T!zw|05Ch8m2pL9loG1l}s!lnEtoTlKLyr+Q z&`3tyRGI^S#&`7h*D?}QQ)~RlQ7|JuAJk-#b_4aIK5tfI0aK?P);UWYB?&bBNw+$W zylq8T_9=CeHmhPrBTEObQ8U_aCla%#=N3me z&Y=3wn{8w7ir!;-8qjI=M;hnHVY4ypu()k;n}X;~k9*$bDvJHsHaB_P$ptX+hCIg0 z8a@JR_q5*j!5L#b>DY&$zZnRe?TtYZ=HCJ$I~UyvNomdw^8!sMV-K*uz->0HKpc`2Oc@k zm|lC6uMSO3lh2NHS&+;GAn=!9^ubQG^|ZSHZBwwwwR!c>%1Ps!VOs*eP zIA_;u8m=UNNb_A<HIb1iA=O2mam2~G zUs`?W5)`H*jZ+i%>QjsNRWUdvt2oF2g=FZo!GexiZD{J{3HGy^BDUt$| zqpipoUPfR&At9GP3+9gGLn0@~%EyQ^r_}Awa?YLju9a!P2ivz*sVq^0m<7NasMDfg zwDL|AG9hbZj$mZ6J6E4^AAS9b4Ec6FidE5N&su5SQlt!N8}msvUzo&M|L-tUzt&26 zqp~gu=Ux6}lEU%6CFd_}X5$7S(_XP7f>XjIj%E#rNH7f+yJyM!8xqmsYndht8XHV5 zMngF11W7zW5imPH*2*|Trrf$$Wvtwj zUtVaaj%gh4i2|AXhWL4RV77z`(_F1h%s#hT=zsUAMauX%MIV|o-{nu`w+H$C9@hcq zE*0ZE0{N>QbMGZ{|7DKKyEI(&b2&Os7fv%H^RRjM^r&)ABUbab{dJIJL!0g8tmRFF zaJ+-wk&CRQbL6ihwgQWy>@y9n5GEcu)G1ZDmpXGs8Xz@vE*j-Xx8HnIr=o?g^I+au z_oP0dbcH1`0=HWSSZ%ZRFw%h3&A^4Qn!tun#n}Nk#_JCNBX53H97|Q4`i+)QzuH$< zCL5^930XLMcQ^QT&n;~@WQS$oH|>;L0jvVO~s5K&3Qz2cnt=+b`ws0Y9iRf2zQ;iJs} zYCU(a(3TBxskmcPp0CT)7DYI;qEfRrcz830l6T|K2wv!{B~hSmIrU7CslE;h>cbKMaxJVO{|Ga+z*u-=l636+}Ck{VOjg1)*b0|jW{-m=tV=OyT=VQqN$i&@&a zqwozaJc)xyn*C+nJoj!d1IEu{Vr&}mXUY+?_F`~~QgX-jel7zhiawfFY;X1&vt=6c z{ax&@E}3pKWOWy!kU+@|TlL8+4)iiI*5nn*LhhG_(oZV6O{_&t*EF;IW2F51uS&&! zUYWQ1BQ<-+Uzjiht9SOHIqY!1mPA5+qOZ!Cm+uS+vfZ zSx+iFu)#4Y+Hq0XZ`x=|hHX5YlLj-;g2EU?BF@{6c3GDoU>lasN{Dq3WNj-)!9I+b_Ya`4{|>`%=d`~AX+bP#9_WnuCe z&ZRSO&rea(#Q|EM>dNY}^?KilF%GV&Bz_U<3MzIsCli=lybk{>jUaBvCzJaT++fg} zJm)_0!KSOej5|0nFmJ@Og{ZI=)rkl3+-Zu2zD?D@jhC)oVmq#&rI$wpeUu-9i*8{o zsN0{~Y=p;k$9&W4r^|efToVz!&fk&U;iD!yI&iuv`7iT4U-Juy(M^^xV@38e? z*9}(TUwJOKBY64Vl6^QhmZ)CF5hivqKHN*42JYQVbo?;M5K~S6X-BZ|zAL+nTnU z?|pSx=tQcrj>)q3@l1~U{Q~S*9qsDN{eG1JU5yEiO^2HUiL>mU7nsnBt1jwqnH$|? zpIH5+d>aFwPacCjGwIV@gs8MUW*k%NyyvO!%EAS4<#*V%vM(XDd4Xi*&tT7~=)n{z zoka2+-Vf*3>6+O&5J-BfiqYo?BBjuBjL{SGTtGl?D%)Y&U+s;20UPVqvx>+B@2~`{ zB1+_vJG7^6NW$%;Ie+H5m-i(Xaf!MD%`<qyhiIJUG5 zAgcAvR_yS=h3QCBepR@6$bd;tw32?8P!vKncwkUBV~rG`-V6gKycRej+ewzqyQ9lf zciHAiSte{cS?kRF09?9=qRi`!laVQkFh3st5+f_jS~oNI-P_KtQ&RNev4;#KhPN-~ zw2w%?YNtjDG9s69RhKQAqhhgZc`M*Kks)J??rvi}S^{`tZu|CTUn3V_DtHham8V05 zS>GtoxpGE)!=6sue8J2dJ$*ScM4$EWOQv)!0Lux5RWrHh57yc9v9V7O3Rw>b$m&@|-3=WqNk)@h zUyD9BdwQW5a6>uJqhz>IgveQA#oprcK(Dt5@N;fWMAo zfjMK#7*(~Ge<;i*Zbt0l)3sQB{83xH0S6VUZ^=i7xJb>+XPJqz<&U>Ft|Qv+{%k01Y?`zxKX*Lt{w$4l!KJw$}sB%728ab;!dOMZut z5y}pITd(xBC!bxO2l@v>V@_%^9+pGa2 zHlg~l)sPiNuBPAGndScJGPentiIIWDY?AlMFJY<-B1{#e=r>pPf%!WoTBToa2#2LY z5l~0qdF`b20UAN}EwT!WB|#k~a$83UzH=r2VE6v3Vqoi|@u#69jVUni6oSp#4`U3C zW4gULE0lVs31Lt(uMgdhvqh>j?D zX7-}Ci|>z#LPDL!6I>BTM|KB;*NwV7L&ZTlclWhW=gg)A@^+K0{6O^G^|2=(r|Rc* zqS-%29k%rZS>+8mC$tY~gCvO30R9OMOTT`0_ zDfvE7|4eMpieweG%Zg-Le=_)~2#ai(PRz*!=%fyZQr~k|Z#$c0IHxtmUeDp22(-YwDF=s035tiaN6DYe3@t-o}qR=6;0Z}u;*SxdWUnrTpi{4Oq$ z_j-phfsQVV6g>6X;hFLX0F#O(O=>>^aQCI>8}y{2ig|Epi=%5CV&3Y0kMtavnr<}a zif%M`grDMVt8W1y7`!!<1lyAkeWZvxcjpg4`NHg)MWhBUL+U;CHmgV8{WXE+G*3(} zT-_OMlI>=u_>%o?k}Vvpy?|s*G?5Z*ht>&gQ1&a`s!R_J&aghy2=Xfxy*MEOq=?@p znUozt`l5TEZdAxC zwXmGMvI&y;H{|vNzu)Ray>>>frA|?z;sG_%5^OpqsictCt&y` zrr9<0Y!xTLq^n;RlVHTd^8}ePs!M=mu_41Rn;;tanHU=`ElmD_RgzB z>*|BAwY=b*<=$*{*k`5yPpam8pOHU{@x(efwJI%@m&N7kz3QkQXd~6yRX<(ZV6_(^ zO!%bR%~;>+e#Fab8os)of*Js7sWV4aSireNmr!OvWSkc=}FLwI)^b-f{aMFp-oOGRs(2A;*v#W)}zWR(q@6tt+Kmj}bD%qJ_p@CZorG+bTb<>R zM>hhtc^GF(f-qv0-k3j=<=_05Z#XspNS%xszzM$b2Q;9-UfG$&12wzbRhx+f`_jX90_@>M>fEmm0yRY@eG~8x`eF6L)YrsvBJFy%%c&ZL1###%sK|+iA1;A_OyDI#7wT&T^c4 z6)uC{&SwIKgKCQaCMN?7dJHNw3FnCfhZ?5B{Zux4kINtH0b-vsR78c^FFzC`Qe+U1 zQS|UkKbd|bA1{cF*N{BUY&uMz4Uf*Gny^v(Y#RraB$jBDrBUU2iS@w9hF~SwN$Heqi<~@3!R~1JWFceL`iR((!q0Vz;D@yX z3KJf$xC=E~duT4&6pmfzxg$4VeN4N>70WdzBGQdyLVjc0nImvusDz z`_mqe3;9|$($O|myL*P-7)?O3IU~@sU%Nc`o;X}X^ca!{-v}ajZ3DeFaI~{|f5w#y(8C;ceVngC zq7vujPNOoUT}D}qyE1roqej%1Idt- zB5!Bb6U}j5DM^BTAWUZoL%foxU3Z9nt}6=?GciU0thF{X*b$6D&KpTIOyVe3^kh43 zUiwx`95+|oJIIOvhg3InTFlQ+uge@{$VHhzb(fLZ%)VCyWijr%K?ZOtK`0DUedZpO z?c#05q~hnANtzfy=VZH{f{5QrN>C+U-5n8zR zyVSP*Z(Qfnk|-Ty!Y?RaT5}hsBi*1;{kQ4Y^gIVa5saYU1P7^?`wjHm>pea2rV2C~ zxvP511|yt-ryrKHA4peTINb=z?wgM?K1tVxzS!MMXV52cPplB8k+)y34V}kbCf2l_ zb|ZNTdb4=b9%%pV|C=B&hHVKLl}No>X-H+_hTLtjqQd}N*vS{>R$P6)YS|4BM>_`6 zINKU20Mk4Es4Zj_$KAAi&jbTBlk@Gfm)>;5@#Vuyq7;?K*_aHUWG zp-h*%nI#v8>OB9$6Kbkf_EyGxW+lokXuusDaWti=Hc#!%V}c?nrqYlO_-)mWx&q$Hn8(p}xgg^D; zIf2K|J#`0oDy6*1d2>$8x?Woux2rP)GM_C%v)KAgCl7f6$wEP2PJ=I%5Kz3%i`Vr>9?*=FWIidFWNB+z z_T7FFp=@W9a$4$~G{CM_L#J-TZ-ITuVr?6blOl5nsm7lz*;ql_yU_jnY-3aC2*M73 zA%{))2I7GhV`Zdu1IxwgYqtY+g_6s7Zz^w=O=HYQv ziyaNAudiqyWn5yiw5RMV;$z#!#>S5V?suYbUw4MFsuiB77Y{RxH+r^OVuVA1!(<{4 z^jc%tS+bUqf?4hBfslf*?{Pf9D6)a!w`gi=+B!P+E;qfD%+bA<6!CdIh-au|-zXED zs{z#1QQ&-YVg9GEP+zAoW$jrArJrwKzboRS9aSwYe2ll_~ zr%H%t@YkqSI+Th+`MOoj#(1pTh|n*CUwfI$%0P-NNL$omnxLvWF3}i5p*(CcJ4E|D zDurQi5R;uwXPeZ>?X^xoDB|tfuFI!#Cx-b$1HhAk>)nYwTrAt6nCpk)Sm9a=1b(AE ziwpF8|2Zv{(eTGmQUXxilh8o-IZ%Q!KL3u1Jgo5*n)i~9Jx)5GkH|-)Q)V6v17kCX!G zJL$XSB`}X$A2qY^zHmCb@=Tp89J|2L3Kvf3R^lxT+O`PuQkF}%uURNEjUC5x3% z9ESopR(T%Yg>wUEvza=u-k?SrZ*C!63T8-|8={KIJ8na6@ErnW_&y+r?ry>boa3X? z6pVcD1S`MhD%D;(&NGczI$&sh4qv&S7KO~z13##z_S!84D0 zGIYI8#R7ZeRwh~fR-}=0d!vwhCm(PPcWZo#_%u*??YZ>{JSI16LN8pTM>~6MMHfhk zm6EKaswr&YKpF&rU~O5EiHM5%q8AhtBqk*x)^y~5@92I^{P7t~P;u^jz8o*y##}aE ziPA`>jugJ#3RS`u&9E3h9cB0}Ii^t}SoAwn&kLuF%KDQtRx-|>+7&x`B5nW97EDQ< ziqpa_r{qzVE~Emiz9B9X@Q22%Fm%?RtVz{l+hdy-D#PYTcVo4+YZppiq&=kRAa|EV z#drRRHu>byG9g2Py8hrsjjr_LzUe(B z))0$)$5rL0V%#&4>e~uQuddL?%rv?kI>rKR@6x)WjW^XwhjR@*C5~Z7&AAv)EFcsp zi!RLqvL(J3NWuS!s$VQ< zCdz)8m%8~^&=VK&Po--2|Lka;M6aD{cQ;N_83sJsQHA)&vv=#<)Iv|iR#?p?xrU9j zfm6D34-eQn|M}3Kr+(yW?|=1AVs+ zC3$Wa3WQL^+W5u*97rY#+oEcjfO(eq*oP9JqVA7J{HlMhbqE;`Ts z&un-*E*|#3PyxWdTmMhk4Udz9E1~{71%4oW=eKC>|47E+>sP`=^MBg<|E`u5fHC?% z-{4|6s-`}_y7L@y0czG From 6c801cb4ad21c50e8ad781b9e1f51a2da10f2060 Mon Sep 17 00:00:00 2001 From: Benny Shilpa Date: Tue, 17 Nov 2020 15:25:15 +0530 Subject: [PATCH 042/486] Add files via upload --- .../images/quarantine-default.PNG | Bin 0 -> 186402 bytes 1 file changed, 0 insertions(+), 0 deletions(-) create mode 100644 windows/security/threat-protection/windows-firewall/images/quarantine-default.PNG diff --git a/windows/security/threat-protection/windows-firewall/images/quarantine-default.PNG b/windows/security/threat-protection/windows-firewall/images/quarantine-default.PNG new file mode 100644 index 0000000000000000000000000000000000000000..4c7a173be7db5621c2d2a19fc9b4e544790b61b3 GIT binary patch literal 186402 zcmZ^~WmH^C(*_zLxCD2HAvg@KgS!OR;0*5WA-KD{Yw+NMy9Rd%?(TlcIq&)I{c~rn zy=Lw1>aObEE%iKI9r9I990?u|{@uHGNRkpFitpZi`2FtP`z~1Mx0Jq|mzcM|_YR8U zLhmZZ2=?DzpiBg11>e1^jzW0S|Md0_XDgxM@a`QJ<=^MMq$0)HyLYbzk|Ki2t~y5< zFnZ~|84X#-Et=P>X_QMf+pAVgg|}$tu=$@!GW;o$mJ2+wW3}-lB}fL}=eUG3L*w7B z(l6O3g;A8G6e0NU=X$&R06G?O$iCjf{=q5xM?(?_+662Z)0U7~e%` zy>*A+M2I0m3;%%tFCU*z%_@)L(_(H+f=ZTYFK_X8nvTQ+OLQ>1^)qS5e4LX{!JtW* z-jWIz1SLr6*(&{r{-b_vJLc}$V>@P%P=H4T)68MhhO$1*<+@t$S`BFKv3<@v*{A+_ z!8ms{%F(6%*<+@=Wr3CjbH`($Of3MYc5}KTUNF3QuE(ARvQ0KwibA}!>E*Kg*Njul zoi+Sj3DAK`&IqWSDFM>FN-uL=+V!Y)k7IV@-KE@`1PQg7x6FsQS9b9yJy+egETFJV zdT%}IzhJ)AysLdfOff#B4S6-0o~lX-Rf7;CU-~U(5f<8m2zG-|3*A)^gWM`O*W}+c zmmPK^Us^uK=$ESXg7Dt7`q2K>g^zr>auhTgc)a%0Qf!gdXBUX?t@1?w=m2?jsqq0B z-v}P8|0|G?5_4M z{dK$;#<*}pd55?zB5T-ttFff(mFeN2>7m_SrByBYl!`d?7QHZ3ccEP?x%*~Fu1Vo^ zTxGS}4mrrJ9s=}e;1myZb50L+LAZQgEMo!{XVo67XwE#|T2yW*gAY`gpL8HJ{K3x) zVDh#0w3H3MMU*0+`4^jn!64(x5#{tDPa}NQeQq^;;uDVU8x<85!S@+yY51_}c@w6r zcoAZG6Y2Prxzf_oejgsR)*fb~tKX9T&Edi}FL;pmc~JT)u;%mnEZp~x_}{!8?PAQm zAY$+2KZT$FR`HMgWt%JUhsE!mrihk>L~cmOw=broAwV3lLZy?Sayj%T)xvXa+^;+2 z7p{x#PkiLdF>_5DoG>(28>%nu9KNi@tjH^6SDALN6JS@RHk!5DB%_1|hbBUxk9ePa zT9zHs!pk#a5SwEeS6I%4Tl?{|?$}pNdCHrkM~8Fo<^Nd#Rrd#lNS@{5VGjt*5Ek40 zvr;a$b1w5rJ}RywJbMab_voG8PCkNy)-V2Dpa~H&=Q(ocQaayWM7$qZ_STHl+fI)o zUv_;sv!Vh=s<8H3M6H%bQw7?vgFTemloFR$U-=A<$bDw7#vfE0PfBMjb-89}KTog! z+}=lH475+-$f$aH(L0{Fr;8^NWM|hA#*qqHg3nX3*1AL;fRcF1$j>;mt6K}$QVWX- zy?mgSK+l#>MH7KVO~Iu<$1hqa`%6quI(OwL$n5xaJTb@;Mqf8DVNs4)Ws^&Mx`b&q~IN%Y(4NMjsiv(!$>nC4;1hF{cWMIK(p$C`ht;)1{ z`{~Z~Eblmk4Vj+#0%;l!B1Xku#4+sD}NgX{gTfc z*vTNqsA@TtQ!%&9V#5%b>ij)lYOlWXfgw zs6`Q|QqhWH`B94=e!GnN@U zdJY!MH_VnVnlD=Q^A(gfio&RzYoWc=)@5|_~|sEh34=*C(}X9ty8 z27~pQPxrOBX`oQYA{8h>))K=S$w&msX;$TOUwfW!g+&TGrL2Bhf*)?XcQ#HOaZ%Eu z1X3c(i%2&~1Z!hn{0hZJX5T;XL{=RSQmI31-mT3eaM?u4REVJ{Ld@xxREdiC=`w?p zZBxpj#=%$kGK#D^bg~``PIa+tqv!d6o@jgvZ01#o=gwbrT8;77vg}71=s0PADB^Xv zqbdy#eGMWX><7ms0JO}i2b2L<;ZV5*fD!XCG>OOHx>DHjv2viA8|JN;68MLUcy{VbORM)OCGzfGDE>^qFi^@)$I!A;M+hbdbd-DcC2BrqqKSm=`GiE{a!yf zCF%Gb!-s@Jcmj!(!@#!hQjdZrv-Xm!Yb9kLPiTeqmYhecLuPyK$LOk@g&V2OvjLaY zeXRs;mSn0-Jbff5ux~dub6I|F!pfjMc{14X=zKyXZH7g3F`sLGP7$3PHtEH!w4CCJ zWpPTQwOa?$7N+%gA%5~u`ug=u=YwWX@UO73W_xFT4awQ(wavhB-QjDNLMGz_46)u+ z=G%tfGYfvh7@?xjsU0MHw||KD3UdrUw@-wR(g-$rm|9ro{DfrOM81E3eo_~~NsS=V zUh%rBbK2|`wb0_Rva-6mYO%#Xniommq}e`8ouTtKCHxszgocVu>PI;LQHnZv!ZOxY zlUnB)i|?L;Wji;l$w(2|ZAv^2b-iQ#cKsTcX{kFTD>?L+Yjm_6kA}+_#f$+!Styq_G+i>4%tnuB4r59u`RD0$Z79Ia zj$%M!-=p8Y04MZ2yGAN!ee;jP4e-VVAI5DY87WQT5fnZE*XY^&j9z27kNnZCgx^0O z?_-n0ZZr#9)Y1GGH1v&-DD-n`16}%_GL@;$3U=-#O*5<0{4(i-4x1R)9{Z}S)miI@ zZ+woK#YDYGBj@V&HUQR@b?z^MJ<@)*rZiKMxDH& zB4%}O*E2+kdkKv?C&yqfo`{5*^yR5gV@v+L!tGcvZqM$1UfDN5OzbZ5po5EiR-JT$ z34++^yN`Uwh!VIDAN9lDT{iDo#o6P=JJTYqm1AT!9v-_)f%cL-Jt)0K>!k5*_V;p& zim;;;0EmU8>mdIJ$8OsFLo=&<(aALiv!f&?$j;|-MPq*4hMIlE^@RJR=_D}Tu# z-m}heYK}aqO#TA&9mE=1>@T7iw;2q7DKz(f_Qe6T$vued^cFsOSaFMAWzO;eRyn{ExBk}WS;a<2U-*=NJ5JpZ{)N^L zZ2m}53>d=}>ZQxLLJw)AuNPS3z;C^Sel)c)PuvZfZjeuqB@DvO?BMs|Ux;%Uj0~k< zrq1L{xmxnV#IVsA$499wu$xv-KUWZuY7-X93z3g@PQ#IG6kaU0`JTCBy<94PefxWo z#!K!&G)o+4QX}zgplqw}%W*|}OI-a9)?xx=JgBTl_dsCMs$MF!H$rvt%{RNOUbjIo zO+))ldF1L&b(|L~y5}^hq#*1j$~bF8D~q3{*NtyeGhjg4J*s^JA)lZef3yLce!tzMsi!zN?b~59iQSk+!sp4Q8i1muRu2A^r5rUoKs4EFDMapyB-CHVd3Z z1ud=0U0sOGP3v5Beyyg_>_}P0ZmlogsdF&0&{K%JPm891HbtfGq7HQ&Ni&4U=Wm>P zmQb$0Ep1bC7J+2BSRZqomRR%b3Oc6vj7__tUll(pt-Bd9msACw0@t4|%LY&(n+O3F zUhq^T0h0ZFY}*wi{Zp!Ub_T?Qxb9p*cCV>wr@ z4Yoa)({O82A6KJc;mU%;g?oZXnbw*7{nslhJDe^)Lnh4pi^L~ATtT8RnoN-y0+tQf zLBUODPwI4;G|rVj3uY5W(`jocwkeO?H`r8vmKo{E;34b6J!ZOvH0bE`-lQtdR(=~T zG!E1Fbx9!#fy*xxLBpoWEjMR;Ol%)QVEk#&`(Q=zg>gq+65+bQ%U?c~0zCZWBxY9HB!^v``IppJvD)jNWNVB}H=XEz-Sx7z)MI77&keRC~GXSNn&pidP z@e&Yic-*7%E3j8f9#jiVx|S*9-~Md*hM{u`!|Kf3KV$cz>*{Dl(tGnjJCTl=6g#`m%) zW|OyL^6_;ft+G0UmR2O8p0FVgtw8q zUlOib*Lk9F2f_Osq<4n}gjSyMk87-`DQNx0(@Zj}e~LZ>%KR$g(&pPQDqE{OQFxro zw<016e1Vy)qyYm1ah4CqmvkQc@2psMV~N0|GyLYA7 zZdV~Qp2jy+p6 zKA=Q@U|y$Ezl!LmHbv^>6g+5jK?ytY@Rx-_sr^+K>@=KM<8)6;w|bg0n%|!PhHIJI7j8R_O1B=GAS7Q<3&bCa3yC+yDHFmV8`RgT9~Sw5)S3 zW$ARbCDMdOo*1s(d^}n_26(TE016!^b(F@tEo8Ong@E)7{>_G33vGLD%_b}TqAa|Q zmEU?cQOa{3yDXA94QXl(7prcFH%dyYM{s$*oAlGHdRj3q^{w=&Swm9s8G-@LP2nb) zUr6^i++@(0Kl=Mxl*2{<=;7b-OeDG|zuJ-~CNBp`F&k8g@-@lYl#LIUlOsMN$S29-^|`*it} zm{MU*WQLo(IK#TT*Mz^*lKVyDtft$%5Z5?Sf7hbH+VJ(=P&xnRGKWu5LbFx2G2T9X z84>Gd71MR5<qBQ5QvW*S&diqj>-fYTWm)Ps0 zEo3%*Kk{^SylmUc3N~IS)@blGWaB4@D~e6R_T81BjT~`Hcj>3sX7->{0*L&nIEW1q z$5OIxPr$EC@2tzO>IiKIo!z%+4x$Urs0cL#XB)mal6A=A2XcHf zsrG0$-PX7z#!Lz8qj#8x^>(e!?@V;qnZNbYae=#yL-f5pVUT!q44v#Sc{~h_e#8%j z`|}?(&>4tBKBs^z2VmBp`LF8Av#c8UofreEm9$JvqW&{yILmn`HDNfvgIExR#%cnEI^`G=Qx-1&9IZ_^TkG zfWtd04dj5E6ah4#Ug?V^T?UUaoywZH<)(3g$T>7CuCsOgLYF(<9>e$zlonRIv{17Lh55~Sa$KHj z!ZnzK*fsW>lbzA(%O~rW8#3?$vV-0;a=n^{gf>&wxnzz=@){Rp_KocsZKskFC>tkP z`*>YlCs{$a<8w~+wC9txy--B7Q7wM@C%1YtSR9}ft-92MO#KU)I564Wp=C%7qlO8_PZ%Ul?PHYpnkAk46ZCJjN#m`fTc6Lbkh^{oRrX6i5!;QLTnN@_sj-IggC zSr;ry$Y&PnrAC}w3ZGJ%A1&XEHb@O<7})&cC(uhO%+`CF*_7*M9e|Wb;_2~{U|6wT z5)TAv>eyji14;{Jpj?{hf%2zZejzn{A?0L1_=~GO3&3Ij(^Lw#8*fu>5sR7Q2RFi* zEB3mn+22xzJ{Wu{YPK);amgIUh)q+X^I-$&xCaztn|*Ura%!@SGkoY0M4*_IT8F`* z7|De?=_XrEY{{Jd;=K@33S&gBj8S#-umz>1!OrgItxS%9kPubqdYdhgN6C7Ohk}S6 zht(&7L3y;emZ(Yh4JM1I`l*$v;qQy7Ig6(yJJjER+zHc6=y7=UwKoEkLFO%XEzovN z%fG*hxj7(tgt=6^t!LdG8b+ND9H3()-s+wF^lK(8*U1W{w`Sm2W=$E9N#O+>$Keo) z71u=xcmPu=+VoOB!5#?`Ee7!#ZCz8v(Ht8`!fuX?;N%{ghlO*hc+4RolZo|8tprLZ z>x)oDk+A{OxAw7_*~x>-;8kmWwIvOW9mmhzR+k-0FO#A-RfqHm5aaZj?)9p82MZ7D zY@+x)(?&h*Td@<<=L{a?igPDCWD1jH(0CQ0<|jH==n~Vej{a--Fr1 z0mI}Q0!MU#*3CRJSGNmQfr0vxEpHU$9x9RdA7}pU<*rciwlS2~=JW<>-bML=D!+!8!g63N(+GUWy@^+?9S zwLLrg3BcM7Jjadj2vRa*G6%BZ>REcQf*|vf2cwD1i^?+Ztd#ef>J2ubQJxRlP5ilx zyfg{;0P@t{Pqf=`8*VsVy>?mq`hW-WDhu};jn%28Nzz+D5*ssEHSrlUWaRJiiR9{f zp=uv_26+X8u)DIakPLl3G{xEMTKIUSVC#7L?&@gurTIKC61CBbgQauk>5pSitQXx? zQp#@hk?LV6eUTK`#*kZ~XKJUhToC|+9%b=@VZ|-$Fh6vcQ>XJsJu4v3rCY}K+i>3J zV|2%>ShgIA6LEcKDIRI+%||5CKGy{O($afP5AeWrU}pj{p|+W`8wV`A=9yA13XatfH4gc6oH*O&>q|+2>AlhFM1a!dPmmT zdE>$36d!aiHmq%OM2|&P6+Rgf_~!GR$tZXUUf-`fyE*eGr0|AOAeU_^u$i|%jD4pV zqjOWpUAAE}bpEw|a8f8vxJ>pu@jLIq1SMl*l}a#KhOaIjOUXUkKUI!{fti(huxO&M>|D9gu+!QzU*~+ebc|POF|~q>P|T4;`;- zN>!&dL2EGbeTWoq1`*MWDsmQV%Xfxo-({oYys~xJPYAl(*J@Z72XXD-^-v*acmCn4 zboEK{nT~luUHMO1iMUm`<@p8F%w*KjOy%DS2>7a^Fh60|HHuI`saB2kRQC8GF7o5n z@wK@EblHLw78K%JAz1?{=(q`4lHm_s1$fCwrMwiQ-LKP-@$PK4gu8R4#usPu3=h@n ztr!zGQK;#%Fs$lzTS6y@`HD<$!SXPE$hbvhR}3)l6M|8$Vy&Nw{4mr`%C6gWNx!-` zYd~jXSxUwx3Aie`yM?3HT9>kS(3d2Hw@zDsI;EE#c&$@5SFi+ zXcablIt8Q>zcXk&DrI!SQO&|7nd25(GC6eJBE;Y3UnQf?SZani_5Mkb8dNEWBBrO6 z4lHY#<94d4^LRBZ&XKo{G9aZ%K7P|64%pZwUkGX`KLkHWnt zrJ!Q3z5HcAfGgh@Pq6X0v{$*>zw=XT-myH**${aXJ=TtMka7 zyP@XHx8L=CMy+7Htz&4VpZX-Y&w#KuU`}hVVr?jvN@oXiW_4}3@8rRGak_`}tF0oq zRK65WfkYJEjd+ivb6m@_4ay*HgtL6oCQ&kNUUTI9L5FOzKgQ|YX)A%hyJqwkf&H%C zW5A&QK#y7gww^2QEO{x9L9~v=r-C$&8mG9eTUWjaNGX3oRwD~82YF(7x;Z<8_7^L; z$re}4vYSN3{qxPl`prljVQVqY%W{0Tm%)Ii>k>6Ls|jGD4Sx?@W!OtjTe1B{oJr`z z?secgtipIafX1c0cXEbjUU?adS5 z0yJI&Rd{l|W8di5k0GFD+F^;AWp*_rNKBf0bE-R-mAksXfZ2Q%YBHTHTt;V^;g>m% z@XdXkWEA>){RY&uNm(svY%4$g`CRmrA^m1M#ZG`!>P{0E}(~2o)(qdt0_b@pqRvM&FUCj1Qn{fO#RGeQmD9 zqq$Z5)y+S^Rg>*eMNt*jX0$y>(cmANSzGlJ#|dkDVxWqlvy0Q2DfP$1pvfgG{9Np3 zHkV?^34G6OF;rq@nv=s4u8^cX6reV4B;+siVNvP}udBab|FEg$zo&^W-vl5@NWllH{;1iarp+s*j~|bj=wuI!b9F1Ak7cIwFB9InQoF zyaKUa^hE9H?~lPV?xr)aQjZVriGHX@#Uu>j(;6~Zq}z!|Y7Hzl9{t?`uji=xLDGRy zZ>;WICcHj`H|b7f_#Psc3#=I&lc$oi@;MLsoRUeuKT6SQ)Hhll6>MW_kMqVC1Q zP-ZlI&wO=K-|8Km6_PkZaP9IMU1vpr0OM%Wn?EOZ(M=g%bPZ@vmR|bq_$bii`<;=36g;{ZHsbZ;53<(bq z`XG+ZLk`9rAzZ-B>hl~N-W&?awc)W4;T^NPW&M1aVJcc$9Y7=5VZj9Q%|Zwv`7y5# zh9qfqI8ho|oTq6_-L0d{m2p8FM0RM#@z!-lB|VA_t)2dD|cjx8I|Ob{R9Z@1`wBgGpJdCfU%oZN3!7 z+$)Ru`iF;8?y-MOq)F9px3A=d_M&C^MFXgO4>E8sm5I*)!YArRXE)K9+H?R1-pI4} zE#H6LsTiZ5Q8}CVqssITaDKe@8SrnKUKi(jQ7z_KkEu_TgKV7>k}lso-o}5&VE&yZp0y=`>cQ zydNgMC~Z^O=5--+q8ka7PI8QVz0X2T7kbJp4SPouu6Ng6oG>APaUkEJ{vzSp`Azgf z+$%O`lBhNA21CZ93RKKm#;uU}9t9|=^fHsC=luWc9nv&JGl#&MFTQRnC zrxsk>vMQreuRkulPwLcC8+*L&-39IECk{I>^je1H!B`U6K+Yf#SsZi zJ`>E#GU(*%-7_@!I?#<_T9c==!#$%^lc{inP!$W@$sJOxYtOZn6X(YMsh?$>?C z!E6hH_**0bb?retOJ1`}hY)OwUyWChu0c~is>w91EK|%FL5+Cq{Ez${wys4u^~6K{ z8s}eD75Gj3?;9>(S6}3p+D)1=$-fohI(vW{LzV2Zj&(;8MoT!y+td(KGS*$@j|juV zJvjNuIeEO-)6IC)(syA`kD5WfJd+&2Z(Te`nB>c?MXxS}hRN$!>9q_&UA$J#+yu41 zqH1JqYCXEK;M3@@z^enJbFyF^9VkGO<~JXXRZ4oa{{5}Yj3iRAX16)sj4>Ay`BSWu zXg8)clY3mdN=}tEvh?RRIXP=}sm?a^^gSSSy>HzKV=l-7?|yEr%VcLan)T|_$UE}Q zxqrwtLUY6?{C1IIHyb0It1_oX+t@yn=vY+Y;^hpyXtq>&G;<4OHJE22s`~hSZSQA- zz9N6r+?!_cUV<8*wokJl9 zP5u+?^*2t3{Hx}Dbw3dgefG?KKN}kx0iQcY-2QYV-~R=rkr(s*e!M*eDG8{ls3<5a z=YOjEJ68Tu2@Y6N0>s>odv)JcAF*d{kQ$cwwnYAymp6f!2X(a>1@b;&M9t(cl={E) zFM(0j2rookuyw9~X~=&Rt!B8un*N{4%ac}{_k^6AD!M+G|C#F9>ef%R=aSdnuA7DW z%)yj4I)Cg;pU?JhdH%rG!@s!=4IH*YL1-Zl?z;s5?9%Y*_e=i@u%<>ao_c(0ZfZ&i z4u;*>*a(ziB{#FMK+q;7B_%$@G-bO~yjP+frq-VaQj~yZ-dM_e|$n2 z$>j6cyII*kJVfyHKXv2|l369pD)K8lj=C7S3^=ls(myz!v%7bzO<{3ih>Js)ICuKY zOr8ZBhk6*D6@?WMZ?iUZ(0}^}av^2ULKe)7zv@t*6M3)X;WvK0&7D`0wzILB{)Km7 zeFH62TADg$?xIhQJ3K~&hhAOw)S*`gPB(7fYs@qJqB5&5<8*GEVbAw{- zD}^jXQ7uP~0KEB#b|K}6f{Y9;ho_*$J?)JA?*Mq48lOIWdPRJ{5>cj4CBJ;jxy_}< zeCg0&yIEen1qR2)#7N3nV>P+q_DFCdQ$p|SXWM~jGkxNac-R9 zqWMJ5$GXwXk))G;>TmYZW6ab|5yi@BHsVhF5dy77lFhbW0S+51!IzOhxpKxw zYDa*UN%VG4E8}cFA&KyY3A7#T_b3=9`LMV)ETDx6Q=jzPI-CSJ1^p97<9RsX=oG#) zl_xZxiAB}#)dt>`KKtKc>N$D83u|h__e{lc-Xfl{wPH^_r=2XDZWH}dGitfm95(79 zueh|{jg=%4zal$6@$<;j2`3CW`#8Ki zPij!V7o9dxE~5x+bv)J{DD-lQpCQ;Bs77PAIi#{Vz?sa0Hlyb5X;Yc;U%88dHC5<_ zCI(yZJ?bt=8w=CjuR)@CDqE7n#?z#9ie;eK8Fo{CdXr7X;iln7u>I-(;%zx^salSO zfEAW}KVrWo=x~mV^?Jo7*B42t10X9Q1;U-*GbdZBTW<81E)N@Ha2?&QpNF}r!!O)# z;>4xN7`TGGWDAbGOQIw12x5!EDOn~%g`uh`&x{4nEmUcjhh9^1H4*-|3}rdSfA?mT zy}QlvmgxD@9~Ubjq7JKIE;=(MKJFXPdeP%^39<3YsPuUe#8PwJyT-2dST`Vgok7h7 zJ<^}tuaDnfH(WHCUfB_O{R{`7S|AG(CVb1(RuLP zCeXRY@_87Pvs7CfHu1Sb@V-BGTV}na7;o1Q)7X6n_W20;$iUs_9R`!t8pZgHFO^vz zSLWr)=5ENvr_1LxD*0Qq+*ot3C5?4amr0M2a@i&^fUH9nj9Rije?;of2^>iC`KWv6 zlLZ#MM8%Vqvu{+}Atuup&2+|-jz%QZU8p$Cq zASgT3@7T<#yyv8f!l-J|OKQXhQ6f#dG=2QAy1So~R}r~W$k4pPA0l{B=-4ckV5(QC zbwnF!>*(X#(-6n^h@vz(FMInZNbAG@)+u5b{wGXRVNhlTaQ4NWqi@iSLPm~!5cP+{ z(TuiFKjlb`;AtNit=*M&Dnp#BO&>qZCE@FmUGg)&TD7?vCCn0e$Y90*lG2JY9Y|8z zgPY@d#~R$T2>T0n->N+C@mP4ivL)ucnvL~nzN-tVzj&XwFXv~Odaba(n=ovQMqHD7 zYF6Yom3SgJZ6X%A-0&5>%li{0mAa+*9Xdk4c0Twbz8~emGKF3*@4X+w)-HlT{5_|yyD+?tWx+OS2`_?9F9Cwb=CI|d z(5q$bWE)RtiF0^@5~diqV@3e49r33>CTM-cL>oD}&+%((%qi(iFdzMNlrO+DdZy}#e$`yB=$=L~E~ueowpj{bu$^2G|8Z{mXS7 z9lwr42UrPA-$M|SS#Z3zjXm#|%#`^a9K5MtRB+ZF&&Tgq%Yrx;R)}E@T|qV^h!$8A zxPvlCYaKN(uW7HhAo+{419)vx{_w)@QpAyTdsJs9!hL#uob!P#CF$hGDeCDV`8`*g zr~8G~v?2a>O36)nfLeye=!Lnp;kk;mem3+CTkd1vJ(J-tE?Z7vIF{Q#R*Qp&J_}NU zs68_2!y{a~%!ZCQcKT$glr-(SRtrqfs?k9W)=+05jrB#J(|nM0AD?8GqbDQ=mr%}I z)?Qu0`B6sRWqdH>IsV-}D8M?la7o%M zQIc?2bkMYs^Ny33R7~9T3CwRxbQ(vboqbkT(r{zG>&B!Q%gvM7R+Kbg7Tn>F>0tz) zw=<%*QD+&Oj@-4)Z{^9)WwswqNQ`Lc>CL~{AEB=;#Tzo1H^61XjSeV`)8jCx_D98w z>+)}vsS%4ZnQk;2N#+Y0uHeraM7Ni84*ZOjAaYY~CX>z|I?Y7O{_6vOe7nPWL%l5q z#OwPam?vaTcObqFmduh+`Bc3J|MikryaqJ7OgnC9&EU#2MD6MDadZJ2cwKtf2);1_ zNG{0YBna6X5&zuoJ^JR1c6oFko)sfl+MfABPJ4H6&vApRW zmD*T@PkfD6ME*h@xNG!zw*tv}U4l?}2$A~n%28~02k7p|4!0`BeHd9&1WJp~H>$~# zO{U~A=g(=d{h$AtpI2{-^Y`}E>+|gz$mr^Xm4gEv6;)7MdpUY=4N$dHrs_Se-lamD z+Fh196wss0ri0EXwROR+=TNU!< z_P~39;d5ZKkBz35*8b5E1rTWOU!`2S?U%O*QDYWM3a@4yI+u8nfKAV}H3QqC1Str+O7* zNM-TWQlfR+FDW1>Kkbi6{V{5gZ+OUTz}W6L+-47_#2e7+e2Ty-*X)bX#+PLW@lb!d zRx{0XLcm^OPf4$Uv^F_|sI-<{(|DNGbA#LWoh#CKGDBiIS&C*t+i8X~Gl`b1UG&Hb z-W@i(-sEJK^F+ALydsafU+`rK-4l{s)Wsz-cLD3`cgg z+!L4qpz|iyX-6xwmRW_4Jf_ZV%uPX#l6P!O?u#&fn&$=dx$l)MkNFy)&Icl*Ib0;C z9e1cSCv6t6DI;++`%}e$2`R|f;^wcQ$exdl zrOGs&E;pr3WK{=zj!3vAvVZvPeB42`@J>B657eL`E2fb@2ar~fF~23%t+|GqNKg0q zC)l2X^hjHhFCPErNGjrD{q9b4VtZBoAvCvpy}{>nf0ilDOB+9+LIn#KEGM0_)hIB{VtacJ~8pN>uGSWDf0{qXB=l#c8&E99IGs&T{ ze_`V&lRH9xkpE)W#OkV?tLt5f5+}c0S!1_>Mh1Isy{*5$|J$X#YpGxVNT0{A2e2i;XYe|Nfx)ALhM(XZrqs@b68{yZ?VR-5*hS z|FplpJO){>W$f&L$;ilp!@}@^zHh${Vqd5TFOHU8oEG zuhpJg`zI$abFh0A6%6dw%L6AXErV~Y;oJQkSKdrg?EiHf-l#bGFW4tW%-=lDM|!j6 z8q1!Sqm9}X|6c)=Uxpho;zakR>0LQcjcr#2j9&ZFx(|~{ZCBR{?HI%{hDV-v&>nk- z$Ax7rJXH<(MMYF+iz_pt^17gBYm^EdY(HzpRZ`v8&)$rgZ>O?+{H-rBw0riav98e2 z=Xbp+K*d?_ELYrowcfY8V|Fb#d-xs4mtj%u#O?XrE4y8MU)EpB8hr67PBR6mcZuAC z4su$whT0qChjb@*m5c#5itN^v(%6$c^mn`urx@UeAzfwkzR*74#u=Sd+&j#N+1xsF0@;pBXN<1cbA~*Brdm;yv z3|W6&+y^xr@e|=}aUH~&jOh8CX`DPV9jLwypqEd{Saj-V-xvL!8uktkyR92G{~~(W zBQ4drDm))hu@c9$b3|w;d}&#kspA*h^gXFpVv&YJWBu0J~A5BClvXFqIHL!7<5DAV2!epU=@^? zgx)X|#SFHTatT_wG(x2*?^5UXv8eiF2}G-YCri-b96=EeS6uK{d{O`^wD5X6NG928 z<%%8qqR)p+MiJDhau2%qu z`9=;8-leuIJG4GpBG+Jvv)&fY0-G?KhBsz_0)KT856^;UpJR!V7hwm5n_o%`__%0B z&odDD>+y?qoFioqI+)FX+4DEhn-LL5R*E;t&glNI_3F^X)#H`a`Iy#dJn-6b#VKA< z_ya1leos*SSBT3;n-^zHs^Ff)46)XUM`O&{ zkYOKjre&8$cM=V-Tv8X={*L6~Nw+>ZAKpCjH^>k5FPZXyY5Hr@)LtZ(b(6iKY5#Kh zI)Jv(Q4GzpjGXt>fZ=WgyYcuTtdVI+RB2sbYG`rq>&NO~P0GDvRhAvprZfC-pt`1? zv+r==i~%=!p80F&3Yd&xajZ~QoYOHED{AmZcvYjc^H&Ysft?F`)#LJl_BFqmgS?;h z>F7KNwzxlCk2H*A_@bmizrGK`Id>`l0f*%ehH7loBNfSR)JtxB@bl{_QDs4bPH@KM zjL!%b$_wsIg^=ygYMMHf{ZfM)A=y}@xhcBP>j$_o4Q3lfKjG4=(t+(9%zrDK^vWdk zMyKco=(C6M7mY_Xyl zC=RBwCm}Fob;pM@k%{cpsU;~n=l^JqeBYV~4pnRGt$Fndv!b+elupr<5hixSp`?#3 zTE9DHN1YoQtMo6QmrPMt$)qF(SYRmZqo=qn1f+BDr6~u!52H}s?j*ZWZ3^tJF5#8t zEW#;$U9VAEr@kH1C21oy+4!3NAo5OO)U`Igwu|VJ}b67t#8~WzqujzX1GBAoZ4(RE(4JwQ5}!p^Qsnmg%RYR4 z%erUrmk-Z7;cZmjD#Y;q-rPv_0Nvg>Oi))7N;QgB+@#zl}M+r=#H!;ASXTSjaeGDEtKv)vXFr=?nTG;ULKZOTFz zOBF{S*tl#q0x{sPrOJ;bLC@18>EuP~M?I47c2hLQ3*XFm_A$zQ+j)0hBYp1S9i^n; zH!rCS>H^SFF~t?(8`CT}&kiIFPFpilY5`2t3Q+MyfrS4LZ)f??M!R+WyM-dfin~K_ zcMC1PLUAJA!F^DQBwSm}u9F%bDL;=JYR=73VUg=+B7!bsl0zx}wLBAwCG3b9mgcv?^H#sx4B(eYYdA^mIa5S{B z%qz|zbX8#=pY&OlrYq)kiv!A&d)}QHO=Ni|%yQ1yL;|J_l0Ioc$4o_Ss1C$h^DWg_ zF%6_!6(61ycpb7tZd1hqy$P1G$18DeG6lthgs35E2nZ* znlbA!LZ<5d+bhPW`i06IMBGb=7rk~e0I@D;EeI%(V?vIIIExb?SZqo5?+zf~)08U} z6oP3~sN!pTGODguZaU`P9T4c%@u9rllQq_{^oQFwCnEr$S}^kBr&(AXbe-C5+PNsV zolxeou%s^^@(NY|=n6 zkHg~f{40GH4h~8JR8plm&R-Kp1r=49KFOh7)O77V_~==xCMdgxiBjFlEXGaRNN?4{yAdF`zvCbDz62 z!STxyfTcI7$dcy)&05c%XsKqy77mge+fOl?h9{*XPFv&K;dpjl@-VziAukm&cmo$9 z(aw4`qFnto&O1UH$nV-?ykcoRCx9YW1ze+z7F`L=l27Db7OTto-&}kBe;nNecaNi4 z^^XhdA<)m9pxy8GxB}Tr+yY}xn6?JH^8o~ETeqnfyg8vYu*PfOq^RAEyA=nr_U~sb zkSX8%oto=G#v6VC2`+9pl>?~fzv~U^rxr;3UEV!7PkF{;144MFStSZtGDaoXG+v#+ z{GFF;+Kbil!$%iC@K)szNvlMbX77lCW@F3K|30z00JTMWDIXVQf6m&hb+>O*&OYQt zg#@A<6X;K>GQ76^?mF?B-j_G2T?^@%rN6|k_FQ4Slgv_S*9z;UeS;O(DJr$I_tS z@*T3M)%li#P5@kvS~%>)-R%uViRcJYvKVM-z_e?8$$L01bh1D_yHG*fpU`(ofM1!+ z`w<50SP)iULPkDa8T;EN&P`^0r_qom!WSC5@9*K1RTA^-LA`sP$_LrbX#&~hl#k+( zUoKz-aLONU*D~m1OP(Ke-$TG>AIB*S&1n{R1I4x8#aVKfJf)^CY;DBj`Srf) zT^}{^ir!AUn*x!B%82WBfXmAnA$+sh-%aY?J9F^6vIpIOFc_t6; z`ZcL})>8OI)`bI15H9{mg_=lm0gi-{=CvmA;a9l6-8!cS;i@1pRMW%cAv3nRt5x%o zlAQYdjGtdT^T8O(YrB0$5ft6D6HeQM_5XG|@BFi0Z#s0o7Zwz-`n)uL=eGRLwZdo4 zNK>#mw;ibCOPT8!Ct2spGO11pbz}pB<~7Sjv{SAJ?6s0!-y9pZYn?LU@hwvh{DUvw z2csr%kAd>GXR*Fq>({XH&A=jp)L>mh$wVLj&3suuacgqVSpW38mKXgZdWfn=Vfg8N zEzIf)+EBQ=vZIRFCPh-pP(T%5da;@((!zBDAeiq5CC@*BAox@C^#oyX%sS_wV&Zbx zS8xK=7jvS$_4k6FTTtD~U5%AKf4ulWJet+OEyF^Bnb&Ef1bC!x53_yYmCCCK@Oq3Bnrtq-MZ zF`~nWkICnHqKwgn?RWA-5uD(7KPG=oPN4r+rrd6;#jDW({<~g;)<)wm=_Vw$QK_P0 zTC_t3tfx45y@|j6E;|NpKjYiw7osv6uCJ_1c$%R=k@=KG)4B*gqS*o!zpD;Y$BCsL zENW5&IH3fC(C0?fD(!boUAQvx4tC(britR~KoxCo2y^Ps<6SA;0zc3g!4TUkUs_ayoP>;QCsI1H& z>P&WG;xLoQoveu~CX~imbr&@7cqpH>H-==T+2nxRBE4)L)BX#-*fd8-zWRAr-R*?W zH|Nhj^8~;4kMthdlOjvqW{5Ah<++J=7a-|n4~1Uq7Aquk-@u9?&*7H%;f;7h{}ew$ zQ`a(wjtne)CCrk+>*%fVeWCh3zm45xB#^Q>wZZr9TLcyZB#Qi0WwFrVP=scsk~s|_ z%jlF%5Mnj~GC57-(r7IWV3o&P7?%Q!D)a=K`HUEKc&3;o*&5DWH57l%loC2K?iU>~ zCi#|+HYwo5kx;e0)b=otMzh}FN7>;SC~CECXl=wB3$H1YgNu@s4HMHrHzL9ir=j*8jT%(0@AOzRTAEiAm=x4j6I=+Gw@j5{$u3IaF+mrcjRq~E&NjZG~3Cw zD8E|*zJ6hozh0!H)2OqDvL#~uh6xt(QL7DANqs<34I#bARr0=RAU1lAh`Crb^4&dL zP_MRJgDC-Rhfa)>k4(wj$M*4)?p{17UwQqmuht!gNVtBDZX~FVGmcwV9>f=POF*)! zuapFgGqvA*9l>HWo@2qbz9YDD6beJ8F<7$&Z=DtVmt! zqBc+0m#Eno46ImDo6~P!4558Z9}6rD`li_)q>57hr;;k;VklPARDDyv3!**CCI=BHR~s9W z#CyGW7}F*Et7cxtE_PqODGc2ha3Yn5iz|9q?&0BJ7vn#~+&6-sketmno)@>so_`h z_Q8DMlk*fEnf2O?;I`Su6RY0iu=>N9yibpEdTG%CCoGJ6JmOQAum2P4-mm!I2kxs^ z1H{+26+V6wKQAbKZbE{}-ZsuJ)*|>5KpOq=C}-K8H`ZRa#S3na6?*$2U>0Rnt>Nfy z7x)~cDN;A8)u9HWHv#!~h$*8qB9+r5KD`-cVHNm?9)8eY#JGxA4t%b1?fZ z)t%Gv1b%raCcZjMpnDh(AY%vr?0p*W9Y;}rOPkpF+25x3z|i4+_~p&b8@j69n*TN4 zOrsi*fUllqEIwslg3JKHP8L(RuHkb#Q-Gz)w<8GVM16j(m4Bp^FLx6G*sA~Dm${YjX8b{AKrP#;i_vKu>Zt zX`~S8^d&8pc<|}+Kvg&FqfLEG4~oE0Gmw}8%9}#&nVsvkgMKk#i8dOO5MsPlqq9*JzUKS% zr6OTuM=@}*`rJ37Fo|RPIp!3U5N4>UNlEwiBGAr06)~1)IT=~l5ZGgtwSNh#YjBYz z{y2l+3khn8V{x|L}V&vneYbAW+|IDF%Cm9od*h$T+H{8*Ec5J^q?&E(xQs%!LsJJ{#5=xagH*(BP z*4?&uz*;_o+*EmHn^ZUQWZqjH_;;$w~4< zmsaY>yJ^GsVL=DY>#r^ySBN9h9v1h5*Ml3KS!WXbGaWs2(hG{sTR+ai@&A|x!A%Zx zrg^iHa&nMsrBwH7KOP#56w$l+Z|Ee2yS|Fm6Vc?3>kW@{C0$Iv6NT{HUu70zS6@s` zT-KHH69_1Ew+9Sx*B-FwK5SqT;67Wox8#MQ_faiYKOnt5+IsG+u_4IL`terIA$tV7L)PU!}6%@0q@x2z*%`_N~R~w8sltzsGuK* zUNLoaLV-?2m`vj0**KIlEyZmJ35OpGx$TXYit}&2$Fv50G0hHz=x+gmDDsy38py5C z)3TQiw;5u#O9Y}@Pd4Iq&uJJ1fHp>(2`px+gi&xqfY!fjM|9h$^^wnFo$c8v=Do}@ znwlh}8y9;KDZ|RxnBu;LN+C@h{AL4_-cob~77=pcZOR=D3>+|!Z%es0eH@f4Dp7)|MbywYH6fF-~1!XT19*$=(r~{h-|!+`dzxa3mtB~JGNXW+Pg<8TD#*>UNfE<$H=I3XtJ}F z#l@l(mAEW7@+D7CRXkauSaB7eF|19?pw@1jofOCoE85?nsZeap2CBrQV9r?yzubA!YO+vdLlXnRNa;LLn&<#FUoFlp$uMq5F*e}3l$a~q8pBa< zl8@HuHXNZZQO$Km9z_T$n?2s+V|*%wGa;?BPjHel3(jo21J~=?Z36M4XjlE(N!eFY z!z;7LH?F@s;Y09?ty$T4>W>)rP}AecApJ|QuF2MPRN0!Qki94$6e^LInq<@RIRn{` zQ$^&H<62GsXWeov8hjdXC(%zD^2D@x03M%`y||p|5eD7XmdmI;8!j7ZNJJq~Zqt~s zdPO+j=MZben!^0}-g z^3}_^-qx-E8fZyLGIO?=t3P7FwmZ?Ara@)|@^taF{;zwK8Q3dBbVbgtb?qv;@dd~R zv;`z@IPoO^WY2;YXOF(QPUXsu!toTS8?&TT3)gx?Pc(75g;;}fT0OtAq-sVI8}*(= zcBVP->`w&Sr_RlCH1>{tLMD*wwo32HM^FljgzK_#MLb{= zc$mw#nWfwz zoWwy2Vc2#o)N71qSbiJ?g%YymKs9gQm;EG$9mc790B>~I4=7uj^!P}*oD z&2KDaX~&kBPsuwQ8N)kO@r}lEjEeA=++tCtASvox&!a=o?c{OXe7@X>JrdaF-v#TP z|4kOUR%l4=whx1HbQb$fMCD6w=%;wS%uxMqY)s*VrkKe|?wrE);r;XG5GLR47O#89 zh090HFh8brw~!?5#9zpfCrt<`XJvg=o}?WUW3Y<4X>P}d4oy&59JA4DEB0sg z8=K08#eLF*zz5m^{FoGRN68Xoa;k!L2KBS$qM3`xH;g-7HGYcBTW?87!q%;^l773K zbC1Il|Px#E^#+_FG*J*m1BI5yGhu!C!=UjSR zJp-t6901(^YLfyo%P~R;smE5@OcBwT*Ko+m4Uf+6iK z6}v~Nhk@=gMK$LyM@5WbOuwVDTZ`1^_EgqqchOHz;$Oa@{>aNEGD;5AwCO#?YVf9< z%>Wf%EINsqXob3jO593iC6cIbP$0n2zt4KchbC=e|5bSa-sbbCb}q_VzL(SzV-`LM zWgD;313$YfCYRL2N^l>Igd)R_koe374wCGawhtB!59+q1a;(JE6xky-Y-`ebbYDry>{jPX2!{YdcJa=Ee|w9-q_mhu-tZ_)zGbqi){0YRRas< zm)*2UJ&{dVH%E+R(h@Ffso8R)C0S6o1VVN2(iroLB4U*4ld}r_msgB1t3SB> zn(O$gL^O7A)yXD8)bMt)x160f52+y+vDB%5%zmR;CGAIkmCF*C#+t>JnoA-CTec{n z97$)wSU}TS?uyACd`4HRI~BS512j-N6?wem6S5CXflJ=E*61hL`}xXq_BQOj>Uxg- zusk=D%I$$+Kg1eanW&(qDJ{Ew5n~Xhcgr=25)Apein4;ZR)p=ox772>?QK%aRXeyN z3XnhJ^uVLzu_qI{N)Q!eB^yk{mRwQD`uwKqn)c|4$oR1UNXUZGw+Y$ZyPHnjUt1zu~;Hs410|x%siq~M|*W$ zIQC+bAr$1p0SgJC9EM*V$x)QCF@G2-0ol4mBnH2e_h4mpeS&GG)Rp|Bch<((bbdIn z8{1_`?d7~~(IG#*Z$D#2AbQqV?6rr6a-8+>>0ZYd$@Ois;l%*_#37EY7Ss9!2^~xs z*?%{py~{~{9ND*p%;N)l#$18DSo=B-OdUy0L!^OP!noe+IP}&~?4SyOLpQY{S{$wb zWl#|{TL>05de-mnV!D9XGqGkD!2u?p8(H9U-T8IThOOc485~48M?waziitsA<9y`i zbH#8n@4fpZI`_7R#>JO@zJOt~iuBPYg2DfKB^Z+H7bszZsSx$YH52S$HkZ%X6SAc1b;jVr}D@t>dSfR6~b2bXi&+afc(o`r8QC<1orwcg4cON4)5EB0nNxX2S{F zBD47TW(m`%k(}#}Ds(YaR`%w7+EBx zY>D@6DO)I%Gc}gaAywS?+uJ73Ue_ve;?Ig@81&Iw3lVzBw&pzKXVs4d5~!kmA<=f@ zESa7pWltq<;N(HfVuEtniQO@HD(Ib_A9BnRcQZ(o zX*NU~9ASeMRUuIkRZzKorhkZO@6QQo@2y){?H&U^vwYFyVm_Nb=4Kjaxb*aYRCv|) zZen)%_@{>W$>^}JleH_h3({@&m(zXwJf7*rHk@Fw0b0y_1CG1C>z%D-rgy&EY^%;I z3_7l-s;l?M`G`<@_}v4F)8;QDsqHQmB_ z@#K28yWRpE_z8ZdZ+O|!d}|$(HGgqBYbW&|j*7V`U$OZe*4yxKJ~lR6*9dPP#m}W< zqI_i$(U}rAuyfFp!1Tzn@qQQca73=nGrj0PP&VFxb>HK>lgxV~9;%SpU)b)8n~TSF zakn5iVkYP;z_sB(C+Oipcub2HO5{xhemjCbl%BXA#J1U+KR(-J(|gma4;eSP5mjfQ z69}}+tu>3`<=Y72yYN!VCoY@t16CnqZ2hg*mDEn)b^S8Fjob{M5ytqcCkup;U6N^h z`24pS5Z*59yX&gg9MJ-#^S&?L*d6iJ9C!+62IzRhtLtKhcpmofyFC{+UIrgObaVOk zg4NZPmQ!VwnghNiMHIb$(tACu;n!9W2lJn|qBV?AS`Va1jh9_FUIn|s-1GNUsI0Bq zVe35~D%}N*k-djorC>oJgXt!HVDo;qtwFY?w}V2`QkR>$jaTe#O* zC5SBz|9n;d*f9aUfMj}P1WcbPAGSQ~FsU*I9~5`S(!ZNV{v_(O+#UBLXHA^C2E@kW z3g=0VdYO(QqlPPA7RuFAo(1@t-bloRv2ie1y6sB=83gEU@kSC?6wb5xY1k zvI3y5G1CRKdLPWEjZ7}^wVaU;DYOv{V^T&JF`z z{7at3kTT2?TmOhRyQ1ZlAsm&Qw;F%|1$7(r!y1$_lD zi#5K54HT`cC=Ltd^{0;=Jw(qZ&X*F56U(lbOUY}KTG|`Klg+8^*|BS>WlIeX1fXW} z1T3*p*-uf<3=SoQpdvGl;`^Dn_4BEu!T91BOrfU$^^WK{ zRfaj^@**X5yavW}m?@($;-BDjuTZmu#xp*eg4(|2Zpo1eO8Q>8qMOsnUJS!{fa6xV zy4{vL4~29lq~RN-w*XLSIa?7hav3Hv(EmFtUH+~}F)vUH9$uQvv7ftNZZOu&e>Sm- zI6@ilx43C%KicpnPzOS`^SJF4sxL>PyKE^FTpKkC>i;MZ7EUPXqT20mA$jf?OEnex zU5)Ug>2!w#nIak9ZoW+krG3FHD$DwLLFVu?cnl_BwkU*sdBeR7N#jC^*F}}%uQ`Bf z)6)1N`k{b6xxAiWRe+&=SQuIbKZ5eKWc+uK&5)+)Jcp;5CxN& z$$t(Dvdqh=IB*+W@rTL|8-UdCmP+0WP2xE$B6n!AdJnk6$P?|Hm%{=-_8vd_8&gL+ zOo5JtQmfPcQ2<<6!x{fqK`K8ScjUC$Dc3uF+9ZpS4M6HJjDkZ<=5)-REd)pSYJoMZKfAJ|?hm)c7EFQ^h?}C+ZTS z*m2>~Km5m#ddxBoRU+m}5RH;Tl^~8x6*fon^CR+V=>r9OJmTz8TrK|W*VvR&Lv=I7 z(q_R|_+Ojoe3$6lsKVa!C2HND?O_C^kOLVE9w`2)^X?|Oryc#iD!gkPC-l|pg&=eQ z|3y_~&Zbw6uwu?>6Dg_HIZ(J@G(xsp`gv=9}QKc zcYIysLT)oVpZ^_Cyp{=UsVDp@a{8=b@1Y{7xC_D_B0Qk#;(oF84DPi`82UYt-;J2} zz;0F1O8l3}ym{$ma$UryyUOjCiR=b(=8t*gwa(7} zG7!77O@x!I%5xtaXQP(=ek(ZVCbmbeu~A~HJ$`^)(n@J#BIr~xZT5Y4?MU5LkD=y5D{L4S(NM%6W#r^IC#N8Yici0TshIajUxoX;zv!R4yym(puR z^1`2;nVh}EmZX3()5vm}KmOKpNCXGGO21_M#Qvm$r?R1zk1mp#OiYi@qG*zP+Phs)UV9bfsDCdi@Wyu=e;NMOaw&xIJIET-D&*IIP*1x$RD>d|~I z^~;a-wwMvWQvLK=#Y2Utuj44Dgt$oH-H#W6AI1Nb?^_5(H?c&`(K$q~n;SDEa0_XN z=HP8~zw6K|O~r$<==+ki7StheyYImDzf%m}>}LzFK3oD9;_@FXI57d`@J9^Uys~Dc zUnbw3W7&wv`!Bd77s2e@t5o;v#L*E+k|_Y0Mlsg^@OPBK%3o^7pFbE(9-lh>pdmcj z=|F_0gZh@om;H{;HoYgb``68t)%#uTMpmX+=(-BA2($kl`cCozp98T51HT1KiAgxI z(&YBD0Bi}i`=bm_7TJ~1h3pY|rmr;rRfF)x1jDf=(_#n<<&kmQgX#Z+#DDC0p#N{k z{Qncn{(qikGneKM63nA*FOC}_>vJK=7QQNh!xx*0=J&~1h4({yL^cfZO*~c)J?MWS zcNR%rC}(El>)3r2pZBQgvVXsG)ZRvPOvx-UMc_G0L!>6kT=vM@3!F9K)- zKju3w0LQKv%IjvG_u0|{l)t>=I}aNdJCL6&DOGOEhrCURTzcNY zg20+M)#nlm+#3k?J29cZiB+{0bGocjJ=xvsYhzk;we2mQS~>lWNJz-1j%xg?e>?6E zi2j=NatdvdY_lv_Zkg8Q@+ddvYF`jIRwB^H{s8)PdB0^ridwt(33XCj^L`V(waJ)R zv~AP5PSLeG{OQAK+4e30f#RZOf z(ae4=Ly6B1?y|v zwHWb#P19EM2RtJXKA8teGXT4G;E@BE}Jsjh8A`uSouWf5=>e% zVL#H30(7pJrZp&Gp0#|i$so@z7Dl{U0(4k5tt&9pi8m-P zbZA93JM47%ur+ns_a^9R$0xj0G1bNrpV|8KKOI}p|NWUC^9;2r^}C>I%qEDMy0TBtHLNt~qx$dqq#vNXIo(2qi z$hd7oLfIo8ZfccP8^ipgj+YcFW7<6Lm5#&u(Qw5B8#05TY%A@pK54t2nVxSM-m#}h zM!L>uSBF?vRG3_!v8IhO;^_eRvB)K(O_AHHqT)||TC1u8(@h*E?ft#e8>%f{Ib9_2 z5Gdt$f4X=@o97564%+-Nf0UC#Cfqev#?`L3F4SMaLRN8^I*FlR?2aDul5&^wb`xdh zvlbduLF6Sh`Oity96r@cFavHTDjJY?U>WrXrgNyqani1IS?J) zre|YAYr!9!E1%aBM#J}Zlh>sQ8mceuuqO1xrcW?HsXR&#)@kDzY zXobSWGe-y@pcu$YDB^BO&BWU|9I*BvM9?eB^BMi?e;+_#{;yxZ0?9t}`hM1hADFL+ zQZ1!hR0fY(yXtl3O-VXo6BX1oCbSPZO1Nr;In67#zR6}icNw*=VF!^?1iDGXdPjx0 zKhFg;evFF2u^P~5^ZRf@Xs;LD%^ZbNEOGwRCa!t?{EE^J)qm3mgja80u1M)`;5u>X(G5OE0Me#(_$2rW<<61 z$dNDy7Hcoy<}(n5P8fORGrmnNM!M?|UFJIAB$`rnIc0ElTz?J`xD1q?ps>IAmQMT_ zAIgSWS&x$=+_gt*FwxwT!1+snFZSWL66fm#*xh-I1$hw?iok-tT$fyaEMIw=0!}E# zr3ekJe|nVyMg$XKO_Hti5mM;!21hn}+`S%3Vll1`x#;DE>f)omiV`flCpddPhY>J* zzRT_bd-gp`-b9~i!eK9&7X}9ZD3Qe z{_PSz>9pt%fFiRfMPhoonOeI(g;L(u*t7H_J|-ZvODP-$WYm{L7R}+=dDOZ0H^1rO zA1h9dY11f5I;L0!7#vV6r_zFmkvf92$pBAfRe~HiGZdO`?V~&+v=3rrNPxZsOT|ip zN_w!mxY?GR=v*`dIo$0})^MA(Q$*CKRf%hm*8wq0AMoxYAT z{X#*!0JyzHKUUg%?5jIDuK7HiYVu?5DiZdoJ`O^`=EFths0JIEow}U!icGsrQ#D6>mu3VY@YvK2+Hka|6 zZqID(p9#U+%|%?re`&TP;x$k8JNY)hZSiLEBUlIzwX zkpK2KczF;Re0~v=(M2^=<#Rv1#A`O(tK2;EY`h-lgIX|Ao*sg`Hso{*<@BHidIX+o zBP`V%!*L9tIM$B)o4gno=Q4E%RDI z!o6-hk_K-@Pi#;gz7Q?!su);liW}^btOdZd+OUzb@I-=LDY@34EP$>XW=&)(KUSxN z!b?35zHyxcW8nWLd8`6J1{OQxje%CStx*%+uZ}u=9AP(cJt_(Kc5&yt~8xxu^QKR$$Hg(V*kVV<1T|= zl)JA1Z;}b5A%^P_^%jNKuK!q^&jJz%`G$vrf2TAxe3kPFkFqve7x^6i)TE043#uvMh( zoyC}z8zB83+?8Ope9hBr)e>)W`Es*wdf*5f_0Qvja5>%98VoL@lqdAG3xKQO9**bkI7)6C2_y zf7_9f6L5npC#rYm%&6GOl4c`CAUPR}J>76f5u{yMl7?>7a)mofL{g!Fghsap#0f(p zdJJ>VoLAFEWGApx_OGrTBkJv5R9s_nq;%c6X^5y6}NcKt8dw&vq==Z+A ztgG-&eD-}pXn&t8ZJc@h+Jfw&uxf=FyA-hEnc?r9ILqlgIi>c)^$|FK$`_Loh|zEQ zEJ}|Y9!a~augKGf$>8Kt2Ps+V-fMeAOzUUinJ9ItZbXmeQj#q7MAg&vB$!X&-`hLi z-MM@Pt*yuuhOYfcMySveaWZ2##T3_=Mwiuj(_zG8OOhNiZC>_5L@fH{Z#k}i1$*b} z$?tvBG&fuV=ZYC3zrNDLJRlxRRF&Lc?GT;pJh?=E2+|nYD`!#RkT=%(oBAzeI40EL zk}E?6(}M)(c7ILbOk9I*!)N1=8RHWh3tY;VIDRj5FS=nO@r)qoebS?m5^l|PacxhI zpB!I6E4adr_ZrpHpg^9vlIA?cSNuET?`M=1v}J!Df9FdL6o&@=%D-X|YAlRRN>i$L z)xIo{H-6ihij+q5^AQwS8@^OnBD;KCRr+bON<^&G+NJ82h-?Lyw8(5oR&r5G1Ua|_ zrfH`i*nBW}ucrj`nE>=(aB`vDxd8L_pZ;k)93&!4B5$9A2yMXC`8}1pu1=^WROnJ z-6`w=u`d<2jw3087%p?m3U^aE(eWa@@z^Lusv4~eyCIm_?`CLwFg%>hwFG@(=&KZ` zwb^-BCTOKSO3LT(#^F=9!We0|9pbQEI$RFjUHYDU;)^Qv zl9a<9<5u>@F_VK&xM8zdQ7y{NbISW9c4{Sej8`tzI4743kXOwLMNt`rW^u88SXReI zA2~=GeG1}psowui7?6t1{2KRVlxVl}@GS351fjhVaT*W>U>FV@+Ys#u13Y=f_R8YQ zt2uC^?g4o%DaK9V@TpArc~iMp{(;K0W>2`+ml+3Gc@V*8>!0yRDldKDKQy@#0Bk59 zI?3(6iA8=iS=Jv%bOqIy+|Q*R=GQA>&Jv!W1B34X!D6<;->DelYB^uF_0dIF?kjx< zknc_y3dVo;rHlyneThexOmYB~g7R|*eoUVX8B+wK8l2?U6bBX1GNEpp`2XH1X!#hZ zgGp+OZdeF)Fk=*yW2(D3piu4|6Irqh`Ru6=g)_Up4Afa0Q$ZGq%~F#;%*p3} zye+4Az3oVi#s3kfKCNGkmc<{gQ5bM>VOertzI~6~7Wn$CXE1Dnj&pk6cg}^DmLdsi zj8`ay1vkVbUAcIT!wEsU?WUzmn^7VtC;d3b%kSV?#h(O?LBapJxYY9=9KcoPF-ICE*JucW%GGF4j}aMZpkkcVDl zcFN<^ixL%MGadzh1FEMG4k;%}n=|1}i>!uWE__XTRhrI?WP3BEw;1Y`!Il_5A)09+ zpB*tC?Pc*!5qhG4Ko`5qEeo{;dx~(VOehsCS;DuPg!~rpcrYVOlnVh%EO%e-kl=S$ zM{I8>82Y&T$#12-JcHjudY87)zA!w-*g?L%+tig8G+{T0LVJQ5L(hGlv_;LOQ*ZQp zC`|AzS@coj9pa^zT6pm-P7kt2sCF?hWiv)kz2e$^VsJfm*yU8^+JQrQ>9re-Ece^V zH$3FIVPVNHnt2&sP&Xybr*{TX5wYxAm3S0U0%$f7wRB;0DgdeVb(^$jYY~wkw8Pp1 zW$ynhL66WmKmp%}t&sQI&mR9K6?hz%H|hi!(&dPtxyV_N*%w_W3U|v_zJ@KhLE5d2 z={!eZxkTu#2U(VMRl>xcWRrsTNwf_+V^DCtP}S>C?k zq}OcI+{PRtlVBa;`%mL0oCNc!$RVS0_%P=oBWIa+4vxXzljegzHyI^1-^!{5*p3`i zGBf)foBt<@N$!x7{@D;Df@xMBYJup!c@E^RvIztuUXuivfyAA+kD^Ec#~yEvE6QHi zdy+EsEf-$1f)46*8Rw0`CqTxGOt9+?mzxDJ3~}Lo()t(MO5f4~%{VhLEB??%^}m^% z9|0X#wtzof=WK@TnpM1~8gmnZD5+pSK{t?2XH*}~L(@qN=h2G=mrXL=#TRL3Bt%4r z+P)}C(}SzH0}l85^6~8#s~#r6S*$xzC&#AYz|t-)K@aMp*;6Vwpp&12Z4aDJ93u*zj&L^Sf6Gk8GsFoD2Pj*D$=w6xhmpq@+#P; zByAgbL>n;w?3+24m?Oip?$5F4wZ4QV5%$oi4Pwc?+Q-qBqtAf8lq!625Y4lDt=>5O z2t2aQYPWQ{JWQ|sPNa6D-8v%UunTnk-D0|HrN=As`nvMip9P7NR=!5iIP_kg=ER~} z{(r>j=O5PlFM}t3Z##ya`YKf3?8;;TFMj27Hvn1vlLXwzhC~Oi744VDy0rwSn{A|* z&Y|B8zI2f(ql`K~=Ll9RV|t!TEpBh7W)z32qFQ)#fuS^3Umw{3Y$jfC0WH|qCly3{ z4Yq`v8Y3iXLk)Y|p`U7cM91o}-QKYEwj(0uYxas6R8C8CH0PSwT^v>L4s)rP-LEhT zWPF3qKqKM2&xkd#@okyJc~x%rB53Q{}bs*%s;)xc809%lF*ub-QV!wbM-#dZGR0| zX=GlLpQxTAC_2dNGwC+2GDN5{s#$@zU#!&ZqbKQ}lUL+}v*(4{cMAE)zG(zOG zG_N;w4uoF)vbs21L5{4QUb%R}-Mf0IVgu6XQ_{rm9S1ogE`{lZe9UGGdx8tJz`j3P zc#cyJE1{g6w}nVtrxXuZWc-Wo1oX z9xmP5z`bB`&hUp@iBxtw^C95Tb5AJHmyrk6v^(dumXNm4M4cg+=X#KEH@`+7n-8me zUt!l^-j+VMU_wHo6?&!;JZ4*NIF}|1TB=XYg#2w}BT$y0KqWOr{RnFgU{E<*>zr4m z)2y*a(5^rKQ#%vR#2!t3{7-ul+1L5MCbwxHgDIQSGx=yOY62mVHCt8;yBE#*Wtufv zx7zhp=Ngnz!8qOdG)@_d9TL!9wwJo`sPlGU`1HUsdi**cI1|oLd%=iFuo>A>z**pmq{JH z2*|y9)u}&9XbZcZNOolQ3;t=|o zO-h4dVQNkDL%kFh=G%mXz@rZX5#Cu$_=4*Gs5Jf z5E&g^e4d8;`AI>G3-$<+hyOzI*`B_U;2PoW z4Mv6jRKGykMtibRi~7~hu=j}#Giq#toTUdXd^U_wnroFok7d@1l4KiGTAovwAWQJz zH`FoK!Y7h$5$`4GEe>&1EF(%_bE;pKT(i{?wV+R^H7sp02t8Y{_G>vd^7|_b&dWpV z5rW_AP0Or&*Yn&yjc|RBgf=Vk=3%LRUp(x^jxqCT4V&cU$j;3F1Ft|(zcGgM=BJZs zJ;92H9^?Y zrPt15cD9JrvMP4&jwEsB`CM`PRa|@1om_k4U0gNl82;`FH^tMmumgtb}?8u&G}WG({1SnoCwn9C1#`kNQ=_545y5ER5C33n6$tiA1Si zLmV@c3qExx|Mi6nm_I5Ci+lL&1XX8$EyAP zR5<2x^KG|q%gtZqhVdsDY+23HeFJ#?7CaJ!+vgqHsv*-fpBtmJO{>YIw{K`P8ja@f zMhobV1U@{jFcL>!%BTM0SN!b3-}9$u{)eC3eK z!sD61tQ)`1cYgD09(?#u{O&K$@XC+xAZkck8 zp2hST)0i}Q3Kvh!Wk4o$Zx$325tmF$M=y0PZ9`ue^ifw+josj5RC0o}Ph;TQ)EbRO zqtSd&w1ECdpgzhrV77)4m6S$mS_YY!iNwc*V3!&iUMLIv>Yi`tmk`x2>V?G-mSiV0 zayuml%Q$khnfitznvSjDt#x_ydGi=MKAEW8JmyR(rm12(>(-S~Ufo7VR~J3K1N7S? zu_s278F!qD(vuu3^WZUv&~}E(Wy5AMVN_ot3>7gu?N)BQ?rLtD7Dj(}3(cJak~kCA zF#%*wKrbvhgN6&s>Bc9yBQqp4Sdwz-cd(m{ce^&_AKl7 zG!plz>zO-g6q)5KS^DH3`0}rpvFvCIE~_aJ+Q^VK|Lz1utWPF`furRDcMA2%Oe@WG zwQOC{PeQznm^c$&=>sN{iNwTAx@+q>UUZnU#uhp{+SzxYkoLwZaUS|L=m_~Ct=ZvjLnar>A)TeR3tZyZAv4uE-@P#)d^BLk7`Zi1Oed zo%K%anUlzvlSr7SpYFO!Dys^~KXZ)3dk%2$a0A1st61^=d$@LGHrWwA%ma;7H1yEm ziX}HUjhw_VOj0m9f&OQK+C@g}%r`*ou|dLTWRtlxlQ`)Q#BwlOI_a!#r}Rh|)9zfv zLo(`Ln`koq}+rk8}KmFJB-_J#u649 z+#>Gcq1|9mFBy*F9Q9$02*YMEV^+~6KHf0~dIuODbK}vz)Mz6#CX!IQ1&bD0WC>As z_75;LIKrs*@{|Efh=d6XBSZq3{7#1Y2N@c6iXH)fpEZndhZ#Fg28PCPsjmq7Em-Yg zL`2!K8=MRe3^6d`60$Eu$Y3W#bPEf!VwQ3U>|tYwq7&%%3KSVozZyAs6a0lRZ>$3e^Tt4d z_!BWf)}`xF$&q+(5Fd#5meL)Emi`3)OX+i|_^*$rE~-ppOcKNnObzeznS+jvuG_A%iII-kcy{y{e#I&|pJq2vDm zoj~i*p+kob9XfRA(D62)6X^FC)T3sD--|bRx9p8e9NsCs{;r(b2}Ess_fD-1HE56B zwL`mBLIY`dwKODM&HZl$k?)gqe1Vj;a@E|&F(Lm!7af03h%Jbrsb%hBB5w(*rnKE> z0tWkkKp?(aOYie~1A1sKe=UM~y-CAS(*M4;7SQF*^a()xr0~_wK3XWHoBHyjSLvw* zxHPo78keuR{LL_)hrdsm{cjlW%L3)5$|-=Lj@lCZw`jtsc=LBiQWDU1#PYiFxYdWCT-um6{%X6@Lo08e8+Xv( zqsAi5SJkiblfwCX=sFQv8~+>IfmR2BdiYm>z6-~D2u8CN_h1_}JO78rj-;6mul^BzHnN!E#9?Je)(hpR#`)7M8Z5+WoKZ7V4VBUN-uY9~% z>vJoLsk$ypldVnPMMyqn3wvCXK%WQlCE8 z2=0cX?Ax@T$G5Z-voMVqM;A4_jIn;RL@(4+lHmCmm4H=x->ZG&y00*CclxJSu#-`V{ak_q(!O$#{qilr8fUUj| zeB!k~^2EBWY}z7iU)o}?HC+0bHuC;_n2JspWW*6BVbx2~e>*5LE2Uy=rEL2ij%+WX z)e%c*Toj?kce-B0?$spRK0cE1C57xetQikUtG_*gZntz z;bO=ugWh>d9G~I6{!l&_aOp5|s6S~qMne~M$BvV??;I6fUPi6SWX+w!oH^N~MNAxU zC&WE3BZ$|#Yko$|woyiV&#~{JKk>qo`^l3$3>&PN?D3?{n8loVQ%H|i+lU1l@FnF; zz@_}PBj|q~0SAL=gu%{6inbr(=nKDP%dVH%R_UV0X~tp_f1~)fmQ%3n80U(b>2L@4 zmi~+KU+*`5jC;S%J?MNMulJWD=n=dQUjEZV>`H7MLp-LQ7bq>;&Yp53UbSP!CCVUB zHtGXG>ILL3YL6V@HVGK=Y=8A>PnwCnub;8z& z=jDtaD%J&D8gK<-9>%04XC_~hw%#`?4>d96nQ&NQP$~X)NhhF<6(kA z$8kR1_z`qh_zQl4Ya!4kw-CKnD)t^B?|23E10G!Jv*#*oFpN=a|2>*cXZD??yu-HDElAjA<z%D-~d=(aBIp zK6@Vd3g3F_X@0xmEbUtgX>=GJ+LvtyTS__p%q|LBhUoVRQPUz!i2nvTa(2$ zRu;1Jk*%C;?O|vzkLKPnIzra4aOE}JaPtge8qRR;iEZpJ9ig*h6Gat=IaT9i*r|5h zQi)B#8`7PiXE4ZlT*`giO*_NRYZ|3D6KgDZ@YH9RXwYN{ezbQjE9?W1bzOV(Ci7<}a2=PYbP;ZIlJCl4c4|1$>WeBezgAxsbPkNknHQH!2D9FNhDOG4 zNk?KdnlYPX;PZQN4mzbw-BLd;Mg|5L92&+cgaeZhb+fty)lTu&bF__y5xZhBx#2dv@F~)}a85|fA8AG_Fn*1U|b;dsDAS2?}FMh)#LJWLLz6p!3 zm+sng9C&&UrG3)D=ocLahZq_j!R3)Wn1yg_ z4P0ilE*Gv*m*hn{9I->Si_54>@`mJB>?trXCQ zFQW|g^=o1LMvEHu@Qx19+ds(Q$S5AIoRw~>?W@Kud2o(0*xSe8@UY}jt|g4cCIP%- zjH+$=JnHVAbVOPX{@J0v02oGkY8&M}Ch{vnSu;Ntn^~C0`8&6YFo_+Hh~4!_xs8tE zG<8$5A)oevP!evriW!kcLd{;>V^X#%j4In9uhfYmdVZW@n{K~FI(PLkAT42xK4}kQ zLKxj@8%MGCSY;CtVw=j2#NJFo=EsJ`=KJUy7-o2QNMwj!V)JIrUOi&-gIfI$4vXCi zxigp}NQfQ5?-*n6Sv!+cVn~g*Yjy7z+b~%=Dc?~*W2=Fv%NLR!>cuxCHmsh|NV`=w ztolX2*NJW_?xAX532l9LqLwWrCo6^2$Oz)% zqKOE%3JLU!&5np%)gC0jV%KhI-zK}0{>B>04>d5FoEvC6b`O4OHv`f}oo**Sx3m)> zapUD~@cSfhGKn4&fAzsAX&45-=o8dg)!V4#&8waam{tEI6Woq^A<(t-39(OKGoN&a zkV&=cliMfdtvsf2HbO4PiYkg{k3yM`VOli7*eKEe;$up z`V*OK*&~V4Y%+!jhor6Az>xG!s(i$D`;=~~9~J_n`eCVl(M?S{)UpX_2i?64NFGM~ z19a9@bMB=oBJRGKshM#kTO`jSL$h6FV>I_a%3S(1rK?)6GBPT4s@j9}!tS9S`ovz9%rR+K21_{E8EqV_bkN@y#?qNF5>B;i z(N(nx8J|4Ey;}HwIh<|}KIun2(uca$@;;+Y>|IUZRC^WqE~nU*N7|9-D1GmRwmFPP z+K=DcLs!*FHvMcHtx1`LNgc)6OxUGv%_h}9NWUQCF8DCyf&GY@G7jdw;?GTuQ-@h9f_NJBruMteq>DbF{++Sz0@5krlHYG z*gR>o2@cHCKaNP*E1Bx6tXlu4R8U*YsEQUViO0_O^s!3Qs0G zS&VzQh^;?-hLa^FoUO@c>z|+CrFAc|tx^U*OA1*@c0y!OFWw>qdL)wg%Vv?2&`RF# zUSQwhCVEmbh>Nk~@OM*tY%^OQe}q3jzn+&jZYHnQgDW!1(Rqf0e_F?;19{{(SCC)dLDi^@wD>_cKSqa;DC9V5#0l=}0`*$Ye5OM*{@8NBYWu#VtWfI z*z|LrcfwBZrA=a_w1S@FN9mq(8A)MQ!p|>Pa$;ydz-x~` z$-}>Xk`4R!lJ7Cmbf8Ygzi1L}zLJ?y20{k%Ikn|Q9{z7B+a23j|57PUJ{jne`ze3q zJM8R9!x@=LPPFP+z1S*W=JEA;yjU{ClqsF;{>D?BY7)AYn@fsA`Z7-|MVlXI-JgEX zV=qfxZQ4wkD+OE96f!~w@iZOa)jvMT<9~jZm$&R=`<8k}Qf2Zvdooedh4t*%N_T8J z*5qX3g_Ntwl_Jn(y9#Nj>xM~g&c6Ht8=rWJ^(V?G7)vEPHH!GCP=@PIaAw2L`Q4MR zvhLLlymGjlQyrm9NslEtu8ZQ=WODt`3mhpq%nR#Fs2;QslPx5wpEv=2cUO=*i>QpEhyiTtD9F(?|?;V;Gk5d36gr zHkB|qIa4N6jg-B*k!>%^#C@=iozFeTD^EPb?y_b&jd8e3H?ZyH$9d?nm)R+8H*X-0 z@YqDMc7ufLRX*!oI zCoSAY%*bi-&Yb2qJ6x=s-^KA?KF8M0)eNp!L{3BzyB>U+eH(UD>MZAx-#o^~7hYsX zaTj&w=`7B&W3>vg87QIh;7k1c!9ViChK(HS>87H=#pv-SqVKtdY1s*+cwob*{`Ar|*1h~PCn~!cNxNJ~<0Qro?x(w@m4O*cNDo2C zz9Kkd47BF6{ny{;F&R^ydwBy#@=NIw`Q5MnfMeyoRE5oFS}a&BHta2XIl5;%-`hMu z&U7oS2cG4XKRhgLb32cQVZz#Tj?$ys`R$fQ`fX99ry3cq6l-N{z5l3Hol&AmvIM2MYmHlVVP&YbCjf6Y$oTOP>L2*+pXIo?v zYD;8hvgA)DH0r%BHBcMfz4TQcV7uy%{_w1{|AQPj(oC;ixZ&_wjz9k_`&weKM8=Zt zE#uto*ZAGOZbltZOwNqNJkmi=>2B8l`AHso^m*2AKf-}S9XL}Gh|7v6Qn=*bgG1{C z`aJ zB~}Rg_Iz4}K*z}dIys@6lBai3+H4|p$!s#BdMJ777rc6~p4QA8xc=swx#^lUEL$*# zsVPxJJIpx3qlrw)C40tXaweG>*mI7q-Vh?yU9Zd#++_oV=3K@VA9_Ext;!-driao^ zhbSl>#kOD?lM*{9{PQ1WaBj!9V!F+)upJJjVIIBZQ7R2*x=nerk<%jZmF?%X-)&}h zTNGgn*YLqxXEViL!uAcXv9r=AW%fQkxOP4(6ZPruH`A^cQspe>un_Cb>l?A( zb}ws|&1FSWr_7k!+0mZFLT^5YN=B&jCUM>6nS@9uqdi0j7{@;~Jf>LEEUh?9O*~PR z#oS3@(m~s#ISk<*Imr{B{t?Fpa>@L_=lQ4%JTnImaqvJXW%eBA-Mor9F@wPRezRf|tI}*}e$E7hlctq(%!`!{Ybz(c9N@<(kV`G-n1=Q%4ySqWaY5pP|H&D+A&6 zTrCsZd5%K%cSkU2$!1Bam1&N0wl>S8${fp#ln^XxxrC*gY9XzMk5_TVpUdi7ujkGc z!YCT**t(^S$OSnhr$rHIkqLy5@3=`bn6o$$M^h7Rdn<9~OeZDVOZ&b}?B9Hv^7L!D z>ZY~avN{Z7{XsVU^jV7S%b9oAN4a%L3hBKvfj! zD7Rg+ka_-c3Qm+zWlkgWvbju8>ZkIhy%g5?aZFDkb@VhZ9~DAsTgc6~-omZdU&Yed zQ^`s8;cOK$aj2Hzm@vj<0#kKV$Y9bM7F~HAH|01P?r&pjh4c@RG0YPZ(_fcI!J*Am z`%+0?FqLqb%;7?^U`?JS)!O!w}m_}v$tr0tq7al_qr@}X;Tm=@j7w*P*a*4W9UNZp2X z6!Fy~v8YOBXOBEt+uYyQkX9=olMgOXDO~PYER~)Pb$zjFjIN9yk)msM$Uw0(nt3tJ zoPOkSUOGNNTk;Zaz2{19nli+ho$Gn!Ko#wiuH}~N)^gW;1H%=yY}?U6?6O=^(_)3# z=TW@vcl`9>r+6mMh&f{(w_Y`iX)+nMn*w)P{XP#volPqCVUH}UKVDM6dFys zxtS4nzqrSfo)AT9jFe4(1uf@x^Yf!#98<62-aBvR+BK`0pPRu9M*{_Qo$RT1FgYWR z>_i8xXSZ|q#6hXM#WG<@#eeDrwyoR7ank}8UVA5ZUVkN*EnmW%oJ0~L`e;3Qn8ODv zDe`47^Qx=4>+(3PtqtPVi7PRIoS8ma_rJ>K-|wIzWGM^Z_Yv;Bb~@7|hN#+eg0eOr z;qfq7DHHf}Zd@5xaNoVRa@Fcp%%47msZ%1bIY$}kj3oDlySVx8wOlnhhFEonU3gAl zZ0@F|a37m~vx`ERz^31PD_75qCDS2&&7hf{uyhv6gui8HC0))sDw>9mUfj&f8;;AYvyL{k z+#)oN_{kY0$Hb8spTXp*Q<$C}tC4OsSumJP7`;yX-Az=MTj?{;WB!%%S#`xC=3jOX zS6@Djlg8crTz%f?Oo`Ni$*JXl2ikj!+w zZbrN+l!MU7$t=6-Dw#|OnOMD?Mb`+qGR899B7^O+70h2QWpv|}tV|CftG<}pR;TtT zx~{gILq%sewPzh0*1yCH`-I?Bb}%sL!!YM#eDy2;&aXbTh*-CfE%maJru#oX{BA$? z84E~WxPbJ1FH_&tPK&Z{*C77Z3J#C1BxUI}eBkzZEL^;h<+t9%>KvJfsmJ3&PK+Iu zlvmeq^xSDqOWD5q@{2rouzzyxy_4bYoougKK}^ckd|*X1 z5f-&HB4G1Iw@fS>PO|m2aBL~7xb{vNoR=(O!NP@1%a8$xUR+IOoT{ki^vOLO*zy7| zZQRUDc|s`aWkS?9h$$+GXla)jO~s5Ao}qfkqpjUlLx;y5MqKl-yqKopF1kD(#w5!=UpQeAQ<$@82}@Vb zWJ-(+clQv*{^iV)f%c|r=do=4`^9th(`fZe5nngxVbBV=ndMh4>5vAE z!5>RX+5*+&6_>H(8Yx3hE2jD;=?@1PZY&eh zTF&tkdpRg|`{Kr}yef5D+SrYIXh^$B^rrWTd{WMliNs3Xr`MmudHN`&POB(wB6Q|b z(v4OUN={Jj8fNd7I_#O*tiEjlzKuI+l?ll1Q$5sHgmde4SvW$>f%gF30@MA3W#ITUb3kj(N4Gq;7nSwU<-T6GL6%9o+Xpso&*urEglxWnv3Uq(8B# za_g_7y|R~+b&FYc>q1svGn=`~Ze!^+ALZV;dl>AlqRN*`!qf#!EjmsAU@IpJ+9)X) zVa?}nAg-#4zJdefcQ&wX8!VnZiQI*`gxl@R?JXp~u8;abkMz~bKE&cZM#7d~L0VD_ z@%vt(w8u%W>PJH(35kqm;ZO;+4V{$t$ao?BfXV0};+i{IDPzQp<9pfLIYMvOZjRR` z(88U3^4b)VGt;H*_Y&D&$;rl1hMhiX6Ar@T#MWnK5^s$lDQzm#W=>{Sq7_?L6@^tb zoX9)QiCxk^yz&yyA1UQjbvr}7ebVns)%g>dzIYYa$z*wz*v7)Uu4id<8gpFXOr9fU zy=W10Z@!+D3o=>QT|r0Fu(VY##<*$ZUh`SL^v&<{^(``P8t~Y{u}4HR&DG3M zOB3atWAsbIHyCV$Exeq0Nh!=O%cruok=pJ&iW*&1kFDj31=Cp)T}##RHi{~7+@-=I@c76|$h61YlLoiyy$?>$~Y-ylWbR2Ri4iiR9dMYWILUO|s zNXwYQjNDAJVjY-eyw{fhn53;re>5n4!?}u5j-5Kd!EGY98&niX)^Drv8hZ#~79samJE3+NG$foN zA9f*Tp?;C=6*8>VaV&{xGMV}8SNX~}zs0wI_)C5!Y5eTYY!Yo_boLC$WXXxBd7*6n z6(Bb1Hf0eNJB1r(?d3>eEho!eVw+;X+FJS%JYo!EYRSHoi+6NHCWmTmda!ep4%z39 zA}ME$l2^rw(%R>5a7I&L(ET95U>I z$;xE|KgiJeuziDbUPnj z5+}_q9G`6gmrtv~H7vyFY(K+lZJrp5-)F{VS0p+Lhef(~qXo0gN|;ft4+g7D>`v|2 z!y~V_$-VL8eB~Se$!G4moF%C?LQP6f^{3u*uoEIALoHdARxNVmfA1)6r$<{8jaqLz zHi}bzRk3LkRv|QI-xyvgOQ&0!nA%2bY)sDG()%d66W|kjH_9NHvYOjI^%cJR>8n{~ zIKqL)zs=8{-p-CH7sE2Cv=|4mI1(_MqZv^X&E6hHMFFoNh4jf&SaZ2Y`kN9qKDv{0 zXDb+*I-P{+IV4JZGf93_zvtDSV2X-j2ijU&m)Zs;gb=$@d!klmZPIPAOUGbx3ZV?F z^YM=kF)TLGBjz9+R-mRT790*4%wxl)oRuA!rJTcvHir`FQ0uFu_mnb`%FuQpQ2mGY z&Vtmf)tbeOHTUqLFMo}1efPh3@JGMmw-4OKzb%W!BYm0b&)x_rKeeTqF&tBvkk_eI z(q*3Hl_SG45tgz~TEhGk3rpRbdF|jf*40eMlz9*DTQ!~Qtfy!?x1G%$aWp4f!S&fj zgg*-jotTbF*D7TaN_=#PoJ)a8A7izdiIC};TgZz~t<9BlqY(5_r-YaM_@%Dh&M`(c z2?8kxH7=ON#px02^JXZ^Qw_2t)c zPihAdP1`w8QpY~~bu7q;Vp7UwK#ENB&ytM8# z`~UDHl~UKfWvj`NKGzt(hI>BuEq?r!+gWSa%}c-f5~)qvzvW4Q;XQ_A09#~hJN z@`Ahg_!qy-SMQ!eO!-qh^V^^D>y3GwYF2fiIw9320%;mVpRoa%R1}p{ThmFeOsss^ zu-PO(tM1@~U-}x~{O%9<-VcAquOE0HA737e!RumlNG4UbP#kutmBA6|+r*xfKsBp2 zIArLZ!rW^FIb-w-J5BRSi{+!=@?q=STz!tpM`AOp5^mz1eA+c!d3_GqG2N7J z$fId6oY+-!n4CCB?dH?8j77-xGNxoCl4vcby`_qRvrV+tRZ>w}KwYoYxydG^v!0`c zm9&Um*z68uuZDyjDFC=Gj z43Yh%bT(B}-q1%=O$D`Q_jBxY4=skJ%(+Zvz*F6Hohqd4+yLg8bI6&QPKvFc9<|Qu zP(8!(lHT%Jq&sB3AZDnVjmbPnS5-MB2b&p7$sudm4AP{tbU1`;B}HTGsOH$FZJZpG z&U5}U7Eh1B*Hp-%@>ZNCm&oa-p`?5gm2O|lTuQ>o=Kzg39;Xcq(BE!209(kBC1 zQr(OE?Add?T4CktE3=XL$G^-H4h5gjDE4C^IWv^~TdQS&GBasT79lp7j2wT7yy{kt z*7Px0caDm(W9-;gLA!Ml({HZZG{oFkR3SVCm*b9GU5rkuJ4 zClSk5GAq}}z=?BI7W8A4{yH~1j`(m3hT#s}1v@2P7lrk$v{j#_iY$dxnS0)2{o#rMvuGySp?x%06meDt zy|&H~+`U4)q^+e+OC)BXf!f1em=@j1HMdM<=GX~}^2;fxbK$dw5uY4ESeT2tQ^z={ zwj7L{#meiKvUo}?b|J7TZ)0tuLt_V3we2*Q9_8%GbDXVDCTiLmE?*TxXm1_m`zz@( zCo<`ZrDRHfV(C6hd3z&g8;0qr%crFH3`dUF(Cmq2>NQKq4DX}kSRqx-M&hqtC4HJ* zNM<_?g=G{R?IdK`QnII|kYeehx4BZ~h$g5SuAr%uq=A3@6d zu3=teEqQ-FN{ct1uljF&8$T)MNfSq|#rZ>Hh+vX*Z=53{=x|n@uDrgyi(WXuz&C&R0 zE@5S=6^F?}c$9_EXgj-JDIqp3iPQuWuErwvpDClZ+r>~@AATXDV>4H(!Pcx91L&}PIOpcUxVs0V- z)zdU|T8X-971I+#h_ZK5ce04W!yVYJxSZLJ4!X*Yv+ab`LH;?4i}!Q3pqGCCVi~if zE%j_+3rW^kgO>gtM)Z(#AoWU2&vK2RUoW3^FHABPA@1sE|$uh8n5r@GxMJPB=yK z<3e;wCT-3P(i4-JoRcj1_0m~ULS=ac6-_Q|nG0BX=USFePbALhWTe-P-yB2ooN3a* z#t>z8;~H^_9XW`al1tXKG;JF)^@gz4ZVWQRA9mq#g%CSc`KQVt=92-?iZL{ic*$FW zbX?Z>sZ5bta;S=qrh1CojkrV7wC&BNEt;i0h72DYWy}>Sv+tQ?WX2O~ zQg?quw?2uNlS}s8Y?7@WVT4YGdwp15_XVhRzWD(y5QRLZA`s^TKrN44GPbM`+`XU+3tO?Q|%uFTOTf>=SN7;9>P`h(D zVwugtH7i)XSSAu~kF+m4(KBZ;f6a2qcN7kplvXtjGa8mmMpmNqTcY1^C$5NCq8F@Y z^|VP$3N_*JI*5!y@$941S>36FpQFQ%vzvKGmtInsh17o&r2JpM@1 zq%EhXMiHg%(v7(p8L$#NeY%v<6sePVvS-9&9O&=+R2Q!;4wwf-yF%R+pl2Z z)Og~gq1&S)s5%Ez7A#=Rl`}{dn~;pt+u+8YD)oNZY%=X5^f$T*&73R*XC~=3FJ`lo zfp(|pAbrc)C8USOF(oyUm_*1solkRhDZR1TL}V^yWmp7Lu3E;V*hJEkk|eEoT2G#) zwz7zl+FrU{>0J56k8;J#WKxXkZmWT?gmBtx9AcAmS##q8Nz+f1*k60ARoYA^-68$I)ui3k^oK-IcERyzV5PibxWU|*vRhNO`&`cI*PiD@N48qN0bQR0Qshu#iUB;}L8KkJEr&9g{t*RYNB13E_LnZ)rsh8m%C+daUR3U&fb!aI8S|5was73|FXk~tI7ffYX{m=( z96MJ@OOHc1gw(@TOIS2@6453PMpL5@+aBurWulOfNOqV3--sD|x^Ro>LbT%($eJ9B z#o0r%s+R`ox0~8%81aifgE)o z1ivWIRvX)B^h6UKpTg{9$KPccq$1FU2OoUU|G)ze1fAX-ot>RTMn)1JA0KpqF}1Cb z9B+p}o6Tlz8?t@-_Hp#+QI;-U%H4P0t&!?~Rj5aRQiwvFE?thQczu4gIerVZM|Sb# zzi+|!@y~GO`<5{;!iZh1ag&kTpq4t=WmedBoX0=#46QS+X7OilVO3g~_L7}igQPn7 z^UqfV<7ZmR+J#~?K|PdC5?1?KoBS$oZEc=9l((3v(p{~4Q;$~E)mqt z$vltO>3tqbj@q8;VnHhFTA3(l?L*>EEJqQp#R+6H79?MnSfJ5Z0KeIie7D;3CKz*~zPxSRl`lghtZ4=P5d+KyVb zF&;J;UejCr1KX=f9F-^SZ2UjLL|s&QX^+Jvui~J+A0a{l>PR>hRAF34wQNgs8!vYS z6;}n7xB-VC0y_JHI;(oo>R0tonyjGk^JxTs1=?~6Ma(2zU|qEQs&L~81QNV(Jr0$Z z@%E_wuOMzJZS7pi6Bm`=33V?@Y4xD|#-U=VH6xPz>mY%ooXl-PC~L}icJK=BT@=r> z1Pf~WJ@pkh)u)VSO9fYMTAr2sagTse3bg+;jC-ATdA)*znCPXQYIzKpg-8!nu$(G+>Re)or}_$C0BQ+<+MOa8 zM{_b`9P7hav4O{0rW2VwjXP(D;FfkBc+4*4D{-{G)@Z?D9-;2kR@VRSVFqscC08w9 zz~VSpaBK+Jq-N(@#??~9q`gygWa}C>y1F|Z+fK(F+exKkvtqkr+qP}nM#r{o+jeql zt+n_5$3M=+xj45~HRl{P@y+*r-Uq+Z78Ddd^n$c(uMS?NFqoa&ssUI%~d(={a%%Aigf1+2H1#m)t&J6`xXKt7EE!Ad_c3+3y3 z%xlZZ#XNNc+DbV%+PF0x;t@IEhPq<5O85Gmk!r#k(Gs%!SRrSFHQ#e`@#@qt{SoF* zC*c>vvmMN*$AjePz?oaCC~qwc@`5$rq9jVH{YNi33q6j|>=2VrZJ|%5EqAP9Uk+`g zsA5e%-Y+p*xHia{!i_6$ncEK`GX$`3kb51xgKjcl?yDc;vyRMPNI^_Zb zp*Y{adrTzFYR|dgqTH6;AaQ#zwUt;}MZ(-apzlFkKiphlSc`dVO0Rc7DS*Y~yn{`$ zXi&CGocwTRdJJh6OlFH8C!LMw2A4@VBprPppZSz9f!;9P3SKt0{asWxO4fBW>MgW;Rk(CKPF zyUzj{1m_3RR_`e+F{J}Q+4JF>Mmu#FY>?!rKezT#JxTZ=8Hp?ODDMNHvfT#2lqXMHAeq zT)8#2Jj1E(B)3G*aR_%zziqhF~T#Bkg5GGe{83x5)M*Iq7z}rM`Gk zSEI792j{vlr2V@Gm=)>Rcgg5yC89Q#9E@#?VT2v`^sRgC2nlG+#lz3&K&8!YE?tbY z8=Pw+sI~-uI-~4r)C#e=dH-pDO_~z^asLLMgQ|C zI{~lr`{EYeDgA|033K0m?1fcd0P~0KlfE%1E8e&Z<2Ut;{GIFQ?H3`70i5j=-QB#-*0X6PwRM4aB6wTNq!} zYZ%hcC^qzvW;69-!Pt%)c+2M}@~0`yq`Ds)<>&B78Z0+52nkZ_8Xwmn5wsU`F_)UD zM|A3Vl#Hr2!hX>Lwb*%wD&l{1)9qg^q*`Az?l$$2%HZ)X|FZvD@wasTA5pcy;HtND zw!?qa^q`NNai*Z^|NG_N0{d^AJ`4ZK#{UsvTl^xQ`ghBJcF_iR1g7@CodrcUeffWB zw2l9Bq`!Z)0sjB*;9ER`*>ISWMq@_AWO;-~tVlanth%V363-n?KRB@?Fr{qUNDUP? z6rGmS`0ZIzeea(U^8WYl2Hiq`yZ3A`lZqVCfp`IE~top2*wc&&_ zDW;@~$GLr`>Yx?xr&Px$?<)J+g|5PK_h+ife=km?6T#(|!h+<2KSgUYX5X7(8fRTz z2t8{Xf(H0_$-?A@8ZbILvl4T~Q`KLvu0mE;?7Z%uHofI&lBVDtEV@sQ@~Ujeqt>oJ zpKi?x;+xNs8}^aJ7X)pwgS||ew)UUypP4^=VL9SEhv^4?*`Y`kMA(PBg4}T4x~^Xg z(QPRP>DTWq>K7cDw(hrqw!Sw5hNeM|c*Trq4S^`9i#69N@_Nc%sa2lW-`3iR{8ak+ z-x=R!bq9Bcb2QBu&}fGi_GH*Qhdj79p7nF_ZNUoKYr?0X!vw0b ztO|2D%dmG{mH#YV`C$SEJkacJ*3gljk=eIm|3^e7d)ope5gx7k1}&vyW}XA2yA6Xs zmPfLtRQ%k-%!(Na!$9c#qWJT0TsphEZ(A-=XlUp$W1kLG7}3Z<46cKmM}Bx5HJSKnc}*D+FJh6XtevrxIt2$#tj0hT{mX*mJ9G zaDR3^0l}he;m}C@-Mx_6bc&zZ^|g@zAZ}!}b>NBYbOxOl1CwQ%z> zZB<@fO~A!A{D^c0*`)%$!#DX!GOof4qKSiyt)bz%_=SeqeHc<^62ZNcYuJWqCCB7A zav2+UE)_-YzU`ZeD1J@bGf;mDV z(~w?`ndap!g~s&=avXd3$1v|miT<-1MmmAA#?qbXkd8PbKepNP;;IZ@GRj)k?ikZp z;TepiNz5Ek6JxL=-?mXRQ^JPSm?B`cS%fA#`X=-hQ62A?)>iqP_!#bMa_k)&r&>RM zl8dimLDy}CruxrwNt!MTyfw1o$f%Ho#lBoKpYJ_xzA1au_&MPmVzj`W?FwAc-O2?>{je?u2`vH#}*#R=l<}QkPKkZ>=fRn zT;KbFY}l+@OByx7y1X=Fp-|1V^wjt#V4!98_p+uQ5j9K5n3x=9(27YFJD;u#58U~E zJbIEHS=Bd*dbF3*p8)67ofYX9gPAR884|*NzBy}(!H@b7lnC%MJ93osk{sQ~F!MG0 z@Lt1q`5>11#Z1Ca4RV@ZhQ7kp8W$?|=f2r;H(i3kS7Bq*%Dl3p=;#;9n?F0EVs_Eo zw&_w;7YEm~S|wSiw(>m;E*r092mgHwd}7LiGz^U@3svoi7_qUVxd@&KID-?ij(3QY zs0jM#QuBGPo!#NfQ8xUh+t-4-T^WX@lq5ElCB9)C+6Z zE»N7ovldH*V_xDG*^SN7mfd;SKM+4R-F$V6f`%kvi19$P zjn2nu{JPXMf;aTd=Wc|jk4JnRxlb)h#|nL!yePRUjKyClJOijZ${xvd9=nbU2K^|z zOuP6O*~eoNZEtUU*gHzrsW%9<7d3Xyha26m1aGvP zFT)5=FTXDcn{0>=BQFjW($bKUV18TScsv}BbsT?le~VkJA)-l-&Vk2H3p`>T+X{Wf z-zwvMa-xko&Ual^f{&Uo>=*gl>+9`1pu>@p@VAVdih{&>F@l)_Bk(}Ge=VRaxmAY} z$gi0^xhJPU4SbFwD5g21NGV8i?mq$1o&EsyzZj~V!{lPglZ$61b5N9 ze35WVgFL0(7qvrZMQ~NMUv(%CZ`fh4OB(qgV#P-wr=|3pZ&7;7;9-U>|KVcGIm<{4 zStp_=^(V7T=`}fXT2eg-(Ub1Uy(GVAkKW4Yt1cng`MyZq_@ItD{vg5U_tT1|n6^9c zzdgVFg+>pwy@}jCH8M#GLDtNPEVChD@TA;k;4N4TW4DeBYsW?k6>v?(+@&mC@>;?v zDzNvAGlto{?a5~)P`Pm#!NHP5Gs?F2CrHS-oX5wv!RBRsqdK-m=q<|(eS)DAWPXxb zJ1MNcvDnr-(y_2=1Pu-25?G_=V_M3`qzD;k(}Vk9XKI;Ljxc*@!JLhCf_+Zx_S)}o zy*%G+@IBpO)T0t+bgXxvk#1|lB9-z1d-TvbXgoBriDL6nYUCC3hd(AP$u;wUA>yOD z;*AkULnJ+MNwvl{U`%#uSlG6V%;kytB=jtH@Qc)G;uHCpxL7F$BmRbotuRh>cY~V4 zQUp(6yf1U6i87&mM|Y;ArT@F8(%U>j+3z1)nyLwa4i9Gao;^7{t#Md@#(??cj|H%=G{nnf{)-C$qQY zzTB0~Wp3KK!EA_j;)Zi5;rL$3f^nZkqcGzyYDaTU<6(c#j)i6UySXej_Xcc@AAq7C z!LKvFU~>Xlh=qt1UzNxOHmiUsBaq%uJtAf=cj)N{_4*6xS>)k%2%k%p%{^ul@GRl^ z6yVm(NgOJg0&B9}An;+(vwQDaZvow&N>4f%G51(R}jJb6~x;S z#Am-#)>40>9?CWn$C%cJ)O@D)?dm4?uz;JI&9k10`|8)Tbpht{O0w&Nf<7T>y^T-> z`5BsY&)U#%L%U=~9;jBn8Bz7_!Ou+v-1$}KgR;$oRqapo&9@Z+Tvkn?gH*Q`vff|; z$a*=IdNGeZp;^wqI(gHl`o52~-s`*X_l6}i)MqVvKH7QSED=J3Wd9`@l)k!Xx-4p6 z31Xm{M;eA^4KlsHNxR3VDbCDT9**#~u&RGs?ZkT1;y!?7#Gu)&L?B~yzjDEUe`$JN z@bXL}_|W4y)U(t-xS>*wH767tnbN7#sSQ6ZpOG~wbx)=n3F;=fAx#%M*Fz>LKbfde zy+fmOj}*)W>Wf8DB>MeuiXcsqt}2XT%Z zUTT&VJ#em4c0#ghqs=ZS$Sk+$>3E+sJ0AP3uGbw}jXMFSxmZ{`|_M)K1=R@>hO4FcfI>5kwm+j>1K(+L8EY1p+`-b zva}2oZGij&L<%=@&&z}&zkr14)FWi$R>fY<;qdFm-$L*UuD3rCy48mj|kOBdt}{kqzu=cQOINB(SkhkBO*hQO;;d}oBFn@S3(-nf|KLL+~tXK zh-vH>G31uHMUz-E#Fk4W;hmUd*Sn*oAVDEqJ9t{*L`9XkiKzqlfot;jjiSi4WN|4O z!u-JyopnixGw7~^XM$4WM11!4nBYgHmW2)d5j?~J{`BOU73<8cdBYQ-Hne-Pp3JVuAd+X(Gvs_7OZ(Z@~~&{2hVFt>vnrqsWox(75-T*K7Xb<1av;!^Nee+ z&1-et&{?A>X77~kqXGzv!1G=dKtQs{N4McO%1o0t0b(^yBKgR!jb0+)d2e|lM7V&2 zazPcO>y#!9S2WmH&QSPN?rWg7m;&G46kxm}_oqifS}fh7u-Lgg9U{1asPnxc;9PCp zG>NGo>HujtDY#c&#iqXNvPzyDO&pkYesKk{wxh zlq(t(IQL~ zVL6K)YPP^(4y3}>?9vHvpJ7}T4({$kO zY8@JaSFxnNn~yg)ieYSD6nB@VSTND<*|K z>F2W{&{n&C^zANg*D2PzX%i*I}Gud8ICCHqVjL`8Ymh}Z>q3|BO*zy)ka_GJGD%9(z2C9;(UsOkVzW}r@rLa6c7@>FlAUHW z>2?iYg;ds_wvc&`# zH2vXLLrbt3w(5kpL{-Kb2s)#p+>PNRfO!7cZ7V?vl83X9L)B&NZS#OxHEiMQCLN@9 zYNfKH--|u$dn<+ZF~7tEm(9Bi6AO;a1U?FM5OHkb;Tfhlexfkm-;~y3)QANwg}rh1 zRg$fQF`A(b@^DIexzP#G+Q@FR;Gn-YftgcYEtEi)Ckic3j!v6voEKCE$bF{xHkPb} zYfujL$(~bK)`Z}hIraH1QmzSR%*j*LJ(*q4!IYg;)-Bb{koHB+8}uAu85RTYaBX%M zHjV%G{EYOXOa_H$+-}txj`}89MaIM+Mf?>I7znP}mFK7!y?bu1|C<@xhBISsetvps zNmNY@o9Xw&oTKK`qF?maJdu(72oQ8?|7TaM_1Y9&GL(pnIYta*LmLk{o)*cFnkjHM zXFxRg$Aqf5X!58FnPRW8Dk2rdu)bbNPGdn(Y810DS(aalhdC*o__7ac0xdyKW2HA( z4Dwfgv*2UIA(!gvO&Ma^dXG>ZKKmRZRhllBhG8@*hm* z{vAD(CpTr7caF9@b67XGFvaF4`Ky=`;l1L;c|ikqhNx$jL@xs_n4G1>ydJ5(rLJmi zdQPCb%Y4=wBd;!CCa#Dh!zs~s2U&b%e~sX#!P+n_D#;!L9F%J_Vm zN70%7VroJcvtvY%eJ@E`LDcD1of20xDJv^0s@RI?C6IrVzX227%iAZaO!F)vZGE6Y z$Rcn)H}5!A-TCEo1Z_`Jg1Em@t*wJA{BPL)EpN9k1O@c)J2Axk$|`W6PH(14jKeYO z&H+^KK*re~>mRMn&IQsEk&(w#544xNZP`Ez*afFy_%=CnO@1C$Iakz%*hN?hw;Sm( z@z|el^i(dw+hv!>ysS`S-`r5x1#O8*k`1p(3?74=`P=;32S~>c>x2rovT9^2egFzaP{fy{XXBG&&ukNV~{6NrRzN2(LGz65Y%lM zXPNSdTEy{_XSIl4)7|dhubFHmjd!Ox$%vi8o{^#vlh8pqhx#@DI79 zDx;Trg;Ngf8;bBS1-xKW_1HgXsvqyk2 ziO3Q>*i)FXBa3U?Q?hI|C1pEIt%i4yU61}{U`_@k8$nqc99Rz6{{H?k zh-njRCRq8Tf=IC>u7!QE!`1ZJ4B+N1lG?W4A2o1(OueihdKo@lIroM{j&0Qj#Dzpa zk~1?zG~baJwQylw*fHfgo?eA$rUF$R`}qqE$wJ=;kQ3QM(x2elXbD?2iJM=AO$dfb z30V^34Il_}YL-yY8LVC)8Mb-u;D6?pCo+B)t?O}4oB0vByNGW^GJKsvoe?Ld;EYLF zqMA=8%(y%|YTb$P+X~_RLnU48Hid^HwC^Vb(lN5p32dPnjem(_>F~@yW&S5MsJLqx`ZsWu+dvAz>;zK|9aJC!!*ltx2{%JH&nI2%7Go$;mLc<>)p;b@E zPU(T_(pbil$rqR-uXL<_j+w_FQm;rqCno_6!boaf%($#u=!81^J4QKio&>H@wVB zxIHaM&a&O`z(jvASgwU$PLWsM>SxEF-Hu%ckGsMeYirC|LN1WX@%oM6Av}b*M>DL( zoNbUQ9d;ytVM>Ea;!@Ef5EdiqHM&i(`q^~7IA-jFZed-f&S_G`{p zv-V*KKIsWsFNxP)$2V`wG}oVy5A6n(tqc~Hu;AU_>$tC`5w51A)(0Om*T#MRs8Ay< zOJ=MJo#$j-zh8ca612;UdQ?e>1|xnUT*B98Z*2a)_7*alf~7Swap@64=Xtd2ez(iJ zpAe|Bv$!#CI13c3fyBa?_f^XrWG`VI3Na~;S&6MX<4_ece5BvFT_rqvDhgWS%WfoJ zs!fOXg4fWr_LW6b$$0Jq7oZPZqE7-$TzXv*tT{~%KJ7#;OnZzUs@B-UGxg|)WVEGD zy4!IK=to^oc@XTP5WFxGyq=*bOtz&3uxSk57~`-?u(G-9KqYQ`d%F(H+5u)gIRRew zC~k0s#pt0!l#fG^)n1^xQKV=%lAsN(YXr(jCy_?cuM1XZV(Q78w_wOY(G|8=<~f6rg{*rb543XbeB zHW^(ceEjFPPK3IuxKdx_k&)D6TbFCBH|JdPI2IR5333r6d`AA=VRy5EEkLmb1jaRI-=0wPllGE6Lun(M#DJI?qZim1!F?kT6&*=>R>;GIqQ4)`J`%cy zRXCPYA07DHAO_bI5zp0xw!ElrQuHVuHx{J_vI%xZb5&5{oIY?)EFXlzSe)j2l7!cX zlg#W2kZO5bA3gmR%I>6BcQxT$6n4wY@-Hij#bgwHEx}e(Zx<|A5p_*Ykxg5Y@IaX- zU#+226?9Flj{t8;WYv+hnO&L|aayE*2*#{U)SSEn_G4sIOxy1J>+Q)A9xf>fPh4^^d#*Y}^<=s*zbWjr z(*1|GBZB(B-J@R*-TPCO*Si@=;jEkuka-KVh@RIueY8Q!imzog#`zhRb(3se@l^}5 zbj|N|Co?FvXd${(*2npz=FX+Ko*652NkZfN+24PDXXv=OdJ87pOEr*RmTkXcC!DJ2 zn7We)*iv#t864^W2#@rFGS>d1Fv`;QB@N2`3s6(rxkiSgc-`%d-d%_?LtAfwHp-OJI7@>(WE$GI3YD8b zn0{H(J-yOC@X`r*1{jAALN!D5m<6E=6K*-0U_p1Yi+6^Mm~f8faDaQxM?zo(OkdM| zskrdlQ*A|eyQXl1(lVRs0UN&cH*OE?zo-Pn(9{-!@HS zKhxTp%3jr>J`eb4JJc)xMJHX3w29nhy1ZSQ0|rj?A~OLZsxIFR3o`CFB9?Y~Ytmpp zy_xU~QNV?{K(%pYcH3%H|G|$Q{H4{caUFX2*+p3y4>1@IPpX4zS@Uj9*a2O7POM|g zf|~5e2R?$2AxK;zr7XCQZ~XUo7rO52Xt>-nl0~DU&LA8A{=eXasfjJ@=g{jepEyQF z#Z55jw;BZzFN_@u4Hwlp_#V{{CCRwmMv!<6>^i&o)txARqd4Uthfmv?RI3 znc-~GOxaenp!q1f?1;ji-93y%`JW$fcpk86yO4ItHSN+Ke$(Ntohc8YyL)Ky@+8}4 zs}RSJK}blsj<5{71g3dqmEOSLAW!~L3Ob9zf>l2bGT5N}0S3!yLDWx7eJB zERvQbNR=Fm7wb#&Sb0_Rc^ft8oslrx)^+@_g!sPB%6}kDylmN3s&zNhbL4C#px7}7 znj?s86GmFOMJ7qyEMMg@!E)w`sWK&iWkH0sr;R8()?Uuhxct3$BeR~Zf5VY zB7cD@1;(wYAC9Kj+Z%kTTCd=zk#jMNmc5iV;IHF?`2$F4h>@NP8HXX$IZMM-#dR|szP-=!g|=kQ))f*N8zFf z#1vqPFznyMV3}Q;@700#&&Woo12H4=Fsia)yu3W{l$0i$l?a?NVF%DnQoc@cs!#<$W82*LPG zx(`R2CRO_9KB?sVO{;jH4PV8z288Njx~i0MTZ^RT9ZME{2CT1icTheos)8Mw!M)Ay zd9JACTJfPNBt zOwt4q@t9!n5WTu!tpv=P~o0sKrfM!+v9=K%cAI6k=l#Y>ZYoNcfB zOi>XM&(yEU65iX@-f2O)w#X-^htgnLT_=7B);NX!`{wlec#U+LLXqfFT|; z^g44J_>}9M6{S<`Ww@S8C$TidS6OW~jX&{dWqs0c#CyE1@UuO*$c2JP`tZcuCP=qQ zv`C)@J+Ci6Jxft$|1Ey3Yd_Lu5jon-#!8KuP|9MpsLidK&54KS%@_L$}ME5n1mf z|6z>Kv8^ox?-il;a*L4i)t_5XifBQ%%jh`wVM#SqW^on;TPnC$IM~AbB9#%^32jOb zvKO5SEUz#%7mvK8bX5Pcn=v#^Lj|ZG9O}LC#)G@um^se%Xmd4WQyRoiA4rOXbJBlS zPH1(=+Gw#xbey$s;7PYJWZknXP)+$YJ4W|A;W7HR%5GNEN6S0|L9(wB2lTuq$+eui z;|tD(h5@=w$pL&}8v}rq5$S5DUZciKo~~uf;UcvTc{bstbPj`YME-(@0!yl$qr?jH z^)|maDL4g|$7$6mKMt0(aI_S`hk3b%OJ>qTX`34jC~{~BhCY8JG}d3IDc{Uhn_}?X zqHK>0VDR#k^lJ0`?eAtXo6-c-S*vv)`6BnxX4ug~IVkZ5Wl0ma)((3GSH>+ z<^H9`UQ2`cv6rlKTO}Q;>4+lcUQ8bguF$1v$EMUd4t>6($b8McQPZ1z_mM@*Pdn1A z8OGTqc>xbEK-7eK;3myCXH)9yntR;W``NY!cf$2LjJOnRDLoY?LoRLobp%#m9A})E zUHILZM?jM26Q-LQCxyw4K6C^LMQ@kRw)BJf+Q8um31cygEu&e z^^g{vnl5Hv?0;K7>-@&j*xBqO1yNRPZj$GfpH>*k`p0!lkWQ_u9t$bi?7_x)9b~b* zi~HMje9goy~x^rVl zGR|Qf1sJEaXj9QWH7IITg(!D;9DZ=?EZ6c=0{2w9E1orNl&L-Z&VG7fL&OdE9c~6* z1|KgLN)h)u4urRIY`P>HFdpISHD9m?MS)m%-R={OE=L)iv8U)p3@nsjpT-F9EadFg zdnCW%vvxJIQfh>#nsqHXQ*_aD-Y_yZjI~){wOrOMUvLa^o!bIKyRoR_p@b|${V~sS zi&~==4jfn1pnp=E=XN0F&cud9)auS>W(KS2zuPNY?hajBa-Q3%RJ&3xU&mfT?f(bJ za{c+WqEqdrl0P^J_DSnEco^V;1#r9mxfLgIrs5`Db6fJcT|>T5*HZ206N%FHc7-(} zjBYbo_1Q;|<(%$9DN|ACrg<}0Mrs{8G(Rh3xe4e#Cbv_s-f0_`fG>{Uf(j;|r zd8iSHhZTx$d}CD71jK!>TW4mQ11c><%BYdQ8@;)*ncx+o*reQ^{n|7Vw>)=-GoYlBL zB$Cj-_HJ%_EwuL$bl!3RNcSih=AwWHn&6##%CT&t20x4@q}HDMtFC*iv?q`y&;~P? zhbLzJ1gTX=perENr3stSha{+rp}%#td>#>aJDL9Ne6gSOe7vqYW(-P9ARnc; zeAvOm$!XT;z%t#MG%9J&umiIUmuNIf+Y-mb<(#4jn(VSrAl8vDKY zf)byxGCpk)b(5C$mYnr5naAza7QYK24Xi%IG(7jXYvm44$)y)5ibb>_=kD`oA&X3I z21BMsHxKo07RI_=z820$#=xkofM^m7z6cQ`S;F%d+oIdM{ygrAHQ{N4~G1^HS3T06t47YoF~ zd6=4+ic}w2F~6UlrjAR?)U}Mg2&qTZ1VZN1?nX|!hs$_8 zp`-j=Ao@o58a+2mQ{rb0FA=af!j zk>lMOWTD(^%}eT*yGO0cDzp<>dhTHr=eah}dPcJBxHejt5dX2F8(WV$tn^X> zEy)LBJs69XY-&gSfKSQY;C}7x&JYlgFfhHz$^51U-zOgQLd7#+;aeE)aLGRF!S_`fN^K)s((TO*JctZr6~R_%{X9)MZ*517E5{G# zQfQ?*9unB1a0z2T6nW8F*4cG(1rm2Mn8b3u`%*)YH!z=3IU*cV1>96@U`dOA>5VY_ zs8j~PQ4auKTOqz|s;T=nCPEAhf#6x$b9}AUq^@N0i1KoVKrZ;}G4jsQxYJvT z;tPZ3{P><}xf&Y6#~fnkaDCXsK@?L+;@ql~oKQySfq^5%58YnpHp{@W_)fp#X4aF) z%EOS!k9Z7tmMIO#@U~d~Osok)j|E%WG(bo_WS!(xJmBP_Mtdb6(d9lspb18Mk^y?M z-nNv)uQ=FxhZDZGsV&l?<5)7KE*7n2m}JNRn5OYM2L>GN_Y};~pw8GE?WV$Z~6?;8wL(4=w9$Uzin&FgU{n@6qEHywKiirzT1p zV~Nz@exCaEjF`K=DU&csW+(_z%r9nO2dJ=!j?C!68kSUPa2$>`mdcTF%ydX^cK}_f z#*@~}P7X0S58O-`yKmCyejDS|db!|P^XxZVyKU7xI}RmZwut4%vSvsTqN>_knKy#g zeq$t1WlF;7e5Q|D@ZY-fk2$b0b6P|jzG^1X=J!Tjzk2BjkyIUk%lea2c3^LFROVzi zc~U^FW`i{fcyqvaw#O-Ad-Emm`k+OxYzxH!yhwO<@CD20p;N_$alG#(HJ=BTso3so zwtbGeEvYdkkizJTMxEpoRQePKY6+vwLepwaUwe5s0t8NEmJ3RG@Avq~l8B+2Y(L2l ztq1oi-d0N$sZ(81q9D5^pXZdHWGe$iPZ7@*8<^wSX7`cgqX+-`>+?=bkWWDYnN~8N zd9~5yDs=p{Awz4R@0x_}eK6?x$X9i&^Nd*IonT(F_15y@kH>dl9=Htx{#HrUMt?gD zI=$02+S=9e=2Z0quc}+G8f}!5Po2a`duZVU;Q+tL@#S*w?&I2+W*7#8+llzb=RA2y z+kKfvixJeQE%l z-dF7V(~iN<)<=+Iug1iU&~3}v3fJ?H6@ty5y4cw9&t8N@t?qe=L*~ z%rp!m#0{YM>##EW^v(+AGywKIOex#hTmgWW%b6DRQhBjBgo z{J#YJH8l+9&RldzspCfA;NVM5Rs3^kSHc25U1god43^m7X5|#b^gXyV zLyw@5?)zm3$%!M5p&YTE<~^If+0V_(X--Q$l=u&rC6Uk`oJQLLe2Ryyj;Rb|EuJ6`ALnrU?b- ztQrwnOu*yF3gVD2diRbCJIVtC6SV@l`6VUM-=?wlB*jU|3Bl4hsxy|1f5U0M`-S^U z5;2ga{#5@_Brb67RGg5AKODxETK{A$kJnqz!X~RWJCHpqA}S9ZbAZ_6AHNzG7c7a0 z15lj zXCy|`F1jsVQmZ#?&Avh!Ftz`$@$WRSF6aIrlBSlqlscA$EhA@kqTt+R1_np8;ZKm9^{pjXHQ&%^p%^LH->>PQk?e(@sSgu&tC)gahQ}| zUlPdnB>Lq#S4?C@&^{cV{~!uaB>0ZVtZM-mDL1|c&?Z)82gsRFxr}`JwmLonf#MZ@ zJeNq21V15ZB44b7=$`ZvBb~m=Bb=1|OwG_L);6RoZJS&SsO2Cm0~pRxM%Jn-@*>NW z;lp)v#t!E&|ERe5szur6Y9iB$2zGka*143NDl5KbQ%s8Zg$sT}A!c$l$zRdJ)|Xof zK~8Wvu`yGvzs0|kOs4&;jGM*f%d#4F_tY-r(GPNzRc~J<^e>ukBQg?nM^5?qMhSvI&Csg-Z%%=Nu3b5Di6>;(onVwZ~-sruI;8@Y~n z`0m}dGl{)ZeoR8d6T0F}_8j)8#ZiK&s-BQmD-ENmcYY43u`+RqVYtG)j}P- zQ-u@x&XL5!|Mj zY?}0@;cRZ2Hh=hN*Mil8_xaj{uoXSo2O&pn?ysC0{95#zU+xv&pga$wbW+uR{3A=a zmIevI|Hnz?wEtTt{lfF@9#Yu?uc$E^2LB|+a_W%)dS!PH>Uk=%Yxg%u91Ussim^I^ zLoH-}0>_$vc1DDg<{aLXu{hk(hYUq}=mnSe&-}?=(z^rvMKdTqR_Drw{ol=<(f_LDd>UEDp8YAtp$&hu<$I5 z8mp6X{XZ;yWl&pP*LEFucY;%#;MziPhZc8t3GT(+B{;>QSaFBq?(P=c-Qmmqyx-r< zWM=OfZPW8RvV9&fs zg#2)5ZkFl7cQ9r$nuBuC(1v1!la$mQ2Sh#0sA8*3+4h|v7)@ok%VzO~8K+Mv>OKAb z-yWIuy-;dj>Caqo4&~F4U%PvW-3*Ce_^{S4}7*5#z=r5omi1 zk(t+iOs+|1^{nsXJssq}LJ{O`8472y{RD;5?2Yv2-;=zlvucoBL(Xnd3 z25M!j2S}x~RS7Q)U_pOveeEPHmtH=AWuLSd7Qv{Q0^XjM3^$L`5{uJ07gME|*yWQP z;Wr%AtctxEb(+#-&yweDRn*KsMV+Vphvi#6%^�NdgsyY5JhKC+FDG^LL zgw)oPCIozJdbfBt;Ijo^;VSp}GOSwHn1F>wmaY1F7W_yw!Gr zgJf?X8uYw*)hbekk1a&93Mxj~4ZtY;7a?Ifv|<}xbrC%#(~^2wV*WE#yk9d%Ru&mk zI$}Q~nN`_KQ3+OZZpEZ^Zz)u4RJWfzo2R3#*K&GYs5JaFd_|7`!>zJ%R>VvZ&~$Ng z{J4tYVT4ez`aepw9y|=6n9r&I7k^pfqEvfF&WRGh zLpy3BZ}|yhb22ax(H-?C6&~X$B7o?~?Rc+adk~^)u-c5rJ9%ut_%&ok5||TBGuB?4 z6p)T&5hh2;{`JR}%cR>QYs*_>y0i+hL4v?_7H?nHdgY#RCux=^bqv-|c@Z#XC<0M| z&t5|7Ws$`Fiwev6R38&ID#$Q=j7sAfxvgmN_8v>%_Nm|Puy@sZb#=sCn~}{zDUgnW zn5vv+_}xhX&X0`aUlxw3>~`z~Z1Dyc?z|3+RF>9% zkLAk)XB##Tcgdg*Z$qU&<-%LQxB!s%+s--zNSa^0SiciReTK1{Q+D@`%RDo3Mt0DqLhl2tk4*6cON)70HVafSyYBw6jHzvHa0Zg1Tcu>b= zNdcHdv6uhCDZ_9)&sTqVP4h7Um(}XP3stvCc83u$&O1`BEPIljXEdM~O*D`?XDgR_1z zwLO+VMh)1nDKa1Twz=6>?u7ivO4JjbpIKaf$c&Pzui1xxVrP1`P0J=ftiQww48>X| zBHgE)G6hidFmGaG-EPB2C32Y*Ru;k8sZieZ2FkM`goo=URw*L;UXTptd(`0)cr|I^C?yNkwgGgYodnKzyCr{0C z2hLk{n^zgtd}$vtWnKKsUlz#6K}w!Ga>)Sw2Njw8oUn*26n8*q^6#v>oVs{UW;swD zgo#HI-fh{l;VOksOUcZyss*0|FuhQdkqNYCzzMQ<)A`cc{)2|4B}+^A`Mc1)-Q86f zT>G%XX-ASLE-kvD80FXPbB`GhC{-bIo1d1@HJi}w+af>GJO1eI(>Ky9e$y|RDH_$( z!^w-$B>m`x!RcJKh!)ZgOSN+8`6b=^DfIQ~)hVelPOeiI2Pqd9p6es+u2WLU361Xu zv-iv@Pfu7+PJKYonPkt9-d`2+&-~g^3@TDk~2YKv}3ZG@}%B)o)&gT0CK|c zL1PC&jr8;r=G3ZsT@T*Y{cFqy7%6KaYy69 zUifJ-_Ln^lF2wv28Ya|9cz@_^2rzSJy7EVitqFo;GiM?ken(GEh=1RfN2d4I?Ea3de7l#D zDN^!=DKI8ph?}lDfRf*tT1I_?3#`)1rOU5A80Of&PN6k%nmn@j?2}tsv-)DUjT~37b?SHv97WYGMmsA$bKLh{WMN&^z<;Dn7uqw$qhI0 zRNZtlN3gKVxZT+){Y;Biv*X5FG>mq&5)ACoT3O*MeV1UqT)j$BXpd$+ z{d`3?q(HHz-?J-E<*Livx8#_y+>}J(=@NR5Hia(Ro6PV3*qrf?hF?qr7n=#nyNt+E}wKdM>t-4H(o?O=r6Y- zBjSOCApsbUkl42o>?*CaHaI&4?yGqxFRwWgFqAbVa)eA2S-gXgH&rZgo>sU;uJTY`up{W}lnYw^Sjxa^?MvzQ<3v)fIj(M}HKSa>8T7 zl|hjqBlnHAC&GUF>Qi8wWcp}+uLE@z+fk_A@bo|mx@7emRZr_I;L;cZlhSRz6H=n_ zi$%>7&7Y@(lwkFJXL+pxh(8;A$lczkP5Hau?H0rzFzByCm%ZL5_O*iSQcf)NcZTVV zu)iLM|8KFmj)YGw#TJVo4%bVGUz0wa99orEKrVry{ZMl=uu$x*Tx+*iiD>cv3Kpo3TUqJD zWAL}=Y6J&2F}85HR_vkN++6MMsJ}?V^aNO+0_1rb!NbQ340agFWlo#lUVRUqtHm2t z?+ut<&F?9+4SY?0BDF9~;fryThFmjjhY{)pSOwB=w?b*t$Shcj9JIs5@%K%L(}Yun z4s=rnffrAQ*L1eVAnNe&#H+`=&}OU~JWQJnY0%3M+MBVC-ee(7Eym(SM5?YxEtb0= zXgPc%{FXZImA2k<(uby=^S`%&j)s-_cfqcrwrf6JEZKmZKCAzYgiR{K;G zGA(Yh6Jgv3!>$LD3Y>P<7N{g*MCtK*Vjmr3t5Kv_JHjf^J%}u|&|F;&L@Cew1dDCC zVp`Ru6bvUKP}0k7)3*IsOF~E|Y-9gxwV>d1zI==WI{|Fb zm=oOaOU00TiS%f6{@gvKCt*U!Rz&98WJ+wMF#ROB_4XX9g)XyacS~_n(6Ugn^(I+X zW)#9W!4PpR?KvtnVw%Bll4rXXU%C?JTZs&#w^KhA=MDFa(Jm>}`e3ECIWg$ybf0{B zl93pZHp+c~E$-WroP7}q8$(p-Np8Ohv?=nk{QoZ|?W4C&+?CtMedO{CcXtN3JBZRY z+J;0?`RH+m7tqnxH>H1;ckSztYCIU{vWexP)FXtZ~i`pZQ&F);`#|2WujtHL4_(P1} zm_CKToQzs8(Q(U!gu>&h01r!uKM1RRGp~%nwFFfk@Kt#~_2C_NXPYW<=+-{pKmO~764If-F5(ERgJW!oT{ zbY*x>Ma~H|I4tlowfWgpwZl#*At7@C^iWDup-8uOGT`@_6YjAY3&+?)l$LY(&hhaZ zP!zn_sNty5NQLLRXW-&}rT5UHN4f!;4!vdjacxvIT&b2vrWhuQq`+=V+v|Qkanvm` z!R2^ZfaiV!ceJ?9Iufg`vbaIcEEw@T_+Z?pRTVx*F4~NJJ1fEX1!a^G_x0XRE+1_| zsVanN-90#}#mfBp0O4RHC6nG5cP9aoDVc#jA6#4(7R-QlV$`*8W{yk<88MW&&J%s$ z-`z+Hbqf4Ka3nCi)+V9xw89nLQ5AIQVzWx~+tm~7A9I$VCz;$vdu((&$4lgLVNDc(9Q?=DuoYUAayh1<{60=D z_Y~y)MAtskG?D^L=XLCSQ_ZeI0i8$zD+9nLdgev@3u^~!F-}Kaax)sQ< zO{O{*=f~NOQ##{W-gwEHT&Wo#jAjPy2wG-1%X1BeOk;o=9-Ibj6$9a{Nu|D?&5L_6 z_uw%6K)NKN(7+G(f?(ceHt~Ler73;Db71T2@zW$BD)EuNH5h?lkeS#N55Zy)in9~X z4D#4P+$GO1c(p)_=T5AP-) z?}MJPE^XIEG^&;JK86H2Hh}Rs(jZQ?@|?D|T`BsqzxrZKBwv$8fK_BcM`W&Sx#?++ znz6&;OTD9sQ^udpnn&A0DlL4z_M}~1NssmQ^Bk?+YNthO00mGITlr_Q%62=7Q=syo z$Nu=kzwjnTU9O0dUJ-0@npP9^9VSR;MBvALpsnd?JkE;CFa_@Dxbenp)OB-w)kwNn zd#C7hMIAD9bu8nFY}aqcQKQz0u-AfFTcperuBBwTB`D4Ut?GX5&i?F@R|H>yT2Gh1 zD$W+gT^KnEgROu2t9EaAI-~}?qkRdwf8j@)5O!uJ=+#hPE;X+xCa;EKm9-yn+3E?& zgw9b^XW&|ke{AC{vM90Y`}<6};=O0HLUUP&;L@UjHKFNMO}@1YnRZnq z4!2ydl9rsFDF0dsaBxt%N6q0^y@4PC1L@A`Y{Os6MOmff)cm1U{($#OGH4U0&hhn! zN~fA_@mk69W{3I6%8Xl@SSJd%P5-qJ7&>s82>VAvChv9XZ#hm#@uV0a?DUdNdf@hXH>e`>f0_q*c~qn zSF}A9H@d~0+Nbm}EiZN)!JA~B)FR(G8qA1$1ViGm;1(Wce3%!eB?oS%tIYWMed?pP z54ArlCE;`&JKb3}5^@re>3iY*f z^7E)`$aE{xI(O%0E?oCKSnNz)YgM@s?&3P zum~Dh@_0mN#P$fJUCXw6A)rNKfu6;_FP4WM2gQVdgWX7T}R zpN?th%TxfIBdX|sieVCx)!#bOpm&8!Ply?x8 za@yx~fJK-0g{_WqpzX1}1w_z+JqgOb7W^rTtC^imBw6ixt^VFD5QYtHslpFADC3d) zX#ypH;76|$0R#Ke*e zhgd;k*5QH{I707jx>j(({VO zR2FS1={d6k@8K!S>t>Q>mA@Vj2foBjqs+K0OG!ucGc~Nl^wNCx?7^;FP2VOKkMx+# zAz|D;?xf*sCBR-~56G2`3v71Gs4ULQtqz|`c;eBX`(D&9ryPz{^s}}JDd`6!qV`7? z)&hCKrbp|)Plxn3JzpBcec+bC9?i~Nfvgml5#;R0=$BT}lUlM> zSU)PEVk+( z5n7m#UXWMWiq#W=H^Y{qujg^&LKeFNGx|TJAvC zG3Tv)JJY*enh!9v8e$wvH$|;y0e1}xmO%+@W}d1&5->s#gN}`MpAZ-~vVo?i_#1E9 zwVEudQHJfAXm$A{Gr7ZRsTUWXqHE5~SR5NgLob(4&1U7MQ!;JxpY9!oN}Cb(km78P z3VmJ(=T7Vj1nmfhAuRgN4k@RXSH!%W{&lPo8UDt^fTro3Z_yk>$|NNPw;AZwC?&>n zdjCimXgA}pw8q2O=axf_<#GpjyX>FXTm)+5L%k*2o<6SBlczsRBB6-vC!!UxKHLUj z_cbWDY;w+(H~li`&0BFAmffX^Wc%UlA5iBJ4`DI6bz;aF(y@L$Ks|J{H9h?Eb474I z+U6dc==H=ox?!J{Mf+dm4`5hUO~yX=6g#@U<{Rp(O#_+4r1F~U+t=N(jLyW?AMu{9 z5o28#?P|$Ao@rjZ z@z#A`HrR=Z;3-_f?JVO{M%P-h^0&2&-jQ_bA#Zv1?v`8dtMNx~AfD1bdwjf#$m_A# zNIKKfRhe7!ylp|f&#$^5l&=XN7gaC~g-(nef0|0qLhq%e(>WD^FN`X7qhzHii z=bBV@&m8#5z<6R3lnzaaJm&X0w(lPhP~&Mw4Gxb#kE8>`T0f!PjN9feW`*(6hA_5x ziDE^_UBlNpmpTK)`3Z|xo~)u(xhDm0d~9`;MGP`9(skgk=yPq&MseJSyJwd{+e9H2 za?BI}Ic+?83uF28{t*qwKyTdLLc+A$%tE<^qI}wT{jhewus%8;BIm%5dDom7+au9x zJZ#W^TxTw-BSSQz@U~jY%uUm~K&xBE-4W?N-@|OthE`Ca=Rg)44N5_Sv!fKdHKQwqmHa`p z@dA~7X--T|=j(1HFQcwth!`wV@U1XJy=~xYpaT7gVE1(teh{N1Ik)E*1~o>L2RRYC zRR<&)Q)70G(8taC_a5T390qby!T6SZ3Re$^9++Db{b8uMKRxnW5P+xC-DzFd>V9ddF=8HQ zkHr@trP#1<;*xayj^r}zw`9>@%5Z1YJWZLP^jP^ zxK%-^MRQ|YWHO#3+w%I!VAjV@H!w&sXwb6--n_kwQ*TPQiQ*H_Y{E9}*>-9U9eE&r zdl@I&vxja!6CVrB?1(2ap!m+n9|+WEn}iO*+si}^(=(nwDbQ>H+(P4 z9%06+-ZK(sGX@ZP#XD-r6|bz!{qS z51R{v0Y2E5espBe%c5xeGxz4N@{Wxq=r#OFkv-_mv2u;gVQ{aH%K{INR?i;YxN{Zj zLpf(&foSXXX-#M^lgNl!uX z0D>ZPSDHM@n6+PPRG>^inYXzyX=%RKooV|`8|jwaBj)=0{Z|F=yUK@=YGm*U*ryVG zb6}JXYD!zhvql`pno!cj_%2t*bnrgcu?YoC`WG93&qlEx>K@keLt%k{d~B7zs}MT!++Ko0Vnj(@Z8N3?O-`g&nKU#yc@BB zGrCT`4WW?f$u9u72>BR*dc*!gOuKYxhZUMJED~**r4UnH9;)&e$*1VYcM6G3<5qgh z9yhR_#|u$f+f7N1xNVK@?%I1g1X~mH#q^-dENugKq+GwBZj4sk*8{wqz4=X=mm80+ z-nx-0y|X)9goagotKwUPo+_VJ7(?|Pc7%ZyY8>A zEJ6ctdqn`Vok%Pj;p(=bW>ie{9ZN^`L3x?krSBkSZ;B&Ob6jaVsEbD%m0cx4j0ka) z0AC+8CWrSX=2chrviD}FXT?k%^A`AazaTd7+UFVB*-s1KP*Dl`APHO+nvTV8bT7#6J+K#v#28Ph#Tfb`zGZ#J>X+xG$)@Ebuf_ zPBa!zf34`v>&1;w2*kmiZx~SVkY=~_yq3$BmEaI^_!;(0G)gnNM$gv)etjPJM`!f@ z0rzjjbY=U$!g+@CvPZ=1rz_#@mk7rJ`|u-fTqTZKb^!@5iV_7K336jLG{n zpsHFBv;k|Ya`gcHLFS)jojCwD1q-4GPwR5fiR+S;-`vkP+-9?6L1j-fq?no?>V>7! zA20QXVF^;T-EEh(TOcN=1Z8$)SM4Tb98GUugiLsT!QVg2V<125+X&g@`jftNaIwr9 z9c@tCjIbkb=92ZTKzh6su7BnpuR6;!)uI$@)Pzq(@Sku}x~%TR#l?jdLJNk{{GXLZ zBd2}V2w}CgD!zY{ebi8SxyLD%cfQX%q$O7XY^2KlR3E<2Vnk;k1GjX?wzR_O>~E%P z6#{|BYKb{g|`)%)jO zF}&f*md`DR=d)mI(ZBT6~Kk~5XQlsqzPg7!-P6eg#oiT=o1 z7@xyRHD+lK*olY=WI2XDbUgAF%zem+L*mF@7)#g@IW`Mz3}|zzpP63pibKstDb*R6 z%;B0$9xnbi1=IvJ+x@K>fTv>Yick{FldFN2pvZR9ylatfb`f5ObS}21Vs$(@cwMzdFx}tdcoJYFKisj|>dM+>gi!Ogq2!J<+< zdu1EZEvD?K#s|dTyl!JRSKGGpuh(P46 zYXodcDzC-h9p`2}C}q6xXwE~&S5${GQ|CI#5@@@bNw!^Y0!+!mB^Q_)dU%0J_3a8_ zV{8l^iiFb#x>7tGAUzw%d}LU%!!JK|S}F$5o9|50=_kSD;0a{j$&)B^)f-uhT}q}# zpU`}_tE%P)XIQkT7E4@W$w>2)cUfAJn0!W~d^%`vvl0DT#ECmXK8Vee+3~bBCTV(l z!2Sz9)&olVwp6OBWVpuj?L%1TEjsZ*QA240S6ss>h64((@_-~FP*qQEH1(^c=92l* z)ka!%d~d0pk(3m1*sjkKL!g_GR_{ZEO>Km{&2!{WMjdYkBqWeoAB9Ar(QFay1f7BN zf2k6cte^)5N#b;|V$bX5eVO zUU_{qpa8q`=4q$Ng?`46`1Xlv{#UGH@eZPgN1IX)tsa4lCx)70AQL1V%b7Wsf&!AA zV1a2Mc?Xuaq(euNC{znH!oDDcHrGsPLa7u91aIPh8 z(4#%YZ_A3J*rejAJ_aQ?L7?YYnZ3^@O$UZM)LlqlK2V@g_~u5|vIg-Jz~azzll&wl zBoiZq$*1Wd3P5xBSf4=RYTR7?uo+)y3!$Zw5hf=q02-_Dm@fa zUxx;1E}6FyEaHc6#Ntfo4u>(L`f0D2KQ)(i4EwcTO&m%m%4~$o{~AcAgUeKMN|qH- zkElipH){1P=N>E(yG)Bsq8b{+L)liAlJayP4Yd!nGa$o01$hrrzk!}0H;mjEX`$9n zm+i*bBvrBSEaVjk2O_$_FEwH*!?$0HtV3(zpJIzy2(sntZ3wc9ecdw$TnMfs5-n{w zmvBG6KX4K8(j)>J;oh)7c#uPnbc1PiK-}bnb`2Cvxi$l>a6xS#mP)0#hGK7!l^TWg z$4=CO9>O}&E z0&Cac*OphDENr$cBe`!KpVfkZ0J4ratAYy~`+_?J3;dWjxlKLFOtlvGglvZj=F(x4 zw>jsVxt-k9hy*L~8+lRV-SAw3J!PNuX5!pu+$VJnv8HCyzEs6iwSv7NE~fkP+pT+> z3pv^C<#0O@zW!AF^`8bhTjg8n=A_%MA4|M@8BS{9&rVUv4nIyXD3~hRpuiQbxouiE{ zrK_!j<2-5)nH#6&Bb5Yt$OorPc^*Y*`m`QZ{v%M~zz9^Lzo&HviIBx3 z!D)d!P{}s!C=vPZ_uGK2*+I2d-($B=d^#MY7?WheUsGv$PrfG?F-m9@g8xX3_-*xl zj}9H8XX+>)9kvij%lrfSk1U|=3uClYfO>z)Hzd_rdUP!32k=xutEHx2Wz;lhgeE66rCIPkltgYGuT48}4p+fIak(k4A2f%b;|- zqH?(kZh;Yda?Oe*z{mwk3?his6s<9pD`+{f~Y2XfLyN=PUCay?4G<5!*Tdfv)Gfs6A=ue*N=IS?VDP zg#y_VYj$YT4rPp&Kg)A>jQdUGeny~dhgoZt*B}_%o9HI(=`Fg`(CD|}N3HgU_d@69 zwWGerRvjB=5+QNJ{KE}67!QDDb)b=iPuHH%vtWBiQ#`K9ai04BC>s@6mIN(F;n?2q zuY+l#pS@UaG7+$SF0TY`|LF+aXNh1gkAa^{>RM;W6l_%q#llp}%ht2Zr;*}F|LGSS zz1`^SO>&_R-bMlu65c8}OJ3PV(*HeF>2xp!~=)*ty~=ST_B&Wx|_xEx(( zqG8smfbT%?txLAQcA_kIAETN+;)`Jz$eh0D`F21 zhN99h2=WZ%Op9U5*8Q7ctg~p!F^f*dE>w@Uu8xpj@McaFA^K7-|_h&s-M6 zu?JmU>-+HC6l9bXqt3G-i0D`yT$n_$o z7FtL(aL8l;^k}T%CboR{D45ImcwkeWW4-r1n%Fid=t@%V@7CM{Lc}%7ut%(;yI3=J zN0@oRAT^2{0yR`2vpbhJA%%lJLQ#Vtb1xl!)fp{8EQEQCs=_b#LwI39_pXm}vI4a$ z41f8LdDiFyD@m&acoQUv<$`igDG5C|GIZey>4N)Jg$SJ)Wwc(;Vre?le|K=>aM~r0 zUbz>lciwr*Co6kwQ5A%YDcQ;N?Od~Kd&bV|>W=$S_Var0a&VH6TnACso-TIBwbAm< zFUvsIhsClJA|sU^QBRGBV_a3X2dGN^Nj%-&Si4=~+|F>?msLkjy=X1eJiXHz5=}{n z9~`pJBeLDzDq%WaYsvmd8x7vrKyV?mlh{Mt?ojWWWP0M&ogEN6L(lY~^aw%iSLc-Q zdE|R4?SseO!K^&X-GiFemn{zUtrqb*@6r{;oNS#h$}hD^^%SL6fh>7nuVu=7ZHYpd zxg0Lb2BybuTB|Dku`*FNY2s=>MbwjCnY>?R_~gV{_fseXX-`=_QAD{hq8@3F*VP5z z(FcJV=`xf|pg%~^YO&D(P3sn-tm_e*(2okvwG4c3b|b&M8-q`$`P~e=-#PHoL(Q7mv^BdmE>r{M!g!9kFs(75 z^^-=U={${HgjsJHS#YO!Ykg^?kq8HOGMSOe;yWV^ zhQ^o4n9FnTyDH0F<7C0Vks8zqscD=c1+FXoMh#>7;)U-O6o{CTZfb8l&JUj>U1l9} za)YtFrLdXWveCS+nN=04fQ^nU{jfKEBTC=CFX5-6tf4ZZD!}JCvyQ`Nb#xNgeILHd zX0_;LYKjdso6LlnsFts=3lb0o)XvXLPt6RQ|IW@TOtAKJfiqiL!Crs+PWl4vzdwJn z%`>k}{Bu(2P+S2)je&ITejQVFp0G|E@?R#~N+473l!ci|+8u9$u|<%q$FGNc6!^63{ZB&Y0HOPZwz4e#%#y)rb(gyU0rDXSRa;DP zPvV0x)MKzC7ANr0Rn*A~+4SRgJv@{a-Q8I{SLO7SZYbLNuyzY+$ciioen*j~*ruLh zFN5L#SH(})C=u^PdrED_m$_pVv_&XNZUL=rcqL5>axX!^MAEgsif-D)<$V*`P`Ln^ zMky%+zmoLRUCpr!EdLurvTh-y+iR*VZPW}dJcJTnW9t6x+5uiX5vOob+oG})m~H8{ z3(jAsPVL>16xq$lMcFK!E@E%8=8Er+A+2tFgcbsBzetu{|N16Y;_eQ`9@W1r6Jt!@p`6wb zRWbXdHxW9SBJE+y1_TjcWA7@*LZqvggQkzE*f=w5p~hQRcx*?f3g=NQD_wFA7x=B; zsdIeckZC}kwz;npU+T-#v!)`KOH^qAPhsv09BT8Ba6j5;?3Izi>Tq$_-L2u`0WhsqBDsh)nR@8 zvQptC-fmq;q`%a+ThI5#%F9uUXf&W|QiDFZE``Q?EDYX{VHMv<%UI&34!fP*=1ZAT z(ht&w&bzFe1n+s_%hIUIs}HTwr0MdLN7y~%1B9d^Q%ZPV!p}m@b?!_ z&RsEzG5|Ev7}V_b@WHZfss`McFxx!3gp0pWvZmU_ozT9ptdI}P%HgNb0KF#y;r073 z%dXGydR}*;D?nB{oJ)pI;4!ng7TuvIy=|Fp|Sgxj~3l_-qy61&_h0#Wx z!f#((gwKEcuhUbAfC2oU_>c?V<+Z_J%JrUTCYXHJH?GLH9p(lWlKKX-1l_AHfvN+g zn3;`dM>A)Rmqr+bJ)`Q5xT-CVh^z&4CA=MhI-C-VlzTL23c1E}ucC)*J4tW2rVh5qHr|i57Z!uPPh1fla|r9F2Hqetao9fVFWS)3tH3LW#$xcM z5kVwXy#yR!?YJ~s(*v(Djfo;pT?!Q>?wcLli+3J!2qwL{3y|S7r9Tmyh$|=Uy3b7+ zF@i27O*GBkYEF8@kDoHeKQ+j>fX`u{*6S}GhKB0;zK4{v`^K)?YWC?omc-^x`;IYhcwZ!H=uF3@d-TxN2bM2qP9Q*jq zR-&96aT1p^?OR~%eq-QH$j@z)N~{l}EPCD{2#8k~2K-H8joPYAd|=v_ftc#Rq!m7G zmQQ~owZy-UiLHy%;l+I!)n$2wP*#GagJrW>BjwsA!W^3tbtLbnb?YPk?v#Bdfb2>v zg^2A**FZKwko1IU4rr5na5*)9+S$ZCoFO~0&5;ekS)=!iJl=3Xau$L`qI+YSBn)e~ z#~7YY*NMc!-Ju&6>w+z5hc&fXeOMU!=xag{dMjthZ}{&Pbo)mZ;%5D_m#Lxo7>5b?b=Yu}2Mh|+=- zfQgS&X_D@BdaNK*Afm4T%U|4)vNwk#&R?mIETY>wo@_ZPB!?IMgXF^Svm`&gTfX^R z&qbqKGU%#2i1L!5n_U-k9MghKZhR*bzjqzMq7@f%QgE~$I5OXJ86L(pD*uf0FgNU_ z^R=69^1Q%PNr9b|$@fcnS(2L%(Eu3RhH5F=Fl4S!Y&q^^BOJELg0}bQCL}n3-JQ`X@?Pyx7V zUdJF$%rA+p|HIeiT~*Hs%^7v(+Gq8I8G`I@7@pAy0b;2)bGViWOX(|%Cn^x!GfMw# ztu*mjvN*A!!(%jqvqJvw!C=mOC7#FOjmHJqHUC>X^NP`XJ*UrFZA#BvHB&|7;GIl;f5W zv`CdM){Qj>5h7M;Wr(wZg?_UxDT&Resyz&?lR>rr$#2RfNFhI-XZWP;WqD?u3AgwO zwzyUq!30j$9+~s=Cwox=0I+SQY_qnB*pvFt|33ZU!YGyuXGhVBaU!67XQOM5NJM}j zgummNr2V0d?5evXOU7@HgXPs2t7sV-?^LBWe<}L?;UbAxF6+EgYv%Y8qYkKF8@WZm z(|4rz`laK3ku>@y@B*o!OY^EojwE$MA^fO#6%@#C;KS>6unS(XLp1Vl`yW^%q2S0b z=uO&cFbOqQXZN-Xm$*3nW<`)$htlxoMlG57hN8XA z`d&GUxZ|BjA&lwTH*kKG8K}O8x!-G!6OY3;LqDvhKlmx=FtO;!6$@ ze3FL`kSV>EQg=INV*FrsEQwWBO`DaF820lgY2MFeUgUMs!%Z_Ey6K$~K5d`m$*p%uJcCDVG^yw!LQjOh zn1zRbZS>VqeD-mKOUL5i{KoE(*zC7lMvms3GJrPKbPkW_XR->)wjl>{GrnmyLfynn zmzuMVp`7ew6xJT>p@!6V<;?skNKMXPQ5Sp&BieN;J~pFlqe19YkbP(Gq4s%5M-2R6OvD_R$m%o!J?b;`+E1&pYjMTPZ2(0UV`W=pS&uX}j`C^+RZIe&q)XT>tg>y4&y`aXWU z&VqyE9&qgdF4eQPK+soSyP(tlfDhRTV$J;Ez@O32&uTIklrRnBCv;v&4`-XS!kSnkvyl!nJ?Ssh_p)`qfYuJ+q42rP#(dw|yZ zBWYlDOjaMd(*36B1>5Qiwdl(_@7=8f-dAB!%f;{uZj4&B`sdF^es-dS=alQ~fzKkM zkI>QElfXMtk?Idw{)%)+#`FEX$^o=X7t-yIo3VF$v5?`EW7b}eeg11QJ{em`b{v^< zQpHx`S`~d_y8h4-ldeUNE(asRWx0%#0v>MI(j$XF;@$7^q$MgwPC1jG--_$sxG-3` zo+uONP0}4|F8&S3@Ra?R6qQ9C?EEuwCY|&B;HWysr#}UjCtIVUo?MgaWI8~%Ssn&Y zKUR(6&G@V=a3qeuun}vF5}ms`k8}?!t~#1LYioGMHb%V3NnW5PGIqwPGq-7-fJ(m`RCK0F`kY;r#HA13u&yO_UEh`>R@ejq~kq@RW{S6`^Fy9~WUR6B! z$E^5%!ROW;#g{*#0Z*%UCnt|@bNpV+teS^(Hj^jPnfV16ME~FgZeCAX30f6XG?Ztr z#8BTOhDf`_jhT>t{s_I5{8d1|&yI3N9xw12O)9vM@R-bLson@cQzjvYbb1@ye-*LH zVnm`>9UkemrlLsCgt0UuL&D}cK1n%MUpdtsnOSe{1*?oTxvU$T-Y~UL3dX_CYYX_& zybV-J_D+Cx0@^sA04nR#d{c7E^E3`C+TxZE>|c2UtA2VDx)(AgJ6pA0*73MoDe})x zqR9=aiU;Tm7sFm28Q1zx?BL?Enfgzp`R%O3`=9QjxcM&jdvnibouA z5FV;pewb_VVh&TV-(%mz&PkU~&QB2w#OTAyUO#OYK3r@Lk+kfJvM9CMD?>{)-YkaH zCJf|f1uGOqw$`cF`yoO2_`cCFWY~tF=pl(icfFY1-V#>qu6?XILHZcHNw(WkoXE5z zh9+23meq@AJ^vV_#km4W-|Io4#hDS|`fnHKOSL1$j1ce|J3N(rULBf6BXv;gFmZ$! zl_$r5SuM?O!cLc<#Tk;&)ML?;5mNcl)T1y_Fh7{DhN46s*-;i3Wxht|?$j=M7)rhD z(EGzHE@`7Xi!7FfHM*cyh~9eplTcf5Z7H|GeH<9x&KmxivgCC=2#8FL-|nWEF;^W1 zun6X$=Offi2d~&Ni124!w#r-36(l6)$jXTGxXM(fN;fah;}7X}4m_lARj|kN#e24m zE1Nk{OS>!d4=d4%P$xd-nOUh0P%T^H@JD*$;h(72isZd35zNYyPV664{=>9diHz2S zZpOIzC!RYxjrU!`9`2FR+%E*1f6EoNf-f_|XWe-5eUyPhR+lqCFE2boLRkd`g`qdC zMiri|X^1huyX1X*32Cs|^VNiN={+|Dwpxj9 zd_S!elIFtRUS6|p{QM5Vem$~wkZ#|CNbMoDq~u6?$qoAE?%J@P@J`KCM=-WG&zqNK zG0J9DuR^UBkjqtg*lQcP!sv>s^k90HO6Cj`j3B=tutEP-y#BpPxQy+x7mfL^XA&KCqOYmuAU@cuR3nJT_Z0yl1ne(CEOJoc*QB|lOLLHM6(Ci_iV~%ws>?MH?2lq zH*!zleYWO(M=tJAQxncb%x=gr`_Pap>l}BW$*bOM#bO`mA6Iny0p>O-&mBCqG*61% z*7J2|NdU9$w!;5PTXr7eh1627r4gVeyPx2XyE(vSw^H->o}JjIv{q)bc6X~(c1$bl z^ug;0GIjCBOo$i@17yB!;`&XrzF>D#29N5Vg^?zViqmt5@MugrTnAS|EH+jqGVn6g zRrEZr#G+d!y)X-1c8(MsKCMub@g1DIKLjCAS*FGW2d!?7q6L6eX}E z*eQQE&Ks$D&+fRuxj#&GQ~W`-=t5nMNiGyhVHVq!Zsf%8 zp~Tg#cp}W$Jvz?6U5Bi@2R^(}^?#c5-=;xh!nI@-{AAZ={r500fq&xc!dG0-aux^rK}6$JObi~@sG#ojj4}W+keJiAI>!; zwzXhYotV5n0*TUgZzzq>Gmm_OI3b03m0Lc|1RM(bM|2&DOArteJ26`&VyA5*OV;)A zHw9p1)E`;hJWFccyg`}ck_V=`xWw;w`OP(3(JbDOZH%3%grdU-Ez5HSHq%<`af2!F zGJ9pB?OlXY?_2eSRXY4Q`WZ6QR zzu!mnBo`T)&j#t)-4nGDQJF&hQ6stf*{>%Sfe~%?yj7NiPS<2@Vga&58m(dNBJFU_x2=2?W~$0xHfd>Q)_q-#x^jD|`i2{eB+p=hoDv#msmvr27%0B2jS!6_nyCOdJO5 z$9_^XQnAdhJSpATt@7-B<#eu4?V{gyIeTcfnmp_v`bk{boq^oY@RnS+0G}Y<>9}a) z509s#;7GUtPM{a>YYY}(8rd#qwVaoZ%kCDkxsq5zox1yv#7{CjiOCGO%`T}~qQ0S5 zvhSJ5DGJM)HIcXS$$k>$FUIvuLC+d@^R7;PSG+yYGGdJjnu;^l$0^e77xu`j66^h` z>7=!QA7%OKL4tlG+-kGaeJ=LQZE*5JA2G45h(gaXs={I-bo7ed#fDA4L0esDDdb%5Y~@e&bkQ1XIkhT%qe;rkE>$`ZBbVq<23sPW%*&x*^^1xNBM2T@@Gp1 znFPWzO+`LKZU2HC@2kIKgK~l~R|zpy>cy48klBW6$fUB#wDoOHg@33jgg3**l7`_1 zhzHr{IrctLO7LwXLcD0&Gj1QzUJ2yl-SJSX@#9i`+A%`3sxUkAJKh*c^E@Z>aIlMF zV1g=`S@TcJlI$5i+KQa@KsL`*S9$a1itE5V5R_h~L;qUjl z7)hPc_mtYnm?u2MmPPaWjm@#sgK;#3n@uAORC?(DH-?!Mow4}A7&zfALM;x!M>KA+6oSETiucPO&F z{&aCr*LtnMRrLL)64tKYSocSjZ)^ZMj$6d0GsNO5;Cp?%eQCoYt1>S)+7ccMawQIN z1Kgkf=LjU&Q6P~#IzlyWCqbx{aEv9+X98e#CU8G_{tuSuIdZI!FX=pC%vhzR;P;vn zGrQ^#sc}rn-;IA$xa;fOZL!rjxjO6)$^jFZaR&-L-EUoak~z9^AQixcN1Jy`Kvci7 z>Lw!H0zDqiEA^@97;GYnB4+#_b;sP+*X3{wCmPxDu$iw4ZeqfvR441uwuDuRMMAns zufuudh$0n%$`>&zCB9v{DPw4Sit+Ydj!+-kfme;A*T<_BHGdTPsCCm$VdW_vOLNuK z;U!xXS^=6juR9@`4f|I(Bt&_m8~J55U-!+OEA3CH>t}Q;n`%;X96KDJlsn}L=o~t1 z`pxf3=SwrQ!WZ}cBz%{ZkN6H7M-URuk3zpE0*=r+?c;85qgHLznlqe-{Rh&hmKO^zgTcc&Dc#Y!^m}^;ahJ^DgWv3`ZH?2HdnN%dBMVxiw|uXXI6j%#I%}8-L=G`Zl37QoX+!1$AZ3%^BL-gfFq8Ig7aRV^wKs z##MYrG>gi-Q~N~jt^KzrbGAoUyqFt?0+(p8qvh&b9`n z4`u99retzq+GHQeFGprrJ(9DzR%LAcau^>kNjD)`*Q$SNTL#bRWZgUN=)3S#bcL~} zuVZ_iZ-lzgJ#Ho@CncS`SXELm)F=59n-Xzd7SLe=pC&E;EkHMN;Z5Z?`hj5en24G| zW)V4ZACx06sX6&GU8R+&H|n@5r@b%!X^_X!6ra7uv|68r^KpnCIREl3=$hAf?IPzH zKk&MV?d;cylhtAqh2xYqo0J>(lFi!qT(|R`?9Yq1o@fzkf{TmhGs-*a)w{mH^~lu~ zXjMHmIwrLZy5~^%q|Q?hl1}ot^z;iT1oE_tHV<%02-YB_uOz5h8<`gJ&dJE;1@#98iWf+FzJI>Xxjj#Wz=~Bt zIm2NiV?qxcaAsduYoI3td%fapxmZr$&kE<8wdml&NQ} zo708r?X|2(cbLd20>#sq@tK1=Dm3;P?Sz>l-Uj!oG{Pk5XV#iVVSeB7HXFWov!LPei1e_B!(( zLv5K4I%sH(AE)qP%K5-#BMVyCAKfIyh~+Qy+!Cq*NNw;+LOP^?u8AFeW^&%`>-{md zdAUTyMKz-e2RLG{s6Ov&eLIejTjPQWb%N%f+B`m(u;gWJRNf%YdQr1$+T(4QpRM4m zGCRlj+fsboQnwIvwxHo1TU)2%E^B%RRjPTSj_;XZL6!{KFoa0csP<5Ly?wpCb3|mY z=b925Epr37luvj@PPFVwnY-?i9UmEYW-pwNOKx-|m$oZ<(qT+y(gTrlC0D$8KPhuI7`R zHR9egCQSd zCe&w|6I~cFkvOsb8u-SLwlvx(Y^(L)2X>db6en9^4Q`TC?PnXZBr!YC z%#aq4hT7~Uo@)tUMV`lP;Sr&ZjIB&(qYED>REA$c@}{66PQ(Q)6RZtzvGq{=-33WIX0G_1}Fbtk>K?tb~b- z_tk<7Ktl6Acx`f9tKXeX#FXCH)P6yYp*sV+2o#G=D6u}UwF;0ZMQk;XijLvjzp~#} zCqms~eDuxRUf`fVl-5zt9KfoVA_C!5qSM?{r(lN}nHGh65vM67MX3Vggz^_qKjdfI zSVJpN?thAX&xhN*dbW0ggji#fV{Fo;U!mN$dc&1?Yx`Ze*ICJ<@RTJ#-M`E3(o6pa z^Os2Hw&oNHEHyB*jXQocikHEu2lvrDdQ0=Q>-gCC;J*x%b+%=r>=EH@(Jb9t@JEhh z)O$2BK7d_z2zM5E)~Z>hZV@1-f}nEXGG&xa2EmbOt4jAe&Q(eGf15pE(wBczyT66p z3ZjD8zg6(xbmsh;?#I98AO1O_;p>0lU;o~-MKP3r!;XI?x#N%jy>HU{``f?Wxi{(m z)v5o#y37*QD?J8GVVN4@i|H`v7d5s+4_E~};arVN9poM7@8H;;_fh9{nQ)rn@5TLk zT*ltR*_$L*uJT8I;lw&Y1_Jh~OO^HJ_g9#p|8tACc&3e8$@{Rz&19pBzMYHlxj8vSMYQ?(rlHKw5{z>aTSZ53d5Ad4Vz^b_CX-5* zki4bWn+m9m-mZ|}3|T(ZyfjkD@> zAX30f?p#!-XlBjbVgp&<_w+b~uD-8S1D12aXCks!>Pg_q*!n}AXE(FoqWL1|oB0Wvq zBn^qS<1$wtgBUlg(tU<1fIre~Sy{uppdZpde0}8L5V5W3!rm*~>Ncu>vB2az&8&L&>iSCOM3PTdKXkW<)NQ|A&aWA!MjzniaeRPoI zWx~195e@@^2qq)UsNb-up9SsA0k4HTf(U=vlIN|Ybhio-9-CnFt?KmEK>Wio1U;)g z?8yxUc%d2_l@IoFS7jKP0_|Z>me#rr?HC7BO1QX=I)$%h-*ONw@?R;CONP>-t_Vhx zx#RVLnnNa@`hM>H+MM4pf}0ew9Eys{r7(qjE6`FAetKm;OTHte&$bNr5{{EGkU-Uq zF%>G4^?oWIJv;Cqoo{s{^}`~|g?>^p@CPs*!}U2wst)`z_%!Nsj*tfC14=P8;!}QW zUw;ay|F-Zf;0ZZJwV!ofv#<`12ftkoxoSP%w{LCsL~Bu<`m~`;%>tFqTa0M9Ap0yB z*l|%&YJF669?PYIzWD!dr#md zs|;98Yyx3r^h0h1z6N5D4{w2hw^#}YhJ#;UZmHQ$$~PR&xd~JU%+l+!xsdGVHAu`R zBK&ccB$TvkCuW^#Hm(8j- z8H!f$9G(|q=ec$P38E=)CnuN&PIfMD0(%yCe>2hr0dRI`_0hifVO6gG;nxG$T3GCG z(Y5EaqkVK(5DxaUW7Ta!;gc|u5W&jFVJJ^x&&P;1n41K%^5zt13Y#k*0UJWY;mWMK zXgeH%5yTqWZ~Z`xS-$qHwilC?wd5A7u{l;=`55No23GieiB|itrFI1pUyM04Jl8j) z?wXB0S1zQ=;fbjUIZEMGAsS&MjP?x)TANhU8ol@A)0xNaT$XwS^LhDsSpS8`!eeGu z7X~Mi9za?%IBr!&{rUsJiVyG2k{{(w+m5)_5G(EKyD z+_|Iyc;``dpZ$4>cQ~Z3A~V1*w(4PwY2#L#E_AOT_q1WQWXS}9pRm)%_S=b!9Uv4K+k6qhW%XBGTr$sWoGCdv{B zmq(EvGJN_^$qu2qg?)ZqUQ8Ae9#i{{(aOy)S?^1loSiBxP=w#)&BUsjf{$OYm|Xca zj_ktbR;l-B){@`NhX@0$A!=q6VvSVyLGq;s@aaPjmaC%7E8^%U9W?Dq*mIxvCKu&; z$D$QSOQDwYWJIYbaHw^EC~DNc>W@l-&r6r5jC~$lJ&UV zgBtA|x02*as?+Uv2tr~*Vm8_pnUGlzzhu%uF~#O_R?T3r7HQIOGV z->k&$OyUm)9#~jH*F>=a#~jBa4GF;9sNNX%*YjTIUt>XFh@S((Wa1Igw_KgH_x~!4 zPp$5aU$@018Eq!t%q{7kY>fyWuVwoko6biGxn*|DW$F*lf5gt?f#c@Pjw-Noan5EB zEawsxua{bUZn<*SMn#@%MV`G@w;_}-L@zGZ1oS~MCjH8pgUV)^@)?|NwxE-b;S0f? zmaPL#Ut*}teC>y1V!)EUf)AYyl)e8wj{C2&3Y^ZU3tdk<4hx8q~xV1eLZ?D zeZpP=mT?~897arL%o5C?m8g|;IkN+#DsV2(*@IWK3SCu<+YT zZD7pho3g!4!c7i3-gxiG{vG`r_5c2(j7~aEKVy+;*5j~isi}K`aQ|U$HL?k*GEFzP zO>MA|8S)?5;c|s|xP6#LlrS=nwdE zZa%E3H{V6@%zh|hH&r%>*QWtYV zN$UL)*gXr=JdpWlxr~gfCqBurzxEZH$`cWJmbj1+aVSFDt`rdv)JpRNpNp_>V&F~< zXcicTZpn4V?@_VkCe8e|8yEqOEg8rkG?6>3=7{H5V<_qA7@ygG{C^jjMHG0YDnUk zY^GHH`Hjqy_k+l99AJ=*glBxlRdZy~tSJzj)ACu+!h2~qjXFa*2A6e-;2SHV`d z`D{2W0(|jk!0E05=9Nw)#zZqs&lHz&C4ln0?ghWqwnI#V2|pOc%r5mnG|g(?un+Xzifm(^>2&BbJ)49UU*Z9OSPW}4nK zykrMHmpGqZQBqht%x5j#KMU%{?RQ(^0-CAx3pnEW6oEAva^0cK%1Mf#^kkVDl?XSc zk-oR}|0nTcE#s*Q;rKkB^_dqtD|>nIy1Kd+6cltT{W-X@>s!17kJ)f@{x7uT`nc>W zLnpDx8jMQ3=C!>WnF>?h$4vtR{@;7K5T7_O7p7kxxxIyECYHE?P`x)H&#PO+^u6O7 zcG}>okF4QB>mv@QoJ)(csIO#l`4&i<8C{?u#f^%oYC3qNS-tfjSOV!dxOD~Ba zF7_esE6q&=3%ZI-@PJjVI}*rZyO0sva>iFodu1euG!k9szuo#u`I`eE&~UzxAKd*I zia>Ed2TrrTAMxcaa`0A6ASQ101UQkBb^rAnf56ibjg$dE)ro;8-#~J-?^7QY0!}eM zHD(z0xD3t?7(B^E&=HsVWzr7c=iOOM6!Z6@-5`(iXi6DyQgHiUz*Qzpw$Q6HG-=L+JdbGD?A)KNHCB`6Nve%bf7#Ksfq zfi+rqUfsRveKMA4OxxX0x1H#0NuJNx7<*JjzED1sr|%_3lcli&m2p4T17*9KCPuyI zHf&q1R{kf>tsuw=)4aXJ;6@Ti|G7$ATK@N9NB)oCH2HG&Sn`z8O`pTfvc`d7Zz64% zy7{`LZlasOJ#bnq-pAOisEcGP=a`LscD5d_Gw{5vL6?v(gf;Zjm)W~?}erK3iTtY&$F{X~`gQuzNXu;s%t$hGRD_mdu zh^7@=yaEd%D#p%}&Ri^GBYSy?CC9ClB^NZx<;(8~JNd~bciO-zO$fk0U4Q3u7T)^k z^iULx683m&@oY(E*M0wDT+1Znxl9I#oR?)yOyGkuoMk@7r?ZkWdnE=2U z4G_*FlUNX@@r3yHO_jk(eF10_KZ0>hMO-V(4S)?`ceDA>nX^x2w!*rJ; zL%KfNw%A~A>wV)Eg+ZoU6FZ4v1ekZDi;2wiw?nh6qw(hCl&_5h#mzDgd=jdtLu%wR z<9GytT`auKm(gbqt&c*7OXpiNf*x+%Hg8cB1cQ?r=o1d>O*r-|A~dr1*bx_Pg#wbE z1mD}B2)Y)~t|i!OK|a5dUWi@?`P!+vuSMf&UVY)GiH5^X^6T5{VK1Z>g6}Y>*~cUf zI#PU`mOXh+=0>X|k@$d{jEfnasbo%WiDX1lcrRVGd!m>E^E_SRj}o<^0GJ*-5r<4D z%4KrRQ%GCp0WJ%#aF$d_w&)Tp+V@fhf?b4>>3jB>rxgy!N5XPlJ2l0mTpA3&NAQ(! zrR|+}?bhnOi{6!52+gn&t_jkfZSP2zEW4B;D=6q&uO7exnIEqZ2%ytbngx zeUKupzq8jd=6ve}oO5c(dFXPaX3?TnWoFyAt516Az?9eYXX&d)~uB!jeQ;_KOjfV4-HrTiFwt$`NDQdFSwrE zmg)Os{n+(VZ=&0tdN;VuS^Oh4bIAd{P}Ia-nsDn`NQ!>f@SU7Ja(4epeZT?CF5~!VCe|GG`xOF6%B0##BgDPvT^M z0_n%_hwB%XWw*jywa}K|eAk^$10)`eDfoChqN?*X8GPQ&gvKC*a7;WNM{@@F@oqe8 z`dWVuYQUq%XNS4$a9QrX*IEW4d98S0HLzs$lpek*EjK7)Gakt6NrZYGaM+P1NyW9i z><#-4U2`m`e%A$WYo0 z2oXc#QqSB}Am3E)P`=>Zu*G^r&k(B;{Wv~>>tH+=8c&N0%_JSnYr%0Y%X3_wD_kY{ zwY4uwjg#KcH{zxOG*c%YB98fxw%tGTM=?5}O{XZW4-!fJ<6K$jlk@^aTJc!(zcf@g zNb#9^fI4k`e5dCWM!x(*Ly+fJls+#H-k0@@jmq^e@X~xE=YfwIxE$qZ+_z#xPD7pe zGjLo*I&1>B#T}X@h+(C+!x~oqwoL@EkkSDtM;YfasE!6p)=CzWiGNoHQ z;ydPhjvq(o)!0-kpVE}SYZxww_E!{z3nLhWVSdnRap3|9H`Q*@UYCHR1X0fE1$r4TY?)>UAFZvLcs+Dw(M`h_I@{s1$ZEJ`DXlNTUS}Bnfh1) zpVU(SgQhHrb1)7R1Xb4++mL!-2TlS}4G=HIA&mNGVjORRO9ZZ8yy1Ifw6B?I60J=c z5wjzl37fr1`-R78Df7)YZ>$CFeznetOXqyg-1JsgcATPI?u-=mNlq~`9z3YXDS9-+ zb_cz3jlonf_6`cDa5Q^K>uPOp4^;_z=cOg2lCS2smgYZAX5_U^3YH?o>_BrjeUL1 z6X5~hJTQ1CyQE-xw|D=rz;Xi)!ndA1+qbvZt$}0)kbBZw(#NIGsUAHC9Nw<`k|34% zICcpbd2j2k%moCSOEMK$`|gTXWnruahOiWV)bz^UvAAF~G<_X%=16wmp%*jja|-6! zLpC;fNwjAa4M;Hm9_Dj>N2qhNV1M}gYTQ}r-E0|lqQowVto^UKmUu$YJ$gmy@}KlN zOM~55lMzK~6;wZETZOZInq9|Y2T9_mdUSQd;Q}f(AbY3P()`|>M_W|*L7`w3vez+f zb#y=!H<`r-*XYIL1>42J$FS}?-}v!hH9Zx$n3ubAWkYogTH7#pY=qHQ;Y2CdHczsE zP;F!HbZcYX(exwPIo*@KT`+^_um^_ScTu;@~UXTz`xw~bfKY|N#$C3=MIF?M{M}QQOTqZJX zC6ZzOVTtYb>?V5?dICx*o;if|OS5I0AWb_TZuXDVWKtrpNA}}TAcraIEdAOX$(FJ* zz)johQOf3syps;6ohRXYohSy?}k3cl8jR zQ)b>3ugB^ujP8ksP~}M37c(=lf5Sdy2ue66SAMej5bX@11muH&R3%t#wduLx>U|Z>OKqVKivk(L#y}iXliO$D$V ztw(Q+tz>I#WbYAJDHeyWwRx)AXhN2VrIm29dcA85Yqvf)YAzgKa%!>&*u6Y(FOFP| z<4_cyJc@g^odQHf7$@R6gE9!V64(UlNndu}@lc*vu+xPJ;b?`@eLd_<8_MQSBj)F! z2I@2EL$YWd>}}3(Pkl0e>bw9{D}+0~uFw_@rwI8~;%LGZIy zj1Si=REZ$aZ}ywC)+)zacL6N5SYVZ_I+AO;b*8{zYC`j0vH?_Ya!fVl@V!ie?# zNpus@`c;$}xaz(zaanVgP=#28skL##acw6=f4c!NHYPYsQyphgyL@}Z?_{g};bdoq zjw>y}?2p4(E-x_$2?jVPy*sYvtt0|z%%*?Qa(i4ttpoi#R+IU%2G`M62TlNsX7;c3 z+a}gfAi^CVoeiPc3~eyM&qDVZ*mS#`w{7x4H))~knJGElKsl+35FTT1+$Snrrf5j1ynsBsf#I7 zhdPyNzkj04Ctt3e^|iTqOB_8{buY^iTR+D6zS~!)o{e-Q7*NCtNqnGePwSy0AQL7B zPDf3M;F>U+_28qg5!n|xPL0N$2910hPVd>gYXBcyh_AeaV_mFC^49!(AQP@L`qng= z+HObDQx5m5YKdOdX4yz)g3k4Lln@^27`5mnY{eAZ^G%>_S8vX=`0U1q`P{mnSbLCk z^TO5U%!yRJ$SoO0-LECE@_l`dB1*K4T6|rHvBK@Of!wtem->LC?khavF3}=$6UNxv zZa(!7fLM=dGX80aMQ~W$2V+-JWS!wR!aSVxDeM6&+^%dmH@Q9ymHy)&ioy>D*%u^L zpQw(OLE{KK;M|N4*RDyd>oi@q$Q zKbw~Bsp-a2^2Y|r70utL-7lcwTsZ1oqws+^`M1B8JL{D=ku)Jg^03^G0R%NxBNlGr zJhm!lRFBams>m5~azd%ys&|#Rs_gt9)yh$^FZsh&jfYq$pJ{Vm&Nqafv0g?X0b7dx zPx15kboxDA3aI+bn0E>~LbtVFE#(idT>3vtKrKk=tWpyh++Q( z`cktM#2peLuj-j-gZJ$tp!=J6DASv0WNv?^F-AQVfNA_@+$~*ql>aWt=4-7Or^pzo zq2-J*ndP#^EEQNL!EnwBAUIY&jD>7!TPswu6N0R*f)pXcZ2oD9#A7{$$!a*o$c=^j&ZB0gr=UQ-YDPwdV~{gBH@2sql)I&_5}j11KUQ%pT91VBtMBIIm0e6fLhr66`Xev9p-eh?T<=p- z(8J)?%}1J^_fm_5DI1^rWtb{Z&|Fy=!dW9{)X;U07Oo#XbCtRfd@%a$d1E#^Gn$?@ za<k)G&iL{4b!m3CM8xM6pxF&sO&Hk7z)K*pKar7bm52sm{0^IS#b0^w z9RKD+d>9!2zPjcECV$O8MKPwI`ZE|I{*_XFcAJ6c)I4V#Oo7G%kW0zt6dEygA>Y%O zd*W+ZWLm3)teG&=UG%URbk5Bx97;;r*2%AmF;=m&{@f%-jY^laL@H+cc^RpqC8=l! z_0>mzP~L~i5?^~vuKIvyAs6T^2QsdudcCEY770C)YJdP^oJ=Vax%lijg>R1F#-g%J z0d;7&9^3Nt=P9zKp0D*<`#nLI6H{m`rssW9<=m4X)IziC+Ho%!-SbV0=tel<=-43! z0AH1xtOp~sv<~^Xphc(seMm;+?CFWIPujAjGVr0*yHye$L#yhpBnKwg=gTL2L`^Zm zg;zmHKJX0(HbL@}@W{!;J4()nscw2_j#=VzKP2wJ4o|{A=|XqUqMyGm*{XSAfp4~S zW8mwe4o!k%Sw+Uzc#-#98gjs9sGA4-(z29~c`65F#(@o|g)`saOcGg)i7y0e}w0EH(jU+M z&a+*l$MPIPk%)=+b7veGQj?^T-QO(haCr>V05QWy#P}#$7U}j2k&GLIW<0U7BeT#y zC%HH02f63@zXoIuVx`*@c`W>_V+^X)erUIvBBeS-(slU@EP3XJFDELP&vQv7iYfEp z4m7RF+?>h7xr{5ppY0Pa4YSY%(i%<-WRZdZW8 z;e@HefO$t0I&4_xh(_W{r=26-nVQTeGPTO)o!5fr#R9xqPs|bSJE&+Mu&+2;Ta!lP zzi`@^v3%S3Xe5ygq~B>oj;^cP{*_a;KFfAmQjSedBVWqX8}GF*Yb0Z zgR8Ay{<=DY2|9!4;82*)Bz4X*$T$)OH{zBucE*bSEG9@T^;hO?f}#E^pDI8 z+3^qhT`Ny|VAin|xBof8W}+<_3Vo;ib3{ z;p{~P7KN2x&RZ|WY-#Bpe6|ntJ$wTuZP@e2=x*Di47?*>1>LfnFPtl_yoec^9pLN1 zPnm$#s9(%l@E&KbKNi_TRp?A=^Q@0DmbmTX^73+bPdI61BQ$#B9}pASCV%|rQ9|AS z#$j@+Jsr~m2H3#XW0LF+f7WWvIr@FlCsZEu6Du@Ap1y>|jRcR|c9deRlakRC5boqj zn$H-eVX_Md49JZIkH7%qwmnWUHWdwFNHV7bzcAF5(m$k@s^DfK0?b8TnF=GeU_|mj z?n%rvM&_k}POm8L!(?jX0eAbKo!QMi=wQHpx}E|y{sn?gQCJTpw&82yBAy9y+O?~7 zQoL`oW?c^7_XtgIWp?rQNX|l$vA%2gxG>l^5cjtqz@2t~(cu#XdsANGa;MkPm7}{^ zcdCh+x;o*Ql7$~{xDbB2 zL=S%m7yXc)sghw|fyJ%nUL8^W8}zE2Y+Klc*S(sY@3kZlD@vyLKXW}-d0Zwb`Gc;k zrEbFftBfnT2;=dQ;A@%`n@L;6CE`Q3dui~WN~9c0bSDO_Aa+8dPLL_jhez+A+pTIl zn204F$+U^PX%+Grlh*_pMjj!k*0XGQl;Ftm51OYd#=-}9!uz%&5-Q{G?Si~+%g})d z8jq1g7qCi6xrN#rIi_qQPAV@vAsO=QKTY+_(VPJ+Q@ffNsC`KqKip`>f)PIAwlN7fkOu zl25uZ5A%|M!3n2a+CT$je5qHbvxN)HbLg(yp(KYRP`@$&%DM98lcFC_bqkEi=zU^Q zeTYa1ZYW(psF=$hUS@-U)?rN7>V%Z7pE+ty*?7PWgTK27S6UQrylBg zaf{ngHhq+_Aj0d4U$M~9zHeJ12)=6!x#WGGT+6SxMz{3yaxbk9b2>Y{1bT(@;B++Y zvL1s@J+%lJ)(Kvj3ay=e7G23)DH&qz;i7ix5qz!Y<-Aa>kF1`9A0japven!v;gTNQ z$UWej{pqB7qHaI=o8I&EAzQ=SBjY=U8K+vF_bh$O_T7&**(-+(Bvyxy3B|5A6MR-b zoAAO;>7q9|j%6+cJ5(=)1_}?hm96lWj8WZ}dMxvN63&da^=7S;Y*JHTNpfE2jrcO$ z<&0I_27^v;N+avG3a1lm_!CHjg6%Fmgm*ml@4(_mzh5E#SW0mbQ#tcO*8#7PSb1&i zQ}(WrU`oE)`1o%{CGOc6SJ!}Ob`Xtr7+!nPs-me%ZKDM}I*mXSJ@a*=6mFu1yov&# z#ezfebJ1zPpo2UVn_4Q|MxTB&V08vRxP=#N1 zmPIz;oBwKM=($mNgv|7bb~#yGpSYqw1s zH@0otX{?EDn-il+8hc`^v28cDCQ0L@jcxOr-p~8}glk`$=UV5nP}w_n{MKT4OqdG8 zDvoz;xE&#}k}m%|pfC`3=$4`^k5ykbe{Rvae-^XfEnN2M1WxroDVb9l63VZ6XE6dx=`V@t>A_2(Zm9BfTWe0Ifc8w9jNfnRpau)@c%Ja z3#G4NRu}#^5D$!{yfcfKZSYbby6PhOg|&wR`mwDdT#UJno2oji9ub<%ch06xcOF9F z+w}(lT`o+jYm)>|x%#ey^2L7wk|$&qP|pa-tQt*Hh`-|c8VDQox^i^99-YIAIi^z-knElqmdZR-yM`P*sh{Hz;WT$%;7OC(62kB2Kpa z&VmIMt6&I^CVYx9lr_60yXhm~%HA2+BYb9S+$G}rSrVV8qb_4bhn@Z1`-@k*##D`O zQ1+^C@8H&BZzSRB{h53>GT6gOYnM0(LzL)iGn^e6q1~fe5pG65*P(6D}_Hk2h zJm5$R;57`9kwZPMW@~PBD1>dd^y@G50ikOmy9+CK*E!PO;Nv0Rn=KNtaDRkGTWcn^ z@7*bbetXiwwMwlu@pM41UEijv+#JaA0cid)(a~V4AHrfKzGVNsI%(xdSu}j)wVf8k z|NcaTg+-l6<5B-Tb@AT&f){ za%fMZ6Jn|aplzvFoBi~{zh_QExm(!Z4zokZNWMGQB}p`4fk0nL8h!?ks-m+ta?Cl~ z;0$+WYI)x?GURfF$Vfsk$TZ0x|1Sr)Z6Gl>pK1TP^-3q=o;x^aUW}H zd+L>O7j2J#I&WF-WZ>Nh%OUb43GbTdLdI(r50~VVl+ai?P-nH8mrU(HmlF)e9>I^*-|-{?@uL5KYMa9B@6})oS91 zsSzr7o%4OrZd97E4>Wr*W@5HcAE)aN@ZIN5po><$6MTb3hP5BCrnSY>=uOZ0)T-m} zsQa3BQ?h3F8^(0XvUC<-^6oWT?Uxna=Ntd)lhJKE9$s;?=@0416O{D)0j;$vkSYa4 zj^lF1<>w694*eFsUW=-$2i-P@&FZlsip7NCUxHKUkx-fDldcswU)%|ub66Qod^-VB?QRvarqk-uH1`d8z zYr+19k~*C-#}H#P@Oz`mGd`DTQ&CiV*7S+jxK{fO(V6dsa`(lub}RDO>ZP z({7zs2L`Z&jgerDy5(R7>!_4eK^q-U$MwEFz2sGz*el~zxZ=%ozoIRvLU^zSmE?Dy zYRBgtnHXcq>t3DG-=!eyoFKjX33JtOS8DU+qhi+u+O)7wF#9CwMB?#8)-FIIFiPQlsft zOw}b0`=mFpKWV(Mzd2qXc*vmtKtlY`pm!Ha-B(-BY-ze!fx?=@vj=f=b4|}{{GCxN7 z>kP|rwsr0&o^Qt|OB5pb82ZChsoyrbBeJ0-h;jo)78Nz^1t(+lZ=QGe5CvU-6PjM9 z6X~F9T=q`C^1k1cWsY`g4F)tl^UQ82`WvO?>|Lv6^Y*8!TJrj6Je(5@q02|Uyk{Ih zypLj#YWTd%r3tZ^G3ur?`>iFY-rNJds#!wdsm1Wmwuj}G-~+wi&5g!Xp}^R4&x85f zA$tqUJqqdH;k(cTVN?tw9El)Q9YN zO4>115Km@StNuqo`v;*KmXyOJ;>JXI0zkD*s$~uz3FtJil*p*5#p;Wiw{Q`PkI;O9CwXMx=IcEPNvskc@ z-}BGzVdL*i`G;x+p>2sf4$z1fC{K}NIgp`}hf4FQ%I>+0k7c$!Vv#DGcg190pO|^H z%q;Q_d^1GA202*1B1~Vdxzt>NE1r3D7G!c^Ss5f^vF@7UE+aevWJo~|^Z+tc1TIaY zhSaqQ8`Noedd*t11xAMGaWiNcj7im#DM-FcFdL}t?NN2hs-s!T(nsaYS98=ve@(}oSz^Du zA^+{}hkJr6OhIWm@gr(8{WzYwIq=%TXfZoaaF@!(%E2SbVu^Lgy*}RW!C*X^U@qYF zj7GIzR9o}%Ugv@J!;Mh$>0J<-wSkfyvKgeOCl*_SF;pDp999|6iq{-k?7@xlD=a~# z;iqZ1X3chWW~}V}+xNmQn~4moGAlQ^Tz7kZ;N%TL9v6$fiH^+)!cy}kZop<;KY`BU zr}N5nfFC%u?G(Mm`8*j8XXR@7b@hF(4C-{J$(22=Cui3dSykC5xZul|6FxP?8pWo7 zS|&c%gPAzHy3Ybv)HD>oYKp-$ zFbG&~1Jx@b{SJeF8qn~$gCslz2U2^k1>dfRh4)L|A36P8pY^CHRxT?F`eU%{G-90L z4+%0O1J^3HL*$Y2(b;8koOu`5-LO(~Ii+uh^pFT`idT<+nX#I<-2LT_WD+fmfo8sO zo82QSRvjrwpu-zAWJk)3f$c!i4{FVv&<=3bjl?S2>Ydnj_sN1Z=?LiRm>{(decyc>V+n@KF)HmT6Gt?^vgMJ*nVw~o<<)j`;?9=N<^ zT*?|7<<`oguZxD7tPc`Jt&bnh;amn4~@9_zvR55fI-5(Ae zky$St7kndQN>3Vy>00%?+@`JU_d-DCVoOdACMNrdn8N$OsnC@v!T1*ib zK2ISmD&-Df))PRL`YWrUF<)0#mI?~$SZ;IwGM?HwlzG0RdSEbe+vAYC|F($7`M$hUAJdgdxwB^Czxsc%R(62Zi@9L3bB zsl5u}6L^YKFSKS7VfPwX{y``+Ml-{455s`8z6ajrLf$~n_OAm9Ie@!LnL;Uwgru3? zKT0rPV|+Q{$9AG+Cis2$w6zrk+;-K}l2kR6MI??<2=~N`EyVv`XoZiA7_VhTmJwSj0-h=@qG1OZsQnB}f^p$ZWY#QZM zEii1R%5MmqkfABo&Diz;#(Lfivo^vOsbu@g6!Mslsw&}V9iQ8Bi_hkyYr}oZ)+O~c z@(Z(ur?aIq=6)Xj!Q(KB08sk;MXXPlOXD#nSVqssDQ7BZu8&TLq@&C9IczSB&nA-c zj#h_lp`)B-{e$j1!BdFN`j$l?BPG4`2L;MT$iw#Q*JPDFb*Kk)EZ{PC&k&~z8ty(K zq0)9dkxVRQrdPudE2kiQ0UzeR>E|BdfXcGN9RRy>n>F>9BK5|h9Equg`|ClM?Fbeb z?MVe{&i>)Lst#I)iahpLXA6B_?p%X|UyG~K5LbEc239#8-QW;?X=P=h-;6kmF?<6! z8~m}sh@-;(>q1I^pSNHHAd4!yaP*R=&$~3F^Gu{H@f!y(wgM&N?*MW@rQ5%KIt-MU zhlP3sQOrRbvhW;$xl(<#Y=8Ign^lyR3=%o5&!H>*)#TYw6Q zN1R{V-S%wZz#KZF>@kIk2;-`+7@+lF^d*g@6LhNq6DQNZCo|kC_lG|}kN6W?smd!v zy7b+k?{ZN^w}Bc%V%0vZH0Ua2G#@Im{aLsZiRPHBW+bE z^V=oR6t--EnO(D|7nH zjj^hw6ewMvHMPTU#u`y%$=(HjLhi8j8&iE=fP67z87KsJ@0A9r-Ov)0e8E`$idv~k z^n^EH_!yHA==4xWAre)y_bqG>lini+gT`am0#*1F{xJ**4$km=6bppjGt0OuNpfb> zyK&$O&6tJTAS*W4i=i{aP4=!oho5lm4;?qL(^Drs(p-?^S)XzD)ftE-72VAnTcOx3OioQod`&Fz5AT~l@kDMhKY9bOKu0BOF7j)AG~(x<$a)D54&)1@W&uN3-q2i=+Mon<^IqZf z{pPXX(T7YaCP&Uf!K*)CvR~cDd$GCjfB(nh;PX@Cw+}swQH$FPSS8sx7q$qS^Ovg* zZfc%Ow>*7b7f+s>1#NBzuws)i$PWV+p<%#LPJ(VdChqeN)jwgdK}${31t7ck+SMGg zAu!4(gEfPuph>O2TjXae%2x@>_6{xojTuh?_PZgowb8rz z68%1e+S&tCaIinL&o{QW`8}-W`xDIf=Vg72rms<{Y{cjmt0?_~FxuA*n^*J18VwB_ zgCF+hXps37m}&Z1jG`*Z{YTF|cOq@uPC*@Q+c}C(`|^tyhs?g2@9SLB*Kr@`A}aKS z1#kx3gZwI?p0(~FJ9z~p;3R{O+xHE*1d?Hi1%UdBc;Xd$F3=L7iPR`t@{JM1VU#4m zdF~ll;`jVj=si`Qz#cEDxlppKKVI0z%KJf-Fq0IUC^uupxt*ru-(Z%&xPE$#hvX9J z5XldHT%o5cqb)12r};JFU_mWV-}ptz0$>x6BqMF>*_-HnURkVB8lqehyjZLj-5SV>|n z$|28mDOPh;gp@&*u~hXvS%`Wh`T2tL>B-=*VwZNu;`dd>R(4#6(wn4NSbuO}^hol% z&Nspm`e>7TLUqQ*1>SV8caO&- zoHe-$PM!;`NzjDNO#eP?m7L5Sr}b{>p6_f-8}x5s(4$&B%3|EBn#;W?XTooW%_+lN zX7OP5hY!w+x#+`Hq+mg!)5WG*KQn%3`O`bom{Rp6d*|$Y*w2b~RrZ+XQ2E?xXbdHK z$BRO7ta=z4XPX#oUfBa?P1@Y{qdxK%UB&-eAmk%4?d&f6_<8#6N}enEex_heQAy$7 zaunK_xes`gCPlU>P#h~v4#bqQx*bUPzT5_oYuw@p-8cp%ojU2lHDOX>q^c|H>nh6U z^5|48`L4Taq=Ju{Q5*T1(C?yqKNRO-l^^k09bB5m)*5l&%&K@r*Ke_b)EAUhxqm=J zLL&1|n#hcz8>_2$rM6Z@)m~}eg2nhH6s=$-8}M^GLh_q-KX1>;qzeZ09!W-=lTfK= zzw8aJZc1Oaqj?kHn&t3^WobcuoNX)bOaq%P7o1zqo( zR8=(;)YTcY4cvZ8e^B)KGCVd;8{ZnEFNTPp#bbwMcZI?I2P-*~LIJm^Xt=b}x}b{s z$1Le%VQO=+h7E+$WUmon3U-&B1M-oY&0*={n`cIq(y_DOW*Y95KPINLkACW^Ix)~u zc*5LIOiUK72SR#H>35~zY56roB;4rb84c`Y;+N*D*;b6|<1WGdNhz922HNssw)|o# z6sJ3K9oEt(MFHUc5R>O*H4P8&EdD?aM!+P}#u@2%qB?nNgrJ2lu87dU%z}v8$SRp< z_O?|B1E;8QmhyB^B-lJIXUInOI!YpE$=!`P$Pc|)i(13D_UJP}bzfv`EJ|y=Dejm# zXL##!b}88ESx75^IU}f*58o>3PF;oQ%8~eDyCJei-4*U`#z0p_JKpBJNp0a~i%t4D zJmqfpw4e&&4SF+Z_gO7VcGpl=mQUQ_r`a|C+Bm1vnmSqIxMd_k-36TeY^RXF`%KmM zcAk}6{oit@o)?c^f5+L~HCH2K zC>}$Jq0}czvww!{eAL=q`>@Z!>D*0XCj%I0+gVG&CusnO&i+Y^ZkOP*QZGQ~cOe&Y zWYxx=fZuuID#H>cm(5D;)!|G&e7O6Qr1X8mN{?7~r|bQ1fuf)tVvB2#H#Ah8nPUC6 zHSfrfRIc&kUjGgpZ`sIr5sL?*F1!tGrES5Z7LgPZA%){2bn^+5vA-=MTzZ5VCCmYO zPbcT`axHtTSW)sk2E203Y5pAPPO)%ob_Lf(OP4{ya0#0bBi`I0f8C2|BT)yty_c|k%Y-=QC$Q~KSfW9cuhOw zenUD9{+j>pRF{69uzNZ7@2^J_-c5o82++cayI!HF?t? zBg67mRsXbc6iN=7$;}#Ur9n`5W@*agQfaLr+Wf)|{M~4lKqxs8>Zhk)RO#LJL2*oP zs>hggPGu6KhISAKT@Jj1XkrgGPDU~@Y--G8tnjitWkSM8QPE>C=dkO~VvBD~`%s;c zz2l%YxpM2nQ}`kmX?-jCS9&s`F<4+*UI}NV;1i z;}Eta4q168EM|9Q2rx7D;oeGDc1qgp0-KJx^mRO1mF)*IdpC z*MRGodd|IGD>A{O@e+3LtN5LFu0&$kdVLdziRph!^Ga$`C~ueb*!ty%hs2Ty5YT*1 zG4)vM!cKi)O6}{Md)siuC0cpvU%rBx(s4a@<@Mrp##VB>2a5Y&)20M-dC}R^O!&rT z?~IY|W4H4oSPRpT>#WroVd&Z0{(#y53eBeMODssg!K!u1i*jtE2DNGQSPB%ZV*y1* zgp__TzCiReG{?TP3bS#;9JBR!p(0pCqY~V@xk|Q^vg^yh|1BEWCS883}a7om;qVyzH2@@9e8-cHLnX1*V}@A=q7DbUdnGGsukOjRR*vB0~!ohATe zn}bX|f*OzzQ9831S)dI!lGoCz=^pUal8J)8Be7Fomse+b^v5PeHZ5nYO5e@AN`o8Y zxPfQRaIRNSYU&wfPf?T*{lmhc^G8lWGXjL^ws6~OAvt~|0pM>23ySHz`~%=b;`0P> zlmd|3J5PH!f#fQpODs4kc;nHcx^6HzyQbcGz0x4?dgs8Eg!l(ZDd+i z+r>|VgG%urn4ho&g3{7gFiB+oyRq5%YmWIXAU8WvT4B_I>(=`KIgRDkgMEHO)Jv0^ zvLmH#FPYl&s*15w8E3%w3YA;!TlV~GdeVoAT=m7R3I zpxnC4nbLiunWN>K7LzQRR%BWVszG)`->q2&8TWGPnFCp?*kWUD2^$xyEF6ykdcYRo zxE($aYLWxlRaGN*I)Ib;;z@4$a%T?@Ugu?CrBe&B-_>D7Ml}h2n^2RDpDPf@IE%`< zqALb-r>7wu+7ZTW(wtx;dAxcJt$niUWXU6(6Cd9C_?&V{UHolUYb~^)^wRxDhfE+6m2HX+Jc{eKIC3hU}5(&y&JreF2mEq)W@9E{fQ@5bAHk(-#AuQ_h@a z14W6FSn1J*Wvi4mi@JlrsMfochIBU8%q8G{tyMtKXj#k+@)K}-z@o{9`~oQ~sYL8d z{%KqE-=$IVr$2cP7c8OX$u-gzumjk!qp~{K){*Cq+2hq7h_)K@auBiadDtfP&?k|Y zZg-D*v$FeFAp2N2Gn~9QG}&K!Fx2w*3@2~mlJ<5)oi6Jtc|@Z*+j++H_3ozNpel3M z7=2CGRK20lz#=noO&8Z)>`75kXzD!cd|n57-V296lt@ALuYvJ4KLfH^Y9kke4Uqrc2 z3^+W9Z%yM=3*(`a_8gkm0PMAh`StvfS1Fm@sH595i zdX_iv`HP$4d#%Eh#tNsKm7bKQ10qbkI1NH9Unej8>Q!`(i?U_OI+&R5`H}nk`}E6U zh^FW6WD&#T>bd73f~9pqzkwUT^BbRz$ZRkD;acKoql=FA<29w zyG03#OF}x^x%=7kcdYab`#K36;7T#2UFii$A`|YZfx)4ybJFtJu1P*&PHp1F zt3k;0(3WUrWuk?GTbnawkH}FyE0NRGgjxj3;yUbUz)RoncbbY<15w}&!{oa+;mtq7 zHJOsKg&%W!!g4m4R`{O}RkM?bIDLntTzueX<2ACHl~xg~R!_ff-$mN__6Yu~6ySsi zg=~|D2%I3Q_!Ya4ah(;^wq}{G->MM^{_4(N<#hA$x79a5PN>F|>Anc3kf*oP-`y-xhR4KNJlCG|pGO(&}6U6I6hmH-R-dLCQ zb)b9&E=TKfB%ZXASSTW3c8pu&hLc!d3Q(DeqnV!MlfL6{?lPUY?6DY6QPgKceTJ@} znPM*ZGlMFNfK*#j8wy6^25pdm&Uk+ve~A+!jk&Z|PLpiroCRi(-1wqqK={2gfIIH7_nCah_I$Z%puo)+>>apJgbZJ0@fybQP9xxQYHJMIz*X#zQ;%Nkpz zwmhv@u!CU(j_(Rrk#q-<849A#Y_wBCfHQdaGn%4yir9j%!WfK&IBt~5Bmg(#*2atj z>19S#8kQrujGaYmL(bT(?b3>HluLDc@G+J-ia8frqa>=ObzVtVq;Cg8DV?C`Mz5Z` z=Dq6btd!k4^c@a%BJaK)Q#t{uSNvK=<;^am`%9}da_$ftyBu^S3u-^$-f~2(lD+K zeAwT3DIz!_NQkv@$-ShHPsd#b3oR|}Ngx+pel@b_&jojYudlD&db>JNcpHO3XBz)` zrz-gZv2dyL^*B^>*i#Utnr6!^B_X2y1?Qh(yi|#+VCxA0=ZqmO@^L$sj<0*TG)b>8 z0N_mp+;*0ZsWoa?Db;<{|9ygXCHR;6`{T+Nh6$Dk8n30tuFqkaWejC`#d%R8ob~i> zd$E(oF9RG@lI>Q4E7AP4iG^^76e}@lQgDsZERPpH?WO!$a=EmjOQXDn1533P+iK#Q zzm%v2Z+9`^BVZ{MjJ6tq6nM{v)ilNB-N{H~tjh%v?9kydi5&H+;TI5;@Y29f^7sK- zUJ5B_R<8~#hVl}Z8Oix1xI)S$U}P3(3_1hSs8`=0Gbu~LH6x~IOE^51VReezM=gO> zJBSjWH99Z;D8K>eq6S55Ln518jApP=b5dBey{*S;^6G}<=e-bcvF(Sfx&GoG{jAxe z@zFsqLgxVCYJ;FNZy8gpn^C2+2gx{@4fqVjUSpEZ8S+MVjipb(c&KtK z69{QpTX70$OO`HGaU*=*MeMuS?>`u^c=4jy2+tSiI8h<-m_*Ka|8qm=b3vw$O*zn}Po=zWCtFsRB z4l?0jpZ5$NYF1duZb-|)RP1!+i%nF5>b^sxTYV~{PJHAAQ;~%pmR1+Hmx456kz)@C z;@RRMIO6m;t3hM6RY?t1)!)*Yi(!i>6m-7u+f;z~sZzMi774y=PPGNs8Rk3UB(AO4 zDN;)v#IkA=4S&lo3*a|)2QBgP!4mn`@QJkE*2_d3Y{x;H3-G3vw7fbcCzQe`xWqI; z)}Tu;)xu)eor&~+b)Qfr$9*E76V~i+xkM-l<(>^Mym=H0^lG<-D#-MvRysi%^IOG& zJ@dqgU!oSG2VIiP6&cL$S;?=@{NtjEi{fa+zlF>~^11A7g4^f20u#`a!YZ6+*B0n? z8E?vF0%=~=2-=8eMS>D4u*Ay;l6u-H0$0Gc6kYMIYItY>7kn92xcT7Gt`tQ|Dh9bW zYwz40E;J4FLX@kydF1i0hp1NzK)x+cLTD)PsIqz~Z^e^pb3r+W9r2b07%u{g^>ai) zrL2UybMzSW@I!?{X=M4Grbdb_kFi0IECUAjeDi#j^c;rLXhf#P`BCAo#8YWexnbo) z>;!5;1y$iL{p_Uu4(W^pSre7dHs&HUVzLI(9uk@A`1~SSfhjp)@lmS)fKa4Xfonpt0bRGO zVHAm%+EwxgAmSn6)$Bk0B9?yMql#?is;YXsAk5oo6l$yn>ma7BF--d)uZYObCTB0a z!#fRkLg*>;dg-x+`1;!M4Y|T*E4=HEJC>`6E&XTpjPAJZfhA)lBub@DI`P^u%si zzhM`X@kj-G5!Keqo-lgiWs~0D(2sPP7_){jIp5JwMNU{5*f|_3!MMl7&DggE%W~3T zs5JcGovsSPh@c0;)cwIz_pR_Li@)Y`BY=p$@~tcq#T_}kJdVvT3DVNYrv)@sU_oWe zs@Kw=d9de4!gN038#w-_&*G1?DyMOx>=j0N?uYkfENBLwqQ`JnhZDa4;tkb|5xD-7ao$15Kz3KeL!+7w%4YNt|Uf_4tM(*D5fo#^G%-k3gr(gtKa&)F zkgHxrvQTYW!XOUq`*KyD8F4XP;cT%#;k9IxmH!DNt}m;3=Y5y)VvJy*Y2(iI)4m~D z4|R5#@C)6dyoQu(m}H2McVLmEG7Qd{;Kb_YJ9$mFOPq=02TiSp%T#}muJ9}8nGk)v zYYFyy&w+mJtX)6%lE`iG=H*cobM1*$oP*{PJEE=GXKOI7+{G~Jw%lG;jnGJP>V#4K zpc{B?3K^Yrl{vz_&B3rLRgxI>q+8mt)$wJYXJ1Z5Y?>|ZE+mgO_k?JC$K*C3%XXlP$Ad2 z&Tt=M5xrj)naQSS6as|z2LF>W_}*faY^DCG*Sx`M);)d#Vq%EM?U$X@AJwBm16T6t z?DN*NemnI|M)1r^ZCOXF~sLG@4#)lJ=DeLw6rdjl5OApDpMQ@|N`GETH->%TI%a*D6jveoka zyqvzxxYzf)rmIf91A^o0Bc$=D#PC8`(Jx9dOBe*S@Hm)BslAwmkcu$o5B8pqSkR;x z%e`}1J~CH}U^}F0c41JH5PqFDf<~x$L{viRzZZJy0! zr_mtUKU{tT4CpnA@4Vk4)S3pT-Zxn4W+r7CW-p)z&IYnBO&RU$82B^Ac6Mc(AlOVf zl%D>l=^_yle}QP5#I(^k(L%I|8t@tfc?*PMVDo)8#@R?!d$^LH28IZ@$2A*by?J`> z#3R%_wP}4^c~(gL@f%oppp#-}lE5E=88n&7uwlrmio9WwN3_XK@pW8eFI8#;LchA# zpLtyyg9H1RLaP+W(B(hF=#(y{GrOrsDti$YslR^SCM&A8hxP5Hp_t#dDRz>F^Mxb> z8@dT06jLPPvP-KglUM0u4Nc~b4Io1KevweaXqmB%>LW59cEJ7F(Hvba9;4w$Icg5h|fsFy(UzTtRP`e{K9qe*eiv#`xbrHd&C{?0yScGFFg0&Utt-^fro^ z{#T4@TXGsM!OJlQvQ@fKLw$LpEdh&lXWA$g6Y21A<10v%{9(Q~B)ba%JJIO8pr$;D zvB&{UCEsa<;xra29c#7uv(G{0sO5Tnc3O$N*;0a75@~>3b-HZjVD$Q;jM$+umy9;= zzP#nHLhw!<@Y$l#I~@f7fy!vZRUqT@}8YAW-OJ= z<~X_Yu1JL9K{Q8)Lf38nN?!-YHgkQ~NBJ~L1>0FBF5#wVd7pBttNU5K)_`RH7xEro zZ$^B0T^uXg0`Gg-oabZNl(Xt$2{fegK@$zqHL!I9|NPcBc8dk&x#k5GpWo&5ja@0t z3n_ee0zbz}BF5IfR$^&)L}ggtwy1V^e5rXkxqo>pyS1aMEa{NoBf-zzt`ioVB2KZh zysvYBUbVGa>WECu(dk7v9O>|3S!Wm3@vKIaEEdFdb?GE#Lu`4u?3gTlDPLz;U!V@29j=*vEzWozoeq*ZcvpF#I@=fK zMO*^3pAZ5ZxWlfsKBW6?w=$WRz&1t~$)i!1j;VWB|0oUhDkkRX9R@ovWpuV+!{6DE zRwgMLBA)w8EqDnJz-1@O6x3yIr@sz}rOqDQpEgo)rfB|&ookzx_hzhTK-$>XzVJyr zcQ~fPA0>4)Y{uZ_j5IWKP|$%7p}I9l(f3ew4S1^OtV3@tprWAf2*YTu>-jw0vls8^ z8|5hYBIkE|pyRIQHfxEbh(7z)jsG1y>lEUuZ-6qZ0L^+J%0WS+AcNwcaAUI!VlAq7Yn!|c7)~xR``X()SuOt05ln7 zQ!B!!v11{U?(&E6ikBIwDAV{&`-Dr_iO?)61u*e>i?R1 z)m8Q9L>6md-i2-IbWHLDJ_p7RP%G|cA?&l+%CeyX;RY-L=I-KL*D47ziZOk7sN{TR ztgLtmq233FSAWjVihO8D7FqhUG1V5iRkvlxxM(v&4mB87KK-iOy}AE6_Up&;;3sXoh7Ai-2IvgSPgPy*mIENWn9g=JNRZeJ@`4df=M*ax7~4 z`p92+1ehSc`et39R&{Gwn(Ppzo^u$R^%4@R{vPe((p~*h1Iea=+(Km^>hBqYX(c^N) z@og-sLbJhpa?|r@_8Ag*N(aoD(R)M_Kdlf-sC-_@Odflt0_K= zt@i;-Q5>#gaZN?w-JYoIxGawnSo*b&>twrx&EbrJYCtDkcB)sYC+z4&@MKS~y6eh> zDT6?&a58k3NXA=_ItH_dV5u#(^R;7ia(%QoQsgOwh6?Y=ng=ZI^nwWS4w8_AgVo8C z{*@q+g*;%?eQa=|rOAEsg5^LYe7sR<0a)H+poCSE-khY#N)B!VO-7$s3>UL^AtX(8 zr^Zf%`yW9!U#`=+*s;X)87I~IwMwSVwr&_y2*eQGI8-w?Llv*$yNu{?6`(XE%KN1d zV+r_)0!3V}ws4Pr=KYK}*pd;pB;u9P$m(^-kUO$+;6U-evvVHOz9gzBuG2o7&KQ2k z`iv(3>dMWbq&gpFex)`vohcpa3#$pq%aqc=X)Z}{8#SS#lt{o^mhfCppyadQc{BmHm@y3m2irAFg-4Lo=)&{iFB$l4>jkWA5Z>WiRiNS^VxGZ;d z#FZ0KUm`H=Jv~<&Ipl|oJe}HYwue!B;PO5PUKS25vF0|HEWf^sI%9Ik4wD5`O6)st z+%5tqn-*P8ITxL-Lx7(<)3wlrFn+>?XRsm zHdYSkZ2JvA1VgPlSJZ;T3o*7rq?Z_==~CXqV|);3avouk4TPfFMxjZuo#9Y9Jv*$+ z9P`?`h*O6iei6sZ%6bzVx-&z_0G|2i;W81_D>efZtYQP=UC#ID7hh)#mWSd<1H&85 zw#b4z!*c?9x%l|nt$-47X$drDOA`K4^b3=Mh;5YX2hw)Xqz^*qQ%M*mswXqcA|A&q zy}=Y)2__Nso)<_rGX{%6Qdd}sIi3kf)Z~SUn^j0mhi1P_Daq)wmtYIx&Pcs=_zn** zOyw1+xTb!zG-WfjwG@@0V($-F6Ij%iM1ev@!sSW07z3cSID4Rx#55!H>GroMxrCB+`n`D&Qs7C!?QZa zH__tHR&q3<=DJ>G zgdV!A;&Rh|?BJ78q5lk5wCn`q7DKcq9+!?DrOuiAejW0ECOzuXmI)hTD@bMGw-UvX zcmir4(8CQjWR_&d$qAYH%^n*jbE|DDZ&gb`B;3i9c71wv@v@JAc^Mh|oIWBWSz{8(PZ4udaADN44*LKSlU z^STaO|Eq%3!EW8-ISnY9Ovxi(9-hCXoeQ|4w`3;+vee6O-*1Gh{&^JsyPgpfx_#bk)8zTr2HXrYJ-a8;w{4XmM9?8 z4Y2XET~ZI~4VT$ngm7Zs2ICrIsALqGRHc#K9EI9ms#K`+r#FQeB!-1y%#n>dG+hQ1 zX)PC+2B<1cm@{%kjsU0Vg3iL9+E`1U(0iPGL0!U4a3M#A*TTz4o9J|)$3iY|J>~+L zQT#f6IR1nhbS9wc)2k`m(f{5BI8RKF$KQNE2MzL`few7EO6&cHFnD+x2D*Hbp12_) z;(!sg{3;vb-TS-&8|qJ|@SFZiN-(9-lr+Si0hy6Cp##rWj1~FS?TI24=oRac5&)^w z(!WQx1$jRs_Z&uD)F`+})rj9L97y>&ar6*f8&x!yBzs&%CoUyB37ZI3J%03uUGb3Z z8fs}t%SbRz67h32WoJW4BK?|soPK9kgQH^;_-5(#@yj#(C_adsb4a#ufo8YzB`9s8 zi({9#ptv&o?}K>$30UDuwyf$1e3otT_z8W;hNJBgu^DLR!+I(LQ>?`v+KYACJ$LX6 z2RC4y!=#RG-57cWzidfgp+yirv7hSA_}oKe#;8|8_^g?%*=}<Y|x%j1uH_yFm>AjF5af3|JpC-h|yoD)k_)R`B>E#T_n-l#dL{;kCSPg}{RnfWYhWF-8^W_QNgC(-8%iUv*EaV8$zP3ng@%U=QD%cqL2wO*mSVyDX_I{5*b8kt&T^A_%Gs`@UbqcD8$Q zcYxHD{LE@lie3pAjtlIUL;#`~K%`sAU!EDDvs@WiU&AHx@}=kb#FtBI#jEeCKQ7U! z*_mjOGM9o^5?8U5huU)mCRdrUXZ;5$C!`ro$C2NM%6Bml4cuu}^J94COKS_Frd9|A zuG5882{@A<8ccw{?Y7dxatbMc(6e*SIF=B%5#3buka%M|0itFA>llma;N?w6+~5byfOH$s&ZWgZ82cpr)^iDe(7+ z+<&_ea3rMNEp;7=1fBf(HA{x1{shNE77+`S4f__}y@5aXueisK6#4B~l}7>L0eCAF zC-fIf==oXG>uqwkQvV7zH_NE-#c{f>sy(RrhuZ(+>KohRYTIy&G-x=nZQHhOHn#1i zv29Fj+i7fjqK1ua?s?wsFMI!kwT`*gJ=c9Qxt9_TDG|wT{7Rz_{SL&*nqN{ZQEG`q ze#foVXHgT^WJxHD8*GtZC= zjsDSetg-}Q-)3NIC%&rTJb+x#3hSr2Ikf>5TFdr zUV*h^6fPS>PCpd2fipk}0g^@Zb$waAoO9;ANfo$yG_JV<)$@))>3US@Eu4>=Ze7FU zj%^J;lhs_U7sOt_CN$YFTogCiaI9_m<@CHB#lG&BVR-nOe^b-b-$s+J#()f>w9_7{ zP_xmT+uw0}ZJK*ew<{efexLA$>{8JyJ8!T7D?s2nstw4C$z zNZ>7f_~Vh=zM5ay^MTQhsPh9Zs+ch69g^CO-uS7(e`h-OBfdo6D-d2H(*ipIK{z*c z6ZB@IbB#RB`)>Yz`&iN0eu^|`6>F`6NEaNs@&@|O9+p$nRTr?hMs1-ST89~na^xN; zlo?8g2Sv1RrhH^AsR}?O@rUbc;-&Y7 z=)j)CeV2f#(Y#eeGwpUZ^-*ovJ<|8c|g!wJkAU%b*0FEutXty@TS9-Rsn@>17{=v%zTfG58y)$*ARtx9`;Kd85P+5{Z zR%NaAF(KWI(Kxe{z*zN76?b)Ntlw4jyO0LteE{^YIL+}Ncyhry9*+Hf&8RKgS00T@ z)~>g1Gc!UP0dzJV&$i9@l?8??3b_SY&#z~de9A&XI()7#DOU#<9}}<_xJ9{xa*BiV zCe~D)9H=nLHy!)RB&nYhzgi2Ur|%N7|v|jXH6*ga(pV_C>mXQ2byfk1!d=C`F3W{5Q6r=4v(C+p#{?c{9I|cN+ z<@0+vU9+i7ipg=Yi5@~JYk)Mhwqn)J&Ml+wSt(;f(0L{`+gtcUV3pfE8Y_`8E5%^_ zzx8Ao>(kq+e+D5TqERGCz+R;bIhk90Pf>F7lEqZJ10)uc8*vEre*ud7*3I=LjKIDG zi1@Z)p4v zM>OeM`qJKxY)u( zE(dZQVb*rt*)R0KAy#vgLGR`UX_qlRr=a{fBWW6hIu3t=6SriQWnN036^AcE&|UNb z=}e{GZF?G?IIsO4?I)IHc7=0AB@!8pYH998B2Rx<28Bt~xP{c>CYPi{ ze`KFyb0XC~Q!HeovWnIR6F1?xrjyc59jY`jg+~SlOZ!D3eFfv zw4kvUh`F-#*m{;LrNTRrsyIS^d$`eghW%p(pLm5WFF@)f^Q^ZARn6;jYG-qe2zO21 zk%+Mx_qPn?1ce0)m+!Mmvjd_yK|VABbpPlx&cOfZvoBT%)!B~=T3OC(f$J}W7gt@G zxF+9jw0vvRV}$a2`$gaoG%wRA7;UeFr?~8iVCg#ot?l1Xx7zKfRT6AHx)Ab>S<*W! zsIji%R|<^6BgRcS+0w&D9S6j<>O`TjWaY`%j(eF-huHq~u^bj{WrncO$2@Y9sOyjx zmtL8er%Q!l{XT>FGoMzH4=uisqGxsRYnE-`cP<(+Ig9D+mnnXK04#k^HjZ6aD1$Cv zV0xL`5hg^FXC8zcGEd4O1O=0nUpQ{YaQWyp+|JQaUjJ@TDP`92<8?5{)vCh!z!^#h zrT+`Y>-5KKN>4RIQRiT&473cR5%KQd>A$D2(?;8591fFJz&{Nd)23IPP<}ml9enYP zg_uV9HrVc1WQG?|qlv_?;-gt}c5e=q7-Qk?ag( zoS5oepjatH*Ez&oO=}3OUDibFnSkkCwG~1OmA8r-iRc-6A>&J&g6!CLe&XmCOL8=1^#3LGV0bdH@aJQ?buNdRAVr78+~!{+CI zD+&PYjgrgF>9Q&h5cn}~@+%gTik7S5hf=!PQ61B9*a&V1o_ z6+m2fC3(o=2)Na(KoVnnCJ%BAYW%*itK~cQZY9dTmmhPv)W?%w3v(pth&r!kAR(6x z+m|CAvQ+zH^R-fea! zk3*y2w$!Ffu#Eq(EZk4qua47OyLY(NgnjF?;fX<0an+`nEF}Z#An}g#ogn3#(3AS z|H~Mi^7zr5a38-KN@ON*nkhW14ddzz2bt=5O{O!sBlb&$OB$Thx1mH9y)PNpn(x=@ z)a@@0Fh^&UlN9#5Yq%L5aTDQ3vaA*Dh+1u17l~74II+u-!z8XWd_txKMsL?7z(sjs zeT5N)J`V*ynY?0DHuM=yuOvOW{#&@VE9@%FDs|!sy9ps6gz_0Nst;}B{i%u*SyWjz zh_^0#t4Fv$=qAl$$*5Q&Bknx=^`D`V1^$`c4a~h=`=ng6G^^A%havdmQeglmlQ>}k zj=N!Z?noA!{T1Jk(z%iwFi7LkSEt_5DpniKzR_sV8;%wSR$AAy5W$ArR9M(?pm+z2 zNXC*+Ey-AGv7v?X)MmS~qfnG29^e|aR>bd|B|i?ykvYHXl9vpzm}aGh6uhie2;f?Jx6#0bca51L<5819C*(d$Uqx3Bqe6k-&yp2+oZaMF6T zgSF>zQo7cVBp~nv=kMuCw}yB>W1ZD^8acgx3ikD+oRfk;!n4&?l{(Ey?weY@nK;3x z>;WvGsD`3=aB0bGxz$z&xh>@jJYdhOiM)PS3@*d6v85lRxs_85_oeQv5rC5Y&X?XU}`O}0Z z<9SlGtd+na==&V)b5kA3=`a0r=Bg}+6QATB8h z)$McYc#$4KkYEMf@8{>|m3CK}wzmIAD@Q3@!i~`HqT0l=*YamXl4QxQFMkuJqy6y2 zvZQ=i$jJ(sst)qi7jHp>ZI*4Xx8fj1n}lh&h=pw)A)D{^A&`wPc}0@Otszs$@x%)I zcO0#qBS2KMaDMkV@wWX+dAp#P0wu&Mtrw(E zYrD0Dt!QqHjE_rlx6fWUB8vJYBLv1XU= zYqkp;`^+5QK(0dPWW4A=2{XN3m`dTdMDL%y=j!E|;GQl;9%jy9OqsuiKEyDy2sVCo z9q(=#$DqSQ9A)n?q*~58sSK@AdE$_lqoZqMDJf#^q40i8{OF}z=*HA-eVF;3UQ_}( zmk4+-Zi@=bcwRUeTgqg)G}}5-b66so2qI!i()Ei$js-E9*vw5q)Kx4dPH=io+UwDy zL|(BP+^ou$kb5ZN@Se@izI8{;Er*LF_ZejZj>ymr~ElFITS~h8FDv+Sj>0?yPhzPBvJ zObL{*Gi%fGnAPC>NZ=x&opQ5ypp(WtvoNV(^bSyQ?^^J|I>+!q(88}S0Y`hFM0_qt zG{Sg9Yw|_a&Z%S$XScX7L^O0>RfVY08;!J6le$w=W=)TfaGA$j4qY;~fS!^4r)G?dlq4vgRcuPKvvxv74SEoTtrO% z>inPdiPM--I9I{5`|yzxi5S}NY#YZ-c}8+Ktm7IQz-_B^>YJAcgT@_W7 zIMB;ynjh{p6@cqXLV`^?S{uM}jZ(RIqv`8=aqZ z;q?2FUdeBCNVl* z@kbK~kO)e&=r|hC00}Gq0;Asei4GFfWdy8-(cwde?631Bb68RRaE*&9uB8!6LPXki zvz*aZ2gi<>f%G9AR+K!-@@nIZA&(we9|V@&G;n^u-sz8H7nC&?W2tx`b!robL_#?` zoe4svWvJ*=+8L;G^V?GGRG6uh$Z7Kj%I3dM`J~alH74(cZxHPN7KD&uLYTxCFSbsj zY&|=9d-*<@foFS?O5b4I|-L4jX#*#AN-O zhU`4IZ7^CR@trN>AQ{Sw3&;Nn)xM`KRX7q0=p7eOZhN|>(mUnEW67c{71nH|CaU^Y z`pw?Brk1shYf+(tby{VkNs`0^!ykswKUm=L(i?|LyCXHBoL{#NMwGisb3vM$?s)V{ zwX%*;3cpJjpJwG{-J18~P`a7@{>K!ygt*fefUv$QTsZkY5$Vee4_I+R@N^>6mW0DH zlEs!B1&zXfBx*sl#e&zXDL|xQ)mt#SF0|1**?BV@odhQVV6*4OY8LcZP#KNm{T|?U z$Eu{VBwVs4ecS3{R2h+5CX7kL;uEaQ6XOo!OiT)2AaUFrM;B{rxIE-$bdfHWP!fmN zKk?X&mTQA6K z3(h^V&Q2J$T;lF5)ycmgSc$R6K#VGJDfDPw`2>&(LH9hq2p_^m{?br6p~}I z=7IBoj2iF`>WuUkl#y`d6y->svcQ+02m(huGQgbrLef%b(X>_@0T6A z+?Y9MBd*X`v=>}smtSn@@Wuq6*z}ZrL$#`EKA%kyH|Ti_U_Um$QRl8iG@TK?JP;f_ z8C&YQEC>4B;UL~jemv3wJ^vUTka32=J&P(J($9{U(9z!!`TnR}3a9PdZ{WQws=2xg z?HTR|wx#owxW#{riL;+^if3!jJnFmU|L^FRw+4$TT!d!A2GONlbXj3w90$^TJ?MnA zjrJP)qvlKRUC)ajR;=FdvuiH*U-*0V+~0m)ycvBB^$xw{%B0e6OK`{c4WR4LxLyYO z0Bbg#5x1TPRcN{9WNvynJdZdGcIScZsZc%Fwtmg8l;5iOJw0@4vEMX9BUkR%YaV9< z5gk4#&i4bRc?W7z@$+;2!(zsKE77>@FIFbX>87s_83?x5{5M4H?ikUXDXM~LJdU9Z z{>lJ5Q@#1GjQw6a)t zc*m(#+36`#A;~5%3{X;%k-ymU=i$Q>@xlK((PxK7;LkROTYZI{;%#bugEr$M*u3=G zm^AIn`&j1faS3a%n_6@J!=U1u!OX8o)B#>i>G!eWr`eK=zs?4)=pS!m2yPtETI}$< z$5bX4rYF}@|a z+nf3{iGjb@@UTAI_3#k|e5XpKw$$UN`noFxA%`Qz9{@o!XCKeYS-W=1nN?;o(UmsN z?+TC65K(U2gbU91aQ>k2IYG=^(O(SSvU?Yp@qmZ$(YFB`{9AVn(Y;d?{r$sRK=n2j1V8m4x&Y8i@W_GJ3I;f$g|x<9LtIi1HXAi|HvfGhEj z0ATu$0Qme>{pHgn*@@@L^2a1%_Zz|MaDlKs3A)po#>Jm}sX9^#R;4;uJnNiw$vU2# zLl~B{WZs``CrI`L7KPn4$>MBx+b~3}4EXs=NW-m3pZdw{Z}tj$cHB>_N;%A!nD~A@ zZVIdOHe@7wS6Ct-%&j@5RVloOH?3J)I?57)F z$)Z-`=&Mvp1EP&eb(VOU`XDhaf7IFC5*C)cSixZc`#y*A>h_|zmBJq=;V?PJM5*l7 zpPuo-aBLTUEmY!q4KaGVo$gcM<_^XV`qH(c6q>Eq1_7uEhHglJRH^4yD%tcL>HNH4 zQ1Z!2Q`yh&Ex_{>5?rqr`_86qq~J}s`XL3g>wzm1Qc)C3^c@=)CQjAiZ4t6P4LCq1 zK;-rZR!2(p?w$K}S^wk@4K^~I=6dUXrE)!eNKxP~*P5GKnTy&&R!JxA@4J(eNp|aC zkM5rG0lwLcj>znDQ|HYD{V|ENWDaZiQJtPg=0ok?PZ#>VmGJG`}b-Blh{Cb3?=d1n+ZfF7Ri#=L!DfEz!W~ zA_?+!*iHF-(r~D&#d&o7TUN^-NN||Gv(Ikx(?qo0&SA4&<%YI+Akt^+%DBUzPj&{d zWMt8eEr`M5unIpg@*9SQOoZ7Z&(q|C$|C2go{~~il;b+W$(>2V|LP4TkrEv~HkRQ) z@PaG~=hMMfH#{9x+B)KU4G zcyaUNokIO5_GPIUBpe)Aj4~uO5hO*L{bA{M)m72vFv)0zCOo2o;%xar{yPI=1KXjSv6YUS47^9g76H#C*ow*EeU2rui>K%2>dt3WV4d{V}ik%}y+7#^K>j02DMNr$56N_Ypo%HIPBUwWTt+mma|& zZe_`A-stojGnSJ+owoY}@26{5mh^19Wdv$2&zLf9xnMIk<+zy*v|_wWKA)ROp3FM9C6~ zNn*HKqetNS&H00%Ok$((NXIw;<^Uh%{=wDuofea*3A5c2?E!7p@M)yo-{&>{L4RGo zm`Y6+dbWTE-#qBNII0RHkBV=JQhUuQifzUmPyMNJ8APsWWTq&Ylj~Geq+*(krSVT6 zEYMhC%V<&urpu038C0MlZyHruPm<>!7BDfp(mV zG4j!6sH!^dB~Z|=M_S&4NXQ3UkRXY|r9%W<+H>wzQ$7q^c876k{{D1O*(Xn>LzmD- zp0CFa4nlSK;f)m>ilEqO&$bp*I5SLKTr7dS+i2wccm>Zkqo^`jH^lE%6>bvaoPf?H z=$;DAK^B)m?L`jD6@#1|^q4gQFZ{G19|oJow8En0@oqAQJ9)a6Cc~vwIGrXU51|>) zxZU~ZxTvNgJpVIC;FM;4Vt!Z?RPgWTpvMULdsbv}Qx@+Oq_Xxd8$WM>Cka?eI+}vw zqEPDU;%oxGYSGP9(hssWHJw&R-5#lze*)+yDkl2d0HJSzj#x8QEY`%DK_Wm|CR| zAFvSW-26&wK5ZdcqW`|id`F z@m|MP$&zi!{@6`AGh3ofq_#Mv zQ{Yz@HgzR6>b>^TxcnWXvCJUojxWM?g9eoy1@D;PJjTJ`VARwUr^+HAe~XK}IFE`r z?b+Z0+NqJP9Z_g3x{{A9NK%BtmL7H&rD*<`G1x}*8c=S1HymhPo0wA0JSHPeDbO6N zhqGlk2-^Xj<^S!5fj6=Yc{=~tKkdai7PlvN|3**GYU#~BHzFk&|~=yN>$!06~eQp4xNLM9UtzD;}HE*eiWPTMz3O zJ8isk+ux8t;&u5*9Y`t8xjAJ}QUy!`&?c{iVKCrWrV$b@1^)q=OB zF#O|jjmwpi>VsyS>c8zcJ;Mb&`Du?m(^r>#DCt0>LFUswo*6k$9f7a-K-7JUyqsR> z#X5Fjn&f;ZRMj;jZg9oWrB=7cFe~~#Csu-&vK~{XAGXtf`DynF88q6yKPf!ZN-7+a`tQpM#3F z)a(%}&|lxTKevP0v2IHN&7Xu4^)l7tuOk!eItPx$4SnNxytnDiNvZ;BP71 zk0PTYPr&s4^f2>@FS`q_wX<}iGti7EC11rz79yVg2-%{hL2NlUHShfMy8hRLLrPq? zBUa30UAAxiG|Y=J-_$2SZl?WkcW}E6oVAg-*1v;0T4d(!6~kIajVOdQQ|bD`7qRm8 zKlfzjRoi)aLt?2$VwfH9(o*6Qe73;ou>~Q$-HKP4Z3fB_oWOgy}+n5*bhwucS&( z@S_JsycNVVoVfuc7_YManHTU0y@{Z8k#a$0OwbotTG_^Zc$jj5i90|ltyLPR614gp z@`8D4Q{v2-Yl{;qWkbjuvmjchHs~`r<Mtlf^KI3Lw$lprwY$s|FBLSWsGh2(92 zR&3A(uk@~*5&@A}kSK-p5>{KTjM)3*cK7_EsHG}2;4(Atr`#zAb6C>LDNsqhiKTsH=63Gi8Hv1b^IA8IKM!+z^qGx} zgmtV~-;ze36gZ$Y*^9DuD0 zFna3hq-gdcu^SbbNO|c^No?sH5Cu2y7PkvSuPPs*Qxd|p)KPA7;yT{6NNaUcmcx@J zb8KD4^vBZqyyrQyOjeU9uMQ#@DHkw$a zbaV0~x{N}U!ZBUCG*zv+dYlk9o0f6~Dl#@xakPr>DCN6~>6Y85MakFKmh5N=7022% z8g!zirL3#l&H2abbdn1ul7)bexUQ%LSLh7hGM%&U9lqQ`gJk7!$i zQ8QeihkvI<;vRwdoomLVG>%w^N05}2gGCfuw0H=$&#s`*VL)zf&ZOd7pcTS(SkIi; zH>K-jpf2b$>X>ts{PsABql61Lpyar;jk+%%5DDOTs=4ORFK~iM6{EycBfr*4UZq@( z7a%e0Gc9m|*%vzU;GL!@%sWCsVDTcT4h7)JbJ`f&;5VwO{oXZ2s!oh&R)nXUxaq@8 z3~?hU_eSGDWl#<2u6;!kF4Qez(mtmc;bqA?RiS~Us+i?EFlMx}Hy-02a97hScT#q( z9Mf493FD=)aI5JH8fP|1+@2=6&*lDk%x^ z=C`0eth@7J_q6bDi1A&%{L9k*r^EVR&OM36JgTg^jT?`AiAo3Vwbo=F+k01rvW}Nl zC5Tvfe6%KJ>ucWfiq&==+IZUX{D;AezI$dJW%@Ci=ZYt4M$aMTQ#}tZr#O9w9PCFP zTxIzY!hs?e_oFuQcgiT~?OY-JLTrA!|03RW|AP$|*wAmxs`99l7FrNhtvvNl8ba-&vmW z{F%sGJ+qndaw9xI(a->=No*gNXK6H-<$DLxQIGqloYgHk9aplVV0f^t--wrp-~&ht zvcNBHsY@9XL2GOc&Jq{PXV1e_8nnRAZ^`?Wu>N%qk1DscGbA<>fhk;{N)>;>Q`GF)8g{9DO=ppEWi_DCN6L_ zZdiXmr>iJ^^p5?Us3HQ(toC>4F!>^oU3!_IxQ-!=fj)yo7^#<;rnP;@lS`!SY_OHs~{g06CM>c%qCeAbx znG=tA;4BtSVUh_eqGa8?V0B?}A3atL*4eqU;fyR<*`RNk-%G@eB`^e~xUq#`qHi-^ zeO zl6wp!>Zp<*k9MW%uvnRE@-uDel5Bl4i#|G%^r8dd#8)oa(G~qDQ{}|I!to@IjD;<^ z5o0Z?9p&v=Bdcml*IX9ySKKbf5^IIH9lOz+FRIwrce4w&&;>+!zyjcAmKc97<4f6O zgid`u@qB5qrn(;j@cCn7q5E6V@FY{jSJ=L|D`)If?urCZYkZ9vk#>83Lfd@Z!n@V= zg-6-39f-)ooKRM%4&?QpHpaya8*(}qE?)VX7hI!Ek-4zgKs za@2a_>*8~YFro8mZrlmyr4w<%{~XXPP+;wM(jSswuUg3c0Fc-=D0QX2Bkdf^{qpx4 z;`QP*|L?De`~&9rj}X8%>hMiDp4Ikeq#}9-{6NsNE#~r1(3eVJH$O(;5b6*eZ=^Fr z#`vBn4nmdLSBOsfkY}%>v!gr(ZlS<_`f!e*wUc3Ec~VypFSXxBu`?`?cr`-;8YB+wFL0%hlP@w#rCcg z(#9Kq0n(WZInbMKdFzD`_yPLrvvc5SqJdXr^#U04euH~@eI$+TPZ$45a7ct`y#%H7}a#gdmzi}#9`}GT3znqp{}96oVj}! z<@kC)hC0gdIE4E?+=tkd8k`Onotc)1B^We)a!d=*uk%focW+q%7M^I_t_c1n@oE)~ zi6{_LVJ`zMGUE3*A$xz1czfxDlk$eQI1{sBU9VoC7p30Vd>0BC=uT2QK`;8>Eerh? za2Sg$&NB29R%P05(|MMXRRQac7AZlh5_oGXx$#9<3&h))E+x zE9jff*Dq@|8MFBNwWs}NMP$q5NPHPG%$TD{OhXmip2xF~_nfWweKCE_hS)ngK-9RTp>jfIbAoZwxjh*tSjP1?iei#H zgq%FTHDokje=XJVRFVU1zDj2`C*Iu&%D-<>>gmejCtAY7Ffp>`nz-NU84E#^@o;`~ z+XStIaPY-DQrV(1_-AarJ#xHmhnIM~Cu^*NqcsSvxvzSiu5RxEO^+8qc+2%3`N4UriH%t9637wtJ%;p&s;Ol?7N zONlSHLhC38%-a#8Cf*NMV%O2`v z?P#7XW>FO1ZpV1sZ}IChp6>q5!qE9UC4nB2W!f;qMP6t5{b$unY@9iFW|jwy#an<)?ct~nAAQzXA9s6JnWx2-sEB1%4{t0{y|p{B6XR^a1hc-RwclF>}jk#DnP zR+%rX;{Lcw-~0y|6$FD57q|&2MQvI`&qrjzNvdhM=7V<1Bz74TLPV1*#^I4=gM7LY zzKIIlgk6ov)y5i*9CTEvjvpc#&a0{vsv1fviXzTijDF5+-oVt*TUhVIY)^uR?^us> zvakTO6HTv6XbJ8RMG4j07IsA)MJbVC!hWlynlnnMd%Jyxm%u{W?oa~%D{{MOn7AGj zk`qJ?MH)PE<8@AQy=yJ}M-a*DYpTJvbE;WFvo#Bpd#Vzz#XyC=eUAZ9dOYix5P~t& z$0K8`bV@+5nn@d4g&oD{SK706Db3dCIk!Nu*0S>j1%|VmG)gG&iH2sYdcf!W@6&CI z{{YEWYy49Hb+f=bG7jvksJ)BTbT((d{`_3yvbPvJxNV-> z^%MT%&el!)FVpV*%hPMH_vT#Yr%xKyQldht>70c(OUkVo<{YRE#rF6HZ$lhU`@Sr- z82CF?e>ogScKc2^hn55c#&D(y2AsE-pI%!&G7Wql$k8*cSDzb(HT7o#xR^r@&iOaj zouf915Qj2&v8h`cnycf;pfW7a;CIUCa<@m^B3{HW3Q~KYb=fagdJV3Pxjs@t9|tk$ zcfWW;Wdijlo7>$$jZe6F97O-d=r(i;f?ql)oD`ixUIDSU+YJ=@#UmIFSK?EkeOg|g zrfjjMkue;|(gt!z62B+xrlu|B#GX6ysH{#jQx>GOaQp{G#hl7h%`BsU;h^}%ekT#w zp1fw?lT$I3K3Qo&5fAd2n9-Fz)3hX0Nr2xWq;~t_Jl&CSV&9gGBj7H;vEju37jc(1+(*fST6rr)M8StLS0$Rg>7^z{gYBB>V6@( zz%v(Ip1%9_z*DZ;R1qlmx|`ph-IArSQd(vvP|-J@P2X=fPFfAkkkMN%x;TO0lqb^~ zaa#2|Gpj=7LX)q`6n+BTKV9&_RqGUaGH+NY>6|CL)ty)BcHJt+?*jb&uCs3g$+&s7 zdfZZT7)>j5jriKVA?ALQ^Lop*ms3!WAm7L~7j0bh0%TN$C6gmvJ$IItbw3OafmbZM zk>&&~x1c$4#Peq4Bk1;0yqsw?#Ep?NU~6zD|C{f5w;TFj3Hp-K;>7LKo6#tFqGD2D zaWDS8J%0!Tbw>K~WM9t(W0jo52;ZEjCsUTMI>M+FAfZUoD6ypOaqgt;DrK$pY8=t& zrl>)4MpsZpj-x7YPH!e!`addl3KLAx7l<+n&RCGe)y730ASV3T7%op9F1^6`VyL#} zD0K(Nrr6+z#Y2;b6_ec`#R`kCjTZ2Obrvu?ASQ*`!{L$}mQWULB;^Ap(fe|ntyM~v zEuBS*+MC2wsMEMFg@Or!+hN0SdE9hx6Pb6ym4_X0XwyiDrJBFhz67N`q$o8z!^iTe z$yzVyR=2+(*mYjp9PAAs8FN_FZvml7+p4Urq#;$N0oNblP#%}o1_v}-@4UdCZCdmq z(H|;MDwKUDVZ`jr2^OJo-bAWan@)<(8hFrBVjI?#{lCC$vRR_fw}m`3ep~6d=L>-R znSaeHdV#3+7%}Dk-o%gf*T}Zl`;NAg0EX+;nzuNh?}631b{gUSkG}ko^%sPylSjf! zC>AMMa8{fytf}ebZQGy;osoUDpBLf<>2yvo6H9hDz{)E%K#(xybb+)!@$Avp&L`fH zR6H$AL!uTj@=khqUa;hu&=ojAs1F(PeAT)L-F(dwMkkt>lQuD+O4LN$e-Q=1VM#P` z*u_tA0O?wYE%oD#{a86yat zuXT?gyz+t|ksvk667I8!eRR-|J`9dv2!-MYCoCKJlitKpB9o zZ5=RT7bd&B*re3EWn@NPO(oWORw+A#@*KZuPG-)*^Tp!6aduW)LdTac8eHvn+m5+} zzCId@&6mXLV->G2*~T;=xW3R=_A~IXQA#$w>*o`!8KbimwiG~JRvRKdPu_3-x)hy3 z+JlIpxzKSU&6;G^KS)J2MIf#Hjzh(x%TH*{0?bdrepUuM+*$*q03FG~Zqqa-9Wh z_%fWjvp7CVZ)7Z?r_-xH=p3e=W6kStX8Gg>(?!5%~fS8ID2(7o_JS8)0(}Nb!TbNLzi1ydNMJZqnH_}24{h-m|09PAS zpQ-ZXJHijf&lr*3>f!kMs_$S-nHtG|xpKo0$=+yG zgWt|#PrNdpCa0m6RPDEmIo}u!`Q?`pLY&4(pA#N=z~bkF+e}ZCUG(q*Dy*_zxvUEeOyY@9ttr2oXQX2d$FwfAD=8U0`v8vmd^odK z8hcXA77j%M^bIyGZI5(}UDRC!3ePC<>M!jaNc$I=F5|xyr7=WX)WTygUg8&`z^lW` zQP=F|ro5~yoRpN5A%;VnF6d4Ox>0+-y4ex*|Ci3iKB&Bn|cmRTb zzH9017QkOhWR2%RwRHKwiig=y3UqR-h>s@xq^bj?>RL!Kw8C$(l;wihqC=!OL|szC z3C1ljR@{^3SL+^-FqQOMY=l>v6MF4c)NL|oj6now>s7>?np!*6BzJJRFz;I^RaET@ zvs)wi8qvgT>7q%C-Ffv9mzp{As#VG`H&7t5E#-IW**Q2r8~i{MiKy9 zX?&BSE$`W|C5UWPtibXd2_2DKE-2C*IuE@<#TPh#17@)VR z(z=evUY3dyB{8;%U(R4Fmj_wr*`)sCHb}lnP|e0HiVu@+&aZIu44tT2I;8${lZ9JU zSCEM$pNtogxhaA2R{nHYbha0-$4D_PNa@Phc7*h7*h$%Akv&+HxT9)w6YJY?)gE zjVZp0WqIGEdOr4!Yo!6ANcZx#<4$VDR`*L*WW0T zIzE!>Q(k6U5QZJ|qba$N!EYY)x<9uQ{I(@CggHEe6IbWvV1x^gyxn>V2%6(uBv+6# zChd0O5o`V@g{jIzIs9-|M6?X#eYGV8dv7Dp-;seY*UOJ%8r@?YJNUtV7W3>P0 zdjvnnels93Kye1w=0D96qipGKN4?q(Jr zR_gi)Z14vUD)WAhI4u4}LfA>FMbc1i@P&UyYS^5ZAXzpVe48vP-Fe67ltd4q zd~E<^iHii|79ZVYgkAcKXud}^4?7@lkAg@B@=~ulu|L3>`iJ!DwbuZ;rGSE*-w{bt zO}PCPq&yh5C`dwsRu&`r6v1B#GA8~ zQ;gUeD&+!WyK6-rlrF+)vEUQ+>;zzjy}HHoaK3hefB9>xx>H)#1zw4~0Rg>RCbaR)V~O5cFh3OPH7Ittv$f*K zIotmGWw2e+#Hw6OJFbLFHP@Q>mj+8h3gYxW#epXw>oC@7*pL(5MuSVTGVL$%3P|+f z5B%To{!dgo4&$h&EY`u&=>2%I#>wQfpUc^1X8Rcg-D7RAvUzRrw0UjflxuC+tbP_0 zdy9U9II}V%yzvX)<0lAqq&n*N9iw-9*vAo-x%AoIdu7?u!LG1Y=|xxc=KeN9hfnX6 zfqkxdcDfu%4-Vx9X=-g%s*{($pe-S^NDzAdFSP{mS&#qI3LoylVL@S`w2zD8;*v~z z!8x4g+I%}!z3JT1Uny?{-b_XG+U9o6jri+v*685^Oou$$TFUFxlL)M z%HDP&`<_KhT-BL>8?->)?^tB~5896sEB!r{vUDj>>8jk;H@z!W0lNJIMrEJh)RcJ~M)t;wX-n=V zw`Q2u`+2k!NaqjDmI*A$KD&@B&^#X;C}>A{)SYze=T9X^3)m2pPK!Rkz-vD4U=K6g zZ)T;6*!~Ir@OD<9T)9;UY4#7E%4f=T*%Qf%Q_6RB_EaoA%^a0oM3${XIZ%wd?tiCsdOaGSB z7HbL%qGtw8FxU~NO=L`!y%C%gq7JHyiV)bAlmLeilN$+(1g|>+%6|Ns#})3T{ODAB zD$u?h8Qb5OynTcHQ;Q8_6@8*(56&4Y=lJAh+2h=lj?0tsjs`K;)tb=L=cp2b$U#&K z!#{>(Hb6a4YOl=5%5mvA<_KY$T(-fDms!YeH|qTuoY;eo)i6WxJURffXTc`uj1nNv zxRTn{!v^T?8M)N~w^e3m3gchy{PXjq0MIiT85HMuxhU60W#HdFej@%NvVo1I!)KNi zr>xE_wyn3wMm83quPKW~#Xax}W3m7q?S7ncJp9|{0_8M?2`UdNzgn2!J)0S$i zanF-+aUG*g);;mfP0(Qsc*N2uavI7Z%oFuNG2MQF#S06G4pBR++0YBV_qgt-t9|Q( zzWV-K91ESVST^6GEji6ue0(w7KWr1JuLPQ}&;f7P=xLrXEJ<EC@HC5J$q>BeFSaY+Z$W$gDWf_OEK-1ocPlDVt4&%r>?Ek+XmAHs4cB8 zNh6!uJzmzlZhCrVjC5PXN<#NLn7VO1_kW8F`X9j7L&;xWqMlElPY2D#hS8JcY%{?j zweT?W2RfGJbR3hjY^&lfN|@tzUlATCx-$Fl4~p~iGK-!Vy*oeqz7g@po|1IW|2EmG z^u4rMbUGxb3SAaWR&$$9b*8xY+fz7e9TwY%sC8U*{T_ zag0R#>M!pnGG=N4MA4fjb>$4;XzqB{2S-QS9ZB;t*8^+TIZulHZi=kGsG$nDl}*=j zThHZkA40jj$YgS;;&Uk1p2^qsF7yJ~-`K9lF5cd_gSOe2$akBe(Dl4;)Ma%e!PfJ{ zzF!SM<{FP9o0tRW$P2{G+ue8<=r$w>i?1W34^&q>A=|t)MRR1WM6?}HR<*quS7iuD z85|4iudK>V{vj?G$1g`R6ZxRKnXQcY_cfdR?Icu;`S-&;f4wYRKF!twoIsK}W4~=7 z^vKfvdPPc#bY?VLj?c6CeLG=_GXGn5d4~7lOULC(ap`bZWVzt8R+qaL7Si>noV|8W zs_Gn({XO6FXCcTvvVoMlAL@#M=Fs{Z34f@_g1{ZS14Ajv-QD@+1zGp@efI;}V)3oY zT|Yo8b1{&FB&ti8$;Ja~Mqszc&6IdN=9zob-f-{kJ0360Aw8eW{F|<}JZHz<57BW+ z9><1Y4#K3?w>O8&cH(tV46eS6zBcGC(meAkEwHWde*m2?IX?rEryhQ*{$>a*`HS^s zEruQG+a=xApO#uIDL=(9nP^2JH&EwYjar2^L9_%3(vfnrh*Y5Uge5C3m@UI&!L>+1 zmaNCB2Pd3_(TUXsYr+VUZOa<0h`_n1q^KmlwPkm*e8K79!1r(AN`bfSnfYNA>IJob zP+|AQ1>5CL%O%76%xg@KJ0;||`-^-K!b)PetUT&tEjhVGLQ;;fxi1u_lEjLcXwU&I zIjkslqt~(4<)Wn5$#j~hwcW4&$Hj{XK<;QZLIhc7=ugF6a(Sb>z>KlX4BWZtYaYGoAGd%ZK7is5^V=g(0LE?XZ+>zjh z7B7wd1%j=6&e)Bc(vwpxtDsp3@)yHaEGR5lWvL`&1T0a|at5=(@U1V#hmPZ!pgH`i z-9T=xQh7C151fYE&scm7gnHveX~12zmDg;)z4=vlVdx$76Jr>Oj<*k!^au4OEqDAz zi!I&z7Bf4`-Yn4d9Pu@g*N#=CGE$b zMN`%n#Y-Gcovng{xmZ)gH6|!oyMI+J@HL(@UzviRRt_w*l}97Ul2);IMp5%8^>y4a;fIkui3Fmhhx zzRzsSSgwPgC>{9L{Q7Q?bP5LLG;>5nuwEWQRB>MYKhWu}KAksoxu{r(>Lf&16-Nj4 zKP{nj$ml8IIip%i6NJ39VSE$%`*R2OfX{+LPklhom%}u#Gf?*hq`7)$#Hv=re9l)H zUP*xuD`p;Ei7Tr%D|pvZMQ)B|_~?7Ws3PxBBdjp02?q>siWT<8q^Qt4S)Aaj#oOHr z^5cTvem(OJYa)@+oVJ`G;KBA{ z(-1tdFRJoxCvLXDj;==inMFznrvdkOQGPoh{`}rCsyD5BVSV zyO`m>T5f^@+1pRn{naZgMnNvZ``C@Eegpl@QtY(Lg_%Nny*n(~4gH=XGB;IMaum$8 zaWJ-zRr&frCYQl}BgLpzlQ*^xADs2)dv+t*5gfh}byA528F!g~O><$1qH`r1J0zEZPR&8Y5z<$hQb zphJq7*~&vlD$i?f4!OLpQ;M~&?)2{(askS*C>JN6)bojfTo~t`sq+?2Nx=B5Rk}JR zs|R`|F;jqX&lfhOzA&xlUOdjqm9aZQz9r{B;ep$vWzGDf)o&NyyY=Cl25<3B;tR;rpwItJ9>$GaB|G(j-LA^ZBJEv z&?wgjX?A9|<-i(wh!azB4f5kKP~23UCwMcA&oi-$*N7!Jp20dt@K%e9{y$Uyqj;Q& zl%MbiVDhIa)=ts5>2w487sUAn&iUyjQt~Fh_|#2u^T~{Vb8?N$Oo15@M^)kb=%&k7OD6-e0hZ?ehv&>f6Q{-!Q8QR3<7P#{x= z%NYlHpAzQ?tGi>>J8##-L|Y#}D54}kITbd$Lcpl!S$mg9e_|~a|9t+d_gylrlJ^^4iM*& zH%50u6wWJR+@1mGje>C##P9<(bJWKYKo4Qcnyw&YtZ_Lqj+tOK!Q84Q>N+aGe#dp; zxEL-Ae!=N2ZiL(@rNx^nYvC!+m|%w}babrPAVa3Odszc^Bj~?+-~spPUo2ESBCp+q z%|2uy0(WnRhUR8;baYW=W#y%Bx{PV=ekfn;II|9qk4-*K&btsuo#& z#v_UsEwZ)i8kN6uwSw*(76YvZsNTELLDfgDd|HA-o8}&xLtG51yyeYN($Q5_c~5pv z*p!;9u%1HIkXO*O44U{&#Y7k7bX!+HDDL9P6jj_nL7U9aTH=`M3s5 zJMU26>U4=SHQ%VEu#Xf!e!S;MZV;&`IJ_*tPKB4ljqC-|YglXPl$=#3T0KGHO>wf+aas^=%U~cii#`Q)X+>VxMgkkatU%d`wJ`FJKM#KzQ z!#}R{v`!E>Mlcx^^yxmVkBJpOGRC7CJZffczzNG#IY1xw5{$Yw^;Q|JAK z7}+?HzbazDRb%;;KF*2ghrn8f$)s0mo}y{o)JV5Q-ba%X?5pM|1O~HYQbZSUiR5C6 zc&YO)_wD`Xxz#aKVT+$ygn>6Jggj(M-TyCt`8R9rOqsBY&SeJqZ?nTKnJ$&C#GrR6 zBGq+@4u#xzH$?-nGDHjQMxK@+6&&QBj2|X9v4nnja|`rr%B_hy z>so7aja{(HF-Kv&)N!QAR%6+z7!b{7^Ww+}-2aC?vVe6p|MOp&@&B{pqL*mQ6PwbG zIR$UOswllziBxdMg z!PrZMP*SOhgEOgXihXrjA|l={w#IyCYjq4diFR(Fqs|!i#3J8!7mHmqm~gLqGRPkP z!tGdRG4NVw|7{}2<-F42Z~0<`3IpbC`;Su88qz$hWE5PB?$sl05*v;n$lc3qI+Rai!@#TlK|qfbC9;Ni=Fw!0SG6 zAbNgXbO?0swO0%L2-STrBQW2AF6(~vmT3%~B{Q@7v)hR6dHKwAr7z7#Xz#YO{+?QL zDUTxuF{f?r>KO&_4?PLovbTMCsmkmo_N_ESw%+dNo4h(l7U)mwdZUixf5M3q{D4SY z=NnvP`Q^AG`$XRkU~eCDeZG@vdVj#p^*O?HchA7NJZS94i;>8GT>10uW+=Mtao7|u zulR4wLMS8j{4A|t9xSuYAdZ{swD!VJogtLixKrt0l&EL=k2vOkDnnA+)OnvJag{Xw zyf=S~v4WD+z-Qo)Z@5QdJGsrO!BPnDNFO)8Kf1lXogVYMa3buMyE;D4jr)SqO|7yTLv z{5%w&kb8;4l#=YdyEgnoG^nfY7Ez{cF#oxK4Lc$s*QTH3Fr1id5-B_XNE~A%uDZ%M z%Ug8~RzbRNi@?lQ?#RkD*$C9`y_WSH6L)j1=H;r z)R+9ka732BxgO=c&`VE;6;<0ygW7WSkVKVq3Fmm{%ZM*7zp@gVlojl}BKCm+ako0| zwLXi`?x#z=RZ04~ziY*Yz8Mqp$j|03dftZIcD$V_d=w${uAiRQyjn8lFkU8M{2Eu8 zNGystR)bor2EbRQ+GTBG99l?ODYZl~y12IKs%L);y9blpoFQkKpL zR+oP@1#f7JAUl0r`kJSNs&;fmrU3$9!Iz%AHdYl?1%E5ENPI|9NrVy9Yz^NB_dVZo z1ZI%ew>%txe>%VtZ@Z=+wL#Qgwdo7BIEf1rCW(jK$G~?6rq?ZorgOd@O)ayi4R!q|aTdSBC@ru1 zulyHNyn=qWzS|02|K8TxxtEtET;@OPzfV@G#+tFcHnq1t_qeTk4BhVDpF?)<7QtGx zlFcsZU9*_UDehDD6J`sy%~xQUGgC8TrU|m@+G{bkV!|V@4l)Fup@VC37N^I?)wj(~ zT`soJ@JOzufQINgdys}EMue4CaBygZr4y^Ffx>v|DFL-jo>NUqq#eH3vzIiVA?vJz z|F36a&7rmC_5QL_5IM|f@VKp+?Vp&oZ7%S|oe#lTOupeM$7+o;Z&ICdgtP(~6GLXn zzfU`-q1rflW$FF9^YG4XR`fz+wcBI_g1Te1bt-fB5oRs&{p5v-iKz^y)b0+>Q$B|H zh4@YN-|yZ1ZDGV`8tbXQ#xEUD*h2*ICMB#euwKPA)JS1`VR@Qe; zRXE$~7%jjja*?b%u%PtOK#s-wvrsKLS%kj4_4JZfvCDAJCNzS?(HFqlP|p3vk0J((j!1`}#mKx@B-F8GF6-0lbP1QHOt;g}r0Hpg6}>EO zVZAN7L&qalJ8j#+i97S^x`KE;qO9eQzi44R+-Nosgd&Rw`7oLlb#w-S`58-gym3iU z_ybuu)G7TW*n@*_x?bmL56jpN+nGx$1YWn#FDEgtw$<)=sR6kgme#Mu-fVxo(f@d7 z{qfcT!ph$+uz{PGbTx;Tac~^jAaED~L~{9l>|8M0cTlK!Run&QY#~UY1bqlme^_)n zm-zKatG?n8eCL7+laDpR>u1?E{8!5Oqy?MEtjD0Boz+*fVkcFXh~G%LEc{*rOK`G8 z?}u=6Z*W}P_;t?ZYuVQite%Dw1Y(zk0tay3!|Iy%r8S6{IiC-Uzt7V$H+vNU-&zY zZr4cvn4~(cwN+mYr`d0p)sUTdzB#?^jFX+%C$wg8r2kamPpZO9c#8?x;{))I?*ROP z#6mTZ^C1a&K%o&PzW**w4^uXOgwzKYe>S_kRBAtsPZv~AkhwKv99^L&bH=b*N|O(r z8I!lhCy%Lq-xiaKgeYp{eYO4Sx~T4S^2)m07bvcaJhh@Iu4gAOE=u}`tPhsJ#;oF! zxw!2M?t$B;<3ira4q=z9&YL7Xu%txDJcUJC{8NHT{lu~9;s=zb1dq*y%EDEItQ|!no z!Rn&Oz@}|cb!J~LJ&avUG0(zzKh_cDKP7R{gt1K7AS`WmPrp^tFs%L12b)RDjmd8O z6~SZPxveqjBeySL862C)o2jjmaRFLsF-i^EY_qeiWMyGLATMyCa_H!cuyBt{OwW?D zm*K|ZIG)lKc^HH*uM8ToD^yM4i)goE_{PH7E6&|M|G~EzT=z@Nam$&Ds*#T(`dfYW zDQkmQp_48mn zl;o(w%pBy;5N8$zojF@Kb0~9En{{#TgJ35m-Celh7$r=Q9zz2s$IQ(1z%Pc_@CyuQ zXDVhVdy*be!W(uC4|@9SD{~4-$}9 zUAQxmW-y&-q{|SZNm&}!%*!VOHQck!%nI8%!2X779m~}Cw`=7^E-sOfoGI+BFBm}t zBg)V?#~!7L-E)d4OG(R`>8SH#3y#KAVccT-hG&;*09|lN;XWSMCAk2YAZ>2WsZuwe zKlOzf_*iM+Vzo)kwA;4>N5U%*maT;@^_|m1gR_9~8(njYE-M*>Y36bX&)R^M1~kv( z2f39q;v^ek`;;|;JUh7ei!(f$6anwR-+Z$f2ZiZnLAf|TRJz3p<5;-@<6g6DEx{zu z^H2GD#ib7Rd995>vuBpuCZy6a?EZoun+aYFgeecI;qb#>bnU+dZ*W2UH0$c>ih_zN ztgD;-4$GaRVA78BnGglVkYC^WLrpjV*N3&b>|aFye0x#m-&;H{Tl`2TO*uhct0w&K z3wHbhB1a1aM7L%Mps=ky0$=04W92xHYpD_^xpanY1J1(c6rpB0S5@DmLjuZrg0u&E ziT1}?HGfmIozxcJ%kZt8~0s|cn|IT@=82(tUjnmVGlT7TQIc!Vrjl+`F zmS%NE-xeeigR&&Mo@Z3JaGqwa%YdT-iK)AiYgna}YSx7z(t;@rj~&uWEVq_?dy?CV zT#+$DMlY*XVyWEaHnIZ{J$>W4Mk1t%_`r#dyNaT8QFdR)pU3e^|?F#% zqLk1pq1>8CKw&XdlXH@MXOBYEN65y?!o-(N&!@nFqh{&a{7+^MGhKq+ zBjzcm4=dWY__eJ+Yq9e;mQv(PJ$>ExZzBWDs6yo*oBn+=V_H`D&&9~a$?|jMBYe0c zQ9ZgL({>$G#SR;=JCY)UBsfENr|rKNgO5>1{Qct;gE=?9D71+8R$l%7T;l4dVK=$* zQgy`oXVIj`R{Dp}7JtzsP)eczvz_LC`vNw*fQNlAmHWGSy1sWF) zj%>>M3OH4$FK^ul`D90Rba+5yM9(d@YW9a?_5GY#N8%$opZE6!3KLUJb$(u1MMc)d zhf8z;b_1|w-q<4gcOmO(f#Kb*n!g-9L>rBiRA2h8o767JDmme|JKiWj+3N}eQ+Z-J z6YnT%`GBC-816e6sbfcS8m%&Ni(x^^2-!TlM~sLnJ4tF>rioe{Bfp6NJ3(2|klg?V zmP}1UwbqH<9|$#Oqr57QsB~-%?x-2#THC{H`q$7y8{53nyqK*iSX)kb_Q2-8Ek-z!3lx+O-GkER=rtx?h~c-$Lm??XeeZAY8E9}+^6x9svAB{U^~Okl(u7T*m$na2>SdY>Gh$S+oJ z=n0pRnv`Ki;!n%_?bjk}CiJF1>I$9r&`j?aTpdm&(P+41bV&Al!#&1#&4Vat#FEC* zh*@o!5cmhK{nYDpf$+PN%KpaB`vrgAMhHg@!pd5)!1Wx zZ-9W$KVG!3GW)C^6^&5XwI*3Dcn6%t!bBp6l_AT+a+`Lw9_7P5ZA5A7{8?JPxwh+t zX)#>;18z}&j?&$EYLUF02%D=Vmb$d4xVBOea4D`YFr}b31(muxyemy<6<~nOq-1AD z$z1TekEv_oSZGydC_99F2pS#t$2Xp4dgDo~jPy1_`I9H$(BnXsB=-z{&u*`)h@JVN z8*%6prn#8wJzPGMz0gvK%ZTbsU*-OdI7OkrQs6Q8{#aw_;ste?N`ZohF&Q=mCPw09 zm}r$TY02YpToiCQSPC6Gud3qr0&7-GYX!$hO2!g7=LlZ~&--U`Fi6Cj=VGJ!;%Zjs zP^U5TMv4vA0#c;`9?zYwm!>$d(*e-r^U-~ z-Z7rqIaG>!y`3l>mr4F;zr@@AsP9LASqAKx?|P`u&Z;V~;`ApK+F$Z|R4wU{X<<9t z@h6wBm!!n5RJHR-!R~&gclan3YtRvE7>Pm+^Yv#wgCC(u*Nx`Q<|bs>rSA&y>3U`d zysaep9{1pDK?Fu}fv+%tZqMlDT%|8xDEuR?U--*9q+SvMI}(xs{*wTmQ(#t;&=}9z ze$($VHUpdh@H}FCC^2y5(T(A`TgRhA zC}O;HZGCfCZmK;rIkNqENRuOEa6o9*9{Y}GuV`e4?%K<~tO{X;{}|vxLwagV#4?z_ zexz9B_hj<|EY9727J5P52)KfKdyFKw${R*C~Oj$>Kf5Y;fD`pPO;ZZUx~ zDm-x=un;@3w9m7Wf#1Y|H*OGvHI?>#5TuM4NQq0mH_I(do3O>F^t3SasE}xlIACc2 ze;PACr>dr;rYGtq%Oubzb1S8*k89YTWmQ^T)K->ww9K376N>Bnn8+J-MSqxSyA;$1 zhZsY`=<>xX=_=jc1BE)UvwM>Ki@aFZkg$Ue8RC4Rz8V9E+vyFrgj19z4&hmGbzx4| zx;-zS4!53)yq(_H%FaZ{)Q?v^w5qD*VGBQ-<^(_-i7mOE1n%K^UZeiDs#!v1S8I@d zv9~Lj8Yx55wW(oxeN90&s-MjM^lM_3MiHt#%qyWhJIV_43-ov0V;F#Qk)yq(EhQUKm&a7Rnnr4jN6@XPq4TT-WItMs7CS&QNNq!c_pnwo0VC@86?t^G3z=rCuzT1HflG%ZKX90 za12~pe%Kjwih4?L`L3%DlV3g-**me=e9-vz-)`5hS-@wa4GzB~y6Ub7CWaVNDR5eF zU3xacZIjem$g^G45%8XTHXAam;!ZZ(Hap=~N0~ zxg-M8jLM>j!v|ZUU|^oZKdBrTn=AYTttZhscJ{d~^QbiGhL)o9C{tTIWjKwsj63<_ z+|D+?yf7jaLTPQ?e!!Irn}1TALs=_pcI-x|?4f|#Bcq5{*oktRoc^~;-MYzPNUJ3= zg=^BnJvJ$)-TLs%?P*=#Dp~f$dth+6@U%cdP00FyXz)TGkr- zgjX6sqvMyf)I4{bu5r}VoDvH?|4w0GOeU{qoYpt9@zidW8sYhVu~hgd8~Kq50sM+? zHwu>MN5{vM_H6OhnB+ue-oZ_9s&9?F`IQ8H7*Ukl0~3_<-kgDmC)zrNPy_1B`y{!{XQ2Lo#xSLH7%HJGU= z#+sYd;J9Z?4)*Xq%F?5@R?X;rb_J`3Yj*e_=s3@Ld*7Z=Q8^UKp5Zn9Za=InW|T@_ zCB5Fd*Ec=wxbllW*=~I>ox8Fy>#sp^ShZy1g<`b=1*v}B{t+7fZNT+Cx(rsfAXA+< z*kM7L%$@XZW5LmV3e*`D*|peva7%rliu1Nd-0yh|*`xVI$H!%{z^LY{bpV%2TB5L_ zE^KZaD{AIf?wJpaC6RD)y?(zWx*y?q1Gp%u`-bwYr71q5w$GIiJT@V8X0{R`3@siG zW>{-E%_taa2`q%qt4Vb*>SNk4wYdFM^&(xs*qT^QZeTMLdO*8A4k6r2cH^Dj39N-C zkFPVPh*}&oQ3%e?7W-GC!LCy=u4?O_w&?E|oDiZ>>$~PQhD_K;w268dkZDpaG&*=6 zyQ6!hRR0hiJpQo4SHw^}4@|#VCw})qCemaXyf&s!RG#Rsbk;MoYyf;2CHGVHu81v(p3pSYCF1Oz_u$L!yG$o$Yf7h`lwP1ag zG=LmkFhVPw87?;EoG?}ubNxuJO(0>#+8D_jt=_LQ4KuPLs>ZZYr21;N;^{mXcR0p6 zD`>{)cQ^Vlft|)oMw0%s7A|cr4YVpd3uy+|H3sLniE8$licHy(9WHaoW!qDog#_%~ zX8@eXN4!?~K@;&NpZ1HGu1~i~GsQO7QXeRp#NNUu8M6j4Tiw_RwIgN< z=jHjCIQ(z)25Xsso}0r}K8yIP=C`bU&ih%`Z3=2n*lSHL6B?k=e9EX+CwKV2b-kC9 z5d+06lvp+oG?FSg!OPnaay5tTe|#`Yio7z01sN@ePOj&r#rq{8;O<8fE`=zH(W+c3 z`xgkQX3ffS$#P?k(2FIy(fbYNf*k%|he=NV$Cn@F-QIlgl!b|wgeI;R?6+C^n@@M|fl^06fl$9*v{e6R;i?G&W6N_o+m{_DcU9h63C-{^DPY;rS^<8SAE9*iTH_q> ztl`R{^>WL;W{bWrP$)R+qTna42T)_T$*wFivz_)A+-Ok$gu+Wf;cnrOiOsSCDD-_d z1P%9ih}ViRdH}sKkczl7mPQNH_6g$Pb(mrPo$C!7C|wOXIIh0v)fq_7L&tUDl`?q3 zO|8-!-L}j~?tI2OKdC4v@WauG{|3Q~FQL9q7CP0lGz$^9ds?=!i1H01VT3fdBt~Q{@ z9aOF5xG`f^l6YWiPE%cF#}86>9WR(Z(m|7LdeV#0rM7eG_Sj|?_PMzH=Cr|eOJ(f! zvDb}PUV}Cd9%)P+9!DuC$W438J$~F}zlq1kJ>*xcoezzb<=@VGC_aN_&_q7T?%LH4 zgO@iI{>y%kRu?1s-xN%>=bFTyqpHm3-AE&^v785Pfje964!bHU;~(U;{dtSU`bS52 z(S*ce9QfZwNhf@|W2s;5qTBePUbK$y)B-g+qX$U0r}3oaL}C z+S?1>bV{vY&F8N`a;YH1&W|{&7w$+)_6pGp9zf_3#e-hX)bzETfEO&4vmz3_OVe!m z84hICKNN~~WSJjuObj+yl>9)l`85E$nuzdnwB*{i1c@G}xgKXKXK{SrENuBOrKZ&4 zE*$^?S?9hx(BF?`xNirs?hthxMH7m%vad+nFwlin^wHkq+ZsnAtMp%e9{P|2CS~yz zrtyJdrm6^_X)12tlJsUI7}ocNa-8)BV5Fa!D^v+~(%j`jC=psBYs+zL${2k%sMKzN zy`f=NZDZ`P@_a`RZ{RZNHu;RM*rX=sE7N&D8kT~{AT^Z zCY=Tb3)zA=5M%YhYQ^BlN$xY}pf&QeqF=OVsRj!VS!_kWw5b`y*=xjTebpy1sIhOm z9$s>kDEC#ZRSt@2e-^;sW3ustO_Yu=>6;!VT*`#gI~NeI;jbb0_)o0rVL9LT`11U6 zZxlWqW50*Q&8}m0Xg9UZKHq^IM(1qr?0NBW zv(2qS=l;jBU;xlpf5;3BA_qyYY&&fp3ikSRuk}>D=0x`wCM0Y93vT#9Dw-XwnO|$c zxD#umQBT>J6-qdHHO4l1G4nRdj-ZL~=z0h9_0}1K?(UCmQB_xn&VpYEOm)WCRk%!S zu6?n(7%5p0w-2<{c@#N4PtHjMO@RV6sm%mll{RyP*P*cHI45p6I(0U02u+fUl&ma; zpv4!SCMe3#{`kyHY7y3qC4L?(VyV1(Y>R3+*tX}xGq^s?Yx$WYrsXK*$H*BuB9;P0zOSP04)x3W!u1ahBrJ_?5X`lG!ayMHw%Q#}f^HzYvv>kRd4or&m<0LQBwdPwCF|3&dGGv3=XccRQ4# zg2*T4-2athA!wO~xz-jPmw z7^_n1=p>4;3)j11cjsa&UnY@}W-%#Dj3+QC3uHH>T(=V!T%XfYrFTXk zM%?y9bm|5}eRL|dsX{{mZx>GfZwtb)&7dDkYZ9Uk2tBN=4C$nPJY-P?tz6D)iKP`I zNbKturKh6#kH=GAp3sB`g>e-b26Yx~j}ZL^@nQWOWZBkxsi;hncz*qw_Fr}5^R#zh zVt`9?T0!*qXxPAJW}zflDUpR<`dM)~tLfawuSTVt2VzW9n_%$V&6B$2mMzhQ6 zPjH08gQ^BZjsz^H&yi+Em+xfn85g7jnA$|@$DrNj|0gcBEC8h@_0JJEXH@{7_O!uegAki!)edL^FW2m@imZML{ber2}&x< z`eY!0yDw5ogPFgaCIn6kc=MDGMNu(`jyGnibEw^knIL1TjQrcBe3#1S#|2x8A42Y6 zT{;oAof?tE5HvQh=y=_Bti}C6%k(;##ozwQPNv-4FNS_dNKVe4l5E!OaxdU<-Rg6` z|CY7rI2+Aw6=uu$?25+;U^ouA!oxRMiu1Eal_vcaB$u#cT;y~+N6CA~KLmdc%;Vnk zj&#OynQib#gZ8NL)4?2aW}=d%q}NIi*6d~I*Nn2V#mUPzNb&yUV!+~aXR+;C7@zYu zHH8}0dM>yc!PsWKL^JO>jz!fgy)R~lk&?}XgJMn~$Xz@#r)Ez!7MwoZr=E)6*%EstDsgoNaVFD z+->Y@KnO$k$w2Gl44liaO*UkX+jiq}+1=}N)k2rnWlzagq(W4av?}3Y6uHLniB)&X zYe90EFm;YnmOfePE3fVv%vzD9sU$F5LKQzb;gMsIB4uFzhk|(|U`&>;tLE1 z)(5I_F`6qk#26-pH*Px0kp;06YEJ$=b0jUQf~4*}l0&sR#<8o^zhlhL6QM0IQgD%k z!@6KsVx}b9+LM@0`#OvLTk$EUVORmU*zrgLl50OSu6n=V;Jvg2Ak8E1hfw;8MOv*p z9z3R*SkZaoHed7psGQE3RpAw~yG+39WSRGHA9hIod+r!Z2}f1*GJrUbjyYt`Mne$? zSK3?~KBuvG>2iih+67yu*|w;G?i0XP(28WoBeo0#Mj;EjJ@JHmTFAFoGbsE;;=fJ4$nEa-CN^F$^ZC_)54h z1kb-!KwN;@6RXk8^wxP~^~nXpw49xe$yW=Slxse8<;tYPk%Ax)85OvuM|`2!!QAby zoTjO>d7`vf_B~V>lB$d0;^)|t<$tL$&!sUfsjW5|HO`50&;++9Z}TLB-;0x4f1dDb zK84BE81o{}s`{mGoR=ha*zQTGAWFu%&urjI-MQJMCzlYJP$eO97$t$^pW6Y~5_Twk z@Wh*!Oumse8VnYPAAuE}ra+48$YH0B@z@FGOgnLUAd0Z{vwIU!x#4xLvI4=fu(S)^ z(0v0sO4@iZCOilbO+SqK0J?dv#D>xT4=nk&XdYd_C_>SMo z$)4u>>97nTA)t6X-;TKx?*1b-*jcQ$H8(I5@{>o=X3i4f(U6NlCS%zoFD#@2ca^3e z)d`#|G5WQRNHl`oXA^(TExBhB#>!O8EOIu2dyHniVEws41 zJHa8idy5BmcXxL!UM#p5eHh~^m4z|+CQwmWG&g-bSCqmu zmc273L-x{IMI-O@gIG}vYvWG=un;LjSpS%=@~#O938^rLfa*x9NKZ!)gC2WkZvqP% z?ynCLV(}^Qvfe;+)>^3o7*8%f=|}JmKf55f{|{>KoZ3u@=CBHzrPO7Cq*g@oFG(fS zvY%=rnDMblyWAs>5q$wGxdu+m^Y32+kX8;Rw8r~C zF4WM;Wj@YES5K=em72&il2x-LwtT~C5Bm9?7ePMbPd^@pq+F7KR3;{+6p`ov27a>4 z*^X9)wqSf-uP%B(p$mm-zIw6GroHSULR+v0LVsmZQM47L$9kM>qX1R0$^mHF`S4rQR> z7x0kF6_O`B{-O3OhZ`hF?y1Yb-ATi}<}87ho;TnYajdOiSnR;yf#&k1=H8=NvOMKMT4 z<^=?RweWy_zeHu$sO9xWR#U%fHQJX&*c?)PkRgy38czX$JKmRySW?$Z%vqP+1Pz-E zilgE%n#OrXg@Iw6W^!)GeaE#?bYjdT3y{s6-T3u=l02At@T9=}JC)}mEgScHKm@o^{$tV*|CWfVoIc?~Xv`b@hymaC#9LyD8l3LuN0@&)YZiEmvLy|Q z7-G#Lxz&p*jjqp#UqAtGKMOoX;~heuO9M#sv9Zou+6`Mq%~}xXkQ#k1T7G>g@IAXf zf5c-he!LJnk{HN;Ej7$y6({mRbeU6h-Jv~+Pgn~$6c@<%~owA$wE_9nCigwlwrAmo9>I^yfN!tB7F<%v?>3S-(F?3_k++#*5 z`m+9Vm|-_#zAeyvHtTTf<_e7_AOtKi zyDS|#D*ZVahX&$$AWmq%a<%oMpY1`RZANQ;ya{4g%zmvI`2@fn z44wHC{ygkTWtS#{Z15z-KkO$?qGlXC_1j#jDG&c@HDBDRtWd{s)}E{P=~SjG`?9FHm3`}t4du0Pq>6Zqo;`Hx93$^&HpqB9#R-R9NicIw1S#W&^Ggtu$%ji05T z22q?;a+&%+J5inR?Dua*JFRX&FCU}dz&wzNdSU1-iHcN)(@C%U(Ar18XYddSYk%e%LumW-cc*eLmMoP<8xLeN9*tiLz}{9sK_K_@e;7+bYybi#?~t7_4r zYWX2v9e7{A*O%*Qw$;S)D-PlzcZx3KE}oqkKUJdp0e0V$fTu6es-ugJy3Au=rmlR% z|3Vb%s?%?QKGSrQfb0fB`t3k~xBa>9sis#BA&Q78^c6o zIo-E&?GHCw9Bh4Kj$2dI_^7dbKq?+v^si?xOa^|B2wlDt((`*C(Z5k|*PC1akJ7#& z@zo+yobgYCPXrY5me!6JWS4@D;uzng5ScM}okZ^WPd6 zESDDk{ol|0m$?n2J&{eqLcxDe#q(P~H~jqX{r|qm^#1>eCBJVLjiWtCJa*9D&awx0 z9gS)=YqTq0$^TxuN1Os#(#OShJ3BiO5fM?bvBg246S1NH|7xe6881CM1zsPv0q=-# zaSwzl{=eG*n>4_bFOGjhnc$(9{u+Nh^AGGHB_=OgC2Z&~FtF{{5_~AQ4Mv(k%pqC* zkN<1IQ5=jt`PPljVeBM^k(nYbt&Lw=YFSWBjY@Ld%hXt9fM@;RjLy`vwZ%Ih{9JLl z;6d{;x3;51yMtT%zXm5%$eqD=o7ZJa${p@=&RT=k7d0W(5%z7}5p>CaqP;R-Oedbq zOB@O|f41o_kQ^Ea(RQ~%?U(IkJ2L|v9x(rtxWZVT`EN_#J_tsxSq314k1I%sywln6 z_2=G58)zq)*q!-Up3*Eb0-%hY-Ju~g053l)0F%5MXVlx%8|}J=b(kki=2u(CQrltb zm`%!yXTMXEesqlbk86J0Gx%-Nb5xb@@dgBV+fgY@ERX#vLmpdy@5-b*Ffz`W;#mYd z|6_jt6t3A^8wbfC?ibgLR6}_yk zOwM)$ZG|~PkyyaDOh-5cKdW!+-y#&m^$9u7xoCt{k(mgPqB;X3b7})^@l6 zJoi_|)r(C2meVNyhcg?PH`bgvD-(AtPx)t+a3Tql56JCU;pp(ebv3}~(BFr3#%eR> zsl89JN`nLe2Q<{k;YjT>V0OB=&``;|Jlz%$dN4W(cE~0-9bejk1(e{hzpCgA{fBWa zzrCoGchzSEdg;}H=s>i?1|wFTS}oBBRh(M49__mw?kThI{zKGe0B zd)wh@9ZwM}3 z^(27SKphE!^#5q*ML8k%-jyX;?9AA9fa`4U@KcwygQtLO$J-0{X~Htl%foy1_Yg$o zEpo}Q;&{_Na+8mKMDIRch8tHAWce%~&d$XM<_qg!z}{jC)8&T(K1m z3`V#b=~f=cPw2}M9>feq-7T1xAcIhP&34-8J~JUXZ2GR8$OlQZ4l=6QaJTTvfTm^T zJ7!)<6;&#{{7*CF17foN;K4aBOPaWcVB`Xwv>-@;2j=Or#AdFy>q%+eybY!HG_D1W z*+%d!`Wsc#$>KmyoRxOP6j|{5meJ;V%O0!wD&~CY4_Yit+8<*2VQ#u-hVKR_$K8QM z4?3f?y73B)+*!8f(fQ^bK{S4xrtq#cwo6uAHY~~*J-wc32qbF zIa4{vV^oS+)0UUy1!KbGK+tAvW(jF>EF@?dm1-A>kac^+)9|ep)fU4>=j4rj5lp?l zSXj`S_7#nT7F&Ygc3n79fM6HmmCuu~C^&u?h2NVCiwWQ(pRdk_Ra(RF_1?35Ax;oZ zkv~y2z&p3d@x-_C=rez85EGi04$j39ioS`22@3G>hKjli$zYVqZ2gjg{z^100unp) z=n8mT&mVgQF*!Bw*L&+RBIK{0c-de(y#eBb;9akWpT9h((wY=-D0V)>>HBWEtY-;E zQ_67F`&561tPB1*oa+C@y}tD#)HOUJ;+5J7Vs!$zM?*)O>x%fI#`GuKYysKhy1&En zgpm_Yj2DcUPh+(Z4`W3g8zR5w$b3((v6CW}V_h32778S;)gQZkT513Zg{;!vq)bPj zAy9(6Z$7SjI#OMW5;AHV$e4o|*4V6g8vZisdpyeNKiLChl9^5B_IxlKC{Z&(xh_w_ zdtEmO^k2U$8j$+80)95?xJ}DFEk2Lwc()y}^jro=p$@Cm?tM$l`cMbKlZz^ky;}=U zd3rn+xZZ*v!{})+lY3XVZV~4s=RQBa6U}~K(?l9Pj8O-USyueIX8Ecok2=Z!7W3-$Hy4hjIJ=8=3KE$Rqf&^2cpijoUM>weq z%I4?0MYPADH#kk{q}AT;-#1TsGZK~WbNP00m`22KDQDtd6ppzdpCovT&irP>>(Od_ z5Su8g{lwQ~t2t<}2eWE2fb*yxGnvmnudS+$(IW91d5$(`wVTtQ=Qd-nvBN*Sbj`=n z|2Huz7V<>Au@q%t{Uo7`=wODH@n(^Rh_mKpj>%*o>zY~wDj-#30QG-BZE z@@_%S3b+<5&~$D$U}c#*wPRfD^rdiVJiV@4n{Na?8E3`?^o$o&E7se#90(tV<(KrLhF>5=lANTVAItJ z;;nUfU&y(w9QANp_B{^wUsp4BkfOpTlR@A@FZAu7IUdaRhYpvWftI{&3lX11N}3fLkInC zm(Q%o^jy}ID}3k{1m4`);|61Q3cdr4O5>P*EZL3Yr|5&O0N)+CJ*Ilcz5Hva{eWjv zwND57v`>B6e^(X7zQ$LDR1L=KKNXT3$O`Dc zlO96D30PbHF7}NEX(RlhPvyMcWeVf@a0|fV2RQyhPjfx0M(-g2Ec*9g%&c~lW5Eb#yZoO z%*4^3uZI*=;)XaM@enCS&h-(A7c(1faLM@6E$vEjYuXaltN}(49p;N(_|XSX|cdH7&X0+ zBM_gytjo8e*klL@@HwQ-@_iIs*W9JBzJac~-_kr5x7LLH{`>($O8$uQ5K^F{O;Hs^ zl~!)UkqRF>M;*SJH6==UU+nePBa1sP+)*FbrY>O-QHo!E8cHD?>7Zt8)K}=DtK6F+ zkoj;_URqLZVz-Vx?|b#d4&oi6k$hq<;X&P0LZLilFr>H98AhT%8KT+!hllf4|G|4) z;}=r-S}=Prh~u?wCtpgmap}14v>qd2FnX;hut^HU8t%{+>;!pO@28?d=X52^kALrM zCos0D?SPU}!yBM#mpxkNroX%0K*DM?%~N#egkDM|lzbuB^Z+mkt-R;+{@Is# zTcK?b&P*46X^uo{`3AtZZmK;q#P}Gph09J8x#P}HY)5!V`_f`KV()2Igqq6#GXszs zfvCD!b(qttS2c05`)@^+HbcUg(=G4sJN1$4y_5(Zpd?CkRGbT>nkO&X5a)Mf%zYbc zlmpj16f(p-R~T3~hm&=z={sr=zYxHmW0v?i#M-dWOpOFO902{ZI-$NDK-I1Www$}( z@7o7cQaP~UtlfH@`CUm7`@M4NdmbT}z3vDU-9=)s!o158C5vGL_%S?;*l0UIfx$_1 zKX;X0Jw`dgM=t?sTp6Aojz_sJFh8+(MtA3fTb378OEE%slbiJTk6eFi8vBaf7&DQ+XDdCDL5U;v!vOJ?GEnk(N#0r}WU+a%ZZ5dA zo=8E7_~VwXynLQc;1oO~%pP>tSrTp>gb4kTVk6!+Nt#4H$9y)Tk-AujWA`onDp*{5 zS%(E|V2Ye;)gUc0DqqlN#V|({W8F^|d>V5sD?9YL&!QsC94o^};vHcx`Sbl{ZA=FOs#Y5Fj#URyLM+-3Yhq)jaDKzUPhN0(oTX*j#i zd7FH0k|WIO-pOn8UmU?{Iq%<^1igoB+8<9glQr|KN*K^`j{Vw}69`usyQrrmy2$4+ z%WQZ%PsX)3WYi=Pzn=e7-GHBw*yGN%0k~eD$QkK!l33iOAS|d{Dh&#DG5Or+bfftV zkh&P?N~X}f<(?bllP|i<_^aDLvp0U4QtL5NJtVzn<%aB`eD!f9;UDY{^(T$GF8O>KJhO{_& z(o5cT;+i0+Rn(#OF$o8gm5?93qz0R z2h{|(AJhcPe3*9Q`27Y&n(vCvf=KKaBBU~W_S~uDx_{OC)yBgy0?_00B}Z|8--Jsz zxI;G{cCl1=@7wrWFFFG_!qXrekCnTmjD9{;DEe~*)}N;oMSZJLs)s@h`u#nfy?oa2 zJkP{*-S$~B=!rL9%ORT?;O!LqS2fv}7kKZcV(jh-iSIrP%X8tCqCd6QSpN3lBwTo> zQWTj_h!|dc--uKo>*C-wYtFX{PTsgLiD!jsY1WQ%*D23NYh4IHSqa!8N627 zKkGRQ2T-KYzsM<$xO^{UOl@WSe#k(P59xOQF*ZL6pVS$52HwUKBS!i9X1>sK z=*nwHXuzp0UnfxK2w(A4t_*=jBb@MBiU-jBG1`v>=jA~h!cYGvI9m_Gxi1UsZOOjg z`6SfocP9u@CK(!OL|qXKzwr&QSeci;pLK8Br;;}2h&nU=q*B*~>{J=@L!>RpD`Oxj zl1JFpM$`L&@9NV|%jKY`^}pyKl**{>yz9x|ZNtaS{XV?3w3L*KD`{tE=K}5EGRI}Zc(Re6ox2(L1&1~<%j>^LIZ(Y-7)v)oLf8@?W({z<+5#tx9 zEmSIn6OrsOcinYYf0rk%23u|qN*8x>;~KNw7@ZX<<$HY!q;axgU5Tl>fQA9{IJO)d zJXS;Q1(g=A=w)^Iseq^W%$;6SbrIHOi)u!b>k%75fmO+Jf!P;`J4j1}*V=@wb}msh zsjc?zSVGjOC_5kstGS}n*gFOC>oGD$pJXWe-bGOB`hz@ z+#3;atymfG9d@#2iCetU{UnboZy=?TQJNauXNq}V))PM&8Sw+XYc#UDFid1cru1Gk zo~;cBVOFI+KakH3bC?`H9?vH3sv^gI!j{W+EMGe?aRD@tFd1+r=*31?1@`yk|CQn_ zjw0D($?+lLXxbY~QcGJ;T|f?tQ2UbhScb3U7}euMws*;f0Vg|C#Ir&r!IdBjBJDc9 z9?f0Md>G&ryQ@f#GGF62<$Ki0N|D7HNUX$($*?LBKpDG(AaaOzTHhV3Gcr5wl0Pj%=PfdE`sH^hX-OMI9cjY%J zVzz)kanwIRQca7z+C0&!^gdBUJYjiTZe<&y4=W>!H3k1P>v}DbKgQ#s_1jh!yZdDI z8sC-5q*_d=UXE#e<;;Fi87cHy(6X^M!V5p6F zmO9Y<8xz^OPuYq(l8z#>RY%E`SJ54%Hz$iGf;U$7Y`0cmu^3b=3U50m8teU*#&gN# z$Pwq$6h~$#z5x;OtAjAUT1M_AWK&dnJ;I?z&r;b^ano&A3#zm&tLDDdM}xDg5JcJ? zaam1gze`Q%%40%~m>;r=i$bt01Q1HAPPlM4G*y;3{vADmQ}+v1S;FdX=j=-CW1_KH zqdgeEyJB5{rX7XZ1ij3_6k~*Gpd2kL<5FxPC=iXK7uCE^el}${p9_rx#0O&kq{l@I z=x6+PhgQei_%o~pPjF1{RgI4V8LQDVe+D)<&Qe9btAI?5@E@FC%&7NXTTq*$80iWX zsk`jXJ!)yz`j}k77D|tDLhd_jz}eq>+-LV0c~_(}3D8C&3`V@9ChNhSM+0~&yASRq zvdr}vK$1h+(dJ{}JD$~m!bI$%rF;eb{y5cNM55?7eK@>>PH55SE=jVBFc84VZ~FyG z1BchrZBYrs2$n}*-a=c@RUadH)bxdY+eZFM;ztOS##9!w_rIlR1 zH92_`1s`_jA`Pv6hVrLYDE#HpEyrwi*2X zjLTID5(^>}=X9N`-F_~2F5#g#Gu}REi|XHY`0+2$zSrBTYkSmfS)|#JMwbq1Rnx!bYjGL=CEmN_EXCeXz2H;A^Kvmq$tTJ)cDt zjp5soT7_1tKNh`ujrSqCy3JzmU7hQ)&yRf4J7{QUs!j=CjKoxzvel~92j}F(e}QrF zYrk;pNdtPa*D(OYT|kBVmY~^-4K4qQC}w(B1P!b&0fTSsSkGTz4pTa=KRdYUYajmL zgh##6iz24Jk4qK-W#3Y8PQYT%Eod`{q z46^?w!fzORR3bDt2)tc4RsUNTyotjU-_n%o>ryYKr)H&PjQNQm`v3+WUY%eq?rhRVaspu z$Wo!$Gy*AYd|D4)aXg+AQ#)SHygHs2U!M0?osDT-s^6|7+R7n<&Kw-my3BWbD7WAL zYs_3{!*+G%BWKqApWj9p>Jk*OQ>^{{flV~UNSr~ZQn=ec+h2ot*`h?`qA7RSu>VfiCvO#PC4sLv7%j*8=u z!5vgY+pW4Pf0Y6d#t}P2M>%iR@Yl#ZMl{e14ao%+@vbS#EUi>1^%t8?G18}>t+mIe zW{F!h)WMfpm(N<7EPg`dk7-kv87sHqJQ2MWA2sN69@ESOQtSDehNGv~O7R@={RSl; z|4pd@>hjELdfJfv7k|ZWgy{_EkKjt=8Rl&|Jo|*h;Iw4jx9|rkA4@X$<4x(CYig%q zDW1t$YqQf`e{Fu zcEm)f0f#<&l)5}^)G$#Q4wB{mv&4GMmcop@PhVemx^^P6201aF*m>5(CJA#YkN#=L z@foX&gkRi1{hhd+PP(rP(K61Q9rsLzlFVcHjUr`uX(6K#?6LaklkVcdvW*%zYZZ+2 zidBQfDEr-sd%DGN9}AVfDJT*I(++Z%yqqfeZAyf6VYav_xUS`ibNgZ5zP)_dTyk{$>(z)r*=r+3bU@QBAm%X+?Wj^8(GF$U7y1$ zj1Y-4*5XIDNlIy>(qpaUEgq$6J@_CS%I*^^Cr&m&Vx#RXZRC)~-i|zKUcfZB`Z>hQs^` z@HCyI&QOnZfG7^x9Ptv*XZTboaFd)Z)Q*<;3q5RgS%GWM8giKL@t^J(K&sTx@qVQ~y*Yfh;;JI|j2`Tzn6Xj_Rp*MIg|} z(n0&RS~@6DZa8~&yza{2;pE}sLrb5of=kB5Zt@4!vuH35S5M(37s=cCZ3R^6vPsAi zjOK%WXt&gFo*uU3Skk9Sd4c)(?!V}45T%Y&j8%3#jzXk1i;bx`6$?}NU1{AuGjKfS zg~Lt2O!)G|_F{q_Rr0R9Jwb#Yxdv1iIp$QoId8DmH{s_bYv@iD<6G~txh6DBA2b=)w}widh-KIAI}H#C?MQTc z#++xSL;jh!&uK{OW5nKWY@17!)qazb?cU_-dOL=H*ldjFp||~t6>>dXUjH{VijtBt ztEuP{GBJ;6>rUgH;yW=;xmnJ{m}XD*@+22SB5zua*OTPc>-y~LzVp@oh}cvUaVU!x z$axmC-tLfKOiM-71yZPcy_WuPw!4kT=lBJ~Tz6QZig^5@fo81j9?C%_`CYVT4qs0B zUe|N)F4ry_aC4L;C0)Q~gfVPMThK3|l#o2p6A)5LzpQYZD}2{z7y(7G)W4moBvFx| zob&jY&^{x{a}58y`w8TpXLKFC6|CLS>pEM)YL2vx>FqB&BIg7OEm?AL~q z8!^U88)~vTZgbr?pRVgZlFNLOx0Dszjx<_cD)jeWnr{$cfTt5Yrvrj01z66cKQ^r_ z@S1fzFK01Wm;1G%bk%)|S9dBOJPq~RZ0_z%#z_jjsJhs+yPU-RL&eD-IcCe+Uvx)d z`G-=MtCX9ZO)m~}j%7}c@!y8FH!my)%S3%g#Ic0XAGLL&bGB71)S5(JPfw%!Ojtd! z(VLbh4KT8o8T{}7Cl)2S=NU8boRBfej&n3}Db7&%i)}fl(v>is z=2UPX7xxp9@`;XrTw7oI?h*hWZ7^+8THM<7E3X&Vzvr_E=ILTfB(Ik;9>?j^^JR~L z!#$@8UOc)~pw;(9n5q4xijsb4Y*%hYBRi61fNf`j$6noWAvP|cXpxtS_Y=Q zTc}TLlx%;u&M!MR0KY~29@*cXY63l;mNMqJ}ru)~qfh#s#yOx+q13t>*wvvB-WZTvIFL!5V3y{o{_0Et0Q^`GMuQF&WtPil8ov5%HA*VB`pp(6b1byB^{%9GMQ#fgT_%$`UJ z#^2B1UvXEN3>OnD)jGj@q3o$BuSlm)1a1(Bi7snJbZ)u&Iz|PoC!SvpnjdSy+~V5= zub~H#`_Lu!Q7ygczzyQGaBU|(vM@CSjk%}tlMSBPTaB^Gf$-||pr%=_vTL{aW=p_m zb5c$5h=n*_R)pVC8$!u(QN&h9=Sf*qKgSOL^YaLJhw8}^7J$#PdJo2kDjw~LNqlQk z;T$VZ*6Y)WpjfJ09u#agl>eq$&@0U%*;L1k7KiQLb^}>2ul6YnTs%BHfd8eoo=q{^ z*N`O;m)R-}6H`$`L&DgY>?dSGi;kkVbCHp8&7TFS(~L+lG4hZ_j_J|8>*?$2t9u*+ zbI5aKg}`En1I$#U0jx!#vr8xCvnlR+(l1SCiOUKb zh$Ekgb>|`^RHaSCMQ>~gq7|fv<>R^zA?dQ%pmyewfx*&+8wU)_U%2WY^HaTf%<;Z1 zxWzb3QI55^e#vJW*W^d3_tM9+8E14KgV$v9Lnawpmz9ZTm2Ekbh7c#vSX$>DPK^E&~OQ(kTK=+0R|4yJJ;xO;~2U+R9|b8#t75ldCCns`Rz3#)r3 zJ*%sv4Qy{T1#^;gkG4ArVQf0bSeYXaA0jMT(^**5#P9%dMIdRiBoh3M);P65w}4Pe zdamL4p~Uf$o>XUrh~LkxP6*ar0O9+u;f<+borxSAe8Vk<=&cUwWaB?9Dd=t)%(7x- zfTOma4pLw=Ot?<>-?B8# zuRj=x;D!Sh+Nk1_?>=$+GAtSsE_zpTa5PR$Z^oLpeT=6JdnlkG)0>~9huh|@4z_)` z^x)fFHCtZQ?+|Bh;z?s9BijbY4$3EpbUgA~lv(FBiu6|onm3l`64VCc*5U&xY2G|6 zY(RO1g?*Y+Nc8~+fjoH>h{^e>QNfHIPXWzK=0`uy&vk!?o@j2p_a&U#qNYmvTpo9$ z&!@wG>0DMj4_Fq|7a%sUfb1_mTnIqkJ!c{F>EKiPZEfuI+t%YbN$KdJEuLB}hV1ke zw#paEoylk#D*{^(Nb6A1|k2LaZ)#qQax2RG&W45)yR-5j7Y|vBQJ(V#Q1P} zG|h_@Q(AHMK=xeuRsu9JfcDz5KoW`aQ3|zvYwI|19r8$G_8;xKa6kfN(`K}(tql=# ziQVM8<{1@R$hRi0r`GZkQMEXh5ka5> z_lO|nenFE@BLTA&WvYF9J1wEMyJm~^p7i9KL}Ev8Jnc^%)?(1ZI)i@?Pm5R9qtv|p zUjUoWLj7}n>x+pSN5*C3>7Kts*5r36x;MvBkqu7vcP?f_bf_N=r4{~QWiNy;Y-4d_ z>3`cf=eZ<(o$KPePqCMm?tTW)3X1bkKR{P+oCh3cyGj2d30*DFNJy>JLKiZMoaYMb zhAv=Uo{lI>-~a3hHvwUgjtf(|(gF~EXnAzl)eWRM^oY>@zY3ai>b>^00;A86;G<7eiz{zu&a9v!GI451|kSA zT!M8LFSF6FV5mYD;9q!0QAS0lro> zGSoIBnvc{=4r#LzDsOaUUH+P|I^pzhjypvLhQRe|=^^^&93i`bhE8w6M>VEtgMQ+G!A$>aY^0?L2y-=wQip3Y!B1 z23t%Ae8ganC79!%v0v)`kt+{>3yC-=ZcO_d_u0pGlR`>&uCl3gK4dmxxmlyhyftP0 zU1a~0$rIRxjAEt{lNX(3wE2TO#8VGa4H>7Hw(Z$}qvDJgzWxMQ=hRX!Pn;;US!-4M*1LDc6`d{6KVU&b{_X?F34mlONA+<1fQV+2Z0cZ-TNXjNb4vW?RF zu3rLFhB8@%KeXHh0|0rnzx%EIiJYK7F$y22Ls^fv3v{GUd<&1^TCH>}M|5M);JMjq z(HOZ>6zX}|A;q)875}H3*?+O+QrCUKzsc`fgGTRBa)PlVxmFxPx^`Bk!2Ri))o z1@L^GKBnUp+V?I!A@&Qma}`>XLspo`fC~^H@&Qhs3?qbfchA7Sd*}K#)$Zz~PiQx3 zO!~`)S1R?!nv_uheE5v*&gKJ0S%c)m;PG7kp&-D(>TR)QjyEpZJ}cseXuE1;EN`TS z{=6)C?E=G*orHf?bXO+Oc9QVNHxK-c*U@w695d5q#2Y4QTU@5WhpGd?%|>K5OYD1#}y`;8WPXC zlAG@j=~d906acGM2azI`rx?u2ck;VCF01L498XB9EZBkfLxt3+%8*44YeK(sPv_qy zb_ULr9PuaIDQX4Et8Iq7l%J+}9=GkajTBl-N@}nKWDv;)bQ9@enpgLojFspgG9|&*Wp<&vdpsg6oAB+T22Tg<~k2G zy?D+ZQC9X@je<@jVXSEWe~I))5#jO0b)>ViaLTs+!71_S1`9|N2dSSwU2+f?l~F`L z2f*{DBrB|Meu90&BQ%8{%tS7`giIsk=YQW_efdILeV(&sF6xB1wRBN!wtTUrzAr(6 zo;Z_<#`!~Rt zQa)qM{g(q*+jeKvwI*AjhA9@j6$MEnCr7K?CWkZ{botPttgxaeR(x1N#~99~5Q}40 z1Lnd+;~?WJgRHW)H9!y}AVmZftZY!-RnoQpZ7-xraR`cO055Zo zVHIMY3VrugLYT8rZa$6VP{Vfo`@O^#MU8vrBsN^Fvoa?LpLS(B4`r{_ z?c?BZou=hvqNF!nmUZ!=kE{d?CntcrgO;bszEF0-p&RJ?zQY;^#=}Sfy`QCDxD!;B zy;>src1?G1W~VFGwbBz`RF&vlOF^9_ZQvqgwL#LESAj9Iu9aieJ`h|{k2%}zAUp0l zJXa-SUT*1(`!*TgS13|gq#AflCbjJNKrwUCUt=!F5yi%AwE@hSus3{5r4w7m+`Pj| z7(85n{jscAeM!<3FX$ue#J#0aXGpeU=PVqEvor0BdlPX1dO7<1$y_R~D!+m$M-@I( z+6|ZjHtz`>PUUq)<2jU8YH&|jzu^_R07#j5ro49d(PFgKLHB8sFtl7A9%6pY zOttIk3(1BUAEwDA@IS?7#EFNgW*_mYbjIegPI@i2cZCiX@POvIw59LCJiKFOD$JiU zdHpZpw!kMe#g5wo>wddLW{}4O4=0TpD=h#P>oCQw|DN1e=tEDkW`jA&aZ{CfPdW3| z;p!3teL&lnR-DY{ry< zIyo}c4zQ>=hjQIt472W6ymHZ>=lr_;cXTALDVUDNX_kw%q0t6@=?k!cI<7NZmiRGY zB@cWQ`y);b{N30R3oV6l7Hb50Om}I1pF5P|YqInrKA}Hp+oRVh7r3NO2cn&=di^<0 z&|E*j8T?8szg0mt8J1LMcBb=eT8Jal5Sn6I@A1^LpsAzsJEUI7>~2g03R*H#=X9nn z_CimULe@q(H5`>dxx8w>_V9xU>{Ts}`FFZL-j9D{tPKwMYJT~wr%*ekH*_@cHRY|B z-Mh{maJ*c1K%+kZ`B;73oGfH=8B%?DX3H;!CYZu98O&Rg+T3-Ed%Z9>`JXcf43%;t+3xjq)5NIy`yo`2LDQq z0PX8OR!b0{9K+-&v?#}PTVfZtx-Wp^CUF?khv~{ceAdkc9LJ3-YR!z!`G0mbX?J{N zhrW2ZsCoi%)7M0yVXz(^vvTse?_e)wc8&Y`Q$^)i52=y!L|ll^wYGlSp2C=3Ybfu^ zwPr_6($4Ubs0O3)Elj%Zk8yoUv-7)jtK+5a&bTHz$xahKxM{M`=HPuW7mIQ8f`j{p z{9bpa#1$_)&+(Y;V!HMspgW-qgmNS&B{?hdJg0=oSL(lMM zqep@SXNC|%L>Txr(%Srb(CM7T`c8KbHX6R{vdgh+5|6g=1KOsL0zFabcp4S}WU?pQ zV3D=#_>b0L*I#9tdu-2fL%&y@i_y<3nj~!}#B^Vg6T6qA8aUDk)@|EM8Gm1EWp0XHI`A;#jM~e7`0_SXEN6mL)0bOxQK;0`fR-7I?j*!)ADhxlcMV+4RMU z7vDuCQBmlrJ3U!jmA;ZoW@GD$(97=XW%u*Rh{mo4Mmf9`|NVm}eqN$oyBVE&d$rQ> zJUGOl-x?-%ews(d8+nkG>a0@U6|7POE4~D*XzgHJPxZDB4UY#Fyae;r<}d3+Al>>5 ztkI-e(2{b}NE7JLlk22%XxfVgjv7oO?HrSkAP&4!d_+7Q`unQX09g_)rv;}F;!K&2 zKCFm;b?9T-iqfgtoyOY_LxoU~&jYD7UO#|rIG-5v zTcBx{8Qg5?n62+f*1P;s-kM^1OWq;294JFb5(j^`D09tAY(X_EMQLSC9-Oin zDO|N*a~~|`taX?&XP}Lw@OYln^?@$wa?SpL?xEi$r%K_aiEGQ^5oG&iiXHQTGacwP zHaxKwvR0B8A4N`dTB9Eq^>5PIQX+n)e>Y}>V{Xqnw&jbye)?#+)}7WmQL*!rIsH{b zZ}=m*@*##sPnX%(MrUL9HjHEwb;g2AvG>bmp3rBT*hUjfT@eSVvr zt52198E&soSz^J^Rf@03lpi9O&(J4>D*PbnLK^D!v0|8SOgda03I znyo*-mRAU3ip<+II~)f7AMXD8sm->H{)O)v6faU-ikIR}(BdA76n6{muEpIQ0u+bh z?oc#1#oZxTkl+^BJo|lT&v*8puz$_WHIqrMne#Z;vDRl9Dafu5pW-986LZ|n|Ft65 zIiV63jvWq4babDuhhHNzM3O;j;JAE@b@3t<5oQi{NYr{}YLz}|w`hNsh=*vonX{Bp zF!1~zxX=W`l7wgyV4<{vt_zp53Qz2uUEa7GT`pAn=x%lJR;)tG&*Ho1T`rerCVLzD zCf=(aUV4rK?gpIkltdw8-DgCpCpAgeog3$UB<2ooYUCkVO?4gLLf@q2Od4YUbA+H; z)RTE%@?f5>4|sb!1NQS1qG4Gvm9?3%<53JF#K1sZ9WC}4E{!T^igymZh$lbpX-BpW zDB4W((JQr@W!pi_KNQTF?5EtGL2aq2ks~!}kBDEXY7b|acn8~{S&)$CXq};B@9<_c za~3f|#3E%v{G-lRxnd4Y@{CS!guPs7uf>ZwZhDEpBL8I7B^c2Ds0>-HiTe3bI%gs| zz~^`!N4e8DT&D>`>D;!N^#5)wv>y%u(#}@Bm^JjAghA-zMI|R}pNsZv{zT`WZR%f* zM-P;-xK_pksgr-%^lqs zf%I*K(HB^5J<*qk8A}S|7q&2!w-1BzM5?#g_3CLCW%eAmFR*r9$6DQ&ozN+fMvUe8 z3s_8boru*Jgk4vJywt6^7>q7;zF&E3)KJ@={te=fSOLH+`PclJ0}$=4hd{yM{EJxC zOW(%*N(R#`&73Y*) z{VCVU70pk5qPeVdP|9Fzzk~@L_ll(VL%j2QDt~-k3glkE|M;q@@ybxk5vxz=(kTk0 z9nR3PIbD53Qb-@t1i23mnsOMPe?dYg6Wge#W3Q6t>deH9;#2O!`}6g4-ZC~jm~sc1 z(|Gs07gk13KMErKUy020yhN5zMsV``ZE9m#g$X*w0uoDn-kdh$n-qJqbufX)g+^kr z!Nw$OPWI>{KzJ^K@NKiK58>>7qLli_xc(EyYyJSiGvQb+PMOlE*h#cgOF# z_f9EZSmQcce%abq&dMW*3`UU)A|i;#LKgIg0HBz>4H-*x#aE(ItjD0~)$g-X(JPXF zaRCHCkem;)*4~HRpE|onAk>(m#wE5#9rmapod%kW@3RtBEk<~qUf22VXTqk%{n*w5 zj>Y)bgzVCA+d$6R8J5io3~xgX%60|C_dY9{UYo{V?j!?0XJ*0=+2i#ki|({Dmo!u+ zb1L_uTRk}2HFNIMjkq3t=`7k+xbLWIuk6^J5{ue?=4V^ z&h;v%YbNP-7Yi#q!gE_*mNYz1QZzgs%INRbiBMePZcHr8`|F+YyB`LW?s~}lp=DU9 zwP?JGPM1I4wZ^V5nTjxk%xYsVjBe~@WV?};weFhJ;NaR&|Hy%KwfQoEZ{JQnKVkY^ zCFNcsK=>C+Bb}tF-pvCv3r`|#idI~itP-y#tYE{xkwR2CyJO^62TM`9*kYYtd((^> zi19D9BO$6Z0kn(J-A*X}{uZ3bnGi?Bi|~laYkAde=?oJV_nOIPVD}GK8+C^n)b@)OM$85gS!}03g%GqGv zUT5%|+zedt9~Ea68J%J6>c3>|9Q3~37;C0C|73)#Ow@o&hO3y2vu0(JJx&?8CRwo- zJ4(mv!wv5J#_OIHj>>&AvroTyvvVoH4#;-^j8P@*8X4k@yb@mSz4C-8rB;jO2Mu4Xcx?6FAn{tL_-h z^0^L!f?G1)B{mnogK4*gLtaizhFrTh19)@xCSRNxHEuX@L1}_fvD~3*>3TQ@=n0tC z2b53;Y+5t?op`4@#wl9z6X0+ZpKQVK@n4Hs5l!DjIyYgl{q~ChzkV-y58k8{zfLMK1=N-yK6G%m z3`}rLUEoEAY<0`tZN#)h^%0roLE;~>Bry#Rwq=i^jj2rPTN<`ahet-xEaRj0WX3CiXBf8C+|-D? z1wCLWe8v+01p4s`fn$lG2jLdR15ryd0e{fAyW4_3f-H2s{w)NwD;_Dne~7u2dv~0& z?*R?b@PLO9+#jTI@>!29fgN|w?ssziM%;Hqwo-C|`+q1z#%8j{xQg}1vay853z~0f zK`Yg*mu+Zw>#C!g>O?U@lu4_k*vraJWO9O;GuW=!f26BdDQ4P}*2gmgB zf!n?$nwM~0KmXh;B7cuy>2<$=ux|g)8dn!X*N$UcQAfn_-o`p(rYx=d46iZYM_pC8 zbC>UyCJW+3XG{n$VtA*Z@e;jw#P>qUiCN@!)macR!nFRl<9?T0KXZUbqJbg!8Vovm zmE|&jzt6|{&+2Q`!tubdsx$ehfyw2tW9w8ID{QUuyHtUMHkDLs)cq>m96CVWPC;cOkgO4sJ#E`Flx@YxN5zZ>! zQYKJmiORBO^Y0JOD-Qz+LZ(hmnv z+R=_mU*M~Gs&2_^sTe2>=eABS4JrJ7x*~E zDe8zfB%;|bi~>`)uh(4|S_bfRk&yiUN-RmmdCDfwG?r%fyfB>rb7U|SAhR{ zZptHJZ;6bBrhzy?ZYY-2&Ij|a;#Yw=I;V zRbLogmzOlGph(00O+_L%h3iq}0;|cPMf5_7Ik3N=jbJ5>=hp2cuPQMJ6~^-pMU#FMh`zHoYO~Exlv~4PFf^ zoJ|3X9z5L7yxf>PqQY_>qC>pPEjeL(QPJNoUGuB_Tv?T!6DT?-z2Wlp5bf5mpaDrA zyaUM6Oo?MpyzT>yc4^tC7vo2WdKu~fNRh4xWFVE}|6$+2g?ZtMK%ipOq?Jpb*^LRpU2I>XMds<2h5tDXFocjEtoIJ2g9U_FY@-_3j zf8w6r=zykk%QL;4s*pJg4-YsrmDI*i&KnffIk`@@TOaMI#8`wx=egT)lsUpnmjWui z(;~lG7E}EZ@bwx@JQN%|#n92Jw_(9CZ1xW}{gfI2VOq zUo;eH``1$;Q!qW?5c`f1_3K))?IApi`ul0t<(=fGuud;GBQ4U&!OSJjTbksVl%-N0lGO-N(6XkrTH-@XE zXN4b#cEzpA5Z?O%R?&zpb0qC%x-iRVwJ0rcIxk+~<3-(*P%xas6(}sbM##w&+Ggv# z)M73mu$FN}G99&A%JC=i=6p%|c(K_RAU_utEAVY;gJ`nU#9 z#852AW6wAA@cDSDZkrQ-d_&B0#7rUG5g&xbW|Znu?PddOd>Jsi@7QSo)=i9VC zd76+4y`~5ZCm~z?`rrY^h5AxL93jbM+l>_ zcv(@RA*27J0AFJG7~$AmZ4e=+5n<~gd;i@LL%C(&3D$P>#23IVdT|bS_#3BsmtZQj z7Xr0vJ9Lz#&I4|yvxK?frOd@}B8b+8iKeqoiE1TuX!k?~Vh_0Lkgf|rlXy5}RztzzeBN&@eZ8ZG#wdk& za;{*fg{Fm{81@%!sK5pF2SVn8Ns|-X=qOtC0r&Yss~>g4Xr5!iJbyg?FCA^pNZvQdg( z7#0I`s+3AbY4691bky-JvFY_SRC3r=N_L8rXP9F(=YGf&i@l)BD2Df#ob~+H7dl{W zN=?WS>yRY&_@+>jY#_#)$jLzjro8=C%EWYEZ(%b*?SGZq>Z_2?H4*3$UAFg^JU5p5 z50-cs7U-fShh_z_Xo5rQRdzO;0~T`q1ei9gy{qJ-QXL{<4=?>iP{RBRKou~QYy|cm zZH*>LmP(wJ`%((~5~OduFH~2AIR{C2wwU&Iqo-8e?iDXwG~13JMkjzfOq}~&y|TTc zEl@Uo#OGO;H5Me@<@6B>=@Mt*bZftvc-@Ruulhd;GqN*SE~+>W0~M2wX@kI`ofwa* zH$>QJ-;YY20RUN0>(pQ@1_C9CTnUc z*RMg4oSx*ZG8J;gWR1purzkQ+^w=A|f~v*nCZ)Rd%It@QdspTj-F7%}s#rUGitHKr z5%R~P-JD1XWcKu8*HVngtw#3+D&Z;KCNC}jkvr4O-}yPckc~7r_nSXnQ})sF*d|D+ z=K5Wctz|K(GS4-}%r-QbmKhWqu1L9YAUhTH%<)5%9-2qB(+4Q~2O^$w}Dh&|DPJJg8 z>m>Lll!qvwU>?4=LJvSyA0QLPmur3!Ow9Smo}y2U6M_oy*s}$*gv|k{0#oX@@YkbF zw$9rQynd2Lo`1~q2}O`Q3eYjRj?ru{8bQb_iVROcV_xn6XzhZ-;MHMtxE=2kDYN(I zpI>883s}_NwqMXb4jQvbEsN#Mwn|SZpKgmZ*psq7t70fnV?mM&GAUMRsLo~9bW9Dh zsrQMo^!k)M(6UW~;rBbge|E}{Zh5q?iaVBG&ehK)>R5JefoHNoq(hUpVR<+Bk5wp7xPpN)F z@#Qt-vjlR+&gODxb6+VQjg)Sh@HusJ+@PC$oNM5^iq110QRFe%sHr|jDCeDi9wDDK zhlTB^lDFB2MT;+$o%+sO0LffW4vIRINW^$KXbGc{_hp0aLXUQ8;+^lHrB5U}3-G?1SprB@-wVoIY-3oUvig#9O2&sysWCm8-purOv&SrEFqww<0ad zQ$3@ho`3KvldYXChqyMh*TQ4S+?j)5X!kjsdjFgIPQ?zNQy05>yEWQCSQAzD!Q_T=L0r*&jmyeP*OgbdI9^~iFuuK#`^R8dN{{mpkBij0O@%704EOiN-OQ6j8 zDe20vQ9x?#oX3y(g4s%ZP0BCQ;a}n3?UXit&iGYFdByP-*^GKw=5@43{-2S5*ZcbQ)>nl!$h^76nPefA;{dAhdxll0(le@mYLLkn-h z7ul+hbx`q${Na%cnQH0Pxx2%j_007?LfH>#o|ImV_BROTzrC}FMY|pH8#?(2c>tIT zq~hMT^TELd>s<$T!~3M8DD9au$+*WSG_hp{eP<}oaRM)d{)70!KEb$aKOKzdUn8*9 zc^?|2sN)iUO$KrreN^?kd#}W#JtEDD2tGz0jE{ayH$r(Ce}CSj6LHKQb8N8Qf5A*~ zIjaZaoS!nk3OuCxUovRiA6NS|6KbSD#~546x1E?M6CTxTsk|fG$ORKi2_8P`|D3C! zBKOuYA$C%);{Ps>&V1Q;^}ZGW0*UDfGt=fu@V%yl%IOORwI9TslOAVVR?m(8f6m>k z|5p(C|6#2H-~1n}Rn`9!&-(w)F8_b$5rx||cZ2hF?=y@uKlXs{|0N9v4;Z6R1Q@be z*pvjKiigZCEk&%H3~o8RcE3B0Z2jK`;{RFaUu2W@eb0N4#osPlHHKpS|G}!S7hTrg z{Y&`Ef8VF8pGD8v`TkF8E2yhm&v1V5R#rIz0$uO@Z6o=r#IarOeh6BGzLv)mZMb(U zIN2CVWpK!(ncv#crB(nhao%Yr(xgQuR6DRRTPW@yw9!*03^tHQkxG<#Jo4!kH zXX1Jnx1TPv6FrW)oRTF4{M1bk!6xX623CJA6yJ!kQIesh-288*W21QR7eGN|=M##K zr1tQ#@t5Vvq1$OZ*SVwph;roPZ}HdIp4tty8OH50JI`)fJolc(CcDquh)xcx6UXi+ zZ8CBzr3|UTyGdjdrLMFS5OvIq&EW>pnfo8kqmCQ_E!mKz2<}r3W#qOWbyEITd(2X~ z^UQ=E`aZ0O(O8N_>FWgQj+lHnwM)$$Tp&yBS;Fz{AvIeHB3$h!ZQFcwa}~hY)5Epp zg&rCm@^Zv{R_$tKL`6wUJ(E_Hj50}Kc`x~` zn~Af@vuV^{j}&CqZhq&p{L4{eJoqq#&oPD5I&8YX{3D`yeY=9imsa>*T5ELlaxY8k zN2AF3h3}v^OUA{O%x|W!62VM#AvJu(@0?8_Sb?nbTb>0>DJX+<)E{ag_oV?IrIjHU z!D)u6Y5(u9cjO{Zm9jrv%+oF@(2?>9e>LbN~k|)CY9UR_}#AVZV;Z=2Q z;fuJ0u^CnA6EV@z1=WSH%dU;*9Dj<%oSe{(p@04N0XI00MHE?%tB8xC9YKg-eA@ir z;aGach>F*sj7hoaG$M>=HFTTP>Axi^eZ>sheMgOX`PR>l9m^I6vWAdWuX4eghrmkj3xFZ|uk+fMgf-y6Wb`$YR$=XS|7C=!ag!bqo`$;voc zUCnz^4{9jen6pfI`BqJztI_C-xW94>XZ6DkixffoneX{|2Ys32W!D5e-N@Vd4CV6` zQlD?{@?SV=5aUV{l;^UBUn#A0%};z2SvXrTuJ-a_#EbMtrph)LSH&$XnC3qsm-=hsaN+U_MJ)$y<~OTQcfhzQj*I@ zCQw8_T&p0bn5!7puoYlG*5&X+`9Ou*aI78yjZA?$x;CdP=|y4e|P5#R!a`G%tX^epbzksDx~ zm?WU^j+S_{f~-r?@iw3NhR;F%j=OFSJbNELaJ0x9)mPQ7*nA96j&ZRK!wv(29G@U;oVq&+{ z)xT%*#H&5r-sZPzvSvEhUotQOX_hZP%`2|=x!e+|+vpDP>y;`oVNmZeiLXbop=)2Z1KCEOwc;2jU-^YF=s?2Bw36*F9wYDFoLa2HCA zmyNA>M}$?zz+;4A0bDb|n&c*2*a5&+&r!||*U26&&k1#OCQL=2m z<*}tZAKeP$i|}^Qa@-B0FnNC9gaHUp2M+NdxrVYYn1p`1S^U?>Gk2r-V}iILCH?$G zwKNa|b8#$Zbz%%NSh_NoZEGSfyB1!u_f884-`CoItR&Y*EY4M)P{ie%IR%F4HK(LA z&j+*Vw6%IOP@MS~A8zz3_mbtABMTo9w@sX-pq`g3`;?N!?3&^h5VO-=a`H&=uSJg} zlzcH#d7Nd8yeZVT7N^aL)YH9IM>wa7!dIeTFy^q`gba5X3-WYaW`jOL-8hs{@0?cO z^5}p+_7b2(l3ssRAyV6)bOh&=GVq_!aJ5$1*~#%)u;+dCU<}iQeQ*CE9c4eUqekwa(oZS-h!nTxupBy#1(RJJWujQeS6+G zzmmJ0W}LeF>3!l|#v=Vt;AFfy>9E>>Z{WWk-=@;->P3M4Km zUh$5q5?ltxh-TZv8&R}2g(kzc3?feRbR%=~*n0)+H|7Y7XE{|QrKMrnse#NNaFOn4 zTgI^rTg%?DjCU4Shcu}$S86)uXbWVLwp+5XgQ*?1T&sSUsC$@`0<9n*?k!?OD#gNW zcei5e%Dar5Y;fFg+64{DQa9+drVc&x`sHujCUY)9l?`+-?Ufl+sxe%Kd5&>rj)4rKurXFF;m66j5JFIeK<^o&7Jo-7Oe19rLhdB-5Wg%_Eey` z=kzJM94g=z_HF@_Hmu*y6r9D1M3W6h2LEcyKXCG{{bj$R3j7009@&VV&h*1X;ZCaS{nUi^+-F=tOJd?@%wC{bsisX+y3$v&Fd;qIJ*i)i{@e{EA zQ0LuXg~%v>)@NAeKQIzcS4&8g#kZj7zbhUrxIH3PtjAQ0EMG z71+xSuD*4BK(1YAJd44IOn85vI#THX{#b@}aBc1EB*+}rLM#>;ZoW|-MQC+SSNW)D z)N=n88haY1T(Zn{WIq_5fu?C8lr=21!+xS2l{ro~16mT#ALSfk6o%B%ZE)lxbeke9 z#)lN~dOFZaI5XI;?gJQ9iw(Jqn4;WscH|uPFbb3;oEyTSL1WLGs%_nm{EA+2{SIbd z99vtbpPd+U2C|cYzyOih2LpaWW`SAx6g+$AHWxoe0U#eyn_acEc0me2o*JE z)|l$N73{{$V8u;EN@>bhk$UTbdn!>!gmO?sm<1^Kad==TVjK;tree6EvM80A6yE0#YLv*JFoQ9Ez`i%{CM%QkHtgr zUj%*aE;ethq&gRqBjyQOw$J45dX%4v7OZSo!lKx!7Drr{kF1KHp|u8*m*Oxc-M1bM{BedUJa4flkk0>b;P(dtNBsMAoQo** zFZOKxS8R~0yr1tg2sAGg8NFP2KqeLuiyp78MK2Q$i+7O5fmCDLy|tXR9i&LYWVLo7A#+Z^vese7$^D=iyghHcEP{Li#GaaO-beJ z?8#9Cy?Ve}+s((ZX0%>rUZjmAP9i#=Znfjy2{LNtfZ!m!Nv-OU~Qg( zCHVXM;V*~o8KYtQ>_fj9X53r0G)bioDhE_fH9X6g-r{e>qozbeoQ4v`7;tP>oj92MC?DAP|9WR((cE~}b2a;1SlDo?E@O>PUx+*DOfC*F@5 z?pT4hamIDms9vvq!lya3F~}7VtL`uf8I;4ayv5jZNMOt(;DjzIu)g@ob_lbHuU~Z6 zmc055nA?+G#%oR=H3>;1I~#vDYL2ew8k;RF9K4>cBoeeh)I1Q?-kN!xksM0VU#k8t zRAFrbyOx#NO$7g}L$>|dTJtoYHV~?u0g&tH7OiPl8|vYe+k)ajhiOeoSbTz1Ga)20mG}@>R}?QSH6& zx3O*uuG?cQ*=;x>xO+as$ZU@-_(5UI2dZIQj2BfvbG4btQp7d7AIb=I!7h*Y18;#& zwjDYk185gvUWQA6A5#)0>a1Wx*1Ah1c2Lv^*5!^~PQ8T#gr(^+>1M$`k*~8NQi@Io zCkjOBQhlRHbMYas{E4v4{t463qfcxZ2#C$nwtU9TkAVK?Q^jl)-7`At)r>?jTd9<- z&24eFw6DNVIM$c0a#+I2AQLwTnaP6m&@Y+^hx)O)oA-3$QJrrdQDKjtVaDH0&|IJ5 zm`{SmFm{rHhe(^O7+EptX|3pS^(~odTfrDWqgOSz&)!?aOUuR>7QiOw(p~(P0Wb1} zOpfbi%Od~&5DXP!H#0SlDxGn{t-lrGIuiN@gl#@)*5WDhFa97%dpdpGu}#-sT%I( z63}S7TyroaetMk$(Q$E5A_&FC`QtPW!+BR{7Tk8;v5z;0^vO}UBb=SpcQl{T$fGb# zRUaQ{bFQzT&)M&DFUc~z`7@bVv?rv@#ezzBdgUhapB$2uy`X&l$A)I3j?{%$@Plnn zQw3jWa&W*aXzrS|2u=ke=xkW<`rzF9Q7a*e%C4Og(*J0FmSFqkV6~Poeea zN_&!*@9nv;;fZ9;3hoHW%gNDx`izGDope{dfm87u8iEfv-u8g(Wmc1wluv>bIel)% z);wT+(fuyQT3y>PP_Ph>ExMM?ac>_VmJg=3(bwno%}r^;)^Oj9QnSJ$2a_9bO(v~j zZKa6O7V$Bka^{(R^8E@I(YA{BsPA|=JnzKlwDiAJNNm%{kJ7tsS6p)qJ|%&nq z3QnmC4~eW!M-X8yyzVZ|HHd$8P)|!zODk+=D0!aC>k@al>bi&iTlRJ@6)H!dtY1s; z^Vw5~S2k0It0Xa?7WEq3;5Y=lJrIm2Rtink=)DVt)8cVT+%w}?DUcK}HS%i*t|6-nsx#jj3? z-=N>6#j>_gzW|l$jW9GX99qljYB=2JAjruzMJj4DB&=Xy9dkc&yebn*b#o&{=OY-o zL}CkoKK^2C%Br=PCqCXe<@@}qIk++L!8MV9*yFTRnYgwY2siKIN#Q^}ry>iM_6fRL z@4#@VZNi-7CF+f2Vd6<=q7gUUYYX5<=7ebN>}UC@inWh-w{EX(ktN7V9_@mj>m;$n`W{=)rgL~CCr`{>=06FFqfFK=Z5AJ$1G zCYQr`>dkCv#1=D-^@JkoJuF^(#Q@;be#r(*^H#cGZy+_u!5Sl~ zNhmpy;7GEbZWSw*c)V~hX{nT8oL7Pi%h-p}xhXVFEgagPM4D--5Y-(6>dRiyb@lr( zRZObaaz-HTdw=fv{U~2;5>s}z- z(hl`QczNeFP&3r`-<|DzheMQ^OSG&X-QKk9$;5oNLih+T$5a#%xwm#&Qc@oQ4dIf9 z))X7i0}eFvrn6zx5iYTc zMdMUfpv!rm1(ST5S6)D!_x(4#7vcXMnNNO2_Xfg3eHN@GePXggAc@LM&J5SDYDkt# zI7*!5$~p>Ze78C)JQQpL*9!43m$*Em0HjIXrI=NmEGNbW z0iBms`;xvEbKh=R z3RJH4WhDhlKDtPfEw8=`NNup2_(geHgEIeKbwFLc!duE~uv%%7t+DIxD|Wi}_)EP& zL*80{t|s&oYmgURTcPh*=}IEG9)A7L_Ufy$O3i*vOi!$_THTsoZk^Ej%P>|V%Dpzc zZ;d|^m9&ljyO~)w0@TxIkE?T7JSg_oCpl;dBq5+e8Hh_UVG7^S^7UmsKVgsTrowVj zadT4mfFeb+XY!!IJ_O2~Zr&NDI^A73K;HYr9ARI+15T+vbV~fH02l%T^@ygWx7CDa z(u6&t6pFiw;9=r9z{&XGbh^xlrO~+8M$1wlYcVT0DrAlnsyWs(vK+WnPd|mo_EOMy zM|q6)FxJzUdL$Ev+Bo)$kNPAGTQ8p+UX{;9Pl)?NHFc4+lvgtT6$;@NpA6_nDOzGl zu8&IWHWX{k9NNq~WxgJR1y)6XhV)&9h=N`ca3*ggCK6ftUi$cq9SfC#hPpDjB^LiA zViDat*B+v6;7x1&e^9| zFh?{tAp$A$p~+~Ud*=rwp&?n{W!1(?8YPjzr*)|iF?jWl{ClhtIW7akdyQaX-SPLOzAp2s1Ji&zH z%`(}9yI|VPQtke zkylkRk}5OrxzG3Ez*g}nR)(K z^SD#GULm>suEqYHT?zsoDXO3e=W#y)YsE0OHc1L~KKxHP+A_8M=KAWSfIO;GY4rRU z1&Pq;W~htWn}`hl5jeC*)LJThv#|>=(!0na7G*gEjyBGwXEa&)!#>by^z*6?mI z8!#GDUji^Y8)7zK{`ocOBAEoHWiAGxvpsxT``84K`~?0fA=-6?T!umeCZC|`m-^|(5dd2~GpIjd@DnMHZJdOgTbLW}vDc2fq)uy$r zKWoCVEGJ{2YM$TMo4I_6nqT)j`?hkf3Gdd}kgD3pJ>fG;xk%Hkz;{Q!M!m(~vFVF$ zY);n0loj{vvBzbJTB$0<9hyJ)Jl{jO$m`x@WltBg$C|;n|9j!Y2iTg>?e@vx)F9*Qz6IT6Uj5!+!P1>zF{xiNMAxp^SNB0Z=7u}()C-8vCoYaA(CdMNPx|bHfDR0iGhn23N5n)nsoz(?%S8ajXzF1 z>mJ=yB>))R?Sc;5GvZB!qdc_)Yi8qBbS|6UHAzLB$3cjZrE*0$6jyWZ0h9Cc9e7&h zQ{D8}IKbcOE(2w8|Mj$xYQn~Q9!#nu)XRPm&kzrr(~-qVvljzv6Sij>%z!%8{a8ps zS%YuSFO71Whu;kL>CZeR01UlhMK>(lxIDM9D5Q=r8|-YQAzL!oA}Gry9W*T0&-e)$ z<(;l29+28MA~_kf;HHM`N;G}g1gD-It=K0BH=2zuJgPX%}d0G z-G|{=_aEe6lJvx9E5NvP`t^EqIxFA6{VoSK6tMd__0qzcchFBGxB2m8-$)LBPb&>z zelHZWtIMjMGxHn%NxRx{T1kpV;-er}4j{<-yl$AAT)Oy2@x6e6(hIbA`#f8-;aF-C zc)5hDCHJSFodE=}5KeSE!|ERtiur-vupCo-pE0%j@Ekm~&&_yQ`Z6+F?F)g)_jrJ; zc)8UVg&q-@={mW);Kl4}jJwPskA|p|8EuV4dLMpkB*d$-F4bwY=wYg+D=y&-)PIvf zbjUYW-lsXkKsZ`a_(g-x^rtI}n<*Uxr>m1b6u0uQeN73RCUZExbY=DWub(amKYi+J zJSO~EE|6NV;LN7)y$inEm_sTTjk$(&+@*E@bAgM65@Lc<^N6y7Uf(Aj7%>}OK~w!A zzPdzRs!}c^Zo`;#ut9VF3Q6^aR}li~rIZowi(0LUR!f8^daftX|2Hl5z;;^lcy}Bq zBg~QLMbV+`*wKH!v60o+b-?BH&b`L>lxF?G5BU~XW%%omD(~CpvVZECi1Rj^ps8}Q zJ9skdM5e`j36|yVZ$_nomrRA_Oycvb8x-wr)7)nzoJPj=tF^HQhlRMa;XK-)5kOv zT8IfDBEpqE=lvE^6A?G2&G|^dAniell0jv$=jEx=RQea<(aJaKxfTq051~s+WDeA- zSB1&OV0_uF}9raH?{v2Lit_z!QSKK77hZ zXEFXUl9B|J@**|Te-4(WO)R`;rH*L%56fp&&jCM6&{zB;+Bv;Sze40)UYorN*T!zR zJ;yf6Eu3JZKgzx#cb*Xzi-JxyYY^-iijNi{@i@AHLtp#AH=HW_lV4Vu^1a;s+G+#8 z`yf4=*pXNkm)cyTTfOogcgMg)_=xqvXtH!0)WF|f@U8K6K8waS6(v=?w94c%fO~`g z@qHv8a6Xr{8}BV7yUq+a^7CU05UHO>T`t zU|?^!2cGT;v6GD%6HUnDCn`93>bbS=@zjmHNGdi#xPi?30QRy66lwj)rwt7{{)vee zZ?6kJ{?JcwaS54*Wcf>bo_kAniT6U&&D`S}aa7bOH?PVsYjnB`pc>y>v_~au>!F)5 zN57yk%!Nah3gtX`*x+Z@MQQk1@|^?K9(Y3Oh$}w+0B^cT&us9+7W2kb)&9{@NSMZZ zILGh=Fpido3a|QmSs%J(wbHf$eE++(wPhildIMr8m`ml)c6}mDH$v->B;Q959xpty zB=8?a_y0A8L(SU1uJOFApQLnHg{}E(|J5^IeM(9fp1-u{^itAYuVl7$pQ+Ui@%N{` zJybJ%_QxVb{=U}o$b~Q-~3IbU5Trk>%{tRRZqCKobx@Ms^hdgUh~?wZ0#0R zk?GTd!=jur3l&?B9u;|#t>oC!1vr*dxEzrTxVbzEyw+8I{)wDPI-EpOu@?eE!7UgUS^ zERQ)ARp|S3o|?@kF3oB0|71;`V&xT7K@YredlDDJrxrP`m!YF=@gMu|K`O14R_p{ zEs|k>H~g*m#Z^DIM?6}xBB|6Uc-`dX+N(C~=h~Uqd1bPn_cq;64_*ib_qd;V;8G#j znUsFjYp>kO;JGsKOSbR6 z)5+_i!Eu?%onPEtU0YwM%$vW@jddrhs>mrr|NURrbFCEr=)CdAI*;mu9e?J|)PAn5 zw=||^_15K&m^KE#xxW4Is-n)fyA}!kHJrtJ%g{CG{;pM4m#;4j`yW~w(I~e6=B=Oe zvw}rGu00yjcqBV?=c!Xm>%R0)5ZDayqLUBApI-W7^Md#G zb(g=*w{lanzxA(a(kVONUw?!$-K}0SfBCp3|MmWFTcd6THuf<4AMO0&XgM{xXxSEN z-9E2XU#p)AwYUDf<+ANosVLXc|6HoTV%@9g)1?m1f`<<~ePyDIC(c{^ZNo{u2A@^? z<9_WI72HrcbIB3bN0lEHp4ZJg^uu$tLEJ-^nu$KE>OOO~IV}V(M*E+sadAyR#_IB> zbvkm(Z7#A*VzB z-#*8dqbd^@EtRl&9D%G?DcIXl!y!Dzt8<$Dzcq6X|4-X8`)tvt6Z%>Umu#7FX!)l_ zqFg}rKhC>#rh)Z|aJ4?N1UX#;$O1aT2DlOmtOO{~^?ZTLX0Y#oQXgfeWQ0K#Y0PUD zItx|~6gXN8ay3+c1)rCRHpCq;QA`r9`bM1XYF U9}D`&UY*&R{@hw@4e| Date: Tue, 17 Nov 2020 15:27:39 +0530 Subject: [PATCH 043/486] name-changed --- ...arantine-default.PNG => quarantine-default1.png} | Bin 1 file changed, 0 insertions(+), 0 deletions(-) rename windows/security/threat-protection/windows-firewall/images/{quarantine-default.PNG => quarantine-default1.png} (100%) diff --git a/windows/security/threat-protection/windows-firewall/images/quarantine-default.PNG b/windows/security/threat-protection/windows-firewall/images/quarantine-default1.png similarity index 100% rename from windows/security/threat-protection/windows-firewall/images/quarantine-default.PNG rename to windows/security/threat-protection/windows-firewall/images/quarantine-default1.png From 2a212f8430688d63d3d85159e1e20bc7ae901a8f Mon Sep 17 00:00:00 2001 From: Benny Shilpa Date: Tue, 17 Nov 2020 15:29:38 +0530 Subject: [PATCH 044/486] Update quarantine.md --- .../threat-protection/windows-firewall/quarantine.md | 6 +++--- 1 file changed, 3 insertions(+), 3 deletions(-) diff --git a/windows/security/threat-protection/windows-firewall/quarantine.md b/windows/security/threat-protection/windows-firewall/quarantine.md index ec93d0c0a9..3c2c94f178 100644 --- a/windows/security/threat-protection/windows-firewall/quarantine.md +++ b/windows/security/threat-protection/windows-firewall/quarantine.md @@ -1,5 +1,5 @@ --- -title: "Quarantine" +title: Quarantine Behavior description: Quarantine behavior is explained in detail. ms.author: v-bshilpa author: Benny-54 @@ -17,7 +17,7 @@ ms.topic: conceptual ms.date: 11/17/2020 --- -# Quarantine +# Quarantine Behavior One of the security challenges that network admins face is configuring a machine properly after a network change. @@ -197,7 +197,7 @@ Auditpol /set /category:"System" /SubCategory:"Filtering Platform Connection" /s Sample Drop Audit with `filterOrigin` as `Quarantine Default`. -![Quarantine Default](images/quarantine-default-audit.png) +![Quarantine Default](images/quarantine-default1.png) Once the drop’s filter origin has been identified as the Quarantine Default Inbound Block filter, the interface should be further investigated. To find the relevant interface, use the `InterfaceIndex` value from the `netEvent` or event audit in the following PowerShell command to generate more information about the interface: From 1644a95e3c6b4feabfef6fcd63f224464733fa06 Mon Sep 17 00:00:00 2001 From: Benny Shilpa Date: Tue, 17 Nov 2020 15:38:22 +0530 Subject: [PATCH 045/486] Create filter-origin-documentation.md --- .../filter-origin-documentation.md | 170 ++++++++++++++++++ 1 file changed, 170 insertions(+) create mode 100644 windows/security/threat-protection/windows-firewall/filter-origin-documentation.md diff --git a/windows/security/threat-protection/windows-firewall/filter-origin-documentation.md b/windows/security/threat-protection/windows-firewall/filter-origin-documentation.md new file mode 100644 index 0000000000..900e12673a --- /dev/null +++ b/windows/security/threat-protection/windows-firewall/filter-origin-documentation.md @@ -0,0 +1,170 @@ +--- +title: Filter Origin Documentation (Audit Log Improvements) +description: Filter Origin Documentation (Audit Log Improvements) +ms.reviewer: +ms.author: v-bshilpa +ms.prod: w10 +ms.sitesec: library +ms.pagetype: security +ms.localizationpriority: normal +author: Benny-54 +manager: dansimp +ms.collection: +- m365-security-compliance +- m365-initiative-windows-security +ms.topic: troubleshooting +--- + +# Filter Origin Documentation (Audit Log Improvements) + +Debugging packet drops has long been a pain point to Windows customers. In the past, customers had limited information about packet drops. + +Typically, when investigating packet drop events, a customer would use the field “Filter Run-Time ID“ from WFP Audits 5157 or 5152. + +[image] + +The filter ID uniquely identifies the filter that caused the packet drop. The filter ID can be searched in the WFP state dump output to trace back to the FW rule where the filter originated from. + +However, the filter ID is not a reliable source for tracing back to the filter or the rule, as the filter ID can change for many reasons despite the rule not changing at all. This makes the diagnosis process error-prone and difficult. + +For customers to debug packet drop events correctly and efficiently, they would need more context about the blocking filter such as its origin. + +The blocking filters can be categorized under these filter “origins”: + +1. Firewall Rules + +2. Firewall Default Block Filters + + a. AppContainer Loopback + + b. Boottime Default + + c. Quarantine Default + + d. Query User Default + + e. Stealth + + f. UWP Default + + g. WSH Default + + The next section describes improvements made to Audits 5157 and 5152 and how the above filter origins are used in these events. These improvements were added in Iron Release. + + ## Improved Firewall Audit + + There were two new fields added to the Audit 5157 and 5152 events: + + “Filter Origin” and “Interface Index”. + +The “Filter Origin” field will help identify the cause of the drop. Packet drops from FW are explicitly dropped by default block filters created by the Windows Firewall service or a FW rule which may be created by users, policies, services, apps, etc. + +“Filter Origin” will either specify the rule ID (a unique identifier of a FW rule) or the name of one of the default block filters. + +The “Interface Index” field will specify the network interface in which the packet was dropped. This field will be especially helpful if the “Filter Origin” is “Quarantine Default” as it will identify what interface was quarantined. + +To enable a specific audit event, please run the corresponding command in an administrator command prompt: + +|**Audit #**|**Enable Command**|**Link**| +|:-----|:-----|:-----| +|**5157**|`Auditpol /set /category:"System" /SubCategory:"Filtering Platform Connection" /success:enable /failure:enable`|[5157(F): The Windows Filtering Platform has blocked a connection.](https://docs.microsoft.com/windows/security/threat-protection/auditing/event-5157)| +|**5152**|`Auditpol /set /category:"System" /SubCategory:"Filtering Platform Connection" /success:enable /failure:enable`|[5152(F): The Windows Filtering Platform blocked a packet.](https://docs.microsoft.com/windows/security/threat-protection/auditing/event-5152)| + +## Example Flow of Debugging Packet Drops with Filter Origin + +Now that the audit surfaces “Filter Origin” and “Interface Index”, the network admin can determine the root cause of the network packet drop and the interface it happened on. + +[image] + +The next sections are divided by “Filter Origin” type. The filter origin value will either be a rule name or the name of one of the default block filters. If the filter origin is one of the default block filters, skip to the section, “Firewall Default Block Filters.” Otherwise, continue to the section “Firewall Rules”. + +## Firewall Rules + +Run the following PowerShell command to generate the rule information using “Filter Origin”. + +```Powershell +Get-NetFirewallRule -Name “” +Get-NetFirewallRule -Name " {A549B7CF-0542-4B67-93F9-EEBCDD584377} " +``` + +[image] + +After identifying the rule that caused the drop, the network admin can now modify/disable the rule to allow the traffic they want through command prompt or using the Windows Defender UI. The network admin can find the rule in the UI with the rule’s DisplayName. + +>[!NOTE] +> FW Rules from MDM store cannot be searched using the Windows Defender UI. Additionally, the above method will not work when the “Filter Origin” is one of the default block filters, as they do not correspond to any FW rules. + +## Firewall Default Block Filters + +**AppContainer Loopback** + +Network drop events from “AppContainer Loopback” block filter origin occur when localhost loopback is not enabled properly for the UWP app. + +To enable localhost loopback in a local debugging environment, see [Communicating with localhost](https://docs.microsoft.com/en-us/windows/iot-core/develop-your-app/loopback). + +To enable localhost loopback for a published app which requires loopback access to communicate with another UWP or packaged win32 app, see [uap4:LoopbackAccessRules](https://docs.microsoft.com/en-us/uwp/schemas/appxpackage/uapmanifestschema/element-uap4-loopbackaccessrules). + +**Boottime Default** + +Network drop events with the “Boottime Default” filter origin occur when the computer is booting up and the FW service is not yet running. Services will need to create a boottime allow filter to allow the traffic. It should be noted that it is not possible to add boottime filters through FW rules. + +**Quarantine Default** + +Network drops from the “Quarantine Default” block filter occur when the interface is temporarily quarantined by FW Service. The FW service quarantines an interface when it detects a change on the network, and based on several other factors, the FW service may put the interface in quarantine as a safeguard. When an interface is in quarantine, the Quarantine Default Block filter will block any new non-loopback inbound connections. + +Run the following PowerShell command to generate more information about the interface: + +```Powershell +Get-NetIPInterface –InterfaceIndex +Get-NetIPInterface –InterfaceIndex 5 +``` + +[image] + +To learn more about the quarantine feature, see [Quarantine Behavior](quarantine.md). + +>[!NOTE] +> Quarantine-related packet drops are often transient and signify nothing more than a network change on the interface. + +**Query User Default** + +Network packet drops from Query User Default block filters occur when there is no explicit rule created to allow an inbound connection for the packet. When an application binds to a socket but does not have a corresponding inbound rule to allow packets on that port, Windows generates a pop up for the user to allow or deny the app to receive packets on the available network categories. If the user clicks to deny the connection in this popup, subsequent inbound packets to the app will be dropped. To resolve the drops: + +1. Create an inbound FW rule to allow the packet for this application. This will allow the packet to bypass any Query User Default block filters. + +2. Delete any block Query User rules which may have been auto generated by the FW service. + +To generate a list of all the Query User block rules, you can run the following PowerShell command: + +```Powershell + Get-NetFirewallRule | Where {$_.Name -like "*Query User*"} +``` + +[image] + +The query user pop-up feature is enabled by default. + +To disable the query user pop-up, you can run the following in administrative command prompt: + +```Console + Netsh set allprofiles inboundusernotification disable +``` +Or in PowerShell: + +```Powershell +Set-NetFirewallProfile -NotifyOnListen False +``` + +**Stealth** + +Network drops from Stealth filters are typically made to prevent port scanning. +To disable Stealth-mode, see [Disable stealth mode in Windows](https://docs.microsoft.com/en-us/troubleshoot/windows-server/networking/disable-stealth-mode). + +**UWP Default** + +Network drops from UWP Default Inbound/Outbound block filters are often caused by the UWP app not being configured correctly (i.e. the UWP app is missing the correct capability tokens or loopback is not enabled) or the private range is configured incorrectly. For more information on how to debug drops caused by UWP default block filters, see [Troubleshooting UWP App Connectivity Issues](https://docs.microsoft.com/en-us/windows/security/threat-protection/windows-firewall/troubleshooting-uwp-firewall). + +**WSH Default** + +Network drops from WSH default filters indicate that there wasn’t an explicit Windows Service Hardening allow rule to allow network traffic for the protected service. The service owner will need to configure allow rules for the service if the block is not expected. + From a214d9d47220c1c38978dffbd992c2daf9634dd0 Mon Sep 17 00:00:00 2001 From: Benny Shilpa Date: Tue, 17 Nov 2020 15:56:44 +0530 Subject: [PATCH 046/486] Update TOC.md --- windows/security/threat-protection/windows-firewall/TOC.md | 3 ++- 1 file changed, 2 insertions(+), 1 deletion(-) diff --git a/windows/security/threat-protection/windows-firewall/TOC.md b/windows/security/threat-protection/windows-firewall/TOC.md index 3bf2022518..3135035738 100644 --- a/windows/security/threat-protection/windows-firewall/TOC.md +++ b/windows/security/threat-protection/windows-firewall/TOC.md @@ -165,7 +165,8 @@ ## [Troubleshooting]() ### [Troubleshooting UWP app connectivity issues in Windows Firewall](troubleshooting-uwp-firewall.md) -### [Quarantine](quarantine.md) +### [Filter Origin Documentation](windows/security/threat-protection/windows-firewall/filter-origin-documentation.md) +### [Quarantine Behavior](quarantine.md) From 5ba4f7e9c0e7108266401b2d8fc776c676771cf6 Mon Sep 17 00:00:00 2001 From: Benny Shilpa Date: Tue, 17 Nov 2020 16:03:00 +0530 Subject: [PATCH 047/486] Add files via upload --- .../windows-firewall/images/Eventaudit5157.PNG | Bin 0 -> 150077 bytes .../windows-firewall/images/Eventpro5157.PNG | Bin 0 -> 133616 bytes .../images/QuarantineDefaultblock filter.PNG | Bin 0 -> 51762 bytes .../images/QueryUserDefaultblockfilters.PNG | Bin 0 -> 186215 bytes .../windows-firewall/images/firewallrules.PNG | Bin 0 -> 127030 bytes 5 files changed, 0 insertions(+), 0 deletions(-) create mode 100644 windows/security/threat-protection/windows-firewall/images/Eventaudit5157.PNG create mode 100644 windows/security/threat-protection/windows-firewall/images/Eventpro5157.PNG create mode 100644 windows/security/threat-protection/windows-firewall/images/QuarantineDefaultblock filter.PNG create mode 100644 windows/security/threat-protection/windows-firewall/images/QueryUserDefaultblockfilters.PNG create mode 100644 windows/security/threat-protection/windows-firewall/images/firewallrules.PNG diff --git a/windows/security/threat-protection/windows-firewall/images/Eventaudit5157.PNG b/windows/security/threat-protection/windows-firewall/images/Eventaudit5157.PNG new file mode 100644 index 0000000000000000000000000000000000000000..a81af9fd83c1b649b6716143077f18de374bb02e GIT binary patch literal 150077 zcmZsCWmp_bw{;RC5G*)@26uN4!QI{6-8~7egWCX;;O?%$88kSWdezJYT$c*@O7@Pl@SH$h$v( zFWpq7KEJ3OC))dS@!CpMLG;Co8X)q6$(ujdNY2taZZBToQvLnClu@NTeevSCKt^0t z-P`am`^^`F{@W(-!F6SuoaY8}pBNG1hoxm3x?i}RQ@HO73Yg}Cen`XDUn7Nli1-wN z;nk#2+XgLf8@W8mcJrc;mV;rxAH`z!JIPA$TFG$R_OgsiKW;neGwW}BH7tn&rwL296*6h&=b9sj~#@reFJoNJE@~JE# zAj<45XMP6Fk`S3j&?vadXvee6{zU%X0)MYO`_?^-ICvOFJ3;SR{KBG1!v1FPHn6Vv z3Wu<5ACAsIR0@<>CyFe5pb5k=BHqKK|8~|etmJ?^d%JqT{^Q9C_ubRU%^~RH3`@$% z=YXA{*Lw&*u9O3KFN9{svtdB8nWiUb;NRh9KBIx#d_JQx2EJM$*X$Au)*-DRtLl{t zA5<{cb)tUW#Hb_$NYqnEe_Y7eZ2q{FSXjlKv2jqa z`VGNz>A!r8Sh>Kw?&{1qd+TKVL1UOIURHM4+|lQjJ`D2P7M)fg&bVf_#%sl|ovSPP zDq-hrIZ+6nFPzZr!wI$6xuF%LbheOu=eOr1?eJ~KL)AM5iBg?1P{f@t5aPxM| z6lFwv|GIj!SL^1y-Pbp!>kC+)E8{C5A)S8_?u+o6-wfn{wn%?fdz5WdW7jv5CHygN z6j7wpn6C}5(s<+U1%e|#_$3k=`Qixea$A^`m$=KVG7rd5Pr_$FyU;M;ZC>u0Ux*DGT$20jL9{s%~K=%K&<<| zDyOjKI}Ag(NcVq}W)y%{q_8XMYmS1{LG3dBCe5`UC(W&YR%E>vu5%GZXQ}0lTcX-{ ziQJ%`n-|+EW^tJD3;^MdnP})BJAAFoKtkr$BF4E-J)LthG}$X+fU4~b932jPN7?`g zqLg;N@% zcgt#{I!2P&CqwcvnDc0I@#1b+K$fNMAB(s|>so4lT>a$fs|I%%BiA!)SJ71h1SJro zk6m3cSyV#W3J|s1C7x(z`rH3E8KQY}Ba@X>7Mfp0>mcaS4G=(L< z1qJ7w-Pm^WD{9@OQH!)6fwjFZEH~QnF<9P=u8CWqTAXE=?WN%7SD2%c3Y~dbvMk9J zC_Okn+>;v_EMoXQMM@ZD%FsHzaFToThOjZo>wBuDAAf)n(O^18$55PIq5r`v!?q)r zZDQ+!S<*fyg`$Z_taRUD)>`7u_~L`nds3+DXk(CV`QP=aGl~VVE&h}>vO0>!>xOf@ z?N~DKtPXshSH@yt>P0yBB`f3J{FE!V1fj+s`DXX@hTp34)r}x=eN)3^;ppcBGW27%%9;Tm zrh6y8Q%qYG*-iyHt<8~wAvcC*yM#O`dVvBNL?vkw!y=}lh-UG%eTf)bA2WjeTXjN| z%UC!+==AYe2rPIx)0_;TT4F2ank!#~@34ALi7OIK28)-i;o&_e%}qk#wCU zAlkyiCyoX-;L^=EYV4YycdA9GDq%33%Cm$Ap+u#&GY>)%c!O>5FKSZ9Jk*&Y;wqya z%B7QvwO`$`ncq5i57wu7eZ1cnMm^d;IMacyw3Mfr9cK8rurKawLZyc1!&epX^jI4gw;mc5r=J&JcfTA$#C zt6Af!q%e>|VDmOXZJ8a3F$nZ5;04qAswjHyNTmQr4KJMU!)NQ~!$@C}XZKTtlQ_O5 zP2fv`wXGS(&CYwa?3YxeE!y_+9Q_lGtVNJb67Lv{?qWV!NYR*rR$)+{z8tg?JKF4h zD@>!yyx!Z0qjh(%NzuL@z5Ij2jm-Xj!eck{qu$~QQR?^?I93L0EuKxBrY)Mi#jIcS zg6h(z;F~^&vG31)bXl(Z&aDFNl77YQ8iW7`r;9a3uxDz)U1?FB!z^3(sgjlv_u=%P z-Fs}lpWS1BW)+CfmU~`AWIg8k=~AO^XL>C8&4%>xe5`jJdKHSNqY|JD+#dbrlCK$) z9TL^}Ne;keXS9KL()cUSi70O0qy2fwP4K)2#WJ8d>Af4{Ucli@#dFLX;Fzh>vLf_~ z{iIVUNg|Y+XwQXmu4*#{mSbutigZ7GRo6t9l{};Fx}H7o!lALX1On^Z4@J&+hP+Q@ z(isgK;B=*Oh?%DTRwd98eqr&+949)5UwRvL10oaEH>uLwtpJAaEh(ipIn#|arl>k8 zQ1MVlqdx$yj{Rz&Go{tF z%c7l{{okTdx+8Q#+CRsycg~@e#D|QFW2KqSu2X75GKfi{I_)3VhfnIKIL{3h?|_ti zJehY}(NK@#(CREv-fQkeVSW-XotFo~w&Vf(&Tp?B%(uj4XH+8DDwB>O_B7@C zE1@UX6RgpjQ;LRB%MH-)r^r`k2ag= z5wc9oxyJx*z0977ad|4X+|1?k9r$GQK`|lkm&2hBf9Ly=@}&!;6XvDv%;g4g%hWSC zLLKj}z2!2f?#6wLx-o^w*vvry^}w>`S{Vyfr2`V@Wen%uScSiB>hMQg$J$H43Dvl( z%)Gte)T(tHFc5_I=(V$1(Sf(yBIOi|{B(s5jI#R^EyArwjwCGWrCWY7TRvU9X-pCq zpRk{L)la1ROoG00$;*+(Y$4SVe%Fqh>vvr^{{h+0&^KJe=gr~B>bOYE(LfjG6X>ApfrXW`s3#j~XGi$aC0h)i6MjpiBid+*`R@vmop!Y_ z4q854gr!(DF;W9#5O7{Cmc3g#~&?~@e?_85t5)yM-T4Wt6Q&yWg?ktxp6c1osZ8F z$<=n4Uu#l=HC!lTcjXk%VTVzf;=p=rRsVzZw(s#3u>k!*M?rxcsQ8S<4hL;nCUF(B zxl;h8j@sRCgIi3efa=WB^1Uptt37#Qk<6FN(=xFvR+m`7^EF4TxDu`Nx^v%nlDhEu z@vaoq$Q_QYT83uh=IB-?LY;;ZoxU(&hX6NQ6SLGAU+{FHys`7ivAbM_>2h7r+7XW@ z7Vq`-!{*_d{NDV~Adu-hYy4-ROh80MRl)LdY~;LA@1B{PjE7G#?119Fy{y^$jy5b` zYNI;ibIiZdR}beysblwG(ikvw;8v9wETE%=3tE_HiKaJ#XH!^d9au0S0Q zH4>q$qWD^0(h*svJs{8(5QTS`)Nuiv^x&`(VDiQxn0YhC zCT~xpDT8uFC!Dc5ik?y^nw2Oy$~m`^%+(M?U#%&aXcZd=mj>%q+@v ze$9Ou`12O-T z7DpWIXFZHps5f*xMx3EF6yY47u2A(xgy-5jvue|i-AU8sbj?xyM0AFud?a`al`M_@ zg-KU0Um!mq?70o}KkQzZ7cUL;&@_GsICj4))H}uYl@^9Gj*C2FD@F+pN%@Rz-Y2I2 zqIt7e3gzF>)Ev|w-R%z8B_{0KIXSGrWl*6L0B0rOHFiW@)e2bB6kP9i7knFGIC1qlVuA(O6WCgpb#=?+g3d!)aMHJ|w)@NOk* z;&_p_Re?}4Zd&0;lO@3EmQPC_Fj}4Umb;T3>_G^NY%{0tXt(p(;8EgOyiAVvo>tog~x3RN;B1Di#yTPp7<@~D+Q5MRvvdhyrP>__ zn3dV7pFSVF#qv5cep$#+iB`Kox ziC9ikGGR^0G7*yIjK109`V!bu(ig6?DKF$Mj{bIxH%|?+&wwz9l!VW>ZeJL?^fNPC z0K(wdZ~K&JODm6-o7gsKcj~N&A4p9TD?`rgD#YN0J-JwE$t^BETWMt?h1OlKqCbOb z_Vxt4cAgojFk*QFNTN+|%MqJBI()p)pl_ee&+#Ga80{QSC%d0D$hCz)X8hxq?HEcN zNk8} zz7WW9L;3b72QA~LJ6MEj>mWm8AL-adpRUZLft>5T6}D6ppCSe7ppg8e!s^oR-w?oo zqfgt^o&{It&WSj7-V}sQ*s3aqpUo{X+1Az~EXWaO*+II}Sd-ZGW;~b1cNx?8JevFd z<9qVScLjKd>&7lvTN=Uys?=;2i`s?qfc^yz#kIaoN=zymIW?qypNdVcIO9c&UI3qJ z$Rni5tviHUm8ooDmA*%qIkY+$Cpl$SMMp<$|ED^y`e%vDK<;w7!DFvUFK^trI9GpC z!Lex{$R-;2XGEtBC2w1*#GA4=dUlaF?wt{e3>ZQKtdv?~cPXyB@e#X9Pvdz_2E86U zD??o99RuZWV8u+@-QzeKhm0f;KAx=62#j6;zp^6HjJ^5}zv~b>Ss#PzS-wBk9Wi45 zwAZQifD*Cn2?IaldB;=aOblhbsU7_eaGB#k@8Bz3UV0(PZHQP_SeLi^?M=O`Zk z;hdT@cG}^PF^X>kY%wKiPcf?xw}Hp^(I~k=?V)xwmXMD{Bws(sSgIxyol5lal1F-G zMxOfZ?jjoa;J=#by~Kczc{yq@*o+5c9?n!E1bCoW}L*YX+GiJc<(q_+3U(tiBK zq{{~Y30ZK`5IVqzex8w%7D0U~9-}W);6yv+>xB2rKmz&!-4>;q8w#6==O`vFqPq@DP%v{(_L?ae+WeM&_xOA4 z>mCaGfvK7aB1La^UJMiAMF%K~z=0=8^SLWES65F}l~AxzdrfTn`>M^oM9&Da#mY(q zEF)O1v^?VPYM;|)jf_B-f*W!F%1Q&|VJE8G*dXwAN3EVe2A4Ib4b?1mg|19^#Idm0 z9R?^%Uf)+R6y&K^Ul;qeg|4rkH;k`X=R^AHaR3($&)ExJxHid{OuOXjTuaJ(aW<#dcb;o+=0NQ(=h= zB=^P`SBi<4Xs5@62SY|TXt1|n(W+$Yb*5n;{SQRWAS?|%k>8;^1iL}UOiKZ)EG@RS zO6@j?vJQjuN@)z74;l~;lxu)(KqV#z!{aGzX!*FEiAT~F5MN#L!!6eiwN zF}h+Is-Ee40NjzUwk<+_zc;=c0kFUkyh#hlwQyF&Q}#{0kGgwsP}ml9-0E#9Gsr|di5CmOoU4GPfdr|K#XMM`S8upc<=kxxr zIb{V27q)&MaE++~z-OytNCw!wr`+^0x$Z2_wa>NIwKo=dW%i5h8K;`cw0v1>XA{%60-1WwI&h4uPjmgQE@VIB5RRq4qUoN}Z2PZsyAtyYUj zz(}f+Rpqylw8R*&(WgXJ*>V|kD;})L*3<&IXj)Hmj`FUZOgEx=Vtx?!c&K|p z2i8bcsl1a{e-F`#cQhQc0uyci?#7I2>Y8}Kk(u!wWGi>#g#dImn>|mVJzSgpD209} zKe7bNbJjHupa(-#l}b)i5&S%20A(vg@mW@V22C!{Nj0MmOmP16@N! zgEB;FDMp)?SWZq7%I8lQp#n`c0jq)Ba$P5xv8p`D#e^|4C(I1$q?$az#e)y&OvLq^ z$!eM!QfkrJhgji>DSH+>pp)q4GP7N}j)++IsPuzT<;CGco4gixbh~!8&8x#fBq$PZ z-~2J!EHzTTCsqP!V8o-}Io&AB?_Z@J<<>R@vJG1H{4y$zs_5+l2Vm^FpjBbda-AMs zxL84in#WJpzO2bc%^Ib?=7N+vSsOg4)ndMZLg{i0A)C5GepO_|c_|_FOeOREHzkL( zz~4X_vRR#Ihi8AwpwvNOzJbHrO|evsWS61!5AaoSg{N0J&1cNQqiIicG>B5GOjUn( z9+tB=CV1)yQ7CAY);ysMMjKU4t3#J*M#GmPk2vVew7EaVg6Vd!C8adhtF>y`Hq^)E zRNwi_Bypy?ISD3&)ZPkuZlvh@%%k|GwQF}}$5mHb$a;$TmVkbXC3 zoQ~2e25|GGlFNDIx)v4!a)mEe%jt*q8;*RXayq?Hs@%yOsoL6J?UFqQc)4!x8eSlx zFTeP4$PJP>>f8#jam=wC zfK*&6%MP}^n-1MgR~U{r8$_wwJRj=I2Ibvj`A8?QRY!!@uU({uIex{W8gKZtOB8{Bx07@(=qII*9 z+U}HV7>f4$$B^$Rb8A>P{i{`ErXzBK-dhFw0p~`y`OKk{X$C)8?daNseY2ju&J~v2 zC!$A}er2zTaY)M@PxRTbY-Q~+Ypw+HX&D7Dr5WB+I}{o8(^=(6D}l6Lhs*7M6viWc zgTU68?_M+?|9-B+1zjZIfkG3H6MqCIweLV~eAK&%l@z%rl32XCauJR9(pHw7iw@Me zu^vev5TE0cAWk6WQ|!>&OH4jrV8EzogSUl#>u9e93`3$JAEwIvC_0?;bHU_gYWsy= zpeKyQ$2>aRIxUNmSK{fO1K<6wMc+ft$#d09NTl;hmbv`_aCOBSndHH1_mL|8wI4?T+%b&jtHin z0FC>ov|QFCI(WS&JoMdWHJ025PrL&xsEEgNvb=|p>JPIZV8@oMk>@j#^JsaLxJXKQ z>?oN#5CeCVbDBYC=v{R`eJ7@eJx^Oi)EIS>Qa0kU)a_OthfZS?W>AlHn5E<-k0qg8 z;`r8jr%E5+Zaagf1^KICfWqMymzbuBtu2w2?une6^bTTb)AcR$ZqkW(NYY-a`pA9I z9n$>s=8k?_btb>tYByvOVnoUsy+nh)Ru&IJ}NF*n1o}A17hMO?HRh37DO+{QXd@UZ$oV_G~{e97)l&$HEdF`6={8AWn zGoLQW1dE2vr8y1#>A@|~zxPtGTCA^uB@CtDcRBeJ?0|OJH-6F6qcq>Y@ULG7_3e-- zFNFf*wsCb~Gh$M+P8baPFH6^KkyJXql1CIZB;Yn>wFua*Wbh6hmNF+%_ zzxDKN9BhhuSz0nvPUTrs-Dlvdv@q}F5YRROdfW}77!#onE3P*q2tPd)*re8Lixy>oI%VNFWRzKMT{TDxlQTeDajJ^#cK57;s=kD!wCg@Q( zbhPD2O}AHUlg@k*2nMBQdX|%0W?j7?fgYD=_EQuH_8!pAu@sTfccz zjWVbXkrce`kC##qx@&87`zo=)E*h-gX?1~AX>1>d@FNU(w z<(1TEoT&-dW02s9g@`rEz*-9oG>C~3_TS>bLsp~PI=*gmlN#z#vSBdi#l}gTx$sOa zkWs@7#D{;D%cIB|!1((d)$lQxG4|+ntYCNM%3jhiy#V6+8LtQtQxvd{{8X22{*e&% zA-OA&X;P8cKKaoBmW!EN)mi~8mC6c}D&@GENIsr~e>SI|qs1KBr$w!Hk3>Z1v(sIsg} z^vu<OjjPp2h7e-$~SN}wqA{ICtt-^+IkFg7XiRGKa1{6o8`{VemgpR zFEP05$lC3bh`zyk_V6xf*M?RFPhEL9GA5iE+=|^veflXC za?KIwHEBy^mEEs#4HoSRdrPp-UkwP5LKgU|QIINrhaD7Jom8VUwvZkt6dzXE|2{wq z7OUk|Vv&+3g@dHF7S4jNHR8HY!55nA#WVpq8AmQ}>zO%7rW_iYZr(m{Zv62OrypOD zOH{LkXse9#GWU$5(W6ksW>yJFeLjmg+iCZ+vqtJ0P+m@E56*+n(mjgq4QtVb9NFXn z4%Fp!3ivDbN=ocm=rCvfsC7sLG3K02UX4Njv8);9D!_w{-fn>~s_65~35Ac>77jg^ zy5#&+T`Qf~7S`t;fwV4l0*#$s*d|by0JR}l7H=`InF-~&_)1e{mK`>^MH))4WKm+j zTUtghMWycJwO!@PSIA5sch)`mIN1Cn->ogmsc)}dt05tTID2Q(L!%!c_f-lC^$3n? z&6#3V*us0iThC>#Hh-}Fd7?m|l;rK;Ktdmx5mCyMvym!U>B&grukA{1RF~!;&&3~8 z0E}7EhGlC8XyILC?X9x`rTiJvtXK*Z%3R8rVs*g1J)sY&?O@aQnXo{Ks2_&(VTcfo ztv$*(q#=f}pb~z*BC0HUueBQcD7jVeo)dzU^}rQ~yl+>;f&xx(|~m&k|XdK!g6V)|{# zi%E{YOJR>aqXaGi$P;<9ODGr4$mf>@jaJn8{^lZDZ5jJY?{fSp5z1Wt%=fJ(8Jt^`i1rJHWUX7Z>ZR z{~q-HbpfaLK={_>rC%$4Fk)*#U%NvK2AFM+_lVmTg+jmlAIYUjZ*S7X7^}- zAS_?|B765hn4#ySw0U7+Z#US;q#Oy@Od7Q6?8c@11^wP#W_0Z4B#E2qGqqVVnOU>| zv}_3;v9i4pjB~BGNkdE8QzDy_(6Fq0v5eW`KqqRnJlX zOuQU#5T6f;{eXNHEo~iYcrSBLQQ|V`gw>=JA)OO?WcIUps@$?V0b*Fvlpp5K^C8~D zHv08>k%-Wc!88$3<~<$h=&C{rn?Q+r79d)KDO)#IKs9zt-HqbiJc}9paCURn^LH96 zmrGHq7ZYw78F>YLES>bP&7aAvab?GM7*=r~zS^B(B>U<(kSC%h(AogUpGC?+|B)FA z51J4R#>j+(j_r4!ppSiggJ38~9KLYVEx$bq{bUlr<~Pr@J=Qd@vKB>7O&3`ngUM~b zGHi8F=G=1FJnGV{*c>Jza>)x6ykb!Fm{F^>5D3piueE&|^lz{Ik~-v_sAeE8zQtzO z?MSb?%&Tun?x(Ps3<~Pc17?kUDp9$9nKU%Cr(o;P>Eh9!e8jRDk0{U|L>>6K1VI>` zm?@B7SHRjv(ei>N2oftsP_t8I=@J>Clms%qlwI*Y1wK5Dx7{w28kx>bHI(Z$WLZSd zRokqpuJ{~z7#g;NGsCE(QU$v=&>zEAmpt&i9zEVxRh0EOVv+5@y5C(t#kQ116(dF! zAJ{V`LFJCVrubisB0Rv4+isR0gSIO!ac11DUH);sG4zaQ{e_I9^o~KrJ z*DjAr>pcffzoRCDhqz(Yw~Kq$b(j%*Bi~g5_U5bbmJ63gkJ7S-EfC19UG!@7>iB%T zak<4Q7dNDV^&gIozvul3=Jw)D&o=l@CxP>+pKWzf=ZvXvW{KCACK#g9-r$$+JbWHHEZFgE`2);elRL7b z`?IE?P|~abLot?#m3}G>shk6e9e24^V8%?%{EINueJRg&ERV=lcvaqijOYDxOErfC zR;oX_m6Ax`!F5M}?U4t$2c!0(VtMKxQlS^3^tzH&#H1pHlSa|x4vOcx){o}~pZR*B z5YhJsdy64qD%)je4{x5%?;?^rpe6!io4=~@UM?ZG>^`_PJG*nUc?t+`_;TOUPHr6h z?6MPP(I}V>TEx-!nX>kk6tJ;FvA8n=jj4`&FLXD}Rg;dh&At5XyUlnTg1&ky!1DZP zlamRjuJW%9cD0L&m=3%cCmC%sQTC#3I^WJVsZ%i6L zI^OPJ8JJ49e<20yz5X#6y*d>ONz3U&g4}ywTk*I)hT=IxQs!MJ&A=)%bKjsR{mW}O zUulpk&_;!5*w}oTIgVSB8BPMfW#|nf^8QhI%9{Jan}u#3x}WVW%iOl*A1BOfjqP9) zIUN|BKGQ?8dq3xQf3UG;$>8Nc`2L)m@M%57z^eFxb@x*1*Y9FL1g}J~wm(rQgfe(< zE7@7g5Rc{~Gq1%&BJ8CdKkqk*OINex3YZld4LVp|_cX$*9xA>OjMJG z>`6V7EbnG#%6@JNM8RJUS5HF%&C0mD;x30@{Ls^+kJM=~w=75?B34v4WvAQA$iLd1 zI6W@O&v&Qr+WhEyEl)LW+K&y56^2vyxI}!9Ctp{%+*0I4# zPNM#5MPj$ZLt7a%yBMw*Xc-wfUr#1@^=DS|%j(?stoq#U^&cupQ*!g8faqclMa|N^ z7j0s8L6V6ha#Ct9?^o^#yZkOcbRrU(s4$l=54zkzr|}JMF`U{3lTg=a*e{Z&TN;BX zPK0jBLHohlQ*Jdxj5K5|cxI%{Y3I3k@WB<}TJy=v@h;v(F<|HL*#oxX{iTfe{DkRt zZNSXTO<$OK*we$HK0kXJXEnyDVXK- z^}mTtvB!f5xyrRjvL#HH}fXO z?mBMH;XfGty!SJbK)~8;R|KY6AQ*jBg|ut8fJK_xqb>}wvlpJMtkxsjgCN;V+J(ru zVWcG(xpDG9+fn3tNg9VoFJO$wONIF;b#_I}u>UXOd|;jIIcB&K9(63y`Aeh!Osoh| z+=M~Rs@VR)K@HS?0CU?5hwHrPI0_XR`2gh~NGN$8V6oilaYxWrmHYksPwnjoX5__R zi4MO7m=ym(>XZILmZRzLD&#iO;Wsz3GkYM^{}2o<@6+yg&s-)&A#u8kYIUDhy)G_o z{sHaQopKLbEJ3&Pp$2ktBj}(1hm)lJ0t)=wZQd=(kN4*70_I9R1n({A~`9r~0*Q$aZ4}!E7 zN(61~>|*`Zbuab);W@FAZVwq8R^vfN3rEnpa3;M*Wi74n`GcdSzbC|h`{Y}B_%l93 zLy~Ab7VZ!OU0nj)=mNL0f9Czqt9k#ZpW`7v#AVi(wzp@*GxBG{z`&3c{?FTHZVdLK zi#&`Wwe9X&Gq<09?&<02^z{ArtNl@WZqy8tY!C)4MMBI6_E9JV1$)w4?jLBDOa=kR zJ&tt|CeKghIkOmXy_Wr^`@>?x4Fb;mM+>6{JkCQ#(ZQ_Ys2~YpMLZJ>#l!Gv|A23z z$XBd*ifP0LT?tRCgCP*pK@42Qo5@ZTx8K#etUAP)Bw@Ye@IFbz_@6 zr0*BiNsmyTyMJ8Kgd?XBfz{LglK1BjCr3JN;e>^f!^5;OYdYg}5KD1p`Uwui!a%}%%f*~vh4_wZzxO&e$t}T}$l%1tE zI0f5#oIiYOVl}C0v7ue*U(}IXP*#;l!rs4bMmq5OD}}SF_jy;DvNnnyYEgArDfMqit% z39F5AiSlKm&kYmNgM?BO2}$Xm-Ppbh`D2Xz{#To_{C8QOPLL4xEH8gQf9~GL5U|9k zMH>w)0S|^NG1lLMPH|aw*0hB4X4n$X$4Mt{UP2a@rY88+o~}Ox2@ufgcf<<8bY*z& zvETMXzAzhH-MHgWq3zQxHwMR&Y9+cH`CLSE%REgnm%gCd4%Rr#YJ=<+Ef1hj(x~=5 zcd4{Ob){B%6tHu z@H}C?UgkR7Q}!fndt{gnV(O$v=fJfSxD4m6+pX}@ZZ8XoD)iL-6Gu<;z3~tH7RW;E zKuo@rjL2v;;#Ze0Vn_V0!-4#TW{vxt?3HF4oUUdrqikJnYF`^xi)KWyB;%N-Pw$t1gQWN|y%bZg!lD4QwBNvhplRJXbb0bWg6zc;SMt-hE{ z%jk0E34izj=%uhI&Dwgl6cKhpB3!-wVqy25_Mlptu*HVnp!ZuisrmMR?l7UmC^40F z?8TW1cOYQ!wO7E2yqme&&I!wySV&q$f|wmH+jR;0f-(j9QuXETg#i&{2N~8$uYVUj z1{LogpYVQ8Xj)jZ#_VPg<}xkioKh})-#GsCMQPh%{ZkU+JB`Mg7LEy)F&^=G&(MC| z-W;Xvn%~(I3n~Zw&p0;dMYpx`R7P{HjE&1Ri$e}}v*ak~$VaArpENvh z<6dx|=#T!+V_@&0;LmEinqG~3v$SA31#pF$3Es`fwLhGZ-oQg3S=`&~j(*1$hTeBF zfdQ_#5crxlBRkO>i{A-(OKCX`vdx)X>Imm-u-TaqqD|j85s?^$VvM z;6T3f@O!&cAO2JCeQ0%M9Q=`eXkR#N4R3XbCD4m+Be#7(bc*+Es7 zz#+5-Y{IY+3m!{jG`EFuN)Hr1bNI=J) zwsjT$TP=Suv+%J2B;_*bo+57aUaC*y|JO=&F@F&m0 zz0ybwrBGrtzV|rfuk@Hqq?)UB)B_XeSm0t9{0ZI$mnz`#Umt2K81#ql`~jj6Bc}dV zeUkyIHl7IbC3^?iqt67KuSB`~lP zg$QC))f^i`caX%4g0xwUVTNY>JPGiw$WOBfa>;;1AR1{I7yISQ(f<8Sf;p^MTE zlLVFz4<2Zjd|xk;CDBHq;sy2DX_%>xN2saThZZBo0YmFB68%DerPJA%y3ewXKUXzLNBNY>rnGeqYm`u6QTf@3@iYPYURK z7y~dXYL!YJQWk8#+us{D2I@<1T63I}Jct+?odVhfBhB+^lJGTq<61x^jYUa9mLG)j zVAcZ75j261A169);|`ThstcH7s`cRkArWSf*?G;r+MSafNRiR+OLSoqB|An4baJM0 zMP9}YJA($5oTFLcDsAIi_COTyscS@h}E ze50H=6&7o&Pkp@;T@a8{msm~^vnq*k-g;8hiUE`MPQ}ha)^Y(W|N6 zT$Nn@Mh~s}t|QI+@JAPXAI7kticM+qi92$Q`!G(^bKED}ajQA}!9d z(f`Cr4I9&rto%ZW%<`CCb2D$KL4h3^e3Vk2zv@raa-MsQyssLXyzRE-JsW9;J6A!+ zH5K(U4qFv^tKX@c)9_ZjW4pR8xXYp!UGguec{G`->^L(?>Hh?+AHzZoo}U)%xi=1{ zw~Nis1r9c2xDp(#6mr3J#NetgR1+P8Q~QWh=08c37KaCLLX)+p@Oft>mRl|S&(?i2 z!<5YSH`(N4M$O#xUXR6bDoQu59q=#cQP?cp5m=04lh?7^EC$Bo%8A?+-n!h_exylB zKl2c*Wl6CqLNOEf#L`>I8JY622r+Uc2<}aeZvpcVs6qh3S!$}f3!U8H#~kywz=&Lz z$9JPX+X0PI3YI;6YZvx96YCZ}>K15bhk#&d8||J0o+U_B$T>jB1|_d9lTH^rcx>8+ zg2-gQ(f~wt&_Pi|G8JM?vogF7!MS>gvOAr0xERW4)R76KcWeH|2DZZsXY-x0RwUpE zArbORO3L|^uQ02IB)}6}(57=g89r*j4+dIx_1durk3^Xg#*qX_+v@h}bv=DJf$p%; zHih=^5f-yn))308OR&WrAzgq1->MC4$2&5c!+THaL>v*tin4p?02SW;sO4zpY}_s^ z98R4;r7W>sE=%^JIM=D_03kbEjd)%M#H)w?_UCK#jQP~@g&G=Gw!4p{<4k$nf+=Ja zrf?i)^MQ&kGmAwk`AlDOF$b6qmmhQVNG^agfV`#hd(EL^Ev<=H#L@W~D=>ZNbWNu( z`s0Il_j_S$z|WNV7;=H~kXfbh5CbqA0aE+Mxi5dx&e<8iE3eIQF8DwbJBynbCRL7B+m z{5?zDyI4N~2m?rkd7!f}v;3f{6q#1UR$;hTty*%VjBZ9m-IQJ6Qfu%-1-ExZcr*se zXU~98bO$9NGX5xG?@rizAli1r#20Zz>-MV@J}5PZSkl9=g%vle-AxuU zHs%gxU`DVxIy3kg`T)MTjXE1RV_U@?DNb!DaVLoum8ZV68ks}6Im&7BdPg#Bzj8a6 z>q&nKC{Z*u-rBFN=P-GP0bAb?kdF3g&QDK2V{ph~_mbLt%^lGp5~b&!+$zjGuP>?= zNf}D8JlKG`V(`hlY!|pskBzszDc+&Hpj#;($**Uqat9`}vTP89x6e5CM4bSG5Ksx(4OuHzn`D2%EVM!y(PPD4Zr(% zIZ9aRm&HNJ#Z{|&)IO#xRloA>*l4UW5U{XRAwMKR&^Z5w9W@-5tl<|Qx6DpcVJ8;dsl9G4?f8y~Df{T((r-kg zgxQOoj>LWzbye}lV|97V zF90{_Ex=jso^|{STv-{*_IDLzKLPWf-ADR09e1wG!hV9{YG#q@UR1sW)^sbNlVUcc z&aF?(orkK-T~|1hc&3Bu-QyXcsD@!o+UkOyuJkR3XBj>^z))AHdg^|on-xOZ^D^(| zfa5pvCdXIXtB`K|_gBr~c0^kx4+sw+17jq^3nnr0i4SpH7OC-`HXX9J-Emsp#unH7 zlzf>!BrGmdR4KZ_ANheE9ncug{#Zn(fR7hZ9f%sUz-UqrKcKu9G_XQ-opB5Kic`g$ z95$mku40bFm&w5_9HsKg9*M!BpxV;$V7Q8X601-;HIl-+pFGxn(^AO`g8cL{B9mlN zjY#&#!9v+MAvGA~;xQbN+|M1)Ff1P+pn)d~ih$M*@{xSassK9ffs@Bblan-JCN^dk?D`hn33K#N2RV9fm&4xb;v{}VtJ)ta7&g&~r zQ8r&}O1fz(X0v~?$l)iC;FSNkteKvuC6ego2uvNT?Tm_<gM`B;%NQv%!vKyD$4}dn?Iu>v-MFq9@_5ui2knOJZ#2x_v`> z!3{LnAd;6T@9K@#xGH-(DarV>!G!Zz>bjOtvk{*1oNPg7am7;(l$!8FQppDm%>{zR*Am>39Kj^vo*xbJTt&u)$H z67u6+{3n-U^wbm^{ zM1-fv=siN>k$(;^I zs!eXI$_5>t0@xaSdFH+pr*fq?SY@A3$cvav)3{}_3>V)6SoTvi1gvSbhjSL_U62Ih z8V9@phIBspF4Pnpv-klZ^(Tp94)X_fB>@}wSJi&;=Xyx=gr4}}S*Sfo-uOV$$`#__ z>fe57$czX6X`u8p50cI12jQG2a=6o5$&m^^56ScLX~ir1dAgO!R?k#ym$@ds3k%tm z2-OLeCcbw>&cB!wb=*KLyeM=OQ$a_;IAZrEJ%li?LO&p*t81eyu^*QRzZLsF()&VD zh@G{}E_K@vrB`!7ZaR9GlW&(bBSlKCCFgKhy20tyle@ZRd!XlVK(dqaR|o&0_NQK~ z@H;sgs-f6*GPpOH$2NfraO-w@?^@1$!iqPXw?LiwO@W_1dHInqZhpk~7(n{QclKl$ z?GVF|bZra{i62xgvqz(pJk+r(>9c@AcT#xwvWEm62+%muRE)092kFH*#@|o|j2| zF7u~ul5H`E+Kyu|#iu&)trp*di{g}dp$L-IK`n8m?bJhD*XL9Tid@~HN!b|cm4c#` zdaoqdPbhyVRPkqo5CC(^((0ddRH#k69G8w(9)v8H8kCBRqDf=)uuSy15Ajz=zJ^&E z#IvadW|-H-DNYsp)fyrRK7L|O`glvT?G}|NhN^s!;jk!ZaiYx$STI`sf*~SMDgeNNYlhx9_U4vimL1Lu9&WUHtRh&hl`RjXJZ^8NfJ_{ zvZ6~-`T^7J`iUB#EI`l{DT#L&Pph8`T!-Zemgq|$+@=a77JpsZx4cdEv$lDv)>A=; z056t2zIk%b$#LC=%Pl#R?9%#jIN-Btr{q7O&R=`5mnLdlx5V9t=>(ER8ZWcV0qd1# z>bNErHbw2`r~>z#brhDIFv*{0xP?O$Cz|}o>#6Qb*8jRUxcN{| zJDK{jPp6}NN-8g+v`S$Tn{{of<5+g_L9O#xBO(d1X6jkdXK#G>juI-FXV{AnY0MSo z4f!Gpt1)-0>VLKfvbVGAKSe~dw@c$j9ma)ZS4nudslzQMkDOU1L6?G;tDju4+HEp# zWDthQ{w!hPvTOl~gWNtieP0?QRn&CFDSR6GS8$~``8#4Pv{3P7y6i5WmOQy*wowcA z5Qdsn^yxT(#sY1-wz#Msj!y@HQsU{djBu#Pzt*Uyb2$!p6tB(KRKWa$Yw5?U@+bdO z6#q&4WK)M3W(?eVz6DudS3;%r4;lOwfhK(08X)A#l@J)1a=&yebu zmlsU@RmCuagF6Knu4hZ-Q^laG#b*dViu$iv0Sb&xBq$v-zW@BB#n6#VL+3CCrVXFq z1&LiW(PCU^p+9zS$qB1mWGvOvS{OwT`dI6n%JNBp??h=8J+pa!s-3Hpv3wlWLQhzA zc2;>!Qg62N*xFGw#p1u>BgOX zz*E#up)Q5mA4VGeQpL%Mi$A+fV3s{&Saj*>#u&`~3~S(_-ssmyrrum_UU%XaibS`tvKJocS!OgjBJp)7flBpwd;F74l0}(avd-9)rgznv4O)mx>>qs zdFp(wKcb|!MAKr6(Dzd6JV-LqAoFD(S}E-pEdeiYLb_8UBTrh{efMA{EcR)dYO8oAr0!qdDIKp|V29ip zuYBZ_dyB>R7U@MAkX`&tV9jAU$3-xK8s((22olv1>X${amqwW*hd2MA^+}AlCRUV- z7Ov-Kj>Gf&{Na|9xtsh~7jWe-BxRVx^9FB7{|!EYrS{vn39J&mJW8p5m}0S7+pJvOy>G8a zZ!XWX*<}fMy|?#DLr;hKkB9j0E_hqc!m0Ks2BS499obXlps>*&*F+!Zn8}S}MWseB zzwVnwW$$u;KYUcP|HW3 zQbwU^Erb!5hr{PJZQc;34qRNlZ6{-vI*&TxB&|=AKYJ`p&_;h-`~C@LN+_aHNxpcC zMPzFwg__;*#XAr>V>_>YXY%r8-|e+p*54n3r!dKeq!?iIOST=fH} z*{usL$HY4fGH|du;kY_HSrW50x{!m>{qw}SyH$?#)o5xPkk^-5Z-y5z#HD|?!+%s2 z(Ec)gd{BQT3H67XOC{hBXKF#itXh6WMG}EV=!&cScePetuBCk}#GBz=4;M^hmH`Uq zn58b8X*wr?C%(*izT_0tZ_&#A;T(4z40xp5IC`mVCo8oYz*H18)`9XSAVhJsAmGHX zH72xqrnF~5yz9L}*L;{aq_b>kQmwB{-TR*5lH?Pj@i`BeC%#-!S2XqkfEC5DC^pe6 zryH_4U`~m-pV-@0pYz&@qI#@pRq6T@b2>dGS2mwgYd^RK6CM66oIToZ)zvar%+r-u zGv$ksJocOhRca>t0RSgvtYq!qKPd-MzUF4pKd?97K$=s%$W+=59Z88qk{OFCdis(n z%VbttM~)pRx^^h_+u!*d@;+?pKqR<2T%;s0Gbvh@cW&172G5Y6%N+qQbyUeaC;A;8 z^3?jUMwq9Z>guX0rxdF8%CYVn@L-j?${Z9eM$jrp6i4%REranyo*ch9E4Lno%-E?^ zYYyJY&`D8N($&nGwzP%`%w8;GvS}_a*rmrUyR$f5T(8m@Z1j6wf8{lM=K%~d_JTp_#aI*SZen~7?_1otgWg> zhLQ%v12;0g^QzJYk^=K!bquqdMJA@17KFOCua>ml%BcPL| zvJSsimj_4x0L@Tbt|flX5@Gp@mf|*aZU~_i>6nVIZu~U(uOPUJaWD{S5ytdP72aisOC&1HJ!@C z(5>6T>djr{0Hj(IQX5fV`!QTdP@&~xD5v(z>jiLG_#M0494oqpAxAXN9SCrZ;?8(s zIFLiLZOiB#dvj97#QejWWUW7N>+xIDRu`4@$!nkMCrj?=4QN>`%UL%|p)b&+(0Xwd zcY6H*lhe@GSYz}RPf<~!TiF#J7_;qqFp*32MJbIG?Qd}YiOs<-c+sn{rJKNf8+Vw1Q=oZDRmE{x-OD3(%G9k|I6AHvbL!;6s|I3? zS$FKqb)`4IgET+6fa^toky}SNL{U)^S-D})Okum0Nq9ADyqJCFT$?p1ukJ=9zp61v zGR2}PzN_oPvazY+qCXUL8weFnE9*IYiSWe!QDdoUv7RtNEZ5pZnVfUl1O_zNxqXaF z?gU{dTCN+KQ%Zt_7ZfH6$kLZZh+!I zCK5)n5|ay&Sp-|;=x=6|3I#4R%v9G9S7R*>jld`t^Z_qVK1^J3Fk|YD1>-3}`ulW| zX-h3-r_>T@Cst3Q)WBf7F#QtDm^Pqt*GZ|cnpl-?2p$h!ps?DFIHvO~J5B*Vmz!rR zU-9|F^Y|CP*pQXgFr}z0ZT+~5W=anFM=4xaxqnuUPqQns>r^k=T`}hETI!eIq@>6Jn|8(lnnke2cSu zg>ohRE7H5b{iP1cUO$-T%9&}~@dFf&{`iyH(x*9}lOYLEsY zX@J7NcRt3i$H1iY@grK6q7D6W@0As)nG$*%Rn_Kq!uNf|_+zW#WRdzpJ?^C4f5FAa z)`xH-x{}Au0?Tv--abGv1|t!0X7q--$|$>=Ae329{tsLnMtpzZI?~Zo)%OKyqx=7YloLTP z|3C53{~yAg|F539ua*8p!4grk61#E`jPKg@&fw{?>Wyb8T&gO?zSv)gv&RI&39G{%X-+&8r$jR6#;s4 zGF-(_)=$A5=tnRb@{U(JMk=5Kdwq}Yn6~49U4s?us1Bm#+pShP|HV?*?Ruz8tok-t zEKmDTz4xZ3F6PIT7x!B*Ia^+6!c^e`;IyGz0*v|%5v~dOEl>PM1iH@8FjDw$U*+n) zz%*l3>Gh6EF7tw`224H#NppCld2o6>TzCwdIW>7fpH6i;K@99Fnf)q?wX*!K&q{WSjH~k7|z+ z6G~at(l0wd#+FS}rE!I{q*SJ@Aci?Eb$Lvj2U(LN5R9 zJ%v>4!Hdsl4~MMfQ*Ky4z}PPxSf5|Rg`XD}vhP)W!0(pK{Cp>*jo0UUo-pJ+&%3Ti zBE3Foj;qvHt!!3PZk4|mOC3ILHW3)x=Xx6HFZV2*Xou;_&aJjYFghXzt1F**O77j~&nR5fg7;R}=B#K=Qp-LuXayd>Ji5 zBgS6M&flX|b-q6ch+Y^<$dUrw^;?Zx_G|T_!~&i(Sb5?KZ7>42sb@>Wy#{b2EXz|% z&4i0;>WV3J(QWThDG|HP7*)urjuTeTTb8~r?&N%Tx?gdk;)*4Auum;+vye|%oT$-A z;@clT=m{GPR(N1H4e-K;4`UMIi^dja9)+A%X*Wg3nU39^E|=F+qT}N$hBZf3yc1KM zfdYPrs4Ci!*yVMZ!IoEW`!Q&_De0Dw+qG^mT4x}obc17$WqHICR9YvL962Ims*j^v ziMZGpSn%Ksw|oasIc!F=vHR`3>ni+ejajT(s;S3&=Zsk2_eG+Vi!qR^9t_X!LpHG78e;9$WtJ4VG|IOU8-e5fuF>U~>v9|WKRrF^-xYXN zXJ#WWHGeeNVP}6Ouu1lgu{S45rG2z@N|KKdnj!l{FR<77TD)BMik6h8kW zQYAmlKn8dsbi&x{t(d}h=AjGtJXiR6A2z~ZMgIG`SGza+D|>O8K-^Z0fr^m3(MKMg zX*x;5;;zuhi{ZA?@&f91&bt2_rm-`mBwIkJO(xJJB6U})y@Op)!5keA4B{&pa zY{5Yay~JOG=!lEkVLCkH)*C}?h1WF2%mTQu$?FJtx+eg*_< zN5@8%JJRCp#_DO>t*6#|m#{m_>*e#KrYMDmWfgAa^12RuDwG7WKem&|Sqb&VF5om) z=t>06l6X3;{7rw=GrJxx<@@-pUc3y~zPHJe=X9#U4MFu5+w349Cm zFNeg6kRfLezp=2qGeqxFaUCFm(COq!H*fyY=;yox;>Z|@`21h8oA<)lFP|(&z#3OM z!2jnE4hywMlJ>uNh8k3}sqXOQKrayyA*$S_JqvqA+v5JxbZp7Q0c7(nDxQlNKhm9e z1|<{s)s*pd(%*wLTbI`i9@HG%L0{lBYj#o|ktuWhFh!mxgjU?{h4kI7zIRAx!Y4!* zJ59OE#YEGNu#~tDTYep#kVwew+d(MA7xE?m7zC18Ax}}SSPJ`hXH>@Hv!J>wP28x8`ud?C`#P_BYwN z+5J378Xx-}JAbMCFwrftolJ)Cz(e|*s)dw7DZg(dHdvu!gSsY%JJJySOVy(@9O2gv zmr2sIop%&$FYg&TZZr7{>rA&do}lz$C|2G+(|OZE-}B7cw_K%I!eYpzO zr9)hNJor`wHJFel2X@re}NBWGMRJ-(dttCzJd`|^~XtEh~Wy0zFk(ei!D|X;00TNgj z?c1t*)@(LKF!reRmMU-tjAIx!N9(aCJ3g*z+RqzX72%6Jgh{C{JASt${a<{6B6@&X z2Af`&_bZ$ZbX3f<=A9XwdP(vNq}$pqc+bCfBeBcZ>w6Dh@fT(A)WZmXyD1H-H7A;s zz(_eAh*+2g@AU7tj{M9UT?DG_K=kf>8KblCz2G0x z27Wk`VfLKXwwYRoSM>v}|)1Mw*3;cU> zey8St&tI|kwUiPy=R}B7q4d>r@p@2^MV>Gp;4*Qnz;z*#X071qR@ErO54tgyLUN!O zo%^uPk7tDdI!3VIQVkFHs57vRu`l8=Wpr)p@b8tf15 zFl-qIG7Rn>Qc^|#tb3AVOl<_#g>+b=^Wo4iRdkUqqJeiCs`2#~;kTO=Z zj&Q{F=?g||JjIYtWPFx57T34F0SZ$mp-S#MN=EXm2Rx5fYqX&6_P219!5sqXfee?k z<-ze(=0Ug>)bzP>(L0#%WnlW#q_Bde(KiaSNTk|9a9hGl#qULO4|_=O5EIBd6jVeh z1IhI%1CFvtjs7Oh*E*^giw0oRXG17AI`BH=KY$-G~y0$79))r+>RXttGJrxl^VV*s8&H*Lp zNk)1(lEUlK{)&4!I&Q(ZrWU$R*5bZb^Ytb-}`nD z;Bz~t<-NPR@bIj5?>5}dRi)jSzg2-!Ma^>SlYhB(jp}+{8#J7q{lXibHx{-cqmM&H z`ib-OA(01q_u+okhevs0Nolw#g15Cc3Z9Bq0y7NumHFe&u$^q-{X3f}usR9dC)q9N zJl}MD6y)*3>|AP;JxdbH2V-}6FXXmUcBQ*Y* z#3v^kZDcT!hjiWbDDZmG7QPF5w^1|`up8hPc>AHUpV@RI1B4W3!}D2JYb>JbU~A-_ zg+V3LHkln>o}7*WiQe+EbzNj+-7;XPMi;bTj!Tv)I{6bNdZByhdTPRSeviH?cWO?} zX4OPI({u292W0;G<@7%K?d|Wi8{*|1Z@$Xb8?W91Wq<7i4mMzj8qRf%c zWbX|@5})-4iabgeE_%$VBsVy9oTW+==YTxze5T6kg5}-5QKUsED%|53BFvR=Isv|k zJM5TLw=wdBqq4Zl7T)<11Y~|*aH|Ul!deP|Nyfrsg<4 zROq=9l)paBdRe1Hwa7r$r2W%G^)uoQcI=;G@y3c$;HH`8f30GO`nQtY5P-#(R)0;H z527b2+--ckIRl8=+tarPz_GRj@q;!|%wX02J84in*h83wK@~*ndfdwv2#xoK8U(c!GkSHnmly#6((4xPUhzADO0Jed!0Wz%|cIguPZcQA)&1sUgS`tZ{Y&Aw8}_ndlfQEa5R7Ze zbttrFJEAeEV6G6-c>39t)ZsX#{eA?+|2)BXf_IB%5zP}kVHkLU_ygiFcl!v@tZEC% zbZoo#PZz#j1^7abXIi08o1B6E+^B}YtkV>4VW)$vs{Unha%M{No&UVe)0L7iiN6_i zNC8NGu?`r_k9ZaYHXWby<*2#KuhiSf#Q4V!7}cVF{{&YvDCcWImeXoqG{ko5kTL$) zv(9+^az~Fo=8-Ts@Y<*&CL?p_Wl5VKp;4blS0|B%Y#rY`ZaTbQy*4Od)>@n-YnwPjX`tIoB1~s5Y8@>3ivNq|Kh|k+9claJj$X_2Zez-71eORzX@uH*Cm->ifxJKb-4ct)t0P zq`PWWE=YcVC3}4YYP5Knfzzy58vwq!T7TQF z-@%suIrt~va_SJ#b>jsZ{GWUz#>;mhHM<>eU%;KFbAERHeX-e!vC0{R*8z3w*t_Lx z{sn8Z6*akP3muR;QUg*gJf-dK8Uv29tT!D6YDQ07C7V{(M_&8+elM4ZL>%=6SzY2b zqWOOl0-}(7%5hUSG@O#9@bMM;Jx&1PP5c@3)vh{HSO?-!Kil>Me+a{ul+ zq-e--;CLHn8H%+$$w-PN5z0cRaN2>SQGs>)>N25#;>3=EJ_b`?nseyOmp%WEd|fLT zNd}{xd(0sYlM~wVDcW#Uf)Stl?*3$UflU(wr`?5@+V@kqE;u#n4>oObxNPA2X>xnx zl$p%^6j^WnT4PH;6_pqK3~)Q!4KeB->xjnjH&KyjbujB^Xl1wl`$I|akmyY3hnzzM z0$|kLRuon+zX$BhZT@pWhT)>WJiHE^4oW&k)RW9xwRv5Z&h0Ub=-6wykmRNAK~{VT#! zlb?qu#Y*b|_li$H@u|kqxUA54l_Xk@@BqF^&8sdEMj%T@`A%KzQy0&j{A9jbei&VU1A9wFSc?oym|!a^fV?nl<1-`24;EjEMRaQ z*#_RERJLuT7Pu!g8LM&xKYoOrO`tu9$uBQqfUQRu2f8# zZznL`4nFFnS@&8tnl+b6=hF5?#-9y8#MEpa9oKADFr07JEGt#EoG`bnxVEciGf8BfSKa&&Z#l8fheR@;_@bScfKaJx{-2- zgD;vfCp9|+sj9Lo4Y*2ZJMYMDgC1q`cD@C2pRP}x^>y2?u0`|t63v$6_un)sTWysE zCUf6t6a8oI_~P{Y*Q(2q_jshh&*AOx0dPi7jwK# z2C%SLNh=D7Hcys5rlTiW;JA<^DXA8ry4A(qq3~r|M^n*@2`5?FD`xA|SLe(rQnYR5 zrnA)yqOS-p=z#~Cmz_RrW z1Au*da=)B!bARRfM8N;zJ{w;Hn3U=Dn%R!bjsHhJ!|%9UP)j&c)~ma3e8Ff-S)?=8 z1%hp#F9Jx|Z((~Vk@mTq*!Ot`B-yVUDD`%=`UC;<4QST-pE=fd=ClmA<`FK<&jNE7 zvD(Q)F^8}!K;VErj7-LtRd%QKI^Z z#|ij|zF_3Wq_y(K?*_0hT{kkR=cJi^ z8YX6bPLZ*jDKT#_W@)Td-|w>=&Oj_#S&+SmwvFI#-DCduyYg}U`@4WieW+cQ^*{Q| z-196-;(zfG`g9bqLLO2TF)Q}hn<$^SR0s)Ru)-W_@}nD8vCp2HgW3%(pDuFFvfo6D zhf?MfFao6(Gos&dW#RxpgtUp3+8~%jc_SDV1AR}{e-4Iw>@Q@wJj%6Vb=|Sa@f*wc zep=%=1U{p_>{Ph5KNqTg%_+T3=_K7i1(^T1J*$4XxldrXlZHDDytQRXJH%zPypnj# ztk$fb4%axboige_BUV(`gH6u09Xk6;v2uv^oGJ!xI9ryU$m+16hYXzX;B1rn(g6%T zsAgeHF}E2l_K#Lip4<^)41*Fo9iOSZR^F%uJiGg05+*Dz15xoy4M0pm-XZ%WP)x6N z7iJ;TPwvVw)a=|}J6GQoFGNG4P^8SUuTIwG$RglB<;tUx==-M@?%R@wZzVy{J)~gL zHxQ+ewV0C1%0OKk$$QIEww65o=r1hIsd6~&p0GaAGUZtxFc$cg+yC#@+{dfz5;m7I zVznpjNqz@XfpiwD!_sBmL|{Vbdoqu%ne1rnx3y^rhw8Ml1M?ZRWSM9b%uHIC8j9Gu z@wJ-+j$}+s-9>Ran+SAiS@;THSwql^>i66NzvoH1O3Ge@0tjH*1b@y(cq4*g#UzLI4wP2XAU*cI!VOK<}c~cgBl8 z5Hfc-fbKZVxHWQo8@}ekKu*VbkXgS(%o_*cxy=LPvBN2CS9B^3avVDb`a8mRf#{nE_A#THn6I z-k&PwpJh@~S^lFC_?5ay(9-qv!7Im;es;1WFFXIM>$Eb9sd_C^GDo=UU0T2MX;7|F zt_KQF&_5}=^~N@9Z$_mUew#zi@Bb-s*Xc{(NW8y!Ur+FOK?OrPW~=M#(Ifgr_4SD~ zD|6DuraOy^2ffi>7DRWG0D$4XUx-oh@q2xUER>9lCw8T8%msNc`!-%N88CLAXk6#JkmJC6F4W#{I}`~6hPeWgU~+P{Z%}oo zFV1a!buqj*eydHbeqt=sT5cAexai#Q4}wiTFRCRS^P@`MO^AAb6|)!j?_envMpejX zEktbbHPiNoSGQ99?M)*xe-AVDRl}T{xY)9-No=Y+l_sKb!5pHaZz4y3bJwmX$$Omj zuf+3WkGXJ_&*ytT3ozqUN#E79U@aU&>?!UB*n(1|Tt2+=`Ld;Xw&1D$2EB1m)VpZ5 z4e9T}hmYu2r|*M6;SkNk2v>V&$ZcrFd-Jsy^lO;JPvQN>j)C_Y7e>!JBbcj;wsndO9jdxvoQ z;jr+rp{KYbjkEEFZZ7aj@3y&c2^<;38+;_5``YZboMhqmpGwMqnbxEfV46V4j#d$T z#vqZqH8!9wQ}!t7|9Al!4jTVk`J>U-_OQk6S>>^^$>1ikdNX4Vt5>t$~IeR8J%?D z++=(%=&`T|2$%mCUU)hG|4*5M>XjAGnQ8UK6WT&ruE&zjhtbV+9)Q+<3k}!%k51s- zh*99ySgmbB?UYvQ;Q~b}wDMu<^m+KDze@uW;qXjwD@YA>*#V}VFYLv5yd|6-R?Px) z<*lBaLYx-vheMT&NTKeq4Dkpe4Vwq&ZyLf{HG3k`@84FOZ;jU9gwC2s@#gBbfZkev ziv?gjAbwBks51ND0(4)(UomE9ZLfuzc^Z4gVtO)u)KNZ3Jcjk&sdj}_WLYl3G)%w? z31=ucW{t|zGFKM%P#EhkV}C{6IJGV)sED^Lj|p5k1;+4yf4cP1D`#*h5@$*ZDrV5o z_rU*7cuSSW=_$h>^-}9&IC#H(ZvFdDSxyJ{Ixr(*fb03PrS*r=nvK(b`oESBfy#)@ z5%e}!k=0T@!N-+({Gx2C8QaDjU9WK_sA=TvJ! z6WvEM`P^BRwl?->tntLdh}%yWZ^DzV1$5mty zBuQ{Fn0(hC6+J!qz(8T8(iG_HGa+inYsVqbFQZ=fr77KMvwGcVY?ZV%WxA23y__w> z0`5`yM-LM0SDoh}!Y&>+(z{@rrc=X-8D-Duj0{Cxe_oVX;GPzjF{f6VYL1ptBU275 z09$%lX|J0%LD2$jx>0~Ge#!`Nd;YBx5DA}chFF_(?{?L1+A zc)Fva7z$Q2u(BRt+m2owjsW`Rcv+EBvU>3HHOu=z3w|~2+)+{SE!FMH2u&>JHlG;X ze5`#t3;609F%n2ByBOp@TZdrvAiTG7iFY2PuV6gm?c3=;Y?A+CMN1l7Tb-WlFs9SG zCj`A2`-K%jGwUWHI8ljn@pL++=CS1NT9m9*e_*$4p4@T^NCsLWH~|~b-~MfyOUW1| z_75zKiH{<(Y&8z&Sq*U<+hlS6>Pd3_wAz0AP~eDVTi`uQZYd<3Fw_GhBO6Js;Ja~o z4TR^nBb<9i1^-wVC- zM3Zqw_2`nk=ZC#yq~8>Y8TZ`md4Cg}1Yh zcu}%$+2K^(-f%P`C?MOyr`bF0AfBjCN2EK-j)idQr!yBOZFsrWlE=~?;UgCsoNX6o zRni!Z&mlWjUU)Pgq?i3ZYj{ODUHzNM_#Pj`L)9r_c2^-4a`%sWdzy)sVDJM^^psS6v1V=dY4^^I`LK93;!u9BIa9VoGQy4 z&gfgN3UE8};8GeBKV{R3AD9sd}yhBr6lca zcB@lOSaOjOz~4+RN(jf+;KmcHhfLMqam8CiGxJmC8 z-AE6yT5+NQD7iI~Go<|HPiTcAN2vr$r7|7yoO+3e521OP^Yew}uw_F=@aHOi@o{m&n8j~}l{^SP(ch2E%ZYs<|1O0e|AVmUwUI*3hjwYzEw zY+lU6#^{1bKgl^cFin%m2gN zJ9bz0d{Lvn?sPh~ZQD*dw$rg~n;qM>ZQHi(oLDC(c5a^gf9`j<>+K%9#vWCps^(s6 z%{eUw>7)dbTF*&z9+c0Pjf%g0hSiIztrskW9+Eq-KhLa$m8IqNm3|=$ho&hiromm%Y1f4 z3)}@UdU3u^v)RLJaRGf{mIVr-Q4%8po~~L6?9xj=F;{Bs%hb;+##hG^{(NtS(Y~73 z%E!MY6&k>>YXIjOA0V=k-Y)tdz2pP z%TfCNr9K|Bb04TaE^s&(KTU2OL{quRmF^q{y%tBjchZ;hdn62N&DX@)DbBe6JOSNAU2{L>>|q zSlQ&f;8nj8bp*9}BFpf{1$+I;AO64o_FQ8U;>@c`b-ozENAQkv*kZ`CtjVkM2B}~{ zmum|Y7W_?_K0K|BKC`|N6V#{nB}jOth1DXr3Ae77bcgz~F!&Y_US3367<48NuRqU? zjF>{j<5AJ_n%g2?Rk7NL4=+`ITQ=54=vZ+~`r8n^!J{f{8jRql|7mLuOxd8WfRQRM zXE0jb;e9+IDB7Taz~Ca}T9U9N^jn_FY7RP*uO_pdFfK?iEZ zI(LBM^XG4OQ0R%)>2$4^K6l7#i1!?jjBXnD-4X#E3uSE6EiHXh+X3tm7n{RR^c$1k zf61jwU;0>Zz7+e}frZmsQ3IQ31#HVX<1IR2j z$7%eZy{LwIPgBA*pR#0FEaFordS?|mS0>$*(P~Qep<1fKj>2q@n=6v*u?6fm7t6#h zzlZqS(!51tmsiB09U&6(JtZP=sby?`4$C%+c8wPra=Y%gwpjx1l8Riz_!OXh zDT!v~WIeHUej2|aPVVjk&J$W%}6z^3GDBVdfp<(AqX(L@aCqU7UuUf0@c za_@y-A&2S~8}-3>!_7&{D*I@Dt2_(gO_gSn5o6|P^D5fHvYp{+VgHsM{_AYLj{C3{ z2%WGp-jyX(+E_R%GrXvJNb*7%=Xav*u1c`g;h&~Q%9QHLOPQW1t1|CLH5nx_`HP{p zu%;@$PY=55@y@7%YU^TCIkYqTXyJ{JqBd_DK>{T8%LD~b%?Y{8^S9V-(7#ELxl}L2 z66*wsmoE4`i^$<4iH<{rGCo|%&5UVxh^j+HBA7i!b;IIpC$^uWB`?w+ z1#`W(;Z&5zy=&5)4=KfPeR@VrXqn%6)_Z1@O<@>Nj^@~#(H!x>FDNKWTDUN2wN8xd z*|6}7qwX)1T3eQ^=m_^eUO8%y6%wn@`X|2~s#_90WF=x@QaxrA^=!5@8jafC8Vl5# zpY|aq2M8}L|CQX~N4jv_YE08AUvoj^ver)kR4gtL4YbE}86wOxscuBJG@6~jw*aS0 zwdJUB!_PQrbpd}P&eA1GrMi~^zB0rz8&XGUtyU15uF|`-sh%4o7Cd$F*nUZnXh>A& zf_FWx8AWnl)LX=sn--juAM!EE9*$MkH*Xd-TazIOsSU+>@NT9NQOyQLB9XxAXjI_( z^y4&-u^w$1{q2Nitbw>4gz&wAT2#&&83ib%qNOXCT=B!w2{lFLtt*culH0W$ku}QCo{+`R*!aXud0k(AmxA|s_Xx+oR%pp% zw&#xUPQ)jy9tE^EsD{184gZ9#T;u<43(Dv9&f$~)l*AZujLzbP^`(O zr!FZ|DT=0OTFuHY=t1e+!jekjE;c#HCZ=W;Lm<*0_L4WMq!3U}k}Z`BKdHz$mV?tZ zz&AIsdGrdfu2&A)_7FBk*TD-;$FkN`oCHUBj~WMC!qrWWU75{IBSLChk6i!Shwy%V z#C}A_HT$5r(`a%8&y)tk;v~#@zL9e6y5T0^ZA>F6Az%3dknwA^hy4ZD4H_Y3W^Bq# zxKGR~XHIbUz`gQPtvhUwMioaOW7+`2j%j%5{!Z_IyC(D+;(5WJ=;M2%7!}H>*gf;r z_JHW^{963~dJRV^UPPPnsdCujK&3x-Dm2Z zJoWm723xH(`VLCLA4gi6oT@7oXpV0`W99OKh%y@%G}^qGD$%EmMEwaA!yQP2GdzbE zxC~MsS9CYTw}zgfOj&~~*OmFAn5f7%BAmEp}ORBB46Jkxi%f$EA2Z0=FH-;VI>uRul)8yg~A9F~vDPkwMJd5pC zXfOVOP_XdCf5Mp6iBCW!n{XvwT5=$=NI zoice?$-b1VL}Sq5AuD%U&${Z9J#2OtP~=3fGTte*O82V>4a)Q8@7X7Fgpehtr-#hV z5sI;X4tx6iq_wNvnOMy4rs25@b9$zlu zu*Kc&{~^8=l+;}0wKJ!7-@z{=8XIhO0_*kX9al~^LE&-+_D${&_*xSS?X!2a2&whX zi>@iSEQ}s9%ntixRbPuVU0<2mk_ds6zqA(LLI1Cz?FG-84NQ|-hajc zH!?#`MU3d>i>$Wu8CpmlcApI^H2Ah#>u!t7E-qca1@WT$@TTh6#FtsY$G4p8==#1X zuhi;}SA@*V;NVGx#YP-oR#&-SxahinD6d$r&5m2%;3kMP)gs=i5Ak$H+=I6>Qu;qL z%|Bm69i(9oc5tkrap@GL6YP_-p}n0ndTukvcxg|R)saWEFc@ApT5+E7{UcR$xT(~g zfsuwTM@-i4Jy6l@_TXnz(;F=tL!r(3_*Kb%ZEUnJc>Hl8yK==Zm~OyGk`Q>~s^Vz6 zO3`&cl=)3u$@+MhPC9N1Ypp?;U)3HWj785t=oxMFL-M#-OtxO@is%-J{s4* z{eEsw>e$4V!(85GHSshp`pg}l)e$!PQ!K@Zf2eyje-ytq@T%^W=77 z^G<_iXLz#mH;b+NFU22Xm)WwcDmnX2h%yON#<@K_SA!Vdm0A*cbpx)miX$k(enC>Z+ILPtx;Vz z5E}91kC?vvw$^&fcdcb$cAx^1 zbE!Le(7K~+LAyzYGsI40qTrJ%J+TaY zj+zfdvAp;gsSWwj{UuP|<<#D0%5qdR(?kjGrEjpV27 z==}F<=32^(BlI$)X&(_`=0H40zY$<)`$?Lem4*9gtJ|MTPH0)gN2&|L@O@dUe7~CQ z-D@EwNzo}i!}SAe{Q#+LvA>wTpB2lmzfZ|Vg+Gds4Ry(x^~oyBn>=!VIsjdNe>j0z z#pIL_IDayO0Oo=AJ|1rOp*f3>A_Xk>p{bp^!Ot= z>_X()lfx(s!&X2;^jypQ!E1YVfb?`Ndh?s08t+7RY|mKYEbr7d2^gf5&R~Tj1fMJ1 z_4R{smJ$l*m3-Bt_GqKpYrS1Ram6U_@aToIqz?cCc53=?u3QPbimS@c3aYZzh2{Q} z;^i(E|2TZ}e68UV(?aw!3YQ}TYfxzJ37+5Nz9~Bdg)@DjY9qF_$R-{*4Wr+&IyCxGh3^??cop= z1V31b{^@xELNsSJso|~}<5_A8Pl7ngOue)DXEIg5q%WWUg77y`W;I9zs}a#v zG#EKABk$%6-u3QEg3Eo6!8(?Txt=_XS{J+tt4#aon|yyM7r5)(EMa`SA#XY2P_$hP z*Yv>S6C5Yq{=~<6^P6OS^F0>mCFrI3oH6TM(D=MLDsqoZZN6kzQj1S)Ntee^VcJh$ zww|6c7>)*sba2F3sX_f98YoC$^HEE!Y~~D{di<{d=$i@m7E^!xu*>2Vha(n^EiF%j zHkxv`4?|PG{mKjMxx=2!c>y<~&zu3tuPRW8v zlnSdTsrfeR1-1J?T)8l-utV0lq&*wo*r^^QMv>Frvu!2Pm$hy035uW1RNa-;k;Y)l zkmP+`$9}Z)j2P=?0PXv-#Ut1fKdq^@ba{fsAn+TCYv9OkYgp%WM(A+yYu~OZ^MdAB ze}gB%DC)`RB#I7AW8@k@xK`pPs?4)S<`i{Oq_S~& zf#f6mB~8`*0GGAlq7Lbb_6ahWd0u*OO+A>~Gc6;NM*HTU>=H8gurX+7ivS+^gp5-X zG84qQ|?DCa2m;m3a3H za8d^~nk`XMM^u(ql$D(A8FVNUR!VC7X?EpGOH-}61&lF;W5Tf4m$Ao$b?z8V<}X_7 z-Z0q8s-hrajOIz!v!bplt8J1m$amF7EUamsg}<@QHrkIux!P%tqF|6YKIswUy|f`J z9Qdr0{nD4U0XLhl+47lI;60b-I^xUL($yZU`4D#p_Po7pdd1oUuQ==n!Jlro23#&b z0pLNH@He*%Cy~7D|1|vk(o6mP@KOu|`3OFL=AucjXX{A@Pr%6<@pIwq?7eUZ7}$tnVnA3jmR&Wi5AkSj3;XN{ zuK3g?Df{A+ZgB^rt`A#50wzK!6nz>38s51t#lSKisWnA4FJXHkM^AvpCnlatiL;ncZ5ecQ>4H_}nbj z*>I@MVl04ozxa*|9oxH$LzxZ5Tg{2!y`7;=c~j=+_2nvg0m=FChj#~io_0Hdi2!ei zl*{R&4xMqlT5IFc88GkX6M>tPRKICHfzI?z)30=nUBAR9AYN?j7PoTG)?dx2^F(WJ zH=;X%O0(1492Ap*LS9D`7V(&;Jsyy*E!L_0^zrJ;XaaJ)o$2k|m9oU+SxK=mPAzX& z$RpCK<0fGC?!Yc24%a$o$4C7Q?uIVlsTq7L|n5 zUnGK|tc<{($+IsQE`yB}>leqc5%eSK{!(anNzkgZ?g=e@yPdL;@81wqB9>pgf7bLQ zm&Q7YE~KZTu|{3i`scY<6B|Usy9JuBl8+xs@T3Xc$Li7>ZXs@clirH=zYQ2DZlb zEfR~TeMlgJBKu)tPl-hS0*jiO;wI$cQKzGq(n64!oH+*zg5qGHNL~k|(<)X0^o!;7 zF(d3Se@$WV&_c(jCW`0KWgV?Cp{Rt@4Xq2xNmBt7t?`P0XfpfXi3L%oM~AQ{(#k5@ znhl)UMg`g9+I(zt$+fK5OU%<+8Rd2yiI;Jd{-+e;#1+kL^AjR9BaT2yKMkOykVaP zM&Z20WX-I#kpm9{rVeiT=NX2R>AinpkcA@6*X0i9b`1u=S!7jU>@RPeT1@WWB*dy) zcKO4M6fqLdMR3^@&P$TCclwaPIC7VBwg-`97v4l>jZq@Ri)VVzLm^?Kko?LpgY01% zOy}p?M8JJQVl;Dec0-Vi8RyUt*!CEhPPIA8z6>Y0VK>1fqNAaFvc0! zf{AE~BBSm9*y%|Nfi;LI)P`iB$&Q9&ZGKW%ofn$MQlz4>EZoHG?^9UEBj+eM>%8+_ z6Wuu5R)p&gfsr~L8rS}rDX*raDH(?SK3C9`>ZsWav4EirU*Zc%&K01Wa@)Mu?zrT3K~*sT^biedkzhVVe7sz{~0M$qRsz zB~0K69yVYe2*p=Y)=9cTV?qa&y0iOXPNAe zXV|O}JjLp7t)Q_tf@vebxaWq@h+}!{7{^gC?)Z+dss#)9H3t)oMweMejMLts{y}00 zvuhm&yM`h%@Rvs}JkhD_b-lLzKBpLb#1Jad^glu{e>|Hej^+hLyFxj(7$RX=caODt z&sfvvv_B(cxdn9-cs>g<*D?*tZpLT?-khn+79LCYW7n=osxLBO5h-_E@c@?X!!>cb zjbqOY&FOAnJ8TTT!1#EMdcxq(a2Q$rrC|Q1)GNa3b-6r9wX9B@j%)g=0z)O+mHB0r zzVypL;@v;3X2gpC=Nj#IwAgV!7}2$C1Y^29x$WU zmgfWDuGYUtaePEJy{$mV2dd%77t`tMx!8|rMb_6oOh5$sNB+=NI39#te`-yYrk0x#K^9sw<9bo4C(K` zUN&_^!D5DtMe7TFYJui@&O523eqHlo>?*22+* z%6XLj1f>ex&A9-=P=meo_Q@f7EDvE6c-!a&iS&>U)N{oL@~74uabd|xG%Gc`lEj%m zdPd!E&&=FkUs9h>7=kE4R44kH*qIBHXJ-PO&*J~U_;PaMNhz9@6m*3po6({}aYh~u zGpH*p7$cwSUFQ|!hN&`>@zaxt5iDsf-+g{N?FY)=HicE1<-Fqfr8yCi9H2;~A4*yY z<7e*f$W}{<@1?nW%Y6JshtadKCHnQ;lHYO&RbMl3xPOhCMGFyB3FoOO2qHFJT7G{= zkiWZkVz@cT^_})%IdDj%+xhOVOy3w7XF)SQa^cb&WA+do%R*s0G=@%ZVI~-3$#?}= zulYvs0$A}qZlH2{zOX}Hp!2DOi5GNT(Iy^o(+RR&c||!b8_UYkgam8$=M?CmU!^L7 zwKDq&e_2wTS6D}!A7T=4EG>H^EvYGz50|r`(ihRm#!==0-Q&cs+k=80`K-6P{B24z z&R8>T!M9%9?bJ`Rhk*PZ*B99|W7oGIPM@U@M zFhHJ*eAI&Do}S(cU9u5;Q&91e9y)NB zJxe?faDC#u(vGtZYQx(P zQDYHZmq?B!t(^L)Kw&JmgW8IYn8y`4&0uwSNR$Is56nQ9g4^wN8KZHBm8cpqw~>`OytA&$u>kb6~;-Gd!-9;K^~I{DjN7OeksWv;JWfwM;CQC+l_dQ$37otI$!PBbuhZLfj z6Rn*fIhFh1=M}djR5jF})gWpS7A;DZKxVndN&#&c%hhc$wBH!;STMH-DB7Xopb zp*xb%uJYkVl2MnAbw;;OSCT_r0O-u{l?M}ZPm9`{yK>vo;`<*v?8NFk;yVb)#uGg5Kd8Z!y^btgI zJ^7KWD&AT4fLo2haMP)KSop-RztiP$aEIiy>zPXdgcaL#47k5^jrW*tTFD|edJ|)( ze+l|Kx#Ac^gBg!3SmeG=G~>p4=)~$mCY?fSGVE2`SPKv;NEl_DtAvQuX~7TMNE)+t zd}F8-{ah)8#+*57b)R!_#G%pq3QCq1Fgn_hHCFW>J`eYD<~e%dS!?sjE~`HdhmeWj zPHfy;wu&6*t_x&?fG)GS7@=>?ZAhy>eZPqz=qm7UZ&LspxRitWWV)UU zg4Z0!RK?mqlBQM~+7Nf?&`%;O7z&?0(A2nQv$xTwZ3#IYkWogWg>`)YCF(S@avML@ zAPKwUm{7Dfdc9GzmzXH79cI{2jh=H|!3exf;Dibf`G;Y6>{zT40cD?!T8%(qCePqK zzt&>w?uU!5b$k7zFIMYc?V)7XGc{Uoj6OT|Fl`DDlQ{KQ1%8WsGP=K^@Es7tHve5p zN}AutnmnyDJ(ssW3`AII^d8q_zaAr9-I8t9DJm34CLs^E+G2h_3=g*6X!D25Y>o3Q zisO#N|9Tb-YB_4)=>E}#f+;YE6DW5m91meloqnu3bv>A7?*bc0+@St4nS~yG-BpUf?)6|S>qPJnGY9kGB_khq*)v!QXmu_hq@1lZ%(&z(+ zHwbV;4`r`C*lxf0Hgv*)7>ewivF)e*W#OKNK!vM6KU%3?r_VL121GomEKBvB>>|7C z7*lH~9#_>HtN-8`Zv4(@3^V=~`4v7e5j9OKl4n6lV%ru=QQD-?W<>;~+Zy@2q{jX1 z4~ohV8`|f1CS^%m3vw3|?Sx{&m02Lv^WKPUct~un%J^ccR0SSLJpGN5Ll2m%e&T9{ zesfJkjH#FD*%DgWfvZBi=BU}3$yq#FinJd$8z7>#Vs8v%StmY@VqIk+0j!aw4T-lk zO{_TVubgL(?I~Uhab6jX_ombt405m7Y!3D;{%y*<60&aJ+B{^Tz-P7?_=cm|f{lKG zZn9L%>*5x!?kLD85wRWV0VJa8hJf%WD6>5Un$i|@eV9mcl`IbPAinsMD(0*i#`b~J ztqQqM)Plu!@B+jM^lXeCK|xrTNz=^=w5d0D@JY4e29DA+>PiU&#kGonQ09vRcxqQ0 zL(ry`#@)Jj)wYIIOviEURnAAaKw6#T@AXsq(YqO7jXv<|`%+xem z>XU3@-6{8|EV?0OtmO2!wN?JG$kc&8H$nF1~hHc+WGI8%4NfAz}%2Huxf& z5`F>=Rivk7{Q7$2=k3A@(^n%It;RbQjnZoTCR?&Pfg7ud*SePGaQUS*yp85~#4wCT zy+y3ME>Bi~Zq0ax^AW?%g?aw<*bmDNI%o82v+b2`TpL&lc0)v@9|v5^>o*d(lE$%N ziGgHEYYA<}ZMjY>wcCEQtJ`OCZY}QDddNZ^FT|=>2&yiUim-zTCI z&BAgOiV!PPiX@4ZgkD`lF^p>6@!+aPVof34y&OFb<$!w5Oo>e=m%_26{i(u%Ft2Fv z2q8}KS%tjW$>Yc6Bwcvg3$c@A!%#(puW)*6GmdX^=UA#-Eo#nGntdS|ZOX)W3F5|^s&j?62KXnLmes5cn%B_CcYrW@gJC(Hf_VCh%A)pL4A~BI$09)8zz?mO`&`gv?4N{ z0a|{1f$E`%zY56B6)zsFack2vD z;UoI==+%mvlYYdV+7PhpoJMDhE+?c~P zAIk$SHL@$6)rU5|C%!1GEh2nLslfq`M?PoIT$SJC9P;;&C=&W!aQ(L&rUFu_5ji9I z7)-Ucep_c|3N&OUZwRIUfng{t*}!h}muCfK+Z();lCTF93<8 z%h%alL8nyh3af@gI2h5Jt}J2lc6yy&Ga<5@QWl!&3VR>f!kelpS%euc-B8|h%m1`Q zP~!Gv$B3078dq-VaYxQc`j^_`57^|WyHohFeEzHE{mw=v5;Uy5DXOeN5mJX~C|(M= zZ$r#Q6b9zy8fIVOAaukaa;88pFNZ3`kNq?wcUho>PM~ZXLRW;xBPFJYqLUL38;(RgMyWN@X+hnL!pNFa z_WU33Fi#iIqTVBT-_00{3lAGRNF58SV$d2iur2Fa4@b_wgcq0zapVCn7RJkLsSn97 z#*#g)J|X z6luLfs;brNg%zP)w8Z6*-PQw5wx0Sh2M%S_XGyyv_>0R*lS{(oZ%@q&DN!>h1zLi^ zCs*rjfDX`_znK9W7TS!Ql3j0`r{|o48~ZF-N)*gSeF`HwT)45{%_mnfCad)T+*yXg z6{r6S2TT}(puYSMG@>5|b?7jBfdiQM;+K1zLR+F6>W9!Usvwyd44^VxG{s}$>%P=u z7O$veVmJ)GcUroz4-+f8vW9yEE~v^Z!p*3Jl0$C!aSsxE2$Co)ySg;zfX~+vj4Zm^ z*o!<)yFJ8=Uww3c%KLn|FpbFy8j$!Q!gcB|?nPDoNfZ>-9(P6zJP-P9A2uPel_dF` znni9mO3rRarBbh8F2rL5M- zz!$9}J|&{<&DQ#L<{0A4y6EDG$1trmc?~v7b%EO#gvF9Zy<^~CLVjKuYtPx5F4hV; zGURTA1dP9tEDVDRLpCvFc9`d$;D~(Mf&%66_$FM^<5g5Z^Ztf6m}}CIkv%ODLM2_s z%Nelw<-ZdTo0}5!^6bmJ@YE2ge2zRP5bnWi>hbO*`_3)O<;*{r38LyLn%MC|9tF6lS%Ae_Gh1q%d*B1Vq z%dB~}X^Q8g`{lsyOl_AfmuKB;EB$4tes=wII?gBHP1-jM%;)5nUdJj!2hfG+Wy_!+ zL*`)+OUTkJ?{SNQ`Wn%lOc=u?Jg3doE5WTVNK(V{MYV(M5;1r)ivuA zCs_|)WP{fO^Ot>8*c%LKPN0oH@X9Ru6D8;b99!Dp9 z&c!NU?w{{344=-RWQgA5vhM-Cg9~e8Di}B~zwVqKm&&H;oK><-^#aQzMn%FRq8b5u zoM)Xpii#=1@VMZ#Ui*5u-zVVtpgiMt?cg%=*&)p5!~VUr@0s7V)t0Y+ZI_C+7rRgI z{1k?q?|ikkc+D~58JcRugK(Q~*!cRwu_NV+=Ad4lpYPl5&Gc$}z(s`L%k+`lyDNU2 z1%Q|Exgncjry|lxy!X}HuSnqI;~99jVO2||Q-2a^ms;a`^0Q=Hhi?W#SQju6<+E0I zA9gnbuB;=TwcgwdvIE4A%{M4Gnq2yh8QsQSta1fS*YfU!PBoj^NU44CBQ6Z9wZFd7 z45!a#Up~}6srhBi^cbJsAzY@$QM_#jPS$WfM`L{SA)T47b^!3XBE|=iB_QLfk8ayo zTy-4wqEc(aLVO(_s-NB1`Q4P>uX$Fz4r$?W`0`QGI4wC@kfY=jpG-DC{KB16#fl_X z{dfMimhV)7Bn~lv_*I@Sp3!zjzhF3zwx`O&s?FM?${C+wpC{s3@5XN5`&T-huTGjC z+VfurYwg0_yE7X}qI<0(t|p-|X76JL+K48nXf6q}T5$%?1Mz+YHw?i8XgziVSiUbW z2gL!koTSf|0@|QCVAf!a&Plk|5~gWP7}>^?wOf!q&F6C1-HH@^&mCoN@7)t^wG6rC zF`f+c*)_$vcH8CC=V|Do9Po*MCgiA+{-ueHw)^?DcQGeg?6fzM_;LnkH>smrG;}aD%|SWccN&}&0()*8L$r6`yEsMRutBEnx+)Xmu0Bkp z$e7Fb#pZq1bR(&~_{1gt1?Uc)S@7z5T1~Zqp3&W$)gk!$?BnWrDChqgYGu&9gJbUr zZ`@DK-7!k|Dr_e})Qjosaku|?cZBuU(e|O!J1WbKo?V=MWV!tiY+PtkqN?9{ff7f8LM5v(i($RD)egos3oQ=sdLqs)}R>1OyBq zz=h&Dnekj***H6E)l(J7?f3p8zC``M;Y&(6ASd|0*cT7@|ILGUjG%1jX0brAYO(5b zK4)|fIsC7M@GoL&6>21Mq%}MEWKM>yGPbW79f2U7=rEY-wiDnYUZ?$bt60d@8wTe$ zU+z1CYxj82UEx8!XijPvI(+D~>{JA=MuQ7B=%ZH)M^C?a*dwtT*Qte`;L3t{_D8lp z?6w{X969aRrkumuPEVPQnxAr>cL=XXsRvi@_+T@?=kxzesTv3mngoRtWRzxS58)__~5t>PoChZ&Qg>G#=4U3HJg2MLrL?-sp;d z{5UoDLd5dwS#`^Bqy5QUr(78TzKziR5zV_FMgUp+feA}1;^67{}VUe$2==Y zN}TEzR**z3?|AH2Tm2I#uCSi@m_uLi;s{r8bk5FD@f6vW#;Yah)pDV76ra$7MT<}R z*K4yptNcT6S`n13IE<&Pa&9L

    1+BonCJuY0q?>zS%y#4Uvk0-;&bo#X8xIH22o6 zb(g-Vz7|1z*>(AjYeASch27OKk%)ZM&21}KDYI_56)LKp8$9NA=Y0p4otKSHGYr*r zrRcsFF40-sP3f|g6IdQ6k+kktCo-{jq7+&qMZMko3AwY|ftLg5Ek%50X~TRLSx@V; z20V0^2QDwbzv-`!%Y=@ zOl@9({Hy*2l1sCc`2`KZ&ves`>Sz^{?ED^{e?M44_g7U%(zlSQJJ{U4Fz30FBQ(Pb zxgA@Nl{NFt`nCaKO{|K(RY^5DVi8i2oXIrS&Jj16u$e{cjOi& zVP~Fjq2gcH`%lXb5qw6^{la>E8!CXgA_n)jMvjBPIZ$4&^M6}5HXslJ;q&`YDNgVq zC@So{Zk2%&5E0hp=BW%}^eJLchhFFS`t=Gzk&pukC-x>LI|&>F%BwXP`22pE#&h;s zN_?4>U;oYx_<|hZo52kj*2BrXpkS&v>>aAWT;6Q?-v>i4t!{|T&584?Av97vgD!s~ zBzRkn?e_dj&B>mPSW;=RRhRLMW*F%cgpE2wf3@eS)&4;BvW#u?l!kl!4~~@sO7T?q zUY&z_W#(wx!veP@*s;Hlkr&P~C|1tEjhiht!7&igl_Z?86m)FzMOb~yTKQyaGE9+M z_aMU862}-d?6r0?kL`MRtfZhQ75%0!1`pZSDAwk6;`90P>c|dUADE$|;j+M!*LH^N zzYe~9xe-3@eZb0;OK~h|4y<`Ky7YA7dZU@GvpPdorOTSlK^Lf+9zL|ooQwq08J&!n zRF&gRg$WuA{lYAtQXh|q)!q9z;!$tq$V|Wo6Rc2z@99l*8Fl2;$r|?mZC8*OjTvKo z__14E;;@2N^sG^ztveFR&^wAlP-VEeBa6$cA=V0{L@vZ_IQX{$pir6#`&)VC+-lNzG-#7mFMF6T&t7-5$kXnc7JbfSi>%6~QNN!t z5CZz;4r{sA`&|fNDc6NR*!ldiY=nv~Ow2ilbqu`T2im=d>&@bZ^=579R|B3SY4WchZ?!Mg}f+D+5PF;NronNlx(H5EYBu$}GC6VVA9q+T$ zw{5!L&}8Fq_Z1J-fhB2Uj$aZEge+i2z;Em}m0<6YiOAW-ZE<-%T4ShOE_G&8z%PV$ zS(LYfD!M!K1eD2SYwUZ2&l9O>?$)Hdt3EW5VeCsHa(9gu%e1ICnNzGao)m~STq>Pz zQ2D=GiQuT0|dtn&x#!AwTpAZHBK05hitG|iA9G$nOnEv%!VP^77}v_BGgNZoRfa^f5>oBW3B zAoeJX&jc&6Uk7IP-oa%TgDwM>I72p#C5*ljoY#u=urV-%`Q;(U^bXak5x5=*o+o-P zf1yNWNkHKQ!)pd&tk?pq4sK4nbRNX~*yT2H(y>8E7<_5@U|@`p*=CKNi1^Ohu2|WKO>6r-GGq7QW(-O9BnH>AOSG4cLmO^7P~c zwgV<4heBTt*wwehyD$bbp{dMahn?#YgC~85*~b0NgUZy%H~zPkviv?H2js>GD&e%2 z+(Wb({de8IBK^7&1yw7tDpk-N3xcQv99G|B)KY8B0x#KhUdf$+Sdp=~6clC_=TVr= zLLwdrgtV6bsb#1(dTtu3uF4P@%+Z>Ty6Ts0Oh0-eToMUO!XjV0nBs0nH%)?Ux%o6@ z@gABrxjXqlkMSs+#$!Qq4stPZ)6%XWI~?*|$}Z=erPLFJg{?r@LYEeLUzYDr$jT$U zlU-)^BMI$j7?hPo#JgnfX)`$vPyG#M7={4+s`PwQP!H3zYaLM>pWZym!m^lkhA4)b zJLO^&qkR@ZZ#`}H`;6Fgn^tF*z>-n&!={yp_Uh0TRe2=#R6k}OE(!@wr)1d3s2~2z zQPm(=2su@SU7~}p-I4zfDt-lj1=KY{DXs(#+m2q>8P#_nVG4w=KkY<20K{=GD@vg8 zet$_Qg|rz}j_F@SR9~*QCuT#iaCw)&We$e^%lkc3RBJN4;=CZu8YDW(=$jCeE$=I~ zo!1}qtuFrjpE(1Muw*t)Kb3=fdnj@?vXGQ9(;G&O!FZ{(`s>a`)i~BarUT{@kth9T zsQ!af*P3DqaepomP8)Q)fDrA;tJP@Id>5KY^lJU>9bRnDDxsqLofLbkM)kUT34cVsD8nqlfK=zfy-c<8BfmVYqxO9tPRjoa04V#_=Q?aLls zOY`>l-r=tUKF`y5tM>=>nTJCO-owonDs+ad!Gd+R);R#HUEV6UOgD|$|CP=j)(W=B>9rw zVuYSTUV;Mpe{qrwZ1PS{gk93qEBK8-y0D9vs2K*=iIz$K-|S)L^Oc<`lkX7XfcF;Y zUczvKj>BOclC3ngcluk8Z?w_QXX<^MO?@da?X?k+JC;HJ+ALFYx_p$5GHHxzm1WL} zP%SEwkaP}gwhc+>KX?=4FaqHN-k=c>$!9=i`p0B?8-dPPXl-|&axLz#{WzJn%PJ}I z6}!sopMwwt@-3}cU26Jho=+jx5z>%E;+k&fcYEI3)<*6JN)tRG-QeZ#T61|Gh)fe=E@Ud_(m( zqiRh}O-4-E=a&~Qv(bt5x~r?JnPBT)xCJp=Tl(_ya(6E;7PA@LEtzX`XY6w0y7i(z zXTrf!g`x~{>(=aM(ka4ZozI6G<~4GP>$GISd7|2-3y^}Oo$MwsdCMW9za(prN|!6^ zwSsKS8dJJ-Nw&sxP+v6{g6K{(op0NQmT!;lm7(RidZzOF4N|IgZ=u^=vo2FyIBg(J zsI8&h;P-2-moF}Aox|!lJBfn%8gD9BV<5GGJ`s1!v;)eWTaLos@tdXNDLkE!l}*IK zwc0pxHHs%iZX7Tk3^NzSK2#aTG+h_-Bp2?fNzU;?t zI#+U0*hSZhcU`f5Tj-6HhgqF;YXt8eXhzGeVK@*mxP-{p>{A@*d^$oB(E>zroLrG$ zT8Wjk*+sp_I8!=S>0`t1gmw+i_-g+*$M(J+SIw&;k{@^^;0ev6v=e@*XM14h<@j}I|UXAjcoVBfOLqQi|f1r`i zYF10^f#y9=i0r+bq(CXxp)8imhmqC zAFjSCsLifxyNVZgmmlsrk66ez$ZIt)^x7r&SY)CxXLwbMxlK)mv`yP9~ktC;_JwqHc8WUN_QY zDEbkGMsMn4rEHOu;$3p^<*j*FA6BoovHiscWLYiw{{VR1=rYBnW1|F9yHjx|Qd`em zrV;Sg;8Gj6@6---g&WHg$b=+q6wy%Q!xZ^bPhWgW>J2!)hh<@6VT7@ks{qAPpu7eIAnQ#0)+IxqKZZ`=87>{_NpMi9>UWYIC^4 zzRwP;Mqp4KR`I}~u*_jz zZ0c<2u6fWbczHa4#p(Ct0ny-6LnJi|lc|;qt=yVl-0t7p=Nh9&u{{a4TN$vP zU7&&{S~im{vH|+@%`F6(^20LefK;p?gs{&2&=#LcB9HttE!O<*DO{kIu{;N6LcNJw}pQPedIZ+;GDieq~0k(WX%{3NfVlGOnrp zGn6hQsNkNM5i?2=YxM=)D84$n#F1%tH-a5izAj{!RM!KdpaC_?)8^r)&+MSmC8M#( zIfUAxTCY*@1&`@lRM~Gf69f{g>{rmFO??`f&`!l|X$)YPCryt>D%r~N7{r+e;c*H) z5@5SgsglK!J3q)p97180lJWN6Cb^T%ck9iBe4KRg4-#+tIXYK8xC~Mk=zhfGTGodo z9N&X4u>WPX|55LV?apWO)Ip-0QRm`WvVwMhKZha!Z5S7uef`F#$zF_6)Ruu8hxM*~Qi0;qs8f3@l>(L?v-!Gy*a|`U`oQ;zixxHH2rk zuvG3>YzJKuZg-N@Qmv}%2^Tq(>YlqHrkAUxgR~OCYLMjVfM9EK-IbZ!9Sznt?T3QG zAJZ*pAic?$zBMuyHM|(B8ot&I{A<|cBrh&!K<`_6B)|Z_Ys!6g8TrW>o2>$(#9eq~ z*m4WFG}>%wzWTUUgSf0bkFGRyj1VD3I6lERzm_upA7ZE`0qmvkg0@a5FW~Sabesd= zTJ$o@?NQs3Ld!G~fYxU+3b}sybjRH4#wqAw)c`X2mm9)#yQME*rm?u_(Zwy`eD=yM z9W=R^%H3xyG71=d-3|l zYV=v|z5q!wc}7jlzfpzA8(OSd*%aV#POW-Iwh~hywd^>eOEq73RP7HoYO75uxVUqD zqUEl(2w;+o{ZJIEzO``6uhsso|9ixH0>Y!HzD?a}zX0fEG^Ik#{U{_kh30`4t%HKtHXToT*d z($Zg%PtWE!UYj_i(b+z1EvrunLcO~0q){mPDkC^r=4#K*uV)lf`@$DY=Uy(p;6epu zix3>ml;Cirxodd^eyMEbBf3;ld2ET{`ZZ(*g{0a?JYeR+%ELS!$YK1P{aC43dIqwuI3GH*L=w>wda&y>(k3=lT}9Iw7h1uu_EbV zV33T0g1HO;(dWj}MJ&9LsJ zjk=41-1lc{WA`A|@Z{@Sb(|Lqac>%cXxv`A_g63S{jmG{Zx&3O-((p`P$Bg@9}%_A z?=DZP>{rsC=qJCzY+VKJ_qjxzVI6{;LDd_EC8L^>GtcM~eCMk0TQeezRN5mV|_JG(Bz-@n-2|-BW8tw+0IYyx@<&LZymm!hKD7rcFOl9&Gw} zIc~5EdtbBYue@L^DRX_BPv~t>zNx-dXYWX2>WRX;+#pisDDt9CmFD1^cI+x~>85*f z2lfu-zNulD>;4p!VG{+HPvrI?)_5c)0H*wu90}OM>w&He4032BB;1#34<5x@YAGd0**_$sTet8QSCkmxyafyU)zt|m!L%U!!d}~xPDYPZ^pADR zE1fhR5cCe%8*fDYgmH+_p4T`AU2+{Gf{yyHH3De`$CRTRmasWeZ8^GPe?vXz3He5|AS2xE%#wFa;xs ziWLzfT16B535P_#8+3;XM?I zLP?35H$=9wd`@=^&%uuu@tX)<$c`v%hyRqEOqxz{s%B~_i@Kl$28zuPNCwh<3_PM2JvE|GnBBD; zkrvr)x8km9EcobiN)8M;We{5^jlK*1wAH0z3uJ+G=c>h&2nwBF*wVPJ!rSvthWq_> zRyB{Rn0vpr?yKvKVy&pVUy@(X8)wia&hmAeDcydOD_oFPA|=B-_fJv5pC5od*wCC3 zUhEpH*RNev(VqQ}Te*Beh4i2dTav6S#|6DOkUt%9x$w`w~5<}Z^c%y$Ngx{C$3MamZ{!v7K3qr z8?;gEebCl*T_8okJS;(Ap*Qyr2Qj1}YZNvUaRQ@nfN!3|74R zS3quXF(b_KA_OJk97k*vi_8z}M5AB3-Wshq_SAg1@48GNzl()4HuoI&@B+2gZxHq7 zctu7Ri0F{jRiUDIS-oQ~k~J6$5EAYrTpqsUt*id=U7*5ByMzp*`CUz1mhn+2=gsM| zn0I_u6>^0|AFs#^4w!h!8}2$K0!0a-XRSQ8>^h9D1VD9IWAZs8YnWyA#Q1Ec6D98a zfTXhU>{*gpB7rv0f0c8O#B?wB#2%706dS_;@zE9EPbdXnM5=s-PnlRa_Vg$|KWMO@ zYCPF?2Eqw&l(Hrt;d}SntDE}9|&B|7#q z8(T!x_pi|_B-%YL9KoC0=Vk4O}K)jzn1cHSZD4dw@*P2Zslc_a8c z5)yCf)+=Lw!72tE;82CTCAT0nZIIxKKUIC`^4(#lv#pZ~=z{4=>at2>Y+MO7gFYVJ$-ki>5f-AoO~@7`$~H<}hqx;pDkL(og9B zpcCg}Jbp(<0ontB`?fOxT-3ImAoqh zzH}lNc228&>5aq}x-L09P6HV;9x*G9?z`g2Ixek7!io1oG#5>6<7)A1<}bgvJC3t6 z6eub{+&iut&0i6|)$^{|iR-hR%I;dE#$`H=8J@O&{qNuzw5x0@Qg<9DQ)P_!F>cxk zxG{6b4c;3fJdnax@)J`+`cldm-M%lS6uxiOuao0tG6Od`LFGSTn$?(-DF8oxL{6?t<{bRFRC3c#Kpt*moZn@Q^>Z_Yb zl){=Y&t_%D&uNj6d+W4i2x2LE7J?r2tRrLGyEv_+rlxjU400@8;q%}3iDLXqtjW0IPzSs=e(rl=^r8YX3az+# z0I3=YpV?vDJWQ;lUG*Z;+=u=0$_tvC61NJIsjTHll@!J~aDX}%>+DYM;x2mYuhbe9 zS`_?s(QZDlKh0ZOZrmEsT3~HC7Wf#yqM&S5dX#a;$>T9~39it<1G?g6mX9*?FqOOM zm=~AUF$;^?n=~3bp86%FEj_G=iv$PQ?g@_?)YZG2K~E|YA9ohL`46lQTG~UHkN6%h zj9OYNHNDzXaa{tq6H6I1|3hX(%&}pp%mh9w7b(>o?yfT)h)2@m~Xa#{uw8+ZRmwr26N%E5WWDaML;uA1GMbo<)FZ2*7k&TT+LwTfIdz%ROD!8&8MRaj60x%w$iaXzsNkk(e9Xk0roK zi*1&~0-CNlIT^p0RdNCf$+7xph3aNCRW$VF(>2B_Ph4qV`Twqp8kl^Utv_*F>|vXK zMOq_ZkFl@QB3mz)wsh@pCBY_j`rB5%1pZz*_id!XivWAO*m>`0{QPMv+1T^IVh(nr zFH=gyUB-~xTid&FS)Q$SYXOd0Gq=g?{;D;EBhD6{j+mbxEy)Zk@7~O3ZGihNO+9xs z=8%bIQMo>a*vz=Qvt0%D`rdU4v_3pBDInc;c>?21&MWiZ*`4tgt=`i(b)0hswAirf zD39T6{>kF@P`2fM4f&Ye)*afEoN~MI*m_;L=6b#Urd1>FVx66mv;}yfDKz>%;8`fH zVyMrpd5q6%fabE|8awGMDg`j!@B6eN|8%tBQXulc|0oyCTUV!AwPS%>n2heZQrddC z3L{6fwAi^N!ll4e(Zj7Ubg>H!^Pk0d8-OwEm0@j9$zc9Q4J(Wduq_ih-V`(37mRtb zqK6N0sBj!{R2k4U@Tq8)h@{00w%T+jFn@TJeuTM_DJh9t{>8$9yfcUe5{ zq!+9n-cnMr?5BT(ytWM*UQi+OiKl>^#=@mW=iIC5)gP(hpS08Qx*_Zr(v9*sK!V zLwA{^?zZaNJf3#{IA+3O292TG^Di3Px)3(#&*+yF9Mp+sZ_gNZqPr6Biy`D$Gq3R6 zCwtl%8_w`~8mfo4P_RK_hgj6A^0}cT(q;;8Ab#EgL(lb!9f%+3_H zFW|Fx&RdwR^n>wi!O^j-QyH#5eL<+%zd68+Ui=`b@y(kfLP)xSoNW2WQV5zyIZav!_fh;i2<;Xa0!q{Z-tb3^=Y#qj;k zcqkSDmb`+PU}u)M8@s&{(S-|u%J(Ve=`dd8Y+%+boYgjSxPbSvojSf}BOiRmZW3^1 zEu}=HsO`su8y~+Q2H?tluTYn_54S(Z0MU6kb$^QkNT z?fI=hv?JP=gd`{?9v=DWui|HLTX9k-RrYz;+HQ?AL=Kf(T`gsn5y{92(^B#CqVC^8 zrtI^v(o5|czQpeO@`O`{ZeDxAZW^DdX1h<9WIoA48mS}M3>TdP)<1~B1%4M4uimb? z2p)u~AB8+=;PZbA^d+Ia_QGc~THYVJXRu476GP>-#`uL__K-*Pz!6-fT588a@t^JB zh_uQrpejsQ{gTGtJ{XDwSIvR9$Vg)w!GU?=_12hMviQW2&v!IahZ;?^u_mfNSl}qC z-V@V$K}%T7u(}E8FY+P3+d~E>n>WZXU}5X=9PqZ}%t^r}Ci@p2wH;l7{HFL@SnpUD z7HwE`$NO$374VN?QF$geMNrer*!RbfhS=yn>rKk%^Xm!TkX+>Vx-G>-K z3J62ltsaaqkGL;gEZ_dtN%V9y>VzlasogbZdO4pAzVph#lG3*fzPm!j^;*T!kfi2= z*F^w3a#kBkU8PJwmJaM0ic3mT(lSsq_xk}`l87HTk4jH=Xh81@$qnz2!n?z`933YuLetr4sW~N{mi@o$gWzZ<4sI7gjmbK#N`}|Qt5uQTVpVJw4d)%m8udo@rVo5-k0yc!M2kFa+>Q{CDMlMn`0O&7 z96SlOR<@_7J2l5=$BomvzuHV)@=qT5fb_#1HGKGXH0m>4K68BLj+{ssRG8aSRRM;o z#n8Jw;2uV)d2R8WPI5v?p}tS!%OFOik=<$Y((S&JPuqp%7AKKd`~3#}4joPD3~hv8 zYB|-YdMo3w0Ce;f+hD*_Mun2&29-&TKJ z8hxZy{i`<$03VK*pIYMfo0lf1msDN57aX}cx~1);Icr*395Vvic%usELx;pc-S9*LUfvr%A9V}5oqlG7C9*V(u+xt&)^2TW zZzIS(-G-N z&u|bvi4+GQM^bx8q>qZ7yLMzqlkX#p6Tjnoab^vLcOqiWLZfQnKhMCKHH{(dltg=u ze`LmX951u#4OCrh4lzE#`}kiy%Lyy644uQ@Ng+^F%D@?1xRUz$P>_kZeoP!6-K`Jt z8DzB1E$Sk1-}j^$CmuPg)?)WNbf%%%Rn=HivWg>&(L`!)rzY4Iu~k8^^+6_3DY5Me zmnZBEjtC0BwkdqFW=f0^PhoXs$D%Uxv+1-$TbbnUu1AcvZyzfmX zT4*@MR%9Zv(lfMpyQ-ohq2cgl_s;sApy0QqAbbwZ-Yl$sNR~=$c}qmYAzZBI>QH&! zL?)*u^P z6os@$W4d2OdqqscEZr0L<=IXixMF8!#d_38R`rlc>q&J_9?*26vMOJiqqGyalye>p zmf2pa7Ek4~c$Z5ds-Db)K*7*cetG|o?7TDik0L|&$osBt`rpN#*vHTXhD2P{xYR(kkTHbW^ZxhSNBBl*pA9}d^@w+9v`?oS&Bh;vz6G#66fXj z)&35*$%UIyV|;$t*c|>Z>6cIs)WT}lTSp*NL~d8W!}a-_69r`mIabLm7q&T><#Y>! z_IVbDLfRC5AVG6NXxr=7*pAZs5}i$O+qq? zJ8n&o#YM-LYxy{IL|7djZCR^B$MA*x3nPM&vd3O5Dv&Q}%pIad*{}T&+Z_04s4shX zlUZi);K6)dY5pyk3<`x(>J2#1nZG2Y>O^(!!(=05JVBi{M#8l0ECUsW9%w92oBeEO zd3v7a7l>&RlEuHpx2ZEx%kQiuvOo~2d^TP^(vvX*TJ!ct9+QMv_pbJ0G*OrC@YZdW z7r`C$lhIMmhA6p&fnt6KC*(ZO3gS(OoA;HX6wW^e_YIxJ=KWWuVEMtfu|*D6kQaLZ zpk`oj*mxImzW$pGmINFcvJETe%C2(o!m%PBw zK_eqn<|lGgvnGY|*qpX1>kB&#ieeLkfc_0q*)ExYA42R4^)@WFlvm}-A9v2fc2;TOYSLQ6Ht0LKZ74xY4$?HD{1k~;X$I5riCBH`E z%4!P+=?Y8`^D$1Hze$zmIUlsjQXu&C_iq8AYPMfw!14nok)Gn%T>{yBk}Ck9Y~)d# ziW={z$Q8q>X`$v~&OlbTGE8kICW~^I3oiOKbxaJXK?T)6zSkrpke2z0=C~_f=6T_@ z>gyqJUyQ`(P8rk&(IFN{RnqKK0n|uiog9U_Y?>Ddq(!XON5-KNQ|-+-?lLLw{Rm`} zNR!ik-mYyum!dD`=cE*@DXiv+_N#T&AiOG$13YQ->($l{jtys zi9RSPa`m83XJ^-Lae=SLaX^ui{d!u22d?9(_-7#T|4s*@9Ydyf^T!=RJ+|x@$gX+# zYj^|Y8>lW>^4c#VP$0rrG%lfSDAI4J)b4LE=r5V;VZAAWC@3R#%5N#@S7qi)b1bwA zCyL+qW_*)ot?vK2oXA0dZ(DRAfrFcEjoFX(S*Em`g&kYOkG3$K2h{A!&~j6(a>SQV zH39P;f9e@854`GSSn%SF5rWNIDC|og7?6R3ORqu*oY&8Sr6_$0G^^aLK@=xIClJdy z7W))Qx!9JJ0c46Or_>J0sHAjqJPGabRfbB#a`ykAPb=z1KM5%?wTzkjIcr; zVOk|)@~0Zv&-i5}GhI^BSX`2pf*{jyS(F|%ri=c*M8?dP?-uECt~LCTcBIb)(_8P( zZc8@rE(#gFpUqSTWw)GxT<@Wtkw?topMTPinI}!|;D~O1;~BbjFu(qxVZYcML*)fi zYI#NTfhZBrF-;V%u*F!DxlWl)^rX10Fi*E%N~J;jvyAo$6C0#bWdrGf-YVylz-iT4 z8NZMLD-L)psAG?T)==m5k@oo{K=t-y_iv}Km{UL?1e71~>5Q6DrZxQnt;P|;4{Z3r zW_)Nb^+B6%gulyTXdCfgB})gm2tI^ZWxFqXtogxwVib}(^76=VL2pGwRK6ky(i*wJ z(A0{GB&Wc-`1Ex7Kj7-MF9n+E#`YKZkf9BI!-C@O`nlxV>w*1GsqQax%~RN96Wg%VNaG@pLPij+>sRf9F`$YF+av(q)i z@1mgZkLpsfM890()^ya%=Yv*$0*JsR(xteN+|Mv5C(IWOmVB5Mx3c2l-bkJ^mS70Z z*Db~|nO(2at-4uIX^Gg%b0lw5iE8@gLg69t(=L{8hS1IXJzS#VatA_klVRc1)~*Tm zMj}Yr+xnDU;8aI~9=a-ZMPFLtxlk4Pvx#6^;!Q|p7dWs(KS+w>R)fw^0|Sc*auX zAmYch(jQ6|g)N2g4?}ReBbIx?sP%oBfAi+xXx8NS35HI2W1?e3S5^dtF7gvDj!^m;Y^|$Pp8g>w{m=`)VQE)Xm>20?o3U>E znUyBuD+sQ>9F){dZ%d?mQ1zoF0AExz&~tc@YvG&6JfOL0m5)N4W&C3px+%a|gRuSI z-PX>LFo?DH3G!gk?G3k{5Q21@BE?rz@R z&#TGH@C1pMimz-9-$`e0w)0`(6XalRt}jKY@I_5p9u$E8d4XBG27O5!!2A7E_B@X>VzA z3pb{Wj&fTaEhjuCUz}aL1TWSuJlv#@=+$R0-;lnOUK>;NcumtQ`mjE!sc>+})3nvy zHp9h}AJg{B&hhb6+!}h26!cpjY=v^pGIJENc#TTjo8}!hg3zY5^#M5YN*UW{8*Z`o z;6RtRq;6Wn*Hkms=JUnNsiOYd0P>3Gu7bCmfI>fr#+*+NFy-2xpE%eSXEMA^&a|avsX$?zwK;(71E_ zc|eo=;h-xhJWLX5J((o{<7VQqx_X0PC@dlI8qqG^u%3x|uF4{TLoI1U5fdG-#YXdiK zJeU32_naT3H&0fi4%+iGus>eKPv2)$xUG|6g%|w}FFRq-skNYe>;cQU;|s68+_f}* z1NnTf&n`1x%I!X0T8s3tC-;AGv}UA)O3IdMHmZ41Mm_m5yv2*QIQ#zQ9p$xpKvm}M z_YXhd(8$N~(<{=p%CZ|1${*2ctWJe7rr!99iJi|Pi68;^z?ZDFms5}iR~{c=VRgVO zq8xwPm+GdiO541)nsA5WmWc2hNtXN}95bX>wt^-+%9i@*Xs%K|)m1SYuaAnT%1_Tv znRcDBlaf$woJp%kow1gzy4$)0o`LQ#?WucX0!$V8GOmu zVNln9p!xHim)T)iZ$`k6x?@Vhp-byqBDtzY3?6q9YWVq@Ly(3&pRS_Ajtf9JGq;H? zeB$oSlR~lfQxp$hQN(9w38aWs#hFY<=aNUO{K}ObKDO5AiFrHOoSCxanBD~S(3z3yv@~AKkD^wzInoKMe!G!M?FvAG zv@^8y68(nF+G#3_&g0T=uDNd(M_cpiXe8TFcj`zwh?$UF2KShTzU%wG4bxRAk0 zMEF~y>A&qk#RDUbk}SmxH+fSq#T7k;PXM8wrla|RUOHbUdt`96EQ&M3j^`m9ZmVAB z$4VB{&PWT!CDu3w_kO zdeQGCrQZ_6(&*loyXqmpw!p`b(|@cHt-3AI3JI=Y9?LHD zBf;_7m9QDwYXlFTgXL`mE@P6lAQc=2#zMp_u9UheF^Hzl6v}PZz{}Jm+!hd=c0?O| zylM5p1;eE$9ufJXAXu&Ap^jp+&NzT8QZN`6TPaq68d=yo3KdqYBaO?leI z0*2Jf5pDpGd1o3q((Agi!wQ-u_DAETNB`;#%gEZ$`FsWK=8UhQ=QWe2=KV&%#`yhy zNTA!PVc%0S&rieEn7!|;g3*p`xhnt3m@B>ouiSqv7gbA?mb9P_;RY)NBP!l~)EAsf zkB!wm32Z!c6bH14eKo9NRf z7f8ETJj84dIXYs!TPIroYBpY6m6z$*@-{!cii+0AGi?Hb68tfCZ_x^`+INRuv%+xn z53QxEN*-ROCB$^A%hrYJvp`$Z+M)S+;cH zR34sJ*C=_9uN98f#mWA4?%g9e>dB^P(~V*Wvhz7M(p721r9`7-xYXL#F;@wCbhsO| zSMq!0s@C-Ips3|fmXwOu{)8>LFGBZL9=>Ir@lnmjgb$YQdA8S4eqq`DHgg|ZL~$)c zxQ^Mg%RuTZyB+KZfgK{WbY{n6@bsUg^q3FQd1}@(ckEZ%QknGTYRLPe4w4PKaj-yV zT3XJ#ccKlBe1F?#t_w2vzh-(8;EgL#Om$~|zv1L26_&L<^p7Q#H(MISjEtMX^q6Lf zj&Yy}&>^&#L;uB0B3&mN7nU6YZN@4nUmRT(T7p!&5=s8Sf9lHby|*QlXV(VXixewE zO-m8xn=zUE--`C!6I4fZX_njM9}i&EC<8ZqI(b#|{MddQTqq22qCoMvPD;|_sw`(Q zVu=+jE-$z;?8&;;PS&|%HGVL)K7-5wkQ8_?2hK>&}uaz^5Y zgQxhZH~;Z-dUiniM5Ai-Y^s4-@?WbV~L*v{9##V;a?Al z4u3N+(e@&ucWRgTqxH5No-p|xG6?|xxtDj zZ8ViIXVTj)Me8ae2QXOO4LCWuDiwA6CX^bMn_=BUkE91q|6bo8xGIpaPk|VGj~}03 z_TV^R$+dxpt914KjV%ZJ??dbST&7^e#u3Xo3vq;M;Pmt-?>N@YP+IiOf0E_UV&&SV zI4N5$6_jw?25~Xgkk7pRkW}w-h9}ziTGMj3MjTgPd48|!a&18>eAjDY=IjKqlt~(P zJKB>^gl^F40)^OKBZdl>k_m61N~+%9)clV#H`>no;wcZM@F{7>5k&6T*(3S;3OF$* zz%E*Y&gfDWQ}q%Oc{>7H9x}?t>Ui5Da^^IlC_NVWzS`+%1DiaJf8hGq&n_jMoI61Z z__CvDxGVlqu;!PRRH!2|?w5iY!g+pYKpahAw_`75aIGM%MTK~Nzxj+SuoXNSs*&GE zft?2_k~*RpGwGgM2`cya5u#g)caSgO6SKnDlhpfTHdm722{3)TG_q{c$JjMxhGXK= zti{(DK6RkJ@EEd1e9=f4vrIW!BD54@+lU|{k?Vw$J9${QA52$uol+ginW*>2=Gqb8 z%~l-UK>K1tf5vEWDYfdikU9A$LVOwBW1#tgFrrN5oG$WtYM#`GG64q5;A z4z6Jgjr}L9`u9x)Ga-}qUpw~i@t62NVKrk|0RA7#e`KMVf940D)eOkW=jzYSUZcii zG%#NVb~MJIkcZc8SMKc;ekQ_tJCp5K1k{Z}-Plvi?0}Z<4Y=tuqK+LX?S}`OEQ&k2W*t(*2yFkxU>x+hTR!eZP)k9Bl9Fn7ze987**& z^AhPi&=%Yg^NBC^G-|`S`FSl^{6A&ecXo!G)*LA(dvd2oe$Cd7?-olQRj&Q04TVL3 zvR)#x4)PyDT$}AanXi@3#*Gl?fi4yQ=F)-Hwjcv|`YO24^}SqahS{mtw_)9};;7Mh zHl;xADxPffm9TWa6^kxx% zvL#=gl-{qanV6kYDCtlJe?nWnrp&%gbEfdu;kOxr^w!Km5;l}%3ee!f5Tsq1!y3T$ z1yK3DI-LcCb8PPIj1xn1UVEV#;=6DUk;ILK&eb~1MU>SKQukYs1lq3Z$hhDbCLc7{ zMNFx(CcN91+kegL8I~wS^|+NnBD_5!uMIXsj3#XC?i_`T?FZYI(3h8O$(NU|;<7;- zsml8`iAH-5=NyjR+JoN#)%IR+lHBiY%ZY?@<9m8SHjilZ{=7K#ChJZss4T)Ib+l)+ zc`3T(h&!B7vGWDW=rq}mb(FYP+|K*|oH>ElX7?Z=SmJhV9i{%z{wGl~-!9MjRtZ=x z{M9kcZE`Kq-oUAt|2iatiowsUyWM`uJkJkp$ksw~v_ z*ScnURF<{wm-1`RPqLJ3HBlo0t%JK|-nKiNi*4t$3>ZmJ&5Ij08DCFY=`64GQOKv6%zBEhT%hp*z3DRp+Id(UZtcS~r<|+Zc<9!^ zpSI&Q8vBCJ2%__ylY46z+=ss#ktSF1U~mf`mVncvUS8LR{MlcZXwvwv5;^cvid@q3 z(4Fs98}Y;}9}M984SlnjD2bmP{$12h39wSgt2=PT@$ZsAAe+{h$;~lDpXX7O^!eKQ zT@-+?RVdkZPn8xRi%vy@h9)Q^bauv?2U?Ls#UX4XawN^#Y@#KFLh&u^e&Dopme#oVpHE`^=T^;$w01NIA0#NQL(&H zx}5SSM|T>VXhEV2FGKHOoH>8mG#;o>j?#aGH*~)Sk~T}fsfZL|$U_KL2ooTsbi5*j zZI~XrS11=aI_y%oSE#hNAEL-GKJ2KM$sy=S0}2;$$-dyHpmB%85Z-$pzT-wfWY~{! znud6?A-)EC)h}0fl6ZJ^Z2B+vJeSmWRfLm)eMfFz12JrsV20{e385cPRcor{oV{}YmBz{z-%nHaNxa)NV_RKrAei+GrUIi&+Jr~(|D4h07i z?J8JEl#v-y_b;fwE_=t+xga;jjGKj3spvD<^D?k@iL~ge(*86_evKxoNbA~X zB~t*9DZY=s^~%bxYO9DiQ2)BB>F*7K>WZ@i){Fugz1WPVUpj>ubrR4d^h`lyTs z>q?x=-`duifQ}|o+agl^snyidsJC99r zop(5%o~`g)HbSPGc9YV*PQLM1j(YvlfIMn9-P!nG4n(y!zVa4xGwp6AYyC7dkhgj9 z*L*scoEr-W$zJp0m@ZP<+3gs!uxXG)z$kZZYt4vr++O9IZgO7i9r51g5*GX=-q~Q` z`!Gjaw)}`V{(8a&^)bV`*O1nJOvbx&v!DSRh|wMDS`Xewi|7N{k_`kw$i)g9lV~14 zXHB{a%BccwZIhmMyjJ~oDo0XXagy~t7&=~$5vWJG_fne1aZ1Hd{9#u@Tunt8Lx=r!H~ta&&TSM>sExrgkirFz|K2;Ru@_x5|RJ5_`i zTlAN>u0~zPw)dAz5I)P|^M#xvs@$d4ja?s^SLsEL8*~3Yi~ZF5S+b1n`y`%}YhKf@ z#Ufzc7zG}CI};_Ema69!0@)K3=$P$?)#1gHxK+>1KNQ8-Sy+Zi9xh(ayVrJft^EPF= zf4%T!EamYFh&Q-t`hIh3iGs2@FeynFpvqI@?)SFg4iScR{xlIT)=AVGpg}H?%=KF*|6HO)tsLDKS-7<#`7qzy58bZ~G6%2+-1r8CF zz~Alq?kB38crN!&C@UL#hgfWo%xFi=`=TX$hn0U;-@UO|J?|;}j7juspeo)hm6!K} zviN(5o`)-AOPZzwmZZ(_-CYFQU|eeoGD~~L5p!&g|1coQw>9Y4kw}pmUc1^C>$e3d z3ISJ!%S*X^c1Iw|{VeCO*tI>FzCFBYVg_m{?n3$UwpxK$DERE}w|B$S1CDOSvu@MQ zmOMvmF9}pk6ewBzQPqFE4~dWllgfj1Ig-Y@eV^8`jvXQ>p}+VPK5-c{2z9a5+uPPo zsQ6_B={5e+v?RCmM0ziFxNtj12_&`d<9xuhG-Um*LJFVSQXiQ_#h~rnltI-TukUls zSfofSp4T4x3uIIF#g)o>U)>T>RDgyp{Ea+DKfChJBsKA3Y@$8K+jMgTsR!a(_>PE2Uh<(;n-qy!z?-rfVH0bFJK41dA!5fQ>A@%Dt&cQMc2jzOfmz z3|nl|mhsSUHW!38`H~B)dgVspBm&&>jU2>dNs!gr6`_?eXHP=6F)DhBF$3;qeQxjf zl>OgruU-`Hde^|WNk^$%!YFzV%s>ZT2_Ogpc{sFTRJZ;ZZtur};@vn>AO{CHx0XD?PZx%+S>q^@pGMUNs_(|{4= z2o8b|cqQ*>-2oJR4&6LLe>Xc73O>Y-ilb)TiEX)m#zH$E7O33&g%N)T(ML8EQ1@Pb zze&LVZ0p$O3b)lp#9Pe}llh1S%JlhFHciW`;_{>X5y|?D+R$+0h zLAUTuAV?s%Yj6lKxLdHnodkDxcS~S!3xS{m6C^-zcXuba%i!*Ab0&K~|MP#}#koFL zbJG{o-PKjA*1J}f9G}bPCqgd%fvw>WtrtK51x1|I2KveKjDc|Al1KBxP-kygd+veA1XwtZ~2u z5bpSG%jM}}cp`8l)f28X?>s8&LF}x2<&ybK7Qit_h+)&cuMGYM{bOrB=X(l2L{POu zAUcANvJ<|Ger)u#CY|Z^6VRF1TpsN?*;5L-U$Jzn6BN{Y3Tzn6`wKRM;JSF2oVmCT zMA9((D+au=Z?hZ`d67bI|DJIIqicUzF?%{WPr18$`Q7ubJsJ7sflS57ByXcTBMshE zwzv)ei6I zH$8b;Ic+$Os?0+iK4C3pT<-0+>@`jB>yA>dD1V<6nzIlyW7@Gpp!}tNRDg8R5{>%3 zR6N8Bb7iHgvHMFs+==jVG8RdNktp<4m-N6fqhiTU!JOkq6K?T6JEXNGzGQ~&{DQ_U zRn&~0PxK1?6d)u&JL^7H2i&4TU_>Az|Ug^Gm?%wybE_4Z#T#oLQFi;BRBBSUEJB<5RGNsGdbs|hX zO#S0?{DekyN&y4h9&>l(HJ<2zX*w{If_-Y!GgX~-)8tBW?1D}tnjnYEz|J9nhgptA zoruigc!RL~c$|6{`81lv@3jGEh&^LNi$xg+vEEApGNjgjoxpC|hrS@jU< zChLtprOgd0(bN(0q)&3Bo@$Q6$r$87zIRBu#kGBr{3mDcI;P5r;~(A~i8*!{U-THS z^_6MT^v-k>fvGLNP8GNXMzf8Tw|autcu2U(S^49RHpq|dPkc^1L=CQ9Iki7yoQ?-U zv|juLa*zE6iznabG3U2<9Es^l7k85%LLKrfESx{4su8cKhTmbQ-G9)-;L&iL%La_? z^qj;VVc&jucD1l1rkG=sF@7)JBwX}?#AXu1WcqGUk>Fg!=HoxW`1f5>{_*WMb5BoW z%?+L(xrnXOJ7~a3aw#q|4!4(o@GISGXa1x%rfM1bhscQW%ht9CSZPdR;wo9Ay!h~3 zkul{LEd`hE;zb*lnORG4pATN!2i*%~HDB_m>q+|$&l>Oc;849}D7zXv@x_+Dy2C{8 zZm$@#$<1#@R+wW-ZdD(z@J<;2elY*=R4p7dPHJz%CD1G*MyW^b(DO=3wW2~zMa2@e z)?nqz9c-l1Ot=|oEt*2+7EA2Uh zjzx$!Iin1{<7Y-kVYHw??X$|V+ZtL+bpc7N{*|_4%_$4Vr$VsVKKLsZYALw5OT-;Cyh7oN$ru0=rc|$SL_i(8jG!rQrD9fmVDwm$W?vLO zkwBru*VWptG@!RbdT~t4mWKEI=!sT8v!ln z^Vp#E-*2$euoO(4k$>RhO0+hv3E?%w=|}bn8Tf;+(_36j^X#R=|x;f57d^+~Xx#)i*~Qn@(f)_1)cF z{X*?JP)&XPr32r23a_i1o1BtT@6u9+fZL8S=io^e?>@w|--RXlEoDlnmmMoY=~SED z=kWQVWum}9IUbK9_8ikLl)Ac!>7p*K5C7!;iVgd2ISs`|^lpac6NZ{*Go~(0d(-#h z{KS396qPXa5Mq6J|5`W(@xf<s@Q0meUId?v3UlpsE%)!&k*Lm+YZ~2y%Qz&uO&rp|O*1uU z*~BIRq0-OQuVu~Pm=aT4(nS}vA1@CZ3pTwpOk|Q;xJombg$N<2XFS=s_bLS^Kbs08 za=2z{hNLF;r0$S7ISNB2FKnaimf${*E(XTrBs{i}8EG&8CpZV~st;=eSq67!7N}!E zxFX1AO5<-HevbM2$532jb!eC?HUq4CRp*~R7c%=tfi_$&ZS%pA5l{PmjxaMJvhYeH z65F3PlX=jvv^4T1j-HW`5n2TTE`@^4AWOIbUwM-4S?pKoiVrx}G2F&#H8V3aHtIbm zz0}F)h(QfG@e`LDa#nFGRI1-gA33``Ht2J*OqmXB-+??Fl|aqk6xD8ft1=gZBUK1J zAdClwC=Mab>dQS5?4Ub|u!&D$+5PrKzwVr=X0Cx=(1PFM+E*<*a25X1YLGZkpY4oCWac4}_d4(`~egLy#~wgdo?w_?HsW0$zCb0)^FNq!@c+Z;Y52 zwMaovknhVIPI5yVz~;O6mu$C)0>2!k1O_h%%DAg7w_W>w{%BQfF1h?TlyN}wO{tMC z4))vPr(&L4>G42)f=Y4%i(=$LfhdKCW=S5sO zDl6Z+$H)aBogJk5V`FRDStOl3@$;lphkm{|#>=ErHTUCIGAqN=&=ca*kavyyKm!lL z{yZdk>arva4L13NhxWB5(P!=m^b5~G>HN)wi!E8fFPWxrK^Ga_ zD1TVU+bMvFD==2_QP(0>Mm(4Yqe%h$7aj{P$v;5`(NvUQN!ZgBQ`0HG_UEvM`zu;> z{0xw1Hl9}B+oEB+Z>&s=Z`H-XzOk{O5i^>(IA?qsxUsgMrI2n#B8ho=vAy*CP^32# zB9W~MrXzx{xW6`U4}5-Iz>sjbNrrKMEK9?i@y_8m>EnsjY)#pIkYt#ep`o&+CH?2( z9{__UYlK0k>!6+Y$ZE(Qy>GV2gu5zRgfA{G2Zu*<<=arOX~n=}gZ+^(bkTdIsg7GM z>Bf8EcbWuvs@nSTb0nZ%^E((>(z9Knas)qw5K^sD5Rie= zWmeUDoxMMfa@X6jj1l5$OX{IbBZ19Iy?z7vm=tXoq1SjLPf+6fG)tzIYe@L+mkyag z`e5ae@Z0DE=izb3H>55}kr(5_BhV84w+hV8$o)9>-;b%*4YJ|S(TbLo&r!3h%z{1Q z6<5mjY5Uk3WkBRD0jt?U@cl^Uqln!F4QjkXwnqui8TnWcMrNm+hsm3Fj(_wvPrT*BQ~xHi=O`5=%Y;M%V3!GyT@Ghy!dz|Q~%uEtBT-Re2R&CK#3AaDR^u5@e+G@ei04igNCATqF%!|1Kr}dUAtda{-FpM&!vQu@a4I;W- z>bGV(dt+LJ+Bt2@g6aS8HmJ$+pUe=EudH&qugkG6DGr8kh;Qc!{p(Gb;jK?*XXn!0 zRiXu6Q)nwzYkRAE3}Wb31#~mT=cSKN+u#^-iF=Fv_G?SFs~|~XN%2n0qnPo*MQw@h zgRocDT!OaOtNbzC#+|g<5~JoXlv#~QT?MO_9)_s+u1MTiVemj^98*lHuv2s2fV@i7 z2^^lG?peih4BC7JPzjE@7FyWl$eC+&nNHS7O;noYxYw=<_Ennyq7cZ&!xwGVA7>NK zJbdIigh60~;O-;+$|v+biHF~rZ(2>uKqa?7WO(7Dk_)lNCyTA^?YHeZTgjU0n@NGTr$!a_X7PO1K$4Vq2KoI8-->0IThfG1J0-@*8$e@KB$Xvc}afR>engeIi!a( z0XxRAF=`>^XvKuGoFQK_>Pp{CWUByH9y$xnWWvNmH}DZyII5V`#qX)=%H2Juaj@0^ zDLCSUFIBv?Y0|MDcthYPohsTgraOe@Dgf9Jq>tMuLLzh3!)Yaqug;2E#wi*?lh)Tc zT1!+g(fP$ls+N4;h^I9>p{gP6^GU>Wj_K6wg^)V5#xO}I2kQl2^K<0IZ?_1&eM8T%(O2C+g+H-%MD#L7iNV& zl!ajYAz|N-HLpg6ifJ)eyx5ZJ^*d$#*o6{*JG5CewmhwPL{oi%qosx)~KO(#FC zP>iDJ;bTs@Jk+GrERgz1-m)HBU!a0V?lXcbvsmcgx0F`M60`%ex2$~FW=p{x#7-t+4Rbz427ju6b{pWTmP0-AJ%?y0Jc%JK+1E1^4oieR1nhtD&q)7KR z|L`MMFLfy;e3?d#)!H`nu+Oa%zLgh{)jgJ53%WUt+g^9w0kC!mANZcMxUkTCC((KC zHgq=-nxGd+W}h(M3hVX_Q9y}h`P|-|6g-bY)%9V(uqk!MZ`inpPLaes*L{V|GQbUM z>5ggHe-4j6-d16-g>pgbZKsGJjzL@KuT!?XyDkQwvt&6%(RSp@Pcsd+i|ps8m@XE6 z%&|Q9c;1_PlN>*iWJ#M~@+J%uCN>m&bbczYG|ZptvlEMXHy_(&7v!ZQ*U7Pf z`r!3Rn+1Dh7Lsjr%QR8bWSbl5z3(R}alX>!zY74ggj&Jazh>J&_h7?fctumhm58A@1aym1^2kkBg$0Xg(&B35 zeX}%;S1!o3}hr`YC;!uAzTRr+9ED+4)+PA!hNw%7LAFz z3@@e1PvQ_Pd8NB?ILeQJMN0-!YRZ#9IzbZ}k&kDDifzqt6G8V`E8)Bs+Ykm$_T}u- zU*EY3l-zWw8w=h)lcF1919@t%T@REZL{(^bcznSp@9jTR)#VADiwSVhciTQpr#_7{ zVA`BwD$O6B@h`gd4p*nuGiQu+bKURlyVSTeg8ZoHVa-oFi{b-d;6u+WuDOpI7InRT@U+G`t_aT4xZa zEQLyHri%)P6lQC9Z?s5M2o+*GYKH&(ix+r{D4oRJ1%*ES2%qP_^$P?GB<_p(kN8nK zcJf}40UCS}2a|~wZ_#_zYtwB`{RdNw{QIZV+*0c}5{sUm?F|JJiG@g=3-m`kB%4qx zHJEzTxz$`e<*Q~Zytk1&38qm^Xv842Yhgc3heGrsXzKAkrAOgdUR=s6-|y3LR5bVe zS#69vDveGPyF}h8T~e_O#WUj#mMGa<37@ZYAx5jWQnT?w6{BXU$F-6r*>A-m`qq}2 z#-?P|ca`Q3JJ(QLTP6wU>P2@v?V#Dbxf6Tyi%P6@8~0^9%X?#*jWzvj<3iA-(Y#6c zMe;83q-B;7M~H4x^o3~2YIGxM11mFt?T4R*q{b0q(sv5L#) z=Gorp9(V2Ojz;Y13{`CGKAlb{WlDrK3goN?fvw-a+oxEbhLUCpmbtgPsYgn(RE;IULj8!pG1EcsbZ1iw$JDPP*u zmK}Sll&f?~cZ!!M^lEGZuf(Vy+QJfNp0?*b0au^91WjJW@{1;4E+|L5&c#Xq zkdTh_c%1@)-?0pVOv_RWDA`cl;L5TQ*`bO+^P0Et!GAn9D3EbQ?HGS^A_=8g6Abb( z+UgF)T?IDN5g(C3l$&*Xcc?pJqG*m-Y4^L->jZ69Fj}gj^nDaakEbNI_^}A*0f|ocL!g ztpX9(N7ey$406GqjoxTfOiZhbtwF>$Z=Nk-Rs`zH@ClivHf{2b0w(OT&`ItL`q=G` zVoAK<&sn04h5+_bI@sMXu*?nj1SBRvoS$g7R`Yz&V-)n~RsZB9Wfpz1h4-YqUI;_r zaQq5dcse~H)ECs~FU7Lk;_q6g_>`=de#fv3YP>6UNT9A4K%F11@GxvgxxC*>`H+`M z5KK^yt~(q~020Oot(kkiCY~!_kdqQt+Gb#>bsx6+qq{K3J*b|r`*JVXPM9W&ova9c zI)-hkH1Djpr{z~+(@`BtCzXCa$ziFr#oDPN+urT1ad6N~W5RpeOFaIUh=?7IA`r)j zd%1RSRh@ZZn`^dttt@m+gREskA7p1L_4FO1MqCTMW>S&V`uVj?&hyQKbnJ}^n&iuO zpy`*{jWdWs-nT2;9AzQg8&@nsDAMwf+o-b89N4;@r+(6j%P%O4dk}9RzUDH#!$RuIV{_PkGN#f^~JY(BS`L>82a;laiJFMKqj*@hKI31htxsPUOP7D(ma`h=fSp%ZoNYV@{0!qy={=mQHrWKuItj<|(SMDIz$$6e_#FNW%$u(={??^h z#y1tVlMHOjTkleXjIW03F@21f`18Kx!0yb7Td>ty2v|72I#~2hC+WaJ3Wx+{ogZu3 zMoX*q#wUgE2-@sZf}2xASP#)$dZn;PXcmif-To2;RE|kwgRNChv&~4dJn@tjw#NztL`&=?8P+Ye~d@G-2U;%LETfrAo) zk45PevqEK@{#dI2qP(ATPT!c?m%3x7lD{I?J$&H}w$Lt~qAQ6G|vs zlac!n=q07+zQk1iAy@E28bFOBk7WCCPSidVu(i`KX1rLVGxD%6)b_GP?6@x+mSNZ! z=@OuaJGUpXtp0DXpi84RC-*V5BSP`RGuF!__fN`twKU~jB$<#2o_lV`pE3zwZg9q1 zT4O};XXb}zFBfueo%@px8!n=ly^p%z*q8FHe=z9ZI0TByaQ9-&Kl=} zo}rZ3-1`yp zYMTeU<)E2Q`hLeAPy4;`I>{FO&_q+tZ-G=t_PvL9E(h+08LjcUOdk&*rffyBi~soRoe`r^Xc&q*m&Dl*dt>OKQ*{wLxWO}k zXt`JFya;l)@nhl0z5n~PNG6dP`#IC`{ycps=$kx7+0$164J{3v$4IWe)Fn$Mu47 z!YZcbWZ(qeQ=*pyUec*$?x)wGe%7Bsx^_ABciFwSx>6+pXzRF0*MDnjfr z%A@b&A{2ZXSK*%>jRCL9tt!G@A>-|x*Uwjbw}InL>8oH^O7WhZ(l$8SaWjsIW)Gs; zI~E%*aB|$&BepgU$?{2trMXhAknUD*%f6bic+|NVw7vP{Wqc>8a(R{;f0-f!8?g}S ziu5|Q+*VmgT0(N2TBC$cFhI6RCRVqFj#&L*Q94}+CKk)4Jv z$=O`St_0sTlKMAtJQWW}#6h3RMH%w{W`tMr^R=|DqhK8rTD2nAW4)_COAV(FF5o2q zPNqWJ42ihD`Rnrp%d28vN?;K1rxk7@J? z|6Ln*u$e|=oq&xqB6cE~OfxTr{{_P1Nyl{DxTKk)6A&U6M+!tcX98uCoQ?zBk!Wtf z&q)O2{VrqpS21;_Q-0?~QJ?=-W(v9^U350b@X!I!SAG9e+^6jc8J{OM+`Tlcm`-R{ zabj-%6H793JorsDl3DCD?#XH&RPvpKwGIc*iRl~xVRQUVwiTa%2EEuVo;Osy%meKm z6?e&Nt%X;v7uVikx+F@mz6VwZIeUDdv#wQB-Eel1IjNoJj7e20`(O&QR7+c-caD93 zA)Bz2XTqy$1_=1sf^5uI(qEIklYna79LEDG_-*p#Xo1n$G@no*Z&85C7{GlaKR0Vx zQo#HaP!N!!?LwGyJJcaFNw_)GA)~Is*-zB7b@66vM0#1) zdzt?jLw_-*QYyStRdF?eB)y0zmh9%f zPYo8y5Ba6COzT7n$->Sr0*v41V{T~adJB$&e{y9o zo8W*`J{5(T=Mx!qOOmGG6-CE4H5y`$8U(pc%a{k%4bG-Njaqs*xHz)%r#&4M4mPBO zUE@_b{F2`eMY|*6>~zK$Q%_hVFZIFX?vx3J9Br*0p@q#mvl%HVZ*cP7e21hBrC}2IPjPPI{_r-EfHrRx}|Sy|6HNFp&Wl5AQ1D z86tNl#zcP`hM;0b#-l_5SJpHYV{gz7gc@i3)Rd zlxB2tWAD=CC$Q{V-k&kyPUFaUA{~5aq0m=Gc8rJFy;9m|k8ViMHxr3NB3slIXspk? zVqW`lJ-*Xmu20S3N-2~$6T#j=hnOSRz_Fe^LG>noV?^r2hjB4Phg-g0UuGXtJGB_W zj(baxGiesJl; z>c@b9R(_HS z-~EmRj$gG?mjMgt4`@Xp{^oNL8W=Bz=SxsL8?~I15nvq~)swVHGyD`MrxrVhIlqo{{A^C~~@$b8X~n`$+od>0WrzSGZvK zl5IXjaZ4dEZ5<{=t;P#z)LL|6q3nebA9Iupi<{*lgm=g8*4HWh%coT`n#@rXRUmFx zZVyx5T|sq@>WAvd1IZiv1|7-^>RQr$!?7%0U9QF8dC>W3KVDZa`;5~pUmm=^NuJqE zHk~-lc{71WOMgg_zk2!9$jBUX)!?-*`|sr2$Ly)i z-)t7Q(_(IGu;spMzO_-2+t%UujChTEm>~txK_R)FKCoy1M^L%)K({;gaaCliT2vP!MD8C@<(aXsQXzGh%}dfu2n9nWa98Rxoh{}MC` zf$ff;A+y2?`hRj|U9Eu#3d9WCcfQpXH1LNS)vJMf7=|Wk9sgOJYP3>$xH^`r2Qc-Z zox|dHzyFKi^K;<`YcxIaV^n>!GcBA?1gilX;$>;B*yKVU&}F@>jl)djg{N*S|En%P z|Hc#Mtj0smFp&#{rORU?@};!L$;_C;KVQoXkSCgVr$#|V0%E|T_5 zG*0>G-);%{S8X9=1)O=lTrGTd{a`?LzXNm>XlFKn?>Krcv}-t9F-Qkap{ZGLPFL)2 zJ~sF`lL~t7kKNb5{IKy0?Qs8**!m!HLK=ke+;sEPEnLXkW!3N^28pUCP!34^N8n(X*ic46X6{`P%%G56GL#*m1rmetflW&(mR#XG6mAo;QP}fG|WH z#B^lCKad_zx&8#;Y|Tyc??+ZN5=ku2YEJW81&^QLV1}7-c|+4u8a7*5H3g!68{ObN zmpy~-)9}4Z7;g79xMgP3(CUR!x|cqmAG|Xo5;4b05fzBNUcgZL$o#j}I+70X$&tqD z8dM+Z>}RHTFN+0@TuAbAIyS@>1Kmwkdn`qVPo+-l-rsB*W3I4+F+OvN z*I3+@*1KHqoz%qD;9x@}{4-wAiB===tnj79PI{eR_!q+oE4G|&Ik?*KGs^=&Vk_K{ zl{Dd#T-^%LCZCZfZ|0jUGXdBJhobDTWq<|a{P(?;A%axtOB43(s-0FzB0u;1sSfrJ zd@SqXy*kb(vBKUfs=nHX^A#;bdbf2o3WH`RX604+{IP*S{@`Zmz$JXZ`lSUvt-dpp zq~C(T)k2CQ!~oc*RPS=%!7rh-O~z&MCpUoEe;7lJBCC6m()E26?ydn3NZC>-Zc{I< zjwXqUMrZ;6Kn$pEUBDZih`b?^&iJ}Xw8QS>$7--y0> z-!7c}aJ%+Sfa}N5H>z$T0b9lZnRsK_X2zV0C~Nk9+>CTZ38~jM$ITPWG|3SU`WR&J z(W99e^DX{JT)P1Cu}<|UG=Py$=>lNZxhif6q`*O5Ex`f#}8V6j-3h&}V zp^9*eXo8FDtL>5{_Xv3-{9hPs50kYl>2_57+hp|mg28P850kBCf~aA-MVDL)F29l7R$5c1zex zet3y&2MRE%5MtkRZKO0MkZk+Rn=K1+)9w>;dtHviGzG0nS0mBw+Ri*r!Eifi8C{|=w_uvR$QHTaz%LDVJe|j~%+@~nN=$-BV$&ie6T8ces4d?XkKtb{< z&&#{`XQ9`XSEoUZ%j<6y{G0WzHK&ecNx3DW|g0HYo zwD-Y&D^Zg{_a$3 zOJZ~)(E6V%&`2}GSI>ZQXeZy=*66L+X0(^l_RJyj6z@=s7QZW+$?x7gF4@ctnI{a+ zXy;nhbaedo2z!m3Wed_vZz(_AUVLl{V8kea^Ix_&su~-P$G<_M-%~Y#yls8Kzn`bB zB4DAfvV)z4$hieq8aCB!Nd1z!5cIU0R%A4_*?EiKWcU+H7IG1T#K82g8FbkJjAIr~ z{`~p#MC#O0g(E^kJKdb3B3XF}F(ftNo5-K5{T+w_S~M8gPe^A=3IZqHfA5BaMm z^!x+BZ-a%U<&Qdn%3R;N{=l?FjH!aqf>wJp7pGaa_ZIP4mghbOn23hAKgOgf3t3Qi zKBUraY!tifl$y=#09gn!==trFNruqsF0cJ!_3zFkV;DvIpbH8Mo0Dc$glhFiHV-QI zsrPBywy`U)uqS`8&Xtz7dJSYc>s313;&{_PvDPjjmxqgof3wb?i{Hw64J4O-&?lVX~%X(hW{1 zI1|2aV2a|^3xPRNI0m`t`9?1Yjf∓_v3dz-ky5YUZk>nGy}407JnYiyjivG>PO+ zMWyXviQeEm%eQg0#}STbcN6y@UqssCJz^pij*OPDligMqmR^Je=2Sc%w~Kxc&`$~o zK}Z>ofQz|UH(YtNp@3^(Z};I6cP*a=6{bu92~Co-s5??} z(QGEk3ZhU-flF-$b#gqo(7o%ZI=bPYu&g#j4IKWqQ_o6y%RAt;Lr7LFOQD-7iWo)LRDRi^QAP z(7~lGttBb#Fv^caL(bBgqgXdzp9VbF*H{{L?!I2#J==bLn48axP&SvyLb-i$4t<1d zf7(&Xie|SE<}^sJl`X!a9jm3~9!}ht`*u9uPNJ4mi>s6W)$L!H9sr-fLeX1CWcmjW zp}^?p{dnueQc?QA`BY76>!4xau!i1zU{soaC6#et*O*h_WVtg_*9_v=;CjYAeh|-X z!P}o2a5h;hs)7FUOJ>9Yx70GVe!F$zIfS5%Jq60Qpm4jI{}d^izhXr3%8uCZ@`}5c z`3XE=^&Z2gjB2db{c#)*hNZJwklg-(?=RMURQsPSv(VrF_%~r9{@;3*|3OLrzq|M@ z<*g7zh2h1ihXhB$+S#HGLZ*0t$EH;*3-nRbeH0zS593h(c zCVD33ygsVZNGg6%T}EdI80hW(ffUWo`Ys%Lf9x);mv%oUsqfou*1{bi^d{DkN&;rE zp&Y+zjdPC`JZIdqRh+$Z_ImYhbIQN%faqS?1O~|!`U{k@RiDuA3Ev7)eRl^e$C2?W z>5aLlP!F~~a{Yw;^Wc7}*sRTkq$ljqRL4L!8#bZS1ATWm-?EK@zxoz~HLW+s%d(Pc zJWhcDv>M6ov3D&oV%;y7KtIYObnMijI)4xwJDp5s2JhkqOB_40?{AwOD3Uz^^8JT` zV>kC=73TYDigK9)vN0X`N>uWX`Q8X8&j~1b1{&Tk?W35Z@i%&c_(2(63GL6XtoNi| zr*}EImQVd~G2d1hxpNj>LX {yakEVjkhD5R1{5e|v9ro*vGOar`9J@XF8S?s)t3 zi$&tv4yxLJ`a$5Cleeo?PocuE(_TL3%T~;bKi%=pr=@ewa&yix93sSSGl)p;F?9MU zcp;s^y~cQvCF^&y?@BW2vs&NqObduew8)}vbRN6^ng8=qQj+Edn8Kdm9omSNA~`Pr z=3g-!ZKY(gj7f!W0KlL!e(kuT%m7Hy0MT?+E%AtPk`=T@&>$DHgKl=4NZBm(+ud^% zeOnv}$ACgN^tXWc2)(z|R3-k7`kusD5k@Z_%`U@|`EorIjLUq2QeX-QN`Iszn2#HU zD}~gA_D2dzcXPJoc~{SM|3U&R@V|tS)w~!~ zF)={6Fj6UFA%Q=X=v&Ta{rhf4HZ}$>F5Kc7;GCnwdE;B1$8!R7nz3IB1?D(P5@1xG zoofNm{QL+*eP9oj-fNT6tE93O>BtH;v4+SuMx*Av6PYDTO+V=H&ts0#6@yKfjl{0G z<3+CDo(A!TQ|>P9ds{e}w)mw!56Fz9bNpc2bux3ZV0ZAP$EBY;PCNL`9|+DwlaFYw zp(Ia4)47=&*AcR!I*eo8&PImp470UcCRU0Wd{>x%>3sCRn=zdwU+KI7lU!A1?te2b zaDU{^3R*{fc^M1$f4JYZ_sYl3SdF}?oYCAWgSINHnY(qWv|P;sq8w_IPW1a9_7!y6 ztx(Hh*8=$t!v$kFv4KlV!gup-E$1%5K2d!#|Fxcg!H zmutS++W#_b5F1?K`J^>IzyAjguoY!eU-rxaCv#~x$4i_WRir*{1^Dp=QC-h6Oe{`6 z)%+$T!pBJ!c2PHpxOT|GJSlqdy;jFJ6Ps{I1HZ7H+@&i{IhO_P`n3f-#|yiO6Htyb znKz4pay1<2FO;{?x zMMED{+%QbDyAHW!=k8B2`>1aY^DmxB#nk2wF(`a@KCM0&OBNeah*Q)}evy~=^UC=BMYJEW**LA+n5gZe^7_+opR@9-4qN!4pR}>E zI@CcUrQ$<-%tI5I=c!27*C$*3Q3{8@4ZlS8-T1B%%h8sZ{CSXyZ~&k!v-#yo>*Z#8 zO4zyo8l15)X?f@Fdk-uDA19vl!u-X1^75wyS$`xopbOrfbgtj1A%3DT8D1S7fn2|V zw7;N_w_XFvM|FCKl+w5bg;QDOYEF5-xs4qv^w%)j>ppS5DWKNM^AS!kuQ}}pq4jf_ zk64ej9?Jtio&4flilwSVIOd$RUMZqkY4XbVP~`~?XXe+P&3Z{ehqj#45PL3!=!+JD z+2@cvw+5~<*zYFycog z<>vP02z9wK0_q5sU@6U`t=4*@&3!9TE9is47WbW$@1!*UeqLYwFTZg|_wk56OU?*z zg!eln#ZPHRD^S|;B?y`m`A8%6ksG~eAAajCv}~mtYI>jSLd3)*BH%PagktsM6?Nggn-}c>#qCHd0U|wgdKX)eOzkufo33?_Gf?$;Mfq6svI0GlQ^<8Fo^f_Pj zeR~=Zm^;#G#zALYp~IWAvqh0&8)w1r0TzkC=4{+l?_()?rN%_k6POTuopERb7LB75 zBX+j9wvwp6`p-Lrr#Dh}t5`U>o7PK1VN+2~!*!IVg%v=nRR1uBpfWDiPSLb+W;W}89zxVzYDi58-GLk?7?GtkJJ=wTMPjy*Pq3@ zpe#R3z8Qztjej zT-5K-zUQfR-l9C8BaqW-X{eG=?Og~#zoSl;sliod*T3tnoq+lgT|JLQhHSnM z@tz#mBM6z{3FkX)2s%s>%}X5Q3EFcL&0REp&#j7$jZXkbC?@iB7mFy@!;g@WGWs& zvzq5Si3eyfMLbrFZK%1DyVaGif!W*>A~p57!pChJm)dvGP{!IZ{ihglq5t{6I?q-; z4-X!K=)Yp1<6~`sv$>fWo7Y=#DDeNE@&pg2sPx!|MS(v=MA6gs1WUig8Lh=5@ceLT zJ0T;5g@-scqze{A>r8+W8GM@7Ojcigp9gd%v*DnckBLnp{GqNk^F;wEoA0AG^*)E- z(XVT7mQF+&L^A@HJ8TK*-A)^)pLNrb0#sn*=!~Y|4`hPO;*|-Aq+3m#Liqi~f1(bfNgugEH0HC@K*QAA}K$S3`%@*e87$ zO>0e0?(t&d;f5*oK=HP+07AIRS00q?lS2jBaqXNFx;xg=#ti^;w?d9csGNO7k$O^_W0ydCsN)~I*-vQ zv0QC_X3}`hBs#Lk@?xWMPD5`s0w4@l&CQ%7;X|@xpMZY8Qj-49?y@14K4%p4Y{Ycb zl_u;{g=OEl7vt-UChk7Ok|q@|u3YQ0Wu^&TGsaRMIfV315wl0Qh2Ys3Qh9DYa5jo6 zrW1oG1)gcohpwHeX^F$Z#7TkAybOPMUw97A-pm&6k0MbS`*#)N*|^5Z=SxONVJAln zK`=5=WSVZne>%L_aSvS$o^3UW)!!7(Fh32Af_?=-xTh>1+!r@B_QwvB51*f2u3dA@ z;@xS$cTa&*McjOxPDpAyNKm=5i9j!h#vLRt>3%V%= zE2ud)Kx=*CY_LYQU01*kdjISv^{}m?C;3%2`}<0+*V zUP2ULFD^(2`}8k@6uKB zPNjSxiV7MR>5nPfEK@(F{`v;s2f-9Dr2o&plzk`iKlE47wTeE#9^a#w+c&!%{rTde z-+2bgg^l-ac>k}Rh zNDfHefqH=0=2zi4cPip~A0uIT@mf=3nw)hATX7l(h_Izu_7u_$dZ?yv_! zQ^o{si+Bdw*kki*{{}U5XraLsu{JY4_ z3?r8I17|SS{{aU<_`ZvX*Wy|%=`<29&QA9*XVRec2A^TIgtVZTZZz3pC#1n47RVC6~CHmAr8swVgu!PnkjRukHz_J+G zltg>3EH0tCQN*Pa!3l@qsEDA$tvnUT)1cy?V}!VWD+q}VJDoNQXPu3hJVw`6KA8a zGhhwLV#UiJ@cBC{$?e&R1e3VvJuZ^Q{12D+vr@Zd8~YrsIrrKwRLz*dnsqK(-+ndc zb}&=BuK-_iDlyR^1j!3N5b8gVUJO9h~|9TbTC6ZbHUh!a4oYNfaHQzvDR#odI3_QMNB#!}`oH22Z(=uF)nj zxXVsX@$W}==w2Gj53}s8H<@4EhtaoO$e5mq1UcOp^o{JB`!=5}*iTKn%lXUAV@VFy z3tv7A)(~npyu*wizT*A;X><_v8WJ^}EAE>>pY&*g3fP)K)% zkDJV;<2n;ox`|CQUgf3LdV;N@ojW@*>gG#0|H3XL+J(3f;zVz(XY0#<?%;z;a#DK}j+jP`M6ZL9KMMD&e%>Nq&-eLkF_E_BX805+OKJ7(8(j=X7v! zXweVM-Bl@TQWM(M6+(bp#&O?^Q#iMM3?V1PsVr+RI#(G-r+v=58;)>H2$P72?hH8h zYOc9Bo|-)?SU7btTXIT;B=8d2?GCQHau|a;mayTikNE7(rDS*QNP_4~d@ctuBk$m< zalL3$yoTvB=Ce?UHM22}_I)OC)ujVymtaMAO22Q!WUZtua|y3q@*>+(+7c3B#p-S( zx!(m$xMBj4JHO!L=jL%NCPvhgQHYlax?Lpt(@{RQJ^4D*S7cI_kxaC~A@W;}wf9rp za&1p~rCBjL8mKBh%$60)*}Q2FnL-RXbV78e^km#+7cr_=Eh`^=gBdGD7-_ADvA9Ip z)L{?5fD0y$Vr-vuk|RsmIsaSUd2|}N>1_zNx-|i5NgT$=@uL~rD@oiygi^cxb7qQq z`(#f9siMw2&fZ+{#N~|W9glhIBIbWHmG_S{5E~Lia<{9vdg4I3q=blm*@NEXCV$o| zyf{6Vs;-lH_JJY9IS#Pk`43r^BW||q3oynGr1u4XA*_z$ z>o>D^pOdIzT}iPXWZHf2aUi}sX>D5(E4Lr`#Qan-q6#+dks$kCw8iVGw_O`d)6iP^M!9@q0gD-r6!MLp#&6LzwLP zML6OvUVA%N+=+*!(6L`HI=2>g>?SQVq2a{9BGO=zaS9W?aIcqlsroQt(nUDE+L0t2 zn+)=;TH!`72UeM08Lsf4bsRDrBNq7<@`-^(@%te^Emu!v{(5G=l}(!|lNjDVomg3K zvRxIgVAk4v_U|esURO*}>%nx3v4}bpKFwD0*MHC9q8gHJeTT=c8qK*Qx{)3ogh~39 zn{L-^VZ{%##eirhtV3@`^c3P^`z)S%*UN;*?&i)bN06|86Z_X3q%-gyb*d&E$@Vh33bCX$B?pl1*H*}L-?Gj=TF#tfo$_BKkpk7eMfAq>*(X6ww? zdH$VUBwha^w_bZ87mphz;ta>44?<^#qE%Zda8`7P=sr8gMM3T^JG7~R3hfby%@_t%RS?9jAO$=_WQRfN4A=ltH{M$P8$zcobP zqI1{bIPeL7da8yl*WJXu*N-8!>>&F$W#j4IPV`e@#J3&8m*;mF!(4yG1zb3$ zKSMhig&2+@BCMAEKWv~XdJq#H|0B1`e4Lj;!q@D$Uc!XS#&OX_ z85nkEvg-Tew7Kg%y0q@au;J%vbv$ZtPujRkscYSnf#WabqLCvRBkEsXOJhg%CF#gU ziUwT9IRpDKtaCVedjs3w*hAcngNQd9#5Jw@C8#jupOVM(O&fjDS5_g^{#KguB z7aK=JkXa0xUhNATPKQg|nnar=6P=vfA?~R23Mt7iqbN6_gYM>cXl7HzIW+`$#FX!-)GBD-?+Lw7MTBU+nn zjf`r`gu8F2Q%w!WmagNdsC7qewH9}w2q(9of*Pj-m&1-jgeQfiUfc~jYD>uz@n;@8 zMs9TtB{@Y@RyK$`UpdA(w6~F6Vz6^I)KXnkN@ZCw$B$==^d2Rrq?$UH=)S$eU2PfJ zLM${&L4Vp{tN4BJ`GnZkr;?NuMwpzDlRdZ)cO|=bP-cjw*G0qW-_9pGfovL_@;i7! zxXJw)U6I0BG@&LB^voCq4l7Cq}r@FOA9H;+>QP63mBN% zij>5Dj2M?jr@rMZSz9RligcJP1cgNt8<$LCs(cjX##32Gquq=pD2&L+SYo2Bgjo)- zU_pC^^z6Z?Za(%epUbRox6%3eAGvc>5^drmiHdGTT`aTt+^Z{{;=3~R+;l<{t2mHdL4(~Q+I5^rhnM<> z2AopMiJKau$iGe$ptrG{ol|FHykG+DJGCcTzJVXsnND4M(XV4PNhz&JNK7O#L0sSF ze>7-{@}z;R)oZCuXhr&nVI+D3@8rw;m~DiFC5rsS5uYYRYIq&4T04z(nG{#%vO4cd zZtP=4?`WXj>BZ%h@tLuOgllCPAKyrIWi>|+c3|9)wzP^C3RonjDLr!5$s_usf_00i zoH&*qJw+bUI@4=l2Cdqcv-_}-i0Jlo?U77c>o}s56Np6Ap$I^m+ZFws(InCskwmm8 zZ`sd9g@sa|wU5$Zh&z82y<*zZtG@`hkDFtnZ>Xwq{>r5o(;ydKzeSiqi1Zk+pmkwbFd(AX2p@IW}=))|>uAVo6R(AT_-e zQ6lZ(!nsl0$Q!MpL_|ar7iYz4EN1tPSh{9(p?B9 z7yXe}e%wixBacmAyvk!2U&}4GJj&SGO}JubP=p6qmsH?wJf7xZDGW9VW;YCdh< zo>vT{asBAg4dR3HC@3mo=a295)TP&P`>lWC?k7HB=H{8ae%1ZFGjku=E(6}O4J?26 zPh4^SWn6H{#oYb*o7^*G3NOF0oV}iMc1?SS=Wl(B)n#SuU-JX+P5A?V`^&>zcjGl& zJmwt6{P6?6-c|>7`^25`lk~p+8+O+^@EQ%O(f!`|#NC73?na0Oxi(3RV8T!c2TuVz zb~Ir1Mly8lAW~X)z_M-~nRXXWIl$`5aU1G6x@j|?+%S?0F1v)g-`>cPGLIOzYNi*a^*HVjg2mGJ;-=P`x66Mc|kT=d-rm1 z^-i`YcP3?Ye|kiUfl8!LJ~{H#R8q5aC3&}BMEfr7NU7f;go%TlC08(ZsEA7pnoZjv z`45>F3KYz)J9xHnDFf-LI@#; z5G{q}g*biU+Re>j)+0A??Pa65vb_(Ef>XYuNoc-{y8FI&}~e(w!$hVJPif4sjEe zmrdq@gBK1l-gNMf2 z5(=_}`K~=2nYNPU*WAvqVV&sa*v6rQJ__Aq=-1UJ+NWq^&D)O1|4C&d%>qvogqb^W z1S9)z#ZkS79f!?`t~KCR{7>A(dW<2M6Wh?I%RbRo^2jf&#%*jMbIWGFxZ?uRUytF+ zrIFs!Gn~X(~Yzq?P(>_uPyKs>GhPC zP`Pq7`S)K*x6}lZM4h;0`w(?tG|8>GWPTK9Gir=&F~lHcc2H5ciCM2b$urM9!{7e) zBvaQPr_e4s2zkBAo<;DwRUWi&Uxejk@-4B^JdKjoV@g~%G|WcR$Oy!7ZAVy?fB zyB>I$2QJld{MarQZ7s!QtivAJj`RNbB(FVn1tSteG06c{gsKw)&K((nEnM8y`Fo>g z7)57Tfn9WzHFct6_lgcZB$>X~|Cv``x|#D^M`G3X(9>hl?_>T)Q<=9ZlIy=&$C~9! zd8=DBwfY)zM6crS>*PO)=#YGMlsFya#9hGOKbXemnSW(?$zirH+rWNbBoQfHn9whk z2qEfZ=W}|>6fK3Q3%R(xB98-$axe^RLv&OSX4#R;jk|NVvdf!DQ0pGFPwq(jwxS(H zZD#tmVyYU1_;0Y%_JTk0oY{Vuj1*vXpJImD&5rB}Z+AqvcL z2qGjZg_QKZM6LRg&u0C==U-1}*5WPf%&Zmzs&paRdgC!xfAbcvJohTEeS3ruPY`Jl zI%?d~R*y+17vmr1vw1E?bx$NC!G=x@M&2MHs1jm{6$7&j>F0>HXtYywcqKF6dx7Vk zdXi_Ke}QS+%Bij^s`w z=C54C`i(zuXX8?~&RxLVBRS;lUe3oqIJn`~p~NRg2%jR|^1IIBCQWY?Lalf|Yrmh$ z>a08>ZX8YD*ib_3x$IfJgn2WjGi}-;maNL6ObAg|(IP(mCZG1*x-xKZx_`hm8ijb3 zOBtM06>ekEr?2qB^Dpw`x7BnHH6x>x<>jjo5InX z!ts@{`#=tRkLnrFA&#gJan0HD*elcVqfEzQmaaKWl{J{8J{OU^c?NT)f5!XY&Sc)Q zP3+655v3s{MokX;7Jtku?|sfYJ4}pe6-W!=}W z@y4@{^Vh$A%nyqXQEn3Dsu%s~@lDMA_$6NW+Y7w-%1>;}tHLfS&17jHch5q;f8|M@ zc>X<}pJQfXh7p@pv@7`nNw5u5bR^-TqJO#V{0gGY>UAMPlv^;Hf2pUE;#)3v5N<3+ zA%HEUpZ5nI{cb5M*9mdC=v^+@_!85X?qG9)oA@^AM5l+c!(NTM3 z8*>-t(6&oQy7f-gmb@4YM$CGXcCFU#p329s{FMi$=Tfd~&Gl`3PnC`0j6n&z7DL=!I&8$IjAY7lukq$vZ}HB%?{WL+cBI%G{x<@(yHG#!E>UkZ zV-X#YyqK*)p@fA6V{5FTrlgFcRW7RYwz7ST7-WmA1cii?B5u9CUins68``%^Bs|P2 zE^;j}t@rW)5kUVcXZN}WfJCBW{ZIB6lK!hrO4`ls0X{;^f_+BURJ=2KM-ddHL zPM33N`AYWg*~I2e3z+)p*G!+cf}Mp2nEviEj#Sp+62jYLvSJGj6Kyep*tp(w>vfcz ztc@)C=yPVQ*~zvYn^-jMC)SB}xp~W47VUOm>UTL$J#yPnStk3GlBZ@PRmV^;M=q9cm)sbkM zs0&9ChebK9T)dEl3)Zo5Mn4eMB_+5f^h|hbR&v!|B+gHzLvG7ME)?VV=?> z3gL$yH}Ut!`jg(cU);RyB(uapa9l7J ziy31~2l`$108c;lI8Tp@Cwty2e6xB#M{7kN6p|8G>{TtV?V)0^;hE41|TtcnZcgfYh8H~RBIi7yw z9o~8WA#R)4jX3$KMz82k+m7Vwho9rccV6Vh=da=1jA(*=qOWZXA*0`9Zh!t2UVrBW zUVm{Q4e$MxX$y99(3?cGxB)hl@8x)%MQbZ&Q&wuIHI zHn7fjK2N;=E-&1772Q1x`C-mCeEH@F{J8Z9ySJ7q)t&(Z_g6#%!OOdocgn-ILlDNt|gIT&0xkB97||OD4}6t z*uTfCil^9pIO3884U5**q<&iwCLd(ev`suSrU@_V>` z5hufH3PD4PM2i)(s}gs4A;pab%qA0_l57eccF`FNKLMvF2!v%4J*G^NM}#TYIBDyv zoDJ0EA7#^?d}^eqlj1SpP0`ZGFNlN^mE4`tH%GGjgQe`vuAofHrG1d7pEh>>8M z5wlNjFH%i~+|5U{Jt@en!BN^8qtH+xC`HM`MaXSIjCjNQa@hk<@b`B=;KPre;_>^2 zlHn{SuOgikA@KIDp3M)lRv)C=)xkZbHBVu+86BR(aCI9oZ+x=N}H zqCc_Oh|A8RP}G%9+_^Or6{2%_g{TM0psY9VS-^g=KcF?Md`P z44JKZkr#1uZ7%1)cb~Djx-CITooQonYUz`olr)Jx(JC62w>F2&Rm<63l|)Q}5RgH# zEW|Y<`%Ka9OpZdbj+;bY5(yDvHov5h%J?*quXtLCbcWh|9LUWkyHHO=Z65pA&Sm<{ z)uIjT&Ht)(L*AYW< zmpFQ~+QOGF&SAy6E$rH{jqL|=D6DmeK~jVxL-hxH3LaMk{Vu(p4#7Hhefu6?ZQ8)v zb!*tL@k`!*VJQ_ET^Mv}e^NZ+E?%Zb3?gz_hCl5xOcAm;T+wam8eNL@=uF=EdMj(! ztYyWFd8{j~pvmz=9#eiLzNgfc7^t2{0m<(XWZ}-HIlW{v&ca{5kiT30yCwtE}wyavq1`+4Bd~xHG*ol;A zIYU@UX<-RF*P9XJzxMb`ws4ojO6%_DG3L@y6n=LruYA6gh0E8oQMBiEs}{3*=P`0B zb^hy2+#JcBG_)HXdH9>5_$}<@jfA$2%Wr6H)ro%9;)Z4WGJf1Vo4G3s@wnU4yIq)2 zNd+9rC6$8oT>kF1zU#o?f$tR+=D>D#$n3rr)dzt%gzKt8M zypg*u?Mb4@zr8Y_qdRx9Vf7l;%$dW+@*YIBYC~GjHl()e%#>q4@##jx z-5W%owRkp5S7viCWITO3CK3}Q*L%ve`0GO^NBk1!!Y@_i?ApktwQE?tYPGmoI81J} zN4Rs*P?g8w?OU|6Si5c`JC2o6)94j9jSi}cGTFOn8|y_`u9+ilPTc2{k)A|Sh>?`; zqv_i-f$iTu&IeOhh_q}F^}2#JYZkF;Um2zK@}|~FjR<4krmbvPw~{rhXYkHT>q(q) z3F9v5OR~=)R~}L?1lXai8^krToFxnAFnjJn;w~D^uwLy*&^J<*Cq(-C4Xj_efHia9 zX6pViBt*y1qfa+tgTg7_^dmosye(KI-0ZJr;D9Um)2CDUcG+^4FI&daxi9g@oBzP& z6Yt>Vdk2wpa2@m4u4d_4(cZUw#j?#M1j zf}Aq;Znn@m*^5EkG-+01nAhuTu-Dg8dR*KnM1%2!o#JdnZFkZl$h$TN)%kUJt?^_G z?@eoq=$Ha_KA)Z1(nbuC$+Yd2img_-Gey#>M^{?M#1k8_j~$yfv+=kdb5uu04DLnG zfr%8&pTTk=&Q`DA#ExPE!HKQJT_m_nab)yvPh61PhNM|piUH0Q)`_A06UeX};JZ&} zvTof5(P14U>86*s>*fm?mgvUecG6H;kJ}JUTJH`dMTlE}M?IAVZlZg4r*&c*x_3?` zB(#Qg3udx@(#()%K-ekqaJj|6>@^V;4jXFY8PM57-P-wl_wo14*|?p3#TLds{3I9kj3r9fNTc@6 zVi#UVH6`UEEf(dL4yxpMLl+J)%E08>Ym5R?^#adaBriB`cTjIw#iHG$?>qB{-cx^ZndH2qta zu3N?Gjl0=Z98H^^JsH@=ioLK7!V*dC(Uzo8A!z^MaHYc(o?+#I3BJc8>%`}u#RAnPBMGBUB zN)PSikhuBUxN!sP!~nl}_hIs_?dhHtMX2TU6v4VQ%v}Ok-ZLi||OV4L?hJ0B{ zzGW}UT$e(-{%ORCveY)E{uxqSN#S&qCC|Ul4~v(v=2#HzhF-+&Q+g9?sHgDoW|n?G zn?+03v2A|^={G;X#E~6H50M)R*WotB(t3C=THBh|KZ?G{SjwT5bD8@7cg)#YNl@F7 zOu2p--Qt2VXxjmtihS|K?Wm#rSQdvex3hhtxS`mvkv+vutjV2dW2+|j$N~24+rp*| z>)0r69FCDf`_@rdYlYY;IKtkot695#2b&H?ap`MMaQUEAaYNIHQ})9>2QnnZ$IdxF zvRsJuHCv8~o69x~8{UbINje&e3OJsBn0?!XfL^uRn!r37lKl9 z5A0|6UMcu@kXac=pIh$Xsxh5Nw0baF$~m-nE;GOUf!S-eu=%KiVUNASHG>jKjBiIq zQZUI?OZfP!C2Y;AC$#^~Oc~RYwoy9KrktW3h6o;ZHt3Khf@lBk4>&W|D36RQ&ZV+mHWkQ#l(Y4r%Ta;TUDR zmVpTuvhF<|&8^mMWw^54%eE|o()`FEL~HrQ_90C~n%puB`A?e2>!j)0k!G@;1=`yG ziss2b>m>a8uQz|Za<*FLL%ZH&c*5@FHPaj^i2ZKln~btQlc#>GfM2=5{zM-C0m8kE zPv)ViESs+TCj9AW9+E7NKsvQ}WO)i>8BSAq{Fb<7+T{yVTKxVpm1`Ge)-wH%Y6O3UC1y3>C@~2^($>;`Aa{tz55+&36Xg}+21xH!VsQBlC^%>ZzW&q z^HF|a7W2QE&x+$0@X!Yrh#P-Vj-pdOnRmt6g4&?CMUfY!?2u0B76LTc1unIKyQXVW z+cH9S-pwyw*#T*0fkXO{<^jL|7#W{jBz)5U$&N_!OKENDuw+Nzq;SVFmQDYb8Ot`X zZp|8|eXtDssLMG2(joMYvWosny7&9{cXrJ?aM^*$@cqBF&QuN4YOz{SsyFC(02nmU{C{*=B}xHY<|$~s0#H6%^EoMDObA?}H)R-9$14T@VDAy|J^v^KXp-Cf{ZI|4@X zvO8hc+%E9@f2FxU?Fg7R5ioB~lRNo{q@gsMqdVo}pml88vW=p++xf$tlNjGK0fWOW zQ+JAg&2QkhHftLun{NP`9H_0VV&eu^HZ!&qq)CR{rvBKPv=zkr-vhs zfXzuxwLgVlGW!QK59btbrAu0y$@HTk%T@InSAf#+}Jl%6Q15* z^R756P{K}e8uA0+Rx-xi#Y11M&=!m@S-g;COYY&qj7Y4tcI~ZK#eX=WbN4vyG}s+D zn;vH=6pH^kWOwa#J8(2K_+RKzob@PS*J9|x~sO8?R57YL^ZBp+26PmQnXkdNI>CXsJ( z{N7JuwZ|%2nff0`$nWW%QVud5EnndO*@&{x8=K0(q-|iUm4MbBO@Xoz_9xckh`W95 zQO-#_;|aR}!d@=VI1!eHj3-de;*i_k{I?agLZMLnr=VV*Xc6QltYsWrxP-;iR2Gl&!N7SMx>0{}gf* zmHS^6u=UH?EMK>mV{(^$9~dp647>d~&Tk(=v`L6Fk*=0P3aI+L?W|ky4U2bIQ{%E= z4KksVqOj3LWV<#*=p(SzSm=KD4GfOfVUeHrY2oQ3oxYx;{Rh~)*+I&<&cs`b*#7lT ztlEE^64BP&4hJFahcV=m>$s}B6_@rX`RqmtT^wcXTlgL`R%KJ*NN2z$mofUBo}_#C zvwq0}zMQ)YPf#rFF1wdo`o|Cv5`v{}H``at$(-aExoLGFTH#(~9qDXwkDg`d2{pDrH5=&@rN+##08@K{=P z?m>@Et%$T#le2X%Svh(VMsy|FbdVqa{2AG82GFi!GVx|FatFK}KN|;M=a-t~x!fxxgd(d~ih$~;bkJ~RA&Zw>~zI|jirU89u*Ey9~IVUL9W1tS2 z-bj=Ku=YB>h*QR)y`?4N7jbAB=ohQZhdC^fHoZqNa@08t>KaYmvU1X=JiwjzPT``# z0~ye_2fYS$CDq~U9+w8f*M5tTn$G=ifCVzEA>9gdkw%$sZ99Nd+K;riQ<`~< zqkG-7I;Sl$=4y^EC?x5MySd}u>zOoeG=mcADOtIQkC$5*by-&-LM@m?#99%`X;PVp zvjSNjZfeT*u;8l|SV!H>bvIqhrK1PYH6;R5)@;6rL5k*hiyk2uqDM18Dz#F%G6*gX8U)W zD6u5aYDgd2QbBFWZe}cV(sTT9`lNfwU9pml8w${8v?j_X#LoV$Y+A5~l8^|(L(ACm z*&?!z?`PGP)y$YNn^l{3k!fg0#{?@DgC@C7Meg$?KTV^nqq_76TW0OS*`*h4G7^Zf zlyG$YYLNUl)iz|qenTs+ezXuDeNjav|umx zwq0n`HlA>uiHOuxl9TmR{rCfggD26$v4NS353sAkM2EJ~7)4lT1v(>oXE`MY=JL_@ z5Mm0Y$XdtJ-Q^G-i6w6pTOFZ<_ZY&kHWBDtK0>{VnNih;w7eyhgeRgOa3Pc18nM?K z@YYv1AhqcGpoF*Oe>A zw|ouGE7@_pk_I87c20elCqG)r*6L^mwh1FFXC==(I-Sk+ z4(vjdo8=;T`7Ke4d^tkC4DxHpO^$0R+Pi^eA1`2Ml^3repPk>m!P8HC&D=v?(lUan z+440{y!19d9<`9zDuJYi15AByHj57x(_k)Q`_viy^wkck(+AL}XIBPT*D+&V7CUmB znB|n)|B9TFbK};BUy5<@%25or!QhLnSDKtXstW`d(z)9u{8bcjfz z>!9&mFsd&-qUy=tzn1AM<}&w(&-miAkNI%g_k6K%BYTcjVAKZ_nb@6S=a1#QVI4^h zHaGihkWUQ0R$@~7GxEaWj7W2_>5~%L4rxPtT(GEYuN;X_JpPnuk7BiS`AvMjFj6}Y zV$6k;xa5{=m~{C$^w_hEy#*fJHCy;mh{Q=lhjZSTn|bhsMI4el*GvDJ@1G+dv1-SO ze20?UX#nS5GMUS7xPoy5yOLPwAi39hjJft2CSEm$f%VxGWtUT3ah&}-*D`zlkIee! zLq7ZbGd}rg8sE>}!qL1M?Su8d744l7U9b>?=_JO1v*YDFa{moHd~pXXjV@U-XA$DY z!5B>^wOlvlI!1PhBU%c(UzoaR`h=18NguEO zjaZ$%9!H%Kx1m4hT|S1uDLwE#<7Plw|H}2Xx>KY;lO&QFXiK7`cW*p~U_ZW{}JCMPxtu$(%JNrk7TxrTe zKGLngUQ)!4!|h2+6?snX%Amph7}hl&W#7Vy5KTyzU6wZyXYduoHv|qaWy2zghFITdR=rm|8wtcOc^&$w7ubUjkgmY8HCAX z`IRLUqCuI(%|`o?Ts-M2uDtwehQ}YL?&u8GWC=m2RGmVhQ2a|#!mcF|1E1IJ#9{YP zUtdpsUA-ngwAmmz*ftG}^6!a3QitB?#qDauZf~S9D2(995K@A`*8M7OzVQ}ryX|If zn9!fD2|>6$9y~t(w+FRJlv5CKh}hhY1|f)am{NN&`SF1`-ujSbYmQLhiXkf2gDJR> zk`g=hr9$xKWpSXfkp|&gj=??=wo7i6A`>ms>=oxSXgoMA8T7ySdhY(qpLyuPTe$Lq z?zED#b<&;YMk4bW_$iQi_8(2>UjN6`g_e@Od>%J0?OTd+y_|5Q{T6mopF~6x8KNU5 zB95fNmvhrCw{qLfH*(9^9(0Jc;?xqUh3Y?=PPLFk9<*&&8gaM^*|%&abH7}H_u?BF z5EDdf_AK6c|6AUfe+0+b^!BDGKcCe`aB>eqPfjX7l zhfauZ=aGZ#t}3Ufyqrp%nb4pF+7LmoRk~3q6bi+^5+&?f2yGV3Xz*{w8!$VG6mP;j zutBkW5yfDXQo@GCnn9QT73`e)1b_Ma*G$_HMCZ|Cx%m&#Y`phIZo1(HZn*Jg?s)!N z=I*b;YBBx#=Egz|8MJux=;a`63?ZoFjoj8_FSCFAi8(twbQscugph;0^}r3>`q*oH zvNl&}HUl={N2b#t({B)I)WVZSB2Q)!rzYTpxNB^np}~JNI$T0NHAij??Dy|ap7^Vm zWg_3M)k;CLH_G&B_QFis%lv4MbHzVhAPl_^r@j-TZa9zO-3pm?_Z{4F(+%7x%H#T% z=CUHQmLPLeNeBD|K0Ysk6v88)^D<9FR8#PNOneMTX=@i%kdp9a&$Y9y#+JByZY zX6c?{JR*H(4RRLP7*1@LvD`SMp4IO^!5{8_hG#Zf=+?6@!#mcqZ}x{gf9LJoGUb1` z_k|rKUilznx+Rbtna|GYZ}N;R(+`Wlc;M=ZHrozZ!>FUE$Y=M zZX$|S^ZC91!yj(CNwn4L_~=M1krzG4q}C1EOtq4C3WY-PuS0E6+#<-q&Q4`+DOFVv z(k_i?)5$#gd<|3=R8Z$K6OkGT{=_^>3#5pIFTl0zIXuBYCdK&w`Xq($j))D&~{ zU;%YvWb}%1)Q1YY#0bJ1wN%yV2~CbC)Ep3C0kpS6j}&7!gbo zZM8~-6Py%|&Cp2su{=s@8gR(;dQIA9yRBMFfg;O92-y034i$UR1xJwHDipov?2;ck zytwL0IG$BRrNf6IB9Ydj%%elxROJ>>SX4o+5cCF1Ea^hHg$uD}6!lS&lTSfj8MQhS zCQCeRgk7i*aXPJ>CBn_|DqN-@!bE!v(m6#uWgI(PK&{&&guaj9*fbK7l8Cd&+2w#Y zg+ifF{O-sNij}ZyF@(sH(`fRLFBAk!{m7Xsxt>jk3i+I|>16^@4syKI>E#TSa3g11 zyz+|?{;=fCh;$|o;SsMGB{h*J3}iSzFGXP|2VwcBthv3M6_e}nq(~I;`S**Hfk>ew z{{_O+?4*C04!^ma3DX%x+GL)Dfi(LyWPR(Te~~Z0;F9_FA9$pHIio1Vn+#jHX$oHy zhjuRQWx1RlhJQ~zVJ0Jy1RmXL)&XSPvdm;Y8I##k#)SuUbYoM^B9vX^0yCruZZU?o>J1vR<!hhX{q=vcT>ND%+nwge zb-JjN2sbh;5t!df)|rS$_-QI{xeoO7`cWtp3dO$$CF~Rmg+ifFD9#d;uxm-=qd)m9 z@jn88TK;2_qxd({)E54e+NVOHP$+&6l(1_lv~_U?41qU5|GkI-TzebUgsJ)3G!3~% z%AZbciJ9W;MhH3iMz+=#v_t%s>*xa33WY+UIJ;27u0=3l4Li=7xBt%5mp{+!3X8V> z=-)GV8nJ|wadgQm+|zFa{hnDvX}ue>QB<`~R(B4Yzk8Qg?){K8g)W?;2`GVgHX;O_ zXodB;+nM>dYq@N2S9dm1Y;=aYZ5fJ)cT2TVDGW-vCNHIa|S6tI0h4^IQ!|kJvl&nN(`Ml0 zjGW(GzOAh71J~>kn_k~YLye2lBSn~YKhDdGipi|h`@gN~b5LJVOkrLrHBK>r2GZaU zUmVT$$kWm+;*@VnHqH3R`2BmuH9VaKS6f{dt-qEQXmNKaUW&T}DPFulad&qo5K3_k z?jgmYxI+o$gu*4b(;M|vO;XAl2KnEhwJ1`4E>HUZZ(Ugx{4lN+^S^M{C0MLjD@H{o=;m@RiQL?wh; zwM0@@7c6Y+?(Fgc8bHVr>}~kqfzw^2rucP(wRPbamK?DLW`^p3;q2joelOzqytE}q z2wwv%uH`n`Z1oBfSgSzCPaFKnfM|a4CO*+F`+80^S33xqiGSoACKfI`z+g9J!k%84 zDl}*Fr|5HGo1L?=GgAnxgNoQyl+a08Bd)u0$@t45@i}3MX052s*0id$j6M1N{d-*8 zSz`~9ilC3|-wmY9D=n4q*+b>d_gIM}BdEL6BGR6QhrCaL2M_W_9eFr}D?$M?MMb&! zb#x3o!G(sL_&Eg7;BhA%Anic`t$_`wRN9h-l0sOnLHCQ*fhR39T`i!Q%q znd9+(us>3po=W&(>@npiNDtlEz_x~&M`k~3J_A&8T-0KLKY|U!v=a9Kfj_G?pLr3= z7F1*}B^OyfXP0EhNsa#`MyY3e9ftC)VLG{fqgK%+Sg%`sQ80x6mhK$PH+!Ps92HcM zk%wcyd$j4px4+q`74e)_!Wg}?J{^y&f?d_8ikpvSNPWCr@%DTjJ4%^mQg%uU`8`-T z)}3ihq0oF#=W?}Ah6p7jX0zJs-oL=}B?^3RKcnaj8Ly!rmwGwc_jw&clGmxsaM;Di zoN1-Ds-)EPHD1H(U~zb4aW5;Q-EX1i<2?lr4cSY6mq+^BH5*%Nh9O;zmJ6m3)1Agw z2R#sE`kea;Kf4R8p3F=NE@V{L#8*#HN*YV2)hF-~ z`kat@h^|UJmB~WnB$0MdC?p8wCHGCzSh@c>+Pd79Gu8YpUB9HXQq z4OpU3U<61;WaIE6pUBF3FykH5hQHyBH2X?Vxwp+j<9tX2_1hU@vM?sQ-*R}0lXiF| zIR#yk8TekJ9bTfPXk!#;sF10>AM|=XnALL+D~Hj+`FOo+KsRp(#wpXW{={5U?V#v zR{&?4V3$kPu&4IqA+5%=sz3>Mkr!eYxbmSh!!u(q(!(NdQMOOQN->7WQTR^~H4y&@ z;C8wIQcISMd_BbSIGdv<(QI-eE;pEoKI2a3(ZNcOge)CNK(Pw2dQF9ly-u$STss%^$Y1g8Kg2=G1T((fY^b{msO1V)6<7Av}S z0eT|3ow=DoJ_5`b&_$Uj@e?OH4~5I#@;eBo-H646iREHipdpGV*J`KI+FmN8t_)8>@F}<_~KPttgdKdOvG}(pnR9g0-(nEfqP7=&IU|dhb+G8p;1?7IF=4QJrWOB1+Z>Qly14N$V7q=mUm*9fSZ@CP z@0z6e+2|ISGnsX{P_$T|!1@XjN!B};&U~^ZUnH@vknY79_r)YQhNq)oA3qN8Rx$GW zb1X+K33NrV>>?u_&p%zQ8+h&oGd5hTd)%99(V@9bdkU_1b-QPKjPi7K2N~Mex$o0} zu(qe6gF;Fe`7Y%Fw;5g`?1yU8Ta~?poS=(jwu$B{0Qq770E3 zc}u;g)eeg+#QfI?FmBjjbwHBLc#Kyd{R5ihAe95n)n0S1flN6 znAzoJkq3eVy+S#JJYRyl0zZ{l#S?N0BpE^KD{fPsKxJWPF=e{mD_;dXY{VtNC#dpM zSlZf(dCLKvIHHGJ!t#x#Z08@?-+@WHQ}(=#BO>}3syA8qI&S_f`&`fJG+g(jH*Du= zG0n$D6+6-c>Vq(ec>~uw7cfb1L@g}|Ma^+UjYLzT%!hV9iHQY#sLhaEJy-i@D*VGt zv0Ypm(naV4uWYAVx~(x0mITb@S4WhWJu|&d)ySLA-y+hau;1CvQ8hVj*ShmKEcU|c zMRpDC$THWdEp43r$A8vSCT8&p4{%bzdVv(aBgw47U1Zep>_m}b8L1U1*9$qvel?S= zy+yswBWk)y+W$Lj*&Lkip4z)kInp}PtVyu4=}2`PjE6nXnCQ;ZC%%h_3FMG3*A;Z2 z{zCUIM=4Y&mbaQA^n1MSD1GbL7ZEJFiBG0!H$fjM-$mwfUIj~g-jvpR9!{R#os?R5 zJ^n%UK{F#|Ey-Hh#tOQUqxvyU)#uF-j5+g{1c9Tj(rVhfj=ZeX4*OWSPR5tnt+w_D zPpF*1uH^2Y?)9tIcm6Hpz-Dw{4yGQZ^NmJ`z5^vwU!)A*?LL}jpcofoi}AX6%MT+; z!MSW-qb?H;6TEi9Z3ljv!fHeATf+$hgY|0+;jK*!k#!fRc(ytnQttqqZ{U zgChI@^VD)gpfbz-y(F$WU#;k{B^tF^*Jtd@q|3=C`7e>BgyXF0Iw*N^M?;~)d8Q7l zy=A3dKa!Ha|In6kYaV>vXRUwwk;2pQBLDe5uz7L&21OV`lFaL$MF59@6@n4u@T&|` zfbiU-;B^AwL18̓f_$$jnA+_p~|Vaj$vK_H2Rp-{$C1+14A$rP)eD<+_xG<3V5 z2(?`kCw_mvEa`|0X|A3gToq>=K44SG#M0KXPG;}5hm>TYwqA>@`~}7c!pQx^i9@`Y zh_(5sQhROF@?!j@8sFY@d4an`j~|+-gW*`glC~Gg=bcM#cw7TV$k$~mTnd}LNRf2s z_eUOVV2XM@LqEiW#cF@&8RFQ9;arH_4f5>}Q zPu2RSm1>EBhc;)oe?>+fnPrV5SHNO?eSuf93JdDY<0x~a%7#oO9~&JeE!&Qksye8^ zD^R;d{NaLPAO?z&lQ}Wt?AbmAo%6JshSPnn%+l+=_Du-7p(_FPL!Of3=CT8)TR9{p zl8q`r^87F$@Mn5kSIu!k?O|x;GMiM_$MdbqY)N51!sx=mCkt2G zqUHd7nteH@^Zqfkx%`;#c;6-0a8*X{X=zR;5Rax8`aV9*|Nc3)+CAwr2a9J+!AW!I z9faa?mV{;F0uD8t5GgmbVW;Wo9U!^Qc^J}^IZSp-3ZCH zTR=_*ua#yW4>-DIzjRU~V^kW=3_fFv2l?`~)7|sb!LZnHNO2TAbKeJWCZyC{HokVI zvkilOi72EF(Q2%=U9%!P`AvOmEq2(>zMs-^<;^MXu>?%*VotOGX+zB|Ni~2FGmd3R_w4(T4h)=X~{t`DL`?=(bC;GaN-5$ zH4q|tg0=C-XgdN&3(tk~xmSNMs1(Adp;vpVTs$8pN| zv$Fj^rs#af-1L0$U|QWiw%V_L_`!F}Kiss5b8B6xL0oz8671K$R&$n@el3Dj+Q!w) z9Ywg&Fas^Di3cBSZ%&(w?I%27yHOvi6?2B29hP$q%X5yG>9scDxKUW5qydRyT^DhK z@$2OScD`~ZKYo&>=g@np+vAyY$Fz4$t2Krkt;pCIbZJ98O%@AQuCliI8pj)8Lqyg#R;%FtG*gg za4>tRMGIGpc%03iHi8q##b+Ga6sZmm10j}3Rl*4B+P;G~WAd8)!_{WKa*9*U?sQmG zOk*I$6iC&FO1|9JpLu==M?V`aIsFYKn^5jzXZsn#;D^=6?$_W0Zk@QcBk9Y{F8QDg z|FNMbPDcR$2DKg za#1^9EKz{kz^JYLCkbp%?)1m+{Vyk%GrpCdu}(5A-&>F)jNrafNu)vxBfgSBRgeni zQ3fXus~Rs=4@Ax$aUZ`v@*C0lLCHb!+g9%MLuRnyrTgo>RAXMu7ZtB+ouKU4t3GJ8nR(GRfN#d%h z-xQMu{VcrxJ)-#tZ#b}N%!qATxq&x*LxlqC85m=H^X}+ny03;yB{8{sT_L28z-@g6F6D#iC`S5dh zT^&nmtI!yEgOkdV#6$6#BZ9*@K7wbAWRyO!jL7xhJd+MGWQjd``(r@*Wq<6t5RM51 z8d5iC^I*MdeWTsA&&}T>43Tq_pv#NFCkUQa7E|9bawli$utBBzJ8Afk7mRIs(YluX z?|RRPbAJ)|pl%ys*hcJ}!R_EXas~F-Y`OFKi`e+8FqtLA)ZR_1dxmhja*u9P+Rmkp zY*g(l;KDm!gep^@Q@|$A%=c?hA$9rM4EM;O`+*Fpe_*jQ4xC@PxoKKA(NqTiP*T3rCBWYj8y7#e*U`vuZ9=ne|#NIjYZN7ib%GyA#GfJc| zA~5bXMe8uO_9mr6oPM2M@%o>X+Lqr_wJ&dTT+DauPp&ak*;K!cPoIyDr!ED7{G*pg z;d+(4U%%$boHpOCsD2Z}#>Sp_yjgx7T10#I4&3B7^0?_IeAd^J>eZUc%W2vIPz$BW znRhllWouPLu8sNL(XnmyKgv0#3B8+v)SxCboo~olS@`l|p1e_o{XsVRLcyJivkWQ4gOPJ%ZWOzT{iEVwVa2&5-kSF0KszI_rd0<=k5pf47*+nAP%DTD1^tILi{=felQ(=VIVsR)lNR#*e%{G2>kJTaMu`lR#&TVj~y zi^U2X$ryi$?P@3-$vj?lKO$x_YVLu`js9% zrD^}|qtCX#SIFUKX5x5k_rNt019#@&CM&F+ar7xR3ol2rvOMyaH$r~C?0?%hlmASW zgf-p#HNF2a$Uptqb$~Bpj7Q#sP)*F4Ocd;iYVqz(%MIG1VcG}FR2fTG)B0jY4?OuL zLwV}B;6$-H)|8PumQ^jFCda`&?N&URv6;Q);K=1|{=*{a*GcxVp-=*J7)C+~~r znr!e)dZV`=D@E9VI+P(Kt|>~|Hl{}clp|fOVln-(Uy-|Q&o(Y`D}m$0H(Rsg@M3_p zmIyMr*=n0nMDs|JL0n2ck6jH%J{Pjf{FkmxU;O)N{d00eR25Vn^Gf3l@YCJ% z=N6L2pNUkgM`E_*zPq3NL%C}%FzW^MLNQy_Db*j(LvEov-lII>94_;!%A!s^>iG7| z*`k)BjmfL~U{8zIkl-p(_oGsphau3_QKneRXviu<%dfy7BO5XqTi17#l;>UDkAX4C zLWLYTzv%us^G@2?!Nxl8nlZoQnKG^PypW3Y`!)R1&$^&d^T+)NqA+_*s&E~V*ePG` zxKL~AFRh5f)gSTaH#k!>A{GMB#F64edz^Zj%fI-0c(|J;#a#~x=+-b z#ThuzRC(a4x%e3`Et;f2)#T0nqqknjWZ=swN6F20Dk;Z?&r8P%G;?r%8u%A;)4bKb z?5$A%(M+vBSv<&iB1O*=cw1niqdX&7OmsPyd=$PfqisOYB>a+ax&j%J^`q8FW-&XB z3yWMar2SG$?F*33n&l}=6p9)SD#1k*Mh#Y}Q&^FZ)C8&oUlqtn2u1&$hKXFEar{Nk zx||oj@#FqAy7G|9yyAT`4DB9>N}o&6=w8pTE77j}H5^gEX;ezKp#qQSU>kS|==4Ty z6+>sM_MATOmWytm z5Q6o^p)F#3^TdU#&B=nQ(jyJ$bg0F3P8GRt>oFyCZhxrEkA)>ei6xA;orS$X*g#UO zTvWbzVMucVu7k<`Uu+)`Mt&g6RqM43JP`SYMJbGO%A-a(sk2hp0D<=LHm3R^@1DDKXawX7^pd-BEZX5qIW^ zZ2|FWU2h*5aEB=wfKrnU9zx4Oy5io62w>f7;?Nhun#@nAnvpz1Qdm-UKWbtijucKM%91oZEGs9f@4?bk2jq)RpFLuo3qH%x1ryaX!a`PG=22t=;I zkhqRvc^zGvm2HEPo{fm0+2mX@eFvF?Z@2BUXT8NuILz@39A~chJkBjStIEUerJPzB zvuTt8z?d}bpjlRoX2gNt;d#rd*so8R(!Yd% zlodRd`DUfyyvUagK;MF0j_hW$7>W4=VdJNLU7U$c3Hm0W9(i}>Ek9QRX}n@(J%1`b zJqK6I@@2G!;Jw!$LR44`WvqA(b+_s$D-ydq^X!lbSK5XN+tu&~tR!G};tDlV8Y z>Yy6Uj*6n?;R)|^q@1hCEK@x`K3~5Lip`h`svbFzu>3~2&d%T(Whs{okD1s>36{bo z%?_p9=GX^qK-q!Rmv33($$Z!woyZDJF_hvVPQKu=O~nH~eh>sVQ$Q@E@kr4D+>b4) zTmQowwJ|!Rd|xqvXZ38#_IXv}A63of!~|nfMsrEBwN6)yOaFP*uzZvkDOe=OgO%RKj&L>0x#eg=vOQ3WP_x62&kYmIe!EJ(Ei@olF$-npJ<)Uj+@cHTT>Dr&9aVL^cu(hf~ zBeTG!Vh%YhhB0|q6IE;IesS^0MksJ<<$2#+$zpe4J~AU+v6jmv%|ojnhXhsZ%!Aw= z;Kv8A*Tv51BKV1EhZQ+&j+I>(U6m#<@Lbh9BW9|JZ0>+YyR9|{A-A*C`?t_64yXWoqz(e!L{o<2InbW0yl!w@IOYo^bp4xl(~T1Tw$UuubA|v{S3#wn@r9IM zMRtK88I{Vx%x8hqnU9~a$UQd!P7TLYDz<-axEBy%T=kAvXKfv%r+{?=s0-lh#b%Ct zjSQKF3$;qwzeue4E1cj>|2`ekr_G%}if9Xv^2cNmAOZn&F}iSL+17v~NLkfGl@|CC z7@L2U2?~93oe%vc2nGs!Lp_8aQotghc#Ri#kz};y;6;aqgkt-@0Y=A6d_3Uw&e4_K zT5!wG^l zdXw_vT&b<*Nn9CS6`%lZ7tSn;+MK6Bo2*L`34Mupc;6wJKpoY<=kBx*a+Xw9yI0wIuqaGlLMJkT507?X_&09e zjO!olWcFA5a|s#gls!;;2#s<$8II$u$kOHO+kHd-uw<>66_izCHSq_}ZQ=fF; zPFUg?wLLR7L;suWTcdOZvlKHeWx5_^-z@18TM8*tt!~8>>Zfng3J;28KPLctiBR>g z)JQxZPjM(&q4at9V(?*!L)bV>R?$rMR~o!bEG(-$JZ>#OhtNz?qt-n0o&P@Lclk zg$0`f%|&ybg$v0-rD;2W==)ALmP5aj`_{OY!YPp>{wQfYJ%{{S>guWgrNZfILj6U{ zJ~ld)NJ1tY)Db>O;dK#69BwC*YkB5<&eQbPq7Cucr$d1&dxO3$*AQ^Tx+hrVoj6?ZsI=5!`KZd}!$>tiNRCatn7Lrdy z7q!0~-8q4v&yfNeUBzJo=7 z>U;%BLbmQ;iO}>5$uNO`Hlk2g;IiL`R)WYn!Z={Y;C%8*M>8+_Z;eG{I|}yyrh2%L zjs%|vu=#7IYpfj3s_&fMnvTY!>&RP-{JmDrd^q$)m5ZPg+a1SeeX6%2&Ie@1H`e3! z&Y}0@>1hiOjEahMGdN8MPA;Vj{_-M)0c2fn*LDpm-Kfe9CQJ+VKMJ61`QoG*T)s*# z;9dP^SC?l8>d8?OlecPQ;vM!JpRdIx-yK~)__1Hj2CnY5A6HDyS-BC1I&o!)A5s;fQ$LzeD0vUbpOr z-O>%W9VimQ=w^MtMRlDgpP%fE^6L64Wc;3jhr)CA#t+G+aEEsTfUkW}5xs#C75bgE zo=zz_tV3x~w?}6|MI9_SZDQI7c!(0Y>Y0LFj+L|Wsbfmj%TO4){O|?k;tvDM%23HV z^n7ya7`Gv9WQW_ZPEEDJjBZt!EyF7HI(sRaWrQD5*&MMo{qJ(T=VOtGl0Wu^9JiQKOixV*ruuXj)NxMGv+as zYbHAmi_)2x`zn!#SMHPx&ipZ25_y9GgIXhRl*@wD&`B?7uo+O%?3bcK`sXthWdc5v zNYi!`@sl$B={W&tUkEg(_xv$Nw;jwb9O>-O4>@>Nw603Nyxf!5EoI%Utk>U-DtL&) zKg@3!lChIycn?4+#N0oR@K&#AMAqvtEc1O4S^*ut&jdcnqqpAt55uqOXOyJ7*pK;t zlD&*_E2R!*>!_@$F)yON*Lyg720=s6i5G#`xoAFFA$GYijImYegng%L-ErNWg3KG$ z77@M(v2|90kSxvR>|BiAYRR_D0mD&pB>cfsx{yJ`UqgFa7oYwPfS{B6&7-;6|IaTb zcb0iEcLg}p80_;MNMpIWo*=HLa84n)au|ge>8!8gVlcjU7_~tbJw$@*6yeGbaSkx% zU0Ku2SQ75sbwX+XwBgur-gmCb?Bm#=fZpBM?PmJ<`v$@2K6{^wX>G+u0cBiWGZOpN zz+l5s6`*l5TIAv=peVtY6N-k!$iPb!2*R@B%VTeQ1rvrv%jGL2n|`c2wkW_HcDE}| z`RY(68cLlytI|jGRHd5-9+LBt!3eku$1JRNPAAv8xsYG^de23fiFMunX+Z1-m11+6 zv^?T(08q=og7WX;cl*WzfwIG`_9Y7gBu zGi7-8rG)|{xhl29PkI=9 zE|w5FMi2yVcj)C8m1RmXU84Bq2p@YQ1fO?9yv{QH*q#RQj>a3$_;@*QS_tkpo|C;E z%AuFrqX35LR1mE`gLcqwJJ(IytFICoBR*@wC!vt`x=3sEW6k~{r`3y%2C}ISlz;f} z`5lHa7sAn>%eNxOAhtS9q0IbIR2r`+gz|wkHcDyN|C`sDsWQF zETSR&Ax`i#F}Bt_{Tbwqy$`%y)}8TYlte<0QDq2(JPiNCSkp^9d)u;KrP!h2Qt0*( z-0BS~@GiAQt)>#*tm!?SADl=uIM4C9unf-d?fGnW3VN@8N33TxZhv??U_HQBTb`OZ?#Ef&zrc|7CwmrZew58WA z96?_TKlInL_c-}xn@4`a1bVy)!dZ~UwHJD?n?L%lk$|=%CAv!Uh}ahlp-!Co>#S1l zki4Wg7(GBZk*!;cSzT0%|lCv_g@<{%N%hz|5DyFA-vzUrLwhU2G`b%n5 zqZcmo5Q8W{A-a-Q#*0WhW6PUBTDPqwxzQ}O9`qUJ6Aellh7f)R60}_U<(M?Uc=O(L%^KR$pc~@xBkUmrpIAE+hJoj6?!>9;jmsO{n~DmlT_j6 z@y5MggDXK=N4D|nMT%q`Hoq<%P(8P=Dy=f9AimyJ*yeB{cA*ia2&<#nRbJ(%afaIEpTAzB)9Hrdt`^T(R8yR^0HdLtN>*$bV>8xI>Pz zal6l^LuEN##0o(YX$OEwO?OvZdCa*6HdW6(7bbVZ3p_oZl%BYJ1t#gE%^o;AzeUw< zT&9PGhSN|@l?>~2;L8S%NChg4_+f918FmWwil#;VxHx;b@Um+5P8N{ zj?B1QF7t*?GT!o80;Q}rRUe=zO)%1Y;3W*Fe0@+gXEQkpfq6-b#C4#0)-+lRoTG=) zUoPu`T5LRi>Vb+frwyl+QLz*&a0Zo`> z7Sw+eqt5pDHcZ5S&M9ra8alMO6$bj~AYp40ReWQoD3r~%AK<`R-->~iXtp~~-9T*qrXA>VZV|k_q7&O( z9B)}wSaR!Z)Eo}ctY;E*OzXKJI)7+Lq(INNj?74g3-AbTNC zWp_+RcStXuChj^%kMoYfN%m&`eF^k$U}+g)oGL2eGHpV_uX$oI%@n+1HO23@>(_nF z3xe&<3lafz1X_2?eQp@U&PGAfC&xRT6!_v|KxCH_#MJ&FR_Ut4p)yy#Y7~g6wq$^f?2-Jb{_{Tec2@4Vzcg}b+3~>VzVhx9 zHXLHQP0UkEp1vilQ+(YD%IpWTPS#b{wSw!Bd$OqnJmr{l#hw>3TWx-bgF(7XhYOf9 zSBDrbnsYwHV|X47Mop#V`gT{oJBYyD)ju!oz=dG1c+7 z0tzy_SHUJLaok5EE2A@Jj47NBZ>DDr#8#0}jH-ASroT?F3tm)l_6-bB)fXlVAcFfm zpoOQk3FJ#kii-HDL_}NUUkWBz2)f>>WMA?*nZoO9dWK6DC!NYxxhaQ!A!ohDK zObI3Z(yPrFR?Vt1b=(u*y+VZ|A}nc%H&04Ckta1A9Y;m2VU@0g0--Bp*&oiyOqZ{; zhBBK%X>HKsU7vk*-OhBD(Gm|9rvX+Hx>CY3OItZcOpg zL3f;+OUpdo46Pu3+iVFE8i)MF9FI|2iIb7nZHUX0ORBE1#=I4BXPkvB`;TqdF{KN{ z@wQ|REF8P-nIJi~;|1(3Rx;}W4*IlVG4HE)s~pF5cWjwy7RQ1kCSXUI5V<=^f(hnQ zJSRj-<67%az@HgE2*~nt$CRG5$gFTq^Bso~c^q^`)7%ENI2^baF*NsI#^RUU%y?C@ zhvo+AE1e%Ht9*_d;nhKN5*uKGh*uG;#@{ZRh0M6dt!WLS79T_@6dFXq{P_qnJ73Vr z%GwgA(m6*@I=46NNWfs>}v`iU*h+0}H)KZ|cd6mrJhZ&-+((y{!6F-EM}Q{nku->3MRZ3tOjndhz3!aCYo3HIn(iCe${(rRLooW+j?B(#em| zoqWc}G5(p*6M}S>{}{tnMxBVRogo;vA{Twsq6InMl+{&L1GFA_zJXK<*XJ@IE zDERPlqlSj$@tL(HOigKcSA94sDJct{p7sM3cROi;rGjG2AwkA7<^_jmz<&?~B`Fk2 ze2Du*pdO#6g#N=eTf7!}J@FYA-+Ag#3KLzV_xdhYlnVp}Qe!rSvj4fB!6__Q1>8@^ zi=4!WM8?I#=Vl|9UZ}(y63(|(QA%Ku1CeUt{PYKvZU~uM9&SFJ2aK(Hs!3Yd!5 zZn!6u=$|E0LsBG56t=VTq^D4<#HZ*X}DP$gdgJ`i6e+6z4BWZ<|58(>B9>?FHY+ zX$pr(bdKAOC&`BO%NRS4QVjV&(dFqa!_gFJ(<<@&9$Dir`#2nK-GViDF&$~-hxez^ zj$5fXcig+sK){9vY!~ZxGxKq}FFL0Y&57X!O)<%i-jyI)`U0>wl|c=n{|w%IQp7LK z^=dHTd&x3ikH+{1*A0))3H-k#%#Yot@8I$dY9n&n&vDzHrK7lBT5b|w0W{20BR1nW zm+Leom`$|%Q}Ty+LBub6SLM_fl3U5`p4cSXr2Zx)+BI>qP3Db3!JfSQesVDJOAgM| zEz!GPH0I3czT1RT=U*mmTjzR+TJ94lY>xT5aNw8LqXd zq=}cqy|WE>uI~nVe#RuiNZ0Tc{h4{EkEcofA|fDY{6m!h>BW+Ez&CMmGBt&5+OmlY zS!Hv7yrzQc=rbVMl-ds!H3CiD$txCtMtWUeq3hc0qpbrKtg@EuG^u0_9m1@v%gyV# zAYfDberzUcyThnB}pi?l%$4zkjIdVS4C$bnz`OoVLh41hEdSi1ZI^%cAdvdsv>`$QI zAxU5`M7w*v3#MQ;5wAoK*sr&aHN^-e&=5z%3o@JX2J!puclBM}vujPH-gnvQ`m{su z29*Gg{moyZe~UZJs8)IjQmnYV*ATiQioo!447bMJv*TBb+*5#0o)7OGR_=u(A|y;! zOvQ0>gd@2R?_V1I&Ta}W=XIHtO7B*8phu}TZTiiDyrZ6}MNNa2$Ra~Y%B+qav%(oU ziSt2l{Yp>pW&SM>d12?V2wDAitb5A})zn)~KN4@ESz+EZT7K@0>!^h$!crv7ixCpo z<<@6>GW@qMV{cc8JTaiGthr+*9l3BLP+c{NKQ$Ricqn&B_5!19D}-Ku{ZiSc-<=0? zYSTulB6>1FK?pj>iCj^Zi_(|^^TeM{In*&R> zC-2V|l(bazBj`;D;!j$`4j)jrmW+}e&m{>Q`?m?4PeTUhRlb*hIPohjWBAWCfJdJw zT|FyiwPh?l@J3%?8MF}u)knS36)YM3utuA{X)QL(PIYs;yh`^}g${)}6>mGfvCkpD z<)xn$vRz#fId^u}!3im(D)Ebn@1DEx=J2~inQOuk7=!Nq-k6!IrHm6rr7^djadTBW z*b`gZL?3xw)#UhYgN`0|Iow;7NX#dH?MrBr0<@aE5H4qDu#V5)(bb`xTj08b^Cvxz z*vhUPF5;6zXMbO=UwZ%Zg7(<7-i{6)^KOkn>5VZleC~K&Js-XxO5Mj;bf*Qj4&_k0 z*OVIlatg&AnB#Ik?z9BE&f>G)omm^b)k!0jyt@x9HEh@v1pmI}QK_>*r?%j?1a^}Q z>9!K( zA3K@w%Lns1HgP%*=FBH{xyM>8-p1mKEcQ6$$WLKIF@GZ#gTviO`rP&_(1;{3ux5Vq zu9Y#HzXtEir?VwFiO8=NaBJbtG`tm4&-B_U`ve>Z%iosE%uSs?ip6Ml>YJ4}o!5Lw(Rova#&)Gi&zFl^2lJjtD3Opi>SU4w zZ832q2RS4?IBvNljq<`|2tIB)F~h4*8=?y*=mJ0C`$Y>7v1y5iMMlxn<&){b!D?vr znbNG%`1_9-D&Bm_3OY9x)UDXkXJM0X=4T0sArhmUqrEN-eKbJMzi_6=xaKLOg z&TJ^XH8c_BRu#C@=t`0zrQ?Ez_sCmy)m!Ovdwd)Du%Xivnc4o7(K+Qck$MT9B|LAh z_W^)7M0_sLp=f^o8okUW?HMvpY&(D!pHo_WKL=cqQsy4Y4J)RVfd!e>v;9Ydi+c-$ zv*A#UyS3sVTfUgyOf<1M=7lz43zkE=PzwSJW#jTZ^HJHIsF&#SmY2-aR>JOvum~-U zAJRFebCg`rUKvklmaE-jX0GIFHB2g$w>1+}k9<&rwCm8io14HrwzPI;uE`obuF;z# z9`qC(njz19uCXlr5s8re+3{XUc|65d)C?HP5W>< z0j88e`(c+dI2vzWN!grYUH>5mbEQ>2_J}sYjH=bNFRDyoPUUf;dYSwSI)SP#$kzA2 zjag;*pD|n+9C9C!oxRwMz_{q@tcRnsJndUg>0UgQKL#(zt1Cc97fJ}rJhhPHl*l() zA~KkC5~a2BNFo{ow@FAP(0zlg00f-t`=AoPZSNJkhLF}Mt^Tw|3P+d70J}@|_)SKm z$&7s_?frF_hBUj)CcF^&C1qt%irqw(oYF(ENA*-_B&xF0(|UrKr^O2oVbSz_5~w<_ zJ{Q*1LO9Ipu-f-q(X3?EHFUrlT=(VTv;NY^j|Gn?i?&37ra)7qHyF#}fyo_UlJ(4g z6&WKv_?~#Bg2%UEuN@2axX3x4qMPenW72)}B*oYOxg;t4F^g4O?VDuKJ3} z@FjPy!k8z0ET}%)B*b)~H^?Xsq}?}(z%OqdW~WdtXK!L?!my}rXDZz&&4MUg8!up* zg70b6I{MA>$?)ZDLZqSEk2ziB5oZ*3jW@}It1|OhJmcFEw=|8II*(Y55y<4y>OT*d z51vHUM)lIw;5(kM-yH4+%vIglkX!4H1`Ev}6`h+Dmcx79<02#76X>ouFhc?@l0GMR2liPwG$NY_p7(k#lB3o6QUkwS4`3@JQm`$#k zaxC%28G*BoZVnK$JO6xUytMA+@_JJF&0o>v`(0bMwjfF9QG;VYfWY%SLW^nm4AbP? zh+T#q$0zF3#kb0aGK+CI?~5z?G152hkqF?;kndhfBtv<Ndq9e*?TGQ z-<6C^@Z|P%aJ&-UvF{Vytr9*UUciD9N?X3B6TJ*j3%a;r7@MYSavr>LIlC2yo$a0I zUbKC3ErZxB&T!ZidrpvQfuDDx8{WIEM2(uT4$P&CbGj(>OE?`$ntx1ZOfm;L7O_WlUG8%Js;{5LUR zrY+2`E6ROwNa2w(C}^IFc*7g!7E<`fCE`X4Je=OUBE-ITg_XUI(;B|doyj50$B_rq3}&+HxTS~TaFJ)BGF1Q2@4&^vRdk#dA4U# zCz*-Cv~?a2@F8NBJGiQGVCIsK(je;-S~z;c>8i0(31q^fKHc;Y1Y}9QwM1v9ajxsJjYRQ(K*Tl|0$wLSgqT z6tK(p#k$F3wbHDAr6h2Oi9}ty@OS(!u}+7UBr}_E#986d!eio|<{QdYpG$6oCqBsh z;>RMlaC3kr&Xzj0eG^WBc-JNmHaWCot%)_)^+A6Dbx*#4bHPX)82~-I9qimH)yzh{ zJJQho`^7s&c*LqY;5&ugp7RGX zpGR{b1^v%4tU-@F)sKn{Jra(yl+dWO?z#odhh?8P z79QbrRDKMrQJFotwT)BAjJ*Q`uf^{Uz}4+xIx~_`OxYxL*Va9JLP$UsOni{`t8mIp$e5LAk#W!S> zj>TLY1o`|P;C2nvV~y z&*K2Q6K@T}Dt8?j`HCPo)wpyyk^YMeZFgoHXc)R6S`Vh*$jNZV*5o$T3XIjlly{7s z&er%D!xNb&k=FG1l@?6k@+VwA*EhtCm{!ayN6X0rdbjCzL2>F}rVuqWTkQF=m~_5w z>v?%BU)q9IMfJ1uF1!$4Z>TF@(ijtW>BF&l2T8a#y!GL785pBK z{4{wDB~4sLi|ZEfSh(NDyocv+WsAW9V-bhsrcZ06!?qRxIDR0h!9x?}&m9v*?{q@5 zHv3EdmtT}i5@La2M9R>)08>o^IEvRpSvwqUzDmYL4W+*)?H%9Rjx z38-cc>kuMsK8ZK^F|=zsK|dK-n3o)|*krV48eLTp4JFM$|9bsdi>(r$$pcfzlkEW> zInU`#q+$lEwEu?oMOP$G-UjcawD7UgZ^!X5IuLpo@0=z2X(xxqus#z6V#jrnvg6Ai|DuOiG-j$s_-_wklF5 znOwu<@S)ESM&ZxHBSXaA=k(vqWxe{>zDr;{(0r*K`_pe~vGdPAs8qcG+4AcJi z9dC)!?+%7P2u6gMChf$C`^$;Ph;TwERYLS2zt0jH8O?3#MPGZjg?T z(_vT{^=ow2NkaNbut~7MAm3NPM|?+dJ&@UC@)S47s1k!=ea?&wvWsm~77K^f*TUVp z9Xu7?VN$%(*0y=(zEmf8BE{ss|3rZ`&^EP0tyD1p?H-sgXwgS$9eM|D&S(sx>k#B8 z*}oq2o(Rm6sF}>`XUIx$C%YEO6K=1N?*W8-dSSK|y^T3120=|{x(@9d^Abm>@5RVe zF&6EXRXQ83$c6DhuwTLWn3W{iMj-Pv7^3SnmQPwylFh_GIS@rliRdjtbyjH%2ZDB{ z-|U@;J0dV*l58F_J6&T2;DN>jg9ICT?ZaM7sbyPljdC;0>MSDIo~xYcotaD-lmapG zekA`s4S1BC22tEm#^36=nfVZ(zvRfdi?q^nwf%sj<6H|KCpr3!+d%pG6vz@cV7SP0 zjA|a^EE>qeolZ3M_eH=AOzO zes5ldPUny;ncFrh5FsHP<@NS?=J1$msVYU52CRgNEFQnIFSjfrM;~9L_crA|@~Hof zC6ONWyvpBr_)Yyc(kX>1-jhw*%*1u!Uz%dtqfVX|-XDzDh3f&FCB z@o3VGy+q$G)=__W08XU9)<(AxvnTWx|ENR@5*hKy9my7j;>$Cu!vD_k9j+9A4heYO+wNaiAX1;l?D`cOmC{BZdQqi3wDFw%#U&1(}OFEV~iYA^df4t+ZKk zsNYqdIzR+(LC|-j@j@h*Ux%eBm8n9myrERqp?}v#@&;?v8jq1Wm0F`ZO}|sLd*jBU z5W}K(z37(wno8F70u1O6dg?OjuULQ^%lu@E-WdUxX%G@*I8lSyMRbGxH=4xqJo}65 z=WTgc`}0)@?*iX0TAc*41q1j(|Bip~T75A64 zK_>2ro-B9>8Xh(wA*KCd3B(TIN}TZ#ZamoX$?F|Bm61^s60XC4>+bU3?6y)9Em@jj zvZ#exWfK4p$SUec$<4J8-_h3~B}~K#a;y%mx~}(jSFDLO;Fk<)G{sqkpojNTPoc>{ zoEY>0S7@KORv?_(Mgf#0JC5VsIZ8d)65}Ta0X~N2fF}apEJqLLY~k_i#+xudCm0Sh z&1|!wYAPlVcN`HG%}v2@!}?bwnKjwQo>0iUAnta5&S>IHP+ie}V>I&g$u zv3?zTl~`1h%{h=+7;(8uDl@zT8ypGA1TK8Km9cps+5Q%Yc{@(q5&fUQ7x06Sc43{w zN;BJNaaz*Zo=}@!U-}z~MnZLY=7vSwyg1>Xt~s?1iS&O`M~xn<^O$1{&y|@RJ!?7P zcxh|7I{vGn zNww27ccM)NNo@wwCug2y@Zx;Lqdkg%d`4H)H=26zDNKc0Z(fJbSgp3`PW(BbgDDo+ zh~)G%U+LDTvy!2)O*KMn>G^ez|K)IwDN1deAHz!^HD*0>udw)dv36egYS9`vm@;?~ z%B74gENP7!)LBwL#)YwHxSx|v93EM71;pY7(r0KQ8(Z#7Y?Z~QEk`@J@QzvIs`Hyb z;j*YO9X-(sJw7e4*zkKIDl41}k$7KGP8rhwvCcy%>F_%`xqWVB%@6{?D@}eXhJN7IEZb8AGqQbk|{PldXnG}J;lh8DLU4$48 zsIq3oARB>1SdOTIa1~t;Qe|*+Kz#F-c?5r2dzsdNY^jkC= z-GP%VlS85xs^zR$E)zcn~4+^`7p0bVWRXDltCVpk6MkciwO=+K|<3YYAmCEV)qx1=TCw zMyqq`l4hVNDJ10OQH!#pKGcdYs!uE|X;fdlx1^}k88hK^I^I>X@Y~^->&3qO=D>kufvq1y4nONWbGB#*Y|;t7aXFW zJ_|^!+!#_0n2hKpc74LEH?qyHV>^A)?fnem?Ug2MAIQ+|hFPsmEJM$66TQKY)lgFL zNIp3c8bUBqQgn(AaG^Sp3nr*3^UGNYityU`1(4?=&8cj8e%JfwJdeWRPQMtXA%zn@NNdrZ;tk~>SfREgBDQ7EJ-}lJ6mDu# z-Z!bPD1bNR^WxhtaMJ(rX4!bX2_ZWyDsXr0XWsIo~{kJa0 zN#W)_b21ZzAhxhO_DYj{hZ6;{U(ShDPEm8DIV~d-(P-d<&7if`1 zLehdbukrCy6F>Ds+Eki$uQqdJZ1di)5`2fnmxu}@QGw~%?oD2|?J|#DfxX-{E9%$ejN3og3@z#Yy7D}eyW(>A!Gm;2xMQc=kFcW$)Nc$Z_(d4J`a}uh z2UE&-yixnMUE)3Vs09(lnb+&ph@oKH2<PMlV+-@fUje)GT;ClK=q1Bc*DY@H4%{(Tl@ZAXINsY^QX1WSJJe6~ zGe6}93MNOS5IgZKx?7At9`E`ch$-pC_-)+pgVv;%w?Iho9;%<)M`j~zWD1TaN}A3h z5Ng>ysp#OKUV;+H^FFX3qbw%c1O(f?J_t8mblKEKR_a;t7s}QTIlN(5!X#2M0N~RW zv$VrQ7-=81t+bB~T}^B~vH)KKz7x0|!St_%^H9-$hjOZl>A|{lEP@2wSOAvCB$*bo z6%3|JIH}V($I4TKy;ldAC=)5}?>~x8hQN$L6!8!iD2KDJ0oWco@`~HSRjk8K>Rzdp z+yz8Ni@24dbp`umR7T@!U8zBJq_B@Ka71dP*2?vw&MyFsCh%Z^0Fe`~GmLhi1ESf4}c{+t)h8PAB z{4%JD2M=+1IV5w1vA01vcDL~rrC&0QuR8NI=-x43<8n{zmwR#w2!WA~7y}1KLw9+b ze<)7{^DF!2nJU>v3sMz8 z=#a?W>KSNCU=}d8O<&&aBtv|jACli`yB9AJu8v3>(%ETUBRUEyLaZh@EJYT{&k)~# z%(vpmpCZr3$L}6-L-n+i+xI{ie}I-Jof+7u9mUJEq#tXzSXPh*5U(o^4MW{CAPxARYrREGr9-5gwGB zjAiXyipN}9Q6aD^{G9*)DCfCN}=sPg_z-Lx~3dKFfxH|R}P4I!kH(lWv$si z@Y!pqGF>TWljLXFfb(!8FM@99dD1`H<8Z*TSgqp$of-VS;#yT zluTeK5a%Uaw!ZmlBpmABMMWcG`eO9r(9Na4 z3wy;%z^h4E!2Hj#PVWRYMI|8SgE_h`?579P;d!}VI!wm-1VYVDqzXXG+-#MZPA?p5 zrXCj?`Bp)2`>bModm4%+^wbh55<_5X|9L?>V|aQxZ`jJ_f)I%$ia#G~K3wP~z)iY7 zI>GU`mM2Y)l81v&A&gfPG1vxn2Ce}OGmT~*d`(nED8Qa3QpaWZvp6?+6=6w&0TT9_iyzGtrEb1y@j zvG(tpnXnhyy)_vRC1G4rQ?@_yfo+oHJne2oVp(>aAS;SIs^L;Psx_d}u}2r&Jh<=Q z(BIzRB|aH3d~x-X7hVfUH^Q4rj!GoigOIV6mELO0iHWLs{>+paTUn%ebF zM9hIumE|Ih>o{}jV&PNMqt~3+EYZkPDY>TpNCi@&ZuRZQ;dXm)wHl%j>aGTzt+q^( zmEk9Ks7bB_x!S$)c?T9b5_;?KQ$?7K6EI;|v4UWj-PdX9G{sDYt&^;EdN}zr zKZ(Aej}y=({mvlS-NZCrX>DcYz%HQjx=7iB`mbPw@a%lQ2@r&2CfC9}bn^%>+N3x3 zMHz05>t1wa2p?J`@=SfZeD2~KaVkfw(O!Cl| zKL8q0e<1q0cQ(?cO6B|8jW8Qgg5Iclwe0yBOipU_JhUO#!aSwLh};NhY7+ z1YaBMDSiA#Omi>I@L91x!>RhOb&w*p7i&RgR>ZvRBZI7q*dOUtC<= z!K2NuUZcY-eRUMU;&M8&=d$C*=ft~m*t{g*!2_QIL=z>l>K||1^1Pwz$VBl*1_9!E zJUmYy9)fmR-9FFm=-OQDu26U2%6n5aHF2E?sEOv*Bo1|x;qhw)bf5Rn5}lWr**(;v zcZ6a5I8)j$&ut~j`mBME=6v}BdDj_Xg`zl+I}6750x3k=vg+wo+n(ascSAaYS`w0a z-Jkz~C=7^kS@2z`;W!u%FNYg9!=xK`s!JNrUK<`<%-JLR3cBy!H198(wHomV{58>_ zV+_Uv)@uT?2s=PL^lgFC45;QEJJdGK+ic``cH0++ueUmE0kDqF+}NnELkYx$^e@*U z^+qFxE0z_Pd&?|~hkr>td*!_@Z<1&ib;U`btn~x8d;`!_5dMbmU9CB*+Mkl;;4!qN zmz29lbM)C7`L;cKOlY|c%KOmP(cC{)?Ym!ZyIVO!oZ3%GN!p`<48-)N8$d|=dI&!f z3_;)&59rkRu&rKS)z6x4%%{%PM&t8w7h8S4hV!>1J8mB@#8KfWH$7h8v!7#y6fpYH zY|O0CZ8&w=#hTcNGaTyo=#7{>B%NQ5ZIh_$TEm=#7V@F>oaeXm#@3wUjU^3(D_{3H z-1b(qbbL3(!9!~V)&nfE6*S*P32n>1?NM+8u}jfv1}J|PV{ z9YH>GVgP1*)|o~7A=uj`$1C)x2C|sDPEeSyzwWZ{gx=ZkYBvRoVJOnHFJHhGJX~@M zd4N>Mfcauc!EV)vE#KHcxVynkVe3Oz-S=A7txJyarw`)S9fym#Nj)gl;e=;i@eMjD zUEJc7dnO&)QLuzg5WVp?(cxUki}|PDfXZ}wT%cOdoT+U+YjB-j@{h0sZ`CC%sS9^j z&Esv3E3P|{Cwf9Y8|%=6gTuhcvV`-d{@-J5Hzxu-wpnE~yqp_5fVz4}@%3UcJyl_A z5wNSvAWRBZgp*;cnfY5y&4A1}`Th?sc!COv;PA&O2MdHGMFkZRF)=9hCr8S^34Bg+ zM~E1Xloh}Ib9f!D;V8@P%{))>mnXgnVi3qGJ8@c%^M^Q=xA=$8jTv~C$4OO4=!$;b zg%0Obb^`hfJ2wX6IWE&s@kh%hV(7B>*7>=b^D2u>`ax0Sq5?sj5#qK#DE1edR^9M3 ze@COnKyM{Qwi9*~W>))uHZnDd&QuuKv?zqx@A{=Gs1pj5r{7i{+CYQ&hN;1ZhZX#? z@bu8~V8T2&GFym~ZZARvH*5SA@usGsGJ5k-coTWK~a|M#Avac z!FfbUhj|uBpMIMUvA#Cn&9L7f`Z|k%T<#Y(@(Cgm;BsS3N^g~^E=m75xnH(z=R^NA z%`!MdUm!H&oRz9v3_*0?kiSDt6Fi;&{r=dwoI9X9AXlig+%aZS1GqzrYt$-_v&pvO zoe~Q|`ozV>rBM zVaKR4?jkiAT>#Z6sV7-pJI$>!x)XE+8IR^hy8Y~g+Zs@zZdy+CNFO)Tb4;$_deo~C8;KdGN1{SqRL_H zOP^`sR0#;Q)ytC1Yy(Ie4jU|X+yDo`zr=@bWbwi_| zh8n#gfZ};;)GL0t+U-(d#ET2{@HZ*0pPxdlEeDcsQFFz|jLu?vOLe$H;2#uvYFQMj z^!Xjd#tmn)4Z?b#;)8E@N6tdjUyf8qbkw7)%@Aq1cou8A<&O1D<4_buC;z5AbGmRl zCYBk^u2|zS_Ml)YN%mG(@!lJAeP%cl@&aOa+iTiUrXqEz!#oFv(Xx+H6FqiyI?0Cj zXvK~8^&Ya;ABn9yc2i~Yg%au#4(9m3&}#e?yZS1p@_ec}XBx_YlTBviE0CT=H_up9 z7KEfr_Vu{`dbIULSuHNKOk>EucsqsLm&q~7)?|?%(e&o3@-Vz=M5isFZTIU50|Xnl z7#GdpHDX8}NUmZ@t}#Q$oikCiiX!JHi!sZU^R9u2i^4FBAaBOeokcj2XU2+4Iw0mi zvo1eU{cMvAy2l>|K+{{ge%`B~Df>&EF4D%n;&x%Nc#I~uc`Z`)yjML%(ntL>SO@WH zvcJK>CgP*&E5_Ar2A13L3$LB^r{3$mDl>boGWym?&vVFP`;=I%_lrHq*cl>Pt+etb z`BmI-wP|{OdD;C!iN_Pu%X5>b^#pCxc!|)sGTY{_)KC$GB5Ia8P%$0OfK-Q8SYh%w zUqU6%n?`fy4(zXJP*iFLaaqzZYFJ?j$zmBHMoW~VICn&yyxcVY<%*B%EO$;*W3%Q; zqbma*Psh0E^RKWq;n9{9(4VrexjnH5ldE4~eEX=gMfTSk(<5UshOA~@aoc5j;is^R z7*vcsvXi7NdEGvlmdCIm@BIM2maiDv9M`qF;zVZl`06-W#*^Jt{ zg~5$wxLqFn_9OJ!Rur5J+FoG|S)15v1JdDla<%sZ96JAZuhn&0k0IFj{R7o~ z!)~LLnmE@AE>6HZv17#@6~g9@Wpb={h-PRM8L?|_R?)TjVr@f9Sb@$iwnfFJ*T9z=DlA~fs!)zjl z)-s1Na0WGk@SL%sv&D*mB0Iyyp?Mco44W7kgp}24wxVOuHPCij6~s@P$T!w3F5VH2UX2WR8NZQo8-0?tC_MFP)}n6oT;y z<08siy}W!5T*oymiw)bjuP(B-8XV^t@H*m0iNU-i?1_y%A6M>^czs^Y;f~2i3QM)| zHt|tl7<9(^39SpuyW^f)U3n}ET8FbdHL5~Ah%A5nYsEuIoE28%PzwdNW+wUQ^zJ=- zAsC&Jd2S7_2vABsF+1M$p#5idzd&Xe#s{#{b;xppsKr~#;%@jl07p2gcU7A*lFk)* zSW{4GXUN_3tIRA3LsCr*s$_qBV}Ecuh0T=A(z2v@QbS~tv01w@-Nsr$_ygcEot~GV z;+`~&rW76DLk!tuedL+YgvoNx3xi&FEOs?Wd0G2j%Vxy}yI%6`zNbyebL|{NL^=Y> zHQ^~yDKoazVUq(1END{Vx?;}-=-PInpioa?3js$1Hzl@dR5ian(F0_H;?^;wm(MP1 zt4{SZ+~x-bWcBv$ZByE9VXT!rr%5_7Va}uZyqC5=;?k@B3vRuJ18gFnTSXAn8#41L zhAprtueWxEr`tO?#drl zt0s%{mkPnCpcaQb8#DEH|D!I79%VD!C8y(2cXJc)sQN!}g!hT0JVgn26uY)3OQray z&`tLA$b75i+63>fWN1MJc5-IKtI&vfj$!Dwke*7K#Q4Erl3r>Y6XDMxEJvXyli_lF zOUStmDDwquO!XcJR;wfBt2~Qo8S(`bF+S##2T~bo%Y~EKwx+SPLcH#{l!JEBoJK_E z_=>>kBn6$Sj8W)TEQrHj3SQ_e>D~Nws6&;K{hyeDObB936@wLk^g(<`DrC*9khc)Q zQ4xA->_~G`O|EDz!G0X2+|Iqr8LgrW;C12f{o#7tZ-z`SjD&*DE z6~ly~5p8OmCq~lWjV`UX6NHM_PlZ`Rj}qUuh^nM}u0zWC{(0~7c`i?E;=dM)EVlE1 zmFXD#W+3=bSa(b}EAlzaItCLj63z>}^Cz~r=AyQY22fDAN@inzv~ef?;Fmtv zonh&m9oKL-i;^`a4bl00EBbmF%D_IQNkCXQJ=iPE{e7$RM*>`8m5ON(G#!q) z^6R^NTU46Kpa=LPt=Npp$dC-T=7*t2-s;p@fNQm%l?7+rxK5eE_j~BGwtiX!7$EOD zlaO>HEbbNds4V~TO)Exyv3}w}C3DmdwK6}12tTQcZI~rK^76d_(*SS){Z!N*xv$0D zDF3h~gx67+B1qTDODx-H{yL?zv1w=x8wKP&O))&BlnWloE8s@4<4XMDlUbRGAJ;F) zQRbD3mo_Bf^Znkl?W02B!%*`ce7vU8iue$xT_GQ4>w9}9QMmtGtoIH=Kr)Q~&`^Z# zUp&5>uwYoDn@?P-Mqdx!Ttz=4!I|WyCxJDIrz}_v>r0ja0$qn_88R|uwyIt zJ~HIS(WD7O)*m<$nHC|~s?^#meryf=dNmRJdcAm5ws#!Hekprt9YZi=Qd!(w48wDN zPf`Egbdg#lV^Y>|R*+fM+VpJ`>Ldr>8rjcTid9iPTJ&*G24S}O5}5qvY9GE2Pp|?; zsh+nXtN9b=VLKsxiAy4-xZgYb^WRvIV+xNowNjy+{?bhf?Mk|=!ssMEDv0c72;%u- zZ~3ezl>=_T+56w*%y{n^HDL(LHPClXak*MEy=Vx>8b*OB?IE-0AvKN30V#h6ug#RMHIf6o zesb}ql?ZC0T&a<=x5B}3#x$Aef=H;*3Ie$)25gM%fW7a4Z!`$ zVDjYRgY^o#O)hWP*VSt@uL-oEuu^+YzJd5PX$<96h+PF-WVM)K_inCAMt~^zTm2yg zm>QP}nRA(C%I)iZL>6m;>@BhgX>Fmk8k_s_T}+lzBtvW1t$@5Rl-%)CH^S`u=M`HLY?mC4i3^6j2m>T;X#Y z<4k%r75iD|_G!D1-qbxK=ruF4l_fX+VveatJoM3N%bOGJ&2p#Rj~<7*dV#qm`hJ)p z&-6}YYeaD;oOd3(XoUmxfZDN;0=zeh>0j7Dyky zUm$I15)QLl)~)f(;gImVI92n0%JKD?s4qMTHtB;p?6m#ke$7<e75bD zOMGDsGOuw}*kXgtUXxJp;l|}K`l;xy1{}GSd5~IIc1)%Q$rPq@n39wB{2om1pF;G} z+oj($ol%NuPyVXpV=&lmak6A@N^lyXVSTM`pJMg1)&>u5pTR&orpRE-Ld&y|WovlX zil)4q!V_5Q`s=wcI_(R`+==1j0YvZuN^;w+p2VPT$)A_!vU?-1myH#c&V{a>_ikSUO@{}y8iBv0?-UQ}4X)=m$25m)Gj?Y< zy*df_-j~YfhM%XF(j=~ncieyMaF1zF4;)_Bv0n$1p0{6V4srLtg9l!|U0rxlL!4|z zF|&52t{)KZ&AME@Zb$c5W>$Jc!_E!Fzw zB6uDC@{+oo$iHQCF#Yk>eFV$pzht6Y4VPpWWk+Y!>{WS%L}pijjCU3Y?{{uZn|4Rs zh)4MW7p-WvX+43LmQ=@HsPgS^Ul`UFpp}+-SKOa|H1~((B<;^Z>8f553Q>&TmgUk4 zgqOCpEGA{jz3Kzj(seXKt4~=DsK@X)fAgD5lA4wq80zEa`*6k6msA#YZw&|3m@ynW znGO)HZ)70yZxkOtPIT6S@&yu0C4?;rV04RyJDXmrU5!x49B8c6aP2>e0?09sXK&8)iM4hdE*4hiihYi8>Vg z5MHcj&m>u0>SMPH4sH%pp9_F$jQY84Ce71+O%G9FGje7g)^8UUIm^>=J^&Nx92qQ8 zU@guE8#6mIGeq)-_+TNQ0rUH*lvN|Tyc+RpGb_=|hu6o?RvD}*3WV|ol5-!yraVlf zX;ndKjI(=6ig>|*8`?*gPoBbj@bE5pHUd5w@_8M}rCb6mIIwvAqLNHf!2H2b(z$zd&0g85YJeysz@f~a@ND<@*(YN zrZiX(`tb`KMu|=u?q67&ENBRm=zxFz+6dxuH{7wE;kssg?+-MMm%zK6XW1B5DJzH=$b4cIUk-<#`r4WKydNc7X^I$3Iua)!pK zn+5hqs2tuT?~sCj+6M)q7%=I7hwr8QqKOy2n3msvhzjQAGCH?cR9gzI&#(>@oq@Sb z64VdH2aSQs>}iHoYXwcEkPPG*wu*8gp76oizpzFCLeHlr<55V|N8GVfIzxYPq-d@N z>8v0we7e8baqIJt&@qK$z3Has_p8XBzv+11qU-p&A(aLF{CC)g8zXgW)bi6QZ6Wor z(+a-Rq((0h?nh6{F--n2+qk`93Ez%wX5WnrcyAFpuUo*wwF27Nzq zOE!01|0g@IHP|NK)`y5IRpfMF_axfA{tLL|X=C);lq62qGqq44dAxIFS0=SOA;Llb zj$=Lg;SKkSR~0j=Sq!igBoP-zr*_zCpK-X>9<`KEaeW{RvReP&IRClH2h`CX)!VwyXj26Nq>o~pbq!t36}rsK?_yzNxS=G6*5 z=$D*~1*OXSHda#ftBTG)J-WQ#EDF%%DbDQ@Nzr=7_%z%W7%Uo_&JN7R%CMASd-Lr98FS)19M2LknNFT< zdfc1?!^P@OfSTCPjaK#7#iqXKkE9ovy)MjN5Dr1!HWfwRZe zz0Giu<-80mQMNRYw_NmrktEsH)cDiQll1Ii$p=P?o`sWjuD;wbxY>$5bw@H;{Mw$RH_B=o(OL_6jgB!=QFX>}4`Rm^OcZH@_{c^ilE4NsN#I2Z{i%3G zdz%?5{m?Lqw8MF()9G63K%c?Y-{-)7(%7YIFM1po^3~;9;wo)Vlr0jNhU6+yan!Vl zR26&=JC#Dt%ht_-M9%l*`QAFF#K8Ig;YKt0B?Rr=j0P@y^EzYcJJtVBy#O*~R*yJ< z_i1%O)M?65W_1vhZzaIAalLLbR$RdT5qN0@~qGHPW8UkEN0fnfxphOj%4cQ4qRciW6cJLa#*;RI%NuK~3!-HdB!f(kVA zel>>cbNm1N@Zsa2q==yMJ#J7|?WR-sh2qD9Kp^gG|IkB!miisAQ2eg@6Dg~87DhG(mHl}jgo2Lju z{$s1#4w&?B;eVtRVQ(Ci`i1WoKxpnfg0MXAcY%D>I;_;fJ5TEUo^t;!!*GS*=>PeU z60HL@zViK`^Zh|&{Q18OZ2pg$_KTEzPb>h(JNHM8-CZFE9SX%qYqEmWW z?SDnZlB}cA@6=QrS`0WQCMK*%v1cEF+uPfIV6Cq3l7zgx>Fv>MY9vj0#h1Ipo~L}uWCa^fEP$G(^&(EsGK4S3;I3gdS0G=(h8LC8O=Z-A z(<8lxO`cRCH?Cj86(9W|fMb%K0~uG+MM5m{F+$S;+5y~?N827Z%R57_pF=q7Y`%;> zGUz}0J;9g*$-x8-DhPi>7sKMI)MK}@e&s4GKUjsy6N%PjtUa_BIES3oo-V~`WVOmp z3S}uecPX&TIp(QnRD0cR4tuFI5(`ANOXUgj8qwK{q^EWrWYJuXdWur2)FSnEP)XeS z^mC$~3|6_fnSmcmS|3+Ryl%Xy+VL8bhC7iDY|f3WJNDuklw+BVhZK*xO}?*qN8)NI zCI0ZFWu?F@?w_!~PHuPln%i#Pd&Ef-x+R#Ia@4!m8GyCgz+g#l)pOW1B*R50Su_Eg z-Cw|1=M4x;q!c_P?AQ#tid%5z`jRn9eYAm)b&D0bnlU(;St>yZ4Q(*H1?y4dAf(~Zaf)A$F!39*#!U}`ZmX^ zjvDQ0<10V43TSDXH?#q!Q$K=uXF^7dwOIJDi;VJD?I-l`Tcf^JiLP31(b6}a>|*&z zLqN*$aWhM`AhO5lbk6!>DrPv?bOM}4YVsQAG3xMbH0-5iI{FF-_mgt&`^XmtS z{Y%L)SL5emr=J%C`bNSh1kM?)F27}_9P;TZHDQ?M zCg2=GFLwPtJwX-u$b4dz^Cl8CLu-IsONhdGM;{HLlfl0=B4(CPuv)7T`yyUJV!AuQ z&%wz~5%`}qt~EOSPB099G6Zeh5l-a|qRk1!(-m|cwM1m;(nn1DOK-*C^_GpI9zLqD zXbB`{KPdR~Q7TWSjbhYSg$pY;~qeayl zM!fyy_6|Ae8jbxi(IlC}e;qe&PMCS6>A6CW;cV9FsT;Xl`3tmG3j&-cb-b0#@?YWPcamxoHfE>0j*Flji!f7 zXLZoXe;XC783)eixe=UXNS-%XvP|(w#_xZ>9)inW1ZbL>zz*r6q?W(YWK&s*(^OE9 z2x2BOHz$8)=y)c+HPzjB_@k~RdB=HtwJbDk1aD*+QgOg!M@@6~4RSqmL#^`rc;$GH z{6T`;#e}im$4X`*KT^=)j87A4T!U`6{ETsPU&!xVVM+?q-l0L3MX#TU41HN>LXHdp z>!ttxG!-@y3A7b1Q)oE3P>#FJ>v_fIQ(kX%9ZfoUU7PN$VxFSZ`kw{i9kMwPa)=`A zbnB+2|EuD!nDCrL)-oh;fPkfVaA6mS5k2|I02cu`p2Yo^boXfGw0|=5fACm9gm9z$ zW15`khvD;`u<;euz!F$;dO3zJprn%eD^X~rW%vPY;GPi`D?D-9E05agv!Tk0L!S#% zvu&IFkCm_B$OG}niaxsqD^kgYMD6rN(+tn1L8esVOgM!v=6RIu-Ipn!5APK;F~WgL zwEf8!5@vl{zAp3`nI&EE!&P5sHfOek+>_3+X1R>jYzbf*!NcQ>_s)?)G9?YF>7O~ z+_9MoUcZb^ot4&2zmO1Uj#goJthDsq#wV)mMNdA89$|s!J^J8;qOqkKOY=n|%IU-` z^ey7V-_mfWLf1mHlT{RIvx30dKBYw@yO86vCoJ7^-fi&8p5P9)3;daM0z-j=iVqN@ zK7mdIE!*9tomtHBF+mOBlxNo(eq1W(^a?q*evWK{8{IEq+P3ggx#z)4aJ{pdToj_B_yRB@5tbvXfYlEgc7tqnC`F3~%0BmZ^Ow zxAGwTBtP;eSXeW04bwS{g2&?-F|Yu*Y{m%VIcLb2IzbU^Zz$#7e$)zdKQq15;-coO)HXHr#Oy|MCUIILy;J({ z1ltgwNMghanS8%)@!G``@c~rSUgPlv0;pCUKftxTqXPd;{)89nE1jkp|As$OYLqQZ zw!3bKN&{$97d=O`CFmrHPf@7VSnM?SNgN%k{qox#?8epAX02x#84dA2a?={qbbZNb z9Ob715+!5R<6Ju7OD?nX3{NRDu*R^0K1RWX<_ex_xPgGrP)lS|^MezzvBdsVsk8#foDba5%Sj z>tcL@VZ8c92NCOT={3EstD(2h9F>q_7XIpQx!vUnM|GIVzAxX;=s6>odiJD0l4{ma zD88T$$eI-x)?iKcJYDGBj?a{+MIqvSo6ftVjxs0Wx~I0p;_lyiNYGJqcMC#dB(S*4X zlbMflxXnaVO;F!47>?*HJJ$4?xBn>3OYi7-sw7k+p$+wYsgtYs;RjAiagw_Bwh|7j zZl6>G7OVMNUg&?e<2RZAxf>^pt}ahLhL1G{=FvQr1v*yG%h#5!X4rV1A!BV5r&@d-6Ad^><|ufp=i5K_~*U{J0_W(f-Lo?pLmHI&2(pyh=6oBfL3 zx;gxg9-?O#kdefx16uh^21GE=>@@M=k(RHo_-S%s1k`V)F%`wUR};qRtTW~VXk>O$ z$aAC5IU3HIFj_+%6C0-RWL(?dpXkd*GaT#8x|*DUhgamHdhSkSGHC|7Cu`pU`;9_p#DATd* z(h^wAbqB^kw%fF8cDdofAB6?eL)om`4933P9lhDGeCD@eN_!7!lLOfMaXtn1LCwnM z2O~wu0ocq2XrDQBDTtVnYnVJEOgJYyaSskAFp}UtiVPBrUg8&TUoidhj5NB4&i;2!xQJ3GOfu+y=Mc?(V?{ z5AKizcelZU+u-iOePD2R*WeES%Tbnr>|!1>6zWTc6HZNPjy#G-AXDTEr_4) z%8Xkaur39RCm6iGow+AQRea}Ae zwsOY!sDR9gEQZ{~iyqBf2+)bTLyY|K*cxe;!LI$i9Iu45nVy7fLH_W3nnOb9>YyE3 zBnUn_cbhvWd&}sqQl9#J1y@0COM8fPuH=Nnjz^B_$GkqGZz7unYP1IF8{()JJ{eI! z1J}3uLp({G`~B7WTmgGBl+!rUjbpFPXAg$&tuaNUw55mNZOp85jNEzv`QBXhSOzv$ zFKw+sR)CKR&~qk9{QdN0P0@%>krF`s9CG0tR{`So(BpucXn@rD=i@ZYAG?{-wTv1G zDngH6i#Nn?n;#r!^wB6)9qbqv^%RO4ha||~~;tQX{#LaiHv2Ke|=wJpffPI@rQt74M&$EIzWMnD3A0!AXQ(w4MW9azGXGPVn7 zf3idq%iNCMV1#odLkS?Yot>R|8hi)X$X@(l-Mmz9P ztvnCv)@F2m64mRG-kC}5&2B*trA$cUD`2m5w)ADt4gD)E%49m;Nw6!w{>soi#_=pHq@(f3G&)jz+UzAgy1HHhf~#jw2mP zDBPmrItd!KdmytrS{_=`pl_n;DTccG>m%^O3e;$gh5=ucTZzniIVw5-h~)GJjsEpB z#8Lmx?A_$PALW-Qoi<5mf1ZG(IL`}w*{D!Hs+ms+rQyBvP_pk!%2be$2qKFgxm24- zFc71}Ia{RgCG7FgDbo|2pdwk>Ah(Y(!QU2a!w|=T>~o5L8W{Vj`hE#fT*U{k3@gT>Mgn?5qzJek2@BC`>=(9q^lEkkLiJBtW*B|QtL;^r5Lw$5Vs<; z@9>$wIel?7H1 zq8Bx~2;Gt$KgYl}hp7fyWr$Eub0EK<(LB+f^Aw3=!xJ64y3eWX7nE)r>%|{!quGR% zhwY0hfp0KZM9aY#%qUA@h%oO^0#CkEw8dC5uBQC|v_WjO?Baj?z`qtpQzWAL?-l)P z07a$10{Bw#Uz5rF{eDykRoRd?7e8$@Nt{k293?&-mZp1alORoxBR7 z>A4{$o_Qoi4#}(wirrsLZK$PEGfauOPZw3?6!6gTo6D$bL8=bSN|--PeCCJQpgfbv zRwcPbYrUaZzFYd}XZ**sPEljnPPY_<%EL;3^Y={#cfWCGdRp1P!52MRC z$8O`&>`w9c1_d>e`lPrvpD=x{^6O*GP;SD0IjK>VG*#&N^Xf$1VuEl|=YwFw2{Ohd zOWbV=i?{d^I(98cycyQn8Gsaoojd62lY0&~#XVYGKCNdO3s-1vCrkaqd?}zvh19p1 zx{C*Kx$n-dDOtGV<_zm5S4HL^jhcJg3@>`orT;xfywbnNfCVu=BHic{2pQ<=Dph)t z1`$UArqjc}P2jVFC}1mK={8N@y#8P8deSo8R_=65*z1&1?L7X?%r8=7y}RF&*ZoTS zftp7-({Zl9XvM83Tl(qHXb;6LNV#H$TY9wh6yW za)Bxo2ZoxBmUO?RkMpJN@#Y7;hedu70xC=_xepn&0b z!+IXy-~{n{VS6iN*LlQ88`kJo4b3kDNq^K9AEQtQEqLGuZ?GM=b7h4*pp%_&C^k;2 z{L`|#{+#!tt$is-MuptK^0)RKs{Z8tBx??<(J{eXb3EBR83)t9hugKxM$PuS&jv3z z@~FhIwurxKsl5rUZrBaoRcW?L&oJqd8O^;AF!5FoG6L1 zyc&483K$G$@H<16Z^lhiUe*e|_Q?dI0``_8?rs4D=nF&5^i@5567d+g3V-~`D6pKh zntF!J868Rl!Sb;sCTvQz8CP_h^mE6TYJj(L8e(Nh1<=XU&u@Ag>C_RdyTl0!#j zRNW33A2~EeCSsd!3omrWtaddLXloLNC5WYYvFjs%O>{LI-w0G#_qVXZa-fqVA`w=f z3J*M0OWwuSg?h^2?&g^tcTqli7j)V5+L$DHXNZ( zaD?7_FkZNOpyvr()}GBq&@YWJwtf@l?Eh^ zw=(&(*ss;<-SW#b>BRifu)yRjM}#gwhKA>B%#{AqFTQNJeu;$?0=v~Yc^dNdr^_MH zqL|j_!lm-8sBO3dSEEjQk1l)~;(JoHx8LpNHC&;Yy*Y24@L9b1xK!+_ydJU8GJSqj zNQ5Y<5{15&Oqp%r6X0_*zbqGkxXeT0TlX8WDrm%=;(bhToz~Jx$#?MHEa}hlEChyI zaKSn{;B|@lSgp2&748qE*$Kw2;+h&vST>Pevg1u~o1^sqMAV>5b68asyflyNtyT#r zd=9P_q`>w!puE;MT5+4+o3!OXj*Fy1)c>|P4met7^M8hhYkN$kX~l)yEQ}qI=x*8 zoP?h+F(kX}4p9dQq7PlOM9?;WG~9Leab^ys$1_54Hb#$ATOimZ*lzgUkh z*sv=wnQ@S?EtNAHNtZiA%yviqtRdViumi0 z#>^gH8ye|~{2(Z=@w&!Cayj^6lB^t&aujA?f*IL}UVK~vw@2qU;-A4Dp(}FcQ=H~5 z1X8(3){TMU^Y(r$2doxU7k^x6C#{prFU84$s*0?K!RJ#?dEDv?m-*6ZfsK}KYg{)^@J4eCmvl>D|dE>-Rne<1N9nKn~T`e^Hw#knjS#k?( z=|rAqFG9<2hlp$sO&6)0+YWIN_2ubjF15D=q6pz^)Oc51tmCdKJMAI4-rZuj+fg$T z%dlO0Gbrns_{h=%`>O%e#6H#NT>41sY8B)hrLzUs(N~r;&Tmj#DOpb}yXnOr#!Z$v zu-M8D7_L^SETYZLf*AS7T;@wb7yXMa+=+&FsduOW3(H zD}&d2t;f3^m}Jo_I=6QfzqIg2RL*^}DgO4UzOu+qU+~29*Q<;mYkHlDTy=RXlr(yS zVy0f5=I_k+ADBkz&P1PQJx((e?+T<1dCPCaDp1#;CF_@Vb0GxNVuZ;Rit){&smB># z)2ZM3^LmTG(Z;rYIGhW?q6JdAu~-b?>A+)GEX(PejU=+3SO)#(tnKH>m)u2^P{&Mw zdV7xJTZ=w}I7N2>q)`&2_J5oR^O_~<&d|XLkWMKiR`U;;NS* zeOe!E=!`OU`JJEZvY@@YrIq!F|LmL{v_*iVX)hC7Qp25^NlmiB3kjm?>hAKu+w99M z_5t1Lh?=|a!}2msJ-X*C!L;IqmThuerCkTIL`S4x7Jiyc%sKqPALw1 zOre&3&Lew%vHc=We;3X6I88Zp?E=3aj$0-1Chi_{9yVcQiV?WYO?IHU2th@kl*_FE_2?h}J+_a!7F-|YrQ(nOr!r`4dOg})2O;B<@f zVSku7-@cdYu)uM33JetDH2roOnVxhF##B_fMB)uiF0_lk{{Dp}w9$HzyRJxJHR^^8 zNUg1nAary7KfE>#XEK>%McD0_Q5Po#5{bH7%idYoX5_oG}#U1u5zd^8$Sg?);pXISW(kp@xPt(`NO84h#;F)m~8 zMls6E@gq$-vr=FFNI_=A3NWnF(uo}I9bQ>?vBRvfr3F}1=vF(@IJ$4uS00)XP)YY- z&n4rnooKuFkGCN6bJSn;a(oXz#z#I(O#V7+sttkO1$=GA5dW=EG(@FYkA5gw$K2;Q zWd-M#V*nrRDy%v$$>s6g<|C+G34P9!EqWHLm!zPd`lthU9xVdRkELzU70K3z5Utu& ze!O8rzpFk!cO_pTaQ>AdR#qfRp85Q{?AZ+-h7&yWo}&4eqPhMl1ihVLj663}%wKv) zqW;PuM^@TGLudr!8q%BO08SMFT|4S^V){^Ey3I@qWMLordEI7}u4Mx3+-uYI7W z1yiXgqUGzr`Z;f)xVEXx26nZ@g{fDf`krq3&`!iNibO2oiAc-G%bC*Fgqq0J+l1td zXbh~30P!vQ|NAw;gHy8TyFIl@+_R;fi0BE@bdIh~8q6Iu2D?XHu~T36M$jVBh%Hi8 zXPAIDy#n+=dr5;nmtMpYu7w|2+B6$1VZqOgu9qh=H>8fZ;Mq^v^S9dB+OA&?yMdq+ zhJsPPsE9@9AZyy!>ALLxtaWKDir1h8-!@67HWOVU*&E}Z7F5EoU*A4RV#MbuQ~PR> zpo|X54dQ@9`{y}ph15IJ2SS0AgE=H4BA^w+#q?BBLe_&W($8Rr9>a98?Oi^Wr!{dq zv0%)j-DtmWEW*m6ppP1C6AZ58InBd MnX?^1@gemj#aH$bmzxz7wtNxVVAbB8=bp*+C`BqV~L(G18RN7Vyg}n9XJ3nsD~Ep z1?H4HE6Htpim0Q(RQhQWSC7Z|9os-n6H=@rd;85l1Bk#J{b^S4zu=pnAsi0&@0Dpd zpP*_jWh1>EE?+Mw61wZfGj6JC#6Ir0{~0D)@mDE?yY%t#R#wER^DY1Av!32`Jd%Bq z*$!ijVG_H&LbhSPvA3?T7*iG$9yakX2x7?gNQ_h<-dFMECPc`QURX>`?nwP}z{iWJ zi^rvhG_f{mE|T)B5p6yLxfr6H$6`kOIsI$es;h{5fm47SNRt&!r9}D3tN=NfrXk<% zCu!=I*~^+t-{+({E6J8VY@Tm3@t>af0t?Rf^<<5Iqm~h^D_eS#oZ`W#81BE{l zDi_CNBxhuNKTz@Ck=L299l*JM03~KZ)f8CvALzI_)4HKre5}L0%DwR0vHN^baOtE zOD?zq%{cP1*WaS-6Dx{LNi=hRGWrunuP2{0gY&0Nm0gTKAJ0oL3RE6)&Xs37Zv=_P zq@cN@w&_A@HD z+X{)cZB*`6p*Q*C&K4%goVCx@s7%?~Sx|QURJF$U89E~-$?nqCgYFb)Y(8{h^QqD5CY&oml?o;Of>n+f(~l66kT5dkTE^X zIU^6I^E?wvF12_vNL-pX^(;Ru#*gNKn5t%!1BARu{j5K&&~VihU3@@8Jd_?MsLc0r znlZzam4IwIwkF}(LNJ*tjQKsI{V<_{>8>gbs~sg__E+TsupUi;CLoKrqlY(=mCkIrE=IGlt5X(^MVt9A96#-byOXStohX0Hc=;FUZp~ z(%*$a7Tw~#24@OqHj_=leYiU&0s*2L4ipO|t>04ekE1Z^TW&)tm(`3~CT`5$?H1JM zJk`qEw3B?C=uKF%f44a?a_#(7OtG!|@%QA~JS2-xw+cojN}Wy9$6lw)GsNLmFnRCQ zW!Hlm_e^mZ5@p4_ii9Aa*~i8fW-@xcvK#kXFg zYj|20PRwcKS=-JN-n}gFq2JP#TpCHv)*Tw(9Ue4uYRraBgaegju->)BBfi6k8xJRw zkyL`$h^Ca1^gPW_!uFIW`zob)($>_rdk0;j!iaI19wRG1-Mf%YN%bm7zcJ6`Vc!)1 zW8fwH)t+v0^Qc8U)xmPAITesLWIED|zF!TTJRY)co4W2Vz3#W{&Z*bGO{sOXX?L7r zy&Y<*8VO#gAGA?jy#A(1p)|gbn*4nw_2vEt=k|SEoAox~l!aq$-qqd1DW8EMkBk!P z(BNvhs;wrUWV>zZlxu5XjYsK32F~humO%qTu=)z@(QFCJse$39H%4{3t${4aE=qs+ zYL4U1SXP}SN(2FMYjms)uyby#_E4T;L*mWzJk3^-OJ>v}Kkc#3tI<))%emt0Px*nxx%i;?}Cow+V?N^zh^Q5UtUZ%$1Pch`n|Xjd)621Szh72V&acu{!H zhn#hM1R`zGTztKW1E+W;>hv41)5Oc%hAjeD!M~ymxDMvZrqATt#_WZsqnGzvSAOo* zAO0JVAFmkj^qqtpP7PL`GZXRrV5UCbT$Ksm;&mUU7t`Ce?c|K%obC{qY2OiH{aOF8 zV}$2tWa)Gv4ABv2#?ewSale5vTE=>bV1?V?3W9ublt%F^Ve<_K*W-o3YkyoRnYMvD z6UoqUfr=qc<8c}XrkyXi<>oO)EKkkH?_P)vna{0zNO}J}AG)*#`yeYgh+B01?j5id zv=~y@n)*pe#OD!eO^4&_^8{M`3@9}(Hi1j~7uOyB)EEP5<&Pefeb_~LnvxE#T zu+@tftly$QTk;wj<39Mf;-p%pn!Xezs$-7>t0#A{t_J)+OWSVZ{2uU5kIEP@1}izVRvyVY!S=V?q<%qbrxlKD>jbp4mU)>v zT_=&S2wjVtx|PRvp4W9tp@nliPfon8Q|Txc40+Zb+!d$sSn}c2VAK%zBA{~aY!zT$ z;=Ej2?ocb}!P;jyGePcyj`d#j&@*lAai;n%O+eCEtIXdnXQ<)epWkCt0s!%hLYvDO zHMa86{7J*%35%K6Xb0(m60}&peDB4aXqUqh^Dq7YAT8#UW-k;w5=mR_1lV)Vw4eQ- z`dw^*rg5%}sR?Sw)Z4S~j58}2mUZtA{O_H^Q#!#PPG5p6|7o-v0tHw+3^Q%^PnC!A z2Rof0oLqDVk-^mYl1Sp?KSnYDKE_y7&AQm1kjB3o3{r7rOfwRUm`&h9K+6nPqP2AO zvd%B3hNP3Fz)?_db{l2!f#@L~A{u1DwQg&Mi!G=0{cx6j<=Qw_r5Asre&%DKRh8;t z)rnF^Zw>Q3y9f!Y@rL?$D-*pmR4iNEkR1^Kczd7ERw$V9fD+11q|5$82mOwnnmRSy z6WLC2#n-d^wD8))_VJ>N@2y?hHJ--e$y-;21L=WDVL7Qc6}q;X#4Yv=&Kyn0gL&3D z9)9F7U>eJ!o`-aYPdsw+b-Q)c+wkSG_f@jZg@$tEut!~St!L0gEE1^;e6dN$Ob z1Hb8tV)shnvwv8cF|6F`YldqDc43%(F!;FIs_d>r@2a8u_rYYr25$5yO)-vo6W0N> zRAj28zVz)Bi9}+Nv}rJi)7t;8#h%K>ZJDXy?Y{+x0CO})EcADOW12QGc(T!0GN&f- zz0OqA7Ys7nTC$qvSGqM*z3xIzl)9OGLBt1=Cy=F6OC#r87M?4T+x=w z2q}N%{RlYI{}j~X;rMa*pCVma{QdK~7VRO^hq_LF*kA`Ogsf3P{s7UH3bN>^&^%S2 z-mk^ujztg8ZgpQPJavYiXLNxfsQXzl?(B`E`AzP!HS^h{;fq2juY3`QBV{o5L?Sl` z_n|9CJIX-SwT4+&HPBiwB10iy)$4K*A~s2)I0E63JLUXQWpY1RH28@#pFrIw%XBhN zabKwr?WeFX&<=AbpU4qH1!a!2v zT(7GlykG%B8JgD(yDZa8miTy}JnTos-q4%Np0(2hF0OqsMzE-Hmicb?qLBTa?|lPE z58#EtHs_)Ruf%Ug^IFv#r8;#FErK(0&jv#Tv2#e>VI><^5 zSlpkNoeL__3=J4G?oRvE9Yt!6RbWg$BJAyBDGMn== zsYe*Dp?mm5b`}=L3zd01meK`@`OT>u;pfRZcq}pd!BL@!aWCH&{(eua#DL*g@sUeg z9uXgo6~6tEi!#0$?YQeI(qEdKzSI9I+0n2Mv>{$hh}rSPmgYYHDF3vQH+CR~6>6p& zOeWZTBVH2hlI#2AU^C5_>o>^e{b(#*QnxP(>IYqeq19f_ZWM%dWJN}(I*7n*c_l@p z-hv#rGLtz%K+%~ehn2Vs9DZ6MCb@?Nmnxc{rTQNk{G~k(e~I5c@q+Il{l}+B5A4s5B$g$!PwfRNM^&F zzkQd{i*?JmNr742L#n~rLUml(6|H|(U+x)B@3<(9p|o)}i>WwxQZ;b`sfl(H$tq;v z;E=jhDZa`Oo(x^3*$x1sPJN!oU66BnZD3ijX0_S(SH2bK7LqzR_lA#OUdH~Lh5%2$ zn)vPojJT+pbiMh&xM)t(r4uT)TCF3ktmqTvs<~`>VPQI)n&gSy46A@TlF@{^Ro1$* z;Z}C0pTm|&=_MaFqsSv7?_-kr>}fhdYk!Ye?wxI9E|NHk&mCT!B766CTDPRY>Ty1k z`o{SQz90eo;YqjGikeyZM%$TNCbWB|b7q3G2^v;C zcDrvPfg6t(kr*Nx1rIZBr$@a)PjB{kU+@MGI_Bp6K`&~Q)HF};1_)b=5BHy^LE|~XHPYE zyl>-5|K@kZ$|TnC+o%KOGNtyHYB-Wg^RnIso6BDQ%{lX05a`c2|Ef7oSjez#RpMB~`t+E2%XwQ*+7h-N2DZDi;rq!MBm)mwl`z;n#EGtb=Wk}ZvQZG zAL<#w8Z zE^z^$B;V-=SEx20b(z;^4-b7a*)rT?aiG_oV6OJkL)Q^n45_lPH6<8v=YZLG6T;Gc zB5I1gw0OwAqEwUmH5n3b`nC@06(3a<4Jadz zM+n%G6nQJw!e&Y;WcypI=@VByB@)XLU%1CwCn8vB<@b8}covrv%Kc~tVIhDux zeEU+D>HfHr;@ixv=&W5T#!lEG?$v+i+W#NWT7ge9T55p*pbg1uMta ztzFJEq~M}FLrl;aj9zO#{%e^?756b>%QQ}PLTYfNZ)ato66=6s#qK>l8xSTZn%opJ z5IhWX>N419eUS%V=m056nM50^(&jwX6*a8riWexY4Ea+MCFo!_u=Me;wvhHDX7FxD zwst#+gq{jaNO1zN>B6bcds2Zd_2ryo6rWr9X~1un5GPXNnr?}2x;G`L3-QPWEUV#m z`Rz)Co8K63hY(e#Uuk~ya7hOTLUB=XmIPrR09(sYxt60QaUe~lUT+1@KH>v%(sp+R zdX1;|yR47T5m6Vae-~87dn27?2_WY>8nh7AZ!iA?Y z{A%}#u>GUQ6a{tGvSE8$T(~E6q5(Hlc)8u7SL130h%ez@1|@xKcrKVsdw*?t|Kv9& zirG)=m|nA%Oi|X7HYJUE){Qs>_3X{?Z)j#399G0!8j3lkQb%b3qKa$YU3*2)DTiyt zgB$Qyx9aHd=LW{zUTQ!jR|em1dJJmaTUk|WC3m4OONXsvwRmW$YE@`}p`>5^lMNx} zD&<(}#ID0Cp8PKiA9WPBf*EWrBDlvC3!gv5=zI>^DDGQh%TDPVt% zT+2R8pW4X+y=3YoA|~!5KC2~Ksa#Vd+s2^5L{RVw(Lh4C&TpDZKW{2hLEU5+P2}G4 zA>O^YJg-~p9n8bJL$Y|{3VEjR&WgwWe8HQ`Hi(os7`~W%Zy?Ljo=QnrGc$x2)iOnL zfrt&dy(vx58;z_B*#cDFoEvQs?nk=1MwBF7s`XTGdZrC z-wq;IMT1-b{^6Q=@)r&a%7-mSGDPgV6VOw6-sqLS*M(`Qr4q0U4k3eLjV!C~8K*CT z`Y4vZ7G&0R+WStR(wXR6b7ZgTW$ux{=vfFAyejeGbpAdcrd(S|Xu<26V>X(c?$Dwu z@_gC1SXzZRuhp$4Yx{ZYY4#kxr@M4_S>ArNmB_4r5MxiykSjV?oQ!KrNh}B0L~Fcx zLQ-Bm*^L>MnTZ7z)R*-PGpiLS5c|Ecp8jn$hClM?ORyL`+kLt^fxnlW8*1Ks-!wkU zTDBR(VKaKYq|y%toou$OQ3HKx15jp790U*yE5r_ia<%h}hb;%GXgof)4GYLt&HC^2 zoyIh`{rv_j%;Ce7FO@kx??g^ii)hH!xZ=I-IK%9YP91cls$qkCcz*E>(ga^qdS}ky zOZ8sP$`@(pP@Gz`694XXCOn8GX}h7q{h+8gp&IODO2Wye{129} zl$}TdSdp;)8H7T=3i1bkfcN2uiS-E0X ze{XCQM`i!oxe%FLjaQ@!n6L*|6SphiwCe>FATSUuWL(1$G6+MgdxjXq2?$aXWjG9q zGP{P9S^3~0=hZKQ+B}amOh|J{PuJ0( zt9~SBvnVodWe+zOnnCHa_OuTM4SFf>iaMFhq?Q65%`nTvu?<3jrj_WNu z>kVVTJ|PM>reVTbMe%^jHQe^TBc;#VE;_6wPKUaZj5kXI#vkp2h>7Zny=NG@X|T@J`1%ML0CSw;b@w&5-nL zSAr+1HQ;oC)pAk2I<7(g>Y^av*lHp!aM3p9nCYs8%I3vot2Y3rSRwfBuwRME)zee4 z*2qJIj$$|6zqoVw!8y$(U=<(LH5xhkK6BTzt^KrR z_OR28z4-L$cxH@}d4`yKDJqS(@E=9zX8^Z0pKKGrpO}dG2CD=tq}g85v(FPkwArMZ z+`}l-(7tmDAZLL6b_3)Fvy`KSvj(any|^97Q$P8~jjrY)H&CZ)n^I*_x;_~w&>Rk^ zY|vJFH2iL#EIDykRumtle&dPd^K>cqj(4xg4~3FKUe&3na=)nuIR< zMBE;=u57?Z)0IVtIZ7ceYuA=Mf9#2=Vf^LL;eO|(R?BkVU!ls$lN7w9nz1e^pSLI9 zuvN++Q;YdSWe}PonX=mAd}sb(i&gWY1DO**Nnf}Ij6TY+e)D3(z0@#-?}VJiJz;oD ziNILkRVC>zLm2$n8SK8+?&W@TTA^}vxTz;IZBnyz(o)gu`C&B>n0t39+{P1H-p`0u>``w0zF&A-!DvH1%(g%%(g*#!g`x+2_eMyLsHTYwV zU^wK+rus_giksgaG}J`we-SM05)S%D0KxA*T$WQ@2eP6p-Lfh!x`5_OS~D_uzkcD# zDTcNUDy%>5Hj&_7i)`aX;MgdP$)k+wb5c?>rq*Ah6^;I6pN(90%uUyWv%tN-ieo_6 z>9x__^{v}mo(|Th`|4WtMw*>2lr#1{MM*!F_s@3v3$K}qh=-%ECE@enHkUF-J8y{r zoCXIJGo?rPD+w{YiC@&4fgii>S+1mf52F>SU(!H2EQD9wsN$E%j=)3C zbn)aVj#WtF=Bo$gnaD%wnrgFRwI;S{q4(dWm;^Mh7Ni(ZddkxJ17;Akz1&#^5Uekh z_p5UgY{SfW8!1%nUyMX*NVEW4qv6=R*na+F4sczw=ar03r! z7T+5Y3lg=2Z)#Tm)k@r=)1E3M*$IXw7T+1E4<*t{FES@p^8hl!z21wlXE>|O3DpzY z9tL6ax)9#$Z-N#q$O#o`vNeBEZYHcszYpI*zRYNhZafr0v9m_QNeiD0_Zsg|w;W0+ z6Z`y9fG8IZ;Fv6$;Z9)&$I2<5$CxyYoMcB@sX-^*_r+U)|?@n&d2SwH05k z&R2T`<}2@cZ|LD%vY8gaXVc54e`-q(gZ%xhyX5)7K@~J!NzSNSn`Z)|Z~k}>2GF2( zwA`t}6-&%K-oXrYn37I8*NTvU<5a9aDY4kFkkf^)%-FEH1a}vJruZHpGFqxricP%0 znQJ?~sCG#@JYqYz$K78}n^Amx`wq?G%Iv1o#|rJKsVNh0mt}ybPd{QMC+6C6kVV1M*&3w|5n7d*m)b68Ud3FS zZdo*ow%y*7cb~$N2y^BSQ~i{m{QH2Xu;`WLmI?bc7Mvb}K_G8aqZyHEuq#E0u2)yr z8`@_L#Uv8x-X2UGXO)~gUrlp^p-v3G)Zh0XLDSWV%rh*^&R_boYqU!V0D=O&Fh#*DrWixxDRS_r2rxS$DchBa|!;P_Tduy`}X*Atn)#Ibtc z6bp@AEy#*gqqS`Bnp*s`n$Pe4xuXrWAkRdlOt9GEhT?@mypea)J=LJJrZkk!+vo`e z2Ap@;i*oRk_LEt~hPt6h>pAIs|FYZC>P79uDyOEA%his3W;f;0ITp^wPriOlS(2na=?@8@`Yfjer{YEJ1)4Y+<`1Uvvq4bP z5!}93=vRxIh{D9xv;^PLXxwI~g>X8G9`y$v>WK5Gol~iG$=$>~0Xy7a@1VWj+%{Po zSbM*xTw43@@E5|{~|j9v@6z}aTT*A zT8at)M$yon&g?0VbK0=wn^))p&+vjrmt^Q2e{sfc^!j@f82%xUfERK&7Dy1u(Qf}e z+w?lOS9&Pyq?XnL9lcFC{59X5$0_Ju?1H;6*;i)XYk~b@NxhsGA_!}(HKAi)5Rz{( zlL3y&Wj|SWI^Ub(OM2&6cK#kV7v1ug0cut;iDQo{g7hIwCJNe8Tq)DO1=Su!Li)d~ zChZk7K@tLbf*rF>SRWfQhx>6@a+ca^Gkp?oFNFS@ee)uiNgYstm==<*r44=~cXFhtx9K0Iv7tH^QLj?=dw81znKY+*u_*6W>N&3D=G-42PYRcR znL-~t14zvl_YAymoxjwuC+0QHoZlUeDKmrcoZ{-Xc^WqhRZcs3y_?rCa2rQ{?i0Uj ze(|u9YY8*(3OZdGnY*_w(lo=f7BIhrPyg#Zgak{z;9lHXw({=|qe^rSZ&}xEkorVL zEte~?KYN}2$-AC&awYm1oj~rm;2Xu~+~YGF>1yBhGn% z|JL~mpW4|YZKh4gVnnzuiZS+bTfkj@aJOqt%vmO98+MnmMI$y@RL4dzu#6=>SaLvZ zIfT->H!vp{VCBcC_;Qu39`FfAp1JRr)|iWfExh2?4M-%za(7@bMSjkZBu6CpRNIrs z{`2aV%2ioALeSz#+P^5Tq!@e|g^4+#!^oFWe7x`o_2%*F(EvrR95R{^v3*T?)xyqK z)cR~&b)b8}T!4+xXy%@j;Q7VoDS%F;Kty~f(K{K8X_C?^gkZfxe(gK`#nF7&HeVo2R#Rj6c-JRn|1ZU)3@yFmrb zuPvqWH8XR?t_aj@u;e0XUc^l=?Tpomv?l6n&K8r@yf$p<5*QWtZ&tHM#{o7n(v-ft zxWIF-=&@@8ZZ}ty8c$!bx{^`Qv;|$i`E37bqM%$1^lJwK7*tT2g}T3YgF_q)hmQ5T z1vv5+2h>4zDre^l;jNmJSu$5()x%V-{Wif^u_zYiM%Ku1w{Pcf1%enw-$Aq!*>oTs zdiXDW2zS?EIEQEH>C;hv++@!eh5^ND*&ocT5moNOiS-ml`>tyw#%SA|8`%uzMo_Ruiy9FaIau|#BVNEHSO_+XpT)9xTUzmfu&LhZNdNXD!a@+%3~N{j z)25amAXu(OcX|!QRqi2O16^Y?p4Jf7BujNHy2xtP$%&TlKO7fm;1;m$Z(eEBHyeQm z3m%Vgy?nHx8ph^tzY(ytqfB=79XnE-b`ZO!*eHEFlJ&bD6Iao@9wAv$ai&gyA!JW1 zVd2Hq)*qjsE!Ag`C$Hb$LbzklhCf-_wcLMLw~*cA?^h(b`L7~J6oMIzu_*zcE;VZS zMLKdp-O=WySq>09VCZLEMF$1@mSWt-!Q$Pc0|&VyVi{1wYiCmSEYkLjfxepkym{=< zCnIvy{tBuc9h@M9n!QCzp_#=<(~*%UJ&h|{HLh<>JKP$PgmSBuEWFO|a!nfA#h^U! zx*xjB3ahSf)e@tQswUYaUiK)<+S)q6PQP1Z;Kz3qn24w*CF zz}B!-x6Ew1G(b5~xd<;gPEY>1)`bD>CemlXWmCgpUCj{$g~fH1+7|mTc-J=BwJb

    D0re*e*_Qp+lc8%9nTMqeRQS!WQ$Flr31(Kg3Ez0rukshAQRoG%+)hqOO(3n@<4e z>8Gp!{|KO8e|6z|KME-gfrX$pC<4BZjF{>_Fc6RNs;JZ3Zcyl|ZPOB!~TLytDeO{22kEJ`U~4^!>j!>Nh!k7X$=ChW|O<$ZOF5ML>8hmY4dh z~vw5{qc0}*L2}qP~Y{E36+QUb5Tm1Y#1hm zkn7=e{!U@6rxo6PKPNHzNc=7G6NIy-N+OzMc_jYb?^B#@2S&^ef*5F5ryB=%&1;m_ zFQ(=Q#zfe3zT|%#_y*^l{}h0j_$RB9`RR>Yvfp)u(x%BsW_3LWRSChPpsGSxW?X{7 zjp<5Pwf>Od5{vQ5k5rN;HC+VJLiKb1^&*w8a~O;)?f>j1W^whQzLB18!;q=lCMnHtwhRClOp_ zP}TpY<8bB!mTbwkL%)0R%$xG^HL^%U2cXvh+HZfnTcqt~h(^*GnE{uKse zWXU?p24VUb_Nx#$#)XU=l{0pli|+4RR{Zdfb?z7B5}w3C66b!~r*vjxr7 zoZxU9Z&Sm-!Ji#HZnhnWvL^_8r(`KJpO>9dP<_|c8ZR_hC>0Vf^W;3dX-)l!hhA1K zwrsdOTpD=&io{jmU;AW-+duzjoSDz8>6*68raR%k{;Kq~$l^hwK%w-oHX!lB)S3zG-;HRfJo!oQ`%xzA$LRIa==^WO=}Eb z(~-J??Q;>qzTLCVkm2_xr=RB*H$CmK@y*zV211tRNolr~p9oh8*gt@6_}o%Z&xNca)lz1Y&0gs+OK|-jv5|y zk@G)mbYd;Pg038-Tc9Y4ZsdqouHXx5q-Ufm+q4ITni4fj(p8-u4bZAwCRG5tc>@T! zFI<|$9(3$#XIW+*{QOrc4$LU|1-~V$ZTI8@hJWzs$lx=NE z%gv(Qg^TptEbH=q+u`F+vGR3m$FzkTAV$3tz@zsTg z-6v#Y5yd9aGTsbF1IL|PtC6y{JRxhAwrWvbbaAhPR(t2dmed{ONv1RB`>K4hF{=o!(+3l_WgbP8 z>YAmZ>TIL>)4Vn12s{;Sdb(6Ssdh@>_K&=>D)vZ@%iY3IwDH`gwDoYsrL;CH13k!V zB8Fy-6j}D4^PlE<3|V^HxidVd6(-FY$sX_Ye7Su90ZZ9`ZDBj#T4K=NIG&$a-BK*o zU+2gYM}WU@l*iji{i;`HgGF~6pSLs#B`DyBej4gl0hY2Q91kAx zl=sa@GV3nK%(`i`7V?!BU?!CgypnZ@izox{5J0K24POZuUgFinB@J^+_wyhB;%AKp z?-0i8r$zWIu+OtO_Gg)}w!#HZ|DV1ZgR^BFPiEHBY+_ zX;-y5B9cU@GSEp!{Q{$GueB%nO^M0R`BSywm42aI`K)XAJ&W0e=e2sdumqXG?rOtCRT{Ifh~m zVDy!!T^zmEE=&^r_^&6bKvg?w5<0T)KJh)zGOjolEwjmmk}#EKn3Pw`0$lf*hfk(~W76ZjL1%5DwbheL!rW%;4J! zNG(=$|I9peCPZDzg|-suq*Jz<4Dbd(!nR;X!=IOITjS)x$=r#VbmL-aDs0}>rpW< z-hZNGNwj-zq**Cv^=F%T!Pjfj^+MysAfq)X*nb1VjInMwdS;)JUPK^xAOV1Pp`|qA zuR&MIJf=6+z}uIG;Rm)PnprkyWMByS>?B8LyL|Kf=_E-#SQuvXLf(5q$1Dgl1F#u< z+Spy*Rn1mbk;W+rC(B)7WJ2#}qRT5G6x=@N#IeGnv_es|jU3l17VCBpS*P&y_CfW0 z>W>dpII4;s$41+tI%Kp}pxJjw<;nJZ3=0poSp4cSJif@(=w6Ec+pgT_LcOybs8>Q- z{2C6a*t4~l7e*yHvCv9&WgQlPWhx1rODPQK>YK(srqPiFNrfp=()D7vKi<`nr z&~Hayc{cV$HkK*?K$dIR1Bbfc0;?<1DPm83lr~xCdmo1ybXS`3bYR(mGId8MenYq*)~jQRzq)fGgdXD^=}Q7y1)z}poDmT*XkfT&*; zRqNf026u|la>*YOyj@;ou;+d&LCNl3E<4X*uP*z#s0&-`CaW!utWu(}L~+ho1jW~0<;dXbedPX~|~nZ)3d$>;S>(fy;z=b`qcZ_Abn zCIWALB1y~XsphaHGePEcg5RIh#?pNT&78HxA-=P~uLT}-DJQtVAyo!d*939<8gdsV zCfB*EJ8p2+J>H<|*pQhR)A})W@WifN$^G5}`t9N$SCV?mWQcG#{@k0{3IO6~@7(s7 zly(42)fj1#TN(oX*_r{5ihNbfFa%kex54>e2@L7$jA{=RcRs5Y2zcklBAl;S+$BMZL-VH z*fT%p`&j(slu<$uu+MQ0A#bWWkYDqlUw{4J)!fx=!66=8st-G*AUmu${>^m^{xJ4| z(>ntOx<{dy_*^B}wvvsgP1C6SAR&Q6tXU=X*rIuBi${`ZH7dm^+wq?CR^Fs0AZ7xq zYLEgdO@D^Z!nkjH(cfw8%H|Up7>iKOtx{m-P(05VH(oJPWWnfQI^;|Du8YPDf}nne zkW=FhvqKCndd}B-=JX@m4WVUIr-W0Ev-O0-fw?B|$VeG&O0=BT*c#x?dE->(}JR=k~ z>%u=qb77s{$kZdw!0R%98t~LrXumG4rmH_$gUd*)!V>ax^GpDC8aXSc`71MdC*Yqs zI55X~>xZN{A!~%r7<6gWEXBJ+3YNn;c*@CaX z>l<|liKcszS7h7?I^>#P|6aKn)SJR`qxVT>84Uc;$W`9n`nA~OnAD(^HxXzk|F*)32k}3z9cjFE9S*qBl~0n1O+1s=jIgXr~S{&tGZ}IU^ZZ6|X7;ne9(d z+q;02`FquSY_I)q>F&bTw)6VqDj!%gW5bGSo;`&O&ck0n$kM$dWoymPh>jw*u zAFrX%@-X^&_<~MpX3yD1DZE3|?eG?v33v4)&X5Ixcs}U!txkTCMnM-EtNS)_kiUj6 z@LTL%9g1mvdO;BhDRYA(t$0W7{tXj@v`o7Eqs=KZJ`gfdHxsHEefC^$#u$nZ%XfUX zm53byt7J&4bPp%KP@+%1*~?9G(#$r8cE=^YZY)y;aHV$w~X} zw#MT1nSZXyhWnW}6Si_kn(cFhqCaXesPTP5w{M@UXY$nT5u68A*vz4Dt?`e&X=a7N zuOMPJLMgrWJR&dD6h6nn(f8n!Gg@1vzLZRkMkk0}(;h+nzJCJ zD4o@f{?Pr*3PX)8JxcQm26aW~I=nDS+6%)ryMkT-G>MDo4J@;N&-5p1dN!mkPf3xE zZ4dpgNtioQ>Ua~Ae&Dik5%r2JX#;+scd;jCO!tNNW;b~a77T5@;6pYK-rW*W`W zo?|5D!PA#x)LU0Y>N*q_2Qiz4rbWR&judD-WN5grT{!}xR~RYt?59AXc1tsVXVE;- zwRe+<%px)7dM;>=as!e|Cdi1PJyA8+$4;`5Oj+v8=dbx)5!H76ALm(vwi~4wjg>izO)_tN5 z>p~$b7(87UY;=JlBxz9=mIs#KuEm%AUQM7~wnX`F>Juk~552EHlkzW_5)L_X$8t7V zkl0s(3Tvh1a_1s?8e`=4J!d3i+aq$542Q!G`&TDevNtd~EEuv$ z9p{?P;jPMZOb#AnnO4eSD}{XqXpy}RCW`w+cFs*Pa7z~f?@06+`7ZB_d8$Cts&IcK z565CFO``NtDpl`eO}57wN7&KYz^_UBE4V!!adUz}R+Qkh)H6i@c+;+y6WWy9U0rEy z{K7&R(Yj9%<-pdTMd2#$$Gw{C9UE9;(9U0NmN)jv+k%8SoeNfyX-(j>{<>Xw#m_HK zwI(rVZo8dQdQGu24QgNNk-BV;iFUmiE&{*14UaD_*=w?29+8{E4&3^f{z)d}&u)0k za9-`bvV{>QjL0c;Ni2rnkCudCugJmx_2#75a?ShX3YAOq3k*Ku&NjE_{?L!{G-xbyla(jw$Vb+O;uE( zX%~egxN+bnq!x2&_F=y3B;W#d#lyj>NF9JZd**#iiefccXuE}e0z)F1zn#8Wd!844 z6`bEow<=s$XhEKBQer^*t0o+9PEPS$dLd?IeU zhv`K>H;LZ4+*H~3+YQr=t;w&>W-ebJv4m#c%r;w6wjQlpRh#m+4RB5i7Mm3RmDCOC=M3Y!#=%4r8oc>3S~}yC$8)0P)eO}Q`g8;t zG8^9$$`UFpe@doWnZFg?c`5Y&_D~6!8C$!j>)-v~Q+KpqnL4NtW5>lt6z+*_$ z$rHgb)rR6x(>;)DEZ&L#BVK~v_U)-9oITDg(*xk;rBm+RaJt=L2J|{JeC3Im`dDn$ z13llM;1P3Wl{{x@U{$PN8UMNT5@U?TQP?r1@B&G!lQxs!>urWjRlO|i=m9>`7g8fi zmSt}wt2Vs$`q)70^Z}(E#T?c7vMXy=l&Z@(W>lCQq8yuj-Kn6$rBvk^0W#ybXZaHw zj?*`BO7Fl0c`M8l(wn2Q%a>~kzJiTR<>P%Kbty~!S8hk{Xf|JQ8ko#=hALHOx}8LW z=q!Pij31`3P0ZbAFHdrzcVRv-8^X+$*7O`WtF<@G$(G6|@Nl=0iMbi)QPuB-DM92= zoWcDFGnN&9kuvG-vPJX+cQ(VO*|ybk)reBZ&DF+UJ7J$%6TsrAZN!j_3$MoR=(Bn0 z2?ZylaSd06VQ+m)`$QeeaccU>5_AeNV_QVo$iv2MMIXhbN}^*4P1AcD5b(L9xy6x= zuN0knC3^mQwJ+xVo~)XiEAMKnqnY)ERKrCvV!MzN93*RZhQAMT0S?|QLA_Ru`wxr< zt2o$bTA706#zErx zfxQIHwAU^rUu6s_)t-#y(n)|Zxj7pfH-z6SLx3_W;#|gJmXH8hqJ$iSe|C~tJJ3um{s@K6O+gJV#2cXv&or3Ie;>3%m3RD|`oOX&^ZMg1h!U0=RE zG(i2!03(T*-<$XM<-xYPGdgzE2f+hoii9$Y;?hCrNHh8-+drpr=%rKy+R=+@pZ7qd z+;eFnJyJp`3U z;YgDaIZQq_GqF+gsNbpUb*fWT z6h`*7rHA$ZQFb;Vw#E%5GwP@Jw}LbRtOg^Ezi897Tg4{+#JFu<15?vCt*rW ztX_*e-w-L8{iNerh_v&->4_si+CN2d6cTvYw%Mo{?%BoqyI<4t3(ROT_AyoSX=f-s zK!U)j`GRY=mmZJnAT-P-{swldY&E%Xs|Ly_hkXIV9rYg%dT>$o(tIz}wM_IR6#Qv? zOrTO*2LS^(XlO;M9V2eOL85L8O6|LsNh-{}sG+Y}w^C=bNRatsLIe zwNB2L8a|o=uE>-uNjLqE6FmW;HP5Ag($XU|hug$6Bv!6$cJZy`{3R0-XVV)_`Z>7X z(wY(to|rQUJ|}7^ji4+ggA z>bt=evRF78)72imZBN^YN}YhkRF5QhaXD-cF?encma7Y!;6C_!w)+R%NFt@at`00+ z7qTr|l4y|$T9^2%285Ved$Zp~E}XYx?~0YfeYK14XlRNubFFS8L6$E^Dgfm%!fl2` zSyk-BiGurqcUmz;**pJIe$6jH^qh>>VB={;uc= z@dbR9~5^syKy}|H&0h5I;k%;vZ zbf!Yr#eX$oR97X-8-5x*6nyXH>$ibE%02tj(UF~lule#{l`&*oDzB4QdE95@{T+I3~%wBt}@L)0A|n)6)@=r&um`-PVq4^xRVM8 z4LSU7o}IImJfa7OrU2sku~>1EmYX)n%TKg#R_$fd&-H9A41S2l#QGy&d1{W`?UwJO z)uwR|c)d1Yxa2W)w!PNa`-St3hg6jkxie2#=Y46oOCEyya9LYF~H*sANtMj zQSsP_dm`iI1X}E3B$?`>Rk-u9WrzAWb7=yt)|~ZDuU}#oN;Q9blJQM9I$}w(JAd^L zXYc6>)#iUr%dTC(#-n%)>D0fRxBrDJ!Ol^CxtQDV;HXGKdSk9Yp3&3`Hsu)B7sa_Z!oLj9ZNkDoB@D) zyo$P?$FR-joYM!HAM6~B&$ktr;^4wdrivx01P<}`_)Lg{x z?R!lY)HbB1FiW$oendvDV*dK%aBsQKa_cnMKk!@e;|0&&?mr(A5*ptVSb`o1EVD#I zUc&sDgRLkgX>zw46142+Q$;q*j+`PIlhs|1QquyiYXu%Yj2tAe(&x%wJ?$`l^>$}{ zW5UFRP&OWne`n}1b8#V~5&Q6#Akn3mV3W37k=8+u#%F^$X(9<#Z4>FH`zIuP=7&on z_Md0I`XQH*k4pb`?&IB!l6g9K9ft<>gcT|USHp!PV~Hf4q-r79B;1$S70mJZ<5_g{ zw^Hd%7G~HI6z(3|cB>L&m{igS#-FeXtUFhy9ixf|OZrf@icNP+-QDmvYNdzyOJ-)Q?W)bFM#r=|sGkye z_TiJ5?gzHW7=9J}92pcoyuzpQ=-nWBesEze1eTAiNlGj z>ZL@t%SrUcb>Ov>j)6Ty_DEi0(D< z5w1q}G5vQJj>W0n6!1-z0Ar&1arq?j#&}nAz3?U~^K;kH{c-Ab>U%j*7(NF!DaXZ_ zXDJ|iB}iC`QIxb^unhql!I^KtoZy<7DoD+Yov0brc~d17nm{`jxNgzLvlD zxNnW9w^(TmE90009h2CfY#B53fXeurSi9IkIVQ_Nfq7N+1OJluNNIfCkxmS4dM1V{ zoz;q#0OplML&z5+`{oBCnX8RnkVtx`7o&#L33C#MkiPImtkDPf6%n56%Zx%F<@@5n4D12=Ov`5<~0065aRPDq`o_`Kw8bPk+zDPzf}}FkAxPS#RWw}zn#tnPR? z33dbtzyr1tzXz7spBInguiGB!kJp>u_BYQg_n#CrE=tw>V5$N~teamh#?gI+Uq%&a&Sr1q6kri-1VxiA+spX57rgt-Ud=l!fT>yuxQ8z{Q?&qqTsge~GJtBxoMWVH zkg@AH)-QHXZ<#A1k8n+h)e#3bjUm`n3Pj4MM*0_FqG?fdKd`EF zz(4Niw!~MVyP?T17=T6dT(m11@N6<$TWdb5*)ufmYayrbkOXU74ySuy7IRyG)_!8u zuF?hF&}4Yw4I|JXrmdh^%a8SMGf`W;+$T-Nay3|CiII2~c@_KZNEuQ56h3kq7)|$F zIfo7)MrS|`L-^9=S!sNZ&}mwAymNh$He#Q7L@u!R-{%&Z*}l<-J;x0U&6^Htek?(N}uq0A%VSvEq`u0Cr|1@KnA2>1W~ljbBM%|K&> zA#82ZECYx@)THkxq3p<{oZ}w&p)Nb2e#jJUuh*TG4D#N$s z&tI7X4_V`RC65Db=0S-G87yx2ks=C8^J0wBGEK+Dn+igO3ng8HlI!i_dG5`dTJSyG ziwZ#P;;7(mDykPTRPvaV2D{@HPd>e-8s%WweU<}nVgnwO<^q6#G$MHmzc-N_IL|k? zHXi;k&)c!k2{@qT6Kz9^lLe62M*VujBymF>)fK$Aaf7ZA?m|3>2CaI=e z5*ZKzT!wxdPe<;YG=npu)p^AHE`sf&P7(b)H)%@q-i4Vom7|57`+_8D7=@2}ZCw&djaVm%^uft< zMaHU-RBKS{?yt<8O5$FH0F8oefQA-{&Fp!PU~qW3a%(vZI6ay_+7wG;TO0I&=pHyW zoW+xiz6ol-;m4hwRV2G(;8Xb`>k!0HL`-`Q{3oAp@aYCnDpC1S;dPrg9pgMK-Jc%9}`= zHp=fZo+k-mwza$GjwVxi;5p1|VVt7Rg2p6OoO>FcDj>rG%T}~x+{+ZlNElM+V1f*lHQdWbae-$wrr%7G z#*gGzs(pjn9r4h%?aD2_snYeX4eV+!W7hDL`~C){?{!#oqIB7$N3=5m9e;!P!V(6C z)U)UMYc_pzQ(h9&T?c*Bf0i|9`C-l_x9bE!l{>StY`lU=J%IBop{gjs^wU>)Am${w z^3hp;dg=!*=m(1e{>%g?(+Ay}-s0sh(yLC1P!G=S7W1)MK&_tglN5(UyoROGuWho^ z-Ql^xoy}KLKSWH8Aym}*4k!Ed;rK%nTMk)#lOZJUj+3IeOeL9EXclQ14_Cqu`s2J4 z?iwBA#O^;BG%x%)z>tf=eTgN|3SX5uwKc8J!&h=-#k zM|9KbV`?5f1xPH2I30np$!=+-l(POc+P*Rb_l^5z{6a8;*63~s&PALkWtcsAGUG%6 zd`sBogzC2eNXA0R~hBgQ0`%~f2T+;p~4o1B%q`gHi z@!um%F*=t&Kj=7gJn7G+wHK^;XFjL%VEp-fbGt+4IaPo#=+4u}fw^2?hgLcB@bplA zUJ{=e?XFq*5y>txUODsK{W%7@U8SZiEd{hErlv+`V#v10245jLtlanN=~D+&c7XkV9?bKjo_>0C;g5#%qigX0@hyVpS9L6I`+CS$uQb&c6t=E5pHL^aF4xf?$1UPBe zW%l;~tZ!1utc*pC+1EW8CkD9vOX6dBLLZAX4Yoal!|#gbh%GpMb`~G0BuFfqas%Op z#4xf!@%fMr3nE0`RT5}xP(C5eHw$grRwl+q?7lyIp+Y{WB~wM)|Gvkv)#GBxmkw7` z7gEbjRoW5TRxW{pxPIzhlsW!}H76MB1WS*?R_Y@3?jiWvsb-pIDL@%itfp;S``^hz zQOuV^c!?zG>uffyXT3|S(gHOg47#9z(X@$Qqvm&HFum5WB>hr|VMgJIr+`)|TJzVu z!ak)JBO2#6n}||0cFeCK$-CiC#vCFeUv$anFnC=Zjl;&0C1>hO)!eSWYM|hru1fBV zdXKjep5q){Q+B{S_ZW=o-+qV{POi8=x~AVYVpJLAX^1IF5r0wY#Ca^KohP$dca^A|b_qllE{9H>AcCYp1&`@Pe*|57#@eQpIye=fqWJ z?#O949f1Nb!q$@tH5gd49S#J2H7HyDPPC7B?m)Fw2~M-YgzU=ZAg;={E=!v8@DCcE zgG6O%>OZzukqnW_@0XzzZ@fYNA%PowSr`?VnR_1Zd{iji4be?>@lN0HpFi0oDKpRQ z@}(7c-gYXO<^K-iDO;3O-0D_0F!xGeTrH^vplzIwOkn;U!>9ZPOYa??NE?clZH zH$K$-N@I@ussSx0%(;(Z5m!z9J}ui@4oDvM1wAA3gYrb0+9?$f`{bS(+b`e&_7na3 z%hUgAn%q_T98Q4+9*(i8_4qtQO7R6ADF=RyH8chNny8;k3v7m zuWZpItGWaz_nDq!!`2mdau5itvSivPBp#YbpwEZ`c6_s}_PlEvj1L9oSqVd7~ zszNVKJeW%?L#x1Y9JddH2EsgXjx9YyKRGZ2Jq&{7ic&zbm*!PP*XJn(M z6V^uBH0@lkM)yF6@Ll46h#L5(N>SwAu}x|a&OAqdA8trd1TM8%d&NeHs4os9S!vLD z(o0GzXVmcfU9S;90tFXXOikcAcVxsGgCZw8gCpDKrG2BYE6IMHAIcdPjPRM*w4n`;s6P@dBtA%ZH^=U!J@+7y3MGTBcK>)NH5piLOU<#*BzCe?Z{H=4 zWK1>HyqrJ@`e4PxvGwi1@JZZ( zb&_(OceIAygt6Niv-74mv)9{nS6GZKl})u9AN|USeL!!RVMynx?6aGT+-q}zl`2n? znrJzvVoKVIOxa?w_%t7r+86^kiI?1U@N&`36ST-A@SRg3*aya2wH z=2rE=MQrAf5WQJv=|xj-kWb1RRZ4x?+^M2_3ke6zTgQaj5gLD5xw_iy{B>cc8(ywD zdtu3=>UW~17qMcJt9TA$6EdWjwMs_q?hE0fd~!bUeqN|7b(-SHZ}SlrHkvN#Kpdl3pX8knM{(;Ro-BMg)q zrk4#&ks9LiM56F@E3>QCxfTcH7TA!cT27R-&x4U%rgueWVbG@+h*B0GrmRg{G-IYU zsKe05*6*h~zaKl$A0;3{0ArW!g_yxMV87bL>Oh6tOVh%+IwoI!p;MdQE8g4FEcWve zU6CI9eCJYF1JSj|ud~u(?~f?~=YNB@9*%3{dj6y5@6ygXu^zf3ijUR|hQ23VvH0bd z2>2|>m(IRYoLIrIdZm;Of`aQBq8h6QAeKcOt?_|bZ^zRU9wsdFU%A77Y=4GdBh#o) zZ>dfbj{}cCGKu_!HhF_Z4l!`~OHHT76J#ij6H+~c#!((0Q63OSmILLH8nnJH1NDZ- zRjX|ukdZA~APh(~AXe%J-u|Z5pQdq{bzDJBY}b@jBdkX=pn6jljJwef;1b=dt$R&EuR7Axa!Uv*EoAyvX%hMEru*~uNii>SoH4CI{5cz4+ zC&HQ*h~7JOw!H_UtTZo`zYEPCS)i8I8YiX@6mSkcc@j4CXAOUkQpSfldg8@4Zzt1# zzY3g{raCgR-971N)ztIJi5H^bLC&-My@imU|K@F=8gQD{do)pq$#1af*~l~?Jnf$z zCeZtXA((&Ag7cUG8}gErQ`1~*P_15Dc#ef`Q!7&sCK~-?rmGD3K8%C)7~v^{g3>4U zWn&SYyiL%tQ;1n8Rsgvuc01gq0k^gSXR!3fGSrCfou33}lP|r|uFLKoz=1WEmQn%Q zXh5Ov)-ckX!G#itwbXdv=&?OwCk61UC|0fe|Bc4CmTeuniG5fU;`IzU`)wb^$Q#7-|!XVmxP zHkEM5#-@G~yN^iqv*Yn!Ps$zVKg+EsbbX1>R-6UBMbiI-+rM9z zDC>(@b(Kl)*Egq>;5yINrwv-9F`IQPo~n4E(0bO{O&+nZ1&I;He79Lfn~#Jf#_O^` zGGZhlAnlMete*IRG*QDNhHf?2+T~{5YYz|Sg^_S(cGXe*uI_wp^gqXkfU4!p{!EQ} zRw}?wA`pi`N(3O*UMV{p{ek{P?ZmK{WI_Y(g&ybn=N3RVmjt+u?=Cu>41ZFGFdw?& zERq^N6h-5e)Ey3GG5Beo3}WMo%DrOqrX|&u(gj81ahq?stG_b-d6Q4zd&>*fsr&W&EF%mU|8tV2e6By(*DKSXf@1 zRz&ozG-cpf2M5N_aaT?YM8ys_YY$a#wwZS432KS z7;ejSwQx!a8rav_IQVvEGOCSvHTFQBkyYJ6xY$<%;n0DD%-JIQh3fkoctvpyQEVfxB)$_@>|q%b$-jB;@dh;UPNWH4Wp*D9M>#B98y zSx<32^c>@4k(iU;S?|g7`k9olGim-CXRb+mAx=S8!w~;B#?%}T7#m4~7mV=X+?{{= zVcT!s(I!kj_uwZhktt>{)+EUbD@y%Zg9c!@=JtI#8JgSDJkaf9Xo8c1QlLSxA98qh zXrJ6lSz~P2Zy+j~U2DR&?PwurvC^_Zh|BY}j~b5ej%TYskn(t=c0Ez6k#&sSvAC)- z6oBxr%9d{W9H6&KWUJ$Ian+WMN#RIh%hlib>~9NNl^^FyZeS>dhciz9QSL1Y zNsx5vcXAH?+UBm|$>P58xkta)XDoMm@40`QrIzZ(bW>J=1mEKXPs3BN#z<)fB%?{_Da0;Z1SB zq;$o_ky>l)Lbn@9sT3oXMTL_<{Uescr=Isr7;%(BVxI93y<@f!O$wnG7kWn2cGiFB zn|P4-*pG*kj27>!nN!7;$}qM9wCg>p`%FFcN9)9P{@)#vC;!99{V&}0GyICoarH=I8C?egtBQRX$|MmG|rPlwEcCCtz_`ri5 zrz)%qdLd5jjwGfDE>U81{|~?SANEbtx?d$W_EVO4Q%DHZrWg5dj~9#1|0CaC$zKWT zH91u0yG<;4{OK{D$4LIqHujeLWyi2SayM9lMg&9^_(?5r`1jS6vcbh6)8-2~$` zZ!?uoPV@M7(d|E(_-CiS+*=!6_s`^BRBo815AoD-j~w;n&xW6(lN=;Aj*XW?U6Jr#&(|vXrqUC z@0a)=PewHE=1J$DgNQ>miGDGIuggL%<&~R{D?R>q*h7!luRdl6SMeNDRub1g!Q)|g z#_L@twbhJ_!cn7<4Omx^+3hhkI@GQ9n_~s$gn#6eXCnSRs{dnsF4n)w;QqSMhexH% z^fu}4We@pYO<?MXGNAD* zbWPN=Q+r#}n<$=67bhYS8xc&JVSP*vcoO^KZtB62ZAi6qO2q#su7C64vgUV5!5e-* zV>l1ryr!-$qpaw43_JQe3~1GUYYU4dr)hKA=5I-KT&g(EwRIK8SI(R-NpjG*CEoBk zs=1N>#)}hXGm^lt#P5Eq`Rys4RGkD(`Wra_v2iXMoQAQI)1h9b&C+}?MvT7ottcTe zF*{l?{L7{e<-<_o7188Qk)rrO2wJI{j)8)W4KG?;x}=vWDIpE_%rxg?Ypv--#llx; zckcd2thVHVqKtwj2mf@-T*#o?m|m+XW41rt;*}Ec1b|+TlHco{;lr$-Tj$??w5rw4WVo_QG#~PEI&*&~B08S~c<&3> z0l9E0e);hh`3U?R$SEMD5Sd*yjt+M(nfY3H)-3M4aCW+PPjI~4Xii49SZns&p6a9$(wSWmtE8ULn&xIw!NvbJf$$j;y4~RU;TZax~GY&<5`fk~|q!Y~4!)GISBA zFDEsu=bAS~)E8}xE=s_{SqNhN6mPeI!lKe_sH!Tyx5qHD)cW6bVZ%|aux;C<2IcFw zK}_dh`gvm!M?<>vNz2F(#IC6Rk2066x93;xWSX%?{qnLgeWVwh^X-{2!ge=iibBpTF_@D=&nu-`sm1v$i2qFI-7q{{huQ<%S1?4IP*&z?cApVH97uyGDy%6!9{JpDOmN^SDEFQY)6QWAZc!Q> zky(GWFKx8@9xfV$4q5#U8INQEC}%6_$09l|`5R>1?68Q1;4xZaySp{IOo^?m2$7r* z)k8I!lKbiv8~=YKSd7@SqyN;nlYorz1QVA>h|>VBS5)LFBBM8)y}JHOlK&+p)xCMH z=|%n2>xy8}0s48O2L5%mG4t72!t$oJnC{Dq2nQ9tQ{A@=GDrVZg+!YTj)CN?)Y(jz%AO^RhTezhJyYG zZm}%cbFl2zarkY3tCCPBcA>OW1GUv}=(UsC_SiMi*E zn;V1ct1tYqln1J?FL&rNI z#tF85(@3+Hm8J!$0k@sgg{MEAm3joAUkoNs0P)Uk5keLAK{JIarEZt_wcuYe<9ruU z7jm~~TgN6-;%B~)_I(;(=hKS^V$?X!hI2w4_ax_CoW>E>>|dSIQEB}7-`~;{aTAh{ z6xc`y8`B-F1JQYS>N;G))s!GR2wUNYTiCq|lH_j;ZrriMgGmCmhXl{Y@zRVlLaZ}d zAC>+=(EnL-cY?w^uD2q7ds(?GqIxye`sZ{w_$6VuRX4SIOwVvhOg1fuByL-^V3GNUE zcbLKT<=k`5UH1=o*Xo~pbyrta?_K-(JbN^=?WfZNjix+m^x6nrZGrbHCZ%F#-?}xK zPpkc0j)dLmU7`k0KtUIhv<;;|ZB~O52DK|LbBP9PzHJ&I-?63Tt&*}p{1uxyo68tC zEh1Z8TGcXyirL1u{PsI&+p|%?z202z=6;c0=d8)>b|Kak*mZ)YQnky7r z@sV$U!>1l|+H})NR+JV-6^1MX_&URMk}6%F~U3L(d6g9WMx}sRJ7}=FnMO&+8PG~%KC0)OWb+a zY&gkST2}XyJrZ@~Gt+!neh*0D-*J=Yn;z2}~sFT)!Uqglt-K*I;w(e+wXt(pPqKab~n)-y;g z)Z;k%D#g|K>1Z}rMyF9EIxXw~&;+LWUq}_GBkPWXVc}DA$JUQj>aXn$*HW6V6(3m* zayCcpTItQE^K#P|q8~unL-o*7J;BBlk5ogO zFkNW%bKi5g4QcEp2~Gb zt<~o9An3}JB--9?JDS0je!eW#)#zgC@r!AsCC7Us&eiVOBd80r1PIy7|1p{%M(WZt zzNf{u)_i2P7}J3u&<$X-wkMn9UT-Jvd5`JuQdG2d*hrV`IdVy2x# zn;k?$T27&e&S}@1?OtUG?7^(;U*dJD`PQb$)?B8_FvP8jbHh1Zmgf zJ9R8~*r9+Jd6n15%14U+^V-`X!uY*HQXb`-=MmWor<6#o*4>xbyR7B+V+_Hl!xQ|xntW-t zkdNgTuz(DCxOO(YD6zx~ZJr5*e@CP-DDdb$YYXb-H~6g$mtj1Z*!%v5*zB7s#-%A- z0z|Pbq}N7)tpA8>%dZZ=KQ4;>cL)5Za-o9on8Sdnw;^FPaTvayjyve0EB7h~gRgb% zC7=Ai*+UEpHYTxBk-~8Sx25Rh z#G<98rJbg5`QPzkn&-~V&7B?$$0)C=8a#k@pP2M2oW6z*o^SeG?13Yh%=?4jSE)K& zjZ6QX*!g>P#8ceAwZcsO{@ z06s(SygS_vSHhK(kTY*Y6=%bagpq}`YJKLQCADNlyh`jHy?%p75+P6nnn0OxH#`1}13ucj-oSfwGXrZ8sC`o9s_0(z<0L+* z)~)|SZITed6mQh|B%Ahd=G(j2^mu(v-vz&{f>1Qijp3qc^587#XS;izNd^w%TJ~{|I?ji~zyDUqDz?bDM+Is9C3GtWEU@rFcP zjihja@)G6%os_92{a`#H}YKVCAStds6%H)6$p| z+;9*ve}a=VuDrTP;McC(`EGv5@=jNmH(lmZH8^=sCmd6;fS)T`Px18^mO#3x*?wHM zHTDx9`}AkAVb8FDS725E^_RwE%=! zx$19|3E!SgYUgSMeu@rYNV3X=#@w+aRab;k%o{XEl$=Al*M69l2g7oNYwU4wHpiu= zz6;gJ(!nn%3*A_6&fdB-IVtS>bQDxGAV6Pe@v)3CvAd`HJZ3OP{-d_J4!X@LZi?_(J zq~M?nobRV0a2Yc;SH((@NOGk9DfAa~fma|ohUX3|2BeXFRUzj>cVuH-mQ{2R>i$G_ z&4Gw!%bkef@LtPXxJ$X(&Dya~xkPqTmCd=Q5bd@f991O*2c}-H4|# zC2P0PGwN2D%CB2Mc?-B6P=}kM zN=Zb4e!BzpxkN&lSrZUrZ;pd0&FNncA7cIRv+j`Q?;RN0h8uVC^hIE>s9LoWmwe0f z&(P)1*@b@s2N>mR?ftoxqLri`!z8ac_>@>l5gq_IUwpu?Ibc7evhfM^r<#C1^Ato*j({S z9l>6b%EwZD)?wQoC~SX9kLhnYcS%t((8+Ay|A?an?FA9`T0)b6->0^~vF(a*nF675E4|+wabY<4cj4XM-v7$y3LKW1 z1jLks0^4A}ILYW#B;TePz(rLAHZ@usRQsC29*0T2h)r*F2S#0cG*s5))EF@tUFlc6 z7XEQXy9x(lbR4Q!6`jrq0^!8&lzp;9XJOT}k1XsBq{if{=!ZX%X}48~_R%v?5%h;)JE}1z?{|TE&mL;;z7ujp z*TyW-%XOrKie2R~Vd5(e9L$wZ7E*)(0WP|aI>egwJ^0!wLP@W1o5oR!I_#N z1S$;V<_O!{GXfU5B^qUYlfzS@rycJquz53djAqdlc<+3tguFlA{{9C)w>Ps_u=Q); z#7EK+>8#s_Y3JErG6*WBWwB$_MootFI)k9t?qm=rJ0u)H!EK}7IIbkUV9SL)hl+pO z;w&T1L)NKY*9~R|vQi}WX*lfEtlBE@JRnh~t*vxe1ID>L;*&Fl^+Z2Sc>*-n9SNxv zNBZX4wBfeNY^#n2O~z8wg(+LoFraAGsEw$EDMrq1M|5CumX{1edcL;sq+j>a@zI3_#>U zOsN?|t>7#9xW3(Ry7KVIcRq`pH~6V)>z%30w^*~UKzbq+n#5^vzpSE#wl~+;6aC%2 z=BKOB2skYZXgibnCD_G=8+_`(Qu}ALgo+3?`&LRP1>?}RsKzTT_T?5?us1Kva*K$l z^9g%#p6^NwI?^;$&nt2|%9op3BdDiyBmeDcsZ4!YnQdfhytIuv^014hsCq33#1vRD zucl*!(SS}^VR90Y`f$*=<}_+}Mi9k(F=ud)X(4BJ(D?Q@7^h_xJZ<>&D&am|Zl2?h zg;KpD_pLV8(TSq>bx=2hQ(#EQz%%+$KNb~>?Hwd524zj7FbTwCZUN7`x3x3Q8iTru zoOjbDN+Ve9z~yx-Dr}0-siz zz%Z{}wzYEHq^8r{sdPO~fW%obV(nM>S&SQmd>g%Cfxzj;YK3?X#8M!%Qx`Z(Fq64l zOb~Hu`7A26_=)L@4`Q;#q*2##Xlh5 z9mW`hN(N+!dNQ)}8arFh2efnlid+o;dlf+zx1cBcR}6gKAWfcb(+TcGwkf`3ibe>W z+d_ly5d(k2ifn}*C1LpoJmX*jE}5|5-{fvpK1bNV<|g4TwV#3x$fbJjGzSDip;zhd z^-o0#Smlvk%g>j&?IwFf>GVO&7RilB4J8O`wn@+{UuloqL z7-|d8wM2S@_VhE+BTP`|vffgN*JAMV;gdn$NPBv*zkir}FCoVr?&0Zx$;99O6X1~9 z92yBTk0yXrZnKSS7UmUseQM9v?sP>F*~; zySZkLT_U$SU76)lSv;t%U)+D-(q+fdQGH&;xVswc5MbvM)ih(pWIk|Ow5a)uNF`rj za`x%@C42+-jPnuJ)c7xp3dfr#V?y|JKR?O&*u}rL9kR%~YxUD6tGSV>sg%C8kWN3k zci7}=bzGCxf|WB7Z$9u8_z2{@KXBettl5TIsQqc}&S~lS2cT9S)zy+D#J>l25vgMo zxU-efJ<)1xM3fZf5rMp8Pv)m{IaH!|P9MRc}v&qnprjc`2oY=1to#Bn+{*Z7vp zf3UUo9+QfYCw;aH$?4I2;>&_ED|H5gt3yYwWXf5o{Q;%EUQhISUV4%%KAHs`hmVJG zwlkw-O2%?Gn5Y9{n)mJ%15%XB-_jJn0VCcYc`zB8dlRGRK{52lx_;vKLIG2}4j;Pd zhze=qevO)co7ZCcOfyoi@e*NEs~c49f(lZg;>q6rq zXVdl~hy&7N&S~a)`87#H<+7sDJJ~Aak39z+V7D_E3i*p!!*3QcPsZ|t4h(Q=sjuxp z)(|_T>y?8O$7kB`zP* z+tJ|;x6@VpV81zSP?4VZ=#cMg6OXDwMo9CD_@4OI_V6@uunS0K-S5JFOyL2^;BlX; z9kN4J=a`i}iNY_E?MLeZ3f2T}nWV)$uo^tw7H4r6#^raPEWejVeWy~}_DU|CA%lXi z*WJBJu18F5`YI`BP!>!JQgT?EHzq1!t$xQmcF*`$V zGrW1Jjn3yqj;OQcPqO=DtTyx_8;*Jl--NZs*xg zkJW3wpYdJao|@d{5LTVExNK|q525rtTPf67f|>j^751AROoMf-j`6okGTTeK5W+5ZSgv6GS*p+mihJ!x7*iwzD6EnBbfak&dmnz2@;?Q z%i=}-bS=bKl{ihO{@wJ`V*IMaqU-vj3wIlJ|t zsmd55rr;)cOtTW>BrTi%_R-!e>U6~E15ADM2Shrr`pNH8_cU^u9I02u>Qyz9Rh~c? zy3m-v;6$pCztq-%9e~LUTsaSq94{DdUu|FJXM97!$7jD!NK5u64hCq!J5)dPazvP| z`+l&8$|__@tXl@uF!1+KObt@7mD9?>IH1brAeABRvs71xob_2x>1K)gK!MgaoIehD zB1|k43}yEJ>1?qtHh(hjFxMTthQRwmDnV$Pckg~XbKPBaHQ{LfpDQt0u$=&h5eHen zVQ>ukO9kDCKvUHvzm3qasLd!b2!A5wDYrUO%aN0YJ|lbS1?jXvrriXVNpJX}yC(E{ z9T}QV6bs44y9fcSi1E~E%*j?1JgX6gau7nb)RM|7T}rvkv5E49Wn&{qWsum{ccQT+ z_NyB}E`u!?tlPYrAfta|s=#Z`383lU1yxyE{b=P77-%}({M}GWymxf4h??d`vGukH zqG_cGMNNI1H|?AL;Xt*f?-yNq@r>vpa7)f)Yfpw5h7mUU4F?%LT1;&5TfU=I471XW zMt?s#c6djbUTgSNRd`gcvV;+DP_#R%49KM^E;L}(y;@Yu1(MEg#;R2in5OF>C0$(C zkdV%1Mv4w^NSitKTv4dW-1wc6QUZbyG3v@)RK+YzVNsxtN2=_8(=WbS{Yo#1kPbFw z-OUhgCf&U-A0M{~mfPqPjTIc;PciDU7a}3?F>^U^>8COCGr+rm!Na|136=7(DWgN~;kfgIOexy*p?8_kSA3 z(go@hRBKaTv)5KM))b>}s0D$-SW57SnzUu~>_*L6j%Nmavp)KUpzkCg1BjPGW`cOp zzS{W~>#vo@$b($$CogA=_+PA)>U+lcxOw#y48&HoCm(qr(Xak~w{W zt<5PGCyhKOjgsKYr%P`WRRVuf6~C7#qz(Y`@F-I%FO&YnJ!U&|;ZNtQhwcsg=K$uF zz2u1uj^v1bIb~aONaT2aZ+3o%Jb#ndKY^_wSWJRL1F_XcBjkdX&M-V=FSfdKA`x1D*&j&zn3G*_r0|pD&*~D>a}-LrKYDl&+s~A0b!J!6{CGdWBNp!J4c9{-lcs5@ zQ2%Tq*7U+Jq4Pz2NPL$^hWlZb?qO`HcM8j(D1WO%PYkQB>2gz22`e@L! zZ+=#yaYlh3PS%A{Secy6hc^@uIS<&An<6gqvOo+xr^W^he$}T6jE=tEk1iFHT1uKz zpeS`Cu6?gO3}C&R6^xN0xIEh~cf}-+Yiqg=#}~C_Vdgl(8$3-l`#Rf4b+{?kd#il) z6LjM{&BM`vlz)BLsi;h6&QB;^f-`X+BeGRTF8`U^YUL`HrnL2tO}Bcc{XWZP*( z?PYVVfAqBft;`g^H(qkP`B_RXEh`T}H*$n&8LpbCT(g!OME$YBG%k5o)Fg2A02@aH zeTZ##Xv**F{d`VM{izr#PP-hyOHSAEBXQ?xr0!Mm_``EBNF~93C=c#uMS{|odPia( z^=b>K0#0x#Fy;cdhoF$D6QMPdk|MQAf(Iwn%X z_-hiEf`3-hr8f1ng7nl_G5p2+7~w&(K}~3(+R)7sY?%l@6D!=P9&fOchYpF(cN4^_ zu2HiZYAAfK!**b;-#PL{3O;f4I1f>!t1t$Mh{eE&E<4MlyAPM%@2d%IH+T`{bU$IY zG==P~1}Y|32nkvUP5QLX?zfIl%#V#!B-`f4b@}qq9FvgC)7NJwVLHn=vot%Dw2;x8 zQo}_0r^Vz57l_EP(T$Bxx5S@So7`=pRasdT;e`NPhd7jTIbSWOdJnlvmU*?@5B&Ih zw_=-p(b=H#yBfI@r9EY*2bH?7=}gYUV6rr2#=W%{SN0_q^cKTbz@h!7q|ZSfYW88D zPW^H1vV5Kw#oeaH^s}OWFkNj|6xr||n3--v2E7_NVm)$yuw{&n?Q-Fw@Lf5bXU@+; z+>?goqWxuupxV~AI#{#fQ|Q2$A&0TprLy zP->-7PP0GVOm4C@PQ#0y`0X^c$s2eD)o`4mpwfCyU;KSSO0g@wQ48X@KwkNuKL6(cm?_Q{xn*%AS7glx(W? z75>FC?t@5Hr}pHJ@eS)6Q8H}lgW6pU>12KIOr3jnMJY*b!mK7NVeR^)!|UT`8(oZt zscE6WyZFlX$H!dA+zIfvqJ!4hK0U10QhPl_1raH&PVu|=t>7udFIp=(9}*?Fo@;ta44&j zdwBN3Kg2=r$)x7t^(%j?qQEIy3X*bq(=I7v_o=VKh}}+2W$kVWN4f8jB+j4PSO;ig zuEBV-v5?RcR5|4WKxqReh~c~NqLZdb~V@PqlfLhzPOr)jA@SuNC=LF{|6wtiVD1RYF4 zBVbe9A2-kwdlL`>p9sB@2t96lv~34Slo&YUA(o`Xk&r8#$;w`n?QtdfRkr-##lly$ ztH9HulkHFH4iyP%Jdg$AFhd5vK0o6K?SqzH!cN{ixngUrhT?<*b{HQpBcsRfk6L?% zQEDF;h292UY^?z#2`b`BRiObIZ+-7(BcKjWV)b;XGOVt+@+cLdJNSKV8?WsPuB(m8 z-f5JYH>{->6O6{58!c=cUQ^}7I>Nn7_INSQ$rw?=Uv^ARlclv58$Yq#+E)JOSmEa# z2r)w5yg%oI)A5FJzyMDV1FyBXaeqP}d)g zy3MEqOgG> ze_M8$S%l=jU<+lteRb{h9kfkPk`{nADvP&}JN>D!99-HO%p-{{um$zq9m0phJ+8N{ zGft%M?H0fLZdeUEFp&vu(Aru3=316^xX6opf3k79@{#G^D?P!hoJ_}kQ%TRPv=PCW zX=DY6D4Tf!RnH=J6m(#mm*_TWtnLz-u4x_-TsoR`ucGwApsqmI>yXh}YLX3Xv$Eop zlpLcjG{k^cbKYAA)1|iY`xh!~OH&15GJO&zh5FL4J_+rPStzxa^kC;x##IJ%WK4<* zhDr2Apves(KYUGGNIXF;E9%sCHaWX26rQ&efTS%o$zUoHkiC5_++VJ>YgRfU_WKvl zaeiZU^5zGs*EE2S1hU#rz(l^P3m)yDf-YsJnv_bwAqLec@6|Gx0$tl z%I+?>P;uLFA$oGLk<2*a1$9bsgrw71#sDKTA$3;PMyYr~>}&4gi?A0RHtGpQ(2|O% zU1ee&N9-{xY(QD`H9LMvSZF|vy|?a%x?(n?F(k-)y8?|M6_u!w?RQ!m3XaKOxo-Wl z9b+<8ZMyGi#Z>3LgjRgHd}n58|eSlucmI~B+qtTEP_>~4mY?=cDRC} zL&y4%AmK5MwLFIhP0|wA;~OJJk=(3uRl)_F-x)*HvP`Ow_am-d>#yw) z@AU#bDf|XAq;u|JRQSK0EsN5V<(?+Noui>p)?-L&R~*uO|4nv7!16;=ODtpISEC86 zd^XYZb{p!92m&G^O~UP>ek=K_m4O|;{gon3I)&;82cX>iqp05X-8CDo(+_Qqn5ggg zpN2(b8V0eeMdtmC$ItYxk-UquPmA`$6)F*iU?r~jo&dLlQsYxYMr`P}9gg7_NPyE_ zGr%Ew=V&=PpMY&<$iMWDK@>Gy z>a?-VT4p^6KEBQ7Ra{h?jj17z5*#XvD?8{rk<3qK zD_Q>}wNHgZ2@w*j9X(0%)n2yDVDWK74x-w_Q}IY{t>|>;V*%72m(>999hlROR<5|G zYpY9_03yr8l$~+w@bAWiRfT1$K2-@2%O6XYc=(A+xKWG3He?KMVmt^k*wXngYFd=0 z>W_&{(i@d0&Aw_MVa~jhDV-|75^nhrWu|MwNkzmN^opH2_F2ww6&?+Ln9x>`rj}|{ zN-9C2o%4^oW8J-~UDboaB}!mr^6o%`!fs*A%$9cEZsD#BCZ!RrtK7!kv%zYrnB~=| zO0{lsWXE4e!pdY>w8xuUm%6U{7c+L-Dti#va8-$r9O6~jlyHyg?`XK7?O4WNNay;I zqE)?7bWcTxCP}~s$7-*P_(i&-?72PqfYgcccts0fP1M%3`F2Z-Z{k-cA6~?9&1x4jL|5KE6 znsW`$$;>yWKgTWM?qyA*ms~+fBuDxhA!922DDXr&G0%lj4ySIgySM^4JSZb1z0LOn zbFsrV&M^%1Xt{0n*Zldhp8{j|n?#NZEBfxs^xWRmLYpsq18adVF24Kgg*2@M633XTM4<;9 zUkcr%FzNi&0ELfe56ELh1(G)&b(`>hQKJvvGX_qo94&ze8M+z1qd#ZZN7=CQ$Gr8r zKZlw)tE&* zL8nzSCb__se*M!{I@7QFg}*ey@4dg@;t4N}Qy z3cpCZvwan`BrQM?C>QSBH#~(%iVKiF*e@K<` zF!=r>r3`(SU;VF6=p7y)3HU#B#{VZ>R1c~9mqN6}m7o>V!8jzJQbXnp763*&9+Gm* zXpqv>R=YD&LM}~w?RIvu{;16&ME=V&KCT#Yqt=4P(N*^1?ixrFKFPL_*ZYFvKMj=x zbv<)Y`AD?C5P!wb-L83i`pUI=%leXrg25>K2`K_Kib#8eTAw%<>CedEYiZ3+%ic{8 zg@MP3L=N!MN!`xD@Ef{N+^yS^H8-yNH(j)WwA`90#xMLI3cj!@88G=Q((fEe<`}t@ z;s>ItCVQVY7p4+_XZ;)31^SN0i*@XvH6Y*moHKc*kLCUCtj{-bNygh`el*1Ym6+>w zADhVA3jd5u5F9}rE6ta|A20x&Rlvv(4KDxl=_r8&J_?>#zUp|OSMYIB6sjd;bO zb+`rnD0|_P!VoRsIqw!eU)%fYND!u&gSg3F{U5Cu+R)RlWdH+q*3HRsgAES8b>`99 zBdSO3albhS1^S>#(1373JgQ)9PHjJFNhY=#8d7c>ItNV|7N7x>Vy%)Mh?R!-*b0_8IY$ zI?9zrNrw|eq9WgiiIKL6ZRQ)bCY6)(1hre1qFM0Sa5)r>15zp^!owK*^Zy}AP2Ao_ z)7{Kd{f-bB0B}| z89O-n2f6HZWxD6L@Zl1aSW-l2$U0U$ngHu5TibXWC_wp!&Rg>iCtqX9^=Ki z6DKreZ^o%>1RnNX++f5E7m@#W0sZ>FyfKF`au9j6$W_$G%7AIibecx|xccXRCd@Ia z?FhNEi6Bsy^dABWaKf1H62%fans6+fPlSYo>pmCVx~?7IpHy|z0 z7594e_07#6d`43+8r4<$boRih9OAgY3+bK3#>iwUley)>g;ySDFpp%;#1&g*7!rG( z&5E);(1?z5A`L=$SzfCL64|jP^1g&2$=vWPpo}V~$hur%x*Q7T;eW{-f4E7s!-b5c zJ58lNT=Vnw_3+-d&vGACO*7ZRX{!rOT%7v`<TmgSP$JtTYXfkVAK1j3y%y ziBk8Oz+eL%_ra6Up2!m=@T$@PvK$$RN$f#@qkl^=m6$dPJcM zNv=#+f0NCDFz#RP#F_w$17BAes(`mF=NpT{9Sc!x38OUchEBPsq%!MNG_W5=JHVDXig0Qpy6 z9+KNd&5pX6R<-)6JD@O-L|^+BPlYnJw65+iY7Z3nUM)f6;r;0J`UhLWa)pFBP44=C z+sM6c)-D4k&DWdx$^f^9)U}4M@z6AW3+$nzOfNG(A&Eq#ps2a687a|ksXIb9pX__@ z7+>!PA^}@hNd8?WUx^Z7Jp2*)ItvNjR!$xg|Mn_apKJ_M)ycpYLnj?=TsdKJIb3Ouxil z&WpBQjyj_}rSy(PX0E~`^x++!7O|;M#-4kJbpqX3?G(Evau)UZN%u23qNEfZWMOlf zj&$$Oa$TSoJ)>0SpS>Wlip;Dxw)P#{YXm|^AAyf+_z$x@$=8hjQ3v{GWH-wf(7zb5 z(8I!5$AgD2uh(<1Wlmq7N(R_^%JMb(6M! zBQnjaxQ``2Z*9GesHIMU+Wje*9L`8+I~a2Oh=e+C?$)0V*6uga`M&BbLY%YXS1f=b z2EaFGS{%Kpt@CGrTy0Gm`orO)uc%xhM=RYKW{TCOXCwSTpWMUOcq-5P)t%+5SXj-T z(m=GM>raFQD6$lhy`BOnf{t{#IsCsd?&vM3O;|1bUq!H^rYSa_1CDb4&FFzTBkod` z0a0n9FI76P=xeR#W?PHVRo>fHIlfkOeuNwRSATZcJHHMFQ}aa7YWhwn$uW$B%$pO{ zHHVbusL<`KO~lHoc)EWMQRPlfG$7fgQR51w)9lcVSlZ>wf(_pO27GWC6m<}#d&1{0 zB66XPq+GuA*(oy9P|n&Z=xk12h-KJ|e>yim8n0Z@)8+mXNHS`o)*5pMgX3-MEOoBO9D_@XkI3u73 zPN(rufJT~p#e%Se`3D%DbkAQRNMswf20byw{%^1-41P%r(JxV+q+&%1z!_O?OiJuT z=Z_!yS(?98LAZ==@8;S{(?dwelBtL%2VF0{f0<6}41(vs`E4-jI_IeAk2bB$rEBMe zve@S}G(;Fm(uu0NK&YmS-HS(xusJb~XZ{W13eI{ehG%=zF09lCRyQ-!#&QR{O!0+M zND_|r?-u^Hh!L+ZYC`D_YaKe zjm|7VkgG!1HG-hWb~=64)G+4P(c}oXp|HoGCR~P9m9D};r6GVE_N?rf6!EIKT_R2) z2TUf(h@m2}ejtobPaK+yDj8YDhxx6xxFK$|c$M8pE_$;hsMV6RakBvvrKy7FexFpb zfi=-kyHP=4Hv7U?R9R_?Nh46V2drK?7N!|uANmJ$#WGr%jGvD-$p}`?gTYP162v_} z4l4L5Omr)uBQ>d>he!I@`p@D$*Tu4$%p|$&k*jx%Zw3Xv_F{ew@Q$G{2f@OlS3?oim>@el0(623qmm@joN@)lk!Xw%WKv zx_dsldp?w0f{yp{4^oa3^xTdXN}))ygV~!-w9fB)w_FBdYxhGsHGY^7Oz)-UN*R&M zaN|)HEN6qUM1IYSBIc(>_ghIiPK-*j480%;JubGkpLY;nRqC9Z`1m7ZP-Y%3Kak#S zcq6vH?HK8=&PGs?J6DzputlaHJ2t%bt=*3&+LRqRTL+0(gNNj3lIUNN40tDh4{+%Z zHTSmV5I^606O}u~3;7d)7ztv@aLEafDbybmKGTxkgwf6xxw0Wd6VrGF=UMdz|A;t^ z_$Njm2Ll}k9xcyjHO8ZIpKhX#G*pKP#PUFLUJremnP*krJu6t#Mk>Ykloc)AKw#S zw@ZSl0ax8#7h$ER=(JP&I?>=4n4!xuN@qD@44whG^nTXXBU|gJ^0PL1=)y z;!(xhdl4E*Q)aE*#}AL4Yh?}|=r}K>Y7?gRYAsFTm>1u1rs9I!+sZS7 z11^K$+b)Zr{S26uo*Rw5VuT2a~9Q?OB~#hVA$&HIRr zh3gO~yQjq6p`HiWKl;)nVXYln0mz%%(yG|;vE>c^4Mx5oaJ-(ND0cZ#Q(n3g<#_y z|1;A;Psn4rCxho_qS4XBWu?Yg`FzZA#9zd}lWwE#XI<%Dwi7$u#wXG=Ny3Ma;)N3s zp6*B>Qu!aL3wqd609v?7++Uu1rm*L;ei-Gz zGn%i#?Usly64Qs3l4jLcwroXSs8%_{t|lcJ#br20Wv!egqMiF7l{Q9&M&?C8>eI0P zNsKW)_LdLct$VgOL3H8bpC@G{8S`XG*6(=>Hnw;)7jf*`K$(!;^4;nq#&WVV?ljF^ z=|zM7CdmAjX;sA17=E(+T%TpqAYno(g7QNp)Kma8_+R?Xt?S?&W$H5=G;TIgGH~IJ zDyKC3Z7e%vtx)y&U%uVd7xSv`n>(=-E^~VIDteu}Ci+&zOCG9X;3&NquN9F1iaXZm@!`{tmk}ql) z63xj+8zHo^XA4}JliFU<@(jCsW{D~LQYG&cYP;G{uP)m1->B|$22^X}uGZ>!PYbpo zp7h6v4L)QR(xGVM8swa|CkcJKAH?UeGi|5Hub$8?FKa(C#z2@x?{C8Bltjx?EeYPt z->1~ly#H)}zo$+(Y8C~?Mictoi;gn^DDy*uVg>p0`%!|rg#{z>mUH|ff?}eu|T_9#d>F~yj(YKvWgPs%% zj~j4Q8cQ^Loz;NMYmYBepQG_~QA?`Q>K4(t#l~@}r;`hV-GFetT6ik=!bFB&P^Twk zG52aPL_OpM?Mygx=I!50(g)FR=sY{5qVPG~`*FF+52I1gi7Z#}NfUc&G~exn_RBBz z({!F9?h`A*+u5E{;&#i9mg43~uGf30*7zVHM2`$)cTZ6)uM<_YOoTEW5r zCqFECqKf@jcBa>M%gMvSR!*rAd4V5S^Y%(-oBUL3^X)eB(^2)-?{V3S{iQceS>_>; zx8czHh3N|;l_ymDi+{QWHm<*-%r#ix(-F0$!Y;Z=y`uGZXSUyHv^F*uCacBrPnalH zoBNpL-qv*X++u&xjb4ZD2-Q{1gfFcqYG~km+C&uraX{`%!o=Z214VW}eSU^;A<@9h z-S6%l80xmC3~%dmcC|%K`mEtziZ@La?Q{n!`;+gQZjJRifg%JM+pnP$G~;*aO zoF%4-4v{7fdP8>puVg}<+c?jAM`xaaEZ{|?_b!iZHtLX5zc*0rdqM(y(5PS7hU1)8 z$noupX)@$uV)TpCad?F3?X;s|vbPy1Rkuyt`=4kw=I+Zo4w{-LNQZr7_cwpbFV?~D zj84}LDg(w)0H>MktHcwLnah`2ZXWqQ|58ayT^ZE#ur2(X-dvlosxY8oyJT#N@*?L)Yn zf@3!xcKr^wY~05E>fG5bf?fcF$9J#!_Lj!|b}BEgE#{PZ6wQBI2EFmP8s9Mrcdtz* zsZG=$_~+2obS0bsUtM}`R~pmU7;!4&sBdOBtE!Of{L!aKc=??skm<}5g`ZqggazU) zTa7igstKKD*i8GClA=FbRg$g(Idfrqr$frYp9P<~Yp={`4kDNgCJkO6a8ntweoN=} z{HpBnhfnlfyFcOT8P@QBM*W&%-Q&GxaNh@jS%2D?cD$)2GL;3vp~W9;0RlTltJJ~s z`O#Y}#DqF`e|6i^u2#%XIU{eu)_%7BO!=!+gN6sdMZxAIKfV@dE3xjBmxX_#k4Mel zX)e8SgB(rC0mHQUBur&xLT*-Qy5|JTgdzv?Ap{-$iA~FPSw%&9n%3-j(29Vg7Xh!s zQA>G5Zru3slxEk$B3^|fI($!EnJm!N6_$PN-x<^e;roEulMqpuHz@z$Nw-olyQCW@ z8OnMl4O%TDQe(PFMq|gL)a{CkRFux&Ucu4o2Ga4}UYJ8Gnr&;3emCu6nk%IJKC;kY zyL?vG*KbYM>*TDrJ7CNx6i-sj9)m9ywe@!s667cw?sjeQVS(wivM+mgeHh=xP}nxX zk)s@F4IZ}h(dsQFG+EHneJzJ63SGrLblXOxZAeSf8wq&SukzM%{ODA$Nz$=~x6L?Ewyxd1ON$nFFYfLZio3fPEfjZ$ z7I&B8h2ZWkMS{D#1b2c42^{|a`_ApTIU~30$;z|lTq9$Q`HHBww*;xtMeV5gkZ(|H zV@_xg1D(@|Qhcq$qsGh4uOi{=BgZz2)jC5+*D3V+lT5usEz{nhrNQ=;aj{x&qTGiKJ1$Gw=R}zGMHe8H=N;!R zl*H?R7yW$?+uLBQ`#+^`PT1?!fKXhpdt{bfiq2F4`$l1y!Hf!}Hmpg|g`R*fwwwe- zEjakZ8->0JZF+H0UPFTkE}#3lgbd{Uom?z#MSkS=QM34ddU{&f*A{=XH8>mWteDB0 z!H^ss>3;dm(UtF<#a{A;rc#(x=R4Q)!_wR`?^ofjq)#Qrf1MX-Pk8OERQ$1F5JS9N zC)yjj^d!sld!@LMA0X8#{^GQ8i{21QMaD1Ny_YyHODkdqzIvEIrhooahI?4*MDT7qG)*#E#ZFnpZ;c1DL@cxdI-qAJr3%L0m;L!vv0q|rke?}_ zmR5XY(W*VDTY7mL^~pL9FS&8mR;_VdIWP4OfR+RhN7& zuv$F&A!Vb~Lm`AN%`urJ6RKlJF;j`fW}j25g{08z*@yO@(kkCC`n77g1%2N}RCOx~ zb|sD)QbXsCJeq)giK+lkFZ-KF7gt~rjRhcgg45`A*QJNc<~$;%E2OzPbGj$%XP|}J z9O>2S;l0?~i_+^XU0{0&g2xIa8r&t0E{STlt*9&#nlyC4&ff|5s zC3xlR;a)xJeJCGk`;4tLUY~^Jm51Lq#d>O+kkgdHa*A7? zP6!tUPu%(5Lfd%^QiM}-Ug%VpXzv4P;n2RGNuFKyB%V*?--kx!zJ}TpC&3h=l^4|- zlvwWXRF9k5J2kH50s02=-Itnaj;KG#EzSDd1exUw)awa~UJ*o9pa%qZDhHk=kWEj5 zyVRP~f8|6-u3TNJi{@Ziah^y|8g-Y9A%6%qDg&TX>u-KkgV}!9H}lbETi-<0)%hIb zBwwtN?>_APg4NV}pGr5Qe&?tXM$y@2OapXc&b2bupNao&d`Vi0ZPV_zUjFqJmz)ag zYIaRja@d-RWkK2N9W$*WEMv1F2hEp*%w%aL6_LeN0(ZM|RkY2L-7 zoil?oA2CZTqHyHh`__EDxjJvXlG$bU45$M;z1D=9LLzTRlKZdNZl1nMoLJt@8MGuX zDCCv!1TtbbOoU$?&i^@KgHvXf^eW8=&+`ikc>Y*^V_b6?SVAKqEbjC3+Z7IG| z%Z1TUgKbN)8ZX>}a81P<@y<^}AV2q|gp+RD$vaiqGhuK+#q}_`rq;P%KG%3o(n^g3 zQoUiP*ORV{Z-IxO@PniQT~~sVjmPGu$Kr#-*R{I7a4pI?K`9hVZ?ybNcd!Ep&^~_^$7<;D5IKkCN157s&Xp5 z=(wS%juWW-t|i@NePwU;RUJE!R00Nk>mAM!8V_ zv!>_Q;410a5Awx&1%}MY$anKFt#;A|v5DGUNpXNMYsudE;4b>;-=ga{OeeZ)*EX2s z{PXR6xzx9a%}kz`^Qpky#0eI4ZA9}Q6s~F6!)HiE7O{c^&Mp)^1|6HnZrCwpspum* z)H>JFKuq!8e*k6iW7uD4uj85|EJHB2*hT!Gm)my)a$%TRq zDLP<%`~j{8XE@a=991})COLP+Ed=L`6Ixj0etkQO3bjZeUFeZMNHKcH{s}wS1mfrJ z06flCCHudsx(5B2#nbQr+70aY;^R0{nmW(8f2DOmN}{)CglqEYW1+rJR#Tsd0mdI5 ztrY1}sa26C_D)vWsjT+WHRE6!RlF>GAyiy#SYzTPR48es9PGAVTiKcpM<#J6epTnK+o&F_va>(48pfs+=?Ox*i8CFk(-_7e zOd*pwpWVgohz}>UTT}3#AWP&csInsr;rBHJ_;H#dM}A0Jmp;A0oH0_hQ(mcvbW+!u zrSmV(V@!=EMcDZ4zF4nC+t)8<*`wCid-ZQY?l2u?fFvgKf=-axoZ3v}3DYd!0?^Gx zY4|c#umkc`1k+rjc@FluHd^Q{I$_#pH2G6D^#!|s{n*fNgvQWgg-#d8XsGI;Q##8~ z6#N6|@fMKTE=(|vU}9SsQR-$_mnCV?`m}2OE?Olak+*nA^GiCd3wU=6pR`Z2rZ@uh zOTG@(?`&-Hk(KeYkhJ^JI7tM-A*Cm^xl8XRMtTAP3VVDz3pDnrQl~WSsov|n&uq>` z^?`T$secZ72GG_45S0R*$an@5%Kgw_<1&f9bowmZF$5L-F>)w&PoN)D7Z%w9Yr^aH zjkV9+BbDwMA?38OcBj6A?5eTlj|4%4a4B@N@6Y<}Af3!QD;(E7n-Z=HW|WFiI--G+ z6{iA!&8^QK=X;Z)Tcg3Y#71q6Ltupda`G~dbO2cS=xZ#M zKB&nfj(YIlnF>*y#Ct7gGd6k85f!QS95Wz7YGqS~nw_BO?r6HauWX~f*Jp$m^|0*H zGa5Fn09C*KQc<3P5BhrL$`m{!8lYono><_9YHOFFFpExMM}5ccX~(x)voC zz%77r?gjH-_*uJe{ggBL;=b z;N*spi?b)ihY;$JZPm)@G(37$U#7;QuM8~q&YntNezkV2NnIp$WOsBtZveN(0iGjb zYb_HGw4eH3zqw9Lj{nc+;>9yXmOOEC<$G|H?4j(s0fa0cWG~=9o)M8GK0Ie;?e#yv;154Tc4w@FeAL^ zcLZ++-**imgbr5&XMAV$+#7Q;Z!a`dViQXc2YNMzji|jLb#6fc>22JzG({dqNmJ}# zy+-HTI6o!HKKBmy)AsSM46rK)^zf2FK8Xlyf+8}d z)oe=!Ns6N`Po%pKd}!yPh0WekXXd28rIY9bdm*(u;9ytY$)XD)n$b<)p)3m0MGDg^$k4h3}M zhbK&UoOH8trcWN5es}ir%>N#Vgm2r94{?GW$T|baFk^)Tyudi0c06yOP0sV@Zz(1{ z4ey-xE+E_P!E^OcN?llx3sZ3$`b}3IX{GlCIgOm!Z0E;gzF!jkim zCWTfa-_7zw{+aKioUx#KXx5@!IzvGh~jd8Mq)UT&VSl*KONrcZZv z#p|v4U}%Q*)G{cpYr*X~cKgHtyY%JA)R>K2!EB9?Lf4i(t|!u4Vq*TlBGI`RD?E@{ zo_I!36A4NdG!bahwYb{tRl z%alqDRe_ag_~iU7CP%n0z6!|5786TM#l#gYuj~5bb95;GTnILJMJ`?E%l!Ziv+p;w zxJ_C#e<+_ZKs82NleO#VA6lcjkkjhly-;hD%7Sd1Gvm>`^h-=jt?*6J+%>W%K=Zlp z@olW-aB4c2i1a`OLyqWHPik3>aNqnSm0#_T9E>DEq7$hM{13ukXcHOcN@hLW;AG@0 zYCER(m!?FA3%@vWvq+IFcgGopYcTw9`c|7k;5|j|wRcak$KsomnxQ}5<({IWJ@X^N z>TKP%)n>*^f9WmCq{~0aN8%%}x;u-mhwE3^Zq`alwv<|I>Q$-fc>9~!fxG?Q3Qv*W z;bEYKdIWqhw6#XXsCRJJyYW#899MB@TD?BORN=vOdC|kc^e1g2uN!nYG;00BC5hh# zkBSatCVY<-Xr%Frf;zXZGE-h>lNGR5n-kNgPf_a!K_MSX3cvX7tWKQw@?tz2 zjF-=b|Da{4@b@fB&!r!$ngH)-12A`<pXoanqu+z;;%nyNA&TPMUnx4*zK^##Y%vq@*<&n!3ypTOAWUyjdiCxj^5d zDY&5~?`#M=_&Z_<2xQ$=Otpi(_@~kEZBu+S`MY=N@)nPmgmYAUt6eshlP#*QHsZ+b z-j-a0rIyg>19$#C&bd=%sy32}fX9+oqQIcEf`z)HRRhr+QncTwM$=K-PWia+npb~v z!`DXB9+z@1wBjiqfs+LltY$e-6%*onb0Dl(@}G44&fT!nbw@H*oi7u@)hf5RxhAdP zO9#G*SxuSpegIOn#=o+vbaiB=Ds1gtzPTdQIdr)RnYBJVE_vVGwRk_LbCr$>PQGgF zL*p{1azr1g_zYd)ME#ybHs8hkXqmw%b*TWz!ophiSU#$OfKz>ZnW%U8o$XSC&Hk8T z#mZlUJQ85>lDMy{2rjB}0b55b-Bw_%PJlq1h)SShu2cZ+XX)l<{^>^$CfA`fSx`J0@tgm-~$&H?z4sW()DhavR#PtMwZUy8liTYq&0&5!F zOpwST=h|F)slk2117k7)=K-#XZ1PpT*m-}bX_aKZc*7i4Eh-YkB+Tzw7c1pK++b}o z-$0hUZkSF$-Is*X7e+VvB@;pN*E|1{zM9=`(a!O;DUktizW-U^A?|g*6?<7nj)wS^ zz!^(6AoEv0j&MNFS}g0g!wff}MB1BCwJKs{V?^dBb< z%#5aCNlhMdwVrO>Ar(&Rcx47Z9vJvtE&EYuF4l=wM8$0yXEJ5g`p`Io`rrDqE;m#p zH?53)UU+hcIWKX*d^e*TbSeG0&;hM_w8KM_vBE`$^#68o7+mY)U7M&zwBaGJX`9@oCB zT+d0NaAafRT4=OD5g7`;l!T>Sd_9=DrrY1|xfZ);&oye!Y&zwG96MU6cR2D1J>(Rt zBQExu*PSgI3+h`kMO0YoHBaBUdCU|w5=4F19N?>(9?W5@2H)(fU?)E^WT`9@1P+<| zU2Otij^qP*1G{tTF94(Wf#V8!sji^-w^6Q|uBoY-*pilQ3?UEllHQ##V8K*dAl0Mv!&Yg(?O5WzPjXTn#OyH(cz}weHvJHs-|M z-s^#U%Y&220aLzoR9?5SxL~8^#HrWTkFH|KYb_*{U7bH){K+AQOAW1eQ%q8Vl?UfN zFEKXGWc=-hRVCNCxFleaxq0cDmunY&`bk!CzH9gZ7+9$Dc8!?Of$1CQS>`u%INVO} z5ik9*Bockba8*!Y<*pZjg!SHR{9FZcaT<8IB5JHKsnBDpkfF5aNT*j4718;WE(}|( z5O&(fc&d+g=5I+}LGKx%+Atj}(scUDQ-VH$KS#hq1bv z5_4>I5@;BEvn8_hTD(Ow1T3@pU1Ea6)k{xOH?YvwsjyowP98(rki>S$297v@h?tb+ z9r>Zkv4rtI5vw~dl%)~$Kucj6Gdkl`#Z8fMX=sJ;PvJw7K+rdPnq5^vmR=wsFK;5f ziGas2Y2IJ!0=P_i#!8E=aL22e?|BXTUKDpq^?Dnu16imgXZN*hsjSS=7{+iPWOyH1 zP%tx%RwR6v`Ky29G8nfSEwA@w@c2@O6_`O596vSCQPC<}j7OM$Jc@;aV!l*%8ERUy z=5>>pFo?%obSrl5JggHY4>nBID7S|19qh`PtTR0r7O&a+_3|yY%$lN!cMzesun0wGh7iFI?S}~{&YfIs{rBf3? zBhipj=*NN&1Nc8NeyW)taQK=mUYfaD5u;i%kZiPt;jXC^PtB${IdlfX_riBTxe+Ouhp~+m{uLm! zDb(av%c#%A9ZPTMSsia>kn=ii{77xon@vsEe(>2N*FoBLeh0^LhKV{xKxdNXt7g)# zLuqBa2%-6yn5=C|zF@SEcktcP#d`#LF>8eiFGkdUau5dNGy6jQ>u zSzd24ct>@hw!K2iDanx%Na*)}YKqbpXDRD_tehrN)pR>LYQvRwo&=~6Z=E$p%TO3f zxtC*R3}Ic5UI#4uE8hVYLl8k`Z93Yj;1e#H<$DMM^HdagXA3aE?g(+FWPI5He6rZX zbMaeZ9kp`+18o_peCqY;8glDAnZL{^A#zbne;8Exo>bx`#NDh$lUK&pS!5|}C_)Yw zUdcQKC=rA+uQvQzxfw>Q8*z~!XUO6I&dmmR`FLT!3wYE(OV5rSzU=>{Kwc9Z26Sei zR*3HEN+FP$Vp2;-+}7(Jozt7o&Ek9cuZV@MU)u(>TfnOU;IjkzGX#0lY$&w+x>=GP zAegqLLKD4}s#b;oyg)uwZGU>8bo}?lR%+op_1?V(Q(pn3rK#_~YtXXn_DKM_klszN zmifdCV@Z9Nf15{^oE~M_D2j8updbvqKSPD-p6Bf<`(*pD`yN>m-Yj}PD#BzOsh{cp zdTy~}g(+JuLY)UbWz7hR$i>9t1uaWELO48fstal>6K1)D^y*x&PtkNZ9D2QiNa}@V zMyCaI*m+qI1IgJw`1xJon(}D!%&-iU`LT^U>=;ADE)w~Z#|}Tvrgg+VY`$hsp{1E~ zM|nNPZs$rtaB>70CAHGMN^)cGMZXwxd7*b@gVKGG)H;Ir0PBOV<312mYL|u{gJsrD zS2SCp$02m*;_}3x7%Gx=%FQ(d4F+d;c6%2R_-NFea5^qLBc+rqq@HQr5Bs`DPmI@` zC<0#GvAht9v`z<_yeeIpCWhZ3%T9hF#9dhky>-r?iIaYYgPK$t7r*t*Cx8y9q#7I3 z5(E6uE41wntbINO0A&)k8O|h1oS)szWdm-OIyErI3y(E^lda3xc+hqzr~YZcZ7>BP zL*h2#orf{N!7uDgB0(^|8W%OS_v|O_9RUj7QcE3uowGM|UW(Uccct8=RXl7bt}%D1 zRMY%YB9OcFQ=_J&qAl?yN&ZZb3f_R2CWB^PDE27W4>GNHd|^!`$`|YqOY9*2qD3ZG zG_Iss2*~X-{&=TChEuW`V^Yi3z9^`lDR_jN+Bs5)OWs0y%Z*q6(uT@@ryXz$d~P+? zTsF=1;l5^}N@Pnm&QdLwR+Afn5W`usKS6gbk9s#%<>gYPtoc**nyxPY` zC|%AHTjfbc!9y-ndX?bN<;#imL(_k+`@*okFRqkD8KTKlOZV-yCa<*4tGE^TOAVl!Pv7#WK+I`(4j zk4*j5<9Z@VqP62nCahE=D#09Cg&ssR|4{zC`iQI^UvhMj+b<8%evgwp3X-8`)Zh~X z!rZRVDecRGcD~5Oeo7<=PXw~ZpD$63H?dzfD}ITq$*s6qt;d3al9~XIV2sVz`~ewi z_UA!z$e$zxbjZdjej<(?#)qw})*0ZH=e@e~5xZ2EbPO1k#zeh-MvvEPI({>;AB(S}v2OmC$_x=(nr1qqGpQ-7;@DYXyPgo~_r&JF#|QOn zb=i_dYJjq2=gDYUQv|xGBf4K|c&DggV)J!CJInd)aGec2aV(8x$`bc1^LT1{TST$i z9&q+I4H=Xo%r$yL22%;@U-f}-~A8IL?IwyOrqW*UG zpI_2aSJz`1h>fW5dNmWb(=6UcNu;>x`>3=q@3~sr_KbnWSdH#9WUThpy#&6YqqfC! zW`pXoD4tcJ2ICA3GGhsBD2%Y9IAKwzN8GD4c+YMkV?!Gho5(~tNtV~SMkrO${9d6L ztQQofN0JAuZCME9J`v#qLfZ(QqJQVDLC$X-k}3E!Fgr>+OwkoV#z|5|uNIpQw~hNvz@J+!q1B2onGC}uW8EJ8}PC%vF>?^-gZ~6_p#${ zWT|=97dT*WPzQ}@h>rK`T8W0t^Zl9X@ufyb3o_k*pmLN#>jpHxF!0VB zO|k`eQ}t5?At9mBapww*mOLy{0)`-SJ2&Cg?WpyQ`?w-u!P*RVZUq>X1DH=E+djd29TOBojX?PZvLy~275hZ70RtQF+i(CJ*uE7Zj2NY z?Pvz`Wg4E1-CflKBIQSdlSn4__EptW6jqP9<189E{4Vwt5&05)&FFFfz=-Hry7_f6 z2}>k851r_%YT89>AkV`;2J*rgoc74rVNcUqnSF^Y#QcWFV#cEZykw$HoV7i2XX| z`R#k3i*RxI&1=jKN_PgJsr3g7EwW|hU);BNXHO=elJQ>v({ehm%G&ly#f_ZtT^$eV zi-f}o1K-v^!wZ8tB(+&l-4`_V#0hX6cdky{y~bYv=Hj8{))PC^ztnGckSM3R@@aG6 zG9Kq~_ao|^GyA=@X~(mqI%SwF1*C4j#-C#rvefBEm3EiQlC#IF z`w4_o)OKmPgaHI>YnT8(&khXgM-q{Yz8Q^2-To4Gf42|0_ABE5q-z}VMB1AF@V=Zt zU-4@ES&$@5@+$Ezj7HMlu6W|B_;IQ|`niT!;&^pQ&*uo|0?Czt>6*fFNI&YsAgAf1 z@Btc<)c1QTz~tAb@8op?EeU7y5_T(TG3G}&2jh5C*)r(vxZZ_YZk$%5epo?Gd*AKN zFJBd}XQf`V`IT(C(*CsO#}E^Lb-iX(A5VAP2$6MrvQpP3@5N%ujhCeO+f+55g5SUd zjMhUr;B=Pcc1HkM-PGA#yUg-??R}Ku!BZ5Eusw~xTGx2y7g)o^6v;&h2bbb=>s1PwS=|@teMT+&)<47~$2Posd#sVopC~Tfg&~!{+v+|kSzxZT zS8ecadMwPT5npFMWU3E`ox$(P+aNuNO>!V}vxBZz_x4#zPe#B^7@_1%mog}8L|JHZ z#(x9{_q*%MJ9d|FWBlp$ZouO(nHdl!fmITL4zGs5ldhqyDyEf%zk8_iWqMOu|2iPb zUCxl#6<*>clYzfG9QKT!pq)8XM)ka$bzm{LPQjhMEUxXzPbG~;H@+rkZ;bbeWI25FZL3;R#Lpf|cu zT;V%_y1$YEnD50F9#6WvckBi+ERK5cp`Dmi9Yph_a$n$llHMADTBDCIA}f;&7l1H& zue=*FI0jse=`wk`lKgrNQ^|rl|{W}Or$Of?tRw5^qBK( zv-=&keqJGvoh$uA8J=NCo!_fGE@Wq>@SPTyx-Yi=IL+3^Se8k8il#P0m%IBua|F)~ z|BBzVGO@@0RQ9~=^T#k{N;k-Fg9A~7!m}dLz56}sipnfzsRx$%f&xN^^|G5l$BpfD z9L%Hm_HSJyFdi0CCGO_Nx%CpN+4(-98W>rgcc6KvFZKqS$Sb5@4ug%~kxJ8o-0X6+ zCs6>b*Nv~I;@$!u59LsdxbLT*?J21W(-ycNz)@_3uAbX4<`=9fx>+MyB_nc+1y^z<@(6J@O1$|24yZhA}3$5dleHVyY#LFxnJ)V089~0AGi20r0H>#&B zNp4?JK(h?@#U~Y$8({jY`p38rXDl!GoFg@6D^H6GQpW$HX8r>%5WnKMozXN9v++hf zr<{190wZ130`Cwhb^V+g=TpsjK7n`7gTpt=$62dcE~&qH2?GS_{8>^{8nX~lARvPX z_%=UDqfoCIZFh?Asy@hd9268EZC!EQN%j4LB|Alwj#x9;6j*3o`3&-)pM0q<_VTle zu?tTB)JvvCYgf838+(1G7-Z!(P7HY(zFLk5RQ&@Y$UV<%j+~&UXVPmC#)s#f+mKN%=ci%fa zh(wm^+@3I|jv-MgjK7lUB$iYwWVj@tLnGV&>PnCP0u>@CcbN{2r=B)S$?LW%FJGPU zd5Vq~PxhMAO3pBlH;Df=4CRjzM96&=14}ffqd~G)?sB~z5hCg-vbf!r2e^{mX~T=j z!b>HwksvN+9yfg(a|oh*Rh)ooc9zg6G$A4isPvP;(c&{xRhP5^SCvazEkg?QOO+Qu z3S=@z*?0BD1FBm92b!BRWC4RE53$7}TImdIF-xX!c2l`EB9IZ9a2IZgLfNk#KubpJ zmGoBir(-KA{fTo$w^8Yp4D@k3NcFZeF&fJCC)W9ObMoJ;KLalGeXuU^z*{ ze;j{Lx5V|{QL?sRR_om)cp@5^U?^(qK*-`emKJV#S0s>-#>U)>4UcG7LcV$dc0OHO zvHD)ySI2s)=VXWnC<%!S{zLgeL~7rrSml)AV;RPdPXormBZ&f2{+L<+Holyh;phAS zml5=pQN~RQQe5%Iy_wZRoPAb(KgB_;F91XXg(wELDxeb8sJh$7K{8_FI!v#%P+fbR zOFEOs0IXx0O(xPR$_Zw8aWiozY|FO%VsXPmwvPoZP_OA(eT}c7(Ao-I+(K!`FZ?!G z=9C*YH7t1KnYjhC`1>Gwz*qfD$$$s26aE9%Ni47-_l0X^p0JM)_gorS`bH$BtIP&r z#Ue-T@An@N8jsWH+-met8-m?)=pVweKkbS`mh>bAy)gC;gBNGTrHr@&3SPVgPDTVY zzMAWh!@tQE6cj|DUE`>{4>w)gpjV9Vtd_{KejvMk7Cj4dL3@6zaZKy;M=Vh{{v9%K zKcgtV!L*ZjC+g8T>AW_Q7~^P&<8Qx%##S56>Sq8;T%KcOJ?uYWv+a+JiKR&QGo zq`}|o&Cg4VY8%6A3w8ZO#&74X5>50aB(k*pLcDgc@u)6DewKG?GXD#d{d|M*uqviy zit8^8`5YRFE(#1?jN(?tZEV}D!<37OLeWVZP1=9=Z*YDc&eZVmft4iFX_|T_CTP4h zfhj~gwod*5zwUFw6Lo}EKluRy9tg!9{IaqJTca6ul||F%o9LF(Z|F?u4cSpIvuqI^J<#f~>B+Za4|Cov>^fVBzq9GC*i-(0B zj(Jujsxv70MZVKAdyj{c%`yX9n-lOZpr|s?vt`tC8TAH-f|WOR8o&p89jo!Bark~I zwLH>_j%+Zv)Pzw7o?Vb)UiT9q-D~q(G=$(UMF*9nod3FlpFRrVcYQ1}WMUKiP%wJSPFs;ZK0@XFVi|-OC$V2!}Sg zn80jGIvYaZmO92$>8f9n52}4NXIn+be|gTX+-icC1E)Ud@mjv%c#b}P73_FX2d`YV z*ydY1Zxxg>K#p6|ok?G+(+`wDWhu-35$NcY!(*ib-~W;mc7N9K#?MoF3mo^P$qQ{$ zf~T(`mNkiVqD$vboV3iLOwV_b>eZUWp?iNmbhCHs?r_He_qkF8^0o4QlU+4EzqP9y z)1TwU+>ukSQvQ+hqRi!dg}cP^-dOpRVYzzS6K~mG+IR7i$WVsd;fQ!`T7P>N!Di}d zX*iyqxI4E;B!QMAWEJe^eP>Ymzv0)PaM#0lHko&W>jB%EV>J169X)Pw4=pKBE|@vt z_$|zStff}+{(is5^`%;9PSk&5lqQJrO!L3Nim7S(-)jn7BL5%@;r=I56+UV$m;L8P zrG}KHeace*iG3_FT#xrD#s5Y+VtK8G+JB-=QuY7q7Jheq%0RJ-IpEys^ba2Er`TSG zO1C5TRWYkKp|`S*H)0|;%5KW?x3GUb-}EZE^_^?rMSQwix8ANYqet)y{>q-)7cAXO zX;qJ5^O<2v^nvrTieJ`2iFok_qY)o%NyN;iq_H5EH4Cn4Q`U2Vp}A6bXogFQTaVNP zWvA@FD-!Ql)TfO6QAUNya-WXB@faIm)ShcE6J2ZLZr$i(*OXx=lp!Niqr{IFq_R8U za1Jaf$-2ljX67wn$NMn6D0MOU;Qh4gzqiJchVL?jA6TLZrqIj7-&s@g1L)RIGpl! zPij`7#K{wUg*U0`KKhR{a$uo}wgPz<y+Tg{Fxp1S82l5IfE_w3pk+qhF7VDO;HX%7iBk8Y=>i^x0e~u0&bDoC^GU0;` z4bRo7gA-C~!j=1VRaiECDEbTsk?Xaps;Z0-Nm0niE}+lPNL_ma?<#XTS8oyA=`y~) zLdVC)F(d-=&@~zDci1bC?%PSTs=nbb_ai6i=e9W`pWmsUq^olT;{HKLT_|b3hJ-sp z7N5!MoaY?wb4zI~t}T4-VUcvkD_^fiG?i05=aQN-jLO<9+@PGUx)}NffT?v4gbpQF zkT=2N*_4;5g5ZX}V-WYdT7|*L&6G(0Y?Fa*iw9{qaTj40PH0P6s6?LdSbJ=iUJqBS zh(VlLEP4r*JNZGz1J_7T(83h#SBuVp84@A|B`wCotFOBUU!CVAp0M=h@OTKIx#xxc z6ur2?_8D!l`wfui2oN`)r>1>(+S$Ab1kY_8<7lPK?%=AZhp4gfQvFyJzJ@ z=O^yFSL{fe<-dnR$TL2nn3#L%4>K$VT(LTK_aN=gR}fyN4%v#rm>8PBeUN~IcrHDZr2S9A8!d{fe6xfLd9mdt zs#`mU@#3QsrYV<5)GRUW;NqrZ5gdh=l*sf%*Sv#6eY%XIuXBX zA(_4cOoBN)KCEOG$G-by5f`%y6{k(*J*Q+VXGL^YEGRmZCEI=g~CR`!xQ= ztd2Y@@AY@kU+0$>h>RZRiGBd21>gJZnahc7bt;pmETxrYJ9LV#-unhm`-MAlA<#Fg zpC;B#uf24%2K3vDu;uO8Qy4bTG;oVt=f{m2|JZXdcgN&y(VYRyb10xXLk@Vn77~8Q zB91r_8h$=?aYi;RxgqPHGWO3|+ImjF?;)0v@ZhY7o5$d_Wq{y zti%$>t$^O%+yv!#NJUlENa8hP_iXJ-Aj^Zipbuv>WM{|P_o;T-a3c^e95+aYU3f8v z{X1<(yk*0i6C29KD?@Z;xIji`-!CGrZcGk>EO~}%>mnL6tY|A4)5|mQUHqYS8{l+G z+T8MD_{5&vKtet>?I6+)ZC~O>-_G!irARZR!1sQo!IYJz6`LN+3mgQ`gq3Y z_-Kmhx$y1bj~}uW80_7)6E>2SJ1Qy~yMpGErRGmQ5C9ypB-V4>-1QN&{BhH54d|=S z{!|PF$yf+WBwGH>A#BZ#KvA#(&-7|K6OFzRx}2Bc)B7iMC$ z<|O4D2s_fd$4bU@YT1B6Pgc$~{_nakMDlMW$_U!g70-*I(383c)$}|SV?C7ncbN{p z(fICavi03T4n7Lm2qTIh17CLd5O%wDUD{aExRN>P`K!p^71w1)$d>o^E$p6#+`lda z6Io%#75^zG3^BTS`;@`+nMle6{i#b^;~^Kjo%hG4`Xofzf?R;j?vL;T?A{j(>-WLW zP)IyE_}4Sp!Q>~6D?Wn|f;!4uOrKaXpaDjt`5?v)aA*8`p7ShM!VIv+qLP$-;sHBC?Nx3E z!D{08NmDqz^%1CS=}qG1=$l1Hj@_@69*guQ2}A(|UYg0MI?1?XF0bvw3W>Q5Nqaq! z4e-0)+{AK)0z->$q;&?zkx@V!t%dB{9*8Ig)(}Ua1W33q1<{+%P zBBT7kI3{58_eLY70~|IpxBPFkaGWS`?VY-bwwQzhpFgkG!hcFNL+frIQ@Vi=5(~$M z4){0VLm!is@YdTguGv&e(5~&)!6Ux$-uoHsLEDn(fvPqYQ7~rS zHamA2v0k$em(0!S%=4!m%SP4o=5V5ZC+UG_>_qO6$wuKTVmaMfHZ@=gm-`@n*s;17 zY-a2FVaa5lO$CG>h;n_KoX;(GhE(_L1kD@@onsoOcy@mW%k#mxY+yTavhfa_Z!Fz(Xuay={JdO ziP_lc%PU*p?*3Bl;Y^7R*nJGkiY{!MVxU;5d3L491lBteNmyT`l#9q#^gGFc1jZ$u z4Tj$v_~gx|?@Aq6cSo{bo3?-H|F@l#ZluOegBJK_4hTUpms}zQ_?@C^m&|{|baov^ zqDG^lpep9{KOji*xxY>qeaXc)4h*Hs^$A`7lRus-5{1adrMxmr*O%n1ktESvxEgZR zxCgnP3hZCYnx(gCx{nt9Zw-wSdJrG@0(AZU0}n{%t27y*`f=nRb?T4AJnN+8bhDMF zPE^sxHNeWwq~>Pjpr8-3iV+&{v>tA5FJs6CnPb5E`lKR-beEfn77TJ+aeoO^G*^sn zK(|-aRpHgl4`$5+D>XZ$Z++8<>l+)+Zkp5F=xhA?{0^EsCqUefXGHzvJ5qo!>1533{>wkfC z5_FT4y(V<;2ouy)%Uhc+$Y(^*6!So0SNLeB;cenB(gV+&LAtcI8ddQ&g`{-I&i5o1 zb4tRh4IJEkQ$#Z5#=NkwSxUQHOz6`SIRCV$qbegQiC0`E{)_CAyr~rxnez_R_cuFo zzPt$vsun1Fq@s8U&B0Vok(BGBN^tV#BGHL~4~Neu#5X@ldEHt!UUmH~X(tP;fcj_c zLK_JtugFdagwyQOp`@%V!$Sf?f(mwACOiSD{NcmhO+5(RozLQE_r}Bo2OFCMtLS4> z`mFqtiaFOCQlA`90o}i#KE7sO5vT73XXm)eE^G5|KAX)$BSU;oopgn)%d7Aocf)jQ zTTOte-HVLZ@>K(9=*4BVSV~{{#a@kD3IEeIUE7N-zG+vS0yq2ngS)!{McqBWhimsF zQ5#k&74O&UY(@LS2C=cQUOsi*xJxgl@H%VW3wqbBM) z>By3kRg|omV`5R3SJ3V;h%{`~Wvwu6=|~$=O?$?07VhA$b#m0HPNu8QU?Ymf(4Ot$ zPEjaC9I9`UKMvDew?@e6NO)zmJ-mB9#dzS@Hr7*?^017uHPo?|>~!l(JTp!aJ2EsX zsMorvBp&%Glx{McBi-t}0c0YzShvu&l>x!)5SBAvL}d9r8`>Z1Rz2L!r)F`-R>CKCi>6P3Z9Q+e7u; z;Uq{bbA+fdAiY3YK;*RL^wr`8K{986;U(#Q7ADZsjkEc6J%#&{Fa4ny%0n-b(%M$7 z^YPDZ!5;v9HbYlXHYsCjH>aGRz8)_ zozA>DYItg~vPg<0d%u#WvRIl}38dt|y)a35?2kDF2n^(J$^Oq*?~6*~df+2f^^1GI zW6AAwhcbC=b-R2}Pn*vV73JW%l&OkeCtmH(aY;6sgU8Exnd<|uKWJLH3}h=uNCCwh z*4c#JbZshFXkdSplNwIzM&zhq4qB{g*=Tkmq&QY2v<<~$JZQIh6yufxXSR%#B5Zka z-8HqzhJ&C@83liuM=2@IM*W$JlmBV>_dDNFd!f>0^kPeMe>3A>C)b2#=_^VLo2!Fj zfVSQ@j)8}5Iy%nv+M3Pcegah@-1GCZi&W_VwN)k@QN!2liut|EU%TW2-|5hS4Ox}J z2D+Z?(e-HnZb8(=O;&xPA2t_9Ac5_nKemM<`2Md2S!_2dF`C`d*4Z9{#0t8Q(f&^F zQf<9>r*C=N4c^rx*KiUtwogRHuhs(lRRuW64S_Tt5lo)Z{YK8#kH6gfI(=3_NU+iu zz$~lDs7&tA>vll(MHY1CDy^Y^Psyn_J4_o)9s?1WV8OS*<5%LyP8o>I+R|w6yjua@ zE4paM&5wieOwgG?1Hs9PcyGpTC1CUK00R)hWqlPBL&?f4xzb)y*Pb2r1plKv%f{gp zw0#;mGb^nYfJU>gH9y}BcDw1brBkCE41J;)`-9=(PpXtHSRYvpHPGc;&1wf5o(QqX z6IP_4NO|fyWeQ($pB^)d4ECC#Q0?{^-D};stuzr#(2h%YaRS#CS7ZZ>0K6Aa}h=DQv!;B2u5Ke!qwu+2UBX7v&U(37#;?GgLTWED=E< z*Q)K2Eay!)_&BPpFIA4EC581#VGct7a_s&l*pJ&kyP$i2+qWz%jM(TFM|w_->)r&^ zHDqCTc^9}9$Q>xL|FZ~81IvkfaPQ~1TvUq+hzv~HB^ldJy z;T2a(nKC~`vKH9hQjL!9xOc-_!qFPKQ{l+{$7gu4jeUeB2oaW(3?l_7KN@Y=pgArN zpTLT&#XG0@_SI)e<^MG37dpZ(XtM?NQAJ+Q%&B`xMs&55B6fz^)ZxW-JuoUfq?@|( z{cK8IPezafXvsE-{7i%p-M`+23pcezCeVwnx_aI`7IQ88zf3=9CVMi6?tLKcr$qy4 zm}?YmETQVbht{6r_Ob3?Nek{eSdMs+o|3&$T$0%JnsUw>cn3)!#JLtu_eL z)&;Pg7dv&LdJx?tuQaozo;U=1Aw^vqWPw(fHV?lw;EAfS?&tPq@sbxv?S|Lrpa=*( z)Vdn+l7V+=CQ$`lmaYdJRT7-~bx)eR`h>>r6O0^t{~Z5eyunb=$@$`T;wJuXQ@^*L zE@y*dk|B=ap=puqA{bntE%JZ(dZ)O^8#iwFUR9fI+mnsm>^8eLOt#%-+umH8?b?jV zwkLD4-`W53c@LhG=V(sn=j+Rhf_mbocTna(7LXauM6deaJJ>Sf8qL*Gc*qZ<)jF&v zY{a@(!?>tK$23_NrqF;5RHPEs)gP1HldNITGiG@1TwJjq?B*7iojy3-7s{KGD!x){ zGn&)7%9XR_9311&>=WyS&1CX+d+!K3{TvdVKA2Ycc}GIdWUz1=G4@Upuy~KryIMBA zOS?K?1)@)fthcvR3eQzJ+Jb?M~C_aw3}D6{*P{p=@8KhpYy$dQwJW zGnr2J4y<`>o{b^T&7`LeO&gaL60LwXp2U1F6G@=`W5H`L>-?IyHpSGPzY<2VpMo~o zqMTY%I+c8RtsiKjOd(mpx^Ay7y3G%cAq@+TeBBv!QKEYqR5e@0IxXr;OlV+-^Qh_m z&&M@?f@S~r>V#VU#3hMai>8L%`0%eiOEB@V5Ul zX%}-_+fjvWv7iw)_ol}uS!}?5al7we?%Nx;Eg{CQ`XPz(iP$YTxA^#8l4u3*bg6E! zB6dls>LJee>A?Za4-R zgu`pvpBYhywvgeNr9{589kVQwgGP;d6p&yxQG02|4ZHj} zsleDBfq_?7T-%2ZzrV_v%=Dw?6Aln+*9K#VQze;_P*8Qp6NeHPT$Z;N2h`Q!lTmtM z3KwlUPMf^eFtm7xA%&`+QByIbzT`71#}+CtAb(&lPWajMvv#!85Lj5qk&J)%}8}Fs2#Kn83B|(_ILkBUih{#5Z5{1mDXi$oj ze`F2x+`B=njQaR~m zKm8B=Wsw}?wnzSQL=>W= zLK<4!`@7GAPM9cW9tX&=wQYeNWHUAS4_p!(r>806>+l8t9hY3BFI*O1L@bOyV-Qif zUWS(Wj|fhNl&%=6Zc>(sZi_`p!Z4$av)C1FKj_5Q`&3>L!}k1iYV^sUg)) zmyo9d*!`mw?jGiTdwa7(B%Dr`SC>2>;T9V+)&Ds_AV^P#Kpxv|Cy|`R$+j6Gxf%!J z(eM?B#b?4-(7SecblL;({W#r|({eCiw7>tum!}9bEm0RsK98d8&j@6= zB>0m{BMvRAPxc656y$7K-vEK+w3V(Dc@z@tzP+00qQB{BLVG`6MQN^IeT_6e4a@5v z>_^`=Rt+kH5{ujl)n})*=Dq=*j9qvWSa9b#>sv&2Quid#&Z! zV&wN_SO@tvATCzmI`6ce z3#y~>1$FutMS~RfYU~f=c7?G%4R8bTlANe!Ic@9TKNU_imOXk?{ovj^ui$x3g(?l1lGq)c~_A4GQrfkETeW8!VC z@u1h`%x2Y(e4XB~CPdihg@eW$ zBE9V1{T^5Ul2j{ZV70fzPvjY>yHmJ%==Z$<>;A5qFd{SA`1WS>K_Iyr9(bCmkR;5T zQn@Kd4l3c`4y&U>0m|(Q_o&4n$>6E4z0Qg-4vl0x(F|?9oj`US%jfZ)hHkS(Cnf~% z$8IiMD*h+CkrYfsbm9)LI%w0$u1@ZcXYwR?i)ig}R!@gyrgHlW*~)19bjE#J5r1=; zkN0vXs`hcuii0Lz>=%8$BO;R4%cX?9ypq(`&1E`FcfDHew8nk9JzF22GqXOJ-(4TW z#V^(^fNb_AFDZBdkmer=moL#uRsz2w+znVy`By^MekKyGwWf^2D)TsQ@gyr4?2vzC zLEbAEX7RG)2e%F_H(Gr0N|;@07mn6{XUTsNoP_75n_(onO){mf_jsj8&XzO0-xgUb zF#dYSk)7E?h48CS!a##P8HyeBu9%DT6T`1@J}M^R=xBVhkZh{+TI9MT<{gjU<#m1x zLdQ8=zVQF|oZx9Kg0AWz)&KJ|b%_+cDZAx7MEnr@(NG2sk|Ti#dG>Y}D3YufvAd~pOjdX2*p~1rOO9K#$ux_QrxfQW82R87 ztQJOn*UZcEW<{-&DlRVoKl_Qew{9hq^67G6=YWKr20s(kkd{~e5~sOAzfM0)Xjrq_ z5(vnsd$fgm0KrG#+Kx3^u(NFr_d?%ScgUSVv0!#%tI^cmX21~Y-_BUtjwp$cqlqW( zw81>r?U}9a0R5R%wn$lVvUcbJ``c)wKDOb9lX#O%pCmN6GQb-m6o1O6r)2*wL3C^pCdItc`pMD{p-ZIZ4}d zjYxf~i#iR_R~prOEOU!E$Uj8nPwfOnf>LTBec-G=HDTU~Og>Cm4>z1mRFQR3kl7LwWE3@({Nut8Tj_- zxvdS}pLd1k3U_Ag5NlbWRMCQQqLc4J93hISQ`YG{7X}``y1*yWb~r{qmSm?FR&{&3 zuqGkTu(n%wUcSRbD8hX?Gt5eKAOh^(n(~}=l2`vt0eAjppZgEKPtO{fbU^_U-syPj zE_*hfF*pX#2(jz$2)^&_u}jpS4bS`<-6>2+yJLB_~6WjB)>%|KBag)_LH}?~8td>(DX5_{Li3^#* zF)jJx;rG3p6Ze<0Ts8)BxGQVnX+v!MyK{kG>K(rCxm+o_d^3Vsk_*od*PQI803H;3)i;?abfIi4}T~|wq zL^81V#R+e{B{Z;ABszjXxnAwx6uVgfg=kUbk@I3dcg9~H%yyTb2kks|6#cee&r0ZQ zPSI{H0i5ZfOOSnKSMBP9UHQzV4&bNi@r%7z9CgQz-yuyC$b8U%#;KB}f>PeHd9_`B zrB0Z*89+^I;08u+D`v=dpqe-<-0U1V$7@Hlqsk|_F_Rnexazk*8m~Wh{+d*z6EPLj zmTV^M9h;it6NJV|;BE{iTOsruu={egI6W^RZ-MrR6dg3yoe*!l?=+rd&2`FDvPw>` zW+wQY+BG!&5o4F+DGljF2>6O|O*=8xM@?^=ofjEs_YzE$9Iks?&#m?RX!UYNb3M(G zGP7bBkMvEmEpvodX{hwscbp`rI~L?!&I5TgRmT~EJgmw-{)F07jy8r$PVN$YjR*)_ z-B>NR`#PF;ko0{{kp~~{?M=oVXI9LvUh0y)-&XqM2+$SArqH7B*^`2P0GyFsdiFkW zXn(Tx?FoYQ$WH_-zg1)9cXcL9WQUypXZO+(O>Rdd;{1pfzoigcB(GK1PY05)LXd|M zJTvqUN`Fr6AWJHxWI9_Xl4%Zc-Z!@@lBXHV?}M9NuKoJ%TnyK1RO##t(o-z_foT{i z^4snDFMu|V6i^S>ES%4#5Pho}5lgK13r7fMyF>*}R*#gGydov0$v5=>OykIEOM0J8 z+zRwACgv_);umw?h&I#l<=(oAI$kC`@6Hsd8Onn`6$vqV*bC(?2zj<~A{sa{VQ4dy zS)CTn=R3H7?wXadPBJikBS+^jF~83YqxFA&`dLk1cKMThaY~`u#Nwp>rK||&0Yr_47@npPmTLcQ^3YLJj zzBRGqhAAe=by_c5TE7)qMP!^VBqUbKK?Xx^c2!U=$zY6QK0?mhm)&1$jE8>`t8fr* zH->Ag$Aaa@-MUl>H*8B`zQ!RT8I1nZj#8K+FwxA>!nS;C>kpXm*%_nq!*+k@(+-Jn zAn)v}`NY~FEQ#&U*E01EA0O!qFQnN3$H%P!jR$u-BK1&$J~RCZEChh@%oJ&A4FM`5 zy$tcYsONCqoK+9?{hQj|OM(Qp=L+K?hsdFH9u;z{Jxiz062I3`e324esGu|FD(fMV z3`132OAX`IOm~dFXR=fJ=DKt9PKI@!9DYJEy2j$8ut|IkjsctIQ-x-cY&4d#YbVc_m)aAJ@8!r8 z{h1v;BskyBxVq{eKrvjHcVh?qiFgg2Ej`0DJYF@wFwf6J8nZQ(TfnZ1pf^!tA_s@G zw}wB3UoS4zew3Oci@uele&^= zhEDro@+aD7@H$Q$Q;?DxxXzgfh36kUu!B6z=0|2aA_y zKGXVeoy$;}1>M2k29c`AxZ#eJo%YPVBl#_*1(sS8xUk-55>J2vBOLzj$LCTBv)@!! z7$?m*)7#v^tA6%OyT-k6NGLSaWXRny91AwQ(eG*HczEj)E(&a3_k}<7ReH-XLYL|; zFjIoWz0K}0cLFSVI;^;l@Rl(#!46LkN_V-#l#4#}!tJhc zW@}T+ktnWja9Xb?N(ZxtZA%;Cf}6CeP9IVz5DH*ATN9J8a+RddP_@3$!S zlZbvXU9W_oyG5fgTyfpPkn=VQ>lIJcq(?>}ZHF{E;Ws8(bREsxJ$7qA9kelwly6G3 zf0#N#U(jn)>x)y@WQ98gp9);pxtd9qkciCa*O_{@rLI>V-^F#1;H>d<8SkHbNVMd_ z?QsPZcEw}u{J4*JrH{{izMpgOG@$2H=f%L3%ejim;RyOcW{T*l)N8xrC*h5)OS8#h@I~IB#J`-rO86$8=fzz;fQIa&+Is6seP(Y^>)> zj*uUnM3RWtf>)K>W$OlsLckTy*tp}UbQHXFBm%W3z{GY$h1Z^o{7{{ps~lkLMLyrn>r@;i?oXkgmykyU(YVJdG9!uN*S1nm&t{WMFPKGvQ4cji#oW{2S+1EU8!jC zP!nbsL`J+Qd&>DfMBWGGhJNobHVMBdJamW22%_tUX<3k)JGyC5FI3S~l>w$|(UsQ^ zQSB6CfS;8;g`v<|HvYD|P2=>D0&D*9^dAQv87#rP{hNPvv64}V{Ju}XE0>(9-{%BO zeHP&F1DsqL1ycuQS6n6)DF&t2>4ptsdSt(l&7MY{>qYjq_2O$17y5N1CEWFPvLron z*k_C3sZgEjfl3jZ(1xE;bJ|jL&<t-y544SjzzWpu(3S5lGu{4dw2&$4 z(RvoO(OPGgt%+dFEI!~`5u($7>D`~evTYdYYz6gC3}~9C1=;@P6oPuNgQ7HS(*R z>iYV$(lX?iZNB?`YxN}+xXQ)+Jp;hw#xwH}I^+ZTbozSXr8sT~e=}%P<8srOc#3~R z)-5Ou49j(%@_YYeb&C{~*K(%F-fGy%f@W%fJx*_6`t7qH>lv_ZgpK;z>PNcLXkY71 z641P+{ey6lbLu0neRhJ`r$^dr30AdU;?s#>7M#atFgbUNx6fnxkN+Q8{a-d(9E|0G zQtqEDEy&Aff1L4rk(AnaUa!0tlPLmTyd%z&` zs_>Zk)5IeKS2pP_&J$(hVN(=cls+J z#d_eZ1eeXqSZ%&3Bl2PzZ)IcP$`0b)`O;|dxXzM?K%{HAKHf>`kc^K7Oz8a?>Y@$s zy_OxbnV0pra7a7LX5e(SHd>y5yZ+e(S&d0BqV3{N(GK%1s+k)LE$_*OLt zzv1wv)cg>x_)>2kdn98|n!O7^rGh&4tmz59M$M{QVQzcnZVZ!K>2xL~7Ctg?n zq2D6NgKtFZ4W>Ne_|OtS<8n_titp0$D2aM(m-6ZC$@qUqBo38PpvUwk6-(M@SN(HJ92ELsd|FXdmxofH3hSxl%A8I3-j@H}>W0*$AF-zH(BC@1c%G(A$UYSH&|l_3<|Rq>SZiKsMTG z-jF6BaKyXfYpUK|pD(EmbXeoYX{r`J;I|mUudDQ!;)Y+#HG;z7B@=OffBhwJxuw zXSCC$+lQnC2xgX>4^T^Fj%&h_+UQRR^^Q8@~*dS~uoJW(_9M ze$tbFBwTX;6(_z)Q7f3-NMg6A>VhDM58H_Z+{;>QzZn&X9?9!XX7myDM-v59OML>iVkSq1o{B6+aJV)kCMJA0gl2xJ zsEe7}0+f{e-CL~=E$j;U_#?B{bYqHCF$5kR_Z7m1K=P4|_3?GR2lBTTmFV2jU@ z)#(yp50_Kvl}XtXziICghuAahV~GX|r76PioHTU)r3Bun>U>p$*B>cP4xs`eRAE4f z!fbX#;tJfP^}Q@PXf?|xNp3gTHS2!I0NC(}OS^mxE>YI(?o3g-7y5gTV=&$u%niBp z(a00_&N{7=$f(SBOp=wOO)ebkd848z+*DvtFF?7%*ss~j0Hx!Ce+#()$`zq2B1%vk zXM3U4)&i_1PeW*fpw&{_?te52Ib_$Wd}U^AbmPmT8x*b1HzPfesu{9(%TsJir`THX zYd0j6CTGViwjydZ#1|55K;3O)u9+0Y=rhepV7cJ zM&BF*cAfbMBXcfi;8ovHVj4$Q{OmrPn+akc&gKxn&y%xOUt})aOQrlhGBTmQj=!lg zp+QuV$D5j@y(erTU;G5M2_J#T1-zFdFfol$rh2FCFq<*GvR4RCvmTALmnAe(d&3x! z$;Z;(PNor;f?-M6gbg1p@c7Q)=FFl{#CEDA^Z>P?}e|fodb)8;hSj=*w$EuIhsp`(}O|ohl zu~b>ercT5IC@RXq2sYg*D1CREI>b{nv40nt^!!xZ#btR?fm;y5?z^E|mBt+k0vL?l zlXzusZn6^DbYzH-CdckS6|5%yRR>A231tw_@eDeU({Yyk#YD6@VM)*thgQal*LE1qrYyJTD)xC zcZ2V{J;JQWkG1ZeU}93{ri-q~9p`|$_p=7qtDAzo)zz`aiwqa_WYyYXzDVEu%p7Ms zQLfqzg!|W>(5KBVz;FJOZzbtaNhptX@%~|| zYHTQ(ftba$VyRGXV+Jqo!Mms4kUx!k#kDl$9*V|FnUX#|PN>zEoK)vH%7DPr<^W)l z-VKk2r(#=+*7sr$el(*Uo}^Z3irK@QscNXX1)S0cTfWO`e)L_SXdCxSGi z7W5f&SjSozvE_Z?OJa)>^nXZw-^WuR;rp)jz*CHPj}3zQ;TSrBot z_=?4Jrkb-h(I!t*b`qa3Nu{aAOsrsrBA5-%;>(iowMFI?e@x=$fr~|^7zTZ}vcdDf zOE<|KA#Wy4&8jo??xP65e099`+&kiq%7NL(2>+f&B)xQ!pk9fuvb@P@u$#p)bU3DQUYg;O$$ zB{L!8b*1veFjPk88sT*H-g;T+)w-S-fF1%`Wc{$Mcr9Q3eqH;Jg&IhkX`P2X$*&iZXN7@PBNq4IjQHT-ls_k1}HDrrveZwC{ zUv1`ddYp!9?dupvo$;dBkez?vz1F?{HsbIZX3rRuSm}S_Jz4wd;1*Z zYhm){LssF0T$tUpsel|pZ2i9o-i`>A144^yE~syEvOhav-1JRgFHw<}=9P9lwutz% zQfnc2dFL=h+duY5j~YGu-AxkVtP`0dKY`u+%y}U-vCau&Is1dy&_mw)J1&U2D6X

    <&~w_1V z+IIG0F(fA$hap<>DrJ_!I%>_SgjJCeN)l-tOkHAub{bpC7M2xM2aa|mo-Vf~bPmn% z*t2|!^!tqVMriIonZ!OvH#)Z&_4U2RW%kib^rFN*{(ylF|#{E30p#(-cb__q}@;pEz5 zq^9@y{8%n4q0a!Ty59r!WVL)Th`B%7zPe)nqQ#Q!uu0$qQ&mp0z-)Rllsi4+_q zR?wN8WW(@azKf=i+Dspb*8T{MMLY>mQ^Nel@Ew*>(5ImR42L5}bRFF*K2@fzS~K%g zu~ec43eJJEe}eufdN`SpAqT3%NwSL;j~Twyz;y)UPVp46;P~?BErK4}Oxy3CnLZ`F zF<>ykoQv!3*1dkj&qk9qMr*Zz)$|jC+aR*L+SsPQ`j1{;3TH=ofPFg^5fsr_l0BB# z&ZE6X4c~;Q(F7T(+3Q?7vMnp7yk^N{KW3$++QcH!(AB*^j_B^g@-wXJuYQj^howfO zwSwFZ_0U~3Z=!_1{EBZfFyjy*<@Z{pU1<#H?s$L!rTUEJ%yK&4hLamNDEV4{(pfy) zHy5SUU~G%{f-z?8bB5KF^(RkK!SA1@wbIE=XwV20<$&6 z9EWclG_6JiYT}VV%}RLg!L%olc$I<^k&1pY3dST&Z_ac4OdL4C8mFUnf%~3NZ^(qQ z@+cE|W#i#ZW!A$fXA@ynF~AucVL!&W!j89E_>JD8QhgM~r{60#cMz4`e_2Cru)8F# zAakMK)BsKW3XyjC|D;}_m)?F)FhW>cmOwIw#+a}xjVf^m?(&w3lrblsHAmB`e5t)0 zwOcC@Z{I3^=a5F=YHrs1WyF!|Vx(Y|B4~?67%_S|OZS!jUhol{K%=5y)a^5oWDYnQ zn7QnANjoAg->`}lWO=;Q`euVKT5YN;#mFh)YIR)fV)40S!awZi+hx#R9!(!1decW7cS^5(E;-VJ>-n`n3g$8XfkV!+z{ z$~Z=Y=L-J5PuV3Z`l9%wi$vM|LSP)$dTBJ*{GrdgzF7hQ;;JbZSTL zejKkH2}WRdRmR@gk*e!6yYH2^DN-z%kvZ)x!3K>ybkR0NuRS;3wCkROi3Tw++mP{P z8+{N47F}>O_LN&c&-U;(Djd=;5BJu!f~Y{9syv4_WFu@KmyimGcR)@sc*k5%I+22N z?W@4Z*Yd_aT=#~PCmfB^s#UF64L+}HPtVy3uNBNz%f;Sdx8-xH${4*I{x5)Ho!0$b z9$$j-_rak)et@a{?G7|kiXUudhb0dLVlLw2@&XBk_{dPZ&nf8=wW%3k-%;toWeG{`t~rk3;#+#M4p*JUnX>Qi)nUMUNAik3 zfA;u%7Eea(MH2txxa{P0W@czYt23S?{fb!sM6y`xeoSLiRKO^{<@zhGpx2+$tZEbM zVX`I?o58Z_>D8=>QEuV9UXI`k!TJbJ5}~14ZkR;RivO}v8S#%bABTo`cU>q@1n+qX zHhh9e#*j*AOW?e^Lz497j!N3JUJlG2UaN6-Q@aCit(0kzTa)ioeEv$3ync92!FfED z!VcxG#1i4n((%0_loftq=x%i)x2=4v@HE4in7*%dKJ(P~*uy8=`xr*Vn@||U@=@T% zKvs!H$*72P3k_GsxfI3If)u&L{e$_cjs@o9G}d8Y_d`wG`kL!YxZKTeMejITrdEh? zd1JanU`|sFDfwD|q&RbA{#OcWX<11(SjRGqqp|4)nM?)m!vQhWs(NFLH;eK3pdqcp z(<9zh__H~4))p@`RD7AzYJ!yyRMfk3KV*X+9;RX4cg>Q>f5b|V$gQyu5xH>Ah2hk3 zk$*{d_VIXM26Np_jk}bUGM(#OQ>;S6Md2m1bU-U= zo&e<5u!@nzToAUwII5CEs3a9CGyQiJ6(nHgdV`BwVlxohR^5;^?=>;CWL?lc88T1Z zpGp2LxEs>#+e7{eZP`mzIC4PFIugfV&v?8}ygaQn>I(&RIZ>dcmnAv#1oKR>nQkP@ z;qnF@e)9|HH41ZbRnlCiFgl7TxKTPdq`u$tjUnRw?yCMloW`xz5+se!@3{myf`?>Q zHsItG*RlIA?!63mv&b%~O{_FnN@87g;$Ni_KJxq$VfIDLfe|+@MqJ#~`5$wJFi!wj);b|NAn4!1;ZP8YGh{jnrZU+&jE*i)kwD1|I25&W)jyM4Ea10qweAa&Vu4O+Db zhKJ6U(^fY-ag`bdV(JB+O3NdErt{!9=~g^zI5cXmE5TU{QQI3NFL4*l>C(=>K4eS8 z2q(r27!>6%8Yf_Na3qFlYwqp`rsgGfEl3<^iUCiyLzW8*3M!HmE`D?bHzn}P4*TEN z)oF-9zkxj`eU^e6ksv*Urxh7##mT;Xf}xwo$h0g}ag#Cos@6BYkE=nylRfnV1tpEmLk4oXxNgF(|0G5!WSz zaq9?5LyjdJ4C3W>yzseq*o-~j-8K;Dxy1;8iy#`gMR|*QzR;I)e`dX_)EXVMrV%~R z2PwW^er}d`+uf2>ti4s`o#&Kyc6Od-fNYbXzn{bq8XS?xB&8w);#0w3B6E3|8=GJg z%uqHXO&*wj*l$h*fZzhKH0 zyAdw>sefZlP!n-G>g;;Moa@xWw)D?A)Q=r7gJOUF7t1w1W#)ho50F%r-o%_gM9s|z zJy{|Qk4k~3Qfy8~P6pFBqWP=Zqs)Z?0RU5i%?+Xm|UsFe6URTC~c|=>_`B z8R`#@D@r=*0=BlV)41pps(NR$1k&ZjONg>d#nzeRO^T^@xsJJtLn7@LEBpC&BqSuB zcPz>&cTI@F@}B6X@_*Z3a3x1|>~FZ@9CrR&O|<$-%&M8}IR5$6 z@#Qm*LVQZbXjy|dJ*b{1-aC#-l0GcQgGoa^TZB|{xq~X5oOj{RC88uU(e^iW!I&1% z<3-9$lPl7`0A z+(JmZ0qRxHxyhN{$dgLtO%vAa@g;C&PwKAo2Ie`^b2?ZIjes^Owxzn7rj8Om-tK&F zFJiJ39-9QinBo$G_;8Ca7&32wAL_bQGv9b~(0j!Uwk-Wy7 zgf!MYjhHQ|oA+T7DmecR4U2!7DmA;{XE2;VNyD-eGehoK)RkB%Gf~JEl2`D>=5HqK zc|E=e?;sSFA}u7+7uEibrA33{Bv6fQvqy_YDfhPfXf zqiR*|BRZwb34KH;iO4z&gN3NJ8{EH8u{z$M=J$0>!F^zicJX9i7?dl@tf}pbn5Fm? zWLO{tcl~!mcOrex`q-1GC0xe(t`O}Z%)7=}RV6M*UaJ}JeV8^RIL*A2xd)XsU2{`N zW>#?*jzlpimq0?2VIJ(#;7kCAm+~#HC_q$F@yBX06^Acv7qRx5cK{snWsl0Lq^u1d z?~%uxI}&iZpZ0jPZVD!rd~Na*w-WY>RV3}`BvthvSvo*`B6dW?vWf*(1%OAiTqx?- zU(%QLGiT_+o&=3RUI)sn52o=j3RLe_!7YE99#C=drIRWSi4?#TA_cQETJZyAmar5d zC_NgB@>;fB13=D(lg`U1+)>&Kb?x;~7MVhn8|5s=q?bRYEAnJPL17Ko!Ittov*?{= z6FlGR7g=^hI#|O|Fe*2`DXP$6k>{Anw2NhNy3@#+oG)osAbE&nyh>r4ACqdV=7oZRs3d-`hhs4y0#`UEHy(vX&^~;r6Uxb1RR?A zy)by> zNGKrYQjDxZo<;nRx!n%`1|5ar`~Rb{Z`vKyYgGJ8XBy~Zy8i5*_rJ3G)Pn7LW-z6; zL>D+$gkktQjbX5=lQ&s*G6Uf|C85lFp;79(HG~hZ>ZLLYh+dU+rQC~w*F^YNsK&hl zQ8K?pr9au8W{uvL|4dUngkd-JY3N!yDHtfO`6&{cAFNC%V-lRrR`&gYV&^!bqy@08 zu*|*y7W>|oxZd>1fh4N#TjizpxxsNnyA|2W2frfRS!kGcp)~O$u%`1yF$3P~st=3A zVf^=B;0sV2X%F-_fu)yXKrTfQ2v7y*6xD)s^BK$Yd6Flg`9-{9quWNwl&|R}2Y24D z%GzNB@t|YcBbsXs{BVpSYdR0+8LhRZ4!hQ|=o`_tMDXD$ao zwmoU+mn>NTbW1^RHiJCukI@jsZeihMHsRrkWXUQPSO_$i3eNQR?*8+yovL~cDg!~( zDjnnFptsbHzo^#zSuQ3eoo15DN+Ex1S5}30Fu#_^GK`+ro${6OPafq1IyJMGhIbck2stwBP`9vN zl6^1!a}20@%(kBW&}X^2tDF&xaQL=Uo>P+<9nozsEOO6&_+Nz)Z4MCDh<%!J>yokPu{Mdcv2c2{QW}cJ<=+03_virRD?QX#l`dg z@3JgCF_?=!Ui;xrBcR4iuoxHT31&B-X6PgDxpcVG`(v=kk@~a9%CN0Ua%6}^d0}n& zYTKsN5uae{o0%Ib+VBfr7WaFFb!(gXd#wOUmwE|5PR>8pk{eBHC?zE&Athz-XtpG| z`+bpulQa3{#T&?0M)>AT_CNpMoQZa5a>hTie{*IwzZ?C~xhTzWwQWy6t5L#p|C=A_ zQ1;P{<74dG=z>K_Nu~eVF03@ba*%n5{kC1uAPIh%^hJG#+Pn5%In6Wd=Eah)0$Hm~ z5BVJ+B}~YbFo2Ew7rrl|2mV$G7-5X6_H>cb!V=0@`Tyi#whc|DV(GXbTz{$tx@S znmAGzwU`+C;?ot{p%4Q&Jv}Y#=*Vho<12b=iz@|X>ze-~cAj#yH~h|Vyq!CU_%ch& zt0_-zKHOah%70J(lDlLdAUNsdue06UGcDS4WTK$v960hx7==kse%^#gSgcVfgY4?V z;iTJT>ZQg(!?d!B$bLHFOr{)SI3&1Bfercm_YAg}x!8X>61-*k?-}okd%wKQ+$g+K zgvXE1V5Q3&X4LegAS*?uHi$+qEn*!LB~ez+xSp0$!iln;(ijrL!rpRifarrKE{f)> z8I{^Mz}ju%{m(J$g#6dq6q?*fSi>Xfdy=HUH#m|-n8`LO5}1kkb$mM95WRd zmjJCs_9+rmOcP6LMt#MHP1ngi0ORDC$y;LB_I&LZ3)zuC5u9J{xPI8JptCHh=SZ}n znPCZ~Lft=zZqJ%6*pG}DZN}DG^utKykN3sI#N6856%`Zvys@$I`AfJbD~IX>mb-o^ zrknE8Ewr6}H(pRs@axyFj|Q_MmhffWZ?j+ps1%k7zYy2=+ z44Xd;Z=%X%Dp#)&EchBZ61nvsz`Mg6E<&D^jui&w$-IKLxN%WJMILK@-lgH5cRGEY zl|XFmR8JKPM@3&v)W(NhP~np)HyH~*{fJOgWVFtGUA6MiR6pv=+S*lQ6t#ntfUhYU zNoe#$6O3i~C|&uVqOQE0K_S7njq{xzhZ!vm1r6Ti~g&-A~<8|MOya8HPWlf69s!9%c<44rFD0 z{`>F!Mq2EIJhv#rRANAGZU@xPyaM6?X?L72he0{OjT^;q=KvPm@ zhZb6n8&1L+?4iN@bNa<23UOvSzCP6DmQ|OVKP5*c)7{57yiQ0zmnncuR5AethyKd_OoxG1s*PSmlAX>~Ek%YU^)7S~6Q<~U zwzb#t_~3FLz*l7n1Z)LZBWt)Cl}R5YHVd0-c*djZU}Y_JB!J6Z9rv8^d1>x1_c82h z+Y3`xZcG%g=T#PeNLrcUtP_oMaD*4shGzsAd%x^VYUKh4Ow3Ksa(#!5Cw+R~Za&W3 z`Ap2XZGtzc+N{<8#Ml7GVL?gbuTJHlGTM=?YmMBU#@l6)zqj#CPZt8Wd-dLRU|O>Y zLgV+0dykzXl#!zvI+Q^i)Z6F3V+Op5jn&O4ZrlKGAGtYVEf4{K*?6_q8NwhtBG8q{ zDZ2^2043D6pU|#6^7(nZ04fC2#0{m9)NYZSof~IYmn8~Xs*4vq6{@rck2@coSHxQk zke_vaK|VIRD8<)hH81Yh9Hv~b^GbL#!6%o;6>@!2X`x*li%`YuBNETiwf{Uyiu$zsFvgeiuI zzqlnaUtUXVyPMR6>QBuxAfFLn$Yy+JPw~U7XJ$cUG$r=YTNa+`@zKQWKv^?GLi?Dk z4kA-(aa>%?l3L76uxsZRms!%!W;BL4h$u_$Fh^-BM?4wS{}U*e#Q0ODldjkP_=Zxh zJ>m;Os{Mi9BHO}dc1jXrglB_0<%G#d5-NRA4P#YlK4tr_wHcVKu3AJQ!F1NXP;`D* z?8OP(h)iPO(N}&xLL{hxX7QTZmOvdo-*qzW6qT2-6uJ&8itKjl`*}l}IQe;|_r;7a2Ji$@zAWmE2b2ShHyX+iN!TJDpjida zW$SqA@G-B;MFIC&%?|KR(@xKmdfqg&$R?lpnsm}PWnzisB`A2e&jAPAOG;DbKEUGf z2A3}|x^#D6;to0LzFxB;iPtt(8;ubwcPnVVL*!5C95TyfGaSo)xq)6$?5mN|d4^pU z@QU*%+7q}4??wW_tILyu(+A(X3w~+iYMc#yTklJJf{tnYB6hF;GNsCqAT@-2)EOwfA2|NOWm#i|$h+=um6D=uR@MU091 zOM1e2Ze+O_n`~;u+@=gX%&&MAXizCmAei7_EQyY_!?XrcC!qVa_g>W<=%d=ENbsl3 zynfooacF3$F}6aYpigj^B=#J;?WxdrhF0$+=lpzBPJ0=@(5Y!=jyzSJaIXM0S3CP_ zZk#!~WEAkJf_Lo})O|f1sDU=4EpA&t)LGr`{!^D7*l25;)+yf7q^`}kcdPIs#&bUS z{dpN#gd(C*$yG4(W@oWkUSYUyLDKlh;?5fa(~fdb_f##sJ)z?_L38x%zMDSe;dAS- z5@_bQ80*_xfZ`Jxp1(Gp#ucAdV-ZEX6Byc_2-(fO9)-eeSsD z-1U&RjAX63=KSpwv`O)o4lZoTAM3*|220k=mR90fyM9jD;ZJU;0&!i!2*gZKelQ$RegYE*2*8JYhqKF##h9Iq?DLijpXym3y z|K{2BdTsc$m}2y6$tWX}2E8b{*GFCCD$1`F-|L3ULvMc+!L4y#jQu}8zLnl!ev zxIQ8cjPTr@%LBUGzQoj%CAf%(T-LYJ+@lEYy0Mx)g@-$*#b0&5e}iYfKShchN8VE` zh^p^9C$blZ9A53h0kcm2NeELvuAN-uJ=p51zG{ICFj>*l2`Q2;RfDAYd0>&>Lh=d-rcAmI0ni zbwJiZBLYIv85tQ|391P-Dck!bBqRq%M^x&w-3JQ4&YG@43Hfu853|4Z#v^lYnR_@+H4TIs4AfyJz?W zrHIw+HNPtoVBdJHP)mP5&Ko1W;ZsU6%%I{#xltY5)ohg!3TcjY_T@~ zpX1_R`rR#w2we*+KOmKyP#J)O-pa|O@B|RmZA#pOvN-LX8wvN5rgtY6Tg+Gj*WS`A zzh`2RY*BhY)tM3TS&K|KO+nR$Ezn)p9pYnyeN<4=-1JWBK)sM!@&ebrQNQv=KTbNH zQcd#Ha2f+ntF)3U{~2sLEF1;k=xvb}+9(|jwCj{75>Gb+5ohUV73YdcX>{UC?FhI$ zPKa2DdfhbgZr-Sv*#*#eROpORv^av?f9PuIY06{>{-Y(sme$4*5e4E1JQg$E0n&w~ zYpB-nTY7WH*2op)kdjHO=E(p)(yQJs^Q?!)Z7xd2B90AcmvTYjSvBxrZm1zZTA^ehk1_N4WHuY5TPyC`uir5=G0P9uRkbk0Z?V>O9*hAvRzX z=V4)wGv?g_n@xZPL!N(f-}h=QjfZ)v<3}a)tFRj-SUN0$m^;FLwv^GZM3IyKlhK59 zLPh&=b$bi!@tBy`A(aYhHJTeYH~4)u zaGYU;wPNVgHF0%5LbAzQJl~t3%t$?e{s?6pHdD0PR)8z1Qshb#H6v1aQVwZgk~e(Kq=Xu1ZQ2v??@UtSnp$sd&b{U=~2Uhvqnp}6xT8$5W7W_lNscHYNo_=5pmqpq$l#`I0RrY1x_88X6L!?0FYFQ>4srKA*V0U4rBWQfFJ;N%^1nG?kLqQo-uUM6Aq7seSop_!Lo>OqS_*}h@vGIq{Xj1b zvzWEGiaW#F_ct#6rmckgpB|PFKeS~8LE6)__m)r$>(cjTKIXNYOq?MyPfVU-uLR$i z(rc`av@k@N-slQaB7xKc5F;x-Lf@PXU>+{C9wQz=rYW1(j%YsZO(2;gXJCXUIi=0d&<3A^7-Tsck=wDV&3|vudQ~ zfmlM|27Fv`-U;!5todC33B|m+&VK=CW)hVQsG*2FK)OTztNaangV1KWYxHWVifM3U z_|mi9QQx~&HIpMG8ke5S`$SLX_i(kX{l?l_;1AL}i{|z6-ZP7WWXo&>K8=N<6s5$W zOApf{QgKQc`$8V($j_%>u3tx*a_h}T6teW!O3<{2zt}c7So{62)XTv_uJn}m#b%@e zJJ8R;UTEHM)r8^WUH3Y5+W`}|{?4eE+%=UG6PO4ohAnW;jyk7~W+P!oYLGV)g4AQu2m5fXq4XxR!(LCkko zWfnD1cfc58B<~-ci7hWZkR6-A*pD3^YYF{B9pr6Inbn+$>A`YirH2zY#)zoou`UlW zppCMXXWackZTpqv-}ck)N;F=PRvFx$u~J`=umU{r7%V88KsG#<#hoP|+a zE)A!IpcWu_+F*XBvQQxTGF05!5OsUjvuvWGdPMP~>xw%s=-fFd=o!=3-Wb7n!X+W_ zkp>fXf#K5eAY0uD3BI2bUSV)-uwWMNHO&i%StH%p#>5mG(qc}~nx2tTx^qbvy+(Dx zIdkpW)v12i+;$puN#as@5V9X%8qEoQ5QKX{ziD3gf`8|diV;08lb4(<;3*?uKfy4~ zvBvL0VSObi`Y~aky=H?x)8lT)9q0x_ZOr@UXPC zDR(txFwE_WhJyzu*b-Cw-GJ5JL2K{>y@6Oid?N=@%}Ejx^<&zUYHk(zWWBY)d-vsR6DNj~Wt1Hg`N0qnMKIKFeLY($ zQZ;HdsQEwlZjzc;hZY?abCkYP@A1_N5G}6tQFU*USgj=oJvW0= z;hKPJdGb@&5fbI;f#ry^E(g;HWrMcbRBfFym?zyloVb{$l}nLrBvv)DpaEQjh-!Bo zZ$8#Bj0Q=!#7FCA@5p<&LqLfg75s5cgdS2vENsoAfE`3MCJ`n_%Q@zs#LstAcd$u| zcF9xN6m!hh4psXK1 zlk&aV7xRi};F&zF!?3ZYsJ51mhk z$j|j9Swk&;zD{KR24sVyZ%xR;ru-cpYg2cgGqcVE1=E&XQI+0$hjae8JL_=ZH8V!; zs}!Ws>3L-k<>IOcc7}pV*?TxBxgtJ&p6$_zDvxbj3B|9bG>Ilc?)K|K40MW!qos9w z)Be|>F|~B=Anl^+zq0=x<%MuPn5iKUUNBkiEtyaYe*UEo7ws=4Y#mK$yGCyVCJ)Bp ziDE&ISHLf;we15q$GMXe`0Yc^)ny%2iMViIEt6@5-?z=~&$a*X{E)?9+mMbPe=R0O zgl${c@CUDaP%UYF@k8J=@sFUcgoNmYi`>yNY)aA(r*-jUqeFDfEtyxn+~5he9vmP! z(6V0dc~3S5-a13R7B%#qJ;?ZZ&%DpYIi)HE!@isI2cClKtb(ra*aJ*t|J2e*LPa^E zG~LRF$r@}qvL9Kz$pvKWods<%$oD)IC?5}-Jr*j}3w#kX0{&gG7fLJR7Zou6lXj6E ziaWHd!9p8eMNS>4yp=v}sFXC*JmBa!D1#vqlTX4|iimJk5> zA2^)%aXYZ2?6K}W4r2>A^EsI$E0f_Ob?S_*_w>`Nn2j`Y(#Sqp*gF)o6G8`B_dpBd zbU&@6&dG-}hl`>we59DK`b%%=-a9cAMLy#49>LY&PUH-YNk!MFPNuK3#9irdw`5Gd z4xErGSZujje13Crg9$K+YP&!9AQC3fdE=pI6+f>Gy)Q>Yp4&V)l-*7n3d_m>_NDc? zH7w8F3H^O9Q9o54!|w|=*OsMy0 ztyZF!ka$Hy*UuPDN4Wi@E2)w_Dpifx;CZO&()D12gM)*Y>|2L`9pr@+O@o3f*%;_Y z+!&(r;=b5zM!%4(MSze#Oh41tM0p~J=&_n-Vnk1GJrpRg8v*l({t}|{Z0%Du?yVZt zLa>@f+QdwO;;`)lPa%`~S(@mcVHQzDVw7FLE06#EUmCqu!de zOHMi^e+->}uty0+Yu(eII=%TUg@-^Kv1QV_7h9#oMb>^XXzeQOliP@Ej^5?+;kN=p z*!G`|m(o?^*DW(M^Z7b&UhDlQAjac)dT4C*_DXsHf$WPK+S)Q|YKc@N>@@#%DS052 zH}}~Y!cL$Rua0Wp+S+=V)i5wngcs0*3FJkEg|9<qZt?RtN5AD)YTOsJ@CQxqg%(Q~^?+7DeD+VFs&_&tBqC_+L*gEp_#zKH*iYs$v^ zL6cDxXbBO}$4B?q>F_0pE+zWx%mx0-L&L)WVc{J3NXNm!VItu&rC0ro2heVu#tF|j zZ)3Ut$o4xC^z&m{hM@M{4`ZWcBPXWCdl>5K7 zE>|xhcn%(dX{Duf9UUD}@$uSx4~em{T5nBVU2C@Xx&a3W|Kr@^M`ifu=;(-nf#GXa zm5O~Dsa+Q7fk#z!b!kV3kv_`54Tir^vcK2F8^-mW2(~m{tql!94DL=r4(#4gVxn2rb@mi#5Pi0j;+4{y}DY z^;uX(u^iNm!g~~+PQa{gg!3989o4=<*Pi3#&3}A$*1r8B=woB~LFonO{bAsjc5dKq zONZQA*Dj^ApqPlw0m24$mQ2x9B{)vYdv!2iIL@s{5 ziTRcy>g&;C?l-h9_%QF}@833KnepYzRn~Ze)_+rMI1x7_#lpEa3|Zu6N^0cM^Qsxo z%VWHK#Rc9;qzq8k-;>4|4bu6a9Dc?w+-u>kx2L z1V(Q)z%#Rd<2U>x|DPpl{>QB_GLN+D!=1ci4}08Jtjk9G*_Ml5R0Vl?^|Q47l8clD zE4B3l!va=c>)axgN#&KH47Ss3m;t1|JmFuC@!I6 zR{ZFHw@t=8Ia*Xu5W>F^pmq2ob$etmnRKdwO{>8b%Lqyr5q_pN zRR2DhLZ)v8_tKJ-yOdn_i*DUpOF_VegSGMD(sll&UEJQ1qdEiPYe3LFpr6LksxX*UXb1o-#6N!k{mzq>TMwe3F!;7u7q74%R~pK zrJyM`%L&In!3lU06PqU43DtY$kY?nDHO2QqWHU?)AGn3rK_P^uCKEj|ItaN`k}y<$ zD1QsNP6VRA{V6$tq#ly$X52{Us9rl`Vni1(0JXFhr!V=Vd8zGNtQK~+O2rncd3 z)}SL?ci~*>NZK#-s!{-tJMElex_DZ^e$;e)MJY!JsXN6R;I|8j?z!mDb3Kz z6TI~sMs807mIXkJ@HPgxM{@tOOI~u~569hTCYRBHb#?|SE|kJ)gzEJ@G1R*Pm*4CJQZ&q`7ZwJmi{yy;*>e5~%`My> zyijWWR6c9NAw~-}E3k-{9N;_g&0at?R-PDEvDn`dzxXXIEZ7lD zXt?sGHNb#idEUq*_-s<-x_6Ytpe^@vn>m#GR}zuH&-Ct~oZa2ij+a3~1~Lp9Cc&8Z zrqq&Wn?y&YMOW_~9iAU%ya=arUf5h~mKD!_%ym4DFtZpmC1$^RlN`M%;9;`onAp`{ z@P$b+^2W+Ko_b#7=O!=vHMBwP>V`Si&-Fo3%4 zJ_G+_d*M3*cIT=;Lyo~a(S#E0EJkJH}NS{vQmyyyPm z!TvG?ruZgs3yzvgR1yzy6i>< z2W8O*dr(_4Zl(>I7XEhlT2}uF+^6I6@{|(rbcU*c%u(PT;47A^Q#2qrGh7XspP~Ta zZ@fHj2b_MFmW}yw(UaicTYXOu{L;AEK+@{n=vVIC2i%PunhSVZ@0Bi<$2D3zxN{g)7qY3Ig#9aJDsE&dTg*B2y4ITz77n! zH4)EvxtJ7r8Z?xjn!AL>oc{J+AwHu3Y<>}bSaEc{m`4?-ZUT{xE}Rul`_S=kK*(X| zn=6?fvub|(hwyRXFJ-wvY_D7?0bZREK9;Rc>jxg`)t>9o4cpxqT9It8)N|Oq3KL=_ z+HG^K?KsBr8(WVRYPE~@NOns*2u}JbiySGLilzYzOjZpukLl10CSD7$VhC06Xu;na-~orj8V{LX-`(~aPX@Ww=#h_JUBxHa zjO0olQ!=S7;?R&dB?1n>YMch7MkZ#~hW_DmY!<(0PVu7rm#wYnyW6tnY6S)xQUCMW z5><8svRz@lU}d%6jl^R)If|dO5(VEUFrRlNPf0zMli{2#5X)x^CL#}WhUM_K3^b(w z;h-~WPl|@I1=QDPQSgR_>rPMscv8de@yuOW#7OAZ63iSU}IT>n3b(jhj;n zBuJ^f5!rIxBDrK)#L@_bL@e}~Pkwvi*Lx+p0qqbn*0^${H(km`BeNjueZRk3;x#L9 zgNr9~2f@U+#2Hu;R!&sgpP$QXoPMQx^KRUCuMm^ENV6}a+LkZ;o20_~Hdo+^q|*=Nt+uK`~a)YNJ1z%QTR&+Po>Pg^UWC31@9(Bg{R_r+<_Q{}93>uv8 zo5qjT_r|L3IF>l;1Oc{FUUMJ=@f-RnCv#do0?9);bn|WsoBudAZV?@nw2wy2TlG5e zZP_^%7*a-c*XStx<8KWs(BYgs^+s-RT6BU-OPfEoA=V0ZdjDTb!GMB?*EfsEuQss? zhv9y4OSIAnSWH)IADjCURH7IkP~F!7LBhLU0O=c9+>mMj(~nB4;T{L7z15zQOKm5E z8-!7vD)Y5c-b%gJJe784x17e76P=T*(>Y8)YLdDJoB5A98%PvshLj(zVVjgmic*b0 z*wcw7xuQ?>F<*{b#%KcI0mY?*DeMdk@w+|T_d5>VWeGl4F)=b30-vv`whc#X)frav zRp~M00XOl2elYGKhkXJrOA`&1=&a6&UbWTsu|>w*-ally=~WDgXZFo|RV=bVf3I7o zVKQx+;hYf*wj|K5V9fIU!3wHFh8Va%B<|NA)8QU7Seo@F?!|wV$EV{gf zXM0(RR`WRSkaQB)Fb;h-=kMOU>^S0C$ml3Paj>L68^uNhEgMV3 zjSg8I$pE7-ea!IpAed5Sp06#-lxdcW`{-GsQ{z|)U!!Ywfu;56BH37b>fiy0o|%oT z!Ifh=nwVxlZj(8WSMPO{ygV&8b9knk_?VbPzisgsFjh>!GgVNpQ9XAN(iGa%{A%p@ z>0skZ*Wh?cXqeu+{3HRK+4?B-+di6J4OuTf=zAFSJRip3D_`XJUWuN z`v~de^mJtpCl*G_hG+~jJR6_F=*;2xW}{y>jFt*0m{c4zaY^?yzruy>j~7ysh~$)& zafZwFw}`m`(YQl-JP|iUz#gd`;7!eixZj+_B_IddZH;@`Ky^IY)vfeS6PxE zTW(k;!Yi6@P7yFt*-Tk^jtJHmpne?mY^HCso z|8WYhZXdS14-rkX?N|+-&1CPz%&R?fT67=hb_q6Qz7BDGtp3mDg9iW2d%Z%oCUNzF z`NF7pO42_SU(pUMXGv5dVaY5qh^wydORTb251UH~N(=cXlJ%w{%TZuN%KcU_lC%qK z{FWjQ_prlzE&D(_E+{h=htjW6P;4YF^IHM0SxDrL$ve@2CCM8UkBJ{<*9nV-mCfvESy|huoZ7-yY%FOhusv#_|R| zA93p9{~Z&-uYHvK?*HdBs`2m<-rUuf#^@OVd=&h_9$B4cOuGY!l<8DT0TVrn6gl2% zNn}^e=I$Xpf9uTWBRMS7I=!N}0&~4RA?C}F8nY!N&f}`=>`tw{8>=A_#q$9>+XnQg zm!bqHQ>EBzDuk|Ypo|D&`*5M>M@g}-x7>y84wqvV$+wG`KX2aODU%YZklHe`{!L?` znAfe{A^?cVQ_It&y^*)UcNE5oZv{WPLVoS(oFIsMR+~Q>kd!+fNDz{RP0vdKLG&a= zln5Hr!?a4NURTlw?be@Of)U~?KkO!uRNeA^)Qv6rkr46ACi}^lYU~Z?@L}pY=*4iy z;Pc%&9n;7tK8Pg8(9XrBu&ztzz9CDe9TU40n<+74Ch=YD07F=>zMWRo&3-NV^t`50 z_e%ahv3bc8{v)Hz<=?B}I5!F8&;%HEBg{PP(Jl>edu?DG)xrsfz1mk42I@sl+X(<> zM9?t-T_=H!JWU}o#d1|}s{!_j+gT%B1#4^Gc=Bg7N0zX6*>1x;f~$%>bvO3EyPF2`qKi(@zSfdGIAIi{FxSyZd;3Lfw4jvd+QUw416uXO5&stG*&$$b{-$8=pu^+es=8kGY2FMk`iLWk-`V^H_FQRjM|WPc(%eQQ_&fZ@MOS;y(k8E(H(;MTCm59#6MHr)as4NM zs<$I0lE?bO^4YKVvPHP|Hl#c9Q9B)@LXS7BF0XD+#)kp>QvkkGwjOa1$#ySGYS%T5 zn(JiAcai+u9LN-x865{zg8C>2`EI-K)+POtq59-yhjXRqjJ%#x;ngpYsSF035t%}` z{`l!C0pmwyK>po5qjCZY*1I{sj|lL$H-M&ISu=bMz6j*n<`6%sX9h9wGpl6BF0hB+ zbT<-nb?8>tMAF6yD~Nzw!hJX{OC&+slv_$gZb^T&KeIdo+lAS7_G+MV!nsiQSk6=W zeNa7pKc~D_Ai7G`si!w)A@5U+a>0Pul#Hnwq4BenC;tzwV$SVj+tksmf;rSWZQ!R) zavM6MAVTq{b)S~QD?g(H(~0wSHml_UZX}Pp*;&!ol9`9$Qy%(}LFnG&|3mReXbb!$CF4UxpHsFl9Xo&Z>)L|(^FLfcVqKN>f z+UhJ!4;mO}2l_s=)|8=bn7D}noc3P*xtc@xg~+Uo(}yuOBR$!BF2nC42NQT3hQ$*9 zq<q zIMhkXiI~v|(?E_Y#Bzx{nr@Y!Rt?Y_*s_#7T9VtINByoTD;U0=^%MYS4UK*kPY&AV#f1p0ix*tsWW;xEABFe09;@e$@7I)Iq_GBGiQjh$U4 zb`Ip!5P-KPnH1l0i>7n-r<^``@GQneHsW!yX-7@uGDH0G>U$uWaQbBWLh!^w_a*bX zL2%~w?gLBUkq`8_GZ*g%x`lJi&QK}DZ!g{pZ+=cowzD^4O< zeA=k*ZV*|AfypIs@{64-bo8t%dmUNGsV zf^sKXJUB8dIfTgSyhdavXDWzO+0ac`9JUK-b(AG}{JB|D~*wju%Ju%f}`4k zsrR~1AwNl0{sr5iy)lgL?XZ}s-Cr*fGv#@JQXw{Ii34ctlugC=& zle30uPIbyj_;H^;OSV2m;EEnOCwvl;T%uLT23b; zJ1<=wpO7@n+rx+&hRMb8@ZaZMvMpIOC^Zl7>a5aC!o?*}tM|JQ3BGVFsyXW8YdfQ- zp51>U%n!;g%MXeeV7@-^YzybO_m$c47~R!zqG%5j<%`ez+3&90ZuP2p-CwkM4a6E^ zeOqkgLCtRzjEKoXCZz@>jQ6s}BU}9iiq+9toKmrMX7yU@^P~W!R3RQ65LoC}Uqhm? zdu83rmLd<#P;W3S6!m{52EA}JXnn4;+j$IJ2TgiOLywgu14wsW7%9|p@0m#`5CB8t zHq-wkkFGK757=Xic_*`-1QB>5OpoAq?}CLp6`*{E#C1Y$OF2u;PK@Ur&3RX1gs@kD zw-0Y|iBf)okAHF2LhxbGr|!!!ZuVO5U_ocTtL$}eWcErTNXk;3zhO{m#gq6;+Q##d%U-d}CiRn+xNM~FBWo(VBBTyz z_9^eX!S{fa;gL8h7Mie@%7@jb+jF%eWy}i9yUKf$ruSdvp2f~|0$0%QJ zNMZM(Ih;GL7E2){Cqn=^`~1c+U^|(j?)=O(3QuRxhmW2#vJZS!_tjnyZV`^5KT#A7 z-Qs{=6MG-GPv34zIA4Ca++{K|ySLgp%O{CTyb>EROfyKiKO2up=J*Yi|+%oI8H7l;2K} z3m$cSxpM3h5)Z47C)IECq`WOf;@V#u*cN|*Z!)SVg(zCyKt9WqS>%%u^V9FnCr$~Q zzf8q?EQ6uc!7oRi9wslm%pNOsf+Br`|6PFCp=UEW*$B6#$hrhQ_aPHj>pHW^*FRA_ zu+3UO)!iQw6iTsI>$eNrJDz^k-B#-l6Ewnc>B9pLpTx4;oPimO2WfFOU3nI7;b2+i;Q6eAt9;QC`|$W&eiCrV$VYbiVSm5xYg2Svn}Y+>sDO!YT!-au89c1y;MPN`5+E(zT*_V4}~Z{e~URtY%gkLCiGCP+069@Nxh+tVk?nktwrOc*+wd zs9LtFwdmMd3oNe5N&lgfZD?p;&P*HpVq+3?9oW{le^oL%D0Pj^$FiZI{e;B_@nbl9 zt7sHtC4_xha`QVz_EQvUFDB7+1fs_gyxVWr+=}r!6w8H%fCOPASu);ZjNY! zmzizT4^Lkgz?9b{e_>T!NZ;7i0+!{)V=$Zh6ysME{?^hNRF$F4nx$hB{D|iK`NMAlt|?KGOT6GA!w|2mVQe%#{TCbSu!FJH#!kn z*7bD29*KrQEakV`1430}UnqEcpUAFk_UNMhic8c-Vo}uXxmwnzoRyCra|@ykC9LrEaFn0OlrEN6lX@dc6uKQ9twJ@UTTEKpC+qO~6+tN62OZgz5ku|( z|B#twn~HAWfpgVFssszrR5E}^Cfb|)*BQ{j%cUkKA{JzAaP8YpGrgsq+-kV(r}%&8{~q!kT$$i zUp58|;#n0zVANFwQ|=b^s%2B1YbX;e$epW4P_I$=#Ak2TX;7(+jLtx{*3P{`c}}TM zgz&9h4K5EaQ#y1hw!m8iYS$l@%Q%kM+*LSD7KI;IaM@zw*N^kcb_C;paXUc)JHVOu z?kW>xTB{y2Ozy^(Muu57;6Oi0V#g9vpnJhulo4~ejwR;J{`1?BR|^j%O? zd@xS&K@``?Y3Tx+*jVeRTh}*%9s@oaJxsv04#<$&(nvDIj}Ip97j$#a02k|m92zSD4&`$afEH-{Y zTxkc&RHf>2aF+GtjWZe0$o>gedjiJ;T}aUVzP~_JaR0*T{eA<(=x=cH46HlZUe`}} zkH#b6o5dg@m8)Mj{JDJ#koa4QCNLZh1VhvjNp-r$s$*QN)2H{fU&%YJjNCQct`Yj0 zPZKyq@Emv*F5}~iJ>NR5bcU{8**wbbKxI1*Pn?($mLKq{)O zribO1R1{FVhOqo%;+g!Bc&2#`h*ZVUR;&o@Q#4In8`jV5zK3T4jq7!CKTY+8`y0#S79HM=-Bf~g zur}6oPDE*09mfs$ZVA*sKQ4=9E2ZHul};#+8uYU!cy0z>qw`->nLek)%aI;7-_B^(NApv>u&F^GIM2E-bx-Wh`i`13?^ew&07Agm zx-1O>F*07!8{xroh2o($>pg$F0xwu9|{oxD$L@&DZZt zg0}5p7ddkG56`HrrwJh6o!hmKd#wBI%^M@V?@ag3nK9MH%?LmDL=_pHIX+Qs1pbkA zX>$i)2A%6)3CVaI4{r|Si%$sWBxs1U;CwY8&J(p-o;5^L8MBz#QBa=9Q?SW~hogA& z9MsSi2_IuI=KOmmR2hSg%eE(9Z>6+)oi94B#Wha!u40$eXKh}9=G7p2)4-c|iil8- zwx^|skwm{gc`GfOkL?cw+{}xn;$gF5@}OzD_4WF27=W}Q?*Sp$*i;%4g=K1hm?lVh zad-T()2gCvr_45@^BiL6(wdb+us$}Kr!SR^m7`jcTsR;&CF8iRs`E6yJ72yT1*Y!T zV-;R!rDb~ZsBZCPDhRA1Th<+^T`iH`;m>sg?iZ9mcSs>_$K$B2Po&~|`4yPcB2LoW zi(_}T-95Mb(T$xK20_nv<^~8&i^3y%Pmh!jccJ{iYgWj`&jm_b(=uDXuwHBN?O_>a zzvuG&%g~zjiC$3GAoXNb*)Jw(;Db%jL+l1zW_bU8TDN<`@|?1?d@w>nWeT45<#WSn zaA?zZYkE)4_tG}*yO7|~QP<81pg6cEoj>2^G+C$668Dhpd*Szj6ca;wXYIkox~2p{ zU6r!ST=C0U2tw<1GQHp7?qJsbMsLqJ>0+j#gqn}=yPUfzieUW2?q>!<8AP+IWk&bW z0xB&cz;^Y{zIe{Bb=`b(HHGGSwuFC0Nu=f4~Ms4^L! z5e+oDU$fPR-YKn;==O-i?&wNFWnULjAzh^i+xo7SdHirIYKCaFx}u-68~0YYvX&N# z=ez@!CFhzITWkpFbkv7=JsSGiUsA0eP0R$TQB*A;g|Xrb2+=scNwSI_jOyHy!4 zy_hcfu{8~$UfnMM*B|41px{SDSFvYa3q#;ittTxgoCA2nr*2>ztKvw-C=_uN_>Sjh ziRh%Fkf%HBhYr2vY#`&~e$B&DI#$p#^tj_;G9Oo`Ef1d*!nCCdXY=w7uo$lO_Zn6M zMhfMqNl*iy78)kMNJ5M4jd+966fRvzn1JOD_>yCCa@S{szB`G+!!6H*BG)6M(A(t5 zmH-d5&XRWh=S4N&dNT~QPKcP2=>z$Kii+$)-rx#*XJ1{2RrOQPY{&f$`~6j_3G8vZ zThoDi#x#HM3$4p|TWsk+efd6X9HJvlngEkR%k`tE;V(x~n;0CyES{1&I zUleyCruYl-m_%xFcpgh)^%LgPSi1Ysq+aL6ThsN3aEv)`Mmaqt>O>y^4WN6+JM~d_ zxTjNa1Z63H`)sdt2qnFvJJDPYGjg7N`?MtI8wJHL`l-(~cs4|rN+VVi;H>_8J25WJ z-5(k*RSC7k@XiToukWcVdu?|cV$Lkx41$!I6w;PcyOmfP`L=vM)RwSWHg+24)6yWLw2s)_BB!)W`1XeBuVks# z%4OZi#H!2^_U zf-axByBYoYDT}PFv+eOnsGY5GUx}6$GA0T=lM9-C50&u(+2-k+kkyw1XPQ{2Z|GS= zm7G0jsZO>pbp|7&F^r2%F|?yHeZ?z7_h^7A1mmy#oTrbGEkUYu?h+w1%GtxdOR}B*EXt*xiL{p;xL$xHhCFi$*>TlN5OVUwn)@(V`QR{ZU-7)hFCN#PI)v*G*fzT)d@$N?*gR~rcsn`-!F-V$sz>;qSfA#N{$ zm>2Qq&tTV85cl<Vr5!r>g$_Ep_t#ZegtpCEXfS`z)qvw}fzBYlb&WOGJ3) zV}D4zuwFChQ*^U<{~O50Xq=U}z8bT6@7uF^f6@-0` zz)CVL;D*#gV25JSJHQXz&!E7X3q9Yi0Co846RM!G8A|G85ar-o5xeU7qj zsu4QNpSJ|mx|lw=LDMMEj@0(bl}pRqNXXyHf> z_EgVkPlkrPr;DGY0>Fo@!DNTT`eVa94S{Pm4l>(A76dL7B)w-d3@eECyYp@ylm@x4 zC;?(mAZN)6Vons%y`*S0M=B165Jp0io^jJQwXh!D`y>9~A1hDT zM;A}oP<61eXOpM8a|~ARbo)WmMa=~BNf(mq;lCgn&_K|?#VkafFh{3LwTPJ_e^ci> zv!nevX=!_1`uv2>axRrJ@AJ;N-oT2XP-f6=iL!hG?bw2Z7EI`l->}ZcxJN3(%Hk@T zimfr%YqC=zSM8sK9)c@i!t^TK&m-)L#9>E%!rfwTLq_N8X`>0pVfv5neZP75xbZ~u zm1Y8JTb~tjQ&k3k4Cv-cD0!#T%eWPeCQjT9!&02vmcm4yLo*O==Y^3~#R|f=I(I{&= zXbdr$1T$_A$*WLvb4RzBAr5AU40P3k9jFkJ_7+@O6Rz#Q= zy||9GvF(HezhmdaHZva11hm<8reVN6!}YJE`;6u~FZw zS)b^&hjhwFDYqPpxsXwhv~MEJch*IBVTlI>d`7-jBDHQnb|2xLr4DXuXdW;-10FPgA4RY z7x$iDQgD$tS|$#VXU%Hw89%eoa)!8xcMj>fc-okL8C0cX1)*rsTP0W0NDr^TC60~?#Yo|Q{ zi#IA%#s|oX%G6>kN#CN>x47w}1+x13GsV6uE*~6_P`S*@SPj0#Axi5B8@88zXLsm$ z_!X!wrG7*7%Qifj@0p~O25oBnw~V17r5M#|NumNhUxEQ6!=C{x#YRvoh z9wM{0DwdKCG%(piHttP*I3;0D+SnfV^tAJyE)gJ18@ER-Tzjf)?>NAy7HjedtzK}1x0x?=x+rY>H9xt&LyqdskTDFbmRGQh244Cq31JcUhLeG zm2sZ87KvG7Cyq7y6M~llq-C>cK3sOO9vpZ{W$wEPRs7bOHkw z7vICjMSIh7lwPiIZRV$pNyR3*->bu#3M6;{lr46d!)R_tH?XGJ;jNIvF-cep>3b28 z)W+Xdv{R2yPidc^3_E^)JUl!XdpWKiqpZzI+1cNt`V+||MQoGtGhvNLN!P18uriOg zMqLl|?753Yv!{gt`;L_xT8b5baC;z|1?-09v&x?v@1EgZiX9S9lwLCZ*62a&pD~Uk zlOk=2NU{%i6*%-R_T7-;5Bd{5PvAyNPhx`I0kKVrG7iHE_gLRF(;a{FEpz)Ci|Ctt zd3LG^e7Fk)MT5vw2+C}#FZpd*z{DY5T7jVr7x6~##+8Ym$}Y<$i`h=jJXcUVs-1T#F%GhzB-do#M`Z})Ge z-hnb`k{62G!*cU%i-p6)J6*ho8yO}O#n@LjZ)w>8%N&_Y*E^CrPr*4gru?xy02m%5 zmcuPBqU5J#=|wKbB;)L}eFEHYL=ayebLrH3cXnZcuwstsYHVqoXNHZDYTTw_2D{1q z8l#>|D=IEdeIyt7N}n%UGdcpBKe(oW+G@$(PWoZ-hb{F4xJp?eR(F3fSJdjAxh~G- z!Ddog{x`hh_du`!J+qS90I4WU(WT>jCE%%`y~RToAw(7sp;|7z$~LHQExk)!!}yXK zb6X^nE8WU=A~L}6uH?&Ab`g{SA}F_Zl9cwXl0_81wL`a@Moo|E*(WAztE2KploY~D zuXVx|}`y5E)pIOUQ_byV{9x2F)v1`3yG6iECid(>})TT$r3 zC>b4}xSQS?Z;#o2)pDa;o|DHRLYeYFawwBGXBduB;)#zD8deAfn}@Z~jQb!p$1evv zWMA(vpQp{P25dnOu8SrY!$r3~&$?J&iB4V=k(Obf*7P|vFuI6n!y8@=SAu>p<(I!L zs{jhP*e+@qEkib(fZH1yAPV&Q9V02Tdo5ul2K?|A5VV)lx$}2iu>TMIu#F9{gClZK z1^d6FY2z-=*t?7I&B6?rz0hf);mommn_7S1N4M(-H-p#;}_IwINyC zgw3%FniEiYGWTj`R+MEu9p6e`yk7Tbyrq(w8cZ8STT4WEaSEzk4v~o)QVf!e$_&fb!XuN?b_ueIrR)Ro~ zY3usmu|3}j<5HOedwMD%KY>aH1^^8RZAutxlk;@!l|q@CbEn*FWd7Jjr}Jk$9oG2{ z-%;Qn+f5Hsw!~ie4|O)iJq>uPhNxi44~92_kCwl$;J#GP*BrxlTy-lHD7J=BgD~ye zpETCLHz&Nm&sR+(f=CG?;V;-`XUmCR65uM_xP{+P)>QU+84AMt;3Ozl?vEw&FVH71dOXofD>bc{);@c}?Qq8x8_6XZy`Sx|OY(kC zmg(X`w(_#P*SM{UHmTq@=_kI{eIPX96e)}A_2AInc)l@^6sVj?e zttZ`y1RvAdZgO$^`;o}c@KDk zu;R8OL<}C!jlWMR#IVq6K`P%pf1m$h3E{g$ZCg`8HS(06_Fx#My|V>%Jc3vY>iSF3 z-+v{NJX}g3*f=zgxGxw~6vv>w@R#jIVz=OvXQJlhp@Z83(C3Nz@oVV;AyE#CJz1q4 zJ%G^~VeRo{h>p*z3M?Lrk)NAy!DRh%Pyab!mu)F_WF(wRNocEgUbCl*;gNgY4jc8u z&4WPOLz;edAs@kQNLtm7#Z#mcJe*>3qZ&k6OHU?)ElS#Oa#~5+*O%@55}TQ8X1rr> z-N>)+O+}FyTEJRUOVq`p#zwEt0sT9xg|o&DL2rq*Y%r&b*#Qsg=W*Lf8+;NZFh!-5X8N*>w$d~VA2$V+q*vNn8_9C>zUj4ho$ zWQc2?%>vFK@0?mz|MfFIvO9|rVRk+A%~1oiFt110LxjN4rP_Lku8em*kO=?!b7R$u z5??`xLwC;;iwq`1k3QI0|K2T;xY2R$DLi!A&9SHmqmUvsFPXZV!A@d_@=iE(l%R4m zfXW@k^ZWxISEYeH5cxw8Iyx>1lpBIL<&0o@k54+e5?#5QAnqyG4EZD{X$6fI z^u*q-x@&Jd5#>|&Nw?or8fjV5D4CN><+%EvgNSbMLF%~raUwQV1oq*-g%v78{7dWs zHlyL^N$rZ_v_Zmm4HPG^-6!*!{@Ck|J)^uLWvk18n4ktdOdS@uWEc6{-aDSlaOLhY zHN_;RK0^BC;^vqB>|nNTPY7eodD7aSjK(pFu8F~+DK$i`Ms#aQLQ}rP^KPNn?#7O5 zgf1@ctj9faRFipwMy-VMT!}rsX2`Rsx+(nUBwHN+oD`QXwN;m+@>QoL1m#G(s8gD3 z$(gYi@yg3Bq1U0WOl>{uMoZe%zp@6Uh(o!L>!O*Bl4P^sMs(buyyz`=HWf_|lqcT% zM2z9r*pWd}W;$N)-Pc^{YHI=2H?GR6dcrDGR+-*jYyxC%yjofZZdbtOS6$Rk*L8^L zI=Rp|(kIHK#gGV!P+zZ4PbprP?^pdMFy$1#3R7(zMkFwd6Pj$&fV4)CE*i!8q}z`8 zR+-sw{W6H+mauDm!8z~KmK^e8qw1{h9x|{|tx-13nKzADsXzXPafQN$n_+Q<N~Dyfl9Et#04T3D4Dtn3o1va_Q(A7h#z z)hjEl1v65nfAb^zl#w#a!&U9Dc|AH3)kR;|7F|iaNh%Tp*X86@5A80VG7cRv>t7Sv zhS>$T519I@uI`bk4~W(E3~<`@9ZQ}7p!J=?Z%CD&;GISN-!bDN;#^HXp+0~>I7F!B zB)NKZZ3x4p8>|WbL(bj^h1?2ZeBpg^E+#k~W&(Ht63N8!E*{i^TaChXRS{0H=H=eF zMn5{joWfkDdi(CE+rclf=-==Da5b4Yu^RTrbzkM8Vu1vx1H%D&;D`DIqC#@YfF=j@ zmlt0E!C1Ef4-_U>SW*4OTf zs@ERWJpUr}@Y3jEv-D}+?+ii66IRLls8?$KD+t)b`{#&nf|4P)xKA&yOMoP?eb$a= zvDBt#^GQ$qKdyq-)JBQ$1D!pTG>aCGu@!E>G~oGT!;M7aovVoL`LE~>A9|g;B3!!H zd?PY=qUo@7`U0JInFTpAi@xO+4F?v*er@ti#{yyzH5fKVWxHBRbskBs;&!Gb>FLM| zmm`YC1ZBcfv8+ohZOiga^pS$ow5s8|XectF9f|K0tq4tpwVP3@Wp!r2Y)1{Crqh?t z9)EwPB`08t{s1Bkd7Z>LBVhVvI3&f$4vP%HcCwhY{NW^YgL^to)k|>!FEuNAjCQ5h zhyZpFqekyHgHduu&8i=CmB|Bnqx43iK2hl>`+o54&0f6HieQMWa|L4{phs8I;n1ey`CJz2eQN1@@tk!r zI6=IV17^|jS+iaB-s^cfobZDXPYCs7`CY5{KE&BOKL*Yua~?@_c&)kkdn4-A{%czq z=a}Vj%i^4lzEFWHzX|g$DNUoH8Qh!v?QQk&6cT|<#%~aky2X#QM_9Oq`^~|G-MHU8 z4g*Wfq$;yNjF$I$GjB9yB4Ilh+{6;gZix1B+`3e=#~keB#H~E{v!5$|@a$W}3F^Zq z9dd=1A2?Z4ghXv{0|>XS%v-E~@wt93(fnLIC#4ZcO$~U&y^=NWhGIncAgV%z2B*R( z9}v61pC#BVUrf3)1g@66rKE^u!K?NzMM} zAt1`p$L{(VS9{I|7aVdadYpi8R}dSEp%|kV!cdCh+c6cPsMx=-pIusk2~d{8KDk_2 z*+0P*+eVkuk>SUe1x&f4HN_g`oF`XCgCq)D?Mde1uRF`SH6{VBsZ&2 zqM0~Nt|Nb=BRiFXC%nO7?095k%)+7iaDZa^cne(r-Ni-kKgcXJb;!ff zmnG}bFu{6%x4Cz!XkdUM+{N2c`bj#OFR858LFC=j+4WZvW+{TV9WbN+lthH_Zk>s@ zV18rXKN<}M@x-x1g4S1pVj2_Myc5jFkKaDs6mJ$&Bi~=(kXuyeAOW6vPCSn)6D(#EZ!D zFfe9f32imUw>MTH7bQF~X{0Rz|zH^rQper|to8l9PN;@BN-FtPy5{t4WX5J{wYm1)(WM(Pu#F zXkg!%-ef`)OiX#a21`^5@>M20ks_7YJndg2^q+iiZH2d+uP!|0!dbQ*JV22bzJM2Els^WM89)lbKHu5h}!lM7t406*N{JHkLjvFYjF>mA&`|MlADIPqQ_t1eY< zdm73@Y|c_TF!{nToMH0Xe^%~APp2%)DP*9tan9FpSOv}4{eNC;Rd4+P7~1_5@bN2bksRH`S`)IE#DxWA{J&DOT^aCZ|B=DX(t385hglnLfpAv z%g2pSJ&>E|_bt#Xl!GUS$gRKiDtwQl{Hx(#glL7uIqY+BFg$C#qI@XikKV zA0*ekqjJUVos?T{Jc)dKKla(GzZ2;>pF6@iu*h$3eV-KKj2m1Scy1|m?rN3nSrLw+ zA*cxO15Jb?Lz1-lw_V^J&3mESl0P~tQJlR-%Rk>8>#rN=>vHvsvyGkq^<2Ny{pXGr zhj{-#o?un6^%)|QjJ?ts<|#$lA9?{J&RW8BV#@aRSvAEKm6gb(q+K$BHn0G3mclf) zFaWf-KDOUmo!HWB{G-M%3@Zt@{U%e$35?yWG5QnnwAy6b>gVR92d)+Ohh>eez^W z`7Ghecta#{m6t41uygc`s>Ywx3*ml>J_A;`%l4b5viB}-oRgf>V_+6dsGjGK>?IXx zgsZM4Z}9OP=N9@54)#%WeR+hykw%Tnn%m9sx~O5Ro=$l0ME388Guj&nfywKpQ55w1 zL;*vZ1uMnhqSc`=ax?TVpaUslzwrM%yg(}Eap5KOY9}h3k^X-@z^;-1@c=(e zvU5gG8vn-wjHR{nm6cFBVE%75jXi!ER^?7W7&VsQm1)P*6K1|lxkhuIJT;kq2 zQls{{2oP{|+7Z`UnIU!5A>LNS8Z5k$!chwyo5{Wn1zbLyp7qe--92v0TH;mF`45x5 zfrOM}w#o+9#x?0&Ip-y2!=0a8O& z=4(t98S^;?20f4LpYDD5Gz892^gE8e^!En+Q9=)Fb%wzU4WuYl9!Y!<`)sr|db7La zpEnV`t7wTghOnKw`cy*QxPXa`!2SU+Y0}@|4^)n0N%mC5 z**^{ozBoCxoWrO58Rc=tNsIrc`XG1Gv8lY(bJZkhCMS>kGJ~7qyuj2vULR+kNSI?e z$=FKJCytFLn_aY;D?QzKezV~>koD4#+#SZKwE}+Q0Ox6QPR0mAi!&cJ@vmY#o~BFL zi|cKpGegH_5ZqJjStvIxYR&BSe_y8Gn(5!O;(37V_xINCf$C8fSxJ2^g49mX-TT@xWbQ+$nH!QgS2Kw5^UeDSfW; zta0FFP=9@0%2!j6uwIh8tu-0>2GRK*`P583FXXaUb2KAeDkKZ5e77f{n#vKK-fQNEggtKKX)MH5x|T%57gHak+(&c45OP;&>P%wn3z2E z#31~)U3l&B_U%@Hqg&!Afh~aXdkep&GxCYvpgueXPvIcqMDp4MyyuSax@tgu2=cNZ zCNlVQAX2)JgZ|Fa!Q#VX=h3^kt#PJ=RzDA_UBYn9mKSQ*cDE}DY+cCX_vbC=r>CJ@ zxsGG}r?Vq>777NGjQLBVa)sP3z^ZxTT9fh{?u@2-VG(vI*)^Gk3T?7p@JQ%P#Q;ux zH@MVpTU+RkXybX_{q8zW_HHa7=@-ghlcL6?F2hI9d1ES&(AuJ85DsO$w8lmsvhOQZ zhuuKy4w z{}3Fa#Dh3N)1xZkPf+R}RyQ>z-Z&uhQ78_0;C6l3%ogK(x|7zz>##4K!Wkg-b(V0c zCsE)tbqPn!-=O0Ca=?qK+Q0FRPMK%TaC}QbM)u`quMLQ0n(e7`rCd%`OTqEQDRR-4 z#w&3XXUog3W!kqyl^r#K*?}4?ls@#Aj0!!AYJZ~g?ayx>OTTw|eLS@rDlDCNHjI{H z*>f>yT#4t>U)yT+8|Lud#=qRBTT)!A)_QnM7l|3tS_>T?5cYFskc=k!T~(KW+FEo5 z!6fB|y0tQkzMuuK1loFtg&;wapcUO_^{i#cWUhy*jOl1YgB6%%0^h$`-m|zthYRaL zA>&(!Fmi*nchxa>h8?Nd1P+;y`P4r1LCaG8jqbYlG2uGs)JMHyd9;Hp@(RCOdPsr9 z>%?|7bFDw>cEPErDVgkJFn7GRM2`{)%}k-gnm88H6U4o($&2tPseSw+BOk#c2R@2; z%VQl&onCABkORLrRy0Yz;~20d4(C(abKv7C9>PajMTmr|!CGVbVb~ zC(xKk0e22vUVuN}Hxw}a2Evn56`&ajhp-_EPqFm&QO2Zl{FFAHmX?m9qNPL-@}c73 zVBqd4aD2Y5l~$A{qv<9lt|i`dJm?(|Lxtv|8yfwgB2S%#xBP%B4tD_a9QVhj5XgIr z&`RUtMkr1zdA3D0+}PE{4$0xfNn`^9<_Y9fy%A7$=n75k)SF#6~C&g8a-!mNB zx?Fuf4<{agmSQ_xmx;**8BmU=`d2sp3hH;`1(kyfOhP?E$tY=qz>YJ6QP5ovM|46T zJfrDaDMfixXtJ2MF4-05?e2Lk6WsF=ZE-P+T|1E~dU&EOcEnr+I z;BCPwpvLdMtc*~c!AIFnDgXc`x&I&BkBr#AxF3?{KGNKSWh zxk?kfLBLH=lOz|eZm+cNpjN?MHvIMTMVqlw*dM)5lHh?=w^adG*n(djaN?QFG^Wr; zo<9xG^@TKlE);HV%gM{@I8XQDSi8L|MED5nW(ie22Q$_VWv{n1^bLpIXE&am z(zvhd!};9lGO%MAfHTIME;8vA1RtpHa>29tIZ5`sRox!r1e+?~MfRAo~G_Y7c*8%b$up-m=Mu5#laRuwCdC6kQ1 zBQl+d+m$cDBkpY( z`Ylf2p)=yma1qsbWa{_%2$7j7=B?dRS2r*{A0iK=$aX>^oku(67uM@0>gdF~M%j>zO~atz zAROf=R2z{GgV-diIYw^Fl5KmzIMtrJ--amU2zmtS=F}Y8&fq*h4$xS*I6~Zg|GdY} zGfw2Vw{#@$3pA%zM@3$*Rd(S%R+kX_z=vVFi(6A4<#AlQoM3LF91}94K>7kjqWP9r z6vtg1=>c1`A@#|;B?AYGg&|nJ6g>t93JiOJrWrUZQGh4>(I_JF9p6}-01CmlsD|Vp z69I?h0B;+zt%s_;7B%ovQH65%C?^!L)(|x_)6k(2CD`pKgjprkTn*ebcBnKOZ%7}k zYf3;bKeB5|Nwe>W#kXq;J4iv@H&xv5EKF1tM9lj;qvemwwyj*zaV1hTqE5?);YBJ z)@!=$L_hV}QObFTp!)0e52@?~<t=kjrcA zS;JCpJpYCKmWJ94bXj*B?|)a$2P}m3XqQxH@o%YC$)ngtzJ{Vv%4D8patBN?^H@f` z?6m9o`RVWvn+rhB25>5z^v-zNFzL`bySfdI_2$dg2Q%OE5HMDlzWE9pao(l4SXB=5 z1g(Pon(lF08&7lBj>G#VkcoRje@S4l<2~R-*BHvOEdO z&IcJC%BR4pnO$x>$iFrIG$2&acc*?8ykFS3kwmK|^)}i7;nLY&FZt+CY zhySLr|BBymVxsTMlc64a^WGo60Zu3ys~3>DPj7lOh2+h^xLgul<-VZc2Ic9E-A=f= z>-~jl2izqcxw1mJH_JZfp1Ur;TD%&58RLzO<~OsPY_*+DBF@cQ3!R#h9y=E;Td7J2 zXqFtRBqre$RM-)Kslg=5jt6*}obmbG3A3vT;@;Z6ag6oNG%W#ZN`%K|4(kl#Jqp`* z8L@=d^oEs}29>AHSNq()MIscGvoodI{iF0w9FJ`EezrsK6}}69aJiB;Azgw^_sjB_dl|>FEGzWE)01C5k!S& z1;mREafiWYs{getXQLtDZzsvrL!2r>?@X9qv#^%3%ui>xudB~lJw48k9k8%gYDg4p zfRtR2y1=#~rrI7a$en+q?QO_9)jM#H<+T6^95=pB8!wnb9=;Thbgk9RE_cCVaKcny zwScuAYQrgxzw_SXW^J`mDJb?A+9YH)-PSdsO=MV&?|WJ%aye%;74$Y1g&;5<-q4#5 z@qM6f9-yQx$RMWQOo>du5hE3{iqIz08WzYe^ErCIz7eCC>(Fvltgtb%+xZ$V z>HGLak`Kxa#@C%Ui#pcn8z18} z&Ybsl1)s)l9tcoHv0a9<-)@j@>^Qk;T#j#Bz}qVYN*ufmOU-Y&zm9r5Cc=gtcn^ z^Q`Of?pa%##s;rDpC!BYmgX^5sJ;4)r~^AZJbbTsV3_%p%(4S0KO(}a(I+`4-|z3j z1fh6VjDM~Pi(-3i&}xZWN^!y!>1EjG43u(pr1sknov-)$npql>jk@4yGjLRk&id;k zlcwI0q*G2E(}&t$nQiwv-))X8^GXcxD|fVqq~yu<;1-inNWCDgh8o&kyn2t@?swBZ z`rDGxog%X*rLjxbfc+14?UV#ajj+7@d66L}C*Hb; zr-i$r6K^V_e@$0Ww3d6=T5NMhVWA4YQ;B$$Pz^f4BPOl+vA$dY=UJSR%L>=3wBYHE za6sX3Y{m{CSetP>@S;)sJn5Z0;Ck-{%xyD8`tl?V$Z8UMkElUtiK zKCg9XWd);U<$^0AbBuq>rF(6=K^fFLf4 z>x{Vc8Sts)ixbe%=j63%9mwNwhTb8uv#I)pASYJtS>&cPS)xlL;T2r(E6m$1_pKkI zc9V&QApB}~=oSK~BtNmU?-Bnt7YnEH5agX_AQnu8lD@brg9lKL$s66~LXJ6~f+6@6Ld< zy=3w1-vg78x_9uhJ311hgbS665gX!bsS3Y=)i8bV{QLu+6mBZu(z^*G=O_qbHZ_5w z#J+&a$ME6WtkhrpQJ92FVy`d|1x$ELI=8rnf{!%blL z(9JDR(vbXX)|t?{84c|}99{N4_?Jb zho}ja#8{5e)r4bPs+EFkh zV%!BrZ-xnwAjE}rHGww;PGKuSRa$^%3pw^RwVVhGM>GPWkQlaUzCA3FH=1RpZ8v-J zAM|~(8#g?7E_Y3~R@Q|jJ@Jn_P$Oi&qAN@E>i1w}db9_7HtKfGI$D~TMH)iy;7!a; zViMxNtyCi~+7pkMs*vsT*Tt?K{{}xcpWTL1va@DDN2L%vu&@@abX4v1yIU^U8MT?i zE#qnj2MI>Nj!PzH5vJ;L$cl^%2Ggc-2dm8?83W!;XZ_mEc3s~6L7^U&g5$fox^iva zoDHIoSvEx`Emekwhe=2!O!|K#X_Z`hc24&;p0oyp8iV;%w&5;NMdX{h(6w2E z2p1)+0#Tm7vTW#db5-C>M5rP@ZqN!76Gsg#C@9*ZAFB(HcI7ZmF45?p<4w%DZ0Z+M zT>3ZX6-sWFtdFeQ;(Knm^7uW@*OM2*HRkoB8B9-Z=t!&CQuQ#thpDq^!;n?boG^u& z964!Hj0YpI4kYcrZDL{XMqah0_0hBs<|ocj7A6Cow~4!-q{KTK%|r8SMj9H%6`Q zl4(Og&il#b*2PvkijTHGdnsC|ef-3cQG5Ox`d;PSb2k6_p{J`uZYlCZ{7wOZ8 z75Ig^*chI;t8a9Vf*w)NYCaa-12GmBW(zR3C1mYAm>VT#UmVi;&GOlph^DZnJbF1+X*c40b5MIiCEf?0s~0&&<8%OgzBvo^&dPl++&kJ7 z9}f6L{r#L;kpO=7m;R2!tA8&h=kKqF8W9pH(H5L^(0xjyh~<0W;iT}14o zmO}$9nf(uG3xZ<=VH!<$Y2_cCmfdewI?(+Sn5FBTCkixhg=W%J@uVm?# z{K(sv8${oBZ!j*ld|%}r&XI;~wyDF9{w*iB@>Ox4@9d~#$1WCu+POW|gUgCYJeo&~ zokk4STm<=QaAywI!4CG!)u>uGoi}JJhh-LG`FTghyUB2!qL>0=k&0#>D9jbAAHb5;oeZa733) z<*-eMe&>fT>CB2$7P*YwC}_!EYIghv$IF^cw!VCPseX!qn?#X|P*QREk$$LG*EOUQ zODM6_fV`+_OAc}hgR69|@{Y;HL2xixAv%1AmYkmOExU^r&kV$)rze?25vPfcel}BA za~SAuIn)yJ(YXdL$^W|`0(}wkf0cv(bQN8 zoe-hPb7>+&V>6(7$dkV`d!e!}eC3Z{Wz^d>ss$K2eYMTWuWBH$ncXxZN2%O_Ik$(@CvhHLV}ji3$C zxrwbQP#?J91<9H4~>bjJfW1ugSDq|u^U2Mo6=hpXI7%fW3ACP@Mz6hZN0$QV6)oYFAz-4QwP=!ROr{e zH6`kJMN{sP+h5z;Y;iV+Pa2V0F0+ zo)OtKop{;3P7~_HVnx(8L~RWt1zqQuYH57aoMGO^5*(a6=$Jj$npmeKW@T(iY&~s> z#J6wyxpLAH8!neKRaJ`PvxQ+6F+$E@isoEk&Sv}I(r>1S8fe3NzHL_fx0~KOGS?Zn zlUD!9s6UEK%ih%DRLdz$R#OkKIwofoP0RYGmX9j^sPlq^OV6Et*Mq{E1f859`YIz{*t+X%Ly`?A09_DyB$DLo69Zy(%WwOmRjpbkcWt z#EP16uyCA6(L(ME@F$rI7ja=pSwz*>&fe~&ln+Oy=cKE&8KqpI^mB^QO@+TJQqI1f zLi(GH#ok+e^z(82$me!q^tdZ;vkdyCs`p4ev?4P!wcU0;?MAP$`m<|75~C!{U5H27 zA*5f&T3S$ceT>YYOMu_y5|O^?;SFyT~TLPbNFQ;$vr8)D+_nK?apx1A-~k! zwll4pGQK08uimYdRuOn54ZNI!p8jh1ZLJ+s)M-ASqrX!~EPbEltus+;)WM1z7OU%)?{j{W+}>fSQ~Nq(0tH7< z-$n9-oSiS6tz^B11rxVLGwH|4k68iNPZ@tZ{wYxP2mBst6&Dwhay6zR6U^x{t7T!` z>R+A{-K)wBDaLl*_HlO@DRab=++<;u*$k+Eul z>DajT7T^v+st2Vh);g(8(##lpp~$OA4xFyu(v#hl&L^JeC+ObO)1Kc>`Pk$AW}DKe zpy1uZ@I7Ld>{)tklQ{n!n1ao)`@6rS*3!$3^7`7+5TbswUL6`FW)(Lul)imOq^I4d zZjmfBlx<{M9>c~9Vg264sn3CjR7;`6eM#Kg&4tAT>5qoOmqgSO^aY44lE`c;;wJe- zbB4LbQ>3QPipSp)K2KXeo^snQ-14HLQ75Mk3^l+<+|j!faa!DlEhT8Y|JY@*s@#Rj zA`=~T{x9CSgRNG@I}g@c02~`;mG3cQyMl=FVyK5C!)94FxG%95~*<2^pfK>72g4^ZD)~p+}@DUKt>!xRX|3-IB zcd?skw=3%fEa`g>7yYz_{PcXEOIpL*C%pSmk&w4#f;X zi=kq+#ayAxnD<%|fw`r+{Co+4$bP|D0uNt_Ja>S;uZu$8+n|JYNF{|;&BRHa(bKGM zBdmk;Bbc=Sw>*5rZapF5nLU*szO*4%#}4SJz8uj{5T>Wy#?H-Hd;UL|&StSF*pfy@ zZ_IdkstV&{21k+;2*ad1d=7~693HKooQFQ!G)BVa9K`4C^Kz9^aC-}qZ92eb$Vwsv;547nl!3euHtlMHNdn4o?x)E zQeXH9kp&3fJ@`Dyx+ymuh_^k4Jwf(}Wwv^YKGnBC<285pJ+-AY9jB?^J-C-x~s67zL4ljad^IrB9I(b>?d)(Ys3iC{)F0) z)5F{e%0pUI-)`|&q614*J5uQ-9q+xy`)elO?yQ#!s*daYkx*<%it=z6X!PxrNz@3X zfLPDVg5GW)N2HGPMm_m3k!-Xy?H)^(A%QHM@6(k-Qx_N$ps3eq?Cz^)C>VP5>ChjSPL>sk6mULseIMp z5hbc!H2{pjCY3!=2NBk|!outcpDax6XeA2TW`DBaqDeF7%?Rd*F;fh}L_cj74N90A%?vuEoY8V-3aiHBPPJBjX7T=XZvQOtxGo25rE^Ja}_ z@0`8CSV2I%s=9KMAF`*bz`n7ubm%;@Qg!rLLWf)@1jO%BET2~`yhW)d=J_ z)8w_)h2(1f0eKNO?K&0-TdE z!`CSQrmQSoB0nU;)SEj4){c-3!on#8$U;eeuVOgo6Uw|vzv@)R9e&mGGh#+%K9FII z8Zw>(foNa>((HcND@X*n4b7iz4G>T@?8qvzz5lCkl> zeid% zJqIAia{y;ugWZ>f_MR;@&#O?0kY6to!WgzQE7FqsLOlTjsyjQ%^dno2DRL8V#znMA zQHky};e!n!iA==+-F)`u?$ za&!b5T;L%pl*}}o@8Sr$-5Y8jkGU2-vN3ylkDAQ2;1FT7c8KIc$E#_at` zQlzkL2VeL;1}wAHrkL3uzg65S&J)q68A&fBANYy}#|&S8=g!W>SG!-!AR!-y$i%dR zMHZ>=bqttuqC<^sls>m|?kcGR6*kv(<8K~NakfSrXZs2{;tYc)xLts2@kU8k=zm^Ink2l7?JINsf}`sLy*3Hqw4!xCC`}>_pW@j?5P3(1tI5d+n;o&}eYakAeb5!mOZ58y~RN#FTReR7L@TH2O|6zX~B zpohZUpfa2=1B}Hfh!{6m(GQq?3F2zsSz=*&%9l$C9jhBrjhfw*4dn&GPi-uXP7wgJ z!?|Zobo%6z;DAY)eTxxNrX6O+t`r=I$90G)$zI0{I_ZR=dQEGPS-41CNhcZdw}K+s zDGVPz-5a0S=9%@%Y3by-Giftv#m;*_!$(SyFbc*sV^5F?jE1NjNqT^BU$b4zbeYqt zrDN}geWJzJW1LZ+a|W0>8Na*XZ{cUkDT}bbVBPyiVaY0SSJM=mm_(Xx-AQ>3hZWh{ zWG`WgXr)Tk8rMpPMpFqB7#Ap#T2w{&UufZ39af2t{VgdqkHf?d5w`BKs6oLs?M-+4 z_|<$MrxuI`!6WrpRvXPomdmS*j4Jp<8x~fKVc9t#sXDu$Un(aQ1G*pPo@)uREUnDX zX#&#%C9WP#X>U!)DSip?Ahw8`&XH_oH^d6I5_JxWp@FmIQdt8&h%&Iy7=yDE34gr8 ziKQ4|SoV;DHetYWbTe0k5GN|yjFij0Uk3}~dcRSSTSZBB<(cv1yny~kdv>sT3dt-ia#7b)xlLtReuIMOY8|D>+ zxi~V8SEKKPDUT}z`$UROrNHY;76V6o^S#bHs=eD8HWno!w%Z7B!MV0}5*eS>K*NJZz6@J0Qo! z?R@1091^}qK=^`M$!6ekHBGYhJ(U94e@0q%0^?w9^qVBQt6C%iPPcT5EBwN^^bM4g ze7Y!Jl+jQlrs(spIMX$QUR%QK%KR{Y|7}$+_DQ4by)EsNovm}n4`~qQyn)D?#toG8 z!E_!+mt9Qdjb$m@xQr`VyR8czV|eo)nS%Hqz_BO?RBfk9y(O~o*mjLfEXHD*SUa*m zP`<~8T9PMg4bov*mixwB$=X9|Ea7oJEu%=IZ=e7v4}&e3gk*%p+Xri}o8p*uW!-fo zyox?H^TrPd0d!mh?}9@lHhZhVsp3m6G8Y%K<#yiwf!X1*q=JioHO(Z1!9fmbEX=9k zCJ#W5D2z}509X-Vk7o4eT`>cZMq&~De*IDo!Lrjx;^X0psb+*ZTr-RdJ+G!D*V3HA z2VWqy%H^T#&aA2V!l)96`eD=P=JS8KDLxM7zx|KfUxz&VKW=}BGPe2R11hxuMwl*u zCHzsqIeLfZUR&?BPHV@N24HHs?YO+}levL+zS>zQk5gdsf?h5e?KAAzhp^NQL{NXX zr=OaCLA)JWuJ{A(01y?QSQ3&J9jSrq=VT$@Ux@a5xGhWN7}qv-*mZh`*CotT=HWaK z_x?coGiwLrI=bJuK#tF;NcHJK>a(Y<;N06+4!zcR8L?EK!*pe289c0oc!wAmpI7|c zGu0l0i^eZL3k{+-p#kxPWYvi*lQICuGrB`TVje@>v75V|-+B|MkoY(06g}l{)}2#% zUcWfz4j@gSQ(YAD_j)F+I)Bf^zE?TVIJ;h9 zBJY3qd_3lIeZ^vfZub3i@lr=Bq}}-bI@diePo?a-X#+%kBi%}I(aK#2uDor#9lj5| z%H;+Jx1ZA;{m>%~`s#7(UMl^%mZgajJk7ToN*Id3q_`Lf5S0}4qpZo*?by_X6KyGcc3CnpMXDLkwmZj9Kb}3sXWd4S)Y*OlFYgZ(E67)O zQ4&fA=o6xa<2P%B8E&;+R1XC$Gr2J~w*~TZE;M0Yk$)W`>0hOOlVD3>eM~LPmAZlQ zRINZzGMoZxLav8ChML-kp{Jp^mQ*PL?>9F6fQv&gU;wP>a{dY=X(e#8nMak7*fH#L z6PcA><(_D=Qxk`oV}@U04*vhzO70@uGf@VuqYRg|Q!P%R1+A^YnVEV)$Bd>Y5u3HE z-LfrxrsgIVKgK)WUP%xm;8FQxjMde-!#BEqZG^w2IU;VJ#Fb0FI^?S%76Iq>^N2`- z=m;}(U4|Uc4LMC*jo4F}qk>ZU$CTXh-y=2q<+#5pCwY_ABn9oNPdEeGK;_g&tvtb? z1L%Hsd+rE2^1A2=jTP%-(IY|TWz)WWDW<1w9l;q9fN8ic7u|Az-ktJn{rNQJa!%4~ zdB4#zp6f3^=&c_D>sVMF*W!wBu#_=j4*jngnNLBh-`~+wGr4EN2=U7-v+}aC_!)rH zA#NO;22v5d9R@_v44D1j>inF|_|zKnUO8Nt>EfjG%Yt9H$NX`2VLNU!Uer9v@RK4P zS*vaYg3HX@l!$gA6~pz7=F~_zsknd{{(iRmA`Sf<=(g(_ImR_`Mn*%MtemjNVwBRb zf1ml)JRpK8$@Rxc1=8{|pP2V`7&~9ch(SO7ZP)esZJ=21*taAp(Ev^zn1wtwJu3lZ z+ElC^meF0v2o)PD#SCtBqY`=j2$}m@_rWp|K$vG%j!y=;XY&(>@;0| z$B>zDX@=m0NN!*7E6&k$AXgzhF3uTJnEtxw=s()V7_lb)WGs$aZLAFUtJDru`la~^ z++G@#`>1}t*LM_x=gyL{>!#;-v(V<3hdl5tnwmV7TF5u~neVpB+5ThHKDToBd+=*M zH|hzmWdHsIEidpb*U2tdWm#UHgvok^0`Ts7(tHLL4ND>>`e)`Lzj_-ifKcF4Awt6P#0!}Sept=X{^ zCNL~jI--l6{ucnPKvKW1q7j9Cec=v{Rj?7l10xccFM9wx>N3&qr8DE3Mgsj=t~^3oHH84b?-gOvtECC${Jy& zteix{S1#-;<*w(tFk8M6Ew0Ip=C$JaPx?l(-sngDmdE+i;+=H%4$NH8f0QJ6)rdFn?`I`Rl`kDnCVW!hB2SlA`p>PbWLqBo7n zI8dJTESi2Ye8qK{zPxcD^VF#?!6|ti+>8lWrT82iCEn&WG{IVd#XIZ>cDx zp;NZnMfwtDzfO2vy2&`2zZI{a?(SXxWlpq{9> z2n>!s>W&|!YsgCJq5T{wsHWFt66wc;v#pGrwQur=H};B_jj-DsMpU3E@P)r*f^-hH zQD0Te&XQK9&AEyUpB}dCKY-ul+qwIiifH^3Fgp>@%WoMI>5-o&ZH#-iu zaN}3M!}w5^os$N&kRxNg~VnucH&e*`VMlSFPw`my@s1Eol9n7B!L!D=8QD6 zYt1GO6%Uue6;$xgKWje)i@Zp}c;Wh?FRr_bj87EV9R@5~LI5Lh*4* zN}Cw*4<Zy67AnqQ|Nw%uh6K^k&>0M_9XQwb=Jq zb~U7N`{-idE)EdH|WFj%m6lyWThAp3HPD6eT@#5P22_W(hD{z{`? zBI^~GwV%4GLOQGlGA{ob_g*oXv?MKC-+B#4<~4-0Zszz#&AqX{;-XsjU((pg4Lhe#`Xw{oDU9D)-u z4^(kz|3Pw()YE6z;ujWxN&3rMxM_u88m`^L8?UdSKXx{kUB8fPFPz4>F=NS^FoE>g zP<)MgOqvm@3ih)9;9>HF@UH8&;qnP4Egzvv$C7;v}Am7qA{36{D?Yw z-$4!@K1x+n7d^u^Y{I>ZUVEJtN4hWy@g5l@gtVv!%)t=^2MJN7Y-?txvve2hwjHAI zSTPkNexkAOtBi_$nyA9=3_*6*gq=v-D{|`?H-0Lyfd<@iohl)+hHLh+W6MUK+wbJM zOUL4)A7R@QU+3MnaZHXHX7Bn{Y|Skd1%SvTEwvojw1-kd5>qp+y!y2}cq`Y6L*u6Y z&XO7)1iqmT|VQfN#((rOS>~!o~!aMnWqBTE2;pX>QSM4AnE)-3DK3i6;W!2tFv}PT><)V_D zJPX~C)l?hDlND{CV9O#_ZrD%FNC;Vz(+RieMP3$SsBJ61`Q2V7-18+ao}5gWcwRU} zDI8@_iqT|bxNsB8_8g~AlxHo)qWs7?PKU!RDjoyJ7WJhQ?@WESr zu)l=Xz99x1D=89{>+U8$X3tKcdexu!-RnCTHu>W2ZeYinH+W-DCC#Gjx+Xh}-s7A3 z!_Qx&M2HxZsQk(gY+`Fs7na~Kg4~T9+4vSOKKC}I)@TAlBrQbQT-dFu@$*|jr|ra?22reHTrM$O#2YC&Bq71ar-B8GTD>kD` zn8uixVOIY7E4*`1)GvKP7>0!66yk9IqF?Z*HT}dy`p|M<5zj2yNl|UDs7L#$+`pL} z`K457!?_?s?$#qpIN>h?!yI1mI@{}_xM0DhOdBiWT`rO=uF0}j>FITfbn(_xyu9Wp z-7Yuwp%#wiP50|HchGy~l<~hC-+>Wo>R7ghmpkYbI~`3;gD<%jge? zVx%#TcivlvGj=>l;bs~RZ(z-aZR{=Y6#39b+x~Sd$v`^pB^;7lz1iC7 z@9Cvwz(}yGRWx$)sI>)2&gi?1UtJkifs;ZHag2O`Tm(poB5|)%eh|a~p!F_a% zy^QSsb^Q4q2VeTuRSfNWmzCRU(S;>5W^6iPzQUZ|;}q06m^wX+vMp-}xZ;OAc;~fT zH6w)X(q`%#G-NEego~q{ynoD>@Bi|f%u5uW7J5O+Go!+;uABp>2)o?}_Tr41!PMkX zMcBDqG6Ojn8R?{WQ$Cit3%L5yi@0!3HqpUmk=XyYC5Bt}N(3b`d&XSm%$do!7!A$G zj<9)CA&$fh#>V;Mv^zyb(o6ozwRA?#P=sA%fDWxGfUwl5Tzkm{Or9};h?YG(@p3L< zB95a%{FOZx?VY6@&)v^k`$GBQkFO&_gtsc{&L8A3W!Ldd?5Nk1k)Fkv_;68h$qXv4 z`Nk3(ZV=)vm}p%Sn~w~VB+`yareyW>%_5*BTrnt&|m&kUArkH9uQI z(szExH*UR(`4`L}(p5*th#qr9B6A{odGn8N&?U@z^m})4@vI9(11N;5wRv>oi!nsF zyS<*${%G#~@gv-HB}?PV%SEYGg2A z4EKHQE-sJl<+b1ZiR~Q`%$zR7T5JTa_Cg_YZMe-rM47D=9Ia#8*B;~BBD{heJrv~a zMjJbuwD=%~>x*dYb`yK`clpu1S90MvH!Gh!OzL%6RKCBKdhIx6=ZL#*yPE0QX~b)4 z*;J?J*30J-B*z~GN}XdLroQYj$BT-n>((;VT*{jF*PtJJ8w;)&kE3)w#Y0iVCnS>+ z9gM*eEQF;H6?zNN0Z#G`mtjbnz?>OV5w5}!kiwWbSMjw46A6t;#ILQ6u7G)b_p6s- zso%_^cghHvc`bK;^T(wo~&mCssm1&f&cn2>2 zDc`^UdajrmO2xJcMofVOh(?g3v4RT5@bw@4lv}SH%TP`ZRn`ci&E>3pXEVo|v?NcP zN=9TL{(%mTY}-iOv?=U-@@ZN!Z{Xhh?%>v|FK5Q&NleU$Cq6j?OLr-Cakuij2j&r? zw^DXwJN^D+NsO{EAR0@rzFf@ANB_Y07hb}gnHMl`>sj~yR(vmD||F1qcz{P^J;h|rHd2~kMaR<(ketP>vaEO+_ z+&|B5wPKe&J^zs^5Q)O5!!^)JXIUv_QR5gN?~h+-G|{3^P`b?j*AW4#GY1e6mn2$e zSxlcZpLtWVNim25sk#lDh?9>DB@qu=g9%G;B#EL`mzp}6>+ZOgjKOYEF!wPaDq_8M zn5NR>96we|{DNy3D=O$y8yG6*8zQBM#-D}}tbIki@$<)cZF?=2un3akV+gj0O2};{ zcFKGf-n)?Nr|H=F(&PN-Cogim$F4Lu`|FNzys{goIgIeoP|RA-954l!3zra78GfSS zSKq_1)$N(nCK2{Zk?CvdV*5+ai3Y|V`gHz8#KsaC8i-jm@|;dlvN~*{9C6_kpH7#J zzM5LPguqNnPa!2Pinx@C%vtay;ihjeuD_7HE+3*|{lRI&>M{`)8b)Yv06I|)+Iu@F zsUIddEf$O0E*g(Ebiv_-8-;sBqgi>0L{vyY;o$_Eb>ftcF|()R?`#ob=>Xfe9>wk- z&e%Cq2p8pEM3US#%hQYXNpK7Q1ZQ8!onQVI-~Zvax#y;NLKp_26%DZu=Q9yEBCorh zqC6GPIbBX1qD*!7w^3F*Lezxuq$b1=5f;as8@|ka_ukGGlVUN*9i;t5`4AE$8h9ei zPA!1NcR7E{FEEg}xEM4xVV=u;p5dl0MLGsjRt_*afTS!>G?a)pQ}KlGyRv)f#leEkRt6pfSKUIrZ+VYY#U zKUQv2CenBI zmHhPaKQPzaNNJM~;ps61`3Vte7kNvg$7B-ePvi@m5T7m?ej;6;m^&x(7=yj^wslfI z>`!t=FbFpck2o;LCJ1N!`<`Z%f6wP2>?ERa5G`jPkzsvBh7S;jua8-o$m$;+PkQ!5 zqW3+@)ADDJ(9eL=+f_@evqA0eMD@C}^|}`n%dG%PXbZ zslm@QLf(e86zhG62oPz)V8+>5#qrV>j&(*dcWSgUEUR+9BNCC*ileihLq~>~fB%DA zF*l2W<~lmt`*045O24~>enS|^mp{NGzk86__9g5slY4nONVx1Fe)gR!@GalYvNx8q zy|Q0a_6AQLm5s{a$=v((36w2)iFcOmro7WG$|4_3?qT{X_j0(Zi{iWnk}tiU1sBgH z&NNJCV>8{|L!#v`icBdEdj=UCc8E0WL*#@RBvUIYNKuieOlIcHsbs{3L$B;f%Vcsy zDQj09q2F!5JY2(`1BW=foDX{g=&7Hcbf(Tm3B^mqr|jYTZ~$D15z8WDGX@)Ak5_GNE|=j9Iha)x;J z%rf*8WPiDHU<8{8k73a;(}ZL&Z)Pwp2g@)eXEXhR*`&n?@g>ZX%`lBln57u^FY>Om zPaK}xWaC>1XP*dClc1sK2&LuC42g2Y+Ec@pE!(JW8a^?e!VvwV?CyEW(d*c}Sf9;(GfF8yD_dkz6=kAh=y9*%+65O3ap+=#llu|D(6-xhg zsL@hdtT;44h`YO9a!D?J?(XvV^ZsU^=aPd$-_k+|$$VgQ&+g8S@62~*M`*8Zpt{<_ zfD5kWQy0x7gL;k~sgW?N9~5;TJK=w~jT-575vhqSEZ5w&Xa+D(Z-vK80+n5|+xkJ|8KY zPr7V4-0$4*n-X|=lNg@tA)>pPjzBI`E;yfaCk=%r7nbbNTr|l|;li~XmPV4#BJtH# zPkFTnTelK$l0PI4F@?mcfxMr@W|5wk#kBZ6yz=-)xy!iAB%$Ylv#aj;H&6vQo zcYc;DMBeFS-q6+-j6>^D!##)q{K-csyDB}l+y;55R16DFdO=nV$m7*<+S@`xFyfuFzi&u%LYfNO;#pf|5 zsh%Zozs{nCt0-=j#$aqJdBcY?c+ddSlA@(dYGTWrSD9BE!9^Eb!o)#lj&57Z;(21% z;#F)pP>yxL6efu>8GYUeYL@(+Hy18r{;p~~-O>Px%_K2LD#i&z$(uZ#0bLt;{Fzr- zH1BQJ6k9pxn(Me^#we2LpiT0Bn?Ih>87LZ z81r9PjcMuyj4`_W{yl1ZR(Ev)CEhf~4j)2dv@=|eiI{MA(@s9UI>Mgy zOL=p_8n)~y#%H(F?#SfY3#Jm+_bFD%A+;PyV-4MYD@l1%7?y0o8}8OqpDQ~m3#d0| zkuzX~2=7?zrdl>FeVsSoUO|Z~iR8=_@Y=i5ALhK749ZLte?m`t z1Fg-qc(Tr8MqV`jKr6?#RgrSeRB}^eaJr=4YLdo6{}O+G>1}xj=X20DgYlBbVeBZ4PmU8%UCOGp82T)twg-|{vFbMO3xU|Fq@~X*&xOYqsF&4lS1oa6Uae1b zvb7o799@l#3r`{Ud2p+>^7?x1Lbe)a)r+G(4;ae^$PLwf?DP4Ju72f?*(@ztn`+TY zu^0BUa?cPeV*d%d&SHYn5>wkb8C~wG$5Z0jSVBNmq+v4(^$ADyh^l1(jBFzJ)iu>^ zugs~z>kgYVu~oXL+v<740yQOH$Ml&>Fz7cnnpX`*<9#(y@4On@Dq=>;0=4#)aaENC z>YY`e1C94lH7=ak%_2xt{t~l>Jz~}{qsju4)mTsQBw~l0`lTVNKDmYJe^p-CaN1S= z3mA=5zuYjEQj)x9{HNRw=UcD(yk@fC5Pzwx={L%z&?ih|i4L1opmL+T@i@hmE%bOL zfA_SocV_{;8N-<@!sYy&SfeM!jF;YCwK={#EAH8iWlf}HQ~6)@5C&D{WR>#AMPtn| z4sBe>((-gJyXI16jL9WR!fy0(Nqi`w{GYxmYMV9H19jqk>_a>fQ2WG6*{6zN^?s`~ zFw7~-)pHWJUa1t6e^nf)&u?ybXdhk`eq&2FWmf#9%45S{AX*8C@Qp>TZvcI>bfdf1D&@uTMzH!aDM4I}44N$#I;qs!-u731|HMHD} zaY4!~mByiRN2(vWCims0x@~-JmYXN?o_ang&q{=-`zkLeGd{1%W6J+#Y?2Svaw+Om z-IG9{u+NAG6;`cNtDkaABwXOwL!&gBS2#lO}o%HL`YK(ESYM)#Y#sQf04Ai1UD z(kJ2R+g494C8ETP8Uud9Ka!rIc{O92oh&FWm*d$BkFwOil1mZiL(mhga-Z`Pt=>>w?)Pai@A$jk6CA6+XRJ zY`=i2=+=A1YBUH_#`IaU7&j=LXotlR1ZNs%i=EDjU2NH!Pf<-9F29KA$ON)RoWsSlM-VGP4mJNY zn)gQwJ1y)q8ja>dB#4@Qda}1r_0og}=6?`PcLFI}tv1zL68d_fdP&Y)X(J&shsOT( z^#G}!J=J@pdZj+}t{u%8$=N9E`bry(Mx)Vu=$J&vd2qR0;lqt5Jj~<2LMkGkN9>Ub z%6CSKI)&6;0Y6@k`$YV?)yf7Ee_GUOH1CfVb{dUFqtR$IX9ypgurmhBo+3`ATW2%> zaXg#UU}81U*^giKUi{bH7atPg!MuGV2ttF<)f!fM1kb6Uf4)(lO^jqvX<$r%`Xq2B zSyy2*s(|U6H50NYbjK+0-(hd)yzf%~ zXVfJ%Q_I_4P05b8ca3YtXR2o(n`&Tgw+vE-TL42z_Y8c$7PX~nsj2nzmw@A zCo0}0{e$ggEPwtF{Qc=UtU1z#JtLce8L^nvq^W*scoKCjG;2@gJ0%L$iD6F8)vPUb z&q!SPVVE&4^vhNKuJ_rm?kan|%_S68dx(yXFlIzn=PzN^q9v?81S8HFL{#4lzCOPh zZk^+ zKKjo4T`}UvY_VePspE~89%n^qkm&d{oDKU}_r`O)x!b~o3x^ZcQp&F44r1b?v5Ua# zL+t`&5&>AX`d57ZfnTs_ZsO8%NlsAvr}lF@6tTuk%C;j*c=4&lR9WJP zuy;_peF4wUTSmm73mFt2PUjPG-}ihtCEro5gpJ9C_sb8OPaY}_^_F7&P}%uI6?Vo; zWTv-rC;!}D$~iMGBQMcu6vE0a^_<_;PIE;eI|`0aT3QQnDa2SjR8|zx;Z@6~XDh9i^otEmuY%OYL!a0|c4s6+z$qF1| zMJ5G2R2|(-!NFq`OS%RlV{n)~bTrjc-qeOOG7hI&C&AUi z(c)?v8%n6@!YC^u9YI{3P1H)dci2*ikF?;I247)KCy|knI81IDDvLOB=paXqmr`EU zfHyLQG*OcQe=iLcM`>(nqpYZk=1w;jVw6ba5AiVjv1jETcxlRO#@|LK7$eB0Un)~l3xBI)%63A%cT%p62c zyeMjum!{$}8r9;-5e{r-FKu-VG`IHPvD%4@up9Ayc<*)!kCsr~)J;jr0lK3GGB`&X zZ0YgDWe;NP)CnYXl(F;8Kk&fcc4CipN*NtXwAg7h0_ELRORBUUTE_N>^ZDH`Md00j z6PL{xN47Nn&F&WJ%8NNraDd~b6_W0LQq{I#QgfIr5oC@X%cvoFBm~;1tvJS^%2tL< zyo4-!1I35xF~_S7?alamnyIg8rK2|>4blMZ6-TJ;^-__)pGJQKaS1W_TZ%b!@Gyst zmQvr+MZgh5e3XP!_X2(*(ZcSO2s;z5s(j|dTI*UwQ&V6uRe-1 zF$Qz_HlCYXO3s)#wl8{(o%InUre}~I(N5XE4ZQivo47_?Np{uSJo@Smd{R)G8xFF1 z^$}`(P7>3c1RILjRoc#!8JEDm7kKP%1*A=xNP0p9HfciZSM`5KZNt=2w1E}J-AtG; zkw9EO=|8EZU2~s%(dN{IWIh&5Q5R6VD%h^id z@_+ENU%W%-AA|Z(yCpMdmgig z+bCPVoF%LFaID)zY9q^)xLlsje-u;t5nYGEf6uD*(C zIUDk$?MGj4c}h`Cl)Kl&FowIniB&J!Ii?3}-nE%}vn#Yz5;>|p+r53}G%fW%lU zjR!Wccv}&UtZ_^lJ^-q=uzKOMY~=!GrL=Nj*Cy5;^D%fxHkneEr^H6#6v3s|wp0@( z+K;VeeO)XUOrAib#c#Yjsyb;qzMBIF_Orh^h$GO<);FJLRaX|X#|@-q=kvU{;V724 zEK(x^G}n}Htgee;Q!W-Uxr!%$xRSVwW|A3eqesfA#c%CF+WMqqyV?8qhk0ggH7;vB z$r)KhHE-qRxtl1FMx)u)NX3BzEZa~{!o(3|M<^MoU*=C5XQQw?Jvyz_f{oNruy!qL zmmMQ&#JNlvF`N+>TtHUUGpsH$F*rRFTUjZMRdv+VNK5^2B~|_zTr$3%XMge_pAuJqAdbmfhF?rUG-nu!A$A}xei zG4rWAKFfpmUx&B6gd_E>xT7n>?QJ!v>RQZ)WL6mDeuf@)={u7(Rn5 zFTH>XgVKmFdyQF#-hdaA?-;NAY96uI+{*)>{VaFf{sq2$-?ik{*KuTPA;(i=*mL1&tj&_~nIr*E^``hp`}V!ycBuGM8%q5QdGP#IW4>(D00a z4|l^_o_cf>=@ZUl?1<5foi%}&##NM5*W$8dGs)9P{{9Mr?k2XbFTRGljVG|}0FAy1Hm+)whFzKzgj?9WqlMH_SMtUCzs6mkzJt5(`2v?m zwXK zvIa!6uV62=t!^x8(Py_?8tmbPfTc047GhS5W)(+UdWj!BgIQNx&#jkCV#J6ETsJ+5^(*#J>rvxjJw}JZI~KeT6AVfo z>UA575F6)eA$5=PzbgOLj9Yonb1&e_U%rjm6TPf>axPW9i3}Vzmhn@kGGtIR@ilW< zxUpV5sNZDGCxg>N*h$OX+)zzvWfi-tDycrYiAD40GjHK`qGsI2w7daKnLeJV$YxR7 z``NlpTEw+Y4Eoen`o;aZ7#vi8Zz( zwAh^3rIn@z?zL6!VgA$q;F+gh;MMtyShYEyqtzYZ71`CGYgNdr3PM#zD#wV0VyO~r z{;Fcumj$KrPs3pnx5aM0L6POt=WH1R%E9RgDr@fc<);4;2lzqys zaI|Rt1-18SPs#*t`_2zJCvcE8ue`*ZH3igrC0JEVu#3G-os2nu5}AWU1WdNm)3T3EJL{=+jpxFPui?UoRV-b+ zo&7Ocj2V+lpsa{8uM?8uQTx9eJK97>lbIDqpuUlA7ucN2%<4s-wB4iDFAG z19R*mcsvB`u?!wK5WAEq!H7Yecl}JJj_hLZOTXiXKYxlv+l%o!Vo6C)BGPtxiF}iY zsGh@fd2wkq4TpBJ?5&r1cHRcIZ`()v=7l`DwlwrED6{G%Q-^x>Sh|!odrI*co6d(H{~`+|=v1Xk?Oju>UtJjpp>_;}LeMU{KrSs0vlh zj8t2s#N{%0a2`_!XOSi?sC$0=Lw@wbuXDrfs~DGMCPrF$({f_y+OwF|TZ(Cjy@=b- zNyL*fk*mhW5)(I>+rRcL9{l0A_}neGa^AQh*D)VMFZeWH{o0qfdG=_W zo?h{fpz?rJHlF5ox}_B_n$WP@@SnwwC2cg9PwrvMODieua^o|3sNA`YQokL?fL!w8 zOh#oD+QKe`v2Bo?^m#?|?~pX~xv->;<+g9!$EBm;(BfD4(-ZUA-zoxs#B46lvyd_J zYQFs7_xaxU?&sD^FJr=h6f#8UXO5c1`5nvo-P7}FNxYQvrE%bNCNOf^M7r{~v1`Xp znsSCPW&AYGzdDm=AA6OExIBjDrja#vJemFyD);YYe{l=$fSZoWW8@#HC4KT35*?C5 zRK8RBOb&B&D)FiDq}zA1Y-JH%s|AlVC>LxzM7uOtOzpL}qH-B|&HX%Z|2(xl$_>K?BS#tUAjVc!QAo3Z;)*6b?s^Vv*h%5BDq6*ySv}BKjs&C*N*T?0 zW70@Z7|!e)KhM{H_&pxD_inB^Z#ENhtfBHkqxl4IYK5KgB1-`ol|**iQU3hUm$~E9 zpXT<@JizbXEF^Nu)!h22X+-aQgfHB9GdJD*X&zlugv%4e8;D`TIpc_rO(8lZhl!U> zBg^c=ZO`ML-~5JgjeqBd_uRp)H{Zq&o>|EDvJNR&?AV+!B*v>v|ATZ^7O-x0J~bU8 z>{Kf*qi8I`Pj_D6i}o4@7Rb@dEYc`3qb zRM?4AFXLR-G9LfsADOd8D(OHJ332g6+ie7$Iehw&$GAOX2S5Ds=egrkxATKJ6{OF) zn5(atOs2zzEjo^b*hqPql(;h!8J8gWG%~c?fRX1l?~TehHsU00qa0=&v3Xo@0hlvr7z5Iy$sRhD>^R7pbPnkeCQ`><#$ESbPp&tgfBfh! zZvXUMd{Nxw();=1HN%M%VGtFcOmu_|izy(&E{hSfF5&Jkolp6n@8$MeZ{@Sk7cz9@ zXfh?QS#7->T=g1%`p*5_`@Khb>4=kS@Aw>p0!LZ9U;`yB9uamTZa(&c$7IZ4Z7<%% z+A=Yn?#(`qPj$}j=hxY<2Lie z!$0GN<@>4Y^kFv!429kkYh*l0aWTdxU;}CRn_@?C&a43>_&4#`1NU+JH=m_7c_@Ph zBw@^Lk}^I%Rs_A;U)L;x)fp}4@z^EJVsmHlnY+ib={Mit?mHf1ONX7*!MS8h*`bC3 zM8u^K9~s&Q)@x1YhHw9fi<0&+_pz^X$IZ8L_xFCzUpE{lU~0zMCxee^OED=} z#7wA-rCM`JWXWH-rk+%fs|wdxCP4i@;U_s4FRE6b(FzP-RToXhMft4`^^Cf%o(tQl z%qxGLv|ICGaw2Y3oEvGNVm*AWkaH!=Lg^MVs|=pJeKKw2Ed0E>FX!r>Vd|uLmF7xF z8ODwCuo*cwQdiEE<_q;A_C4Q+oT&@po;Aa)It@K+oQDXzXV`5#ApgtJcVB+1+oAjF z)HsvVux;UU&A-PeFZ$v#e69{7ugDRabQMkubr{CwJm90Jsg%O`f8p2l*YVmTml36U zP7RC14#@yUxnkI3SZtI#>Lipe!fuDtw$F@uMx7X^M#CX|&miPCWyY{W{Z@xzCTvLA zX*?V{RX>gLu3xY2>4F+`9SYyOeI{Y*3%fcCMUg>Y+MK+n;v@8~8NZcbf4emwCMV)nMSb|ZFWwE*eRVB#625Po81zpY^{??cw9kNH_MPTcnv3z1 z^qDbi2%Q^+zB=u@cj8d_McE%Rs(u)LJ7K)fT9Czx(-J^Z(@? zaVeqXX5w1dnz1# z@!uB~^}Elcx+ceo-+l3+E*XFOyK&NS7O-1NA;ay@)a^T|L8@_^4xS4XF@5a~OX1qiAIPP^%H8!Jbh zK&8A|=Emi6%QJx!6++P4OGjsqvDTf=24@FqpHPd*M|XP*O^x-&R&>oR9rSua`Qo%e z{Gw)ETF;cN;?(=*_t0g;djk#i68H5DG_|zT=?P-BS^I@Ew0eKQ(@lFzqhYq8vDsMG zBq+6rN<+Mzv?zNTTj+90IWEtfNIsJpo0?_r?!x5_?I>|-kTes2Ta1Y`rvM4Cs^7Y$ zT$3W~BSI~>@4@ZrmaUI{;^IlZwsqG;Ul91nf-r>tp+B{?UD>_jIfQRo3*4}0GDDZeVr z;M(!&Miw(kdYd|m*}8TmD|a5JJ8mFDQ=QoDKJw>2$~PaHN93rnWTnR8eD~fdnllPj z>H50r*zwP2d3w&9ELydWO>5S(GygCZ!9+%k$iXR%zK^{ukc=C2wbRnnz|mS4Ny*Vz zKH&wF+CaZ&{~LVg=YL??sts)1v{{Z-tlqGN&AV%`+LOr{oPb5dgV_%Cd)D&i3(qoV z@iJDd-ze#{m7P1viJEa9LxT0Z{r87?`mNP0U$~5|C2iQ^lgUm`G?pC+xSBbXznT|* z^8iiH}lC z<%Dm42pElDPZz}nt64h#1&U%WWLlOTukHk1kv`UQaY`o!xXT@+(uB+CHTvwt}_3RjSh5 zet7UmS#V;erHDkIdR}dHWtf*T#IP@X+juTiW+?mBxnFH*C&i4rW9o?$j zm&j5^L+Nrd54gjN6Du160V(Sx{e5byGxe;BZ=+r?VfHk$?w?Qa$9a3GX?KU+6+2I) zzdHKYBXU>mc+$V_Q3)2x4C2PgXZrHt3B-(AJ|!UaTT4f$*crYj&-o>f_T>@v>nIbUcBxeIy+kE^5`Br&A)PLd+g-8$>gW`=w|Y(olH7+ z21yZ;F~u%RXC(#4>ZtQZF=<>Tf&Hs^{OLJtE7;4-!{hHM~irBTQirR{O9NfQ)B`eCwo;jIROK9&x&4-WL-?8o3 zS`PSza_u=o=&Y}%sG*DaygV|ULCW?lWm|A6w@uA5(%RQv%EmQ2sCVQrV#Z7+rdgzN z>}Ho#n%io}asPvtP_=kH-i$#crzaC<3*|-4nT6FFpm_B&{9~Dq+kW_UE*O;sHWri4puLC znR#1}QC?cYzFpf`wO|pe*6*g!AI~{s2GddSPk#CMa~vtFV#n64tXsaE^?OTb2|7tn zve9;U8GrlLCekmTNt)e9)z-Ip^^GFh+%=RJ?_kxcZ5$}6rMuTfeAW=+n)mV68*i{` z+irGkSj(o}Wz_p4NK6XSxb+pD{KsqT-dVwsqDHC?E@Q>k25dzi;&d-d?bT6}$4;yJIVF zui8SFGnY|=<0)G9SDyXnDt6`XWzY6?tXR2*wR@^a9W|D&ZBOyS{B0boY@k`vI5Ra4 zUu7YimM`GV#Vgn@^~;Wpt603dn)IAOq&ZsI_15dWzI;7vH*Dd^krJxR$qdPip=|X( zdHU74Y%M5Y`{p&Q*l~=`U4HJ$9!MwPxhMq86Hzmaw~>!p++$ zs*mB4&p*JozV!uW4)AkWD*ky(_fq9aVd9i2jGs6H4!+1MOZU;y(@S+#D={O^11N7g<5O& ztzchk6iI`}FnxGDUYCa+DX2E@Jj~eZuVL7TOSt*cD2@~!=4eS10m-!QnO!uWVB}p7 zcxgObMoa7nGE!_<&7qz#L&nPw)dTOU+sG5YUQO1uU*&l^EYCLUw@>#R? z2(4nayQzwbKqfbR>Dzqg$9I!gS)%CyW2p5`w-mS-Cgb^=Y7BWe%-2Db?4un>FK>>ueEx2KTmgT z!*HYgK7e@JY}dt-hq2rE@}9vvBZ%+`e{!RZTCGW%X3T6U(+byI4Wv;j6!U9#Qd(XU ztp`PaVFa<|Y2y;->p4P)+bMyhRLKSr3SVF0g9_Y7y#6hF;Z2h{;gS z(V+P8ST;{Blv1tyNP1jSk`T$zJ|j5@FgP@-2Y0=H`;c76_ET0Se_;K%Lhpmsm)H~V zXz!8c4HKm5WUKGdtH-(HnSikQu}*T>)c6t4eqPH$_iWqw{Q1-)&D!%4kJ~|zM#B3U z7rwRq%85;G_JGuWV|&T=)YIc8)U+pwz~H(O5UAzEt~{DLa2Lkgn`E6SRaxSHEzxL~ z&zK<5@$`B1^`^9;`*(R7>dsR%zobgbJppPh{KOw6vtgX`pUO7CxVDn5b^XX8l z&+9>b~`F=XYSI#ZHAnOw)LU6RojY*4}7W!mQUFL66hL)wM_M z&VV_dvXrJ5>}x}F*Y)}BJ9v#QOYIl>)yJ8pyNx1iJu{S8tW;fAL`zKXo)B{{oY+_mLP?$)-|TH{Nh|cZ%!yechDl+qc6r5^GHL^Zq}GX zeZ63orcpYhR(wax_eXR`dL;D-J|2y!Fu`v}TU>8cR2B8=$C^6@M&U^1PEu@;q)Y`9 zBjLph*~uZ*FxK?+2l&UUBfKF8)xv+&jbDliu>mAxidmTL&)tb3NmQ3;mWmGI zfGTl~jq2i}Q~H0lJLoSZsIDYTHi^dmbSLjf#Ve5-CZi_yg)NitHxs?e5Y6+tQ*Yfn zQdDO}Fhbp0=Ftnn31Su4kluH=-hbc`_+o2$A=X{l5u*QSwvWT>XX~d=)YYlp{zw=h zmin8ui@OM2u~x3hC!lmiwR{WX-e>DMkVgka=#cqdLU<@d>i6$%g+?}L9lp=g7Qa#$ z1A#;@h@CDvaE@i(!;A0eI7lY9dQ*E@o0ht7y)WdwZt8;WU;I#PFY7JvF&liFS#G-n zf>xKMg3u*dCmx*O9S?W%g!Gg#*bcsLYNnTj19#tAad>};7+%@RdMxV=M)zQ&oj%ku z$}nW{3yRV)2$jF!XU~ul`l8t!WZ(Jx)mht~7;Cg68Op1QQm2>9$$R*EAF$m_Ce!ZB zP_+{m3L!K6bze8|-okjalt*EzVH0zG`?mG$%3)$=voD_6cRi6LlEAc3-4g$FKc}U1 z#KRWg(tur~WF;Vi-9cunWf=FxW(QuJ=f+w3W|n3PpoHp1}8jBfk;FB&b6 zXAbryXUcib%@!x8XsKc4x>ucd$FcN7<&b4TYh^@a5+h>+6_YRA()LmC%J%Qbw=pHh zEbQ##LaIycIFHf+vwaL9knFUZK)8c6pe-8fpo+eAw#x z8F~2?$*8+YhHIh4_3o*D6bf3Q1jJbQt{d9nh%CVEL2AvJFG3b>5ry7#W-4*lYD7y( z?8Oj$yB%b5SwPVgE%68+)&C8g))i;RMYp!iY%eElSkl>sucgam5aYOKeD0=YGZ~Sa zJC{khRi9x5lN-%(CIyW|X@rcSaQYBx^_QpMvT#(W?RoAQ>@X|&z zu1PjyTihcN@SN59JmyZPc{;mnGbfcK`s1JUO!M>ee@vlH4oZdfX*We>n9tU^c+$Zb zOOf;*xd*+n5)qn}OUsPDiF6ibv>5n0v5{9TL=hdG^6ReLZN;lCIvj`He)=cw&d9vb z$<@3hZi0k>Ka8>jPJ#Pu?b+S8j{EMmWHyV>FmOmZ%JRDn$;pksn#NE( zi#;O=G<4_6!7-Xja$%$?*BI_vIi1q!oK|`uL@ACNNEq$isfNp#>nsi_9`Py+oLHuD zE zZdzL8bZYdG|zX75TsRqeLVo#n1lBS!q>j$?EtjS=23^=YVX*HlS92N$)< z9j=5k%jPG>^_fZ>#@K91Wpfrpz~Xz&+G zzakmZ3UEBZ;cN{LUzV?@``~I_mY*RV2qk0es%CHsn$98dNubectcca>lRSO$FHX|B zYP@xY;YbI2hi50rJO<;5XoFlo#qzYe=;I*unvW?1oM?eMWg7jtj%^$oR95(}Vbyw!fNFi;e*VD3X0a-w z8WuJXt}B^k%Zo-StuLy8gQrw!2+4uzyBlG0ew$~M32Dj8+oM|Qsf()m>H0#R-*mEW zWBdiJPugH@Jcmp@wU~aPJFx;tMKw3PL-1G=0rpR;N)}KW`&vtK$kA+$*miql1X+2; zM~lIcB!Y}5V@Adk7K(z7*7GK?O|N2^T*$gFMkPiU6?C0#wz!E45IJM9A1!Uw$T+Py|6F^U-INYWDT%KoA`Tw@04kiBvYR z2Tn5UtLtd-bP2?UJTSbv01|oCYpOD>-ThQim9azR0}@Gvj2LBATar~(Li5}}oaTU@ z@prWy@Py5K(F4wOX@!~b5SN{tP(*9%CPrdnmiHP6dSx(0EZC&Sv3vY{JQIVQ(Cg*Wgy>0*fz$J z-J&Owm=o@>_FRVCO|WO*u9s|DDP<|RPWd7uV}Od9^U26U8pxK`yc@$kzZ@`ZO-jS2 z^km#MUEsDZzymV-fNJbNS2R+3%>|~=cSd6M8lRlh4_~eW_RzVC@H#2j^hRZzs<2Od zF|6@>AL3r5W>;E8D@iW*Q^GpQe|Zy;wHk!2mcJC4bfFl~x40-B6hAL_ycQlF%h4dw z+#A75OGf9$#r0uMKRCXgX)}&#kzBc8B7wtJ^r`GZvqHb*02d>v^gtW9$RB`mI3GzJ3btBj;?H-i5SpihwUAjIO~ z0lNsiAtq5ezz*uAs%izcg|C3K=V?qa_zm*6&@g`b$Q+p_u_!u5eQ?kB7u-e^Q)j(w zDe4a*rH3n1zNn24K$SDX87?cX$py<uS)wM0f(uisn)8ZUUTA>kv&V)WIzHw0Vn( zATu|7>5}ScIV#-Il5YuOrKoe&_a6w=RY!|>UkUmQ#kNhAvd$fNq2w)vF=5@J1!CM$ zk#L1fE!q;nAZ99t5YaZ(Fs@N*A!IaJFn>rKZ#Sglk*Cj?v!*n_-VypY7GrF+Ia6um ziLUQiqfZBMQI!&`MDVfaQ^sG5x_=0HD~>}&sGuS&sdWg;m4B|7pg?;0I*uuB^(-~E zZIv(0W1y>3^u18TlmX-Du! zL#<5Z+{tQU53A3e(=E0%w~7#L!E<`2gvMN@+m9*8%cpVpLwpDAr!CrAKfNNdMF_|M2=LohNAQHLcbht;uA^qt%+$kZDORelLh8^yQfHH zpiX^p_qTq%v4&QRJG~5mEDdeXE{}H0Fc@ij(w;=xIWf3p_y*>9oU3c=$SIZ1p~-lR zi3XyK5K~ge>KM}r;c0EQIcq}G&Mp0Hm|Y&3%~BIoEF1ome3EF#)_(3z_|#>n;XYZR z;SI^NsDLuO1441*n*5%GWX?9LRtFnqmwp~QFZDxK=b|7dx`)hBXX6YjTPk7jo#&i) z7QzNq080Q0rYVM_;%?o|DBtB_koQj_Lf2^ZN^oi#?=2b|>z&E`C0yry_o}PsJ$|P5 zreUU+B}RW5cd}a4`4WoN?gF0mTI*ruPU`7%f+KvH?L9ff#1R@r`ooCnDM53R<4p6_ z8aYPBpPT&Qd4$dsJGDLT^!0}ik%Y!u+mIMCXTqF(X~MJmTE}B1uD+%IxT+DuvAkI{ z^@cE^sxJn!Ib0vHoOE%3Ax9wA4%(^7yhaRpuz6)7iBpwY7a{`|(*Z4{+F;u*@#QiJ ziRXm^(%Is-(MmD{agC@5;HU7~R80JmIqaJ?mb<4@GgsgirKb8imDk?b4auhM7)0}a zCSUC|#>9AaN%lUnqVzm!8A)b~hb`)T??(~-zFp_1l%Ok4FF663*8OM1q?b56=E#da zM01;nmINY?N3E0g1Hulk(L-Nk>Op&cI1g6o3wnn^QCuA$Hp^$I7#gHX=%s#(8Tg6vsmBvh;Y?NBs8|#ZqP^f({oCnPy956WVlN9= zk~)sp1!@OO2EE4@xAPwa#s*{`!?HqofOC$`{*__Y8y6a&f09eesS0}yyD;~A6f}ix zHL)5Z$!diSn0M0g&2H&+?7es>8jz(y`8DhH{j?iDPtf^MdnS~Gq{2QJJCNP@r0uji zy=AO{Cddd*t8j2;{XL;eA#mh;2jo;zGkTAf3lI$pC9|G$pa;J&FI^Te*qCfSA2C8MSthV`vjm=SFN z#~~|QvL5eHSunWMu^B26u2}ODYr8S2c&RJ&l~d^+)khN^&nJ3cf)xM zato7Y7Kt7Em@6u&uDfwW7Bgy7p!&t?K6h)pez)azoG1K_ExO1Dh-d575*zPg#Qxo19b%6zfZ z9q)-D6P~Y0@AY&t3iFHHh$yGJ_^P`E%Y?5vrK~u46k;^zPi?^E4kgO}@Qe^k2fCBU zX7p2kIU-{MhUK6Ip%NwZ`3%5}xO!n=oM1+t&i8~m!VjiN1 z?HO^4QTjDDS3E3o9C9hiVaUmyIN;{cy781oJrKa!h6C%GnmoQN%dRP4~|9YdJ$k z3CHsJL+X_i2AF>v?Bsva1-A9ir;K1O(HWw%K8i_5Q1)#UmgV^oW@YqTN$Oc>sg(^E zABKK**WqGwX1=~Aw5Wk1SNn95wy?l5p1-9LhJoaoQe;T@{lQ0|T(X?&Mj7a7l6Pe2AE9#SxEfWkwfrpQ8^m9I|g zMJ$*waXzM@c3#oR=6=soO?W{>RXYLE)#+wqjw;S>&3EiZ7_x7@h*`shzl#<`{1Wu^ zB)ytmP|Ol1iXf#UdtSJqw84l!pR+9?V2Y+-Yn6|xUit%Ig0#!!rQ$L*&-p8O#K6{A>EXCN%@MWTWCW z`DfGzF}-wD{*bab5r4s_J6jjYrTRs`IZNVOz5|)|*no&?5ut!C0_x6V0MTnq_Xc0s z-8Avebdp(|;sza)$r1R`wy5M!Tco|EkL@V?{&7PDPq(@54;oW7ppem03)6t3U7@tJ zWl7E7PMO|r?@o?%kt7{nhE>W@-knQ~FZ2J-$*`CQrwN;X^ozr%>>CH;Z8!O}#r63L zaX&P1;#Y=zb~fNbeWox<=ZX)@u{AT}&SvE7vB-Jev&(chBG@4o6b-HR<|YvbMGRWz z8e}DqTQ8z%p4L~kk@)t7%5p-%dSxP z(o%@FGaK9pir^>aXM=mXp4g8@v@P`SX=vS}Quony6Vs?or(en4P&@$6{WA;mQ#d*b zPSJhOY&-3SdF*VW7QXL0qDZBnw%!g}XlWayaa)@A=;3-bmqg`5^vZ%jBKQW&>n7+P z-}H#hXc5;_((KK;K2Y^~smjG-(CA{gRRAnw2m3^*0p_{7x*9*c*+}?~i@1jHrc)U< zg~+)Iv8f*`bH0>9ry1#zhll=Y$g|twJ*xzo47*{FbFI-alaunzMs-Lvx2`e+6jb8T z_tuQ$Ezc+m;c`zFkt-e~+CG_$F~|h9WG9;_s*QasGTAw-Kino%KWFeC-jed=4QCYI ztW@;uO4n_*0c-m6DugVq)8l=N*C0w4>`cWtPLJmBuf;YJRPnvypJz`EPt2<>?#gJX zEsnZqoka4H^!vys2Sc5Li{+VR{O-U*me=k6BA{mNFKn<`p+x6tTubyVyLMp&fD+=U z%}a6aCoEqzo=6FQ&6EJkZ6iS6L-W2c!>rb!;ZCzpPl~@Hld-oh`IuPqb`^Ko(+;XF z^tBQ2D(-gWDmD_PjQnQzB*7hQM<|XvB88dQZn_)AurMdD&vp@b5!huA!(qZ)BkR9B z2eQDTH z`C%X~a5!=n|7pXJwnDeF#HRR+%3TwnJtVzt^lgc+Txh2;I zvO$lApCe0zD|gd=rY2?ya5N&CGL-@vUd^nqM%8o~lgqAp*Ox*JyZZGj#N?nzbuu2iZ z4f|NGEe3Wz>FNJahwvY;E!bAR9#vHT2IWb2zK{EMz!kx(|*Wuqv@x zuuM{=&?}9KTi4fan8FW-uKg4TT6Y-b_27J_9qRef;IuQ=R7<@oV3@HrT>Q`E1!#P* zE*Bg@*k<`i$07d~i3tBQ9T(XM(r=0`vttQVZt%~cz6i`j>l(R5m~*i=u?76QXg}(8 zBjbv8Rpx8whkkh~?VQ$ps)ipFMc7ctlI&hTDXqTf*PctU=}cRszh?IENghOCvQY6k zf}MM)&3KR`g7IY2dJc*J!+$APwbDPgqutg7j2-hJSRD4>X)zz-+8EX$sMQ1*`g7X!yjyYAug0-IxbWd7LK94;k-j6Z^&$&if@CS{RbKVD6tw4@vqjHTeNoK4pe{!88 zazB)1UDRoNL?*Hm>1*jSYt>vnJA{5<7ZLhqNy}<~{k*z;==`xz_Yf0R=DJ5ZeK4YF zrLP6X$ZprUqubc1K(_vjQ%hy0Z?5cQ9sc#!+{^8hRWhn_Jw-%2r+PA|sw|a&_I54Z z7UtID8Ln_!_AePq;5w8~*`pEg=JU-VH|KW}<6t6Qy;okTfPZ3`CFwpx2 z5?czSO~lTp2LHz<4{LE4nJ0Z5j2DHm&I4Q{O*^_>ZBL-~!@=?rFKfh2>n1);Ngrv+ zf}IJnz1E5^&=E81`37>g9YwfiK8upK*3!wy-kF(Q684NYW0%jIBEk2lc+%pE#269q z#lxJ^vStv85EvVdy$BC*q>MKHLXxb8P|<#2Oo{T^Gblsobaum5_kQD_6;DiY38{Kl zNtT4re^d>LokO=m1n^`!4RpH*=m{S>wK^O=u$(s4@WYBLwuRWCGMghxE!{;!gZLB! zjk^T+Cm)&4<%o7eqPb4R8Jt&lcP=MknjfzXz?2&zAzDr^%Y$VB{2`=RueTEHC|ao5 zrbQ9nV@R9PMxEm!MVj`-7=Ud5@km zIAt?|qIGF4VK)>-Wu8utep{Tq({)ZzBPOEYkgnb-P36Tm13=wO-_n+({o2#5Tp73> zC0t!6b);~E!#n-Qj7}NpCp|)c!%z};x-~>BgwHEC7ISX)$n+B-0JOR)R_WJ_!7Dus+%N+PMUtW z=1{ZvNYWa~KPVtlmqLGrNJz*w~j_P0dW9B6{SV#NR{2kH`UlK_b{R zUSQ#qr+^=jc?njG%#6c&m$IKEN&@Mz5lisY8p-!8c~8f)wC zen0(a^f8uwczA2-AKPtAgwRp+lZLMk0z{+}y&eWWIJ=M7?Bf3F{=a!$;f-ij$d3-} zOG5p4i4EnD(OU{T93=8kv#@F@;F`}gI)9sU+I))!o!c8HyjMlFIlWU@LfOs)1aBHY zCUc7RDDPvNW%;6gg?tcT~4`aZ=1( z0`H~AK(9Qdi?Dy*G7~$yl`VMdLHoK&qT!WE!-f!qXvnbC@{66e9sMEc5sXzTLK?e#LcyPxdJ7xnU@ z>~S9ZyGN*aKY_-qr=02?If*12ZSFgnPb{h-;kIkX#YF`bwCL6(YER3SQ_ij-(&3C_ ziq2N6#`ff9&u^lFQ5ZT_2+bshOb=dO9o@lv2l9pr!ak;TU=903-){|Y@ zFJZNJ2}*dvMlIY8eeGeO!Kc|t;7ibv*FT!l4eq)XB>X-<7!1Rys3+?wr?h$G8=F}| z?PavOx1NU5cDJk#e$t9u730=Q#=~X5W3c`AQHk_YoGcNPdjDPjyj_mDD2gj7rselW z92Fpz2`47aR}40x|1c3@ILPzv+T&i{6yIaB>S_C&@9eSPyMI+%eWBJ}A$uxaD{3}5IeTo{;C+)sPgL_}B=!ihv$mj7uejFB<0kjb9nt;rCggl45g=#X zk{M>N53+DUYMWjuB7Thjrf}nmyk5+r_|40GNo%u%senSs1;l#ihYA7-#iTBEbs(3e zTu$ICozmnq2p+{P@L^|2hKj+StSGiWEu?(`&iRUJb@Q+@hJ!CCj0~amE?y>|UYw&Y z9{FAq_;|136a@=ykB?9}5`b1s?^|qC$Sut5f*_NAonRk6uX|v-RyMC@S=#HnWeQvr zwdBWkKfb52U#H%uYXL%-rCgwYkk6QDW+dg)QV>vg>IxqtR%%1oTRHg_MkKs#&z^=q zX1cA6bv0lP;Z0$GK(!@ARS^G8)uTu)UphJhE!e2Acaomgz@l zbW_oAelhux@HNh_lh@GL)X>MhbF;uW#&4DPWKBkf!}aO|kUZv1pT@D_kPhGO>OpUN zcb~NvIV8AKOI4TkDGy}$s`Zt;HhrGA<3b9hGQ#QQsW^@=6zKhu=l^=jmWY+w{6ff% z75?2I`aVvd{$i$}7fhKrHV(Y`4v3&;x?&6mWbIM?g5aNMxw>KgOxFEKybDxS_C;FU5~^8ZMNnU= zxZ0ES1|UwXvCX7{%0NPwz)J*kvX4w|a$jdJ+aZJ<$a75|kC`O*TbJ1Nj*J2{V^hrP ztLw@M;vz_PKjd_~`$Vo7aRrMHBFksi9a5;xdunz|rKT&Yvm#xN7L_9pg?!JV3LkZh=+XdKNh~n= zv!9*cTyMBq-RP{D?kqhsGRZ$M(%4_8Ald1kQAu>ndOCC})BD3btft{vK7f6!NU*I zsJa_odcr=xHpa$5EtI(RV((be?FaQ*vz6K#MBc2Y z@}f*>ryZdz4^|1Rj@^A&k_T&0y4}DUCXsW)$vi8;_MUXeWDha0wN#zFOCU-!!&>#JyL zlEq;5KdubF-(Awv^v`cghn}MZ=1j*tc!^JkA9HJ~0S1}U%mo+}Zqw@IJ!J0&N8W$Z z#bO5Z$*6H$mzDfB8Kd|UM&^QJNkt(b|I9lWgbL>h#5W^ow)LWrLLd-?hYinQe&8Zm zJ)EDshem^;c6j_OK{>#|< zD;${p|5rE}T9G|wZRp7_{C*IP%84BXm^0 zDB^wbgS*@EL02b)N?x~5KqVyHYO$-%*+e%lH)M!szl+*l>Xyw#vP>$kP(;BBqCCnQ>AY|>kOM5N3o%qv*HNI{FR4Jmf80q$^EL2vd)W(Fn{}0mvR!S=Q~|s zK-RavE&U(Y^%#2n9~$1D7H|rVcl~>}h#e$;MBsnAzzq90(cj+|e)@kB=5^35YQ&az zuh|zgH~On>C1U0SWmJ@&`pm0q)f{j9?o?qbJPM(~^TYMrvD4-PrKLu$ZPvcEYgyl&bmr!-!q3y* zKr^x_l_k)rH;ykX4E2PdMZf|V{UZ>pot@c-lNfe89#0Up|GcC^_0|iRno{GjS*+C# z(=$7C&j(HjZ*OlqI5=Q$SRKvPG%uf=EqibKA+$vu$(J91<-H+&f&rSnet#E0s8fX`|?5Nx#=-t;~uDU9ZP< zq6ovVmSAjav^3i6i?BP|u`wkeAne3+`Ku+pfodJDBa_W6>|(x|-_$?CV!FC*lOlhIdqIw+%+5R=LaDzck&0yZa;Un;Q|Wze}O9 z>DMe&&kF9X3$wy{8@x0&>zwR*WHH4hf`)jd z+3|^K!SCd<<3XKeA%guhdl&HAssB#NBx>EL=d{e7n>MuRwJ+r)y@@TqT3^r?q z?80Tzk0IHJS8}f9J_L)6)%v%@Lx)^vA>+UdK4-Q6y$l6YZbUw$Q-y_`|2ERApwPdM zyUjbrb2cO8Tpr+u>Kk1KERK=SkULpdYBe_k9LB^&<)>Z(0xL$dyjWmd{xMJ9t*AF_c<~fU}NUW8h4;sH>qBi1*1sNQ-EUhO&qDR zR6q%QLu0*@wC3b2@901|+=SnSpTr;A^23uhsm5lI?W429CZ|Jk>QoF;)V^MK`>aaG zE=PnEa{Te4#IGEh(r3nvTZJR9-{iX1o}Uzw7Z(>J$fa}h@}RLxX4t*Q9Q2S0Z35o8 z6~b=@^T6-gRBg1OAC!_}W3Zi5L!`xQ24|hVtSv4vje~yA2#A+1p3gz?^`rWCEz0(@%eUtZ)*e}>%e?XWRdj`1 z+uTORuxD%v_W8}>g$IBc{5sohR;(Dbf?Uw;{NMA;enFQ__hdh}VKJ~DM@qq0${+GL zJ+Ft!N1!M&*JjFWPGi@6x}Ftkbcc)bvWBOTv9U97(~UmMIypBZ6gAxAV=Lc$V!pZ| zzqwJea)Ap0cSP)HF&mk~It2waJ_vj~T@ZFngGnPl8ZqrNok_zcGilTb4JV^z_FXxk zapS?1Em}WaGqXr1Gs|v^i%euwBb6HzwOhj?-eU&_%LMlwIjvv2duiLnV@(E$#!U9V7gTHmmvH-R~az1KfKMWi%mC z&%`9ZydPp2RXJLQiV>a?s)i>KlGLxynPbum>RfxFV&rryfif(D-~H9}EXWF1w0va+ zTlU5vXZOHDz12>iQ?G0O6qF;gZ7#>QP#ki^1ObrrR|PenN|??DEn?H+vFO*A#=PD#P9frX?k2 zp6l<1OS%92^UgvH#IHb(&!OgLzxI!uoPN!HYcVabtI`sW`ndknRea4!0jonqrl@dx zz}@;J4wkHl^12!({#7*Bh6Wt@{rPL#>FB?EG%xR4ul5^B3T@s@7Gu`M)zofv^QaA` zcM&o*nWdWO3T?I}6}X?IbQ?cGStL$c2sH)fD&Pu)tZ9(QwCqh18ye5oBv^S;%M7g% zLHg|(2Coo?%*nnR0!6Z@6mhFlSup-^n8Z;?F;zY@xcAaP z;K1}6TC7wP%{t9FiR2&X6ahVDykHtuie0ugdDt`!6qotV8&@a73KEX{v?U<9FMU+8 zN)SvD_u;--VNH&&=HaZ|O4_%vEAtjZH5zEbZD=;cCD z0pifmP&n%@edm*%zVLy!gsA@AxjVPZgPY+98wtKr3*qO_U9|PT_)TzF3(UAl3Oxdi zzUpI1=_I%hm9OshQsREj?%P&9<~Y{%9^|Q_yb4zn>b5ZX#M#sOs>D$Il~%W`N7K#i zVZT%PC@3WLLzocB91cIoA72{2@eG=o;~RC2F$N=6>ux+Of~NBC=wwdc^}NEbOmqU} z-yy)7vH}IN-))Bko4D;Q~P+3Ww9B z&nkj6RQWgp1m8T}1g>GOP2s|VIfHbA(1J$s*@yu4;>H{@OLc*n%oaR6_XGYJa{WZJ zIWw7q1oo(P4B!Anc#$GQIv{@S$wm5;`_o)u?6-oi=#M!F!0q|mT#}oU<*@Gc_p6+3duX*Zypv9rW&LqCl6HXb`J~rlvA~`hPKM zp>Ct{ITlu0wr=6bOpLO>R-LfDxNKS19Vo3twZ@z3R_{?e5h$Cs+P7{j4DxYNkM>!b zSop6sJ(caBF`;eAi&ob9MF;sfXt5t2;6%~zZ28$|u!?=)uki(i-ZX!uR-_=I&#qVF z<5h|J&zn}nPQ4Jr_wxVTGte%#-|C3eJC3>F(&4`%qm*y*`mHwYJb=oKrZ#u-M;p_4 z!C7Csv9pW*=M{_+HZEnQ)l82kLo)3v1=&%%R+fhM?33!hclC8SCjP+{wZbhriY8%SP4Mdfm^pGW!eAJgq3MOPg{%gJ$aYc$59u1sZxe zAB`Lelp=8JPv#tQ99)+1HrJhB%)Zij4|@Af<+E_q=}rM4#}O9loXnU@89_a69| z%cPxY^F%?#pZA>#J+!G80${-n$?ytdj>?@9U-Iy%o z1ERE=z^vFWBsDCx0D!1CeM@Gnh7%9}`&4qzm!H){l%HX(FK_& zbz1*?UuPn2)q}}~T6`Qj+5sDu=a=sydg{ROmZpQoIsTy7SZ-kj?nOo7uUhp@b}&4* z*9H(7@e4QClU1Kp|7=%Hz((%9*QJ4z7K(k;T)c*iq*(vy6Ib9h>S^OK+kVx^otOOo z%w!TO%PF7u_|to8Q`LNO%1^fw*BpSj$$_CUVp_WS%?F6!2iyRGobT;)@!9vpr=anH zpN0koCW2~2G)%<*)sn3+KG0a$&bBAWp9${>t+9A3Kd#Z~l~JMIw6VF_4R*ifRk2#_ z7|j(5`_Eq(A}!Q08MMk9ShpMai4dX)dGr<=Ej7Sy*UtbJ3MhrG`YUt`8h&|xIN7INA-&bE}XSfDC$pucsp{5!S+IZ({X-v${nI392Mz%Y zECX@=l7R?P7p2noV!nOA&q<8D)RN7pgLj9h|50)ZTO!nlAVty;QlxZ0NXpXP>$md8 z)dimBj}GW;kmh5$3XO<*wf zYY0L@IttAJTmeVYu2v}0})vGsd|LU%&DF4czUn>3n z-CjGZ%79)~kCPqzYap46D~P{(RTqc;XoUQ)jphJ`I=^~FNcW%XHAEHg=hdrjPKczq zx`)AWC-T?q1>e&r($E~JnOUl41pyG4L9(^@yH|m$vw7@kd40FZ(vAz_y~3kF4S5^O zWthAK(}A$C0k=5)UM|P08xl>yTLQ7dah=OKz&+7F1AEzNE?*uui3;D$Dv>$%;>i5B z_?|m?biLp8Cxk;X&vTa~Gb^hxP%sewEmj;Pp`DF0gwKuCv)3v5Kx6>13v8jKre$04+5$Y`YaPzOc z>>w7;kuuP=oL;C+N;@^Y@G+LYn>{2DirfZ3tr`;xICp45bc7&yx zXB~AKwa<$wtJtbKp*_SAxM*RfNv*(cT&HbyQ+}Q9WEH!N=$DUBPbTfIt zMLf2DUAL^`Ds^m@pLC|-DEVHZyVeaX`TX{}`Qges7E1DxMm1oyAZ#$#-#F|?F-rat ztI#pRzT14MXlrov*E(kJWMtdC>9~sXrRC-QZfsuTu7KEnx;^Rl(u=Kd+E@XK+X zvKh4B+(wO1t`&@Z44e}l78OymD73=4;Bk}qtkaPX)LPfjNA4VzDY^aPJH3^ORc!fBH)C$2ebhScA+moX`ioVC!<=*kT9@A zGb>bk@Y!pyaw>|?$qkOa`W{^xFRKRPzHdDk{If0*UWq}YOBa?$T0ogl)d%ag;T~p4 zsa0>KNLq?sVtv3NtR{FO8s&V-aH5pO7dolX}& z9IwgWHpcN*yR1t$MyP(Gzpsp$Vr-mSEgH4K@l21=@l7(Sp5T`tx9=#=%X>FGokMcK zs;&LmR*Dd^NqI)(;uUn)zdE5ip%OHDNfa<;LQBV%bJc)vL-W_&T-^RON#u0#$NG=n zHq^IR@#ngDWZKEp&miniN!leoeO8TDd>2s=`dER@@T~>(&_?S8zdC!1$g5Sd@{wUi z)`@P4KU_QSf5}h4%eyiI3uq9wDkThXv|u`y_xCDwI-(R(#a-d+l5R^hR?MkUMgl~L`*My z0x90p*ooApK3|%rUwJgXu9#_6p^ntqOfdO|Y|E6yK4{PpaFn*~^eitdR)&L#oA!t-jNmI#AQ<(iU zUc@4)+7=%Z!kbJ;uxS{X0HO4vwqh0xm5^1bbNo(#>x|H@D@s1RkaxoExx(@YHmndc zhL1IRmeEI}l$T$Gd#$x}7};iPHCOhg#cPem&Mie_%I7;5O(|#fjt=rT4Hon5?J`!z zhW6vW!82}ooc@|zj89bO24%XQYsD}6NJ8e8q^>>K&s&^~UouqiBi4FWYBKZl7J@mI z2VYesUXo|u*k`zgjVgJRCbPgeh+7~@dp(_Di})vb_%-EU*&+R1X8#JcCoazlqfzpj zL#ZjK)*Ozwr$Fy|7wCqZG)kHkU z^n%SK*j%|1^2x2M7qpIcwDa-L4cYTGhR^W@F17 zv7WY-UlzWqB}UYL%hW(WB<@-iAA1;6Co(hSS%DBD<~KeCGXP$5GpneI7g!Su()&{j zyW7GURWuJ2g%x#!pQ}~Wt-urVKWQS^u%oeY6V2VsRCDc%J6*B!HiGIMaGK9_210ht zR@sRJqul@edce;W69T)5^Uarr&8KP}@JCN&f~~CHGaZxxge#GJ4bT>G;I_l-{+4%u zMhP9^Q^vR0@tKHD#hK;OlwocKeO05II;4vTz2cjm!9^Vs01-pv6%+g=XzubXLNpOa~Cj zKx#x3GZQ|Irgm5GLjl#;p4VW7&M=5toJ2}aTi1STcB)=d^?k@6b=;iP?PJUi!F#4b zljvAUH&jpkFByyvyop~d;MWe6V)Ypvf$|sJc;R=C9<(TtUG_ zZ0i%ltzEGJ2;g#}VQSsjE6Enxb-%F@qE_0p&W~UGhAmr<{Y#RhqAz^W6}-aRJX}Wz zWfZ_Y-tUVGGEyn+mX2T@re9HV*t8Lz=^_?vU?_=a^eahg0!_yuNIUz)of7e~SSdh8 zmTC{c$QL?DM&CC)-4AGW_2Co<#_!6q@{2QM9 zyiocAdWPL!NL4w$b;y?4i+%re5v7wwuj0ufrXmtJ+U>IN%rA{7Hn#4x>1e7sn+9(6 z8fZIlnUp6waz5|pL!Hlt8*g0UoP$k_wv9VV#CKA#>=f{FcXR7m+#2;eK4ZU^SXvjQ z-F`)`+&y_b-$;->@XO$2;Dc2p5t}a8xsr1Kc~(EODXjo}{h>bcyK|s0y(#4ujF^F&6C(8__vI zCRXjvz=O*$0k>TdHa52Cj|gpOR`(DsL%Pe@q|ZL)_|?jyry(+V&8GoFssJhLdDXOp z!EFahH9sSTWwBvXNxFP9c8g!TI}wk2pG3#hIP{BL0RYIHoVYPTdo!Dfr5d#qA$9zd z*!+ohcN2jWK=2s9h}goC9Jb72B7ICH(oS0Z0IsPvgk+=)X;SNSBYiBF?>Gmsc(PG}+jxx{Da5h&O%qkbaVPW}mqxrCDu%dAX(%EyNj4Wh=0F zboJXC3FAyrN3a5aMAbAq?oSFP60sIs4-MQ+9Tft0lP`V*WkFSPB*zN45o52VCA-?) zSYe*NO>S*`Q)b@^)eZ>>9DlmXm2phq!?L9(`us*=M|mxEs$d&r7NWEy(_2mgLS23R zff8gsp-j>A8Tpoypk$6}v!hJe)XM5_LXd&hRGedtlvUqv2~yYh$wm9Ei+n{Ve5dP; z>3!%I+D%kR>zBUK9wtmKn4$S5B!3e=9D1LpWDKFnqe0|vbGJ-ZYVos}s;$1MgH5fP zSf#UtLI?Cs2sPxOgnUu)^jQgIWso{YS}B6L?GYFi%UFcg_UZdWriw4}j&95uOUOlw zZ{)oS5O;}vQg-xS)b)pvVP6-**r_uR)7(y%2(X52Ik_v8j6icvEg?-haBlEwmd7Y4 zC9(V?6tyTR;ShiGwCBVPC^Q)))<|qWfi~_MhfX3_+~mlGY{{n@QcE96DgVzu#OE@I z=}-^QCuN$L!#)!dNx$1k(NIkVL=~E>ssR_dBg@zzW=<}dqr)NFf(6lWkQc7=F;F;M zG^I}i+Ho`M?y-50Cg9g30nQO37ty8rAI~d+@lWIb%+YaWNc<&jK~gdy$5^!HWyeV_w?`>2HeU5@ z1}nG*<~R=_TUqypXDYvee@v99u}2Af60TMIjT>DChIOCeRwC+mLC8wK!8vrkV6ZnB zVJ0mzAn^PUrFTrRd3-eSXHiXQX8Ek7(vr3!G8!~(P&k(|R8qw<#KuU&D-t@9A(zh< zsFf#W7yDL5hdoNG(tItEMp}o1b0?OYi#wbJR?^h;WA!=OM{|Jde^(D$^e**RLrVz7kMPochbqvdHyS4OKM~ zI-tCOj1nfZZ}t82Wr(7gh&b7S6uzl23B@tP;b?vbr$jp;pCAjR^`ey4M$4l5N65G& z0wHy)_|6i#WMWzZOU;c&JCHPgI3UfSru`HrS&!rGhV0sEwyc|JX?fPowk^g~6S@56 zoy3!9FzXNqK<77@jtQegF;cTSKKv-0vkvmIBSe|tBwB8-qel~LK=Z6D>*1X5FWbGu zQ1mJ?2i~W+Zl~+JxVz#tn5iYxZo8SF=J7^7Jb1ka9?QqZ;rY}9==zb)56M_{S~EKT zy4Bk`ru0@Vas1DJ^)o3I;RWEAZjv(;VMAiAg+FsYyp?@Qu`@ZM^rx5f1mRUJLY9s*m_;pA7GML9NN9OcVo5R%9`C zunT#cGqP0xr1ZntBiIeowi9=$cv-@FTu5p0@PZ%3*gU*NsT)1TdGOoQ{c2AD@QLOb z{*!K_#)S07uSFL8L|H58PM*BDB_qt#8{FW_2&^`pW#R?lAq>UIlQ>m9<%!J3ia`aw z-( zT7uic%(Uto|$h50Ny%Z$RUKgUk>x9co0!6W);pc0p=Z z9%~VQiU{@MTQPEEH)6^hm{tG4k?BZ_lnhK!{0zxA ziDs_{P={9+)(c{mt15!S6Rl=`r+F4hK4D-eqP<2#JtsCdoGm;UHo;c<l_o6plFTEG}Y~Amt|WpC+5|V_R72Tj|W@5=XfsHADn()K@=k?TO~Wa zrou$&)KK%(!kZApZ!Ik|f(P0UNOSsk&T%7&9o~zp@izkKiox>AX>+oA%KoU5!pruU zo9*HY#A~8!(NSli06T3P5bFswijZjljj`5NYRapjA*?!MAPEUbT0$&_EObqx!CgU3 znN4y`RQ~(EhKO&|xnTIJ2p*Z=7HXlLDAWDis>5xLddYI5+U)-XC|}62<$$;@Kc7jw z9#8~)uXwv&j;*871?vxj8ghMNWc+VF0@3JZx9MQXzbZDH$Y?&PVBm7<8yf@Cv=Z}j z!3DG#9gm>Oenx6)NTVE)YHkYE0J6qvA3oOP)D(yjn06um?(UIlKs#jd3Nr&*%bE36 zj*f;j7KueO3bVbTQ1itqOo<~xo}qBwz=h>)gksgjwk#|ZfIidZed1aYYb zo)}7&BuV5_9iDaw^mH>cuQ8|@8_AD&Xo^}aCI%f3=wX$dZ{p$5I_9IZM!=Bk96 z7FAqIzb1lz@d!;DZ!Az^H-s3IqoHKTT|x_5(V?w8dAapO=b_ipO=LS6X>pUl9k^Ye zbfjr+F13U2WNJh6gw>m@ug*Y9P07x`e3>O+Ld(ks7Ds~(3UHZq2z z4#_FuWz}Uh;M?K{nkp%~1K)QyW;Qyq`2J;(5p-{gVxagm91-hyvdr7Q7OAjnT@Qu1 zs}2+MLd&>Hw`T3{IdI?O@#zjiny?B{;d*L*s<*#DB27`XSKGu9WJE&E;hN^!r%=vJD2%x zhxE(3g1p$UtyqFp4}Cg5YUW5o3a>_m!59KKcCrce%}+b2H-U+IqCAz_g8?z7Ao-A5 zWS?wd#{}~{;gR3!lmD1f>7aag+K-z zM9clqwyp@Tqz77Hg$Rzys|zk?M9oWvY}cWAAo@)(U~shd9TEvA*H4k;SIAU`cAk#LFGoPa$Cl z7F0yLIPNoQ-ay5gMkS!w<a_~+Hl)g-Nnoc>H%cyb$| zLJSuZZCv6ie#{`!8`y@`fO_nC1V+%NR%C-bdW8HKb5RGQ61XlPqs}h0zk^#5N|tf8 z9D{ZE``7Ebs#+(ij6&(fhUdafU9mEtoL|x8UXox~0da_+mn5GNwT`hb(Z2|WvWli6 z#INa2J~<*l5v4!mPnk>m`>8>98$Y~PHY#$?_G_l+gCf0`R2a?s5~(EAu)bVlgH8EAT58uN^s zOg7rYlR0m@^}}_+d8?$)rRxd_E@RGvp!^S!I^TF5>UuQqS68JGu5={T&tTpljG_UX z$*L?eH?eTfI|#HJr|`-EespY&Ttw@rMhhL#ORqviVtMUb2`Zd5w1GvKSsqAG9v(6r z{x+Hv__=_b=zFjZBU$xCX2$QX@O?#3uCU%y6Cc7G8{gJ&LE76LzWKlUKG64L5|zC< z>mUM0S{h!Y&#^^IJAD?PYH?D6%?6*dtY;7H58FTa*prwj=}?d-VNXUB$W04?#FDi9 zXmu8ij>epx;*T6kkd?Ng2?c*`s)t*iP)vsx%G%*THbaB)aSPZ(8G?#TBSZjGEdzfA zJP{d8)Cnq;v#ejjo;Q^|n>;_4n9~aaqmq#-3SNWOu^j8n_2kU9eu6Hd`B>XH3x5V( zv9uy#aw|pAJ5OwLKG6i7PpO2O+DQcYVqiqcOZRiq1JKd9@Ul;LQi#47S)kbThY!Lq zl$7WYyfnUO_EeKh^(F7Kgp4BX+fWk1Slj?xSs6HMw{h0n z;y5@`plCkQdxUoS@nM0z`U6?UtYT|yoc!dRaE$I^l6OzvHzCZUi|Lh5v|g!xy?$OO z{RdW*eb$bs=bVED^u1q`73950$jQ>`%8oi<%85~-fzcmgW|sIRKDXU^u0|`$1UqD8 zeB9q^)LOATB8N-({50pZE@EbM74qs2ZV3MrK}olyfGUdfiP(6Q0Qb8`y&_Lu(tV%X zN8>zO(9KT+B6jEx$u|b{QuLA9|1A|8;n(-xS)?TFFLCO9xxlyn%I$9gr)26G z>oyEPhIjBm5rL`hiQEUYPP}0^Glu^G%IDOfZJwap5Dp*ehf$!C^WiKBWcE;~X~~{0 zAk_3))cswh5M7BPP8Y!}Q{SRsh*^W~eT&9>abbENGtnEFCxQSQ4 zuR2B1aGxrxE6t(QsLtKU7abNKQ=!uobXy142_%8BY4`-I5{g<-P++H2k(#*jL5w*IcX4^?`Nynmr%xy0x%%-MO|aIuzC7pmlN=RR@&H(VGSM(O7fyC^E*?Ci|?wd+g#j~d0N zQj=Tp*mmab(kq^{-d(EupyUD}O&-E6JL}!+q?3gXKj!}!|D*o@$n?`!8n;ga&)wb_ z(2R;14@wuBA~)n}de`@nZVDO& z>~V9+T7VPi_em@-?#J9lr<^1$^@;X1_tO^!$sX!QZhL>uqRy)qQ5hcj&qMQ+RAd<& z-IeS;2}=`>k6yI00DJ&`*K~LR>`TDpJFNkn^OavBD_VZXw^5&v0#$F;1%eZ!c8vpW z*9Ve)=2%|Vm3j?;jCH4?xg#9!72GqkH-y(Z7nINWsJ6WAc?jvqaG$>5Xl;2kPdeox zQkEtt`6L@xz1jSgTlpE?E{}4&F|8M>pJ3kJ!ar&4QtdW=ZjzCc=lqns@^Zl~avA?O zpbvT0LUsNRJ_+5I^i8kKo|0`FV>fz;w1`46|;+<2dB zwhNVDC(pj>!oDsy(M;k4Sdm+AV@4hb$PKuKA)G>ZeIxv;dw-_+xoIEpPvq9Nmm6&u zd1vT^Vr7@SV+8-c)ZBem$Ay`l(`a%q8N(bAF^R7t zC`}H>ifIIXk%E0~?Q^4CpH_ggavlVHCFq_OYZw4WNC-C$PQl^U9r=GZ|rnO}vO zgy1J`cy)?rrNf@Y{a;DUNsBcxMWubn?O`E*7xcP}Wf-`hV8;_mCWRsXtRajvc&@c4 zNRVAwhP>+X0&jJkAe?8frr}&tf+L-TSH{mV3*zJM4Aup|1%d0A8jaDna?H~&AVtO>pC zI>VkSxCOi$kn`T#z({4y18M`7^_%N^Cx0fO2L;bssc1%8veazt4pVV-P04;{mAWJ< zmJ^((deGpjv9TN1O71M9a)j)u)V&?6Hm;C24YLZ84dIpZqHg~5$MVL;pf3{H)I&yi zpF9n_>R4l`7C{uW7huCm~=Cfu9$+Z6!@5aUdevdywp!q0k` z`pq7f(+MInNo(e-ci*PvzcBz!S@|8!@WaTCii{;E4r7iW(a~H&>~*wN*;P>p&+AD? zkpPpXRWF8$OEUpKzu=O$w{_J&K3nS&T??NYS;9ErLiCM*>Rs}AAI;tT?SjWI+W~hC zY_7=e{wB1A3?HUNw@fZE-5o}rZ7X%_Q?01I*%E6z>YvNDKjOSBfQuXETFlU;ZY+iV z4kTEVjIkBCPz$MDs$Hm@!VhFpn3l%oe;yki>|&aDOPl7-WR6ycCWiH8jJw|Yre@vR z8Ldqt6N?7v9Va~}i|qAr=Zs33J0e^M*!6tPNp6F=7&{@tb=oCYG)>gpTJ6{ik){b2 zT>L&)C~s_QCRdmLfu3YH!cA4OR4*OwM8}Z6&^KCr2t)8(mhe{M;Gu7GeJ9^=-Hh+7 zjg~)rdTxoWEy=G~UxA?@taj1lrodKjVSjsZ$u1(GT!Bt5!f04CnViKt1yTE$pwXGw zNg65ew8=$ZjL0lZl=*yUDO^*()$xYgT*iR*R?Ojp?m~_6B|?^7#)~-nt40=o0jYhl zgi{t+E$XM!*QO+Rj5D8^Y|rE)BxT_E_9?P35<{{!wPrWp`^@mNT$-%S@}G8=@^^0H zO{;);s-6JK>a5%6EHoHW2n-ZFSM);? z3u`lzVFp{~rDg4Q{|~8Cn#+AJ8r2%-qJ&{mr-vR@>y`epD|O^vq7fv#t5=h6kM-IE zA2xYVyo88TM7}?S#;J^Xj^DIO5taKF=LvpE7~~SBRN!DP0e_)UsH(|UcKFm-r^%~lNv363|&dx`y=>+u+z=v^cZL0%#gx&ta2kWp2-t7@u19Lui0 zq$)W$r8`)W94*)y&a@FM#w4nbwn1Tp1uo~(sdI#Z_Mw((@0@jTOfv{o|0(BM#*DHd zv{kzg`B!~pi@$yi`9DSQw4>&!$!yI{NoQkHi`xdRN46~jWbS~~gO)zR6LOAgE zO=Bs9)yiyI zD&OZfZYCkGa=MwBlTA1nM$JM*==7(I^3U*;*@H~q^IPg;CMc_ZW9Ws*JK)>GJ6vZA z{O?0dWi$*dIR$|jk9dXqmxoZjgdxKL&*g_um8`j`uUU}hyvRcxFI`1W5j^VlhRlLq z&aD}P;{)X6aPqb_JGNI7;+y=jkJ2|A9Ragbev0nV%FQlJ3FmIqHaYS-PTFcY{VX-) z{kFrffpN^_9UXzEe$I*yHguSAy`g~lv$kAhD2TW+1F$dR;SzzrC*UwKirrAGqLLlr zZ}ssLnoY-v8Mlsqe_>erzdS$-+zTF;3;5&qA5_wtv%Wdk(66FNfFQ~=rEo)O5?(0? zU`M^y_OBbW6K)+{+1VOKbi1P&zAUS*w1N>0UQpp3ozZe4LK|>dT2n8jF!v*|xk*46M13Ay}AY+8-)oio660TulSXtPc{9zotx=3q=%%%&HUM<&x3F zYyT*31ZmILbXyYYn9iYdskL3HwK(L&-{4;P@v8wTFos%_&4s~icHi;=F$YW$rnp;g zVn5#4j%>EtKYulYqE;Z;Dvp{B4ZErn!SR%@0jbEY^cU8tb>(HT81RIlAqeC~xy?d! zghyNyYU&J4X1XE?kM`4^cR7rIEfa>ju+k8MdWWG!@+Et)88tVeXnZ(2`{EVrHa%0VK6S~$1L1-{DOF> z-p`BTC?+CurKl$@T=7RH5($~jHj@$si%Pt(O`SsA;)La#P; z$`L15&Dp!^@Lt@hpz-+6rdz5JN{!paB*X_KczHvGj2wCIBZPVTGFrm^_D-ZBT%kf7 z&&LcMj@w9VIdAvL1S{7NNv<(F#I_Lp;>-h53JLQDm3j;07)*l2Aa-f^V={;SL@wLW zprUJHLZajk(e9${!PyR{)FHCVB)T;8z3>jEA*R3`ld&$*E6PXzj_Ir)v1=^pB7Vt= zX}Qa$))wU)eVe!7@oU_K)rt%MvR*`Y(+ozG{zqI@C>7tq)d$Dw9h$A_8k(oqeR8Rl zMP=1w?c*cr0EkJt%;&4^g%u`7_TG<W)cMs$*p4br*@xCgBw{TPE@+eNMRR;MdG~yTbhP zcti>2YL|1!ZaT@%$P&V@73puxYKua8lS+jzU4tR9p^HcS0SVDhTG~+$pL84K)r*XY zdS_EMOqTh&x-zoPC21#B8n=p+qHTO!yh>cU;MuCxk?X9FL(JudX~as2W8sBPn0e2u zdyCDMBqQ^7DRcFs?q_R0r_bcvH(qwn`!b8mjN)ueVWuo;YT2gn4kN*p1-5^u8a{WN zzPcS0aZ<%~1T30FqI{e`F=~$?FuSv=E=2{SQLD zF5LgC;1so$78^be@^ci+|IMd(9sW!z%LN8iCVy)*+JUL6sR6o)dDct_HS1hwbP&K9 z2qKHlLb?t$V9|d-rp5L4<9p_Lr`yiIOiugICO`B>Q_oG7tQO;2X4^Tv4nw+;lyNo5 zJv2gF83v~BshHNO2?_K~r?uAYT`)+nuN}&}hy4?xPuHQJ!_C$%Trc0ge^J-|z*Ku;0*H{fmL3IR*Xulhg-mcev ztRViPu_a3=_lmoVX@A(lB!G8yS%I-Qd^#GSQ9!3C6**V_$xTR>s$y2zA-L-RL(|6K zYkmz;-VmS*@N5b+b_OKSTr^~i6%p_woRa|dg?Gw2bnR}o01ZONR6WS*y+N+;efC}4 zp^Vr2cNxS7Y3aPf$x0{kq1r7lpf#yngX64SM~JNgaypwE?y=kPxMUS2d@Oh=w>MNF zi)n14$m*K?baB3@s`MzW+E_&)W7l7?9Rf-o6~CJDKWDX*!Er^72$nQk0P*0O=n?(^ zR+C6ehh{k4_ukG3{+Tpi>NE=g6u2JisnB`VCZ;C`u9?xQz@UhIt&_nW9-9R1RuJJ^ zg5x#nV8QP2D&>UW3CFc24b~Kac1tLxg7E1tXG-DEwh(fDkw345i%0F!`mW0x)pzL! zdkQ1SNwv@{c@i6aKHPr!E>8F^LVzx{Y%RQ;puNRzizb^p^xwx_nMRNbm!#O1HDyls zkShjjD>fK{6X-b8Rb>L!D>vv08DlXCu&cK|(LM(8si{GnWV2{CN^JQr|1j7U3)KYA zdE1#uxu!0rLzYWTE6Ct#=24Q;gw#vkHzx(+;Go31vC8jeK57r>9wj6shr2OE21RMA zsdJFTWT}zqK6IvX>+RGh-G6}IZVX3wsWnA*%G3(>24%`b#|ZCM^a>}HKe^6q!WHqE zg^D?<)Y|&AQvzT`RpG>S-vtzT>Tzrn5)xSRNg&}~@|I^?$?B@Oloi z!qvtKzNfl+{uBh?-*bu0j%29WddMrPng*!W!6@73=g{(N%+A)U@T1lV)G;QjyR+3A z;t!D`fGLR^=)jzUyl`v-77dy$T|PD%;8MgItcMDH%GZ5uED^*aZBBnQUqiQ6CUG|S zt+IhEs3OTA0{9$`6}HdVZPkAYrl%7`OIrUdec*JS;%ZVN#Au7#%3hP^SHI-A66A9l z&@!wniaX z*gFW+UQm}-NdIM=)0-(SJ z-S;&NJWm9Sa~JvS$<7!Gh%4Qo2P>@}zY7*Gq!O)(5_TL^H4Xaz91z_d7%N>Y_o<*| z(!ZBGionX-%wVA0IlxOevYdR;-?J4EEy6X$nF11$60rYBOD-=OXH|fxKf66YcwZ!#r3-auCCi@s;{^9Ot0P2Jve7Vh}iLav4PvS~H z-DvKVp8l_iE5*f(*QS(W6V{~TCUUON1(RYEX5?z{KIGe6MU!L`Ul#USX~JWoZ1(!= zHjz4O%{eAnH7BvZr%xhZ9v|1V|6(~;yCbU*Z(G0fJQ;nJA1+k&&hLzv z_BFIBjnF6o$)$07*Vr$5{=kHNip0SClq*+gl_{bIV+2gfA#%$@v@Gm-p8@x{Q3kGm z{>b8X+RNjRto0$MPg%RWU=+YcNH2KZakKxyqpVd4oTAZ=zY~*0M3O^R0);`XH%i^C zG?oG)O&Qp4lF~Dn(8MBKD^h`u7b?$N2@D?h`%sbJHk!6j@n4%29ggZS5=+)n7CIFV z|BWH>%$sU@DsBu((>j(Su?>OIp+Z;?T)Nas2i$NgQj=q2`t4dkN#yz8Q*zYY}2q~ zc=zeo{ZC_cNPz-Z*De309vVq~cX&My`sE)^yqUVbL?KLb4(RB`1?t4h-`l%$H4Z%4 z@nTK}oC-SGl_`e%-&+&hxUPvQmBXwUUwl$!{O<4+u^xto7-0dd>)emFWWtX^G8$qA z%2E(V%!*5p$U|?T$nzZ@nc&8Na@hXfogj+v_#fj4nNQw3NECT_UCuI|za_I+nMX6f z9O9{#mW{ywrtEoKOi`ZCn1_}wwFIkI#GdDFiQF&ZiFo;>mxq4rpcxo2I5Hf&&inoH zc={IfP0az*%}MeYe)0&(y+6kjdET_7Hsj=79Vjyn^E{Xo>^W#nE?Ke=d}cQ9eOdRo zhf+KZp}SzVgGY2Bj-kB+{04=dqcoD`3HU=13k7ag#sEQ484qbD%?Zw`b+Y+0z0V8v zpLWAG?wNdd^$0aeLyCnme3w$yeImUE1l|5H@I>WgL?f_?VCFbIjS7Sk40$gUpFB3< zxIrlA@(s={EHvnM%+q+LD!4f?m$p30m!kzwriS2+r_PtYllD}j3njH& ziHljKykc7b_@o>q+IGMLbkTzsM?qbTkR_DVObp(4?YJ}UdRdG+xK1BpD@_YACVVnC z*pZr2psJ4y2_YfgCG55jO8*dnY`yR%qM^~)r0ex9K9LSPC#RV7Su2q2)BI>HjoX3) ztE+*Bl~4LP6F)l_Mm;ppMw&1ogNr^C&ZAkWKg(DVnjMHcZ@)3o<*Fec*UAL}ImO*r zjjmT-PEHH4%DXrHc7F|t;+}^{_YY*GvYK;#GDm~%`c{B=t=|wf^OUg-LR%{PB za<~7HpT^s);%6eXz8=MMd*l4r$KbKK19WN5-MVYFqlbqI`fuWs_jJ+jx@ewtBnY3i z<=9$hHmK2&mBqn1`~Q;=@^Okk@Shus~fb@lgwQSPO7Y}P%$K3TKSp^h8MPEK9)UtT4S+1{=W zT(6{s*FcHe9l{H9D4I50_}$lPxtj18bGep$L(hDU^6vJ|#He3O>Ek8-*i=|>9LQ-# zbme1Y3A)9E3$1Z+{Wi1mk`}%;;~6TD@L{Cl5^u*AEIk@t z#We=yYcp7BRDG)^Qr)Pq)<5PGHdyE_K2x8>8pm+_6JdX@_2mUce_YBYUXpitSzKLn zbtft<=}fG5WQ=_--mNOCjb5gY+m$V5C_&K=iYa`vKA1~zAB~}Cj0h2U*c9(L;9Yfp zc{+xEp`=acW}7=}SfP!Qrk+_wU8e&OBX*zwd+uR#rwLf|ULYUc&d2wtXvGgCfds#`8oJbYD=#eQ_0F z@7&j%->uBE)ArfLw`559Wd`I{^OXQn%dE=^QcbGz%1yIcPfCuMAhDZCtr@;Rz2i^J z0K5401ojRb;5Zl+yex+;10oU7y<;Bfx$h&eehw> z;4rv51b5egfmxnsw|4i_`~6f`SD!xBr~7wZcZ=rie`Yd1@l_X#P~v)TZs{QhZ|kxd zez%(X={@6-cIM_6Yn+2-Y0vD+c|(I{IVE&CV-ANNVulFrlX z50}5hV7b2c^tDVN>-z2*56+S^xz==UzQz^g80ewD)|#rVxkKN7pH1u^Wo%eF`ZF|X zZNMe)?{m3A)sVAb+B4R@WluDkq(!7_evg$spFz4j`$G z=d0vx1h#k7SW~x(clOR;;M3c{>)71^fLJK-VNRn!KEUhO@df+>)$l&n&I1BY4 zmR5JjYaAW@q$sXpbdkkLM%SirX4IuveGG--7`yfLY``+`5m%FL>h&)NMPYw=qq4k& zHzWB;L5lJ5WA4R9(>BM!x|JqJ@}D1oC&In)SAP57faS@F{_msd$=$tp#B_wfwuzRT z`-RZDXC3k0_~`_K3YJ1lLEOzbK55!X!0uTM{8YO79IDyrbB{NbdiwHy2N&zeQ`9M` zcXe1{FM^Q8#=~~1e`zDtA4ZpyZBPuy;W-=SftR{SL~2JLyOTwYYc${U^gqMoN!D)9 zNTtg^m{yWuOstMO%40PDHU-!{G~FE}6xIzC13mRiT_n38|5F|jOi5;RxQyF;{DtdapD~}#!4p#| ztO926Q2Z9zGR)Jo={a=cdt$n%dB`VC>8ov4O3t z0){T^eHX#j(sP*tqc>Wpzxa~0O;JcSkk`bnYwck(lV7e_PYDzLvv;jUnD{a3w3I?0 zsYM7i7=uTlOz)ODknT@g%BUW+)VRn|KESPMI~?WTp2)daNM)bQz5GoXJKhgIGDDN0G86Q^D$432U(pm?t_7T4AZ`ncKM5jej+5wLdptJ13~ayB6%RC% zu~$SUKO-|JbjFmCHzMDJ0%R;Z&Bei;3X){=v|sFTw>IO@?5H)p?_Ve?GQ<1!==B}f)7H?F*0I>^(vq<#^L zy2V3|mr4Nf+0aJ*$hv1qVoYIxF9gW{F35C~R-z=rY^i+HruA+na7huTVe zjG>L5-n}z46S0{%5n7T=j{jyx#2X8UDeZ9$fbL(lGC zxvEFm+rMIyUC$W-?I;N9uWtKQG2ps|`y+vd*mcb*_h-p)z?Ar78{}LUbt)x1Bl^kG zJmSetjB$H^eyX+vUia}M{?Po2Y9qpSn5%f) z823mL5WA^%pLzLK$-ZQa$L+$1U6OKIAZ1;2O64I&m$*1}W=ZFy$&8zXB$=a>-OBHG zvRyz?wE;ILnSTu#ciyTXybhAZ7`Pxv?J-SfSs$p(2GL zCVkX$t^=^4-jtWe&}+2f?(Lk)I`DGnzczT-uEv4*CE!<*9rI>zCJ#^@`rCOxn2N=Kubm_D$~sHr1;hRH~6 z#eZXzqU9Cs90O)FTbZ$M?N%=++ zy{^59jm`6JbffX%)W*Vs1g%hDQ8qPv%sbIwcHm~jp_CIYcl!R{RVl90+|lN!VU@+y zfnTt({M~|kKO=%Qylrt~^RDo-Wwx%7QeH=He=d?o9+cbX#9l0J7i^LJS@2Zq@4>xF zpXH0qeepgAGHbmW2dO39)Q^%}<(Gq`tHM%hcKX!Wm1I`iWaCHtHs5-^ifkIJW-!-XQzTl_AcbiQV$?iCCy_KQj zqw0f;SwFl`xLZ2Qkq9Q>WPW<$xn+2D*Y_aedcYCF^(vNv;=I-MmzvAF{0XJ&+H1$v zrkvPA-Hmq=qnlE`Av~#M0R{~fC!ENoK*^CNQ=M)?KxkC8TR+gt#YDByIYQb-Op(L( z`-7UN?(uulqS3R11y-+RFDa-IG@7KrF3b1H_k7C4$<;=Y#e61;cM-QuDV4#}a~B0* z3AR#%Z=`@EhZlQi_`jt_tKYg+2@U6M&wQCTF<;bx=W+DpaQ%DxOJNjZgYxvZ9hh~$ z&+FmUPvTniC(6`?eD{@oyUSHiNbIj~V!5*|orj80Vl}XlIYw|8CiN|(g7{bi9vIsT zwYkZ}^yDo7bH$fn;a+4y-ky~v1D;J0{plL+~^4?+xc6P5X%eiLd7;<%w|`h3y*MP>Dc8Z}w2 zfR6j)BZi)~sa)}V_n#dCcqZw3%h}7_zTqU@6uzmMP+0Z*hk1fX0ZCfS2H_QBO36vN zlQQF@<)*Niq15kJH|{q`-@fDI<<>x&!ydd^?0lmm@=nHkMVIBCpzI}mqpg4DbHYQn zD}zpAx{0QGeZi9)eg^7OBDU5mI2iLV?W;7&u0Y_WB62X)(tt^1ZV|-g{RjWRj!VVb zZBF{O#=BooP=Lw(Ol)m4_J*Lf{R7$o0o#W3;m~obYcra$oX8T?F-h{G`n8;hKa$v~ zd+Hq#)_k-4y@AHy^w*Y{QqU1xI|Jop)QF$olDcz(ssCwY4m4gJk({xu8j}swA*HMl zE(0~aJL0L{KFM5Y_j>WHD4kD7+YIW}$A(k4M)z*`U(4EgG(d^e^#4BQB3>Vo>U=fK zh<0)NDX4FBJCe3gd#lq3aiB}UtXbk|P2}tHOqq%o9o|%@>9XM5*mS$?V-q48HJk%Y7owVQ#o~Z6>_J!H?L+)%{F}XHK zg6M?wY#6_GtHw8X&++)$#3(2k`-+ct;v{)(t77Pz+P^W z`kM9C&1-fuh;GZDFP#-$okuz&w4r$$896DRYFE$fj4Bldf#oru#D5p<&9j%tc zhN;4BHAU^Dz2PDH5q_TVGu&18ziSEQv|YR=nEwvA^q>Z%N+i)Ee~fJib-ZIs#mw^13AHq<_pGj2*rBE5sTGrs z!XvdCNvDvXopk;0&j!+F6!Jt9Lc1fo&BxVX=r1MHQ**0L`WP%y%!7g4d|Y@MZTgwv z`q%k-tCxOf&optSG`r|5iYq%$ zS(=~4kEAWy)Yo$T_=hMDg_ZVB^gtQsZ>Mv^N>Y6)KP!^b+34r6HuFr}7Sg}`rs+54 zM7gzCuck&8JC-QA9M#9UGN z0-n@t`0c9h=YMf`E3Sluar3M%H-!s&9GCa?hoIIv zufiQOtw#3TSTE0zXiAQ3j2_&X5vMY4e{(`iy5j2jb7hP=aek-c%B zl=pizgF?D$iwOMKZJkJe-YSk@t^Q`~Rrv^;*Pgsh@*Te0=DB=N<<_afCxA$d>P3OE zWtHPl@j}X$^|_s=bm-#krN41gy*O**hl?Lk5O#gm$C6Cr>4x&=lErj9-h4NJ41ik^ z@MXbpy!%&k^t5?0CE2V(=4;w4Ci0GyjsiT)m!cwG_L|v}-*kT8yDDMh=coAaa$&vp zOw4cgl}3O>87mwIXozQN&%bTHX|BGKpm)cM4j8EM!t&c@-+171`C6C6{sA#rG-!*C zIx2k6qY$SSyKMm(&>Wm&LGVxfF)t!a*kCf}E6W+?@ygTLDDM&U9QngwFd>`QJIY|*C z6^`R$SJN>+Sk5KVbH@%Nvrn|+O_lo8!ng1fiZ9$fH}?up*IwdDA%DcoOI!}~@e2uc zaAL*$j}X!Hnxu^bmlU!zGV2r@BlQ^2eqBd@#}I~u=SRE_Y^wx|NxHLFg`oc8nUE)K zLB8Bsy>p7JSoM@REKBq~UqW?u&VDv~qdSX05cFnf4!6HL+y|cYQy#pZP|&BOF)9(O zRnBz&{$MVJLY#v5*2(gy)k9ocNf;U#Qn`1VB@S6@{qIKSo+9grbdTv!QGX&<3Wd~T zVq*SpdE)%!k3v=jL%&$uLFbh#xaK*YkS{R@f7Yaw)c*5J4!V~STg=A=E5m;adEM(zg*g)VHABFG}z6qL7B=E*{2c9t!C81cWiGCiGC-$_!2^0n=z}6y>r)`@$4*)?s&?~&ft^uyq&IwEY zz!w|;MmncQd5Y`qdKzNOXWxH9CUJ}Ztal)V!rnU8gt)+{=kwbCUuDOXvq1m!+{jD~Xg?*ez= zRa_mUTyxo+_^m=#&kWRa(@&vr;??FOc$Y(R8_8<($O2xS&ta|iiGS76Zn>D@hdaa& z7uo-`?HdAGepIWTnWG!3t!IkD%fyBO{1dsSXEZebuo{Zslu?KMpZ(cx5 z{lmb(8=vcMhre$!-j$XLnG2Q!KTswC3r-!R!v{H>%63Ugb;s|dC#}ETe^kyqP~0Fm zZs0dd`02Nk?bnwC4ilt7s4*2t5GhL#u~H^&&N#SxpmUJcT~+2dF<)v}b$QPKzDZ3~ z`*j6;^=E_n&4B&-QvBFF6?Q87s&oU&$?hGTl+vel$0~Ws=L7};({;HogW|DQe(L)} z3jGA*>sj4()#G(eS^0-0hm;1TM~tp5_yez@)zV8{IDBbc+hC|>#8e^G7rjRH$MS-GRvd~0Dd?(5j*E*Utc+w7#rzK#d` zk36|qr|h&=a|cd%mjGD_6i0~(P60p`UcajuWsIS{HaXhxJszl1Cs}G)u=wrKHh|q! z8(I z0$(2JCr>u-BxV3*d{>XNth`j&YM9zoI>WaRjh_?!!o;21m;CfN(7Z&4TRt1ap;ZRH6+Dhpa8?NQZXz zZMX!>ZEX8C9s!R%@Ncbwi9lNmrIh!xeUl~J6!WJSs!Lx>OK+bhdsh* zY=qUUZ(Jg{)}>qE!U-8Z*agSPP;1nLuy3>_wFQDoBew_BsCocyqm4;aCBLdH3)(ak zb}SNH*~G??>cHuF&N??OuS&$4;hhr49E-lm4av3?56pPB7w~9%F0*h3FijsizYN&c zT+Yb7-37?v7<>G=&OiFJP<=)3tJ(WXRcaDSs{T#NU9bZAtu91wRTuI#dLi@bku*}R z*plJmYXHiqJ#QnQQlKMus6EfzT16@YGT^e!&gN`)4-11BMS-5*UNp#^N3PG7xMlW= z{;|Z&-c9R1J(jsFcgU-9BNCioF75(S28r1nzc2Ec@S|=$_3}C~3M%Z#zHHMX=G0KP zX-^IC7mSDGZVm4{Qx-dgrEdj#xvyZh=-X42sG5d(%kD@W zjN^J;?!%iFsB<0*>!+boFS>%+UfkX!ffr`BwV zkNh-Fz2zeM&(O(q2q$}rGnpwYT%u(*u{`rP42EHYa61Xyd*M6}jYUJCkG2DIzWR|v zm)S)-%<#%dZN`CTuZdDD8;t_-ZdY7iW%lCsnMi$B|BtkyB?lBa>Ky_3)r-y@r6mm?-Q`sjUPW%egKZgZC$ zXWwqwi#ykMk5q>fZli~^`MXKqVkXsb4SSfcEy4{n6kFNU+N;yK$n3auy>ZkJvanBU z%z1$v)i+&$Mt*UKxQV7xp{QL5gxtZMCe<|v+c=$6$}m#O-T*NPOY)fDx@*HOfP1d< zLB@Ce{&t7dB&G}S?vC^SS_CVZmkxF|7Szs@nIsWs{qr3b>^LNmM&gsh^_6K$G=A|* zxJPEkaLs#Aj`@eAp4rS(0#jH}r6K8N$NZNiy@;?8Iw)wl6rq%N2ZzlPxRE+-{0Tp? zK;?`iG5U)5*HdYAemP0d^O_3E=BRX?q;nlgOdIp`ULDI8I<|Q%d+BE?K3csxdLRM4 z{JR3JbyB7}u_)g6h&<(98tJEQ4qp*VH9J23U8uXGRhxt%`GhY-8IO3~FS0hNe5MML zj+ZT1?F^%kf=l0;jDZjM{Xp3^3Z!Mp4$iyl>MNc1+uJIF&~c$nrWyc62O^Wk>Y+%^ zLt@1PJC;z*X{)Z|nl+NyK><%?VsU|9lzV*?6c{B2S(B43OHiBW_2CcYgh~$dpTOdJ zll8GpY^}yCE!JmS?w0#qtX3us0K7L<>*Q|lZ!Zzyr)HTwwXfGcRvw4wMa`bU)&LO_ znL?Twr0W~|IsjHrz!e|OX5WgKUhT)kIQn98GO?zU9E>KzK_@4H&Em{`*G&C}Q(WrS zThd6Yq4Dbm_djE@y=85HjXy22&J+XIF?BW%3S|b}AvCCn`D>j6tR7txF?Hd(3^4}D zRls+l@)XPQn=Z`0-l|pNwJRM`mv)UIQ?W)NLXkid^Brt7oJ`-dKMxBX-U5S(8|=rA zdY7a>PNivfNzaqbqr)$47S9*>M1I`%!%lA`HrNFhK{+-`8IOhi8nQaqYAL5}Aoaj2 z>y$aNkE^qCYv1B)XP{>kxv&sbb}|C0{XhAEMwa#2W2o6zNAuNT{MmcRFL((RjDY(~ z8XMG&>hzYOt;9lCjPXLJ^m1b$9(xM$q&JdZ+H5czx?H@StV%()0rSa;JAV`1xIEl1 z<%c2WRY4$iNgI@()HohT74yv?F@}_t;Tz8DrovNP-H2v^2cNT`mW2if^2Qw8(d*a*jkXL7>U);C z)3r}(wpn$%&Er-{k)u+h$3n-yMLFTJ*E=N2;F!nH)J=z?DLTcI0e2i0T}M^3AUccE z8L_+AwYxWBJ-T_>R333L%9+u!a=BZg$zl?lMn^|PrmQ=o>JgCT>exw{J>j*{*Mp8N z*R<5lHd4__Q_s1aRs;Dqohf37WoBoq>kTEN?BlB#*r18W&oyMM|3a-7E9pANv4nIQ z*4za}$2E_alZkr!iuw{l4WQTnxT?$j*Jr$B%c7pQxuwta%hV`vEo6iJL9ebhnBY8F z5|S?PaGK=v1ItiQfMDMtzhOO=NfN-BcURlH_w3tZ9+> zW|Xt^a$2dOR?q#Q&F}qIoq68dDBn>X5+-V~Zhx3cTsEWq<P?R8g`yv=i7JbM-pXy>W+)z{prk zo!w2O+;rsTL%6sQPe;NeRgC#Vk46-!i&?s-Q9x@a=?35Z(4)G` z_B@rinH?4%cYv1DXtd#643E3#F4Q*`F`PJ&xv5ssrk7ZAGktzKk2eXzwga|7Pj?ra z@@Q0T>}~9TYpJ{LoG{}uF~gf#iMF|T$-=eyc*{6@@e7ndf7MKj-%;vrKAZ6c&9P7A zSuKu(-?z|ID_<+A8o}pXfy-s>=$3q4zFwQ&jKj5iGfXd3j8H2|Ski=)#pU!W~ToIa6zHN;x&1(%m^I<<(Yy>Zr|K5Zt|{CjvLu zNUh1j!2R~vmG7YOd|~WVh)d$-hyNA+Ga?8zL1%Xmadahf>!S&Yx?CFq-1~FC z0D~ic-S|&5{xW?KHqG|i2$po`U{)#fvJE|_=RWl`5UIO%LXbC( zt6&GWpd3h8mxWSWDA#sOH%dZFxtu{tjkIFnlUZ$Zz6?9E@Uz72Kyi-hWz{_<(Z_;` zrh4jd4T)5yckcMWY8so0y+21YS2UJLg%=~DqhxEE52_mfR^XM| z1oxhw{LV4nz3tl)v_Tz+luEj&>`;Sr2c{bWjHxK5LZ&a_8`qiwM7^HMdJRo4qXB-m z33O2t;Lfh1PzHnP?5Mgza}35IZ`WN;j1umVS+_AUTKifJ*zcUYZ}LaDBMzUB1|TC^ zBd#YWW4EtrYrB2QAYjZn&8Yv#%5FHb+V3c278ybu+`ahTOg zPc4&}yW9=lV6M9<6V&LcyU>8qo{=^_3~J_)mWQ zi}P~hul6{srdJ0yCs1(OyR5n4ytdqbVN61h_F1))Jk<);(8e3P_g*W5jk1dMrMo7I z4^i)Ip^{^+24w^mK zZy4W{c5C!h(jeYJ*F1h^53%o`I@|o1r0|c}bj-9DC%}{}REAhg(ec@+)&Ijev~f|^ zwTO(>$Ke%3&ab(gva1zZLT0AobS*kGrIdDRL~CFUR<#CddabFT)5?EGL&ZPr zjvvcD+*ql8e|++9(v?tmTJrMZCz+a zwgb!gaszH92PA}!|9qP3jJz52ZmpDxyQPLRQKio;-;8rwf^MdG1Vbhg;Bki3|8flR zsx2M_%Z{ZfVZtg(KoW1sGdt&{ws(Op%*OP5dReSTEr*HA-j~*dkKIN`l#K5K8@HCe zEdMOXLO((F$iqCxbTlP)MWznv>dY~3fm``T9WKmbf>nJVfnl?s*OGy>7-DW@ZfhZU z&xzS>M@E`|d$GvUew1T)8|r&c1spm2xaeaqK3DMc+%n=Ig0>K2?3!Cw$PxRyNeHdM zBC9O8dDt-es5gmv)Affl1lSd0)P6KJ=nmn%joKQcszNk=@}I8}h+PpnqE(cDy85uq zA_2c%-c33n?wF;zImL9$FtMiugk61O2x;nlSo?d;136aNOD4B*0;XE+n~d`a_d?(M75htv?3#E+vrqZ z2RuFI;BK5;kzj%G>rf8SxQmk2JOoU;z+yFr-mK79&F5W3IXp$qy%m@cGWr7s<*N%@GSj zSwM5q%-mhBLE~!#lX0uWwENNj7V*uYdd}KGiF^>rkxNMH=gVGaCZneXdm8+R57>5v zM+VUN5Kv%dh)Y(HJmn`Fb+d`6*b05UfxEQV8u~##NWu4WoEAmfo~=77SF{bDT#Dba zSXj${wGK0MbsapK7s@%%sp*gEYq<@m@H;FW$(0j@_o}$5;g;e?H@?IRW%!y#wM9k> zX2bB2aK@fxC`)nND&maZJ3JwTQJhD1+WNuX5}aow9c%+EZP28UvmFyWfAZZBUMZGw zKLm|N98%ULj3C?_&gb1zAbHNDYYCEa$W`9DLId*SV^Vcu2?EYFnnO< zw*;dRlZ>-j&@eMW_%J=;w-#zY-nVZD)s*|zfBXh1wD1DuO<-jR+( zQ4dG07SY**OndViA}X7Yy2tr!WUagl4r+_ zSDTYub@YI8B$XaH@uqC|c8tc7{CuP5wO(h71l1FZ@rrn@`4H^{g&@x&L+Y<$99q6~ z)UrMbh1L1I5L$5+b4X1g6!naeZll*DoYG(X+BcXQ2=CMd{iw<}HIE5efv&{;ITY@f zPizW6eZd{{ZZLGt8|4}4+_X4a?#TIrRlJwm6cy9sism85cdeXaK`GwT8OPw<=1D>Y zX@7|pU80(?an1~cYh3?c3UZBHU?Ui%F8Sa(l-?0<#b}*_cp{1^;94j0=H9*HgAgdG z(DE<#9)_#)@aNlR2j^_XIJ(uWh5BpW%5t$B~XKeH{0{+^7W*@{%1z@2w8#RhJp9Y8Lybur?1M;4+Oh`*EkxIWn-12Olc5~66^$m)8)GUg z|1eNb%C+-5BA2HvLmk<9ngDzvXm>y3_p%{8N%(AJ7Tq&U#|tKUgAjlH#g9^PaNbFW zmk~oR?=ztNgJ5xzVwKVm_lLoPDX)x~^bhWug0cvhu#?|1FOBTGmxSS$g(f^L<<_7#igx;r!atz+EgF5+!LJ!z zFg&em-JXB>C3_-MaF+=~Vs97*Z{>nb)}`qnJu=TkykUb~Zh|fyVujP67Z6q}>m3`EhPYQ%W-5Ar zvPhv}i7-3J*5^;MK0ByWcl+Z{+`-TvOfu&_x9XWhyrX3l4_XlFSx}=H@;bJ#vyxP$ zfNEN~yBZNE8^AI^0T-JU2Ab-g&7nJ&WIs4svZbDSxa?D%%pS@@U!#lhJR>sRQm)LZ z(L?$*9;}@SUd>F>jvd<;Mo{-x?5P}o53>IzYj%(L3u&1o$?K@SSiq&Kq%tPFlGc4| zI`5^IWxs!tIY8x`Aa81`b&5w@ULW^Tgvq7XpeW}_o;sinEB|$xF?1PH`BlhKUma-q zeE$XTX2lC{ZlyYt1gAU{FvG*~$g%K%?@gmO@)9#jY?goA*C<%uj|93JKy#?eVfN71 zdzCAywx;r*vL^b_`?9^Zc@>mEWOl{v(E>+_(&iP`*u`S{izr=}{NaE!9b-)ImD~R^ z1uMSWeWvSI&*{(U_~~Rgs|hU$5-6vb@XWI4nd}L{b1vGvGjkJM9(BTrq?DZPt9{Jf zI5G6D_MF3UG)?MDw}61Zdh+EyPFGf#w8UmM3XTV!SoIw>0FJbBtwtu%__vr{Z;pIp zJX;Xm>T3$!a8*Y`*t=*bXm-{0S0%4VnayCv+vdznSF{;>YcH--u{>0me9zqqsz~Hy9x@$ zLhBoOX)hz)gKjBAH7(D1CTCRn`6#-3rzrO+Qvc;BC_3|w$eSeJ&4Y%RpOSROqC)pu z?>1>Bb`;IJJ^dArBqL#tJWkvaT@=Q&@1e(5W_Ju2W7wFv5o^UaDfn))+~=D{hBOud zW+_zjqdogJ?`C!r2Js=(qH1G*S%OOZJ{``uvPW^Y#e=s#hKFKPOA38inO!NsZVhG+ zq`F;m#}F9Bq+L8-QN5txY9%o`Kui`oAKLxd&3^7|0)xhKh-@#6!ZK=Bjx?8lZPxU z2|$}JR9#aVHXP&ORA;Sp*IVBn-y#L1aga?J5~}PKSya~jnCwr}l*^e1nu#sf*UV({ zUC+DOi8OScAA4IfR|Nj1mMa=w5D6XeOpP$ML9w7|t2(aK$6c3`**|kb^P?Y)30ywkQI$mlM5v4KCMvC7`v*%yb3c-F%}=BD+@j^1P`$U=sgR`?pK8=5w- z)_J2u1EH~JJW#RO?}B@O@Dkxj(Y7Dkx9)phH3Xc0f0>Ie{w^`$4tfSvZ{B(?2`0{a z=kOSklaLc3r%aIo*(sv4$uf2)5nt!x2h+RdtBJV^y2Lwcus-81cYti3?uCTsE4w9E zxdj^`{ib^sQ}R;Mi|3F_`8B^#P1@<%PA~Kk#L?1fkGtt3 z;h0Be$&j3mblW29Z3$ynuiV{FB3W;&#&`rE1U?sTahnyJ(hZGI?SuF1FX}XirL?;PJ3xhqVt5My8IfXZXAM zQJzv*_l51b%j(xRW7f$X_3@iS0YfhuD-63A3wvX-TK-zfVGcPAv9LIpyK9k?8WL(* z^na+!Xq~1LtTO%L7aVeSM}V6{IlZb%-ft)kt5O=q@?IWlK9Z#N-D12F@jP0DMU$}W z*0i!Eq$C~_(nIF2CXu5lCMupev5hHS%T@o$vU|lJij3Y;2j-XrzC;M(g^zmJ_izPH zu)(oIkeh2rD)lxltgd*>x|vZGQ!I7ydy8Pka=k3^!3k0+`qtd!^ z>=9!Evml!wXVvQnLJt&Er*UK~S;gSERODD2c%0ilA6a`0pbp5-%&<~^gN+Anab#_O zwrX;pj)@p_IhlBuL0Z6KRf+D@r#p(6f>|)pdHiyd^dcaV8@Nr8<-J`~G&}fHD6|Ed za-QAsw1%9z1**93zOndn$E9Y-65DvzD}_+b5%IunYfEeM*KyyG2aBN|$tQJJ6o9sA z6^mA{$HcqVo;Ew&R}K2V7#DLq`Ag~ba8VWkHa!clbAPjgr4!74@f`;wIR(aFr{p8K z(>JI3Mc??YWCc9xTWcQd``(=14F&pVxO%_I4g?cHBtb%zq}_U0PLG?f10>7loO;LI z!@jzSD6Uh-8S}e8Fhh3lbOTde+QyYuE=ca0L2g?}d|8TQXT~kC-KjE4p59J5-TZ4a9 z=M*toiQkR|c1ofC;lLTu^}|Q)At-+_=c0&guPz~RiNAPH+lR<*)B`$*Ci`EQIv}{2 zKl5%_V3hTVjka@wZ*ouz^!SrT^7`e91?@3omteH4e|pV=eRn}ytDgD*UuQ4Y?zxQ2 ze}r0`aYh%sV13}w?p@;A!|MiF{Q^cf8Cbk{v;#g=ODILpevASSrb!9L9_la@>eF1A2C|CoeRi(-UVA#{JnnK| z&L;q0Rw;`1ehBvCTmA7Sb5Kc1hvyJ)c?5M^D7AZENWQqQ5$^S(dQWqz_@3(UiIeu4 z?x1(my1+QGal3W%2IFp$1`w5j^xy?gi|5zEoy~mMeg#e{kK2DeEs49PePPhXE9(nj z5D(?HOx51dgu6|h+ZJoC3^#Svrs=6^o6)ZSPK{>_S-v8Ee6`*J>_Frzjui7wB%e(%HdZz(2z5bqcU%~R8*=c*Ft%ki z2Y*lx*j@8E(4+b6$)*tc3mVt$8WB&wG3h&W<35%np7XHNF}W$g>$CGA@WI=3^ZBz` ziXlGUO!Thkz1QLXJolDf2Aj0P+LP}$O~_zHTZwTS(l`K;nl>A7pnb1ugaJQyk&*4%`@H1pwX7KW~)d?FAxhB5W3iw zLh!Fo(=D=<2J;4JwKzB+s|>sF#n>`A&00rx8zHvN!EpbPVMN zAV7NhblZw{49u_hPqXmpY-l^}pZ@D(nrM@ZE|Rs9d9-+)FUNKW|40sI;T|r6JQAB^ zlVrjt@(dFd-JpAYEJ_XV))~*Oyw}H}j|ZVBrT!@SJ2`)!{TZwRk|YJ7+vM6}EH^C( zx$JlYJi@yRSwmpYz#{we$ayP{3`Z`Y5HGRZhx6zs zmRcehYu+%ir|+Me`T6;aFsn#1BsLCw-#NMs`Bm+b@sy+1?2n#y9(`u@w(~1~;s_VI z<0NrGj2f$Yf`qDRlq2kZe~)VGng*D?hH6{ezU)ARi!X>X^bdJ|dAj1Y>9Bduf-@B} z;qHH19Dy+59~f33TiJ~}Z{QA0SbI2L+X;N!hT3N0e<8vqY+#P(7_~?mtzvZ7evdn5 zJGWg>WNptbUum>>dU}Tm%K2q@+L8)?Eiq*g;*l#np!;+My6Z-vji;+VBNMrw@PNB~xmzIAIkQUSXLh$T%e+*J z)p|oAJb2p7vipH;f}x!2TMA6f$SoUD za+>rmk{^-hWrt6-r7XjQ#hQoc%zo}^&Api{LbsPaoqWIOG1EAmHQ(ygG^~>i2hFC2RmG^dVsB5FY62MfU*&w>dRaK_fSIa@i?e-}- z>kf(l+z)f?UnpSLX zJj_hQv7xTX{80c7YCk7Kf;yhmFH(=c``WST%d#urE&|#5;GN$%!gN*B?C4HrYSfgq;G6H)c=IU}KN8QY{}N97LaQwR*4bi&pD1 z@;P+ByuS(y;~lBt`CO%$e!zQD!DRNOO1JjnDaKE0LxMj$R ze#4r~K?-Kh>Wt_ZhxH@B( z(R&lpg*VQc2lSSZjk!)7$qB% z;}f>3fP0Ph40X6CHLkKa;2!1wX_R9>JUR%9VN0<_^SK%K-Iq3!Q!uf2rP@~9q!e9^ zqladBtnf3dXLo|3zZxiXCiP6!qXy+~|FN9d(Xb{fFVyEnW?8# z3P`K9*NZ3p*Apoi>_7>YgS^JTm`h!u<~92S~X+O2Sg83`6J)N3wCAc?k*P`l+V9NYY> zIya$bEN2FkRQyAm(bCUN4nrpytk|zutv1=Ji4DlP zkHsZ1o}#20vr8q?2(C#_Y4M9q-FNsHY=-rr+CvTlDJ1aeGg&pGGtIWzxV=x@&K7hc zqxfVkD@hy<40h%}*MBDj^RpYbkum&y&~Nvqi9WE`|CXWV?Ty!2K&L~jFU<1dV}ZhI zh0)A`poBNMK(Cn^b;69ELO^lAb-T1nV~x)Wmsf>x-XQdoj+aF3nZhtDgXn^qVXi0| z5mwQ9{Ct>1xYHq<@AX9SUfNes?~g?7nqYzd5r0?{r$CbM!{bdESt%My)Wd1e*0QG8 zaYs&}0HfvZcKil5?=qQHcdSs2=cAks*`e?K1hY>=B~=K0sh=se5K_Fe8J5@g~qLv2Akg>qzeHG0v;6Di>DZ0?j!1QCfYB8kX$u$Vzo)K;(gm+VXfu>v;Dk@!%0+<)b_&NiQYSsOx0 zb9^_LvnZzP5Iai?&3QqSc>pjYcb3+ibu77liwm@;(vOsQ9`z>cmm`bZ#Ch|a4Mn!ZX&f?JxcP`6^pyX-o6y8-Yu#g&# zX0s1%PBeyylyy;k9^6OQJ$iUcc6YH~sU9@3Fc!-eOj8&53(Lvr zZt8HM%}t~snk=y_^SAqV$}yGr)}rf*)OnK}ht00uOCOJP^SMm@>1qY!2h)gES-IeS z$Hj)6do(LOo{a<1&WV&4ks9W6b(aWjIzn79><3Q61Rr33tfOztL{izHVR*_tV>hlr zquG&}B7;;j!6~n;#ngXT@1v!~N*on`asiLfmhzq$8* z|A=@0vd11{uRXWdn$Mc!^F*$TcT{h+ecGM3BwMEcB?P&7qt?636Q;5ng;33m_kEVf zTs-U{(bRh#vEpJ|?%}Af%Z(o|u%C1oT*e(VSLvzZI4#v+td+BF@(vB3P|EfKyb(t~btl4OG?Fp7 zyflEL0tf}b(91(_s%L=M!HHI!u(m^AjG>`GDB~Mxr(ZC4F`Y#U&b>B~m8D>#gK9Ee zNHU9#RcWdmJxK62ES4IhRkyOeTaVU0SJ+ z6s$GK$%S)rvPW)aNY^%(0l!FGaCn85$~jV_-+5jc^0%1%rm#o|AZindq@sZdc8_E* z4oRM{pUVc`&7zx8K`Fvbm>(6Jg-bVURlD1U_oyvv4N+h%>&s40P>%v=juZV}!YtfO z66@}Y5B3u&5BMo4gnT7JVi3$NEKI&iX5ixlasN$uxZ{jPZd9*Uj8m}-8BA-65P4qE z%Y9k)2dvEfen0OJd>*N??|dYECVL{3p>14s*|5zdd(kHq`o{XqK-mviI$Y#or-oip z)(gs=jj&PTX($-;n$4ZK_(KX_c@_Fp$(2rDbYQy!lke;s6pD%ozH7<&ay|fDEoa3> zg7t~7G0o4s8anR23CtIndGvEKJZ&8+QhcRCF|$sbQck!$W8{o|#G|chJXMr4#P|^= zNX>M$13;_rT&32HUb9(^eRul7Gi+at!rR%(NNFz!vvaz|v4zdT< zB?wd*h0~H|;Si%-emODO2G?)l%mb1d8hccktP2)W2o)K+RIIe6U6=&>x}zzpFfhAE z+b${yNAdUx8DfQr8T+dYqn%@|$(J&2w47RoW+7?}dFjaU^sN~wlzZ1ovws9+XG|!# zIK({0nt>YSm{lh_4$AQy7G^xBpqut%GGbhTNZ$`_kAFL1W&;-)R=I}@qZ(uV&1AvU zjQ2-ysD)jQ)YX37HrX!IAhj};1qRLgGrXL5G91OlCa|gd)7X~nIB@gYcCbwOe6klw zmqB__O~7o-MAJ>mS z4M$7BsuIObUYx`2Ua_zv462HIu?4-M!*CU7AKPHaeBYLtv=-8N=ktj;ZqYzr9Mg;t zSCn2Rw5ZPIe;Dg9py8n);T%!;F_i}5|4|}YER?1^WL~*8a=G4=GR0$L0@fByum~SE zJ_TGFx)(Y4r6RqXk2N88J?|G~pSe$u0b0pQj2GLm4VL1fIq+%h_I|8)&P?<4KEsO_ z)W(n3LAr3~1Au4pM>k@^MtuAhGL^Nza_ug%6o#kA9(9EBK5A!bT{4@*0uSNRUR@rV z{(<-h%SZv($j>2P5INe`T12Z!3yOgji*AOvO;YpSH(}}GRzxv-j0Uj+E;Gu(Oj~(T z!43pXmTslHNv|YPX-!Vw$5>nVPIU@L>{=^otD^quJXOtgFm_ho>So>U=5IT%XOWSa zxh*oZ>(<6Ulqj*FRt49BR=Y6AVK}@yUzydpe&X~m&Xfp^+Srb`G#HaG&8iXA@zYj5 zt8dx4#BtRb@-QCU-lhTNrq0&QIP?c!)1#aJ701W`TK%6C#=C8!D_OL3{Dfu0g~nBe zxCGc}pi0mt{kc2`Zq~AWM=&z$hRmyX?=1w>)047-v}}-i zK^&WujY&OPPMZ5wLj9WeEJ(6$^U=>fEjbg*8Jt1xNkoSjomSRAf5sAwg+a?-$)l5% z6O5iPn9G*bGR9mWku+>%J|f&AoOlPVK5UL!CN~`{)D<-FW>`Ch-pZiO3v)`Cj$&#r z9~8ws9}Bx=H+Ao&5ucnFVAcg@k1xS_ZAz@dNIG&El!1@W*T5acA zGzj=UCu0vFDy6yLKbFUoQ5 z4)w!ZOScpEo8@p#O~68z`FbyM2a|6m3oeBk;C1ZgkEPWA5(Cp6+r+?9}rhj88V*+9|sV&9N+E6}u1vR)w`;2CD zXJR!zRw$}5w>kEb`V0#9RXRVMy0*ff0&lYTZX*YC_zWXS@70h`npWIoPbLN_C(BBh zKZW&SdXbZWl}UA{E)>b1dS_~Cs%OSj8kLG6d`!S=q<$J-gP5oH$J;};AMUD^RfcT} z@v##p%F_3QBPObUX1!!aI8M~@?lWuMHQqQE*3E9C2iM(29*prbqqTZ3dsMoA*+?RP z1V0OFv7|*JZ$-pcc@@4^*)tB2EEH)R0)hUd2AivRro2SMbsN)cXpt*6(+#J`XG42P z@u`{7UpX+cbl2hqRtU+SM7m)=xksNxXp(9HMql}Ua+?w~;mmqr4F z@bxXbbj-wZzU`(mip{FG3;JM#a%*2xU4229c}?IV`O?Tx=UlNEXF)^F z1YmET?Ra+{qYVRD#PRU;$euBMDy4$uv@PjRO1vocT$0wZq|&E8pq6$x(5oIkPfJak z#0bpTcC>BlVe)4GlU-a|8lQYTQ0X(q#7$||y=0A3(Y8|Jml!kC>G$YJe91RZ<_6m| zkU_1Om>;|rn++jjDnG%NU8vxzyK8~oJwRe5janh!u}Lm$sF@fPI8cn7sDah+Z&6&{ zG?9Y-y`cG>sdXNW{Z5)`^aOQg02&!{`HkYfM>}goQ0tXW&9qwLUxP7|e^RIMjmW66 z@~H7p{lm{gcPfVzSFEp$<;-&C&aR5M`Atva&PtwpgxX7ZJDG%LV{fPqrs_`&6gj0* z2hc-9PE}dOmc3s3BTg9I84Gu=i8(-5wNI&4>xzwNuC32L&BJ1DX`% zWlp5}C!)7blMfk1>$W1e^kC6*ncEnqX-_o(&=&ney*wO+?&gU z3W*&x2aAMhyM{M&gcnqj?b?OnP_@P-s5kWd9h3bfV0Wd{vQB1jSdn} zzJ@>kE&M^VeDT6Ef8{qrWCE^(3nu`vc_(ybek9|F!OduWl{qi;3U{-MLW;6A_g2%F zRi1XintSonYi{40_M&knbKG_IBE)KR&6cGmYKIgpIU`S3y8SQ=S*(spI+r?4OY%a* zfyTXYp*NVej0&J_ILT7Xvu_;)#gn?j00hCon9lDScH6HVs6lFrsVBaqeMwul-s#>G z^2~jsx+Ns%P7pdNHp{g1ZxfS;>fQ}n9`-WSk=@O5`$p4OPq;%qwnsl(H|xIeCpZj( zaqKsL~ zjGcZqm3j20*4=`{+qbLH|2WKjd3dwwWmvfJ;dsO}UNX`&UX~+Bk~};c4qtJq!K&0n z<>=z=ryCkXq)EJa61fLiBZuLlmYc)ImG5QEuf9DgyC%HZ9gIjjr>m&nliqlvch(!t zXlUovLn{Y<(DQj0LcT^AObd?7K$GddbM^^k6J1@Vr4XgZv;N9MTMt1k_QS(ZqlwT? zKbWN->#>V&IQ652?Hn!eRvCDwZ5zSd{H@AKQd|3qPTgZ@{(3K-q18yl<}y4EhB36Z z^`1%`$kG2y%I*7ebF$RVD?*kvVw?T3=lixuamH^HgYN|%&CVme+L^lR6@u|izVXgwb+wnxUj6@H+ohl=&27&g9tes&Co{;W_jXC8j}}I{)7Ud%fi_E4x7wy()_S; zb=8Q|Sukry9%fqyjDlrQtA~Bu(JU)49upSRa#SGamKrf$xNAyZT*YW2`(1R(LP^`LJ5=^pVr#1DAk?NncT9$($9tpgs84jIfBRDqHFLomeA5P0zn`3EYRKwzJK1{GDzQtP_2HM`FrHM-74L|YPL(w3UC^B zLEB5!R2_VjRq~JvZwK^8FuJA>^^s$w1CR3TN&Fd?W2UAy%sa>1HF$OBn@%0?lTkwl zg7q5I7PQhi{PrM!d548y_!d|fdi)iD9)pkQ!0hCylYAWIajfwt?inOE=VtrWYCrs} zjn-HkKe)<^OQl}Dz66uukB{h$Ln;@w6u_0R zMr}~}j^Yd$V}>~OX*&69`XJ}3L~ul(o*qiwG6<2==fIMyg%>YArE;gjPFg92s00@W z@)iQ{Cc% z6(fD)hqYr>0tUlQJz)ZTJV)XmRSmc|6Mp( zjxo!!MmIf9#iB~gt_8y{j|}$`(SEG~is)3c{U2^h@W71*=@eZ=Z82iia&?i4(11{y z6VMsLxtpNs&nXA+jkxw6)y(Usm@bXwa<1=)(gQ%yFlfVDf7bh+)0Y2Irh_x&B7v9t z(kSfA6;0YQX`jK<$Pc}mLuc1n0+XcwcM!qL<>kOihkLwBYvE#U-`^%Yc0q20E%5-t zX~lFL6=q5`+Xkn8y$KWp@PVE0e(y-?fD3({ttbwHxFy+-NM_tOig0W_4_hKN{nJ20 zCW-iy+%>hZQavQDc?-w*?&;9C@S%C#^sK;=0T6puc{8v|iws)m$pxMFAS#hY?eFL_3(w5lijl zHHv9k^w?SpDp9g#wGCloDxw$uDK{^8%`UVe+WpBg;S^A_{VE|{^U8@=C21)OD$^VM z$J&qGtr@j6m7+^19I-hXvfaG8F2HCf^ow7p{b8u7ot+)7q=Yz&$3gOk8;-5E{qKvK zoEh7dMClhN>n(0ZWR~`$-%!U_siya--7B3jdR}fZD{kAu-*~wkHMvdR*0iX<2p#`= z{K9YdBd9WY)O-Q+U->7wbAZY(8ufnXoNAaovDr+i2#2QST({SfM(d3GtjC?nz$;~j zZa~{8_&HR%`cDs%;XTa^p>2cR7A}6WC$Bz_$#N#YEQQR`)JsEc5r$pcd4FF{Repk; zYMYPhMUroq$w|8dG9oyD#?8Syr-o z)d_BGUI1hO+rK=$y&{mt&dD2?42Gbh@!w$XuG%ZyfK9F|1BJW z?fs(?ymk)fczKvoZlfOz_wWOx#X{>3ka6SU3a_~CJnDI~c02j|98lAY=yva>+j4Jo zc6=o&4TxMFgSH`pn;fMXmVg>78EA;aS4 zN^D9!GyDa|)(eDOt~Km0sd@{SBU$<7&BLEn&he)iGHdkVJD0XS{~ed0;zLtyEoxS) zYoC~Ko!fBmzmvd8Yx06$mZw7HOkDlDHbb>Fr#rRfqJMtXeB!zw2y%KYhkx4J)Ja*C z=wBt-cH^KnL2#x(;G~eY%aV_crZxN&$YCPfxn3}Nx#+%HL3ZS6Hk*G=0ng8?&y%z> z;`A9+5seYXqamAG%EfX<@_4t@Fgx_KVtOl4yN-{_jPE;Rs*>uuA>voll)I*gPNtG4 zFap@z3R=ui47h7%hLvq<2BD0FLu{Lfm&PpZ|ExejMXaa%xfmRZ^;+QmR$$j}o34df ztlNfCg5YI?2+>P+osIpF=*({f$@1jJ{aBza1yH4W->f;6n6FQnqHXU3AWVo7C{Q_GruBq_Iy4U57UEK4BpKn;Xz) zE@N}gZ*T8nQhJFPdX%cVp$n&IIHd4ds1SfdjN#^t^5 zBXq3_A%WE8r0F66zlQ1Zd|;PT@5-H1ihlJ#aTB!gdO4UFoq-QglvIz9`Wr=Xu{{w^ zk%ozN$&reJ^^lo(5bE-3H_`)YfiV0`lj24pKK=ht6kNCwoRZ+=e^r3LKrB_Vc0pn& z+?P8%?4A%!Z(mhZ;S-S#n2SaZx#j2ze%Ot5CgGQOpXV)`OxC{9kH+o{{f7RA!(~lQ zH(LAYDd=>6Z@l}|f0Qty`nocY_RG)522zfLfHOxLpY`1aygO=SSg(U`AHkQ}TfLR@>r@#8)*;jx z&J@c5Lz*0AI(nb}RxFA4gQ<%*jwT^iGA)aCtzPiq9I<6E$4a%dY&4?tP|b056M}CI zC+yN>*Ogb)ZJ&8X0qZPZ!{1HT;umF8Yt{&J=8$4=EO+ChH>wXr4Gt~$EI3MNEV*0G9)E?=Qt4WZ*aKjhg5Q_M+*TKHy)37)CE`WP3-`U4hL7$gE+hgh!r=k0is>d9O6I z8jQN5tc}7sI~hnG4|F1f861qkt_RE zLNV|SpDvS{RG=|+9 zr6V1V!lN6V+OWZmocl^AVWB`p*}s90I;MKss^JN67;5du6^t7u^(UV0_Qcr9C$lp4 zMjV!9$`-ky{3P0FDNYQ>$4%{>Z@m&*g$9F9Ra0XMB8c!&PgM^pL@O49W+w219L-*8 z??;pjr9RTpVk==a^)z^|PmK!&)B-27fF^h;2u<{nSam{iw@@zaUT1uQ*LSza8Or&7 zN&?AyN1wv8e^6N-ABve0NrWN;!VjU>4VkNdW+MG14eZFV{MCQU`{rEPYK@2j$2KCL zop0fm0`)1_n8jIJ!?7HCLfc|{VqA)x>{nzMbCP#R%FaeInh?Z0*>Z+KOg#1I1==`T zvEmq61 z7i?t%5}C{aLytzXuMNcM)QRCGsug$fNo%Yw-X_{d9NgR#UCtKD=?DdAdGle05)dGR z5c5Q(6J1_y$dJ2uM#}4V`K@8L6>kyF@30l zLsvjkupc0z#)g}MvxOJS96ebbGk}rhj@tZtZ|(k_)?Ks)Mad9+R$Z8og_(+_h-(Pm z0iS?$HAg?-i%$>qf}T(`w?G$-UUa;PK{VcT$An6pIun0{4`)<#a*4nx-q2w?mISNS zZs@&;ES1coQLm{Gf(=3_?NPS;R?!xN@2pGtT9~X~`G_>Lq5>X0iE^)=7B`&!$t6^-NNUvFlSzD8buIq}{ zQARVd^dd%b;*dYhRLvmk8y#<=|6yGs9f?ZnfJ5BM`K`_XA}h4kEljI-8cs8HWVY#* zNwB1dvlSaG5N6z$VCGOnXW0jZb{WE#QhcMQoa&G5K++r3L4SIY5GHOOqD(mW7wc$7 z1VcXJ2uVOljO6`LhSca1eAatg_Wm< z;H7rsHMv)vVc%+#m1FRnVLed;`ynorxxTaPY^yvqXz-90VkIDxku93hQUZ~!71#2U zZk^a&5b7DJm@YeUNNV=LssFl9o~W^zh}OVsP(M=GzVtP+dJQp47-mZoU9Uw?SLS|C ztRRs@F*Heag?L88*9stOu1nz<^EtoXDXVi()2+UzHV>%~d$M zG!c7Gm5xOv(JI5JrY@)%Ul~(gSsBE7+K(QAmNNzIxu${=pA{^c&TV#E*Pxa^t|YgF zZ*iKdPkdk=H^w32h|#1#X}ut7!Wxn-$$w{SGo^rwB9v^_6cqhb;k*M6H#%-fp0}LNkg@5_GvVHfx z%hM8<0{fAQt*M}(8|z1|`WO{1 z9nBzP;9R6M@2Z|Rmf}i62#!=f=VE@TWK2W^U-7Q+-6OKv`#+AEt*EGE5uH*H@f#x8AU0)dR!0Y`Q80Pw#U6@-U{Wp#P+b(_FZqllpsM1ZCyYqzB56>YBf z4$SNGWK%fxyrwoD`@yv7!J#y>5pP&RGJeBfz+LR52F+4DgpRtQW>O$6hiaGbQBp8h zWfygQ4lUMMijfDCJ@t~gYLc(HA?r%`q_qzM!$)y_=wESum0_;mDMr6jHu)6q9!&Xh zgV(fUouy#u9R7h|iH{`EN7XupKeWSRCDf&|8WnkO8g8;;7dZjJPeEJ}Sh7`oUziX(xziVQ(p0Uc8LXm*JK!_X9G{<*aw$c?u$x2RF?zV!S9#jkM9CCEiK=Qd~ zP5@ssVO!E`F&UQGe0oOC&~H()+H5bPG`MmImD;(Dg@DpUyN22!2I@aK&~~a!jG5co z|Kwg}6OduaflEalnyg(k^PbuTMGXjxIKToXwA)iLd8)87gh{THnMzre@{z|yp2BrN z;P^q%qO2!_e16*tA@)Jb!iqA$XDQCrJbA2-xrD(iMEV7q{(FF}<_-z%`x`~@H)&hcQHD<7+B^c7y?6$&W{ zpDb_iZlX9IFHJdDbW1V*3b{NNF(x7iGOXxvfPxAX=Z0>hfu2-nt-5X7Fo&% zvP{JY%V_xfAb^oRc;vKV5YUDw@zxSwOl+BM(uM%jee7Wj%;bt ztcRZ0E>^SnMX>~@K0~QqtuLBcnJSUTbTE<@U(;Ta9U-`Rq9NA4^&4V6aLN7cC91%*=hf_b5>*B_4s9 zyr{Vdbe3AR0AtvUR!7_sFzE5@3skVyQVn)g< zZXVP0Q3v-c1GQ>JQ_oC{(axh3c4`^%>@%o2f~g#gMd@n>Be|FW%M75QU-g<94ulF$ zFb1T+YSJ-#=prmEcxD^bEnQmpf08DlXWk+~`$@u#ovV?eqv>c-1W=W$YfZ4Wj&zXt zB*bF84uNe2(6B9-^H9r9zSgAtoe1wcO!#P#fNv-0>6wyxB@(u^a8OMQH*~nw z5|Oq98Nf)kXGW1OYnQT8U7uCb?sq{fjh9q^f`d;$N|}&GE25N1fg^!P$ZJ@Vyd|BE z4U?Dt@4V&MKPt;^kW?V>@9KB;8brVXtbQDGidm8*Zd{iJ`gr;7TD}?9`GNWs+XPkD z0AoBne-jFAH|F&W3smpo9}FzPVhmEW7=!Dtl+K(i(PM(R z!TWLu59A89OB#bJRM?Rcg>$M=LQ&Sts1<8p;E0$h#u6aV;7>0tDgx;5ELT`y_jdt+ z;)`?IpXMZiS`V~7*9kA|?hhPYUY41)WnqzeW(AIz@=!SZkzreS0g`r@wZqSe7O9Zw z-^0ag)TnZz@eT(~!>PeZIR>^7dbys~cd(V!7`BUtCiN>J_eL~N%#cySlJlG^<*Ev@ zzCxE1kL)T<>9D@oXQ&}d#@%;DJ#}SLi(ciqjGTXu07Q)w?!Kjsw`#Qk;0ojh} zr}!eE=Xl*gw!2s*M&Yk$o53D#6$@60NTKE|S%CayQKMTqkT?hH^EYrK-Q$*lxSOND z+WdN01p@O+H5qMISiBG*`2bUVtwC+2(4JV~@;g&1jv3AbEvD~#{#B;+Q&^X#n1wEg zcf;i*B-e9Mr)_8D z$Oy8PyyA*ok`vKPBb`bO&DsCu_=TH-F?9~G8$5}jwU!-_Eve39TupxRw0%|gB^MZ3 ziZr}YG2<6i&y-wx$>%SlQZrkq2%-DV(D*VR#bMp7*T*;1q@Ip!i^;oyj>lxuwmK4; z)L#;69VFyCIS!x!^gmC_1mC734Um`c+p;;Sn&ot7L+t`YeERUYcCj6k`Ty!-sLy^W z#Vcp7UrwUYHcy&3EE(mI9QE(nf?LPELE@_*R4xnl5mVO9`-ZM0O1a$seQb$e$uxJ) zlp%vI&r*{0kj`5fm|BBH8YjVAjYA|&p9>N%!jiU@PMe$2C9Y2pF;|HOQzt?#Y?I4? zFvBtkb19iYBbH&N*j@0pNjThC-ntm9D?SO3+KiWkjF(S}kiujs=ghYh+T~IR6QHlE z`+ML&H7bi2n~>hVl{16|7#b28H2@@zW@<$mYB1yubcqbYnRH8i>g5^a?QAsyYss@d zWDGUR)+^)+VmmMlXO6gOIr*oUNYEJysYS_MK&%U5 zNIiSTKFYcezlUn?h#QQFKx~yhm~_MYPB<(44E(yW!nH~))fROyc?Vc#>Dn~hoSu{X zCq_?(osW*%x&JaB1QK)3icL#x-Hsz&jXE=D1FJ(}F9h-X*bow3`a{$7`6-rY%}|BU z%fy*D25J?Wu7BqhfA1FY*X?FHU5m?^`r`KnMu1+~8QcD6i8nAWA?@%k)g`v%LZlS3s|#kZ zMo%P%yQo%ZYCcLfPclMJ&!X)K-G`X~4eB?fy!GpYd4Bx%?pQqB5KLXgT+1)E>cu;2 z+J*{wWm!4>n z%Jg~{xW4!~shdzg#<rMLfW&`JUM4!4%u~|SV@v#lsgkF z>hYEO=Ry~=xXQH0x7xzkPkHJnHqk|;H^KJY@*^-$Var!yUn3Z;T3m9a1j^n#WibUD^^WS*07cGg51thK<5#lgKMo10e zz?s(MS~HGH&>mA}+iu;*^PlpTC)u-GKGDb0l?(G(-I%YRSG;j=t9X##{IZXV!aI6m0@TT{-n3Z zD4zej0_4OPqRt*N*%QYt3Ap-#8q%s(hrvo`64+nEs()JG;4Zg74@=zNQWIV-k(ef^GAfqZ#NbOSQ$WzD^N>f@Mh3C63{5DfIGxv#w zmL+_yy#JR3*J^V0j3c?rkPH-x?A_3b-6HNqOwdH>){egJ!;n-bz+@pPR<|*qvniJ2 ziMI%9;jIj@ z5!8v;)65K15t`A~l0mVC0^}q@VF{wY9DDCX1n4ppDU(LoTeP|?Ls{8C;mO#YWVG9o z)UFz?lix^&Ye#qYNFXoXjKW{65ojo23>@~ms`GfS`3i5TH4=iGpp$0$_|^#+muBzA$BmsDbF+4+ z9XOj|4~oE+40W#l0o*w`h=P~WVApgvEdgR$;YNF0y$h*^4m;YI5J#B9mfir*)*5jB zJe*1DD8S&#gw>-f{MK9zlIeZQt9RF6N}hGf=G}n8x4l00e{(t8T8KW|#}69f7wjq_ zeUmVwKK|nH2i7%Nj)OA;T*~H)<$w3vsM&imJ%?0gpf?=m)^>d>vHvfU*$Agv8gBna z1D5f}P|-?916Jg~H*rL^hf8Z|Yjbo!1B4yVk3f#j@bq$MxZbB9g6-Z!nM_LQakLF@ zzjd4(mKk^cS}EuYppy=#vqhJl8xQ39{6*((5ny*VL&kMrYCZoGM`Fjn1Jp7(-DHLK zX5C$Xn&lc_a6rb+{=^M)L&hu&q9MSVwlSnq_1S)`d^lmufHKSn?| z;KOzzXe`&7ac75y)N*WY#gQXWWQfN-r)sye@IUlu^9u3`fznqX-6L{qQ)HM)WxnN# zYW<=00q6^4(~_uHK<`HFwR?1mM9(zlzscva60pIAoN#5@wJJC292b=0IBDl z+JrmV5EES;MXI6%wabpe))Vajl*8_E40=RS4SSY+gXO7hyCx!i3L~%JyNX6S zJoYjQC8X*#I5m?kBQu6AmwsPRj)(W+K8Wi`I|BwmQU<(k*xhDd+kq!;f**5L`04P! zn@)^~?H6}-R77H{6c%~w9iZg(mkO%nVNWY_RyGa;S6AWd6i_nc(Yy&Fz$v86cdlkm z95E3I5Q;1z1p%oSd{K(r5m)AHx!(7JnWWFSq~A3lVBI#lCGMgOZ1yv$zWnbCehyI$%Zr_Ic&!il{xwfLw2r0NBJU+X;Ja|pFuyDTFTm& zP&@$h7kPt=dijHqWLN?6e*%Nqn_Zu1DS?4X_e&&ijsKIJylL=@(+}Z?Tq*T@+GNH)j z=ByVPG-3pGq$|Q*k*~bMhS-$7ODxGu5v*;IzgLXTBs)@^NX_9g65*m+elQXi6n=_l>E+aS(R=^;x+)7Na+Ds_eze zhV50y!*3W?2foPF;i+D&^?y%BxDy_%EC~kKd?Iu_Z{!5u7cioqTvSI799I+_JICZa z_Tv%4(Q~IMT9QMl)4~+NA%>VYK7{kZ8#8qqv6EF@^mTPZL-#0-<#L}I_P?R6S3JxR zocKh?@e?WnStf;){+FDfX_v+lCFnYNB#S?=xs#pACM}7Dgt6? zf_bX@o^!L~8$y;CT#9(;`#aLrUxE5wsTjL7pON?gF57SEy;q1vUf1-8bA-tmato2_ z@Cmwit<8NqGvZWo`R*RL5in$%!mqSOetW!|{9C~u>d-0FC>feC5$cme)-&B%`OAN{ zncWJ8G$293kudzVZu3yQ+Y>uS!^)I9-})<3MeSX8108%YSOV2v{~70kD|$FWWY=j| ztANjOqrU_Z%yW$3q6Tj+hHYEKC9V&5KL^#H1Mg|pL?uJRt-SP1DbB#70#F==#4e=|K89u2%SfHKo z`f-HWpFBStyK_^)j}?XE+ouFAoqS3Da5EV?6KzSy>pAAGQ{c{a@T1vBD(!?}cYs-$ zSAwWKzEf5NjY&m0$Ph!4`SN!`-CM&|ac%dv;Iv$!&}&ir(Gqygl$`PugCVw9L#PE< zd!K*fE4?qIKG(V0(b@b#ZOUjANpciInIPXwqxIe%oI=pgY+(iPY&Vv1hXWk9!zZu6 z1NSYE9x{Pkce-Onoo7ISKSV;forh$gkL^r6?I&!U&}McP1?W=b$#JB08`C^5K{<&Q8u9zi;#&d{il`YOv1S?p#b3dK_Gbn=GC)B?0Xs*4 zzCJ>2wqV?oB%&t(%S4O2H_4U6!D+`qNvA`0amaxdtL%u3~fo42B0IMfKlU}yzkun?;lOGX=q)v0D zVQ??~OX7IQIam$m#`TAjHE|t@Fi2{SMV%H}&b*<=+xZtPmZ0KiflrMlb_f9$FXtza z=Xp#LT_9{wj*=yWh0Q4J9BaPe%m*gNI9(!cieje-{UT`q!!S%~qtT}}F~>iu+^qf* zsi?bsO(Yci$LN8*%!xdoIh)dj{8jN_Og?C6z zBcnV?m7~TCm!yOb>%a8dz4o})`M>v03Q^?@m2Bw#bXgADCz*JAU0#enGJ#SonRes( zo$vj^U`28gCeQcm9rdVbc#;m7y@m8(>u$q;kfso>qA}bHVsG_&_@0p0*vFAkjVoA{_!(SoMxVH))Uopz5?fK#e zZRuF3lYdH?3cW9X+>+FiKITK@KoeHF-!CQR{CKdn|6g~=oBfF$q0GZko(RL|FJcx#A-n zY+5CBMyxd>FK0k#K#^9SzkF<>PDFvnmq5QHQMe>lH7BZ6m{rpe%h(+jxTHr+-eBz@ z6j0g0x^9Cn^(Thepxp~Dwp}&cf1P8)mC{Mk&e|>_)L6GKc6#IVxss>g0fYb?MZ7A-pZD4WWIw~$- zMrCCcF6F1gGbA22#^!PEU=&L4&7(6Xk@Ec*bGI`|c#Gg9qB3IZ+5<{3wX%xRgMo0O zzZHJ5XqbJ2Cr$Y5F@gLjcStk}VW!rgQbJ2YS>cHPl z`~UrKTuZdVM55l;!vkm9pJ4U=1vqhhtgLxWs6dZ)kWJYQ40%jf+!fNM&8^a6O=;}dHX$G1H z$MO0_0|I1Hm@K{saB+jh?26cPck%UP9keD3WKt5*A`xV|KwKJ~$F1T>XzcBw(3s(F zb%%?|3a^-KtS*e;RIDfL*zCPI7VT53c(pl-bfa1DrlWMy!s_k^PqPI&vj?v9vbFjL zDL*=BoSjiUx{B_aOt?B*;bt;GM1zxrrZKGEI|~=93oLE{Fldypb4fr4rQ>2^C@yqv z;9*f3PP8v!WKhcA-1PkmWYB*`ta1M(`|6)I~ zgPoz4J3y&$f`*>eP*@@d4U#Jcu`rM$2<1ch4H%w3g#Z$w0m-M(y)cX1Kt22uvd}g6 z9P=~tSRQQ0Ypt5qZE$fkql<-cf#q`2eM44pp3r|J+zyziyr}4#FH>%PP!QiN- z@>P&f*CDHM9IqxWLLn0i<*9J-MtS!r9*xrV)e$^wJOxj>PpVeINufei&?#J>oyYv# z6h_NKVJDSPSe_`pwMgYLi|N@#tX@rn)Flk%^%oFzAOxuwZlf?a7^g~`(NuH@Ug0Td zCb2&;GlRvumywth1UnMio?fTXyEu-=^NV;mIZk1XqV`xE#3a%WUA%^xk~k>s?1be; zPAUbMA9d!9hY9a(k_`wpWt($mLsZ{0QcvkoiDoUQ0f;_L$A2suU#jMYdAO9k&LO1Vr(hm>u|6#ngCOOuH15lL)^8j(mA zi=~h&DGekXWjnsTl{Dax*wQ1WJW#k2Dc!HyTFOIVF;|D8U4GMVTzawMiw`fhfKN4-6Dh1ATfF)EjJtCu11PiMk3c%7WNLzjiarM6%q%?ED>m( zdW`yXUm6%}xl?4W6X|}DNF?0Pmh!MAN891E_3sjv50+l3LMU&RF6RBlR^F5@iOlAL zk(C9NH%mWrW68=>%;Kl|Vf8KCD`tmS*){?zg|cAzauDi>{m#;>+HxZ)VHyI)}sIa5x;!FR&xh*@>gfjo)53{a=Uq2xq>;_xkNKLB)hR z4IXxU!G8oh?KJLuC!T$^fk)MOa3%5kH#-37|1wO3cXoE--~avJ@h|`KFFX9}zy2%c z=jXXd=WsY24u`|}1@@;%{~v-zXN1XQfLdu=HnP_}pDWB`k5;Sw85)gd&-*zX4u`|x za5(SbBK^OZ|E`-TS-w8SUiWi291e%W;c(u=MLLJW;cz${4u`YP*b(U*4u`|xa5x+e dXTR_O|34|Nowj%a<`Dn@002ovPDHLkV1m}q$(R5D literal 0 HcmV?d00001 diff --git a/windows/security/threat-protection/windows-firewall/images/QueryUserDefaultblockfilters.PNG b/windows/security/threat-protection/windows-firewall/images/QueryUserDefaultblockfilters.PNG new file mode 100644 index 0000000000000000000000000000000000000000..ca61aae7e28804219b97ac2184ee60ed391b80e1 GIT binary patch literal 186215 zcmYhibyOWOxBpFXcRRSdyB3FoySp9S9a`Mo-JRlEpt!p`6u08;@^bI<+~0ct$eKwe zSu5E)lgXZMJ`qX^Qb_Q4@L*tINYX%Y6)-UHnXg0u3;k8H^)o~D>+;P-MM@N`W{Tk7 zR|e8TL|z08tUeCm%^2z{59bKfb^!y!ru?7uO;IzTyT^Vh`04X5Bc zIBIUksAWS31=J+#Mg=cB`Z8RnH$UO4NuC7-%!-TwK=Yn7236$g*-41CP^Ra}h@ zxqHon4i_O;yzpj&`mZL%pzcG@BsJgZqYdv;T}TEzK`P4N*^qco2SB~h_CP&~5FwkS zlLYKnPouBDD*g3aO+W_vIW1E5KO^(36-7HPesdg%&T0zK42!MQs>L{kOFNE{tXis* zyikLc=-3bRJthfrSN*$qK?_Q|Vcx%zIZn>Q*U8igPyRE6SPRJwh-P6^I7m9u z94UJ#A~=W(O^)6bc^gkaKc`dF`$M{2JNAcfMlF$>ssOw6j2bZV*n{l`3GA@zZQWxz7cXh;ucsJ zjh-Arrazo^=yLw!y!O|YxE$cy^?h=04Wqb8^J)=mwI^6@zhN9Ok?sv04Dg%V!B`o~g7 zB(L1uZ+8b))F9B()HPv?M%q-g5gU*o5~AC$F0uf)M2L}- z$Fs4L?W%ohdr@?WVV5HSHGTsjNdHMNOR}Oagex`iA2bP!DCW)xSAr&@sFxA^KS7bw=CBUiuxv*6u*Lci(ZP_;n6It^2y=V+)W3w26(580Z~k152S<8 zL7|-UIp#fAba}tdJWb*qC*rbYjojkyvQjKS1R9l4pak8;UcA*0Ua>h9sS}+m1mFWs zpxUOdvFCV`uR8o4^`P5Lr-r115|2F0R^>slSlHJbrZKG>6zUfdiuELk22uplOgDFt zML^%h1#C;W#r3QKg5be zQ>~o2rvqs=X%Pv|CPDOaqFlZjEbx_+$n>&j=aJiGA<2#L9eLO)8nfleKA6hQ$--?7 z0=4b3+8@R7mcJ5?>AQA%XC(@WP zcbJP}*ac4_;`_xD@9mrV2KjDr1z83{1Y``#Rprtwl0^_xvo&oIqy?iO4z2XioOY{_!BYuPDu#PjQ2V(G+pwK|E8BcR&S7YOYHac7xLFKP zTuUaI7d^7RsxX|gSPme5l4s6%FxaQcJ}DW7VFj@FB;Z<+)2_o!$Dw5mO~|mL;)p^=#*(@Ho){M!;DX$#azoHrZU zQK64`;yD8#>MGv-C5oB20-qA%{wniyVR1TCtt*BLJ19GFY`I7>k08p)z%Kl{K}Y zYdMkggnC5OKs_p~RU#wty`eWl?yfBy`5fZ`DJ5QztK9nYkBty)I@y++&ZvLZ;aS*N zWK$xw zK0jo|*Rw?ytg3UOzN?`Yn!D$pjz~GRQbi{nQE$apVwEn)6!ZW$l4M5c98uOM^)v}Iq4f(AL5_6KfQ+MVa(lfQFc7S5abBcMc z8C<$bCJ}bHzu9rc6X;^btP$vL^r&QErte9Ks^1$kt0^zVLAm%DR+2aT5pmab$ZRqV zvn>Va__}nnO1S~zH2xCAFutuAX$ZwCI?J&QaR-E2EiLpiD z%+%EPO!N4ngI)0ma0qj-EUTtMDFLBdiiF`VGYSb7+V;kE;c~*0 zL)dRqmzTrDe^rCpx@ZyO>XVU-gLh44=E{qVu+cqd?J{c_3<29A0tmn%PrJg6wiNkt z+R6UD3Cz^@N)B+(EH^SD?I@O{@bx)%C7n!^D_DCZsdo|4Lx?ytLsXVP)R4xzE zj15h1_WLy2kfsQJXD$F|p5(<%>h`(%)Mt@lUd^7cQwpvR6+Vxk5>}CIe4*CKk^Jf# zVyx-xO zAMETS4y!S7zQ+n2M=LCBJn+P)+c+ASU;CY>l7SYxbq?^K7iT0bn;&Qde-jni;)7}? z@pq6I$Ss)$KC&K)Y6NiX)9_&@O`Sn##^{AMe5em^(n(m=zkd)A^KT$iGu}rxI2R9N zv#_z&hNlYLq1VOKz3jA@m_9Ffe;SK0cr~#0P^7pE z{GKO!2E44*4y*jr>}as(d^_vn+l zM{lMfEoRYRETh!L@KhqK!hLj-I4yGrbuit5=8X(>gxI9gn4Pp(Us4AME48SmhKN&L z-qMOe($A*RmepjS@5A8tOvEy(MEW&jee*($`C^G3wH}_$nLhi z?!D!_^;0A9mH}Vd7CMj~O-|971fy@F?q)`4$b~j+tW@X6?k2K0a3Pf1d_pT#?~7{=tuRQhNV@A-QnGVAYqz3g z);AN6Quz(}SOLcVrN{SeZAS)o65I0(ZURx!#98DdcnMb@XCe*WF>#E;}ZuGO>u{oZ@` zyW=mHy(|3V0Bx*|mwZzhY%nhM>wNSXuO_?9w}fDecO@-8d5V!KVS*R+9wDG~imr}p zSGkHQDob(l$)_PI!932?-4~7YqzQ8^GdrDDRjy74_~)}cr*JR7 zJko3EmdmI9cpz|4svr@jf^#Y&sE`RC@77#mcIKh##pMVEtYXlX0 zIE+PrSdtZKcV!oM=;-Hin(kNBa0$?(ocSv_Ld!VVH(I+pkCH1YP)#6z0H|AWQA)TE^x5@#tKN^n(+Wi9gl6s8onw~8+^`v22J}t@@5}j?17<5rsvp`WrXm5 zY=8DKx=CjXunHHF>_c2(FXr=+hkk6riQCyHr=;|t>I^|j^Zi4(8ME0zj5Vb!g1YQJ zqT$*HI6cf!PB1_jwWMtyOZg)FKC|tQdF(=Y)sba!xyBrNgIlog`qurC)g7bz;94+1 zDDrsC4%MInvMy2{E7M4 zeThu4(gs(vNOY$#60HuK5wkvHme;?UYn90ARplUZK7@aL+I>sA(dvUBGnb@=OflPF zM~p{%d8Y@4rTxW2 z8MWif9BS3Skk;q^?zp(WK9KxtQ7o(ch^qHoKi+~Kw|io^ji(QpZ2ztXG(DkDQA0P@XxHwnU(@*AHI1btvVw!TPRjBAestbs!%df3{S6wkP^r)VT?~SD9nRk-b^$h zOB6+aJ-YQbNO5yMSOC2wBp55~axDgBs~(VZe!tQ{n|FWGbJYq6NwI=;&l@!S`2rAl zHeog=?;NKcis|-c{urOcVqu)v9&9XH_zl^xR(X9LXWMtqZ9fopxgNJB00CW=7O!g< z68Aa8^y3D?j^+W61*6{RvdbEiH{kjoZ1e-ihW9#`+7V2>EycHw^Y^Fst<7kN^(a(6 z_Q;45l4uS527LTkZL^`#Wf;~ygi3QN?B6&C_a$}DhmKty&<_&?9Lb>FJ{RV_@o8l8 zT2_>)Mcx&JsCo|+^(pFsQWrB zd9O(Sn9gOMMW@FEm`Xu|U4V2|0WTk)ZgHqVvV|Zg7yS$1-Bx0mPDW6bf{PSerDtm= z-M?~0F!ZkBnaHZPgqf(sK(ae2ZlTL--}VS1*f5c@H3DZhrsvwMgYdiZk-GYTIH-gE zfvX!?7N->ZLC_r2BVBU+bmH_>pzNee0@A^M;%r@cbvD{nii+)>+?GD7 zyqGkDKrkWz3&#HWiFoJp={(NJ&;k&HCv*d>`~HBRH_+*^5sL4?6Rc~$24Cg}eydDv z|1v_n{pfqU$J5@4jv&^bu5|?`PWU39?1`=mDVpnAF zABZ-o53tp&xSotGY190$y+oMYhez_up5cVm8UJDjXtWkWi}^`87iPAWjkv1VY63$^ z)J%ZboOVQXj7Lw3ap>ilM;+hyvSeC;8@xC2cUWY?Fh6HCM(rd@gQX^0%tLb$0p7st zHud&S@{+F@Yq*xC2KBh{h>5(r9Xa+Os+A`}+)Wjs0ZEm|sRo7!y@fCbiN=wV^-pV{ z(tZpf$15TFann-HN=A1$v7jpfy#_r)1TJ_%_=zPVH2n?Tn2`a2=;MLYz=4ws2XdAm zMu|F<7T|Q)Y$Wh)7u*vlezL}0#5Y|7GDwX2$@BBfEgMfu+)kem6w34qdBSXb@WaPJ zYG`2osciZO{?JfRd86F+jWg-@7aQ)Kl-f6_t_KsLy%CW>2xWtx_#IuhPeTxKWQp1# zH-&OqdiKS-Nd(0cj%!sk_GjYWo?roQOa$dz+p>O-k53Op(}fOewa~+!G>AdfVEAkB zERNUUsiJW1RbDGT+VPqi5h}>mm6giL%L_f*#KYxVp^WQX zMi2MIJ5h#SV71x!eK%w9p+0}m>deR-|AjrR`@K>b2y%zx&ea{oqU19@(S0m$`2l)2 z7*~Fi5@H0nx^f;m=4S;?iisHo?1vJ5B1UNX{so==?M5-5qRi%XM=oL?zk&e=X6jiU zuLP)EqEF?X4fQ1w_ow-=TviMw;Q#J#6YwWZt*GKRFl+=>LdoO*nn@?>tyiU|*?um~ zbX`H0~RUsV5PlM*M>aFc|bAu>FUBshx_x@<{y_b1gGQGF zC%*B#BG>nR*DVy4Hk4#(JtAgF8Q!r(wb4Kd!Tj?GcPd1{l8NJ6jowDbA5=xZbK@U} z84_pRB}hXVR(Fa|=77gc3fj7jJzGol*tF9h1+x1BjE)Q+g0I!IfB^YohAm7gc^(crg5So z`GOaKti0T(rI#(WvFragxo39{zVFQ8Z!+h)xtOFfEgNGckIw`8;SWg;+YQL0K1zYt z69De*iE?Vfz``Bbtyd0N0*;n+I>sysI%%p`bZ9{tFx{BY5nG*9 zz&(+|C-RIpJ?pVvHdz-2%tSO zbPc>=#`OdOA2|9V*}8-MhMMxv1s7A>+;?5BIcsY)qBPf3710_ISXVr~dwrG(eUgA& zGYd6DZZ{S#Z@kh>U1OBIo`J_tH2R+wXh>PW7L>jmyS`o7JSi5@q9zvN`Vv~LN_!EI z8&_)HCmr~;j3>fGI75ih^kjgaH{?#&C0XW#L?3srGaMOF{#nBkU(*CxQR3*lY72E3 zKmNgB8|*ZSshKw*;#7|3OIq0L45Ej8nOG%CZno{)5zLyIor~7n6Ug;Gl*sND@R$AB zsTE^pa+}*}$>3t_?MXl%;Ao9HLjn=>#|i;Cnc`~gwyb`{=jJK>JvP$~QuJ8x0X#Md z6&E-*AVI`EJc*5oso95>F+3v&JBZ{)Gd&_@Py<8dRXKJR>bFbqGQ6_0<}#yU7+T+T zo1T8#YdbD#Dhpr|_>kz}lfL=868dX}BGiO)MTs?z`r};!vZJk>Tv-|t*gD^#)%F9= zg1P?o@vw+yJyc6PJeV+LvYKXcEI7wk)HH2|T>wGqfQn$X1!~e9`3@kpqoWhG|zukH{>rjk*KWs_meEXStZQ~1`AA8 zQ~&#+bY~AxVM}NR@H0S5U-b7$i^Npj#IY7$Ta*BBu_KpM9$w0 zrcZdVvZ4_*g>*pU-Vi&DXi7xXlu}mk*vA5WIOxxoi0WB?Izsd|<#0Br|9h#3<*fgh zM5(zGx8~aSuHnPlrg4X(PC<)U9p9#|tq3!xdeO3ivNt_@pd>+kKP~YtIMuPnBQ{hd zdSECv^MP+6o@Zjh=?X!DmAA{^+%S1a7&C-o3yI>Bxr-~{z=*&KY9WjOf#`Y3hR4?l z-ZY8h`-JvN*Pn0eTPII5{gGX3Q6D zZ4fz=2Eo)+S9kQPTKT@knwTao^>Aed!~+CyO^YU>xdc~ZO2tkCcAx*p&;q1^0f7}TNWV>Q3!4@MJL9K z4iAXT%G>&iBDiyo@{K4A9ybv9N9#AL8+EU5O0zT{GK6M_Y56k{68UMhsFnpOH&?x| z2%}aEf-w5{l}g4yl3LQNP?D^CsB|LS5K4BGAm*-c;%q%h4Lc}!MpkjX=M|rFWc*B- zdSfxDu{oqOVvw=(3hS~^FtMNu;HMb-F)?WX-LIjK&XnY4f~@vmvkS=~Kt&;iM`kh# zS?Zc{!qFdd0S`Z=>M9vg#D-%F9IO+daRnK!E+8Al#d;PdShOeb+tlaM;9sa<(F}E= zDP^64g&icct8i)wPzpQh!zIT;odo#O4{-(Q4uFqtTT$Ei|c`? zI0iq_4WGx-uAXbZhqM1oI-5v>RY2YiA^r*Ye5=MWnq(4lOTYoO*Ix1$XTjy1_B$&G zp5W(%*PBLapN-tLlUzQGFKK&WHJ39?g<9ERQ)T!&_@XB@Mvc(ciXab{vhcHdh){u` zU(urZmG#af$+E?x32oKf6T*klk_d^O=;Lw9CP0m2!FO)xE{PCbXEG#l{_~9pN}2Ma zn30Yoldl7f03_E4}rO42vS^1fqNAtmNNjNn0Hd zQtrP^w<}<-`@URI^9K3{4LdmP?`;&z}CH+W9TZOKHU22sfqkmgqs z0j=z1-q-)81!Mf)mea29BD^5AQJm1Xl{Ui1ImAUvc&`qjQ12Lxe9h3Ah2G#lPW*(z z72jtep4N#UjQDKDCxENG-g5><*_j|ppd5485A3}6v-zh9ZbOkrHB{D$N|u-ano*3~ zZF0B>rO@EuxZCf3ns4Jg@`+pQf>GBI${klhIM*njuewhQ4t_{}w@TclMI2Rh4Lk1X zI}EO5e;Xo&tH8K7JF!9vqMqK$40|xhH4Yc$$U}yVIKWM{9<;cOIiplW?`Vwxht(jbu!HSvg6R%&JH4h~W)?&N(w{CS#G{0ZIt>A-B7J(N=gb(E*pPo;7$|1V;WgOAoE zUry+r-mKTMWtPX7zpuIpb#x zw)OFn^z`{Lx_kxm`Tpv;Kfw@qNByUcVgha=I(F|)+vvuW`IBk>H8 z?Iu!LBXhWAtU>Xab*>ffOfbMwhdh(sY&it+jL#L*Emrx*>FHLFi$&-{)Z|^oTEzq>7*1jfS@3O)Y5&$GC_QZM;(E>1}RHAG? zFGOa6XL5mS74B5r=d6)iT@fJJYvR)!OJCHu++gvVrhru#IeXs0p!=C+2>H0e4X^O? zN~xU2$C~jq=qeivmFn3bBlvPcEZz66mi47tXmDb5c@-JAbHu^S;B5~!abifL3@w)k zob4B|WgHFT<{~ZCi7LcKnelPK`qRcKIo^ zp-ec?IIS-(4owc7Xt$0SE0>IQMApI*Wu`;f;&y0ybugdql3G;RjGJUJMVh)CF8KOr zEGtER!zKuPIbvxukyvj*x_T6dLU6%W^RSha&PSQ<@## z#ZVA?ow7ULSP5?@;|^_~HgaT*NS!=~MY%T}O%EyEr7#fmg*)t{I$Ljsx?da|nW!_Z zITDycQlRZ4-FFGuw}zNUejw_X6Tsm|*$S3tR390?b|lH{J&;XfZ6*k%{!K8Ml7TDG zui#;Xhm1#(<#91IwB(J6Q%YXX5rlx_UEhiqI-3y{^T(s0z6tkvlOl8oTAFEow!J=T zpOX+v;+euSN~-}YzoI8#u!N?=%6?!aL04KWaS74Yek-hVovVlo|F~@?CPItI{(1Yg zo;Iw5++Ivup0}!tl7S2f=Asp$`TCo{)q$VX^xHkOpD6UT5^5V35|67T1{Wvmxehlr z^ZmAoALJlo3{4f2u$M17Q!F(GJ8RWkkJZLzK#t0XD|bUK2#dK?yj|^@Mp9uCvnetpAV0MhZb>XZ;C=;BCf{-YG#s%Su_P z)c#OF9)R=yc|;VI+UKY|oT8Be%8IwGb+1LR^|_SGmCLN>JjOVqK|mP;VU(2j01URiTT&xmREXJqS(pacKNH$+tub=K zpzu&tSl0zEQ3D%#Xll8(5j|CXzp|hl4Q?YmnVrV5u(RpYVlthIw-1_wg?(Y=>3|O_ zgVbNwO~~DoFi#~m?uKg|=Qu`OfKpG9(LIn_0dKgWi$7vDGI1t|^3AX(_u4gdtGieX zGsKme58ykqj@+5;z6||ofrQM-@AS6n%QF^flz~5#F$-&*^(!8b*&lHsZI+r=&=nAB zErN$Mi(8sjMDvSAxScdQ_e1+hwAg%M+K42u@Ru{kjDwRCGF_uQE|K8?8&V**b#A#y z`g2q9K_Sa}=xDD9Ly|4tI1&q?QQ4w|NoH>qlB&e?wI(Qk3m0zHoh&!5sQXsxX(2~G z-SdD0S`(vutpkbkkXPXLP8v5-$LZ-18S(okB30F(WevT!FZQi!Lfq9DB6c7&4_g=6D?` zK!+_DU1j_Zi5Qll(7GSj+7E(@j_REKXHx--=Oo4kM%}q6SrawW4+#`W#fe{TjmH-7%4OzZ(~_LuD|cbwuk~z(}Dug zk+B;4J`>@PX{>WwQ3(;06q5=I9_NEg&^QWRcbHSi3<-Dp`GxK9ZT}SR6K9Mr&6^dp zH}hCC^=WKuO;&kP(*XmcQANdI?#Z0Z`GEr)s3@k^Pi)XYs@o2b-NS~xYNJ|{lu=!~ zG|%l0n9Kn9Rszw>5NSDP$b>DWKIgIGO$K9E&u=);nmcKXFyody9H4$QUGd97tff(c!ciJi z^#0M2y9uDq*+?Ox`zKlHp%_hmHk3WYi%;23n%foQ0S)O6!sPU>$rk(&=w}`8-*TI3 zVG(ak7xJiMfKCAQJiHBCY`wG)T#|AE?(g9kB>jVtyBj`iF*5YNkjC3|B&hf_c~K!k z;dpOa(~60Qw#GRn`3Hk!kg%&UGL8?i=G4+hRSa1fD9T8Z z2`ujytpEm$rrEM3DE{zLw7~`$}awV307>usybN-sgXf2@V;}3 zeoA7&i5I>sE+52miX|@VhVot_0_um9H~#2==GxaxCLad$Yi+?|_e-0lB$JLG53?Yd zAdG5=F-p%KxTJ@BYu8TRW%X=8zQ&YLilc+H%-ys2=qERAO??oUjJ%n``_@3sjQRbj zy_TO|u8;ENC7PG86!!KG&@nDvnbeDzgJU;jBi|AvO;^oLa~c{W!hWXb=qfdSD&Ub; z(oy3K)lVwn8mMBR)h>j5emBWhRUw z(KD>7Q>+iNjJl`XzQfM_J*LV~ctS0C(_G5`6bG`&Lo`^g)%)47mm2uNGaF{kz%_k| z`A%;;#2=)HemB&9iEnc_-QjH++UW4~FuBblB%>nC3gGBRfL;;tRM`&3)m<8LS;mEV z#+Tn(`{dtFpm%qXG5(r~w_{T^LQ%yYCOB%HvsQC8Sm@mpz-l`O1V1DsG+!vbjU(vX zIH72l*(6uD?=~c4O1D+Ubvv>oQR3XdK8&SWik8x33wU#kiz=5EfO=EnMY#|siXysi zJnyZ$Y7fPNT4meaV|_`{OM!CVCrCUfI-sVS5Y@Qcj9hd%Q+*V6GBg#OuMTOZk@ZIN z`J5BKrIu;0)Eeopj^>V?khAX^rq&em`AVy{@L(jCFQt}kG_ROR=CRG|+l5d)o8}fr zFST^e?!pg7zr>?#Yb_XIMkctg{hu_u%ih&paFvNAPye0)mT!}n>C{nYw9F4abU}&O02Xz z%QKr%uvfzHKgq*sP-*UZ^g3+`M>RIim*{hc0RjxCI|$*%H5d&(RG5E6I@Fu_x`?=#B8!wGLz|%@_CETcCV09?j zrPXM@(7NT>qmND_F12**>o*|)*6l<4ZA7o;Q0g4tBo?J=N5?T!2-I-7c&$*JqYfmw zO9;uzM`};f5B6yT8{KgPDBG@bo|t~@^`DMydmD988mJS=Mg8>ug^`h?LCD0sq8Z7M z`3KdtzEu4CSP%JVmw#qP;$s=udLsL8wMj1Z66&iB)41)vr!n1=>aUaRoA^MqPda zO6A-PuVK*}5seUBhmqw^GY~sE%CF`d$!ltEEd^^Na#FE8 zNw|eyvYTu+`-b7Hqjq|ra_NgI3S_n{3QQ4$8a8}Jjyf^|3feGK9#R*IIuqeR;F}qh zVLfVW%1z1l40Fx|nss20M7J3sM_VkqFt7?02uGergY#T95vE=WNo$dQ6D(#tCRJ$B z$Vw1HDIK(ILII$yJX@xJMg{D%|26T~W^~sAf}~x5;hf}ZKcRJjP~$X(!NuVw9oNfd z7$(#=<7tOVZ7wnmHRDZ~e~}RJJyuw6C52?b9D;-PLC|zl{>}vM$~g= zipV@A3RV1zh5TP5@G$6{>!Y%~z^5i{`A~GWG&09X(^+lMOtJ-Zs3>tB5YCGfq#{IVG$QTC$tXrfU*Bi~xas6hLW`+k$k8sze(x*5MkRb}Dg!3w z1}Bt#)4|0ec96D}u~79=I~ZqgE0T#-$lNIpd2I_YCuQ$!VC%C@$oMIJixdwhd9RV% zK1Z^tvXwb|EeqLPlToaldwk{T;eQ?oZ7ZHjF`5KT^y~S5pv49I7Mz-8ogyEmcz!adhkH=!mc|{XRPBttJ8M9sruqMDwQC;?fkph ztWRbVL?cfs#L!wWSChykN}j@kRY2K`1q5EYe=321W?T8eV9yGgfxIeJ;PWzUhUZ~i zv z0rG*SL~l6J&9}GS@4E2L&6eij`5hPqJ#;xKKpW=YA-G^VH1( zDA!z4>y1sLv|zO4IiYXyhH)F|fZ^gKl9qC@;6~De)|s=YR-)Nm3L%k?Lz6Lipn%Ys z+^u9x_&>PMmm&ZsA@PMQVY(h`#c}@&(JPI$u}qHNNselt6pDk6!#ddnhfJk@XJU!He_%aaj;iovxxTJF~&(A-t|s4Xp;D?HP* zddvJHY&Nss>U|m0$`#C)=B)k4M8}3z@4op%E?+;w^2S7mjMM>g$m(=N*78?j4YXp) z-hJd34-{5uuvzN=AJ#0^&`D1$-|hG*X30nK>8-ct`H=3m` z=`stui|-@|h4DN2HOt;mDD~8Yu_`jwcnPGQGOvg_%|F0dZxvw~MsokEQBmVDpDNvf zm9lgt`I$Msb`7e+k#IEs?$f!)={b(?5R*q1{$G%)GSCfD2U_c=+QRi-eaqGMNMK(YC)>y<-N>3XrUxA3OkM}Q2@@^_EEHmcP&scLFsQ(wDyXKln zb3A^cy>6VTdL)w2Eoyd%Bfi|D9$swdGB~sGsD1G+bGzNF6#HKyufP;3Qn)g$baMx_ zcCRzW#wtm#TFCW{O=NM5zdV)ON4s+RH~)Xl`pASC@Zc#>QC**$_22pMzgF4=ub?Eb zX`JQ@TKa#aU%}qFQ8J1a0|SHbx`hVy*NO4}hXHmFeyLcq<=wL7|Az&B1^)a2Q`ukZ z^Z&Jfg3HIS{7(n}w~{aTmq(i~TmJpO8edCKwIgG|(iZ8$|26t5vbzqYB>3vb_1@LR z99qHy4)b-EYKp$SFXdI9YW{yZG0cp0$2r623*UhOeUCsEZ4-QfXYxoD=4K&;Ql z45~gCiL^v@MBX1c4CrioM4l$!>R{4k-s7CcVb*xaBKPXHAuQ$n7frlm)sxM?r<~#2 zWZldavGUleQu-{Qd!Rx)zT!HK-!w4U9rpGlr|4-8*v#(cmTY&Q-1@!K<$&xVsAqBX zU_;>P)M+^&Klbl@$+mNn@jpY}>x{L5ZJNq+dmA?Dr0RsIevux{B=cYUrx;0$Z_9Xb zKdifRet~xK5O;m6F?hQd2v_ssWx@FP(zPiq^IuEH-hV|NvBXjI-U)Ja?Il!9wb^=u zFO`+;u0MsKbE^mgo8gq(;ftNn0rmwI@)hwzzR^w^IuGK75&Xo{#lVVb_ zpJQllEuMf1Z5BQOT815py()K~P=u&u<3%az8#>9i)gyWpn@AgcvUCOB?N{YBH;v zY*gH^8_5SnO|w`{ibrYQc7!At=W5f)epvUKADM*BKX>y(EzxVK(R}1*pT%y1(~2uB z4=nd{Ef_3my4VFqH;La`43fNF<}3yo3D`n#Xt|%wN;l)|gQ?A1%|B=r*Zj`2J zcFWu7XoOBs3eZgg>Ic$msPI*RgSGFS@G)yq>+MfVA_(;wFBPse1bnV<*~0G%6zF5X z537XYg6Hx45(i2tm78I)d->0VC)#lZADPs4PyFzW&snlh@%XoQo^QS~-XM_Lwj?QNOelg(V>uq3rQ^NDsr%7_$jP1c~0cDNw9-O;rJ#j0J#P7BuFJf z=3V0mT(~3voKxD>C{4fk=%d^nXn}@oPor4%jZKS#bbzh*sk{{wTI5WH?zGsOj+>?= z5HW7VQN~l``W<@H^yP$#94+Tih`qKN9lw7#k;++vUd~#Bd*~0`(4ZP6>N>>bjZO;K zZbxK=B{~bc0sBEb|FviIfw&(P!njBxb~m&-6;l~ZM%!vKf2v2j&a{d^-&R*}K=3 zY&6``)G4KjL84JkSQbz8Y~AwSi73)G@&=Lx&+1ks8zsIq1Ee3#KV%O|id#?8!ZdtU z!cGqHNnYq?WjmHr<07-3lYSUFrFG~f1YMlYE$jo^t~WFFG|f@-PH(Br%MKLj$KBYX zmLmA4m;cPW$izaL(0WK#Zyf9D+wj#YSkp?~{)gYRkGyaaK@FS2b{R(^|< zvGVDao%zMazpd*11A1hlB1#?K9Nr;;5VD!5hiR8OPjEKjw79A0=jP{l5XD!fqYe#2 z=JX{?a_K%W9ZSvotYRy_Kja7xu_{VJXKO(8?Uc7#a&N+`7;8|o&1Dn7tZa3wLw!KT zcNta3X+=$%)ss)2ns~9qcob>{N86}mF58t|s@Sf#$iv=U2no6r5SMV?)5t5DSd#`v zXQN}{c%ofbJH{_!YE&X%gGGtZH>mZF3aYc51VSU#DUAz4t{1uC*?<%++}xBYG!f%!;Rn8=2aI_&?CZCOM}7- zP!JCymqF7i}^7CBrN6%j|47DA7UH%U~(mmW~hLhIG`MaEfk{~HML z%H4~bIXE$azQJ2!xz+$zjdVZahKFi$bUaooA?w4RX+uA&q8k+`M=cr^#W0UM*ZKbe zyg)<0CD_o>#59BOtwyxAX0Rh-_oBJA2Gv=1_?K1?Vw%|nrD)#Rf!gA9AV>qpnu)5W z2DG%)qqeRdO_ljD$NX6GGrx`k)V0;1lH)~uWd#AF2RU_(=-AMN+IlVC@M;Jl7CyWE zD|({JmSrJjSJSis8`_#tS5-=)lcapBNZP!prXFl)t4EH@h?V649NA^)=;}mEQ$1>G zm}YS%LaWR0hh%U!BBQttn>wms@ULPuKm+T#Iw^e(2k-oHG}M;CL1Q4`4=IBtEth55 zR0&5cgg}r61NF?2QHa*At=Q010k<)Nh4~ejNi14Bw_!tTBPt8h5LjM-FGQVtV|uJ- zS9(4gTH2}4&8RBNp>Y_3pXoXCD$u^6gL!F0ZAA%nhvn%DlBBWxOY6|qT!!SrB78FF zS>32^*@R8)EvT!lL1Bg!%gaj$iJ|$%B&AqQPL$Nup*$}gF~6Vnuat=fl@)nateg4* zL|Ddt#%;1^plQ<g(5WV`R+gh`#R9ir)L zb#%pDT*XnHr_xb=Q|`ptOyin6EKVG{=i{h%OySbd0u5jKBOx(3GO+FNUHHKJZbPMY z2CrWlmuOX*>%(8s&6JzwzFxMq^u(F1lP858hw#4l--r8mSKyUnr?4#jstR!ZF*?b9 zHDXP}rUQr3Rp`dtCrUA2ys}c#F zC6=}D67#kBlt?vandnKN`M`&8V}k(~E>ChC5$#F&QC`+^poNhuo2v+Se(JZeqcDmy zrv})jL~h={Uj0ctB>nNyt@z#hcVeNZA9L(S->4f(U)O~b$o;kJHKSC65l(Lbnl^Nz zqp2Dkk=S=F!DxeA7rdeY+1%0tSyqGcm8lJl5bjjFWPr~hun zRRZ0=gxf#*aU85mNB4b5t z-;K6yyHTENRs$}FYdEOi4jV}^!$cUj%uQPyZlrk}u$htwhe`J6ZV*3|!)15DZM9Ie z7zdUZyfjAZYAZ1C>ce>c!~o3h3T)rC8?AMD@TBLUp^9Y7w@h+jM`1x0ylxL_I(K4Y zxeJ#r_99Z$f!l7n2lw2(6`1Wo&%i7a(ve1tC}`h`kAL!hw0mMW+ua9ieiioLcmwK6 zi&0Woio7&4mPlSRGICIunU1{TT5MrGh8AYgH#UdthHZHNZHG}`XhH9#e#{t(apS$W zV`qV#yrdF2jjZOqxOqo2Oe7r%9;*w}m|BUUv}+%Z+Vq0Af({ZAP#zTg~40~=Z_HJ!M8q3;~$2Lv_CNMdQa84^ec>6wBlQcwF-?7yh zj84v@VB6jJ#0||@Tv}Deq;FvyQ_D{5zvDi1R@;!Uq@%vEfdlIdk{K1)yMHfAv$9c5 z!y&^S!{qED+*yUl%gRDwX)D`+2U8_bfSFXe1vAL4eqV7J*Ak2WhV{g2JzPDxFqvVt zm|(WCe{gUt6n7Z|8K3xdIvtF|%JL>LrI8qOmSA&p7KVE`rbguH5<9|Z5WQz!!kn`f zC8lW{zc{AkmZxww_9HIFVWx`66BBVyQf>$PKnLAr%oRDr-6DOC%L$vz95c_N$cz0a zaC|I+j@km8JaGa`ia_%g<8ZN$kv>hHF3QsYIEfM(@+C%Y!xG8(})tvu0_bLpq$d7Uh2 zv)Wmn<$;axy7iZk(QhrV}CHu{#nwKGNLpzq!dL|e8t85h&yE_0X4a@v31i1jCH?= z;e`aeUJvz)ZIxxP@zzh^rrJ18_s?)_GScvqHq0`j4m!zs zW1?NtIT^d9jAYC+nXO7c?FDt%)trr<6Wy4hv2SsB;8wawd1bbq?Z<94U7eL@z1Uet zGP`bI-MZY&3weR6CmQXwty|FEREC_ATC`MVVv+4=jD4=Nq7981e)Nyb(8yP%srs;l z$qJ8$IzSoCMtMTb_}SOq@yY)am63C}I2DDJ<7Sj&_qyKiU5Tp%`r^W%N zwgFxeY%@EEZHI5c!6UchU~4TRv(p$0n9#JH#A)9~bne-Yy}R0x5t>3IXA5pRyan-* zGnhmk_S|JpVH8oy96xoW*49!%ZmA-K}-i-$f>G^IWi63suLRz--ScB z9wAAog)_Q<;i+X5R@LC(T_42ZLpNZ5brB{9dNGm6!1lxU;LhD`=-Pb{H*T*(d|?tp zldCYevrt}`hSjNF%q)kIUQmOkx)Q8(zlJAY>V_ph11{eJE}cDzQ{88Are_Ao_F`%J z0?zdXQBaVwufK}Zr!Qlg!g=LoKtj~<*#u6;P{20Fd z!zaecBf?_%^JbU=YNDppFPg}F2a#rkB#jWm^%G5 z9)7Ny9c??B^Wx||{VHBRegdaX_mkY_!5kRk^*Jm=tmry)3))L;SXo@gM9&5EPG|&L zDatw+Xe8CNcc}6+_!ltNKY)pa2nx#b$VFltaEv4lz33fZKw9+<>~8hq#fQFxhfmC) zX4`($yJm6rOgGMVpTX%fC$L~IMQ3>$dM{qaayT`hq#y%+ItSr&%MxCF@&`CKV@6?) z6El!SzxRE-NP;@C5P;2Z*~8AE*om{}!(wq;<);X^1%r{NM<#^p2T zFlnpC?YA_d`|Dr91CPIiKxr3tGtD0-+lC33lJI1(Pp6fQO&&ho`ulgdA{W6vGwn#}B^q7-k)%Xs^w| z%6K2k{|wHYJ&l3oB${eVF*`PeoK3q?7wyFZjQ5G5820S#M36*td?kRG(T0MCX5{&X zapv*_%wD#?n|5OP^#|~k?>vRGmxeI68lKl-Ovsm#=G>2pbniW@hf#4w3t7sf=%QAC6A<~#4iO*igA zTSX2+Y@5@*DDpe@;=a3XRdJVlLl|P&McL=>z2$wl<3+R;a!0Px7>r94I>n`kVD#FB2H!e$CjXJUYzTd*VyIRq?e-HNW*+D~= z`Vq~?;X7}JbMZVD?Pb_bV>=%!@R{;)fX403Hyy-=`Xa=a$1p`AUfQ|~x7~3!ZaA4Gf&1Dr*r^#Ocr zn-{O18bCM_Mt0+FeE7%)j7-d8>#ZNc!H#kSrZ404z${!DrPy)sHXOZq4|eR`jZM|L zSezOIn;|wFxRXZn5$xXDiArw(uRMDKeh0_+kA4`3cW=k;gPUOKy@090o%sFRnsM^v zc?9LjXF)aYVI2h~`%&C=D?aeS+pwv%p8cL5Q|#+z=cdtp;&q(u^P{1?9*Na)66gs` zhBB~sPa_t3dok-LZ)E=vr;$^&?_T`gy*FaxmTf3AjiYc;k&7KQts0vvgB?IGzVn5@#n+x4LRot&%1Voo zo9D&!rEWIROpKoyhBc=Md1dXm+L?+Lh%cSj`5k&`??=2N81WcF+pV z&Om0m2Z7KMBD6S#5G7>_TGm;xkEEt-dMIf#%`_LZb%1nr?e@>{GO_}jdB8E6yM8ar=qpS=?o)}Jj^RxK- zfBt7Yexe5^Yd$)5?nma-OZdz`{578N*|2ASCo*jYbE0p{yd&Ob`eqL$R@KAIYt=mNp$Qvf}3_XAur1Y zbA}5Js}*UvMI@d@h)#}Scy<{!Pd22y7M$vI<*q)6GZFNs^S2 z?t;t3I4yQ$S2UxmF%yH`=P}Z@s^W00%;_nWw9UnPbwoWsmglx1szDK&E>>B%A>4#~(WZXmgMKW^UE0RQ|LW*22i zk_81d8#r*@$GC4pM^!f1QR1cVe;=<5jw3|5)|!+&wKIB(u;-?G@SzXfiESSYLqfFR8Y4W4H-ckd+j);WEPc~Op3-DtZ=5=;q_*a zEW6>!$b#KJiKia=4o-~EtM?MF2*PuVjrB)kba8qH5t3?mdK%1Xri}ILpW(o`0#8n+ znw_=f*5any?!o;Zx}T(_7PkeeXkOMH=FfK0HT5uyXr{@yUB` zN3oHE=F|)lZ2KN(KDHdV1^YHNqaf1*r_+SA{8H?^;V#^F=U!l82%{4#h{ag$cFL3H zM6SmLJ7vhWik4CASPVfLo|ZI*XFD@xXClqKjNzUI)-&a18x96ZwAt@OLn{~_7{tWf zqFUQ8Pr8yz8<0%23VrU%Pn= z3Zp~#=D++s{`wz2kJm{&UlfB6}l zp0}aCr4HqFZMb1eEhdgVjKBGd|BcUm{}s%wglMo9W9i((_~*akG^C5SzJxuYLYAI5EpM?s2Gi<$a2@ykZn)t>W8%`Dggj>#Nwby#o#! zKk3=oaIxMDZ2O+{40v2l6xG%t&$5aqzVa{lyMO*NUhbZPC9@ef?(M+H%Majh{^cPg zt2eWcE8^H`6(U;S4+d~yh{JoFFv>fBZ=YR26`09_2!;xF9mYt11 z{{a5tufK)~a{*f0n76EKT5)BOd+wKjHuW%!9Z*N&Pou;=l*)LRR17_{;zM&+zGgpTORa9z{kp3}+G3 z%PPgju4ZI-bJ#E1VP{>|wbo+riErSq|MDO4y=Tv1F_?sZbqN9Xqb21PuqOgoSXfc3 z5JCfIabY_v2L5a0aQzra(cM)2%I z|Ahbf=YNkM9Up;7CP;n-pb=>1C7Fm|Zek4cK069&^%~g$MZ$4pRdnEv4}S_r_mU{M z7 z6$wn@$%np%?>^U!kj#Xn?p+JkU4rC-!>!p6CuxeqAdjti$7FTDWOMUG9#Mr!R{Sus zqjlsKf~ao^ z(P#vrgc%W8r4d~PgCZk0ALT8ZaMzu8;pWXPD9y`54o5(9$cJOEzkp*GFW}-U&*8gI zpT^~p%Q!hWjjXyl)KumpG}?#$ky%*G+KX^PR)kOpX%Z{gWMcm1oN}4tAs%7)#x7%I zK7<`N-i;64b0aDWGGTJ%BfG2=6`S_q9QN>fj}udFlsv z_?d24OY3oH-v*fHCowd&f21itg85!^O)J zNJL^F{Xk}U9ZEATSRH5Q>N6pyqym|CGh!r8^T8O3N?D$sBm%4*9|w?NoNb+hR60|% z(wO#?cH+(t{W^Z{_kIue-Ejl*Ja#Nk4dd7=FXF<`Ec=N@?B25z71>!N&(&z_s08LN z;Dr}n$LO4&T#*VNz#>`4yV-wS6(A-XL`T; zyT6I|-zv*$@|d?8}@8Z5(h(`o$QOfx+*a$JG1+ zY+lwsi4&^>u?Tf!Wfd!{KDAC+dO1m2^hxwc%`Q{llfG#@|HKb*{K5#5)Stt*-;UOj zTzIl7aOlnt<9C1Ww{ia+2T(&}&>+T~ii3Yrh9=TWv29ZgLNrzvg0hsr%>j=x%yr}O z=SR?Z^nU!#?|c-S%QDzDql!qXI2eg))4Y&th15Om9Ra4LF>&QC?Li((3t?CO;*xLX zPu9kV4skn;DrE;>=Rs0mZvut_3h2bvo7Goi!b6l z+oMeKCz+>^ZxJKC{V=ALprpWs%P+owVQUpW_&dLi4;M}8e2yK^V9(}ZMF4od*tub+mc zstvVXhmu`E^1xHci5T`4kB9w03^St>Se%-sQL{)A??h!eiHdI&J)`4T3dl>r63&3| zY8Vw;kK$v$@mn~wfyS9BRi_eTDvh;rlBEk4PYG`R&~M`2TMwXsM9u8VfZbun;`k7j z7THc^?EvL9#8#O0Bu0m)FfurVaT+mJJ4qn#M&%tCGFEN9y()bq*`_YM@;ELpMzFBD zO1};`B~L70dG|#0N?t%s#-kYRzle#j3y1Ig2tItrJ{0Aq!I55uoT6gvy5Uaz+WT%r z84cyqESGvuB|d!t4?X-6=9UNXgD-s!&-SgTzB{SY>@$t!XG?SuKnXV_{~I`Ia%2x}BDb;>>?6T|qa zlj=!OX=EBh5ff@k+i=UhH=`yqm;K=qmZleQ{(KM0x8IH5qV9Lq6|!EXW{t?H@4~)a zby(`{M&HmP^Dg7&EKZ*uLVjZ_^4JH*VAfP$y#-DI|qq8(koH) z>q7=wGY@&2*~Eq;DidB@!P1HeS+q)XbFz`JyJ`Jv>*@llew=>pS$zEqU%=PC`emFS zn^iANs1B43p8Y9x%|pvOOhRKuYi$|a#weU6U0_8i&< zuOouR>1kYk^+`PRzytW~-+cjp`_&gP=1;;BVL3&jNU{^2pPj%Zc8o*ggE)Ee5)#>k z$SAb(o&(;}2GmyOV7})CeCyFiF`V$AwLBl`Y8JZzHF+*k|q$^yoEd+_wLPoifc3JXc*YAB3^GanVT zbx8OpF+Dv=!^MJhlDI08-rEk{gZ&%J(ArpvhN1%1meq7l!iuWKEhu-dVt!&7f#E@t zlSlB)2Oh*z&%dr-VvG5gaOuR0_~8#9!wctzVQ{$MB=HI?&7$Yb3wZjqZiLNN#DXFC z12H(W>d@I-fQjC-7+VR#A!|ixh-K7lQZu<*T3fJf|3P$Arz5i1kEb8`4jy27k3M$- z3nWA?mlru@jW~4Z2JGFw9b30=L1R@8)G~R6R8K=C^Uux0=bOQ)7azuBC&%E*@gT6c ziXaD%rLjwR>PJ5ySsF!VSp|yRc7zv(@#16O!vo*=7Jl^X>lj}Rs#dW)J&4zydmN9y z+Cu`If&6rj+I?VtX$kf384Qp%jn@p@V%!_Bj8L& zLAsM|Xbi7D^)Mdz`Zw{zXI{hTlD3vq3#a`GKauxOEG9dO+IFk;>M~on=g=P17bkK4 znFsJM|NKRK{fCrcU=SC(`!L70w$`a%U1Ke^%5%nNvS*^CtO%xw{|7kMGpk4$r^v0>%R}vnR{JV(=}@;^a$D;}IG(0e23{@-q;b zJ&T9F@Ok{(m%fFk&i7*EL^m$2_*DMmG`h+=>S38YhsT~gjfIg>%mqEDYA=JAhO3Qa zJw2TUC^Kz!W}vpQ0TqQgB$BC8psq)z&g0BD(AZK=a>Kzs5#ktTr$Oz2C$j(rnJz`h z5`jg$^5Ey#w|o|_&v|j@(Su00u%DV9C;5E=4}R?n_{YEfdwk>3S206tz#xQ*WgL$$ zW4NymGs_{&_n*T&$xOj zBT(^bwXPrp%$?DM8xFN#;AQImGc+heao%S>n7)O5pf@WI6~%?{*sTm5DE!P=wwL^8_T77}zX+}nLS?nqXKR!dJfaFkD;i#%-O&FsoS}8V;00^i9fN#=nX(Kl8-H(b~ zCtRh?xbcR)NDRD!$6q*(d5*WDuQE+Ab@3HUTR3*qv79N45Or^H8I2Rmnp$X}?nS7V zE~krSDL2;Ne0M{wfj)b27*(}}Sh;Wly-Q})bu_~on8M|eC1jSApoA7&aX}$m$vIpc z3!o^=jH#Ir3bGs+WhIoAxY7OU6PQm_psB3}xw%ECDez)?Qf9P8sn=9M$1ek<@jKEg zan~n5j;>5UPRjZ#)hMn5I?9YsZb1ps%t?%okE+?H1Q}~leG59-06Q8h;PsM(_)RFy z&%|`k37i?2!XgJ^8Fa67zN+yUNCP=|1%n9sVyHc^6)jy&s4FVL5r>jGn~;GoFAN1>m_9!oG}(=r@735 zcN=Ogqj>VMm*IJQ52!jia@IoI)=>RBD8GYh|b1ZWJKoBefB&InI+h|V=L+# zN>J{wV7{*x=X-nEZKR>3u?9Is6{yblaFAHVxZi;4sv;OxM$kRHL>U-A4aa0O3Nt(8 z@{$|`W~VVRMaT#-d4s6CGGV3?t zhJAa{)zC;{z=6md!sVBq!y`ZX9-evTW%LBoU|sIV55D&_CTRR-R@I?x!v@slc`!BF zgOfd@EYAkCS9mdc{xr@FP9x&XMi=XB?$~qq>^HxMCtm7@tGE_kmT5e#gho{*%4#~$ zQJ=(xW6$8(?s@nlJ}j)Rz_+@Dcu>fm3F(Ek*uMV|_U+n^<{~d92fFe4=`&b~J5kv{ zV&B?`0-F!7zIGhF(=jycJb-5JG+uiC6sA{c5QJ86;W&x*Gf(5$bEEL2TXEsB@8apR zlN=OcG{#nG6s;f-j368iVC2$iyzt!9c=^H*LSY~JPrQm_=f{v$(}mr8cB8AQ2Kl+^ zFou^gN<$*-E=5aQ7v-o!W^^16Kk*tu&NA%3=|=3{wjI0LDzG$o5-*0 zlH80mE9M8N56?WQ%INvt1saq=JpY}CabjqZ`n?A`Hqi)X8???`pr4aih7}!qj^e=1 zjcDTF?XnvY;y~{$tU-Gl4YZnilx0M4{>(`X`&?*jZc=WojKjRxji+8dgJnw|Hf`L< z!MFk~t!*fAhcGt10C#CC8qxze#qmO@mpr*igc2MyYtccHTTxwwEL#Y@ufD`_VhI@) ztt_Wj)aF`ox%&(*jD=9YX&3hGWga)R!4n$6OUKW^Z_dQ#9edD0eW@+7;Vg}k^J5Dn zCnPOq*~MlzGD)(ZKQ)MO(vPUggSKr4sGsGis4Rgkv5M)bMK}wZap%3apwJS;@bCnJ zG}xuR(?Wnh?nOs?HT>fw=nDaqHEhF%jz-i})uT2YICq>znym~6j~t{?UxBZJnsAE{4Y%LGS5P z7?@txI#TvEEAb5M+*XH)3#YJZDaL`Lw_?YJHdN4%up)%7RS8?K%GYEOh(Yc`s73I~~*i?jp z)34)L@3?viU0y<+TTWo(z8#3M?-^VSpzY9IC|o*$??3OuZFe=}dLKpY8saFx?tQyZo|gxEVi6j%R-%#t%r01{mTXNMx(_+@>u|LXaN(`i)ui8OBgM1dAx9%;#giQeG%xat@$U0%xWFf`{!c6JVuVLxW(7nwnMjA|qS zHX);^3Ol#9V(#QiIMy@4!QV)tl!=nkQe-%+@Xg4YWCowWQ0bkgp z>dxg%z)z#XAB-buu_HH=)Jxkfh?3v;8N~ z&*`}(4o2$?Hr7Yd>Qs+bLI3;x_2EItPZ4;6i_L!;wL%GD@Ji{7UX4piiOpg z2@H=+BQ8r?s>_jSjbU`CAEWHFT^aePR9o(u5nG)_Pv3xg(d^A@@(i%K(vV+Ngse0d z4B-`w4U;S_`C%i`Eh)-Jy4$Yy;GQDk7#AHVsYPL?lYA`>lg)sI;UP>eCQw{kg-n+P zF}90-8e$9n82dz-t6K+_f!V=wE0!e!4n-0YF+Zk;$EXiJ8Wb#eDc5W_{2Zv3Ls4Wg zJ(A@NFcuw0}(WiXwE$&-g%5{Gf=FU0s%Vkcnr6rh#{hRdA5 z()2inN2d^GN?8R(D4{_eS)$I4a(qbIQB+>8&5)50j1Kl=lH}9k&O|v0Pqxc|+0lLs zjHh;Cp-~YurQz03{uU~S9>wP$Iie7n(c;Y^ zDJ!8a+1U?_ppWGoAi1xrtVE{AfcXh|Nm^bi_93^n4#jCU$iCAyQv#F2y%?PFA(Mub zY;hS5EVIv;$I{9w!UhM5*$f16Yb#$v@ICJI%a?IZC~unI>6q`P=Tmt>yE0 z;K7#=^X8#i)@ldEI9)}MoMq7$M|N=;iu2j8v8?AOM=&(SGNR5Eq`TDe#D$4L^s%p# zrZ6YgpbF~Xus>D*c5sRUw-5~GHV*(Tph>Aw1N7Nk2$uB zl_ZU}#%j3ay&URskZov)nE_)+CN?6-V*biuZp1m*t(y?CXYTuo#hF zQiPmruX-wLGQ}{@wl*@ww!$_gTl<-cJMod*nsNNQ-^Uq}WlKgGnrRrx&LaM)K6DSw z3Ed!ta5Ha>$g;@tq&^Hxu3RaPcPswz5C2dI^dBd`@P*G~VSWK-c1-g4T-GXyrplum zS@RFRMF{irpaCMz;4ny_`}HZ-~Xc=Evq@!EJC z7Fnkp4=@&OFq1fiL`$ATXJfMQJY$v_YqL>qh>wSY%DGQM0_M??T$G^q^i; zlC~j_{@BSRIOxb5@InCPWs7uAIrbgA16j^qy!yhE7#Rs56tQw(6S^OxyppDbXIqO& zIOc_Mu9cpw8I>)E)BsIaA?0f?xk+Bs2S}JDd1NTLQ6IXH(Kr>4dht-oj7~(DTJ*op_yi8L|Po6etx+rV>)`+D*oGKeur2bPV*@m4R;NP25)Ed|oY zYH_6e^SqkQ(zmi+u9ZW^N~_vdGZKv` zS+w+0{+T8#;ELW!Kc}@HDH72;_63sfwQ}Z|D@zNMXe!U5)6$o`K^NJt$x@QIeB4SZ zkrApsP=(RzO3R+Kd(BOBMeSH5ewiof&tz-AsLbrAAaYnJb3*Em@=JfB_rUE(J+v);~L?arqQaFp2_x~qKgStpYm=6jc@vADXFyA zN?Owct*x-oD4XPo=c-Jl&1-p)`V_3`jEX}mXiW~DD&0`!%RYyH%9~xwov{@~ROpD&je&TETvDR-WNZVpsYV1zM@ovXD0{sOnEy+Fr zTH)!?@r#5uFtF2OqgLdA4fm(gLUv+FvkfH;UD#ObLEmeyC!fbnV_ zrXrIvXiCSy_O1pMcI;}vRK7S+QV!{`r1O=INghQB?TxcD67pC7TuJwV5w6SB<0#$xR6_(aKxxawSpAFE16u(wA8cnFWv? zOe8Lih--fp8CHIImAa?GGtwy2lE;kZgwSgXEqMAhrNXNGNq*#z5UB)p=+MDtA)ktl zviX`I+x@*&lh>i+mkHXg6Y``&n+4YKs|g{{*UY28`zO_P{K6oQky5k8KRrkwjdm0_ zY{t>M?!=J;J5ZVLp}P^DoC<8&dlPQI?FcrvRKjhuz@1TyjoY@Nv7!Lhw|WF5WLsvI zm270sDMD^G$&w-yVn%H#hHQf+k4)on5?PXMHUCSGGRsUyN+w@XA{QqUH}KplkH}Mb zUHdEaS1zvUB-fp*$IFyKmNKcO0%pph#AZlEo>dHl1X>@74jnq=sf>JeO&$^J_|<$h=Avc8R&+Gv!x-@+7>Y1l5{~pjY}mS0 z5oo)b3D$_Hw!TeUtEFhEEVmF{R>^3y!*VK%L}Yz(OqPt$Z$j2t@P^1C%eEw626^?L zfwft2EibYzRUWvhr!x`}f7WKjwSQXExpGB!dEri*nI>sw7|B0lQ@?5^UClZx0SO7M zLx&C>I&|oGx4^V(*RDT3efl&)p^%LGgg%(-xC$YFuJl|~H#DNAyck}G5eb7Cg*9#1 zyJr`w3esV-T478^5r`y_mYs{7oE(%@)}l1mi%4)4{%{|!)DwVit;lMoEgT&-a*XE zKD|PoO?Kp$*P^+h7R7mKh=*3ON;zbyg}fLc(8zF7y&#oSREC=RMwDhc5Drl1t?4K! z%!SQDVsEyisIU-j8U&F<80kfo^xKT8Tn|D%AABV8^3sf=${J7Bn#&swZ2^aNF63De zZ<#_9=hQ77I&|pJp+m>J6S9rn8wj*My6ad6l0U0E6C1W4!k#V7aM`RdL`ftg3FKEa zqP4yn=}vjO8wf7XV=iLDmK*QIJvVeAKc^f`Z7s+#&S7LBfu>E{(OOxE^5!;dtS`ah z#60rb_u_^}(HQu6%Uv+=DIcbtJZh$ji-uF%m@F;zj+2t=QdJkMPn2 zh9+haF<4R9z8iPmup3o5UN~$&{_c;Shsac*D?Gt+aJ znVD7lfR1#(fbaeANn9G9gTdxOZEHK+3+M5`SHF+punT#f5Qc_l5DbSf-gg$4XH95m ztwCtC2LrPK*fVmFT)w{AyeS`cSnd2-RG)Hgmm}qZ4QyI&|pJq2pHzLZGi*1Fb{HdXW6d2JRAH{ti{xEJk zyc0!U6T(3s2F{VJp1q9G(E*%#`4ybH(2J3=L7Y2#R(;^2=iC{!ebw;X5@JSeUrHgr8$HRB9FXmM4=OLwQgD72Q(Xuu$$~Knys*>yOGt{hTTW*#_swm z_*Vm1O2!acT*8ukydxZhe|{C=m=$gs4n;LBxZ%hxI9OK+|56MK@hC}iOnus1uzs>x zVZFn8cO5!(=+L1<$FCHwA<(HgH61#xKsLS)&X3{wA3lWdK7SVG^g@*8r>jlZ!}7V~ ztX$-0XTjsJY2;Pb9?NbMW&;v2`2;hNQ`~^cEFT_!;LG^#lc%v5*Wxu>tcvui!)hfN zmk%9iTUH4vx6sXM6>?5;Y;(esmIjy04UabsZl@iw*eaGH29#8`pfV>H8R;I_WZyc2 z33f{+_TGFqK5_pIC^OsD=clJfdvNwlHy(QEtN8S%KZ9?4?w7piHH&aEjwrJ!6U$oTF=*?YuS=d~20V4D zLx&C>I&|pxmBF=ZpcO5ULx&Ebe+IZSO0eVbEx7s69@G^&G2U|)XD$q4)gMCK=tOnv zMr>`bgEO&=iG?7%>6wVh8s(`4H3KYrQ3Mllc#G<=bMr=&XS)%YJY5A_8)&oLDikeV zytuo2i#x?hkQ52-PO;+d?!}$pF2yCd6RfyfaKG%gyO$rplT7BFIWu$S49V~OOyRB7 zgp@Ewskhxiep-=GmrxYeMP2D@ehj_zzMkQnyL3x8s4>xe2eQ+a1nm&i=Z)~o`j@_k z^SdUlv`UwL+}hbq3RWK9vj9YtKugEteC^_Q{h1;m60x^=EWsC(xQ@j0Vaurb19sFO ztH9YMl!P3QkhP{`wnn&Y^nq5_%{ZgH+okDh8+r?DNck|*!2SoWPxJuoZBERur}Dbw zOZnR)K+RKy&p*0OXU74IYmM7t^svSX^ke=C(IaqKqN1sGOYf#bR#!OKIRS~{db1`S zK4@{t_4RJfSPv2_&Bv2$RIniK4L8$Vz&)ln+Wui>(ZW?0BhN%KsUGLCuO=LvqYHge zg{2~qX_znyknm*Z$rg?vOsE^99x5XbKG#gt`Lvg{IhXD~v;Q+BhkA1g@}2?p6#x@6 zP`SR6V`#?^AF?@Ps+kpBN7mQcj}fEfH5DaYP+z%`EmSx0RH5&=0zt_5@}EwRUhAG1 z{rkF>pJ>FIWcRrJ(wti#BzQ3=f-Cwy&nS@-NbnMURXa*3yY;5?uD8HhNISkL>xz7+7iN*CYk=tkirou2vzLI*1Iz2Ruj}%u$gA0| zFyRvPW*uc3ySaffTR;jIUI9b;thAD730Mm446MO1{C?p2-NySkN#8x5%uT+HDO}@d zTMlvxnHHaz9<2A6RtwL-c4i4u3;VLigrBmXNLr~}xJdsKjRHyNyj*-KIO7-B6n3$! zThOmdb<4DWkonHpb$s>vz^>C;8GXjvfY!iKf;!^k-i^}xgD)fP?NiO)p1kXSU?Ex7 z&;Kb9c3V=^ViI-PQ&h326Ii?avE~f>&QA56RpNU+{`Z>2wOUwlAj*iC(KiDf{U+FO zRkZ0^2mB1jtyB54m1vbM`B$F0yA&@q)+hB_j4nl~5EbdB8yu(y3t*#CO<$6s!PAJPxAd_wYoEuJ&a3B0OyA5@i-BnjE8YyME-BL(KL zrsxg~J5pevkx_T9ehkt9ImxWarUO$gID$`{Ot+rVOrlr6RY=C+Gh+fu7i^vQ0z#!q z8yKW#LY8GHhOERWF(q|wXD~f;M_XSe#9ZI)c5*Go$d>GlM7XE1KfmY<>;-&YdZ*BM zwp-q)zsju!)@J47^WFM|uWi##7{rrkSnu+&-Bo(efmRlPIxQz@p_4=*BN2-^!+BQF z`CXE;7(W6x*XLN0Ao+sDqC~=TFERK$*4kJVb6VbMH95FSUjD+S**v^tfC>jyvrhRx zojB|61kYcnnJPq&^Cy2)uRGAMmz-FH9Z!@w)i*nbt3Vn~;$md}U6j-GpT4Sm_7}a{ z;z9;U^C2$)9C&2E=+Qi!yPn;H`pylh)v%2#6n5zl2gk3jz$nGM5EbO3;Xh2>R;2eV zH*GJRY2{R6vs-Q3RjJ6FNeeZ9>ELwPC^Iu7iMX%r;xyL#VUG0FN0}jTxD-P6&>nGo z05$`%io5=|p*Ve_y{7r*llO-(ttieUiBg*%@c@Ik*3-fVb1+j@N5z5%;x)-~ln&&k z4LAm8fRgt>O2kG|1_$N*;0B*_)s-X}Y0Jzd3}f&MNxVOTJWuss`bn{k1=&s;8rakb zXD6UL#`eox&B{v4pWV^#4WpY0FAS-$B`NjARQ3p6Sy{r1Ae16p-oKr!Fu$pI`4 z`KZ(*l+IXeFRP6wf#?uo6=y`X@p(pyl1xAeo@I^^2&mi6lw0Gf7vr zr?zs!iH{B0Up4>=*vm~G^8)nC=OEUwhIF2XZ;Z;TNVbFp|tYrPohcaLu1 zB1hGVsPAkoa|F|mj!5tQ>+@{_{LEFy^mxf9!<|;jkj!AXznU!$ZY>6OeqEDI39LW< z_Cr`mIP7pA$+G24?-1;@za)u*5<&jSFoYg?9rm(~gYu&N{dcrFJC@j2T@n2iq`asV z_+|B-PNt53Z%P0hZi)E^`I9zVc1%w%fo|WQfw!WR_`{H~r36rI`?554r6Hi(|geD|D-3 zp9qV4nIfAy5`4`?PP-x&&-cXdkIX7)51)XbcYa5VybyGa3v<2APqKA0eO+@dXRB$| z^?1GPb2$F#t^lQ|f<@HQ4DEyFd&U^IvL4H#k_unwc3z~T!Pw}C>1So8Qd)`n{PM;LapIEa5;|psGCrmGW>KqJI|-!PTk$%tb9SlexbzwmwQd=^ny~!o332$8 zlG<-h>!0_vewD(F+D_x3Szip?&wXe~-!uFL{k2(d5reZ~iMM}V2c|YZeN3iqU_qn` zqYkf6j4ksOu~2x~mT>EIgFiI^dgkfdI~q+4@U&mNVJ-dGOf@fZ>qM8-do z`D`Qt%EccHM$h$YqpYeyl$>Tz*~FJ&WRdSQkruNu!$(?r|CSuCwHiEATyyi}(h*^j z7>oSO8t#Ja>=+_X2{u- zTyi={{}(N_jM2lkM|`3YZ8lY8?;c+=2g5g@PM-0{smTo1J`Fb4J#4)n`3PcdJ9gGR z=r(#>vh)PXDt{z2Byj~7nrIn@zb1C)i2s0mt@lEPpsaOzKgfApwLm_f;?|5+tEVky zjPi5mTu-0Ba5+^eJ2te^LBBV5Klb&}u!=tNx;(ue+=edq>Gis=`k${)g!z1!6A$T)z&g;2NC3rDnvtFecwU$8B9ya#Wy>q&I zrgxL0KdgKFRcSR|R^;m&X6q^nnufnB5*%FDnxxK#n&dvE>*l$5Yk-Vu5R^C zGKc@+4(sL$J*&HNH8ewNHR>^AYx5oD&{;BU2k%92uG;c+>~Zg~h_rHqYsi)YXppN_|rL-$VnaEexNkz&osYXOA z^|9O3e=cvxEuRmy^_PKd<};BUz;a#dmXo8&soc}6`=^^{g1uki>3M$`BR%QUp}ks3 z^Hl8olCyhJ(7919Gowo?Ll*BmZv`K;;uvOBEw2cV9a@s7P*>o#YU^fUj|4-yV+a^>c>UJkvR zWTZ-hL!0B0(7R)34JK$szb>2ugaV{l*jqR4pO9_iojBB`dsO$e*N${^Q zNn@Dade{@t3$#>vuf9-_=O^5c8F5h-OwBCBoFwo|4)!P16yW9#Ilpq=-&#{7;`OuD z5%{UDl#%1J^RX+h)}tbz9et6L{K(>hPO&#Cb)QIV$~-2f=SI<-%AlW=RDQ_q?|H7J zi^g6y{2h9){T1aRqALaTR-5vtS;~wWmY=;yXeaU`>(171i-y<>*FUlx`e0`wIXRj6 z5lYE$u{1da3|y|7RB=w$uqvOICy%V(+Yox2VkSSv)CCa&d5?W{4ytUDv+JkvLLlX@ z{-DTat#Ump)_%BiJ@P#^P|fX}nP|QpwfquC+C>|K%uW}nCq{FoWL97fcc*J_RNTys zZ;}Zk@q{zcPlne&g8k}tfsb+$TIGIEVrgC+IH!-BFoE*vb_^8fQ6Alw6yUT60(=>l zf=Y`rPy{&@d&Qfmcf;}ycwXeHW3z-mfU8W@g{Mo;TYav-`=KS72yl{nQ*lBa$Tt9 z{aG7C#HY8_c&W1EeL+H4qoXy-Q}R3HFlcf{Q#f5<1hqWt)Nj^gapX9dTx0CsL1O*? z2jtgv@9!>(p0ZP$cnnmSevuPH z4Lz@6^}fXse4M0ucwV?4qm_w07{z-Cn8h!yn@vf`shyqCEhj`pjeg6!8Qj2Ov+A~U z2&Y)(6EqQNQ);<)Ha1yBLHI1~OG!yauxwiHn-;3H_^o|syYRgcNAIBDx!tPY;E^<%?tnJEjp+m@6~|IkNM2#Cm+ zu3%7Z{)zJ0P&915pI-;Zy2$g%_iX`r)XDp(QOMbu5)6U z*cpcc@RiyUMYKi>I=x;xox@Bt9~vEoht7)GF54893o4|*WRn(Q!=vR|4#V369|7rL z52HZ!rdjy<>jQQ?!c?GH2~&Rx04!`>*!6~IH2qIoHkmOwo$L~GK_JA|%_GEC72#-P zMh&M0kea5?hS}g>V{R}t;Yajwb6>zr_SY-AZlwJ`Au zs%9e8xGZb%63@1`K%^U5z>J>~-fl?+PW)Jd#kkt#eFGxd9CI?{ouhkDIty##Ar1l^5Hg9BWX-%5pBNCREK@E*b`8@ zm6hg>PcxMn;bd!_O;d!{k@fJosEE<){r2WO%casoU#K@dV^kIU22Q4BG5>n1|?MARI@qV^q@{PYzNsXY!4ybcOW0 zXcKBscQ3-C?@Bytts3fePs5zt-f&)8=6CQ7%wXBrxmga%W|gh?hvHa$C}?G^f{hDd z+}%1aCw`f0Zl;M}~6Zm}oSG5@=?x9=A3==SpT-bb8-v>i3$>HYtDVXl0HM zh~g4)9341s@GlCMH)+@NlDD=I5b3ubc_kzwQa?Lx{aJwDnb5&d?8aJW470Hz>+@>) z&GfsovfcC+&y{^wn;YHLmHIxvQJ(x`3U<)N3b#09=D1HV$xEw0PuJ79p$?n?t+-^g z)*G|xsrjEhynioclY1{dLp9mrfrM*=C(jH?CixSf8nQY|Ag=yxW(36kI3eq-;rTMH z)%N)PL6gqcB@fm_r`qwrHFRR9plH6hi6l|*unk%>upCT+J;XCW^PP>O`)>z+-yH;1 zcvWs7mdjl9ad3ZZwqbe@5&}HqX8h6do?GB4hn*mmfELYl6LvS%4rINgalB^&J%WmYCUOa3Jb2UwfNpn-nb4uPWgj@QMVIH%o zz1)K044)Cdi~1RiQ`1;$8gN}iEvLpBo5O#fMOrv!sF%>uX1O~%V{y;YCWrI;%K^q- zxKO=+Sm>OGClpo&PW*-QHScba`ZX1cs|^Fo^o%_d6uGE1fBx>n%65U%lrYKtA%-P~ zShzeyYXbLTxD^asgc>?D?#(_W1O@si}2-54wfLK^}Pcd`vGB zGF{V!J5+oZKSR@0o9%bpr*g2>Dh|YxyLB$BiXKU&m~E5=IX*|SGgYgq%|NRVj=^)^ z1rj7kG`0&nhRt#Ir zz?<*CURQW7Cf5L!Om_Onzg+V~0#Id^A6je7y}!4-_xsyjyu6zdLQY}i*Irk`C9~83 zX@rGZr)Y9*|A`5};S>1~l%aea4DkFQ56Y=-K}=Ft(bJGs9*|kQGD=FcZcX;6;6L=@#NSzI!5%K?s zpGAsFF#EP6Axl!*y_cVtO%<2tphsYYF{4hf)$9F8qSX38G6g*_(g7a|)&~8# z(0=G%^^BTh4#ym8re$X8-jQbI@`$i7tTFwF-zL#Q^TjQHIL-EBA(Na6$d{3*B_Py0 z?Sg^Pp*7w1H&a+0C7>lJ$M#c$*oN57X^>Ft8m$HRS6y&G$~%}d$<7J|!hBnK(s$~i#`pk&hVv#C z;jXJruVw-Ut&H}rY1u&Av9Ik{`BDoUjUn~sB3L{Xm}hmTGmuBR7Uzo^&vQNJ3k`Om zA8$;oNUw=SB(;m?z&$6p+MhCd0J5gV{TRU zD;xVn3snn^RgyLr7Ts)KmaNt~XM~1&Tk|a^-xN8)5RuFCvbNlD3 z-LT&1ju=rm$d5sSjZ~rQqt-u=b|2j)eP;@>ghtW6&a-A+G83EQ)z@eJ0mI8`?CD!HBLlkisu zCEn4~mmHYV+Ocu-hvs?_f^L0>bB`A1o4^7JU_Rq*TspJ8oq-9%!_}6E`XO=yix017 z6i}>5;~!bkF#a$%i1qQy%ejaw)?a=*j(&1)b+wc+0FXW+9Pju%YSYS&Ijm1sGUgbq z;n5a659E5RwZBO$4Pqd!njF{0JzMOtR($KE41VJtxzwNi$Zo>pvMwi;5{bZPyV`wd zX~#xrXTNz4GLW;2CFC(SU2+aaAn}OKSmd5q{6^m88Q<$l|7;QVZ?^knjWwR@c*R}q zb;QWCo%1%V)YP<$N)0Gum>hbW#ZbrT_48dTjzf}V;O*Ku zN^j`=3}95?B-4QFmAdCOJUt1rq} z<6t?5hsE@UJL__DJ>l+|5Fb4OJ7AoGqwMjt&l^W^F0R52 z1%L4b*G2Y`D{5DzpI>qj_#JCw;OEKfB74-$%x^={B!(&-HLyn=bFf=s5Q$CXBYgVQNG8JfC>uuMV+xo30?^yxjmG=XU*TV&2y1+HJ z$n8Xw>r=)x?^zet!=v}JRHlGiMsjVr*%lYG19e6g2%r;>qiFyl+=0!buwjhC3cDhJ zo>OjldL!H>!RwRe1OoT2f7YZHMCKJ)|KP-Af|a*-0@j>T1uT+VJba*2Y)fnJ=}Ro; z?f(e3-=%C!C%T?C>)sgos3gPw$-hrOX=$Y++AR95TvXM7O4{yk2AeE&2nkGn+#o>& zuPLA5<Hl`EfjKP;h?P-JojexZcTOE{-?WhZD^%zwDYZLh1KUj_P{gG8I_`; z;Y?`ktTZC`rA*uCuxuCR9rSb4iX)9sEioDTjOp{sE-Mp^e+`f#n^)3$D4KM#68E}pE1i<*CN02ANb{Inj~kXY+ewuz#mT@v7R5FAH7eP@y03>r;=xGP0aoV!!M~g zs1>kMY+1j0W zbmW>*#;~udZx!tW^===f?O9snHst#bLQULu;D{4im_a0qRelOq3OChq;Y_dvuQ4&A zWiDw|U9K&Ckptw7L=p2wHvxBa>ztN0{6y>1KJB^Fc=h#|^FW$Jx{8wCq)=92VTp^V z@c=QVft4Idl7~2!8oI`=;;C+zOP|>ytUdYI^upkZl_U1ZBeg_VEnR?-8&imY+E>lh z&z{wP>`mqXGC%fK-Gd(m-kVyKd~W0HT$sX34(rJy=0R=Ko}ZmlFic5GSukVwA%K;( z>a;nABxvzxQTAfxwYK|g-|?FdF(C3AgzI(m?H&?zh63r^@TsNxv|{Zj7 zH0-@~G5G7`vu~&(4u!l#?i;Qqzp2Zlw43q^3~oNW_JJ|iqg!X!)RA=53UyS9j_M9p z7+yP=YQKqD!=T394#~Gv{EW-J=w_TljFu!;?!S3F7IzCXQP$MPdlfK5& z*s8GuCS!SCL9_2qtQ=@fxB}#3QBigYr#}?!AWRh{YAkN{qaGSdokF=OfF2rFc`$aH!t20+j9quMb#n})hGcHsjr-RMjHF6( ze9Ygx@Gr8$#yF{|Viy{n7xmrWHpY-rgi`&MNG%RgF2LJ(D`#$MUGX~;XkzXWpI^t= znM1Bq|2D?-waqU?7v|o5;6)S%X3$dg@>X_jHIa$I3=*J-MRg^E2(2LtZVuSRb_<3u zvkP(bmmumT4X1?eo6A0;X{fPEs>G|!eAC$M&Qz%4q{(qI4k$zU!Mu}~*PI9&GO#~D z4i8s|tGuT}Zr0M%qt<6K+O&60ap>Jr(~KWj3dYin_!v@FjjObAh47&fJX&56BVAe( zFgs^T&R)OglqgYD$`G=Mms60PN!~C5n{#93W+OZQ?9%Y4Et1kO#?C#w8>G@`6 zY#t6uI7uZ3EPu8KTnf~0h6S(rz8nWD%Ce`n3V5f=wdrV@YJ90XYVaID$toEyg;A;cAgN~w=d+@*>Fgx*in+&Mp5Xu6;kXN?$_Rhnz0=x9PY zB_V;-Q#ajwLe${Y#;qug73@BG8pFHN$<&>i=RxWnt-WSs!{V*G^qDbDknA*Hu3_!k zRE5Ka#v(sDQhy$*Q%7`6^>)l?Ll-M@!$S-YY{qV=KY3PIIwf*>1k2v7!}4e@u){yS zsQv6#kM>=MmsKt+58Q!FWXvhjx+hRWv)~~enq+0fT^swLbxre3NSB_Ju#+^nCpZ_s zrJ{Mv;yvP_lAUJOiTc0H_0VaX_VcL#{BHWWo5eIs;9J(h>PRegj`X7XS{zFwGPf_4 zdVG*2UB4+`JmjPoc&xmn~$HhzPy9?=6kY%Dv7&Fh8K9 z_g{WLp-;%`cYeys*4Igu8!IfQc%WwvH1uhJh))OU%l1=17R;u<`lp3+^E#$%t@kmy zGvEKh_}~9rn7)jb$fRP__J#wrzSb?UcXE{71RGmAWVF!83!rx!n#4h*6RHk0Jx zo2Y)TO|BgPX*OPhQ>d?%v1>02t6{shk^o&uOyW$!cN8PH9u2m{8H6Fg__~TK$@V=F zsE$=#xzum`5~IZ`shi;mT}zVP?0H;$BafJPaLnwFccpHflWiEeT2Ssg{kp=4Jr_RX zqk#e^?)`1_9d~$8RAAB6ef{I4Z|~oxc(I7Bi#3?MmA(5)NOxHHS~XKhL~Lq%*)hQc zKT9vSpgbaH7%2&&12(ry2uD;%YVbd1TEss*$S=?Ko!&<|SYXXadv9u1k?&HO)l7~c z=YZT3C$rsW^JPQ>XhqTL;fxZ|ac~u6I#Fp%9?TH7)T4oQ!?15wgc2JnA=4zgw`AJC(b#@nUV6;p&yMs$-zMoTE5kH$*eo?0u9X?!zJ))v9H#jOJup8g* zTJu3;jy-;6Ru#ip+M7Loc3K(Z;?G53v5jSRZed(S1$S2@HbV^UUTfl$p9CHcGI3mAZw!3+HJTh;9 zj1r-UDYs?1eEU}v(IHiud<-;CE1869+j8sRx#3yh{y;_C-mCs7rmv92-ikkTc`L{6 z^sjQ1bNHTex-}1uLI#Q>kFtv1S0x)BAII13ZZrrD4VByiG6nY0QfSxFwRlwyauhpR zcXTJ=jBz7iKyn6Es#E30`7_7!@vEbtu;vxri$uvr?!E0!h@hnIXTQ?Mz?Ca%6}i%B zOW0RU;_%V3iMspGLSV1Mr}vQ}cZiP>RyI*V8+Hog5p~D;mO%a5TBy2f_p&s- z!!_eJFQeL?l%rdWF;86Qr8PIBCSi1lSu^prLdSPYohBj;?Ud&E_<8900WWGCyV}s< z_j;YG$Ms2jCwiu98ji`&=Jq4Uw*|Ko-uKkc4=hS-i6~PGs(#3OK|0sYNvKYbS{W_F z93qcot54fXO)>NZ#r2;WREbrdY^$JJRC9f<4<}DbPq)Q!Jz(5VXO{o?{ON(+;-V`# z?G$`&tq%`LUr7=GQUch;pRXOk+3dKSPZE;6yEsgCOqZSgJ8l}hjq@!uCMP7QjT7?% zRe`vjsj=KOC((4(kQrP--RHvPE z0BY|BT{=kwO}Q_?oi6Mx!?CR%dmp(2Bcp^2*vaX$r^Ykt?Fl;Y+t7&F{^f1)hXOp# znBbVPe}h~H^Sf78-Ft9VW!144+Bp7U$#>(Mm)Q(@ol~7!e3CK%AmIe~lr$BwdH~*r zFAAPrOof}2?piU%;c}`-MyEC#^CP(LLL3~PCf}NAV$_W=O~>P6Fqh}FS7T@Kh+8S3 zhV0d}!Y3EWQ|H7REqoIZ#dr$n%q((y5{-<_L-Nm{>1`O<&wswYPa~v7MW_skp8HOs zVUH~LXHnvpi8KvnnNEvrZDZO|%a7f?lkEJ-k(=?i6GoA-C5qgrmWIFDLdYRgnA6tY zAGlBzE^H3+(zyb6awtVUs|=97ZZ5JzFmF03^&Z`cLi?j?;jxzdzsUXqrTqr)zht#Z zn(jUU_^FkI`^Q$ALp!R&?nUltb@Q1m+c8T#=$KbO8B^_K*S$=@?qnw! zYL*(k5@JH!W>uN_o3#PN9lwjA6g`-1+cY$%T$cI=f2d)La#|#OV}q)>yrB#OjA(XX zkKXFoQf0pO*5A!-ff-UR<3N%>eS>qZN1ILt&LXH*%e6BBAtQ?RkFbxWSFCCEFHp2R zq4`Uqs!bc2foJRmX}woH)4~QZw9qYpg}O_e-8f{eHOqG8gf9cPiq2P4!h}E9Yj|HI zjhd=Ujc1}h@guara9BaHrj>ciKC)e{=q#X|J5LWNQBzNLWI>on)BuZzTcWiHe7R42 zBodhKhFv1-5CcDFs5ddRRUMd&VqVeVjKTEfc2*=F2D#MnjPoj-STrnmTWM!`XMP9? zNd&mCw-0qakXsylP_aLZk`ZLM#iK(O`1g$kg2K{pcel2vpakht6qBR-qHEAQUxI;st$RSK=-mYw|X%XTj5`)CZ7T4TFe z)EHwwjJyRir;#@|UoD21P`zyWfJ2&^sAfgppOxiF@JbolsYnVE{tIQi6s((U=ZX9e z+~=#E7#@X=;_=*&M9!cEPtfWu&+K!{_~Lts%+{>4z{9%HmRsG?wgt)TQ|8TF^G#h5 zVYJ$gALUUy=2^mJcDKJ?vHcGYd}n>Ye2E-|ITnQI-fL_mf{kHq_bzPn3&EOs`F%dl z%|bVx!b^ATzmNHDHYe2}|Q1}ovaIwd=Fz)O}7T<~0dQ){#haIQPw%|)+q(nipB zInL=!GV-tt73Y4g&RW}$+W6w`>qK-;PoH{>jBH=JYbH}4JWG52Ms zbcF2!&kIN4+XtGb+&n5IzG^C}&T@VP&CDs36aw5W5w{jB@HiUKTASt=D}j@;CJy$* zRZwR6=2X~SD$QKq%^A-V$Mel*OHUcA&;S1x2pHphvq`wgQB9_naQmYO6SupRIL1PU zL=gx6l+THy!MvF}!vZIEp01IuvjJl-GnzbX96Ws`Dw%?~`6HDA8I4v6HGj`{3^fty zeG!VK5(4t`X<#=#I!&(FBP_AN-s976da6?DW*BIOKK~m$bbi07o8a`L#Irdab>A@+ zxN~d27K*@c^A0qzT<;JdMNrl}wkIZ)h& zdGunQvFTfK?9Zg)bI5rYAzlcj;qWli1_M%zcGD=sSbJ|>u^D?O_0{pwcTeZQnO-wJ zk25N24NTs{hJat(9*4Vds*GTEKK`!F2PFJ+%TY-o5F4`@{)co&;oT1y*n5pyPh}xoe&Szz&mL^Hi zl2SW=9<)WGTlNO1S%`Vi)F^C;Yvsp*;DPI@Tb?dOrU>!CFEe@vip+n}q8G>UH>D13 z-Ws9>%WX6euufE}K=J%W31sZ7%W_Fr%i=k47|@}b^k1zNh@P_ewiZ!ip=Q$VK!f(t z$&NS7^yn~e+Qe*C5Z=3uI#ILnmlWFJOV+)qpI&`Y4AGKQbr90eYWZex(?k2v^F3mz zZ|py)>Ya!Ewl-quSl45(6tu$tdcw?Vdj4p|^%bK9P@RIZ=g5C@?xFgyT|NTLjM?Ce z*#Bt0wg&O=$sA%F%u6i2)OuUntpHGw|a#4`f&ypRRI4LZs1$VZCO-3|;- zi1Y^5hjUf%vmhB3Z!jE{X0^^F4#y1l3Bo>E{!?@Yu8P55!>C_3J4G{=;jZhi&`!fOt_Zy z=RkCPe8!e;Ik4^}TeNtVy`NuQ0wzVOmZ#lC0QWoH(vhW&CV~g5|zhzI-27mR;w$WoA+h6N1xhLz~7*I2L4Y4>HEnX@LZ=SRtE%S9I43Q~p z1vz@oL_(rc>OY5GppE6;Z*J#^iQeR3Fb(P(1XKOwB&DczN4KJb-JSWi{+EjSS8i48 z4P3AkAku=q3_U*5HnoX+y4gtgJ`q%9P`2-L`XeUx67<7>u7@m7sEg3`bRiy5IJ31t zb5^KCa#{vLQr7T3Hl*#2U;~PeKh`FA@khvVRq)Gd!7GApzMSHZ0%*r%*o0tmK+o~U z_0&NadsVvOPF2u+O?lLDrXmpf5FQy>ojCLaM=tp{kY*WhhA%6Snx;+3LI1El!C9VT zSp+@&6OqsrqtF|Kx?08_8CG9*VONHJ(06_18|*tx(R6(%RI;T5b|scuCE~!2huG|n zsh;}1Z?zSrN)}pL2zgxEwUVI=wzoqIwO~A|L9)yr`&77xV3Z5=@zsWm*;r19$WzqA z(Y4p;@+)jjDr}oIbAw--q%E!=;|fH>7PBd)dQB$m{3Ye@R=k;Q6;do zKN`VveOR~-Zt7OUe)r+MpX<`T{7DZX;va|GBD2-*<0o0>HaM2o9UNx}!MUcUjllhG zv`PQpm~#JH;gtgS2>jwBjZ)@j*A^k8gv65cLf15_;ZzM{Z>*8HeAA)z>oo#s&P~dg zpe#rX!&w`xg-DJ$!eRRXJgb3OHd^sjTGicx6ZJ9k4Cf3QNr&7C`+?|$IOD}VuTR=9h#*-c)KuuVJf5RXYT<)~nta|? z!4`Nco5d!eEtt+Uym%BmEy8bj+h}5C?Ym}9e_+1gx$6~qa@3uv)1c!Z9`rASdRWo_ zU@9jV(ip)Q?(p>Rt^!r*V@Me7tn1j7$2wM;B^rjFv->-N>yw^3+rYvskA#?fCo?KY z_YpI?&zI=+5+tDc8+irh*xII3nUt}E&ZEn`}bs9U988nA4L!pXx+IdhllH~LEjdWN&m$C3#vwKsH=1%EqfC%z}O53AoSIy zXxNnQNlZzQn3Z*mNJrexffJY$z;-Q*ew)cv)$?{v4}7v|gQJK%95>wdy;R6!y6Lg+ zQqFmBkN@*a&P4Q!LDj<3c%B-=^S`XD$URc&r6sn51>|VY3dl!bVx`-9)#E*=c#P5Wm4eI`XR8vwwlbse7+gaqDxWYoDY#-~&lgMlE7i z@2#5w08h9fV*ZZ6EGUZ{5~t;u5YHj4pw1_35;>sauSPFPnVR3&99p^R$B|^<^}}~T z8Z%2o-pLb(gbw?Ap9lUjOjfZNNs+dmXai|noiii(k;($bEI zBq90nX21cGR8(lV8G&^T$KCU^4=PIl4X+O=qO<}0g3RmN|qFNga zfnB}tQd5in4yD$Lpp>RGEE{?~fW?^IToV3M6(p~tZ|>})MGox)^Yk@*+#JU|=ccQT zJiz<9I2XDv1p$?@h6J4BY%tjT?^&+pN~*fyy}jT8=;_oN+?4!OCNps1WyGK$=!MOF zaU$5))a6s#HhlmsK*MkqZms%5_sTBSXL!XO0c5+J*f6WtS|Hh}i$A~#c+3ds*EbNb z-ovEsr4O5gp+Kj{yKqVt%MhL&DYf!$=drR+aYFzaRNyk#^lSZcd+DQ(1#w)*l_eU! z^(4EoV&N2l4MT3;OFs0;%L%WWBA63E;9d=N;`$m1INIp|3MAUj!aYW`op6q%)=K{c zLsI@oyJB-s+CmPHQg7v*bm`9t_5%-`)e;9d z>P9?!(sbP@9il_2)oq29sbi2wt4Uktp_~Zkq#u&N0W2`;FF@^p!?XH2pen?6hHZ`w zlaDbi*m~I!10p8eU@4>}D+f z0uC$GqiVlOjbXo$q6%K?2uIx9VpFWUQEYstPN?%@tL(Ed99L`IPloy{$7Ix*$PBhG zZvSQwIu)RcB_?`x|WdXV;$l@FK>(90(_P>a}O%151uFIspzoEC;yNyj|HTBb< zecSo*U00-3PdOfqSp-e{Ict{pp)i4{7yjJaecGJYfaNdPg{mC#L(^EwnX+5DGM41E z>N2HC2+S|k{f|*o)S`l6a*owV$MLY1{78i%N4u*q=Fk5|D^i5SpY;ommLgB!r^k+a z0?^%1(#?JniGF1}W+9LSIc*EVm{sDZhO)&p;|9&6@^l~%wAXiDef~&%3{Y&pX2uIL zkpTpX3#^5{2)v2SzMG+Ow$cww$)^QJ5UVBKFzQoEl^GHq?H8`)iuRgI)?b4fcVlv@ z-$!~MGd%QWc?XExPK}*6ZQPqOF?Ugy@TOHkE5o7{OGR3y8>oYl;ML}`^kG^`{a}#P z67@!EgHCBae|e%MpVCgaP+Y8`*`$31FqsS604&F|=zNr4&&YT#RXz#iVIUWvG1XKxl-mzP0yZlLU4SX?BNNnWM#Vl`fYG`n>S#C{BkWc4Vb1?vJ z68XF!j-`<8&kXH5GaJMjZa!!;B9)6BmK5pA(E9lpyeoxan7P6S63=vxKCu~Mf7yj! zFED-Y#f?@NZpFlUWP$Oms=Jlr+zZwg27hH)s6(hf@;ytZD5q+ z1u;3c;ZepoWzF!eGgM1Hgw9Dxe*S|L-gChdov6v_2`M}7QQ1BPRc!{{w&jb<`ad;t z06{U&6YA#DR>mk42P?7A2lZ$dAz7C74)*kQ^mR;R~PZ{+c)^H$T{t zF|eaCMhF4T&eVj|NnPKUgyzgt?QZ8+z764`gckaAQcZj7fITPKYv9OK$CAsx7&^*V zySP=t(PHR*b8t64^8qgWyXq`YPALDl06O%r)wvxW zo;GUZ5kAb+JFHT)m_e{GSk_z1s|ZY}B_&Kq-O(*`dfuhP`x#M7>A-;6VX?9TrpE+- zes4QtOry!d-p_Y9{Den?s4L^b8CM*EDFB0iQo+V&mR}M-=9l$S@2_l6CUh^AF)5eq@Ld=TB_o*z_))&-&%j(llR``ZefbN++9Nhu&%<*6A3DL2Hz zbiALZb&t zBG54s@5FN~WJ-3sK<4)TFq4X!%FN%}*x8v8Y~C9LHKlwd7K<+wwSG454CFbf5b<1j z=23P+kP%l*er;{=d>8FW+dcKp3!8pMGjk{3Wt5}iIJ=}c3jQl&8cvDKjt~4HV1^oG zCx@p?f5B9hMRDKG^N+PUPuISE9M6e6L<=1m=K*&}Nd zjFpX%g%?975s{(`>RmMw%*R!{FvV0JGF_S}^`` z1U_m=>=r#+@t^FZkC;A~qLyxV5z=C2&wNQ?7)o&&W3MB?Q8rSW2vYdF-&f5@&TSnr zu{=QdWaauGF|Ed<60f_p%#*c!w5A+uh7dD|Q-HgZLd@5jrX)1hGaVbAAPvNqBA!!I z5wERnj-T{A=~+vWv<2m3=^QVQCpHaj@N1@7v|=ZHK0?lXo;pboUegHFY@*9GSc# zi9u3(tU%PB#f^n3=xJ{zpaS)^GreJdyr?{*` z_kR86o^GOYhof0f#nRH4xH||UhfCX;`tw@w|L)*`NQ!NSR`r5`&#selK*e{pFZ%*t z5iuLPx*txe^(w1W)>DvuC{-oP?(L&5+T6`Xl|Gp{f~31&DVdot3w9`}Mu+-SP9*7s zgJ6&4^(K7>2(}vKmIU!T`X9H&qBUyptMXcKTb?^cqCfC(p)p8kW)&=$fv8g*zxtXI zC#R?^ThZ4+92$yjc-r2ZQyA`~HeT%g&}rN#y1q)*kRF#Vl70 zyUoN9fzUuU?XGYX`Sm#@Rthx~HrFKDJ!~zk{W$ ziOKkf#&wmgz2g?6x5Jd!s;U|T+O%a%thhD5QdJ+TJET3Ka`3TI;Wrp#xNuZ8GfR-m zJsMs}u9SKIZ^LyFG?eh%Hvh;F1d=&UH}%OQg7#lQ7v#HvDGgwYo%wSmOWGeY+n~+V zRg@OG3rj1+Mz911>XB`Wl}ii1(h36$7M4A5t&X4&6RUdSywz2hH~m42R85&jtU3(T z&zKVN2~UsRggUlI3odax1^_PqXx=|d9hn}W#ReXoI*^mGdu6Yw=T-yyOSvJKShYp0 zU_o1tZXxZ#=<4sauI?Lq1xz6PnD*kRTCxl%O=+K1TH*S)Jo(2p_eiTRx)xx1!*V3n z=OH2X6w%5L%C>2P(3w=!HpV}u_a+z~C;tX~$+1zEa-QA0!hyee#K*N{-+cGr7tw zmc)~qym;pi^eJ<+YEyf0q^W@HV`!b`<8`UWGa52_EnFXk=}V;(+t%PpkWN$p5o0lU!{L8b_@rvox+L1=R%dk{F5f<0$(k zhHS~Ov@%Rmu@5KP&Lp{_E8EL_f-c6CT8g{IXb1L-Syc=#eh3GWNK1B9&t>sKI5_-H zr-c-3ERDBAUss1skzVrsr%j59y-0dKKu`uXa|Gj;0&(LWQ%R8}(CYWWz0VJ(JY5#$ zrC+5bGsH7LPbqm0QRSkPU`kP1#)}^s*Xi&u4K@`5+gvuSJv@1RDFSXN&q)3uM714@ zGf>jAdc3aJ&=sS3WYA(0XI1o^e#ivwHhinMDkFGXrepFpgXV&5)m=Evhho~*Zl%kI z;vwhS8rhr4uCLzLQ)614mZlLMPCVk6M4S-nxhZO_mM3bV5j>BR9GpC>m)@{l&X8DqLUbjLy z$7o{habwH~gNsj2!msiNnaUffw;R8AE28D|D}_aQ@TmS+MedlpoKOUpG~dM68vkQ{ z)8uu#K(lyMcaOc`y~(qDT%297<974Ux8Z;h_FA*7f zlKr%uN0S>B1s{+maQa{-ixeCwqL45L_jNz^?p}QH6uQ3)h)ev_$G-sa;8o(PrOy_W zHSuJfUm@gHKZYv=Ds^f;DPu5&d^tj=;l5Z{je>j~=V*b?kI7G)84U!P{`+GyUe-N6 zNm3ZCb**wal)YJAHn-P2uP7SAtiHl#TWdtrB7RXH;PGGtl5xZ>psjo}}K^?uDlo{kY?Fj>`Ry*xBy9 zgt@n1x4*mb9mUzsLR*9ZYO>aw?Do`c1%jBGZzLMb%+ zEQ%Ihgo9~>W=P4DUaPmi-(g_Xv&GWY z+xL!BD6k~QPN#WbYrBy)^*E#Mz6rw29<%{Y2|xb(@{()3UpV?oYQI$Fi2+F*CDBDI zM#UY03E8S>-m=qid3`g_@J{de%>V5Cgs{avBw^kw0fP=VbU!l}x!a*sEX^(4p6>sZ zmQskLJzRJHz|$4yleVG4{n>6@yNuh}rnU|uVWb5a_~VGHf#0^EJ7c94!vXGhq?kH=?M`yf zE+*)d4McMC0UrXpYbNgE?+?=okbL%O=68qtm%sPL`|6*c#t`xot@k?|j!Ku|^ewYt zsq30D2?_UZmpAw8**3Musx?}$7}>v_+q9~aY5w{oI8%!|tPy8oWE^ce4tlPa$XF@VeX^0tW?frhrOmMz zB|Dc|Di;HuCFaBB)qYhH+4{v=>fgX!KxFKV zBgUySp#1F@*)1~vo5>MSj2u##OO7p;Hdb$OD~TItpsdF^518UKc2zI>?fYV##M8FD z6ZM5@IY$^Xo|TgixpxtFlD>(DW%6lU?9$N#8&^_lygpp0<22UO5vhWLq*qBy(Sz1; zM+<$2L*o9s5uCB`)tGVYEY}u9=CeH)yPQ6ey5|2TtzIIti1!6VoHAvp%W1AEoII6p zTV)=rJ5ze%Q`clWT2D0x-s&}Axz9;SKSz1dZf$R2&8X2!9aygTk8N_wEd8_RdBW(f}w^fk!g*->1e!7XN#n%AQ^TYUZ(aze4m+F#jy=+X!oL_)*^v=|H z#m%R!nQ`XaRl!kp(^r}2^Efm?VkWMc@MZ9wP=+wq7nStY>&;0gW6kzMTvFq%Z%o$V z)lbu_SE<}2#x%6FE4VxjIvrCjL>PXXhOLMgXl%Zk-+bs)aN+GcU(Vk$3I8j=M4l2Z zcE>V-Qd2(L*ucB4N_l2%z)^NT`(mCi2XBJ3;G{_giN;RWAsU@>?39Z)DYo`|S8uVS zUlm#Sb#J=cA-g)XlakYofa$-|6+TkNhN%n?5W(UUm_W%HCcH^)>A?=Wy>iM1jlVF6 z15=}j%_(Kc(lsGn)C`>7WQ%tCJ@`7i`?}aN}t`BP!xfb1V7%o0{ z6LC#RkE>@)Z7Oc0@JCG;aK4w2j!xa3KSDoQ|DB?q74=kypp1D!P^cGtOG{Gg+j}c( zn*|^0J;rqY{yyI=4#1V@{eK3H#brq_0C9T?zIWbBS-4?Tz{ZB#!NvXC02-q($1ge(#0Z4l%g zNgY+C-F31|Qg2TP+DdsS*B-N@cbdjx$4^1b>7C-HHA?c{L`-kDN022ENXwqRk?*FJ zYiJl$Jcthb=%@oDi=gyTa8h)-!KeeMXu6~zZiiJ0$sDWt+r0W!syYtEj~K|JKNfunNNoC;v{Gi zDZc9f+aOJCN%kIqvTuA>2FuDeneM;IqR$sy^^mV{U*$k_6=N|8r`}6(8(Yq%l)Awg z-N1?H$n=9ndvlZN+BWKZM?35kA&LX5kXHOtkAMZ@@cWV>J}&lWe31>)xe!Gz%xNN6 z7i5-TEl_E$e{rjcI5}5SU5t^A!hLoLCaY2t2ZmN4*ut!<-VN^rUWI)x6(|PYtP^ra-xxBBP)tVVhvB&ti2T{Rl;I|88+YBS&!N!bX|8;JpzkhuXyjvTM z$8ve?{Us1@&rDr~sV2{6ZH+XjL%m+onabzjHN_3HjBQwTy4G0ixowS?swQ#pR^=>v zu1KlT)~E;DHNSy?1BgIH&E`^M9p<0@K5_4BX`CQHk-cPf=H=n?iI&5`*J}%o9xg7C zeqDJmaqqQO@pJXioYR;bo?M>_O46g0)k{_iABM~I{N?D#Z7;HwMBz{J#}S_O`xl&N zw&b~aqq1yOU21H!OXJE~Ym$5nDVT{+k0IV%9pyxiv<#C;ZgsMs^zC9b{Ro$~8ld?} z0k1Nk1d^V+nrH~7ug9rE$Of45!D>>}{edQI;a#+WymdUWUc2MFRD0z{TUXD~mGvj; z(?lO^s(Z&MYc2lolkj5Mm&81ulQGa4^~{q5WjiB2>6t%#mR_9sX4!H4d@lh#gEiX# zCv7R>51ELVs$swn%4ujR2UCg;9fiW;i9d9oIx`3P6l0~3r#Az=s-8D)@VwfvfM!lU zI}D3G`#Lx4dGbz)ft|n@Z%9Xu(5=X-u%PQTW-*=6vLhOh>^QmedTY92!_qdZq4#&g zS=(aP59Kqo^dDzuH4-O614G6nwD5yhVh>3A*u|Zd`nr})fh@~Tbp={4b6zLJuI0=0 zGzqe&3%6}}J&bG#3;FSaB6+*0h>bQjEDAerXlOo&sV1U8qjQK3_8Tt!7WKBgFwg4q zm+^)dsYROO0O&Uo-nf7?ts9F-Fwy3PDXnQiNtMi%mV&oQ8e%cVKlN-t8RAR_qxP=q z+Rhw8_K#t=0anzx#7AYD2NzJY{}Ki;q4y4@f4sMbpO;dvhBY4WaHJx?Hr0QfAAg7K zh#iNpSsWZ!CS)DK2_Fc;IAq)pj&C+|JfUSoA4X7V5iy!&xC7jFE8IJ;Evg?6M%?k` zmm8Qdt{NRb0)*63E76W6H07#+%nQhIC7=>8o*}XG$qkO%S59Q}VKK z<>-$nD78qJw``r7rmEb8)@9fLXVstOtowr&yGB&v7tA6Hwe&QRff{7}s>^3LUmiR} zU15^!-OaW&GiZHhihyvO<3WoeUo3qy#jjP|*ihiX8LA*r<=MuJulVo%DH%scX5gIY zMRhS-+04{zOUl!ZKk212c@a`Gy}J~<>+ua|MtgraX$ zx2v7TaZvw#$FE2R>zbr2+V-kU1{g814!|;dYf|cRUqZ&}$|-pjo~vQvnuD8!kwopQ z^7|9dn}f}fmt~nhJfci~Khb`$T| ztDMD65(AE&6#5x#IWtry;6kJZgsJ}vO+abzmf zDQaB6-v(_>3X4qcDx-a;VCX+COuDP4+k%3`7tX^?HF$OCaHc<+uc}q4?ehlLncAgg6S1vN9bpbLca0E z3^B+A2I|O7>!>gs)=N9-l~Ra3CmGya;UZgb{~nvb^l@7v&u+&?r)Z?KBQ|KfB;UsM zvqFK6P9nq%sKm2K|3;m8x+l7mZ39DUQ!i^crnTEeeU4!+(A0*5ZfmkB`TyR0h>c}7*F zVH-3~G=GJmr%(PVJxmaN{M~4a!gF%eU|@O_H=hm^5)zUt^8PI`;MFJA+y?!PeDj%) z9SMmk2Bxr0A);k$eW6<+6_Gol=HqbNgApQtjS0Z(d(8=djVcA{;x?H*`}&Xf%FDSW z*#RNhpABysW*>h8z*jteeTvHdf`6TiXxYjys{VTPs^K1=des7@niTi4`^+5neiy&pvh?t_Nv?MGgId1H_Nu@#K( z1D-g!sL?v&pb%+}%L5Ij4nkc>UXZ-}8abeWwP@_XC{l=y^gto+;li%F-i$us)uY2x?bXQ+UTa z5WfgjOZM(Jq610@!GR=SQT`F*S`FKwN$C_O#+EUVo=GH(Nwmpe^nwUSMUhCs)P4i) zpHerZ4wiQil^9m?MO9WgNv=nXLbD2cydF}BT!kdd7)Ji zWb+Dz!y#N~VF9QRX-~=$Byez7g}Kp4Sv1^e?liBzt6{U-8-B%XKum(SAk|*T`bh>I zA-O}ola-$v7xjGlBRwVu@+(@$)XR(<6=bRH5?(a*ikItbcQ?(chPQ20(9mn0XL&i4 zSd+i<`X?=4jYcJpQ*uIvZ-PG}FrxVb-zhIq>p<(uEA8KmK>moaOX!-3%Qqu&1$83D z-h!g-t^Dd@RZ=}0Ev7(0SNEWr+<-AO2wTWtlKl2xi{oNWZdA{;FWUQ9@BU3|n@r{N zEJYz1Q)qhpDbH))prs|iEFel#pJBO}jlJB+^%|p5OPR=_ZzWU}GTU}@O0uakI&GCZ zlJs=mP^f@TSy@(n#1a64O{aVE_R>*Rsv)4XNwj3D%`K-Q<9|Oo)o1h z3coFTdAQ~r8(jX5yH0U@5%B6oboAM{I$z__Tx@i+EYXkL5;5|5nv^-|%(p?3zddEQCP`HeIQ!{n-mBX@QCICp*1hY*F(Lr+*qc^Q!kV^9G%S0t6GI#&dU%&NL#rOa9G@$?&-qn-*dRKA9u&J`Ab@u~Hky$4s`?%(&G2%4)glZ#J9d$@oe3tCgO zfeh9lL-Zy)Jy2qE%3$kMDMoRADnWuS_Gfrg!)k&logvG+QD;2fD1_-4S}sM9xvu*H z>OiXW#Fjxjn!S69EB(@KDEX7Lcg=1RPlQAZY&uCe&ha1aC;uu(UQ&f$nlA~n+BSdg zy68>)v0;24trFOlbj}M`@-KfqoYAw-q5-sLt&-&{K)9;USP0kERDLj2ET(b1OXfef zZ82=lAKT-IFWO+&Zwq;1-F|HQB`jE^8ccGe0vzEB#4b=+3lQ;55xMs|d%vwIVGaKb z?+6Ql5+DqV)=%9`+1+!~m82Yf7U{l!pV_RsDZpsS%8yV%&;q5$HM-RhYw5)84I!u3 zU3De;`U`qvPvGf);+8E5CXk=2NgYDY^1f(stN;9;LewVPtHfJOAq(__KLNRly{x(W z0l7-p21#f?Q8rpQxDL03ki)nv0_6G_i@tJ7%{Me+#3cQyjp2j9kGO&CacqaIIUEnQ zpH%2(kYM`yrH^RGafQ&~sOQFd%D~=+{U~oi4yMyps#23`pR7T5c%PLCaN@4ZeL6z_ z$Gd^tK}CUo3uGE1{wD}sU++7IAH}Q(NGh7Q*<-$Z`uZUY%Petk0l~xU9{9e|_ZMXN zpMK~T+O;2ChbZxsMaKM~NS@ZSfI_oHK84M!6=Wj=pS|`BEBC$hY0#6m7gRIlcGt$A zvj)_rWjm&AWoMb0rlgegF=Xp@R9LGO)p|!sK66puaqQ7ol}oEF8LLwfRS>vut^KN{ z&U)ULLHk!Jd}@Pbk&v78x5T6>w71Y>(+ zl=GzNi+L$o{fsIa{FTzet3E5ls<9$Q`z$|-pb1Mw>nT0LXZ}ynCd0I6&+gYoi_|A) zJ9b1G5**;c3_M=5^uejIG5N1CPVU}j*lk?HvQ!#mN5~HUcjR79^N+Cn0HM@ihI~3` z!`WlKlYl=sm&M8d?*xXxsdPm%_Qm@g43??9Cm(^>MDpR zs`M=tPf6Lvr&wtRGVf0Job_9BRdeAFLy`4Y?F;NN3*e3ayoz4>v(Y`mI&&ZVy~ACV z`-3K-nSei?dQ+{<->;#-fTBuOGk7-r_(Wn#l9|0dNQ~(fdD>?vko}5L!PF&;K^xbz z&MBLKvWlD%vm^KN=FyCtBG|-XtS|j~Kc}ua=ImD!)$Gi7Zju5;DG#tVw#_l&pWok~ zTcB7!I!-W7Q}#F)?uC%ftY(Z5WoI{}{}_Hb6b~WQHip+bPwiH1VrRNIaE*UR;+Top z0a#>^eQ1(D{;7Iqv)c~VKxdf*PU^)P-*mpq8Bw6;)i>Y^M^ol{uKyFUH!sB=ZK{c= zmf5HuV<74O8*aHc`HW?e(kE%4M>Lg$t^X>WZkai+j7t#$c@!V$MRjhAWBf?Iny^mhl=>6A|0NjZr-}PwYlMraXXS^M+|w_+xkZjI z6v7}qn>HMbHO=kuBjpDx)#dh3Mu|7Xo%@5CP|PSd{Bv|z#PLPl9p!@imFSY?E|3aE zbgEdph^I9&))L-F&FfYTQp2jjTc^uhakz>BC#TLS73POezYlQaXzFzo_x(yVG0tpj zn~%&24;W_KZ@$D)5xr)yO{F$dT6;dMWv?!NzO!w-wW5F-s=o{^Dj6#~{T*`l*J8UV zfpN`~fS)uqH94JGul{;=7WxyGkJ&(CTuzgKmJtFz+{}j$eR9N0Wlw;3Bm5Ga6>oD^ zL-SI(b62R)Orj1ZMqZLz|UsuADA;-whUnRg*T1w{Uti>WDX+;|-p#BP=D(@H^M zZqVw-u~7hTPRJC|~+*tby6pv?G7&Yn{A9YKt< zJm=QgzQ^pfHN>34EnOa_{-=qNKvdn5V?K0aPC}*TJ5hPsZ@n4$L}vEzGS!)BWqZEX znr)NzDw@J|986Sj@Q|4IsB7Xb3`PQF2ft=wW=#Zp?OA%Ck!TN(Ehr&>M=)u~X-;-8 zUA(pOvsgeR0Y!KHsN}M@+M1Jd@{y5i(=R(tm8|zHjE;Iysni(-`BvDw(nhKyV)CKX zCFSMn`ZJPEj>%*TO%luFl8DD9ihaE=J8v&rkksq3Bgk5S1%^?Ysn!_k*|C56g#ZHfVmu+Sy}dQNujrwqw;k)5lBHzZ34r}A;54SdP}CK z5LWz3zi_aNnM1r?@)>`>qDgvLsVU{DLYbFNzu$C2Wgb9QfwV4RSLEbvF}wUDL$;on z4rVMRg|^9tikP5A6hP8ghaL6-oojn{gjvKEjPHF_u~t{({q&(Wsp4%&){)0nx*L{O zKf}$w^b&yeVxCM8W3xhk=%y3`4>`RLAD1_|CS5X6&%Dh$?c<94fi=0LsH{vhfb8ld zMLJ#aEEhv1etqfvPOdes&c(!2Ci~B3Ai;luR54sk-I3Je359|*LgonBua29ybVz_& z!=@sp+! z@pJuO(-s%?ldsVDK6~!s7S02ogexLyc(ukSt%Ph~lHlvu$^^kI`*dC^>RK;12~jxB zHXEN(zFNJO*u0|;iX66F>(1zVQqpREXSet-RP$*YQzvy%qh{M|Zxv7&UKrgczYPSK zNeaNCR8rD77T!w_%Y>)cr(we^M4&*m#Twf0h)vuux4VlW^Sk17R1Y|fRH&AG%BlC1 zIQ*GShx2%Eyc#CbPhTBmPVGw2&owz78sI-v+l;2FF!tF_9g->O6H1j`j|{Qd7P_>W zD{+;T{`<*9=sncEn~SM!31i6gDdkycxwkM4b`p}7f4pRy@<*Bs=jsR|R4Qlu!k@HZ zWAHKK5gRr`hNaC5oy}5_(8dk{-;e%wu z(3{pC29gr#WMk&TaHaF(j{h363`Uz58>!E;Gyt^OoRDBz=b`#wFXxMp!os&5`^}>0 zKjkvOkmVZt(9r*_=l=L?5(B2 ztBt@0BhwNvkM&t2i~=R{XzB#jIa#qjT<@J17pEmBs$jN0C$1r4TR~g$H_0ze%tern zxea^EnuMoD=j7Ct$fqt|uny&F5E#)dO)oTme|GK^otR=IR%H`RP10%^twHOKDh`Cy z#Cv<=meglONe4KQ{FG7l6+&vAkAU@*pJ5s0)wccEQ>0~9&(NlOqn43%fen+xGW+Vbbd^v(+W-nMP-Fr^QkNvkuSp=S5`fL|Odso%)e ztINfauGul2YADb8qY&=Nj3u8@)AB27woW5zPk4obB2VIVTj008wWzbu=NEG{Z&YA@ z@>^4tw&J&?ygaoh4hI`9$yTWjzGQBzr6XY+`H-E}JL};HgS~;>cyo|~GYq#m>bLHW zK&mqG8A{|{ZEI@_lfQsVkh%CK9>qLR){{SRj;c~4cdSEGNH*27`>dQil#%++aphz; z^3XtIMrQYl;qJQ5w|zCs9-hPO1#qj~5$(x(bp2{$JA1gM6RA#?RTB72?D&D+vs(Ls z+w&1nV}A`L-RKGR+THaYWacw})2We6IX*YP_^)_uGAx&!4wu8go4I8s9dv`mRAWZq zzOdr`9~YMs*FWa*mt(}R?$muWiw0(bY8nfiy-6V5aZXV~SuJ;||Tyxkqh=g&+jx@euWjCQTjp6KQCYR~HjxT`+K z=xQl7<>}o1UynSen#?KtXql?jt4kONS43z%JWxRq;FYa*E)4QRRPU*d*ZThDS*&?5 z$+_b|1b{uYUgEa@+WkO`AW5yIcCu~hf|!8d_xzGPg_XQc@@sPkGjj9HFeTx$O3zFp zZKq^xx)Ch^5vs*6{r3F$G6%J}Wld+TXYAC0UX-QDnGr>I9BNwfFSOBJCnwf>#E)sr zv)s;PW8;QDx;>bcjXQy;5NDEB%o7V+8_qfodVb+$HB zH;F>q-lfts9pI@es19lTb9KH)SK$zmad(0xlOsr2tkAAcJ$wJt2RB|IY?5uKEMi+tZ}_eqtD$9<|AP9AB@e}cceHA>WtOg|< z>rLaEG^UF?m2~s*vHmscrZ`Qf3iE5Tn-SZCfrZQ0;_kaV3UVL;(-Aj`)g4g}zcV|y z>wvxyAiZaR#GRdQdl6>+_h!bkd0}ztuf()eQdUM7UKUH7rLU{`!2@%Kk(G0y>Lmbq z+3!L}mfQC62@kH{OJy;>uOx9E9@bUbUlXMgMSJr5a_Q@tZGF6kIocBOZ`oIQ%Y-4VCH1uDFWI;6#_ zK*AloyE}qT_$YqN1b3%nwH_s;=}PL%J?Sx!akPJbQ*6zV{6|>aC*DGuPCA&mKLgo6 zc}kE^YV21WdWbw~9z1I za^pMS%;z2M*E>&a6nnWi zuq&OE*WUMkut#e>_4x5h^pYaMRx$RY`B7*@3iWUrs*m<>EfCHkk%4ti)Hx=9(N!!L^Y-i;poR z0OI=#@E!Mp?=b~=AooHuWUQunt=lrOju-=6f%t@N^RK=Av29Y(Ox> zXHzjWb?a7`=+{c+o6_fbNlxw-_^zgu%k|+XkT8S)Uod-^Zxk5q1ACZV1lfumb-hzh=c}>SWY`bJ!=*j=Z1c)nX<>||30kL9t29aT`};nB z`8hPCPiQvO{kA*>>vJ-uuNWJ6)H=6_M~c~}udm1_rzIr~=sKpJ^run&9vPJKFD%nw z2M%}2c)`*SgE{rH%#!sipZlW=Ib68K#5&b9M!04yro6rk4l^t3>$NUAsH!eV)QI$Bg882RSC)ED%gm-65luFDavD74O`*ffs=KPl(5ryzgdvkdOk?U zpr9U^L2WSSzAMk09yN^;UsjZtz7wW1(KBqT zHP9p9pvf)j{Z*6zUhTcWX+HAcJ68}+5rVRxa`K8PRTO>qSYRn{I-p3ZrM8B>1u&Wj z5RE0UI{%7a2>Ta+{p$ew!8`N#;nfOezQ>r9oP?n&`FHp~StDIbOiP2<_ymvTk+Y|J zB%CX!nQ$4jpBdb)Fb*8;O>LWo@;h3{a!&N8F13ykXvLDp3~2&bLorB*mqgAbTI$}> zwx(V&AK4hx-ZFi22<{G+gO^6R{YY?-qB{n>O$e5u3o{V??a4I2DTI>ZN;88&)4LA| z%JeBKv$ZX}Hj@rjNu|5;Cr&*Sdi(kaKzf*+6Jdu%Ac9QF#lsx|X~ax-MZ>!`jLo>- zL9#!d&wL#oR94Ex=@jg`Al%kbcJ)!qhsq%t&IebQO;d>p4UsrN@_`tb9kU?au6mO|+0BFEThN zS}Z(5x!bz~6v|flX0;k!oU1MUs%lAizYZqy69&9o-09x4w>Ha0UB0tV18k{Fh51MqT)& z_WulN`9ZnJTQX-QBIzQRy7J?^i15ynnbHtRJNy z@>;bACdg=gRois!b9uXiycPBaMEVrLFnFy`v?Xs@v+A7rkLjH(Ia zPi$v?MU>8!G@jCnd#&QwBhNVWuUy~U?~I1ZULV{|miR!bpgTw$b_4w`__-1M&a#yl zir(uL7uOq)SiQ*^5T?U^nm|<0W+F{FPyJtK+xzSibxZ1mwkaGX}nmf18LaH8e>La7krx)1Y6|41J;H{N1jrfMme+kVWNg z1*^ZW^YF=|lE~)n$PBmdf`S*`}YM%asvHUFsHdpY&w#DmfsHC1M)as`RsK4tsG(cv#P`=h*O?CKi5%Q9UT z?qfY#v*((FyBis|eLQ&GFy-<=gq1~}zo*p4LevwUMKo|Uy1gD8tk{Ik^L>WkxU}+q zc_o6__rPZ_KnpSX`tq?Fx-~2AX|gJ)lPA1zsAIs`hjB1Cl%dp95E{u&FnX1p58o0H z;H{`ZHI5UEk#*BlHi%K`tf8pZp2=2tHum8czmvF1l|uxHTZ6g}}0MY@Idcn8=Hd#V3zWK$Ly7r+lFrU?WWvOQ@PwJNw>A zx!%t08{%aD&(MI#&!)hqZ}Cue!Y9(|26mgG8^-Vb>YrN#S~my;h3;u--Smgrgm7u8Mj4938pv-QI z4X)G3+7QhZXk{mkGN`%6(!GXEpLn!|Kdqq@7ZqET?1DFU|0WQBC%d5No0C&Ca@AR( z0yKfXvpGt_|U@>9JfG)doFDyppv&kz}{1$+}hF&0{BJSweuPZ51M? zL`G|E*C+2@J8Ua_8ty;5j#S0Otj(C^)vi)n_QPGq03|*>pyF^`bQOGkUmHC}qbKzF z^w$T-G2_|J4lPQgt-TijMcT~s>!izO*}?~EGS8zhV^QE~P3_)lPWHj9#^hFYBdgkP zA{L{WU&|s+`vgy)T|wDSD{JfD)5GcG<)ZuZk4%7L)XHS@pA*Z{m23GiWBfZnbRkv3 zwIceJ*)TIyZCOOY8)>GCN6-7(MTmAlaSt?tM7PC8C$vy{H$b7!wttatc zK7ls&r63Dbqy~aRr8J%7{i*OUiqZy#YJv*V&sNRmjGpL!3A;_f;8SvId)uaGxv&V5 z=k0JG&D3EwB`L#-;y4DX(|iAvTbRw9Q9JR)M;q$VrUT7>XL(w1fL6v57K|<2z9soX zjIqLnhU7Dz*Yv|JcQBbjH+a<*X^$6kc5oO8UTNN}tP}7qILR}oYk4a$5s*eID;Alrrt&oaoma~R>I-9&Is39LWf+P z&`vC^@uAsI(q@q4Vo5qSIbYGQYFn1uP;0BK>S}+0dB7O263bF{Lrq}cBX2|vkGi(O zSD+XZKyzh9_6^0@Re9EJa)VG2-ej-^eOzm$a8xKNv}bc~o3380)5Qj zWvcjCbcHr&8q@k6IEL~dfM7%k3*T(e=v>>?yQROU%s0J~=V|QI^0U24<->^Gch72TmX4oo&Q^t2O|nT=+q;MyK+a$+Olb~( zYD>8V#bg*i4bWxWKXj&j)`7tTjVHVl;ZjmM*V08->wE0umW2U>GW$N+7}(b7m&b)L z66kCGvzDLj^xEC;?f@}LWQ1BaYOWXTLSo0Bh+XYpqMuzKB10`^5wQ`20P}K=LHmJ( z%h@tBYs+Be60W*>d8OZPJY8Wq*^Peie2 ziLk;Z#jJ#_Bxkj{N!UQC>QH@>Y|Fu`?|nuDlei~*aBgnCkm~G&KpM=d?6*?qwURsA z%uB;b=ZS_xKHe8ShZ7NxfDG(lg1)0hu28y0OzIwOWv?d0Z)w_m;-splrzCs-ATQg! zAU{7C%{}2hqPFyBCyy3T_24LB)P5iboSQ?7iTHP<>q9&|zS=o*;EUQNE`4HFQtBI) z35nixk0D1S3IgBHo)){k>r|a4_e4VV>^c9dTyxNFyMPcuaHAFnzVB$kpvQjayMVb<~B*=>9!t zj`_mcXdcM2ZpT<1n(VsZ26qh2^ST?jW4haMJRhFbk;OQd7e}c$?k}!y(BdspC5=gE zorE`r92E14BzqtbGX zFLHQAPHI;03iQ#JehD<>!W(~nEPjO-+2Zom@787s6pei2eGccZT%I()xB}nky%wnm zKl&0IU-OD?c|y>0l}%lNb#%fX>#~t6@MuZf93GJ4*sWjX-gpsmJ1NWIaMv{9wvGW6 zsWTvK#AF09%&aLnb!SUUp9KuK^?TU)_x+btQpW(1(tL-CUvhrnCkT7p z^1XeU#cGItD34*B8=#90#S$=KV=oIHRIK8u``Ay`{+p%zX60I6S<7yv`S-;L$Gog_ zFurzX>L)o)Z#~!Qyy}>uXi6z{thK;_Lq~$J`=b@8zOy%#SVdX`A^%|wZ}yPDHd>*C zarYt*9}m@arAW)-A99U*Y-$|8oxuLCp{liOlj&lerb)U-Tg9KF^Wuc9yF^!Sm2pn& zX7Pn(itg0xg5)6ME!Yt5{Eg9qeCcG0RUhS%gdB4o1~KJn!gfTR;=HfVN9J_Cswa>P zD>D*6ZaOuK5@>5*(-j!qul)2dO|Lw(2W*q8Z4%?1BH2Y`(dHgG0}|Gdd3pJ&bVYQ{ zPZ+v@hr{O8%KSBrv1>6KpUiJe7Wh>BMM)P$H*Y|H+T!p5&ZfjA2iHyEU1<@u;dk56^6`>AhS)5Ls1t>z68>{GN)&mVvw!P1QY|O3s20*F2!~@9ZABO> zz62?#s?NwLp&wj76FTtZHzrtLX5CH+=$?ELs$f-8 z&OuN~GBm;a-Wx>TK`V}IuR1Xa+SV>R+(Hi=#M0aak5*t6-W;4Y%$*xxCzLEy4cpJL59oAW<0GoavhW@dH{j23`lVo>sviK*9B=)|p$aG(O?li>;9`0Y^S(IVQy$aUlHLU9ks7>~mnPPZdv-t)_%>#J|Ln4&+n9~ZCq5zF_nUS(+wfRjT0j-CdYfdg zA*yw|Tx3AS_li5+ZBsKqd!nnSq<5pY(fxiJ6>0O~uTvuB)4^9U>2a{UuPp}*26GB} ziRf69w(DOiw=uJu&=Rr~(RaTFDyKJfoy3Ipr=^hZkg4t_E?zQ$%>bmP_iY)AKjDT# zdMt^^6Tb3{dbVtr2t@hUU%TI(YHL-s<4jD&l+Pn_sKgrrzm}Qpur4>=cFyQGRDNm6 z556na+kn2{I@!}}^t2DUOhgmb80_*+uE7)2ntu5gt3NK@HaZj{lOZe3rDBm+KO~Vl z4*9dtwl?q5^N^hJw~UTHT5V`j+84~RTayQPVPXnnCyai=y6eh?+X46{8Z5}JSgxu$ zqv)wX)NC4uBu93xGU%SYHucng#On+sF2z4A7xxW!HhM;eLZ~c^jKVaLRCOGixeVHwD7d}QzER=z37kNPNp@|1B6UwIB zwyv>a*oz`IVe&L-ar^`V8UHM@@_M+J) zcjkbLR7|d?ne~e~H3{f46R6n%?lH5zTiP)=5nIT@B+pzPaDxfl@|G*6J?Qk*ajT0ZV$+p- zk*Rl`V+2z(0+|8=07GEDP`6VO+~s`#$tib*8{Q2SZ33JF%41NZbBcSS20hia;Zy|> z8fw@-3XOfos#;R@-*NVClKfc7Qd+OcJ+d9V6*@#NG4*hfao!4jrTVFTn=^$oTyFtl z1#7wrLBt{=-qHXrrFba^oR-9!`9t~TEVOv3vXCZ}Ao=_9JJj;(MOhQ0Yauru^J{5s z%THkDpzOz+r{M%Z0hk1y>&x;u0AbfnbeV%z>Ywjf8v*MUHs-Vupa{8?aJp+LHDQA} z(;g$N`E-Icp?(r)>VGW&d|Tk3T%#qbQhowuhdDMU?B*TIJaXz*%7@Q~WtLZp`5M7x zzNY~et;2!iyZu{}N$bH~x1Y)fwE4sx##%!BUsq3=QWa}>gnKp6RvhO?{qr;rN5)5< z+~GhhafaO7caMv3ENgc&|8T@tp{F)yoSSwlkB!7;QR717(hE`RFFQI(y}zs#+zS;$ zmcmE3d$%q(uYEw?A}&7O2IZ@O7O-vp7_ewI$l)2@ueONpY$!T*T)90Jv;2=o@Qxq1 zIFFoysoMzW98*=QRLv!bY2o!(>RnfNe^K?gv$yqF&1WHq(U2Xfby+2y^}PnYRNSDv z$DYh_c=S|5xyZ#{u1HmBX4;_oj?U&Ovv%eQ$LwscIqso3ng0+o)7er2jRvvcLu;5u zMwkeF^t0^!W#u{?ozT)zgAR>Y2;qS_uD%wqCq3ra=d&V)tG1b@-F{ztQKfr!)>4R;qoJx;c>{{J{c)(Tt@y>BVjQP7bt%pCVjCHI zUH0?bB~MDjY>4kpR$4=HXJNFq7&*+4!EtrjFisNcEVvvi(nCn$^Wz!urnkf!gRx$1_zeTG73@NgEs8~*fay2wZXsM-AU~#~DNV7k+!(<{(Cu1{AKlL= z_&#B}Y2ksZaAx-Z5W2$J8@T-H*piAnzp$W>gr?Ur3&`4oV6xp${FXwz@5CX~GZ)T< zkd|wTgfrP7vL}KAH_GL(xq=`1QR*uT-RGfV-5bw98)h)4AdkF~l)9@$xY{zCKG9A- z_f}3|hM?#8-v*NKs6=l>kL&m|zk;Zh`J?QqyZiC-?-SAGq7Oqyn<$5qymRN%(~~{0 z>q{k;vJJMwoo|Tl-6L4Fob;^AF*TjcQZwq^lhns$F=L4rb2VO?f?!FV9}!E7ZLdZ# zl*_7ChCdcIxo(`Pmpx7_=U+09mfEAeogx;S-E8^cZsiT1+{u=PD;)gp0Juslw8e0u z-}B=mNVd=Gbjl5Ij`ouC{$|xjyp`Xh)?r-5)|W$^JG8Xv+iK{^_Cj^{(Q19>jtf0= zB)F`PS7w>s&O|%FqOmh15bl;)a6x943(m8szEo^ac%$<(sGz_*XMSxHQQR*glD|(+ zIgb$|waRUt^F+`c@*C=%z{Q@TqaD_pD=@TV!{iRS>Ecb<(i4gK;0KHaolPPN!23jS zOM~-pVi)Mws6llM%77rha{Qj1-5(KBtm4*+l7vE6gJP`zc2R*VX+uEP{1i7ej~S-D z0-MCJMP>A|D2SEyWcS>2t4%Rmf!8u;4CWkXz%$t?RA@Xe%qpW_*1?Z_c;0yTdRnrM z@}4Es+fJ>viVm}xIA+wcu&61>)Fb9Hm5p0ic(kX7$5X-jHfVFjH#Q^$KJZVf%@0+)eY8gE`H>zwUG2wjSg!>iXx&}daDW>fauBococV=H z5iRRN+s3wwk(4u^lR^wqv=+&WzVuI0^MocUjk9Pj^UCRfMUO?F>t+#tWJ3BF0d)ef zMA_`|S#Ojq4naM#=HjB_{1%oTnWdvvz}EJ4Xp!T|PdiOYWw+V86$*oFF0w(v3L_zT zrq9D;h8c_)clj;kjWSyU67Ssxo&S{Ce_7t}3)-o?>?3t@_Oh4R$;jAwc_yPMvwD~k zj#?gG?11~Sf1+HB(l4B~kf~&EpDi}~{J%+)5LM(xggWQx!H-FbW4L)G#ow>G;KSMe znL1g*ziYUa91QW_k}Iu{ghMC`gnO!sYE19@gR= z|M({~^;9!NNhqxmW{IO@B%oZ=7W=lpA+GI?j?l8^&QJvhP+{zOVgn60S0*q8k&SV+ zJT^?OYdO%mOu|_1d%q(c{-6WN$6b4#g>ytzMsg%|^Z_Ev`lgy9-gwr4a@5-`f2ZnE zr{wW^hdp>v`zgf9?TG^0lV7L)oJ~vxgpG^&QsUp>SD;5%L)AJrRKrn{{1@^&Det;+ zC=$*i$D+X(z4Z5M9v!Ta1>90_1#3ja{nO&#&>&Y9mMsQFKpH!-o}9(>!{(QCSGFuU z`UZinY4JNBBO&3yc1L>5fNN|LCP)uAG0r4Xe6yF#n(%Pqcw7Ih+~=`)tD^aa3gdurD9(VX0N_=Owm+R0cO_dG<}LsW|vHd=kl{_RFU9}J%6oNc8D$2i~X@2ck*h8MX-0OT)eOe4$KHq1@2sZP`xy@4{ zI*84tLY$_7-CLOZik^J%mnCUr0oad`f&AV>0Sy@T7LPY#2f{uuaNNO=#v9sE`vdEK zD`Q&XSZozU3l{CPCg+skdm<2VrKf#b{T|w+QbO5?LUdXJeU^4_7n05Y5=PdW3wCU% z2;&>};N@*9JPhnJAvlYCqwkt?PWo4hj@Cwm>gAZ76WGrM+FT5pv!^O48D_i?)`Mnz zu{BA#pJma)Pxd^vGY~qbNOg?D8N{FDZbDvvK${+xH`qs#?Cu^JVfjL60>pObcDp7! zg$RsqdMD_*#@h%ID4P$46{SOTe*tIZz-~Wgd!?Cer9`;8??zC4jHlvPDD~2joI=Fu~2F_gYIJMtn zNKV_$xH}azG6q?H*_=-GI@tEml^22w;}wq$?zW@RrZAu+n+|fOjWl4(_oA*t@N5Bl?|YWajS(6`*Qqg)1g7 z^kwP6tw)TvXU=$v@%0QA{F3J8HTSFIfyO3|R1!?(ev5bi%@FT@f*W7JYYzRp8Sxte z!QsML7h#4wE~h5fy|qm7S4G2XYc<8PYePR>r(RijBQgk`Fl70bzr(2tB+9xb*IZuI z8a7+t>w&0fV|~0iAR4Oc|7?8s`*6OTXCg&jH+a4rweACQ*)ONUv9aA^B*d><8Z+tF%Y7K^wd3nb4}ic18Pk zaFeyXR3!7#wsbR}|oq-r$AFh;NDJjlNypp*Ef#W~3q2w;#Q>6%=ZyUR}(as!UU~d6X#5o2B5COa4KRudP?o(N>X$SITNa7_s zz4*oT@}`-5ul4j)B_AqLQJ-^$k?`A6@^!O1XBOoYa#53j33_(60uY@!z`Y+9LfY5czsQ(xRN+(qx3&F&ugF#5`zUh{Vt-cY11&L*{^8t3} zWiX!0Y?-IK;Ed6{Y3;n&b&CC1q%(7X%;yIp)jY?D@pW02Y@nyi!~9h9Tw`=^%9_(! zLRtUCr2f^tBN?l2waVBjeuqALU`fv$_&T1@_66tvm~VA)gcAUx?@ z#r$*WeU2!B7aUn!QCe6~gV5OWsi>(zn6bQ~usA!$dBUPsvu}g0=olfgxU{lRd@B$#=)4ThX5L)wfq@S2dCc zocuil8W5;qfAi}a_0_Eh=Y+=Zf#lMji1fQno!6vQ;YZ@V)xMN9g&moSYOK*P_ZCBQ zVllQE*+uHDiv{BsQg`iwW@nS6yr|wvZW7C$|6zb9&RmnDvJYr*)StAi-Ne(%aKI$( z>h?{F@8i$Bpv?2;}!Rz{~?km?~8qcWeU9prU15ECi z+on~>VVLycQ?6}44Y{pA(PD5qjVOCVvU*gIM;xBlbV*$rPfXklFzp=*bCQ;k*}J33 zmU+p|wpjDNAvW?nrHfzZcqoe%I-G#B<}k>GTvvjZCP>!PLwn`^R-WzsQO?FxnlY$Q zR$W6uRoO(AyZF%`#MwKB_czsqZ7r(9sQG>Vye`4ZvGEs&+3sXaqupKcN9+JN2m0-L zz%CzhWZbzFq>9FzLq_jMTX!3MnXZ8lqL3JMMh z-}`4Fd~Y%VC(w;&iC{x9fU5A$!kxg0wW??;pvEpzO%7Wm%?S z`4rlri=p>=_rXNnc1`>_0w@ZD+z5IGH>N{uc@^2|_K{eyz4y3@nq~bgpOXnT4fVcI zlg*2hJ+XXTsF~dSnU_NbUKs7Fkv*pW(OmSuU5CH*mWdi^vHfzmv*9uabuu1PeuJm> zAz|T+{%=M>LYHKXLw-`Oe%m&UawkYkWkZ*o6Eu6yd#vozp2Ku%?&H`%95_=rASDiv z?Ke<-AYV!J-(JS7zrQ__Dk{*@RiYcQ1gGDXd_?9>$2-^RSxlmvJ?L~W7a;F&`!0W? z!!@$xr~lHCP|NB`MY6B9yhW%~LXI87vNs4a6mD%hrt|8A*w7)Y+ zA2X@;gIeOH3PHi)ZOq{JS<7xZ@#IeBqRF#$3fn6KO3?G_&#+pJPW;l@@A5N+VRhd5 zKW#L~o!T@1JFRm30B=TofjF~r7FDb~CH{P`LLKyMidhY*mdL^G8; zYAY0iRVc;s$=`ue7SpZD_n9to?PuJIK(*(0DT!zWYS3mLO$9*P7V64EGOc~0hM=u{ zua+l3<$?>)0fy>h19?M*xQ+Fr!%Gis{oRb@x%;7>-@AQeh)!(!Nz$!ceh1Qarpv03 zQ`a~r3##HJGPZYxDzH-|UTxas6q+v@N?)O)X_!ZHG#*V38EJ>G4VI## zHa(%FqeCwpBXHR9mmn|sRl{d2LkR5R7?}^ic_e*()d(ksP|*yVR782*3v2s|ZkvIe*SlPv zG{^HN=2MsL2Ubghc@BKun%4>J81g0Mid8vzdBz~oGVg8}o=&xyE2ZJ+wyxPHK(W1$ z2l?jRH^Uhng80PaUvXjabxlPK!=au(nzW`$OMekXV=3#_ui|=O+`z?wLq!|t#-yY^ z-`sx*u|?1;zg=Bfh41L!vBDoOK1p-yGE|(JzFK4cK1cO+_6eRk(7!k)fb`X2i@#c7(pHPjr zmF z{<#}(H%%_x9xr(|-sz^A#mhhs)2@|vX@-t9!J~Ba+p6QVSQxjELER0ydYWC*Q=`k# z6=S-h3rEIGXf)jjK`DVwCZV=_jg{-yA%Jj7j?fMHlA@$KTd(q45f}3$-$KbvAjd0P zt<($BPo%mAj4NtYkS}cG@FVF60Sa>ua(J2ZP5W)L_deG&^WQGR5xvOO8ft4wU_An} z)V19um`Hq2VBWubCgked5tkieTk`fZ-&Ku=4*M~_yCuEVxy-0;f=NaDBZ>I)WMz}k zZofI-MrPA5JFBr8oUlTjBMu}`eL51$`c8SHBi7CM<&F$r7!Gq9Xno+T*T$fL7HCkN>i=;~(fj#LH=lxh;hh`h`{ zjlVvWy7DAp{b(L4b!r>z=|MYfy8`<^9SyJOE&TeS5Jp`!aCO8o9cg4QO$#G>HhB5t zFlOA**UVjcd30F`GINp7=rc*Vu%6})^0i}*8>p5JtCd7DRT_A>gS(n$t_~>O-}!z# z1`wl%+_&b8N^lQtKcUiVp-!36? z&nypQB>LY32S06Q)(HC1q$FhoLvX7p#}f1Foz^zj9h`6G5ph1@gTb_O+D>OfmC)VI z9wv3(LBV9GIGN66(rnxI=L9w9K(~OXFb{Mmmf%72-y0<+cYQ^4iJ0B9`&@gLnDZso7wGF#qxhC(8#IxXP|GJ^s!;x1kv11C(9#FF`w^qY;}%1o)NYWkup3`qTeFmQUjK<_S@X7_u6fS3 z-1c}&AiUc58m-fFo6AetPvmAMRiGwUnsonV<>OF7)VnnD*1?|dkJ%YTMcx;o)Jq~Z zr4flWX0^gS_u;tc_dkq5W~{~eyD9b{~so+FGYbdCu}6lm*?eWHP}eiB7X6tV3Q?} zBde6+oLa!;G{?ftuxZ&2*Ea>~roA(}y-ahVA%d?+~y}}8h ze#wK^Sk-D_MVzS>zfD>WBF-yExjO1X7(3I~8t5*_-fPo2fvrr_^LfSP!F;@|`>_PM zfAe!kQk2~%*Lm>7D+bj!+c>VI)3#QG28P~DEl z2_Rg|mUdi8qc4!z<4!#V$oEiwFd54CtIFDmAWJzh*y%rvv{>=1M`$O0rAt7KF6 z9&~YiE9yY`KWuV|dW~&j$$Z*Lje}+i`1FxgGUeNn#YB$LXsN}~jEm#Gn!VoQ0t+3L zX@qSdQfQ!5B3)SlO?41Sc*qZ_#&nIKE>0GA`bBr{aNVS$CsW&wvH@+%-Ck2phlpUh zMeBk#H^P1oewSUi&&llp%VZLl^S^0pNe%N>kbr2<7W0ya2IsC+Cl$U{e!nCL(=Q*Ih6w9_VywklFw z6!BLQOFSXtxHB5xYz-YGxnyWabV_`Y&~o@uV^|RBB)^9VuwqYE50;7jQHqG!)&&Y1 zK(gdMPuKp3w*SEl%%^DIUVw9}hZ12yIhJ&8_7bD$b93@*Bw9-2_}UvbMQ)k1bR@R! z)c{M|h_6^cX|ZjC#55)AOS5D$eB)8zn)#^y55T57;c;N=Vr}lb@n8?n?bXP#kQ}C# zmC6Ep>q%OFZ-qg+8DC3Qc7UuOS*nV0uj(%Fo%L%m@N>tkuZ^H;zjCUDokAT7;UbVr zYrt>c5Bl>euY9(gad%^4=SQR%-xgDQ!EPk;b6)K1{;rnl|Ao>FH3aWSHf9Y*9tN;G z;l2%N8ZP?5O3|pB%Ij2~)^l!rDH`&s$ovUM!4^|a`QUU8vmo*B3w~mBF0bpi{x|KX z=PPNEWi~Lq$Y!?yeVH97TEj(-+*5&o;F^M}B0YHpMwG&wwt<`SruAjpDbDuscB^>% zIBpWuAJ2vwnW72gi zRi@((3>>T4_%pqNyZ@i{pRWh9zR6U(G&I9@P>@zSR!b%RHtUY|nL2rC(dnZ?`;<;A z;)}8GA(Pbnf=7QjXK~Ou`Uc{Y)cqhrB~!(T||U zBF24TE{7=nMR^O&dQsr9iZ?y*9dEvKsc6EB3~<&4D4bu8mX9na31n3;)O^;bGXSm| zPtDoX!Oz}{Pqv?w=SJ5%oDIBWbXFeT84bv3kZ#-;9(fhVzbjZW_yY8f6VIy(40(0u z%HZMsA}mDm>6QhxO)$Z0oS`sA75n|s*c)3?lA`jGpJio9n_VJgDfT2S@2$&S!lt+A zu+*n5xEh~2vV~-+RDyYr$%O8S=;7iNXcg5(?xLUhZpIfs2l3E2G+&*FD|!4qGFFZQ z*Kk)amKyrn9QPs_dvRrkNM!HSg`;n7xkzumd$LR|4X#09A`)_rppT8#_!9lkG`4`r z&l-oY#8|Px>Te_~%#mf@f%_T$^hC}CyfvpYxey@%C1n!=(#;85K$X(wUnk{(ogd|4B#^~ z>jn3TxhFPDi$nBvww~6+cr-Z$!{yVh_Y+e}h?cN$GHG905prMt_R+~|o++4mVm)yivCg2@HUTlR z9mcU__h*{b6|xMUKekM_15L&i5$uS-aqAsVW^cNVh&IuHWw$2QJEKJsu3JR|-X-sV zriWkrg)Tp2WBE95hQ{w^fxE#XmAK(ZgNaB$i)3LOiKModpIGA(EQ5b>*P;gHfVw(( zMUWBE@$Xqil&X(ztn7ixN}60#Hg?4Y++g<4{?UB4OYReziJQ-<{-doreR{Zn3NaRy zT|vV+WqS%ci{#D{2TiAg&#*cumxY#v8g}ESRWlEKj;h1I+$xZ`QA;Ik(P26bQ;VOa zzPQPdNd@|8q)I$)_CWniOE$}A9(e6%uAG0%2N5@ zjMoVM^M}FE;W`N}t5nHS)qqX&qi(AG^aJ`iFWjLjzjIyQO8uX-?N7~x;QiX!>FE{G zA=~*e`w_q6I(FQ7qYuGoKTgP<3|6h#zkh6t|$3j24;U}w{+(>e*JE~fib!wdOgccLTXqgcEPVU^=&7m@5B zD@Fy7a_xc?FRP&+Np%ClobLI1h9bw^yk`uq zP&@GX)xi|)J{aK59!~e`#>B)6B+g5hS0=xR9!vb0>c{Ko7UXYE_VRzhEM#2C>+v}} z_c%K|FFvd)67&EgfPs^OjCaU*#n(R?expj5jw#e|L>o09dbjhnUHE*unTL<;#7)( z<5MW#n&J~`T*}VT3-G?h&;;os%3I=38>AIt@7>R$UmS)CaxE!nK+0#W`Q9SNP8&kZ zLGlOM(e_qXaOHU!D?@1uQ;*EgOOjE>Sv}-PrtT?Ii{b-SGqX_9$Ni#_F6I_RUByMe zC%pbxa`UFvkf0g)s-MxaF(+p8@n%=Eb6lS0;tpPnJC-}WFZh!qH1zv|C__Ce6uUFo z>PzXQMU@r5($R3acGQf4<${*hG89WC-|P!2JL(6f;&W(c+7R z39_U->ZAM31XY92)tQNq0uG#vjl(Or2!61GXm1~t_lWXF3KKma%hv%`Z%l8wuDFqE}C1K5}6k%y&WrWyPXD#RnXz{tOY&H2*BsMO9;P zPvZw}dmLLfAkFCAid9pa{?07YyKU#eKp~*ulM)-5>a@u(R6NRmad6oQ>$*nX(Gh7X zad&x8L+4-f3+2@jj-?>}0K=29_)?`MqY6ep5HzhWRv;-x6 zM*U`Vlh44yn4Mi8Y|n?(hbAQgW^te?#=bDc&QUaJk6Y6xsLa|r3bvB~=pYB3ur)V@ zC&k?zJ<-JkoXa0*c;w}F%9~trnSzQwMRUmxUua($_*}}$! zA~)_9K;f(rOya4Dq#mjt0wdVckSC-uFngmRPqSo%l_ZNk! zo*y92bF`pvmMMeHo;tjfTrx6)uTGbwqp3&oG1myYIH`IV8G1>-6p3bS7YmnJ@gpzV z(=+tH)cg$ob}MF)Y0 znxPQ`j9)_e_JgvQJZt+ff1j>?^22!P*4^MU5n;voTpA`3?!~sU`J|wCl9`Xk#FUx} z2t>S%zgVW~U9{*G$23f4hWd#~$YX-(qM*;Jx7bBPhu%Hmin~1eBdS@F5D0I6LQj(c z!CQkY)=fz;`Dj%}Je17O!J`5~%#mBF&$`s)T%<3x?XFs-k}Bn*(U4Mpu)KommTa ztP$>FeKDq#>>XEh#U+MEwjAK+2Oey%lmOC;VyKsN%B@?f^H#({lR(YnkF=JG_9K!K zIv{kirGu)4*?}cW8HaiQOO{9=G7H|W;8{fkE-QwKRzF5dso|FzdC}f82Lw5iD7+-C z>AB9p7=6Ur`3la~l>RYl;o^Z|Z2Fqu6R1pes5HS0DaxQK!=HQ*j7a)7s6w@M+DT+e zZ}uPL8ygImSkmEQ+-Iq1JCpRkczSn1a&vx_nq_L`L;P)9Z-+2dSO3TEO*yI3NI6b; zAJSbeY~GbifJezfoz3fBPil^^PFcN;g5RvM0(?EkL;5?24`_Dj_LGD{JvYQwuND22 z^jjzn>0q1YBV-E#p-nkh@=Dw6@z6~$R3O}^+ zk`;O_<+l4l#ugEgVPk8P*PI`{cEZL)dSK&JL^EFog7{Fm%#dt$+ymR5x`x}HZ!+30 zf8(b-N8~wnoaj)B(#j3oKi`&eI<&^s6r@;^WTfvOo)jpAY58cP2NPIKr-h-|E~#_$ zJk%fpKjA-OkXaVxz5_C`HIUJy)M-vG$jka<@P&#Gn^3`wyUBT{rgyP5wmrF7Vx-MSQwERc81@yxW5$wei3=Cu-chq`Pz;pG?ja4NLz{=u&8 zp)bRL0ykmH$dVSxZFCi_LE9u*gr3!cCyb4h33#w6XfMy4o8wC-IV>UwHIZEUYOYzsT zaIB-3-Tw;B3ECO13Tgi7^X>99b0d1*XrrEg-3(w~*fcS;IeKV-ZRmS;!m9BuKZ$@? z*O+9t>mE6!z!AK$17HMVXlGoDnFV>$^bB?Jphga}jG^dti1y`_NHXSnoby?&2k1aj zmp8u3jurvTO>}H`^K2+mYfRUq3vY078nMYy9AuenrIq%5Y zgf$#g@N~i&`OXTJ%aCGKPuog|Z`!3(TYvO+p1=@W&Cz>_QrxzuO}jRq9W5v!K#ZK> zXMJhp!2wA~XlPL}Lt%4i=7IfSu({;y>@(%*Dymi%9STZB{XYM1xsRJenk)?_oK_|n zN|zU4aoB0+B}#E0IT~*YPG;vAVxuTtvKFVy6DL$iOre4bE*;Ce^JcT?>I!@WlYdXb zyzRvqpQ)oH4PxU9L6vH$6^ zh|iADx6s+r1=*R?UR;#wYB5&WHre#a&xST=dVmAZGHAh}s23~gSb8e~TBUo<+upFG z2p@$R7)ZwosU{`#+US4ni8U4rWzWp_p}LjIVT91uC+z?Snac})rQ-fBrxp8>RNArdW|Om?kAEc=5~$i#H9ly%grq!&rP` z(Nw7|w;+OQXOxpenOtuEdGmdcRFALHYFke->GVkKI;=PAImx))k7CH%69)4iy0Gst z!}cxRgv6|FW*R?-IlZ2}+u=0fEeu02)vdWGVq%-oj=GbZ``ppx@7VSzB>uX6X#fn~ z@Czl{E9wQPgy^?$vLW<2dZ5_gup@HwwZ09Nl*`)F+1JgOx2v)x-CyX@PT<668*d1r zr*-nr3T-YH_C0$*eL7ksZ06zYuCH}EyEJ}EK&>_L_Mo)1$`V=5)>?bIkM-OM=GWs$ zI$ubPozjSx{M8uKzdO%ocG28xqen=Nf~|RNg+nT5I#?E#E#t^t$`!`SK&sa8Q&4XR zqi&Y4M`p&Dw~Yu}*5CfUm7#FpGjCbUs=2@6!3}i?l@>{?yqNEjoaMl2|DjQ83z{9X zc275z?^NHrZaDGR8A@sv8I<_mL0+~#BBYn;h7pk1H8Sh#SdXct0h0&Q%iFM73B~(- z$eyYwNw%L+z&l_K*%?8?L9U-n(#K_dyZtd@^>I~ENjU~|GHZ3$8sHsM?Zz9tCAP@a zE)@hG_scqc*|gZnWy637DO(xFw=j$+F10BfNeR+iXu6fMt{1b&)+1^sntyPRM($Jv zD)1y5YzNL8?e?{)PCxbyk!@|6LHyu4f2jda_+V^aIRI={>!Xc4RZRJ;It7}RF_ZGF zPSH~-1%S$A@+^c;+{?lRiViY3W)sd{9DceJUf%@19y{Hy`7oO*zD?5Chzd9Z1iY3z zov&tf_SF=By|JX4m@14i^bMs9xTW;kPDveVc^?7JTaQOMuVmjaO7Est38WgPd)9m4 z)GqjfPk#4Z<8=RMAKvZncS7&|oEI>X3+`8^2sq-5At%XOATd1{D~k(9uybTz#CISQ zyl3!v$N(+Xa#$=@FSEe5@iZZ{qSbnSVV34*Uh!Iz*!`;Fqg%4@P*7FVz$M?a)OF78 zn@k^bluri~lGY^9x+Zt6pWPhMF4xl_@#ihL`{16lb&Ec$w+xvTxu1WH5f^O_WEq|G zLaIY8>DICP#0-wt*C4OgC)5XqFe$$up#yczoj6=Xo@ZlZ&#nb3G zn&3jPIW*i)i@;7J#d4{<#aC1d?*u&ECu>QGP~eyb!bPX{%km`~OD!g97zV~@WsjDu zc{Ft=Kg#-`T1X4Jv@(3sT?`!h`RU4LkTE~tR=(rz3e3n}bEi-1_QtgH&()56M(Cbj*$4D=OG*nNfmVOZbT-5_(VY(zr@#v4ba> zGk<*EIIpca$Zt4hD9l%0TGdxfnN?Cz$A1=v52ekQM)zU3H^#BMYcJ1@Lk+v@>OBV6 zGwbG4k%@zXf&6Db6m8g4!UK6_b?wY3{u&MGB?#6_W0kPYhemZp%w~|(*RAYKc`~WE z7$U)>zAlmbc*1NZU(YeV*J_UVn5MIqx}A?o0PuhF*^T$hmP*S<22*=JtJ}8RIzQ}v z5+Y@)DyhS-PPv*I&mf69bKV`|b!ds?uKX&Jifg7M=O+c#qxBV*%A(7t+kWom(IE^E zWbuv(kD+}F?^(J9Kq79)A!7bP9R(Us+?RLC(rA>Tzf)geoGpwI_yR0m{%CTU*0oQ$W_# zV^ceD>BJ+gm);iEKQ%BZ+cBWi;RQ*UK+`$7bJp^3xr5oLh+ps&wxBk<-Q%DlGmk#E z3f>QxK^9sgbCNQE+{_C@qzi6mM6q&r*5LTK9WCvZMxw0qX%XLa`YitlQF1}0@Y)s% zjT5+;Ny?icRHZT&w)i-!CozYEf4=g5iN~C2ehj@IOM4%$Fl9&H1>lrj30>!T~X*9({TSs94CJdPbP?l3AgFNT`vhES2S3 zi(ztBw*B00$+eVlO%XS8pg-}f7VT0$OCmozcz;RY6R$5gpz!Aw=9}%ayu29g9lCt6 z`TVzD9D}Q6v7S6pK5l7RprTEQu9;Ba3BI5XcwW-PxAY&yIPT7)K87I9`Ly6sEGsuH z)^`M6AL~o7dp*66PlIUzQh?qzTf zw7loZ4h|WVyLQ6$To_6j@N>TOck+xaVzSr5kbRSK>1HEP@UPI^5;D&=fVZIM6=6uL zXm^MR=0+HH=;*-G5z&0b+81y6?e+fjy{Y5X582A7oC%pgDQOGA;0pU3sEwBjoAo+Y z8CxY5&qDr@p!u@WQUq@8C77lBq1saTH~;WGCOgQ-H$lr-?ZTrnM_F4~I)6JU8E=Cl zD9@L$naK<6({@LVJecwKEsT}TxMis42@na^WI-Vw85^YVRg2Z{SucyeN z>064qxwi|Kii|k@EA2HU4!f0*K#Rs$=MSGOe8d;mhTA|dd)ZPQWL)v`d{p zciw`dZmokG_`OR49(~{GH8$Zc$FOPK7O!?s^`)1#o{^E6Bp2zbu9b~VeA+&-uYB!7 z6KbL4V(~%;OkFf|dAsC^IC|(?aiP?~Al@zL_~~&4VlX!+d*gH$PF!Zb9F5@XxMOLl zck{klsJEH=SMu%J_S8b#p8U2$@M5qLF!=+f;gP54T8LnP;&4_vo91djLT0j<5kd2zNp&mY|E3Em5O@*2?UnC+LsT8df>c>484~Gh^N(qUw3PhJTQ6@v8=m#q)HWZCl zM`4k#!N!@lwhy0eibU+jC4~z0eUPQXKLG=+P1&!_ubEazkhSwx$opySy^jc*LnUJ1K%1AM-5UM2bS<6qT0I_( zPuVz!b*R#`YbNqW@7?xu?$9V{CJrFNeP(9I=H7BzyA<$N_A(q+1UnX;6#G?}ndB%P zs5Cvp0gam$^LdX~=N~kSLE7$oL$LQ{^*5GjP3{~{c}XI)+cm=gFC;}3UzY^|Rk=qJ zkh??_8c+_MN{;1lhHVK=`t>?5SgP7}518x!r>ArFM+mCAL-Hw_lI8hz zxMzNCz-4eqdaFI&@Ni`R#2a<$*c4K_Fo#aPP=A`kQ*FKldUNrvYi>FdCNA@>=U;W} z)U{l8l#0GP(w%eMdm4~SIo4YpJ*1xX0kcoL6$K4%fa)4jyYxM+Jr1pDjZ6{XdozudaTw}2Lh&qKxz$ydQY4^dPw|blV5X#2z(RvNcH%ZvD8`oM(3~p9xYpRYxjaixSc%@+mUEz9w_1}qM|-iTM5@^VL#K=^aNDkp zFsfcirdlQ>dg9~kD&W@9Sg@+metb42dID~iw$^ifmg4$QkS)B#zN149_Wy48qr9YY z5~iml@>Nf9W*U=Un}Zc)BBn$o)lu5+Pc84i5qRhxjTDdWPLLPmYK^#pd`~;!Z@F6a z6vY^t?lk@Q4SZCq`Cz-gXwc*gt`*PXyolzyAxGHgpVD^}4jsMnuOfpAKTjDxaXoXx zsm^Jsgcb`_ZV;pE4=THvwA?w)j=w1lBV_1H@FlUw=^H5O+fY14KQB~2E3$sC-B&Tt zQWCA&u2Og`^=LTt5kJ8{DasqXB?xPo9y-@zCi0W9DsL=tQ#jJ0naJiU;g8$jRkvl; zY^zpVVET{X`@KWPzQAdd{LvMZ!S5JJ6aY0HC&j~6)g2+(1j;bE*Yl;Q-%1WO`)}=a z2tFRL7C!QsqXFzpi2Zc<8M)+2;@|^fk>>>IrVFJA&*DdKWU>S4mVk-MU*rttrV96` zL0}9Twj{xZU5L~sJA1u$Ik`AN((JT)^(T%)fVo|8xr$A4#8WV}6Ub4}=$0*2ZbD8{ zp5z&Y$aEq4!x5qaV|5jJ@)eg0vic!h-HxnZYT?klc~Oer@@Rk_fV8+IK029SEQ{*n z)U1|peSO0UJ4J#%y9Qp<{^QKg10{w53n3p&x`5c3X_(qDJA*yAtek=lRw@`Y-F3fUZG9Z2<3a!w<&}a1p6^uBET^?RRLX63 zwOyU9>}i50@vpDtE2;+VDWr^KkwQpbKN5XG(+Y}Nij@6matq&uT2+TnFON7_R|E$N ztlhz$;;2u__ks<5nl+HW1**81G?+Ev2KB;wxSNmE>Ya1>4<#$gTH{g0H!+s`TT!;Q z+#Jy$1Wc73(yoN>i2874x6}|xAr_8_Lj|FZ^a`STIAWYP$SS+x>>_Qy=!#S8>P(#o zsY@BAI(j5+Hkd&K_VTOMm24IBy-^Yvi48GVy_X7ISZx{M;~&=s%^#uOVFXSS9FUr#IX^ew+`Bt7kgu4&5Cv)! z-Nw&?9igt~jPN>iCn5{eshU_bvWM}H!@bDP5T@QfWYD;&V+DOJWq`ysH6wNYofP@b zb`@;NL9l*JmMRxZEJ zUv?ym_HZskkY-)aw})tm0R`1z<9|fU7|FD{vGLnNaMy&sHJ}>HM@QJ2eLZjW_s@@U zewid40}*|7o!{zo{1gKTuJ*p3Sb~zBqmw_tw9)Hic8X7GPUNb`INLU7PXA&A;W7Bp zgNdG_Yb_U$gJD`}*(6itu`U(a2WN73c2_;!9*SSJmAA+qPfinw0HAayg^MXUX z4$pvp@DLMRwCc?6X@!_vF?V*=lh1qGT7SoHNS%)p?NDLsL|Y^frS0!&gw9V5JSJ2N zlewxW>TC1#scpP9M+g;n4$9W%S7mYIGa$fMR@UqxeRsj0*3g$-6dJhcE{ip1m?IJ= zTyaF89^jw6R`3pNNn0BSGghi& zzWrDH{I1}D;y-RfxHWiY0!kOR0kN5o)$he~^W)bwKlQWlaoEIPc&}!m>UvOda`VL7 zht`~-{B^HJb#S|y4f9-oEcW}0W4~5Va1WR1A#acdl|GafJFfcrcRg?F4nKtq-73e? zpXL@*_E-BoiLVR#MF5l&%c9YO^_^Po)@=+7I5}7se{P^uR%%v6tx>kM>kXa})!EQr zj8)G#Z}I+t7Pyr+nw4bV*;+GgRx`LD=d=Gb`Q6^XJjI7R-D!Q?#%UJp{Mlz~x-|`c zdFg9P)4xUi`YhXggo{U;j<$q1Fy*NU&uf>#&GmDnf?HpN2DS|5|oP{zSzTa{%^|qCCMmgC8&i(X{&J|Wu zPx>PGOdVB4*s|Ybr3Ad$z+6nw(q!5HxhIXqq>Kg&%<{^YGn0#`?R-JSf5+Ag8os6WjtCM z3_jJ*GGW>*$Yo3kTWQik3+Yo;o47O!ky-QfKYx9pQk(#Gm?lubI=f`*FI4@7V9uy$ ze)~;;xnG+)*-d5ScTL~_i$1(k6?<-ZcHTfQ9e?_>r`wl+{P<7g3x_SeEXKkSEqb=i z-HZS{ngWYJ^Vy>RddePN#L%oxDa5#{6RiH3cp(zz^-3OD7;t#r2G(($J;GBL73=Dt z#IozN{;=?P-c9+jKdfly{eax{Fg4+EJ@odM84^9_r9yg3qw`z%4tcbvuAM&|IhbOtLgCanvAj{rRWUrNDME}p)t33Gmcoe zYF578ehBYCAi0uG4Gx#Ow!Y*<)wcKRi1L(%RllwC-}>(UX-=O0vzm6a$;Pz?0;Jw< zvhFF`O_iVDSWA3Zadp7kqt(8@MP4tcin;-USA7Eq)k8FB@aR$faPop(yl`ZE+~51t zj2Xs%^E@u6WLxBPe$$61N7G(;kqVWh_zYF`0D)oLEWD*4Rj>xhCP26h(QA*->ka=d z{X^%|T(yIhHmojp1b50^LLfdjiQxY}`ImL1=J0<2X}%&Ayt(PIr7} zP|t^B1_nmNsSL0YC9pQ(RHmp{E;MT{82jy;r=EnY2S)=|i@Bw~17L;L{vaohQhue` z)MN{N!EOS=c#DtitkEW84=375VgADuh-Xh4-e)R$%3cB8?4!t?=hmcW5bxj<^9sVU8Gjd zfQcgs;&_~Yh(cuxp+Fqj zYavB*aNd7{ZNFOg_!w*uZm65O+nHL@zw2a@zza;{fHY)ugh+?Qbo_SryFkY{i`|h; z5>m`kxML(!)3fD^vGJ^1GT7PCR8cnyW*DLF75trvVze!=@#y92VHX|!2kmI&y1qG^ z5)-d}5#eCPCpNB1k1_sT(Z@DqIC+|=6j!*Km){YQs_=`>78=n#aS#3UiQy(?sFIYjmYN~=_ z-{(RChN&Tl20Obt@K55)gkD(MZADk*Z%fHGN!qtlxveEK4P*k@WqItjN5qK~X8E12 zp}`+XszvS*g`4?lxJzxt*T7Xj8R_IZ3vkdvXc@n#l2nzo%^ZeT1_~}Cdp9w+_r!F* zgWmT1-i;r?B%PyTIzGH*VgGt3UpRiR@l9$n5#p}NdP(C5jV1N^Fi4zGCGHocf-}DN zFc%c}cCRi{Mi9W$>+21nFgcrIyDzkGne~=3mw;8I0!G=20<@8(97Y zZtwO^PMN1gN9T6F)U0Az#Dmt7_kyKbC4=p))03=-g$xTLp^@!eW^_>vg%3q`>@9?p zZ8hm{nQeHsrL)315X=ULn;p7n;?)rcZLIa$k#_e@>a%Z&1#BU2udr0@nQC6K`p(2B zNs3<^=G9f#WWt1k+#iuijMA~mEsF9AvxO)EX0aD_^$jV_nF}l(aD3L7Fjo|QSQP6Z zEaM6O2z<>Kub;)<0^@B@&k5K{n5toA6Mj+;oJ>~lxn%M4zhh*@xi4mb&j_$y8R2eHUrFVU+<>1w57}e;m!+1 zgQcgNgO_F}2OtbD+J0;(E5szva>G%Hcv(?joQbQ@BhW`)0h(;mh{;}m{SSpW^o+R! zTtTe{BU&9Fz9J(}&ZvoZ3yi?xoPTFJj=hP7K&k_t%Gfjd zQPnxrA1Ju-yUTzV|7$_YcDG#_em)PSMoPrOG36o%lMbk0sz#O5 z9jeP^(#7Vmv?(VF^!EK#i@EgZv4~*;l|eU#2jUktSm3DXY6h;Qn)`TU1!;;%>0?WN zVSYI-|4acS03_9~e&^h#r_H6@kff(K2ZEArqiA(of-rHyY=@+K&n--ZBpQ3(?VEA*)()nlg z2xf%gcqg&Z`QQLfYQmN5Zkw^v^WsqwT;+|>7oF&XA20iIBrakv0oS?nr?fyeEnanA zqPV;>XE8IO?h3&m{{DwU=9kiyZ_{O!KjTvX)aYULtPx1s>z7Cxm&HJYpjuG4(= zHjWsvS|sq&Pqrk=o%@>Rvc2#XT1F-+mKEkh$%_hRNL~?-&oAWI|5TCw;~Sp|SeDs6 zQwk&|<3AE=2)?=b+E>~*KRIUrVA9lvnxih+T(iova-yW+p*rA$3Z2Cf-H#jR-y%TC#M zdPbE#86Nvpm0T4>r8TD>?F<4PLbm*dn%G|yY0|R0_dNR#S*fJ^#$@L6Z1<#h$%s02 z_mmM2>sIIb0&<7rn5+5MD?Xiu6WV9lS8pg9+74-5CL;4x7tb>L>3+?8;?GZ-@qQPW zsKeDzw`auEcCYhths^?4U(dJDnZh7aqg5QK@>zpj3y-viRt#eJqQ)*<(hpm;{?IF2 zr3}4W2$eeAN`I_(Xdui)(7w0XmusZf&a+#Btagp<37_)M{+B`kt#77$tFAtl_%=WT z(~x9uB#ZTU7uyKqPMJlWr{#ql^o392lg;6jhojrSbC6${q1lqb-h}>8wQ2NxJBJ%# zso7nd7;J$#eA?f_-igH^$VtF>} z2K)+MbT76gRP*>CQDRjSsRVFF5c7p*93w(liwfcUFRlNNfK@po4W89}@S?uyW2nr`3@MN+8QV5OE1GP5hCjwF+ZGvqi77wd&3allV68l;}nR}3M* zmM&P)Ib|bRjDfBPE@F||l+9ctAY$DGQ`O&@c`cB?Yxbgv z0;mb!qaTwU;I7Mil}b+QQ(-FF7UF2TmhF^DizVqV1=FV_pS$?j$NKVV@#+e+t7?FbvM!PTH< z1;33{KwD*((^wEX+%F8HpK0K6Pi5r$>SL!k4h6}x@p}HmkVctNIm;`lM^9lJ>^_3g zvgFH`j;Vum1%wMyFvMGo#)+HB6JTj_eMLGi;Gg)tyo^s5k+7FV6bXd^j9T~Z!>i6V zC%nG)tv>t(7hx(nf5_81|;kh)E3_w|&6TVlZw#U*r3Ts9%+u#-tz6pQxNo+u3 zdS*8mcAu)ibQfFGyI(X#sj2CLGz3x0W_i;2Ln5m>KiPM1w#KQwhj#sZ0h^z`UGVR5db_tV6K+cCa$b9{ zg@b!yryWOLiP<&t^<<+dppFn@yo?!{1i!F|RhmFlE8lTtfN3t&Mi9MMXL|V0pLv(> z^s<8Gp#jEE>d_7R7)W2j`q6R6l$M|FYwVk`EbTrR1_&J5(b2?3ejlmM?Ib60UZvTY zt?rAl$zNat)$5)*6?ZE%sznRlet`j=1fo-WMho`U=6WiSd)?!_QN16POVf?86#AVz z-rdd5EH4d=cXAWD!B)Ns92{2+*oJ-|uFR{g`$xVzMjB3+(XP<-ftALs!BmcF&>nB| zG9e$69|2eJ22KD>h@V@IEBO1+kZF-o_vFV8_+>6dSKz zoQByWx-Wqj(Pj~1Pr@astK-bT>u~Wiw#I;K_Bl+9Vlvv)jmRr7KzwZ3f&wKVoB-)j z*C=&!K2tZ@2d(bPu>R&N>-2_FV~;3k9~tUHilcB{^7#w@c61ywWn?HDad5eK#w|At zTx5w>67LLhJ%@?2QXpW`I`$tx(gNyxS(gn`kXbJ|A@mVT9RL|Auo0~6KcVNfNkEsT ztVe5Z)B*De6Nd>h7_fX8_~hnXcsRNd=!5|F*inAVzzAsIl~_OclV7jBiykGxeqZbd z3>lPQ51)#YmW1v?Z7{PJq**KWE(aQ#%g(rGIP@YGYtL!hT8Cxv89Bd_Bwo30*0mi7 zy9dWCDd6amjC-B%9pS}7(glu z{N9+HUdu0UWkU-v0Y+;*ykjl_k^hs8BH4 z*_s27h6Mh0i*zubAVqdgd_1JHz{aMlvbNZKaTa`D=G$BQPahJ+^PmW~M&!1n}CCef4VWD?=`j%?L@$Ted567LQbBOweDE2omaE+(l_=jn64H zgN1cRNjML!#jJsB|0Ru+x4(!;S+_9#)BSr>m^{IK(E4zo?m-yGVmq+`W!gl4bFF+t zEHyZ6{YM&!@Vzh@nUj`!WX6lr)mLI8uT8%7F8;8A?7RwV8n58v3l^oigQm&Vg=mn+ zui7t7+(}yrztSZ$B4JZIeWJ>tz?K53H4;vGAgMr8Vq+Gvqtppzil%D1nT3Ug;ZZ~8 zQ9I?ev%D!H7iY4bZkm2!O()*=7FCwV9@buuR>mF@wxBBh)3f7aGH#c1#7Y9>hd5ol z35$IBF{T!msSe5h(+xhiCGy-DQ{s}z=D1?N#h#9?>o%GtJp&EO`OX(3-)qDEJwe`Z z{syl6({%YfDaygcjBt3iD9{U5ZgFp;x(R-@9nm zxM9y;FBrda))%-OjG&D0VT74xpzco@Pfp)V)c`s4ki5j2GQDCbPJdwGW)~$hIq~q! za&iBDtN(H^O5WjhH$_9aQnW`}-cp432<)A=a{sRM`4S}2z_;XUkDA}(KS!RzBN#a` zx_!rT`NwABa{Lx+bjbrVkrrKDZWZ$T;Raevjyb%pzKD6h?Yewjptf3S$lh#}%V@;( zkIK;sF4<82On|KalrICSf;1vK@RJ<5dUu}#EbOwV?geqyJ)r(G7PDG`IpNLE-Dq@8 zy~#hQZLp&=2RMA!s<7ywS6i~M<@%V!#a(#_h@kMBrpF!gKmVt3J>iUJF>pSC# z`OSry_u~*n;*K8IYuQt~jWk{Nak&BSHFnDW$NCt;otv;vvznMi8$WPoNN%mUDf!gF zYl{#<%tWmzHEkvHO>FJ{z0ioT{*MGdUO#N1v*qrol=BVA1#XIbdiwx3je|oWX%v|$irQ}C^bnF-6v?H zO420!z}4lsjc?+NT-EMf1}t+(`=t;SRa>Np_QdP+FM~z+coMGuNrw?D#$kKS_~P{Z z?I+HJfkn@@3CKF&q)u@E7?!RJg#BWz!iq9%VLq!isXdMB|IiHIc6LaShwiC! z+hM~GhTcEiGg=zG&_QERA>Kbggzx?A42Y1?F$L$%7hNO2N2>K7=je!?a8d!N%7uuv z6{);(xekO7R6}uxsEG5fKPx=@bXCASg`>%>!NT^k`1o$`aCte}ac5JsVkEN7?S=8n z%`s~Q-7lE?`*4WSXmYr;WfjGxRmt(~jHYjR7RA_BRWwu^c->5)@-00dSQxI|Q^7`mpLVa??}p3U zJ@y3EZMI~9TKWI3gl3X^6x}1Kr`+8P(5yN8lJ8_s!;! zDNmWtO9GR>)`0mHB|isSV{x;i){030&D=4mL!ySV+)!yDRF28smR#U$g(H+%iK!o; z09UGF^Um)aUP?Q*^|aK4>s(v{JOpg``+P;YnN+denbx;=+#GN3jrxm1S#oqzSlvKu zV;-cxoxoU)dnm{&X74O?*@E)8#Io@xBIzTU0fRbEU`|NTBED>YzL;PB@#{#x=+8K0|T{86bVsw_neKtdj-N zhKluGDdoOXNVv%oWeN#F(dedO&k`FSD!2)98@^bi2rUmX(FO3LBb|u&W@P#h&0^v< zd+#BQ8ygoid;IJPxl`GzH=RJgBD~*5BPyR`xjVxzX#L%NGsa-h!4|}VN=?bFuCXAe zZ1YLU?B`G^o))Dt7D(vE&2`d9U(CuU3?RY_a@?co*NF-h+F8`e2Af-Wh{HK${7T1e zUBMq@mxB8{t#!W$u?gKnz+rH&a=6=K((?JhWM|~c(Q&G{qffE*Q?afYy|}e4#Xk$1 zv6Id5*ShI^cJJ;mbq#yp>{hE(!5sfWZWPkjVVEaa3299|Pk9ELz&^ZL*xdhi=S7rC z=m^s?;ohU8kh)^`3b=(#1QaY7up5M(*p(>J=aPdUaE^_sSaD*5AJbxXC=F7RbwmBr z%W@lMqv0;+cJLGzL2eDb978&ZGK~I0O^LZeAy%V$n=Quezr`j)=i-Tlv_||&PqXsl zvl=N=heJ_$B*z(-2aBFk70@yB>_^n9=hT-=j49J6i#$tQBZ9bWM#@3mIa1_I*pHl970$t6~nY)g_K$JP05G>1vCImIVHxj=@gejZ{TM=eUQ1nCjw9} zat`>1G+d2Dte?{`wbnX6A1J|D3DJ+0W7Xfg@Xe>W64PT>EC3J)yGZDu&d^q)H<3*!M3a^Kn{@?37YnD?sTuuc1UT-sJ`h z(+RAFunmdX__^z4G)UwtfAsWSij}pwdd`@VM1%2I7XU6K3v`|WSNY4ZKM3Lcx5lgj^YE@<{yTSb(#3K z!6QjbSB3Mc<4o1tlcmz7kgAKP3E#0o4<0(n?`LsdJRO{8!!jW@baLs3k2UmpQh}N! zQiI$xoe@lr;QNh)tk&H#A$`CSwRYbIrO4sUj2{ocHW*~e&~XYF3Ir9kJ}$q{{G`tx zo_&3MgVXTUY#%KRejcvX6^2){Jgl?Z@^_qxYYJg-Dxb{_8d5f4sOr{waY@B)$11A9 ztLmODB^<#z)e#sQjDxcO+v%Q74%Y~L@0V1Lh3risZ_}5v9m|K{Sau}88LQ!UB7|yV?~`bgB!Q#@zQKo zVw$$AUO)gd|8yw?+k(zftNEk7Od%dXzLZQg&# zUkaW{ieOmDRUG-Z&vo!%_U(zH8!^QZJ9%b(UJ9g$$K3XzYeAXub_$I{l63?MWSqt6 z>`iC`wzyh;wI|Ipl<&1Y`Eg`?QJrPAIlPi`A-fuac6bxI=61zcmmp;znN(ljIH{to zm_;E=ic9XFmUo3v7s&>a-`zl&Eq4t_Z2PsBtc8CJq#fm!^ArX7p3!_73Yd~|)XYEV zj2pgUF9QNgX@{sb?@=QQg>TX11BSxOb7BqJ!gMIh6n!3izA2J8YSlX(4OL&x=6;Cp z#OueN7ukyak23QAG;h6=YZ{X7`{d2OX1*X4yCo+iX-g^lp)C3GI3t$#)|Z6OmY~T< z9(?_*ZJBlpKD1+mGWiJ(qck{ihn!kigS1`ox>(;29B<|Ytzry_blpVjk3F*2Dn&>GFeHfF6R_?s*ii!(!qj`Eb zNEQn*6llmF4%!z_uT5syzwR;8<1gdko@`IXVbmw;)z>xe7dgP1rrjh)pY55cyQfEj zt`faZjhPq?wNa#{{O;#QgizV`GRRw{?k3fN0HBk9Xkh6gJrWa_Yc;>tCVe(JM`gH6 zht*`2jlUD4wcO``sc(XRP3%09UWQ@59w)4(8qL7}2SoLM`V<^dZJ+f{B^H;JZu&XA z_m?7chL;aY8rcLo#a<8Kvwj?*A)lP}<6YFY*D2AWlP9T5`6Zwp*g#>cq;%@o0W_W6 z6!}Ct3j;r{mm`xy$<=ko@?Yk7x`sD9C}vwtM=NO#)fpUkUq@RpIHA$nUAYfmUk3~{$*0=g+ z+2gFxrIoN?vtGz!vUz(CWCVhjtg*$B-7-BhV6HK@%jtm9%1-S|{SOAIofLW5hCU~J z4w37v1|WHtYOKjGqN`>o~)m<30jEvVrV-0N?bHuPh7#nYO5`fZ?*!PW8cL0Y+ zNpv&E*YX4n8}}YpypASyPk!NeBWXIID9OJq|Qfcg-6I)*_QmVMq=ah2`DtDdydZ7+gT^RawZHE zg0#QSj~KMF^)K;c?>~#Y;+-314x}&ini&g0*7=6q6C>5L?25kO--Uif~Yy380M zct5KAW8W>@Cx#@KnkHm;&#erRN$d$)^d>kcVd}T7o1W}SAyWLZ+TxHD3-SNc>Bisc zc~Hsn{p5AuW3MHpMR=FGI4^VU(-@nnOy1aCk#rALn7ii?`?BV z8TRsw++4RhCf)kG8~L|SpA}l_UEJeR^ftFbv{`YQCO2lpjqOEt-AL>^UeF=6A6vba z>7WW!X_bM?}_t>Tu@Eh+m=GZhPi`bn6~*;NMPXm&Tf~Hm;NfaU zx@45QuCe*&%KktHZ_myS=g2x~@-Q_$s64}GA7Puv-r;N&^AUuE2|$Ej)7h#_G1@tW zoL}yhS3A#`<>r;@gVXE0TzE3qh&UILOkHB&W#7;&?LJ%K2@Yv@xnvXt!vN{)Qd^v& z1bEIJ4l@yd7|zWm;rG>|nwAI821yi!RS_cIN7z@uwfIFX6h@x6KXNzi^)RW8rgf(j}HaT)|#rO0+kKt}B&hk=_dLOS|LMFJ-3Eh254n(XEi8Y z80~iAs@(ov+xKGnix>*7k1y|69RrV@eO(=J`rp02asw>=FpFJPbwg3Z&am2Y5{Jz_ z+?nf<&lK>cxvaAKbOIs4oNig1B}YN0laQjBN|Zd-`*&5ib< zbcmKl*uZDBhD|wgI->|1=3^@l*vEifNWah$X%5j<7-8tOXGH`g2fjTI`frHP@&bQ)rkxXa^ zPifh$Jt61q-7)W%BoCK}mZ|qoy4kHz*6$sOcyUX z41mp)25rhv;SI=;+l$U${J+28y||@e0U_9B)@%AM?^pb+Z=VBDHNSdry1UOzuYWsN z;c?seYAKS@JGa<#*5QSB2Q2r2%%4P3vbF!`t&ZrlYL_F?#6Sk8n+_0%52R_ znxd|@OzXai?pbI#YNFIS7X)9ma=W3-JM0$XG}nFoB;bykin=A(6}Qf&I#@CmC$0*1G@wJQRXWHfq(Qz}GkHBr#&@_)SMiMjcPt`2njI5Db zTKE=&T$YhcPV@V|@di^d#8h?qk~`xxvo+;b;#DL=dUPjBF^CL2&OFAI7@?a(+4InJ zIdutF5D_1Y$o@oj4@QHUmMUGr8naT6|IdZ7aGso~_zmUUIgPlARhZ73>USy%02;Gl z2IW(%sudS(YiEA;W;9GVG#);&j*^=@l;Fzx6jWT8A9OaZ_i=`Y&kqn8S{}K6XLnQ% zEGZqNIJu5j$lG3W9ahlM`(WB1hhBG-4XMR%J`w|G9%{xM2XQhr}3SEjs4#= z&PHw&CU19m6FjzwU>s+uIn$=71ad`C`o@57zu`h+JN{1NTCP9-Je>Q7uMn`4POcEC zyp8gptFPO8s;s7_8MeeT&~WL29`_Fvf>P0@ora%Hwd;V8rigY`31{tsf%Y*IY%EpF zFqGtMi8>z2!4s4BOVHMWZ1)UrUBo$gh^iX3j5lkS>X%LpKKcW+pf&h-GW&6dx0afG z_36TO{l!5cl=Snwc3Ng802=AAw@`-Wc>cuyW+g^|#ogPzJRY%`nDpyK@B|x!?ffH2 z=ktfA{bU_oonA2OR!zEtvf*CR!bBZ>0) z>D0bM%{z{Y`uodP4Wi_MUZAAiU97P49;;d)Ktbw-k=efLiR|gFicN%P!jm$^L?!_!AWX#xe zsNN;Db<9eQecEGP!3*P1(9$Wc#dxhgDeG6DHB{jYOqQVz=eE=dvY!Yrh%@$d=L4k) z%bpXj4Ml-he9Jj!JhbxWTvFN=m&cSMvWJ>7^y;olK!@fF>uZbsM%&q00s$h{Ma`|* z2{F;Euge>kS6E%#g%Sx&Y7MQ!J7k&b&|KKhbaeUCA4MLeuH{5?Z`D`Cl=%+uq1+Eu_FU0(4_|3;mC~OJkVNQM@zF?LM4#enqy7dM0DAM4y zk!S`MW)jE|M{+&(zo(}h#n~T;rda!Lz?e#903s=}E8^N7Zek}7}%`#L_)-Oac zi7zY~-S}8$OcRU}qDRm2_!EntyIAmlnFI$9JB}>=Z~zQ zHTi`3|9?#w`ySOQQ{>b68~4*6Ejl>hG>`9Dv0 zSf!d2%Tf$(`>MCWtT#YSY>r58dz=EV-c0k-#F@Ln^>$7~e_GkI;ZChanc%opiyIcW z+$l_Sm&3k+B>&Fs$is+H69yZ&5%rw&e2!7W0R?&EtNc5= zKS==WkO~iQGfh3Hjh!TG-98|s?>RJb^zn5Q1>spokaArbu$uI|61agh@|jkUR$TC6f+ z*bjp%M`LEn?Xc!V7JMpZP|rC=sYFKVU{vUt?{i&w<5AO;c6jsfbusT&a=dr{cG&3B zC(>5Mh1c^`=@u4d*Q?(viIo84cdyt){xBL}SopN|-tDdckjz@&+%@_ATW8H}24K9w zTUIx|E5fd6e8XK*|)k&5i6J+9S;vXyd<4C70eAfNX1P~6yGUxlJV3lrk&DAV~S@fL@DH{gs4uDSU3+C?PlFj#LkP$4HpbsLHG&; zwIb20%)yM<@anf^H;hE>i=9)nhq5gi9eTZum?oZ9o^sJIU*of6x9mcWen+bDSU{{f z2-M7LDdKFjT^XzqZKh8oh17?UHJas|<2xv_cu)KGUN-pjD?ZXSKiRAQqKM5|MwrKwzF_m6F{*AE^| zK3T!_pB5Y0yovD@x{<`flB&S4pxX;Aysx@nPW(;?ye}7NTj)?Q5RcQ}NKC`JxMr`l zI<8ea9}5ST7UD;u1ZD!w;F;D!#IppPxyOWjIHAEf7j~$sy{Db}iKpPxB*CXK7Im8& zHppM7;^AHT`lXE&FGg*;HfH-(GE$j&`1&SJ!E~IVxV$MsO+SN6`P=fJ(S{iRI*N$$ zz#i%7?-xp&cLV2BX`;)7b5-m1_gzRDnf1|GdBwE7qje&$8Lu!pgpwyv5Yk#9D@TLa z3(ukMRW`ld=FS^)_Xxv7{^e-UJKErNy7f%`zUDGWUzF?F4Jr0(>k^z)J#QDhlr>ny zKGMm>MFZ{N_5E!+6)fF#xld^0?C>^B-eBmpC}a@i?iqetT7QwE&7$V%}t@Bwgf$X6e^aze)_YES=lxOzO+15%YEA4`sD8iRy|tlGs}%}H?@(7 z&tHRXP6>1K3;oY>I|QAMD7~cJCO3>kzpshU8uSlUzriaLZHx?Np*?|zFBHdWup@m7 zKFG^<>w4T~ybbes?DYCd1q%!!+p%`l$muMl>!i0z3e_MSZZ{`ea>bX2R$&*pc3&l2 zqy{oL74mz|9TpFDx_mt%4)duNLioVCOly5&Zl3eW>vsT8hT_Da-7*8{$C}MUp`*%S z9~H`QRun#;3UQ|(idcL7I1~y|K<0=Ura94PAsjjVm+yK6cbP44Or)>y*u6k?B(K4b zBu3~qlymm^u!@1SxltysB#EZ$#Z`%Dz31W^%WgF5OkPCB6_Ma$0}Zd^4ee`#F5|e8 zTn{l-TTzO-vY#gZ#+pmhf{C02t<}=NLgy3avvly`dBp%G3aY|h?fqr!Nm9s=Gr0t;;;US<9mk~7#yP7;b(GonNUoTrA%6z(8x$GoueoD z^5c8SP57B#azj=Ty?Z3=3kPs{SD9V*lGnbUKmYSDb7Ar6cVl5O!bGrN`^O}j5Wsb2D`dU)cCPcTrM!|K8k8=)weU9=7C;q;TIIXK*f zHN4D{-^r;z`xiVd^)a$*4};D5%t`s|ZO8aG|I=65Gcd^RkwJ>HV@%JkNE`W4LX#8% zT3FG_i7!0OfsS%~a|^78B3kF0vK2A<*f;sBr~2?tOtRn&(RSod_!nO}#g5?}40kt@ z^iDJ7NpkQj|CT>{;voHfLWas5tgbGTT{p;=zWNPL?B7MN*o!%~&Wg`S$Ic@>`qZNw z+dGIWxi0!#!C-IX#FwAu)X9?^8mz;+Fv*H1NWz{^_l{%y#lQIy<*T#Y61zxf&xC=( zhMj!<&%a7}2Fq(*To++xCZrP>9Y`;%KN*J?$BlT2}WYh48EAH9aD% zM*WnW^nihS<`Y8NVnRZdO=w|KC(0pEZBlx~GBda!F=CnaL32E$Urb6qYJ2xHSQ+Q~ z&1qsO)h?+TPZ9QeaW#+7>{#W!Ycm;grrH>3N93oOrIaO2x+UL|x0uSWI5O$>P1-=o zTRP8DCTWjUIpRSdetQK+hZ;D0_CwZ#X)>tVC^a&z`ty{WYceEJ)uu&p&?)VEV~#-x z+YFvySZn)~{i*UOXIvW;A(v5Up<{!a-7bRSXUHQ4n)8F|$f!tM5=;C9R|F`c%)q5@E})yehpZ8&bMRi8HTy*zEFt4(}{w{OWD| znf5K2kb9N7lq`YDld>~)&0uiQF7;8ITI2eyIbxE6*2gHh8C|G8Nvl^0i$;Wdm3H&B zlU>YTzQMB8pQcY`i((r_alR#@ls9?TL03FL?o~QbWzpV-NS>8FW3W-%wu{H4{X2Dh zKXtAI^YaUMLJkJ^?V%{X%=Ds%xU$i-G?5V_97#VvN`^`%EIK^?r~fY+qUX6h<&(6; z5mEL1M~*E5eevd;C}bxUwk+He*GLq$(o$<->iRA0)jjM#bVM5HYEm8#K4U(;UG4Iq zjnZ6HNYn5DjrkVVmX}Dm%Gr1PaSrV4z?Jebx9HU#oaZm3L5EeDJAR? zFFYlA?irvVKZVERLz;@a`7l_>FRvF{FCsWU%SymZeS15FmH-P&eu|q1G;%rE)q=~g z!P>e{2%L+qU57ccZwEC6W>$pcMon4NH8xXSTPqI60fw6kr5H>2LXeYRPEAcN^ViOC zb84O3@(y+mHM24KE-$=&6K7=|dGR12Lmmw!7T$mD*Zk_mH@QAOM^IR6et8Muxr@AU zc82=F5lZ6o+*x*T?8{%Gm23RqyFcQCv1L*wJ4L0XSbY<`@UvG~v6a%%T#Z#K)|KmE z@%o#*adDoi#wG{`uvYZ4v(?O*=YPy=H$rrY6Oj~h9?ox~voORnKl%YLz5X6|W>$y@ ziP`L+(omg{mEwvzN?l>e^NY+!TvV6m69^k=?dv7Wdxuxwyh2uO8)aG2pgL;UJKD_H z8^7e$D}MTR4`KFB;I>w?v(C=1e)@f$d--jyPc9OSJZR)Z93JV2O6x^`dv?=QVr6ym z4pS>p8iq&cY;LBm+==(jZEnxGaW(YNQ553U@BNV1Zu;mwa+C@oh!odQv~iOk{M`>Z z?{#tXk^LBEZZN&NAsyv5+tAABpsu-{=H@DL%n_Cs7g+WNsO~$;!M;MSpZPVve&t>6 z%&rQ-Ef+_rmFc&>!%yCrq-%7)IA!y=o%M9PR{80F`zPL8FtF?BKAh{5Of7it9l4VZ zJg1_O!5zc2G}MSqY%p^+(UVHv$y!7S=lKz@JgW2Rc65J9J zG9NFZr!k+ExoILPYF*l6RTj1yF?PV(WonUWE4aJouB=211!o(tRDS%lV znB6BIrL(RO+*4eU{=`vIDbG=eGcW&w7vDU~xY&`ktcydVEzE!T8ZTa0qIsYjhhOaZ z)(x&+zQFru&f&3E(3~IP?GG;E-3YMc-XO27pPJ|_7jMsF61(2}*wZu{Zt~2Jf5G|j zWg!UCK5T4Y$|5|gO1*2@XU*>fJWHtxz+S^*OA&-!7F62TO7sQ z=mu_IoXV~djvqV7U~d-%rgfH9y_g*0IE)28%ejL zk93in3bM2;c@s|2(^5%ZeJ@83?iH>PV@gO{*yG03ewfjMdCpy5A*tyzMOJ<(I}V)W zptLWol{u`8-<0;iLv_yx2M_G0tJZ~Y)k8oWVS8>RBS(&jK6lbtTfoN3G(l4VJH#$0 zFT5drQWeLZI4*6jo7|2AJo(58`kG70Ev%s2nPOJ*;V7tL=l&xiqetvLiAVZUXJxZE zc1`q-h+{j@j&)<1HGi0mjTjBPM#=Y$F}C2B>?SE}9%87*#>|pOb5ycQ8rUJW=?}%} z9z8_0)yK{2*O*-OVadv;w!V$-z8;1~hG;0V<6rk^13iU}{Tw=YfRUZUbd?+U@SSr= z5_F3$j_e(wr=x`Rn-j#!+Sx0|v(j&=H%``^BKmu~iHp5tmvwOX-i%Um1}(k|gi-vV>9^Z0U_+1KS{>h=s95yc*qIg4G(Gydf1qwE+Opwhn1bkHfB z@KGK;d4&36JB8BUy5y;wUGr_bWqlLfD`+=ahlZVhBPiBSBY1n zU7?5Tn@KxbWH;ZVFjkni}W!_$Y7sD;vsLabJK%!PcaDGq@Rk2K^f zc-9vQm~*KqsiUE^L>hoqR)a!1G@Tfqm-VeVv=&J{Hf^> znrt;P5{+uoT9o++z9AlCy(Oa| zLdwfj`A|AgQ%6)C8l>*!R14GUO6*I$EtK%6ZLjF{A?V+A#HTcC^`*`6R|nU zX%f;?U6|nVo9}WZOoauENjdfLI+a)iG zq!cuB@W>u2^B`(3WaQ`(I?J5cO56D26GyOx*O(EKu)Yz+WOdTDb00(E6#HWa+6G2M zel@PLMoxa=>pZ!?kK8=5g(FAk5eK4mr;z8~DmGRZnOhXXDbJ+J$C@}C(ZjCeI}06mp`yF;jvyq@;ecY3`ObEj&lWlEA+rZ*EHMc=E~9gJC+*cG)V2+DR9f9GF5F+kLBW6u}P@6L zMouBWLcn`#vRPSki!+}d!LRQgVc%dI$)Jb4rX3vI)lGJGHa!PVGhFWy-OVw-;z8qq zqA%6fS)6rz`7i&Ju2K_je}tfS4Ua!aaKp>WinO1;ko0X;jP5^3N2QI8xQ*V?J@hx% zQ`bJi7r*{x`l_wi%Gx+_VjtDH4kDguuHFjL+S5UfE&VpYR6E2|#|NdakhmssqN_SN zyhofBgR~hNK60wNgtV7wBj;8}0mFwM;q-w%a_r(5N?+MrTSl=s7mpv?jZ>bj6}LCt zp2V&69QgvL2Fh?RiQ`$bmv1~hileBNCmugQu{`T)YLz3uf?eY5RhH(m>;LR z=EM#{#HGETx_OE77jH-(7|`C3S*&WBW{m0c7YG!z(pKS0Piv9(KUvbjH~!-5v^d1^ zU0xP_Mdg_lBJLJPH4wqK?q+#)jSbbdeNK=j(4v4uEX?x46tS#&sw=X!&LAwtvb4M= zjc7~?EzV$ZzH~q~@ouL%^VUTcX2y8)y<0?WxfIpyVR)!odno+sm3?^=2gRGUrnYys zIz9_fubv`Ohd=($|0{p{^Y;keGxGLZLT*qVq*2Y03<>cvNat&}U=xqFePAyqPaKd= zHOaN>(|98)ZsxuW)EriubcpVtJgCyyrjmZb(t;UHcJ1|AI(qtFv%QGgrVh&UZKNV$ zLIx+zoo&?R+ND8{Gjr_&e*UAM@atFKXI?s%<>~8OTS`#h&`e`xE!l|$Zrqwgy5HZb zoGOm=A=2U4$&r(=dzqOfA1Oy29X*}oS;9iX!bGI=?eFiT(k5iV5ass!Z}8(E{Fs;D zy1+^>Nq(^q|F&jKevgo;kVcRr;*5?>&0s0-;qYE*I3wycm~X*|nYIPv%w`HMgO z28Rb5aH=W9>b0jOn}K5os5LEf@!~v5c@CXsabVWft2ZGxs-xV5suTH>l*UiJ;xpT< zLKrHf;eCQHoZL-;HOYoJ1Ma!&T$u^bJn|@~ch=&Wyvd{|AOzYd4oW{?{Mw)KSAX^m zMmvi!lfWvS#o*{Z4j(?iV0RO_YTmTbLRnKkr=NV9-QAVM!)mnDEJUV)okySG@qO(i zSLRs_#j!Z7xYTrrZ+wG;jaH`aOyk$;IfX+yna98Qb^iJ<|6Iyljl-10-Z5XF*}B|0jl zL&(^n!v}>-v{T};6Y+XjSXyQyBJHOthY+fSC5z61E(|l5cy2S$xnc~)0& zHtyw5|KhLtfBw5aV`pQzlr=%pmdEhH$M}oC_;VgTJV>z+jHJ;@X;U9he)&)MlP^6g zopOmd4QdL4kg&Q|b`MvxHZjfOYEbK})woCfu6>Nw!^ICKwGq(ei3t{jM5wpB8YF*4 zR~b7xE4cc`OI(*>)YQQS*E-iOO$wRO6es10urR)ey}FZKLrpkK@^IObM0~<_)Z0x_uy(if z;@*YpeE)C%j%VMzD9)pDT;;ipuW{+hBzg5MqT?K`?iJL(o5k1)Gm1TlEfk6K5%(=H zKIZ{P6|J4=XFe2&VU=g8qqUA=yICBNCEk7I*Zks{Uvl==f;P`MX)$22XX6wH(7QOv ztXoZA6GtMpz&js|Q$I9FkyYHS2Xu-`2acjr$}4i1J@*#B{NXQo@1}>`3b7Sw?;7kI zy!-acJp1bxcvs4#-cb2hgs87=XpZ`tU!0lx5`>#6VfR73=8v&3J;%D(d_*{mCEFs{!nVJ)+l2 z?5PlbUswpA*krSuOZ{36eqR5{kNMfpe!*)ZJ0bO|9JKYRx4F4dL0?x5%Ja|8ucx*m zi)*hw%S&&($DMgMDPxiLmY_V}LQ))AUm}~1-cD*=(w9gZmTk+zk&rfIW=fnku^D-; zuvhTqfAg~Uwe^ffB0*z zEF>teFQYKq!2FFjc=l({^3(6UPN1lcs^Tmxh5*+tT)MQx$jqA1TlDP&dbqq*-S zfBn@H@~q~I&+Hdx!N-krZ*y^SP4p}+x>B9|jro_jaOOpR^4x3O@y5uNcCw|jAG?2& z_g)s=zkNZ<5g_KQV#lspCSHAsmtK64XTJS9_TfF$hZmTOCaJ33!C(Hx7pciFmAV$E zN!k>Hw9!s+$P*iDEC}xlL?uyqp3SZzb{!hP>YHbBGW`t?8@GA?Mnp(_2U)@=)U=P< z)?wO`H~985&++05FY^A)6_SB9&b|E#x8zwGyYME@zx)Q*rJYcH{O18_0xd8kZh^^gC+BHiez4}he;6(iF^Bush$KM&B>>%tV9Uu0+%k`z%9K%Dk_bikPdfrgPE(Z@$3s92nktYW_*df zmOi>WOL321VPaJ}g)M8}4wV}<8ldLuN%l+Hl1E>ZV|2B zL*k_G;LyH<>>u639wDyXLImv=HNR4HEOof~aiW6uHbKo#G}v+F=ZNF)6~ZkJz1WsE zhtTFC&t)Ot^@+l=C@PoqYN{zOF2HVcQdC+ayKVyq~eW?QkS5Qi*sTn-_B8`}K)!jcLp zUo{n_g=AaPANI+EsSRFea~-2m93_p64ENL8vx}!s9;Lr$2S-mFqNB>e_?tiEfBg^t zKmNb}>wo0`&)$2$N0MA;o?lg#2ddz`_a0~f?G4)ZboWe;pP?I)BIPKpB%XG8+B=E+ z6Sa5RU1?9+lR2%p5;^pK49Vem-`@Lf*oOB&70SD;s(UZ83PAVt7*aFja3=oUiOP(O zjEszUmGwpB%ZSs#QtaQ=jcoQC4LWh+`5)qc{?9MtvFA==&P$g^jR>x*?|ki_@y}oX z0Zw0M!54=mzZyIC?LqodKTe*$L?VnDUQ~v8&D(JIzHUq&dm1NuCrB7;CCa^XT)yo8 ztA@iU?AVE(bxl~aVIS_@vlX3dw_tO36+#o|@x!nD9sc|O`(?a78bV`R8?r+qc5 z=PTdG7_zW=@BMiAuFXidQ6t@Kg*_`D#W`tkjt$`2-~_@{r{SeV%q)4~@eJYRXP(8S z;YIWv`5Aul`W5K&>Tv%jK8c<+l|n4&Nm$QbJ%&-G8XN0!#W}@&j_!kepA+{xDpSpe znV(ujgzZL1BqwxcvYSkplqmh~hBd!oIyMnAP@`iD?%2HvwKdhq%e0DcM%%d;t9NX~Z8S83F!zh@`_MikdBdaCvk0RUbs2IJ%@qWCAt?b;+5}w4X^aOMJG@qw15j& zsZrA0fo!^e>Z$Q#(gm?ZjX)Fqw%Dj~#`VfC@!F{2TUOG=ipcv48$6Q3*3iXZ~H%Y=eKNV$m=HqCP~?()q|Xvdjp%ya)!Puvx8iKO}+6FEmpF+2;+3?`yC_gP5o5!m^{SmIX%-Fc|Anw|~4Y~9kjnh4{Yxf~E zX9jTk$PtV#_~^XcfQe%0(i!NAno(C^qxv@@lYSSKm>b>@-($5hqKHBR^0kW`r@}uV z2peYsY&4PKN4N)M0U1=N8TJh16qF&;5}+T6%a~mVl1Mg)!r(`(3boSt@gYCH<+rlK zi&ro-?8eOW5KbIFhNCaPgp>U<^yBr;di^B7JopFNoL+&4KKJkO*?Ts?N=AJ1dXj5uw!EbB8y|fuPfx4$Jv*k#CN~{I9@+D zfbi|!1SW+VU36k(z>T`CB;2~1(Y>JySqV1=2FH;w*r_$UfrP_mtf?u58E(u@jgoCm z;p&x3IC<*Ui8jhd8 zjzwyz8^w2lzfRhVNKq2D^OOBJeexor_B`Ze+n}dB=wXGKZhB@r-JEPx4pbHv3N_Kf zE*@dJbNcCK7o>7i>84b+@en?K=X!((&tQObUN(ulINgMYoEB`l^FC~8t3y*~H@aKu zkxf7L8F_`MYwpD6b?r#Q5(dZSsIIKY%+3{!k1QL>dGP{E8f^5PH)RY>m{BSM?6=dbpk91`Vw%>6lnlt8b`tm4T^P@QO z>=WXAPrrNuQzYUua&08?hH&=eS-gJiB3y9?$_nYn(H}rzO()i@S%dEGa_E+vaC)OK zkkHD^&O=cVU5CRY#7B%8e|8Eht!%)CZTrzt9K`vnLztf#!%1pje&<`?!&5IF#~6L5 zbSA41)g@F8dHIE+Bf}n^!wWz9E}nSyWt{69#gfN~$?*xe{0XE}x&;)sxTpr@r0Zv$ zPLNin`?5j}gfP_~{isqsrAGF!raP#f^2wHSk#04?=qN$YUH4;su^wY1qli*Nz)k`x zy?Q-9@yQ2}@9M*)F*h}g@?oRzm?a}0mF1Pxh{!@-NhwN8^AYYphJXE+Z{XE4moPj{ z;&pKrv!vK{^uwD|P)K>JK(WI{`S8FO3&FcMi3{g0V2Yn=jtt^z{}=+Q4wV~rV@;+D zr%n&TA7lHZ3!!|giWRjR*1$4*3D3NE0nV9zjLavn_Q2iP+|h`(&Q7#9RfE1x^t;uB zk9_7cxT|LkGRU?yg+W5gKZEmqPLxtZH8;(GU|<$77o)m)JvMFIi%ks$^sS}uuq_id z)rAYEU&pCoieFp;Lu8&Bk?BP94E`I0LoC*`h(t{`(2{9g6j7o6aosH+OU4-E^O;=MV`Yd`cGuxTXInEG^>ja8LNt+%hK}vj z@ZE&&+5*xKMp(^e1Qy2W9(oGX0RsxCfvma*F*UJ3b~uDHr%&R@i!bBU&>ZM410x;7 z0+t(7>_(<}h3e>D6-D30i%<*dQBNW+>{>t|o`tp@o3W{<2kROuV2V32HO9XkGq`s3 zGEN+R9fwa{#IzsOI5K1I#w8p%bsByX*+Z_KZqRfe56fee=-#px?NyoZ&AH+6$B~wqM~&lZY~9`ggL4KW zZfclPy%?j5IC63bLPbZe&;0pmyyB9N4!L^(8qlxu?)K6hr6Eb*Qba!QKb= zA$_)=?!k))8!FMct^lWx4rBf9E*Smu;#~m?!sw;nyUX;Ok)BmV_u?$nZ@m+DZLEfC zq#yH96EYlj7|EcyQRtfJMZd>}wx$Z$3@Rqa`VcGMfSpY(sG)O~ zHlVqRY%#;SBCvnW5ib#*zjTERUd8R_S>qAJ`OVCO`&PKlrNB(gX&EXQ`ocb1$(5_XyJuAANCZ+DY^jS}}3`0?u6-gFc;Z%nfy@D$m2x$Z5QC z_$=mpB+Sjg0*T#uH#pMgHJ1Z^E1Xsx3!Y{HL;dAGQ6hn8kAKI7DS3X<0m3C2)b*NTi_ zFP=Si1>rb_-;@`QM?#T)Kmt(%%IHhqP@ajo{!2J>X&9EG25jEmgSGS{ZCB@U`otLw zPfTHc(T~h368s%)XsIruALm7kQ>&bZ;`7dpVQkh-_MWm%dPXV;;-s~sg73MPi>1{b!Xf^P0rRYiz82XXx9QH;z6V9zN+Wo;wsMO|IRsdE=G zI5C4*IyH=1JJ3{~g^9DT}GyKPc855*86J z78b+EBmq>@)P&M(6=z=hF%Dmvgx*X7pr%T=0Ojdt@Z3+H#FcRm|Los%J|1c!?XFm(1zGdvSx7#JGD*!Vam zoIdEIE?hZt5#x(M^VZ$iwRHp98!NGN%F1Fm(rm~qC_{C10m9QxnCN>}QIbJg!iM6SdQ=tL=zBrmiQ4tp zzkMCDVqqXN2bort#Mo5~jE`Y*dKOE8F#NMOaJg>=ndL3$*|ihvS}GBp?WG0?i6y!} zG_LKzjxFm@keI`f*N@}IEQu^*1{#|i5Ewd)(|xn_UFC0%Rwhxs1r6QnkwXIOeE&2F zvM^?+C!yrjql?Nvj~|zh4q|dK00Rl&;-YK>sj)RRyNC$i5JWNw_yStGYoqd06)FM82885zaPK>0&5%>v%cPWad?b~3R zxrV859(LY+7wV}I3lh`WW)(wJ*K>;zH&NweHyU=`i5;z_h>+T3fgW-3s40^Oo5{vn8>xX2 z!RYmC;=0EdLny4OM@60iv*RNe>>I*@FNomM92UJ1_(%ZG`y%kqjKXay$M&90$Tr4c zrUq4^$%iW>bS;@#2+j0jXqxIFJqzifSzP9!2VqBZTRk#pZRpZet+)}}c5bJ} zK_%3ML7XB%J25>?=hUIPZ4EkFThLOLLErUpEQP5tU`gP{z!1FD=wjE6)c1x(b| zuCxmqN&`55VF>P6I+{Bgs3GLVjs5|Q3=g4qU;;{R8U1!p+6|Sks2=)msA$=?8$BDk z(ArRn`QD>=<=AzEU_eH?86%gD;pD{|$ZFVxqWCcSCcW^IO<613u(q`Z8Hx|ruHAq; zK#iTYF422Eb?pp^<6f9co3O6C85MMI%u%QD%=53)Zv@|Cv^)nFT*&U;herJnE)Gq@ zUQi1E$XT2?GKt*UG@L(j98P^Pb{{%`DhD;v%xOs1hcPkdqy)%@7WswP5UkV)_RWt| zeUCwxTY)aJ0pHvtCP#0exA!_V7^aZj-br@bjw0g(9{ct)81=Yd&Mbu`*oT*&yo&UO zJdB(>jqzXxb{x73o2cxvO(9%9bqs@(Dyr)0P>`KQ4W~TRP}!O3zA-)TLWEz$h=kzL zmiPTx(;;OfW%-MbUi@TCT6*Cwo?-#mR_n(V|QMEI{W z{1Tz=i(mX=;?YOH1`oA-MQee~Q_oFG5*PgFkz1nNv&QS(k`T8fzHsi<&_2XXnjhzI z!;pKW#cwX{;73QP$ElL{AEH%HHTq`b{H{Q)T?6+_axbq|r{a;8IG(kQ=5C?&5>Sf# zxb7WPJKGb#%(!{qz1Y@SjD@iQTt0IWXRnSSMy+igUP-udaANddjKe9;LFXhv#WqLA zC*rNx8U0XE82j8mv{_H;i*%I z7yXjLk_X4v#!tRAAB+we`4#Bdu?4~5lQ?pI2q7`%4?hmnULF!I2YiimBEF&U(}9%~ zD2&qO?^jCvi@bfy>Wk<1+Y4El1BV#RGe9tLNdr^?enTH(` zi6)Qd^|yiZB!-&O3Q0U_RiC_ljmK&KTtHyoj|0TEF-=K4%5m_gi~BDOSXv=Tn0R{#zVjP+b~^x4BvY33N^Sm z9%qGrmpE}shwPb;lHhh>?h#Wx2Di+kVwjs?qgzMuj=y@#omM)^{;?=kJ=>q+KMvjGn0d~jSXZ~Wcnl=#}YV}Y|F>ViI3?$KhUE;=7W(NAUSm`MNEXuDP%t?S% zymTC6vjO^E^7U!wVR$pAt^>8E1)RG!fw+P0i4@57%tOs_+6k&xexY~8HrVb`>2SRz zZJq0ejuY3yE+Lc-SB;i`h_UJUYr<)=pS<{9i+dD**ZF*WEm}QmWzUzX{l;)QqRjXh zaW2}Iv?Gxx&a*9#8nR{70O`fFH-I?1TPD9lH`OhXvdNX-reANq@P#j=1oWeDxm?MD zdWz_usy7@iBz4hK0a0d zB8a!ep0|g-tFW+db5TAlx`=o&YQgChqJh8ETH49DsdI|-wQwyD$vB*t(So}5`*CPz z6Bf?ChNoXRg*m!$yqztIwCOXIE?-D0j0095zuZ8eAlmcBd@RGGon)hZ^BvgIoQb|u zFXGtw0eHDXN~EpDUtMAOZ>gAr`@JmXF)O$Me5r5^s#3+(+l*Q0-h=*iF}>1!(K5Nab&J z+?(=DscOTk(Kd%CLznX*!Z>~^c;(tPw0*axeQVxC_$|k3dEj{3HmO1JR{zHyx(5xm zMLhZK@8bMaU`3oJ)6tGuIWBd++rdBFbRo&}((zm`d@OCPF`3^H=Fh zLMyXd(`G~%$4P#s!c)iGF3;NelJ$^0MoU}EgSIU;1zLP9&T<}zm9#0{Rdu~O&aLn< z+Bn>lR_c7oV^YWQ_O0i_sEfNrELmS$@oAZ}~_pQ#u>TT^)OHZUh+c()3!JEld5kHki zYFi6iRo6r+d>PuwnvZ?=MJR7Cr?FCQ%yL>3c)Rb#uNyZB=%uBln+rxF`6a<$tW@h- z>j}~9P<)|9D1T{1fcOFmJAG4A<(ZRgu$XlS2LlL;xAA|4c1`CNv+@}YqzOX8C!Fp# z5{cyPP>e{kS)q?b5D0|8{nZl5`x<^Cz`eeD?Fojw*MD$f0sY3Nkwo$iU~$WjdHAu@ zzvUjm>F5nsWas7~Cp!aHe))$})G4s0Igp)|1-s2GdY<^@6tmR=qcQcE^>*+Z>|SaR zdJy_mi)V(ePZi@4d&Ib;;z_ndB6)k%2)ynkxOp7tWROJizD7s)`zVi>FU9kR0i~y> z=SvqZTtFzK&CxHBye%XOxmPtOFAwQvJ)%6_=`V1z;76#&^iuTP{SY3ya|>#Ua}aV( zW6rCfx_v9|zVA+KU)zXueF!tNF4#-f;G>V+ixNW!laq4@$Jl4>Ha1IP9R7Z>=Tu(A zk_?kbByYp2?~O$A>w;#p$qmT|mX(guO3ik_I7yeMmb%w)JFQoE|8JVR`Xew6m?4$pLfBp88xHRITwDV9|kq_7P*YW6= zzk;WaT!uRkMbI;cD;F+eXmVb>Vb5}u(^-D0;cZwxw^-NmCXP$yFO^?yzvkPe?M_~Y zL?V$$BoYZBd!Qw6iC(dyx@|M=`{+k-N6$u-W$F>7u#T+S;Qv0?4*`|*(n@583nGN@iR)bt8$-?;@Pb`^0R7k6h5iu4iq zLO^TJLEL};Jz~0Uc$}DVdY2mt5{X12kw`wAa1XQ;(2_SNk$^S30G%5*BF%Xnk3ar1 zT)8oh#YGpKF1L7DV&eJheP5Waq$hqr9@T4hU~6**jy(4i zCe>^-Ru^E7(v8^i(b~QSO*K_8M;6fAKa8xpZnPB}aN@O>Fs0_AwXP8JV-s+Pv@u;J z5{X12k$gCj0$TExB*+}t@xq!@h=!&XH0Ik8^m$37dc_QDrG>eOx~6btXdF&&5C)qA zja4=9^q;`9N6uo7#O%W2946-c$gOS1&Rttj)6j_09N@;OQ+WCC2~7C($iO_F{>Jxk zxOW6I(~}sRm_j5T#ORsBc>0B77|cirfoV5;4RMo3)aG#tr+hb7KwivI|jFTZaNWFm?R`1}5AnYUn^+fr9f# zUdQDL74>VkV*Q#LlopqvvW6!aFk!au8YWyp&Fw=Xkw_#G$%hi@11)(=gpYB+iwiG5 zh3|a(C%Eddp>_Kfv{YvcVH#6-VDuOejgZpTLzhqx;ko+5ekAlUOpRQ`xhoUMuU?P6 zn`&_5=~atcdPUX~9lkF`n1MuJ|O0WdoDU_#i-f^IQONv^7BO>_LV{bz;#a3f z!jwkGS;WjrdY8n{~k#AvH__+h()CNP>J~ zbQp8fGw>|BusH9+3~f&=1(DFl5s!E=H@661AVL|B!S9~IP+u=@jL(B4KLQ>nW}O~7 zho0gF;C3&;;|(CNIE{h+>lmDzz@n4R?Q&sqd;-&pB=mVS4mAw#k`r@uY?O!26Qv`O zNF)-8lFh`)Y!qDr26m~48!4`WNIZgs zLJ??RJQ0IFp@&MxacVkBQy~#+&>LW&kXW4dk$6rh6dsE~r^du+7YW4#Ba3P}J`!c2 z9;Fl#B<2lJ3?|VX9F3`nQoeXfRFgqRX(}Q;9*mBs%;ju~`TY4}IE=3+*^A8fE(E){ zK%ICT6Ho9FbbYkJZYnIG85Z5CsbwV+i9{lie0Y&F5lY?xJa4@s+$@YFPR%TONnMJ@ z7KQOXh1N;Ck~}5h$}0vEo(dny|AZW+4I{;)bSOYf)h!kl$&?0rb0kO{lX#{?D1w3h z^EoL+b_1cfLcmgdg~AnsSu8po#Unwl7)gxNr-9>$Gcr6axR&o!hzO%=U_s4`UR(zY zV@{j%qwUv(GOttG%W+pykw_#GiA3_@=4}NuPa>g4qfklQBs=bYKDd{VU-}A#5mmW& zPx9-8Lb{Rrjk%jyMqC~29APQoL?GLwcc%Zk02uxy~kuXypQcqM+^6En_0+G8sUfvUpR({%91@s zXI91Zsoqc=-Ux*VL#5-@C?Zky7qeT5L?V$$B$78F=>vTpKCf4dfFNd(qaC7mj#dn2 z2de68kYh6-7ziZA$vcEZklvbs)^*#(Bp1e*7xPO&A*|jpEZ|89shk#xF;ZEyO`=L! z>1&j{cW}=uyHmtSK$A(3kmfo5N#L@GrhkS+O!y|V3kSuZ+F_RtttS^GfO(<4noUt% z8YzZeFC00@mRN*GMNhVldx1HWJ`*Ik`2aqH5ZLq&EYc0xD5z{g_r@kPlv;p@8%w?@ zrJs$~&P~|5em#ma4DfoK2t*7ht!+SUaRz)YH;H-{^x~2v5{X12kw|`FlEc{PptIy- z$9LY5`<`;oG>L8w z5XdBzi4r4z%rj824_j6+M&!7GbG0xObAa6D+n;KB~!c#4QEbcJLuQ zuzL+GbpEugX6!kz6-71{c3LlEG)fXHDg3o5qG_ALwfwL@t=J>Z$Gz$Abn531Hd^^| zJ-roLRj}_cl{1$$#plM1F(ViCU0YFAQ9;6(%b&}cL^1b3N20Xw&~tIo;9@~s+O`F2 z*RCT0O?4iNiV-?Qos0B=C}ktMyv^xFL|ySy3$DL}&Vs!14(!;s0X3D`NV8aBV&P5V zxutVA?%3UqoGcS;R(2KPW31@dc`rV4{|@Atl6EW7)*56{veOv*IE&ER!}geZ`jWCC zwkJN0iL-sBY>D=3w#f0{x=bY!i9{li{CcDG^lbmq#ld-O*|Q$8i^p+pGK}Vpn^2w> z!uXUM8F|@=xo6PV*N<73j|34{dt*8irI!Iq zdNFoCa0nZ#3o+As2|jBZ?z*cHQ|HcLHe^6iRU;}(a$z;7@VY}V+OtrYn}f{U0;HRb zBL7MxMETPrGq0G=SDZXwh{Vr_w^vf9P<`d*!EV+e6yi}UZeI{A92K(#IRz!CC@qA8 zhlJBp{g>2W*VavFEU=QGCNWA&AgDs&skqC_P*z-qYzNgP30AYC5bHMYz=1Vo2n75v znhl7A!eS=D%uEOD*|{j9dIHru=fz?%Bfqd5CHZ-v5>>LXX6FVxU1d~T;kKl>OK^8B?oM&H;%+Uj#e#cqC{hSgw8h=EK(ONO6nA%* z$Gz=+|Fc$-b3WNKd-lwa*zbL}0cWVAu`$#N=0Y7!u(L%d?K%}}eRUeB;<7q0?Y%)Y zQ3?t|2$p`R>+F0*j?KO;mT`_F!;)TJ%}sIE>=9sdNq=!xX751^9!!$vu;0pj)EgKS zmQ^`Ld3dM-9KCpZ}i z;44gh870hPeJC39kh_7;8w5D{gm79c^S}IvTUr;#7e1o2v%&g&#`mZ!4fQmGUN7?y zcC+RJbg^?r*XE4YRvro$q>@7?HgGy z)?o|H)#a7965gCKQ_Y$mEqmg(2&Ru48pRYjA=RohI!oVG4Umw1hotC*#J{e0bngVS zvlbS?`_2kYeF2Ozi zq!@h}%~0mhJ*zCTcXaYW(uS9cNlk4j`1{gqZX}UI+CrGz&__Ac-F%-Zx}*8|z^7p) zz{t<4y(j0#pvC$n7t>p9&G{#OclWQ86zBGAoqaGE8^6l!)G|{erGCez!Qtm|IO0?o zibU_)+fp1Y*OJ=_EsehsNDG3th!0BhRlArCyz}g*9A>AoqEUDm_>$Bp*2~_QkDd{FbSz*iO~~eCcyfA0X2LJqH>+^9DCRIfyfzWj^7N{GC;Rb@H*cCf_ACI$xlajvDg?@>fvR0>$Y0@)?UE8`;iPlfD#5>RV6TY1 z`Yi6V;2%dGNJKE0zRm9rV__@9cT8QjiU|o`t~jzP17h$Aqsf zNa)uEcQ3kmc%V#{^?f^of>OL50DW$5grd4ppIW3pypFsu15MCh5a0& zp>}T+{AuzpAoYLtN-A#SxkV=P(TTOqr$FrZbQ1fc{V84d)C}-(6m|KLxFeqJX*8sW zc@UF|W-CjI9Er1%J_fE41203mO|-x(hAtP)MI_iLTEn)RhSoAg{yJs=V?HH~f zNN^GcH$3vVZj>4FzAS`R1b?B|{Y`y9O#V7Ask@{GT?+^g>eqb4gt+6z^1IyM9rC+> zGa_4I$RZ?j>Hg$KF-Oq-bjQBqi)8zO5wUo29{vY=X{gRd}ShP z_3n6VGYR8F%2-=)njeGD3f4d!T==XawLf1)P*2Ux9*HtnvDvqWBz)6z>+B~ANr%Em_p&9#3n?1m(^y1e z5)yT~!1>2Burs4rb9BP(BN=GJ>Fe9&u*M~fBSx7Ghqh2rQW*cpyB>!SWIe8=p1(dl zzXkP_5T$(8l?MxeKVvD^6!87i5AXKVv|^~1imraM3H2lTD_ z-4_y|_au7FBkM^(iy z#2enacD-Bgc!GI3d1Qka{t072gPX3RT$j%?kXH;>UYA#e;z~2-&JCeAFA%JyD8PV_ zo>BfWj)J#Ez0SU4%}85UYb8OKe%K=?CX!@iCyR&>ClSpC!X zfWh8FT`K&*PLX##K9u~LtVGrJx4ij;;#h%^an@dNSYJi?e5)N-$rsWe$L-UI8IbXx zNp~xAuW$jEt1l=ok7E8PR&;*99rZ(Q0HmzHL_?qA(5x#PD38eck9ru;UymN|mOAe3 zo>DvR*zQ)|r>;lWKHC)j0~%f8uIo*_F`%34`346OK?A$o(X6gow(l}jm1wuZXHX60 zc9KT!v|mQdVwCSE>fY$X|FDItlVLHxY0x{|0Imsc_5yD7ybX;Omk%mEvT>V_Y*``A zIWX~0E2ri<2Dl1?@71z$C0EY~G<_&%%U1*A9`rvEQh|v`J3G&~+bChuh0-yzPP)?+ zVa^V@)K+y-SJ$AtpGsPPCc5rLZgqgCtOvFS&Hx?&UC3^DU;xjt)v>QUF~adxDG}PrHl|8ZGQ( zaVHBv=Y#w2oe}aQ?yeaQ7NcR7S|`+#K?}`rcg%W4Ox&h9w?x8S5#YeEPwX|98P#Tf z2qmSp#r}Bg-WI6TweNIYk<~xNnVNlpjb3NZQ^Vx?oYz!FV3UOuqpI9Ru3 z0E@uup3~L_aF_NN9*Z#pnj?eSypLA=5E{xHWI%w<=_9HQkfEEyYUFh}obw7n-!z2E zH+lCd9o>GV0nLDsO_~>%s|EUKxtXvaG9UO9Hl-FVRFyvvlu&BLfj!y{^7D+yz2fCg zHMenu)))=E3QGAea);>~)Lb!nECAwUJ90%QVEV4m-buXq^zr^EEbRU*;^!7fbkn^V z-D$0e@8Wf|>O77zmq?zH$#b{->LCW7{gBPiK_WSRNTvP*@~MWBT1XPrq;K=(V45P+ zQ4A18h#qbfLrH=jj+sk~iP&X48|#Bn(R~$$?{f9TF0qz7pcE0#pb`^m(n4x!geuxW z?xI2Td4_7<@(>60y9|BbhC~Tt1{058kL1ddNN{xmUG^N;h!6UO)xCxWX?y2q1 zFtLwT^>d*}RN^cN=vQlQdP^G8704}%$81?5UGpw`EM6{I)|VHOxE|Q6AR)9RNt65` zeMH>dF_aZcy7Lq?L|y>&-qY$l`VC_F6Aa{*f(yYN1iHQm}Rgz}F!tN(#h?k*OJP1&@;l=D*<1OBNU>hed z$gB~RYzKo3i)i+01KEWLY|r^A{i z!=ziyKR#biDC8}edz0PA#YWm6N>8zIiR$shoT*{4s_lUw|1(!4YuDB09(z9uQ-52P zMeay(TgaW1+~cGBo%ZLhTBsT)FT=uSY6fO?>D-T{QBro`{*waum>?paoW5wtl(R-R zlR_+x^t$^^(hia)FhwFtb-%jrlP9q;^Ofw+huE`xD20!5d!dmBs;cfo-G>QnpBqV# z)#v*oMh9Z4CM(&;t1V%MR$(>2O%@8D3G$?c8d>YeI{VQ(gaR-frS#93gmNfE&E55W z9EGhjcDNt;jAc-XICKOyCb>vQ%#YbbxBt7+K2!zL4J3w2BR`^D7QHL=zt=D;?Y?&v z$n1q?EUof{T74aybMey0NLt_F*7Yrm%SQdNsSUwGvGCXuH1@tg0B-bJfEA*wuy`1= z>aR1V#^bE2YnY6TRsE1D^N%-G<2p!gCDBv6m%hQFNU(B+;m3`=>hiz&&BC&T6J8_B zYiFfrkZY+)O5=zjIjYYxwHEYM; zny92gf0{>LPxA)QZLau={-tfmxl`cWN*a|75`#_&0DL9nQ=8alXG@USSX3pmIbYPwRi#A``aEd>sVf0!fh zKhca{(@WJ`{(wR7>W-eD}EWKH*BV(`}l(g z1uI*h-Nuvnr#@*S1FSe;Y-f-A`%jPij_UoHt4%779(;7x$t*oK-om7R6ocKr^5Rf0 zM8U~$Y}G$b++ljs^NJ-`lf^LaKAqR0qN|MzuFG0}_*&zkf>axt)O zs0A^GZcZIAq$AgP%rIDhS(=X)!Vcb@;eld-6k0C92jKDo^FPMRUj3|qYL2D>_`5Rr zbIqV^U~|kT1qgGG7h}&#AT4jHQMxH15lcv_XS-*7_fTCYICP4v zv-V5Di_D~!#iHh#sEzNDZa5k~@8-Ktp)WUEz}O-mN9-RLIjzP#FY)D;7DH>%dQ~xC zF*Cz`P0$E&N5C+hOBu0d<@76GH}~-`J7Peu6I>iJshgwa-fn%q8eygQjh#(!Y`rp% zym`k%A~X?=bPBkdwRdw|kmj}T(OuOt{0=VcBQ!CBzPZp|cIkhUb1cAyQ^rUu2q{4P z+)uevF;wX^C)(cm+#dC%xA?-Q8X_`z>9)F%MmZ#_Hb#NaM6B5wx&;K#j69GU{vqJTv#Vsmj>Ybd1lG%kY*e%37k~LxfOp)ftPO~m$3AOtI z|5Aibi~H?NHIaY_+m-lrHXaAXi+sTcaLsYxyXNG# z6Y5^%{P4lQaV(ZLHOtya?ux>sv)sY@j1hv7HfUyIS=)~DNY+MvjYmIfLh|dGf1HLU z_J*0;@lUvNZ1Y*nm6@gEJI8o@cJSBlNnsJ5L@?dh1lcZBI2u)syQJ2`&WAiBEFh6-dTjPu-|wbR{c+G{2_m=L-r^A{x3WSw3Nh0xZNCyu zsT&x;MGK(0A2x2jv@cDlF9nwD@Z#X5<*1f+c1hlvuJ#E|RM{RIhcJJ~pTb6oNOPbG zY#q-e?oS(fMwHbAM-#c6owTYIXGpHba&R2qCeq8@8#ur$dzR(YxRXXcc;98ZR_*BI zS9F4^2c$pExaAhM0=z9)d7VrU{%n0-b|$R49B*gfVKxsuYO*^P>=cQs7QncJ)BSfV zk~n4!3U&SJ_ukuZ>5-u9k)zP$cFSwy$HpT&6>y{#p9}>FBgn@vpw6Oh=`ka=7H}L# zK{8X~m9M?{uP-)%2fcGHN5ec#&>ZK`;5@-|$ZbbB`RkD$Nh^Cq;9Clt2W)DkVOO0{ z9hEV_Wf=W?=aiTqva0{7mePJrLMk3){MwZuog&v`8`W6o3+kLKzWh=z2OsbqJ?l+3 z_J%s~o^yM!JwUlPl2Z6K-|GD0vY-8kBe$g(GqRI}HQNhG%!xh%kmCtH7 z%Gmd=wQse+#5lkG;m?M?&v3qv?^k<oR+Coqcj$6*ppU~PyV3i*q2G}G$U2!?DgjN3Cu^2={(CO{!VI9?@P_^CfXz`@@ zNkSHECAC#p?Gp$y1zgav6&+E@o(ahUwxP}Sz5&;gvL#ey1!6$yrO3sZ0k zey9M*=w#eO-;DW_yCFG}e<+c}8Ep z-47qv{-*lb@y8wB+454gHTZyw?tnKz4KownbacCKW756tVbT?hGGFEYXk2z`E6Kq# zNaDhUY93)s z;1*WJ=%9OfTG$a4W8-QdiQj7nx-V1xhY%-L8hKxuYau(CM@~&=kh3#D(h=@(_EcKO zPsH|plo^jL=ZrOX0+i*wP(JTf+ zUkN?T=H)jclLtRCfJ*vU>-eS<<>d35=(fITm^9-f<`8m&?`O*l7fpyQF)Yym zR7GbY#(2%_**ko&kjCO1v0Uc`jA#5NE1HnZ)2Ah_o=5(T$E=%9(z#cJ{SHve9C6M5 zQIbI!Q7c+K?Arwe{D_9VoGz!-pMrfYT?W#8Ml@;MnIZ;8DPwUC+d&1>MmqKm_9&n> z4{!NG;LZUu&ZojR^I?6I>djxOoALgq*t!N;7=AsG`;l0~!^8QNr-G5YN&M~)(0$ar zbteLW^>D_*m&bFaMXNC(OH7#b=VF|k@y!cJnWBF1g>i4{2jVHjzWJ4ZVvzB1-yAmM zpl_je4vHdCHL-hQ*CfUQ?xZLviV^8t6Y~?1qdVSPUz6x;JaegrUt=)nYwvWWWySr}aMolnHU6_Z(Qs2xj zCE^S>vZvpHo5AOvTP{o-ojSJB%M}ulXo?|ZB=>11ueBYE)`mhzKah}%ku9h5DTq^5)$LS}w;i0)b&+fO0ykJ9sdwjV6kgjHu z2)DZoYnd8s{t@?ockMiaw-=Ms++^aJ&W@-BhY0WUZUR!1RiYRVVNSEsvatEPRuh`; zo+w`b%7*xOJlTnJCmaCPvu0+~yZXbE5304nQ{g6EGg$Ei@J{!JB&u7g_GOt#jn$ z%JZ=J1Q_L{&yW=tT0u|~*W(yNZ?JBG%@mWI5*8P8hUtt`l;5XmD4UH$J%iCZb6&*N{-+wJLsUjqEWePpirTJX>jVF*CmlvRtp?@uU=2wp7TJ)%=e3 z(#r_rf5|JVdx~o296cOnwgGmTDP;Nkgk=|vWlht>B@lhs@0z!`YQYK>^6slnB;nf) zj+o(uPW>50usQ8Z`4V6FR8|H=nl+=ucChh#p;FO*~iRW+;_+)k32l zmW$1hDP}G9#k;2s@($R+SAH~J&8(WxF>Lzt!S+paqBDa76XwhWn$m6^*P$Kd^N+3C z3Oxl$5uxt-^BzWa4EfP39Vv zTG%C~tEPXt{$I)CNmx!i1_q_iUeC9CvfUgl2k(>!e|+x(C`Zz*wLL#yeT4D780Xyr z<5HTgFh&AVAL zX-*mW6t!dy&9+-6Z`!-)fUa6!BkD7U2hq!a)eD-mvr{4A4GkH*|FQ8O;`xo%d1AuM zcQzz)TOW-V4ZTrV5RfGe`M{ptRgMo>_Nq69m zb`n#^Qf&*jl>0bct6SST!Ab!wt@nMBg|jdVD@$F7Pafepq=X;TnD}TjaYJ_~k;#rL z{bXc$y>lQ!)p2C^MWg6{+*Nl;aa+H-L3Zq6ydOe5X)C&gI<+8ExwAK5Z^e`R##7tW z#TK?(10~|C+$e)}7fkj8_euLDRD;_r1-m=iC=f2}nfK)FCTzc52^qN-03Wr-^BW95*#lAgt9C7vYv5ERcHg#;F(OdmM+cSj(1D47{nY6 zbLe^9$$iH8>%KdCtv+d&gL6}wze2KqC4Oz~hS&bjtNL6ccW{{_kuEV1(42;w{X5;op^i zI|~XUCcu-WC3`wvg%p_Qq#lS3O7JzmYNy0?)uBn$fM&HkcvL{?^J zONz<&v$jFnyY!IddcW?3_g54fxrJ{vqq#z3xYwbgj)~&UF2oxK^cF3vCTx3J9&>gX zMpJAdg%9&V#GQ6rh`YFB|8*T75b}CHwhGyfq;T^lwryETIBAKfeA?_VXYxbyaIy{M z$o&XeRJ178*vGjk<+a$_O1dk2y=IB&sU4p%hVkPDW!8Mb+1}1;D|jb8%Pz4mz@QSn zu~@G+Uplur`gkJaX@pfqM^RXT(%Qo0a^An%!`1#K$Ed|sjy-g-*1f@pmSe zeNfh&(~c{PvETYM#Y2GRytPHe_a56rmbc_Uacy5L=FKY_`ezO4$Y(Ehf5bW+D!ec| z7c!N~SM7y|hKRf3EK6h6gd>hwxq%%6Iig^Xx|`+;r?Bbj#a#sj-@CzCWReCZ?F)_n zo;{IUf9M%=bn;`tlpeiWu)f9|^}LUic2u-+)xTVw3;5PGvhP`h>+%V`$v{e#;Q>2> z#$L~epog~^`7H?*8}wn}wp2MjBwC0_&IFh+*5IU%p8TF+mhW4attN-71wj%S=|z;? zgl1OUd9GQL@H@eX$%u0X6v0nB?q4HT!YGSJAi09al%3U#=nq7ker4j z*eY&R%q-ndH!sDvQY`JJf@@7YsaTD*x6CGhx^4ICDEwYGOb@Ipok}0#%b2lILAW}> z7*xVIhBWMvRvph;PiMW+hzU%7?*|xdzfzSoSvZ41J0KTD0+ypb>W!(685bv&O%??K zTsA_Te~;oBQWK~`0kY-~4V{V08~nKUTnm2N5O}dvgNii4&QiD>R;;AGb1(Pg=WJp? zq%^zJEy2@~p$y<7Qe1oSgOmfw!F zA*n&&pu~IjuxcA}1;N=I-ssSWJCevXq+zMaiSe(I3on~@3##!Jag&&pVw3k0$yQqL zQVM)rZl2KY+RXMy39I%rX|7~G%}-&XO}L+{*$9#WMxw5++`zHPQ2UKQW(Av`9M}1T z&#~Q`dA=7%q59Rn?74@t?=81dwR8CSU%`v2l2n#4x)1qAPrz7gxniVyCR2uxh< z{9bqbmg<2HJ~w9lDegtABjEx&-NO=yxZe%NYja_EW~6^N5OaJvCy_~2ny(AsJ3y`- zAD;+o;TH3MI8p9ziTGN_<54y8x5B9p10heam0`dNux zqTYn)c4ve;EcP!_Zn{XRU5`5aOZ&aBfB!;kDJozgHn7q z>tqvRwZ{ySv2uQ@PaPN94qGsnPX80!{Nl>L%7>oq^A3AT1Duu?Iz<|66*?7W{>8F!F10_|w z3nY5;8Ug~=rAS5x%rb?&aU{7E&wz%yx`u&ClY#*kG_1F=lnKTWB{ir(OL}(aW8}Cj z!FYkxR~VKoI5)pYAS{X|-t#jbdk4-qo!H;LK2<^+Epv{$$*QN(rW%O{(c|boP%D`GtCiUO%loT`Bfg4MwE`%jz6*3Cikvw)7gO&zp?F{y^}#; zaM-Jj4Z{)FcO@Mlh8lOTwY0bwT1%t7XHBd z65d8Jxsw<~NSCTI$DE?Go8qu*Z+?=^bOhiG$v8 z2IyNxRw|g0NS?%WiA_fDFXZM=o?NSwCaSC81F!ua4w?`PvZy5O9WTr1sZN0}tfVP) zHy%X@*O)(st@PJ=30Z;R!`{1hzDBMU3}fp`*)b^ZW^hp zGONstGsks22=*B!?~Rp8?%zrE#0R;CpZCOPLGBX>rTBH19@u;049XFz4s1oea#Ph_nl(|96T2#F8spAMNO z(Np4MaiT8o;&|O-{#~uuBbV<>qgdR@BFVbv@RV!6Cax_v^0(PA436i>UQLd+?Yhe9+5f(J zDeuaD_59~bG3L#&en?QZADWoROnl@yqteJ|w{|`Jt=JR$&8=I0g9}T`0q0s~x}>oN z#))7R?u^zq-BvGB`^!ymWb&Ftwhv~@dOiW-&c?WvSoF>rLjfA;-RA41YE}IJ=m}J> zYw#^{-OkThR^DxhY}W+oNwX_mFI-miHGH0`|F8DpZM3fcjNN0yPs|PkL)gcFm%=>n zc2;}0Ve-T%>e27L^~Pfkd!uIiBCXyXU=yI}eKnZ@IT)0wqa{jcli3HsV4o%=_DBwj<$Tmt{TZic(37wVZV%W+NRa}e$ z+*n%ejx1(ZLK55A^)pXDy^mz%tBb!~9_Co&L!KZ*ZvAlrv+ZsQ?asl`2!w zkpUiI@>s75zuweBqbq7Yj~n1ZO0wNs-&0Y!EH6LM`{vtx0X`{>eNAOkK= zU#St0JP+GbX3?jB>n}F0r{$R#srkJF>m+|w@ci$5=qO+i5fL#F40vFm>n~JmJ*Hf) zbwXK8M_DKQ1$sHBsBt~k%_Ql*%2QRUN{j%mU(8qEpTIO(oT5()WC9RXbN7kAB@^ zmc*hoIorTuRm5+-WXMPT*?Q3|%iv*mTK27r@Kg*g4ZAFFA8%8=QThvRy*g@bnNDS^ z>*`=@N6<4CBBTu8iV7*36sR#Jf?cz{lyD)%aWNSCeO|ClHW7L!c?5;ZqAW*xf@Q4) zemn(EOw{`6g#r4yr>K6=TlgItfg2+tyssJ~vaABOQL<^=2W=_KK+S?ma3b zRsX_YytH(yFQc=yesOwswJ1g-yEt|!N$}-(^nZWI-%9!eeO>?IdqvJCQf&NM+!by? z(qdYkrqIZ9LSV>ZS=cGg3FY^iY(J#E(R z8H*cYZPEE(a4(X=HIFZ`5wXI*wvYW?eg1!R@x}#v5ldM}(ZgYGxQUfOo}voy(G(Wm zwCH|UX59Eyx(c9vi*YNQ&6P1ftbpr)R{^q<;`UzBts7_WokTnm;VKxOX2LIRaVA*I zuDI<;1#T!T>3%;1zL?brejVS(q83MMCliF}xAY_x!I2JvI1ib%K=Lfi$5gO zkL9{^Eu>83pnWddchX+e95VkOI(m*J2-}48Ml-DXioI;zibc8`*^O%(gyy)CU|*8; zOoR9I;$-CCC3H^Ino6u{&3(I|P4_QH*aYm0foyFEY=BMz& z$J{25{Ce~`;fYQer#*Oh&~o|yO!j=d8^iQln@vEgu4k$sx3kfoJ5d)RgX=nI1F)Ar^) zpu%q)q^l({cH6LnWmrn)-A<{9)0(nGhMf>*)l&K{a!RQ zYvH{ZMu2-ttN`8!OWEOYbBCf7L)uO&1#X;^uPyfo+tbz;RaQzKwm8}!o&<`J1&i5A zYWSfIBe4l{pfD{Rn)1=DdHSf$Ob0pK`XVFD@pW!w^^RXr?YmO*#C&9>)Q3@^*H_5I z)?59%G*<#5irbP7L(yeQVeaqme-FBK7QK0|On_i+$)p@)P$~U*XUh+z$d2FJ9?2M+ zBd4+&NzA5)H2KUC>0)#Iz~wVDa^>ig1*wm_Vw{-hAV_P~_dhYdQ_54~SQxKyB%Yo5 zWDc}PmZnLcYnaP#DnRq`nT6mO_tbZ(H}xWtr&lGm`Os`=BBa>YIjzK@m49Y;Q9aAZ zDdCW^P*+=m4`LVNp%}=hqG+rk3@7`Aa9A2;R;#ty3Hqa}F%x*eV#H9+{UJ34baCQP z*8$)B`IGD;FSWx7Co414yxSV)B2x`!^!tcvRi4MEDj`I+f0x0jYYJSQ3P*lkJ3{vT zk=6N`QLEZ_D;dLB)3#e0W8jI6a6k)r2@k2BHZ`8CY!v}7)gN)Hh{WFmwcR-cnEFTE z8u71CV`A~B1GvaP+NCn{BN|TUPTacObM=LZQgme=mgw0v6_A&LO3gGEu36wC8Qx; zL02A}0boL%zS{tO)BRB!_um>a@m65yt!RUv@Vt_LGI_lh+axD@rmRo_h1%K1NYybJ z<55RSL(7J{xm_RiSHzC|9vcYm{b4N=HwaACm?xIL4~UcVMBQ1SskiV~B)I@7ru93kOEvBZ8J z9ijJIU9#y8BGAUkiSn(d**NvUeFvn?L|;6XahOG{QT%sUHgZcR40D`W<4Ojl24!%3 zdOEaakn>YP0&s@dlxC*djv5MTPElS;Tr+ow?d}}qvrIm;^ni@~=XcPxb1ugRs7l&g zs4^jP-R5Hw((crPe3ktTecYLX%6aq2u_b+$nz*}^l}!Nm?fVa(-fc=ggTEU<>g`gU zUycL}PY?UgzzBq&XRKH25fD!2g9>U$&P*vjvbVRMIlJM>;)d!|dJA zmQhdG|LAxM&OuHx50!QbP6%}ig#>$Z0pL*4qY$pwJ&i(n&{R!Mb?GA9un_rT5}8u+pR#bmcQp_>u1AB{gD z#u+-n$X9kRT~uN(<>!T7(RM?SB_a|P6YPB?>V~;ZNB$%y>*9^-7sAIbxv`*a7>;Hq zq^^?~65)yNCzIF`ahg$Nx^K>fOed|442*nmc0`rjbX9X= z)5=w>LJ3FbtqlgRN?-3tQKSdzsbgWVntOW~Uzs1??Mu+0nk)xj6nJl?bvJpmkhf!p z5bTqSQ{>2QgRXUTOhS--pf9;DofG^b`$-tzjdxv01a<7Da9`7%>`=Xi;c*VJ%* zCU2BU{mUAA@vWyK{y)5BNHHAUKF`qm{)4V{4dG~U50Tlh&X0s>_cyb-b+k~87fl_I zSw;dRsk>$^IaOU3*}rj>`f9U(QROKdlYYaW6|ahJA!`TG3QQ_M!^$@Ku*Hz*nHK6? znhQ{wojRUS|K8_z^r&?G!94wsz?E7~p~7SmX%WpAd3e`tl=$zu5?CBDIH?jnTBj$c2A9GoFBem#i;IGiv_;iZJ73v55uD^AzqNNAHNS({R`FB(JVjcM$w)ee zuPk3W^rCtL$l}jw#$p(1^QciQx8hJ_+~m6|A&k<*%7{E?sq()Hj{qaw#+jXeKh`Ux4~vZZsGxh%YsrK$Z9Y4x&o zNf)vpb0>Ku*N1i9lT9-K`wyM2z-YsAN1{`vXbgR^Mn+eysEB&skV0+OADOkyk5rxv zy@6ONjoIY_?7)=mQ2-RX>13;37+1Aqt>XAcex-`!jkBg8{B7N2#a}VP#OPh!Y`)KS z%iAwcLT@7c*=zVs`YO&W=-lBJ8mF<3S)L&E7CAA8s*XLCUNC1b=_9VSwDV+}mu>Fa z^QkGK)Zt${p>3BLWe-dw&5t9&fFnawQqko4WJuG~^lLw@nSq&E$`PcDt#dV(=qQ^$ zQij9}5Tmmb{PN}E>%Lq_S0_N>!ao$wo*@r1)__H4He55GgQPt>h6I=wc5h4wrw@I{ zK^s*h9==?sgrhrY9S|B?FLABH!{%K%Km`OT)V#|oW+$35l>Y$9_#EE#)x1|)Slc4o6w%)FFLQ^M*xs+^0 z8lOs{@rU=rN*t^W1x!@yNf){Q3FfSaTW%j#=k^PS)J8LKOYB)^d6l4dBELN%eVD;v zAtK)Y344CZ2yS-^O^NwIp1FO>Ro-6@%!01T+n8J5PKve-C&vfBc8!p8q3f}XuWSz9 zu8!ocGPaVMU;8ljHtt+_VidhTw99^YofxsBuKyd{B%8Lu0AK5jAYa5ZO(1WFH^`h= zeBS#qJ6i_5wY4n~2`6tTD;@8a*;A|Vc>h^CUsODnHLR!U21kUn4t1+|y&M-Xw2H~Wj!yv_f_j!-a%#?z^U4#AN!(4fE}zRqqb1}ujVOyF;1 zss0H&8#3uy^}lw>JjswyB2nB3mpvmO>YN`=#1ze1;L!K%N=ZW*n}+J!eU@Nw(NBlU zb4_4KGT&Rib{A(d=9ZwYAlEG4Rt|V;dkGj zbG>|>q^j5jVu-1+5lfKvu4G1VB`e!ai~8hzr#J-h`ZWi<^RtwcWN&_ko7d&kRS*&j zWnjH&dc7m1xJd`SK6?W4*#UqRnic`M5Xc_z7c%8^?{?b&kNm$*7x5c@z-PP3t7^gf zRT{s3DApV(rOlK6e#H6VYHzU`|MBLyH%RETE8U#5ps&#Mw_{g#$F-iY^R2(Vi3!}; zH6=6QF+;gcXCI4l1e&Uuyi*_moyz`wr%3j_XOoi#HI+uHi>?R*4KIV7$bUWW867Lef?EMM(L%~cq1H8NS$5>JbvYYF} zlt&()aW2jvy=NG%&pCY?r`Wkl#++E7!=1?dV!zOe)_Qx|Me5U-(|JU1L@IuG^L)2A z%8El3q4?Z=c5qZ=+=}n%XcOpjhirHQAbFbpZapQ-ejIClo4X1rB)eBWS~f)X>x{ix z<|S#neRniJ85Wn~J-ws1?#_Bau{rNC*WGkVo!ygr0v~Ew$Z_&T!$K)H(^g=&!(6%X zD2?VHc&vaxKhXW`f<)1)a%7;IE3JYBU}BH$z7i62sb&Gu&Y!&Nc-=QD9z7|%&uyNL z10L<#_><#EJsqVSHuaaA1MrCyhbDfxlAi>aiU|&0K+SRc-|Ve!M3(v|<9xDdp9$T& zGSs$5>e)nAAmYnuU5?QSI8(jbrDx48DJ9nO(o_40AiqNE7Eww$tQu!#8zi;&MPxa+ zh??mUtZLAWB@6JmVF7u*s7(x@3! zo+Fw0O>r9s?7=8SHQl!ZA8ZQH@l{E>7T#>iGctPWL@|tbcn$rZ zxgC{QC`g9HWj!e?I-dCbzih#OAx7r7`%}3VAac$LN`2bkk>(*1_rJu`qy?Qnyft89 zMvw(X3e^sS$WGrBBJnM8%0CX~a_XCrl$A${SY1tD7HMNxfh%r#7z1M%t@b@s|6$#u z?eZ_>&QQDt{P@Hn(4254U#MTHPKNCSdmofn!#&qSqq~M-F7~{wBJ9f((l>sZn2TP`x`NrdDLhBiD)B+={*4GKcZmX@ULC) z;mTO~4Ez@tW-(z{$nSpH$qjhbHAs`j@S23g>26lZJg}X1+giKdq$yG1?E+GMJ4dtaC(b(qm4m-VwEGh zYuSVI*@T0f{I1oX?g~{cVnV+#S4jR&&3TBXT+8a!U1e`m6sP%(zVQj)j0Zj7>w%#% z1<_fa)5ox%&CtpV_qxJDv1W~=hmFV5I_(Hzk2ieIR}o1Et8)FIqG~D2Vm`@rB%p*k z15FzYnOKF%uTc75mkz%79nWYlhpT@0g>*Z=c{lP9{1!;{ogWYX?ocW(zHyoLrupca zK1;Br>YJxLHKL4H6$b@NC2H(9FJ~1r3*QwOY06^U3(0Kl_;R1QykbAJhKl#S-|$T! zVe0}?%FVis?by|&_|D%pYGdTbO8bMt$$LhX4=2=8P^ckb20YyD&%Yasz+j^f?0_Wb2cuAv-?f&rn+apDSPeMv&Ns`Lkm-3Z zNkV$JDt=@&?X2kgF4rdhy4f!a|$ULFp+h z^YaU!15`NCThwJr7~~8=wU1hnAc^;rF~&+lsh9;%J-ygyj%~ELzKS9L4mjhgH~P@2 z%TzH$fHS-}3`%ShA1kH-b<47Va!n71DpJzx3ra6o8oChA%Y*9)C4cWY<3q%A@-;7j zUpit;$-ECA5I@bb|9?!qV_;-!v@|>u+fK)}t%+^h#>93ywr$(C?MyV8WMbR?a_>3k zyYK)0(cODL&swXhRu#B~O{I7TJ+;_gm}iNDtwqR?GB~xQ0EPAQvXWDkQ$z4I8u&@k|DUt$>>o zg5^}{*0K;z+KH!#%I~bwZLp${8a$KDHB7*8GCLV8DHl@w9XPszGSm5v1;?JWtTKq> zVr1fsBPg5{LnUVHg6G({YfnGjf9PWDFcWIP7*iD}m6WUKk6iZqBSM(ZD?q$1ElIQ$;ayml%ARod^M*^JB^nRPTCbIWJ~O_#Nx_JqYZ z9GjSTU>`GixG%|BgyD%Ou?&01sPNv6?T|3FQ8-z^6+=lEQRXB}OpYU}ZOc7n?aYqLC(^cU45|i8?AKql#Se zMg;**K9d`B7I+92tE_jV(UQ!$A9N0^7KO5CL7hP@rLz_L-}`3V>l>_v5)KY;^$jjL zGx9*n&;%V!%5a1cV_)B7gS(l;MjWSJHr(jGyI7$jEyVh4rzRFd=whiJK!iAKK-sc! zu4jKK!41AbShTXYHSpD?U2d2HR{f*2Ik?ZMd??|*uzOT|VBH{a&7y#NU!FupC4d`c zh4*(}%*-%+v3rzFNE2geAr^YW_Xbdy!`*gF&02*`nXj$aZ>YyVeI?_9`6YBt;Z20a z?11&Qme_{4sBf!@vVFd^4SvL zHWZA$0}vBI%mi(Sn0}fJBe0ba$17M0NE_w^#O10ebnKLi!YQuDC~!qBt zkd^(TvXj^Z{Q`|}qKQRzQZVtcgUs<*&C!j{W8U4b=JZ%q4-$_&PJ8%VC;u8JZsO2f z?Y>3focaAFaewORoYzh5JX;|0@GCU_E)zMO6FnoVUGF1Iasz0}){c(OeE8xzKyA!u zh%xYtAg1p_g6TNoMOdgbr>P_>ZEH~4Y#^J$u1sQ?N2NlbQvR?c)OCij68zH{_fiA> zmyfG8-2U!9Ei$~Ddmqn!qV?X#^C*}xMGzesG#F36R3F)u2M41yA@wv}DVQqa2gZ1n zP*IkM8PHXXzLT~z(vlXDR3L5B7CxEQzvn)|wJhP}J0g-nCYG5AsK-NOiw~h6J2IHd zKzY*HK9s8tyC&_FJ4Z>qazT&xfhveWMqU;UfDY{V);E&&1|V1wB1+hy?|@@EM4)W!;}XaJsJ4 zKf}!Fbq1q&Knmw00voKB)KUrmlnGNJiDV5h1K3xcV1^i7U5(K`(gL%lZ1z&r2v@8E z3iH0TyP^&ReB-3ykft8z39Otm_=?m+W}eb{Ftpm+=pofCptf8qE35M7_Q9^j>-<(q zpx}ca1z9*&P8%@Z2u!c%0+Ntg2Kz6^Utky;g~4dadHkYsPYz}xS(m$$hb=T!)f=LI z*Nmww?f@K?w6%Im{WAx2{r=(`$J3#_6jhWF-TC*5Ep+`U9=_eh}R&GrQWKFK$l+pD!eE)9%QwvxYWC z2t9EGPPVM$ZbVQF$ z%7hj;?JnIi7$yPN%U5O$h;m}8&YYE`w0;)t9SVyl<6Ot?n(Kcu_dITJfl0>E;||ba z83Yb$L9zUj-Y6YFYY4}LMeV@43ui7)*rR z(YqZu`kt2t`|lca@w6=DbxlVhIM9Qq4icX)ZyVIrR^MmoqK={s%uTD&6dWz8M zz@acYY?$O~>T99z&1H46qux*$_l$j7JV*R^Ze&cOoX}A0P8_vcve0N(Dtud2I%5A` z`^3Wq@Gmr=&o1<%aY<2F58(55d42f#sK1RXz#m2CCo%?L^43tQ9n!?YhN-udrXiR2 zhW&i6{Xj3J&`FAT2vpZlHMBP&9<{+3t-qMBPh%$^jl$RkO&q&982OJTWZX-(0g^i= zZVS{e4u}kmujii9w(}DG6utGq2Uu-}ciX&W67!co*=+bg6*7 z-Ta2)34W1J!^w=*KiYGZ`gAJrj@OjJ)x?zB-ny_a21G-cEU)u|NR_)MHs2L~x@GXe zx4s$RblU+bNezU00)-M!M3rvDi4@(weMUwI-M)W8f`R<&(1{#1V$rK2(+fo_1b+a> z>h|-8xGodi&jMa9m15=tO%T+0#+|oivnU)UUR;Byv!OJI?C}VDT2eDMQd63k1pr4| zNn#5rD=S{6QoGT1UF*&PCvmu``zVj(e{AI+3a;eG6(HxY(;W_Y>k@T1#&j7W2xxca zBnhy3AV}meTo8!JAg`J84JV42=P+2~FE}4!@{y#NYYj6}AUqlu{(gC$@{s|nwgGb; zk6_vY*?iSXN%BFC_=PE&Jr*5rIqa<77|Z(g(zXMe)bm_{gztCfb+~w1PYE4zbL#$1)-yAs_)#>ih9&8N5Tvb-#$b%ngf*)7SW0TN-0 zS0qC_>B)$rkvBF@O*%R|WYV4pls)$5xaY-BfX;>8bof=|?2Bw%*gMcA=;&UR@yh zfF#+e`%N|{T~*rF2ls!-Gu>Ac=Wf!|MG6XiA*iBi+tTOO?R1&q1Wiep!oAh$D>Oa} z8mSa4!YI9Mz#DR$ZYdMPAPAp-Xx#L6eq& z3;VupiO{t&RC-k2hZ?p*6gR)O#WwR5Pm>I^1!^k6+n+&R0_Z`=5T>Hf_Uk2gMu4Z) z((Aq+*|C-z1((a2XHo$HT6Nhb4O+{(;{5@;*1;6(9~%k&I2>V2c`gy@I6S0{Brwd( zIQ6eJ!WOpnbMu~9_v9LA5d@JWRSmERA5iosj;Qad7dIOK>%TNV$}2w%4X+ZhBdlqh5YUtTb?{SQ0@eJLe65%QLC20NJGYYeIS5_`AB9i#1-S)on4yFo+` zerEAQ4$u38P=UU5-p!{?d)4z3tTOjWfa^VWd!OHpH+A=Oqt}OiNVMjyRb&!LC~ z&0`3l17X1=P+mb$O4*RRM12_{Hxn>>8sFHYTu`8i#qLGcu{yA_Y0&&RiUx!aqZ;|X zT4obt+5#6e4EW)(<)>rNHPB)_;@?Kw)k21-fiboe0O5g@@SQg}jk^qs~H924EBV$;U94Z+GPs8czzHCGvoKRO6B3NlGY^QhyV(4V$NJ#t-N`$kG zh!dMWY$n4=!SxHx$n_KIr6f$jaL>Qv+MZvhRCcz_tMcq$f&;^p)GT~-}ZwZ$d6P z|5zN@4c6q=1L}DHEwnnLLvg>*xa)kjOb)l%FB&F zm+WGD*|=^Uf{_FPa_@rnNA7g#mr6P%-hUNo44TMuASe=~CGK4ZKqHU>y{J3=(YY^c z&iJ$vX^AGv4kQSye2i|c1r)ZV!v!I6T6>GCLtU=r6aQJv!8_e4|`hOQvdW*o7= zA?K{qgb(a81b4udJt-XiJ&#y4qfeBTJQHyWBO##h9U9#bFMDyoMFO7v!K?JHup+lX z1Y`JK%Fi9{8Z6uqV?1IQDv>HMZe`HvIgfA}$clQQe*WhmxkojWNtCBLfy2A%AgF;n911}<1kG)&{8FfI<7Hb?Z+ zAJgs;K(E^Yq&b|~US9>6nZGjDFpOqvKjsy-L$ejPGcIV7yxr(;_-8D;997f`+L>|F z9&1w8R)~sfVoy+4DCp`zCAvWf?|M3)ZG^E|^Ee#7^UcY_8QBPmdoYD7@@ni|hvAc> zTp0=9q+E?*q(oVHp9uIu=YC2cE@)JdKmLiBHxcx8z_y}^R8-T7kbh}M3y{4c9k`@8KDXR?25nE#~~Ug;xASGj=ESj`$~y4GP8nHM%_K?tPiWW_yVPs zLTQI1^XI9a-VMRL4fmE?@`{;pzpoGnj_6eVu8X-bD0o|q%NJqf=8wqlq2i>}Qo&^Pat%_9Gw~?Jn;4(H~C>;hBnw}XN9=2QA^hjeo?1NYj3jpHyf{iZirWf zx?X!SDwEt*ocn}lxv(M$hlQMk*_NAA_tqW~RKs!Bc;q;U9zW=(!*>=I{50lUMUBOf z3UA070$-R~ee3{hGnjxd=xlA*`~l?tZOq)EYp21hVHGTvNCoZe=;3}Mot}lr?PE(3 zVf?8n`TpZrLga8mGe?*p<3+}Oj6Ckyknnt5tgcOQ_)03^kb*lm)3g`$%71ty`v03$ z7BL(Q{=kWG6EqCR040W7sGMW<;&$GwR zh}j;!IP2&iwcOtD8#6qs$iI)d!CG2>ZfZlTXh*UKL7O!AyLkzw0<&2E>Ti$tH+6!t z$GwWdLwj{A4a_F+WU0^Ph5QO@YD2>4Ck~!=7z(B_`{*t=lVwEkvaADWCKz!Cp^J=4-HJHzl-WTi(Iix)A?PsDS97k=X;d;_G*78P zvQ6+FtL>>_k<-z5-IHV(dwaxk*sl8yVyE+eH5Jl(8&)4FBbl&%k{(HnB&w+{%`{-r zXywOm@E*#p-dKy^EHhXs$ZCA7yUCn&nm!5Ywl2ML?Do1@l)>#jwKMOz7n%i#Q zJ0mj;X<>Xfnra1EYWRmkvxf#N6WQ?X?0576_V{V-RP5NE{%cw@7M}!nwgk?D5d^%S zXhzA@{;jebbB0VaE+&MX^Eli(zr!s+kojKAafev9*b{@#LPa?7DmgR_8{($ZIi+>d zNypGxWIR!i4Y)%VjCtmd*XXP26tZ#GOo366xUQ3^uVM03S^ogLU5{O-5s4H>VWY)y z&v|_>TJkOxk(ENMm2ZIr^3JHSg4=q>SiNW1qO4-C+(j_ z-0U62{{hP+YS0$GUzy)&=3ZVr-(`qJ$>#4y+_}@LEXV4!w|q?LpMS;8kqEh*!@dsF zCWM!TJ6EEI+yOXmU=3$y{F(j;5o@9smR?~k7CAltn3tZ)Jxdwvo-L{f?jeJgF-qGx zwPD0sOen05D>K`t1**f{}#Q(Kd;;!*iwx5AIGcLSm1O|zL&ygxESKPSDXn% z>YyVvx--MAIK@#+Gu16N-BFO#v3)gU0}9$yHO$=A&3wz!Ro@(W`eUAVhUEu{)~R(# z9hTLK?H~yOmw$mw;Xw?MXPTsYqu4=kjKM2PZWh=evF93VyMWef(myZcv+39NH@Xwf z@|h=A?)#JOQ58*yP(|pw^cr5!e)xkDfpjuh)N%W&(+b~F*|_uzAH>3VRzBq42f>{Qf28bO-_DNf@MdH$L5R&5AkcNs8vYYG(b`tx5FC{4oWrgUA5i}f?z_9_e$|J7meFOOK4E_p5Nos&!e(J%H`sE2 z&iGV1CxAOr0_g{t%ijb)Tu;^Iyd6UB=!{^~bIJ1bXX}mgVzo8>!Gn<(S?IARb_W#^ zFtjQBT36f-=zoTmX@AQwO6V%Bvp;ai6L<*q3&S(*`$bb2W)Diy?g!2%a~w=L#=d=G zEzoxwbUVgC6LO+Cw3h{2GG(-+mNY0J5I+7aN_q!_vtlzK?)&L>J(ulOU$YP~{DI7A zOg-_NV|zFE1>XB5pj$)PWJKZe8(grg1zo+Ni8C~v*X2llvk9ayY8vb(b6cIZ3A=)RoozVOnXklObnt~=Q_e+{(66*)sfwLsfsh%Vr( zBBy;VhCOZAjs_fLNVx447%z%dS=#;3)PoLmGH!Ej$ISU5GR3^6p$PZ6LrQ+YYp>#L zbU5Rx<8@&Dbir~MuhxpL+D=W*i_KZ*$3weP6e%5#bu)4DJboeL(R31m|llx7EMC z2Rp5?K|x%_nx6aekE@Re~T4=B{A%NJhnz&()#4s5V)hI0UjC6wT%A)`+cNA3( zh}ev!nBfIzULw0>Q<;lkf;Vl3FQcD9u6_7}(EyK6AEV1E$M*>5>v_kUg{`)i@;lf* zMieBhg8vD`5a``>u8b@{890L_7zb9@O$ZyFhDd}mb-WgwXNEc;NC2YP0PefUcrtvH zTGbD$;;k?{Y5Y+{{KYi!uDRg92TG#XPB1XS*oY#GxVx&0sWRJ{a?g zKlBxoR98}u^2Pb}_O)5x0K#i8_g`QSMb_REb#{Em4yV!~xXmwWK}dIC zfCwEy-g|^kOi%3MxKakQHpAn;AI%+I4kVPz#S=Md>F(fOZFHA^e5!%S3`qYU0(?J?(Jw_A-W0U?>;`$VCSneNlm2%^Jn zEhuaRZw9wa!^spfv*kH)@^-&p!$h*%49FSL0hWd^?MIV)Wdw)l&!m#)7rXph1bz{f z+4?#wMnV zIrV7UNJtl$4P!#Lojs0LO)f|;@l-}4=0gS=jIaVD)6yIw%GZ8|&Wl`6(8Oma3c`~i znvISy9>Wop)?tYTKiAa&3mz*K-}gL8P5)Qr1)m z`*sB8Ii=VbqebxHray2VP+-Q5QHpEY;dnO=rrm}l&fsc&HkzTVLjjb2{A+}wI-vZ; zJ3kFGkmJ9fsMj6o1P&;hFUBm{1bXJ2)5ZUw<+=mR5>u3Hlt}QJ)nd#nS~zh+o2#N< zgP}<(HXV1Z>1UW18#ht4HtQ+4ZvIs+3Ykb$cKBq@_f#$aaDHjcn#mjmJrs+cDD)g9 zW;`yFEALUQVbMa93e}}6qh{mD^D|sOaL94#0J7h6pTjj+BaTwwvM6-$qIY4vYGQ^K z6yB+XVM=&(xEJ!LljrKc?awaZkcj@PztD%L&12gaA(kRSPEH`>u9qDMB`8dsW5S9e z1x5*3)VpIiqzq~zIpx`L?&nPo6sSQ|0)LTP)i4CcB%hLPU{z zdf1rjY5Z+~uk%ThA;*$6tIijJr&60|vLl=~Dlq;6Ha#22*lF#&uUnF5ER|MkC}oE7 zvq{rX(Mn3?gTdGyd7M5QH42^8rT^Qg)MvZYXeQrb5-F@WVtdO=3@e8U6@m&GR7m7I z6d-{9+GQe65~BoYUie@tJeMotR|CCH{op4OT$o~;;t9Db4_Dy1{K4$9CMW?SVKwnu z5_6e!RSE4^L!^}4Cp-UYPcA}*m z#I*&;xEwzPl_enpeF@%3(b@s%LGa1Z)n!x-gO}Gt10c8WaN(;8w1IUv#NCxaL^%+J zOn936Y)6}Q81Skd3dV-aumnab^j2BAEM+RrOxH~TWOZMA_ovGuP9mtQq+{nE$&?IK z#J`;a#D$^~pO))4FXgJNtAQsu zLwiR4BKkT|B--!f8=ckoJ>$?*^v{x%!xAD1gcy7gNPMAZt<*zg!QuEKM~VwBP=0rp z`29V)opshLayEJ^QLA@^Ux9h^nbprqw}YN9;sshZqpSfF#Mzx=!(0{uk#-l*hd#7d z&u~=zvwX<|=9$Yw?5_?^ACy2{B~JRoR7{NVtQJ>(IvE~xsWPhv8x= zK<*V~ZtY7CD8Bn+tPXY{8OpM^-b`qP)&98YXzIX9KaVJXus(M(i2h_}J^>X&!H3A7 zKm39-;$nJK4}4FGUv7nv^|h6#?N;AVZ*LW<)l^i}4V|p9-(XSGGBia*_PrDQ4{oAD zkugp4=Yr=zK$DT#ij0U9)pc@zow{zv+^b^YwMCHO6J*rHQv26xtfJ_bx>kD+S#3sx z{If+u{QRuRhDro|6as(bJhgke<%g15b8qM1SbVrK(BGMUe5Cx%=IyIMeQ( zVEuZ0c5=W*0Zh^%PhJQpR7hc+DSE_hGNw7<#Un`)BT=fjmxKsX%t-!f!&gjBxJF;7 z#eo0Ki|dj)=3vBEJdWVDR9tdmG^-azMMY)2WyGNLai4*(pe5PKiIqZ}r7$l}(XFV# z%-G6|dIBikV@;?kkoOiV*Qp?{3nO6M8Y|7Y-(-CB;Qcl4@}0lu@y!&?&hy)A##Ed4 z4)uU#ds*QP6~kCyLCD`n2;?iy?Jv_^!`6N_p73%m4m2m6o5;w#N4cGwVH&JL=9q9X z5jbwC!uovVWYgg~T;eN{yD=I{BoZAk5{C(2j0mcC_qo`xl6yY~4OU#bF&cWo646kD zIMH)kB~m7v$?_l4#^5P6fRW^9tO_lu{Ff0XPS&V)e-Lpq{*A^(tWxXkaMuMJ>@qt$ zQCXMoQ&L#`ZX!;TbD9boib2aEjt!VBIx1qv!_^k_bGz%mq{B2|6(n8q5P?X<-)G?Q ziE=DGjAuS%)fxWP*T6a{BRYF3vPm(9m+Encll}aLeE(^F$@guqqvG{*_HJ#{>(ZxL zbfMzWN|N5Ob_oe(0h;tp$d?Ejx_2*C;0jifGCxhvrVj#hqmyo2EmduO(xj zUn$H|$6RZY<0XSSt!^Y-?OZm$+cJWCZlgq%+MhxFhUvU;sK#ndRh_`&gPEeRUCwyw za!(d`m4K|=hvfFS%9h6p_rE4jwbrGW(*S^hZFmE@iK6myIjB2uqB(@AWi%_TjH?IU zkwgk|2kl7BEiCz!c4RHY&5;^-HndcAMeT%0CzCKu{jj1l5NaSAy-YMrfUAL&L~%!P z5MQU8QvA`j%q$eXCTkjt)SAaTo=$6v(3l^D*(aPZY&f9fR<}wrXV2mh@Jrk7VA(b} zOTYs|UBa?BRs1^Df5Bw5SnW0j@q;SU$uEV#g5;q{M+$}|?c6JPGnld5Qj#_*mWits z$j6qtzCcVjH?evb)x?nP!sFIpsSRsd%vSZYoSd6|s%*BeqdTNW zjG?T!hcNw^j77V)BjTip5cM6E7MKG1Fl2Fu{?s6s=W;ZcFC6-X+raAy=Os#Ow;fdY z*sM3jKdkfWC>xWe))tcgnKpj(jvj>sK`YM0CeX=q95e$tyxc$C@=Y@^!_MhRo}h4tr_aSLn!qke>kR7bUl|Xkp`>{38?iW2IVCc0mb~>>c`N==ki(;~fmf%DjymdVy@t68&O zaWKpR-fw9ARbms7(^Kur8e3}PM~hp38@IfojQbAM0QLy0GpKtWFUxC-FMoM6CL~LOzWV^kzDC zYD=hTjNK%M#UOF!W{&6kc9f2`UEK_BIBg}$h%~G^9LWw>KJ2ke#;_$I&R zatR-X?`Gj4IvsWUjfDDsB4p4w)(@LE+HFn0ZRdWHUH0A+?x$a8RM+oV2!IZeyuZ683OsXuZhg)0i8%plY=d1qfkapafei`7N8kI;>otNmFnuxndzWC1Ul4+#j)j5+A%qZ>;MPXW4)l=7weXb! zKZgIVHG!#CA{Wk(boBto6in8A0L>{L%qK7zUqKqsxB(3 z97<4`A$Aj_{ko1Lu z9I7~3Q7=iv(F}u3RMY(c@B~snQUULe!+KN7BqynJ;hu~E|M#v8q>oons3G9qB&Ze%5)-{_xYTu%IF0r9ebX z90D5v7|PU{ykEgHdz_I?BI7(hBN)AeMUDrb3~Am6_}q;;%egoGApg`Y8xG*B_pc7E zDOly49%l&x1E%SRr;L!1&M(x*f9-tK<+p&z|D<5Z!O8c$XGhp_CW)S|w4k4)plgtj zcO!@-b^3eY=6K(7uYt*MH5Qvw=w}AUab3k_kI8|zK711B?%4@hhoO>?ySHB~j$gu1 zA0j*bE3MQM%N2|*md1*%u&cnrJ=&f-VEKQ~Ft>9Tn*uqYUSU)J876XujL5uR;SWvC zX_7Wm;e1s*`}DphCy>bx&+jVds~);@JofSm&4)bRbiTrS-?Qi+49JME2+nclBq76r zE9Q)&CH>|qK2%wkKfi4tSB-B+FKZQR#EwMEYtLKUm>*{Ci(sW%s8}%0O-@<$U$ct* zC2q1-tgB)Y)4Z)Tuap{*RVu2Ubjs>COvJ@NT*lf6pt(3>#a3bEqf!~iadN>-Xc1{* zr~DkAl%2~P|EZw(Osmw=#6@VELVD}CBzoS2WINrQDV6$Ao??A0WtNPuL<7~R7P1qm zMVRU@kAZ=q<@%@p7oB0xeXhQ7pQ)zZX)Oee-Dgtn0Y@OKIvYfy>Rt>O^y}Mt8ji|q z5gof_rlbi%*wlATXw3q#CT`?r!_^^0yYJ2F)gu2}?!Nx&m{ttxq{kcb0p+JIJtFA|$VTD>nmrb?QruTs zXh*1hlIo&x*;8(fRu9-}ws9Tr8^f5#85A_JmkRy;NvNto*Y}%O4*!v4Ag85?uEd|y zMt!-KWE<+wOPz4(3>CyI-A2{=hkRXiiqCRa(7nN9n6|K%I8Vmddj~J$B+0=x_iiFff7MlDLkh@}^c#%iw@79-H3>%}Ufg~CV@=t(ub0u9-%TP_6A-^5lsL|Mk;z=17}jD}3wd)=N| zL|?+T+GQxF%4n?im4m%mCWimIQtnMSO87g|EOq3Rw3$nD!QV26F3kMgQ-Axuk)S$( z`AOaY7X51gli@$9^|WirM{i#B!INBhv7*uk-i#QL9y-&K`0;ZcdQA5;`^${1VX;%h zpuS_Y$IU{RD&#}`oXQfjy+{3!CN)ATfcsGR_N790^zJevFK9ZEsOh}k~W+&KQH^nU$$*lj~z@Z_dJxQ(;#wRvM-hRxKD zXpM#MqR54!%WWb`N{bSbQbT5{+c{f0l(yxf@$A3AG_f>n*=2=aD)X(>q;S|BM|pl4 z3ky@F>@VdKP-nHCZ0RTS_QC=0#DvnOF>EBMib}`a$tW|OhM@K&n2H&2&5aTkf2CU$$G7jtFPU{v-UQX!6)_TbNwNjAxh)Z^L;dTc_EH zrLw~Dnui=K(*-6S1_kN~8cdj2k}E!$SZb|dkPIM+}UL8Qcg zE0h6ArNGKjqM%9i<{4Dz02qzETW;AK;kMBfFt&q+)^xkM)gHt1Y2T}vEp zrJS$0b}W@~5}Ie#+Hk0PtW;AWKq{ittQ{{YD_1_4lOX9U$1I(=D>K7YT)Vfv@BN*M zWSQJlxyl6gukw9)kFqVYW9|CKsSs<$I`XOduT=Gr0N|AO!{!_QrqAnrmHwiPXh(Q@ zIMsm;bB>|uA??kCM)grtDFwwf_D=b<mQa;I~dwGdxTq`}OY~xa|)W*;UliW+iS(!v?^nKyrjFU))zWyW)1v`0;o>j18iO ziWR3*Jh%GF!i2sltlJ(m_KS7Vx3gXElf}<*REBKin=_2~v!rI5ofGR?!^0AYDcHs- z`Vgw0za>N~LN!Bk_bPtb)W{indWH`i+_S1-%+()~KUC8jT3Y#siwcZ15kC<0L=Sp# zC?*)1DLq@Yl+5?sQ`hh`MKTiw+}_$LMNC-OP*aqF^plz?D&>ry4KLnJyO(X+!*l4n zp`U6+*xw^=Lya!B8Dd)FR<3%UH&@k;8}`(~wpRPQXuHkVo1tr)GR4^Fz9_Wo6`Nm!}+2_k$?`vN}38VDmj7<+i_e^19Wedc@`? z4Vh>y>kkK1))rRtX#-asPbnpv9Ui<9VS5lZt`Z zfE-dJHpO0F3P{AQnTG}yI+3R&B&VP?T4t-WXB3Z~x7vTEtbE~7?cfzL;-$KqES-3B zSkp>&7>63O`cKk7Goq4rAWIVOqIWHy@3|Y9sFj}uJe%Bb?EENK9;TkSGPRC?#m@glcHkwj>PAes(n~QTp>sF5LPr8cfa9T;}{Rf4vjh-*UfuqI-P z2nlvFUDA4~`}G<{T1@5kf%Ze3sdT>ST@$&hLNZix1(Lh{(u z6u`8ybxtd1dSQrhkVUQ`lA3Z#?w2PUQz7tNouG(`W#XtQGNYv#?a)kNxg#9(l=?`( zEkslrAHF!8mNvM_+80k@-6655)VKN0TK0PiM_sH!c}9p9l&z;6e{pf~p1HYEBSl=C zwiNZEbFO!cffSi`%TH1|uAHzpmhoUI7Q8T=a41Q3%#^z83ObEY`P;-$f?boxG&Gwy z*PjP-CDdXwytDpfxw5}G;<9mSr-LoNN`we>{=4Fi&cpxB&&%5rvlqb%qBi4u$p?RN zPxr^Z9Lw)OXIX3|3f%9hPa*@eJa0r}_+LTfKlb1xn}6+*f~Q}%jZf4Rlyhdr{qC>& zEu%M#K^<9LRBD!xktC+2%2v4m-}Q9m)^?cgyNv(z&F|&aZGKrv*wB)F^V&B?x?TSB z2s>nuDhZ9;h@CPqF09~QB$^s#2P2MuwP?9cG-1RC|E7qYz650$>~z)k(XD zo@~^pAt5E-XT`ds57@0I@Q%6MbW1YF=Z|h~iRpS`O!T2>yX@TB%MX=X5I7)fWDL66 z;q312j+&*j#64s62!@lp?-?kJ{Q!>Ya}S!#iI@pdTUw?A0o?$vV@W-3pMdsuQ4HRb z0{z$#)it75jMt|LiVu$5mt~f=D0TJ(g_cRPfz?IFuW)j7w@n9F$dzA-mK=;cT%%1} zVhMMqQdzN4Pv5Q=+$Q#OTP)|W`o+F!lS(X|8*ifLk@93#=%8K$A~i}TcOe&BFSWHu4Po6~-K_{ry6K+`=*@*r?VuRQ&poepV!!qoxdf=>ie%o82h@ z?d6(qU)lA(4E?gHa*~h~nyhRVq!Id%#MYWiDvSM47WcS#(lpb>&x!=){g@-+ecq9d z;sFRPoiEk=nPlVnEg@NFtoYDR9J?%M`dWRK3ok}1^fIM~$e%lgp&FnTh*f1q>q=r6 zy9aHFX|Xc&#y?t?hw)cbuX#GPA{v>1zc(~+`SfW{{3FNBcH(d-e6j6qLQjYJV?8g- zPT_X?Ekxm+-sd0_`ylx8o#N|96C6f9^7m&==7~~lw6sT86`>K0Kc^8pC>7nb5jjzu zCAK3I1CsgUzhdJ$o~~Q@M+L4MWoX*;|uNxk++96!HDu0Ed{VMNTGr z#a>Iz0)N1Jm*wXF9gU8j80uy63bCfy7n~w3E$m9l^Hbh{P%J^Wq!=p=cCXwII^EH{ zjj{2l=0_Pac|M1p%T@Z5{npEWPtMKPQRNL4@q3Q-VsZr{6ImUD$K>w1`^JDtY%Bxq zPT9^buFNOw3EEo1(%O|vszL=xJUpBt`j50!!>Ua`FAP?ic_?FVnR%JV_o_l0N@SaC zxyGt_mg5pEeo55N8x2}9S<@*Xqtao3N=J6zF_1Obo(gi~oRm{eU=;98uNoktDoev5 zJj{Ds@CNNRrtK!wYs*GGxGnH7ixJuo(=`LD0zn35zIQOhK*vW8=H#6yuUpb^72j9s zElylS@5ANt&sxm=&=JBhb)l=ew8*1e>+5?0c{nqwsHmW%r!Od|0%k>#(k&Ez-y|3EzMiq@9Azd2kJiRgR)9zF6(_j)?CriC+y0i&Ab(U3 zL9S#A5b@$w3leQC3lmE;iBCYtfi4L(bAVmE|9y@{E2)yArmU?jqh?8j-i%&UR2&zl z^uth%IZ;@gYw?#fN_x=<1Jk-s$Z)v_g!l`W*EVan@gG{SUm(MIc#6%2s<@Wftf&9B z%f3$bR4DlZCWI8FVG|kDQa3D6?IoOk9hk9X$uB8t4QU7ExxA8xSB%1-P9{t23+oEO zorl=ISAP|CN}Soxwq{>cqnA=j94?MuJr4FLH;XmJFl4JX+rkglrC<^Y;N(2YZT<|U z+|wl;7Bg*mWti)E2Y+l!b{(KuWvVF}xZT{z;~&0Vp)EE_lcFantJ~}jG>RYN;27B3 z$Suau%fT};@1ua=Ei#LHN8a7X#A&vMw2U|=$nuATLSW~*8qLy{bazK*49I}sLps4m zPR+_Nb^avD;~pdKo2@T=6PTU>)wVcBg`2;pCpmHG0#RBXo$?G&yJZCOGi9 zqWQRTV|0I)O`rqP^%pu2Kh_K zOBoMT7WDL`jJyHq;IcMr3X^AZn&fy=L9f&d5{+{@cd;{8!243`1XlDT z(j7xbE0sO{AzD~}D1HF3wx<~O{{KhRSFpvgE$!|Qg1fsr4DOmhaCZg`?jGC%!QEkS zcXuZ^g9mpVhTy>+F6TbqKIb2FKfQWY)oZnHJ)vj>@wH@gjiOxDt}Ut4!Bgu)cxadb zrsvRp8#7yrwddv;52E83te5uhN8Tv>3QhexcrepuEOPpZkR~{-hz$OyFjiKhuPBDd;daeuu7h0(XBRdA8&S{oh-$!0|ULo_Pe=t zkKuCb$^cT85}FFJqQF(?1YZ!+kAjt4d7&yib8X`UUYSm++1@X>EqarI;iKjK<)2l? zD+!#wW)jN&0$N>OKCYV1r{^Swr43PEa@~fa2P5j?YZoh zBJ9a|v-C3EHFS+z>-wc#GLg^J)+&!yXDuPrGHILXfn5b^XmXj18UuSYZsjNliVx>& zW=AtE4D)M@QrV#6x(2rNTzuGD5XsPk0X2u{?-|vyW@f`&BJ-179_=SEQq)K6L3i^ zoMyiZY7%^zVq;k%xF;J`9IH3pE&s1f2)Tw{mH(wTQg?WWtilE`soi_wtcVYS|0%x= z010aK`!QQ(o^MipO?KC8{t~`HEAW*S7lTGB+Eliep&((|qC?(Hbs>LjPPDsOXQ#Se zi%nv+su)o~YjKW4oD}(nlzRE7@H*v)y4fjS;?-8go~PoNCaFb0bGBJhnxEuY8rW9m z!Xs5R{y&Ug8-NDueQ8m5qDC^{DknOE2nIo9&1Xi zOj_i2DHTpd+0RIYZp4jmqbJWr! z0W*SiM;%ec-A#$Emq(1?B3YPYT1zk&xi@-4-V z*$N6dQF*IXXfhh!bi}Lqlt2+?nzuiaVxP*4Q*zM3>p6UcwUjBa?f#N`ZHN z?o+d;%6W5y%fr9LdFFyRNIt&{H3Fo8Te9oUk}vN0%!H6dRacU%?@sDZf8KqpRRI_f z_OsxYYO7+@Xm+pjccWfGq|--^x(~kT(UPdX&V=K%U2>hX_i$P2;gxz~W#>KcHs~S1 zfo~ncpPkp08WoUUPLYz`n|A0Gj6p1D{f`XJne3kC?Ia*GU|UrUEsL5 zS1wh(KXR)hBlMX$dpy4jmr@f}Ym<30kE$_)PCGl|;m0EHfORna@b~%3RPBbc7+=+& zh`#b!VvjgUh^QK%P%r2;0^M(w-KiNzgq7r-ehAv2?#U$$+gT0coy2Eii+xr z>&cXE6ylSNetiv~-xJT%q>apDw$hb1=ll_o)lvEICk%b}k6;vAGpN)5056el%Gtq6 zcN8?*>0+Q@RxV+HKSyDESkJd=A+aF3;IKac44$otf!&BkznhyAiWVwE=xxx_Vckc8BR`XM+>hlz$zYo4Ci)_A1LXBBfK=Yh}_( zP}-aRk#Xdckheg>0(>_l`L&bws@^DxCq4FEf|ANr0#sF|49D_~L)IgN+bj8{F$ih5 zpo%{kD8ph69OlE&{68`>e{b@aIqV~MNi-H9Xsdh=-vm|{&DIx94{dY8;Jhp5=hI@s zk>R)RzC?~DWIhi5Z0Ef%-tP8RRGeGVZ^=>pntGnoPyTV4wOiw>mpE`r24-JIOJ|kv zcpOWjzvKvT$+^h#5VtmQUO>8i_rj*@ti}oogu|{+OnA@RGHlV#_bViP7`fOu*qLrV z4J^-IT01gWR-KcWHnQ#_3EjV-umAIrokPK?aq~M9Wz@tfEsr>$uPblbOcbwTDO%(*5%P1g@JUE(Y@arfB!phU5DEWNp zpE8hir&iQmbQ)i5HZP`xmRs#{+pV>Nq>vACo>~R&h+}^#Hh_8Rq#YQd9d_HK;$Sq`KYYZu0+{F3)2=HEFLkVr0LK(@hNu?;KH7wC1d&$iZ`JQq!ADm>Uv(qHlAB{pZv- zB>z)f%NJ!#h{`YNUs)rh36f+n$P$+A12!txibpE)M`{JZ z?qEd=tY~PinqWm2Jhbz4(Sx5?rn?>Fa1@40W68-MOxVt}cpUPT}w>TT$iyw{CZ(h=sYg9Vn; zy(Phn1$kKE5se243_l6Dp0TK(#pC4&PT368RCDQ_4i2sGEZL{kJfQyI6JDQhn)aCpf0 z)!Z&wUWi9vAxJ(+@g-p|(&gyC1VThx^yf-Nmk(WJd}Oup#&P($VnHI5WSNZ70D)|r z&JVdlEQ7qUStoW1;#FOu`yfgM6K~|!&E>ua@_^KUhZB+SfP3ycv)?iZxygs{)3e3E3%jr+zBZgixsdKL`B zDdL$m)b>6|H)cGTva$c+MdIMyL!Y=B6)}RGk&A{591mNt6?Heqe08KZdOKS3Iy<2d zrF^Z3Oy|R(v^}&oqmu%rBV#1HVkQVt+zh8d67k$Q1uDB#@BiLEi&Oj@-;_wzMp&im zNQXy^*<~!Sizw~#V&*eyj0-LnjU_oZ`;EVNQnuw1?n@^RQ{0TIfoFjP_WNkT){qf{ zSKvS|K_7cDNUeO)502t=XROlO_~PvpMDBn3o~PojkI+&uHtQJpgG64usN3`77x7Sr z4+q@Jn=gc~ua2VNjRTkypDiJ)X)aEoW|_OFxQk-tSCN3XrMJRDIZ2T-svt{KFjAB&1r3Pm|k=J}BLt*zwV?J)T z6Eg{QbF-yKp7~TLrXvdHj1Wu< z46jjhjGJvn`4ori*^p`UgBk;vmqV2M$3UXAkGY_!h$+od&E8D@i=CBi0Sy~=R6uGU zSW=jkJfgT#VA*6x&&WHzy)0qa&4(cd?eBbqKZ*tOkR~cliEjGejPjbwl8Uk*B+3|h z?4Js4Ec4Zdit?@>kF_*+$&YtIb03Q|t4!W=M2~DUmzQ;ZtsK0E)`!O}8oaaa+YYNl zwhR*rl)D*bt4Rv-KD2Y$(&<#06_?^vjq3a{5k<5FPE*WR$qYHgl2H7OjPaJ%3<+j? zPhT4z5C6Z)%gK8?``X?Y)mGj{A1P;KfypUp->xQSg?Ob0S)x!ILz1s`kC-dVs##0h zct73Ea{uJy;C0vp-&WqvsTe64Rv=CnL^+9ng0E?hpb?>Fl1^(v1s6tG_b1{0Y}@|Efq`5S4_U@md^d3k|MShtroFpH$tbJ1wg?uB~J6l z+}keww=7?|R|pQSh4CeTeMT&LU~h@6#u7(MEh96OcGvWKUD)qWY_con^LUn+Xl?1a zIV1bJgSbk04K+dcRzKps+0S!!#J3PAC4?pS_aQ~;pj-lTPdhjXUna&2IQ=Qf=V90e zHM=&v^<}Or#t9`%tYY6!(m;&MH9pRmX-Cs5K)|SGh{5wXKG`qahJ?fvWwpV+KPQP$ zNoqzO($4tX;`oT5An`|K*9tag!*6IhuaW{2@3~;Vd?%UEZ@x7k7~A z(Bzh;zet6}ijp_e=al{HqmvFY^Ryvz{0!N+!22CkIasg=_DRuZ{*q!$McbR$Of0xOqcN7? z_)H&nqhOt1&x3ER)(d1-)+{`VwPqhU>c%OM>=+Q2Tw`@_p>??~f5*7^*yxiVWH>V& zeDM{9M>fPf2}`$r4B2VXB1RX|J%? zLeeBK*HRjqzo%#yvmF?LD~qjb#}7gjhGvVq#>Z5wFF=wSxHPU854nGL+c~JjmreGW zo(|K6k&dp48$uw4hDQ950S>;&>#C0dDwq$;ZXeFExRS6Z1cNuhHyrw#(0!LCZH8L#VU=~@F(1Ha!a={C zpBsUa7sRp(BYqRF>X+&}M&5G76*U<;R4`SBnoQ?ai$^b>N;_mxZw1j?L*f=||EsI&rSyzJ3>(OQK7YNfOR?fFvp3{U2k4}Nuh@`^v$b@uQ+}{B zBZO&MIa6CSV(jfV8KH2XcF%S(13G4vGAHHqUe>^HJY(d0%^aiB0Kl!05<~U(6BWj> zmn>boGUnu+5TyNT^SM`~riLbF9xLRm{kslO=)a@_AEDgGYMofPN#c;LQm?eX@IQ$z zo)km-%=#=^ZA)Nk)#{BYD391LeyL+~LpJ^t7i z$Q$}um-ROpoy*-l5nTmpEw%RF>aMu25OJT+a$jke>}u)h3lrUrkDbu6EbS=su!~y} znEmt4A7^sw8KnC*5^ z`nQSS<3o@9Y#U26i-j$V76w9r4e4UQMrHe;onA~!j_D(q*>YyGQK3n*f(i>mMwL&? zO46Mh@HF4+GJU~_Bp(SL(;bJ#!YFONy(bwL`y4iE*E_o5rhdb)El7El?imn!o3r#X zU;S$AzFQn)F1YE-pjf}fGur)jA=~5frrN~`&q_G(MiqZ-GN|k08X?SFHlGsLA7xt0 zbZ0y2d@?APp_KEl#HSaPoyleI@<9g)whpN;LMo-R9<~aTyoQzyF=AzYVL?S*RWeZ^ z*oWim=z*n!L&iTA$xG(@yHgp-67F9R;m@9_Uyr6Y)RWK*y|DfLlk;II{Mp+^!;TLJ_4wUsE-$98Z1yH?5n?;Uba{L zS>thwD0k#6^K84LT5;JN?YRmQnBUCYGM09LyIT38t`b!*@5L(gzxt@eUNQ0q^WdMj z%{!P7c>lO}PFSo^z%5jo+&6eL;*+>BUy|h$A;`VHsckfCI?B}=vz4tVfx6cxL9&*7 z$rm48^n2{&`5XV+t>fFU8bC;+;FkP>!8d3WKZ37Br^Ns6KwqKAV7KuN(eP2fTme0J{WE& zIegq(>U26KpL^UQiWUm5Q=^BtP`%fRU(XR||938SS=ydgpK2zOWxQP{-Sy^+0nX1< z?U(;@eV)YI4WF4pmmT_L_@Si&L{B7zBFtZ9eV(}Tc}p1srpKh4BKu2|4z~QQsLObL zS>uW`V2(D5C1w}gRZdUFXnq@-I{tga1UDV-i?i7N+~XQULW=s(P8=`jOjS|1Pbb{jY(K&r#d>6EzZfRZG;mdG?20WgmW$tnxDq zHIXEQd#_?F(j_5jl(jW_`{%zND(L=ueB33XKNF+q*g4Y_7bRw7h<9xi==>&*|HIIq z&1kba9`?F)K4+NxV5?<1(l4yHhxN6EdzSkl)nJ?P&Wm@gVe)1=lv9EOG?_lxG5do5 zMI)wWDAeFlgoh^rHVIc==5d3$zEQa@KvCyy(f)PH!1Q)1^`-{oZTl32M3mjZM6rmVzx^!EwXbG0t6&F|KUCvO# z@>Q&Ss}24hJK7%q+#GMz9=o>rgm!zrJ{G#5sFV75NR-u=p$Ycc^n=go!6(eRHD*UF z<|=O(xPMX0O|C`An|)uayWi;cq=a-r<_$+rD_ICJ#3|uB%R<=D2IN3A+Hxi zCGi~yZN*L=))D!FfY{5Ex#_8DtSDo;aqGAKTI11RsV?M3SO-B+>+&X^G}od^#c|*G z4u9&!D>X6#OcuyXo~js4=LtL7Z`I!V_Y}V#P~nZ~QP1Fm*=o(8#cz-~BR?|rFI?5Q z7YfSl;M(d^w@Enn^G!)$V(!JE7iVUR>jG3NdhVrbo#)3IIZb_2c4e!_OwSdQje61_ ze&6`r8I%|5IkQDa=&jHe_zZxmb3jj+d6oFSSJuZC8$f*5P}&`xxAaq_Hv>A0@+^<` z+~T|FXh)yTzev)R5!~nVFy9*x15f4^nuCZBLREtT_!@ee17{nMbcrevg+>UoT;x_J z*PTW>R~qYcJm09!WSI17dO(#eHN_nrksXoZ3Y6$ye9&%qJ`upk-|t=Nyj#Vid=Nd@ zV;8%ZT=tsbmm6wgzMf+YaFHE0w8CS~KYyl&)H!eY6E#Ff$4p@+mUQ>HsTQ&rRxH(( z7YFa%`A0a4x?|b`u?Yn(mRZ0>G^?@zHu^q}VdUu?lhK`2mw6Kz>l{-$lCcvB`k8;r zW-D@&%I5fa2;?&j(eMHKwvH1f-V}DO-bBu^<6gxr6&{pozIJOWW6VyN`hcJ3Pf>{% zE{O3$E<2*z=Ht>SP~yuM(WTAr0Lh3?cIz6_a)um$h4!p~%eAigJ@fPGR@K~0aR&o< zzAbNTO<7~%MHAjCBSl4L##7r>hACNGto6Z;VG~Mcv`~5|Bhcq#Sj)TKCA(_jAme0z zKh5ZOQx1Kc@X+2gnYrg`hzM=w>LbyxVSAjZU(|OJeg%8o;4?1zwwVoygTpj0Xo%@` z93Va&C^cT8+n`>Ru6|{u*Bu!&4~w+Q+t^E+i9IbcH4rB%yVNFsoZE_={L%o<5I0!U z)zaKIPMy{ca>;`Cs4aNYBzpOsUbrf3##UWY9|T&Ci@9+p;6wJq$?F^Go9HEgU}JnPR%j zB?m++Rs&LHy}jlqPuN!&J8k;F*7eR zjo`wv9kXVcG$}ZTN#dI8`a8h(w;g^; zt^GpedE@O>y`?z~8*_pZ0?)Au;1-%DFP4K@2cPl-5hek|SQj5_eH?I6(JTmvK z3rqOT5&G20KesXjc}|2ju;HM{6Kmjq<-YS7OKaZh{xO#!>m$h%!U$)9_aZL1C911Y z2o86wPh)!+>oy(ufdoM z+AdALH}Q+)LyXfHIb|l%hXsN^oG5BVzFO`Rzg2>p`WL$PvX>AsHFaev)m^fo0urMY z(|f}JhbJ)TfT=qG%u}Yq_=O&_d4Ke2>(UjXMO`2?i9Qz+Lk~i(aey~gfSMJ$jsJd)pWIa@sEOD zlQQ$Xe}MqHm@?h!#A&-ei{^x6EjgQKm<>xIpl(A_s_{|<57T5xa` z`L!K##ZO|PHg}Riw{VWU&9z)^WmQ^O9!ruiaBT1^M@>#*gsf(zGc7feWP&Qd#+_2Y znG)`C%GKX4Vgf?b-1^u4XLuFf31dpvLG5cG`euF1SL5H>1x3a{62&b4Uc@I+*~e($H5-7+|}g^BaToragm*YU{U7qok@KtqM?1W?T?T0-GILS=U&C(I=^{V7F8iIm zrAwXQ#XYlKqm?Izg&nOzq{Bn2aqthg_`E~8{HS3S4y%rqM?-lk%PJTKcs)XWdfreP z^AU{iu;yGv<+PgTG!kP?ZQ_xsMOg0VfNPsUBEmxv_;DQU9Fxz_RPty4luM?}r(lQSN83LBlb&%k(QpJ9dRGN9yZnUKj^_9; zAkShMSTEVlLYIG{(*JP zMG1?W#P6eM0G90a*hA4BII|qzqzfB_*a7!zE%!HNzVGK)dwY2F?JDBqV z0XsENqo zZ-6&#XyD=klQnIjyEw?T3ZhOYpjP5;k8+fyl=W{X-0SfCko)E}5iG$F0d?MSxva`V zFrNtCySyeaZW$TEEG2b675piSS(a|la9aU#($Sz4w>uq_H|(4Y)yz)fHa{{}3Ul$V|af~a8vN>LQp?J z3bn#lJhl2C8+1U8(Osz_1xz(tHDt^OlJ|wHzl50Ll{7AyPOtWx9#9#YLbYYDkMlSz zfOv=k+RDrt$pdA#^OQ0=NB$zO^sD01n)5STx9(BTOuJ?7&(S4i?iGsTX?%RCB{eVS zcYXWj28JV>f%ItJQ^zrKcs zn0d{`)$=lAQrr)WOrtXoMkwPzm34HQi0vQGabpBzMl{b0FTbzCl+R>*Uw)#y%2Bn< zds2y)NPGeQQ*M>`&J6;U*jezA5bM)T5*Um^G6;?c`#9$n6`*OW`Q;PAW-zjZ;~DnF zlUj!s`__`sV3CmIDw0_jE?EWTckzhS&&wRF1>v%A*bF%Rgp)Vb_@O8s(LjDZJBc$# z>UqbwJ}hM|2horRuOeFA+GV`L6*(7OIsxDz%`lr-MB?olRw8%`Ovx;Qcx($@V}s-2 zvcD*YK=+f9Kyq0(OMGcKUdUk*oF1kn)<|^LM!s1FtA8usUgnO}H$&&s_5q=ZLsp3` ztM;6s%z&64@3-Fym#|0vRJoeEEQ!^R#+bXLNZUqA>c34E9Dlf{di4q7H;rlw$Yz<s@X>v7 zQoNE3>mqF(J5wZt))-})>)E-$&xrv7Bei%oz0yiwFsOTg9=~>d_8K_kb z))ai;Ux{-e%8dSyl9Y5kaED^1RrMI{iCbOWANtlk43CpqbEr6a><`_*H(o#6cLe1^ zYfp_v{3m1JB59aFTQOcIk40zINob0JtKynei@hB+HJFMIv>c~!@;mKAGo#AJKMQ+P zGBgUhvRtj}PVwtz=4)M-d$m*5RaYq`6jBZvgu0A!<7M1akLb&pXgqjnwl@AqoHUU* zBlKpo%RLFzF0Rwla=&N>b;_7k17xUwNi|NOG*UIlU9e~jvd}Es;JFYFlA{bp&hp~2 zF43~Vf!M}KBw|EV-3Y=FRJC@?O3CC{3-wJCGxHd6Od6hGw_Z2>guPr~)8NZDn9K~q zTN70;!7Kx%O$veLrwh1w&~@8Y=JRG?+3dV;O2fSGA{6RkXwK{pUb>(DHD(%MPsSEN z51DlNebkxP13zwV>!mH@UzMZN&E#0sgFBg}RZ}$bc&PcHJ!`r}uK3Is&#{OXlH#J- zlX7cqIbTUv>&;fA52kxyO_Kmu&9eC!X|B2uGS!aZRa&+KE|tbR^>gKx9wC=5v;i{1 z%Lp#*ob7*y#C=wrVK-~M!T*-ENqf8V;Os@B4?{un1Z zq22Q!5__j)OPr?pJA;I(mM*bE=oT6|GlfycIy!^P}<|kmOX%6&w&jz zk*sJbckdF^I*Pe{a%U8|t?=Gfd+Q-fbWoNnwBJ)&tYu2tTGv4zf(^LINa2X^Q{Hbn zx|4T3j>!j8V%fg1^zK!BwN(?WK5nh+X^w=|vkN3j(oCWCDt5R5lFEtRkZNpM7Vj@T zs_q-5N)W%vFTI+m+(jfpQLDyKUGppP!=|NYXo4Sqy~lkt2NiiDTQsM~!pYR=jNJGv zCM1xAP1fADjrvLAt)*0Y)HOF}1$%ZvIW|(`Sms|G7tQ#<=L_2rrHA>6KlRq?Djrk!=l)|`&BcF*pyRX_}~RRlvs7NNxfGvVnN5{+n}8F^_d$z!UGn?w^zXS#Q(; zrzN*}P3@VP)xN0(^XMBl%!$>Br?Zo9&nK!RgwuwAAxdwL#n$oitGrNC8f z!$AO%!sCda?aCx}+#G4ySQF^-5o<=&A~9@S|FaZNbTDKNHoIB0P@DJwg{Ib(;Hqh= z23k6#_tg_lzIOEVu<8&jkn>k~bbm9kM&?7|%MFMn4F zD;_x+OA`h>dg3zC9E{&4ml~Tzb3r*ucrq3nn*&`>1|Ibu<4lRZN){V%M8W)|{NLk0 zYLi<`XAl+CFhYf$?F2oMJ=VRL;oa@1);LH0{^3t;;zZkcc`Y}%JbEE zxZ=JF0OQTLo%fpcB0Lm0jyQgMZ!5h*L|R?HEzvb7G+v`9Y%8-uD%Q59;m_J)V~5pX zVlgeus*tsN3M7o!sXRrGXG}~E?rd$x2c>n%-)pG24;B&T{ z@$t!O6osAY#ZH#FprkmZB#|byL^vJm^s6u4B3V~Ti$0$z@|TLmbBn@J5fM?znT)SM zAmVMf{G%m|<7clKj`(;3Ia67*U_vY&1yQE`fO{<45~XK-j)3xgFq@9N*SKcE@7k{(yirRQc*Bcyvdt zIV4=H&3^v=9Y_02cQarqhNSDp-JP4K{$TMKm_(W{EwihpGWoE71d*9wG(Sf@hh&i2 zmOEORxVfS_WAep*Bf-^dZmM4U)nkkHJK5UA&JL$mAVh?(J5I>4JE78pcaNOhT%iYj zEN|zsy-W^${I1F6=ELTl^!eVAh)@}rcklX>^_na3(%GhrsRS1(;D&}sI9k!CT)#7O zZOa*-Z?h?P_&YN8%YaH#XlCuk)T77}m|%18k@Mq*h##ySQ2(u`cYBH$-PuWx)Kx?z z8Zc&a8`(>${h3>VyFNMFN6$IO3xth7;`}5IS#)=D@*(|6Z?vmmiN4V-!M`Dj6-gAb zYY34y>JBR$nP%tTTjUM5#KYM;dPdypcw=O}j3kn!Tc zdEEv+d3h~M8V99K2Rvf?9_*N|?zK!5;PEz>zRO>zC+L$K-RyDaHZ}&As`FWmW7(ds z#9ZH8=|SJiM(&2qe}8}O$hX754yj^MLYWm4l#p=<)b8+O5Gm)O4D3&oQ>&(=8xEy) z}@ujHmNa`Hg%NpK=Hayi?-q;>kVSk&KsMkwt|xHH!xY@CmcOe^Z#sFKNQKJNZX~ znoB3Ca;3o$|M%Y3&fJzaPVYo{D2kYfh-vMGZS{92N>dog=4MEyNZSA+#H=(4l=g9x z5J2L4@O#AbaUKDPyFeq=P0%=Q&02qT?QsUJyn9Y}m2eFXzV7XbOV(m#Ee==oY5n#m zApGsVA3XxEx{zsOqzt3K&NiB!yd#cGnUhB|F5cG-K<_>zR}s(jiv;c(D`m$#UU7t7*cM$S6y~Czbk`i$Fs>JIN|rCX4(# zs-4K{^*Y`p`kn{J=K~LNh{9G=baq1Oi$@);Uu5m`Q}5+Z`dGwzRCWD1C08$)>GeB6 zYz!4!aWuYMnM&;;9;C zO$B58DPQ>%q$<>GKgsDa42po(`zc~>h|hGGD`+(xA;}5Z%8#3#rf%5jZhUt3Zy8Ns zfgKOw`c`Uf4}VxAO6GeHo7yF=R^@)Q*knxP8`0T&34jwXuCfOYn~#}k)&rrN4DDWr z-*ZXnY1bHv&Zu0^2*BDZ0UuezSmZi&uB8t}9)CpN`DG>Wu5m?L*|1ukt(&gj`LeZ# zc(s+LG2kWY*&gl5=f06xiqP5_>HU(q`zOlqCesV3S43WLt8u&Gjhv9yJ1*vTB@yyY49pfY5@0^GN47N8)89yB98E+*MmNs6qnU&z0Aaq^!Sx}rM_|L7x}CY;lhed1g?w?kKs%i z@Uva@%Q9FMHyI<7k`@=yo2&k=kIAlXSIF%QXKsx3TjN#JrHjgpWWgH_b{dDtH(S7a zzi3tU^=bAnP5d1a!ogC&J)#GZ_Q2a+cFR~2b2HYco6aSbWRR@Cp2Okgg5#H4cdjY~Gu-?auaoGZX89O!VS*Jvll-+?bYeF(H ztn4&Jl%-v%D3!T=fnTyjAM%rlV=42)D;+vwj?vE2GW}U|b{a`UHo|y1gBCP_Spr^J zpW@i*C>0pn-I^AMoga$}C-jhk8!Cf?hkGb2a13^<{ix!?E{Vo=zF5-@ys{&;_!V&j zU+4`=V_l7{wC<}KNPDo72_<10X=A(kk<{!zJi3r+!ls{p(E`xE6Nl&zq`B`$n4prg13=Sr>paZp$CCsWO@)=;ClUv6Z8p#oS{I_mZZm z9#Q_WFTRrTOj=2zH);lW0#HQ3oZS#9=)#rA<4AUeZ3>G$zU*_Vc(TD7ZR;qxCBr??Ynp6c*h3PGE_TKEC_*zmawh7$Tf*;qA%u~?005j-!0+r zgqi8|l#N-5b_9pV#*68b6=MpNHHAf5Ra9WV&{88z6C9Niys{i?Hbc%5~{*YPO0T8fX4gXKEJMDT;bbFZ|MvG>^2_MxgAiV z+1tZxk^CGmz0MIBYnL63$lZILe)lsY_jv@{Y4EmU9Gty-du8SPKLJB&A0MTIzrQWP zdVBXpSc0Pfm5B`s*u(sk2T(>sQSa2^Uk#v1&iSW2pTHW|Qp_49r%Udwr!fx!DnDZd zFrC+zQziUtqEn#B=i?A!@<*}Z%qpjIw zhhkIfd{Qo!`JV|!DSUI$o)W;NG+v&3gXf=RcT{ah>mi~C>?|*# zF$Ir;E@q-PIp^lS>t9UjlkIaYm>5in&v!=}ei7$nnSHOzd|iPRG-GYy)2eqLa9_=^ z0V|@+yj(IXc$$4+K$dM@`T~m9f8f&xg%E(59rLM#z6L1cH=>E{#H*fh0Oo1p{w_=h z5RSTCijn{pPo|J0xD%>FYmFM`{1ErsN7bC>fai5Cvdn^)D6a8$rDu}ad0WhOjNC)!>gyl;eo+?V$u zfJR}|q~C(exD_EV0ceJ&X7A(!A|Tlx*=o;xd%7dvV|)Em_jCI*m*@c_(y!Yu&$(<{(?wzyoexB16oTSvi7rU>#2d?MSEKdP^{aAL)y(FX z6V$#pdSa0I?dV&pbuNKl5=KvaqPG#st|lBYem*UUNvRZ;n`N~{NT55)%#^Gk9GJ!r zm*Y#n^)VoQj{bo@WJ1Hy(wL0kGCSFYD9T^!^Whj10whV)!nf7a7kmM4al*WI7F(K~ zJXeWBD~L*>FVwF$Z%?q~FWcl72jp)smL!HOc>B5QKWG^IsT3% z`Mw&x1}gg<5OUfsHuMyW_ax2s&Yr&qfkBeL&nBL55{;p4P$9?o?iOc@#$C5!XiWMq z<4L<~v09vVo-PI9KH!z|z&vNO`Gv;$K?Z!U$=_n=r?2NcE9jb#@%mut#NI;aEnd&?0)r8)@j!r zy#LgOtQOfcuhdt5R+z0F)9!*|8%|mGj4V9kKhR5sfiNx)5%px{n#Rrz(jgOeyOM@+ zde+7%qAuM7l+H9y&T7)9BFTlKQBznwZRQ*&+*Owl)x z@?~ql1N}4j?U7qr8eg(zNvxhLe8RXR_gVDqzCP}6J9&1I@w?k*5gJidLCWE?lXt{S zD3L4lV~8wHvponuC_4p{?QrZk5rInVNEJj*ppWwXhMk88P~;Zqs{9tO{5mdnRgWI< zL+rjX;Gl|{fm07W3dk>Mi8j+*PRV2mAM;pd^UI_#wSCvQGa+B+MdzzN3U5~6@y)s) zUd4a^;pm>8mgAdFF7g-Su4hKs!5p!iF8xRVY>NJtPA+x<^ReL%acD+{ULhNd;;a3@Lsxf~y!JR9${xPxr_i{OPLOMA53=7z|yohtNyCr@$LCm*;o4q+dpAWsEoe zRd92DR#1>ISno;6J{Ho^%pUKbXCH|D2as87Iu}YuWJ|=@!s2|X!FPC**>=17(zKX{ zMGq-|vZJS-LwksLIV8@CH3B5JFo;%%cD_CIl?zgmKuVyv z6}&e*5NSkRRZS|@IAKQ>e(~AFWw-k}OY9?}q=tizvY#6+fR>k1xKUx+rzs@8!#U2vpnw^^UCNC$F7L`1no$4b+j$dS-)w0IG$ zKvJs@BSAq&7uTm;$ZS>7R+rRMh51mMbm3LI9?s?%QvoQm<`i1w;qrr$JXtMnfNUZN@7Z6! zEXc8>Ro3M+lt+m!(~V|hShK!7ovl@c`E=-S5DI!_BeTstdXC=rNH;S$J-!(gph6JiXcyOK>v6i84jZ=PwG4)7WqJrG zP2j-n3-pWg6CF_!z9(cS&FsUKZc^B|G5g9WYjp_&2Su>+kD+hrZB4>Vkyn2wIPRQ))fI$7%nY?^ zy@_Lp%*b%&>fMAYE2HYA{O$qPIQw*U>>Q&S{4v90zNu1dGa|bs6$Y#8GkIP)qfMTK z8Ty|k_53FFaa^og4(k3B*VF1o>Za)hdoaT9Q<6k@SUMO@rRBIj))9)di$W$93YBHE zEizs6ZaF=nU=tiip6=<-;>le|vDWXJ8G24c-#489kwoi3V(W2M(9w{%2!)#k<~jNr z%2+cAIXwJx-fPQ~^ezKGx*ofGx#^|91OmAGFZHOt3UPC=-eHAdJW=G((toOSuX8&U zTy%7#H7JgJSnS^s_d+>I*Tb}v_x@3-K^VD4`XkIMh;Y@-yEPSGbnyyZc5M=2l&?? znhy{8wM+n-K0IRw6Fj3|L+f4g$V=JrniLQwBZMg|zmG4M1Eh4+y}^T)V=NMjB zxUKCbjcwaDRvI<7wc^IsN|VNEY_Hh1?Iw-g*tTta+2?%wT-W?Hf4x&Ti(3x^IDWOq$)B~QI4g((}r_D zz$YOx>)E5UZirXYlk^+1OLCo5i2AGuh48UQT-QM|iO|-g#OT!*2+nJ!osAml+*emD z+r^z&&<@~b8~kB4Ny&X>IiT6mcieRKbVP`Aa_{W3z){l#%XRSecEq+Ck=wk-`bGAF zWN)TJA2Z}5quJ`|3YeJF{d@H=m^U-hjg4Jpa4eQ~O^b{;gMcYS7Qn6*7+nPDeu)C= zW%j_eNE8GaJ;!ofLv-6P>n8WBZbNa=tH`H_1F=J#9?t$z*49J zZryg8kkQ4dEq|U)n466kLg3)%rs<~TtOLkw{qbB^3Oe|-zn)?@^{{rYf(r<1DZs)Q zGs-}rg-DH|!7twJa}yP6zKw_slBX}!;KAEA-6Gpb%ffq6AW9>{OO{PyBGdE1mrI9G z`XdeM@M}%gw%Zs|(qJ^PuceLGQWtL<;pLvFV3hA@7{74c4qKE~3j2Ej+WHAA&B|2B z#*f@i&+ta&{KHGp)Jwlrmd6=VLgUjywuU@GbVZ#nxAji#ZrF>7iGuMTllQl(Ge$Pr zLN#@;Qr+?f8`oF?lR)IvwZ2@_2&Ab9PUNw>Jd$;QvHhpi3;%j8*)TF_IM)o)j)I#q zq=71hFufN$b|aGU-dVlt!F>5)t@pTq-sigSCX(f`;X>KVoTQK%nhLI#^z_I?XJ6CW zp1n|lk0WM^2gUG^G4YczTNv+>g5yiieE zzLt|6mT9a9aQAI4c1W{~T3KoCbZu-sU(*Y{%)zGK1iL_1{-@hQ$N+BMs{VM+|M#i9 zN>5G2KZD855tLLjC%pE|v&TDTF9m5AJRNFG67A7SFSVDxrrA&rw_u#>I{RX&G&{*~ zmQO7*C_p1AFEBC(f~rlY1t|Mgnfphk{EH8Te>hO6{|Jg*Jv5GqtVY5o#;3*hR<>(X zVfi~t`6Gcq_^CKpZicQrxO%BCIDEo;2+XmS1P#5sA zl)Zf$a?s+nFy*GXU(}cv%3EGv%5%mL8=69G)7Hv}(&Q-&Px&8@A6%$EPFC{vG_F69 z2j0aX#-#$dN(T+0M4T6U#%8PJW~Hzf>(I9pPp%_MjiMxq*mpRqr@4!u2D!Uzs`55t zZ}bykYUhfs6eOKCaDs;3-(zN7?F5V6e;4b2!{S=yZZ4y8#=p{wJI~OPtUkj?#$ujs-c&yd`DndMhAT{UQ+F7a=v?UC4fs(T z`HGL#-m0Hf&E^KEXa);;%Gv+zCT@^uPZczr?mVC@T=pJxk07ckRxY5vn3>*L$= zT(wVPYb)OwtW-$!!gqUtG!)tW;A;^=N^os@9Yr%^m-U=^eJI*uPR7FN{$7W~TG?Lx zey3>B{N9XQ`^RuON2+>mcYp}F9LPjn9I{^FADMz&x&3muIK3K1fC@)>x;Id|c~uV^ zUd^X05h`3&YInbCM4f7L-2WI=R}{x=ueD`>h2vXw`(KZ8a!&B+2+#bi1*gk9m4zqm zW%*OPm%*Se;@z4SA&oQU-^eKWZS>v`a|#TeSPdPCB%>^Yy8;d7{p892(P&Hte9-u5 zelABR#leUPI9EhdDEjZJDUgCXIY+u7uX40NJWjiCm?Ldm6qI-_KaMh74>E~|N_4gI z7`{vM0r9ECnH2V@rtM*m+sOCamIbQ>g=&Sg&D%HIq)%YE^U{y2(fwAkt^@AuI*1?7 zAeb8IPl)0v*(sMm1hxtF2)uE5&eQls$%8*w}=atx`mG4d1=*O~ybq7^#2b z^@D;+T!-^OS!XZwSdA0EU*l)RhP0f1Yth-g2RIq`GE`g!de7FXgjNG?CS!$uFAPa| z0f1LSYp$%PDjm57sb-*9T#59ey!*@CYE3bintUR9NqeBk{PIyW(4Uc~RMwMDSn1fq zsAvR7fwELJ{QhrgA!D-4Xp_UWTp3&_g(5pgIb8a)U&P+bDaRhcU5a7rs4hJvmAKZ@ zFui?#oPMcPxnVRmp~`TmAYVe#{ha9_G=8==Fo`m2IeKl?XMtGH^9QejyLqtGfFm?= zgME8iT7kqf4UUAXnN9O*lB4`dRh(UdO8wd>U6sjAn+AaP8F)G1m0RYcMxg2vpnUJa z=o&Yo$=W0x7WV`s+<>&Si}NwCTEWg)HP{1JZVia73^hQfW(6e8dTfBP5Z4bp(LhXq!b9dz0PXFZQi|r9$v@8ynNYBgZop z14=ooaiwBcpWn1}EE;*eVAkoY08f)ThF-=L1v*Sn?TfdjrbAcSNtONn>aa;9YfEE# zej2PSkC{~Yv*C#aH;%P|<&B(6SL*GmEct#Vm4taiRDG9nh48Fo_w6fazS64aG&4_0 z@HjE7cwFj;*AAs(OiaQ0zY5I{sLuf#i@@&|8kI%t_Tb5lH~r}BuAHF1jeUi&sc{lU zGM`vkz7&6h4tvzk({0Qr(j?z{1ciMv5(M)f15}2yB^7QM%0>}FW89nofn$BtahY*> z65=)$)&F`q7>%*fuj4cH#ZB~?gO=!X1X$d>`U>}zHPk+7YzPp^gxx)oism>={n)0o zeF>VeQi^rR8`JS1R|y$?!n?$vK0>cCW;eEoF}~J#sUb~w?YMms2E0a;C1`~eBQB@ML-{vD`LDaR765ORR?B)-y|uoow~&%?4m2*BSX+3`?nBMU)YoH8 zg0gTKIkp-=y>v!w1+p#}v4}>VymZ5M1_wRqkt!Zzj36vVNr9GcT@--UmzE)6=7NlE zrYhM15wlXMSJl<3+&76)d^V(1AAvM|5l--q6=}}Fkha+1NvN&Do1i9Vs?Hs6ooZt2 zmQ?VHV0~OREYFU94HGIiTv+RZ49inR(GO`Jktj{}TUXjfdxfUT%Jx%*hkw#Obf}s# zyNiTinjvd*Og|*w+uk6}W=z4%nDCkhDJv%@Q_D~dWuJsYgKv190L}_?_DJyygO1uf zz)6g?|LJ&~XmTt6?J^|jOSwcieROZQ4uLhpuuT2V4bv8OZ+5({XysVzY9zp)1r^4V zAxMI6QNgI<%8E({Np!^9E#pRhoHZ^ZPUeS?{Bb%qB(Wy3l)V-5-JDs$a$cHN{Ko15 z%YQ|ihTNYr$Qg@?*jP2$TqpmKY`%&36*)4~T+p4t`qPB2wr;wZ)r>X6r>{Xs0_uT6NoBa4J~ zqYEqH0#_^}6+27Y(Bm#w*6-yqCD=~WP!lOqEsi3iMwWe4q zx+>vXLNSqip#+%pRoeaU#QaOj*-E|((B`-u;uSKpXKjAJNSEmli?FuMAh?9SiPN

    VwVt1VwJ^VZA~+FOFBpid(iSb$+kD|0|8GfRb%MT#0^fGUCA7S`3GIH2oeLoC zphY`yi?MIe8p7&xU^Ia|VU<1v9<95o%I|P|h4ec$pWpX%dkjJSM_a($bGQX-_-Rf| zO!~(mw78@p#f=CldLk~~P}aJyAIvDaR|W%#8*}|9hIIGv$%uS%1Zi`e+A#byNQ?!B zHDiBv$pA+{D3O5Q9UmObOI;7HvnBtCV38j_qFS=UvkNQOGp~2s!V`X+i1}<8=9jT# z*3PgxT2IO34UgvwKQah=>?2{K9HnP)%=7NgJoP$BiXL&P6C9nKQWk=^TL*l)u1l4i z8)!vcOt9~Nqb7`tFCaeL1iVBW%Q8|iv-I`#agn#9Eyq)MIa5X|vJAOBrVxHp`tVOZ z9RobWwx?)c#(@pTHCD7{J{FT7PkBjq6DLGg8A6Mg;4%^d=+ZxAwBc|L3O8McjLC)v z4pRr8dSar7GFZv@$@_NusDzw3G!o4MaR-k`Q+u!sC!#yk;U9#CfBC)&yjOgiSC{TA zZg-Nbnhp4G>}n>&@|%xTOnhS#Va3hw&@(5XZIYQ1(scPhxHN@kk6YH;5zeL2d|~%A>3(yeSFMlq zjdnZURC=e;ua`8UeTcC7NO}TN&1jzp)n>-;1Egvxza9LRwp6r#QzfKkvWQRn3ldPA zMqzLhz>g5AWN~4r*-|Z@a@f;sS6nUH!Pv$d0H>t2UFhe|f+~_0%2v6-rUj+U{$mr! z>=#i#FzT!$2TYLhO&Q8^C~w^S(LO1jA^s@=M!oN`=2|2g5%_U(Prsw3yG`n?oz<2G z8Tn5O0*Nr914iOc`z0KYVX5H{uby01bUTEF59g$hn37+Be?8a4C zwV36tSBz65lsh9!G2y zTF02Cn1VKQ!cLNiTItLQI<8_Zr7}2HPAAG&;ZNkYqiR#SOjUZt-0*!CAhAj(@Wo~m z9WR}&_z9XhV`}Y4lfs{)O@`%%ZyUfPJw7N5>H2Hvd&~N?2`fBC+kMZLU)M4-FaO^t z@_{}j4^YhdCZVT@-R^o}GFf$2VW=Vb!v_zR-jpg3kCeoCI7zG&E&J-7yhz`uZgf-{ zr1Vda%g=Bz&)0{57MtjOZKc)zz{9^&>GJNP`!_9l!a$iQ%r_;rBRETO00We>kx?8t z9C_8_=FV16Lv)C5p#L2GG^iZl_$XN=+>m|04S+d#+qLN9mnIg9>`$NzT2 zHOLyg_*S*CH}LfZ(9)Q=x%x#c!qu8#1|RT-a1)Faem$d2bZ+DbLO1c^A#O);a#Z^o zmjf$jfY{u*L;R`DwQg$0p8D8M5b(~6`9xSIBQD=>3~hC$(oNit1GN1OVFeg?~Qz{q5>N0-lWoE$-RR9h`UZc32xrX<3tIL_t8eyivc zwpYXuHJlr9%SSm|wbaAy*`%8C!_>7UIhUT7ud(uUu|8WtfqLvVdv__>bEsrxtg?As zTFN=o{6Iezuc*B_By0&zp&i9}6nOz;`9cs+aq|;-vScFsF7>}r$PU@8*XZ$3N|@kn zM5~J;(Dn0mN)i){nP083l9E>|U$@j5G0Q8I$Wgmsy@J6GV+qG0p2%4p4dQ|ILWrn2Y#Xi9c&)E)eN=8Yxs56bR(x9splfpv%I94k_B~@!^vHV@r8;=_!yrh_jB8CH3)jeQDKXZu1 z*`_}+kH=>jP*ThQV{DI49m8dStYM2%%C31djbg{Nm*EvXj;fphs!D8!s!O2{U|&cG&-X?4d1DVM7<5(bI2vhu-Rurizu2#@n=tL z>JZem8T8Syq5yJ1$Qv~ov1O?{0-JN$ z7nZqt)elfBLhVEC4LduFgW>6`?2ED4;1F1|Nmjdx_g+YHV73@Y!nYfkRK?;Ofkqkj zIhOV%9EWkbl!|*aWnhVEQGrLM8LpMvlH~=w6s{dw!BNSkYrD9!Q|J(AizuVf)rJgG zL|?8!vl#ZHX9Z&a!k1gn+XL8;=- zYL-e}O>yg2Ly%vCW>z2TjGvNYJV8;7wwib~gY#K^UIg?F2=fTl4wU0^zguUpMkPL1 z!06O~6h+1%>{JRy5>2S}|L=CfvP+hV4HAA=k+*}$x3Uc43f7nvNyPEg$vs_ZR9;;U z|6%4=C!c|RH7DIxho0mtDxa@{U8gHuZxyV@>XSVAb_r+V6ETaa@-yY>NYUqZC_uo| z2q$}gMjNiJO_Et)cdDr3bNuPfR7|>a)-5fEXo3_2fcevnD^<@1BxAW zJ<8RaIpa6v)?E#3co@<`uhe!VSUp0%KAiTM1szloxpb zewjjRDS)Zjcw_fxDQEA@lrcVE|LR6ekb^hPj*6x@J}F63)t}k?Z`rOI%VE-)qOXQB z)UaifK^ZIcKaz5#K{GZZ)vC>Dj!%ENe|lKK`4AKXbPy6Dl;lVCbgt#sUU{dvlxZtM zW(Y=qaQtg&VWQ5|UOBf>rUyG94aWJwn2-`p#mqE6%8vIy4O3Vu!d-N~B(NM|QJ~$1FXu;-HX%z2$^b%6= z#Meyk4wMe^7a`Xe3BnWY5DOGl!I+UA=u6kKq9^woAn$aeiU944BUCj~2<>Gn*5>4U6e>NpLS&>qxcYeyJL z_U<1(NScY(`}d=4ESV=volMi{i}_tUk4=uS$M=Cl^@h(9L98*d!mvTFWe}QRzRjD> zWJajuVW+tp@iLR;o_4wMeA2epTc2(Xg;5 zBt^BiZp{-ewcAn7xnD8KN3oyyaj&3E>6jWhx*;_yp}Wp0q5DtsaPxv~#O>@YBL>lo z@GZC`X-^vfl5y*pRz8BtlmcuxocPl{2H*Imp_| zDxQ?X7R3n^58||GeOmSg7wO=gctwZAAgid({I)t~qJ`DR(&SY|gH5`X)zlDod(DLf z{NoOhk=6tmA-CV3nrt+=h#x%Tk)&_G#tph1N~2yKX`FT+k(r5>(X_{0{pp39cS0uGi?fK{;wYMFGJ-8X0i_;$q*`QMP!*cPYE>%j9>J1sCL$*EQdI)M zhQ`haXYCL5RV*ai6a^o!q$W@?(Y7DV>nz7n ze~O|I^YdT`d-_?#=>1{rJHMk4&zI!5PG796j60e^b@VBXeQW<^e8|^(Q=LIxX-8N& z?$W39>-sW(lI^r!6{w~plIGWYO#ph$7kJ)vzKsqlwO$%3%e0~AdBW#=p+FV(hH~)X ze{rp%UEuAJVG;#dC4iudzB8O^Uca(YV^{E3~Z*OZ(zl#E|Z# zCb!p670$GrdFWgxIA;6CT?qML)yY~~mC^F@$93cp6)6h*O&ElwTXEy&JztS8Gm2Y3 zXPNlqmrQ14&JoXz>3hWwX0?a%8dI>>$8zhsI?qKTo2INrju_V+jG>dbzhn8xp`_oR z7PWFg4_@+RJzmX3itm(`R+0-+$K{oobG*F?ybkT$j>D8#u9IzKYeq&38Mxh3w@Dp@ zmCdF6H;HS;7(pDYgL$TS(s1eHn*`-eN+~)~KZTJ)&g(7fj;6FdBIL(G&hy}G6Oo#D z{EOnQ2S=w7u^1eht{=@r0=&+lBPGuCG%OBkaVKpES{*^`&F}A|Glv2LZ%UnGe-5GK zgb+WWYgR*uGyLc|cKWc|=CGY=EF(dd8W#9htvK30p}7?DHV!B`tACf?OkU2$aegXC zHhFiQXD-%dj{D>U?nltD)2oVlc>0(AeS!6PsBXy}?yIGIGv%!+`co&ar-{Rbdbb+;3&7jJz>bGcLyZvE!0a@WBy^(lqlu)9+Z4###LL+9nn<N z!GTc(Iw7xOxOU!MCDQ#gg+pmBn4060tpjHgA5epJdXl0gy#k5>plbojgnA(7$P#10 z9RIw`22n#Z?^XtZk@>%yB23FYSdW!CSUPqE=k2K1?{eY#I8=oaODzMe9J>u_s_KD! zyS?#R5+*7bYioi~oaJ;AY#dui^&W#RtMq}MEuMHbTRJ)%6t}Gkwt_WEp$`!PPp|MS zDA8L#+u4F%>9E~g^ciU`&<;WlY75P#8;k^(m_WBj2d#_31FNr)B-N;%#*h=kECv8j z#>BbGD^;!Chfo=knt+RWVDEj@uH->V?(cNp1D@;TiL2=#_ha1^c!giiPL^qXvrMm? zf_1+=!q#)0^m5^#=a{)PaDLqKJ2E{PFYo;b?E|ZOsjaDQjOv{d8qKRf(q1>vPIVYz@KJ=3fKXE4_$#OMel;!^F-UizV=F&2`k7WDC z7eoFAf~=GWP_*n9UlwcrOCsJK&d;PX9A4V9)0>MQYwmicR=l5t6H!q?33x<;2V>#> zfESmMi85(;fhwMKnWm>==mrUfpq^4O^7UDMpsC$NU}ZIATuN_U?$xHJhL%XZQ%MEZ!h|8WN`h9yH5r2FJUh)nBaFk`?MEJa z5?O-63>;N^$8Vl=*c@CeE^@pnS64PwWf+) z+P3roS7D<@q`=G9bN5p!dvb%^AHN%BZRN9!vV4xM+N6TMz{u}vIsEvWrdqM}Ws!r< zp{!5npWMS@g}LmNxrkja;?n`&)hT9&n``VQ_Hh08Y0Q~x;9OT)aJcA5S$SwZ%+XO6 zd1Zyj^Qa^j7ENtSY#9@$bACeKf%&li37^mH&HX{WL;f(vW{4yvyRO@ zdZa)T3_P}mQaXz=z$&@wgrMyHp4pb{SuWwp)eo1fQ)HE8Wx4IKFSHX6=-FDqbKHH- zti%=rTm2_GvCvC+1?n}PgCqou(<#|_CVKmBs+uGK7`LND&dA9jii(!FI|Y0_uWfh( zzOg76bPF@zveV4Ud3g-Xq)}zUCUu!yvhz}vB>7aX<|Krk6f@J_+*VQNd!oH_ z-#1vH`$CH$8=b-9aNBJr94=OrGM~ywty;Z2^PMto$xxZu6Qh6SwkpIK9#`zq8HBV< z2O3?WzHwE_+1UQRY4kCq4^!}6?-$vdCfS}Tfn_N3S_eNkE5VE(N!roZbh)QmiIZEK zb=6zg;;%k>LaZd@g$L1sqqU#ZgYEbl?ZoC#Y z1a8nJ?>zLR6Vvu)8=X@w{*=P+5C_jRa6@K3e58rDPip!C&yU)Y2LdU2MgoW|9g?ix z2Qim{1xm=sjvu^TLzo8w1#^b|#NEI63-MhAy2!R_jftJFNFV z7&rR5PEb^|;#mJ$L&ym*xJ8KUr)pGjjAp>$Ge3ee8yvz!$eUt>K4Zg?eLm61J`j<- zI?8km$AI&nih@Dv%=K}c#2DqqGpf+l(gmB*m`N0qEk}YaFzN5&;C0z*t%(_nT(f1! zG5xDh1_>#-Zmi#o(&b|Pfm3i)S_Omn`_Bz+ZFxbdhcV-^;>I@l|2}lf7-%Lg9nQ*-SwEBA;AvIa{2WB3u)i2JN&4d2_48pRSmFDmctJ{->D~1 zCgNjLrL?vAsHvZ@G{FgWAm{U0cbW_zkoC$Z>koIkiYO7jKyr;W6ob4m2qR1rQ*bRaGFp+1z5e?r%f_m;tU9*$8smCf zG(#8!8B!X{eFhDM%=69lBJa<_Wd39Zd1+mM%iI!R$EIcHk7NqpXoQ7DiM3&X)w94s zFcFYRG&-=e-)v7+O+zk8Av8t7o%?D#K|(@Nk!2#)$U{T=Hq2=tP`PwG)PW{f)qr_> zy4>v`M5u2f9?n7$*-}K_M;3;B5`MVV^kBgG{OQI0v7ZHBDZ61ZfSNw&(TzXgty4Z4 znWGjkD!M4?t_^>6ZZr`MfKS0>*V(S2EmQ@kM^3Vjolo z$d7x5;q6Gv$@LRCZKFyIDb#Fbkf4J|s5)DMg6k;aBhgPqWs{RK`u4yGGWy$Nt;5uAZ;@mh~7I9dn zj^p2gTsPC<_RUCXHQfM+)bj;A|`(+i)VKBw?Z;>K7_yzk<^Q2a0OE4|}SGKUzjG6pdfXx($5<{cO_ zR(6&$XA5+K!@t5yD7CX9=MyhHJG;mQP~@t`YF9g0?p&bJQK!6o^Nf9Sbe7sbHZlo9|GMpGtaS@xwMN zcJ{*q9Sr(r9e?{9_TZF=#V|Cqpp+J^i%;8>dT)AaRoq#H!2BbR31;7neG`+SC;!K_%siBUc~rZ zU&dv&dplb0v_6epDb-eIalTyg-*=;0NjR;}rm}V!SL}S1orNuud{jMT3Y}174CMD0 z+5#eEy{GNR-?B9gTFmMLxk~I zb1R~#iT9eJKh&S;7`!dO?`$$Jc`Efh10%3MnPwX~M3Z?C6Et^7RnMAILYvdxKkg@> z0A(k#e|;~Q8}Gfp!sqIX!l9A%8AIW*nX$RakPRTYo~r8&%lFF&aF)tar>4pDr^=gK zbI1s|F2Q3uu8sf#%mqt6jZl*ab`O}0t%Scx&D z0@0n`0YzKNj$_KxGXHBEe`uVo{4xH`04vR%7vPp$c!g{(U`^!F<=~*tUYfy`doXPO z*YE6KT(hK7js*v!7g`M)i|f)4x=&A6ADAPQwromoA7W;Q7hfEh#2pa#de}>-!I@-m z{$#Ivy($0-$ma#eRz2(e)0yC(XsQS!HCyv5v4ZQ7xIUkxD7=GIV|45VN&$Ha_X@9E z8IS27zXK^>BtqPy6UFI|BrtX3YN&=~MKvA>%^^lrfNp=WzAi0Wp6~Xe;LvLKa14U1%6k`vVZTpgk+$OmM+nYPD?GgWvo7|sd9437{L6vMtvNn>>dn) zN1t5aq*2XN>8UXJ!aA{|AmIip>ai_5dma7zvz^NMCSWsK6O{_Z-40c{WH~WvD-zqs z(@ksMmW{ilefT5WQ-P9PzF!>oEr?#2W#PN~jhFDoU(xjZ&`YE`oeo)H^DMq1j>Yf` zuGpymtP8HUSVI20bBEbFv+@Re>>6_wizr|&Db|0rL%_6r2b_hpMpR;@2(+_PB6LEJlA-p}>-}Kfkn7iC?`F$%c z=C)>jO}3LLvk<5Yn=Dpmag)k!#=9X0A=QdtO%f!q>*toklzZ4q;tW%nE0_md*P6$T zqmYgC|FsP6$?^wR2$=2`P?A%l;}C|~`4As|8Ys5s3ZwW8w#-U@qXvCkwz9O)D|r;p zx|sdX_4r>N<+4%;cwnSTBm$dk;jPPM_s6et7wLo9rMw# zj`%yY;N}~6OWxo3_p>pfnBtm}Q}zUg!DCEI5)i~$qSU#e)OQ2g^#YH`JimqXzy!qQ zM?+bn6&@YYV7}h6(77vUr!8ft31Qwu)E>=`FFM^A2TCnFl~qQZE|Gdp=g4afJ)^4( z9`pLf{DJh4_20g}_@5UK?!(vEDF->&ZA`ZjzZ_?moSqU_LAS|x=Gt8v>AIH{NAOfv zwwIb?WwGhQ{q?k#)~RK!uU!00C3WnI6TnJ1nY{N3 z7~$7RTK`o*Lr)s-RyLBsyCLSH`A}P#CLBb`4Qs>W1A&a4y6M)h$Facqocx7FteX>5 z6|UB(!BZyu2(E<8K%v?gF`mdwSKFAMi zT`&>@1|82^d>UU~YKmqZ`W{GHNC_9>feNTOE_9KEJnMdZ^!b35@?85pn2M6Du!06i ztOEka%f{r(k?f70)(Mft8|$l}vtK4>@vU^#84+et5wRr4gI9=u=`z}J9(-R;T3r4{ z0eO63JWxsge%GVn*|@{5=&nUi=k-OG8&UhW;smj^tG)PG_)>E-F%JA3fB7pIP_wUY zA|fFmV9UI(FORTz)3-0Pt?5jpke#b%M9%HA+NBjv?Poge9nBx9q=L;^z<7^ zKkvI z|MJEEW!nY;?Rp&1aMP@^nyM#P~L4L;QqJ#7SP6Zh37ya8LxXc;<5w{c@SAmy$g!9{^+*(yjOFI=u~`wwshg_?dPG zXcOAM8%J?-s952vwu~ZSFlw*o$La7EV|;xd7XZuIVRwW!QyZ&(9naLEgn-|Fi3zT4 z2-$><;4ZjPjnCUwl+n9>7iW85uQy;|gc<>*r!-AdF9*&CFL&h}HuV@l)-YG{jcJ?x1g1;+s^2Y&1&J?!-`clD6~kQZ8`f=w*PqtJbG zx^i~|ib?VPkB3p%AEWeQ2C_sPh_YxGd?6Ou?kEBCqToI1A35c)CPL93PK9Zv!n;*Tf#RMI!>l6%Qau1eQPfYqN zJnOH<^&=vfIkIG%Q8}K^mEMCyAr#@_(2(^1haF~iTofE494Q7(hYytZCr`t{*IkiQ z_XDWcE6vEOb1N}}mStV`O?FD^zbFx57GLl9i*xh@S(ur2mJUuMwWYHFLEf~w=p4uF zF#%mp4b2U`c9Vk{(_VOA^A9@~BXT1wF0a*4cZP9MdcKvzKb)@mm#wO&P_R%{!~lGS zn4p8e4vf*+#6c=Io2UP9Qa}i?Sy;h5ZV;aDEx62?2bcS!?N^!+gsJr>Q$KIc+%9`y zYu(RO!F$Djxt7BOm4qYpyFF32DqvRM_W0SF+px4{L^6bD;Ip;oGdZ7 zpA#K$gwtUwVZF`wcnW4Q-bi=Yx=c-2{CJjI{MA5;;z=a=tov_(pM*f3EyY$^npNCr z&TG}>qxmwkyA}4Xv5;<9@psU(Dd-pI#eW%32ZbnvzY?pFx?Uv~5RDp>QS5`-v*b(? zf=VpuIS8f4f_jP%ouZ=dUwC5Q&)fY**5!5s0^^!ft{KhiOWfL;IAS4wh~vIDyub^5 z>^r%&Dp4-541V`d+A$+6>7;3!G;RJ9pX6uCdFMO{=%w@l=<;vtJ=3*k}-m+v{(^9*A~6 zI9-IWBDb#{m>u-tMHCW_rbyVGq9)yoWUt@>LKCR3LM?&@*yfSExzc09QkogWLX&`w z_b*E@Z0xHj7HsG@I9g=81mCqj=!US?bM1*d4yXm5Ps^!l>Q%srCB2zW(wvMD4&71` zqj1RlTfa=nM$wBvVnbQ%n39ulGy+sjOTW^^)#-M{47CWqwLP=1u7tl;cYcyM4?W#3 z2{-zbK2A_AUD~!tkN(E}`XG!Eeu2HEM66eHBShikP~FK5dJUZ%5^Kv8&zmU@ES|F! z`GPVwq%cD%$#yy_f6x;P`*jWX-yE-h4KoUTX=!La$-WT6qxWSra{kLHxqsfVhf%NyF3DowX-a4438%4yiAKM9I3KHm27 z7CEQ691(WI3%~pE2=(e0s=#mG*S&hc5^t{PpguWm>6Zj<^m@jF*r|zvc>|2>gsqpc zTfHUJKCwv;Q)4KS=Hz8|2vlwWmeMxhG=w{9*=pu+>E(yQn3$#)1(JdAz}gPjT(Uo7 z4%p5G?@988PU5rc{S&pgEae|Wc5se`KMc*zCG6|%`eiVsIxa(sunXzUVUK)e@uBJe zWE(=L6e<8k6G=1V?TnDC^D7dJXc#;hfoB0%FpK4%y16LeIuQ9GXlL<51QvnNzHdM3 zq^6~cAjlmbF6utdbIgyh*?zF7sIa7xPEy1}AZ#9`;o&DmM)w!pq>bNc?k*{rD0-)- zJuR$}kF#F0;DemKOmD!_S^pTHT+LOI0ph4Hi>399IJr<||U4#P&qhWnM>tNSAKJ(&|-j;CrM@7be5M?1Re*ZuY# z<$;lWbx)DPiHfFv0Ca0=3f{M%uj60oQngTb{>X4OxBsYhWHJ?gr6CMw#8vBxDq&{* zE#sUQ5@-+d;ofJ~30+PjP~WG`Ypy2Er;=s98ZIeKM>SkP&p0Pg{UwY_f5i<^B^w363+g|7%-GGfz~uB6P$3)q z0lQ-uwi{Q}V|GA)?Nk&X4FK>b11PjT*s~%cr`tN z>6saHJmMVBuMEeqN~Q$NuBQ9@l(dxi1Am}AJYU$*qs8n|5-sYYzOq7ioS zZ+0W~b`MN@F+lm%#e`q~?y%7o7)gqd#BVcC(PUV*F9xy47(P)Is|uxgqEYS;?B(_x zz=oeR{}^QEynM|U9;_w#3PLzAnjteNZ3)m}!bnBA; z%MmK=nzJ=h+PA>M;?F5Db*`ZQrj)cQCNfmK8fUCr6Hhw6eKY2p;MdEjpjhqLn1-LQ zlKT3V4ky&L_Wnz1LV2g>b>bt0C3ml_PtuUtv~I%pxN@@XH(8A zX?s+D`2J!qm(bQ<*Dj^_zLYsXgEgw-)Dx9;>nBPjK4M#Cqhzf+slqte+Cp8gzx;IY zwG{XA09oEu_BZlQ^>t0rJpX0YzV0c@U&(l0R`!a?Qm#+0wv9h9Z&LHER__gK3ia5& z+jTF$pVQ{HO_KF<;pJs)TlW5wh_g53>z=v&+`cvEVvM!)#q8c^1ymkXu+^`U+f(p< zvB3widnw`-_Cxv?Zdm4ka%602g?p8Z4Aht@$mYgk_!h~PlZ|Y&RV(GPcdGkq>=K))YfkM6>Cdpe$zD~omsd?YXPSZEzK=5V z>Q_rPde|PD`?jL|y|l%3aixpEi-gw)rRQ;9)tz+p>cdYf-pZ@bo4MhZ`|MXaTMwj} z2G6ZXa9T8@PvC0j=M7OgA@f+5tQ1^S!n`#4*|1?$7@dh>QFD$Rq0ja|oChutxHLOSxxcdV1OnJoR_Xp5j@ z)y{7sEBc)rf$Pbxx`)j+HM{h%L{}oHdB$qqiglJ=7dFXnwL9@J{?{YBf5+TQ9xURH z-})$E?n^T-mesc|m!}?>|4Jom(f;z1f_<;#mlmIUB~||^^T{sAkk|8*QzT!U7n*l+ z>#a9g-vW<(zG^7pyW!^Jg!wA-B>kQ{9#2=AH`7yT+SAqR64j@#-M#q5r%3S~I>0sE zVQCXfNE8evKYe)DLgqkb=*Kj$Y2ld4hc$_Y00J zpWWA?7Pd}x&)w~_V#B^~h&>W^Ge+oU)vmhwp4BTe!1Z>^YX-p!ht!+DuKl;L`w_?F zqw9aElmII-v3j>D2C=;_lJ8Cn)_*FzH+;Xn);#^GO5nU(@K=E;Y6hFvH@DQho)=cf zW+k z^c~c=D8seVpgcHjTIY;_Wh$|DpL0q~0?#Y|@&yfFusp1CVcGKGWB^m7{UVKxt1o@| ze9}dI-r|@|y-y5p+Lh^kiiIe%a%0&78G%#qVHUgq4iSzf16~&g$OtIMArqk0kTQqk uvID&p^Vt75$bV>JF*vk={<0H$P|wJ9u~agdxAPJM5O})!xvXPx#1ZP1_K>z@;j|==^1poj532;bRa{vGqB>(^xB>_oNB=7(L|D{PpK~#8N?0pA- zoJINmv%T-$?cVM6-gB2LN$!%%rB@PKLJv(qP>M7~!A=!KP~<0~2nq@+3P_QTln~N; zF1g-&zuVsT|GwYuT`m%B1DJ~A>tH)NbE$25FtW@2oWMq5s1W2ga{EL zM2HX};uOJu5U~p*9R7SKuW-80o0jp9r2RBRWQ+a~@jnZ}4x-=xEuiv4p~&YLdyK~Y zv+R`XDwIX}{qLAQSC(r#`S)lxCV((5Qr2a{e2 z+4K&`^_W(#&(zM8pGK#J*-T}bR8YyKte$@vj+W^&$@ou)6cU9NQl$zKxdt+|mQ_9t z5>ksAGHpyWZn}*0oyON=!1ds8;d8t?ar|+@Pn2dV{OCB&XL{Vp;`#ez@X_g}r}-3| zD9sUh^7m-?6ei=NKLs3>=I;WhJu1yqUMI?LdU?^HBf=&>$4h%0oap+K<;B0J#~l%U zRNQC5(fLi{i13reO$(pG^!RAdF?yPw?j&(Xlyy|xXQ{7{{;0U=X^x2E-;;4i#S7n$ zisML$0ur?mGMxdEBX~q4PO36Ms-VA08Y2`+8V&ySkX2V#-&t4R05y>+l}ZJrLV~a_ z2;xfwatLZQwDjRPl~PW!1_j4;GH|p^sexXrfl{e}OcFxiB#A-+9}-KJV&TkWj1Ba_ z;SEOyMpB%N21|uZLS>R785AawE1_1%$k~Jt^ed6K=xkiFz8t>x4)l$=5I&k6o)F}) zOzBv?dOi%c5e(W~h?eqCft2LTnY$LtvjaHPHZo-&|1z)xSCVrk$H9*HAB9}0hK5M5 zTCfXh`_SRG4~K~mlLKcm&g~Nv2wo(Pzfdb3<=j34NM8oMifmCKv~PG?c_)HIO2kA% zbtbzEeugTCnaEIm)MV$uAQ4kxVnF37iGT#C4$u=AB{WoTYGwoiB>RclmCBMCOsF|y zA-;HVHBPUJ#Yj&-S_ZsF62^ZPBr+&SMjElAwkIX~r{ARe|8E-RaY=55uJ|IDGPMXB zOJON4MyUS)d_L|2BuQ8eW%43eR&0R5tU_S)0Q_!}lMF~ASJQycgFR0UqDDpak|>BE zQvZ|Egg4?0xQ>x_VVe>h2E}t8LOLOs@+0TLW3N;mu|YvGLbz@!KMBQg-(pB)L^#Pl zq>5-+a&l7SoWenlr?gTf*$+D;il;d0BtkHVz;gLh>DZx7%5g%l+%n2fPid%5ltd_p z>nx>74?DieI#Zvb9vW>|2Gv1E;VP;#jnWYU&*?}$BFjP=Hs~oGeFkt^Cgb!~(Cu{n zMP=YIZ#o2h3GpO{l;ohk%xx$mxsK2w+51$xoDei2AYHJJlgg;QCd*>GP#PlPtS7Re zsk}&OQfkY?dZMyePduhjT*Pj;{aJqz`Gg9d2uIr*jlmM~*FriO>*vTep$Pg=GOnv& zH`Bve#z36QyP(3T!xZ@Tx6uDBQ?Q-pkn}|&LG>~@xe;a#2~3)7Uq@YASF2w zdZ`=3!CA(*q6!ZD>!rK56$ z2y)vPWq{Dd&LD9T8kgnl0A<}b9dI`#B&OlCPI?|G?ka)*1 z?(|0TktCyZVL1x2vXEw0Vq#((Zf~UHNMuCjrIhDnai0Ma8Ig#LOq@193;8*T$WAjM zU>n1bJ!)%H^(9b%5Ja6@sW)I|Wg$$SA@ons;6a`3aE*@wqIUw$5T`%3EY^o1B@I=Du?X00)CVGE@c^StNP+1?BLGzKbsoBUt2tVtZNy*T8U`b`gZ7?Ygv%kvRem>-Nyvv%Cnf(x`T0qPPctmim()}MeclY36uL=v z$}gyfDrW(7X?dh0k|ExLFxgVj>y4z5&;-|71YPD#s1tLbl#Rh>_d#K$Hq4qaO^10j z!SKLO{%O+Ej|JI=g4(%|%1b02QhkH&F$8@+B2+Z-%vlM2N;>H_o$~U-&uvT&RHBN7 zCT9_~Wwb1F9O+{aKBtdJi5cqjSs+UOwpoF~?WU`JLOcjrQ%Mz$8mww45G zh;5C=2SYY=*;UXbQ#o;@50efd&nSXq*GfvG%PNAJ(x|No)K+#1cXOsh#Pm?5%!V$# zknD!^q;`}1c1UAqMr@63CO!umvNJFFjWG0N?{i4+1r*Nqltp!R!DplXK=^DuvRNN79hJtGNBy<|l>`lE*=l zG!urxGRQoGaP_p1Y@`P!cB*p3t+*1(@F7SN7QT@$` z=}(9T{mjLe;tLm^jm7gSFlS~lB(??|Y8!;t?}y5;3Sa*I2CSI70P}NoXsthpu3;Bt z8-~Idk61O}AqT+4d=@B7Cgh*B29Mn|4-0AvF~2+k<1J0t)kK|}+f$J5C>d$CXCg9q z-M21AYR49AY$8WR6RfH0js}ecZfy!K|N2F^X_X#ZHa4QQUx$@fpN?zRsBz$}I&}MZ zW$M_nf`I@smoLY6HsoNap#l55{gIVq(nZYtC3x_AXJf;vJXBQ`pr+7>&W08o>~hg$ zhBcr;>HJIt+gh=8?*NgY`pfMaCK-En?!gNm zv_V@m6RP(8_=Jd^jApSRw;K%~Z^y>YAPUm-*uS$yAa+5&0y9@G!w(-i7pGTcVky~h zQH&QmK59pgj|SUggy5p7ERP#?+xFq@b_wR>nb2L^fNjl(iCv`5Q5hrueLj#=l3L2J zc2xxw&H?lekuwUUV8I1M4m#@4L&W?452zfO3F@qcP%GNuc4(oaiKw&oJ-C_JQH^D> z*)WyPgMa7!=>F(ql2b#vqLD_K41MLbNIPRSr1n-gnwt3p20pM zcnOHR^ruLuAm^Dm52hK}2z2a&du$Byj0=&xb_0z0^N3&)S(|ksOo?L{+rFI~mJ!P0 zFCcBjIYfZwL6@**Uh`5jn_E1)H(t538bG`Ja#0dlyUpE?tU>RXY1=1NG% z4#L*dLIlDJUCBk1-+3_Rt%4yz4tM7+np6>)J$`3844S|x3$8-ix(gt8wZhraN(9aV z^LY;s)A6Z5Sv2bfU!!Vi8cpFF?Y%UxhiJ+L$I$fuV!&437|bGr_d_$4HnpoAR4S z1jqqL`ym89MBdCrh(GH`u#&IVW>pdSOM_%=3vAug$KuLhUjAiRX0Jj_&J4)WgNYW> z(=mQ4im)G&xY>w5?ORBws-d==MfENM9CdJZwL_9|4wBFMDl8?DvUFA*eEoaj>X*T^ z_HHCESp$8>ESQQ)$$mS?KD%g$CEGL?!o28u#8)mSyIBCeei-)FCMfd1gp@Njz>r1d zn2z-C9v(-3O|h-%Ctp@Uv(>D zX3Qm7W+10SjT1tJc5{4No>6#+=y7nQUu7q{6A~OD3**;wvbp8PcpZXQ6Q9FSy~-by&adY+P{F&3Iv_ z4f5lS>I9xqDB}un?sd1}ve?bI`Mfi5-ZfvvpIX!?i&vAfdG$gHmDYsV7#cJt$)S{H zujB0)^28vofI6#+^5Tv}@x!Ad)IMsuL{6QAh#i*`^uy!!AS6}7oMb@%mOtRmJAR74 zwGJV`w-KlerQQgWR)-i%91@a}5N|eOa;qCJ|0)d>o|uFrE6t`=ylgGRP#t72#3dk+ z(j+FvLCZ_H1f{_OlTIOgk3a%V3=tSDXDWeO9|J4r$LSKRFephO;7m+Wzdb&&5qYd<#jH3sIb^CNdMitSipMz>_!N;)|}sb8RtL zQJ#$$HRVY*khtth+;qtbq-c1VJ6hk9Kq6P5_{>#!d_xSLy!v~XQT8<~{=zfp)n*}) z+k|?6KF*Ac^f;uY#K5SgHlZ-BIToo&MyRO}joE^dY5N?T>;$xAX9*@ja6O3#$)Fy`57$n3*mhNL|CZCZJj|8(CaV&V-cIF#d4QGr0fRTJ-a30)yH_WiTLy+T3jA z^5T#fbJ)IQN+qmGaYA@{f);XaLy|2fMkm}ho&?{DHpLpLog=l@T1Zc6l!kN>Z&FeR zrv@NhNmWYds6F^DG27l0C{C_Ykt32HOV+5rHNN*AE)|5D8QoWMmG$1ql+~8ZT?vM{g zn$X0kn8b#NfJblNbN^DPp)(j^G#Y89tfrYc2U7pwZ6#Vg^aefDayhhmJv2%M)g_`D zg~k9ArUxxeNL+{h);NbU{pzglY(X(+2k!_A7XCcjkWx;ZU?L7!O zd6kbyVju~Y3-5w<>}j+-unf)b*1|Y*G1-HG;wfL(00#cB9*6Ea6PyB~a6(4FNZT zhaN)RUCStL8JeE?37o_3h&ql3Qiv?31eVpez_;-#G(2<*CLH-lTDcSwUU~@!;63x&U4g{;H4xk{wTWlTtr7j+vm8yodkmg24-xGWSTDZ>{#Qu8yH=s~m3N`4I1^gA zl3S9xkqNqjxsZ4Uqy2>CmciTjD%u~KPcp1T%OBo?wDN1PW{2P(+=!m1E}%ACfV?jEISW9HB-*vXU&e@nOK2jMK0D1|I(TGx*EH*P}Gu zgaDDYP(X$9vv0sHU$_Rh-u-Rd|Ko@8!1um_dF05YycDa_W9ij*IX%<+Tf(!1#*Ul{$93{)d4t2@Rzrt;65@@it zV#TGm;@$@z#)Cil5gxebdsv-EM1dTShX(u)HaDVR#kt4?lZOa+poq&}f?FQ?86N)8 zgLv=gAYa4#S5S%wKmc?)~vk@$ioy z!Cg09gv!Jq&4d@>s++%svzJw2#RWIwfrlQ!&%S*nX6MAf9|$3J<|2IgTT~9!`SC~T zx{7Sbjj33B&Qh0FF>Zfq zQ>7X^etA8f_{dJPNE>>3orud!f=W%qg!D4<@$WI5dm1*JHXq4k@Pe~C2^4XuIK3tg zn}7Ca{OX{e26LLp^$g>cS9YL}^0TC-;JSxy!^?lX34i(R7je@Wx#Y|Zn1A)9_}#-7 z;Pf&xF1h1c{PnqO@uO=>i0HEAoCv%h(1p6Xal|B>h}d!$o|Nd6I z^WxR`>gid+1Yyl}8}Q%_)tEi63}3tVTDQX=Ezgy|nqC$dX9b#gfra{5m8 z#H)Fhr7Q8+6F1@A*S~?=F3uw&!9PkF##}eH6k(G-+LdTrG`prWDl7tHHw6Yq0Lz3$eVk1S`&6hoy6Jp;r*u z*2iMz(sOX;nP=dvwaZbKm2eC}JpweSO9K6{ZM+Zto8E=9{*UPT<0CXaNx3UTK;r=0 zosi8`UP>qo*-#l>aI_wxPC)&KZ)x#(DCmO{6A9%>FNiotR@8a?q?B_mA+p*AS9c#d z5*|BA=azD46Z+xYS5IVv+N5hQ{4z7ty4Z+*DLLyzA{!T0@q&&CN=Fe?29K@0PgJTu z9Wj}G7~TFc#nFT}tq{HgKf?$)H{Ra{zY~r@@2>o6V@wgzlB?i*{ zLYk~@#>Bq82n0sqXl?~k7sDLK`=$9h%8&FJsW-{R8Ip_=zI9eq4B6;**as+_^-6UK z4)4Rr2Tx*r&;yyTn;fehve;B2IW!KP(56_25~!*!B?8a{_rSRD`v|ZM5(hjZeem1H zC`pj?L%zqVfW4^^P^Uwkm_ZXF7KGZB+h5~d^z~=qQ5MhyootJB!u$K=G;5G` zU~J<@keV}~(6WvRf?ZI%vaRulCktmBmoU#}QfE ziJ;3hr4yl_aR;4jcizkA*^YrfejUTLJ7L@W7<%7(o%BLlohHt|0#U7zvGd?S^2qsN zhfn~%-~{^mx}nZL9~+kDA}P@dvtCKgBr5cA5a!M0i8TAQb)e~x8)0e-Mko+KV6w7Q zPQdGd%k34yrYcBUadh^>rHVzWRTBxK1{k;7;iVasKD8X{)}MjOY?@8$^unfT|7a)P z`Tb*f=!H+v=aNFnBQO=iMM=oPW-cm2X!DEs>3u)KN1Y0!W~M+Al%VANui=8Y19<$Q zdvVwQ{SG@@Mg$T@^apEiz7p!~zs3*ly$e5iz5}Hfu0nxPiNSF@3>Gs?Djj0h>5Rx< zxDe@WFXH=@=I;A`h(CVVLc;m1)S&i=+0?ASH>&Sx*xVj{1dtEybA{eE95- z@%`_87Z3jGFW5UIhp&Abe*f#o@zy7Mu<_NW@Zi1Q!#5xKBlfnB!(h$E()nc=-S!;r zzxPi37(FH?XqHOt%y5tP;?)=4p_$NHtY1`wc%9HJCxC?XYCyU+ zfJ03VxI-EwWW*ya#f%u89BLwPE55K63kTlAH8(tg@BCsHQs$K-KR%2d&%J<~?tB&R z){fy-BKKF{{9D}fY&|^DsWQ)0dFClRBtd$gl7W6Zdu@=Vr=WnGy zx=(Q1SAT)8{39E=Y6%8`0@?E#G`fT_~utZclhXyhaeC`htr)Xc{hYxLOo7oiG~XBdf}!? zlEoOg0}zP|L#`+L!6^28@($j9`)%wUw4kIi8)}kW783_m{~k1rNsy46M1yV<{7NlN zOw>p(t45}KH(r0^EqrpI6R~L-!qdVh2bD_BCCv68@*~W%_-IU|Vx$)u-+0WAM9}}p zaVyLgB87u+HV-4Lih+tII7CTizw&L6ci% zIb4RuAdD5lrgP4p#>|jXPd<>wDxpN0Z0IS!*kb6D z!1#a%VbX_OPZP^d-uFcrL=BhkmIzhgIw@kHG^fyqWHcBBQ6k`WVt*3(2=b9^vW$Ev zX`&kp5`oEH26I^%$sEVo&^6>#Rn&&DDNvac$)S@EV7rwlph)1`Z+6)0wvpqW-iN5J z0jdM}E1DfbPJSWmAzcPYPshj*B{w0ejA<#%#cA+1Z-m#uD>;)HMj+KCP@M`$Pf73& z)Y9a2g1Q;WYSBSEV*`@ceFv!*-vw)7y1;FO^nwnRP|ZCJ>dv=e8)c<2j+A4H>}gHZ zHZ;Zx4++q3vYjxu7ZD#JFCs586A{SND!OzS_J*#*QcBfC;;1c2@5&e}ksB(5NQdx1 zfWR&YoF9MH68RC96Q;{BO%85NelS3vAnfH-#wJ2W#5htG$I(Qd?T~C!X^bU3M5UlS zB*owxkh%=!I{*eg5Tqx(J*$7Lp$JcQu`B0nnZ*o z(U?6{Pd1%Qeo{+;M7%U{5nChqn4|DDp}=m8?{9^=;wHqT&4jV21mW(Ta0Ptim-J9) ztb)|BH*za|lIk!xKXojW@iU;!oC{TGD{PIUlqMn@Z=sTr&(x;JBiOPP9uL{3AU9Qk zx~Dv|6l$#(p59KfWtNxoq;yWZaL0hRf<^Spanuex9t0_z^uSzbO7;Ij2({%~7Dkg9 zmN*MaXJ)|D)r9T|KRRnSJ|{1MPsPAB(Ss3}3MuK-ctR-gB2oxHIg}cch`f?Qq$I|{ zNaeUaE(F{*40P0^vArMm=*ImiP~*A!_hQG+J=k~P09r=9Fc}Rr_@|<1RwkTHJ5fjB zwT-P9agZFO?XaZ~vx;SC*}NMEYY$@ghX*j0kc*-u1w4I&a1qP5WRzmryh0dMBnR&+ zA%ZF;LsJ;kP>v2`pr;2tokV~f5n~_<1kY##_IBzqyDFFZF?A|IJSpS`9h5`>f}P#y z?(RbGu#*hMi{ZXz?CAsI9HVfyPdZJN(ecWFWz!zyyW&(CnqQwhz+OG^EAoNY8fkHZ^0< zp?-wi{Ww(L1!s_)G!3j_8ZfOh7UT4F=V8_CYTx|-UtWoJ7McG$=t@CYJ>TBk$2 z)d;KAARN6h>7LpB+eSw*;?toZXL7|TOui=`nQ3}Bdi&7QGJu_XhTu(zL!niRiIy(Z zwvJ+a%!ZaaDr-j@>ZmL~-(C*|;iZ9g?YafH_L}AR!unF=ClIlxHuenfFBge(Qo|ptV>NseN)**i3Wr&}*8k$&U zKQwtwD~B3Aa5Ntfwhu&Fi7?R%&zJ_v6e1-t3D6|w5@9ma7#z_RuefQ8&OzM53lS4* zgR_5Ja8eOa4zf(>3lrdJ+(vUzir^>z)TAvhlcMNlj7j-olRde?0)^fpY()^Bm}Lf}R?+yUgqrGQnOOpiG?LRK`S^Z35k`q27pB=4B7V_@ zh@CkLa+)}Rh$(N150BKrF~FPONgV1o5${Op1bIj=Sw#L~iRbtCL~dEr1W2kj(YQ=< z&_|}#3zrI8fwC&0^0&g#(MZ>l!{xlDY?=5(&Y7@KyK2jF8h<9T=^L z?a)RVOT*C3T}yp$a#W%8@&Xu3;^1Kd%G{E{Bur-(bfKWhhMXo3!t`UD+T9ZeO*YGC zh1!|}g~>?mB?w76F+g8&IV`glLm3=|mnQs?(Uq#EO@^T~VjGq@tDub~8*teXph>1I z-b(o-lFo9WO-ZB_k$)rv5p|Y-bIMX%|dwi5NKXZb!H*>0zIjuNVv`K zZfhofI@zBoJ>sEGD}*#ieU^L(Zxf1ut|2+YAuaVgvU`mx8cy*-{ipr?{{W%as|@kT zEhI0B4|<#u47csad+&dUPG2H&^X6d5^0~-PjuH0z91lEmmul3|Pz9LO z9eWj-n3M?Pq3!r^<8BNJ3ZIIC$329>i6AUVDKHRwo=h*(nvtSY(Re|FJINZO2*c%c zfREVV2IgB|N9&81j>j9e<3Qgy{1oSN4TrDv*BI3W|s z(hjt=IVoHLZ+AP|Juyg6BI6n&qagyEm|lRnRWo2FCtx(vjFtvuzhe|#PC1GT$}ng4 zEX>MJf?|@@(hS_|>p}e?C(G8vg~+9dOI+n&Bx+d6{sl5N4$w<+|nTIV}0cK z#$ZUzLITa!4N5P%dT1s}%@wc>qHn^7)SPn6s~`fA77rf(*l2jamyFs##>>X^;Uh|T zpipY#q0-0^V@*eCc{wtTG(f4eFjHG80wd@p$2Krdow&aV9Ym6NFy-6uJm9HmhLoC- z1+&77AkE%XL|_F_951P-7tcV7Vib+dWAIE4W>jXt){Cv%8z9fE#?s1k=uTqLTn={` zzI`c`YmruvjM;N$V%3riBDEGIS;BD0VlltE5T&{CL~f->*3;~m+EYmr4YmO(&2(k* z$Zb$Yh{%8?Jr(n+^D%#3F3OAIVd7>MVgZMJoa!A!LQX7*!V>Y|{a>VOVpfK@c+9EH z$BYCO{6yNVRA=5wDQEkpvgE8+no$e3!_}fpgGvq3G7~VPFd2CnW|%Y)IoJ*rl#U;? zn6mXrP?=qany{^L0wLEJc5i9I!4W@X2C{#H1SwhRSTMf`NpN5yHV%2RAe;_vA1w;! z7Gv$=G?=7%XjMe)Xl^pzMTEqXMS3d2oHCm22Z>BF;ffabcY_itbb8^Trr9&}7&_2` zo$WM{Il3*mfRh$NGDx+E=dBl{v()SiR9EIAUMGQGuO_k=(be%mX~`*B5)+Y}oJ=1p zOj9cg1WABMx*ZZC@#?9)veX_v58NS|h$W^XEiDZ?8g~TpNpWHS1coO<@OsInsXvYS zseP!w%T%#2YA8IcM>?g6C$dP5O#M%GOw)ZPgn4x^i=1|%K;Zly-nSHqV#lo@nZxce zn#B*pZzsK)k|9&e5%!G0J2pZNHyN6QJm~Tk2u~(T)#QLPG9VpmgnQUVIwclJb|~Sa z7bcqFpoxz(r3kv*InbpOu_HptH5QsiLSrAvqDoAG#5;_TB2nlw5l~+?&LF$@!_nSO zKPd${RN+{M<26krLvkE(RJUBH6S9d+#*(db1p9z=XtQTSmpu!*i~{0_L}oZocDR}p zX!FWx0_T9MZacj02)hh>M`;|Tao3ayb!sULG@;bS#ZsLuP?_}z47L&Bq;_C|sNTX~ z7KHwjXp*3vQ3aK>AD&*Cpz>`ueu_4(Fd|3RENGL{sY=v|)rllmCc^xn!UT~e&Py0C zDK6SJG9&e!gmg$l)GuX3j%7UNk&Z%6xSQU@(1*Xl;HDjr<}IQLFq8g>9J1Kiq(d9& zup<)2kXwidltpxrT>*_XfpkHW`{4%IdxAuADV*ffrDhW`rnYB2aaxi~ZpoqXR!Ng~ zB5W2*L_Cg`6M;9Ao)U6}RW>>AId+rH3=BqYKj!cgsYFbSyz0pd2{bn9)5vxzNCs|~ znZo{Fp`GayX7XuD74lQZr&IP!w4!pz^iY^HNNrS>*(!{^f(%p#sXm3$WI-#BoPr|fg=z^P-TF{ z6d*@D4rmjQ7RURfC^E9?;Dq3Y|i1HM-NTf}R*bcyJ6p8hGRp@64zC*J<+$Iw)+$1S(sfJ@iTfk_)Fi=}2miwx!b5dt99 z^6kxXoPOE0xba4k@9L#UqK*@g)1b=b5$O<~a%OVG))?(jyqB)wuaDr{U%d`@Jo*A+ zOIM+?Ad#-2d_zGR*V8e7>0;Oqe1eAlK}_DH;q-hcV~RnAvHmtl(`F<7xE_K)NdnZy zews;Z$Y$L3y}0A-hjGpAo6*T~#HbKwjK}Kh&%*=vT!?$VwiL7Cl?c$a!qPc|MUH%n zfI6U`9B0|;Ww__Q4S3+*b8+isWyp$5HiZrsaJkUV58EUpAdALrp-&rCi02imYtF*G z_gsuezBwNydKr8Ynz8eeV`ORX$g&vZT=l)R_|C15;f!?;;G$bz!h3Zz*d24>vG6$D zaB>?cd+^lPpU0DXh>Tfv$j&Rmwcj`&_uX|Ne)y$qcw33^Q6Hd5F_FF`%ry+4(NcgC zRTyrM9d?@%$#WOs$3MMTNORxqYjJw9L9p@93tpA&*|81Z`1-H$?A`#1DvMyyL>^9H z%}-U2+KHR$gy1;p&+Opys;cmnZ(oET-g7=~JS&R`KSgRHwtHOgSffrtX=OEP7A(Yq zMYE9=YYsn4m}Mzz&2> zUl3o#=VKa>F^jHWP=o3@#Y8%p(NpXR1w0W*@nM<}mYIz%VG>+sW(xxz& z_zO8lt?&SWOqT<>(S-0=9Y)`{11*nVfu_f}O+WhrTAuqq zxOK~su&5f!*m5Fxdh!i&sN+&-PNNehK1vg>Dv>O_r#0^!#FmsI(C`XeL;d6y$PdYr zpsTnHNhC+|Szm{><}_+va_q@#5Su}|8JiHuj*{9yZle5RcymA33z+!m4zxZ_dfM0r z^O6f-w2;#$J^5{2@Q)4&w<@Jw^>DehM3$q5L^@Q>UIf+H9=OJ)XdO*BN?}=fBkAJn z^tlz5*>fYd8#;i|w_iiJ@arVs_0U=r@DEaZ2`MSPYY@YK*ns9IzkzX28Io!iMcRtT z_p$xx|I61%SC^vocXwl~i;3wFoK2e$(k(;6*|#7jF9F`#?c_r#M~McC)Mbc2{c9w{ zH;}UKT9`7kh^R*NCvi1l^qudb@iEfR7d({Yi?*Zx#aqzy=%r|X;a9K^ zL~h?pXmaV=@dLE|@^Uo2y$iZo>k*Td3OM;JSe8eqegy1yClxaJmupIsJzmHVwlEw4 zx}L};FZ=P4XTJSEL;I6g3wGB2m!~1kUIRT%mLx>dW6%0AO&E8e^A~r(?yo}9%JZNw z#zI+gHT3dY1j30>n~9vOXoA3`RYm0neQ@o10`0%J1g$SUjX>5-NUkg(IY^ce`9d?1 zw;ZZV_kMWE?xti45|vCN!k9w#*xQa^U|JtvBdt&P}Go^-6 zEBx5~x9tcUb5L3lLoD3|pO-o?u|HmVr52&Fh)CecyeU`8=OX8*hAB?X*&{w71t~=K z1XkYMg3h>XUtXOL zkCz8z(ia(%f;WGXF8sn1f?@bZ`_Z!ZT|9EzRXG0~YUgv##fHmo#$R?1z(<7YxaP-$ zBX>BO{iu{G_&r_>xE(MOSyqzfd`c4*Uj7Xfj(vdNy|NMAw!l=Ml~UcZ7MzXSzO)p* zzrPz--1rMLkSxbX7!y6Cs2f+1(@utkMg)a|%Anb+a1e0M5bCItu3_S$OXuAJEN50q_C8oMsXvNmTzbn*H;^$wast zI}8IOxL6k+f; zKf|obuVU6|kK)N)HenT)3uN8!wuZ?)o|6Yk^X-X<-XgZb4x8fyp~wbgN^)X$7dGt} zMB>7^xM_i!%r`)G7KW1TjAp||vk?igG`ZjoMR^1$JwLF+PAbR)0O#v;Vsvy2J70MX zm#zE;)$41d-#f7GYp-K-H{S;llyEG_9;Eg|c;ors;Wxj23Qzs&1#Bgo;5$8$BzzZO z0=;88WTonOHwcv{fh9f-=3oc@`usC^>Zxb(;@$z_>Jx%w4BN*s>ZJbt?(gxdC#kHb zh|vDwWo+-55cK}{fyNW59TOivi0)V3hi1v8Fhx%WU~`d}QiU_)j0?Vp%qt#8Qq=-z zlM;oyC){K_Ddk&K!ksAR5ZO)uO0|^q84vBe8<26;Pmw%t5e#J)BVpkZs7*RZJs+ay z7w6#McTY#>_RR=(Ho$2c#?&?-IkhDbwa`E-yyUdyyeh)NDDq&+&4KISU*Yzy@gCYstmcB2(*Sie8?`ZhEPFa5B$wPLDP2^cy;@5jzRSZ> z)0i~83EjWC00+Ol25oP?iU8@s-*y0gi4z_oM=kfSBpDW?_PZCNZ|4pozmuee{R$ua z%d50h_bEa`rIC$9?1uWf(BGp`6vt&uY$5@9kiNOxVp)SQU~KYb6hxNfVyBlBohtrkJ~97mCuJY(}$1y z33_?YBgtzy8!?G37J3&$JxqWj%9Px?}Ze>DWJBB#-i8a~U$PK0t$bU6I!-`~ zsxz*_Z8u+n0wOUyTbl$A3==f_?y~!knwEn^nkn;Pld-Weh@-|D+24WTm_#IJH#LI&N_4TmkmBCB~ #$jL`h@eJhWWkM@+ zptpO31}5$>GMa^Tp}yCNg8U@(HFZ;Z9zY~e8{&{vSd5~=JS3Q980hN5$hezYQX)Kh zJ>v8tDX$!J3X3p+@3`

    `7j4Ur*X4-U!4t21)$*d#Nr z8X_!*F(DPX1%+e-MW`y9gIsL@9pg3{{K+;}-H2;ybZFXp2=c@{$}hhImEiod zs?q%Cr|>5t1VPR>qKe}pWb4P4EnP@lzY`$pd@GJc6MR!?jROjych*k zMtNyAN^%pRS5v1VS)Fz_I!V_h)w8g$Bn|ng2B8id$K;uxROOGH9fwdFQ7QV)glD{M z0BxP4uoPxON8w)bFug-E%v@NG;<6l+(Wg8=5hkrn(9ux$Fvhg8sIDr;g3=73tjI0a z!@8ReemjRHJqa^QvyhXhM^ai6DhlFYh|113ckIzYG>P&wP&-;tMK;DVl$GV8EGvcv z9zQ1RAr#f5k(0FH;}82W>*8V<2gfl28pLT}^ec6wr+h4}s=?YhMw*!MzDyO;3Nuh% zoQkw~9g;GVQIr`Y$gUu#oHH{E#d%g(<71JNmxA0x>X+1xTxYJABxFb1{{7fB5r@U6 z%|%*h0)u0IWRUF^*38Bi*3HJ6LalHBw?d;uW?mXf^W$KSH6opCuqfLMt-^u2{oPO| zaV5CQXVs z?44Ct99^`oaks|3p@Bw%ySoPu8e9?x?hsrWcXx*XAtbnKSbGa|} zb*&mTMy*;k?VZmY=K2DTF5#l4u)-TJ+9@K%_c_v@!}6YKa>NaX86p;LZw07yApFg^ z%2#Fybpn~rDnKBsS0{%AQE^v2pb@b$9!lt4zN>GwYZif=2VDP`q1X) z-*eA@qiQHTOPd9D$l$U!?a4P>QGF}f$2=#Te?*O)+wW~H5MW%n> z7bg-%(6^zth}e~moe5zf2?E5Ef8wm77|}fEc_9%|HICeq)7$4WH`#w8_J0$-ZfgY? zUD^ZzqsQp=6it{}L!#xQ=Eqc3Pr)_ip}dwnuH=mth{^5xo8+bx*7-km;VK=-`pJZ6 z*JfOy+aH#Xi^-E3#v6!?5$t3+TpzAXS@RGbmW>eZ^9?d!f9~K~f3P08{vJLi4~ZM% zzhRTuS7M0O7Lu@*4-%{-UJCkBHEN8mY{k}(Rfo2VZU>b68BUB!Aw-m~EO z(tseS9?|E-?sP4gFK(YQO+hs=jG&!2F)YR5C788r;I7u)~ElUt&mwN>RLsLR1MV86g7h`}r-uif|r8Z9W zOt*1o#3R{1m&d9uJgIho#%1?26j4IrO?HrwMbEv|*9V8?3EQN%2i`!MDxyDV_>1Lc zG{Kd+U@d-0-|TsVi05vKGV%4K?G}H~6%5Js5{Gnfgz$IXpC2w0vXT&Yb!i&r+@amI zWakQRbn-mks~rYlG1N;VFmSSA#}eB_8Md7{lE{Nwy~RGuMKdss1o_8bE=-|(_Y%FF zVL4d56%~BG&~@GOaz5xSb`wk=I>)sz=bsgXq(@8AA}&>Tc97v2k!*2A;cTDE`hFy9 z0dq6tep1&-kw1C5mo*1k|T=_VAyvM$`G##Oh-Mr9^~#1Qe;*+{(UBApuzljm{q{68(v?LnqT7sMw>C4tlKuU zU0O!V`hYkxVH{hin@K{logh?{JgAGC{X{l-a^9s`gZsTew(X|T?!Y|EoqJn=be8eB z$6Oo@kod4zRtA#PvhAAe_G;^_CKKWI{K{P38!3=cmYWrJNh@$j7BMLpY~j$Bm@hdu zj5eE03)1@6n;P5$we$J=0stE26iU=ueFX(koGg42QYz-gDoOc=GW&Pa0oa(o{73fU zIYU>Fjc9I8MmL?hryx}HdO4hXaYgNO5_=YOe|%Uvax_*XMhc~`)YR$c``$Dbm|I=m z=yBK5!WsCkaT;`Vz?G1Id+F2F?NdyE|2!R6g6|VGcBaIy*VZ;^zIwE2kZNRAJIXK; zYVMi%X;JQx(x1;8N=?##=J;a}mE*q@Y!{<3D#S)s1U&2i;Elvy*kIzO3>g04T;7g< zK)?K_;!JWmowU^d8w=~_#9*Zl$_)3}qV>o^)?pA4L9&h-!qPN)kmxuhyG}R#rD(y` z5##SD{>}h$waZ7E&q%N=bG6)b;Zj0aXub|uDfMMcSj41Ksx)F%QxUvbgqB7v7)Lgo zCNWb~yaEwm1j=IvQfXD}u{yj&4hK_ILiKh+&0>jvq zn>NAiyD)I9LX!6M0u6Aa6v*G4Ekm7dAHo^Sf>=v&(e7BIPaja$E}SwC60feCzh%3M zn~jGtt#a2e1#=W7xl;_<5iV&ywmA8ljkvGaqaXe&_8B==OEf zGzKYVkMHN-a)~P^DK9QiMmM@jQR-lsE6^odXOj26NBv9%)f!8$Ux&GzN6yn#2mN)! z+R&`Wf@arH;}cDvo|nl@h0cIEk` zZkZw*y*C5MOh?u{5jI!qOe2ds9_s~~rDpMWandpsuvn-dVItN~TF!DK9ey>;fSE9n zt&x8`Qal=q%YklXMIar)BjQ}F*2#!mztJl!~SCHq;I7){e(jHElgb@qxAK2cS zX8R4p$bnf&=BhveWM;_&?L7Mu?dCDFa1>rwop&D+Xshcma35%gf-q!R!WPuL=hOYS z?t=Tl?mK0$w?YS%avh$PS%L~)Y-pP4nTND5QGMwsg4SP7;!!OA+cpf#YZkdr8*{QQ zBxW;X+y#XST|;a47i^*DdlBDV_E(#IkF>9EvARTFv>P?Cg5NF3V8~R0dNdYx{!N$r zF>NXS)}rcl4UISfDxz;y3_$NvkqTXqLn&C!<^^{4Zb?@pVK@|?yUM+&s1|51TII&X zMOw$$E+=6@&4wB|#Y=8mv}nH&vUaQOdW$^;Lk4kaB2sn>V?RhlVbi(8^eBuKoZUEQ z2=!i`n&y&>1;GrcVYeXJLhX3n58Xlb!RFiP#HE4BqbYH>43+=(VV8Z!qgSd zX}PUYZh=8mk4*!^&6DKUgG@Xox#WO6%A+ogGC@BFr(opk_}AltK-*-#fuvtbTN>!Y z2|p=%8ctd{n1r2%RlPLy1O*JtXTiaS{B{07tOl&4O?ABj93M*Te^G~fP9{E8S=n}c zp>`@wBHWYe$k_b!Wo;bM*Y!o!!FdgZyrc&`IGDIb`oPbvNE?nzQ!}f`d6MY$z1Tu2 zJPY%ohC=QIHV{m0_*zEs7AqN`Ks!gGzpX8dotqso$c%N4c=NQ7_l&Zn`@V`sltkDa zc`irh+BEv|_}^i7EK8-;vAc;G6t+|ewPYYRup9L{DY|~l!kn@u#{|b-$ju}KgVNb2 zr_#4fWT=wsZvpL2xA;EQqwKp}hkQonOCyeHr5%voaOybw8sEK@o!hoYO-Jk&_Z!JR zJ!!iUzpym8N5c9D)wSU||Mv{I?U0q9BUI2j43!UabP8)sb%W&F#$>4Pf%UPp?-Pow z7jkv0Y4~p%WYxE9-xsS>p-VUKW8!1!_y^u(n`jH-+%6M+>;@iHltv9-i^kT*y9Aa` zS&Tkbi&H_5u%u03AGMM9%3X%IoHxDb;%sE9Xh%D7p-So{UC3r52uw@%4g*jLqJBQN!rQRHwB6{5yMTva%+rf*o3EnHsc z{Z==Ix)h*0#q|9T5=@}AV)ylXl*K_DTkdkS#Mh7)ZdOokC3m-r5IgVq4pgdUVRJLM zoWgu|&wlfs(l6-mi7Re~y13#zzacCCi3J|Fk#vKWkElE*;|^6V;B*a%NGx#T1N^LU z@b>ELJ{YpTL62IFB?11#dMM?yJR}ksV2+d95VvXK3;;!KrV!Prb{BkFM-zHt#LmQ5 zUr#&0{YIScG`xnXbEVxBIwYVfNMv1sBPQ@KUl{q$q|hFFE<@o5xz92mzYoso6oAsJ zFu$!Gj~3klrxXJe!4(;v3uebNXwF_(`2Y_I`!Dld5MCp& zJf9+pA5^NWB~6pQqpp85z@BW{e{b5@{G9YUs1l^|^GuD!_NH~i<*K5ljDhqMBQ-SF z2?41A4W&nNYOod*>6;nHtWt5p3r{^sk~L9C?P_$=8uIc`BaU8S0@s0)>@~Lrwl_S0TWFm( z1x-I1!gU14ddX*g?%}6I%V@1H(HIXtC>8|zP{fMX_=DxSW5Xiakadytg~;n2xkjh z7OHuTrd@y%9nti?9O=+sUMR;gp|;IKH-1D|liIw5X!&uK7ac8fUJBnDf{qSe407^Y z@?m-R_llrqa*lt5Aoo^;r|dP}H?i(s73Y~4zEI#>A6xlL3LIZLTz$~`K3%EXg5vix z*v=h;OUBTV{V+ryN_NX4%~^pIwJY$>pz5KkXg3Mdcf7-?l+xHejvdpnpG>{CXWbRR zIjBU;IOgcn@ASYYEAhQRRh6K7#y|g5BosM+mQCHah^OD#4AHntxuIUl>T~)qjxnt~ z{|I!{ZK{{@FMCDXbf?gx8FOA(<+4a18m*0XO^CDXY#UIL_^QkWrQ&Hwy#}D&zbh~; zG%(gYiuW2>rTx*Vd_#G@CbJlX+;>;rJ9>~A(0a$CTdIYrF{MB&*+@%9!k-4TE;^DKAY(tIe}f)|5h$+UY1=I0-FOzW+puK_R@3@v zjbv~3@XYUrHpQu^c1HS#pROUa#qa`{#fpd0KH7vwR*LSh_CQ)&Ke`c?{Ykcsad69p$tD6~LLs4X z11L2vmh@fN&+)70qfs|R0>i;q^kn(Gds_T{g~O`B-=yhHYj_lUTIfZlbmdz1mOH|1 zM(3~W$k$xliKm{Ml+z(exsas!ILUb1VYyfj#U5O`I_~cqbHabvP%<)))kuS~6aoxn zoa1{?CyT?kKqoTr#PuQ3OG*1gMob^3RY8~4Qu`gF-bQWQI5nrB@MA`^3pBFy1Y`nxk1LSe+&4&&IHDr5vvC;^pHWMDVJq2#)3u3StgNSdh<)4~DenRYs|!2)8*T#KBpmg2jlHSV4 zL38IOXn?_JDRiTOC0|*p_MI>qt`=SJm0EUQ`rAaL)$kUFEz;Rn;xU2_$YoBt9fSeD zv#>;oq9{^u<9`z-B(H!`l(HkHMl)b-^xq*|t^VSeoA8ou zfV4hM5X-iCPPN-3r}ZqdK~Q^ePp~*bNKFY{V>*nIOi|cRaQ=Z#!$4O^wB{mXCz>*E zp$|ZqmhCWoRQ!u7f!aKAp1UG1q$cw4+*#fqH>*m8j3BxdY&=0Ug*YHHQXty<8VV;L zMo;M-i*S_VM$Gte;gi6kQ8q9p1YkHB1~f~zCA+1e<%-iua#og{#Kgl;9BfIcI-W^! z5mwV{!;WpyKv?NdZdAkmduHJq!at1{GjvV=vs59tkb6qR3l4!q!S82Qe6oe z8E$(WJ>(B>-+rSlZ{P8-cm7FLgaGqV6^1cWuqrKEO5U;Ic%exB?Su**ODzmDVG2dA zPCB?$TtxooEHpbg0$PK{{8=|Jc;Xe|&+#cZ?)r=a_doC@JXIWsW4EjA`UCqEZKcD2 z`@LLd#D<>==Lbnh_#1ir1l9-h{7B`XueSu@>h)$DFY8c|?lb<^J6A`r`&*!GAij*I zVYxPXg-99_TM9o&Y5b!@GU=&5_By>8ozPD@eXvx%qnk*Irg3U zlW;G6+*PxQ*+~27nT^Gt-O=-8@lM&iFh)7-e2!$Vr$lMNxm<$0IKM+V`4PMH;XT)L z4I=Zs;o5kP)+62~30mL2Oqu{Ox_CGsYiknG%k9u+*Y~ye4zeic%NxM6&~=X3$(`>1 z?!P}nKD%# zmcr2Plnz;*Tfzh(S$``5(JgjHssBWq+;NZrNR)R^w5Auo?+)j>sU3R8H%af&zFG z!%2-_{9^iV_o$jm4D+-A9NkQ3k%muz(Y1e<#1${jM5iA^D?WJ^EQTY^J_vLtOdjCw z!3-PBeSuZOFRuCb4=yn;OEI zq9!0IJR%8L$tzyT3rcu~II75fLwLZB@-&d%$sIkbI+laT?FK*|4>faopgf|$qsT)7 z%zeL;Qub8;mX$ojO`LfVs^X}F+-o_vt*UU0Vvk|lmbKEO57LafLa+~9*nWGr@W#a6~=Zd@fH&Exb{^;UW_ z+Y3JsS^?MiQ#}@><J*fA@6o)7vXRi7>VcFbnkeKrdL#plXiFDM@y9Gp z$)Rg@V;u}JS%29o%|gt7d-lET_wUf1hGl#7&a1x_#0Nk~4+TWYUfS#jAU5`0%J9R@ z=Y7>&{2(B&nR4E@2(6<9sqLcF*vtW_%05_NwH=>fALP+QBqD{i7tm{|$=+KEqSGc& zP(|qFSPDBejkN6VV%1l;&9(?!5en>hb-EuEp=Oq{HDmfk2#@cFjP&%x&b~>vtkaX2 zj8H4_5i2@deKN4)w`eqf@MH#FylqS%sHK0bx7!>j;s3@Ud~BsvEwB19K!HVWaKBgF zm`#?#Xi!-}zSPxPWpJloAbPw5(BvyUr~;R<6tI(we~_|MCDLQ{jRKN4JyH**rK1)9 zlZrae@sIS#LGBG=d{6(}cXvp}`>>YnZm|1W9x`(cp6|qBI8p=u8Ay)JES#P+`UJ;l4Lz+{r75oUb4aLpUcMo>M~?V zhlmiD^8TZH!oQ|f?;=hM*PM>fWD52#1RB1W#~*IRr{lmA;4#{D;acL}$(OSfea_w5T$wzc+ej@Ec&pI(fW zu(T-b6~t1Aa4n&OQn}?XbmRlTo?P`7m9qjsX zBOpf)4u%IibA~GX^d@gN+%d)n@BC@QpJ(CN?#lYJ6%u#beL-TY_HK;wC>qziK3LdH z@NbV3prcLAXvVDpuxB5w4PIAg04tZ&f(F7>kRp}DZg|-pGHlvU8{&^50#StGoisY+ zDl}XE=(aR+3%x_){h&`j)xLLQmN|7s4!pJz_|mweJj?x*Rl4xZPTeXf$%$SGndu;s?YAi>=9}IMj3?O$eLcJQ_A*k z|1gKltp|-Edlyt$n2x2ackvt%eQGB(_0t3INIg|mG6qCy5p6^nw_sEdvUDXr$b?_q zn7_TU))?2Q+QIE*`;pi`K)sj^+Az3SRLHFlWqcko?x)ju<11O9a5Wi`(!g5^+g=kY zk`LpZ7{+baw#?KdgkvAV{?5d}v%sH!7h%^jjL!PqL0no}$?`eqr*xc&O^-V^H^*Gl zUaXDN?IoRVjRkL=osjzSK9!{MHrJvSLj#=7nkOdfFAkIjUQ!H@-T1$z$Dbdnz6#7W z{y>VjJz1FD2@vie*D>(t85cRJvfoenVNzUzDHZx~e|Vy^RcA%UR+bSK$&5(aFmK*_ z6zt#=Aozuo$$86Z!-T??yA|gp_}w}SpGW4{&Sh$O5RNm!X4*Ja`NscP`oe#dsdwOi zqQ%W`f%4FH?%4*lV>hx-W3+lCJeSdC^bz%hhb0}9I{#FPsbCR50&2wdu_qFSR_5Vg zzH{9`w`*?{()Rk_+x*OIoCigvmam2bC38YUh_ua*RmBEu!ejv`3e+XU8M0x|B}ALt zhGc^E7YFOjh&`e$YdCR*%^wpMu4yTK_9$#uTQI#NXqEWO4ZcR2QVi>4hkd!?G;yvo zpZOt0e8ZsLVGW;(?|HuDGEuaa6Nwo0m1?1#>|~r@Q!CBHcH+wOaWRgaln>cvzqIgX z(vQ2bzUZQh)%JA<&*y%Ptg26kMou6guHiI<&6}XZeOYVJ+K)t4`Z(mbEHbN1J8eL z4fB&M2_bm#9GaIqAav%?yEmrqROJSv0{kPbSfKWG>sY8GRzpVYxu z>#N0SC%Tw#CE4FC0r`viqTl8SZKrOM@jW_Lxaz*QA-duaMUJ)DI6j^(ncm;OyeKVl z95yr7J3?6XMF0L`?$cfNBPWeF|GQLi(YGr*`+CFp{93QPpfw^r8d?nt%53%6NK)lh z7bPoD$U~2*MAXM>nBs>f1z0tILZRM>>>mEJ8benT<9W&F(37eeqa`4ETzLkWA?uab z!Mn9xhr|G5son~s)Q-J?Li!?Vy}Kqizwmv|mw@NPS^h;0ZwTIG-X<~}#G)vV2c z&gZeHg^r29#iM!XdyBJ0Vu^`HsiykYGNAY587j zVX3=ao>G1_8%P~nxV{)zSYHZ;7IMy>yb>#)R9cmOX+T+KCKd;e3O+jq&OtYn(Ax(#>hl|Es>@k9yyJ0?RK3Y zwVz`oflxOz$WUW;JV|-HUXABqw-`d`fU$@FRjTjlV>>H`TVqklccHcQDHKaJCI_RkTo+ z>eM~i*@WnroZviXGG2swGv3jk_O^@Hu(!ZR6tSlV*}=4&nB542O`Ns{SZ+R^MCKdK zeK5vCc)VK4ces>>L&z&EfwA{Ud)fFA;P>#ED--)z;!_&>zXt)e3JZWp zE=(KSgkTYVAEUV848wEVPeK{~jXo=5`p;P&o7=1P#ExaAyx;QURHbEp!?NhF^+ov? z4Q&OsTOI$X^8?ySiC9@vWhjKjumlLnLm;k)H+dU=i{ar2d$i2a}c{E>68Tn?gkJ4yLgp0NC)VTES zS^fQ$o;RzX8MbHQziFwvc(Jc72mWaBI$pU!ZNOa|8CQ^PW1UXTt){Gr@hTAGcEjlI zds>xT9Lxeltv#Mt1c#kZku9?)XGR#5;Bqp3O#1YGJnuG_{&gKtzbqIM-Ia zRsIXDYPgqKy4TYMso}f(_{LByY}OpH@Q_$mWa9=!i*Q7bk3=#`Hua6B<+E72gmKF{|a%qO3O*5Rg_XGL6$#!xB15PsH^TUnHj@*zGo8Kw`v zmS+F#s!J6ZHxNb@=912gC9r!1IJ1$G@)jE$Lt6|nHv^dSP}zD=;avCdEX4VF!#plc&f(F$H6>M2Tx%%y1=MBdD61%Qe1i$FlI-Y^|52|-a)}p5}y@`gP%x;5(K-^ zEhQT9%<N)y7I{P5?li?Rd$lhXhz30I6OF z=q2x+IXLC$<)73vH6V`b5_K4h<=`;3uZHJR+JWLIpADH`DEjUXsLafh3hIdyIIl2# zo}TWuUx7a8mMNt;-?qH)zJ(u7>T)AH{Wh9)i%A^+u`i4{OIR?AQA`F`71tDjbI-9h z6$4;mi;zckc)>lzif0whRN5(x+rn8yL6pHki_aBytj;~y-gQhuz2M;F56uPyZPpk3 zvB40mK_4r{RAct;f(IrL_|+uokd)%fhg=2=8{{sZAddMLQJJ0Xhv5XNF)7C@WD`>! z1T9&F^703z!nYIO$)Me;#A8vM4$f@+`d~^XiPOV!Qx$S8FCQBt3=wxmdGv@WtSkX$ z-qY$bD}7WD&7AZMc}&bs2B=0`Bz~QByH__5CDQ%^_fuy)@OwTWX2oI03xE7K#Lq+w z>lz1E49c(P{`F^WDta~e& zm;7CV&vz%*W9Obt(8Ix9X}Q7s*X=KcU`FJMkw5dTYc%_wh8G9f>c_gX2~mUXD*_qc zS#O{zPfg7h^*(*&hWJzNXV-wsfIb5LK*)KLNzJU=OcyPzwm-Aov z*FvzPI|ogw`jO6GTud)c_X$T2L*jRw+~Stog5yIFNd<4V<$N*N1Do0vbQ+-QIoyqa12Y#mZj(Mif`j`q%)wFXpcsFLFZWAYKRgbHK0yOn zJD;f*Ee2&;{eoiLnu_QeI)0BHf`zJRdFL~~V=EU4fK9;Xtzh#}w%NQqBf1{C)&l1y z{@j)GutO3@r7kj1)?B%O(9x<3$Lj4F}g8hQKb% zCnb}0WQPJ{oyZ$9*8VMsgsqPynV^B+Adl?Mj2p#`+d;#3&=*ySpyZleet-CXXV4kI z%o8dWrWXho%_21lj8YU7%P8#t0iNMbefQgZFH z_1FBQ#jsz6grb6*r3rgF|%a@WYoc zR6?~dA$m?zCvX-HE8urgmlSw<=93ASv#-%dpfz4oA!!zk`NuOMTY4DO0{j`l{-ZMU zrQ*Kn&~%9|e>rj>~zWiG1P>&96#Z4V?X!%J5Zp{>v2^-|4{CxrcP znsS!sw!6Ecau0!)k(_^FAq15zrN>ShA*o`N-7*Cg+l-l2HK5T0=X8*!MqR#uBaNEA zJMj0dghW5eL6#<_jRsgURy5j4EJK?^bY%Qgor>-QX1O+A!o)XTrvHu%aY6!UNAB!h zTENL=^5qN=BAplP;_xWycYDuv9+f8=o<;a+|MrTir;)bJ(fhkeVMgTuJa9r#ioZgwp@nvgs%_NZB+Y~gj%Zdncez>nm2?%=RmYDM&mHZSXh#dRaa022f?NZ7uuuHGLuo^}Ugzu@bK zjq+a|m&jLH&{X^+jgSJGjI43goW)l~?k7Qp6z<+To|M(_bK`)|&+0zkl}RKiDjkQy zvlFf^RIfL-iGV%u9=_-v?bESa1V>d=Y_J;RGzVcF#pEfB8W?q$2`*+eeJUwB`b~ca z0;9=o?gs83RQ(}Or|m?lZEa-1?uv3rG++Me-M`Yj$-V3ld2Z>fcV{pXb`Jrzd!i3z z2GNcO{s5n;b5~ceve>qU=}Gyv_r+Ss?$$iS{O%{?)GY;x(hSuQ&6jMMhl!y!e~zh} z?|rJ}a~}SZS`LkWR@^Cij{ayuxfmR5=Zm5yt@c&&bo%Jx;E#U@eeONU>D%otgU-jz zs3Dox;|!DrI~jAb1Q+*PZk6*GV{nzk9lv|$jm`5xhr{;x{vDP3npd`A3gdACIfzrc z(?jeL>2a#Hp3qm?;`)Mg6D7m33%lo6GehJ3)Oz17U@ByQ9X)OB6<+wYmra34tY7(v zkV@fq5U2^e^Q8}YQ1^{O_%RCE$tx6=l3tY%B;C!k6rAS&f^*t=<=)2MfU@4=3`q7t zLLb1M-@H?O0aAKyzzU!D0Jl!OrbGT9pLJAI^b<60(Z{`zi?!XE4PsM3(scMEMh`FN zH`nsSVvU7g`TcGWRu|aWfTTuVbj$G%6jqD(o*ch|a<9j{o=b>sz@;1@6c%HyE?qV`;ZE+gnE$l{PwEO1plK4DSOS!zUsS z@YxaaY}gLTubi}b)+MQs8Rks2l`*FW#GoGbt$_K}M>pYfZ8_ITi*t?VS)GDy#e0Rt zYE)NOyB@CfHq!YuNBG~Zk5Nsh4agVnrD2!CEA2AbOE}|yE&-U~o`Fdq{5sQt5!KC( z)&|hoZB`X4SIrUt3@w&t==xP?`|J7f%Jb!h@1i%@cmR6IT}*5iZi~1#J{h-aW#mn(;5DE z=Pm4Wy@NDA63v2GXkhGnOT-DEV}3n$(OhvdwTR!E zGt$$Hg9-)qH-tK0@zy+dRqu!Tw8}a*uzcP|qHszt@XDhkc6qSPq`Z)G{ZH8rToVj5 zNG!Th>wNA%t~{35IKA97ZU|uuhpoC}g0Ka2Yif`Z zb7QP%x9E?3X${Mcy)VMTI->wzCBc=05Oh|77pqwgeK*D}u=;jdd1=97dcH?$T zzO{3LmB*Xbi!~~zu5Q0*HL})BqnU~r zVE;W1FOpcZB;M*p0W9_JMt@>n+}NZGwDe_O$&>ZqNBA)-V$kYWu*51SOx7%dO@pxW zNNyK0h8z|}E>fZbVH#@DO2|~M>7h;%ZG=1%V7)0B0YUbWokPiDo-43B(C9kR&Znjk z08c7%>54X}F>g9&i|GD*Lw9`mh@&cUA^PZ|+7n9R#cb3>TEW^0-|74C$Mb01jlCo< z5cqn5-BhQ@7=5-DK~3Gs`q(!AuD7qFCDw%zB?DYlzh=A6cHH5H9^4fh6vX3#dqAV3 zPFp4~uuT!%s)2_;8}>|hGZy*pYvml*+17g)I5v7lQ2$d^$Z^bVOLEt)++0Xlq!6Gz zQPbj5Y;A9ClG{sL+91mg)KqzC5eCiVMhjsaPQ#73bn&W(0rb((YU&QGzR7<4_(9MM zY4colyjmvvF`mZqw7F>?xiMexrdF8Xb06^>sr@#akhz?!}Zm&T)KLJ`g3=gfzc$jp?(W`*hK3 z11z#X`rx@mFQDeI2H#d`|%FJ)HH7`ygrEl(-ZniBBvP<8kpsmty z0x~l()J+yFY0PFn(pH9r4^SQZIB0@`OCSCmV9zVu*K;xM|!o++2OF8Qm zk|%Nty2UP6xGSayQU9VZS&X)*RcKNcHnWiv&xwStNHV-g91IV~+o1tS+!975h!yuu zBvQ%T^p_^ZRCdv6;vw>a03z@&S}6|?U?{x-3W~P)-)#~pRquClEBKd?3sQ^NT9ltC zB-7#?y=9{nnM0Sokytj40>1b<{N+6CM)YA*yoUD=W_xk%UIT0NUS2S|;_-s=2;!;bC1mQWtKGDa{$~~ca{niy27huM&lHy&>)L46)=1P<~m5o z#zBr)j!>6F@Bi{mx6Ya6E2*Sos{wloi|p8_E%8pWPQX%zj=b+T-S4+(y^mgwRbe_z z3TMyfN>nIGZoGfB>5D4b;VbcqSyZH2&hKdlM~5X;1|y_2Q_Z`AZ(IJ;tk|9S#p#}JiqrG zcX@oJLH)5xvj?$IBd-Z4zwejJxOCu9jPIZJP$Vrv!m&U7zXY_>4HM9J7x-6V-Dj~5 z)js7z*9Fq8r;B6X90mq~gqXDx^@1seR8_M3CoWFS2cn{O<% z^h7W(ve&%|XSR}cbQF)%nm35UEM@823gH>lz}yPH<11|N#Zg&Ckv;GNqZ}p+k4|E4 zw>LHx&Ht0IesDJMc_4DSt>L6qM5@}Yj9Hi$iOy%DO!=T)^rHrjAO*eJ+7HRLUjJMa z5D{pCv6t;mnfe23Gs)vEbjeRlfDeqmlWZqdMTW-VaZ9eLJ)hsgOqLrcJKK0GVdP3W zK2F?|m1S+}0`w-fu@L*TZ?2p4fjrAofOpEJ!|>-Hw)K z!*ByYHw`1G@v|OQY5>FnZkwt`gp)g(+7c!;TXLre)8E&e9sm#jmGyH( zA5RKH9uIKD=921UCD_ALN>sr5yAqg*kh%Z4`Kr2@3AJ5_cPq*8hByIideKZ|ZmJ}* z_Wg*aE;?THhrmrZB`8nf{8I*^&F=vMqU^vqbW8EI^?*3uQ|Zz%g|Dg6Tpd2}th%jm zBWWx>w!Y{_UN`W^4!}TYc4Wwxj50BCTJ{=EBG@?=n^!M`j!ofTpBr$rGGLE=PAHDQ zk-=P0!-g$Gc5q0UG0KMnj^C@|qd#pe(nfo5e|m>H;~+1~QFDRK#v@&-Y_%yBD+o;$ z{u>v{J9~qWAmmM*%4Qtk466HRt!P62r)Qaa%8G=f)JY?v7;4R2{#$Zxiy%FRN#dgv zx(Q3)G@XmOh9El6hz>PD{r$PanYn)+F4sP5Z_u#wXu4L&_mn=z`t~>vz7r{rPW&&H z#-SsupTo39(o7|CvD}12dy&1DHe6$9Oh$`@KX8;f!@jTtzmF#Ibo)dhC`ZG~C8%^l zt{?mHE8@lF*_v$Yr^xKX`ljm|^lGmM4Q9O>;-Q8Z&wrH^(u3{s^jh1I72^S3^K9n> z%2FuOm_p22;(6YrzgvpY+Rxs33_NN=6ko1~A-1C|k#bL`zO%8E-E0486DI;4#V?)_ zug-o|hy?sd_4BkMEUU`|9Q+(OJ!zfVOzgJhmSCjY-#zH*wtJcsT8g?Abxt)UBhB*K z(D}A;Bm((iDh3@Fo#k;gTiJXcxdY=nC|CQD4U8n@6po~l+ZSng?+?SR_Mslh>WlmA zNqJBH44IyU03)p$!*=+>n1t048C>=D)nGK3D<~LqVNn_{*kmWCg0rT%$_1uU`gh`$ zi%IImryToh-qT(=p(E2f1OVElH`70_8i8gF#Ec?f7-{PU2E?T9E7b=Pg3NPbK^qVA zt8sAjjGKnLVzuoVj`o3MEbH+~Q%3j}&a<5N)indd{PD@Md$;w1Ra!yf`4)Wo$cQc4jB!(DQ#QW{2W{M zYU7m}+lr>>NI6eNKG^Ucyj113&C7kKN|nzJqNBqKJT+YC=%m0CU7IIliFMQ^nklBz z8(Wm#+2)S_9x>{$9NJ#_;)wSzQPFjfnGvFg2>Rg{P5FrO$JQDji#2svYjPym%I;ea zBnta)c+e#;c#lemk&yF#^K>=JV|_V{!^k&^(7TTO*}ucCk~7^jK;KhFM~z>s8r98k z8z${bjrd0=(VB^X<i8>Y#*(^ni_+EcZg+_=zPKGbp26P>OAkEzJ%|ub(K_A8$$GE1EOclA2^BT1Dh) zb2*y+V2xhdFH|BCdB482Iv3duklk0g%P-hd&4H=t6(U2G9n6e@F-J+t-~bXm&FOtz8V^0@|Vnv7s zE@b(iwD?bmb`fE&%Jw#P8+U7(T6UaZ`)AnAM$LkP*s~BZC5lXx{PPA_()&5Vm~%gA zMTXIq97^C=KoMOO|1R~XvV3spj+=LE6N{T9Bm(2m+36p)edsX}-_|~|RM0A8vV}jc zn1PZw#FiFL{gZq|c6_IHLXkPB-@Si-Q9vO6tXw%LJ5;FvA53qgx+4#0R>Z8#42N5; zNt<{!Tc$6ReS4o9p^5grcOIwQxph$Q>W8ztt~JjMrvG(YThAAi{qO2xlRp($H^)A} zZjK7(iP5&zYSNTO07@R1pD^jWd!>u0C5L?n&p-pmG#SN`t8U&?ek>71qRd9RtEpoL_Zt0z>r3c>;V7R9&R%S6q;-$6{>1MUn^2V1P5$&`BQYGg z-E&JgEgx@_Q&WaStxpX*DP=Q`pU{zk^@Uc9eD)~wTn5Z(zjSZ23_+cpFWNLlwrM-z z^(wW|>?VeuDd~6n;wq)DOEqNIc6y5ErA{UW{+`3LD8{JpyM8{vdhX@_7dbIg^g%&O zTD1N!Ttr>Ps8q_+aTkSMf-dpcJz<t_ZQjOGpA>&y1Hh%={nST${poR+W?Q#-#!iAnLe}FWtTwS zNVBJ`@oaOiY&E|Mh@$3;kgHRRl-D6UJ`Rr`#csfi?> z&y&*{*PE_E6i7BLI*mW0hK?;MxIl>J!dVe_u$5G+>>(!(P8s5jirEh3&3#BG&otid z7Rh^&NOQt$Z{a^MY!MrMU4smYZ63~IS!<+nBl?n!{Qfz!|W#Yqh@bjKvG>GEHUGiIl<(Drtjj!oaMM?Nt65)T1J|K zAmoahn*kT|#RXn2UhbaY<<)J=-goLdRY9VY^Qxi97Nvtp3fVS49!SVlM3YI@libQfhUiPW(`GB9@Wj{zDkG?lnS3hD3&R~v{_{TC^Hb_ zFx5#d6O}8^b}b>Y1#sxS>88XbA^vwUw!2@6D5&by z_Bv`2<({r#TNDE2$;@>|ln~qh=Wb}urzz(m#K^MrN)J&b$j^%3OHLx~eZ@nZ`;zU} zOC8G%A?Bj@*1Zhg$LpX8xb+5<2ayjVp-G7Crf9zl^*`i9h9WzJ{~)^m-TrdND?tt! zw*x6t>X`f)oFK=@TRj0)>gTIq#Lx28>id+zcR2_<2ePuG3>Z1eM?uWVa(tma+7OMI zKChLo8_MzWU4FOuqYMq*52?&3S|a!N@@qbXrR{^7=b2E?Z1F5MnB|Rc9<4XSndjTu z<3Hw#?xDdB-e2`iCcM1q3%BZRDPxN2?6Cr&A8DAbe zo=@v{#M@~?8Z%|GzbkQyA6^O5sCRDEAWit*p{`yI0{0yyNTTqgubYr#sT3P8xp{B) z-5fkkKl_vLQ`%vcKhD!@C?V6fUP|=(A>}zzd@FCoyVFyWL5uKfJ-IhHo()%RJRMOd z<gd6-7491fo*>O0M@lUkcH~k>6~` zgjf|%3|eYG;&Tzk6qb@WByu|>E-li|T|9XWSx$=#Q2dBMQ%91WPd(z*NGKkn6*n$H8~?Lf&jbkW~cvww$6Q+Ew3%(qCiDT3-$aEO0WuGiIY&l^ENf zw?*0)jCU{3sO6Ayz%ai;s(=J2atwRQ<8#4mkS1}6Y7?1};o+JRte=?{7m$jniJTJY z`rv`@cFZ$=G<~vESbSt=I{i#EJA9VQZ2r?QSk?cf&ZV;H!3HypGMd%=(|oC3P|6{x z1_dE}-Cd74LuXEq>10y~vryn<$#`$~mywu!`>$q_!a_#xuXA-RPQM9e@_o8e+cmoG zM6A7*?bNErwNkJ6Dy#a*F;*4Z=BUs8StgB@2k*iu!C)#4mORy1vB`)ew)Mk4jtj8_ z%edCnr&3*=Fs?qe#pXw*(+l~QHQKEi5@8`*3W%XDDAU?#^@OMRmF*%~qk7kxE?pZm z`VlQcWS%zMiNxs!VyF2OBo>ui!qBrMZJt}o3CFU>^!a{g(-7y{!9&Bh>yw6_CTJR` zY0}GUa*x%ZAL1iC4R0EpkPG-ig46d&Gqj5n*9(wScn178R3V3MFz-Ul^Ry8*>X<%!a?xEpqKCJ$kRy4%wT9bh>D(G6vxMLW-B{q zm8~kdNY9I5o*@O;bT!P}U`F!GEKisgP0!lNJ5V_Kh<-4g8Eq$@RZ+9%pAk$oQXa8S z#mnKES6Er(e4nS8Vmgy}=``eena4f`jYjrFkl1D~iHg(>;qI|9QM_2e#p zCK^voe;RDSC8@$Ryb1rQQJa-E*xRI0Wx$_Mt{WiQ2ct03&6JOk-CQ76q<)hlnxq~L z+a$w_v3n+@5#Bfoxkq>x)uhit;0A`EX+ChY)ySmxC|i0^Oj8pFrBR5y*J5!IIZ-h% z0yK8k-~4M92Y$;?O|_T6>)Y3V&#U@dGjQx8irak zMD{0j3){3D>!BgOPlTQXjuKQzK2o@ju-oUiYx@22`aFU0;WT-c@!h{xFCeKkigqh{ z!G+EJ1xH0E2cb7Y*OsY9T{U+2rddRz2@~Z2+?jYS*of%t6!$HyWkrCtJ2{8`~w2a0lZk@ZI6^4ndaH?PWn4}I;{Bg;xU*4@-Iee{vH#pm6 zCyjtT_p;y9brA^n%;;0MYkw!;I}lkjUi?FjJ_?#Y2y<&QRF#*F7p zg8LgNSqqQ7!p6;DJp1hvx6KNk=IrT#EYFujCb#>B`>nZ!t#wDzM=O8!~#5WvN3Sh0N=?o9d_sI%G&<4PgLnK1LeN&#j%wFaf#}8tU&+t-$;TK z2mjqN(o#4Nj9`_UwoheAgE8Z2vuJ60jDk>=^50hvYL}D53~lZ&2PG0dVZLfH_I19R zT@M>YCl2>A2(^MfS5(5EJ;UkwT2YFhs{a7;{zLmqf zD1OAm!aE!!$Y9siFAs=Ti;bE!DXYBDqe(QjUa7g?p?#V~TV>{glYpx>R+KMHPtLRU=M6rHwXGB-2c(iGm%1DVcg(dY-)D-ppEb(0Q z_S;g&Z|v?u@QGOBDD(X^!-{6_Ru22XhN%LLbaWgu2x(*KU8Ejxs>`sp`I#y_@&^ri zpnmQTQ!yMfnouyBWoq*X4VV&42c|u(Li@9--{3eC79kxn++&SN2YG^d(H7qhmEG%^ zu^L`3?(Wy*&$^O-7DLOe|H{8^H6k-{$nh>9149{&IP5g|Mr`oj;b(a5yQcB*!07oQ zLw{siXAd-pzzJIlqN;_@anQ$W7NgRS)sq_cwm4$1r7=datN%&>OCn?XgkakEd<%5} zw#)3d^L-(2cTnSEgDuAiI2y;S=(t3}&1H<{|6}4TguiQ+e7lf1GOkN-@s&wu~ zItqmV^>CkN(Yf~{-g*iZXyQaT@AsB?zs4%Rtsdo#Wku^~0Ll;ZZ-c}0yJA|uEbkYd zc*BfZt$$aHNqYAtk^CR(`7!78GDv~R9gC)cF~tO5t&T#!ngyO0<>r;-=y#t-I2(>+ z67?Vv`l2&h9}D(Xf1#3^l8+&O?I9A4z&xyks-K!f=i2hlNknnC%fu9|*(GIO_20{U zruKcl9$B1cN8}P13q?ML*k(UP43?z9)cCz`YxA)W1aK9@pR?uIa^i?KsUYfpusTgSDj-LAi#`cqMWGEco-&v-MtgtJ=jA;xhmm-ryq zkxG?@yr5Tbr#^cDCp01VyAVTwN`Hgm&hI@`Awj;e_}{ul-%_KyVim(@<{5+v z4rYilkiU|TZ#oKE$qMo=<)qn_NfpuS@a^M3t|YoPUb!U@N2{pV%@psR10RKt5ju%OM5?1x4St!KSeP#ngwvJ*jN=ev&V&cwAgRHCV(U zEvK{<%+eeL?3L&q{n=QL!k^)30v${F)`gE=AitLkc1rk6ufyM=Bg|S z{uVxw^IWZvWE}&08Or)AjBN<{911zUI67YI`%;kT zVEwO6xS*gU5vBf$x!VVr?V28_T%bg=O0qF=w9HGd=Xl`fY&7 zD}79pHZksKX`J!QC!(M{X+LdZyJq7RkSIfqLEwl$YZleFQ@q`` z;0n8GZg?7Q^>BStG6;P)-D*cPmL7S$IwM4d+ZUtQHH%8A&C%A`{OC(kPbb71kvF+I zu+CTK>~<4VW$+1&HTT%(;EdOWsk4?s-Qnb?dZo7{B2?yvkhVBIkC$?i!2D1-76%$t zx@gAPKV=E;#THXMEVT)q^wtIEzGUtdjEtM!9L}ZbZtiW?wZIH|2=r0s#3}NI!^|=0 zX+P13d$t8Hda~xxHg*NODq-pm6jro-ui2FcEY|*1zpJ0oTajDuYq;nunJ}Fj{yBv;g(t}?E$3KcqR&{nO`a@CA&(@w(TneSbTh(bh>&N+kc5HpRj=QR3;t_5-&8STZV z3rG6d^B<)aY(nJLq=lY13%+I)x*Z)qTi8=4U7C_fm<7FzeBU1wvXfrUB0q%j?m(|i zKGJAr;TwjD&_(FEB4EkFTpYjLRo1HskC)=|5cH`A+f*mr(-%hU?5`+z^ucQ|c^l56c$5mHB*9)^%ZQSKM+c|%JuiKwzphUB|M zXke&g{%W^c_MV@Jr0IhyXq=)ugp+yfd>?H)&u%IH zkW0sNu1`gCd8yukh>s*!3ubEp!GY~0Y)>4CZ1&!U3Ek|OPm-T9koFbhwawgZwMITr z5(I}efNY2E8^67UW(b+5Y=yM!)?8pD8-1`}R#R#UIm%A=cyW~e>cW;2qp)fmD4C)c zlkq9ORQcb46Uyd{$+bFOmt>P2Fsd({4QB_+{WRj0};KBUW%AU z*|99Cr)$2mmBm1_hoT|^Shs&MUh3;NrwyC%EDz0Q{`+3gVf%3Wsi`S~O3I(06ZIXb z6LlSN)XP$2s#n4-B|h}!*;Hm5H!?}dq#_bfh5~xlbx9d)fuqoDzDSYPecM}#V!lb0 zEjo?IInN?Ry^X#aDcRMeo6tk~aT-D z2i@dSTgYx$-`BH4;^TlQS(tl(f5F*w(Dn5({7Y(N4`2q@>H;3&yBSL^T9)sI?Ja>N z8F5d9h(kvWW=)@lm3hNTB>;ZufRwJy9i6oxBApP}H&tW+o@=;|sF~mgX{k^+oa2y;e3vQW)WR90@y_I!Ty?lK)#x}e zJs&|KVb{?ODhPJdqa7q;{6v`XkQyXQrjqyu$oVNAAHvdSaeFLArg@POScv zcsaR*)YBfXMVG7$y`~y96@{77JX4dngftOPTL!M=Vhu9>)*no#qrAWRWsG!U;>tk` z{>`Z-R)O!Lkj7#J6(un@6WXjdT2l+&`3Wr!DRQwE2j!#hn8n1zL=eLNzJdzvEj0=C zlEM&TY^#hebw=4E>LfeNxmTaGCpT4yPLxuq4a;J=Ed3KfEg)y=0!GdHbHp`>eXgwT zepC-}UNhP0*7-BXb2>MDrs{&v4?G4wU_Q`{HMf5ZlvqE7F+aqRIa1jENTkzfk9f5^ zRyeyflF`<3fRI#`Ah&fK^#awP-;^{I2Z+Yu?=H}F**A4++Dfs~V9yP2Dyi6xrP!8) zBQ)CvdB*nB?QLg1&~fOuM~_ONF@`ZU$&H&(Z*|N2f}|7Vjk~yLHGI||WE@?q-So*+ z&HW$>aZf0ml4s?l$} zoFcjZ9&%X(=!}rx>FMzun;vT>R#9EDalGsydECbgXw-NRwPjFM#S59~UQ(BjEcN^O zy&kRJ>GLs_fXuHBHJsCFG1?xQ4+Zn0r@}+Xv8Fr=x*S$ek zoZ6zR#;?;VCAWIx?Cc6ZA3SaBU|GG$=(GP^j7jIci=tebKOz-S8)*}G6YzDI(05l` z4dKA1Sae8I*Sn`=^cqgem>yO>a%0^`LW#t%?>fmeSDR_`-tqGt&plekZgI!Foe#jb z4r4w&R#jO-x=iJ19}jTB(c$F#xi^2(g{PG3S{P9f6R#^H=^80(J{%=49 zZLJBywk&94gatzn$Y_)vfWf=JZ?28q05M?4nYlSxR}Y-zz>5&?!0O?o*fgnc;b_Wi z{2@9jW{!E}>Sz558q!myF&qWPvlabDNem*$B*n2hL^&t;!=osM? z_|`4@$T;@PKt+*gW#PE6q$UdVA%t_XOj!fmZyS>+vh=h?c5Ho^-(Ci^|3>4{OkK4u z@9<5;V)cTq<9^8J*y2n%*X3_4h~rZp=RJodmucKoBD-O(3f1N(Mi{;3%GibE)Fohqq1F##(>Ti%h1Qt{=D~1XR5ManxWbku zg#8_1tEkCVLaoW*(qDZhfmQ`c611?1%VU#vO60?9X<;*)H|l9D&3)lB51y>7{{ax+ zRyPAG`*W3;(NO$ovUpv66utJ*fo+BPQEtcY+lh_gF^&z$f$tYofwnhItpGD<_{yW~ zx9wd#JMfVkpZsQgegwTM(7RQHUJ^Y~)d=w+2!!?^21*nQ#`7a7kZHz9W%D3aNyaCD z3)x<0%%hBeP)2iw?dq?+z$<&Eh^C_G958a*3E_JZSsfx#2vWhkLqYfiLpiG_14cm{ zfDRLG#()EQ#e2$G*=Bd8h^m6%=uuIHnA3A~Y6cmJ4{ga+TWw@Gl^l!l6@`AecStQ$ z|I1M>*0UIO+rgmGYm?Rhz$HzB!yE<|8~-Dv@7=c#^?5?O6RAH0e#Pl42w5r;x_ZNZ zE<;y~GIN&wMA0XTj=uLh{Bg0)hBdP7!@fsu5`Wca@fIvMhj)^@|FpdjUXMzd$q)v- zoqN{L-e%*mZv|Qa_w#lVnH^U-3uIEhwyy*(oKfOlPh#1#_>Rk5rU@k-P>Z}Rn?95v)XXF0rvHzdE%n?SMnqb5bQ1+YtNAm`BOknLEt+KN zz%T{%_5Ddi8h?6nzL}o)Hv*^?I+?a}-qM!W(f(!PnCCDZ7QSQzd7C^gWRL)JpEgm&G|K z(QOT0Cl=#@2s0VccU_rhFH7W8K*OFIid5^G#O z+<>yOW;pHSV0q7p2mubd3B`<$JI|B$=g2RPN{gc1YBU9mJ85%p)Xu3@dArQ@lal5$ zB#3T@GJ3V~#m2viiU`Gj>J0?=`NYeHG&85V`1A3(6Ffwu@cstbZak98=FH~LAAdQz=)F8`w>Dluw}<}pS5$Ss;~mLJ zK(5N;?KcTpd_2_S7M5B}XGsa>;frdWW#Z9W5}WzHj8XCz%OlZUm-qPJ9w07@wm?-| z?$F=^?&>(QHRvgF(Zu9he`U{|pdl`Pk#VSh}>TxG%Bo!4H zBOpyKs>p{>Ceqrya2}i-EmoF9{x+Zt0kO?&Bj9y2Vb0l`VuaS>aJnG)$&*3hc~zQ& zm6K9IkXuxefT$Fph7?6Zdh~0TZXK2{HKQrzYJ(p-Rde@ zHCP782zx5$QJv8J%6u=zCNGt8Hz5AXS~PUjnZ!?DBQh3UQmq+!jWK|6S?cv!IH$n4 zY9c1uLP%736p*YpNy4};(di*leQV>Mhfqr!$U!HP*%vXSkm8WDiJUE>b&xV@#0()W z^^B(whsx@AlC|XIz^n*Vc!^Zk3+#gwIz2asjvvI#HO{O6xu8jeV520PgzW|-+V$8X zodz6`Q9VtA(O*!(k}x!n%{60BJ=u4VnUxG|tR6%_6uy{lD2eBsE<7CS-nP(M-8)oh zMRyTvyvCrNZX195CIc%xQu(~)G5p0{$!n;G{4#VwG_=$(N6rX0VV(v(c{PpXss^GQ zqPxT<85W*ttX4GxpD^}>%Wd*IG!M?M7t^WbFyh$I$TqT3{{uI3@6Inkks*ka zt2>l5AG2a%{_eBrlzSf-j%7s1(p%5>14@0$Ml@&({{TNE#o@A}J_dU>*)vHnVdK>6 zoow_D(tZ~}CPv46NOufo{-X5XUtVA)<%tI?P&pq*r{V=0PN#zt)D?9T!ggkVE*_y+ z%HEP+mh>}QK4a6siu(4CuQZ6o*>W$!+h$12>f3g@ue?|JlL7^8vGtPsG?|&0 z#r#Z{byWl4NU9lg6#rPAHIOu&Jr+{q0l%+d*ThC^GTqj+&{v#nvz6-x+H`+{f2&}&-0ignuuOJkAWYQMEQkrR9IrNo@auCL7GZa1|MM<}9X$dWBY)qF zV62h?i?rZinjKC{CT+xf$0CO;=vRKC!`d*8%5GkCe2lPSx!lP(_am>~dlY!T%C6`^ zWjSV`C-yo+ZIa^M_q1k=O~o4fpNT&p+f=PjO&%`lf1YA%{U1-mnrA{e_B@f9J5PReF|XYww-Ioxc4UN9Ox0yfoI(AFB*%{khLi}fA%l2a0S{NZ%%(!rLnw@E^lKv1 z!`K`J_+FKng8I=}8DmK}GgS2tOjvR|v8u}0?g#w7zIXcfdqBn+LTSL_YPdjK#6=LM z|G^gF?zqubsE$xT`gNG+M<0OH9-Z+;DRl&qcJK_xSNY6D`&rqWv`=6$yo1}`P*W8q zJEeE8w}gte+_?amyu7?5>KZfVa+)X&X?or4#z|H90TC@eUju-G! zv@}JfrFl%02tZ_?@(3wR-ABc8em9Dmf_PSsQ&LRXG61!qwMIBGmk@^zd|!^?@sd!d zY+7g0FP8rCq>;m#1Qv#gNZWD4`J8;2UxUa$5d`P4)za$H6iu5{RMfYR7l(kUt}}}> z^7?KZEgW{)U96#H7NoQj{F%}W+I`o|xydYE)K`@1p`IFp1YA)y>Z1lGH_&2oDdW{a ztbxcbS)$5Gj$L)5rO`*%IlY$yPE#IERF#^Qi?ABr2QE6T-`KYYR9HNAM0I%8p~p$? zaKnvzoiD%b+TVQHV_{(pBk`K}e?jC#>DVhHmzz?{a33oB1(>j5 z7JHPFq6_a!7p$#FUSKcZ-dR|#OpGwGb|KvT%1B}b>*0|s#F-+&h$ATJ82GLt6C9!9 zzgEWP{MD?F3Lu*hSZ^60j}><~Yy{~E8~=E;csa~H zZ&!|Hs>+%}j8S7o!o`!RA}-{<96LB9*T?X&WXOcFh8W2!E1jUC-25n;Y7Wi}X6mlL z;U-(OITY@3|BQ&d$d&q!!g!J4kVe2WMPz(=Gl^BZE$8stvSeq@#cIjB5on-M?g@m5 zH!jNKqt2yWh={fu{Rv}u9yax0zZ{;|`fOc{j%l9bky31RGLW1AT017~Ajc|uLKfHZnk+LD`a%2}o!Xsp zA(P6Q>ETqM5O2is+?tZcAaujy@$g`-*^v(_n)~sk_&W@%6wK*zXNq~|E<~@L{5GCd zOZ=&X;gck?Ly1FC!Xjn(bsWXpeo8 z={Hb7;C~FDf`p0iRjxQr}rnE_n*(CLauF#(>JX55>;N>EJSLthqm z-b|6JEXlB8uIFMq9n^Q5+}tIXPeXT06jJOO-;x76Ba|VP&Vs#0c;A~ zYbC!T1ZgS2LAj6^=CVbxfQ-33dHecAXT;bJDZLN*l{%e~NIhDd*2)wVH|H!W3GD{M=@s|}uX{yvp#P-hq96a>^<=w}J|xF^ zTag+>CbZHO$$R}<8UOgU^?+6NuU<9okX8w_RO~M2bzBQ@Zn&Wok{3bi9v5Gej&hvH zT$oBpk=!Y2O7nX~b(}fwcP_)9s#(tKpP5`$v;KH~(-w0VioKa7cM0sK!aiO+{xt2@Bb!PXE3P9gRqgf_jxk z(sj4aG$|qIS~3QmgJ>&mCOtcAP(K9$26#Dx&1H-4`84u;u+Z^4d#`?yAv`Pj@jz4`?$NhKwc0zE8MEewX4D-X~c)mV%`vYI!90sN#a zO^1{d^ah7H zIOs_)i;m(fmL@145L!Guy!h%P91BKMdm@IEv9)7DRM8IUC*_^YlSWg*BB$9fY_^z7BlZ%T)e?V4(wDvMo~AB6T|)}1 z%EX!_1}xMcufqCkZ~*A%735l-o#Kj#wf=CpNWRT#f%uw%+ zj?;n3GW%Ip`-By=?|&w)G%uKk zYs*1VRa4A09AOMX3o0Xi9n$>z^^1DA($Qo>ZrSshbOjqw5-^$rE2a`3M?T$Ne?|O~ zO~vl^x$mbcxcLjOU}USmkmJlMsQ?l}h}-m{RY6v1thM&{e!eHmeH2KGUlcg^gF_6Z z@w4oj!k?#ERKga;UANrzHY*cZWT`BQQN!UXtu~R)cOlS7t_mxQ!H^5=`Pc(P2#-wf zfOuT!as|#J7^WU_DXu5K4XgxE=w(jk)h&T$EID*Qduf7}+b_&XOjkzrLt}WC8RF5K zD-hT}?zwwZ4Tq&}j#McJx0K{y8&%Tgmi`bqRS{EW=#2 z)XZz5zvdt^u`_0z`W`ah&#m=jl(%QLJ-;)XMdJGGgz=^7}#DmiE zsm1q}yz&5?O)R(mYTmpBRAx=8GGq$*$?nqcc z5%3WPvXQl!z~|QV94}s@dT|SBIL8?(ALOd)*-tBUlJZdiE!UiM(`|o# z?enFWZxxq6q%PDjgaDPYsY{9sZ9iLJN1DF&4FI`q^PS~4a*w#%&Hw^T+qWrs5&1JOls7D6qH_M9PGI-Kcc6$=~-g}400A28bJ>l34iAcI8df|}0;_Z=0I=LC+YZY{dGCjjtnk$#?%14c#+6#Dmhw@v*aN z@{nCLbA9;#++@l}s3Ew-aFrnP&p#ksrt!;YHWIq1E?Q8|_PEML*Fn2?) zIO*{Qi7oVEczIi!_m%`Brdg?DPjKJ!c*&&SClVHf4+Gy^75~=vpyC_V!h;c_U<^HA%ROp4D0Bae& z*FX1I+a_hijR_*@%SbIhM?+e6+gB^3iVPdfH9`SpLK0ak~?*H0Y*bF`I;QkbJ~w#Ar@ zL{M(e|KV%%EgkZRz*d%(s!X=+0MWLD9_Bbdx9OE8=SNU6=2j9%RVf3M)66I)XZj4l zFDvNT?i`a6L)7Noi>O8)UfhKprYinh>^^92-S!Sfg zSt(1b0A|-+-rb4hk=6$|9Q}-7O;#YNCD!t4kJamzZg)I$WS03S`2ja*7PVkBbD*dc z;(iYRqP9~i z-iQRAcA_5UPdHe<&fcY*;t=9HE0Y80Y@o`S|S2 z5-cGMM`)MSbt)+23N?giDKOC};vj~c-_ZsdOLd*zg(>>~Gr@d7C-4O)b-nLL8QxN5 zc7k9D7qbs0+2I{CGN^Yg=w_kH+?*g_+OUKnP>YSGJBS^f&uz7_N``EUt?7drAPN=J zGKwJ^P0{fe2QCa6YwDCPwl1i z0)pDQn@u8I{y0C80qc8n3?q8f+iik#)Z?>(Tyuq3D~?gE{c>{08s)(AD^%zQQEnbd zTdd|&HrLK(0y8p3a4IrIh4KzBV>&9 z;~Mi^KFrkK(J#}n?I-HiTY-lzB)`#y*KOGA9>!`zH&$If0_&BP0WjWcqMhH7*f%=C z&rt6zn#I`giR+9IiJlIl8n3J}jnJR&M{0OrQli4d`*6OFiYU3lpixGWt`xiW(flc* z=w+`tj?h;u@cYClc z7gG^uF4N}tU}0^i1W}mM6(6axaIT8ZR^bE(Rk0*9hE>1?=DsnwiZbpj6Ht7uA za;KP5y~${h#!C)9*fBDn@s#VEk-bv}rFY5pT!i1jsX|K9hgXgsn*(os%bvi{C`gRP zSMq#dE;te0W?~^FV$x z#=~%IG{q#CnW+H2nX$)JB+dRuuL4V-n7qM~+(-^1#++QHlZc63_dkfG0vX2gX!QsR z_`X$#4WD$w|&Fz_6w+-&vc+_{QlUx7I4m(-6pE7+Q7G=kmrJzLB}MVCHAeh~q>EJY zc`>_+aSWT3%d)jg&EeT9kOIjQ&^yyZtsJ1P-iOJk6&BX z$AB2&96sz@j7V3ec&nU<+`>z5jj(=?Rs=$jO@4J?b9WQ}< zWVR{StA?NRF2IHt;Yh@ne3HyAuocvYHijo;ZccmY0-Jqi zaIYtRV84!+52t?LSl39n)Hr4VV6UhSFEZ`qHhB4ny}lJmQn`!~Ka=OF+rJxja-^iI zUrcmjIfy+aHPyn_GTVtMVkoWm+Q}ANUt;&$>h2|M;O!OL&F@VO(D)okhEiG%KmN9? z?|vCZ>Ha*`(sXbf)`(`6)BO%@X-@inH(=s?VZ$d;nsPTA?^15LZ>G;-t6W2NmZbX{ zC@`?*=aEuK^nk-rMi@1Q#nzig-xd+I`f5e!`3&=VyREIkM4J3nqpaeo6O~n&?@r41 ze4CNAgB;C?^d2EBc>m0{Fuy5CPd@sqACIhT4#6!Va$Pfy)2og5P56aO^M%{<)mhYe z+*@PdmI>U@C#U<_hW4@i+_rmTwaeYK2`szj?~WzO2A$HkNutjaXPKLsQExGJ8?~`A zT%L(kN`JzQHRj&C09igJdS3x;oixuZwj@QzGFe9J3*1@2#vbk44Z%E;8mrSciWK@} zlq-fT_q#XyBXfa~yEEUE)}=kxd;k_bK54N#8!HyQ+1py?=9Byai`kG83H0_%3ndxq zwF39vd(0@Ns{tbKA9kxPLDk87)y`rhh9q#i6&kW;dqD4P0f7N}H~ztTF(gb==(7(I z!DH!Sf`W*)Bih5rdjk-cCcD6C>GT(OC7}|g1BMQ9AwqK_UOs0N`l2(f#r{d@Tvwv|aqZ~@~ z#B26pWIn&&c-(l~!FzMz!2(4hhe--#8fv)-Ot9j)Rh@Mj-nxDs8XD;$yqsxuqL*)N zjPvojtA3~psC6eJZz&CK2%G%My0XCA>4f*K*r)7W6m7t<%oUzYh$y6)3KdNS`C?s& z&x%{6;hGgbw06<2QOcQEdAag{+kh3$Mmxrk!xbE85s|%giSqm3*`gMU7w`g47eq_* z^COjGQ+C4+6)I`H8&%f^C}gXCNq(z$A6F1(rw-=qDVHKDVvUUyNIzvi%Q?g)vw}+F zU2jYECvI(8mXtQ+Uk9b6NORgK%GLf5Rv9w>V+@$-jRjeAb4p#^HTcgFzN*kI&@W?9 zT+=6CyjyOcgcpz5uPx%g4odZv&gs~9eJa&p3V1fjO~rUi3BC8U;J(L=Tr>3dA$(2} zZRWr>jI+A5J}@!aQPTO6(nmXCxZ`gb{}VGh^QY7|DS(_+=xKtScl&qdEz(3=YW_iy z1G@^-?UIVAU6?eH(KjoLtq(m5j^A&1Kur55W)r*WOPU+z(6tLbbc0T7VYIoS-QC`R z3H_lZT1?jRU(v^_I+tn8bH4w+JcoYL*@XT5$5hQLu<-NiUB}+~)9Yw6nd7$bv%dr< zdS=QTn@9dLNo{K6=%ri0HM&QF!JTz6;f1+ z)fLei3#2Lyq81L`iC`as9G^b%{orT{$?T9J|D^)}Poe)3t%w)56*Jn163k2zX?U7{S zqF>0EmEvL@xCwr_y?!U#@FGX$qPg85Bt?pes(Mld15{tX4-Kay!2aBRjawPX4(;C^IoxFqjf{b{(YNB>enAv70{Ryw|Y^I}W7BA63Gr)t82f zC%B_@93VZ~J@{$id`5r0D`&d2VIAX%kxcwh=;M2Y`{#oQTrNyVu7s6Y7wQjRNYxQg zUw`s3$C!%7erj&Xu(t5^T?O;-e{UdM66C3INohZGvay}vb-H=F@$Ao7!9YwN7+331 zh=kAv!xqQ6kPGj5dodwPF#5WmzUs9h|1kTI?|jNBB5|sM;Xn41BL&#u%;?wnl&Hg{ zw{7?4o^h*3h407y_OJqVKR=ep@>WWFzy7w~HJ}D!X%)xUxMF)E+wp$&>exiOTOY_g zdwyR6z}mtoHSYnr0`z=&?!33(8|k_nbIumRqx*GME$W(>6c`EYdV=F8omnYu-PxDd zCYQf|bgZ<^Dojn(=aRXpd+V9#a3ZigiL7<@j6mSk^=h~rU4Ef^S(R_PL%MU^nCR#$ z9LE(kXw2mKlP-=k)lT@nN>?Q|oaB~wCUEebIhPgnSpD=z$-cZk2HSjAGBRh3JV2<9Bpxo z0g>cAbbI4$wFUw=P;ND<;EE%L;eJqIHSvd<{aX50MAy^xzE=R!LC{#icG^dd*543U3K<7fMaDq6X7Iw(noVrD2N z**(LtBv>bxVml&6ShF5EMyyTbIhqo_4=V1SD)m_|`sf(-N8$G=*HHWh{7&+fY)rl( z)OTDIw9E0DxUC5`lD$B7BX>Yd)j%Bw3d3^t=(fhwADwDzR1lU&SX4AH8ZJmk9Em!E ze0p^#dOw!H*g6S1j?7EE0x3k4&>g}#_4o4!aJ_+o3ODT%Ow&IgVwiot4z8Sm)Y=P=2me{v)#zXna z+lJVG{daJ{T25mu?~f=0F^A|XcFX-qO#hWiVE%>}WP=EFQ(eUI<&`bCKkeTHrkdP` zwPIp?QSABk-*AGxwm2nq5c$EQi+g*_pXDM0(i)y6g9ke3rL*ihJadsGIy z4;+^_cCQ@zPtS#1Zr?Jhte9~fm>dpvydSr*lw$smrK=2xs@tL}D&5`E-QCjNNQcw_ z(%oPXL&wl5E!|xT3_Y}T$k5Hu%^UsRzxg@$+>Ii}Co!Y;h zEW?D@)6HnOHQP-k9BkV@G{_P@0+Tnumr0*GMhA;cU-8aKH{aCh~A^V#?O zGTu`*CsjNq)vVGZ zUi^Ej;#Rw;DXi_^Y$d8Ijiep@KZ|SADHCqjp6ms4YShBV*rr-g`cnwNZ`kwVnBJL2 z&|{@!V!gcUYD}}sr9qTIi!HOkr0G6J6Ha1w4bQhJSKLys=6dTD$pHRreNG@FKTM$~2=i+OM5qX28}~F0?Fa3~<@QZ0lTH z)fx_5wly!*38>-J7WSp1?Di7x`W9|WdfL6Uo4Jq(x%i;0XdjSunb4{d>+}&4#Np-5 z6;=I26jisP^4K@f`f(Kvg)NY*?1b8PbRpoZEj`3^>3#ON65ux(d%G=0Y_ZtPm28}! z#D6fd_vdIjPaK;mqZOlYCMk+HD82ov*x80VE zHvyCywPJxr)Fnipy$_pa^g2lojiZ)FlJ# z(-O}aAy?Y%)gT%+Qxtn<*T~tt^lZGCte+P`mbGN7zrLirJR7lB@HUba(se6i;3}R` z#mgS;(HiDCM0+jUu95$5pHoV~NdwTdAxWD71DzN#L;@(l_*IpD*_Vd#%xR~q{dj%S z6Jn(^i=;{SdUcfKYqfY^b?~|UvF{&)JCG8wX1cu7t>E@(*60tY%9J~E8h0?i_JCfZ zT_e`9qgAh^_xVqr%-xHuVPNF$ysF|%G`Z@JW9#Ggow3rWBmb+njKri1tKr!r$Qq;7($Y?AwjwE( zHkzMy!b!jujo~;4<%&v{?`9XMLK@!o>>9kWGT1lhZhErK#sdegREhKeE<2;Krc`+Hf1wL zBC2}jmf`6%Gq<*F$Hw?76mhR%cj{hv@|ePKE426p`u*{i|5`^JO^VfWj-+rw-4Z^I z>iPP4c&*4$nj?VKjVE;3gX*c41aHR&$=DOKRfBqB> znG+R`Bb21*P&{6NM;K5aaN_(3<(o=r%iRn2iIX)Fzy!ZrxoBa2{P1XY2v zZ%FOA!R91H--Acs<3##-nuMctG8WDZIr4V9r|18}Z;xC!d!B=K!XMTIPCiPuMm+Rz8%vFnJ5mo&o&A2hce0`; zZS)d%XXYctZn5J}nksm-;omEhQZ2f4-ep2r&!2^@va;d&7Vd7qfnD!9Be=557}V5< zru;&qA7vUia?{o^k^A6^f>6HlMPw*O`Zx_= ztl0qRrMDXnMmv6HudGrcY9?5U)+eMYhqG!EFW@DmX*K5BM~R&GaAV{R-U%T9Wq=h5 z%5DAXDpV>DNys9bWH(k@t|iF1o2Iybm=#E2pn@d(s)M1IeuT{ScY|+8%&1qFZILWl%2U z|MZ$0?!sA|u1l z<-bJGRvF4_&=py)n+p*-?+2w@ksAgT-F#1&$M?T+5exjHA+_B7GT&FQfw2<;X}FaN zo3xKI=v}Kz?Wf4wzF-uC#57<=@-r@Kv2K=>cYb@BP_0rC8gL`Bv}a3M*t?{B+JX)E z?=CmC6<7<%AMVF6>;dR~$q$a>Wq9zlmLYK4FXJqafl?iQ$OLx@Y%5vgmu1an% zg5($V0cFUeGlKaD$L4%@Z6wUq<5)Rz;AsVaw-mio`w@R>OvvZDF4GxBUK1cYcIt#- z@5Dr*KW966yX$-yymyUk0^~0L;L+8)?W)?gpl?K|ZaF|TWdMQkd9^JtpOF&S)SDBC zHK?$e$Ql%h)E2nbb(LK|z2n&oJJvCdRGj{WbB*{(waTgn z`?8tsug+ja+x1%Iinc5@IGQ79n|t`J8FZ+`3p%%Ph5b)Nd{c9F6_PCl3wnoV$+}x$ zJ>dRu`K$YEaDzkR0Ga96-#%$1rWjnT4Q<+j4u}k$2COY);g<+7*b@%)K#|M|ucq71 z;Z%KdiI1-`xv3@OKZg*dlbUPaadwKS(lC?S7u<{pQ89u-^SZt{lf?>vT{8pre^hTc zVQ;JnEg5~l1(0lI@005A_lmlVj4~x9_e5aMryZvAXkdVvU+dt?A$@a8Vn#y2k5WeJ z>B?Nc)kq#9q3skI$xDSYW+jE%f#{XV?U`4fK9!X+j{PKwEgOIJZ;e)81YTvedN*8O zX~$=(>gp2gl>%OoBfN$PFBA~EJ)+OK!*0tB(k2H3?J>+J*8<|zQDo~OvH&%TtNC|b zA7|!I|e_A;t`ts&x>w|jf4I4CB zTdl-H4MRQ#GkAt$YOL)gWGHdYNTb4Ng?07(DBiqz1GhKFLmPnlxK~LkC@4{kY}MZj zf5dlm7}sg7$SK)<7yRU!kdZg-=_9e!+}VGOaOvUKLp>Wp!}M+W;Z=eS#-5W%n}*BO z$6Cl<&yia~R)S+vD(IM7?z+NDz;2J&YI_^B?gh$7R@BuMR*TxdSTo~gjiu%0nXaL< zSvyq)BAb_#BpO*1+ilQaQ3y)~zel-eTwevi*@W>XIZ9u!!MyA_NXqmd5(UHHj&VQI z>(k{m%FSQhqNCGBUuP;ZWWT5~3V~w57D7XKrC|oZvYs+{tRiPZ1gKxr;GM8>eR2bo zq+cf$v^|0TTn(a+EhrPjU8%5ans+H|safoK{fP7{h4ytOdDNgOkI*1XHN1zTsFEZ6 zC4tVDHsUm`I3dMI%D|U6nMT$ZRKn$J#l^(VQYu6@6HPWW&ooVBq^Snkom5HV%y4Ly z9hCWf*&S?4YfZpoKBZ7+%%h0u~6Q65gFBbI>plRP^NyCelTX~U_j4Tuj_uq zm+F25$=%Y{GX^K?nT`!e1fpvzFYjjHc%6`P@zCMwx*R;WrzpZRafD)gSSf4 zdl`zoq?%hrq1vO)M-LmFH^G+5Kk9T!;~=A(5_-=#6hlXV^Gc)B}$_&v+a>s|*p*J6xYMVe3Iii@Zc zSY*V4KhZ54j7)cTWE*w+Fa-Ns(*$?JtIz?6**0QuK+4@HH;Q|n=NeVpTbkFInDyuH zDQA0LooVr@*%qve zdL3pVLUoslUC+VY*6#M>Mkpex_3Egk3BZM69s^N0c^BvENj8z|jf?|;&Qoe9h4xv}cPM8*n}9cO5=?uK3e%Z>fv$Cxl=AHUsQ%Ab^I(369LlJeA-ak(`fPtLK}rx9zK znojfK@@>Gn`P!i;5wiU5>hR;wSTR=^{Nhh9#+@DeIEFzY9KChR8X6DD1%eT0cqc68 zR8RMJZ;?r2pllNkn;+CaUUlHynXRaY^U;SGQ;)qzX@?KMYhRfA&IQ=kK}kHKR*Ct~ zw8=$gsn5drTCaCK@NlI)_3~i0wxlYmW$is5tp z^E2oZsmN)Rxb8j^Q)yvWWF&5s0R#P%GA>=%pXpFro{`W~`n>DHo9W4|UDKcP?+VS` z=O-;Ssdlqy85V$V5MFtd65QW!Z~`a@-jxXS7Y9L-kk7| z=;|@I-lhw(mDKd8HIzTa0x&4|dkl5dB+HPLWWWhwk&yXmcLnzg?dI-?pkRd%%ubho z-ya^1<@xUWbBY|l8_b8NxNBJIWsH91lt%=R*9&ZjzT`>265R{nl1cxa@(UQryC@*u zFC82RWXM@lYL{@+(U+w*f0aOVoaB*39fRjHU~Zh+q957u#i{L{n%3GH1g%R*GEh*g z`u1Lru#-Y)mjP__aHl^SvhYJYz>1xMIha%e3gw0w!GiK4ybXH#6blBux-P5c^+(l@ zQusu#PVEa>P5N$hsG#92B2+V$ZQm}qc!O-8jgZ`ZLg1mq6or|zz)bEyNK3`aKvx+1+a=7?{i{F^%qy*CchvBV`)CtT*+Fpb z1ht32AvC>YZgOHrB-EtVRYn<$+T=K1Oc6!s6Cw7AP6Kfxo7~^$iUbv`_#HUb`ky=^ z9F<)rp zN>69bBa8ed0PXG-+#`wjsnO^i9yMMp?W|UWnn}!@c3AAlY1F-n13{Mg^wDJG|!#p@fZwKye|kiz8}Y_>G)OU_-_Y^7cP4( zIZ8>(()hd;lZvO4ilde_mM|ed^6>DOT3C?umnTGcs+r7_`$o|wykzHm^1Z#p3`v0U zmkhm|p8yHQ#N2|Mkw1eNLRZK;T&4o^hi~6*iWGRNQU;lpk-EN62rtTH#8SMq7NVwX zJ?Hv!{s)E_9wDq49Y4;}BQ5h)+z+us>U{_d9pexFD|Oft4u;>}!4bphUD)MYAZCaH zhpH;4#c=?AbSeD`l{ijeYgPq!v0D0I-z&r;bhaDoc7;N%e^sF?nq^G3$2Hwk2SzIZ z;!sQE1crtai`6zMf?T(KT58{p)tGp*;zDQzg!-ljJzeCn=LY#)d#ht`&HTL^vdo=E zRj8dUSC)|n?aYWNs-rr>Z#vO_Yr>w)J8)qXX3sfmFI)|Hp+#QT*bRvhDkK70NbPCy z{=%~rZpA7@(h04gN5sq+rhxyBrD}OLJ*|L`@v96N&Os?Lj{IkCJg)j7H6V+XWF<92 zoNtJ8u>B_ty5)bk$Ooap$f=diYtF=*P7Ocu8n;!F8pwf_ARVOdh%suY6Y}Qt%|;Ve zB|lsfMK<)G-WPtB$CyB`NpYg!zQ(}(di2g}uipGgtf21a8BtfAqz1z+Ss0x3TYqTDQt>4H*ir8IHLVqK4@nzt#{emkdKM^LxNuiIK1ZA zm~_;02OgNV1UF;nWNz9eY00QrAHQX50GAUE##k-ymiJ~9+HE!YEZn!TX~ zRaF(;%otZt38&*CZ?S6jXvh@aS81pk5_3IY6qAj~Ab4Z|%AHl$r3@Ss;46uLIK&G( zX^ij7r`JLqs5^W3pi(~CUm*vdR&SxnlWq<7^*OfLMrjjkCr4dY%5{cV@GKeQ>CD7~ zti+lBiOQ?vZlnK&rkqF~v&(Shu0+{WY6&rIp$Vq%j9Oe2VI>O?Qw&(4j6q~KA>cv7CPB)$~4{lMC=^;kO zB0&cHsNz!ozm4R`YdnyMB2v3S!H`?4q8ba}N{Fz|!i$c-U?cJmr30YX67zH?xFhWP zhY`m@s~l3OwG9C+5uUuh*C)BcNtm2e#Hq$jORTmGMHFfn+RhU1t*d)hmv9s5;580f z&LR(CU2IPRkA9~QvmKLSSll|-`MAX=S%Nk!Ew@Nh+hRfJqmuM|m@VN6p+7S&VFf^^ ziXeC{VscrZR)!M`YY*pbL(H|a46;>Pg;@vs@TH5U<)Tg)>LfjT5}P{ikp%11kQd`p zd#%pK54FJQNtREmW)SyM;+~dT2UY8NkWcnZ~1{7zK25*Z&=)A z`)-wBT;}*V;CyWsi#2=LfQ3-Y;d1Ij@Mm&1gnr&qKodxhCwb@%R;h5f{dl^v0ZBts z(*`V*vz;f+?@GSac2B1aHQR%)iJK^rgo5tX7+En}`)5==_K%A{ELd0R4M*u%4SjR4 zk~WyeMyQ%SXnEweafuJV=dt_*?u{652hu9$z%y|8Cit;E%hRujQ61$o54Ck^U{ z%`~k@p@aQ%rsZ3~=lk=u^NS3 zGwU}?nutB#0v9G*xM2kC7N^&lOdV^d$F(1F;Ri0~DAIZ_tKAI)O)5W68lU}P| zWO-@YB>IGjvC9`-?G}YZ?yp7i0hN7ovFLYLJExFLp1~oWnh6+vE;wXlEJLMOBwX=4 zg}Zc#p?;Xl2u{v%$APEiB0CCR9}!3E`%vsaDCJ|9!XQq))acmC0+#%U zx^`*vE^kjbjnfr-``r%vtoT7Xf{`D}Q+R4czqwfWjb?uUL+Q?mwR1ut6(Am8p>hH> zS_t&J%W?qw{k*(^SS`?_Im)%3fTxQa(fZYq*gF70PcVj_nLj%X4`>qi7lV8+Jjdxv zWv-3ciZW-hC7-PAYFEl;aP0BEiRW9 z%&60{w_dEsmJ9#Ah`GMd?3)2vF+n73{A1hikX$9T*vzLeG12qQHJ{swcl=StCsu`A z6OL-!Zgof}H;C5~59%2HASRYUI-d5(q3LqCm;L%-Ykk1ys?iBW{zHN#A$imCg0L&= zF9eR$pShHq)xp6z*)if4otGVV4{N@@_f!~%`r{H5_o&y;j%@cCZ)<>R?RIm1ImYz~ zZ8;h}QK3oxQiCx>5MaZLrKej?OtA;7;J{5RJKTQFq+_h?PGY^tTImVHrYl2VW{5Hhy*2u73nh zmEtls&}s6!idN-xiat(!TYfHSoYDSy)5=#Enehp^nvok3rf8nz7_F7*L8gekc-7Uj zMj4PMFTk6qr2!maUVLnL6Rr4ZBbniO)QrOaYmC2943h!f(cj(@%+x(=IDtIjkn<56 zRW~y|zBx6e*w4^Eu-~xg2H&;8mdMPTCX?U6YHeNmP(nkw1d(jdIw`r>{5M-+iOnAm zI*_)OOx}u=o1ZwH9sT~b6JR_~IF`2w9#|kfAuX@Xb|m(AaqZz!Se4R??s(xVT}L?p z?+aKeqjpm4aqv%?qpYW7q{b{P4XukImX=pro)nw-EK3;|EAPPm*eyZq+pk^!xUi`P zzBE=V;g*EuU=^JY+CQ9Aa<~I&bmayGF6qh zbHkkKdbpRWl^6F?7frw2TdHzWs$Ld|rn3u9^nVd+pKmTn=?@DU9DFCl6I1cPE6UbL zChU`jP<^!R;vX_oM?G}}gW$RG3a-v>0V47m3rN1KzP&nGf^;EJn^+RI*{WmM)5{k5 z$_O9)SZdB)Y@=z2@aLZ;C@U`hcVDJ$gqUPPx=~y) z^qpvFvZ|YSDHnt+F*AnY(ARFflg#X#Zx6ya3ADyHqn zTG0Oe1Jp1Excj|G!pNPv6}m#({~1fzsQIvXg{9Aj`XVMi6L<5+>M4_vY6p{$TdHmH zz!T6O-IXIFj7*jE6GI(j7ci;2#rvZ}V>%SeK2H-#qWi`Rh<0-d+;$pL=(i64ax8AS zsE2tmy(+FSnyyr*yv-J+lw_Y|-QZOaa|ge098Rd;p%PN^*WnN-3lo=4(2L6imzIQO4un%3 zz<}ERv6+HiZx}yKiCO{oQ_D7UUoO@&AnJi`N_MODMo=&>Fk+mrz+})2ct+=@*X*zs z(gX7>Lgr0Kmj&{h6sI03hRBk;Wt*jGbhq#`?sJ^g0pq9|`~S%cP7vkP2~xTQWp_xB zl56ikgj&90+kPs1aex1v7L+}3j>C$w8S##(MTx;^>Ex#nuJ zUM*8Pp#oR}V%Qh{5w8*YCztpY3|+Yv?5HaTy79`^0=IK9J85B>gdyY5#y>nHZWPAyFI2hi7|?|wS}yS_=X0+*+q?C z+P;aJ0`Pi}`dMUChy|lFUL)3&I#dLSJ|VR&sb2ojI&?%o6knEeu9kB$pkmj?viB02 zE>0r2V_ zCNd)z=$teaah{$q^V7^s^t01wf)X)ZpPnF4tToI|d0WHS5E9L_!K4_WwKVlb9oVY> z2^-X}YQFqqQiY5~_~-Y*>RxA$Cx9LW2mk>DT-p}Lj#5GQzLzfbk0$Tb`GG9}G1c?} z-M~l(7Dva*22Uv%9L!`1JEyvP(3`R=gbv3{@n#r4c;#W>f!|SmxsoFde>*P6YRy{t!Ge1>P-Tx?XFv(gP zc#OSb=9z~3+EG621)2Kn8#K)}6@cr~IK71}`(v>8=(Qb=tsn*JwFO{lxh);Qc!t!% zJc*nYfo8^`i4H zowo<3mgTngrb2hAEvo;=afPk8@D`YmH*e!L4pLZzY~YMz&{rFNz76D0R-4HhS*daj zW=IuR6jY-f9=znmUDI(Zd;K#;Bijf^X*l-lo9}XX#ShPAYpjbcD5${h>q-Q$0NzleY%h_e;e%uR!i@jr>Yt)->IJrZNBI`~OCRnravdd#}Fltz6g zQS$YkRGBwsYJngeF4kr0s{bUC^_R9V7ln3aOv|>%A8c7*3u8E1Kt|g4P-T%qLVc7Q zqpqMO%|$5){+O=2gV@4|ulngDT{t6I#NH^+4}A1Sz29%2sPtMM!pIlTwFQZjT*Dn8 z+uv>q%`Mb50tyTNxao7f@e``CM&O8Q`J#{nR4i0>`)CgL@Q44XmKc5d=IL?IJDMQA zk1;nXL8TwU=S8pYN)?>OzZ_4Whals0|MG0m{Y>6)Jj5+ zQM3(v6O>yL_cCtRO2i0!3AME=&_2dP3q3_g`-7eB7_8pTSRIH}^E0b!Ezr+s3X1=O> zOqf%V_zMfeXQA3HDEw4*))RO%ea?)dU|M}?0X6a4!#gQ$twen`x+5ZhLU;y0`{Yu< zj+YEGgj&1>m?ZR9g?)(3N(Yq2x~4jO7H;f37JIMVj45OMzM=cq z7jeJEOu+_qV0{?9u)pPflAN&1^4ec zUXxdMfl@y7#~T0WLT^&0!-h=fHm0lT+(%aI!aSp`Fa)LM>?Dnt)YHtdZ zJlYiju!p6`QJ*BTrK9$HuTR{R5Kc~qdfKakNWr~CCMPj)$btixOrdD<6Mru?J6Q}i zuIp4-y1{@8GJgQJ|6dV;qQ7N+FuJmy+PaUQ%KV}3q(szRs4TH2d6aC%D3CaxJAW^~ zqpwO4+^)n+M$Py-8%z*P>8z;IkpA7)Il|5j#J(8%n{_qW7Il*I%lilNOcm&31R;mF zI_6OZ|8nY^uX6sNz0JY&<)1W55Dn59YY|Wr5qdtXE}9=dt{&*cDj+`S5hlWkU1S7R zMvKl~oa#)oZ8$S5Shm$zri4Bty0VAv#rumc^jmSax=J_l{XH%^!v7MFw$00K%7<0$ z$4amNw9p1Y?Oi0#zqmn}#L{JDKY-xMme z)1!cmu%hJ9B`W3Ps0w~&Alvx8#7|DvNg_x{xAHgos*+;qUXqxQ5?w3scSphh2heAZ z-WwqjW87uLqpY)70TwrcwmT~|Mc^l=kys4aogTE$Nk{hZUlKduBa#SP>DP0K zTiK@_)E&)_L7lgWxCsD7R>gGIw*6<<$1Jpmymj)*-9k%}<7lOAR+FE=ELs(<*Yp$o`o{mhP==zG3m-haDqBgO8+Ov(WJ(VY0O0+Yzca{f?jP zDvC4sz54f)acwIYPvg3e< zEv{+r8OlLP?Xx(v z@p~RbL&QPcqef=7o-uNf2Qh*hT_1JgLMkb-{ZA2-77J_=tMGsGhD>zL~j z*{Dsc2BuxCb-Ar)bt0!dEM{qk`&FzgtTEblRd`1FxxFU?%IdP=8ZlylAW?jwDs57j zX28!0MGmqdDXJzE5ZORuG>B$Vo;5PKCa$W=OIX++CO0Z0{Vjr@A){2047#IXA5Y`0 zYlC447`F*XFli9Xj;>2kAvgMBWQ<=&ug&R1F#QR|HN%QI!AD;TBuPqgc`GOw88e&o$^(B@fgXB)Js)E|cD}6LLAhLFflf$3^3$VezTkCLHI`*~gp1g+gIAIS#TI{h$`SQsEsnwrbpx=bg*1ARk9VAMBML)iRLEpgWNDzo z7Mn@Ln=)|K?v>DNM_uSQNAbx&8@G0Dcg;R{)AUJLKbFSA#A1B%KQ;UVBqaj$^$ZKpWRTskocw1l%saLJ=FDs3Y)oOldz48uDfi9 zg^qMb|AXCY`H-6PX;&Y_Os~VDqF`GTcDcR`rC({E>hi;Vw_uGOZGdkr#i-Y5%){`E zV5y&chrS6rralpb{D=8ep9(lRNK3ewe+YI0HJZ1OyY7$L=a;AKD+&TwctN52_yXsU z=Xr@RkU=qpQwh<`hug^#Vk6rznfl!T$}jnDWpIkwW}Ay& zA~YMGmFs>WP=DDN$m@l;Q4j=`?#(gmsjJ_H9xwNFUO#{PhMs*>SfiZu*Ybq|-UAN7 z37_w)s?v|9ei^yYA_Th8j2vZJ_~c!-n4IG52EPLRN?lj|3EAOMpAOZU|Q~3JGRi3s3$B zf5?{?Rjg(x886h_n4|e^1}*s_h#ZO>PAwxF&Z;`vKN0#qN!#q@E7Nqn2X4r2BQCBB zbjNjpQH?Y|fm71b=Dc)J7*-Z~bK<-(&{SzO-{On7wBMVgNAM@{fCqPuOqL(T?nEu% z_3Lb}4H6nodT~Kk$p=%=O^eGPFM}9ooHIJC2^x zMr&W>NE_*2p8@!tmIrw_j(Ux`zHm3E9!p{lS@R_sdPoIHJiY(y0-weu#V&pgTuZ;b zo$rx+^+h89B*QAD02J(Ae`1nirGAQ3(?7qMnil>n)E$}cfJ<+K@}XeF)xXVle-gT= zd0AQM9tKs6VI?2!tb9oEKS(&`XN7&@dw#~%Sm$?i@1M`;v-%8uKJej5Bf$vxe)lQ3w zH5M;-SaaStZ8H@1{ZlNexnEeL+N^Q8*y6^C)u&6N$M9a$@i@YK+U6vNa^9oh7sw}& z^R16^6c)ZC1$Aedn#mM4Bx-R+GFjFk`&3%l2*WVYa2gA>`Rq_OWv9Qo3Mh`FYdq9xP*iakEs#uLkxSh*g+ z%5F4%2`V76pKUYIy?>&^PUJFhbuO+AT{=UgG>tnP7RoQ>M*_A^p3xzkY_ueACwat+ z&g}D<#28Rdmn)t+#e9M?2J5h-*6Q!)}dI4CI5U*t?23?_*93+2Bi;!L_?g7@F zGx*GiwsH>hhNdV&ff<}y8!qeLMaJ%6*-=*4cp+Wm`cM1|Ou~IDUNPNg5`FAnB9zP5g1(pzysm@{?b=V4BaPU!r>$U=*bD{!(=)OcX0nE9(t z7Br}ySTGjB{I5WECCPv6UUG_9c^+uryX>z#v(Jc${%YLNMZbvHGoM(`G^q3|-#&~m zvZ_h0O;pMy0z;!&aFCJp-AX<-2HM2(q9PWe0d-)VY*jsuZ=?zWf(dWab>!Gm2oE2q zxC8z&97aihK9nhQ1pXHTYdqd)>~SU&G2uztFgL^evg9M+%86z7gt`miH>X~pLJvw zn=m@4tj}crmf|H0{{pqynwN3zAtv7B0%g^haLorU zH+#>ypX?t}2GNP$a&y2$f(YVLSI#xy!Q$nZx=pG_x?t8QfUevELB| zJw~`Dg2JQD`>F*Qa#+*^Hbule!xsA{5|H?P>RWt-qz58843@EAH+>QRfJg~f3E;n9 zf2sa2^2qJp@wjvTono79b>7_F(`2otYGN3FcM;=iQn2Ja7#Q~Ib?@-&p@_kij49D5 z-uwg1Fx)(61iK`?%^jX-DMa+%@d2u_-e2#2eFTDT9|a4ru9=szVGdwy6tK5*H+lYg zjk$~wvh2T|X_vP7Lqp$iTiqi|ZpSx2laq>vm6f+w*yJpO(2o@ zBL+=AFKOm`%Nr?FS#3Uyv>wft8+5r~ z!$Y?%e=m%r8#|QjOqd!z(qBw_ylf}a+&{7fyn~aBRd0{Y>M=oz(#=+!=MQl%y&qED zQUaPrw&CpB*6H!v2j|m=XnBgLKSvJVr%@N|Fs@FPCH;drYhS(#a~k{De`c*icUf<@ zqUIMeA(Tz{Y)>z+kzzc0IcG8?!~&nBHuOpkfKg{J53;o($@}GGn3)+tph91A{UK*% zGAwAO;JG`DS1n7z4+9s4^>C#=Q@lICs|42jPclONW!<;Os#e=jOJQbO($SIJQ+^*_ z@{z-bzh!9NZ70d=Ov{Fs(LpU_aM$JI%xOMMAqR+xGLOmZkfUxK*cTj6P(5s0)oHOd z2vFqJHj-9*Y{(@2@Hh%r6!g9 zAZMrbvVD)xld?+L0xBN&o6FU#+FuQ}bKAzW>Wy{l6n&iS*GWu0nB zX8J%i`2ivxg zZ}mUJMu|X})dYe`$Jz2)%kz^2YzOhV$G!a?*Fvf{Jw@47u@oyQj3TsZ8T4tEB-Dn+kS zCC+a$9C`0~E5@v*rnD4C61S2y6LTY$=u3vJf^?_qP??zUeNzY%*Bi_u{{~_X4J-Vr ziYkjdu-K;McCU-}&>GbT)iW~Ucyh2&N$?QY>%4~wi!nuY@FG@Sh;FP#x=+`nhs%Ag z$Ug={bFA95&a^6F;j|Nu7;Y%g+hjbOjabB}e7JsG{2^km*AloxTj#iNC3yY3r~YtR zYqO_L+#8}PJ1--q0$@lFE$Vk?W*?*ZZO)gITj4MG2fTxc6V!gr>3yf$}Y2ro)>&qd)C_bBbsUj;i$9#jXXiNkl((&*mVL`vcku8@kUwGf zEyVc-92fkvWW4H^-Py)q>7O%^r$Nf&TfVi#CTj#AZGW&qUUI74K|WoZAq%jQ03ZoYWEX)clU{rF;69q zJY0C+Gjh9`JW{IiJM;w-&PdkCfW*CG0{a`y7e&hAzXXCGjDo!9s&9t}QW6|_NDm&k z2?8=WOyHLHk?tP#U|&Lsy9e1M8<9;A*0sq``M$u%yQ(#pIp^RJLbxW+DMcN5N~z!N zpg9P)do6cuRK?XZU`9=pjfzB_{^RE0hk1#?pC2XIRM{MsOyfj2-sE|@+Nk^~SbHYF z2HM=5i#YEba)s)L$t_p~F>Ep&IB{eT4|F{#2i^BRZ*P<{m=g#C6e?swxU*^N!L?xZ}_kL{|9?71|xOonp$h5i#%Q43Xy@ z`t5DnC`7trMiS~2?OuGd8;b7k9g3jym1-C8C~MD@LB)Fje$*~rw9yb@@DpiQ&%<%CHA|)f!qC!#`#eaU2kqw z_Rg=a;m3eWp;TD%iD=*PH=~>T#TA+Qez&aw3FWP(C4->jt>tdI;mF^p3W;6fMcdHkIvR+?s|opv_jobPsBeLI+}=dwqadfJE>`v>)llQ)mkHredc zsT+GYROxup5CRwSh9zpJ_wXERE*G`%lO;_r1GL;2T);Nf^hZNR`o62+hn?y<&Bg%y z0{0L`J~@zS+>k}Dzpa?W)6`|a0S76ppLN$wP}7*b7K9FDEPBWbhp~adm|D@wxXh@*i)7pSpgc{GhcYJNK+}& z!85Y`vBW^JGNG^!Q_xI-hvblUx!~tXn2Z|`nvBHd9+^*Wl`}Se;iwG5*9%NK3zIk> zQXXHgQ-5OUHd=}m;(8!KwzrBg93802P&^1U+vul!%BFd_WY<2X{kPggiP+`iyXb%| z`we6-d#_R6_O5hqZ%orjEf;}ubESJ%V>}v~rkCahK1)zn!KVmXfpW~ZPsdXC4ol_*n zk9#B`a(!5>&C!PF<*?+U$o+iF#tTOTibLI)vDmkM7dnyk^|c8@X`0pzhX(Q+pQ9o( zL`kllzF++@7Zw&?s42;TkHW3nTK<8B8vBz!$a}|Z!M!FT_E$WXDnK)wsEs9JrtVc@ zd;1>FB_-Z9t35fokMCve|9CnJwl=q>ZP#&k2o~Jkt;OBl-KDrgi+gaF;$8^u6n7}W zHN_o@JAB!DKkqj`AV+fFS!>N)Yv#P5mzzIP6O8bt99DycMpBgror0w8=UC;u_CUmxgXoyCS>JA%PCpS?%RH9zk%@lwu+ea1Tc;FxT9U{u=s(} zh+x3R_k7gk$3q5pFxtay;Pz==Kx(3Y;BNV|iW&XmbwsMU^B?BQg2k@9MiB9jn$qa^ zL}={any;fhmO(tU%Qdqw#xd2-?AP_y`oAYWQSC2HDe+G~ zytOEQ{=2TvhznL?FixB-Cqzg#Zv*e%->%}r zg@67nuBn*||Dl};rIbmO7PBuiRZhl)OHSm*qU-#+=Hh@sQ&}TjO0i-DUD`?VM|&*A zNr52$;`!D4r-Ovph7azEFdK;_8j-1mmq()2fHg$P-NhIc2_-e8a9!Wp<&(vv%5wS} zNLx1+Xcx#u7kiWDei&2(6tFI9i%pl_3L)L$}cW-j#gn zP~l)=c}h)tl)8+pS)C*%6^S0lZdYkeFGU2NSzPyrbbVc0T zyN!@@K_1#dL_ zoh52BieARi+|6{}!ba=QtU&JUVK{qNVV!q?0# zb)DNUWa@5a=BFJaR<>L)&e%P-#pyYIc&vEvKR$2rbugg)`~F}JtY(6gyGNF{^C(r` zCMb4BJ{ix%gw)Y-1B4XYkzd0!%H#dNHWWG<9N{K{$yFJs!EQb{n)T>Gsq%x08PZ`wK~hD; zSK*kA0a&I5iK6-vK_nCkPF6%KJXKp?S3dh;%Zb~mCXJAWUGU-{Q1UIgHkj1wOuL_l znYT(|bc<~Yxm_8%l&J7lgaN9PN=g(vHax8eH8G($kGtHDVHBl_zK2bJA<=eTCMWzi zs6`xY^w34~i;@VU-!XRmpnNNQE)(wd+LfL9c$1o;y`w@4GErSiTt4pexb*`3f2&JH zxJ@hrRX^CMqG%+SM_p1faebJ?DS$PjwoR38N`XW2gi}EZ%XBD{CxxM=E3p`hgSW*3 z>pDjm_n+u@X9Q}Z4Y#}b4F^RC-ry#6vAUx7RWW8B_4`D%R#^gj2?^y zonMl^rsoM=us4c+J}gkA7T;Sv?90uTzbUh?Qi$dB>Im5e`a$2I=;dy%8$E}RM!JbS zY=G{zM0g;FT*=9wlg+WI@iwHyy(1GPGJJE}!t-A4w4OT2BcpMZ`W@%My3zPrJAZb< z1NxK#F6>SXw0s$3%@?N%X*L52O+?@pRw*D6{7)B-x$E;GGLB{YM8>}pB)jB(3dNW> zQzn^%AW%G?PJE2LAvlyA6tvi=K+e^XgT?K*C=+YZ4iEQ649;RT4u8tHF2&{c?csg8 zj`%>NCC9|!VfnrQQG@lEbT2fMa}{*t5Bu1nvy8%&RqU$~0PX~qN~UF-vQkndRq9rk z=aOtgJcn6_^XVCeWk=44rCn+&Ix6y~IP&HW&QtHuw8N*_@$9L7KRnAuihr*>tlmW8 z$e$;~-X+|foD_Ew+ghp{%PCNqjg+=pc(C_GAY^rBcWmc8J#8&Gr=WXiL9cK~po<|o zw}>WnS*I^9B~!$qN)c7Ytkx|~{7W&*dK3-~7JuB*@sFJbwk9kNvNK|;6|tUuW?6su zm3@JylKM1;8)F5XhfQH1!%r`aZ}bVN$7PGlR&bn-kl|yBUiZ_DFHme1MN3VcIFfuPwTs$e}Glu%W^8Ll*n;HW4x-oVenMB!EDC(2%An-g-qO0 zp_Lc#a1_Z3gc1sEiUx&K!+ZO_(%T7lCSN)AUxr!~m(7nbd)u%x5 z)z#s4eCU&wb5SlGH7BJn5uV!5P!m&2$?>k3Grw1)ai&Q!aQR(wyvNSA&k*Dg(e&Bh zYb(FcQRGFxAwI2#BHWro$^4~`5#tBU!$4fN!2j5esHpwu4N8JM`Cz5A!s0QJ4+*A2 zZ4U9&Yf`nxxwFejXpH;4HxVk+zZchcpUFaU!g572Se~HKIhi~gQ*khGKCJK`TxP&Lac*8ulvWqwhxSf8K!Jkip1CcrY5Mi{G3a>+OppBA zpThlqKD;~&KBar120jvXcM7M8yln7wbg>$~)(bW=q_9BmY0*U7D8Mue)AXewV0NFL z#;4<#@VnDSj^S)i4kh7-H_#TB4)E?@bL$d#f2NxAUsLmmFB$D#r{y$v%Q$A<_dO!u z@*X+GYs9XX1-zCsfmhHD!xRj|`o#9?zs6{4f<&=v*av#O;5B+&^k(e5xD@oc^}N5k zkoC*Q_s#Q;=c;a9eL8x)e-z2vNFeo#BCz0AK|@JGAH2SP-=De6%lcb1tL&agDAMy? zYo#vU*}nQ%d=?G0{<#o|*WH=m!yeSRX@_+6`WJP!MI2giF4x8@ST%iI2@DUoG!$LZ_05#!!A?U?*YqyORt`=w+sdTm3^~OLMJ=^TbdUUg2zO3$wjjG&wsd=k3y+Pb z6;Y1A;duGSEfI&BI)GuT?z|r*LVut)H z%LmsVPzqa@KDM^(`0zQG~?CpJHzpgIK%AkyDqJH&4oDZ-FTX#_h{B-fV)N3 zZDpRQIyR>*tr*iJ?}BqUxoE>XeWLVrrf-P zv$i|!strwGf$}DQhlfn0qQmWnB@#GiL z3!eVYe}1WNH~&AW&vVUP3%Fkmn>#8}63$z3O7EQ~UF#8Q7t+?>$qrm|$8HqquOVF? z|9m&wfkL}Z5i-nXrS5v}o~AZ?BX}!(2S5p^uUq=39U11d9)j)h`e2`}e|L6N(6}Hz z-I6h$!;!}4N}ZVR>00zN$ymHR6pheEf@@rtHyUw)EZlQp=722+B8mI&A&y;&_gYsw zQ(*E5&Hhh0@%xzWI}X3oSN}LY5ob0XnBNX$p8rXOE9Lr&sN(n33Bfd?pV~3k!>HW$ zxM#yv>k0oRVOGG`3-#m3e$R|Si=evmhcA}aDOo-;{|PFQPrhnk8uZ)S3h}k}F!F3D z!Zs2=mQf<78K%g8+hgrzQ|Ow2VnNaina9jfbhxLHymS%(w{oC%;nu`h`UeWJQ=}Jj z+d!OHTXMaQ2qgj7>qAg+ zvZVm%_S3(ExdY+I2Oma=9EB8zkJ}SI zU9NkWUSMB>o|(8(bD}P55JFOEy>$;DiUUx}4fzlBNf0IMI$a@vIH+VAat7~9*v2=l z8#%3jdc?Ss*+w4bS#bU*X=r44s}9Fm3@jM{`3!E1pCfJ0P+I#+z>vml6##?bzh7CL zV?-gdqe8iGpd)YJ=DMA^L0ESsk7(RH&UkB3&Fhdtm0?qSXf!T|)h2w~ZRfD#`AaOFX2Qbn zoDsntm{$>R-TB#*tDMk*gvJ%gYJWcWnKOm|kPrwfZvesjUtqp7KZonCJfAd;f1xaC z2@U+a_gEfMm^L;xMbQ*X4pO9tv|Jo<+v*g8OiUk3Conymm|wUKa98Qr75Ht+>00dD zj@7n^J7eS&@SMvj`A&ce$v;FQ5AckJh8I5x2i_y5G8qgXDg}nqc%m9Nr;86c4W=ZU zZl~qu#`FO%u)H(IHM3E(&;tsD>+I{_m(G~TgKTjHnA<j2mU}c-whYmU~!{_#_aGtWEgYfwYuBvB83g82Un(>=kL&~|npf12g`X=H?tmqd2 zoV$SrvQbzD!b%e%6C0SfPJK*yp%HQ}BMBnR+GwSCZ`8Ju2Y^nH&F8%BUVpT;xcGWP>Ia< zeP5Hpk6EGxbY>HEI}2#l==N@U&q$viTWT5bn2>vnTIEi}zQPD~t}ph3+XsLE2N8!{ z?7>MLaqt$p9?wb97|o;o1b#Wp7cEJREgFW$OtE9``gX~ZBj#wu@p#i5&+b8`l`D`d z{U}T*AZVQ=(u>Djp6|XV98@^D#law38!MCs3f!j9Z?H$aI^Hu@W64jCbC{%QxfJ=i z1+z)!=!T5vK8NpFaaVN^3h++Sm@Wr?V${e>~au)J=!)szt@Jp{i#!s7%G$&S|Q;w9Moo z@#wd!RB74mHD@o~m#6DH%#_~=1GoK+UE9y@#&7-iE++-f#&HFmQ?gx8c(hZKe)S&x z+&I4HkiMM*S01wV6k#xSY(M(FUT|ax(Z>n3d(J>kaNar=n!i}J{>h%vZt=pk$_pf^ zm+JrBb!kxH+uL87>O7g&-CMkuGeB3GJE>Et#W85u7bo<1aFzLK5ANj*tjvA{=z31E zxN?FG15E}fHhir7^1;Thhu3oN?tX9i#LMpshLNos6A)(9%~$mVnYuf?AJeIGqbBIm zyg98Npb(z5uHmA~a^9h8IPniZED^@=2Cj-Jj_&1+HA1^m>r+`Q6fKxvmK*Jz&^MS( zeb@Q4oOdkJ>U?&vT_)C!SAE_f+>_5I#QhVKfob~@Yhbo?{g@2CG*u6mv+C}>+rYN8 ziBrVgJpC`G^4#@W%#;>qSWhpW-8)U;hCQ67^g9xCi<@e6S!^lE&r0V<(5J90$Ihg* zrp7)U*zZA zN+xooji-=SZ^DgSFU>T}C-sK!RBRS!BMf4&?A-d9?cLF7y64twZOvKTdu_6LCI;K2 z&bAL?4PqFXsAe#L`fWiqIYMEFd#9Vb(C07_p$C2xVnfll=`9a-$=4m@q>c|vAP2U3 z`+Id$2TOc1rJV%>krrMI?^l&BJw8!t50S1Qc|y5;aTSm$#-f#vqL`f<9;A64 zt_F3>+Wn&2QJbjp5;%JyYBX12?p5jJWVOA(R(-tv`|G6nZ@(@E zJ@MmGm#fHxKdB$b%PXQud0-(z{n8VQ&?cugpnph8k`QatwAi2zzgU5TemB15h&$kN z1?mEwaguAFG;#AVHJ?4j4-xxPMetEQhM{D4r~UrACUAi1R(NDkH&Tg^uf~N0XTtBLoTGOKsttYW$;{=Q}1+9Sn+M zi6wM>s41eeXS*6x8;{maPl&Q?ZU*ABvO*>-2U1dFCKeiCt;6E5p?j@_l zTWtSMb+=z^h!*q5MU+DvX7%NRarUz+9trpk%qO**BF?D@5?j#+7wuixk7u3MhTEFg zx96;&#Y-s)0r^EH$dNxV@=MsOu7cgJ-gox_-KtRQxihclmwA>N3gc=O#D667`d(oV zW}^KKOSU`Fb2^`#B=lK*i;yNY5X07jW^ex3R9yvKmVR2ql#Ht77#uJ@JRER{v2gpI zv&;`FGVQYr|JI!M@ZPtPRj>KP_|gOeje>)f0Zec;z0{JzW2ouglH1uB0J&iQ8exs_ z@MtaE@_oTjcdX4_U>{tXn6*iHd{S((uu=tWO7m!ri2dS#jlq8UlfTJHf9S}`VOP03 zA!c0t7>JX^!Ty))Y&WN|=3;lZvw@RqW_4YzMrlH3CMbXxKd6CZwO1t9J2p7Sp9WAJ z{e$kyczL0Aojo6e=1=pHpbYaN89iCwHi66~7@|Y3$=>4fXRy}*H1dI3mNFIvzC5`-F15-0}UI=yt|Z!SbpMu=&YeM(Ur~GaGdd zF~ARAlgMTm&abe1M~*f4`CG|}?_WyG#KaVFfWqIWJt=$jtP!P z7gmSU(hcW(4jtJ$T-#krq@#v4xP3eASN74a zpx=UR^UT3w$WE!Ybt$G>Ve^JiS~j9e&nj84+>dzevn^%S$uAhnX&yp~3?WM7Z&<+? zsfgqO)fnCP9yxEJWrCxAzbH%ONJf-AJHa%GsXDEYokt{r(6?%)Z#k?cEKgUx$J5#4 z8t}PZXOzaeCT26GSW6nz#RCw(U~~;-WAaC=VtV;lAGs$bYE6bDs$fS=WX{EYV@nAM zq2!WCjyZl;hpB%hLrhIsnpm(}$hQA)_yPEuYLSSvAC$7nuD zMG^Z3lIG~{(Z_vaF*Jg&oRMvLB&&gXGE6n7U+h4iqlkV!As4!0!3!{^n{ClD8w^|U zJdt+aO)s<>t9)#V$B+}nFC38_+O@iSnbW$sZg1jvh`DUBAJNW6W!U|O*6h|rE;A;L zC$vV*#8j{AEq?JsC_(MDY~ApYyv)AQ^EW0cX0q!1$qU@A;NN#}0!cD5U>U%~rj0ZY zvr!+xIVFLrw#N?2>Rln}WqnPqY)SG$?$1@RD|dBpXL-_T=c6_9H5PoCIQlI(`!(h4 zJSp!bne_EfyWizD#)lxO3lmI?(#}8mAF?7AYa@hH6oOUa^olVk13x82@S16F3Vzp~ zi|3V>+zwQzmDmj-DB2fl=?rj*qE5^(m@I-|@FJfyG9C-Pc9muX^Y0TpT%?pODwz?DN@;dOuxxitL4pJYc|RV+d+Uro|mYHB`YPF*N~1 zuPv`8s}_~58+$x16RoZhp6LitYc1QBCiA1w_cx$`9+p5@wK24dc@h0LF5wr=Pe0;+ zA_v47+^Z4T_EZGB(!nABea1rj7PBFc+p4HX|3X7_8S9i$L5?7Thul2%+ zmqX>SCY;S=H68cCJ(xi|35F`QLWD-A52;Aokp#bQWw}%G6%$)>vJzSKwa!oeS5D2U zwr_TM%i$KoqXUP|1r-amYm%lOfb~>nLE#;;YZCF*ciO63GPOQ7uraKCq>*#$F3ukM zZmu3@zl0)v}(5Mhn&rt7_Bps^s!F0w?Y?~=a^zx~k zKfh#9+8VD6kQ2KBcDd|&#jH6raH(I8=ZNfVa%k0wE^X9t-0$Y)?)=ayF8{bN{ZHI$ z7nG9)k0_ej^7FOwZI9A0Frlgi(lm0BAeLw-^8)iQiU$}49oU}*JXC#aQ!{tPOR4}; z9+tQkYNK>xo-So=1|L$RldJSy>g#3XVh3hc6s5BCLS*4!7Piw{q+gb1Wg!p_N_)ac zHsA*^W>WGOMMGvjKE7miY_&g!g|?ndDA#Z{N3r={wgjzwI`Sf}rON4_+)a*)vPvWRyLfR$pCMz4a{ZQ?a+dby zTWw@!R#VghG+9+ujCHD}DlBid&CRU?;Z$rQ&=nLWQW}o$im}fl53sjc{?tdiAVlEp z=yjeSNRKDq73ovKS}6vU{ae0w)s9AIq|e%yUkVPU;GoaUOy(Lkb9b|G2^d|Zh|22& z$`1~T`uPfMWHSnC9BrNAWS=C1BM8iJneFhL1l^FjA4Wi}=kwil?IUv8Gwi$(_Zuc9 z)}sf0XM+qGB_!V^LAmf6%t?f8v!g}JOb>aBNz;IShU*kc9$c)!@uDhPO&bIG-H2)n zt0D|MEQ(WtBAP+z0en_D;u5*eUGoyGJ;WKvZ&@WJ*cD2~Ltl906hLl0LX^EY)|EXm z(mDNAWH#x4X)@kS!_uYGJ}{NeA{09{CcmyOds7{)otwC*9xD5?EfYg3kUDySiRtI- zwOgLXJ3Ae|lJzS+R1IIig%O8}py4$BgSeo9r@wb=}%}HkIKS|)NmrR z>DQoL?tJl(X(E>Mi#CG>FZm+uGC?_#LF(!D(wuMIaSCUr1uXdy<$RLsYjsJ3iZ$F7 zrR0Hv#0ppaDQumloP`Vw1UZByyI+OYNYK`pzR2#5m$+P6(+|a(`DNzC`W{M?aHKtT zDO4>j6(OK;5vGeAn6v8|{<%Lyr`p*nXC&&gE{}dW)P4HSzitSX->CAIr(>dQFUyWn zY2CcRWvN<|_?0@@pCn$iTa>6F7`M62nzc}EGWLS2Z)2wIcFH$SDiAc@z=^RO$@|Q7 z%=`O`>I?n_=HpVm4F}T(wqzVVW$PZ9lS4Tb*bg&lG)m%)RT9k!dm&?1*CanG&#m~y zQ$Bf6b8V0fj?A&{B`Vih{c5Cn++vlAI;F3dLm!FX_qR|J(J->Ekaw1m2Dq^#a*lPx zPLC!YPAhVHyg9JGkFWtOS@G=R#Dq-op!_6ajcQDzk7JWU(cV}LMFxoAYxT=RhBIZB z-laX%1U}tkd(+~@eO{Q0_`sTBDO1XY%A&5)e>oNO3zMg5Ccnc2ih!rqMx7`bI=abr zVfPm6iYK6?a3NTQiTbz}-R)Mj^8m*X>IL6TF78wcr)QbzRs_pEW9{|Z!`2$tw9OKS zNivjz*uG8e6?QuEICa+tqk{TRJZAQg65}(YgpO(U5Arv@ay@1RnQ!kUq!?5DLHcu6 zZ8fIn1a>yU`l6Qp@pzFKfJJ=#zNOq!dXND4kT+WXm1Oq^o%VXUQZK zW(_t4tgboO8{8tUpk8mrOqo1&92DKmE3a%6)_b7Y%{vt|(nJVxhXTsQO50A+c z)0!TFkIPT`?dvgInw9m`l#G4{aiaJugfBuJf0&OVM`0mfU0-h?wb9~h#EcjW{OoM> z3YKJ=B1N^;!9_B05_t5`nBKi9?-|50ZCGUWU0za~@iGV7gR7N?#Y$JCB~^jLx0dCl zIeNEW%kne2YJ-neB>L~$t;=dkOPh^C?#Vq!>@fu7shq@7<9^_Ew?_xJbJuxXlE0J0 z5-!iHZ7^`jZU|(RF6+(-o|^+Wx*zo_{+C)uV|s*D*0j+-mFm5)nkS1ts3qZquL0Lw z(QAgJ$R5HzrKBy@Rbz_3f!IJCD8qq!8on1YXIw!S1Qa?w!r9)KU z{5DAxiD%zYjwcA>v+6l$HxhrMoc+x^Cny*>Wv_a<*9-j6iOEcRufhT> zyFyvEd=85z1&LHmRQftuIgo98Mz}Q05js{6{vN?D2)Jj>JhT zr;YDg9uQ*Y?FOf(Z%JD(lV^d?w2y5-=RoZ;zlSGsMxgiv>1Rf|_P-xd7S&f!u9;D= zHCd+a=FHT&lx?Fr1Wmck5{Zy&R(y+c3%C#Cn~*;~XDUdn0*5q+q$mU9XYMQ zbYP>(fwJQK!hhn@d3)KeCM7`8ML8|t zj~J*a9#XyqR6dT|cg9H*`!H-g^pjtkD6T9E(Mk;{4I#*dEA{YWt5?(yNy|BtAaG6E6{qbN{AB)A#0PEf0s4eV(h%QdgyufmmDx+cBV_&9kCP zmWM@_sA+Q=ZgN~7z5Ofe_iC>M8?2UE??w=u7sqWwm_yp@W1A+0--Uh0Q2aM}CeBf! zPmltWQUiq>+_z>!uD|oyzan7fE#q<4z2xeSG5S1F1Z9RVuFZ?vd6Fd#kz1gCe6Vq{ z{jv6Jgzk?gN(Ri2~&Uc`$6yfR$ksWM&idWQQu&@Ug`h$OLCNGfDCbNMXz$Rj);=J zf;too8LWx-^#K?B9ZNI$jwk(u5+|9%-B0M(()s;0V_#V=RU0A+{u3kDa&??UkcMIUyqn|J z`hI!XfYut=_#?fJt&nb9sSoD@GBYjp*Q-zw60Dc#lF{tKWfiz9$ec?u)P|zRHwy_2 zN+80B{z9{4HmHogRoFR%)Z~R29WBG|v+w?>*b#r){YAT>p21ttsO`Sl&(WOY)yoIT zv0ix3ffpuIEF~w$Sely%dwY8?JEHfzc=!nAn+aEF)3#8ha)$d;|)8&|SKmthBe|NIXTZbJr7JEI$$2QXSKF z-}uM~8}LP#p;1mXEp=EBK3olOpp;q}(`3SDw6W2%k;x|a#Pj9p99iDQr-$^}`+2&$ zCFnH9>3+VTyiZUx+|jB=DV6;GZqSAK>6C{rP?V>pQzw=$5HrpH+LnGzV9D(Vfv57* zgT{Jcp(OoTW}Pz8m0UJ`T$!HsXc4Eld2U*=PMp*#W%#lSV3WFAY*Bhdrli}4;)r|x zj|PD{g}N>Yg?rTi&0FA#jl?GMU7_pctdt%FOXB*_+d0ec-y+yGUUi>|Nj0=GW~R2Y zjCivkn;6NdDQdvYu0l%=I6Z$|{}1n9tk)!$p|mD{uhqKm-3^y?#q1@8t9_yQ73G1- ziztkG*IrS80t$~T7H6AnXR4*KfRz!Rwi9xm=R>8DY^s&e^w$j zJotDZ`u8o_I(sTeh=Kx%S1GW%;->=cMtQn@# zQ=`=6Y~NRd-m$A~{bzMc}RH3QMj6U@}=kWF?c5FhP8OdMNHuLXp#t5w^$9Md_Sub@}NcndM)Yef*ba z>p;Ap0ID?JK+E%%bD5Pq_(mdW(P{DBl17(>XVCfJa`RG)4FlX^G3r2W@?W`8QaPC~ zpKNR*b%k0b{#J&f1_Muf*$&iGK_vcm-*+m=I;|2^i44FQ*P1#|~rS4%d} z9yi3~QADTIigJ8)PLYrjUpkVD*9c;YvT$!~9{^N91&P zO+FwrMYO2rv@8`#h8CP7d@*AjP}^m%VFzia7@Vi6u!ol8Nc79TOmvAIpNy19hv;>z zNh(~R?lL@i1Tc3|~{DYZh5w8R0vECk>+H=Hn=H=#R;< zE4Mb8H=H zLbwgPMmVaA95tKohM&!tj(nD~q+$@E46@AHkQ%>9*y1%{mnD1b7@?Rl@+3g;Q1idS zj&|s~?EDzMdU;}o=g&zK9Du*%sN_|@@GMTx6b9z$OJsvTUu#$R+!?qxz zjSdIfvLr#+_FX-7EIHM@A2M5oa(zved0Z|du?GeMDn^#-_$nka8Mnla#Xeo$;kc?P z-YEWa%!Ih7FPij_Bf9h6IN?N@U&<{uB0~wQ6~r1-Ts)nLPG0{jd;M(KrB3-a2*;Vn z;se_!tPwto@!aNbBNlu`#a67QoBAbjBmMOE90H~?Bg6TA^Qwxu@x?+9(eUk@^n1DE zy*4=578RW)av5aT+YJ#BZq#f(y^I)R-bGe8tN{=9C8;}6S;;3`WWv3YnCw!Kv^mlq zRbtx!I*{-l#=OdMTreH#^dRm0A!P3D$O0HiAUsrAY zAe+YxCuYUVKYF1M^kH(!+tiG4Mkzx)XhLy%ma0mAd8nrQ(V)xqx%qy_=%pv0TLf3@ z9dmn%LbHFcQ^2j{sn-ixYZAjqyy3OBQ*MRWh%+0dcPD3=RMWB`EvcarPuN!gcjbG= zw?0HoU!h8Yk`mtjQ55YwDxyc9Nx5t*V7X;ff-tce;Sx=k}zTcti zUxh?E%@|rs^CTlVC`~8A>4f_yrJOe4p!dRoUKNoLi)fi77l7_1yvY5CQj4nsaX=%U zqxw$SeI$8OnYJ7S$nVnUz63Unvqkph!}W1%@p1d@ir;H#_huyC`kyuT8gP^B zhmF4m6T+GJL2g{9I}==IstZT=#wBB#gXx?|S>(w)4j6N^=J9dbN9V103RV z3)(&4rn)*(%Q4M|~ZN_bC#+=dY5pzVOr4+9w_De@GNfF)^o%Mp&| z7Xc+d?*Mpto$=*rrR)LfsHo9C03Z7pNPe^D?eBFcNCBeGq8&ns(k`S4Imbj6U&lo! zrX-D&=wc8VBB+WqPWB?att+I6O9(|MO4TrRSW!?&ayzEix8kWD%;{)s$~=7b-T&(i zPn(Zkr^0(C$gJ(p&S5o)&K4gn=5RqO(YaQ>>uTdP(ss;?;@Baiq675C63UMh6N@3X z`$e(Ih)Ip9`N$C>-AOQUNcC+$p*E9;R&;VLWGa3tCTYrSmS4E*O#w&E1B}?)#u6Me9>|uzU*qHN>{CxkvM{bR&!DKsv(jCD|Dx9aJ*GqYP{rij~DHHJi%e7^>ik{WvsZ(hw%QrME z0`HG4LBbun>2LDmGwzaATeGMDGg6G|>}TVa>^n zIo#bTRpZ#lcWk^a1YAJ0!qV?eicaFvBT`9RDxpOW(68D|EWq=R$+T*6deXvkF8GH# zamo||o^I$`>Z5n%AFlws;%Ph)bM}$g%kKmXy@Q%>0VVBIOg7q7`rNLm3Im&UR!W5OdjG&yV&GxyX_v+TOs;1_A)*6je#$`4m?09P(5AO zDPq!{g$oXiyYb+c@OykGiE*m~%Qu6Z9@QY!pz~v*tO3oUuH<)EY-On&=VMY6Ibw%A zv>rboT1|7hjiG@r*I!7yorO+kT~g)8hyI-XD6LHCYv(!dodI1gQlPn<<=p;V;1aOG zdwgD02meF$<4>R_veyldP0@%LF`*KHM%Lt9ld@(LDCijJe^_tB4<=j9c;2Bq z2nlg=H=0ZkPw}4D^jefsnQ~NOq~e=y##}Ye&&>Z!6-hwVW)dMk&;~dIKOqe`VLC_3 zY@1soCjOzEU6(fq4xhy+#MjXOwI2meHcz)+4E(lB(l|T(OVDNXSjSxfH@vPUl?db{ypFO)2me@ai7m0Od@F-~&?gaY%jFfMX?)diO&L&h-Mwf03ZgqzS-^Aa!+wq5g3=EIc<=%-vfcjtsG z&r29NNuvx`pyM+^NccW(TUf=TlU8>ANy-3Jw(4X@78REoe{G&&6a_0Si*~+Ms7*?3 z>vOxg+dn-`_Bj1f-CP_ z4dk$`Z8@Gb^mGryT>(s?gF+40o^?)-+=OO>b#6BR1dcR1Gb!}FZvmb(;kth2$&u6k;a_R$@c?VwWQ zRynkuw8zCITKs!qNeG0bw^U)4jAxH^@FnI|8LoTFi5J6zRv`%E*=(_F89-W&u?#+M z070aO!>l4xr}OqRng;c?m{1eg& zOO~BY`XTNPFgT_2E9m|*ovjPsY|q3)qfw^ld6slhi8g>UX^+Kn{Rt)y@FidnfD=Q% zr~a$4Oy7H%W^(%vqQJEDkr7!ME}_^4m^hC-VZW>_;cq689|NS9LzIbabom<#=Y1C{ z^g-UF&9<@(Wt-L6md$2_j`tn$am~7tfiH(bCs;jMD>3tf#@SD+ya2YR*1(OKml8oj&*fXwSPMsKj4-0Dw9>(}eS+seO@| zov`$7NCr=kqP&zTBEk5+M2r5$99gIz$`~u-A8KnoC-jahYfKj6g0He58LcjFGn!a` zwwU|rk#6mQ90sU2S*xu9Go{Js6yC9*=;G^%_Ll4W_q^E%G3lI1BZaQ49)Ru7pq%3m z@55oxuSMctr|>g%P7H9%RA`z+O|@B>?-N-X1O9A#$1r@gHuZ9IrYfeeKZb%c<_!}P zNUu$(M)HA!+^0zrvbV0WK}KzW=qx#)?zBzxGfi z^*K>duo_2KLjwDR3cujJqjGdlMcy)e^zzW0#Cd^=rjY=_a)Zu$zLM z6G|^n**nZ{dgwW8M9Ji??;VFoD8m6r7CAhxin5XR(~VIP5w5`#d(iK?o?-Yad@pqB zR~**$jZh$JyeHb8tAvWNTSI5IP~{{Xckd0oL(Mx68N;Bm+GI|~~0=A8=r;G(8^&46Wn=1XJmLHD5E zO64X>@Q?4)Ece+27R?ax{`8sXnN)go{7ph*E2`LvMwSZ%5l{?;d88+x3S#CR{+tVZ zPa8fUAprkAowL$P{Mnr@M-|2*?}hUy|d!y<`}1@{4Y6_V}Z6SxTu) zsd;^tfRED`C%L6&ZK_0!^VSZmOQkp6kZgpLe__UMrV$OTXp0Do7B9jdUir-HOsd%< z7JnB*&Lc#8-4N!Q-s;CDmzvXmHIi|4ygt4zNw;Dg?cc9rA<*VWL$-OnuNjG6ZV8Sq z!;fD5jC>cfxRk&jM}nIyWDV+QG?o%Y4x2xgc(QgV;QO~OgtZt>Q>vQlQP2F@8xGsI z6}SC0!Mp7hlE0DM-J=W)YS=p5dBgWJc3uJ?{()FV%7KadsyKq;97TvkW-p>yI=2Bj zeHMH^A{Ah&&Z4m$Tg2LxHc`_hqhZ(WwmuC%D~BkRCKhcK@o20+>QtnkZ_ERCt1-P3 zTf&7e6|sK9k2>45g@zU)fZ09z_?sPV*T8gclk{)J1=$Ywy|2ykIW>!u4b{)DoK%H~ zGThDe2NRx)3!z0s*RL2-OW)|H5;DC=7^alf9J|c%ale8`Cl`S>pa%J7jY@n6(y<&U`WLSYNeKwo=n@`L|KdaIm z&Lm)WaQj+%`1ym}Z>ig!lPZHp?sin3X>Fsi??Nj}b(LYLjY|HrrT?Zpu+G+L{GVM9 zhkuDZS23RNN5}w(e=Z-C1-vqdJ*sTQsSj_?Fj3{QbKg*BJqv-v!~$4gB3`Agr-X&`-H|HlT%`B8k?lYBtk7QWuTqkmt*{w{kF{ha;uXAhm;tNuNq6upmFO=aB zTQVA@{iK`X5ZiXkw{nf@9u$!6!Pr*z@18I{?M*6PQnrTe*Yfzdf0U%uo%VV5|2|b} zZ!4G$z@3<`HVNUF+*ozhbln||Eb@6S!;$>&N&T}Rgz=fU;c(PSR5bY$VfLGY#C&8 zPt(>m`b{-2C-ix%xb-6=DXIIn)LqAuY334$DD7hac+D;NQs#!4htOEuDh~nf_Sp26 z515Lr$WCGB^%>V%{JOG##t3{Z=0S54ewQxI zk~pGr^}VO*w)?f6cac*@qu#SI92oo~b0%nCY7(JJS@+!Wzta|>tuAb(p3Myr{U zqW!JpdZH)jzR)Llw~fS^C@twiA6age!Ach#tn`uzN8%GR1m%@>u>r&LwKw5ajMxkr zv}bjT{CzX!U=OquXZ!dwp7~f<20w`N*gNU*G$3=W8YZOi{@+(wHjY{z4>W#MMSdG} zI8wQyq|}WT&XiCmqn6Iu6_WnLpg)hO8!c!(;BfAxxVm$*hO}AyPs89JS^6JjG@-{} zSDmh7^AZpXRSg-a7r$~?5(AXW?coHK)G#0p_i*?V>n>n(L-=ZE_v^q98-6;#3y!6$ zHdSoRR)FUpMH;3_qrG=XlCK|$k%2joqN5ICU|IcwLZf-$xuy6+%S~c*cD5JCL&W^O z)*`y!JR3M%$za>QDpH{;{6Ct`g0Jm0$ilZREu~n2;_mM5#hny)x1zxv(&A2W4Jq#K zPI0HWTX1&|WZAuUzd(}TUo!8^ob#LyoR*Qutz%)_A_*%iM3_v5=>*H?!GZCKRC_16 z_4!F6Dxn5$f;#Y9Gy)--XQx%#2)3*>v_spB{Toy}$iK_v+^bIMlc0(d2jhfs?Q$X0 z>R2klRe*;Tt=K3ZW{vE{$>#6;#3^+`F(ckn|9X?oC39hcZQ7zYja6a1_3g<6%K#sH zY@fRmi@gH3HrS;=$&*lA^xQirEm6Pmr^$I8z|D)Uz}v^LRa(@9zKTxl|6WdVGnA!F z^XN({L6)Ea+&uFGt2Fb)?tbvhuWfk#82P9 zb8nP-1=5oE1<8>51?(C6X9R+OhE+{}Q^=$<`9688#f^WB=W|k%EW@*39tv zas4+qmgrts+_duXU{85I--E5Q`VS^4tO~tE`Yf!SVrN@fUI$ST@OVttUHl`bP_ShO z%wIO{cJMH63{%BY!kN3}secW-Iw)ElKVsG3gkG-8`F3v1i^9pZz?`9Y8LnqGof?H$ z%NyP90ub458r4tz)xLc~pRh7ps{Z}MeE7wtl+Je$l47V6xxOyrqsFPBx4zvs|0*ER z6hyq=w<)o_>Tj=eb)VX@HXR6gCG#KkoE_vChy)ZBv{(&@?OmVV zHZ7;WdZG%l8$#Zp5--JIcbwwbps7!;ob-5_e+29$1aaBY?dP^vhY$p`Y}#ANK14>}Z-3F>W!rT82m+zoulivYM&qSOz;6B?sj#X^ zy5w9T_5A2NrBJpjtSm(Yd{M#aJ6*Vwg`JY zmC;2FnRb)CWhV2FIz-i_go?^8e2;O!r3ql85+D0MCA~SL@MT!I2DMBqhs#8hWY)0y z&$nL4OG7U$LA{n88(o80%tFw=C375(Lwzi1Prqr=Z(47v0Vyg{!&9VT!m0J-FlH+{ zOWt3r{%}y0o1;ul+$e{z{uQwTmd-qRUzQwJG))wx%V#j-cd24(SW9d$^WQn=uzL-uTE>j^V|uAUC1}5(ppA5bHmE;~+57BXA;K*t@lo!PUO)^Jg(+-eop4#f z$6Q`yQ^*_s(^vuvzPu&9C7GC`|I<$IqYMc29MQI%`*Mled17y`RVG{KuTprxa~^3)STQEATr(D(G}}`@zGd zDjzO^TME(ars8<&E`7Cfa`HdqJtXdUF5Vt0`#Qa6f*tP_p>&M3a{tm3h(%@7 z911+u^Va-#ODK@P5RPdwI)zxiJp3J7x!e;hju8Y`!mfSgB|pA@Cn97h>JJe0^J~Ap zx!XdP%u}ZOD`POL0Nd}LaDG0qb<~^H^)M0lucRpvYHz=skJb};ekM6lNypU8{!QB0 zJG;Cr(>V~S+cHN6F9v^VGkoyu?Q}l7gKEWO|3eZRgdUQAg$r3~>+m1a3cFUR$GAlhCu zP-2ScSJJU&L_p}o?$pPh$=N^F?y=HM>d+dyREM3};)!xw6&RIcdI{}=FvcM%B%72j zE4i69&RPCjE(K)R#`HX=P|1yukFuT^GwvFvh!{*3r}S@y;ctbdT=*k7|nH&+&gOLYVeo9piMa*lA5SI?E z^IV!s_)&R&v086VdC+u+;~Oln0fH$*D%aA);~spxg&4ZFAggCZntUuj-n>2HYpL>{ z--{BT*Ir~~5AbK#KCh(%8S-%^zP6L~K{Q39aGa{SG%heSLr(kNq65D3Ivr^Ui@$Ul z)oY7V>reG^ITAyeqtMK1#8kL)*L^}w9RT;C?%~wzojhL?>PP80z0opqqPNOyiO-MR zH7@u2*=}#+wDw&IRKk`Z>W`F?DVp+ij67Xx11!6Sulh;H`O!|iQg|c**fz4+BK`R8 zKwX_mRm(tTeA{{ftz#7J33EKtdK=;)@@LJVQAD@!|4z4@2==|oen_D+W@CeS*C9R8 z2xaViU}M0z$*`Q2)9I+Ed*y1EKY&KfN{Oa#JO6n@b8W3I(0xxQ^zQl5)v=+kU)$&E(B>xR5Qc78b7!flFZuG`?=^B27`p_0yGt z{_(P=6woHPDJcQ-_I1779R~XnwMiC}iCGXOON)2;_rReiRUlkvD?*m5SVgLlNBqmN zt<~9Xy`A8Km{DZdc;ozKe@pZXmpj&{d)ahn8kYq0DvM`AJK=?%*Ti%BG5LO@&cMd` zj-fxvhG?ftgG=1D+O_o`Kx{#iM1Vg{)oRGt%(YH++`YSb>va zh3#3)!1iuNpu=v}yxinRIeLYE71XsK9}(NLPVJVwF!yppwDT zVBDYYzwOTiRSV`lcfikhs+@zeQGaN6^zY_$G2H!T!m51KB-b*Q(X91~@!3oom)X%3 zg}9cT_$hPxl2hgV8zKwr3AL{tkIKBR?9n{%Mf={#n|SM?S6f^;SPPyZ$sDl-?a*|~ z+3|gC|9Dj;Hmir%SqT39Cw$hl-`M?^8czaygGAYSRSFBn*`qP|-}cC7G6+0mLn}g_ zmYDdZUjt{Oc#*POa?BSQdRA<9f^56!)|A{*qI;k|E35ty0ANH_QgXe1%HJZ{Z^>^& zZ9Q-(Hl0qkT+%%(=3n_*I4^1Ei}I&Jy2RrouYxmgtkw4HVgrw85^3w8%xwBm>3Fdg z(sN^f9W=H9Gy@qB#@w5m+9Pf6dc#~vs(HsTb}&nXD2-zu`+HW_pk1)&khGDb7pAXQv98lH( zi}Tp}D12N(NW?wzeMXo+q=o-)Oi?E$15+~jr*U()cr6j|bwj;f(dB2&O5y)1eH)^^ zHof1mobM6*bbDM6G(jy_d42;C5%XIJ68jQeSsbF|b`r!arh6;WchV@NR6ZXyWZwN{ z^%_JM^6j6_LO^d^_^(FN#(5dp-o!ZE+uWNkLov*iY z`WL}FU-|{=o9*LXL~AO`ho}P7M{Iwcer2)py-I;SjJGyj(ay6qQt8B$s*uqqBq}_p z`G9RK5*^QEv}UEV{7Vy(jGp)#*I#7({a^UnCV}!@j{>^i<9&-%GP7bBgt8^2C$bd1s}jC180qYD+Z#VH8{to@if}g5`7_AhxI|c zTmX@`bUG3vHDZKd!iYrK7gSrXnY9`0KRNORADdbiA4iFO;UQ<|Jw`%ecPo{b;92aY zl{Nq)c|BhpFI(PeY^a#S+m-9EAIjY6Nn-Ncdeu4u38^#DS`KI^+5Tvx_k`&7N;@vN zSu)vU3g^!`|E)Q{v?y>i|3Gu4^5%oTjdii;hZfz8qSFRWTPOVF zbb^vQcbgt3oA58O1Le%2(2KjxSh=pi;?9Uw%s|;p>F;F6 z1N&l&y9#@|*C}76#v)!CvCnq(Ng*0mFqYQ&*qQIoA)RmxN+RI8fr4sQyo zVt;(REiTMbY_dd0EhoRZ&NN;(afdzo-%^cPOwOqAiNhabDE>Y0KwP;{tyC%KHwMn` zus)Kcr8=;sSEY`nHxWe4#*L41vhI|Ou$an8@laY;?nX>7<&*W%|5V3I!09({Fvh$v zOYYRH4Sno?COV$jPP}5>;w&7c={xJkjW)=)NUjTEb}Hll`nxjnaaRP&^g&mUfPaPX zGaRR81lM^ITk9gJ(l@En(1SRIRnB}qhAJ3p2h91FS24V@a^eD>jAn3DGCabH_im!PAG##0b|T3_uQPse#n zaR>vWsuS}`LbN3HxWFGT88@;U2b4fEg3Ja=u91%4-u{J#QByNVUthaEn19~mA8aM` zm^!>w7*cFPx8E7_K*w~X{*{$19@Rrb(GW;{v}UeV3eKDPqImj&2e_ad*h}i=NKoML zBsk+LmJ=a3nP0sAt!pI9Uhe=&P|oe9`qjAIR=@Mv!Krr1jEeNYTvlXC74v+)%wOwrelttT zGMinUez1A!j%&2Y-TeRV1+Sv{mT@zbq=gg+GBPg=B~L9wGcEhz{U~{jf={f{J&uhV zJ7O6zDy3%gEeK!*AT_BCVt=Am{M{_cacE8mi0u?6XjJlMv7n%h}A|W2H}NE)SO(&dHdUIApz>%M%jR-dOhuIBDsu6 znZbTb8PzzgdAPI(#gn;cq&a)rKvC(|$R7X`rVjC2A-|%?US5ktbU4%{@%rN54UNLx<7~i_rUo^ zG~X`Svg`ZJzOJp#nk2BS&XUM&95OMT2OKf7dGEV_iU(`GRUl4*FoZd4RZIKQ-^r%_ zG=6urL;;FTN+zJkBFE7hv|?!u!e9nE4m`6?1pu%aadSxA}7(r+qaY)P3D-R;N} zx9`8gE}x6)0y;!$b`1y5Ud~-`sClmXUm1uviB&3hxm#-D#%wKgHY(e9O~kzDGI#_I z|Lg$SGGV;?1yHiHshkml^B^9x=|Fw4z_cfs56I?6Gk`U}O z=eW+?xtII|AHTgNQEr-w__yJY881wYt*cT44tp;jEi_wj3YH%3qqV{Hng5%MfB}r8 z)+U7?OK}N>NZS1UR%-x^J$q}fYi&RaBNl;vJU_QNOhk;2qsR%-ZZ66MVPqehUf~5G~_R z(s$kh!?v1ny>8|zIkM?C)!HpqKoKq7UszkiSRt*y6kDmCH?ZVVf3Sx@gHv4QjUby4 z*0#~y&gPKf_dL~*I~-jDV0rUa^RL^QX$f#Kr0*CS?}MdJv+~YG^8;kCkBQ7NbM^E-5>)oAxDc*DCZFeWTF3 z3)Pg8u*->aTi}o1i3TnN1;`Wwq3lfMKkvn<%mKTw$niX`z7n+WhHfJIk_$R`oM*oN zJ`v@HhG#XJ0XY&@*C++ea|h*I#NP?l}qk?zOedTTbi{tgNdU|N2^2H z`~(k}OiJxqDdx9>J*}>IA3+|jPCPCe$B0w61F~IPg++pAJTnT`W=(r#5VE{GSUuvL z6`v$y8DE(L(Y-T@&=dK6RHuZl&HdFMA&

    }avTFi~(Uaft!9Pxy-n#^#IVn*XWF zY0H%Zk6W+l3Y-hnwB!CN!z2X%9Gv19CJ0^X#|T;4M663IT17?1MJ*zZ^~KJ4nc?kB ziP`l&)NMT&J~Sl%6=HWl-I_zP7Vfaeo-LS{NECVZMOC=wBfs1Av76iRS>^Aj*=HvOk(8-;eQijYV6w zN*3f~p;-f~>+29S8LlfF_9CjJrjZ+ry;#3u|n4?-swI8sWUlG zA<7M%zM{O(Dl4aLDJi_f{jAXH+C$`upCjK>hz z936f?y)=zhu$s!G9!=v3&rwG#2+|*pysCcGEe4(qn8s$CKYqedBpi8-zUW2pu|E40 zufrdju%}e$tcWy3ag53FX($3ob$Ld@ZVsor(x?Aeuwl* ztg>a;VqlXKIZf?Yna@+f!qfWUQWOI9c~JI&Retr`2*1MDq1QB-EQ#H$W4B+68V3jyI( z*IRF?sQc<2faS$^+-085k)ON%Cm-m(eEcQkE#P7`VX7*HR6PEV{S-a=@egON!(G|} zbCSr&aw40R z%+ZA!XL%WH%+m!4Te#CMc`&MWrgh?2W{+%ZxJo1rdo~|#XdzgWK39G@?$@8~;6gSR zDBULxv;9i@JcVI%h4I`vbA*FtDaACNz~P)PD9_O|9*@p^8s(lJ^30Iqzp=%nx$LrAtl%*)j)b3-Z?2ZlUKjDM z#Txume22$?!(=kI?G!(!T~lt))o}CqBdr_>&DMTp;W9B7GoaTh%8csqxF@1=7*@}Eq;qh#s1_JHPv4+m8CypI{u+KK!~);8i!gt`%2Pm zuAvEd3sG=KEtol{w)o;tGxoE!H2uN@foFmNOXG?*{`@XD6IRd#4(XjjlVg5avsfEe ztnlFcs1eTUqa7upOT;``)5dXi`TpdHa<{*8JAX*Ex_XhQo7xQ0%ikxJ?W7`+)U0b(h}cX z97`O|rwxt1@4GHr?3yd65NmZaPiAYTOaA(ZkUW|txmZM@=r<*LeV_jh@Y{D&byrz+ z9&QRfD6FqXS9|eHjvb>aFh#?<;*cE~NpffDpVCxN0PTm#5`UG9olIi7ZH`K?RLWx$ zlnT-a$%OFt1_=}$ajB^4$VD`xN7gM~hwqs4y>)$sGO^~&r^Sy1>Cm#gj0Wd@00_ z$l-h36?@nuiHykw-7zZgVw*8Ts%d`ex5GETH>32yQ3>9*tCvK8%2fq3iFYT5Eo8Tt zj<4vtZzG!$p?R6rQ!&BU#A|(PODypNka7Bitp(VyT3fYAto}gD`8}nY8j7><*-+{paF<`HA{Q6*eR=3+Zt~RwQO=Ay}j12es_jTl4(-)di!|pt&t7>GS z%P@Umjq?FT|1RTuhpwc|p1g-wgvAbhrvGm7QZU;hwuJkRP;yumqikfp=iyLhhckUG zBXSkqC>5^qPF@l+ebm)vZLbQK1&cyqY&SU)!Ev!-W^1AvKoqP7(Cdpo$Ttron}KZm zqr|ngN2yHn?bVLZ%f&qW6T76o$LwA>hJ+#b#ph$uI)!^3p?+@g{iqX@z_Yrto|}Mz zWg-?ZX(VV;Qr@2)Sy?zm4PY>2J%YHo!~39ZJswWV({t7!|dqFU)L6pDj)1 zuuy;NuE&98HG%sED^i6;c`a{}NxLI8qRjJw`5~g89cAcu%MmlUCDo#^V(PNm_s1M`6`tx5nt8qNH#% z&*Dy7X5(w@U}ixxv#1w4r5Y7*fWAh+&TW_NC<ngWX=K%vJ`~&Jmn33f4XbHw!Wz=9IJ%EtiNO!RHx^Q98!1 z0uoVtCaPUU!etKPXNv`_uxCOi06vLpbr#qP8(g|hyNXqeNrgNoq; z2T|1gv>7Wait&9sM9LV`F1wr+UHPjE_n49SBDg9v4VHW+!9;aWV%px+g%)FP8*dgAx&)IyK*VylyUfY?2KQNA8oz~(^1rEic-^( z^~=1#PgZ8^GU0hOgqlDDrm3Q8RXV^=sh?qz3Uy3|SX_085$MQS#AD6sei$y?-+IF%Qdf*E0M}4oP9NKacYiM>NK(ji ze&F|fai-CNZMZ*T%FAN?*_UPBo{6lWw%S6Mgy|1$Ek|Xxxu%D`SGzWKN14IyH#fPS z305a)IDfY7oDkNy7}aMBrSSP`A=GkLMFvu$;WqV!iNEHEeZuj}8lesG+J<+GzBg)% z>6!aP1Hf|{L1aE-K6wo3oXBBD~}N`w;b=}L1OyiC_RysF;T-Y5BTK=>jWz` zI$SdaU3N1oX7dS%@?O9zr;hOkzpTla+!|BXp>ePxb)@W?=j9xH=5nRWx&??I=UkIL zUHC*a3*Tnc^36gPxx=q`x=}l}tHy*FbQecjPCXo+@p;_f!_F(gir5(7Bs*%eVFs40 zq(AA)ue8_+gF#gEvg{sWA(OR0e^wnvmfvLu_!X^}SNfiR_U>Pvm#vSq#wdC7OI|*7 zmo`ivszqd~j(S;*7oPQHG#w(R$Qu|81GCB_>#P@tR;s+e*n+MsSds-`Q@o(zBOmXo z1%uI-l{@W8AKE?n7k}6J(x|NF*IYT=f(5E!t+L*msaK-T+YZm!`R1c~o@R0+(-DT> zH53qB(4EHk)5;!I2juFSr@0_Hvlm;mCECdEM#yrMFZjrzJwt}%fzn9WR$yrJhdJ*f zm-rHG+0JusgS-BWTb%{E&*A8H63#GcM0nE*k+diJRsWji(z9;$df;JGq5d`Ji}Umi z6Me>b38DX=le?9XlScnEdFq&*WG0KlV13^Da3cdR{`D4H!oFG@Hr3t@xfD=b^^?P^ zxR7OcWc`I%IGDn2xQ0y+ydV=j@NzuAV8_z6rrlG}{!Eouiu~X+@tOhe`}^h}z{@%| z49W_!8k_cTzOle{UQ1fvX}~RIS6Doj(}|)d?EBeT3GF^Q%UNR&QRz$T-A#0PjBoZd zgi~8V+9Ql$D~>qWf3obl97YyZe6* zQ-9_KsM=+Dqn+8tJx#p=$}RF(?FB^d`^tr`2f@Bi$HnFX+v(ZCT22vFf(r_k4k8tJ z&DP$)UIDm7RC~D_Y#sib7*oUQbk+mfi32j@`y%tu1t=7IaPxjGcF*6ReZX|~s6MIW zby+@YcRoZc23qHrRJ^Ix&zu>Q_|~pLh05=U`+Lnb0&ng@1=m{3kfaX{vHu6;2SIsw z%YpAG+x_D6uz|A)jD(f=yV&+rXY4|7XJhdEi!VP&+csx?RUuaYcpB{N6q)hWK^nVK zs5Rz?epTb?f(+0bXG>~4B^Z^CKA5!pbA*fpFiEDHS0Sj5ly5JdtW z?KrV5Dz{E-UGnE4Dxx+BQV$Uz%@GOB_Fj~@;TmZ+8DZF)ikvXh_ovrMJ?EtS{ z07c$EN}Fkmj`?5%0%$MWIs0~FQX)>n05z=+`xs9WVLl|2JrN4%&Qwy-Ygq}uvuOgphTF7+0h*S_dAfW(LYtJx~M~H$*F8QSYwINv^9W7oVtNbsT`rT26>G6 zOP4+uNs15pQv;8U-}Il*EE7Lp{;f~UOO(!LXO{jxJ>a(KrEnmSx%{=`W(#1?WiIo( z(BN-uyS}-;ysZe_wz7=>J@u5La(hI^sf1A5Od89}QBD@{rm#;=^=?_;X;Ozt+m9Ii zCOVlgT1__LiZkGA6p)?fPYQ-}Nn9fJ_@b*DPJC}_T+)0dE5AcrISNx^Dg2G8 zzSYdGOof>BewXg+H%V#`6^q=5rKre9b@J?1^uReB` z(~jp@{dRAW;Is?A%wa(95u3Wqx9P76z8q5HRPip;a><=MW`s&^Q_c9q>MX4R>ucVE z9xGn7jfO%Nj@Okg^R_Ej`kcs}&n^zFCljzsXz>)F9YkE3k__wc=P%rD)%TqxBG8!o zL7$c5mEv?IeCIe%3L5bkPiFx4cj4uPHJq}fdrSV4*1GWgC=A=(L$9q}|2ms)r8A$^ zhYNBcM1MZjD@#ugr2X7a1d%m)5U;r3ByBoky>osw)pw1?dG!|d$0eHf&QB=;Qe3~0 zR%Oj*JVZ}C2Ou`)pZ6K9b_tIr2Su7MqG_ItdhDpK z$9YOdo43P$u*hGj)GIiU2*j{g+J6+Q4i|CDim1A5UA?}$83IaAZ)fk4i&z>estLT_IV`{IVUiYRp`b>Ze$HJ`yK8A}K8Ooc z?6@q1?Zk?j&X%b_;j%9=L6QCm4P2IarUwT(%ay~FdomlJ-NuIU@=E>6sYQwHiS|$X zX!nxVuNWF(=M#3weepyIe~wvUzx05u;AQx=4~wY9Tl{bex<1zzVTy<21BU@tHx90O z5u?JDZ}zXMI^@O`J{~*!99BwVt)jGg^q2V3inf4}PDgg$wMKA!{vJm=SETVO56RQb z`~%Fw2s+HjvX^$KjZ>lhwZgm3re5u7juLiln{qh|fxnj-l4Hsg!mQON9ZeQ#XseBz zYj9s_MOR%l?M*uBbx634vr#))otg~SLoqo=3L6g%ac9K6y_wWE>gjm4^*ko6&(l)O zqZ329*R~45t9TU~+zt16AF`V((R0bbV|^ zQ4m&Fm+~f_PW^s>PA@sEH|0i&6LKP3W9gU7IGVN5fN(g)lu6K|xAj?t+4J<>RhI<1 z^E$ZE=?Dy{X%;^3c&pS(nS$K#=kxE*+_c?Yhc?q?6_*)4)6xMk{3CS}zEK55Q1WU{0=QJWDha1bb_AWW4w_n#ui0dM`>?Zy_ zpTol3OAzX8mUj57K94=tMBtXvlC0+`)J`Epxa6oH?4@g~bGKp!+c`z_Dqb3mvS3W( z;rRJ`Wv7w**kVkSWGg$AWOMWBYy$vliMWIp$Cb5lqTUGj z<77(A<=4fF?^Rd_EdIKGFrWVXmO?rAR1Ad6taRe(Ep)9=NLu(MIs`vsHq0m}D>age zj|%6(Sv_h%>ZLa?){YUgwAH>Gh3pPS@4{LPVSRDuM z!=n>R_z`I5C*tYWS;lf2n=Q|dbFJewKNp_i63xmq;M=g>^pf0z0vSsIVI0Vae;_#m}em}an6y7-gbb=ah3sw$yh~U1}bCG#lN7nfj1?dJFq1I@+gUS&-6-&Iwzv^I6sS2m1j}4xU zl9CnTJ0m;J#z(mJy&iR>zi7AX~voq1A<7zGdPQ`bCvqU3AO(TC#ImDv@!{U95{{Q;SPzv(OlX z76X%z)o!G#dvHBBgK@p=PiW9?Le{hvh$9^rm~lO@l&y$9=rK?te;QP*lOk!B^9{U` z;LeE2M3-(>aIin?o?h!JXf)b;Ute^5#d>i&PS7$Nk2CPcct6QyM9$P5lbM;AszmN6 z#!%N=T)RxioaSMnhEE!dUuz@5#>VcQTp#s>IJ_x3R`s)%~2sizez1OgMTpe zy6`ewoF6FaCNd?$DSwChfobZetWR@I+PBP~Qp|PK>@DrWc+lygi15A~gY_Ky(Ae=T z5z|ZQIOZIHt;CpiH^S2lCZ$6g>ay31*U(cW>*Zys?c(YTEr&St#)q#>r^1W1b3DeK z(}I$N!ks2(_*E!Wz-zSez{@*nK5PmNGjB#CffsOn!PHBLS=hn+Nk2cG1AAK&Z-?=Q zRq~QCZe*ayjyc}zt+0})6VUEY4LTk3g(?Z(nc2hm!r>%@rF1bk3T7Aj!T z=?YTOSrF}#BTB|`^YLcaHSL{4bkJ3gnUSr6+$Sh7Yt-+Bk_|X)-+rH{oy2A0e8u0Y}#Ms5-E((XZx+QDdn}pOPnYPssO6u@0 zKEJY9faVxp7ddqjIV*J(yz2)3kh;+E&~SZDC91-L`1EvfZ(V}ieskz*XVRgvwPf=< zYv5T|vS2#qMFIsXUT*mp+oXPE8z?h3H)Ja3B5K&p+J$1KuYY=8Mz1pT8e?ZWpK1i$ zykdYSeC^H+MK6pOtO-!b9pLm+FSulpHtyXGOYqH0$ciJooAKk~9t3CWvMDacjSnEd z`gtv`UW<1reg=-mwtX@BkCr-OKQEt&9c96d{7N9HTfI}_SgN9p{3mN`dMbMI2Y()y zQRJd@Mw+){Rus&osfjRo9L2P*BG=H{kAvn;zkV_8eQiUo?UU9wjnB(JP1h?fwxJMd zO>B#kau&&pXW0u^69mMB4jWUR7|5B&%H}zM-i_y=aJ2hzh0K@<@TYX!$YG=;TEAs1 z++(kLPS&-gqo-DiQ80`T?VT$n_(rd}wl1kGSTq@FRkNhJxxY0+3 zdm6C9Q4l>8$5G6XET9S}EiI9hD}<~h%m+w zqt!tV%{Vxy{gtLAJ{)FUmM%cC^nh@1T$DeXIlOS}TT^$W$8e!s&!a;cibm3%VlX}v zg>vE<5vCNXQJw?(ap=cp*}biQ zDhv+jds_nPced4CV2MI?*)1QMU%JfA~EQ@*NrrEODA8Oj~PgvJ#VK5@5LVzYzGj^&m{EN}moB-5z+MN5aF zVZ03K1aB8u{7TM4NKE@WEz;6`@Fj7_x`F-XdeNNw%)-cQTj|AYdhkyP%O?h!u#*DY z2L%NTy;`ZY2#x2gS)Op@jwfzSRy>8wUKgmh>dxil+$2@^UltzQBua*$7XHKE^%@nF z);m$7qvVBkVNeyM>toTcq3hCi0Ro|_a>_$yzH%7h9Xz)lu2^;aeRHaLFY!BSl2Xc; ztM<_|-tV-Ds-4T@T(rBfcd%7H1LFw+%@^6p&w`~+yNafg?j*rj@`H`8YA!{QhM;X} zN+Oja($7#NZucw^6yvTIV8X5K2+_@IeiC^E zJiY<>!AwXVN6KOMSI9fcPYAhROKOt@FJ*~({NA^b@SNEF{=S&vd7U*fWWP3K%X<8W zk_W6&oeEs>6$QN<7H_AFZ7-3oi~>5EBv}lVZ$+QT?oQmCFVG!!CPPWLH$~x5oK`6) z6@s^hGhrid(g`zr`If(X-+Yd)kkq$7nL!YDz3J$0Sz_vVoc3utdqLj!JH$rw*@5CU zsCDd%`@8KuJ9n&2_<5}V$zKFI&*v@!ekGUGeokI+Rel`K6?*Ji^|e-h8!LK)uIsbJ zum2P7kQ+*1MN{g zHp0LuYYx9VJJLaI4d4~E&T&d~;lXEgkLY_K2z|Quh z0<_q$@$WNdVoO5_gYlIw>C0z6zh2GQiOVdkJAGD$xz$p_Iv=Y~!Ox>D`>jIvt<=YU z8{8#Jvl#&&9&LD>CMXH%AG+_T%StMr?)xM3?boz=2=6X4tlnl`g)V!2J-oPG_k}#< zZk>Crv|Xg=d6w>930(|I2sy3`!ya03f6;s4H6X*r)I;I#I z?^{aTtM*osy=+8M=u1ZDh}|BKgO4Y&ro9ewHHSv*R7Kz|joZP&$<8V``U`VsI_+s^ z#N>0U*Uh3qQ#4Ku17J6!QKdb;VbwG;Y;%SzTyAn{PcdR~f{wcD67o@4sL z58K>Z--^=7rQqev8SJ@PmNND#I>snO5T@lfdF zdE5ZG%BQBJTs93yMeAV8g=!3J1Mhwc!=CfU^1!#uS?VX$UJtX}rGrt8#22C{Lm2}@ zd9(A@g3Q8nCvIl|7Ai+a$_$Sg+gweC7h=}-7{5a=*yHJIK$z8QUJ6cRD^L{f+mQZV z>m~Dv#6JM2%->a60Y~e$muyP*XXF`Qgi* zn^{k!&^X$&trjootd1jqUD+vZr8E9|(*X&I@7Ke#?2I(LwJr%jI~89lG&m^0ad?ql0lQvb|$c7}HPx{&z5Z@;kGmG)IS1aK)#SeUDz z+=P}K9N{}B3V=0Ndq7vt$+abOzy8W)MUrmqIyx(8yDDv>$|2br) zko|{N5VY%KD}j@c!OIw8*hRiG+>1Tt4~NMN4gi}HQ#_k?g$SV_8MWka#5vdK{3q5dpta1C#1o>fdp zTx7~Z!c3(;BBeWySUcIq%zA!P$=#W#a)6s#oe7C#ogU+DHeij@Z#?7#frOoNsvNucfQ>B`vaLIGjq;ad++ru zNe6kj;vcid&%zw%HSGR}|6gzPbfqp5kPg&JfZlQHn}4)P?F)5zu_)Po!fn%#W$dx$ zXQT)wT0X4mCs@HF$)s3O^`aoH)$QXVa)}P`S{FA4soX&)7_`iAQQkrBZ&J~r7f-v* z(oj(5p_Jp`?kp2J@=$!F=IHu4ieytaD4oy7Xin##h$L0Z+o=(=Ym#iR(1a^7Y=L*g z9$^1e(W9qcq2b+WEi)o+YbKhRETC9tSrOlnH0 zP`{%ix9oN{d(g%4kh-U*BKsiM7sBtuuShnF;Q4y+AIj+eVKgVL+Z3Wj3G@OT=!3o= zV}oZjHbJtz%nJ%wFG4>P!F@9Vk&&boyOAa$p5bq940BU&?!t=Q|cZPK!LU5u|#2t-o$k{nh=?zzYtl0dy_NfnRDSiTir0%&8Pe>zBFU|~gFoMm-GkWyA>nrQpKF{)|H4Qxj2Tlk80mj(_iuvn^@!>a^jVbL0RUc|Pe+~VtO?RPS- zV_Qn86WQ0dFWDp8UyY6eb`yS`ds64oke%J5%sgWRie4H^Jq6L$&^W^f>KP{7Gz$0a z7o0xl6uw9Qh5sUr$+89WNq|Lapm`)uf0iQ`H#r_4rm%)zdZD&3J2HawlxMdsFaof9 z&)I4=TsT~Sb`#Q+B}pz$@ZD_TZiFh9#tl8N07GsM7_{Kbd>hJ?eY-j?Xrm#-`;gX(uQ zXeb`qKXzW>&yDh~2hVWySyT5!whhDsLu(QB{k#wr`!^hFu6AjA9ntibv}7sHe2Bc;+&pu0K^ zJH4F9;p#)%<88g&l~_l!A1a*kfo2wXiqz8G2pS0Tb^`40z}((KG_-KmZci-N^JO0k zhv6sWCb@c_{{=0_!k#@WR;?cd^kwT}^!@oCtDN#gG zulIPk<-Pg%`Nx;vwUq~h;}3Kk#xe1xpT0K0GZyfK)#wGMio4PIcnqD`WNkz)pw_RL zYVU8-a#|ev0bvk-R33JX%g+bEg1_5a>GJ>aKn`%D?bfb|`H$B+^N7-MBM0(>Snbo1 zn@?vzj|_{I2FZ+>ei+L}Zp@AJs4QvVTaw*&+{FgsF?+Px29Ay`TjNfXyw9L1XGzSajr(umYwa_Lv(DAydj8rK@ z!!175`z`$vQ&(QX+?1hwwtz#|r?<)E&oMOKXr+0L|AcIM8wNxk2({R99pw6mm9hc* zLyy^WgGyyPrT!nIm?0L_VT&JtmQ0w_w`!BySD{m>?{%cOpE4*br$${!E+vk=+d0y^ zQslnR%1jgJiwbN#`B70r!>m5IJ>zN!K|V^q-3DyLsk$%@i`4XB2)>%!<-=b%yrb6J z1KZY-i-wGG#&I{9U`zp$3AhmRm@A+47kcp|h}QuMf;v5`h>Pd-d8kZ*%ZHFd^atBW zX;w%MC?+d}WFCAxi^v{{Af$W$XS#1&j`B_ZqVLMO37#;sQ!OL~kj}5(uS9Me#_lcfYWlTO`oNPQP2){z4Rf z3w#lDH#($m&T|jCalUPmkX6M1u{VSJzO>aLtJBom3GN=0?5I2FqJuPFh@#HqA;?nk zm~9YNw_Utl90zfz*q0xzu^$3_Gze7-Sxt{Q`~ws6FS>{ShaNjfj)RM1=ebZg)tWm8 zgv$VM>-SaUI)3JjahpF8oB4I&ZP%J5alCc=xxn_9nt+G(weGec`y#b| zNP$@a7-BDvS>8S>=LB~J!zgYS6v^Ww=36d^p(VHAg*b-`8L|cW@LAireu%c%P`rOj z2yHhUR#$UHBTet6sLv*b&v#U^&l>d>EyzL)O!(nMS9qDvnQ2aJ07yOLE|C{iNts5# z4pA*<_}(&Nq58n8n#m;zWcAX|4kgiv-VL%fL?XMOwk62ztAgsM{`_iK5ooVA-AAOo zy32hI+za9CiT`7Sv^ZtBRnV&z)|WUD_MjwaamdkT!TrkDVS8_%(sX!;&~$Lf zv@JC6rJJJB6HC_y&ZGy>78fUGBuW^%i|9(}lRAAWj{{6bmpk$6EZXzBRJP!BFU4k@ z&=%R)naye8xIz{KX%oL#lLG49E)xZ`;FtrIek)$teF&&?_J~@LEhlC|c}|NiTZV0- zf}%AeN=2SdlqPwii8dQY_9k1m6x=o_oisnM5aX6ucH)=LxT9TPWZ_fs!b+!XjWlZC zYsf}S6BkAcJ@LjVHX>20Z{#k&IVTIUF%Z+xj>CP!C z{Bnjf-&9gXN*tav?cXm#Y1tK0#ls9QwxBVy{dN!OJw{F`IR$eXH?&SrybD~FBbv~L zk9HQLS;p(4J3$GO4}m8OKqUhWMt*!vf@YzPwZzY?zs%GN2bd1A0~FQhrkoeU3XRto z*#xn(08ye6j@n0@OeP4qWk1w8S)rVW7RzS0O$Z}XuJR%kxeL*U=F1l-YhqDje44Z| zYg96^V?q`SBJBd@+h`43#ob1HUP-ox<*Dl@Yow90fh;MTik&vQ9c6wys?LuCFm11Z zCd5>lQwhl>ea#{Ird!2maLqrp8=vVlPU2Zx5_6-pq_@9vj}bPPT4nCi(1;?YGjX|> zPa#%L#;K_MB+bMO-yN!PR2fT2%$3cauOR<_2I=+JOhK1f^rNL7uQzLq<_;R4C;Q!T zvf&u+n%$(Kd5A}!{gi>MR; zgB?)@gQww9v7vreM3t2*TI*p}yN*+$Z-E4A9D7BLwY#CkFoo-rgPhGt1QndqUDSuu zMbq7?c{M9DJ2bYBK6RB_D*I)iz|*n6?YkQ~RboLnfa+#P@s**ly>!=A#L{|b|F}U? z+C-a9X}$j<*~a>^<|eWETKhIMbDU#0W)BR}JpOu?Cd%VA)NuLKd*Fcxns|lEWYd_@ z58u^0JvlpG_4KRtx{JZ&EII9uwFy{F`sc94a*bQl>-^9>((yHWFLW?kKQ^asEiSPw zwP~xqU8=Qx?X%_jG!Ef)!B!%iq!MpSPjBJFNlqIc8+ZQALYVvOG8LSWU}N?c@xc;4 zIpGp=!8&$@GfK=IJA_KWNyR-PoP~*{*A>Ik<41MTNoiwY!<-7o!lx5jHaMMl3&k+8 zJ|62B1xyxaw>T1W%MQ(G+z@mEV<>Z4DFz6}2#g2SdOUpQOvM*7R{lTj0#7-hm2dHj|13FDU2|AznJwRoI3 zF-O{MPdRNOPr=TSu-2*K7im|k+p%c%jtECCz}?35aS^>&Sb+*^>j|!1)PsxV^sl7 z?AC+zlZ*ylYL6G4Meu4;jC75k9BKqzh?UebrSdBytAUum37mYIkQV-j+uhCIUy%vR zS(GTd;uL+yf^y-e|9;aq)ce!0ip72k-qyna$NfoR?M#+vx~2mECam=dq(t>9c)FdiwNNsZExHdVb~S zX@!aGl<{D{pk39&31-_(s*s`*YMH3M%FR-9*X^ZJmdg=67?E=dPJwBZ&)a#v(8B}$&O#F*GgJc@A)sIf z<<)h$P^8zJu$^0#A>RYlrR$!{q4o4v5_fKkP0x^zOK@oVcAC)9Ex3$$GEBjbr#2wd ziM-x2oJV4elPnRjY>KG!8uLl=t-Fy)c)qS7&_Z_{bmJktkOsxXTSW#%uuXm>9D+VPU%) z112)@?-{uBE7!j#pI^(3i?o%CN7njpyMwf|yJ9qM2SohlYulY-vo0E0P!>+}D|*0R z1@0-#N}WUBpG2;-?aOQ(jaxY?bJx18D8vJ4^=FiPFX^74&zeh{w-&(x%LC6rlYE&% z8*8tX?Wi1d&f{n8H(RAE(8}M(se;FTPPiw(&3OuGU<@v1Qi z3%As9XBaDs-`S^;nEWOc?+z#2-cq@^E}rT7{z0W1M>gI2znwqNvnib+g@p6h9%sm^ zfsyB|jFIb>4J4yB?MgkqF>t{tAct2NLvwj$P~tEF2M6|N{e~cZD?~iLx8-}w6x?-P z)7f_LTDrQh+n1597SW!D?r^KIt*&-+OX6?Dv|Cy(=a{7X;rxu6OM_IY%l)8uxQA{vD5iV%${MO|g?%!-7nhCC~i*6mA#0pRoG+m-toL zicO4{93Fn&nFExW^+iQ3k7UpO?lmxNu*=7{z~|r!G`j4TN3fCC)_X2Zb55io7aNwG zZi>K{O&&g8r8WYgM`^T(_iOTh_N9W>VAjpEo&joke3;YQ%c>3zq(NIhQmRusBCOXs z{81_<^XWvLP~vT+m=^iY_4V+IqX-BUbQ$=X+dGEIR}mg*7F|A;Z@zwN-F!q|2X?3l z82W@^y}J|JTBR7imJuW>qG%ePv1`XG@oadw5#{0Gb+es*XWxltY2Ar@+dM-}-MLNp zqqH#N@t1YEX{&YT)Gl5F&PfwxMM+Oh?CT0z^c*#ZNZIf;uke=TNoQvnf$&C9SstXo zsQw%0R*eu}_YJelS;fxp$4Tv*C?`vBbq1XgPw4f2qttVu9>i(^2nv5Gw!21%wcr|^QIM)@*;gZ_!ed+#KxS+Sf zLS3=0rW|T~q}HAC*^BWtMP1XWq=J*I1uHK_Mz%m-J|upn{$np)c-OK19%CLBc`PrF zXLQ1;9^Y=?Z`UYvB55OU4O5_0Cxd)jXBN8;7T6deeFvc!>q+C#p6~M;I@YJokx9jp z+F-)ipm%n#GGj0y?-2pk4zK&%djfWo!Cfd%l`P$F8nf=rNwO-JK0<;{+p{96DXPCH zc$s~<^6p*a0lLJfgzV;96HG;eL~iBnwai;(;{U-ba@6=LNNE?`5^N~Dleb@QTc2O| z#V`8B=$s2Elq3FFUPP^Ek;mgu9a*7N!ix^{taAzmRZH>=mC~^s|GLb0U^U}~DIlaq zf2hTbN0y!lHpJ)|08e)heG_9~kJN(RC}HvT;GRS+i1Xpbt>7urE8E;|AhPCa{9D`z z#)wBoYQ)h=(kqTkVNCv`!)$hV9*e|cN5h=K<-iX24;S!kO8U4^zSAlKb7vN?G_h#> z=tt9$J^GSDBZm$VC9ewDrwD#~3h>LPNxu^Bj1qC6t;G((QSU(;wBlSFCE||cRx|D2 z@biFhTYM_yHZDk~IX!Crmj)y=&MN*fuIyMQDo}$Z_9^rBe5vy9xn+#m&Zv?;m(BY_ zYIh{)bJ>rhWwX|xbDi@cpgx|Tbir@S1)g1bWDZXd z84taX8C;o=TQfm^{+8{^P)Tmv78}GFd`JC5yEYQ(P*PgJAYI>a6(n( zOu@7L|7z5eS~T*AC)WB9CS7Ha`de_$E$}Ptr|;9?&f?^r1tVD@9aG}|)CASg0VSoY zL^^71{zB0-UW5A8YDjFbh!`cx=<49=F@nrJ;(Kaj8P2&aY2zCLis!u>qu>ifBiEfF zqreNDjTe93Ac;fd_*o0$fDYTU!>`NRZ-cEhZ4gwBt^`z$ju^_#8?uj`O@{~A@xv0L z=*@~YB%ctF(W?AOG3>V&m2j=c*(qMevv>sE8I?hvRqqblCizIMFK}o2!)1<3xE-d5 z*7Ba1(vAJG(@g?s)J~4bE_I8dkVe5OV`R6OMfgeAGRRS!I)0p4WJR>UY$av2aH;tW zTYE;}0t4Ihc_^7kiO}Qq8M`2T@sfxVA8kb@<^bPPF@OS_KD5df zcH_GC)Rq-bMd;*xU~tTmz+BR?XKQ&n!xgHRa(Ly(B8hL^`AucK--wSkguOu{*+l zN`VzH>U36Q#ebclG~id8!w64tib9Xdx;4Jcr`RSvpPm0p=P*cQzE>hwTzXk*DEgb@ z_d;Vy-CnMX$DvHR>!Q>2?80AR^UN_mZNFV3*9!h`aECsq(LbhYHQj%!%25-lT{yK9 zXMJSo;0KG}PPiZ38rl~RdGOk}?f3Q%rEEg{A3j~|)OI?2Vh)>tAYD@fkQQCP7bD;5 zkW=h0ZL0}oUgIE&p?*Y?29fa)O+XgPjIUb(Git+dFqIE}!~NVt3^}kbG?@itS81iE z)l2_*@$$3Ovagl_XGTETR(A%5991KOvW=t+-QG|;ZF|-I%afgL#4I-aWUNsXg z8)y__n(gBO&Dc~oj0*+P)V;hri-V_=Iz=fQ=10%%F_hxp6ksePaCG6b+)^hg(U7{? z!ia^Zr*xTvZGM?MeKHGk8LQ&_bEbI%Q|dPU5x2Jp0|(nsX` zaTbn##4?9~x%RA!vbg0`MY{(c0%h^6V%%gI1jULZOtlb7UN4nhRp3;1y;aJt&DTbF z%1>2(HA5oGm73LD)lfE<6_2XZj>(590c=4SJ*Qb9olFKsCI(qSezO{z-|Z}wW4`aN z)#vMjWdIAq-b-UiGsuv8O8zIQrvT@y!-XU=+;nA_I zQjDjaWF+!rW;BZm3tODF{(bSDYi&%k92K6^Z?IE{DS&XlOZc3~Ep(6#`#fWWuog#k=$)1X~k*zmHr!WXTgKE<@hJl`w{Wk@x5Hj+vmoYg~g@DzrP78=A}Gu zCTO@Y;~m25+pU;e$t;0E==gr+E4a8Lqm3R9!y$cVfrnRtJ4&W|(;==%N@l#1h`Lh$ z(peLz8)!{`dvRJAMiBHV&oXHK)-kD|t3k(`v@9CQmrN6S2)#$kAM{kLv@d5FrKh4Z z4(4c1AuIxk8_180lqv@EH;3ENmVooLQmY?s402bCl`WioPVQ^4xa)}|paD7BRh8t| zho?mt&gpTu7i=q8O8_oj-?85+<8lrqXsgS%bf$Bkzz|ryq1>O!M-2Cl#|a_45mp1f zdb;}h(S@&D>nl2XYWBV{gn7ZBxC=yO6a%~itGbmC-JZ^xPa<@mgTS!1<95f*?ntL~ zzIlj^m32}2H)0OwS`f6w_;|GkwA3=`$kH&g#f<ZJ(GvIbkDbV%wVmI(<5_RF_N@_PMi|! zX*Nd(rxLn>0U#k#-R^cjW#FDkOLJ7LVJ1_n*ZFrBQI))Pm!_c}M8ddBmE*N7dURj5 z@}A(WLlU!GT5reo@e&mkJS(I>!fuI)qY{sDgfS*m(@A;HIjs$q&8*$RPzhxfG^ILCUs(hA!EKdOUwdF|xqf@^D>b8T>Ii$?ipUfU zhEn!2+plj8WYfegb*k9D6(lL^b_yM4m{Q?HC2)B2+~w@;W`M6TWf;5v@?lR_YwrmP zzO8Y0`PmUQTf-CScJB1cR(%r4(XA{E_YZSXw1668*Q*BtfZw6&$c>_)u25}VBq4(_ z+r8gx>(c)&&L=qSLlaB=j;c)r8FKc6KCa9eF-Qh-Pl6gn?k1-FN-ZL;p}MD!8#b$^ z=`rR1>-{6!bJPr;8s2U=1n{^~{wqc*>)}(7ucFO3c zvz=JSqpZHS8W+hJ^fpJ>&Y8`+yb#mJHhSL0*o-Ra%S%lTkM8m;Q$M$ex_>Ep$la$inviKgP%`eto;!+<+iSM*Z0{t5uMCP*@TVr>pukKre^h$>ToIlp$&)oR;rq7wPIg~( z83h~vT7bPXC3EgQbde&TCHeaLma7Hp=c#gjQAJXA5s}@G34L7#fn~ukCIGl-24}tx zVQh{qCT0RB5BRU0Usz(fj%Kt&*@&8)b0pIrv$o!>Zzz}ssa{3CLWlT?gb7H!O`PO+ zy9nI&GQ}xF`||mcg9e6Gi1Tw;XGRqCN$QF~DRzv)32aFgnry+%_+ek?c5#e`iX+DH zm|+~027$S$hd!CA@`ol}eBy2%u{&yR*i~DQlJaB?Rve^mxI}Yl<4X(8;L!$SdPk%I zy1ooi>Wq3$wQe4#Xa_CM#^lHht2g$%&LZ7l)&QiRq9o$!4+Vs(NsRKZ#W&FX_4_gD zu-F?k&O0hpM&%aY%jgDVwKzaMH1!N*o-9Om_2C*r^*6tjdV6ywYh^}4NO<3=s_gzo zguaH>viWX!zNU%t9BXhI{nH`jI#Ekq-WB@kJF3JY8=F{$jF}m8<@dtft=GtnO|0L~ z7gv`!4I^J%2!oQ@p_=v&&*E=f8Q=rKb#6IZza%B{Ze?~vdHLzWsse-A5GzVGn9zmR1}Zh`{yMa}%TEpUDgo1^GsJBD!AsREHySWBDZy$SI58qN z!3h{l*q)ItXD-5WpPpZ2<3JowN>419wdKjo%5Vw3%7XN~-qgyxJ_dwXO<+fx_gB%! z0*lR%kx*n_&H7x>~)a+5>$hSno*1T`ypQ&S=W*}F^Nei^DSpXNc z>J4p=h=rps>&>7YQsj>>2n!oRUMv<_@mh$cK(`PBY@@0)JOV1oIuv*m-7bw^0SZQ9Z#^?|!T8?=Q%L5iF)|}DHh>lHW|N6uDm_Ga`q55=@H%Ao4he`^? z)K*E9!<()J*COLwgH_$hoy(8XU8B7A%~fk@imRg3UO&bv5y~o97FX7fms_$Q+kOPn zVMTrQlHaVondsptn0jwsXiGjaFDHpGn1*eIsgO)EaFFaDt1G5kNKtD5Z$zuFs;^2- z>3I+>iZn%4d~YuQaFqRTW)^`m^ygV%4&MP&@Fnbk*sEM;!d&X&4iZKp_7ree=l|^D z2d${8Uk3o(H{4N z+~|1+rdQacUT(!EUP<5!Q9Bc7*d~9^MeGP>@cH*<+Sq+-S%jkH(Oiz8oN5J|`%yI$ zb8{~zaecv(u+4)Wck!M^acDjN@LutLrtg9+4@vAkEDp!JV{h&mw?Ax@%-YTW-~4*N z!2BCT9*zEdonLZD5F_;~dM}Q2_^M|s=4WeG`oIu|Qn{&ikfnCMpmbnxZLkn^L}LAX zs$mjz=@w^X@?|pQ|35kT7YEz%!gI&J+b$DMnmaVk(v!)WfVPD|O88a7E{$mjvNO3m z2*B*ond@cy?)G_$@GmsUfZLdP?t~!O{iyLyTO1*o*v6i{*vcve{~$SWmyu=9(W!0@KV@KV-tn+nqthv^zVyYDUm-1wi0xDBI z0QIU+C^RO1-fn<4cI0ETvAyY3QJ112zl+t=(&WNE1ChqVGT{9oJ>guJ6K=Sj8>#NZ zYmz)MIpD8V%rLQqjZ;01{a@zhv2#j`y*&R@BAW%(h-&R029vc2;7O_;pGnL`X7y&A zr{&O%C4yv09S>A=t5pHoy!fQ#)vi+q2bA9TRo=q^HCVl~%jW#|nL`yVLQeuRMN9wv zRl|tmr$J8?pH{LL($Y0GHKk2jQio0zHkNM4>72iiNF=jGJTCzs7Mwa)n{6=tYPdy$ z`~$1MX^NurU6P*dn7+A~QoBD89XwehXB1v+1#4(ehwG5+jP0xNEa|H28p=wTN3}o5 z=mtq-6NhW>m*SjP)g9^WNG!2G>(ES}$dBOHccf-Em`8)bqdb#bJbzzq_8!y_l1F7_ zHF#rHZnV=<)meifBnLLuzPUf{7i!nK6bI=nc`rKO9xELc41b>#>ggvEe#e}1V4gB} zl*LX(w38N5Y73lI=Xt}@Udieo6UwG)&$}~ZBwu_wQBEW*WXmeky;bkA&b9KLav)P< zFU#j*>%T5ISYE0u|L?A;Q80h0-)jjFznRGmIL&9`2R+ZZdv7=ArR1x2$n9S!DV0La z%l$l=k@N)|;X5hKuFcVyn~DElR+d#DqZ|3bL!*|48AGh5{1j$JwZ00=b++*IpX{s= ze;P(fw%>OO*u|7k^^>BB+TAM58N|XIBE4E#bPCPH-0p_9`_mEO#%{TFh&_hR-tDp(&Jyb79j|CbVMG{(%b+Ea_Z+>RQ< z+8zsW>if4M`KxD$?tCU28mY`*4l=wv%^TJ<{dl=DbCSm(u>qe&b!$(sh?l`NNhRBa zvQP1iVZkt`Y|4RV z^W34gK78X*G`0;4jZFITlWg4P^;}IpM|f)Jo8a^1lcpO%b)4tz)*X;cs4l}D+pD;^ zxTwl#_oN1~P}%G5jr6t6?wd{A&2Np17rqtPk;^zlld32G+3+Q|NX+?~cR=-s3no-+ zR2s~nNl7UcGWXx>6lsCn+5OQaXhe8JmgBIaRv#m6l8jPMFMs z`<-f7>4b^*rOy#lza&{pozQAD`(etkF!=3k6wS6l$Wick9E*!-zZLg6cYGW+Ai%e3 zI@$UB4v4d-0$f?sRP&QSy8ZoLD_0=8vT`);24?66;~q{18c6A+A?C5<0L4B2nQqU! z6n{HKF$uomjmtf;*!u9GGkJ+6Y|E^mQ%oh;nerUQ*$8Iw6~&%o$z0u7Qm$U>SYd63AYbT$KBwqOK#0edbAq!&ay`z`a2L8h6CR@Q*FCk{ef zxEX@)37;onweI)l*l|9S#Ie4#j#PzJ-`KJ;hg7Zb_SW?Oc#(rT{oDd)g8W>MJg@7j}-~dpv$9D zgf))at~Y%DHD&}=G1-slHWyb_sm~a!GAB9u6vbNm8-O?TWP$TdYhgy#@vQK<_YJ0D zBIr-zaALEX$vqysa7 zCr1^9#h4qmxD@7hL_;_5lyjN(^`r)^(`M976^@T+ySqQcu$8m5ru+oS4n(`H|ChdYCqZpf5_r@O6pRSZ+U|Ek3h(c z$-r&NZv&EMN~Gw#RvNNa0+iMAIz$}C09n-hN~Z~!3S!|``~vWJ}z z*bal~PV7MB(DHsC1%uW4Xq*$UT%I3foD@qKBklK1lS5G2oN22mxjL3NB^^KU>usID z0rhbdRki$FQkVXxmc~Yfu!2Pz?@J<7g^7C5g0tYyk`8Jv+}&2rZfRGQKlcCa>B--z zj&I4^PV(h_Gsayg&1~7D#tr-OfmeV0cMz?UNd$bCgYChnBP5h!@mYs@vozW_vDF8n}dkLs_Kh)PxpI(cj|f&1;c`z z#d0x!YupvTvk#7AM#ZHz|D-p@0MEM9RqT|SeA>#otuRr>PqMpbCI`FLvAz-j(dbk< zS5}wg-K?ptE8+2;WH{fsJ)_DR=yhDjH$U2@MeuPjq&HkTibxG8v$H2Ry^IH1=^=r1 z)@@nY3iGLRiZ3MS5A@`j9e1YS>pQin(}roBhgs-pIbBtp`R#UV>d;lKdrd%6vCg*P zbQU}iUGtVqNM6ee;MeY#!mnp`bYwY5I-M3k@ndMKul-erddkxfP9dro5$N{7u5fvI zpSPJ3+UWSPx;PxqY8^sEX1U}*)nkt8v*{-cRGd>#iDPKvl)qb{Zn@XyJL?3WRC}eQ z?`vhB;*ny41TaWMl_*iEb)$i&zw?5ES*{3cIXkZV0){dt0C@aPbi*EL12&Nc-jQ`h z{PStOBdhc2G6>D?!<(86)Kk$zs!Z0DFH#m^*~C2C7gl1MnbMkvx+LRDjLPUU+uV#? z0^z^NTRp~ek=(f&M`HNv1(w*wD5wFoNhh6m^-2h;F*YgOqVuw~r1UI^I>5HQ->Qn2 z9wQu#v{Sysd9GBGX@x%nur)(wAK0#@f3;e255TsCcqtSrRD zv+f2QGLm0G_NfAusivxwc}mXZ4J*GtXQQQA7eSxNtp(X_G-FqoKyXu#nM1DlSbSk{ zV~D?PM%Zg{`S@a#$4UI>e#EB+-0CnV(52&{Gy&2dva2Mmo^YwVlYAaw@N<&nCHElz z?p>3mo2J*_v-9G~i@}sLJX4l5E<>V2(yxM+gB}ebxqsBy9snP^5!g_uDNyC3 z>T$Btl>8(}mVQJo{-jRkX2(Izv~{Q{?hufhswb+nB&3fZBFeL}veP9gXBQG)J0#7) z-8uMC)*c(-2{}Id(cSp5RWyEVED$OkxR%sV?z}GJWS@|q3mB>T(eoKm7@&RHlVg5` zVC-J|ZBKfwWhuci`8gC8qZ-brku|Wa7d;}MR+@UiwK~FDozFEeq3=?fxUBsn0Uk9Y z-?Sn>HN_yjO23ro!RDRBqepuwuu>zrs_uKD>NG}u+bgro$6JmX|zc+e_ zb|+j+#={7Y4YFY2Klw2yBr6y2@dcMDS2i)KqQ*;Z z0GHdbQu7FY?%$BnbpsqKxFPIEz%5l4*0V#quC*JrIV|?m+X*Dz6gG~1vQ|>0v0hLI zKMhmVk6qNyop6cX$IUOPS9YBi4yWe=zVh=>|Vvjt-?4Y_;LzRM?AW02*8j4%?`MW6(k;mh| zO=|vy2TVIe7@!%Jg5s92Jr<6u5jDy^6v2c3kqYEC1OEV|^P!>yqP#DLx&)wnV!O6S z$lc^T+ZzV`a$Ufg7{;+Jt+?nGq;MhRma{g;(I&7A+-edOJxmc4ldkI7ND^1-uOvF^ zanf};Xd!Yt2(P)#OF3J;0|Bh0kTo-Z}u`G=#g9M74Qs`OxxlcV6W77&{`!&645QZ~3u;{BqFB?0|-_=nFMN z$APrxa8#6IAuZd_p#in4>+w=zEvvK$fh|bn9iR`-+N>+NFj5WB(y;%5GBhc~8hrml zsyZ%~PFx)Q4$4KPMBoL?tiS6SMCIri0n2enqrx=A9hxts;mfo+jlxFx? zCQ#Of8FRtSC8g|?u;PQe zJo#OEZgHkxo)t_)MMwIhBVV~);4#k4I}~xfkK7ai$0#Pkn*$YU-O`Sw6M()|{@k7R z^!S;BxWXoZbzhMB4JFsK`(t>i-}Qr!zB_GlCM2r!iE&!&2~7{FRN!d|?l8PB6uEq~ zDinEFdv7?5wz{~!+GxY^G_*|SebKi_H>J=`*)1~WIK3`%vkMb><=$K8UV%2+tr*4p zy+;+f2rCl5c>lrzO3}66NqAKE`r-dvq9#Vu+gTVBfitQULnqc9U9yBz689EkV=B_$ z?uN^o#jNpRijwsI55aQ3Aavw;I(@Ig;^PMt&pf@&L%$MBO-mTEl?~y!Dm4nB^meW? zDazTx!;0o&hYGVMsdv(Y(QCdUQ^dHN{|23OxvnVc`tu$3p-dTdgf8!=AQ?%=7zR09 z0XDY!j5u?T7XlR<=FU0L=lOYTSWDXOk7z`wW1(AZ_u zmkW|hKfS%XZvCzklp8ZRZByqE0E&G9^9Q?7m}#N5a(fMp1ND49BpBo zE%M3-Ca_}gW6y%j<;uwFz8fVTZ8~lTUT#Y|t9}wh3{Uwb&2SPTg3PsbK_BuY9wPg6 z+~7MES!h0PwRi&CQWGCJ5c3cZKuz{w5-qfOQl z3r0|u4uwV*7V4w6TnOKVq-}S2d>pdFkme>u{cb+A>`48ZQoBk9&@lDbP0Axy`^*kL zY26qvJ?n^_3-wfN;2ueM${G@nz!dL)5bQxOUB|iyt3#b8!QYxW0sDQ8Z#Rkp;{N|zd!}A z>;>!kT@WAU{mjTkTe~NmFQ0FE-cFz+M3t2=F|{()+^4$rPmb3 zUz)y7hfKdcx-!sx6dTHMdKiQ(Nvf7TjUF)1Ap>crXBKy8nF92~lhrGoV?)dgjS_8| z6bCvd!u4{Y#oRP)D!PtIKz|8hE2}+itB3aUIi|;igS0@hZ-{Xsmu#=Fkmufq+g0D! z-=wBROfsi*@3mH$x^CqYqw>_{k7=#+6l6IKn81ciB3D6!soOK^VLJ?5rEE2L3gVbG++ z)K(%AnSt(TuRZ#T>rdcgt#lPSc8XAgfw=-3YiX4c9L6=_X`CMr463V8vKr9gO>z0v zIMc@xFFxK*Tz)qs5hwP@$v~g)cx6HncplucXi36Sy&W(Ab2ydX?F6Mr-vQ~0Z1b3NG2J<2i;nkPyODhzX?$4EDQBw#Kq(snDFIUWJ$fb|E*#7v;Hz>bMM1k+!*OoUuG7ihhe{tuqxT437 z(k=ElM-0`6!9eL8@ACMCnpy;=Q-sqBplIf-%xEBZ0ZWtBgph?@NA~8AqNhx_UeiT# zgkw$4YdEr$i|CkX(7}4(lkj$8$Xmj|fQg;_2U+64%M1Si-={%=M2K%THB^_N+j8F~ ziuM|oY%}Sysp4!2ITXb9Ex6Uh(Ha!PCbQ$^Nn@zw_#%Qp>xz zvN{00Bk{gu!Sz4T&nCBNJNPvH`f_)F+uA$S`g&P=e+b{4@77}wnJF9X(*5r%M=~0>>m*gIHTh#0~DV1btEajWJwfk#MZqREwYYx{$w3w zq(&@2CyHbTO;oG|hhz}7`6>{}S&V%D3W#d4gqd@dxm43^?)*$lQ1v$o3lGOcsfwR@wKf%Wf;Q= zIe9W&qm$2jF)|1e*b|K`?`SqAhC`!L`%69qUVPKF<}fmIeE9z1 zFmuA36k8oJcfQNrJ)s!C7TExQUd=8M3&ntU0e^_I-khF>CMSgm0@SD8l`rxC%ckwG z20uE~SMq5amrkV^*&AjuPASsRFk}VR?wPZz;TR&erQ%c#e2oYL0JHX}$UL>b;yH%(;e&EeE7 z&#Oui2t36n(5qV5_7fih*Iq3Z6C1e=k!_g#+9+1~rTDk*-q?H5x(8X^S*i$BK}6^HQPHjuc=Dd3HyDJ7ecw`K-r`(6NXx-g{?Ja#xUGMk41x13Rmdnj zKBe+5YL+N>Z2N(8+dm^_xmZNLaD{|eey;^V(kO)uWMVA^yW9HREQ{%OklP{p=h5=7 zko)BS^@4DIRp>W&c)FQoeCDg-dnjAdjzZXs@x0}-(Tg=eom5$*4S#BP4aTaai`$46 z%Cu*Z=dS(@<|xRoi1LjzqD+=l2trlCM-)(&(7YNeXPx+I&%2X*0^7(KzfT&owR0+L zuSwd_9$x#I2HIOScz$PRp;rQN1*vPiuw%5FHY1NL5g6`es-&vYbL8a*`Of}1IakJ* z6>LzJlt8a$V_P7wfpT^d3v5rxGk$CMWo?*wq=2S2vnU#^6y{*-m3v`;9sUcl;t!)k z&l!?A$Qm|KEiX_wU8K%i8WXV~n#@d43sT~qq&Cc=>lU*}^f3|aD`Oa$_(F;MDuA7n zq~{^(2Pn)ITBJEl(oq0sTPJ-JM{lT=@KJjoBk6L84_a@F*pZxMxYx zVxM~0RB#ls<}1l=MD*uJ02AMli%M*YOBvRxS8M@%>QfdtKXvd-oI5O6a+!KrMnkcQc3CV5)hE?t`E{3OQ&>$ zfOJVWNG!XwbjQ-M3*XiE_52Ud{5IE|xn|CsnK}2lUvc}E--5QlEZr$la82MX?40r6 ze9ku>&>VeHv3_X?5{$xl&fqiUe6&p6^CL21t*^LGeD})~pDAwOpsMoclzdEC;A+F$ zV^pph%@=Z{D`22Cmom4|DQ|xPsbx${Nvq2if%2u|+l0ZTh)G97`q+rf;2qaGF2K~* z5z|~?`Jrkeh|=bBVt;tHV0;hGjD zCWYhqwGbe!nSO+FG8n(e2LTbcKjJ-pR!GaT3n=&C~t7K*RDMS5yB-WbB%y~ zZRoW|#KL-X$8E0~8qo^Pk{B_7(YfjnYuAS`HviBzJ!XX#jkBX?%t}V;to$x#1O5D$ zJXUxoD^_kG$lRzwhV#OmslCi~;BF6Q0TKte$ws0 z%JGQ>t&H7DxJ-eqC-a1+{(Os0h|rdTzR3xc9p#e#a2{`5`ns+Mvehu>oo*EuQCn_X zlw6aj(BZT7!u33hyGE@EqkUi8H<>nVj#nR}io^L}kL+?3Q&DgWl$LMa;iEQ?xx8mP zeZfKLn|OgTrgKboT>j7kO!@bJdtFi+cx;<^8gNrvw|G4G8*&wL=8K>?(hM#jfd~dQ*$7GGkr2)Uy`yqUk4yjR#Z51jZr7$lHXe@8foGERBCE0?nO)FqpS>KnW zF}yn7zitl5Tocpm-Di9ZqwVAXa_mN^sxR3{`$FcFCZKdwmHN|6ayIAQzjg(76v}yH zI*$06Rdh#jbNWhE$yzE~Y$~Q-qlDrz-n{TC_OmtFZqsd~)2jY@X%C&! zDAJFaegCA%&h{Uh4OzPv(7{XO*Ned5u_i2VKP4ZKu4xtXkJ0*Tz9) zH}R5hxmN$d3wpdlF?tS*+nu)V=**#t8LbRDxx38z&dkjc=$>uGBf`csCg@cbJl9Tr z=)eKTxDp7r}R?saTx=yAp z15lYRJ!#bTiw4K7aC8fMD>u?-iJQ@K?5uQ^5MJGCa@L!A!2pftI)3V{_5X$(=y#E| z)_)o6=tp~wI1Mx*t-f*aE9^ZcJ=|SMukm^^uYegoXtbQPU=SO40E9hG%yxIw4NFaS zr*~JsxcHOttQ*~cP#`JVaVEl>`o^a^9>4;Qg)@ZD>O%4+Ce|l555o{0V2zYN`*zU-O=&bQ=UJ;kiSx%qwx!2mdZRF+O@-=F6 zT0v6SO1sv+f?~a8;{8<@3Jpyr4^IPQ$;O)3AKrAFy8mT`-1UDC$(goyGB2#db+_BJ z$|0K-zlAOa0r)9-yRs&r6m@KGjCOJ~(lRte&B|IUBY4)i9U@=H3U;lGPe0v~nEl-vesIyHc4t zOxo^UR&L0=)((--mCQvXjS%G}nN(!k?@_)StGM$)GRIj!;|IQt?7u_w7u_OSPb2hT zp>`6)=h^tyxf`V@r|~e^1<60;(!;2ooDSUPv*Ns}`+PZXtyg*nFuN_et$DrpkdIyQ z_w)(Ia1(W?Tpuyk9{~nf<+Fa9)!&QnQGk@MNZ*atDoX{LY_&uP1MtZn5*Ze4ku-$4 z*XoU2(tbK{UN`ri;D7g!=f`HyZ0EgqZ0@+uE0yW@!gSoGvbyozYHWmH7HDQAZ@bc@ zB_5Gw^9fsJmb=L=WSdLMXjtCHl>Z~galhK66L6foSd1shx7C+`ch;Zg)wUE-XlK)K7@J*LhvY+zIHcNVfylf$lL6aM29wbiW^`m#;7RQw~$gdR>k_WOTW~y(sQd! z`Pp59CWQB1tT6YX8%~dXyf#piBU~O!vAJS&A~A{nwNFX(iN;&)Jkuv_>UO3{8@ z|MUwR>ENKKJozUY?sEMk`|-$XtbFrCl%Oh3X_KdS5T2Rf^K+myAqQD+$A}_G0VXaY~%TowXdj{IFUfQyB6B|cON4Hb??kG%4p6mJS zeUYBATB`LK&2-|dMHi21Q%%>?Z8Ja!)y@Iy%r*1Kds zxD1;RQ0FAS%a^`80vL4PWIu;bZ+e7!ct!l+SAo!$?4fRodCf1Nm9(KMsx3yVtn0R@ z8KU}&>Ucn(v)%c_D3#`JXpEqX4A9TTt}ns)_pq!#JfuLN?_l`zMVIInea3uT`7uPZ ziu>xzbVtGd^kIRs2gGbLlKstA>zwyTdc&&t*qep@ryml3ZQ z+aC>Wp44gSzDHf{T)eGg)R_JKNv$FStQBuM>m>MDBv6x+`Juv9D@L3-o>U!Y*!j+3 zi~gxg$dAL@-jBmvWo9oCNBRx8GTr9z`r)&pE{{C4wKLa^Al{zcodS?I+pUdu^{PxX z0usj@9Et*oD@PbWB8R=n4%f=qy_sQ(I8Jb=fg!0LPp;ZO3RM>B*yGZP7ZX4Kr-v*~ zXYbEw3eyfAnms83%Den)02aVUGk&g1z-4PK}l3T8B$Mb);>1|`r{TAgzS~12ntlUFtXxc+0sVw(upZmRt zgLTV^p;~TGnJYOs8*DyL@b>93EVCU^;CllXMJ zre~rh@ll)Y1eGX2u6an?buXxT+{7=oK_`rujLh83EDD&W-)H+CSexCpC?AE1IXv;R zo~P@>?*lr~?sTm1aDw=3tJwGK&Huxe=OgX*QfBr6$e&%BFkaRRc#2WkINYm3M0iGY?#Z3FK$uZuKm~+a9Nvou(fOP8MDP%4!Fhi9+VOSC*=oxTDYi}`+2YHbQg0xcoa#Z3HYg|mnj)F8)9WT z0QHu7+f{J&rcOODHL^Sgl^s5p zVZa&%IkZ|zABf~)P6NgZAhHs(qRTq#Lk2B*OP)>YDY&LiUqhrlpGAuX+28m@BJ8#1 zk{P&{c!%dIhz#uBc?LG6vWh>wmz{jWBgEe`UJ=0)y+}Zl*k;u1qIzCY%~o2}KXN;Q zO;|O;ca*wYkMkRF@*XcsapJlYpSSM}FWF9PxTg1Q$!L3v!cmHiQNE+si+H2~xg*CPN^T)x?NY+>2SM3&qE*WSi{ z?a@Ho;E`ej=#u{b9BtCA(=c{hSWa4e8Mzy1rRvERH1%Yp72YUSn?-M6rG~c^Pj-aV zX>=WmVIQxsNp$>=ce!v_=9-t@JKzt&23cwq3-;Wg^T{xf zK>$Oz(IAqyI7Af3FUshOAUSQ<+*OH}M=1LJ@dj_%sy`LZi9McLj%<}@^7T5FW{%*s?TIiA*oyCmUT70Z{G645&08JMc^WBx5P33zrhHv!M|EsQ!-C|hOy;NG~ zFP{0`6kD$tjzJb3!Q9v)c|5%+yS9fv7Tth#-Q>F8YvCiabN0Z7@7M-Xv7a)vsEWo+ z6OO1{9J$_6HB1%A-H>RyaZD?OtcsK4!GauMhRD znPLD^>`j8WB1*~8-y3z2>wd~D%S3LTRNB4{4CV*-5OPpfU>I1cJ!!FSC@kKD^`%KT% zLLTY@n$ceEAugjb88o!-M-mFc>#$UoxJKQ%=q9Fn!fp=Lve)I z+S3w|m+heZ*tJkS;(hBwyBb23ck}q?6x#6QNRMe$VOwkBpIZ_%1}imb*Qwl{&>^bz zAsq3E&G_6wV|8T@!}nPZOTnGH*0~5+{Oz;~()>m^tPO65x0QRUhJbLPl8D@pKW&Tq z=gn?nLax0KsF7t{f(zhtw4~vbZtrwP%0NZ<8GV=p$(&{hC_TA1j$JsS^Zec8dAQ11 zzsA(rPRgsgU_E2P)P280df=0Dz~!)O$J}dEPB>M{+e(RgVi)?58|B$SzE3+UR&v<=KTLV@mMNRHgg zV2cC1+Ux@h0M}6YZr;{i18r3aL_LvG;W(#zDi6Mp2Wy-!wTNd>X$e*4CexN_@R+rDr>nXWyca&h?8XLw_6 ze45_hE;NdZ`(x-nP43e;J>#kpB;}%oM!V|V&Qc@9$&Q6tFI1D?Zv7$<&IljrzU4ue zo+H@ZO{AjY38PvI)%+Id9GA!~5V=57#DFAZ{;~S*n=nvJZP}0lhA9}Has>IUf&9h-e&?0sy?ZmvhwyfJ}Lt|RpKkERo& zG_%5^ccy8#ktx3qXh5z3>O7lrio-}t28rFfO|}rbupCW9<%~C-iGhr0H^T8zH1N8y z*2&7et-~fk+z z9$^p@V~D6ij9d2hUSitaT~@H**y7jf;a{e4#I84rhZ}OQq-iy9l?WSOXq`uv)tBwQ z1=FC@D-=2lw5F!tR1g$X$}CQ~dVAq^udzVx^fI$dO-+ODaB%}wsEUWu%W#6Wt%WAZ zH)CmQFJ`v63>=nJ+>^H0Z!|h{4{)?{zYnQE3#5$a&<3Ln?g9nzsatBgG)amSA5-X4 z;T4RIL0w~Mds#5^#>i*xQ8{xgn#>)hjP4%=eN<|#5?fn=gqAWb@M~P`yc3Isw}I0J zCh>G=+UZCdF=3wkM@dm{ZCsy15RFZtRhibL%|N9ZLnZXXD2Yp@pJYoaUEZBHq2*AE z(-HgRWi$o?%SFbbgfO7M zAnQvifxc7+X*nAF7L+xrjWT^b&I354Z|I1z!v*k4zGDkdj!E>5_^oS{Zt3O$i>eDO6DJ1YiR=y8|O8+Sj=$spO8-Gq^oJXGalqKa9 zlETCn3S;B^afJOADOEgt0r4VY93W&|1@>a9bdPSM;@TVl`x!82&9ShJ|9F*Vjl;?D z*gxXxf5cPAtIOD4*j_D{CZG!=)YXd(vv3}ax=(QPHN^HNu}NJM8ud6=8|B4&i`zI{ zp|UWb@|#q_M+Qxs9xeFXP+k#rrA3EGFW2Pz%{hs3j^N;Wnsh|oiKQ6)@nf;lZF)}b zpuJL|g8`rp^PQq12cD`&+EclY#{<$RhTE@t-DxSi z#W&pN8U>R@)zNRl3P_1K%-?QK+VzJ02O83Ll9j{F3j>*_~9uh^1rAfSRD20lOkt;FdwCY&i{Jz;D1~2Hrp&_Yh z={H!sd`;gpLSWEOfqbHf(u%UD50ARTHPF%EZueo`Ehm5LRWhwFh2)dEFp_Pu z^YJ9Y%$zU1c}lLX{K~Re`**F$UxYJq^amS-`fh2E$_N^j1vx*ZYIW_-zE^VIMg6VB z2S=Z67K3@2wKEJd&_UoZ_IVPDwv_I7o0r=E&BH*h4Ja@N*JmpC^L*tFv-E?%CTE5% zcijAx$gh>~lRq^}*J}Gm>+7eY122Kgcd~0+CVuOb9{gIW`o;3WC zY%uP1z;@-b>u2$B?3Ixmuw`8C>5%p{3FZBT_=bk(D)YXllW%ZZ-qQ`0v)k9W6nb8* z=G8I(o3(*_14mN>7#+@2bNA+XHd&w|i6>&-3ff?Wo^=R=djJ@-LF5T$+>KGq%O^5=eP?f*PN)g`YU(o z$;a^vNeC)?6h>E zzcbn0b0N!7|D$dAs382CXg5;wusG3W;Gu4px8*k_IJQH4&cD*T>$s+%;g3RsE3gXw z7)MU|{b-)^{HoSJG&t*^yv)|Z%AX_X?j!AISliQok${|Js4zETNgUBIyxzyjJq_tg z@;n|UWpKr_m}tbWSciT}*e-XN%%!3y&r+0=L>XXaiIF94#IbYo{-&VgqX#Hf2dk?z z(V87ye)j6A~ZTm)e?v_k>~;9JiXE{)qWmJ;il< zTdS&X-M1K$lClneavIjbeU^{f#_7Q&*eL-e4gi4Ev?aCVu$>EH4M9fP$D|fu3I#a@ zisA)1sFXIF(zQ#me+c+<0`!|@Q&Fu`fj_b1hXKIS2fDZeimVZL{p7j6pU|m9Oq2x8 zp81^@MfhqWwAmu_6H)oEHkqo*^Z5iwDi`TZ%j4e-p`YnjL-Aa!9aw1T2V<516a5L{ zpTCCHwLaS~2H^Ab3g__3sLTr4ASv5f@);3vGn%ZXdC`$U9vty(62lTQasV)acmFUw z;S(N8XATWMQLHhefdnc2-GY}DdcTZ=Bp0hN8k|2p!Vf)lIW9G-66V$G!Ndk7pNbur5|N9F7l)*l&bwhgCPk_sqUuybcD9*{BkL zM04Sb?3z~c?C2fi@orA}j+y^s5Be4*b8xYF)?&yu#r`&iZN}XqQwo-*Zy^pCc!tUU zBqC}=aT!5HDxv!?(Wyec2Hz3j_TMx?R1U`n+)7I1e|C#oc8^FaL6RfQrU>=Yf zLCGAhWY5CM7+Q4noOUiW;(2sY7C5{6je$mWe$-djDx8V(-PaMriM<*2g7ZFLtlp32 ztUQHSF1ga9Uky%=@zpjiScFHoK|mok_Q3FM(ngFA6J(l)vU9&H7mAKb2vLaBYVzfa z?M@?BHS9SVriw>vu`|G`1*9(8kTP?bPbqt%bH5v-%!$;zBV*^7^ZytB*^IyhzFDi< z;Fe5v{>JQmaE`^)&M3*&I zu#arPJ%#7n)vl@t9jd?$KC0Vf&*`~R-kA4WX=W5*1^ut$X%8rWWYDk7Vw`tg`xQ~? zlj7FLNoO?C&dZ_dfiKMbAZI)XSGp^WiY(hXME!Pt+~)K9AC~l2DfL%6FWdEmI8~7B z5RB|G?oz5>Bw{|5@4PQSrdE}VBu ziE0uWhlEW(Q_V?)hGwTaClgqy)5<%x{H&8}S5(eh+wK8T(@rMrMHpFS8{7>2wc%uH zH$2)}EOaV>rze|?noXoicdVwS)!`dr@q#o^LCobypTxmyweniEuX9j5_MCV-wYzY; zGqLe--jTW23c=UtdC)lWc#x}}>K4>*eL^&7X&9tq?0-h}@Y^6grjy9)n{!bFmPfIM8Q>x>mTDBZ`+E}xZ8HLl`= zTZ|Rr1LjZiPdt%e-`1lJ_ql;MLu~mcGFL;=0YEH%@k^4UJ{pOyJ4J8iDtRxXRtnV}j1}|ozX$Yqb|U6vqlNy0X3ONd zP4-LIzgt~*=aB}Q350+nD|e6V69uc*IV6YZYSK>=HUCcaMVA&5;sSbJ^8{b8h9sYX z+!|H;+W7|l{J{WSP<}H7gNQr-JvJor7+vW*@W`Onsci}oK|yjQ0$cM?0Sn5N(IzCL zNn@LxhJwC9t0Smz+XChMkd*^Cv1DOG7240Tzl=eos1Hd+fs#ZNsP;M8?7`YhrI8wP z^G`Fk9ll@rghJq$SQ&q{e@OHfdJcQ*fz~#(2Z`dZ`FCvrQ7T%~(tqeF@_6|7|Ijid z7^?K`zf8y96#T3I5~zQ>PKT8F|JT|T^#4iY&-b(9h}mJJ76Q`sUq6v{1d(=YT@kX Date: Tue, 17 Nov 2020 16:08:15 +0530 Subject: [PATCH 048/486] name-changed --- .../{Eventaudit5157.PNG => event-audit-5157.png} | Bin .../{Eventpro5157.PNG => event-properties-5157.png} | Bin .../images/{firewallrules.PNG => firewallrule.png} | Bin ...lter.PNG => quarantine-default-block-filter.png} | Bin ...ers.PNG => query-user-default-block-filters.png} | Bin 5 files changed, 0 insertions(+), 0 deletions(-) rename windows/security/threat-protection/windows-firewall/images/{Eventaudit5157.PNG => event-audit-5157.png} (100%) rename windows/security/threat-protection/windows-firewall/images/{Eventpro5157.PNG => event-properties-5157.png} (100%) rename windows/security/threat-protection/windows-firewall/images/{firewallrules.PNG => firewallrule.png} (100%) rename windows/security/threat-protection/windows-firewall/images/{QuarantineDefaultblock filter.PNG => quarantine-default-block-filter.png} (100%) rename windows/security/threat-protection/windows-firewall/images/{QueryUserDefaultblockfilters.PNG => query-user-default-block-filters.png} (100%) diff --git a/windows/security/threat-protection/windows-firewall/images/Eventaudit5157.PNG b/windows/security/threat-protection/windows-firewall/images/event-audit-5157.png similarity index 100% rename from windows/security/threat-protection/windows-firewall/images/Eventaudit5157.PNG rename to windows/security/threat-protection/windows-firewall/images/event-audit-5157.png diff --git a/windows/security/threat-protection/windows-firewall/images/Eventpro5157.PNG b/windows/security/threat-protection/windows-firewall/images/event-properties-5157.png similarity index 100% rename from windows/security/threat-protection/windows-firewall/images/Eventpro5157.PNG rename to windows/security/threat-protection/windows-firewall/images/event-properties-5157.png diff --git a/windows/security/threat-protection/windows-firewall/images/firewallrules.PNG b/windows/security/threat-protection/windows-firewall/images/firewallrule.png similarity index 100% rename from windows/security/threat-protection/windows-firewall/images/firewallrules.PNG rename to windows/security/threat-protection/windows-firewall/images/firewallrule.png diff --git a/windows/security/threat-protection/windows-firewall/images/QuarantineDefaultblock filter.PNG b/windows/security/threat-protection/windows-firewall/images/quarantine-default-block-filter.png similarity index 100% rename from windows/security/threat-protection/windows-firewall/images/QuarantineDefaultblock filter.PNG rename to windows/security/threat-protection/windows-firewall/images/quarantine-default-block-filter.png diff --git a/windows/security/threat-protection/windows-firewall/images/QueryUserDefaultblockfilters.PNG b/windows/security/threat-protection/windows-firewall/images/query-user-default-block-filters.png similarity index 100% rename from windows/security/threat-protection/windows-firewall/images/QueryUserDefaultblockfilters.PNG rename to windows/security/threat-protection/windows-firewall/images/query-user-default-block-filters.png From 5bf03114f68bd029800349fc08771de12fa294ff Mon Sep 17 00:00:00 2001 From: Benny Shilpa Date: Tue, 17 Nov 2020 17:32:14 +0530 Subject: [PATCH 049/486] Update filter-origin-documentation.md --- .../filter-origin-documentation.md | 65 ++++++++++--------- 1 file changed, 33 insertions(+), 32 deletions(-) diff --git a/windows/security/threat-protection/windows-firewall/filter-origin-documentation.md b/windows/security/threat-protection/windows-firewall/filter-origin-documentation.md index 900e12673a..30d3358139 100644 --- a/windows/security/threat-protection/windows-firewall/filter-origin-documentation.md +++ b/windows/security/threat-protection/windows-firewall/filter-origin-documentation.md @@ -17,11 +17,11 @@ ms.topic: troubleshooting # Filter Origin Documentation (Audit Log Improvements) -Debugging packet drops has long been a pain point to Windows customers. In the past, customers had limited information about packet drops. +Debugging packet drops is a continuous issue to Windows customers. In the past, customers had limited information about packet drops. -Typically, when investigating packet drop events, a customer would use the field “Filter Run-Time ID“ from WFP Audits 5157 or 5152. +Typically, when investigating packet drop events, a customer would use the field `Filter Run-Time ID` from WFP Audits 5157 or 5152. -[image] +![Event Properties](images/event-properties-5157.png) The filter ID uniquely identifies the filter that caused the packet drop. The filter ID can be searched in the WFP state dump output to trace back to the FW rule where the filter originated from. @@ -29,11 +29,11 @@ However, the filter ID is not a reliable source for tracing back to the filter o For customers to debug packet drop events correctly and efficiently, they would need more context about the blocking filter such as its origin. -The blocking filters can be categorized under these filter “origins”: +The blocking filters can be categorized under these filter origins: -1. Firewall Rules +1. Firewall Rules -2. Firewall Default Block Filters +2. Firewall Default Block Filters a. AppContainer Loopback @@ -48,22 +48,20 @@ The blocking filters can be categorized under these filter “origins”: f. UWP Default g. WSH Default - - The next section describes improvements made to Audits 5157 and 5152 and how the above filter origins are used in these events. These improvements were added in Iron Release. + +The next section describes the improvements made to Audits 5157 and 5152 and how the above filter origins are used in these events. These improvements were added in Iron Release. ## Improved Firewall Audit - There were two new fields added to the Audit 5157 and 5152 events: +The two new fields added to the Audit 5157 and 5152 events are `Filter Origin` and `Interface Index`. - “Filter Origin” and “Interface Index”. - -The “Filter Origin” field will help identify the cause of the drop. Packet drops from FW are explicitly dropped by default block filters created by the Windows Firewall service or a FW rule which may be created by users, policies, services, apps, etc. +The `Filter Origin` field will help identify the cause of the drop. Packet drops from FW are explicitly dropped by default block filters created by the Windows Firewall service or a FW rule which may be created by users, policies, services, apps, etc. -“Filter Origin” will either specify the rule ID (a unique identifier of a FW rule) or the name of one of the default block filters. +`Filter Origin` will either specify the rule ID (a unique identifier of a Firewall rule) or the name of one of the default block filters. -The “Interface Index” field will specify the network interface in which the packet was dropped. This field will be especially helpful if the “Filter Origin” is “Quarantine Default” as it will identify what interface was quarantined. +The `Interface Index` field will specify the network interface in which the packet was dropped. This field helps to identify which interface was quarantined, if the `Filter Origin` is a `Quarantine Default`. -To enable a specific audit event, please run the corresponding command in an administrator command prompt: +To enable a specific audit event, run the corresponding command in an administrator command prompt: |**Audit #**|**Enable Command**|**Link**| |:-----|:-----|:-----| @@ -72,33 +70,33 @@ To enable a specific audit event, please run the corresponding command in an adm ## Example Flow of Debugging Packet Drops with Filter Origin -Now that the audit surfaces “Filter Origin” and “Interface Index”, the network admin can determine the root cause of the network packet drop and the interface it happened on. +As the audit surfaces `Filter Origin` and `Interface Index`, the network admin can determine the root cause of the network packet drop and the interface it happened on. -[image] +![Event Audit](images/event-audit-5157.png) -The next sections are divided by “Filter Origin” type. The filter origin value will either be a rule name or the name of one of the default block filters. If the filter origin is one of the default block filters, skip to the section, “Firewall Default Block Filters.” Otherwise, continue to the section “Firewall Rules”. +The next sections are divided by `Filter Origin` type. The filter origin value will either be a rule name or the name of one of the default block filters. If the filter origin is one of the default block filters, skip to the section, **Firewall Default Block Filters**. Otherwise, continue to the section **Firewall Rules**. ## Firewall Rules -Run the following PowerShell command to generate the rule information using “Filter Origin”. +Run the following PowerShell command to generate the rule information using `Filter Origin`. ```Powershell Get-NetFirewallRule -Name “” Get-NetFirewallRule -Name " {A549B7CF-0542-4B67-93F9-EEBCDD584377} " ``` -[image] +![Firewall rule](images/firewallrule.png) -After identifying the rule that caused the drop, the network admin can now modify/disable the rule to allow the traffic they want through command prompt or using the Windows Defender UI. The network admin can find the rule in the UI with the rule’s DisplayName. +After identifying the rule that caused the drop, the network admin can now modify/disable the rule to allow the traffic they want through command prompt or using the Windows Defender UI. The network admin can find the rule in the UI with the rule’s `DisplayName`. >[!NOTE] -> FW Rules from MDM store cannot be searched using the Windows Defender UI. Additionally, the above method will not work when the “Filter Origin” is one of the default block filters, as they do not correspond to any FW rules. +> Firewall rules from Mobile Device Management (MDM) store cannot be searched using the Windows Defender UI. Additionally, the above method will not work when the `Filter Origin` is one of the default block filters, as they do not correspond to any Firewall rules. ## Firewall Default Block Filters **AppContainer Loopback** -Network drop events from “AppContainer Loopback” block filter origin occur when localhost loopback is not enabled properly for the UWP app. +Network drop events from the AppContainer Loopback block filter origin occur when localhost loopback is not enabled properly for the UWP app. To enable localhost loopback in a local debugging environment, see [Communicating with localhost](https://docs.microsoft.com/en-us/windows/iot-core/develop-your-app/loopback). @@ -106,11 +104,11 @@ To enable localhost loopback for a published app which requires loopback access **Boottime Default** -Network drop events with the “Boottime Default” filter origin occur when the computer is booting up and the FW service is not yet running. Services will need to create a boottime allow filter to allow the traffic. It should be noted that it is not possible to add boottime filters through FW rules. +Network drop events from the Boottime Default block filter origin occur when the computer is booting up and the Firewall service is not yet running. Services will need to create a boottime allow filter to allow the traffic. It should be noted that it is not possible to add boottime filters through Firewall rules. **Quarantine Default** -Network drops from the “Quarantine Default” block filter occur when the interface is temporarily quarantined by FW Service. The FW service quarantines an interface when it detects a change on the network, and based on several other factors, the FW service may put the interface in quarantine as a safeguard. When an interface is in quarantine, the Quarantine Default Block filter will block any new non-loopback inbound connections. +Network drops from the Quarantine Default block filter occur when the interface is temporarily quarantined by Firewall Service. The Firewall service quarantines an interface when it detects a change on the network, and based on several other factors, the Firewall service may put the interface in quarantine as a safeguard. When an interface is in quarantine, the Quarantine Default Block filter will block any new non-loopback inbound connections. Run the following PowerShell command to generate more information about the interface: @@ -119,7 +117,7 @@ Get-NetIPInterface –InterfaceIndex Get-NetIPInterface –InterfaceIndex 5 ``` -[image] +![Quarantine Default block filter](images/quarantine-default-block-filter.png) To learn more about the quarantine feature, see [Quarantine Behavior](quarantine.md). @@ -130,24 +128,24 @@ To learn more about the quarantine feature, see [Quarantine Behavior](quarantine Network packet drops from Query User Default block filters occur when there is no explicit rule created to allow an inbound connection for the packet. When an application binds to a socket but does not have a corresponding inbound rule to allow packets on that port, Windows generates a pop up for the user to allow or deny the app to receive packets on the available network categories. If the user clicks to deny the connection in this popup, subsequent inbound packets to the app will be dropped. To resolve the drops: -1. Create an inbound FW rule to allow the packet for this application. This will allow the packet to bypass any Query User Default block filters. +1. Create an inbound FW rule to allow the packet for this application. This will allow the packet to bypass any Query User Default block filters. -2. Delete any block Query User rules which may have been auto generated by the FW service. +2. Delete any block Query User rules which may have been auto generated by the FW service. To generate a list of all the Query User block rules, you can run the following PowerShell command: ```Powershell - Get-NetFirewallRule | Where {$_.Name -like "*Query User*"} +Get-NetFirewallRule | Where {$_.Name -like "*Query User*"} ``` -[image] +![Query User Default block filter](images/query-user-default-block-filters.png) The query user pop-up feature is enabled by default. To disable the query user pop-up, you can run the following in administrative command prompt: ```Console - Netsh set allprofiles inboundusernotification disable +Netsh set allprofiles inboundusernotification disable ``` Or in PowerShell: @@ -158,11 +156,14 @@ Set-NetFirewallProfile -NotifyOnListen False **Stealth** Network drops from Stealth filters are typically made to prevent port scanning. + To disable Stealth-mode, see [Disable stealth mode in Windows](https://docs.microsoft.com/en-us/troubleshoot/windows-server/networking/disable-stealth-mode). **UWP Default** -Network drops from UWP Default Inbound/Outbound block filters are often caused by the UWP app not being configured correctly (i.e. the UWP app is missing the correct capability tokens or loopback is not enabled) or the private range is configured incorrectly. For more information on how to debug drops caused by UWP default block filters, see [Troubleshooting UWP App Connectivity Issues](https://docs.microsoft.com/en-us/windows/security/threat-protection/windows-firewall/troubleshooting-uwp-firewall). +Network drops from UWP Default Inbound/Outbound block filters are often caused by the UWP app not being configured correctly (i.e. the UWP app is missing the correct capability tokens or loopback is not enabled) or the private range is configured incorrectly. + +For more information on how to debug drops caused by UWP default block filters, see [Troubleshooting UWP App Connectivity Issues](https://docs.microsoft.com/en-us/windows/security/threat-protection/windows-firewall/troubleshooting-uwp-firewall). **WSH Default** From b448138b2fe6299aa5e42052a72cd7e6f531d7ad Mon Sep 17 00:00:00 2001 From: Benny Shilpa Date: Tue, 17 Nov 2020 17:41:23 +0530 Subject: [PATCH 050/486] Update TOC.md --- windows/security/threat-protection/windows-firewall/TOC.md | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/windows/security/threat-protection/windows-firewall/TOC.md b/windows/security/threat-protection/windows-firewall/TOC.md index 3135035738..55c24da4b7 100644 --- a/windows/security/threat-protection/windows-firewall/TOC.md +++ b/windows/security/threat-protection/windows-firewall/TOC.md @@ -165,7 +165,7 @@ ## [Troubleshooting]() ### [Troubleshooting UWP app connectivity issues in Windows Firewall](troubleshooting-uwp-firewall.md) -### [Filter Origin Documentation](windows/security/threat-protection/windows-firewall/filter-origin-documentation.md) +### [Filter Origin Documentation](filter-origin-documentation.md) ### [Quarantine Behavior](quarantine.md) From 6fd17826a88b439bd75bff38809c362390e2d759 Mon Sep 17 00:00:00 2001 From: Benny Shilpa Date: Tue, 17 Nov 2020 17:42:54 +0530 Subject: [PATCH 051/486] Update filter-origin-documentation.md --- .../windows-firewall/filter-origin-documentation.md | 8 ++++---- 1 file changed, 4 insertions(+), 4 deletions(-) diff --git a/windows/security/threat-protection/windows-firewall/filter-origin-documentation.md b/windows/security/threat-protection/windows-firewall/filter-origin-documentation.md index 30d3358139..b87dd45928 100644 --- a/windows/security/threat-protection/windows-firewall/filter-origin-documentation.md +++ b/windows/security/threat-protection/windows-firewall/filter-origin-documentation.md @@ -98,9 +98,9 @@ After identifying the rule that caused the drop, the network admin can now modif Network drop events from the AppContainer Loopback block filter origin occur when localhost loopback is not enabled properly for the UWP app. -To enable localhost loopback in a local debugging environment, see [Communicating with localhost](https://docs.microsoft.com/en-us/windows/iot-core/develop-your-app/loopback). +To enable localhost loopback in a local debugging environment, see [Communicating with localhost](https://docs.microsoft.com/windows/iot-core/develop-your-app/loopback). -To enable localhost loopback for a published app which requires loopback access to communicate with another UWP or packaged win32 app, see [uap4:LoopbackAccessRules](https://docs.microsoft.com/en-us/uwp/schemas/appxpackage/uapmanifestschema/element-uap4-loopbackaccessrules). +To enable localhost loopback for a published app which requires loopback access to communicate with another UWP or packaged win32 app, see [uap4:LoopbackAccessRules](https://docs.microsoft.com/uwp/schemas/appxpackage/uapmanifestschema/element-uap4-loopbackaccessrules). **Boottime Default** @@ -157,13 +157,13 @@ Set-NetFirewallProfile -NotifyOnListen False Network drops from Stealth filters are typically made to prevent port scanning. -To disable Stealth-mode, see [Disable stealth mode in Windows](https://docs.microsoft.com/en-us/troubleshoot/windows-server/networking/disable-stealth-mode). +To disable Stealth-mode, see [Disable stealth mode in Windows](https://docs.microsoft.com/troubleshoot/windows-server/networking/disable-stealth-mode). **UWP Default** Network drops from UWP Default Inbound/Outbound block filters are often caused by the UWP app not being configured correctly (i.e. the UWP app is missing the correct capability tokens or loopback is not enabled) or the private range is configured incorrectly. -For more information on how to debug drops caused by UWP default block filters, see [Troubleshooting UWP App Connectivity Issues](https://docs.microsoft.com/en-us/windows/security/threat-protection/windows-firewall/troubleshooting-uwp-firewall). +For more information on how to debug drops caused by UWP default block filters, see [Troubleshooting UWP App Connectivity Issues](https://docs.microsoft.com/windows/security/threat-protection/windows-firewall/troubleshooting-uwp-firewall). **WSH Default** From 0e669df0f18f4ab646c2b08ba5f72b0df4c31e0d Mon Sep 17 00:00:00 2001 From: Asha Iyengar Date: Wed, 18 Nov 2020 17:58:54 +0530 Subject: [PATCH 052/486] Minor changes --- .../windows-firewall/firewall-settings-lost-on-upgrade.md | 8 ++++---- 1 file changed, 4 insertions(+), 4 deletions(-) diff --git a/windows/security/threat-protection/windows-firewall/firewall-settings-lost-on-upgrade.md b/windows/security/threat-protection/windows-firewall/firewall-settings-lost-on-upgrade.md index 45fc0886f1..92a3e08580 100644 --- a/windows/security/threat-protection/windows-firewall/firewall-settings-lost-on-upgrade.md +++ b/windows/security/threat-protection/windows-firewall/firewall-settings-lost-on-upgrade.md @@ -17,7 +17,7 @@ ms.topic: troubleshooting # Firewall Settings Lost on Upgrade -This article describes a scenario whereby previously enabled firewall rules revert to a disabled state after performing a Windows upgrade. +This article describes a scenario where previously enabled firewall rules revert to a disabled state after performing a Windows upgrade. ## Rule Groups @@ -29,15 +29,15 @@ Individual built-in firewall rules are categorized within a group. For example, - Remote Desktop – User-Mode (UDP-In) -Other examples include the Core Networking, File and Print Sharing, and Network Discovery groups. Admins can filter on individual categories in the firewall interface (wf.msc) by selecting and right-clicking on ‘Inbound’ or ‘Outbound Rules’ and selecting ‘Filter by Group’; or via PowerShell using the `Get-NetFirewallRule` cmdlet with the `-Group` switch. +Other examples include the Core Networking, File and Print Sharing, and Network Discovery groups. Admins can filter on individual categories in the firewall interface (wf.msc) by selecting and right-clicking on ‘**Inbound**’ or ‘**Outbound Rules**’ and selecting ‘**Filter by Group**’; or via PowerShell using the `Get-NetFirewallRule` cmdlet with the `-Group` switch. ```Powershell Get-NetFirewallRule -Group ``` > [!NOTE] -> It is recommended to enable an entire group instead of individual rules if the expectation is the ruleset is going to be migrated at some point. +> It is recommended to enable an entire group instead of individual rules if the expectation is that the ruleset is going to be migrated at some point. It is recommended to enable/disable all rules within a group, as opposed to enabling/disabling just one or two of the individual rules to help avoid unexpected behaviors. For example, while rule groups can be used to organize rules by influence and allows batch rule modifications, they are also used as a way to maintain rule state across a Windows upgrade. Rule groups, as opposed to individual rules, are the unit by which the process determines what should be enabled/disabled when the upgrade is complete. -Take the Remote Desktop group example mentioned above. It consists of three rules. To ensure that the ruleset is properly maintained once the upgrade is complete, all three rules should be enabled. If only one rule is enabled, the upgrade process will see that two of three rules is disabled and subsequently disable the entire group to maintain an as pristine out-of-the-box configuration as possible. Obviously, in this scenario, this brings the unintended consequence of being unable to establish RDP connection to the host. +Take the Remote Desktop group example mentioned earlier. It consists of three rules. To ensure that the ruleset is properly maintained once the upgrade is complete, all three rules must be enabled. If only one rule is enabled, the upgrade process will see that two of three rules are disabled and subsequently disable the entire group to maintain an as pristine out-of-the-box configuration as possible. Obviously, in this scenario, this brings the unintended consequence of being unable to establish RDP (Remote Desktop Protocol) connection to the host. From 6368d5c46113b1277856224fa84ae57d235b6d59 Mon Sep 17 00:00:00 2001 From: "Trond B. Krokli" <38162891+illfated@users.noreply.github.com> Date: Wed, 18 Nov 2020 14:43:47 +0100 Subject: [PATCH 053/486] Update: merge public branch into patch-107 See commit https://github.com/MicrosoftDocs/windows-itpro-docs/commit/f248872c9b4861a1d92ea8a945899fe6280fcab2 (`microsoft-defender-smartscreen-available-settings.md` file link https://github.com/MicrosoftDocs/windows-itpro-docs/commit/f248872c9b4861a1d92ea8a945899fe6280fcab2#diff-12e67b38e445922ed975beb4b144adf92ff9d4bd71fa12a0626dfe435bb0cb59) for the details. --- .../microsoft-defender-smartscreen-available-settings.md | 4 ++-- 1 file changed, 2 insertions(+), 2 deletions(-) diff --git a/windows/security/threat-protection/microsoft-defender-smartscreen/microsoft-defender-smartscreen-available-settings.md b/windows/security/threat-protection/microsoft-defender-smartscreen/microsoft-defender-smartscreen-available-settings.md index a25aed7eab..39288a73aa 100644 --- a/windows/security/threat-protection/microsoft-defender-smartscreen/microsoft-defender-smartscreen-available-settings.md +++ b/windows/security/threat-protection/microsoft-defender-smartscreen/microsoft-defender-smartscreen-available-settings.md @@ -41,7 +41,7 @@ SmartScreen uses registry-based Administrative Template policy settings. For mor Windows 10, version 2004:
    Administrative Templates\Windows Components\Windows Defender SmartScreen\Explorer\Configure App Install Control Windows 10, version 1703:
    Administrative Templates\Windows Components\Windows Defender SmartScreen\Explorer\Configure App Install Control -This policy setting is intended to prevent malicious content from affecting your user's devices when downloading executable content from the internet.

    This setting does not protect against malicious content from USB devices, network shares or other non-internet sources.

    Important: Using a trustworthy browser helps ensure that these protections work as expected.

    +This policy setting is intended to prevent malicious content from affecting your user's devices when downloading executable content from the internet.

    This setting does not protect against malicious content from USB devices, network shares, or other non-internet sources.

    Important: Using a trustworthy browser helps ensure that these protections work as expected.

    Windows 10, version 2004:
    Administrative Templates\Windows Components\Windows Defender SmartScreen\Microsoft Edge\Configure Windows Defender SmartScreen (Microsoft Edge version 45 and earlier)

    Administrative Templates\Microsoft Edge\SmartScreen settings\Configure Microsoft Defender SmartScreen (Microsoft Edge version 77 or later)

    Windows 10, version 1703:
    Administrative Templates\Windows Components\Windows Defender SmartScreen\Microsoft Edge\Configure Windows Defender SmartScreen (Microsoft Edge version 45 and earlier)

    Administrative Templates\Microsoft Edge\SmartScreen settings\Configure Microsoft Defender SmartScreen (Microsoft Edge version 77 or later)

    Windows 10, Version 1607 and earlier:
    Administrative Templates\Windows Components\Microsoft Edge\Configure Windows SmartScreen @@ -159,7 +159,7 @@ For Microsoft Defender SmartScreen Edge MDM policies, see [Policy CSP - Browser] ## Recommended Group Policy and MDM settings for your organization -By default, Microsoft Defender SmartScreen lets employees bypass warnings. Unfortunately, this can let employees continue to an unsafe site or to continue to download an unsafe file, even after being warned. Because of this possibility, we strongly recommend that you set up Microsoft Defender SmartScreen to block high-risk interactions instead of providing just a warning. +By default, Microsoft Defender SmartScreen lets employees bypass warnings. Unfortunately, this feature can let employees continue to an unsafe site or to continue to download an unsafe file, even after being warned. Because of this possibility, we strongly recommend that you set up Microsoft Defender SmartScreen to block high-risk interactions instead of providing just a warning. To better help you protect your organization, we recommend turning on and using these specific Microsoft Defender SmartScreen Group Policy and MDM settings. From f67d9d52480b0ab60c5f7d971786f4622c769e45 Mon Sep 17 00:00:00 2001 From: Benny Shilpa Date: Fri, 20 Nov 2020 15:19:42 +0530 Subject: [PATCH 054/486] Update filter-origin-documentation.md --- .../filter-origin-documentation.md | 16 ++++++++-------- 1 file changed, 8 insertions(+), 8 deletions(-) diff --git a/windows/security/threat-protection/windows-firewall/filter-origin-documentation.md b/windows/security/threat-protection/windows-firewall/filter-origin-documentation.md index b87dd45928..9f32d988b7 100644 --- a/windows/security/threat-protection/windows-firewall/filter-origin-documentation.md +++ b/windows/security/threat-protection/windows-firewall/filter-origin-documentation.md @@ -19,11 +19,11 @@ ms.topic: troubleshooting Debugging packet drops is a continuous issue to Windows customers. In the past, customers had limited information about packet drops. -Typically, when investigating packet drop events, a customer would use the field `Filter Run-Time ID` from WFP Audits 5157 or 5152. +Typically, when investigating packet drop events, a customer would use the field `Filter Run-Time ID` from Windows Filtering Platform (WFP) Audits 5157 or 5152. ![Event Properties](images/event-properties-5157.png) -The filter ID uniquely identifies the filter that caused the packet drop. The filter ID can be searched in the WFP state dump output to trace back to the FW rule where the filter originated from. +The filter ID uniquely identifies the filter that caused the packet drop. The filter ID can be searched in the WFP state dump output to trace back to the Firewall rule where the filter originated from. However, the filter ID is not a reliable source for tracing back to the filter or the rule, as the filter ID can change for many reasons despite the rule not changing at all. This makes the diagnosis process error-prone and difficult. @@ -55,7 +55,7 @@ The next section describes the improvements made to Audits 5157 and 5152 and how The two new fields added to the Audit 5157 and 5152 events are `Filter Origin` and `Interface Index`. -The `Filter Origin` field will help identify the cause of the drop. Packet drops from FW are explicitly dropped by default block filters created by the Windows Firewall service or a FW rule which may be created by users, policies, services, apps, etc. +The `Filter Origin` field will help identify the cause of the drop. Packet drops from Firewall are explicitly dropped by default block filters created by the Windows Firewall service or a Firewall rule which may be created by users, policies, services, apps, etc. `Filter Origin` will either specify the rule ID (a unique identifier of a Firewall rule) or the name of one of the default block filters. @@ -96,7 +96,7 @@ After identifying the rule that caused the drop, the network admin can now modif **AppContainer Loopback** -Network drop events from the AppContainer Loopback block filter origin occur when localhost loopback is not enabled properly for the UWP app. +Network drop events from the AppContainer Loopback block filter origin occur when localhost loopback is not enabled properly for the Universal Windows Platform (UWP) app. To enable localhost loopback in a local debugging environment, see [Communicating with localhost](https://docs.microsoft.com/windows/iot-core/develop-your-app/loopback). @@ -128,9 +128,9 @@ To learn more about the quarantine feature, see [Quarantine Behavior](quarantine Network packet drops from Query User Default block filters occur when there is no explicit rule created to allow an inbound connection for the packet. When an application binds to a socket but does not have a corresponding inbound rule to allow packets on that port, Windows generates a pop up for the user to allow or deny the app to receive packets on the available network categories. If the user clicks to deny the connection in this popup, subsequent inbound packets to the app will be dropped. To resolve the drops: -1. Create an inbound FW rule to allow the packet for this application. This will allow the packet to bypass any Query User Default block filters. +1. Create an inbound Firewall rule to allow the packet for this application. This will allow the packet to bypass any Query User Default block filters. -2. Delete any block Query User rules which may have been auto generated by the FW service. +2. Delete any block Query User rules which may have been auto generated by the Firewall service. To generate a list of all the Query User block rules, you can run the following PowerShell command: @@ -161,11 +161,11 @@ To disable Stealth-mode, see [Disable stealth mode in Windows](https://docs.micr **UWP Default** -Network drops from UWP Default Inbound/Outbound block filters are often caused by the UWP app not being configured correctly (i.e. the UWP app is missing the correct capability tokens or loopback is not enabled) or the private range is configured incorrectly. +Network drops from Universal Windows Platform (UWP) Default Inbound/Outbound block filters are often caused by the UWP app not being configured correctly (i.e. the UWP app is missing the correct capability tokens or loopback is not enabled) or the private range is configured incorrectly. For more information on how to debug drops caused by UWP default block filters, see [Troubleshooting UWP App Connectivity Issues](https://docs.microsoft.com/windows/security/threat-protection/windows-firewall/troubleshooting-uwp-firewall). **WSH Default** -Network drops from WSH default filters indicate that there wasn’t an explicit Windows Service Hardening allow rule to allow network traffic for the protected service. The service owner will need to configure allow rules for the service if the block is not expected. +Network drops from Windows Service Hardening (WSH) default filters indicate that there wasn’t an explicit Windows Service Hardening allow rule to allow network traffic for the protected service. The service owner will need to configure allow rules for the service if the block is not expected. From fdde5e4aec9afc274d6346cfd5361aad51fa4987 Mon Sep 17 00:00:00 2001 From: Benny Shilpa Date: Fri, 20 Nov 2020 16:33:36 +0530 Subject: [PATCH 055/486] Update quarantine.md --- .../security/threat-protection/windows-firewall/quarantine.md | 4 ++-- 1 file changed, 2 insertions(+), 2 deletions(-) diff --git a/windows/security/threat-protection/windows-firewall/quarantine.md b/windows/security/threat-protection/windows-firewall/quarantine.md index 3c2c94f178..7ebe7fac5b 100644 --- a/windows/security/threat-protection/windows-firewall/quarantine.md +++ b/windows/security/threat-protection/windows-firewall/quarantine.md @@ -23,7 +23,7 @@ One of the security challenges that network admins face is configuring a machine Network changes can happen frequently. Additionally, the operations required to re-categorize the network after a change and apply the correct security policies on a machine are non-trivial and may require considerable CPU time. This is especially true for machines that are part of the domain. In the past, the delay in applying security policies during network re-categorization has been successfully exploited for vulnerabilities. -To counter this potential exploitation, Windows Firewall will "quarantine" an interface until the system has successfully re-categorized the network and WFP has the correct filters applied for the updated interface configuration. During quarantine, all new inbound connections without exceptions are blocked to the machine. +To counter this potential exploitation, Windows Firewall will "quarantine" an interface until the system has successfully re-categorized the network and Windows Filtering Platform (WFP) has the correct filters applied for the updated interface configuration. During quarantine, all new inbound connections without exceptions are blocked to the machine. While the quarantine feature has long been a part of Windows Firewall, the feature’s behavior has often caused confusion for customers unaware of quarantine and its motivations. @@ -50,7 +50,7 @@ These filters are added in the FWPM_SUBLAYER_MPSSVC_QUARANTINE sublayer and thes 4. FWPM_LAYER_ALE_AUTH_RECV_ACCEPT_V6 >[!NOTE] -> Any FW rules added by the customers will not affect the filters in the quarantine sublayer as filters from FW rules are added in the FWPM_SUBLAYER_MPSSVC_WF sublayer. In other words, customers cannot add their own exception filters to prevent packets from being evaluated by quarantine filters. +> Any Firewall rules added by the customers will not affect the filters in the quarantine sublayer as filters from Firewall rules are added in the FWPM_SUBLAYER_MPSSVC_WF sublayer. In other words, customers cannot add their own exception filters to prevent packets from being evaluated by quarantine filters. For more information about WFP layers and sublayers, see [WFP Operation](https://docs.microsoft.com/windows/win32/fwp/basic-operation). From 0c929a927671fe7d865feb1071f3a0e7ea106879 Mon Sep 17 00:00:00 2001 From: jaimeo Date: Fri, 20 Nov 2020 09:01:06 -0700 Subject: [PATCH 056/486] safety commit --- windows/client-management/quick-assist.md | 14 ++++++++++++++ 1 file changed, 14 insertions(+) create mode 100644 windows/client-management/quick-assist.md diff --git a/windows/client-management/quick-assist.md b/windows/client-management/quick-assist.md new file mode 100644 index 0000000000..a40a1bbf2f --- /dev/null +++ b/windows/client-management/quick-assist.md @@ -0,0 +1,14 @@ +--- +title: Use Quick Assist +description: How IT Pros can use Quick Assist to help users +ms.prod: w10 +ms.sitesec: library +ms.topic: article +author: jaimeo +ms.localizationpriority: medium +ms.author: jaimeo +manager: laurawi +--- + +# Use Quick Assist + From 3b423db0a6c6b3b3c88080d68d5bbc4ab03a1b90 Mon Sep 17 00:00:00 2001 From: VLG17 <41186174+VLG17@users.noreply.github.com> Date: Mon, 23 Nov 2020 11:14:35 +0200 Subject: [PATCH 057/486] Update windows/security/threat-protection/microsoft-defender-smartscreen/microsoft-defender-smartscreen-available-settings.md Co-authored-by: Trond B. Krokli <38162891+illfated@users.noreply.github.com> --- .../microsoft-defender-smartscreen-available-settings.md | 5 ----- 1 file changed, 5 deletions(-) diff --git a/windows/security/threat-protection/microsoft-defender-smartscreen/microsoft-defender-smartscreen-available-settings.md b/windows/security/threat-protection/microsoft-defender-smartscreen/microsoft-defender-smartscreen-available-settings.md index b7b275e78a..ef53ba233b 100644 --- a/windows/security/threat-protection/microsoft-defender-smartscreen/microsoft-defender-smartscreen-available-settings.md +++ b/windows/security/threat-protection/microsoft-defender-smartscreen/microsoft-defender-smartscreen-available-settings.md @@ -41,10 +41,6 @@ SmartScreen uses registry-based Administrative Template policy settings. For mor -patch-107 -======= - -public @@ -222,4 +218,3 @@ To better help you protect your organization, we recommend turning on and using - [Microsoft Defender SmartScreen overview](microsoft-defender-smartscreen-overview.md) - [Available Group Policy and Mobile Device Management (MDM) settings for Microsoft Edge](/microsoft-edge/deploy/available-policies) - From 09626aef250487ee350be0f3eb43b3fcf6401d64 Mon Sep 17 00:00:00 2001 From: Daniel Simpson Date: Wed, 2 Dec 2020 10:17:57 -0800 Subject: [PATCH 058/486] Update filter-origin-documentation.md --- .../windows-firewall/filter-origin-documentation.md | 4 ++-- 1 file changed, 2 insertions(+), 2 deletions(-) diff --git a/windows/security/threat-protection/windows-firewall/filter-origin-documentation.md b/windows/security/threat-protection/windows-firewall/filter-origin-documentation.md index 9f32d988b7..931120538f 100644 --- a/windows/security/threat-protection/windows-firewall/filter-origin-documentation.md +++ b/windows/security/threat-protection/windows-firewall/filter-origin-documentation.md @@ -1,5 +1,5 @@ --- -title: Filter Origin Documentation (Audit Log Improvements) +title: Filter Origin (Audit Log Improvements) description: Filter Origin Documentation (Audit Log Improvements) ms.reviewer: ms.author: v-bshilpa @@ -15,7 +15,7 @@ ms.collection: ms.topic: troubleshooting --- -# Filter Origin Documentation (Audit Log Improvements) +# Filter Origin (Audit Log Improvements) Debugging packet drops is a continuous issue to Windows customers. In the past, customers had limited information about packet drops. From 0b4d83779cabda4f371efca225c1fb9a465bb00a Mon Sep 17 00:00:00 2001 From: VARADHARAJAN K <3296790+RAJU2529@users.noreply.github.com> Date: Thu, 3 Dec 2020 07:05:08 +0530 Subject: [PATCH 059/486] Update policy-csp-defender.md as per the user report #8740 , so i added admx missing information after clearly cross with on my laptop runs with windows 10 20h2 64bit build no 19042.662 . From this editing , i struggled few minutes for formatting the line in correct and where to add those missing lines. This editing of this article is too complicated , editing needs too much concentration with dedicated experienced skills, I knew all the contributors and all Authors , how are spent time to edit this article to make perfect. --- windows/client-management/mdm/policy-csp-defender.md | 10 ++++++++++ 1 file changed, 10 insertions(+) diff --git a/windows/client-management/mdm/policy-csp-defender.md b/windows/client-management/mdm/policy-csp-defender.md index dcea40a888..6387efccc5 100644 --- a/windows/client-management/mdm/policy-csp-defender.md +++ b/windows/client-management/mdm/policy-csp-defender.md @@ -2317,6 +2317,15 @@ Added in Windows 10, version 1607. Specifies the level of detection for potenti > Potentially unwanted applications (PUA) are a category of software that can cause your machine to run slowly, display unexpected ads, or at worst, install other software which might be unexpected or unwanted. By default in Windows 10 (version 2004 and later), Microsoft Defender Antivirus blocks apps that are considered PUA, for Enterprise (E5) devices. For more information about PUA, see [Detect and block potentially unwanted applications](https://docs.microsoft.com/windows/security/threat-protection/microsoft-defender-antivirus/detect-block-potentially-unwanted-apps-microsoft-defender-antivirus). + +ADMX Info: +- GP English name: *Configure detection for potentially unwanted applications* +- GP name: *Root_PUAProtection* +- GP element: *Root_PUAProtection* +- GP path: *Windows Components/Microsoft Defender Antivirus* +- GP ADMX file name: *WindowsDefender.admx* + + The following list shows the supported values: @@ -3112,6 +3121,7 @@ Footnotes: - 6 - Available in Windows 10, version 1903. - 7 - Available in Windows 10, version 1909. - 8 - Available in Windows 10, version 2004. +- 9 - Available in Windows 10, version 20H2. From 5080987f600dfead75cf88f14b45647587acfb51 Mon Sep 17 00:00:00 2001 From: Benny Shilpa Date: Thu, 3 Dec 2020 11:16:53 +0530 Subject: [PATCH 060/486] Update filter-origin-documentation.md --- .../filter-origin-documentation.md | 78 +++++++++---------- 1 file changed, 39 insertions(+), 39 deletions(-) diff --git a/windows/security/threat-protection/windows-firewall/filter-origin-documentation.md b/windows/security/threat-protection/windows-firewall/filter-origin-documentation.md index 931120538f..2d813af334 100644 --- a/windows/security/threat-protection/windows-firewall/filter-origin-documentation.md +++ b/windows/security/threat-protection/windows-firewall/filter-origin-documentation.md @@ -15,13 +15,13 @@ ms.collection: ms.topic: troubleshooting --- -# Filter Origin (Audit Log Improvements) +# Filter origin audit log improvements Debugging packet drops is a continuous issue to Windows customers. In the past, customers had limited information about packet drops. -Typically, when investigating packet drop events, a customer would use the field `Filter Run-Time ID` from Windows Filtering Platform (WFP) Audits 5157 or 5152. +Typically, when investigating packet drop events, a customer would use the field `Filter Run-Time ID` from Windows Filtering Platform (WFP) audits 5157 or 5152. -![Event Properties](images/event-properties-5157.png) +![Event properties](images/event-properties-5157.png) The filter ID uniquely identifies the filter that caused the packet drop. The filter ID can be searched in the WFP state dump output to trace back to the Firewall rule where the filter originated from. @@ -31,29 +31,29 @@ For customers to debug packet drop events correctly and efficiently, they would The blocking filters can be categorized under these filter origins: -1. Firewall Rules +1. Firewall rules -2. Firewall Default Block Filters +2. Firewall default block filters - a. AppContainer Loopback + a. AppContainer loopback - b. Boottime Default + b. Boottime default - c. Quarantine Default + c. Quarantine default - d. Query User Default + d. Query user default e. Stealth - f. UWP Default + f. UWP default - g. WSH Default + g. WSH default -The next section describes the improvements made to Audits 5157 and 5152 and how the above filter origins are used in these events. These improvements were added in Iron Release. +The next section describes the improvements made to audits 5157 and 5152 and how the above filter origins are used in these events. These improvements were added in Iron release. - ## Improved Firewall Audit + ## Improved firewall audit -The two new fields added to the Audit 5157 and 5152 events are `Filter Origin` and `Interface Index`. +The two new fields added to the audit 5157 and 5152 events are `Filter Origin` and `Interface Index`. The `Filter Origin` field will help identify the cause of the drop. Packet drops from Firewall are explicitly dropped by default block filters created by the Windows Firewall service or a Firewall rule which may be created by users, policies, services, apps, etc. @@ -63,20 +63,20 @@ The `Interface Index` field will specify the network interface in which the pack To enable a specific audit event, run the corresponding command in an administrator command prompt: -|**Audit #**|**Enable Command**|**Link**| +|**Audit #**|**Enable command**|**Link**| |:-----|:-----|:-----| |**5157**|`Auditpol /set /category:"System" /SubCategory:"Filtering Platform Connection" /success:enable /failure:enable`|[5157(F): The Windows Filtering Platform has blocked a connection.](https://docs.microsoft.com/windows/security/threat-protection/auditing/event-5157)| |**5152**|`Auditpol /set /category:"System" /SubCategory:"Filtering Platform Connection" /success:enable /failure:enable`|[5152(F): The Windows Filtering Platform blocked a packet.](https://docs.microsoft.com/windows/security/threat-protection/auditing/event-5152)| -## Example Flow of Debugging Packet Drops with Filter Origin +## Example flow of debugging packet drops with filter origin As the audit surfaces `Filter Origin` and `Interface Index`, the network admin can determine the root cause of the network packet drop and the interface it happened on. -![Event Audit](images/event-audit-5157.png) +![Event audit](images/event-audit-5157.png) -The next sections are divided by `Filter Origin` type. The filter origin value will either be a rule name or the name of one of the default block filters. If the filter origin is one of the default block filters, skip to the section, **Firewall Default Block Filters**. Otherwise, continue to the section **Firewall Rules**. +The next sections are divided by `Filter Origin` type. The filter origin value will either be a rule name or the name of one of the default block filters. If the filter origin is one of the default block filters, skip to the section, **Firewall default block filters**. Otherwise, continue to the section **Firewall rules**. -## Firewall Rules +## Firewall rules Run the following PowerShell command to generate the rule information using `Filter Origin`. @@ -92,23 +92,23 @@ After identifying the rule that caused the drop, the network admin can now modif >[!NOTE] > Firewall rules from Mobile Device Management (MDM) store cannot be searched using the Windows Defender UI. Additionally, the above method will not work when the `Filter Origin` is one of the default block filters, as they do not correspond to any Firewall rules. -## Firewall Default Block Filters +## Firewall default block filters -**AppContainer Loopback** +**AppContainer loopback** -Network drop events from the AppContainer Loopback block filter origin occur when localhost loopback is not enabled properly for the Universal Windows Platform (UWP) app. +Network drop events from the AppContainer loopback block filter origin occur when localhost loopback is not enabled properly for the Universal Windows Platform (UWP) app. To enable localhost loopback in a local debugging environment, see [Communicating with localhost](https://docs.microsoft.com/windows/iot-core/develop-your-app/loopback). To enable localhost loopback for a published app which requires loopback access to communicate with another UWP or packaged win32 app, see [uap4:LoopbackAccessRules](https://docs.microsoft.com/uwp/schemas/appxpackage/uapmanifestschema/element-uap4-loopbackaccessrules). -**Boottime Default** +**Boottime default** -Network drop events from the Boottime Default block filter origin occur when the computer is booting up and the Firewall service is not yet running. Services will need to create a boottime allow filter to allow the traffic. It should be noted that it is not possible to add boottime filters through Firewall rules. +Network drop events from the boottime default block filter origin occur when the computer is booting up and the Firewall service is not yet running. Services will need to create a boottime allow filter to allow the traffic. It should be noted that it is not possible to add boottime filters through Firewall rules. -**Quarantine Default** +**Quarantine default** -Network drops from the Quarantine Default block filter occur when the interface is temporarily quarantined by Firewall Service. The Firewall service quarantines an interface when it detects a change on the network, and based on several other factors, the Firewall service may put the interface in quarantine as a safeguard. When an interface is in quarantine, the Quarantine Default Block filter will block any new non-loopback inbound connections. +Network drops from the quarantine default block filter occur when the interface is temporarily quarantined by Firewall service. The Firewall service quarantines an interface when it detects a change on the network, and based on several other factors, the Firewall service may put the interface in quarantine as a safeguard. When an interface is in quarantine, the quarantine default block filter will block any new non-loopback inbound connections. Run the following PowerShell command to generate more information about the interface: @@ -117,28 +117,28 @@ Get-NetIPInterface –InterfaceIndex Get-NetIPInterface –InterfaceIndex 5 ``` -![Quarantine Default block filter](images/quarantine-default-block-filter.png) +![Quarantine default block filter](images/quarantine-default-block-filter.png) -To learn more about the quarantine feature, see [Quarantine Behavior](quarantine.md). +To learn more about the quarantine feature, see [Quarantine behavior](quarantine.md). >[!NOTE] > Quarantine-related packet drops are often transient and signify nothing more than a network change on the interface. -**Query User Default** +**Query user default** -Network packet drops from Query User Default block filters occur when there is no explicit rule created to allow an inbound connection for the packet. When an application binds to a socket but does not have a corresponding inbound rule to allow packets on that port, Windows generates a pop up for the user to allow or deny the app to receive packets on the available network categories. If the user clicks to deny the connection in this popup, subsequent inbound packets to the app will be dropped. To resolve the drops: +Network packet drops from query user default block filters occur when there is no explicit rule created to allow an inbound connection for the packet. When an application binds to a socket but does not have a corresponding inbound rule to allow packets on that port, Windows generates a pop up for the user to allow or deny the app to receive packets on the available network categories. If the user clicks to deny the connection in this popup, subsequent inbound packets to the app will be dropped. To resolve the drops: -1. Create an inbound Firewall rule to allow the packet for this application. This will allow the packet to bypass any Query User Default block filters. +1. Create an inbound Firewall rule to allow the packet for this application. This will allow the packet to bypass any query user default block filters. -2. Delete any block Query User rules which may have been auto generated by the Firewall service. +2. Delete any block query user rules which may have been auto generated by the Firewall service. -To generate a list of all the Query User block rules, you can run the following PowerShell command: +To generate a list of all the query user block rules, you can run the following PowerShell command: ```Powershell Get-NetFirewallRule | Where {$_.Name -like "*Query User*"} ``` -![Query User Default block filter](images/query-user-default-block-filters.png) +![Query user default block filter](images/query-user-default-block-filters.png) The query user pop-up feature is enabled by default. @@ -155,17 +155,17 @@ Set-NetFirewallProfile -NotifyOnListen False **Stealth** -Network drops from Stealth filters are typically made to prevent port scanning. +Network drops from stealth filters are typically made to prevent port scanning. -To disable Stealth-mode, see [Disable stealth mode in Windows](https://docs.microsoft.com/troubleshoot/windows-server/networking/disable-stealth-mode). +To disable stealth-mode, see [Disable stealth mode in Windows](https://docs.microsoft.com/troubleshoot/windows-server/networking/disable-stealth-mode). -**UWP Default** +**UWP default** -Network drops from Universal Windows Platform (UWP) Default Inbound/Outbound block filters are often caused by the UWP app not being configured correctly (i.e. the UWP app is missing the correct capability tokens or loopback is not enabled) or the private range is configured incorrectly. +Network drops from Universal Windows Platform (UWP) default inbound/outbound block filters are often caused by the UWP app not being configured correctly (i.e. the UWP app is missing the correct capability tokens or loopback is not enabled) or the private range is configured incorrectly. For more information on how to debug drops caused by UWP default block filters, see [Troubleshooting UWP App Connectivity Issues](https://docs.microsoft.com/windows/security/threat-protection/windows-firewall/troubleshooting-uwp-firewall). -**WSH Default** +**WSH default** Network drops from Windows Service Hardening (WSH) default filters indicate that there wasn’t an explicit Windows Service Hardening allow rule to allow network traffic for the protected service. The service owner will need to configure allow rules for the service if the block is not expected. From e18b035f23063077024c946f0fb892ac7a465410 Mon Sep 17 00:00:00 2001 From: Benny Shilpa Date: Thu, 3 Dec 2020 11:31:48 +0530 Subject: [PATCH 061/486] Update filter-origin-documentation.md --- .../windows-firewall/filter-origin-documentation.md | 4 ++-- 1 file changed, 2 insertions(+), 2 deletions(-) diff --git a/windows/security/threat-protection/windows-firewall/filter-origin-documentation.md b/windows/security/threat-protection/windows-firewall/filter-origin-documentation.md index 2d813af334..28be4c5d70 100644 --- a/windows/security/threat-protection/windows-firewall/filter-origin-documentation.md +++ b/windows/security/threat-protection/windows-firewall/filter-origin-documentation.md @@ -1,6 +1,6 @@ --- -title: Filter Origin (Audit Log Improvements) -description: Filter Origin Documentation (Audit Log Improvements) +title: Filter origin audit log improvements +description: Filter origin documentation audit log improvements ms.reviewer: ms.author: v-bshilpa ms.prod: w10 From 47418abb63ee1aaa61e23c80d7e689cc1656a185 Mon Sep 17 00:00:00 2001 From: Benny Shilpa Date: Thu, 3 Dec 2020 11:50:21 +0530 Subject: [PATCH 062/486] Update quarantine.md --- .../windows-firewall/quarantine.md | 50 +++++++++---------- 1 file changed, 25 insertions(+), 25 deletions(-) diff --git a/windows/security/threat-protection/windows-firewall/quarantine.md b/windows/security/threat-protection/windows-firewall/quarantine.md index 7ebe7fac5b..6e13094d17 100644 --- a/windows/security/threat-protection/windows-firewall/quarantine.md +++ b/windows/security/threat-protection/windows-firewall/quarantine.md @@ -1,5 +1,5 @@ --- -title: Quarantine Behavior +title: Quarantine behavior description: Quarantine behavior is explained in detail. ms.author: v-bshilpa author: Benny-54 @@ -17,27 +17,27 @@ ms.topic: conceptual ms.date: 11/17/2020 --- -# Quarantine Behavior +# Quarantine behavior One of the security challenges that network admins face is configuring a machine properly after a network change. Network changes can happen frequently. Additionally, the operations required to re-categorize the network after a change and apply the correct security policies on a machine are non-trivial and may require considerable CPU time. This is especially true for machines that are part of the domain. In the past, the delay in applying security policies during network re-categorization has been successfully exploited for vulnerabilities. -To counter this potential exploitation, Windows Firewall will "quarantine" an interface until the system has successfully re-categorized the network and Windows Filtering Platform (WFP) has the correct filters applied for the updated interface configuration. During quarantine, all new inbound connections without exceptions are blocked to the machine. +To counter this potential exploitation, Windows Firewall will quarantine an interface until the system has successfully re-categorized the network and Windows Filtering Platform (WFP) has the correct filters applied for the updated interface configuration. During quarantine, all new inbound connections without exceptions are blocked to the machine. While the quarantine feature has long been a part of Windows Firewall, the feature’s behavior has often caused confusion for customers unaware of quarantine and its motivations. Ultimately, the goal of this document is to describe the quarantine feature at a high level and help network admins understand why the application traffic is sometimes blocked by quarantine. -## Quarantine Filters +## Quarantine filters The quarantine feature creates filters which can be split into three categories: -1. Quarantine Default Inbound Block Filter +1. Quarantine default inbound block filter -2. Quarantine Default Exception Filters +2. Quarantine default exception filters -3. Interface Un-quarantine Filters +3. Interface un-quarantine filters These filters are added in the FWPM_SUBLAYER_MPSSVC_QUARANTINE sublayer and these layers are: @@ -54,37 +54,37 @@ These filters are added in the FWPM_SUBLAYER_MPSSVC_QUARANTINE sublayer and thes For more information about WFP layers and sublayers, see [WFP Operation](https://docs.microsoft.com/windows/win32/fwp/basic-operation). -### Quarantine Default Inbound Block Filter +### Quarantine default inbound block filter -The Quarantine Default Inbound Block filter effectively blocks any new non-loopback inbound connections if the packet is not explicitly permitted by another filter in the quarantine sublayer. +The quarantine default inbound block filter effectively blocks any new non-loopback inbound connections if the packet is not explicitly permitted by another filter in the quarantine sublayer. -### Quarantine Default Exception Filters +### Quarantine default exception filters -When the interface is in quarantine state, the Quarantine Default Exception filters will permit new inbound connections given that they meet the conditions of an exception filter. One example of the exception filters is the Quarantine Default Inbound Loopback Exception filter. This exception filter allows all loopback packets when the interface is in quarantine state. +When the interface is in quarantine state, the quarantine default exception filters will permit new inbound connections given that they meet the conditions of an exception filter. One example of the exception filters is the quarantine default inbound loopback exception filter. This exception filter allows all loopback packets when the interface is in quarantine state. -### Interface Un-quarantine filter +### Interface un-quarantine filter -The Interface Un-quarantine filters allows all non-loopback packets if the interface is successfully categorized. +The interface un-quarantine filters allows all non-loopback packets if the interface is successfully categorized. -## Quarantine Flow +## Quarantine flow The following describes the general flow of quarantine: 1. There is some change on the current network interface. -2. The Interface Un-quarantine filters will no longer permit new inbound connections. The interface is now in quarantine state. +2. The interface un-quarantine filters will no longer permit new inbound connections. The interface is now in quarantine state. -3. All non-loopback inbound connections are either permitted by Quarantine Default Exception Filters or dropped by the Quarantine Default Inbound Block filter. +3. All non-loopback inbound connections are either permitted by quarantine default exception filters or dropped by the quarantine default inbound block filter. 4. The WFP filters applicable to the old interface state are removed. 5. The WFP filters applicable to the new interface state are added, which include the un-quarantine filters for this interface. These filters are updated to match the interface's current state. -6. The interface has now exited quarantine state as the Interface Un-quarantine filters permit any new non-loopback packets. +6. The interface has now exited quarantine state as the interface un-quarantine filters permit any new non-loopback packets. -## Quarantine Diagnostics +## Quarantine diagnostics -There are two methods of identifying packet drops from the Quarantine Default Inbound Block Filter. +There are two methods of identifying packet drops from the quarantine default inbound block filter. Given that the network connectivity issue is reproducible, diagnostic traces can be collected by running the following in an administrative command prompt: @@ -106,7 +106,7 @@ The characters in the application ID name will be separated by periods: The `netEvent` will have more information about the packet that was dropped including information about its capabilities, the filter that dropped the packet, and much more. -If the filter that dropped that packet was by the Quarantine Default Inbound Block filter, then the drop `netEvent` will have `filterOrigin` as `Quarantine Default`. +If the filter that dropped that packet was by the quarantine default inbound block filter, then the drop `netEvent` will have `filterOrigin` as `Quarantine Default`. The following is a sample `netEvent` with `filterOrigin` as `Quarantine Default`. @@ -195,11 +195,11 @@ To enable Filtering Platform Connection audits, run the following command in an Auditpol /set /category:"System" /SubCategory:"Filtering Platform Connection" /success:enable /failure:enable ``` -Sample Drop Audit with `filterOrigin` as `Quarantine Default`. +Sample drop audit with `filterOrigin` as `Quarantine Default`. -![Quarantine Default](images/quarantine-default1.png) +![Quarantine default](images/quarantine-default1.png) -Once the drop’s filter origin has been identified as the Quarantine Default Inbound Block filter, the interface should be further investigated. To find the relevant interface, use the `InterfaceIndex` value from the `netEvent` or event audit in the following PowerShell command to generate more information about the interface: +Once the drop’s filter origin has been identified as the quarantine default inbound block filter, the interface should be further investigated. To find the relevant interface, use the `InterfaceIndex` value from the `netEvent` or event audit in the following PowerShell command to generate more information about the interface: ```Powershell Get-NetIPInterface –InterfaceIndex @@ -208,8 +208,8 @@ Get-NetIPInterface –InterfaceIndex 5 ![Quarantine Interfaceindex](images/quarantine-interfaceindex1.png) -Using the interface name, Event Viewer can be searched for any interface related changes. +Using the interface name, event viewer can be searched for any interface related changes. To enable more networking audit events, see [Enable IPsec and Windows Firewall Audit Events](https://docs.microsoft.com/previous-versions/windows/it-pro/windows-server-2008-R2-and-2008/cc754714(v=ws.10)?redirectedfrom=MSDN). -Packet drops from the Quarantine Default Inbound Block filter are often transient and do not signify anything more than a network change on the interface. +Packet drops from the quarantine default inbound block filter are often transient and do not signify anything more than a network change on the interface. From 5b63646c69615a416b184bdc1b0a9326cd649384 Mon Sep 17 00:00:00 2001 From: Benny Shilpa Date: Thu, 3 Dec 2020 11:55:31 +0530 Subject: [PATCH 063/486] Update TOC.md --- windows/security/threat-protection/windows-firewall/TOC.md | 4 ++-- 1 file changed, 2 insertions(+), 2 deletions(-) diff --git a/windows/security/threat-protection/windows-firewall/TOC.md b/windows/security/threat-protection/windows-firewall/TOC.md index 55c24da4b7..0995b3cbdd 100644 --- a/windows/security/threat-protection/windows-firewall/TOC.md +++ b/windows/security/threat-protection/windows-firewall/TOC.md @@ -165,8 +165,8 @@ ## [Troubleshooting]() ### [Troubleshooting UWP app connectivity issues in Windows Firewall](troubleshooting-uwp-firewall.md) -### [Filter Origin Documentation](filter-origin-documentation.md) -### [Quarantine Behavior](quarantine.md) +### [Filter origin audit log improvements)](filter-origin-documentation.md) +### [Quarantine behavior](quarantine.md) From 7033ac7932f5c85d6002061c1f5b00aadeb47277 Mon Sep 17 00:00:00 2001 From: Benny Shilpa Date: Thu, 3 Dec 2020 12:05:46 +0530 Subject: [PATCH 064/486] Update firewall-settings-lost-on-upgrade.md --- .../firewall-settings-lost-on-upgrade.md | 14 +++++++------- 1 file changed, 7 insertions(+), 7 deletions(-) diff --git a/windows/security/threat-protection/windows-firewall/firewall-settings-lost-on-upgrade.md b/windows/security/threat-protection/windows-firewall/firewall-settings-lost-on-upgrade.md index 92a3e08580..8948b3b3fe 100644 --- a/windows/security/threat-protection/windows-firewall/firewall-settings-lost-on-upgrade.md +++ b/windows/security/threat-protection/windows-firewall/firewall-settings-lost-on-upgrade.md @@ -1,6 +1,6 @@ --- -title: Firewall Settings Lost on Upgrade -description: Firewall Settings Lost on Upgrade +title: Firewall settings lost on upgrade +description: Firewall settings lost on upgrade ms.reviewer: ms.author: v-bshilpa ms.prod: w10 @@ -15,13 +15,13 @@ ms.collection: ms.topic: troubleshooting --- -# Firewall Settings Lost on Upgrade +# Firewall settings lost on upgrade -This article describes a scenario where previously enabled firewall rules revert to a disabled state after performing a Windows upgrade. +This article describes a scenario where previously enabled Firewall rules revert to a disabled state after performing a Windows upgrade. -## Rule Groups +## Rule groups -Individual built-in firewall rules are categorized within a group. For example, the following individual rules form part of the ‘Remote Desktop’ group. +Individual built-in Firewall rules are categorized within a group. For example, the following individual rules form part of the Remote Desktop group. - Remote Desktop – Shadow (TCP-In) @@ -29,7 +29,7 @@ Individual built-in firewall rules are categorized within a group. For example, - Remote Desktop – User-Mode (UDP-In) -Other examples include the Core Networking, File and Print Sharing, and Network Discovery groups. Admins can filter on individual categories in the firewall interface (wf.msc) by selecting and right-clicking on ‘**Inbound**’ or ‘**Outbound Rules**’ and selecting ‘**Filter by Group**’; or via PowerShell using the `Get-NetFirewallRule` cmdlet with the `-Group` switch. +Other examples include the core networking, file and print sharing, and network discovery groups. Admins can filter on individual categories in the Firewall interface (wf.msc) by selecting and right-clicking on **Inbound** or **Outbound Rules** and selecting **Filter by Group**; or via PowerShell using the `Get-NetFirewallRule` cmdlet with the `-Group` switch. ```Powershell Get-NetFirewallRule -Group From d8a85dd2b752ddf3e0dbffb84600c6af6b7a13c9 Mon Sep 17 00:00:00 2001 From: Benny Shilpa Date: Thu, 3 Dec 2020 12:08:13 +0530 Subject: [PATCH 065/486] Update TOC.md --- windows/security/threat-protection/windows-firewall/TOC.md | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/windows/security/threat-protection/windows-firewall/TOC.md b/windows/security/threat-protection/windows-firewall/TOC.md index 0720ca4cc1..6d788f1ee0 100644 --- a/windows/security/threat-protection/windows-firewall/TOC.md +++ b/windows/security/threat-protection/windows-firewall/TOC.md @@ -165,7 +165,7 @@ ## [Troubleshooting]() ### [Troubleshooting UWP app connectivity issues in Windows Firewall](troubleshooting-uwp-firewall.md) -### [Firewall Settings Lost on Upgrade](firewall-settings-lost-on-upgrade.md) +### [Firewall settings lost on upgrade](firewall-settings-lost-on-upgrade.md) From c0b156672b92c55252aa453bb4ea52acf135b384 Mon Sep 17 00:00:00 2001 From: chblac Date: Mon, 7 Dec 2020 11:37:15 -0800 Subject: [PATCH 066/486] Update bitlocker-csp.md --- windows/client-management/mdm/bitlocker-csp.md | 4 ++-- 1 file changed, 2 insertions(+), 2 deletions(-) diff --git a/windows/client-management/mdm/bitlocker-csp.md b/windows/client-management/mdm/bitlocker-csp.md index 07f3aa7f0f..652a24f8e4 100644 --- a/windows/client-management/mdm/bitlocker-csp.md +++ b/windows/client-management/mdm/bitlocker-csp.md @@ -1126,12 +1126,12 @@ Supported values: |-----|------------| | 0 |The BitLocker policy requires user consent to launch the BitLocker Drive Encryption Wizard to start encryption of the OS volume but the user didn't consent.| | 1 |The encryption method of the OS volume doesn't match the BitLocker policy.| -| 2 |The BitLocker policy requires a TPM protector to protect the OS volume, but a TPM isn't used.| +| 2 |The OS volume is unprotected.| | 3 |The BitLocker policy requires a TPM-only protector for the OS volume, but TPM protection isn't used.| | 4 |The BitLocker policy requires TPM+PIN protection for the OS volume, but a TPM+PIN protector isn't used.| | 5 |The BitLocker policy requires TPM+startup key protection for the OS volume, but a TPM+startup key protector isn't used.| | 6 |The BitLocker policy requires TPM+PIN+startup key protection for the OS volume, but a TPM+PIN+startup key protector isn't used.| -| 7 |The OS volume is unprotected.| +| 7 |The BitLocker policy requires a TPM protector to protect the OS volume, but a TPM isn't used.| | 8 |Recovery key backup failed.| | 9 |A fixed drive is unprotected.| | 10 |The encryption method of the fixed drive doesn't match the BitLocker policy.| From b67aca1f618e292254193280fa1802c953477255 Mon Sep 17 00:00:00 2001 From: Brian Caton Date: Mon, 7 Dec 2020 13:35:35 -0800 Subject: [PATCH 067/486] Update firewall-settings-lost-on-upgrade.md --- .../windows-firewall/firewall-settings-lost-on-upgrade.md | 8 ++++---- 1 file changed, 4 insertions(+), 4 deletions(-) diff --git a/windows/security/threat-protection/windows-firewall/firewall-settings-lost-on-upgrade.md b/windows/security/threat-protection/windows-firewall/firewall-settings-lost-on-upgrade.md index 8948b3b3fe..8a7721f432 100644 --- a/windows/security/threat-protection/windows-firewall/firewall-settings-lost-on-upgrade.md +++ b/windows/security/threat-protection/windows-firewall/firewall-settings-lost-on-upgrade.md @@ -21,7 +21,7 @@ This article describes a scenario where previously enabled Firewall rules revert ## Rule groups -Individual built-in Firewall rules are categorized within a group. For example, the following individual rules form part of the Remote Desktop group. +For organizational purposes, individual built-in Firewall rules are categorized within a group. For example, the following rules form part of the Remote Desktop group. - Remote Desktop – Shadow (TCP-In) @@ -29,7 +29,7 @@ Individual built-in Firewall rules are categorized within a group. For example, - Remote Desktop – User-Mode (UDP-In) -Other examples include the core networking, file and print sharing, and network discovery groups. Admins can filter on individual categories in the Firewall interface (wf.msc) by selecting and right-clicking on **Inbound** or **Outbound Rules** and selecting **Filter by Group**; or via PowerShell using the `Get-NetFirewallRule` cmdlet with the `-Group` switch. +Other group examples include the core networking, file and print sharing, and network discovery. Grouping allows admins to manage sets of similar rules by filtering on categories in the Firewall interface (wf.msc). This is acheived by right-clicking on either **Inbound** or **Outbound Rules** and selecting **Filter by Group**; or via PowerShell using the `Get-NetFirewallRule` cmdlet with the `-Group` switch. ```Powershell Get-NetFirewallRule -Group @@ -38,6 +38,6 @@ Get-NetFirewallRule -Group > [!NOTE] > It is recommended to enable an entire group instead of individual rules if the expectation is that the ruleset is going to be migrated at some point. -It is recommended to enable/disable all rules within a group, as opposed to enabling/disabling just one or two of the individual rules to help avoid unexpected behaviors. For example, while rule groups can be used to organize rules by influence and allows batch rule modifications, they are also used as a way to maintain rule state across a Windows upgrade. Rule groups, as opposed to individual rules, are the unit by which the process determines what should be enabled/disabled when the upgrade is complete. +To avoid unexpected behaviors it is recommended to enable/disable all of the rules within a group, as opposed to just one or two of the individual rules. This is because while rule groups are used to organize rules and allow batch rule modification by type, they also represents the 'unit' by which rule state is maintained across a Windows upgrade. Rule groups, as opposed to individual rules, are the unit by which the update process determines what should be enabled/disabled when the upgrade is complete. -Take the Remote Desktop group example mentioned earlier. It consists of three rules. To ensure that the ruleset is properly maintained once the upgrade is complete, all three rules must be enabled. If only one rule is enabled, the upgrade process will see that two of three rules are disabled and subsequently disable the entire group to maintain an as pristine out-of-the-box configuration as possible. Obviously, in this scenario, this brings the unintended consequence of being unable to establish RDP (Remote Desktop Protocol) connection to the host. +Take the Remote Desktop group example shown above. It consists of three rules. To ensure that the ruleset is properly migrated during an upgrade, all three rules must be enabled. If for example only one rule is enabled, the upgrade process will see that two of three rules are disabled and subsequently disable the entire group in an effort to maintain what it sees as the most pristine out-of-the-box configuration possible. Obviously, this scenario brings with it the unintended consequence of breaking RDP (Remote Desktop Protocol) connectivity to the host. From 5ca4a3adb87afcc87c1aa3941aefd2b6382ead21 Mon Sep 17 00:00:00 2001 From: Brian Caton Date: Mon, 7 Dec 2020 14:34:19 -0800 Subject: [PATCH 068/486] Update firewall-settings-lost-on-upgrade.md --- .../windows-firewall/firewall-settings-lost-on-upgrade.md | 4 ++-- 1 file changed, 2 insertions(+), 2 deletions(-) diff --git a/windows/security/threat-protection/windows-firewall/firewall-settings-lost-on-upgrade.md b/windows/security/threat-protection/windows-firewall/firewall-settings-lost-on-upgrade.md index 8a7721f432..4d978ad0fe 100644 --- a/windows/security/threat-protection/windows-firewall/firewall-settings-lost-on-upgrade.md +++ b/windows/security/threat-protection/windows-firewall/firewall-settings-lost-on-upgrade.md @@ -29,7 +29,7 @@ For organizational purposes, individual built-in Firewall rules are categorized - Remote Desktop – User-Mode (UDP-In) -Other group examples include the core networking, file and print sharing, and network discovery. Grouping allows admins to manage sets of similar rules by filtering on categories in the Firewall interface (wf.msc). This is acheived by right-clicking on either **Inbound** or **Outbound Rules** and selecting **Filter by Group**; or via PowerShell using the `Get-NetFirewallRule` cmdlet with the `-Group` switch. +Other group examples include core networking, file and print sharing, and network discovery. Grouping allows admins to manage sets of similar rules by filtering on categories in the Firewall interface (wf.msc). This is acheived by right-clicking on either **Inbound** or **Outbound Rules** and selecting **Filter by Group**; or via PowerShell using the `Get-NetFirewallRule` cmdlet with the `-Group` switch. ```Powershell Get-NetFirewallRule -Group @@ -38,6 +38,6 @@ Get-NetFirewallRule -Group > [!NOTE] > It is recommended to enable an entire group instead of individual rules if the expectation is that the ruleset is going to be migrated at some point. -To avoid unexpected behaviors it is recommended to enable/disable all of the rules within a group, as opposed to just one or two of the individual rules. This is because while rule groups are used to organize rules and allow batch rule modification by type, they also represents the 'unit' by which rule state is maintained across a Windows upgrade. Rule groups, as opposed to individual rules, are the unit by which the update process determines what should be enabled/disabled when the upgrade is complete. +To avoid unexpected behaviors it is recommended to enable/disable all of the rules within a group as opposed to just one or two of the individual rules. This is because while groups are used to organize rules and allow batch rule modification by type, they also represents the 'unit' by which rule state is maintained across a Windows upgrade. Rule groups, as opposed to individual rules, are the unit by which the update process determines what should be enabled/disabled when the upgrade is complete. Take the Remote Desktop group example shown above. It consists of three rules. To ensure that the ruleset is properly migrated during an upgrade, all three rules must be enabled. If for example only one rule is enabled, the upgrade process will see that two of three rules are disabled and subsequently disable the entire group in an effort to maintain what it sees as the most pristine out-of-the-box configuration possible. Obviously, this scenario brings with it the unintended consequence of breaking RDP (Remote Desktop Protocol) connectivity to the host. From c65538b1cc6fdddb94903fe04e7a95d05f00e095 Mon Sep 17 00:00:00 2001 From: ManikaDhiman Date: Tue, 8 Dec 2020 11:29:25 -0800 Subject: [PATCH 069/486] Added SkyDrive and Explorer policies --- windows/client-management/mdm/TOC.md | 2 + .../mdm/policies-in-policy-csp-admx-backed.md | 6 + .../policy-configuration-service-provider.md | 28 ++ .../mdm/policy-csp-admx-explorer.md | 400 ++++++++++++++++++ .../mdm/policy-csp-admx-skydrive.md | 116 +++++ 5 files changed, 552 insertions(+) create mode 100644 windows/client-management/mdm/policy-csp-admx-explorer.md create mode 100644 windows/client-management/mdm/policy-csp-admx-skydrive.md diff --git a/windows/client-management/mdm/TOC.md b/windows/client-management/mdm/TOC.md index 19328d6086..86bd94db0c 100644 --- a/windows/client-management/mdm/TOC.md +++ b/windows/client-management/mdm/TOC.md @@ -193,6 +193,7 @@ #### [ADMX_DWM](policy-csp-admx-dwm.md) #### [ADMX_EncryptFilesonMove](policy-csp-admx-encryptfilesonmove.md) #### [ADMX_EventForwarding](policy-csp-admx-eventforwarding.md) +#### [ADMX_Explorer](policy-csp-admx-explorer.md) #### [ADMX_FileServerVSSProvider](policy-csp-admx-fileservervssprovider.md) #### [ADMX_FileSys](policy-csp-admx-filesys.md) #### [ADMX_FolderRedirection](policy-csp-admx-folderredirection.md) @@ -221,6 +222,7 @@ #### [ADMX_SharedFolders](policy-csp-admx-sharedfolders.md) #### [ADMX_Sharing](policy-csp-admx-sharing.md) #### [ADMX_ShellCommandPromptRegEditTools](policy-csp-admx-shellcommandpromptregedittools.md) +#### [ADMX_SkyDrive](policy-csp-admx-skydrive.md) #### [ADMX_Smartcard](policy-csp-admx-smartcard.md) #### [ADMX_Snmp](policy-csp-admx-snmp.md) #### [ADMX_StartMenu](policy-csp-admx-startmenu.md) diff --git a/windows/client-management/mdm/policies-in-policy-csp-admx-backed.md b/windows/client-management/mdm/policies-in-policy-csp-admx-backed.md index 1f50c812bc..862afe663b 100644 --- a/windows/client-management/mdm/policies-in-policy-csp-admx-backed.md +++ b/windows/client-management/mdm/policies-in-policy-csp-admx-backed.md @@ -142,6 +142,11 @@ ms.date: 10/08/2020 - [ADMX_EncryptFilesonMove/NoEncryptOnMove](./policy-csp-admx-encryptfilesonmove.md#admx-encryptfilesonmove-noencryptonmove) - [ADMX_EventForwarding/ForwarderResourceUsage](./policy-csp-admx-eventforwarding.md#admx_eventforwarding-forwarderresourceusage) - [ADMX_EventForwarding/SubscriptionManager](./policy-csp-admx-eventforwarding.md#admx_eventforwarding-subscriptionmanager) +- [ADMX_Explorer/AdminInfoUrl](./policy-csp-admx-explorer.md#admx-explorer-admininfourl) +- [ADMX_Explorer/AlwaysShowClassicMenu](./policy-csp-admx-explorer.md#admx-explorer-alwaysshowclassicmenu) +- [ADMX_Explorer/DisableRoamedProfileInit](./policy-csp-admx-explorer.md#admx-explorer-disableroamedprofileinit) +- [ADMX_Explorer/PreventItemCreationInUsersFilesFolder](./policy-csp-admx-explorer.md#admx-explorer-preventitemcreationinusersfilesfolder) +- [ADMX_Explorer/TurnOffSPIAnimations](./policy-csp-admx-explorer.md#admx-explorer-turnoffspianimations) - [ADMX_FileServerVSSProvider/Pol_EncryptProtocol](./policy-csp-admx-fileservervssprovider.md#admx-fileservervssprovider-pol-encryptprotocol) - [ADMX_FileSys/DisableCompression](./policy-csp-admx-filesys.md#admx-filesys-disablecompression) - [ADMX_FileSys/DisableDeleteNotification](./policy-csp-admx-filesys.md#admx-filesys-disabledeletenotification) @@ -461,6 +466,7 @@ ms.date: 10/08/2020 - [ADMX_ShellCommandPromptRegEditTools/DisableRegedit](./policy-csp-admx-shellcommandpromptregedittools.md#admx-shellcommandpromptregedittools-disableregedit) - [ADMX_ShellCommandPromptRegEditTools/DisallowApps](./policy-csp-admx-shellcommandpromptregedittools.md#admx-shellcommandpromptregedittools-disallowapps) - [ADMX_ShellCommandPromptRegEditTools/RestrictApps](./policy-csp-admx-shellcommandpromptregedittools.md#admx-shellcommandpromptregedittools-disablecmd) +- [ADMX_SkyDrive/PreventNetworkTrafficPreUserSignIn](./policy-csp-admx-skydrive.md#admx-skydrive-preventnetworktrafficpreusersignin) - [ADMX_Smartcard/AllowCertificatesWithNoEKU](./policy-csp-admx-smartcard.md#admx-smartcard-allowcertificateswithnoeku) - [ADMX_Smartcard/AllowIntegratedUnblock](./policy-csp-admx-smartcard.md#admx-smartcard-allowintegratedunblock) - [ADMX_Smartcard/AllowSignatureOnlyKeys](./policy-csp-admx-smartcard.md#admx-smartcard-allowsignatureonlykeys) diff --git a/windows/client-management/mdm/policy-configuration-service-provider.md b/windows/client-management/mdm/policy-configuration-service-provider.md index 99fad505b6..9c50187fd7 100644 --- a/windows/client-management/mdm/policy-configuration-service-provider.md +++ b/windows/client-management/mdm/policy-configuration-service-provider.md @@ -633,6 +633,26 @@ The following diagram shows the Policy configuration service provider in tree fo +### ADMX_Explorer policies + +
    +
    + ADMX_Explorer/AdminInfoUrl +
    +
    + ADMX_Explorer/AlwaysShowClassicMenu +
    +
    + ADMX_Explorer/DisableRoamedProfileInit +
    +
    + ADMX_Explorer/PreventItemCreationInUsersFilesFolder +
    +
    + ADMX_Explorer/TurnOffSPIAnimations +
    +
    + ### ADMX_FileServerVSSProvider policies
    @@ -1717,6 +1737,14 @@ The following diagram shows the Policy configuration service provider in tree fo
    +### ADMX_SkyDrive policies + +
    +
    + ADMX_SkyDrive/PreventNetworkTrafficPreUserSignIn +
    +
    + ### ADMX_Smartcard policies
    diff --git a/windows/client-management/mdm/policy-csp-admx-explorer.md b/windows/client-management/mdm/policy-csp-admx-explorer.md new file mode 100644 index 0000000000..31c5d764fb --- /dev/null +++ b/windows/client-management/mdm/policy-csp-admx-explorer.md @@ -0,0 +1,400 @@ +--- +title: Policy CSP - ADMX_Explorer +description: Policy CSP - ADMX_Explorer +ms.author: dansimp +ms.localizationpriority: medium +ms.topic: article +ms.prod: w10 +ms.technology: windows +author: manikadhiman +ms.date: 12/08/2020 +ms.reviewer: +manager: dansimp +--- + +# Policy CSP - ADMX_Explorer +> [!WARNING] +> Some information relates to prereleased products, which may be substantially modified before it's commercially released. Microsoft makes no warranties, expressed or implied, concerning the information provided here. + +
    + + +## ADMX_Explorer policies + +
    +
    + ADMX_Explorer/AdminInfoUrl +
    +
    + ADMX_Explorer/AlwaysShowClassicMenu +
    +
    + ADMX_Explorer/DisableRoamedProfileInit +
    +
    + ADMX_Explorer/PreventItemCreationInUsersFilesFolder +
    +
    + ADMX_Explorer/TurnOffSPIAnimations +
    +
    + + +
    + + +**ADMX_Explorer/AdminInfoUrl** + + +
    Windows 10, version 2004:
    Administrative Templates\Windows Components\Windows Defender SmartScreen\Explorer\Configure App Install Control    		 Windows 10, version 1703:
    Administrative Templates\Windows Components\Windows Defender SmartScreen\Explorer\Configure App Install Control    		Windows 10, version 1703This policy setting is intended to prevent malicious content from affecting your user's devices when downloading executable content from the internet.

    This setting does not protect against malicious content from USB devices, network shares, or other non-internet sources.

    Important: Using a trustworthy browser helps ensure that these protections work as expected.
    + + + + + + + + + + + + + + + + + + + + + + + + +
    Windows EditionSupported?
    Homecross mark
    Procross mark
    Businesscross mark
    Enterprisecheck mark
    Educationcross mark
    + + +

    + + +[Scope](./policy-configuration-service-provider.md#policy-scope): + +> [!div class = "checklist"] +> * Device + +
    + + + +Available in the latest Windows 10 Insider Preview Build. Sets the target of the More Information link that will be displayed when the user attempts to run a program that is blocked by policy. + + +> [!TIP] +> This is an ADMX-backed policy and requires a special SyncML format to enable or disable. For details, see [Understanding ADMX-backed policies](./understanding-admx-backed-policies.md). +> +> You must specify the data type in the SyncML as <Format>chr</Format>. For an example SyncML, refer to [Enabling a policy](./understanding-admx-backed-policies.md#enabling-a-policy). +> +> The payload of the SyncML must be XML-encoded; for this XML encoding, there are a variety of online encoders that you can use. To avoid encoding the payload, you can use CDATA if your MDM supports it. For more information, see [CDATA Sections](http://www.w3.org/TR/REC-xml/#sec-cdata-sect). + + +ADMX Info: +- GP English name: *Set a support web page link* +- GP name: *AdminInfoUrl* +- GP path: *Windows Components\File Explorer* +- GP ADMX file name: *Explorer.admx* + + + +
    + + +**ADMX_Explorer/AlwaysShowClassicMenu** + + + + + + + + + + + + + + + + + + + + + + + + + + + +
    Windows EditionSupported?
    Homecross mark
    Procross mark
    Businesscross mark
    Enterprisecheck mark
    Educationcross mark
    + + +
    + + +[Scope](./policy-configuration-service-provider.md#policy-scope): + +> [!div class = "checklist"] +> * User + +
    + + + +Available in the latest Windows 10 Insider Preview Build. This policy setting configures File Explorer to always display the menu bar. + +> [!NOTE] +> By default, the menu bar is not displayed in File Explorer. + +If you enable this policy setting, the menu bar will be displayed in File Explorer. + +If you disable or do not configure this policy setting, the menu bar will not be displayed in File Explorer. + +> [!NOTE] +> When the menu bar is not displayed, users can access the menu bar by pressing the 'ALT' key. + + +> [!TIP] +> This is an ADMX-backed policy and requires a special SyncML format to enable or disable. For details, see [Understanding ADMX-backed policies](./understanding-admx-backed-policies.md). +> +> You must specify the data type in the SyncML as <Format>chr</Format>. For an example SyncML, refer to [Enabling a policy](./understanding-admx-backed-policies.md#enabling-a-policy). +> +> The payload of the SyncML must be XML-encoded; for this XML encoding, there are a variety of online encoders that you can use. To avoid encoding the payload, you can use CDATA if your MDM supports it. For more information, see [CDATA Sections](http://www.w3.org/TR/REC-xml/#sec-cdata-sect). + + +ADMX Info: +- GP English name: *Display the menu bar in File Explorer* +- GP name: *AlwaysShowClassicMenu* +- GP path: *Windows Components\File Explorer* +- GP ADMX file name: *Explorer.admx* + + + +
    + + +**ADMX_Explorer/DisableRoamedProfileInit** + + + + + + + + + + + + + + + + + + + + + + + + + + + +
    Windows EditionSupported?
    Homecross mark
    Procross mark
    Businesscross mark
    Enterprisecheck mark
    Educationcross mark
    + + +
    + + +[Scope](./policy-configuration-service-provider.md#policy-scope): + +> [!div class = "checklist"] +> * Device + +
    + + + +Available in the latest Windows 10 Insider Preview Build. This policy setting allows administrators who have configured roaming profile in conjunction with Delete Cached Roaming Profile Group Policy setting to ensure that Explorer will not reinitialize default program associations and other settings to default values. + +If you enable this policy setting on a machine that does not contain all programs installed in the same manner as it was on the machine on which the user had last logged on, unexpected behavior could occur. + + +> [!TIP] +> This is an ADMX-backed policy and requires a special SyncML format to enable or disable. For details, see [Understanding ADMX-backed policies](./understanding-admx-backed-policies.md). +> +> You must specify the data type in the SyncML as <Format>chr</Format>. For an example SyncML, refer to [Enabling a policy](./understanding-admx-backed-policies.md#enabling-a-policy). +> +> The payload of the SyncML must be XML-encoded; for this XML encoding, there are a variety of online encoders that you can use. To avoid encoding the payload, you can use CDATA if your MDM supports it. For more information, see [CDATA Sections](http://www.w3.org/TR/REC-xml/#sec-cdata-sect). + + +ADMX Info: +- GP English name: *Do not reinitialize a pre-existing roamed user profile when it is loaded on a machine for the first time* +- GP name: *DisableRoamedProfileInit* +- GP path: *Windows Components\File Explorer* +- GP ADMX file name: *Explorer.admx* + + + +
    + + +**ADMX_Explorer/PreventItemCreationInUsersFilesFolder** + + + + + + + + + + + + + + + + + + + + + + + + + + + +
    Windows EditionSupported?
    Homecross mark
    Procross mark
    Businesscross mark
    Enterprisecheck mark
    Educationcross mark
    + + +
    + + +[Scope](./policy-configuration-service-provider.md#policy-scope): + +> [!div class = "checklist"] +> * User + +
    + + + +Available in the latest Windows 10 Insider Preview Build. This policy setting allows administrators to prevent users from adding new items such as files or folders to the root of their Users Files folder in File Explorer. + +If you enable this policy setting, users will no longer be able to add new items such as files or folders to the root of their Users Files folder in File Explorer. + +If you disable or do not configure this policy setting, users will be able to add new items such as files or folders to the root of their Users Files folder in File Explorer. + +> [!NOTE] +> Enabling this policy setting does not prevent the user from being able to add new items such as files and folders to their actual file system profile folder at %userprofile%. + + +> [!TIP] +> This is an ADMX-backed policy and requires a special SyncML format to enable or disable. For details, see [Understanding ADMX-backed policies](./understanding-admx-backed-policies.md). +> +> You must specify the data type in the SyncML as <Format>chr</Format>. For an example SyncML, refer to [Enabling a policy](./understanding-admx-backed-policies.md#enabling-a-policy). +> +> The payload of the SyncML must be XML-encoded; for this XML encoding, there are a variety of online encoders that you can use. To avoid encoding the payload, you can use CDATA if your MDM supports it. For more information, see [CDATA Sections](http://www.w3.org/TR/REC-xml/#sec-cdata-sect). + + +ADMX Info: +- GP English name: *Prevent users from adding files to the root of their Users Files folder.* +- GP name: *PreventItemCreationInUsersFilesFolder* +- GP path: *Windows Components\File Explorer* +- GP ADMX file name: *Explorer.admx* + + + +
    + + +**ADMX_Explorer/TurnOffSPIAnimations** + + + + + + + + + + + + + + + + + + + + + + + + + + + +
    Windows EditionSupported?
    Homecross mark
    Procross mark
    Businesscross mark
    Enterprisecheck mark
    Educationcross mark
    + + +
    + + +[Scope](./policy-configuration-service-provider.md#policy-scope): + +> [!div class = "checklist"] +> * User + +
    + + + +Available in the latest Windows 10 Insider Preview Build. This policy is similar to settings directly available to computer users. Disabling animations can improve usability for users with some visual disabilities as well as improving performance and battery life in some scenarios. + + +> [!TIP] +> This is an ADMX-backed policy and requires a special SyncML format to enable or disable. For details, see [Understanding ADMX-backed policies](./understanding-admx-backed-policies.md). +> +> You must specify the data type in the SyncML as <Format>chr</Format>. For an example SyncML, refer to [Enabling a policy](./understanding-admx-backed-policies.md#enabling-a-policy). +> +> The payload of the SyncML must be XML-encoded; for this XML encoding, there are a variety of online encoders that you can use. To avoid encoding the payload, you can use CDATA if your MDM supports it. For more information, see [CDATA Sections](http://www.w3.org/TR/REC-xml/#sec-cdata-sect). + + +ADMX Info: +- GP English name: *Turn off common control and window animations* +- GP name: *TurnOffSPIAnimations* +- GP path: *Windows Components\File Explorer* +- GP ADMX file name: *Explorer.admx* + + + +
    + +Footnotes: + +- 1 - Available in Windows 10, version 1607. +- 2 - Available in Windows 10, version 1703. +- 3 - Available in Windows 10, version 1709. +- 4 - Available in Windows 10, version 1803. +- 5 - Available in Windows 10, version 1809. +- 6 - Available in Windows 10, version 1903. +- 7 - Available in Windows 10, version 1909. +- 8 - Available in Windows 10, version 2004. + + \ No newline at end of file diff --git a/windows/client-management/mdm/policy-csp-admx-skydrive.md b/windows/client-management/mdm/policy-csp-admx-skydrive.md new file mode 100644 index 0000000000..5580f6e4e4 --- /dev/null +++ b/windows/client-management/mdm/policy-csp-admx-skydrive.md @@ -0,0 +1,116 @@ +--- +title: Policy CSP - ADMX_SkyDrive +description: Policy CSP - ADMX_SkyDrive +ms.author: dansimp +ms.localizationpriority: medium +ms.topic: article +ms.prod: w10 +ms.technology: windows +author: manikadhiman +ms.date: 12/08/2020 +ms.reviewer: +manager: dansimp +--- + +# Policy CSP - ADMX_SkyDrive +> [!WARNING] +> Some information relates to prereleased products, which may be substantially modified before it's commercially released. Microsoft makes no warranties, expressed or implied, concerning the information provided here. + +
    + + +## ADMX_SkyDrive policies + +
    +
    + ADMX_SkyDrive/PreventNetworkTrafficPreUserSignIn +
    +
    + + +
    + + +**ADMX_SkyDrive/PreventNetworkTrafficPreUserSignIn** + + + + + + + + + + + + + + + + + + + + + + + + + + + +
    Windows EditionSupported?
    Homecross mark
    Procross mark
    Businesscross mark
    Enterprisecheck mark
    Educationcross mark
    + + +
    + + +[Scope](./policy-configuration-service-provider.md#policy-scope): + +> [!div class = "checklist"] +> * Device + +
    + + + +Available in the latest Windows 10 Insider Preview Build. Enable this setting to prevent the OneDrive sync client (OneDrive.exe) from generating network traffic (checking for updates, etc.) until the user signs in to OneDrive or starts syncing files to the local computer. + +If you enable this setting, users must sign in to the OneDrive sync client on the local computer, or select to sync OneDrive or SharePoint files on the computer, for the sync client to start automatically. + +If this setting is not enabled, the OneDrive sync client will start automatically when users sign in to Windows. + +If you enable or disable this setting, do not return the setting to Not Configured. Doing so will not change the configuration and the last configured setting will remain in effect. + + +> [!TIP] +> This is an ADMX-backed policy and requires a special SyncML format to enable or disable. For details, see [Understanding ADMX-backed policies](./understanding-admx-backed-policies.md). +> +> You must specify the data type in the SyncML as <Format>chr</Format>. For an example SyncML, refer to [Enabling a policy](./understanding-admx-backed-policies.md#enabling-a-policy). +> +> The payload of the SyncML must be XML-encoded; for this XML encoding, there are a variety of online encoders that you can use. To avoid encoding the payload, you can use CDATA if your MDM supports it. For more information, see [CDATA Sections](http://www.w3.org/TR/REC-xml/#sec-cdata-sect). + + +ADMX Info: +- GP English name: *Prevent OneDrive from generating network traffic until the user signs in to OneDrive* +- GP name: *PreventNetworkTrafficPreUserSignIn* +- GP path: *Windows Components\OneDrive* +- GP ADMX file name: *SkyDrive.admx* + + + +
    + +Footnotes: + +- 1 - Available in Windows 10, version 1607. +- 2 - Available in Windows 10, version 1703. +- 3 - Available in Windows 10, version 1709. +- 4 - Available in Windows 10, version 1803. +- 5 - Available in Windows 10, version 1809. +- 6 - Available in Windows 10, version 1903. +- 7 - Available in Windows 10, version 1909. +- 8 - Available in Windows 10, version 2004. + + + From 2c7249b47e5711800c79f1a88b12498c33af251a Mon Sep 17 00:00:00 2001 From: ManikaDhiman Date: Tue, 8 Dec 2020 14:02:31 -0800 Subject: [PATCH 070/486] Added LanmanWorkstation policies --- windows/client-management/mdm/TOC.md | 1 + .../mdm/policies-in-policy-csp-admx-backed.md | 3 + .../policy-configuration-service-provider.md | 14 + .../mdm/policy-csp-admx-lanmanworkstation.md | 279 ++++++++++++++++++ 4 files changed, 297 insertions(+) create mode 100644 windows/client-management/mdm/policy-csp-admx-lanmanworkstation.md diff --git a/windows/client-management/mdm/TOC.md b/windows/client-management/mdm/TOC.md index 86bd94db0c..631c73eec2 100644 --- a/windows/client-management/mdm/TOC.md +++ b/windows/client-management/mdm/TOC.md @@ -201,6 +201,7 @@ #### [ADMX_HelpAndSupport](policy-csp-admx-helpandsupport.md) #### [ADMX_kdc](policy-csp-admx-kdc.md) #### [ADMX_LanmanServer](policy-csp-admx-lanmanserver.md) +#### [ADMX_LanmanWorkstation](policy-csp-admx-lanmanworkstation.md) #### [ADMX_LinkLayerTopologyDiscovery](policy-csp-admx-linklayertopologydiscovery.md) #### [ADMX_MMC](policy-csp-admx-mmc.md) #### [ADMX_MMCSnapins](policy-csp-admx-mmcsnapins.md) diff --git a/windows/client-management/mdm/policies-in-policy-csp-admx-backed.md b/windows/client-management/mdm/policies-in-policy-csp-admx-backed.md index 862afe663b..b834641841 100644 --- a/windows/client-management/mdm/policies-in-policy-csp-admx-backed.md +++ b/windows/client-management/mdm/policies-in-policy-csp-admx-backed.md @@ -181,6 +181,9 @@ ms.date: 10/08/2020 - [ADMX_LanmanServer/Pol_HashPublication](./policy-csp-admx-lanmanserver.md#admx-lanmanserver-pol-hashpublication) - [ADMX_LanmanServer/Pol_HashSupportVersion](./policy-csp-admx-lanmanserver.md#admx-lanmanserver-pol-hashsupportversion) - [ADMX_LanmanServer/Pol_HonorCipherSuiteOrder](./policy-csp-admx-lanmanserver.md#admx-lanmanserver-pol-honorciphersuiteorder) +- [ADMX_LanmanWorkstation/Pol_CipherSuiteOrder](./policy-csp-admx-lanmanworkstation.md#admx-lanmanworkstation-pol-ciphersuiteorder) +- [ADMX_LanmanWorkstation/Pol_EnableHandleCachingForCAFiles](./policy-csp-admx-lanmanworkstation.md#admx-lanmanworkstation-pol-enablehandlecachingforcafiles) +- [ADMX_LanmanWorkstation/Pol_EnableOfflineFilesforCAShares](./policy-csp-admx-lanmanworkstation.md#admx-lanmanworkstation-pol-enableofflinefilesforcashares) - [ADMX_LinkLayerTopologyDiscovery/LLTD_EnableLLTDIO](./policy-csp-admx-linklayertopologydiscovery.md#admx-linklayertopologydiscovery-lltd-enablelltdio) - [ADMX_LinkLayerTopologyDiscovery/LLTD_EnableRspndr](./policy-csp-admx-linklayertopologydiscovery.md#admx-linklayertopologydiscovery-lltd-enablerspndr) - [ADMX_MMC/MMC_ActiveXControl](./policy-csp-admx-mmc.md#admx-mmc-mmc-activexcontrol) diff --git a/windows/client-management/mdm/policy-configuration-service-provider.md b/windows/client-management/mdm/policy-configuration-service-provider.md index 9c50187fd7..1bec41f8c4 100644 --- a/windows/client-management/mdm/policy-configuration-service-provider.md +++ b/windows/client-management/mdm/policy-configuration-service-provider.md @@ -783,6 +783,20 @@ The following diagram shows the Policy configuration service provider in tree fo +### ADMX_LanmanWorkstation policies + +
    +
    + ADMX_LanmanWorkstation/Pol_CipherSuiteOrder +
    +
    + ADMX_LanmanWorkstation/Pol_EnableHandleCachingForCAFiles +
    +
    + ADMX_LanmanWorkstation/Pol_EnableOfflineFilesforCAShares +
    +
    + ### ADMX_LinkLayerTopologyDiscovery policies
    diff --git a/windows/client-management/mdm/policy-csp-admx-lanmanworkstation.md b/windows/client-management/mdm/policy-csp-admx-lanmanworkstation.md new file mode 100644 index 0000000000..5a9ce576f9 --- /dev/null +++ b/windows/client-management/mdm/policy-csp-admx-lanmanworkstation.md @@ -0,0 +1,279 @@ +--- +title: Policy CSP - ADMX_LanmanWorkstation +description: Policy CSP - ADMX_LanmanWorkstation +ms.author: dansimp +ms.localizationpriority: medium +ms.topic: article +ms.prod: w10 +ms.technology: windows +author: manikadhiman +ms.date: 12/08/2020 +ms.reviewer: +manager: dansimp +--- + +# Policy CSP - ADMX_LanmanWorkstation +> [!WARNING] +> Some information relates to prereleased products, which may be substantially modified before it's commercially released. Microsoft makes no warranties, expressed or implied, concerning the information provided here. + +
    + + +## ADMX_LanmanWorkstation policies + +
    +
    + ADMX_LanmanWorkstation/Pol_CipherSuiteOrder +
    +
    + ADMX_LanmanWorkstation/Pol_EnableHandleCachingForCAFiles +
    +
    + ADMX_LanmanWorkstation/Pol_EnableOfflineFilesforCAShares +
    +
    + + +
    + + +**ADMX_LanmanWorkstation/Pol_CipherSuiteOrder** + + + + + + + + + + + + + + + + + + + + + + + + + + + +
    Windows EditionSupported?
    Homecross mark
    Procross mark
    Businesscross mark
    Enterprisecheck mark
    Educationcross mark
    + + +
    + + +[Scope](./policy-configuration-service-provider.md#policy-scope): + +> [!div class = "checklist"] +> * Device + +
    + + + +Available in the latest Windows 10 Insider Preview Build. This policy setting determines the cipher suites used by the SMB client. + +If you enable this policy setting, cipher suites are prioritized in the order specified. + +If you enable this policy setting and do not specify at least one supported cipher suite, or if you disable or do not configure this policy setting, the default cipher suite order is used. + +SMB 3.11 cipher suites: + +- AES_128_GCM +- AES_128_CCM + +SMB 3.0 and 3.02 cipher suites: + +- AES_128_CCM + +How to modify this setting: + +Arrange the desired cipher suites in the edit box, one cipher suite per line, in order from most to least preferred, with the most preferred cipher suite at the top. Remove any cipher suites you don't want to use. + +> [!NOTE] +> When configuring this security setting, changes will not take effect until you restart Windows. + + +> [!TIP] +> This is an ADMX-backed policy and requires a special SyncML format to enable or disable. For details, see [Understanding ADMX-backed policies](./understanding-admx-backed-policies.md). +> +> You must specify the data type in the SyncML as <Format>chr</Format>. For an example SyncML, refer to [Enabling a policy](./understanding-admx-backed-policies.md#enabling-a-policy). +> +> The payload of the SyncML must be XML-encoded; for this XML encoding, there are a variety of online encoders that you can use. To avoid encoding the payload, you can use CDATA if your MDM supports it. For more information, see [CDATA Sections](http://www.w3.org/TR/REC-xml/#sec-cdata-sect). + + +ADMX Info: +- GP English name: *Cipher suite order* +- GP name: *Pol_CipherSuiteOrder* +- GP path: *Network\Lanman Workstation* +- GP ADMX file name: *LanmanWorkstation.admx* + + + +
    + + +**ADMX_LanmanWorkstation/Pol_EnableHandleCachingForCAFiles** + + + + + + + + + + + + + + + + + + + + + + + + + + + +
    Windows EditionSupported?
    Homecross mark
    Procross mark
    Businesscross mark
    Enterprisecheck mark
    Educationcross mark
    + + +
    + + +[Scope](./policy-configuration-service-provider.md#policy-scope): + +> [!div class = "checklist"] +> * Device + +
    + + + +Available in the latest Windows 10 Insider Preview Build. This policy setting determines the behavior of SMB handle caching for clients connecting to an SMB share where the Continuous Availability (CA) flag is enabled. + +If you enable this policy setting, the SMB client will allow cached handles to files on CA shares. This may lead to better performance when repeatedly accessing a large number of unstructured data files on CA shares running in Microsoft Azure Files. + +If you disable or do not configure this policy setting, Windows will prevent use of cached handles to files opened through CA shares. + +> [!NOTE] +> This policy has no effect when connecting Scale-out File Server shares provided by a Windows Server. Microsoft does not recommend enabling this policy for clients that routinely connect to files hosted on a Windows Failover Cluster with the File Server for General Use role, as it can lead to adverse failover times and increased memory and CPU usage. + + +> [!TIP] +> This is an ADMX-backed policy and requires a special SyncML format to enable or disable. For details, see [Understanding ADMX-backed policies](./understanding-admx-backed-policies.md). +> +> You must specify the data type in the SyncML as <Format>chr</Format>. For an example SyncML, refer to [Enabling a policy](./understanding-admx-backed-policies.md#enabling-a-policy). +> +> The payload of the SyncML must be XML-encoded; for this XML encoding, there are a variety of online encoders that you can use. To avoid encoding the payload, you can use CDATA if your MDM supports it. For more information, see [CDATA Sections](http://www.w3.org/TR/REC-xml/#sec-cdata-sect). + + +ADMX Info: +- GP English name: *Handle Caching on Continuous Availability Shares* +- GP name: *Pol_EnableHandleCachingForCAFiles* +- GP path: *Network\Lanman Workstation* +- GP ADMX file name: *LanmanWorkstation.admx* + + + +
    + + +**ADMX_LanmanWorkstation/Pol_EnableOfflineFilesforCAShares** + + + + + + + + + + + + + + + + + + + + + + + + + + + +
    Windows EditionSupported?
    Homecross mark
    Procross mark
    Businesscross mark
    Enterprisecheck mark
    Educationcross mark
    + + +
    + + +[Scope](./policy-configuration-service-provider.md#policy-scope): + +> [!div class = "checklist"] +> * Device + +
    + + + +Available in the latest Windows 10 Insider Preview Build. This policy setting determines the behavior of Offline Files on clients connecting to an SMB share where the Continuous Availability (CA) flag is enabled. + +If you enable this policy setting, the "Always Available offline" option will appear in the File Explorer menu on a Windows computer when connecting to a CA-enabled share. Pinning of files on CA-enabled shares using client-side caching will also be possible. + +If you disable or do not configure this policy setting, Windows will prevent use of Offline Files with CA-enabled shares. + +> [!NOTE] +> Microsoft does not recommend enabling this group policy. Use of CA with Offline Files will lead to very long transition times between the online and offline states. + + +> [!TIP] +> This is an ADMX-backed policy and requires a special SyncML format to enable or disable. For details, see [Understanding ADMX-backed policies](./understanding-admx-backed-policies.md). +> +> You must specify the data type in the SyncML as <Format>chr</Format>. For an example SyncML, refer to [Enabling a policy](./understanding-admx-backed-policies.md#enabling-a-policy). +> +> The payload of the SyncML must be XML-encoded; for this XML encoding, there are a variety of online encoders that you can use. To avoid encoding the payload, you can use CDATA if your MDM supports it. For more information, see [CDATA Sections](http://www.w3.org/TR/REC-xml/#sec-cdata-sect). + + +ADMX Info: +- GP English name: *Offline Files Availability on Continuous Availability Shares* +- GP name: *Pol_EnableOfflineFilesforCAShares* +- GP path: *Network\Lanman Workstation* +- GP ADMX file name: *LanmanWorkstation.admx* + + + +
    + +Footnotes: + +- 1 - Available in Windows 10, version 1607. +- 2 - Available in Windows 10, version 1703. +- 3 - Available in Windows 10, version 1709. +- 4 - Available in Windows 10, version 1803. +- 5 - Available in Windows 10, version 1809. +- 6 - Available in Windows 10, version 1903. +- 7 - Available in Windows 10, version 1909. +- 8 - Available in Windows 10, version 2004. + + \ No newline at end of file From 7b364be416e98bdbd2a7aa13f46c92289cfb9511 Mon Sep 17 00:00:00 2001 From: ManikaDhiman Date: Tue, 8 Dec 2020 15:52:16 -0800 Subject: [PATCH 071/486] Added msched policies --- windows/client-management/mdm/TOC.md | 1 + .../mdm/policies-in-policy-csp-admx-backed.md | 2 + .../policy-configuration-service-provider.md | 11 + .../mdm/policy-csp-admx-lanmanworkstation.md | 5 + .../mdm/policy-csp-admx-msched.md | 191 ++++++++++++++++++ 5 files changed, 210 insertions(+) create mode 100644 windows/client-management/mdm/policy-csp-admx-msched.md diff --git a/windows/client-management/mdm/TOC.md b/windows/client-management/mdm/TOC.md index 631c73eec2..a12ec58d25 100644 --- a/windows/client-management/mdm/TOC.md +++ b/windows/client-management/mdm/TOC.md @@ -206,6 +206,7 @@ #### [ADMX_MMC](policy-csp-admx-mmc.md) #### [ADMX_MMCSnapins](policy-csp-admx-mmcsnapins.md) #### [ADMX_MSAPolicy](policy-csp-admx-msapolicy.md) +#### [ADMX_msched](policy-csp-admx-msched.md) #### [ADMX_nca](policy-csp-admx-nca.md) #### [ADMX_NCSI](policy-csp-admx-ncsi.md) #### [ADMX_Netlogon](policy-csp-admx-netlogon.md) diff --git a/windows/client-management/mdm/policies-in-policy-csp-admx-backed.md b/windows/client-management/mdm/policies-in-policy-csp-admx-backed.md index b834641841..5fb786235b 100644 --- a/windows/client-management/mdm/policies-in-policy-csp-admx-backed.md +++ b/windows/client-management/mdm/policies-in-policy-csp-admx-backed.md @@ -296,6 +296,8 @@ ms.date: 10/08/2020 - [ADMX_MMCSnapins/MMC_WirelessMon](./policy-csp-admx-mmcsnapins.md#admx-mmcsnapins-mmc-wirelessmon) - [ADMX_MMCSnapins/MMC_WirelessNetworkPolicy](./policy-csp-admx-mmcsnapins.md#admx-mmcsnapins-mmc-wirelessnetworkpolicy) - [ADMX_MSAPolicy/IncludeMicrosoftAccount_DisableUserAuthCmdLine](./policy-csp-admx-msapolicy.md#admx-msapolicy-microsoftaccount-disableuserauth) +- [ADMX_msched/ActivationBoundaryPolicy](./policy-csp-admx-msched.md#admx-msched-activationboundarypolicy) +- [ADMX_msched/RandomDelayPolicy](./policy-csp-admx-msched.md#admx-msched-randomdelaypolicy) - [ADMX_nca/CorporateResources](./policy-csp-admx-nca.md#admx-nca-corporateresources) - [ADMX_nca/CustomCommands](./policy-csp-admx-nca.md#admx-nca-customcommands) - [ADMX_nca/DTEs](./policy-csp-admx-nca.md#admx-nca-dtes) diff --git a/windows/client-management/mdm/policy-configuration-service-provider.md b/windows/client-management/mdm/policy-configuration-service-provider.md index 1bec41f8c4..7c2741bcb5 100644 --- a/windows/client-management/mdm/policy-configuration-service-provider.md +++ b/windows/client-management/mdm/policy-configuration-service-provider.md @@ -1150,6 +1150,17 @@ The following diagram shows the Policy configuration service provider in tree fo
    +### ADMX_msched policies + +
    +
    + ADMX_msched/ActivationBoundaryPolicy +
    +
    + ADMX_msched/RandomDelayPolicy +
    +
    + ### ADMX_nca policies
    diff --git a/windows/client-management/mdm/policy-csp-admx-lanmanworkstation.md b/windows/client-management/mdm/policy-csp-admx-lanmanworkstation.md index 5a9ce576f9..a17e77a476 100644 --- a/windows/client-management/mdm/policy-csp-admx-lanmanworkstation.md +++ b/windows/client-management/mdm/policy-csp-admx-lanmanworkstation.md @@ -90,6 +90,11 @@ SMB 3.11 cipher suites: - AES_128_GCM - AES_128_CCM +- AES_256_GCM +- AES_256_CCM + +> [!NOTE] +> AES_256 is not supported on Windows 10 version 20H2 and lower. Additionally, if you enter only AES_256 crypto lines, the older clients will no longer be able to connect. SMB 3.0 and 3.02 cipher suites: diff --git a/windows/client-management/mdm/policy-csp-admx-msched.md b/windows/client-management/mdm/policy-csp-admx-msched.md new file mode 100644 index 0000000000..fc45989368 --- /dev/null +++ b/windows/client-management/mdm/policy-csp-admx-msched.md @@ -0,0 +1,191 @@ +--- +title: Policy CSP - ADMX_msched +description: Policy CSP - ADMX_msched +ms.author: dansimp +ms.localizationpriority: medium +ms.topic: article +ms.prod: w10 +ms.technology: windows +author: manikadhiman +ms.date: 12/08/2020 +ms.reviewer: +manager: dansimp +--- + +# Policy CSP - ADMX_msched +> [!WARNING] +> Some information relates to prereleased products, which may be substantially modified before it's commercially released. Microsoft makes no warranties, expressed or implied, concerning the information provided here. + +
    + + +## ADMX_msched policies + +
    +
    + ADMX_msched/ActivationBoundaryPolicy +
    +
    + ADMX_msched/RandomDelayPolicy +
    +
    + + +
    + + +**ADMX_msched/ActivationBoundaryPolicy** + + + + + + + + + + + + + + + + + + + + + + + + + + + +
    Windows EditionSupported?
    Homecross mark
    Procross mark
    Businesscross mark
    Enterprisecheck mark
    Educationcross mark
    + + +
    + + +[Scope](./policy-configuration-service-provider.md#policy-scope): + +> [!div class = "checklist"] +> * Device + +
    + + + +Available in the latest Windows 10 Insider Preview Build. This policy setting allows you to configure Automatic Maintenance activation boundary. The maintenance activation boundary is the daily scheduled time at which Automatic Maintenance starts. + +If you enable this policy setting, this will override the default daily scheduled time as specified in Security and Maintenance/Automatic Maintenance Control Panel. + +If you disable or do not configure this policy setting, the daily scheduled time as specified in Security and Maintenance/Automatic Maintenance Control Panel will apply. + + +> [!TIP] +> This is an ADMX-backed policy and requires a special SyncML format to enable or disable. For details, see [Understanding ADMX-backed policies](./understanding-admx-backed-policies.md). +> +> You must specify the data type in the SyncML as <Format>chr</Format>. For an example SyncML, refer to [Enabling a policy](./understanding-admx-backed-policies.md#enabling-a-policy). +> +> The payload of the SyncML must be XML-encoded; for this XML encoding, there are a variety of online encoders that you can use. To avoid encoding the payload, you can use CDATA if your MDM supports it. For more information, see [CDATA Sections](http://www.w3.org/TR/REC-xml/#sec-cdata-sect). + + +ADMX Info: +- GP English name: *Automatic Maintenance Activation Boundary* +- GP name: *ActivationBoundaryPolicy* +- GP path: *Windows Components\Maintenance Scheduler* +- GP ADMX file name: *msched.admx* + + + +
    + + +**ADMX_msched/RandomDelayPolicy** + + + + + + + + + + + + + + + + + + + + + + + + + + + +
    Windows EditionSupported?
    Homecross mark
    Procross mark
    Businesscross mark
    Enterprisecheck mark
    Educationcross mark
    + + +
    + + +[Scope](./policy-configuration-service-provider.md#policy-scope): + +> [!div class = "checklist"] +> * Device + +
    + + + +Available in the latest Windows 10 Insider Preview Build. This policy setting allows you to configure Automatic Maintenance activation random delay. + +The maintenance random delay is the amount of time up to which Automatic Maintenance will delay starting from its Activation Boundary. + +If you enable this policy setting, Automatic Maintenance will delay starting from its Activation Boundary, by up to this time. + +If you do not configure this policy setting, 4 hour random delay will be applied to Automatic Maintenance. + +If you disable this policy setting, no random delay will be applied to Automatic Maintenance. + + +> [!TIP] +> This is an ADMX-backed policy and requires a special SyncML format to enable or disable. For details, see [Understanding ADMX-backed policies](./understanding-admx-backed-policies.md). +> +> You must specify the data type in the SyncML as <Format>chr</Format>. For an example SyncML, refer to [Enabling a policy](./understanding-admx-backed-policies.md#enabling-a-policy). +> +> The payload of the SyncML must be XML-encoded; for this XML encoding, there are a variety of online encoders that you can use. To avoid encoding the payload, you can use CDATA if your MDM supports it. For more information, see [CDATA Sections](http://www.w3.org/TR/REC-xml/#sec-cdata-sect). + + +ADMX Info: +- GP English name: *Automatic Maintenance Random Delay* +- GP name: *RandomDelayPolicy* +- GP path: *Windows Components\Maintenance Scheduler* +- GP ADMX file name: *msched.admx* + + + +
    + + +Footnotes: + +- 1 - Available in Windows 10, version 1607. +- 2 - Available in Windows 10, version 1703. +- 3 - Available in Windows 10, version 1709. +- 4 - Available in Windows 10, version 1803. +- 5 - Available in Windows 10, version 1809. +- 6 - Available in Windows 10, version 1903. +- 7 - Available in Windows 10, version 1909. +- 8 - Available in Windows 10, version 2004. + + + From a3c8fe9118ab0835248a404d15cc86cfee3b1e95 Mon Sep 17 00:00:00 2001 From: ManikaDhiman Date: Tue, 8 Dec 2020 16:07:36 -0800 Subject: [PATCH 072/486] Minor text update --- .../client-management/mdm/policy-csp-admx-lanmanworkstation.md | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/windows/client-management/mdm/policy-csp-admx-lanmanworkstation.md b/windows/client-management/mdm/policy-csp-admx-lanmanworkstation.md index a17e77a476..d3c1dfcd54 100644 --- a/windows/client-management/mdm/policy-csp-admx-lanmanworkstation.md +++ b/windows/client-management/mdm/policy-csp-admx-lanmanworkstation.md @@ -94,7 +94,7 @@ SMB 3.11 cipher suites: - AES_256_CCM > [!NOTE] -> AES_256 is not supported on Windows 10 version 20H2 and lower. Additionally, if you enter only AES_256 crypto lines, the older clients will no longer be able to connect. +> AES_256 is not supported on Windows 10 version 20H2 and lower. If you enter only AES_256 crypto lines, the older clients will not be able to connect anymore. SMB 3.0 and 3.02 cipher suites: From eab2698824cdcb936d383e05679727d741fd9e21 Mon Sep 17 00:00:00 2001 From: ManikaDhiman Date: Tue, 8 Dec 2020 16:40:40 -0800 Subject: [PATCH 073/486] Added RPC policies --- windows/client-management/mdm/TOC.md | 1 + .../mdm/policies-in-policy-csp-admx-backed.md | 4 + .../policy-configuration-service-provider.md | 17 + .../mdm/policy-csp-admx-rpc.md | 394 ++++++++++++++++++ 4 files changed, 416 insertions(+) create mode 100644 windows/client-management/mdm/policy-csp-admx-rpc.md diff --git a/windows/client-management/mdm/TOC.md b/windows/client-management/mdm/TOC.md index a12ec58d25..2e828a600c 100644 --- a/windows/client-management/mdm/TOC.md +++ b/windows/client-management/mdm/TOC.md @@ -216,6 +216,7 @@ #### [ADMX_PerformanceDiagnostics](policy-csp-admx-performancediagnostics.md) #### [ADMX_PowerShellExecutionPolicy](policy-csp-admx-powershellexecutionpolicy.md) #### [ADMX_Reliability](policy-csp-admx-reliability.md) +#### [ADMX_RPC](policy-csp-admx-rpc.md) #### [ADMX_Scripts](policy-csp-admx-scripts.md) #### [ADMX_sdiageng](policy-csp-admx-sdiageng.md) #### [ADMX_Securitycenter](policy-csp-admx-securitycenter.md) diff --git a/windows/client-management/mdm/policies-in-policy-csp-admx-backed.md b/windows/client-management/mdm/policies-in-policy-csp-admx-backed.md index 5fb786235b..80ac1e00c1 100644 --- a/windows/client-management/mdm/policies-in-policy-csp-admx-backed.md +++ b/windows/client-management/mdm/policies-in-policy-csp-admx-backed.md @@ -442,6 +442,10 @@ ms.date: 10/08/2020 - [ADMX_Reliability/PCH_ReportShutdownEvents](./policy-csp-admx-reliability.md#admx-reliability-pch-reportshutdownevents) - [ADMX_Reliability/ShutdownEventTrackerStateFile](./policy-csp-admx-reliability.md#admx-reliability-shutdowneventtrackerstatefile) - [ADMX_Reliability/ShutdownReason](./policy-csp-admx-reliability.md#admx-reliability-shutdownreason) +- [ADMX_RPC/RpcExtendedErrorInformation](./policy-csp-admx-rpc.md#admx-rpc-rpcextendederrorinformation) +- [ADMX_RPC/RpcIgnoreDelegationFailure](./policy-csp-admx-rpc.md#admx-rpc-rpcignoredelegationfailure) +- [ADMX_RPC/RpcMinimumHttpConnectionTimeout](./policy-csp-admx-rpc.md#admx-rpc-rpcminimumhttpconnectiontimeout) +- [ADMX_RPC/RpcStateInformation](./policy-csp-admx-rpc.md#admx-rpc-rpcstateinformation) - [ADMX_Scripts/Allow_Logon_Script_NetbiosDisabled](./policy-csp-admx-scripts.md#admx-scripts-allow-logon-script-netbiosdisabled) - [ADMX_Scripts/MaxGPOScriptWaitPolicy](./policy-csp-admx-scripts.md#admx-scripts-maxgposcriptwaitpolicy) - [ADMX_Scripts/Run_Computer_PS_Scripts_First](./policy-csp-admx-scripts.md#admx-scripts-run-computer-ps-scripts-first) diff --git a/windows/client-management/mdm/policy-configuration-service-provider.md b/windows/client-management/mdm/policy-configuration-service-provider.md index 7c2741bcb5..b43c6f5515 100644 --- a/windows/client-management/mdm/policy-configuration-service-provider.md +++ b/windows/client-management/mdm/policy-configuration-service-provider.md @@ -1635,6 +1635,23 @@ The following diagram shows the Policy configuration service provider in tree fo
    +### ADMX_RPC policies + +
    +
    + ADMX_RPC/RpcExtendedErrorInformation +
    +
    + ADMX_RPC/RpcIgnoreDelegationFailure +
    +
    + ADMX_RPC/RpcMinimumHttpConnectionTimeout +
    +
    + ADMX_RPC/RpcStateInformation +
    +
    + ### ADMX_Scripts policies
    diff --git a/windows/client-management/mdm/policy-csp-admx-rpc.md b/windows/client-management/mdm/policy-csp-admx-rpc.md new file mode 100644 index 0000000000..2845ab5077 --- /dev/null +++ b/windows/client-management/mdm/policy-csp-admx-rpc.md @@ -0,0 +1,394 @@ +--- +title: Policy CSP - ADMX_RPC +description: Policy CSP - ADMX_RPC +ms.author: dansimp +ms.localizationpriority: medium +ms.topic: article +ms.prod: w10 +ms.technology: windows +author: manikadhiman +ms.date: 12/08/2020 +ms.reviewer: +manager: dansimp +--- + +# Policy CSP - ADMX_RPC +> [!WARNING] +> Some information relates to prereleased products, which may be substantially modified before it's commercially released. Microsoft makes no warranties, expressed or implied, concerning the information provided here. + +
    + + +## ADMX_RPC policies + +
    +
    + ADMX_RPC/RpcExtendedErrorInformation +
    +
    + ADMX_RPC/RpcIgnoreDelegationFailure +
    +
    + ADMX_RPC/RpcMinimumHttpConnectionTimeout +
    +
    + ADMX_RPC/RpcStateInformation +
    +
    + + +
    + + +**ADMX_RPC/RpcExtendedErrorInformation** + + + + + + + + + + + + + + + + + + + + + + + + + + + +
    Windows EditionSupported?
    Homecross mark
    Procross mark
    Businesscross mark
    Enterprisecheck mark
    Educationcross mark
    + + +
    + + +[Scope](./policy-configuration-service-provider.md#policy-scope): + +> [!div class = "checklist"] +> * Device + +
    + + + +Available in the latest Windows 10 Insider Preview Build. This policy setting controls whether the RPC runtime generates extended error information when an error occurs. + +Extended error information includes the local time that the error occurred, the RPC version, and the name of the computer on which the error occurred, or from which it was propagated. Programs can retrieve the extended error information by using standard Windows application programming interfaces (APIs). + +If you disable this policy setting, the RPC Runtime only generates a status code to indicate an error condition. + +If you do not configure this policy setting, it remains disabled. It will only generate a status code to indicate an error condition. + +If you enable this policy setting, the RPC runtime will generate extended error information. + +You must select an error response type in the drop-down box. + +- "Off" disables all extended error information for all processes. RPC only generates an error code. +- "On with Exceptions" enables extended error information, but lets you disable it for selected processes. To disable extended error information for a process while this policy setting is in effect, the command that starts the process must begin with one of the strings in the Extended Error Information Exception field. +- "Off with Exceptions" disables extended error information, but lets you enable it for selected processes. To enable extended error information for a process while this policy setting is in effect, the command that starts the process must begin with one of the strings in the Extended Error Information Exception field. +- "On" enables extended error information for all processes. + +> [!NOTE] +> For information about the Extended Error Information Exception field, see the Windows Software Development Kit (SDK). +> +> Extended error information is formatted to be compatible with other operating systems and older Microsoft operating systems, but only newer Microsoft operating systems can read and respond to the information. +> +> The default policy setting, "Off," is designed for systems where extended error information is considered to be sensitive, and it should not be made available remotely. +> +> This policy setting will not be applied until the system is rebooted. + + +> [!TIP] +> This is an ADMX-backed policy and requires a special SyncML format to enable or disable. For details, see [Understanding ADMX-backed policies](./understanding-admx-backed-policies.md). +> +> You must specify the data type in the SyncML as <Format>chr</Format>. For an example SyncML, refer to [Enabling a policy](./understanding-admx-backed-policies.md#enabling-a-policy). +> +> The payload of the SyncML must be XML-encoded; for this XML encoding, there are a variety of online encoders that you can use. To avoid encoding the payload, you can use CDATA if your MDM supports it. For more information, see [CDATA Sections](http://www.w3.org/TR/REC-xml/#sec-cdata-sect). + + +ADMX Info: +- GP English name: *Propagate extended error information* +- GP name: *RpcExtendedErrorInformation* +- GP path: *System\Remote Procedure Call* +- GP ADMX file name: *RPC.admx* + + + +
    + +
    + + +**ADMX_RPC/RpcIgnoreDelegationFailure** + + + + + + + + + + + + + + + + + + + + + + + + + + + +
    Windows EditionSupported?
    Homecross mark
    Procross mark
    Businesscross mark
    Enterprisecheck mark
    Educationcross mark
    + + +
    + + +[Scope](./policy-configuration-service-provider.md#policy-scope): + +> [!div class = "checklist"] +> * Device + +
    + + + +Available in the latest Windows 10 Insider Preview Build. This policy setting controls whether the RPC Runtime ignores delegation failures when delegation is requested. + +The constrained delegation model, introduced in Windows Server 2003, does not report that delegation was enabled on a security context when a client connects to a server. Callers of RPC and COM are encouraged to use the RPC_C_QOS_CAPABILITIES_IGNORE_DELEGATE_FAILURE flag, but some applications written for the traditional delegation model prior to Windows Server 2003 may not use this flag and will encounter RPC_S_SEC_PKG_ERROR when connecting to a server that uses constrained delegation. + +If you disable this policy setting, the RPC Runtime will generate RPC_S_SEC_PKG_ERROR errors to applications that ask for delegation and connect to servers using constrained delegation. + +If you do not configure this policy setting, it remains disabled and will generate RPC_S_SEC_PKG_ERROR errors to applications that ask for delegation and connect to servers using constrained delegation. + +If you enable this policy setting, then: + +- "Off" directs the RPC Runtime to generate RPC_S_SEC_PKG_ERROR if the client asks for delegation, but the created security context does not support delegation. + +- "On" directs the RPC Runtime to accept security contexts that do not support delegation even if delegation was asked for. + +> [!NOTE] +> This policy setting will not be applied until the system is rebooted. + + +> [!TIP] +> This is an ADMX-backed policy and requires a special SyncML format to enable or disable. For details, see [Understanding ADMX-backed policies](./understanding-admx-backed-policies.md). +> +> You must specify the data type in the SyncML as <Format>chr</Format>. For an example SyncML, refer to [Enabling a policy](./understanding-admx-backed-policies.md#enabling-a-policy). +> +> The payload of the SyncML must be XML-encoded; for this XML encoding, there are a variety of online encoders that you can use. To avoid encoding the payload, you can use CDATA if your MDM supports it. For more information, see [CDATA Sections](http://www.w3.org/TR/REC-xml/#sec-cdata-sect). + + +ADMX Info: +- GP English name: *Ignore Delegation Failure* +- GP name: *RpcIgnoreDelegationFailure* +- GP path: *System\Remote Procedure Call* +- GP ADMX file name: *RPC.admx* + + + + +
    + + +**ADMX_RPC/RpcMinimumHttpConnectionTimeout** + + + + + + + + + + + + + + + + + + + + + + + + + + + +
    Windows EditionSupported?
    Homecross mark
    Procross mark
    Businesscross mark
    Enterprisecheck mark
    Educationcross mark
    + + +
    + + +[Scope](./policy-configuration-service-provider.md#policy-scope): + +> [!div class = "checklist"] +> * Device + +
    + + + +Available in the latest Windows 10 Insider Preview Build. This policy setting controls the idle connection timeout for RPC/HTTP connections. + +This policy setting is useful in cases where a network agent like an HTTP proxy or a router uses a lower idle connection timeout than the IIS server running the RPC/HTTP proxy. In such cases, RPC/HTTP clients may encounter errors because connections will be timed out faster than expected. Using this policy setting you can force the RPC Runtime and the RPC/HTTP Proxy to use a lower connection timeout. + +This policy setting is only applicable when the RPC Client, the RPC Server and the RPC HTTP Proxy are all running Windows Server 2003 family/Windows XP SP1 or higher versions. If either the RPC Client or the RPC Server or the RPC HTTP Proxy run on an older version of Windows, this policy setting will be ignored. + +The minimum allowed value for this policy setting is 90 seconds. The maximum is 7200 seconds (2 hours). + +If you disable this policy setting, the idle connection timeout on the IIS server running the RPC HTTP proxy will be used. + +If you do not configure this policy setting, it will remain disabled. The idle connection timeout on the IIS server running the RPC HTTP proxy will be used. + +If you enable this policy setting, and the IIS server running the RPC HTTP proxy is configured with a lower idle connection timeout, the timeout on the IIS server is used. Otherwise, the provided timeout value is used. The timeout is given in seconds. + +> [!NOTE] +> This policy setting will not be applied until the system is rebooted. + + +> [!TIP] +> This is an ADMX-backed policy and requires a special SyncML format to enable or disable. For details, see [Understanding ADMX-backed policies](./understanding-admx-backed-policies.md). +> +> You must specify the data type in the SyncML as <Format>chr</Format>. For an example SyncML, refer to [Enabling a policy](./understanding-admx-backed-policies.md#enabling-a-policy). +> +> The payload of the SyncML must be XML-encoded; for this XML encoding, there are a variety of online encoders that you can use. To avoid encoding the payload, you can use CDATA if your MDM supports it. For more information, see [CDATA Sections](http://www.w3.org/TR/REC-xml/#sec-cdata-sect). + + +ADMX Info: +- GP English name: *Set Minimum Idle Connection Timeout for RPC/HTTP connections* +- GP name: *RpcMinimumHttpConnectionTimeout* +- GP path: *System\Remote Procedure Call* +- GP ADMX file name: *RPC.admx* + + + +
    + +
    + + +**ADMX_RPC/RpcStateInformation** + + + + + + + + + + + + + + + + + + + + + + + + + + + +
    Windows EditionSupported?
    Homecross mark
    Procross mark
    Businesscross mark
    Enterprisecheck mark
    Educationcross mark
    + + +
    + + +[Scope](./policy-configuration-service-provider.md#policy-scope): + +> [!div class = "checklist"] +> * Device + +
    + + + +Available in the latest Windows 10 Insider Preview Build. This policy setting determines whether the RPC Runtime maintains RPC state information for the system, and how much information it maintains. Basic state information, which consists only of the most commonly needed state data, is required for troubleshooting RPC problems. + +If you disable this policy setting, the RPC runtime defaults to "Auto2" level. + +If you do not configure this policy setting, the RPC defaults to "Auto2" level. + +If you enable this policy setting, you can use the drop-down box to determine which systems maintain RPC state information. + +- "None" indicates that the system does not maintain any RPC state information. Note: Because the basic state information required for troubleshooting has a negligible effect on performance and uses only about 4K of memory, this setting is not recommended for most installations. + +- "Auto1" directs RPC to maintain basic state information only if the computer has at least 64 MB of memory. + +- "Auto2" directs RPC to maintain basic state information only if the computer has at least 128 MB of memory and is running Windows 2000 Server, Windows 2000 Advanced Server, or Windows 2000 Datacenter Server. + +- "Server" directs RPC to maintain basic state information on the computer, regardless of its capacity. + +- "Full" directs RPC to maintain complete RPC state information on the system, regardless of its capacity. Because this level can degrade performance, it is recommended for use only while you are investigating an RPC problem. + +> [!NOTE] +> To retrieve the RPC state information from a system that maintains it, you must use a debugging tool. +> +> This policy setting will not be applied until the system is rebooted. + + +> [!TIP] +> This is an ADMX-backed policy and requires a special SyncML format to enable or disable. For details, see [Understanding ADMX-backed policies](./understanding-admx-backed-policies.md). +> +> You must specify the data type in the SyncML as <Format>chr</Format>. For an example SyncML, refer to [Enabling a policy](./understanding-admx-backed-policies.md#enabling-a-policy). +> +> The payload of the SyncML must be XML-encoded; for this XML encoding, there are a variety of online encoders that you can use. To avoid encoding the payload, you can use CDATA if your MDM supports it. For more information, see [CDATA Sections](http://www.w3.org/TR/REC-xml/#sec-cdata-sect). + + +ADMX Info: +- GP English name: *Maintain RPC Troubleshooting State Information* +- GP name: *RpcStateInformation* +- GP path: *System\Remote Procedure Call* +- GP ADMX file name: *RPC.admx* + + + +
    + +Footnotes: + +- 1 - Available in Windows 10, version 1607. +- 2 - Available in Windows 10, version 1703. +- 3 - Available in Windows 10, version 1709. +- 4 - Available in Windows 10, version 1803. +- 5 - Available in Windows 10, version 1809. +- 6 - Available in Windows 10, version 1903. +- 7 - Available in Windows 10, version 1909. +- 8 - Available in Windows 10, version 2004. + + + From 3ea6c40928d08f57ed58463ac810a14a4603503d Mon Sep 17 00:00:00 2001 From: ManikaDhiman Date: Wed, 9 Dec 2020 09:25:36 -0800 Subject: [PATCH 074/486] Added MSDT policies --- windows/client-management/mdm/TOC.md | 1 + .../mdm/policies-in-policy-csp-admx-backed.md | 3 + .../policy-configuration-service-provider.md | 14 + .../mdm/policy-csp-admx-msdt.md | 288 ++++++++++++++++++ 4 files changed, 306 insertions(+) create mode 100644 windows/client-management/mdm/policy-csp-admx-msdt.md diff --git a/windows/client-management/mdm/TOC.md b/windows/client-management/mdm/TOC.md index 2e828a600c..2a7a434c65 100644 --- a/windows/client-management/mdm/TOC.md +++ b/windows/client-management/mdm/TOC.md @@ -207,6 +207,7 @@ #### [ADMX_MMCSnapins](policy-csp-admx-mmcsnapins.md) #### [ADMX_MSAPolicy](policy-csp-admx-msapolicy.md) #### [ADMX_msched](policy-csp-admx-msched.md) +#### [ADMX_MSDT](policy-csp-admx-msdt.md) #### [ADMX_nca](policy-csp-admx-nca.md) #### [ADMX_NCSI](policy-csp-admx-ncsi.md) #### [ADMX_Netlogon](policy-csp-admx-netlogon.md) diff --git a/windows/client-management/mdm/policies-in-policy-csp-admx-backed.md b/windows/client-management/mdm/policies-in-policy-csp-admx-backed.md index 80ac1e00c1..40e0c3cfd3 100644 --- a/windows/client-management/mdm/policies-in-policy-csp-admx-backed.md +++ b/windows/client-management/mdm/policies-in-policy-csp-admx-backed.md @@ -298,6 +298,9 @@ ms.date: 10/08/2020 - [ADMX_MSAPolicy/IncludeMicrosoftAccount_DisableUserAuthCmdLine](./policy-csp-admx-msapolicy.md#admx-msapolicy-microsoftaccount-disableuserauth) - [ADMX_msched/ActivationBoundaryPolicy](./policy-csp-admx-msched.md#admx-msched-activationboundarypolicy) - [ADMX_msched/RandomDelayPolicy](./policy-csp-admx-msched.md#admx-msched-randomdelaypolicy) +- [ADMX_MSDT/MsdtSupportProvider](./policy-csp-admx-msdt.md#admx-msdt-msdtsupportprovider) +- [ADMX_MSDT/MsdtToolDownloadPolicy](./policy-csp-admx-msdt.md#admx-msdt-msdttooldownloadpolicy) +- [ADMX_MSDT/WdiScenarioExecutionPolicy](./policy-csp-admx-msdt.md#admx-msdt-wdiscenarioexecutionpolicy) - [ADMX_nca/CorporateResources](./policy-csp-admx-nca.md#admx-nca-corporateresources) - [ADMX_nca/CustomCommands](./policy-csp-admx-nca.md#admx-nca-customcommands) - [ADMX_nca/DTEs](./policy-csp-admx-nca.md#admx-nca-dtes) diff --git a/windows/client-management/mdm/policy-configuration-service-provider.md b/windows/client-management/mdm/policy-configuration-service-provider.md index b43c6f5515..5ea40c5c67 100644 --- a/windows/client-management/mdm/policy-configuration-service-provider.md +++ b/windows/client-management/mdm/policy-configuration-service-provider.md @@ -1161,6 +1161,20 @@ The following diagram shows the Policy configuration service provider in tree fo
    +### ADMX_MSDT policies + +
    +
    + ADMX_MSDT/MsdtSupportProvider +
    +
    + ADMX_MSDT/MsdtToolDownloadPolicy +
    +
    + ADMX_MSDT/WdiScenarioExecutionPolicy +
    +
    + ### ADMX_nca policies
    diff --git a/windows/client-management/mdm/policy-csp-admx-msdt.md b/windows/client-management/mdm/policy-csp-admx-msdt.md new file mode 100644 index 0000000000..c22b9c6437 --- /dev/null +++ b/windows/client-management/mdm/policy-csp-admx-msdt.md @@ -0,0 +1,288 @@ +--- +title: Policy CSP - ADMX_MSDT +description: Policy CSP - ADMX_MSDT +ms.author: dansimp +ms.localizationpriority: medium +ms.topic: article +ms.prod: w10 +ms.technology: windows +author: manikadhiman +ms.date: 12/09/2020 +ms.reviewer: +manager: dansimp +--- + +# Policy CSP - ADMX_MSDT +> [!WARNING] +> Some information relates to prereleased products, which may be substantially modified before it's commercially released. Microsoft makes no warranties, expressed or implied, concerning the information provided here. + +
    + + +## ADMX_MSDT policies + +
    +
    + ADMX_MSDT/MsdtSupportProvider +
    +
    + ADMX_MSDT/MsdtToolDownloadPolicy +
    +
    + ADMX_MSDT/WdiScenarioExecutionPolicy +
    +
    + + +
    + + +**ADMX_MSDT/MsdtSupportProvider** + + + + + + + + + + + + + + + + + + + + + + + + + + + +
    Windows EditionSupported?
    Homecross mark
    Procross mark
    Businesscross mark
    Enterprisecheck mark
    Educationcross mark
    + + +
    + + +[Scope](./policy-configuration-service-provider.md#policy-scope): + +> [!div class = "checklist"] +> * Device + +
    + + + +Available in the latest Windows 10 Insider Preview Build. This policy setting configures Microsoft Support Diagnostic Tool (MSDT) interactive communication with the support provider. MSDT gathers diagnostic data for analysis by support professionals. + +If you enable this policy setting, users can use MSDT to collect and send diagnostic data to a support professional to resolve a problem. + +By default, the support provider is set to Microsoft Corporation. + +If you disable this policy setting, MSDT cannot run in support mode, and no data can be collected or sent to the support provider. + +If you do not configure this policy setting, MSDT support mode is enabled by default. + +No reboots or service restarts are required for this policy setting to take effect. Changes take effect immediately. + + +> [!TIP] +> This is an ADMX-backed policy and requires a special SyncML format to enable or disable. For details, see [Understanding ADMX-backed policies](./understanding-admx-backed-policies.md). +> +> You must specify the data type in the SyncML as <Format>chr</Format>. For an example SyncML, refer to [Enabling a policy](./understanding-admx-backed-policies.md#enabling-a-policy). +> +> The payload of the SyncML must be XML-encoded; for this XML encoding, there are a variety of online encoders that you can use. To avoid encoding the payload, you can use CDATA if your MDM supports it. For more information, see [CDATA Sections](http://www.w3.org/TR/REC-xml/#sec-cdata-sect). + + +ADMX Info: +- GP English name: *Microsoft Support Diagnostic Tool: Turn on MSDT interactive communication with support provider* +- GP name: *MsdtSupportProvider* +- GP path: *System\Troubleshooting and Diagnostics\Microsoft Support Diagnostic Tool* +- GP ADMX file name: *MSDT.admx* + + + +
    + + +**ADMX_MSDT/MsdtToolDownloadPolicy** + + + + + + + + + + + + + + + + + + + + + + + + + + + +
    Windows EditionSupported?
    Homecross mark
    Procross mark
    Businesscross mark
    Enterprisecheck mark
    Educationcross mark
    + + +
    + + +[Scope](./policy-configuration-service-provider.md#policy-scope): + +> [!div class = "checklist"] +> * Device + +
    + + + +Available in the latest Windows 10 Insider Preview Build. This policy setting restricts the tool download policy for Microsoft Support Diagnostic Tool. + +Microsoft Support Diagnostic Tool (MSDT) gathers diagnostic data for analysis by support professionals. + +For some problems, MSDT may prompt the user to download additional tools for troubleshooting. These tools are required to completely troubleshoot the problem. + +If tool download is restricted, it may not be possible to find the root cause of the problem. + +If you enable this policy setting for remote troubleshooting, MSDT prompts the user to download additional tools to diagnose problems on remote computers only. + +If you enable this policy setting for local and remote troubleshooting, MSDT always prompts for additional tool downloading. + +If you disable this policy setting, MSDT never downloads tools, and is unable to diagnose problems on remote computers. + +If you do not configure this policy setting, MSDT prompts the user before downloading any additional tools. No reboots or service restarts are required for this policy setting to take effect. Changes take effect immediately. + +This policy setting will take effect only when MSDT is enabled. + +This policy setting will only take effect when the Diagnostic Policy Service (DPS) is in the running state. + +When the service is stopped or disabled, diagnostic scenarios are not executed. + +The DPS can be configured with the Services snap-in to the Microsoft Management Console. + + +> [!TIP] +> This is an ADMX-backed policy and requires a special SyncML format to enable or disable. For details, see [Understanding ADMX-backed policies](./understanding-admx-backed-policies.md). +> +> You must specify the data type in the SyncML as <Format>chr</Format>. For an example SyncML, refer to [Enabling a policy](./understanding-admx-backed-policies.md#enabling-a-policy). +> +> The payload of the SyncML must be XML-encoded; for this XML encoding, there are a variety of online encoders that you can use. To avoid encoding the payload, you can use CDATA if your MDM supports it. For more information, see [CDATA Sections](http://www.w3.org/TR/REC-xml/#sec-cdata-sect). + + +ADMX Info: +- GP English name: *Microsoft Support Diagnostic Tool: Restrict tool download* +- GP name: *MsdtToolDownloadPolicy* +- GP path: *System\Troubleshooting and Diagnostics\Microsoft Support Diagnostic Tool* +- GP ADMX file name: *MSDT.admx* + + + +
    + + +**ADMX_MSDT/WdiScenarioExecutionPolicy** + + + + + + + + + + + + + + + + + + + + + + + + + + + +
    Windows EditionSupported?
    Homecross mark
    Procross mark
    Businesscross mark
    Enterprisecheck mark
    Educationcross mark
    + + +
    + + +[Scope](./policy-configuration-service-provider.md#policy-scope): + +> [!div class = "checklist"] +> * Device + +
    + + + +Available in the latest Windows 10 Insider Preview Build. This policy setting determines the execution level for Microsoft Support Diagnostic Tool. + +Microsoft Support Diagnostic Tool (MSDT) gathers diagnostic data for analysis by support professionals. If you enable this policy setting, administrators can use MSDT to collect and send diagnostic data to a support professional to resolve a problem. + +If you disable this policy setting, MSDT cannot gather diagnostic data. If you do not configure this policy setting, MSDT is turned on by default. + +This policy setting takes effect only if the diagnostics-wide scenario execution policy is not configured. + +No reboots or service restarts are required for this policy setting to take effect. Changes take effect immediately. + +This policy setting will only take effect when the Diagnostic Policy Service (DPS) is in the running state. When the service is stopped or disabled, diagnostic scenarios will not be executed. The DPS can be configured with the Services snap-in to the Microsoft Management Console. + + +> [!TIP] +> This is an ADMX-backed policy and requires a special SyncML format to enable or disable. For details, see [Understanding ADMX-backed policies](./understanding-admx-backed-policies.md). +> +> You must specify the data type in the SyncML as <Format>chr</Format>. For an example SyncML, refer to [Enabling a policy](./understanding-admx-backed-policies.md#enabling-a-policy). +> +> The payload of the SyncML must be XML-encoded; for this XML encoding, there are a variety of online encoders that you can use. To avoid encoding the payload, you can use CDATA if your MDM supports it. For more information, see [CDATA Sections](http://www.w3.org/TR/REC-xml/#sec-cdata-sect). + + +ADMX Info: +- GP English name: *Microsoft Support Diagnostic Tool: Configure execution level* +- GP name: *WdiScenarioExecutionPolicy* +- GP path: *System\Troubleshooting and Diagnostics\Microsoft Support Diagnostic Tool* +- GP ADMX file name: *MSDT.admx* + + + +
    + +Footnotes: + +- 1 - Available in Windows 10, version 1607. +- 2 - Available in Windows 10, version 1703. +- 3 - Available in Windows 10, version 1709. +- 4 - Available in Windows 10, version 1803. +- 5 - Available in Windows 10, version 1809. +- 6 - Available in Windows 10, version 1903. +- 7 - Available in Windows 10, version 1909. +- 8 - Available in Windows 10, version 2004. + + + From a25ade57d6338eada08b865841c9e7fac3928edb Mon Sep 17 00:00:00 2001 From: "Trond B. Krokli" <38162891+illfated@users.noreply.github.com> Date: Thu, 10 Dec 2020 01:21:18 +0100 Subject: [PATCH 075/486] Update respond-file-alerts.md Changes proposed: - Whitespace standardization and normalization - MarkDown table extended to simplify future editing - Use MD H4 instead of **bold** style paragraph headings Whitespace changes: - remove redundant end-of-line whitespace - whitespace indents: use 3 instead of 4 blank spaces - add MD indent marker (`> `) compatibility spacing Ref. my own comment in PR #8726 --- .../respond-file-alerts.md | 92 +++++++++---------- 1 file changed, 46 insertions(+), 46 deletions(-) diff --git a/windows/security/threat-protection/microsoft-defender-atp/respond-file-alerts.md b/windows/security/threat-protection/microsoft-defender-atp/respond-file-alerts.md index 354a099a61..bccc623abc 100644 --- a/windows/security/threat-protection/microsoft-defender-atp/respond-file-alerts.md +++ b/windows/security/threat-protection/microsoft-defender-atp/respond-file-alerts.md @@ -13,7 +13,7 @@ author: mjcaparas ms.localizationpriority: medium manager: dansimp audience: ITPro -ms.collection: M365-security-compliance +ms.collection: M365-security-compliance ms.topic: article --- @@ -25,10 +25,10 @@ ms.topic: article **Applies to:** - [Microsoft Defender for Endpoint](https://go.microsoft.com/fwlink/p/?linkid=2146631) - + [!include[Prerelease information](../../includes/prerelease.md)] ->Want to experience Defender for Endpoint? [Sign up for a free trial.](https://www.microsoft.com/microsoft-365/windows/microsoft-defender-atp?ocid=docs-wdatp-responddile-abovefoldlink) +> Want to experience Defender for Endpoint? [Sign up for a free trial.](https://www.microsoft.com/microsoft-365/windows/microsoft-defender-atp?ocid=docs-wdatp-responddile-abovefoldlink) Quickly respond to detected attacks by stopping and quarantining files or blocking a file. After taking action on files, you can check activity details in the Action center. @@ -46,12 +46,12 @@ You can also submit files for deep analysis, to run the file in a secure cloud s Some actions require certain permissions. The following table describes what action certain permissions can take on portable executable (PE) and non-PE files: -Permission | PE files | Non-PE files -:---|:---|:--- -View data | X | X -Alerts investigation | ☑ | X -Live response basic | X | X -Live response advanced | ☑ |☑ +| Permission | PE files | Non-PE files | +| :--------------------- | :------: | :----------: | +| View data | X | X | +| Alerts investigation | ☑ | X | +| Live response basic | X | X | +| Live response advanced | ☑ | ☑ | For more information on roles, see [Create and manage roles for role-based access control](user-roles.md). @@ -60,8 +60,8 @@ For more information on roles, see [Create and manage roles for role-based acces You can contain an attack in your organization by stopping the malicious process and quarantining the file where it was observed. ->[!IMPORTANT] ->You can only take this action if: +> [!IMPORTANT] +> You can only take this action if: > > - The device you're taking the action on is running Windows 10, version 1703 or later > - The file does not belong to trusted third-party publishers or not signed by Microsoft @@ -71,35 +71,35 @@ The **Stop and Quarantine File** action includes stopping running processes, qua This action takes effect on devices with Windows 10, version 1703 or later, where the file was observed in the last 30 days. ->[!NOTE] ->You’ll be able to restore the file from quarantine at any time. +> [!NOTE] +> You’ll be able to restore the file from quarantine at any time. ### Stop and quarantine files 1. Select the file you want to stop and quarantine. You can select a file from any of the following views or use the Search box: - - **Alerts** - click the corresponding links from the Description or Details in the Artifact timeline - - **Search box** - select **File** from the drop–down menu and enter the file name + - **Alerts** - click the corresponding links from the Description or Details in the Artifact timeline + - **Search box** - select **File** from the drop–down menu and enter the file name - >[!NOTE] - >The stop and quarantine file action is limited to a maximum of 1000 devices. To stop a file on a larger number of devices, see [Add indicator to block or allow file](#add-indicator-to-block-or-allow-a-file). + > [!NOTE] + > The stop and quarantine file action is limited to a maximum of 1000 devices. To stop a file on a larger number of devices, see [Add indicator to block or allow file](#add-indicator-to-block-or-allow-a-file). 2. Go to the top bar and select **Stop and Quarantine File**. - ![Image of stop and quarantine file action](images/atp-stop-quarantine-file.png) + ![Image of stop and quarantine file action](images/atp-stop-quarantine-file.png) 3. Specify a reason, then click **Confirm**. - ![Image of stop and quarantine file modal window](images/atp-stop-quarantine.png) + ![Image of stop and quarantine file modal window](images/atp-stop-quarantine.png) - The Action center shows the submission information: - ![Image of stop and quarantine file action center](images/atp-stopnquarantine-file.png) + The Action center shows the submission information: + ![Image of stop and quarantine file action center](images/atp-stopnquarantine-file.png) - - **Submission time** - Shows when the action was submitted. - - **Success** - Shows the number of devices where the file has been stopped and quarantined. - - **Failed** - Shows the number of devices where the action failed and details about the failure. - - **Pending** - Shows the number of devices where the file is yet to be stopped and quarantined from. This can take time for cases when the device is offline or not connected to the network. + - **Submission time** - Shows when the action was submitted. + - **Success** - Shows the number of devices where the file has been stopped and quarantined. + - **Failed** - Shows the number of devices where the action failed and details about the failure. + - **Pending** - Shows the number of devices where the file is yet to be stopped and quarantined from. This can take time for cases when the device is offline or not connected to the network. 4. Select any of the status indicators to view more information about the action. For example, select **Failed** to see where the action failed. @@ -118,9 +118,9 @@ You can roll back and remove a file from quarantine if you’ve determined that 1. Open an elevated command–line prompt on the device: - a. Go to **Start** and type _cmd_. + a. Go to **Start** and type _cmd_. - b. Right–click **Command prompt** and select **Run as administrator**. + b. Right–click **Command prompt** and select **Run as administrator**. 2. Enter the following command, and press **Enter**: @@ -130,26 +130,26 @@ You can roll back and remove a file from quarantine if you’ve determined that > [!NOTE] > In some scenarios, the **ThreatName** may appear as: EUS:Win32/CustomEnterpriseBlock!cl. -> +> > Defender for Endpoint will restore all custom blocked files that were quarantined on this device in the last 30 days. > [!Important] -> A file that was quarantined as a potential network threat might not be recoverable. If a user attempts to restore the file after quarantine, that file might not be accessible. This can be due to the system no longer having network credentials to access the file. Typically, this is a result of a temporary log on to a system or shared folder and the access tokens expired. +> A file that was quarantined as a potential network threat might not be recoverable. If a user attempts to restore the file after quarantine, that file might not be accessible. This can be due to the system no longer having network credentials to access the file. Typically, this is a result of a temporary log on to a system or shared folder and the access tokens expired. ## Add indicator to block or allow a file You can prevent further propagation of an attack in your organization by banning potentially malicious files or suspected malware. If you know a potentially malicious portable executable (PE) file, you can block it. This operation will prevent it from being read, written, or executed on devices in your organization. ->[!IMPORTANT] +> [!IMPORTANT] > ->- This feature is available if your organization uses Microsoft Defender Antivirus and Cloud–delivered protection is enabled. For more information, see [Manage cloud–delivered protection](../microsoft-defender-antivirus/deploy-manage-report-microsoft-defender-antivirus.md). +> - This feature is available if your organization uses Microsoft Defender Antivirus and Cloud–delivered protection is enabled. For more information, see [Manage cloud–delivered protection](../microsoft-defender-antivirus/deploy-manage-report-microsoft-defender-antivirus.md). > ->- The Antimalware client version must be 4.18.1901.x or later. ->- This feature is designed to prevent suspected malware (or potentially malicious files) from being downloaded from the web. It currently supports portable executable (PE) files, including _.exe_ and _.dll_ files. The coverage will be extended over time. ->- This response action is available for devices on Windows 10, version 1703 or later. ->- The allow or block function cannot be done on files if the file's classification exists on the device's cache prior to the allow or block action. +> - The Antimalware client version must be 4.18.1901.x or later. +> - This feature is designed to prevent suspected malware (or potentially malicious files) from being downloaded from the web. It currently supports portable executable (PE) files, including _.exe_ and _.dll_ files. The coverage will be extended over time. +> - This response action is available for devices on Windows 10, version 1703 or later. +> - The allow or block function cannot be done on files if the file's classification exists on the device's cache prior to the allow or block action. ->[!NOTE] +> [!NOTE] > The PE file needs to be in the device timeline for you to be able to take this action. > > There may be a couple of minutes of latency between the time the action is taken and the actual file being blocked. @@ -157,14 +157,14 @@ You can prevent further propagation of an attack in your organization by banning ### Enable the block file feature To start blocking files, you first need to [turn the **Block or allow** feature on](advanced-features.md) in Settings. - + ### Allow or block file When you add an indicator hash for a file, you can choose to raise an alert and block the file whenever a device in your organization attempts to run it. Files automatically blocked by an indicator won't show up in the files's Action center, but the alerts will still be visible in the Alerts queue. - See [manage indicators](manage-indicators.md) for more details on blocking and raising alerts on files. +See [manage indicators](manage-indicators.md) for more details on blocking and raising alerts on files. To stop blocking a file, remove the indicator. You can do so via the **Edit Indicator** action on the file's profile page. This action will be visible in the same position that the **Add Indicator** action was, before you added the indicator. @@ -215,10 +215,10 @@ The Deep analysis summary includes a list of observed *behaviors*, some of which Results of deep analysis are matched against threat intelligence and any matches will generate appropriate alerts. -Use the deep analysis feature to investigate the details of any file, usually during an investigation of an alert or for any other reason where you suspect malicious behavior. This feature is available within the **Deep analysis** tab, on the file's profile page. +Use the deep analysis feature to investigate the details of any file, usually during an investigation of an alert or for any other reason where you suspect malicious behavior. This feature is available within the **Deep analysis** tab, on the file's profile page.

    ->[!VIDEO https://www.microsoft.com/en-us/videoplayer/embed/RE4aAYy?rel=0] +> [!VIDEO https://www.microsoft.com/en-us/videoplayer/embed/RE4aAYy?rel=0] **Submit for deep analysis** is enabled when the file is available in the Defender for Endpoint backend sample collection, or if it was observed on a Windows 10 device that supports submitting to deep analysis. @@ -232,7 +232,7 @@ You can also manually submit a sample through the [Microsoft Security Center Por When the sample is collected, Defender for Endpoint runs the file in is a secure environment and creates a detailed report of observed behaviors and associated artifacts, such as files dropped on devices, communication to IPs, and registry modifications. -**Submit files for deep analysis:** +#### Submit files for deep analysis: 1. Select the file that you want to submit for deep analysis. You can select or search a file from any of the following views: @@ -242,17 +242,17 @@ When the sample is collected, Defender for Endpoint runs the file in is a secure 2. In the **Deep analysis** tab of the file view, click **Submit**. - ![You can only submit PE files in the file details section](images/submit-file.png) + ![You can only submit PE files in the file details section](images/submit-file.png) - > [!NOTE] - > Only PE files are supported, including _.exe_ and _.dll_ files. + > [!NOTE] + > Only PE files are supported, including _.exe_ and _.dll_ files. A progress bar is displayed and provides information on the different stages of the analysis. You can then view the report when the analysis is done. > [!NOTE] > Depending on device availability, sample collection time can vary. There is a 3–hour timeout for sample collection. The collection will fail and the operation will abort if there is no online Windows 10 device reporting at that time. You can re–submit files for deep analysis to get fresh data on the file. -**View deep analysis reports** +#### View deep analysis reports View the deep analysis report that Defender for Endpoint provides to see the details of the deep analysis that was conducted on the file you submitted. This feature is available in the file view context. @@ -268,7 +268,7 @@ The details provided can help you investigate if there are indications of a pote ![The deep analysis report shows detailed information across a number of categories](images/analysis-results-nothing.png) -**Troubleshoot deep analysis** +#### Troubleshoot deep analysis If you encounter a problem when trying to submit a file, try each of the following troubleshooting steps. From 09d352cf07be43b378d26bba38139a0c84c40d12 Mon Sep 17 00:00:00 2001 From: ManikaDhiman Date: Wed, 9 Dec 2020 16:36:13 -0800 Subject: [PATCH 076/486] Removed extra
    tags --- windows/client-management/mdm/policy-csp-admx-rpc.md | 4 ---- 1 file changed, 4 deletions(-) diff --git a/windows/client-management/mdm/policy-csp-admx-rpc.md b/windows/client-management/mdm/policy-csp-admx-rpc.md index 2845ab5077..2421a28191 100644 --- a/windows/client-management/mdm/policy-csp-admx-rpc.md +++ b/windows/client-management/mdm/policy-csp-admx-rpc.md @@ -128,8 +128,6 @@ ADMX Info:
    -
    - **ADMX_RPC/RpcIgnoreDelegationFailure** @@ -291,8 +289,6 @@ ADMX Info:
    -
    - **ADMX_RPC/RpcStateInformation** From 429f29a6d0e7fbff0c19d41c046781583c39ca92 Mon Sep 17 00:00:00 2001 From: Sunny Zankharia <67922512+sazankha@users.noreply.github.com> Date: Wed, 9 Dec 2020 18:36:42 -0800 Subject: [PATCH 077/486] Update windowsdefenderapplicationguard-csp.md --- .../mdm/windowsdefenderapplicationguard-csp.md | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/windows/client-management/mdm/windowsdefenderapplicationguard-csp.md b/windows/client-management/mdm/windowsdefenderapplicationguard-csp.md index 377215d1a7..6699a32617 100644 --- a/windows/client-management/mdm/windowsdefenderapplicationguard-csp.md +++ b/windows/client-management/mdm/windowsdefenderapplicationguard-csp.md @@ -125,7 +125,7 @@ The following list shows the supported values: - 1 - Non-enterprise content embedded on enterprise sites are stopped from opening in Internet Explorer or Microsoft Edge outside of Microsoft Defender Application Guard. > [!NOTE] -> This policy setting is no longer supported in the new Microsoft Edge browser. The policy will be deprecated and removed in a future release. +> This policy setting is no longer supported in the new Microsoft Edge browser. The policy will be deprecated and removed in a future release. Webpages that contain mixed content, both enterprise and non-enterprise, may load incorrectly or fail completely if this feature is enabled. ADMX Info: From 80871aac40a1f430974a6c33eae3ed5a8b310281 Mon Sep 17 00:00:00 2001 From: Denise Vangel-MSFT Date: Thu, 10 Dec 2020 09:58:06 -0800 Subject: [PATCH 078/486] Update respond-file-alerts.md --- .../microsoft-defender-atp/respond-file-alerts.md | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/windows/security/threat-protection/microsoft-defender-atp/respond-file-alerts.md b/windows/security/threat-protection/microsoft-defender-atp/respond-file-alerts.md index bccc623abc..766691ac1e 100644 --- a/windows/security/threat-protection/microsoft-defender-atp/respond-file-alerts.md +++ b/windows/security/threat-protection/microsoft-defender-atp/respond-file-alerts.md @@ -232,7 +232,7 @@ You can also manually submit a sample through the [Microsoft Security Center Por When the sample is collected, Defender for Endpoint runs the file in is a secure environment and creates a detailed report of observed behaviors and associated artifacts, such as files dropped on devices, communication to IPs, and registry modifications. -#### Submit files for deep analysis: +#### Submit files for deep analysis 1. Select the file that you want to submit for deep analysis. You can select or search a file from any of the following views: From 1ddf6337cb3bb2cc5385ecbd625d35c72b02229d Mon Sep 17 00:00:00 2001 From: ManikaDhiman Date: Thu, 10 Dec 2020 16:40:03 -0800 Subject: [PATCH 079/486] Added RemovableStrorage policies --- windows/client-management/mdm/TOC.md | 1 + .../mdm/policies-in-policy-csp-admx-backed.md | 32 + .../policy-configuration-service-provider.md | 101 + .../mdm/policy-csp-admx-removablestorage.md | 2328 +++++++++++++++++ 4 files changed, 2462 insertions(+) create mode 100644 windows/client-management/mdm/policy-csp-admx-removablestorage.md diff --git a/windows/client-management/mdm/TOC.md b/windows/client-management/mdm/TOC.md index 2a7a434c65..22dc4936a7 100644 --- a/windows/client-management/mdm/TOC.md +++ b/windows/client-management/mdm/TOC.md @@ -217,6 +217,7 @@ #### [ADMX_PerformanceDiagnostics](policy-csp-admx-performancediagnostics.md) #### [ADMX_PowerShellExecutionPolicy](policy-csp-admx-powershellexecutionpolicy.md) #### [ADMX_Reliability](policy-csp-admx-reliability.md) +#### [ADMX_RemovableStorage](policy-csp-admx-removablestorage.md) #### [ADMX_RPC](policy-csp-admx-rpc.md) #### [ADMX_Scripts](policy-csp-admx-scripts.md) #### [ADMX_sdiageng](policy-csp-admx-sdiageng.md) diff --git a/windows/client-management/mdm/policies-in-policy-csp-admx-backed.md b/windows/client-management/mdm/policies-in-policy-csp-admx-backed.md index 40e0c3cfd3..850cba7f7b 100644 --- a/windows/client-management/mdm/policies-in-policy-csp-admx-backed.md +++ b/windows/client-management/mdm/policies-in-policy-csp-admx-backed.md @@ -445,6 +445,38 @@ ms.date: 10/08/2020 - [ADMX_Reliability/PCH_ReportShutdownEvents](./policy-csp-admx-reliability.md#admx-reliability-pch-reportshutdownevents) - [ADMX_Reliability/ShutdownEventTrackerStateFile](./policy-csp-admx-reliability.md#admx-reliability-shutdowneventtrackerstatefile) - [ADMX_Reliability/ShutdownReason](./policy-csp-admx-reliability.md#admx-reliability-shutdownreason) +- [ADMX_RemovableStorage/AccessRights_RebootTime_1](./policy-csp-admx-removablestorage.md#admx-removablestorage-accessrights-reboottime-1) +- [ADMX_RemovableStorage/AccessRights_RebootTime_2](./policy-csp-admx-removablestorage.md#admx-removablestorage-accessrights-reboottime-2) +- [ADMX_RemovableStorage/CDandDVD_DenyExecute_Access_2](./policy-csp-admx-removablestorage.md#admx-removablestorage-cdanddvd-denyexecute-access-2) +- [ADMX_RemovableStorage/CDandDVD_DenyRead_Access_1](./policy-csp-admx-removablestorage.md#admx-removablestorage-cdanddvd-denyread-access-1) +- [ADMX_RemovableStorage/CDandDVD_DenyRead_Access_2](./policy-csp-admx-removablestorage.md#admx-removablestorage-cdanddvd-denyread-access-2) +- [ADMX_RemovableStorage/CDandDVD_DenyWrite_Access_1](./policy-csp-admx-removablestorage.md#admx-removablestorage-cdanddvd-denywrite-access-1) +- [ADMX_RemovableStorage/CDandDVD_DenyWrite_Access_2](./policy-csp-admx-removablestorage.md#admx-removablestorage-cdanddvd-denywrite-access-2) +- [ADMX_RemovableStorage/CustomClasses_DenyRead_Access_1](./policy-csp-admx-removablestorage.md#admx-removablestorage-customclasses-denyread-access-1) +- [ADMX_RemovableStorage/CustomClasses_DenyRead_Access_2](./policy-csp-admx-removablestorage.md#admx-removablestorage-customclasses-denyread-access-2) +- [ADMX_RemovableStorage/CustomClasses_DenyWrite_Access_1](./policy-csp-admx-removablestorage.md#admx-removablestorage-customclasses-denywrite-access-1) +- [ADMX_RemovableStorage/CustomClasses_DenyWrite_Access_2](./policy-csp-admx-removablestorage.md#admx-removablestorage-customclasses-denywrite-access-2) +- [ADMX_RemovableStorage/FloppyDrives_DenyExecute_Access_2](./policy-csp-admx-removablestorage.md#admx-removablestorage-floppydrives-denyexecute-access-2) +- [ADMX_RemovableStorage/FloppyDrives_DenyRead_Access_1](./policy-csp-admx-removablestorage.md#admx-removablestorage-floppydrives-denyread-access-1) +- [ADMX_RemovableStorage/FloppyDrives_DenyRead_Access_2](./policy-csp-admx-removablestorage.md#admx-removablestorage-floppydrives-denyread-access-2) +- [ADMX_RemovableStorage/FloppyDrives_DenyWrite_Access_1](./policy-csp-admx-removablestorage.md#admx-removablestorage-floppydrives-denywrite-access-1) +- [ADMX_RemovableStorage/FloppyDrives_DenyWrite_Access_2](./policy-csp-admx-removablestorage.md#admx-removablestorage-floppydrives-denywrite-access-2) +- [ADMX_RemovableStorage/RemovableDisks_DenyExecute_Access_2](./policy-csp-admx-removablestorage.md#admx-removablestorage-removabledisks-denyexecute-access-2) +- [ADMX_RemovableStorage/RemovableDisks_DenyRead_Access_1](./policy-csp-admx-removablestorage.md#admx-removablestorage-removabledisks-denyread-access-1) +- [ADMX_RemovableStorage/RemovableDisks_DenyRead_Access_2](./policy-csp-admx-removablestorage.md#admx-removablestorage-removabledisks-denyread-access-2) +- [ADMX_RemovableStorage/RemovableDisks_DenyWrite_Access_1](./policy-csp-admx-removablestorage.md#admx-removablestorage-removabledisks-denywrite-access-1) +- [ADMX_RemovableStorage/RemovableStorageClasses_DenyAll_Access_1](./policy-csp-admx-removablestorage.md#admx-removablestorage-removablestorageclasses-denyall-access-1) +- [ADMX_RemovableStorage/RemovableStorageClasses_DenyAll_Access_2](./policy-csp-admx-removablestorage.md#admx-removablestorage-removablestorageclasses-denyall-access-2) +- [ADMX_RemovableStorage/Removable_Remote_Allow_Access](./policy-csp-admx-removablestorage.md#admx-removablestorage-removable-remote-allow-access) +- [ADMX_RemovableStorage/TapeDrives_DenyExecute_Access_2](./policy-csp-admx-removablestorage.md#admx-removablestorage-tapedrives-denyexecute-access-2) +- [ADMX_RemovableStorage/TapeDrives_DenyRead_Access_1](./policy-csp-admx-removablestorage.md#admx-removablestorage-tapedrives-denyread-access-1) +- [ADMX_RemovableStorage/TapeDrives_DenyRead_Access_2](./policy-csp-admx-removablestorage.md#admx-removablestorage-tapedrives-denyread-access-2) +- [ADMX_RemovableStorage/TapeDrives_DenyWrite_Access_1](./policy-csp-admx-removablestorage.md#admx-removablestorage-tapedrives-denywrite-access-1) +- [ADMX_RemovableStorage/TapeDrives_DenyWrite_Access_2](./policy-csp-admx-removablestorage.md#admx-removablestorage-tapedrives-denywrite-access-2) +- [ADMX_RemovableStorage/WPDDevices_DenyRead_Access_1](./policy-csp-admx-removablestorage.md#admx-removablestorage-wpddevices-denyread-access-1) +- [ADMX_RemovableStorage/WPDDevices_DenyRead_Access_2](./policy-csp-admx-removablestorage.md#admx-removablestorage-wpddevices-denyread-access-2) +- [ADMX_RemovableStorage/WPDDevices_DenyWrite_Access_1](./policy-csp-admx-removablestorage.md#admx-removablestorage-wpddevices-denywrite-access-1) +- [ADMX_RemovableStorage/WPDDevices_DenyWrite_Access_2](./policy-csp-admx-removablestorage.md#admx-removablestorage-wpddevices-denywrite-access-2) - [ADMX_RPC/RpcExtendedErrorInformation](./policy-csp-admx-rpc.md#admx-rpc-rpcextendederrorinformation) - [ADMX_RPC/RpcIgnoreDelegationFailure](./policy-csp-admx-rpc.md#admx-rpc-rpcignoredelegationfailure) - [ADMX_RPC/RpcMinimumHttpConnectionTimeout](./policy-csp-admx-rpc.md#admx-rpc-rpcminimumhttpconnectiontimeout) diff --git a/windows/client-management/mdm/policy-configuration-service-provider.md b/windows/client-management/mdm/policy-configuration-service-provider.md index 5ea40c5c67..e446aa1591 100644 --- a/windows/client-management/mdm/policy-configuration-service-provider.md +++ b/windows/client-management/mdm/policy-configuration-service-provider.md @@ -1649,6 +1649,107 @@ The following diagram shows the Policy configuration service provider in tree fo
    +### ADMX_RemovableStorage policies + +
    +
    + ADMX_RemovableStorage/AccessRights_RebootTime_1 +
    +
    + ADMX_RemovableStorage/AccessRights_RebootTime_2 +
    +
    + ADMX_RemovableStorage/CDandDVD_DenyExecute_Access_2 +
    +
    + ADMX_RemovableStorage/CDandDVD_DenyRead_Access_1 +
    +
    + ADMX_RemovableStorage/CDandDVD_DenyRead_Access_2 +
    +
    + ADMX_RemovableStorage/CDandDVD_DenyWrite_Access_1 +
    +
    + ADMX_RemovableStorage/CDandDVD_DenyWrite_Access_2 +
    +
    + ADMX_RemovableStorage/CustomClasses_DenyRead_Access_1 +
    +
    + ADMX_RemovableStorage/CustomClasses_DenyRead_Access_2 +
    +
    + ADMX_RemovableStorage/CustomClasses_DenyWrite_Access_1 +
    +
    + ADMX_RemovableStorage/CustomClasses_DenyWrite_Access_2 +
    +
    + ADMX_RemovableStorage/FloppyDrives_DenyExecute_Access_2 +
    +
    + ADMX_RemovableStorage/FloppyDrives_DenyRead_Access_1 +
    +
    + ADMX_RemovableStorage/FloppyDrives_DenyRead_Access_2 +
    +
    + ADMX_RemovableStorage/FloppyDrives_DenyWrite_Access_1 +
    +
    + ADMX_RemovableStorage/FloppyDrives_DenyWrite_Access_2 +
    +
    + ADMX_RemovableStorage/RemovableDisks_DenyExecute_Access_2 +
    +
    + ADMX_RemovableStorage/RemovableDisks_DenyRead_Access_1 +
    +
    + ADMX_RemovableStorage/RemovableDisks_DenyRead_Access_2 +
    +
    + ADMX_RemovableStorage/RemovableDisks_DenyWrite_Access_1 +
    +
    + ADMX_RemovableStorage/RemovableStorageClasses_DenyAll_Access_1 +
    +
    + ADMX_RemovableStorage/RemovableStorageClasses_DenyAll_Access_2 +
    +
    + ADMX_RemovableStorage/Removable_Remote_Allow_Access +
    +
    + ADMX_RemovableStorage/TapeDrives_DenyExecute_Access_2 +
    +
    + ADMX_RemovableStorage/TapeDrives_DenyRead_Access_1 +
    +
    + ADMX_RemovableStorage/TapeDrives_DenyRead_Access_2 +
    +
    + ADMX_RemovableStorage/TapeDrives_DenyWrite_Access_1 +
    +
    + ADMX_RemovableStorage/TapeDrives_DenyWrite_Access_2 +
    +
    + ADMX_RemovableStorage/WPDDevices_DenyRead_Access_1 +
    +
    + ADMX_RemovableStorage/WPDDevices_DenyRead_Access_2 +
    +
    + ADMX_RemovableStorage/WPDDevices_DenyWrite_Access_1 +
    +
    + ADMX_RemovableStorage/WPDDevices_DenyWrite_Access_2 +
    +
    + ### ADMX_RPC policies
    diff --git a/windows/client-management/mdm/policy-csp-admx-removablestorage.md b/windows/client-management/mdm/policy-csp-admx-removablestorage.md new file mode 100644 index 0000000000..eaa2b417ff --- /dev/null +++ b/windows/client-management/mdm/policy-csp-admx-removablestorage.md @@ -0,0 +1,2328 @@ +--- +title: Policy CSP - ADMX_RemovableStorage +description: Policy CSP - ADMX_RemovableStorage +ms.author: dansimp +ms.localizationpriority: medium +ms.topic: article +ms.prod: w10 +ms.technology: windows +author: manikadhiman +ms.date: 12/10/2020 +ms.reviewer: +manager: dansimp +--- + +# Policy CSP - ADMX_RemovableStorage +> [!WARNING] +> Some information relates to prereleased products, which may be substantially modified before it's commercially released. Microsoft makes no warranties, expressed or implied, concerning the information provided here. + +
    + + +## ADMX_RemovableStorage policies + +
    +
    + ADMX_RemovableStorage/AccessRights_RebootTime_1 +
    +
    + ADMX_RemovableStorage/AccessRights_RebootTime_2 +
    +
    + ADMX_RemovableStorage/CDandDVD_DenyExecute_Access_2 +
    +
    + ADMX_RemovableStorage/CDandDVD_DenyRead_Access_1 +
    +
    + ADMX_RemovableStorage/CDandDVD_DenyRead_Access_2 +
    +
    + ADMX_RemovableStorage/CDandDVD_DenyWrite_Access_1 +
    +
    + ADMX_RemovableStorage/CDandDVD_DenyWrite_Access_2 +
    +
    + ADMX_RemovableStorage/CustomClasses_DenyRead_Access_1 +
    +
    + ADMX_RemovableStorage/CustomClasses_DenyRead_Access_2 +
    +
    + ADMX_RemovableStorage/CustomClasses_DenyWrite_Access_1 +
    +
    + ADMX_RemovableStorage/CustomClasses_DenyWrite_Access_2 +
    +
    + ADMX_RemovableStorage/FloppyDrives_DenyExecute_Access_2 +
    +
    + ADMX_RemovableStorage/FloppyDrives_DenyRead_Access_1 +
    +
    + ADMX_RemovableStorage/FloppyDrives_DenyRead_Access_2 +
    +
    + ADMX_RemovableStorage/FloppyDrives_DenyWrite_Access_1 +
    +
    + ADMX_RemovableStorage/FloppyDrives_DenyWrite_Access_2 +
    +
    + ADMX_RemovableStorage/RemovableDisks_DenyExecute_Access_2 +
    +
    + ADMX_RemovableStorage/RemovableDisks_DenyRead_Access_1 +
    +
    + ADMX_RemovableStorage/RemovableDisks_DenyRead_Access_2 +
    +
    + ADMX_RemovableStorage/RemovableDisks_DenyWrite_Access_1 +
    +
    + ADMX_RemovableStorage/RemovableStorageClasses_DenyAll_Access_1 +
    +
    + ADMX_RemovableStorage/RemovableStorageClasses_DenyAll_Access_2 +
    +
    + ADMX_RemovableStorage/Removable_Remote_Allow_Access +
    +
    + ADMX_RemovableStorage/TapeDrives_DenyExecute_Access_2 +
    +
    + ADMX_RemovableStorage/TapeDrives_DenyRead_Access_1 +
    +
    + ADMX_RemovableStorage/TapeDrives_DenyRead_Access_2 +
    +
    + ADMX_RemovableStorage/TapeDrives_DenyWrite_Access_1 +
    +
    + ADMX_RemovableStorage/TapeDrives_DenyWrite_Access_2 +
    +
    + ADMX_RemovableStorage/WPDDevices_DenyRead_Access_1 +
    +
    + ADMX_RemovableStorage/WPDDevices_DenyRead_Access_2 +
    +
    + ADMX_RemovableStorage/WPDDevices_DenyWrite_Access_1 +
    +
    + ADMX_RemovableStorage/WPDDevices_DenyWrite_Access_2 +
    +
    + + +
    + + +**ADMX_RemovableStorage/AccessRights_RebootTime_1** + + + + + + + + + + + + + + + + + + + + + + + + + + + +
    Windows EditionSupported?
    Homecross mark
    Procross mark
    Businesscross mark
    Enterprisecheck mark
    Educationcross mark
    + + +
    + + +[Scope](./policy-configuration-service-provider.md#policy-scope): + +> [!div class = "checklist"] +> * User + +
    + + + +Available in the latest Windows 10 Insider Preview Build. This policy setting configures the amount of time (in seconds) that the operating system waits to reboot in order to enforce a change in access rights to removable storage devices. + +If you enable this policy setting, you can set the number of seconds you want the system to wait until a reboot. + +If you disable or do not configure this setting, the operating system does not force a reboot. + +> [!NOTE] +> If no reboot is forced, the access right does not take effect until the operating system is restarted. + + +> [!TIP] +> This is an ADMX-backed policy and requires a special SyncML format to enable or disable. For details, see [Understanding ADMX-backed policies](./understanding-admx-backed-policies.md). +> +> You must specify the data type in the SyncML as <Format>chr</Format>. For an example SyncML, refer to [Enabling a policy](./understanding-admx-backed-policies.md#enabling-a-policy). +> +> The payload of the SyncML must be XML-encoded; for this XML encoding, there are a variety of online encoders that you can use. To avoid encoding the payload, you can use CDATA if your MDM supports it. For more information, see [CDATA Sections](http://www.w3.org/TR/REC-xml/#sec-cdata-sect). + + +ADMX Info: +- GP English name: *Set time (in seconds) to force reboot* +- GP name: *AccessRights_RebootTime_1* +- GP path: *System\Removable Storage Access* +- GP ADMX file name: *RemovableStorage.admx* + + + +
    + + +**ADMX_RemovableStorage/AccessRights_RebootTime_2** + + + + + + + + + + + + + + + + + + + + + + + + + + + +
    Windows EditionSupported?
    Homecross mark
    Procross mark
    Businesscross mark
    Enterprisecheck mark
    Educationcross mark
    + + +
    + + +[Scope](./policy-configuration-service-provider.md#policy-scope): + +> [!div class = "checklist"] +> * Device + +
    + + + +Available in the latest Windows 10 Insider Preview Build. This policy setting configures the amount of time (in seconds) that the operating system waits to reboot in order to enforce a change in access rights to removable storage devices. + +If you enable this policy setting, you can set the number of seconds you want the system to wait until a reboot. + +If you disable or do not configure this setting, the operating system does not force a reboot + +> [!NOTE] +> If no reboot is forced, the access right does not take effect until the operating system is restarted. + + +> [!TIP] +> This is an ADMX-backed policy and requires a special SyncML format to enable or disable. For details, see [Understanding ADMX-backed policies](./understanding-admx-backed-policies.md). +> +> You must specify the data type in the SyncML as <Format>chr</Format>. For an example SyncML, refer to [Enabling a policy](./understanding-admx-backed-policies.md#enabling-a-policy). +> +> The payload of the SyncML must be XML-encoded; for this XML encoding, there are a variety of online encoders that you can use. To avoid encoding the payload, you can use CDATA if your MDM supports it. For more information, see [CDATA Sections](http://www.w3.org/TR/REC-xml/#sec-cdata-sect). + + +ADMX Info: +- GP English name: *Set time (in seconds) to force reboot* +- GP name: *AccessRights_RebootTime_2* +- GP path: *System\Removable Storage Access* +- GP ADMX file name: *RemovableStorage.admx* + + + +
    + + +**ADMX_RemovableStorage/CDandDVD_DenyExecute_Access_2** + + + + + + + + + + + + + + + + + + + + + + + + + + + +
    Windows EditionSupported?
    Homecross mark
    Procross mark
    Businesscross mark
    Enterprisecheck mark
    Educationcross mark
    + + +
    + + +[Scope](./policy-configuration-service-provider.md#policy-scope): + +> [!div class = "checklist"] +> * Device + +
    + + + +Available in the latest Windows 10 Insider Preview Build. This policy setting denies execute access to the CD and DVD removable storage class. + +If you enable this policy setting, execute access is denied to this removable storage class. + +If you disable or do not configure this policy setting, execute access is allowed to this removable storage class. + + +> [!TIP] +> This is an ADMX-backed policy and requires a special SyncML format to enable or disable. For details, see [Understanding ADMX-backed policies](./understanding-admx-backed-policies.md). +> +> You must specify the data type in the SyncML as <Format>chr</Format>. For an example SyncML, refer to [Enabling a policy](./understanding-admx-backed-policies.md#enabling-a-policy). +> +> The payload of the SyncML must be XML-encoded; for this XML encoding, there are a variety of online encoders that you can use. To avoid encoding the payload, you can use CDATA if your MDM supports it. For more information, see [CDATA Sections](http://www.w3.org/TR/REC-xml/#sec-cdata-sect). + + +ADMX Info: +- GP English name: *CD and DVD: Deny execute access* +- GP name: *CDandDVD_DenyExecute_Access_2* +- GP path: *System\Removable Storage Access* +- GP ADMX file name: *RemovableStorage.admx* + + + +
    + + +**ADMX_RemovableStorage/CDandDVD_DenyRead_Access_1** + + + + + + + + + + + + + + + + + + + + + + + + + + + +
    Windows EditionSupported?
    Homecross mark
    Procross mark
    Businesscross mark
    Enterprisecheck mark
    Educationcross mark
    + + +
    + + +[Scope](./policy-configuration-service-provider.md#policy-scope): + +> [!div class = "checklist"] +> * User + +
    + + + +Available in the latest Windows 10 Insider Preview Build. This policy setting denies read access to the CD and DVD removable storage class. + +If you enable this policy setting, read access is denied to this removable storage class. + +If you disable or do not configure this policy setting, read access is allowed to this removable storage class. + +> [!TIP] +> This is an ADMX-backed policy and requires a special SyncML format to enable or disable. For details, see [Understanding ADMX-backed policies](./understanding-admx-backed-policies.md). +> +> You must specify the data type in the SyncML as <Format>chr</Format>. For an example SyncML, refer to [Enabling a policy](./understanding-admx-backed-policies.md#enabling-a-policy). +> +> The payload of the SyncML must be XML-encoded; for this XML encoding, there are a variety of online encoders that you can use. To avoid encoding the payload, you can use CDATA if your MDM supports it. For more information, see [CDATA Sections](http://www.w3.org/TR/REC-xml/#sec-cdata-sect). + + +ADMX Info: +- GP English name: *CD and DVD: Deny read access* +- GP name: *CDandDVD_DenyRead_Access_1* +- GP path: *System\Removable Storage Access* +- GP ADMX file name: *RemovableStorage.admx* + + + +
    + + +**ADMX_RemovableStorage/CDandDVD_DenyRead_Access_2** + + + + + + + + + + + + + + + + + + + + + + + + + + + +
    Windows EditionSupported?
    Homecross mark
    Procross mark
    Businesscross mark
    Enterprisecheck mark
    Educationcross mark
    + + +
    + + +[Scope](./policy-configuration-service-provider.md#policy-scope): + +> [!div class = "checklist"] +> * Device + +
    + + + +Available in the latest Windows 10 Insider Preview Build. This policy setting denies read access to the CD and DVD removable storage class. + +If you enable this policy setting, read access is denied to this removable storage class. + +If you disable or do not configure this policy setting, read access is allowed to this removable storage class. + + +> [!TIP] +> This is an ADMX-backed policy and requires a special SyncML format to enable or disable. For details, see [Understanding ADMX-backed policies](./understanding-admx-backed-policies.md). +> +> You must specify the data type in the SyncML as <Format>chr</Format>. For an example SyncML, refer to [Enabling a policy](./understanding-admx-backed-policies.md#enabling-a-policy). +> +> The payload of the SyncML must be XML-encoded; for this XML encoding, there are a variety of online encoders that you can use. To avoid encoding the payload, you can use CDATA if your MDM supports it. For more information, see [CDATA Sections](http://www.w3.org/TR/REC-xml/#sec-cdata-sect). + + +ADMX Info: +- GP English name: *CD and DVD: Deny read access* +- GP name: *CDandDVD_DenyRead_Access_2* +- GP path: *System\Removable Storage Access* +- GP ADMX file name: *RemovableStorage.admx* + + + +
    + + +**ADMX_RemovableStorage/CDandDVD_DenyWrite_Access_1** + + + + + + + + + + + + + + + + + + + + + + + + + + + +
    Windows EditionSupported?
    Homecross mark
    Procross mark
    Businesscross mark
    Enterprisecheck mark
    Educationcross mark
    + + +
    + + +[Scope](./policy-configuration-service-provider.md#policy-scope): + +> [!div class = "checklist"] +> * User + +
    + + + +Available in the latest Windows 10 Insider Preview Build. This policy setting denies write access to the CD and DVD removable storage class. + +If you enable this policy setting, write access is denied to this removable storage class. + +If you disable or do not configure this policy setting, write access is allowed to this removable storage class. + + +> [!TIP] +> This is an ADMX-backed policy and requires a special SyncML format to enable or disable. For details, see [Understanding ADMX-backed policies](./understanding-admx-backed-policies.md). +> +> You must specify the data type in the SyncML as <Format>chr</Format>. For an example SyncML, refer to [Enabling a policy](./understanding-admx-backed-policies.md#enabling-a-policy). +> +> The payload of the SyncML must be XML-encoded; for this XML encoding, there are a variety of online encoders that you can use. To avoid encoding the payload, you can use CDATA if your MDM supports it. For more information, see [CDATA Sections](http://www.w3.org/TR/REC-xml/#sec-cdata-sect). + + +ADMX Info: +- GP English name: *CD and DVD: Deny write access* +- GP name: *CDandDVD_DenyWrite_Access_1* +- GP path: *System\Removable Storage Access* +- GP ADMX file name: *RemovableStorage.admx* + + + +
    + + +**ADMX_RemovableStorage/CDandDVD_DenyWrite_Access_2** + + + + + + + + + + + + + + + + + + + + + + + + + + + +
    Windows EditionSupported?
    Homecross mark
    Procross mark
    Businesscross mark
    Enterprisecheck mark
    Educationcross mark
    + + +
    + + +[Scope](./policy-configuration-service-provider.md#policy-scope): + +> [!div class = "checklist"] +> * Device + +
    + + + +Available in the latest Windows 10 Insider Preview Build. This policy setting denies write access to the CD and DVD removable storage class. + +If you enable this policy setting, write access is denied to this removable storage class. + +If you disable or do not configure this policy setting, write access is allowed to this removable storage class. + + +> [!TIP] +> This is an ADMX-backed policy and requires a special SyncML format to enable or disable. For details, see [Understanding ADMX-backed policies](./understanding-admx-backed-policies.md). +> +> You must specify the data type in the SyncML as <Format>chr</Format>. For an example SyncML, refer to [Enabling a policy](./understanding-admx-backed-policies.md#enabling-a-policy). +> +> The payload of the SyncML must be XML-encoded; for this XML encoding, there are a variety of online encoders that you can use. To avoid encoding the payload, you can use CDATA if your MDM supports it. For more information, see [CDATA Sections](http://www.w3.org/TR/REC-xml/#sec-cdata-sect). + + +ADMX Info: +- GP English name: *CD and DVD: Deny write access* +- GP name: *CDandDVD_DenyWrite_Access_2* +- GP path: *System\Removable Storage Access* +- GP ADMX file name: *RemovableStorage.admx* + + + +
    + + +**ADMX_RemovableStorage/CustomClasses_DenyRead_Access_1** + + + + + + + + + + + + + + + + + + + + + + + + + + + +
    Windows EditionSupported?
    Homecross mark
    Procross mark
    Businesscross mark
    Enterprisecheck mark
    Educationcross mark
    + + +
    + + +[Scope](./policy-configuration-service-provider.md#policy-scope): + +> [!div class = "checklist"] +> * User + +
    + + + +Available in the latest Windows 10 Insider Preview Build. This policy setting denies read access to custom removable storage classes. + +If you enable this policy setting, read access is denied to these removable storage classes. + +If you disable or do not configure this policy setting, read access is allowed to these removable storage classes. + + +> [!TIP] +> This is an ADMX-backed policy and requires a special SyncML format to enable or disable. For details, see [Understanding ADMX-backed policies](./understanding-admx-backed-policies.md). +> +> You must specify the data type in the SyncML as <Format>chr</Format>. For an example SyncML, refer to [Enabling a policy](./understanding-admx-backed-policies.md#enabling-a-policy). +> +> The payload of the SyncML must be XML-encoded; for this XML encoding, there are a variety of online encoders that you can use. To avoid encoding the payload, you can use CDATA if your MDM supports it. For more information, see [CDATA Sections](http://www.w3.org/TR/REC-xml/#sec-cdata-sect). + + +ADMX Info: +- GP English name: *Custom Classes: Deny read access* +- GP name: *CustomClasses_DenyRead_Access_1* +- GP path: *System\Removable Storage Access* +- GP ADMX file name: *RemovableStorage.admx* + + + +
    + + +**ADMX_RemovableStorage/CustomClasses_DenyRead_Access_2** + + + + + + + + + + + + + + + + + + + + + + + + + + + +
    Windows EditionSupported?
    Homecross mark
    Procross mark
    Businesscross mark
    Enterprisecheck mark
    Educationcross mark
    + + +
    + + +[Scope](./policy-configuration-service-provider.md#policy-scope): + +> [!div class = "checklist"] +> * Device + +
    + + + +Available in the latest Windows 10 Insider Preview Build. This policy setting denies read access to custom removable storage classes. + +If you enable this policy setting, read access is denied to these removable storage classes. + +If you disable or do not configure this policy setting, read access is allowed to these removable storage classes. + + +> [!TIP] +> This is an ADMX-backed policy and requires a special SyncML format to enable or disable. For details, see [Understanding ADMX-backed policies](./understanding-admx-backed-policies.md). +> +> You must specify the data type in the SyncML as <Format>chr</Format>. For an example SyncML, refer to [Enabling a policy](./understanding-admx-backed-policies.md#enabling-a-policy). +> +> The payload of the SyncML must be XML-encoded; for this XML encoding, there are a variety of online encoders that you can use. To avoid encoding the payload, you can use CDATA if your MDM supports it. For more information, see [CDATA Sections](http://www.w3.org/TR/REC-xml/#sec-cdata-sect). + + +ADMX Info: +- GP English name: *Custom Classes: Deny read access* +- GP name: *CustomClasses_DenyRead_Access_2* +- GP path: *System\Removable Storage Access* +- GP ADMX file name: *RemovableStorage.admx* + + + +
    + + +**ADMX_RemovableStorage/CustomClasses_DenyWrite_Access_1** + + + + + + + + + + + + + + + + + + + + + + + + + + + +
    Windows EditionSupported?
    Homecross mark
    Procross mark
    Businesscross mark
    Enterprisecheck mark
    Educationcross mark
    + + +
    + + +[Scope](./policy-configuration-service-provider.md#policy-scope): + +> [!div class = "checklist"] +> * User + +
    + + + +Available in the latest Windows 10 Insider Preview Build. This policy setting denies write access to custom removable storage classes. + +If you enable this policy setting, write access is denied to these removable storage classes. + +If you disable or do not configure this policy setting, write access is allowed to these removable storage classes. + + +> [!TIP] +> This is an ADMX-backed policy and requires a special SyncML format to enable or disable. For details, see [Understanding ADMX-backed policies](./understanding-admx-backed-policies.md). +> +> You must specify the data type in the SyncML as <Format>chr</Format>. For an example SyncML, refer to [Enabling a policy](./understanding-admx-backed-policies.md#enabling-a-policy). +> +> The payload of the SyncML must be XML-encoded; for this XML encoding, there are a variety of online encoders that you can use. To avoid encoding the payload, you can use CDATA if your MDM supports it. For more information, see [CDATA Sections](http://www.w3.org/TR/REC-xml/#sec-cdata-sect). + + +ADMX Info: +- GP English name: *Custom Classes: Deny write access* +- GP name: *CustomClasses_DenyWrite_Access_1* +- GP path: *System\Removable Storage Access* +- GP ADMX file name: *RemovableStorage.admx* + + +
    + + +**ADMX_RemovableStorage/CustomClasses_DenyWrite_Access_2** + + + + + + + + + + + + + + + + + + + + + + + + + + + +
    Windows EditionSupported?
    Homecross mark
    Procross mark
    Businesscross mark
    Enterprisecheck mark
    Educationcross mark
    + + +
    + + +[Scope](./policy-configuration-service-provider.md#policy-scope): + +> [!div class = "checklist"] +> * Device + +
    + + + +Available in the latest Windows 10 Insider Preview Build. This policy setting denies write access to custom removable storage classes. + +If you enable this policy setting, write access is denied to these removable storage classes. + +If you disable or do not configure this policy setting, write access is allowed to these removable storage classes. + + +> [!TIP] +> This is an ADMX-backed policy and requires a special SyncML format to enable or disable. For details, see [Understanding ADMX-backed policies](./understanding-admx-backed-policies.md). +> +> You must specify the data type in the SyncML as <Format>chr</Format>. For an example SyncML, refer to [Enabling a policy](./understanding-admx-backed-policies.md#enabling-a-policy). +> +> The payload of the SyncML must be XML-encoded; for this XML encoding, there are a variety of online encoders that you can use. To avoid encoding the payload, you can use CDATA if your MDM supports it. For more information, see [CDATA Sections](http://www.w3.org/TR/REC-xml/#sec-cdata-sect). + + +ADMX Info: +- GP English name: *Custom Classes: Deny write access* +- GP name: *CustomClasses_DenyWrite_Access_2* +- GP path: *System\Removable Storage Access* +- GP ADMX file name: *RemovableStorage.admx* + + +
    + + +**ADMX_RemovableStorage/FloppyDrives_DenyExecute_Access_2** + + + + + + + + + + + + + + + + + + + + + + + + + + + +
    Windows EditionSupported?
    Homecross mark
    Procross mark
    Businesscross mark
    Enterprisecheck mark
    Educationcross mark
    + + +
    + + +[Scope](./policy-configuration-service-provider.md#policy-scope): + +> [!div class = "checklist"] +> * Device + +
    + + + +Available in the latest Windows 10 Insider Preview Build. This policy setting denies execute access to the Floppy Drives removable storage class, including USB Floppy Drives. + +If you enable this policy setting, execute access is denied to this removable storage class. + +If you disable or do not configure this policy setting, execute access is allowed to this removable storage class. + + +> [!TIP] +> This is an ADMX-backed policy and requires a special SyncML format to enable or disable. For details, see [Understanding ADMX-backed policies](./understanding-admx-backed-policies.md). +> +> You must specify the data type in the SyncML as <Format>chr</Format>. For an example SyncML, refer to [Enabling a policy](./understanding-admx-backed-policies.md#enabling-a-policy). +> +> The payload of the SyncML must be XML-encoded; for this XML encoding, there are a variety of online encoders that you can use. To avoid encoding the payload, you can use CDATA if your MDM supports it. For more information, see [CDATA Sections](http://www.w3.org/TR/REC-xml/#sec-cdata-sect). + + +ADMX Info: +- GP English name: *Floppy Drives: Deny execute access* +- GP name: *FloppyDrives_DenyExecute_Access_2* +- GP path: *System\Removable Storage Access* +- GP ADMX file name: *RemovableStorage.admx* + + +
    + + +**ADMX_RemovableStorage/FloppyDrives_DenyRead_Access_1** + + + + + + + + + + + + + + + + + + + + + + + + + + + +
    Windows EditionSupported?
    Homecross mark
    Procross mark
    Businesscross mark
    Enterprisecheck mark
    Educationcross mark
    + + +
    + + +[Scope](./policy-configuration-service-provider.md#policy-scope): + +> [!div class = "checklist"] +> * User + +
    + + + +Available in the latest Windows 10 Insider Preview Build. This policy setting denies read access to the Floppy Drives removable storage class, including USB Floppy Drives. + +If you enable this policy setting, read access is denied to this removable storage class. + +If you disable or do not configure this policy setting, read access is allowed to this removable storage class. + + +> [!TIP] +> This is an ADMX-backed policy and requires a special SyncML format to enable or disable. For details, see [Understanding ADMX-backed policies](./understanding-admx-backed-policies.md). +> +> You must specify the data type in the SyncML as <Format>chr</Format>. For an example SyncML, refer to [Enabling a policy](./understanding-admx-backed-policies.md#enabling-a-policy). +> +> The payload of the SyncML must be XML-encoded; for this XML encoding, there are a variety of online encoders that you can use. To avoid encoding the payload, you can use CDATA if your MDM supports it. For more information, see [CDATA Sections](http://www.w3.org/TR/REC-xml/#sec-cdata-sect). + + +ADMX Info: +- GP English name: *Floppy Drives: Deny read access* +- GP name: *FloppyDrives_DenyRead_Access_1* +- GP path: *System\Removable Storage Access* +- GP ADMX file name: *RemovableStorage.admx* + + +
    + + +**ADMX_RemovableStorage/FloppyDrives_DenyRead_Access_2** + + + + + + + + + + + + + + + + + + + + + + + + + + + +
    Windows EditionSupported?
    Homecross mark
    Procross mark
    Businesscross mark
    Enterprisecheck mark
    Educationcross mark
    + + +
    + + +[Scope](./policy-configuration-service-provider.md#policy-scope): + +> [!div class = "checklist"] +> * Device + +
    + + + +Available in the latest Windows 10 Insider Preview Build. This policy setting denies read access to the Floppy Drives removable storage class, including USB Floppy Drives. + +If you enable this policy setting, read access is denied to this removable storage class. + +If you disable or do not configure this policy setting, read access is allowed to this removable storage class. + + +> [!TIP] +> This is an ADMX-backed policy and requires a special SyncML format to enable or disable. For details, see [Understanding ADMX-backed policies](./understanding-admx-backed-policies.md). +> +> You must specify the data type in the SyncML as <Format>chr</Format>. For an example SyncML, refer to [Enabling a policy](./understanding-admx-backed-policies.md#enabling-a-policy). +> +> The payload of the SyncML must be XML-encoded; for this XML encoding, there are a variety of online encoders that you can use. To avoid encoding the payload, you can use CDATA if your MDM supports it. For more information, see [CDATA Sections](http://www.w3.org/TR/REC-xml/#sec-cdata-sect). + + +ADMX Info: +- GP English name: *Floppy Drives: Deny read access* +- GP name: *FloppyDrives_DenyRead_Access_2* +- GP path: *System\Removable Storage Access* +- GP ADMX file name: *RemovableStorage.admx* + + +
    + + +**ADMX_RemovableStorage/FloppyDrives_DenyWrite_Access_1** + + + + + + + + + + + + + + + + + + + + + + + + + + + +
    Windows EditionSupported?
    Homecross mark
    Procross mark
    Businesscross mark
    Enterprisecheck mark
    Educationcross mark
    + + +
    + + +[Scope](./policy-configuration-service-provider.md#policy-scope): + +> [!div class = "checklist"] +> * User + +
    + + + +Available in the latest Windows 10 Insider Preview Build. This policy setting denies write access to the Floppy Drives removable storage class, including USB Floppy Drives. + +If you enable this policy setting, write access is denied to this removable storage class. + +If you disable or do not configure this policy setting, write access is allowed to this removable storage class. + +> [!TIP] +> This is an ADMX-backed policy and requires a special SyncML format to enable or disable. For details, see [Understanding ADMX-backed policies](./understanding-admx-backed-policies.md). +> +> You must specify the data type in the SyncML as <Format>chr</Format>. For an example SyncML, refer to [Enabling a policy](./understanding-admx-backed-policies.md#enabling-a-policy). +> +> The payload of the SyncML must be XML-encoded; for this XML encoding, there are a variety of online encoders that you can use. To avoid encoding the payload, you can use CDATA if your MDM supports it. For more information, see [CDATA Sections](http://www.w3.org/TR/REC-xml/#sec-cdata-sect). + + +ADMX Info: +- GP English name: *Floppy Drives: Deny write access* +- GP name: *FloppyDrives_DenyWrite_Access_1* +- GP path: *System\Removable Storage Access* +- GP ADMX file name: *RemovableStorage.admx* + + +
    + + +**ADMX_RemovableStorage/FloppyDrives_DenyWrite_Access_2** + + + + + + + + + + + + + + + + + + + + + + + + + + + +
    Windows EditionSupported?
    Homecross mark
    Procross mark
    Businesscross mark
    Enterprisecheck mark
    Educationcross mark
    + + +
    + + +[Scope](./policy-configuration-service-provider.md#policy-scope): + +> [!div class = "checklist"] +> * Device + +
    + + + +Available in the latest Windows 10 Insider Preview Build. This policy setting denies write access to the Floppy Drives removable storage class, including USB Floppy Drives. + +If you enable this policy setting, write access is denied to this removable storage class. + +If you disable or do not configure this policy setting, write access is allowed to this removable storage class. + + +> [!TIP] +> This is an ADMX-backed policy and requires a special SyncML format to enable or disable. For details, see [Understanding ADMX-backed policies](./understanding-admx-backed-policies.md). +> +> You must specify the data type in the SyncML as <Format>chr</Format>. For an example SyncML, refer to [Enabling a policy](./understanding-admx-backed-policies.md#enabling-a-policy). +> +> The payload of the SyncML must be XML-encoded; for this XML encoding, there are a variety of online encoders that you can use. To avoid encoding the payload, you can use CDATA if your MDM supports it. For more information, see [CDATA Sections](http://www.w3.org/TR/REC-xml/#sec-cdata-sect). + + +ADMX Info: +- GP English name: *Floppy Drives: Deny write access* +- GP name: *FloppyDrives_DenyWrite_Access_2* +- GP path: *System\Removable Storage Access* +- GP ADMX file name: *RemovableStorage.admx* + + +
    + + +**ADMX_RemovableStorage/RemovableDisks_DenyExecute_Access_2** + + + + + + + + + + + + + + + + + + + + + + + + + + + +
    Windows EditionSupported?
    Homecross mark
    Procross mark
    Businesscross mark
    Enterprisecheck mark
    Educationcross mark
    + + +
    + + +[Scope](./policy-configuration-service-provider.md#policy-scope): + +> [!div class = "checklist"] +> * Device + +
    + + + +Available in the latest Windows 10 Insider Preview Build. This policy setting denies execute access to removable disks. + +If you enable this policy setting, execute access is denied to this removable storage class. + +If you disable or do not configure this policy setting, execute access is allowed to this removable storage class. + +> [!TIP] +> This is an ADMX-backed policy and requires a special SyncML format to enable or disable. For details, see [Understanding ADMX-backed policies](./understanding-admx-backed-policies.md). +> +> You must specify the data type in the SyncML as <Format>chr</Format>. For an example SyncML, refer to [Enabling a policy](./understanding-admx-backed-policies.md#enabling-a-policy). +> +> The payload of the SyncML must be XML-encoded; for this XML encoding, there are a variety of online encoders that you can use. To avoid encoding the payload, you can use CDATA if your MDM supports it. For more information, see [CDATA Sections](http://www.w3.org/TR/REC-xml/#sec-cdata-sect). + + +ADMX Info: +- GP English name: *Removable Disks: Deny execute access* +- GP name: *RemovableDisks_DenyExecute_Access_2* +- GP path: *System\Removable Storage Access* +- GP ADMX file name: *RemovableStorage.admx* + + +
    + + +**ADMX_RemovableStorage/RemovableDisks_DenyRead_Access_1** + + + + + + + + + + + + + + + + + + + + + + + + + + + +
    Windows EditionSupported?
    Homecross mark
    Procross mark
    Businesscross mark
    Enterprisecheck mark
    Educationcross mark
    + + +
    + + +[Scope](./policy-configuration-service-provider.md#policy-scope): + +> [!div class = "checklist"] +> * User + +
    + + + +Available in the latest Windows 10 Insider Preview Build. This policy setting denies read access to removable disks. + +If you enable this policy setting, read access is denied to this removable storage class. + +If you disable or do not configure this policy setting, read access is allowed to this removable storage class. + + +> [!TIP] +> This is an ADMX-backed policy and requires a special SyncML format to enable or disable. For details, see [Understanding ADMX-backed policies](./understanding-admx-backed-policies.md). +> +> You must specify the data type in the SyncML as <Format>chr</Format>. For an example SyncML, refer to [Enabling a policy](./understanding-admx-backed-policies.md#enabling-a-policy). +> +> The payload of the SyncML must be XML-encoded; for this XML encoding, there are a variety of online encoders that you can use. To avoid encoding the payload, you can use CDATA if your MDM supports it. For more information, see [CDATA Sections](http://www.w3.org/TR/REC-xml/#sec-cdata-sect). + + +ADMX Info: +- GP English name: *Removable Disks: Deny read access* +- GP name: *RemovableDisks_DenyRead_Access_1* +- GP path: *System\Removable Storage Access* +- GP ADMX file name: *RemovableStorage.admx* + + +
    + + +**ADMX_RemovableStorage/RemovableDisks_DenyRead_Access_2** + + + + + + + + + + + + + + + + + + + + + + + + + + + +
    Windows EditionSupported?
    Homecross mark
    Procross mark
    Businesscross mark
    Enterprisecheck mark
    Educationcross mark
    + + +
    + + +[Scope](./policy-configuration-service-provider.md#policy-scope): + +> [!div class = "checklist"] +> * Device + +
    + + + +Available in the latest Windows 10 Insider Preview Build. This policy setting denies read access to removable disks. + +If you enable this policy setting, read access is denied to this removable storage class. + +If you disable or do not configure this policy setting, read access is allowed to this removable storage class. + +> [!TIP] +> This is an ADMX-backed policy and requires a special SyncML format to enable or disable. For details, see [Understanding ADMX-backed policies](./understanding-admx-backed-policies.md). +> +> You must specify the data type in the SyncML as <Format>chr</Format>. For an example SyncML, refer to [Enabling a policy](./understanding-admx-backed-policies.md#enabling-a-policy). +> +> The payload of the SyncML must be XML-encoded; for this XML encoding, there are a variety of online encoders that you can use. To avoid encoding the payload, you can use CDATA if your MDM supports it. For more information, see [CDATA Sections](http://www.w3.org/TR/REC-xml/#sec-cdata-sect). + + +ADMX Info: +- GP English name: *Removable Disks: Deny read access* +- GP name: *RemovableDisks_DenyRead_Access_2* +- GP path: *System\Removable Storage Access* +- GP ADMX file name: *RemovableStorage.admx* + + +
    + + +**ADMX_RemovableStorage/RemovableDisks_DenyWrite_Access_1** + + + + + + + + + + + + + + + + + + + + + + + + + + + +
    Windows EditionSupported?
    Homecross mark
    Procross mark
    Businesscross mark
    Enterprisecheck mark
    Educationcross mark
    + + +
    + + +[Scope](./policy-configuration-service-provider.md#policy-scope): + +> [!div class = "checklist"] +> * User + +
    + + + +Available in the latest Windows 10 Insider Preview Build. This policy setting denies write access to removable disks. + +If you enable this policy setting, write access is denied to this removable storage class. + +If you disable or do not configure this policy setting, write access is allowed to this removable storage class. + +> [!NOTE] +> To require that users write data to BitLocker-protected storage, enable the policy setting "Deny write access to drives not protected by BitLocker," which is located in "Computer Configuration\Administrative Templates\Windows Components\BitLocker Drive Encryption\Removable Data Drives." + + +> [!TIP] +> This is an ADMX-backed policy and requires a special SyncML format to enable or disable. For details, see [Understanding ADMX-backed policies](./understanding-admx-backed-policies.md). +> +> You must specify the data type in the SyncML as <Format>chr</Format>. For an example SyncML, refer to [Enabling a policy](./understanding-admx-backed-policies.md#enabling-a-policy). +> +> The payload of the SyncML must be XML-encoded; for this XML encoding, there are a variety of online encoders that you can use. To avoid encoding the payload, you can use CDATA if your MDM supports it. For more information, see [CDATA Sections](http://www.w3.org/TR/REC-xml/#sec-cdata-sect). + + +ADMX Info: +- GP English name: *Removable Disks: Deny write access* +- GP name: *RemovableDisks_DenyWrite_Access_1* +- GP path: *System\Removable Storage Access* +- GP ADMX file name: *RemovableStorage.admx* + + +
    + + +**ADMX_RemovableStorage/RemovableStorageClasses_DenyAll_Access_1** + + + + + + + + + + + + + + + + + + + + + + + + + + + +
    Windows EditionSupported?
    Homecross mark
    Procross mark
    Businesscross mark
    Enterprisecheck mark
    Educationcross mark
    + + +
    + + +[Scope](./policy-configuration-service-provider.md#policy-scope): + +> [!div class = "checklist"] +> * User + +
    + + + +Available in the latest Windows 10 Insider Preview Build. Configure access to all removable storage classes. + +This policy setting takes precedence over any individual removable storage policy settings. To manage individual classes, use the policy settings available for each class. + +If you enable this policy setting, no access is allowed to any removable storage class. + +If you disable or do not configure this policy setting, write and read accesses are allowed to all removable storage classes. + + +> [!TIP] +> This is an ADMX-backed policy and requires a special SyncML format to enable or disable. For details, see [Understanding ADMX-backed policies](./understanding-admx-backed-policies.md). +> +> You must specify the data type in the SyncML as <Format>chr</Format>. For an example SyncML, refer to [Enabling a policy](./understanding-admx-backed-policies.md#enabling-a-policy). +> +> The payload of the SyncML must be XML-encoded; for this XML encoding, there are a variety of online encoders that you can use. To avoid encoding the payload, you can use CDATA if your MDM supports it. For more information, see [CDATA Sections](http://www.w3.org/TR/REC-xml/#sec-cdata-sect). + + +ADMX Info: +- GP English name: *All Removable Storage classes: Deny all access* +- GP name: *RemovableStorageClasses_DenyAll_Access_1* +- GP path: *System\Removable Storage Access* +- GP ADMX file name: *RemovableStorage.admx* + + +
    + + +**ADMX_RemovableStorage/RemovableStorageClasses_DenyAll_Access_2** + + + + + + + + + + + + + + + + + + + + + + + + + + + +
    Windows EditionSupported?
    Homecross mark
    Procross mark
    Businesscross mark
    Enterprisecheck mark
    Educationcross mark
    + + +
    + + +[Scope](./policy-configuration-service-provider.md#policy-scope): + +> [!div class = "checklist"] +> * Device + +
    + + + +Available in the latest Windows 10 Insider Preview Build. Configure access to all removable storage classes. + +This policy setting takes precedence over any individual removable storage policy settings. To manage individual classes, use the policy settings available for each class. + +If you enable this policy setting, no access is allowed to any removable storage class. + +If you disable or do not configure this policy setting, write and read accesses are allowed to all removable storage classes. + + +> [!TIP] +> This is an ADMX-backed policy and requires a special SyncML format to enable or disable. For details, see [Understanding ADMX-backed policies](./understanding-admx-backed-policies.md). +> +> You must specify the data type in the SyncML as <Format>chr</Format>. For an example SyncML, refer to [Enabling a policy](./understanding-admx-backed-policies.md#enabling-a-policy). +> +> The payload of the SyncML must be XML-encoded; for this XML encoding, there are a variety of online encoders that you can use. To avoid encoding the payload, you can use CDATA if your MDM supports it. For more information, see [CDATA Sections](http://www.w3.org/TR/REC-xml/#sec-cdata-sect). + + +ADMX Info: +- GP English name: *All Removable Storage classes: Deny all access* +- GP name: *RemovableStorageClasses_DenyAll_Access_2* +- GP path: *System\Removable Storage Access* +- GP ADMX file name: *RemovableStorage.admx* + + +
    + + +**ADMX_RemovableStorage/Removable_Remote_Allow_Access** + + + + + + + + + + + + + + + + + + + + + + + + + + + +
    Windows EditionSupported?
    Homecross mark
    Procross mark
    Businesscross mark
    Enterprisecheck mark
    Educationcross mark
    + + +
    + + +[Scope](./policy-configuration-service-provider.md#policy-scope): + +> [!div class = "checklist"] +> * Device + +
    + + + +Available in the latest Windows 10 Insider Preview Build. This policy setting grants normal users direct access to removable storage devices in remote sessions. + +If you enable this policy setting, remote users can open direct handles to removable storage devices in remote sessions. + +If you disable or do not configure this policy setting, remote users cannot open direct handles to removable storage devices in remote sessions. + + +> [!TIP] +> This is an ADMX-backed policy and requires a special SyncML format to enable or disable. For details, see [Understanding ADMX-backed policies](./understanding-admx-backed-policies.md). +> +> You must specify the data type in the SyncML as <Format>chr</Format>. For an example SyncML, refer to [Enabling a policy](./understanding-admx-backed-policies.md#enabling-a-policy). +> +> The payload of the SyncML must be XML-encoded; for this XML encoding, there are a variety of online encoders that you can use. To avoid encoding the payload, you can use CDATA if your MDM supports it. For more information, see [CDATA Sections](http://www.w3.org/TR/REC-xml/#sec-cdata-sect). + + +ADMX Info: +- GP English name: *All Removable Storage: Allow direct access in remote sessions* +- GP name: *Removable_Remote_Allow_Access* +- GP path: *System\Removable Storage Access* +- GP ADMX file name: *RemovableStorage.admx* + + +
    + + +**ADMX_RemovableStorage/TapeDrives_DenyExecute_Access_2** + + + + + + + + + + + + + + + + + + + + + + + + + + + +
    Windows EditionSupported?
    Homecross mark
    Procross mark
    Businesscross mark
    Enterprisecheck mark
    Educationcross mark
    + + +
    + + +[Scope](./policy-configuration-service-provider.md#policy-scope): + +> [!div class = "checklist"] +> * Device + +
    + + + +Available in the latest Windows 10 Insider Preview Build. This policy setting denies execute access to the Tape Drive removable storage class. + +If you enable this policy setting, execute access is denied to this removable storage class. + +If you disable or do not configure this policy setting, execute access is allowed to this removable storage class. + + +> [!TIP] +> This is an ADMX-backed policy and requires a special SyncML format to enable or disable. For details, see [Understanding ADMX-backed policies](./understanding-admx-backed-policies.md). +> +> You must specify the data type in the SyncML as <Format>chr</Format>. For an example SyncML, refer to [Enabling a policy](./understanding-admx-backed-policies.md#enabling-a-policy). +> +> The payload of the SyncML must be XML-encoded; for this XML encoding, there are a variety of online encoders that you can use. To avoid encoding the payload, you can use CDATA if your MDM supports it. For more information, see [CDATA Sections](http://www.w3.org/TR/REC-xml/#sec-cdata-sect). + + +ADMX Info: +- GP English name: *Tape Drives: Deny execute access* +- GP name: *TapeDrives_DenyExecute_Access_2* +- GP path: *System\Removable Storage Access* +- GP ADMX file name: *RemovableStorage.admx* + + +
    + + +**ADMX_RemovableStorage/TapeDrives_DenyRead_Access_1** + + + + + + + + + + + + + + + + + + + + + + + + + + + +
    Windows EditionSupported?
    Homecross mark
    Procross mark
    Businesscross mark
    Enterprisecheck mark
    Educationcross mark
    + + +
    + + +[Scope](./policy-configuration-service-provider.md#policy-scope): + +> [!div class = "checklist"] +> * User + +
    + + + +Available in the latest Windows 10 Insider Preview Build. This policy setting denies read access to the Tape Drive removable storage class. + +If you enable this policy setting, read access is denied to this removable storage class. + +If you disable or do not configure this policy setting, read access is allowed to this removable storage class. + +> [!TIP] +> This is an ADMX-backed policy and requires a special SyncML format to enable or disable. For details, see [Understanding ADMX-backed policies](./understanding-admx-backed-policies.md). +> +> You must specify the data type in the SyncML as <Format>chr</Format>. For an example SyncML, refer to [Enabling a policy](./understanding-admx-backed-policies.md#enabling-a-policy). +> +> The payload of the SyncML must be XML-encoded; for this XML encoding, there are a variety of online encoders that you can use. To avoid encoding the payload, you can use CDATA if your MDM supports it. For more information, see [CDATA Sections](http://www.w3.org/TR/REC-xml/#sec-cdata-sect). + + +ADMX Info: +- GP English name: *Tape Drives: Deny read access* +- GP name: *TapeDrives_DenyRead_Access_1* +- GP path: *System\Removable Storage Access* +- GP ADMX file name: *RemovableStorage.admx* + + +
    + + +**ADMX_RemovableStorage/TapeDrives_DenyRead_Access_2** + + + + + + + + + + + + + + + + + + + + + + + + + + + +
    Windows EditionSupported?
    Homecross mark
    Procross mark
    Businesscross mark
    Enterprisecheck mark
    Educationcross mark
    + + +
    + + +[Scope](./policy-configuration-service-provider.md#policy-scope): + +> [!div class = "checklist"] +> * Device + +
    + + + +Available in the latest Windows 10 Insider Preview Build. This policy setting denies read access to the Tape Drive removable storage class. + +If you enable this policy setting, read access is denied to this removable storage class. + +If you disable or do not configure this policy setting, read access is allowed to this removable storage class. + + +> [!TIP] +> This is an ADMX-backed policy and requires a special SyncML format to enable or disable. For details, see [Understanding ADMX-backed policies](./understanding-admx-backed-policies.md). +> +> You must specify the data type in the SyncML as <Format>chr</Format>. For an example SyncML, refer to [Enabling a policy](./understanding-admx-backed-policies.md#enabling-a-policy). +> +> The payload of the SyncML must be XML-encoded; for this XML encoding, there are a variety of online encoders that you can use. To avoid encoding the payload, you can use CDATA if your MDM supports it. For more information, see [CDATA Sections](http://www.w3.org/TR/REC-xml/#sec-cdata-sect). + + +ADMX Info: +- GP English name: *Tape Drives: Deny read access* +- GP name: *TapeDrives_DenyRead_Access_2* +- GP path: *System\Removable Storage Access* +- GP ADMX file name: *RemovableStorage.admx* + + +
    + + +**ADMX_RemovableStorage/TapeDrives_DenyWrite_Access_1** + + + + + + + + + + + + + + + + + + + + + + + + + + + +
    Windows EditionSupported?
    Homecross mark
    Procross mark
    Businesscross mark
    Enterprisecheck mark
    Educationcross mark
    + + +
    + + +[Scope](./policy-configuration-service-provider.md#policy-scope): + +> [!div class = "checklist"] +> * User + +
    + + + +Available in the latest Windows 10 Insider Preview Build. This policy setting denies write access to the Tape Drive removable storage class. + +If you enable this policy setting, write access is denied to this removable storage class. + +If you disable or do not configure this policy setting, write access is allowed to this removable storage class. + +> [!TIP] +> This is an ADMX-backed policy and requires a special SyncML format to enable or disable. For details, see [Understanding ADMX-backed policies](./understanding-admx-backed-policies.md). +> +> You must specify the data type in the SyncML as <Format>chr</Format>. For an example SyncML, refer to [Enabling a policy](./understanding-admx-backed-policies.md#enabling-a-policy). +> +> The payload of the SyncML must be XML-encoded; for this XML encoding, there are a variety of online encoders that you can use. To avoid encoding the payload, you can use CDATA if your MDM supports it. For more information, see [CDATA Sections](http://www.w3.org/TR/REC-xml/#sec-cdata-sect). + + +ADMX Info: +- GP English name: *Tape Drives: Deny write access* +- GP name: *TapeDrives_DenyWrite_Access_1* +- GP path: *System\Removable Storage Access* +- GP ADMX file name: *RemovableStorage.admx* + + +
    + + +**ADMX_RemovableStorage/TapeDrives_DenyWrite_Access_2** + + + + + + + + + + + + + + + + + + + + + + + + + + + +
    Windows EditionSupported?
    Homecross mark
    Procross mark
    Businesscross mark
    Enterprisecheck mark
    Educationcross mark
    + + +
    + + +[Scope](./policy-configuration-service-provider.md#policy-scope): + +> [!div class = "checklist"] +> * Device + +
    + + + +Available in the latest Windows 10 Insider Preview Build. This policy setting denies write access to the Tape Drive removable storage class. + +If you enable this policy setting, write access is denied to this removable storage class. + +If you disable or do not configure this policy setting, write access is allowed to this removable storage class. + + +> [!TIP] +> This is an ADMX-backed policy and requires a special SyncML format to enable or disable. For details, see [Understanding ADMX-backed policies](./understanding-admx-backed-policies.md). +> +> You must specify the data type in the SyncML as <Format>chr</Format>. For an example SyncML, refer to [Enabling a policy](./understanding-admx-backed-policies.md#enabling-a-policy). +> +> The payload of the SyncML must be XML-encoded; for this XML encoding, there are a variety of online encoders that you can use. To avoid encoding the payload, you can use CDATA if your MDM supports it. For more information, see [CDATA Sections](http://www.w3.org/TR/REC-xml/#sec-cdata-sect). + + +ADMX Info: +- GP English name: *Tape Drives: Deny write access* +- GP name: *TapeDrives_DenyWrite_Access_2* +- GP path: *System\Removable Storage Access* +- GP ADMX file name: *RemovableStorage.admx* + + +
    + + +**ADMX_RemovableStorage/WPDDevices_DenyRead_Access_1** + + + + + + + + + + + + + + + + + + + + + + + + + + + +
    Windows EditionSupported?
    Homecross mark
    Procross mark
    Businesscross mark
    Enterprisecheck mark
    Educationcross mark
    + + +
    + + +[Scope](./policy-configuration-service-provider.md#policy-scope): + +> [!div class = "checklist"] +> * User + +
    + + + +Available in the latest Windows 10 Insider Preview Build. This policy setting denies read access to removable disks, which may include media players, cellular phones, auxiliary displays, and CE devices. + +If you enable this policy setting, read access is denied to this removable storage class. + +If you disable or do not configure this policy setting, read access is allowed to this removable storage class. + + +> [!TIP] +> This is an ADMX-backed policy and requires a special SyncML format to enable or disable. For details, see [Understanding ADMX-backed policies](./understanding-admx-backed-policies.md). +> +> You must specify the data type in the SyncML as <Format>chr</Format>. For an example SyncML, refer to [Enabling a policy](./understanding-admx-backed-policies.md#enabling-a-policy). +> +> The payload of the SyncML must be XML-encoded; for this XML encoding, there are a variety of online encoders that you can use. To avoid encoding the payload, you can use CDATA if your MDM supports it. For more information, see [CDATA Sections](http://www.w3.org/TR/REC-xml/#sec-cdata-sect). + + +ADMX Info: +- GP English name: *WPD Devices: Deny read access* +- GP name: *WPDDevices_DenyRead_Access_1* +- GP path: *System\Removable Storage Access* +- GP ADMX file name: *RemovableStorage.admx* + + +
    + + +**ADMX_RemovableStorage/WPDDevices_DenyRead_Access_2** + + + + + + + + + + + + + + + + + + + + + + + + + + + +
    Windows EditionSupported?
    Homecross mark
    Procross mark
    Businesscross mark
    Enterprisecheck mark
    Educationcross mark
    + + +
    + + +[Scope](./policy-configuration-service-provider.md#policy-scope): + +> [!div class = "checklist"] +> * Device + +
    + + + +Available in the latest Windows 10 Insider Preview Build. This policy setting denies read access to removable disks, which may include media players, cellular phones, auxiliary displays, and CE devices. + +If you enable this policy setting, read access is denied to this removable storage class. + +If you disable or do not configure this policy setting, read access is allowed to this removable storage class. + +> [!TIP] +> This is an ADMX-backed policy and requires a special SyncML format to enable or disable. For details, see [Understanding ADMX-backed policies](./understanding-admx-backed-policies.md). +> +> You must specify the data type in the SyncML as <Format>chr</Format>. For an example SyncML, refer to [Enabling a policy](./understanding-admx-backed-policies.md#enabling-a-policy). +> +> The payload of the SyncML must be XML-encoded; for this XML encoding, there are a variety of online encoders that you can use. To avoid encoding the payload, you can use CDATA if your MDM supports it. For more information, see [CDATA Sections](http://www.w3.org/TR/REC-xml/#sec-cdata-sect). + + +ADMX Info: +- GP English name: *WPD Devices: Deny read access* +- GP name: *WPDDevices_DenyRead_Access_2* +- GP path: *System\Removable Storage Access* +- GP ADMX file name: *RemovableStorage.admx* + + +
    + + +**ADMX_RemovableStorage/WPDDevices_DenyWrite_Access_1** + + + + + + + + + + + + + + + + + + + + + + + + + + + +
    Windows EditionSupported?
    Homecross mark
    Procross mark
    Businesscross mark
    Enterprisecheck mark
    Educationcross mark
    + + +
    + + +[Scope](./policy-configuration-service-provider.md#policy-scope): + +> [!div class = "checklist"] +> * User + +
    + + + +Available in the latest Windows 10 Insider Preview Build. This policy setting denies write access to removable disks, which may include media players, cellular phones, auxiliary displays, and CE devices. + +If you enable this policy setting, write access is denied to this removable storage class. + +If you disable or do not configure this policy setting, write access is allowed to this removable storage class. + + +> [!TIP] +> This is an ADMX-backed policy and requires a special SyncML format to enable or disable. For details, see [Understanding ADMX-backed policies](./understanding-admx-backed-policies.md). +> +> You must specify the data type in the SyncML as <Format>chr</Format>. For an example SyncML, refer to [Enabling a policy](./understanding-admx-backed-policies.md#enabling-a-policy). +> +> The payload of the SyncML must be XML-encoded; for this XML encoding, there are a variety of online encoders that you can use. To avoid encoding the payload, you can use CDATA if your MDM supports it. For more information, see [CDATA Sections](http://www.w3.org/TR/REC-xml/#sec-cdata-sect). + + +ADMX Info: +- GP English name: *WPD Devices: Deny write access* +- GP name: *WPDDevices_DenyWrite_Access_1* +- GP path: *System\Removable Storage Access* +- GP ADMX file name: *RemovableStorage.admx* + + +
    + + +**ADMX_RemovableStorage/WPDDevices_DenyWrite_Access_2** + + + + + + + + + + + + + + + + + + + + + + + + + + + +
    Windows EditionSupported?
    Homecross mark
    Procross mark
    Businesscross mark
    Enterprisecheck mark
    Educationcross mark
    + + +
    + + +[Scope](./policy-configuration-service-provider.md#policy-scope): + +> [!div class = "checklist"] +> * Device + +
    + + + +Available in the latest Windows 10 Insider Preview Build. This policy setting denies write access to removable disks, which may include media players, cellular phones, auxiliary displays, and CE devices. + +If you enable this policy setting, write access is denied to this removable storage class. + +If you disable or do not configure this policy setting, write access is allowed to this removable storage class. + + +> [!TIP] +> This is an ADMX-backed policy and requires a special SyncML format to enable or disable. For details, see [Understanding ADMX-backed policies](./understanding-admx-backed-policies.md). +> +> You must specify the data type in the SyncML as <Format>chr</Format>. For an example SyncML, refer to [Enabling a policy](./understanding-admx-backed-policies.md#enabling-a-policy). +> +> The payload of the SyncML must be XML-encoded; for this XML encoding, there are a variety of online encoders that you can use. To avoid encoding the payload, you can use CDATA if your MDM supports it. For more information, see [CDATA Sections](http://www.w3.org/TR/REC-xml/#sec-cdata-sect). + + +ADMX Info: +- GP English name: *WPD Devices: Deny write access* +- GP name: *WPDDevices_DenyWrite_Access_2* +- GP path: *System\Removable Storage Access* +- GP ADMX file name: *RemovableStorage.admx* + + +
    + +Footnotes: + +- 1 - Available in Windows 10, version 1607. +- 2 - Available in Windows 10, version 1703. +- 3 - Available in Windows 10, version 1709. +- 4 - Available in Windows 10, version 1803. +- 5 - Available in Windows 10, version 1809. +- 6 - Available in Windows 10, version 1903. +- 7 - Available in Windows 10, version 1909. +- 8 - Available in Windows 10, version 2004. + + \ No newline at end of file From 95f1084e6f521b245cb378ed09cadfbc05aadc24 Mon Sep 17 00:00:00 2001 From: ImranHabib <47118050+joinimran@users.noreply.github.com> Date: Mon, 14 Dec 2020 18:20:45 +0500 Subject: [PATCH 080/486] Link update As suggested I have updated the correct link. Problem: https://github.com/MicrosoftDocs/windows-itpro-docs/issues/7896 --- .../microsoft-defender-atp/basic-permissions.md | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/windows/security/threat-protection/microsoft-defender-atp/basic-permissions.md b/windows/security/threat-protection/microsoft-defender-atp/basic-permissions.md index fed2ad3911..af97cb1355 100644 --- a/windows/security/threat-protection/microsoft-defender-atp/basic-permissions.md +++ b/windows/security/threat-protection/microsoft-defender-atp/basic-permissions.md @@ -47,7 +47,7 @@ You can assign users with one of the following levels of permissions: > [!NOTE] > You need to run the PowerShell cmdlets in an elevated command-line. -- Connect to your Azure Active Directory. For more information, see, [Connect-MsolService](https://msdn.microsoft.com/library/dn194123.aspx). +- Connect to your Azure Active Directory. For more information, see, [Connect-MsolService](https://docs.microsoft.com/powershell/module/msonline/connect-msolservice?view=azureadps-1.0). **Full access**
    Users with full access can log in, view all system information and resolve alerts, submit files for deep analysis, and download the onboarding package. From d8ee7f5e43c8023078e163c1a0df8b4fd7444973 Mon Sep 17 00:00:00 2001 From: Crimsonfox89 <40465227+Crimsonfox89@users.noreply.github.com> Date: Mon, 14 Dec 2020 14:36:40 +0000 Subject: [PATCH 081/486] Update related topic links to docs.microsoft.com links Updated related topic "TPM WMI providers" and "Prepare your organization for BitLocker: Planning and Policies - TPM configurations" links from MSDN/Technet links to Microsoft Docs. --- .../security/information-protection/tpm/tpm-fundamentals.md | 4 ++-- 1 file changed, 2 insertions(+), 2 deletions(-) diff --git a/windows/security/information-protection/tpm/tpm-fundamentals.md b/windows/security/information-protection/tpm/tpm-fundamentals.md index e2ae8c85e5..93210372ea 100644 --- a/windows/security/information-protection/tpm/tpm-fundamentals.md +++ b/windows/security/information-protection/tpm/tpm-fundamentals.md @@ -151,5 +151,5 @@ The Windows TPM-based smart card, which is a virtual smart card, can be configur - [Trusted Platform Module](trusted-platform-module-top-node.md) (list of topics) - [TPM Cmdlets in Windows PowerShell](https://docs.microsoft.com/powershell/module/trustedplatformmodule/) -- [TPM WMI providers](https://msdn.microsoft.com/library/aa376476.aspx) -- [Prepare your organization for BitLocker: Planning and Policies - TPM configurations](https://technet.microsoft.com/itpro/windows/keep-secure/prepare-your-organization-for-bitlocker-planning-and-policies#bkmk-tpmconfigurations) +- [TPM WMI providers](https://docs.microsoft.com/en-gb/windows/win32/secprov/security-wmi-providers-reference) +- [Prepare your organization for BitLocker: Planning and Policies - TPM configurations](https://docs.microsoft.com/en-gb/windows/security/information-protection/bitlocker/prepare-your-organization-for-bitlocker-planning-and-policies#tpm-hardware-configurations) From bb7869b07535f9201647ead2e0c07eccfefb26c9 Mon Sep 17 00:00:00 2001 From: Jordan Geurten Date: Mon, 14 Dec 2020 15:04:37 -0500 Subject: [PATCH 082/486] Updated create-base-policy sub-topic with spelling/grammar suggestions from acrolinx --- .../wdac-wizard-create-base-policy.md | 40 +++++++++---------- 1 file changed, 20 insertions(+), 20 deletions(-) diff --git a/windows/security/threat-protection/windows-defender-application-control/wdac-wizard-create-base-policy.md b/windows/security/threat-protection/windows-defender-application-control/wdac-wizard-create-base-policy.md index 0d1d32ff12..f532ee4e59 100644 --- a/windows/security/threat-protection/windows-defender-application-control/wdac-wizard-create-base-policy.md +++ b/windows/security/threat-protection/windows-defender-application-control/wdac-wizard-create-base-policy.md @@ -1,7 +1,7 @@ --- title: Windows Defender Application Control Wizard Base Policy Creation -description: Creating new base appliation control policies with the Microsoft WDAC Wizard. -keywords: allowlisting, blocklisting, security, malware +description: Creating new base application control policies with the Microsoft Windows Defender Application (WDAC) Wizard. +keywords: allow listing, block listing, security, malware ms.assetid: 8d6e0474-c475-411b-b095-1c61adb2bdbb ms.prod: w10 ms.mktglfcycl: deploy @@ -24,19 +24,19 @@ ms.date: 10/14/2020 - Windows 10 - Windows Server 2016 and above -When creating policies for use with Windows Defender Application Control (WDAC), it is recommended to start from an existing base policy and then add or remove rules to build your own custom policy XML files. For this reason, the WDAC Wizard offers three template policies to start from and customize during the base policy creation workflow. Prerequisite information about application control can be accessed through the [WDAC design guide](windows-defender-application-control-design-guide.md). This page outlines the steps to create a new application control policy from a template, configure the policy options, and the signer and file rules. +When creating policies for use with Windows Defender Application Control (WDAC), it is recommended to start with a template policy and then add or remove rules to suit your application control scenario. For this reason, the WDAC Wizard offers three template policies to start from and customize during the base policy creation workflow. Prerequisite information about application control can be accessed through the [WDAC design guide](windows-defender-application-control-design-guide.md). This page outlines the steps to create a new application control policy from a template, configure the policy options, and the signer and file rules. ## Template Base Policies -Each of the template policies has a unique set of policy allowlist rules which will affect the circle-of-trust and security model of the policy. The following table lists the policies in increasing order of trust and freedom. For instance, the Default Windows mode policy has fewer allowed signer rules, compared to the Signed and Reputable mode, and will offer a more selective circle-of-trust, less flexibility and subquently higher security. +Each of the template policies has a unique set of policy allow list rules that will affect the circle-of-trust and security model of the policy. The following table lists the policies in increasing order of trust and freedom. For instance, the Default Windows mode policy trusts fewer application publishers and signers than the Signed and Reputable mode policy. The Default Windows policy will have a smaller circle-of-trust with better security than the Signed and Reputable policy, but at the expense of compatibility. | **Template Base Policy** | **Description** | |---------------------------------|-------------------------------------------------------------------| -| **Default Windows Mode** | Default Windows mode will authorize the following components:
    • Windows operating components - any binary installed by a fresh install of Windows
    • Apps installed from the Microsoft Store
    • Microsoft Office365 apps, OneDrive and Microsoft Teams
    • Third party [Windows Hardware Compatible drivers](https://docs.microsoft.com/en-us/windows-hardware/drivers/install/whql-release-signature)
    | -| **Allow Microsoft Mode** | Allow mode will authorize the following components:
    • Windows operating components - any binary installed by a fresh install of Windows
    • Apps installed from the Microsoft Store
    • Microsoft Office365 apps, OneDrive and Microsoft Teams
    • Third party [Windows Hardware Compatible drivers](https://docs.microsoft.com/en-us/windows-hardware/drivers/install/whql-release-signature)
    • *All Microsoft-signed software*
    | -| **Signed and Reputable Mode** | Signed and Reputable mode will authorize the following components:
    • Windows operating components - any binary installed by a fresh install of Windows
    • Apps installed from the Microsoft Store
    • Microsoft Office365 apps, OneDrive and Microsoft Teams
    • Third party [Windows Hardware Compatible drivers](https://docs.microsoft.com/en-us/windows-hardware/drivers/install/whql-release-signature)
    • All Microsoft-signed software
    • *Files with good reputation per [Microsoft Defender's Intelligent Security Graph techology](use-windows-defender-application-control-with-intelligent-security-graph)*
    | +| **Default Windows Mode** | Default Windows mode will authorize the following components:
    • Windows operating components - any binary installed by a fresh install of Windows
    • Apps installed from the Microsoft Store
    • Microsoft Office365 apps, OneDrive, and Microsoft Teams
    • Third-party [Windows Hardware Compatible drivers](https://docs.microsoft.com/en-us/windows-hardware/drivers/install/whql-release-signature)
    | +| **Allow Microsoft Mode** | Allow mode will authorize the following components:
    • Windows operating components - any binary installed by a fresh install of Windows
    • Apps installed from the Microsoft Store
    • Microsoft Office365 apps, OneDrive, and Microsoft Teams
    • Third-party [Windows Hardware Compatible drivers](https://docs.microsoft.com/en-us/windows-hardware/drivers/install/whql-release-signature)
    • *All Microsoft-signed software*
    | +| **Signed and Reputable Mode** | Signed and Reputable mode will authorize the following components:
    • Windows operating components - any binary installed by a fresh install of Windows
    • Apps installed from the Microsoft Store
    • Microsoft Office365 apps, OneDrive, and Microsoft Teams
    • Third-party [Windows Hardware Compatible drivers](https://docs.microsoft.com/en-us/windows-hardware/drivers/install/whql-release-signature)
    • All Microsoft-signed software
    • *Files with good reputation per [Microsoft Defender's Intelligent Security Graph technology](use-windows-defender-application-control-with-intelligent-security-graph)*
    | *Italized content denotes the changes in the current policy with respect to the policy prior.* @@ -47,18 +47,18 @@ Once the base template is selected, give the policy a name and choose where to s ## Configuring Policy Rules -Upon page launch, policy rules will be automatically enabled/disabled depending on the chosen template from the previous page. Choose to enable or disable the desired policy rule options by pressing the slider button next to the policy rule titles. Hovering the mouse over the policy rule title will display a short description of the rule at the bottom of the page. +Upon page launch, policy rules will be automatically enabled/disabled depending on the chosen template from the previous page. Choose to enable or disable the desired policy rule options by pressing the slider button next to the policy rule titles. A short description of each rule will appear at the bottom of the page when the mouse hovers over the rule title. ### Policy Rules Description -A description of the policy rules, beginning with the left-most column are provided below. +A description of each policy rule, beginning with the left-most column, is provided below. | Rule option | Description | |------------ | ----------- | | **Advanced Boot Options Menu** | The F8 preboot menu is disabled by default for all WDAC policies. Setting this rule option allows the F8 menu to appear to physically present users. | | **Allow Supplemental Policies** | Use this option on a base policy to allow supplemental policies to expand it. | | **Disable Script Enforcement** | This option disables script enforcement options. Unsigned PowerShell scripts and interactive PowerShell are no longer restricted to [Constrained Language Mode](https://docs.microsoft.com/powershell/module/microsoft.powershell.core/about/about_language_modes). NOTE: This option is only supported with the Windows 10 May 2019 Update (1903) and higher. Using it on earlier versions of Windows 10 is not supported and may have unintended results. | -|**[Hypervisor-protected code integrity](https://docs.microsoft.com/en-us/windows/security/threat-protection/device-guard/enable-virtualization-based-protection-of-code-integrity)**| When enabled, policy enforcement uses virtualization-based security to run the code integrity service inside a secure environment. This provides stronger protections against kernel malware.| +|**[Hypervisor-protected code integrity (HVCI)](https://docs.microsoft.com/en-us/windows/security/threat-protection/device-guard/enable-virtualization-based-protection-of-code-integrity)**| When enabled, policy enforcement uses virtualization-based security to run the code integrity service inside a secure environment. HVCI provides stronger protections against kernel malware.| | **Intelligent Security Graph Authorization** | Use this option to automatically allow applications with "known good" reputation as defined by Microsoft’s Intelligent Security Graph (ISG). | | **Managed Installer** | Use this option to automatically allow applications installed by a software distribution solution, such as Microsoft Endpoint Configuration Manager, that has been defined as a managed installer. | | **Require WHQL** | By default, legacy drivers that are not Windows Hardware Quality Labs (WHQL) signed are allowed to execute. Enabling this rule requires that every executed driver is WHQL signed and removes legacy driver support. Going forward, every new Windows 10–compatible driver must be WHQL certified. | @@ -68,15 +68,15 @@ A description of the policy rules, beginning with the left-most column are provi ### Advanced Policy Rules Description -Selecting the **+ Advanced Options** label will show another column of policy rules; advanced policy rules. A description of the policy rules are provided below. +Selecting the **+ Advanced Options** label will show another column of policy rules; advanced policy rules. A description of each policy rule is provided below. | Rule option | Description | |------------ | ----------- | | **Boot Audit on Failure** | Used when the WDAC policy is in enforcement mode. When a driver fails during startup, the WDAC policy will be placed in audit mode so that Windows will load. Administrators can validate the reason for the failure in the CodeIntegrity event log. | -| **Disable Flight Signing** | If enabled, WDAC policies will not trust flightroot-signed binaries. This would be used in the scenario in which organizations only want to run released binaries, not flighted builds. | +| **Disable Flight Signing** | If enabled, WDAC policies will not trust flightroot-signed binaries. This would be used in the scenario in which organizations only want to run released binaries, not flight/preview-signed builds. | | **Disable Runtime FilePath Rule Protection** | Disable default FilePath rule protection (apps and executables allowed based on file path rules must come from a file path that’s only writable by an administrator) for any FileRule that allows a file based on FilePath. | -| **Dynamic Code Security** | Enables policy enforcement for .NET applications and dynamically-loaded libraries. | -| **Invalidate EAs on Reboot** | When the Intelligent Security Graph option (14) is used, WDAC sets an extended file attribute that indicates that the file was authorized to run. This option will cause WDAC to periodically re-validate the reputation for files that were authorized by the ISG.| +| **Dynamic Code Security** | Enables policy enforcement for .NET applications and dynamically loaded libraries (DLLs). | +| **Invalidate EAs on Reboot** | When the Intelligent Security Graph option (14) is used, WDAC sets an extended file attribute that indicates that the file was authorized to run. This option will cause WDAC to periodically revalidate the reputation for files that were authorized by the ISG.| | **Require EV Signers** | In addition to being WHQL signed, this rule requires that drivers must have been submitted by a partner that has an Extended Verification (EV) certificate. All Windows 10 and later drivers will meet this requirement. | @@ -88,29 +88,29 @@ Selecting the **+ Advanced Options** label will show another column of policy ru ## Creating custom file rules -File rules in an application control policy will specify the level at which appiations will be identified and trusted. File rules are the main mechanism for defining trust in the application control policy. Selecting the **+ Custom Rules** will open the custom file rule conditions panel to create and customize targeted file rules for your policy. The Wizard supports 4 types of file rules: +File rules in an application control policy will specify the level at which applications will be identified and trusted. File rules are the main mechanism for defining trust in the application control policy. Selecting the **+ Custom Rules** will open the custom file rule conditions panel to create custom file rules for your policy. The Wizard supports four types of file rules: ### Publisher Rules -The Publisher file rule type uses properties in the code signing certificate chain to base file rules. Once the file to base the rule off of, called the *reference file*, is selected, use the slider to indicate the specifity of the rule. The table below shows the relationship between the slider placement, the corresponding WDAC rule level and its description. The lower the placement on the table and the UI slider, the greater the specificity of the rule. +The Publisher file rule type uses properties in the code signing certificate chain to base file rules. Once the file to base the rule off of, called the *reference file*, is selected, use the slider to indicate the specificity of the rule. The table below shows the relationship between the slider placement, the corresponding WDAC rule level and its description. The lower the placement on the table and the UI slider, the greater the specificity of the rule. | Rule Condition | WDAC Rule Level | Description | |------------ | ----------- | ----------- | | **Issuing CA** | PCACertificate | Highest available certificate is added to the signers. This is typically the PCA certificate, one level below the root certificate. Any file signed by this certificate will be affected. | | **Publisher** | Publisher | This rule is a combination of the PCACertificate rule and the common name (CN) of the leaf certificate. Any file signed by a major CA but with a leaf from a specific company, for example a device driver corp, is affected. | -| **File version** | SignedVersion | This rule is a combination of PCACertificate, Publisher and a version number. Anything from the specified publisher with a version at or above the one specified is affected. | -| **File name** | FilePublisher | Most specific. Combination of the file name, publisher and PCA certificate as well as a minimum version number. Files from the publisher with the specified name and greater or equal to the specified version are affected. | +| **File version** | SignedVersion | This rule is a combination of PCACertificate, publisher, and a version number. Anything from the specified publisher with a version at or above the one specified is affected. | +| **File name** | FilePublisher | Most specific. Combination of the file name, publisher, and PCA certificate as well as a minimum version number. Files from the publisher with the specified name and greater or equal to the specified version are affected. | ![Custom filepublisher file rule creation](images/wdac-wizard-custom-publisher-rule.png) ### Filepath Rules -Filepath rules do not provide the same security guarantees that explicit signer rules do, as they are based on mutable access permissions. To create a filepath rule, simply select the file using the *Browse* button. +Filepath rules do not provide the same security guarantees that explicit signer rules do, as they are based on mutable access permissions. To create a filepath rule, select the file using the *Browse* button. ### File Attribute Rules -The Wizard supports the creation of [file name rules](select-types-of-rules-to-create#windows-defender-application-control-filename-rules) based on authenticated file attributes. File name rules are useful when an application and its dependencies (eg. DLLs) may all share the same product name, for instance. This allows users to easily create targeted policies based on the Product Name filename rule level. To select the file attribute to create the rule, move the slider on the Wizard to the desired attribute. The table below describes each of the supported file attributes off which to create a rule. +The Wizard supports the creation of [file name rules](select-types-of-rules-to-create#windows-defender-application-control-filename-rules) based on authenticated file attributes. File name rules are useful when an application and its dependencies (for example, DLLs) may all share the same product name, for instance. This rule level allows users to easily create targeted policies based on the Product Name file name parameter. To select the file attribute to create the rule, move the slider on the Wizard to the desired attribute. The table below describes each of the supported file attributes off which to create a rule. | Rule level | Description | |------------ | ----------- | From f039be808ff15bafce5f18b910d642bc1c21fae8 Mon Sep 17 00:00:00 2001 From: Jordan Geurten Date: Mon, 14 Dec 2020 15:17:46 -0500 Subject: [PATCH 083/486] Updated wdac-wizard.md to fix spelling and grammar per Acrolinx scorecard --- .../wdac-wizard.md | 18 +++++++++--------- 1 file changed, 9 insertions(+), 9 deletions(-) diff --git a/windows/security/threat-protection/windows-defender-application-control/wdac-wizard.md b/windows/security/threat-protection/windows-defender-application-control/wdac-wizard.md index c21368ab72..89403445f6 100644 --- a/windows/security/threat-protection/windows-defender-application-control/wdac-wizard.md +++ b/windows/security/threat-protection/windows-defender-application-control/wdac-wizard.md @@ -1,6 +1,6 @@ --- title: Windows Defender Application Control Wizard -description: Microsoft WDAC Wizard allows users to create, edit and merge application control policies in a simple to use Windows application. +description: Microsoft Defender Application Control Wizard (WDAC) Wizard allows users to create, edit, and merge application control policies in a simple to use Windows application. keywords: allowlisting, blocklisting, security, malware ms.assetid: 8d6e0474-c475-411b-b095-1c61adb2bdbb ms.prod: w10 @@ -25,11 +25,11 @@ ms.date: 10/14/2020 - Windows 10 - Windows Server 2016 and above -This topic describes the supported scenarios for the Windows Defender Application Control (WDAC) policy Wizard. The Wizard was built to provide security architects, security administrators, and system administrators with a more user-friendly means to create, edit and merge application control policies using a GUI desktop application. The Wizard uses the [ConfigCI PowerShell Cmdlets](https://docs.microsoft.com/en-us/powershell/module/configci/?view=win10-ps) in the background so the output policy of the Wizard and PowerShell cmdlets are identical. +This article describes the supported scenarios for the Windows Defender Application Control (WDAC) policy Wizard. The Wizard was built to provide security architects, security and system administrators with a more user-friendly means to create, edit, and merge WDAC policies. The Wizard desktop application uses the [ConfigCI PowerShell Cmdlets](https://docs.microsoft.com/en-us/powershell/module/configci/?view=win10-ps) in the background so the output policy of the Wizard and PowerShell cmdlets is identical. ## Downloading the application -The latest version of the application is available for download from the official [Microsoft WDAC Wizard installer website](https://bit.ly/3koHwYs) as an MSIX packaged application. Additionally, the source code for the Wizard is also available as part of Microsoft's Open Source Software offerings on Github at the [WDAC Wizard Repo](https://github.com/MicrosoftDocs/WDAC-Toolkit). +The WDAC Wizard can be downloaded from the official [Wizard installer website](https://bit.ly/3koHwYs) as an MSIX packaged application. The Wizard's source code is available as part of Microsoft's Open Source Software offerings on GitHub at the [WDAC Wizard Repo](https://github.com/MicrosoftDocs/WDAC-Toolkit). **Supported Clients** @@ -38,16 +38,16 @@ As the WDAC Wizard uses the cmdlets in the background, the Wizard is functional - Windows builds 1909+ - For pre-1909 builds, the Enterprise SKU of Windows is installed -If neither requirement is satisfied, the Wizard will not allow for creating, editing or merging policies. +If neither requirement is satisfied, the Wizard will throw an error as the cmdlets are not available. ## In this section | Topic | Description | | - | - | -| [Creating a new base policy](wdac-wizard-create-base-policy.md) | This topic describes the how to create a new base policy using one of the supplied policy templates. | -| [Creating a new supplemental policy](wdac-wizard-create-supplemental-policy.md) | This topic describes the steps necessary to create a supplemental policy, from one of the supplied templates, for an existing base policy. | -| [Editing a base or supplemental policy](wdac-wizard-edit-policy.md) | This topic demonstrates how to modify an existing policy and the Wizard's editing capabilities. | -| [Merging policies](wdac-wizard-merging-policies.md) | This topic describes how to merge policies into a single application control policy. | -| [Deploying policies from the Wizard](wdac-wizard-deploying-policies.md) | This topic describes how to deploy application control policies onto target devices. | +| [Creating a new base policy](wdac-wizard-create-base-policy.md) | This article describes how to create a new base policy using one of the supplied policy templates. | +| [Creating a new supplemental policy](wdac-wizard-create-supplemental-policy.md) | This article describes the steps necessary to create a supplemental policy, from one of the supplied templates, for an existing base policy. | +| [Editing a base or supplemental policy](wdac-wizard-edit-policy.md) | This article demonstrates how to modify an existing policy and the Wizard's editing capabilities. | +| [Merging policies](wdac-wizard-merging-policies.md) | This article describes how to merge policies into a single application control policy. | +| [Deploying policies from the Wizard](wdac-wizard-deploying-policies.md) | This article describes how to deploy application control policies onto target devices. | From c96a8ddee724d98fb665ca7ca9c8e62994dca78b Mon Sep 17 00:00:00 2001 From: Jordan Geurten Date: Mon, 14 Dec 2020 15:35:18 -0500 Subject: [PATCH 084/486] updated wdac-wizard-create-supplemental-policy.md for grammar/spelling --- .../wdac-wizard-create-supplemental-policy.md | 35 +++++++++---------- 1 file changed, 17 insertions(+), 18 deletions(-) diff --git a/windows/security/threat-protection/windows-defender-application-control/wdac-wizard-create-supplemental-policy.md b/windows/security/threat-protection/windows-defender-application-control/wdac-wizard-create-supplemental-policy.md index 77ebccf335..6dc20f1ffe 100644 --- a/windows/security/threat-protection/windows-defender-application-control/wdac-wizard-create-supplemental-policy.md +++ b/windows/security/threat-protection/windows-defender-application-control/wdac-wizard-create-supplemental-policy.md @@ -30,27 +30,26 @@ Prerequisite information about application control can be accessed through the [ ## Expanding a Base Policy -Once the Policy Creator > Supplemental Policy type is chosen, a policy name and file location dialog will appear to name and save the supplemental policy. The next step requires selecting a base policy to expand. To expand a base policy, the base must allow supplemental policies. The WDAC Wizard will verify whether the base poliy allows supplementals and will show either of the following confirmations. +Once the Supplemental Policy type is chosen on the New Policy page, policy name and file dialog fields can be used to name and save the supplemental policy. The next step requires selecting a base policy to expand. To expand a base policy, the base must allow supplemental policies. The WDAC Wizard will verify if the base policy allows supplementals and will show the following confirmation. ![Base policy allows supplemental policies](images/wdac-wizard-supplemental-expandable.png) -![Base policy does not allow supplemental policies](images/wdac-wizard-supplemental-not-expandable.png) If the base policy is not configured for supplemental policies, first edit the base policy to allow supplementals using the [WDAC Wizard edit workflow](edac-wizard-editing-policy.md). ## Configuring Policy Rules -Upon page launch, policy rules will be automatically enabled/disabled depending on the chosen template from the previous page. Choose to enable or disable the desired policy rule options by pressing the slider button next to the policy rule titles. Hovering the mouse over the policy rule title will display a short description of the rule at the bottom of the page. +Upon page launch, policy rules will be automatically enabled/disabled depending on the chosen template from the previous page. Choose to enable or disable the desired policy rule options by pressing the slider button next to the policy rule titles. A short description of the rule will be shown at the bottom of the page when the cursor is placed on the rule title. ### Policy Rules Description -A description of the policy rules, beginning with the left-most column are provided below. +A description of each policy rule, beginning with the left-most column, is provided below. | Rule option | Description | |------------ | ----------- | | **Advanced Boot Options Menu** | The F8 preboot menu is disabled by default for all WDAC policies. Setting this rule option allows the F8 menu to appear to physically present users. | | **Allow Supplemental Policies** | Use this option on a base policy to allow supplemental policies to expand it. | | **Disable Script Enforcement** | This option disables script enforcement options. Unsigned PowerShell scripts and interactive PowerShell are no longer restricted to [Constrained Language Mode](https://docs.microsoft.com/powershell/module/microsoft.powershell.core/about/about_language_modes). NOTE: This option is only supported with the Windows 10 May 2019 Update (1903) and higher. Using it on earlier versions of Windows 10 is not supported and may have unintended results. | -|**[Hypervisor-protected code integrity](https://docs.microsoft.com/en-us/windows/security/threat-protection/device-guard/enable-virtualization-based-protection-of-code-integrity)**| When enabled, policy enforcement uses virtualization-based security to run the code integrity service inside a secure environment. This provides stronger protections against kernel malware.| +|**[Hypervisor-protected code integrity (HVCI)](https://docs.microsoft.com/en-us/windows/security/threat-protection/device-guard/enable-virtualization-based-protection-of-code-integrity)**| When enabled, policy enforcement uses virtualization-based security to run the code integrity service inside a secure environment. HVCI provides stronger protections against kernel malware.| | **Intelligent Security Graph Authorization** | Use this option to automatically allow applications with "known good" reputation as defined by Microsoft’s Intelligent Security Graph (ISG). | | **Managed Installer** | Use this option to automatically allow applications installed by a software distribution solution, such as Microsoft Endpoint Configuration Manager, that has been defined as a managed installer. | | **Require WHQL** | By default, legacy drivers that are not Windows Hardware Quality Labs (WHQL) signed are allowed to execute. Enabling this rule requires that every executed driver is WHQL signed and removes legacy driver support. Going forward, every new Windows 10–compatible driver must be WHQL certified. | @@ -60,15 +59,15 @@ A description of the policy rules, beginning with the left-most column are provi ### Advanced Policy Rules Description -Selecting the **+ Advanced Options** label will show another column of policy rules; advanced policy rules. A description of the policy rules are provided below. +Selecting the **+ Advanced Options** label will show another column of policy rules; advanced policy rules. A description of each policy rule is provided below. | Rule option | Description | |------------ | ----------- | | **Boot Audit on Failure** | Used when the WDAC policy is in enforcement mode. When a driver fails during startup, the WDAC policy will be placed in audit mode so that Windows will load. Administrators can validate the reason for the failure in the CodeIntegrity event log. | -| **Disable Flight Signing** | If enabled, WDAC policies will not trust flightroot-signed binaries. This would be used in the scenario in which organizations only want to run released binaries, not flighted builds. | +| **Disable Flight Signing** | If enabled, WDAC policies will not trust flightroot-signed binaries. This setting should be used in scenarios where organizations only want to run production binaries, not flight/preivew-signed builds. | | **Disable Runtime FilePath Rule Protection** | Disable default FilePath rule protection (apps and executables allowed based on file path rules must come from a file path that’s only writable by an administrator) for any FileRule that allows a file based on FilePath. | -| **Dynamic Code Security** | Enables policy enforcement for .NET applications and dynamically-loaded libraries. | -| **Invalidate EAs on Reboot** | When the Intelligent Security Graph option (14) is used, WDAC sets an extended file attribute that indicates that the file was authorized to run. This option will cause WDAC to periodically re-validate the reputation for files that were authorized by the ISG.| +| **Dynamic Code Security** | Enables policy enforcement for .NET applications and dynamically loaded libraries. | +| **Invalidate EAs on Reboot** | When the Intelligent Security Graph option (14) is used, WDAC sets an extended file attribute that indicates that the file was authorized to run. This option will cause WDAC to periodically revalidate the reputation for files that were authorized by the ISG.| | **Require EV Signers** | In addition to being WHQL signed, this rule requires that drivers must have been submitted by a partner that has an Extended Verification (EV) certificate. All Windows 10 and later drivers will meet this requirement. | @@ -80,17 +79,17 @@ Selecting the **+ Advanced Options** label will show another column of policy ru ## Creating custom file rules -File rules in an application control policy will specify the level at which appiations will be identified and trusted. File rules are the main mechanism for defining trust in the application control policy. Selecting the **+ Custom Rules** will open the custom file rule conditions panel to create and customize targeted file rules for your policy. The Wizard supports 4 types of file rules: +File rules in an application control policy will specify the level at which applications will be identified and trusted. File rules are the main mechanism for defining trust in the application control policy. Selecting the **+ Custom Rules** will open the custom file rule conditions panel to create and customize targeted file rules for your policy. The Wizard supports four types of file rules: ### Publisher Rules -The Publisher file rule type uses properties in the code signing certificate chain to base file rules. Once the file to base the rule off of, called the *reference file*, is selected, use the slider to indicate the specifity of the rule. The table below shows the relationship between the slider placement, the corresponding WDAC rule level and its description. The lower the placement on the table and the UI slider, the greater the specificity of the rule. +The Publisher file rule type uses properties in the code signing certificate chain to base file rules. Once the file to base the rule off of, called the *reference file*, is selected, use the slider to indicate the specificity of the rule. The table below shows the relationship between the slider placement, the corresponding WDAC rule level, and its description. The lower the placement on the table and the UI slider, the greater the specificity of the rule. | Rule Condition | WDAC Rule Level | Description | |------------ | ----------- | ----------- | -| **Issuing CA** | PCACertificate | Highest available certificate is added to the signers. This is typically the PCA certificate, one level below the root certificate. Any file signed by this certificate will be affected. | -| **Publisher** | Publisher | This rule is a combination of the PCACertificate rule and the common name (CN) of the leaf certificate. Any file signed by a major CA but with a leaf from a specific company, for example a device driver corp, is affected. | -| **File version** | SignedVersion | This rule is a combination of PCACertificate, Publisher and a version number. Anything from the specified publisher with a version at or above the one specified is affected. | +| **Issuing CA** | PCACertificate | Highest available certificate is added to the signers. This certificate is typically the PCA certificate, one level below the root certificate. Any file signed by this certificate will be affected. | +| **Publisher** | Publisher | This rule is a combination of the PCACertificate rule and the common name (CN) of the leaf certificate. Any file signed by a major CA but with a leaf from a specific company, for example a device driver publisher, is affected. | +| **File version** | SignedVersion | This rule is a combination of the PCACertificate and Publisher rule, and a version number. Anything from the specified publisher with a version at or above the one specified is affected. | | **File name** | FilePublisher | Most specific. Combination of the file name, publisher and PCA certificate as well as a minimum version number. Files from the publisher with the specified name and greater or equal to the specified version are affected. | @@ -98,11 +97,11 @@ The Publisher file rule type uses properties in the code signing certificate cha ### Filepath Rules -Filepath rules do not provide the same security guarantees that explicit signer rules do, as they are based on mutable access permissions. To create a filepath rule, simply select the file using the *Browse* button. +Filepath rules do not provide the same security guarantees that explicit signer rules do, as they are based on mutable access permissions. To create a filepath rule, select the file using the *Browse* button. ### File Attribute Rules -The Wizard supports the creation of [file name rules](select-types-of-rules-to-create#windows-defender-application-control-filename-rules) based on authenticated file attributes. File name rules are useful when an application and its dependencies (eg. DLLs) may all share the same product name, for instance. This allows users to easily create targeted policies based on the Product Name filename rule level. To select the file attribute to create the rule, move the slider on the Wizard to the desired attribute. The table below describes each of the supported file attributes off which to create a rule. +The Wizard supports the creation of [file name rules](select-types-of-rules-to-create#windows-defender-application-control-filename-rules) based on authenticated file attributes. File name rules are useful when an application and its dependencies (for example, DLLs) may all share the same product name, for instance. This rule level allows users to easily create targeted policies based on the Product Name file name. To select the file attribute to create the rule, move the slider on the Wizard to the desired attribute. The table below describes each of the supported file attributes off which to create a rule. | Rule level | Description | |------------ | ----------- | @@ -121,8 +120,8 @@ Lastly, the Wizard supports creating file rules using the hash of the file. Alth #### Deleting Signing Rules -The policy signing rules list table on the left of the page will document the allow and deny rules in the template, as well as any custom rules you create. Template signing rules and custom rules can be deleted from the policy by selecting the rule from the rules list table. Once the rule is highlighted, press the delete button underneath the table. you will be prompted for additional confirmation. Select `Yes` to remove the rule from the policy and the rules table. +The table on the left of the page will document the allow and deny rules in the template, as well as any custom rules you create. Rules can be deleted from the policy by selecting the rule from the rules list table. Once the rule is highlighted, press the delete button underneath the table. you will be prompted for additional confirmation. Select `Yes` to remove the rule from the policy and the rules table. ## Up next -- [Editing a WDAC policy using the Wizard](wdac-wizard-editing-policy.md) \ No newline at end of file +- [Editing a WDAC policy using the Wizard](wdac-wizard-editing-policy.md) From c70c8ee8812de16b0c4c8b9f52202ebfad5083d2 Mon Sep 17 00:00:00 2001 From: Jordan Geurten Date: Mon, 14 Dec 2020 15:49:59 -0500 Subject: [PATCH 085/486] fixed grammar/spelling in wdac-wizard-editing-policy.md --- .../wdac-wizard-editing-policy.md | 16 ++++++++-------- 1 file changed, 8 insertions(+), 8 deletions(-) diff --git a/windows/security/threat-protection/windows-defender-application-control/wdac-wizard-editing-policy.md b/windows/security/threat-protection/windows-defender-application-control/wdac-wizard-editing-policy.md index d3ef342f31..ec71f80aba 100644 --- a/windows/security/threat-protection/windows-defender-application-control/wdac-wizard-editing-policy.md +++ b/windows/security/threat-protection/windows-defender-application-control/wdac-wizard-editing-policy.md @@ -18,13 +18,13 @@ ms.topic: conceptual ms.date: 10/14/2020 --- -# Editing exisiting base and supplemental WDAC policies with the Wizard +# Editing existing base and supplemental WDAC policies with the Wizard **Applies to** - Windows 10 - Windows Server 2016 and above -The WDAC Wizard makes editing and viewing base and supplemental WDAC policies much easier than by hand or using the PowerShell Cmdlets. The Wizard currently supports the following editing capbilities: +The WDAC Wizard makes editing and viewing WDAC policies easier than the PowerShell cmdlets or manually. The Wizard currently supports the following editing capabilities:
    • [Configuring policy rules](#Configuring-Policy-Rules)
    • [Adding new allow or block file rules to existing policies](#Adding-File-Rules)
      • @@ -34,21 +34,21 @@ The WDAC Wizard makes editing and viewing base and supplemental WDAC policies mu # Configuring Policy Rules -The `Policy Rules` page will load with the in-edit policy rules configured per the set rules. Selecting the `+ Advanced Options` button will reveal the advanced policy rule options panel. This grouping of rules contains additional policy rule options which are less common to the majority of users. To edit any of the rules, flip the corresponding policy rule state. For instance, to disable Audit Mode and enable Enforcement Mode in the figure below, the button beside the `Audit Mode` label needs only to be pressed. Once the policy rules are configured, select the Next button to continue the next stage of editing: [Adding File Rules](#Adding-File-Rules). +The `Policy Rules` page will load with the in-edit policy rules configured per the set rules. Selecting the `+ Advanced Options` button will reveal the advanced policy rule options panel. This grouping of rules contains additional policy rule options that are less common to the majority of users. To edit any of the rules, flip the corresponding policy rule state. For instance, to disable Audit Mode and enable Enforcement Mode in the figure below, the button beside the `Audit Mode` label needs only to be pressed. Once the policy rules are configured, select the Next button to continue the next stage of editing: [Adding File Rules](#Adding-File-Rules). ![Configuring the policy rules](images/wdac-wizard-edit-policy-rules.png) -Hovering the mouse over the policy rule names will display a short description of the ruleat the bottom of the page.For a complete list of the policy rules and their capabilities see the [Windows Defender Application Control policy rules table](select-types-of-rules-to-create.md#windows-defender-application-control-policy-rules). +A description of the policy rule is shown at the bottom of the page when the cursor is placed over the rule title. For a complete list of the policy rules and their capabilities, see the [Windows Defender Application Control policy rules table](select-types-of-rules-to-create.md#windows-defender-application-control-policy-rules). ## Adding File Rules -Previously, to add rules to an existing policy, users would be required to create a new policy and merge it with their existing policy, or edit the policy by hand. The WDAC Wizard allows users to add rules to their exising policy seamlessly. +The WDAC Wizard allows users to add rules to their existing policy seamlessly. Previously, this would have involved creating a new policy with the new rules and merging it with the existing policy. Selecting the `+ Custom Rules` button will open the Custom Rules panel. For more information on creating new policy file rules, see the guidelines provided in the [creating policy file rules section](wdac-wizard-create-base-policy.md#Creating-custom-file-rules). ## Removing File Rules -The WDAC Wizard makes deleting file rules from an existing policy quick and easy. To remove any type of file rule: publisher rule, path rule, filename rule or a hash rule, simply click on the rule in the `Policy Signing Rules List` table on the lefthand side of the page. Selecting the rule will highlight the entire row. Once the row is highlighted, select the remove icon underneath the table. The Wizard will prompt for user confirmation before removing the file rule. Once removed, the rule will no longer appear in the policy or the table. +The WDAC Wizard makes deleting file rules from an existing policy quick and easy. To remove any type of file rule: publisher rule, path rule, filename rule, or a hash rule, select the rule in the `Policy Signing Rules List` table on the left-hand side of the page. Selecting the rule will highlight the entire row. Once the row is highlighted, select the remove icon underneath the table. The Wizard will prompt for user confirmation before removing the file rule. Once removed, the rule will no longer appear in the policy or the table. ![Removing file rule from policy during edit](image/wdac-wizard-edit-remove-file-rule.png) @@ -66,8 +66,8 @@ The WDAC Wizard makes deleting file rules from an existing policy quick and easy ### Policy Creation -Once the WDAC Wizard finalizes creation of your edited policy, the new policy will be written to the same file path and name as the in-edit policy with the new version appended to the end of the file name. For instance, if the in-edit policy is saved at MyDocuments\BasePolicy.xml, after edit, the new policy will be saved at MyDocuments\BasePolicy_v10.0.0.1.xml. +Once the policy is created, the new policy will be written to the same path as the in-edit policy. The new policy file name will have the policy version appended to the end of the file name. For instance, if the in-edit policy is saved at MyDocuments\BasePolicy.xml, after edit, the new policy will be saved at MyDocuments\BasePolicy_v10.0.0.1.xml. ## Up next -- [Merging WDAC policies using the Wizard](wdac-wizard-merging-policies.md) \ No newline at end of file +- [Merging WDAC policies using the Wizard](wdac-wizard-merging-policies.md) From 15ef5a5dcb2e6dafff3de6cb9a0624fe81d356e1 Mon Sep 17 00:00:00 2001 From: Jordan Geurten Date: Mon, 14 Dec 2020 15:56:08 -0500 Subject: [PATCH 086/486] fixed grammar/spelling in merging policies article --- .../wdac-wizard-merging-policies.md | 8 ++++---- 1 file changed, 4 insertions(+), 4 deletions(-) diff --git a/windows/security/threat-protection/windows-defender-application-control/wdac-wizard-merging-policies.md b/windows/security/threat-protection/windows-defender-application-control/wdac-wizard-merging-policies.md index 53f2c6162d..eca772e093 100644 --- a/windows/security/threat-protection/windows-defender-application-control/wdac-wizard-merging-policies.md +++ b/windows/security/threat-protection/windows-defender-application-control/wdac-wizard-merging-policies.md @@ -20,13 +20,13 @@ ms.date: 10/14/2020 # Merging existing policies with the WDAC Wizard -Beginning in Windows 10 version 1903, WDAC supports multiple policies. Before version 1903, however, Windows 10 could only have one WDAC policy. Consquently, users were required to merge multiple WDAC policies into one. The WDAC Wizard has a simple to use user interface to allow users to merge multiple WDAC policies. The Wizard can support up to 15 policy files as input during the merge workflow. +Beginning in Windows 10 version 1903, WDAC supports multiple policies. Before version 1903, however, Windows 10 could only have one WDAC policy. Consequently, users were required to merge multiple WDAC policies into one. The WDAC Wizard has a simple to use user interface to allow users to merge multiple WDAC policies. The Wizard can support up to 15 policy files as input during the merge workflow. -Simply select the policies you wish to merge into one policy using the `+ Add Policy` button under the table. Once added, policies will be enumerated within the table. To remove a policy from the table, in the case of accidental addition, highlight the policy row and click the `- Remove Policy` button. Confirmation will be required before the policy is withdrawn from the table. +Select the policies you wish to merge into one policy using the `+ Add Policy` button under the table. Once added, policies will be enumerated within the table. To remove a policy from the table, if accidentally added, highlight the policy row and select the `- Remove Policy` button. Confirmation will be required before the policy is withdrawn from the table. > [!NOTE] > The policy type and ID of the final output policy will be determined based on the type and ID of the **first policy** in the policy list table. For instance, if a legacy policy format policy and a multi-policy format policy are merged together, the output format of the policy will be whichever policy is specified first in the table. For more information on policy formats, visit the [Multiple WDAC Policies page](deploy-multiple-windows-defender-application-control-policies). -Lastly, select a filepath save location for the final merged policy on disk using the Browse button. Once at least two policies to merge are specified, and the output file location is set, click Next to build the policy. +Lastly, select a filepath save location for the final merged policy using the `Browse` button. If a minimum of two policies are selected, and the save location is specified, select the `Next` button to build the policy. -![Merging WDAC policies into a final WDAC policy](images/wdac-wizard-merge.png) \ No newline at end of file +![Merging WDAC policies into a final WDAC policy](images/wdac-wizard-merge.png) From cb480eefb414fd2b68e0478d268aa73e21770c97 Mon Sep 17 00:00:00 2001 From: Jordan Geurten Date: Mon, 14 Dec 2020 17:40:26 -0500 Subject: [PATCH 087/486] Fixed broken links for edit policy article and deploying policy articles. --- .../windows-defender-application-control/wdac-wizard.md | 7 ++----- 1 file changed, 2 insertions(+), 5 deletions(-) diff --git a/windows/security/threat-protection/windows-defender-application-control/wdac-wizard.md b/windows/security/threat-protection/windows-defender-application-control/wdac-wizard.md index 89403445f6..4e765e5339 100644 --- a/windows/security/threat-protection/windows-defender-application-control/wdac-wizard.md +++ b/windows/security/threat-protection/windows-defender-application-control/wdac-wizard.md @@ -25,7 +25,7 @@ ms.date: 10/14/2020 - Windows 10 - Windows Server 2016 and above -This article describes the supported scenarios for the Windows Defender Application Control (WDAC) policy Wizard. The Wizard was built to provide security architects, security and system administrators with a more user-friendly means to create, edit, and merge WDAC policies. The Wizard desktop application uses the [ConfigCI PowerShell Cmdlets](https://docs.microsoft.com/en-us/powershell/module/configci/?view=win10-ps) in the background so the output policy of the Wizard and PowerShell cmdlets is identical. +This article describes the supported scenarios for the Windows Defender Application Control (WDAC) policy Wizard. The Wizard was built to provide security architects, security and system administrators with a more user-friendly means to create, edit, and merge WDAC policies. The Wizard desktop application uses the [ConfigCI PowerShell Cmdlets](https://docs.microsoft.com/powershell/module/configci/?view=win10-ps) in the background so the output policy of the Wizard and PowerShell cmdlets is identical. ## Downloading the application @@ -46,8 +46,5 @@ If neither requirement is satisfied, the Wizard will throw an error as the cmdle | - | - | | [Creating a new base policy](wdac-wizard-create-base-policy.md) | This article describes how to create a new base policy using one of the supplied policy templates. | | [Creating a new supplemental policy](wdac-wizard-create-supplemental-policy.md) | This article describes the steps necessary to create a supplemental policy, from one of the supplied templates, for an existing base policy. | -| [Editing a base or supplemental policy](wdac-wizard-edit-policy.md) | This article demonstrates how to modify an existing policy and the Wizard's editing capabilities. | +| [Editing a base or supplemental policy](wdac-wizard-editing-policy.md) | This article demonstrates how to modify an existing policy and the Wizard's editing capabilities. | | [Merging policies](wdac-wizard-merging-policies.md) | This article describes how to merge policies into a single application control policy. | -| [Deploying policies from the Wizard](wdac-wizard-deploying-policies.md) | This article describes how to deploy application control policies onto target devices. | - - From bbb3142a8b02f6e0e02df4dc8573202e581bb2d9 Mon Sep 17 00:00:00 2001 From: Jordan Geurten Date: Mon, 14 Dec 2020 17:43:08 -0500 Subject: [PATCH 088/486] Fixed broken Multiple WDAC Policies page link in WDAC Wizard merge policy article --- .../wdac-wizard-merging-policies.md | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/windows/security/threat-protection/windows-defender-application-control/wdac-wizard-merging-policies.md b/windows/security/threat-protection/windows-defender-application-control/wdac-wizard-merging-policies.md index eca772e093..1b7d604a49 100644 --- a/windows/security/threat-protection/windows-defender-application-control/wdac-wizard-merging-policies.md +++ b/windows/security/threat-protection/windows-defender-application-control/wdac-wizard-merging-policies.md @@ -25,7 +25,7 @@ Beginning in Windows 10 version 1903, WDAC supports multiple policies. Before ve Select the policies you wish to merge into one policy using the `+ Add Policy` button under the table. Once added, policies will be enumerated within the table. To remove a policy from the table, if accidentally added, highlight the policy row and select the `- Remove Policy` button. Confirmation will be required before the policy is withdrawn from the table. > [!NOTE] -> The policy type and ID of the final output policy will be determined based on the type and ID of the **first policy** in the policy list table. For instance, if a legacy policy format policy and a multi-policy format policy are merged together, the output format of the policy will be whichever policy is specified first in the table. For more information on policy formats, visit the [Multiple WDAC Policies page](deploy-multiple-windows-defender-application-control-policies). +> The policy type and ID of the final output policy will be determined based on the type and ID of the **first policy** in the policy list table. For instance, if a legacy policy format policy and a multi-policy format policy are merged together, the output format of the policy will be whichever policy is specified first in the table. For more information on policy formats, visit the [Multiple WDAC Policies page](deploy-multiple-windows-defender-application-control-policies.md). Lastly, select a filepath save location for the final merged policy using the `Browse` button. If a minimum of two policies are selected, and the save location is specified, select the `Next` button to build the policy. From 4dad3db2b6a37a505eb22ddb2d77aac2bceb63ac Mon Sep 17 00:00:00 2001 From: Jordan Geurten Date: Mon, 14 Dec 2020 17:51:25 -0500 Subject: [PATCH 089/486] Fixed broken image link and page header references --- .../wdac-wizard-editing-policy.md | 10 +++++----- 1 file changed, 5 insertions(+), 5 deletions(-) diff --git a/windows/security/threat-protection/windows-defender-application-control/wdac-wizard-editing-policy.md b/windows/security/threat-protection/windows-defender-application-control/wdac-wizard-editing-policy.md index ec71f80aba..a239d415ec 100644 --- a/windows/security/threat-protection/windows-defender-application-control/wdac-wizard-editing-policy.md +++ b/windows/security/threat-protection/windows-defender-application-control/wdac-wizard-editing-policy.md @@ -1,5 +1,5 @@ --- -title: Windows Defender Application Control Wizard Base Policy Creation +title: Editing Windows Defender Application Control Policies with the Wizard description: Editing existing base and supplemental policies with the Microsoft WDAC Wizard. keywords: allowlisting, blocklisting, security, malware ms.assetid: 8d6e0474-c475-411b-b095-1c61adb2bdbb @@ -32,9 +32,9 @@ The WDAC Wizard makes editing and viewing WDAC policies easier than the PowerShe
    -# Configuring Policy Rules +## Configuring Policy Rules -The `Policy Rules` page will load with the in-edit policy rules configured per the set rules. Selecting the `+ Advanced Options` button will reveal the advanced policy rule options panel. This grouping of rules contains additional policy rule options that are less common to the majority of users. To edit any of the rules, flip the corresponding policy rule state. For instance, to disable Audit Mode and enable Enforcement Mode in the figure below, the button beside the `Audit Mode` label needs only to be pressed. Once the policy rules are configured, select the Next button to continue the next stage of editing: [Adding File Rules](#Adding-File-Rules). +The `Policy Rules` page will load with the in-edit policy rules configured per the set rules. Selecting the `+ Advanced Options` button will reveal the advanced policy rule options panel. This grouping of rules contains additional policy rule options that are less common to the majority of users. To edit any of the rules, flip the corresponding policy rule state. For instance, to disable Audit Mode and enable Enforcement Mode in the figure below, the button beside the `Audit Mode` label needs only to be pressed. Once the policy rules are configured, select the Next button to continue the next stage of editing: [Adding File Rules](#adding-file-rules). ![Configuring the policy rules](images/wdac-wizard-edit-policy-rules.png) @@ -44,13 +44,13 @@ A description of the policy rule is shown at the bottom of the page when the cur The WDAC Wizard allows users to add rules to their existing policy seamlessly. Previously, this would have involved creating a new policy with the new rules and merging it with the existing policy. -Selecting the `+ Custom Rules` button will open the Custom Rules panel. For more information on creating new policy file rules, see the guidelines provided in the [creating policy file rules section](wdac-wizard-create-base-policy.md#Creating-custom-file-rules). +Selecting the `+ Custom Rules` button will open the Custom Rules panel. For more information on creating new policy file rules, see the guidelines provided in the [creating policy file rules section](wdac-wizard-create-base-policy.md#creating-custom-file-rules). ## Removing File Rules The WDAC Wizard makes deleting file rules from an existing policy quick and easy. To remove any type of file rule: publisher rule, path rule, filename rule, or a hash rule, select the rule in the `Policy Signing Rules List` table on the left-hand side of the page. Selecting the rule will highlight the entire row. Once the row is highlighted, select the remove icon underneath the table. The Wizard will prompt for user confirmation before removing the file rule. Once removed, the rule will no longer appear in the policy or the table. -![Removing file rule from policy during edit](image/wdac-wizard-edit-remove-file-rule.png) +![Removing file rule from policy during edit](images/wdac-wizard-edit-remove-file-rule.png) **Note:** removing a publisher rule will also remove the associated File Attribute rules. For instance, in the xml block below, removing ID_SIGNER_CONTOSO_PUBLISHER would also remove the rules ID_FILEATTRIB_LOB_APP_1 and ID_FILEATTRIB_LOB_APP_2. From 70d27f25c9e3799da866eb66563bb3ce73a6ebf9 Mon Sep 17 00:00:00 2001 From: Jordan Geurten Date: Mon, 14 Dec 2020 17:55:11 -0500 Subject: [PATCH 090/486] Fixed broken link to select-types-of-rules-to-create.md#windows-defender-application-control-filename-rules and hardcoded locale (en-us) link in HVCI article --- .../wdac-wizard-create-supplemental-policy.md | 6 +++--- 1 file changed, 3 insertions(+), 3 deletions(-) diff --git a/windows/security/threat-protection/windows-defender-application-control/wdac-wizard-create-supplemental-policy.md b/windows/security/threat-protection/windows-defender-application-control/wdac-wizard-create-supplemental-policy.md index 6dc20f1ffe..4383ca390b 100644 --- a/windows/security/threat-protection/windows-defender-application-control/wdac-wizard-create-supplemental-policy.md +++ b/windows/security/threat-protection/windows-defender-application-control/wdac-wizard-create-supplemental-policy.md @@ -34,7 +34,7 @@ Once the Supplemental Policy type is chosen on the New Policy page, policy name ![Base policy allows supplemental policies](images/wdac-wizard-supplemental-expandable.png) -If the base policy is not configured for supplemental policies, first edit the base policy to allow supplementals using the [WDAC Wizard edit workflow](edac-wizard-editing-policy.md). +If the base policy is not configured for supplemental policies, first edit the base policy to allow supplementals using the [WDAC Wizard edit workflow](wdac-wizard-editing-policy.md). ## Configuring Policy Rules @@ -49,7 +49,7 @@ A description of each policy rule, beginning with the left-most column, is provi | **Advanced Boot Options Menu** | The F8 preboot menu is disabled by default for all WDAC policies. Setting this rule option allows the F8 menu to appear to physically present users. | | **Allow Supplemental Policies** | Use this option on a base policy to allow supplemental policies to expand it. | | **Disable Script Enforcement** | This option disables script enforcement options. Unsigned PowerShell scripts and interactive PowerShell are no longer restricted to [Constrained Language Mode](https://docs.microsoft.com/powershell/module/microsoft.powershell.core/about/about_language_modes). NOTE: This option is only supported with the Windows 10 May 2019 Update (1903) and higher. Using it on earlier versions of Windows 10 is not supported and may have unintended results. | -|**[Hypervisor-protected code integrity (HVCI)](https://docs.microsoft.com/en-us/windows/security/threat-protection/device-guard/enable-virtualization-based-protection-of-code-integrity)**| When enabled, policy enforcement uses virtualization-based security to run the code integrity service inside a secure environment. HVCI provides stronger protections against kernel malware.| +|**[Hypervisor-protected code integrity (HVCI)](https://docs.microsoft.com/windows/security/threat-protection/device-guard/enable-virtualization-based-protection-of-code-integrity)**| When enabled, policy enforcement uses virtualization-based security to run the code integrity service inside a secure environment. HVCI provides stronger protections against kernel malware.| | **Intelligent Security Graph Authorization** | Use this option to automatically allow applications with "known good" reputation as defined by Microsoft’s Intelligent Security Graph (ISG). | | **Managed Installer** | Use this option to automatically allow applications installed by a software distribution solution, such as Microsoft Endpoint Configuration Manager, that has been defined as a managed installer. | | **Require WHQL** | By default, legacy drivers that are not Windows Hardware Quality Labs (WHQL) signed are allowed to execute. Enabling this rule requires that every executed driver is WHQL signed and removes legacy driver support. Going forward, every new Windows 10–compatible driver must be WHQL certified. | @@ -101,7 +101,7 @@ Filepath rules do not provide the same security guarantees that explicit signer ### File Attribute Rules -The Wizard supports the creation of [file name rules](select-types-of-rules-to-create#windows-defender-application-control-filename-rules) based on authenticated file attributes. File name rules are useful when an application and its dependencies (for example, DLLs) may all share the same product name, for instance. This rule level allows users to easily create targeted policies based on the Product Name file name. To select the file attribute to create the rule, move the slider on the Wizard to the desired attribute. The table below describes each of the supported file attributes off which to create a rule. +The Wizard supports the creation of [file name rules](select-types-of-rules-to-create.md#windows-defender-application-control-filename-rules) based on authenticated file attributes. File name rules are useful when an application and its dependencies (for example, DLLs) may all share the same product name, for instance. This rule level allows users to easily create targeted policies based on the Product Name file name. To select the file attribute to create the rule, move the slider on the Wizard to the desired attribute. The table below describes each of the supported file attributes off which to create a rule. | Rule level | Description | |------------ | ----------- | From 1a31685da0367b6b2f3866ecebfb5b17f321ea47 Mon Sep 17 00:00:00 2001 From: Jordan Geurten Date: Mon, 14 Dec 2020 18:00:10 -0500 Subject: [PATCH 091/486] Fixed more hardcoded locales by removing "en-us" from article links. Also fixed references to the wdac official docs (use-windows-defender-application-control-with-intelligent-security-graph missing .md file ext) --- .../wdac-wizard-create-base-policy.md | 10 +++++----- 1 file changed, 5 insertions(+), 5 deletions(-) diff --git a/windows/security/threat-protection/windows-defender-application-control/wdac-wizard-create-base-policy.md b/windows/security/threat-protection/windows-defender-application-control/wdac-wizard-create-base-policy.md index f532ee4e59..d9afb2c2a1 100644 --- a/windows/security/threat-protection/windows-defender-application-control/wdac-wizard-create-base-policy.md +++ b/windows/security/threat-protection/windows-defender-application-control/wdac-wizard-create-base-policy.md @@ -34,9 +34,9 @@ Each of the template policies has a unique set of policy allow list rules that w | **Template Base Policy** | **Description** | |---------------------------------|-------------------------------------------------------------------| -| **Default Windows Mode** | Default Windows mode will authorize the following components:
    • Windows operating components - any binary installed by a fresh install of Windows
    • Apps installed from the Microsoft Store
    • Microsoft Office365 apps, OneDrive, and Microsoft Teams
    • Third-party [Windows Hardware Compatible drivers](https://docs.microsoft.com/en-us/windows-hardware/drivers/install/whql-release-signature)
    | -| **Allow Microsoft Mode** | Allow mode will authorize the following components:
    • Windows operating components - any binary installed by a fresh install of Windows
    • Apps installed from the Microsoft Store
    • Microsoft Office365 apps, OneDrive, and Microsoft Teams
    • Third-party [Windows Hardware Compatible drivers](https://docs.microsoft.com/en-us/windows-hardware/drivers/install/whql-release-signature)
    • *All Microsoft-signed software*
    | -| **Signed and Reputable Mode** | Signed and Reputable mode will authorize the following components:
    • Windows operating components - any binary installed by a fresh install of Windows
    • Apps installed from the Microsoft Store
    • Microsoft Office365 apps, OneDrive, and Microsoft Teams
    • Third-party [Windows Hardware Compatible drivers](https://docs.microsoft.com/en-us/windows-hardware/drivers/install/whql-release-signature)
    • All Microsoft-signed software
    • *Files with good reputation per [Microsoft Defender's Intelligent Security Graph technology](use-windows-defender-application-control-with-intelligent-security-graph)*
    | +| **Default Windows Mode** | Default Windows mode will authorize the following components:
    • Windows operating components - any binary installed by a fresh install of Windows
    • Apps installed from the Microsoft Store
    • Microsoft Office365 apps, OneDrive, and Microsoft Teams
    • Third-party [Windows Hardware Compatible drivers](https://docs.microsoft.com/windows-hardware/drivers/install/whql-release-signature)
    | +| **Allow Microsoft Mode** | Allow mode will authorize the following components:
    • Windows operating components - any binary installed by a fresh install of Windows
    • Apps installed from the Microsoft Store
    • Microsoft Office365 apps, OneDrive, and Microsoft Teams
    • Third-party [Windows Hardware Compatible drivers](https://docs.microsoft.com/windows-hardware/drivers/install/whql-release-signature)
    • *All Microsoft-signed software*
    | +| **Signed and Reputable Mode** | Signed and Reputable mode will authorize the following components:
    • Windows operating components - any binary installed by a fresh install of Windows
    • Apps installed from the Microsoft Store
    • Microsoft Office365 apps, OneDrive, and Microsoft Teams
    • Third-party [Windows Hardware Compatible drivers](https://docs.microsoft.com/windows-hardware/drivers/install/whql-release-signature)
    • All Microsoft-signed software
    • *Files with good reputation per [Microsoft Defender's Intelligent Security Graph technology](use-windows-defender-application-control-with-intelligent-security-graph.md)*
    | *Italized content denotes the changes in the current policy with respect to the policy prior.* @@ -58,7 +58,7 @@ A description of each policy rule, beginning with the left-most column, is provi | **Advanced Boot Options Menu** | The F8 preboot menu is disabled by default for all WDAC policies. Setting this rule option allows the F8 menu to appear to physically present users. | | **Allow Supplemental Policies** | Use this option on a base policy to allow supplemental policies to expand it. | | **Disable Script Enforcement** | This option disables script enforcement options. Unsigned PowerShell scripts and interactive PowerShell are no longer restricted to [Constrained Language Mode](https://docs.microsoft.com/powershell/module/microsoft.powershell.core/about/about_language_modes). NOTE: This option is only supported with the Windows 10 May 2019 Update (1903) and higher. Using it on earlier versions of Windows 10 is not supported and may have unintended results. | -|**[Hypervisor-protected code integrity (HVCI)](https://docs.microsoft.com/en-us/windows/security/threat-protection/device-guard/enable-virtualization-based-protection-of-code-integrity)**| When enabled, policy enforcement uses virtualization-based security to run the code integrity service inside a secure environment. HVCI provides stronger protections against kernel malware.| +|**[Hypervisor-protected code integrity (HVCI)](https://docs.microsoft.com/windows/security/threat-protection/device-guard/enable-virtualization-based-protection-of-code-integrity)**| When enabled, policy enforcement uses virtualization-based security to run the code integrity service inside a secure environment. HVCI provides stronger protections against kernel malware.| | **Intelligent Security Graph Authorization** | Use this option to automatically allow applications with "known good" reputation as defined by Microsoft’s Intelligent Security Graph (ISG). | | **Managed Installer** | Use this option to automatically allow applications installed by a software distribution solution, such as Microsoft Endpoint Configuration Manager, that has been defined as a managed installer. | | **Require WHQL** | By default, legacy drivers that are not Windows Hardware Quality Labs (WHQL) signed are allowed to execute. Enabling this rule requires that every executed driver is WHQL signed and removes legacy driver support. Going forward, every new Windows 10–compatible driver must be WHQL certified. | @@ -110,7 +110,7 @@ Filepath rules do not provide the same security guarantees that explicit signer ### File Attribute Rules -The Wizard supports the creation of [file name rules](select-types-of-rules-to-create#windows-defender-application-control-filename-rules) based on authenticated file attributes. File name rules are useful when an application and its dependencies (for example, DLLs) may all share the same product name, for instance. This rule level allows users to easily create targeted policies based on the Product Name file name parameter. To select the file attribute to create the rule, move the slider on the Wizard to the desired attribute. The table below describes each of the supported file attributes off which to create a rule. +The Wizard supports the creation of [file name rules](select-types-of-rules-to-create.md#windows-defender-application-control-filename-rules) based on authenticated file attributes. File name rules are useful when an application and its dependencies (for example, DLLs) may all share the same product name, for instance. This rule level allows users to easily create targeted policies based on the Product Name file name parameter. To select the file attribute to create the rule, move the slider on the Wizard to the desired attribute. The table below describes each of the supported file attributes off which to create a rule. | Rule level | Description | |------------ | ----------- | From 669d17a35bfaa6589494600b796412c82770d98b Mon Sep 17 00:00:00 2001 From: ManikaDhiman Date: Mon, 14 Dec 2020 15:44:37 -0800 Subject: [PATCH 092/486] Added Globalization policies --- windows/client-management/mdm/TOC.md | 1 + .../mdm/policies-in-policy-csp-admx-backed.md | 26 + .../policy-configuration-service-provider.md | 83 + .../mdm/policy-csp-admx-globalization.md | 2040 +++++++++++++++++ 4 files changed, 2150 insertions(+) create mode 100644 windows/client-management/mdm/policy-csp-admx-globalization.md diff --git a/windows/client-management/mdm/TOC.md b/windows/client-management/mdm/TOC.md index 22dc4936a7..ace9da625a 100644 --- a/windows/client-management/mdm/TOC.md +++ b/windows/client-management/mdm/TOC.md @@ -197,6 +197,7 @@ #### [ADMX_FileServerVSSProvider](policy-csp-admx-fileservervssprovider.md) #### [ADMX_FileSys](policy-csp-admx-filesys.md) #### [ADMX_FolderRedirection](policy-csp-admx-folderredirection.md) +#### [ADMX_Globalization](policy-csp-admx-globalization.md) #### [ADMX_Help](policy-csp-admx-help.md) #### [ADMX_HelpAndSupport](policy-csp-admx-helpandsupport.md) #### [ADMX_kdc](policy-csp-admx-kdc.md) diff --git a/windows/client-management/mdm/policies-in-policy-csp-admx-backed.md b/windows/client-management/mdm/policies-in-policy-csp-admx-backed.md index 850cba7f7b..eb920b0fb5 100644 --- a/windows/client-management/mdm/policies-in-policy-csp-admx-backed.md +++ b/windows/client-management/mdm/policies-in-policy-csp-admx-backed.md @@ -163,6 +163,32 @@ ms.date: 10/08/2020 - [ADMX_FolderRedirection/LocalizeXPRelativePaths_2](./policy-csp-admx-folderredirection.md#admx-folderredirection-localizexprelativepaths-2) - [ADMX_FolderRedirection/PrimaryComputer_FR_1](./policy-csp-admx-folderredirection.md#admx-folderredirection-primarycomputer-fr-1) - [ADMX_FolderRedirection/PrimaryComputer_FR_2](./policy-csp-admx-folderredirection.md#admx-folderredirection-primarycomputer-fr-2) +- [ADMX_Globalization/BlockCleanupOfUnusedPreinstalledLangPacks](./policy-csp-admx-globalization.md#admx-globalization-blockcleanupofunusedpreinstalledlangpacks) +- [ADMX_Globalization/BlockUserInputMethodsForSignIn](./policy-csp-admx-globalization.md#admx-globalization-blockuserinputmethodsforsignin) +- [ADMX_Globalization/CustomLocalesNoSelect_1](./policy-csp-admx-globalization.md#admx-globalization-customlocalesnoselect-1) +- [ADMX_Globalization/CustomLocalesNoSelect_2](./policy-csp-admx-globalization.md#admx-globalization-customlocalesnoselect-2) +- [ADMX_Globalization/HideAdminOptions](./policy-csp-admx-globalization.md#admx-globalization-hideadminoptions) +- [ADMX_Globalization/HideCurrentLocation](./policy-csp-admx-globalization.md#admx-globalization-hidecurrentlocation) +- [ADMX_Globalization/HideLanguageSelection](./policy-csp-admx-globalization.md#admx-globalization-hidelanguageselection) +- [ADMX_Globalization/HideLocaleSelectAndCustomize](./policy-csp-admx-globalization.md#admx-globalization-hidelocaleselectandcustomize) +- [ADMX_Globalization/ImplicitDataCollectionOff_1](./policy-csp-admx-globalization.md#admx-globalization-implicitdatacollectionoff-1) +- [ADMX_Globalization/ImplicitDataCollectionOff_2](./policy-csp-admx-globalization.md#admx-globalization-implicitdatacollectionoff-2) +- [ADMX_Globalization/LocaleSystemRestrict](./policy-csp-admx-globalization.md#admx-globalization-localesystemrestrict) +- [ADMX_Globalization/LocaleUserRestrict_1](./policy-csp-admx-globalization.md#admx-globalization-localeuserrestrict-1) +- [ADMX_Globalization/LocaleUserRestrict_2](./policy-csp-admx-globalization.md#admx-globalization-localeuserrestrict-2) +- [ADMX_Globalization/LockMachineUILanguage](./policy-csp-admx-globalization.md#admx-globalization-lockmachineuilanguage) +- [ADMX_Globalization/LockUserUILanguage](./policy-csp-admx-globalization.md#admx-globalization-lockuseruilanguage) +- [ADMX_Globalization/MachineUILanguageOverwrite](./policy-csp-admx-globalization.md#admx-globalization-machineuilanguageoverwrite) +- [ADMX_Globalization/PreventGeoIdChange_1](./policy-csp-admx-globalization.md#admx-globalization-preventgeoidchange-1) +- [ADMX_Globalization/PreventGeoIdChange_2](./policy-csp-admx-globalization.md#admx-globalization-preventgeoidchange-2) +- [ADMX_Globalization/PreventUserOverrides_1](./policy-csp-admx-globalization.md#admx-globalization-preventuseroverrides-1) +- [ADMX_Globalization/PreventUserOverrides_2](./policy-csp-admx-globalization.md#admx-globalization-preventuseroverrides-2) +- [ADMX_Globalization/RestrictUILangSelect](./policy-csp-admx-globalization.md#admx-globalization-restrictuilangselect) +- [ADMX_Globalization/TurnOffAutocorrectMisspelledWords](./policy-csp-admx-globalization.md#admx-globalization-turnoffautocorrectmisspelledwords) +- [ADMX_Globalization/TurnOffHighlightMisspelledWords](./policy-csp-admx-globalization.md#admx-globalization-turnoffhighlightmisspelledwords) +- [ADMX_Globalization/TurnOffInsertSpace](./policy-csp-admx-globalization.md#admx-globalization-turnoffinsertspace) +- [ADMX_Globalization/TurnOffOfferTextPredictions](./policy-csp-admx-globalization.md#admx-globalization-turnoffoffertextpredictions) +- [ADMX_Globalization/Y2K](./policy-csp-admx-globalization.md#admx-globalization-y2k) - [ADMX_Help/DisableHHDEP](./policy-csp-admx-help.md#admx-help-disablehhdep) - [ADMX_Help/HelpQualifiedRootDir_Comp](./policy-csp-admx-help.md#admx-help-helpqualifiedrootdir-comp) - [ADMX_Help/RestrictRunFromHelp](./policy-csp-admx-help.md#admx-help-restrictrunfromhelp) diff --git a/windows/client-management/mdm/policy-configuration-service-provider.md b/windows/client-management/mdm/policy-configuration-service-provider.md index e446aa1591..58bfd3a1a2 100644 --- a/windows/client-management/mdm/policy-configuration-service-provider.md +++ b/windows/client-management/mdm/policy-configuration-service-provider.md @@ -713,6 +713,89 @@ The following diagram shows the Policy configuration service provider in tree fo
    +### ADMX_Globalization policies + +
    +
    + ADMX_Globalization/BlockCleanupOfUnusedPreinstalledLangPacks +
    +
    + ADMX_Globalization/BlockUserInputMethodsForSignIn +
    +
    + ADMX_Globalization/CustomLocalesNoSelect_1 +
    +
    + ADMX_Globalization/CustomLocalesNoSelect_2 +
    +
    + ADMX_Globalization/HideAdminOptions +
    +
    + ADMX_Globalization/HideCurrentLocation +
    +
    + ADMX_Globalization/HideLanguageSelection +
    +
    + ADMX_Globalization/HideLocaleSelectAndCustomize +
    +
    + ADMX_Globalization/ImplicitDataCollectionOff_1 +
    +
    + ADMX_Globalization/ImplicitDataCollectionOff_2 +
    +
    + ADMX_Globalization/LocaleSystemRestrict +
    +
    + ADMX_Globalization/LocaleUserRestrict_1 +
    +
    + ADMX_Globalization/LocaleUserRestrict_2 +
    +
    + ADMX_Globalization/LockMachineUILanguage +
    +
    + ADMX_Globalization/LockUserUILanguage +
    +
    + ADMX_Globalization/MachineUILanguageOverwrite +
    +
    + ADMX_Globalization/PreventGeoIdChange_1 +
    +
    + ADMX_Globalization/PreventGeoIdChange_2 +
    +
    + ADMX_Globalization/PreventUserOverrides_1 +
    +
    + ADMX_Globalization/PreventUserOverrides_2 +
    +
    + ADMX_Globalization/RestrictUILangSelect +
    +
    + ADMX_Globalization/TurnOffAutocorrectMisspelledWords +
    +
    + ADMX_Globalization/TurnOffHighlightMisspelledWords +
    +
    + ADMX_Globalization/TurnOffInsertSpace +
    +
    + ADMX_Globalization/TurnOffOfferTextPredictions +
    +
    + ADMX_Globalization/Y2K +
    +
    + ### ADMX_Help policies
    diff --git a/windows/client-management/mdm/policy-csp-admx-globalization.md b/windows/client-management/mdm/policy-csp-admx-globalization.md new file mode 100644 index 0000000000..e471cdf6e7 --- /dev/null +++ b/windows/client-management/mdm/policy-csp-admx-globalization.md @@ -0,0 +1,2040 @@ +--- +title: Policy CSP - ADMX_Globalization +description: Policy CSP - ADMX_Globalization +ms.author: dansimp +ms.localizationpriority: medium +ms.topic: article +ms.prod: w10 +ms.technology: windows +author: manikadhiman +ms.date: 12/14/2020 +ms.reviewer: +manager: dansimp +--- + +# Policy CSP - ADMX_Globalization +> [!WARNING] +> Some information relates to prereleased products, which may be substantially modified before it's commercially released. Microsoft makes no warranties, expressed or implied, concerning the information provided here. + +
    + + +## ADMX_Globalization policies + +
    +
    + ADMX_Globalization/BlockCleanupOfUnusedPreinstalledLangPacks +
    +
    + ADMX_Globalization/BlockUserInputMethodsForSignIn +
    +
    + ADMX_Globalization/CustomLocalesNoSelect_1 +
    +
    + ADMX_Globalization/CustomLocalesNoSelect_2 +
    +
    + ADMX_Globalization/HideAdminOptions +
    +
    + ADMX_Globalization/HideCurrentLocation +
    +
    + ADMX_Globalization/HideLanguageSelection +
    +
    + ADMX_Globalization/HideLocaleSelectAndCustomize +
    +
    + ADMX_Globalization/ImplicitDataCollectionOff_1 +
    +
    + ADMX_Globalization/ImplicitDataCollectionOff_2 +
    +
    + ADMX_Globalization/LocaleSystemRestrict +
    +
    + ADMX_Globalization/LocaleUserRestrict_1 +
    +
    + ADMX_Globalization/LocaleUserRestrict_2 +
    +
    + ADMX_Globalization/LockMachineUILanguage +
    +
    + ADMX_Globalization/LockUserUILanguage +
    +
    + ADMX_Globalization/MachineUILanguageOverwrite +
    +
    + ADMX_Globalization/PreventGeoIdChange_1 +
    +
    + ADMX_Globalization/PreventGeoIdChange_2 +
    +
    + ADMX_Globalization/PreventUserOverrides_1 +
    +
    + ADMX_Globalization/PreventUserOverrides_2 +
    +
    + ADMX_Globalization/RestrictUILangSelect +
    +
    + ADMX_Globalization/TurnOffAutocorrectMisspelledWords +
    +
    + ADMX_Globalization/TurnOffHighlightMisspelledWords +
    +
    + ADMX_Globalization/TurnOffInsertSpace +
    +
    + ADMX_Globalization/TurnOffOfferTextPredictions +
    +
    + ADMX_Globalization/Y2K +
    +
    + + +
    + + +**ADMX_Globalization/BlockCleanupOfUnusedPreinstalledLangPacks** + + + + + + + + + + + + + + + + + + + + + + + + + + + +
    Windows EditionSupported?
    Homecross mark
    Procross mark
    Businesscross mark
    Enterprisecheck mark
    Educationcross mark
    + + +
    + + +[Scope](./policy-configuration-service-provider.md#policy-scope): + +> [!div class = "checklist"] +> * Device + +
    + + + +Available in the latest Windows 10 Insider Preview Build. This policy setting controls whether the LPRemove task will run to clean up language packs installed on a machine but are not used by any users on that machine. + +If you enable this policy setting, language packs that are installed as part of the system image will remain installed even if they are not used by any user on that system. + +If you disable or do not configure this policy setting, language packs that are installed as part of the system image but are not used by any user on that system will be removed as part of a scheduled clean up task. + + +> [!TIP] +> This is an ADMX-backed policy and requires a special SyncML format to enable or disable. For details, see [Understanding ADMX-backed policies](./understanding-admx-backed-policies.md). +> +> You must specify the data type in the SyncML as <Format>chr</Format>. For an example SyncML, refer to [Enabling a policy](./understanding-admx-backed-policies.md#enabling-a-policy). +> +> The payload of the SyncML must be XML-encoded; for this XML encoding, there are a variety of online encoders that you can use. To avoid encoding the payload, you can use CDATA if your MDM supports it. For more information, see [CDATA Sections](http://www.w3.org/TR/REC-xml/#sec-cdata-sect). + + +ADMX Info: +- GP English name: *Block clean-up of unused language packs* +- GP name: *BlockCleanupOfUnusedPreinstalledLangPacks* +- GP path: *Control Panel\Regional and Language Options* +- GP ADMX file name: *Globalization.admx* + + + +
    + + +**ADMX_Globalization/BlockUserInputMethodsForSignIn** + + + + + + + + + + + + + + + + + + + + + + + + + + + +
    Windows EditionSupported?
    Homecross mark
    Procross mark
    Businesscross mark
    Enterprisecheck mark
    Educationcross mark
    + + +
    + + +[Scope](./policy-configuration-service-provider.md#policy-scope): + +> [!div class = "checklist"] +> * Device + +
    + + + +Available in the latest Windows 10 Insider Preview Build. This policy prevents automatic copying of user input methods to the system account for use on the sign-in screen. The user is restricted to the set of input methods that are enabled in the system account. + +Note this does not affect the availability of user input methods on the lock screen or with the UAC prompt. + +If the policy is Enabled, then the user will get input methods enabled for the system account on the sign-in page. + +If the policy is Disabled or Not Configured, then the user will be able to use input methods enabled for their user account on the sign-in page. + + +> [!TIP] +> This is an ADMX-backed policy and requires a special SyncML format to enable or disable. For details, see [Understanding ADMX-backed policies](./understanding-admx-backed-policies.md). +> +> You must specify the data type in the SyncML as <Format>chr</Format>. For an example SyncML, refer to [Enabling a policy](./understanding-admx-backed-policies.md#enabling-a-policy). +> +> The payload of the SyncML must be XML-encoded; for this XML encoding, there are a variety of online encoders that you can use. To avoid encoding the payload, you can use CDATA if your MDM supports it. For more information, see [CDATA Sections](http://www.w3.org/TR/REC-xml/#sec-cdata-sect). + + +ADMX Info: +- GP English name: *Disallow copying of user input methods to the system account for sign-in* +- GP name: *BlockUserInputMethodsForSignIn* +- GP path: *System\Locale Services* +- GP ADMX file name: *Globalization.admx* + + + +
    + + +**ADMX_Globalization/CustomLocalesNoSelect_1** + + + + + + + + + + + + + + + + + + + + + + + + + + + +
    Windows EditionSupported?
    Homecross mark
    Procross mark
    Businesscross mark
    Enterprisecheck mark
    Educationcross mark
    + + +
    + + +[Scope](./policy-configuration-service-provider.md#policy-scope): + +> [!div class = "checklist"] +> * User + +
    + + + +Available in the latest Windows 10 Insider Preview Build. This policy setting prevents a user from selecting a supplemental custom locale as their user locale. The user is restricted to the set of locales that are installed with the operating system. + +This does not affect the selection of replacement locales. To prevent the selection of replacement locales, adjust the permissions of the %windir%\Globalization directory to prevent the installation of locales by unauthorized users. + +The policy setting "Restrict user locales" can also be enabled to disallow selection of a custom locale, even if this policy setting is not configured. + +If you enable this policy setting, the user cannot select a custom locale as their user locale, but they can still select a replacement locale if one is installed. + +If you disable or do not configure this policy setting, the user can select a custom locale as their user locale. + +If this policy setting is enabled at the machine level, it cannot be disabled by a per-user policy setting. If this policy setting is disabled at the machine level, the per-user policy setting will be ignored. If this policy setting is not configured at the machine level, restrictions will be based on per-user policy settings. + +To set this policy setting on a per-user basis, make sure that you do not configure the per-machine policy setting. + + +> [!TIP] +> This is an ADMX-backed policy and requires a special SyncML format to enable or disable. For details, see [Understanding ADMX-backed policies](./understanding-admx-backed-policies.md). +> +> You must specify the data type in the SyncML as <Format>chr</Format>. For an example SyncML, refer to [Enabling a policy](./understanding-admx-backed-policies.md#enabling-a-policy). +> +> The payload of the SyncML must be XML-encoded; for this XML encoding, there are a variety of online encoders that you can use. To avoid encoding the payload, you can use CDATA if your MDM supports it. For more information, see [CDATA Sections](http://www.w3.org/TR/REC-xml/#sec-cdata-sect). + + +ADMX Info: +- GP English name: *Disallow selection of Custom Locales* +- GP name: *CustomLocalesNoSelect_1* +- GP path: *System\Locale Services* +- GP ADMX file name: *Globalization.admx* + + + +
    + + +**ADMX_Globalization/CustomLocalesNoSelect_2** + + + + + + + + + + + + + + + + + + + + + + + + + + + +
    Windows EditionSupported?
    Homecross mark
    Procross mark
    Businesscross mark
    Enterprisecheck mark
    Educationcross mark
    + + +
    + + +[Scope](./policy-configuration-service-provider.md#policy-scope): + +> [!div class = "checklist"] +> * Device + +
    + + + +Available in the latest Windows 10 Insider Preview Build. This policy setting prevents a user from selecting a supplemental custom locale as their user locale. The user is restricted to the set of locales that are installed with the operating system. + +This does not affect the selection of replacement locales. To prevent the selection of replacement locales, adjust the permissions of the %windir%\Globalization directory to prevent the installation of locales by unauthorized users. + +The policy setting "Restrict user locales" can also be enabled to disallow selection of a custom locale, even if this policy setting is not configured. + +If you enable this policy setting, the user cannot select a custom locale as their user locale, but they can still select a replacement locale if one is installed. + +If you disable or do not configure this policy setting, the user can select a custom locale as their user locale. + +If this policy setting is enabled at the machine level, it cannot be disabled by a per-user policy setting. If this policy setting is disabled at the machine level, the per-user policy setting will be ignored. If this policy setting is not configured at the machine level, restrictions will be based on per-user policy settings. + +To set this policy setting on a per-user basis, make sure that you do not configure the per-machine policy setting. + + +> [!TIP] +> This is an ADMX-backed policy and requires a special SyncML format to enable or disable. For details, see [Understanding ADMX-backed policies](./understanding-admx-backed-policies.md). +> +> You must specify the data type in the SyncML as <Format>chr</Format>. For an example SyncML, refer to [Enabling a policy](./understanding-admx-backed-policies.md#enabling-a-policy). +> +> The payload of the SyncML must be XML-encoded; for this XML encoding, there are a variety of online encoders that you can use. To avoid encoding the payload, you can use CDATA if your MDM supports it. For more information, see [CDATA Sections](http://www.w3.org/TR/REC-xml/#sec-cdata-sect). + + +ADMX Info: +- GP English name: *Disallow selection of Custom Locales* +- GP name: *CustomLocalesNoSelect_2* +- GP path: *System\Locale Services* +- GP ADMX file name: *Globalization.admx* + + + +
    + + +**ADMX_Globalization/HideAdminOptions** + + + + + + + + + + + + + + + + + + + + + + + + + + + +
    Windows EditionSupported?
    Homecross mark
    Procross mark
    Businesscross mark
    Enterprisecheck mark
    Educationcross mark
    + + +
    + + +[Scope](./policy-configuration-service-provider.md#policy-scope): + +> [!div class = "checklist"] +> * User + +
    + + + +Available in the latest Windows 10 Insider Preview Build. This policy setting removes the Administrative options from the Region settings control panel. + +Administrative options include interfaces for setting system locale and copying settings to the default user. This policy setting does not, however, prevent an administrator or another application from changing these values programmatically. + +This policy setting is used only to simplify the Regional Options control panel. + +If you enable this policy setting, the user cannot see the Administrative options. + +If you disable or do not configure this policy setting, the user can see the Administrative options. + +> [!NOTE] +> Even if a user can see the Administrative options, other policies may prevent them from modifying the values. + + + +> [!TIP] +> This is an ADMX-backed policy and requires a special SyncML format to enable or disable. For details, see [Understanding ADMX-backed policies](./understanding-admx-backed-policies.md). +> +> You must specify the data type in the SyncML as <Format>chr</Format>. For an example SyncML, refer to [Enabling a policy](./understanding-admx-backed-policies.md#enabling-a-policy). +> +> The payload of the SyncML must be XML-encoded; for this XML encoding, there are a variety of online encoders that you can use. To avoid encoding the payload, you can use CDATA if your MDM supports it. For more information, see [CDATA Sections](http://www.w3.org/TR/REC-xml/#sec-cdata-sect). + + +ADMX Info: +- GP English name: *Hide Regional and Language Options administrative options* +- GP name: *HideAdminOptions* +- GP path: *Control Panel\Regional and Language Options* +- GP ADMX file name: *Globalization.admx* + + + +
    + + +**ADMX_Globalization/HideCurrentLocation** + + + + + + + + + + + + + + + + + + + + + + + + + + + +
    Windows EditionSupported?
    Homecross mark
    Procross mark
    Businesscross mark
    Enterprisecheck mark
    Educationcross mark
    + + +
    + + +[Scope](./policy-configuration-service-provider.md#policy-scope): + +> [!div class = "checklist"] +> * User + +
    + + + +Available in the latest Windows 10 Insider Preview Build. This policy setting removes the option to change the user's geographical location (GeoID) from the Region settings control panel. + +This policy setting is used only to simplify the Regional Options control panel. + +If you enable this policy setting, the user does not see the option to change the GeoID. This does not prevent the user or an application from changing the GeoID programmatically. + +If you disable or do not configure this policy setting, the user sees the option for changing the user location (GeoID). + +> [!NOTE] +> Even if a user can see the GeoID option, the "Disallow changing of geographical location" option can prevent them from actually changing their current geographical location. + + +> [!TIP] +> This is an ADMX-backed policy and requires a special SyncML format to enable or disable. For details, see [Understanding ADMX-backed policies](./understanding-admx-backed-policies.md). +> +> You must specify the data type in the SyncML as <Format>chr</Format>. For an example SyncML, refer to [Enabling a policy](./understanding-admx-backed-policies.md#enabling-a-policy). +> +> The payload of the SyncML must be XML-encoded; for this XML encoding, there are a variety of online encoders that you can use. To avoid encoding the payload, you can use CDATA if your MDM supports it. For more information, see [CDATA Sections](http://www.w3.org/TR/REC-xml/#sec-cdata-sect). + + +ADMX Info: +- GP English name: *Hide the geographic location option* +- GP name: *HideCurrentLocation* +- GP path: *Control Panel\Regional and Language Options* +- GP ADMX file name: *Globalization.admx* + + + +
    + + +**ADMX_Globalization/HideLanguageSelection** + + + + + + + + + + + + + + + + + + + + + + + + + + + +
    Windows EditionSupported?
    Homecross mark
    Procross mark
    Businesscross mark
    Enterprisecheck mark
    Educationcross mark
    + + +
    + + +[Scope](./policy-configuration-service-provider.md#policy-scope): + +> [!div class = "checklist"] +> * User + +
    + + + +Available in the latest Windows 10 Insider Preview Build. This policy setting removes the option to change the user's menus and dialogs (UI) language from the Language and Regional Options control panel. + +This policy setting is used only to simplify the Regional Options control panel. + +If you enable this policy setting, the user does not see the option for changing the UI language. This does not prevent the user or an application from changing the UI language programmatically. If you disable or do not configure this policy setting, the user sees the option for changing the UI language. + +> [!NOTE] +> Even if a user can see the option to change the UI language, other policy settings can prevent them from changing their UI language. + + + +> [!TIP] +> This is an ADMX-backed policy and requires a special SyncML format to enable or disable. For details, see [Understanding ADMX-backed policies](./understanding-admx-backed-policies.md). +> +> You must specify the data type in the SyncML as <Format>chr</Format>. For an example SyncML, refer to [Enabling a policy](./understanding-admx-backed-policies.md#enabling-a-policy). +> +> The payload of the SyncML must be XML-encoded; for this XML encoding, there are a variety of online encoders that you can use. To avoid encoding the payload, you can use CDATA if your MDM supports it. For more information, see [CDATA Sections](http://www.w3.org/TR/REC-xml/#sec-cdata-sect). + + +ADMX Info: +- GP English name: *Hide the select language group options* +- GP name: *HideLanguageSelection* +- GP path: *Control Panel\Regional and Language Options* +- GP ADMX file name: *Globalization.admx* + + + +
    + + +**ADMX_Globalization/HideLocaleSelectAndCustomize** + + + + + + + + + + + + + + + + + + + + + + + + + + + +
    Windows EditionSupported?
    Homecross mark
    Procross mark
    Businesscross mark
    Enterprisecheck mark
    Educationcross mark
    + + +
    + + +[Scope](./policy-configuration-service-provider.md#policy-scope): + +> [!div class = "checklist"] +> * User + +
    + + + +Available in the latest Windows 10 Insider Preview Build. This policy setting removes the regional formats interface from the Region settings control panel. + +This policy setting is used only to simplify the Regional and Language Options control panel. + +If you enable this policy setting, the user does not see the regional formats options. This does not prevent the user or an application from changing their user locale or user overrides programmatically. + +If you disable or do not configure this policy setting, the user sees the regional formats options for changing and customizing the user locale. + + +> [!TIP] +> This is an ADMX-backed policy and requires a special SyncML format to enable or disable. For details, see [Understanding ADMX-backed policies](./understanding-admx-backed-policies.md). +> +> You must specify the data type in the SyncML as <Format>chr</Format>. For an example SyncML, refer to [Enabling a policy](./understanding-admx-backed-policies.md#enabling-a-policy). +> +> The payload of the SyncML must be XML-encoded; for this XML encoding, there are a variety of online encoders that you can use. To avoid encoding the payload, you can use CDATA if your MDM supports it. For more information, see [CDATA Sections](http://www.w3.org/TR/REC-xml/#sec-cdata-sect). + + +ADMX Info: +- GP English name: *Hide user locale selection and customization options* +- GP name: *HideLocaleSelectAndCustomize* +- GP path: *Control Panel\Regional and Language Options* +- GP ADMX file name: *Globalization.admx* + + + +
    + + +**ADMX_Globalization/ImplicitDataCollectionOff_1** + + + + + + + + + + + + + + + + + + + + + + + + + + + +
    Windows EditionSupported?
    Homecross mark
    Procross mark
    Businesscross mark
    Enterprisecheck mark
    Educationcross mark
    + + +
    + + +[Scope](./policy-configuration-service-provider.md#policy-scope): + +> [!div class = "checklist"] +> * User + +
    + + + +Available in the latest Windows 10 Insider Preview Build. This policy setting turns off the automatic learning component of handwriting recognition personalization. + +Automatic learning enables the collection and storage of text and ink written by the user in order to help adapt handwriting recognition to the vocabulary and handwriting style of the user. Text that is collected includes all outgoing messages in Windows Mail, and MAPI enabled email clients, as well as URLs from the Internet Explorer browser history. The information that is stored includes word frequency and new words not already known to the handwriting recognition engines (for example, proper names and acronyms). Deleting email content or the browser history does not delete the stored personalization data. Ink entered through Input Panel is collected and stored. + +> [!NOTE] +> Automatic learning of both text and ink might not be available for all languages, even when handwriting personalization is available. See Tablet PC Help for more information. + +If you enable this policy setting, automatic learning stops and any stored data is deleted. Users cannot configure this setting in Control Panel. + +If you disable this policy setting, automatic learning is turned on. Users cannot configure this policy setting in Control Panel. Collected data is only used for handwriting recognition, if handwriting personalization is turned on. + +If you do not configure this policy, users can choose to enable or disable automatic learning either from the Handwriting tab in the Tablet Settings in Control Panel or from the opt-in dialog. + +This policy setting is related to the "Turn off handwriting personalization" policy setting. + +> [!NOTE] +> The amount of stored ink is limited to 50 MB and the amount of text information to approximately 5 MB. When these limits are reached and new data is collected, old data is deleted to make room for more recent data. +> +> Handwriting personalization works only for Microsoft handwriting recognizers, and not with third-party recognizers. + + +> [!TIP] +> This is an ADMX-backed policy and requires a special SyncML format to enable or disable. For details, see [Understanding ADMX-backed policies](./understanding-admx-backed-policies.md). +> +> You must specify the data type in the SyncML as <Format>chr</Format>. For an example SyncML, refer to [Enabling a policy](./understanding-admx-backed-policies.md#enabling-a-policy). +> +> The payload of the SyncML must be XML-encoded; for this XML encoding, there are a variety of online encoders that you can use. To avoid encoding the payload, you can use CDATA if your MDM supports it. For more information, see [CDATA Sections](http://www.w3.org/TR/REC-xml/#sec-cdata-sect). + + +ADMX Info: +- GP English name: *Turn off automatic learning* +- GP name: *ImplicitDataCollectionOff_1* +- GP path: *Control Panel\Regional and Language Options\Handwriting personalization* +- GP ADMX file name: *Globalization.admx* + + + +
    + + +**ADMX_Globalization/ImplicitDataCollectionOff_2** + + + + + + + + + + + + + + + + + + + + + + + + + + + +
    Windows EditionSupported?
    Homecross mark
    Procross mark
    Businesscross mark
    Enterprisecheck mark
    Educationcross mark
    + + +
    + + +[Scope](./policy-configuration-service-provider.md#policy-scope): + +> [!div class = "checklist"] +> * Device + +
    + + + +Available in the latest Windows 10 Insider Preview Build. This policy setting turns off the automatic learning component of handwriting recognition personalization. + +Automatic learning enables the collection and storage of text and ink written by the user in order to help adapt handwriting recognition to the vocabulary and handwriting style of the user. Text that is collected includes all outgoing messages in Windows Mail, and MAPI enabled email clients, as well as URLs from the Internet Explorer browser history. The information that is stored includes word frequency and new words not already known to the handwriting recognition engines (for example, proper names and acronyms). Deleting email content or the browser history does not delete the stored personalization data. Ink entered through Input Panel is collected and stored. + +> [!NOTE] +> Automatic learning of both text and ink might not be available for all languages, even when handwriting personalization is available. See Tablet PC Help for more information. + +If you enable this policy setting, automatic learning stops and any stored data is deleted. Users cannot configure this setting in Control Panel. + +If you disable this policy setting, automatic learning is turned on. Users cannot configure this policy setting in Control Panel. Collected data is only used for handwriting recognition, if handwriting personalization is turned on. + +If you do not configure this policy, users can choose to enable or disable automatic learning either from the Handwriting tab in the Tablet Settings in Control Panel or from the opt-in dialog. + +This policy setting is related to the "Turn off handwriting personalization" policy setting. + +> [!NOTE] +> The amount of stored ink is limited to 50 MB and the amount of text information to approximately 5 MB. When these limits are reached and new data is collected, old data is deleted to make room for more recent data. +> +> Handwriting personalization works only for Microsoft handwriting recognizers, and not with third-party recognizers. + + +> [!TIP] +> This is an ADMX-backed policy and requires a special SyncML format to enable or disable. For details, see [Understanding ADMX-backed policies](./understanding-admx-backed-policies.md). +> +> You must specify the data type in the SyncML as <Format>chr</Format>. For an example SyncML, refer to [Enabling a policy](./understanding-admx-backed-policies.md#enabling-a-policy). +> +> The payload of the SyncML must be XML-encoded; for this XML encoding, there are a variety of online encoders that you can use. To avoid encoding the payload, you can use CDATA if your MDM supports it. For more information, see [CDATA Sections](http://www.w3.org/TR/REC-xml/#sec-cdata-sect). + + +ADMX Info: +- GP English name: *Turn off automatic learning* +- GP name: *ImplicitDataCollectionOff_2* +- GP path: *Control Panel\Regional and Language Options\Handwriting personalization* +- GP ADMX file name: *Globalization.admx* + + + +
    + + +**ADMX_Globalization/LocaleSystemRestrict** + + + + + + + + + + + + + + + + + + + + + + + + + + + +
    Windows EditionSupported?
    Homecross mark
    Procross mark
    Businesscross mark
    Enterprisecheck mark
    Educationcross mark
    + + +
    + + +[Scope](./policy-configuration-service-provider.md#policy-scope): + +> [!div class = "checklist"] +> * Device + +
    + + + +Available in the latest Windows 10 Insider Preview Build. This policy setting restricts the permitted system locales to the specified list. If the list is empty, it locks the system locale to its current value. This policy setting does not change the existing system locale; however, the next time that an administrator attempts to change the computer's system locale, they will be restricted to the specified list. + +The locale list is specified using language names, separated by a semicolon (;). For example, en-US is English (United States). Specifying "en-US;en-CA" would restrict the system locale to English (United States) and English (Canada). + +If you enable this policy setting, administrators can select a system locale only from the specified system locale list. + +If you disable or do not configure this policy setting, administrators can select any system locale shipped with the operating system. + + +> [!TIP] +> This is an ADMX-backed policy and requires a special SyncML format to enable or disable. For details, see [Understanding ADMX-backed policies](./understanding-admx-backed-policies.md). +> +> You must specify the data type in the SyncML as <Format>chr</Format>. For an example SyncML, refer to [Enabling a policy](./understanding-admx-backed-policies.md#enabling-a-policy). +> +> The payload of the SyncML must be XML-encoded; for this XML encoding, there are a variety of online encoders that you can use. To avoid encoding the payload, you can use CDATA if your MDM supports it. For more information, see [CDATA Sections](http://www.w3.org/TR/REC-xml/#sec-cdata-sect). + + +ADMX Info: +- GP English name: *Restrict system locales* +- GP name: *LocaleSystemRestrict* +- GP path: *System\Locale Services* +- GP ADMX file name: *Globalization.admx* + + + +
    + + +**ADMX_Globalization/LocaleUserRestrict_1** + + + + + + + + + + + + + + + + + + + + + + + + + + + +
    Windows EditionSupported?
    Homecross mark
    Procross mark
    Businesscross mark
    Enterprisecheck mark
    Educationcross mark
    + + +
    + + +[Scope](./policy-configuration-service-provider.md#policy-scope): + +> [!div class = "checklist"] +> * User + +
    + + + +Available in the latest Windows 10 Insider Preview Build. This policy setting restricts users on a computer to the specified list of user locales. If the list is empty, it locks all user locales to their current values. This policy setting does not change existing user locale settings; however, the next time a user attempts to change their user locale, their choices will be restricted to locales in this list. + +To set this policy setting on a per-user basis, make sure that you do not configure the per-computer policy setting. + +The locale list is specified using language tags, separated by a semicolon (;). For example, en-US is English (United States). Specifying "en-CA;fr-CA" would restrict the user locale to English (Canada) and French (Canada). + +If you enable this policy setting, only locales in the specified locale list can be selected by users. + +If you disable or do not configure this policy setting, users can select any locale installed on the computer, unless restricted by the "Disallow selection of Custom Locales" policy setting. If this policy setting is enabled at the computer level, it cannot be disabled by a per-user policy. If this policy setting is disabled at the computer level, the per-user policy is ignored. If this policy setting is not configured at the computer level, restrictions are based on per-user policies. + + +> [!TIP] +> This is an ADMX-backed policy and requires a special SyncML format to enable or disable. For details, see [Understanding ADMX-backed policies](./understanding-admx-backed-policies.md). +> +> You must specify the data type in the SyncML as <Format>chr</Format>. For an example SyncML, refer to [Enabling a policy](./understanding-admx-backed-policies.md#enabling-a-policy). +> +> The payload of the SyncML must be XML-encoded; for this XML encoding, there are a variety of online encoders that you can use. To avoid encoding the payload, you can use CDATA if your MDM supports it. For more information, see [CDATA Sections](http://www.w3.org/TR/REC-xml/#sec-cdata-sect). + + +ADMX Info: +- GP English name: *Restrict user locales* +- GP name: *LocaleUserRestrict_1* +- GP path: *System\Locale Services* +- GP ADMX file name: *Globalization.admx* + + + +
    + + +**ADMX_Globalization/LocaleUserRestrict_2** + + + + + + + + + + + + + + + + + + + + + + + + + + + +
    Windows EditionSupported?
    Homecross mark
    Procross mark
    Businesscross mark
    Enterprisecheck mark
    Educationcross mark
    + + +
    + + +[Scope](./policy-configuration-service-provider.md#policy-scope): + +> [!div class = "checklist"] +> * Device + +
    + + + +Available in the latest Windows 10 Insider Preview Build. This policy setting restricts users on a computer to the specified list of user locales. If the list is empty, it locks all user locales to their current values. This policy setting does not change existing user locale settings; however, the next time a user attempts to change their user locale, their choices will be restricted to locales in this list. + +To set this policy setting on a per-user basis, make sure that you do not configure the per-computer policy setting. + +The locale list is specified using language tags, separated by a semicolon (;). For example, en-US is English (United States). Specifying "en-CA;fr-CA" would restrict the user locale to English (Canada) and French (Canada). + +If you enable this policy setting, only locales in the specified locale list can be selected by users. + +If you disable or do not configure this policy setting, users can select any locale installed on the computer, unless restricted by the "Disallow selection of Custom Locales" policy setting. + +If this policy setting is enabled at the computer level, it cannot be disabled by a per-user policy. If this policy setting is disabled at the computer level, the per-user policy is ignored. If this policy setting is not configured at the computer level, restrictions are based on per-user policies. + + +> [!TIP] +> This is an ADMX-backed policy and requires a special SyncML format to enable or disable. For details, see [Understanding ADMX-backed policies](./understanding-admx-backed-policies.md). +> +> You must specify the data type in the SyncML as <Format>chr</Format>. For an example SyncML, refer to [Enabling a policy](./understanding-admx-backed-policies.md#enabling-a-policy). +> +> The payload of the SyncML must be XML-encoded; for this XML encoding, there are a variety of online encoders that you can use. To avoid encoding the payload, you can use CDATA if your MDM supports it. For more information, see [CDATA Sections](http://www.w3.org/TR/REC-xml/#sec-cdata-sect). + + +ADMX Info: +- GP English name: *Restrict user locales* +- GP name: *LocaleUserRestrict_2* +- GP path: *System\Locale Services* +- GP ADMX file name: *Globalization.admx* + + + +
    + + +**ADMX_Globalization/LockMachineUILanguage** + + + + + + + + + + + + + + + + + + + + + + + + + + + +
    Windows EditionSupported?
    Homecross mark
    Procross mark
    Businesscross mark
    Enterprisecheck mark
    Educationcross mark
    + + +
    + + +[Scope](./policy-configuration-service-provider.md#policy-scope): + +> [!div class = "checklist"] +> * Device + +
    + + + +Available in the latest Windows 10 Insider Preview Build. This policy setting restricts the Windows UI language for all users. + +This is a policy setting for computers with more than one UI language installed. + +If you enable this policy setting, the UI language of Windows menus and dialogs for systems with more than one language will follow the language specified by the administrator as the system UI languages. The UI language selected by the user will be ignored if it is different than any of the system UI languages. + +If you disable or do not configure this policy setting, the user can specify which UI language is used. + + +> [!TIP] +> This is an ADMX-backed policy and requires a special SyncML format to enable or disable. For details, see [Understanding ADMX-backed policies](./understanding-admx-backed-policies.md). +> +> You must specify the data type in the SyncML as <Format>chr</Format>. For an example SyncML, refer to [Enabling a policy](./understanding-admx-backed-policies.md#enabling-a-policy). +> +> The payload of the SyncML must be XML-encoded; for this XML encoding, there are a variety of online encoders that you can use. To avoid encoding the payload, you can use CDATA if your MDM supports it. For more information, see [CDATA Sections](http://www.w3.org/TR/REC-xml/#sec-cdata-sect). + + +ADMX Info: +- GP English name: *Restricts the UI language Windows uses for all logged users* +- GP name: *LockMachineUILanguage* +- GP path: *Control Panel\Regional and Language Options* +- GP ADMX file name: *Globalization.admx* + + + +
    + + +**ADMX_Globalization/LockUserUILanguage** + + + + + + + + + + + + + + + + + + + + + + + + + + + +
    Windows EditionSupported?
    Homecross mark
    Procross mark
    Businesscross mark
    Enterprisecheck mark
    Educationcross mark
    + + +
    + + +[Scope](./policy-configuration-service-provider.md#policy-scope): + +> [!div class = "checklist"] +> * User + +
    + + + +Available in the latest Windows 10 Insider Preview Build. This policy setting restricts the Windows UI language for specific users. + +This policy setting applies to computers with more than one UI language installed. + +If you enable this policy setting, the UI language of Windows menus and dialogs for systems with more than one language is restricted to a specified language for the selected user. If the specified language is not installed on the target computer or you disable this policy setting, the language selection defaults to the language selected by the user. + +If you disable or do not configure this policy setting, there is no restriction on which language users should use. + +To enable this policy setting in Windows Server 2003, Windows XP, or Windows 2000, to use the "Restrict selection of Windows menus and dialogs language" policy setting. + + +> [!TIP] +> This is an ADMX-backed policy and requires a special SyncML format to enable or disable. For details, see [Understanding ADMX-backed policies](./understanding-admx-backed-policies.md). +> +> You must specify the data type in the SyncML as <Format>chr</Format>. For an example SyncML, refer to [Enabling a policy](./understanding-admx-backed-policies.md#enabling-a-policy). +> +> The payload of the SyncML must be XML-encoded; for this XML encoding, there are a variety of online encoders that you can use. To avoid encoding the payload, you can use CDATA if your MDM supports it. For more information, see [CDATA Sections](http://www.w3.org/TR/REC-xml/#sec-cdata-sect). + + +ADMX Info: +- GP English name: *Restricts the UI languages Windows should use for the selected user* +- GP name: *LockUserUILanguage* +- GP path: *Control Panel\Regional and Language Options* +- GP ADMX file name: *Globalization.admx* + + + +
    + + +**ADMX_Globalization/MachineUILanguageOverwrite** + + + + + + + + + + + + + + + + + + + + + + + + + + + +
    Windows EditionSupported?
    Homecross mark
    Procross mark
    Businesscross mark
    Enterprisecheck mark
    Educationcross mark
    + + +
    + + +[Scope](./policy-configuration-service-provider.md#policy-scope): + +> [!div class = "checklist"] +> * Device + +
    + + + +Available in the latest Windows 10 Insider Preview Build. This policy setting controls which UI language is used for computers with more than one UI language installed. + +If you enable this policy setting, the UI language of Windows menus and dialogs for systems with more than one language is restricted to a specified language. If the specified language is not installed on the target computer or you disable this policy setting, the language selection defaults to the language selected by the local administrator. + +If you disable or do not configure this policy setting, there is no restriction of a specific language used for the Windows menus and dialogs. + + +> [!TIP] +> This is an ADMX-backed policy and requires a special SyncML format to enable or disable. For details, see [Understanding ADMX-backed policies](./understanding-admx-backed-policies.md). +> +> You must specify the data type in the SyncML as <Format>chr</Format>. For an example SyncML, refer to [Enabling a policy](./understanding-admx-backed-policies.md#enabling-a-policy). +> +> The payload of the SyncML must be XML-encoded; for this XML encoding, there are a variety of online encoders that you can use. To avoid encoding the payload, you can use CDATA if your MDM supports it. For more information, see [CDATA Sections](http://www.w3.org/TR/REC-xml/#sec-cdata-sect). + + +ADMX Info: +- GP English name: *Force selected system UI language to overwrite the user UI language* +- GP name: *MachineUILanguageOverwrite* +- GP path: *Control Panel\Regional and Language Options* +- GP ADMX file name: *Globalization.admx* + + + +
    + + +**ADMX_Globalization/PreventGeoIdChange_1** + + + + + + + + + + + + + + + + + + + + + + + + + + + +
    Windows EditionSupported?
    Homecross mark
    Procross mark
    Businesscross mark
    Enterprisecheck mark
    Educationcross mark
    + + +
    + + +[Scope](./policy-configuration-service-provider.md#policy-scope): + +> [!div class = "checklist"] +> * User + +
    + + + +Available in the latest Windows 10 Insider Preview Build. This policy setting prevents users from changing their user geographical location (GeoID). + +If you enable this policy setting, users cannot change their GeoID. + +If you disable or do not configure this policy setting, users may select any GeoID. + +If you enable this policy setting at the computer level, it cannot be disabled by a per-user policy setting. If you disable this policy setting at the computer level, the per-user policy is ignored. If you do not configure this policy setting at the computer level, restrictions are based on per-user policy settings. + +To set this policy setting on a per-user basis, make sure that the per-computer policy setting is not configured. + + +> [!TIP] +> This is an ADMX-backed policy and requires a special SyncML format to enable or disable. For details, see [Understanding ADMX-backed policies](./understanding-admx-backed-policies.md). +> +> You must specify the data type in the SyncML as <Format>chr</Format>. For an example SyncML, refer to [Enabling a policy](./understanding-admx-backed-policies.md#enabling-a-policy). +> +> The payload of the SyncML must be XML-encoded; for this XML encoding, there are a variety of online encoders that you can use. To avoid encoding the payload, you can use CDATA if your MDM supports it. For more information, see [CDATA Sections](http://www.w3.org/TR/REC-xml/#sec-cdata-sect). + + +ADMX Info: +- GP English name: *Disallow changing of geographic location* +- GP name: *PreventGeoIdChange_1* +- GP path: *System\Locale Services* +- GP ADMX file name: *Globalization.admx* + + + +
    + + +**ADMX_Globalization/PreventGeoIdChange_2** + + + + + + + + + + + + + + + + + + + + + + + + + + + +
    Windows EditionSupported?
    Homecross mark
    Procross mark
    Businesscross mark
    Enterprisecheck mark
    Educationcross mark
    + + +
    + + +[Scope](./policy-configuration-service-provider.md#policy-scope): + +> [!div class = "checklist"] +> * Device + +
    + + + +Available in the latest Windows 10 Insider Preview Build. This policy setting prevents users from changing their user geographical location (GeoID). + +If you enable this policy setting, users cannot change their GeoID. + +If you disable or do not configure this policy setting, users may select any GeoID. + +If you enable this policy setting at the computer level, it cannot be disabled by a per-user policy setting. If you disable this policy setting at the computer level, the per-user policy is ignored. If you do not configure this policy setting at the computer level, restrictions are based on per-user policy settings. + +To set this policy setting on a per-user basis, make sure that the per-computer policy setting is not configured. + + +> [!TIP] +> This is an ADMX-backed policy and requires a special SyncML format to enable or disable. For details, see [Understanding ADMX-backed policies](./understanding-admx-backed-policies.md). +> +> You must specify the data type in the SyncML as <Format>chr</Format>. For an example SyncML, refer to [Enabling a policy](./understanding-admx-backed-policies.md#enabling-a-policy). +> +> The payload of the SyncML must be XML-encoded; for this XML encoding, there are a variety of online encoders that you can use. To avoid encoding the payload, you can use CDATA if your MDM supports it. For more information, see [CDATA Sections](http://www.w3.org/TR/REC-xml/#sec-cdata-sect). + + +ADMX Info: +- GP English name: *Disallow changing of geographic location* +- GP name: *PreventGeoIdChange_2* +- GP path: *System\Locale Services* +- GP ADMX file name: *Globalization.admx* + + + +
    + + +**ADMX_Globalization/PreventUserOverrides_1** + + + + + + + + + + + + + + + + + + + + + + + + + + + +
    Windows EditionSupported?
    Homecross mark
    Procross mark
    Businesscross mark
    Enterprisecheck mark
    Educationcross mark
    + + +
    + + +[Scope](./policy-configuration-service-provider.md#policy-scope): + +> [!div class = "checklist"] +> * User + +
    + + + +Available in the latest Windows 10 Insider Preview Build. This policy setting prevents the user from customizing their locale by changing their user overrides. + +Any existing overrides in place when this policy is enabled will be frozen. To remove existing user overrides, first reset the user(s) values to the defaults and then apply this policy. + +When this policy setting is enabled, users can still choose alternate locales installed on the system unless prevented by other policies, however, they will be unable to customize those choices. + +The user cannot customize their user locale with user overrides. + +If this policy setting is disabled or not configured, then the user can customize their user locale overrides. + +If this policy is set to Enabled at the computer level, then it cannot be disabled by a per-User policy. If this policy is set to Disabled at the computer level, then the per-User policy will be ignored. If this policy is set to Not Configured at the computer level, then restrictions will be based on per-User policies. + +To set this policy on a per-user basis, make sure that the per-computer policy is set to Not Configured. + + +> [!TIP] +> This is an ADMX-backed policy and requires a special SyncML format to enable or disable. For details, see [Understanding ADMX-backed policies](./understanding-admx-backed-policies.md). +> +> You must specify the data type in the SyncML as <Format>chr</Format>. For an example SyncML, refer to [Enabling a policy](./understanding-admx-backed-policies.md#enabling-a-policy). +> +> The payload of the SyncML must be XML-encoded; for this XML encoding, there are a variety of online encoders that you can use. To avoid encoding the payload, you can use CDATA if your MDM supports it. For more information, see [CDATA Sections](http://www.w3.org/TR/REC-xml/#sec-cdata-sect). + + +ADMX Info: +- GP English name: *Disallow user override of locale settings* +- GP name: *PreventUserOverrides_1* +- GP path: *System\Locale Services* +- GP ADMX file name: *Globalization.admx* + + + +
    + + +**ADMX_Globalization/PreventUserOverrides_2** + + + + + + + + + + + + + + + + + + + + + + + + + + + +
    Windows EditionSupported?
    Homecross mark
    Procross mark
    Businesscross mark
    Enterprisecheck mark
    Educationcross mark
    + + +
    + + +[Scope](./policy-configuration-service-provider.md#policy-scope): + +> [!div class = "checklist"] +> * Device + +
    + + + +Available in the latest Windows 10 Insider Preview Build. This policy setting prevents the user from customizing their locale by changing their user overrides. + +Any existing overrides in place when this policy is enabled will be frozen. To remove existing user overrides, first reset the user(s) values to the defaults and then apply this policy. + +When this policy setting is enabled, users can still choose alternate locales installed on the system unless prevented by other policies, however, they will be unable to customize those choices. + +The user cannot customize their user locale with user overrides. + +If this policy setting is disabled or not configured, then the user can customize their user locale overrides. + +If this policy is set to Enabled at the computer level, then it cannot be disabled by a per-User policy. If this policy is set to Disabled at the computer level, then the per-User policy will be ignored. If this policy is set to Not Configured at the computer level, then restrictions will be based on per-User policies. + +To set this policy on a per-user basis, make sure that the per-computer policy is set to Not Configured. + + +> [!TIP] +> This is an ADMX-backed policy and requires a special SyncML format to enable or disable. For details, see [Understanding ADMX-backed policies](./understanding-admx-backed-policies.md). +> +> You must specify the data type in the SyncML as <Format>chr</Format>. For an example SyncML, refer to [Enabling a policy](./understanding-admx-backed-policies.md#enabling-a-policy). +> +> The payload of the SyncML must be XML-encoded; for this XML encoding, there are a variety of online encoders that you can use. To avoid encoding the payload, you can use CDATA if your MDM supports it. For more information, see [CDATA Sections](http://www.w3.org/TR/REC-xml/#sec-cdata-sect). + + +ADMX Info: +- GP English name: *Disallow user override of locale settings* +- GP name: *PreventUserOverrides_2* +- GP path: *System\Locale Services* +- GP ADMX file name: *Globalization.admx* + + + +
    + + +**ADMX_Globalization/RestrictUILangSelect** + + + + + + + + + + + + + + + + + + + + + + + + + + + +
    Windows EditionSupported?
    Homecross mark
    Procross mark
    Businesscross mark
    Enterprisecheck mark
    Educationcross mark
    + + +
    + + +[Scope](./policy-configuration-service-provider.md#policy-scope): + +> [!div class = "checklist"] +> * User + +
    + + + +Available in the latest Windows 10 Insider Preview Build. This policy setting restricts users to the specified language by disabling the menus and dialog box controls in the Region settings control panel. If the specified language is not installed on the target computer, the language selection defaults to English. + +If you enable this policy setting, the dialog box controls in the Regional and Language Options control panel are not accessible to the logged on user. This prevents users from specifying a language different than the one used. + +To enable this policy setting in Windows Vista, use the "Restricts the UI languages Windows should use for the selected user" policy setting. + +If you disable or do not configure this policy setting, the logged-on user can access the dialog box controls in the Regional and Language Options control panel to select any available UI language. + + +> [!TIP] +> This is an ADMX-backed policy and requires a special SyncML format to enable or disable. For details, see [Understanding ADMX-backed policies](./understanding-admx-backed-policies.md). +> +> You must specify the data type in the SyncML as <Format>chr</Format>. For an example SyncML, refer to [Enabling a policy](./understanding-admx-backed-policies.md#enabling-a-policy). +> +> The payload of the SyncML must be XML-encoded; for this XML encoding, there are a variety of online encoders that you can use. To avoid encoding the payload, you can use CDATA if your MDM supports it. For more information, see [CDATA Sections](http://www.w3.org/TR/REC-xml/#sec-cdata-sect). + + +ADMX Info: +- GP English name: *Restrict selection of Windows menus and dialogs language* +- GP name: *RestrictUILangSelect* +- GP path: *Control Panel\Regional and Language Options* +- GP ADMX file name: *Globalization.admx* + + + +
    + + +**ADMX_Globalization/TurnOffAutocorrectMisspelledWords** + + + + + + + + + + + + + + + + + + + + + + + + + + + +
    Windows EditionSupported?
    Homecross mark
    Procross mark
    Businesscross mark
    Enterprisecheck mark
    Educationcross mark
    + + +
    + + +[Scope](./policy-configuration-service-provider.md#policy-scope): + +> [!div class = "checklist"] +> * User + +
    + + + +Available in the latest Windows 10 Insider Preview Build. This policy turns off the autocorrect misspelled words option. This does not, however, prevent the user or an application from changing the setting programmatically. + +The autocorrect misspelled words option controls whether or not errors in typed text will be automatically corrected. + +If the policy is Enabled, then the option will be locked to not autocorrect misspelled words. + +If the policy is Disabled or Not Configured, then the user will be free to change the setting according to their preference. + +Note that the availability and function of this setting is dependent on supported languages being enabled. + +> [!TIP] +> This is an ADMX-backed policy and requires a special SyncML format to enable or disable. For details, see [Understanding ADMX-backed policies](./understanding-admx-backed-policies.md). +> +> You must specify the data type in the SyncML as <Format>chr</Format>. For an example SyncML, refer to [Enabling a policy](./understanding-admx-backed-policies.md#enabling-a-policy). +> +> The payload of the SyncML must be XML-encoded; for this XML encoding, there are a variety of online encoders that you can use. To avoid encoding the payload, you can use CDATA if your MDM supports it. For more information, see [CDATA Sections](http://www.w3.org/TR/REC-xml/#sec-cdata-sect). + + +ADMX Info: +- GP English name: *Turn off autocorrect misspelled words* +- GP name: *TurnOffAutocorrectMisspelledWords* +- GP path: *Control Panel\Regional and Language Options* +- GP ADMX file name: *Globalization.admx* + + + +
    + + +**ADMX_Globalization/TurnOffHighlightMisspelledWords** + + + + + + + + + + + + + + + + + + + + + + + + + + + +
    Windows EditionSupported?
    Homecross mark
    Procross mark
    Businesscross mark
    Enterprisecheck mark
    Educationcross mark
    + + +
    + + +[Scope](./policy-configuration-service-provider.md#policy-scope): + +> [!div class = "checklist"] +> * User + +
    + + + +Available in the latest Windows 10 Insider Preview Build. This policy turns off the highlight misspelled words option. This does not, however, prevent the user or an application from changing the setting programmatically. + +The highlight misspelled words option controls whether or next spelling errors in typed text will be highlighted. + +If the policy is Enabled, then the option will be locked to not highlight misspelled words. + +If the policy is Disabled or Not Configured, then the user will be free to change the setting according to their preference. + +Note that the availability and function of this setting is dependent on supported languages being enabled. + + +> [!TIP] +> This is an ADMX-backed policy and requires a special SyncML format to enable or disable. For details, see [Understanding ADMX-backed policies](./understanding-admx-backed-policies.md). +> +> You must specify the data type in the SyncML as <Format>chr</Format>. For an example SyncML, refer to [Enabling a policy](./understanding-admx-backed-policies.md#enabling-a-policy). +> +> The payload of the SyncML must be XML-encoded; for this XML encoding, there are a variety of online encoders that you can use. To avoid encoding the payload, you can use CDATA if your MDM supports it. For more information, see [CDATA Sections](http://www.w3.org/TR/REC-xml/#sec-cdata-sect). + + +ADMX Info: +- GP English name: *Turn off highlight misspelled words* +- GP name: *TurnOffHighlightMisspelledWords* +- GP path: *Control Panel\Regional and Language Options* +- GP ADMX file name: *Globalization.admx* + + + +
    + + +**ADMX_Globalization/TurnOffInsertSpace** + + + + + + + + + + + + + + + + + + + + + + + + + + + +
    Windows EditionSupported?
    Homecross mark
    Procross mark
    Businesscross mark
    Enterprisecheck mark
    Educationcross mark
    + + +
    + + +[Scope](./policy-configuration-service-provider.md#policy-scope): + +> [!div class = "checklist"] +> * User + +
    + + + +Available in the latest Windows 10 Insider Preview Build. This policy turns off the insert a space after selecting a text prediction option. This does not, however, prevent the user or an application from changing the setting programmatically. + +The insert a space after selecting a text prediction option controls whether or not a space will be inserted after the user selects a text prediction candidate when using the on-screen keyboard. + +If the policy is Enabled, then the option will be locked to not insert a space after selecting a text prediction. + +If the policy is Disabled or Not Configured, then the user will be free to change the setting according to their preference. + +Note that the availability and function of this setting is dependent on supported languages being enabled. + +> [!TIP] +> This is an ADMX-backed policy and requires a special SyncML format to enable or disable. For details, see [Understanding ADMX-backed policies](./understanding-admx-backed-policies.md). +> +> You must specify the data type in the SyncML as <Format>chr</Format>. For an example SyncML, refer to [Enabling a policy](./understanding-admx-backed-policies.md#enabling-a-policy). +> +> The payload of the SyncML must be XML-encoded; for this XML encoding, there are a variety of online encoders that you can use. To avoid encoding the payload, you can use CDATA if your MDM supports it. For more information, see [CDATA Sections](http://www.w3.org/TR/REC-xml/#sec-cdata-sect). + + +ADMX Info: +- GP English name: *Turn off insert a space after selecting a text prediction* +- GP name: *TurnOffInsertSpace* +- GP path: *Control Panel\Regional and Language Options* +- GP ADMX file name: *Globalization.admx* + + + +
    + + +**ADMX_Globalization/TurnOffOfferTextPredictions** + + + + + + + + + + + + + + + + + + + + + + + + + + + +
    Windows EditionSupported?
    Homecross mark
    Procross mark
    Businesscross mark
    Enterprisecheck mark
    Educationcross mark
    + + +
    + + +[Scope](./policy-configuration-service-provider.md#policy-scope): + +> [!div class = "checklist"] +> * User + +
    + + + +Available in the latest Windows 10 Insider Preview Build. This policy turns off the offer text predictions as I type option. This does not, however, prevent the user or an application from changing the setting programmatically. + +The offer text predictions as I type option controls whether or not text prediction suggestions will be presented to the user on the on-screen keyboard. + +If the policy is Enabled, then the option will be locked to not offer text predictions. + +If the policy is Disabled or Not Configured, then the user will be free to change the setting according to their preference. + +Note that the availability and function of this setting is dependent on supported languages being enabled. + + +> [!TIP] +> This is an ADMX-backed policy and requires a special SyncML format to enable or disable. For details, see [Understanding ADMX-backed policies](./understanding-admx-backed-policies.md). +> +> You must specify the data type in the SyncML as <Format>chr</Format>. For an example SyncML, refer to [Enabling a policy](./understanding-admx-backed-policies.md#enabling-a-policy). +> +> The payload of the SyncML must be XML-encoded; for this XML encoding, there are a variety of online encoders that you can use. To avoid encoding the payload, you can use CDATA if your MDM supports it. For more information, see [CDATA Sections](http://www.w3.org/TR/REC-xml/#sec-cdata-sect). + + +ADMX Info: +- GP English name: *Turn off offer text predictions as I type* +- GP name: *TurnOffOfferTextPredictions* +- GP path: *Control Panel\Regional and Language Options* +- GP ADMX file name: *Globalization.admx* + + + +
    + + +**ADMX_Globalization/Y2K** + + + + + + + + + + + + + + + + + + + + + + + + + + + +
    Windows EditionSupported?
    Homecross mark
    Procross mark
    Businesscross mark
    Enterprisecheck mark
    Educationcross mark
    + + +
    + + +[Scope](./policy-configuration-service-provider.md#policy-scope): + +> [!div class = "checklist"] +> * User + +
    + + + +Available in the latest Windows 10 Insider Preview Build. This policy setting determines how programs interpret two-digit years. + +This policy setting affects only the programs that use this Windows feature to interpret two-digit years. If a program does not interpret two-digit years correctly, consult the documentation or manufacturer of the program. + +If you enable this policy setting, the system specifies the largest two-digit year interpreted as being preceded by 20. All numbers less than or equal to the specified value are interpreted as being preceded by 20. All numbers greater than the specified value are interpreted as being preceded by 19. + +For example, the default value, 2029, specifies that all two-digit years less than or equal to 29 (00 to 29) are interpreted as being preceded by 20, that is 2000 to 2029. Conversely, all two-digit years greater than 29 (30 to 99) are interpreted as being preceded by 19, that is, 1930 to 1999. + +If you disable or do not configure this policy setting, Windows does not interpret two-digit year formats using this scheme for the program. + + +> [!TIP] +> This is an ADMX-backed policy and requires a special SyncML format to enable or disable. For details, see [Understanding ADMX-backed policies](./understanding-admx-backed-policies.md). +> +> You must specify the data type in the SyncML as <Format>chr</Format>. For an example SyncML, refer to [Enabling a policy](./understanding-admx-backed-policies.md#enabling-a-policy). +> +> The payload of the SyncML must be XML-encoded; for this XML encoding, there are a variety of online encoders that you can use. To avoid encoding the payload, you can use CDATA if your MDM supports it. For more information, see [CDATA Sections](http://www.w3.org/TR/REC-xml/#sec-cdata-sect). + + +ADMX Info: +- GP English name: *Century interpretation for Year 2000* +- GP name: *Y2K* +- GP path: *System* +- GP ADMX file name: *Globalization.admx* + + + +
    + +Footnotes: + +- 1 - Available in Windows 10, version 1607. +- 2 - Available in Windows 10, version 1703. +- 3 - Available in Windows 10, version 1709. +- 4 - Available in Windows 10, version 1803. +- 5 - Available in Windows 10, version 1809. +- 6 - Available in Windows 10, version 1903. +- 7 - Available in Windows 10, version 1909. +- 8 - Available in Windows 10, version 2004. + + \ No newline at end of file From 6c088caa45a70bb004c68ec7af18508b1391d04d Mon Sep 17 00:00:00 2001 From: ManikaDhiman Date: Mon, 14 Dec 2020 16:12:44 -0800 Subject: [PATCH 093/486] Added RemoteAssistance policeis --- windows/client-management/mdm/TOC.md | 1 + .../mdm/policies-in-policy-csp-admx-backed.md | 2 + .../policy-configuration-service-provider.md | 11 + .../mdm/policy-csp-admx-remoteassistance.md | 205 ++++++++++++++++++ 4 files changed, 219 insertions(+) create mode 100644 windows/client-management/mdm/policy-csp-admx-remoteassistance.md diff --git a/windows/client-management/mdm/TOC.md b/windows/client-management/mdm/TOC.md index ace9da625a..7068f51134 100644 --- a/windows/client-management/mdm/TOC.md +++ b/windows/client-management/mdm/TOC.md @@ -218,6 +218,7 @@ #### [ADMX_PerformanceDiagnostics](policy-csp-admx-performancediagnostics.md) #### [ADMX_PowerShellExecutionPolicy](policy-csp-admx-powershellexecutionpolicy.md) #### [ADMX_Reliability](policy-csp-admx-reliability.md) +#### [ADMX_RemoteAssistance](policy-csp-admx-remoteassistance.md) #### [ADMX_RemovableStorage](policy-csp-admx-removablestorage.md) #### [ADMX_RPC](policy-csp-admx-rpc.md) #### [ADMX_Scripts](policy-csp-admx-scripts.md) diff --git a/windows/client-management/mdm/policies-in-policy-csp-admx-backed.md b/windows/client-management/mdm/policies-in-policy-csp-admx-backed.md index eb920b0fb5..2480c5ab09 100644 --- a/windows/client-management/mdm/policies-in-policy-csp-admx-backed.md +++ b/windows/client-management/mdm/policies-in-policy-csp-admx-backed.md @@ -471,6 +471,8 @@ ms.date: 10/08/2020 - [ADMX_Reliability/PCH_ReportShutdownEvents](./policy-csp-admx-reliability.md#admx-reliability-pch-reportshutdownevents) - [ADMX_Reliability/ShutdownEventTrackerStateFile](./policy-csp-admx-reliability.md#admx-reliability-shutdowneventtrackerstatefile) - [ADMX_Reliability/ShutdownReason](./policy-csp-admx-reliability.md#admx-reliability-shutdownreason) +- [ADMX_RemoteAssistance/RA_EncryptedTicketOnly](./policy-csp-admx-remoteassistance.md#admx-remoteassistance-ra-encryptedticketonly) +- [ADMX_RemoteAssistance/RA_Optimize_Bandwidth](./policy-csp-admx-remoteassistance.md#admx-remoteassistance-ra-optimize-bandwidth) - [ADMX_RemovableStorage/AccessRights_RebootTime_1](./policy-csp-admx-removablestorage.md#admx-removablestorage-accessrights-reboottime-1) - [ADMX_RemovableStorage/AccessRights_RebootTime_2](./policy-csp-admx-removablestorage.md#admx-removablestorage-accessrights-reboottime-2) - [ADMX_RemovableStorage/CDandDVD_DenyExecute_Access_2](./policy-csp-admx-removablestorage.md#admx-removablestorage-cdanddvd-denyexecute-access-2) diff --git a/windows/client-management/mdm/policy-configuration-service-provider.md b/windows/client-management/mdm/policy-configuration-service-provider.md index 58bfd3a1a2..de3ab67cea 100644 --- a/windows/client-management/mdm/policy-configuration-service-provider.md +++ b/windows/client-management/mdm/policy-configuration-service-provider.md @@ -1732,6 +1732,17 @@ The following diagram shows the Policy configuration service provider in tree fo
    +### ADMX_RemoteAssistance policies + +
    +
    + ADMX_RemoteAssistance/RA_EncryptedTicketOnly +
    +
    + ADMX_RemoteAssistance/RA_Optimize_Bandwidth +
    +
    + ### ADMX_RemovableStorage policies
    diff --git a/windows/client-management/mdm/policy-csp-admx-remoteassistance.md b/windows/client-management/mdm/policy-csp-admx-remoteassistance.md new file mode 100644 index 0000000000..6d1135eab4 --- /dev/null +++ b/windows/client-management/mdm/policy-csp-admx-remoteassistance.md @@ -0,0 +1,205 @@ +--- +title: Policy CSP - ADMX_RemoteAssistance +description: Policy CSP - ADMX_RemoteAssistance +ms.author: dansimp +ms.localizationpriority: medium +ms.topic: article +ms.prod: w10 +ms.technology: windows +author: manikadhiman +ms.date: 12/14/2020 +ms.reviewer: +manager: dansimp +--- + +# Policy CSP - ADMX_RemoteAssistance +> [!WARNING] +> Some information relates to prereleased products, which may be substantially modified before it's commercially released. Microsoft makes no warranties, expressed or implied, concerning the information provided here. + +
    + + +## ADMX_RemoteAssistance policies + +
    +
    + ADMX_RemoteAssistance/RA_EncryptedTicketOnly +
    +
    + ADMX_RemoteAssistance/RA_Optimize_Bandwidth +
    +
    + + +
    + + +**ADMX_RemoteAssistance/RA_EncryptedTicketOnly** + + + + + + + + + + + + + + + + + + + + + + + + + + + +
    Windows EditionSupported?
    Homecross mark
    Procross mark
    Businesscross mark
    Enterprisecheck mark
    Educationcross mark
    + + +
    + + +[Scope](./policy-configuration-service-provider.md#policy-scope): + +> [!div class = "checklist"] +> * Device + +
    + + + +Available in the latest Windows 10 Insider Preview Build. This policy setting enables Remote Assistance invitations to be generated with improved encryption so that only computers running this version (or later versions) of the operating system can connect. This policy setting does not affect Remote Assistance connections that are initiated by instant messaging contacts or the unsolicited Offer Remote Assistance. + +If you enable this policy setting, only computers running this version (or later versions) of the operating system can connect to this computer. + +If you disable this policy setting, computers running this version and a previous version of the operating system can connect to this computer. + +If you do not configure this policy setting, users can configure the setting in System Properties in the Control Panel. + + +> [!TIP] +> This is an ADMX-backed policy and requires a special SyncML format to enable or disable. For details, see [Understanding ADMX-backed policies](./understanding-admx-backed-policies.md). +> +> You must specify the data type in the SyncML as <Format>chr</Format>. For an example SyncML, refer to [Enabling a policy](./understanding-admx-backed-policies.md#enabling-a-policy). +> +> The payload of the SyncML must be XML-encoded; for this XML encoding, there are a variety of online encoders that you can use. To avoid encoding the payload, you can use CDATA if your MDM supports it. For more information, see [CDATA Sections](http://www.w3.org/TR/REC-xml/#sec-cdata-sect). + + +ADMX Info: +- GP English name: *Allow only Windows Vista or later connections* +- GP name: *RA_EncryptedTicketOnly* +- GP path: *System\Remote Assistance* +- GP ADMX file name: *RemoteAssistance.admx* + + + +
    + + +**ADMX_RemoteAssistance/RA_Optimize_Bandwidth** + + + + + + + + + + + + + + + + + + + + + + + + + + + +
    Windows EditionSupported?
    Homecross mark
    Procross mark
    Businesscross mark
    Enterprisecheck mark
    Educationcross mark
    + + +
    + + +[Scope](./policy-configuration-service-provider.md#policy-scope): + +> [!div class = "checklist"] +> * Device + +
    + + + +Available in the latest Windows 10 Insider Preview Build. This policy setting allows you to improve performance in low bandwidth scenarios. + +This setting is incrementally scaled from "No optimization" to "Full optimization". Each incremental setting includes the previous optimization setting. + +For example: + +"Turn off background" will include the following optimizations: + +- No full window drag +- Turn off background + +"Full optimization" will include the following optimizations: + +- Use 16-bit color (8-bit color in Windows Vista) +- Turn off font smoothing (not supported in Windows Vista) +- No full window drag +- Turn off background + +If you enable this policy setting, bandwidth optimization occurs at the level specified. + +If you disable this policy setting, application-based settings are used. + +If you do not configure this policy setting, application-based settings are used. + + +> [!TIP] +> This is an ADMX-backed policy and requires a special SyncML format to enable or disable. For details, see [Understanding ADMX-backed policies](./understanding-admx-backed-policies.md). +> +> You must specify the data type in the SyncML as <Format>chr</Format>. For an example SyncML, refer to [Enabling a policy](./understanding-admx-backed-policies.md#enabling-a-policy). +> +> The payload of the SyncML must be XML-encoded; for this XML encoding, there are a variety of online encoders that you can use. To avoid encoding the payload, you can use CDATA if your MDM supports it. For more information, see [CDATA Sections](http://www.w3.org/TR/REC-xml/#sec-cdata-sect). + + +ADMX Info: +- GP English name: *Turn on bandwidth optimization* +- GP name: *RA_Optimize_Bandwidth* +- GP path: *System\Remote Assistance* +- GP ADMX file name: *RemoteAssistance.admx* + + + +
    + +Footnotes: + +- 1 - Available in Windows 10, version 1607. +- 2 - Available in Windows 10, version 1703. +- 3 - Available in Windows 10, version 1709. +- 4 - Available in Windows 10, version 1803. +- 5 - Available in Windows 10, version 1809. +- 6 - Available in Windows 10, version 1903. +- 7 - Available in Windows 10, version 1909. +- 8 - Available in Windows 10, version 2004. + + \ No newline at end of file From 8c6f6eb20929200bcc2c06bae033bd8374e5044a Mon Sep 17 00:00:00 2001 From: "Trond B. Krokli" <38162891+illfated@users.noreply.github.com> Date: Tue, 15 Dec 2020 14:00:38 +0100 Subject: [PATCH 094/486] Important -> IMPORTANT (consistency) - Add uppercase for the Important blob. Co-authored-by: JohanFreelancer9 <48568725+JohanFreelancer9@users.noreply.github.com> --- .../microsoft-defender-atp/respond-file-alerts.md | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/windows/security/threat-protection/microsoft-defender-atp/respond-file-alerts.md b/windows/security/threat-protection/microsoft-defender-atp/respond-file-alerts.md index 766691ac1e..ef8a82a89f 100644 --- a/windows/security/threat-protection/microsoft-defender-atp/respond-file-alerts.md +++ b/windows/security/threat-protection/microsoft-defender-atp/respond-file-alerts.md @@ -133,7 +133,7 @@ You can roll back and remove a file from quarantine if you’ve determined that > > Defender for Endpoint will restore all custom blocked files that were quarantined on this device in the last 30 days. -> [!Important] +> [!IMPORTANT] > A file that was quarantined as a potential network threat might not be recoverable. If a user attempts to restore the file after quarantine, that file might not be accessible. This can be due to the system no longer having network credentials to access the file. Typically, this is a result of a temporary log on to a system or shared folder and the access tokens expired. ## Add indicator to block or allow a file From 32274198ec5a3a29ac03277f0a01d9bc3d9285f1 Mon Sep 17 00:00:00 2001 From: Crimsonfox89 <40465227+Crimsonfox89@users.noreply.github.com> Date: Tue, 15 Dec 2020 14:21:33 +0000 Subject: [PATCH 095/486] Update windows/security/information-protection/tpm/tpm-fundamentals.md Language agnostic Co-authored-by: Trond B. Krokli <38162891+illfated@users.noreply.github.com> --- .../security/information-protection/tpm/tpm-fundamentals.md | 4 ++-- 1 file changed, 2 insertions(+), 2 deletions(-) diff --git a/windows/security/information-protection/tpm/tpm-fundamentals.md b/windows/security/information-protection/tpm/tpm-fundamentals.md index 93210372ea..462656a2ad 100644 --- a/windows/security/information-protection/tpm/tpm-fundamentals.md +++ b/windows/security/information-protection/tpm/tpm-fundamentals.md @@ -151,5 +151,5 @@ The Windows TPM-based smart card, which is a virtual smart card, can be configur - [Trusted Platform Module](trusted-platform-module-top-node.md) (list of topics) - [TPM Cmdlets in Windows PowerShell](https://docs.microsoft.com/powershell/module/trustedplatformmodule/) -- [TPM WMI providers](https://docs.microsoft.com/en-gb/windows/win32/secprov/security-wmi-providers-reference) -- [Prepare your organization for BitLocker: Planning and Policies - TPM configurations](https://docs.microsoft.com/en-gb/windows/security/information-protection/bitlocker/prepare-your-organization-for-bitlocker-planning-and-policies#tpm-hardware-configurations) +- [TPM WMI providers](https://docs.microsoft.com/windows/win32/secprov/security-wmi-providers-reference) +- [Prepare your organization for BitLocker: Planning and Policies - TPM configurations](https://docs.microsoft.com/windows/security/information-protection/bitlocker/prepare-your-organization-for-bitlocker-planning-and-policies#tpm-hardware-configurations) From 58799fe56a4dfeba12628766831fc0192babcffb Mon Sep 17 00:00:00 2001 From: Sunny Zankharia <67922512+sazankha@users.noreply.github.com> Date: Tue, 15 Dec 2020 11:55:49 -0800 Subject: [PATCH 096/486] Update md-app-guard-overview.md Added more content pertaining to Microsoft Office --- .../md-app-guard-overview.md | 7 +++++-- 1 file changed, 5 insertions(+), 2 deletions(-) diff --git a/windows/security/threat-protection/microsoft-defender-application-guard/md-app-guard-overview.md b/windows/security/threat-protection/microsoft-defender-application-guard/md-app-guard-overview.md index 03930690d8..62c8df613c 100644 --- a/windows/security/threat-protection/microsoft-defender-application-guard/md-app-guard-overview.md +++ b/windows/security/threat-protection/microsoft-defender-application-guard/md-app-guard-overview.md @@ -22,9 +22,12 @@ Microsoft Defender Application Guard (Application Guard) is designed to help pre ## What is Application Guard and how does it work? -Designed for Windows 10 and Microsoft Edge, Application Guard helps to isolate enterprise-defined untrusted sites, protecting your company while your employees browse the Internet. As an enterprise administrator, you define what is among trusted web sites, cloud resources, and internal networks. Everything not on your list is considered untrusted. +For Microsoft Edge, Application Guard helps to isolate enterprise-defined untrusted sites, protecting your company while your employees browse the Internet. As an enterprise administrator, you define what is among trusted web sites, cloud resources, and internal networks. Everything not on your list is considered untrusted. If an employee goes to an untrusted site through either Microsoft Edge or Internet Explorer, Microsoft Edge opens the site in an isolated Hyper-V-enabled container. + +For Microsoft Office, Application Guard helps prevents untrusted Word, Powerpoint and Excel files from accessing trusted resources, by opening these files in an isolated Hyper-V-enabled container. + +The isolated Hyper-V container is separate from the host operating system. This container isolation means that if the untrusted site or file turns out to be malicious, the host PC is protected, and the attacker can't get to your enterprise data. For example, this approach makes the isolated container anonymous, so an attacker can't get to your employee's enterprise credentials. -If an employee goes to an untrusted site through either Microsoft Edge or Internet Explorer, Microsoft Edge opens the site in an isolated Hyper-V-enabled container, which is separate from the host operating system. This container isolation means that if the untrusted site turns out to be malicious, the host PC is protected, and the attacker can't get to your enterprise data. For example, this approach makes the isolated container anonymous, so an attacker can't get to your employee's enterprise credentials. ![Hardware isolation diagram](images/appguard-hardware-isolation.png) From ac09e26c58d592e3d9b93acfe91f5246b3813d31 Mon Sep 17 00:00:00 2001 From: pianofab Date: Tue, 15 Dec 2020 14:00:55 -0800 Subject: [PATCH 097/486] Update whats-new-windows-10-version-20H2.md --- windows/whats-new/whats-new-windows-10-version-20H2.md | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/windows/whats-new/whats-new-windows-10-version-20H2.md b/windows/whats-new/whats-new-windows-10-version-20H2.md index f1046db593..ec7ffb671e 100644 --- a/windows/whats-new/whats-new-windows-10-version-20H2.md +++ b/windows/whats-new/whats-new-windows-10-version-20H2.md @@ -104,7 +104,7 @@ With specialized hardware and software components available on devices shipping ### Windows Sandbox -New polices for [Windows Sandbox](https://docs.microsoft.com/windows/security/threat-protection/windows-sandbox/windows-sandbox-overview) are available in this release. For more information, see [Policy CSP - WindowsSandbox](https://docs.microsoft.com/windows/client-management/mdm/policy-csp-windowssandbox). +New policies for [Windows Sandbox](https://docs.microsoft.com/windows/security/threat-protection/windows-sandbox/windows-sandbox-overview) are available in this release. For more information, see [Policy CSP - WindowsSandbox](https://docs.microsoft.com/windows/client-management/mdm/policy-csp-windowssandbox). ### Windows Virtual Desktop (WVD) From db4a4458509396d7319faee1d787ed2ec8b7f626 Mon Sep 17 00:00:00 2001 From: ManikaDhiman Date: Tue, 15 Dec 2020 15:12:33 -0800 Subject: [PATCH 098/486] Added Printer ADMX-backed policies --- windows/client-management/mdm/TOC.md | 1 + .../mdm/policies-in-policy-csp-admx-backed.md | 27 + .../policy-configuration-service-provider.md | 84 + .../mdm/policy-csp-admx-printing.md | 2027 +++++++++++++++++ 4 files changed, 2139 insertions(+) create mode 100644 windows/client-management/mdm/policy-csp-admx-printing.md diff --git a/windows/client-management/mdm/TOC.md b/windows/client-management/mdm/TOC.md index 555d34e037..5082f05ed7 100644 --- a/windows/client-management/mdm/TOC.md +++ b/windows/client-management/mdm/TOC.md @@ -228,6 +228,7 @@ #### [ADMX_PeerToPeerCaching](policy-csp-admx-peertopeercaching.md) #### [ADMX_PerformanceDiagnostics](policy-csp-admx-performancediagnostics.md) #### [ADMX_PowerShellExecutionPolicy](policy-csp-admx-powershellexecutionpolicy.md) +#### [ADMX_Printing](policy-csp-admx-printing.md) #### [ADMX_Programs](policy-csp-admx-programs.md) #### [ADMX_Reliability](policy-csp-admx-reliability.md) #### [ADMX_RemoteAssistance](policy-csp-admx-remoteassistance.md) diff --git a/windows/client-management/mdm/policies-in-policy-csp-admx-backed.md b/windows/client-management/mdm/policies-in-policy-csp-admx-backed.md index 8acefc3442..ec137198dc 100644 --- a/windows/client-management/mdm/policies-in-policy-csp-admx-backed.md +++ b/windows/client-management/mdm/policies-in-policy-csp-admx-backed.md @@ -687,6 +687,33 @@ ms.date: 10/08/2020 - [ADMX_PowerShellExecutionPolicy/EnableScripts](./policy-csp-admx-powershellexecutionpolicy.md#admx-powershellexecutionpolicy-enablescripts) - [ADMX_PowerShellExecutionPolicy/EnableTranscripting](./policy-csp-admx-powershellexecutionpolicy.md#admx-powershellexecutionpolicy-enabletranscripting) - [ADMX_PowerShellExecutionPolicy/EnableUpdateHelpDefaultSourcePath](./policy-csp-admx-powershellexecutionpolicy.md#admx-powershellexecutionpolicy-enableupdatehelpdefaultsourcepath) +- [ADMX_Printing/AllowWebPrinting](./policy-csp-admx-printing.md#admx-printing-allowwebprinting) +- [ADMX_Printing/ApplicationDriverIsolation](./policy-csp-admx-printing.md#admx-printing-applicationdriverisolation) +- [ADMX_Printing/CustomizedSupportUrl](./policy-csp-admx-printing.md#admx-printing-customizedsupporturl) +- [ADMX_Printing/DoNotInstallCompatibleDriverFromWindowsUpdate](./policy-csp-admx-printing.md#admx-printing-donotinstallcompatibledriverfromwindowsupdate) +- [ADMX_Printing/DomainPrinters](./policy-csp-admx-printing.md#admx-printing-domainprinters) +- [ADMX_Printing/DownlevelBrowse](./policy-csp-admx-printing.md#admx-printing-downlevelbrowse) +- [ADMX_Printing/EMFDespooling](./policy-csp-admx-printing.md#admx-printing-emfdespooling) +- [ADMX_Printing/ForceSoftwareRasterization](./policy-csp-admx-printing.md#admx-printing-forcesoftwarerasterization) +- [ADMX_Printing/IntranetPrintersUrl](./policy-csp-admx-printing.md#admx-printing-intranetprintersurl) +- [ADMX_Printing/KMPrintersAreBlocked](./policy-csp-admx-printing.md#admx-printing-kmprintersareblocked) +- [ADMX_Printing/LegacyDefaultPrinterMode](./policy-csp-admx-printing.md#admx-printing-legacydefaultprintermode) +- [ADMX_Printing/MXDWUseLegacyOutputFormatMSXPS](./policy-csp-admx-printing.md#admx-printing-mxdwuselegacyoutputformatmsxps) +- [ADMX_Printing/NoDeletePrinter](./policy-csp-admx-printing.md#admx-printing-nodeleteprinter) +- [ADMX_Printing/NonDomainPrinters](./policy-csp-admx-printing.md#admx-printing-nondomainprinters) +- [ADMX_Printing/PackagePointAndPrintOnly](./policy-csp-admx-printing.md#admx-printing-packagepointandprintonly) +- [ADMX_Printing/PackagePointAndPrintOnly_Win7](./policy-csp-admx-printing.md#admx-printing-packagepointandprintonly-win7) +- [ADMX_Printing/PackagePointAndPrintServerList](./policy-csp-admx-printing.md#admx-printing-packagepointandprintserverlist) +- [ADMX_Printing/PackagePointAndPrintServerList_Win7](./policy-csp-admx-printing.md#admx-printing-packagepointandprintserverlist-win7) +- [ADMX_Printing/PhysicalLocation](./policy-csp-admx-printing.md#admx-printing-physicallocation) +- [ADMX_Printing/PhysicalLocationSupport](./policy-csp-admx-printing.md#admx-printing-physicallocationsupport) +- [ADMX_Printing/PrintDriverIsolationExecutionPolicy](./policy-csp-admx-printing.md#admx-printing-printdriverisolationexecutionpolicy +) +- [ADMX_Printing/PrintDriverIsolationOverrideCompat](./policy-csp-admx-printing.md#admx-printing-printdriverisolationoverridecompat) +- [ADMX_Printing/PrinterDirectorySearchScope](./policy-csp-admx-printing.md#admx-printing-printerdirectorysearchscope) +- [ADMX_Printing/PrinterServerThread](./policy-csp-admx-printing.md#admx-printing-printerserverthread) +- [ADMX_Printing/ShowJobTitleInEventLogs](./policy-csp-admx-printing.md#admx-printing-showjobtitleineventlogs) +- [ADMX_Printing/V4DriverDisallowPrinterExtension](./policy-csp-admx-printing.md#admx-printing-v4driverdisallowprinterextension) - [ADMX_Programs/NoDefaultPrograms](./policy-csp-admx-programs.md#admx-programs-nodefaultprograms) - [ADMX_Programs/NoGetPrograms](./policy-csp-admx-programs.md#admx-programs-nogetprograms) - [ADMX_Programs/NoInstalledUpdates](./policy-csp-admx-programs.md#admx-programs-noinstalledupdates) diff --git a/windows/client-management/mdm/policy-configuration-service-provider.md b/windows/client-management/mdm/policy-configuration-service-provider.md index 9b53413efa..a1a5453c94 100644 --- a/windows/client-management/mdm/policy-configuration-service-provider.md +++ b/windows/client-management/mdm/policy-configuration-service-provider.md @@ -2428,6 +2428,90 @@ The following diagram shows the Policy configuration service provider in tree fo
    +### ADMX_Printing policies + +
    +
    + ADMX_Printing/AllowWebPrinting +
    +
    + ADMX_Printing/ApplicationDriverIsolation +
    +
    + ADMX_Printing/CustomizedSupportUrl +
    +
    + ADMX_Printing/DoNotInstallCompatibleDriverFromWindowsUpdate +
    +
    + ADMX_Printing/DomainPrinters +
    +
    + ADMX_Printing/DownlevelBrowse +
    +
    + ADMX_Printing/EMFDespooling +
    +
    + ADMX_Printing/ForceSoftwareRasterization +
    +
    + ADMX_Printing/IntranetPrintersUrl +
    +
    + ADMX_Printing/KMPrintersAreBlocked +
    +
    + ADMX_Printing/LegacyDefaultPrinterMode +
    +
    + ADMX_Printing/MXDWUseLegacyOutputFormatMSXPS +
    +
    + ADMX_Printing/NoDeletePrinter +
    +
    + ADMX_Printing/NonDomainPrinters +
    +
    + ADMX_Printing/PackagePointAndPrintOnly +
    +
    + ADMX_Printing/PackagePointAndPrintOnly_Win7 +
    +
    + ADMX_Printing/PackagePointAndPrintServerList +
    +
    + ADMX_Printing/PackagePointAndPrintServerList_Win7 +
    +
    + ADMX_Printing/PhysicalLocation +
    +
    + ADMX_Printing/PhysicalLocationSupport +
    +
    + ADMX_Printing/PrintDriverIsolationExecutionPolicy +
    +
    + ADMX_Printing/PrintDriverIsolationOverrideCompat +
    +
    + ADMX_Printing/PrinterDirectorySearchScope +
    +
    + ADMX_Printing/PrinterServerThread +
    +
    + ADMX_Printing/ShowJobTitleInEventLogs +
    +
    + ADMX_Printing/V4DriverDisallowPrinterExtension +
    +
    + ### ADMX_Programs policies
    diff --git a/windows/client-management/mdm/policy-csp-admx-printing.md b/windows/client-management/mdm/policy-csp-admx-printing.md new file mode 100644 index 0000000000..628d572650 --- /dev/null +++ b/windows/client-management/mdm/policy-csp-admx-printing.md @@ -0,0 +1,2027 @@ +--- +title: Policy CSP - ADMX_Printing +description: Policy CSP - ADMX_Printing +ms.author: dansimp +ms.localizationpriority: medium +ms.topic: article +ms.prod: w10 +ms.technology: windows +author: manikadhiman +ms.date: 12/15/2020 +ms.reviewer: +manager: dansimp +--- + +# Policy CSP - ADMX_Printing +> [!WARNING] +> Some information relates to prereleased products, which may be substantially modified before it's commercially released. Microsoft makes no warranties, expressed or implied, concerning the information provided here. + +
    + + +## ADMX_Printing policies + +
    +
    + ADMX_Printing/AllowWebPrinting +
    +
    + ADMX_Printing/ApplicationDriverIsolation +
    +
    + ADMX_Printing/CustomizedSupportUrl +
    +
    + ADMX_Printing/DoNotInstallCompatibleDriverFromWindowsUpdate +
    +
    + ADMX_Printing/DomainPrinters +
    +
    + ADMX_Printing/DownlevelBrowse +
    +
    + ADMX_Printing/EMFDespooling +
    +
    + ADMX_Printing/ForceSoftwareRasterization +
    +
    + ADMX_Printing/IntranetPrintersUrl +
    +
    + ADMX_Printing/KMPrintersAreBlocked +
    +
    + ADMX_Printing/LegacyDefaultPrinterMode +
    +
    + ADMX_Printing/MXDWUseLegacyOutputFormatMSXPS +
    +
    + ADMX_Printing/NoDeletePrinter +
    +
    + ADMX_Printing/NonDomainPrinters +
    +
    + ADMX_Printing/PackagePointAndPrintOnly +
    +
    + ADMX_Printing/PackagePointAndPrintOnly_Win7 +
    +
    + ADMX_Printing/PackagePointAndPrintServerList +
    +
    + ADMX_Printing/PackagePointAndPrintServerList_Win7 +
    +
    + ADMX_Printing/PhysicalLocation +
    +
    + ADMX_Printing/PhysicalLocationSupport +
    +
    + ADMX_Printing/PrintDriverIsolationExecutionPolicy +
    +
    + ADMX_Printing/PrintDriverIsolationOverrideCompat +
    +
    + ADMX_Printing/PrinterDirectorySearchScope +
    +
    + ADMX_Printing/PrinterServerThread +
    +
    + ADMX_Printing/ShowJobTitleInEventLogs +
    +
    + ADMX_Printing/V4DriverDisallowPrinterExtension +
    +
    + + +
    + + +**ADMX_Printing/AllowWebPrinting** + + + + + + + + + + + + + + + + + + + + + + + + + + + +
    Windows EditionSupported?
    Homecross mark
    Procross mark
    Businesscross mark
    Enterprisecheck mark
    Educationcross mark
    + + +
    + + +[Scope](./policy-configuration-service-provider.md#policy-scope): + +> [!div class = "checklist"] +> * Device + +
    + + + +Available in the latest Windows 10 Insider Preview Build. Internet printing lets you display printers on Web pages so that printers can be viewed, managed, and used across the Internet or an intranet. + +If you enable this policy setting, Internet printing is activated on this server. + +If you disable this policy setting or do not configure it, Internet printing is not activated. + +Internet printing is an extension of Internet Information Services (IIS). To use Internet printing, IIS must be installed, and printing support and this setting must be enabled. + +> [!NOTE] +> This setting affects the server side of Internet printing only. It does not prevent the print client on the computer from printing across the Internet. + +Also, see the "Custom support URL in the Printers folder's left pane" setting in this folder and the "Browse a common Web site to find printers" setting in User Configuration\Administrative Templates\Control Panel\Printers. + + +> [!TIP] +> This is an ADMX-backed policy and requires a special SyncML format to enable or disable. For details, see [Understanding ADMX-backed policies](./understanding-admx-backed-policies.md). +> +> You must specify the data type in the SyncML as <Format>chr</Format>. For an example SyncML, refer to [Enabling a policy](./understanding-admx-backed-policies.md#enabling-a-policy). +> +> The payload of the SyncML must be XML-encoded; for this XML encoding, there are a variety of online encoders that you can use. To avoid encoding the payload, you can use CDATA if your MDM supports it. For more information, see [CDATA Sections](http://www.w3.org/TR/REC-xml/#sec-cdata-sect). + + +ADMX Info: +- GP English name: *Activate Internet printing* +- GP name: *AllowWebPrinting* +- GP path: *Printers* +- GP ADMX file name: *Printing.admx* + + + +
    + + +**ADMX_Printing/ApplicationDriverIsolation** + + + + + + + + + + + + + + + + + + + + + + + + + + + +
    Windows EditionSupported?
    Homecross mark
    Procross mark
    Businesscross mark
    Enterprisecheck mark
    Educationcross mark
    + + +
    + + +[Scope](./policy-configuration-service-provider.md#policy-scope): + +> [!div class = "checklist"] +> * Device + +
    + + + +Available in the latest Windows 10 Insider Preview Build. Determines if print driver components are isolated from applications instead of normally loading them into applications. Isolating print drivers greatly reduces the risk of a print driver failure causing an application crash. + +Not all applications support driver isolation. By default, Microsoft Excel 2007, Excel 2010, Word 2007, Word 2010 and certain other applications are configured to support it. Other applications may also be capable of isolating print drivers, depending on whether they are configured for it. + +If you enable or do not configure this policy setting, then applications that are configured to support driver isolation will be isolated. + +If you disable this policy setting, then print drivers will be loaded within all associated application processes. + +> [!NOTE] +> - This policy setting applies only to applications opted into isolation. +> - This policy setting applies only to print drivers loaded by applications. Print drivers loaded by the print spooler are not affected. +> - This policy setting is only checked once during the lifetime of a process. After changing the policy, a running application must be relaunched before settings take effect. + + +> [!TIP] +> This is an ADMX-backed policy and requires a special SyncML format to enable or disable. For details, see [Understanding ADMX-backed policies](./understanding-admx-backed-policies.md). +> +> You must specify the data type in the SyncML as <Format>chr</Format>. For an example SyncML, refer to [Enabling a policy](./understanding-admx-backed-policies.md#enabling-a-policy). +> +> The payload of the SyncML must be XML-encoded; for this XML encoding, there are a variety of online encoders that you can use. To avoid encoding the payload, you can use CDATA if your MDM supports it. For more information, see [CDATA Sections](http://www.w3.org/TR/REC-xml/#sec-cdata-sect). + + +ADMX Info: +- GP English name: *Isolate print drivers from applications* +- GP name: *ApplicationDriverIsolation* +- GP path: *Printers* +- GP ADMX file name: *Printing.admx* + + + +
    + + +**ADMX_Printing/CustomizedSupportUrl** + + + + + + + + + + + + + + + + + + + + + + + + + + + +
    Windows EditionSupported?
    Homecross mark
    Procross mark
    Businesscross mark
    Enterprisecheck mark
    Educationcross mark
    + + +
    + + +[Scope](./policy-configuration-service-provider.md#policy-scope): + +> [!div class = "checklist"] +> * Device + +
    + + + +Available in the latest Windows 10 Insider Preview Build. By default, the Printers folder includes a link to the Microsoft Support Web page called "Get help with printing". It can also include a link to a Web page supplied by the vendor of the currently selected printer. + +If you enable this policy setting, you replace the "Get help with printing" default link with a link to a Web page customized for your enterprise. + +If you disable this setting or do not configure it, or if you do not enter an alternate Internet address, the default link will appear in the Printers folder. + +> [!NOTE] +> Web pages links only appear in the Printers folder when Web view is enabled. If Web view is disabled, the setting has no effect. (To enable Web view, open the Printers folder, and, on the Tools menu, click Folder Options, click the General tab, and then click "Enable Web content in folders.") + +Also, see the "Activate Internet printing" setting in this setting folder and the "Browse a common web site to find printers" setting in User Configuration\Administrative Templates\Control Panel\Printers. + +Web view is affected by the "Turn on Classic Shell" and "Do not allow Folder Options to be opened from the Options button on the View tab of the ribbon" settings in User Configuration\Administrative Templates\Windows Components\Windows Explorer, and by the "Enable Active Desktop" setting in User Configuration\Administrative Templates\Desktop\Active Desktop. + + +> [!TIP] +> This is an ADMX-backed policy and requires a special SyncML format to enable or disable. For details, see [Understanding ADMX-backed policies](./understanding-admx-backed-policies.md). +> +> You must specify the data type in the SyncML as <Format>chr</Format>. For an example SyncML, refer to [Enabling a policy](./understanding-admx-backed-policies.md#enabling-a-policy). +> +> The payload of the SyncML must be XML-encoded; for this XML encoding, there are a variety of online encoders that you can use. To avoid encoding the payload, you can use CDATA if your MDM supports it. For more information, see [CDATA Sections](http://www.w3.org/TR/REC-xml/#sec-cdata-sect). + + +ADMX Info: +- GP English name: *Custom support URL in the Printers folder's left pane* +- GP name: *CustomizedSupportUrl* +- GP path: *Printers* +- GP ADMX file name: *Printing.admx* + + + +
    + + +**ADMX_Printing/DoNotInstallCompatibleDriverFromWindowsUpdate** + + + + + + + + + + + + + + + + + + + + + + + + + + + +
    Windows EditionSupported?
    Homecross mark
    Procross mark
    Businesscross mark
    Enterprisecheck mark
    Educationcross mark
    + + +
    + + +[Scope](./policy-configuration-service-provider.md#policy-scope): + +> [!div class = "checklist"] +> * Device + +
    + + + +Available in the latest Windows 10 Insider Preview Build. This policy setting allows you to manage where client computers search for Point and Printer drivers. + +If you enable this policy setting, the client computer will continue to search for compatible Point and Print drivers from Windows Update after it fails to find the compatible driver from the local driver store and the server driver cache. + +If you disable this policy setting, the client computer will only search the local driver store and server driver cache for compatible Point and Print drivers. If it is unable to find a compatible driver, then the Point and Print connection will fail. + +This policy setting is not configured by default, and the behavior depends on the version of Windows that you are using. + +By default, Windows Ultimate, Professional and Home SKUs will continue to search for compatible Point and Print drivers from Windows Update, if needed. However, you must explicitly enable this policy setting for other versions of Windows (for example Windows Enterprise, and all versions of Windows Server 2008 R2 and later) to have the same behavior. + + +> [!TIP] +> This is an ADMX-backed policy and requires a special SyncML format to enable or disable. For details, see [Understanding ADMX-backed policies](./understanding-admx-backed-policies.md). +> +> You must specify the data type in the SyncML as <Format>chr</Format>. For an example SyncML, refer to [Enabling a policy](./understanding-admx-backed-policies.md#enabling-a-policy). +> +> The payload of the SyncML must be XML-encoded; for this XML encoding, there are a variety of online encoders that you can use. To avoid encoding the payload, you can use CDATA if your MDM supports it. For more information, see [CDATA Sections](http://www.w3.org/TR/REC-xml/#sec-cdata-sect). + + +ADMX Info: +- GP English name: *Extend Point and Print connection to search Windows Update* +- GP name: *DoNotInstallCompatibleDriverFromWindowsUpdate* +- GP path: *Printers* +- GP ADMX file name: *Printing.admx* + + + +
    + + +**ADMX_Printing/DomainPrinters** + + + + + + + + + + + + + + + + + + + + + + + + + + + +
    Windows EditionSupported?
    Homecross mark
    Procross mark
    Businesscross mark
    Enterprisecheck mark
    Educationcross mark
    + + +
    + + +[Scope](./policy-configuration-service-provider.md#policy-scope): + +> [!div class = "checklist"] +> * Device + +
    + + + +Available in the latest Windows 10 Insider Preview Build. If you enable this policy setting, it sets the maximum number of printers (of each type) that the Add Printer wizard will display on a computer on a managed network (when the computer is able to reach a domain controller, e.g. a domain-joined laptop on a corporate network.) + +If this policy setting is disabled, the network scan page will not be displayed. + +If this policy setting is not configured, the Add Printer wizard will display the default number of printers of each type: + +- Directory printers: 20 +- TCP/IP printers: 0 +- Web Services printers: 0 +- Bluetooth printers: 10 +- Shared printers: 0 + +In order to view available Web Services printers on your network, ensure that network discovery is turned on. To turn on network discovery, click "Start", click "Control Panel", and then click "Network and Internet". On the "Network and Internet" page, click "Network and Sharing Center". On the Network and Sharing Center page, click "Change advanced sharing settings". On the Advanced sharing settings page, click the arrow next to "Domain" arrow, click "turn on network discovery", and then click "Save changes". + +If you would like to not display printers of a certain type, enable this policy and set the number of printers to display to 0. + +In Windows 10 and later, only TCP/IP printers can be shown in the wizard. If you enable this policy setting, only TCP/IP printer limits are applicable. On Windows 10 only, if you disable or do not configure this policy setting, the default limit is applied. + +In Windows 8 and later, Bluetooth printers are not shown so its limit does not apply to those versions of Windows. + + +> [!TIP] +> This is an ADMX-backed policy and requires a special SyncML format to enable or disable. For details, see [Understanding ADMX-backed policies](./understanding-admx-backed-policies.md). +> +> You must specify the data type in the SyncML as <Format>chr</Format>. For an example SyncML, refer to [Enabling a policy](./understanding-admx-backed-policies.md#enabling-a-policy). +> +> The payload of the SyncML must be XML-encoded; for this XML encoding, there are a variety of online encoders that you can use. To avoid encoding the payload, you can use CDATA if your MDM supports it. For more information, see [CDATA Sections](http://www.w3.org/TR/REC-xml/#sec-cdata-sect). + + +ADMX Info: +- GP English name: *Add Printer wizard - Network scan page (Managed network)* +- GP name: *DomainPrinters* +- GP path: *Printers* +- GP ADMX file name: *Printing.admx* + + + +
    + + +**ADMX_Printing/DownlevelBrowse** + + + + + + + + + + + + + + + + + + + + + + + + + + + +
    Windows EditionSupported?
    Homecross mark
    Procross mark
    Businesscross mark
    Enterprisecheck mark
    Educationcross mark
    + + +
    + + +[Scope](./policy-configuration-service-provider.md#policy-scope): + +> [!div class = "checklist"] +> * User + +
    + + + +Available in the latest Windows 10 Insider Preview Build. Allows users to use the Add Printer Wizard to search the network for shared printers. + +If you enable this setting or do not configure it, when users choose to add a network printer by selecting the "A network printer, or a printer attached to another computer" radio button on Add Printer Wizard's page 2, and also check the "Connect to this printer (or to browse for a printer, select this option and click Next)" radio button on Add Printer Wizard's page 3, and do not specify a printer name in the adjacent "Name" edit box, then Add Printer Wizard displays the list of shared printers on the network and invites to choose a printer from the shown list. + +If you disable this setting, the network printer browse page is removed from within the Add Printer Wizard, and users cannot search the network but must type a printer name. + +> [!NOTE] +> This setting affects the Add Printer Wizard only. It does not prevent users from using other programs to search for shared printers or to connect to network printers. + + +> [!TIP] +> This is an ADMX-backed policy and requires a special SyncML format to enable or disable. For details, see [Understanding ADMX-backed policies](./understanding-admx-backed-policies.md). +> +> You must specify the data type in the SyncML as <Format>chr</Format>. For an example SyncML, refer to [Enabling a policy](./understanding-admx-backed-policies.md#enabling-a-policy). +> +> The payload of the SyncML must be XML-encoded; for this XML encoding, there are a variety of online encoders that you can use. To avoid encoding the payload, you can use CDATA if your MDM supports it. For more information, see [CDATA Sections](http://www.w3.org/TR/REC-xml/#sec-cdata-sect). + + +ADMX Info: +- GP English name: *Browse the network to find printers* +- GP name: *DownlevelBrowse* +- GP path: *Control Panel\Printers* +- GP ADMX file name: *Printing.admx* + + + +
    + + +**ADMX_Printing/EMFDespooling** + + + + + + + + + + + + + + + + + + + + + + + + + + + +
    Windows EditionSupported?
    Homecross mark
    Procross mark
    Businesscross mark
    Enterprisecheck mark
    Educationcross mark
    + + +
    + + +[Scope](./policy-configuration-service-provider.md#policy-scope): + +> [!div class = "checklist"] +> * Device + +
    + + + +Available in the latest Windows 10 Insider Preview Build. When printing through a print server, determines whether the print spooler on the client will process print jobs itself, or pass them on to the server to do the work. + +This policy setting only effects printing to a Windows print server. + +If you enable this policy setting on a client machine, the client spooler will not process print jobs before sending them to the print server. This decreases the workload on the client at the expense of increasing the load on the server. + +If you disable this policy setting on a client machine, the client itself will process print jobs into printer device commands. These commands will then be sent to the print server, and the server will simply pass the commands to the printer. This increases the workload of the client while decreasing the load on the server. + +If you do not enable this policy setting, the behavior is the same as disabling it. + +> [!NOTE] +> This policy does not determine whether offline printing will be available to the client. The client print spooler can always queue print jobs when not connected to the print server. Upon reconnecting to the server, the client will submit any pending print jobs. +> +> Some printer drivers require a custom print processor. In some cases the custom print processor may not be installed on the client machine, such as when the print server does not support transferring print processors during point-and-print. In the case of a print processor mismatch, the client spooler will always send jobs to the print server for rendering. Disabling the above policy setting does not override this behavior. +> +> In cases where the client print driver does not match the server print driver (mismatched connection), the client will always process the print job, regardless of the setting of this policy. + + +> [!TIP] +> This is an ADMX-backed policy and requires a special SyncML format to enable or disable. For details, see [Understanding ADMX-backed policies](./understanding-admx-backed-policies.md). +> +> You must specify the data type in the SyncML as <Format>chr</Format>. For an example SyncML, refer to [Enabling a policy](./understanding-admx-backed-policies.md#enabling-a-policy). +> +> The payload of the SyncML must be XML-encoded; for this XML encoding, there are a variety of online encoders that you can use. To avoid encoding the payload, you can use CDATA if your MDM supports it. For more information, see [CDATA Sections](http://www.w3.org/TR/REC-xml/#sec-cdata-sect). + + +ADMX Info: +- GP English name: *Always render print jobs on the server* +- GP name: *EMFDespooling* +- GP path: *Printers* +- GP ADMX file name: *Printing.admx* + + + +
    + + +**ADMX_Printing/ForceSoftwareRasterization** + + + + + + + + + + + + + + + + + + + + + + + + + + + +
    Windows EditionSupported?
    Homecross mark
    Procross mark
    Businesscross mark
    Enterprisecheck mark
    Educationcross mark
    + + +
    + + +[Scope](./policy-configuration-service-provider.md#policy-scope): + +> [!div class = "checklist"] +> * Device + +
    + + + +Available in the latest Windows 10 Insider Preview Build. Determines whether the XPS Rasterization Service or the XPS-to-GDI conversion (XGC) is forced to use a software rasterizer instead of a Graphics Processing Unit (GPU) to rasterize pages. + +This setting may improve the performance of the XPS Rasterization Service or the XPS-to-GDI conversion (XGC) on machines that have a relatively powerful CPU as compared to the machine’s GPU. + + +> [!TIP] +> This is an ADMX-backed policy and requires a special SyncML format to enable or disable. For details, see [Understanding ADMX-backed policies](./understanding-admx-backed-policies.md). +> +> You must specify the data type in the SyncML as <Format>chr</Format>. For an example SyncML, refer to [Enabling a policy](./understanding-admx-backed-policies.md#enabling-a-policy). +> +> The payload of the SyncML must be XML-encoded; for this XML encoding, there are a variety of online encoders that you can use. To avoid encoding the payload, you can use CDATA if your MDM supports it. For more information, see [CDATA Sections](http://www.w3.org/TR/REC-xml/#sec-cdata-sect). + + +ADMX Info: +- GP English name: *Always rasterize content to be printed using a software rasterizer* +- GP name: *ForceSoftwareRasterization* +- GP path: *Printers* +- GP ADMX file name: *Printing.admx* + + + +
    + + +**ADMX_Printing/IntranetPrintersUrl** + + + + + + + + + + + + + + + + + + + + + + + + + + + +
    Windows EditionSupported?
    Homecross mark
    Procross mark
    Businesscross mark
    Enterprisecheck mark
    Educationcross mark
    + + +
    + + +[Scope](./policy-configuration-service-provider.md#policy-scope): + +> [!div class = "checklist"] +> * User + +
    + + + +Available in the latest Windows 10 Insider Preview Build. Adds a link to an Internet or intranet Web page to the Add Printer Wizard. + +You can use this setting to direct users to a Web page from which they can install printers. + +If you enable this setting and type an Internet or intranet address in the text box, the system adds a Browse button to the "Specify a Printer" page in the Add Printer Wizard. The Browse button appears beside the "Connect to a printer on the Internet or on a home or office network" option. When users click Browse, the system opens an Internet browser and navigates to the specified URL address to display the available printers. + +This setting makes it easy for users to find the printers you want them to add. + +Also, see the "Custom support URL in the Printers folder's left pane" and "Activate Internet printing" settings in "Computer Configuration\Administrative Templates\Printers." + + +> [!TIP] +> This is an ADMX-backed policy and requires a special SyncML format to enable or disable. For details, see [Understanding ADMX-backed policies](./understanding-admx-backed-policies.md). +> +> You must specify the data type in the SyncML as <Format>chr</Format>. For an example SyncML, refer to [Enabling a policy](./understanding-admx-backed-policies.md#enabling-a-policy). +> +> The payload of the SyncML must be XML-encoded; for this XML encoding, there are a variety of online encoders that you can use. To avoid encoding the payload, you can use CDATA if your MDM supports it. For more information, see [CDATA Sections](http://www.w3.org/TR/REC-xml/#sec-cdata-sect). + + +ADMX Info: +- GP English name: *Browse a common web site to find printers* +- GP name: *IntranetPrintersUrl* +- GP path: *Control Panel\Printers* +- GP ADMX file name: *Printing.admx* + + + +
    + + +**ADMX_Printing/KMPrintersAreBlocked** + + + + + + + + + + + + + + + + + + + + + + + + + + + +
    Windows EditionSupported?
    Homecross mark
    Procross mark
    Businesscross mark
    Enterprisecheck mark
    Educationcross mark
    + + +
    + + +[Scope](./policy-configuration-service-provider.md#policy-scope): + +> [!div class = "checklist"] +> * Device + +
    + + + +Available in the latest Windows 10 Insider Preview Build. Determines whether printers using kernel-mode drivers may be installed on the local computer. Kernel-mode drivers have access to system-wide memory, and therefore poorly-written kernel-mode drivers can cause stop errors. + +If you disable this setting, or do not configure it, then printers using a kernel-mode drivers may be installed on the local computer running Windows XP Home Edition and Windows XP Professional. + +If you do not configure this setting on Windows Server 2003 family products, the installation of kernel-mode printer drivers will be blocked. + +If you enable this setting, installation of a printer using a kernel-mode driver will not be allowed. + +> [!NOTE] +> By applying this policy, existing kernel-mode drivers will be disabled upon installation of service packs or reinstallation of the Windows XP operating system. This policy does not apply to 64-bit kernel-mode printer drivers as they cannot be installed and associated with a print queue. + + +> [!TIP] +> This is an ADMX-backed policy and requires a special SyncML format to enable or disable. For details, see [Understanding ADMX-backed policies](./understanding-admx-backed-policies.md). +> +> You must specify the data type in the SyncML as <Format>chr</Format>. For an example SyncML, refer to [Enabling a policy](./understanding-admx-backed-policies.md#enabling-a-policy). +> +> The payload of the SyncML must be XML-encoded; for this XML encoding, there are a variety of online encoders that you can use. To avoid encoding the payload, you can use CDATA if your MDM supports it. For more information, see [CDATA Sections](http://www.w3.org/TR/REC-xml/#sec-cdata-sect). + + +ADMX Info: +- GP English name: *Disallow installation of printers using kernel-mode drivers* +- GP name: *KMPrintersAreBlocked* +- GP path: *Printers* +- GP ADMX file name: *Printing.admx* + + + +
    + + +**ADMX_Printing/LegacyDefaultPrinterMode** + + + + + + + + + + + + + + + + + + + + + + + + + + + +
    Windows EditionSupported?
    Homecross mark
    Procross mark
    Businesscross mark
    Enterprisecheck mark
    Educationcross mark
    + + +
    + + +[Scope](./policy-configuration-service-provider.md#policy-scope): + +> [!div class = "checklist"] +> * User + +
    + + + +Available in the latest Windows 10 Insider Preview Build. This preference allows you to change default printer management. + +If you enable this setting, Windows will not manage the default printer. + +If you disable this setting, Windows will manage the default printer. + +If you do not configure this setting, default printer management will not change. + + +> [!TIP] +> This is an ADMX-backed policy and requires a special SyncML format to enable or disable. For details, see [Understanding ADMX-backed policies](./understanding-admx-backed-policies.md). +> +> You must specify the data type in the SyncML as <Format>chr</Format>. For an example SyncML, refer to [Enabling a policy](./understanding-admx-backed-policies.md#enabling-a-policy). +> +> The payload of the SyncML must be XML-encoded; for this XML encoding, there are a variety of online encoders that you can use. To avoid encoding the payload, you can use CDATA if your MDM supports it. For more information, see [CDATA Sections](http://www.w3.org/TR/REC-xml/#sec-cdata-sect). + + +ADMX Info: +- GP English name: *Turn off Windows default printer management* +- GP name: *LegacyDefaultPrinterMode* +- GP path: *Control Panel\Printers* +- GP ADMX file name: *Printing.admx* + + + +
    + + +**ADMX_Printing/MXDWUseLegacyOutputFormatMSXPS** + + + + + + + + + + + + + + + + + + + + + + + + + + + +
    Windows EditionSupported?
    Homecross mark
    Procross mark
    Businesscross mark
    Enterprisecheck mark
    Educationcross mark
    + + +
    + + +[Scope](./policy-configuration-service-provider.md#policy-scope): + +> [!div class = "checklist"] +> * Device + +
    + + + +Available in the latest Windows 10 Insider Preview Build. Microsoft XPS Document Writer (MXDW) generates OpenXPS (*.oxps) files by default in Windows 10, Windows 10 and Windows Server 2019. + +If you enable this group policy setting, the default MXDW output format is the legacy Microsoft XPS (*.xps). + +If you disable or do not configure this policy setting, the default MXDW output format is OpenXPS (*.oxps). + + +> [!TIP] +> This is an ADMX-backed policy and requires a special SyncML format to enable or disable. For details, see [Understanding ADMX-backed policies](./understanding-admx-backed-policies.md). +> +> You must specify the data type in the SyncML as <Format>chr</Format>. For an example SyncML, refer to [Enabling a policy](./understanding-admx-backed-policies.md#enabling-a-policy). +> +> The payload of the SyncML must be XML-encoded; for this XML encoding, there are a variety of online encoders that you can use. To avoid encoding the payload, you can use CDATA if your MDM supports it. For more information, see [CDATA Sections](http://www.w3.org/TR/REC-xml/#sec-cdata-sect). + + +ADMX Info: +- GP English name: *Change Microsoft XPS Document Writer (MXDW) default output format to the legacy Microsoft XPS format (*.xps)* +- GP name: *MXDWUseLegacyOutputFormatMSXPS* +- GP path: *Printers* +- GP ADMX file name: *Printing.admx* + + + +
    + + +**ADMX_Printing/NoDeletePrinter** + + + + + + + + + + + + + + + + + + + + + + + + + + + +
    Windows EditionSupported?
    Homecross mark
    Procross mark
    Businesscross mark
    Enterprisecheck mark
    Educationcross mark
    + + +
    + + +[Scope](./policy-configuration-service-provider.md#policy-scope): + +> [!div class = "checklist"] +> * User + +
    + + + +Available in the latest Windows 10 Insider Preview Build. If this policy setting is enabled, it prevents users from deleting local and network printers. + +If a user tries to delete a printer, such as by using the Delete option in Printers in Control Panel, a message appears explaining that a setting prevents the action. + +This setting does not prevent users from running other programs to delete a printer. + +If this policy is disabled, or not configured, users can delete printers using the methods described above. + + +> [!TIP] +> This is an ADMX-backed policy and requires a special SyncML format to enable or disable. For details, see [Understanding ADMX-backed policies](./understanding-admx-backed-policies.md). +> +> You must specify the data type in the SyncML as <Format>chr</Format>. For an example SyncML, refer to [Enabling a policy](./understanding-admx-backed-policies.md#enabling-a-policy). +> +> The payload of the SyncML must be XML-encoded; for this XML encoding, there are a variety of online encoders that you can use. To avoid encoding the payload, you can use CDATA if your MDM supports it. For more information, see [CDATA Sections](http://www.w3.org/TR/REC-xml/#sec-cdata-sect). + + +ADMX Info: +- GP English name: *Prevent deletion of printers* +- GP name: *NoDeletePrinter* +- GP path: *Control Panel\Printers* +- GP ADMX file name: *Printing.admx* + + + +
    + + +**ADMX_Printing/NonDomainPrinters** + + + + + + + + + + + + + + + + + + + + + + + + + + + +
    Windows EditionSupported?
    Homecross mark
    Procross mark
    Businesscross mark
    Enterprisecheck mark
    Educationcross mark
    + + +
    + + +[Scope](./policy-configuration-service-provider.md#policy-scope): + +> [!div class = "checklist"] +> * Device + +
    + + + +Available in the latest Windows 10 Insider Preview Build. This policy sets the maximum number of printers (of each type) that the Add Printer wizard will display on a computer on an unmanaged network (when the computer is not able to reach a domain controller, e.g. a domain-joined laptop on a home network.) + +If this setting is disabled, the network scan page will not be displayed. + +If this setting is not configured, the Add Printer wizard will display the default number of printers of each type: + +- TCP/IP printers: 50 +- Web Services printers: 50 +- Bluetooth printers: 10 +- Shared printers: 50 + +If you would like to not display printers of a certain type, enable this policy and set the number of printers to display to 0. + +In Windows 10 and later, only TCP/IP printers can be shown in the wizard. If you enable this policy setting, only TCP/IP printer limits are applicable. On Windows 10 only, if you disable or do not configure this policy setting, the default limit is applied. + +In Windows 8 and later, Bluetooth printers are not shown so its limit does not apply to those versions of Windows. + + +> [!TIP] +> This is an ADMX-backed policy and requires a special SyncML format to enable or disable. For details, see [Understanding ADMX-backed policies](./understanding-admx-backed-policies.md). +> +> You must specify the data type in the SyncML as <Format>chr</Format>. For an example SyncML, refer to [Enabling a policy](./understanding-admx-backed-policies.md#enabling-a-policy). +> +> The payload of the SyncML must be XML-encoded; for this XML encoding, there are a variety of online encoders that you can use. To avoid encoding the payload, you can use CDATA if your MDM supports it. For more information, see [CDATA Sections](http://www.w3.org/TR/REC-xml/#sec-cdata-sect). + + +ADMX Info: +- GP English name: *Add Printer wizard - Network scan page (Unmanaged network)* +- GP name: *NonDomainPrinters* +- GP path: *Printers* +- GP ADMX file name: *Printing.admx* + + + +
    + + +**ADMX_Printing/PackagePointAndPrintOnly** + + + + + + + + + + + + + + + + + + + + + + + + + + + +
    Windows EditionSupported?
    Homecross mark
    Procross mark
    Businesscross mark
    Enterprisecheck mark
    Educationcross mark
    + + +
    + + +[Scope](./policy-configuration-service-provider.md#policy-scope): + +> [!div class = "checklist"] +> * User + +
    + + + +Available in the latest Windows 10 Insider Preview Build. This policy restricts clients computers to use package point and print only. + +If this setting is enabled, users will only be able to point and print to printers that use package-aware drivers. When using package point and print, client computers will check the driver signature of all drivers that are downloaded from print servers. + +If this setting is disabled, or not configured, users will not be restricted to package-aware point and print only. + + +> [!TIP] +> This is an ADMX-backed policy and requires a special SyncML format to enable or disable. For details, see [Understanding ADMX-backed policies](./understanding-admx-backed-policies.md). +> +> You must specify the data type in the SyncML as <Format>chr</Format>. For an example SyncML, refer to [Enabling a policy](./understanding-admx-backed-policies.md#enabling-a-policy). +> +> The payload of the SyncML must be XML-encoded; for this XML encoding, there are a variety of online encoders that you can use. To avoid encoding the payload, you can use CDATA if your MDM supports it. For more information, see [CDATA Sections](http://www.w3.org/TR/REC-xml/#sec-cdata-sect). + + +ADMX Info: +- GP English name: *Only use Package Point and print* +- GP name: *PackagePointAndPrintOnly* +- GP path: *Control Panel\Printers* +- GP ADMX file name: *Printing.admx* + + + +
    + + +**ADMX_Printing/PackagePointAndPrintOnly_Win7** + + + + + + + + + + + + + + + + + + + + + + + + + + + +
    Windows EditionSupported?
    Homecross mark
    Procross mark
    Businesscross mark
    Enterprisecheck mark
    Educationcross mark
    + + +
    + + +[Scope](./policy-configuration-service-provider.md#policy-scope): + +> [!div class = "checklist"] +> * Device + +
    + + + +Available in the latest Windows 10 Insider Preview Build. This policy restricts clients computers to use package point and print only. + +If this setting is enabled, users will only be able to point and print to printers that use package-aware drivers. When using package point and print, client computers will check the driver signature of all drivers that are downloaded from print servers. + +If this setting is disabled, or not configured, users will not be restricted to package-aware point and print only. + + +> [!TIP] +> This is an ADMX-backed policy and requires a special SyncML format to enable or disable. For details, see [Understanding ADMX-backed policies](./understanding-admx-backed-policies.md). +> +> You must specify the data type in the SyncML as <Format>chr</Format>. For an example SyncML, refer to [Enabling a policy](./understanding-admx-backed-policies.md#enabling-a-policy). +> +> The payload of the SyncML must be XML-encoded; for this XML encoding, there are a variety of online encoders that you can use. To avoid encoding the payload, you can use CDATA if your MDM supports it. For more information, see [CDATA Sections](http://www.w3.org/TR/REC-xml/#sec-cdata-sect). + + +ADMX Info: +- GP English name: *Only use Package Point and print* +- GP name: *PackagePointAndPrintOnly_Win7* +- GP path: *Printers* +- GP ADMX file name: *Printing.admx* + + + +
    + + +**ADMX_Printing/PackagePointAndPrintServerList** + + + + + + + + + + + + + + + + + + + + + + + + + + + +
    Windows EditionSupported?
    Homecross mark
    Procross mark
    Businesscross mark
    Enterprisecheck mark
    Educationcross mark
    + + +
    + + +[Scope](./policy-configuration-service-provider.md#policy-scope): + +> [!div class = "checklist"] +> * User + +
    + + + +Available in the latest Windows 10 Insider Preview Build. Restricts package point and print to approved servers. + +This policy setting restricts package point and print connections to approved servers. This setting only applies to Package Point and Print connections, and is completely independent from the "Point and Print Restrictions" policy that governs the behavior of non-package point and print connections. + +Windows Vista and later clients will attempt to make a non-package point and print connection anytime a package point and print connection fails, including attempts that are blocked by this policy. Administrators may need to set both policies to block all print connections to a specific print server. + +If this setting is enabled, users will only be able to package point and print to print servers approved by the network administrator. When using package point and print, client computers will check the driver signature of all drivers that are downloaded from print servers. + +If this setting is disabled, or not configured, package point and print will not be restricted to specific print servers. + + +> [!TIP] +> This is an ADMX-backed policy and requires a special SyncML format to enable or disable. For details, see [Understanding ADMX-backed policies](./understanding-admx-backed-policies.md). +> +> You must specify the data type in the SyncML as <Format>chr</Format>. For an example SyncML, refer to [Enabling a policy](./understanding-admx-backed-policies.md#enabling-a-policy). +> +> The payload of the SyncML must be XML-encoded; for this XML encoding, there are a variety of online encoders that you can use. To avoid encoding the payload, you can use CDATA if your MDM supports it. For more information, see [CDATA Sections](http://www.w3.org/TR/REC-xml/#sec-cdata-sect). + + +ADMX Info: +- GP English name: *Package Point and print - Approved servers* +- GP name: *PackagePointAndPrintServerList* +- GP path: *Control Panel\Printers* +- GP ADMX file name: *Printing.admx* + + + +
    + + +**ADMX_Printing/PackagePointAndPrintServerList_Win7** + + + + + + + + + + + + + + + + + + + + + + + + + + + +
    Windows EditionSupported?
    Homecross mark
    Procross mark
    Businesscross mark
    Enterprisecheck mark
    Educationcross mark
    + + +
    + + +[Scope](./policy-configuration-service-provider.md#policy-scope): + +> [!div class = "checklist"] +> * Device + +
    + + + +Available in the latest Windows 10 Insider Preview Build. Restricts package point and print to approved servers. + +This policy setting restricts package point and print connections to approved servers. This setting only applies to Package Point and Print connections, and is completely independent from the "Point and Print Restrictions" policy that governs the behavior of non-package point and print connections. + +Windows Vista and later clients will attempt to make a non-package point and print connection anytime a package point and print connection fails, including attempts that are blocked by this policy. Administrators may need to set both policies to block all print connections to a specific print server. + +If this setting is enabled, users will only be able to package point and print to print servers approved by the network administrator. When using package point and print, client computers will check the driver signature of all drivers that are downloaded from print servers. + +If this setting is disabled, or not configured, package point and print will not be restricted to specific print servers. + + +> [!TIP] +> This is an ADMX-backed policy and requires a special SyncML format to enable or disable. For details, see [Understanding ADMX-backed policies](./understanding-admx-backed-policies.md). +> +> You must specify the data type in the SyncML as <Format>chr</Format>. For an example SyncML, refer to [Enabling a policy](./understanding-admx-backed-policies.md#enabling-a-policy). +> +> The payload of the SyncML must be XML-encoded; for this XML encoding, there are a variety of online encoders that you can use. To avoid encoding the payload, you can use CDATA if your MDM supports it. For more information, see [CDATA Sections](http://www.w3.org/TR/REC-xml/#sec-cdata-sect). + + +ADMX Info: +- GP English name: *Package Point and print - Approved servers* +- GP name: *PackagePointAndPrintServerList_Win7* +- GP path: *Printers* +- GP ADMX file name: *Printing.admx* + + + +
    + + +**ADMX_Printing/PhysicalLocation** + + + + + + + + + + + + + + + + + + + + + + + + + + + +
    Windows EditionSupported?
    Homecross mark
    Procross mark
    Businesscross mark
    Enterprisecheck mark
    Educationcross mark
    + + +
    + + +[Scope](./policy-configuration-service-provider.md#policy-scope): + +> [!div class = "checklist"] +> * Device + +
    + + + +Available in the latest Windows 10 Insider Preview Build. If this policy setting is enabled, it specifies the default location criteria used when searching for printers. + +This setting is a component of the Location Tracking feature of Windows printers. To use this setting, enable Location Tracking by enabling the "Pre-populate printer search location text" setting. + +When Location Tracking is enabled, the system uses the specified location as a criterion when users search for printers. The value you type here overrides the actual location of the computer conducting the search. + +Type the location of the user's computer. When users search for printers, the system uses the specified location (and other search criteria) to find a printer nearby. You can also use this setting to direct users to a particular printer or group of printers that you want them to use. + +If you disable this setting or do not configure it, and the user does not type a location as a search criterion, the system searches for a nearby printer based on the IP address and subnet mask of the user's computer. + + +> [!TIP] +> This is an ADMX-backed policy and requires a special SyncML format to enable or disable. For details, see [Understanding ADMX-backed policies](./understanding-admx-backed-policies.md). +> +> You must specify the data type in the SyncML as <Format>chr</Format>. For an example SyncML, refer to [Enabling a policy](./understanding-admx-backed-policies.md#enabling-a-policy). +> +> The payload of the SyncML must be XML-encoded; for this XML encoding, there are a variety of online encoders that you can use. To avoid encoding the payload, you can use CDATA if your MDM supports it. For more information, see [CDATA Sections](http://www.w3.org/TR/REC-xml/#sec-cdata-sect). + + +ADMX Info: +- GP English name: *Computer location* +- GP name: *PhysicalLocation* +- GP path: *Printers* +- GP ADMX file name: *Printing.admx* + + + +
    + + +**ADMX_Printing/PhysicalLocationSupport** + + + + + + + + + + + + + + + + + + + + + + + + + + + +
    Windows EditionSupported?
    Homecross mark
    Procross mark
    Businesscross mark
    Enterprisecheck mark
    Educationcross mark
    + + +
    + + +[Scope](./policy-configuration-service-provider.md#policy-scope): + +> [!div class = "checklist"] +> * Device + +
    + + + +Available in the latest Windows 10 Insider Preview Build. Enables the physical Location Tracking setting for Windows printers. + +Use Location Tracking to design a location scheme for your enterprise and assign computers and printers to locations in the scheme. Location Tracking overrides the standard method used to locate and associate computers and printers. The standard method uses a printer's IP address and subnet mask to estimate its physical location and proximity to computers. + +If you enable this setting, users can browse for printers by location without knowing the printer's location or location naming scheme. Enabling Location Tracking adds a Browse button in the Add Printer wizard's Printer Name and Sharing Location screen and to the General tab in the Printer Properties dialog box. If you enable the Group Policy Computer location setting, the default location you entered appears in the Location field by default. + +If you disable this setting or do not configure it, Location Tracking is disabled. Printer proximity is estimated using the standard method (that is, based on IP address and subnet mask). + + +> [!TIP] +> This is an ADMX-backed policy and requires a special SyncML format to enable or disable. For details, see [Understanding ADMX-backed policies](./understanding-admx-backed-policies.md). +> +> You must specify the data type in the SyncML as <Format>chr</Format>. For an example SyncML, refer to [Enabling a policy](./understanding-admx-backed-policies.md#enabling-a-policy). +> +> The payload of the SyncML must be XML-encoded; for this XML encoding, there are a variety of online encoders that you can use. To avoid encoding the payload, you can use CDATA if your MDM supports it. For more information, see [CDATA Sections](http://www.w3.org/TR/REC-xml/#sec-cdata-sect). + + +ADMX Info: +- GP English name: *Pre-populate printer search location text* +- GP name: *PhysicalLocationSupport* +- GP path: *Printers* +- GP ADMX file name: *Printing.admx* + + + +
    + + +**ADMX_Printing/PrintDriverIsolationExecutionPolicy** + + + + + + + + + + + + + + + + + + + + + + + + + + + +
    Windows EditionSupported?
    Homecross mark
    Procross mark
    Businesscross mark
    Enterprisecheck mark
    Educationcross mark
    + + +
    + + +[Scope](./policy-configuration-service-provider.md#policy-scope): + +> [!div class = "checklist"] +> * Device + +
    + + + +Available in the latest Windows 10 Insider Preview Build. This policy setting determines whether the print spooler will execute print drivers in an isolated or separate process. When print drivers are loaded in an isolated process (or isolated processes), a print driver failure will not cause the print spooler service to fail. + +If you enable or do not configure this policy setting, the print spooler will execute print drivers in an isolated process by default. + +If you disable this policy setting, the print spooler will execute print drivers in the print spooler process. + +> [!NOTE] +> - Other system or driver policy settings may alter the process in which a print driver is executed. +> - This policy setting applies only to print drivers loaded by the print spooler. Print drivers loaded by applications are not affected. +> - This policy setting takes effect without restarting the print spooler service. + + +> [!TIP] +> This is an ADMX-backed policy and requires a special SyncML format to enable or disable. For details, see [Understanding ADMX-backed policies](./understanding-admx-backed-policies.md). +> +> You must specify the data type in the SyncML as <Format>chr</Format>. For an example SyncML, refer to [Enabling a policy](./understanding-admx-backed-policies.md#enabling-a-policy). +> +> The payload of the SyncML must be XML-encoded; for this XML encoding, there are a variety of online encoders that you can use. To avoid encoding the payload, you can use CDATA if your MDM supports it. For more information, see [CDATA Sections](http://www.w3.org/TR/REC-xml/#sec-cdata-sect). + + +ADMX Info: +- GP English name: *Execute print drivers in isolated processes* +- GP name: *PrintDriverIsolationExecutionPolicy* +- GP path: *Printers* +- GP ADMX file name: *Printing.admx* + + + +
    + + +**ADMX_Printing/PrintDriverIsolationOverrideCompat** + + + + + + + + + + + + + + + + + + + + + + + + + + + +
    Windows EditionSupported?
    Homecross mark
    Procross mark
    Businesscross mark
    Enterprisecheck mark
    Educationcross mark
    + + +
    + + +[Scope](./policy-configuration-service-provider.md#policy-scope): + +> [!div class = "checklist"] +> * Device + +
    + + + +Available in the latest Windows 10 Insider Preview Build. This policy setting determines whether the print spooler will override the Driver Isolation compatibility reported by the print driver. This enables executing print drivers in an isolated process, even if the driver does not report compatibility. + +If you enable this policy setting, the print spooler isolates all print drivers that do not explicitly opt out of Driver Isolation. + +If you disable or do not configure this policy setting, the print spooler uses the Driver Isolation compatibility flag value reported by the print driver. + +> [!NOTE] +> - Other system or driver policy settings may alter the process in which a print driver is executed. +> - This policy setting applies only to print drivers loaded by the print spooler. Print drivers loaded by applications are not affected. +> - This policy setting takes effect without restarting the print spooler service. + + +> [!TIP] +> This is an ADMX-backed policy and requires a special SyncML format to enable or disable. For details, see [Understanding ADMX-backed policies](./understanding-admx-backed-policies.md). +> +> You must specify the data type in the SyncML as <Format>chr</Format>. For an example SyncML, refer to [Enabling a policy](./understanding-admx-backed-policies.md#enabling-a-policy). +> +> The payload of the SyncML must be XML-encoded; for this XML encoding, there are a variety of online encoders that you can use. To avoid encoding the payload, you can use CDATA if your MDM supports it. For more information, see [CDATA Sections](http://www.w3.org/TR/REC-xml/#sec-cdata-sect). + + +ADMX Info: +- GP English name: *Override print driver execution compatibility setting reported by print driver* +- GP name: *PrintDriverIsolationOverrideCompat* +- GP path: *Printers* +- GP ADMX file name: *Printing.admx* + + + +
    + + +**ADMX_Printing/PrinterDirectorySearchScope** + + + + + + + + + + + + + + + + + + + + + + + + + + + +
    Windows EditionSupported?
    Homecross mark
    Procross mark
    Businesscross mark
    Enterprisecheck mark
    Educationcross mark
    + + +
    + + +[Scope](./policy-configuration-service-provider.md#policy-scope): + +> [!div class = "checklist"] +> * User + +
    + + + +Available in the latest Windows 10 Insider Preview Build. Specifies the Active Directory location where searches for printers begin. + +The Add Printer Wizard gives users the option of searching Active Directory for a shared printer. + +If you enable this policy setting, these searches begin at the location you specify in the "Default Active Directory path" box. Otherwise, searches begin at the root of Active Directory. + +This setting only provides a starting point for Active Directory searches for printers. It does not restrict user searches through Active Directory. + + +> [!TIP] +> This is an ADMX-backed policy and requires a special SyncML format to enable or disable. For details, see [Understanding ADMX-backed policies](./understanding-admx-backed-policies.md). +> +> You must specify the data type in the SyncML as <Format>chr</Format>. For an example SyncML, refer to [Enabling a policy](./understanding-admx-backed-policies.md#enabling-a-policy). +> +> The payload of the SyncML must be XML-encoded; for this XML encoding, there are a variety of online encoders that you can use. To avoid encoding the payload, you can use CDATA if your MDM supports it. For more information, see [CDATA Sections](http://www.w3.org/TR/REC-xml/#sec-cdata-sect). + + +ADMX Info: +- GP English name: *Default Active Directory path when searching for printers* +- GP name: *PrinterDirectorySearchScope* +- GP path: *Control Panel\Printers* +- GP ADMX file name: *Printing.admx* + + + +
    + + +**ADMX_Printing/PrinterServerThread** + + + + + + + + + + + + + + + + + + + + + + + + + + + +
    Windows EditionSupported?
    Homecross mark
    Procross mark
    Businesscross mark
    Enterprisecheck mark
    Educationcross mark
    + + +
    + + +[Scope](./policy-configuration-service-provider.md#policy-scope): + +> [!div class = "checklist"] +> * Device + +
    + + + +Available in the latest Windows 10 Insider Preview Build. Announces the presence of shared printers to print browse master servers for the domain. + +On domains with Active Directory, shared printer resources are available in Active Directory and are not announced. + +If you enable this setting, the print spooler announces shared printers to the print browse master servers. + +If you disable this setting, shared printers are not announced to print browse master servers, even if Active Directory is not available. + +If you do not configure this setting, shared printers are announced to browse master servers only when Active Directory is not available. + +> [!NOTE] +> A client license is used each time a client computer announces a printer to a print browse master on the domain. + + +> [!TIP] +> This is an ADMX-backed policy and requires a special SyncML format to enable or disable. For details, see [Understanding ADMX-backed policies](./understanding-admx-backed-policies.md). +> +> You must specify the data type in the SyncML as <Format>chr</Format>. For an example SyncML, refer to [Enabling a policy](./understanding-admx-backed-policies.md#enabling-a-policy). +> +> The payload of the SyncML must be XML-encoded; for this XML encoding, there are a variety of online encoders that you can use. To avoid encoding the payload, you can use CDATA if your MDM supports it. For more information, see [CDATA Sections](http://www.w3.org/TR/REC-xml/#sec-cdata-sect). + + +ADMX Info: +- GP English name: *Printer browsing* +- GP name: *PrinterServerThread* +- GP path: *Printers* +- GP ADMX file name: *Printing.admx* + + + +
    + + +**ADMX_Printing/ShowJobTitleInEventLogs** + + + + + + + + + + + + + + + + + + + + + + + + + + + +
    Windows EditionSupported?
    Homecross mark
    Procross mark
    Businesscross mark
    Enterprisecheck mark
    Educationcross mark
    + + +
    + + +[Scope](./policy-configuration-service-provider.md#policy-scope): + +> [!div class = "checklist"] +> * Device + +
    + + + +Available in the latest Windows 10 Insider Preview Build. This policy controls whether the print job name will be included in print event logs. + +If you disable or do not configure this policy setting, the print job name will not be included. + +If you enable this policy setting, the print job name will be included in new log entries. + +> [!NOTE] +> This setting does not apply to Branch Office Direct Printing jobs. + + +> [!TIP] +> This is an ADMX-backed policy and requires a special SyncML format to enable or disable. For details, see [Understanding ADMX-backed policies](./understanding-admx-backed-policies.md). +> +> You must specify the data type in the SyncML as <Format>chr</Format>. For an example SyncML, refer to [Enabling a policy](./understanding-admx-backed-policies.md#enabling-a-policy). +> +> The payload of the SyncML must be XML-encoded; for this XML encoding, there are a variety of online encoders that you can use. To avoid encoding the payload, you can use CDATA if your MDM supports it. For more information, see [CDATA Sections](http://www.w3.org/TR/REC-xml/#sec-cdata-sect). + + +ADMX Info: +- GP English name: *Allow job name in event logs* +- GP name: *ShowJobTitleInEventLogs* +- GP path: *Printers* +- GP ADMX file name: *Printing.admx* + + + +
    + + +**ADMX_Printing/V4DriverDisallowPrinterExtension** + + + + + + + + + + + + + + + + + + + + + + + + + + + +
    Windows EditionSupported?
    Homecross mark
    Procross mark
    Businesscross mark
    Enterprisecheck mark
    Educationcross mark
    + + +
    + + +[Scope](./policy-configuration-service-provider.md#policy-scope): + +> [!div class = "checklist"] +> * Device + +
    + + + +Available in the latest Windows 10 Insider Preview Build. This policy determines if v4 printer drivers are allowed to run printer extensions. + +V4 printer drivers may include an optional, customized user interface known as a printer extension. These extensions may provide access to more device features, but this may not be appropriate for all enterprises. + +If you enable this policy setting, then all printer extensions will not be allowed to run. + +If you disable this policy setting or do not configure it, then all printer extensions that have been installed will be allowed to run. + + +> [!TIP] +> This is an ADMX-backed policy and requires a special SyncML format to enable or disable. For details, see [Understanding ADMX-backed policies](./understanding-admx-backed-policies.md). +> +> You must specify the data type in the SyncML as <Format>chr</Format>. For an example SyncML, refer to [Enabling a policy](./understanding-admx-backed-policies.md#enabling-a-policy). +> +> The payload of the SyncML must be XML-encoded; for this XML encoding, there are a variety of online encoders that you can use. To avoid encoding the payload, you can use CDATA if your MDM supports it. For more information, see [CDATA Sections](http://www.w3.org/TR/REC-xml/#sec-cdata-sect). + + +ADMX Info: +- GP English name: *Do not allow v4 printer drivers to show printer extensions* +- GP name: *V4DriverDisallowPrinterExtension* +- GP path: *Printers* +- GP ADMX file name: *Printing.admx* + + + +
    + +Footnotes: + +- 1 - Available in Windows 10, version 1607. +- 2 - Available in Windows 10, version 1703. +- 3 - Available in Windows 10, version 1709. +- 4 - Available in Windows 10, version 1803. +- 5 - Available in Windows 10, version 1809. +- 6 - Available in Windows 10, version 1903. +- 7 - Available in Windows 10, version 1909. +- 8 - Available in Windows 10, version 2004. + + \ No newline at end of file From f23271508637a8da03b89b90f47391a2b144ac0f Mon Sep 17 00:00:00 2001 From: ManikaDhiman Date: Tue, 15 Dec 2020 16:01:44 -0800 Subject: [PATCH 099/486] Added Printing2 policies --- windows/client-management/mdm/TOC.md | 1 + .../mdm/policies-in-policy-csp-admx-backed.md | 9 + .../policy-configuration-service-provider.md | 32 + .../mdm/policy-csp-admx-printing2.md | 740 ++++++++++++++++++ 4 files changed, 782 insertions(+) create mode 100644 windows/client-management/mdm/policy-csp-admx-printing2.md diff --git a/windows/client-management/mdm/TOC.md b/windows/client-management/mdm/TOC.md index 5082f05ed7..a37aa5159e 100644 --- a/windows/client-management/mdm/TOC.md +++ b/windows/client-management/mdm/TOC.md @@ -229,6 +229,7 @@ #### [ADMX_PerformanceDiagnostics](policy-csp-admx-performancediagnostics.md) #### [ADMX_PowerShellExecutionPolicy](policy-csp-admx-powershellexecutionpolicy.md) #### [ADMX_Printing](policy-csp-admx-printing.md) +#### [ADMX_Printing2](policy-csp-admx-printing2.md) #### [ADMX_Programs](policy-csp-admx-programs.md) #### [ADMX_Reliability](policy-csp-admx-reliability.md) #### [ADMX_RemoteAssistance](policy-csp-admx-remoteassistance.md) diff --git a/windows/client-management/mdm/policies-in-policy-csp-admx-backed.md b/windows/client-management/mdm/policies-in-policy-csp-admx-backed.md index ec137198dc..1e240e7969 100644 --- a/windows/client-management/mdm/policies-in-policy-csp-admx-backed.md +++ b/windows/client-management/mdm/policies-in-policy-csp-admx-backed.md @@ -714,6 +714,15 @@ ms.date: 10/08/2020 - [ADMX_Printing/PrinterServerThread](./policy-csp-admx-printing.md#admx-printing-printerserverthread) - [ADMX_Printing/ShowJobTitleInEventLogs](./policy-csp-admx-printing.md#admx-printing-showjobtitleineventlogs) - [ADMX_Printing/V4DriverDisallowPrinterExtension](./policy-csp-admx-printing.md#admx-printing-v4driverdisallowprinterextension) +- [ADMX_Printing2/AutoPublishing](./policy-csp-admx-printing2.md#admx-printing2-autopublishing) +- [ADMX_Printing2/ImmortalPrintQueue](./policy-csp-admx-printing2.md#admx-printing2-immortalprintqueue) +- [ADMX_Printing2/PruneDownlevel](./policy-csp-admx-printing2.md#admx-printing2-prunedownlevel) +- [ADMX_Printing2/PruningInterval](./policy-csp-admx-printing2.md#admx-printing2-pruninginterval) +- [ADMX_Printing2/PruningPriority](./policy-csp-admx-printing2.md#admx-printing2-pruningpriority) +- [ADMX_Printing2/PruningRetries](./policy-csp-admx-printing2.md#admx-printing2-pruningretries) +- [ADMX_Printing2/PruningRetryLog](./policy-csp-admx-printing2.md#admx-printing2-pruningretrylog) +- [ADMX_Printing2/RegisterSpoolerRemoteRpcEndPoint](./policy-csp-admx-printing2.md#admx-printing2-registerspoolerremoterpcendpoint) +- [ADMX_Printing2/VerifyPublishedState](./policy-csp-admx-printing2.md#admx-printing2-verifypublishedstate) - [ADMX_Programs/NoDefaultPrograms](./policy-csp-admx-programs.md#admx-programs-nodefaultprograms) - [ADMX_Programs/NoGetPrograms](./policy-csp-admx-programs.md#admx-programs-nogetprograms) - [ADMX_Programs/NoInstalledUpdates](./policy-csp-admx-programs.md#admx-programs-noinstalledupdates) diff --git a/windows/client-management/mdm/policy-configuration-service-provider.md b/windows/client-management/mdm/policy-configuration-service-provider.md index a1a5453c94..c27861fc1e 100644 --- a/windows/client-management/mdm/policy-configuration-service-provider.md +++ b/windows/client-management/mdm/policy-configuration-service-provider.md @@ -2512,6 +2512,38 @@ The following diagram shows the Policy configuration service provider in tree fo
    +### ADMX_Printing2 policies + +
    +
    + ADMX_Printing2/AutoPublishing +
    +
    + ADMX_Printing2/ImmortalPrintQueue +
    +
    + ADMX_Printing2/PruneDownlevel +
    +
    + ADMX_Printing2/PruningInterval +
    +
    + ADMX_Printing2/PruningPriority +
    +
    + ADMX_Printing2/PruningRetries +
    +
    + ADMX_Printing2/PruningRetryLog +
    +
    + ADMX_Printing2/RegisterSpoolerRemoteRpcEndPoint +
    +
    + ADMX_Printing2/VerifyPublishedState +
    +
    + ### ADMX_Programs policies
    diff --git a/windows/client-management/mdm/policy-csp-admx-printing2.md b/windows/client-management/mdm/policy-csp-admx-printing2.md new file mode 100644 index 0000000000..6da824049f --- /dev/null +++ b/windows/client-management/mdm/policy-csp-admx-printing2.md @@ -0,0 +1,740 @@ +--- +title: Policy CSP - ADMX_Printing2 +description: Policy CSP - ADMX_Printing2 +ms.author: dansimp +ms.localizationpriority: medium +ms.topic: article +ms.prod: w10 +ms.technology: windows +author: manikadhiman +ms.date: 12/15/2020 +ms.reviewer: +manager: dansimp +--- + +# Policy CSP - ADMX_Printing2 +> [!WARNING] +> Some information relates to prereleased products, which may be substantially modified before it's commercially released. Microsoft makes no warranties, expressed or implied, concerning the information provided here. + +
    + + +## ADMX_Printing2 policies + +
    +
    + ADMX_Printing2/AutoPublishing +
    +
    + ADMX_Printing2/ImmortalPrintQueue +
    +
    + ADMX_Printing2/PruneDownlevel +
    +
    + ADMX_Printing2/PruningInterval +
    +
    + ADMX_Printing2/PruningPriority +
    +
    + ADMX_Printing2/PruningRetries +
    +
    + ADMX_Printing2/PruningRetryLog +
    +
    + ADMX_Printing2/RegisterSpoolerRemoteRpcEndPoint +
    +
    + ADMX_Printing2/VerifyPublishedState +
    +
    + + +
    + + +**ADMX_Printing2/AutoPublishing** + + + + + + + + + + + + + + + + + + + + + + + + + + + +
    Windows EditionSupported?
    Homecross mark
    Procross mark
    Businesscross mark
    Enterprisecheck mark
    Educationcross mark
    + + +
    + + +[Scope](./policy-configuration-service-provider.md#policy-scope): + +> [!div class = "checklist"] +> * Device + +
    + + + +Available in the latest Windows 10 Insider Preview Build. Determines whether the Add Printer Wizard automatically publishes the computer's shared printers in Active Directory. + +If you enable this setting or do not configure it, the Add Printer Wizard automatically publishes all shared printers. + +If you disable this setting, the Add Printer Wizard does not automatically publish printers. However, you can publish shared printers manually. + +The default behavior is to automatically publish shared printers in Active Directory. + +> [!NOTE] +> This setting is ignored if the "Allow printers to be published" setting is disabled. + + +> [!TIP] +> This is an ADMX-backed policy and requires a special SyncML format to enable or disable. For details, see [Understanding ADMX-backed policies](./understanding-admx-backed-policies.md). +> +> You must specify the data type in the SyncML as <Format>chr</Format>. For an example SyncML, refer to [Enabling a policy](./understanding-admx-backed-policies.md#enabling-a-policy). +> +> The payload of the SyncML must be XML-encoded; for this XML encoding, there are a variety of online encoders that you can use. To avoid encoding the payload, you can use CDATA if your MDM supports it. For more information, see [CDATA Sections](http://www.w3.org/TR/REC-xml/#sec-cdata-sect). + + +ADMX Info: +- GP English name: *Automatically publish new printers in Active Directory* +- GP name: *AutoPublishing* +- GP path: *Printers* +- GP ADMX file name: *Printing2.admx* + + + +
    + + +**ADMX_Printing2/ImmortalPrintQueue** + + + + + + + + + + + + + + + + + + + + + + + + + + + +
    Windows EditionSupported?
    Homecross mark
    Procross mark
    Businesscross mark
    Enterprisecheck mark
    Educationcross mark
    + + +
    + + +[Scope](./policy-configuration-service-provider.md#policy-scope): + +> [!div class = "checklist"] +> * Device + +
    + + + +Available in the latest Windows 10 Insider Preview Build. Determines whether the domain controller can prune (delete from Active Directory) the printers published by this computer. + +By default, the pruning service on the domain controller prunes printer objects from Active Directory if the computer that published them does not respond to contact requests. When the computer that published the printers restarts, it republishes any deleted printer objects. + +If you enable this setting or do not configure it, the domain controller prunes this computer's printers when the computer does not respond. + +If you disable this setting, the domain controller does not prune this computer's printers. This setting is designed to prevent printers from being pruned when the computer is temporarily disconnected from the network. + +> [!NOTE] You can use the "Directory Pruning Interval" and "Directory Pruning Retry" settings to adjust the contact interval and number of contact attempts. + + +> [!TIP] +> This is an ADMX-backed policy and requires a special SyncML format to enable or disable. For details, see [Understanding ADMX-backed policies](./understanding-admx-backed-policies.md). +> +> You must specify the data type in the SyncML as <Format>chr</Format>. For an example SyncML, refer to [Enabling a policy](./understanding-admx-backed-policies.md#enabling-a-policy). +> +> The payload of the SyncML must be XML-encoded; for this XML encoding, there are a variety of online encoders that you can use. To avoid encoding the payload, you can use CDATA if your MDM supports it. For more information, see [CDATA Sections](http://www.w3.org/TR/REC-xml/#sec-cdata-sect). + + +ADMX Info: +- GP English name: *Allow pruning of published printers* +- GP name: *ImmortalPrintQueue* +- GP path: *Printers* +- GP ADMX file name: *Printing2.admx* + + + +
    + + +**ADMX_Printing2/PruneDownlevel** + + + + + + + + + + + + + + + + + + + + + + + + + + + +
    Windows EditionSupported?
    Homecross mark
    Procross mark
    Businesscross mark
    Enterprisecheck mark
    Educationcross mark
    + + +
    + + +[Scope](./policy-configuration-service-provider.md#policy-scope): + +> [!div class = "checklist"] +> * Device + +
    + + + +Available in the latest Windows 10 Insider Preview Build. Determines whether the pruning service on a domain controller prunes printer objects that are not automatically republished whenever the host computer does not respond,just as it does with Windows 2000 printers. This setting applies to printers running operating systems other than Windows 2000 and to Windows 2000 printers published outside their forest. + +The Windows pruning service prunes printer objects from Active Directory when the computer that published them does not respond to contact requests. Computers running Windows 2000 Professional detect and republish deleted printer objects when they rejoin the network. However, because non-Windows 2000 computers and computers in other domains cannot republish printers in Active Directory automatically, by default, the system never prunes their printer objects. + +You can enable this setting to change the default behavior. To use this setting, select one of the following options from the "Prune non-republishing printers" box: + +- "Never" specifies that printer objects that are not automatically republished are never pruned. "Never" is the default. + +- "Only if Print Server is found" prunes printer objects that are not automatically republished only when the print server responds, but the printer is unavailable. + +- "Whenever printer is not found" prunes printer objects that are not automatically republished whenever the host computer does not respond, just as it does with Windows 2000 printers. + +> [!NOTE] +> This setting applies to printers published by using Active Directory Users and Computers or Pubprn.vbs. It does not apply to printers published by using Printers in Control Panel. + +> [!TIP] +> If you disable automatic pruning, remember to delete printer objects manually whenever you remove a printer or print server. + + +> [!TIP] +> This is an ADMX-backed policy and requires a special SyncML format to enable or disable. For details, see [Understanding ADMX-backed policies](./understanding-admx-backed-policies.md). +> +> You must specify the data type in the SyncML as <Format>chr</Format>. For an example SyncML, refer to [Enabling a policy](./understanding-admx-backed-policies.md#enabling-a-policy). +> +> The payload of the SyncML must be XML-encoded; for this XML encoding, there are a variety of online encoders that you can use. To avoid encoding the payload, you can use CDATA if your MDM supports it. For more information, see [CDATA Sections](http://www.w3.org/TR/REC-xml/#sec-cdata-sect). + + +ADMX Info: +- GP English name: *Prune printers that are not automatically republished* +- GP name: *PruneDownlevel* +- GP path: *Printers* +- GP ADMX file name: *Printing2.admx* + + + +
    + + +**ADMX_Printing2/PruningInterval** + + + + + + + + + + + + + + + + + + + + + + + + + + + +
    Windows EditionSupported?
    Homecross mark
    Procross mark
    Businesscross mark
    Enterprisecheck mark
    Educationcross mark
    + + +
    + + +[Scope](./policy-configuration-service-provider.md#policy-scope): + +> [!div class = "checklist"] +> * Device + +
    + + + +Available in the latest Windows 10 Insider Preview Build. Specifies how often the pruning service on a domain controller contacts computers to verify that their printers are operational. + +The pruning service periodically contacts computers that have published printers. If a computer does not respond to the contact message (optionally, after repeated attempts), the pruning service "prunes" (deletes from Active Directory) printer objects the computer has published. + +By default, the pruning service contacts computers every eight hours and allows two repeated contact attempts before deleting printers from Active Directory. + +If you enable this setting, you can change the interval between contact attempts. + +If you do not configure or disable this setting the default values will be used. + +> [!NOTE] +> This setting is used only on domain controllers. + + +> [!TIP] +> This is an ADMX-backed policy and requires a special SyncML format to enable or disable. For details, see [Understanding ADMX-backed policies](./understanding-admx-backed-policies.md). +> +> You must specify the data type in the SyncML as <Format>chr</Format>. For an example SyncML, refer to [Enabling a policy](./understanding-admx-backed-policies.md#enabling-a-policy). +> +> The payload of the SyncML must be XML-encoded; for this XML encoding, there are a variety of online encoders that you can use. To avoid encoding the payload, you can use CDATA if your MDM supports it. For more information, see [CDATA Sections](http://www.w3.org/TR/REC-xml/#sec-cdata-sect). + + +ADMX Info: +- GP English name: *Directory pruning interval* +- GP name: *PruningInterval* +- GP path: *Printers* +- GP ADMX file name: *Printing2.admx* + + + +
    + + +**ADMX_Printing2/PruningPriority** + + + + + + + + + + + + + + + + + + + + + + + + + + + +
    Windows EditionSupported?
    Homecross mark
    Procross mark
    Businesscross mark
    Enterprisecheck mark
    Educationcross mark
    + + +
    + + +[Scope](./policy-configuration-service-provider.md#policy-scope): + +> [!div class = "checklist"] +> * Device + +
    + + + +Available in the latest Windows 10 Insider Preview Build. Sets the priority of the pruning thread. + +The pruning thread, which runs only on domain controllers, deletes printer objects from Active Directory if the printer that published the object does not respond to contact attempts. This process keeps printer information in Active Directory current. + +The thread priority influences the order in which the thread receives processor time and determines how likely it is to be preempted by higher priority threads. + +By default, the pruning thread runs at normal priority. However, you can adjust the priority to improve the performance of this service. + +> [!NOTE] +> This setting is used only on domain controllers. + + +> [!TIP] +> This is an ADMX-backed policy and requires a special SyncML format to enable or disable. For details, see [Understanding ADMX-backed policies](./understanding-admx-backed-policies.md). +> +> You must specify the data type in the SyncML as <Format>chr</Format>. For an example SyncML, refer to [Enabling a policy](./understanding-admx-backed-policies.md#enabling-a-policy). +> +> The payload of the SyncML must be XML-encoded; for this XML encoding, there are a variety of online encoders that you can use. To avoid encoding the payload, you can use CDATA if your MDM supports it. For more information, see [CDATA Sections](http://www.w3.org/TR/REC-xml/#sec-cdata-sect). + + +ADMX Info: +- GP English name: *Directory pruning priority* +- GP name: *PruningPriority* +- GP path: *Printers* +- GP ADMX file name: *Printing2.admx* + + + +
    + + +**ADMX_Printing2/PruningRetries** + + + + + + + + + + + + + + + + + + + + + + + + + + + +
    Windows EditionSupported?
    Homecross mark
    Procross mark
    Businesscross mark
    Enterprisecheck mark
    Educationcross mark
    + + +
    + + +[Scope](./policy-configuration-service-provider.md#policy-scope): + +> [!div class = "checklist"] +> * Device + +
    + + + +Available in the latest Windows 10 Insider Preview Build. Specifies how many times the pruning service on a domain controller repeats its attempt to contact a computer before pruning the computer's printers. + +The pruning service periodically contacts computers that have published printers to verify that the printers are still available for use. If a computer does not respond to the contact message, the message is repeated for the specified number of times. If the computer still fails to respond, then the pruning service "prunes" (deletes from Active Directory) printer objects the computer has published. + +By default, the pruning service contacts computers every eight hours and allows two retries before deleting printers from Active Directory. You can use this setting to change the number of retries. + +If you enable this setting, you can change the interval between attempts. + +If you do not configure or disable this setting, the default values are used. + +> [!NOTE] +> This setting is used only on domain controllers. + + +> [!TIP] +> This is an ADMX-backed policy and requires a special SyncML format to enable or disable. For details, see [Understanding ADMX-backed policies](./understanding-admx-backed-policies.md). +> +> You must specify the data type in the SyncML as <Format>chr</Format>. For an example SyncML, refer to [Enabling a policy](./understanding-admx-backed-policies.md#enabling-a-policy). +> +> The payload of the SyncML must be XML-encoded; for this XML encoding, there are a variety of online encoders that you can use. To avoid encoding the payload, you can use CDATA if your MDM supports it. For more information, see [CDATA Sections](http://www.w3.org/TR/REC-xml/#sec-cdata-sect). + + +ADMX Info: +- GP English name: *Directory pruning retry* +- GP name: *PruningRetries* +- GP path: *Printers* +- GP ADMX file name: *Printing2.admx* + + + +
    + + +**ADMX_Printing2/PruningRetryLog** + + + + + + + + + + + + + + + + + + + + + + + + + + + +
    Windows EditionSupported?
    Homecross mark
    Procross mark
    Businesscross mark
    Enterprisecheck mark
    Educationcross mark
    + + +
    + + +[Scope](./policy-configuration-service-provider.md#policy-scope): + +> [!div class = "checklist"] +> * Device + +
    + + + +Available in the latest Windows 10 Insider Preview Build. Specifies whether or not to log events when the pruning service on a domain controller attempts to contact a computer before pruning the computer's printers. + +The pruning service periodically contacts computers that have published printers to verify that the printers are still available for use. If a computer does not respond to the contact attempt, the attempt is retried a specified number of times, at a specified interval. The "Directory pruning retry" setting determines the number of times the attempt is retried; the default value is two retries. The "Directory Pruning Interval" setting determines the time interval between retries; the default value is every eight hours. If the computer has not responded by the last contact attempt, its printers are pruned from the directory. + +If you enable this policy setting, the contact events are recorded in the event log. + +If you disable or do not configure this policy setting, the contact events are not recorded in the event log. + +Note: This setting does not affect the logging of pruning events; the actual pruning of a printer is always logged. + +> [!NOTE] +> This setting is used only on domain controllers. + + +> [!TIP] +> This is an ADMX-backed policy and requires a special SyncML format to enable or disable. For details, see [Understanding ADMX-backed policies](./understanding-admx-backed-policies.md). +> +> You must specify the data type in the SyncML as <Format>chr</Format>. For an example SyncML, refer to [Enabling a policy](./understanding-admx-backed-policies.md#enabling-a-policy). +> +> The payload of the SyncML must be XML-encoded; for this XML encoding, there are a variety of online encoders that you can use. To avoid encoding the payload, you can use CDATA if your MDM supports it. For more information, see [CDATA Sections](http://www.w3.org/TR/REC-xml/#sec-cdata-sect). + + +ADMX Info: +- GP English name: *Log directory pruning retry events* +- GP name: *PruningRetryLog* +- GP path: *Printers* +- GP ADMX file name: *Printing2.admx* + + + +
    + + +**ADMX_Printing2/RegisterSpoolerRemoteRpcEndPoint** + + + + + + + + + + + + + + + + + + + + + + + + + + + +
    Windows EditionSupported?
    Homecross mark
    Procross mark
    Businesscross mark
    Enterprisecheck mark
    Educationcross mark
    + + +
    + + +[Scope](./policy-configuration-service-provider.md#policy-scope): + +> [!div class = "checklist"] +> * Device + +
    + + + +Available in the latest Windows 10 Insider Preview Build. This policy controls whether the print spooler will accept client connections. + +When the policy is not configured or enabled, the spooler will always accept client connections. + +When the policy is disabled, the spooler will not accept client connections nor allow users to share printers. All printers currently shared will continue to be shared. + +The spooler must be restarted for changes to this policy to take effect. + + +> [!TIP] +> This is an ADMX-backed policy and requires a special SyncML format to enable or disable. For details, see [Understanding ADMX-backed policies](./understanding-admx-backed-policies.md). +> +> You must specify the data type in the SyncML as <Format>chr</Format>. For an example SyncML, refer to [Enabling a policy](./understanding-admx-backed-policies.md#enabling-a-policy). +> +> The payload of the SyncML must be XML-encoded; for this XML encoding, there are a variety of online encoders that you can use. To avoid encoding the payload, you can use CDATA if your MDM supports it. For more information, see [CDATA Sections](http://www.w3.org/TR/REC-xml/#sec-cdata-sect). + + +ADMX Info: +- GP English name: *Allow Print Spooler to accept client connections* +- GP name: *RegisterSpoolerRemoteRpcEndPoint* +- GP path: *Printers* +- GP ADMX file name: *Printing2.admx* + + + +
    + + +**ADMX_Printing2/VerifyPublishedState** + + + + + + + + + + + + + + + + + + + + + + + + + + + +
    Windows EditionSupported?
    Homecross mark
    Procross mark
    Businesscross mark
    Enterprisecheck mark
    Educationcross mark
    + + +
    + + +[Scope](./policy-configuration-service-provider.md#policy-scope): + +> [!div class = "checklist"] +> * Device + +
    + + + +Available in the latest Windows 10 Insider Preview Build. Directs the system to periodically verify that the printers published by this computer still appear in Active Directory. This setting also specifies how often the system repeats the verification. + +By default, the system only verifies published printers at startup. This setting allows for periodic verification while the computer is operating. + +To enable this additional verification, enable this setting, and then select a verification interval. + +To disable verification, disable this setting, or enable this setting and select "Never" for the verification interval. + + +> [!TIP] +> This is an ADMX-backed policy and requires a special SyncML format to enable or disable. For details, see [Understanding ADMX-backed policies](./understanding-admx-backed-policies.md). +> +> You must specify the data type in the SyncML as <Format>chr</Format>. For an example SyncML, refer to [Enabling a policy](./understanding-admx-backed-policies.md#enabling-a-policy). +> +> The payload of the SyncML must be XML-encoded; for this XML encoding, there are a variety of online encoders that you can use. To avoid encoding the payload, you can use CDATA if your MDM supports it. For more information, see [CDATA Sections](http://www.w3.org/TR/REC-xml/#sec-cdata-sect). + + +ADMX Info: +- GP English name: *Check published state* +- GP name: *VerifyPublishedState* +- GP path: *Printers* +- GP ADMX file name: *Printing2.admx* + + + +
    + +Footnotes: + +- 1 - Available in Windows 10, version 1607. +- 2 - Available in Windows 10, version 1703. +- 3 - Available in Windows 10, version 1709. +- 4 - Available in Windows 10, version 1803. +- 5 - Available in Windows 10, version 1809. +- 6 - Available in Windows 10, version 1903. +- 7 - Available in Windows 10, version 1909. +- 8 - Available in Windows 10, version 2004. + + \ No newline at end of file From 6f0d2743d8f9af3db4ecf0c3660c6dc8de24ea32 Mon Sep 17 00:00:00 2001 From: ManikaDhiman Date: Tue, 15 Dec 2020 16:06:40 -0800 Subject: [PATCH 100/486] Fixed warning --- windows/client-management/mdm/policy-csp-admx-printing2.md | 3 ++- 1 file changed, 2 insertions(+), 1 deletion(-) diff --git a/windows/client-management/mdm/policy-csp-admx-printing2.md b/windows/client-management/mdm/policy-csp-admx-printing2.md index 6da824049f..817a528bac 100644 --- a/windows/client-management/mdm/policy-csp-admx-printing2.md +++ b/windows/client-management/mdm/policy-csp-admx-printing2.md @@ -180,7 +180,8 @@ If you enable this setting or do not configure it, the domain controller prunes If you disable this setting, the domain controller does not prune this computer's printers. This setting is designed to prevent printers from being pruned when the computer is temporarily disconnected from the network. -> [!NOTE] You can use the "Directory Pruning Interval" and "Directory Pruning Retry" settings to adjust the contact interval and number of contact attempts. +> [!NOTE] +> You can use the "Directory Pruning Interval" and "Directory Pruning Retry" settings to adjust the contact interval and number of contact attempts. > [!TIP] From b440abef57809fa00c9823bcd14a4de7ef330e5d Mon Sep 17 00:00:00 2001 From: ManikaDhiman Date: Tue, 15 Dec 2020 16:22:26 -0800 Subject: [PATCH 101/486] Removed two Globalization policies per owner --- .../mdm/policies-in-policy-csp-admx-backed.md | 2 - .../policy-configuration-service-provider.md | 6 - .../mdm/policy-csp-admx-globalization.md | 144 ------------------ 3 files changed, 152 deletions(-) diff --git a/windows/client-management/mdm/policies-in-policy-csp-admx-backed.md b/windows/client-management/mdm/policies-in-policy-csp-admx-backed.md index 1e240e7969..26da44ce91 100644 --- a/windows/client-management/mdm/policies-in-policy-csp-admx-backed.md +++ b/windows/client-management/mdm/policies-in-policy-csp-admx-backed.md @@ -282,7 +282,6 @@ ms.date: 10/08/2020 - [ADMX_FolderRedirection/LocalizeXPRelativePaths_2](./policy-csp-admx-folderredirection.md#admx-folderredirection-localizexprelativepaths-2) - [ADMX_FolderRedirection/PrimaryComputer_FR_1](./policy-csp-admx-folderredirection.md#admx-folderredirection-primarycomputer-fr-1) - [ADMX_FolderRedirection/PrimaryComputer_FR_2](./policy-csp-admx-folderredirection.md#admx-folderredirection-primarycomputer-fr-2) -- [ADMX_Globalization/BlockCleanupOfUnusedPreinstalledLangPacks](./policy-csp-admx-globalization.md#admx-globalization-blockcleanupofunusedpreinstalledlangpacks) - [ADMX_Globalization/BlockUserInputMethodsForSignIn](./policy-csp-admx-globalization.md#admx-globalization-blockuserinputmethodsforsignin) - [ADMX_Globalization/CustomLocalesNoSelect_1](./policy-csp-admx-globalization.md#admx-globalization-customlocalesnoselect-1) - [ADMX_Globalization/CustomLocalesNoSelect_2](./policy-csp-admx-globalization.md#admx-globalization-customlocalesnoselect-2) @@ -297,7 +296,6 @@ ms.date: 10/08/2020 - [ADMX_Globalization/LocaleUserRestrict_2](./policy-csp-admx-globalization.md#admx-globalization-localeuserrestrict-2) - [ADMX_Globalization/LockMachineUILanguage](./policy-csp-admx-globalization.md#admx-globalization-lockmachineuilanguage) - [ADMX_Globalization/LockUserUILanguage](./policy-csp-admx-globalization.md#admx-globalization-lockuseruilanguage) -- [ADMX_Globalization/MachineUILanguageOverwrite](./policy-csp-admx-globalization.md#admx-globalization-machineuilanguageoverwrite) - [ADMX_Globalization/PreventGeoIdChange_1](./policy-csp-admx-globalization.md#admx-globalization-preventgeoidchange-1) - [ADMX_Globalization/PreventGeoIdChange_2](./policy-csp-admx-globalization.md#admx-globalization-preventgeoidchange-2) - [ADMX_Globalization/PreventUserOverrides_1](./policy-csp-admx-globalization.md#admx-globalization-preventuseroverrides-1) diff --git a/windows/client-management/mdm/policy-configuration-service-provider.md b/windows/client-management/mdm/policy-configuration-service-provider.md index c27861fc1e..205815ffba 100644 --- a/windows/client-management/mdm/policy-configuration-service-provider.md +++ b/windows/client-management/mdm/policy-configuration-service-provider.md @@ -1148,9 +1148,6 @@ The following diagram shows the Policy configuration service provider in tree fo ### ADMX_Globalization policies
    -
    - ADMX_Globalization/BlockCleanupOfUnusedPreinstalledLangPacks -
    ADMX_Globalization/BlockUserInputMethodsForSignIn
    @@ -1193,9 +1190,6 @@ The following diagram shows the Policy configuration service provider in tree fo
    ADMX_Globalization/LockUserUILanguage
    -
    - ADMX_Globalization/MachineUILanguageOverwrite -
    ADMX_Globalization/PreventGeoIdChange_1
    diff --git a/windows/client-management/mdm/policy-csp-admx-globalization.md b/windows/client-management/mdm/policy-csp-admx-globalization.md index e471cdf6e7..ad421c4633 100644 --- a/windows/client-management/mdm/policy-csp-admx-globalization.md +++ b/windows/client-management/mdm/policy-csp-admx-globalization.md @@ -22,9 +22,6 @@ manager: dansimp ## ADMX_Globalization policies
    -
    - ADMX_Globalization/BlockCleanupOfUnusedPreinstalledLangPacks -
    ADMX_Globalization/BlockUserInputMethodsForSignIn
    @@ -67,9 +64,6 @@ manager: dansimp
    ADMX_Globalization/LockUserUILanguage
    -
    - ADMX_Globalization/MachineUILanguageOverwrite -
    ADMX_Globalization/PreventGeoIdChange_1
    @@ -105,75 +99,6 @@ manager: dansimp
    - -**ADMX_Globalization/BlockCleanupOfUnusedPreinstalledLangPacks** - - - - - - - - - - - - - - - - - - - - - - - - - - - -
    Windows EditionSupported?
    Homecross mark
    Procross mark
    Businesscross mark
    Enterprisecheck mark
    Educationcross mark
    - - -
    - - -[Scope](./policy-configuration-service-provider.md#policy-scope): - -> [!div class = "checklist"] -> * Device - -
    - - - -Available in the latest Windows 10 Insider Preview Build. This policy setting controls whether the LPRemove task will run to clean up language packs installed on a machine but are not used by any users on that machine. - -If you enable this policy setting, language packs that are installed as part of the system image will remain installed even if they are not used by any user on that system. - -If you disable or do not configure this policy setting, language packs that are installed as part of the system image but are not used by any user on that system will be removed as part of a scheduled clean up task. - - -> [!TIP] -> This is an ADMX-backed policy and requires a special SyncML format to enable or disable. For details, see [Understanding ADMX-backed policies](./understanding-admx-backed-policies.md). -> -> You must specify the data type in the SyncML as <Format>chr</Format>. For an example SyncML, refer to [Enabling a policy](./understanding-admx-backed-policies.md#enabling-a-policy). -> -> The payload of the SyncML must be XML-encoded; for this XML encoding, there are a variety of online encoders that you can use. To avoid encoding the payload, you can use CDATA if your MDM supports it. For more information, see [CDATA Sections](http://www.w3.org/TR/REC-xml/#sec-cdata-sect). - - -ADMX Info: -- GP English name: *Block clean-up of unused language packs* -- GP name: *BlockCleanupOfUnusedPreinstalledLangPacks* -- GP path: *Control Panel\Regional and Language Options* -- GP ADMX file name: *Globalization.admx* - - - -
    - **ADMX_Globalization/BlockUserInputMethodsForSignIn** @@ -1223,75 +1148,6 @@ ADMX Info:
    - -**ADMX_Globalization/MachineUILanguageOverwrite** - - - - - - - - - - - - - - - - - - - - - - - - - - - -
    Windows EditionSupported?
    Homecross mark
    Procross mark
    Businesscross mark
    Enterprisecheck mark
    Educationcross mark
    - - -
    - - -[Scope](./policy-configuration-service-provider.md#policy-scope): - -> [!div class = "checklist"] -> * Device - -
    - - - -Available in the latest Windows 10 Insider Preview Build. This policy setting controls which UI language is used for computers with more than one UI language installed. - -If you enable this policy setting, the UI language of Windows menus and dialogs for systems with more than one language is restricted to a specified language. If the specified language is not installed on the target computer or you disable this policy setting, the language selection defaults to the language selected by the local administrator. - -If you disable or do not configure this policy setting, there is no restriction of a specific language used for the Windows menus and dialogs. - - -> [!TIP] -> This is an ADMX-backed policy and requires a special SyncML format to enable or disable. For details, see [Understanding ADMX-backed policies](./understanding-admx-backed-policies.md). -> -> You must specify the data type in the SyncML as <Format>chr</Format>. For an example SyncML, refer to [Enabling a policy](./understanding-admx-backed-policies.md#enabling-a-policy). -> -> The payload of the SyncML must be XML-encoded; for this XML encoding, there are a variety of online encoders that you can use. To avoid encoding the payload, you can use CDATA if your MDM supports it. For more information, see [CDATA Sections](http://www.w3.org/TR/REC-xml/#sec-cdata-sect). - - -ADMX Info: -- GP English name: *Force selected system UI language to overwrite the user UI language* -- GP name: *MachineUILanguageOverwrite* -- GP path: *Control Panel\Regional and Language Options* -- GP ADMX file name: *Globalization.admx* - - - -
    - **ADMX_Globalization/PreventGeoIdChange_1** From c141e22df8e2a08ff44272429585002e1d512549 Mon Sep 17 00:00:00 2001 From: Asha Iyengar Date: Wed, 16 Dec 2020 21:34:10 +0530 Subject: [PATCH 102/486] Minor changes --- .../windows-firewall/firewall-settings-lost-on-upgrade.md | 8 ++++---- 1 file changed, 4 insertions(+), 4 deletions(-) diff --git a/windows/security/threat-protection/windows-firewall/firewall-settings-lost-on-upgrade.md b/windows/security/threat-protection/windows-firewall/firewall-settings-lost-on-upgrade.md index 4d978ad0fe..232e9788e4 100644 --- a/windows/security/threat-protection/windows-firewall/firewall-settings-lost-on-upgrade.md +++ b/windows/security/threat-protection/windows-firewall/firewall-settings-lost-on-upgrade.md @@ -17,11 +17,11 @@ ms.topic: troubleshooting # Firewall settings lost on upgrade -This article describes a scenario where previously enabled Firewall rules revert to a disabled state after performing a Windows upgrade. +This article describes a scenario where previously enabled firewall rules revert to a disabled state after performing a Windows upgrade. ## Rule groups -For organizational purposes, individual built-in Firewall rules are categorized within a group. For example, the following rules form part of the Remote Desktop group. +For organizational purposes, individual built-in firewall rules are categorized within a group. For example, the following rules form part of the Remote Desktop group. - Remote Desktop – Shadow (TCP-In) @@ -29,7 +29,7 @@ For organizational purposes, individual built-in Firewall rules are categorized - Remote Desktop – User-Mode (UDP-In) -Other group examples include core networking, file and print sharing, and network discovery. Grouping allows admins to manage sets of similar rules by filtering on categories in the Firewall interface (wf.msc). This is acheived by right-clicking on either **Inbound** or **Outbound Rules** and selecting **Filter by Group**; or via PowerShell using the `Get-NetFirewallRule` cmdlet with the `-Group` switch. +Other group examples include core networking, file and print sharing, and network discovery. Grouping allows admins to manage sets of similar rules by filtering on categories in the firewall interface (wf.msc). This is acheived by right-clicking on either **Inbound** or **Outbound Rules** and selecting **Filter by Group**; or via PowerShell using the `Get-NetFirewallRule` cmdlet with the `-Group` switch. ```Powershell Get-NetFirewallRule -Group @@ -40,4 +40,4 @@ Get-NetFirewallRule -Group To avoid unexpected behaviors it is recommended to enable/disable all of the rules within a group as opposed to just one or two of the individual rules. This is because while groups are used to organize rules and allow batch rule modification by type, they also represents the 'unit' by which rule state is maintained across a Windows upgrade. Rule groups, as opposed to individual rules, are the unit by which the update process determines what should be enabled/disabled when the upgrade is complete. -Take the Remote Desktop group example shown above. It consists of three rules. To ensure that the ruleset is properly migrated during an upgrade, all three rules must be enabled. If for example only one rule is enabled, the upgrade process will see that two of three rules are disabled and subsequently disable the entire group in an effort to maintain what it sees as the most pristine out-of-the-box configuration possible. Obviously, this scenario brings with it the unintended consequence of breaking RDP (Remote Desktop Protocol) connectivity to the host. +Take the Remote Desktop group example shown above. It consists of three rules. To ensure that the rule set is properly migrated during an upgrade, all three rules must be enabled. If for example only one rule is enabled, the upgrade process will see that two of three rules are disabled and subsequently disable the entire group in an effort to maintain what it sees as the most pristine out-of-the-box configuration possible. Obviously, this scenario brings with it the unintended consequence of breaking Remote Desktop Protocol (RDP) connectivity to the host. From 1d6498affc9bbcdc4bcc5a345883c280e4b272bd Mon Sep 17 00:00:00 2001 From: jaimeo Date: Wed, 16 Dec 2020 10:32:54 -0700 Subject: [PATCH 103/486] safety commit; I think about all complete but for updated image --- windows/client-management/media/image1.png | Bin 0 -> 63557 bytes ...-assist-for-it-pros-draft - Pauls Edits.md | 103 ++++++++++++++++ windows/client-management/quick-assist.md | 111 +++++++++++++++++- 3 files changed, 212 insertions(+), 2 deletions(-) create mode 100644 windows/client-management/media/image1.png create mode 100644 windows/client-management/quick-assist-for-it-pros-draft - Pauls Edits.md diff --git a/windows/client-management/media/image1.png b/windows/client-management/media/image1.png new file mode 100644 index 0000000000000000000000000000000000000000..1f6394616a568cffc40a1922625ed723f4ddd3d6 GIT binary patch literal 63557 zcmcG$byQVt_cppW-6^HOraPsj6(ywvq(Lbu>5>K!kVYB=1d;A;5CI7#C8T51-OYDz zeBU#^zs?!woZq*`@Y!pR@$9wMJ?|OUyso(jRaKV7#k!9Lfk1HOJ=*Zj%hEa;{<`=bs+vhyY2E!A&}F* z@-osI?uJ`4s9y1KGW0#ZvGBhkL)ncvjf^$~tjJFZw=SkQT?6UpXppejGU;e$W@ZG) zt9NE^c6YbD7ar~ev|pUUog}xqcA5)My?=ZBcA^e84J07EJJkHOeq3dQ{5!CCm>~Z> zh5ny91@}JZB_vcU2~$x>X!|KsKgrB&A&buXVpL5sGF&mXY=YtX%$#kJM*XilF0+@E zjEqcNHxCqidi1s{IyjCWRT6!&cT!Q|WNYZj=wJ&qA&glUeGHGtfv$)PMdf-DCW|&z zjP5xK+R@U{(e;WZL1^f*#LNcHwJk*#;$*t#rbk{h7VK2GYG^ueEYc7QqV^@Va;Kb5 zizQvp@%)wDh;!im&rc_i{r=e_kH8oeLP!W_ts#N1Ou=Tp#d!=IV}~fj;lD&xaJNxU zA%U2QQNpWBa&qbv#~c?uxqkH4MYLb=vLg)2!fk>CE_85j3Z+dPH>@vhA->T2i@}9I*J{!i-=Lgda&`57Ev7wK{H}P=e-(BxdjQdK5L5X5zAH6D8r(p`o)@v5 zs0oFi0^J)#d-vPiDFipuoRjQzpZ#j4F)G51wG%?=o9aXQdV0^uQsgF1Z0}M;1eR{> z!-TkPd&j@q_H@B(4PFhOT)ued=3Do^lWE14UwAt|s=RzM&o1ehs061A&mt(8l` zR6o{3afL=_ZyvS^cgDCx0%4=p{{8O$av8;#y+{4NR;%DD5sWu00(V#NM_i$|k|;Ko zk&a8=V&9g#X7g-6DU1;F;jQs|*E1t$;m46EKYGGHzgnTMKpSxTDXAGCc$HDHsQ*JcAe$IooCAI6 zsgiUiYnZ&vy`U@e;ARG6X&oNi*w>d`tROF?k%g1tqI|2u$ zR?6NsbS}>Yvu$=~l;Fk5>peMMs&a22iqoJ=)NmX@tTT{vVa$CmOL2zg8 z>QuvHA(^>f?;zLv@_AP*H~?uFbQG)VJGH3Zm7_1GZJQ?K$KR@^Dy%su)>4q_A4=;kX8LdE6G#=(^2T__9>6^e%igR2?2jAv~SHnaqtdE3ujEH8=Y7FSa_X7j0>A z(QzDokxw_epZ7H?P~gjY8}0lSxs(8|7E6Z8>O7l-&u6Lh&?Bx4aGc&h! z-R3vF@s#&IMaKrbS=(moqn7tDg3YC<$KREK@w*#)Xt4^(S{e>L=f(}soZ9Fz`XOyP z>~|odYqh(wOjA3~?s~q&M52G}{Y8Wp;h8>dcU!Eesqm=pqT749g^981o}}o)dB*yD zjwm9c3E?kokU;A5_-ISq=6RnqQKW-?z1y<=?-lk!XvNu^ulg8@Ja)|C~ zn+>X%rLAtM!=tBsMG9e+m^6rMnEkV@V>71TbQj{5gm5x_B*cRwHWlM;Q&GoqLS!gJ zR-2|pM^p@rwz%cZe@!jY$Gm&MrE=x1_Wkv*ZB&Gj{#D|o^`!(w48B_#iHgNNe&tgR zEf=p2o_^Ksd2)RkR-{k{B5$zRImrno!HB_98~lN{{%*0qo+u9q3Cj-jNh1;N=wxER zR(9SlXz2T^rWvv79F3V8VAelJcFc>{HPU#$)c>}Uj+d1&6p|D6sQ1H=gnDjxnBf3- z!+#wubZe?s<-VZJ8$)_Taty3!$N;6b*gfQPDi82Qq~E4U zgm)p1tjB(ep!l+=OnPuV<9g4WGX9oY<&!uIE ziZ{KbPMBcZ)E4d>MveBax`A(u|I_CE-}fq?L$5|jIYYu0u|zsH^1G~}@3L83s}Rqo zd8A%x{@i0dCvkbY-f5+o^|gtK*=&=?aIv0{_q1*83=@dQgdaa-4hiXGqp0K6vY)Lx z@!L$OO59#KVPazP?l$W>I#y6hcxl6SmzL;%r3ieoYrWQb{N%~;O)&L4xdbkQ0>t(a zlH9xV-V)tL*WziP%k76IT{!29Vce!W)AbKce-dEg@4V@2$7TLJ--}g^}-dPW#Qb=c!-c9dA^49Gb7sHaA}Fcf*EDjU>HsC?7e?^(Jt# zgS3|*;e8Pj7#QeNQdn3x3nM0`XMb4|*W!J-;i9OmorHFqcP~lA>04c0-P(5E!-)o$ zLg%$XX*SIQhTZ1V^l(ZM_1#8lj0>3O7O#lQMjVH3m0a5A&%ZnmxV$7))m}~3+GS{| zAxc#H_kY#z<2_co$jHbGNn`UCuo=2Hc7=w`@9tk^$H6ME^N7jQeZD_>;7>f|jg@EfU<5Z%qN*0@Hvr&#-9GGn!Vq0^qMorDl z0tB__@Y}(xr`Xq$^zIT;F4FHLF4pMtb*l@`E-n-X(#7GS%<0jJiCpX6c@pjy>$w8S zWp2BM+X8#PMR(r}LyeGQA=`heM=o1#F08L95#jYO$H5!sd~Xe?J(dYSbJ`7N`kx@# zJ30}&l^l5;@(G_7Q*`(YrjNtfK?#{mh)9U+ADRru1* z&Q*eRGC_VWuvm!uZrQKT{)hcTKD#Q1N*G}H(aOKx=by=ij z;ZEzV&$eWl&-J@vRjD9EdIy;2uClOp1mll)`P8+Qz3TWeH)qthUv3MVznHRXj0XWn|vBkX@;O1QJJfS5WG)pq1Mf-u-9vWnG3B zs*SF;+XYd!8@e?%`A|uK)$Hbc>i6ezGkgk8aqsiXi5@OF@vut*FE4y_jXbt?d(g*y zQU69Tq}v2nGUeixsB{xq;n5sv0a{TDRPLGa=3{>JAEZJ4{{An$apib2%V}r3!?;`C z%qk!rp^-ASoFEqLQlfFIZ&6>V>X!fy#oiJ~l8D_{QL;za8+0G%`@b0DZ4v6{o&>nt`?bJ7MNOTB9gD^8&k_ff)Bgshe zb+&BO#%colOXazNPLNP`KS!}4ZQb*mfkqqWX_sfsroVLA{;NsMLAv$U*qakPmWKVE zWi)>NgDJxHh@_4<)M)P#`~SyNxco#8spsbI-)cqIooUw9fsFC%<4WZ8aj@g3mv`M& z-akl)-hK;G6yxVdF0mm0$j!BQA3GkcsT~puk;P&gG&skgVw2t>TS5}Cf0%)ooScQb zX)j>fWA(G+)tQ5c_eE7WOwv#xk;_(MapmCXC@#^+M<+$d?(Hn_0U3?Ge-KewNhv%5 zUi)@NS4>Ro$Dco%k6gD{%zEQ^VYEc|?lCy6{*IUb#MJYVgq?wlOW98LxUE35&=fdj zh3%AJ@*|gmv-9)yC7uyG>;1*f3X1`12YY)0GBPp;CnvsL!g}ZRSdh+TzbPftJrJ~s zK09+iq>g!!tK1V#!FSXGTs8@Tp$Xx(|5g#0e6#VVun+i0p4oZ+_=*WDBo_G-v&vXh zhQ|tp$I+0i0A_Sj5{u;3ULX!Y*4!AQ_*9P=ByX=O!>L5Ih*1bAC|H5lkIFojlMB(J zq!e+K*%h^)_p7oVSBBkgmbPv<(NjRc<9|BYp6VOUQ55L0Kb>*w8#nUxKKHn5WZ3TV z;DCdh+jv{ESzp4zd?3CRPm3d50e5HNlZr%)RB!<>+Ox+&DEibi0f9; zEPftc+cw510J#M{e#e{RiW(Ymvy#3yUiljNu@X_7C1x)vtl#*!XybdE;(3_|c{$_Xw1L5)*zbyvRi~SpFYip-nr)>X{ z6YxBM5fXmkI|9YHMk!VBxy9{3nn?EPlhd7<9O*zb^{;Y-4$jVTdUnm47H4WLQI0+g zIFFpyXr6|V3P{pF1+|L_i`so2%BoeA#D%|ia1cwxs1Q;tZzvo-Gbt2WhqG`hmJBchWh+!W30HaHn6g?5^Xo(k;}%K zlko~QXoOd1&5GZa~W8ec@cp_GYT4*kgbs>9`wJ5syPoIMcDM zyIVGqIn&K=dozp3?+(57ZvMNb1xSCo0Z{@sZ>mnm^z1C9ZYE5k)~{8>_TRhCcdPq> zyt`>KNJhiYud%D5n5+DmK}<}4)^k^!LeOSHpz_x5GsMsXPLeF_kR^EfB&RJ?I`HUr zu`|s247?cXZ-RP04>@0;^g&>-tZQ|aC(ItJNMlO8C?6Hg)IFACLjJ_;Uoq})J}(UNMvaR{)0 z!mV|`4HUVf^Py#YdGsTg6cJ<~g2I>op4W1WtTQ@&D-`0~Mk zNUPM)){qzhF#w<&YS9EfhB^Dj((UO7iC)t;G}Kut=Q1Y-DwY|vFK=eJW15Zw(M0U|!=*uE+>kPH>07_BXv&C(55 zKU4E4XwLO=Nv&0?>(isWdki+7fB)-yws_~*R#+a#?kN|0yn^t$tt`@_>Hd&h^VTC6 zyYf@=Yw)ln40jJo@)&G`B09_sGfY0VoE`b={y1~a4jJ>;fjGW*mN(n-tf%d22)4jR zgxJ=H6f6vG@$ZM~ijmJ0I!aZ3rYa(v&UI=ZjAJ4RrRe@-GaKT&Q1Y698%;FmzL!+yRLoRG-K-y=PKd|&nt z_A*u(#RPkr7){O`6R5-Dm~ZM?Fy%c~t)C3S?%!t{$yG`8+^LtLJ)7J zcckGOT4z^R??Okg*>s)5aEXDaR~z5-3bj3j|0%RFHbG|tNE`KL?P-0rH($4%itjlL4)SsxtBBXs})}W5f0XKGpx*{ z0?}}n;fY3LrcxRjztMkVoT;F7_O&aP6OqTWFo#F2!a{gSyaEU|P#XU{ zbU`U`*%*xhMoT?4|NWmByRLgq;%2Efq$ydWaq65fv@MpCq)5oQo6*9j(K2_BBR7DU zp+|VeM6b0VC(W$&^9SGY?Dy7$ll#stfScrKq1``N-=Oin8Lc_*{5e+1d*SfJ?&YLd zm#kR$X@ZWty!`#?-HGxiH)l)u=b)rBaBy&R9NaKHPx%Ro(hneBGzEdcy(PK|BeiWJ2nm^Zq`*suMUvW$YX*W*1lNDygB^9!}7{*&JPN1|>!(=Ns97KniV zDRD=#_r7{Vc|e0Zbr zMZ<}tX!B%qc++@cxX;ztFhu7azq+Kdq6@c0vRGz7ov2a1V@O!o$iWQ&nTTHL*n}>t z>K?1QOoPiN6Q6m1^Z~ptwU%h;*cizV>%Gh7*t!j&MQBJ~raizL04Vl0pU$#JNnGTO z7VC}I{gEcxPOG5`_lq$!hD2A|{3A8zh8MHP5kZLmejDQ;-*5x_C>$b4uEbOF*VDHS<-zVuFQL1qr{eX+ z@$n|RW`V|sX8e#48-phIp{tOP5;As3o|JZzd->7&NOx1hux;a;p)5elXKe*8)5k^& zVM({9rluxbo2Yme1(t&5mwEuwev+B&<2b17C%I5^Fq|71?0T~+*z>aH((G29g+pj> z-#NiQ;$vUf=cXTjdZd-nx)n<^yj%*~MuAKe<8k^jHtYAx6>6SC--Bg&oqER{r3?v! zL`bIO_Xxb_s^V%*?hc3d3E^(}QI&7fKQeuhalTFhjzH^zWV|=uegJyJs%W`F z%Yq=S09-qEQ@O1*`1XfSr4q_o-2Nt3*}Q){>hnNf4NZviOXWc`Q$|cg%g~Crh>2;T z`oYZS*$ZA*R&9Hh$C5Si$p#SD-Pz*HtJ}i?$%&?UV96mx<$@u#}T)q-DK0i?fVt|;wqnIJ zu1@%o+-ZtVX^Yk0s{E#_gTBAxsPRz1=d>Vb69h9N3$o5o1aK`-KGEY?Upzxld6GA0 z*$6Bjc(a=Bsm%7WBrPZNwgjyc$P>MrIWA^ywm*V%&yC2qXHvLxsRR?55HZV?vb%Zm zuJfp7GiVq60=a3w>p{iqPOKR$`>l!cVZdbU@9puxo`O6&9(GqrZ2SbS4Gj(NA7yK} zT%K$<=wnh{525Tnv#8d4>F`O-R$)EI&H&%`2Rf*J2+n!k#!K13$uaswf)#!uk&_1J zJ@lSYU+*d;ER)H49E5f7*SfUlZ?(1Ac!|Nm$&}q@2}b8fGtPD?(0*zECw0^A$xdG2 zOI~GeP9$>becRNueQ;qWgfb_GM8h+Hc`C^D#rmr9K}zFTfu`cD$12rx6b_>neRkwB z13EV%1V|vi!#6@0zg7_W!pLhsh*H>IYP?L(^E8{@TltAV8y}UJ+4UQkM}B4EQQkW3 zc45QZkz(S;Q+VoBli9F1+^K32Qba|pN@2e-%K98FoLXFWV>I7HA^>c$`VtpJgT|f= zLf6ZAb92-1*`VGLULi1{(u~~}T$>R8vN2&SiZ5&Gz-(l4miKf1d$&Z?pQ3%pM@#)% zNcP!0U*(mQ;;t`G6|1Gcq9A3av*E9m_&{JWw_!9eNbY zaN2r$uWOu z;{CrZJH}_6kBPY}Mt9}8(k(c-_GAA;i7wkZuW~`TS~3Q3v4A^$4OD#u!F$&&{Qo}9 z@?w$T)yZ1?RN)mWFP9KrbEfi;+IZKA&oi`}7&x?A`a-k~k0euXEh)Dlhxf%1Z)qr^ ze+4wD5D0Fy8#2;VhR@9D2{WrE$M4{=%IaV0J^`di=pgU7rk=(GeOAlLI5($hXy@xS zi<(@=C?m$Y}5Yw|74LAL3I$QBZ{dq>AF&ycrxAc+BJ@4vik8X6Jt=QcEi#VyB$ zL&AM;9)7te84Jzd7giPuxXTLqL?k3RX6b;hjt50e4sfe9yu7?C&B??B1T>)6kNx_U z;gIwa5AYBI)?;x12d37V{{AZeX&GRXgpd%7!-OJ46cp>#DyXVPdtd{3;621=sVkxa zK&ZmV8NdT2@>%>&8dpyfc6c0>kpRR-of?}-fhhW3j=KkSY@coR%mF;i!Nq22-_A^< zfUwU&4|5JEm5w{pB8O@em*=Y)@O00eA=Ah2c>J1Xb?BR-5)I$U&(X)?2q6vp$yI^r z)Y*UW2=jK&xV=8j_#FVSIzPtQ%VJ$dkih>eEsz;`eW|<>#s}5sI>odE5CI5QArdB8 z(%rSc)ZKS+ya}(J^C6a$lsr_EN&cs7;5{jma9ozN9LI$&!&PemZQW3P2B^>V@ykiT#KN7P0M=K_kI;bopOGd2b>z~u z+Q;1*r=Ft_3P^hdXaU871Hr8n>DQ~Hd-+k^1aEKwepJCF)oJOZ|ji3dV2 z?V69Z>aS0xs^ds90x7(3Og&F`IBREIQ+IO?j5gyAP?i(5!YGQo)tgp@{5h^v5^)$!oPr-^nR{z}$ z2utuQ(p+G&#ib>aSx3|aRO3vy{l%xvJ^(&!quFA^Gsbj%;>PIRyXFa@!eg7+4UqO* zz+3RkbuZZ>*nKp7>LMu6J^uXCEB#QNmnvj8=GO$6>qis%Enf8=rE7wkc@pHjuiyXP z$c}=Ve=QSq0V=`4Px`1e>n52i}`CM4tDIM#zdFO4h@kmOO~suu;)eJ(6n zUwjMKqDE9(U2iEFjc9iO)$W98ofkDWI;?70?>!<|4)1!(-dEalhJbMXe6CXLzQ1_C zKR75Txz?2WBnN9uMohT?*8~Rri-HywQ>`P-0=YN^#Fp9MOj&SMf~LxK#Y$S z=a}}ys<(J~!1K}Ib;5} z)7rqNnGrx$iw)>EZx)gID6B^FzJx*nJ+2WwKM}QLs%wwK0nkQWLqkffeqUeTW(pfp zR{uYA68zVa@ot^P#^=ntSN32AM;g-`L;*$!m|c>zXJSKb&u0eNe( zQWlVQnYbm0U*~dap|@#T*v2B##>SZ~ zb{r&UE2(x>mLwNAnG2d$+8chhWjupVx!;4Oad!xmfqRk=eUrtKTd?64HW+N3KI7fpt_)*fK-W%qsq=l^a z(B5mQK#m?r1xjG|?zCQ?=$&s>4wwRWTq%CpQG!xC?HKm9v-gQ5XhvQWJ?Q}4b;tzp(6aAY0=%L7vo#m6x6+2L)S3eJq~T+ zsHwpTe0b(sT~yl?HGjh6(A(7v-x5*u`2cm#ekL7N13xM1Unga*lE)B&)kFZCpCDwX z!-RX}URn7t^X-_tw#)V%$l7pJ0TKg$854;fdDd%)y#MK}r-~=eX#R_CuLSnJbMDrw z3LpGv4Cz*AlaN>oXq_KAttef$Xg5+30J28T>f6iaFoD~o{aW-M|Dy}&d_5ua*Y3YM zU8GE;$)=o$RR!+JhEqH!?BJV^A`av)Wap>xtOd;Sp>D59w1Ix5`7f7ZOa!(IqDcSp zB)AupIDv`oed<7=ICwVS4Impz8IR>IvNWh8t_bv(uKdhBCzx9;N4{O?gWNU3c}tK< z@7Lvxk;2ROUIr>brijNg71;*+l`~&lJ3IW$TX=5bI}soMNyldH2lD`yKeY)2G-XB= zrlGEtUG+fAbl-hrA5x4{s9E^!8kwi;sS8rgWyhtTip06h^z^iIs+3J=HE90%OB z>S;i5n`O4DPK=B*^MUO#*H1F#!gp@2< z)Gl+7$@340<{7ieVM4Ikpk?oSscrszG|$tHH7iwzl!+SydDW~doWeEnhA!EU&42Vy zho$s)Xb-aIfM&irBL%2q5+4pEPk=v`bq(ugCu>SbNUWFeA@DzNzTg7GsTRZhFTvP5 zD(q+IMeDLzG{x|iJnEk|d-!X-#@uJ!MUpj6W_w2VJdgVW2dgllUb?F3fq28~sAp?b zZ4asLuG572ywUc7hXrcQho^pX`7f9c6Sn*(eW$3QaksqC=x*buXf>xDi~<^{N1Nj+ z;Bm7zFA*~VxJTO}4vRkotPzYAf-p8df#F^bZ*F8zXjA(&Uq1l())xARiMag5bKNOo z^_w3kQq=x|&=eW(j>7>`bL#C30EOz+R+`>8HJgfdwLI8N_sTVe(}{cDhZ{RS z;0^}8`%ptzT97%AsNyI&0|lGhrDF@;0j8|S@w>1~uq z>7v}+TpX%L{4-2CLP)DpTT$KsZh7t+23F-Gp?Bdw%BlLkzXNy_2&Nslr!LZ&X=4(DH9W}2(@q1) z;|F*Qh2>kgm0H30u(951FtxI_E9ELpH2-XTorusN3iLEdu$=G(!o8_LC#2sl*5f75 zPbVVZBgH0bGx;sEF5+$mu)U@{9P$(6^gP*$c@m75^B_$1<~zbkw`RRhXL5C^dHCX1L7@rnin$^qO~T?D&^Y-u9t*V(tfC0c0nM;^Z_UpgM-Ha^*! zY|!_Y2fTwV21avJQxztWdA-B*!SS)cZu3LA?+Nn4K9gv}?Uc_DRr`ZPWtB2JfXw`+3`imvtdalOzZ135=r2*IG4nSKi*fti{bM za{Cm;D42w0iT6zGDkJ4sykp#dw-$8{#_+ai_oZ&%z}^*kh{W~L2x9yu->9|43p8x+ zW~=6{D_XkU@oQF}UE$4p>lp=WuA4uYU)mqLe3J1Q6u0#Q(Xj2qCGjbV)?=?a)0dh^ zgd|>hNKzKQ;S0dT`AZ&p!iMw<5lbV>J)g{gI{K0-%;r^?lt$MAWisgzy%ghPU3=>G z;dz+vmDs`wF^s^m$ZM`79!-KdHTrT4D+?6=NQ=rF-)O zwcC{6v6Hvud8*(ecSY;~b)2oT!#>X1=`49P%2G~@*SrsA%S~iC={xH?-hF;)Sh6iKCdbx9@0Qac3mXw=x zZ)_13uWpkGjtrA>ER&Q~5Za~L%6&s5Nwp0E7=%#NTG z@oab@)#>=iZ@g{*t91N`Q0?tRg;`km10m&E_a$6hYTiEEcqKY=qcUTECXSf?A3H3< zC$DOW+Z?vQgv5xs0>+~loVLUHec`Uxg0Q|X=KV=uqGabI9OY4xFoX$F=*zrMCM}M& zF97Vb&Wvg!EZqnGVHI!+q=b?2?s-f;A>s5zr(vtXk5l{ZC=1$+q2E-rb&VOhRQ-ci z+yC}2bw^o0gzWhc(3q@4W<^^_!;b6yDCot|?+?<&gs-TR&o5jCLCBF+nr^^YVJ0R? zKLMwHohmHKiD0aA$r{;<`uCGF>R)LhFDzOKms<~ii|QWxnezE?xf^;7?A4#W+Y>pv zzegP-)^^$Ef!BTt+$3wj7CWa7+Wc~Up16`!qIY*}df>;M@<5}}U#XgwGQbGVOvaEx zAvmfd_w_UTNdl9qj0rr&eVbTpt2igC;tdZU1O38v@dqZZJE7O>4^$Bm92i8r9T6sU zNQMkLyzb@O4gvGH(xOO8{Y2T*M4?FiRwg=7b7!?-e7OcX9+}Lj123DH_c|^p>0>tb zR>D4XnEuAZe_qIG8-GBLNE}wkr2EK)TYXzwB!1J^MB6{hK}|>hgPIp0 zrH*RE9ZLw(Sh>#t;2E;{_T4FGB?I0xSzLKVQi*;e!Iu;K`auST2;KdA?6LH?K zR9Vz6)Vy=gyUj(646X9aW2u@`PG;USv=p^8suWuixo~I>v^dqP0br2Euy)?_y%QJP zBUN#~4BS}0vvZm?*=k4uY|k@@0gZ@8PHg@(GK8g8e?VKZSpkVn8`0D7Kosn>sC_eQ z_=r!8c>>swaEvR76~cJtnE*qMu|^=575AW>GC&yHygP={eI?m~%ZPx$#Jd*NpC$n0 zD^Y!p8pVpiC{%gq6a@)N%A042V_NcZ8?P;qkW4qljce{p3kNKW?zwAV(5!!qJe5=M z0z*&t_w@XEkyQGRvQwaZn@JS1uaO5r*|<>(<@D!Wwu)uDN!3}Fs(MfMeRZvO9e%ev zqQ*6W-srOXR6t;gNgbnXU%YdbPPqGYN;lyZwmjCfowt#_G$doJWkgE=$$U=ji+`*p z$GDUw+pJ^?qwYW;3iP*HO{H$#+sn$XQ#^xeH5WfD5e7qmTTNy?QGJ-sB>tWtm(6=c z$ej1L;!SQ01P`%ENZj$JWKasm_grXr{W4;Xo9c{7sdkyg-J{NYOzI!7 zaS;5Vw+uA(I~L0mYrECfN+iX3T|N!%iT+dg(t3FMuWlb{%bYu|hQ0Qls2`SaVG6Rf zWAXU2T`GojVL7I(R9sC3VHm&lm{OGZdi)tZb=gJRSJY5l%G%)qwk{9UZb_xHS3*#Z z;_nWr2Y~84An$)T@mmb4KtBY3#EH?SR`N!)&>tBIjcM&7RJmsoT4`JdT6B^;G%2YN z2sxtrH#oILeT(szz&)4CXn=zs-a&&IfyBERmV8}1`%ba%d$AP@N=_YBsXvi@zq-i@ zCH!P8#TTcJXDa;mg&t5OeelrS-=LTo4Dz+dwpp7N9kOn}R=EY$_( zsJ?LwTls3)zJCd{^P$7nx@G#9iiyJkKZMw_%eFADZPmM3<8JT#(>|y=iN*JaG1~L@ zJePsrw8$afK5W4n1Wn8_t+mU$?jft;1jGop%?}%%=ZcftXH^aB3MCWT&w`Y3`>RB?FfXZQE z?H>1&;K_R=^$;mgs?bRS$qi*g7-o$7=>FuF?~p*jvg=0#ZLfnNVz30PdGRG*avozp zF8U{`VH7SnXZBp*BQf2@n}nu%gQ|X$jSZl;^VLK>mI^<_X6sgcXH@TK=DmC7VVsZD z!tCzDzxw3qQ!C+BnzgP|N_hvAoe2rDRaq}vP;tl2FwSlkH@`bA2(p*Iy7YXF9Z!$3 z!)qOt%o(;l9t7p~*~!yxJ0-oPk9nT~H6#`%iymyRe^45Mh3V;y6B6>4iPEH;pS9TR zh2Iapg7(3_u9LLDL)3R)uYk<4eu7o@u2Hpp!T5@UR#IbZox!F^9R6<^_i_8{8JWO~I*B+T+zFi6*>RZtAd7=qiJk#M_SXu+{dZ zJ%M@OCJU5{F%N8Mp>&ue@@Dzi=EC*7M{)O}#HMw-NpS|VL`_ilg6GHXh3l_A)F4pm z?InM!xl?a$$_}H$rfy2Ki%M~g0#OJ2Tkzy`wRcfVBUZazrgk~!n->C3Lo=vaRBCo3 zLMrgYH3o@01E};=U7oP2(grQ_L`qt=^HO)4YV0naeUM>~oDpWuLG4yl;{PVmt#;D| zc;o;{tvE?K7W96JS2ak1(W86XIP+!reC7hf0o9ShnYzekdS`#yaL`k%7tXiZ!^aRk zE%MhY^OufDclxvpDlsu+y!W_G+GU){sMAh)Z#IuXl6%k|tU9VwMd$(ZK zByVn50Vls@PCyW*pBI|7*C06-*%3xr5Ye-^OM3Ed!=d%!RcKLAXTSHmXq2{;KS#af zYDA&ml=GC^h){PtfglPb(QDP>)Y+2-A*_K6H6`hDFcXFvQtc{GS%$`Pd|%PCY_!ew zv&p;Y_w&+pPFKiC@Vy~xQ3J$)-V8=~=Lt+Kmb3DEoSX3n>c%go%ttCZtv<~j5m-n} z5Ule4^m`9KF=Y0KMn=XgF{|{wmv8+!K6m|feBTKJ8=I`viEMbQ8Ytp2ap_;bnquN$ zC7|ANCb~&pC}z}evVg|7$O)<< z_msOvJm{%C~bC~Yp zoPvKYH~Lu-Z_UWSukn$Lo#_;xB2V*!QN*p9>&~p(uPtADxjae{*Y8cw&PlrFfHIo^ z*b{4-DDrvGhkgPbg6b#8n`Lp(rZ}4*Z><~y?d#3bZf`t$A9z9IND$>_;y#I}^{YO6 zHsK@)i_~6llmSxoenibI6iT2T5fr5ZjRYa18r*ER zL$mDWT86>+E+^IN^;;6&^74btEsuk#-9v_HVQD?KmjyJnr`wDVgzOTZcQJBWT>rMt zfhh0z_Ful7y*#rPkGV`2@BYLOM19&-x0?Vi*6HfgHaOe!@Q#h~Li*aOH(7mn~eg3*Unt0#tYoh6c>QTS*n}`>zo%Gaw}I)UdCpIXBhTo|$O*W?# z2Lh~;0voZCK;Cx$C$cUlvnj{5!jDK}pl&DenVAGSl|D`l#AxD;Zo}PA^!1z4L_C$5 zl#^*qB(Js12R?I4x6`KCvqaaYjDZFATk|k!P%;L4;zF_OGd2oWGn|oujtf ztMNc}MGkl1GNZPF*SmUwKJc6RgzRa|?K>dAk^r zW0H~>)P{zL5<{1fz}q-@&*r0jA_(AmU^pNFa7_a{;rtI}ZIf$@Ws z+U3Y;B?zUckGi1Ul$l|r-CAbj@?s7|r^V_s7>NnosozeqeZYKm6lOEiBKj-iMWJ3w zPqW);VuhJP>OUj;@!cjAi!M)uR(W#O*Vp&@iC$Wg(2Q;8<~%Q4Q7?QZ0D?5`C_7PA zw-1fy?bcX*^YmnEZ5&ICr{4FwnJ2J_w$2|veuB4f;b6=hK?@_s%t!OomJV#Z!C;V5 z3cvg()DxQM6200T@J^cpMooDYWC}9tHs`HgpuyVAEd)15nn%>|+3Vnb>v6ViIBQ0P z_Y+VZ*eh4BIOXLnZ+pCN{{%1Y_#FEbF{_;S${KkkuJlYc>g#wctatyL<2Qc&+5{dL z)jH&TJEGpG<>Im3nQJuo7T`9xzj4y8JWdq0IzOzE0%|+?cwlsmYn!*ORBw?!gsu%}pbq(ct;H z>9Oe4?ldYWxAm;T!Wwwg5>|$dq%Cg8n}5b`-F9XZ-|l53D3Gv|GaJDUbw9qQrdDr# z+dHtm$mn~1l^W`J^PRC-8ALoPGScB8*@#4IcCyhSQ^e7d_qx)vujuknv8dt-Gev7| zXxmtz9MSurpiLLLyOfUt{^CMaxMZ<_-UK@Tu|EuIohoQsf_1}LhnO}=!C~2|*_p_R za2O6iO6?`-Q+)h7>+G|lsAmQ>8JWfUZ1oa6gRtdx`)^gWMVA;I)l~J^6xTWW&zDQg zJ@toVfCU8#t=&E*W`i>iE9XQXO7b{m>5;9Dm(});cNdTqarpjtSo(_=H|fH z<R{>i|UKF{s2QuOUIxz z(j_1%sYs*JAgMG+=KxAbHzFM>UD9m~-AGDzcgNg4zxRFa{TF%UIWy;+z4uz5wZ6zC z&g2wcDQ^Q-|LaQE-G6hl-`&ijNOmJXd)X<=p@YDc%o%feP+zrc1 zOMO20SiX_~;~Ql#OBMR9we+Kw{#$c6E<_85UE74+FEpBA@ZkExbtSKK;|1&NLLkZD z$39<@C*|QgNG76t$!GQkTW)q@^`28Uw;-Y(c9d1^zuq4+vSty9pPrG<{O|~2y;5mM zvV6~n=}X#Qzm?(8kS$LPwe+K;Q`)+%PS-!c9AzVtJc&iQr~>Xgy42v5FEYrZ{0xpF zv4OwH3{=%jSekIyDQJuNo_K~d5&SLI-gc2|D|tEzrw>IB4$61_btU$SU)*s{0xVWO zeYOt)HdOH2r;RBz-qDZ@oAvE{fWHX-2ZA0 zI(5El$fEYkZFg72o}Qjv<}s42sDydvn-&InLq^i#bDj)zsqMx)5SQAV_P0B?cjSuV z3Im2=;lW|LO? z9Ji|1s@Y$u`fUjPaS(I0?9}xkJ*+{%LsWZzJ4iAq5-eebGhAgz7pkx@rW++B7f?!#z2 z03I3~S=O{SvI+&9=R`idMg;Z}GcGRf2ox0bf|3!-$%;2eAn2yz>U#1riBAg_Pf`GD8s zset#%+gWmm?FIL%1;BS-Kj^uBhGB-68Ato+O9jRqnr%Pt?G zMHm{?Z~?z&kz@kK19d+COjM%*grRORC=(6b=_$Di+K436YbmX3aAm>|0_QMNZ$U;M z$lQg4f^U98RXH{00IID?LC$OZ;>&(M8xN0hZX_c;_ABfspT|l#msbmsp_XRl$Z6qX zS~k+VLZD}@vPIEa{i z(s-uPB8~tQ6=-xRm8syFMDSLt<{23px*p*YU>q6(PI+ts2H+UjH z*Za`oQGBVxUp^JO*Mc(=;pIt%-TyO4WonQ80js{ zTkHzD9H3ZuODB_S%mKZX5F`du%jP>Ur$p^AwT2etKa{FfJbnwJoj=}nZ;pQJ_ra&I zP_ccb9zZRlrIibXVuf25lBV(1Qxo@I>lEg1m)zWrszd5&*n-zoX;JyGF!na~-Ivd4 zcM90VSzkSTnCIZ>(>7M5Q^sz6Gw@7HTyR3;>kqaRnrWF}X`$b8?CZsn^?mEDU3tiAB}T3`xPp_j}nRbd-Ir4HILuBf1=@R@n0aVxi?tue1>D4|j_8BRBxori`u~JFZQDO!^9Tb8|d+RWl3n zFpXSjxY#>5aDQlGoiinzZmiMGmV3PeMm2u2KtzK50o4X%ZG(^Q%KJwud-4?&`?19X zO_!5FX=G|l7ehlOJ|zA0NjbgCsEv0}mTkF1hD8@R?3EHpfsDoA=kv)F5OAw->$`Sr z%~!#fy0SBD^npIM9nr|7J`VdYZGM#SQRP(+?EU(eiL#HTyB#?g1@Aj+k8X-l=ueo} zV2wZ%K0H)O^YUo9ZngL@VP$C1e64ii=aAb*5rwE&ue678QNo} z;b0qd5TROHd1pVAK%v9FAdl*7xzuhN=l(s*y-SEp)e!eR`QUHZw3alrM5|fpD+cny z&mVt=@bHvr%~Q<~Yoa(To{k-9fzOizOd=w$9G|#u#B%9Y$RuEZlwgwmOzq~b6X4sp zYdZ946S4J-WHt4L08QT8uTXJ@y((Fo72zj-=;e9Osz~$eF-Z2k6Zz|H-@g73-Z{=v zPh=@eAq12XpITO4zF#p_%sw=a9ZISXH8nM-`=I+%oZOt>#edjZ`deg`i*1_}Te;mL z6_YsiMyT%9_f(R7<3Tb^YFEiS&%*xO{jv$sI_S1Vd-b;h*JT2T!!XE2=Kw>LNWY8m2bj4~L6C8r%%*Qj2fW0J&>H{2xStLB$z zoP9sq*yM{=q4w}1NR5al99uXqOETb%JqbsO&kQP){jHMJ)d zorCvh%_{eKz3=5?{>3VsNCgKa&AT9e#m4Jm+I63ko9?#~L8psUN?#L^-z0B3&H2W= z-u9VADY>AhppM}skghkn_%RD7pw}YlKOnx(JWCzlYPRzA2G~NZ{Gl`%gI}Fam`qsF zgTj+hINdW0+hiD;FHl(AOw?pzWA^guiK?$fNfxrbX6)-W18K;ya8}}=?X4Ma@1xh# zhvPJ3k={o&zyRTUds|=ZA+$ntVM%gw&)TLV96KB*{oWAc3Ti{ffQ@6L>5QT`(_*-E zopOJR_;ftTd1nm7#*=Fp1IfE{|LvfCH(k&A+3ON~wFR6zjNqW1xfm4-9id=Qx|WL$ zS-%CwN7K4b3pDg?w-kbj%5l;!(z((b>*I&%w)w_|Q{cGl&RH8B7>beKkPY|$!GqI% zz=QOSn}4OBcZV+E)PoomFOa8)KKm!$IZprBbU8Q!tuC8f;^;no%@{%6uE+9b5CUlB zAe+?=$?s+J9eQ!=0XjVpdBHjavi%6W4XpcD(na?wl5jF94Z=*ndM>mFR=r~(o&@*Pma_62Ol*k`?&OWR3R@GI6}MhcZXkn&)8Ok;awC{Sp9*V7BbPi^#;lD=PSm z1R!sphOI(29>WXJbxGl${Uopg^Io2P#3%fr+vdmuJqYlw?m^Y_I4A_kqZLseNTWN` z{Q&Hbq!Xo(<#V5RZ2v%g%I7-6-HUMTMyocH{XMPe-rnZZD^uDIN~AnSd)VJE?AOAspgsj+uR)?;%gfaLv7 z3JoIrd~Q}+3EWkU4S?6N1SjEfx9fMZK@g*pVc)?ZH{{#CIyb`D9Lm0Y%xES>EpZ%&N4H`4Emb(21Dhua9DX({OkCSo+ubK7O*V z>RDx~9rhURFPcGgL?ugF_{C8U-sH@T0qljh!xPha~(gDE7e zLGKhR_Q55{)BRn8vv(^MN@q_o#-lklABIRV1e|P$!Dm3@VwvR?in;F0R!2oUc>^3! zNqWNumn&!e1BT(p5NwtcQW+wM4up{!jtHDQA~sQxoha+)KDuB!r=71ZPQj2@Q0Q%o zNPfN?a+>efYvm&OZE)$&r|#Wb@9vymN~>MN%daz150A@C>XIdpW9C{7X5&SuLLBz} zN5*|}omBSvB5kb1O7B~fY()n6WuN50XM-On^~yL0^?RZU+gHKav zq3q6O9zIipmt7%)g&xqeG=1NV=@^o4l4I~Nt6%cgYaMO*2~GXP`8V#Gu^8_=ew#mORz9n-a65Zt)j0A zu^s>ZHR_Y*mGm%G-G`4#8@tN9^^FaiM~W{DSHAvxiyp>Ety;(55kmc5r`F7jhY4K6 z7%rcVw#C}v1is)-YE7qnE~qHt!9;Ao3F39r!r5;ETdL{EndvBe*(>057d#2c(G%r# z8;)%T@};*lxi4t&@Wp80+)0FEeJbSLFfzqgA=;57Od=4CU5C2f1so??=le_$>WgFZ z^H&~S{|h*Q-0mbW6?{-750%^~aPpZq9?7v+xm=%TX`F!-+fAHu1Zy9|G ztv>pNJWYD2K2;7}6cXcTf ztZA0TShj#q6$Uc7jJ>Hg+5#f#ieGQgKemBrd=haL8{hs2(_A@DF zs!Y(7bxURPxRy^TMxgm|GpjoXt)%x4DK_^z@6*4pPb)WGhjivFdV(f9*AYBqUe(W_ z9#dwb)Dw-V-+RbDpi%dFFMJ^I+uL>(@r-ZDyz5 zl41{=q&G5WRx&0`Vh8AFtghgwtvV+50CIPxcI>dd#bcfaPz&RXcFW1T`t(CXR3@fg zrVUk=eS`Jr%aJxxFIO;^@9Hl^FW0WKesGd>Slo)&to)_SO6*j;H?i_mt;3e`(W}0_ zi+&LZR$|SJ4_(i6DPrO=dP^hmPVV}v&S-kx{U4Scx~@Pq04mK-G^9B-H~J!P>%~)8 zFnwL@_x4G0a@u5&va{*F17g^TIE|%xx~Qfj_Q}c5^~F=QbkQ8uADTZMORtq+g(z7Q zcx!C)e&-o`tZQp)U(YR9fWCBPtT_c|`BV6S;|(`=h3QTt{(@hQ5>>Jg3^a4p-R~r| zwiAq=SK4-luXnhZH@5+T+xScBvi~F5pmOXdA;3_0mW5A__sS8y#~Af>1jVxmN%rBT z@02j$is6>O&S|cbuuivdj#o^`sHkxIENU5YUrNxi15PkAC{-JJOvTEC7kL#oDq^S^t8h_2%08`MSj3k z77uhSOX}{!mR}lbwPk@KR$Dhn&mLNM@X(M(sgMjL+6GN%0Ac&URLR_tS;8*ZJn=3M z4_Y32_lCM-IzZ=sc7tdUbwxUwWP2H<)hYjR41TKv6bTAA^eb(MTK%CH7t^t>?OM< zYg;9SIRcMv8*6NBlIQwGHKYzFsb%K%>3a|BQOTVxZoPy=qiSKMhd^TB3fnZH5P zNN#hfEQX|8&V9n>;DnIQ3}`dv%8GS=oz_^0@yBnC)a9k$^-flM3YShwK0 z{`h5o>bUC7C?PP!sCcvU0suuNK=;HmD2dmX>|NHCwt*o$`j1ia>~z z#?(BSjtDd?+H3So9Pk$5`|%n_+kqjqMkZ3|G1ATWhETdj7`_87ll<;x39!p zb`o39{;0e@^98}a+-CgsLj}a8-_nYncWd40)P!`mG=B1z2`xJ5#Yb7bmw9Kn&jT?|1u6jxwNKocJK(C%H~T{Kk_ksrPE?VHfi*hh}hjdBtb_ zTc77&KW3U#sq>#rb6Hs64_AMA1s5fZATZ$nicvtTok84L)m z*!0PUYxr2%OV#Je?5x39Ckc0T?)>}xepJdz=zRD_ywslLuqpMG8S`nMWIU;|X?9y6AO%|~ zx!l^fA)J)p2)&Q?jHvHl-Vypl$C;a!bRGAkbA?kB(Z%m@xN?{m8W_;L~$%6 zUOtQ5ysR;?MB@1Tvi-GYN(V z69t*Jqfuf@(Ahbe{)9awMAwZ-oZ8EMCrgTE5RrX?qpIvMma7mUWRN2WqL0}^@@zlzHou?;qDnNxK^dX=lY~RfaSaMIbAxlBu%k4_I=C4!nvwu<1 zpW=S!%kSraHyrVT9_t?kV}t$3^rT6h7JA0dNYzP=cDWPIQihv@z} zdolH33cjwu68xn&;?94;hmxE=54r5Ed7hZX&k))X9(wpBd_rL#ol6h(;_mz9b(K)= zpZMhZJQhK)y=8Aux1aQPTZDEwl-cXzE->w1rNcBfXUCY<@M&bx&yyo}O_T*S<<1h>`HzU*!%D4ti=aGT7ED z=`mMi9>Z>K2Zs#)rGh~an8U-B2qc0EQBOY@_23@s(|=KiaADA2hs$6a709O@l^-I! z*3s$gjG!95FtjZ}A4W`KsOv&w!Xpw$|CDpjbQ+)Q8e~p6Gawq-L)+pGMH#yg7nEqt znft_9G2NnEkK3u}tM_!>;S<$<45C1C_b)Hm!oc@u^&C{zntXJtjC|x|`chdIhfM%&Ve8l9&u&`y%ebv|nFO=s!&nqMfj>2CN zVsLu0*nbtRZD9(;#S0AweqAr*7mkRYIe$>;`B3I z1xcFn!O^sViahLSPsNCP-a=SZCVQZ(DuuzGw*3TWXY!`e!F{0QrUaYM;<`c-`%F-Q ziFDgE>*YnT(lg4tg}C8nP2J^F(4Vl4CLjp7@*3@5-S3bc<|A9lh$Y?pFn_vt=?h>m z!1w~4!O0^0Q`KFXaMANp8Y%srI@dqmpWB=o?B;7sL>y=Bp}l*+`0WV{__L+Dw5q4I zcH1H^;yBMl`*?pW*f8n&YPq;>aD;P}r0dED*82zl;ADsKtJ?*Z#|W*di*$TS-tHJ} zYn5+j9R0qr`4?_y(v4We<-0y->0{-uwQF}Lzp?o4&U_UTm+-iYCuDE#O%_q(Dge;# z3s&ku?QYKjGX@3AyIk_Bw}&*#wv*p5Nc+SSId%)#Jh{Z$eeQN+F2!-a8#Faau>tMW zGCI$kM9g{QHO8E`o9&kUqj9?to2LOtMvi?W#fgPHQs>!_U4X!;rR@+A#U#$J^9V6C z=?xCDPn2sF24VGlXB2&Z7W9F3xky1}qKnm>uEMsCM1JXxbOLJxfG<^k>r(G@+mi1K zH?_hfe4naaXD01s%-ArQaiQVh;!Zddmgu&C#I46?J7Fou2>$2}D+m?kE#KwiXCikm zOAR$)=QA*Tp$Egw?=a{E?dBUyz&3+jm3D%x?U>SXZRfJexmV4+q)J8Y@@jJ;iuo7p zJ!N;GTxaC^9Ct)=N!$RvzKNi0uydw8wXZi{?NhyG;ja;s$K_@bw;%d&{%icz=s=p4*!HJ^gupNi|A52yh;yPkOUo&2%l?|S*+h=F-hn{II|8Jh`CM8hC>VGb(noQ2m<~(=FYaxP zr@`^`(55cDJQcP^KQrm!lkq+xFqHsk>^YWF=7`8)Nrhp%6|1LK#MBBUzuKssWEz02 z*k`->E0EM6Vp2QLn>;)sCgoVM;@&k8!{7LN8bv;T1d(l8ys#4?QB17<+P&LMztEMg z%7mkft_MeL)=JN_j591ZdrnDdye)UhpI;&*M0AY3*GM+!>xwg9$UQB)&3s5}Qs+)E z)v}&#rN4Ni5D+fn?;k~DobdxC4mDg7(2AhPG9mY7-e<31 zQa5x2W7}#+pxT{4YwK4_VRqP0QuIC^^V?p)Jd|Zc2>3w{Y6nC86f~!yx=J4$z5ow- zsESU4ttS#veS*q`@?f+h+4tT~lx2u;c5{`yetHD4d{X#^HXaEEBCH8B$=t&k(qdw! zh7_oNXZ&u|RLejWJNz4s&e9N$aRQ9$6Y~=CpOF$p4>auIolCZrq(tm`KjYEp3=jP1 zp17B^^5UaUfiPm)#7OA5J#Q0U*Vnvsg6doL;!b@eE5Y`2zvbVlrs?eiRBSfIN^p;< z#F0Y#CucUSH$jJ!fM2r_p$!z2njb0ErtNom_+ecoVI{`3UQ^>`tLzG;r|Y61!pL6>u@l;=i0e{zvSdfVWJUqR%1q4*>AZfq{? zo%y;i(fqOO?eg-vy7kd2TED0;1&>mj+jW`v_~bFp39V|fxg*is_a)h17V8Kgq~3@R z$b>&mhR_Kk@cPrn9wYo^#d89|@+Od}Rb+vCNQ5)qX;i^pA%L#O3MwrBo3=p|E~(*b=&OnjaGY2&XLMJrHc>@;u?LOHK;URLDpp0Bo!5!sOmzc*eF+H)?C zVE1|^ofn`M!y1~VZb$Mmk@;v+M6zO58*yF+V5)}5d^?Ph#!44kr=-_wuVLMF92TWe zQTNq;Q`Ngd3U~FDGLNafwvA_&F0ExpIQsr*BY|x>n1REIPr)?=;?GZLa&@csb>%Ed zSARCLl{|YIk8a>^N;HNlV!Gyl(3CJ92A&6(lVycMgSmAiOe2y{vOnP2c8x6U?S1|H z-lEyhZ;+bJ#KYO`{csga`j25*kNLnnt;(ljOdD!q4W_daYMH4DotUf600uXDDfQ9M z)&9+{L3;mABX{Eb%Tj$!^`nlC9R0?C2om2JGRJ%O`E+H@=Dcqs?gFp8bqzv~8b=Wm z&fU^o7nv+7q3+zE5%c-PX3kBS!YJ021p9Vp_sp5C%%%xR=c7>QJycC1`!=6{J7^Jn z3vEw&@MgPt*pk324VT6?mQ=A^>lE> z~x1S-Zuz=1X+}*Dm~V4z5DH_8xT_? zfK%k0{nROZ%Bf`e89|4@*^PV>#1uhSy}3~l4xy2RRt$9OzyEN0UEhya;>`Ew>_IAb zr|qQeMI247s_e3~jv!+WD9QP(N;5ePn8&hXrI(PPfDiTuE@%M>jcL$3zC-ef>HIdw|6n@6t4uF|bX3TJ3#T5$)!q z%dp_H)|{EDd1mD-jP92>Aj!8OY;&-b=#jR^B+@8DA_q zKK8@7GU7>6BArjW2&_0z&S3sYD($1;4Cn7TB>QH$o*At5?UgV+c78|?dZhE#SegG{ z+hwgms`G4V*-ID8mEVQcE;se%LXP?-Albu0$phUuQsA;}_mR(fATe=py;r{_=CD25 z@5{1_mij{uS`PM`9GkbhG{8D8Mc%RFYRSHyT0_cncbSP8T9R+b6DA z-%tIDiHpHZt|1bWJ!eA|_8ZNZb}#@)neSer@!-tGS=OjQac<`Quk8tnh9yzh$k@#2 zXsx}0Dou7X%u(#UeV zA96Bi$t~E~H^fuus4))5W^VoEjL38T`STeG%z%0m0Oht;Qk();M^^!F|5ZfqOnK~5=j)mxh&@k$UgNONHqZs(j zauqzer@so^OA`;F=uTOnx<7<|^D$mlP|c z3?qoi^-pJO*2W!}e3AIg+=^z~v?2;qpheU)Ctd2%L4)oqfLc`_>N>znFAti>ufDRV zB)`QDFg&1w-d;$^w8t>sg~I%YxWzTN;h%y|O!d&th!xa>B5UV?R3Nf#hkyO`p{~*? zy49U#YXGXT{@fUrIBHIfS!*U653#)Y&ZkVU`sO=v1$F^w>$QNEfBcN3V!}a`)MEyU z_H4!G)YXm$8$^<^2`rF(>x&<3`^>e>`eGs>4+IS)R=4-Rb$>HKG8@$H#x*(aTRxs~ z=qQmA*h34HO=-HA3FgL+lU2%vl;2*~CDd@3rZ=!K>XaKRJY>rI)B8`QUhAU^P~LJ) zVqSjzo3qQkw72!O3A*5gK#IzxJVBLT_rGlX@huvScq8v*b|hcZX!a7D+$VJm0v-Ck zg-=M3px&C6zrK<6^)@HUhnq!(Vq!JO#P^9pD-E)m=eQ})p4E~=XWgJ%-H$I6`IJ82 zr=v^%2SydF0Nddws4vyh(sBXVZi0#D;>VS)uC5h_*+v#12J?yu2?>b-h{kImU920` zQP$}X9Gq?t=}`xR&&Kgjc4r=67Ni)D#B|_fCPZb6Tn;P2R2}A;8>FzIn3ycr7Z)4v z7la>(h=^Q*C;zH4E6cDzt=CsT*(~Vr z+yx})#dgDuR2Jx!Tmdr!HqOyZ)`5GKXa^naCS!dubZt9cQdnLCCNr!6_Lvza>clAa z@Zr;a3<-BoT6V>MS8mu)B^C1r=OQ5rZrt{@+Io-`8w%anMP)trJ5lc zUzni(fF|O6`f5u5pjr?MXRRi2zK&{H%$b(QbHDaL!qa}+>p*%gbl2y@#Rc>>t=yM@ zqm5~N8T2-9AQqcH9ougmewcGecU)f5LU`3W(eC}aq{>Qpn>otQ`eR^fTok}Ikqb2k zUWJ|a;OljML{uKS=2SN@M?wFJR*IR4-|I`xg^M)@bmO|1S@=}HCVgPazJ@lkZ(YhyNxHM> zqn^zF6Uy@pdP4;BHcjs0qt7dHzDr217D2$H2fjyAx8&nJ(qmXa}0E z9IGvp8o#le-hRJd?|GQ(ue$LJzV=}fYuKBvl|hHm6c^$yP`_Q)bP{BQ+kSQ_;BBu% zW~%oS6$2KlAml3DHQj4IR%?>PuMiHep?s$p`?=ErQkauYNbjosYY=+==8NQw<836Q zF6U&falTf})O+X;EW=$p!13TZ5DyK1uaiddUx><954r@A@r*aaP0ab5YX;eCT*Fi0 z{2K=S7%&zrmp1g6bD*xUlgzuxx%E#Pa_s+qr`E!^a(}+L4b&pgME9-1YizLkbyV2@ zeWfvT@)X;)m42$eJPau`#`uG8qFw?OoIkSVJdVOOQ(ZCy?Ih!;ixwx{Qk0XU_1oN& zSt<_t35BkW+2N`Stsp}ovkoUF3V9X?&xPo3&jT$a)azY9){}lyp?KiJklyo#h;x zh+zyaSaZBSXuB!dc#(HPXL+!360?`8YaSEg3y08mh(2E#{sEQU1)VG>kn!9ce>;3%0Vzf)q1(ES(IcU&(yul^1?8_6^YOwTfSH&$3G!s78?kvC)`~OP0P&;d@>FY9pV`L*;uFa# z@1#9mudIE_1W-)r^D2yl$bE6POr8)kjSl?Y?$iSll`WiDtS^fyn>@v>O`20-D-BSY zM3M`pjeu*7lCs5m28L)tm#o8Jzv8mui~Ie@e+V#pK=HQlBod%VJdW3)E0DD6Y|V%0 z7dt0ltfr0S2h6DZaS&5;s{aV|T`+!eXt#!YGMcs}hi_OBb0#i~nYvO?Uj%Bj>EXs? zL;2`owLV1>1xtA;CkNNji^NDSsDHbkh+8g^U#w4*Lf0n7$s&H1yi&U#{ zaUiG3)7XtBl>Yr#fJM_BTCLZ_Rjp_}&50sEmdBKdKP04}mj2Kg*^V^q>z@kg>y}*^ zw&6L_!+3nyPTu1_S%%e%SK$iTZmuXnQz6qj7wsbSROR|6!-8&1TaDbPM)f4fU(&ks zwL=rKva+HdRld0Y5~AaDNzMOe!Y$5)OTef0JJ0SCqpdha0@fdVlfRys7oSot*t%|K z@*MOJh;$hQ4lU9pD%ljTaW&3_Ht56gj)Z43~Lh* z96)rZbS`T-WTWqb=+&4@#f(E!zeAla__hG>#W(P)OkJ1IbeCNQbM&P8P(L?owie3P zbCK|oSFP_aRHlR^N4oLR^SYy6p41!UhH^>C!Qh?A!yY3r({&`0j}(IX6m*=x&cXd5s6=e_Jk6%aUL1BWx*H86m zYlh$aclZvB9&jD9bAhoqD={sLN9H<|Ue20us3LjUi~r`<$&xdCVHWiG*qxuccQhR@ zgB!gjTF&^??IPcBvU?YMS(piLSl+pe1rj@Z*#GlYz~iNI{KILwSiIzyY`OUpD}n-c z<6_S5os-MQF`qTzep@Za011C^tA(*k>$`JldEcx&V!D&yRWQm}P52u)GDo$}El&4F zDhTgWLR|O~Wx{bsT7X?u2`-n!vjW3sknBgu6G1U)+BRWP&1iW(b6sN7;~x5Tvy~j_ zf!fv^CJAm8^sVp9@d)3|6f_0pr}cbdLkKbtSKwwNtsKd%1oPnZAFTI9CQwcIFq zKeE4G?ZP@nw=Suvde_(%KNmBzpXvWfoij4- zA%9O=d>-(Fzm~R1K&Dj>R$|^7SNgo?k&#M-I!E;JQ8f`^XU~^Vvp!ofTT=z=&$CtE z?{h$DU#vVwH#IU1ay6#>yuAHnVcbQnD!VjP)a5+ZmyJysBaE!+sqdPo^HQm!QTX$Bb2`x2EWT^FU6k4~@_0Nenv~bv?%e8J;7BGSUTefk zE9@wy(?bdD78*vYOMQSPKho;-JFFodlDb99Mzr6T;gUhYLT{go6`;Aa*j2fnZ#N(T)myM%r}`eTlzVV zf%;Gl$;h*q6Y4^G>Z3Yb{^4x!2aZ;zHT6;HX!=SBW)3S=EfgrESS+m(XAs-ycc@D7 zA-q~_yf#wfj$*KDmAX%=8%E>Wf>ZKJ_H;`$m?17Kl54a{)%{4jH%7PuA&Jsl(hM9P zcP_6GH-55&#-9>w5aEmi7t~TB=RpiR>X_dGVr8hO1d%jsAGtfcwNNw6uXzwQ0dSwM zSxI0#NWT(lV5X*;zKf8S!}Vo}#Pz;{7zHs~jY`wTF0GnUZyrLIH%~DDo99oDHqtQh z-He>D(=X=1f%p6)^PU5!8QX3AYk4=n#3;A-ckh3`ult`J^}bI43Dx_el0l);B-*76 zqjWY`I#15p6bWw) ztSe3g2+sGF57jxiM^~f)Mr#eTyo&ldt_h9~=gGX+DG7>*)cqfa>5rlYvuq-d<>~U> zsVO=3dYp}o>$sWuCmIhQ^DMHQ!-yo!e|&>$k7acSe2vA&taT8 zB5{d>e(Vv|eoMquue9mEnHw$ewe*|B%&_*vu7PyThkT2SmH_WNg(+_l#q>yXaWyJ1 z*(=dfDbF<`bs<&0aB=ftxd$)zIrVwN)J>nJ!om8Slh=%ADVePE^oxUEbC#B#$D~V^ z&0xA3C=oJD9rNnN`B(Y!y^e2H;-OQb^|ViS!mgy-Y^$(V#AAdP)x0EfpM~Inf52xW zIbNVhl|#>oU8~iQmN};~T&ojjXMW3AanDBgrpVdY?rGIc?UNUCCM4PBy=FWLD+#Tu zk%y+vXMsJxDqh^gWehiruP)XZ%u5hsHf0h`YLD@D0<*=b! za5i{0@$kqhMnK@lJKRIXiAfFVWB}I!)sHIA;$}mFuEC!^fzhl&-L4RaEsQTA0IeiZq?wXk0=01tISQ z!tv*c!Ka>zo{#2~;f94D3wK`0r@!BHEc54AN=B|f*y!XlxBl*WIsAIgkcKfD;g}zh z5Nxdf+Icj-^u*s#AtOSW$?^5F%wCzSl-hmK;cS;|Fzk-QL}GUVCK1)?R`N>cOP^`+ z=N3w{f^)EpnSRYmC+yB(Wk#*Bn6g3q17DiC<;7JcxXoWi&zA$&TV5_{FU5 z?JSxmX-;h&@!UZ?GlH+v3+D=4Yl_+d(Ij>Ddjg_DosmtK)3@i(S_Le|#f*5Kd#SW6 zDY&qx{rc@xC-Cu`0P|~ah$u}!NA=ATi_nA42%?qGX*?s%%qjs#L8ssHEGKu~PoI(( z=*QF@CYoTs9uv4R4?H{q=>6rn#s?kFMdq4FGWji;xj|7U^Q_71sP##6=-z2>W7p)I zCFV1^lIyHW!52g)Z*hWK%(Z9Sq!f+yR(N@Nn)4^-H;na*d>Y=8F0>bjqDBOz;0cv) zxWCk+M%~*5j;G!1)Z)GB{*$D+veyZ_5|#)*@|t_F<&yFV%-)~BNW^i24_|LNGq9Q+ zq+%mQzxCgMmqrp%B=Gzr4F(Whyiep#z4%Bz6hI5#Y(fy8U|QmYQP$j+rXpvG>qzAT zgtvC>$1wiBQRmDSdn}Ii1`6lc*b56iSYovwWUpj_E9N3!D4XjZc-A3zlY5hN9QeFz zc59{i)xmUonug6rmr9uie9JNI*Db4P2w7>Z3D;T8w$#X$nv$^}Vi)Ej{+pHT)W;K; zhr()*78{?gVj~rm^(_S!K2A;lS#s8_GTgDM0E?K)vjB@;ttE$>$SC!snr|Ql&T==c zP#bob&t#C4NZBtSXvZ(uElTZI$008<8_{*J#=-Jdmn=j&gmL+D-f)Ze{aJ|ZCRIH4 zTh8~^!F~2mP|K$d)th9$FC^)0K%oPZC&$`-Wb&4d{L8CoHVl}YBpd?y34PbHB3wj- zjISmhv6fRUH@m-_b@O5kx*nW>ZdPgN1m}_nc|#aAl;|q2kvF!<#!&>?!<{7bPR{1MpOCv zG}So}ML9FCmIW_98}YaQz>4mIUK?UEJtsHqMV^Vf1om9*h-~@IW}c@mRX7WocmqdD z#krfwG@55(=FshZ-t&|xpPw}!@K+6&_YcMgO5c^%5%ClD@gmoG1ta0GwxSEV`2|nz znIjRx$zN$neCXFB`sm5}Kb#jXu4U?d>p3+9TM8mEq&cMO4@ZBVBSyWc# zOCeSl@r!!fj~ocMb0Mxwfo(^LLE&Wy^X$-8D69l$$SSa7_}P`zF!rZgG#5(NBV#FI zrYu$a(uA7#UX%FTyO0=DY)B3E)#ls`&VSV#AZzt5ToiYw-sEo7{s9nFTA z66~ndQ^YAS6)Ary+WUNE-pNocXPq$`&woNkHCbQ(qPa;T1rt^E_BmuwiVf`4Hz&6m z)QpdEon@KUB261uYAyYbvLeLSFrY`$^9GAWTSGrgpS;z$50Bf_$+5X@cCHv;L-7{yW^uJ2gkOvz3R)NsG zv5<>}6mHS7+V-ICxY&-k6|@^e%}g^X#gEUb`?&QCvfcSJYK8&19n?1iE2CaGF>RvZ zVwnu!SL>ZLq*D;NR5VeOM_q56a-?2W6cxkjb7bSXz+aqadL~rp_+k+!1N=3jhiv3~+;h>cli;0YVqzd6qnvGCSCn2-)$P3j+ z5K$D+PhG0WQ-1+N>;^(ux-tkpMVP#8-VqGidiUgM4KpkWqMPL?8yh`~HWU@mJ*-@4 zfOt8#t*7WurvaAWM}{)X>I2);p>orIA83IBwIhB zoAsO)yLL+iC;PM*53|7gb3?7DyGQMhs3Dxj}Mo1AK7n+XA2u-IeU{_#uR%!!S*?M zO0k(yES{#e5VZExhF&g}pZZd8-g&Qap!*A3898H+o#jiP7cwvi7U40^jFd)6`9mR9 zjHp!&t%$tO+c4cG=~Jy*ToG3jRbgnV2!jq}{e8l?oxCR7wkP6jN%e^@%%WDtxy^EK zS1fx6dg@q^Q~I)u_IGb_jQ8hoi?ruI4xLp}3^$&*xLyi+Yx}Fz##K9Ax7XVSm%uu) zEjrmZNuxeDoG5p^9aYSDrFq zg@y#=tTus}7MG#XpL)5OKD<}&EkhZnfGJE7M;kx&-dIG&B#5V8GJpHm zhv*Z+#LbKShCx@Yg@@lcR6#PfXEC;{}&hP$*!PXv< zhFEZd6yTtT8!i8ViRmoylWC5lr=ZE-@YH-^9vs(pXZ2l`+?_A$rGH4nPYHUBBj2s_ zDgOYqxgJQbHy~K&V(}#{$(yG|&h!MJV!p&}Us9U*q=Gl5nx9u4aei|5dsv9rPz1Ow z6ZHh%cVilFl$p&D#UyPaoFQFlCfLO>;WtWY$`^?6oLdiIwa;yWx86$=t+Bal1o;mg zZYSP{C$^ihW`)7O^GFTP_=+E&JS(bfnVlx#9F^>=$0c{4AqT(*s<`613_jTdsd&i-scZl{>4A%e< zEo+76E&a5JUzTj(9)(TR&Z3s$VXs8|Bcd`EQ6*|&A19XW{b^HK$z#Chv-=F@bGEX# z#vV^`mf4eA&7aQ(y%Y03QmF14rA0-(cVLr4g|5|$PQW0bTk(EwCE#;m?(^qipV`-5 z5G{7+*`FTr+)LGftl+Ri3wtN4;s!QW}V)f)@ z-xTYN3#xk*^Np=cPz`~%(z5zn63Y_3u72EYJW;-dO;{cpFlIkprcGzo=>&{Q&Zk?f z?=E&(E$7*J9QWc}Wk%`rABKrawn(YmuoG!UmW+iynx>z8lKD!Oaj<_#p2=kw3%3-y zpW;o9MvX=Rfy^Zpd}|mKSpRWR7#aG9I_0)rb@(Q~p}M8|VQF5}WLZhMShsK6MBKyHN1IU%XDuTztOgVOXfrW0=!L>B{+YdAfhJevGbY4iQeI{h^%9UtZEM2B5ra5xthp1`Xi=~g99Pa0;(LO z(8e?^5|}f35BOSnQ0B)6=OcRHLh#oJLRo94L~~7gb{`dTw!a!OZ($AK?XE7Pu7~$V z!7RP5NwZ&hp5j_6PGaKN1x&lNH;t!~zMa_&DOIg@#<39lxgN0El%En@w)15hHs9nK z5mM!l*7T9<;yup1_yn)#{Y(+5{1;wK4*B)#c+k=7rz>wE1@@i^pdUE^>^{=UDKVgP z7=YB#@bDCkA_PlT;O!0hv_xFIN7`ObPg~%QlgQRc*-b{38t^se7V* zj62Uyug86U&!qXo0mV-h+#gaEpYy(1<#zlMEpV4bDe{T0U5u0!+Q* zZO5gMP~_q5yr;KD+X60qu+$de*YRK1VM5-y7*U3yIBDErH@Z4nE>dl3_<2-u7kZDl zL_a*uen}XV&wVE=?w>m3XR~M|pNByG%D@n3g`U>m6Iy>x;zzo0x4Z&CZ!S*HS z^(+i*CBog--*0!qk^{ASQ3pRN{v9|+)$V^yAKCBVNp27ih)z;4{ushi@(Y89d$(BV z_OHt)9dIpFZ|)vZ`==&ENv=a8Td$6jT~+E$ z2au|2;6MRLl+5K=vAQq~O+F3;#gd`6RJ9@`moE`!6a}WgJ<#0tbF=6@;t1gIBG>%U zhFctwn8!&?Djk7qesIw!L7X>8Pqwui+&PD)*=KBF+grew12ksaM>n7jL1$pcHT!KQ zUNQERMM*(Ei!@yM@*JaqiG{>dcJPuxJhOhN}Wp~gdY0B<`qR9H<*!l*utNYS6U{m*zY znA`PID2%U-S0m6OG^Ud?vCrw_&`_^uCQ*2Nvgx|9qn;l@uw;yKyZCpNHZ@ouLAwjM zAa<{B(*aDZI6Jf&!-@`gLM9|w&S1O|$~=Am;)E*0KGar*k`-8jH&7Po>D3jd^+4vy zk2_%7HUu1G0AZMTIt*->(tu1`K!sBJvg`VV`7pg2Y{i*a9Fd+a8|*pA41Z5FoOw_& z0W!fsf6qK4Oa+I%X_Aw@_L(F$!-|L@Zt0;!ywLId$IV=U%{+Y`)l=lqMAfJB8ELpQ z=8D7N&xib*$*37_QG)m>B%hCe=?U!rt$^2?K4M<_{8k3Bg7Cc?JbTGbic&c9ZXs|r z)a<=vh%T>-pwVq>F)^~v`vC{iXk)=)qWinMlo_jtM*Ho(VFwj;^EUU(z5F3z&3da} z=53bxFFRD)aTzitzHg}+4s&>#7DmkI?j2CrUw@R0A=j;i?|7S_ZlLOOi>8v0-$%Nc z|NY5sRjKsKOk|~i_?Xcee&@)Jl6|@1IEIl+5;R%jr9TX?9ky-+J7qMzfegKBYwdoT zC6IxPOTNQWl2od>woPQZON{MZF4LfycR#~hdi&uL6H>a{*R$5*dcFZ3!I@-B<$e?F zgc&aYo0_c97d=mCdEL%?LpVtL@T4at1>9lT<%A~lfO+7Zr{vfRGDdDQ_#^Mk$i&ye z!FD8kQvbplUi*6N4Yb#+a=lJoB*gARs1{mU%R4IK#qJ->C)XI(du%9yFJgX>SfgpL`rHmagCpqHNq7!Qk7*F8 zzPKB)c2{$H!I?)0pvoA z0{!dX?@ol7CXw^3jPlKf1gqqp6cIs$U>b%9pWrywN6kvUD&uoi}N`UOaRQ z;nxA1S;X(wTgv{1>Y!d!dUS$RkwE*)zuYc%s~fNp)G*=Fl33v1Do*R!RRBB9d3yr@ zR%z0Lg!gJMEt0doSASTKF?Ke~8RqbNGJblAX{Hr9q&Hxr636zhPbEKXBfEHXvUf_c z9#71>v5Q0%3*w>=e{myBHmkdrNexoPO&6mWN|>s%-Y5kz&H{}I(#a0*%mcjZrh}DM z89!LK5eWr3I|qk9#;{OGc$(!^Ug@>y78eDKUZ=0yND;N`&Di-r{Fo>uf$4?-gjJ+} z3`JOwgmq!tv#UvnC3Dbrmp1ivUuQep)n&bF1qd68;VYJg5$WJ+%u5rSb4yuta(zz; ziW(cR<8Nlo0K#&z)!o^WTNFfUu2_SI6Jm_*9o$flUskhm5+3Dkmbu+b4<7L8+{kQq zkt2;+zRk`o5_rokc`Xao!(XZopdX(LV|x||dKaKlu z@)xQ7=v92AD&nraD~^4PW3Ff3&zZl~V=Az#25O~?IM<28$sD2pC)tzVIagYW@xW!V zsJs{9s_GPHMgM~=rsj;73Qk#`>_p-rsMv?9q*?OuUxWsWfDo!kCRkV!lM|{-~1yI zicZ}xVUk-FbH#U?3W1fjs+QJad8Pzhk`)JEo*bU)($8}DPiV&yNzYG#)HH1D_Y_jcz@i%3`~NRLN+;x16%mFo?L_dY2r#IDLU zNH^J%xRnQq*e%!{F*ZNm=HJ$EjCQL`Ky4bimR&^Cv<{p-ommi6_`@r;ImlMU$Cn!2 z6fNPG3>In9eFn^EL74<6nLjVb>LrqP*x1U07{{*K;oj;>1_xDc-q;_uvz-=XrTnOgD8TCt? z05_q#Q;_6p5i5ZjOa8Z1^%smuE6V^6Z&tYyv{yLh&kL5ZimTyKmYgL!WG zeo9Jt01?=5`};0_DRbf7=C>+C%QeKw}e;%xw7{3 z2oV*33mJ!PbYiwWFwA{4)xpwsuKhYi2?(!X^*MIh1cABNd5R?P1F30w63>QN04&>K zbM^J3qq4^UkbIV|^BtrZ^Nv=#LGsEVkOfN!SJ+iFmhkD>Vtb;|?^DV2irZP-ZA%_3 z22fUu`hyL5TYCTOVHtJtYyCa4_^dYyEd)s3GvEqQA03^O*lCYx%kkD*n(^PxRGRHs zLKx~~AQtYBtV&$~429a$US9~hoMZvgsqpa-E%}=!hh4kRUUfV$&;zIm<0fSv{tbLk4B%vGcXTUNe56}*&6*;nCR(e zstp&ZAKJZ%2k2Nd1Ey#)Me*&D2S>FrZ(MW?49m)EngJ2F=@RjS)|RQ-RKPD8kcR6o z$MBdv{HT4rG3?dww!jG5H`~!)co_5ZKRR2d`2;B`plz=D1X240v4!Y5(GPM9YyGj* zqkTt(#eUH|0pF2lnH^))LQ)J@fxWtJDJ>=Cybf=&7)j~#l>$G-Yv;&Q)LntnMoJ=BPJO-J#S%E7%q{dmP z0$z-=U(`EeO59T|H=Zai?6PD(d*QfsGQS31oa)<;=cuF}`bQ#tx{h_>)A`HVPhXtX zZ_U0~5_}#+d7AQjgXe~&Hv`<|p?V?OAm-f2-cI0>JiRqHdxR<#1PndZ0ofFftbl8@ z89ll%mIh?jCfuX;9IzL>dpNP-xg`Vkg#6(w203z70q=wQ{Z3}ddGOv)2`dIS5t5`x z3(idJ+nr>-h0g){pV~8r`^JmZ2mP3#sj1Icq_gjAf!E*%yqiCt<+bG^-k1Py)bW)( zDXdQ)EN3f(IV~2+$yT1kmcxo^mf}fGx6(5);cf=w^~{M ze2wp4t4votogOh+`?N!2qw4<;l*f#VG^Z(+I*7Z%Vh4Vdz~*RJ~3S)jpc>7<8 z5vi#vH|8AVHgNzZw1+8TF%w8DKdfT<_QP}Tn(o4}{1BP_=zgAz`1r%^qmJ=rtyTVJ zmUmhW=p@C~1?<=xPZwh;0!&SEM=WQZ z?KwpZ9bTC%7&MN?VX!>G22R{Lbe zABDO$4;Rl%K6M69dWzfLFcHfZ@a?b1VOKtnI2TQ)c_)Cey653Ot;?sAAr>a+kS3fxE zviG;WK{vcsP>>PY|Fp0a4{3fgar89%VQbEtNeU^QR)3%qsP)NB zN7E)4szF6SzX&WsQ}x5HFtcF8*O%IXJf5aWf9@UvJgPp7Bh|1GZO7X<#=XT}%KJt` z1uY3$0_8m1l>bsH*u5!I3Lzb=<2j?C`Ql$sOqfZ|<`gJhKrCktVw(IyaUtEp(yjyV z0=abHZ7C29IKo3AX}}RC0fMy{VnY_BvUZx@P=3h!BgQuAf+7Kmo9S zWGA`0OoA333KK!nPgZKM0RY3t}UGdG^2l?AM&?MsWzfmehwmGB0Yx}l0LsPY&~BKp4^nsbzQx-pJyNE z{L|GlfiLrrf9YIc^gCGc_GG%MsjS`gBiA{`S7dg9`t!&F4qKZZT)`{QL@*~hk6!tq zGO6>KO9t#Zo3%4KQ?FErN6YnJq1K0i0L>72juZdNB&-N3J?3p(yr2pLZOai@n z)$Zy(DV}Xs&Zb%3W%zsX<1-yjilG>ZZ0P+O=w(Yt_*!RpwWjfUE#8g zeIKvQ$Q3V|8wrYubB*=|HP$OSLqE@|LDfrpD3aBieXqYv`p2JU$f{4py;fLD)2yya zX4s?&GxtfZukK?NyCP7mjb?`@bk5oc705y#tU<}wyX#-Nr&Dg5_pZRUM!Z1~)tKU%Q)lh%Do01vnEc4qoO{%zR?9*k)z-dPuYH9z$zbyXa zCu!ExvNNR-w#~e#x8y`ol0pftxwd{HyR+MmLjz5U0<3vogNHi*6Nh^RR9PIDM%tP? z!9QQ=H5%^^TAgJA-P)s&@em;US*tysIJ5p`RyKg7D!?{yVqS@+e{s3&vV(S*4Aj+3_tj3X zm=UBjV(xtvBpp{igD4YvT2Qm1BwpKJE8W~*?oT%eL^L~&VR)7K4v56g&6)xWBK92u zpMhE0IU{JZ#n}=uCUJK$Dmd8dFFi*VuzcAVtGfzMuYO;0WwoHyb!1_-7|O!aYaJgkjo ztVtOlDujwsEy)}Hxy1cp+NWhh_!76Uzmmpb1HA-?+LZis;}L3NhGs#$H%!ppRz|ER zX#XdnG(Wkg!0@KR&BWcjxZv8=}Kg)TVGaZCzF&kbXnWwp@%W*om&(FUb`;Fp+Nw4WA# z>(5-`9Bxl*JQ^AMJ$k~EL5^;P=Pdp680oJu;>yzQFHb}Sc3P{jbMEmWIo?+j8#dp5 zbf3$A@kqdgNRVPW4z+h7#6FujNvit?(nZ@!L5mM-L{Bajktsy;6PM>+n?2o)L1m90 z@ZXlZ51LS12WZ1Zy!buz{RCdy`O2(BsmduXl5c96t~=1nr5PuD<=(z`-&8>h+8a{d z(K`sNOwd&m39POB5jki@xgUm>qp zO;e;h`o&HDG=2ie8#u1sO*8=zsVjF!;;QQE zYPRas5q{7ql5pQiR;mH$*vWwbSFerCjJoxH%B7-kj6 z(fbm1O{Fk!Y8>VhR3b!DjNgyhHy#u{I> zqMWX>(zn;K3(yA+m-;ltBNfvGmKx;Rn(fwmrs3!^7gSYJbWa*o_RHO^C5y@<260N5 zc8!=>XwrDTwbEB-z|(y3r`rcbQT-wk1zt zYE>h%h*15B~2dQ?_j-`?yitZd@8nl1$dDqc$g?7I{-3nwJq)mviXTL0u%M*1o zTJM|U*caq;r?saCN0PEURof-M(OA|^z_Pjw@ScxJ{u=1JoE)C$+{|Q|Zl8|BvYSHL zDB1i(gFSq;W&c7c*^z zTeX66L6{jX$O)II6IGQPIhfXMe9|F2*ptI9?^%spRSr)xxqL7B`$A zQs;ykb;@KEtMxTj(;Qm!i6%SVAet=D5P!M%S!kIyRZc+1NjM~en|{TrwHU_D0o~qI zZj&Z-WtgEorM|jzP08{fi|b**XS|^HN5mLJOO%{JU-QBvA zQVRiBYlPXP5c=`^h@k;`>r{z03q7m#6NVygPD%HD{joW88f&kjNG*5ultfuN^A9&N z<)*AVmk+rzJO4=GveyE20@3r$8}>Tn8SMHa%Qxagl9g;^|5NItjBAOcnu|S_o+ZwW zcB4F)sUET}n65b=*VgCwI}w@e>wXn*F2n;(a1u4x5vS!YZ>ybkP5JLT%)Y1i<^8F~ zlLIMNPxFld8=?*ePRqBeHoFE#k%^50lw=QOuBe2VgHA+^$k6K&cEy&y->&bHt!TX1 z&Q%r3ewL#)Zj{Wq8y>>%)PFHeA0^G1q~L38;RBe~)FC*S`@ zei}r5!cpT#(qZ%D|Av{|9~H+DIVw|Hw|)DC(dvPx)PJ$XvvFB4x%Wux`gw0-9Q*vH zch)@8Y5AWgS6*+P;iT;oUb=#tYJJOOk%8N3=-Mj>E>1f%fYYWP`6}C)v zX1G&<(6L=dEmgwCqC~wgDYr~_7+&cP8`tC{y`So`1pXy(t7ttxonbdpDd!w}{~Kxx z5&YT`JK(cD?4%Rv@gWYYTad-beyLKkGKGJ6Y%l3F+?eFP5}pZ8vrBfrqUaj(I__m^o67;t6d}#HK-~t#L5G z@PpJvOG2YVAq^uO;gkXlsWZU)P)H*6Ae+c$``#X?+7AY<*KbV4<81cSDx}|Xybb>M z-0;>;6;-Q+Ec6PD77Q^-Uz@V_S8=-5%#-{KHiR}fslBq&RmtsNwH8l>soM2diE?e0 z)FwJG77p23Y-_iAs+PZHb{}(W9lmh?%Q{HBb;UE9NzFfC2r|wLMe)U@F zDl#^d@ZMGBk0ofvEIw>G-Dld5&o)3#v@Wx(J5L}$N|=$(k8hv9m5DTEmF$g68w>8o z17@exBno{vw;5Kh`C5#`yR|zl%J+9kI`Z&rKFAFDEpo-<9d7d6y&?{!~;^ zpJ0sSQzePlNeG0lFXmg6=d{aja<@Yk)k`ggk|Wj;10`%nBXFB)Xg)(oZPyE~FA4DT zr2NY9O{exoi(Nn42~g$Wf@)(hYTK;sZsKq2tr$G8h4rr2=l^RUNv_>b5oo)&2ts&T zpVm#t_`%ZJU2AEw?`{ z+kF)9;LI)E$0cFNl*TEcgG0vvOB%FR@%n!?+y-VCbpEN+JhnhA1zUSEh)%@r_pjI87``-YpNj~7K zHK9!i=d51rPN6-x1$Tn)P-gb&Wb_rYcDt9h*UcK@Kss-|(P-M7#+@F(_c=669eSF; z`uwv14jhxfN9R!qN`NHbcLS_u4GI7$jDE|Y(bI%U0{p+BaPY6=S-!R8PpimoKpWbW z3EYnxj`!eAXZrw0I0(4H*7npweFF^w@Fc;#kPZXRt_u*&p$n>7*W z8=yi=4lh}DakQkl&^iiiMQ8wsDXP-2ua_q3_k9>AdtGeQA$Xmxj+W?v01Q)JUfz7S z9cqXUx?3?Lsa%>ePsmc~;0HrM9C7&+NAo$)?Q-v~QC^zJ6&8XgYBUq2nB9X+al`L^ z^=J7B_}s|=DCF<%ZqaHh&w&Zp$i2T?7cwohoJa(aN5d(6`C}3=HrAu;sI72J}`i_jfw|M^o>SR zzAOk(mlLrV1TYe_8U@u^k8_If_E-K2^s$|<`HBHUHSZH)$-!p|P-pX_BD{ORltz@_p4)aR!Ah`7@BfsmxBRNRsN zwaR^80z)v-JQUZF>%UI@oR0B+KNWgb1iXZHa5&p6mR+|AwO0bO?)=dN#>Y_F(oToW zOlMBMYXBqZ-RWPcP{B^hU$Nd%jJnXn_Pf23JL7O&7gHB)^7jhaK7v~1EoUJSukBE_ zDxbT5pv?^W0ELO}Gj2dYfSC!tx9qt8bNln7{54z@IWCV~o)z5w8h13Im;vYrj$*}vgE8eA7Ad?pAAN^ zK#NbE6>!^|u>DRBAp*?J5-1@hah*q!6+%lWaDTw&$!L%SBpcr(rq;TD)M_`GjuG)w z@&z7df$_i2kCBMWh$u4R*mji$zf1F@q1q(7t>Gfe$E++8^RGrbX+5SdMTxQiI%)oA z-!=(Na6LQ(HXmyJ5BdW?H>aV#JfO#?(oRCa<|oB-z9Dy#@h@~{Wo1PJQ$2&v^#Z4N zG|PA0op@;*!vA!CbvPwU;Wnu#7n$K8akKf6XA1cBkUep8cPE08ND@K?w?I}(CqOsl~$%fm=_9HLUeZ|$^xlt81z>Df*pKgUz``usc=?6O}Gl?=WcA^7R16@YVPmnZyFX`m6B z^brQ~s=ZH-r0kf4^@sTx7Y2v4IYK*52c#T3_+zwXUW;R(@~fODCbx=$7y4nSY-xqE zzq8m_ts+GdVdDgZX6fB1_F5#0kRW69*ja2+&I7CuXo|jmp5lJ}r_L~fhR-Z{9T;`~ z_M6|jq)U&}k~*A#CL?bfWz3!<4lmQW1xHeHt;Jv|Dez~H3@n5S2Ih@d@~KQ<77|z7 zT`u|JXpiEgeq^`^`r)fKc5nhQEH5ul$INyo3cwzD+@9@vwy6A+O};P{LI<|V?vE6` zT5yVwIqNbA?bQA7{}TDFms^?`t0sMzjtVlpG-AIbEu!i2wY9Z1tswn7&5vO6d^l_T zfJ!eKgB%M>x*xRS-$1|wPB=vozdD>=Mc%7DUXk%1S1~1fK1n3~;3P|QO3Bg=tiz(T ztX{B3GJ(3d5VBBjM--?3i18q&8P^fxEw@?gddD{(j{vBNGd{%Fuqz(t;ZD+P4dc_@ zYTn8ehPZUFeP9dUvnR+VL+m7>MUE=%@XC{n?s8*471bpCg3B#V&cQqbH~(7~KnA@1 z>`l3?3#Xy5`#kaRcXus77rfgJyrm-E)EH`-$s68Zy*@Wut0koCinegwD=KiHhO5&C zEczuA2PsN?>3bFeyoCrk@LEs+(%y%I9-c~{2qE|#Nzz$ts-2)7f%g@4?{|H1aVkSR z`M9lm$elVOAq0_zz>k51yYFf|c(;MTS1=)0bRuwtU$!aOa-rP+`sMw`jn;6v@4#$y zUe`9^_G=bdhku~EgyoAu4 zKt_4P+8_1a-|@ITD!!WuZm>3ou3X|)5EF7^AcBCu$=5HC(}Ea7C11Agp)mRVR2z!b zB7ggYu3!2lkUHyKHV{&2ux_FBMRpKpx+-Jn-S@*oi(3>XNJkT+!pujn=6ThtjDkN4 zg$WT<`j%9A2|2>R;>9hKO`v0gH_;~h@w*ez2jg-3Fvy#zG$`e_b_(ew1YX=MGsiL{ zyI`kAtQqYTnHD`Q`&XzQG9iBw8jKX&MK7f?x9Zf-Pg5WZuvXhbfgukR%bI%K$>)~I z!b3FrKCsQ8(8>Y*KD&>=auqace&tkbUy0a+>e%8Z+(%p*gitUqzCE<{Fk$BU=zyLpaN2{FLT-1E-gn#K9^Qw6HfzIo&I=N`oZ4P`MT|iiM$+yZkXVVsK)NxJ_OI*k({DY@B1z6lGV;L^oq^)1S z9uxKm?+Ml(L2)7Sl0Oyr#}j0Eq8^^$+JQFA#}n8nDh@!&uh~|s5}HghlylW84SGRH z`r4lAH8C-9_X8&Lu-*{!ijX-&H#1rp{vs}`l3 zPgop4Ls8BXSD061bCrvf0`X??05~JLHc&sQy;K}vLteAl{5jMU9N`*dZYMA0KdLNx!ecf-K%%!S;GEd z;IiEm^R)f+!Qzl*2!3hNbtJVY|9 zEu5N5BoV!&2+&>vIsk=c2*Ue2?)f=0!-YeM(srjq4a>1)-yFqyEA920)Aji>k%i$e zyvHE#5(g@uFwl7v|F+Gb+qQUee$M7}wD|RxE1Cgz4PGjTxd}rf;vruT$;Xg46Ze4D zKBESE_*tUi`1sg543|aZcr2A`jM@KVHwx+H(|Vv&&13TE$w`nyb>d99uI?CI5==WI zo4+SNB4>}d8P!aw`jm!&St{Z7Jc{@)ioglzCX6DR!cH@JzCE0ryYPEmE#ey27Uv&( zi(rI~`ymJa52u5m2DJOou@HL;3_`Y>nOSQPmQTm*=x0_&2EDKhg2QNDJ>P1`G&%XT zf3(y*qhWvx!gG#S*tB`4p=1Qr0Dz^BuMAFpW{-r3YR62wzZ({6GuS8qcKuvMj$X2qDJm?lpH~eFEb_bH!)=vfWrzRG5p%* zijj|j8|zDt#7Z|Sz^dUyiAF(m<#vOEhZh$>vJkLMl8d`!+rS$Zi8y@kL*x)v(8(GW zD)JUJUrq0cRR)R-rRVD%Ff3JeVEbu+`to8imz{WyQTC4?{V%e(koRn18MgqS_ejP2 zV>{ac8Ov++{Od}E{EJs_#%14E*(E^`y1y`+(^FQ6@w^+fIZ5uWi^dagM6LQhs?Zg< z2V*3A+9GX71mRe0-sn zkRz<#^Z0p~w4ys~XW#4AnL>pQFP>$sFAS@mumo7eIxKJAauFcUSGYtNqSew-=S!gY zIJLc2MeIIjaauvit9?UMiCb*WqM!Ttp+Wx!ffC!4vVJoD= z6!AEnaC_}M#0B%v+an^!j|UZ9P_G|}7MCCru`kr6r!1m(6Ham0V2sOWjL@o(x%YIg z8=ZL!Vt^iZvmp8n{TR0Qnzt>GzvV@yltf{KxCg%Z7IGi5{WgcW9|{SpgbBnfsXgs^ zm*(RO2&;I1Aqf_2|3i{*tUiJT1|FA@?l2ZE4crgoop6p7-1XT?!zL8OY;~0cu%HTYbO5mqLY3=62>wEh3QnvMKi`y{8NN2051zaUUJ&P$ zzUd^&LpYS-mGJJK9m*2-Hrhi#BeKwHb^DSDO$hewPaC^Ui55hD;?4;f-JNK4Jgu=9 z@!QIsG)2Ax2v89ACI%?O_|zfK>zWZ~^9R&@pe3b}&nUGdzWBqa)u7k%Nvz8$mbID?R)sT>>=e~5H@Ue2z7Bn%JAiK}~tjyJ^T`Z!Uz8BU0c zS#uM0pJU9d@;GVvue*V%pc?H^r``3ySCE?4!*!d0We1N00y@aJ_-|HaiFJOPwzbyE znebxR4wQ><~Jb1M<&j zkGDB~>)+<8@~>`km2fg&_K@GuXL%m?H^M?PKVR&TnK(M~6@~#lLTXv)7_kA0a>Y8^ zk3BtQs`XPaPKp0J6lZ3p_ZVFV?h8d7z;*Aks+RlW3nX&(s21i`80OCgf#hd3{0ZEO za2y>MVdr<7NI(u2LA{BPh6HcnBxKx;6Y?m|-JR--6$#uP>nt4?oLs-BLxgy~8%hb1 zBy|V(CSnNqxU_kSHuBW@Grg_Ag52agqrTgH%4SE_#l0~O`KpG*Pw-#ii-Peb4GelZ zC}ZIP($ROtGOfnG4~x-9!9crYt0{X#1>-X#(V^MwWa-Jk3)1CTmKQs=QV@^Z&BUfh zzynp6F))34xV_Vm$3kpm{wgt?Llo$=dU~%Xhnw(gxEU_*O>5n${Mq{+cNY(B+ zX#~cYvnmrgA00{IRZl#&Et9B}WO$kRAQX$>GR>EoYRmj5aU_yX{D}yp%@zLnu_o_O zUO+d-oSql?Bh=-6=+e#f8JK8s1#p3SNy6n%9_`Fp_}xZ?`rI!93H5@Iq<1mkR?mIk z;|2}X?wAD*u9DG&`v_|;%94w!{w&#?ziWYmKe7W7JD2(E~{?+r&D(y=!Y&f+p+y&R?e|`;$ z2s<8cBckX#w49MHFcu7mc&XJYvM3pBuvxUShk1xB{}#uO?)tb+F*CtkVU<_AU4Bc) zd3{YR)@s5DW%OJp z{F~AG9ZEN7Qwkhn{pe)xf7<@_4>v}NB4jG~kvY*Bg1P{TrPTjEJb{pHDtNA3r}f(} zS8HvHZr6pKrM{kBkn?%SB1H}m+TwkHZ}9Q#GFswyyBL>w@o#d`g;2I`xzXPA6a4JK zW2mJ?V8m8bRFvA~Vzb`>WTH7jss&@Xc|OqdAY$2N{dKx5kyJR?$ahZl{<+A03x4Gy zvGcd@1JV~RXXWSt!kXJ6XG?wA za^{YU9)ZuLeVRV_#RMiNJ+hBC=%lF=MW3nCZ_)9H;y58yBs;EsQr+~2oWoi{`%I+G zzDgLwi@|7{n%1rP$utCS%6x;2AZ4UJnTmsvc9<=ctW4l8{NWWzfR}geKeUARp8x+#~f{8s;j|%M2ss)GhE~1W5FHx8JCG zi5`5XGt>7R?v333&|O#g8oq0m7^SiIX_Xc$Xapi!&(h2v=$UIr@?loD#=MfKY;ZGa zF^Hij%7ySC^mjgI+^r!s&p*}sS(vfT%GJeH0@9$qs7p}!l%U;2B>x<>BeW|x zn(e8>q}xUhMWoxWH7sIa!WTMpaH6;WUdD|4|Hn)C))J z00kWfJN`JwRgJ8q9yDVLrxP^lDWO|G`>cooROr~eR3c;gvIHs2g6Jv{I(il{qgFNM zCT-y>p)I(mQ(;G#-mHefCz4nWpz|C-U2{bWVm>n7=#Nfutc3GyA<`kf_Y$Od1MN_V ziCvgwP2sYTQDzq0Q5Tm6r`4+U ztEbA*bZ{l$%ix75gt>3w|GN9~Xe$4=-Mu$LnKhW_q{$pI3mH;|uQIcR%8;4Z$W*9A zrl@30NW4H7TY>VpUW5A=_}zZ*4(VnzM^82@i%mH+?W){jk?cwIpE+$w2U?Cyah zALs5-?%US_2<2^nMk3qu8XjTJ*x`?JpVLE@t&JorOUYHE-celDTzM)@xza<;FLbSK zbkf=y%+G0bAVtbReZQN#hje2&VN&4oOHcp@%aZA+A@YaP(yC?hmv8#!Ya{xRsw(VT z=VW%ucdDc$ZATBmQKJOz8yWBAWaHzef!YTT!OEVr9ksFDi?IJGjTs8uNn37vtvDKZ zfkbq?dECi5jYl+{bAU5o3#eq4!whIX-7GoE5RoYlE=d!4rHcCErVuuFdZb$~M`5ia6O9e}|rQ&$h@3bbUmfhYK@e+n=5>$~Tpm z>Mu-p8TfcHyz|bSZwh~5yW-I|bJ->;je(aC0Up1S+)nsuo}$W!SMeCRbIRhQ9&`d0 z@tOV}H&E(k5eo!d94PR}r(xpZ5ruiX72Iyr1kU1tnn(`HZ`WUQq+Ja*ol~PW# z4jZGYMI}P3pXN9gYlp?YmJ`ICn@7DsMJHZtUJP#NKgG| zvTiZSsw?YB20z@lue=y2km8TSYzZcxa~O;`xwx7Ct;cUu2fPib(dM_z7_6%7-ZIP9 z&erl@cN;FO9AJ|Bl;VIzG^@Q`?Gqa{asZdkDSZR`>p@y%WF*Xm*9AB|4ucEgA!nM} zMj!v@<%hngp(>^RGmoe(vs9jxD_O{=+e^MRV|Z;Lmn4jS=~8~;*O9bd)UO3brL@J2 z;Ejd6lS8Y?*D-*EjfSD+5RpTDRJd6tlAE+pj#P=iWJb`96L{2`hRR23WTM zeQQ7c{k11t+4R_@NAC4&&kG9+OYVqx-1wiB|JbO>`n}#>lgw%z+-fs5L0carGeF-p zDz?{|`c+wqR74e6-rG5~MUyWfJX}+9dg55gft;QugOS~iZ7I+81SW|@v+7#Ls zS6>JjTUhE@Bp2Jov?N)GR*a2yQ+HmAk9E4%lU_UIr};50`gY&WjAO!u;XL-w3LCXe z;lebcnNg&Z%QzVHZ4$$ER-nFqO+_s;`}^yEh-+5G_A?V1jSc{&&1bLLQK6VW%R*?0 z7ny*Ce3S=NIP)*oh1Ntf>O zV&%s0{_2w@FH;{~)|yM2P|=&E*s-tkdLraJJqEgp+Iu@7<0Sp&vCo+n)F8me=Z!Td zv;t-7!@w($wf>0`ZtC6hD~K3gyS;cI0i|(I8z{{ZT&_-na8JIORP*E0&p^vK=Nic_ z8909QtjFo^=1VrSEnCh1oDKB;R67k}?J*m)nO9%5=NTc6^V8pd`Ph)YSQnyy@$M(? zjjJWZ>2NN`_zP~4{HS&7bFY`6=7bM~uSo%>GhT;dbBFNU0R zw%QmjmD{Na*TI!lCL9FiGx-5)j5#|g+1aY082Qy&=vxE+h}GRTY%J|go*qp+cdmN= z(cPyzPL~{w6dw-mKl7p^akO}Z*%&34XCYV8=6^bOkXH7^;yPb7SLXZ40*w38pNojK zLl`4`DOF^m<9Py+t8za@6lG%PRzL`Cs=os?nlN7TVtW6=)>qwSTI7 zGL`O@1htxr7)4YIN-wX><%i@GMgQWC>z=iK?5Yq5`{k5G!O|-jhN`{#`95NI_)+2W z=F)9w9wJL`ntgz5RUf^3XmNddHV|xSLyVtS+#c)Pa=WWVle}etn;$YIZ)zG{&~&c# z%&Dy1K%*uyU49hHlhC5cWv;*E{Xq{$qEsIToDv63_E-QV4UykSub@k~$RU@uX(enO z>iHl^t;%Xh|4Qw1Ew|kOnFPGa0S&^#vuJWPeyAaGf5_l%>rJoTs^bnxB{pwc*Qbi9 zL%n3LHq!h6;^WFbY#EiX+-EjN_&OCTd)N3ZrT6o4O`!kA^qWF^Pz)A9-fe;TqGC{8 zGcq;h_;v-$G#~IZPS%yCj+_3?GtIR2^hK3c-pBDjf~4oEn|6v5SQgOeT_~YCo_+oy z>|?OqXd|L(RW0oIlEaYiXh!}$sqWBLx;NK=sMZYPg999d@@KK|bdTz%DaHn#!kLro z7rowCN>&(NSy)?&Pqc3K{z6`_$&q%W+0K>in#P zSTVDS9^c*rqUD1JM4{@q3BC(aXam*fF}={+Kx*@6snd6Ic)XV9@I5^{d|{)q^Ul|| zU6p!agSnF(7zl2^TC+^4A6i)O;eTmw2NUP@8HGT{C%?uT|;$w_E0Q;LI1$-Tq%WrQjWq*MBQh_zRNZT{8;q4kn#o4YO~WVyfP?3^g`7 zT4w_Ia@3?@>{+|XSiz6|lT4Gx>}#?J41Ofi$Q?tC{9{ZT@~^!*`uFC+{ef%-QYipubq^J8<@C0FLtvP* z&bEKK2FFImdEp&@LeBw7uYQEGIrMe%s7g(|x)JUj31HQv$KLG{VXosPT4dhxX}cY` zr2B_|sF_5+%t$LGw9H>c^M`rSJ)yAtA?^7NHLs_QNXBU4{-^Lg3m-fH*SM zK0IvW)R&J;oGjagd_zEp}XySV~?H*6q@2)O`4G_jZlyZgQp;mId zU3NH;K)^b`)gnRjp~nK6_f6O4hCyXpDZ5f&`MSwxb;b-%xCem?pO5r_t1T*RDUx4A zL_6R&Be%T$>3hL)GF7)4BIqCZ4Hw%t3qUkTIB-PN)cG?#%Q=Jt0~8SzwfC@eJ&Uh* ziryUfm;`&h89rrxj(|y_brN8T=J=x*>>=2&@bDD0#+|}LNZ>l_se$yOtKB76!i~`k z|7Q@)Wqe5KH5_e|n=*=|^k8y#V*~to96-!R9%iJ(Z>Z}*Y?G|(Ae&)J@OaB1vua#P zO$YQ99Zj{q`g3K`8?=0}dp9g~A9r-)IF`P(yii6Es^5?(TjEl~;JR z3TsBoKW)_pZg?t*8edXuqojlQr*12A9&Q~=2^beR;P?}7%eY7yuJZpj2~UHWjqOHC z=sQstfb!A-)F(>AhEr(;}hf}#>ZEeq7q!Atn4wO5tIg&KVXLs zG|;)wOJSuMcoc6Wp0?P;a_7}9?(UxLWgO0|CN;6h{r z$B{Gu?wkqE!Z=ws>uivIzCiio@>y82GF8>p4*@nzZGaOrLevJPk-Ab$P?Ok)z8$d% zlo*j>Ie5@M@ubNmn*#%%afl0!hf~=?&Q+0d0M5$Dv?Hl@elSSwA^0w*Iw6eF9zu?k z#K|Avqo|{?gn?&{g2CkNFBLvSkomJ=vz!NGsI&G2G0DO-yGCD9A-ZcOl2lSJ~s9p*tvgw&;P3n6<$@C^3MG`Sa__2HpH zm6?kxA3Y1BeKTW!`*o%%y-^vU4S{wAPDKjt1XZQONZ1iZfr9=ThGebIKJ7v#e)%Z5 za1PXw1x1>6AU9JhMpqd(tm^KQ(>dcK=66@989H?zQ~|rB4OuT z{3OWyxZU~R4Y-C)Z5r3Q2TS^cKu&ZlQCywp!GU?teH$ZtD4gEnQHZ)#XoRfV{V%%7_G&X_JN zEq$}4x>l5zvnuZONAI{<@e9S>?Il27uZbCoyrau&vje$AxrW=B2YI(70#;p4k2V=l zO5Ny<-@t!bAVi$xt^?4X!Ad#8_U>Y0?lbg>?xQ8@RY)*$1S;Z(8NTc9Zwu|05CA5B1RCbUo`zG%UjzG8CHS`gc#?@U+ef#_vrRb@BN(OMlfCB&PU@Ws zm`{8DJMgRQ^hXd_)h5BV$m6I|16}5RS-WJIqk1W5io3(mdl-t zXi#u)^==giU3jcl8rq17r3?F6-dHNbX__Gvt|js2H+#VrGQbUOnSw@ zCUq@(^>%jdk>v7c@;*+9N?#<@R#3PsI7bVme%nQC0*Te)Tv&aW`HlegeAm5`bQzI6 zv?$9FhRgdwVts&Tq?4+fSu(6YwNBIZj>H={ANsg)R5E0;dY_PjFsR?Xlz8C+`;bf& zjr+n97%WSUa2AF-z!x6xcy0mbhmgw7a>5W3YM_@Q#gG@Rh#7)#Y*^Y2O<1e#d1KHH z3nIU?975L;0A36_ZgTjEU`vMS^V+2Iw(h6uaN1QGG?veUGLOy|?C{sPE1yd^qH;DjsRQ2=RRy?~(XR@R7PFO17!k*Im?3 z3+qUo9D+qU9pa8FF0Yr~=sp*&miT@^JXRI*V{fjiYAzU?i!Ktw#{wbf{AkYU6&go0 zlnANg)VYgvo)oi+l$d90btUOn`p$mHLk)bE0V`}lFO8gVDuoNLQZJry`FnOQFP9Cg zIt4=hfM*IuIA5ANt5%FIg-Ghm6sv(|p~Oc*hCW5a2GBg^F1_m&I!$BDN7&|z^5t@} zeIKxG#a&6?M5040#B(4@$x@g-O;~U$HD{O)|_yA!iRn8;pwkR~h%(yHd#~`FT zGku^<5IgM7V`v+4^QtK|i;#91LD4qI@~S6v)MZ{eUiMQTZrGhK4MoI31d8*ZaNpvV zZ@@g!EBlbXBA-4XPu(O`h&pH0LCV;xASZ||GlCP3fTHAakn8wc6skth*|*nf9!pya>CBm8qp3+ zXhvW|e{EA+X(`)KN&I%DkuI z^`6OG{OC3;3S?H&pY~@L;siAFwMP3v{T~Of430ccMn3zpDH58-&Vd;&8rqILm39;W z0Qm^Ags*^SMFLi5x>a{pX9pI+tk?3Uu*OMA-5%)MMaT=B#P9ncup3&oK0+MlU9Qid zao{PN8q1y+I)Z>C5|HYeG>CTPxRpHRA!sv(P!0lf3JRWMQQPwkj1{qd&%tc(%(M;t z1;&tPe|T-GNZ`^5{HXdG*)U5Gv?(zhN(P+ zP-&2Pjw3^%!fPUC-wP<`NQAl>;yM|um=>`WSHQ(``X8+JdCR%ITu+I!!Ep+UX8c3Jt z^1zK^VKk~a91NP%egSo4EH~vm(1sOl5u>Lp%ZkVf{)_hXUuSokYPHYt9S`lVui?j& zpfW@`LX~?W6H?2?PY1*%-x0X5wXooG2SUIhuG#;2d;cpLIp_r>suhMg#GI0w35n>_ zG9(??hR1+YOnHD-7cH`3d)x)(Qc9xm=u5AXyN|+8>T8eO0N{7PcdUd=0&;iz6!h_| zA5j)Sn?=JqH+N=3%&GKZVq&9{-PusmV!H!8mUVD}MQH&u6B8Dyng+zfJq4k~?Vj;h zDx<&27AWD07^I|p&Ng!O*O7p8XlXUhi>oHub=}Tkw0b*Ukw#p zt&k*)e?DUKofg$S${;e_M9xm;R9Y{~yw07x<8^Ah)RuRC8)PP@jX>ZY-)d<{UTYH( ztKBY!Ecbl+7SNx%p%|(ckel{##63|f>v%X1%S{_fWV{*fp0@aS<1R%6HNlB$RT;qZ zrOxotE-K3;lsdHw@Sfj2gO*3KjnGXG_M@+}=|cWYg*4VJ8MBeoFT+s?>wd5afD|$= z;xK&Aatb7oh)N~&1jZ!Kdfg#NLqQ#fkl-VY*Fk#X%+M2d%6q$<-tN0Z907{T&V<}L z6UQCqIKfX7QzVumh8kZM>9zq)O|+?I)E}`Ihj7a#_6XAWp0Px;u4XFo*2@UOe;NE$;hY2Lq1jq#C`MA1B!z&e*jkw`7t+G?Jbu{gH6whfWjP2(E|`(v$F zCNWmm;low;6<~Z#nAil%hJb8Z{QzW^F>Y<{t<*4Lnv|y`K#F+lhdQWUUT=B)fYkR1 z(&LJvjHIt$gxLgH3A?sYs>b(d^TTzRCG1hOjEPHjhl5ioEOSs3RI+;WkwL}%4;VVw zBP97!nvyV1-(T4(v9PnqSXFp;FGbr@BSoO2T30im&S-N}JD$)&fneV6g*NF3gF5D` z*sgMiB0n7f$k%v~e11gnrqx% by using the Remote Desktop Protocol. The traffic is encrypted with TLS 1.2. Older TLS versions are blocked. + +Both parties must be able to reach these endpoints over port 443: + +| Domain/Name | Description | +|-----------------------------------|-------------------------------------------------------| +| \*.support.services.microsoft.com | Primary endpoint used for Quick Assist application | +| \*.resources.lync.com | Required for the skype framework used by Quick Assist | +| \*.infra.lync.com | Required for the skype framework used by Quick Assist | +| \*latest-swx.cdn.skype.com | Required for the skype framework used by Quick Assist | +| \*login.microsoftonline.com | Required for logging in to the application (MSA) | +| \*channelwebsdks.azureedge.net | Utilized for chat services within Quick Assist | +| \*.aria.microsoft.com | Utilized for accessibility features within the app | +| \*api.support.microsoft.com | API access for Quick Assist | +| \*.vortex.data.microsoft.com | Utilized for telemetry | +| \*.channelservices.microsoft.com | Required for chat services within Quick Assist | + +How it works +------------ + +1. Both the Helper and the Sharer start Quick Assist. + +2. The Helper clicks on “Assist another person”. The Quick Assist on the Helper side contacts the Remote Assistance Service to obtain a session code. The Helper then provides the code to the Sharer. + +3. After the Sharer enters the code in their Quick Assist app, Quick Assist uses that code to contact the Remote Assistance Service and join that specific session. + +4. The Helper is then prompted to decide View Only Mode or Full Control. + +5. Then the Sharer is prompted to confirm allowing the Helper to share their desktop with the helper. + +6. Then Both Quick Assist initiates the RDP control and connects to the RDP Relay services. + +7. Then RDP shares the video to the Helper over https (port 443) thru Relay services to the Helpers RDP control. Input is shared from the Helper to the Sharer thru Relay service. + +Diagram Description automatically generated + +### Data and privacy + +Microsoft logs a small amount of session data to monitor the health of the Quick Assist system. This includes the following data: + +- Start and end time of the session + +- Errors arising from Quick Assist itself, such as unexpected disconnections + +- Features utilized within the app such as view only, annotation, and session pause + +No logs are created on either the helper’s or sharer’s device. Microsoft cannot access a session or view any actions or keystrokes that occur in the session. + +The sharer sees only an abbreviated version of the helper’s name (first name, last initial) and no other information about them. Microsoft does not capture or store any personally identifiable information about either the Sharer or the Helper for longer than 3 days. + +In some scenarios the helper does require the Sharer to respond to application permission prompts (User Account Control), but otherwise the Helper has the same permissions as the Sharer on the device. + +Working with Quick Assist +------------------------- + +Either the support staff or a user can start the Quick Assist session. + +### Support staff starts session + +1. Support staff (“helper”) starts Quick Assist in any of a few ways: + + - Type *Quick Assist* in the search box and press ENTER. + + - From the Start menu, select **Windows Accessories**, and then select **Quick Assist** + + - Type CTRL+Windows+Q + +2. In the **Give assistance** section, helper selects **Assist another person**. The helper might be asked to choose their account or sign in. Quick Assist generates a time-limited security code. + +3. Helper shares the security code with the user over the phone or with a messaging system. + +4. Quick Assist opens on the sharer’s device. The user enters the provided code in the **Code from assistant** box, and then selects **Share screen**. + +5. The helper receives a dialog offering the opportunity to take full control of the device or just view its screen. After choosing, the helper selects **Continue**. + +6. The sharer receives a dialog asking for permission to show their screen or allow access. The sharer gives permission by selecting the **Allow** button. + +### User starts session + +(I don’t think we need this since the steps are included above) + +Next steps +---------- + +If you have any problems, questions, or suggestions for Quick Assist, contact us by using \[Feedback Hub\]. diff --git a/windows/client-management/quick-assist.md b/windows/client-management/quick-assist.md index a40a1bbf2f..aa7c26cb84 100644 --- a/windows/client-management/quick-assist.md +++ b/windows/client-management/quick-assist.md @@ -1,5 +1,5 @@ --- -title: Use Quick Assist +title: Use Quick Assist to help users description: How IT Pros can use Quick Assist to help users ms.prod: w10 ms.sitesec: library @@ -10,5 +10,112 @@ ms.author: jaimeo manager: laurawi --- -# Use Quick Assist +# Use Quick Assist to help users +Quick Assist is a Windows 10 application that enables a person to share their device with another person over a remote connection. Your support staff can use it to remotely connect to a user’s device and then view its display, make annotations, or take full control. In this way, they can troubleshoot, diagnose technological issues, and provide instructions to users directly on their devices. + +## Before you begin + +All that's required to use Quick Assist is suitable network and internet connectivity. No particular roles, permissions, or policies are involved. Neither party needs to be in a domain. The helper must have a Microsoft account. The sharer doesn’t have to authenticate. + +### Authentication + +The helper can authenticate when they sign in by using a Microsoft Account (MSA) or Azure Active Directory. Local Active Directory authentication is not supported at this time. + +### Network considerations + +Quick Assist communicates over port 443 (https) and connects to the Remote Assistance Service at `https://remoteassistance.support.services.microsoft.com` by using the Remote Desktop Protocol (RDP). The traffic is encrypted with TLS 1.2. + +Both the helper and sharer must be able to reach these endpoints over port 443: + +| Domain/Name | Description | +|-----------------------------------|-------------------------------------------------------| +| \*.support.services.microsoft.com | Primary endpoint used for Quick Assist application | +| \*.resources.lync.com | Required for the Skype framework used by Quick Assist | +| \*.infra.lync.com | Required for the Skype framework used by Quick Assist | +| \*.latest-swx.cdn.skype.com | Required for the Skype framework used by Quick Assist | +| \*.login.microsoftonline.com | Required for logging in to the application (MSA) | +| \*.channelwebsdks.azureedge.net | Used for chat services within Quick Assist | +| \*.aria.microsoft.com | Used for accessibility features within the app | +| \*.api.support.microsoft.com | API access for Quick Assist | +| \*.vortex.data.microsoft.com | Used for diagnostic data | +| \*.channelservices.microsoft.com | Required for chat services within Quick Assist | + +## How it works + +1. Both the helper and the sharer start Quick Assist. + +2. The helper selects **Assist another person**. Quick Assist on the helper's side contacts the Remote Assistance Service to obtain a session code. The helper then provides the code to the sharer. + +3. After the sharer enters the code in their Quick Assist app, Quick Assist uses that code to contact the Remote Assistance Service and join that specific session. + +4. The helper is prompted to select **View Only** or **Full Control**. + +5. The sharer is prompted to confirm allowing the helper to share their desktop with the helper. + +6. Quick Assist starts RDP control and connects to RDP relay services. + +7. RDP shares the video to the helper over https (port 443) through RDP relay services to the helper's RDP control. Input is shared from the helper to the sharer through the RDP relay service. + +Diagram Description automatically generated + +### Data and privacy + +Microsoft logs a small amount of session data to monitor the health of the Quick Assist system. This data includes the following information: + +- Start and end time of the session + +- Errors arising from Quick Assist itself, such as unexpected disconnections + +- Features used inside the app such as view only, annotation, and session pause + +No logs are created on either the helper’s or sharer’s device. Microsoft cannot access a session or view any actions or keystrokes that occur in the session. + +The sharer sees only an abbreviated version of the helper’s name (first name, last initial) and no other information about them. Microsoft does not store any data about either the sharer or the helper for longer than three days. + +In some scenarios, the helper does require the sharer to respond to application permission prompts (User Account Control), but otherwise the helper has the same permissions as the sharer on the device. + +## Working with Quick Assist + +Either the support staff or a user can start a Quick Assist session. + + +1. Support staff (“helper”) starts Quick Assist in any of a few ways: + + - Type *Quick Assist* in the search box and press ENTER. + - From the Start menu, select **Windows Accessories**, and then select **Quick Assist**. + - Type CTRL+Windows+Q + +2. In the **Give assistance** section, helper selects **Assist another person**. The helper might be asked to choose their account or sign in. Quick Assist generates a time-limited security code. + +3. Helper shares the security code with the user over the phone or with a messaging system. + +4. Quick Assist opens on the sharer’s device. The user enters the provided code in the **Code from assistant** box, and then selects **Share screen**. + +5. The helper receives a dialog offering the opportunity to take full control of the device or just view its screen. After choosing, the helper selects **Continue**. + +6. The sharer receives a dialog asking for permission to show their screen or allow access. The sharer gives permission by selecting the **Allow** button. + +## If Quick Assist is missing + +If for some reason a user doesn't have Quick Assist on their system or it's not working properly, they might need to uninstall and reinstall it. + +### Uninstall Quick Assist + +1. Start the Settings app, and then select **Apps**. +2. Select **Optional features**. +3. In the **Installed features** search bar, type *Quick Assist*. +4. Select **Microsoft Quick Assist**, and then select **Uninstall**. + +### Reinstall Quick Assist + +1. Start the Settings app, and then select **Apps**. +2. Select **Optional features**. +3. Select **Add a feature**. +4. In the new dialog that opens, in the **Add an optional feature** search bar, type *Quick Assist*. +5. Select the check box for **Microsoft Quick Assist**, and then select **Install**. +6. Restart the device. + +## Next steps + +If you have any problems, questions, or suggestions for Quick Assist, contact us by using feedback-hub://?referrer=resolveUpgradeErrorsPage&tabid=2&contextid=81&newFeedback=true&feedbackType=2&topic=submit-errors.md From 05ae433dfc05d6897123a98259b6f241445cc058 Mon Sep 17 00:00:00 2001 From: jaimeo Date: Wed, 16 Dec 2020 10:33:43 -0700 Subject: [PATCH 104/486] deleted unneeded file --- ...-assist-for-it-pros-draft - Pauls Edits.md | 103 ------------------ 1 file changed, 103 deletions(-) delete mode 100644 windows/client-management/quick-assist-for-it-pros-draft - Pauls Edits.md diff --git a/windows/client-management/quick-assist-for-it-pros-draft - Pauls Edits.md b/windows/client-management/quick-assist-for-it-pros-draft - Pauls Edits.md deleted file mode 100644 index bdd037b8a7..0000000000 --- a/windows/client-management/quick-assist-for-it-pros-draft - Pauls Edits.md +++ /dev/null @@ -1,103 +0,0 @@ -Use Quick Assist to support users -================================= - -\[a sub-article under Administrative Tools in the [Client Management](https://docs.microsoft.com/en-us/windows/client-management/) area\] - -Quick Assist is a Windows 10 application that enables a person to share their device with another person over a remote connection. Your support staff can use it to remotely connect to a user’s device and then view its display, make annotations, or take full control. In this way, they can troubleshoot, diagnose technological issues, and provide instructions to users directly on their devices. - -Before you begin ----------------- - -All that is required to use Quick Assist is suitable network & internet connectivity. No particular roles, permissions, or policies are involved. Neither party needs to be in a domain. The helper must have a Microsoft account. <Sharer doesn’t have to authenticate> - -### Authentication - -Supported methods for Helper login authentication are Microsoft Account (MSA), or Microsoft AAD. Local Active Directory is not supported at this time. - -### Network considerations - -Quick Assist communicates over port 443 (https) and connects to the Remote Assistance Service at by using the Remote Desktop Protocol. The traffic is encrypted with TLS 1.2. Older TLS versions are blocked. - -Both parties must be able to reach these endpoints over port 443: - -| Domain/Name | Description | -|-----------------------------------|-------------------------------------------------------| -| \*.support.services.microsoft.com | Primary endpoint used for Quick Assist application | -| \*.resources.lync.com | Required for the skype framework used by Quick Assist | -| \*.infra.lync.com | Required for the skype framework used by Quick Assist | -| \*latest-swx.cdn.skype.com | Required for the skype framework used by Quick Assist | -| \*login.microsoftonline.com | Required for logging in to the application (MSA) | -| \*channelwebsdks.azureedge.net | Utilized for chat services within Quick Assist | -| \*.aria.microsoft.com | Utilized for accessibility features within the app | -| \*api.support.microsoft.com | API access for Quick Assist | -| \*.vortex.data.microsoft.com | Utilized for telemetry | -| \*.channelservices.microsoft.com | Required for chat services within Quick Assist | - -How it works ------------- - -1. Both the Helper and the Sharer start Quick Assist. - -2. The Helper clicks on “Assist another person”. The Quick Assist on the Helper side contacts the Remote Assistance Service to obtain a session code. The Helper then provides the code to the Sharer. - -3. After the Sharer enters the code in their Quick Assist app, Quick Assist uses that code to contact the Remote Assistance Service and join that specific session. - -4. The Helper is then prompted to decide View Only Mode or Full Control. - -5. Then the Sharer is prompted to confirm allowing the Helper to share their desktop with the helper. - -6. Then Both Quick Assist initiates the RDP control and connects to the RDP Relay services. - -7. Then RDP shares the video to the Helper over https (port 443) thru Relay services to the Helpers RDP control. Input is shared from the Helper to the Sharer thru Relay service. - -Diagram Description automatically generated - -### Data and privacy - -Microsoft logs a small amount of session data to monitor the health of the Quick Assist system. This includes the following data: - -- Start and end time of the session - -- Errors arising from Quick Assist itself, such as unexpected disconnections - -- Features utilized within the app such as view only, annotation, and session pause - -No logs are created on either the helper’s or sharer’s device. Microsoft cannot access a session or view any actions or keystrokes that occur in the session. - -The sharer sees only an abbreviated version of the helper’s name (first name, last initial) and no other information about them. Microsoft does not capture or store any personally identifiable information about either the Sharer or the Helper for longer than 3 days. - -In some scenarios the helper does require the Sharer to respond to application permission prompts (User Account Control), but otherwise the Helper has the same permissions as the Sharer on the device. - -Working with Quick Assist -------------------------- - -Either the support staff or a user can start the Quick Assist session. - -### Support staff starts session - -1. Support staff (“helper”) starts Quick Assist in any of a few ways: - - - Type *Quick Assist* in the search box and press ENTER. - - - From the Start menu, select **Windows Accessories**, and then select **Quick Assist** - - - Type CTRL+Windows+Q - -2. In the **Give assistance** section, helper selects **Assist another person**. The helper might be asked to choose their account or sign in. Quick Assist generates a time-limited security code. - -3. Helper shares the security code with the user over the phone or with a messaging system. - -4. Quick Assist opens on the sharer’s device. The user enters the provided code in the **Code from assistant** box, and then selects **Share screen**. - -5. The helper receives a dialog offering the opportunity to take full control of the device or just view its screen. After choosing, the helper selects **Continue**. - -6. The sharer receives a dialog asking for permission to show their screen or allow access. The sharer gives permission by selecting the **Allow** button. - -### User starts session - -(I don’t think we need this since the steps are included above) - -Next steps ----------- - -If you have any problems, questions, or suggestions for Quick Assist, contact us by using \[Feedback Hub\]. From 089f72e52c9aa7cbd3b48c5a5a63b9221d24f478 Mon Sep 17 00:00:00 2001 From: Asha Iyengar Date: Wed, 16 Dec 2020 23:13:49 +0530 Subject: [PATCH 105/486] Made few minor changes --- .../filter-origin-documentation.md | 24 +++++++++---------- 1 file changed, 12 insertions(+), 12 deletions(-) diff --git a/windows/security/threat-protection/windows-firewall/filter-origin-documentation.md b/windows/security/threat-protection/windows-firewall/filter-origin-documentation.md index 28be4c5d70..5d43155670 100644 --- a/windows/security/threat-protection/windows-firewall/filter-origin-documentation.md +++ b/windows/security/threat-protection/windows-firewall/filter-origin-documentation.md @@ -45,21 +45,21 @@ The blocking filters can be categorized under these filter origins: e. Stealth - f. UWP default + f. Universal Windows Platform (UWP) default - g. WSH default + g. Windows Service Hardening (WSH) default -The next section describes the improvements made to audits 5157 and 5152 and how the above filter origins are used in these events. These improvements were added in Iron release. +The next section describes the improvements made to audits 5157 and 5152, and how the above filter origins are used in these events. These improvements were added in Iron release. ## Improved firewall audit The two new fields added to the audit 5157 and 5152 events are `Filter Origin` and `Interface Index`. -The `Filter Origin` field will help identify the cause of the drop. Packet drops from Firewall are explicitly dropped by default block filters created by the Windows Firewall service or a Firewall rule which may be created by users, policies, services, apps, etc. +The `Filter Origin` field helps identify the cause of the drop. Packet drops from firewall are explicitly dropped by default block filters created by the Windows Firewall service or a firewall rule which may be created by users, policies, services, apps, etc. -`Filter Origin` will either specify the rule ID (a unique identifier of a Firewall rule) or the name of one of the default block filters. +`Filter Origin` specifies either the rule ID (a unique identifier of a Firewall rule) or the name of one of the default block filters. -The `Interface Index` field will specify the network interface in which the packet was dropped. This field helps to identify which interface was quarantined, if the `Filter Origin` is a `Quarantine Default`. +The `Interface Index` field specifies the network interface in which the packet was dropped. This field helps to identify which interface was quarantined, if the `Filter Origin` is a `Quarantine Default`. To enable a specific audit event, run the corresponding command in an administrator command prompt: @@ -74,7 +74,7 @@ As the audit surfaces `Filter Origin` and `Interface Index`, the network admin c ![Event audit](images/event-audit-5157.png) -The next sections are divided by `Filter Origin` type. The filter origin value will either be a rule name or the name of one of the default block filters. If the filter origin is one of the default block filters, skip to the section, **Firewall default block filters**. Otherwise, continue to the section **Firewall rules**. +The next sections are divided by `Filter Origin` type, the value is either a rule name or the name of one of the default block filters. If the filter origin is one of the default block filters, skip to the section, **Firewall default block filters**. Otherwise, continue to the section **Firewall rules**. ## Firewall rules @@ -90,7 +90,7 @@ Get-NetFirewallRule -Name " {A549B7CF-0542-4B67-93F9-EEBCDD584377} " After identifying the rule that caused the drop, the network admin can now modify/disable the rule to allow the traffic they want through command prompt or using the Windows Defender UI. The network admin can find the rule in the UI with the rule’s `DisplayName`. >[!NOTE] -> Firewall rules from Mobile Device Management (MDM) store cannot be searched using the Windows Defender UI. Additionally, the above method will not work when the `Filter Origin` is one of the default block filters, as they do not correspond to any Firewall rules. +> Firewall rules from Mobile Device Management (MDM) store cannot be searched using the Windows Defender UI. Additionally, the above method will not work when the `Filter Origin` is one of the default block filters, as they do not correspond to any firewall rules. ## Firewall default block filters @@ -104,11 +104,11 @@ To enable localhost loopback for a published app which requires loopback access **Boottime default** -Network drop events from the boottime default block filter origin occur when the computer is booting up and the Firewall service is not yet running. Services will need to create a boottime allow filter to allow the traffic. It should be noted that it is not possible to add boottime filters through Firewall rules. +Network drop events from the boottime default block filter origin occur when the computer is booting up and the firewall service is not yet running. Services will need to create a boottime allow filter to allow the traffic. It should be noted that it is not possible to add boottime filters through firewall rules. **Quarantine default** -Network drops from the quarantine default block filter occur when the interface is temporarily quarantined by Firewall service. The Firewall service quarantines an interface when it detects a change on the network, and based on several other factors, the Firewall service may put the interface in quarantine as a safeguard. When an interface is in quarantine, the quarantine default block filter will block any new non-loopback inbound connections. +Network drops from the quarantine default block filter occur when the interface is temporarily quarantined by Firewall service. The firewall service quarantines an interface when it detects a change on the network, and based on several other factors, the firewall service may put the interface in quarantine as a safeguard. When an interface is in quarantine, the quarantine default block filter will block any new non-loopback inbound connections. Run the following PowerShell command to generate more information about the interface: @@ -128,9 +128,9 @@ To learn more about the quarantine feature, see [Quarantine behavior](quarantine Network packet drops from query user default block filters occur when there is no explicit rule created to allow an inbound connection for the packet. When an application binds to a socket but does not have a corresponding inbound rule to allow packets on that port, Windows generates a pop up for the user to allow or deny the app to receive packets on the available network categories. If the user clicks to deny the connection in this popup, subsequent inbound packets to the app will be dropped. To resolve the drops: -1. Create an inbound Firewall rule to allow the packet for this application. This will allow the packet to bypass any query user default block filters. +1. Create an inbound firewall rule to allow the packet for this application. This will allow the packet to bypass any query user default block filters. -2. Delete any block query user rules which may have been auto generated by the Firewall service. +2. Delete any block query user rules which may have been auto generated by the firewall service. To generate a list of all the query user block rules, you can run the following PowerShell command: From 5bf7b35e59dc74a916cd1c3ceb310edb0e13f282 Mon Sep 17 00:00:00 2001 From: Asha Iyengar Date: Wed, 16 Dec 2020 23:37:43 +0530 Subject: [PATCH 106/486] Minor changes --- .../threat-protection/windows-firewall/quarantine.md | 12 +++++------- 1 file changed, 5 insertions(+), 7 deletions(-) diff --git a/windows/security/threat-protection/windows-firewall/quarantine.md b/windows/security/threat-protection/windows-firewall/quarantine.md index 6e13094d17..a7d55f86ae 100644 --- a/windows/security/threat-protection/windows-firewall/quarantine.md +++ b/windows/security/threat-protection/windows-firewall/quarantine.md @@ -25,7 +25,7 @@ Network changes can happen frequently. Additionally, the operations required to To counter this potential exploitation, Windows Firewall will quarantine an interface until the system has successfully re-categorized the network and Windows Filtering Platform (WFP) has the correct filters applied for the updated interface configuration. During quarantine, all new inbound connections without exceptions are blocked to the machine. -While the quarantine feature has long been a part of Windows Firewall, the feature’s behavior has often caused confusion for customers unaware of quarantine and its motivations. +While the quarantine feature has long been a part of Windows Firewall, the feature behavior has often caused confusion for customers unaware of quarantine and its motivations. Ultimately, the goal of this document is to describe the quarantine feature at a high level and help network admins understand why the application traffic is sometimes blocked by quarantine. @@ -33,11 +33,9 @@ Ultimately, the goal of this document is to describe the quarantine feature at a The quarantine feature creates filters which can be split into three categories: -1. Quarantine default inbound block filter - -2. Quarantine default exception filters - -3. Interface un-quarantine filters +- Quarantine default inbound block filter +- Quarantine default exception filters +- Interface un-quarantine filters These filters are added in the FWPM_SUBLAYER_MPSSVC_QUARANTINE sublayer and these layers are: @@ -50,7 +48,7 @@ These filters are added in the FWPM_SUBLAYER_MPSSVC_QUARANTINE sublayer and thes 4. FWPM_LAYER_ALE_AUTH_RECV_ACCEPT_V6 >[!NOTE] -> Any Firewall rules added by the customers will not affect the filters in the quarantine sublayer as filters from Firewall rules are added in the FWPM_SUBLAYER_MPSSVC_WF sublayer. In other words, customers cannot add their own exception filters to prevent packets from being evaluated by quarantine filters. +> Any firewall rules added by the customers will not affect the filters in the quarantine sublayer as filters from Firewall rules are added in the FWPM_SUBLAYER_MPSSVC_WF sublayer. In other words, customers cannot add their own exception filters to prevent packets from being evaluated by quarantine filters. For more information about WFP layers and sublayers, see [WFP Operation](https://docs.microsoft.com/windows/win32/fwp/basic-operation). From f802ff7f95b75e873ede4499870d7c63fce3d9c5 Mon Sep 17 00:00:00 2001 From: =?UTF-8?q?Thomas=20Sj=C3=B6gren?= Date: Wed, 16 Dec 2020 22:48:59 +0100 Subject: [PATCH 107/486] rename .PNG -> .png and minor linting MIME-Version: 1.0 Content-Type: text/plain; charset=UTF-8 Content-Transfer-Encoding: 8bit Signed-off-by: Thomas Sjögren --- .../sync-browser-settings-gp.md | 8 ++--- ....PNG => allow-smart-screen-validation.png} | Bin .../{sync-settings.PNG => sync-settings.png} | Bin ...re-windows-defender-smartscreen-include.md | 8 ++--- .../configuration/images/configmgr-assets.PNG | Bin 133738 -> 0 bytes ...{mbr2gpt-volume.PNG => mbr2gpt-volume.png} | Bin windows/deployment/mbr-to-gpt.md | 30 +++++++++--------- .../bitlocker-recovery-guide-plan.md | 14 ++++---- .../{rp-example1.PNG => rp-example1.png} | Bin .../{rp-example2.PNG => rp-example2.png} | Bin .../{rp-example3.PNG => rp-example3.png} | Bin .../{rp-example4.PNG => rp-example4.png} | Bin .../{rp-example5.PNG => rp-example5.png} | Bin 13 files changed, 30 insertions(+), 30 deletions(-) rename browsers/edge/images/{allow-smart-screen-validation.PNG => allow-smart-screen-validation.png} (100%) rename browsers/edge/images/{sync-settings.PNG => sync-settings.png} (100%) delete mode 100644 windows/configuration/images/configmgr-assets.PNG rename windows/deployment/images/{mbr2gpt-volume.PNG => mbr2gpt-volume.png} (100%) rename windows/security/information-protection/bitlocker/images/{rp-example1.PNG => rp-example1.png} (100%) rename windows/security/information-protection/bitlocker/images/{rp-example2.PNG => rp-example2.png} (100%) rename windows/security/information-protection/bitlocker/images/{rp-example3.PNG => rp-example3.png} (100%) rename windows/security/information-protection/bitlocker/images/{rp-example4.PNG => rp-example4.png} (100%) rename windows/security/information-protection/bitlocker/images/{rp-example5.PNG => rp-example5.png} (100%) diff --git a/browsers/edge/group-policies/sync-browser-settings-gp.md b/browsers/edge/group-policies/sync-browser-settings-gp.md index cdce19d2e5..d948b2c862 100644 --- a/browsers/edge/group-policies/sync-browser-settings-gp.md +++ b/browsers/edge/group-policies/sync-browser-settings-gp.md @@ -6,17 +6,17 @@ manager: dansimp ms.author: dansimp author: dansimp ms.date: 10/02/2018 -ms.reviewer: +ms.reviewer: ms.localizationpriority: medium ms.topic: reference --- -# Sync browser settings +# Sync browser settings > [!NOTE] > You've reached the documentation for Microsoft Edge version 45 and earlier. To see the documentation for Microsoft Edge version 77 or later, go to the [Microsoft Edge documentation landing page](https://docs.microsoft.com/DeployEdge/). -By default, the “browser” group syncs automatically between the user’s devices, letting users make changes. The “browser” group uses the Sync your Settings option in Settings to sync information like history and favorites. You can configure Microsoft Edge to prevent the “browser” group from syncing and prevent users from turning on the _Sync your Settings_ toggle in Settings. If you want syncing turned off by default but not disabled, select the _Allow users to turn “browser” syncing_ option in the Do not sync browser policy. +By default, the “browser” group syncs automatically between the user’s devices, letting users make changes. The “browser” group uses the Sync your Settings option in Settings to sync information like history and favorites. You can configure Microsoft Edge to prevent the “browser” group from syncing and prevent users from turning on the _Sync your Settings_ toggle in Settings. If you want syncing turned off by default but not disabled, select the _Allow users to turn “browser” syncing_ option in the Do not sync browser policy. ## Relevant policies @@ -38,7 +38,7 @@ You can find the Microsoft Edge Group Policy settings in the following location To verify the settings: 1. In the upper-right corner of Microsoft Edge, click **More** \(**...**\). 2. Click **Settings**. -3. Under Account, see if the setting is toggled on or off.

    ![Verify configuration](../images/sync-settings.PNG) +3. Under Account, see if the setting is toggled on or off.

    ![Verify configuration](../images/sync-settings.png) ## Do not sync browser settings diff --git a/browsers/edge/images/allow-smart-screen-validation.PNG b/browsers/edge/images/allow-smart-screen-validation.png similarity index 100% rename from browsers/edge/images/allow-smart-screen-validation.PNG rename to browsers/edge/images/allow-smart-screen-validation.png diff --git a/browsers/edge/images/sync-settings.PNG b/browsers/edge/images/sync-settings.png similarity index 100% rename from browsers/edge/images/sync-settings.PNG rename to browsers/edge/images/sync-settings.png diff --git a/browsers/edge/includes/configure-windows-defender-smartscreen-include.md b/browsers/edge/includes/configure-windows-defender-smartscreen-include.md index c17f639024..375951a25c 100644 --- a/browsers/edge/includes/configure-windows-defender-smartscreen-include.md +++ b/browsers/edge/includes/configure-windows-defender-smartscreen-include.md @@ -2,7 +2,7 @@ author: eavena ms.author: eravena ms.date: 10/02/2018 -ms.reviewer: +ms.reviewer: audience: itpro manager: dansimp ms.prod: edge @@ -25,9 +25,9 @@ ms.topic: include --- -To verify Windows Defender SmartScreen is turned off (disabled): +To verify Windows Defender SmartScreen is turned off (disabled): 1. Click or tap **More** (…) and select **Settings** > **View Advanced settings**. -2. Verify the setting **Help protect me from malicious sites and download with Windows Defender SmartScreen** is disabled.

    ![Verify that Windows Defender SmartScreen is turned off (disabled)](../images/allow-smart-screen-validation.PNG) +2. Verify the setting **Help protect me from malicious sites and download with Windows Defender SmartScreen** is disabled.

    ![Verify that Windows Defender SmartScreen is turned off (disabled)](../images/allow-smart-screen-validation.png) ### ADMX info and settings @@ -40,7 +40,7 @@ To verify Windows Defender SmartScreen is turned off (disabled): #### MDM settings - **MDM name:** Browser/[AllowSmartScreen](https://docs.microsoft.com/windows/client-management/mdm/policy-csp-browser#browser-allowsmartscreen) - **Supported devices:** Desktop and Mobile -- **URI full path:** ./Vendor/MSFT/Policy/Config/Browser/AllowSmartScreen +- **URI full path:** ./Vendor/MSFT/Policy/Config/Browser/AllowSmartScreen - **Data type:** Integer #### Registry settings diff --git a/windows/configuration/images/configmgr-assets.PNG b/windows/configuration/images/configmgr-assets.PNG deleted file mode 100644 index 2cc50f57583ea09b84461c323fb12beaed610afa..0000000000000000000000000000000000000000 GIT binary patch literal 0 HcmV?d00001 literal 133738 zcmY(q1yCGK*fol4u*JjTi@O8}?ksM>g0pC_1%d?@S==qS6C?=)hXBE4fuI3iSll55 zcZZ*^{`=LvcdDjlx~Hb9tK~UQpL04!M@xkO?=>C@3JQTLSWyoJ1p|nJg8CT;>!l_` zR)F&5f$F8FB9Br%4%~YwU^vKW%AugtCE-6Rr?+8thC*Q|(MftN#0t zt@_@H|u^>p^(9Uj|{=ivsI@jcHIka zjJb>(+z1S7c0Fikt4)(G_eHEX+jx+*ZVd%Brawvc=iK#NlD+V0fXRVrymlgZB0pBE zR3a82=DxKFC`e_Z+TSkyZA~<_J_)jk`?J5_Ods5pA0P;PXi?AS>hlsV!)Gk{F7x?e zxHp=UtoP&?9FQAi`if}HW8hq-^p4}*#Epd;PVGuxnN*K<>b63 zvV^`fGAb(nj+Xx4HhU$9LPVaCfniB?J)vg0reoCyS(pLszwaL=bJTKCN z>Rt3TJLvuk9sL#UF;c zYB{?yB67gBXN<46UBu0L!$SJiYchaWNx9racJ(QlrQf@mkHy*kIok9;?seE;-+p|Z z`f_Cy=tgX*u=!7f^^=16kA6KJQ?9zII;*KXoUzK9v?qM|k(qaK=5kFp<^~+n>cOvR zUN^ZUY#AAy(y8Zd4PDKR=t+n<=npq)Jd zlwqOT-x2UD9!Gzti5TAt$8?zbq7Y8C`|r-&{x9Yh542Xl2TiCP``X5v8EzNozd>$! zE)%+PcH2dgeH0iyg#1QiHv}X*ap?QgH^WWDXVt)!*8Lz<@(R zaeT*LwbAy{5Ixc#a%9h4pRtEJ{PpkpzPwbeSceI`PSNoP`$<$YgoM@!O5cTCZA=pPZjn<77b1$tm?Xl$cGskG zp{|-qaTU@HZFUN`iC(t#fM1Y%i!rYsq*HTYq0P}s>-X?AmtDv1#zlu{nSYCfG>AcF z6o;-DZQlbTxN}f=pdr&%1Ct65pB`^^$`? z2lJ=|g$Sq3uOXduXnBtxl^WF-ibE~~y6gX%amNi0oFUtfl8-%hsQFzZ0xM`R&Yb$X zb*0&taUHUy87AG#aQ=pEd2{gv(E>DrWmG=yC(-Kv466Pd>|lhTv@!@Rj=-PbT4f!sv7PTvcHXOsc|AjMEX?^VOv`90Kf1^6^5^#1=YThK-l~&1* zm`>hdwI5-=XB&=0nl0m3iO4X!JkPN%T3HgJIow_jvlu%hzhm;JKyzZ;gTZI^xZn$K z+0}@MI65GYBq}Dy;KM|MXTWDua6|2>P%kO4t;bwZjI0F@U#dq*<1hY_VkCo$+Q0z; zM;1#~DFui+Z)?M80%VwCsWCS>Y_m=B*e z|4}13qg7rNm3n*G>Q3Gs$){4$k3+H0+Dgohn-T4bJUaiefy*Y&6<=^8sG(!H$Daf@twt0~{^%MyupI#vi$_;BlnrRi<4Y>@Pt_3DX2_puV7YYdMh$=39U!4$K zNIotiOd&5u?M$c1-3XH?VabPGrPTp0qG2E8(x!ItTfPg^Ocfv)_BD1(zJ7iRO zR&*mSV4fc3y?fRe)Fhf$CKT{-<{E-5<=$0Ie#ioF8Ue^RJ5hJtiv zCBhE^;C+nUq`*5IN`YcNC^Bv+ ze0;JsPlcmw74ZkUFLC<=79B`(9MmL0@R#r{ zwWH;ESXB#i(J35CY6teNb>RKf6OC{OLo2V6q6282LTx5%tU_8nnoOYn%5uOWmKXttlWHr)f8yIVln>fm@YE ze3o;ohBTR=Ae@=ASTl@tYJ?!-5b!OnjWJ_>Wdu=ykmhmBXX|z_;6M6Q-$nP!O6-<& z0jDSeQ!)OcnqsGpo{NO7>EwBo)^uskI`WMMfng>b$y5x1ByVA506Hm~l#Jpef+UKE zj(x9bm}SC$B5#v}tQZaTeyDB7tM|)7>P3;Dh>1`0W+Q0`4{tc!+cCF})nnVYrpNwv ze6}SmB=rFAkKMw~I~pJ9!7|3uc9l;P7@%$q=FsvQxn!SvG;)5&Oo$u;b&=qPZTDiB zL!6(kiW0Z%Zk{Op2Hbp;dM>g0nf6md_umbgdz%CfH`YgJ{Y z01Cs-tW(nq|r zKR1PA!k5xz>Z^UOMsj$Y219W}B$B4p>BNcG*A&VS~?yt>Gq0$7MiwDn}xgOET*hFYf5|f(e9J4A6z)NN+a{uO|Q_mEI8Lw>m3*>QpTu?NlnPYkSX+95m zt2Qtd5TjKQKW~(^8&vB~7DY3M+YaK@C8bLb)YG0yM7mB>F0x(9SmJatNG1_a@v4+J z(6jPU=_wPF$Qqd;Wk|WmoiI{t_{4vaC~TPWOV^<|wH`)SB@1o{!K}FROX9tG{qYcK z0u-yIKlo9TE)*8M8(qWm*yS2S>g>8UaZbY~snWsmgz%P)I}|{iIEm?OY?hvk&*w%+ zfNo_h4jBzQ8P%Uqr_nF9-OlCi<4yfhCmSM|=eT%O9=EP|J2iY&O15rnk-sUaVty~x zKB}P@9U@~+rzzI^r^oy127ytVN%yaVt_Qm|4pY)DDScS%LCW%4;P_qFm58^wg73ha z0-t4R^hQK7RBWB37OYGo&9K4Epa1jHU)7SJGB(6Sjaut&bBQWJ8@>x!r{8dpxqo|i zxnFU!P81w|Ul_zZROnXZdbbAlN`tsfeT{WRGK-*|vZ6G*{M6e|{&?eJ?MsEdTa4O|#{1q0zU;r{@-&xfM_P zaq(+;jT^s)RF&pUyv5m`1=hwY^<@-mpYCK!KmZ%-xMkcqZ`-R~OCKrwnuNJ5A;V>> zMQe#qD+<(`zfQvx(`=7pjIf;Z3jNkK_ZiI=L@+XTK}-{!cZ5OD_cDKPJYxyvYKKJ^ z_hZ5(V1jlUrsH?jw~f}B0#`5Lynxm&>4Rgi|0`%okZ@7zgi{~iKxPw|8A zg7QGU2yC`*gh;zK*Raww`M%Fexu@NveE(p(Z_d$NV>HR_Z3BtNeH!C|1jQn***>pk zB8d-lr!zN>D+)#x5ip!>{5`xY-_u^_es0OL=D*0#_$*VOctwyZOtM$1 z1q$6%RJwf}P>yVSYP$U7#>uNZ|M9?|ca2gG=4jQw4ucZbD;9k|Q;Ln@KUhE<@uj#DA% z$a0d+)psz<*2tF0dbP^0!PJ|3r$+(naWxn6-cC&%pO%?IF<+LWfCrZN!VbMVR@=<2 z<*NY({z|!+_Qpa(ctmd6>6%c@W?kmWA0O}8&}2J>>U2l!p;m=gMIlyJ6&@U6z17Y< zu75cPonx^JU9@^Gf69dHV~_#FAaaXMJznT{jjj&VJ43sVC0y0hPpiJR)<%qYcUZQxTi-Sgu!IoB#0u9Sycms`hK$@-j0$J)*P}bpP-CIak7$ z*U&wAB7G@ywwX}k^87jA;dGEl6H0ZnF4F$^hp=71hh_yxA329`={Z-J+ng`nKk1Do z@bjNxeN{-8kRk*T@XUx1@Y*m!xF&H$Qc8aYBk z$Ha`q1a)Un$kMR?iDjuw`=_c;k}ix-fJd%MJ+?hmLCuSSSpn|lco8EufPU_XGUq^ zG5LZVK?vn{{GhkdOT#Hl=rK37s&UZWFm3Cb&)VrAq19xq0vdr58r*bYwiLmwp%A+n z%F~``!iyM~jWm7R@u$B|FoyDE8=UUi;kc89HC#^c*P07CIy(O`NH^tXVSYvUaI!Ee zW~g>^sWVOB5bNH%^`3R+eG-Iag}J`+{W`}~C^Sm#y24PTvb zXBG>k^B89jeHd@u6YH~6Co|>vH(!Wn- zEoonaEVhm4x7%uD;S{Ttx>UDX5P>#p7W!L`!9d`xSEv=1Img`0yZ;(A5B%Su_I&o( znT}*$O%6`nH6W2lXQ-zK)wVkz24zh}vg|i(4<@nhC1HCak{2^0;v!C_xQ&g&_1xE| zZN_84|H^(g($fCC_^+8Xq||w}tiUV&B&V}O1|o12{D7&E^Ak-sn*~Yy(@2%)xTp8O z#X3KAfLrGyomtQ&fjB;oO$7^ge2y^vbf!zg1G&xh#lC_!x4vw^-F9e>a*6W>b;zc4 zYiQ6P%R9vVb1zNUX_U+Z$#G(KY;-)+W7(&L)E`uW*5yIh^}!e;)08iWkdIo=v&)*a z>K^Ka3UOFyJ@~#~=cy8jSPdllZvK`nM#QOcP{d#Owqtv*=H3UUfSAXQ6*`VDD1j7q zCeP4#gkWTBBad^BgD}o#6|MDqgCuXZ)LSmc?}>8_s;{{|W+<>zR}lS+TK2tEx*NU! zqVjDptNyut*UL!d{S~OtJ1=|{x5;kK7Y?(2B(mrG&*O4E&+Z@dB9ap$&!4-m4Xd0k zslD8_Lo`19#`>%&{!ny8?0yg9ag*=1y+$b0eUK&7@(U!5NpQ1;C0~eKtuEWv6zA=* zw?+n$X&T{Qsn+#G?2qLNSzA0SsU>q&!BcwSDx zTepC%R?(9!u47IQww}2%{P4V7XXjS;T3qal2m;yk|ySu4yF{S5e|GJO&7xQ3e2&59 zr}pVX$okFhf1(h(ezzvo!o7;hp*4(=3z8mqZ_gU97#SH^U^Q4)^ z$LODaL;_9S$2~o6vpQAGs0C%2*tj_J5jssBV=>#F_1hk2fs-#_Nohx^l~2Jm%46|} zaDR_1ei;(TE{jcnJbU~zh@75VYcNV(=;Tj*epY)RrC~UIH>rCt=hiAI@KbnP)+A*( z-mBuQPH9s8IXfG~U4B*rBW)iOS6yo@)*{}A2n_v?j>I;1?vd!xM~yDEjClOoo*1%Fqqz9N`HFb^CW(u>OI%BE)V z!5?1_#1}GUk8ekzhj}{SEk9F9Y-*U)|3PL0HWtk+VAvxE7L34ST#ngrE+M{dJR`K7 zMgNvgyQUF?QSw#a*2F@r)LF$L{7lWtR-U znh7UFv*fsOazOVy%~WAaDn);^j6{89owoxnljnC9tg%@@>ce}GYL_7ALbAznjFh+R zCp(%{qzw9AO-XyJ5kIRI$VjI)#qal92g!bl;YZKWkhLZf>iDnS&JDJ3r$x^X#LC5r zHi}{cQ9lOqto0+Zfa*}=Mi2TOcMZhZSY69@fr`ia8(*8@SzDIsK>jraR$S^~oC#G8 z@QG@CD~7_zJkcSDR88d7ZL+hpaoWM^{a>#v{!M*YmT0N=$fCCJWkl}5A zcYa%>nH$bX9DX`*k?+LqOgFlRe<%*Kdky2i)Qq1Ofk5bP^6h3s@9CUizX%-KHR3g2 zkG!sT?k8*(2zC`Npy8K~_yx0lVD&4!)%{=Ymn3e7Zf6#b z2k-wVc=Dt_td7-geNX%qJ@>rB*;?yZ{^2Sc@Ie~GLY zgsomLg5oDYwxHQ_BbR|M6P@L!)^rf_>Dt_x%cuImE=Ek$*ZOP zf21S)T2Y*0e_s)urq^xURG6n40t^wx$6?Fb=hRlOGozAJUVS@Gcp`}|C?n&;nk z%!CCwbrYNUA8H!YbeQ7SQ%i7H*v_+#BCwlyTu;PhOKJVXce2~i^bw8Diiz9SPOr6h zHPEi&m@Y=#2?m5}+J9{HB5q)uf~WUP_S)HZhmGo4LAfm_3$hMXV3Vr}+#vd{iydN? zt+?5vN$0~#SRpxMbC!e4+e|-VP%Bw2d!mL(ts2ZBhXb;qG#LyCXkt`3OuG5zQ37i< zLUeNUeZ1?Ij*KM;Cjsubf~QQ#)HX)h~8GqUUd{%N&sgS62Fl*GXaT1Nk4y_E-`i5ALqU?fO^bmP#~vI_zrT%=4=p{ z-3H~csplkV8jQNFWIp}tM2>tYVF91jXm% zCz1$F3;5azMviIqf4v>1`o)jADWlqVUsyhZuE2W~WS#N<&+M&n34fKkVC}eo`=Y;c zx^UHrypCu8+INIybzUv$!czC6y6+CXOg@n-!ciZ3Qu(#k9DL3?Y{~VUeCUMMd@!nv z47!Cg$x)^bOHsGHgO9v!X%7`50;q{C7U@QWePpctCU2D%UiDGIf8x<-smZ3 z5(hL*u69(8Way|O`L=PqbKzoZ*jyx!VBMc`t0(q~1yJji%T6(W=S+FW0{i}j=>dEq^aHh_ugz)Us6%sl~k zO(kQaQXByd#UsT2Cm`HOO%I~5Qg^~H!Q*Ngi$>oDS3CEW+Y~k$B?ylT&+qolN+Pm^ z)IN}mZ8Mf#36h@LY1)YBl`g{)WE+vuX)Ubahx!j8S+MP)l#Av64u`&OX++tF_LsNg z?~xP4zOsa%u=0?RF~mOPM~`z1tlasKQ&B145i92vtr2IlopOHt^FVdSy{qhpOksYU zH!UeiBB86IdS8N$89fFd!XrE$mO%sUw|%yTRY@mXc#MQ)wfV(K%W|m3&WHU+@{2#{ ziqi~s-OzG;D`!kvoRU}f9_unSuSy$u z7dQK^K5L6&XRs5Czk#WzUb!zdYBvV=$FLQK3Qe@4Y*M=D6@r6Q7i1ocAG(&$3W;t( zhoDon#JA3}<0j)b$7Y^#&te1xrC|+}V)q+om2Q)rS%MmyVgF{df3B6N|9Y^^vkY*+ zI10G9m6f56!`!!NOyn30=)-m)tqf&mTTiXrUU&apfqEL+01<15=z{aD7DNWn`5R)A zNjsj+%?@s(4v$vz`#cBzHpvq6is3!>xKlUt*}lB19k~0~CFw%5nkRz9e!3f#gl|TM zM-VyL--#yW)sNq#xHxMlU__nsb(+yf6P)S**o<4G36mrrIjdXO4LfAWfH%nChCS%-|L3g*& zKT&DHnuc3}afJ9!2r-kiAO%9EH<~OSwZd)njyBpZ{sDsQrokMAsFd{>U7@W*bTpP@qbeer=+}u5n zwj*@5N&l>PETP(kr|GHv4jSErk*7PIf%U*j6`Ub-SX;w75m@1*L0h8mbxl@pVjdp@ z6B`dohAm@39w~9;uQQ4uxiU0kuyRI%+qfAGg3_=1oTGH-2%qUpmR@+Bx@<^B9_8@f#DX zid!KSjvPH8U>VyW9l+h)jXzAxZ<2@f2)fK|k+kzgLK`}>F;9A`$_$^kytI2lAGh8p zS>X|aj>#zV;0gzHjB%;T0WK4PL8D>}Hzpqu&`G3|TpYwbg=oRx=BP_z{EN%<> zZ`XMZoJgbd>|!3FFOkhR$2ndP`eNJlm5SN?)!VYY~8A<7;RtO(jejW4=QrP38-dXz@Ken_U9*8wb7n1?T(UX3LWpQ`H8D2S z6Z{JNfiz*X`~B#70WngFll_NVUuxEzycha~Z9PAQ-nx)@b$OfTy>v&t!pH$nWlzoX zi9_Id%jTcs{Z+*-_aMs3&FK_wSJs=?C#p8$TH?3zAj3Jv;&$bSD!_&ri)|~OHT8Yj z@v2<>%}SFsQ^oT+r9b0uv{+Q@SY;Q|-gcf$j9*$xv0yw=G zn_z0Dkq;z%0vbHd{k$=KjoP9cS8SFl<^7HhcKB1@G1AAt=eShvJ>$Pw4>+6;vC6vy z9N$gK&|xVIYRT&v)-83tC#Ui8z*6#-(Bm>Sur2y3Tii1WkKTxV@H>MpC51G1X_++i2Ve%jQ-h zqr>yXJA9wcezY8an>*d9B|7Qla_7w6LKg_$t00!O>3GAT;vkaja>|(Kk5N%|-cz6- zc8fABokmtaT9SY(ZjeR9ub>=UN|d>S8tck!+)Ch;;id?b{i~{leoY)(dg&ofWP@ZM^cqPP76&cPu&m(HM!Ko@A@$;d@&Q>>w>L z#qIpo&AL?4TKCQJ$GJXE*<`3kyLhJmi^ZWz#YQFg(n2+F-e^S|5e}!>9QRO2)u@+a zQVgCK4I+9)Cn^Q4K}H#vk~R`P784|rAW~Mzb0I$eF1!_nZp>{qMzcmu$cvxSfP%AH zdPB{(^TN^`x@4w{qz!0WalHsQ`QpX-__lI8o4rYxP$X)PTq2PE&L4p08jf=1yi(8e zA?kFkX^-o%^sg*jOWr-YLm$dtnsMWp_@*-SI(+WovJmobR^muM7c_bigORO{;`gp_ z%S(YIs&Fo3Z7pxz3ZJ&>OK&IvIbF1|a}4=o$)uX;febF64Bx1bok^1PWbl=V11k6c z=T05fX=;gF?Q6nwyy!8l%4R)PqxDWop?9JYAQ+Fioygur z_f_m7*MvLJ^2}V#6bMl^vocXY-nzd|IuPw*W}C45=3Nog{(g{I=9hh-S7cu*fvz~> z7WQ=`HrX*XAW`&x@X>*HF)@XHO#j#EeIO@8uJI(@q0G|-{v9)FO{=Q#pd@5;f-=*{ zGk#AhB{+ckeE8h(A8b8q*7@|ZaawC|ucEN{su@H(`II}6pNLP*Wp+lwDGnvVP9(zP z%hT*;5z8}w>)XU4X6&B8Zdmf-Jy?}UlDx-Sp_MR?krw>~3f+xN$vf=MCLjZ$sdL7! zC4)B2#^361=m*?lIw-m%3lMkJ0BYKW05W&O+6K_*rOoMiY={GQPYFRC7-<=iLOl{F?Gq$12hnlUq1m}ELcnWz1%;bcrP-y zTkE~GD`b5EycF~d@ssQPndbGqPWnRyZ(+-Ab(ChT~qDspL?sF|gL=+Hniv*@%V8`OF-mhF=1bk!5 z^BR9!?X7TXf`MH)5miwb^!~aCXAJWC+?Z8(f*^`TO!DE*bLsLoXI{YmJ8t6+qMD?b zz7UU7<3=BPH~%0Z*0CgIMLphBAM*9-gls=24JrgLxQ8wG+8^H6v&O`Ffmw{Ezz(+; z8@fChdXd8Pes#2j5S)NjR7(a-G_HOWXyb7oqNXD->vB$7w?j6DO>MPn^0-1 zQ66d`_Sx$j|L)VDjNy>UR9pq9+i-|a4&rTyCjTXww8MA%fN6Pf>YYYL*XzAGZ11vc z6rq%oE%rF&T=!<~cO3irBGYS<{Ke?vm>_asb2`2%-wzTAgREatxVx)?LbJP{ndOK4 zW0%5)mc;wh6|Oa+Ki>n)brO(yY9O_$*7mL2YgU`dn|W}07RYFZS!pBn{Q{H6htGUZ z|FxXQ7}ZYf4${T=+OupfhX~i@GJ4oP2vwF<;n#zLu=Y0Yue+Yn559j;_7+NR>v}a0 zNNV(qF|gzEnf3XX(g0+a2W8GMeB4wW4_woT@+hq8KRn}?)9vN1Tq{q_TkZ}VPsHKk z#>XK9nc({v>vyX1gW2gn9q}v+pM5^B?rm&UfAu}qsx_r0$w!12sIzsUaiuWq*U~g&)qO(boe!cYJbCpQ`hvY*20)z#g=4t#uha!g-(%GZn5K&*xJ%Fg!D3) zKUeK|2pIg|D5eqBD)Sd7DMO2hJvV8I_B@I4n8~P+GR$I7pFS0Q(Y44$`WeffTa-a; z$zB}Ez$`oNyHr4mTF>QHMlP~E_MBQe`XEj2+mMN<+(_@OMdH^J>It6~Vh^QB25D86nNUG!cq7h(DITCpeU^gla><~6G!q2u-X z1OahnFh$;V;b8;)PNti*Rf8)Yx=Y%1KGF7p5H9l|;BYcY$=Sz|nw0cz_*0|xKOqVb zC7Ez!LVkR@>Bf(Ve%Dzs$fzI4$*vtd^OtBO?Q3!iv2$PAn*>E`Z{rdGF7w~oLQu<# zDQB%apjY!>W0#=FsNat9ng%AoIAdBIAe3qVaE;}Oub|eyn0RP&2A_X-&G74P@r*xx zN|6+djAWnkP2~y_P3w)rTRM){9;13+OV)-06m^i&N=(iFOw0k0?T;g~n6T>@5C?oVTvJ>(7r(v7J{S!+vS4lo%kP!JK67p=Vu8+;3 zA-iM*W4q}Bxa2Ra8XlP-D^lcf{m+Y6s_;=r9w&k&p>pPr;8gI7PCCIbGHFzhi_E?s z8&gTw=z25C^aJ0JD}{yXTt_ZuE}rsSRp;$UKaN1-2(uDaB2N(8G*(x`4QyO|Cn(pB z{b5OL-xK&Xq?S`J6H5oQCS}_$me$Q7Ry*ImbS&(}8*GXNdh+>e zTE3-;y1ht(X%aKF%N1naj7Z4%lD&Ev0fFCk zQMashi0er}Oy^lnoxr^|KO&w|Y1Y}jU327gm3QIGL_7y)}GLT_!45xidP(D_;nR zLB^wZL(P%y(30Kq42?QC?7_gR(7wZV_Otbr&|!=7qor()5hz;B1S?9h4)XbXarfXf`izS=d}VSUHjcQ z*o@_}neABRy&Hj^SEaz+m$#hq+$&^pZ%C-cDGJhpciB_>hrReP6R`&hdj4+?yG670tv)&QYWWaJnQ&%b(u)Sr$= z*Q6cF@Vvjpmk{M8%iWWQU#rdkDhwjI3{@I`0zcosDtu+lw-P!9~6|PY`1~tdo!2jBD8{ zA;6Wt+4S0?Un}7R;rvM=(HnaNGT}c&^Zrvbv(6pG4u0$n@#6X#GrdSZix=&ws^ zipL!CsW+**f8cD`iM?yr4os#tbro%>5?nbc@0nof_o9!REG;Te#UtsR4)-~=6GlTz3eMzilGqAjLKP57XF#%53tis5FyYv^6!e6*-4kAT0%Uqr^mo=lhoZmwX{P?> zk(1zEWrN^W{;_!RM6in0ixC_`GL6471FxU(G+)dqQ0Vx}F$b)L^{`sTJ2TdvC}sfD zIev9EYPU3$<5kUG*h`v9RPad&lNg|s`ayw0M7eCgua5CDUZRIZj8hM%M*yRM=%!s8 z1jK;t!q@}^^o!nPSUZVJ8%J(Mby0|ChEs(`^~VQ@oy>VRYd)*)An8*hT~B8Z0Fbo) zSf5*l5o~J(A9gV@2fW%Om$cKeuJ{_pNlr1GZ#zgESgdQF(+i)>#hnuRvW-k@o~aJG zo_$+p5j;k2qbT1S<*^{#OB6#gNciaR`d-3!ey5wv4nAGHC$lM6(t~YvSF;fb+>1(! zPixO^)8e;KhOWWb7}ty$=WV;@gU8<)1Dn+cMPpK5%s5g4LckmUDNRny2fI8-)^(1L zL7-~g?8vmrIImSaJ3})6d8X-#Oe%LGjga&nr78g?cB*PB1v6nvGJisUE_{YB=yb&G zQK*4c%uw}Uw<><}%AXH6k>Gq@_>eS@1n?nl?Ny{Gb`s%|P$F|`06cg3+obSsMll?J zwsrf!kJ_IrczQxt6F|Rr&in6OGCoXFUzUD*7M>eb@9tWdAgh7_%L{d;Wri76gsk z{lgA$(S7NnCJNQnYoD!!%D8b*&dkJa`?~|I~?e)GM8_3Q~=z-g1`?(Gg zVoubwJ9AjTd^tD+FC9;RGD?2n<8Ad9Jc9Y)V#O1l|1UbpV@B#|;FAEA6%Cj*hSslA zSr6FVdjIN@o^~8x^i{+-fw{jUt{%_qj3-M2n7Ik!6ke!D>_H#|hP(Y=qs?Ndq~ytx zb5{Gu{N!=0##=^z%R$lmN8;x{$M?o{_7brRp;BdUTF%!UPW$Mes8&<%_`1$sANik= z1J9SA*|xh9;;LH-_U_}>ot+fBHV2+WlQJ(h>m+`X1>nQjf4D1kz04E$2if2B_XMwK zB}l?l5)@LB7gIT9Z@AAmA6j;c9qRn%Uq^EdeRovKsG$uA%>U|KX8EXtT+6HjMx>3m zprEV7|7k3I-bykSbLP2H&u5VUKznZ~8NZd_>Y7AQiH*LuhaUWVCY@WlFMaw=Z}KkY zW(%w-v*SFtCt&epeK1$!yf8hJzEAQ(ZDS@xk308HDw;ys&zZ|x-cMEX2Lv!xw_Mq~ z41Mcv8%0w*xMnm692%+|^!8l}3mPDBqnb-EbJfIM9YqXM>zCQcW{>VaG5aB}?aOMwV-%%j1c;}`$uG`xaWzk^5 zOn;RRM;|#Eiqd`Bc%kN_Gg7SwYj#K3IA*b({gInB+j#{OELefjJAK0RNO??b_^z2= zPn3f+e;TpaHB_gUx8L)uq`HjgPQ6sJkw#uEt7#)JprQ`UL5L=`66NpczZBZUnFef z@H#NIu60a~$wmNcrJ6P2{pJ@5YqEu^%IrEiP%G+K_Pljjc)#W1O-Kz$`EKN1?gAtR zmCO=6sK|D*4jQvty2$iw4OVY<`2Gws2s9?hS+5n;fCczoynC_d&{bdeYeM;LVqb8B zs%!$aXT8mIMpSwW5Kj>N$LnZw?M2!czq<=8TsGGc?l`!}W5qCYMOUp`IOE$}m z3c9O+D=bM@KI>(6X{9x0)%6J{zPaICNSF=!Fwf#vN7>rYy;}Y6`f%QgWWQ6d;m$0} z4wFRJ6N&DZDD%Gm%Kur+-ZA$&&Gqd|O04kkU%@SgLo5H-%f|(~@~~X#*C$VA9!i68(V%`S38tn!IYa18TrffHD(e8}9)~Gqseq)@_3J@Q^)^Q49~`4M;ww z0vIErn_qS(6BzsAnAm^-p`gE9U2NW;x;7ie?+1cBIWQMDt_AN0?bI$39%a6+O%75M zVz{0boCyt2bOO{7CjY1ljVIoYgau_IU)qPr6#|Y{(F05o^Gl=viy*>_f=C>~9U)R; zAgG$G9E`X%v3fhZ?YF*y!)aBOG~=AHE-hEp*Y*PNQiAZlRG#4@co@+C_@)(dtJ4#@ znRR#;^hacnFUg()t&15vYm#xDz8UX&CXtLG?b<~QANnYHzv2Ay&&5lB*k7Rz5_YlO zxa6Fti6gFEcj$0BXf~(SpT^4!ZV8st{kYmVC)2*L+J^f9{1!# z+*Sj<#wN^4W9%AbIQZ*dD-3KzqUq9AZ$zzS@`ukB#Aq&0Eo`ZT!6TlhUQ<;^T=KI{?>q!2M+p zM8IZ)+uY4#5tg*~gxjbR$|y1dU0vTZ z^7=~r<+Kdd|DKkC*9_#<^O8=_IsCo++ww`#$d{p{QE9cgR_Z57!&Z-J%)g&qQKhNk z<`gGR#%NDIR}o;IEx~ZDK+rRI*?V;pscR9NdlW=QDq|6O@lTm0*TY~bvzRc~M$hB- zfDr>@4N4dyIDGNgA9x@4&!d~Q?pFSvd#7n9DAQfh$sn%CWZ{vJ^E<-{v$PYN)^RZE znL4M(LMx?B|9x6=x>0=n0@j7Zj#xbKSz7J;`v@y^r6ySqW@s;m1Jj!~1Ow>=NXyyy zM*~`siC{OL8O(C8d8vwVdxG4 z>5x!bQb1tnPNjvRTT(jS@j2%_@!|b8Ke(>_Veh;4z3;WweNR(kC3#(6j+lPJo_R6E zrL!iM&uZXw^&aK%-L{x&`RUsB!Et|(PG@z!lJAEf8%K=C8{-3(-ELN7c^^XBBjX>i z+az8<&UxM!!!Klfj#};Nn(#)b@@Z= zQJvE}_l%m=gzl__e{jDnq0L(@QV}!z<;QGwEC;WWwR!+EOb$8Sj7hs9w}$(*+n+nq zYJcCPc$Mb6i`H|kRB>`Q!>44ghF3af4h=Z|PL%!n<-=pc%oYlVR)#)E$lF@W@&hj6 z(#Sq>_S_d}Pvw|dCU?F{^=meg=Lj@F^qALiN8))+07I=IlxX214E@j9NcCh1arShO z`tHr-5H)^8mnSE~46^WA&=A=Vi%v1}k7A|X3B#fPgp*>XO~Rr!SVCGJQQ>6k_@wtw^TK9OQc8Za70kBT)ilX)b z(F4M%UrfSMz6`IkvBF0YeVulpUrr1REZ;=q#VL*<5SenYa?I$&tao3&gG%dR7p`vq zDFOhlTeUW1qM7J7)rj{*<@Dv@un}c;0E8mybV;nfiGvp+M4Kb!jtHe(%|+&UWD zG35~?i|_6gw!}~osdk-%BIEBuc)%c*=VkJ%JRj2t0fsp2H302s&9{rNZtNvGar+eM z+B1|aSSr!Vy>RX+J~m+jHQ`|*WBjjl!$E~g#&m9nUSerkpiKkB_MI`#{z%3(g<;ZUgKdb6ew`Zc zGPWBp8bt|{6h~q9ql2Zz@a2N&qx{4I7RcqLzT8tOK7~1*4aYD5 zbV+Igy?KdSsKIHxq``?!I{_d9N6cR_z~%Z0MahM2XJoHce+f|b-qU8irk-%2T8x&-6p$att;9lP&9=K3~#W~%;V=Z61 z&i&z($hn&Ff++b8=r^k`=*<3BX5ibneM{HZVxStX-c}|nT%=oW7e6vD-LN)~gvoF0 zm<-oFN3UzlLabWttJtjHs+I+lw;F~L3-U=(25YGYZUm{t;7pKPk+_VN$LaL)qaXDX z4HnEr<-~}XWFbeUv$wE%K9@*@Cw&YtxBHpDwmEvA*ki!x1kr{AI##{mPJssJ;juk( zSWn_SuBEGk)INlS%v_Kc%*y@`vZSe%#E2BDIHV?wD8O^tW=&|#u~jLZX9{h)awtGB z>;TwVM=e9|o`tB1dK<#!N5JWZs)txuJfF*T<)2QGuTs9N#eTp4z;BON6g;h3elT(@ zEpn~R5KO(J2d{wZySR&6&RWf1;dgRA@k)J?M_bjD>z;W2QoBw$&w%5VERjnN)H+BN> z(t9_;_Lk}-G^87ro}W%+mm!ifO#J@yLZ$5iC&*djfBlPB1A;K;EOLf1h%&yMzfFKD z=MHxkm(wMO2gjMWkUn%gOhx?Rv#Y|Puga972o*?x^?Vu#O2pv zXOr<1t}hK>cLd_@>S2g#tomofmM12-UU3B0NteTezV6tI#OKD3L}ooE>uF( zhDKBQsuu}wuzXQ0{R7Zrg6OViqH~mkXoF7-w68vxK0Bv3{pt(s-kA27Qlc!bY-$9m zJKy8}o|A=#u7{D(X-glu37$6##Fy_04z@J67KmF1--C2gh-Cf+(qx9l;5|I-nU*v~$m!g3~M z9ye_{C@d2QJS$UgQ6s%sR2_$8wn^(LVeX{hr1*C1twA-aCl@F{k=r)8O)U~KHQ(;T zV9)@CB-NSbIs?itHOemw%H?boZBL!%waHO4l^MIzrmQ%&Y@q8<|A6qDtz3aMd;(nj zI4mVHa@vUC0(6s%fcb1Q@eEDP7cF{6lOY}9@9UWLb`G%?*TrzEy=GKnghBk!F1eYse6IB05gogXMjgX-Rkwo{s1Pia14Fz=8eQ~$Zl zOxZSgOmv+fI@TW;O)BeeEeyOk4TdPA(W}Pu%L0`l*1(JKBXE$Nw2eJqEuo!lHS+1h z!fRE{*4sdjS_ib8<0QWpclFUjcpV!D^XeV;pZKefL}#=T+NbY#UP{a6UyqdF@?NGO zJBC-&qv-|Olv{vf|N zi2*@7xitoUidTn8uf8A{9!hs**N0Bw&4wouuuri;Y+&>7jkpd^%_Nur=Kbh-efRTw z&3e}u?Td`7m~|*M*>;w6xy5H4rcvhvlv|xMx#XA)v!RMK#yu}wleprTf0j+;_9uTk z-dv?TdinyE5J3osR9NDjMqFMU_wF-+%Zp^YO0lWzGRW zKP&Hgm7DgYB*AphNgTb5PM`we(b=ylvgzPK*w z*z$ol?N}<9{w!yenGc_~B={>`0#1s2f5g!g=EIs_nT~jD^xgNUst+C*`(Cn;S|zNR z4g*JBo9=PDHrh62*t#ER>eU@6@jj34^3jFM_c`IbLkwPA?u-nn&yH|LS5l?{xUgkl z0_B)*1dM^5;vF0ew)CSH>-gAzs{K{NBe|ZPN|4l<)H7HFj29K0X>~rf6Xz4Js}dSz zizWw;*@#m~kn5j3;vsj*kUm?rTx7v18$9%XVL* zW4cw3OprN**3!+c#Sz7z5#cO+deWFx*&CI|rQ)8DiXX*HqBQ{!%^s;vb?k9}z2QO= zB%$Jp;f_l*fLI?=S#6&S!Y6>?jQ!J5H~{*bQ+s-B^7X^#4RY}9DazHUiB{e!hzr9I zH4$xO9FePT`^WFdcQ}SjDIy9t^?sk{{nZ%`IKPPGre`tHBbmtQTS7Ol&A7ZHdSGG| z7vc=+AhT>`eVFy(4J)==KULcto5zT8=vpMH=s1L7Dr9Qq+GD5`?4mPf^b~RzDPvdL z8(mL@&6|6@^I>kIJ+?-d5sKQCl^L|&;~6Lv(uhmAjD3bgCG?T;bvl!URLEq{+?2){ zF0)HR($O4@bT1I3gtvXp9pBcG2nFvj%?@F^I!Ob``$Hh7A#&@o{X$oD*Q>4G+zh*Jo#-7k|1xCzo`1VI>*|LXQ5o{C-@x?i9pY zdt25~0_{PYaMx{@WXF$9XWJ!kJ>G?_u2%18ja7jU&gxqJBxB?uAp9*+NRF25K}4@% zB!WLcfhI!P*w(HvNt$squt)KglLQmj`@t0ZUJ4OJLYv#blGm)==HXV$&5BBGXFCQ) zJZKNpTcyh9(#>-vok(pcy5YNVui>WPn@4}=bwB^MEAa~^gUKP?)%Oiu!)=vdr?42j z@DAm)xyFslyZkP;5z&HAUrF?$sjm+>917J`eRBhezr5MkGgyUPjB>w(?2(tdIw|?u z2n>HY;D6JNMJ0I3T(_F==5)YhmE+SwVj=Uu8XSvW+5a`&epcw$Tf$AFW+q-czQ^GH z1@_NQN~VX;a_$o=bU_^@IHxkYdjmdKQqkWknrzG!QE&6#u|DU@IvF*nvD;=lNCpLM zvL;AyE+$)Gv|rxeQGtD>nM#QCIw%zH7D@DeM2XpOAYZvsYnjXR2fc-xw&rZ_LSMj+ zD|!m%l{KSMBhmW7HK-)tjP#`mp1?brp8z;&d>MXoLQFTf6kdK}NV7wPWj1pj^=rKO%~ zDqPTBO5M?FY^YvYv|(TfDKB>?lJ~bT{|AE{SxLnZvHawjH#bUj=KW@T<&5z6btUtC zO}Qb{c_($4F(Dd45ViE7W`woLA)^8TIU8a-=wZKNY1x{ZtL>~KyQLY;H3MJHZ$K6? z<`_6S&8|G=_10&!n6X$WxE5I8Tm7+DG7p%yK^s`$-}4(D%c75HPp9AM4=UrGojEb4qJeUgi1ou&Uujw|-X8 zwYH}F?K#%0^U`PLSEw0|g7k|hiD!PK3Np8fedwi9x7`xp;BlGEol;E9(t|KB$ zFq|*fBH7keQw7!Dl23ho2+QVneD6{@Q@~?pUc(%ub(r|MX90hiI~6@Y2+|>v>chcw zn)R4^O{|Qtp|*>BrG=Bx8wtB!uW*}fN~^_b`LRuUC!80kfu|-ag9Ug-RXkw1zeo=g zSobV;u%wS*%L_43W1YD+W9BHVnxyjJBTLc16$Q!Iv*Kf5EpC1<_9G{*=+^fcP0p#8 z#z9v@yFx7hcSrh;Ul$Zu->Q*zPf#CYWE7mtDW=#r*$orNQ649LT~@)cHt3_l%a$`5 z=g)Y@G9xE*?@}21lV7uQf*%k&30L9LU+I`_GXoPM1q9P8=o{e92{s89i^Wf%{!+=~ z+!*$0dR(qbBmoV8hW!P^r5=BPGP;HF5VRME5&m3zOSBtZjm?V0sb8h5=HrMkMLYeQ z0l7nt2#-L1iuUdA0)iZVW7OK?9y+@&`CDr=cnNxf&Ni2eek>oBy&^q?nbgXWVXpSs z-6%Mf`z*uT;qH)cfM8=d5ZB_cY(^$%i#@vKJyRBmDwX>R^Z2$M%?Ndo+ixNz!W8ph zzSHFe-f*#WqCc_uEHO9{RKTg>O)u`uEk^W_6R*69j{FdNbNrAC zp}MI?Lt6sTT!3z%wSWKB?*YpnqRyu;lyK6MMKr0$Ju|;Qmpr*u>o`jpA$sOB`plH| zDoZi%M&|ZZ$4436fimen_0ZrY;wx^44Rl0sR{3~p3m>46=U;r_ll8>Xl>g4Bws&~3 z2Y#qlCr|~*ciCQg{>*SU4g(%}ZnAb<<`bm+7<{{s$^VwTX(-6Ffdzv|`ds{3$c=@o zL-zbjV0Kl2aqXcPr6ud?NL?o1Q$#&qSpQhk-GJ{1C?T#-uIqV_;#<8!(Li4~qm+~s zF&SI%&4^WN`r95#GYC5;XLsYAWkpcOMuLQ)HG|){&~{y%`7hnS10N4)^`{{Y-(y$v zo-@?Cqj~h@#)d1tfQFqX28iWcPUy8A3pUEsl1src<1wch?zqy|I9t@@VL_#Klsgc1S5#D}V6^lt z*0@NoTBCx-2jR9%lOT0RSYXz#5oCb(y{gmQT{1GcjFM((ykY)yV?`zQh-Nr@ z$0$i>^vCt&XH!AZ7sA!Y%eMlKC;SaDW6-Z}K)=P`Z*<%-Yi4(vuC@}BWQ4j09kXG_ z#wj@Ykad&!?pu<66Q)xgo{xPj%a4}opunfTK?#0pejMbklvCCtm2Y2Y9q7?4!Mz#H4An&#Hh1cfAv&TB3V-5x3;lQtmPS9P-Mh2ID=yWH>kjdK zg}9I6L{4Vm@(eKSF*DYnwBR|k&WD4&Gu;#3Vdo_eGZuZcM;ZLn4v5nCWOqe;*mu znIfLSS+2_PD#Rc5=T_}mysGTUa+)xD5|Vz)@*nwrHB=)&T{y|JKdywHhD9KRaI|<| z1jdptRy1LQLdZNOj#~j;-I(NUkC1fNfx`DR<|)zOEM_~0DC)b?pf$aMARC}OwrK`G zEQ{!2QAUCl^535xGekTR^>UOeccd?~4p!ED3Mp&;xvxiL|#zgfNc<{8D~k{Hmai@i3=YKe72`Nn+R{dOW?Q1Z_zZ_n-c zCC&qeMVHr%3|c&;>ta45k6m+3lJpy(yfLarinm?%j;4XkmSg`1LFxSf)%G8G?{_ps zg9Y;U0QBDWSR?bUoE{l<*8SudD7Td!)=MrL<6}PMblWoyG1&c>$MKiH5(pC82}gyJ zm}@?&WH%_StJ@BEHTC)J;bU-&*jayuee&`RTYN4b7CJ9Ywaa!4bp6#M+B|bw}1Se4yj04eeL@r7x_KDJ}~S`9G9&)e6y!ZFJX`) ziCo7Tf#DLO_o1ygG%_-9SZUPBb`_^w0PwOLVhNB?yVhCUNp zBBkn2RD#i14uq!l7{h-Wvp{Drf6G4CK?$wLZpnckCe~`nl1>QKAEQ|%4wV32K8I5S zB)`VJo*`w-bh~-=CssqL{*?eB;XNN|o#=hs=8W4NfGxFD24nOPeH}SE4>v`-6 zH(Qr@iDB4n11OjOI}OxfV0A=8RYdWDB8Ofiv?A^+mF`6lb9p#2@@qQg0sr2K{+#-Q zH_oQ64`fz)E--NXPJe0n`F4p*KHSo@3wvX%r+C5;w6govOrM6(hSV8*L)suzrX_7ak|ExgNN_AqIlU@x+?m9!=cO&=0<%*MEOhctu z{$w^n#BS;Ca%ESti~A4wj;>_xB};=^Y1+QfkYs#xos%JaNRYrJlDw20u6Q4lC33&D zDG0f5?qn0`h`v(RGW;qLGDO31MR$KW!B$w*L``j0$>)KHXT_)bak$5Tr-I6?80OGNEM0EJ zcE!NBXdU?K)8*S7pZ%dX$Jg$`L~ExX2R|QnrPH16hHQVleK8*N`e(~Qa@i#EzX!@6 z22?wXe19wC5N}4GQ-1yxJP<_o&~YjSqBLY;8erSFQ|EZ1!@su{>Bh?@hBq5+3ax!_ zVU0@^d(Wd3AH`ECZ`eWP)y#&-c@$-+?oMp^YTTRAz_^s>b6S=<0gxaauuB+F+p&Pf zt>eBj7C{{07znKQEU;HPDr;LdUZ2oI-Pf*bp4gP*Z~mE(eByiqe4)pDy~N?L*5V#$ z@^Ih(HuxW$)Iio5BZ&2APPwa#(McX;0uwpRM$gHTXJqvAor=3 zY_?Q*V=8+13wz?K`{ZNxr(FL|42dopW_<+^*-ycJqIQSm!sL#f4`cE8=yy@%7jgcd9OU z!ZrJa^0<-9d}|xtlCSye-UP-JkO@kP&fP_rw8jzuz%GB{7+9FNy?dcClUwUbwKRU| zIMV>Ebz=Sz!VCs0VKr(<5S}v2k}jlcNJrZ-tfDyNqx#TEOW54+NU;jA!V#V%+VP?q zoTD{Mqb33h)-YlW42tX@oQ^ZSa$R1x!&bAoMUgQ~sHyJ5RPy$V&wc&Jz00Dk&$I$Z zzsc!lU5G-gsDRr`uE6}<4)kdkU_ZSA1vL?xC9rb=%V5@Q?jk;jZSC#soU{2M1NDX! ze-Tj`|2d`CqrT2pdl-6(d>)yk$ydizTQ4DLSby)RXJ#X-wnOr6TpGcUTrky=q(fF} z!yD=$K_*zV96PE&p^m2(>LDy$&{yI72CtJxk$p4A2}uu>lj=-c=8xkz!J$xN z-)+Jp2lC8tDLlu86zp?v#wE+796I33KGEV!5w=Tz+3GrOM>2=M7g;s*e7$dm)?0v` z6&xJrdl%j_p^b<=FyXL{3X`1lQLq>$)g5HDV1&Nz<73+sEyA1`6PwAsK?(3R|AmMO zuOoBpxd!aVlIiO#Y4Yd`M2v9wjlV-;lY>~fr@Ba~P?Ma=aStyVQDd+p}fsp&`5v+8rN*%)Lg-TQ9}JII>eDW~l_a}!L7G7Ocym-W=Ktr^+eu9^}G z!VCYgB~2h%#@@wT6aU^;_K=tf*%SZ4| z_sHq^{NDVRdd}fbN7KB>VtjHy`oHkJ`4$i`DVX-ZK)o2@E3#+5jYR?ZK59yyo?o5C zr_3$c|Aym-A&i#W$GsNBHqpu9(#Xj=;)7q%HBCF%5yLIWh1HU-mBu~6G*VQ#dcf=4qSz}3 z_J7?VhY4a~(=?yRjqDs=18rlnYul6)0=$yV=b$Y?{_IXzzDBbQ!Zm=qPs<%=n1@wv za;3!Xk13Wf<|5GKlj?DueIgW$wJ|tZn9IshZ&-}jE8LXb)Ea+J=z@+;Yg*xn-CsGc zB|<5H(w_}xMx7pi64#fXzb#Nmz`~8uwU{gavrm(Sp;cbvo?;ivJAkm#^N;^=r9sC~ zrZ^51N3JdR@mJnONkJthk7tKq8|pXm+%3a^=<8%7% zt8K>CA`%vT2OSUL=jdwFPnl58Pd|OEw^q>R_4w+@Jn1bbqoUg1Dbkhq1$YpM_t@Bx zSe2P2px04z_-tIJGgr6cc$8>G@ugo!2`)D?zR{76$revGdl}9oR=WM6@TF~DODDFN z{5ExL&ewNAcgn>LADWzHIKMS1KE63HPqH#C^(e1&l8sGsdb1~M;~}=6y+lsnsg>#6 z%^{n)K=ji#7Mx^Nw2qcx4vA1u*XG3q(j;4%)Ce+AS&c^x@>Kl{qW7izv0IvqzWOei z_wpO{YrhUjp)?A{(*7D-w2V^-J(ggP%~XGoc;6Bdh}4B5&kf7y&6pYbmX|gn@_08F zG8+%NsqJgVua&f_5RRSKu95S7xii9yivpDG>ze`qTzba!;9z zKA&5^kL4r6eu+*$C|30mmI7Li!v19))h?Bn^LRRVpC?mzzDU*1B`zy{FBQRK_Y^$`bur{+h~tJ(I}UrnrYfRo|6z% znb<|5P#WXL?yk$TfsB}9Q#FN};RhpRQDi4Hka3_NYsO8qlXgzK4OWk=V;EOpDc%xN zy0bj_1D3>!m0D7zGYMJ^1oBG+;ZAKpT3=1`(p=rlGs(*|6$xckT>-`>ECD$0s@*f2 zv%7ze!bk*QQCRRxW}($2Ux#4g!BOqwB9buPbuLZF>Yc@EmIvl8Ar z@+^Avjp7_bhM zhvNbxV8HdtdTxCU0mvx+{nf-1C0lN=h;(MNID-g(z91FA*S|_bqT#cAG(j5=@NN$6u3y8BbyrHspUlxzz^So7G+g0 zsial(%^|Vq!04n&PR46;VJ-Fwmq`}lZacl1L93~3y%~gxf)^LfLvCxkd<)l?aQ3;g zc7+63&KzDAb_g&lJ9`SrF|MuZt`LNlMUy=_`GeD!=j+QCtI@b?2mtjP^l5x`=NHM$ zK|@zJdWIv0-7bf3Xrx@6kk=3n?R;1(`IV{iG-&!ak53|)%rd^BQNCvXx!XWqxO3X zsh)JSzrU32$Ucdcej@si##N(j;&mE)PCe!*mwZ_Pp7_vVPn$&L@L|^4q)=zwqHJBq zLxGDkTSAxRv?6`pGXhI*brQ-NtrWY=)!C`gvHU`p>(M#T0s&yisefkZoz!Ba7UzAb zK<7;qiRLpl_(9~nuc7h5Z zNfbVWCs$JhPgZo4*j|j-3vg_eO9DgK3oM#1bmxz*(3t@(TO_Qj%WV_5EbE@D{u5$e zUH7(XCpk_aSVV(?BEK|vA^=JvdW+xWk%r(z-Yc3I)-Ypm-1fdRGRT8%@K8W?0CK8; zb39P=KOtK7;^+Q+Ir69zxpP=y9Q4ElE}qU&okPchF3D@U1*kn!sCORN{OfSNFuK)= z7`JZtTDOwvE?1l>BHe+Q7;uYQMm2@^4#1Dj3AkXivgt+7mdy4d=Q_OConpl1J^+x? zGO1Xt8Bcur#)v3(5=H;M^#`LrIG@o2oAvg4ECC#wf)*dD2vZ2{Nz^U>ha^o|rVVM0 zrc6loq?C6S!G*ojewbk-!U>hp{S~_Wg>civmq};vU0%|kK(XyRab0fo z?>X)YN$=1_{WpPJUuePyXPXOKr{(rm z*`|=8$qs)hdgo&>t;{$N8gG>Et^h8T5LD2)YUmn|Na4QFWe2sCx6-k!+xer_dT-c2 zeE8ia^T09u#k_>bb)M~E-khg=uPZN0KAPVW%yi4?PMEZ z;>z|MiFaZZ7)v_{@(h;kYF4C8x~t6xy5DAjnt}myO@%o?8Qit2pSOBOJ1RawT>GFr z0#g2Q7su1L>N%S)*Jlb>Rp+rN7)f$GVaS+Q|52jeTP&23%8F}inz=s0NklrI&-S0=R> zz|+_g&ml3G`8b}P1a+*`o1{4PFQKrwPbvPiWa9$UCf;NKLd-~6$R`pI=z^TE4x!qG ze8qrYr+(U>j+n3BqCgU1&$LszF?AO*7;^I~O0hraTE}8XLf?ZSLc~l+JN<^5r7Ho7CU}3j>Il~$(C74Yv<6!c+3aWN!Au#8N9-}1&_dBDa zBEu<>)&cdeKFp%*q)8KW99%4gT7@QG@KE+G;#zujG^c_ zWtD3_QJSedH>}$N!T^707jR#ZB&YTC^0GKj6tN%Ap$36n7QXg1E>HC{;t{5rl-XV{ zW8+_2qpkRLx>K>gRvBAOP~%F4-3LGw5+NjHx2U4Y@MtIJw`%ylY74oUZH#ElOgAHe zJl(NCViuUFx~i?WQ+AS#%({AZICe9`w|4T+@=P<~y1xO3q=(f2Qp=yA+$o+YL-xKb zNjxw?^Wp95#c&3Lz+KtGG_EhdWuprW2ffX5lLE)N9nk{;wCG0nEEd?FxdnCKw6MP> zS%+{fM$H;Gkhv-X7nhc%R;CKwWu3Onbr-{Rn|%sC8zIFI_KqA5|OnT81r-KY*&1m|59`I{?F8|fXy z$#5JKIfNs#qAr-K6$f2~#zqAbiG*_qCBejJBw`#?pKYeko0t8+Ucq>JT?rwh$>9gB z5IeH$rIbQZMqt?3kueN^-Gve9H*%=(DP?CeyV_|LVMP%zl6pRZlE<}Aq1TY_t@Ax`{pH5B%ct2+8wMc)!fA9py(R2KwlrTVN? zqRPdopzI;$i|hNrkinp~%#dM#8@^(Tck{uA-I>^v^TdNFlvU;nhVWSM5AiN%t}1dL z=2O$o15UdP7n1n6iWol39J&(}jFD4ogm>LUz6}+_-Lz)AwOo z8ShONeimB!8%I*6U)WY**NgMKppIvEB{g?=8g-p5hPQ?hQcw$)twG{Xc+;EWMrZml z>LA_{Rlc-&fU&hhDA8vOa?)l`(546jZyQ;%zbiJ^rQP~CMV#6f+46OVe!_aI z`d1TP?7ht`u)JMi@NiDc6jp100WyBn)^OR~-Bom814zEbCDNXPk9zWJaIu4lLz_*0 zco!73TEG`5ze#uE5&#%RJ#p)Mp{QsMB9I6)_yVCv-)x2Hw+3jc6cex|SKus1i;@2kKiPwRcndDiu|u75KMo+kdYOxL=0YpkkjD5?0r9hR*h_>$Erd= zYn+@Hm?n&cHP=@FT5J=PHC+-W23pRJU8q8S(zL`Zy+_)ggde{PASXA)%ko(m%(S$; zlJG*{vJ$eOsi>VK`)}jAoDIsP%!@V4zO=pF&!r-L`_IgVx`1>Ox`J&Czfh^B)dw-o z4vMf1uG2hgReACVRzo{ed4dR*S?d;SMSTKg)}NfpETqCzEH}&>75q%q`U3j<38Zlp zaU{>hwE0s_4zbN-W^xC(}eo zhQ48UK)w-0RfJ-f8$|(x%~R8{1S>_$=xtFwGy3A15L2Zq)34r{DdHG_5}|QRwb!G1 z8sO(Graa`)u$icy_6RbzYq@w^e&JJ28#&l0e@2~1qUJ;OVfnoPhZYs%z*UMfOATs| zEuMgMA-;hD=V|BFM zDrN7&*uX6~NC}wN-xUTskllP#q#gWEs=RTwt+TeErEpj8&)FiOYV(vp@|<>G5DaB1 zR_gR_`ru@KE7F{#NmsKOcV3rLhMZiaav$R@=WbmdH)F(8Q%{n(D`pNpXAE24aEMUan zhdI&sTNx!0MIxnB`<`4Pbv9aO`q`bR(tQ?Zhqj%}=50@-$9lzee@AVi=Q#629{0e| z^p0A})f5FvqW&?n+FjHGc|NN~rM>HDZ>3gb!BEAF5q2c3Ux7UQ|8`;{)m<*+zKi-n!?LYU%=G?BX@!)aM|Piy6GcX+oMnZGsRt3T zQ&`1t?GvXaCG1{%12Sd{8yZlyO2*i^lArgz)-P4B=F&6XS8$3BCq+}^2b4rynk&L>7y~++fh)NGk~kcm2tLZt8qW+rDoTI3MA9c&5P0X1)6ZgrA)iw>G0MV5>}{ zJU-Y}ZYCk{#+S8!bb)8Ed*0uSO4Oace_}Ne=e!;{Qi$Zri1@poPGL=ssZ9%*OSaiA z+0v7gw~DK~%t0j+7r8-xcAJ=SSv1u_UU>b<(4~yUop`2OCdJICIGvsZn8je#g`I;9 zo$aNO_0gkXYq9+$CIC>m#R^d3sTr;rXj}oPYwlUN4NklBBhT|v(=QEu# zJ+v#>j4J;J6h|%i=m|-kqkpAPcdAzukA84nXzilO91(6}=jnn&QL<_4Y%i6iu{3GA zr4lU1G5!2&trU}GUqZ|S8=r#$@kfI8&67$G4)pU7^6ymu#t96pYzZMLT6cZK*O)!XER9 zUTM0f{i`^J9bCjT;gKrMWEN{Yp3dR1lcry0BRf0o;;4Jh6JS(K;SNi-xz(9I&I-pxFs{xbLWPbm8AF|wxv-7K&dPk;~no_dG2<}xXkoej(-N!UT#4%RHDciM{ zr)j7OIRsFM)LN3BHo4VYU5NB@%Y*G;R&^&4HMe3Gmlv%FKj^MqmRx>=v+~`r{6rPQ z75GJx9pkFjR#!uaJyO+w|B05?abFQ{acX&6#m=EVo>jCb z4!otNfr8o=(k)Q2$gqoEC}?REpM(2zgYFwTAK!={T)dZib%V5K%Hz4UXI1UC0m_lW zZ9VeM9v;NyCsSzP(wsQ}4tAetFG1TW=AK4;B_NL&SWBeT>dJo~UeE#U!CvLFB!|+msTF7T2!kvh!iiZ#!-CUp=?-mbl#J9jAiffgzE%gNSX9VkbxM?tyq|-14-_8Z$u)c>+Ug%?KW_6Dy)FQY|^zD}# zYhp9Esqlj2qskF5WDl#61eoJrEkb8a+u{w|NfuD!M9$AO<=BQ@YTd3^I&>W%GVkx; z*T2jy3*zV$*yKlA;A2f>??Q5%8jjk1L(L`rrH|Z`L0vd;jQqVzoqTrKVZCM>M=+&?US1Me;RgKutcpcvq-{zMEskA1Ct#1EiM9XbwHX1`>*joGY? z#bN=^;wRT8n`nH423Nu2Q0dQ;4F7gbtjnz(hxRa&h-y!Q|HSF;vv+_y8a;-AlX)RU zMYiJdT2!)W+{qt=jPpm1ZeQl+)S85v>ClgY-kVE7FU_ZDVNKG7Dgjy+(sw1UXsNT@ zH@Iz58(~Aogq=kn9Z#J#vlO~+gE^Ks;m%|YcM_9RD>xzMKxO5*0)1)0@V?io$cY*p zLQ?17baG$IY@wv;-$X$Z($vi4up~!0k8c=WznBjLDtrN&%+x!X_2XgZM06N%JkK7%RyYt|0nLi{6sYc1rCsIO+6I$`zR4n}&r`sJFRBBUj1glA=dp05r)>Z#2;rSWk6 zi~}s^AggJTjHodg>x%CEDd^+dy;}Xzm5y#_)Q*~GL>zUowl{p}jX4IUQ>^P(*IQYu zU9zC!#ETEoGjA_LgKYBWMVqZ@Ia-1~2d(Uq((WUX351OP;Vk4-`7h#22@Ae`P;A2) z3ufHq@%#<58VraH{ZRTE2Epq6M~kvZ2m5B*CspgLZP;us%l>fC->#TAP|V%+;73yf z_c<;9RsecX?Nl)s+4Lp9n1JHq2jlUe&ur~xcvdNTNi1ebOs>4aA*?z&q9Pv&aC3e4 zvBN7-ss~O=>&KV&<8<(V0Rowm9=nwEU#& zHSSX|Iuh%C7>P@GnvUp_%-ue|Hj-|rCaZK$sIGOr*O;P|k$;c|v@9Ipxc#vprg8X} zxcJ%#VY7oD^0#*=YInn4y@1oSkjn~1*ymWm)5!v;1 zB3}Pej6{;XSWp$f9vmFn>HlRn7LP|jyX z2S+;x{5PA|l*e)Db#Dxi~cyE&EFsz4!flE7(?IzDhcojANqf+3v*% zw7xoY=m5Ifn1iuR-O$ufjMNk>Bs-c8Z5k(xi*}c_)GJKdSATW52sG7~6L^2c#2|uB zoTFXWHQcO-iHmhx(Lq8BO0-o#xpE`69rw2KVScm!@PfCwK=XX;84iG@EKy9gR9yHXk@w*?24B_j}aNtcuykhX^ykAGVk- zGEcGeYUv`hW0FnOD);&gHlh6Qz(4GO=OYUQYjqrhWbzUs-znmcA_>RZ5;q5=3pMAKq8{7+HFP6Ih zdBE*@Q`7h>i?Pr)Y`$UGd%kw~P5$96rraL%efi{mg0cK?BZoLTvc8$*4cd1c*o9$k zQjp`4h(HzMSismrB1H=9sPbV8A#yWS-*H9=cxRh{zuV ztzfg%U(8?=k_bd2-GYSzKug=%8@cEa&IU$@Q^$57ROkPb>36Y%f{}%u0%Z#yS_YC} z)$)9O{ug)yp4+niP1De@xv2OTQ92BT>^D>sKF%PmHqt!?$iR@fN+C-j+j}?#yfkU98X}CtD+N74kaOA+cfqzBR2O z{%bGSMk2CqDYhgeTeq$--7tq9sJD^aOZD_>3Qt&Mkg1L6%+`y49&dIrm+y@6_j{{5 z`x0Y+TSZt|i37t}-KNDW4;p+7(IZ3N27W-o#u&eX{MPFBz`84yPz5{SkPn-<3tTR` zqXJ=_9JHM}IPzpf>-ga*EzJnhQc&6?mq`BMr??$b&t>rw!-25y-B0O*lf)bUn{aXF z&=8}ajqKcJOm3=Y^tu=zD;Lww1PzP1w`FM|ji3cgD-AtE&_<@^;8?PbrgdgL%7dm8?o zKmQ+FZyD8Q*KL8e#oax)I}{7W-6_Q>5~NtM;10#zS_-tdOL2Dy?o!-?ySv}K-}jy~ z&basf${5L?C(qb>?X~BeYfg_dSQ73(>v4S;o|b?4Zs3gwMaf>LfErk1fHAZu_Z4Qn zc-StV=6B2gbRSxGHyEOH)<8zM+4%zaVzIsMo~+vYaXdZRhC;u{Rd>$%aLot|T;HGu zJ|9eqY)t==ZJIsA$kYM@udjHpNs>tu`CYbjeOl+M5C3T>rJj+IF%@98v!O?SWupg~ zB%R3yT^K(+SBBTH^Q#%FNpc)z^uzpv?&~d#M_G(B;_vnC+sL0EuJHgttmUnr5kmQ^ zJ(6%tSLdg5%@2xzMbib*LT0b>0 z9sLl>FfG7uHoACyw`;CbR8eYqPz^YoVtg$_$x26Wm zzf_KgR$}RQn+Cy#^*!^t2m#F!7rLs$Xo9;J$o9g;WRfLk#sQD~%bvGExR+*pH@hH@ z;^_+Yw;P;{89DEy&0WoOynUrV=4F}&1t&0q|Cp#zDdz5kCHUY0cQ|FANkEg~p?5)=ms6y}s~wSAW{tl%~}j#mB6F z`1A3(4veyPh7f@Qb2iion0|kLDyp&s7GZc3!tz3H;*S4_^<{{(NML?8I^=32s%344 zM=H2q`V0$QDG`O)?Uc8mU_hWFh_w8b!j{}>nspVeH0%p(d2KpF;r^(o2&tPh2rDQcbV0qhZ0qZ@@O`EO2@E#R+QJQoR`uTu zv$8n;9W3nha?Piw(UpXoEZ%^h+QT|Lt7t3JsIdNVpC$vT#wU-q3#n(0Z`X$jUhv82 z+%O^8KLe#qMJ^)I=vQUI;fD-Brsx52C-#1h0LUj<<00azfO`Tb&i?2}?A*TAxcAii zX)|h?8#QVN-2uxqX^yi^@(RO=7h$Ta82bWQ#A0Bc_q>kw~k$VIYGGZa?sivd`%V^WC|i2A8!FJRwI^ zPiA>a#FT?xu=9y-Xw9i^z$3`;@t(aHno4tpLAVT57l_+BqeOz=E}^yN9`sfYH>3uU?-_xF2rCS4sZAcd2I-T(dbw(0ymvpItv&TUMY|SCDz!Z7yi9xmU0Gcj%$fz4R1*yQZ$U7-cU>?MfDI@UdIB}VM0B11)kL|Q z?$3Nf$t2xWp^XsMwSh`~_>)EaXt9lwG1H4Ma=Qj%vpY|X``!JZalT22OzicZvpK)e z;>-SZL;EA>?ta`aATe45)-%AWeBd{zakt=(S9bzFz-pL%<$q4_>4F4I?)9qx7W6Ya+}9=l_>dZ;O`YA=Fc6xb^NAYTD{5qz47-Ti)l^b$Ri1uL7MltoQLMSH* z<_aD~p#`ehQjHLi${;w8Iw!@%DoxsCqzZqRriF>srV&lbu@IHOR^p%Z%IJaMse!)? z(W6ZD$(jSBgnp_tbnnSorI)!4LoK>W zM!P#Z>z1#V&R;Ak#qCuoV9SII14Bh#S-wk#$PnFMi8YB`KUQE3khLx7Y;ja#vy}G#}z6-fDh|I+#(=>KvsFH zC&H*80q>+7j7iv8dkoZ0{v^NfWd+7x9;KN+J#W>-Csq$H!qQh3Hv?)&e6+5=x8wOg zFBQ-GXT8bfFpK~x!5mD6XR11@EXoB#W#eACtV+3F$NfcQLNZ%heb@|}(Xqr{&@ZA` zzdXqc5n#NX%;tm<3RDv?kGiXF9Dp!Dud#RGzbohNJ?+)~YET#_Ty&>#PiV$p%uxBq zx|Gxg*^QDg3usGWZ2#>?vbf8WjG*v6x*q!DKK5~22#J7QcayvH21Lir__?o0%AdUe zhY&dYjRy<8sR2HOnuS3PT`d6`_$gA%h?msA*$Vx|whvFok+*di_2!HDFf&)tNr4BL%NEckkcZxu zdc$fQ3{H&^&lxr=0(Vx+`ambA%}Hh*Vd`1{IzAv0E>P+{%qu0HHqX)4i~aZFaXup5 z*m1f9jnqf38ZuzbI;Xz~4hBYyy3R##JRUx|{D#=G3%96IrP}c9oPgD;_bCSCYM)0< zS2wukF*9iK_Xj$9JsyCS<-iQ=&=8tLgFr$a%z+SFi02j-)1dm}riRPq&Wg>jio;4+82lRa+rmN= zc=_w5>~-&VLf57zkzs*pP$VjcWDwq%n^z#NKBz1yE>cMw5->-x@bBeT_=y$j6Z_8< z%iZT`5Lfv(F9unC4|E8rV1x0we|=eK*X;6!H_u`V_Ep3BmQ9Z1s}i?v700LHYSp52 z7=||&T5*C)G)BIGO(?s8MdTKNivNzy1nT>AeGvgXzrZ?gU={6&(D4iI0P!hskuVyH z$fW&>`~lAhQc~7Pb2@g>N%2XV`B2LGA1GaaDZYNbfL>i$4Wzk;{SUFiCkg*(ERB4_ z&WjxuIIaW+Ckbg5LDkl=0UH_#`g(Cy*5p>U4$`c1ngg#2(4cTPBx-AsZ#iAQw<~da zH5ROnmg(B*`<)F6wamq!yK_kbvb(wE<-jVlKGX9J`VXvuTOHNasDp#djVH~Abt8>c zn_T<33bU*%wkARTr|m-WmSSr1P*JQM7}G#vnUSCKwii3e^Ll2E_jGp2Ue47OgOn__ z)<`AKi?_fi0ZL2yBf={082n2k-TfL zkCK%Lz{))dFf%g9dKF`4vS{KTDm4v_sEZOW0{G~82k{%@vI%914+WYk^E!h0{+n80Jt%9Akt=6^4T*{Axb4=DSG{*XNW2PYKtk}}@uqU5aYK^Wt$w4hPb zy?euGbdK}lcl{;J2Lk~?NgR0HybpYSfTe?k>H# z%`bZ#{9NPTI(Eo%GSa^1wA-z=>Q(#_bKX%7wnOU1&XpQknka*vz)cz>h70iV4?mKf8@Ri;L{N z)Af^bUm0%f1J$HhOjlP-4Y*Im8JvWQda1<*+^r7*?#71P^`}RHR}G^aUksPkOi?%* zy_q>0ElD_9lXYXGwmcFjU_{gZWn%t+3D`;tiRh{JCWPFIz2Slcd`$TbWLg?*Ujl%# zo>@>9vdINzs4#VNlZ+@n>aTDWWjSd{QcUDu8j$Q796KKsgoqm417k-C>Z6qi!VZvv zunf{pa&q!!q1bcrgR63f8JE=r6((hEUERJqasj3P)7;g-0{YYN;2=cL@>)(x3I@RH z7#Yup_SxynBV{LdKOiauO>9yG$;j(|`&;~3 zzt{^-KZSSNY}3UM>x|`C`+T!2>#E~+H`>3rKMzvdU@z*Oi&fTMy6Fg`PE zInXq(;1qIm2EVoQ6K%-la)8PaX7`j6)J|BFQqfzxs%|138EyD@-qG=b_dtHBawT-5 z?{Sw<=t?L(+b;aHKh8+)JpOiNiQ45TWt2L7AJ!1Zb$a}IJU0bg);Z*^ov;1PXFqKf zc!xkQihzJb`+<0p3i*9sG}SsjgC@+q4}kzr-ku&7v?y#TYN-J~B>(wS@jRHO=SBxX zRiZOu^&og??^hEf5T=ss>9~iFT&niCVMVJ5k?68g0YOSav(w1hVQ z1ydhnDfd}@3r>^nxD+0HVC!a69&)U7d?_0cKjlMh)Bc-*9^d;?$x+;g?1xcM0jAjE zhhRP-1SEaky`#4V8PMCukm(7I&kvv@^bYi7-UECfI&2_c-EwQzO@i zjQN2Uo*c&B2QPO?;wL5M7D|`AK9Sf;QO6f(aU-^~dI1)pl z90|yE+lV|<*(LQP2rxa}E@8|6knF-9cf$YjMYR9uEF>s{4_8qN4FoU>4F#r*C?pb0 zM8}#&aY@E@j}Y{Y8}Hf)SdgDCAu~yp;*-#-n8t(i(Z+*_(Z-#@vc{cayT+4!E`!@6 zH-lH(#*NTjH+V>14f=33=HXvNyUG7ndYWK%@d=`byp5ncdC)$OuO;O?(M`nvRZ~!V z$VeihDgH?W?x3EJGCOq58_HOnSk2Mn(T$~dHT?Ty<1>6>s)iIg&6WX2vWA1-RY|QKikH%QKZ}Z47xs$D+gI`!=eQ*Uh{xIgoLK< zE=qPwQeQ^7c)}$M8Mv%DQ9rQ;Nr$phE(QO|oX?Sj)Q#Kf;H>xU(mGC|eQLb#C0>4T zDy70~Xd{hVGE(R~u0Ra3h7oZ|=H#>a{{r8(thzqXqp^3VoUsA-)$gftX0stYRUryd z%9O{g{}(CxpGBVigT}E>rN-4Cer4d??PRdi98bw5E+py{6re<5085dMb49_J6D2R; z!MFDr!zIx)_MoS5Z%qmp0)6aTaVXe0d28KxTjsJXzy)`UwH)!dTA#K1{r_;%1e87e zOUC+d*Cl-ZkBFe<NGZbWB{R1_bzL5A!#= z2VTb2H}y+v{J6G=g#AERM~T>4us4CUF7bi~3(TFJRpo8qH}lXW8Tzdc&U!mgVK0jk z@(xso-Sicv%|V_N1r9|h7E9fgTn*TSY@K5e%cQxgX;a^@@|9I5IeahrJIeCw^v}*t zl-B1lSLLgB0=SEKX&d4nxy+fHuL!blMqQcGj(rl=XB*nH!X-_Smxstvm-~YM+k2jw zhc5BJ@LY;mVJ{p&&Q%%qa^mD-A!PB*MWA=mA`h81%-Q?HpY?O&s`Ucca=t{HY~0?~ zO|Q$648kE=vhUhuHpdy6ps>p$b)3zx~Z<>n2D?j zmsA_)c;Ji2s84%uU=Cbdc21yuxs`?B1YwNei-({gT_9T=mc6h^7=|y8-ZJHxy%&$_aOCOfF7_#5}@`?GPffiX(lAvRdGr-BL z4Q}d%#DkRasVl;nYN_UwYyP5Ls}KucG-uVq%b4eTWzg;m6DpF%Er0B?Q@#pa?yAmx z*Z#GJ6a42e+xtoR^GDAxRE;^i|1BmK|EHLkjCGk4CmF1-b8*pRUw~rQ2l*mRm;XDMFp;q^-&4pp-19RFyn1Nx>%3%d9B1|5ygI3GWp~0RkY|mDp)MG z#Cn>{WJH9u7V!^g_e9bA=;%L?`8>jC6lpZPn-tIe^MOfD#gqbfgq3b9H>LT=~=p^RLb?CDtgkFV_%@9311>BrrI@Yh;O zt6ZVwhY2#xEXQw>${=X%deW;N_Q4N{kLGFnulC@Fh18BQVLY9$hGW3nU^TKfNTO@a z=D$Uc0D5D)_m6@yDhLhpMyfcBlcMpLiGC_2d6^$|-@6)&clXsGCYwKMv;5Qmb^esB zAK^mA4zX6{>2OR%%Mjxw2l_liil9aG=K3siaxg32+34K@?ef8As2_SccFWs&>vVOa z$>rd&W){JE#Sgc|Z$3YfpVc^!6W$$svI*^jm{_>({f*ZS0JQvNgZHTq`MwI}XYi5| zkYsu0@;qv&Da9KDhU|naqE`>+X6a|puKn7T{%99GdwTu>AJbb7V1JB~=BHoDFGAnQ z%rfQDdVa}Lh4AW-IaSVcqAXyR=&9PWEY>SN1q(BuKr#yol#L(%m&y32>HyvXG{Iol z1qls!j`#%Oqws@e|LkU+Vk zL#{OkA^mioer*Vv`WRL*)=unFn_W|eL0)EO4mTsb@9nhrX?%4PHT90 zwAS|b4f2T~ja($DEOB)YBHEKP8Q%ZCWsr8``CBYG3M2wRv!C7#Ov$cl{h|XI<-`){ zW)B6?>w?;y?4jDBmHyO>lK!7g6{qNt)9i98 z4}o?-?7dX9=AmEBnFJiiDed#m)U~B!_Io9TuKCJ;Ko14rjD{SUSoX5nzhpK|!CLLZ zp%^hgd)jhGKNQ-L9KMw&;R&J{5cpSQqZCuVi--j>{NJY>xpKt~?-O z3KERa(>>`Q*tkYW1GF8{`uf+dKMcA$>EA8qW+@tsv99$NZ=)y;mR1q0buQj1 zu`W|dk2nPFDm(W{Oxe~(#98abFA@> z-VfJba?EqIbtlP!mzVGBhg*N+--DLE88#x1AKu83*!|e`V%Ey3qSETHK{mB@nf>SvwgvNiYPxAq6wYhUtRe5I=NOIm>C3#Gk0ywG zUz;sz-SQVxtR+Ac*6l*1#w**$g?&D)yM6QyO2xpUXm^R<&92~GHg&=WgCUU7CQf3v z)4?u*RWaCLEzHo46E*`LJ&lHAeIYQ+Cs1@KU4xzOMa?xTxtACI^02@x9imaM4~$8D zMOGk1Q8!ac#r|tNDUtmuk5YwOZ5M7_0~&~XksPkq>wp`jGn2FxTxgLASCew)xuF>7 zE4{xwfBI9g5x|(y8ER)zRPG?|t5JhnPIw-aS2EKnK>_z=IzZe%Ca%C1yOg&p9R004 zxtSO-LwXh#zdWjE?O?jh-I0fU>Au)y%GhPW4g>Z5s8!NDDRowM_FJtPEh}5wM5n72 zj>7Z8@QIu`MGghgpVEKZXF_M%d(yf>=1nPHbz}MUbWZahOdqL(>#MR!u3ckDSzqqA zjb;So^_r6OIqDZ2`leC(Dh?Ni8cY?>GW2$}OW|mO49DV+IUreD;R4hzcz@k$n9U9j z<`b(}Jg+z0;d~u#hCT32%PS92m|XUi--O)Ze!J_bB7Rem&b9w{b)5#AsLHIfD(ji| z*Kzdfs(Gjx%l$1;{9beHNfT z438{b>Ev3GHf}a#Z;H>(25*uaWKA)*!);qkQoiYdOU`A<6O2 zqfB?p66@Jwfm3T!Z&(XaGPHCscXhXx3pNoKIhehJgW9Z{NGhbL@)`uM0L}hZE&V z#|diM*)2~MC#%vk6%K824ss6NQoNjk4TE*AFKjb%M{rL44wfc4`z;-NKjuM_83d0Y zG|K79J09w1rJP}%DLsZlJu++IhY#pU`mU_RRwWI0=$gkSxA75@T|9{URu?wCq2Hk$ z6~}_Cd(XmvebfQa;*HPk>u%SUFZ~RAZ~;D>51{SA_kQ&iqSdVkH@&}C#GP1gf~}lG zr3?*o3v6Eb?9)ljaJ^#E6VcvH(VYl8Xmbz6iouZAzA=Vo;X-6{2q|S6_Y_^bUS)-K z*nMC9w1Bap(wEAi^HzyPn=fLv6LC8hT?ZhgHyd%1M?)#oRb(ztrSX0@G~&A4n~n7I zNN{6D2`R%Oxxk)N=-Vd;R-X z&DrLe1GIy-J>)gwf!`13k@8OK>GmwOhZ1@cILr=#=y0<297q~FFmjo2o`K=P zFGo&K=86Pk55z!|0?LlxtC5+}ERr4B^gut%iBmX8rG<~XE!;!f_gKGi^GyNw3UL)y zHQLQ=Rb4MBGX&M=J>9g9z43Vi98UNO%ooHgDO5EVH5xh7+^x_(njg}>ZSfY=p5%6& zv!m;KiDqW{B0k3mR<=bFg%xlFHoIL!M6n}vv}a>wI#8kxQ4}=G@$c2giVO<6_x%l` zx?k34Mq*UhC2L7*4PO%E`H%xj9BluB!aP@*;L|$JF2+eX3&CevNdDXQUvqlsZrhr* z<3@3pEF#EXzkdDNGNk?n_q%O5Tn_q_r11ss8b^ia&N9O1)$6wl?|jvloW?G$`a9>{ z3It7_9+uaSQh5lev*M0G3JNIIHEz@l41@}LpTZS~qzz_`j+UFyiiOM)ngmE%BHaeL zk?0Ww2S!E`o0GVDpGkmbVaLC3?h3v6oNm+pPdDdrH`hI=)gB3s8l3EuKtK}MZMVuw z0b76ef9eQ#ShxJN2H`a8hywNdQ+6ml!K_vuG=x8SmHoGNTxSv*dt-EZzQscgFnRpe zKR2_{j-lcqg5yDl-sq19?q?Be7aR-oqnycJvl7H)>B3^1Ue|Zng{C_E+-$hzkVuF5 ztF1F*NPZ?I`|5aE^5fj^8L83vUI6D4VN6aE3o<3ag(({5(~Pcv9f2gCc(TLOc0*l0 z9&1v$>?aA7n^|+{c{o}8oLY3Cujf3UH`P%0F75pf0q*q(8}NgIe|MzTA6VgK6Aj0} zWujJ}t>`HOzCNKj9+ovY55UxCZ%3aI?{3d><2DHgd0^D%Qs6by2jJ$mtfDCAND4Pz zVVV;QDVbm{HSiQk?2hy5a1M)^xfmI3seG5M#d>Oo;tb(hT1C;2^pkJsz=l~Y!3o^?}celZrrHE$~r z5ky3G4sUxC-9attO98%VVN7ZNt8@I3EP3!Oxrl#jmw<|cpW?Lj*SFo(g$PLQ?<$sN zIHaN9RYLu7S8&JjLx`s8PfToViB;co&W(LnT)t-#otr%u9DDe7QYC6nf3{O3wVbU~ z*|f>^;gD++BZrM9NZfWBzjWp6R(Y8x%|9RA11@V`%^~g2 z3m0v30VB&!c@#`@m(L4G?~L2^MFe1A=lZW?q|JmvB&MXY)uYd2-H`Jst!J+4EAuqM zd)nwVfswiq9Tdm&2oKA%O4>+roKNL;p8xbGnc1z|tmq9X00e*m80>t42JGZ&)#J2i(ji4a_DwFQA_o;8Wr)qq>b0}QI z*ZKNmkAvbuIO!O_vEO|9m!lP%h%9fAQ&!d1ip+TpH%47>^~VySf`#6P>NpB!O%D%< zWtM-L^3E0&I#u*2tlbxD_lX7UTjP&t+ANySBer2aZ-)~Z=X%HL9$DlKFG>%S-}Lq2 zFQY*cqSdii*|mA-lb^VW&sSAjxxWytQfPk@WF=G6TnLVAcEg{0d+&NZpSl(cgX{?a z(cuzg__0H*huqc&wmw|eh)LzTM2QvWPRRT)d3*1i=Rb1~Veu}gm{PL-_>C4#BsF4~ zESE5uqUG!GJ6Ohf;J$s)kMW|^^g6OGtuF(t@uvntcKbsrMMb43EW6nbcY~3B#EGx? ztE|3=$%Pr;kkl(A41ahZb)aU6PYj&;+^g;omloTIYpIC%Xw@;@&Sd4aqRN>6WMVp} zt|$TsBA5@1arV9};~tGN%gzSS91U{x#|_Vx|a`{0y+8U?MT+dz41w>&ywz zhTF{F*UoJv{}`pDjMz1f!!RBFlO9@chraklq;tism3g%blp9S-aiy?$ z;Gb_~GZI=}Vv}!M?aj@yajgu%vebILxVfiX zky%U9;UBgXye%L|ByHePmZk%V-U_+LWNNg`G6?ce)NAwCPI_&Ec(^Q7nX4}r;|&*sM>Yua2XEi$6i*rcz}t!y`bApA}xIj!10mg-F`NWw3{kN$+k1$*WI6QY0X;`-IQ*@ z9(Vf(ejW{b)~yCEShDv7>N z|8seG+lGcosUIjMl}itt)&N`O5Kqwat9|1F((N8Q1w2R+OPTO%@R0p+lxjqjXcJ%i z4sBRXf~8X;KGS^IN}D>fnOsH&T&_DdvR?w8`1cv_IubLXiC3@MRqGd}Ynw^W{=JQh zVOn7D<$6>op4f66*+u|lyAyArlT4;_B~|}ioQ+HMZ(rg&rPKhD?U}nVP0DsryuDjL zo(GI!Nbev2(8(sebG3({#+E%<;WTgVj8$(IieV8-EPPOizS3Ct&wR$sfM!c4Leo1*t&owsNu!mB*-#7KM;mxor&CgR6~#NUXO$wm^6tbYjRc)vala%> z^?lh>L@Ws-QzNTPuD=L7KBEv{4lEG+&!G^Dm$fyTOmI`pHND@8xr1Zqq#6 zQW5WJ@XjwwlfQX`0o!me2~9w&ga6}Fz?J!MlFbJRiO#$!!ep^{AWxk1%9i7P&^>|} zeys`2F;B>@=H-4DgxzSNU;FXAGZALjA2D%bWDkua@sCur?;=c_ncxD3mHhD{U>`F`{z%s`8IE?F_^Gj zTo9F`Fx{;g6}@%mD8lbKcCy)h)ib#OC)v&oSf|wPJciRKkb9N=eEhU0hx!q@)zNS!dR7(+13>(p34(AP&s&uMz`whX|}l zP_fPxNIagJ1kUz&DoplL6kv+-YiH-nvwvb5-$&@Il7{Zr5Een9M{o)8tr`f3&UV2l z&TaN)y2ec*HGrk}`vt8vqZ3yRt7K@I71c|1f`$I2-7g`FCZvax0yUb(LnAT)rz1LR zq$KidIO+ITz7H~;8Euc66Bxa#&kG_2+dJF2CFLB(v_>bJ6Q6zr9fg|S1a1ca+uj?) z53&5=^BoO6CLRBTX90iVjH)J*l1~l>9CGsbHJ4MavU(#{BrQkH4W0DI4_R_g z+)}+HJUQDwzaFI{`2czs`Vi=_apkF~QK$!r{xYGYPf*uRcq2_gT$DLcR*XA|;rjUN z9lP6ZSG`ZQs@e70((GkUAZAMPVPiozVR*#P#tt@7RMs;_L zLpR>6rA;Re=;4Jnvk^w+ugX(a6PS_y@a?2PK;nqdF_m&e0ZHv5V{&JUcLGsyybPXA znmm}Oh;cqn^h&G#sR;CtCBm9rp0_6o{>Yl(pd9a@0=;@r*9;BlZWjW?(HRCz@jqei z+P%=0D}TUguoWY@Jr*Xnn;P%G&3220QXN?Br>%&f=#0HtoriC&oD~!mT?u2{OR7`x(cQot9a7x(KeAmqqI53uy)&CHftW%<(8*DO9FY)S)Xx*6TSIPRNL{1MubQx&3(SbC8b3qEcNB&=|+3&0^`#nI_E@WnK!Ep zfO_W3t=xex8$n5_nQ`sD4>|L@{R7;z*rmv(Pl5R!n=@{E;3<^5ryH^Lx*Jf|ZS71- zn<;CKgL_Z;_ctswKEB3$_RaU0w)2eyr~VTZxw0`o_tA(rV5vd%{b_=iXPs~^Dd`wk zXsB)K!f5bOW|-|x^*`T8AQ`#$5h$i)NfiM+8pJy*IS`9@&6i?0-ZMFh=Qj<1Qqygi z#gSYNggex>9w|K9<6k*;LIV`=m-w-`&51TNnvjzDqW>xgbGICK5xIJ@Z(&a_)5oiF z+Gar~5!O5z7C+C1ff08bOMD)uKdzk$x(9w4u^H$^>kTXB-EsN($paVmxvP}Jyjj4U z$Qe`X1$Uj7SG@hqI`7~@;6CiKj5wXNvXtfyF<%MelQF>;RhF!=t7E%+BQJGwP33i} z5fcDvD~s()(opf*PNgGQPxx`CeCq^%q@>VUV%aGT%b9+q;LqDK>%DnL$5=RUS3LZk z%kLcK_&iESpseG|9}|SxAD5Ge%F}_$`YB@AaoPIoFU)bz6%vPoZpgr?1s!xMQ0ELZ zZst*V=Gc1Z3!r?==+?<@0NedtJ9oVa>vKY4RRj}rdwpiN;4o;>UzQA#M8ynkz9BEL z)K$9dad~D-TAT>88%^o^0#Yl4VzUrpkx0o#_5lOmA%y+za}1T#bO|q*3q4o;a9Lcb zj7Ko1@T=%gDWG?I8~GrlsJ@=IfN56SvyhdZQ6o3cb;y~&)|C^yK^&q zW?3MyL}L-4<8FtzcEwFlb?t)4pzZmzQSkc9a;hs!#t@LmAdpxh*-V7KJ;ryiMvE_r-Z`nm_^Pv;Mg?m#n6OZRZm_*xur{l8gRHe`gHA90e#kz6J(0PRmY*$GXiff;%JWVfGyAOwUAr8&l@6zz}L^E&!vCFI#mTvOt~z5IPqHE zUU~k~Hd2U&Cr#vjKzi7G#2v?h%)I<;LGJbV`Ta7Ti@6m;=)(tjh{spnRzhTG3gRCbi5Yrbj2S%CT@D(1=I010}tSw)!Vi5u5XJXOYwU9aCuCOUik zg<~m1I+VkErtl`|igXi)0(D_GntrJ0At6R26=5sZC!(xZBm}58VfQmlL;BAC_9RRY zNDMAu8LW*ni4fM@rvf=29vX>_+8iP3D?Y3(?&f1NFud;5nvjq6d(XTzKPbW1GY z7IkUE_f+FMR%Aw>PQdNCc;8Qt_xB9=ghH7s&0KZG^f_pl4`QLNI1qNOBLy(mOkG9% zI4FrQVE;jnO_q19Ov@Bj+r?pN>>!UyTDds6qTn&ZL|wRCkd@%5RYt(W*X?cO)5-epG4-Fl>Yu zdpuzDu;29u8~tT&Fo{Vde=g@`WbP#@>z1Z z_Jq!$?M&6>8l$UQ3=kG!tpP}o5FT&>D0OQw5tym7EDqG&nv8j2_d8AAK;S~NnZ$xm z+8$`=IkA2)#`PxBA98#A#6nB5#lh5O5n zXuTjUHL9VQnaQbWSmgjrzF1A|Q2PawLnP8P68D!X#3=kX6zJhBj+5GCzp&#gPJ#H=8vpPRc`Q)i2CKWxnp>ihJ~+5UUy(2UmSm6 z`;nx&y1LSO%A)o5#HaQ8T+-9$F-Xhm^_b9S$`a|r^=ibJ@6=iEEwegUx5mOQtxQ5n zZqBJ1#ZtHjAi>^&3osokOp?|A%RILcE>uwsxojR{nn$dc6MQ+jnZ^a62AeT#TvrN> zPIKlo3kb%BA{I02#Z)%<9i0&Mo!iO?)oXl}c{3l1eeCb_wH`kp zuP7@fiiQDbfOUP zuxz*AH=d)YKdfr_H-n?J!_ut-9E){m`4AROui;M|e(|tub>P!5d~2d3?MvIHa;?HW zQHD|*_N!6{I%S?=6sC29iS516opm843X&)m0s-~iP*;xX2@;jxnaqm0Df$qciF8R9 zlLUPBK{y~8tU$n`m`+d5_pD*Jlk#)WkB|K85%5NH6&GW4ESXFkRsKYia zIPT2Zuc@S=53V4>&$;cgMK`R)JH;>xm9R-dNs1DJE;0gG0cYW)>7@umoM^;5(!C3gl5-YEwPXgk_o@$S@!i#Ruwp>Bqec> zEB`Ei`P*T&f1s=9T7IEUtmcN#CMTzkHMPLT#FQ9Y^kHszujrx#Q;TtODJ%2PO)oYu zsHFQ#Smm0RkP1`(g3qa4JD3FXb_=Yb(;CPVe)ZxUy*&5l<16+15nfa!mJGA}u9L&k zLYyRW(XW93{ZJKOD}c)L-s}KNLS(YtM07tJ>L(KKkG~*n6WooO&Rh9{Et5 z7B)yd9_dU{pJMnVy%LIYdgzbYdz58i7+tN#>|UI9;vooZBrMyU8_&)(ianz)r#?6c zCwMU$jkRDkn5PFU1PoSjPjS~-pDu`*6>20yCsO>Ip~fYD_CIarXF%9SDR22|bq}a^ zI_lJw&8o5HW1!f5jS*AOIe4UyDe*{jK1n!BDlmUAp0+jSNvmVHYzlm+N7{wU$)~a6 zht7BvGe@6(Jh1#O<$9%qe;}p5J3i*VCoitoD?sev9_{I>#q10Z$KPWYp3X&~^Yy~M zH|SS#b{Vv;^v{{eP2HY>2T?ngNNB7~9CSWgZao=95lP!e4^1%%+YEl`hc>p$ZSJD+*67KgyQ?kQ0Ukjem2Y)!@M2jMW>jPSws$#yP)5St361#$UWC?Ok6ydwIoCsy} z=-4ccgOym~H9kjbh<*+s(t#8C9^kA`N5-GfEk947cOsGiCu_F`8SDAp6)K&} zN@(VFbk^aPWHdRD2#(+9TT6k#x3EH^=)yu!XyNV?**IG(Aa1ms7)x0Q%g!PrmXoKw zt8CamD0V-0!hY;NCGq`R5|fI?7a3$Uxr${_Ks9yDNhz zPhlQ!8n+AdE3MW|HFeHM@d$v&nU{J!rO@& zj`!O-K-gsPv;+n!k{0Y7bKV7Ryv@#Kl?kL-2S)k0>}V|#k*BNBYW;SqCfMvl4Kun~ z32@8bEbT4!*msF)&X;08DydC@VviOMwOsDQLRPI@YhrBUs=HfDM1RWlPpj5THB{Vc zER>zj3!nG=a5QtME(F2l9G!hA#t>=h5BR`XLe5SAOWeHzLjptORaB&$oZh<~%~PjK zp|a@L+y3<3(N_X)20t6tc$MLkxfSH~9rXmi8Lf{@9y4jDMK03A8d=(35{=EJ7%lvp zk{P=TTbnUA%hwaJE*!mr=_=-76Ych?@{_b*mEz_Or(gyFXoa`WiYy`p;%XcdX&OrA`~2uEqBi@RvR4Ze6^@dA~HO6>|tN znGHFtjyL+Li)zgFm2)}X<*hyFnRB`M+;%z51+iR71W9Mx;9IH_2V_MsdDHQH^Tla4 z<}P!WP`K&FR=8nPy_L=HZtZ+Ic>Kaau5elC%=IRH!-Gh4w1ccoF_Uojc6~E2_1u2) zrf#!8~~=9H7d-^q5Nc;^Z)Sl z7Jg0t(f7D?cXyXG2#ju!7C~B4K&3{HmhKWM=@3+q7C~Z+8UoVNu`#+wj{ffb`FwuA zzhIBY>v4CV_ndpqx$632^F$kYuM%#a;=C$XA|!E$JhM_Xq6eH+XzpZ@3TaDeQDfL~ zV+HDy!qyu*fOm5RKuC;2XSQvuOb({n;&T(jewMVueU$+SxS>1|cD9e=@F%v-ix5#lA9XpK6VcSwdOAE1ZQTAAD;GpA zd&bGhT8M392nl2ET@K`;9=z(hDUEoHL|u-Eif`N=i#eRX9WCm>FA5=nhO7+2Mkw5n z_X;I%%{hLLot2*Dk$`TBZ1cbh#$#3j!nB6(6ZB->nuqdgJSK0RG929<*S4oBHfR>k zah=w$o~jzg{By%Ez~p&}9nFDOPirPpRkc*bpo1&89dw&#;tV-sad`kj)~yOTgZCo* z(qbNH`{$`JNwB5f^ouj5ISH|gNPb9}NS^1@xflF^^8@AHJS~0za4?#%;AVopaLwG; z%0vwUAGjccXJ-EzOe7KIR^lIs%MDmfcAfTuW?9PU7^|u_s-j(c@ItqZgSgu%kzB_< zkM--#L4$4BqW}7W^99ZnFHRyI;c*mS#@YtrOEY-T5XudBc3$!yO!_x7lVX17`{RqO z$*r7~P!1OK2q&Jv1Wu+&&M%TGJK^1{ItmfVE!R*Xf^u}<9Rad)nN)FO)D7QQHLCM- z!;Jd{COOy(Ln89&EWfbcp>DAYi_ZD({Lwez?(Zs2YO=NAk7kdQj~2cPW7fA3ZI1VA zz>&C!^1p-4NS85x6#pY_XGw(QDn;nW2&V4S<;424BbD4j`4i1CkGCbhL`njkEM9N! z@Wx$VM?rnYAg^~Hdw%|j82q9W(cfN>4qeN=XHIwTz>1*vf0h*M#6+3qp#o@l$)9-1 z$BN|QiTL^%muCjMA4JXr05Cag!GtkHP(Wd=1EGP-=Tf#ywkd*CU2X2~ImYr|L_Y5S zrg=Q*rbw?RMeP1mQ5z>_zEUSw+^%*!y4yu>5on&HR#fgb*nE*SdadvSrsEyEX61>Bf*VtLF8x>`~KZJuF(t`TX^ z1$EVRET3!+s0v5}55ejdNhAXUwe{4QQ$9%cmrs?Hmn)kvU%l$saC?=k*B@PwfUtgQ zy7U?I!8tqvaAZId`{coY`P1wt3rLy61i^+oZY(7;Ag;YV2;J7RC0Y0tfM!^BMZ2vI z-^e<(^TqF9NV|^SCl4LV#K!)10X+M66=4+BN4FN9-bhuQbXLV;r{tTrUcg95YNK10 zOyZGsG)N`y*{?3}2#NkaMj;Ryh+ zxyFR>;QhwT33ROd68QYmZNNZ&k=HpDh=V9c^&t*w>YZ}+N@h)G%@fl%gwR$>wspE0)Rbzzh7mBh-we28>=`H+-MY1H#>KOOR?COl19 zRFP17RHrAJ$*Ye*Jw0x@RN|!oZf06UsNFwzyjW&Y0r~@;N$2~)KV&kW5Ps!0DifJj%4-~VJT^EDVuaNP))?X*-?3(N0tdG!)Ff1Ir zqotFL-yJ7IgVx?_Tl>JP96j&tv}Et`v61zD+$18;#z^G*wYUxwk!;64gM#tYL=rj? zS)A>0If8BdTcWYTJ3fW3bBa5!5#P2780QA{CgW0z%)xl$^n$r0v%bF+4-!H1SnK+3 zEU&(L;3d=acD0lPV^)>xuc*FxbWg2tqAS{j!SHc~Y;xyc5KVHRug8Cy<0PlV79=Oe zcU=@M-CGTxWWkh}h)@DZjyZh-EoE-lqN8G(XIyPjj67Zm%8EdSv@HN9j8>|`-s)fmF8zE!JeD6m6hpmJ#CYH;_ z=H)K&*S9r=MI4i{2`E)B{4@YUEsYDx!x`bH9`&Jz4r46XN!-(l5+b}bj7w~Xic2=)7npo_XCf%(>q5Ep*IH0B&i*U?gMA}C zmg}^EtYC#kN)~<1@M{&VR=h8p|L|jVW2qQbGUv!j=J;@;K2E(yk`tSnVZD17#83Jv z5k-h9$23i(AE$JPZ{}AUxKl_P&uBmpC5%_2Ql_+?SDMVgG99`_S_%sibIcL};jNtf zr-=bc3WQlEj*S+ihUdo*kg;0XGqJF(138D^-)!_$k!W0-0wZNy>2tQAZ z=vRh5vKk2o(bt2Hpe&lM4o8bsV69u<13!IqFd7VeF9Ohj>P4jeeCDM;H{~eqaC6tf zi^hJUUrm4~gi!Z`7&Iew;++!>JiR-Ov%akw0m(&Bnp+8_>u(zyv!(<2?;(Vfd4$*k z(kN^UxGCBht{0vV0U^7ElZ8~mGA0x;0zEpZ!FD%zcVYL(z}eO{*xJ%#LP6GJoV37W zf3y5JM2~?E{`Wxeqz(mtY&$U%0EA`)a;=WEV;sME9X~hF*PHw&TZrozL5$=7}cafkb2=!h;1U5du-+6&mXks6hCC~-eCkqmb!br6W0j&?#$+f z9ZyJY0wf;-h);|WXLe~Yg|uf@xA6{8GbJS(YYcy&Dq)M4bitCTG)I(wv9$sJrraJE z9a!Vbg^6-WoK$!310fkd+QR%K>KHN;rS&2so6Q`?YI)i&S|0!#4aLt*!3&gqXm{;M%3%bdqb3jRDE$u@okQl31l{-9%>~3GW$n7bTBId3a zB9hRPYaJWI8o%DX5rG)j;e##rKlVvkKXQgo7!C9ZxFXtHl22S_U!lBae}Y7BwOZ&x zc~SiPjGb9QIIE+bl=UvQvD=cO15}pVi0+wb@99=BVz`pZ8#1d5Ye@w|65Y}v$2pJ0 zU@H(HTQs?F=d(!HIWv1*9x*Ytof5pxB5Z}smr2KF_3AF{ z2?uwS8!p+7hf(?TG6CXs9Rc)d*Z#`f%u93x5zNssR9lD!gbX}$Zc6OE6%KA%sy&Jt z>7>j;FH5u|Ka@^jlIsAO@-IKa$6RML24);m8G<{HCf)4%-NqX!kT1y-SY<;r2}#$R zH64$`PXV=`_qjIcDh( zE5BOY3Bv{kQB_;6PNZ3S0yCqyNhChUakVvp9Vt1SGcm9VU{G* zm^CV}Q2xFi;579JZ_2N(xZg5IzW;OR$NpFfNHvViE0qt$zzr=t!B`Y89`gN2&08y1xl=?kH;QfI6l>hc2o-d!6d5Vv}X>-H4xC zDrOM{6bFtuIeGtyAzp5jh?9lm&iiDBF$*;N+#uPGoKlEIS&3-~AKEvbDY6S23 z@|}K47>_MnDJ39%`nptU+3<5#UBs-ZQu2UfV~Ymo&=v0HWZ|mcosS>pBJT>ib%;W+ z{^TOcW(1LMxBh_?wv|CszQV;rU|J)spk7}R))BO!d&4GHn!y~_J)`G6mqz4my&lx& z-M7#daIxFwxGT{1=3x!^P)p@K`)Lhv*=~*=i`_t-C?BMP55=J2=Y&H6hQZcnB)47% ze(3Ez4)(+CBxBImpE{LH4<^oj5QwSyw2%GZ$bU~L?$lXzWEvgS zGYy9H`4&Z6ZA{I7H>3k#XXWiOw2g>$JLjrbPTx-SwDhhZ4lJ zqPMDApCmI$C+fs)+dDIyh8kMKRrDDt6BVjY$U(LtNu!)~gwY&SuV!*@r8oa?S zEH%dNN~70X-Fv8>7qM}cTehMtkDP*9f;Oi^I~N3^=#-wSR*P8X$$ALP*6Kwmt5K-f z6gXD@@H@W<@T~>aN#kXYFmL$3icIJYI`KEM%N0lf<=U9xN>4GMDf&H)eN-nz-r?tY*vwLwz&pQXW7K93cHzWsI_lr( znqwZA>fzU!V`pBt6sr*!|Ej7e)-CHX?TjiSJ$H%~daU(;31$j>W|$XB9WJx$3J9Od z1caCO9rHezp5BUUBhvfQ2L}HM^g_0&A0*lv%j{b64+F3MJR>DhQz8dYQ&7-F>yfp2 zMSf@|Op3uO&Sx7`E@4abb-|pgGKFWC<1gw9sPsl`!7{Xet$)IsL*K2~M`|9YfkO5L z@&L}yw*HnxM^@lfsBdec7RHwl^J{_qM&V~Plxf$r1mK_Z>yp(N zc{}~yKCfF~A5}XFHS#x4(VwH$eI=2zTT=sly`2#o1Bp=q;#PWNxFpNF&aVs_H4#aF ziJcLa#MUtn(sG@B?%2#%ULGB%#Kh@hl3GA?Ph{U{A(WGY!vbE$d}NK?snWk-g^B7>p8TRA0KEHKhJya?^B%0?@*c~n@V1>2 z2T5HxEVt}3+x)sDw)uI-*5(Ia^M({EBi5P?A&;}l$$`VHgRdW^k=MOs4WNam8+6{S zmF+AB0}ssdMd)}^sSt=_1%%|01s}rU+1c+K`z5yYbss=K=t`z4;80ZmaA7TP@h4d9 zXZ24f#_BMYl_)G%z;j4ho0i|i<7YOHuSZYx&H+VVVLc2OKjGo{X)xF*GrQlqER7u? zo$!GNTuHAKK_7W1L0yhtwoK?PGS$iXLo7v2RaI5?^sI*bJ8`+%`S#Z`WeDsp{lxJS zd;)9r1#Y)ad-q+Mc)wdu1h|bLK^*tSgUW17Ne302atFL7Nzsl%-I9SDd;7gv8%|ek`|_2%D1o7k$+szP70jlIXU2x z5OctKgXeRAM#cn*^8G(hVZcIYVPGGnO~BPtn-yN1YTItsV}G0UAfjz9Sw$??$uvw^ zTtj&Q06@}A!vb)vtN)Qxy+Pl0P7N6(Kt1=d1miltoSywgwXv*cTgZe!tIZB8mH-+z zDtIY$Y!>CB#JK%&C>!MCI+7;Nsy8#$j&8xi?v99ZbBz)`NQzHg>3LaB@W$sxY=RwTH zBcSJF?ir5ijIfa(pY(K@HI}fcnI!a18@m)}WGO_W2C`vGQePK=Lgz^1XBV+E1955? zEc>B$FH)$AeBp1<3t4j*)jhtc{n0F^-{v5ip zuTY6d`5r;sd9nLm$V#3rKUQ|=6qIRAuYv*9vk?>^*TlioW_DoHg>*6SOK;rvVopAk zuYY~pqsWTlrA(q27(xh2ChJkuk%uLkzP+cp9%z$Dg)4ZySR_qIVfDh_UBEe|PdGxd zUqvMlkSWNi#STm{TQ-GZ*fIxD9qophMZcA~a}k=Cn|nL$C_4|67;rbrRQNnqfJJwF zCuKVyUQ)OKye`iI!VAH$Zl1aIkzSb-3nUn6Kj=)a{O)P%@#wRhHFM^#jlM*rA!l9@ zgrwexfo=K=ch`5T^mSh}Z2PcMzP-LBG6}i-zdj)TKg^-`BHn=+kY3TV35d%Qp8@Dq z?=)eFj`)`L@N+TYIl``#hx0%slY><*Q!aSLCpgRkP|VZIAxz2+MQ9Io=ygvP3l#HF9*kR?U5k1rz28q+v^cq2VnRb(*xOd{VkTET?nS3?Y&@O+umD+_OtLp zvEAwu8Z%C1Fs7{+LufC@<#j*1Ch~^sBnESckSM;DoBuKD2+-*F^_3m*eGWd;MGu9! zO+xYpEhC|3QKiaE!MHe45)yupu9E#$5_aXQKa4|xJ#azfQ@t6A?t3t46dJiZg_rt!ldey? z@9WY_f5Ad@=2*KXH#=-mRUu@=j7p4a7uOhv%KItZ(OT?0l14cf!`{^-NwnpL4kZQ8 z@5hy3pJ%quu0VBPagoUGb}@$ijAPYgTr7fPX10cjn# zf0OW^#H9qa>rWMYB0i3awU7-amabcJADyE_YxMH>v(cIuUs%%&0(mgofjrjagEs~7 z!LR>$oapQl`GDi*WE9dEn&}dhs2N9&^hjssccauz&}6j9YXhA-PLxZlgfDas%_(k!2bdVVQSWODmCF5r$y^V^4(S^yq6HfZAe zjbmb)i$s}^F(>mwCt2lSO`Xcz)faSlg2=N;ZN&baxwrQo0l>A74Y;?5@LoT)gJ0>T z_j={r(WkqEiNFOXRPVSd@}&FlHFAwn_s%Ce!?9Eb)!C%=Adnz!7`b7188uURgWaBj zu8FO_fHXc~KbalIWAAtcyIl*PT@@0q(X>^DebIKKo-!y2^o;BDIVAEn%Cvv+P2)2efVG3?-q}va5$XABQH!%D;TDs$S*?CO z!zq~-ALYo;K885;|9*6s*$Nc%Tnfo+LvYpp+2~2MB+giJpGLwiPw`zJaki5+W z2*j0e9oNtb_O$7aYH`P=9aCRKHCl*!ah#ssd+!R9i~;q=1v37pijvN$CIY5e+5+H~ zC_p32gY^yj(Rp!Ny-QdmkKn9aGX}}#r4-)#gHJG+%hzff3Enlx_7xY8lrZUF(5ZrV z!$CL&^Er}o9F#*F1-GJ<3b|2nd_VWlJ5zk0`d<%o3ehhqnZ<_MD>vXl96tJ8?w+4P z8(jufXUevWOJgwc;@qa*pSGRl|KTfFdJP0>;8i692uUH18#wBxJ7qoWi<~%k#_`%4 z@Ni7lh!?XX=I##xqm3xBM;x0x5VN7}mGxZ^&p@2h$x^KLdaf^7pL$~8dLUIA^)=T} zc>>3Q_ZqImpR+~1;Avp5VAhl9v&f`@d_IscH8XV_nPuS@BDFX4OkmUT z+g+Tql;9fnwozP{%-kn&-2HxmI%Io@iiu$(pcH%44>CQ#RJz+B^4ni95~+Vd7NDSu z!5Lt{2py^K7TJFpdTOcd)Lm5?Qm^#(Y=UdBB@TGd2pxV`b_5Evi%Vq|M4%JBRg4%M=1llCsBCMZvIq<v zJsqkL=#mA#nq@=oZ9$RFm)39T+HnGd#s)KxT#cSGbM_Iy(m_K4(t&jby=@sLa=d|9 z9g~5xSX_j(=PG6V|3Ez+Z^RenCCkq;ac%Q& zrBF?m=~W0Bs_w`2_Eg)GE!k zA*$(YE~*Z-Q$f1EXav2xK0}u>VXYmQ)|yJjX>-^=Pu`UVmxLj59DI;K$^!0zmV_me zDP7Yy(~YSaszx@us!@v+yg1A_bh#yr9-ymRJOpyYE~`#of$=m6pEX z(qvG#3M+jpCcI1FXXz*J;<3*QCfZxe=?t>SSCVG*dGHv{k1lgl?wP8sOM{gzFiM0z zTLtL>`mAi!--)vBe1X|NcY7aTp4%aMwX#-ad}!6;m(A5lKeeZBlCs;)`3_;`&LBk@ zv=$!ME2`WxX1m7ezid$%e#s$ye$C3T^f7glnwoh_$cBa}y+FZ;kWA-KzW4R=a|k@S zc<>p^ulugZg3B+J+r$4;x#~xDNS(`M5VxNI>zX&qpwZ_vmTwD#owr$7QUTO>{LIgI zUjC1KbqB4ad$m6pwA#oF(x3a7cY5Tdf4FFux7hrDyo8Y(^qJvp6gph=eVnQ=h6;5K zXHR%s#FuTmUuW2-Hp?5?upZyR?dzx^;nNZD_uI}*)ZfYy*q7Q?fdBm@z+qSPqyPsk zj`L0H7dMHBDM{B;De(U#kLENqa$FT-*9%RMEc50hmx@Q)T1;8@A1LV^6MnO31XH&b zNJ_NjVzNa1^AwQ{y8jV4`D=~6^Lkbuw3}@{d9*o)Ji=p{=s12dnkPlqygfRw=)d3a z?u?h)gDUN@O4y<+m}|Cn$rzVxwc<0+8ps0zW?HtaZ=}9=$kh#uuNMb zV=Jr3x|N$GJmSgldb=_EQdrgrqJ&d$Exjn8bt6cfd~!$_zqGQJ@pZ^KB>vQ)l78vs z6uAi1MYXG5yrq}96G#WJt{yvWW8NmK#=$W%akX;c>|x4oFB_<|d0x{%KuF3Ku_!K* zCOwY!#BL1#O6=dR7rpp)t0KvXuVW^7PTbiyA;^T0)6lp&5w3|S5d*S zy%u*MOW(HlT4;2Kb7Zd-SG&kbv99bSvb!31VDQf1@6n#m)tAOFYqXU||J_BIz@VSq z$1FCL(qYnb< zPKz&i2`zs}8k0}2I^XIkT5yH8mPf!MMoOS5vP7Br+frLgYiQK6)EyRomnOqgV_q*k z`|neKDqYE$kT6!?&lZc6|Bq4skMD|#B-bKlBS@Fw_i8!K&RFkczcIr|ba!t|G3o8^ zj*Ixg8_c{!;igBu1-ENi*mB~1z!p6Ur3BjrQm2&!J`0yUd(NzQ0c2LZd~p~07L(P& zzW^O^-$`*j8xv~yC`zd;LJ8l{jZrt!P;}Wr&Dk>^RP{8n+5OUPNuFsD?G|-VPYw)S1 zar%zApF5zLlm44V4yfVw=r$aMYBq!wi24vEog53+50=G0Vr$=>Z_~@E0mjM=+++Zx zKR;LfSg+QnGektAIsVIo=5d3ByDTQ zRf62sWN5I3vTIO|Q^5tmdD=rgJ@A(?{3uyoUp`&oMx*w}Q(L+Fk(g;Vk^RaAd(Q}`!7jnIRUnbOKU5Jk=d?z+WYW(|l^QEr2sq9K~ zbFMymsg)oJePc&4)o5!uN}LI-^6J&AlxzkQF*oRkwzi-@eJ6+Iu3}QxCfdLWcM?`w z|FoZgUc8Iqu81Ci>Id~!JvrE93wosXUapT2Mi?nwQ+HktE=kmXW1gOFI(2eB?gAUs z*8etmHTFh*)2Z|6eyiSc*koVrFOzMNrrPh&nVeWXvw`)YbIUWg%~zWQ`!A3!W$`-e zm*;KW6#vlngj|1OMhOY&)~fv}(~aZjeY0NjTt7@gHp2h0%Hy7^2N*_**Be6XZ|yIm z(0`GFtSO}DtyljA`PIr>)}I@WsCfnn&&kuTFmmAv7cFv{`dkz5mis9tHt0H4;G04B z1A>R2LDoK1XXdWz!M^q?s$_mkH#}RSRva>t(wnm6EisL5hC7JO@XMxWcIXbhGyVmS z(4^y%uIlpO|629`!ZJjQ===|u7-*gzL>PVg1M4LkqVZ(I*n81OdFD$iWbbc3y$$=$ z;>rJPW8>B_s*g&*<0L{bB2B$2F&?55gzdh41G|`(GwlhHtZ1JAwl-1-6HY@$#ZQuS>=TN!au?+X$cAf@x0PaG5B4D(}R$Bc_jfW`{3Z z{`U_e`H2AiOs-%37J&!Q#Owpalg5mrLSbvB;9sr z)V3x5JgddQRI8tT`aB(qWn5khk2KVJx}7u_d(Z9o!#5-zxR71;p#95d3{_bQ98P)>QECk%R*^QF7gLArMqGjCw`|uy zkhHt%`#Hm*qe~n!61Fs{3a#F`O%r!U`NcdtZ35EZ<*LeOozo9YlSffjyI!5QIITxR z{k@w^Cx7S^-z?An@!d?p&#oTtX{1*Q_^mKEvLC=O>oJ38#~;l{l}kD+5LO3BuH+yv7k{J)*vOx0=>7K>i-$i+!{>Ct(OC7#cg>a)6Ull#Cqo~4S- zSKg7mKJH_SQO$hCNw-;E&@gMyfiO3(-msdZ-un^O-Y}x$UPWKe-kN0F{t~T6M%Kw~ zkIi?_MFlbpn{ArlH<91ST*S*;saApIt>vu-{(7Av<;XihqFm;o{T-4huL;;HQ6Wc0 zHk*o-A;(Jz-^}6yQD#BIM`8~0Ev4)aeHuZ{d@W10R1 z%;rPya5y#^4Z2_Y9WPjiE`Dd9Q!^zT{*Wa0qTz2cOY@w=*#`lBW@#d~TLTE{2w|Kj zvUt2{Eif$Zyk)a|-@}D(e(hfb|>e1TOKnGhGCo78ZWMqvwT|GQB z=8QaI9)9|@P;(RbbcgwOk(SKwtUCFE7}6@w^aha}V}HtDST*un=(aw$&r`efnr_-s zYg~KJCv@e0Zt3e(N$6fape&jn&vtx&a77enq)AwRZlCx4^2*^qk8i(&ik2@gLWkp& zW^dZ%m5p1o#o(SL?|<29k)eO#YW|Qk3HPWD(vt=W>9uJc=5>nK*Rtl zT)cC=Tn;%}T&HE`r`!o3@c8#H2fYQEp5OIvU)muRM9E%XZJG}U6b9Tdc;C-c75~+F zzI%hy)crs&h)b5ECV`MK$otS+$I|$2;Ioyp-yS71{kSh7@q6j0sB8bm517&N>6Gk# zw?c?9?OWXs^Hj?{UL&o~(4}a-H<xGrmSFZx`}yJ6 zZ<{w`Sza}bOcTezZ^Bh!h=-+Iziz0&guM4e+(a{!0XJ#fJW}*Sc7e3h;FL4}u;^fa zH&w%%AtCOx*C|C#xn-cEfJ#!U4=jqV_LG5#j6NRfNU>QD-F|T>OS*lfS`sl2O-FK&GOOuYB#b%jRw>6CRSj~0#{fo-&4NiIybr;X@+Si9Mk}KWnP>Vd$r!u95&pb$3 z$qg%#0{eW_`VVnLDCw%w_Fw69aBujx11 z!x-y(xAnNbJ`~Ru5y!fARZmk4wg3#xt(m&o2DTgMq;Y{Irzx00&%PXv4IWMT?d=h@ zUv*38$@$s}b#}D2-J&hUBbO}}7Vy?@z+dV=^Zl27kFmUiE`Bdx?ll>;R&T-9^+ft^ z{w}5N@=CN;b538lt^z{?vBDWN1B?Ar^nQ+@9$NW;4(N2H(3)>KqaV&rUFDHg)X&&}8^UUJ9~ z+L&a-%y7c}d{)YLKmpxn=0Tp{^Z15csHr)sGYq9<(u7p&fK9%!uiFWDB21T+pLr)h zmZ|C@*Z2~G=ZlxsC_idzgI>Hdo>Waq=e}{u7rbTCvZYQ3?(lrx`8d)v8T{4Mxb~}Y zU3oKod6c?=;&+eUx`tfAv1TIr@h*vBq`}n#s_xkS{9uMkG6a3*J5KlS*-TylR5kw-6Dsq zBGK#a{n#tzqYs!7=!qNz>SV}BVFeUuisWahCozk68i zK_mUsnCzIuvOM)qUp)I^fl=fA{&-{X^`cb}z?Z%KD$qjG`TdV)I5?5{=pyay!b{8M zRM&M;73vB(hBx{RL^-E{dd|eNwg$5&Cl9@z>#KLjD5cfZbD)y-8a+n>{{J?cz$AKc zKpk>9oiT3W!bF=qF!f?RbcnwyR5(@+C;kI)<`b+(k!h!Yn-=9X@^qOr+yp^Ozo$mW z{D!&u$b=r=D8{}t+Qr-&$c`bD1%eo^evozBPmqlB9$$;y)t@R zK`YTMUJy*}9rJ^^RWqfr`YW|{;2REV3<(LshJ*NT7UK4d0s1y+qYV2m#FQyyo2kUX zP(S_aU_f!#mQv{L4c`#uoM3LVX!%^%w9Lwv>CYKJ{P4SJJ9}i3)O@QXm0jR|BKke= zOKTBocSPiZWmUK2*S|WkxGwhvhK;A?7?2yT_ob=lneZbR(vG!B4sFB#dTUg`U+tHt z9aADtgnC;l4!-}UH*z%_2t?iKL6K6Gij$WN*GVdaf%iwZ^X(nBfwH}qHJwk>Heaos zH=zg7s-(d5NY?E-^Pk4?9&=~pflSLmrfAn{TC{xeb7OY7*&8XpZ4)%7i?rHB)TP%C z*Spv3e|N9x?igw7+q;=gd$1HsZDvZstxpRl4~&SA_B{4xWIYHX=>B}JT>0gT!$z+X zD%?doXf@(;P9ilZFW0#e&5D)#*6#66MUI`|^Ie<3@vo9Mr~A%meTkJTK;xp2kQokRa$lQUad%|HT)+W>W!x$(w_Th^h)-+%MG5Q~4G?@hA&`6fH) zM~Hbti6_9>cDgh2w6Y;1(~b+Eadyrs#yd7PdM)UDm#5?V#$wZ1RaIESzZL(UBUm59m$I04AB=%bu&iZng{VLaUMEMs>%WRLBL`;@TpP|%tOHkS%i96sekdwIA*ky)7Xd{ z2g9{b(9qe`>nn_v!tZUqh~2ordb{LPL{X}^`e`a7GE7mdmU`>}9D^tjV74;}c8gDw zyP_8VB85$ee-?}I(sfIF@eJfJgwcYjs(fIK;5bl)o0JIou{bq%$tHO;cMUhEwDE zSElMG_s*Sn>qkFKlHHu&jZSl7>w|i9%#L{@mO`|8PTsdKxoq?bt_tLyPRJ3vDRW!|uyw0@-U)S2^Gy77mN};KBp`R+ua%I{62O2+WXpy`lyG z!L+pgrG|Ad*DF9HyqjNe*fpWaQpiZY1$xupF4@=nE#ALoSKB8*v*m%=flGcZ|Bp{; zW>jAg9lPYXm%i8Ga|lPldZuibl769_^_bW@9Va22_((EDo#*!YrHCsm$ICEl`Rov< z?QuyDc>Ie_$5a6=B^-GUf!H^HLzUiFqw36+ojz~&WE5G)Y!FaoD7T5e>^_VcO|?$F zrq+>{XmGr-akA3uwR;)2=_Wl=A+YjN=6}bD8_CSz2O#Y1`FVRky4)F`kBZM7DJEGx zeB!hkd{fUs?{SQ^#|Oa2OE(NjgYq%UxLRtyevtum8aB7{i-e?7Gk1<{Wx88y1z;rU z)x2TK`Z(?6i1nw^_kg6L$1Z6D9X5nB(l2Z0yK(nZan3wRD3ecdJl=jmMD~`$hG2JS zi?AA?EjKGQ16VWAJBT0AY}EjaYTV5mlf$|RGzT_M>#q-pZa1C5n9f6V_oEbtV?#uM zds5Q`pvAe7jdt$gmWoR&nKi9vZ_}!Y7bp6KGIItDiz1!xpb^XE&XE|W|o?bDW z5j9BQkCafvs6F>J84Ll*qvVaX1*^$lZvj9h;Y>oFC=A-6tml7A#qtP%f-?(wG5Ud1TOY1o9TFYw%&lfa?JXVl;JFVkqY<1oiv?u2vWWd)y z#67&w=*&xaT}Ws9`ui4x;3c%QZCeUW6?|j!1RGIon=no#{;^dTTe-T#3E=_smk|;9 z!=EB(g%ae+Mh0TAgo{Vyn|ub+!EdR~fNQuSU)r|ftdYGVUa$hsuF5B6i+b_$iq-h? zF%^Ye>ql+37^C@M(-{F=wNKSq#rf9UY^zGg%QSY$r`Hb+^xR+GBqx`b2^u6>v0-F}lsTp$%cc>hxJ&ZSxX}{FX3H`?t*tea|CDZeUO+sJ@ze&^1 zX}EJR+x#96%|S_33A7%jBoQadBgPDZ{;P)t$QR2W4AXfnDp7DBA&cKytOmOV7&!5= zL^%V!DqAoo%5cs)VFh%U=3Rb_ajwje#)0iGsR8I?s!N)sB>C$Yb)rpo=8DY*CTUbP`A`hUcCm=GYtmWUMxdPz~$BMcyyTRILy z>Dbt)zh#Y5M?ekfnDycJe;%lq-~actERX**P(5@-3(2P#C&IvSj!kpq`d3|HsukGr zdF(3XyQ>-9(J{%$K|r<+1yE;p4^I(8<(qC_=1Y6Y6i?f}u2HZr zd*8b0#G*ga0o6=c=TCG<6z%ipfQaU8(X9Vcbl7p?V@KB4&3+ht0*AbR7u$VM{#Xi^ zFcdBTU8Ft^PJLpz`ba3E^CD;{?OeeUI;qVjJpM{)w&LJeI7BkwrTs*X@mHWvoVJLo zJ<3)2Hva$%ao)YVdDMN3LCmHoo)hrbU#5Rb!lx*o>Z!q4DLGP^m^ISX4y04{I^a6n zJIFTZ-lM%z?N?vx&TdC@m;5>MI}hONHjKCTZrK%GuUNcxK%=~aXVm`{>qMIYS8QLs zX9n?zGm)_|IyX9j5Kp|^`MFSf1J9aIBNHTYJ<1vglXaCAvt6XVHhO?sq8aLn(3(MQ zmTr}CC9F5y!o38K7sn4VnNEBVx)l4H(V*vmb6~B-Ptx7|cEEjYM41s-b%?4}+G8aW zk@kqyy}!a{YXAhY&c3%h;N`dxvuGv-k`3J%Lm+fH%H>M}Pi*{T(Ps_PDvKBZ$Vw9= zN>X(A3+GvGUBB}9HQkiY>BJ9nw$Rh--161WWEh!}%sKTxXzHsiArQ2S;cfZVqFM4g zeJl2|=dxAfuQ~rKV0)veX!-kJ&_}~0Y-*aF(LKzV#Ya^-=A94ww`x1r{AOQIJu{uW z777}taqtKUJ-t?rGzvzt| zt~hlYQqX-nk(jeo1XJNR6&r1NwJ(kM>{h3#qeH*2Ae$%d#Ov9OW6DO`?vxOuYv>L^0qGb( zO1i=Q_^!3~w~u45?+?F#ndg4)E6?*fFK43>u+!hkF4z@h#1Rt&*ma(O=<44wp1P-z zAtxf%n`r;UAYcreQ0g{SqPR2X&oh!uk8umeq2#P*n#gy{iLo)YMt!-cd7AUrd#48I z@;KPd{7<)UTj+ci=k(CtD`{HE zvs}{OU)sn4AOC6MuIJj~%aq1HZlw(qw4{TwM_Wa-gakDAVA0(bm66t>0&QDMxh7>Y z%O8i_lUxQCYPkY?gw>@0E$ByKw9eRC+Ea(V9WtH(Dz2gRDuOnaqAAelw?DSaCSTv0 zbve9OcLvF|7cyK{BgjJW8*zx^eMOv?XILLht^)wh;&(FI%GIW z(Z&|j-}9;{vUaQmBfVk2=e$lOgTpU;#$h1_&6Eu2T4z!wh=o0|sg8#z{yn=!{T3{+U{;wx71JZ92=$7f|n~A9x z+SuTojPviB;|(G}m};^CLqBQ3C-%3W=m0-kG`j{5j-i05E5m0O1s&u{?xNoSwod9G z?d*{{B!czV)~h`N(I*`meY#wO7D<)fXoz^`?Gyp4p|v&Omv`Csp{fysvrU4!V{c1J zO5|_O8P?NmvU<-m(_njtEHyl$WC{T!Dw$G-x3jd7gHx|_Cn&li{3S7`UXLZXJz_0h z56_QLsPYR6b}=BAU~A3e*AK4xR-ki1S@nCq zQ<4FAaQ&ouDmn_k;F%PuunY3`2pJdu&Ol7OXwSR7+PN6OH$Msfd9m^%1n>jQtc7Hh zB3|`>sl#XuD^CNSnxY|Hr$*2taa~_0J@16erRbELo@e_Jr)y5?0B8GM53V6dmMEw0 z)Y(=bOF>9kWSlgvqbLU?j@p?sA@e52+v}{Dpd*Plf9>K+)ugXd2*>i0#otCZ^&{9o z8+DJWfWtUu$Zj9kIDyw`x}EQ2FP5yhJzfab7kSvw%(813VhUrv?6oAfek)0Fwwsie zN0IqTT>Kj7kpK3QUAlj?VKJ!Xzz18~W~{qD5#L@(MW%~Mae!e!I@^_6YHtF^)a{O* zroN~L4_t#+5cL4}0yBC%eH}Ftc-aWUl}9{`<+W<&r1*o(+3uV%adz)cerMZw_@%t& zwIzu&E&_I!aneiZ{2*ffBp!vcws*qU)rBhGm=~EuD5;!|~n!BuQ$WkO=8xcIr z$?x6u51xeyflNEHHr*_N-l8T`bYT`U#6=^id?!1$;@>16cPMG2I4nveyrpCnKcy>< z88k|e&p`gZHf-?G(IC~8CNh^T#?gJ^rYNQ5rd`;xbziXNN&it*O<{^laFE3l z+1CjSlGb56v48QCqc_Yr&(w89`|+`S3j%r?reJJAByZq=k=WZF0XNT4p;Zn}pnv*0 zk-NR4Rf80NhXfQ3!A{LaHzM6M;DhYk_gQQ=g0o$7kF2zs(2`g2K&}9Jxo$_n=rRSyJPvKNcqX?SRN}*Z!tU zrvtD^TKp$Qa3YacfW}9Tc6KrnjCameVbQG*06buj!7&nNCn-6DwKE`24dJS>(VYf)&}bhp zCb_QM6JPQKbxCT&2P{n_=}FLoxXXiVO_MZHc01(;j$D2Si~5Xf%YBHgfsrEgrAv?5FkN2I}ASwaV5V>Jh_MPToo>#QdEP z;&gDUudWT%n_}8+V3W-y6=XCgZ^k+97Zi0T-@hK|U zJE5^GoDAu5>TE&-=t*!3OUBXy?%z%zmZ*hpz9`Iar194fWsi4+g6I-R}s3rQP{^Bh{8 zwnfg~NC|bz{6M-soX<_M)Q8n0MFP&&BI zs6%4YljSk5BJ6;BYXt~b&#>9E$2zW=n1y6z2)q=^=)tWl)UZ?x&`=@2(O3Gy6bw?lz-7!k%^EdxN71Um4)Y6j&{I=bZB!{I-QH$jh*LEAHEn+ zfMns-Pw1}il-UJ@2y18ddT#PxuC%7$Px5fHX6HSWsvxJtKp{jS2D@{P zKneH*Zc25Zy5YwLO(tGro@ZcSsNs-lM01V^{}oi-L0Myke?X0pEE>&- z+=*m15;%3us6T*ZNZh1Qc6?=U*Y&O`&wILptURWbVRKI^95w(u81lS;uXumInU|oY zkT&13H(*x)al!P%n=d#vKdble$|bMv_|3zYQZ0=5eJI8<2{HunV0KvWzPh&((pGdN z9-H4e?Jz;ZNF^8eCqvGE_0IlDjFS5%9|3;1QG%IgDu`oh3m8x%qCL*fUW*Hsi~lqz zNg7E@{2tY-Y7qGVbF3)#4hz3q@XP;X=4UWNR5d z+}Jl>x5SpFTpRI%0{Y3r%%=um2o;oG<8S~n_BNSuS&w^9fgiE=<`JzQHVN3NNQ+Ou znFO<)Kg;_-7oSq>+0VwkV=e*vX$-G+Y4dr1eNm#B({}884Qk%sK5S~2_t-`YzjYQa z&vY-Fr#h+IX~T`JOJ{XIeS-ox=fd8{sXI}yLs&NIyX(ogxG$;8^sl;d&n~g)FAvE? z-lPh~KuC3rjANuu_&ZwK%6yx{Wr$_xrcz!t0$aCt+_+kl;AVav)B<1ia5&VZXLyrM z`KqpW9D-UT=F7&!J+3NWdJShqELLHd#+n42c(bnW30ON*VTNFJp&&NuJl#|*-7vSO z^!GnI9$cInaV%Hor-HD%hmaevc)H?1pJ0*yCh-&{V zExt!Lb>HD$pRf1jOb)B2*Oul*SU=Y12B-~7J`J9pdF?v8w##}Yx3`-?VK#$iqj^_C>8*ST*VM)p_$JTW3vTfPd zr|H4LUTI;9eJ-TWBk>^gI&MfTVFrk79F6vaqGMI zm0jv)&Cc?bZ>pFZXW3BH1~({7Rwrf4QqPOtJ;^%1nVW@Ec#r7O;H?AA88PjGTFZgN zF51I)X&C6feeZojgGfkpOxhgilE&XfIbuw{)3TpXAeQV{qF_}jX|^>*XGG&6ghKKdfc>c@V5Jg%vSnM1cbC;mS1-vW%DU-{>o7W zN1>KI3>9W{`_&Fh?Vy=-+?6t%PQ2Cvg@XwKf;FoYl*uBik+95{E-@$Pc)KfDtT?s8 zUfW8;JZrZrG;`H#ZbrYj>1ejbj`G^`1u|gV@Yt*J^#Y zU&UGR77uMW_f*D{to4PRe5eCi$)3L$mVp{^><*1^B)UT%N7IX7#!B2rkJP#uaz?gF zS-rMm;+qK?8saplEGv6e&!;e*jyh6`HwSit!M02(I(JE>DX*lC^i%n-Uc@K7qMN05 zvnosw<~ocffUqXB;}-Yo3iHtOGV<9NBlP1hn`}353~Y^^d7Oz-%04&)N8s(o8;L7< zLkL9*BNrEqy3`zb7~Oe(DxGP(X?@|vg)e+ISGr46TAX_8ZWmz?qbv-T+~B9`K+NHC zm}#_{(GGju)f?LX=;>CMiZZ=FCw$!QGcE-KmN03o5InOn)o>-cBk@v~-ja=`6~UAP zhB2#R{z%h0Uuu3CStHv8eh0qPn=;IQ!*6>{%VDLG-u582-WM#gJG0epYgK$sBZ{pgda<x8bTaREF<@Vld| zN8|S<5((FIwwkB8Gbo3@b+)#T>blIEs2TmQi^e7)XUA-YFX1K93sI{-P0CU91Y6u_ zl~?9uOM8;^a{X%E%{@;}Gpe;BiP_zUyGt`?@`pQL9JiNe_+&2PfFY!w?+nvd%&u$R zsiyW7uzn-S*bHOvd3-MZqO#-YwPpLAsxoEEX0VhA0YK|tmI0s;TeZ{!pPN8$Jh0Ih z#tS7P!UhN-WGDBd*Y-k~GIQg`N9DpPY0pba(fj~w$M!pVZo_7yF$5Hxw32E{%VqOO zC6%A}T{Z%jiYm?XS7FLz`OF1&NaX4TCj1v`iuqZY(8qkgBReZAiUD8d#uPd8019n3 zK=g=EGH@Y7LNsBuv|c^maOMCTOBTv`y!tVUuXmd21ekTJa=P+&kjLr`k>L9&aT^Sw zl?d^(%qcLs$2>BnFbO5I6OKgW{SFM4 z^NW7kNGqrKfs_y;-E}!A7~;z?CUGNcgc$q|Jx#F~Tl>zuPb2`QkC#%O^^w7)&A^H0 zra$oQO@b0#H8NSheJNGHuhRW%Dz>T3BZyk&H#i9iX;et3$?C2 zCthm@&0AbZ^RA<=E%lW@T9ZeU5NGJ7H3JvKxmUI7v6v0C3QOJ7>l}l6O;Y~ zJy!B4QNsWHDy1N&8o7Sih^qrxrO%9w3S zVhVCNTj{>D8e-CD8n=>v&((e0F^@%O5c!Z(1(c?JKj#tpi)iZV7^s?el?oUtLmV41hvz_wZrFiY2Y!{l${rT%Bj)@DE&ntHtN_^NAG2y70QhvR!g?^ysTUJ7){!q~GWTv~op^tNAdB|Muhh>4{y@2)uWaL^_bwM0;% zw?E47+5?lg*gHAgK;;*}qPcov#fM48ye}usrTc;h1&?ME#&P;>1cmJvndaNwyI(ei zq0bkd!zXND6-EsTx3Ej=KMa1iwiw;0fkD2H@1)jjIy%*3#GchBtS0RWTb%ZAcy0_9 zhww}~PF5CYd*NuajU$VCbPA#vpbkrvP~QFp%whSo?uq=12UbpV&oKeD0YFU3yy?jD z)yn{*bEkWS6!YWLIqXE8oJI)q;vl<7Y&37FS*jy44%HiLRP5-z(yiW}NTdIFq`?RV z$nL&g?VcL%2qd;-8^o)^0O8{Ag~gCCLSgs}LNZw`-9B8fXevRhq(ZL}PPd-Wq34`s z%!4Jkj&iz#c6B^JUK7_W2yRL6Q}*?WHq! zjSZIQIDITc3T3K{w!WyNsgrF#IG&>Kw!9F}TuPW(85-YGV)~xB85+~!NB4JxgM;MI z2nWOHm5kH-JTx1ak;md$&24k%QzzNp1d}%J!5azDvuW-4#5x}GrDh@Gemakgk$%sA z^6T6}*eGO&uYKcj#o{cY9mHe3_X+RX^H*Sy3dOiyO)CJ2D5CyKy1Y~ZlC03H2W8{V zj0=_ldEMuUDxxj{;zfVA@$q%so7xD!_q^QT4*2$*3ilWf#f>$ll?pQ_$@06Vva$x` zMg_G>*1xvP=Ey3--T}4ylX?zTNf1SbKhsB&1}46778^p8Cp!@hUfTC|~uM)w58N(8Ju$HeuO znG0J$IB5JLMM1SZ6%6tC-&{VIxF2z0ULwq{J{ss&H(%H;%{$!W>f#?^rS z)S@lzp~!4uUaii?zR8b|H+*En3{z(9%8NChY|w&u4hOe|Q-)c9j`C5VsK$uGleZ%e z01c}MJl;0yU!o>}28P9g@7QfmJ`th+hf!4pXtif9uH4ofSOdM z??La=tt{n7+XE*bh=UzVawdQsh&|g8&YKUWIxfq&4*a*Bt|q)zS@rTPw;XGDSmkg@ zmb#b+C*s$GS#I+n%vqk-m<#ipng&^d#M`H}4i4Z!1H8IYGao2S;^dY~U~;|5y$Z)> znPc4DIcN}2&0MAQ4+1gxyy7(&AaWvGWcFgekcHOTa#sa*fOHZItnf5l3*$HJfQ zRu#*2s!M_w>^DmA9PEEJlm4e{IU*DXl-o~XK#noT<=HWplDcE>O)b@(+sT(DtFnChP~kvl8+juk+PJ#pooT9+P5icvM$vE~ zX&CKase&N_Hc~&=MTK`Qah%fTL&}Un zSBm1VgnVH9BQ8bS;b!!}13ekzHZ#E`hCnw+B1-ggk58cQ$i%uZ_XT3Sbc~(VgY)9* zlyA8EZx^})tgqgx&{F~1;|Mr8aQO*)qoOm=sKzBASdZoJna#NrVZWBls6I{|2g@&}ZnfF>_c8(3@Ht%0w$BOrQobgGQalecT=a`3d(w7p-Js_g?JV55OCa#tqc7wbN z+C)6hAc%xnr%fX~p%NHfx_KFmY^-FntvtFJVOBnwGwwU}VEo^$Cu%_gbAWdtSKjUV zzwMaexenwb*tELq%6tzn@L}zddO!z4KO+Ya73KIGeny1{qQf#hlWFYH>&Li#{Wzp+ z1JxuXi5f_jVZqoh6v`C*(!&Dn6Q(4je3U;hiGG@;+Cmt0s0^eyod?{N6z8vMaMBMeEXu{4i@=vcRWyb?IX_-awntTDKCf> zg6)LET>T34MdELS!{Oahu4;=yusrm6MVSycO-iTN(nRc%$)B5in%-0zW>MDOyknZI$^Z-l#R+2?4)vmcASZFD)nCO5ZD7ruHOnSmHPoREg! z29Qt;e1KZk)V*|GE7?~OBG)!f4kDd8bNr{evB=!)v+S=l-(J^cfx&DAkO9j)7bl+> z@0-THEok@!a(ostyJ7gvCoEJXwi|Rq?^-><|986K*Gw;3gn3R_2P%@PaKNr1uugsCbia%yZ|M&z^^ML~Iw$Paa?L<>0r*Va^G_jT@H5M%(Y*;jJ z4Q<{1^`*lGt`coCpZtLcC9GEh*Eu~-N))*+n2uc1U5t{Q?6%FPONTmsj7yVo!c z7!jcjbBrJfu6(MZ=(@~CigkWq(5KZ-mR>AdzUJV7TG~{;WrpM}?(xSEL8!zbDDtXt zIj};xAPoaVa&u&n&XfEy8baLT!2~8VRs5uVzS0(9NR1{9`iFQXQ8BgPxi>3>|1W}w zN0if7v({&OK5uNnPzGe;59;c>ncE)U_oZXkOn}ueeOT&d0t-|-5I@aZQ(=D3xjw{@ z(yyyn5iOgjX%WOLmOA8O5cG39j4lP-F5B}Rc0Qsl$4#h!MMvE48i@&^eS5C5qJ^)i zh9cgo(8D2*ULOJB5(=$_vAo}A4#K(Ut<`_U5|f(KKBd;kCM7j$`~%?2ApYk&7OXJ( z8NSV8+2w$hNF=`wIVMxF{rqs=zxdA$u6E{`+=4h*_R}*s5tO)d|5o|odoLpj*`g+l zpvGJ314)*(A#xav%8xHd@4DmbSd93;U-9HKN%I7e+-$^f`RYdQ+P*#YVE#gez{@_4 zafDVlkz(JjAP+5)>8*Bs_XjAcLI<2&xjbZw08h>#X{JoqfZnk zdM3h!nR}D~6`T6)6?*+2wLceRzsK2Nq-P11y=Oq|6_FIb^unT*<506FI4QPrv5QMqh8b%}bso z8to8Yc-H{XC~jj0T=s7sX)Y7+@UjULwb}DzxB`K}`G4ZY&jdgeu$t6162{&InA&~7 zKc;57&T@dK;`W1Z>)yF~(i16zUo?-54MKY#lf2muJyU2fmqj@-M7&ymM~%S>-3BWg z_uxI?%#saamWmyrpxA;*3psve^!8p%op-3I1HY9I+V%d^v|I~5FHf6IZ;-2kznr`SPZAL7Tn zH5r)|KnE$EG8;`kX6fQbY7s!w#cMholXJ`k2%n1ul}ct?A{7CdDY_o*B!F|JsLwn9{?_UtN~wHae5K* zS2;N-B{#o#^_Tna-shv-{F_s@%QfQU-1Cg%^KC~?Z9{tzLh0@+S9(&BwY_?S*UDuZ zG$xNFCub(e#g^aoX$B7r@O)GZJ@LKns~9O}8s=Ert=H!sO%H_y+=WHQwiHXAe7n)F z5gtr!Xg{Ps*&Ak{ocbj0v;On~n5J;x4*QViFyg_u;;7LgA}vs~Pv9eHlDw&EcR^_X zXZ^0Hs87enuE-=%E_c~r*8rC7=xp(Ng0BC>@_k* z7#Zeg^TBAeWg-f-hm|EB7!)Kp6>y{}PtVR!Y8(rk%+iw{oPrg8v)KZD&$&;ZzZqmn zxHuWLhfXYDf;_U_&iew2R&wM+M-_QZc zMAVaG4h(o8^;lp7sw~DqKS}uAmMm&uBN+{VjcJ&kr>rpchU8UCh^4#th7~drL*?3~ znaAybTAZX6gq>#*!~#p*1=5ax&W>#>J+Ip*+chG}4*MmXKkR}XzzO$wJ}*jF-^E^# zrc-NYeoni_0asFi4`klqq>2GomA2Ve8sCy_RG^3h%2rZZhnUbg0-D8d4T3rI@ravw zk_!pQiVl%q5UCq-tS2s|{XmBxe9Od-X5Ykz;#ZTOr(BYL4KJ~&+is9dH~R`uqbSU8 zne=}9o{lP9XRawn6k%4KvmXE-jIPJhGQ)V#>9>Y#zHCzkM={|was^kto# zcDe#5@*Eh5q6%mlDmTveOGo|Mj#(MlM+?-yD7%>0@?Em&(gN_Px%ue7umv6D#)$x&Nr88m75&7nMR34 zZ^Ed%7^t{?R93tAe2b-H-|)9q+x`0hz$CN(nxy?GAVde9#t1{}KzuJS)-tc5HQKXv ze~5`@9B1Z7_G6e6U^h~33qnu7h&9u-0UchcN3SU$`HUJdy<8%zi|3iuwuV?QE0;sr zvwc)0tYUk|xcRQZ)FH8eQt>SO+>sv-Eac`5Q}VCPFWfLj{Ci}9C!xxE%pri}wBGx<@v_g$B8(&lybqIX-}=bjJE*DAox`|-cB zG70}-W!}Foxu$gA0yvfp{IWL{>B5PZz{Psq3f!3=2Mn|K{WlS+A4cSmF^i+{6?Efb$D97%CQOWml}=YF_|9Q~%hgZ$tGJS2?7!-<^&gIUQSbZpLN}si z5r@BK^qal$UOFoE-DD#|rfC^Cd)lI$vfXz=?VCD+YDWUk7kq>@-e{BnRo=J9Z^B9S zQ%>%d`eWABY?ghiEc_a3)f0InKja0@w{v9kl5cN$`;l$7sZ+4ICQ5oxN$#ml&C!5f zWeYt`e4m4d9(-ZfU|A)8qx3+-R*73fHYA3GYQX||0Prb1=5rq)C3cMF=1Bh8*?*q@7}>D=ht^iqZ-Y!h-jn_Q25FO*VJfkAa+VsC zlY11MHkb`1zF7R{t1Bse@iein(y7gQ`YStM|(4f0==X6S+*_TBU{-;^Ql{eY|x!OY;(G90($q5!yXCv^zfcMHMm-JA zd5UcA{`1iPd53DLKNmig0_!=hZYlY#9(|Ei5U63|8lSgN0G;hfMD=Qk?2G%cGeB?{ zZeiN*kL-k5l^@C!p3(CQS4Oiy5`j@1SuZJ$SE@~X>`f;OP_f^b zv*&fM$WdqhI8aG1$KME9c?SY64#%;5{-MDY)1^{bjU*2tgX=bTmkf{$8h}Fr!fUgG z8h>e84U7@?gyb`PSF`@1WuOF>$?Ok_QHeozI+ZD72QF z#o(ug)4}tze?ACCVv1nPfZtj*xk(a&jOn4qc-N+1;>m#%nt)mcgZ%`0&# z5ttaUmhPG(Kx#eLWFmSP8Cf2ekrn&YGX=r(+B}Drs!6J8My?Y31gkh%tz^cs%m7?7 zNATz^KnJSBU(0wZ=dB&bazOCST%wNF2xALnW7M@rNXxb1#Yf9HAEu6K~ghX|NDjWd7+SlAs6}q`Qu$Fpv4sl zLP&o(MmVeH-g4z4Qvn*^p5R7wNVO4fe6n^hx4K5((Fcf;H`15pOSlmy5(SYFjS5g4 zn|6k;Wj+B}8Usc;_eDCR6L1Nz+T7CDFP@N%A_M9Jg9Cty);kc9bpo=NxcS zufJvRe{B+~HAI?E#KluSaZNOP0*q;eFknTUm|F_CZeSQp0JZu#MUbLOXZ2))fY~xJWHu8_}%(%yCkac>Wk;qC$|6c zv|lX&0k2%Gisfpu-5-v-*kB~$~6b#l;AS`P7l zi81ccfpYQE!4(U#Rwyr?(QuVm1_QLFh~i@Gv^DC&EeIpeymmTw*z{t~@ia*LDwN1( zd_wKxr=%@rsW#EogY2%vhNgt9Oa>20i@R`R_M+c7y6%KC{I9jyU-=PMXZ{ks8X(H{ z${d+(dQR#UK0*_+TG1*C$T4kPu(8bS#_8$oiogEnp#Of)PvHC&B5aKKY}5Cxf$xLG zk%nLiXAfV;=j|Ll-NqVi3#H4kt+Ltg`=O7=VvQmQn=my!c{OdpPS(4f#zlQE?;_?b zZ}RqqQ7#R-j{O07tG@0-srEwRt!q99_apM-nWx@FdiA_d(j&#}zsvUc$cvvuJtx8x zYu7k6DiDYr*v;vBnAT5&jVCT+wRsiy>xhYK+3_~(KUWX>$I4OQU)P=T-|vcD<(IED-GRlCGi11Rz%BOqaV*tVRGGv-4w z_0!0Bn-GaV#;XyWXCFiVh_9~kkt*bOU##Txa5Wr5UW)!I3vtzskO}Q!A9~B5q4x-j z8#|Vd*4M+PX0vm*1R1R;dIot$TWr|Fm4}9IezVa;`5=w$c<6XiCVoF9<^$9d&_3zBfn%kv(Vj>2XMR z_7<0-a}kBD=tHZG8ncL}untXUywMT^Os~LCbD+Evv6_cY&xengO<}VTTG(^fmCO#a zA8|ZbGX#7}MFYx@J*`r&IK1CHUk%#grYO%A1a0S>SRCcy`c&uD37oKZw4qvbs z$0h%kYYr0>$U`|dY0}2xiwknYF0Zu!KrTma%?RcufO@Kc3EJv<7J^mJBTb|*&Cne& zpLKu??QvaQ(81m+QZc&J(o_dzQB%3PMDu>nEn$Db?H(WkYlfE0Gi`K56!RmmMOkDc z!PG))A-rPP>|Egfxo>>!z2DYWYz%O*3FNu@(?vs`-T3}aGYV{tD-;R#@N*L*Ai&ib@xM6#~poU%W0S1+T~e8 z+hn1kG{8RxA*Q|(HbW_)9q*VAF*2;iZzMj?o7@$99Gk6F0%i=6f|Gk73`Bc8*PYL8~|L z(b0>w9h%=re}`6zKTR)smbs6YhHfvSPJ|yH9NRgPU8U-EKE~BdzTINeG=ZO~ddv*! zib$K))ah3yXFC!cWk#$jX)lBPJWemUDqD0B;|Gb$;@WioSg8IdzMUqI|Ke_!NM{x~ z5z@%Bh6RpBnwh8*nqUUc?$3nbCpYr6QwK;lk!4mycMF{Z*}^7m6`A?qC^O;kl3xe6 zqG`f-YmwN6(2xh)CM#J0k@LwNpcwcu(zce|+(nBMjTHs`{J=c|p&J{gV|^qyAo6jB`e1c)R$SktLrgBsjb%(n z;<(>@6e#6YuF7itS3I|BF9Lry#f0-shpTUSgezw#^<0!f=#Lf!zXRRae=->oD6b>Q ze@QZEW|r=sXZ*1T7VzA$4h)^)_KSq)J;i9d#+Q%jAGW$u7rSgJ)6~=rI39YO_)?yT z7cU=1@~ohh7NrXzcF%3}q~I)&?cFUMxBz6aI8`m@M zf-NspU(y(N$l_<02wYqU>l3Gdo*xVH#SQRlyo+~@tMwpaDCX@dC%^??B}k4q`hcyp zN(PPzJC)3_f%%-ir|ww zt8~`UO~GZCj*cuN(Uie1Bx8~viV6`_7oiWA=UnB%A3piyzo%0Oh-c^}<$w8tMkYU7 zM5L*!`yqNnWn%+1xX@DOVV)B1QbMw-BomTjRF^BO#j#hdibCbRD>T=MaygRLiLf+C zdt+KyqI|2@G@P3!h6^&87Vudm*&8`$l$^oaa`XB+vou|i<`j&{3TspdrLGA`cMXn< zr|5ZiArbo2RtRmC)5)9*5HT@Y(Gb1OeS8^+hD&h&SXA&4w-k&u-Z?n6xRFGmS9dM% zD9A9fnsQv@#iMg3pw-NBEUwe_TkG_ufEeN=b0nECz`uTFTt>9q;0!ssVQW|S1Ed~4 z4_MFtO;gF0Px?1Dg#KM#{inom>6+dw3bjDbWid4cA|Hev&Lvr z>@w@ibK!A$UmMU5Q)M_5_gP%R?}QtXIH@~Ot_o#%VsgHYYh`Pz4(zHBS{@G5IUYy@ zXGlMIE0(m@4Q(&K6A< zlq-kzy?KCK*)Bkqt`~iak}yQ#N^*_BG*qGWvhu3;Ze*8FMnF3A~S9T zw2uGQ2AdHF3;P8B>O1|v<+dt;&2bB6$aQBLSb*lIm+y16ak*j{?Py!v>jR0Uy8%3> zc7ffc+Lgm@jYPcP5?U`K;05@raCur~g+}~B2mvRI)iPxvj7g9^oWk^;h*08`B+KjE z_mqL3p0!sON<8KYGvZw_-OW7ymMlNJ@+Gp&cwlHyA$Oc_3ME}x8V8_xC?eKoXdoV! z`@u+OV(E#1_lOai zp;gTqq}S&nLsv#2AL$LxtDQD2fJRgf#n&C^C_1jHc8!hgF$nVT1bQ~b`2Y6#A z81GSr!s~Hzf1Rg;_X4NiZ89M_gWCjEwgZm?EKH0y(X#KMo)WTf?J$rS^j@{u8`kyI!x z_(0GML!7L<(1k-dDJ=%`N7xA|6!yUGhXb-g)K0+i$IB6eMmoHg1)UU?mE1S>5YaaB787SQ+|bG$4tbf72|*dsgW`p#8(+JPGVg_C)6V)hm210ps!)w z3F93Bh=cD$WyG`y=RsW4KL*e>mcy_R!AE_?IgPl(GoQQ0V;LeD7{r0KZjPNvdg#gt zEYC-Hdz1H^5zFN^pQG$*>d0Z%aV*2IU$i=z%4IRNXfGaX~+FvZnLVT4XoN|q>uhJOeNzhM%8(GNEp`VuAuIj{LxhTg)fb07cq08 z1&Q32RMsb}HcKU8D?~)#+J0i1%c978^swOuwZvqxS{hlT#ij2(ur)=tbj(0Sa6q!yov*OHcaSc9cctp}*Vz=!E#nc2e3- zlC^8@A<@q!UIi6?=5UOQ?tJa8rir2c)dw%@!JnNSn6xXRV4H|rpRa696c`QA%f3Qi5Mk+X3V)bj8i2qy^ zlg59{vQcs5sAdSGbJyQTMe2he3=ZQu`{QjA zN7+=wMpFJ1yssW)hzmsvKJ$j3Q!<$Bh-$XuBaL6qA=Y~Td{>7<2l!kwY*yd=;eQhh zsHF`Ryy@wIlcR^+nh#h3w)>;ytT`^ z#mYxXsl3M4?s3fRB>$sZdtSfWUC6?#&iVV@WN!#O@)+oXj6DfMUe2I=aJxrazG5`V=dLvT@HGdcYWq1eRAZb z7Dn&I(JdaIY>I>X4-H>{FZ%oAJ-QrnC8B=32W7Xim~>z7j3V5umG?0~ z;-ya~(Ov`EPLbpe$ZjB1fyw`S)$Z_i`%iOk@O7uN0F4_qc>hMVM`-=7v3lm!ZSk)C z!r`KX(GMFTHR?@dgs;}ojlvDo~mn%ZPWRy1lHGZ*#4Y`0!# z?%7x}<3gr(mUa&u2VB-+&t(GzrVDz;n(osb_f||_Og)wqV3Or4PSDi|l<=oALC8ty zgenytcDcig6tkq&=|$xp@$e9Y-BqxV#29>FxMQL!UNnm4xoW8vS`6E#N}8=ML|gWt z3h6NUf+5o0h@S0xZu>dP(DY^1GABc@sx84PFwrd7Cqf>HHnZ$m>)LmfBBPzv_iX{d zaJfLvFJ+X0%`VxsT~BRKTc5cerf7Ud+1YSe2BM!h#bU9F;nRxY>Y2DCwAwf&yo>}x z9wbb;ptkZ0$E8Z5if$`EVSr>O&A&JEI63iz6t$-ii`@WPJH5si3+%C+?NY$fEgZ~$ zhDAYw4xp-<|Gz&eA_UMeQ(IhlDtGE3zuoDg0hKnq4iU!e(wmsfh=gYthclHg8k_GZ z5mSzd3-aHLP391*qp`c}FbMfHY&E|>qH$a6K_q4dsuM*a4dHqD#ML(f{0S7`EQYDBfOl^Bt<)@Evu;iVdEOcN~PIxsbo`0j7@tHh$i~ zZi1{VFo0%M`G4qo>!>Kdt_@hJA%~D=C{aM9b7&9{m6n#4Mq)_m8d6F`q*EmX1tf-s zVFZ-!8iW~;?r!*Qf6w!L>wUlPeb!2A2zn6l)I< z8ddvo0pwz`s<$RE6>GKqMp@mYo+ZVeFS!u6Gx~iEu8LQ_QHz^9qJ}VQrB)R&En2&Al$b8+fO?FArmN|{_iCN1pTkGV} z5)iuP(X>cx|IU-EDGLmHX-eIv?cU$6Z&bdW`i+FGW{}}7k49bsQm(|e?$@8GN!81t zEeczuSfMXFGLshzETER0ZBg6NAald(#`AK!R}?{#@oSl41Rq|949F}rt!<9B3#x$9 zFce-z;WVcl3(|%_W?jGM(p}N`Yk!tHZC+(1wVKA`1FBi&;cm42HS2`i9RK1^-9Z^v z6OTRpwCyT6*^>@6;Y9H1{j_V7<;8bIA12crDoO3NN&@|x(I3p|4mQ*T)7z@l!7FlngwDU$txNX+HdDjxP zp;=IZ%##8eKi(>EVaZ0s@NrR@!C-@=H|{);sFUsX-f1H9;-FEimv#n;w?mVZ9I*sD0o zh`I@sWR?XbDMjsO{az!sJxF~mhpxu78J$Ea3I zLcn$i;KX>CnLXWppXNmNT)xI{L3Z}$Pg(s+RoXrEklkbnn;B+u*`&1jbHY*vzY)h` z5p&GL4|kP(3^dhY+J*4U-|ZUn+;{ton+=FbZ036IHMpT7rXLE~pBZF4Muv&-`es-8 za?tY5$GCJzekm`1x5N9n1&U-BFo&@@J$@XWXz?^TOy<q{_nrGKeZZ-Qow^cxnBwYgGqyfXofoCODprQDRo75*6 z_UM+xUn0wUv|O#xpBI|?@6&0@_5i9#w-*mH$o-ph^T5LB;vb>zDMj6Qc#qiOI0Od| zkOllE{xXBci0@^aCBkG#(WnF!I^sj$y0k~3(m|Jh7=#MK7DA~g^n!CYfY@3eiTj4E z*}k;0rvg32l<5%|!+&q+>13Mzm@15|r(u#gfSB_9If+<6A;0uFDd@Gdmq}moy3WzM z%haNi}|KcEOt3PQC%4>x+kyoNKN$bxql;!qJP z0~htKOBJ-B<1lS}7J|L&M`YI0bK(cWeP;ZTQO0T#YDIi#&J%CU2(f*Ua;Z!gUi9Z$ zd{FHJ8#`BaVGrWn?PzA0TbAnHrCJ3CUoQts-@dKPfqNj7)2aMB3D8f*F4mp&TJD+( zyKm-^L@cSK41K&YIoLgTEp;pUDwvZh(IlyQ=k~-FH)O5j#!Rt1+>){La?-x|VM$1kOQcBfb0*%cTOYT&Cm?iw$n#q=$1XW%K6v zAE{3ALAix2U-vS;_pH#?Y(@JSSj~9F(Q~Szf741(E6r{_2R8>~&vwL`=QX+3X(d>h zosHFVtK&qnOt`EInjt=-owyqlrdD{Vb8-}l#sAPkzC`Hu2E3`qMwe;d-R4qs=cPIe zIAn<-ms^XFajQD8rr?b>{O~$E7$K;zr$BT|eG>gBy=aB2@d;A&L_OwwrtzpwdN>3l z$e@*l`0Z|3o)}d)S&f+2uhXHUruMpiK&)*!w86pC#t#{4FkFCBQFysOie7Wg@;7Uw zAEx(e3Xqoj(GvfNd=d~<(x%sbdCOiH#+xdbkB2A5(ZNTsiUVk&eeBsdJCxFsybrBx z;VnMt|C^;z|F^5$6^Yz9dgiWp^R;cagCw$TJGK|Wg+%_S%UPCqo~|u^bMi}qj1B@t zh2j33Ci5!#igKP+RL}2l3MQD3u+tHZw=TlbtMb5UOmVSYLPYfEyJC; zIuUswEOWVO;=A};Yxv_ltU)PwGf+ zV@isc=SS@fXsT9FM$$_N#AJ|^30i92Zwwh_n3Na84{5bxl=5PTej@bt-Dat`6%%UC zm8DefXNdfoP5E@XO`opCDs;mF9ErBF%igwps1vHWvkf_G92u(#X<>QPbk2+WyQ-r1 z%t!jBsM$Zz3=G|Z5F*3Y8eM`ugrh$YXPuW9H!U*3&v{q#M1rHa*~WOw@-Z0m=Q{k% zFQ_nR_a1h82~+Q@uT#01WEE|AoypJe)XEl=ab^swi4KkNooK_I(mDVs$y7rDpcziR zF6PC|-oOQGX9R)SsRL<|kTdV!t~|R(W`(zP9JgfxGOO}Oe(w?2&c1x@=cB5dn3Tzm z>AENUH+(g+wF}D_s=k(+_>6ZOfyp0C94f8A&9}0(7!>2h=8K6JqU9BJ*8VO+3Dtw%etC=hq|>nBnim5 zBqhmFbq|>7Y~#MUD*5*Z^NU=VIjkr>+}T5Wt*`OMf7_=%mY;Jd@z?FS9C|B{%-;hD z*U8@oG(K_E&)9?{=ZZw@;8sOzK3+}00QIaR=WWHDjm7@G1?Oa0BCvB(X%h8AbrDuZ z;6|j4*Ve;$5CSu+wdn&UJoI)lqp~XZ0f%o6?dL?T)FSky9RTkVyJF#|7O2{J(p*Ux z`{04cJpS*3V))=rRI6zCK&6Qh8z(Z%otpU2n8?4i(YaJ~;wv7}n>&}A;y#l2jy*eH zo&vloV0c>ONgmah9a0Cs8XZl|*ETdJCiae{f7AHm&H2##MQbWb?nm697NB^D9&C&E zTs~@Ha)`rehm*@Yc>$wRjc@ZKC`LCUqKLuD0@eV&3BpN9nfwpO`#(B&vKU+OkbInP zx6p{i5jBBM00xO)2*d-ufJQT*kYWZ^JTn||KnWpAWr@t z(>b(&t-W8BZ{+tg_Z4#>Xw^I3D;7G)PDF$cK=DDX%nPZn+W-(q=4v*&ekay&cSyvo z=RSqWJI_DDxZCy$(K#Y`genA)FIw5=Ns|HLQP99+?Lyp0f&mXe!tZ^SDi1ds1%DDZ z@lHn%Uxr5mzCEV+A7^+Hc5Su~%76%^- z!g0|q-**POJ%cu(+b6Rp?JW49+=qM0sk)Dd4$>Ex-kf=MT`>SQ8HYvNE7!tRqFgyy zkNtnVPG9N#-1PQ-Yg?yn6Cj#KL^PW|G@U&piw;dJ4mePKv|@1-Tc2jR3M&fde+ii7 zI+q5X+a*)WuTycYtLeJNlqlbB+1k!{?o zkqXSe=kJXAqh1lH!I=|)KM$r<%~fh=eII^Hrw})GYl9*v0Dq8S(9rqY?{_?DTIxoX zPx;F*4}~6(YTLY30e zd!pOo_ZKTfe6TwQp>67*Yv>pHww*d=^1!L$f&Tlc{Q?1`f3sS*2&j8c`IN_-8ucX8 zV}<&#yQpkzrEH7B8Y>RA-_7?h`km{Y2BeU;gl@=pI=nx?kzPYUvz2%kTID~h!U#K^Fyi zmZuojp`(r0yXT;sJ=@{|k3rIbcuPrv8z&|zaZ|d9m+qcG%XXxxCcEpha#!q5N;X!( zCOhN16PsS68cQ5%fIM9O`~xxI=G4vrI_D+$OKpCwXKn@@oc?Ll{hvLnV?%k~aYRR9 zOE1NFoJhbnb0f7-KVLb`Oyh)Vf_sZKt!P*mq6}sht+Og+Sz}t~%%l3gpT8wqTpgB= z+g~~=v%-s~xuXSW?|3+g`)u}g01Bkf6@KnL{*z0F+uhfJa5p<%ejsv4+Gq^=atM} zo8v&PC7d{<&3H!u(2&oqru;-j`chdUQV%QDNuV-D(483cq?aUrg`DHhDLpPE<4h4_S}K{SieB<2lFw<^Kxzs=^cy8iO5=`Sx8?v zuD!&M4xNIqa3z`4-MAgPc|AbQTdkl#(CAHecs{@hJ~xOA{n_2Z;)Mn#cp^oZHtiAs z-gx1^m0hFM;Y!BL;kakM80u`P&(tWcz8_sba>A+qTpV9UyV+J>kbea11YnPGneDgR z1U(1tG89d**^ArwJ4Hm-I6r`Bd;R3&QF-Bd%ffpn36$qcndh~hIG*+Vr5cZyQIvLk zOn+uftLrK*!eAvaw&)0`?ORJKoe(U;#>EZ+N>)7-?WkkkNRK6 zC}(@{geXrHm=V)71*qXCi_maGsV8E{sx$<=3lvrVEOxz{^?G*!v}($5imQdGHu&Ak zDb!{FCj0@(#OZXXJJsVvNF)*-jftyhe8wITU?)i4`?h1@xiktnvi@Kpxi?PqQ@cXP z8y9BRx?659`Pe7Z2y$qLM`n|U|GPlYH^=F^-xlK0d@n~ppJ1u3Y-*S>{5a99CWtcoOz$-C>N`co+iTlJ+$B%b-Sy76-Q@V`A7+ma{9p38OiMxTn_Y8*uCD~^po8c~Vs6U|!hc}KG|zg= zvhZez2`xUs4zfX29>yZV0O5Xp!=GFto9NS zy*|JEfoOB&aYJ}K%m;lU3e4f~r04r0GZ-N$?xV}S{(z99d<3=jsR0?FS4T^)iVWM* zDTGt8r4LMlJs#sRmsSFkYhRfv@&%2yDV}Sa#zedKeZ&Lhs_EP{<#Vf?oev9;PXB+Y z<>8#BmjA0MStxKJJBkP#0R%8XnE0(U!}<&{HzB(LvwKMZ@}9ghYA^6sRX14J{`&bZ zK##?S;X@9>p}};a((>0cKe>=$;yw#grlJjA)9+t6o9j7qmmEX3J8TnWbw2p%%h=mF zYyEm3jx(>P$j+|m0BG|6xG(+#kN7pqZHaM+guB!-uhE;~#UjhT(^7hAs~4nE`m?7` zMQqG7#N9JxR>~fpJsTNbEVlfCN0}?b{IQttZ{rdNS6_?}PnUXhETb@g=IiF3olhEh z)%16Y2k*>RXLL#Z(~eUmYSE=h(}vXu{r@-Qz4~Mo4wvA**&j?`Zuq0HwZ*olg58h1 zn{4q%Owq*keLAJmpO2&bX%B~z=@R9Vs+LH4GAeL?@1@1;_xPxbQux?F{RgbegHyG* zoL(W081}!1n9>%0_`J()A0ERYF*LRzny5l8W?(w;h&X(q#7qVVSjmRek8=fZk}AfK zT0Qs9n!@~y`3>J|0nMJH9IX{M^K$|1-R?Onb2X!_deWMZllrAOXsl<-tWn)39l^BQ-4AOFfcJc8tSM>a-D8|kHU$bcVkB|+y%~O=s;1SP zt+N47pTUJqB(J{-Cg{_Ro4sb1NOd**Ku$*Fj^oj66dPeU8{uNwDScp!Z*2~-?^dtn zu9Gy)?o8TVgkc_+bZ(TAuJvKBXqX%sXwE|cg~UUO(mR``uqUdrZN>61k=Y)yd3B$-!v@K^yu(J6tn9>FzpZNqY%7BuU-^|-j2)U9`qYn4u(TZZMqkW|S)Iv~%~ggwzQHm)kjbo7 z;N_8vdeEIdvvb`q!0nA0$86nV9?5 z6nNN>9@7G(KSBLX3b(Y`BYXn!4S-7l|OW`R} z;8}eiw(gU^bvPfAB(6(Tam7e#?oy0nej%K@yMAEPJqmMp<&q@-Q^=LOL?H)(w~LKd ze~snC%PrYwe8^Ye`ccBiFY6Op7`-=Tj>9uJ3n**)25`2JFKn6ke$a6Ngi;C9`o%9g z-q#L~0+Ym;_2>npa?5ZMrlf_xd;W)pxihSg1FG$7#0S($N~%o{+@X-qm|b^j zh-6s!$Isk)ZB-o{wotFl_!aTL>#0cJwkviCUt+VS{=XKKs}$Ql>A$O=z`Q~cT~X@w z^urvTPZLTdq;7b!E}#s}s(ytn(y0CIecNFR`j9Y%wsqk9qRdd?H;uqax8idR(K?}) zhngwpNC!PXB@P|OPo?^)!xecgm!C6ZrM~yda7!#twV( zT?V{BmfNf>8S%sxE;#14qSus#@@S8dBRRh%a*=ZFS4QfUo~3m`15NI?!J%`$gkbFJCi}X^3n_DejMH-pR}BK;NU1<292IL24mnt$UFgsFw^xI0?( z-h)y5dFI(G7Kf{AZ5jvdun$gX4#GPTzrrg%kiT@5A5KoOZR=E+Q9+a z7g;@{7vrHhN_`<(Q&)zmz2cpj8T2El>p1s|Cg{5X@KO6JqHyoj`@y@aby=nQu{6 zd?#q_sNkVLChY*usRF9tdy!^a>4N1iqTLLzC?s=SA-o!rS(~ijiM>0cFD3t5F-jZ) z9aZED_~)0e!T5g z$YR_-+}Kjv&wt(@Iaa&o(!_7R-gDnYCcD^wBu{pB zm9KEr8FE;~pbW;jCSw~`YajlAJ(2A@;rjc^xT>TeMf!*D7{R0-N1jaOD-gjF@jNMR zLuA0)owlS5@Lp(>KzZnlC1@M|S$=Ce3a(k5K&@-B)Y%_upl~N1V+DY;aEg!~f&B~ht zO9cFNoc@goY*3cB-QkV|C{Z>q3e(8~xGlldo`P{uW0;3UdYvjsCgJ6nTS!a>ek+VA zoXo5wL3HD4+>yrubnSE#FO+}riWF`ntuKb%meBo?s90fS7cRsc|I})~|JcjiIg3V2 zlxaNx&oW#v0|N+^8X%(|FVirqDD@g&JyUOG6!9nN#CPG@O-Yw;V@f>bW29g%EyVV!kIKuh{w0ixdNz;0$|FE9HD%_qV z3&qmo;ts>O^-Mw@c)!jla!l9Hxw!6| zafnA-f2+v+oPqFW5F#o1*Gd(5ymoc)%M9)NNznzb)ENV9QjnF0H52$urTZ}J!Rc&N z-M6@Nnv5L#u*7d9yJhq4zp6(4m*MBE!QN!AoOcw|R`5$USYFJ0Jn;a|VM?qqiNQkc z+JVeL7t_B#0eap`5MhOvB1Kf*rzl*w*>h&6am5Ov7zRE0%dy`21Ejq-n=_6JT3Ilx zTH_JS1%J9_oPo$8cQ@rq{0}vx`!~=8wF&QTJW)N0z0e>|%torY^>yT&$VKJNojkl; z?{tI)jzoXaR%_en!fG7Cs zn(+^9_9|rzQHKrNIWN%kvHk*9c?w<6l0HH|@Fh`c3Rd_dDO&5b{~VZV55`Aa9-8Cb z&CymF8k-Kgid5Y_0EI-lG##&zu!Rh&8Mqyj!ZL#AIR@8-FZ%}g4tXVVCH1!_ujaqY z{uY^!vfT+el)PF?m7k~&Y5pe_5FB!jk(>M_Z9x%%yD3+UOB6NTEZEr zv%wT_ng6gJZ2poKlq{Z8Q5x5gaT`)2USb*An=O_PccKa0Fkzrp=gJmp$7EKMIJgR? z=OJvEd%oNyl*sEYU6*Px)iEoB@57YJu6ZlKkL_to#Gy?2PgSUA#nI9pmo;++o@hz4 zylRGeje+Naw_7y~<|t*kSBkUJGE55lX|{Kc<7GarP%oC!75RT)CYo^3Oghs658_5<0|9gzg^E)XTW!90 zfUx@{!dVY5vxXAswVY;%zbJw?r5WUTC`sjzWT8c|*Yxc!}@)J0*@e<7@^3_5VUpn_z#W9xgFw9-8IWMt*X+zgF)k=y{BDxzHNz z-kU=nYKQNpV=1j`-&*Wujd3CFop2prbKapNzj{V)6LR)PZN|njCxA7W;6(P6-mc%6 zK4&feTm?4_KIhF;w=Q?JT70tZPs);*1GZF|@wvQ277JeezV9z3iZ-k9(3N?+qL3j% zcUqCoiwdiJ1tzQ~X|_4k~3F1r}!NG`X>D14l@df1)occ((#B-Els zRCh&o|4qUL`yYIb5^YU@)@F=^bo4uM?NI z2zvGHdh0ujy*Thif5#3br_4ZXCBGeH{@9>KPghB+6}Pl`BQ&`Jst=BiGX^%;H>!Ez zuRY7Ut1Hx#PCBC|!Hmq!kB_@ynD3LMpr&s*TJ=G?lk~*LQb{yvj&|uw1(@r-zc)_= z^6nsvB4QZG9ozHg=)n<#ck+kZ!(c&7+T}Qgnl#Jp`!=>vDa_>=su5z(SxM^Fkbef- z-F3|7t{5lJu#p3Gc+ypj_nP?ZOb&8mwuniIw;OldnbSQDa6nt-gDx4t6a#ve6zv%_ z*^cdwlLbYdjWX~6*H>E?0lO(pEMvG%1AV?hU4gScCjxiEPfuRkEqd8%1ZwXvg1bav zqhw5VTjOVC65AtNLs0B_?q;E{nJeN@FZJ3+Q23%n-~TFh#e5QpgRUY2)uFUT6J4O2 z{nFW%(9Ic>lEffB&5OII<8dN;=jb?ZDYEDQ)*yxePqj*cn-X!lWxn4f2f4v#%re)r zUVmsmIO$r=Esz0R{g-}_wQ%2yN&<4(vqp2;h~bD8_I?84km(|pv*4>2eRdIyQrdxs z)S1%!s|*@ZMRf;L)hD-Dd`}&(U{69ymDjU}!PXFWZ4znBy}?Qjql< zxvP;Z|0cj=Y*++U&urf7+eF{HXFxt$L|3OHXoN!ca$A~gR+!Wwyd~T!|9$HKJG-X^ zB&YCz0oQz?_WYbMN&9=iKqgQdA42F4j7dZ}pw?lEqO4v&(QMF*Fh@wuXkb3&+p3$l zEa{^*mQ0B2O?DUIN^st|f^KNnZF`MBY1t#y)KE{$#be$eHGH=M%odd>(-c=-cZkp* z&->fH7>3K$Z>lwC?fZ!N145szheMA+WHIRNpl4aE*=APZLGSvEERBmsjVedUT%{v! zsGi~?Yo4M)*SesVS*G?3nP9t&3x^rDqHiux8)lggmeBIK8jx1&uK2d!>HVDR850s< z3qjS+6Z6?ErfykF;ybgfgS}EPGGlC?YRz(5vLt`j2XX*0AE-ATo)|RsPwN-GlYaqxZz`R| z)*rRnS3WE|G2tNJP2yx;tyuo6QQ!Dup&K4U*Ukm8T|3|hA1anKv!S=Kw z+?%Dhx33crvtQwE1Z|>s9E69UKc)4G+)6Q|_;T}MH$0E;w9m>R8E$FG-9!bCq6+Tl zpJH83ELY~>GlUpt!q#{100~4A{C*-i)^NY<`$#m$oJs5Lli3@>+<-l?D~zffD(s5q z!Pkjp{2TA&C5HOZN{mlGn)y2*alQiGH2`Ja-;}mzf>F4J2guRCgIi6)*pe>SX<7ta zr3$c?2qk(#*sZ)inBbBrD(py|C6CT(os%AXrdmU(fU?@y#`VwWP7b3di<%<^ee)EL z`If@))jA)$8y9V^{^U+XRX9Q)7Dc8Jy<_@XbwLF3QUu}z6nNS3j9})Kp&y{fb-Ck3 zsD8vXsr2Z{;_5G_>@V?_ZrhZmuSd<+8OLLkK8w{aw%S)ctPY8SV<+7PhHuNKosr_q zJwsaNqzh*^{Frae`1M0n02Ky^eOT`bLpC!gyI>e$4T4Ovz_)xAOrq@SlIHT8_WV;* zoDl^ADE8?C+S%_xUzwsj0wVu?QvyiC%{?&)wB+*|Ft?PgQ_0D9F5o&tuZ@($4IH?K zY3n8#Hf>^~`c?n5l+{EqySjg$sHINecw=oUum;^%EivM5~q`~DZEE9%4q+oIg` z)Vm*uJ)3Yre}E#Y!6p30H*6=`(y zyLzlby{YdX(tU8wSd^kg6mA;B&kPeDBe$yw-k^v0X#dwbnXR($wPjjTpn{ysY%$F_ zP`xwaAg%}ELls;>GNlI#63O3webu$F^lERcT7ZMX^|3A*|0;Awmxf*DOZe{BrsJ}C zHOXL~`Gcv3;@7CK$xmi$)8}L~%|T(4atF_AP{ z>!Xd)y{@dCRTEzNRZqblghI2N3un<_cHFcl9d?*2cO3CV=BQ6i3c7;J+;H7@&^F<> z7U1b^MsSub2^&B8Hra(ckB8iX$ln=5ih~-+<%@7$>EF~z2ZwRx2Hz%^+rQ^yzr2dD zAKJyBCZP^X@Oyb7Yu>XL?H{F{V2+_8;RL_PB(CtfwG13M;Dc{4n?wZLr0b4Ouu4r- z#EC{$e(uFmM+Rh5pqGMxba{es!j?(hzD;6ls(2J+4ed*>)(iPA`}cZ+NCk7cLRVMB zf3Oh$(vrLPT|NqzjCd{z>3^)m;TJ%lK~i);n~=Kkx^si1s{0lF(4_^50j#N%w`JfjgZuhg^qp}ciRol6#lsYLoT(Kq)YbYsA)sI;e}tpA@4t7c~)jackb zDp72E_x)Ry*@{rkSyv_IyAWY|vAyaKQj(YE`oC&?8=X?t2#O5HBd{bBYcdBf)a&$_ zSH%@J#nsJH2EI3LxyJ}Wn)jW1{77Ztf{N)7J^U=4rvOAD3~3xt3d-Mjc_<0)*81@A z^CE=NM5C-O@<`s_93zJ1uj|iHQq(XF7{vf4v_M6$zKUW z=rETgopPwZdultnTa3w5m>|O zy~k!IP5;#5!laE2cWfcamZZ_sq_`5yM3GZ;F^psZ$={1Vj)XA*7t@W9skB> zAv3ndlYN1e*p|K{4Q8o9m$b8Tds2Kepp3S4^r+>V~5LznBS9X4cG^E!vdW@3-O z#mz)u>{EE=X_?Y}@#|WUXo&Aa_!TFyl~?5r>@Obq=)LERvx6gRA$Djxho7)xXe|w! zk84g-FS06u5TS4Z|8R925+Q!XL!n*C+fQK4SegBe>7l(KdT3cONX<(eKFW`98QDDd zG5ePFU4609P`2nZ4{2Rb8PmU@mZ2ym4P2aLT55<~SQH?};+;Jng$si8Z#iX%u#9<_ zaM=r$h`K14Dy&GZ4%XFa%JzoQDO9u@(C7U-HA1G7U0w_t6U*B1cu8$MjbWrU_f4b2 zE4Vpygr+kP`B3Z>!e1WDMoy`NbSK1_HusBo$;g7&kF7=SQK=_b4mJ|}j)G5%yKk&r z8kv7VT5hPPzNP?>?I=rJo>%LX$kYB7y1P5lHvbB65chiUI{0(T7Qj&iQH8TNuE669Kf!TGW>jM~Dh%@!svW zuChd)R|w_`>&a>|__bxN%Iwy(Unw5^>;5_|*C|!RugHoz%JKC~it<-o$ajkldboIu z;IDx`O3wMiUkI4L+F|ku7_+A>nZTkg)WT z;kX5$-4Pa7*Fozi6eX`7oA2pdkw#B=(hd6`zdSr6T`!y{B49e#B@-46VuN*{hZ1`}LOA<_t& zsipYaFPXsZ)$CE45}c2PUwZ435tz`7yU5}IkxhLJke^(C4T%xODqyXyUZ}f>XXB4e z-QF^zJKV%4%iGDHKo9V|EW!oRyFm1QT;E4MtfcAU`d12Rl-JU_F@zvh@ zYE`ND&YH0*MMRh|8w$ybo>Fvo^E0nsa`9rgR^z;|>Q{$pM6q~ta!VKTd z8f}^0c0?GSOz?+}_3=kW(p?5H-B@iLd5Mej_7A^W4^8*uz%j2O#EV@Eo|kkjnv4{7 z(;R6n%OFD&igu&rIwjh*+AgJ!ywJL&oHew;TSpNTyFR)Wp9m+x};h|MRUB-8l9 zOyw5W%e)6rPV|f%PSE-@fI@NUYBv+h>9aVHqOKZN&lM<6Z}{0s{}`gT(>Xl&#i9{c#PR*N{{=7hFp9^7>SB||0s2H z(DnX^(B1u@R+svuMw5JI@I(;u!o(yx)#moW6X#cV??$0cU(%C;sQO>SgR*?zT7AAh zG72jJi+z-u#mVbnbsXO4v(J^EC6$+V6knB7UYmB6@L_#U$;z5ehrM&oq}$mpbFNT&ynd?Dtby|G^XjXgBxnY?~5 zan8yqjJuVf`i}ARMJ|YM(Xt=Y>5>mVU&(ObNIX= z$0x$e*1w1}Qv1%I`GXint+7(?BSc{lElq0h`Vqt=TV#D9vvLmU(TH$Qr4k8n_fcWLw>;ME#fn=mb?7+S!7+Jm_C9>)de(R=RQ{qz%8OTH2wvr z$ZovtnhE^lQ0%_WJdwSJV9BDKA^s`bFFQRwgi+0LqQJAyZDiwN;M4G&y&62Kbrtki zy|r>f{m~-%r}%rx4lN$~iK|kr+^OzH@-vUA^#|G;zo<8SF*N@TxrpCNaYffmme1&v zTyg4uD!L!GPEWK}R8Hq=Og5T=)eolLO_>t<1Nc67LW+Ye6U)wW&x>5rwS&fgoIj`0 zfrm4m2Fl^#>c=SKI5@po9SnUz9*w&$MXhM|iMF;@jHiY6h>UV9N~!_1 zD8gLt79Bs%g=bP>3-gzLPEqk}R0BW8lnYj;w3N3v{?#OK0RH42RjhL17){>fkG2)M zae9S{GMaCm>Xu&H&5WSzrV{zmgB5`;$ug>pf&KE1M*eRArAPM9Vm4wi2`<2ZyaK+@ zy&oB5LiH^1uDx^%B4mYOuM4r5x|Eo;GB)+c&B1p#R5vA@uRa{@WFVB+Lfi>ER!$1U z_2SOY{l~^1+&uzlVP$=Nu_CQJuthDonVFe`gM&g#Pm=Pf00X-|f)*49-k3D4rSKN& zoqc`lsGs@VLKs?KPr<}(szi;D^sVk$XU-)Xr>%eB7ENNGn1 zQ`8sCZiC6?YF6=eh)#$s5}K60gx1v5wC|iOj;(pTH#~vS4+nmhU#KgKh3$GHYpicbL z1}z=yBc?p5-+qd10n#GUsEayzQXu z6=z#$8XxdIBtfBAd*W;Ds1r{A$*B>-#V}y-G@d!Wdq8ONTc^u z+JIYrM>c@~g@I>m`wPKCmlaEl=f$y$d^AYTY~G5lxlKr4fSV9Y(4}MZZjW9w!kG_D z4N>_lUwG5`e$aD>JgsKtxZ|I$`Aj2F(d1n8cPQmhO5^fgC3su*lsQZJ{B~V1LINlE>uh?`yMNzK!{#V^aOhyC zRS44PS#J~b+detpVNRPY+EOs)s|n)e&Rh%k!-r}=7t0407G7>nRVl5Y{h|u!0fF{g z(`PDBz3GU|F0g3r>w?x=lCUlxh#a$W!Hl@Qg73JuakH;bZosxASz1dEDOdJy|II0( z!R9cwzq_nX3X;AxLLNP~rc)iZ8}_!=+vN*+|1SP|a!wAME;ocKN%mN9yX8bKa05M$ zoV=M2u|&QbhwAFb@#q(Ec0{X*bJe+E8(b9AZKm2#$u@#fxbrWnT+re&H?s$S9Zd}? zUL<5^L#SzK7gmP>Gt-+GQE_p0NFoNXFPnj3cmXV4a{6NUr+kT+V)m9)^ufv?7b)#r z;DN^F<%)cg$UCW^bJ1M?_0p-#e;rh;ftGYThsyoE56`YAb+gYfsRN=)g+P@H^I868 z)>IjE;bUWGxA5mzid2rB($l9zBcr2Lw!O48i#8`EYEdtt5V=6Yv(Jj}Cw$nZhKNFf zxCSDmV4RR8g<(oPeSQCl+UZIwrSMpqS$Yla#`!Fd)ob-OB{OjYtFUhaq+J5lt_puy$MQj@L5bI-tQ& zKAzMC7Nh+4Q)FcDdx6h0+zJo3b%53*ER>gI}D%@eMcZ92~(YP3gS;19?Xb>T?)l zZ^o2KCaTuF|M<OC5Wvco-QbZelep; z1OkY7TYDbX#ik1ZT_5kF;7%exw=Pg6-^!8LaELhAJJ(Aa7Tp|4 zvay96Tsn6gyBxi5mynKi&&12=jr4j^MEr`M+;P9RT7lKp)x9GD5%sRpQZX}Q?!Z%Dv42)8vv0qK zLT^D*j6iVV`5}8Ui&p67IBa)9As1_z1_f)e0h_bexUc`t3 z)0ewjgyLTL1r4~#oB)t|P8$dB4ua~L{xP16LIms@5DVajIxZWKyd04vxoh0`OQf1} z^E+n(P>+IBifYoljX!nt2!l=!g3~!W&BI&`|F1zx>Ls8Izqhj`$;a^=bbGHjQ)XkE?6 zg8NQVdXu%*^I_p~2)D`veCdR)P~&1D>`@><8>QPekxf*g1qJ&*Ww|ujo}(JeHnxTeGi}fEGDvYg=5O`(6D?Rs};Wt+?EXL2=rxVMfDLM1+RS%R}(&Ju4t`H zh%>!AgF1lZ6_q+Tfc4$c=h9lWERwqE-9Nf*Bg?6VXRY+sD0Zpd0yHEB=suCq);rzM zE-l%gv|hySZJEHP zbqxF{c6oVLCJEQEDAXI8hli-UTG>#n@thzvDr}Kk?uMVjRXdD>EV^Wk!qEv;uvna& zl~vYlZ0?<6WhXt=D_-YkS&Xh`*qkQ*5xx}}YD0#>O(@cQv>TwiGgdyMOZ z@gU!ZEz~!IUc3+ChNvVXuDG5W3>Fj-j+eCB_s`NFM)M{%Mj5yW4>{NGT!Sd|R#FTb zu7?DGuGXDl%MO`Wib&gsKUYb9Cu&TE-<+4$=`-XHQy?8JZgG{BX`4;F3IDwzcoge~ z{d(c59Y{X9bE8%6yP==WQ>q`-a?2v9S}I+?r1X`df{w`~V@Qlm>WpT?x;;J`JQ0g! zQ+H|(PUDC>Cwuq*@b%{LP>0{&aLAHnkdU2}3fYY*dqQO`dv>zLF!r4ojj|?X-xabA ziLq~E$-WzmZOFcdvGaV?_x}BU&wW4l^Lq8_FXeNcbDeWt=Y7umeQ8RhG-%N`$rR)ejUrT?jBdVYkRw2v!vC%jOzJ+EQ|s7nd!n=L*S%hct#&XwL=#hd$l2hLkv2=L84wzzuuFS;uk=+dsSS6bSDR z^+|>QdEQ_X5V!)wI$`LhnH3oVF3$o=`C^tiVZr%Qk&tTpyI7zx-L1^syhr}mRjg&B zLId}lyf(2M?R*zIxn2hgzOX!7)FZDE2;1gkgN$q6M#>>tbpC2Nj><2-Pu!WbR{Ofe z1X9s0Y`qh2lvTA7DslI-@Jh7I`Db;$17%n%z20(dmp~2cxOZ!{zm~cxrFkuGzlPP| zScugxAVk4jOdM<{8bm@wMXK;5P)QBAd_+>U!SY(0ve3?e)cFR#2%fE9t1dY6k@P*7 z6$y9SZCE5RcM`cZ2~q1G>nZV@4wg;tts=eUou}+2|0O08WB>qa2&`iHYr5PmM|*OG znH-D&1pa-m$gffA2%{gbKLmIXr5AmSj}LWU8#UjYta`LKSI{t3{kjC0(2IzRi{p}( zCOSD-njPDjzsJk}L|#59K>F^9_(wg9i8ab|J4pW(AXfpwx>g7@@n%J^qHBm!G1l(x zD~!xnOv7CJo5t^2aNsq3W<`K7RV9eU%#H5bG*LH>*0*1qr%Kejh%1}9|v7cGf zJDWlqiLo+Z9>}Xls>DWkdk9Q#1P@xPAdoMOf(liVApTtfGx^R@)7OW3)1w8n#AqRC zuJ46P0zRip`3-P6bP~5oCJv5iKKwk9+u|~!S zW~u-gZGmBg+*i7C_a#l(97H6XSIBilSL&qTWV=nv6L(}2_)c$ev-Q({xtH%aZEaZ& zje#=SR`ZOyB1MtdsjHtl<~KiS1&6rE>6`Rp;IT8m-d82N8wM04aT21est+yY5}0U$ zg{HTUjX`%iP&jkQAssO7uiGTsVxk16>cU)AxF_YNEsM@nJj3M<$f1L%tFB$;_9f!?1xqzSQuy2%@3)iC@fAuL1DqW;bz|ouj`eLr9IlWr-PM``c~$ z593b)^BiGHeYgax7YmUM7>0mLh6l~3Ha9<(ZkvTNc%+$UAc)#uEG*Ciz{U!=AU|KK zOO1iV5^_6PxY3Pdfk#e4lw&ef=|@Uxd^e1f@>I>hq5_+Ylj{aYJTr3|y2)L~1j5Ud zNIB6lX`$t1m!XwZq->|{WH%3$!t!vlNT{M(rExMujE@Ep~``dnT|OT!#c8k zc>k`DyVbRTeGleAJbO##kjx0`QF#%`NZPnM9j~7|#Mq#q=L+`rER<&Ph=M0_45ioq zal2aQRw7RBH=f*FY7WSrhK4fx zaNF7Kd#Rj#JMplDJ13tc2b;0n`1j}1_cXalr2karkl zWxQm|{6w)Vb8Yfr!ZXm44ja*$>CYU6CqsRAXW!H^gIF~Hl0G#lh_&DH9#SOsnlNh{ zRIQ=!q7V!Ab)Z&%1wML5oit$ocN zZ+W~(r~jfq!rQ>z%YNut?azCRo-)!b_W0j8FCDTkK_y_e2mpPxZAn}uQ;#Fv!`pEt z7;?W)tdonyonTBDHBdJ9#(;tV-Ym{)D^h8tn#LJHS{nc;0AFC2({QuY5?nNn!+que z%#q1MGn}I^Y&%;ZRD>}H*sDFHRFR=RI$(f|JN3qiKLFGUJ`;lPl_>`AA!xv_G)WuFJriwp)xJ! z2ndV>voSM!*(<`qY`0<_oi%a?4BE~*geraE04Zu}(aF7dQ3_@`WDPBLZCos>85kaX zrYGlt70Aa)du!^ms8%sACC`D3A9h%47*VA7MvcN4+HomVL30u zwqlodfrw81+fIr$3{`HQcE*pv+_qZ*#xuR)%@w|mo>I)9$F~4HQ}EadqJ8z|&$~$= zv^iv%^S07~11U3!JJ~3TYtVa(cKW_r5Z&T0Oc+&!$2QwM=>|#zkDyb}OtGHp_95GWqyS zklB6zf$f{k_XANmaUd~1=8+#5Ma|3E&X8evAm+olFY>%s`C{5Lt7^aS`IhQE%eE_# zJy7RWmRJ4#Eeo3>0(kt~dz{cFE!x~qm>(Dni)guGIs2rCWE#sR&gvx@A~+cg>mt@h zU}H>uu5T@UwQTycaJa9cwbQABoF53~XdgnVwik}nz$DMDIgzI6GK4w0Qf`V!4<#Pr(9%mp#sUc-t!~PVCva^K%^6*wP zx665R(%WBB5zegdfK7{v=w@A?E(7@58?D9C24k@?(9A!B2bX=wU?JMs8IOHWS^uqo zvz+{?m2rlFhNDxghDViqV!N;c4_0&kU@>3Jx0|N5$Pz{s8q)|GQ}QvSqeaf&ji3U$ z{XfUem_QQ_Fv`&LIT8WqIfMe6Ul19uA6H6#zM^;JL;zHj`Bjjp&8nset-MuvFwf&W z9ZV7BD6W4;i}(G9#@q=qMDmMlLKYdi;3Il5w)gq-BXy%e@fyO)D==V9glhm_9o}D^e7C$o@8@+peQS2ko%Y5h2G6xW```=Ps#8F2 z)>`esjMw>wO@J?^b@@>{sc-_j@`z_UWhyyJ8W`PGM{R>s%wGd9G5uSjLdmJrcITeW zs&YFeVtK6T0Uud&BU8p@$C@9_#r}FsURkg*NJXa~XdMQZvH1CovB<*ReNJknZ_(H( zCw@U0Y>%Z2N#N=Rv=amz85J|zQ_0qU~t^0IQD5DH7g?#|o; zs?Q}s#bu0E;X=q=6Do>ac0EqkA9U1 ztvq|5L@(^-%Nr^G)BynxP?oiMln32qxF!>x$uk*Y=FfMUsid7>`<$68KhOuE@T8np z7h2HRhP09RS#Tv+ZT}rY!FAYylii;d=t4u8DTx8|A2Z99$!GQ;MjeN@Vh(kf>g}?! zvRs}b(504uEQ-$KCIZD|Fzb!epSI!@n?AhX!=ZvDYHIIu6e!ekC>i2JYv#zMAv3fqX8vM3-%nJ`Z z=g@AG#(y@=X-&PQ=jV+Y5veXAjc5Xo&+vLjZ}49Z1My1d1qwe$mElF?P2q z$1*NQ$nBd{-~l}Yr59_}em@_O2vt*;x5d?DAkXc=4@=r1#bG>gu4I$0v0+H@B>B-*g%n%8HBGW5{g4 zPc#i#nm^Ee^IA&v+@lN~%I%w7SDdZArQ^Q0{30^XbLSKSo0W4=8;<{7n>3c>FoR6# z%g*kArL<#V^1aZ3*P0EKr1cw3Al~bQASgeC0MYhae8upVk0@(*0k{U2d^bzVVo~}`UB%>APCD)_Fq*5$Av1k6+iwifGk$)?#-!J6UtkDjZ0=Y? zv~^dQC~W%DMldM|1PN52U!Uw0OgLY;>%im`9 zzazo=c=Q21uh%k<^-X=dYXr*aEfJ*5w3&IdG!o3iEZBJa?B|hAFg1He8dRBgt|3Fx z?_Kvh`s?pW1~rm>DC8cm{l+-yRErI-Em79pimH!?g6Wal?~-3=Ve$u)_t$vsgr3;k zdXkRT{1*H<>Nuuv5&5}r9bQXdY!WJZd!K0S>KGf%+D^`^-p z1+8B(4!cmJn?%^!GGCX(80BiDx4HI7=SGqw+oXAuXyvMpEJge>{NERdszWvGIHTqL zd17vYZVmj(*8s{eBYtY|8(YdJJwemLsOPq2LFqm`M7tJ9%JKJg$t_CoAa6? zW7`br58o}k-O)w576b7xcA-aPCH|_?$Zx57}B*knj0DW;r<{FnGg!aV$9b@ zsm7|k>3-~b%%4f~!SavA{PG`E(7ylKO2{dnkmAKes?cQ5@?p#xz0C|vBPGnZZ>H2I z*xeCj-7`+EqXf4Bi=&AQ`JXx9ns>^H6=W|)Hu#gPp%~L}0glE$^((-EzYg)~F@fVh8kAiEmM=ztS`wikNsbLTyUF zD5!>}H=TMfd)&{idX!CgI#fi^-SbBAl?RJ1+f{~KB3B8*nmIS+LGyb5$H#y0PI*YOY{?HWuAYiz zt&YHiL|G%4Xe6#`H}*pzEvlrBFINfs@^QAsuA@buE8c4<<-72Q5CV}QK7Q(^J$e;G;ne|0sK?dS4}TQc}}Od zpzY~?4zlMfch#O^NwwqMIkzZb+c!0}y+Gfr2-bW2IYvepaat#H6gyC+2VT%sHzSvh zJI(?%>n^XC=nLe2@tLhAOB;}0f^}Yt*P6Z1U1B#uwG|6iU>Zw^wvI0KIE*tjKY%)M zC8lCUND2O-{x+Oy;OW!ef)7O<__NL387#AWE$blhmqpjnI6UxV)5Y(QE_p{Xed3*9z`U4=ABu{JbYdr9 zQ?a(;Kx%qs{9P8&9j`zPx%NrsF@wMUZKr|^oX~vgL!Z=sp^Tjp4|JSY5~r%RQMOs- z%5)rRT<(qbIqW8AF*AnE*cjpjkcbE2p%klu6iL*V(f7Y?&<@{}6QSEmnl6svJa8Wg z*5G}hIooK+dbq8mAO_PUKv+H+bNad+noLW!>+$|kiU6{WPD47J#pzhMxC&1KjMmP2 z84&Yov!@fu1FbXaIBoYs2hzYN<;dW$uvM3@HXG>jjfhd9llaWthJFpn$>Sz zg++M5b!~^#RO)T=CWXcMsBSH)l)@F`ZZX;k`t2|kxxliRzo9Twok^6cX-JI@>UXQW zgk!&6Yktzwb^E4cH7Yltebo~h0idm+Pb(dNA&5AbpFz+~0Wh<&H+*0I52t>bmpcAr zDUd`7_%q}U8Xz45S zWJh^dd&bjDl40=AroK?6KbfDzSZ#Gf3>vO|i6Qxn8Nt;lCU1|jAm{7b1A`xg|M*yT zhfTKH{?Ykqmx}NL9mV!Zx_Udx5rW9gNpEs>8kw(3+^D=5Az2^${O+6KjDpTrwgvJ0 zy0@!ks}1qEMyzb{Nz?w0A>TSy02mgypL%g-k5ow@HlJ|rAx8-e9ez}ewVr7%ecd|Y zReh7a*>={7hEiex`h6z(SZ&vU|2ELZYH(!+jp)>Kv4Gm6*px9t*96WKsU?*q~0C&3S|GE+&Zql#4YP$N61n%tdQ2 zOxulaCy}iV!8oORNUl?uS>(V?B&^}VWo(C(p(pGpR+X9876Drt*V;M}kVwbgd_ty6uj_FWZ3$2As=rPqUflj#x09|(i9%Cq`6lSc*M)AlKXLKVrkt-f&?KOP4E0VYoR-SX_#hhVVX zt-1>?s8~NMfXf;x+8YLn@_+>dlWo+5TDqrbjf zsGY0O&uN&s-$jLggm!&%`(iQ4vX?dt2z7wrFJ4aNoYePh2xX$mixSJq&!i1!v@)BC z;?}Qrqy<@Tw&lFD-}w^gb&ccrjB)tg7VYUM>Ef(w`tOPhC?L=nX@8e zuk#`{{c7iH`M1ndzS}7&%0U%2lts`u1dG!kkZ-#SiHN$eZ3JpWmNH`qxbWRd2eW!? znqBC^LQrh8?OYNOx4awBRSt>A2^mpGN;zj~54oQc_7)T{0kUd}8g3-<>_?5AG=xpe z{KgeGeGjb6HdBhmYJEl3b+_8nq+5SU>PKYX4R>BXl)1q=6_%}xpY4ue{ms$c4A!YX zw7rI3dY%34jI|f$0Vj7GlLh*bX^FE|%r{ljjB}7o6ct>!cU4naD3M?xqlB41Pp?nu z?!Cf6A!49#fPDt(w*@Bk!|}zg0~E=}r>o!M=f`$l{w(**DlZ~xI5KR2-{&~YU{ATh zA%j@N3)Jo`8v0B%iZ%N&GkDa07oF6^U+L?yk*(aoZdIxrw5y}y)npBN)lD1hT$^Qt zW(t#C99ar2m#%#${jy#=cVM4>S3s(-yQ<9ve`MB6YjF|v{$Xf$m0h~8hc}}q%VMqg znnSXce!91j1ax9yeIrpuRXb1nC?J%Gcl`Xi+@zM(K;gQ;K_N% z!4Fu5t_g3Cy3*k1?{>rNas)Rk-k;P>v`;vMb}bG~BkcNyEz`cMjM->m8o^UCdyJi| zyEzrT0YeiL;Qw}HjvkuprsLof8%QO=yHp@5h-?H?ia{$_URwd%d9Dg0! zjr-`tLT=(7nfbB1g%e<$3B4L?n2)(t{b2ghKn9WZs{x|10Q7@Zo1-{@nQUDu3~%F9xWC88gg5Fm$XvX`!b&xgB2@Rde6|z^X9g zC9d`d*0alHydd3!&EnYV0IQC|mY=AtS4`Fh0fD*sC7lvk8p=s|1Ll61}Li+swCqNd?YP|{OAzx;>*U&XJAEFeGMCwH(T`;?Kq8c>O> z;HYCx1_6_|P;7T(3jlfi@Qwmwab9aRR?clqyd_Td za}=klb|)$g5~lSfKsyvW0)FKtYe()iHEo7wqU4zYbK6pG<6@p&!0?ZB+TM+1Grh z{K7l41(UmjHD$zOQ#7nED%bHNQ+jhI2b2Du&V9-!tnRz(6$wj@*gaSNOu#oHP_LpI zZ;}%u&YYC9RNv|Y~s&CReLPL;I$9^`t%KCtcgI407`lD z5P$9NulJm@D%1 zLl|bvj(>X<=+lkFmo^qSaVx$=H<=nzo0h06SaLqUh#<{^gP^y>vPI-v<-fICKYg;b z6cx8(2N6Rf$)3D=VK{?0BULGJ(_yymF$}@v)I~15shZ$u=5i+h0QI1KmcbI+0l!*F z8&FQ47b!)2;o}|L5SfGxS}n?r!J1;+Uq z3i(-HK3`yZ#vH}|5D~YidphcL4z6$*PlCm4ti^@xyn!SHMKk?|y9Fw zKZJxcd?b-xy<#p!w`5Gn3|Bs15ARmCYY(hzzMHKzf3fw{!>NtmhKci6O5NpTt z5$$h(uT6sORZ+*Zd1xO$KGsPc5$7srmHX0%%u~t$M*x#V+DF`EA=v&gAKIpB&cPVZ0DUL;y$?b9R5~`ApWSM>0Q%T*Eo2p<7$)*ItcdG zk~(1B-z<$ud)$4BAXd7P+k<7Z@%dBfyy;%P=B=6Y>7FW!bQb(ki(gGGlWon?r<%=* zEej_!VkvVf>S5>yy<~p-LEvvX;(sZ56&kqV+FTz{wG@ZdE884(HJ9`-knB^JXpg9D zACh+TNdNGRLnUt~z(lym1T|DwuQx;;;4qqL(}$Y$Rx6PhRFg;KqEmy z`KR)S!L(m;R{!XNOxe6Bl=Dg{&Y$w}YMb)C@d{V2D`S(VQ6fKKo@;%|46^)yc?V|F zHYJjhzj;qPKV6S?77OSHkH9MbRI?jnRV%0*a*Y@e{(Z{&5}@0DFs8p zdyWvdA=Y-P=UI@AtI6f^u$)K1yl0f}t%sky+JiEP;~0iRUhUPK`sZ`_oha&Lm<0aG z{5-;2^m62zoqSo4D9_<)5BUfPyEk3WNrsN}r`mZ;Ny;>PjhpC8=Mwz|{Qz5cIIf>c zJh7N%`1Qn0Y4E4{Nm6vJhbzK(r>Ahe3A z(mQ|BYQHXanZd=jSG)9QM^G^qGzg-|%NbB8*q(F+9<-5O&+H4mUhzKuSV56x6 z4#fn{)L9lCs^9hyGnUG1-C{tF4_E@yl9W`J5euMFDL+OA27-!j z?i}2dp}zY@`L7RvWlrNBFx8*hb5#J7=7jlB#cx@+GL9MYLynW$GD4l_U!5GSk1N7SFmY@xCQL~AF6#{F#%q{=6f{#r%B`KUGV~?>Hc*QhgPOs}6 zCK^oDbFU!3ZQA(Gy&l;x?y7J1y8GmGH?7xYtF>kxm&!oJ;{;8E%ME!yR-6zn)}lIG zC4rT*|6Mr~2+)ZBG#9rbAnYi4(`F?=r4=vNs}(z4dEq$oNo8 z_Gt6n#h$c{z2~`?%~W7J-SUd8BMH_^{vLvnp}L9$D}M|EZnRgj$!{aj4kbI}x<0wI zGHNK?WiE~DgW5W^4h$*pXvA-}kmmlLqdtcOBTdGGP@YCDCsvGm4{oT4_5yAE4X?v0 zzsX}5RhmygVmmmi7VQ4W@fg>0&2HhGthjP6jJ-?XVETeapz8N0NJr;>=yZjs39dAG zrSRpn_)sg&O6d}9yq*ipO+&`E(!uL~TZp2BKkaKf7ydan(=SW|YHKSA6i1-P3}F`Z zM!;o}e&%F{;dEZ&V1AQyI5W>2pGMeIoVxE_+ztW*||hLXBv=KOl4*KORy#*GBo>39} zA%{tsL_FnYeKoYSR&ORGsL66UjhbgljqYVMfLyyYtgj*bjej6rJEA`LvR#Tek!S!- z7eFs7f}zJbOJ0>bAI_`!;&4o`d=n$a)vzoS7R}xilYIx`Tu2rQTI80smlg4JLRS>= zm734L0Zd3zAfad8il<1B4y2p*SyNL@Jti^n!oBnQ_!=F!V{N9I-3a8-}ab@f6l_8qipsl?6oZrGm#%gAbLukwew4ii70QGcEiYhIAttmLj&&4O>B zeG=iz%W~B<#hJbzr&8N04m*wq8gG|IO|hdoL>wP3V$YmQv7CiYouX4ydRlS*VI-8E zUU;>eHy3MM8~7ep(82#&tlPcMh_AAHEwrjQ(cO34NNXJsD7GZpCoxF z`}LTiSkFIS!3xS2{H4(rc84h9$I?%)!;XHJQ@t{8o;Kos?;@Go6d6) zL^(rd&ZsqZ77Hi1zwo{>I#-bH*E##f!gR%gdqi#2_f+sr?l)4FrV6z;1<;vAMMZi5 zs2lXqb#bmn&$x&x^qWfj+>eWz8ysh+xBRxb`L=5=pt9_~*(AH8V2jl-hVEzf?G$Cn zKXD~43(xz&?c|{Mb%Ru_{JUTpC5)D;(RoF z&&d2EA`i(!D{1V{65uKI=(UcL6SS39`)0U-hg$4w1VWf$-LhQ_`?MtT3Oiry(q`Fx zo2Z!YPN?>PyC-S2QK-l>>BNQlOGB%s`A2-(x4UHq*cq5Iii=~Y1rYTF>E!OV?nF^x z|6{k>-Cjxk5;KA*4q2QXC81r!v3e?Pg{7++`}1Ue4&PCDVDrx(=oBKUMf`y|hvDuN^W<*C znu)hZwV$3PTC-tB8@-OKaqLx;>}xfG*Z#S@b_B&fMi8N}gr-nniUoZ2@kZW@vz^dY zO}1hMt4g4JJ~}*CTiYJ!D{6BJuwazg`KEB#TIQ}_A|A4z*qEedoUlJlZnTev9)>zC z%-T?QKUOz+@%ZiQ`SSu)og-;j9dTp_knVGMXv8n7p=REWUHsVnn=KPfd^_azQ?uh& zt4#dW7#zw9rv%Hk9KCCxSpIF^HR2Qd+s_qtm70wc4nO^^24P_bRczgU>$zhc zAo4`=B&FX{Zs^Vi zM{1*|lO!Bzk{lgOG=7YyK!SZ0H`<>H=}-lKsB;X4Q@!Er`H6LEkWN!lH9$!TL#q~4 z&oRTCscWGiwlG2L*clFA1&wtSOs@AfN6A+jJNBt*DE%jJ+COzIN(!x<{;p2ljGO;) z)O+Ng?1T4~KR&4=M|b^o*tF@1-)(Et56{YCT(xOlUO|>(N%Z;xWIe5ZU;pRwtuGHXuGICzRjNGL4tfB z6D~3B*!&YUI=_!GMe`wRBY;5>&^ReM9pP;jlDH1S=aR4k@;NFKK#5761XcWEmUsge$%AIiohA%C&`;VJ$L_DfGg0*=CO@`5j$y%FMB{OF znML!V!l0^x&!vBvvaWQPSg#K zmfloJ=Y^52ImsE*JlTugeEQ18QRv}{e`1p1W?xee_2w|p6BJq*S=0v@m;7F?gSqND z@^zi_BD+0*F!dgGe&e6Ht*07Yd|;a~y&8*&RxCBrD5o4Xl#_La)9TL9S6Z!6s323v zF%Ko>32RAo-NOo1(V4`cHJ-?s)Kr_%sjc|EC0}|(d}ctycanoHnWfrJSbE)`m);G4 z5_B8)eK4BKL**TqZ34FhWoSAcQ@EY{(a`Ir#FP+6`o)~X>8P@`c_#;dYdrE-(-#!| zY%m#WjbmJ=JMc`^R{JSUQB5H5nR9K$t zOkOQ2#x>54fGHey-*!8EZ2k_SX|>g&YooxvgtR#%ToZ-_&19qjOFqd?_<#m1nC#0(dvYCS*$@3|D9XDvN` zz!xE)a2B9NC`?f>YY=&B6?!CN+-!_!{X6UOK5EopDEuDGy3xo6TnDr$_n#729KLIs)d(Y z*?+pMP+%{6Vg1Nfv8yb=7!mz%7ty%f2f)i3_X?k4-`!!snBh~7^o1-57S#h8%VvC7 zkPTq!zWU?mNYo2eHy=^utLBye3H+1~jRs_Xc^F_;&3W$0{mxGH`<+0?Q%$X>u318D zJ1)$7chMZ+tNXNF9pa98ba*B{R_)HW*qd6wL6ey5E0qH~ProK|x?aRyy8GU){inI*1UEnW$7ID++IO3S_EtwU1**?ssCTKlhNHO= zC+rseph4qg?2qry28t8kg=zy2%+yv1YFGXy6XN(RhuP#rCBb?t8&jT({AU57mz^*G zc-97F4Cvj3%jEaf7Dhr0>D9=##S_H|w6(ujVy4}?Ux{%fdq9XT(IHP$d$p0Qf}B>|@>R!RVBG=;`&dv5LDyc7_$^E30C)HL&|Ge^fMevRA)D zRdsurpLyrLm1U&YuS+Z(=M(>$TUrU45I|69>JexJqit*){3_xJys_6J}Kh($LblMeZi z(;9)edRR!Z-{G>ZP)R%zqkGmdP6deAKl68~AhMAe=DT$~lskATcE`;?C)%l^q~bnV z^Dpy%H#cB{a(HBfn>C8_26=XEEnz4%hrIIu7ps*1TcRp&XXlH>+JB=e%a6-~EcdFb9|^Mp|H>Hnp$z@# z&HK3y|8Z5YPzB6Ey)5YYGc@jrBH0Njt)(|5do0aepC-haEHK@Gv*=gxcDoH$SZ|Nd#QoiBj$v<+B$ zSgeV|k?txNF|b?ZkAvo~HCO_(cK--PPqIEBKZ~+L)Ub?i)Mn2^*@q%93-*EAraniJ zDCwgR4T>vh3 z0;h~x$z1{sS;|R09Y0>OO1{i{X!P=JR`A(adhCZiX>2KUji>Nc)nwW9YuvtsjW-~! z3=;-mcheE3^`1$#yL_&U_>C!e%DS5(a3#1=#q`E75m4lSpPo+YtNoSlxcrS`n%}iv2M*>EN?2dKr_Z{n8*&I*CbybtgIFdb=ET`~dpQWpBNL;3KltP2>B&g)HcR?g#Qk*s7RHMz23NgQg=b8#EOPziijgv4 zC!^6`qO3C8*aG1NG!uY~SRQu7F2x{=i2;@yTj*Qps_V|??mdC-wv*)1_WzeX?@)#Q zNy@n@P#q651?p0{yCyw?{{s~@w?o_CPl*TbWX@|Y@}Xp@181S2+o54Z%G1R zhPGa6`ahSY{g$=(wwq-AIkaTrqXW;73^!7*kas+r&3ohF*+hJUaTAT$U$ZERpxziO zCDO`K{a`8Py4W4ESF=@bm>d7)3+_*sAf~HgEb6{xi;pU!n#>NXb02Bv+9d6_w7&)3 z4`gU9h1fzB7AF6b~Jdk-ORkQJ=gUjzuTi#~~`^L0XYIfuyb!sHz=wC^q zA>F{AS>J;+O^>>$URezJIT$7cz)*qv`X1vkY2hjYRZq~e7EBKn(-zv2?2GG~M2%?> z;Q&|l`Sa%`0ceu$1OQ=(x?#36_wEpjENTd|}QoT4c;-Z?)bkFG|{>WF$dCK>7>MnTTPDZMX7mRCCUN{^_|gsZOURu)|u~ z$HblU;iYNp#>qlJqJ5hG)Nk=YFw?p{PkfJizd9qpTpZ~C@(F>qGqpsfK)kashWElW zj9WUz4R`7|oSI|4f)vl7y-3W%HsX`l5}PqxE+ z^Ha*u4nDewYJ%k_R8Q|F|MQ)iZrOCYeF|p(=e6A9LCKaK`>j7~i~T*%h2Xqp>29{S25Yh3VmUG7e`E6UP? zq@A$xAr?S~6#c*4HaIvaWP@2d+(Zht4xmX(efFRG9TiaQj5nl3&m8{pJuK2#Z#i%h zY(?gb&H)$A?cwAHhXdI<_xOJ`4&G6@+@b^bwwWnw;IDlfdo(0Vo?06LR3>jL($|~b zuUq`m0)bw&@Za)wD$RCJYP6tBV4j;&pm)5YiW&Z4}9LDx_w~$_#J(AfDE!bW_ZlOH`U2e?O zA6+f3E@CyU$+<#II#lYllcmo$ugoe{LjY`HkCItX-Ufk}h^73cgHKLN`Z#j5j6D1J zd{eum0`H|MqW@sJnrIU4y{j8$EGc>nEz^}!N2 zj5Pgzv-^SeY)merWp9e7u+zEkuU^@S>^g2MdFbr~cajwqJ*U-}r8rmNrZX0&p3$}T z-jE$&VzIrrj@ZY4I!niEIp%I`MVYq^$ng-#(Tdp!7=xCk)Um~tojlb-e=ft)g$$S# zQiT>4@~fuHuqi+PQ{s!!HF94dG}^CItbFNja+E4wxp`M|d+0>edF{-ga^swJ($BOS z%*ycK)lGY=(+@<}mNaAV*9WG;_a$Y=#`kj&yg^MI zg!9E1g<@t>iZG_9`^h^CHCx^^D!S0H_)I1uASD<=c0kS_(E>}T{Xz7yGllPr z>gm*OPa)RoiDmBPy`BfCn>yB#?k*Kx=IjO_XU{gQV*#Bi=`afFS$w)vWBSF&<5Rq{ z-YlF08|5_Z#oE{R-fT6v;t+ZR*>KKm;=N!cb#dxC_9YRM{Qy06Al1)Z0<<)1KMgYX zElhg_w#z`tV2SRP4l+|NFBE1!uAco+)A*}^@#ods(^m=^fcwDtpRiv%JyhB`Hsw64wIE23Wjd<;J5IYn8c{F z6W5Qiv61WR{t)+7?ZPjmjHGS&*#!99YXm&irbXV%iO5-)l?OSw8{D<%C%h&`yDozF z5kUtn#U|fn_W!#}s!r^GyQ|#*2r$<_D4E>1gKV3w8-o@XW|P+RW-UzWHS=UO_0naJ;{50R)45s&*jo0wXF+~#Y&CS11cx#9M(bX3)0KA0#09~;z zR$>BhJ-57v*xlc&$fQygLsY@P6Ys8EGKdpUv zJk(wPcO|B*l|=R~l{I_ztrRVUHe0qVL$*N%S;iKXt<9D#EfTVuk!37n$*#m0V=#m; zmLX%9!E@Ag-FMy3{XDv=u>=a0TKbI$pmb3X6Sd+}Yr14EmAZj3iSIp^8Lz`!0!^6&d`ZYAuapg%hlN{O2M$Me?;O#;u8KbowdjsJoGEq3 z*#hD2tw{Gpd(4KfS%tSM*iS-L7rR?xkM{kVO!Y4uKXSE?oHLAT)m+g_lPuZ_gH{Q% za)YVZyJt5jc0{{V6`*%F9&+j{uCGHLCnmmc>+b%7y86rS3hbw^vL(T#O;l4n&PeaM~8Cj-oW2Q0&ZSEdw7QLgrK)30)kYFmSidO9gW=?_+mJLSIWFA$t+N+52gm6>p38%cJP4$^s~k0#R%+T7X`mLypxoFoc8)tmodJ*Df<=wx9RDYKW^I%Fcm=U zw!p<+cq3RrWcnJ(JC^T$&arrZqQr&VFN&|#-WX?nUL`h2ioIu7!f;2=#YxnToMk*^ zaP4|YLfFacV(koFxw$5Dr{i*$fapykGN;fd*CS8Y_YM1vuzTq$^SV}-xr2y1?tpss zc=NB3ICLKbw5~Hs37niHjN&@_}04}LB6#v(od8wAX zQ_Y|fiu+)x^v5>`;;-x>3@n$q`N2CjfufghEZng??6;h3UKQI!IlnMUT+7!Ym#Nj4 z=3S{|46D*h&r^w@lk8P)02(4mMCDfcyTP~uf$9?I3S7!OHLA2dbchKb;|_>R2kpU0 z%|WMtrY?*rCy34yvivRJTk`JzsdBla6Q%q0F3)*P7?2LBpR#yoV$TXeRPJxMz_RBU zSLfavqy657_7Gk*3$O9cWAsJDQ0(Y>7i-XWqfP2iqM^U*HSU2U>CLkd)5RWrS3p*m zi8;ocbKoZzLk|?)E+*LU7rbn2(dT1EFwt5SdxYqHYd~ePPQ`BDIrDk{%g5<^ZAwSso3Y@*TyS{O6;SdYRxsE!cj*axnXX8RJxA7JZRy)iW)Y1w5ibA zOfWLJuAyh$>QsY3z1ngC>PU)b=8~FY(?l_T0weu!ehYg(m;>Q>u=f|kE9 zYiwJeV!p!AnlE#^EiZ0q26ymb3y5G9!8r4>pEz;Ctj>E}24%eX9;ZmVHcaS;W428gzJST3AM%1vfJ@ zNZA6#eFdwllGKfcCh-D-*Abr)%lqvwKz@PRAtca(f3n>HnuASybbiy|=KZ*-sHk{{ z^RGki`}EGayIg^dZ*2&yZv$s5?Q?@#ss+-q+#!v4e-iDi+cgGpA1CHhs;Brfvk2j@8Vvxz@E4eJu7vZR3=Ru*M-2iWu5*5d@pzu8{XlkB zDb`-_Q?;(M{9LbyL)$DQyGy-T-J&mSRAuhK8O~#~;3OUif51Bi!ASUHIh@>nDDg!B zF`0GP{?9#*4^r8I(-W)G9OT?hh~*eZMFY26sLX+IZJx%GFY-at8=5K0)hDPCJyGO@ z(S`b$%RP3jZ7XIrd!-2PE_7gutUqBg>R88`ZDfpBtBuY3o)%jz4}G2aC3;Gvi2yc+ z=x14e;n$&;N* zoi7Q}t&USAGC78~X9r9B<~Jxx<}HHMG>wp<;F69(Z`4e?mJ{5(kK>sq(zPAe+CCqX z(dugnPI*S~J3Wp#Q^g!CAA zrlerj6Z(gp_s!uta4IA2QSuxKuc~6&tGg&%eMOx@RRhNAP5WgA)HBYSAW80LZl7`|~C=#QIGg zf6m7O$R%mLGIsRatPm~JhQ+nluRuO{clr$X~-|Y zs{0|Kb?RMu8`Nn$0wF6PM8({oE@Rh-)!M3$JV%4}m=bQr7g=2k4Ud=sFuzGbBKep) zOm_F~K2m*H$H^Y))-Yr;$Rk2lvQ--noOU!D`G%V$g=usQo{16o4#SNI_H|Ve^pUPZ zNSgCIpFnHcBxRHfQOZkf8vP6CN1S zvueb1)srVPO0gf^Hr#|R2ik}UUh}zi{_lwiM9i-|k*8g%IX<2HvvL5jGvMBJdnM^q zZoa3E@b&2S7qSu&Y``2hf|);xv#36@G731o_@_lPhvd6j5@YUWtJpK%i9hnX{JZRx zN%MiN1kVh?%*vhZc1B#m3>l%q zo@2OlDRp<5I_!#4Jv`#1-2quqXc9HxnK*@;)k^`UD3Q@FDLS(zNn4SmU zA_c$hR9l(f{42-(^LLk>TKyr-G0Vq#Tq|($?Q%#ASpWWs(Zph|)z!EmSnd+`mAqL( zUNQ4hYaH?AzR!1G;trhgHS7N{r!(dtj^663pw@3E-yfy+U7{CBs>=pm=2PNgm}9@y zv}`zURvE{M<$gvSjQQdXNTo~|z_(AC8=UT2)Uo<_h=x-%$3Ze6nj+68GD zo7!U`uHpNW=BsW^#qJpyu=|qy;Zh8?1bU=bSZ=0iB;MTVXmy>FkYRCmX~A5D(Hj{| zWGiMNVkQfaK%}d0EoNaUgYT4~oddM_MCf9fIdr>A$q?VEJkNP8!BHrH^q%TfL36`$ z>BSRe`I!?k9$K~B!~UP@;Bg&~lci;TA`15E@?TKLG=o_{BP^CsJj;2>=o4W;GM(C&q=j9CRNaEA*Y|$E_lSq&!>8mwDD7-eI&J8 z$h8J5WpA283?4R@0)J4e>7x-xn*WGLt|{Q;UYoW2=qj9OmsWo2y%sSyT&N1HEE9G+ z3MD(xW(Czh{|&GZMje(ng4Rz@u!MVt`5Vd9|&lnlDM9pkag* zISRURu0>HUfKmcq>vta|nA#oYDFu*wb?mBiH|$eK2PVG={b+cYA8@t=-@a{y(FYGc z=a*<~iJL37ZP1Xis^U4CIx|?O4N+Caed->G23`iu7Dt8T8C;ZYPlquy+xEB?&okXe zra(DraG9FluN*P z&BujW%=m&G-z4uoz$Qq&(@t!d-j8~#Re?M3R)RQ;J~AHE^_2@fgx8dk-S6`D+`+Hz zJ6)dF^Ihv>Lw>DRdQ^lt5^HG1^c^ltLe4OK_ULun zT6mbchd^IE-mg#eS~vTK6+^vNi$`Xy$66|Wf~=sx%}T1qqKBrUWiQ1({mJbLzT8|B zuu|-|XuZ?pf9H4iE~xu#X-LBq?L{jvZTkR;Z>O!bK4Hi&mA1Q#PZ$>3={wH;GA7A>YX{0*F#g+J-xR#IezTBdGv>T(HEiRTW~u* z*4xkCegqbk+_{(v3A3#*=3XHL{h_~BUux1b)35d!XI9h~J0B&V01Lj)CFj-@T7w`+ zqho}&#Io6w=iNWfF(GFXuY4)<4*Zr1A4Zo+(QMmO(N!Hye@`5akZD*NJVBoBgcPYY zE-6?VTn>HVANT^xY?#eUwvy%ZLs31+; zPe2bWo?O3GS^kmHnxjwDI$*ZNz%QjG!cpbxpi?NbpkDf3%o)bCAX|r*H&;bsZQlsG zDmf7I7Q5@YwUq_xHZ5hw80zYF)os76ppvu~G2H0P1VoJliyuKdHTJPaU_nlz5U|5W|!Gy_vKdo?l7@@hC0F10ZvMCd+pxd2DQhkPxdO~OYlTENh@WHFz*V&`??MmQRdxO{J*Hkt;Q1V;>++xW!npA zufUwx+EaE8M^Eh-_J{+B7VMtQI+I@d|&a<#4K_tm=V(2KmDA7lW4+`K5U<+0wvz z;dR&7!9aEeXLi?-B>{9nx^( zLyUexe(4$DsPpx7#jBGqhsI9*73TC6HV}0O1QA}R<$oc#Grx`pz$U}*jqDGCQJ9>r zv>Rg{N7*HK)|xw`zD4P7iq)gfq4@TlZg##2i#p4aM?aWexRhP_O^o6QwWq~rm?a|x zFDHMf9}ZX~_7d&$;?xL9HrlKT15OEBX^M6Q2QYTtJB}!S_uv&v`hgg`(}Smm*el?` z`j84&l?+pKbyoY1R}Vkudqy&j(0pYM*XaL@AM4-~qda~ESp7@m^IcRj$` z{~G-R4?xy~A$4XnR*H!s<*p6NS$q6vFT zDO>5w8=EJ99 z^VfV~Jagf6OCxOQMn=O(C&8;!-p_7yMDtVI6;lUcW&I~t?9hT`ua69wW1u1d|0OcJ3MK6VoTE~eCb=N;n5W*N`Y9!F* zZJ~0-69EdzeRp##0X|5&Oo9emIyyR5(w95zUEBIcz3s&*J*2wotXH}IfF|DMzwL2;vky2h&5vpj zecL~wZ=O^?X^p-3vvY4f(gQP&*cfqAaR#%u*KS{I64ChT)$mooIctec1tYmDhFhj- zG{l!HWO1THZqi^b*V?pWyK!zv!GLHs>o_ERv&g6 z@p9LREEENcfP4uss4~eUw3LHWiO{`XPu^Ig8xsQJQ$Zou_+WQ9@ z)sKMhFbK`hC-+*-2I?kEUb54=J#nRZ*6*!5K z5@=TO*u|TQvcQNendVp+_S}52XR*8X7o_xkS&9GaOKU#%W34b4R8_Xf=#^fx&V}Kq z^Nj_M&M~t*T56Xp8k^0pi^hA<#6#9QY{u_%TlXSVZWi9U4=8`PX-EMO7FLfgaQn8P z{gUkw2%z^ziUK@M9;_b=3*ITxJ%Q29)we45sKOvP=AjJ2_m~z9yF%s@3gD<)eV9Sr zntw~}|7t;Bp4^vtuZ&UqUil@fYx2c++n$<9+RIpXxY>s~?SXuT3)}JSatiJ8O*%bk zRe~l+JEC+;q&rgK0QDgVt_&LWos{!+!_8O+zcc#>^SOA0zY>49`CblNb-_$@n==0N zB*}h~(%d~!b*e1WZPf6ExPGdAeYpcomH)Q(V6;PPx;M?adv|+5;3RGa9{B2W-wwa| z8O}ze>?b3gE1~DY*1*o4PhR3Z(b)AUJ6b1VS_n`6+HjK$8pZ z4$)kaH*I~J(<;^1nE5r+i#(rEKefJ_Fw#=s6rxAWQ0s*X85}f2s(HS8i z|BcHa{)NlH1w>HWg_VZtqXbc;%NllsDY**(XxWu+6x@7rZMTx4DyoQrUheDW6ZhhC z${OB$-6hr@WYu;MM%uz{Js9vl5=;Ovg{C>I1TaGqv9n1Axf~ zeC&iuu$6wUjmvC_@LM{IA+{!rgd1(Pz9X;a*M%C@P%Z{-aA!447jA28ZIV4F@}TJa z^{KScMqi`tUE8bQ3@aBCXU)$7HMc^qRkVN;i*bN^+at^12Tl zajxGCpp!+PPSvh-OZC(|`L;z9dLT3^w6&z4>Btnm-d&khJHL3L3^*Ct;e;4^1QxI$ z`QzTV8ymV8S6b9xyQqK|7`u%hGb&e~MiZ)$<9U+YV|k0G8WU$%+7}BNd_i+NYb5KT z<00=g@k-MX$*r5J;w^;*_g!#P;*tQomJvcq{}y? zOHp<3D}zA51C69Pw0ozzfW{}di|bj_?ljF;`WmP=Exg{TReVtHi_lVgz0}P&)HV&i zvf%3B3+*EufkFn_DNaHR?OM_lw24#3Iwj;_AM$UeNz-O&kE)EJzHNQOu!3Oe*X>@mTVvcmSpnq-is#CHDvM=`NaEe$onpVW)FA>RKZ znLy~{nKX50B?c#DSWXSop!MXiA}Z4ysw!P31zFOA8|wxz0-AhaPWp_tcB&JWD8CXr z>??vY0*fCN?-D(TS7`0~G?H2E9;p3HK;e<2!6-?skmM~Q?x$VZJ^x~&-jT**O!2yi zELtexjEmc$+P)axG(1@}nw(y?(+j1~0yn|?53P4M`k!3X(em)8>jkan)HOp3H+_PZ z+l*YaHZeV89jMJy=vAOA=98gIqRXd>mI$qdEvGqxh3fptf&vfxE2g<*6YkooTEtcm zWe?%gzDHr=l(&+Vj*!fi&^j4crpbrFNCE4A85xcu^o9fwA{4vy-Fu!Sh#}kS8++&O z<5Moggfp%b-<`Sb;E-d#y~Xcq^+^v-*@@zj0DXqXM=#(R9CL6C4x9#+9a7JviXB6p zIcf+>&lsPRSURrmU>YdLqLsdGA6he|v&v-@L>Y<}jfLYK0EyotW{$47nPWCkkmk-? zQV=Xfn)kwWDYVvGD+SAqZ>4A;CnlslWE{alg|fH z@_L9po?B8|%Zunpnc&T$>$Y$a^!g7JY{oK~I152XyCUvoDDhKBSJvEmB*mOUp^#uH z4C1{g9SfbZ37q%c-;m|fD)|XDC*MWy&@S;LjvWquw!nn+$QquZb7)Z?cbC!ZhW;W+ zt^ifwwKW1E3MYDP-ZYR%HDNMGE0TOp1qTx-{x)Xmc%S$+;5Q1bz^ zg(mq*8)a$fV(kM0tEXt>S;-Du*}h9rrq`sa24! zs3ku?LCuo66}~OEDYUe9tu9tCOp8uDQCzz2jyN#rmIwrJF~c>wP86y1OM8 zo*))CIhrH7^o0<4`s+JhihUfO12aLb=IM#DOGe4zrX(@Y|f)@*tcjxe|Yn*-Kc?0W%sgEMhB}$7r7$gHNFssuI9*L zEAtRi_si&5SaT?@gRc1x1-N0PI4KqLQdt;M_KBtdZ z#r<8diRJCLS8+oi__pTj&~ZIBE2Cs`vQ|Wo&GLyLB4Ue6%WvIg+$UMWdh4$(BDrV` zq2<3{D}!Pl6f$cwzLBbIx6%@JlpW}ZpIJNAH`ljEP0qi3+>mT)Jj*5gLZ_>x9J5@@ zICHXo68Vvhk};3Rqt<|=Fb!IiMln#6^PLxdHnUKLC9gvNxsSn!O#O9XdxfB;RzQs2jJ)oZh9q{l-fI?JU6~2wm2d^vvjRT>#7%SyhBY) z2|^<9GRcB<6DIQfX7HX&O|R~B)z^I>I_Xtgk9KH5fq@|$o`g<3dwe$GUmTEGE6x_! zV5JiSdaG|cBEfoPe-O1fVf>jkm0!!3FioDBLx=XOy?P9vtcVMtkU zAY$14Bkj%ruCTh+fkrG06wqc!xLjI8RN}9R&nGCa1(svy9XTDUN8eQ&=zW37c1X=p zp1I@8bPcpC)7^f(!A~t;tSa*OjTmO*J=fJtiy&D z7&KJ`ZZP!K>7~zgTZ&txMXiVg#AFZo{q|}=5P7sNvaWKrh|G0zzr8V^AKs)Nh4Dd-m=rRizFujy(3%v|M1nj>39$41 z#a#O9bL2pz96va~BS2ICn5!ofp!wZ@+mS?kYiiv>SR+KtA?|Xb$wJ#vhz)I<)@|yn z>5?g8O?#=W2f^;A?Jon=qw(H0Z}bCMKk?WeCB5vdf7$U3-;itia)IeK+={cZB=(}h zOwOriQ(TV^F@1#7NOb}ShIYRroMdQsXb?*_eCbjQ1f`dKFiN@xnOHB8+KP_gk`>ZR ztVfTv-wG+XnARrWMo9>uTX#|b{GKE3%6AF;ST@KS&8P0QLo1<0({B)M)jeNE(C$~ zLPG=Lif&yuPG>mc7)$paRe1MZo{bVgM|L5o425cxpL(Z*OvUrq}Lz*S?wQ2%J-d{`jo7HAG{J#}8k`e*Bc?CnH!x z<})jG*x!AfNuvX}lxY19BT_G!V;Y7pkz;IzBWMeBxsmnBHSz+>+K$b6&vF!P5wXiv z+3n(mG&Nt|kpSq;vqLZ<%U2>0_hNSPymkr^jSk!!=;U~`Hr*s)GP`k;)I(vkdjlfx z{)Y38zo1^S!ZdtL98dDxWUvlc);fITa6poBYz}Z`2|XE6TkDwr^Ai=G4jRBo3&!< z6LX*SY@#qvxm+hu+Jg;h9hIo_*Ee)`Xd-t(lTp)mMfDx-fwX{52bP?WuP? zu-2l(P^=lTM0R~a30%DtLL@IBkTUxi&iow)w^Ln@OTJ}=tnGfHUA^J0fta_M_-M1m zy67(1@M_aHCGBW^hb#NUTfdvLrVdr^Ag*mGfJK|yu-dNp*TG%8n6F$scjmgLN5B&E zR~(ZeBh!d=naIWqE1j|irQ>EJ1$bXzPOw4b6>OT1u*&jv$AkueTR{$R>SQj`!QW}-OifKTD@V^z zn2V3;D=N$-K?zvv8=(2FD|FHG(P5K;EcG7#tPQp{lT|8%38%C}Y`x6{!w%8L$FP)WFC`$=21{Z8-()((G zzVKggH91i}N;kmwfaF?|-Q3ofNOLx$?v8qqGWdA^YU{n)#Kx%I<-wNWsi$q7PNdvb z|Ah2}$~FWe!abNab29Nc1P;9H1t*mQMIo{oOi>q=gG<+xnLJJR;Tkp>?>Ex2AGR%p*96Nif7qDX9P- z_LP$=mpQ&}i-q9N__Fca*({dd7lehly-IrCBirs-0(G^K)qvoCsLzj4);I8Uh^i}O zB&C{}F}g!zZvO;F(XQ($x4!%QzOc_qItpeZ*x}h}~E6|EK=~0Cwv$K)}oe zRD-|6`8!*?Y#tb5=d#~_U*pb)U*E~^{B1wu2Y%O05#e5)|99bCrYzE*F}v~Gu@LFs zr_LE{&r93r3a&bGHfzul=AGA!-;gY{kI_xK^1*5VcZq)&d(XYb!Evrg=4a8={}?}T zX4Ki#?yn<1>`GZ~I~zpKa+UMzSAG6`w`g8yg^Q);+@+iX}Ovw}wyR$xA-#m8(Qvja7Q7p!<%o(N7bj zWGlF8>B^(P=W{ZFrR-ymBny{1`B*{Vqk!?K1Or>;0t7qfO(`|Sg&8j-u&xjK6S+c} zpT$tu|6CW|QM#TeRU z+E(;V4HaM1r{nL_LW-1^#yG05zBB*KXT3XD_Tz)BKQ=v!i4mAA%J_#bU-N9&4YQKX zJx)ENk*JY-oY&r=!$8VKwtiqCuuM@K4BIl39n=Ez^@f+c(tv>h6`(3e)3)x~TpLZ$ z7YsPJ9pBg2_ZvC;s)4wj$`7FFK}{tS@B3Mh=UiNi-Jxpni8tO0SE2O-t)n9N-0&!? z9d9SKZIDftEX&eZKEccAVU^&nVRYiZiDDxkZt+k-_vdKNSu*1 zIy{7+M;=o+U%8OUtg-y#HgHaXtZ>&vhd<@i99m%}&Fc`lrrkj*77vV%0hqb)u}e*K zUxhLFVPDFo%va7drLdhG2InyHI=UDL=PHeJvDV6Mu)(7q~fy zg`#uCw>!)?Pcr-PHQxY9APDMB_7FR$y8m;h9-qGd?*#;kA~0Fr zYm3bY`m{z6)yTS4DCGNTdV^4HM8Y;okv@-A`0-Pj1N7TJz}I0h+)YzrP=Bl>tD>|H z?_J<3sNRjV!lpo^?7xui%8)iZ9s`79<8ddWV5RXboquG7} zA|hJoGaGiza)$rm}X@D_x%WX7~-k;n^ZT|Tlkyn1-?stx}XwVuL5rql? z9!Pw7d4*Y(+r=-YHp~;;|MmIL<@h5XhJgWm!(LI5y_?vt_n({S9Tk5@V41N`w^`|B z)bCp|^=CQq<~Z;w{c+ylpWE`GI3u<}u zIlH+5J2D=w-v;XHwFr6sI}zFYFU#^6)aS>70x0_5Giq`t4-fO_*w%g`ACY<8|GU*L P@bBXJE9VN&+J^rxj}NS2 diff --git a/windows/deployment/images/mbr2gpt-volume.PNG b/windows/deployment/images/mbr2gpt-volume.png similarity index 100% rename from windows/deployment/images/mbr2gpt-volume.PNG rename to windows/deployment/images/mbr2gpt-volume.png diff --git a/windows/deployment/mbr-to-gpt.md b/windows/deployment/mbr-to-gpt.md index 4551b08e4a..c5312c0bd7 100644 --- a/windows/deployment/mbr-to-gpt.md +++ b/windows/deployment/mbr-to-gpt.md @@ -10,7 +10,7 @@ audience: itpro author: greg-lindsay ms.author: greglin ms.date: 02/13/2018 -ms.reviewer: +ms.reviewer: manager: laurawi ms.audience: itpro ms.localizationpriority: medium @@ -23,7 +23,7 @@ ms.custom: seo-marvel-apr2020 **Applies to** - Windows 10 -**MBR2GPT.EXE** converts a disk from the Master Boot Record (MBR) to the GUID Partition Table (GPT) partition style without modifying or deleting data on the disk. The tool is designed to be run from a Windows Preinstallation Environment (Windows PE) command prompt, but can also be run from the full Windows 10 operating system (OS) by using the **/allowFullOS** option. +**MBR2GPT.EXE** converts a disk from the Master Boot Record (MBR) to the GUID Partition Table (GPT) partition style without modifying or deleting data on the disk. The tool is designed to be run from a Windows Preinstallation Environment (Windows PE) command prompt, but can also be run from the full Windows 10 operating system (OS) by using the **/allowFullOS** option. >MBR2GPT.EXE is located in the **Windows\\System32** directory on a computer running Windows 10 version 1703 (also known as the Creator's Update) or later. >The tool is available in both the full OS environment and Windows PE. To use this tool in a deployment task sequence with Configuration Manager or Microsoft Deployment Toolkit (MDT), you must first update the Windows PE image (winpe.wim, boot.wim) with the [Windows ADK](https://developer.microsoft.com/windows/hardware/windows-assessment-deployment-kit) 1703, or a later version. @@ -32,7 +32,7 @@ See the following video for a detailed description and demonstration of MBR2GPT. -You can use MBR2GPT to: +You can use MBR2GPT to: - Convert any attached MBR-formatted system disk to the GPT partition format. You cannot use the tool to convert non-system disks from MBR to GPT. - Convert an MBR disk with BitLocker-encrypted volumes as long as protection has been suspended. To resume BitLocker after conversion, you will need to delete the existing protectors and recreate them. @@ -96,11 +96,11 @@ MBR2GPT: Validation completed successfully In the following example: 1. Using DiskPart, the current disk partition layout is displayed prior to conversion - three partitions are present on the MBR disk (disk 0): a system reserved partition, a Windows partition, and a recovery partition. A DVD-ROM is also present as volume 0. -2. The OS volume is selected, partitions are listed, and partition details are displayed for the OS partition. The [MBR partition type](https://msdn.microsoft.com/library/windows/desktop/aa363990.aspx) is **07** corresponding to the installable file system (IFS) type. +2. The OS volume is selected, partitions are listed, and partition details are displayed for the OS partition. The [MBR partition type](https://msdn.microsoft.com/library/windows/desktop/aa363990.aspx) is **07** corresponding to the installable file system (IFS) type. 2. The MBR2GPT tool is used to convert disk 0. 3. The DiskPart tool displays that disk 0 is now using the GPT format. 4. The new disk layout is displayed - four partitions are present on the GPT disk: three are identical to the previous partitions and one is the new EFI system partition (volume 3). -5. The OS volume is selected again, and detail displays that it has been converted to the [GPT partition type](https://msdn.microsoft.com/library/windows/desktop/aa365449.aspx) of **ebd0a0a2-b9e5-4433-87c0-68b6b72699c7** corresponding to the **PARTITION_BASIC_DATA_GUID** type. +5. The OS volume is selected again, and detail displays that it has been converted to the [GPT partition type](https://msdn.microsoft.com/library/windows/desktop/aa365449.aspx) of **ebd0a0a2-b9e5-4433-87c0-68b6b72699c7** corresponding to the **PARTITION_BASIC_DATA_GUID** type. >As noted in the output from the MBR2GPT tool, you must make changes to the computer firmware so that the new EFI system partition will boot properly. @@ -272,7 +272,7 @@ For more information about partition types, see: ### Persisting drive letter assignments -The conversion tool will attempt to remap all drive letter assignment information contained in the registry that correspond to the volumes of the converted disk. If a drive letter assignment cannot be restored, an error will be displayed at the console and in the log, so that you can manually perform the correct assignment of the drive letter. **Important**: this code runs after the layout conversion has taken place, so the operation cannot be undone at this stage. +The conversion tool will attempt to remap all drive letter assignment information contained in the registry that correspond to the volumes of the converted disk. If a drive letter assignment cannot be restored, an error will be displayed at the console and in the log, so that you can manually perform the correct assignment of the drive letter. **Important**: this code runs after the layout conversion has taken place, so the operation cannot be undone at this stage. The conversion tool will obtain volume unique ID data before and after the layout conversion, organizing this information into a lookup table. It will then iterate through all the entries in **HKLM\SYSTEM\MountedDevices**, and for each entry do the following: @@ -299,7 +299,7 @@ The default location for all these log files in Windows PE is **%windir%**. ### Interactive help -To view a list of options available when using the tool, type **mbr2gpt /?** +To view a list of options available when using the tool, type **mbr2gpt /?** The following text is displayed: @@ -376,7 +376,7 @@ Number Friendly Name Serial Number HealthStatus OperationalStatus To You can also view the partition type of a disk by opening the Disk Management tool, right-clicking the disk number, clicking **Properties**, and then clicking the **Volumes** tab. See the following example: -![Volumes](images/mbr2gpt-volume.PNG) +![Volumes](images/mbr2gpt-volume.png) If Windows PowerShell and Disk Management are not available, such as when you are using Windows PE, you can determine the partition type at a command prompt with the DiskPart tool. To determine the partition style from a command line, type **diskpart** and then type **list disk**. See the following example: @@ -400,7 +400,7 @@ DISKPART> list disk In this example, Disk 0 is formatted with the MBR partition style, and Disk 1 is formatted using GPT. -## Known issue +## Known issue ### MBR2GPT.exe cannot run in Windows PE @@ -425,10 +425,10 @@ To fix this issue, mount the Windows PE image (WIM), copy the missing file from 2. Copy the ReAgent files and the ReAgent localization files from the Window 10, version 1903 ADK source folder to the mounted WIM. For example, if the ADK is installed to the default location of C:\Program Files (x86)\Windows Kits\10 and the Windows PE image is mounted to C:\WinPE_Mount, run the following commands from an elevated Command Prompt window: - + > [!NOTE] > You can access the ReAgent files if you have installed the User State Migration Tool (USMT) as a feature while installing Windows Assessment and Deployment Kit. - + **Command 1:** ```cmd copy "C:\Program Files (x86)\Windows Kits\10\Assessment and Deployment Kit\Windows Setup\amd64\Sources\ReAgent*.*" "C:\WinPE_Mount\Windows\System32" @@ -438,20 +438,20 @@ To fix this issue, mount the Windows PE image (WIM), copy the missing file from * ReAgent.admx * ReAgent.dll * ReAgent.xml - + **Command 2:** ```cmd copy "C:\Program Files (x86)\Windows Kits\10\Assessment and Deployment Kit\Windows Setup\amd64\Sources\En-Us\ReAgent*.*" "C:\WinPE_Mount\Windows\System32\En-Us" - ``` + ``` This command copies two files: * ReAgent.adml * ReAgent.dll.mui > [!NOTE] > If you aren't using an English version of Windows, replace "En-Us" in the path with the appropriate string that represents the system language. - + 3. After you copy all the files, commit the changes and unmount the Windows PE WIM. MBR2GPT.exe now functions as expected in Windows PE. For information about how to unmount WIM files while committing changes, see [Unmounting an image](https://docs.microsoft.com/windows-hardware/manufacture/desktop/mount-and-modify-a-windows-image-using-dism#unmounting-an-image). - + ## Related topics diff --git a/windows/security/information-protection/bitlocker/bitlocker-recovery-guide-plan.md b/windows/security/information-protection/bitlocker/bitlocker-recovery-guide-plan.md index 4f3681db63..eaccfb9c9f 100644 --- a/windows/security/information-protection/bitlocker/bitlocker-recovery-guide-plan.md +++ b/windows/security/information-protection/bitlocker/bitlocker-recovery-guide-plan.md @@ -2,7 +2,7 @@ title: BitLocker recovery guide (Windows 10) description: This article for IT professionals describes how to recover BitLocker keys from AD DS. ms.assetid: d0f722e9-1773-40bf-8456-63ee7a95ea14 -ms.reviewer: +ms.reviewer: ms.prod: w10 ms.mktglfcycl: explore ms.sitesec: library @@ -339,7 +339,7 @@ There are rules governing which hint is shown during the recovery (in order of p **Result:** The hint for the Microsoft Account and the custom URL are displayed. -![Example 1 of Customized BitLocker recovery screen](./images/rp-example1.PNG) +![Example 1 of Customized BitLocker recovery screen](./images/rp-example1.png) #### Example 2 (single recovery key with single backup) @@ -354,7 +354,7 @@ There are rules governing which hint is shown during the recovery (in order of p **Result:** Only the custom URL is displayed. -![Example 2 of customized BitLocker recovery screen](./images/rp-example2.PNG) +![Example 2 of customized BitLocker recovery screen](./images/rp-example2.png) #### Example 3 (single recovery key with multiple backups) @@ -369,7 +369,7 @@ There are rules governing which hint is shown during the recovery (in order of p **Result:** Only the Microsoft Account hint is displayed. -![Example 3 of customized BitLocker recovery screen](./images/rp-example3.PNG) +![Example 3 of customized BitLocker recovery screen](./images/rp-example3.png) #### Example 4 (multiple recovery passwords) @@ -399,7 +399,7 @@ There are rules governing which hint is shown during the recovery (in order of p **Result:** Only the hint for a successfully backed up key is displayed, even if it isn't the most recent key. -![Example 4 of customized BitLocker recovery screen](./images/rp-example4.PNG) +![Example 4 of customized BitLocker recovery screen](./images/rp-example4.png) #### Example 5 (multiple recovery passwords) @@ -429,7 +429,7 @@ There are rules governing which hint is shown during the recovery (in order of p **Result:** The hint for the most recent key is displayed. -![Example 5 of customized BitLocker recovery screen](./images/rp-example5.PNG) +![Example 5 of customized BitLocker recovery screen](./images/rp-example5.png) ## Using additional recovery information @@ -484,7 +484,7 @@ You can reset the recovery password in two ways: > [!WARNING] > You must include the braces in the ID string. - + **To run the sample recovery password script:** 1. Save the following sample script in a VBScript file. For example: ResetPassword.vbs. diff --git a/windows/security/information-protection/bitlocker/images/rp-example1.PNG b/windows/security/information-protection/bitlocker/images/rp-example1.png similarity index 100% rename from windows/security/information-protection/bitlocker/images/rp-example1.PNG rename to windows/security/information-protection/bitlocker/images/rp-example1.png diff --git a/windows/security/information-protection/bitlocker/images/rp-example2.PNG b/windows/security/information-protection/bitlocker/images/rp-example2.png similarity index 100% rename from windows/security/information-protection/bitlocker/images/rp-example2.PNG rename to windows/security/information-protection/bitlocker/images/rp-example2.png diff --git a/windows/security/information-protection/bitlocker/images/rp-example3.PNG b/windows/security/information-protection/bitlocker/images/rp-example3.png similarity index 100% rename from windows/security/information-protection/bitlocker/images/rp-example3.PNG rename to windows/security/information-protection/bitlocker/images/rp-example3.png diff --git a/windows/security/information-protection/bitlocker/images/rp-example4.PNG b/windows/security/information-protection/bitlocker/images/rp-example4.png similarity index 100% rename from windows/security/information-protection/bitlocker/images/rp-example4.PNG rename to windows/security/information-protection/bitlocker/images/rp-example4.png diff --git a/windows/security/information-protection/bitlocker/images/rp-example5.PNG b/windows/security/information-protection/bitlocker/images/rp-example5.png similarity index 100% rename from windows/security/information-protection/bitlocker/images/rp-example5.PNG rename to windows/security/information-protection/bitlocker/images/rp-example5.png From e453d38f46297766d53bdbc6418d7dde2dd24bfd Mon Sep 17 00:00:00 2001 From: ManikaDhiman Date: Wed, 16 Dec 2020 13:53:19 -0800 Subject: [PATCH 108/486] Added MSI policies --- windows/client-management/mdm/TOC.md | 1 + .../mdm/policies-in-policy-csp-admx-backed.md | 24 + .../policy-configuration-service-provider.md | 77 + .../mdm/policy-csp-admx-msi.md | 1835 +++++++++++++++++ 4 files changed, 1937 insertions(+) create mode 100644 windows/client-management/mdm/policy-csp-admx-msi.md diff --git a/windows/client-management/mdm/TOC.md b/windows/client-management/mdm/TOC.md index a37aa5159e..423a233fbb 100644 --- a/windows/client-management/mdm/TOC.md +++ b/windows/client-management/mdm/TOC.md @@ -220,6 +220,7 @@ #### [ADMX_MSAPolicy](policy-csp-admx-msapolicy.md) #### [ADMX_msched](policy-csp-admx-msched.md) #### [ADMX_MSDT](policy-csp-admx-msdt.md) +#### [ADMX_MSI](policy-csp-admx-msi.md) #### [ADMX_nca](policy-csp-admx-nca.md) #### [ADMX_NCSI](policy-csp-admx-ncsi.md) #### [ADMX_Netlogon](policy-csp-admx-netlogon.md) diff --git a/windows/client-management/mdm/policies-in-policy-csp-admx-backed.md b/windows/client-management/mdm/policies-in-policy-csp-admx-backed.md index 26da44ce91..5cbf915a49 100644 --- a/windows/client-management/mdm/policies-in-policy-csp-admx-backed.md +++ b/windows/client-management/mdm/policies-in-policy-csp-admx-backed.md @@ -545,6 +545,30 @@ ms.date: 10/08/2020 - [ADMX_MSDT/MsdtSupportProvider](./policy-csp-admx-msdt.md#admx-msdt-msdtsupportprovider) - [ADMX_MSDT/MsdtToolDownloadPolicy](./policy-csp-admx-msdt.md#admx-msdt-msdttooldownloadpolicy) - [ADMX_MSDT/WdiScenarioExecutionPolicy](./policy-csp-admx-msdt.md#admx-msdt-wdiscenarioexecutionpolicy) +- [ADMX_MSI/AllowLockdownBrowse](./policy-csp-admx-msi.md#admx-msi-allowlockdownbrowse) +- [ADMX_MSI/AllowLockdownMedia](./policy-csp-admx-msi.md#admx-msi-allowlockdownmedia) +- [ADMX_MSI/AllowLockdownPatch](./policy-csp-admx-msi.md#admx-msi-allowlockdownpatch) +- [ADMX_MSI/DisableAutomaticApplicationShutdown](./policy-csp-admx-msi.md#admx-msi-disableautomaticapplicationshutdown) +- [ADMX_MSI/DisableBrowse](./policy-csp-admx-msi.md#admx-msi-disablebrowse) +- [ADMX_MSI/DisableFlyweightPatching](./policy-csp-admx-msi.md#admx-msi-disableflyweightpatching) +- [ADMX_MSI/DisableLoggingFromPackage](./policy-csp-admx-msi.md#admx-msi-disableloggingfrompackage) +- [ADMX_MSI/DisableMSI](./policy-csp-admx-msi.md#admx-msi-disablemsi) +- [ADMX_MSI/DisableMedia](./policy-csp-admx-msi.md#admx-msi-disablemedia) +- [ADMX_MSI/DisablePatch](./policy-csp-admx-msi.md#admx-msi-disablepatch) +- [ADMX_MSI/DisableRollback_1](./policy-csp-admx-msi.md#admx-msi-disablerollback-1) +- [ADMX_MSI/DisableRollback_2](./policy-csp-admx-msi.md#admx-msi-disablerollback-2) +- [ADMX_MSI/DisableSharedComponent](./policy-csp-admx-msi.md#admx-msi-disablesharedcomponent) +- [ADMX_MSI/MSILogging](./policy-csp-admx-msi.md#admx-msi-msilogging) +- [ADMX_MSI/MSI_DisableLUAPatching](./policy-csp-admx-msi.md#admx-msi-msi-disableluapatching) +- [ADMX_MSI/MSI_DisablePatchUninstall](./policy-csp-admx-msi.md#admx-msi-msi-disablepatchuninstall) +- [ADMX_MSI/MSI_DisableSRCheckPoints](./policy-csp-admx-msi.md#admx-msi-msi-disablesrcheckpoints) +- [ADMX_MSI/MSI_DisableUserInstalls](./policy-csp-admx-msi.md#admx-msi-msi-disableuserinstalls) +- [ADMX_MSI/MSI_EnforceUpgradeComponentRules](./policy-csp-admx-msi.md#admx-msi-msi-enforceupgradecomponentrules) +- [ADMX_MSI/MSI_MaxPatchCacheSize](./policy-csp-admx-msi.md#admx-msi-msi-maxpatchcachesize) +- [ADMX_MSI/MsiDisableEmbeddedUI](./policy-csp-admx-msi.md#admx-msi-msidisableembeddedui) +- [ADMX_MSI/SafeForScripting](./policy-csp-admx-msi.md#admx-msi-safeforscripting) +- [ADMX_MSI/SearchOrder](./policy-csp-admx-msi.md#admx-msi-searchorder) +- [ADMX_MSI/TransformsSecure](./policy-csp-admx-msi.md#admx-msi-transformssecure) - [ADMX_nca/CorporateResources](./policy-csp-admx-nca.md#admx-nca-corporateresources) - [ADMX_nca/CustomCommands](./policy-csp-admx-nca.md#admx-nca-customcommands) - [ADMX_nca/DTEs](./policy-csp-admx-nca.md#admx-nca-dtes) diff --git a/windows/client-management/mdm/policy-configuration-service-provider.md b/windows/client-management/mdm/policy-configuration-service-provider.md index 205815ffba..50e56bd34b 100644 --- a/windows/client-management/mdm/policy-configuration-service-provider.md +++ b/windows/client-management/mdm/policy-configuration-service-provider.md @@ -1965,6 +1965,83 @@ The following diagram shows the Policy configuration service provider in tree fo

    +### ADMX_MSI policies + +
    +
    + ADMX_MSI/AllowLockdownBrowse +
    +
    + ADMX_MSI/AllowLockdownMedia +
    +
    + ADMX_MSI/AllowLockdownPatch +
    +
    + ADMX_MSI/DisableAutomaticApplicationShutdown +
    +
    + ADMX_MSI/DisableBrowse +
    +
    + ADMX_MSI/DisableFlyweightPatching +
    +
    + ADMX_MSI/DisableLoggingFromPackage +
    +
    + ADMX_MSI/DisableMSI +
    +
    + ADMX_MSI/DisableMedia +
    +
    + ADMX_MSI/DisablePatch +
    +
    + ADMX_MSI/DisableRollback_1 +
    +
    + ADMX_MSI/DisableRollback_2 +
    +
    + ADMX_MSI/DisableSharedComponent +
    +
    + ADMX_MSI/MSILogging +
    +
    + ADMX_MSI/MSI_DisableLUAPatching +
    +
    + ADMX_MSI/MSI_DisablePatchUninstall +
    +
    + ADMX_MSI/MSI_DisableSRCheckPoints +
    +
    + ADMX_MSI/MSI_DisableUserInstalls +
    +
    + ADMX_MSI/MSI_EnforceUpgradeComponentRules +
    +
    + ADMX_MSI/MSI_MaxPatchCacheSize +
    +
    + ADMX_MSI/MsiDisableEmbeddedUI +
    +
    + ADMX_MSI/SafeForScripting +
    +
    + ADMX_MSI/SearchOrder +
    +
    + ADMX_MSI/TransformsSecure +
    +
    + ### ADMX_nca policies
    diff --git a/windows/client-management/mdm/policy-csp-admx-msi.md b/windows/client-management/mdm/policy-csp-admx-msi.md new file mode 100644 index 0000000000..0336f0e890 --- /dev/null +++ b/windows/client-management/mdm/policy-csp-admx-msi.md @@ -0,0 +1,1835 @@ +--- +title: Policy CSP - ADMX_MSI +description: Policy CSP - ADMX_MSI +ms.author: dansimp +ms.localizationpriority: medium +ms.topic: article +ms.prod: w10 +ms.technology: windows +author: manikadhiman +ms.date: 12/16/2020 +ms.reviewer: +manager: dansimp +--- + +# Policy CSP - ADMX_MSI +> [!WARNING] +> Some information relates to prereleased products, which may be substantially modified before it's commercially released. Microsoft makes no warranties, expressed or implied, concerning the information provided here. + +
    + + +## ADMX_MSI policies + +
    +
    + ADMX_MSI/AllowLockdownBrowse +
    +
    + ADMX_MSI/AllowLockdownMedia +
    +
    + ADMX_MSI/AllowLockdownPatch +
    +
    + ADMX_MSI/DisableAutomaticApplicationShutdown +
    +
    + ADMX_MSI/DisableBrowse +
    +
    + ADMX_MSI/DisableFlyweightPatching +
    +
    + ADMX_MSI/DisableLoggingFromPackage +
    +
    + ADMX_MSI/DisableMSI +
    +
    + ADMX_MSI/DisableMedia +
    +
    + ADMX_MSI/DisablePatch +
    +
    + ADMX_MSI/DisableRollback_1 +
    +
    + ADMX_MSI/DisableRollback_2 +
    +
    + ADMX_MSI/DisableSharedComponent +
    +
    + ADMX_MSI/MSILogging +
    +
    + ADMX_MSI/MSI_DisableLUAPatching +
    +
    + ADMX_MSI/MSI_DisablePatchUninstall +
    +
    + ADMX_MSI/MSI_DisableSRCheckPoints +
    +
    + ADMX_MSI/MSI_DisableUserInstalls +
    +
    + ADMX_MSI/MSI_EnforceUpgradeComponentRules +
    +
    + ADMX_MSI/MSI_MaxPatchCacheSize +
    +
    + ADMX_MSI/MsiDisableEmbeddedUI +
    +
    + ADMX_MSI/SafeForScripting +
    +
    + ADMX_MSI/SearchOrder +
    +
    + ADMX_MSI/TransformsSecure +
    +
    + +
    + + +**ADMX_MSI/AllowLockdownBrowse** + + + + + + + + + + + + + + + + + + + + + + + + + + + +
    Windows EditionSupported?
    Homecross mark
    Procross mark
    Businesscross mark
    Enterprisecheck mark
    Educationcross mark
    + + +
    + + +[Scope](./policy-configuration-service-provider.md#policy-scope): + +> [!div class = "checklist"] +> * Device + +
    + + + +Available in the latest Windows 10 Insider Preview Build. This policy setting allows users to search for installation files during privileged installations. + +If you enable this policy setting, the Browse button in the "Use feature from" dialog box is enabled. As a result, users can search for installation files even when the installation program is running with elevated system privileges. + +Because the installation is running with elevated system privileges, users can browse through directories that their own permissions would not allow. + +This policy setting does not affect installations that run in the user's security context. Also, see the "Remove browse dialog box for new source" policy setting. + +If you disable or do not configure this policy setting, by default, only system administrators can browse during installations with elevated privileges, such as installations offered on the desktop or displayed in Add or Remove Programs. + + +> [!TIP] +> This is an ADMX-backed policy and requires a special SyncML format to enable or disable. For details, see [Understanding ADMX-backed policies](./understanding-admx-backed-policies.md). +> +> You must specify the data type in the SyncML as <Format>chr</Format>. For an example SyncML, refer to [Enabling a policy](./understanding-admx-backed-policies.md#enabling-a-policy). +> +> The payload of the SyncML must be XML-encoded; for this XML encoding, there are a variety of online encoders that you can use. To avoid encoding the payload, you can use CDATA if your MDM supports it. For more information, see [CDATA Sections](http://www.w3.org/TR/REC-xml/#sec-cdata-sect). + + +ADMX Info: +- GP English name: *Allow users to browse for source while elevated* +- GP name: *AllowLockdownBrowse* +- GP path: *Windows Components\Windows Installer* +- GP ADMX file name: *MSI.admx* + + + +
    + + +**ADMX_MSI/AllowLockdownMedia** + + + + + + + + + + + + + + + + + + + + + + + + + + + +
    Windows EditionSupported?
    Homecross mark
    Procross mark
    Businesscross mark
    Enterprisecheck mark
    Educationcross mark
    + + +
    + + +[Scope](./policy-configuration-service-provider.md#policy-scope): + +> [!div class = "checklist"] +> * Device + +
    + + + +Available in the latest Windows 10 Insider Preview Build. This policy setting allows users to install programs from removable media during privileged installations. + +If you enable this policy setting, all users are permitted to install programs from removable media, such as floppy disks and CD-ROMs, even when the installation program is running with elevated system privileges. + +This policy setting does not affect installations that run in the user's security context. By default, users can install from removable media when the installation runs in their own security context. + +If you disable or do not configure this policy setting, by default, users can install programs from removable media only when the installation runs in the user's security context. During privileged installations, such as those offered on the desktop or displayed in Add or Remove Programs, only system administrators can install from removable media. + +Also, see the "Prevent removable media source for any install" policy setting. + + +> [!TIP] +> This is an ADMX-backed policy and requires a special SyncML format to enable or disable. For details, see [Understanding ADMX-backed policies](./understanding-admx-backed-policies.md). +> +> You must specify the data type in the SyncML as <Format>chr</Format>. For an example SyncML, refer to [Enabling a policy](./understanding-admx-backed-policies.md#enabling-a-policy). +> +> The payload of the SyncML must be XML-encoded; for this XML encoding, there are a variety of online encoders that you can use. To avoid encoding the payload, you can use CDATA if your MDM supports it. For more information, see [CDATA Sections](http://www.w3.org/TR/REC-xml/#sec-cdata-sect). + + +ADMX Info: +- GP English name: *Allow users to use media source while elevated* +- GP name: *AllowLockdownMedia* +- GP path: *Windows Components\Windows Installer* +- GP ADMX file name: *MSI.admx* + + + +
    + + +**ADMX_MSI/AllowLockdownPatch** + + + + + + + + + + + + + + + + + + + + + + + + + + + +
    Windows EditionSupported?
    Homecross mark
    Procross mark
    Businesscross mark
    Enterprisecheck mark
    Educationcross mark
    + + +
    + + +[Scope](./policy-configuration-service-provider.md#policy-scope): + +> [!div class = "checklist"] +> * Device + +
    + + + +Available in the latest Windows 10 Insider Preview Build. This policy setting allows users to patch elevated products. + +If you enable this policy setting, all users are permitted to install patches, even when the installation program is running with elevated system privileges. Patches are updates or upgrades that replace only those program files that have changed. Because patches can easily be vehicles for malicious programs, some installations prohibit their use. + +If you disable or do not configure this policy setting, by default, only system administrators can apply patches during installations with elevated privileges, such as installations offered on the desktop or displayed in Add or Remove Programs. + +This policy setting does not affect installations that run in the user's security context. By default, users can install patches to programs that run in their own security context. Also, see the "Prohibit patching" policy setting. + +> [!TIP] +> This is an ADMX-backed policy and requires a special SyncML format to enable or disable. For details, see [Understanding ADMX-backed policies](./understanding-admx-backed-policies.md). +> +> You must specify the data type in the SyncML as <Format>chr</Format>. For an example SyncML, refer to [Enabling a policy](./understanding-admx-backed-policies.md#enabling-a-policy). +> +> The payload of the SyncML must be XML-encoded; for this XML encoding, there are a variety of online encoders that you can use. To avoid encoding the payload, you can use CDATA if your MDM supports it. For more information, see [CDATA Sections](http://www.w3.org/TR/REC-xml/#sec-cdata-sect). + + +ADMX Info: +- GP English name: *Allow users to patch elevated products* +- GP name: *AllowLockdownPatch* +- GP path: *Windows Components\Windows Installer* +- GP ADMX file name: *MSI.admx* + + + +
    + + +**ADMX_MSI/DisableAutomaticApplicationShutdown** + + + + + + + + + + + + + + + + + + + + + + + + + + + +
    Windows EditionSupported?
    Homecross mark
    Procross mark
    Businesscross mark
    Enterprisecheck mark
    Educationcross mark
    + + +
    + + +[Scope](./policy-configuration-service-provider.md#policy-scope): + +> [!div class = "checklist"] +> * Device + +
    + + + +Available in the latest Windows 10 Insider Preview Build. This policy setting controls Windows Installer's interaction with the Restart Manager. The Restart Manager API can eliminate or reduce the number of system restarts that are required to complete an installation or update. + +If you enable this policy setting, you can use the options in the Prohibit Use of Restart Manager box to control file in use detection behavior. + +- The "Restart Manager On" option instructs Windows Installer to use Restart Manager to detect files in use and mitigate a system restart, when possible. + +- The "Restart Manager Off" option turns off Restart Manager for file in use detection and the legacy file in use behavior is used. + +- The "Restart Manager Off for Legacy App Setup" option applies to packages that were created for Windows Installer versions lesser than 4.0. This option lets those packages display the legacy files in use UI while still using Restart Manager for detection. + +If you disable or do not configure this policy setting, Windows Installer will use Restart Manager to detect files in use and mitigate a system restart, when possible. + + +> [!TIP] +> This is an ADMX-backed policy and requires a special SyncML format to enable or disable. For details, see [Understanding ADMX-backed policies](./understanding-admx-backed-policies.md). +> +> You must specify the data type in the SyncML as <Format>chr</Format>. For an example SyncML, refer to [Enabling a policy](./understanding-admx-backed-policies.md#enabling-a-policy). +> +> The payload of the SyncML must be XML-encoded; for this XML encoding, there are a variety of online encoders that you can use. To avoid encoding the payload, you can use CDATA if your MDM supports it. For more information, see [CDATA Sections](http://www.w3.org/TR/REC-xml/#sec-cdata-sect). + + +ADMX Info: +- GP English name: *Prohibit use of Restart Manager* +- GP name: *DisableAutomaticApplicationShutdown* +- GP path: *Windows Components\Windows Installer* +- GP ADMX file name: *MSI.admx* + + + +
    + + +**ADMX_MSI/DisableBrowse** + + + + + + + + + + + + + + + + + + + + + + + + + + + +
    Windows EditionSupported?
    Homecross mark
    Procross mark
    Businesscross mark
    Enterprisecheck mark
    Educationcross mark
    + + +
    + + +[Scope](./policy-configuration-service-provider.md#policy-scope): + +> [!div class = "checklist"] +> * Device + +
    + + + +Available in the latest Windows 10 Insider Preview Build. This policy setting prevents users from searching for installation files when they add features or components to an installed program. + +If you enable this policy setting, the Browse button beside the "Use feature from" list in the Windows Installer dialog box is disabled. As a result, users must select an installation file source from the "Use features from" list that the system administrator configures. + +This policy setting applies even when the installation is running in the user's security context. + +If you disable or do not configure this policy setting, the Browse button is enabled when an installation is running in the user's security context. But only system administrators can browse when an installation is running with elevated system privileges, such as installations offered on the desktop or in Add or Remove Programs. + +This policy setting affects Windows Installer only. It does not prevent users from selecting other browsers, such as File Explorer or Network Locations, to search for installation files. + +Also, see the "Enable user to browse for source while elevated" policy setting. + + +> [!TIP] +> This is an ADMX-backed policy and requires a special SyncML format to enable or disable. For details, see [Understanding ADMX-backed policies](./understanding-admx-backed-policies.md). +> +> You must specify the data type in the SyncML as <Format>chr</Format>. For an example SyncML, refer to [Enabling a policy](./understanding-admx-backed-policies.md#enabling-a-policy). +> +> The payload of the SyncML must be XML-encoded; for this XML encoding, there are a variety of online encoders that you can use. To avoid encoding the payload, you can use CDATA if your MDM supports it. For more information, see [CDATA Sections](http://www.w3.org/TR/REC-xml/#sec-cdata-sect). + + +ADMX Info: +- GP English name: *Remove browse dialog box for new source* +- GP name: *DisableBrowse* +- GP path: *Windows Components\Windows Installer* +- GP ADMX file name: *MSI.admx* + + + +
    + + +**ADMX_MSI/DisableFlyweightPatching** + + + + + + + + + + + + + + + + + + + + + + + + + + + +
    Windows EditionSupported?
    Homecross mark
    Procross mark
    Businesscross mark
    Enterprisecheck mark
    Educationcross mark
    + + +
    + + +[Scope](./policy-configuration-service-provider.md#policy-scope): + +> [!div class = "checklist"] +> * Device + +
    + + + +Available in the latest Windows 10 Insider Preview Build. This policy setting controls the ability to turn off all patch optimizations. + +If you enable this policy setting, all Patch Optimization options are turned off during the installation. + +If you disable or do not configure this policy setting, it enables faster application of patches by removing execution of unnecessary actions. The flyweight patching mode is primarily designed for patches that just update a few files or registry values. The Installer will analyze the patch for specific changes to determine if optimization is possible. If so, the patch will be applied using a minimal set of processing. + + +> [!TIP] +> This is an ADMX-backed policy and requires a special SyncML format to enable or disable. For details, see [Understanding ADMX-backed policies](./understanding-admx-backed-policies.md). +> +> You must specify the data type in the SyncML as <Format>chr</Format>. For an example SyncML, refer to [Enabling a policy](./understanding-admx-backed-policies.md#enabling-a-policy). +> +> The payload of the SyncML must be XML-encoded; for this XML encoding, there are a variety of online encoders that you can use. To avoid encoding the payload, you can use CDATA if your MDM supports it. For more information, see [CDATA Sections](http://www.w3.org/TR/REC-xml/#sec-cdata-sect). + + +ADMX Info: +- GP English name: *Prohibit flyweight patching* +- GP name: *DisableFlyweightPatching* +- GP path: *Windows Components\Windows Installer* +- GP ADMX file name: *MSI.admx* + + + +
    + + +**ADMX_MSI/DisableLoggingFromPackage** + + + + + + + + + + + + + + + + + + + + + + + + + + + +
    Windows EditionSupported?
    Homecross mark
    Procross mark
    Businesscross mark
    Enterprisecheck mark
    Educationcross mark
    + + +
    + + +[Scope](./policy-configuration-service-provider.md#policy-scope): + +> [!div class = "checklist"] +> * Device + +
    + + + +Available in the latest Windows 10 Insider Preview Build. This policy setting controls Windows Installer's processing of the MsiLogging property. The MsiLogging property in an installation package can be used to enable automatic logging of all install operations for the package. + +If you enable this policy setting, you can use the options in the Disable logging via package settings box to control automatic logging via package settings behavior. + +- The "Logging via package settings on" option instructs Windows Installer to automatically generate log files for packages that include the MsiLogging property. + +- The "Logging via package settings off" option turns off the automatic logging behavior when specified via the MsiLogging policy. Log files can still be generated using the logging command line switch or the Logging policy. + +If you disable or do not configure this policy setting, Windows Installer will automatically generate log files for those packages that include the MsiLogging property. + + +> [!TIP] +> This is an ADMX-backed policy and requires a special SyncML format to enable or disable. For details, see [Understanding ADMX-backed policies](./understanding-admx-backed-policies.md). +> +> You must specify the data type in the SyncML as <Format>chr</Format>. For an example SyncML, refer to [Enabling a policy](./understanding-admx-backed-policies.md#enabling-a-policy). +> +> The payload of the SyncML must be XML-encoded; for this XML encoding, there are a variety of online encoders that you can use. To avoid encoding the payload, you can use CDATA if your MDM supports it. For more information, see [CDATA Sections](http://www.w3.org/TR/REC-xml/#sec-cdata-sect). + + +ADMX Info: +- GP English name: *Turn off logging via package settings* +- GP name: *DisableLoggingFromPackage* +- GP path: *Windows Components\Windows Installer* +- GP ADMX file name: *MSI.admx* + + + +
    + + +**ADMX_MSI/DisableMSI** + + + + + + + + + + + + + + + + + + + + + + + + + + + +
    Windows EditionSupported?
    Homecross mark
    Procross mark
    Businesscross mark
    Enterprisecheck mark
    Educationcross mark
    + + +
    + + +[Scope](./policy-configuration-service-provider.md#policy-scope): + +> [!div class = "checklist"] +> * Device + +
    + + + +Available in the latest Windows 10 Insider Preview Build. This policy setting restricts the use of Windows Installer. + +If you enable this policy setting, you can prevent users from installing software on their systems or permit users to install only those programs offered by a system administrator. You can use the options in the Disable Windows Installer box to establish an installation setting. + +- The "Never" option indicates Windows Installer is fully enabled. Users can install and upgrade software. This is the default behavior for Windows Installer on Windows 2000 Professional, Windows XP Professional and Windows Vista when the policy is not configured. + +- The "For non-managed applications only" option permits users to install only those programs that a system administrator assigns (offers on the desktop) or publishes (adds them to Add or Remove Programs). This is the default behavior of Windows Installer on Windows Server 2003 family when the policy is not configured. + +- The "Always" option indicates that Windows Installer is disabled. + +This policy setting affects Windows Installer only. It does not prevent users from using other methods to install and upgrade programs. + + +> [!TIP] +> This is an ADMX-backed policy and requires a special SyncML format to enable or disable. For details, see [Understanding ADMX-backed policies](./understanding-admx-backed-policies.md). +> +> You must specify the data type in the SyncML as <Format>chr</Format>. For an example SyncML, refer to [Enabling a policy](./understanding-admx-backed-policies.md#enabling-a-policy). +> +> The payload of the SyncML must be XML-encoded; for this XML encoding, there are a variety of online encoders that you can use. To avoid encoding the payload, you can use CDATA if your MDM supports it. For more information, see [CDATA Sections](http://www.w3.org/TR/REC-xml/#sec-cdata-sect). + + +ADMX Info: +- GP English name: *Turn off Windows Installer* +- GP name: *DisableMSI* +- GP path: *Windows Components\Windows Installer* +- GP ADMX file name: *MSI.admx* + + + +
    + + +**ADMX_MSI/DisableMedia** + + + + + + + + + + + + + + + + + + + + + + + + + + + +
    Windows EditionSupported?
    Homecross mark
    Procross mark
    Businesscross mark
    Enterprisecheck mark
    Educationcross mark
    + + +
    + + +[Scope](./policy-configuration-service-provider.md#policy-scope): + +> [!div class = "checklist"] +> * User + +
    + + + +Available in the latest Windows 10 Insider Preview Build. This policy setting prevents users from installing any programs from removable media. + +If you enable this policy setting, if a user tries to install a program from removable media, such as CD-ROMs, floppy disks, and DVDs, a message appears stating that the feature cannot be found. + +This policy setting applies even when the installation is running in the user's security context. + +If you disable or do not configure this policy setting, users can install from removable media when the installation is running in their own security context, but only system administrators can use removable media when an installation is running with elevated system privileges, such as installations offered on the desktop or in Add or Remove Programs. + +Also, see the "Enable user to use media source while elevated" and "Hide the 'Add a program from CD-ROM or floppy disk' option" policy settings. + + +> [!TIP] +> This is an ADMX-backed policy and requires a special SyncML format to enable or disable. For details, see [Understanding ADMX-backed policies](./understanding-admx-backed-policies.md). +> +> You must specify the data type in the SyncML as <Format>chr</Format>. For an example SyncML, refer to [Enabling a policy](./understanding-admx-backed-policies.md#enabling-a-policy). +> +> The payload of the SyncML must be XML-encoded; for this XML encoding, there are a variety of online encoders that you can use. To avoid encoding the payload, you can use CDATA if your MDM supports it. For more information, see [CDATA Sections](http://www.w3.org/TR/REC-xml/#sec-cdata-sect). + + +ADMX Info: +- GP English name: *Prevent removable media source for any installation* +- GP name: *DisableMedia* +- GP path: *Windows Components\Windows Installer* +- GP ADMX file name: *MSI.admx* + + + +
    + + +**ADMX_MSI/DisablePatch** + + + + + + + + + + + + + + + + + + + + + + + + + + + +
    Windows EditionSupported?
    Homecross mark
    Procross mark
    Businesscross mark
    Enterprisecheck mark
    Educationcross mark
    + + +
    + + +[Scope](./policy-configuration-service-provider.md#policy-scope): + +> [!div class = "checklist"] +> * Device + +
    + + + +Available in the latest Windows 10 Insider Preview Build. This policy setting prevents users from using Windows Installer to install patches. + +If you enable this policy setting, users are prevented from using Windows Installer to install patches. Patches are updates or upgrades that replace only those program files that have changed. Because patches can be easy vehicles for malicious programs, some installations prohibit their use. + +> [!NOTE] +> This policy setting applies only to installations that run in the user's security context. + +If you disable or do not configure this policy setting, by default, users who are not system administrators cannot apply patches to installations that run with elevated system privileges, such as those offered on the desktop or in Add or Remove Programs. + +Also, see the "Enable user to patch elevated products" policy setting. + + +> [!TIP] +> This is an ADMX-backed policy and requires a special SyncML format to enable or disable. For details, see [Understanding ADMX-backed policies](./understanding-admx-backed-policies.md). +> +> You must specify the data type in the SyncML as <Format>chr</Format>. For an example SyncML, refer to [Enabling a policy](./understanding-admx-backed-policies.md#enabling-a-policy). +> +> The payload of the SyncML must be XML-encoded; for this XML encoding, there are a variety of online encoders that you can use. To avoid encoding the payload, you can use CDATA if your MDM supports it. For more information, see [CDATA Sections](http://www.w3.org/TR/REC-xml/#sec-cdata-sect). + + +ADMX Info: +- GP English name: *Prevent users from using Windows Installer to install updates and upgrades* +- GP name: *DisablePatch* +- GP path: *Windows Components\Windows Installer* +- GP ADMX file name: *MSI.admx* + + + +
    + + +**ADMX_MSI/DisableRollback_1** + + + + + + + + + + + + + + + + + + + + + + + + + + + +
    Windows EditionSupported?
    Homecross mark
    Procross mark
    Businesscross mark
    Enterprisecheck mark
    Educationcross mark
    + + +
    + + +[Scope](./policy-configuration-service-provider.md#policy-scope): + +> [!div class = "checklist"] +> * User + +
    + + + +Available in the latest Windows 10 Insider Preview Build. This policy setting prohibits Windows Installer from generating and saving the files it needs to reverse an interrupted or unsuccessful installation. + +If you enable this policy setting, Windows Installer is prevented from recording the original state of the system and sequence of changes it makes during installation. It also prevents Windows Installer from retaining files it intends to delete later. As a result, Windows Installer cannot restore the computer to its original state if the installation does not complete. + +This policy setting is designed to reduce the amount of temporary disk space required to install programs. Also, it prevents malicious users from interrupting an installation to gather data about the internal state of the computer or to search secure system files. However, because an incomplete installation can render the system or a program inoperable, do not use this policy setting unless it is essential. + +This policy setting appears in the Computer Configuration and User Configuration folders. If the policy setting is enabled in either folder, it is considered be enabled, even if it is explicitly disabled in the other folder. + +> [!TIP] +> This is an ADMX-backed policy and requires a special SyncML format to enable or disable. For details, see [Understanding ADMX-backed policies](./understanding-admx-backed-policies.md). +> +> You must specify the data type in the SyncML as <Format>chr</Format>. For an example SyncML, refer to [Enabling a policy](./understanding-admx-backed-policies.md#enabling-a-policy). +> +> The payload of the SyncML must be XML-encoded; for this XML encoding, there are a variety of online encoders that you can use. To avoid encoding the payload, you can use CDATA if your MDM supports it. For more information, see [CDATA Sections](http://www.w3.org/TR/REC-xml/#sec-cdata-sect). + + +ADMX Info: +- GP English name: *Prohibit rollback* +- GP name: *DisableRollback_1* +- GP path: *Windows Components\Windows Installer* +- GP ADMX file name: *MSI.admx* + + + +
    + + +**ADMX_MSI/DisableRollback_2** + + + + + + + + + + + + + + + + + + + + + + + + + + + +
    Windows EditionSupported?
    Homecross mark
    Procross mark
    Businesscross mark
    Enterprisecheck mark
    Educationcross mark
    + + +
    + + +[Scope](./policy-configuration-service-provider.md#policy-scope): + +> [!div class = "checklist"] +> * Device + +
    + + + +Available in the latest Windows 10 Insider Preview Build. This policy setting prohibits Windows Installer from generating and saving the files it needs to reverse an interrupted or unsuccessful installation. + +If you enable this policy setting, Windows Installer is prevented from recording the original state of the system and sequence of changes it makes during installation. It also prevents Windows Installer from retaining files it intends to delete later. As a result, Windows Installer cannot restore the computer to its original state if the installation does not complete. + +This policy setting is designed to reduce the amount of temporary disk space required to install programs. Also, it prevents malicious users from interrupting an installation to gather data about the internal state of the computer or to search secure system files. However, because an incomplete installation can render the system or a program inoperable, do not use this policy setting unless it is essential. + +This policy setting appears in the Computer Configuration and User Configuration folders. If the policy setting is enabled in either folder, it is considered be enabled, even if it is explicitly disabled in the other folder. + + +> [!TIP] +> This is an ADMX-backed policy and requires a special SyncML format to enable or disable. For details, see [Understanding ADMX-backed policies](./understanding-admx-backed-policies.md). +> +> You must specify the data type in the SyncML as <Format>chr</Format>. For an example SyncML, refer to [Enabling a policy](./understanding-admx-backed-policies.md#enabling-a-policy). +> +> The payload of the SyncML must be XML-encoded; for this XML encoding, there are a variety of online encoders that you can use. To avoid encoding the payload, you can use CDATA if your MDM supports it. For more information, see [CDATA Sections](http://www.w3.org/TR/REC-xml/#sec-cdata-sect). + + +ADMX Info: +- GP English name: *Prohibit rollback* +- GP name: *DisableRollback_2* +- GP path: *Windows Components\Windows Installer* +- GP ADMX file name: *MSI.admx* + + + +
    + + +**ADMX_MSI/DisableSharedComponent** + + + + + + + + + + + + + + + + + + + + + + + + + + + +
    Windows EditionSupported?
    Homecross mark
    Procross mark
    Businesscross mark
    Enterprisecheck mark
    Educationcross mark
    + + +
    + + +[Scope](./policy-configuration-service-provider.md#policy-scope): + +> [!div class = "checklist"] +> * Device + +
    + + + +Available in the latest Windows 10 Insider Preview Build. This policy setting controls the ability to turn off shared components. + +If you enable this policy setting, no packages on the system get the shared component functionality enabled by the msidbComponentAttributesShared attribute in the Component Table. + +If you disable or do not configure this policy setting, by default, the shared component functionality is allowed. + + +> [!TIP] +> This is an ADMX-backed policy and requires a special SyncML format to enable or disable. For details, see [Understanding ADMX-backed policies](./understanding-admx-backed-policies.md). +> +> You must specify the data type in the SyncML as <Format>chr</Format>. For an example SyncML, refer to [Enabling a policy](./understanding-admx-backed-policies.md#enabling-a-policy). +> +> The payload of the SyncML must be XML-encoded; for this XML encoding, there are a variety of online encoders that you can use. To avoid encoding the payload, you can use CDATA if your MDM supports it. For more information, see [CDATA Sections](http://www.w3.org/TR/REC-xml/#sec-cdata-sect). + + +ADMX Info: +- GP English name: *Turn off shared components* +- GP name: *DisableSharedComponent* +- GP path: *Windows Components\Windows Installer* +- GP ADMX file name: *MSI.admx* + + + +
    + +**ADMX_MSI/MSILogging** + + + + + + + + + + + + + + + + + + + + + + + + + + + +
    Windows EditionSupported?
    Homecross mark
    Procross mark
    Businesscross mark
    Enterprisecheck mark
    Educationcross mark
    + + +
    + + +[Scope](./policy-configuration-service-provider.md#policy-scope): + +> [!div class = "checklist"] +> * Device + +
    + + + +Available in the latest Windows 10 Insider Preview Build. Specifies the types of events that Windows Installer records in its transaction log for each installation. The log, Msi.log, appears in the Temp directory of the system volume. + +When you enable this policy setting, you can specify the types of events you want Windows Installer to record. To indicate that an event type is recorded, type the letter representing the event type. You can type the letters in any order and list as many or as few event types as you want. + +To disable logging, delete all of the letters from the box. + +If you disable or do not configure this policy setting, Windows Installer logs the default event types, represented by the letters "iweap." + + +> [!TIP] +> This is an ADMX-backed policy and requires a special SyncML format to enable or disable. For details, see [Understanding ADMX-backed policies](./understanding-admx-backed-policies.md). +> +> You must specify the data type in the SyncML as <Format>chr</Format>. For an example SyncML, refer to [Enabling a policy](./understanding-admx-backed-policies.md#enabling-a-policy). +> +> The payload of the SyncML must be XML-encoded; for this XML encoding, there are a variety of online encoders that you can use. To avoid encoding the payload, you can use CDATA if your MDM supports it. For more information, see [CDATA Sections](http://www.w3.org/TR/REC-xml/#sec-cdata-sect). + + +ADMX Info: +- GP English name: *Specify the types of events Windows Installer records in its transaction log* +- GP name: *MSILogging* +- GP path: *Windows Components\Windows Installer* +- GP ADMX file name: *MSI.admx* + + + +
    + +**ADMX_MSI/MSI_DisableLUAPatching** + + + + + + + + + + + + + + + + + + + + + + + + + + + +
    Windows EditionSupported?
    Homecross mark
    Procross mark
    Businesscross mark
    Enterprisecheck mark
    Educationcross mark
    + + +
    + + +[Scope](./policy-configuration-service-provider.md#policy-scope): + +> [!div class = "checklist"] +> * Device + +
    + + + +Available in the latest Windows 10 Insider Preview Build. This policy setting controls the ability of non-administrators to install updates that have been digitally signed by the application vendor. + +Non-administrator updates provide a mechanism for the author of an application to create digitally signed updates that can be applied by non-privileged users. + +If you enable this policy setting, only administrators or users with administrative privileges can apply updates to Windows Installer based applications. + +If you disable or do not configure this policy setting, users without administrative privileges can install non-administrator updates. + + +> [!TIP] +> This is an ADMX-backed policy and requires a special SyncML format to enable or disable. For details, see [Understanding ADMX-backed policies](./understanding-admx-backed-policies.md). +> +> You must specify the data type in the SyncML as <Format>chr</Format>. For an example SyncML, refer to [Enabling a policy](./understanding-admx-backed-policies.md#enabling-a-policy). +> +> The payload of the SyncML must be XML-encoded; for this XML encoding, there are a variety of online encoders that you can use. To avoid encoding the payload, you can use CDATA if your MDM supports it. For more information, see [CDATA Sections](http://www.w3.org/TR/REC-xml/#sec-cdata-sect). + + +ADMX Info: +- GP English name: *Prohibit non-administrators from applying vendor signed updates* +- GP name: *MSI_DisableLUAPatching* +- GP path: *Windows Components\Windows Installer* +- GP ADMX file name: *MSI.admx* + + + +
    + +**ADMX_MSI/MSI_DisablePatchUninstall** + + + + + + + + + + + + + + + + + + + + + + + + + + + +
    Windows EditionSupported?
    Homecross mark
    Procross mark
    Businesscross mark
    Enterprisecheck mark
    Educationcross mark
    + + +
    + + +[Scope](./policy-configuration-service-provider.md#policy-scope): + +> [!div class = "checklist"] +> * Device + +
    + + + +Available in the latest Windows 10 Insider Preview Build. This policy setting controls the ability for users or administrators to remove Windows Installer based updates. + +This policy setting should be used if you need to maintain a tight control over updates. One example is a lockdown environment where you want to ensure that updates once installed cannot be removed by users or administrators. + +If you enable this policy setting, updates cannot be removed from the computer by a user or an administrator. The Windows Installer can still remove an update that is no longer applicable to the product. + +If you disable or do not configure this policy setting, a user can remove an update from the computer only if the user has been granted privileges to remove the update. This can depend on whether the user is an administrator, whether "Disable Windows Installer" and "Always install with elevated privileges" policy settings are set, and whether the update was installed in a per-user managed, per-user unmanaged, or per-machine context." + + +> [!TIP] +> This is an ADMX-backed policy and requires a special SyncML format to enable or disable. For details, see [Understanding ADMX-backed policies](./understanding-admx-backed-policies.md). +> +> You must specify the data type in the SyncML as <Format>chr</Format>. For an example SyncML, refer to [Enabling a policy](./understanding-admx-backed-policies.md#enabling-a-policy). +> +> The payload of the SyncML must be XML-encoded; for this XML encoding, there are a variety of online encoders that you can use. To avoid encoding the payload, you can use CDATA if your MDM supports it. For more information, see [CDATA Sections](http://www.w3.org/TR/REC-xml/#sec-cdata-sect). + + +ADMX Info: +- GP English name: *Prohibit removal of updates* +- GP name: *MSI_DisablePatchUninstall* +- GP path: *Windows Components\Windows Installer* +- GP ADMX file name: *MSI.admx* + + + +
    + +**ADMX_MSI/MSI_DisableSRCheckPoints** + + + + + + + + + + + + + + + + + + + + + + + + + + + +
    Windows EditionSupported?
    Homecross mark
    Procross mark
    Businesscross mark
    Enterprisecheck mark
    Educationcross mark
    + + +
    + + +[Scope](./policy-configuration-service-provider.md#policy-scope): + +> [!div class = "checklist"] +> * Device + +
    + + + +Available in the latest Windows 10 Insider Preview Build. This policy setting prevents Windows Installer from creating a System Restore checkpoint each time an application is installed. System Restore enables users, in the event of a problem, to restore their computers to a previous state without losing personal data files. + +If you enable this policy setting, the Windows Installer does not generate System Restore checkpoints when installing applications. + +If you disable or do not configure this policy setting, by default, the Windows Installer automatically creates a System Restore checkpoint each time an application is installed, so that users can restore their computer to the state it was in before installing the application. + + +> [!TIP] +> This is an ADMX-backed policy and requires a special SyncML format to enable or disable. For details, see [Understanding ADMX-backed policies](./understanding-admx-backed-policies.md). +> +> You must specify the data type in the SyncML as <Format>chr</Format>. For an example SyncML, refer to [Enabling a policy](./understanding-admx-backed-policies.md#enabling-a-policy). +> +> The payload of the SyncML must be XML-encoded; for this XML encoding, there are a variety of online encoders that you can use. To avoid encoding the payload, you can use CDATA if your MDM supports it. For more information, see [CDATA Sections](http://www.w3.org/TR/REC-xml/#sec-cdata-sect). + + +ADMX Info: +- GP English name: *Turn off creation of System Restore checkpoints* +- GP name: *MSI_DisableSRCheckPoints* +- GP path: *Windows Components\Windows Installer* +- GP ADMX file name: *MSI.admx* + + + +
    + +**ADMX_MSI/MSI_DisableUserInstalls** + + + + + + + + + + + + + + + + + + + + + + + + + + + +
    Windows EditionSupported?
    Homecross mark
    Procross mark
    Businesscross mark
    Enterprisecheck mark
    Educationcross mark
    + + +
    + + +[Scope](./policy-configuration-service-provider.md#policy-scope): + +> [!div class = "checklist"] +> * Device + +
    + + + +Available in the latest Windows 10 Insider Preview Build. This policy setting allows you to configure user installs. To configure this policy setting, set it to enabled and use the drop-down list to select the behavior you want. + +If you do not configure this policy setting, or if the policy setting is enabled and "Allow User Installs" is selected, the installer allows and makes use of products that are installed per user, and products that are installed per computer. If the installer finds a per-user install of an application, this hides a per-computer installation of that same product. + +If you enable this policy setting and "Hide User Installs" is selected, the installer ignores per-user applications. This causes a per-computer installed application to be visible to users, even if those users have a per-user install of the product registered in their user profile. + + +> [!TIP] +> This is an ADMX-backed policy and requires a special SyncML format to enable or disable. For details, see [Understanding ADMX-backed policies](./understanding-admx-backed-policies.md). +> +> You must specify the data type in the SyncML as <Format>chr</Format>. For an example SyncML, refer to [Enabling a policy](./understanding-admx-backed-policies.md#enabling-a-policy). +> +> The payload of the SyncML must be XML-encoded; for this XML encoding, there are a variety of online encoders that you can use. To avoid encoding the payload, you can use CDATA if your MDM supports it. For more information, see [CDATA Sections](http://www.w3.org/TR/REC-xml/#sec-cdata-sect). + + +ADMX Info: +- GP English name: *Prohibit User Installs* +- GP name: *MSI_DisableUserInstalls* +- GP path: *Windows Components\Windows Installer* +- GP ADMX file name: *MSI.admx* + + + +
    + +**ADMX_MSI/MSI_EnforceUpgradeComponentRules** + + + + + + + + + + + + + + + + + + + + + + + + + + + +
    Windows EditionSupported?
    Homecross mark
    Procross mark
    Businesscross mark
    Enterprisecheck mark
    Educationcross mark
    + + +
    + + +[Scope](./policy-configuration-service-provider.md#policy-scope): + +> [!div class = "checklist"] +> * Device + +
    + + + +Available in the latest Windows 10 Insider Preview Build. This policy setting causes the Windows Installer to enforce strict rules for component upgrades. + +If you enable this policy setting, strict upgrade rules will be enforced by the Windows Installer which may cause some upgrades to fail. Upgrades can fail if they attempt to do one of the following: + +(1) Remove a component from a feature. +This can also occur if you change the GUID of a component. The component identified by the original GUID appears to be removed and the component as identified by the new GUID appears as a new component. + +(2) Add a new feature to the top or middle of an existing feature tree. +The new feature must be added as a new leaf feature to an existing feature tree. + +If you disable or do not configure this policy setting, the Windows Installer will use less restrictive rules for component upgrades. + + +> [!TIP] +> This is an ADMX-backed policy and requires a special SyncML format to enable or disable. For details, see [Understanding ADMX-backed policies](./understanding-admx-backed-policies.md). +> +> You must specify the data type in the SyncML as <Format>chr</Format>. For an example SyncML, refer to [Enabling a policy](./understanding-admx-backed-policies.md#enabling-a-policy). +> +> The payload of the SyncML must be XML-encoded; for this XML encoding, there are a variety of online encoders that you can use. To avoid encoding the payload, you can use CDATA if your MDM supports it. For more information, see [CDATA Sections](http://www.w3.org/TR/REC-xml/#sec-cdata-sect). + + +ADMX Info: +- GP English name: *Enforce upgrade component rules* +- GP name: *MSI_EnforceUpgradeComponentRules* +- GP path: *Windows Components\Windows Installer* +- GP ADMX file name: *MSI.admx* + + + +
    + +**ADMX_MSI/MSI_MaxPatchCacheSize** + + + + + + + + + + + + + + + + + + + + + + + + + + + +
    Windows EditionSupported?
    Homecross mark
    Procross mark
    Businesscross mark
    Enterprisecheck mark
    Educationcross mark
    + + +
    + + +[Scope](./policy-configuration-service-provider.md#policy-scope): + +> [!div class = "checklist"] +> * Device + +
    + + + +Available in the latest Windows 10 Insider Preview Build. This policy controls the percentage of disk space available to the Windows Installer baseline file cache. + +The Windows Installer uses the baseline file cache to save baseline files modified by binary delta difference updates. The cache is used to retrieve the baseline file for future updates. The cache eliminates user prompts for source media when new updates are applied. + +If you enable this policy setting you can modify the maximum size of the Windows Installer baseline file cache. + +If you set the baseline cache size to 0, the Windows Installer will stop populating the baseline cache for new updates. The existing cached files will remain on disk and will be deleted when the product is removed. + +If you set the baseline cache to 100, the Windows Installer will use available free space for the baseline file cache. + +If you disable or do not configure this policy setting, the Windows Installer will uses a default value of 10 percent for the baseline file cache maximum size. + + +> [!TIP] +> This is an ADMX-backed policy and requires a special SyncML format to enable or disable. For details, see [Understanding ADMX-backed policies](./understanding-admx-backed-policies.md). +> +> You must specify the data type in the SyncML as <Format>chr</Format>. For an example SyncML, refer to [Enabling a policy](./understanding-admx-backed-policies.md#enabling-a-policy). +> +> The payload of the SyncML must be XML-encoded; for this XML encoding, there are a variety of online encoders that you can use. To avoid encoding the payload, you can use CDATA if your MDM supports it. For more information, see [CDATA Sections](http://www.w3.org/TR/REC-xml/#sec-cdata-sect). + + +ADMX Info: +- GP English name: *Control maximum size of baseline file cache* +- GP name: *MSI_MaxPatchCacheSize* +- GP path: *Windows Components\Windows Installer* +- GP ADMX file name: *MSI.admx* + + + +
    + +**ADMX_MSI/MsiDisableEmbeddedUI** + + + + + + + + + + + + + + + + + + + + + + + + + + + +
    Windows EditionSupported?
    Homecross mark
    Procross mark
    Businesscross mark
    Enterprisecheck mark
    Educationcross mark
    + + +
    + + +[Scope](./policy-configuration-service-provider.md#policy-scope): + +> [!div class = "checklist"] +> * Device + +
    + + + +Available in the latest Windows 10 Insider Preview Build. This policy setting controls the ability to prevent embedded UI. + +If you enable this policy setting, no packages on the system can run embedded UI. + +If you disable or do not configure this policy setting, embedded UI is allowed to run. + + +> [!TIP] +> This is an ADMX-backed policy and requires a special SyncML format to enable or disable. For details, see [Understanding ADMX-backed policies](./understanding-admx-backed-policies.md). +> +> You must specify the data type in the SyncML as <Format>chr</Format>. For an example SyncML, refer to [Enabling a policy](./understanding-admx-backed-policies.md#enabling-a-policy). +> +> The payload of the SyncML must be XML-encoded; for this XML encoding, there are a variety of online encoders that you can use. To avoid encoding the payload, you can use CDATA if your MDM supports it. For more information, see [CDATA Sections](http://www.w3.org/TR/REC-xml/#sec-cdata-sect). + + +ADMX Info: +- GP English name: *Prevent embedded UI* +- GP name: *MsiDisableEmbeddedUI* +- GP path: *Windows Components\Windows Installer* +- GP ADMX file name: *MSI.admx* + + + +
    + +**ADMX_MSI/SafeForScripting** + + + + + + + + + + + + + + + + + + + + + + + + + + + +
    Windows EditionSupported?
    Homecross mark
    Procross mark
    Businesscross mark
    Enterprisecheck mark
    Educationcross mark
    + + +
    + + +[Scope](./policy-configuration-service-provider.md#policy-scope): + +> [!div class = "checklist"] +> * Device + +
    + + + +Available in the latest Windows 10 Insider Preview Build. This policy setting allows Web-based programs to install software on the computer without notifying the user. + +If you disable or do not configure this policy setting, by default, when a script hosted by an Internet browser tries to install a program on the system, the system warns users and allows them to select or refuse the installation. + +If you enable this policy setting, the warning is suppressed and allows the installation to proceed. + +This policy setting is designed for enterprises that use Web-based tools to distribute programs to their employees. However, because this policy setting can pose a security risk, it should be applied cautiously. + + +> [!TIP] +> This is an ADMX-backed policy and requires a special SyncML format to enable or disable. For details, see [Understanding ADMX-backed policies](./understanding-admx-backed-policies.md). +> +> You must specify the data type in the SyncML as <Format>chr</Format>. For an example SyncML, refer to [Enabling a policy](./understanding-admx-backed-policies.md#enabling-a-policy). +> +> The payload of the SyncML must be XML-encoded; for this XML encoding, there are a variety of online encoders that you can use. To avoid encoding the payload, you can use CDATA if your MDM supports it. For more information, see [CDATA Sections](http://www.w3.org/TR/REC-xml/#sec-cdata-sect). + + +ADMX Info: +- GP English name: *Prevent Internet Explorer security prompt for Windows Installer scripts* +- GP name: *SafeForScripting* +- GP path: *Windows Components\Windows Installer* +- GP ADMX file name: *MSI.admx* + + + +
    + +**ADMX_MSI/SearchOrder** + + + + + + + + + + + + + + + + + + + + + + + + + + + +
    Windows EditionSupported?
    Homecross mark
    Procross mark
    Businesscross mark
    Enterprisecheck mark
    Educationcross mark
    + + +
    + + +[Scope](./policy-configuration-service-provider.md#policy-scope): + +> [!div class = "checklist"] +> * User + +
    + + + +Available in the latest Windows 10 Insider Preview Build. This policy setting specifies the order in which Windows Installer searches for installation files. + +If you disable or do not configure this policy setting, by default, the Windows Installer searches the network first, then removable media (floppy drive, CD-ROM, or DVD), and finally, the Internet (URL). + +If you enable this policy setting, you can change the search order by specifying the letters representing each file source in the order that you want Windows Installer to search: + +- "n" represents the network +- "m" represents media +- "u" represents URL, or the Internet + +To exclude a file source, omit or delete the letter representing that source type. + + +> [!TIP] +> This is an ADMX-backed policy and requires a special SyncML format to enable or disable. For details, see [Understanding ADMX-backed policies](./understanding-admx-backed-policies.md). +> +> You must specify the data type in the SyncML as <Format>chr</Format>. For an example SyncML, refer to [Enabling a policy](./understanding-admx-backed-policies.md#enabling-a-policy). +> +> The payload of the SyncML must be XML-encoded; for this XML encoding, there are a variety of online encoders that you can use. To avoid encoding the payload, you can use CDATA if your MDM supports it. For more information, see [CDATA Sections](http://www.w3.org/TR/REC-xml/#sec-cdata-sect). + + +ADMX Info: +- GP English name: *Specify the order in which Windows Installer searches for installation files* +- GP name: *SearchOrder* +- GP path: *Windows Components\Windows Installer* +- GP ADMX file name: *MSI.admx* + + + +
    + +**ADMX_MSI/TransformsSecure** + + + + + + + + + + + + + + + + + + + + + + + + + + + +
    Windows EditionSupported?
    Homecross mark
    Procross mark
    Businesscross mark
    Enterprisecheck mark
    Educationcross mark
    + + +
    + + +[Scope](./policy-configuration-service-provider.md#policy-scope): + +> [!div class = "checklist"] +> * Device + +
    + + + +Available in the latest Windows 10 Insider Preview Build. This policy setting saves copies of transform files in a secure location on the local computer. + +Transform files consist of instructions to modify or customize a program during installation. + +If you enable this policy setting, the transform file is saved in a secure location on the user's computer. + +If you do not configure this policy setting on Windows Server 2003, Windows Installer requires the transform file in order to repeat an installation in which the transform file was used, therefore, the user must be using the same computer or be connected to the original or identical media to reinstall, remove, or repair the installation. + +This policy setting is designed for enterprises to prevent unauthorized or malicious editing of transform files. + +If you disable this policy setting, Windows Installer stores transform files in the Application Data directory in the user's profile. + +If you do not configure this policy setting on Windows 2000 Professional, Windows XP Professional and Windows Vista, when a user reinstalls, removes, or repairs an installation, the transform file is available, even if the user is on a different computer or is not connected to the network. + + +> [!TIP] +> This is an ADMX-backed policy and requires a special SyncML format to enable or disable. For details, see [Understanding ADMX-backed policies](./understanding-admx-backed-policies.md). +> +> You must specify the data type in the SyncML as <Format>chr</Format>. For an example SyncML, refer to [Enabling a policy](./understanding-admx-backed-policies.md#enabling-a-policy). +> +> The payload of the SyncML must be XML-encoded; for this XML encoding, there are a variety of online encoders that you can use. To avoid encoding the payload, you can use CDATA if your MDM supports it. For more information, see [CDATA Sections](http://www.w3.org/TR/REC-xml/#sec-cdata-sect). + + +ADMX Info: +- GP English name: *Save copies of transform files in a secure location on workstation* +- GP name: *TransformsSecure* +- GP path: *Windows Components\Windows Installer* +- GP ADMX file name: *MSI.admx* + + + +
    + + +Footnotes: + +- 1 - Available in Windows 10, version 1607. +- 2 - Available in Windows 10, version 1703. +- 3 - Available in Windows 10, version 1709. +- 4 - Available in Windows 10, version 1803. +- 5 - Available in Windows 10, version 1809. +- 6 - Available in Windows 10, version 1903. +- 7 - Available in Windows 10, version 1909. +- 8 - Available in Windows 10, version 2004. + + \ No newline at end of file From d18b24ccc03763033d4354042c320eacb73dda0c Mon Sep 17 00:00:00 2001 From: Denise Vangel-MSFT Date: Wed, 16 Dec 2020 14:03:06 -0800 Subject: [PATCH 109/486] Update customize-controlled-folders.md --- .../microsoft-defender-atp/customize-controlled-folders.md | 6 +++--- 1 file changed, 3 insertions(+), 3 deletions(-) diff --git a/windows/security/threat-protection/microsoft-defender-atp/customize-controlled-folders.md b/windows/security/threat-protection/microsoft-defender-atp/customize-controlled-folders.md index 39b6cd2158..9a895ed9f4 100644 --- a/windows/security/threat-protection/microsoft-defender-atp/customize-controlled-folders.md +++ b/windows/security/threat-protection/microsoft-defender-atp/customize-controlled-folders.md @@ -8,9 +8,9 @@ ms.mktglfcycl: manage ms.sitesec: library ms.localizationpriority: medium audience: ITPro -author: levinec -ms.author: ellevin -ms.reviewer: +author: denisebmsft +ms.author: deniseb +ms.reviewer: jcedola, dbodorin, vladiso, nixanm, anvascon manager: dansimp --- From 6647f492e35420993b97e8317e0ee86a17631aca Mon Sep 17 00:00:00 2001 From: Denise Vangel-MSFT Date: Wed, 16 Dec 2020 14:04:46 -0800 Subject: [PATCH 110/486] Update customize-controlled-folders.md --- .../customize-controlled-folders.md | 15 ++++++++------- 1 file changed, 8 insertions(+), 7 deletions(-) diff --git a/windows/security/threat-protection/microsoft-defender-atp/customize-controlled-folders.md b/windows/security/threat-protection/microsoft-defender-atp/customize-controlled-folders.md index 9a895ed9f4..27da90e0a9 100644 --- a/windows/security/threat-protection/microsoft-defender-atp/customize-controlled-folders.md +++ b/windows/security/threat-protection/microsoft-defender-atp/customize-controlled-folders.md @@ -12,6 +12,7 @@ author: denisebmsft ms.author: deniseb ms.reviewer: jcedola, dbodorin, vladiso, nixanm, anvascon manager: dansimp +ms.date: 12/16/2020 --- # Customize controlled folder access @@ -21,14 +22,14 @@ manager: dansimp **Applies to:** -* [Microsoft Defender for Endpoint](https://go.microsoft.com/fwlink/p/?linkid=2146631) +- [Microsoft Defender for Endpoint](https://go.microsoft.com/fwlink/p/?linkid=2146631) Controlled folder access helps you protect valuable data from malicious apps and threats, such as ransomware. Controlled folder access is supported on Windows Server 2019 and Windows 10 clients. This article describes how to customize the following settings of the controlled folder access feature with the Windows Security app, Group Policy, PowerShell, and mobile device management (MDM) configuration service providers (CSPs). -* [Add additional folders to be protected](#protect-additional-folders) -* [Add apps that should be allowed to access protected folders](#allow-specific-apps-to-make-changes-to-controlled-folders) +- [Add additional folders to be protected](#protect-additional-folders) +- [Add apps that should be allowed to access protected folders](#allow-specific-apps-to-make-changes-to-controlled-folders) > [!WARNING] > Controlled folder access monitors apps for activities that may be malicious. Sometimes it might block a legitimate app from making legitimate changes to your files. @@ -53,7 +54,6 @@ You can use the Windows Security app or Group Policy to add and remove additiona 1. Open the Windows Security app by selecting the shield icon in the task bar or searching the start menu for **Defender**. - 2. Click the **Virus & threat protection** tile (or the shield icon on the left menu bar) and then scroll down to the **Ransomware protection** section. 3. Click the **Manage ransomware protection** link to open the **Ransomware protection** pane. @@ -78,6 +78,7 @@ You can use the Windows Security app or Group Policy to add and remove additiona ### Use PowerShell to protect additional folders 1. Type **powershell** in the Start menu, right-click **Windows PowerShell** and select **Run as administrator** + 2. Enter the following cmdlet: ```PowerShell @@ -161,6 +162,6 @@ For more information about customizing the notification when a rule is triggered ## Related topics -* [Protect important folders with controlled folder access](controlled-folders.md) -* [Enable controlled folder access](enable-controlled-folders.md) -* [Evaluate attack surface reduction rules](evaluate-attack-surface-reduction.md) +- [Protect important folders with controlled folder access](controlled-folders.md) +- [Enable controlled folder access](enable-controlled-folders.md) +- [Evaluate attack surface reduction rules](evaluate-attack-surface-reduction.md) From 96031a7053d70c6fcfb01002afa3d4c7c1df311a Mon Sep 17 00:00:00 2001 From: Denise Vangel-MSFT Date: Wed, 16 Dec 2020 14:07:07 -0800 Subject: [PATCH 111/486] Update customize-controlled-folders.md --- .../microsoft-defender-atp/customize-controlled-folders.md | 4 +--- 1 file changed, 1 insertion(+), 3 deletions(-) diff --git a/windows/security/threat-protection/microsoft-defender-atp/customize-controlled-folders.md b/windows/security/threat-protection/microsoft-defender-atp/customize-controlled-folders.md index 27da90e0a9..83fb2372be 100644 --- a/windows/security/threat-protection/microsoft-defender-atp/customize-controlled-folders.md +++ b/windows/security/threat-protection/microsoft-defender-atp/customize-controlled-folders.md @@ -32,9 +32,7 @@ This article describes how to customize the following settings of the controlled - [Add apps that should be allowed to access protected folders](#allow-specific-apps-to-make-changes-to-controlled-folders) > [!WARNING] -> Controlled folder access monitors apps for activities that may be malicious. Sometimes it might block a legitimate app from making legitimate changes to your files. -> -> This may impact your organization's productivity, so you may want to consider running the feature in [audit mode](audit-windows-defender.md) to fully assess the feature's impact. +> Controlled folder access monitors apps for activities that are detected as malicious. Sometimes, legitimate apps are blocked from making changes to your files. If controlled folder access impacts your organization's productivity, you might consider running this feature in [audit mode](audit-windows-defender.md) to fully assess the impact. ## Protect additional folders From cd77fa9eaace9e011cfd7e89e6c8153c4b0f2045 Mon Sep 17 00:00:00 2001 From: Denise Vangel-MSFT Date: Wed, 16 Dec 2020 14:07:21 -0800 Subject: [PATCH 112/486] Update customize-controlled-folders.md --- .../microsoft-defender-atp/customize-controlled-folders.md | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/windows/security/threat-protection/microsoft-defender-atp/customize-controlled-folders.md b/windows/security/threat-protection/microsoft-defender-atp/customize-controlled-folders.md index 83fb2372be..841d2fe690 100644 --- a/windows/security/threat-protection/microsoft-defender-atp/customize-controlled-folders.md +++ b/windows/security/threat-protection/microsoft-defender-atp/customize-controlled-folders.md @@ -31,7 +31,7 @@ This article describes how to customize the following settings of the controlled - [Add additional folders to be protected](#protect-additional-folders) - [Add apps that should be allowed to access protected folders](#allow-specific-apps-to-make-changes-to-controlled-folders) -> [!WARNING] +> [!IMPORTANT] > Controlled folder access monitors apps for activities that are detected as malicious. Sometimes, legitimate apps are blocked from making changes to your files. If controlled folder access impacts your organization's productivity, you might consider running this feature in [audit mode](audit-windows-defender.md) to fully assess the impact. ## Protect additional folders From bfdfe38a070ec5377ab366da665047712fd2129e Mon Sep 17 00:00:00 2001 From: Denise Vangel-MSFT Date: Wed, 16 Dec 2020 14:09:19 -0800 Subject: [PATCH 113/486] Update customize-controlled-folders.md --- .../customize-controlled-folders.md | 8 ++------ 1 file changed, 2 insertions(+), 6 deletions(-) diff --git a/windows/security/threat-protection/microsoft-defender-atp/customize-controlled-folders.md b/windows/security/threat-protection/microsoft-defender-atp/customize-controlled-folders.md index 841d2fe690..dba11d836d 100644 --- a/windows/security/threat-protection/microsoft-defender-atp/customize-controlled-folders.md +++ b/windows/security/threat-protection/microsoft-defender-atp/customize-controlled-folders.md @@ -36,12 +36,10 @@ This article describes how to customize the following settings of the controlled ## Protect additional folders - Controlled folder access applies to a number of system folders and default locations, including folders such as Documents, Pictures, and Movies. You can add additional folders to be protected, but you cannot remove the default folders in the default list. - Adding other folders to controlled folder access can be useful. Some use-cases include if you don't store files in the default Windows libraries, or you've changed the location of the libraries away from the defaults. You can also enter network shares and mapped drives. Environment variables and wildcards are supported. For information about using wildcards, see [Use wildcards in the file name and folder path or extension exclusion lists](https://docs.microsoft.com/windows/security/threat-protection/microsoft-defender-antivirus/configure-extension-file-exclusions-microsoft-defender-antivirus#use-wildcards-in-the-file-name-and-folder-path-or-extension-exclusion-lists). @@ -62,7 +60,6 @@ You can use the Windows Security app or Group Policy to add and remove additiona 4. Click **Add a protected folder** and follow the prompts to add folders. - ### Use Group Policy to protect additional folders 1. On your Group Policy management computer, open the [Group Policy Management Console](https://technet.microsoft.com/library/cc731212.aspx), right-click the Group Policy Object you want to configure and select **Edit**. @@ -82,10 +79,9 @@ You can use the Windows Security app or Group Policy to add and remove additiona ```PowerShell Add-MpPreference -ControlledFolderAccessProtectedFolders "" ``` +3. Repeat step 2 until you have added all the folders you want to protect. Folders that are added are visible in the Windows Security app. -Continue to use `Add-MpPreference -ControlledFolderAccessProtectedFolders` to add more folders to the list. Folders added using this cmdlet will appear in the Windows Security app. - -![Screenshot of a PowerShell window with the cmdlet above entered](../images/cfa-allow-folder-ps.png) + ![Screenshot of a PowerShell window with the cmdlet above entered](../images/cfa-allow-folder-ps.png) > [!IMPORTANT] > Use `Add-MpPreference` to append or add apps to the list. Using the `Set-MpPreference` cmdlet will overwrite the existing list. From dfd386dfcacb4d61c7af441ffb094cba72411fed Mon Sep 17 00:00:00 2001 From: Denise Vangel-MSFT Date: Wed, 16 Dec 2020 14:19:51 -0800 Subject: [PATCH 114/486] Update customize-controlled-folders.md --- .../customize-controlled-folders.md | 9 ++++----- 1 file changed, 4 insertions(+), 5 deletions(-) diff --git a/windows/security/threat-protection/microsoft-defender-atp/customize-controlled-folders.md b/windows/security/threat-protection/microsoft-defender-atp/customize-controlled-folders.md index dba11d836d..4a126e8893 100644 --- a/windows/security/threat-protection/microsoft-defender-atp/customize-controlled-folders.md +++ b/windows/security/threat-protection/microsoft-defender-atp/customize-controlled-folders.md @@ -95,8 +95,7 @@ Use the [./Vendor/MSFT/Policy/Config/Defender/GuardedFoldersList](https://docs.m You can specify if certain apps are always considered safe and give write access to files in protected folders. Allowing apps can be useful if a particular app you know and trust is being blocked by the controlled folder access feature. > [!IMPORTANT] -> By default, Windows adds apps that it considers friendly to the allowed list—apps added automatically by Windows are not recorded in the list shown in the Windows Security app or by using the associated PowerShell cmdlets. -> You shouldn't need to add most apps. Only add apps if they are being blocked and you can verify their trustworthiness. +> By default, Windows adds apps that are considered friendly to the allowed list. Such apps that are added automatically are not recorded in the list shown in the Windows Security app or by using the associated PowerShell cmdlets. You shouldn't need to add most apps. Only add apps if they are being blocked and you can verify their trustworthiness. When you add an app, you have to specify the app's location. Only the app in that location will be permitted access to the protected folders. If the app (with the same name) is in a different location, it will not be added to the allow list and may be blocked by controlled folder access. @@ -104,9 +103,9 @@ An allowed application or service only has write access to a controlled folder a ### Use the Windows Defender Security app to allow specific apps -1. Open the Windows Security by selecting the shield icon in the task bar or searching the start menu for **Defender**. +1. Open the Windows Security app by searching the start menu for **Security**. -2. Select the **Virus & threat protection** tile (or the shield icon on the left menu bar) and then select **Ransomware protection**. +2. Select the **Virus & threat protection** tile (or the shield icon on the left menu bar) and then select **Manage ransomware protection**. 3. Under the **Controlled folder access** section, select **Allow an app through Controlled folder access** @@ -116,7 +115,7 @@ An allowed application or service only has write access to a controlled folder a ### Use Group Policy to allow specific apps -1. On your Group Policy management device, open the [Group Policy Management Console](https://technet.microsoft.com/library/cc731212.aspx), right-click the Group Policy Object you want to configure and select **Edit**. +1. On your Group Policy management device, open the [Group Policy Management Console](https://docs.microsoft.com/previous-versions/windows/it-pro/windows-server-2008-R2-and-2008/cc731212(v=ws.11)?preserve=true), right-click the Group Policy Object you want to configure and select **Edit**. 2. In the **Group Policy Management Editor**, go to **Computer configuration** and select **Administrative templates**. From 120a72cfe44e802e9dffc5f3320f978046c4b893 Mon Sep 17 00:00:00 2001 From: ManikaDhiman Date: Wed, 16 Dec 2020 14:20:33 -0800 Subject: [PATCH 115/486] Fixed build warning --- windows/client-management/mdm/policy-csp-admx-msi.md | 10 +++++----- 1 file changed, 5 insertions(+), 5 deletions(-) diff --git a/windows/client-management/mdm/policy-csp-admx-msi.md b/windows/client-management/mdm/policy-csp-admx-msi.md index 0336f0e890..92fe153f4b 100644 --- a/windows/client-management/mdm/policy-csp-admx-msi.md +++ b/windows/client-management/mdm/policy-csp-admx-msi.md @@ -1178,7 +1178,7 @@ ADMX Info:
    -**ADMX_MSI/MSI_DisablePatchUninstall** +**ADMX_MSI/MSI_DisablePatchUninstall** @@ -1248,7 +1248,7 @@ ADMX Info:
    -**ADMX_MSI/MSI_DisableSRCheckPoints** +**ADMX_MSI/MSI_DisableSRCheckPoints**
    @@ -1316,7 +1316,7 @@ ADMX Info:
    -**ADMX_MSI/MSI_DisableUserInstalls** +**ADMX_MSI/MSI_DisableUserInstalls**
    @@ -1384,7 +1384,7 @@ ADMX Info:
    -**ADMX_MSI/MSI_EnforceUpgradeComponentRules** +**ADMX_MSI/MSI_EnforceUpgradeComponentRules**
    @@ -1458,7 +1458,7 @@ ADMX Info:
    -**ADMX_MSI/MSI_MaxPatchCacheSize** +**ADMX_MSI/MSI_MaxPatchCacheSize**
    From 8dc7756b2b4d3e573303caae6032bf4871a23fa5 Mon Sep 17 00:00:00 2001 From: Denise Vangel-MSFT Date: Wed, 16 Dec 2020 14:26:03 -0800 Subject: [PATCH 116/486] Update customize-controlled-folders.md --- .../microsoft-defender-atp/customize-controlled-folders.md | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/windows/security/threat-protection/microsoft-defender-atp/customize-controlled-folders.md b/windows/security/threat-protection/microsoft-defender-atp/customize-controlled-folders.md index 4a126e8893..bf71dddad7 100644 --- a/windows/security/threat-protection/microsoft-defender-atp/customize-controlled-folders.md +++ b/windows/security/threat-protection/microsoft-defender-atp/customize-controlled-folders.md @@ -151,7 +151,7 @@ Use the [./Vendor/MSFT/Policy/Config/Defender/GuardedFoldersAllowedApplications] ## Customize the notification -For more information about customizing the notification when a rule is triggered and blocks an app or file, see [Windows Security](../windows-defender-security-center/windows-defender-security-center.md#customize-notifications-from-the-windows-defender-security-center). +For more information about customizing the notification when a rule is triggered and blocks an app or file, see [Configure alert notifications in Microsoft Defender for Endpoint](https://docs.microsoft.com/windows/security/threat-protection/microsoft-defender-atp/configure-email-notifications). ## Related topics From 47104dd15056ee0239198349225a48a6f3c3f311 Mon Sep 17 00:00:00 2001 From: ManikaDhiman Date: Wed, 16 Dec 2020 14:27:19 -0800 Subject: [PATCH 117/486] Fixed build warning --- windows/client-management/mdm/policy-csp-admx-msi.md | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/windows/client-management/mdm/policy-csp-admx-msi.md b/windows/client-management/mdm/policy-csp-admx-msi.md index 92fe153f4b..cd3f93abd4 100644 --- a/windows/client-management/mdm/policy-csp-admx-msi.md +++ b/windows/client-management/mdm/policy-csp-admx-msi.md @@ -1108,7 +1108,7 @@ ADMX Info:
    -**ADMX_MSI/MSI_DisableLUAPatching** +**ADMX_MSI/MSI_DisableLUAPatching**
    From 52296a3f9dc4356e2b1014d92c8b7f7381060ace Mon Sep 17 00:00:00 2001 From: Denise Vangel-MSFT Date: Wed, 16 Dec 2020 14:29:46 -0800 Subject: [PATCH 118/486] Update customize-controlled-folders.md --- .../microsoft-defender-atp/customize-controlled-folders.md | 7 ++++++- 1 file changed, 6 insertions(+), 1 deletion(-) diff --git a/windows/security/threat-protection/microsoft-defender-atp/customize-controlled-folders.md b/windows/security/threat-protection/microsoft-defender-atp/customize-controlled-folders.md index bf71dddad7..12b59f2874 100644 --- a/windows/security/threat-protection/microsoft-defender-atp/customize-controlled-folders.md +++ b/windows/security/threat-protection/microsoft-defender-atp/customize-controlled-folders.md @@ -28,8 +28,9 @@ Controlled folder access helps you protect valuable data from malicious apps and This article describes how to customize the following settings of the controlled folder access feature with the Windows Security app, Group Policy, PowerShell, and mobile device management (MDM) configuration service providers (CSPs). -- [Add additional folders to be protected](#protect-additional-folders) +- [Protect additional folders](#protect-additional-folders) - [Add apps that should be allowed to access protected folders](#allow-specific-apps-to-make-changes-to-controlled-folders) +- Allow signed executable to access protected folders > [!IMPORTANT] > Controlled folder access monitors apps for activities that are detected as malicious. Sometimes, legitimate apps are blocked from making changes to your files. If controlled folder access impacts your organization's productivity, you might consider running this feature in [audit mode](audit-windows-defender.md) to fully assess the impact. @@ -149,6 +150,10 @@ An allowed application or service only has write access to a controlled folder a Use the [./Vendor/MSFT/Policy/Config/Defender/GuardedFoldersAllowedApplications](https://docs.microsoft.com/windows/client-management/mdm/policy-csp-defender#defender-guardedfoldersallowedapplications) configuration service provider (CSP) to allow apps to make changes to protected folders. +## Allow signed executable files to access protected folders + +Microsoft Defender for Endpoint certificate and file indicators can allow signed executable files to access protected folders. For implementation details, see [Create indicators based on certificates](https://docs.microsoft.com/windows/security/threat-protection/microsoft-defender-atp/indicator-certificates). + ## Customize the notification For more information about customizing the notification when a rule is triggered and blocks an app or file, see [Configure alert notifications in Microsoft Defender for Endpoint](https://docs.microsoft.com/windows/security/threat-protection/microsoft-defender-atp/configure-email-notifications). From 29b5b35d0c9212f461148d5c57fc560e2a3b8d31 Mon Sep 17 00:00:00 2001 From: Denise Vangel-MSFT Date: Wed, 16 Dec 2020 14:30:00 -0800 Subject: [PATCH 119/486] Update customize-controlled-folders.md --- .../microsoft-defender-atp/customize-controlled-folders.md | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/windows/security/threat-protection/microsoft-defender-atp/customize-controlled-folders.md b/windows/security/threat-protection/microsoft-defender-atp/customize-controlled-folders.md index 12b59f2874..45051e6ec7 100644 --- a/windows/security/threat-protection/microsoft-defender-atp/customize-controlled-folders.md +++ b/windows/security/threat-protection/microsoft-defender-atp/customize-controlled-folders.md @@ -158,7 +158,7 @@ Microsoft Defender for Endpoint certificate and file indicators can allow signed For more information about customizing the notification when a rule is triggered and blocks an app or file, see [Configure alert notifications in Microsoft Defender for Endpoint](https://docs.microsoft.com/windows/security/threat-protection/microsoft-defender-atp/configure-email-notifications). -## Related topics +## See also - [Protect important folders with controlled folder access](controlled-folders.md) - [Enable controlled folder access](enable-controlled-folders.md) From 70a5286eaf1fa33fc32908ecfb31f79deebeefb0 Mon Sep 17 00:00:00 2001 From: Denise Vangel-MSFT Date: Wed, 16 Dec 2020 14:38:31 -0800 Subject: [PATCH 120/486] Update customize-controlled-folders.md --- .../customize-controlled-folders.md | 29 +++++++++---------- 1 file changed, 14 insertions(+), 15 deletions(-) diff --git a/windows/security/threat-protection/microsoft-defender-atp/customize-controlled-folders.md b/windows/security/threat-protection/microsoft-defender-atp/customize-controlled-folders.md index 45051e6ec7..629775a962 100644 --- a/windows/security/threat-protection/microsoft-defender-atp/customize-controlled-folders.md +++ b/windows/security/threat-protection/microsoft-defender-atp/customize-controlled-folders.md @@ -26,44 +26,43 @@ ms.date: 12/16/2020 Controlled folder access helps you protect valuable data from malicious apps and threats, such as ransomware. Controlled folder access is supported on Windows Server 2019 and Windows 10 clients. -This article describes how to customize the following settings of the controlled folder access feature with the Windows Security app, Group Policy, PowerShell, and mobile device management (MDM) configuration service providers (CSPs). +This article describes how to customize controlled folder access capabilities, and includes the following sections: - [Protect additional folders](#protect-additional-folders) - [Add apps that should be allowed to access protected folders](#allow-specific-apps-to-make-changes-to-controlled-folders) -- Allow signed executable to access protected folders +- [Allow signed executable files to access protected folders](#allow-signed-executable-files-to-access-protected-folders) +- [Customize the notification](#customize-the-notification) > [!IMPORTANT] > Controlled folder access monitors apps for activities that are detected as malicious. Sometimes, legitimate apps are blocked from making changes to your files. If controlled folder access impacts your organization's productivity, you might consider running this feature in [audit mode](audit-windows-defender.md) to fully assess the impact. ## Protect additional folders -Controlled folder access applies to a number of system folders and default locations, including folders such as Documents, Pictures, and Movies. +Controlled folder access applies to a number of system folders and default locations, including folders such as **Documents**, **Pictures**, and **Movies**. You can add additional folders to be protected, but you cannot remove the default folders in the default list. -You can add additional folders to be protected, but you cannot remove the default folders in the default list. +Adding other folders to controlled folder access can be helpful for cases when you don't store files in the default Windows libraries, or you've changed the default location of your libraries. -Adding other folders to controlled folder access can be useful. Some use-cases include if you don't store files in the default Windows libraries, or you've changed the location of the libraries away from the defaults. +You can also specify network shares and mapped drives. Environment variables and wildcards are supported. For information about using wildcards, see [Use wildcards in the file name and folder path or extension exclusion lists](https://docs.microsoft.com/windows/security/threat-protection/microsoft-defender-antivirus/configure-extension-file-exclusions-microsoft-defender-antivirus#use-wildcards-in-the-file-name-and-folder-path-or-extension-exclusion-lists). -You can also enter network shares and mapped drives. Environment variables and wildcards are supported. For information about using wildcards, see [Use wildcards in the file name and folder path or extension exclusion lists](https://docs.microsoft.com/windows/security/threat-protection/microsoft-defender-antivirus/configure-extension-file-exclusions-microsoft-defender-antivirus#use-wildcards-in-the-file-name-and-folder-path-or-extension-exclusion-lists). - -You can use the Windows Security app or Group Policy to add and remove additional protected folders. +You can use the Windows Security app, Group Policy, PowerShell cmdlets, or mobile device management configuration service providers to add and remove additional protected folders. ### Use the Windows Security app to protect additional folders -1. Open the Windows Security app by selecting the shield icon in the task bar or searching the start menu for **Defender**. +1. Open the Windows Security app by selecting the shield icon in the task bar or searching the start menu for **Security**. -2. Click the **Virus & threat protection** tile (or the shield icon on the left menu bar) and then scroll down to the **Ransomware protection** section. +2. Select **Virus & threat protection**, and then scroll down to the **Ransomware protection** section. -3. Click the **Manage ransomware protection** link to open the **Ransomware protection** pane. +3. Select **Manage ransomware protection** to open the **Ransomware protection** pane. -4. Under the **Controlled folder access** section, click the **Protected folders** link. +4. Under the **Controlled folder access** section, select **Protected folders**. -5. Click **Yes** on the **User Access Control** prompt. The **Protected folders** pane displays. +5. Choose **Yes** on the **User Access Control** prompt. The **Protected folders** pane displays. -4. Click **Add a protected folder** and follow the prompts to add folders. +4. Select **Add a protected folder** and follow the prompts to add folders. ### Use Group Policy to protect additional folders -1. On your Group Policy management computer, open the [Group Policy Management Console](https://technet.microsoft.com/library/cc731212.aspx), right-click the Group Policy Object you want to configure and select **Edit**. +1. On your Group Policy management computer, open the [Group Policy Management Console](https://docs.microsoft.com/previous-versions/windows/it-pro/windows-server-2008-R2-and-2008/cc731212(v=ws.11)?preserve=true), right-click the Group Policy Object you want to configure, and then and select **Edit**. 2. In the **Group Policy Management Editor**, go to **Computer configuration** and select **Administrative templates**. From 25f3caf7efddc153c635b5494b174d0f1d4e2f0a Mon Sep 17 00:00:00 2001 From: ManikaDhiman Date: Wed, 16 Dec 2020 14:50:47 -0800 Subject: [PATCH 121/486] Fixed formatting issue --- .../mdm/policy-csp-admx-msi.md | 39 +++++++++++++++++++ 1 file changed, 39 insertions(+) diff --git a/windows/client-management/mdm/policy-csp-admx-msi.md b/windows/client-management/mdm/policy-csp-admx-msi.md index cd3f93abd4..948a93babd 100644 --- a/windows/client-management/mdm/policy-csp-admx-msi.md +++ b/windows/client-management/mdm/policy-csp-admx-msi.md @@ -169,6 +169,7 @@ ADMX Info: +
    @@ -242,6 +243,7 @@ ADMX Info: +
    @@ -312,6 +314,7 @@ ADMX Info: +
    @@ -387,6 +390,7 @@ ADMX Info: +
    @@ -462,6 +466,7 @@ ADMX Info: +
    @@ -531,6 +536,7 @@ ADMX Info: +
    @@ -604,6 +610,7 @@ ADMX Info: +
    @@ -679,6 +686,7 @@ ADMX Info: +
    @@ -752,6 +760,7 @@ ADMX Info: +
    @@ -826,6 +835,7 @@ ADMX Info: +
    @@ -896,6 +906,7 @@ ADMX Info: +
    @@ -967,6 +978,7 @@ ADMX Info: +
    @@ -1036,7 +1048,9 @@ ADMX Info: +
    + **ADMX_MSI/MSILogging** @@ -1106,8 +1120,11 @@ ADMX Info: +
    + + **ADMX_MSI/MSI_DisableLUAPatching** @@ -1176,8 +1193,11 @@ ADMX Info: +
    + + **ADMX_MSI/MSI_DisablePatchUninstall** @@ -1246,8 +1266,11 @@ ADMX Info: +
    + + **ADMX_MSI/MSI_DisableSRCheckPoints** @@ -1314,8 +1337,11 @@ ADMX Info: +
    + + **ADMX_MSI/MSI_DisableUserInstalls** @@ -1382,8 +1408,11 @@ ADMX Info: +
    + + **ADMX_MSI/MSI_EnforceUpgradeComponentRules** @@ -1456,7 +1485,9 @@ ADMX Info: +
    + **ADMX_MSI/MSI_MaxPatchCacheSize** @@ -1530,7 +1561,9 @@ ADMX Info: +
    + **ADMX_MSI/MsiDisableEmbeddedUI** @@ -1598,7 +1631,9 @@ ADMX Info: +
    + **ADMX_MSI/SafeForScripting** @@ -1668,7 +1703,9 @@ ADMX Info: +
    + **ADMX_MSI/SearchOrder** @@ -1742,7 +1779,9 @@ ADMX Info: +
    + **ADMX_MSI/TransformsSecure** From e9fc1184ab24675e7b5c4110f69d3603fc5e2bda Mon Sep 17 00:00:00 2001 From: adirdidi <68847945+adirdidi@users.noreply.github.com> Date: Thu, 17 Dec 2020 02:17:52 +0200 Subject: [PATCH 122/486] Update contact-support-usgov.md Change URLs from Windows to Microsoft, add "GCC-M on Commercial". --- .../microsoft-defender-atp/contact-support-usgov.md | 9 +++++---- 1 file changed, 5 insertions(+), 4 deletions(-) diff --git a/windows/security/threat-protection/microsoft-defender-atp/contact-support-usgov.md b/windows/security/threat-protection/microsoft-defender-atp/contact-support-usgov.md index 8241f211f4..a3ea45d493 100644 --- a/windows/security/threat-protection/microsoft-defender-atp/contact-support-usgov.md +++ b/windows/security/threat-protection/microsoft-defender-atp/contact-support-usgov.md @@ -33,11 +33,12 @@ In order to open a support case, you will need to login to your Microsoft Defend Environment | Portal URL :---|:--- -GCC-M | [https://gcc.securitycenter.windows.us](https://gcc.securitycenter.windows.us) -GCC-H | [https://securitycenter.windows.us](https://securitycenter.windows.us) -DoD | [https://securitycenter.windows.us](https://securitycenter.windows.us) +GCC-M on Commercial | [https://securitycenter.microsoft.com](https://securitycenter.microsoft.com) +GCC-M | [https://gcc.securitycenter.microsoft.us](https://gcc.securitycenter.microsoft.us) +GCC-H | [https://securitycenter.microsoft.us](https://securitycenter.microsoft.us) +DoD | [https://securitycenter.microsoft.us](https://securitycenter.microsoft.us) If you are unable to login to the portal, you can also open a support case using the [phone](https://docs.microsoft.com/microsoft-365/admin/contact-support-for-business-products?view=o365-worldwide&tabs=phone&preserve-view=true). ## Opening a support case -For prerequisites and instructions, see [Contact Microsoft Defender for Endpoint support](contact-support.md). \ No newline at end of file +For prerequisites and instructions, see [Contact Microsoft Defender for Endpoint support](contact-support.md). From 1b998847b42004a68d934432d6e1772f9e7cfa23 Mon Sep 17 00:00:00 2001 From: ManikaDhiman Date: Wed, 16 Dec 2020 16:26:33 -0800 Subject: [PATCH 123/486] Added WindowsRemoteManagement policies --- windows/client-management/mdm/TOC.md | 1 + .../mdm/policies-in-policy-csp-admx-backed.md | 2 + .../policy-configuration-service-provider.md | 11 ++ ...policy-csp-admx-windowsremotemanagement.md | 184 ++++++++++++++++++ 4 files changed, 198 insertions(+) create mode 100644 windows/client-management/mdm/policy-csp-admx-windowsremotemanagement.md diff --git a/windows/client-management/mdm/TOC.md b/windows/client-management/mdm/TOC.md index 423a233fbb..6e91df97ec 100644 --- a/windows/client-management/mdm/TOC.md +++ b/windows/client-management/mdm/TOC.md @@ -264,6 +264,7 @@ #### [ADMX_WindowsExplorer](policy-csp-admx-windowsexplorer.md) #### [ADMX_WindowsMediaDRM](policy-csp-admx-windowsmediadrm.md) #### [ADMX_WindowsMediaPlayer](policy-csp-admx-windowsmediaplayer.md) +#### [ADMX_WindowsRemoteManagement](policy-csp-admx-windowsremotemanagement.md) #### [ADMX_WindowsStore](policy-csp-admx-windowsstore.md) #### [ADMX_WinInit](policy-csp-admx-wininit.md) #### [ADMX_WinLogon](policy-csp-admx-winlogon.md) diff --git a/windows/client-management/mdm/policies-in-policy-csp-admx-backed.md b/windows/client-management/mdm/policies-in-policy-csp-admx-backed.md index 5cbf915a49..8c03c186f3 100644 --- a/windows/client-management/mdm/policies-in-policy-csp-admx-backed.md +++ b/windows/client-management/mdm/policies-in-policy-csp-admx-backed.md @@ -1208,6 +1208,8 @@ ms.date: 10/08/2020 - [ADMX_WindowsMediaPlayer/PreventWMPDeskTopShortcut](./policy-csp-admx-windowsmediaplayer.md#admx-windowsmediaplayer-preventwmpdesktopshortcut) - [ADMX_WindowsMediaPlayer/SkinLockDown](./policy-csp-admx-windowsmediaplayer.md#admx-windowsmediaplayer-skinlockdown) - [ADMX_WindowsMediaPlayer/WindowsStreamingMediaProtocols](./policy-csp-admx-windowsmediaplayer.md#admx-windowsmediaplayer-windowsstreamingmediaprotocols) +- [ADMX_WindowsRemoteManagement/DisallowKerberos_1](./policy-csp-admx-windowsremotemanagement.md#admx-windowsremotemanagement-disallowkerberos-1) +- [ADMX_WindowsRemoteManagement/DisallowKerberos_2](./policy-csp-admx-windowsremotemanagement.md#admx-windowsremotemanagement-disallowkerberos-2) - [ADMX_WindowsStore/DisableAutoDownloadWin8](./policy-csp-admx-windowsstore.md#admx-windowsstore-disableautodownloadwin8) - [ADMX_WindowsStore/DisableOSUpgrade_1](./policy-csp-admx-windowsstore.md#admx-windowsstore-disableosupgrade-1) - [ADMX_WindowsStore/DisableOSUpgrade_2](./policy-csp-admx-windowsstore.md#admx-windowsstore-disableosupgrade-2) diff --git a/windows/client-management/mdm/policy-configuration-service-provider.md b/windows/client-management/mdm/policy-configuration-service-provider.md index 50e56bd34b..810eacc415 100644 --- a/windows/client-management/mdm/policy-configuration-service-provider.md +++ b/windows/client-management/mdm/policy-configuration-service-provider.md @@ -4170,6 +4170,17 @@ The following diagram shows the Policy configuration service provider in tree fo +### ADMX_WindowsRemoteManagement policies + +
    +
    + ADMX_WindowsRemoteManagement/DisallowKerberos_1 +
    +
    + ADMX_WindowsRemoteManagement/DisallowKerberos_2 +
    +
    + ### ADMX_WindowsStore policies
    diff --git a/windows/client-management/mdm/policy-csp-admx-windowsremotemanagement.md b/windows/client-management/mdm/policy-csp-admx-windowsremotemanagement.md new file mode 100644 index 0000000000..317228c066 --- /dev/null +++ b/windows/client-management/mdm/policy-csp-admx-windowsremotemanagement.md @@ -0,0 +1,184 @@ +--- +title: Policy CSP - ADMX_WindowsRemoteManagement +description: Policy CSP - ADMX_WindowsRemoteManagement +ms.author: dansimp +ms.localizationpriority: medium +ms.topic: article +ms.prod: w10 +ms.technology: windows +author: manikadhiman +ms.date: 12/16/2020 +ms.reviewer: +manager: dansimp +--- + +# Policy CSP - ADMX_WindowsRemoteManagement +> [!WARNING] +> Some information relates to prereleased products, which may be substantially modified before it's commercially released. Microsoft makes no warranties, expressed or implied, concerning the information provided here. + +
    + + +## ADMX_WindowsRemoteManagement policies + +
    +
    + ADMX_WindowsRemoteManagement/DisallowKerberos_1 +
    +
    + ADMX_WindowsRemoteManagement/DisallowKerberos_2 +
    +
    + + +
    + + +**ADMX_WindowsRemoteManagement/DisallowKerberos_1** + + +
    + + + + + + + + + + + + + + + + + + + + + + + + +
    Windows EditionSupported?
    Homecross mark
    Procross mark
    Businesscross mark
    Enterprisecheck mark
    Educationcross mark
    + + +
    + + +[Scope](./policy-configuration-service-provider.md#policy-scope): + +> [!div class = "checklist"] +> * Device + +
    + + + +Available in the latest Windows 10 Insider Preview Build. This policy setting allows you to manage whether the Windows Remote Management (WinRM) service accepts Kerberos credentials over the network. + +If you enable this policy setting, the WinRM service does not accept Kerberos credentials over the network. If you disable or do not configure this policy setting, the WinRM service accepts Kerberos authentication from a remote client. + + +> [!TIP] +> This is an ADMX-backed policy and requires a special SyncML format to enable or disable. For details, see [Understanding ADMX-backed policies](./understanding-admx-backed-policies.md). +> +> You must specify the data type in the SyncML as <Format>chr</Format>. For an example SyncML, refer to [Enabling a policy](./understanding-admx-backed-policies.md#enabling-a-policy). +> +> The payload of the SyncML must be XML-encoded; for this XML encoding, there are a variety of online encoders that you can use. To avoid encoding the payload, you can use CDATA if your MDM supports it. For more information, see [CDATA Sections](http://www.w3.org/TR/REC-xml/#sec-cdata-sect). + + +ADMX Info: +- GP English name: *Disallow Kerberos authentication* +- GP name: *DisallowKerberos_1* +- GP path: *Windows Components\Windows Remote Management (WinRM)\WinRM Service* +- GP ADMX file name: *WindowsRemoteManagement.admx* + + + + +
    + + +**ADMX_WindowsRemoteManagement/DisallowKerberos_2** + + + + + + + + + + + + + + + + + + + + + + + + + + + +
    Windows EditionSupported?
    Homecross mark
    Procross mark
    Businesscross mark
    Enterprisecheck mark
    Educationcross mark
    + + +
    + + +[Scope](./policy-configuration-service-provider.md#policy-scope): + +> [!div class = "checklist"] +> * Device + +
    + + + +Available in the latest Windows 10 Insider Preview Build. This policy setting allows you to manage whether the Windows Remote Management (WinRM) client uses Kerberos authentication directly. + +If you enable this policy setting, the Windows Remote Management (WinRM) client does not use Kerberos authentication directly. Kerberos can still be used if the WinRM client is using the Negotiate authentication and Kerberos is selected. + +If you disable or do not configure this policy setting, the WinRM client uses the Kerberos authentication directly. + + +> [!TIP] +> This is an ADMX-backed policy and requires a special SyncML format to enable or disable. For details, see [Understanding ADMX-backed policies](./understanding-admx-backed-policies.md). +> +> You must specify the data type in the SyncML as <Format>chr</Format>. For an example SyncML, refer to [Enabling a policy](./understanding-admx-backed-policies.md#enabling-a-policy). +> +> The payload of the SyncML must be XML-encoded; for this XML encoding, there are a variety of online encoders that you can use. To avoid encoding the payload, you can use CDATA if your MDM supports it. For more information, see [CDATA Sections](http://www.w3.org/TR/REC-xml/#sec-cdata-sect). + + +ADMX Info: +- GP English name: *Disallow Kerberos authentication* +- GP name: *DisallowKerberos_2* +- GP path: *Windows Components\Windows Remote Management (WinRM)\WinRM Client* +- GP ADMX file name: *WindowsRemoteManagement.admx* + + + +
    + +Footnotes: + +- 1 - Available in Windows 10, version 1607. +- 2 - Available in Windows 10, version 1703. +- 3 - Available in Windows 10, version 1709. +- 4 - Available in Windows 10, version 1803. +- 5 - Available in Windows 10, version 1809. +- 6 - Available in Windows 10, version 1903. +- 7 - Available in Windows 10, version 1909. +- 8 - Available in Windows 10, version 2004. + + \ No newline at end of file From 092152b7dc69556812578742ff03e547865d2cfc Mon Sep 17 00:00:00 2001 From: Shari Kjerland <30906736+SKjerland@users.noreply.github.com> Date: Wed, 16 Dec 2020 17:37:07 -0800 Subject: [PATCH 124/486] Replaced hello-faq.md with .yml file As part of the FAQ-content-type pilot, I replaced the .md file with a .yml file that uses Google-defined schema. --- browsers/edge/microsoft-edge-faq.yml | 15 +- .../hello-for-business/hello-faq.md | 173 --------------- .../hello-for-business/hello-faq.yml | 209 ++++++++++++++++++ .../hello-for-business/toc.md | 2 +- 4 files changed, 220 insertions(+), 179 deletions(-) delete mode 100644 windows/security/identity-protection/hello-for-business/hello-faq.md create mode 100644 windows/security/identity-protection/hello-for-business/hello-faq.yml diff --git a/browsers/edge/microsoft-edge-faq.yml b/browsers/edge/microsoft-edge-faq.yml index 830ca09109..e6f27046bd 100644 --- a/browsers/edge/microsoft-edge-faq.yml +++ b/browsers/edge/microsoft-edge-faq.yml @@ -49,21 +49,26 @@ sections: To learn more about Microsoft's plan for phasing Flash out of Microsoft Edge and Internet Explorer, see [The End of an Era — Next Steps for Adobe Flash](https://blogs.windows.com/msedgedev/2017/07/25/flash-on-windows-timeline/#3Bcc3QjRw0l7XsZ4.97) (blog article). - question: Does Microsoft Edge support ActiveX controls or BHOs like Silverlight or Java? - answer: No, Microsoft Edge doesn't support ActiveX controls and BHOs like Silverlight or Java. If you're running web apps that use ActiveX controls, x-ua-compatible headers, or legacy document modes, you need to keep running them in Internet Explorer 11. Internet Explorer 11 offers additional security, manageability, performance, backward compatibility, and standards support. + answer: | + No, Microsoft Edge doesn't support ActiveX controls and Browser Helper Objects (BHOs) like Silverlight or Java. If you're running web apps that use ActiveX controls, x-ua-compatible headers, or legacy document modes, you need to keep running them in Internet Explorer 11. Internet Explorer 11 offers additional security, manageability, performance, backward compatibility, and standards support. - question: How often will Microsoft Edge be updated? - answer: In Windows 10, we're delivering Windows as a service, updated on a cadence driven by quality and the availability of new features. Microsoft Edge security updates are released every two to four weeks, while bigger feature updates are included in the Windows 10 releases on a semi-annual cadence. + answer: | + In Windows 10, we're delivering Windows as a service, updated on a cadence driven by quality and the availability of new features. Microsoft Edge security updates are released every two to four weeks, while bigger feature updates are included in the Windows 10 releases on a semi-annual cadence. - question: How can I provide feedback on Microsoft Edge? - answer: Microsoft Edge is an evergreen browser - we'll continue to evolve both the web platform and the user interface with regular updates. To send feedback on user experience, or on broken or malicious sites, use the **Send Feedback** option under the ellipses icon (**...**) in the Microsoft Edge toolbar. + answer: | + Microsoft Edge is an evergreen browser - we'll continue to evolve both the web platform and the user interface with regular updates. To send feedback on user experience, or on broken or malicious sites, use the **Send Feedback** option under the ellipses icon (**...**) in the Microsoft Edge toolbar. - question: Will Internet Explorer 11 continue to receive updates? answer: | We're committed to keeping Internet Explorer a supported, reliable, and safe browser. Internet Explorer is still a component of Windows and follows the support lifecycle of the OS on which it's installed. For details, see [Lifecycle FAQ - Internet Explorer](https://support.microsoft.com/help/17454/). While we continue to support and update Internet Explorer, the latest features and platform updates will only be available in Microsoft Edge. - question: How do I find out which version of Microsoft Edge I have? - answer: In the upper-right corner of Microsoft Edge, select the ellipses icon (**...**), and then select **Settings**. Look in the **About Microsoft Edge** section to find your version. + answer: | + In the upper-right corner of Microsoft Edge, select the ellipses icon (**...**), and then select **Settings**. Look in the **About Microsoft Edge** section to find your version. - question: What is Microsoft EdgeHTML? - answer: Microsoft EdgeHTML is the web rendering engine that powers the current Microsoft Edge web browser and Windows 10 web app platform (as opposed to *Microsoft Edge, based on Chromium*). + answer: | + Microsoft EdgeHTML is the web rendering engine that powers the current Microsoft Edge web browser and Windows 10 web app platform (as opposed to *Microsoft Edge, based on Chromium*). diff --git a/windows/security/identity-protection/hello-for-business/hello-faq.md b/windows/security/identity-protection/hello-for-business/hello-faq.md deleted file mode 100644 index 8d7088b7b7..0000000000 --- a/windows/security/identity-protection/hello-for-business/hello-faq.md +++ /dev/null @@ -1,173 +0,0 @@ ---- -title: Windows Hello for Business Frequently Asked Questions -description: Use these frequently asked questions (FAQ) to learn important details about Windows Hello for Business. -keywords: identity, PIN, biometric, Hello, passport -ms.prod: w10 -ms.mktglfcycl: deploy -ms.sitesec: library -ms.pagetype: security, mobile -audience: ITPro -author: mapalko -ms.author: mapalko -manager: dansimp -ms.collection: M365-identity-device-management -ms.topic: article -localizationpriority: medium -ms.date: 08/19/2018 -ms.reviewer: ---- -# Windows Hello for Business Frequently Asked Questions - -**Applies to** -- Windows 10 - -## What about virtual smart cards? -Windows Hello for Business is the modern, two-factor credential for Windows 10. Microsoft will be deprecating virtual smart cards in the future, but no date is set at this time. Customers using Windows 10 and virtual smart cards should move to Windows Hello for Business. Microsoft will publish the date early to ensure customers have adequate lead time to move to Windows Hello for Business. Microsoft recommends new Windows 10 deployments to use Windows Hello for Business. Virtual smart card remain supported for Windows 7 and Windows 8. - -## What about convenience PIN? -Microsoft is committed to its vision of a world without passwords. We recognize the *convenience* provided by convenience PIN, but it stills uses a password for authentication. Microsoft recommends customers using Windows 10 and convenience PINs should move to Windows Hello for Business. New Windows 10 deployments should deploy Windows Hello for Business and not convenience PINs. Microsoft will be deprecating convenience PINs in the future and will publish the date early to ensure customers have adequate lead time to deploy Windows Hello for Business. - -## Can I use Windows Hello for Business key trust and RDP? -RDP currently does not support using key based authentication and self signed certificates as supplied credentials. RDP with supplied credentials Windows Hello for Business is currently only supported with certificate based deployments. Windows Hello for Business key trust can be used with [Windows Defender Remote Credential Guard](https://docs.microsoft.com/windows/security/identity-protection/remote-credential-guard). - -## Can I deploy Windows Hello for Business using Microsoft Endpoint Configuration Manager? -Windows Hello for Business deployments using Configuration Manager should use the hybrid deployment model that uses Active Directory Federation Services. Starting in Configuration Manager version 1910, certificate-based authentication with Windows Hello for Business settings isn't supported. Key-based authentication is still valid with Configuration Manager. For more information, see [Windows Hello for Business settings in Configuration Manager](https://docs.microsoft.com/configmgr/protect/deploy-use/windows-hello-for-business-settings). - -## How many users can enroll for Windows Hello for Business on a single Windows 10 computer? -The maximum number of supported enrollments on a single Windows 10 computer is 10. That enables 10 users to each enroll their face and up to 10 fingerprints. While we support 10 enrollments, we will strongly encourage the use of Windows Hello security keys for the shared computer scenario when they become available. - -## How can a PIN be more secure than a password? -When using Windows Hello for Business, the PIN is not a symmetric key where is the password is a symmetric key. With passwords, there is a server that has some representation of the password. With Windows Hello for Business, the PIN is user provided entropy used to load the private key in the TPM. The server does not have a copy of the PIN. For that matter, the Windows client does not have a copy of the current PIN either. The user must provide the entropy, the TPM protected key, and the TPM that generated that key to successfully have access to the private key. - -The statement "PIN is stronger than Password" is not directed at the strength of the entropy used by the PIN. It is about the difference of providing entropy vs continuing the use of a symmetric key (the password). The TPM has anti-hammering features which thwart brute-force PIN attacks (an attackers continuous attempt to try all combination of PINs). Some organizations may worry about shoulder surfing. For those organizations, rather than increased the complexity of the PIN, implement the [Multifactor Unlock](feature-multifactor-unlock.md) feature. - -## Why is the Key Admins group missing, I have Windows Server 2016 domain controller(s)? -The **Key Admins** and **Enterprise Key Admins** groups are created when you install the first Windows Server 2016 domain controller into a domain. Domain controllers running previous versions of Windows Server cannot translate the security identifier (SID) to a name. To resolve this, transfer the PDC emulator domain role to a domain controller running Windows Server 2016. - -## Can I use a convenience PIN with Azure AD? -It is currently possible to set a convenience PIN on Azure Active Directory Joined or Hybrid Active Directory Joined devices. Convenience PIN is not supported for Azure Active Directory user accounts (synchronized identities included). It is only supported for on-premises Domain Joined users and local account users. - -## Can I use an external camera when my laptop is closed or docked? -No. Windows 10 currently only supports one Windows Hello for Business camera and does not fluidly switch to an external camera when the computer is docked with the lid closed. The product group is aware of this and is investigating this topic further. - -## Why does authentication fail immediately after provisioning Hybrid Key Trust? -In a hybrid deployment, a user's public key must sync from Azure AD to AD before it can be used to authenticate against a domain controller. This sync is handled by Azure AD Connect and will occur during a normal sync cycle. - -## What is the password-less strategy? -Watch Principal Program Manager Karanbir Singh's Ignite 2017 presentation **Microsoft's guide for going password-less**. - -[Microsoft's password-less strategy](hello-videos.md#microsofts-passwordless-strategy) - -## What is the user experience for Windows Hello for Business? -The user experience for Windows Hello for Business occurs after user sign-in, after you deploy Windows Hello for Business policy settings to your environment. - -[Windows Hello for Business user enrollment experience](hello-videos.md#windows-hello-for-business-user-enrollment-experience) - -## What happens when my user forgets their PIN? -If the user can sign-in with a password, they can reset their PIN by clicking the "I forgot my PIN" link in settings. Beginning with Windows 10 1709, users can reset their PIN above the lock screen by clicking the "I forgot my PIN" link on the PIN credential provider. - -[Windows Hello for Business forgotten PIN user experience](hello-videos.md#windows-hello-for-business-forgotten-pin-user-experience) - -For on-premises deployments, devices must be well-connected to their on-premises network (domain controllers and/or certificate authority) to reset their PINs. Hybrid customers can on-board their Azure tenant to use the Windows Hello for Business PIN reset service to reset their PINs without access to their corporate network. - -## What URLs do I need to allow for a hybrid deployment? -Communicating with Azure Active Directory uses the following URLs: -- enterpriseregistration.windows.net -- login.microsoftonline.com -- login.windows.net -- account.live.com -- accountalt.azureedge.net -- secure.aadcdn.microsoftonline-p.com - -If your environment uses Microsoft Intune, you need these additional URLs: -- enrollment.manage.microsoft.com -- portal.manage.microsoft.com - -## What is the difference between non-destructive and destructive PIN reset? -Windows Hello for Business has two types of PIN reset: non-destructive and destructive. Organizations running Windows 10 Enterprise and Azure Active Directory can take advantage of the Microsoft PIN Reset service. Once on-boarded to a tenant and deployed to computers, users who have forgotten their PINs can authenticate to Azure, provided a second factor of authentication, and reset their PIN without re-provisioning a new Windows Hello for Business enrollment. This is a non-destructive PIN reset because the user does not delete the current credential and obtain a new one. Read [PIN Reset](hello-feature-pin-reset.md) page for more information. - -Organizations that have the on-premises deployment of Windows Hello for Business, or those not using Windows 10 Enterprise can use destructive PIN reset. with destructive PIN reset, users that have forgotten their PIN can authenticate using their password, perform a second factor of authentication to re-provision their Windows Hello for Business credential. Re-provisioning deletes the old credential and requests a new credential and certificate. On-premises deployments need network connectivity to their domain controllers, Active Directory Federation Services, and their issuing certificate authority to perform a destructive PIN reset. Also, for hybrid deployments, destructive PIN reset is only supported with the certificate trust model and the latest updates to Active Directory Federation Services. - -## Which is better or more secure: Key trust or Certificate trust? -The trust models of your deployment determine how you authenticate to Active Directory (on-premises). Both key trust and certificate trust use the same hardware-backed, two-factor credential. The difference between the two trust types are: -- Required domain controllers -- Issuing end entity certificates - -The **key trust** model authenticates to Active Directory using a raw key. Windows Server 2016 domain controllers enables this authentication. Key trust authenticate does not require an enterprise issued certificate, therefore you do not need to issue certificates to your end users (domain controller certificates are still needed). - -The **certificate trust** model authenticates to Active Directory using a certificate. Because this authentication uses a certificate, domain controllers running previous versions of Windows Server can authenticate the user. Therefore, you need to issue certificates to your end users, but you do not need Windows Server 2016 domain controllers. The certificate used in certificate trust uses the TPM protected private key to request a certificate from your enterprise's issuing certificate authority. - -## Do I need Windows Server 2016 domain controllers? -There are many deployment options from which to choose. Some of those options require an adequate number of Windows Server 2016 domain controllers in the site where you have deployed Windows Hello for Business. There are other deployment options that use existing Windows Server 2008 R2 or later domain controllers. Choose the deployment option that best suits your environment. - -## What attributes are synchronized by Azure AD Connect with Windows Hello for Business? -Review [Azure AD Connect sync: Attributes synchronized to Azure Active Directory](https://docs.microsoft.com/azure/active-directory/connect/active-directory-aadconnectsync-attributes-synchronized) for a list of attributes that are sync based on scenarios. The base scenarios that include Windows Hello for Business are [Windows 10](https://docs.microsoft.com/azure/active-directory/connect/active-directory-aadconnectsync-attributes-synchronized#windows-10) scenario and the [Device writeback](https://docs.microsoft.com/azure/active-directory/connect/active-directory-aadconnectsync-attributes-synchronized#device-writeback) scenario. Your environment may include additional attributes. - -## Is Windows Hello for Business multifactor authentication? -Windows Hello for Business is two-factor authentication based on the observed authentication factors of: something you have, something you know, and something part of you. Windows Hello for Business incorporates two of these factors: something you have (the user's private key protected by the device's security module) and something you know (your PIN). With the proper hardware, you can enhance the user experience by introducing biometrics. Using biometrics, you can replace the "something you know" authentication factor with the "something that is part of you" factor, with the assurances that users can fall back to the "something you know factor". - -## What are the biometric requirements for Windows Hello for Business? -Read [Windows Hello biometric requirements](https://docs.microsoft.com/windows-hardware/design/device-experiences/windows-hello-biometric-requirements) for more information. - -## Can I use both a PIN and biometrics to unlock my device? -Starting in Windows 10, version 1709, you can use multi-factor unlock to require the user to provide an additional factor to unlock the device. Authentication remains two-factor, but another factor is required before Windows allows the user to reach the desktop. Read more about [multifactor unlock](feature-multifactor-unlock.md). - -## What is the difference between Windows Hello and Windows Hello for Business? -Windows Hello represents the biometric framework provided in Windows 10. Windows Hello enables users to use biometrics to sign into their devices by securely storing their user name and password and releasing it for authentication when the user successfully identifies themselves using biometrics. Windows Hello for Business uses asymmetric keys protected by the device's security module that requires a user gesture (PIN or biometrics) to authenticate. - -## Why can't I enroll biometrics for my local built-in Administrator? -Windows 10 does not allow the local administrator to enroll biometric gestures (face or fingerprint). - -## I have extended Active Directory to Azure Active Directory. Can I use the on-premises deployment model? -No. If your organization is federated or using on-line services, such as Azure AD Connect, Office 365, or OneDrive, then you must use a hybrid deployment model. On-premises deployments are exclusive to organization who need more time before moving to the cloud and exclusively use Active Directory. - -## Does Windows Hello for Business prevent the use of simple PINs? -Yes. Our simple PIN algorithm looks for and disallows any PIN that has a constant delta from one digit to the next. The algorithm counts the number of steps required to reach the next digit, overflowing at ten ('zero'). -So, for example: -* The PIN 1111 has a constant delta of (0,0,0), so it is not allowed -* The PIN 1234 has a constant delta of (1,1,1), so it is not allowed -* The PIN 1357 has a constant delta of (2,2,2), so it is not allowed -* The PIN 9630 has a constant delta of (7,7,7), so it is not allowed -* The PIN 1593 has a constant delta of (4,4,4), so it is not allowed -* The PIN 7036 has a constant delta of (3,3,3), so it is not allowed -* The PIN 1231 does not have a constant delta (1,1,8), so it is allowed -* The PIN 1872 does not have a constant delta (7,9,5), so it is allowed - -This prevents repeating numbers, sequential numbers, and simple patterns. -It always results in a list of 100 disallowed PINs (independent of the PIN length). -This algorithm does not apply to alphanumeric PINs. - -## How does PIN caching work with Windows Hello for Business? - -Windows Hello for Business provides a PIN caching user experience using a ticketing system. Rather than caching a PIN, processes cache a ticket they can use to request private key operations. Azure AD and Active Directory sign-in keys are cached under lock. This means the keys remain available for use without prompting as long as the user is interactively signed-in. Microsoft Account sign-in keys are considered transactional keys, which means the user is always prompted when accessing the key. - -Beginning with Windows 10, version 1709, Windows Hello for Business used as a smart card (smart card emulation that is enabled by default) provides the same user experience of default smart card PIN caching. Each process requesting a private key operation will prompt the user for the PIN on first use. Subsequent private key operations will not prompt the user for the PIN. - -The smart card emulation feature of Windows Hello for Business verifies the PIN and then discards the PIN in exchange for a ticket. The process does not receive the PIN, but rather the ticket that grants them private key operations. Windows 10 does not provide any Group Policy settings to adjust this caching. - -## Can I disable the PIN while using Windows Hello for Business? -No. The movement away from passwords is accomplished by gradually reducing the use of the password. In the occurrence where you cannot authenticate with biometrics, you need a fallback mechanism that is not a password. The PIN is the fallback mechanism. Disabling or hiding the PIN credential provider will disable the use of biometrics. - -## How are keys protected? -Wherever possible, Windows Hello for Business takes advantage of trusted platform module (TPM) 2.0 hardware to generate and protect keys. However, Windows Hello and Windows Hello for Business does not require a TPM. Administrators can choose to allow key operations in software. - -Whenever possible, Microsoft strongly recommends the use of TPM hardware. The TPM protects against a variety of known and potential attacks, including PIN brute-force attacks. The TPM provides an additional layer of protection after an account lockout, too. When the TPM has locked the key material, the user will have to reset the PIN (which means he or she will have to use MFA to re-authenticate to the IDP before the IDP allows him or her to re-register). - -## Can Windows Hello for Business work in air-gapped environments? -Yes. You can use the on-premises Windows Hello for Business deployment and combine it with a third-party MFA provider that does not require Internet connectivity to achieve an air-gapped Windows Hello for Business deployment. - -## Can I use third-party authentication providers with Windows Hello for Business? -Yes, if you are federated hybrid deployment, you can use any third-party that provides an Active Directory Federation Services (AD FS) multi-factor authentication adapter. A list of third-party MFA adapters can be found [here](https://docs.microsoft.com/windows-server/identity/ad-fs/operations/configure-additional-authentication-methods-for-ad-fs#microsoft-and-third-party-additional-authentication-methods). - -## Does Windows Hello for Business work with third party federation servers? -Windows Hello for Business can work with any third-party federation servers that support the protocols used during provisioning experience. Interested third-parties can inquiry at [whfbfeedback@microsoft.com](mailto:whfbfeedback@microsoft.com?subject=collaboration). - -| Protocol | Description | -| :---: | :--- | -| [[MS-KPP]: Key Provisioning Protocol](https://msdn.microsoft.com/library/mt739755.aspx) | Specifies the Key Provisioning Protocol, which defines a mechanism for a client to register a set of cryptographic keys on a user and device pair. | -| [[MS-OAPX]: OAuth 2.0 Protocol Extensions](https://msdn.microsoft.com/library/dn392779.aspx)| Specifies the OAuth 2.0 Protocol Extensions, which are used to extend the OAuth 2.0 Authorization Framework. These extensions enable authorization features such as resource specification, request identifiers, and login hints. | -| [[MS-OAPXBC]: OAuth 2.0 Protocol Extensions for Broker Clients](https://msdn.microsoft.com/library/mt590278.aspx) | Specifies the OAuth 2.0 Protocol Extensions for Broker Clients, extensions to RFC6749 (The OAuth 2.0 Authorization Framework) that allow a broker client to obtain access tokens on behalf of calling clients. | -| [[MS-OIDCE]: OpenID Connect 1.0 Protocol Extensions](https://msdn.microsoft.com/library/mt766592.aspx) | Specifies the OpenID Connect 1.0 Protocol Extensions. These extensions define additional claims to carry information about the end user, including the user principal name, a locally unique identifier, a time for password expiration, and a URL for password change. These extensions also define additional provider meta-data that enable the discovery of the issuer of access tokens and give additional information about provider capabilities. | - -## Does Windows Hello for Business work with Mac and Linux clients? -Windows Hello for Business is a feature of Windows 10. At this time, Microsoft is not developing clients for other platforms. However, Microsoft is open to third parties who are interested in moving these platforms away from passwords. Interested third parties can get more information by emailing [whfbfeedback@microsoft.com](mailto:whfbfeedback@microsoft.com?subject=collaboration). diff --git a/windows/security/identity-protection/hello-for-business/hello-faq.yml b/windows/security/identity-protection/hello-for-business/hello-faq.yml new file mode 100644 index 0000000000..d4db9fb009 --- /dev/null +++ b/windows/security/identity-protection/hello-for-business/hello-faq.yml @@ -0,0 +1,209 @@ +### YamlMime:FAQ +metadata: + title: Windows Hello for Business Frequently Asked Questions + description: Use these frequently asked questions (FAQ) to learn important details about Windows Hello for Business. + keywords: identity, PIN, biometric, Hello, passport + ms.prod: w10 + ms.mktglfcycl: deploy + ms.sitesec: library + ms.pagetype: security, mobile + audience: ITPro + author: mapalko + ms.author: mapalko + manager: dansimp + ms.collection: M365-identity-device-management + ms.topic: article + localizationpriority: medium + ms.date: 08/19/2018 + ms.reviewer: + +title: Windows Hello for Business Frequently Asked Questions +summary: | + **Applies to** + - Windows 10 + + +sections: + - name: Ignored + questions: + - question: What about virtual smart cards? + answer: | + Windows Hello for Business is the modern, two-factor credential for Windows 10. Microsoft will be deprecating virtual smart cards in the future, but no date is set at this time. Customers using Windows 10 and virtual smart cards should move to Windows Hello for Business. Microsoft will publish the date early to ensure customers have adequate lead time to move to Windows Hello for Business. Microsoft recommends that new Windows 10 deployments use Windows Hello for Business. Virtual smart card remain supported for Windows 7 and Windows 8. + + - question: What about convenience PIN? + answer: | + Microsoft is committed to its vision of a world without passwords. We recognize the *convenience* provided by convenience PIN, but it stills uses a password for authentication. Microsoft recommends that customers using Windows 10 and convenience PINs should move to Windows Hello for Business. New Windows 10 deployments should deploy Windows Hello for Business and not convenience PINs. Microsoft will be deprecating convenience PINs in the future and will publish the date early to ensure customers have adequate lead time to deploy Windows Hello for Business. + + - question: Can I use Windows Hello for Business key trust and RDP? + answer: | + Remote Desktop Protocol (RDP) does not currently support using key-based authentication and self-signed certificates as supplied credentials. RDP with supplied credentials is currently only supported with certificate-based deployments. Windows Hello for Business key trust can be used with [Windows Defender Remote Credential Guard](https://docs.microsoft.com/windows/security/identity-protection/remote-credential-guard). + + - question: Can I deploy Windows Hello for Business by using Microsoft Endpoint Configuration Manager? + answer: | + Windows Hello for Business deployments using Configuration Manager should follow the hybrid deployment model that uses Active Directory Federation Services. Starting in Configuration Manager version 1910, certificate-based authentication with Windows Hello for Business settings isn't supported. Key-based authentication is still valid with Configuration Manager. For more information, see [Windows Hello for Business settings in Configuration Manager](https://docs.microsoft.com/configmgr/protect/deploy-use/windows-hello-for-business-settings). + + - question: How many users can enroll for Windows Hello for Business on a single Windows 10 computer? + answer: | + The maximum number of supported enrollments on a single Windows 10 computer is 10. This lets 10 users each enroll their face and up to 10 fingerprints. While we support 10 enrollments, we will strongly encourage the use of Windows Hello security keys for the shared computer scenario when they become available. + + - question: How can a PIN be more secure than a password? + answer: | + When using Windows Hello for Business, the PIN is not a symmetric key, whereas the password is a symmetric key. With passwords, there's a server that has some representation of the password. With Windows Hello for Business, the PIN is user-provided entropy used to load the private key in the Trusted Platform Module (TPM). The server does not have a copy of the PIN. For that matter, the Windows client does not have a copy of the current PIN either. The user must provide the entropy, the TPM-protected key, and the TPM that generated that key in order to successfully access the private key. + + The statement "PIN is stronger than Password" is not directed at the strength of the entropy used by the PIN. It's about the difference between providing entropy versus continuing the use of a symmetric key (the password). The TPM has anti-hammering features that thwart brute-force PIN attacks (an attacker's continuous attempt to try all combination of PINs). Some organizations may worry about shoulder surfing. For those organizations, rather than increase the complexity of the PIN, implement the [Multifactor Unlock](feature-multifactor-unlock.md) feature. + + - question: I have Windows Server 2016 domain controller(s), so why is the Key Admins group missing? + answer: | + The **Key Admins** and **Enterprise Key Admins** groups are created when you install the first Windows Server 2016 domain controller into a domain. Domain controllers running previous versions of Windows Server cannot translate the security identifier (SID) to a name. To resolve this, transfer the PDC emulator domain role to a domain controller running Windows Server 2016. + + - question: Can I use a convenience PIN with Azure Active Directory? + answer: | + It's currently possible to set a convenience PIN on Azure Active Directory Joined or Hybrid Active Directory Joined devices. Convenience PIN is not supported for Azure Active Directory user accounts (synchronized identities included). It's only supported for on-premises Domain Joined users and local account users. + + - question: Can I use an external camera when my laptop is closed or docked? + answer: | + No. Windows 10 currently only supports one Windows Hello for Business camera and does not fluidly switch to an external camera when the computer is docked with the lid closed. The product group is aware of this and is investigating this topic further. + + - question: Why does authentication fail immediately after provisioning Hybrid Key Trust? + answer: | + In a hybrid deployment, a user's public key must sync from Azure AD to AD before it can be used to authenticate against a domain controller. This sync is handled by Azure AD Connect and will occur during a normal sync cycle. + + - question: What is the password-less strategy? + answer: | + Watch Principal Program Manager Karanbir Singh's **Microsoft's guide for going password-less** Ignite 2017 presentation. + + [Microsoft's password-less strategy](hello-videos.md#microsofts-passwordless-strategy) + + - question: What is the user experience for Windows Hello for Business? + answer: | + The user experience for Windows Hello for Business occurs after user sign-in, after you deploy Windows Hello for Business policy settings to your environment. + + [Windows Hello for Business user enrollment experience](hello-videos.md#windows-hello-for-business-user-enrollment-experience) + + - question: What happens when a user forgets their PIN? + answer: | + If the user can sign-in with a password, they can reset their PIN by selecting the "I forgot my PIN" link under Settings. Beginning with Windows 10 1709, users can reset their PIN above the lock screen by selecting the "I forgot my PIN" link on the PIN credential provider. + + [Windows Hello for Business forgotten PIN user experience](hello-videos.md#windows-hello-for-business-forgotten-pin-user-experience) + + For on-premises deployments, devices must be well-connected to their on-premises network (domain controllers and/or certificate authority) to reset their PINs. Hybrid customers can on-board their Azure tenant to use the Windows Hello for Business PIN reset service to reset their PINs without access to their corporate network. + + - question: What URLs do I need to allow for a hybrid deployment? + answer: | + Communicating with Azure Active Directory uses the following URLs: + - enterpriseregistration.windows.net + - login.microsoftonline.com + - login.windows.net + - account.live.com + - accountalt.azureedge.net + - secure.aadcdn.microsoftonline-p.com + + If your environment uses Microsoft Intune, you need these additional URLs: + - enrollment.manage.microsoft.com + - portal.manage.microsoft.com + + - question: What is the difference between non-destructive and destructive PIN reset? + answer: | + Windows Hello for Business has two types of PIN reset: non-destructive and destructive. Organizations running Windows 10 Enterprise and Azure Active Directory can take advantage of the Microsoft PIN Reset service. Once onboarded to a tenant and deployed to computers, users who have forgotten their PINs can authenticate to Azure, provide a second factor of authentication, and reset their PIN without re-provisioning a new Windows Hello for Business enrollment. This is a non-destructive PIN reset because the user doesn't delete the current credential and obtain a new one. For more information, see [PIN Reset](hello-feature-pin-reset.md). + + Organizations that have the on-premises deployment of Windows Hello for Business, or those not using Windows 10 Enterprise can use destructive PIN reset. With destructive PIN reset, users that have forgotten their PIN can authenticate by using their password and then performing a second factor of authentication to re-provision their Windows Hello for Business credential. Re-provisioning deletes the old credential and requests a new credential and certificate. On-premises deployments need network connectivity to their domain controllers, Active Directory Federation Services, and their issuing certificate authority to perform a destructive PIN reset. Also, for hybrid deployments, destructive PIN reset is only supported with the certificate trust model and the latest updates to Active Directory Federation Services. + + - question: | + Which is better or more secure: key trust or certificate trust? + answer: | + The trust models of your deployment determine how you authenticate to Active Directory (on-premises). Both key trust and certificate trust use the same hardware-backed, two-factor credential. The difference between the two trust types are: + - Required domain controllers + - Issuing end entity certificates + + The **key trust** model authenticates to Active Directory by using a raw key. Windows Server 2016 domain controllers enable this authentication. Key trust authenticate does not require an enterprise issued certificate, therefore you don't need to issue certificates to users (domain controller certificates are still needed). + + The **certificate trust** model authenticates to Active Directory by using a certificate. Because this authentication uses a certificate, domain controllers running previous versions of Windows Server can authenticate the user. Therefore, you need to issue certificates to users, but you don't need Windows Server 2016 domain controllers. The certificate used in certificate trust uses the TPM-protected private key to request a certificate from your enterprise's issuing certificate authority. + + - question: Do I need Windows Server 2016 domain controllers? + answer: | + There are many deployment options from which to choose. Some of those options require an adequate number of Windows Server 2016 domain controllers in the site where you've deployed Windows Hello for Business. There are other deployment options that use existing Windows Server 2008 R2 or later domain controllers. Choose the deployment option that best suits your environment. + + - question: What attributes are synchronized by Azure AD Connect with Windows Hello for Business? + answer: | + Review [Azure AD Connect sync: Attributes synchronized to Azure Active Directory](https://docs.microsoft.com/azure/active-directory/connect/active-directory-aadconnectsync-attributes-synchronized) for a list of attributes that sync based on scenarios. The base scenarios that include Windows Hello for Business are the [Windows 10](https://docs.microsoft.com/azure/active-directory/connect/active-directory-aadconnectsync-attributes-synchronized#windows-10) scenario and the [Device writeback](https://docs.microsoft.com/azure/active-directory/connect/active-directory-aadconnectsync-attributes-synchronized#device-writeback) scenario. Your environment may include additional attributes. + + - question: Is Windows Hello for Business multifactor authentication? + answer: | + Windows Hello for Business is two-factor authentication based on the observed authentication factors of: something you have, something you know, and something that's part of you. Windows Hello for Business incorporates two of these factors: something you have (the user's private key protected by the device's security module) and something you know (your PIN). With the proper hardware, you can enhance the user experience by introducing biometrics. By using biometrics, you can replace the "something you know" authentication factor with the "something that is part of you" factor, with the assurances that users can fall back to the "something you know factor". + + - question: What are the biometric requirements for Windows Hello for Business? + answer: | + Read [Windows Hello biometric requirements](https://docs.microsoft.com/windows-hardware/design/device-experiences/windows-hello-biometric-requirements) for more information. + + - question: Can I use both a PIN and biometrics to unlock my device? + answer: | + Starting in Windows 10, version 1709, you can use multi-factor unlock to require users to provide an additional factor to unlock their device. Authentication remains two-factor, but another factor is required before Windows allows the user to reach the desktop. To learn more, see [Multifactor Unlock](feature-multifactor-unlock.md). + + - question: What's the difference between Windows Hello and Windows Hello for Business? + answer: | + Windows Hello represents the biometric framework provided in Windows 10. Windows Hello lets users use biometrics to sign in to their devices by securely storing their user name and password and releasing it for authentication when the user successfully identifies themselves using biometrics. Windows Hello for Business uses asymmetric keys protected by the device's security module that requires a user gesture (PIN or biometrics) to authenticate. + + - question: Why can't I enroll biometrics for my local, built-in administrator? + answer: | + Windows 10 does not allow the local administrator to enroll biometric gestures (face or fingerprint). + + - question: I have extended Active Directory to Azure Active Directory. Can I use the on-premises deployment model? + answer: | + No. If your organization is federated or using online services, such as Azure AD Connect, Office 365, or OneDrive, then you must use a hybrid deployment model. On-premises deployments are exclusive to organizations who need more time before moving to the cloud and exclusively use Active Directory. + + - question: Does Windows Hello for Business prevent the use of simple PINs? + answer: | + Yes. Our simple PIN algorithm looks for and disallows any PIN that has a constant delta from one digit to the next. The algorithm counts the number of steps required to reach the next digit, overflowing at ten ('zero'). + So, for example: + + - The PIN 1111 has a constant delta of (0,0,0), so it is not allowed + - The PIN 1234 has a constant delta of (1,1,1), so it is not allowed + - The PIN 1357 has a constant delta of (2,2,2), so it is not allowed + - The PIN 9630 has a constant delta of (7,7,7), so it is not allowed + - The PIN 1593 has a constant delta of (4,4,4), so it is not allowed + - The PIN 7036 has a constant delta of (3,3,3), so it is not allowed + - The PIN 1231 does not have a constant delta (1,1,8), so it is allowed + - The PIN 1872 does not have a constant delta (7,9,5), so it is allowed + + This prevents repeating numbers, sequential numbers, and simple patterns. It always results in a list of 100 disallowed PINs (independent of the PIN length). This algorithm does not apply to alphanumeric PINs. + + - question: How does PIN caching work with Windows Hello for Business? + answer: | + Windows Hello for Business provides a PIN caching user experience by using a ticketing system. Rather than caching a PIN, processes cache a ticket they can use to request private key operations. Azure AD and Active Directory sign-in keys are cached under lock. This means the keys remain available for use without prompting, as long as the user is interactively signed-in. Microsoft Account sign-in keys are considered transactional keys, which means the user is always prompted when accessing the key. + + Beginning with Windows 10, version 1709, Windows Hello for Business used as a smart card (smart card emulation that is enabled by default) provides the same user experience of default smart card PIN caching. Each process requesting a private key operation will prompt the user for the PIN on first use. Subsequent private key operations will not prompt the user for the PIN. + + The smart card emulation feature of Windows Hello for Business verifies the PIN and then discards the PIN in exchange for a ticket. The process does not receive the PIN, but rather the ticket that grants them private key operations. Windows 10 does not provide any Group Policy settings to adjust this caching. + + - question: Can I disable the PIN while using Windows Hello for Business? + answer: | + No. The movement away from passwords is accomplished by gradually reducing the use of the password. In situations where you can't authenticate by using biometrics, you need a fallback mechanism that is not a password. The PIN is the fallback mechanism. Disabling or hiding the PIN credential provider will disable the use of biometrics. + + - question: How are keys protected? + answer: | + Wherever possible, Windows Hello for Business takes advantage of Trusted Platform Module (TPM) 2.0 hardware to generate and protect keys. However, Windows Hello and Windows Hello for Business do not require a TPM. Administrators can choose to allow key operations in software. + + Whenever possible, Microsoft strongly recommends the use of TPM hardware. The TPM protects against a variety of known and potential attacks, including PIN brute-force attacks. The TPM provides an additional layer of protection after an account lockout, too. When the TPM has locked the key material, the user will need to reset the PIN (which means they'll need to use MFA to re-authenticate to the IDP before the IDP allows them to re-register). + + - question: Can Windows Hello for Business work in air-gapped environments? + answer: | + Yes. You can use the on-premises Windows Hello for Business deployment and combine it with a third-party MFA provider that does not require internet connectivity to achieve an air-gapped Windows Hello for Business deployment. + + - question: Can I use third-party authentication providers with Windows Hello for Business? + answer: | + Yes, if you're using federated hybrid deployment, you can use any third-party that provides an Active Directory Federation Services (AD FS) multi-factor authentication adapter. A list of third-party MFA adapters can be found [here](https://docs.microsoft.com/windows-server/identity/ad-fs/operations/configure-additional-authentication-methods-for-ad-fs#microsoft-and-third-party-additional-authentication-methods). + + - question: Does Windows Hello for Business work with third party federation servers? + answer: | + Windows Hello for Business works with any third-party federation servers that support the protocols used during the provisioning experience. Interested third-parties can inquiry at [whfbfeedback@microsoft.com](mailto:whfbfeedback@microsoft.com?subject=collaboration). + + | Protocol | Description | + | :---: | :--- | + | [[MS-KPP]: Key Provisioning Protocol](https://msdn.microsoft.com/library/mt739755.aspx) | Specifies the Key Provisioning Protocol, which defines a mechanism for a client to register a set of cryptographic keys on a user and device pair. | + | [[MS-OAPX]: OAuth 2.0 Protocol Extensions](https://msdn.microsoft.com/library/dn392779.aspx)| Specifies the OAuth 2.0 Protocol Extensions, which are used to extend the OAuth 2.0 Authorization Framework. These extensions enable authorization features such as resource specification, request identifiers, and login hints. | + | [[MS-OAPXBC]: OAuth 2.0 Protocol Extensions for Broker Clients](https://msdn.microsoft.com/library/mt590278.aspx) | Specifies the OAuth 2.0 Protocol Extensions for Broker Clients, extensions to RFC6749 (the OAuth 2.0 Authorization Framework) that allow a broker client to obtain access tokens on behalf of calling clients. | + | [[MS-OIDCE]: OpenID Connect 1.0 Protocol Extensions](https://msdn.microsoft.com/library/mt766592.aspx) | Specifies the OpenID Connect 1.0 Protocol Extensions. These extensions define additional claims to carry information about the user, including the user principal name, a locally unique identifier, a time for password expiration, and a URL for password change. These extensions also define additional provider meta-data that enables the discovery of the issuer of access tokens and gives additional information about provider capabilities. | + + - question: Does Windows Hello for Business work with Mac and Linux clients? + answer: | + Windows Hello for Business is a feature of Windows 10. At this time, Microsoft is not developing clients for other platforms. However, Microsoft is open to third-parties who are interested in moving these platforms away from passwords. Interested third-parties can get more information by emailing [whfbfeedback@microsoft.com](mailto:whfbfeedback@microsoft.com?subject=collaboration). \ No newline at end of file diff --git a/windows/security/identity-protection/hello-for-business/toc.md b/windows/security/identity-protection/hello-for-business/toc.md index 8ec19c126f..3913ea8734 100644 --- a/windows/security/identity-protection/hello-for-business/toc.md +++ b/windows/security/identity-protection/hello-for-business/toc.md @@ -63,7 +63,7 @@ ## [Windows Hello and password changes](hello-and-password-changes.md) ## [Prepare people to use Windows Hello](hello-prepare-people-to-use.md) -## [Windows Hello for Business Frequently Asked Questions (FAQ)](hello-faq.md) +## [Windows Hello for Business Frequently Asked Questions (FAQ)](hello-faq.yml) ### [Windows Hello for Business Videos](hello-videos.md) ## [Windows Hello errors during PIN creation](hello-errors-during-pin-creation.md) From 6d992ebbf491e2b1b06dd6996f090bd2820d1971 Mon Sep 17 00:00:00 2001 From: Shari Kjerland <30906736+SKjerland@users.noreply.github.com> Date: Wed, 16 Dec 2020 17:54:44 -0800 Subject: [PATCH 125/486] Minor fixes --- browsers/edge/microsoft-edge-faq.yml | 2 +- .../hello-for-business/hello-faq.yml | 13 ++++++------- 2 files changed, 7 insertions(+), 8 deletions(-) diff --git a/browsers/edge/microsoft-edge-faq.yml b/browsers/edge/microsoft-edge-faq.yml index e6f27046bd..2cf801b44d 100644 --- a/browsers/edge/microsoft-edge-faq.yml +++ b/browsers/edge/microsoft-edge-faq.yml @@ -15,7 +15,7 @@ metadata: title: Frequently Asked Questions (FAQs) for IT Pros summary: | - >Applies to: Microsoft Edge on Windows 10 and Windows 10 Mobile + Applies to: Microsoft Edge on Windows 10 and Windows 10 Mobile > [!NOTE] > You've reached the documentation for Microsoft Edge version 45 and earlier. To see the documentation for Microsoft Edge version 77 or later, go to the [Microsoft Edge documentation landing page](https://docs.microsoft.com/DeployEdge/). diff --git a/windows/security/identity-protection/hello-for-business/hello-faq.yml b/windows/security/identity-protection/hello-for-business/hello-faq.yml index d4db9fb009..92e87082b1 100644 --- a/windows/security/identity-protection/hello-for-business/hello-faq.yml +++ b/windows/security/identity-protection/hello-for-business/hello-faq.yml @@ -19,8 +19,7 @@ metadata: title: Windows Hello for Business Frequently Asked Questions summary: | - **Applies to** - - Windows 10 + Applies to: Windows 10 sections: @@ -64,7 +63,7 @@ sections: answer: | No. Windows 10 currently only supports one Windows Hello for Business camera and does not fluidly switch to an external camera when the computer is docked with the lid closed. The product group is aware of this and is investigating this topic further. - - question: Why does authentication fail immediately after provisioning Hybrid Key Trust? + - question: Why does authentication fail immediately after provisioning hybrid key trust? answer: | In a hybrid deployment, a user's public key must sync from Azure AD to AD before it can be used to authenticate against a domain controller. This sync is handled by Azure AD Connect and will occur during a normal sync cycle. @@ -82,7 +81,7 @@ sections: - question: What happens when a user forgets their PIN? answer: | - If the user can sign-in with a password, they can reset their PIN by selecting the "I forgot my PIN" link under Settings. Beginning with Windows 10 1709, users can reset their PIN above the lock screen by selecting the "I forgot my PIN" link on the PIN credential provider. + If the user can sign-in with a password, they can reset their PIN by selecting the "I forgot my PIN" link in Settings. Beginning with Windows 10 1709, users can reset their PIN above the lock screen by selecting the "I forgot my PIN" link on the PIN credential provider. [Windows Hello for Business forgotten PIN user experience](hello-videos.md#windows-hello-for-business-forgotten-pin-user-experience) @@ -102,7 +101,7 @@ sections: - enrollment.manage.microsoft.com - portal.manage.microsoft.com - - question: What is the difference between non-destructive and destructive PIN reset? + - question: What's the difference between non-destructive and destructive PIN reset? answer: | Windows Hello for Business has two types of PIN reset: non-destructive and destructive. Organizations running Windows 10 Enterprise and Azure Active Directory can take advantage of the Microsoft PIN Reset service. Once onboarded to a tenant and deployed to computers, users who have forgotten their PINs can authenticate to Azure, provide a second factor of authentication, and reset their PIN without re-provisioning a new Windows Hello for Business enrollment. This is a non-destructive PIN reset because the user doesn't delete the current credential and obtain a new one. For more information, see [PIN Reset](hello-feature-pin-reset.md). @@ -193,9 +192,9 @@ sections: answer: | Yes, if you're using federated hybrid deployment, you can use any third-party that provides an Active Directory Federation Services (AD FS) multi-factor authentication adapter. A list of third-party MFA adapters can be found [here](https://docs.microsoft.com/windows-server/identity/ad-fs/operations/configure-additional-authentication-methods-for-ad-fs#microsoft-and-third-party-additional-authentication-methods). - - question: Does Windows Hello for Business work with third party federation servers? + - question: Does Windows Hello for Business work with third-party federation servers? answer: | - Windows Hello for Business works with any third-party federation servers that support the protocols used during the provisioning experience. Interested third-parties can inquiry at [whfbfeedback@microsoft.com](mailto:whfbfeedback@microsoft.com?subject=collaboration). + Windows Hello for Business works with any third-party federation servers that support the protocols used during the provisioning experience. Interested third-parties can inquiry at [whfbfeedback@microsoft.com](mailto:whfbfeedback@microsoft.com?subject=collaboration).

    | Protocol | Description | | :---: | :--- | From fc5ce1e0f586ff8ef5e46eff8bc639a509c51de6 Mon Sep 17 00:00:00 2001 From: Shari Kjerland <30906736+SKjerland@users.noreply.github.com> Date: Wed, 16 Dec 2020 18:03:55 -0800 Subject: [PATCH 126/486] Minor fixes --- browsers/edge/TOC.md | 2 +- browsers/edge/microsoft-edge-faq.yml | 4 ++-- .../identity-protection/hello-for-business/hello-faq.yml | 4 ++-- 3 files changed, 5 insertions(+), 5 deletions(-) diff --git a/browsers/edge/TOC.md b/browsers/edge/TOC.md index 0f0c4989e5..bae1f59877 100644 --- a/browsers/edge/TOC.md +++ b/browsers/edge/TOC.md @@ -28,6 +28,6 @@ ## [Change history for Microsoft Edge](change-history-for-microsoft-edge.md) -## [Microsoft Edge Frequently Asked Questions (FAQs)](microsoft-edge-faq.yml) +## [Microsoft Edge Frequently Asked Questions (FAQ)](microsoft-edge-faq.yml) diff --git a/browsers/edge/microsoft-edge-faq.yml b/browsers/edge/microsoft-edge-faq.yml index 2cf801b44d..751f40f4ea 100644 --- a/browsers/edge/microsoft-edge-faq.yml +++ b/browsers/edge/microsoft-edge-faq.yml @@ -1,6 +1,6 @@ ### YamlMime:FAQ metadata: - title: Microsoft Edge - Frequently Asked Questions (FAQs) for IT Pros + title: Microsoft Edge - Frequently Asked Questions (FAQ) for IT Pros ms.reviewer: audience: itpro manager: dansimp @@ -13,7 +13,7 @@ metadata: ms.sitesec: library ms.localizationpriority: medium -title: Frequently Asked Questions (FAQs) for IT Pros +title: Frequently Asked Questions (FAQ) for IT Pros summary: | Applies to: Microsoft Edge on Windows 10 and Windows 10 Mobile diff --git a/windows/security/identity-protection/hello-for-business/hello-faq.yml b/windows/security/identity-protection/hello-for-business/hello-faq.yml index 92e87082b1..aae7b07f4a 100644 --- a/windows/security/identity-protection/hello-for-business/hello-faq.yml +++ b/windows/security/identity-protection/hello-for-business/hello-faq.yml @@ -1,6 +1,6 @@ ### YamlMime:FAQ metadata: - title: Windows Hello for Business Frequently Asked Questions + title: Windows Hello for Business Frequently Asked Questions (FAQ) description: Use these frequently asked questions (FAQ) to learn important details about Windows Hello for Business. keywords: identity, PIN, biometric, Hello, passport ms.prod: w10 @@ -17,7 +17,7 @@ metadata: ms.date: 08/19/2018 ms.reviewer: -title: Windows Hello for Business Frequently Asked Questions +title: Windows Hello for Business Frequently Asked Questions (FAQ) summary: | Applies to: Windows 10 From 502d130ba44ff4fa7a87339f3eac1acfc3bc4e44 Mon Sep 17 00:00:00 2001 From: Benny Shilpa Date: Thu, 17 Dec 2020 11:04:09 +0530 Subject: [PATCH 127/486] Update firewall-settings-lost-on-upgrade.md --- .../windows-firewall/firewall-settings-lost-on-upgrade.md | 4 ++-- 1 file changed, 2 insertions(+), 2 deletions(-) diff --git a/windows/security/threat-protection/windows-firewall/firewall-settings-lost-on-upgrade.md b/windows/security/threat-protection/windows-firewall/firewall-settings-lost-on-upgrade.md index 232e9788e4..3bb0a16e42 100644 --- a/windows/security/threat-protection/windows-firewall/firewall-settings-lost-on-upgrade.md +++ b/windows/security/threat-protection/windows-firewall/firewall-settings-lost-on-upgrade.md @@ -29,7 +29,7 @@ For organizational purposes, individual built-in firewall rules are categorized - Remote Desktop – User-Mode (UDP-In) -Other group examples include core networking, file and print sharing, and network discovery. Grouping allows admins to manage sets of similar rules by filtering on categories in the firewall interface (wf.msc). This is acheived by right-clicking on either **Inbound** or **Outbound Rules** and selecting **Filter by Group**; or via PowerShell using the `Get-NetFirewallRule` cmdlet with the `-Group` switch. +Other group examples include core networking, file and print sharing, and network discovery. Grouping allows admins to manage sets of similar rules by filtering on categories in the firewall interface (wf.msc). This is achieved by right-clicking on either **Inbound** or **Outbound Rules** and selecting **Filter by Group**; or via PowerShell using the `Get-NetFirewallRule` cmdlet with the `-Group` switch. ```Powershell Get-NetFirewallRule -Group @@ -38,6 +38,6 @@ Get-NetFirewallRule -Group > [!NOTE] > It is recommended to enable an entire group instead of individual rules if the expectation is that the ruleset is going to be migrated at some point. -To avoid unexpected behaviors it is recommended to enable/disable all of the rules within a group as opposed to just one or two of the individual rules. This is because while groups are used to organize rules and allow batch rule modification by type, they also represents the 'unit' by which rule state is maintained across a Windows upgrade. Rule groups, as opposed to individual rules, are the unit by which the update process determines what should be enabled/disabled when the upgrade is complete. +To avoid unexpected behaviors, it is recommended to enable/disable all of the rules within a group as opposed to just one or two of the individual rules. This is because while groups are used to organize rules and allow batch rule modification by type, they also represent the 'unit' by which rule state is maintained across a Windows upgrade. Rule groups, as opposed to individual rules, are the unit by which the update process determines what should be enabled/disabled when the upgrade is complete. Take the Remote Desktop group example shown above. It consists of three rules. To ensure that the rule set is properly migrated during an upgrade, all three rules must be enabled. If for example only one rule is enabled, the upgrade process will see that two of three rules are disabled and subsequently disable the entire group in an effort to maintain what it sees as the most pristine out-of-the-box configuration possible. Obviously, this scenario brings with it the unintended consequence of breaking Remote Desktop Protocol (RDP) connectivity to the host. From 70d8ac48176f2d45d981066522c1332ed422e9b2 Mon Sep 17 00:00:00 2001 From: Benny Shilpa Date: Thu, 17 Dec 2020 11:09:43 +0530 Subject: [PATCH 128/486] Update filter-origin-documentation.md --- .../windows-firewall/filter-origin-documentation.md | 8 ++++---- 1 file changed, 4 insertions(+), 4 deletions(-) diff --git a/windows/security/threat-protection/windows-firewall/filter-origin-documentation.md b/windows/security/threat-protection/windows-firewall/filter-origin-documentation.md index 5d43155670..7ef38e690b 100644 --- a/windows/security/threat-protection/windows-firewall/filter-origin-documentation.md +++ b/windows/security/threat-protection/windows-firewall/filter-origin-documentation.md @@ -55,7 +55,7 @@ The next section describes the improvements made to audits 5157 and 5152, and ho The two new fields added to the audit 5157 and 5152 events are `Filter Origin` and `Interface Index`. -The `Filter Origin` field helps identify the cause of the drop. Packet drops from firewall are explicitly dropped by default block filters created by the Windows Firewall service or a firewall rule which may be created by users, policies, services, apps, etc. +The `Filter Origin` field helps identify the cause of the drop. Packet drops from firewall are explicitly dropped by default block filters created by the Windows Firewall service or a firewall rule that may be created by users, policies, services, apps, etc. `Filter Origin` specifies either the rule ID (a unique identifier of a Firewall rule) or the name of one of the default block filters. @@ -100,7 +100,7 @@ Network drop events from the AppContainer loopback block filter origin occur whe To enable localhost loopback in a local debugging environment, see [Communicating with localhost](https://docs.microsoft.com/windows/iot-core/develop-your-app/loopback). -To enable localhost loopback for a published app which requires loopback access to communicate with another UWP or packaged win32 app, see [uap4:LoopbackAccessRules](https://docs.microsoft.com/uwp/schemas/appxpackage/uapmanifestschema/element-uap4-loopbackaccessrules). +To enable localhost loopback for a published app that requires loopback access to communicate with another UWP or packaged win32 app, see [uap4:LoopbackAccessRules](https://docs.microsoft.com/uwp/schemas/appxpackage/uapmanifestschema/element-uap4-loopbackaccessrules). **Boottime default** @@ -130,7 +130,7 @@ Network packet drops from query user default block filters occur when there is n 1. Create an inbound firewall rule to allow the packet for this application. This will allow the packet to bypass any query user default block filters. -2. Delete any block query user rules which may have been auto generated by the firewall service. +2. Delete any block query user rules that may have been auto generated by the firewall service. To generate a list of all the query user block rules, you can run the following PowerShell command: @@ -161,7 +161,7 @@ To disable stealth-mode, see [Disable stealth mode in Windows](https://docs.micr **UWP default** -Network drops from Universal Windows Platform (UWP) default inbound/outbound block filters are often caused by the UWP app not being configured correctly (i.e. the UWP app is missing the correct capability tokens or loopback is not enabled) or the private range is configured incorrectly. +Network drops from Universal Windows Platform (UWP) default inbound/outbound block filters are often caused by the UWP app not being configured correctly (that is, the UWP app is missing the correct capability tokens or loopback is not enabled) or the private range is configured incorrectly. For more information on how to debug drops caused by UWP default block filters, see [Troubleshooting UWP App Connectivity Issues](https://docs.microsoft.com/windows/security/threat-protection/windows-firewall/troubleshooting-uwp-firewall). From 1e719a7bf58532d637567152bbd511aaaa835ec5 Mon Sep 17 00:00:00 2001 From: Benny Shilpa Date: Thu, 17 Dec 2020 11:13:39 +0530 Subject: [PATCH 129/486] Update quarantine.md --- .../threat-protection/windows-firewall/quarantine.md | 10 +++++----- 1 file changed, 5 insertions(+), 5 deletions(-) diff --git a/windows/security/threat-protection/windows-firewall/quarantine.md b/windows/security/threat-protection/windows-firewall/quarantine.md index a7d55f86ae..6cce740d60 100644 --- a/windows/security/threat-protection/windows-firewall/quarantine.md +++ b/windows/security/threat-protection/windows-firewall/quarantine.md @@ -21,9 +21,9 @@ ms.date: 11/17/2020 One of the security challenges that network admins face is configuring a machine properly after a network change. -Network changes can happen frequently. Additionally, the operations required to re-categorize the network after a change and apply the correct security policies on a machine are non-trivial and may require considerable CPU time. This is especially true for machines that are part of the domain. In the past, the delay in applying security policies during network re-categorization has been successfully exploited for vulnerabilities. +Network changes can happen frequently. Additionally, the operations required to recategorize the network after a change and apply the correct security policies on a machine are non-trivial and may require considerable CPU time. This is especially true for machines that are part of the domain. In the past, the delay in applying security policies during network recategorization has been successfully exploited for vulnerabilities. -To counter this potential exploitation, Windows Firewall will quarantine an interface until the system has successfully re-categorized the network and Windows Filtering Platform (WFP) has the correct filters applied for the updated interface configuration. During quarantine, all new inbound connections without exceptions are blocked to the machine. +To counter this potential exploitation, Windows Firewall will quarantine an interface until the system has successfully recategorized the network and Windows Filtering Platform (WFP) has the correct filters applied for the updated interface configuration. During quarantine, all new inbound connections without exceptions are blocked to the machine. While the quarantine feature has long been a part of Windows Firewall, the feature behavior has often caused confusion for customers unaware of quarantine and its motivations. @@ -31,7 +31,7 @@ Ultimately, the goal of this document is to describe the quarantine feature at a ## Quarantine filters -The quarantine feature creates filters which can be split into three categories: +The quarantine feature creates filters that can be split into three categories: - Quarantine default inbound block filter - Quarantine default exception filters @@ -62,7 +62,7 @@ When the interface is in quarantine state, the quarantine default exception filt ### Interface un-quarantine filter -The interface un-quarantine filters allows all non-loopback packets if the interface is successfully categorized. +The interface un-quarantine filters allow all non-loopback packets if the interface is successfully categorized. ## Quarantine flow @@ -94,7 +94,7 @@ Netsh wfp cap stop These commands generate a wfpdiag.cab. Inside the .cab exists a wfpdiag.xml, which contains drop `netEvents` and filters that existed during that reproduction. -Inside the wfpdiag.xml, search for `netEvents` which have `FWPM_NET_EVENT_TYPE_CLASSIFY_DROP` as the `netEvent` type. To find the relevant drop events, search for the drop events with matching destination IP address, package SID, or application ID name. +Inside the wfpdiag.xml, search for `netEvents` that have `FWPM_NET_EVENT_TYPE_CLASSIFY_DROP` as the `netEvent` type. To find the relevant drop events, search for the drop events with matching destination IP address, package SID, or application ID name. The characters in the application ID name will be separated by periods: From 8c90da743de4cb4e34dbc49b9f0f5294f0b8ed7b Mon Sep 17 00:00:00 2001 From: ImranHabib <47118050+joinimran@users.noreply.github.com> Date: Thu, 17 Dec 2020 11:46:07 +0500 Subject: [PATCH 130/486] minor calrification Added a minor clarification. Prbolem: https://github.com/MicrosoftDocs/windows-itpro-docs/issues/8803 --- .../windows-sandbox/windows-sandbox-overview.md | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/windows/security/threat-protection/windows-sandbox/windows-sandbox-overview.md b/windows/security/threat-protection/windows-sandbox/windows-sandbox-overview.md index e7b8a53f7a..f9ff3618d5 100644 --- a/windows/security/threat-protection/windows-sandbox/windows-sandbox-overview.md +++ b/windows/security/threat-protection/windows-sandbox/windows-sandbox-overview.md @@ -55,7 +55,7 @@ The following video provides an overview of Windows Sandbox. 1. Locate and select **Windows Sandbox** on the Start menu to run it for the first time. ## Usage -1. Copy an executable file (and any other files needed to run the application) from the host into the Windows Sandbox window. +1. Copy an executable file (and any other files needed to run the application) from the host and paste into the **Windows Sandbox** window. 2. Run the executable file or installer inside the sandbox. 3. When you're finished experimenting, close the sandbox. A dialog box will state that all sandbox content will be discarded and permanently deleted. Select **ok**. 4. Confirm that your host machine doesn't exhibit any of the modifications that you made in Windows Sandbox. From fbc556f129b74778145c53443ad905fae3d8648e Mon Sep 17 00:00:00 2001 From: Denise Vangel-MSFT Date: Thu, 17 Dec 2020 06:26:27 -0800 Subject: [PATCH 131/486] Update md-app-guard-overview.md --- .../md-app-guard-overview.md | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/windows/security/threat-protection/microsoft-defender-application-guard/md-app-guard-overview.md b/windows/security/threat-protection/microsoft-defender-application-guard/md-app-guard-overview.md index 62c8df613c..a8678eba15 100644 --- a/windows/security/threat-protection/microsoft-defender-application-guard/md-app-guard-overview.md +++ b/windows/security/threat-protection/microsoft-defender-application-guard/md-app-guard-overview.md @@ -8,7 +8,7 @@ ms.pagetype: security ms.localizationpriority: medium author: denisebmsft ms.author: deniseb -ms.date: 12/10/2020 +ms.date: 12/17/2020 ms.reviewer: manager: dansimp ms.custom: asr From 926e4e9fa9eb38b2eedfa6801645652caceac40b Mon Sep 17 00:00:00 2001 From: Denise Vangel-MSFT Date: Thu, 17 Dec 2020 06:28:18 -0800 Subject: [PATCH 132/486] Update md-app-guard-overview.md --- .../md-app-guard-overview.md | 6 ++---- 1 file changed, 2 insertions(+), 4 deletions(-) diff --git a/windows/security/threat-protection/microsoft-defender-application-guard/md-app-guard-overview.md b/windows/security/threat-protection/microsoft-defender-application-guard/md-app-guard-overview.md index a8678eba15..2a63557e33 100644 --- a/windows/security/threat-protection/microsoft-defender-application-guard/md-app-guard-overview.md +++ b/windows/security/threat-protection/microsoft-defender-application-guard/md-app-guard-overview.md @@ -24,16 +24,14 @@ Microsoft Defender Application Guard (Application Guard) is designed to help pre For Microsoft Edge, Application Guard helps to isolate enterprise-defined untrusted sites, protecting your company while your employees browse the Internet. As an enterprise administrator, you define what is among trusted web sites, cloud resources, and internal networks. Everything not on your list is considered untrusted. If an employee goes to an untrusted site through either Microsoft Edge or Internet Explorer, Microsoft Edge opens the site in an isolated Hyper-V-enabled container. -For Microsoft Office, Application Guard helps prevents untrusted Word, Powerpoint and Excel files from accessing trusted resources, by opening these files in an isolated Hyper-V-enabled container. - -The isolated Hyper-V container is separate from the host operating system. This container isolation means that if the untrusted site or file turns out to be malicious, the host PC is protected, and the attacker can't get to your enterprise data. For example, this approach makes the isolated container anonymous, so an attacker can't get to your employee's enterprise credentials. +For Microsoft Office, Application Guard helps prevents untrusted Word, PowerPoint and Excel files from accessing trusted resources. Application Guard opens untrusted files in an isolated Hyper-V-enabled container. The isolated Hyper-V container is separate from the host operating system. This container isolation means that if the untrusted site or file turns out to be malicious, the host device is protected, and the attacker can't get to your enterprise data. For example, this approach makes the isolated container anonymous, so an attacker can't get to your employee's enterprise credentials. ![Hardware isolation diagram](images/appguard-hardware-isolation.png) ### What types of devices should use Application Guard? -Application Guard has been created to target several types of systems: +Application Guard has been created to target several types of devices: - **Enterprise desktops**. These desktops are domain-joined and managed by your organization. Configuration management is primarily done through Microsoft Endpoint Configuration Manager or Microsoft Intune. Employees typically have Standard User privileges and use a high-bandwidth, wired, corporate network. From 9405730c99068e667dfedb15035f90f7247e1d4d Mon Sep 17 00:00:00 2001 From: Harun Kimani <52551080+Gental-Giant@users.noreply.github.com> Date: Thu, 17 Dec 2020 08:53:20 -0800 Subject: [PATCH 133/486] Windows 10 20H2 Connection endpoints --- .../privacy/manage-windows-20H2-endpoints.md | 158 +++++++++++ windows/privacy/toc.yml | 4 + ...-endpoints-20H2-non-enterprise-editions.md | 264 ++++++++++++++++++ 3 files changed, 426 insertions(+) create mode 100644 windows/privacy/manage-windows-20H2-endpoints.md create mode 100644 windows/privacy/windows-endpoints-20H2-non-enterprise-editions.md diff --git a/windows/privacy/manage-windows-20H2-endpoints.md b/windows/privacy/manage-windows-20H2-endpoints.md new file mode 100644 index 0000000000..a2c7dbbed9 --- /dev/null +++ b/windows/privacy/manage-windows-20H2-endpoints.md @@ -0,0 +1,158 @@ +--- +title: Connection endpoints for Windows 10 Enterprise, version 20H2 +description: Explains what Windows 10 endpoints are used for, how to turn off traffic to them, and the impact. Specific to Windows 10 Enterprise, version 20H2. +keywords: privacy, manage connections to Microsoft, Windows 10 +ms.prod: w10 +ms.mktglfcycl: manage +ms.sitesec: library +ms.localizationpriority: high +audience: ITPro +author: gental-giant +ms.author: v-hakima +manager: robsize +ms.collection: M365-security-compliance +ms.topic: article +ms.date: 12/17/2020 +--- +# Manage connection endpoints for Windows 10 Enterprise, version 20H2 + +**Applies to** + +- Windows 10 Enterprise, version 20H2 + +Some Windows components, app, and related services transfer data to Microsoft network endpoints. Some examples include: + +- Connecting to Microsoft Office and Windows sites to download the latest app and security updates. +- Connecting to email servers to send and receive email. +- Connecting to the web for every day web browsing. +- Connecting to the cloud to store and access backups. +- Using your location to show a weather forecast. + +Details about the different ways to control traffic to these endpoints are covered in [Manage connections from Windows operating system components to Microsoft services](manage-connections-from-windows-operating-system-components-to-microsoft-services.md). +Where applicable, each endpoint covered in this topic includes a link to the specific details on how to control that traffic. + +The following methodology was used to derive these network endpoints: + +1. Set up the latest version of Windows 10 on a test virtual machine using the default settings. +2. Leave the device(s) running idle for a week ("idle" means a user is not interacting with the system/device). +3. Use globally accepted network protocol analyzer/capturing tools and log all background egress traffic. +4. Compile reports on traffic going to public IP addresses. +5. The test virtual machine(s) was logged into using a local account, and was not joined to a domain or Azure Active Directory. +6. All traffic was captured in our lab using a IPV4 network. Therefore, no IPV6 traffic is reported here. +7. These tests were conducted in an approved Microsoft lab. It's possible your results may be different. +8. These tests were conducted for one week, but if you capture traffic for longer you may have different results. + +> [!NOTE] +> Microsoft uses global load balancers that can appear in network trace-routes. For example, an endpoint for *.akadns.net might be used to load balance requests to an Azure datacenter, which can change over time. + +## Windows 10 20H2 Enterprise connection endpoints + +|Area|Description|Protocol|Destination| +|----------------|----------|----------|------------| +|Apps|||[Learn how to turn off traffic to the following endpoint(s).](manage-connections-from-windows-operating-system-components-to-microsoft-services.md#bkmk-windowsstore)| +||The following endpoint is used for the Weather app. To turn off traffic for this endpoint, either uninstall the Weather app or disable the Microsoft Store. If you disable the Microsoft store, other Store apps cannot be installed or updated. Additionally, the Microsoft Store won't be able to revoke malicious Store apps and users will still be able to open them.|HTTP|tile-service.weather.microsoft.com| +||The following endpoint is used for OneNote Live Tile. To turn off traffic for this endpoint, either uninstall OneNote or disable the Microsoft Store. If you disable the Microsoft store, other Store apps cannot be installed or updated. Additionally, the Microsoft Store won't be able to revoke malicious Store apps and users will still be able to open them.|TLSv1.2/HTTPS/HTTP|cdn.onenote.net| +||The following endpoint is used by the Photos app to download configuration files, and to connect to the Office 365 portal's shared infrastructure, including Office in a browser. To turn off traffic for this endpoint, either uninstall the Photos app or disable the Microsoft Store. If you disable the Microsoft store, other Store apps cannot be installed or updated. Additionally, the Microsoft Store won't be able to revoke malicious Store apps and users will still be able to open them.|TLSv1.2/HTTPS|evoke-windowsservices-tas.msedge.net +|Certificates|The following endpoint is used by the Automatic Root Certificates Update component to automatically check the list of trusted authorities on Windows Update to see if an update is available. It is possible to turn off traffic to this endpoint, but it is not recommended because as root certificates are updated over time, applications and websites may stop working because they did not receive an updated root certificate the application uses. Additionally, it is used to download certificates that are publicly known to be fraudulent. These settings are critical for both Windows security and the overall security of the Internet. We do not recommend blocking this endpoint. If traffic to this endpoint is turned off, Windows no longer automatically downloads certificates known to be fraudulent, which increases the attack vector on the device.||[Learn how to turn off traffic to all of the following endpoint(s).](manage-connections-from-windows-operating-system-components-to-microsoft-services.md#automatic-root-certificates-update)| +|||TLSv1.2/HTTPS/HTTP|ctldl.windowsupdate.com| +|Cortana and Live Tiles|||[Learn how to turn off traffic to all of the following endpoint(s).](manage-connections-from-windows-operating-system-components-to-microsoft-services.md#bkmk-cortana)| +||The following endpoints are related to Cortana and Live Tiles. If you turn off traffic for this endpoint, you will block updates to Cortana greetings, tips, and Live Tiles.|TLSv1.2/HTTPS/HTTP|www.bing.com*| +|||TLSv1.2/HTTPS/HTTP|fp.msedge.net| +|||TLSv1.2|I-ring.msedge.net| +|||HTTPS|s-ring.msedge.net| +|Device authentication|||[Learn how to turn off traffic to all of the following endpoint(s).](manage-connections-from-windows-operating-system-components-to-microsoft-services.md#bkmk-priv-feedback)| +||The following endpoint is used to authenticate a device. If you turn off traffic for this endpoint, the device will not be authenticated.|HTTPS|login.live.com*| +|Device metadata|The following endpoint is used to retrieve device metadata. If you turn off traffic for this endpoint, metadata will not be updated for the device.||[Learn how to turn off traffic to all of the following endpoint(s).](manage-connections-from-windows-operating-system-components-to-microsoft-services#4-device-metadata-retrieval)| +|||HTTP|dmd.metaservices.microsoft.com| +|Diagnostic Data|The following endpoints are used by the Connected User Experiences and Telemetry component and connects to the Microsoft Data Management service. If you turn off traffic for this endpoint, diagnostic and usage information, which helps Microsoft find and fix problems and improve our products and services, will not be sent back to Microsoft. ||[Learn how to turn off traffic to all of the following endpoint(s).](manage-connections-from-windows-operating-system-components-to-microsoft-services.md#bkmk-priv-feedback)| +|||TLSv1.2/HTTPS/HTTP|v10.events.data.microsoft.com| +|||TLSv1.2/HTTPS/HTTP|v20.events.data.microsoft.com| +|||HTTP|www.microsoft.com| +||The following endpoints are used by Windows Error Reporting. To turn off traffic for these endpoints, enable the following Group Policy: Administrative Templates > Windows Components > Windows Error Reporting > Disable Windows Error Reporting. This means error reporting information will not be sent back to Microsoft.|TLSv1.2|telecommand.telemetry.microsoft.com| +|||TLS v1.2/HTTPS/HTTP|watson.*.microsoft.com| +|Font Streaming|The following endpoints are used to download fonts on demand. If you turn off traffic for these endpoints, you will not be able to download fonts on demand.||[Learn how to turn off traffic to all of the following endpoint(s).](manage-connections-from-windows-operating-system-components-to-microsoft-services#6-font-streaming)| +|||HTTPS|fs.microsoft.com| +|Licensing|The following endpoint is used for online activation and some app licensing. To turn off traffic for this endpoint, disable the Windows License Manager Service. This will also block online activation and app licensing may not work.||[Learn how to turn off traffic to all of the following endpoint(s).](manage-connections-from-windows-operating-system-components-to-microsoft-services.md#9-license-manager)| +|||TLSv1.2/HTTPS/HTTP|licensing.mp.microsoft.com| +|Maps|||[Learn how to turn off traffic to all of the following endpoint(s).](manage-connections-from-windows-operating-system-components-to-microsoft-services.md#bkmk-offlinemaps)| +||The following endpoints are used to check for updates to maps that have been downloaded for offline use. If you turn off traffic for this endpoint, offline maps will not be updated.|TLSv1.2/HTTPS/HTTP|maps.windows.com| +|Microsoft Account|||[Learn how to turn off traffic to all of the following endpoint(s).](manage-connections-from-windows-operating-system-components-to-microsoft-services.md#bkmk-microsoft-account)| +||The following endpoints are used for Microsoft accounts to sign in. If you turn off traffic for these endpoints, users cannot sign in with Microsoft accounts. |TLSv1.2/HTTPS|login.live.com| +|Microsoft Edge|||[Learn how to turn off traffic to all of the following endpoint(s).](manage-connections-from-windows-operating-system-components-to-microsoft-services.md#13-microsoft-edge)| +||This traffic is related to the Microsoft Edge browser.|HTTPS|iecvlist.microsoft.com| +||The following endpoint is used by Microsoft Edge Update service to check for new updates. If you disable this endpoint, Microsoft Edge won’t be able to check for and apply new edge updates.|TLSv1.2/HTTPS/HTTP|msedge.api.cdp.microsoft.com| +|Microsoft forward link redirection service (FWLink)|The following endpoint is used by the Microsoft forward link redirection service (FWLink) to redirect permanent web links to their actual, sometimes transitory, URL. FWlinks are similar to URL shorteners, just longer. If you disable this endpoint, Windows Defender won't be able to update its malware definitions; links from Windows and other Microsoft products to the Web won't work; and PowerShell updateable Help won't update. To disable the traffic, instead disable the traffic that's getting forwarded.|HTTP|go.microsoft.com| +|Microsoft Store|||[Learn how to turn off traffic to all of the following endpoint(s).](manage-connections-from-windows-operating-system-components-to-microsoft-services.md#26-microsoft-store)| +||The following endpoint is used to download image files that are called when applications run (Microsoft Store or Inbox MSN Apps). If you turn off traffic for these endpoints, the image files won't be downloaded, and apps cannot be installed or updated from the Microsoft Store. Additionally, the Microsoft Store won't be able to revoke malicious apps and users will still be able to open them.|HTTPS|img-prod-cms-rt-microsoft-com.akamaized.net| +||The following endpoint is used for the Windows Push Notification Services (WNS). WNS enables third-party developers to send toast, tile, badge, and raw updates from their own cloud service. This provides a mechanism to deliver new updates to your users in a power-efficient and dependable way. If you turn off traffic for this endpoint, push notifications will no longer work, including MDM device management, mail synchronization, settings synchronization.|TLSv1.2/HTTPS|*.wns.windows.com| +||The following endpoints are used to revoke licenses for malicious apps in the Microsoft Store. To turn off traffic for this endpoint, either uninstall the app or disable the Microsoft Store. If you disable the Microsoft Store, other Microsoft Store apps cannot be installed or updated. Additionally, the Microsoft Store won't be able to revoke malicious apps and users will still be able to open them|TLSv1.2|1storecatalogrevocation.storequality.microsoft.com| +|||HTTPS/HTTPS/HTTP|storecatalogrevocation.storequality.microsoft.com| +||The following endpoint is used to get Microsoft Store analytics.|HTTPS|manage.devcenter.microsoft.com| +||The following endpoints are used to communicate with Microsoft Store. If you turn off traffic for these endpoints, apps cannot be installed or updated from the Microsoft Store.|TLSv1.2/HTTPS/HTTP|displaycatalog.mp.microsoft.com| +|||HTTPS|pti.store.microsoft.com| +|||HTTP|share.microsoft.com| +||The following endpoint is used to get Microsoft Store analytics.|TLSv1.2/HTTPS/HTTP|manage.devcenter.microsoft.com| +|Network Connection Status Indicator (NCSI)|||[Learn how to turn off traffic to all of the following endpoint(s).](manage-connections-from-windows-operating-system-components-to-microsoft-services.md#bkmk-ncsi)| +||Network Connection Status Indicator (NCSI) detects Internet connectivity and corporate network connectivity status. NCSI sends a DNS request and HTTP query to this endpoint to determine if the device can communicate with the Internet. If you turn off traffic for this endpoint, NCSI won't be able to determine if the device is connected to the Internet and the network status tray icon will show a warning.|HTTPS|www.msftconnecttest.com*| +|Office|The following endpoints are used to connect to the Office 365 portal's shared infrastructure, including Office in a browser. For more info, see Office 365 URLs and IP address ranges. You can turn this off by removing all Microsoft Office apps and the Mail and Calendar apps. If you turn off traffic for these endpoints, users won't be able to save documents to the cloud or see their recently used documents.||[Learn how to turn off traffic to all of the following endpoint(s).](manage-connections-from-windows-operating-system-components-to-microsoft-services.md#26-microsoft-store)| +|||HTTPS|www.office.com| +|||HTTPS|blobs.officehome.msocdn.com| +|||HTTPS|officehomeblobs.blob.core.windows.net| +|||HTTPS|self.events.data.microsoft.com| +|||TLSv1.2/HTTPS/HTTP|outlookmobile-office365-tas.msedge.net| +|OneDrive|The following endpoints are related to OneDrive. If you turn off traffic for these endpoints, anything that relies on g.live.com to get updated URL information will no longer work.||[Learn how to turn off traffic to all of the following endpoint(s).](manage-connections-from-windows-operating-system-components-to-microsoft-services.md#bkmk-onedrive)| +|||TLSv1.2/HTTPS/HTTP|g.live.com| +|||TLSv1.2/HTTPS/HTTP|oneclient.sfx.ms| +|||HTTPS| logincdn.msauth.net| +|Settings|The following endpoint is used as a way for apps to dynamically update their configuration. Apps such as System Initiated User Feedback and the Xbox app use it. If you turn off traffic for this endpoint, an app that uses this endpoint may stop working.||[Learn how to turn off traffic to all of the following endpoint(s).](manage-connections-from-windows-operating-system-components-to-microsoft-services.md#bkmk-priv-feedback)| +|||TLSv1.2/HTTPS/HTTP|settings-win.data.microsoft.com| +|||HTTPS|settings.data.microsoft.com| +|Skype|The following endpoint is used to retrieve Skype configuration values. To turn off traffic for this endpoint, either uninstall the app or disable the Microsoft Store. If you disable the Microsoft store, other Microsoft Store apps cannot be installed or updated. Additionally, the Microsoft Store won't be able to revoke malicious apps and users will still be able to open them.||[Learn how to turn off traffic to all of the following endpoint(s).](manage-connections-from-windows-operating-system-components-to-microsoft-services.md#bkmk-windowsstore)| +|||HTTPS/HTTP|*.pipe.aria.microsoft.com| +|||TLSv1.2/HTTPS/HTTP|config.edge.skype.com| +|Teams|The following endpoint is used for Microsoft Teams application.||[Learn how to turn off traffic to all of the following endpoint(s).]( manage-connections-from-windows-operating-system-components-to-microsoft-services.md#26-microsoft-store)| +|||TLSv1.2/HTTPS/HTTP|config.teams.microsoft.com| +|Windows Defender|The following endpoint is used for Windows Defender when Cloud-based Protection is enabled. If you turn off traffic for this endpoint, the device will not use Cloud-based Protection.||[Learn how to turn off traffic to all of the following endpoint(s).](manage-connections-from-windows-operating-system-components-to-microsoft-services.md#bkmk-defender)| +|||HTTPS/TLSv1.2|wdcp.microsoft.com| +||The following endpoints are used for Windows Defender SmartScreen reporting and notifications. If you turn off traffic for these endpoints, SmartScreen notifications will not appear.|HTTPS|*smartscreen-prod.microsoft.com| +|||HTTPS/HTTP|checkappexec.microsoft.com| +|Windows Spotlight|The following endpoints are used to retrieve Windows Spotlight metadata that describes content, such as references to image locations, as well as suggested apps, Microsoft account notifications, and Windows tips. If you turn off traffic for these endpoints, Windows Spotlight will still try to deliver new lock screen images and updated content but it will fail; suggested apps, Microsoft account notifications, and Windows tips will not be downloaded. For more information, see Windows Spotlight.||[Learn how to turn off traffic to all of the following endpoint(s).](manage-connections-from-windows-operating-system-components-to-microsoft-services.md#bkmk-spotlight)| +|||TLSv1.2/HTTPS/HTTP|arc.msn.com| +|||HTTPS|ris.api.iris.microsoft.com| +|Windows Update|The following endpoint is used for Windows Update downloads of apps and OS updates, including HTTP downloads or HTTP downloads blended with peers. If you turn off traffic for this endpoint, Windows Update downloads will not be managed, as critical metadata that is used to make downloads more resilient is blocked. Downloads may be impacted by corruption (resulting in re-downloads of full files). Additionally, downloads of the same update by multiple devices on the same local network will not use peer devices for bandwidth reduction.||[Learn how to turn off traffic to all of the following endpoint(s).](manage-connections-from-windows-operating-system-components-to-microsoft-services.md#bkmk-updates)| +|||TLSv1.2/HTTPS/HTTP|*.prod.do.dsp.mp.microsoft.com| +|||HTTP|emdl.ws.microsoft.com| +||The following endpoints are used to download operating system patches, updates, and apps from Microsoft Store. If you turn off traffic for these endpoints, the device will not be able to download updates for the operating system.|TLSv1.2/HTTPS/HTTP|*.dl.delivery.mp.microsoft.com| +|||HTTP|*.windowsupdate.com| +||The following endpoints enable connections to Windows Update, Microsoft Update, and the online services of the Store. If you turn off traffic for these endpoints, the device will not be able to connect to Windows Update and Microsoft Update to help keep the device secure. Also, the device will not be able to acquire and update apps from the Store. These are dependent on also enabling "Device authentication" and "Microsoft Account" endpoints.|TLSv1.2/HTTPS/HTTP|*.delivery.mp.microsoft.com| +|||TLSv1.2/HTTPS/HTTP|*.update.microsoft.com| +||The following endpoint is used for compatibility database updates for Windows.|HTTPS|adl.windows.com| +||The following endpoint is used for content regulation. If you turn off traffic for this endpoint, the Windows Update Agent will be unable to contact the endpoint and fallback behavior will be used. This may result in content being either incorrectly downloaded or not downloaded at all.|TLSv1.2/HTTPS/HTTP|tsfe.trafficshaping.dsp.mp.microsoft.com| +|Xbox Live|The following endpoint is used for Xbox Live.||[Learn how to turn off traffic to all of the following endpoint(s).](manage-connections-from-windows-operating-system-components-to-microsoft-services#26-microsoft-store)| +|||HTTPS|dlassets-ssl.xboxlive.com| +| + +## Other Windows 10 editions + +To view endpoints for other versions of Windows 10 Enterprise, see: + +- [Manage connection endpoints for Windows 10, version 2004](manage-windows-2004-endpoints.md) +- [Manage connection endpoints for Windows 10, version 1909](manage-windows-1909-endpoints.md) +- [Manage connection endpoints for Windows 10, version 1903](manage-windows-1903-endpoints.md) +- [Manage connection endpoints for Windows 10, version 1809](manage-windows-1809-endpoints.md) +- [Manage connection endpoints for Windows 10, version 1803](manage-windows-1803-endpoints.md) +- [Manage connection endpoints for Windows 10, version 1709](manage-windows-1709-endpoints.md) + +To view endpoints for non-Enterprise Windows 10 editions, see: + +- [Windows 10, version 2004, connection endpoints for non-Enterprise editions](windows-endpoints-2004-non-enterprise-editions.md) +- [Windows 10, version 1909, connection endpoints for non-Enterprise editions](windows-endpoints-1909-non-enterprise-editions.md) +- [Windows 10, version 1903, connection endpoints for non-Enterprise editions](windows-endpoints-1903-non-enterprise-editions.md) +- [Windows 10, version 1809, connection endpoints for non-Enterprise editions](windows-endpoints-1809-non-enterprise-editions.md) +- [Windows 10, version 1803, connection endpoints for non-Enterprise editions](windows-endpoints-1803-non-enterprise-editions.md) +- [Windows 10, version 1709, connection endpoints for non-Enterprise editions](windows-endpoints-1709-non-enterprise-editions.md) + +## Related links + +- [Office 365 URLs and IP address ranges](https://support.office.com/en-us/article/Office-365-URLs-and-IP-address-ranges-8548a211-3fe7-47cb-abb1-355ea5aa88a2?ui=en-US&rs=en-US&ad=US) +- [Network infrastructure requirements for Microsoft Intune](https://docs.microsoft.com/mem/intune/fundamentals/intune-endpoints) diff --git a/windows/privacy/toc.yml b/windows/privacy/toc.yml index 60bf83c118..52a6ddd6da 100644 --- a/windows/privacy/toc.yml +++ b/windows/privacy/toc.yml @@ -41,6 +41,8 @@ href: manage-connections-from-windows-operating-system-components-to-microsoft-services.md - name: Manage connections from Windows operating system components to Microsoft services using MDM href: manage-connections-from-windows-operating-system-components-to-microsoft-services-using-MDM.md + - name: Connection endpoints for Windows 10, version 20H2 + href: manage-windows-20H2-endpoints.md - name: Connection endpoints for Windows 10, version 2004 href: manage-windows-2004-endpoints.md - name: Connection endpoints for Windows 10, version 1909 @@ -53,6 +55,8 @@ href: manage-windows-1803-endpoints.md - name: Connection endpoints for Windows 10, version 1709 href: manage-windows-1709-endpoints.md + - name: Connection endpoints for non-Enterprise editions of Windows 10, version 20H2 + href: windows-endpoints-20H2-non-enterprise-editions.md - name: Connection endpoints for non-Enterprise editions of Windows 10, version 2004 href: windows-endpoints-2004-non-enterprise-editions.md - name: Connection endpoints for non-Enterprise editions of Windows 10, version 1909 diff --git a/windows/privacy/windows-endpoints-20H2-non-enterprise-editions.md b/windows/privacy/windows-endpoints-20H2-non-enterprise-editions.md new file mode 100644 index 0000000000..6f82f0ddf4 --- /dev/null +++ b/windows/privacy/windows-endpoints-20H2-non-enterprise-editions.md @@ -0,0 +1,264 @@ +--- +title: Windows 10, version 20H2, connection endpoints for non-Enterprise editions +description: Explains what Windows 10 endpoints are used in non-Enterprise editions. Specific to Windows 10, version 20H2. +keywords: privacy, manage connections to Microsoft, Windows 10, Windows Server 2016 +ms.prod: w10 +ms.mktglfcycl: manage +ms.sitesec: library +ms.localizationpriority: high +audience: ITPro +author: gental-giant +ms.author: v-hakima +manager: robsize +ms.collection: M365-security-compliance +ms.topic: article +ms.date: 12/17/2020 +--- +# Windows 10, version 20H2, connection endpoints for non-Enterprise editions + + **Applies to** + +- Windows 10 Home, version 20H2 +- Windows 10 Professional, version 20H2 +- Windows 10 Education, version 20H2 + +In addition to the endpoints listed for [Windows 10 Enterprise](manage-windows-2004-endpoints.md), the following endpoints are available on other non-Enterprise editions of Windows 10, version 20H2. + +The following methodology was used to derive the network endpoints: + +1. Set up the latest version of Windows 10 on a test virtual machine using the default settings. +2. Leave the device(s) running idle for a week ("idle" means a user is not interacting with the system/device). +3. Use globally accepted network protocol analyzer/capturing tools and log all background egress traffic. +4. Compile reports on traffic going to public IP addresses. +5. The test virtual machine(s) was logged into using a local account, and was not joined to a domain or Azure Active Directory. +6. All traffic was captured in our lab using a IPV4 network. Therefore, no IPV6 traffic is reported here. +7. These tests were conducted in an approved Microsoft lab. It's possible your results may be different. +8. These tests were conducted for one week. If you capture traffic for longer you may have different results. + +> [!NOTE] +> Microsoft uses global load balancers that can appear in network trace-routes. For example, an endpoint for *.akadns.net might be used to load balance requests to an Azure datacenter, which can change over time. + +## Windows 10 Family + +| **Area** | **Description** | **Protocol** | **Destination** | +|-----------|--------------- |------------- |-----------------| +| Activity Feed Service |The following endpoints are used by Activity Feed Service which enables multiple cross-device data roaming scenarios on Windows|TLSv1.2/HTTPS/HTTP|activity.windows.com| +|Apps|The following endpoints are used for the Weather app.|TLSv1.2/HTTPS/HTTP|tile-service.weather.microsoft.com| +||The following endpoint is used by the Photos app to download configuration files, and to connect to the Office 365 portal's shared infrastructure, including Office in a browser.|TLSv1.2/HTTPS/HTTP|evoke-windowsservices-tas.msedge.net| +||The following endpoint is used for OneNote Live Tile.|HTTPS/HTTP|cdn.onenote.net| +||Used for Spotify Live Tile|HTTPS/HTTP|spclient.wg.spotify.com| +|Certificates|The following endpoint is used by the Automatic Root Certificates Update component to automatically check the list of trusted authorities on Windows Update to see if an update is available.|TLSv1.2/HTTPS/HTTP|ctldl.windowsupdate.com/*| +|Cortana and Live Tiles|The following endpoints are related to Cortana and Live Tiles|TLSv1.2/HTTPS/HTTP|www.bing.com*| +|||HTTPS/HTTP|fp.msedge.net| +|||HTTPS/HTTP|k-ring.msedge.net| +|||TLSv1.2|b-ring.msedge.net| +|Device authentication|The following endpoint is used to authenticate a device.|HTTPS|login.live.com*| +|Device Directory Service|Used by Device Directory Service to keep track of user-device associations and storing metadata about the devices.|HTTPS/HTTP|cs.dds.microsoft.com| +|Device metadata|The following endpoint is used to retrieve device metadata.|TLSv1.2/HTTP|dmd.metaservices.microsoft.com| +|Diagnostic data|The following endpoints are used by the Connected User Experiences and Telemetry component and connects to the Microsoft Data Management service.|TLSv1.2/HTTP|v10.events.data.microsoft.com| +|||TLSv1.2/HTTPS/HTTP|v20.events.data.microsoft.com| +|||TLSv1.2/HTTP|www.microsoft.com| +||The following endpoints are used by Windows Error Reporting.|TLSv1.2/HTTPS/HTTP|watson.telemetry.microsoft.com| +|Font Streaming|The following endpoints are used to download fonts on demand.|TLSv1.2/HTTPS|fs.microsoft.com*| +|Licensing|The following endpoint is used for online activation and some app licensing.|HTTPS/HTTP|*licensing.mp.microsoft.com| +|||HTTPS|licensing.mp.microsoft.com/v7.0/licenses/content| +|Location|The following endpoints are used for location data.|TLSV1.2|inference.location.live.net| +|Maps|The following endpoints are used to check for updates to maps that have been downloaded for offline use.|HTTPS/HTTP|maps.windows.com| +|||HTTPS/HTTP|*.ssl.ak.dynamic.tiles.virtualearth.net| +|||HTTPS/HTTP|*.ssl.ak.tiles.virtualearth.net| +|||HTTPS/HTTP|dev.virtualearth.net| +|||HTTPS/HTTP|ecn.dev.virtualearth.net| +|||HTTPS/HTTP|ssl.bing.com| +|Microsoft Account|The following endpoints are used for Microsoft accounts to sign in|TLSv1.2/HTTPS/HTTP|*login.live.com| +|Microsoft Edge|The following endpoints are used for Microsoft Edge Browser Services.|HTTPS/HTTP|edge.activity.windows.com| +|||HTTPS/HTTP|edge.microsoft.com| +||The following endpoint is used by Microsoft Edge Update service to check for new updates.|HTTPS/HTTP|msedge.api.cdp.microsoft.com| +|Microsoft forward link redirection|The following endpoint is used by the Microsoft forward link redirection service (FWLink) to redirect permanent web links to their actual, sometimes transitory, URL. FWlinks are similar to URL shorteners, just longer|HTTP|go.microsoft.com/fwlink/| +|||TLSv1.2/HTTPS/HTTP|go.microsoft.com| +|Microsoft Store|The following endpoint is used to download image files that are called when applications run (Microsoft Store or Inbox MSN Apps)|TLSv1.2/HTTPS/HTTP|img-prod-cms-rt-microsoft-com.akamaized.net| +||The following endpoint is used for the Windows Push Notification Services (WNS). WNS enables third-party developers to send toast, tile, badge, and raw updates from their own cloud service. This provides a mechanism to deliver new updates to your users in a power-efficient and dependable way.|TLSv1.2/HTTPS|*.wns.windows.com| +||The following endpoint is used to revoke licenses for malicious apps in the Microsoft Store.|TLSv1.2/HTTPS/HTTP|storecatalogrevocation.storequality.microsoft.com| +||The following endpoints are used to communicate with Microsoft Store.|TLSv1.2/HTTPS/HTTP|*displaycatalog.mp.microsoft.com| +|||HTTPS|pti.store.microsoft.com| +|||HTTPS|storesdk.dsx.mp.microsoft.com| +||The following endpoint is used to get Microsoft Store analytics.|TLSv1.2/HTTPS/HTTP|manage.devcenter.microsoft.com| +||The following endpoints are used get images that are used for Microsoft Store suggestions|TLSv1.2|store-images.s-microsoft.com| +|Network Connection Status Indicator (NCSI)|Network Connection Status Indicator (NCSI) detects Internet connectivity and corporate network connectivity status. NCSI sends a DNS request and HTTP query to this endpoint to determine if the device can communicate with the Internet.|TLSv1.2/HTTP|www.msftconnecttest.com*| +|Office|The following endpoints are used to connect to the Office 365 portal's shared infrastructure, including Office in a browser.|TLSv1.2/HTTPS/HTTP|outlook.office365.com| +|||TLSv1.2/HTTPS|office.com| +|||TLSv1.2/HTTPS|blobs.officehome.msocdn.com| +|||HTTPS/HTTP|officehomeblobs.blob.core.windows.net| +|||HTTP/HTTPS|*.blob.core.windows.net| +|||TLSv1.2|self.events.data.microsoft.com| +|||HTTPS/HTTP|outlookmobile-office365-tas.msedge.net| +|||HTTP|roaming.officeapps.live.com| +|||HTTPS/HTTP|substrate.office.com| +|OneDrive|The following endpoints are related to OneDrive.|HTTPS|g.live.com| +|||TLSv1.2/HTTPS|oneclient.sfx.ms| +|||HTTPS/TLSv1.2|logincdn.msauth.net| +|||HTTPS/HTTP|windows.policies.live.net| +|||HTTPS/HTTP|api.onedrive.com| +|||HTTPS/HTTP|skydrivesync.policies.live.net| +|||HTTPS/HTTP|*storage.live.com| +|||HTTPS/HTTP|*settings.live.net| +|Settings|The following endpoint is used as a way for apps to dynamically update their configuration. Apps such as System Initiated User Feedback and the Xbox app use it.|TLSv1.2/HTTPS/HTTP|settings.data.microsoft.com*| +|||TLSv1.2/HTTPS/HTTP|settings-win.data.microsoft.com*| +|Skype|The following endpoint is used to retrieve Skype configuration values.|TLSv1.2/HTTPS/HTTP|*.pipe.aria.microsoft.com| +|||TLSv1.2/HTTPS/HTTP|config.edge.skype.com| +|Teams|The following endpoint is used for Microsoft Teams application.|TLSv1.2/HTTPS/HTTP|config.teams.microsoft.com| +|Windows Defender|The following endpoint is used for Windows Defender when Cloud-based Protection is enabled|TLSv1.2/HTTPS|wdcp.microsoft.com| +|||HTTPS/HTTP|*smartscreen-prod.microsoft.com| +|||TLSv1.2|definitionupdates.microsoft.com| +||The following endpoints are used for Windows Defender SmartScreen reporting and notifications.|TLSv1.2|*smartscreen.microsoft.com| +|||TLSv1.2/HTTP|checkappexec.microsoft.com| +|Windows Spotlight|The following endpoints are used to retrieve Windows Spotlight metadata that describes content, such as references to image locations, as well as suggested apps, Microsoft account notifications, and Windows tips.|TLSv1.2/HTTPS/HTTP|arc.msn.com*| +|||TLSv1.2/HTTPS/HTTP|ris.api.iris.microsoft.com| +|||HTTPS|mucp.api.account.microsoft.com| +|Windows Update|The following endpoint is used for Windows Update downloads of apps and OS updates, including HTTP downloads or HTTP downloads blended with peers.|TLSv1.2/HTTPS/HTTP|*.prod.do.dsp.mp.microsoft.com| +|||TLSv1.2/HTTP|emdl.ws.microsoft.com| +|||TLSv1.2/HTTPS/HTTP|*.dl.delivery.mp.microsoft.com| +||The following endpoints are used to download operating system patches, updates, and apps from Microsoft Store.|TLSv1.2/HTTP|*.windowsupdate.com| +|||TLSv1.2/HTTPS/HTTP|*.delivery.mp.microsoft.com| +||The following endpoints enable connections to Windows Update, Microsoft Update, and the online services of the Store to help keep the device secure.|TLSv1.2/HTTPS/HTTP|*.update.microsoft.com| +||The following endpoint is used for compatibility database updates for Windows.|HTTP/HTTPS|adl.windows.com| +||The following endpoint is used for content regulation.|TLSv1.2/HTTPS/HTTP|tsfe.trafficshaping.dsp.mp.microsoft.com| +|Xbox Live|The following endpoints are used for Xbox Live.| +|||TLSv1.2/HTTPS/HTTP|dlassets-ssl.xboxlive.com| +|||TLSv1.2/HTTPS|da.xboxservices.com| +|||HTTPS|www.xboxab.com| +| + +## Windows 10 Pro + +| **Area** | **Description** | **Protocol** | **Destination** | +| --- | --- | --- | ---| +| Activity Feed Service |The following endpoints are used by Activity Feed Service which enables multiple cross-device data roaming scenarios on Windows|TLSv1.2/HTTPS/HTTP|activity.windows.com| +|Apps|The following endpoints are used for the Weather app.|TLSv1.2/HTTPS/HTTP|tile-service.weather.microsoft.com| +||The following endpoint is used by the Photos app to download configuration files, and to connect to the Office 365 portal's shared infrastructure, including Office in a browser.|TLSv1.2/HTTPS/HTTP|evoke-windowsservices-tas.msedge.net| +||The following endpoint is used for OneNote Live Tile.|HTTPS/HTTP|cdn.onenote.net| +||Used for Spotify Live Tile|HTTPS/HTTP|spclient.wg.spotify.com| +|Certificates|The following endpoint is used by the Automatic Root Certificates Update component to automatically check the list of trusted authorities on Windows Update to see if an update is available.|TLSv1.2/HTTPS/HTTP|ctldl.windowsupdate.com/*| +|Cortana and Live Tiles|The following endpoints are related to Cortana and Live Tiles|TLSv1.2/HTTPS/HTTP|www.bing.com*| +|Device authentication|The following endpoint is used to authenticate a device.|HTTPS|login.live.com*| +|Device metadata|The following endpoint is used to retrieve device metadata.|TLSv1.2/HTTP|dmd.metaservices.microsoft.com| +|Diagnostic data|The following endpoints are used by the Connected User Experiences and Telemetry component and connects to the Microsoft Data Management service.|TLSv1.2/HTTP|v10.events.data.microsoft.com| +|||TLSv1.2/HTTPS/HTTP|v20.events.data.microsoft.com| +|||TLSv1.2/HTTP|www.microsoft.com| +||The following endpoints are used by Windows Error Reporting.|TLSv1.2/HTTPS/HTTP|watson.telemetry.microsoft.com| +|Font Streaming|The following endpoints are used to download fonts on demand.|TLSv1.2/HTTPS|fs.microsoft.com*| +|Licensing|The following endpoint is used for online activation and some app licensing.|HTTPS/HTTP|*licensing.mp.microsoft.com| +|Maps|The following endpoints are used to check for updates to maps that have been downloaded for offline use.|HTTPS/HTTP|maps.windows.com| +|Microsoft Account|The following endpoints are used for Microsoft accounts to sign in|TLSv1.2/HTTPS/HTTP|*login.live.com| +|Microsoft Edge|The following endpoint is used by Microsoft Edge Update service to check for new updates.|HTTPS/HTTP|msedge.api.cdp.microsoft.com| +|Microsoft forward link redirection|The following endpoint is used by the Microsoft forward link redirection service (FWLink) to redirect permanent web links to their actual, sometimes transitory, URL. FWlinks are similar to URL shorteners, just longer|TLSv1.2/HTTPS/HTTP|go.microsoft.com| +|Microsoft Store|The following endpoint is used to download image files that are called when applications run (Microsoft Store or Inbox MSN Apps)|TLSv1.2/HTTPS/HTTP|img-prod-cms-rt-microsoft-com.akamaized.net| +||The following endpoint is used for the Windows Push Notification Services (WNS). WNS enables third-party developers to send toast, tile, badge, and raw updates from their own cloud service. This provides a mechanism to deliver new updates to your users in a power-efficient and dependable way.|TLSv1.2/HTTPS|*.wns.windows.com| +||The following endpoint is used to revoke licenses for malicious apps in the Microsoft Store.|TLSv1.2/HTTPS/HTTP|storecatalogrevocation.storequality.microsoft.com| +||The following endpoints are used to communicate with Microsoft Store.|TLSv1.2/HTTPS/HTTP|*displaycatalog.mp.microsoft.com| +|||HTTPS|pti.store.microsoft.com| +|||HTTPS|storesdk.dsx.mp.microsoft.com| +||The following endpoint is used to get Microsoft Store analytics.|TLSv1.2/HTTPS/HTTP|manage.devcenter.microsoft.com| +|Network Connection Status Indicator (NCSI)|Network Connection Status Indicator (NCSI) detects Internet connectivity and corporate network connectivity status. NCSI sends a DNS request and HTTP query to this endpoint to determine if the device can communicate with the Internet.|TLSv1.2/HTTP|www.msftconnecttest.com*| +|Office|The following endpoints are used to connect to the Office 365 portal's shared infrastructure, including Office in a browser.|TLSv1.2/HTTPS/HTTP|outlook.office365.com| +|||TLSv1.2/HTTPS|office.com| +|||TLSv1.2/HTTPS|blobs.officehome.msocdn.com| +|||HTTPS/HTTP|officehomeblobs.blob.core.windows.net| +|||HTTP/HTTPS|*.blob.core.windows.net| +|||TLSv1.2|self.events.data.microsoft.com| +|||HTTPS/HTTP|outlookmobile-office365-tas.msedge.net| +|||TLSv1.2/HTTPS/HTTP|officeclient.microsoft.com| +|||HTTPS/HTTP|substrate.office.com| +|OneDrive|The following endpoints are related to OneDrive.|HTTPS|g.live.com| +|||TLSv1.2/HTTPS|oneclient.sfx.ms| +|||HTTPS/TLSv1.2|logincdn.msauth.net| +|||HTTPS/HTTP|windows.policies.live.net| +|||HTTPS/HTTP|*storage.live.com| +|||HTTPS/HTTP|*settings.live.net| +|Settings|The following endpoint is used as a way for apps to dynamically update their configuration. Apps such as System Initiated User Feedback and the Xbox app use it.|TLSv1.2/HTTPS/HTTP|settings.data.microsoft.com*| +|||TLSv1.2/HTTPS/HTTP|settings-win.data.microsoft.com*| +|Skype|The following endpoint is used to retrieve Skype configuration values.|TLSv1.2/HTTPS/HTTP|*.pipe.aria.microsoft.com| +|||TLSv1.2/HTTPS/HTTP|config.edge.skype.com| +|Teams|The following endpoint is used for Microsoft Teams application.|TLSv1.2/HTTPS/HTTP|config.teams.microsoft.com| +|Windows Defender|The following endpoint is used for Windows Defender when Cloud-based Protection is enabled|TLSv1.2/HTTPS|wdcp.microsoft.com| +|||HTTPS/HTTP|*smartscreen-prod.microsoft.com| +||The following endpoints are used for Windows Defender SmartScreen reporting and notifications.|TLSv1.2|*smartscreen.microsoft.com| +|||TLSv1.2/HTTP|checkappexec.microsoft.com| +|Windows Spotlight|The following endpoints are used to retrieve Windows Spotlight metadata that describes content, such as references to image locations, as well as suggested apps, Microsoft account notifications, and Windows tips.|TLSv1.2/HTTPS/HTTP|arc.msn.com*| +|||TLSv1.2/HTTPS/HTTP|ris.api.iris.microsoft.com| +|Windows Update|The following endpoint is used for Windows Update downloads of apps and OS updates, including HTTP downloads or HTTP downloads blended with peers.|TLSv1.2/HTTPS/HTTP|*.prod.do.dsp.mp.microsoft.com| +|||TLSv1.2/HTTP|emdl.ws.microsoft.com| +|||TLSv1.2/HTTPS/HTTP|*.dl.delivery.mp.microsoft.com| +||The following endpoints are used to download operating system patches, updates, and apps from Microsoft Store.|TLSv1.2/HTTP|*.windowsupdate.com| +|||TLSv1.2/HTTPS/HTTP|*.delivery.mp.microsoft.com| +||The following endpoints enable connections to Windows Update, Microsoft Update, and the online services of the Store to help keep the device secure.|TLSv1.2/HTTPS/HTTP|*.update.microsoft.com| +||The following endpoint is used for compatibility database updates for Windows.|HTTP/HTTPS|adl.windows.com| +||The following endpoint is used for content regulation.|TLSv1.2/HTTPS/HTTP|tsfe.trafficshaping.dsp.mp.microsoft.com| +|Xbox Live|The following endpoints are used for Xbox Live.| +|||TLSv1.2/HTTPS/HTTP|dlassets-ssl.xboxlive.com| +|||TLSv1.2/HTTPS|da.xboxservices.com| +| + +## Windows 10 Education + +| **Area** | **Description** | **Protocol** | **Destination** | +| --- | --- | --- | ---| +| Activity Feed Service |The following endpoints are used by Activity Feed Service which enables multiple cross-device data roaming scenarios on Windows|TLSv1.2/HTTPS/HTTP|activity.windows.com| +|Apps|The following endpoints are used for the Weather app.|TLSv1.2/HTTPS/HTTP|tile-service.weather.microsoft.com| +||The following endpoint is used by the Photos app to download configuration files, and to connect to the Office 365 portal's shared infrastructure, including Office in a browser.|TLSv1.2/HTTPS/HTTP|evoke-windowsservices-tas.msedge.net| +||The following endpoint is used for OneNote Live Tile.|HTTPS/HTTP|cdn.onenote.net| +|Bing Search|The following endpoint is used by Microsoft Search in Bing enabling users to search across files, SharePoint sites, OneDrive content, Teams and Yammer conversations, and other shared data sources in an organization, as well as the web.|HTTPS|business.bing.com| +|Certificates|The following endpoint is used by the Automatic Root Certificates Update component to automatically check the list of trusted authorities on Windows Update to see if an update is available.|TLSv1.2/HTTPS/HTTP|ctldl.windowsupdate.com/*| +|Cortana and Live Tiles|The following endpoints are related to Cortana and Live Tiles|TLSv1.2/HTTPS/HTTP|www.bing.com*| +|||HTTPS/HTTP|fp.msedge.net| +|||TLSv1.2|odinvzc.azureedge.net| +|||TLSv1.2|b-ring.msedge.net| +|Device metadata|The following endpoint is used to retrieve device metadata.|TLSv1.2/HTTP|dmd.metaservices.microsoft.com| +|Diagnostic data|The following endpoints are used by the Connected User Experiences and Telemetry component and connects to the Microsoft Data Management service.|TLSv1.2/HTTP|v10.events.data.microsoft.com| +|||TLSv1.2/HTTPS/HTTP|v20.events.data.microsoft.com| +|||TLSv1.2/HTTP|www.microsoft.com| +||The following endpoints are used by Windows Error Reporting.|TLSv1.2/HTTPS/HTTP|watson.telemetry.microsoft.com| +|Font Streaming|The following endpoints are used to download fonts on demand.|TLSv1.2/HTTPS|fs.microsoft.com*| +|Licensing|The following endpoint is used for online activation and some app licensing.|HTTPS/HTTP|*licensing.mp.microsoft.com| +|Location|The following endpoints are used for location data.|TLSV1.2|inference.location.live.net| +|Maps|The following endpoints are used to check for updates to maps that have been downloaded for offline use.|HTTPS/HTTP|maps.windows.com| +|Microsoft Account|The following endpoints are used for Microsoft accounts to sign in|TLSv1.2/HTTPS/HTTP|*login.live.com| +|Microsoft Edge|The following endpoint is used by Microsoft Edge Update service to check for new updates.|HTTPS/HTTP|msedge.api.cdp.microsoft.com| +|Microsoft forward link redirection|The following endpoint is used by the Microsoft forward link redirection service (FWLink) to redirect permanent web links to their actual, sometimes transitory, URL. FWlinks are similar to URL shorteners, just longer|TLSv1.2/HTTPS/HTTP|go.microsoft.com| +|Microsoft Store|The following endpoint is used to download image files that are called when applications run (Microsoft Store or Inbox MSN Apps)|TLSv1.2/HTTPS/HTTP|img-prod-cms-rt-microsoft-com.akamaized.net| +||The following endpoint is used for the Windows Push Notification Services (WNS). WNS enables third-party developers to send toast, tile, badge, and raw updates from their own cloud service. This provides a mechanism to deliver new updates to your users in a power-efficient and dependable way.|TLSv1.2/HTTPS|*.wns.windows.com| +||The following endpoint is used to revoke licenses for malicious apps in the Microsoft Store.|TLSv1.2/HTTPS/HTTP|storecatalogrevocation.storequality.microsoft.com| +|||TLSv1.2/HTTPS/HTTP|1storecatalogrevocation.storequality.microsoft.com| +||The following endpoints are used to communicate with Microsoft Store.|TLSv1.2/HTTPS/HTTP|*displaycatalog.mp.microsoft.com| +|||HTTPS|pti.store.microsoft.com| +|||HTTPS|storesdk.dsx.mp.microsoft.com| +||The following endpoint is used to get Microsoft Store analytics.|TLSv1.2/HTTPS/HTTP|manage.devcenter.microsoft.com| +|Network Connection Status Indicator (NCSI)|Network Connection Status Indicator (NCSI) detects Internet connectivity and corporate network connectivity status. NCSI sends a DNS request and HTTP query to this endpoint to determine if the device can communicate with the Internet.|TLSv1.2/HTTP|www.msftconnecttest.com*| +|Office|The following endpoints are used to connect to the Office 365 portal's shared infrastructure, including Office in a browser.|TLSv1.2/HTTPS|office.com| +|||HTTPS/HTTP|officehomeblobs.blob.core.windows.net| +|||TLSv1.2|self.events.data.microsoft.com| +|OneDrive|The following endpoints are related to OneDrive.|HTTPS|g.live.com| +|||TLSv1.2/HTTPS|oneclient.sfx.ms| +|||HTTPS/TLSv1.2|logincdn.msauth.net| +|Settings|The following endpoint is used as a way for apps to dynamically update their configuration. Apps such as System Initiated User Feedback and the Xbox app use it.|TLSv1.2/HTTPS/HTTP|settings.data.microsoft.com*| +|||TLSv1.2/HTTPS/HTTP|settings-win.data.microsoft.com*| +|Skype|The following endpoint is used to retrieve Skype configuration values.|TLSv1.2/HTTPS/HTTP|*.pipe.aria.microsoft.com| +|||TLSv1.2/HTTPS/HTTP|config.edge.skype.com| +|Teams|The following endpoint is used for Microsoft Teams application.|TLSv1.2/HTTPS/HTTP|config.teams.microsoft.com| +|Windows Defender|The following endpoint is used for Windows Defender when Cloud-based Protection is enabled|TLSv1.2/HTTPS|wdcp.microsoft.com| +|||HTTPS/HTTP|*smartscreen-prod.microsoft.com| +||The following endpoints are used for Windows Defender SmartScreen reporting and notifications.|TLSv1.2|*smartscreen.microsoft.com| +|||TLSv1.2/HTTP|checkappexec.microsoft.com| +|Windows Spotlight|The following endpoints are used to retrieve Windows Spotlight metadata that describes content, such as references to image locations, as well as suggested apps, Microsoft account notifications, and Windows tips.|TLSv1.2/HTTPS/HTTP|arc.msn.com*| +|||TLSv1.2/HTTPS/HTTP|ris.api.iris.microsoft.com| +|Windows Update|The following endpoint is used for Windows Update downloads of apps and OS updates, including HTTP downloads or HTTP downloads blended with peers.|TLSv1.2/HTTPS/HTTP|*.prod.do.dsp.mp.microsoft.com| +|||TLSv1.2/HTTP|emdl.ws.microsoft.com| +|||TLSv1.2/HTTPS/HTTP|*.dl.delivery.mp.microsoft.com| +||The following endpoints are used to download operating system patches, updates, and apps from Microsoft Store.|TLSv1.2/HTTP|*.windowsupdate.com| +|||TLSv1.2/HTTPS/HTTP|*.delivery.mp.microsoft.com| +||The following endpoints enable connections to Windows Update, Microsoft Update, and the online services of the Store to help keep the device secure.|TLSv1.2/HTTPS/HTTP|*.update.microsoft.com| +||The following endpoint is used for compatibility database updates for Windows.|HTTP/HTTPS|adl.windows.com| +||The following endpoint is used for content regulation.|TLSv1.2/HTTPS/HTTP|tsfe.trafficshaping.dsp.mp.microsoft.com| +|Xbox Live|The following endpoints are used for Xbox Live.| +|||TLSv1.2/HTTPS/HTTP|dlassets-ssl.xboxlive.com| +|||TLSv1.2/HTTPS|da.xboxservices.com| +| \ No newline at end of file From 7aab2d4b96947c5b6b16ade3a216ee10c1c9adc2 Mon Sep 17 00:00:00 2001 From: Samantha Robertson Date: Thu, 17 Dec 2020 09:41:34 -0800 Subject: [PATCH 134/486] Update deployment-phases.md --- .../microsoft-defender-atp/deployment-phases.md | 3 --- 1 file changed, 3 deletions(-) diff --git a/windows/security/threat-protection/microsoft-defender-atp/deployment-phases.md b/windows/security/threat-protection/microsoft-defender-atp/deployment-phases.md index 9d2261bd59..103eef241c 100644 --- a/windows/security/threat-protection/microsoft-defender-atp/deployment-phases.md +++ b/windows/security/threat-protection/microsoft-defender-atp/deployment-phases.md @@ -37,9 +37,6 @@ Each section corresponds to a separate article in this solution. ![Image of deployment phases](images/deployment-guide-phases.png) - -![deployment phases - prepare, setup, onboard](/windows/media/phase-diagrams/deployment-phases.png) - |Phase | Description | |:-------|:-----| | [Phase 1: Prepare](prepare-deployment.md)| Learn about what you need to consider when deploying Defender for Endpoint such as stakeholder approvals, environment considerations, access permissions, and adoption order of capabilities. From ef5895a7ebd147aaf01a0a9f8eca2d65c6e424a2 Mon Sep 17 00:00:00 2001 From: Samantha Robertson Date: Thu, 17 Dec 2020 09:57:46 -0800 Subject: [PATCH 135/486] Update deployment-phases.md --- .../microsoft-defender-atp/deployment-phases.md | 4 +++- 1 file changed, 3 insertions(+), 1 deletion(-) diff --git a/windows/security/threat-protection/microsoft-defender-atp/deployment-phases.md b/windows/security/threat-protection/microsoft-defender-atp/deployment-phases.md index 103eef241c..6155038acf 100644 --- a/windows/security/threat-protection/microsoft-defender-atp/deployment-phases.md +++ b/windows/security/threat-protection/microsoft-defender-atp/deployment-phases.md @@ -34,9 +34,11 @@ This guide helps you work across stakeholders to prepare your environment and th Each section corresponds to a separate article in this solution. -![Image of deployment phases](images/deployment-guide-phases.png) +![Image of deployment phases with details from table](images/deployment-guide-phases.png) +![Summary of deployment phases: prepare, setup, onboard](/windows/media/phase-diagrams/deployment-phases.png) + |Phase | Description | |:-------|:-----| | [Phase 1: Prepare](prepare-deployment.md)| Learn about what you need to consider when deploying Defender for Endpoint such as stakeholder approvals, environment considerations, access permissions, and adoption order of capabilities. From e68dbc8f3b979714c559bd4cc7855d2fd8ea3da9 Mon Sep 17 00:00:00 2001 From: Daniel Simpson Date: Thu, 17 Dec 2020 10:02:35 -0800 Subject: [PATCH 136/486] Update firewall-settings-lost-on-upgrade.md --- .../firewall-settings-lost-on-upgrade.md | 16 +++++++--------- 1 file changed, 7 insertions(+), 9 deletions(-) diff --git a/windows/security/threat-protection/windows-firewall/firewall-settings-lost-on-upgrade.md b/windows/security/threat-protection/windows-firewall/firewall-settings-lost-on-upgrade.md index 3bb0a16e42..c793caf0f3 100644 --- a/windows/security/threat-protection/windows-firewall/firewall-settings-lost-on-upgrade.md +++ b/windows/security/threat-protection/windows-firewall/firewall-settings-lost-on-upgrade.md @@ -15,29 +15,27 @@ ms.collection: ms.topic: troubleshooting --- -# Firewall settings lost on upgrade +# Troubleshooting Windows Firewall settings that are missing after an upgrade -This article describes a scenario where previously enabled firewall rules revert to a disabled state after performing a Windows upgrade. +This article describes a scenario where previously enabled firewall rules revert to disabled after upgrading to a new version of Windows. ## Rule groups -For organizational purposes, individual built-in firewall rules are categorized within a group. For example, the following rules form part of the Remote Desktop group. +To help you organize your list, individual built-in firewall rules are categorized within a group. For example, the following rules form part of the Remote Desktop group. - Remote Desktop – Shadow (TCP-In) - - Remote Desktop – User Mode (TCP-In) - - Remote Desktop – User-Mode (UDP-In) -Other group examples include core networking, file and print sharing, and network discovery. Grouping allows admins to manage sets of similar rules by filtering on categories in the firewall interface (wf.msc). This is achieved by right-clicking on either **Inbound** or **Outbound Rules** and selecting **Filter by Group**; or via PowerShell using the `Get-NetFirewallRule` cmdlet with the `-Group` switch. +Other group examples include **core networking**, **file and print sharing**, and **network discovery**. Grouping allows admins to manage sets of similar rules by filtering on categories in the firewall interface (wf.msc). Do this by right-clicking on either **Inbound** or **Outbound Rules** and selecting **Filter by Group**. Optionally, you can use PowerShell using the `Get-NetFirewallRule` cmdlet with the `-Group` switch. ```Powershell Get-NetFirewallRule -Group ``` > [!NOTE] -> It is recommended to enable an entire group instead of individual rules if the expectation is that the ruleset is going to be migrated at some point. +> We recommend to enable or disable an entire group instead of individual rules. -To avoid unexpected behaviors, it is recommended to enable/disable all of the rules within a group as opposed to just one or two of the individual rules. This is because while groups are used to organize rules and allow batch rule modification by type, they also represent the 'unit' by which rule state is maintained across a Windows upgrade. Rule groups, as opposed to individual rules, are the unit by which the update process determines what should be enabled/disabled when the upgrade is complete. +We recommended that you enable/disable all of the rules within a group instead of one or two individual rules. This is because groups are not only used to organize rules and allow batch rule modification by type, but they also represent a 'unit' by which rule state is maintained across a Windows upgrade. Rule groups, as opposed to individual rules, are the unit by which the update process determines what should be enabled/disabled when the upgrade is complete. -Take the Remote Desktop group example shown above. It consists of three rules. To ensure that the rule set is properly migrated during an upgrade, all three rules must be enabled. If for example only one rule is enabled, the upgrade process will see that two of three rules are disabled and subsequently disable the entire group in an effort to maintain what it sees as the most pristine out-of-the-box configuration possible. Obviously, this scenario brings with it the unintended consequence of breaking Remote Desktop Protocol (RDP) connectivity to the host. +For example, using the Remote Desktop group consists of three rules. To ensure that the rule set is properly migrated during an upgrade, all three rules must be enabled. If only one rule is enabled, the upgrade process will see that two of three rules are disabled and subsequently disable the entire group in an effort to maintain a clean out-of-the-box configuration. This scenario brings with it the unintended consequence of breaking Remote Desktop Protocol (RDP) connectivity to the host. From 156e31cc363362da8c52914351ef8a1b7f46caae Mon Sep 17 00:00:00 2001 From: Samantha Robertson Date: Thu, 17 Dec 2020 10:28:53 -0800 Subject: [PATCH 137/486] Update mcafee-to-microsoft-defender-migration.md --- .../mcafee-to-microsoft-defender-migration.md | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/windows/security/threat-protection/microsoft-defender-atp/mcafee-to-microsoft-defender-migration.md b/windows/security/threat-protection/microsoft-defender-atp/mcafee-to-microsoft-defender-migration.md index da9f78e5a9..dbb50ab562 100644 --- a/windows/security/threat-protection/microsoft-defender-atp/mcafee-to-microsoft-defender-migration.md +++ b/windows/security/threat-protection/microsoft-defender-atp/mcafee-to-microsoft-defender-migration.md @@ -35,7 +35,7 @@ If you are planning to switch from McAfee Endpoint Security (McAfee) to [Microso When you switch from McAfee to Microsoft Defender for Endpoint, you follow a process that can be divided into three phases, as described in the following table: -:::image type="content" source="../../../media/phase-diagrams/migration-phases.png" alt-text="Migration phases - prepare setup onboard"::: +![Migration phases - prepare setup onboard](/windows/media/phase-diagrams/migration-phases.png) |Phase |Description | From 64baf0f2a530948ab835655427c5a7c19d67732e Mon Sep 17 00:00:00 2001 From: jaimeo Date: Thu, 17 Dec 2020 11:54:58 -0700 Subject: [PATCH 138/486] some updates about RCC chat; fresh image --- .../images/quick-assist-flow.png | Bin 0 -> 25812 bytes windows/client-management/quick-assist.md | 8 ++++---- 2 files changed, 4 insertions(+), 4 deletions(-) create mode 100644 windows/client-management/images/quick-assist-flow.png diff --git a/windows/client-management/images/quick-assist-flow.png b/windows/client-management/images/quick-assist-flow.png new file mode 100644 index 0000000000000000000000000000000000000000..5c1d83741f6e97ee1d9833c315f300c43e7b76c6 GIT binary patch literal 25812 zcmZs?2{_bk^gldOR6->wLQg6aNhM3xlqFfGLRn^%Y*{8*#$b##YbXt}%h<9_*1^n} z3aOEOUq=`_!&t|d@qYC@zu*7=zSrAz=`yZ+?&X|wpL0Iv{+w_#6Mg=Jq6a}B5Wm4~ zox30q_aX?y<-30m@E7z&bKnDr%j>TGO;B;msTttIUMFp1Z4js=hHv}PKH&3#XSW}E zfj|OvyFXlw@VqA=&=VH}9qs#m(1l_2yHm8(DI~|5?NfkO((@#gVEd~2+8Y|KdmjF5bTzYk{sQ=~`v!&=boMZfD?>C8L)}`EB?zW365WXKb_*kYr14o% z5fSnkV17NW-9^6XGiRJeyv^z_R*4m=Mp+O`3&9sX3yFk1117Cluth>~Zj-Fzd zwXWXn;)c{(gfXO^B9X|20kr=^EhCeWQPq8B4mwCX;t^W=zRc|~D;padV8SycXkSQ9 zt}lFNNwV66>;6MYEYZJjt^UHkt!`gk3@_ytMqdP&3po1ePmN$)dL-P&+kE&8g`4&d z1FFTh%vVGPjGnrKFv#ZchRas`5D z$9`~z3M_Cgpf^)IQ{7A=Q@!Q}MiK%D`v6IY*+12?)!peZoZ2X$fo@Th)A|4GVGfL2 zuYBy;e}!d@zp45E`TnpjGtsHF&ngvDsUbvr!SFszqo;-~US+>vuY_+o{zK{IhXm;y z0fbyeB+lp5bm(GW)vF^lYBBx5cYw`(@m`O$zHUg)42(e^w7Xal#c1Trb0^qxUKr~j z_x>w~x9P(K1P(?Hdj9-*P|%2Zk)8-7hm6F?5S-%c94AAhj83v)Y;E>?+eg=iH z9I(h*cbM!~C~jcUO*Pm*;(1LA2`haAYS7z5g*hvar6*$~$Qcqx8?-{qb&=_#!}5|l zTOKEaL&m_kPg(Ti0QLF_rd<0Sjgc>oURL(9;>orzzO*zl!|2`RgqMI%t%Bl7^7f zEYg)t7#Z}VK7I`8ZP-Z66ExJu$lqR)fJoeKieZ$o-6xg9n{4l6zZU5pq=x4W8Zor$`Ug;Bi*FE@IMZRa@P z8_gFlUaUf$Kc`I5+WORViHiK414vO9I9oxL#Rz@mVfJatT=1Ab=yI$oc|C{VI<|60 zHAm!u`Ago@Wo2a^J1%h|G;1D|{M1_sNUaB;#(WhD?>Ya@qSMVHI>->H-KzUgl_#|p zrFy!Gt<*FoCL;8Z*m#vS^sv`QO;%P`K|x`#(%rhuF)E-QG|*29zz@E$qNT+N@;TAk zBLLZ`Ml+UK9?SqAX-E)jePKB{2t?`rvrj2Daa1UwD(?Y%$Z!gna-)<}EW(zPx4cA3 z=qtW6_M81wK|`c3BV_wafeU`B{LH^ss)7QRMCWT1cps%rO-|Yf2VZsBu1vjTx_o_8 zXTYK)pm&vBNR$tlf|eQQ(xX0Xl=KQHXh;U=@-wAwm_ll8|Fd&pU8KXtr10})gvu0p zZ#>{7qKRPYFY{}$`#WVg^++@>ZbNt2YKL%7vcNq+fih+UsEhvy4Z;JcOh#Q+5++GC zTVk8Z0B*zkY-V8SfsvIf{&iEZQnfxK4R(m!0C0`T zaVDIR_fMueW!L`RK!Swd0E-KV{j^LT)sV!ofBC^_9RZY$T5U3A*9?^jtJ^co7A#T3 z(LYoDX&5->>S3DxF^I$ot(BD(+p~VH((~S!1i(OH%h?I2$xInGhzr4)L~lvLx}-rst50FY6E1O z5iy|0eDh{s)KAjAe|`F{i{d)_AjIMy3b%Qe5{27#*JIFVv4B!GOuEF5W5tqKFJ&N{4iqTfpYKAD^@WyJ*cK^F+5a`gM|2-2Z_yrJ<{yQ@0 z^5y@P2nfXEsFS&!ZJ2P}KGzht*pzl9>E9CqbLpL>NUHf73Eo&=7@W!n0whyuwbb0e z@&~;^76`4uFChMvk1U0XpPq1ZavDD?dEImDb%CzK5!#^N=AY1onV{*me=HR*0Rj|0 zHAw!o-qmzzuzcrZ!S83!&UjVlOAFM@9Fx1acNsmr_s!*ooiH3HWAI&Do+mTJK4Uw=kECknR7DWu9o zFxpGQGxMli8sMXvZATmqi1{l1$-kqdr6sBVaroZ7ds>l9A&et^gmh;mGBPq$K)m!T zHa?5_^dE}yOtqStT7h(Vvfw(G*Zc!7qN@LDo+zxw`&Y9ikPe;j`K9njQ#q7t*qG%2 z8B>P%V6!>tzvnB#^D-W^syMOp>%4;=edWK%_V1>}ZbZC%y>Kb%nYqJVo#k99%QyGU zloQHF=^yP#fzwpe{~kmpjbfFYUSOvT&|vKGWe&Ag^3mRGN@GpqpIG$xM<{Fa-K3 zutIvWk^bR@eGHg7(MmyhI6D3)ve5<{T-OC9{KOM2TzCsM(A(We=68YSu}c<`kD`*- zMEdFjle>7hCd}Nz)+@gS&6{hV6S$aqP+mdr++kXBjmj0+@IA&&;AGHaRj3>R$0RP* zmM%z9LBu3mbnIm$EA7RGkH>q%gm_cTZpZ3RetOn1pRW7#`B4v z3`S|ZOx;<{eX>B%s=So{5=_NxaJ`qWA2PB7^cgrWeB;-#kGG>D ztO}eUoRm1&E84_pH0(L|9&A=%bL@0_uxpKO$SMwU$r zfA{8YM^A?_jP+wAd`u^JG|22wEt7OjHlVhuef%@FnKuEkt?7JAEE~OX?t)U^mjb|U z1!#$+fQ=v5v){zxU5`9~LVY8xcg+}?AaQn)t{g=D^iWQR`7>NddR6q=GLedh!^W}* z(2x*V;prrI)|h##UjR*JfMBz*A4qnAI~u{SH2?Iwd7Qn{re?3%h`yDA7kQ!~xjuZm zE>w`P?*tHsSe%yF1BoTppL^vz6crU|R#~s782YmTIY3$oI`sB&Fh2n>LE6tqM&ico zgNF}2Bkx_s25xNy(7^aZbvH0EzC}ift)s-4ACnp}opkFrR0TyFAk_r%=$-ufSN_ja zG*MPk0bBM#2r3G(m9`vS;Gko`ey=ZaJ#ceLV`Io`b-KM?_~6WXY?#qOE&uDEoS&rQ zbU%kNsv%HQi{3NuYSTt0beZ0)--2PzTJ23X$_n8B*9x)Oty-GfOLdP%R6NIY#%7Z~ zf4<-lYu^~nyhneUk&;oddQki1`4ygjo_Yc9WFLZbU**|oa6we(5f>mXF{c~m-b?9s zD952kU+~&Q@@Q0d;yiP6bA`7gQL7LQSf@O+qN~ESP4jSNdwEX>pMyp)S1$6e-^3oW zt1CWlW6tbY)_Z>|+~yW~Qf?~FAU;0+>WV)C6U~DzEd`K*vA-2z%C=4_Mtv+Dozzxn z-In1*JpM)`yFb!00GW}CD{#+N@^8+!ZMaD+h=LsyWXzagcx#T1#CV=i{t)h=)IZ~E zy?Enc?ewR$CB(@k>^>eNZqmZ(UCkI$V@msC(A(pN376jd$xZ`7^aoQuI+NtK^NSvP6&&7H z6fk*~jy!FECH__YIcqDch`I(DaQ)!g9*hqpzH;UoWw7&sP;vf~#Duo;>{C>n&`L_IBq%fRo?og_ z==|}b;RP8N?x4T>WYalKiM(2B8=DCM7iP8DRT7P%f+?EBS@ff6b8}2gk&Fpt`3XiJ zm1>%$B)*#1o}3(h?YNTIo94QikJefb(`S2hx*;uyra)Qa@*(w`*-O+arr;%db{;Q)H|uYA+>l)Ohx;w#&l?8ou}6;iSO+&@ zK_6!F+v`pcD2!n;*{$f_AI`iq@|ALJ)JYv8vG3S75i}=tqgAsL$ZqUKY3{whRGi$- z3+PQ%%01)hFFRsT=R7<4(&8kkVXb5`U+&)Hg3!+QdgSmeJFmxl#>Z%Eo?#^`YdrGx z(G3yYdyi_ZdD(ulaiOo5eeiJ6`D<;1UVjA#B;t2g?ksU~0>cdtNcfF%HJs?4%l-a! zgcPu1mGilzD)AKY-ZhX8(g}&|CtG#jTWR}rYbLonEN#_lBAqaBYyMR}DgC45cCwic z^4MwX3BC_bj$LshnSrIs@&dn%ALT?z7-4g+4-X{b1oN>qdRh=4Cy3_85!GUY8V6V7 zF$Dhe#GM(F9|8nxW9Pyc-yt9tD5BJ&mXc*-PF){+dN1c5epDe~eZJj_bNoXRc(cuJ zGU4tg^6m{&l`)m=-I^k$6)yfdQO4>H6LoH{`_}xhPF%{k9Y)X@5wrfG>HL_)&jU#G z=W*ss=g(kKj)2eE;D&`2!ha&b<8>yo(6P|~Mo)yARhq$}TA(#$WHsu4i!9bt@jy;w;CE4;}eMm|>OJH`+v6P?mE|(|x1% z0679OK`BMW^Sk2B>tPICOc(p!J)xO|%ACm<;#rn^_kn0x@#{}o)P zv%Tt_^t8v$o|qVEaeSMPUDF5B^>176^URx^9IYFS-REXFHpVLA%_c@q^q5P_R=PEf zx691SF16n+i_+4+Xw_i3`6kufBk&8M`!$b$z){!l=KQZRZ+qL<&djVLEM)p+j~+`w zUQ~&MJ@bHyOQ?E>MY`X)iGkO_u4DHv=3C7m(-A(#BdO;q(yNXa)h@k}pEiHtdLO6= z9DFAi{NfR!-~j*X-|!L@yQEN>xIW)Mp5*uth!6`5n(l>FAh`YjA{EB_+_J#?v{C?P z_(SH>(k|=cEsay^g!Tminh`VmlLP&JXy|4Rqf#^9;o(q}NV@Z?F ztj9M#|5DW5IZPvzbbUjJ4x(gMrX7M^6L9l$K=J{;Q3>J+*;Pg9zpA)1HVw&IaC#7_ zr3}_#0zijQQdKpb7RQWuT6Du$bu_CYm)n(+fqcoZx@LXJ^+pyhYo@!I0Cg zF;5?Ou1M)g5&pVA?Ad4u-Njm#NAETL!GL>5X-zjUbUkSZ$4QHo=$cAfo#`yLtzC|0 zNGCwqV+lKt$7+&`iH=jGoi*8fLkP8mvwpfrB62zW}^D>aO$7BPz8F>D~TgCLc0M*zV>U*g0lS2Dm|q5lU(vv zQ~|uNf}Q^>#x?*;+msg2LJqfRjRbW|dta<{JW;&uc7?FR5S&lP&jerxW48O3r0>sn3)eaj_{wsW~l7z*3qGspK#|NT# zqUQfKi?g~IA`59`Z0sNMKKrQ)|g3)EAVC3hy=Eyl6i)YhHVb&Yh^fO75HWMY}c zD{V^aaXH$keniW$qqG+$UkE<>@7W<@aPsU{vioM$R*3aAXdYuco!I^KeqfUZVgYTp z%9D*vx}v2cP=JU^DpEhqRd1y196y{70s#lh{yjby8TY;=2+A7 zE!QOoM^+Gp()YePBK|0D#>Wo@=y;InCwrXMnofS!?bF`Q#9Go*supwPgP8KsJ6pnY zdtbFfD#J{LOw^O|;m0!7+YV#~ilnJ*XYm}-@^yZ8eVZ+HXLgzCXZiVY6uh6*>xi%+ z&lLyMu6Cx&KVS#DWZ?foq}Lbf>if^urD+7@9xFomYm-$ zEg|@BuySlEZa2ltORZic;*cy9|Vq_xAua_gWan8u_FhWNqSpgvP>dLh}XHmx8a7 zpw-6%lXM~vUix{V?rY{Yb4A3XcEJP|#(k=FV8MvQ9Tu;T`-r4gD+SY+Pydwg5BeY*ih+Mali z{e$$Et)u|fa*gENxJJ0ogFKo0!~ZYl(R=VM?rW-Rz|Ni3XfRch1jq@k(GP4VeQ_8; zYt)KU37LIRh@I+I9*WJ|fM|Ms78b9^)hteaf~~2Hs75kci96GwmsTX34F5`~l3?xa zV*F<~^ZwIP0*dwtC;gmAiNXh+UxOCQdQ@ysTgA-gueJo#`jMfBs&ca1AHa8$#_qh? ziTHl;vHHONFb1maSL!*nk}sFr3O0CzXq{8T=DT;m6kYpl2}g#D)Q2|cBOybk7mYFE zz4WbZ6ii}CElW`w!^@N7hlqS0$bn88iu>XvH5AfY=0x?cB|S+)SbDln5<3Sk3blWI zqWslU7ITA}^siIPm(QKxm!53W!_Z&7j0q{Ebai3oJWul+rir9!t-lvfHv zZiif)JM~Mt4vgzo5Nv+bt{u3prn|w`K|C*O*lsayE_>xZvMLRD32+!ge9|wjggR_; ziL}*Tpulr1Y7d3lZq87Pjl4fZc|%|2abTp$kI*f^FL?e_L-kLCE_O4%Rt(NInl&4|>+LMjL)!nt zn&8&{wSjP>^*I7RDmBT^u@;YYm`5n{p9)|89uXyqW-FVXpEbYlGM7|IUxoUxn?uRy z`ie_0^pGseU1w?zz(G$L&-KOOg1ijM%dc1^0M*|utGB&qh?V-2Yf4#jq##Dq*Gy%A0(=KZR8%`SXNOYX*d99)h(`b1EZ48|Vl!*X;R1v5Aq;KCM z{0IJnX+pj2Tk{VaCb(JLFw(kT*`O2ruPy8^y9WPfgc@lowCmO}mR1+)S=NZWsLb|Z z1hvTj`8Mb?5yk?K@wfOEzYhJY^9~t?{pv0gli=kfZDE!Vue>y>LTDf%J<;(LP z4bbiGrue2#2O!XP-Qd>G91)rOW=QTVkXT&-y!=9dX}q6H6olu?uFuR*I;uRHmX_wr zcNwT$am^z4{ zHB+~+PLsBT=V0!Ck^OERAWA3-n>T*k?nD@aW(8pT*3}Ru^Lfm%R9SgSdeFie@g75x zu%1KaBuh)GttyAZ-!jgL(;CQ^+pIca>>mx037RXg#fod_x+sE><*iKlpU1y`{X!6K z(o;0%AE|Ojda8NgA8~6|VNrah8=PVy?tbxFhi7e=CAF z3-cKp8#^rO@wX~6#RVLTyDDw+#Y{DjQsHT?=L%u*LT6TI2TQq z`7$eLjh_HG2&-pIV@FKFXI_a8h?@HM*hxd(f2H~rw$uC}QCZ8Z-;-Sogq1q-_9Wuy z+9OX=x&Nwlj4V4;q*3sEGk`UDG6PY-s{`u0iHJDTl)Uc$ZFp=YGcf0JGi>Mc;M$pQ zayMH4XTMcuwF`qpV5b7FT{tzV_|H!G4D^3xPD&)hxBU?m!cAM#$(ApOU>wb28i=>q z%K7X4x24@cXRq_%7!3wk-ah{OHu9+lI=2@BG^d`jLjTse=L)jGIJcr#8PQ)7ckQx! zlH%%nezqu!E=vtpZcQNpw&OZ{)g-ek{^~d31o+T4Z^FjiuDTE^tG8GmbiJI=tiIV_ z-AEqV1$ZZEIP$Wu_=wP}H^ThqR5?4poan!ZpNSEoRZ!KOYv@k*^h6-NAZrZl$it-n zt;x#J3%8eHCeC(-epddidZ$n-CTOz>wXQeCI#*ZGWTENqLgJ z<0mehke`>jE2?;Ot=1dW?O?zS)T4Jx*p>zm4v^=;J|@+oTBoiyVX6K$?zN1zUZJ(x za`z>Ybj&gM&AA_fdqHN%eRVIy7ZjhKokh)j(f)RRv1ZC}sudO{p|5rLf0e}6jY!mW ze-1yT^rtw^v`4uqE4m2Cmr1i*@whoYLlJu39*|z=L^EMUvs=}3!8jKdVEgLkaw8OL z>STO&uE?k!c04)nP*YW-#BPMgJv=KK}DE^+epm`9T&4WIy@|r;&u{u;u=ClUEsgF>Kd$ zq=aO>gnw9|SAY7Z$J7hfRJnq=xS%YiyY+|oF^?~k*tOc=iiFgT{&b}lTfSQx)I<6N zP0)irq9>w6`+&Fn`?lXKbuLhL*xROjdZ&cf%z!slK!~ET^Gz@XLv$-YzZ^xjKkxBl z^fARi%Kp-rc z2;O1uaPUZceDC{>TrC)QlM(|wjM5a9=$`}dhzJdLdW2a*V z5!?rXzJh4)NRk|Zjc!AI(_zoz;L5wde{) z1I3jd!1|YYYFfr*_7&h!=j<$B57*c3ZNW$m}kb-0K zHfZZX=s$DsG6Pd|kG>!%7T0@K-boo#>H zi2r&wt-^f33Zel8t5_Z$zYDE3a*$3^flNntU>BPL97xhUsy9e#O?4Q#!zPkj} zgEU@T|Gu4)tI5u_+LBHuNkibeYgYbsQF!UuqQJE|^e#@agsyznAql%*8Mz9wE7a*V z&xvNrSlXgj0AY-6y!a4#{~E@5nE2<1W`}<_f4}_EV)F8OEv)!@9~hn-p_6zwhu|1rS9{BE^B-NasPg0oy)8-S1U}kGO*cKoG?!raj9d9r zyIzI+0}j(Ft3(Qd%jCLU*Y@I7sL+~4ExQjf?!JEVU*FaX%G?HWHu7vuvJl-WKXCg4 z9!m7Pz*&7dr*AJEQ5;8}OOsEv@n4%QRK8Ua#~E<~fiB<05EXs1;Cav1`0+&Kq}xcY zWyND}#Xv@m(}(q61yyzRnWjcIh?PjPf4|ZI@JtB2bHZS+s=uCJS;1MFjxbhZf}R73 ze7e9E5;CIMp~~)tXVFD}UB zVqFdn%Ef0xb=PJ9(t-|mM93!{_P-#|o0xj{KM&2%u-~nG>;gPmVEAy`#?nU2yfew} zyaGiQx3fCMH=_WaUD;v%D0JTgGUMeHkT6NNv7*(yT@0=;)j{&Biu!lJ;EWPi z_z;UJFEci10lZEBeN=nSfXC@P(~El1eMzsqg*0NE_9$&L%HmDsS&)YNBAN1uF% z==hmgnR+eCgYbu5^U23*@oT$(X!L^?l6tAn=7}#>K#UN5h7l1DtWybUmeyk9_0fS_ z6}>pt{gtqkXhwP!)3ha>{I2Q_l%1zMcN}D%IyL0DNLsa_6 zxc))mibGgph#0?WxbkZp0L|=74y`Fu^bG>eysx}f5Ye9olNBeT%Hcem#mX0)d}B-u z)W~-$aBk_1{Yv#k&dEicK`+s@0{4v(Y_vp>#^O{?Qf`a{bvGFc|lr$@5Pq;Ut*%7f@{K^ZJqQZ(R5GZ$4 zNb=J5`yP_R#z^d<<%gbLFuVkNE>NeWUI*qgbKbrB+`9}Psn~11E?Lnk=qIR$4qoo* zPNG78>b}fmQ1t{N#OUc^9M{hxMV+H_ZJ%p^N0G#a$X<(E;fzW86nfX048EZ&4{x2! zMv5EwEU~A%)lirnpr|miIinFVzbqUDF%fkGo_nYr_`Iao>Kbo_rew1Wd}3i&U6c&N=U@#LLO$zm*FLv4yv754(L2 z8gqdixfm{{e`Q4DBKg}h_d=*~CQ-xKD(&L>{iv?BhPlI7q7Bh+W=4`d0RYRLc30n# zK$cV7BvsvO-Icl-j}q*fT4b*Px60OBrqL9*p8%xK^uMVNI{o1$Q-r)NBGfzVjS4&v z6>@_A3`aKeT9tDcgcP42WhJ0epRB3Jbc}U2Vt#3FyZiq3X%CB?GTyGXX@d_%sk%us zb@GPZVv)Hh-7jZ73e7qPI*ebF9{bE5p^3G|Pb$dxXKqP`2RUp0&C2t3Nq5kWf^*(?Y&auJ#p?EH%K*$i?+?=^T>&t4UHWoadeToFU*ed z1sXX!e|F|S5>?%$nyKpg{-D@NCbnI>Dz9YUM&Hqxe-tQU*3#7n%FQFe)WFhfIijYT zxa`a;<5q-+0nz(JHC#$7%EEelwo7&JC4K{zdkx2a&}#h_3^C}%$Vu87lyLa1|6l6gUI%St58wvN+Yl^>pZ<5#@A6QVbL z`?vG3aYu?vlu+$?FGwFctKGefH4Uk^R6Cnoqqh&D84G#iJA0V6R=;1@Got_lqc2j!IaMUBR%%DzuzvK7reg$QJcu!y(!Zd|F+Uhue=`^1|nOBBypMVs^mmk3$i9F-y^1;{= z?J{e!d*pI+XvfflAr+~b*N1|>f}&P}Z~hxjy2;>l^|zWE#ykIf z+B_B+@ak^k*tE(C+m9!jCr=&5t_MM$4Y|!oYnqRbEW4$eT$^M5bUw_mKy^%8nOdT(PGovp-~d{yjTxNHt~d$F#7AQ?I^ z7y&Sm^(2UCFI) zG-=N+b1jmrsoC0&)wjI|k_rK6OD(Ib? ztvG!IQVWg1mHe3%wZj1HBN>^hA0Y*ZPkD!>(s z{`XhA`n97pyyiCL`)B-cpy2Q?SW!ewcM9&FJN znEY(fHXyDn;E^u6BBFNaq}Gi6L14qX)50;M>~oAq4-r!(00p*6ZvoKb;@M(ADoKwZ zr-qkEUg7g;4|`6jU^i<5J-fJ37a-6BLA~-L6qezP;ydU8asLWr{Qg%7Dml-5_%Ck( zl-*r=C%|p4^ne2F=U=qA^;|39kcgwbeb0QFN99OsBf?snjXGd=>mJP@y&0;{mDsIQ zG~qEkXDM(D_s&wOB~_|T(9q8a&`ieBnn(s^*;+#Vk?e7iHL4O&BjG9o9=>u^Klo{- z6u9!Zahef~OSv;y^Qb>^z3tO8P8jN1B>pHFDechIzJlGEY}h;ybHT=z`~FP?BnV)O zxfhv4kgXj60fxrY4(cnG)UgtwWyDPjVo99+v+g0%MyBq)(x!->Yh(Cy*y|aQQ-`r z1e>CLqx%A7@PtfKT1tvr@(i2x$HrFScH|V*mgR@LK0>J#(O(`4l+4_w5a?YcZB;<9XjzVm%ol$EFQReK&`U{IvfV)ly6inOJL&z+Gwo_h3i z6iHQYXMjWM+FMNf`RdAHJ)~*ez5qP>uaNXkR@4br`#zX7i5ZIfg9>8|rd7Y&)F8-i zS$kzSpYFf%#>@WeX<(P{0g=UH$#7<_4}&DjAC`Qec-N?(G1- zyMF}35KijdAh++Y^}6!Id;9r45YJ6)mDr!MV@_MY!EmQG5fjod?i8++wd685w#$#c z$T%lYk-vCxexRaY^L6&2ixga8VLinChNGk7*hl5l)_9L$^&5+lg0>|_JKeaTIKcdJ z=(!U`ZwJDeX_?y-trkbgP`bljYV`@rT}JZwYELNaVW52${G;kILqkK=$(lcW)9IBb zd!IP^XZsTNk0dZZEJhzpq_VqwmLZxXUD*7&*SX%APpSc{+~5N_XAkcP1uU{*nk!iT zboA%VI@)wXv+3HFK@0KfT}k@9CIv@i1YHlpmb;a`FMU2a}d-8vy?5U58$w zTvev;$F06f_hhxLJ+~YZg8+_$hGJQvjXy3Xcf#Dlr>tpaW+qBZxh9lvH9U>EK8v_q zp3pBQo;tU*N6bf4QPF2&id>0vu|`Z?2?%g+dL@0_gtV}J24gote51z!l@nNuCxCqV}UJO z0do~uwBPNK5SN@kx@`iy^m$NgHRz?ApCV%iGTa6$oA;4kd`wI%;S1oYV+TlCYzrhq zsf&Q-Jv}{owE`|8HIGz$d{QgX0_p$eb&ciFf zUS@jqJ2hq_l-suaBPfjg_^ofXOHmM1*0-RIKb^k+M4dlq0{X2Upx1az{GoTC!71+= z$K1JH&ibV6OK?o=F&!pxFa2SNK;%v0Y{fn4S=L|ntoy)K{Ra_rJFJn`_3ICx4aBDM znTu$Wl->F=YzL1L6H$wWwzuzXzqqzzaeb)}~Q^3wZseTJ6*3|`o{834on(0#7!gm=$nu-Jd{jy}T?2M?Gu$s+uuDd5oO1h}F z4ott$IfvN5S3R1#+5Ki}v>71cFO(I@08!(QX_Py_sV4W|zx|0y-rpNh>E-fsk)|$6 z9Oh$_n=<9+$kyyK2H#W|18ayS2%Pct-VYmN%{d+GS*TOC!2Ri$H2!Yrx_y#eDOnD5 zDWtht9RaEpPXLclabTn@_5QgP0foPe^oVFs@dl5$s$2V0EYS&HG*s#knarCH2ds1< z*!Q`H`o8!R(QL7CQKyAYR~b>X;z4T?c_imUCllO5rC&D2$ObLNcqm9^GzFW_$_3qb zg#Iy^8g6Uey=_Boa_a&4&=eC)mo2_rN-VcMUSX~qLxbu3CdcmW( zvZ;_b5_nBO$r`P49P!0q+k!1;BTKf5Z(nfEyme#Q{aoD&S5NI`HyPd87OhrrXDLn( z(|CKC<@OCltw6{sPdm2-{MvSonq9a8^c?Z0KGHKyS-7(lP94Z?jec`2Clo=xuy`^t zUcT0{qgV2?kz90}Vc{a+{pqQO+mBHf4dI?~eKMP}PV;Yq1~sVZ|9t6K|2Woq_yH3} z-wGYn+@KX%<7>XE)vl`5XmMTMv#nW`k9#%?FuYH5?wk4ELK0JhP>yps9WznfIw20 zX||}fT~uBKQ6!d|OJN;tJ0EP-^eoLk*koSAdJe&Q^Rq=e*^}Q3X4}JKFC|ER=A&h^ zz*>l{yJLts%YM>VJgHKo_KB$^-}d|OXpWwK=&wz_sr%m74&c7F*UYq1H|_6jrI6@0 zk@K(Co0^*36-d@6Z{Xde%^$jBdV}(NCuEYoh>G(UI#$>M9C~X}UKF^u_Jay9y%qEM zMUu;t`wp9FNR`---qz{dsH}X;HvIammbw$Jg&l?quMdk+m!-!u&fPAP)}LER8RjjF z<=l{2fj>8X@cuH!HKB!=X8v93jle;rBNC5~df#U#7p^YwZCUR5as!usaKqx^yO|=c z;Nt$p&!q#~3$3#*-=CJpSVsx$x99{o__M!4=c6{{w*HZChLQ7s1l?{HGhkm(5MD4_ z&q1hUo!{K}#TWAYtdS&rC7ju88r1_dSX{7+Th6YMTKhEGKA}&O6HIevbqvK2WK?f> zk3jV!##&nZ~b=HZXWmoB1Lmr7<)XWB;y_8f8`SZyICPN>&SGHmYkNWv z5q$c6&)Qad2c2UK_j=QU#6Alx$YDhS_qK$%1l-nP3dp4dAQr|+BOjmB`QX)ydPb6$ z0)S`aO?QHPC)zVvo7;X16dP7EpP@L*SykdQ#p0qiSh=DG3NQN$~?;@*Xanp23&83-dRN zX1ISw#Wp`Z>eN%Ox=Lc2mcFSg*U0LYI5_LJyiE|Bsv$;hC2>3HF$)Y?Ui(%moi3dX zTIfE`MkUBsR%;&mp^p>_vgwWx;A$Y?$?JOTzV@>#)8ow6mV%O?S;bppx_f~B1ki$m zg@sxW(Aful;IVF>@*PiRzLw87NYNK`d5!G%m(LwV zkUnfgs|3nE3&&m@3_XHiXR^FjtfSMU8xfa|(3*djIh9*l1B}0sX}<~FR|sU))aK@g z!%zq|HhO;d{BFGWch8RrW9VrQ-K>t-gIKo{d$ zf&?f3S&`3{|8iu}D$9_VT~R#}h_U^s2cTgKyn9>C8Jdn8X2uC4PfcInQ8wgIC zgpywd9Z{xU5f_NS5??z}eNI8Z`1jU|iB5A3=nJV40_Ql>LTQdb1Hr8)gscdty=%-O zann{!oEG=9F5W#7-IxxJp_Hge%}oLQ6a}+Jq4qF82{|I)n~<*GWo!9en%O)uR-QnD zSHuRgru_;vPk~aMrG*8M2~@fd=A;)tE%#xYTF7SWFkb^Aovko|X z`SQu!790uUW2+WWR#knSwKn9(G#0v5!BvTUH^&3Aikw}RBO*x$zNI!aDL@een2wUj;R07icf)29l;YU7_$)3z8l#D3j zd(*v6$jB*;pl<^OZpbB_Z=+SuX5G;bi4l5_@TW8UC28z8xKtgc_sfm^6SSxxkpN3= za;oe704ed^4n+XczBgGK`KSvJ9ZG{d*;~afvf^sj4$b)xN$>F$%N1TpEpHjBdz~SZ zQ7#&5c2jh@MR+pPcv58nOB7@ei~%(*V%^DL&5qiB`(;+`It?gY#jlFJ`Wm*2OSNgQ(S;Pfb?&7X>FCVr9}##Z*2~mSNjJY!xGPJ`porIql*KrE8QUD z5go4(WIavxk&eWXOyc=%q^GdjnPWOgphJK%6E;eBE~tz0-!EGc{t^t&-MhMCHonO4 zE#E4jOO(Kh?h~tdK$ihFgNNJn*JfqvJWub<86&uTx~?x8YQtR|ffIa)!Ka{BH}?@r zUhA1_Id2urqOxxi9al1m?pFd0-bFJ~&-$674{qq6bWh#>;1fF&_tVJ~It0{0REhi! z4|+5_edh#Q>A+QgPa*{FV7IrE>8JeHVo5oW{^zTKo6q&p`UUA$Z=s8?@gI804?_>s zhI}`oV~GZVhesqY5HC|A2Ush6)f~~Ty!(qzq~*81Wi-js`$D=@JZ~=UY(>JL>!v%^ z0fpx}O$s!6+)seaEC~p@FZZqMfjNR$;__6({cAsK20|`Vl9$wzqOu-cN+1HyuoebG zp(FZC^K+Za@hz(n^g;CVM->|e@|PmkIvc6bli45EfPzKDc>Hi&SMRCmX(h~~exNLc zUL_^$Y{=qR(iQ0AmD#y76B83?|Iz-{{*5IHv0mTnC}d=FWv{QE*76USDrL^^k!4rj zW+!tbUJKc!QU9V3$j=8agEESFgrLgsk?nqcbXJMH=Q;{V*wKlske-<0Y`~LD4S!eu zVXR6ictMBNl^3{w0poacmS!cuqMW5$J2N|hZlCJJun5bpYUtVDsh4Wvetrc&r$`H_ zV6&D(UP$=5fNpAavWfqCd#4b~C$>-4L~ z3ZfZJBGe{UP+@Hxe0v>Dbl;+G6L$KPI%DP zRPy_OBwWw;BE+QRL}H1($Q(-re2eqkMEdXIS6lO@L4#C27Yl18t+klCnvX%k5Gd|? z<<7)Sk%TsHSncwlaXK5V%x3L;+&Dk*KyMdOyKG#FX8fQ&(bMN=dslG%D`~UrXnl_J zn0zk~sX=JMcP4^Dw_o|dXMjx|NO%0Wc<6=+6MdeWp=$TH-OBA3b94OZo zy?{!WQZjo_a1(+x5xi}42T1uRzG-y=e=mKe?~_@v_~6xz zkRR+}MW9c+`);K7wGyu>{~7qy0pPAvCoMt`#I3q;FGHa62j<;%=Gvk!{vRod^Pd5r zDce@@}u*NY8??)Yg>@?zK_%oH4x<~w}k??9>+njmv(P=Td+vW(k*6ERh z9Xho=%RW?hy*{;Qwd^#-^*ao1KXo7w)BC!pcs!CMW9FcZ!T*pMNFfb=M5xT|b}WA_ z+r1Jl+b$Q4S*~|_hmpUFpBu!Wl!#U>>r?H=>VcX8rnd>CCOL)6D{-X(uD_H(od)vI z`!0f?Bf&5q;Bt!5f|D*O;4orQXYG0Wb}QjA_Sc%?u~T*MkNJXuZn@h?B1=+8lR}H7?6PGyManjn?1q$m58WCkk%@R*IU#WGa z)z$Y)_}m$(CW{)~8%YHyz%+UD4K00k)E2yAeRE6jx5s{DH;zBxrs+sknw8hl@Wm%i z2D#BFtMNu?xZAofE4QG*UMW~7STfk>g|H@SWv?ZQ1yoR(lq{y6U9<2C>5tpbg%#R3 zy;5R|bhZWub=IY3)7+#$KQTq;bUwQ6=Euk>kb#NBa)cwO$OQb2qkB6ar2(1>?@0m9 z`qo6C5Q&No+}!FH{4E(A6}u#{8&xE0V0x>(s#@iH&$=#J@5Wbmez`SwfTnkB@icav zz0hZK7_oWcmKtB3=LHeKmB>@pr+!yk1M}I)zc@b5qTDonlCxH}(1r~foyU*S4HmT{ z_YjLNx)1%;+mcEsqGTM~xdO5^Q>d4J_K;*dq!HHaHGao98R918N?p~#*Jv`{Ax>82 zTnW%&(X4k)#3xgH~vd=E~xuz^g&?UvXJ}3@wet4zYxP-n$(T6?$*JWb(u`D zKVE)?E?0tyyn@`=(`1#(8(XZ#9GCAAC*f`ZlD+2WZw`~p)lkttzVS>7Zx+Z)|HO}6 z%xyrozmAc^1*DI&KkRcVYZ{v5SHfy;r&>Qc?zOgy(C-1%Ia^EL)i%hq458sfJi4ar znN2-6((l~2QZ-)shFQ%(&254js0HSgx}Fsy;xnE+)1n(!1fQ}G9&-s6d7O7zFA0?K zYf5pYI_NB1JUn~Wl?T;8mE zR~6mA5Z2F!Ia-!DBo6KocC8K2{m4^mD(yN@ zAw90?8=b_{BSZLLO8ler9oWbRUu?7VoL2eH@7-~JF)p@ds-4zvra{?*Q073?&hHzY zu`?A1N6yP{B5GdHd}uiK<0&2FdXlNx0lH~-*s6P37_`dh8$_X8GvqcoPKMA|-WUvB@e4{O)6mG95{-k-O59sF8G|DzZu{cYRvKC;?d*K~Tq+tc`U z;CnG65kAs~n{2AXPn~Uhah-kX^l^g*Tw(61;R)rvs1kUSo);J6n!qR(TP7Rt5^uh9 zLIiR$90?5uFYT0=jYda5k^Q{7R9DjipF^@t#H+8est@m>f7?TEjM!RLvnBDYRu;aR z{6u>ZI?^6zLBr>WEky#9mjic2K*xWaGpjtC(#;5%_@1HMnlC-6>0Vd9Lq*U43Y+K{Wmn}9e6^qf$ZYt!R_rNf3kROo0OXurr*efbs@sve78(f6e)z7q1_xc zk1LY-wn{nKBm@r4MuS#c0$VwmgO39j1Yd5D_!9&UUZypXfmiGSeEMG)58>+ zwH@#ZDH9;@;a1>#cGrTqXXtc2bIHc^r6#!RJ&ldYhz5!*FmnaWg8_0l@QPntH1^1; zY{k5r+3E)+jVcFJ!3Yw|e9q9_zF5O0-A^&6zbZ2R?) zUVrx`;}+#Y%Gub2n0b)lay)d|hQhJgbBp^trd=IFWMwpD#O&Ktu;c;`iB^ldaWhs7 z1S28#BB3u<5XGI#uX&)ZSH3v_MAG7dfb$s9O{j^aEyKq& z=3n}yUs?lkV-Z%T&wpf6pc4;cZnBtl)&+S?&cvQeX#95YbQ>L~4Xj6ERQ}};pJBgU_y6=G<+ck$%==@NOV_4N!Ra@z&@J@b^s^J$ zmr4s?bg3FL=m2p8Q)E8waXoKlFQ7NgSAv_B;ejl+z&l>>Q2pwEyIKEPWXv%LoML0h zwvef-*bOoquyp7pVU0NZ##N^?`J7c;j}F%Qrb=!%vVwfVPad=CBi}p5zGp)W|23*R zBwbm;=opE``7T5IR#(u~b;~GCN_0ZB{f#=Fdsc4=2P$sAso%UdxEm|Ga%n%hcI|Hi zrFrvzm{R(jAiBzJE_AC(j1VWQWV|H7=zHW4ht_4lM}t3+mrICtY!1pw8)31zT4Ve9 zf+tC3>BjDwV+>9?LIb%(s?xAp`kRo%uvuSTX*Xj8T8_UaSv2(mbNBLT@=!&kf&{VP17b7Z-^xu z8DWGsDtc6OEXm8k^#+4&D3#&I7ZzfZR!+Ehkxw6~4NK_PYDddH-wjR%f7(_pjn_+W z?*=;|_;F9l1P84nA5~g}?B4_r4HlFjU@B2idZ{- z60-ENi5ux<9?CK8WdW)~P7j?jeqy(uqjGpca%%Kn#}B6VNk17K_@m}y{^0j573RZN zS4=9%UPsvn#NIN>#e(j~5S}MY_VP{IJ?<|a$C2(VvpKa)a7=7!e9btW>uE}^Myi)y zlonvPhmoG=$-ei@vaKXY5*XqT>E##{1~a!}Ekn9kCW3S=`&^%@iMkcx(wn1!$k*g&@FsLVd8}M@WM9rw|ZmNW5M!e&YN7TlzE|BV|S+*WJWi&b%j7L z7#u%*B;SwC!KGK0QyGUd(4N7msOD zgb2)#$58$;^TUfHdr>#s!zdg4IV``%qbM$%_9Zms?0!2sNlRd7jO3Pz@-~YK_(i9y zb}8%{!&-8iE~wslpJM-59vPCn>K*ctZ`TK158g8OR#08H;MQL0iRironhr41$y<{# zX8YyBeN8mvKa};Znjbz%)!Lp7NMSreE zit_u|D$~y}_k(hqOKq|9l37@TwWUD;-sCMx4!lKl4PVi}_XJ{R;Dhed{T20*bI|6n6`r#sN53BC@>3t3naFz1%;N@7az}ss>W60T}{I#^; za-cAi7ZeA1O!fBf(L&1^pqc%)YmALKuQ}?BeCw%qs4amvp=bGZYvdjfMFqT#Vm03i-K z-M4~-m&~vfg!}4h7$FPriz<+QuwXvrWpRpsg@TC!L^?JVoXtoCd-l{DK(5*bUeMBM zmG8f^RWjiZT9YzO5f+Yp3-%@N?c707TsL&4_#&bUM=c0Mmfn zCDzoq-G7v95}3QNk{?hy3@8moltz%}V4gdy7nViMr?J1(@Xg-=rUUGxiTXOaLafp% z$SuzCY$0 z57hZyZmfIgrm!c7*+ahjiFpgBnuOL$IQCg$ zh#=q%sT2%>$NGuwS2UBRf&jO#s4qx~6Db4Hk0 z_I;JTUzVY}`prnhW9AY293Ckcf{f=Y=lw+cC8Vo=*uJ-+K^iMQ7J@@-kHHk*@mJNv z1$=q~<}L3$SZ~3!__<7wIDF+CoLybgnNc#I1~33WZ=r{Lb%h;NQ8KUmx0V4+#S>U; z`9H?~KWM^(6$~<{MK$Ap;(x-qXPpa}%{9MrqScy;s8@qz(<*J_6G%?oMg4js!_F^N z(N^q#+l7$sFno3x5*Ek4$!4?BMggZ#=T%3Q0JZ%Gzg1={P2aRoB|#^(L46R2FTLZ8 zCtaR(08j-_dw7)KWr0h+2JF%|GvPPC`v2i$CUV@U0BDbE6K{h&QSbhfqR{4Lb3zNk z;?*$Pt%Uzp>dngo?R}QAdiIbeP=-1VR+H(NR3(a7GEakW{v1wm59D(|H2)(?cWTpK zu`){4wXC$ZELZe-4FQZP5Wu*s0#F@!<$rH40Fx0kZeT{?%OG_jAQc=CiTv9O|1Ua@ zfpdgIR>sl2R{5?l6vBGC0MOrno{IhVMuD^$2yTZ=^h-+G(}tJ2r|(FmAp^#6c{2bfiGKs_)xYPf zvH)L=a9T1O2&YF%)dWDxkprm3S`pB$|MmPt+yUTXfFv#R{08Z536_5CWo_D+#)-n; zX1ZV+p5c31*-DmL(Ff_DPs#s2{AtOiIloa1fue)3sW4~%M=zd0+ze$F?G}MU2k)wc z%9+IS%MnkPt5#|?R^sF1e~?g_p8juRq0CTgER05gFchdQiBbAAUkvi>V)<}c_RNv_ z$>OiIIJO==j9F+#a&kY&f2V*vGZ8uGbk`N~LE_LA5|-FCl^e{uR^~ zxFfUEgWm9;NUJFY6yH3h-5HX8M>44Z*(?bpzW||_G&1ZK)DKkp3vEiEY&l2nXFG}a z=dB}>L7K1-f*H>@DVWQz4fO-^^1~|wRzfk zXnd}T`2B$E@iSd>{!^a!J{KIz3KUHRTtQ@-4w+3T+WQhFe<_u<&ZYY!KO?zC%WCV-iF47jf6 zGK-bhKXANUK)|J59o|^AzsAU6SiYgLBiPuzL!)d;uO92n4pbo%` z4GVT$i6&I=k@&r$PxBktMJ`d;IThE%G!0*=GywgDb?gTLC+{B370JETpT^2UU*_!q zf`V|j4r1|an+*_FKJ~RI&4tgc0M;;DNG*_Y)P+EFmFERaXfFUGS4^WX)fymm{nVAT ze2I-Jtgt$8E1CQ|_Lf)NnwkkTs;S+06bE{RSh|~2X~rZF;xmV5yc;|Pia{8BEsOaL zDD&|L_@jw>FCu7e$l0s^fmpsBC>$U#m3F@_1MXmRXZpIC^09i0Xj~=aOgLa7KTVSBNh1rEI*i#pI=BmMtNFpS~%;| zAzSLD%V=hv>)41!qro7;Z1=`gvEW7<%jR*Gx(VRCRlP%9p5GkINb0|Cy&Lov`n% zZ#!Gw8#+f)LJM(Ub%iO`JNdh9#?-XRu(EWwX7SIjgj`H2ltZ-4HlIucbFJaadkUUb znDnx8S8|BuItT88!N5p7j=f8e)RSXzwQI7-=mT&LLgnC(Z4(g=q#8h8XKK zyL=Sq+i9)!U5|4{9jnieF~rh$n%ge$^lFFN6*&wqr~1IzmqslH^5?|HIFlPJ^-#I! zv8q3X5L#}Ug9D<`rXqZK+Fb8xd@%5T1VUU_T%M!Py4r=e{vZ(+>E|_kDlZw#D-y0K z--kN9W8D?c7yC|n+}x=I>+?aR$-%r7g!(X#XlNQ8qo0wp){vPen<8e)&gSm==2Rs| zJkpbEHH1|2AH2Da@0YZ;_ow3Bx1_ zfiA?t0!A$gAD}q-;$8uZMf&Gf=c^r-oddP>NNf&JKQuQ<4C*TFbygwgu*(T~P%>-R z{T@#dd@NcchuGqVw!&0_$%N=XuV#nwo&v3^0@n?DApZ}m`rRDsRHfarCtO>2OL7Yv zXiG)D+708+jLyuyOPZBXZ}6L0ZY6qY;wdjJIAI+idV%c#k*w%6 z<#vdRvV4+OeW@l6eC5U6m_MupQ@;p+dQgD8hwV}o&R=tEopxnxI8QldI*aY+{zU|Pv7BwnL zbUagxr{a5_#)n>FsuOlr!o~s==9E(9q^IR(>6~yGMMeRQ~W_L_PC6HS&&t^;rD?(aup*~VR;dn z7+s%tGyiI0Y}{T{SIrRt4NEJ$jSE$J#yuor%zu|RH#^w4=< zDJ9F9TP86cMAc({XaS^wK)=l!D2p1 VAJ4ZDg +:::image type="content" source="images/quick-assist-flow.png" alt-text="Schematic flow of connections when a Quick Assist session is established"::: ### Data and privacy @@ -118,4 +118,4 @@ If for some reason a user doesn't have Quick Assist on their system or it's not ## Next steps -If you have any problems, questions, or suggestions for Quick Assist, contact us by using feedback-hub://?referrer=resolveUpgradeErrorsPage&tabid=2&contextid=81&newFeedback=true&feedbackType=2&topic=submit-errors.md +If you have any problems, questions, or suggestions for Quick Assist, contact us by using the [Feedback Hub app](https://www.microsoft.com/p/feedback-hub/9nblggh4r32n?SilentAuth=1&wa=wsignin1.0&rtc=1#activetab=pivot:overviewtab). From 474f267b8a7342e5525745125fd67885650ab5ab Mon Sep 17 00:00:00 2001 From: Daniel Simpson Date: Thu, 17 Dec 2020 11:25:07 -0800 Subject: [PATCH 139/486] acrolinx --- .../firewall-settings-lost-on-upgrade.md | 12 ++++++------ 1 file changed, 6 insertions(+), 6 deletions(-) diff --git a/windows/security/threat-protection/windows-firewall/firewall-settings-lost-on-upgrade.md b/windows/security/threat-protection/windows-firewall/firewall-settings-lost-on-upgrade.md index c793caf0f3..c5ebe7fbf7 100644 --- a/windows/security/threat-protection/windows-firewall/firewall-settings-lost-on-upgrade.md +++ b/windows/security/threat-protection/windows-firewall/firewall-settings-lost-on-upgrade.md @@ -1,5 +1,5 @@ --- -title: Firewall settings lost on upgrade +title: Troubleshooting Windows Firewall settings after a Windows upgrade description: Firewall settings lost on upgrade ms.reviewer: ms.author: v-bshilpa @@ -15,9 +15,9 @@ ms.collection: ms.topic: troubleshooting --- -# Troubleshooting Windows Firewall settings that are missing after an upgrade +# Troubleshooting Windows Firewall settings after a Windows upgrade -This article describes a scenario where previously enabled firewall rules revert to disabled after upgrading to a new version of Windows. +Use this article to troubleshoot firewall settings that are turned off after upgrading to a new version of Windows. ## Rule groups @@ -34,8 +34,8 @@ Get-NetFirewallRule -Group ``` > [!NOTE] -> We recommend to enable or disable an entire group instead of individual rules. +> Microsoft recommends to enable or disable an entire group instead of individual rules. -We recommended that you enable/disable all of the rules within a group instead of one or two individual rules. This is because groups are not only used to organize rules and allow batch rule modification by type, but they also represent a 'unit' by which rule state is maintained across a Windows upgrade. Rule groups, as opposed to individual rules, are the unit by which the update process determines what should be enabled/disabled when the upgrade is complete. +Microsoft recommends that you enable/disable all of the rules within a group instead of one or two individual rules. This is because groups are not only used to organize rules and allow batch rule modification by type, but they also represent a 'unit' by which rule state is maintained across a Windows upgrade. Rule groups, as opposed to individual rules, are the unit by which the update process determines what should be enabled/disabled when the upgrade is complete. -For example, using the Remote Desktop group consists of three rules. To ensure that the rule set is properly migrated during an upgrade, all three rules must be enabled. If only one rule is enabled, the upgrade process will see that two of three rules are disabled and subsequently disable the entire group in an effort to maintain a clean out-of-the-box configuration. This scenario brings with it the unintended consequence of breaking Remote Desktop Protocol (RDP) connectivity to the host. +For example, the Remote Desktop group consists of three rules. To ensure that the rule set is properly migrated during an upgrade, all three rules must be enabled. If only one rule is enabled, the upgrade process will see that two of three rules are disabled and subsequently disable the entire group to maintain a clean, out-of-the-box configuration. This scenario has the unintended consequence of breaking Remote Desktop Protocol (RDP) connectivity to the host. From fcab9bc1756921ece50214580f9a0aa4dc58788c Mon Sep 17 00:00:00 2001 From: Peter Baumgartner <32550988+pebaum@users.noreply.github.com> Date: Thu, 17 Dec 2020 12:11:20 -0800 Subject: [PATCH 140/486] converting faqs to yml for google pilot --- .../security/information-protection/TOC.md | 4 +- ...ocker-deployment-and-administration-faq.md | 101 ------------------ ...cker-deployment-and-administration-faq.yml | 97 +++++++++++++++++ .../bitlocker-frequently-asked-questions.md | 4 +- ...bitlocker-overview-and-requirements-faq.md | 82 -------------- ...itlocker-overview-and-requirements-faq.yml | 82 ++++++++++++++ 6 files changed, 183 insertions(+), 187 deletions(-) delete mode 100644 windows/security/information-protection/bitlocker/bitlocker-deployment-and-administration-faq.md create mode 100644 windows/security/information-protection/bitlocker/bitlocker-deployment-and-administration-faq.yml delete mode 100644 windows/security/information-protection/bitlocker/bitlocker-overview-and-requirements-faq.md create mode 100644 windows/security/information-protection/bitlocker/bitlocker-overview-and-requirements-faq.yml diff --git a/windows/security/information-protection/TOC.md b/windows/security/information-protection/TOC.md index 6fe54f4f4d..442b60a184 100644 --- a/windows/security/information-protection/TOC.md +++ b/windows/security/information-protection/TOC.md @@ -3,9 +3,9 @@ ## [BitLocker](bitlocker\bitlocker-overview.md) ### [Overview of BitLocker Device Encryption in Windows 10](bitlocker\bitlocker-device-encryption-overview-windows-10.md) ### [BitLocker frequently asked questions (FAQ)](bitlocker\bitlocker-frequently-asked-questions.md) -#### [Overview and requirements](bitlocker\bitlocker-overview-and-requirements-faq.md) +#### [Overview and requirements](bitlocker\bitlocker-overview-and-requirements-faq.yml) #### [Upgrading](bitlocker\bitlocker-upgrading-faq.md) -#### [Deployment and administration](bitlocker\bitlocker-deployment-and-administration-faq.md) +#### [Deployment and administration](bitlocker\bitlocker-deployment-and-administration-faq.yml) #### [Key management](bitlocker\bitlocker-key-management-faq.md) #### [BitLocker To Go](bitlocker\bitlocker-to-go-faq.md) #### [Active Directory Domain Services](bitlocker\bitlocker-and-adds-faq.md) diff --git a/windows/security/information-protection/bitlocker/bitlocker-deployment-and-administration-faq.md b/windows/security/information-protection/bitlocker/bitlocker-deployment-and-administration-faq.md deleted file mode 100644 index 064a82cf8e..0000000000 --- a/windows/security/information-protection/bitlocker/bitlocker-deployment-and-administration-faq.md +++ /dev/null @@ -1,101 +0,0 @@ ---- -title: BitLocker deployment and administration FAQ (Windows 10) -description: Browse frequently asked questions about BitLocker deployment and administration, such as, "Can BitLocker deployment be automated in an enterprise environment?" -ms.assetid: c40f87ac-17d3-47b2-afc6-6c641f72ecee -ms.reviewer: -ms.prod: w10 -ms.mktglfcycl: explore -ms.sitesec: library -ms.pagetype: security -ms.localizationpriority: medium -author: dansimp -ms.author: dansimp -manager: dansimp -audience: ITPro -ms.collection: M365-security-compliance -ms.topic: conceptual -ms.date: 02/28/2019 -ms.custom: bitlocker ---- - -# BitLocker frequently asked questions (FAQ) - -**Applies to** -- Windows 10 - -## Can BitLocker deployment be automated in an enterprise environment? - -Yes, you can automate the deployment and configuration of BitLocker and the TPM using either WMI or Windows PowerShell scripts. How you choose to implement the scripts depends on your environment. You can also use Manage-bde.exe to locally or remotely configure BitLocker. For more info about writing scripts that use the BitLocker WMI providers, see [BitLocker Drive Encryption Provider](https://go.microsoft.com/fwlink/p/?LinkId=80600). For more info about using Windows PowerShell cmdlets with BitLocker Drive Encryption, see [BitLocker Cmdlets in Windows PowerShell](https://docs.microsoft.com/powershell/module/bitlocker/index?view=win10-ps). - -## Can BitLocker encrypt more than just the operating system drive? - -Yes. - -## Is there a noticeable performance impact when BitLocker is enabled on a computer? - -Generally it imposes a single-digit percentage performance overhead. - -## How long will initial encryption take when BitLocker is turned on? - -Although BitLocker encryption occurs in the background while you continue to work, and the system remains usable, encryption times vary depending on the type of drive that is being encrypted, the size of the drive, and the speed of the drive. If you are encrypting large drives, you may want to set encryption to occur during times when you will not be using the drive. - -You can also choose whether or not BitLocker should encrypt the entire drive or just the used space on the drive when you turn on BitLocker. On a new hard drive, encrypting just the used spaced can be considerably faster than encrypting the entire drive. When this encryption option is selected, BitLocker automatically encrypts data as it is saved, ensuring that no data is stored unencrypted. - -## What happens if the computer is turned off during encryption or decryption? - -If the computer is turned off or goes into hibernation, the BitLocker encryption and decryption process will resume where it stopped the next time Windows starts. This is true even if the power is suddenly unavailable. - -## Does BitLocker encrypt and decrypt the entire drive all at once when reading and writing data? - -No, BitLocker does not encrypt and decrypt the entire drive when reading and writing data. The encrypted sectors in the BitLocker-protected drive are decrypted only as they are requested from system read operations. Blocks that are written to the drive are encrypted before the system writes them to the physical disk. No unencrypted data is ever stored on a BitLocker-protected drive. - -## How can I prevent users on a network from storing data on an unencrypted drive? - -You can configure Group Policy settings to require that data drives be BitLocker-protected before a BitLocker-protected computer can write data to them. For more info, see [BitLocker Group Policy settings](bitlocker-group-policy-settings.md). -When these policy settings are enabled, the BitLocker-protected operating system will mount any data drives that are not protected by BitLocker as read-only. - -## What is Used Disk Space Only encryption? - -BitLocker in Windows 10 lets users choose to encrypt just their data. Although it's not the most secure way to encrypt a drive, this option can reduce encryption time by more than 99 percent, depending on how much data that needs to be encrypted. For more information, see [Used Disk Space Only encryption](bitlocker-device-encryption-overview-windows-10.md#used-disk-space-only-encryption). - -## What system changes would cause the integrity check on my operating system drive to fail? - -The following types of system changes can cause an integrity check failure and prevent the TPM from releasing the BitLocker key to decrypt the protected operating system drive: - -- Moving the BitLocker-protected drive into a new computer. -- Installing a new motherboard with a new TPM. -- Turning off, disabling, or clearing the TPM. -- Changing any boot configuration settings. -- Changing the BIOS, UEFI firmware, master boot record, boot sector, boot manager, option ROM, or other early boot components or boot configuration data. - -## What causes BitLocker to start into recovery mode when attempting to start the operating system drive? - -Because BitLocker is designed to protect your computer from numerous attacks, there are numerous reasons why BitLocker could start in recovery mode. -For example: - -- Changing the BIOS boot order to boot another drive in advance of the hard drive. -- Adding or removing hardware, such as inserting a new card in the computer, including some PCMIA wireless cards. -- Removing, inserting, or completely depleting the charge on a smart battery on a portable computer. - -In BitLocker, recovery consists of decrypting a copy of the volume master key using either a recovery key stored on a USB flash drive or a cryptographic key derived from a recovery password. -The TPM is not involved in any recovery scenarios, so recovery is still possible if the TPM fails boot component validation, malfunctions, or is removed. - -## What can prevent BitLocker from binding to PCR 7? - -BitLocker can be prevented from binding to PCR 7 if a non-Windows OS booted prior to Windows, or if Secure Boot is not available to the device, either because it has been disabled or the hardware does not support it. - -## Can I swap hard disks on the same computer if BitLocker is enabled on the operating system drive? - -Yes, you can swap multiple hard disks on the same computer if BitLocker is enabled, but only if the hard disks were BitLocker-protected on the same computer. The BitLocker keys are unique to the TPM and operating system drive. So if you want to prepare a backup operating system or data drive in case a disk fails, make sure that they were matched with the correct TPM. You can also configure different hard drives for different operating systems and then enable BitLocker on each one with different authentication methods (such as one with TPM-only and one with TPM+PIN) without any conflicts. - -## Can I access my BitLocker-protected drive if I insert the hard disk into a different computer? - -Yes, if the drive is a data drive, you can unlock it from the **BitLocker Drive Encryption** Control Panel item just as you would any other data drive by using a password or smart card. If the data drive was configured for automatic unlock only, you will have to unlock it by using the recovery key. The encrypted hard disk can be unlocked by a data recovery agent (if one was configured) or it can be unlocked by using the recovery key. - -## Why is "Turn BitLocker on" not available when I right-click a drive? -Some drives cannot be encrypted with BitLocker. Reasons a drive cannot be encrypted include insufficient disk size, an incompatible file system, if the drive is a dynamic disk, or a drive is designated as the system partition. By default, the system drive (or system partition) is hidden from display. However, if it is not created as a hidden drive when the operating system was installed due to a custom installation process, that drive might be displayed but cannot be encrypted. - -## What type of disk configurations are supported by BitLocker? -Any number of internal, fixed data drives can be protected with BitLocker. On some versions ATA and SATA-based, direct-attached storage devices are also supported. - - diff --git a/windows/security/information-protection/bitlocker/bitlocker-deployment-and-administration-faq.yml b/windows/security/information-protection/bitlocker/bitlocker-deployment-and-administration-faq.yml new file mode 100644 index 0000000000..f873294bba --- /dev/null +++ b/windows/security/information-protection/bitlocker/bitlocker-deployment-and-administration-faq.yml @@ -0,0 +1,97 @@ +### YamlMime:FAQ +metadata: + title: BitLocker deployment and administration FAQ (Windows 10) + description: Browse frequently asked questions about BitLocker deployment and administration, such as, "Can BitLocker deployment be automated in an enterprise environment?" + ms.assetid: c40f87ac-17d3-47b2-afc6-6c641f72ecee + ms.reviewer: + ms.prod: w10 + ms.mktglfcycl: explore + ms.sitesec: library + ms.pagetype: security + ms.localizationpriority: medium + author: dansimp + ms.author: dansimp + manager: dansimp + audience: ITPro + ms.collection: M365-security-compliance + ms.topic: conceptual + ms.date: 02/28/2019 + ms.custom: bitlocker + +title: BitLocker frequently asked questions (FAQ) +summary: | + **Applies to** + - Windows 10 + + +sections: + - name: Ignored + questions: + - question: Can BitLocker deployment be automated in an enterprise environment? + answer: | + Yes, you can automate the deployment and configuration of BitLocker and the TPM using either WMI or Windows PowerShell scripts. How you choose to implement the scripts depends on your environment. You can also use Manage-bde.exe to locally or remotely configure BitLocker. For more info about writing scripts that use the BitLocker WMI providers, see [BitLocker Drive Encryption Provider](https://go.microsoft.com/fwlink/p/?LinkId=80600). For more info about using Windows PowerShell cmdlets with BitLocker Drive Encryption, see [BitLocker Cmdlets in Windows PowerShell](https://docs.microsoft.com/powershell/module/bitlocker/index?view=win10-ps). + + - question: Can BitLocker encrypt more than just the operating system drive? + answer: Yes. + + - question: Is there a noticeable performance impact when BitLocker is enabled on a computer? + answer: Generally it imposes a single-digit percentage performance overhead. + + - question: How long will initial encryption take when BitLocker is turned on? + answer: | + Although BitLocker encryption occurs in the background while you continue to work, and the system remains usable, encryption times vary depending on the type of drive that is being encrypted, the size of the drive, and the speed of the drive. If you are encrypting large drives, you may want to set encryption to occur during times when you will not be using the drive. + + You can also choose whether or not BitLocker should encrypt the entire drive or just the used space on the drive when you turn on BitLocker. On a new hard drive, encrypting just the used spaced can be considerably faster than encrypting the entire drive. When this encryption option is selected, BitLocker automatically encrypts data as it is saved, ensuring that no data is stored unencrypted. + + - question: What happens if the computer is turned off during encryption or decryption? + answer: If the computer is turned off or goes into hibernation, the BitLocker encryption and decryption process will resume where it stopped the next time Windows starts. This is true even if the power is suddenly unavailable. + + - question: Does BitLocker encrypt and decrypt the entire drive all at once when reading and writing data? + answer: No, BitLocker does not encrypt and decrypt the entire drive when reading and writing data. The encrypted sectors in the BitLocker-protected drive are decrypted only as they are requested from system read operations. Blocks that are written to the drive are encrypted before the system writes them to the physical disk. No unencrypted data is ever stored on a BitLocker-protected drive. + + - question: How can I prevent users on a network from storing data on an unencrypted drive? + answer: | + You can configure Group Policy settings to require that data drives be BitLocker-protected before a BitLocker-protected computer can write data to them. For more info, see [BitLocker Group Policy settings](bitlocker-group-policy-settings.md). + When these policy settings are enabled, the BitLocker-protected operating system will mount any data drives that are not protected by BitLocker as read-only. + + - question: What is Used Disk Space Only encryption? + answer: | + BitLocker in Windows 10 lets users choose to encrypt just their data. Although it's not the most secure way to encrypt a drive, this option can reduce encryption time by more than 99 percent, depending on how much data that needs to be encrypted. For more information, see [Used Disk Space Only encryption](bitlocker-device-encryption-overview-windows-10.md#used-disk-space-only-encryption). + + - question: What system changes would cause the integrity check on my operating system drive to fail? + answer: | + The following types of system changes can cause an integrity check failure and prevent the TPM from releasing the BitLocker key to decrypt the protected operating system drive: + + - Moving the BitLocker-protected drive into a new computer. + - Installing a new motherboard with a new TPM. + - Turning off, disabling, or clearing the TPM. + - Changing any boot configuration settings. + - Changing the BIOS, UEFI firmware, master boot record, boot sector, boot manager, option ROM, or other early boot components or boot configuration data. + + - question: What causes BitLocker to start into recovery mode when attempting to start the operating system drive? + answer: | + Because BitLocker is designed to protect your computer from numerous attacks, there are numerous reasons why BitLocker could start in recovery mode. + For example: + + - Changing the BIOS boot order to boot another drive in advance of the hard drive. + - Adding or removing hardware, such as inserting a new card in the computer, including some PCMIA wireless cards. + - Removing, inserting, or completely depleting the charge on a smart battery on a portable computer. + + In BitLocker, recovery consists of decrypting a copy of the volume master key using either a recovery key stored on a USB flash drive or a cryptographic key derived from a recovery password. + The TPM is not involved in any recovery scenarios, so recovery is still possible if the TPM fails boot component validation, malfunctions, or is removed. + + - question: What can prevent BitLocker from binding to PCR 7? + answer: BitLocker can be prevented from binding to PCR 7 if a non-Windows OS booted prior to Windows, or if Secure Boot is not available to the device, either because it has been disabled or the hardware does not support it. + + - question: Can I swap hard disks on the same computer if BitLocker is enabled on the operating system drive? + answer: Yes, you can swap multiple hard disks on the same computer if BitLocker is enabled, but only if the hard disks were BitLocker-protected on the same computer. The BitLocker keys are unique to the TPM and operating system drive. So if you want to prepare a backup operating system or data drive in case a disk fails, make sure that they were matched with the correct TPM. You can also configure different hard drives for different operating systems and then enable BitLocker on each one with different authentication methods (such as one with TPM-only and one with TPM+PIN) without any conflicts. + + - question: Can I access my BitLocker-protected drive if I insert the hard disk into a different computer? + answer: Yes, if the drive is a data drive, you can unlock it from the **BitLocker Drive Encryption** Control Panel item just as you would any other data drive by using a password or smart card. If the data drive was configured for automatic unlock only, you will have to unlock it by using the recovery key. The encrypted hard disk can be unlocked by a data recovery agent (if one was configured) or it can be unlocked by using the recovery key. + + - question: Why is "Turn BitLocker on" not available when I right-click a drive? + answer: Some drives cannot be encrypted with BitLocker. Reasons a drive cannot be encrypted include insufficient disk size, an incompatible file system, if the drive is a dynamic disk, or a drive is designated as the system partition. By default, the system drive (or system partition) is hidden from display. However, if it is not created as a hidden drive when the operating system was installed due to a custom installation process, that drive might be displayed but cannot be encrypted. + + - question: What type of disk configurations are supported by BitLocker? + answer: Any number of internal, fixed data drives can be protected with BitLocker. On some versions ATA and SATA-based, direct-attached storage devices are also supported. + diff --git a/windows/security/information-protection/bitlocker/bitlocker-frequently-asked-questions.md b/windows/security/information-protection/bitlocker/bitlocker-frequently-asked-questions.md index 3679c9fde7..31ee0816da 100644 --- a/windows/security/information-protection/bitlocker/bitlocker-frequently-asked-questions.md +++ b/windows/security/information-protection/bitlocker/bitlocker-frequently-asked-questions.md @@ -25,9 +25,9 @@ ms.custom: bitlocker This topic links to frequently asked questions about BitLocker. BitLocker is a data protection feature that encrypts drives on your computer to help prevent data theft or exposure. BitLocker-protected computers can also delete data more securely when they are decommissioned because it is much more difficult to recover deleted data from an encrypted drive than from a non-encrypted drive. -- [Overview and requirements](bitlocker-overview-and-requirements-faq.md) +- [Overview and requirements](bitlocker-overview-and-requirements-faq.yml) - [Upgrading](bitlocker-upgrading-faq.md) -- [Deployment and administration](bitlocker-deployment-and-administration-faq.md) +- [Deployment and administration](bitlocker-deployment-and-administration-faq.yml) - [Key management](bitlocker-key-management-faq.md) - [BitLocker To Go](bitlocker-to-go-faq.md) - [Active Directory Domain Services (AD DS)](bitlocker-and-adds-faq.md) diff --git a/windows/security/information-protection/bitlocker/bitlocker-overview-and-requirements-faq.md b/windows/security/information-protection/bitlocker/bitlocker-overview-and-requirements-faq.md deleted file mode 100644 index 7f9715b9c0..0000000000 --- a/windows/security/information-protection/bitlocker/bitlocker-overview-and-requirements-faq.md +++ /dev/null @@ -1,82 +0,0 @@ ---- -title: BitLocker overview and requirements FAQ (Windows 10) -description: This topic for the IT professional answers frequently asked questions concerning the requirements to use BitLocker. -ms.assetid: c40f87ac-17d3-47b2-afc6-6c641f72ecee -ms.reviewer: -ms.prod: w10 -ms.mktglfcycl: explore -ms.sitesec: library -ms.pagetype: security -ms.localizationpriority: medium -author: dansimp -ms.author: dansimp -manager: dansimp -audience: ITPro -ms.collection: M365-security-compliance -ms.topic: conceptual -ms.date: 02/28/2019 -ms.custom: bitlocker ---- - -# BitLocker Overview and Requirements FAQ - -**Applies to** -- Windows 10 - -## How does BitLocker work? - -**How BitLocker works with operating system drives** - -You can use BitLocker to mitigate unauthorized data access on lost or stolen computers by encrypting all user files and system files on the operating system drive, including the swap files and hibernation files, and checking the integrity of early boot components and boot configuration data. - -**How BitLocker works with fixed and removable data drives** - -You can use BitLocker to encrypt the entire contents of a data drive. You can use Group Policy to require that BitLocker be enabled on a drive before the computer can write data to the drive. BitLocker can be configured with a variety of unlock methods for data drives, and a data drive supports multiple unlock methods. - -## Does BitLocker support multifactor authentication? - -Yes, BitLocker supports multifactor authentication for operating system drives. If you enable BitLocker on a computer that has a TPM version 1.2 or later, you can use additional forms of authentication with the TPM protection. - -## What are the BitLocker hardware and software requirements? - -For requirements, see [System requirements](bitlocker-overview.md#system-requirements). - -> [!NOTE] -> Dynamic disks are not supported by BitLocker. Dynamic data volumes will not be displayed in the Control Panel. Although the operating system volume will always be displayed in the Control Panel, regardless of whether it is a Dynamic disk, if it is a dynamic disk it cannot be protected by BitLocker. - -## Why are two partitions required? Why does the system drive have to be so large? - -Two partitions are required to run BitLocker because pre-startup authentication and system integrity verification must occur on a separate partition from the encrypted operating system drive. This configuration helps protect the operating system and the information in the encrypted drive. - -## Which Trusted Platform Modules (TPMs) does BitLocker support? - -BitLocker supports TPM version 1.2 or higher. BitLocker support for TPM 2.0 requires Unified Extensible Firmware Interface (UEFI) for the device. - -> [!NOTE] -> TPM 2.0 is not supported in Legacy and CSM Modes of the BIOS. Devices with TPM 2.0 must have their BIOS mode configured as Native UEFI only. The Legacy and Compatibility Support Module (CSM) options must be disabled. For added security Enable the Secure Boot feature. - -> Installed Operating System on hardware in legacy mode will stop the OS from booting when the BIOS mode is changed to UEFI. Use the tool [MBR2GPT](https://docs.microsoft.com/windows/deployment/mbr-to-gpt) before changing the BIOS mode which will prepare the OS and the disk to support UEFI. - -## How can I tell if a TPM is on my computer? - -Beginning with Windows 10, version 1803, you can check TPM status in **Windows Defender Security Center** > **Device Security** > **Security processor details**. In previous versions of Windows, open the TPM MMC console (tpm.msc) and look under the **Status** heading. - -## Can I use BitLocker on an operating system drive without a TPM? - -Yes, you can enable BitLocker on an operating system drive without a TPM version 1.2 or higher, if the BIOS or UEFI firmware has the ability to read from a USB flash drive in the boot environment. This is because BitLocker will not unlock the protected drive until BitLocker's own volume master key is first released by either the computer's TPM or by a USB flash drive containing the BitLocker startup key for that computer. However, computers without TPMs will not be able to use the system integrity verification that BitLocker can also provide. -To help determine whether a computer can read from a USB device during the boot process, use the BitLocker system check as part of the BitLocker setup process. This system check performs tests to confirm that the computer can properly read from the USB devices at the appropriate time and that the computer meets other BitLocker requirements. - -## How do I obtain BIOS support for the TPM on my computer? - -Contact the computer manufacturer to request a Trusted Computing Group (TCG)-compliant BIOS or UEFI boot firmware that meets the following requirements: - -- It is compliant with the TCG standards for a client computer. -- It has a secure update mechanism to help prevent a malicious BIOS or boot firmware from being installed on the computer. - -## What credentials are required to use BitLocker? - -To turn on, turn off, or change configurations of BitLocker on operating system and fixed data drives, membership in the local **Administrators** group is required. Standard users can turn on, turn off, or change configurations of BitLocker on removable data drives. - -## What is the recommended boot order for computers that are going to be BitLocker-protected? - -You should configure the startup options of your computer to have the hard disk drive first in the boot order, before any other drives such as CD/DVD drives or USB drives. If the hard disk is not first and you typically boot from hard disk, then a boot order change may be detected or assumed when removable media is found during boot. The boot order typically affects the system measurement that is verified by BitLocker and a change in boot order will cause you to be prompted for your BitLocker recovery key. For the same reason, if you have a laptop with a docking station, ensure that the hard disk drive is first in the boot order both when docked and undocked.  diff --git a/windows/security/information-protection/bitlocker/bitlocker-overview-and-requirements-faq.yml b/windows/security/information-protection/bitlocker/bitlocker-overview-and-requirements-faq.yml new file mode 100644 index 0000000000..de4338a325 --- /dev/null +++ b/windows/security/information-protection/bitlocker/bitlocker-overview-and-requirements-faq.yml @@ -0,0 +1,82 @@ +### YamlMime:FAQ +metadata: + title: BitLocker overview and requirements FAQ (Windows 10) + description: This topic for the IT professional answers frequently asked questions concerning the requirements to use BitLocker. + ms.assetid: c40f87ac-17d3-47b2-afc6-6c641f72ecee + ms.reviewer: + ms.prod: w10 + ms.mktglfcycl: explore + ms.sitesec: library + ms.pagetype: security + ms.localizationpriority: medium + author: dansimp + ms.author: dansimp + manager: dansimp + audience: ITPro + ms.collection: M365-security-compliance + ms.topic: conceptual + ms.date: 02/28/2019 + ms.custom: bitlocker + +title: BitLocker Overview and Requirements FAQ +summary: | + **Applies to** + - Windows 10 + + +sections: + - name: Ignored + questions: + - question: How does BitLocker work? + answer: | + **How BitLocker works with operating system drives** + + You can use BitLocker to mitigate unauthorized data access on lost or stolen computers by encrypting all user files and system files on the operating system drive, including the swap files and hibernation files, and checking the integrity of early boot components and boot configuration data. + + **How BitLocker works with fixed and removable data drives** + + You can use BitLocker to encrypt the entire contents of a data drive. You can use Group Policy to require that BitLocker be enabled on a drive before the computer can write data to the drive. BitLocker can be configured with a variety of unlock methods for data drives, and a data drive supports multiple unlock methods. + + - question: Does BitLocker support multifactor authentication? + answer: Yes, BitLocker supports multifactor authentication for operating system drives. If you enable BitLocker on a computer that has a TPM version 1.2 or later, you can use additional forms of authentication with the TPM protection. + + - question: What are the BitLocker hardware and software requirements? + answer: | + For requirements, see [System requirements](bitlocker-overview.md#system-requirements). + + > [!NOTE] + > Dynamic disks are not supported by BitLocker. Dynamic data volumes will not be displayed in the Control Panel. Although the operating system volume will always be displayed in the Control Panel, regardless of whether it is a Dynamic disk, if it is a dynamic disk it cannot be protected by BitLocker. + + - question: Why are two partitions required? Why does the system drive have to be so large? + answer: Two partitions are required to run BitLocker because pre-startup authentication and system integrity verification must occur on a separate partition from the encrypted operating system drive. This configuration helps protect the operating system and the information in the encrypted drive. + + - question: Which Trusted Platform Modules (TPMs) does BitLocker support? + answer: | + BitLocker supports TPM version 1.2 or higher. BitLocker support for TPM 2.0 requires Unified Extensible Firmware Interface (UEFI) for the device. + + > [!NOTE] + > TPM 2.0 is not supported in Legacy and CSM Modes of the BIOS. Devices with TPM 2.0 must have their BIOS mode configured as Native UEFI only. The Legacy and Compatibility Support Module (CSM) options must be disabled. For added security Enable the Secure Boot feature. + + > Installed Operating System on hardware in legacy mode will stop the OS from booting when the BIOS mode is changed to UEFI. Use the tool [MBR2GPT](https://docs.microsoft.com/windows/deployment/mbr-to-gpt) before changing the BIOS mode which will prepare the OS and the disk to support UEFI. + + - question: How can I tell if a TPM is on my computer? + answer: Beginning with Windows 10, version 1803, you can check TPM status in **Windows Defender Security Center** > **Device Security** > **Security processor details**. In previous versions of Windows, open the TPM MMC console (tpm.msc) and look under the **Status** heading. + + - question: Can I use BitLocker on an operating system drive without a TPM? + answer: | + Yes, you can enable BitLocker on an operating system drive without a TPM version 1.2 or higher, if the BIOS or UEFI firmware has the ability to read from a USB flash drive in the boot environment. This is because BitLocker will not unlock the protected drive until BitLocker's own volume master key is first released by either the computer's TPM or by a USB flash drive containing the BitLocker startup key for that computer. However, computers without TPMs will not be able to use the system integrity verification that BitLocker can also provide. + To help determine whether a computer can read from a USB device during the boot process, use the BitLocker system check as part of the BitLocker setup process. This system check performs tests to confirm that the computer can properly read from the USB devices at the appropriate time and that the computer meets other BitLocker requirements. + + - question: How do I obtain BIOS support for the TPM on my computer? + answer: | + Contact the computer manufacturer to request a Trusted Computing Group (TCG)-compliant BIOS or UEFI boot firmware that meets the following requirements: + + - It is compliant with the TCG standards for a client computer. + - It has a secure update mechanism to help prevent a malicious BIOS or boot firmware from being installed on the computer. + + - question: What credentials are required to use BitLocker? + answer: To turn on, turn off, or change configurations of BitLocker on operating system and fixed data drives, membership in the local **Administrators** group is required. Standard users can turn on, turn off, or change configurations of BitLocker on removable data drives. + + - question: What is the recommended boot order for computers that are going to be BitLocker-protected? + answer: You should configure the startup options of your computer to have the hard disk drive first in the boot order, before any other drives such as CD/DVD drives or USB drives. If the hard disk is not first and you typically boot from hard disk, then a boot order change may be detected or assumed when removable media is found during boot. The boot order typically affects the system measurement that is verified by BitLocker and a change in boot order will cause you to be prompted for your BitLocker recovery key. For the same reason, if you have a laptop with a docking station, ensure that the hard disk drive is first in the boot order both when docked and undocked.  + From 375920678f21238835ab6be53dcc9735eaf3fe7d Mon Sep 17 00:00:00 2001 From: Denise Vangel-MSFT Date: Thu, 17 Dec 2020 12:40:14 -0800 Subject: [PATCH 141/486] Update controlled-folders.md --- .../microsoft-defender-atp/controlled-folders.md | 5 ++++- 1 file changed, 4 insertions(+), 1 deletion(-) diff --git a/windows/security/threat-protection/microsoft-defender-atp/controlled-folders.md b/windows/security/threat-protection/microsoft-defender-atp/controlled-folders.md index 80ec62a312..077dae7d2c 100644 --- a/windows/security/threat-protection/microsoft-defender-atp/controlled-folders.md +++ b/windows/security/threat-protection/microsoft-defender-atp/controlled-folders.md @@ -11,7 +11,7 @@ ms.localizationpriority: medium author: denisebmsft ms.author: deniseb audience: ITPro -ms.date: 12/10/2020 +ms.date: 12/17/2020 ms.reviewer: v-maave manager: dansimp ms.custom: asr @@ -30,6 +30,9 @@ ms.custom: asr Controlled folder access helps protect your valuable data from malicious apps and threats, such as ransomware. Controlled folder access protects your data by checking apps against a list of known, trusted apps. Supported on Windows Server 2019 and Windows 10 clients, controlled folder access can be turned on using the Windows Security App, Microsoft Endpoint Configuration Manager, or Intune (for managed devices). +> [!NOTE] +> Scripting engines are not trusted and you cannot allow them access to controlled protected folders. For example, PowerShell is not trusted by controlled folder access, even if you add it as an application you trust or allow with [certificate and file indicators](https://docs.microsoft.com/windows/security/threat-protection/microsoft-defender-atp/indicator-certificates). + Controlled folder access works best with [Microsoft Defender for Endpoint](../microsoft-defender-atp/microsoft-defender-advanced-threat-protection.md), which gives you detailed reporting into controlled folder access events and blocks as part of the usual [alert investigation scenarios](../microsoft-defender-atp/investigate-alerts.md). ## How does controlled folder access work? From 100fa08c85a3cf05ab36cc7b64a095d88d1ab45f Mon Sep 17 00:00:00 2001 From: Denise Vangel-MSFT Date: Thu, 17 Dec 2020 12:46:48 -0800 Subject: [PATCH 142/486] Update controlled-folders.md --- .../microsoft-defender-atp/controlled-folders.md | 1 - 1 file changed, 1 deletion(-) diff --git a/windows/security/threat-protection/microsoft-defender-atp/controlled-folders.md b/windows/security/threat-protection/microsoft-defender-atp/controlled-folders.md index 077dae7d2c..d01c44566e 100644 --- a/windows/security/threat-protection/microsoft-defender-atp/controlled-folders.md +++ b/windows/security/threat-protection/microsoft-defender-atp/controlled-folders.md @@ -21,7 +21,6 @@ ms.custom: asr [!INCLUDE [Microsoft 365 Defender rebranding](../../includes/microsoft-defender.md)] - **Applies to:** - [Microsoft Defender for Endpoint](https://go.microsoft.com/fwlink/p/?linkid=2146631) From cd5dfac88c943e988941c8490b3751d81cce85dc Mon Sep 17 00:00:00 2001 From: jaimeo Date: Thu, 17 Dec 2020 13:49:06 -0700 Subject: [PATCH 143/486] connecting to TOC --- windows/client-management/TOC.md | 1 + 1 file changed, 1 insertion(+) diff --git a/windows/client-management/TOC.md b/windows/client-management/TOC.md index b99a2d3ee4..26cb9368b0 100644 --- a/windows/client-management/TOC.md +++ b/windows/client-management/TOC.md @@ -1,5 +1,6 @@ # [Manage clients in Windows 10](index.md) ## [Administrative Tools in Windows 10](administrative-tools-in-windows-10.md) +### [Use Quick Assist to help users] ## [Create mandatory user profiles](mandatory-user-profile.md) ## [Connect to remote Azure Active Directory-joined PC](connect-to-remote-aadj-pc.md) ## [Join Windows 10 Mobile to Azure Active Directory](join-windows-10-mobile-to-azure-active-directory.md) From 7da0e93576373c790946af9c819bc4a8c8d5aca1 Mon Sep 17 00:00:00 2001 From: jaimeo Date: Thu, 17 Dec 2020 13:54:24 -0700 Subject: [PATCH 144/486] trying to get the link right this time --- windows/client-management/TOC.md | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/windows/client-management/TOC.md b/windows/client-management/TOC.md index 26cb9368b0..aac950751a 100644 --- a/windows/client-management/TOC.md +++ b/windows/client-management/TOC.md @@ -1,6 +1,6 @@ # [Manage clients in Windows 10](index.md) ## [Administrative Tools in Windows 10](administrative-tools-in-windows-10.md) -### [Use Quick Assist to help users] +### [Use Quick Assist to help users](quick-assist.md) ## [Create mandatory user profiles](mandatory-user-profile.md) ## [Connect to remote Azure Active Directory-joined PC](connect-to-remote-aadj-pc.md) ## [Join Windows 10 Mobile to Azure Active Directory](join-windows-10-mobile-to-azure-active-directory.md) From ae609d2083a703d1188cb21ea3c5c8d7c9adc80a Mon Sep 17 00:00:00 2001 From: Denise Vangel-MSFT Date: Thu, 17 Dec 2020 13:24:14 -0800 Subject: [PATCH 145/486] antivirus fixes --- ...rosoft-defender-antivirus-compatibility.md | 4 ++-- ...fender-antivirus-on-windows-server-2016.md | 22 +++++++++---------- 2 files changed, 13 insertions(+), 13 deletions(-) diff --git a/windows/security/threat-protection/microsoft-defender-antivirus/microsoft-defender-antivirus-compatibility.md b/windows/security/threat-protection/microsoft-defender-antivirus/microsoft-defender-antivirus-compatibility.md index a51058e86c..e6d8bfd533 100644 --- a/windows/security/threat-protection/microsoft-defender-antivirus/microsoft-defender-antivirus-compatibility.md +++ b/windows/security/threat-protection/microsoft-defender-antivirus/microsoft-defender-antivirus-compatibility.md @@ -47,9 +47,9 @@ The following table summarizes what happens with Microsoft Defender Antivirus wh | Windows Server 2016 or 2019 | Microsoft Defender Antivirus | Yes | Active mode | | Windows Server 2016 or 2019 | Microsoft Defender Antivirus | No | Active mode | -(1) On Windows Server 2016 or 2019, Microsoft Defender Antivirus will not enter passive or disabled mode if you have also installed a third-party antivirus product. If you install a third-party antivirus product, you should [consider uninstalling Microsoft Defender Antivirus on Windows Server 2016 or 2019](microsoft-defender-antivirus-on-windows-server-2016.md#need-to-uninstall-microsoft-defender-antivirus) to prevent problems caused by having multiple antivirus products installed on a machine. +(1) On Windows Server 2019 or 2016, Microsoft Defender Antivirus does not enter passive or disabled mode automatically when you install non-Microsoft antivirus product. In those cases, [disable Microsoft Defender Antivirus, or set it to passive mode](microsoft-defender-antivirus-on-windows-server-2016.md#need-to-uninstall-microsoft-defender-antivirus) to prevent problems caused by having multiple antivirus products installed on a server. -If you are using Windows Server, version 1803 or Windows Server 2019, you can enable passive mode by setting this registry key: +If you are using Windows Server, version 1803 or Windows Server 2019, you set Microsoft Defender Antivirus to passive mode by setting this registry key: - Path: `HKLM\SOFTWARE\Policies\Microsoft\Windows Advanced Threat Protection` - Name: ForceDefenderPassiveMode - Type: REG_DWORD diff --git a/windows/security/threat-protection/microsoft-defender-antivirus/microsoft-defender-antivirus-on-windows-server-2016.md b/windows/security/threat-protection/microsoft-defender-antivirus/microsoft-defender-antivirus-on-windows-server-2016.md index 2dd55a5ef2..b29fd1b0e3 100644 --- a/windows/security/threat-protection/microsoft-defender-antivirus/microsoft-defender-antivirus-on-windows-server-2016.md +++ b/windows/security/threat-protection/microsoft-defender-antivirus/microsoft-defender-antivirus-on-windows-server-2016.md @@ -1,5 +1,5 @@ --- -title: Microsoft Defender Antivirus on Windows Server 2016 and 2019 +title: Microsoft Defender Antivirus on Windows Server 2019 and 2016 description: Learn how to enable and configure Microsoft Defender Antivirus on Windows Server 2016 and Windows Server 2019. keywords: windows defender, server, scep, system center endpoint protection, server 2016, current branch, server 2012 search.product: eADQiWindows 10XVcnh @@ -173,17 +173,17 @@ See [Configure exclusions in Microsoft Defender Antivirus on Windows Server](con ## Need to uninstall Microsoft Defender Antivirus? -If you are using a third-party antivirus solution and you're running into issues with that solution and Microsoft Defender Antivirus, you can consider uninstalling Microsoft Defender Antivirus. Before you do that, review the following resources: +If you are using a non-Microsoft antivirus product as your primary antivirus solution, you can either disable Microsoft Defender Antivirus, or set it to passive mode. -- See the question *Should I run Microsoft security software at the same time as other security products?* in the [Windows Defender Security Intelligence Antivirus and antimalware software FAQ](https://www.microsoft.com/wdsi/help/antimalware-faq#multiple-products). +### Set Microsoft Defender Antivirus to passive mode -- See [Microsoft Defender Antivirus compatibility](microsoft-defender-antivirus-compatibility.md). +If you are using Windows Server, version 1803 or Windows Server 2019, you can enable passive mode by setting this registry key: +- Path: `HKLM\SOFTWARE\Policies\Microsoft\Windows Advanced Threat Protection` +- Name: `ForceDefenderPassiveMode` +- Type: `REG_DWORD` +- Value: `1` -- See [Better together: Microsoft Defender Antivirus and Microsoft Defender for Endpoint](https://docs.microsoft.com/windows/security/threat-protection/microsoft-defender-antivirus/why-use-microsoft-antivirus). This article describes 10 advantages to using Microsoft Defender Antivirus together with Defender for Endpoint. - -If you determine you do want to uninstall Microsoft Defender Antivirus, follow the steps in the following sections. - -### Uninstall Microsoft Defender Antivirus using the Remove Roles and Features wizard +### Disable Microsoft Defender Antivirus using the Remove Roles and Features wizard 1. See [Install or Uninstall Roles, Role Services, or Features](https://docs.microsoft.com/windows-server/administration/server-manager/install-or-uninstall-roles-role-services-or-features#remove-roles-role-services-and-features-by-using-the-remove-roles-and-features-wizard), and use the **Remove Roles and Features Wizard**. @@ -193,7 +193,7 @@ If you determine you do want to uninstall Microsoft Defender Antivirus, follow t Microsoft Defender Antivirus will still run normally without the user interface, but the user interface cannot be enabled if you disable the core **Windows Defender** feature. -### Uninstall Microsoft Defender Antivirus using PowerShell +### Disable Microsoft Defender Antivirus using PowerShell >[!NOTE] >You can't uninstall the Windows Security app, but you can disable the interface with these instructions. @@ -204,7 +204,7 @@ The following PowerShell cmdlet uninstalls Microsoft Defender Antivirus on Windo Uninstall-WindowsFeature -Name Windows-Defender ``` -### Turn off the GUI using PowerShell +### Turn off the Microsoft Defender Antivirus user interface using PowerShell To turn off the Microsoft Defender Antivirus GUI, use the following PowerShell cmdlet: From 21f2d36419f0407c85390326c27a541c140a8a93 Mon Sep 17 00:00:00 2001 From: Denise Vangel-MSFT Date: Thu, 17 Dec 2020 13:26:47 -0800 Subject: [PATCH 146/486] fixes --- .../microsoft-defender-antivirus-compatibility.md | 12 ++++++------ ...soft-defender-antivirus-on-windows-server-2016.md | 8 ++++---- 2 files changed, 10 insertions(+), 10 deletions(-) diff --git a/windows/security/threat-protection/microsoft-defender-antivirus/microsoft-defender-antivirus-compatibility.md b/windows/security/threat-protection/microsoft-defender-antivirus/microsoft-defender-antivirus-compatibility.md index e6d8bfd533..0bb74a713b 100644 --- a/windows/security/threat-protection/microsoft-defender-antivirus/microsoft-defender-antivirus-compatibility.md +++ b/windows/security/threat-protection/microsoft-defender-antivirus/microsoft-defender-antivirus-compatibility.md @@ -11,9 +11,9 @@ ms.localizationpriority: medium author: denisebmsft ms.author: deniseb ms.custom: nextgen -ms.reviewer: +ms.reviewer: pahuijbr manager: dansimp -ms.date: 12/11/2020 +ms.date: 12/17/2020 --- # Microsoft Defender Antivirus compatibility @@ -51,11 +51,11 @@ The following table summarizes what happens with Microsoft Defender Antivirus wh If you are using Windows Server, version 1803 or Windows Server 2019, you set Microsoft Defender Antivirus to passive mode by setting this registry key: - Path: `HKLM\SOFTWARE\Policies\Microsoft\Windows Advanced Threat Protection` -- Name: ForceDefenderPassiveMode -- Type: REG_DWORD -- Value: 1 +- Name: `ForceDefenderPassiveMode` +- Type: `REG_DWORD` +- Value: `1` -See [Microsoft Defender Antivirus on Windows Server 2016 and 2019](microsoft-defender-antivirus-on-windows-server-2016.md) for key differences and management options for Windows Server installations. +See [Microsoft Defender Antivirus on Windows Server 2019 and Windows Server 2016](microsoft-defender-antivirus-on-windows-server-2016.md) for key differences and management options for Windows Server installations. > [!IMPORTANT] > Microsoft Defender Antivirus is only available on endpoints running Windows 10, Windows Server 2016, and Windows Server 2019. diff --git a/windows/security/threat-protection/microsoft-defender-antivirus/microsoft-defender-antivirus-on-windows-server-2016.md b/windows/security/threat-protection/microsoft-defender-antivirus/microsoft-defender-antivirus-on-windows-server-2016.md index b29fd1b0e3..569e75a850 100644 --- a/windows/security/threat-protection/microsoft-defender-antivirus/microsoft-defender-antivirus-on-windows-server-2016.md +++ b/windows/security/threat-protection/microsoft-defender-antivirus/microsoft-defender-antivirus-on-windows-server-2016.md @@ -10,8 +10,8 @@ ms.sitesec: library ms.localizationpriority: medium author: denisebmsft ms.author: deniseb -ms.date: 12/16/2020 -ms.reviewer: +ms.date: 12/17/2020 +ms.reviewer: pahuijbr manager: dansimp --- @@ -173,11 +173,11 @@ See [Configure exclusions in Microsoft Defender Antivirus on Windows Server](con ## Need to uninstall Microsoft Defender Antivirus? -If you are using a non-Microsoft antivirus product as your primary antivirus solution, you can either disable Microsoft Defender Antivirus, or set it to passive mode. +If you are using a non-Microsoft antivirus product as your primary antivirus solution, you can either disable Microsoft Defender Antivirus, or set it to passive mode, as described in the following procedures. ### Set Microsoft Defender Antivirus to passive mode -If you are using Windows Server, version 1803 or Windows Server 2019, you can enable passive mode by setting this registry key: +If you are using Windows Server, version 1803 or Windows Server 2019, you can set Microsoft Defender Antivirus to passive mode by setting the following registry key: - Path: `HKLM\SOFTWARE\Policies\Microsoft\Windows Advanced Threat Protection` - Name: `ForceDefenderPassiveMode` - Type: `REG_DWORD` From 5785056149205c818309f6991c57d44ca96c9d14 Mon Sep 17 00:00:00 2001 From: Denise Vangel-MSFT Date: Thu, 17 Dec 2020 13:29:18 -0800 Subject: [PATCH 147/486] Update microsoft-defender-antivirus-compatibility.md --- .../microsoft-defender-antivirus-compatibility.md | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/windows/security/threat-protection/microsoft-defender-antivirus/microsoft-defender-antivirus-compatibility.md b/windows/security/threat-protection/microsoft-defender-antivirus/microsoft-defender-antivirus-compatibility.md index 0bb74a713b..79b5a1cc1a 100644 --- a/windows/security/threat-protection/microsoft-defender-antivirus/microsoft-defender-antivirus-compatibility.md +++ b/windows/security/threat-protection/microsoft-defender-antivirus/microsoft-defender-antivirus-compatibility.md @@ -77,7 +77,7 @@ The following table summarizes the functionality and features that are available - In Active mode, Microsoft Defender Antivirus is used as the antivirus app on the machine. All configuration made with Configuration Manager, Group Policy, Intune, or other management products will apply. Files are scanned and threats remediated, and detection information are reported in your configuration tool (such as Configuration Manager or the Microsoft Defender Antivirus app on the machine itself). - In Passive mode, Microsoft Defender Antivirus is not used as the antivirus app, and threats are not remediated by Microsoft Defender Antivirus. Files are scanned and reports are provided for threat detections that are shared with the Microsoft Defender for Endpoint service. Therefore, you might encounter alerts in the Security Center console with Microsoft Defender Antivirus as a source, even when Microsoft Defender Antivirus is in Passive mode. -- When [EDR in block mode](../microsoft-defender-atp/edr-in-block-mode.md) is turned on and Microsoft Defender Antivirus is not used as the primary antivirus solution, it can still detect and remediate malicious items. +- When [EDR in block mode](../microsoft-defender-atp/edr-in-block-mode.md) is turned on and Microsoft Defender Antivirus is not the primary antivirus solution, it can still detect and remediate malicious items. - When disabled, Microsoft Defender Antivirus is not used as the antivirus app. Files are not scanned and threats are not remediated. ## Keep the following points in mind From fae702488ae56cb2ebbbec22015a5e78e2cf306e Mon Sep 17 00:00:00 2001 From: Denise Vangel-MSFT Date: Thu, 17 Dec 2020 13:43:08 -0800 Subject: [PATCH 148/486] Update microsoft-defender-antivirus-on-windows-server-2016.md --- ...fender-antivirus-on-windows-server-2016.md | 20 +++++++++---------- 1 file changed, 10 insertions(+), 10 deletions(-) diff --git a/windows/security/threat-protection/microsoft-defender-antivirus/microsoft-defender-antivirus-on-windows-server-2016.md b/windows/security/threat-protection/microsoft-defender-antivirus/microsoft-defender-antivirus-on-windows-server-2016.md index 569e75a850..a4ba1836c2 100644 --- a/windows/security/threat-protection/microsoft-defender-antivirus/microsoft-defender-antivirus-on-windows-server-2016.md +++ b/windows/security/threat-protection/microsoft-defender-antivirus/microsoft-defender-antivirus-on-windows-server-2016.md @@ -1,5 +1,5 @@ --- -title: Microsoft Defender Antivirus on Windows Server 2019 and 2016 +title: Microsoft Defender Antivirus on Windows Server 2016 and 2019 description: Learn how to enable and configure Microsoft Defender Antivirus on Windows Server 2016 and Windows Server 2019. keywords: windows defender, server, scep, system center endpoint protection, server 2016, current branch, server 2012 search.product: eADQiWindows 10XVcnh @@ -15,7 +15,7 @@ ms.reviewer: pahuijbr manager: dansimp --- -# Microsoft Defender Antivirus on Windows Server 2019 and Windows Server 2016 +# Microsoft Defender Antivirus on Windows Server 2016 and Windows Server 2019 [!INCLUDE [Microsoft 365 Defender rebranding](../../includes/microsoft-defender.md)] @@ -23,7 +23,7 @@ manager: dansimp - [Microsoft Defender for Endpoint](https://go.microsoft.com/fwlink/p/?linkid=2146631) -Microsoft Defender Antivirus is available on Windows Server 2019 and Windows Server 2016. In some instances, Microsoft Defender Antivirus is referred to as *Endpoint Protection*; however, the protection engine is the same. +Microsoft Defender Antivirus is available on Windows Server 2016 and 2019. In some instances, Microsoft Defender Antivirus is referred to as *Endpoint Protection*; however, the protection engine is the same. While the functionality, configuration, and management are largely the same for [Microsoft Defender Antivirus on Windows 10](microsoft-defender-antivirus-in-windows-10.md), there are a few key differences on Windows Server 2019 and Windows Server 2016: @@ -34,9 +34,9 @@ While the functionality, configuration, and management are largely the same for The process of setting up and running Microsoft Defender Antivirus on a server platform includes several steps: -1. [Enable the interface](#enable-the-user-interface-on-windows-server-2019-or-windows-server-2016) +1. [Enable the interface](#enable-the-user-interface-on-windows-server-2016-or-2019) -2. [Install Microsoft Defender Antivirus](#install-microsoft-defender-antivirus-on-windows-server-2019-or-windows-server-2016) +2. [Install Microsoft Defender Antivirus](#install-microsoft-defender-antivirus-on-windows-server-2016-or-2019) 2. [Verify Microsoft Defender Antivirus is running](#verify-microsoft-defender-antivirus-is-running) @@ -48,9 +48,9 @@ The process of setting up and running Microsoft Defender Antivirus on a server p 6. (Only if necessary) [Uninstall Microsoft Defender Antivirus](#need-to-uninstall-microsoft-defender-antivirus) -## Enable the user interface on Windows Server 2019 or Windows Server 2016 +## Enable the user interface on Windows Server 2016 or 2019 -By default, Microsoft Defender Antivirus is installed and functional on Windows Server 2019 and Windows Server 2016. The user interface (GUI) is installed by default on some SKUs, but is not required because you can use PowerShell or other methods to manage Microsoft Defender Antivirus. And if the GUI is not installed on your server, you can add it by using the Add Roles and Features Wizard or by using PowerShell. +By default, Microsoft Defender Antivirus is installed and functional on Windows Server 2016 and 2019. The user interface (GUI) is installed by default on some SKUs, but is not required because you can use PowerShell or other methods to manage Microsoft Defender Antivirus. And if the GUI is not installed on your server, you can add it by using the Add Roles and Features Wizard or by using PowerShell. ### Turn on the GUI using the Add Roles and Features Wizard @@ -72,7 +72,7 @@ The following PowerShell cmdlet will enable the interface: Install-WindowsFeature -Name Windows-Defender-GUI ``` -## Install Microsoft Defender Antivirus on Windows Server 2019 or Windows Server 2016 +## Install Microsoft Defender Antivirus on Windows Server 2016 or 2019 You can use either the **Add Roles and Features Wizard** or PowerShell to install Microsoft Defender Antivirus. @@ -173,7 +173,7 @@ See [Configure exclusions in Microsoft Defender Antivirus on Windows Server](con ## Need to uninstall Microsoft Defender Antivirus? -If you are using a non-Microsoft antivirus product as your primary antivirus solution, you can either disable Microsoft Defender Antivirus, or set it to passive mode, as described in the following procedures. +If you are using a non-Microsoft antivirus product as your primary antivirus solution, you can either disable Microsoft Defender Antivirus, or set it to passive mode, as described in the following procedures. ### Set Microsoft Defender Antivirus to passive mode @@ -198,7 +198,7 @@ If you are using Windows Server, version 1803 or Windows Server 2019, you can se >[!NOTE] >You can't uninstall the Windows Security app, but you can disable the interface with these instructions. -The following PowerShell cmdlet uninstalls Microsoft Defender Antivirus on Windows Server 2019 or Windows Server 2016: +The following PowerShell cmdlet uninstalls Microsoft Defender Antivirus on Windows Server 2016 or 2019: ```PowerShell Uninstall-WindowsFeature -Name Windows-Defender From cabc2351b1b958ef920012c27aab1023f1a82cb0 Mon Sep 17 00:00:00 2001 From: Denise Vangel-MSFT Date: Thu, 17 Dec 2020 13:43:36 -0800 Subject: [PATCH 149/486] Update microsoft-defender-antivirus-on-windows-server-2016.md --- .../microsoft-defender-antivirus-on-windows-server-2016.md | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/windows/security/threat-protection/microsoft-defender-antivirus/microsoft-defender-antivirus-on-windows-server-2016.md b/windows/security/threat-protection/microsoft-defender-antivirus/microsoft-defender-antivirus-on-windows-server-2016.md index a4ba1836c2..8f3a10623e 100644 --- a/windows/security/threat-protection/microsoft-defender-antivirus/microsoft-defender-antivirus-on-windows-server-2016.md +++ b/windows/security/threat-protection/microsoft-defender-antivirus/microsoft-defender-antivirus-on-windows-server-2016.md @@ -25,7 +25,7 @@ manager: dansimp Microsoft Defender Antivirus is available on Windows Server 2016 and 2019. In some instances, Microsoft Defender Antivirus is referred to as *Endpoint Protection*; however, the protection engine is the same. -While the functionality, configuration, and management are largely the same for [Microsoft Defender Antivirus on Windows 10](microsoft-defender-antivirus-in-windows-10.md), there are a few key differences on Windows Server 2019 and Windows Server 2016: +While the functionality, configuration, and management are largely the same for [Microsoft Defender Antivirus on Windows 10](microsoft-defender-antivirus-in-windows-10.md), there are a few key differences on Windows Server 2016 and 2019: - In Windows Server, [automatic exclusions](configure-server-exclusions-microsoft-defender-antivirus.md) are applied based on your defined Server Role. - In Windows Server, Microsoft Defender Antivirus does not automatically disable itself if you are running another antivirus product. From 136e0cffd26e50eb9069505bace9d4ca60d4020a Mon Sep 17 00:00:00 2001 From: Denise Vangel-MSFT Date: Thu, 17 Dec 2020 13:44:58 -0800 Subject: [PATCH 150/486] Update microsoft-defender-antivirus-compatibility.md --- .../microsoft-defender-antivirus-compatibility.md | 4 ++-- 1 file changed, 2 insertions(+), 2 deletions(-) diff --git a/windows/security/threat-protection/microsoft-defender-antivirus/microsoft-defender-antivirus-compatibility.md b/windows/security/threat-protection/microsoft-defender-antivirus/microsoft-defender-antivirus-compatibility.md index 79b5a1cc1a..0a96956345 100644 --- a/windows/security/threat-protection/microsoft-defender-antivirus/microsoft-defender-antivirus-compatibility.md +++ b/windows/security/threat-protection/microsoft-defender-antivirus/microsoft-defender-antivirus-compatibility.md @@ -47,7 +47,7 @@ The following table summarizes what happens with Microsoft Defender Antivirus wh | Windows Server 2016 or 2019 | Microsoft Defender Antivirus | Yes | Active mode | | Windows Server 2016 or 2019 | Microsoft Defender Antivirus | No | Active mode | -(1) On Windows Server 2019 or 2016, Microsoft Defender Antivirus does not enter passive or disabled mode automatically when you install non-Microsoft antivirus product. In those cases, [disable Microsoft Defender Antivirus, or set it to passive mode](microsoft-defender-antivirus-on-windows-server-2016.md#need-to-uninstall-microsoft-defender-antivirus) to prevent problems caused by having multiple antivirus products installed on a server. +(1) On Windows Server 2016 or 2019, Microsoft Defender Antivirus does not enter passive or disabled mode automatically when you install non-Microsoft antivirus product. In those cases, [disable Microsoft Defender Antivirus, or set it to passive mode](microsoft-defender-antivirus-on-windows-server-2016.md#need-to-uninstall-microsoft-defender-antivirus) to prevent problems caused by having multiple antivirus products installed on a server. If you are using Windows Server, version 1803 or Windows Server 2019, you set Microsoft Defender Antivirus to passive mode by setting this registry key: - Path: `HKLM\SOFTWARE\Policies\Microsoft\Windows Advanced Threat Protection` @@ -55,7 +55,7 @@ If you are using Windows Server, version 1803 or Windows Server 2019, you set Mi - Type: `REG_DWORD` - Value: `1` -See [Microsoft Defender Antivirus on Windows Server 2019 and Windows Server 2016](microsoft-defender-antivirus-on-windows-server-2016.md) for key differences and management options for Windows Server installations. +See [Microsoft Defender Antivirus on Windows Server 2016 and 2019](microsoft-defender-antivirus-on-windows-server-2016.md) for key differences and management options for Windows Server installations. > [!IMPORTANT] > Microsoft Defender Antivirus is only available on endpoints running Windows 10, Windows Server 2016, and Windows Server 2019. From 98c877c7f8ef1fcc2ce8ef6f68f6f09913edd1a2 Mon Sep 17 00:00:00 2001 From: jaimeo Date: Thu, 17 Dec 2020 15:21:05 -0700 Subject: [PATCH 151/486] couple typos --- windows/client-management/quick-assist.md | 6 +++--- 1 file changed, 3 insertions(+), 3 deletions(-) diff --git a/windows/client-management/quick-assist.md b/windows/client-management/quick-assist.md index 3fee94cc1c..9fc8de6503 100644 --- a/windows/client-management/quick-assist.md +++ b/windows/client-management/quick-assist.md @@ -45,7 +45,7 @@ Both the helper and sharer must be able to reach these endpoints over port 443: 1. Both the helper and the sharer start Quick Assist. -2. The helper selects **Assist another person**. Quick Assist on the helper's side contacts the Remote Assistance Service to obtain a session code. An RCC chat session is established and the helpers Quick Assist instance joins it. The helper then provides the code to the sharer. +2. The helper selects **Assist another person**. Quick Assist on the helper's side contacts the Remote Assistance Service to obtain a session code. An RCC chat session is established and the helper's Quick Assist instance joins it. The helper then provides the code to the sharer. 3. After the sharer enters the code in their Quick Assist app, Quick Assist uses that code to contact the Remote Assistance Service and join that specific session. The sharer's Quick Assist instance joins the RCC chat session. @@ -53,9 +53,9 @@ Both the helper and sharer must be able to reach these endpoints over port 443: 5. The sharer is prompted to confirm allowing the helper to share their desktop with the helper. -6. Quick Assist starts RDP control and connects to RDP relay services. +6. Quick Assist starts RDP control and connects to the RDP Relay service. -7. RDP shares the video to the helper over https (port 443) through RDP relay services to the helper's RDP control. Input is shared from the helper to the sharer through the RDP relay service. +7. RDP shares the video to the helper over https (port 443) through the RDP relay service to the helper's RDP control. Input is shared from the helper to the sharer through the RDP relay service. :::image type="content" source="images/quick-assist-flow.png" alt-text="Schematic flow of connections when a Quick Assist session is established"::: From 909bf9fe8eac48bf0f619216302106092ea37a80 Mon Sep 17 00:00:00 2001 From: Joey Caparas Date: Thu, 17 Dec 2020 14:38:44 -0800 Subject: [PATCH 152/486] update spreadsheet --- .../downloads/mdatp-urls.xlsx | Bin 19968 -> 20092 bytes 1 file changed, 0 insertions(+), 0 deletions(-) diff --git a/windows/security/threat-protection/microsoft-defender-atp/downloads/mdatp-urls.xlsx b/windows/security/threat-protection/microsoft-defender-atp/downloads/mdatp-urls.xlsx index 37a6dacbe81bb80d18c3655023c7cab490bd7abf..de1ec91182b84f43093aeee46bb6ee02d8b3d2e2 100644 GIT binary patch delta 13780 zcmbt*WmKHa((T~x9^4&*y99Rz4NmYta0n9Q0fIXWuEBx^cMWdA9fCu!0KpwDLf(sojLZw=^AH)|s>;1bCC83l$e>mRd&C2cD+@5rAnPkQ?6{AlV zMGN@Mq$!1nfJt%SJ*WD9!VKGG0SB;_P%hKSnDI6v!MB zei(pfE`GK6m#D?YyTj`Q?)Selj*T>368y}YX2CwrQxN&CSaNG+j#0?u$JGE!pWI$% z29XG^+ydoahbjQ=$uahMy&^lbAXxA55Ux5`tD7% zowBvs@@Ev)X7>|C<6~zfnh6VGqfU+N;C(f0iXXrKG--Gd(OyAVH!G`H7R{PQ;`uM> zrySm`$hAi`Z%H(>5Lk_R&nv)r7;g!=8ni>uld1xm4OAVZ{RQ4-cpS!!J{01OOa34= zuf1Y{`QYmY^<+jq-uW7WzROmf;dO^M4m0%&pNQr4E^$iE6Vc*zF!!fLGMKs(@vSW> z2D1eW!m%lt2N-f_05YZk!-3g%9B_>3d_3y*@L8^*EffsK zEXIhXt7*xRr=uyZcW}^SY#z54IZyeqmA>lDmHLBswo(;U4N`j3$RHp|FK<0JdvA6k z{ArDaZav}kR^>1KNN?V@_O#YKEJm^L%*!|nJc17^1zY4$xxdH5bz)_csnOt=)kTBx zf!0{&2`WtsPmJ{n`0PvW1%nykA2VoH5#PoV$3AFGy$@5RnZq{}REKtij5BIdlXL3J z3A%UVQ`M%}l*_emA0T$!QJJ~$t7txC@47a;<3OT~2gyT)c)Afuif=0FP4k`1Wk&h4 zBbU-n*o1B$!A8t*g7fL{;#ux-2XRUiUNe+FlKF8{$z;klt+G=my}#A?B%*Uw9Wi1k zDJj*E>?&JsM&)H`aF+pteJ(n5PW<9OAhCq*S^x$FYD55mFrL%F!Vh3|q;<(W zxauI;>!@jGbZ&}$saYb%;4;_FG9_!C@Py6*W#Z@9pDQgHiO5gAX#rYx-B#B?*wyv$ z{aN9ZGBf$n;w2Q6_|(`Ry<)cNGEw8Rveqw$`eO)d%MNfx|%&oHBxs1~0YLX@N zva~SxV@xVfR2lswsvYZe3?7GRbg9#D#xJWC(sMEIKl-8?jBIs}$F+VF@@vFN1gpa1 z<_X4(9;Itnw;*?|sFT~#dP83Wg}kVvyGYS1O(oK7OYN*PNaFfJlgAr{_0oI9NcG1& z{OE%d_7GBni8>Pe(r$C0~HW%d6T9rEJlYyj}*33 zC>mC1BHk62-8g+ge>we#WI9MOq|aM)Au1Oo(4D0+d@M^~E0hHmdL?zT@wBk=geCIC z8)+q02Y)NDirBtqyfqFe*0$j(PuN?gfR}oA_YR%S&>f_6W@S{#aaRw0wl{pyB8!hb z1aBrMepp@$$QM4ER=LW*LeK-T(`ls9_Q>O(1b%|Bj0$%Te3BmIM*m`IIh|r|9C?gd z(7L7ENqg)25ncJa!KAa~rFnklP))!-g>ky^nRo1;Ej8$otu|Ib_~i4qJiBjklA|Rg zOwy`-g9(f1+zM?fUy?O{CS-lHyVlOU8v22l@#cKGh9K57W?pfQ-iZIB+-?)PeCxFC zEySWZ(kIh*`EB0QgyFA3KkO(p{WBx3V(s{CjPYL;9z-={$TI_GP^)w1W@3?c1Pq^u zMnYu^dBZlpQ~Rd9(aD+Q*1cUo(Pb6C>1-g?>r3O}k-LtAnzSU{<5)T-;~ie^Ye!w- z9^7S`X+Hk;Ooo=1~F}PtY&P zRnvwn2#q{O^lFC=4+PqZg+QT^0U3sdE=z(*-m4`K7;J6*ycdU>8O1$G)L8T1irel^ z$_5n5!tFe1X`8q-?pBj&(r_JbF<}e$SNN@Y(Z5W=hKlC*VgNU1+cz6?mySOVjU5mc zwlCI9@0u6Hj*L21(H{@Q$X7-X2>PdPFPt7)f#ntS$9fU;$I}zzr|s@z;9kDF6RhdQ!e3;BUwy5zq1-d+t0 z9j$nj?MGSeg&kUN5D3`QfveKvio5RH1DBJgryqR>BfZ%n8yzMmPen&xyNU~wmw#1? z9d%@~MGU;P|8alfP;Os7n@)!fJm$Y%xZbaPsAGl`4te$HA~{5-T(&MSznhK9YZs8X zC)oPbBpEsI$v!$JkGniikP}RAYa-!{8h^;I0#PwtR5Rb&X*}3 z+J{4$Z+1G8>9=ZNhFz`?e4p}A>zUFF36{x9DJ&WeMy#(scs2O2&1Z+Zl040!nd_i$ zln@0yU44?mn9+Tj1G;-RFPCn2&i2GEJCc`{uL?CdYEQOZ)n(>?XQO;N+36iF&-m0! z)bLnyd*gNG@u`_KQYQIq&|ElkjP7&9$k?X!)2Y~zT<~SN1xIa(#Yv5QYC#=Ip2Z0c zYkzlbQg3L9Xhin=R5X;h4*QtG5W^eBJnF36k0&+OJ^~r4)xe-D;Zqq`EsJmNwxhQ| zsv*ISMyp9xq!tXD@2uhIr071H9=_NCTS)T4b@PWJ-EWFF1hpAx?ET$?wkw>A%q9u!lUt1fb?^j*h0DMCcYF%OotzWx#1f+% z5TyH%&vi1^I{;B5pz&5Kqn`M+sE|xtT5w!Yq>v@5WM7*ZuDp$Dq(onUS)^p&XEXC& zSGxcui6Md@PBccvAWjrU<{(ZC#wLj-Bu1GWbE-Q0jE#PQhMg@VyjxzXWW`8aPgfUR zC2YPMA#=8Lf{5VNxbfYZJXkXj1iIkAL{vw5i?dz0a zsw?PDLt`+T;7rS^dX@<5j6{f}gP>G;@$+r292Fx6O9Dd@;WNk1qkjk~aG&u=kF*LA znj2+QqFCT=1p0t;2mX1#V6gRHZ5@9_L^Gc0DlRJ8%Px}Ard_7xeqAO#pAyA&0Zcpd z2*Z2N{PWB?52LY_y_Bsd+58QlWuRxFGA^mQ2d&wgNUhxy-YMd$0ht^I^bAbvpcXHCR za0-FZ4OG+lLJTlaJ52x}ddG-KN59SCjZaq=adIoQ;e+Z8Haj{!YUUGV?n{XximzAJ zt|R8<4APEYsSH!~)qB!ZFb;url3?$m_}f{`8^R!bfSgj2y_Ex&Y+M0%^k4*`{)Uov zE@yw(u)2$$xl_nPjknSqJ{j_Gmy-t;MCDT$#@ZPE;2^PzQc|;)Z9RW9l_L47(P(b@ zApyUW?#3)BCA4nOws#Jy15Vt^8gis_F`4qKjZ0jRJeTbe6hoc8AFu>E*H* zpNauPVh-LvW>pc*k{PqiqUpy~ayJr0$PPUT{I0#pzFuJi?JQf1FBTr%`bm>mRG*)m z>IS4D^k=iMDE=I!mZ}UM917=5sG8Rie(waxCBZ7j@VA4__ruH(tHiyRI7N@myA~$< z=dF-N$(}8Aa)`lfXTfRSI0Nh8*I${%({`?!2|s_wA7T~TN7pM0tdO0t%9z7v!}ySf z{c_@RZa(wd4ZlK1kQfy4<4g$q3B%wd$KaS--?5(IfZvSanZ%|VYKF~^Pa<6;3IzG( zxQwXvBdNH`@R0amM0NXvPwU$_aq)-H_;gb#3ZMcJ19SC{g%gmLz1%Yz!OQTzVJAJ7%S`?ddPgPb{(!vDg~Bgj z(XQzm)S%6t-ZBB!nrIX#9Nir?Ah^ranZ$^!#qJ5)r?>ZaG=#o~1BnDBn#wYpv*&dV zDwK-B4-X<}%79eHtMDN(opVJ|j|oRh1e{{e2`_EnRv@7S3#N3SsC39_aqB3N76I;P z1djv%hBSgJPAG+<>oebA=ajuYf3u;nOeC{ICsKyK_!$@LHi0l0i57r&+~DeD=lEj? z7x)Llm$>9&!Jy$;BOBJumD7Sh0z;P{Pw%ayPBltbmrTA-(6cIn)FiPfBN8`&5 zL94h9+VJln7!>QpV)oNGvhWK7GCn16cuk57R_S?X2u^xIra-b-L18RuKf3|A4zvs# z00AS-K=+*d!l3m0EQQ|;8x1FmRiaw=E&3LxhadI}^Z&ln7=O zH*N=iEVaZLcQlpw_)N!_2DHx&kp4En_QPxkb2V9L2TLS^Xwgv;!ARm6?`bLiMGfFD zH?UtT6v6u85O5hGiHC|S>0W3*)1ujaW7tfB7WCh=2=8LZ$pyX8LK=z^nxh~_J-ADe z;VrI*C7mYjcydRey0kz4zuYfvk^okFwnL&d*ALSl@$@qAnc4o?dhf8XnUHsf3H$*j ztWn z+;M}dhZz|WE0ls9S1q`Us?mO9E-8>6d;FPaB5~p*lA&<9q2q1YL?EZ|HBB0NLvz_B9U+QVH$AEi~*UDSBZ$KYo_sM%9NeRPGPKbaNPT&#|p3 zcoFaAXinS`^7l^pENfB+2xvR^>1mo`6w%MpFVA=od8diOQy zKIk-v6E`WS6rC%cHb>8|y_Gg1w)G9w8U3@)tNl{ldk1Kcqmc@=5c?p)X6#naI_d>F zFT+a6ujZl#x#_OKp2Y?_`}FRpjtGpAhi&aLE9b6VzHyQ21MDOe#!;TYL)!7TmW0 zv`$f=0_gTMs6;?aJuC2WYgMi1zzoZ1+H)CzBGb{qr{m)BmNAg}cLn{3L00Ph; zN@%PtQl;lH1su?|&nSC9gM4nN#&JM@*~QY8A7lJ1(8h<5wK=T9k%~=6ih%QjA@D9B z8ipNW3C*w85%*n}*6|cJT7FH(5trkx@&5DxN~oidv2&YRr8MRDsKYt5G{M3)5WNkLpb&W|vHpnv#u?S=ufC%D#{Z{N zNL!zsLfP3#tzrPXH~Ln&v<7i&EzImiC7u32U=c7>3<4WJ%Z7@>?ybFe8VQ}uX@g3x zquoX?Q#zJJlH^4lV?JjCH2fYfX+$b40ZS!^P=OkBB+TUG(U7#ZhSk5si4%`w`j1-k zU&{x4MtIKTpPkfF6alV(o`pRS79ocJBvoAXg74cX*MFIMBHf5}c~`z(`#XBxb5-uF z2z6V=7loaFW^UlEvEe;jsC!Mrn?+#wS1GKDN*vlVoq%kP7SZGN&lPYf=NuP!O~b0Q z!4LOubdwv4W%(Yr2Fk6MhT!1wzq(yq2;9Tv_?R>sKKp2f&FF7)x%k&pqB0#+?mnt4 z#6H;YPK&LS=pkJL-^w`gvA-fsBf|9He0@X36|A@Y;{RA~qFbGFYal=xfxg+ECnJgd zx5bA{!{L!K^M#{7&~;`iqX59z{l4a!HF>bFTcA|9WA8q zWL!4(%E+3?Yy$-bv}%hB=4V$riY~2E?;S7{|CvmxO|JB-tKun+SXVqab00csL`8Si z4i8l*7yFMvL1*GDn!j7o0yX`G&V1 z5jmjkwvOq=-qYxr=R+CgCT6=epD6#8MbNB%6a7`$Wexe&!$iGh8i;N#+^evi1zueui5Y65v*1Xit{MG8|5BvHe9i{STTa zi)l7x%4oIea!N%g_4?4x758hV8|UvYHIcJ!K~jKqazjb-?y9QL@+jSllD>@lMkR4+ zA;V3UX;$KR27KBQhE@F0ZijfnMQ)AdZ{287rNy7 z`f)9nF%-Qu=<52jPV=g>2Df@a-MVk(5y@sjlU3m zto1&yEfj+*raq_(n~8WAid9B-o+c6{l}^YL-zen`H7K@JKx&9Z|IaWzkIleVjPQ8* z(XIVxOs0XJg?5pa;Jtv7*e!j`jxR!D$CE%zc_`#>jwiHUITh95h9IlUu56;?adfp# z(Q3IACAbH1;~HI|G@qTRxI2XX54P$V8}S#5|AHNsCE~`e;0l-CZiUE7+X6oHF$#YP zw$&CRn_1wY85_{*RUunuZ@lWi;myW4yxcM^8cN> z1wurR&D5BklcnJpvs`2K;-m9SCifBpkMJv0bMrs=n@@J0#H$R1|I6nzFFr5i*Nhd6 zKN8XuoWi0~YW^w4M5EH|+@BP$(qM$Opl^iu4^I>(72T8W7nQBHk*S@^0sA8r}?_Q*UYGj(w8Od;f99C`Q zl4fO-c9hO8Me&!&J~SRB4$oF;n^y(JvCrI<#c#Dm1y9F+>_wc4AgGJp`T!#5#x7_( zI?QkjD@)@akt~0fzOtCWXSq<_2^ZO}{Q%G?cq!Y+w_uyG9Q^^MM+s#$g^6zhYS-;W?dDZUf`hE@n^WR;?k1kPu%zn0EkAd-WRRyILuZ_ zCIhqJk3nvG9fG2E4TX0X)(Mi;k@NgMPb{$6p7-riB-F9bz+23^Im&4`yDsH*Qs8zw0XsFRUAYHqzEZ zjKc0u?yn4l@vc{|6ng!4?ivhFoU7J9u8RP67=_Dpe(1;U&ufw0`y9*=Cq2MtMWFmzQh(I+SQGQl$UO>0*b}^;TaZx%vsG9cnpT3N}UIHOAr-s=B`@D zl^Mst#jg|WxO+a0nDG*vh+3qwNz*76!9UpyyL?nr+~jp;Olb!6+o%MDd*1fB@yA|j9%-TwP z;L9dE-P9ZYgUv_!C-zq{+9d6jM2XZ3f)Y5w87AaSn`&y}Vgf=X=`Q`#o9dyNo_}DE zPsAmv0(-x5k|2k`q*u{|jYFH0TmUU#o*jxkBOZq__S=Zu;0^_=-dWe|U5Ab9)RPhI z?m(nwN)F^IIZ()x%Fu{Zz-><9hQ}6jTNJoruGgR77FOWI$U5$k>3Gw{l?Y)poS#2y z6LAk-)N^+;SWeCf3#nhx{CGyLq1GVMTZM--CZAsr9Jpq=9((=vHSXYNY4|59fu^ zaD2)9Xsh%Gd}0-J>juPD*FT~nKfViV`-<`QK{w^g+bXLmB%9xGhlfP9j6S?{gqrud zIj;b)qTQ6$_}B9VLiOT_Q~<4Hm>kzxAAq+T%8sIJj29!;+`$NM`zH38cYCZaRv~KC z7Mv+oll@-62W>Gyj99YdtQ&sjhPd|Xxs&?^LTt_U3bc~55R;JEPoBKC8t^EcOj1YM z@6$EE^*7YUo-ID@Q-#`LdRk*j^QGw)>%}WM#fr6uwL>#+e5YgI*axky{eqP_8yuNbPa=fUGtv0j{^VZqqQh1K^ z{+j%6R@E5O0tiS#gcDfja3IhyWQTuJSqnQ)%)RNDmC&Pd z{Jk05+av7~|3x*^7_g={C5tcQpp<~YcG}3T!h{GJsDPtvkz%&`%k(ESP-aZ>`>li=5(@=Lrd3CMEctIwdIS^X)UcWS>wo z>I%}cYqF8=*TUdONS)1dw%BU2&eY24SruNc=f*} zneiwMtH&o$513biJj`5ta5&*GXUzv1G4`1WZt?$6f7`E>#74yARgpEjF|I_qC*`Dk z7va7r+DnbU2}X8W$(zTS2FTv?6G-1uTw|X;>uT=f^XvD+1O8gMzXXGnSpE zes)FsAV(Y~9Ms~nhG2S#<4TCNTm%j4$3#=(B(V@z+~Ema=r9A#r2u)S$xVP>bV|APdmrjs)wZ*Q(%@>EwG ze$d4KQnT;%I!fUt*jPm+-70QsiY4Dpa9u(NXO_+89m}G;rHL zTO*g8J#7|L3lUQ;jFtTI^qY6yWaGu~rkzVO%92k$rqTt#pUGx~%BIBIq(=%wWh0cS z7I0x&Pu`&W0uN&O-AdXF4k;|}o7jIJNb&rL5VThkSrlYV_24<}8YQNC4x z{b~?0-DH$I?uY9gId1R+Pj_&xGnp^Z`*3|{%;z}KTkEv$fp_=3B~ziD>84~0B_mWU zf5K?N_;9G*7$a-J7KoBlY7}P}jp302K9sr_IR^<7)a-+bQs);l@ho#$HoIPB+0 z#Ok{y9^rV}rN&2FWZ|BqjyR=QhhjTW6LM^y=J3gdr|ihBM(DAYTzKrig zDBfw73(%jP6s@4WwTMb?Nz)?FD*tB=D*Q=^yobziJ=Bh7$fOPCGo z@hZG?qaY$_tfRPx3~_K!??K);1x#a5>+PGcAZe+Q7WR%ym@f7=%u^j>A=~X$j@Q9C z+3khi@NT`0_UCz?{-aBq`j4xJ7q`)Bd`C~r=GJ6cvF=6Kw3Ly{wMX%o)i|EK3#j)~ z)uYlu63E8e?ohv}+zMB?MVG#+9q^&nSn@cP&f4())?4L0X!|}7BpOSHCd}{KscIZIzdApI)^w)&C0=R5;h&5!2WRYAX9HEt7$uU z*iEGy#FarbdXb*K`d0o2ewR-1j9n?QL0t+sCptfErM_?VX{p_wFmp6bKf4L5+8`?$dPJda~k&=AC*Hy?L;w}a5U^@ zw~tj98&4Z5m=x+X%ej2p*&m{6uV=mr2fATSZE#NPlVev3nMhJ=AP`q^?f_zeS+BB2 zg*lA!!_OzHkMIs&tG^+fZP|ZRw*+V05%rgUKJo%qoEn=g$3!yVDprmf*e$9N$dbgC z6%)S+Q}5GY4e7=h1m01!D#Ff3EIg(Xy>&0??F6XyEcFrse4~htb>J*hJvF z_-~jbTN%CZQKF0o7Oy4+hk?Z(q2#IDRHiC5a4{BAJ6$4C^iRWzH^EOR$Kc%!2K1!# zkRf$b1@%v(H40duq&H-II7(#{xEr5Oepoj)qNYwPR-wTpg*x^n)*`uFEAQ#3&e6EB z{3H(Rj1cNWJ0F*~aiwBC{~U#dMOTCVl!|Dnf%VHRY?H?;>c%zv_$P3Lkr-simfSw_ z(Z&Z7v)4YDhKJsmfz&GjYg0~QE%<6#lD|MIMGQW{gHSliS#}_imU_G?hd|S(ilPGf zo%*A8Ms;ftu0ZyPAts9Px^1Z@VVEloOE*mAF%^E8qh+Q(>YiMu?{z!gM0{e{NcW1n zlZe+^xaynGDcqlUsapUi_|-}Sn?cSH5;C)hgEg8kx zG~LFct?a_UgEMF<9r9Z~Mc7)x#LWr89fOqk=*Oxj=cl^9&jmjh4aL0~md-eJn7ov* zuJbhS_$HW=N+u8a5X=}fEHIc!Zo=%Sy={cgv}2}Jg{1y4U?l@H0lio9eoF4KMlEx1 zJ1Qe~CU!8Ig#LsXUH3wJqC0%_Z@u<6+$tXDT4q9=dPg*KHU~q`jJ+i;&=ebL=qx35 zE+K<>q+_Kfgl#UX@a{UgHC71yrX0`2GGCtymmaI%S>dQ%nbx;GTobG~kk_@&NCMZr zEc2De3)jAQB*PFuJti9jWP_AeZ3ei7U)$bHNX?=jgtyu{YIjgw!|F7+&lE(_y!s;` ztACOl3QgOJ|IPvOw7rF^*MImO(@8Cuf@G(l6Nq;9{GcPXFjwWk@%gfNh5D@;0t&a7 zsTMm!sZciZszBNO?}KG7;&S?dG4}*RV)%Voh4w6DU65L#8^(Z)T+_S0EQu)>* z?EI7upoe9kVJ8!!=@slQB68W`{BW&0hLR|y&o8?W6??d!$ecacsusU%b=C)!I?|$T zr3{UI0+;Ku$(+8lDeXlLztB2O=JmjZGzq@7a9I~=pd__vQij_;HFj=PtLrv-bnluy z=gSVU+jXdK>R2dWQ{O1Im!7f?Qq^!haNQ?LWr*(AF17T(NKwfcFs_wzMc&7ujD z3RwYyEuC;~?Or;Ld^i1={G$mRwPa>8%78su#MoyUt%+dE8>p`sAw+v7U=Hp5&@Upz zWf`Nd7tT63&vo$LBNe#>f?!_VHNi+l{AoYfA@g4XhNBmY;KwJ5y+A*)4+x-Vhc3(sAUJr_q3zY_~ zRSB^nI0oTBPPz$;wj%f@4dC_74;#~nH@f%EMx>OK+3HrfqwTIeH|H%XGppy`ICm9+ zf8p*T*s;O8U*Y+KG~f27Wmm$#&-p>&*7Xh*z+_>gP=56_x_!g`z8nVWx8Uz(L=E3n zCxx!|wkNH=@6#+3{LrtE7M6IrQ3hQI58p9S>4bk76xp!mgJ_IWWoIza(XDVxV#ut* z&v>5(mpOgg(Cx2`5b~q)6|7IIwJ+%|hyVDY2L3xI(s&&#{+L<)$q{1X zE1NW^Q{q81^}F!Nb$P)@QI@4vq|izB?%hz@h#(|CG4Z+R^`qiR9m2rK?|)XK`+Y63 zlI`j2j3goguc*6+UB+19d1eD<*Kj6G1&tm2^g2i=KcuTMZT zmo=rdyz`&^m4y)AME^Sb$#k6G4CDVtI0U<>89Sp$YhEhYCF`pxZPzPDdo+QQ5&;eP zawq?LoI92f=P=2tx=y6kPpJYEcefFPqENz)Ig>bVKT99GvXD_|s(HFyScVRR4kmy{ zTs2Kf%mO^*{o&KwFPYjO1MW8AhDd+$ku0g;awBN4Vb~G-ux79!r*W0E9WmIiVA|e& zF8Ni-Uo<1-BAM>Y60-wBW4(35uGWSzavbErhT6e;v)z)iSY{EuRM*7uK0eumy^`xo z_KifV&BIiuea92u^I_1ZCm7JnS!u{HC2~!p;43KPydQVYF;E~7K1@yg8ww~uec1l_ zcxWrZt{7tL@HF)|m@aL<`T<5L?~ro+^Vj6i-!e91o=8%Gb zg~>y2p;ruR^QIxe(Ch@XVm3%V1fsTtsW=ve*2fzvQ;mfy$k+mT1eB|W>ig^r$!sMU#knfau$mHpU5y#Jg3x}#fks^lzVwF|9 zU!w*e%iV`CT=5Xe;iOF}Z7Lej@kcJ_O&?O}2`O|k{~|Kempf1ljgM@ z;q4RkczdnTf+DK+wLUatLXthJ3IkE*;fO;hr2MmaR9c?UtK9A|MVIrQ>z*lx1~wQJ zz?qJ0w4!cUtDvIpaq-lUYkw!~^6#XzW>jVu8Zt`}(^0hf2NB8LzRu@N0GTjJVg+6L*K$dWfF_i{j{t?^6)Nu=Ub4TdAh45_ zXZVnJ!c>61L!J!b%W|R^#Swkh8D)4)fPXQSMJdyQR)ww?N#3iz0H=+j#itbv`p&QG zx%-JHpyM-AWBYcJbi>o%E$!%soV0KGmAzY#51M`SzOHr%QU`@|N7IU0>tv8&((CWeW*<;S9# zm3(XQTf^OMIwSviDqG%*As{^NkMvIVK@PVSLRuP=j%!eYL_il3`>!%KdVX^pT zG&}%(D6v%>FA25jH@2qXO3H;XZtGI`_&eS$M2Ct4-;PovAe+R^w?>J}*{4D|tp~Hz z@Cnn1tYIB)5oKgqg1{R=w%5spPl{5!D14^h*!M(^Owi+U6CJM2Us%Lq?@;+;Xy;7J zZi{&U`P62)qYhFO3mvYLHQEr#$50bJ!cKsOo$HFr@Mk+(B3g^&)a4)($s!__x_HKb z1K((`+40O&8nWa!=@dtQ{z5{F+INVh)jdsS_y?wCD|yFRISW%|gB@%1@HD8B=cAPg zxV7Wx6Y6h}Wf;v91~BQvxhzu#wwfgC!yg%4D>M+ZKBGzsN~GitStw92he@^4pl$>6 zYMM!1jht`$lH8QGV#a%szW>;h6dSv3ivObFsEHX*J*pr_wF%cnG)mG9{uUW^Ytgb2 z(i|0WjB$k%owfO$FjGJeN4A&|9QP)<$sBoGQcuCrCef^H+B6A*+iv{vLbPj$7N;of z^N`~EJ> zhZslA!1SgG*FZuIZ^Ak7Ubo@k&m=u8eS~?6kPc=z63egNzAyp0l%u9Jb>>1Ai_p!V zU7GKsIqmtKQ{$SM5PRY>6f^YI_4Fc7DJ zg4D~S!~MPd0~wSTCjNVqap0 z$^R_L3W7jr|Enu;R!Es5Imy3&w}YN7_|Jzi7X*_FAM&8c1nnaPVN~KF`FAY`fw2A) z3Q87+=qOW@{JWZfK$!mvU?>JjRu;wycmo2NJD7o;9UNWQ%|5!gI@m!@hE)d zpU*G)|JBe<3bH1|$nxJVdQsZZXTP&N-^lvkX2VKD#+1aNVdWuM%A~k(@Gre#K0kS3 LL7>+PFaP}?vZTi` delta 13647 zcmZ8|1ymf{wk_`NZUF+p-3czCad)=_hsL3TyL*t}?j*Pbhv4q+?hq_|l5_7n|Gn%I2cPZ^M(Ga#{*7an6@Fi9ZAC_zK zNCUa@W8p-V&13NvxnH>FsnLLzFO?3g^-mqkUUAp{P z+1uf56RT-;A$43h>$LYRp{|x!r5(?uN0Hfvf2r`v zD5_eNe_|`g4=T0yu#f12)b$k{R(aZYQ2MGr5t8{OPJJ?KvHPAr562VG`^0kO6*=ZV zmVXRm>?(E+Ta`UzVMP&OvHTwMNO>|aY63=2>kwyYI*OX>Ffjm_O!Q{@Mf;Kq6N^tf zgDh91e+?N=nm099$5M7c399tp0F#~UN5w-|PbxU6*kRcALX!nch9Zh=Zm|=>)yug% zy|7PFK4S3QV(+qtoDMD+vipDa>ay*GMd zix5vyAUJadQTsBcIeM>s9kCA0qK51mMlV zVv-V0&-yB#H6ijd#iYo`j4vXB>rCacK}=#HCrB$+Iz^EP2~Wi!Si>ENWw26KGxuQX zx+C#k92(p$-8HUc=GC?F@x6cF6x0iYgoPjrDJ^WKEyF+8g@>U7;?ku4dg;0>jiWu% z>!@@CJ@Ao`P9*_JRzqpZs)?cQouu{+1MZ|qBtQJIfR#~LA&ZBg1G%fE^W1o>)zclG zPxYxxB~!DD8PeBt@g7Y^fLp3nS&J!5Lp-@mRcD)@wzebk6FG-Ovmgy34`QYmS0vOK zI@QD@-IN=|AMSt|<@z&jXb6Z3cnApeS4VKSVR5r}`eb5n|B2b%)}~xtS8byqxGn1LYs`Q&r_s%ZlWK`imX)#SF#g74kfM3>+VhkGccWwTYS!97;Yv`mF zHVyB-bO8mp{%3oGuu6>^VN2XNP}h)S#CWhFTGvyLI$@3#^9*ec6BBBm(M4TB7e@(v?8`7zI0?p54ll$& zdTwn0tj+o^O1WP~a#tB_ptQB^bwwP9j>Hd;GZ`0p*9R%QpXcwJ{ldH5`ZLF9m|GZ2 zWeG7Vc>XZLAVvVn>O9Hw*2E%&tVT5jlLdhk%e_)O*sIZxsM{Zg{V!7$i$G9lpxU}b+k`RHMR3XB<+xT zqPe|U)Z-35F@Lqxr_P(~^%Pi{n7x7Wh2OUh+NaF7vM;QJc}Hf)J()LWIQBmtKaiAU ztdNy7KKV8^3#!~v>94Grn^HbcF6na*^Uua|?VKMQ{`IVcyANn}(@2a^Xy1<*fnpp8 zh|&ZI2m*+N968(s2RT?EKhw~DNhY~>4S)WOVqd7fSw&!;QDnfJ{TNC1phZC1xb&CFSnrp8O2(J-uB+i%B1;(bRC~ zTfQcb>7Q#zNeQ{x+Vuc8&bQea{FH7#z8xzwy&rp?8|pstt@Gryy?%1xYi$0aCtOv} z;-kB9B3#&aI+Swa>D-_T0IRJewsFt9)?mgxzl5LmHlkX-dt_Z z-pSPMul^FNjys^$x8>=fcBxAEebU(Doy|9$JKwdG7vjVh^4abT7or1?men(~7MA{q z+RK7Wj`z<;Lq|h1%_Ti!?@K}4&CB+_HVmKlR07`f6xb|J6Js+M~;-P(89 zliNMKw5J14tb`T;Jl*$Zzb!a3(btA6g_qk1ikg(TERchN1Hb@xuKD}q8R*L&U8 z9d}hLr}qsvrMY~>0xwUx-y@O>Ka}4djsbYEN)z9%uzGn9ujkGi?*cD#Ff zuQ6I(vr-P@xmf}*`oC@J+X+CG{X47JzLhj5Q;j={Hhcv7px^-QxnP>9so%}RqDZD54Ze?4C&n?fVmQ{kE6Iu2*!0M#Ybq(rGAJ2#Y zo+_uhj-;V2$Clr>j+TUUUaQ5+7jx>p=<0*%zV{!JSH(+yy8}0;m(ookRU5yoNO$CB zdD+(-hob$?8tbAjdp~_d@#)X_6zSdH1~%KFFQ;d}W%`OU)YHI-Gc?`6h&wdgupPd$ z*nksGgUwRmSM=oQYg>0!=A~_7KcCVFggu`>m`on~07!uPcfqbkY=ThB%L&gX*>Iuk zdbP(fkl>KOqtX4^RRYdqzg}AKyy$7tI}`MKGo~HKW5L*YalG#Z{HGd^FDgh)I7sva z3>gXTF34c0}p9uo=A~2<6xm(j25l`-Hez%!GAGF67yN6#XHc(CzT3*jNkRL0T6YF0C zwMEA=iRJiuAqOo*3~Ad5$9ZWX5|g#BSAuYx58MSGJzQ^+GP z&}s&}Cy9#nSwt^Cg^at3T_)+xL==sPsff(8sURm~fY)(bx^ z&1JJ%mBqdt@>A-}=8aF*1{k)a4w&RZr*?hw-+%<(xmTNcX3I+&*fD_Jtp_y#zY0Aq z90JZPjPg^fuIy;2vX73~Dan(Qs;9{_O@3Dr+mwg(Y~Rb7(BOhEFVSh1!3uN0x%+%C z*XCRIA8A|-5W2R(3Xu#M!r8%h>_ZWvw(R0aLwtS& zSXDqM0#rZ~a(;bL!vxCwiD zXj#GKnf$ue+5#l$k!IwT^1%mm_Yue4%5<%+bh6g!z9TR1DG6$4@5jd+ULF>|Ww{U4=4 zy%pjj?8|>u+7HAc+TxA2;#!thn{_y5HRi?4LF{uHP0ZiU|LbQN*W+dc*k67C(~xgT zzGMeK<|>%!zN%LYy8uJK|5Y$Q&a2?el;~@mZ8jww{(~IZd!8Sdzy&V$mu!_I$0+fH zFz+MXbd)LONql}U$z>h?&gJjo4au=Z|CpR5b$4nc3@vaH`g!X$Ug+tblTu=*#nC0? z$RLy1qlVl4#uik_mjr&sC$=g>;Xl1PQH(!>5NC-neD>qm+atjqc?v{LUd~RD)geY* zJ6m>~FIGXJni5w2{HG?lMNW2=)-*GpD z^eeVRV$YECQ&^~=NUqA#3>?`l#7_h5G!*^fPhe^hcmEXssJ*A6kz4JoxLr(eI6{oy zs}+&CMw)b?rFJn?vmM}5yU#<*04bxdhBS-aO3|rh{25H<1V@+DTB7QOq=JG23n+L> zv4s!P86AGc9;H+2_EI({E(Zl~%o}$(l)ptOy3N>-q3QR|5D<`gRRiwQUn)H}({pWIq$DBT;8{>;KkZ&9RI`)X|JKQN=KSpBK*N# zAxxjI4+x5-qqK1q;A|!U3KC>~{5jZD>|F`c?teMV$;kQ?Y2t*M%1;;Kj5>WzH>4+? zj-nbpz@*4 z*=dqDhy^R;%NFt*Nw4wDf%jAD&tb7wzQYC>U)c^}kFY2!yrL@jWAW>1`mT#UxTZ_R zA!lW;3W~0nMhdA5E*WP0!%Ag0!&|DlA6lcvQHdFe{~=I2(v%%Q{=*6f^0Wi`r%O}4 zy+yPA5#s`ksj$WxD6k$sd*8sIYOF~%oy(+ngd@o6H5+9*SiNQ=QbHZ8S3}1vfkg^J zw*l8W3LnYP*dKBlGyVzQ(sE3Fb%u|OD~=#L$b>QJ>%4}jk{u3lKKsd%SNg;0D zCR>U_;f=B@b?YkC#`*UPv9VY44;9~CD9->o8vod7H$C zP4VcvFc&+p`w^}B#|tqC8ViD19SxK&rNUqj120_Qu{~7xy#3=%3Egu)7f7R+(wGeN zgl)e8og#js3zZ~v-UDZd{cn?~3O zhlG5*R3xV!4i~+J={P7*ObQy=W~UrU#pxdxl=ReMRqle4Qr?5ui%9!) zf2T$_9q#Y-^yxvyt@jN}F~9~o{{<7%LU(wbePB0`kf8EM+tiZ@eqr$_tYOUu=y3?} z&;8VQV$I^vVxEq(ML)h%v{IfPX@Jg1xR=6mI_&ojutyj1$6m|jOf8f1r(Q+o#QzpI6^3=a*As>wBryb`4k8@JC2W9_w zH4fH+&nPbQPgFE#$lWKT~tOLs^b@7OlxtqLFy8NGr6(kFqS~^w@tK=pw zq(F3E9L08@r(r7uSZFpiGGwg4+iSvITjhu<$^XreVb{!FL{sM7IJC-cn@nqHy=N6M zJLZhRh*>qb=+9BCg3O4X(piH4#7;4)w!y4E&IQ&W+36^EWJJ5{ItD^_qYPH03XBS* z1vM6>MLyxU_5!V_m52Ht;8pMUH z5zVCbd{T~Onfen4{_?|O3=)jxgXWY;G+EON|1mPgNv{)Y091vVFhtc7-vkf3r3!EF zBaHDp67#j)(&HHH6T8AdTF_ysPVx$k&&v3las8><7G588i4~mf&|)jqDepwvf#($M zC}6gO=<#kWS<4{7{5h6$pY$lPy^`vSXM*fqs_ zDji8}R`nlOmudfog~o8VxBHB3N5V<5z{s1kfJsnVYehBN_v-OQFaMmh{l^+y?9O5# zO9B;bZfv_#2I|*P(io2ZrtKsPptrsIY-H8O*I6vj#QKe>c5ccd0TZPF>%aJbOk){E zQL?Rf!jaeQUWL~yDB_<+5v6QD`sJWfi(}Ywr`fP^zDk!C=#KqaTjCr{DFo{gS@w%{ zlK3ob(wzgPLf|dI_Y&A(pT-Bg&E3q)NJXMW83}O)NnRr&ZU6|a{^88jfqmz_N})Mg z=})67S9Ao4ymNWpxIl8I(LeL(R#jG&-cfmL*uWC9I<+fzA6dox^VX^3`9bT&ceyQV z+6n$ws{onX*i8o+Pg%%F`-7&3*>mj@=@F1vS9$omp3fIJIk{aL8FB?)f=Yt zz^AMGJ2MjW?mbg10WVryeCxngS9m_g0+YchaG>w+)CSK1Af)Brp z-7%cXxFfCM5lX_xrH*XYo5St2#ME@n0LCBz21@MQ4V6m$Bw49s4<)P?-=Zlnc9*Ie z2HYiPuvP`HIftklq8u19j**t=sSI^&IxTrz+5s_cNq;t%Y7nAkoo$YV4~Gwt)LXkq zEM5}jO4u`1X^(DWEJV?PjP~WXMSh?veWKO@ckD{n)yegv-5Sj|>Xp$K%E%CXVDNTX z@CWiw;42LaqxNrDyjJX4CSzKCr|PXCglAO$gVs4xuZq(r>)Ec~Hj{@T#vMCj{RzHq zi&vgsp8zXPJty}r3yo;AGK8qM&grW-0is>l>xjC5W_~x25Od)C7h*%B3^WRy2tux; z4GiAng~VRRz}?S|(_b?_jzS(J1H(sG96;9GInM#(Lin-Cvp$J1NBgRk7HcDE*D}Zv zC7FezkWP&TWfe`VyMPJ~;mHllE*W19mv6Tp+VD_5&_8?S;KqyB9SUWIo+*BYiH9>AXIyI6+-KN z+SsgZ!$km-7IT)-$Q@z2CkFL(o=Gc))V>5Go!v&y#r z+T=Hn;V2L>M5=GI>$V}>kR^9bn188lI$bOEdXnvcJ;xFpME%By{_bK+jV&hZ%7NsvCuxE` zvk;s#JzNjDJW?+o_#AGVUOZZV;78OZgR*W{Z%aj@X0s##u78xbCH}GUIwa8idn~js zN^Hj+?7*{j&#R7$Rz@5hrT(eyUf5%Cebv{)iyODHyq*HM<1LvE}y04OL zD?a)G!KaViW@cDq1!Qq>W7!3|G~ z2PzFB1AqjnWS;`ESamKhhYPG*YAvtM7fSELrtnjohJ)}3d4De1aajBo%dY=)o>T7{ zM(AuV;b=+WYGJwP<5-rUZq3{1<2P+~j6tL2N(zB!zyJ+|B$nQLqD|oTZZ6fQum&IaAZj;Oe$z*^8P&wuAf)@B>vjXdcc@aL3T=*f2DI z@c#@m0}gGAh16Vjxt~vn&Db|Ea|u>8v=1@moD-4uHfyI2^zMC^+yvy&eNh|WCBe*8 z+~&$6I$4Bu?5NvE+_5}w8lhlp8)obp1Xc@oP&@D*WXT`0|~kd(Cf}Xx68S7;xlI^rxlkF^~8tHy)II3l(1*s;IKh zZOAjE)-4*&R&Qf`E*Mg0K1A|pvA>f)hBl6ck0yAs!sn_dXm8o=5qgm95_F@^TxCBx zpGnhUlPztO&v+7-j#KJ0pN7AP;G#Pazm5Gdr(>(hzgypjNY^C(R`nV48&9fZBYa9s zHc%h&S|s0LDc&w^+wswCIXRxG;)>dXE*GDH`CO*dWb_TEf{CB(Eyp+AajL;JyGRqm z)(*vAuQl1K$s_-q_>NrJGLO((c?3hkRKO62^nG>70g9z?)ZCN}DL>tNwB|Z!7maNq z+1?I+619bU|IWwwb1SR{7K(36=ru6)xxk`=H=IgR1fE8hSdxtvo)z?0Z^WwZX1|s9 zZ)WBFJ#|#F6l{!<0o$AtdZdv4j@MR-Fd(BW%Q_tMlcqQe-+>#Uu?89@a?*Z4&eCh zvv8jEPW7a}DlE=0X<(DUgeZVrC1|O0(cksmN;nuRLzSuw&rfJfLd}}`E&oQY4h`{y zjBklr+V)rhIog~bpVW3Q^cS|{PF^0xt$Mu-o%$sK&fy1^lFr8{VXtw^nY^f=cDk+o zH?!{(Kv(XriX1-Zs_fvpxXsNAQQ(%3A37|E%){aK#Se{xk#&{TyXJ%8{9a9oR{N?S z2O+WnxZuQnmIaK7(oP{d18+&}Q4$1a9WOA4PRB_ByC!9&up3^!^J#A=U8lYN{3@mW zPN)6jy$(QpecO`xXIQ#}oDupyf5KqNaAmRG5G_mF7C=oiLW)^oY2yK^GLSw&mcd3& zL)|jY7u_leMm!0KaT-)~)+6GU#l)Je{hAa}C1@?NJ-;506@3J8Ri@EX?7C?g)|3{5pq-XY z7umEx<1W+JVaix6h(G?L<64>z@L1-xWIXGLd!fbPxVC_>bnpD@O3`hWA5Po+Oh9gL za?MMKm|3#RHd{64d? zGjvQa`!>*{*9fFq*QD;F#K6u6ROiH%KueXE-mi(VpeUwf5v~=4yVz;J1m6(YiV|=) z9=w#5W@p?XPT2+g_IiKDwY*%r2e~UYXY_Jns&3QOeK?+{wonG2tAJHenwJw6AQ3F3 z`@HF|^tR1~#*5%Y-wP=aaJ-ZZ=0&+>oFy_uD3rF&G}pK2i2)H|vK1|S>1WUN*bwdW ze0(+_z5jYn8^j#FNwG$iQIMZley#A#6||=V=e4ZDdV!R;J|AhR(9L5$5IGxdi(4%b zC|8*;pW4k+VA?hxyHMj`<>nO29K8qM(w8ZC&%;cKyew+3dzwpvj0E*Vs>v#C~3G z7#}&(*(+6zi+jwO+&NQ+{F1POXRUhD`LaNXQ6dmGJug$CD27#m9uqIbPaY&?ScF2^ zw8H2oa@A+RiPEb>C&5IqV?R=|sH>yAzfcKV$NF)8Z%&OMOpuDP8?xG-3NOsTLX{#| zF!wWgpBt@?SlToQ_>f|Xu9YR9GYb15vfaXUFw2U+>7B`b-~lRpX_IApFb+wN-Kji8`$NO8sY&weH)+OVNB{LuU+cN z%K_v#0B~o+P)d>H-k6oS%w9^%Ijyilne` zmtMm0jGeSHX!u62<*ej`wM-M^#zzk&4lO+PnLc7WdC9Z$`|YU{4Gr88Q!1sBNcJH~ zz_FM$Mn2`6%d;4ML3A7yi#XI3mBmdB=Bt+&6daa$Dy5%TvK}v@Sk0D|-NPC5=dNeCXIPaz&YGya4A381xaBBi+r|pd9J~~(XS>L1_T<;8?-;(a z5oH5{nfES=@-A(0sUE10+K6YHyfPp(G)}0!eUWu}sTtyq-#fd@wO`4z7Th`DDRp9p zam|>gWZj@iiUzqymn!U ze2p5l-1OO*^N<6Y3X)B$AimzU6n5!WXmneAQaI*rI;$##Dt@EuJGcGWRn=KLSXX;_ z@UX3Qu7>jnYFox8nv!6T&2fI5D5v{o>;M;x=$Kg{6^VcP;0Cbiw5FRI@_Mk_W2=V^M(2>2k+~V_l_+ z2`RoHhQ-)%{*?ox-?>ngfG0@>=-cN>;rywwyr(#Qn{^gLH;M#Ts6(%-K3M5FvbaSs z!-^M)Ej{!5jx2*KwGUstDiYrP>s1!ZsW54}{^e#%JK7054G*upcMH-{vyVaHT04LK zRDO(lOQmbh&CvD8-9gc#AOeo}8(xI}Q*5Fy#I_)vIg-?a)fI9Osg7lxlV zco|$jj%ptH9{Jd~B8S)LajLHro*^}i9Cn0qs^85S$7tj%Xx98TI6M61I{6{N0{nR2 zgt~$;!!G1HSYv8=VR|RpTB51H-%Y#vd7jFK`{uQR5O*%QXLv}-_1c8KS)-A%Y(5`*EdAx1I`nQk8rjAPc;(D(X6dZ1 zd(=MJTFQ?68z_Om_4GJ-z(dS*bWm<*MWw4abvJOiPzB4QFktQcnRFo%1whu(dG&lh8W69OL5nvZ}^? zj3&SIw#>omjRY@+!uB1p>gD{{v9)|q&MXzEQ6xh(l3j;2P+fa-nJog$W^p#?#-eoG z^y!l2SD0uBR3>3^yg%L|rOvx*qeL;OFcimJUen+(kOFS4`t?|jSGxE)*T8uGn?U+f zy+WAUc$pr#E~RLIRMMP2lEK;B##;If5Xd|VvHL|>&31Au2`1A&&p(#LQNuqh5+A{m z*BM2;o}K&fwOx<=kej((NO+j{fe3!lYST)dq@Ykl5>92eUB6aIueyTD zFW;G&M}#*i!`X*KI6B_`$(27EhiTp+c7}e+%mc~#Ic-D&gW8?ATW_v;$g^5Lc4Vf= z7z7l{A?&@|N=-pU2Bx=Dnc zd};>zxRY3b;+Ubkk2Ip(hbqm?!JfkCrUR;Qvv?K>`eq4*Nf#r6gB2x*`9 zd_b-@mbO3ym?r3>=5Ffw70@<8I6L?Tmf1aj3wL^-3dWTQ2FmLoSGF^To_8A4*Qh;G zyl)pO%osu|47vP+zGLg1dK3?d{lwEvwU{N@~M6E!G#yL$Cj~ErCNH7ZNK-B zyu z{D$w!!1Dd%u|sz+{u*R7Vwx#zwA?B0>1SgOtO-Q=-cXx%`5EZ^A4+~uCya%dy?_C{ z)Iu4$r}?H@fdIE}k?JzNZn!AP3cPM~U%hP}_kroJCmg^g%kWXXTg9yb>+_`=5-o~@ zX1ZYSR2O;W=B({gR0GXGNZwr4b^iVq8b++25c-ecM#~)`5AS!gbTP6ZF(>kPNzAv5 zl*e|r3sJ4^Yp_H_hn&COQx#BV;=2r5AWJ1BjuG*Ip{j@ zdvZu1VdB&4ZjZh-_-FFSRpO=vx;F#wXtWQ+`@7=5jg@*wOPb5dXeJz2t?|)Dx8cHh z39R^dKe>FRK1GWf(Fq-N*Q`$09%Xk}OzAs8u3r+?1I)F>c0QQ51^AOv)(Cjq$d>1! zW4vx080aeSp9wYY^qA!0d^cisY^8EPPnT~BEIS*jOLhM|x`QLR^vGIs;-zTB`gz1k zP`m0lvH9{P*}%>Fz{3j#hOyTNVb&_hMecrOe?Os$_0e_Q2$mcjcEVPqLpne@4Ov(? zJW2yE*^H6F92>#cI#gO|Wpegs54B`O1Rm!@D$P~IEVt!C*@y8BoO1OEx{$z`!H4b= zpq|n=kwv(@fCwUCoq9jL$f=xkZZ{(1D~uW_C{q+&EP#Gab@ zJcOaR`N^dI@tzZsY<%o!I2q>wz6)`STup8bW+xivy_#ZQTY>)kLy{OTJezH}d<9iv z;tIy}I7UpO=(o(lS`9n&9qp^TY%lIH?B}&uo`$+7X9X6MY3!#<ubM<5h`{ugeX{uM^*YUxx`9AIOOR@1}--e+MPZd=P}JO2Cq1 zBKhBa+5ci7AP!Le)1{3|^1oL#{(n$Ei;6H*%M4bB2cCL326c}2|qy?B!B-LyaJYAKX3m9zK(hX628gv{ge7Hs z1QRGE@e;@t-a#pdBv8l_CxGQJNdAo)5D=LE>wHhqgj>)Xl7F250s`ZI0j|Uoxa0+y sen>$;nAw{uIoUfnvzUUNUF>cD6cd!>VB!A2F<#%?Fc1*mWd9ufKc~2$mjD0& From 193579e579888db25219475966dc8ccda084eaa4 Mon Sep 17 00:00:00 2001 From: ManikaDhiman Date: Thu, 17 Dec 2020 14:50:01 -0800 Subject: [PATCH 153/486] Added icm policies --- .../mdm/policy-csp-admx-icm.md | 1557 +++++++++++++++++ 1 file changed, 1557 insertions(+) create mode 100644 windows/client-management/mdm/policy-csp-admx-icm.md diff --git a/windows/client-management/mdm/policy-csp-admx-icm.md b/windows/client-management/mdm/policy-csp-admx-icm.md new file mode 100644 index 0000000000..82dfc6c182 --- /dev/null +++ b/windows/client-management/mdm/policy-csp-admx-icm.md @@ -0,0 +1,1557 @@ +--- +title: Policy CSP - ADMX_ICM +description: Policy CSP - ADMX_ICM +ms.author: dansimp +ms.localizationpriority: medium +ms.topic: article +ms.prod: w10 +ms.technology: windows +author: manikadhiman +ms.date: 12/17/2020 +ms.reviewer: +manager: dansimp +--- + +# Policy CSP - ADMX_ICM +> [!WARNING] +> Some information relates to prereleased products, which may be substantially modified before it's commercially released. Microsoft makes no warranties, expressed or implied, concerning the information provided here. + +
    + + +## ADMX_ICM policies + +
    +
    + ADMX_ICM/CEIPEnable +
    +
    + ADMX_ICM/CertMgr_DisableAutoRootUpdates +
    +
    + ADMX_ICM/DisableHTTPPrinting_1 +
    +
    + ADMX_ICM/DisableWebPnPDownload_1 +
    +
    + ADMX_ICM/DriverSearchPlaces_DontSearchWindowsUpdate +
    +
    + ADMX_ICM/EventViewer_DisableLinks +
    +
    + ADMX_ICM/HSS_HeadlinesPolicy +
    +
    + ADMX_ICM/HSS_KBSearchPolicy +
    +
    + ADMX_ICM/InternetManagement_RestrictCommunication_1 +
    +
    + ADMX_ICM/InternetManagement_RestrictCommunication_2 +
    +
    + ADMX_ICM/NC_ExitOnISP +
    +
    + ADMX_ICM/NC_NoRegistration +
    +
    + ADMX_ICM/PCH_DoNotReport +
    +
    + ADMX_ICM/RemoveWindowsUpdate_ICM +
    +
    + ADMX_ICM/SearchCompanion_DisableFileUpdates +
    +
    + ADMX_ICM/ShellNoUseInternetOpenWith_1 +
    +
    + ADMX_ICM/ShellNoUseInternetOpenWith_2 +
    +
    + ADMX_ICM/ShellNoUseStoreOpenWith_1 +
    +
    + ADMX_ICM/ShellNoUseStoreOpenWith_2 +
    +
    + ADMX_ICM/ShellPreventWPWDownload_1 +
    +
    + ADMX_ICM/ShellRemoveOrderPrints_1 +
    +
    + ADMX_ICM/ShellRemoveOrderPrints_2 +
    +
    + ADMX_ICM/ShellRemovePublishToWeb_1 +
    +
    + ADMX_ICM/ShellRemovePublishToWeb_2 +
    +
    + ADMX_ICM/WinMSG_NoInstrumentation_1 +
    +
    + ADMX_ICM/WinMSG_NoInstrumentation_2 +
    +
    + + +
    + + +**ADMX_ICM/CEIPEnable** + + + + + + + + + + + + + + + + + + + + + + + + + + + +
    Windows EditionSupported?
    Homecross mark
    Procross mark
    Businesscross mark
    Enterprisecheck mark
    Educationcross mark
    + + +
    + + +[Scope](./policy-configuration-service-provider.md#policy-scope): + +> [!div class = "checklist"] +> * Device + +
    + + + +Available in the latest Windows 10 Insider Preview Build. This policy setting turns off the Windows Customer Experience Improvement Program. The Windows Customer Experience Improvement Program collects information about your hardware configuration and how you use our software and services to identify trends and usage patterns. Microsoft will not collect your name, address, or any other personally identifiable information. There are no surveys to complete, no salesperson will call, and you can continue working without interruption. It is simple and user-friendly. + +If you enable this policy setting, all users are opted out of the Windows Customer Experience Improvement Program. + +If you disable this policy setting, all users are opted into the Windows Customer Experience Improvement Program. + +If you do not configure this policy setting, the administrator can use the Problem Reports and Solutions component in Control Panel to enable Windows Customer Experience Improvement Program for all users. + + +> [!TIP] +> This is an ADMX-backed policy and requires a special SyncML format to enable or disable. For details, see [Understanding ADMX-backed policies](./understanding-admx-backed-policies.md). +> +> You must specify the data type in the SyncML as <Format>chr</Format>. For an example SyncML, refer to [Enabling a policy](./understanding-admx-backed-policies.md#enabling-a-policy). +> +> The payload of the SyncML must be XML-encoded; for this XML encoding, there are a variety of online encoders that you can use. To avoid encoding the payload, you can use CDATA if your MDM supports it. For more information, see [CDATA Sections](http://www.w3.org/TR/REC-xml/#sec-cdata-sect). + + +ADMX Info: +- GP English name: *Turn off Windows Customer Experience Improvement Program* +- GP name: *CEIPEnable* +- GP path: *System\Internet Communication Management\Internet Communication settings* +- GP ADMX file name: *ICM.admx* + + + +
    + + +**ADMX_ICM/CertMgr_DisableAutoRootUpdates** + + + + + + + + + + + + + + + + + + + + + + + + + + + +
    Windows EditionSupported?
    Homecross mark
    Procross mark
    Businesscross mark
    Enterprisecheck mark
    Educationcross mark
    + + +
    + + +[Scope](./policy-configuration-service-provider.md#policy-scope): + +> [!div class = "checklist"] +> * Device + +
    + + + +Available in the latest Windows 10 Insider Preview Build. This policy setting specifies whether to automatically update root certificates using the Windows Update website. + +Typically, a certificate is used when you use a secure website or when you send and receive secure email. Anyone can issue certificates, but to have transactions that are as secure as possible, certificates must be issued by a trusted certificate authority (CA). Microsoft has included a list in Windows XP and other products of companies and organizations that it considers trusted authorities. + +If you enable this policy setting, when you are presented with a certificate issued by an untrusted root authority, your computer will not contact the Windows Update website to see if Microsoft has added the CA to its list of trusted authorities. + +If you disable or do not configure this policy setting, your computer will contact the Windows Update website. + + +> [!TIP] +> This is an ADMX-backed policy and requires a special SyncML format to enable or disable. For details, see [Understanding ADMX-backed policies](./understanding-admx-backed-policies.md). +> +> You must specify the data type in the SyncML as <Format>chr</Format>. For an example SyncML, refer to [Enabling a policy](./understanding-admx-backed-policies.md#enabling-a-policy). +> +> The payload of the SyncML must be XML-encoded; for this XML encoding, there are a variety of online encoders that you can use. To avoid encoding the payload, you can use CDATA if your MDM supports it. For more information, see [CDATA Sections](http://www.w3.org/TR/REC-xml/#sec-cdata-sect). + + +ADMX Info: +- GP English name: *Turn off Automatic Root Certificates Update* +- GP name: *CertMgr_DisableAutoRootUpdates* +- GP path: *System\Internet Communication Management\Internet Communication settings* +- GP ADMX file name: *ICM.admx* + + + +
    + + +**ADMX_ICM/DisableHTTPPrinting_1** + + + + + + + + + + + + + + + + + + + + + + + + + + + +
    Windows EditionSupported?
    Homecross mark
    Procross mark
    Businesscross mark
    Enterprisecheck mark
    Educationcross mark
    + + +
    + + +[Scope](./policy-configuration-service-provider.md#policy-scope): + +> [!div class = "checklist"] +> * User + +
    + + + +Available in the latest Windows 10 Insider Preview Build. This policy setting specifies whether to allow printing over HTTP from this client. + +Printing over HTTP allows a client to print to printers on the intranet as well as the Internet. + +> [!NOTE] +> This policy setting affects the client side of Internet printing only. It does not prevent this computer from acting as an Internet Printing server and making its shared printers available via HTTP. + +If you enable this policy setting, it prevents this client from printing to Internet printers over HTTP. + +If you disable or do not configure this policy setting, users can choose to print to Internet printers over HTTP. Also, see the "Web-based printing" policy setting in Computer Configuration/Administrative Templates/Printers. + + +> [!TIP] +> This is an ADMX-backed policy and requires a special SyncML format to enable or disable. For details, see [Understanding ADMX-backed policies](./understanding-admx-backed-policies.md). +> +> You must specify the data type in the SyncML as <Format>chr</Format>. For an example SyncML, refer to [Enabling a policy](./understanding-admx-backed-policies.md#enabling-a-policy). +> +> The payload of the SyncML must be XML-encoded; for this XML encoding, there are a variety of online encoders that you can use. To avoid encoding the payload, you can use CDATA if your MDM supports it. For more information, see [CDATA Sections](http://www.w3.org/TR/REC-xml/#sec-cdata-sect). + + +ADMX Info: +- GP English name: *Turn off printing over HTTP* +- GP name: *DisableHTTPPrinting_1* +- GP path: *System\Internet Communication Management\Internet Communication settings* +- GP ADMX file name: *ICM.admx* + + + +
    + + +**ADMX_ICM/DisableWebPnPDownload_1** + + + + + + + + + + + + + + + + + + + + + + + + + + + +
    Windows EditionSupported?
    Homecross mark
    Procross mark
    Businesscross mark
    Enterprisecheck mark
    Educationcross mark
    + + +
    + + +[Scope](./policy-configuration-service-provider.md#policy-scope): + +> [!div class = "checklist"] +> * User + +
    + + + +Available in the latest Windows 10 Insider Preview Build. This policy setting specifies whether to allow this client to download print driver packages over HTTP. + +To set up HTTP printing, non-inbox drivers need to be downloaded over HTTP. + +> [!NOTE] +> This policy setting does not prevent the client from printing to printers on the Intranet or the Internet over HTTP. + +It only prohibits downloading drivers that are not already installed locally. + +If you enable this policy setting, print drivers cannot be downloaded over HTTP. + +If you disable or do not configure this policy setting, users can download print drivers over HTTP. + + +> [!TIP] +> This is an ADMX-backed policy and requires a special SyncML format to enable or disable. For details, see [Understanding ADMX-backed policies](./understanding-admx-backed-policies.md). +> +> You must specify the data type in the SyncML as <Format>chr</Format>. For an example SyncML, refer to [Enabling a policy](./understanding-admx-backed-policies.md#enabling-a-policy). +> +> The payload of the SyncML must be XML-encoded; for this XML encoding, there are a variety of online encoders that you can use. To avoid encoding the payload, you can use CDATA if your MDM supports it. For more information, see [CDATA Sections](http://www.w3.org/TR/REC-xml/#sec-cdata-sect). + + +ADMX Info: +- GP English name: *Turn off downloading of print drivers over HTTP* +- GP name: *DisableWebPnPDownload_1* +- GP path: *System\Internet Communication Management\Internet Communication settings* +- GP ADMX file name: *ICM.admx* + + + +
    + + +**ADMX_ICM/DriverSearchPlaces_DontSearchWindowsUpdate** + + + + + + + + + + + + + + + + + + + + + + + + + + + +
    Windows EditionSupported?
    Homecross mark
    Procross mark
    Businesscross mark
    Enterprisecheck mark
    Educationcross mark
    + + +
    + + +[Scope](./policy-configuration-service-provider.md#policy-scope): + +> [!div class = "checklist"] +> * Device + +
    + + + +Available in the latest Windows 10 Insider Preview Build. This policy setting specifies whether Windows searches Windows Update for device drivers when no local drivers for a device are present. + +If you enable this policy setting, Windows Update is not searched when a new device is installed. + +If you disable this policy setting, Windows Update is always searched for drivers when no local drivers are present. + +If you do not configure this policy setting, searching Windows Update is optional when installing a device. + +Also see "Turn off Windows Update device driver search prompt" in "Administrative Templates/System," which governs whether an administrator is prompted before searching Windows Update for device drivers if a driver is not found locally. + +> [!NOTE] +> This policy setting is replaced by "Specify Driver Source Search Order" in "Administrative Templates/System/Device Installation" on newer versions of Windows. + + +> [!TIP] +> This is an ADMX-backed policy and requires a special SyncML format to enable or disable. For details, see [Understanding ADMX-backed policies](./understanding-admx-backed-policies.md). +> +> You must specify the data type in the SyncML as <Format>chr</Format>. For an example SyncML, refer to [Enabling a policy](./understanding-admx-backed-policies.md#enabling-a-policy). +> +> The payload of the SyncML must be XML-encoded; for this XML encoding, there are a variety of online encoders that you can use. To avoid encoding the payload, you can use CDATA if your MDM supports it. For more information, see [CDATA Sections](http://www.w3.org/TR/REC-xml/#sec-cdata-sect). + + +ADMX Info: +- GP English name: *Turn off Windows Update device driver searching* +- GP name: *DriverSearchPlaces_DontSearchWindowsUpdate* +- GP path: *System\Internet Communication Management\Internet Communication settings* +- GP ADMX file name: *ICM.admx* + + + +
    + + +**ADMX_ICM/EventViewer_DisableLinks** + + + + + + + + + + + + + + + + + + + + + + + + + + + +
    Windows EditionSupported?
    Homecross mark
    Procross mark
    Businesscross mark
    Enterprisecheck mark
    Educationcross mark
    + + +
    + + +[Scope](./policy-configuration-service-provider.md#policy-scope): + +> [!div class = "checklist"] +> * Device + +
    + + + +Available in the latest Windows 10 Insider Preview Build. This policy setting specifies whether "Events.asp" hyperlinks are available for events within the Event Viewer application. + +The Event Viewer normally makes all HTTP(S) URLs into hyperlinks that activate the Internet browser when clicked. In addition, "More Information" is placed at the end of the description text if the event is created by a Microsoft component. This text contains a link (URL) that, if clicked, sends information about the event to Microsoft, and allows users to learn more about why that event occurred. + +If you enable this policy setting, event description hyperlinks are not activated and the text "More Information" is not displayed at the end of the description. + +If you disable or do not configure this policy setting, the user can click the hyperlink, which prompts the user and then sends information about the event over the Internet to Microsoft. + +Also, see "Events.asp URL", "Events.asp program", and "Events.asp Program Command Line Parameters" settings in "Administrative Templates/Windows Components/Event Viewer". + + +> [!TIP] +> This is an ADMX-backed policy and requires a special SyncML format to enable or disable. For details, see [Understanding ADMX-backed policies](./understanding-admx-backed-policies.md). +> +> You must specify the data type in the SyncML as <Format>chr</Format>. For an example SyncML, refer to [Enabling a policy](./understanding-admx-backed-policies.md#enabling-a-policy). +> +> The payload of the SyncML must be XML-encoded; for this XML encoding, there are a variety of online encoders that you can use. To avoid encoding the payload, you can use CDATA if your MDM supports it. For more information, see [CDATA Sections](http://www.w3.org/TR/REC-xml/#sec-cdata-sect). + + +ADMX Info: +- GP English name: *Turn off Event Viewer "Events.asp" links* +- GP name: *EventViewer_DisableLinks* +- GP path: *System\Internet Communication Management\Internet Communication settings* +- GP ADMX file name: *ICM.admx* + + + +
    + + +**ADMX_ICM/HSS_HeadlinesPolicy** + + + + + + + + + + + + + + + + + + + + + + + + + + + +
    Windows EditionSupported?
    Homecross mark
    Procross mark
    Businesscross mark
    Enterprisecheck mark
    Educationcross mark
    + + +
    + + +[Scope](./policy-configuration-service-provider.md#policy-scope): + +> [!div class = "checklist"] +> * Device + +
    + + + +Available in the latest Windows 10 Insider Preview Build. This policy setting specifies whether to show the "Did you know?" section of Help and Support Center. + +This content is dynamically updated when users who are connected to the Internet open Help and Support Center, and provides up-to-date information about Windows and the computer. + +If you enable this policy setting, the Help and Support Center no longer retrieves nor displays "Did you know?" content. + +If you disable or do not configure this policy setting, the Help and Support Center retrieves and displays "Did you know?" content. + +You might want to enable this policy setting for users who do not have Internet access, because the content in the "Did you know?" section will remain static indefinitely without an Internet connection. + + +> [!TIP] +> This is an ADMX-backed policy and requires a special SyncML format to enable or disable. For details, see [Understanding ADMX-backed policies](./understanding-admx-backed-policies.md). +> +> You must specify the data type in the SyncML as <Format>chr</Format>. For an example SyncML, refer to [Enabling a policy](./understanding-admx-backed-policies.md#enabling-a-policy). +> +> The payload of the SyncML must be XML-encoded; for this XML encoding, there are a variety of online encoders that you can use. To avoid encoding the payload, you can use CDATA if your MDM supports it. For more information, see [CDATA Sections](http://www.w3.org/TR/REC-xml/#sec-cdata-sect). + + +ADMX Info: +- GP English name: *Turn off Help and Support Center "Did you know?" content* +- GP name: *HSS_HeadlinesPolicy* +- GP path: *System\Internet Communication Management\Internet Communication settings* +- GP ADMX file name: *ICM.admx* + + + +
    + + +**ADMX_ICM/HSS_KBSearchPolicy** + + + + + + + + + + + + + + + + + + + + + + + + + + + +
    Windows EditionSupported?
    Homecross mark
    Procross mark
    Businesscross mark
    Enterprisecheck mark
    Educationcross mark
    + + +
    + + +[Scope](./policy-configuration-service-provider.md#policy-scope): + +> [!div class = "checklist"] +> * Device + +
    + + + +Available in the latest Windows 10 Insider Preview Build. This policy setting specifies whether users can perform a Microsoft Knowledge Base search from the Help and Support Center. + +The Knowledge Base is an online source of technical support information and self-help tools for Microsoft products, and is searched as part of all Help and Support Center searches with the default search options. + +If you enable this policy setting, it removes the Knowledge Base section from the Help and Support Center "Set search options" page, and only Help content on the local computer is searched. + +If you disable or do not configure this policy setting, the Knowledge Base is searched if the user has a connection to the Internet and has not disabled the Knowledge Base search from the Search Options page. + + +> [!TIP] +> This is an ADMX-backed policy and requires a special SyncML format to enable or disable. For details, see [Understanding ADMX-backed policies](./understanding-admx-backed-policies.md). +> +> You must specify the data type in the SyncML as <Format>chr</Format>. For an example SyncML, refer to [Enabling a policy](./understanding-admx-backed-policies.md#enabling-a-policy). +> +> The payload of the SyncML must be XML-encoded; for this XML encoding, there are a variety of online encoders that you can use. To avoid encoding the payload, you can use CDATA if your MDM supports it. For more information, see [CDATA Sections](http://www.w3.org/TR/REC-xml/#sec-cdata-sect). + + +ADMX Info: +- GP English name: *Turn off Help and Support Center Microsoft Knowledge Base search* +- GP name: *HSS_KBSearchPolicy* +- GP path: *System\Internet Communication Management\Internet Communication settings* +- GP ADMX file name: *ICM.admx* + + + +
    + + +**ADMX_ICM/InternetManagement_RestrictCommunication_1** + + + + + + + + + + + + + + + + + + + + + + + + + + + +
    Windows EditionSupported?
    Homecross mark
    Procross mark
    Businesscross mark
    Enterprisecheck mark
    Educationcross mark
    + + +
    + + +[Scope](./policy-configuration-service-provider.md#policy-scope): + +> [!div class = "checklist"] +> * User + +
    + + + +Available in the latest Windows 10 Insider Preview Build. This policy setting specifies whether Windows can access the Internet to accomplish tasks that require Internet resources. + +If you enable this setting, all of the the policy settings listed in the "Internet Communication settings" section are set such that their respective features cannot access the Internet. + +If you disable this policy setting, all of the the policy settings listed in the "Internet Communication settings" section are set such that their respective features can access the Internet. + +If you do not configure this policy setting, all of the the policy settings in the "Internet Communication settings" section are set to not configured. + + +> [!TIP] +> This is an ADMX-backed policy and requires a special SyncML format to enable or disable. For details, see [Understanding ADMX-backed policies](./understanding-admx-backed-policies.md). +> +> You must specify the data type in the SyncML as <Format>chr</Format>. For an example SyncML, refer to [Enabling a policy](./understanding-admx-backed-policies.md#enabling-a-policy). +> +> The payload of the SyncML must be XML-encoded; for this XML encoding, there are a variety of online encoders that you can use. To avoid encoding the payload, you can use CDATA if your MDM supports it. For more information, see [CDATA Sections](http://www.w3.org/TR/REC-xml/#sec-cdata-sect). + + +ADMX Info: +- GP English name: *Restrict Internet communication* +- GP name: *InternetManagement_RestrictCommunication_1* +- GP path: *System\Internet Communication Management* +- GP ADMX file name: *ICM.admx* + + + +
    + + +**ADMX_ICM/InternetManagement_RestrictCommunication_2** + + + + + + + + + + + + + + + + + + + + + + + + + + + +
    Windows EditionSupported?
    Homecross mark
    Procross mark
    Businesscross mark
    Enterprisecheck mark
    Educationcross mark
    + + +
    + + +[Scope](./policy-configuration-service-provider.md#policy-scope): + +> [!div class = "checklist"] +> * Device + +
    + + + +Available in the latest Windows 10 Insider Preview Build. This policy setting specifies whether Windows can access the Internet to accomplish tasks that require Internet resources. + +If you enable this setting, all of the the policy settings listed in the "Internet Communication settings" section are set such that their respective features cannot access the Internet. + +If you disable this policy setting, all of the the policy settings listed in the "Internet Communication settings" section are set such that their respective features can access the Internet. + +If you do not configure this policy setting, all of the the policy settings in the "Internet Communication settings" section are set to not configured. + +> [!TIP] +> This is an ADMX-backed policy and requires a special SyncML format to enable or disable. For details, see [Understanding ADMX-backed policies](./understanding-admx-backed-policies.md). +> +> You must specify the data type in the SyncML as <Format>chr</Format>. For an example SyncML, refer to [Enabling a policy](./understanding-admx-backed-policies.md#enabling-a-policy). +> +> The payload of the SyncML must be XML-encoded; for this XML encoding, there are a variety of online encoders that you can use. To avoid encoding the payload, you can use CDATA if your MDM supports it. For more information, see [CDATA Sections](http://www.w3.org/TR/REC-xml/#sec-cdata-sect). + + +ADMX Info: +- GP English name: *Restrict Internet communication* +- GP name: *InternetManagement_RestrictCommunication_2* +- GP path: *System\Internet Communication Management* +- GP ADMX file name: *ICM.admx* + + + +
    + + +**ADMX_ICM/NC_ExitOnISP** + + + + + + + + + + + + + + + + + + + + + + + + + + + +
    Windows EditionSupported?
    Homecross mark
    Procross mark
    Businesscross mark
    Enterprisecheck mark
    Educationcross mark
    + + +
    + + +[Scope](./policy-configuration-service-provider.md#policy-scope): + +> [!div class = "checklist"] +> * Device + +
    + + + +Available in the latest Windows 10 Insider Preview Build. This policy setting specifies whether the Internet Connection Wizard can connect to Microsoft to download a list of Internet Service Providers (ISPs). + +If you enable this policy setting, the "Choose a list of Internet Service Providers" path in the Internet Connection Wizard causes the wizard to exit. This prevents users from retrieving the list of ISPs, which resides on Microsoft servers. + +If you disable or do not configure this policy setting, users can connect to Microsoft to download a list of ISPs for their area. + + +> [!TIP] +> This is an ADMX-backed policy and requires a special SyncML format to enable or disable. For details, see [Understanding ADMX-backed policies](./understanding-admx-backed-policies.md). +> +> You must specify the data type in the SyncML as <Format>chr</Format>. For an example SyncML, refer to [Enabling a policy](./understanding-admx-backed-policies.md#enabling-a-policy). +> +> The payload of the SyncML must be XML-encoded; for this XML encoding, there are a variety of online encoders that you can use. To avoid encoding the payload, you can use CDATA if your MDM supports it. For more information, see [CDATA Sections](http://www.w3.org/TR/REC-xml/#sec-cdata-sect). + + +ADMX Info: +- GP English name: *Turn off Internet Connection Wizard if URL connection is referring to Microsoft.com* +- GP name: *NC_ExitOnISP* +- GP path: *System\Internet Communication Management\Internet Communication settings* +- GP ADMX file name: *ICM.admx* + + + +
    + + +**ADMX_ICM/NC_NoRegistration** + + + + + + + + + + + + + + + + + + + + + + + + + + + +
    Windows EditionSupported?
    Homecross mark
    Procross mark
    Businesscross mark
    Enterprisecheck mark
    Educationcross mark
    + + +
    + + +[Scope](./policy-configuration-service-provider.md#policy-scope): + +> [!div class = "checklist"] +> * Device + +
    + + + +Available in the latest Windows 10 Insider Preview Build. This policy setting specifies whether the Windows Registration Wizard connects to Microsoft.com for online registration. + +If you enable this policy setting, it blocks users from connecting to Microsoft.com for online registration and users cannot register their copy of Windows online. + +If you disable or do not configure this policy setting, users can connect to Microsoft.com to complete the online Windows Registration. + +Note that registration is optional and involves submitting some personal information to Microsoft. However, Windows Product Activation is required but does not involve submitting any personal information (except the country/region you live in). + + +> [!TIP] +> This is an ADMX-backed policy and requires a special SyncML format to enable or disable. For details, see [Understanding ADMX-backed policies](./understanding-admx-backed-policies.md). +> +> You must specify the data type in the SyncML as <Format>chr</Format>. For an example SyncML, refer to [Enabling a policy](./understanding-admx-backed-policies.md#enabling-a-policy). +> +> The payload of the SyncML must be XML-encoded; for this XML encoding, there are a variety of online encoders that you can use. To avoid encoding the payload, you can use CDATA if your MDM supports it. For more information, see [CDATA Sections](http://www.w3.org/TR/REC-xml/#sec-cdata-sect). + + +ADMX Info: +- GP English name: *Turn off Registration if URL connection is referring to Microsoft.com* +- GP name: *NC_NoRegistration* +- GP path: *System\Internet Communication Management\Internet Communication settings* +- GP ADMX file name: *ICM.admx* + + + +
    + + +**ADMX_ICM/PCH_DoNotReport** + + + + + + + + + + + + + + + + + + + + + + + + + + + +
    Windows EditionSupported?
    Homecross mark
    Procross mark
    Businesscross mark
    Enterprisecheck mark
    Educationcross mark
    + + +
    + + +[Scope](./policy-configuration-service-provider.md#policy-scope): + +> [!div class = "checklist"] +> * Device + +
    + + + +Available in the latest Windows 10 Insider Preview Build. This policy setting controls whether or not errors are reported to Microsoft. + +Error Reporting is used to report information about a system or application that has failed or has stopped responding and is used to improve the quality of the product. + +If you enable this policy setting, users are not given the option to report errors. + +If you disable or do not configure this policy setting, the errors may be reported to Microsoft via the Internet or to a corporate file share. + +This policy setting overrides any user setting made from the Control Panel for error reporting. + +Also see the "Configure Error Reporting", "Display Error Notification" and "Disable Windows Error Reporting" policy settings under Computer Configuration/Administrative Templates/Windows Components/Windows Error Reporting. + + +> [!TIP] +> This is an ADMX-backed policy and requires a special SyncML format to enable or disable. For details, see [Understanding ADMX-backed policies](./understanding-admx-backed-policies.md). +> +> You must specify the data type in the SyncML as <Format>chr</Format>. For an example SyncML, refer to [Enabling a policy](./understanding-admx-backed-policies.md#enabling-a-policy). +> +> The payload of the SyncML must be XML-encoded; for this XML encoding, there are a variety of online encoders that you can use. To avoid encoding the payload, you can use CDATA if your MDM supports it. For more information, see [CDATA Sections](http://www.w3.org/TR/REC-xml/#sec-cdata-sect). + + +ADMX Info: +- GP English name: *Turn off Windows Error Reporting* +- GP name: *PCH_DoNotReport* +- GP path: *System\Internet Communication Management\Internet Communication settings* +- GP ADMX file name: *ICM.admx* + + + +
    + + +**ADMX_ICM/RemoveWindowsUpdate_ICM** + + + + + + + + + + + + + + + + + + + + + + + + + + + +
    Windows EditionSupported?
    Homecross mark
    Procross mark
    Businesscross mark
    Enterprisecheck mark
    Educationcross mark
    + + +
    + + +[Scope](./policy-configuration-service-provider.md#policy-scope): + +> [!div class = "checklist"] +> * Device + +
    + + + +Available in the latest Windows 10 Insider Preview Build. This policy setting allows you to remove access to Windows Update. + +If you enable this policy setting, all Windows Update features are removed. This includes blocking access to the Windows Update website at http://windowsupdate.microsoft.com, from the Windows Update hyperlink on the Start menu, and also on the Tools menu in Internet Explorer. Windows automatic updating is also disabled; you will neither be notified about nor will you receive critical updates from Windows Update. This policy setting also prevents Device Manager from automatically installing driver updates from the Windows Update website. + +If you disable or do not configure this policy setting, users can access the Windows Update website and enable automatic updating to receive notifications and critical updates from Windows Update. + +> [!NOTE] +> This policy applies only when this PC is configured to connect to an intranet update service using the "Specify intranet Microsoft update service location" policy. + + +> [!TIP] +> This is an ADMX-backed policy and requires a special SyncML format to enable or disable. For details, see [Understanding ADMX-backed policies](./understanding-admx-backed-policies.md). +> +> You must specify the data type in the SyncML as <Format>chr</Format>. For an example SyncML, refer to [Enabling a policy](./understanding-admx-backed-policies.md#enabling-a-policy). +> +> The payload of the SyncML must be XML-encoded; for this XML encoding, there are a variety of online encoders that you can use. To avoid encoding the payload, you can use CDATA if your MDM supports it. For more information, see [CDATA Sections](http://www.w3.org/TR/REC-xml/#sec-cdata-sect). + + +ADMX Info: +- GP English name: *Turn off access to all Windows Update features* +- GP name: *RemoveWindowsUpdate_ICM* +- GP path: *System\Internet Communication Management\Internet Communication settings* +- GP ADMX file name: *ICM.admx* + + + +
    + + +**ADMX_ICM/SearchCompanion_DisableFileUpdates** + + + + + + + + + + + + + + + + + + + + + + + + + + + +
    Windows EditionSupported?
    Homecross mark
    Procross mark
    Businesscross mark
    Enterprisecheck mark
    Educationcross mark
    + + +
    + + +[Scope](./policy-configuration-service-provider.md#policy-scope): + +> [!div class = "checklist"] +> * Device + +
    + + + +Available in the latest Windows 10 Insider Preview Build. This policy setting specifies whether Search Companion should automatically download content updates during local and Internet searches. + +When users search the local computer or the Internet, Search Companion occasionally connects to Microsoft to download an updated privacy policy and additional content files used to format and display results. + +If you enable this policy setting, Search Companion does not download content updates during searches. + +If you disable or do not configure this policy setting, Search Companion downloads content updates unless the user is using Classic Search. + +> [!NOTE] +> Internet searches still send the search text and information about the search to Microsoft and the chosen search provider. Choosing Classic Search turns off the Search Companion feature completely. + + +> [!TIP] +> This is an ADMX-backed policy and requires a special SyncML format to enable or disable. For details, see [Understanding ADMX-backed policies](./understanding-admx-backed-policies.md). +> +> You must specify the data type in the SyncML as <Format>chr</Format>. For an example SyncML, refer to [Enabling a policy](./understanding-admx-backed-policies.md#enabling-a-policy). +> +> The payload of the SyncML must be XML-encoded; for this XML encoding, there are a variety of online encoders that you can use. To avoid encoding the payload, you can use CDATA if your MDM supports it. For more information, see [CDATA Sections](http://www.w3.org/TR/REC-xml/#sec-cdata-sect). + + +ADMX Info: +- GP English name: *Turn off Search Companion content file updates* +- GP name: *SearchCompanion_DisableFileUpdates* +- GP path: *System\Internet Communication Management\Internet Communication settings* +- GP ADMX file name: *ICM.admx* + + + +
    + + +**ADMX_ICM/InternetManagement_RestrictCommunication_2** + + + + + + + + + + + + + + + + + + + + + + + + + + + +
    Windows EditionSupported?
    Homecross mark
    Procross mark
    Businesscross mark
    Enterprisecheck mark
    Educationcross mark
    + + +
    + + +[Scope](./policy-configuration-service-provider.md#policy-scope): + +> [!div class = "checklist"] +> * Device + +
    + + + +Available in the latest Windows 10 Insider Preview Build. This policy setting specifies whether Windows can access the Internet to accomplish tasks that require Internet resources. + +If you enable this setting, all of the the policy settings listed in the "Internet Communication settings" section are set such that their respective features cannot access the Internet. + +If you disable this policy setting, all of the the policy settings listed in the "Internet Communication settings" section are set such that their respective features can access the Internet. + +If you do not configure this policy setting, all of the the policy settings in the "Internet Communication settings" section are set to not configured. + +> [!TIP] +> This is an ADMX-backed policy and requires a special SyncML format to enable or disable. For details, see [Understanding ADMX-backed policies](./understanding-admx-backed-policies.md). +> +> You must specify the data type in the SyncML as <Format>chr</Format>. For an example SyncML, refer to [Enabling a policy](./understanding-admx-backed-policies.md#enabling-a-policy). +> +> The payload of the SyncML must be XML-encoded; for this XML encoding, there are a variety of online encoders that you can use. To avoid encoding the payload, you can use CDATA if your MDM supports it. For more information, see [CDATA Sections](http://www.w3.org/TR/REC-xml/#sec-cdata-sect). + + +ADMX Info: +- GP English name: *Restrict Internet communication* +- GP name: *InternetManagement_RestrictCommunication_2* +- GP path: *System\Internet Communication Management* +- GP ADMX file name: *ICM.admx* + + + +
    + + +**ADMX_ICM/InternetManagement_RestrictCommunication_2** + + + + + + + + + + + + + + + + + + + + + + + + + + + +
    Windows EditionSupported?
    Homecross mark
    Procross mark
    Businesscross mark
    Enterprisecheck mark
    Educationcross mark
    + + +
    + + +[Scope](./policy-configuration-service-provider.md#policy-scope): + +> [!div class = "checklist"] +> * Device + +
    + + + +Available in the latest Windows 10 Insider Preview Build. This policy setting specifies whether Windows can access the Internet to accomplish tasks that require Internet resources. + +If you enable this setting, all of the the policy settings listed in the "Internet Communication settings" section are set such that their respective features cannot access the Internet. + +If you disable this policy setting, all of the the policy settings listed in the "Internet Communication settings" section are set such that their respective features can access the Internet. + +If you do not configure this policy setting, all of the the policy settings in the "Internet Communication settings" section are set to not configured. + +> [!TIP] +> This is an ADMX-backed policy and requires a special SyncML format to enable or disable. For details, see [Understanding ADMX-backed policies](./understanding-admx-backed-policies.md). +> +> You must specify the data type in the SyncML as <Format>chr</Format>. For an example SyncML, refer to [Enabling a policy](./understanding-admx-backed-policies.md#enabling-a-policy). +> +> The payload of the SyncML must be XML-encoded; for this XML encoding, there are a variety of online encoders that you can use. To avoid encoding the payload, you can use CDATA if your MDM supports it. For more information, see [CDATA Sections](http://www.w3.org/TR/REC-xml/#sec-cdata-sect). + + +ADMX Info: +- GP English name: *Restrict Internet communication* +- GP name: *InternetManagement_RestrictCommunication_2* +- GP path: *System\Internet Communication Management* +- GP ADMX file name: *ICM.admx* + + + +
    + + +**ADMX_ICM/InternetManagement_RestrictCommunication_2** + + + + + + + + + + + + + + + + + + + + + + + + + + + +
    Windows EditionSupported?
    Homecross mark
    Procross mark
    Businesscross mark
    Enterprisecheck mark
    Educationcross mark
    + + +
    + + +[Scope](./policy-configuration-service-provider.md#policy-scope): + +> [!div class = "checklist"] +> * Device + +
    + + + +Available in the latest Windows 10 Insider Preview Build. This policy setting specifies whether Windows can access the Internet to accomplish tasks that require Internet resources. + +If you enable this setting, all of the the policy settings listed in the "Internet Communication settings" section are set such that their respective features cannot access the Internet. + +If you disable this policy setting, all of the the policy settings listed in the "Internet Communication settings" section are set such that their respective features can access the Internet. + +If you do not configure this policy setting, all of the the policy settings in the "Internet Communication settings" section are set to not configured. + +> [!TIP] +> This is an ADMX-backed policy and requires a special SyncML format to enable or disable. For details, see [Understanding ADMX-backed policies](./understanding-admx-backed-policies.md). +> +> You must specify the data type in the SyncML as <Format>chr</Format>. For an example SyncML, refer to [Enabling a policy](./understanding-admx-backed-policies.md#enabling-a-policy). +> +> The payload of the SyncML must be XML-encoded; for this XML encoding, there are a variety of online encoders that you can use. To avoid encoding the payload, you can use CDATA if your MDM supports it. For more information, see [CDATA Sections](http://www.w3.org/TR/REC-xml/#sec-cdata-sect). + + +ADMX Info: +- GP English name: *Restrict Internet communication* +- GP name: *InternetManagement_RestrictCommunication_2* +- GP path: *System\Internet Communication Management* +- GP ADMX file name: *ICM.admx* + + + +
    + + +**ADMX_ICM/InternetManagement_RestrictCommunication_2** + + + + + + + + + + + + + + + + + + + + + + + + + + + +
    Windows EditionSupported?
    Homecross mark
    Procross mark
    Businesscross mark
    Enterprisecheck mark
    Educationcross mark
    + + +
    + + +[Scope](./policy-configuration-service-provider.md#policy-scope): + +> [!div class = "checklist"] +> * Device + +
    + + + +Available in the latest Windows 10 Insider Preview Build. This policy setting specifies whether Windows can access the Internet to accomplish tasks that require Internet resources. + +If you enable this setting, all of the the policy settings listed in the "Internet Communication settings" section are set such that their respective features cannot access the Internet. + +If you disable this policy setting, all of the the policy settings listed in the "Internet Communication settings" section are set such that their respective features can access the Internet. + +If you do not configure this policy setting, all of the the policy settings in the "Internet Communication settings" section are set to not configured. + +> [!TIP] +> This is an ADMX-backed policy and requires a special SyncML format to enable or disable. For details, see [Understanding ADMX-backed policies](./understanding-admx-backed-policies.md). +> +> You must specify the data type in the SyncML as <Format>chr</Format>. For an example SyncML, refer to [Enabling a policy](./understanding-admx-backed-policies.md#enabling-a-policy). +> +> The payload of the SyncML must be XML-encoded; for this XML encoding, there are a variety of online encoders that you can use. To avoid encoding the payload, you can use CDATA if your MDM supports it. For more information, see [CDATA Sections](http://www.w3.org/TR/REC-xml/#sec-cdata-sect). + + +ADMX Info: +- GP English name: *Restrict Internet communication* +- GP name: *InternetManagement_RestrictCommunication_2* +- GP path: *System\Internet Communication Management* +- GP ADMX file name: *ICM.admx* + + + +
    + + +**ADMX_ICM/InternetManagement_RestrictCommunication_2** + + + + + + + + + + + + + + + + + + + + + + + + + + + +
    Windows EditionSupported?
    Homecross mark
    Procross mark
    Businesscross mark
    Enterprisecheck mark
    Educationcross mark
    + + +
    + + +[Scope](./policy-configuration-service-provider.md#policy-scope): + +> [!div class = "checklist"] +> * Device + +
    + + + +Available in the latest Windows 10 Insider Preview Build. This policy setting specifies whether Windows can access the Internet to accomplish tasks that require Internet resources. + +If you enable this setting, all of the the policy settings listed in the "Internet Communication settings" section are set such that their respective features cannot access the Internet. + +If you disable this policy setting, all of the the policy settings listed in the "Internet Communication settings" section are set such that their respective features can access the Internet. + +If you do not configure this policy setting, all of the the policy settings in the "Internet Communication settings" section are set to not configured. + +> [!TIP] +> This is an ADMX-backed policy and requires a special SyncML format to enable or disable. For details, see [Understanding ADMX-backed policies](./understanding-admx-backed-policies.md). +> +> You must specify the data type in the SyncML as <Format>chr</Format>. For an example SyncML, refer to [Enabling a policy](./understanding-admx-backed-policies.md#enabling-a-policy). +> +> The payload of the SyncML must be XML-encoded; for this XML encoding, there are a variety of online encoders that you can use. To avoid encoding the payload, you can use CDATA if your MDM supports it. For more information, see [CDATA Sections](http://www.w3.org/TR/REC-xml/#sec-cdata-sect). + + +ADMX Info: +- GP English name: *Restrict Internet communication* +- GP name: *InternetManagement_RestrictCommunication_2* +- GP path: *System\Internet Communication Management* +- GP ADMX file name: *ICM.admx* + + + +
    + +Footnotes: + +- 1 - Available in Windows 10, version 1607. +- 2 - Available in Windows 10, version 1703. +- 3 - Available in Windows 10, version 1709. +- 4 - Available in Windows 10, version 1803. +- 5 - Available in Windows 10, version 1809. +- 6 - Available in Windows 10, version 1903. +- 7 - Available in Windows 10, version 1909. +- 8 - Available in Windows 10, version 2004. + + + From 4efc7e487dddc7fd10fe13f4f536496a359c0a9a Mon Sep 17 00:00:00 2001 From: ManikaDhiman Date: Thu, 17 Dec 2020 14:55:05 -0800 Subject: [PATCH 154/486] Removed duplicate of DisableCloudOptimizedContent --- .../mdm/policy-csp-experience.md | 70 ------------------- 1 file changed, 70 deletions(-) diff --git a/windows/client-management/mdm/policy-csp-experience.md b/windows/client-management/mdm/policy-csp-experience.md index 7809027bc7..c7a806320d 100644 --- a/windows/client-management/mdm/policy-csp-experience.md +++ b/windows/client-management/mdm/policy-csp-experience.md @@ -1227,76 +1227,6 @@ The following list shows the supported values:
    - -**Experience/DisableCloudOptimizedContent** - - - - - - - - - - - - - - - - - - - - - - - - - - - -
    Windows EditionSupported?
    Homecheck mark9
    Procheck mark9
    Businesscheck mark9
    Enterprisecheck mark9
    Educationcheck mark9
    - - -
    - - -[Scope](./policy-configuration-service-provider.md#policy-scope): - -> [!div class = "checklist"] -> * Device - -
    - - - -This policy setting lets you turn off cloud optimized content in all Windows experiences. - -If you enable this policy setting, Windows experiences that use the cloud optimized content client component will present the default fallback content. - -If you disable or do not configure this policy setting, Windows experiences will be able to use cloud optimized content. - - - -ADMX Info: -- GP English name: *Turn off cloud optimized content* -- GP name: *DisableCloudOptimizedContent* -- GP path: *Windows Components/Cloud Content* -- GP ADMX file name: *CloudContent.admx* - - - -The following list shows the supported values: - -- 0 (default) – Disabled. -- 1 – Enabled. - - - - -
    - **Experience/DoNotShowFeedbackNotifications** From 05d72aaa5c67010dd2356f8234d200c6d4ffbd8f Mon Sep 17 00:00:00 2001 From: Joey Caparas Date: Thu, 17 Dec 2020 15:02:52 -0800 Subject: [PATCH 155/486] Update indicator-certificates.md --- .../microsoft-defender-atp/indicator-certificates.md | 4 ++-- 1 file changed, 2 insertions(+), 2 deletions(-) diff --git a/windows/security/threat-protection/microsoft-defender-atp/indicator-certificates.md b/windows/security/threat-protection/microsoft-defender-atp/indicator-certificates.md index f0439ebf7f..35d49a64b9 100644 --- a/windows/security/threat-protection/microsoft-defender-atp/indicator-certificates.md +++ b/windows/security/threat-protection/microsoft-defender-atp/indicator-certificates.md @@ -39,11 +39,11 @@ You can create indicators for certificates. Some common use cases include: It's important to understand the following requirements prior to creating indicators for certificates: -- This feature is available if your organization uses Windows Defender Antivirus and Cloud-based protection is enabled. For more information, see [Manage cloud-based protection](../windows-defender-antivirus/deploy-manage-report-windows-defender-antivirus.md). +- This feature is available if your organization uses Windows Defender Antivirus and Cloud-based protection is enabled. For more information, see [Manage cloud-based protection](../microsoft-defender-antivirus/deploy-manage-report-microsoft-defender-antivirus.md). - The Antimalware client version must be 4.18.1901.x or later. - Supported on machines on Windows 10, version 1703 or later, Windows server 2016 and 2019. - The virus and threat protection definitions must be up to date. -- This feature currently supports entering .CER or .PEM (Base64 ASCII) encoding based certificates. +- This feature currently supports entering .CER or .PEM file extensions. >[!IMPORTANT] > - A valid leaf certificate is a signing certificate that has a valid certification path and must be chained to the Root Certificate Authority (CA) trusted by Microsoft. Alternatively, a custom (self-signed) certificate can be used as long as it's trusted by the client (Root CA certificate is installed under the Local Machine 'Trusted Root Certification Authorities'). From fdeb189ca96f7ca54de6c0efbb53dd06c5381743 Mon Sep 17 00:00:00 2001 From: Joey Caparas Date: Thu, 17 Dec 2020 15:11:25 -0800 Subject: [PATCH 156/486] udpate keyword --- .../microsoft-defender-atp/indicator-certificates.md | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/windows/security/threat-protection/microsoft-defender-atp/indicator-certificates.md b/windows/security/threat-protection/microsoft-defender-atp/indicator-certificates.md index 35d49a64b9..4c34fbe26c 100644 --- a/windows/security/threat-protection/microsoft-defender-atp/indicator-certificates.md +++ b/windows/security/threat-protection/microsoft-defender-atp/indicator-certificates.md @@ -2,7 +2,7 @@ title: Create indicators based on certificates ms.reviewer: description: Create indicators based on certificates that define the detection, prevention, and exclusion of entities. -keywords: ioc, certificate, certificates, manage, allowed, blocked, whitelist, blacklist, block, clean, malicious, file hash, ip address, urls, domain +keywords: ioc, certificate, certificates, manage, allowed, blocked, block, clean, malicious, file hash, ip address, urls, domain search.product: eADQiWindows 10XVcnh search.appverid: met150 ms.prod: w10 From 1fe446ed76ce210b62a016eba1fe3b157a732641 Mon Sep 17 00:00:00 2001 From: Gary Moore Date: Thu, 17 Dec 2020 15:21:21 -0800 Subject: [PATCH 157/486] Added lightbox functionality to diagram --- windows/client-management/quick-assist.md | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/windows/client-management/quick-assist.md b/windows/client-management/quick-assist.md index 9fc8de6503..6a50151342 100644 --- a/windows/client-management/quick-assist.md +++ b/windows/client-management/quick-assist.md @@ -57,7 +57,7 @@ Both the helper and sharer must be able to reach these endpoints over port 443: 7. RDP shares the video to the helper over https (port 443) through the RDP relay service to the helper's RDP control. Input is shared from the helper to the sharer through the RDP relay service. -:::image type="content" source="images/quick-assist-flow.png" alt-text="Schematic flow of connections when a Quick Assist session is established"::: +:::image type="content" source="images/quick-assist-flow.png" lightbox="images/quick-assist-flow.png" alt-text="Schematic flow of connections when a Quick Assist session is established"::: ### Data and privacy From 2765cbcb25c78118a1170e2692cd0286d3b8354b Mon Sep 17 00:00:00 2001 From: Gary Moore Date: Thu, 17 Dec 2020 15:32:54 -0800 Subject: [PATCH 158/486] Acrolinx grammar --- windows/client-management/mdm/policy-csp-experience.md | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/windows/client-management/mdm/policy-csp-experience.md b/windows/client-management/mdm/policy-csp-experience.md index c7a806320d..8550d25403 100644 --- a/windows/client-management/mdm/policy-csp-experience.md +++ b/windows/client-management/mdm/policy-csp-experience.md @@ -1358,7 +1358,7 @@ ADMX Info: Supported values: -- 0 (default) - Allowed/turned on. The "browser" group syncs automatically between user’s devices and lets users to make changes. +- 0 (default) - Allowed/turned on. The "browser" group synchronizes automatically between users' devices and lets users make changes. - 2 - Prevented/turned off. The "browser" group does not use the _Sync your Settings_ option. From d6680ea186ced63062cada328413d599fc6c9565 Mon Sep 17 00:00:00 2001 From: ManikaDhiman Date: Thu, 17 Dec 2020 15:49:32 -0800 Subject: [PATCH 159/486] Added ICM policies --- windows/client-management/mdm/TOC.md | 1 + .../mdm/policies-in-policy-csp-admx-backed.md | 26 + .../policy-configuration-service-provider.md | 115 +++- .../mdm/policy-csp-admx-icm.md | 517 ++++++++++++++++-- 4 files changed, 601 insertions(+), 58 deletions(-) diff --git a/windows/client-management/mdm/TOC.md b/windows/client-management/mdm/TOC.md index 6e91df97ec..a4329d7e1b 100644 --- a/windows/client-management/mdm/TOC.md +++ b/windows/client-management/mdm/TOC.md @@ -209,6 +209,7 @@ #### [ADMX_Globalization](policy-csp-admx-globalization.md) #### [ADMX_Help](policy-csp-admx-help.md) #### [ADMX_HelpAndSupport](policy-csp-admx-helpandsupport.md) +#### [ADMX_ICM](policy-csp-admx-icm.md) #### [ADMX_kdc](policy-csp-admx-kdc.md) #### [ADMX_Kerberos](policy-csp-admx-kerberos.md) #### [ADMX_LanmanServer](policy-csp-admx-lanmanserver.md) diff --git a/windows/client-management/mdm/policies-in-policy-csp-admx-backed.md b/windows/client-management/mdm/policies-in-policy-csp-admx-backed.md index 8c03c186f3..fc369bf835 100644 --- a/windows/client-management/mdm/policies-in-policy-csp-admx-backed.md +++ b/windows/client-management/mdm/policies-in-policy-csp-admx-backed.md @@ -314,6 +314,32 @@ ms.date: 10/08/2020 - [ADMX_HelpAndSupport/HPExplicitFeedback](./policy-csp-admx-helpandsupport.md#admx-helpandsupport-hpexplicitfeedback) - [ADMX_HelpAndSupport/HPImplicitFeedback](./policy-csp-admx-helpandsupport.md#admx-helpandsupport-hpimplicitfeedback) - [ADMX_HelpAndSupport/HPOnlineAssistance](./policy-csp-admx-helpandsupport.md#admx-helpandsupport-hponlineassistance) +- [ADMX_ICM/CEIPEnable](./policy-csp-admx-icm.md#admx-icm-ceipenable) +- [ADMX_ICM/CertMgr_DisableAutoRootUpdates](./policy-csp-admx-icm.md#admx-icm-certmgr-disableautorootupdates) +- [ADMX_ICM/DisableHTTPPrinting_1](./policy-csp-admx-icm.md#admx-icm-disablehttpprinting-1) +- [ADMX_ICM/DisableWebPnPDownload_1](./policy-csp-admx-icm.md#admx-icm-disablewebpnpdownload-1) +- [ADMX_ICM/DriverSearchPlaces_DontSearchWindowsUpdate](./policy-csp-admx-icm.md#admx-icm-driversearchplaces-dontsearchwindowsupdate) +- [ADMX_ICM/EventViewer_DisableLinks](./policy-csp-admx-icm.md#admx-icm-eventviewer-disablelinks) +- [ADMX_ICM/HSS_HeadlinesPolicy](./policy-csp-admx-icm.md#admx-icm-hss-headlinespolicy) +- [ADMX_ICM/HSS_KBSearchPolicy](./policy-csp-admx-icm.md#admx-icm-hss-kbsearchpolicy) +- [ADMX_ICM/InternetManagement_RestrictCommunication_1](./policy-csp-admx-icm.md#admx-icm-internetmanagement_restrictcommunication_1) +- [ADMX_ICM/InternetManagement_RestrictCommunication_2](./policy-csp-admx-icm.md#admx-icm-internetmanagement-restrictcommunication-2) +- [ADMX_ICM/NC_ExitOnISP](./policy-csp-admx-icm.md#admx-icm-nc-exitonisp) +- [ADMX_ICM/NC_NoRegistration](./policy-csp-admx-icm.md#admx-icm-nc-noregistration) +- [ADMX_ICM/PCH_DoNotReport](./policy-csp-admx-icm.md#admx-icm-pch-donotreport) +- [ADMX_ICM/RemoveWindowsUpdate_ICM](./policy-csp-admx-icm.md#admx-icm-removewindowsupdate-icm) +- [ADMX_ICM/SearchCompanion_DisableFileUpdates](./policy-csp-admx-icm.md#admx-icm-searchcompanion-disablefileupdates) +- [ADMX_ICM/ShellNoUseInternetOpenWith_1](./policy-csp-admx-icm.md#admx-icm-shellnouseinternetopenwith-1) +- [ADMX_ICM/ShellNoUseInternetOpenWith_2](./policy-csp-admx-icm.md#admx-icm-shellnouseinternetopenwith-2) +- [ADMX_ICM/ShellNoUseStoreOpenWith_1](./policy-csp-admx-icm.md#admx-icm-shellnousestoreopenwith-1) +- [ADMX_ICM/ShellNoUseStoreOpenWith_2](./policy-csp-admx-icm.md#admx-icm-shellnousestoreopenwith-2) +- [ADMX_ICM/ShellPreventWPWDownload_1](./policy-csp-admx-icm.md#admx-icm-shellpreventwpwdownload-1) +- [ADMX_ICM/ShellRemoveOrderPrints_1](./policy-csp-admx-icm.md#admx-icm-shellremoveorderprints-1) +- [ADMX_ICM/ShellRemoveOrderPrints_2](./policy-csp-admx-icm.md#admx-icm-shellremoveorderprints-2) +- [ADMX_ICM/ShellRemovePublishToWeb_1](./policy-csp-admx-icm.md#admx-icm-shellremovepublishtoweb-1) +- [ADMX_ICM/ShellRemovePublishToWeb_2](./policy-csp-admx-icm.md#admx-icm-shellremovepublishtoweb-2) +- [ADMX_ICM/WinMSG_NoInstrumentation_1](./policy-csp-admx-icm.md#admx-icm-winmsg_noinstrumentation-1) +- [ADMX_ICM/WinMSG_NoInstrumentation_2](./policy-csp-admx-icm.md#admx-icm-winmsg_noinstrumentation-2) - [ADMX_kdc/CbacAndArmor](./policy-csp-admx-kdc.md#admx-kdc-cbacandarmor) - [ADMX_kdc/ForestSearch](./policy-csp-admx-kdc.md#admx-kdc-forestsearch) - [ADMX_kdc/PKINITFreshness](./policy-csp-admx-kdc.md#admx-kdc-pkinitfreshness) diff --git a/windows/client-management/mdm/policy-configuration-service-provider.md b/windows/client-management/mdm/policy-configuration-service-provider.md index 810eacc415..13cc28a89d 100644 --- a/windows/client-management/mdm/policy-configuration-service-provider.md +++ b/windows/client-management/mdm/policy-configuration-service-provider.md @@ -1129,22 +1129,6 @@ The following diagram shows the Policy configuration service provider in tree fo
    -### ADMX_HelpAndSupport policies -
    -
    - ADMX_HelpAndSupport/ActiveHelp -
    -
    - ADMX_HelpAndSupport/HPExplicitFeedback -
    -
    - ADMX_HelpAndSupport/HPImplicitFeedback -
    -
    - ADMX_HelpAndSupport/HPOnlineAssistance -
    -
    - ### ADMX_Globalization policies
    @@ -1222,6 +1206,105 @@ The following diagram shows the Policy configuration service provider in tree fo
    +### ADMX_HelpAndSupport policies +
    +
    + ADMX_HelpAndSupport/ActiveHelp +
    +
    + ADMX_HelpAndSupport/HPExplicitFeedback +
    +
    + ADMX_HelpAndSupport/HPImplicitFeedback +
    +
    + ADMX_HelpAndSupport/HPOnlineAssistance +
    +
    + +## ADMX_ICM policies + +
    +
    + ADMX_ICM/CEIPEnable +
    +
    + ADMX_ICM/CertMgr_DisableAutoRootUpdates +
    +
    + ADMX_ICM/DisableHTTPPrinting_1 +
    +
    + ADMX_ICM/DisableWebPnPDownload_1 +
    +
    + ADMX_ICM/DriverSearchPlaces_DontSearchWindowsUpdate +
    +
    + ADMX_ICM/EventViewer_DisableLinks +
    +
    + ADMX_ICM/HSS_HeadlinesPolicy +
    +
    + ADMX_ICM/HSS_KBSearchPolicy +
    +
    + ADMX_ICM/InternetManagement_RestrictCommunication_1 +
    +
    + ADMX_ICM/InternetManagement_RestrictCommunication_2 +
    +
    + ADMX_ICM/NC_ExitOnISP +
    +
    + ADMX_ICM/NC_NoRegistration +
    +
    + ADMX_ICM/PCH_DoNotReport +
    +
    + ADMX_ICM/RemoveWindowsUpdate_ICM +
    +
    + ADMX_ICM/SearchCompanion_DisableFileUpdates +
    +
    + ADMX_ICM/ShellNoUseInternetOpenWith_1 +
    +
    + ADMX_ICM/ShellNoUseInternetOpenWith_2 +
    +
    + ADMX_ICM/ShellNoUseStoreOpenWith_1 +
    +
    + ADMX_ICM/ShellNoUseStoreOpenWith_2 +
    +
    + ADMX_ICM/ShellPreventWPWDownload_1 +
    +
    + ADMX_ICM/ShellRemoveOrderPrints_1 +
    +
    + ADMX_ICM/ShellRemoveOrderPrints_2 +
    +
    + ADMX_ICM/ShellRemovePublishToWeb_1 +
    +
    + ADMX_ICM/ShellRemovePublishToWeb_2 +
    +
    + ADMX_ICM/WinMSG_NoInstrumentation_1 +
    +
    + ADMX_ICM/WinMSG_NoInstrumentation_2 +
    +
    + ### ADMX_kdc policies
    diff --git a/windows/client-management/mdm/policy-csp-admx-icm.md b/windows/client-management/mdm/policy-csp-admx-icm.md index 82dfc6c182..fa79b7acc9 100644 --- a/windows/client-management/mdm/policy-csp-admx-icm.md +++ b/windows/client-management/mdm/policy-csp-admx-icm.md @@ -1193,7 +1193,7 @@ ADMX Info:
    -**ADMX_ICM/InternetManagement_RestrictCommunication_2** +**ADMX_ICM/ShellNoUseInternetOpenWith_1** @@ -1230,19 +1230,20 @@ ADMX Info: [Scope](./policy-configuration-service-provider.md#policy-scope): > [!div class = "checklist"] -> * Device +> * User
    -Available in the latest Windows 10 Insider Preview Build. This policy setting specifies whether Windows can access the Internet to accomplish tasks that require Internet resources. +Available in the latest Windows 10 Insider Preview Build. This policy setting specifies whether to use the Microsoft Web service for finding an application to open a file with an unhandled file association. -If you enable this setting, all of the the policy settings listed in the "Internet Communication settings" section are set such that their respective features cannot access the Internet. +When a user opens a file that has an extension that is not associated with any applications on the computer, the user is given the choice to select a local application or use the Web service to find an application. -If you disable this policy setting, all of the the policy settings listed in the "Internet Communication settings" section are set such that their respective features can access the Internet. +If you enable this policy setting, the link and the dialog for using the Web service to open an unhandled file association are removed. + +If you disable or do not configure this policy setting, the user is allowed to use the Web service. -If you do not configure this policy setting, all of the the policy settings in the "Internet Communication settings" section are set to not configured. > [!TIP] > This is an ADMX-backed policy and requires a special SyncML format to enable or disable. For details, see [Understanding ADMX-backed policies](./understanding-admx-backed-policies.md). @@ -1253,9 +1254,9 @@ If you do not configure this policy setting, all of the the policy settings in t ADMX Info: -- GP English name: *Restrict Internet communication* -- GP name: *InternetManagement_RestrictCommunication_2* -- GP path: *System\Internet Communication Management* +- GP English name: *Turn off Internet File Association service* +- GP name: *ShellNoUseInternetOpenWith_1* +- GP path: *System\Internet Communication Management\Internet Communication settings* - GP ADMX file name: *ICM.admx* @@ -1263,7 +1264,7 @@ ADMX Info:
    -**ADMX_ICM/InternetManagement_RestrictCommunication_2** +**ADMX_ICM/ShellNoUseInternetOpenWith_2**
    @@ -1306,13 +1307,14 @@ ADMX Info: -Available in the latest Windows 10 Insider Preview Build. This policy setting specifies whether Windows can access the Internet to accomplish tasks that require Internet resources. +Available in the latest Windows 10 Insider Preview Build. This policy setting specifies whether to use the Microsoft Web service for finding an application to open a file with an unhandled file association. -If you enable this setting, all of the the policy settings listed in the "Internet Communication settings" section are set such that their respective features cannot access the Internet. +When a user opens a file that has an extension that is not associated with any applications on the computer, the user is given the choice to select a local application or use the Web service to find an application. -If you disable this policy setting, all of the the policy settings listed in the "Internet Communication settings" section are set such that their respective features can access the Internet. +If you enable this policy setting, the link and the dialog for using the Web service to open an unhandled file association are removed. + +If you disable or do not configure this policy setting, the user is allowed to use the Web service. -If you do not configure this policy setting, all of the the policy settings in the "Internet Communication settings" section are set to not configured. > [!TIP] > This is an ADMX-backed policy and requires a special SyncML format to enable or disable. For details, see [Understanding ADMX-backed policies](./understanding-admx-backed-policies.md). @@ -1323,9 +1325,9 @@ If you do not configure this policy setting, all of the the policy settings in t ADMX Info: -- GP English name: *Restrict Internet communication* -- GP name: *InternetManagement_RestrictCommunication_2* -- GP path: *System\Internet Communication Management* +- GP English name: *Turn off Internet File Association service* +- GP name: *ShellNoUseInternetOpenWith_2* +- GP path: *System\Internet Communication Management\Internet Communication settings* - GP ADMX file name: *ICM.admx* @@ -1333,7 +1335,7 @@ ADMX Info:
    -**ADMX_ICM/InternetManagement_RestrictCommunication_2** +**ADMX_ICM/ShellNoUseStoreOpenWith_1**
    @@ -1370,19 +1372,20 @@ ADMX Info: [Scope](./policy-configuration-service-provider.md#policy-scope): > [!div class = "checklist"] -> * Device +> * User
    -Available in the latest Windows 10 Insider Preview Build. This policy setting specifies whether Windows can access the Internet to accomplish tasks that require Internet resources. +Available in the latest Windows 10 Insider Preview Build. This policy setting specifies whether to use the Store service for finding an application to open a file with an unhandled file type or protocol association. -If you enable this setting, all of the the policy settings listed in the "Internet Communication settings" section are set such that their respective features cannot access the Internet. +When a user opens a file type or protocol that is not associated with any applications on the computer, the user is given the choice to select a local application or use the Store service to find an application. -If you disable this policy setting, all of the the policy settings listed in the "Internet Communication settings" section are set such that their respective features can access the Internet. +If you enable this policy setting, the "Look for an app in the Store" item in the Open With dialog is removed. + +If you disable or do not configure this policy setting, the user is allowed to use the Store service and the Store item is available in the Open With dialog. -If you do not configure this policy setting, all of the the policy settings in the "Internet Communication settings" section are set to not configured. > [!TIP] > This is an ADMX-backed policy and requires a special SyncML format to enable or disable. For details, see [Understanding ADMX-backed policies](./understanding-admx-backed-policies.md). @@ -1393,9 +1396,9 @@ If you do not configure this policy setting, all of the the policy settings in t ADMX Info: -- GP English name: *Restrict Internet communication* -- GP name: *InternetManagement_RestrictCommunication_2* -- GP path: *System\Internet Communication Management* +- GP English name: *Turn off access to the Store* +- GP name: *ShellNoUseStoreOpenWith_1* +- GP path: *System\Internet Communication Management\Internet Communication settings* - GP ADMX file name: *ICM.admx* @@ -1403,7 +1406,7 @@ ADMX Info:
    -**ADMX_ICM/InternetManagement_RestrictCommunication_2** +**ADMX_ICM/ShellNoUseStoreOpenWith_2**
    @@ -1446,13 +1449,14 @@ ADMX Info: -Available in the latest Windows 10 Insider Preview Build. This policy setting specifies whether Windows can access the Internet to accomplish tasks that require Internet resources. +Available in the latest Windows 10 Insider Preview Build. This policy setting specifies whether to use the Store service for finding an application to open a file with an unhandled file type or protocol association. -If you enable this setting, all of the the policy settings listed in the "Internet Communication settings" section are set such that their respective features cannot access the Internet. +When a user opens a file type or protocol that is not associated with any applications on the computer, the user is given the choice to select a local application or use the Store service to find an application. -If you disable this policy setting, all of the the policy settings listed in the "Internet Communication settings" section are set such that their respective features can access the Internet. +If you enable this policy setting, the "Look for an app in the Store" item in the Open With dialog is removed. + +If you disable or do not configure this policy setting, the user is allowed to use the Store service and the Store item is available in the Open With dialog. -If you do not configure this policy setting, all of the the policy settings in the "Internet Communication settings" section are set to not configured. > [!TIP] > This is an ADMX-backed policy and requires a special SyncML format to enable or disable. For details, see [Understanding ADMX-backed policies](./understanding-admx-backed-policies.md). @@ -1463,9 +1467,9 @@ If you do not configure this policy setting, all of the the policy settings in t ADMX Info: -- GP English name: *Restrict Internet communication* -- GP name: *InternetManagement_RestrictCommunication_2* -- GP path: *System\Internet Communication Management* +- GP English name: *Turn off access to the Store* +- GP name: *ShellNoUseStoreOpenWith_2* +- GP path: *System\Internet Communication Management\Internet Communication settings* - GP ADMX file name: *ICM.admx* @@ -1473,7 +1477,147 @@ ADMX Info:
    -**ADMX_ICM/InternetManagement_RestrictCommunication_2** +**ADMX_ICM/ShellPreventWPWDownload_1** + + +
    + + + + + + + + + + + + + + + + + + + + + + + + +
    Windows EditionSupported?
    Homecross mark
    Procross mark
    Businesscross mark
    Enterprisecheck mark
    Educationcross mark
    + + +
    + + +[Scope](./policy-configuration-service-provider.md#policy-scope): + +> [!div class = "checklist"] +> * User + +
    + + + +Available in the latest Windows 10 Insider Preview Build. This policy setting specifies whether Windows should download a list of providers for the web publishing and online ordering wizards. These wizards allow users to select from a list of companies that provide services such as online storage and photographic printing. By default, Windows displays providers downloaded from a Windows website in addition to providers specified in the registry. + +If you enable this policy setting, Windows does not download providers, and only the service providers that are cached in the local registry are displayed. + +If you disable or do not configure this policy setting, a list of providers are downloaded when the user uses the web publishing or online ordering wizards. + +See the documentation for the web publishing and online ordering wizards for more information, including details on specifying service providers in the registry. + + +> [!TIP] +> This is an ADMX-backed policy and requires a special SyncML format to enable or disable. For details, see [Understanding ADMX-backed policies](./understanding-admx-backed-policies.md). +> +> You must specify the data type in the SyncML as <Format>chr</Format>. For an example SyncML, refer to [Enabling a policy](./understanding-admx-backed-policies.md#enabling-a-policy). +> +> The payload of the SyncML must be XML-encoded; for this XML encoding, there are a variety of online encoders that you can use. To avoid encoding the payload, you can use CDATA if your MDM supports it. For more information, see [CDATA Sections](http://www.w3.org/TR/REC-xml/#sec-cdata-sect). + + +ADMX Info: +- GP English name: *Turn off Internet download for Web publishing and online ordering wizards* +- GP name: *ShellPreventWPWDownload_1* +- GP path: *System\Internet Communication Management\Internet Communication settings* +- GP ADMX file name: *ICM.admx* + + + +
    + + +**ADMX_ICM/ShellRemoveOrderPrints_1** + + + + + + + + + + + + + + + + + + + + + + + + + + + +
    Windows EditionSupported?
    Homecross mark
    Procross mark
    Businesscross mark
    Enterprisecheck mark
    Educationcross mark
    + + +
    + + +[Scope](./policy-configuration-service-provider.md#policy-scope): + +> [!div class = "checklist"] +> * User + +
    + + + +Available in the latest Windows 10 Insider Preview Build. This policy setting specifies whether the "Order Prints Online" task is available from Picture Tasks in Windows folders. + +The Order Prints Online Wizard is used to download a list of providers and allow users to order prints online. If you enable this policy setting, the task "Order Prints Online" is removed from Picture Tasks in File Explorer folders. + +If you disable or do not configure this policy setting, the task is displayed. + + +> [!TIP] +> This is an ADMX-backed policy and requires a special SyncML format to enable or disable. For details, see [Understanding ADMX-backed policies](./understanding-admx-backed-policies.md). +> +> You must specify the data type in the SyncML as <Format>chr</Format>. For an example SyncML, refer to [Enabling a policy](./understanding-admx-backed-policies.md#enabling-a-policy). +> +> The payload of the SyncML must be XML-encoded; for this XML encoding, there are a variety of online encoders that you can use. To avoid encoding the payload, you can use CDATA if your MDM supports it. For more information, see [CDATA Sections](http://www.w3.org/TR/REC-xml/#sec-cdata-sect). + + +ADMX Info: +- GP English name: *Turn off the "Order Prints" picture task* +- GP name: *ShellRemoveOrderPrints_1* +- GP path: *System\Internet Communication Management\Internet Communication settings* +- GP ADMX file name: *ICM.admx* + + + +
    + + +**ADMX_ICM/ShellRemoveOrderPrints_2** @@ -1516,13 +1660,14 @@ ADMX Info: -Available in the latest Windows 10 Insider Preview Build. This policy setting specifies whether Windows can access the Internet to accomplish tasks that require Internet resources. +Available in the latest Windows 10 Insider Preview Build. This policy setting specifies whether the "Order Prints Online" task is available from Picture Tasks in Windows folders. -If you enable this setting, all of the the policy settings listed in the "Internet Communication settings" section are set such that their respective features cannot access the Internet. +The Order Prints Online Wizard is used to download a list of providers and allow users to order prints online. -If you disable this policy setting, all of the the policy settings listed in the "Internet Communication settings" section are set such that their respective features can access the Internet. +If you enable this policy setting, the task "Order Prints Online" is removed from Picture Tasks in File Explorer folders. + +If you disable or do not configure this policy setting, the task is displayed. -If you do not configure this policy setting, all of the the policy settings in the "Internet Communication settings" section are set to not configured. > [!TIP] > This is an ADMX-backed policy and requires a special SyncML format to enable or disable. For details, see [Understanding ADMX-backed policies](./understanding-admx-backed-policies.md). @@ -1533,9 +1678,297 @@ If you do not configure this policy setting, all of the the policy settings in t ADMX Info: -- GP English name: *Restrict Internet communication* -- GP name: *InternetManagement_RestrictCommunication_2* -- GP path: *System\Internet Communication Management* +- GP English name: *Turn off the "Order Prints" picture task* +- GP name: *ShellRemoveOrderPrints_2* +- GP path: *System\Internet Communication Management\Internet Communication settings* +- GP ADMX file name: *ICM.admx* + + + +
    + + +**ADMX_ICM/ShellRemovePublishToWeb_1** + + +
    + + + + + + + + + + + + + + + + + + + + + + + + +
    Windows EditionSupported?
    Homecross mark
    Procross mark
    Businesscross mark
    Enterprisecheck mark
    Educationcross mark
    + + +
    + + +[Scope](./policy-configuration-service-provider.md#policy-scope): + +> [!div class = "checklist"] +> * User + +
    + + + +Available in the latest Windows 10 Insider Preview Build. This policy setting specifies whether the tasks "Publish this file to the Web," "Publish this folder to the Web," and "Publish the selected items to the Web" are available from File and Folder Tasks in Windows folders. + +The Web Publishing Wizard is used to download a list of providers and allow users to publish content to the web. + +If you enable this policy setting, these tasks are removed from the File and Folder tasks in Windows folders. If you disable or do not configure this policy setting, the tasks are shown. + + +> [!TIP] +> This is an ADMX-backed policy and requires a special SyncML format to enable or disable. For details, see [Understanding ADMX-backed policies](./understanding-admx-backed-policies.md). +> +> You must specify the data type in the SyncML as <Format>chr</Format>. For an example SyncML, refer to [Enabling a policy](./understanding-admx-backed-policies.md#enabling-a-policy). +> +> The payload of the SyncML must be XML-encoded; for this XML encoding, there are a variety of online encoders that you can use. To avoid encoding the payload, you can use CDATA if your MDM supports it. For more information, see [CDATA Sections](http://www.w3.org/TR/REC-xml/#sec-cdata-sect). + + +ADMX Info: +- GP English name: *Turn off the "Publish to Web" task for files and folders* +- GP name: *ShellRemovePublishToWeb_1* +- GP path: *System\Internet Communication Management\Internet Communication settings* +- GP ADMX file name: *ICM.admx* + + + +
    + + +**ADMX_ICM/ShellRemovePublishToWeb_2** + + + + + + + + + + + + + + + + + + + + + + + + + + + +
    Windows EditionSupported?
    Homecross mark
    Procross mark
    Businesscross mark
    Enterprisecheck mark
    Educationcross mark
    + + +
    + + +[Scope](./policy-configuration-service-provider.md#policy-scope): + +> [!div class = "checklist"] +> * Device + +
    + + + +Available in the latest Windows 10 Insider Preview Build. This policy setting specifies whether the tasks "Publish this file to the Web," "Publish this folder to the Web," and "Publish the selected items to the Web" are available from File and Folder Tasks in Windows folders. + +The Web Publishing Wizard is used to download a list of providers and allow users to publish content to the web. + +If you enable this policy setting, these tasks are removed from the File and Folder tasks in Windows folders. + +If you disable or do not configure this policy setting, the tasks are shown. + + +> [!TIP] +> This is an ADMX-backed policy and requires a special SyncML format to enable or disable. For details, see [Understanding ADMX-backed policies](./understanding-admx-backed-policies.md). +> +> You must specify the data type in the SyncML as <Format>chr</Format>. For an example SyncML, refer to [Enabling a policy](./understanding-admx-backed-policies.md#enabling-a-policy). +> +> The payload of the SyncML must be XML-encoded; for this XML encoding, there are a variety of online encoders that you can use. To avoid encoding the payload, you can use CDATA if your MDM supports it. For more information, see [CDATA Sections](http://www.w3.org/TR/REC-xml/#sec-cdata-sect). + + +ADMX Info: +- GP English name: *Turn off the "Publish to Web" task for files and folders* +- GP name: *ShellRemovePublishToWeb_2* +- GP path: *System\Internet Communication Management\Internet Communication settings* +- GP ADMX file name: *ICM.admx* + + + +
    + + +**ADMX_ICM/WinMSG_NoInstrumentation_1** + + + + + + + + + + + + + + + + + + + + + + + + + + + +
    Windows EditionSupported?
    Homecross mark
    Procross mark
    Businesscross mark
    Enterprisecheck mark
    Educationcross mark
    + + +
    + + +[Scope](./policy-configuration-service-provider.md#policy-scope): + +> [!div class = "checklist"] +> * User + +
    + + + +Available in the latest Windows 10 Insider Preview Build. This policy setting specifies whether Windows Messenger collects anonymous information about how Windows Messenger software and service is used. + +With the Customer Experience Improvement program, users can allow Microsoft to collect anonymous information about how the product is used. + +This information is used to improve the product in future releases. + +If you enable this policy setting, Windows Messenger does not collect usage information, and the user settings to enable the collection of usage information are not shown. + +If you disable this policy setting, Windows Messenger collects anonymous usage information, and the setting is not shown. If you do not configure this policy setting, users have the choice to opt in and allow information to be collected. + + +> [!TIP] +> This is an ADMX-backed policy and requires a special SyncML format to enable or disable. For details, see [Understanding ADMX-backed policies](./understanding-admx-backed-policies.md). +> +> You must specify the data type in the SyncML as <Format>chr</Format>. For an example SyncML, refer to [Enabling a policy](./understanding-admx-backed-policies.md#enabling-a-policy). +> +> The payload of the SyncML must be XML-encoded; for this XML encoding, there are a variety of online encoders that you can use. To avoid encoding the payload, you can use CDATA if your MDM supports it. For more information, see [CDATA Sections](http://www.w3.org/TR/REC-xml/#sec-cdata-sect). + + +ADMX Info: +- GP English name: *Turn off the Windows Messenger Customer Experience Improvement Program* +- GP name: *WinMSG_NoInstrumentation_1* +- GP path: *System\Internet Communication Management\Internet Communication settings* +- GP ADMX file name: *ICM.admx* + + + +
    + + +**ADMX_ICM/WinMSG_NoInstrumentation_2** + + + + + + + + + + + + + + + + + + + + + + + + + + + +
    Windows EditionSupported?
    Homecross mark
    Procross mark
    Businesscross mark
    Enterprisecheck mark
    Educationcross mark
    + + +
    + + +[Scope](./policy-configuration-service-provider.md#policy-scope): + +> [!div class = "checklist"] +> * Device + +
    + + + +Available in the latest Windows 10 Insider Preview Build. This policy setting specifies whether Windows Messenger collects anonymous information about how Windows Messenger software and service is used. + +With the Customer Experience Improvement program, users can allow Microsoft to collect anonymous information about how the product is used. + +This information is used to improve the product in future releases. + +If you enable this policy setting, Windows Messenger does not collect usage information, and the user settings to enable the collection of usage information are not shown. + +If you disable this policy setting, Windows Messenger collects anonymous usage information, and the setting is not shown. + +If you do not configure this policy setting, users have the choice to opt in and allow information to be collected. + + +> [!TIP] +> This is an ADMX-backed policy and requires a special SyncML format to enable or disable. For details, see [Understanding ADMX-backed policies](./understanding-admx-backed-policies.md). +> +> You must specify the data type in the SyncML as <Format>chr</Format>. For an example SyncML, refer to [Enabling a policy](./understanding-admx-backed-policies.md#enabling-a-policy). +> +> The payload of the SyncML must be XML-encoded; for this XML encoding, there are a variety of online encoders that you can use. To avoid encoding the payload, you can use CDATA if your MDM supports it. For more information, see [CDATA Sections](http://www.w3.org/TR/REC-xml/#sec-cdata-sect). + + +ADMX Info: +- GP English name: *Turn off the Windows Messenger Customer Experience Improvement Program* +- GP name: *WinMSG_NoInstrumentation_2* +- GP path: *System\Internet Communication Management\Internet Communication settings* - GP ADMX file name: *ICM.admx* From 3ecb9770addeb51cca42a467134fe2e6379b5819 Mon Sep 17 00:00:00 2001 From: Gary Moore Date: Thu, 17 Dec 2020 15:59:18 -0800 Subject: [PATCH 160/486] Fixed broken note In an alert (like Note), blank lines must also start with an angle bracket to connect the content on both sides of the blank line. --- .../bitlocker/bitlocker-overview-and-requirements-faq.yml | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/windows/security/information-protection/bitlocker/bitlocker-overview-and-requirements-faq.yml b/windows/security/information-protection/bitlocker/bitlocker-overview-and-requirements-faq.yml index de4338a325..63b1488107 100644 --- a/windows/security/information-protection/bitlocker/bitlocker-overview-and-requirements-faq.yml +++ b/windows/security/information-protection/bitlocker/bitlocker-overview-and-requirements-faq.yml @@ -56,7 +56,7 @@ sections: > [!NOTE] > TPM 2.0 is not supported in Legacy and CSM Modes of the BIOS. Devices with TPM 2.0 must have their BIOS mode configured as Native UEFI only. The Legacy and Compatibility Support Module (CSM) options must be disabled. For added security Enable the Secure Boot feature. - + > > Installed Operating System on hardware in legacy mode will stop the OS from booting when the BIOS mode is changed to UEFI. Use the tool [MBR2GPT](https://docs.microsoft.com/windows/deployment/mbr-to-gpt) before changing the BIOS mode which will prepare the OS and the disk to support UEFI. - question: How can I tell if a TPM is on my computer? From fcbe8c29cad3bb7dcb615c3313ba6ca0c0b8a194 Mon Sep 17 00:00:00 2001 From: ManikaDhiman Date: Thu, 17 Dec 2020 16:03:13 -0800 Subject: [PATCH 161/486] Fixed build warnings --- .../mdm/policies-in-policy-csp-admx-backed.md | 2 +- .../mdm/policy-configuration-service-provider.md | 2 +- windows/client-management/mdm/policy-csp-admx-icm.md | 6 +++--- 3 files changed, 5 insertions(+), 5 deletions(-) diff --git a/windows/client-management/mdm/policies-in-policy-csp-admx-backed.md b/windows/client-management/mdm/policies-in-policy-csp-admx-backed.md index fc369bf835..0d38a8664a 100644 --- a/windows/client-management/mdm/policies-in-policy-csp-admx-backed.md +++ b/windows/client-management/mdm/policies-in-policy-csp-admx-backed.md @@ -322,7 +322,7 @@ ms.date: 10/08/2020 - [ADMX_ICM/EventViewer_DisableLinks](./policy-csp-admx-icm.md#admx-icm-eventviewer-disablelinks) - [ADMX_ICM/HSS_HeadlinesPolicy](./policy-csp-admx-icm.md#admx-icm-hss-headlinespolicy) - [ADMX_ICM/HSS_KBSearchPolicy](./policy-csp-admx-icm.md#admx-icm-hss-kbsearchpolicy) -- [ADMX_ICM/InternetManagement_RestrictCommunication_1](./policy-csp-admx-icm.md#admx-icm-internetmanagement_restrictcommunication_1) +- [ADMX_ICM/InternetManagement_RestrictCommunication_1](./policy-csp-admx-icm.md#admx-icm-internetmanagement-restrictcommunication-1) - [ADMX_ICM/InternetManagement_RestrictCommunication_2](./policy-csp-admx-icm.md#admx-icm-internetmanagement-restrictcommunication-2) - [ADMX_ICM/NC_ExitOnISP](./policy-csp-admx-icm.md#admx-icm-nc-exitonisp) - [ADMX_ICM/NC_NoRegistration](./policy-csp-admx-icm.md#admx-icm-nc-noregistration) diff --git a/windows/client-management/mdm/policy-configuration-service-provider.md b/windows/client-management/mdm/policy-configuration-service-provider.md index 13cc28a89d..addca8a9df 100644 --- a/windows/client-management/mdm/policy-configuration-service-provider.md +++ b/windows/client-management/mdm/policy-configuration-service-provider.md @@ -1250,7 +1250,7 @@ The following diagram shows the Policy configuration service provider in tree fo ADMX_ICM/HSS_KBSearchPolicy
    - ADMX_ICM/InternetManagement_RestrictCommunication_1 + ADMX_ICM/InternetManagement_RestrictCommunication_1
    ADMX_ICM/InternetManagement_RestrictCommunication_2 diff --git a/windows/client-management/mdm/policy-csp-admx-icm.md b/windows/client-management/mdm/policy-csp-admx-icm.md index fa79b7acc9..9c053a6a02 100644 --- a/windows/client-management/mdm/policy-csp-admx-icm.md +++ b/windows/client-management/mdm/policy-csp-admx-icm.md @@ -47,7 +47,7 @@ manager: dansimp ADMX_ICM/HSS_KBSearchPolicy
    - ADMX_ICM/InternetManagement_RestrictCommunication_1 + ADMX_ICM/InternetManagement_RestrictCommunication_1
    ADMX_ICM/InternetManagement_RestrictCommunication_2 @@ -762,7 +762,7 @@ ADMX Info:
    -**ADMX_ICM/InternetManagement_RestrictCommunication_2** +**ADMX_ICM/InternetManagement_RestrictCommunication_2** @@ -1092,7 +1092,7 @@ ADMX Info: Available in the latest Windows 10 Insider Preview Build. This policy setting allows you to remove access to Windows Update. -If you enable this policy setting, all Windows Update features are removed. This includes blocking access to the Windows Update website at http://windowsupdate.microsoft.com, from the Windows Update hyperlink on the Start menu, and also on the Tools menu in Internet Explorer. Windows automatic updating is also disabled; you will neither be notified about nor will you receive critical updates from Windows Update. This policy setting also prevents Device Manager from automatically installing driver updates from the Windows Update website. +If you enable this policy setting, all Windows Update features are removed. This includes blocking access to the Windows Update website at https://windowsupdate.microsoft.com, from the Windows Update hyperlink on the Start menu, and also on the Tools menu in Internet Explorer. Windows automatic updating is also disabled; you will neither be notified about nor will you receive critical updates from Windows Update. This policy setting also prevents Device Manager from automatically installing driver updates from the Windows Update website. If you disable or do not configure this policy setting, users can access the Windows Update website and enable automatic updating to receive notifications and critical updates from Windows Update. From 1ed3377fb1b1e7adfd433197b5fe57c137be6940 Mon Sep 17 00:00:00 2001 From: Samantha Robertson Date: Thu, 17 Dec 2020 16:05:52 -0800 Subject: [PATCH 162/486] Fixing image links --- .../microsoft-defender-atp/deployment-phases.md | 2 +- .../images/phase-diagrams/deployment-phases.png | Bin 0 -> 5744 bytes .../images/phase-diagrams/migration-phases.png | Bin 0 -> 5711 bytes .../images/phase-diagrams/onboard.png | Bin 0 -> 1960 bytes .../images/phase-diagrams/prepare.png | Bin 0 -> 1713 bytes .../images/phase-diagrams/setup.png | Bin 0 -> 1508 bytes .../mcafee-to-microsoft-defender-migration.md | 2 +- .../mcafee-to-microsoft-defender-onboard.md | 2 +- .../mcafee-to-microsoft-defender-prepare.md | 2 +- .../mcafee-to-microsoft-defender-setup.md | 2 +- .../microsoft-defender-atp/onboarding.md | 2 +- .../microsoft-defender-atp/prepare-deployment.md | 2 +- .../production-deployment.md | 2 +- .../switch-to-microsoft-defender-migration.md | 2 +- .../switch-to-microsoft-defender-onboard.md | 2 +- .../switch-to-microsoft-defender-prepare.md | 2 +- .../switch-to-microsoft-defender-setup.md | 2 +- ...mantec-to-microsoft-defender-atp-migration.md | 2 +- ...symantec-to-microsoft-defender-atp-onboard.md | 2 +- ...symantec-to-microsoft-defender-atp-prepare.md | 2 +- .../symantec-to-microsoft-defender-atp-setup.md | 2 +- 21 files changed, 16 insertions(+), 16 deletions(-) create mode 100644 windows/security/threat-protection/microsoft-defender-atp/images/phase-diagrams/deployment-phases.png create mode 100644 windows/security/threat-protection/microsoft-defender-atp/images/phase-diagrams/migration-phases.png create mode 100644 windows/security/threat-protection/microsoft-defender-atp/images/phase-diagrams/onboard.png create mode 100644 windows/security/threat-protection/microsoft-defender-atp/images/phase-diagrams/prepare.png create mode 100644 windows/security/threat-protection/microsoft-defender-atp/images/phase-diagrams/setup.png diff --git a/windows/security/threat-protection/microsoft-defender-atp/deployment-phases.md b/windows/security/threat-protection/microsoft-defender-atp/deployment-phases.md index 6155038acf..71da90cdfd 100644 --- a/windows/security/threat-protection/microsoft-defender-atp/deployment-phases.md +++ b/windows/security/threat-protection/microsoft-defender-atp/deployment-phases.md @@ -37,7 +37,7 @@ Each section corresponds to a separate article in this solution. ![Image of deployment phases with details from table](images/deployment-guide-phases.png) -![Summary of deployment phases: prepare, setup, onboard](/windows/media/phase-diagrams/deployment-phases.png) +![Summary of deployment phases: prepare, setup, onboard](images/phase-diagrams/deployment-phases.png) |Phase | Description | |:-------|:-----| diff --git a/windows/security/threat-protection/microsoft-defender-atp/images/phase-diagrams/deployment-phases.png b/windows/security/threat-protection/microsoft-defender-atp/images/phase-diagrams/deployment-phases.png new file mode 100644 index 0000000000000000000000000000000000000000..4d2a4fa94646c72b26e978c0c02cad12efb50a7f GIT binary patch literal 5744 zcmb_gXEYo@*A`JDSUu5+7DS2OdssCh(R&TDi!7q|MBhcCTU{h<^cFo>y$8##7Q|w; z=-uc2`JMBf@7Mcd?#wy&oS8fK%slr#PwY#5P4Wkf5Ag8t$bnkwuki5h9o?;MNr>(& z&N$5dZX)&6GK1jZkx~C=+?!koxx&Mv=LD*&y!Ol4frq{`M)~)#MI%M;-LkUua(Qj1 zIp#n3@JaXC1UsYF`Td9%I-ZY?MUV%vueqUL2~RW`OV1rR5M7D<+yyEUi810E^ahUR zJb^vBC01m+30X-hZhcWIu4 zmkMK$T!?=7b`Z81u(I5>N*BZ(1)yeyF7^y_Mgdg2C<);JRgzddT5nYn4lewc zNhHcDymwAcy#JQ-id8I`AiS$f^*aLLXziF39v*HM`l+m}?9TFuN=x(6(9qOg#AlRd za)0*MCi`C@jsMjr8Q{adP)dgsq1Le2P~JmqDCcqfx_0oJ<#V%J`$5=R%>Qy1xs=(V$twhOonSTsI>?aI6V@EUapyPG{oX?I z*2(pacgIADf3S>=ZIUuTlzmC7Co4w0rGPxucuz+g4ZEUY$&-ze7X_T0bhIvz-~$sa ziIBg3AHZ*~l+I7v*G@0XmH0o;kdv9|yC@SK9`Rwuf%@S|x5phJTROwPPGRJOS#8(P z<#!DPwZP#Sx93WU7xWNM-?OrT-?`yl>&D6|?G=H+J?R;d*By*$Syp>u1}={u$PPRP z97gU1rycC*QzRHo-6s*0j`_JXm^spaCJ`5)JfUq~c0MQ%59Zt8;_Vz!q!Be?-?E^D zyEqfZtW$Ux3}vDHbHP3&%7=eo!MFLlyI`|MFr1c_Hp2-SN5>Hi`9)a$OzcN7P|$!W z^om1Zsg{5czD7`o^bd!H-a@&Z;W42yK4#4q6(ZgEonwm4ZiTZ8%B&PhkjAdcxkqjha?V%s?2uULDvH-=jz=}u4GekLeG%12}nzo&)PTx;`0WVdv|w| zjY+!RIKYy6{66%9w_g8Xq!CO_XxOzI6Qf{}rEOfUnwp-@4Cbn34ifgl@N?!e*~sx8 z3!h{;)u2>Y;>>Z?YiyyW*x=yc8rR=n&)Tthp^BS6!-2P*vPypZ)ePiqG-$T=h1cWe zGam+1W1y(uW~CC5$w_+CDS3B1q9$T%E9 zxw+UDSjy6;X+?Ms>>uR!Cq+|3S-`(}tYLNsgsA=j4vx`Kd_xjKzo)pRzglDexw3z0 z{S9620%bBbL|z!+v9>8t*=j%N?&0Cl>iV&mf)MV=a%6K{SaL{n_~-P#BJFpAg?E^S z5rmwaT;{~%o}pFy`$NpZX>E$T{YFZl3KkZYR~8oT>dHuSdwSM`)5#K@7qsm2v(eft z{P(_1*@gQ1`%eb4>s^g~(_uSR4LI*?0S551FOx6QlE@C)&ROmWxeXAo>@lX+vdH=N zCT{;|jD)o|A63mz#x-BQOWv=UscNu_auaPXfe~)L zWdzSSy`DqAeEp>Ixb2Bey*!%r5#geg!l(LxRZohFS_P>r zXMU$gea@52B1}>GN3a(`NnKj&+X-3kzaM==;UJ$ z;vCG4cN|t~AG*t)h5mld;^-{6K|T%9TbE6Ter24izBs*qT?7O_eJa?0u2A0#Maw>D zxt@6GWgV;z`{X)5v_}kCL%8@PyvP-?ytkNI z**fd~BC5OJb2AB1xF%RT`@-4*gk^$qYDY+9Hb8u` zVZ3DwmZ>{Kh#6bDC4Rqxsjn+E!lUDA6>Dwz_HP=Q$%35|us5H`mj-FpPvBS3M}X$I z-QAI*K_vTjFUv7I%+*oq3V6-4ixE{Tsigpjsb}JlcEX!z!b|Gv`946^ne8gP97hw8 zsLWqKBXMRZ;GBh>g~4iwkgg%F-r|!!>u}@Fy5||f^TsO%6iJQWzHtjgXME`+ixE5M zdF&Sh+BPWV{7d_m_j{V1+yeV&uk_2&#v7A{4zFJ%QvxR+}Tr(kFx&AJOYwq!4 zQpDrECCJA*WNZ&KFQly77C%kG*Q0k?jLWjqK3Yt+EBQ;rTX;F#xaEHd^V1w3UhV{tdd zChEk0?p3f|p%>lJtCTx_({87OAIt>v6#d*{A1Xi^H&d4--ap}S|0iZhHb^}9 znPut|X#13GkhbFY!8eqBq66aJRLj zz&0J;H|ud!b)eHPL+hxqfdU&Csf7{Z->-Fyvtu zX>!Hc?rp}k7LDsFYg76_|7@E$OEA43#mhOoCWhVbV?~=Q9^2jLO%!j@RfQZq-w+#z z#Rn}%%x#UiPeeHyE3-k*6)@=25K-qe?@l~!>msNV^-fFfz;c=8=bgD3ksM(jG%#8L z$3WyPJ1w&2-{4}QW^?3mRol@-EX;nD^Jl2bGOxpVATSRtkL4+;UMQF(DfrLt?XD83aN4!cATOMqp^!=z)fA26uX?yjk0wRL+yuU{|VZ?k_h^&Ckm@_1em zxnXbUHG}PBM7bh=_3CThvNA&UMw18k-s_;i(0<~Ox^~kWLF9KyZl3k3;qzn?)}`yu z79~e%5ntMbGq9`+Xs!LQd?hLFBKvpDp!gd852FZ? zsCRQ2@5fe7Ry!z&PFqU6^P%e&WOd8jc+Hte@9V(=RyYK5>$cd{ev4shQ zOoKkYG6Uiglk)Ms`d+<3zGr;xJP&&Id#wwHgMixiLi3UA0nvvn)I;-=c9H_nZ5?vjO1!_N{Nm9rSxp0*UI`bUei=Wtn zGRsg8cFwj^dGCl(h#E*eg04wfSy`>0qEILuv&TgNqyt3!>yJX{j3Gi{ym;2(VlJco zo4-r{RqZGR(cDw^e98p zkBrD?!faL~P4?4=X)4S%(26zz1pPPbLnL8Yj*1`pQX-q%+{0u4%S(?fa&Wn6H13l) z&bLDeMB(!v!igvb6{x9mAOJSHQ%9mQ_c{l2)gnSEe6W){WqI)5D2>m8OV)9BN>GEY(AYQt4zWiyv+<|0~=0(|nn_ z{AE68_|dU6RApZ(_~(>-9t3<8l!;6zrbPdm>&pR96HU^4m!_5%Zf<}5ddaCjWDvy!frM6mhdr1bcNy;$?Vu!ku!`n#_m4 z*BNvxQ0Or3tTv5;0F30tkyUE@99vE4=IDSWbzNini`CDy?^<{p4})p$^Z*|J@KQ>$ zQhjnZt6-A^te&faDUiWuvzlc~_#z*;j#fS+my++uOCq!zk%9i4oF=)lg zd)|Qe+ui0*HvTm>V4jHRFC0h{ky+bQ?WNd%j9g&dKG+&<5|RZ^)XX$B#5q z!n+cYzzp~OD0RA)rw{F0orcoRd~e66n=<07hlPO_r~6-|CLnh62+>7#)4m)ni*b%D z-%w9puu=L-&?Tek&?p$(u*{QfPB&)TSSn}sFS7md)$^3Sy1eFh=+U9|MXqP=9kvKx z&y^n1F{#?O6P&dG)%VfQHu%?LKC1lmk%X}eIXecqd7fmUEml#s%?mY!`y)zS$txsY z_arVVJ5K(5xqrumz%wxUgBYwpB%y&oZqj_jQ!pKgEE?HyU|%^0(KI_a-?yvoejh!4 zyTLSFQ_m5kCS^2E>QxZ>)~&JkPxaV&mTH%gfdY5Bu#Nsjm2m5RgxTtqV^p<*#FFQz z$q7ziZJ zRW!0x5`L|hq+6%l0rN#jFEOiM=NA z&N+_ts!l3`=zB!~w$*pmf$Ihg{V5+0)zZuB#z}#A^IrTLcH}7>zg1oqu@Hxgp4kK+ zzcJssS5#mBhT^V(XhNBRo4>}t9Lz(;GQ;zm8>V|O6WlXadiD!bcs-WH39n8NHhd%H z{H46i_;*;>6c&~x5qP;;ANXS=9tJdhM9ZL?m6bIN`B`77MleMPll18T2c}rrf-nnX zukIQ9>0pshO*)Yji+*RmG`x{Lm5|&}vlAK<5HNbGg6uM;S%6%H^h z$fr>y86aDBZoF?<#JM)8_sj3$U4e-zzW;w}n4S63)FeDSJdU=u7a45}fw5g2d~L^@^YkQ!>}k{0QXVTP0* zP>>E^{_DH_F5mTDoLJ{voU_h8>v{J6ebUiVqo#O3K|nx2t)c!*mw(5H^jH6|mj3&lonn)&e_3w@MTiq3WH!DAWrB{^Rd$ z_NL6JjBSRK|G#G7>gpo>uOQxVARXIXOED=($%|^pwLh~J-tU_La5MEXAv zhHeOmc-@}OL#8u!2NWK6PbpOn#G|7{6D&}SKn+xm+?d*o-sm}O4ks=AR4x&12^GtT z6IO=u`&(>9?;g5BxDT~X-<(gUmq|!^m^@PukFB|?e^-;Y!8fm?uSy#U{CBm&e3%?{`CJvH{{ACiY69)wgnqXg&m`2P+->aj-R)5ETsJZq`jVmVW z!ksWT+=Fta#}DR6`x(N{vj6e_!zJFpKAfu+PSga54sMeG9%<85QzO?I0Ow}cyPNGj ztXF4l9p!WLLh$aJp0IVM$n)&$!8liO@?x^e40-$xi;YVJ!}{(|u;>MyXVoPbuG@xh z7@CxS3gwp}wroG`7L#blR<~P31pq=x$;D5NWNMqFgJSa7bM3!b&|$; zey$CQXTja=wL|5=@u_{h{kvC>2PZ4;651{N`*fiAt+w{{Ta>ZDWRd3MK@(pr<2abv z6o`=+f1bf}h+Zk?s69mTKiuNs&k-4+47v&gi%IV4U0t2=Zf`XWQBe|h$a_vdtL7*6 zmpc}c$g%FBpQXx@|4o~}Z8qe>Gf)jjKhTn@@4vEO3&}*LB*=K8XSgbO| zX2=G#wt;g{s1f0_xc$W@&qep3sW-solzs%WsJ|WwI-&T|DH@CGdw|)QK^VL&r05hw z?&lBK8yH(3GM;15<%_kKpu@%3P14mEd2F>6LZA|h#cEAb46stj4#;kG?5G@tY7Zlp zXwG!3>AWWA=Imz3@3NY!l1HZY_mZW^TnGmSFUA+c7K||%Okq(`Ut~yB9gnd5`auLG z^XG?3jny>CvU)^1CEYhQH8to{rHr%eSE&m75r2z_I108)LPEfPuQ|6K!V4d_wR|h2 z_iA<28+qc2+w(Jx>zGr8)ePC({qJ2mI6ibxnWh_jr&c)JndmlDe7Lh;tI{=S*uCIG zTiTl@94xG^HmPo7(w9u_T{v;_WBBkIJX%yy<&At{rUB=CIt7|i5^)bY`;#T5{W~zv zGKY~sLys)J{YJY7c{+M2r2k-V&U-&9w)Sdm-#R1!S>96sV?+<^sZ;O{t zvmiX(kocx?$;SfS(ofF>x&fx$o;$odJOeQV9J- zFC@fkCW{&;ge#1anfbv%ozk6`$3X%UzLb9SH^R4<1;26T!i^(kYR)dA6N_{8Ybe20 znrP`Tz0#`Y9K{y_SuriXl>&*Dq}q9{t7$23F4NA0yEE?IETLZ_((h2p_S{R4Chba# z+V8k7k|FQXDB|lSo%Fczb&O%F^Jeh5%+Fm#S>|l!@qM8QfvLBaOI38{tHxfR^!ICV zoX(z@Q~-NAledzKtA?t-tL%a|K-h2Yeg{79Uo3$XT7jOI+_6Du#WNq=w_nBn+g~ca z*W-VxU0D2!B=237!EuM?+dC~R1#>RJN-&=Ri1-!0r_E6bEkl+p{xNk(SLu&IU9hVe ztFvsSrfIL=m=Uv%_xEO>{^k7y204*f=FYwumW*bJglYPBHeP?l$=cqCpIo2nXql1= z|2~PCUK3>Zy?z~=^l$5fwRxDR@oMbB5RFf!ZDpjr3VapKHmyq8Xb7l(pNgtr?Eek= zj(}F|TW?14^6U_f^`0<2W2}^qNb3%BG%$85mld8%jp9}K7}875a$szd4Rj*WEvZ9w z#u|!G%J;*9lB6DL9lglUk4MQJpoxl-J4?ETdvDeW{G+1`n>`{m{98k$xwRKV5p#Vv z19}CEM0mbQ38!Kf8$OXO2(xNSC68xzWm|1enj~OjkHs18Qk6|cLQw@5j;+gOw`z4{B#Rks0oLJSSOW*#0Pi=YlO+x`? zNwl*F)X&+sg+fYLs3q^Ce1F~C%!!{78h^RmT4ITWUpn-$m{9}>aF((;8f;QWM@{rW z%vYJje!IjY9?~0*RP{YMxx8wx8yH?XSyS0}I=EudT5*ZvQdDGgFm( z;hxhH2xjPH{bVg>>FEBZ;eGhpSX zNt-ICMPYZF$Q@|^@h(o<8HG?+2F8yxgGbUR!m@~`L{NlI)z>*)QIwO5 zTUEF`<50@5gOQHTr0Ic>=MQ@26-l_Zfbs@)4_J#k-2`j4bykkKZw5xX+m>l{^qZnw z`BtMOtCZ5PjCb~)8u~0}U$SD0Fc7KA3c&;wv%%IbD>6R&@(nev@T;vru%T4NfV{YWo^W&$JCnt=cWQDqt!%my* z5fQyv)c2?rWuja&`N-J?2Y!^ozp`1i74Ob4NTO%1hzb3Uw4;Ok%^#U6UWn(%%H9zZ z5wabaIl!*B3o&YbtyamsdQd%2>9d$K2Wqf~^Dk;%s zC%)n|GZMq{R+_1;QUvGFRAz*HdDp;O@ta6ewioqRAA?hMk27gbWhSX$MUyG@o6s^Q z%8dzFv2D-&-L@R_sfjYAz8zP7diFTsdxrRflAk3!f_8uu$L8WLeIV8QZW8TllKgXMM8geBEiy;SmswU%(#=#hxBs|NjA(H$N7}d;|BL4y z@D-&+f7rV$Eh??V)m6(9QK1}1NSAQdD!GfLPA2t7eb#TePkezzlE9X&3ufE z`J&z_)4yrA#wu?^IMZy#c>_>@^Ollr>-;}S+`&^IJ(Sptt``Uq021+x%WY{E*nn1Mn_LYkGw{+ARg;KXq&w3 z4^6hOYP_~}-*v#+7#K;xk;%+ZA0x`CU+g>!q{8WSng9^Y9?u$A@y}i1_i4nkLLZ5B ztZkOR>dC=U_R*y!x*1MRqv|oYqyvy$XdNfJ+aSHT2Rve<`8-2}4Ia5O0A^!j+qmQ4 z=vatO%Fm=tpw=4_zY;9pFecC@XeHv;&Pt-^*ZP5PSYj_}rH;tSH5c6P3@?4{Vyj=ZfGn9_J-K51kHTqdTqm$)6Ct;K%L zHSr`RF`-*!mr@38ZQZq@`So1=p1p&EM-QuUtKT>v$kkO$`RPC~M_lX8@lB?U-kq z>R*dIfAJz3U0*MYImHE5Zh8+74_|d~hFc@cDFbQ*p5InSKssTsCi>M?tnZSy&v)d_ z)NAeZB}{`W808~ui6p1QDxh+Puji_*g4)94GH+Aq9+lD)x5&ESq2R1bY2sf1P*ZrA zR;2b69e;S-BMA#=f9BdfFq>6oey}nBGib*jP1oa?UBxf&=G_s(vkoG3^x0g9+q!@ASz37+& zRiz5ZbNeBnjkF-rSuT-9;!$f3wE%TEd?wE8dyGp%NuWhTHodYsDjl8EoiOA70~80; ziIisw{3uaZ1o{?mSJ>u?y>6$2PT!cEu>Ym4<*@4)$KIOnysvVVREV~B-C5zw|Jk~H zHYB@=oxg|1j@*{RQ(2uM4V}|cVa%xM3zou)&9H7f+0jBM?bbE->6JPZc2D%zM@jUs zE~kz3qNb9TmS1j`PL`Dl;b82_3FCiH_z%~*uXS~$pBm1-)#%O}pHDUQ|HU|Z8et*m zDWk^=3RgD>TSZ^9D7Sdb3UJr&yJJ_rAikBor?F^2L`OKX&%h+y*irCal=Gjt{`5t4 z!ACaW+yBMd&L`5bbtI51;=a)hZTjX3IJapY7J@JS(Uois~9I8#kEZ;0+h!6}U~y`Yh*pvToPsYiFYVs;l%o=%RJtz=`+AJsIDF**IN&JAkjna#i4 zshC=MxNyAP6y)gvQ*W7m-d4k`sezLa#t}Jn{bhS3J)J1$I?D+%`88aB*fW_)EA?Y< z@5qq9L4IpPd4^-rOOr;oTn0u)6;Wn>k*$1XQx_7whG~kE!T+53$JuS3xItmC>cb#M zVm6r?PH76?bE9$zXvBNRhpV7wc~-z>WU28!AC`|}`&sP**O_Wzf5+7zX7`2t4F80$ zGre>#QyLo=y}_q84`&&@m>fmWM6;#Hh2PYXmsvkG`TNnOD2F~F92Z)ReL!9rG%(9R zn+3bDZ@LxK1w`;l1oO~?&0_8-e93F-)1c#Fas_V~X5U8x5aj(Xw7PFvmt!~Kpg4z~ zj(IuHNcY{t{tH#i^j?><5z#hv-0!@uhys%Fd& zM$E-We$>iwEYbsIe%XeL_VD%AD8NmJlR`{do`7Bz?|vfXldbpKpenvLPB0(}k6Z2p z#N3MU#QeNHlj2Yo1Y@u0`p(3j3xluscvkat$Rd;*aF z&!tZwYFyJB%YVT0v=5%6DtDL2>UYP*P8oXYsp_o+?#umqsisLY+N~_e&~`*Z%pDIkt1dwmU5@6>nlwrhbO7=-g1SSi@3YQw{Q92XzCvJ zUv2M?7k|8271#>rAtYV!nchZ(glFG63J;^RSOb0_ksrBKwTzv8x+icrPGq8mHJSAJ zXEWB*Z^t6r>ZW;l*>`OsO*11$ij2FbBUd^08Cc9g;*@Ad;D~Yk>L_6v^rzQ7kQOj7 z_sNbBdUNyDwjc8N1VqHHX}@nS{eC!)%c|{`J<5VKl!jTM?iEPlqGgP;!>wrry$9J0 zXGm$}=S^ys=9inc8J3oo_U&1XMr@5&HL7RevMd&c$5rrSYG%}GUql@SnrljaxPB9g zUSE3opAUF?9;LBuT}>=zog3}oH6a0@0rsu>q|e-HU(T90yJ-|(o(51U6}I{wfz^aI zgS)N5))EN8^5qu~Zz)qx?@Wc!`EyHv$;N9MXJR#1Mi$B9&O(=##TMPhrF@cGZDP2Z z(0$h)ho{0LEJNaNh(Vy z;1frr(}7*)`+zbu8;6IbC0eMoMJzxs_dg(+PWOG-g}kv(#z=!PmR2hJOA2dFS^#=e{JR}V7j)5Lm=^-q^z*c|NL92q zYEO|P6+{>ASB5aJG*|pM(-9V)nRz@R^HmG})EFysds2NPm;LQv(rt)4x>fpQUsYP6 zy$p;HL~!r&h?Yp?b3puW$+=o~xG^+5+|@?t7$27|2Y@W~{u|NNRaMIR`V-4nE@jv# z&h zfsrNb6*c+d_0Q>1R8z@sz@VY;3~HdM^4WOFv(UW*3gRz*Vi9k`hde3gqQHH5quqPr zUW2Bd$L4$}TIL!gsB!i&$$jeWc-7a6eo=GhwcPrjw$fWE{XU(4T$ruPZy}E7TkZHE0bOM13mltP$_NaN%2Ov*a`;S zo0NUHy_@E88W+b9tz|F>Ii4S5a0F_^T_Il4_Ek2+)us^kMi)1{$K_63-V1qdeH2V4hv8S2&w6{LpbYL(0ZjE zgj3^p=vP)_akfZ>288~Juyb(ej@7$+j8Q#2LXKV8L_>C?`K6)8eKOhw%KkwVW))CC zX%am0IbajTLUZyF25|c6#wY5;hU+*J^d9o&pI~K}t&% z^5i5^nXocG@B4~7DI%a((jBpo#gfhk!k~8b4~UTWX%yAEqi1fdnHPO+(1pQm4Qt+h zj4f8)>kkjlhDuGh--uug{$?rI7o(3Gkg%9$_SdfgPR^Fi>>bOiKE+w%`1ssp=kdn9i#5c*XH_7%7b$q&@2t@PB(v^$K z^G}Z(EashMshn7=C6B&rX*tiS2Y`DeB_*h53$nm7&BZ2z+5pG~&)e>kYHDiPhmqwd zZ|BoKcijJUMN(=he-V_GoP&Z!8opP;UY>wt%=p&;V`k6q@_GL0YAvjc!HAno47!CJ zk`D9_XLEmQbAF=&of6d-T{P&Eg5jd@#EgOL;Gkj81M!_N1GnC+fEwv3LrV+?cY+*T zR`$i--c8o7xw$#+xKK2*^W%L8TC=8~Oc&x5;+68ux4ZCI7*z{CgkinX-}L|E7ck58X!e2RyJr@gg3 z=Ihth5#@FxG3L{o>xS;D*7byYJmB#Duk{%}w{1UBb^MpoeRnRi?|y`sg3mm_%D_>Q zbE~3;v}&Fh@~&=UL7PtpX-^4T!%)yOD2iu@5(yOcn@iI%l@~Z9y>V>cmY0VVdU?oq z-A2~)i5z2^fPKmfOhBI3@EIw9l6!Ye-#5$=rt{9$IX;h64}VS0=qU0(j(|7^HJ+*P zLhI=;MCy_jk4L+Ih@^EQ)_=}4w50Nh%z$6JaY^1SvLS6otxFjesD0^PRr+Xb5)IPR z(K?4xyxB@ XSz?>75Vz#;3%y)s#@0B%&^_iqEKr?r literal 0 HcmV?d00001 diff --git a/windows/security/threat-protection/microsoft-defender-atp/images/phase-diagrams/prepare.png b/windows/security/threat-protection/microsoft-defender-atp/images/phase-diagrams/prepare.png new file mode 100644 index 0000000000000000000000000000000000000000..1001e41e0dbf403ec43cf619766ba4096db69553 GIT binary patch literal 1713 zcmV;i22S~jP)h2TO9oLUKx;8<`K z!7YUz0-TC_K+sEoQ$bvkD-{w5sZu~u0p-xDR6x{^3rI$4AQzCyhf|dT<|{E!LiL|8 zmYu}*u0Pi6xAT)$-jA8_c>aDfZ}-h?ireizB?Vi~DQS751ZIvBm^n&d<|u)gqXcG- z5|}wkVCE=+nWF?|PFk#gUT$tKrKhJ`ycY3kUXn>I;A?G)&8)fNnEh*Ii@eh9+Knk-;sQsA_{a149mTGXO|xD zz0m!ww|?KG-kE=tUIwCD;IHoP(e6>?vwZq~-JrR(19SX(3!qEj+bf6k=ac_}UbkhW zQg7`gI{mIRWH~JpPpsbVhM`N~@#WxSZrSAwa&=uH$EP`A%fXl&&WbB4Dkvo-#kVyz zH5uJDEYK`4#@+zllC(1tdNK<)}%i%r4#>PfEJw2t>)m2(tT%@+PHZJXM7@7tC zYa_V0z_oo$Ba0r*^>(_wn$s2*7E*0(EzQi#XwIW}Ny46F!Qvw&CnraA*+oS~zOK8w zyW7{D*VWb0_V%{0dK|;@kw;#W3=9nT@}MlF2PhLm1kxg3u=10E#0mUdyTEApiHQkn zZEX!Wx3I84VVw08%;bD!k>&G>T z92P>ApA2ZW;14oWWBPLnvd@Q2Bb_X4{r&v`*QB@r76mb6T5Pb^U?499 z^38+}fzMINyRj45UYZ%RvZMnBiw8qPL%w}F>j~)060yNjVZAah_N7%vQofnd)kRlC5i1BI{oGcg~O}bV04rQjNMEr%#pV(B`&_Hwx zT>4%r-MN|>k;o8tr15=owE%M>4)`M`eB<6h$j6rw%c%6g`><_G(GA>eDS{jw*Wr*;hB08cKIHpgsFh1wz zUNH5V9%wNJ{=9LXjr<1Cyt7&Iv$9FC(D@&X&C@4s1 z-GZT3Ht4`^w+Dy|aO`k6OkVTIv6R5;>+9kZR@>9l<2ye!HI=|x#TOO=&&|yROz#P{ zNno+Py}i`Y(cwF%Cx0?w>7^^2ohwPg;=%Evxw$#OVS;tf&(Di}*)7A-^8bWqJvurn z_Cw`QMp$^!5TT}~M(oed&iaG{=!*OL`ouosxbeszPfT?mY<3{ln}7v##Zm%GOSBSd zeK2#_TQD9)`j4sMC@U*VR8`{wdx7B*oAoiI5wH~)D=q9}4{7PCSA;Dmzswiwr@-{| zG`ZdGkohsy2V1hkR$#0{hPZUL*bT>%*Yd?N9!-XtMG4y5+gS+A*2#he`{Q}8f5AEj z*b40UEH~iTUTV#Wer&sF%-o#4ULfXaR~No5Hp%etaH6Yc7_7Z$OdIn5v?6Q;c0Tn| z^^l8pyeDE-C#LJl`PhSlgY@9RgOK?f8XBm+zTTkP#t+tB^v>BDWPINIZPO<(#0}>~ zS5{UUQqOp!9#t}juLaj$qPewaJ}dV3s*8(@!{*P+%ZqFMjDoGecxvVRx`*1Z4*RIKXs5z|WKOmkZ81AIGS16DOt( z*x;tXhUeO0x~cWOaJfmG8C}*!c`RVRLqo!M(36T^^NBM^$t+voD|qdsj-3r2c(Yr{ zMaLhCaG83=w%Qoj{$sBXGu3g5DZ+_m^GAw{a9$EgGzxw8hg=tII6d_lP zl`k6_e;jD)AQqG+*{3F(ZF$Tn27wc#boR+obN(8jGksyTEEY2?EDXK9*_aw&;>2dN zkrohzZwpBFoW=^QXbhf9VIb$*D-FKfC!Jf%To|TY)T1Q}t|o5kAxX)g++ATOQ8YYq zxovQ|lw)CVm%nj1D+c4fMCZhVcV3dBazQ$c3wCqktFX#$g)hakP71u=glyx8D9%*` z{W7J=#X`UW?^5jUhJX*g+Kt*SO#b>I3+6D-XetlEh&PILH0SiGL{ghSSkZ&}Ol=QI&=2t6wNm6txGnFfx^ey4bI4#uHYT!kRj8 ziHWf4>gqv(K&Ny#R7F*_*!4uln$l8aLkrM3bM@;JXIurI&Cl z34^`37fVs(!Pt{MgNiz!a^3EBkBRsiuXX+Ui&jq=+eUmuSQs6JLdhVh+?0 zS>S+ym6QcO2cOiE(lhw<9C3Slx^@D9wnESX?GS};%BD}H>wC_-Nx5_mbbJPZS@bn@ z$y{BC7RKkep&J1LUmo`HHpVKZNQL)6sub<~m9eBoTplj1wDU~@&uc@O$$;MC98{0m z?Py@e;+kmYoCuY!F6~RoD;XvR+vFv)DrI5at!uA;w@I7Y8WdkRS~o*0Wl(loA6Jcb zE=w!EC1@eoBcJ=G)-Pn)@Adj;HM>D#z#EG+_V-LpBLv*GI~))-u+Pfc8smF7g&rF) zGe+VaD871>Q{>ER?tNR3^3l_bcA^%Y!-Z;Lf@b;%BSBB%N^_Gn4mfXQ$`NIV>Fw?9 z^w`z7RHTphub=W6SAMb#4(m~(^aV@GHJq^v9XwtCL&733zQ2vW=u;So3u{U zL^T@a9X=xvL5-))Od_-blaFW@8sOWO9v%WO7d28quCR)wu!Ww_JxPxE=~STNLQ9mT)pN7a-6|a z)DQ6+zbBoU+>gg};7a-{;>E0~{MJi9(6I*{6>iJ)Sb?Gj`}~4Ae9ByNbv0y4`n0q) zH8!XcEuW@9_Vc3(K7ERaB$3J4drun?*{lZjo+Lnb5Gy4-KEJvBb+o3F!oRux8~CwQ zaq;sN#MA457Wtg)><2<&>~LgSLJJm)eH%?8HPdJEqjqe)PH?G7 zs;a7wxJye*<#v|-P=9k9ISIApA_xS6smsgB$*G52nl3V})i-055uVX91;EIW(C~0; zH+zUFNh(cotZ!(tC{~Qtf_7}7!|xxeah=`7!NLDcFfNOlMz%pqNW2#{r{B>a-)mPN p(;?_)x+BX^btC^j`7G@bA|PrE{aouA4YU{A04F3GQDcWo{sV3X&OiVF literal 0 HcmV?d00001 diff --git a/windows/security/threat-protection/microsoft-defender-atp/mcafee-to-microsoft-defender-migration.md b/windows/security/threat-protection/microsoft-defender-atp/mcafee-to-microsoft-defender-migration.md index dbb50ab562..6977f6f2c9 100644 --- a/windows/security/threat-protection/microsoft-defender-atp/mcafee-to-microsoft-defender-migration.md +++ b/windows/security/threat-protection/microsoft-defender-atp/mcafee-to-microsoft-defender-migration.md @@ -35,7 +35,7 @@ If you are planning to switch from McAfee Endpoint Security (McAfee) to [Microso When you switch from McAfee to Microsoft Defender for Endpoint, you follow a process that can be divided into three phases, as described in the following table: -![Migration phases - prepare setup onboard](/windows/media/phase-diagrams/migration-phases.png) +![Migration phases - prepare setup onboard](images/phase-diagrams/migration-phases.png) |Phase |Description | diff --git a/windows/security/threat-protection/microsoft-defender-atp/mcafee-to-microsoft-defender-onboard.md b/windows/security/threat-protection/microsoft-defender-atp/mcafee-to-microsoft-defender-onboard.md index 703d353b4c..dd52552ec9 100644 --- a/windows/security/threat-protection/microsoft-defender-atp/mcafee-to-microsoft-defender-onboard.md +++ b/windows/security/threat-protection/microsoft-defender-atp/mcafee-to-microsoft-defender-onboard.md @@ -28,7 +28,7 @@ ms.reviewer: jesquive, chventou, jonix, chriggs, owtho [!INCLUDE [Microsoft 365 Defender rebranding](../../includes/microsoft-defender.md)] -|[![Phase 1: Prepare](/windows/media/phase-diagrams/prepare.png)](mcafee-to-microsoft-defender-prepare.md)
    [Phase 1: Prepare](mcafee-to-microsoft-defender-prepare.md) |[![Phase 2: Set up](/windows/media/phase-diagrams/setup.png)](mcafee-to-microsoft-defender-setup.md)
    [Phase 2: Set up](mcafee-to-microsoft-defender-setup.md) |![Phase 3: Onboard](/windows/media/phase-diagrams/onboard.png)
    Phase 3: Onboard | +|[![Phase 1: Prepare](images/phase-diagrams/prepare.png)](mcafee-to-microsoft-defender-prepare.md)
    [Phase 1: Prepare](mcafee-to-microsoft-defender-prepare.md) |[![Phase 2: Set up](images/phase-diagrams/setup.png)](mcafee-to-microsoft-defender-setup.md)
    [Phase 2: Set up](mcafee-to-microsoft-defender-setup.md) |![Phase 3: Onboard](images/phase-diagrams/onboard.png)
    Phase 3: Onboard | |--|--|--| || |*You are here!* | diff --git a/windows/security/threat-protection/microsoft-defender-atp/mcafee-to-microsoft-defender-prepare.md b/windows/security/threat-protection/microsoft-defender-atp/mcafee-to-microsoft-defender-prepare.md index 4fa7e47e70..886846f36f 100644 --- a/windows/security/threat-protection/microsoft-defender-atp/mcafee-to-microsoft-defender-prepare.md +++ b/windows/security/threat-protection/microsoft-defender-atp/mcafee-to-microsoft-defender-prepare.md @@ -29,7 +29,7 @@ ms.reviewer: jesquive, chventou, jonix, chriggs, owtho [!INCLUDE [Microsoft 365 Defender rebranding](../../includes/microsoft-defender.md)] -|![Phase 1: Prepare](/windows/media/phase-diagrams/prepare.png)
    Phase 1: Prepare |[![Phase 2: Set up](/windows/media/phase-diagrams/setup.png)](mcafee-to-microsoft-defender-setup.md)
    [Phase 2: Set up](mcafee-to-microsoft-defender-setup.md) |[![Phase 3: Onboard](/windows/media/phase-diagrams/onboard.png)](mcafee-to-microsoft-defender-onboard.md)
    [Phase 3: Onboard](mcafee-to-microsoft-defender-onboard.md) | +|![Phase 1: Prepare](images/phase-diagrams/prepare.png)
    Phase 1: Prepare |[![Phase 2: Set up](images/phase-diagrams/setup.png)](mcafee-to-microsoft-defender-setup.md)
    [Phase 2: Set up](mcafee-to-microsoft-defender-setup.md) |[![Phase 3: Onboard](images/phase-diagrams/onboard.png)](mcafee-to-microsoft-defender-onboard.md)
    [Phase 3: Onboard](mcafee-to-microsoft-defender-onboard.md) | |--|--|--| |*You are here!*| | | diff --git a/windows/security/threat-protection/microsoft-defender-atp/mcafee-to-microsoft-defender-setup.md b/windows/security/threat-protection/microsoft-defender-atp/mcafee-to-microsoft-defender-setup.md index b9f5ed18c6..432aed7160 100644 --- a/windows/security/threat-protection/microsoft-defender-atp/mcafee-to-microsoft-defender-setup.md +++ b/windows/security/threat-protection/microsoft-defender-atp/mcafee-to-microsoft-defender-setup.md @@ -29,7 +29,7 @@ ms.reviewer: jesquive, chventou, jonix, chriggs, owtho [!INCLUDE [Microsoft 365 Defender rebranding](../../includes/microsoft-defender.md)] -|[![Phase 1: Prepare](/windows/media/phase-diagrams/prepare.png)](mcafee-to-microsoft-defender-prepare.md)
    [Phase 1: Prepare](mcafee-to-microsoft-defender-prepare.md) |![Phase 2: Set up](/windows/media/phase-diagrams/setup.png)
    Phase 2: Set up |[![Phase 3: Onboard](/windows/media/phase-diagrams/onboard.png)](mcafee-to-microsoft-defender-onboard.md)
    [Phase 3: Onboard](mcafee-to-microsoft-defender-onboard.md) | +|[![Phase 1: Prepare](images/phase-diagrams/prepare.png)](mcafee-to-microsoft-defender-prepare.md)
    [Phase 1: Prepare](mcafee-to-microsoft-defender-prepare.md) |![Phase 2: Set up](images/phase-diagrams/setup.png)
    Phase 2: Set up |[![Phase 3: Onboard](images/phase-diagrams/onboard.png)](mcafee-to-microsoft-defender-onboard.md)
    [Phase 3: Onboard](mcafee-to-microsoft-defender-onboard.md) | |--|--|--| ||*You are here!* | | diff --git a/windows/security/threat-protection/microsoft-defender-atp/onboarding.md b/windows/security/threat-protection/microsoft-defender-atp/onboarding.md index 7c9ce553cb..5cbe6e5c30 100644 --- a/windows/security/threat-protection/microsoft-defender-atp/onboarding.md +++ b/windows/security/threat-protection/microsoft-defender-atp/onboarding.md @@ -29,7 +29,7 @@ ms.topic: article Deploying Defender for Endpoint is a three-phase process: -| [![deployment phase - prepare](/windows/media/phase-diagrams/prepare.png)](prepare-deployment.md)
    [Phase 1: Prepare](prepare-deployment.md) | [![deployment phase - setup](/windows/media/phase-diagrams/setup.png)](production-deployment.md)
    [Phase 2: Setup](production-deployment.md) | ![deployment phase - onboard](/windows/media/phase-diagrams/onboard.png)
    Phase 3: Onboard | +| [![deployment phase - prepare](images/phase-diagrams/prepare.png)](prepare-deployment.md)
    [Phase 1: Prepare](prepare-deployment.md) | [![deployment phase - setup](images/phase-diagrams/setup.png)](production-deployment.md)
    [Phase 2: Setup](production-deployment.md) | ![deployment phase - onboard](images/phase-diagrams/onboard.png)
    Phase 3: Onboard | | ----- | ----- | ----- | | | |*You are here!*| diff --git a/windows/security/threat-protection/microsoft-defender-atp/prepare-deployment.md b/windows/security/threat-protection/microsoft-defender-atp/prepare-deployment.md index 2db4bdf69c..f93867d6d6 100644 --- a/windows/security/threat-protection/microsoft-defender-atp/prepare-deployment.md +++ b/windows/security/threat-protection/microsoft-defender-atp/prepare-deployment.md @@ -33,7 +33,7 @@ ms.topic: article Deploying Defender for Endpoint is a three-phase process: -| ![deployment phase - prepare](/windows/media/phase-diagrams/prepare.png)
    Phase 1: Prepare | [![deployment phase - setup](/windows/media/phase-diagrams/setup.png)](production-deployment.md)
    [Phase 2: Setup](production-deployment.md) | [![deployment phase - onboard](/windows/media/phase-diagrams/onboard.png)](onboarding.md)
    [Phase 3: Onboard](onboarding.md) | +| ![deployment phase - prepare](images/phase-diagrams/prepare.png)
    Phase 1: Prepare | [![deployment phase - setup](images/phase-diagrams/setup.png)](production-deployment.md)
    [Phase 2: Setup](production-deployment.md) | [![deployment phase - onboard](images/phase-diagrams/onboard.png)](onboarding.md)
    [Phase 3: Onboard](onboarding.md) | | ----- | ----- | ----- | |*You are here!* | || diff --git a/windows/security/threat-protection/microsoft-defender-atp/production-deployment.md b/windows/security/threat-protection/microsoft-defender-atp/production-deployment.md index 801cfd63d9..3f5f8aabcc 100644 --- a/windows/security/threat-protection/microsoft-defender-atp/production-deployment.md +++ b/windows/security/threat-protection/microsoft-defender-atp/production-deployment.md @@ -31,7 +31,7 @@ ms.topic: article Deploying Defender for Endpoint is a three-phase process: -| [![deployment phase - prepare](/windows/media/phase-diagrams/prepare.png)](prepare-deployment.md)
    [Phase 1: Prepare](prepare-deployment.md) | ![deployment phase - setup](/windows/media/phase-diagrams/setup.png)
    Phase 2: Setup | [![deployment phase - onboard](/windows/media/phase-diagrams/onboard.png)](onboarding.md)
    [Phase 3: Onboard](onboarding.md) | +| [![deployment phase - prepare](images/phase-diagrams/prepare.png)](prepare-deployment.md)
    [Phase 1: Prepare](prepare-deployment.md) | ![deployment phase - setup](images/phase-diagrams/setup.png)
    Phase 2: Setup | [![deployment phase - onboard](images/phase-diagrams/onboard.png)](onboarding.md)
    [Phase 3: Onboard](onboarding.md) | | ----- | ----- | ----- | | | *You are here!*|| diff --git a/windows/security/threat-protection/microsoft-defender-atp/switch-to-microsoft-defender-migration.md b/windows/security/threat-protection/microsoft-defender-atp/switch-to-microsoft-defender-migration.md index 1a9ceac19e..0a7421bb95 100644 --- a/windows/security/threat-protection/microsoft-defender-atp/switch-to-microsoft-defender-migration.md +++ b/windows/security/threat-protection/microsoft-defender-atp/switch-to-microsoft-defender-migration.md @@ -35,7 +35,7 @@ If you are planning to switch from a non-Microsoft endpoint protection solution When you switch to Microsoft Defender for Endpoint, you follow a process that can be divided into three phases, as described in the following table: -![Migration phases - prepare, setup, onboard](/windows/media/phase-diagrams/migration-phases.png) +![Migration phases - prepare, setup, onboard](images/phase-diagrams/migration-phases.png) |Phase |Description | |--|--| diff --git a/windows/security/threat-protection/microsoft-defender-atp/switch-to-microsoft-defender-onboard.md b/windows/security/threat-protection/microsoft-defender-atp/switch-to-microsoft-defender-onboard.md index 40074d3a9c..18422aba57 100644 --- a/windows/security/threat-protection/microsoft-defender-atp/switch-to-microsoft-defender-onboard.md +++ b/windows/security/threat-protection/microsoft-defender-atp/switch-to-microsoft-defender-onboard.md @@ -25,7 +25,7 @@ ms.reviewer: jesquive, chventou, jonix, chriggs, owtho # Switch to Microsoft Defender for Endpoint - Phase 3: Onboard -|[![Phase 1: Prepare](/windows/media/phase-diagrams/prepare.png)](switch-to-microsoft-defender-prepare.md)
    [Phase 1: Prepare](switch-to-microsoft-defender-prepare.md) |[![Phase 2: Set up](/windows/media/phase-diagrams/setup.png)](switch-to-microsoft-defender-setup.md)
    [Phase 2: Set up](switch-to-microsoft-defender-setup.md) |![Phase 3: Onboard](/windows/media/phase-diagrams/onboard.png)
    Phase 3: Onboard | +|[![Phase 1: Prepare](images/phase-diagrams/prepare.png)](switch-to-microsoft-defender-prepare.md)
    [Phase 1: Prepare](switch-to-microsoft-defender-prepare.md) |[![Phase 2: Set up](images/phase-diagrams/setup.png)](switch-to-microsoft-defender-setup.md)
    [Phase 2: Set up](switch-to-microsoft-defender-setup.md) |![Phase 3: Onboard](images/phase-diagrams/onboard.png)
    Phase 3: Onboard | |--|--|--| || |*You are here!* | diff --git a/windows/security/threat-protection/microsoft-defender-atp/switch-to-microsoft-defender-prepare.md b/windows/security/threat-protection/microsoft-defender-atp/switch-to-microsoft-defender-prepare.md index 334eb1708e..c55bd95f20 100644 --- a/windows/security/threat-protection/microsoft-defender-atp/switch-to-microsoft-defender-prepare.md +++ b/windows/security/threat-protection/microsoft-defender-atp/switch-to-microsoft-defender-prepare.md @@ -25,7 +25,7 @@ ms.reviewer: jesquive, chventou, jonix, chriggs, owtho # Switch to Microsoft Defender for Endpoint - Phase 1: Prepare -|![Phase 1: Prepare](/windows/media/phase-diagrams/prepare.png)
    Phase 1: Prepare |[![Phase 2: Set up](/windows/media/phase-diagrams/setup.png)](switch-to-microsoft-defender-setup.md)
    [Phase 2: Set up](switch-to-microsoft-defender-setup.md) |[![Phase 3: Onboard](/windows/media/phase-diagrams/onboard.png)](switch-to-microsoft-defender-onboard.md)
    [Phase 3: Onboard](switch-to-microsoft-defender-onboard.md) | +|![Phase 1: Prepare](images/phase-diagrams/prepare.png)
    Phase 1: Prepare |[![Phase 2: Set up](images/phase-diagrams/setup.png)](switch-to-microsoft-defender-setup.md)
    [Phase 2: Set up](switch-to-microsoft-defender-setup.md) |[![Phase 3: Onboard](images/phase-diagrams/onboard.png)](switch-to-microsoft-defender-onboard.md)
    [Phase 3: Onboard](switch-to-microsoft-defender-onboard.md) | |--|--|--| |*You are here!*| | | diff --git a/windows/security/threat-protection/microsoft-defender-atp/switch-to-microsoft-defender-setup.md b/windows/security/threat-protection/microsoft-defender-atp/switch-to-microsoft-defender-setup.md index 5fef44d9d6..2d0c515fe8 100644 --- a/windows/security/threat-protection/microsoft-defender-atp/switch-to-microsoft-defender-setup.md +++ b/windows/security/threat-protection/microsoft-defender-atp/switch-to-microsoft-defender-setup.md @@ -25,7 +25,7 @@ ms.reviewer: jesquive, chventou, jonix, chriggs, owtho # Switch to Microsoft Defender for Endpoint - Phase 2: Setup -|[![Phase 1: Prepare](/windows/media/phase-diagrams/prepare.png)](switch-to-microsoft-defender-prepare.md)
    [Phase 1: Prepare](switch-to-microsoft-defender-prepare.md) |![Phase 2: Set up](/windows/media/phase-diagrams/setup.png)
    Phase 2: Set up |[![Phase 3: Onboard](/windows/media/phase-diagrams/onboard.png)](switch-to-microsoft-defender-onboard.md)
    [Phase 3: Onboard](switch-to-microsoft-defender-onboard.md) | +|[![Phase 1: Prepare](images/phase-diagrams/prepare.png)](switch-to-microsoft-defender-prepare.md)
    [Phase 1: Prepare](switch-to-microsoft-defender-prepare.md) |![Phase 2: Set up](images/phase-diagrams/setup.png)
    Phase 2: Set up |[![Phase 3: Onboard](images/phase-diagrams/onboard.png)](switch-to-microsoft-defender-onboard.md)
    [Phase 3: Onboard](switch-to-microsoft-defender-onboard.md) | |--|--|--| ||*You are here!* | | diff --git a/windows/security/threat-protection/microsoft-defender-atp/symantec-to-microsoft-defender-atp-migration.md b/windows/security/threat-protection/microsoft-defender-atp/symantec-to-microsoft-defender-atp-migration.md index cd4d8387d3..0fe3fbf828 100644 --- a/windows/security/threat-protection/microsoft-defender-atp/symantec-to-microsoft-defender-atp-migration.md +++ b/windows/security/threat-protection/microsoft-defender-atp/symantec-to-microsoft-defender-atp-migration.md @@ -35,7 +35,7 @@ If you are planning to switch from Symantec Endpoint Protection (Symantec) to [M When you switch from Symantec to Microsoft Defender for Endpoint, you follow a process that can be divided into three phases, as described in the following table: -![Migration phases - prepare, setup, onboard](/windows/media/phase-diagrams/migration-phases.png) +![Migration phases - prepare, setup, onboard](images/phase-diagrams/migration-phases.png) |Phase |Description | |--|--| diff --git a/windows/security/threat-protection/microsoft-defender-atp/symantec-to-microsoft-defender-atp-onboard.md b/windows/security/threat-protection/microsoft-defender-atp/symantec-to-microsoft-defender-atp-onboard.md index b78be37a84..a80c0ae736 100644 --- a/windows/security/threat-protection/microsoft-defender-atp/symantec-to-microsoft-defender-atp-onboard.md +++ b/windows/security/threat-protection/microsoft-defender-atp/symantec-to-microsoft-defender-atp-onboard.md @@ -28,7 +28,7 @@ ms.reviewer: depicker, yongrhee, chriggs [!INCLUDE [Microsoft 365 Defender rebranding](../../includes/microsoft-defender.md)] -|[![Phase 1: Prepare](/windows/media/phase-diagrams/prepare.png)](symantec-to-microsoft-defender-atp-prepare.md)
    [Phase 1: Prepare](symantec-to-microsoft-defender-atp-prepare.md) |[![Phase 2: Set up](/windows/media/phase-diagrams/setup.png)](symantec-to-microsoft-defender-atp-setup.md)
    [Phase 2: Set up](symantec-to-microsoft-defender-atp-setup.md) |![Phase 3: Onboard](/windows/media/phase-diagrams/onboard.png)
    Phase 3: Onboard | +|[![Phase 1: Prepare](images/phase-diagrams/prepare.png)](symantec-to-microsoft-defender-atp-prepare.md)
    [Phase 1: Prepare](symantec-to-microsoft-defender-atp-prepare.md) |[![Phase 2: Set up](images/phase-diagrams/setup.png)](symantec-to-microsoft-defender-atp-setup.md)
    [Phase 2: Set up](symantec-to-microsoft-defender-atp-setup.md) |![Phase 3: Onboard](images/phase-diagrams/onboard.png)
    Phase 3: Onboard | |--|--|--| || |*You are here!* | diff --git a/windows/security/threat-protection/microsoft-defender-atp/symantec-to-microsoft-defender-atp-prepare.md b/windows/security/threat-protection/microsoft-defender-atp/symantec-to-microsoft-defender-atp-prepare.md index 86b5570c34..10e8d99bb4 100644 --- a/windows/security/threat-protection/microsoft-defender-atp/symantec-to-microsoft-defender-atp-prepare.md +++ b/windows/security/threat-protection/microsoft-defender-atp/symantec-to-microsoft-defender-atp-prepare.md @@ -28,7 +28,7 @@ ms.reviewer: depicker, yongrhee, chriggs [!INCLUDE [Microsoft 365 Defender rebranding](../../includes/microsoft-defender.md)] -|![Phase 1: Prepare](/windows/media/phase-diagrams/prepare.png)
    Phase 1: Prepare |[![Phase 2: Set up](/windows/media/phase-diagrams/setup.png)](symantec-to-microsoft-defender-atp-setup.md)
    [Phase 2: Set up](symantec-to-microsoft-defender-atp-setup.md) |[![Phase 3: Onboard](/windows/media/phase-diagrams/onboard.png)](symantec-to-microsoft-defender-atp-onboard.md)
    [Phase 3: Onboard](symantec-to-microsoft-defender-atp-onboard.md) | +|![Phase 1: Prepare](images/phase-diagrams/prepare.png)
    Phase 1: Prepare |[![Phase 2: Set up](images/phase-diagrams/setup.png)](symantec-to-microsoft-defender-atp-setup.md)
    [Phase 2: Set up](symantec-to-microsoft-defender-atp-setup.md) |[![Phase 3: Onboard](images/phase-diagrams/onboard.png)](symantec-to-microsoft-defender-atp-onboard.md)
    [Phase 3: Onboard](symantec-to-microsoft-defender-atp-onboard.md) | |--|--|--| |*You are here!*| | | diff --git a/windows/security/threat-protection/microsoft-defender-atp/symantec-to-microsoft-defender-atp-setup.md b/windows/security/threat-protection/microsoft-defender-atp/symantec-to-microsoft-defender-atp-setup.md index 68a0f10921..401eaec958 100644 --- a/windows/security/threat-protection/microsoft-defender-atp/symantec-to-microsoft-defender-atp-setup.md +++ b/windows/security/threat-protection/microsoft-defender-atp/symantec-to-microsoft-defender-atp-setup.md @@ -28,7 +28,7 @@ ms.reviewer: depicker, yongrhee, chriggs [!INCLUDE [Microsoft 365 Defender rebranding](../../includes/microsoft-defender.md)] -|[![Phase 1: Prepare](/windows/media/phase-diagrams/prepare.png)](symantec-to-microsoft-defender-atp-prepare.md)
    [Phase 1: Prepare](symantec-to-microsoft-defender-atp-prepare.md) |![Phase 2: Set up](/windows/media/phase-diagrams/setup.png)
    Phase 2: Set up |[![Phase 3: Onboard](/windows/media/phase-diagrams/onboard.png)](symantec-to-microsoft-defender-atp-onboard.md)
    [Phase 3: Onboard](symantec-to-microsoft-defender-atp-onboard.md) | +|[![Phase 1: Prepare](images/phase-diagrams/prepare.png)](symantec-to-microsoft-defender-atp-prepare.md)
    [Phase 1: Prepare](symantec-to-microsoft-defender-atp-prepare.md) |![Phase 2: Set up](images/phase-diagrams/setup.png)
    Phase 2: Set up |[![Phase 3: Onboard](images/phase-diagrams/onboard.png)](symantec-to-microsoft-defender-atp-onboard.md)
    [Phase 3: Onboard](symantec-to-microsoft-defender-atp-onboard.md) | |--|--|--| ||*You are here!* | | From b51c5a542168bb6cc519325e9db7dd46f15745e1 Mon Sep 17 00:00:00 2001 From: Joey Caparas Date: Thu, 17 Dec 2020 16:07:21 -0800 Subject: [PATCH 163/486] edits --- .../microsoft-defender-atp/android-intune.md | 24 +++++++++---------- 1 file changed, 12 insertions(+), 12 deletions(-) diff --git a/windows/security/threat-protection/microsoft-defender-atp/android-intune.md b/windows/security/threat-protection/microsoft-defender-atp/android-intune.md index d899f7568a..52450260ef 100644 --- a/windows/security/threat-protection/microsoft-defender-atp/android-intune.md +++ b/windows/security/threat-protection/microsoft-defender-atp/android-intune.md @@ -29,7 +29,7 @@ ms.topic: conceptual - [Defender for Endpoint](microsoft-defender-atp-android.md) -This topic describes deploying Defender for Endpoint for Android on Intune +Learn how to deploy Defender for Endpoint for Android on Intune Company Portal enrolled devices. For more information about Intune device enrollment, see [Enroll your device](https://docs.microsoft.com/mem/intune/user-help/enroll-device-android-company-portal). @@ -44,13 +44,13 @@ device](https://docs.microsoft.com/mem/intune/user-help/enroll-device-android-co **Deploy Defender for Endpoint for Android on Intune Company Portal - Device Administrator enrolled devices** -This topic describes how to deploy Defender for Endpoint for Android on Intune Company Portal - Device Administrator enrolled devices. +Learn how to deploy Defender for Endpoint for Android on Intune Company Portal - Device Administrator enrolled devices. ### Add as Android store app 1. In [Microsoft Endpoint Manager admin center](https://go.microsoft.com/fwlink/?linkid=2109431) , go to **Apps** \> -**Android Apps** \> **Add \> Android store app** and click **Select**. +**Android Apps** \> **Add \> Android store app** and choose **Select**. ![Image of Microsoft Endpoint Manager Admin Center](images/mda-addandroidstoreapp.png) @@ -60,13 +60,13 @@ center](https://go.microsoft.com/fwlink/?linkid=2109431) , go to **Apps** \> - **Name** - **Description** - **Publisher** as Microsoft. - - **Appstore URL** as https://play.google.com/store/apps/details?id=com.microsoft.scmx (Defender for Endpoint app Google Play Store URL) + - **App store URL** as https://play.google.com/store/apps/details?id=com.microsoft.scmx (Defender for Endpoint app Google Play Store URL) Other fields are optional. Select **Next**. ![Image of Microsoft Endpoint Manager Admin Center](images/mda-addappinfo.png) -3. In the *Assignments* section, go to the **Required** section and select **Add group.** You can then choose the user group(s) that you would like to target Defender for Endpoint for Android app. Click **Select** and then **Next**. +3. In the *Assignments* section, go to the **Required** section and select **Add group.** You can then choose the user group(s) that you would like to target Defender for Endpoint for Android app. Choose **Select** and then **Next**. >[!NOTE] >The selected user group should consist of Intune enrolled users. @@ -111,7 +111,7 @@ Defender for Endpoint for Android supports Android Enterprise enrolled devices. For more information on the enrollment options supported by Intune, see [Enrollment Options](https://docs.microsoft.com/mem/intune/enrollment/android-enroll). -**Currently, Personally-owned devices with work profile and Corporate-owned fully managed user device enrollments are supported for deployment.** +**Currently, Personally owned devices with work profile and Corporate-owned fully managed user device enrollments are supported for deployment.** @@ -141,7 +141,7 @@ select **Approve**. > ![A screenshot of a Managed Google Play](images/07e6d4119f265037e3b80a20a73b856f.png) -4. You should now be presented with the permissions that Defender for Endpoint +4. You'll be presented with the permissions that Defender for Endpoint obtains for it to work. Review them and then select **Approve**. ![A screenshot of Defender for Endpoint preview app approval](images/206b3d954f06cc58b3466fb7a0bd9f74.png) @@ -218,7 +218,7 @@ Defender ATP should be visible in the apps list. 1. In the **Review + Create** page that comes up next, review all the information and then select **Create**.
    - The app configuration policy for Defender for Endpoint auto-granting the storage permission is now assigned to the selected user group. + The app configuration policy for Defender for Endpoint autogranting the storage permission is now assigned to the selected user group. > [!div class="mx-imgBorder"] > ![Image of create app configuration policy](images/android-review-create.png) @@ -244,11 +244,11 @@ above. Then select **Review + Save** and then **Save** again to commence assignment. ### Auto Setup of Always-on VPN -Defender for Endpoint supports Device configuration policies for managed devices via Intune. This capability can be leveraged to **Auto setup of Always-on VPN** on Android Enterprise enrolled devices, so the end user does not need to setup VPN service while onboarding. -1. On **Devices** Page go to **Configuration Profiles** > **Create Profile** > **Platform** > **Android Enterprise** +Defender for Endpoint supports Device configuration policies for managed devices via Intune. This capability can be leveraged to **Auto setup of Always-on VPN** on Android Enterprise enrolled devices, so the end user does not need to set up VPN service while onboarding. +1. On **Devices**, select **Configuration Profiles** > **Create Profile** > **Platform** > **Android Enterprise** Select **Device restrictions** under one of the following, based on your device enrollment type - **Fully Managed, Dedicated, and Corporate-Owned Work Profile** -- **Personally-Owned Work Profile** +- **Personally owned Work Profile** Select **Create**. @@ -292,7 +292,7 @@ displayed here. > ![Image of device installation status](images/900c0197aa59f9b7abd762ab2b32e80c.png) -2. On the device, you can validate the onboarding status by going to the **work profile**. Confirm that Defender for Endpoint is available and that you are enrolled to the **Personally-owned devices with work profile**. If you are enrolled to a **Corporate-owned, fully managed user device**, you will have a single profile on the device where you can confirm that Defender for Endpoint is available. +2. On the device, you can validate the onboarding status by going to the **work profile**. Confirm that Defender for Endpoint is available and that you are enrolled to the **Personally owned devices with work profile**. If you are enrolled to a **Corporate-owned, fully managed user device**, you will have a single profile on the device where you can confirm that Defender for Endpoint is available. ![Image of app in mobile device](images/c2e647fc8fa31c4f2349c76f2497bc0e.png) From 258b1b91dc8dedcb54c7aaf414220be440c789c3 Mon Sep 17 00:00:00 2001 From: Gary Moore Date: Thu, 17 Dec 2020 16:54:27 -0800 Subject: [PATCH 164/486] Indented content in list items --- .../switch-to-microsoft-defender-setup.md | 23 ++++++++++--------- 1 file changed, 12 insertions(+), 11 deletions(-) diff --git a/windows/security/threat-protection/microsoft-defender-atp/switch-to-microsoft-defender-setup.md b/windows/security/threat-protection/microsoft-defender-atp/switch-to-microsoft-defender-setup.md index 2d0c515fe8..c1ad46027c 100644 --- a/windows/security/threat-protection/microsoft-defender-atp/switch-to-microsoft-defender-setup.md +++ b/windows/security/threat-protection/microsoft-defender-atp/switch-to-microsoft-defender-setup.md @@ -87,11 +87,11 @@ The [DisableAntiSpyware](https://docs.microsoft.com/windows-hardware/customize/d `Dism /online /Get-FeatureInfo /FeatureName:Windows-Defender`
    -> [!NOTE] -> When using the DISM command within a task sequence running PS, the following path to cmd.exe is required. -> Example:
    -> `c:\windows\sysnative\cmd.exe /c Dism /online /Get-FeatureInfo /FeatureName:Windows-Defender-Features`
    -> `c:\windows\sysnative\cmd.exe /c Dism /online /Get-FeatureInfo /FeatureName:Windows-Defender`
    + > [!NOTE] + > When using the DISM command within a task sequence running PS, the following path to cmd.exe is required. + > Example:
    + > `c:\windows\sysnative\cmd.exe /c Dism /online /Get-FeatureInfo /FeatureName:Windows-Defender-Features`
    + > `c:\windows\sysnative\cmd.exe /c Dism /online /Get-FeatureInfo /FeatureName:Windows-Defender`
    3. To verify Microsoft Defender Antivirus is running, use the following PowerShell cmdlet:
    @@ -227,12 +227,13 @@ To use CMPivot to get your file hash, follow these steps: 6. In the query box, type the following query:
    -```kusto -File(c:\\windows\\notepad.exe) -| project Hash -``` -> [!NOTE] -> In the query above, replace *notepad.exe* with the your third-party security product process name. + ```kusto + File(c:\\windows\\notepad.exe) + | project Hash + ``` + + > [!NOTE] + > In the query above, replace *notepad.exe* with the your third-party security product process name. ## Set up your device groups, device collections, and organizational units From b9b89c535deff5eb59b741a509e2b794b29cf7e9 Mon Sep 17 00:00:00 2001 From: Gary Moore Date: Thu, 17 Dec 2020 16:59:08 -0800 Subject: [PATCH 165/486] Indented content in list items --- ...ymantec-to-microsoft-defender-atp-setup.md | 33 +++++++++++-------- 1 file changed, 19 insertions(+), 14 deletions(-) diff --git a/windows/security/threat-protection/microsoft-defender-atp/symantec-to-microsoft-defender-atp-setup.md b/windows/security/threat-protection/microsoft-defender-atp/symantec-to-microsoft-defender-atp-setup.md index 401eaec958..04b7812825 100644 --- a/windows/security/threat-protection/microsoft-defender-atp/symantec-to-microsoft-defender-atp-setup.md +++ b/windows/security/threat-protection/microsoft-defender-atp/symantec-to-microsoft-defender-atp-setup.md @@ -64,15 +64,16 @@ Now that you're moving from Symantec to Microsoft Defender for Endpoint, you'll 1. As a local administrator on the endpoint or device, open Windows PowerShell. -2. Run the following PowerShell cmdlets:
    - `Dism /online /Get-FeatureInfo /FeatureName:Windows-Defender-Features`
    - `Dism /online /Get-FeatureInfo /FeatureName:Windows-Defender`
    +2. Run the following PowerShell cmdlets: -> [!NOTE] -> When using the DISM command within a task sequence running PS, the following path to cmd.exe is required. -> Example:
    -> `c:\windows\sysnative\cmd.exe /c Dism /online /Get-FeatureInfo /FeatureName:Windows-Defender-Features`
    -> `c:\windows\sysnative\cmd.exe /c Dism /online /Get-FeatureInfo /FeatureName:Windows-Defender`
    + `Dism /online /Get-FeatureInfo /FeatureName:Windows-Defender-Features` + `Dism /online /Get-FeatureInfo /FeatureName:Windows-Defender` + + > [!NOTE] + > When using the DISM command within a task sequence running PS, the following path to cmd.exe is required. + > Example:
    + > `c:\windows\sysnative\cmd.exe /c Dism /online /Get-FeatureInfo /FeatureName:Windows-Defender-Features`
    + > `c:\windows\sysnative\cmd.exe /c Dism /online /Get-FeatureInfo /FeatureName:Windows-Defender`
    3. To verify Microsoft Defender Antivirus is running, use the following PowerShell cmdlet:
    `Get-Service -Name windefend` @@ -174,10 +175,12 @@ To add exclusions to Microsoft Defender for Endpoint, you create [indicators](ht 3. On the **File hashes** tab, choose **Add indicator**. 3. On the **Indicator** tab, specify the following settings: + - File hash (Need help? See [Find a file hash using CMPivot](#find-a-file-hash-using-cmpivot) in this article.) - Under **Expires on (UTC)**, choose **Never**. 4. On the **Action** tab, specify the following settings: + - **Response Action**: **Allow** - Title and description @@ -203,12 +206,14 @@ To use CMPivot to get your file hash, follow these steps: 6. In the query box, type the following query:
    -```kusto -File(c:\\windows\\notepad.exe) -| project Hash -``` -> [!NOTE] -> In the query above, replace *notepad.exe* with the your third-party security product process name. + ```kusto + File(c:\\windows\\notepad.exe) + | project Hash + ``` + + > [!NOTE] + > In the query above, replace *notepad.exe* with the your third-party security product process name. + ## Set up your device groups, device collections, and organizational units From 58c113b28788b0b339dab0c1a9d3b451d10ddb11 Mon Sep 17 00:00:00 2001 From: Gary Moore Date: Thu, 17 Dec 2020 17:05:27 -0800 Subject: [PATCH 166/486] Restored
    --- .../symantec-to-microsoft-defender-atp-setup.md | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/windows/security/threat-protection/microsoft-defender-atp/symantec-to-microsoft-defender-atp-setup.md b/windows/security/threat-protection/microsoft-defender-atp/symantec-to-microsoft-defender-atp-setup.md index 04b7812825..72385ecf92 100644 --- a/windows/security/threat-protection/microsoft-defender-atp/symantec-to-microsoft-defender-atp-setup.md +++ b/windows/security/threat-protection/microsoft-defender-atp/symantec-to-microsoft-defender-atp-setup.md @@ -66,7 +66,7 @@ Now that you're moving from Symantec to Microsoft Defender for Endpoint, you'll 2. Run the following PowerShell cmdlets: - `Dism /online /Get-FeatureInfo /FeatureName:Windows-Defender-Features` + `Dism /online /Get-FeatureInfo /FeatureName:Windows-Defender-Features`
    `Dism /online /Get-FeatureInfo /FeatureName:Windows-Defender` > [!NOTE] From e25ad2d1521b8980512ad262a3cbbbe6c7491954 Mon Sep 17 00:00:00 2001 From: Joey Caparas Date: Thu, 17 Dec 2020 17:26:27 -0800 Subject: [PATCH 167/486] add to timeout value in limitiations --- .../threat-protection/microsoft-defender-atp/live-response.md | 1 + 1 file changed, 1 insertion(+) diff --git a/windows/security/threat-protection/microsoft-defender-atp/live-response.md b/windows/security/threat-protection/microsoft-defender-atp/live-response.md index 312550fb3f..193c067a32 100644 --- a/windows/security/threat-protection/microsoft-defender-atp/live-response.md +++ b/windows/security/threat-protection/microsoft-defender-atp/live-response.md @@ -293,6 +293,7 @@ Each command is tracked with full details such as: - Live response sessions are limited to 10 live response sessions at a time. - Large-scale command execution is not supported. +- Live response session inactive timeout value is 5 minutes. - A user can only initiate one session at a time. - A device can only be in one session at a time. - The following file size limits apply: From f50c27aad401fbce2471f2a965f73867bab99253 Mon Sep 17 00:00:00 2001 From: Beth Levin Date: Thu, 17 Dec 2020 17:28:47 -0800 Subject: [PATCH 168/486] added pic --- .../images/tvm-exception-cancel-global-400.png | Bin 12719 -> 0 bytes .../images/tvm-exception-cancel.png | Bin 0 -> 8640 bytes .../images/tvm-exception-cancellation.png | Bin 24105 -> 0 bytes 3 files changed, 0 insertions(+), 0 deletions(-) delete mode 100644 windows/security/threat-protection/microsoft-defender-atp/images/tvm-exception-cancel-global-400.png create mode 100644 windows/security/threat-protection/microsoft-defender-atp/images/tvm-exception-cancel.png delete mode 100644 windows/security/threat-protection/microsoft-defender-atp/images/tvm-exception-cancellation.png diff --git a/windows/security/threat-protection/microsoft-defender-atp/images/tvm-exception-cancel-global-400.png b/windows/security/threat-protection/microsoft-defender-atp/images/tvm-exception-cancel-global-400.png deleted file mode 100644 index 31e2ed052f1f255195283b75a1611f115981af4a..0000000000000000000000000000000000000000 GIT binary patch literal 0 HcmV?d00001 literal 12719 zcmd73Ra9F~*f)w6x8hE5m*Nnt#oda#Q`}vP6$?^*C;_e|!QHP8HHzG|u~;9ycn!< zATRa+Z*t69YN;hzj3pH@GhK`&nf!xG7zSJG^Xw%bVG5R~C zeS`Lxx~Fw%!x9TBP9`e6@N_*thx@zf$`Pf9zbDg@OcakWg$f;)G&afNjwy1>#ckxK zG7cqkZ)aZo?A*;Q(B#j3IU!!_8R|eexlq_z1ajYd*LJ>D-T_`u8fJK-RCT1N#ED%& ze|@3rTphlrb7x$cORf_x8y$Z2G{^a&0JO8kF7y)xq9-2%`6-~hi1Y37LoU>h9C_|^no%p%9adT5syFb z-1pXHz9a{UjPJwLU%Gb3v-DwmlN_PJC}dyIu@q0Xs`Qq1Nr>iaBoN|OxrPjTGs<}d^700K0levOYE-THc zc8g{Vc#`MRAMOo1d}}-J`myHPKXEvQn(_ziY{lC4MWQalOrPs*C=r(-dEiX0+-s(@ zwFZW>0d+NS=_8-fmM9|T#!wQaEj%bkia^weaFnS++s*X+tqBGalGNVRa?xXH&Pb1V zi)Z%>O}_I(kU(duS-VeIqBu>%oYRre&87I#9uTWO=w09YFOP#toTlx%`SbM|NT^uK z4OW8!pE-=0E96}yBgL0BUG-{>N|Wk3pzSJ>FLw;Jbc4kI>ZIv_p5`8sHa_?uuKKo0D~}Ethsyas0DK5b+kNG zdi*#!IxJ=Kd+IAzbOzq%szAD@8Xgd7EdVTVIfwD*Sk@ zQ=a>2JPf{?!j7uzM?NgJ^O$wEJzW69(#i`1^rl2_P4w$-$9oZxcgD4fy|)$Y++S39 zx+^~Tt~l=Q_MyG910`PCbnCR`ph;)WD9qJQ69s}Q1+T+WHZ6p6${FnA3_t*V*yHL) z?#X!*vBw>--@1nu1X!+nFNi3byvbP}`dI5L;k^2r%l&3J$|Oy^gq~=m7k5m?-i+*^ z2&Uo|m$(58u)NShBauaaN8m9e)=xkTjGM7A^G3qDA>?|qH^|64hsCKD9%uJHGI+8; z!njPMklRVG-Z$Xo8n=zVJ1Wk^W02VMX4(E2dV-Mb)8ODtgxyFlS`$AiCm+fDq+$I&rIFv%^$@yYRO?HzdD*N2p6`Jq3 zj0suP-IEG+C75Y;{9x&$jaGx0&+1hH345N_tH0+OZ8<%Ow@3!8_w$j*pIGHD^ z)9n+T42fVu%>ZbR^gC~Ko8~hTCtQVk-j8x#Eyx^9*Dh-@S)sA?$uPYviTDh{VA#_FW--WdB}@;wnUHNyb(9qe(a4jIV)GgUE_^voNS% z0s$;W{U^n_G3Y$l$-ymz%TTslZl3f*S`!dG3}*xHe9ao_2pPhGf&W$po?SW4+lVI> zFff|02d^Bt!pF%Z0cpcvQY+6sRMMj~0AYUgxQ055hRyflpKf`GJQbg+ zGo9p`Q{EMZR@Gv%vuwGXuC(m-^}H13g+3exQqhrw1oo6oeUUW4^lDmW9;newbo2Y5VmX8``~3BMR+o4>aisb#t)2x{HwWe<|cq)LCTzX+clr*14{a zw(Jfl(Jzu!sx)e;TDu&U8Ut}t*&CCE>d1&n3Da+L;(rs6xfqVd!EN`7WVP+-7?!qZ z)5nyge@m@mIg{_xniPU&ZS-RFY-+?AvXWXGn<@_b)IM!|R$@^Z;QLrnbCG>D$#}mn zRS0~-%)1tMdsSG>6?S_U7ItUpLjmXr>$%Q+db*rGLh;ZpF>LpCtlTcJz7=mD2c12a z?_Roh-#<8=zQ!!n?cUFP4AWQW=O5~mT!vtDy<{X&9E$fX(`i0GTzf4(E1^d0|5=jF zVE?qUuo_xlYgMNd`p`A2QKtT^he^U&VakP$ko>Zpz>~^S7&s?L?|Z;VKqYA#?d2|J zpXX6_Q8~?=-`9OZ}khN8S-I5r<7_;w1PkqoU2-C6C;c^>n2* z3!ZYSo8IJIGT^Ga-iN^BN~LGN-Pd%s25MT{sZss@9(EJ< z@@=cBO!CbAdI%DY!iskfLv0#ElEI4NF*A~_1)y1km5yZ;4|_~Uo4i;aFK|6LPt|C? za}^V?>(sn(_SY+Dv>lhX2h|$)sBfsS>6dLc{QG)p=STfRHIvg&d2wrke>ySqf|x_U zYUw;!163WwT@z5J&HpX(JHD>885Qb5u3LBN?Rt=K)r+n_J3}q+jTa|R=ogM=S<(xX zsQw;{zF@inxBT#gb(RVT_Es3kiUs%=;T^R0H~&O{Bu7Bv2uYeYzH> z{hnp~mH2O+{cOk^L#QCCS+l2Sc_TkSD|NliSe$QvR+PT&l5HPZ^L~$1o-iE>0TE;9RE@y*o5P}B%~VLxIfdMG zl`{@bUdw|I;5I(@rJZH*!1HUwY>$zS@i@~n>N~&5!i~}6v832rH5)vEvO5xX27#h= za@o1RGCX9P44gmAJlx7L%k#n!YJc*?08<(uLryAbdhaqeAEDjzGX{%2ujTgx8=ODUtHD|6&8y(g3r4YW>BSfF;N)TGKk64RVIn=4%(Z}`DU#J zJ(YMw*zpNw&p#CP5ReS%8w7gwKxTith~GaYY{Ec1e8NeBr0T6T@lb+ z>9~U*N&vZ_XNf#rN!U17&$lfG`Og8?=NT~hR*VhjbCZ6$-|2+iU7u$gOY@*c_aeOX zcAQG!g-fS@Qh@H!GD)UFX)d%C!ehQdsMzt&S%d=1= zkn(6NBoo@kZ-D*4mHdVWJuE9Q%|?2Lz{rK?F_R1~HiUD_n=J}0YKPNKj`;O?xNyCd1jAaz{R zbVWmOrdMn1s8SI8atEPu`DBk0vKNOuodAgw5Oo8$w|v$tmiOVJMJE7fuOXX8ns;PM zH2pa{35~sa-9!#4%p33ZtZ}%Y$r0?BlH-|fW8G!DpL7eYP6hf^pidmv-)2~ox0}o(CVtbt#NBnJ-Gw*j{O=(!gt-^{2U7y+abR{MH~o(ZQjh-O%c7tZ^fzQ^ zqpJRdTd;AS#R%I1)c%{m4M|vf!csQQr|#exQ+ewoz#Z(fjYeZq_$C5if~cP@s&Dob z6NiF?l}xwIph{0dg(EUnSr#ifGFyn_@JEeVi&4GIyE@IEk$NH;N-XLZnA}*TZ;#=l*Y#001YsYu7>OQUCTWQ=y)#uvC^C9twUbYTS6 z)C^;qUblaqcSb4sTI;Nt2qG?0T+fH`=DUShUd43AzsJivFzdSq2VzY@$o{aHBiOUp`(PTV1K;&Tt#e#CNtuk5`~&aZm5-FYsXyzrsF49`9B}*ihs_ z?o^^t%hYTg=MT4n2JWFEe1DYqI<>IrfP7x$0Ed;UoHl5kNAZx6UcY;fh*Kub!fJ~X zk3=A#vMD<|rBBGN{`%}W2b=o6?4U41e`KFR@s|Ch*f-|htgj~s>d!Hht~0J??YV`4 z59Dk{HQDNs;hwhRhjhO3bcx;eh-i}vK{OO3-K#jUYVG8Gq3z5O_NrNp3M@8lo~Q!s z&%MEbcv2qb!FW__hjh}R4-$!!_qX~}Uzup53fLL-ynx6PVldRmth<$-z{)sHM6wc_ z@RbDR!T5~kw81YgM>wf6t_B^xNxr0rTLE9U2mc|avr~IVTv+Y%WYhXcKG|uC|Nf*J zVG+o5U#YpJdTPF3%wROn#wH`l&rmVqI84N4#JHj+ZF}H*IVomF=;U3$Rf3C*wu7zk z#Y1EL=l0s%9|lflby*Q+tB4fYJP;<*ah#J;`&P5h4Usihst1WwF6QMhjrxj&lhK*c zgK!i5K5Bpn%!({@3Z3UmtF(Xu(f;k_OJ+wV2>8Zb9Y+q)`qQ0`9gHc1p9%GL7B3)anUk%cX2ql5|Ty zXB;%yD}NTTvZU{WjW{zE$lP-d>8O)*3Nw@5iA}X~hiVVpoUZQt(>F^EI_p*`Q!S{0 zW;Uu`^@n(!)fhH4<2Fs5a7q<7G&^`jfLAzF>CmYhg!h!H%1K`*^6r*h0 z6XzumMW;GoSg>kQ^A&OD;$oO)9)nkvnkBzT?)xc;D((-?_XFPq&RL|M@4gASSLFJ9 zUYxBv*NJv!pqrR*m@9Go3kO-KrPi@Gb3a~e=Njd_$c0Y$L&!y_$`oSkJ)@R){_I@~ zo9UzVssuM}fJ0+3IFS1&FUXyMEq(c7LRq_My1 zk}*X-BebmvXk2P}2z2pJAzWqH+t~2lbA75p(SkD&_ptFC+~aD!I$eUtgJR(OlkQD` z>adjipE~#V&^!-3c2Zmn20YGB0Q%vIhJu~w7}vVa2a~0Oo!@95{&dHo?_$j*5;MKV zlJgaoL6xz}h#$FIEW+HA$BjcdVQ4hp_;C+KTP^-z%vag`^52aoUKuN)7jj!SnTI@| zqw>#t1jI~u2EKOrT~n=leTm6Z*pQPyr>bv*DHFfVBiQ(O-rW`o8Pa!ri8wa(){=Oh z^ay#p%DAXoL)qZ2S-@Lc4}Fvpt3FV)=zVDkdsgYF^X44r(y2r2ggl)|hIGZDZD{kV z5wm7}jK%%e2y)*-dd~F_QJ-=f~F$+QxeIo^Ajxc)Wx=Rxi|E zgON7|uxS8_QhPzW83lp3)4T8YDanqD%#z6^jC!!PC=2kUsA_hRR{ie%mi_ShFo*83py042{I_~M}XcPwI+JrvS73{j8hjRG0r>5J)bF{R* zdx7|%N9ro2*?GCYg_GuAziep#3`P4<)h03<<~jr@#awIL;;sHNFz~Q0(HzX}wYWuf z7CV+m_Ff__^N_1`tq8f5*XKwV^nA0SlCZa^bi7bo@<<()0xb)z-XHw1&I_kVA?lvn zThszYsmxRjDx7MHodJF5iPlOVse?xjbjpmGCnHZ~RvZrrOC3W0D#Bqc(9e;Ph15NR z%P`F}I^lE=<72e*%n!@ve=&q@TQSEzm_o!^{OA<$ zAo!E2Yf^+w^`7@S*P|W_EWZ6nk2g)V1uN>0EyV-4_hc4kav2?L=u&J^Ff}BlByNhF z9sBik$QiZ4WIzvD3B4exF%m7-X)Xo_TbPkw|spO>lU+idnm9PJ#7qCMUb0?Ts)emgC?UL#6FunH0O^StUz!ah=l2u(CY zpypcpm9KxjPUW4~3^qu4L#QH()cGU_#lSr{dEvYa$$q0mXB(iv0I$|MF=Jfw-jX~l z9&EdfLy)+RV13Q}42&J^FwqClD8k~PFb$2=TCo-H%|n~{>;yh-uW_D zLC_BUj;#gkf=v+}tiHO(?hR`&Bhu%; z`zZOZb5`W@GJAHz8`<%J9ylWBu$DS0?xw;>S7RoeD3DMIo0ql<6b!i1G!b@LFM*~7 zZ9UIZU&q4v6t}RT1YfP#aR&9^^``(Mg%0o&U^;Y%-R2SHJ^c{am(;M)+x{J zdNr;31GnrPhe=xsoSQMp8b%hguJ_Fs3j{3gKQGi6s$90LOGp(^^RJwB+)C;v*Ck={ zEHcr{nVe(XVXYG%o?!KMpeIdk{kP8Y9IYS{}I6Y4k znUZ5%%XwJ{R)B@iGvTRD+KzH^+%RaHP!22YT7H)b`&CjsvCmg6g;k{cxQ9@ZS2V1D!C}@8;1P&~Ps{=WTU~^u3h019)?kah1TCCSEg|HYh6DFMQmn)rbRlrfUZ z{PTQH?CN!gv&ZAAAv&`^>D~u3um$!G5{-0N8UfT%t?R(IE*#t$++7iqH35Dq=}FJ7X!( zT_lFgdNF{NqK;Js8K30ix-N`c$K z4)_p9Bk)o0ek~=03;*fGQZQhBx{$=|d-4rarDOEwL!~eJpiMVPc7C(^uX9N@w3<#f z>Sqe!*MVpTHD2C2$RuxK-Z0y2^k6vg>jcZW7XB+U!qmC$;BDW-8GB}^gsK5&=l$sm zm7C11{!A$`+3I}zA0!isvsY(~!g5oGsbGDwV`seNiQPZgsVWIEWWg++mF1EH~lhlVqO1E z`!xU&U4b|>cp#T{;_60Y<_{yX~#Pp+E4>N;1<8Sw`gt%kO<{c^t{87yQCH=?9+3ynou9MnZ|1TG}|9?^2Q=Ntq$zwnNt>6aHQ^KtP z*bv1L!FdctxS~Zbh4Wu|WJECN=H%mkzMt7n`Tv*%$c5hgzu5w)viMTq8^2OxilGZS z{W^=YALbM>9#*1dNRbx)-?Gf!Dk*(E;Y)->aoB@kJ6Z&M@Awi4$N7j;;9`B%=|+z^ z?CE|w&1tKDgl0fQ@`O@MHx0I*1y}6}2?j*^sQ3}z9Z3V=5P~J>_AFxujV7f;F2P2> zR5{J4H2#w_B#dQ_DJN)}hE38ozRrzSKoLgD&KPjHmlO{-FR;W|v(usBQl)@9{Knzx zZt2p-D|bK^cgDXYiqUwddbLHdW@T3@uI>n=``^x~?L3`7j-A#+jWJ0%m{Bo_QUC!k z#j`abolvZ4jZ)ul9j=fyu2DD zD=_xZ>}E%OoTRpn&Tj9~KW%7+zV}9OE2majBBml-Wmc2MhM;(=qDC!jB~y#fVT|Mq zCE4oa3Td~wTM`o#;Zq{>C6l!OI%qG7X!IMzth{`>Y!5M;E?}pVOCS+MgokRvgEZw@ zEobBgm%2IHfc3pGb2Yln^vlOaXzx2E&se7Y(Nh$b#(}#}+rtaKrz=dWzg@olEmbKk z<1mNQD0G7=8QO^N`v2!u!|+$(ESfNgi~FWq4aVED(NSvSjYtjGXYuTvrgRY?ioQ16 z9D1l3R+@?RV2sui@z8mjyTJ8()Dj~gP5U$oJPtI&A-qV1K#M!a&Wn>2@y|Co5_1h< z@ii(Etgnt?WvZa+Dr^uaP1mP?*5#c2{%ZepTR=`{t?}_k&9VpG=Z@QsT93KOvltzd z2CHaHx6bEfu=`21e!ZmSeL2>xV6i4|RnP3r#5%h*$yvIDy4-_0n6WjqS=;sNQtP-51Dh>eO!O+TpU&DXB{kQ4 z)UP*dgwM#4bwaGg=bj!(Ru$6(F_vGS|0$CTelD4cK`NTGHz@(xjJ|z#Asebs_{L4= z{RyX_Nv*C{&%jlrJg)Ns%={h1p1t4W05JpIUJ7bg%1VN|^#~3H1B#QA);yGy0-8<_ zVS0bKeImaRdpBG|H_RpP?-(3cf7h=41tl0A&Xu;9gGX|ru}H>Bl)edgA~DPVr|yXU z$4|CelJ#(_w}+ps1!?NJtd=9C<*{TDX{e`l#MY&0gsm{+B^hzZ!S*wYrs~A1Q)-q& zrAfrJ*bI4bI<4Jw+9R#MCi|x;W3f9`Mji&XFzbX68P*J6^0FHeCR2oXH=*u^rEpE5@)B zDJ|h#Z2lUz)Z;K)>_DeH{2ou1O$j|Y;X(((A=cHiIjjpu8}L`qU_fV&l|BN z;?T~^ub#VOa-qz)>If{+^MjQ{-$k@wA_@)TE$X-b>S}d3?`Jq}pu{fV5KU%or3^j6 z1Vt?tn*H=iXc2a*6rM4Iz8)JR(8N?8a|dTgQ!=ONQ%B1bcZP=9_hv1#r@-RiD~M2~ zE}&l5S4&xbMq}gnpZ+e~o}o1xhc@MMzA1B5A}n4m6gc6q+#M2|7jm=Aj?fj@Rh8@k zT@RVUC>voZ3@*AgX*n{?X%&@vqJtYL(z}9g#^Cy#EnEp@*99cty*!#5wghH4gB#_B zfRy`G&z~!`ip$O@MXjO)T!S;@KQwIij_Pc#>DV01ywip&oG$mbr>hEjbw*68;TE5d z`8A}N1`|lL#xgjnr8^(b!~@rv{iLeF*HeI|$UVQA-U#+ck&9989D_62V!KJBM*j=? zfW7bbHsgDfIqPCsuLKM+)ruF`2d=pShm^#{Z<&-8`#zvDiGsqPAfWw{`3b^~C{g@GC(RV;(M#%tQo`#j`T_&1~oOQ z(AiS~Z9FlK(;^^13AA&gC`{t36g|=L%l&Q?HLVoB3Z-(zerbbC(q>{lM~rZ+|EyuGE1E=hcd|KEkaJyW4@JDsrT?;F+?dzjdbjy!H}PUm23( zHr7283c_;7t-AuR|Fe^55yZfgqEgF|;LZ@`s&ZDHDY%Ph769L^U5XqcX|tNUjzUo^ zhpND7?a&`rkD*Pz_BdzSGNJnQQ2;^Tu9}Si=}@y)<8tp$)?)SI^#-18MzH#~$QAP4zEBXEOoFuTo-s9NNtl|9NGKBj8I+ zh2k~zHDV%1RL8aJT8Nmls04>nSh3cqr3iOj!$oc)j*6r$Qz~GKA^_ZNzBl#n+18XX z5Kg|!y{=(TV{h#m+Mt3BWr_670!sIg+gt}?vW_Jfs5Hk)4S#+>4N>m|vVUUlxY9o~ z=i`NM96jbxOTxWgxIU9)E;75N59Z#CK4)d6^#~TNvS)c$8mk7jvO$x@7~NFCoTkSl zS&izvWQtIJ+i%{~%^$d`4GrKKHFbA9v-}tcj6TaUtM8`&7=t~_o&AYJe{4OZj|}}B zN2M>)F%{QJ2QYW~K5QM3?(+zy`F!b62HzxbNJiVp!$4cob)Dmacx^Jp``yiu|SWd0FQC&*qLdEAU%Tw z%CAqy3!bj0Uf0?5+!S#Vc$Ommykt_N*mD}-jH3drpA~UP(`-P(d5NG%`@@d+h!Grm zHU8}ooPiP1Ja5E4KLOF|U-H!8JhBpJFw4D(EK&ft(S4l}^qSD3T_f#!7%0PM*_kJE zDYQ?Np-|6VJk+LSr(3ND7H#WlbT%BCw`Eb!{xQ`JSMcT@9*#?u=F7Be92!Q}Cw{Kl zKmILkwP)3Qw0RS}}n% zt7%zcJdjr47M~!4`;*bb_ zJy7G+2j2#iPC1T#9>lVFAq{oR=MR6Gjiq(Ok~rBsDELVkpBdVRgnAA2*$VE-75kLQ zV@@N=?lmR#inK4%I-W?*uPduat1toUygVAqo-HoMEqHcX6SN*=CV7(qx2<@87jSG8 z^R%Gqn>NY;1T-c-c&4vCtjKQ-+V7ym;Jr>*?h&tP1D&fa_O6BZQsC6h9E0jZvX?f)*sN>N*=Ua?pq<8VsR*l zlf@noX%RVW`UP;VI{x#+rkb6yvp1*DZTe<(y3!{(&tvaA7UrPG-3^yY!=|$2SU53c%&uQm1NH|L zM`MvHE!LTuN>2TKO6N4xF2}=z)678|^yP)2?W*2TQ0Vgm1)s;-ilEbO*X?@71!VY8 zuq})k4?lv}m)~XOcCJFJ*g>|R$hQ5OyXOgZu%rTDH5bAf=WQe%es;5T>D;4G>N;dT zZIzmnD)aB`#UOCGBazr7BOrnON#wX`Nb2;I5)ljKN6(WA^Av!t@mLd~f<2rQ)F@;3 zrfn%7MczDl(c#n?&WQFV=CRO2&|n~3u7D})pgX`E8a-8;3?V%ER zN=`W0kkTgnQDQ2@Eo+``=RJrJJ0N3)@=FVxtC-y!hEE6qZQgFStw(}x;Vq5Yb5raj zB0~HD5f3=Tz2K7VCfS<~o=F-c9er_fkR3>f#eg^EkN7h+@`AEqvsjiM51VhR_|LgQ z65OwEo?IEO3HmA$2f)XBaYjYz_dV~2oA#-2%%q>*;$yv;Bp~?n<&2}~?f=sNVpRXD zjNEgvpR1DYws8_O)lfsYXOsaQJvy4oF^ym%;WQsHzAVy5*-m%=3*JO)46BGZ|BoV^ z54`__)$z~i-wO4Bd0+H{qx#-2z$4YLlLJrlKfR_USYVe+gaY@43&pYn^qUz1I`3tF2B(%tQbF9E^VOVc9T$RQ?I0$)D@-)XbJfvWxb?b&TV2 zAO$r-mQ4+^15)DLA$E>}+1-85)8e%pc^wp#MC0fE(>2KPsRJ{MB1wgOmT!@Adn;9Y znSIJaJFDvD+D1mpt>@Kd2CH|=tH*}%9^=x45$wWV`8Lc7l(=HRv^gqVJ?j5U>`QR% z+8TFnr3m*TPxS(ir;luAaJx4Sa#9M~n>VbZR$_14qXD)31HRuP>Dj zsov9jQM>jj`3weou)5*&@_K0B1VEBy4E3^{LR&=O@!t{A`&XxmvI8lMUY4_uJlxXe zEbRU)>y`mbCFKZ!a4W>8Fu+MyX>N4%_#@V5^yf~bDBv0p*zxP{#-_<>ArGO$*!x0f zDlGbe#2RLw7pA?O5 zv7%n*NHN%6u{tOz0ywn5QaFylLikTV0tQQqU$r<&32-hq?l;g^sNhLX9^f6W zE37=amvS`!a`dH6YEXzYxEDnC=rR5P^bx3&XZk3r2|u+L#}DYg)Ub~wv7koO+)~TY zvvjBUCl7J+)}u>066JB*Yj^(`HxvjINt;kRzB|r)K<_IN28w0W~Ur$9f&-^Y1 z>6Uqo*?nj?2zlq!U#QBZ8WBTbwF44z2{A%I(e{ohUSZO#Yw>jjJ?p@H>DK@T5aOuN zWO)v|j>X8bfWtHMR}RKRQnb_vXa2KSQt;qWAu0&$;3riMYnTi=`@k_FKI|ekp~Tbv zRGonWOs*bKZu)e~Z(z*>U1FWc64m^e3%K-~8i7^RVn_&{0 zQLIytD4fc5O$rPmhoe<$GzSJj1AQP{>+tLX41)m`dtZiWvg{936PY)j_a^3&If9}2lk; zYC7t2$=eYSL`(!w;4?Ikw9aUG7bxvkYe^2MSpAjKZ{Qh#xV}WkoEvur5VUGzGi3El z=iWyIkZjxRU4F;=>Rc{oU^JtF4JJoW^GZ|p5_ZG~jJ#0RNQt3tNX$MUErnPObghL+ zD-p5)NXenL`0KYEOv7f6So47)A0=#kw;|VR;;(Ko=OV@b<+T)vV4B#($=kI0i zX!|z6w+V-%cQ>$j*fQ5dQ^32)$ z$GexMY`v$X^@cyA14c*Je_RV=-z#>Xx}u}C=bZ+&INPO#0)4smeJO|w&X?(xe{Ya# z@_{}X@%4=>3p%7u;LzmQ(Tdn5wf^Y0!HrvXz8t4<491$uSG|HUL#{EgV$ZPFBM*j zkNHA%BH=|x+c3LcyL>p;(9Ggq+kx|>vFgI$V1dtpqNAOv;QilhQ_$HT*?(w|Z%0zB z+so}r81;E7LUpY1^-f^WFE0!YwAl3J9Qn;3qsWFIsPg)?Xg4vdi4(2SoHzIY4Rcu% zzYltJ3!OADc~ZA`so@ebc~oHMmC=o=A>cr|z6m0X-d<}dAIc_idV>bf=+lI|)I5_@ zVI`cB6q^b)wCURW@5;p1VXQZM6b<%m88qA=jL+DSQzuP&F0sZ>QYf(~>ge6l{;O?H zjn{Z{S_GMT+XB4uy8Sct#mHpm2)$=@nX!rVn6(|hO`O1tXGk&V1v!K=TVCD0n!CvmK2xcoKc@h7mG09o zp53G$2b1Y{&>QT%@V=$%Vxy~i$;%35JjA{UuZY74a>6^%)?-b6aAW_ScrcH$hs=6o z#Ubbd`9SRq7Xcw~Co?et}1o*~0)qqwr3i&Qo@D1BG@OhAq zQYkxRm;d;BSB~-rgPu5vd+j5ZM?I&7brAmD@a<7S=nY9*=!&~T&OWt#7q?1KZ z%MJ!g(?@pXAeEA+&erf>*r!Iy0;wpVRK0!Di57pKJpue7N;nffkTZ#0gfrrK9+#Z* z-OaxF3oj9PFCWDv?SvrTQ8I#cwz_y@6RPaVfo5>JC=sJX-m&~4Y_6*rN|M{;HOm;$ z_nW)~k_Uax$E4selQqpk1KQA2@utzvkT7E0l>K3;RH#W*MBJ;wCpsJqskT+s+i`q+ zo3^^5Zn=*k5)IHY-5hXg(+xY_F(BpNz!1||up?CVD@weQK_ z3f=&B$OYX)XbE(N>*u*Nn1dOiJZHVf+7iQDb@~s1#yaMsj_2r&Fx%pc_Qqk>Dsv+EcyQjSnvxm$G1>R|NG!-$rJpKNQHyp+ z#R;}^7{9);1cStzP77(QH#)Wg0P}u@eFam6NrI*mqHGPE14TsRoVUyM>t3tL#s*#l zWmY5rBF)Iz~3U0yz#i$jLRNd8j6^hpyqW*&f*CJfIVKNL-HW0 zx{JHw=tTGfY9s^AGU(ykJiU$)gPkBP0qq6;>m4HN(Oui;%$ZSD(}e|m;@MwC_WyQb zs;W!dTCGRp#1sOQG=1K#!?U@I*XaURnqp;B;^w78n&-s!Ho}A`>je52=zu)@{EYk` zA4zZC;Fj9w{dqKoifYuNDlA~5I7@|(zR4rcd_mF~+EnhKT zUSe_I?=P2&-`7<5hp&+gA>#s;GL>&xGPlN}h^Y-$`|h)?oCM8SwmB~= zaf$i371lTtpR$@HRd)Bg(Uu`}qW|M_d)K3EHDo*7*jRDxUFd@>Lw1zOL^%s4VYD~7 zak+RwW!aaH?9HKK5Y3vb!enNNHsCH%zs)2Uu_jTdTzZ@_+vBV>eNegrXQ2W}Sg!wr zzwFfFBx_a^;$%C?l^QKY9UoQraR`?>p8MkvH}z0yz7G4lPeeK%((%W8m(yZZ;%Jbs z078uJR6cU0tZ~!;)sJzxy+A#wpFbJ5*ln-Am}5Lu)X9BJj>;+m3+P^)Ekd6x$DG%< zg)bKzb4`(0YfAGPgwQo~$go+}y(}ITdh?ReLGIEIN|d@W#OCwWQB#^x@r3Bq?`sx{*uW}kXp2{Pc=*nL=W|MGoO0!iE&C2k(?|Z@WKd>w-vs(X6`}=`)CXO< zy@nbDIFn-4A(kIFS?OWsR(IZ;lCigF&(}*4$PJ}lg)_2Ukp`9FB`jqHpk{F*Wt)-> zL1Xe4?l@`?6;dLDP^r3)hEe*~yoM>yfz=Dl-Y`hBy^!VMmfrfSL1mq;MBtoF2zZtKGt0WKsYi!p4x^G#zB`X)2wwSc-Xh|? zEie=e@si4NcY4@6f#)Al0e_^vrBxtFpJ(!b?-=B~MhCkh9LZU*C@Db=EL(p6_5p`?T9!*kd10zao_)0M71Ajz9~w*BIt~sbL$+Hh$?7BCea;$@I{X zlGe{lmgP;vax6vLy{yZ>`n3amXN;TUiiJ5I=G^`19aTwB5Qp~fb}4`IeH(4f4v~PZ z1g@OzeSIN4;{1F(dbK_Co>_U|uM(<%oik4;c1c?Bms-`~nP*P4&%vn@sXVuDZ#b3T zWF+|fB;iECAXpj9$^>7hNFhrsU@K3glWi0b67{U8F=>&f6GWU4y;_Tqbf0F{kFo$g zl7C9Tek~Ca>>xR_l0blJbQ}UasmY(Ww74^kaL&dEmc;fBBG)`SN1a4)M;J$nar67? zj34nSDn9rzqrZySBG~`Krk4GG5+jVKmB#;q7ZoY{>~U>t=6IvxusWby*W82=41!5w zLcZMyn;sAX`QJ1Mfde~i;>=T_?Aro_o@$8>tVwa28oG2RdW^3Ju!0cE!dc2+E4C?d zJz9Rv&JxV}V9l*qLcjp0;{E-7fhsXvMRU2c^K*`@k?vCvcs!AnE-^>RZ+nz6>6zi3 z=NJ=sTu4>8NrnbjOkC9V`agO%KsV2>dWsVP73K?s450l11uDxaLlHU)D$U^X=RZcd-X;WlCqbpSUt z(L;pRk-$AF1YS|{BuT%~ithR`@1k*__MeSXF#)YWw?sS~$?ziZ>BC>-Vc0+z;#m|a zO+~J*t{y%HJ>!OWv>P{}<>*t+$2JdH4B1hasHYB8=#@|=_OG=HKaf9(mN}M#WVW{O zMv|ov!fa@N;6IjHa?j30iI0(Cq6LD;B?P&O?hN_dD{mi;CbHfxAN~%W!8NzqCXcpgc5z{5ua>L-M)$ycR#lL03L>k2Fn;sJZS-%qI`q!#OJC~t4b}jU zIeQQ>3oJAiJ_8&;9ba(?-eriPT-WY=zI3-`CE@vX#$7PU2d|tL(p(!N8<=0uHEoYP z7D>TF_5Y)Q%=<919gG*D@9;umm_V3R=aVfoy`y9V>2r}*vgM0A0lMWVjxTwm@`631 zNACHKW(V-xN-KhySIqz6ZdFRB;EYReprJ?S$##Me5`GAi+eT~MGl;(W$;rqqv>J`S zB)uZlHNn>V$xJS$HiNw6Zr;}a)a*-7O?ArpVyeS;O?sy2Gh}Ge{nMg%1;)>|SZ~&j z3=ihbc10|vB0{~Ybxo{C5@UM1-UL0ey;uH9Q(ac0zL(rsk?~dECsY<={`1!U7iRN6 z&81%{J_huzeE7n^*l=lKb9!Yt$vR}17z*V6i(hblF@$x|s`YWV{>zaM%2R3|{fvG! z=tssM4k^Pitobd6OiMmKA}g179{FuT(XxDfVI{HXt~?JA7}4mDX^PBly7jx__6XQ!sMX!|ZPz{qCCmB=Od=zb&iFxF$%%Msj* z8d!f1K)Nv{-rp#Sw2t>zA&+ew1BE-pVBlEphHq5*RebyJ3}Q{E;thT$JMBC5Dz$gu z6<}tZoX?sICg)-_?b^E!i6`O>VqTCm+ud9xT}@0xJb9qX)}_q;oLUvOLo%&?9L-eI zG?{w0ST)1u-rKW>@6sb&lfBE9x4`?Q9RndRBh$L>y(XD=XKiRI*UE&xLC$PoT(IgfJ})neoWedf4}N%rogZAfox{T|KJEOqSPHgn0&?Km?Nr(BZdW+Y&B=Q2OP#re4h;ySJV z!zIq0#L=l9y#A7mf^F?|k}vt2da|eb-{DvaFz7=V*LPR$L!Hw-y!ulbJd%R7`g+Vr z{#;wvoCBMCj=B8@`EDyK-TrE$!7)2lTVHN>8rne@eZl4UEWD{imcVM zWvm)j-^K^;d%`VI$!gN$7wFk!&yHk_FW+;Kwci=N`?trKJ7qZM;j=|+Csziao9#Q! z;b!@NPH-g@?{}+-ZG+;bI61!wIM1-!9OWEh{}AUl z8~4V7xrKeBK6Dx1&H4T+v8njv{E?J)N2=e!xxbYan|$!qQ-qy(8w{3ryxO@snL0kM zy|TPKCXqw>4>~?RM*aEhsk#mX!KCUshI{Y#)2&ij2ioondMBlg)=FIACrWuQz@*=RKs%-oW(G9iB|xesO1jc=XbqFSkyiqVpPCivitFLYgb^ z`A$#qV~X#90{P{*+->~MLbQ+5`?_#N~3!AQ>G^SLJ0IIOzzI;-lI|K5lX_!yVOFzr8#J0r z*DHU|ohY($0f%}ik@{H%Gf=bzP{WTHBlWJek&d&$q=@`P0~+4<>-=-+hfdv}f+U$p zwl|m~E96f1h1XgcseITJjhN;>6((uT{4p&}DY1Ud{eZByQ#BikG#fn~EMc&UE!$RG zTFCE7lv)4ST}%-+ZKVR-no!oT<(mA>e7NaZys*#5 zoDwkd%fIABEz%pLKt-cgy2`k{o&O>dUQ%3P@7Tclf`4C4^cS zmr_xox~1a^5{Imy)HH=MF>EXTEJtmp`W@xZ*X1`Vg8)GJB-o1g_dnq}!?f^|Lv?ZS zmtw^7%!4rIP>HhNg7B0Sp1+}r55DzQbiBW_I}B=`()@OPR5?;6;*ay|uEp3iMf<)n z%S8KEv#LSN>I4-HZ{;w8!+h}t{*}_vS24-Po!=DiBIuy(e3~j+S~R&czg3AtO8tD! zC?~VCR|kvQ(_M8Fr=t`N^s=$#jVqmFIK5*}k{^6c5{15;Lbk6Q6Rsaho$15=e(h60 zxjnd!F%E4(Hx6sA)(ex5uTSrFNk6#a5;iTOm3OeyhK=r&e)>F`Ie(MV>T_5T8FwG- zFm{1H#gi-yT2@_Kvb6R59onUTPIR-D6X|b_ItGgisB1gw6bGZ~MQ?LbbuFyIO^hnZ zViuA=TQmjrhA)jjEdj>d&t2aAA`p;*R{AFg1F zM(cuFvHv4p7!2%pPo2zmng0 zY`<0%nC+UL+TxWVw@Jk0{;kijfyzoUa*0LgGSK-Ay(q<`ZRM{;cMAWd$P!M2L~pNZ zwgjn_nDbh-@CX!nSevkK$7Di5z+(ABCdG7lN3Iae)Qnj66;6{i*G%5*w!jF9)ncU6 ze!`pD-#mxrQ1q}mUq9MK{B*sR-^5Ls zSl{6}_To%&-FqU8%fm*@$$%)i8FVTpEmxV%Ce(GIXWgA<(Q;2U2@JIdKK-0{9uECg zE5T>0sztM6Y9t9}9`vMl==wQvUTHY8z0u$P3SVCBM-|qHXsA7zB4N5!Uax3&Xi<4!_bPT5LkY<76J;cRqxoGb~&;IuGb!Rc{ zd2KXkA$+m*gRewp`(d-aT|q#7IdQ3+=w98so;+uP@Gj(AE|!_a#gU+(AdjoFcV}m3 zYgf@E=ffAXb*d&Ni~}hwiDI?`QEc>F32F|nxZDnzlxE|g-V@7zIc{`G(~B*2%;khL z#~eH!O6P}%i^|L4f%<3>!}@{GMwanEeuyVAJtH2n`%xi6UEJ(J-519j+4OlN-7Q-$ zzdS~mYrKW|6=h#Pdt}o9qw!n(U3^+K4tyI88@T#lwJ9MLTdO~!g}T2N5lFso84G@a zraD_FE7sLLkfONPPkx1FCyIccfRVvISrNj8m{v5zf&x#Z&t_@lboyk4tN+zr4*7I}d&T&q<1px>E;n6{|DYChgvHW@>PY z2A(+uQ|`$J<|!GuL=r_jmP--?k2j`O9#vntN9~!+rJsS?>0th#6ulC)_~_S{pXRW* zJ#iJI#4;$$kah_LjQb*GDSe+vs&s{&LPI-wd~p>i6(h#e_6Dl%C0=ZRWc5#ga77TS zx^NcEjunT4@T-4?F1_`A{X1GXGZ9(_VEw1_);Kk6GiW6_DwRF%@o09)G$BQUCgcG~ z!urm3BPmZ5!H%yinr?C+Rq&FOP~b>IEQLMpRbF~2&rBjf?c>{rSJG1lQUMexd9eNo e9G>obf^nB$2yPk#f=5Am z1+=*HPJaRZAv;OyxPn0Feb0YziHzvPKqI1?jDiH>1`6q`x1^FkjEnwhlF)V&ad)$F zbODuCjz|MduibzqadTI&i?x%RwW9+F8<~O%Xh(T&7jty-cCog!as!oPjPL=i=>N33 zn43Ized}gzZw}(T!axR&AU_{bbF^^tG;uKp88|&XcSrr_;?}NUI}@O*3#hTHE)Hl$ zdT!P-adEJAump7xZ-oJEi2pj@-34q8x_AnP{aZINM|*p72RG2=NKz-z_UgHty0x2~ zIjH3DHysG{79=AsqVAQkzZBp_V&2aE=$YU%rh+*E^)nH3sq7j1b4F6#8pUPbAgxnF zhIH`iy+SRr-F%OVGI3W!7v{GmVT?IEYiKxJHaBtcU;y~DdLz*BckK+ zU%KGl`B%^jsybx}S$J4lcyj%r_MESSbXGFXCXOt-jtgAfUylf||51Vi;fjlkbC?%{ z0-{>Rq>n@1Y;|^tKw}slgZSYTU-;n+$)ASdyJG(j_Uj3y zc%E+;-I&w?w+NT9@@=xu-;ieEBmD4-m*+_BDKOxA$~)yOm+*}?D&*Q|M49U6JhiFD$8Nse#5S%RiO%I z0G=#ei1glFQdof%9)^ne3^|4>?V#)wW&6}|W%lf9MSVC> z;tepgJ0%1+xc)KC*NfE4<(zlDk5b2fSNX3yk4Afh{Qnx!Vk*P6oxaYJ&IqN^8CQ;b zdozjNwxt`1IzHCf5)=ggJc4|Y2ro52*S(KnC&%5cP8S;SNF|ej|IFbRpo^f|^PGnM z7v}Uoob3P81ApmXO;fK=Q}p4AO#f8z%CE^8l188*6IJ+F`b3jIf!%M`_=Uv17v|in zM;csWuw|vXPEql&D=1BASW$(2rI&}D^gYKWLp(ZrfY9Yoc|Dheu125Ee*<1PB8=A0 zR0$Cwj@U46G&BTDET*}NR<)C)zG|}4FukSXljCPqQ!B-p+`<45gx`jO6n0rKci|ZO z0IiVe`TPiXe!<;^0diq%;Ni}#0=l3*${c8kbDSZQmbUE8*TqXdfo^qSU-TKB%=lia z%77~WN?#(&A4($5PsDp0s$YVYM1#cO3!H`#l=j&qqedUzbY(HP3jMGuCmM*H+J1Op zh3rO|u)QO3=nyvia({Oelfb~|1KTX5EwfE3?5h*rScWmm!#Wg-ZC)X{a(RJa{9-0W zGQYHkO1dR-^@9?T#wr7|{FA`RLu7a?;-u%D7PSAs9h`9=M_c-4Oq|Y#oiYk9M}KFh z;T1<=BX&fN60wPV3i;ai$+~^rawOUhA8q^$vx(XZB15z&<|Z-+D^v*uNO84Q$U$kk zXD#&%p;X#2`|jC46D9~}w0R?y<3rFMn2;>RMFM(3x_da~>_#{-=u}@-`gfGKa47jO z6=3Ys6S)W(=$41@I*pV24*f$`B#p1n7xJ1Nc<)q*U3+ktn()jfunyM+bC6aJr zjon=s*CRWO%Iy)c6p*|Zk2P05JNhhY&%#lsF|1uQ)h`@z9U+(rin6X0H43T{w6@PP zJ*FrG=rxLLfk7~~8liFT_j|B!4go&xY{TQx{959Z3b-a8Gz&EcaloQl;uj%l)7|F? z5;39BDQ%k`<67MVu7}LD!Au>CN}_`r9b=%2c#HfdCDfog<3MISdxE)ME+!4e#v-LL zUHLkWOf)(zsR6@3yN_qeubcE=KqEHyiqaF8(O&Iw_g}d;!|70d&vbj(~PuZKgbc=cJ zSU#H1Td^p1-+c$5eZQikFV4A*gIzQ9Zo3t9?n;*G{#vm;c=F`4jCy(w2;gC3$ts*N zo>WL%BqiHaL%q@~>s!}5~fF%oY4U8sJw><7;P zI-vfF0+NZQRe)n?mwyQT))mBR^!8_4Aro(TVWCsh1V+bUMq~Tm65?eCBSV&QE4q3H zu)u|7z0P>KS|jO2_SSksb#O~R(r1NF{8DoAjpq#2G*wce{!@+#-wTHhlT5Sp;Sy5# z-ktSl*OhN?&!burhT0X8iskn!IN>m?JUwWIog1r>I1?oK*z?i|-2 zeYx#-zCjLit$aIuP-;ERJC9p5Xdm(^C!;f zxgwSoqamj$^Z_q!xn$=~OPasx8t^-*cC~Wiua*+BtXD^uYR?%mTG1U8*Y&_@s#v|Mlpj zK{9PA@pT%^s^!SM8RQI{O$RqK1i1rC>>w^jP9;N%NPU!jqmF529?izIBNS>@zV1)O zI1Uq!OEwErkE2q+^u3NT3ot%Adat&5rI7=UzO-TavgsSO^f~{>qfy7eo&4Ja^Y<|O zfQ^{Vh|c{jdae~+uGCLY%o5bU>t1Q_w!D%#W0J#ua!G#zPd~YvgbKFQFvT0FJ$};A z4P@gmF;Kg-nmQ^Iu3=}NQ_R4M(_JX*Q?3Qxq^UFEW?a1tY+g9nIIq_H66Ixn4LV`| zYN-=tn`%!IRNpaKSE<~EV`ZU}ZGCH@gX_tK&E%1xT(R8IA0TKfG}v!_UJKPzuECXKW*yEsI0a*kaXUMV)sFayq<9bDke9>E`9Ja zF^z${ty=-Ss0zH$t37zF6D9db(sjMfE;fyFh2JO_O?2q+H5)D3t|x&PA$H$8nAl#j z>K0X&(WU&GI#ys=DX~j%z_%x@^zN0wj+pt*N&>XWTMqrItLoBr;#JAVh zJn?NY(RBvWk<|-m#a)IyIm+8myws_QwO+LJ$%%Y#)dhJCpFM*ZZp6M>dT4E>@;dzLi1hH2t7H(u6=hs!6Y92!~K zmPc$eM}?$})yI|XgLMMHEzTfFL60^<4aDYH9#B2TGGE?ryw3>2*obx=>+`#5YG-1$9@we_p6#LmrHy79T{-A zUCV<`PrR@bWp@u@&N#!W38`e31MP@b&;2e=!pZv84Bp>MQLSqED;oSCE?2p0%QaV) ze7_nx*ywC|SZAjvL-4bvExI^84>%L2=g;>I3Y+X3gYL9;>{ooXdOL$YMb44w$XYVw=0JU+916!IeoJdcRxss%Hxv;|y)D*tDjwEYAl+8sT+~y}a*GuiB7`wJEWFTAYlRB~=d z0mSD=UieOS*TTXvvsU>8@37n5;rbQ5$VeZ>_^Q!qRS`mZxf~kmdDPWVA<%@)c(V7~ z9w`&m*b$o4-sBq^9hK&L{Hs~=X529oarNE(>sx96BLnU0Yr_x+&LkyqarWW9puK$^ z`ul}DFXE$(fGpCUI3e#>T=xeUb2R~6l&It4*3Ukl=Z z0z+Vi@M8$d{u-QPFG2d@H=Br{{r*o&$!iQ}2OG)$pR(U6iJSebvyrFc#MpSGLO*MROA9|Y5WuM)ybTk zH{fte}Rz#zaOPBF7Yy-w!AG?J#l&+R!kH1D-j>&6dhk7Udeo12D;&g4u z9S?VL*Q)(=Cqst_{w__R+E`H6dt)~wT%iYkho)=!4EWXf%G%?^D3p`Lo9rGs*C{uL zi)o(i$L}Zlm|b%GhoVvU42DT#1F4|8iB;``<~L`<**#QSjXvW7sN3`_gV?^VV;uf} zl08-zgwDWvwd6vrzKDiByw~>j0e7z(ARCj{b&plh z;*49&4Cg&BT!V1EmRVaCjP4Ae<2a>JcIc zd6v_$muYl%BMn!webe)DHL2F6j-t$t#8T)KlHsa>F(!cDw3ngk=R5fEqxwU3lY<5U zDx`=HxB}y@IqcvGKG0<~unMOU?pFF*w4&l{yuSyx@cNIt^GCO&QZ!Gpt{&Xdg&)r& zZ<7&~d~)w)APuZsSvb%IOTf)=wZmYg_)=BO08zXuk-j@3Pr6OOO#Q`F0M9&`ESSYe|ORUQq=#y=ZtVp8e78}Ac2g@bYSosn@ zJbtmMZvQ9$2LJko`I>HkaYNi|5OjM>?DSq&TATyY7?2tI1w@b^7L8eM?p78@%O=@Y zS|j@rp^7df%_iRu%mH4Wa)F9Tl1|VQO?DD*;PTqMr{X-FC`wKGN|dQH-}#EPNP}ZG zo`FS*v6==h2OPttU{pNiQs@4&_`qX>@sBpS5|Xq1rvV?cXlkZmBG0t?0CUJ~3pyx* zHsqtqkJ3%c=pLp6!djM5m#ebE>l&OC%zee-PA)@z4p- zYNZ@Fg60i~mYSyqG};DhR&jM+wrUQvwe7E{!K@91&TjSQzv^VxQ@$-Q=@<`aK29PHaUY5^C?2oD8rNM-o7t%2yFmo77G|S)YT#ZoX5H-*uuPz zO~FMv(A;lB^y`Z+=O>O|Uw|T4hwMVikkEPHiZ7dik1?vH3#oe0#ko8sVzN+8bSx6A zw=qP+GecTk6mY^68K62=6|55*h@0L~q(L@L)-;a}BxR=|A_GpAHTo}WyG=y6xzno;K zLi;acaOc?-Dw=Rv>$Y%7GV0jJ~5W{^H$iTwyQBiUjQ~>_fDh4x{W&} zdbf|pBNG+T$!HU8;d#$%CrQ4;`G0H0mORxf5rN) ze*(Yoe*cbcG~W2 z-ZMA@Y$kYZ=`KWFPW&AkkpM+sV(Iknv!%D1f~Ulwz|+6F`iHK)#EG8{k8({nsk}^3 z+{yj!Y2UZkVmr!LM2HV^QpgNp2wf=XPch`)hU7UZW(cv_kMLqPNn18^!>TU zs>98j<5R`Oxoe(fAJ)(5cq>s5Lahy#sTfH@5PEL$t_{KvbN{#g#Op^_N?irF3{}&T z6LE?cpl{(?u)&dB2Mz-WEBt0uwb>2iT4LrTQM^r;zv$Bb@l^vlyf3%mCt^>s5G)L9 zDov2o=Pc2`L#V7P8w2;Yy3TL9&V;lhPfz=iu4SEXme|nO-g+z(^kX}=htDZQReNW9 zw9WLz>ykzcem^`_^%8IxF*?_{KfVzI)v;+bt^~Vl8HV4`B%8MT?P#CBov6daQn$Qu z5Iswq{C<`OVsMCFOAZU<9p>8DVl!4eu(-ee910SQI_^~hUsW>STPa|Y`JNKCd5p0w z`pSV))S`~|TQE^wnb&5&Y!sVLH=y5pX%SaG1%+#3XBzu6ZLFzP_0L=yT%Y6{^|rCb zR)uogNgj~o>?avCdHx}pr0WzpQ}A3JEo8lK3jiUKL3>C*Pk88CIpoyMHZ{H+Q}zN^8$W<7o?qTSZZ-^Wt%j!mg98eA z_tPI&{K^{_8feF=kIlP&@J_41GiCw%B#d)s!pnPq9Bd z&#B;Yx;lS^1#PwC(-_~2?T2*i;XYNM5lza>yi_(V`B^4p#-TZw6K!-{Kp}O3a78`x zny8d^V&R>M*b`{)A@KJC^7a7SIp_6R73EQI)Q%Tr{)Ae@S|YGv&j!%C=#L;IfhXf` zA76#*z9{r0FdwGVPA8F2@Vix&W;pr6#lvF*1S8ZoJ*}w*eoY%3 zo0j#Yd|;ci8st+#I+4ml;-mr4M#aH3*Crg;tc*!Y60CuZ1?*3_-njB^(eD7Fc&0vg znb{#F4lRy#PkEh!Lo$DWl?v9G9*YLZTHwW$6&}sa^Angt+=@Smd_#wZh{!RK;YJL(a+7WVvD3W>Yp<=fvz1Yc8BTG_`I z4;8{VRz!Z?8F7sn4csvK5^vg7DG2E%CoiFI+?Up`%zLCXbf#|)<_l-GFmn>^{tk#K zA@dYJPz7XzXT4x_FQ>2^0F}4fP$>EUrH$P$2cJZu1EPFCK&~iAN@WAUs-+?o-x%Sb zH0`st5j`$HxL{n)0P%B^*eVL(j%93@zrEg9&A)YCz-68OgF7+oS*miSKgp_-D2QGL zmW@sFES*q)04Bgqew)YW^#C;5XVkm~4^yT}iFx2QWghI{X|X{02U1e+?ckGD`D1Z^ zGi{IKszMwU6{syo4NwuKZS8vZ`T{BLHN`i8#M4W~rEGS?0=6~mvl>874Vo;kbd`U0H zC<(^{LV(Qwno-#o{gwN`%u7uz6%Wb)0k}f9T~|mpSdSG-{mBgeAK0n|gO(XXHgR7IhXnl{aE=B5}0P^kpgfvTXpTX0{7rVW5cgTNV z1d{~2L=W{l=xu(nSdf@Y&zhTwdzo{aJqG_^dGE@Hz>Y_xUj(7A31gN7A+Y0r+L;GSp#?b zIdo$Vol^2-<|chCSvY%~OhK-)0i(@h1|EUioiUA1IirE{{&mHMV(4V=A?6ZS2UYQDEU z9su75LLz(c9)YR%|&mZ3B8dwFCq z{|}V=WeZM0V+TgjDDRNsKIJnjiUx8=N0CY7ikzHP?P$P4Fks@% z4C~pO`5diRR6jSS#bEVnUHaL<5f~H{lzP620npBa-2bVY`#*P#{BOS_)mh}? z$J*@4z#5eY`DzR|dhb^J{lf)Q+wF`|u_}P@RTSZaq0y2+nr?1Wf9}T}o)~xk3Y7D) z887*6@mSJ4=gzl8`v%D{MRW;~yc1dOXupqG&6aXPB|*Gx9?%bNC+W#y9++P<;XzO+ z6dwBR-vDzV@<_vxA;Nm`Mk~g258r}_U6la}%{j>-(ny+F`lX4h&g!rh@_Z!)d1u@!iB!oUFUm02Y{Njkus;v7(K;uuw?}mo)sa6^LH$8`WLW1YK z!8l577nG*lOaohxKoa+S+N`NP>5re?laqUZeB?2&YCUY696l$pwB>=Uy!BLcgryk= zwkh@p=DFj2e+ZtMBe=hK=9hEhE*S@E3GB-J9d%Ab%x@Dxs88r zK_+W%thRjDJ`GpzEG*4$eCbs(QTWN^b^G1pezD^MQ@_)Stc@mly=V|iH!CUEvUFmY*Ywsrz`bYIpUeF`cJ(9=Ka_HD)J^lO*LYB8Z zdeV|F6mSRwm_xF&ytyyBI zugBbFiDTfce?FQrMTc+lp0#+-zx^R=*^6B=Ng#Tu^~x9=5$&6Gjb?%9(8c}K{8CSk zOk%$~pl7tv@bg)+{lKVsSH}G4b+vop4zor?=^yAHtL6xIxp_aAL{r(ABRnq4mth!Lt1S4bHC} zxqG!tB7pkjFZ0e~TZdfmisg6&-U6}@zMgA6T6-wJZ2QD5wIa6i!1&$l1lMZuMcdV^ z5PV9^uuZR5{_cX8i8T{*dL}1TX1Sm*a#H3U_W9!}=lT8v>0`T_;jLH7U8i7N0Q`sH z2bPq(%AkoSK!b-MIW};w4oBgGH)oy(ikBbGsN;kviK4#e_>`OxesoR4S48eY6bje5 zez7cwu=?xh!-B>(|4Q+g$j<`P2CaXEm?;Gx~+_jw09@`!? zv79n@w6&vEVEB<5%H3R@Jg%_At~ti&5Bnb>^VXZcI><=q1z%(j+1`-%m)08fk7L}w z8u0CluQ)yASAY_cC6-nTi>p=aIjUT1xj|CCQ{&4S%b`6|j^7mj=bBwf(uexI-dhD|UT>BSnc=7~Og&Zv>A= z(~mc6T@c*_?PFz|!Myqx0A|;@%;IE6ilA>VnyAx$T=bM5b z6K<#HKjkP5GiCRfXZ|*dsIF9k>*OMGC5=3RG+_fr(|BlMEhM>)%rbs?+l<2pa4Ze} z^2WLIyKSh79@rzWxVHYRNLd_SLfr-inE-UNLnv74h3d+t0I7&5$GgR#1MCc`*v}tY z+FqI<2X?|i*msAA6A5g{nEEb1zvGhq6DKgHu(ROors=@8u=bZCf1>u)9M6Xfh{B;{ zO(hz{gf37QL7anSHcx&KxsfIFebLjUqoaCf3s;QSU#r{5g~vUO&a|0;-&AjTBh##K zI7_X8t*n&I89ZfHDFl(I>Qly!DXhAj98S!iKPqa89v{trVc%EWC#F67wJV9Cku}?! zkTBm}n7qGVEqjxUH+Dd5zO9JSkvDA#Ll&y9X~0HQmi7fOcpV%eJHAj8@X;GNAaG1D zs~gwGKa&QW4ho$x*q3?q+Y$kXNqoun`E4~qLUN^qYfWm{{671*yjeEj4AWVN6;~^4 zK%0c1Pd>g8{phfS$0qMSB(3BaUDObF<25~GNlMo+Tyq%jqORvL(~)KiQMfa4G&)y6>u&CCs#`Q`vopEuCnPvb#L2D-B$VGVd$W4C8Ozkt>^rU%0TBp1u=cv zroAG#njwG5;48^NhAniZ?a^cS=V9%>%by3fulB~JboryZm#IU~$&+f+&K!#D3~a-m^!CW!ln>?%z){5T^E+3pS4j z$Aq6eigwB7_UR8DHc70GKJ)r&tpt%Xgn<4{s)3YWr_& zL1qB4`>^L|5Ei5|Y{eKcVfIpXQft#c;Z+Pys{OPN}kMZ4EGApV9=Fd@hOdOx7Sc)|;rgyBiHiV{%)W-;O2=+B*^raI`n`Yz zkiuQRkXEm{|1^_FE}~sSl@ss|NLFPg~HO;jOb@lJB426PQUqLn(w%pdLGn`wJj$)|o>-@u=-QEv@@ zH-iv|O}VPw_P~hSvkRDE0QcuD;;-2%p>%oIo;5qEIOl9E0aC1*xaxl;RSO2~nSeq4 zTeuL);<6BsK5><2bv0{6g#FrJ&q5Z9%^NIkblvcxBeM0)*&igs>Hhk(Zcl_GMoc+> zs;7XD2IMeT7&+s!0?m4=8xFzI>*&a&OOl}E)`c~WF+Ycf|6Txc^xu2*?t@*&dJ)Bh7CYi1P5a#4LPYIw-=3 z5oY5vTiKRv!!4P;EKE9K_FzkT*-T72CYp{~_Hm1}H)KA+b|r1qSrh>Y;0{giON>ed zib2oHMNR&Ui}DRISMK1(XD!CS=?bPlTE)+6<}hdnW(7fWl)uq%0p)JnO2ss7rJ!Y;D}q6j(t@7fyc@Q z_ZR3ck|FIrU{sJ3*KyrKux9LEFu+OENJw*`<#T9Z+wU2yxfM6se(=JIQ7_cBa}2d! z30ki57rDzIPjuJA{CyQ>{J|YA)j7IZ{}%?F?HP&i4|Up$%lJ(m87Uv3J#G)neczi7 zNFu8vkkPs93pLN18S%_^aCUEmAkis*bK%{Sbaf_f2s_y1kHDZBX8*{Vh1VlzWg>qs* zO3=U|NK_xMiR80OXiyb!<#!f+0g^bJ|2T1*e!a!wo9##1+{qCDefL}Oqep4$Gsz`Q zY^CVoRF~Q*yv*hu{Q%Q$NDdD%Rv!J)x8|6#C)7T?(+zEVboTQ(8&x!loyiD!`I4@O zUvVU$Bm4GILYzGnFk35LnHPi&$rrwQ=p&wl5ltE z+<9W5KHnn>uKbWU{l4Gax)`NfqLrPiW~P?95iZh)Eqn z2YnZ^)qA&5giB25YY<^IknYn#obF~ZGo?_JApdNk`C`I4d@mxB5~(vg7!o^vsvv0Xc>;!QHx&95U<6fTV$fk! z6ap1`QVgSs21E2hds^sJX3gu|k`ypLEZ*PNsR|!nrY=Sb6scSMv0iW?CY8+rSMVEj zP-R+-WtgHmO=}Q7n7{YRxR5pFD2<6!v)*T$bX9O8o^PazpSVOWj2ljn8tQQKWxJ|R zI4^NRRm^A5tR_i_D2*Ri09IH)y+mxZBPu{=+jZaZ^l7 z%v`)U-K7iuq3!`xp}aYhp9XjzZLl{PT__bjtXw{hAxum0ygy!X@hcI;B>vJROg(BL zs&VT^e~h3#lj9 zk@h^4RLjM-CDRxFYqSSm9(}6rrDj3Pj~0L3?77Q$lKLew|Ll-h>eaxkp~@Fr-T|&( zY@B^_*fT-t<4O^Vui4K~Fa8HALyn$_MWa$k*qC@DnVg;CSU%?Eg2S1wF`0C!6f61Z zv-4r(n+chtCZz`tyT8)d)4yEa6H83~Soz{e>rTn{XLRIQ+?;U!T)GktROOiduT?q! z#<8SUi)ciI?LSdGS``m|%ir+7Y3)v^**8<%pmAEFOZ!Q8G5tlpN=kgNC;CB1;~7W} zwqOQcYJ_<|&2}c$yavTy9c8PnQ`GV5#@2F}14}}7?$=5Wi_P0Su;_?1rzMn&FlJhX zL$kQ(Pa#(Pgw?HX>p9YN#@{~)^W|F;CNLNF&YEBPTvFe5syk4AaT#P7Hj<#_vJ%P8 zR?HQI))MRdDI$%}FNu&;0nehV$$qe9Xq`H(?R@oN>2Qx=T}6$EUG8b2kdxgJd&Bld zRN)r?zIayPjuCy(M(NN#;cMWc8(o(J;pM*CZ^GTfB6cMv%!#?8tRq@2C>P+kZ>iWF z-B*p!nXDkRUV}~obh^8js&&KrcMFt+?wb=^tiOZ)B*G#`IO~6A;ElB%-V~CmwNgR{ zxi}3Zhgj5xIKVflwJE=$=7kuw*6D(A2Dgm>yY0`RFsqswGnsYXvfxPN3fbk_)c;&M zy6fXoP%x}bhB+~Tpi;U5nk%+>0n!4|+@9-~_C4>(OKi`3e=*C(%o5UPlPQWsg!5nwIL*XKRd8t`o&BGg?#00$jCNf!LT zC0ncz9Gz7#)3G@GgUdo!gfb5-t*=}!H=RUb$-w%&%$LHi(DUuQw;18RIWWgY3T zN_Q(!>~^?+yIGGv0rp%1VWUnAfue<)`4R5|@US#KxBI2_pvyOuwf!9~W~9FkZak>9 z!ByUPa=M&Afr&?tTdDYM`tOVc&N7 zcld*V?|w}FB9u>f2JV8x4P z#DXO|`2I-hVE|y59S)SVNOe7;&*oz~QOX(%lTwo+I z-TMC`pg?Di-UuFQ*R1WVOr+mz;<88Fw5GLZV(Zs(+w?AOe1#Y+3|0*yz#GR-C8zL@uvMOF!d5%}mMTid@-?UJLj6%x zMXZPj*2&(K^t5191Reo+SDvXeME=)^{I00|`E&|=aF85r9K@0I~? z`^1R7Wjr$CjrqgRdX}!kvnfBqyL|73wAwcp(e(`C;_)08Ra@DnNkq1i$%}t1YuNI% z+0qHlHuV*s^((fn*Ffskpkq2RJ0Q^&vLjPZt+g3r+o2I4~qw8{xiO9aB%DWsv9*rOnXiRewYL>Q^J?pBvr> zG;LP(R8~rN6L$u}K%l^hV8E(!9`IUT@ID^IdIUVSVdFF&DeTJkqpdX2@{jS(pGfGun*qf$PlK*kH*M zlN8;o6Nv5JWL*=VveO6+}qyJzg*mHwlSA7 zAnMkU52{QK7$JZYjL<#d@17Q&Y$O#DT7_t~!iO`!+oaU;sQ&a)Ip6X^Mj`$S|5_{! z)#z#U-t4^4T5`9GSr4Jn;d|~~XcTV9d9)yNGAdXz(~^svGVdp_enkFSA>|M2{ch~) zpE;0>WAROp1ni`Uop+u^lPh)xVG6HHfL9gHqLcz4f&%|xg+Bd<)dI1G%A<*!{Rz2} zvGV~YzLmT2j*$vOEOLAGB&tTsf~nDbYAzYY^;DF6G9x8lp`8>LFA=w**|&BlTb!sa zbkTtzn?Z~?z(g1Fy$;|cs44Syspw16CWBKISBuUqVwQ^5i`)!2ag_A zSyUYpD&CF%-tB(>uBWaGb6l3xBHLvo$-K`_aigdz?w!PZ%DV{wW#_3(c`aHc)O&DB z#<00)>TZ0r0&E^R#gg{56^^n`lVQCKb$wL4}$d3|_-vuj`qzuggjh6o=! z!VJ?vsj;2(xNxZHf+fkZch9WRoO&5Bxpd6%QMZ~4|6>|+`a{j2wT`)uT(>)HFQ#Kj z4XOTOMKsf)-%*eL)4nL9p!8q^HbzAU;39>joE)3zEWqo=)Se138hoKCN$84T1qIqf z1efBs!wFy66c~^}yBwyt+L(%k=EF!v6Reo!bQ{%qnKopt`IypF z1O;v@0Vi9+!C(XGXWG;m#n_%Qqrbq9uD=G=#`#2Ooh=1IJXT z<+K4}m_)59k{5f{8v#XeaVFDksQLt1CgK%Hl|s3&xYV_I^*0~Jn}iu=Mtf3VaESeL z1)m+!_o5JBi}{Zi_J6qI|F1b9uCFX`{&5|aWU3MYsPn|ARSOZpJq+XVB%zIbuV`#* zo~_Cg4rpI_*srfCDSO|E+VHx7u0kBTqPmZAZiCzPKIHkhB(O zBv4i-`S1`+|F;^|_igvgKf(fo|Gnh(FMC`*ucq*olrniGj++`i<9;Nf;3VZ9r0XdJl5E01gDGRjm;aovOV?`t2PC0Q8 z8E_{PR_r`esks$3(uMJmR=+3HQ3XlPtH-skz)!;TZ~f~4zGA$|`k zOYMiKHWy-@YR@Mut=ManZ9~K$>%biV@Z2(MIg2}>V5YfBlib@{w5&X!=3~+nf>2#(xGqszh1U`+v0;_~Ez z&~NC3K{rdzxZl!1c-{N{e!3Qu??qS155u>7g5lnGo|ooL8{M#D=Nmn3&ArdF>=;oU z4rduX{Tsz{X^yO%T0xW==+X; zSL&H~qs%z}XW#$&-wAdmA{wzRYZq2RK-ejGwu5=)pAx(@Eg^)trgL$|s_93B{XS?& zNX);SG%=Vhzevna>SUjli3qD32WSB(n1JdP;T_)FeAaq<`%4;LsQr=tLeE@W{*QSa!eQBI^T&*ZuRoTj;(xeH{Prd+ zR*oP-lbEui&-2)1c=mQlx%l(_G~c_ScordASD5PV6H{S)1ZAoMr5@%Z3%I4KWmGer z;6J$A&t(fzl#={(`f+&!1ACJs?=LX8$|jKQS0XN99B*orw#q-+`pUD|cb+v>+${qN zNz5K`10x&vgKtaBS7!TV?POM_X$RLQH;L#6ZVk4)Blc%v&bM;UIsJhzN0YaOr!qTk$I&|Y2C@ackt}s8vqI{NHOW# zGo5aUl=tjJ)9uPWxX}w z4%8RK4#=C!=d**Sa7EkLKd03nNONfHnb&p1N(~ZD_t#$K?mx;>8n(Y81*%DC`A@Sy z0E{b;FjV(&Faagk$c6p~EKjEZ>KPrJ)9l)w-9o#owNaPEKLWY1 zoO7cGJV4ApqiDf)L!sqOhnMCwiqbT2YJrNB%X1Mmnicy8{U}&P{T^Lm9glE!T|{23 z^(%UNIOlWAu{MKb;&rD*AahH%64IZh6?Q9<$a-XnO!n&QOY}CR|5W!NMy-NYrRkhJ z0Pd|(1W*^7-T;)CK>N?=_^%pLbWXklrz8JQHP_kI)Yf%_h++X7C@P>_;38e6BTZBw zL3;0(CM9&~RqmxIoj^cC2@q-s)r2ZUP(V5a5+HQxgwP2!;mLh|!TaqQ@7KNd7-#J= z&YEYQHK%|!w(0`c3DDqb{a>$!=$s(qI5$B%;Zw0~ItA=5L`qncotX5zL$|RQNF<`k zwk7V=#%^cS^YsnzFQv%jv8pv#0hGhKY;0r}piJkvJ@Kc(|26dxJgw^^!(d_$+? zvy^PEwMUw}&6+a&E1cTApm;g7(e^pv&_}MWUE8Jp(VY8^oYkP~{U^VES>U5y{~=ZTu7 zE8iXI1a&fE97?nD(dg`MFSsDQ514=AKN0HT#n$X&*`evB@qP8?T*^LWE&c)5^McRx zF1}g|?aQ`DVP33>s|fAWG$XH~@Y?rm_eoFc?KF`$#_AZkrY8nleJh)U+#ML``i<|^ z?teRW=FqGQ zCMR|}Y8FnZm_Z33ra>{KX`z}On0c`);akIF`IDbmYL=4O-GX06kt}7m5|o6Xoch5( zp?2JYMQYDNg3|zWDyG#B3DtBE_udt$uSm4`njzgYy*i{Ln`GyHasBY6@~}VS09}9O zA$dzU(~YowQR8!EW; z3jfY2I-CM{}33mD*`J8~e|Tk>e(gD0tP-Lus98qUYm^rS+?g z&HIXh{a`}~GAT<@Ct6auc@m$l+XmLfC>q7BO=_`w@qc`(A1^Qq0|Ftx_eaS5aZt8q zJM?l#Gx{||(h7{+ONT&8q}avye_9kt5H^Qaai)#+(W9A=!p}$KU56z>a5(DraswKu zZ`tX4pwOkDSux4vNLY@2$+`X3cZai!N`hSKrz;&$6*ZMs&eTu(R`VkKY{-_rxDuETUtb47ABcU|mWb=MxWfUVKqvL`_tLtHO0 zGY736_n4L-MKH=YrXPqbmK&OpJ@B2e$%7*7F4n6-eUL(Vc5L2u&3J`8`(RFy76#&{ zUCZ+5zSr9CQ^P^?)rWEXVovIhauuyrazp#Uun}xnLunA&XEPRtsW`kpUNn#fFDsr{ z;n+XpW?1Q%_u_z+S?i%3zoKZHmxdD4zd`mU8tr4Q&1F9|U;=yx#Qtc53tj|#XH#Vd z0A4X0(T&k~3>g4Vqjc%foBxBs#*eB8h2}J3K^k?MW$r405Nz0GJ{c_XzILg~^_i0H z{qqKe&sU6WQt7ua{pOkY?0bseQNY@KGq=fF&E8g$z-&=ahu@0LEw5+H4{bb(l#Wm{ z9<5Kcg5Z5aXPGl=`LA27k0-8EohAg{J(QNEMbZ{i*qAR~STTvO(%4)6_uLeUIMxWq zJB!Wxzdv&kVeBJe4CmU4zO$EM*0lKe0<221YM05R9y$1kmE7!-X?>RZ6&vDj&3bpL zSoBry@Uldr!QAZyFIlmvT~7=0HCX16L<>O#)6!^NKNx6^cc+N>7^LPlj8sGg)<3@{ zJSqar4dw3>h3NQyIm0)JcNal(jmZ%X1)JyY2qW+Q5t#IX8C4F2dDlYSU<7IVt}UaZ ziFcj@!$@Pwy5{Ch`e{>5dsmWSe!5I@gR5i$^~5N+(*J~C%A|CAvkau!{HFU0)2?-% z8NiFCgkR}rlnix77fQDr?%MUg%|ebYmYMJSR1o=&<0POdd&2DRnxHANM)B6+Ru&PV z@g7O=QnbK~ZaH7rJ~BM@9d$rQJ6y#AJjsVI3#`->R;+dEk~=Y)Zvkofxa|I&xo@4t z7leMUWY9rSF>2pX$Aov^NY9qlb4dY1-*% zgjBCZU_B03EF>3{bXAxG-5|?x9Y1YuC$85oTxsAim5g3hj~GsSBTgzR5t4L2rp6_s zK?IplgNYX{NFl3YQk^m)thEw@C$QjOIZBzQ-sV5V3XpObp|0us#Vd}9pMzpOm_^S9 zgin?{5tt3kgO3e9GICC7=qYOh$u}t^~86|Is4)xVk5V4e7 zVY2VzDP-Xh;_GAr7B{kcZ|Kp+j?^=C+7}C`j1(w%g-Nj~EFoiarV5w2H8wkTuN;LJ zqh&_=+zUB4!Fiuh*R62BpSLtpyB^f;9R^!KVv5#>r%y4SHeaM?j!hJ?TVxNS+o;s+ zDF)OVfq29n0y;Ms)=K3SU~hKF?6I*Z_C9ZUgWW6d+TmEtHp^2l))?5hK<>_&!l;N- zJ*TnSnh%|jfwSSz%0{zXmMY(-;Y%m#QH{uAuvW>^?9uU|a2xf#V%Vv;(R`fS?B=)m z$p^Ot1?AOdy$Q(tGO+uzdTjy=V+9;h9BMN%ma%%{QKIoet9KJ7&@gabCke?jT+uxY zVJjIXmjm5TW^3_8-HnlZu6k)SVC9`03;E&&trDXHn?q;fS4wgE-~gEoaIep|qRhI$ zc2GGFo=(&2lIV096;Q`-cfVAWUI;KwwbiDQ8?4TXcbWwC^|Lj-y>U?ypVEC>>*j=8Rt|bWy&Wd?9w?O3wd-o;6T)*u<*$ns}K;J+LGlVhedb~LnKYlOQpjO zps1bCl4jjjoeO5GMd!T9GV8tv5->P7C%PVqiCzCt72l>yMrq;2&(yY@R-Bi?;w~X% zci1B*CNLFF8bxuup)TFnCCs1%y&Tf|0(#Fq16-X--s16N ztHf89CIQ8a(eftvM%z)Ue%YKXD%*LLK;lA z;$;(@vy;-5naV*-oQ9*cs`$avLttNWO4&)rz#EusH6nd*GDOSst|GGbA$+v*6kAj; z(?1ju>RO#;VuJt+vm(D8Q?_@;6RWf%{Is>Mx1MCl`~A31eK&mr_0V_j5AT;55qFmF zu5D*!q20y;4$@F=)2Aa5gypV(1|15YnVbWKaUR1JUnc$fYhxv;O*3HZe8zQ5Mhj2C zI@=q+@SSB5#o*IsbLcv55jEzgK%5DmP6WXMHL%&R%I0|5sGgEP1oyia<7SspcTzR7 ze>tL(!D0(nVStkoRkUKd%#zJIr}{Br>>K>85&q-?G^rQ2P*2skiAv z^-#=Y61(tDi5hY@nCh^3AB|V2FpH-Z!=Xxl$OIIBFPdMpAW8<*Xp0Gr@B*(}TF!8? zc12s#q`K0!a0t&(^{*!Gk98yCXI@rlS|h`5rJn3MM0K8Tdn>-o`+ao>Ge|Fb4V+d( z5hYgv-=Q)8=j!*Ce{>Kr7 zE$!B z(~2(}NxWQ>ipQ1PP)>S9jz%#vIbrfo52f#18uA=8B>AptAm0`3TMEf;w*cn@=38H} zz@9f}=8%-ovyT;a{a+Yd5(~pbe;qjc_|v4&sHlt**Khy8%4CwJ56Z<{HN+^Y`>}Hi zN?RQMOkYpYS?7TJ$s0Z>m+Fg(R3gE358O;9J_Fa?6E0nDZEk1Z73oHB71339BLn}! zOmk#kVCL=La1$#_l-h30hh8mEZp;28mG`!kltx*b_g%!#(FRH;(JAl!RU`21hhn}C zaNWmoO0$u6==aKXc@6 zG%>2tAM+kPd}uodI>1B#8wHdNw7w4R9483a?7^0uNoIXM4Es3(v;3a=iN@7v#%!tB zA3F!JLLcH&{)I$rNNM{VA<(WNns&*hJ;oR>4AKTJ&D?=K_5a2PzH6~n_ctcA*LK<*EY%$J5_Pv! z4>-esYzT=mG!u`FNVz~61d0wLHImnz5w+I9a3IFURrMs$opYwNa7FuhMk^9_R~}z&mCNz3Q_u6AI|wplqQSX zh_s7%TtEIu_9pYivyd}_QvNsE2O^0oQXSM{Bz@C-X7;Any@)B7t`u5S%M87Ls%~~` zwFJvEXH6U)FgxfV-6%D%XThCi`X1`Pl$a^Q{0*y`@SBsnLD`Q zKjSVw5}tF$!Vob2?Av6GXC5Mnvd8XEl}~EyvcHs_&s;Dn-SZ;LvA zSblxyn}9FV`14rbj;e}51Lux`S z)2+6ETuQW}O$+}9DrPDl5);eD`Xw4<;sTTJmnG?}RV)Zd*0m%tyH{rJm!*^IoPG^F zal8TEqy&bLG{bsbmXcWDiZU^TiYNTZFOVfken?N}s3}T<%@1Dwb0APJOlah2&4t~N z+qliT`BMV}u{07=i4zJTD7$_P>rTc1$z$E?n%m5(PU8=xO%HMgt!$EA^wF5t8=QGp zLy;qB82KV}_J9BJtX!6-OK2ky!@VQ@83ka?ub)XeKQKJBDN$ zctV=k_IANH?iW2*WuhU7vSqxc>MU2vEGmS~RUVwX1G|FV@&?sdKIwV{yOlT+2%Fb# zB&V}7Wo}p)(b`EeCsNSo*p$e zV7$eTjeh#R%hZoAsXN=-Wp!R6jSo5Z|H2_8^KqLiBNosQ!QbbZ?ET`vG*v^9If{WkCfA Wc<%MgL%Jh60Qg4xb*1WGfBy#nM?aSU From 8c71abf5f459a3083cb42d4e91f32514de32a7ac Mon Sep 17 00:00:00 2001 From: Beth Levin Date: Thu, 17 Dec 2020 17:37:51 -0800 Subject: [PATCH 169/486] new info --- .../microsoft-defender-atp/tvm-exception.md | 15 +++++-------- .../tvm-security-recommendation.md | 22 ++----------------- 2 files changed, 7 insertions(+), 30 deletions(-) diff --git a/windows/security/threat-protection/microsoft-defender-atp/tvm-exception.md b/windows/security/threat-protection/microsoft-defender-atp/tvm-exception.md index 3af172dba7..9bb2ff23bb 100644 --- a/windows/security/threat-protection/microsoft-defender-atp/tvm-exception.md +++ b/windows/security/threat-protection/microsoft-defender-atp/tvm-exception.md @@ -103,13 +103,15 @@ Navigate to the **Exceptions** tab in the **Remediation** page. You can filter b Select an exception to open a flyout with more details. Exceptions per devices group will have a list of every device group the exception covers, which you can export. You can also view the related recommendation or cancel the exception. - ![Showing the "Exceptions" tab in the Remediation page.](images/tvm-exception-view.png) - ## How to cancel an exception -To cancel an exception, navigate to the **Exceptions** tab in the **Remediation** page. Select the exception. To cancel the exception for all device groups, select the **Cancel exception** button. You can also cancel the exception for a specific device group. +To cancel an exception, navigate to the **Exceptions** tab in the **Remediation** page. Select the exception. + +To cancel the exception for all device groups or for a global exception, select the **Cancel exception for all device groups** button. You will only be able to cancel exceptions for device groups you have permissions for. + +![The cancel button.](images/tvm-exception-cancel.png) ### Cancel the exception for a specific device group @@ -117,13 +119,6 @@ Select the specific device group to cancel the exception for it. A flyout will a ![Showing how to select a specific device group.](images/tvm-exception-device-group-hover.png) - -### Cancel a global exception - -If it is a global exception, select an exception from the list and then select **Cancel exception** from the flyout. - -![Showing how to cancel the exception for a global exception.](images/tvm-exception-cancel-global-400.png) - ## View impact after exceptions are applied In the Security Recommendations page, select **Customize columns** and check the boxes for **Exposed devices (after exceptions)** and **Impact (after exceptions)**. diff --git a/windows/security/threat-protection/microsoft-defender-atp/tvm-security-recommendation.md b/windows/security/threat-protection/microsoft-defender-atp/tvm-security-recommendation.md index 032da734d3..552d3f6e0d 100644 --- a/windows/security/threat-protection/microsoft-defender-atp/tvm-security-recommendation.md +++ b/windows/security/threat-protection/microsoft-defender-atp/tvm-security-recommendation.md @@ -205,32 +205,14 @@ The following list details the justifications behind the exception options: - **Risk accepted** - Poses low risk and/or implementing the recommendation is too expensive - **Planned remediation (grace)** - Already planned but is awaiting execution or authorization -### View all exceptions +### View and cancel exceptions -Navigate to the **Exceptions** tab in the **Remediation** page. +Navigate to the **[Exceptions](tvm-exception)** tab in the **Remediation** page. ![Showing the "Exceptions" tab in the Remediation page.](images/tvm-exception-tab400.png) Select an exception to open a flyout with more details. Exceptions per devices group will have a list of every device group the exception covers, which you can Export. You can also view the related recommendation or cancel the exception. -### How to cancel an exception - -To cancel an exception, navigate to the **Exceptions** tab in the **Remediation** page. Select the exception. - -#### Cancel the exception for a specific device group - -If the exception is per device group, then you will need to select the specific device group to cancel the exception for it. - -![Showing how to select a specific device group.](images/tvm-exception-device-group-hover.png) - -A flyout will appear for the device group, and you can select **Cancel exception**. - -#### Cancel a global exception - -If it is a global exception, select an exception from the list and then select **Cancel exception** from the flyout. - -![Showing how to cancel the exception for a global exception.](images/tvm-exception-cancel-global-400.png) - ### View impact after exceptions are applied In the Security Recommendations page, select **Customize columns** and check the boxes for **Exposed devices (after exceptions)** and **Impact (after exceptions)**. From f9a21f66db306575815db5abd9caaee84b123533 Mon Sep 17 00:00:00 2001 From: Beth Levin Date: Thu, 17 Dec 2020 17:41:18 -0800 Subject: [PATCH 170/486] added md --- .../microsoft-defender-atp/tvm-security-recommendation.md | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/windows/security/threat-protection/microsoft-defender-atp/tvm-security-recommendation.md b/windows/security/threat-protection/microsoft-defender-atp/tvm-security-recommendation.md index 552d3f6e0d..d28ecadea4 100644 --- a/windows/security/threat-protection/microsoft-defender-atp/tvm-security-recommendation.md +++ b/windows/security/threat-protection/microsoft-defender-atp/tvm-security-recommendation.md @@ -207,7 +207,7 @@ The following list details the justifications behind the exception options: ### View and cancel exceptions -Navigate to the **[Exceptions](tvm-exception)** tab in the **Remediation** page. +Navigate to the **[Exceptions](tvm-exception.md)** tab in the **Remediation** page. ![Showing the "Exceptions" tab in the Remediation page.](images/tvm-exception-tab400.png) From c1c986e8bd02f979f83d8191d563aa51d44e7911 Mon Sep 17 00:00:00 2001 From: Beth Levin Date: Thu, 17 Dec 2020 17:46:19 -0800 Subject: [PATCH 171/486] remove duplicate content --- .../tvm-security-recommendation.md | 81 +------------------ 1 file changed, 1 insertion(+), 80 deletions(-) diff --git a/windows/security/threat-protection/microsoft-defender-atp/tvm-security-recommendation.md b/windows/security/threat-protection/microsoft-defender-atp/tvm-security-recommendation.md index d28ecadea4..3db95062b4 100644 --- a/windows/security/threat-protection/microsoft-defender-atp/tvm-security-recommendation.md +++ b/windows/security/threat-protection/microsoft-defender-atp/tvm-security-recommendation.md @@ -149,86 +149,7 @@ Select a security recommendation you would like create an exception for, and the Choose the scope and justification, set a date for the exception duration, and submit. To view all your exceptions (current and past), navigate to the [Remediation](tvm-remediation.md) page under the **Threat & Vulnerability Management** menu and select the **Exceptions** tab. -### Exception scope - -Exceptions can either be created for selected device groups, or for all device groups past and present. - -#### Exception by device group - -Apply the exception to all device groups or choose specific device groups. Device groups that already have an exception will not be displayed in the list. If you only select certain device groups, the recommendation state will change from “active” to “partial exception.” The state will change to “full exception” if you select all the device groups. - -![Showing device group dropdown.](images/tvm-exception-device-group-500.png) - -##### Filtered - -If you have filtered by device group on any of the threat and vulnerability management pages, only your filtered device groups will appear as options. - -Button to filter by device group on any of the threat and vulnerability management pages: - -![Showing selected device groups filter.](images/tvm-selected-device-groups.png) - -Exception view with filtered device groups: - -![Showing filtered device group dropdown.](images/tvm-exception-device-filter500.png) - -##### Large number of device groups - -If your organization has more than 20 device groups, select **Edit** next to the filtered device group option. - -![Showing how to edit large numbers of groups.](images/tvm-exception-edit-groups.png) - -A flyout will appear where you can search and choose device groups you want included. Select the check mark icon below Search to check/uncheck all. - -![Showing large device group flyout.](images/tvm-exception-device-group-flyout-400.png) - -#### Global exceptions - -If you have global administrator permissions (called Microsoft Defender ATP administrator), you will be able to create and cancel a global exception. It affects **all** current and future device groups in your organization, and only a user with similar permission would be able to change it. The recommendation state will change from “active” to “full exception.” - -![Showing global exception option.](images/tvm-exception-global.png) - -Some things to keep in mind: - -- If a recommendation is under global exception, then newly created exceptions for device groups will be suspended until the global exception has expired or been cancelled. After that point, the new device group exceptions will go into effect until they expire. -- If a recommendation already has exceptions for specific device groups and a global exception is created, then the device group exception will be suspended until it expires or the global exception is cancelled before it expires. - -### Justification - -Select your justification for the exception you need to file instead of remediating the security recommendation in question. Fill out the justification context, then set the exception duration. - -The following list details the justifications behind the exception options: - -- **Third party control** - A third party product or software already addresses this recommendation - - Choosing this justification type will lower your exposure score and increase your secure score because your risk is reduced -- **Alternate mitigation** - An internal tool already addresses this recommendation - - Choosing this justification type will lower your exposure score and increase your secure score because your risk is reduced -- **Risk accepted** - Poses low risk and/or implementing the recommendation is too expensive -- **Planned remediation (grace)** - Already planned but is awaiting execution or authorization - -### View and cancel exceptions - -Navigate to the **[Exceptions](tvm-exception.md)** tab in the **Remediation** page. - -![Showing the "Exceptions" tab in the Remediation page.](images/tvm-exception-tab400.png) - -Select an exception to open a flyout with more details. Exceptions per devices group will have a list of every device group the exception covers, which you can Export. You can also view the related recommendation or cancel the exception. - -### View impact after exceptions are applied - -In the Security Recommendations page, select **Customize columns** and check the boxes for **Exposed devices (after exceptions)** and **Impact (after exceptions)**. - -![Showing customize columns options.](images/tvm-after-exceptions.png) - -The exposed devices (after exceptions) column shows the remaining devices that are still exposed to vulnerabilities after exceptions are applied. Exception justifications that affect the exposure include ‘third party control’ and ‘alternate mitigation’. Other justifications do not reduce the exposure of a device, and they are still considered exposed. - -The impact (after exceptions) shows remaining impact to exposure score or secure score after exceptions are applied. Exception justifications that affect the scores include ‘third party control’ and ‘alternate mitigation.’ Other justifications do not reduce the exposure of a device, and so the exposure score and secure score do not change. - -![Showing the columns in the table.](images/tvm-after-exceptions-table.png) -If there is a large jump in the number of exposed devices, or a sharp increase in the impact on your organization exposure score and Microsoft Secure Score for Devices, then that security recommendation is worth investigating. - -1. Select the recommendation and **Open software page** -2. Select the **Event timeline** tab to view all the impactful events related to that software, such as new vulnerabilities or new public exploits. [Learn more about event timeline](threat-and-vuln-mgt-event-timeline.md) -3. Decide how to address the increase or your organization's exposure, such as submitting a remediation request. +[Learn more about exceptions](tvm-exception.md) ## Report inaccuracy From 3795ef248c633ef86caac72b27adc2245d848c2f Mon Sep 17 00:00:00 2001 From: ImranHabib <47118050+joinimran@users.noreply.github.com> Date: Fri, 18 Dec 2020 10:37:47 +0500 Subject: [PATCH 172/486] Update windows/security/threat-protection/windows-sandbox/windows-sandbox-overview.md Co-authored-by: JohanFreelancer9 <48568725+JohanFreelancer9@users.noreply.github.com> --- .../windows-sandbox/windows-sandbox-overview.md | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/windows/security/threat-protection/windows-sandbox/windows-sandbox-overview.md b/windows/security/threat-protection/windows-sandbox/windows-sandbox-overview.md index f9ff3618d5..ce384ca8d4 100644 --- a/windows/security/threat-protection/windows-sandbox/windows-sandbox-overview.md +++ b/windows/security/threat-protection/windows-sandbox/windows-sandbox-overview.md @@ -55,7 +55,7 @@ The following video provides an overview of Windows Sandbox. 1. Locate and select **Windows Sandbox** on the Start menu to run it for the first time. ## Usage -1. Copy an executable file (and any other files needed to run the application) from the host and paste into the **Windows Sandbox** window. +1. Copy an executable file (and any other files needed to run the application) from the host and paste them into the **Windows Sandbox** window. 2. Run the executable file or installer inside the sandbox. 3. When you're finished experimenting, close the sandbox. A dialog box will state that all sandbox content will be discarded and permanently deleted. Select **ok**. 4. Confirm that your host machine doesn't exhibit any of the modifications that you made in Windows Sandbox. From 0fd13c3bd81a8f4cfe45514b9011bef90e753295 Mon Sep 17 00:00:00 2001 From: Benny Shilpa Date: Fri, 18 Dec 2020 12:33:36 +0530 Subject: [PATCH 173/486] Update TOC.md --- windows/security/threat-protection/windows-firewall/TOC.md | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/windows/security/threat-protection/windows-firewall/TOC.md b/windows/security/threat-protection/windows-firewall/TOC.md index b70d686ed5..00a5fecc08 100644 --- a/windows/security/threat-protection/windows-firewall/TOC.md +++ b/windows/security/threat-protection/windows-firewall/TOC.md @@ -165,7 +165,7 @@ ## [Troubleshooting]() ### [Troubleshooting UWP app connectivity issues in Windows Firewall](troubleshooting-uwp-firewall.md) -### [Filter origin audit log improvements)](filter-origin-documentation.md) +### [Filter origin audit log improvements](filter-origin-documentation.md) ### [Quarantine behavior](quarantine.md) ### [Firewall settings lost on upgrade](firewall-settings-lost-on-upgrade.md) From bee7e905a1960daa0ced2c9e66aa1580731d5e3b Mon Sep 17 00:00:00 2001 From: VLG17 <41186174+VLG17@users.noreply.github.com> Date: Fri, 18 Dec 2020 18:09:54 +0200 Subject: [PATCH 174/486] add note about Intune Portal link https://github.com/MicrosoftDocs/windows-itpro-docs/issues/8433 --- ...rosoft-intune-automatic-mdm-enrollment-in-the-new-portal.md | 3 +++ 1 file changed, 3 insertions(+) diff --git a/windows/client-management/mdm/azure-ad-and-microsoft-intune-automatic-mdm-enrollment-in-the-new-portal.md b/windows/client-management/mdm/azure-ad-and-microsoft-intune-automatic-mdm-enrollment-in-the-new-portal.md index 706b102207..3715d10e17 100644 --- a/windows/client-management/mdm/azure-ad-and-microsoft-intune-automatic-mdm-enrollment-in-the-new-portal.md +++ b/windows/client-management/mdm/azure-ad-and-microsoft-intune-automatic-mdm-enrollment-in-the-new-portal.md @@ -13,6 +13,9 @@ manager: dansimp # Azure AD and Microsoft Intune: Automatic MDM enrollment in the new Portal +> [!NOTE] +> Microsoft Intune portal can be accessed at the following link: endpoint.microsoft.com + Go to your Azure AD Blade, select the Mobility (MDM and MAM) and there should be the Microsoft Intune "App" Visible, select the Microsoft Intune and configure the Blade ![How to get to the Blade](images/azure-mdm-intune.png) From 0e2b5f9bbe4d2bd1946795efc0f6ed010b9ecd41 Mon Sep 17 00:00:00 2001 From: Denise Vangel-MSFT Date: Fri, 18 Dec 2020 09:51:56 -0800 Subject: [PATCH 175/486] Update azure-ad-and-microsoft-intune-automatic-mdm-enrollment-in-the-new-portal.md --- ...une-automatic-mdm-enrollment-in-the-new-portal.md | 12 +++++++----- 1 file changed, 7 insertions(+), 5 deletions(-) diff --git a/windows/client-management/mdm/azure-ad-and-microsoft-intune-automatic-mdm-enrollment-in-the-new-portal.md b/windows/client-management/mdm/azure-ad-and-microsoft-intune-automatic-mdm-enrollment-in-the-new-portal.md index 3715d10e17..7ec3f05bdc 100644 --- a/windows/client-management/mdm/azure-ad-and-microsoft-intune-automatic-mdm-enrollment-in-the-new-portal.md +++ b/windows/client-management/mdm/azure-ad-and-microsoft-intune-automatic-mdm-enrollment-in-the-new-portal.md @@ -6,7 +6,7 @@ ms.topic: article ms.prod: w10 ms.technology: windows author: lomayor -ms.date: 01/17/2018 +ms.date: 12/18/2020 ms.reviewer: manager: dansimp --- @@ -14,14 +14,16 @@ manager: dansimp # Azure AD and Microsoft Intune: Automatic MDM enrollment in the new Portal > [!NOTE] -> Microsoft Intune portal can be accessed at the following link: endpoint.microsoft.com +> Microsoft Intune portal can be accessed at the following link: [https://endpoint.microsoft.com](https://endpoint.microsoft.com). -Go to your Azure AD Blade, select the Mobility (MDM and MAM) and there should be the Microsoft Intune "App" Visible, select the Microsoft Intune and configure the Blade +1. Go to your Azure AD Blade. +2. Select **Mobility (MDM and MAM)**, and find the Microsoft Intune app. +3. Select **Microsoft Intune** and configure the blade. ![How to get to the Blade](images/azure-mdm-intune.png) -Configure the Blade +Configure the blade ![Configure the Blade](images/azure-intune-configure-scope.png) -Select all for allow all users to enroll a Device and make it Intune ready, or Some, then you can add a Group of Users. +You can specify settings to allow all users to enroll a device and make it Intune ready, or choose to allow some users (and then add a group of users). From 46f264cf7feb09ca919242ea868e8f38edfc32aa Mon Sep 17 00:00:00 2001 From: Denise Vangel-MSFT Date: Fri, 18 Dec 2020 09:53:38 -0800 Subject: [PATCH 176/486] Update azure-ad-and-microsoft-intune-automatic-mdm-enrollment-in-the-new-portal.md minor edits --- ...crosoft-intune-automatic-mdm-enrollment-in-the-new-portal.md | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/windows/client-management/mdm/azure-ad-and-microsoft-intune-automatic-mdm-enrollment-in-the-new-portal.md b/windows/client-management/mdm/azure-ad-and-microsoft-intune-automatic-mdm-enrollment-in-the-new-portal.md index 7ec3f05bdc..61ff7e767b 100644 --- a/windows/client-management/mdm/azure-ad-and-microsoft-intune-automatic-mdm-enrollment-in-the-new-portal.md +++ b/windows/client-management/mdm/azure-ad-and-microsoft-intune-automatic-mdm-enrollment-in-the-new-portal.md @@ -1,6 +1,6 @@ --- title: Azure AD and Microsoft Intune - Automatic MDM enrollment in the new Portal -description: Azure AD and Microsoft Intune - Automatic MDM enrollment in the new Portal +description: Azure AD and Microsoft Intune - Automatic MDM enrollment in the new portal ms.author: dansimp ms.topic: article ms.prod: w10 From 83d9bd9b7adc67699c85fb3d590e9d85f421cdc7 Mon Sep 17 00:00:00 2001 From: adirdidi <68847945+adirdidi@users.noreply.github.com> Date: Fri, 18 Dec 2020 20:53:34 +0200 Subject: [PATCH 177/486] API pages update 1. Adding US Gov reference to all pages with URIs. 2. Adding geo reference to all pages with URIs. 3. Replace MDE URLs ending with "windows.com" with "microsoft.com". 4. Replace the login endpoint from "login.windows.net" to "login.microsoftonline.com". --- .../includes/improve-request-performance.md | 2 +- .../includes/microsoft-defender-api-usgov.md | 20 ++++++++++++++ .../microsoft-defender-atp/api-hello-world.md | 10 ++++--- .../microsoft-defender-atp/api-power-bi.md | 8 ++++-- .../exposed-apis-create-app-nativeapp.md | 10 ++++--- .../exposed-apis-create-app-partners.md | 14 ++++++---- .../exposed-apis-create-app-webapp.md | 14 ++++++---- .../exposed-apis-list.md | 13 +++++++--- .../exposed-apis-odata-samples.md | 26 +++++++++++-------- .../run-advanced-query-api.md | 6 +++-- .../run-advanced-query-sample-powershell.md | 10 ++++--- .../run-advanced-query-sample-python.md | 10 ++++--- 12 files changed, 101 insertions(+), 42 deletions(-) create mode 100644 windows/security/includes/microsoft-defender-api-usgov.md diff --git a/windows/security/includes/improve-request-performance.md b/windows/security/includes/improve-request-performance.md index c2499cf092..efaf6664a9 100644 --- a/windows/security/includes/improve-request-performance.md +++ b/windows/security/includes/improve-request-performance.md @@ -16,7 +16,7 @@ ms.collection: M365-security-compliance ms.topic: article --- ->[!NOTE] +>[!TIP] >For better performance, you can use server closer to your geo location: > - api-us.securitycenter.microsoft.com > - api-eu.securitycenter.microsoft.com diff --git a/windows/security/includes/microsoft-defender-api-usgov.md b/windows/security/includes/microsoft-defender-api-usgov.md new file mode 100644 index 0000000000..6f525901c4 --- /dev/null +++ b/windows/security/includes/microsoft-defender-api-usgov.md @@ -0,0 +1,20 @@ +--- +title: Microsoft Defender for Endpoint API URIs for US Government +description: Microsoft Defender for Endpoint API URIs for US Government +keywords: defender, endpoint, api, government, gov +search.product: eADQiWindows 10XVcnh +ms.prod: w10 +ms.mktglfcycl: deploy +ms.sitesec: library +ms.pagetype: security +ms.author: macapara +author: mjcaparas +ms.localizationpriority: medium +manager: dansimp +audience: ITPro +ms.collection: M365-security-compliance +ms.topic: article +--- + +>[!NOTE] +>If you are a US Government customer, please use the URIs listed in [here](gov.md#api). diff --git a/windows/security/threat-protection/microsoft-defender-atp/api-hello-world.md b/windows/security/threat-protection/microsoft-defender-atp/api-hello-world.md index 0dfd7bfce2..f9c9891569 100644 --- a/windows/security/threat-protection/microsoft-defender-atp/api-hello-world.md +++ b/windows/security/threat-protection/microsoft-defender-atp/api-hello-world.md @@ -26,6 +26,8 @@ ms.topic: article - Want to experience Microsoft Defender for Endpoint? [Sign up for a free trial.](https://www.microsoft.com/microsoft-365/windows/microsoft-defender-atp?ocid=docs-wdatp-exposedapis-abovefoldlink) +[!include[Microsoft Defender for Endpoint API URIs for US Government](../../includes/microsoft-defender-api-usgov.md)] + ## Get Alerts using a simple PowerShell script @@ -95,6 +97,8 @@ Done! You have successfully registered an application! - Copy the script below to PowerShell ISE or to a text editor, and save it as "**Get-Token.ps1**" - Running this script will generate a token and will save it in the working folder under the name "**Latest-token.txt**". +[!include[Improve request performance](../../includes/improve-request-performance.md)] + ``` # That code gets the App Context Token and save it to a file named "Latest-token.txt" under the current directory # Paste below your Tenant ID, App ID and App Secret (App key). @@ -103,8 +107,8 @@ $tenantId = '' ### Paste your tenant ID here $appId = '' ### Paste your Application ID here $appSecret = '' ### Paste your Application secret here -$resourceAppIdUri = 'https://api.securitycenter.windows.com' -$oAuthUri = "https://login.windows.net/$TenantId/oauth2/token" +$resourceAppIdUri = 'https://api.securitycenter.microsoft.com' +$oAuthUri = "https://login.microsoftonline.com/$TenantId/oauth2/token" $authBody = [Ordered] @{ resource = "$resourceAppIdUri" client_id = "$appId" @@ -142,7 +146,7 @@ $dateTime = (Get-Date).ToUniversalTime().AddHours(-48).ToString("o") # The URL contains the type of query and the time filter we create above # Read more about other query options and filters at Https://TBD- add the documentation link -$url = "https://api.securitycenter.windows.com/api/alerts?`$filter=alertCreationTime ge $dateTime" +$url = "https://api.securitycenter.microsoft.com/api/alerts?`$filter=alertCreationTime ge $dateTime" # Set the WebRequest headers $headers = @{ diff --git a/windows/security/threat-protection/microsoft-defender-atp/api-power-bi.md b/windows/security/threat-protection/microsoft-defender-atp/api-power-bi.md index 605b0f511a..39d611f4ca 100644 --- a/windows/security/threat-protection/microsoft-defender-atp/api-power-bi.md +++ b/windows/security/threat-protection/microsoft-defender-atp/api-power-bi.md @@ -26,6 +26,8 @@ ms.topic: article - Want to experience Defender for Endpoint? [Sign up for a free trial.](https://www.microsoft.com/microsoft-365/windows/microsoft-defender-atp?ocid=docs-wdatp-exposedapis-abovefoldlink) +[!include[Microsoft Defender for Endpoint API URIs for US Government](../../includes/microsoft-defender-api-usgov.md)] + In this section you will learn create a Power BI report on top of Defender for Endpoint APIs. The first example demonstrates how to connect Power BI to Advanced Hunting API and the second example demonstrates a connection to our OData APIs, such as Machine Actions or Alerts. @@ -44,11 +46,13 @@ The first example demonstrates how to connect Power BI to Advanced Hunting API a - Copy the below and paste it in the editor: +[!include[Improve request performance](../../includes/improve-request-performance.md)] + ``` let AdvancedHuntingQuery = "DeviceEvents | where ActionType contains 'Anti'", - HuntingUrl = "https://api.securitycenter.windows.com/api/advancedqueries", + HuntingUrl = "https://api.securitycenter.microsoft.com/api/advancedqueries", Response = Json.Document(Web.Contents(HuntingUrl, [Query=[key=AdvancedHuntingQuery]])), @@ -114,7 +118,7 @@ The first example demonstrates how to connect Power BI to Advanced Hunting API a Query = "MachineActions", - Source = OData.Feed("https://api.securitycenter.windows.com/api/" & Query, null, [Implementation="2.0", MoreColumns=true]) + Source = OData.Feed("https://api.securitycenter.microsoft.com/api/" & Query, null, [Implementation="2.0", MoreColumns=true]) in Source diff --git a/windows/security/threat-protection/microsoft-defender-atp/exposed-apis-create-app-nativeapp.md b/windows/security/threat-protection/microsoft-defender-atp/exposed-apis-create-app-nativeapp.md index fb00021426..6f75ba2ca8 100644 --- a/windows/security/threat-protection/microsoft-defender-atp/exposed-apis-create-app-nativeapp.md +++ b/windows/security/threat-protection/microsoft-defender-atp/exposed-apis-create-app-nativeapp.md @@ -112,6 +112,10 @@ This page explains how to create an AAD application, get an access token to Micr For more information on AAD tokens, see [Azure AD tutorial](https://docs.microsoft.com/azure/active-directory/develop/active-directory-v2-protocols-oauth-client-creds) +[!include[Improve request performance](../../includes/improve-request-performance.md)] + +[!include[Microsoft Defender for Endpoint API URIs for US Government](../../includes/microsoft-defender-api-usgov.md)] + ### Using C# - Copy/Paste the below class in your application. @@ -127,9 +131,9 @@ For more information on AAD tokens, see [Azure AD tutorial](https://docs.microso public static class WindowsDefenderATPUtils { - private const string Authority = "https://login.windows.net"; + private const string Authority = "https://login.microsoftonline.com"; - private const string WdatpResourceId = "https://api.securitycenter.windows.com"; + private const string WdatpResourceId = "https://api.securitycenter.microsoft.com"; public static async Task AcquireUserTokenAsync(string username, string password, string appId, string tenantId) { @@ -175,7 +179,7 @@ Verify to make sure you got a correct token: ```csharp var httpClient = new HttpClient(); - var request = new HttpRequestMessage(HttpMethod.Get, "https://api.securitycenter.windows.com/api/alerts"); + var request = new HttpRequestMessage(HttpMethod.Get, "https://api.securitycenter.microsoft.com/api/alerts"); request.Headers.Authorization = new AuthenticationHeaderValue("Bearer", token); diff --git a/windows/security/threat-protection/microsoft-defender-atp/exposed-apis-create-app-partners.md b/windows/security/threat-protection/microsoft-defender-atp/exposed-apis-create-app-partners.md index e2de608fbd..06af8266e6 100644 --- a/windows/security/threat-protection/microsoft-defender-atp/exposed-apis-create-app-partners.md +++ b/windows/security/threat-protection/microsoft-defender-atp/exposed-apis-create-app-partners.md @@ -129,6 +129,10 @@ The following steps will guide you how to create an Azure AD application, get an
    For more information on AAD token, see [AAD tutorial](https://docs.microsoft.com/azure/active-directory/develop/active-directory-v2-protocols-oauth-client-creds) +[!include[Improve request performance](../../includes/improve-request-performance.md)] + +[!include[Microsoft Defender for Endpoint API URIs for US Government](../../includes/microsoft-defender-api-usgov.md)] + ### Using PowerShell ``` @@ -139,8 +143,8 @@ $tenantId = '' ### Paste your tenant ID here $appId = '' ### Paste your Application ID here $appSecret = '' ### Paste your Application key here -$resourceAppIdUri = 'https://api.securitycenter.windows.com' -$oAuthUri = "https://login.windows.net/$TenantId/oauth2/token" +$resourceAppIdUri = 'https://api.securitycenter.microsoft.com' +$oAuthUri = "https://login.microsoftonline.com/$TenantId/oauth2/token" $authBody = [Ordered] @{ resource = "$resourceAppIdUri" client_id = "$appId" @@ -172,8 +176,8 @@ return $token string appId = "11111111-1111-1111-1111-111111111111"; // Paste your own app ID here string appSecret = "22222222-2222-2222-2222-222222222222"; // Paste your own app secret here for a test, and then store it in a safe place! - const string authority = "https://login.windows.net"; - const string wdatpResourceId = "https://api.securitycenter.windows.com"; + const string authority = "https://login.microsoftonline.com"; + const string wdatpResourceId = "https://api.securitycenter.microsoft.com"; AuthenticationContext auth = new AuthenticationContext($"{authority}/{tenantId}/"); ClientCredential clientCredential = new ClientCredential(appId, appSecret); @@ -227,7 +231,7 @@ Sanity check to make sure you got a correct token: ``` var httpClient = new HttpClient(); - var request = new HttpRequestMessage(HttpMethod.Get, "https://api.securitycenter.windows.com/api/alerts"); + var request = new HttpRequestMessage(HttpMethod.Get, "https://api.securitycenter.microsoft.com/api/alerts"); request.Headers.Authorization = new AuthenticationHeaderValue("Bearer", token); diff --git a/windows/security/threat-protection/microsoft-defender-atp/exposed-apis-create-app-webapp.md b/windows/security/threat-protection/microsoft-defender-atp/exposed-apis-create-app-webapp.md index a7584847f9..3e602760b0 100644 --- a/windows/security/threat-protection/microsoft-defender-atp/exposed-apis-create-app-webapp.md +++ b/windows/security/threat-protection/microsoft-defender-atp/exposed-apis-create-app-webapp.md @@ -107,6 +107,10 @@ This article explains how to create an Azure AD application, get an access token For more information on Azure AD tokens, see the [Azure AD tutorial](https://docs.microsoft.com/azure/active-directory/develop/active-directory-v2-protocols-oauth-client-creds). +[!include[Improve request performance](../../includes/improve-request-performance.md)] + +[!include[Microsoft Defender for Endpoint API URIs for US Government](../../includes/microsoft-defender-api-usgov.md)] + ### Use PowerShell ``` @@ -117,8 +121,8 @@ $tenantId = '' ### Paste your tenant ID here $appId = '' ### Paste your Application ID here $appSecret = '' ### Paste your Application key here -$resourceAppIdUri = 'https://api.securitycenter.windows.com' -$oAuthUri = "https://login.windows.net/$TenantId/oauth2/token" +$resourceAppIdUri = 'https://api.securitycenter.microsoft.com' +$oAuthUri = "https://login.microsoftonline.com/$TenantId/oauth2/token" $authBody = [Ordered] @{ resource = "$resourceAppIdUri" client_id = "$appId" @@ -150,8 +154,8 @@ The following code was tested with NuGet Microsoft.IdentityModel.Clients.ActiveD string appId = "11111111-1111-1111-1111-111111111111"; // Paste your own app ID here string appSecret = "22222222-2222-2222-2222-222222222222"; // Paste your own app secret here for a test, and then store it in a safe place! - const string authority = "https://login.windows.net"; - const string wdatpResourceId = "https://api.securitycenter.windows.com"; + const string authority = "https://login.microsoftonline.com"; + const string wdatpResourceId = "https://api.securitycenter.microsoft.com"; AuthenticationContext auth = new AuthenticationContext($"{authority}/{tenantId}/"); ClientCredential clientCredential = new ClientCredential(appId, appSecret); @@ -204,7 +208,7 @@ The following is an example of sending a request to get a list of alerts **using ``` var httpClient = new HttpClient(); - var request = new HttpRequestMessage(HttpMethod.Get, "https://api.securitycenter.windows.com/api/alerts"); + var request = new HttpRequestMessage(HttpMethod.Get, "https://api.securitycenter.microsoft.com/api/alerts"); request.Headers.Authorization = new AuthenticationHeaderValue("Bearer", token); diff --git a/windows/security/threat-protection/microsoft-defender-atp/exposed-apis-list.md b/windows/security/threat-protection/microsoft-defender-atp/exposed-apis-list.md index 785ac39e0d..4a8aac1dc4 100644 --- a/windows/security/threat-protection/microsoft-defender-atp/exposed-apis-list.md +++ b/windows/security/threat-protection/microsoft-defender-atp/exposed-apis-list.md @@ -30,9 +30,9 @@ ms.topic: article ### Endpoint URI: -> The service base URI is: https://api.securitycenter.windows.com +> The service base URI is: https://api.securitycenter.microsoft.com > -> The queries based OData have the '/api' prefix. For example, to get Alerts you can send GET request to https://api.securitycenter.windows.com/api/alerts +> The queries based OData have the '/api' prefix. For example, to get Alerts you can send GET request to https://api.securitycenter.microsoft.com/api/alerts ### Versioning: @@ -40,9 +40,14 @@ ms.topic: article > > The current version is **V1.0**. > -> To use a specific version, use this format: `https://api.securitycenter.windows.com/api/{Version}`. For example: `https://api.securitycenter.windows.com/api/v1.0/alerts` +> To use a specific version, use this format: `https://api.securitycenter.microsoft.com/api/{Version}`. For example: `https://api.securitycenter.microsoft.com/api/v1.0/alerts` > -> If you don't specify any version (e.g. https://api.securitycenter.windows.com/api/alerts ) you will get to the latest version. +> If you don't specify any version (e.g. https://api.securitycenter.microsoft.com/api/alerts ) you will get to the latest version. + + +[!include[Improve request performance](../../includes/improve-request-performance.md)] + +[!include[Microsoft Defender for Endpoint API URIs for US Government](../../includes/microsoft-defender-api-usgov.md)] Learn more about the individual supported entities where you can run API calls to and details such as HTTP request values, request headers and expected responses. diff --git a/windows/security/threat-protection/microsoft-defender-atp/exposed-apis-odata-samples.md b/windows/security/threat-protection/microsoft-defender-atp/exposed-apis-odata-samples.md index b4a487ffbe..ef758bf348 100644 --- a/windows/security/threat-protection/microsoft-defender-atp/exposed-apis-odata-samples.md +++ b/windows/security/threat-protection/microsoft-defender-atp/exposed-apis-odata-samples.md @@ -26,6 +26,10 @@ ms.topic: article - [Microsoft Defender for Endpoint](https://go.microsoft.com/fwlink/p/?linkid=2146631) +[!include[Improve request performance](../../includes/improve-request-performance.md)] + +[!include[Microsoft Defender for Endpoint API URIs for US Government](../../includes/microsoft-defender-api-usgov.md)] + If you are not familiar with OData queries, see: [OData V4 queries](https://www.odata.org/documentation/) Not all properties are filterable. @@ -150,14 +154,14 @@ HTTP GET https://api.securitycenter.microsoft.com/api/alerts?$top=10&$expand=ev Get all the alerts last updated after 2019-11-22 00:00:00 ```http -HTTP GET https://api.securitycenter.windows.com/api/alerts?$filter=lastUpdateTime+ge+2019-11-22T00:00:00Z +HTTP GET https://api.securitycenter.microsoft.com/api/alerts?$filter=lastUpdateTime+ge+2019-11-22T00:00:00Z ``` **Response:** ```json { - "@odata.context": "https://api.securitycenter.windows.com/api/$metadata#Alerts", + "@odata.context": "https://api.securitycenter.microsoft.com/api/$metadata#Alerts", "value": [ { "id": "da637308392288907382_-880718168", @@ -206,14 +210,14 @@ HTTP GET https://api.securitycenter.windows.com/api/alerts?$filter=lastUpdateTi Get all the devices with 'High' 'RiskScore' ```http -HTTP GET https://api.securitycenter.windows.com/api/machines?$filter=riskScore+eq+'High' +HTTP GET https://api.securitycenter.microsoft.com/api/machines?$filter=riskScore+eq+'High' ``` **Response:** ```json { - "@odata.context": "https://api.securitycenter.windows.com/api/$metadata#Machines", + "@odata.context": "https://api.securitycenter.microsoft.com/api/$metadata#Machines", "value": [ { "id": "1e5bc9d7e413ddd7902c2932e418702b84d0cc07", @@ -245,14 +249,14 @@ HTTP GET https://api.securitycenter.windows.com/api/machines?$filter=riskScore+ Get top 100 devices with 'HealthStatus' not equals to 'Active' ```http -HTTP GET https://api.securitycenter.windows.com/api/machines?$filter=healthStatus+ne+'Active'&$top=100 +HTTP GET https://api.securitycenter.microsoft.com/api/machines?$filter=healthStatus+ne+'Active'&$top=100 ``` **Response:** ```json { - "@odata.context": "https://api.securitycenter.windows.com/api/$metadata#Machines", + "@odata.context": "https://api.securitycenter.microsoft.com/api/$metadata#Machines", "value": [ { "id": "1e5bc9d7e413ddd7902c2932e418702b84d0cc07", @@ -284,14 +288,14 @@ HTTP GET https://api.securitycenter.windows.com/api/machines?$filter=healthStat Get all the devices that last seen after 2018-10-20 ```http -HTTP GET https://api.securitycenter.windows.com/api/machines?$filter=lastSeen gt 2018-08-01Z +HTTP GET https://api.securitycenter.microsoft.com/api/machines?$filter=lastSeen gt 2018-08-01Z ``` **Response:** ```json { - "@odata.context": "https://api.securitycenter.windows.com/api/$metadata#Machines", + "@odata.context": "https://api.securitycenter.microsoft.com/api/$metadata#Machines", "value": [ { "id": "1e5bc9d7e413ddd7902c2932e418702b84d0cc07", @@ -323,14 +327,14 @@ HTTP GET https://api.securitycenter.windows.com/api/machines?$filter=lastSeen g Get all the Anti-Virus scans that the user Analyst@examples.onmicrosoft.com created using Microsoft Defender for Endpoint ```http -HTTP GET https://api.securitycenter.windows.com/api/machineactions?$filter=requestor eq 'Analyst@contoso.com' and type eq 'RunAntiVirusScan' +HTTP GET https://api.securitycenter.microsoft.com/api/machineactions?$filter=requestor eq 'Analyst@contoso.com' and type eq 'RunAntiVirusScan' ``` **Response:** ```json json{ - "@odata.context": "https://api.securitycenter.windows.com/api/$metadata#MachineActions", + "@odata.context": "https://api.securitycenter.microsoft.com/api/$metadata#MachineActions", "value": [ { "id": "2e9da30d-27f6-4208-81f2-9cd3d67893ba", @@ -355,7 +359,7 @@ json{ Get the count of open alerts for a specific device: ```http -HTTP GET https://api.securitycenter.windows.com/api/machines/123321d0c675eaa415b8e5f383c6388bff446c62/alerts/$count?$filter=status ne 'Resolved' +HTTP GET https://api.securitycenter.microsoft.com/api/machines/123321d0c675eaa415b8e5f383c6388bff446c62/alerts/$count?$filter=status ne 'Resolved' ``` **Response:** diff --git a/windows/security/threat-protection/microsoft-defender-atp/run-advanced-query-api.md b/windows/security/threat-protection/microsoft-defender-atp/run-advanced-query-api.md index ce6887fc58..ddf250a58f 100644 --- a/windows/security/threat-protection/microsoft-defender-atp/run-advanced-query-api.md +++ b/windows/security/threat-protection/microsoft-defender-atp/run-advanced-query-api.md @@ -26,6 +26,8 @@ ms.topic: article - Want to experience Defender for Endpoint? [Sign up for a free trial.](https://www.microsoft.com/microsoft-365/windows/microsoft-defender-atp?ocid=docs-wdatp-exposedapis-abovefoldlink) +[!include[Microsoft Defender for Endpoint API URIs for US Government](../../includes/microsoft-defender-api-usgov.md)] + ## Limitations 1. You can only run a query on data from the last 30 days. 2. The results will include a maximum of 100,000 rows. @@ -50,7 +52,7 @@ Delegated (work or school account) | AdvancedQuery.Read | 'Run advanced queries' ## HTTP request ``` -POST https://api.securitycenter.windows.com/api/advancedqueries/run +POST https://api.securitycenter.microsoft.com/api/advancedqueries/run ``` ## Request headers @@ -81,7 +83,7 @@ Here is an example of the request. ``` -POST https://api.securitycenter.windows.com/api/advancedqueries/run +POST https://api.securitycenter.microsoft.com/api/advancedqueries/run Content-type: application/json { "Query":"DeviceProcessEvents diff --git a/windows/security/threat-protection/microsoft-defender-atp/run-advanced-query-sample-powershell.md b/windows/security/threat-protection/microsoft-defender-atp/run-advanced-query-sample-powershell.md index cc1e69bc35..ea7771fd0a 100644 --- a/windows/security/threat-protection/microsoft-defender-atp/run-advanced-query-sample-powershell.md +++ b/windows/security/threat-protection/microsoft-defender-atp/run-advanced-query-sample-powershell.md @@ -24,6 +24,8 @@ ms.topic: article **Applies to:** - [Microsoft Defender for Endpoint](https://go.microsoft.com/fwlink/p/?linkid=2146631) +[!include[Microsoft Defender for Endpoint API URIs for US Government](../../includes/microsoft-defender-api-usgov.md)] + Run advanced queries using PowerShell, see [Advanced Hunting API](run-advanced-query-api.md). @@ -51,8 +53,8 @@ $tenantId = '00000000-0000-0000-0000-000000000000' # Paste your own tenant ID he $appId = '11111111-1111-1111-1111-111111111111' # Paste your own app ID here $appSecret = '22222222-2222-2222-2222-222222222222' # Paste your own app secret here -$resourceAppIdUri = 'https://api.securitycenter.windows.com' -$oAuthUri = "https://login.windows.net/$TenantId/oauth2/token" +$resourceAppIdUri = 'https://api.securitycenter.microsoft.com' +$oAuthUri = "https://login.microsoftonline.com/$TenantId/oauth2/token" $body = [Ordered] @{ resource = "$resourceAppIdUri" client_id = "$appId" @@ -72,10 +74,12 @@ where Run the following query: +[!include[Improve request performance](../../includes/improve-request-performance.md)] + ``` $query = 'RegistryEvents | limit 10' # Paste your own query here -$url = "https://api.securitycenter.windows.com/api/advancedqueries/run" +$url = "https://api.securitycenter.microsoft.com/api/advancedqueries/run" $headers = @{ 'Content-Type' = 'application/json' Accept = 'application/json' diff --git a/windows/security/threat-protection/microsoft-defender-atp/run-advanced-query-sample-python.md b/windows/security/threat-protection/microsoft-defender-atp/run-advanced-query-sample-python.md index c7d5c9e145..ed35434cfc 100644 --- a/windows/security/threat-protection/microsoft-defender-atp/run-advanced-query-sample-python.md +++ b/windows/security/threat-protection/microsoft-defender-atp/run-advanced-query-sample-python.md @@ -26,6 +26,8 @@ ms.topic: article - [Microsoft Defender for Endpoint](https://go.microsoft.com/fwlink/p/?linkid=2146631) +[!include[Microsoft Defender for Endpoint API URIs for US Government](../../includes/microsoft-defender-api-usgov.md)] + Run advanced queries using Python, see [Advanced Hunting API](run-advanced-query-api.md). In this section, we share Python samples to retrieve a token and use it to run a query. @@ -36,6 +38,8 @@ In this section, we share Python samples to retrieve a token and use it to run a - Run the following commands: +[!include[Improve request performance](../../includes/improve-request-performance.md)] + ``` import json @@ -46,9 +50,9 @@ tenantId = '00000000-0000-0000-0000-000000000000' # Paste your own tenant ID her appId = '11111111-1111-1111-1111-111111111111' # Paste your own app ID here appSecret = '22222222-2222-2222-2222-222222222222' # Paste your own app secret here -url = "https://login.windows.net/%s/oauth2/token" % (tenantId) +url = "https://login.microsoftonline.com/%s/oauth2/token" % (tenantId) -resourceAppIdUri = 'https://api.securitycenter.windows.com' +resourceAppIdUri = 'https://api.securitycenter.microsoft.com' body = { 'resource' : resourceAppIdUri, @@ -78,7 +82,7 @@ where ``` query = 'RegistryEvents | limit 10' # Paste your own query here -url = "https://api.securitycenter.windows.com/api/advancedqueries/run" +url = "https://api.securitycenter.microsoft.com/api/advancedqueries/run" headers = { 'Content-Type' : 'application/json', 'Accept' : 'application/json', From 8dcc5e7537ad168e43797de95dc95dc8fc2f9378 Mon Sep 17 00:00:00 2001 From: Joey Caparas Date: Fri, 18 Dec 2020 15:18:24 -0800 Subject: [PATCH 178/486] fix link --- windows/security/includes/microsoft-defender-api-usgov.md | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/windows/security/includes/microsoft-defender-api-usgov.md b/windows/security/includes/microsoft-defender-api-usgov.md index 6f525901c4..ff93c71ecd 100644 --- a/windows/security/includes/microsoft-defender-api-usgov.md +++ b/windows/security/includes/microsoft-defender-api-usgov.md @@ -17,4 +17,4 @@ ms.topic: article --- >[!NOTE] ->If you are a US Government customer, please use the URIs listed in [here](gov.md#api). +>If you are a US Government customer, please use the URIs listed in [here](../threat-protection/microsoft-defender-atp/gov.md#api). From e2f3abd0d5bd9277f9c2d9afaa27da70b2f7ee6a Mon Sep 17 00:00:00 2001 From: Joey Caparas Date: Fri, 18 Dec 2020 15:36:45 -0800 Subject: [PATCH 179/486] fix formatting --- .../security/threat-protection/microsoft-defender-atp/gov.md | 5 +++-- 1 file changed, 3 insertions(+), 2 deletions(-) diff --git a/windows/security/threat-protection/microsoft-defender-atp/gov.md b/windows/security/threat-protection/microsoft-defender-atp/gov.md index ddff7ba6a2..1c89d002cb 100644 --- a/windows/security/threat-protection/microsoft-defender-atp/gov.md +++ b/windows/security/threat-protection/microsoft-defender-atp/gov.md @@ -109,7 +109,8 @@ Defender for Endpoint GCC High specific | ```us4-v20.events.data.microsoft.com`` ## API -Login endpoint: ```https://login.microsoftonline.us``` -Microsoft Defender for Endpoint API endpoint: ```https://api-gov.securitycenter.microsoft.us``` +- Login endpoint: ```https://login.microsoftonline.us``` + +- Microsoft Defender for Endpoint API endpoint: ```https://api-gov.securitycenter.microsoft.us``` From c43cdca4ea258efbfc26a9bc7807b0b43c8c5766 Mon Sep 17 00:00:00 2001 From: Peter Smith Date: Fri, 18 Dec 2020 16:22:38 -0800 Subject: [PATCH 180/486] Move "lockdown" security info to the bottom Per discussion with the VPN field team, lockdown is actually often a poor choice for customer -- it's more restrictive than many customer expect, leading to wasted time. It's still supported, but it should be at the bottom of the security list so that customer aren't instantly drawn to it. --- .../vpn/vpn-security-features.md | 35 ++++++++++--------- 1 file changed, 18 insertions(+), 17 deletions(-) diff --git a/windows/security/identity-protection/vpn/vpn-security-features.md b/windows/security/identity-protection/vpn/vpn-security-features.md index d8f4768540..19a298bef8 100644 --- a/windows/security/identity-protection/vpn/vpn-security-features.md +++ b/windows/security/identity-protection/vpn/vpn-security-features.md @@ -20,23 +20,6 @@ ms.author: dansimp - Windows 10 Mobile -## LockDown VPN - -A VPN profile configured with LockDown secures the device to only allow network traffic over the VPN interface. It has the following features: - -- The system attempts to keep the VPN connected at all times. -- The user cannot disconnect the VPN connection. -- The user cannot delete or modify the VPN profile. -- The VPN LockDown profile uses forced tunnel connection. -- If the VPN connection is not available, outbound network traffic is blocked. -- Only one VPN LockDown profile is allowed on a device. - -> [!NOTE] -> For built-in VPN, LockDown VPN is only available for the Internet Key Exchange version 2 (IKEv2) connection type. - -Deploy this feature with caution, as the resultant connection will not be able to send or receive any network traffic without the VPN being connected. - - ## Windows Information Protection (WIP) integration with VPN Windows Information Protection provides capabilities allowing the separation and protection of enterprise data against disclosure across both company and personally owned devices, without requiring additional changes to the environments or the apps themselves. Additionally, when used with Rights Management Services (RMS), WIP can help to protect enterprise data locally. @@ -78,6 +61,24 @@ The following image shows the interface to configure traffic rules in a VPN Prof ![Add a traffic rule](images/vpn-traffic-rules.png) + +## LockDown VPN + +A VPN profile configured with LockDown secures the device to only allow network traffic over the VPN interface. It has the following features: + +- The system attempts to keep the VPN connected at all times. +- The user cannot disconnect the VPN connection. +- The user cannot delete or modify the VPN profile. +- The VPN LockDown profile uses forced tunnel connection. +- If the VPN connection is not available, outbound network traffic is blocked. +- Only one VPN LockDown profile is allowed on a device. + +> [!NOTE] +> For built-in VPN, LockDown VPN is only available for the Internet Key Exchange version 2 (IKEv2) connection type. + +Deploy this feature with caution, as the resultant connection will not be able to send or receive any network traffic without the VPN being connected. + + ## Related topics - [VPN technical guide](vpn-guide.md) From 29512c98818c4f894929e9ff7654ec3bc57146fd Mon Sep 17 00:00:00 2001 From: Daniel Simpson Date: Sat, 19 Dec 2020 17:21:30 -0800 Subject: [PATCH 181/486] solorigate link --- windows/security/includes/microsoft-defender.md | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/windows/security/includes/microsoft-defender.md b/windows/security/includes/microsoft-defender.md index 46153786b9..cdac55a91c 100644 --- a/windows/security/includes/microsoft-defender.md +++ b/windows/security/includes/microsoft-defender.md @@ -11,4 +11,4 @@ ms.topic: include --- > [!IMPORTANT] -> Welcome to **Microsoft Defender for Endpoint**, the new name for **Microsoft Defender Advanced Threat Protection**. Read more about this and other updates [here](https://www.microsoft.com/security/blog/?p=91813). We'll be updating names in products and in the docs in the near future. +> [Learn how Microsoft is helping protect customers from Solorigate](https://aka.ms/solorigate) From e4ac546ec1c9ce15567e482517477b2bfef93c8a Mon Sep 17 00:00:00 2001 From: Daniel Simpson Date: Sat, 19 Dec 2020 17:36:10 -0800 Subject: [PATCH 182/486] little more info in the include --- windows/security/includes/microsoft-defender.md | 10 +++++----- 1 file changed, 5 insertions(+), 5 deletions(-) diff --git a/windows/security/includes/microsoft-defender.md b/windows/security/includes/microsoft-defender.md index cdac55a91c..208baaefb5 100644 --- a/windows/security/includes/microsoft-defender.md +++ b/windows/security/includes/microsoft-defender.md @@ -1,14 +1,14 @@ --- -title: Microsoft Defender rebrand guidance -description: A note in regard to the Microsoft Defender rebrand. +title: Microsoft Defender important guidance +description: A note in regard to important Microsoft Defender guidance. ms.date: 09/21/2020 ms.reviewer: manager: dansimp -ms.author: daniha -author: danihalfin +ms.author: dansimp +author: dansimp ms.prod: w10 ms.topic: include --- > [!IMPORTANT] -> [Learn how Microsoft is helping protect customers from Solorigate](https://aka.ms/solorigate) +> [Learn how Microsoft is helping to protect customers from Solorigate, a recent sophisticated attack](https://aka.ms/solorigate) From 60657e29b9ff583f429932dc451065288d13172c Mon Sep 17 00:00:00 2001 From: Daniel Simpson Date: Sat, 19 Dec 2020 17:42:03 -0800 Subject: [PATCH 183/486] Update microsoft-defender.md --- windows/security/includes/microsoft-defender.md | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/windows/security/includes/microsoft-defender.md b/windows/security/includes/microsoft-defender.md index 208baaefb5..27394df0ea 100644 --- a/windows/security/includes/microsoft-defender.md +++ b/windows/security/includes/microsoft-defender.md @@ -11,4 +11,4 @@ ms.topic: include --- > [!IMPORTANT] -> [Learn how Microsoft is helping to protect customers from Solorigate, a recent sophisticated attack](https://aka.ms/solorigate) +> [Learn how Microsoft is helping to protect customers from Solorigate, a recent sophisticated attack](https://aka.ms/solorigate). From 26f0d9f08c254cbbadf82372de1931ad52e3242b Mon Sep 17 00:00:00 2001 From: Denise Vangel-MSFT Date: Sun, 20 Dec 2020 06:42:21 -0800 Subject: [PATCH 184/486] Update microsoft-defender-antivirus-compatibility.md --- .../microsoft-defender-antivirus-compatibility.md | 2 -- 1 file changed, 2 deletions(-) diff --git a/windows/security/threat-protection/microsoft-defender-antivirus/microsoft-defender-antivirus-compatibility.md b/windows/security/threat-protection/microsoft-defender-antivirus/microsoft-defender-antivirus-compatibility.md index 0a96956345..0010e0b826 100644 --- a/windows/security/threat-protection/microsoft-defender-antivirus/microsoft-defender-antivirus-compatibility.md +++ b/windows/security/threat-protection/microsoft-defender-antivirus/microsoft-defender-antivirus-compatibility.md @@ -93,8 +93,6 @@ If you uninstall the other product, and choose to use Microsoft Defender Antivir > [!WARNING] > You should not attempt to disable, stop, or modify any of the associated services used by Microsoft Defender Antivirus, Microsoft Defender for Endpoint, or the Windows Security app. This includes the *wscsvc*, *SecurityHealthService*, *MsSense*, *Sense*, *WinDefend*, or *MsMpEng* services and process. Manually modifying these services can cause severe instability on your endpoints and open your network to infections and attacks. It can also cause problems when using third-party antivirus apps and how their information is displayed in the [Windows Security app](microsoft-defender-security-center-antivirus.md). -> [!IMPORTANT] -> If you are using [Microsoft Endpoint DLP](https://docs.microsoft.com/windows/security/threat-protection/microsoft-defender-atp/information-protection-in-windows-overview), Microsoft Defender Antivirus real-time protection is enabled, even when Microsoft Defender Antivirus is running in passive mode. Microsoft Defender Antivirus won't conflict with third-party antivirus solutions installed on the endpoint. Endpoint DLP depends on real-time protection to operate. ## See also From 18c23e5cc0628134ffe21dc9c9ae3faaefe0d684 Mon Sep 17 00:00:00 2001 From: Denise Vangel-MSFT Date: Sun, 20 Dec 2020 06:42:36 -0800 Subject: [PATCH 185/486] Update microsoft-defender-antivirus-compatibility.md --- .../microsoft-defender-antivirus-compatibility.md | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/windows/security/threat-protection/microsoft-defender-antivirus/microsoft-defender-antivirus-compatibility.md b/windows/security/threat-protection/microsoft-defender-antivirus/microsoft-defender-antivirus-compatibility.md index 0010e0b826..083cbc45be 100644 --- a/windows/security/threat-protection/microsoft-defender-antivirus/microsoft-defender-antivirus-compatibility.md +++ b/windows/security/threat-protection/microsoft-defender-antivirus/microsoft-defender-antivirus-compatibility.md @@ -13,7 +13,7 @@ ms.author: deniseb ms.custom: nextgen ms.reviewer: pahuijbr manager: dansimp -ms.date: 12/17/2020 +ms.date: 12/20/2020 --- # Microsoft Defender Antivirus compatibility From 8c1306484fe2c2c71b5eeb4f53957cd3c6c3f6bc Mon Sep 17 00:00:00 2001 From: yanivkravitz Date: Mon, 21 Dec 2020 19:43:08 +0200 Subject: [PATCH 186/486] Update api-power-bi.md update Power Bi APi example so it will work in any case even for tenant with large number of devices --- .../threat-protection/microsoft-defender-atp/api-power-bi.md | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/windows/security/threat-protection/microsoft-defender-atp/api-power-bi.md b/windows/security/threat-protection/microsoft-defender-atp/api-power-bi.md index 605b0f511a..86bfb94779 100644 --- a/windows/security/threat-protection/microsoft-defender-atp/api-power-bi.md +++ b/windows/security/threat-protection/microsoft-defender-atp/api-power-bi.md @@ -46,7 +46,7 @@ The first example demonstrates how to connect Power BI to Advanced Hunting API a ``` let - AdvancedHuntingQuery = "DeviceEvents | where ActionType contains 'Anti'", + AdvancedHuntingQuery = "DeviceEvents | where ActionType contains 'Anti' | limit 20", HuntingUrl = "https://api.securitycenter.windows.com/api/advancedqueries", From 752f97d911bb875437be0b8a0ed45270044472d0 Mon Sep 17 00:00:00 2001 From: Beth Levin Date: Mon, 21 Dec 2020 16:32:56 -0800 Subject: [PATCH 187/486] doc updates --- .../microsoft-defender-atp/tvm-remediation.md | 3 +- .../tvm-security-recommendation.md | 31 +++++-------------- 2 files changed, 9 insertions(+), 25 deletions(-) diff --git a/windows/security/threat-protection/microsoft-defender-atp/tvm-remediation.md b/windows/security/threat-protection/microsoft-defender-atp/tvm-remediation.md index 37f460afea..2c7a81ec77 100644 --- a/windows/security/threat-protection/microsoft-defender-atp/tvm-remediation.md +++ b/windows/security/threat-protection/microsoft-defender-atp/tvm-remediation.md @@ -46,7 +46,8 @@ See [Use Intune to remediate vulnerabilities identified by Microsoft Defender fo 2. Select a security recommendation you would like to request remediation for, and then select **Remediation options**. -3. Fill out the form, including what you are requesting remediation for, priority, due date, and optional notes. If you choose the "attention required" remediation option, selecting a due date will not be available since there is no specific action. +3. Fill out the form, including what you are requesting remediation for, applicable device groups, priority, due date, and optional notes. + 1. If you choose the "attention required" remediation option, selecting a due date will not be available since there is no specific action. 4. Select **Submit request**. Submitting a remediation request creates a remediation activity item within threat and vulnerability management, which can be used for monitoring the remediation progress for this recommendation. This will not trigger a remediation or apply any changes to devices. diff --git a/windows/security/threat-protection/microsoft-defender-atp/tvm-security-recommendation.md b/windows/security/threat-protection/microsoft-defender-atp/tvm-security-recommendation.md index 3db95062b4..1a7f20a55c 100644 --- a/windows/security/threat-protection/microsoft-defender-atp/tvm-security-recommendation.md +++ b/windows/security/threat-protection/microsoft-defender-atp/tvm-security-recommendation.md @@ -112,32 +112,17 @@ If there is a large jump in the number of exposed devices, or a sharp increase i ## Request remediation -The threat and vulnerability management capability in Microsoft Defender ATP bridges the gap between Security and IT administrators through the remediation request workflow. Security admins like you can request for the IT Administrator to remediate a vulnerability from the **Security recommendation** pages to Intune. +The threat and vulnerability management remediation capability bridges the gap between Security and IT administrators through the remediation request workflow. Security admins like you can request for the IT Administrator to remediate a vulnerability from the **Security recommendation** page to Intune. [Learn more about remediation options](tvm-remediation.md) -### Enable Microsoft Intune connection +### How to request remediation -To use this capability, enable your Microsoft Intune connections. In the Microsoft Defender Security Center, navigate to **Settings** > **General** > **Advanced features**. Scroll down and look for **Microsoft Intune connection**. By default, the toggle is turned off. Turn your **Microsoft Intune connection** toggle **On**. - -See [Use Intune to remediate vulnerabilities identified by Microsoft Defender ATP](https://docs.microsoft.com/intune/atp-manage-vulnerabilities) for details. - -### Remediation request steps - -1. Select a security recommendation you would like to request remediation for, and then select **Remediation options**. - -2. Fill out the form, including what you are requesting remediation for, priority, due date, and optional notes. Select **Submit request**. Submitting a remediation request creates a remediation activity item within threat and vulnerability management, which can be used for monitoring the remediation progress for this recommendation. This will not trigger a remediation or apply any changes to devices. - -3. Notify your IT Administrator about the new request and have them log into Intune to approve or reject the request and start a package deployment. - -4. Go to the [**Remediation**](tvm-remediation.md) page to view the status of your remediation request. - -If you want to check how the ticket shows up in Intune, see [Use Intune to remediate vulnerabilities identified by Microsoft Defender ATP](https://docs.microsoft.com/intune/atp-manage-vulnerabilities) for details. - ->[!NOTE] ->If your request involves remediating more than 10,000 devices, we can only send 10,000 devices for remediation to Intune. +Select a security recommendation you would like to request remediation for, and then select **Remediation options**. Fill out the form and select **Submit request**. Go to the [**Remediation**](tvm-remediation.md) page to view the status of your remediation request. [Learn more about how to request remediation](tvm-remediation.md#request-remediation) ## File for exception -As an alternative to a remediation request when a recommendation is not relevant at the moment, you can create exceptions for recommendations. Only users with “exceptions handling” permissions can add exception. [Learn more about RBAC roles](user-roles.md). If your organization has device groups, you will now be able to scope the exception to specific device groups. +As an alternative to a remediation request when a recommendation is not relevant at the moment, you can create exceptions for recommendations. [Learn more about exceptions](tvm-exception.md) + +Only users with “exceptions handling” permissions can add exception. [Learn more about RBAC roles](user-roles.md). When an exception is created for a recommendation, the recommendation is no longer active. The recommendation state will change to **Full exception** or **Partial exception** (by device group). @@ -147,9 +132,7 @@ Select a security recommendation you would like create an exception for, and the ![Showing where the button for "exception options" is location in a security recommendation flyout.](images/tvm-exception-options.png) -Choose the scope and justification, set a date for the exception duration, and submit. To view all your exceptions (current and past), navigate to the [Remediation](tvm-remediation.md) page under the **Threat & Vulnerability Management** menu and select the **Exceptions** tab. - -[Learn more about exceptions](tvm-exception.md) +Fill out the form and submit. To view all your exceptions (current and past), navigate to the [Remediation](tvm-remediation.md) page under the **Threat & Vulnerability Management** menu and select the **Exceptions** tab. [Learn more about how to create an exception](tvm-exception.md#create-an-exception) ## Report inaccuracy From d7cd0431b7c3b51f2c005888866206bbe0597c25 Mon Sep 17 00:00:00 2001 From: Beth Levin Date: Mon, 21 Dec 2020 16:36:36 -0800 Subject: [PATCH 188/486] updated software inventroty --- .../microsoft-defender-atp/tvm-software-inventory.md | 10 +++++++--- 1 file changed, 7 insertions(+), 3 deletions(-) diff --git a/windows/security/threat-protection/microsoft-defender-atp/tvm-software-inventory.md b/windows/security/threat-protection/microsoft-defender-atp/tvm-software-inventory.md index d18b376b49..e927418779 100644 --- a/windows/security/threat-protection/microsoft-defender-atp/tvm-software-inventory.md +++ b/windows/security/threat-protection/microsoft-defender-atp/tvm-software-inventory.md @@ -96,9 +96,13 @@ You can view software pages a few different ways: A full page will appear with all the details of a specific software and the following information: -- Side panel with vendor information, prevalence of the software in the organization (including number of devices it's installed on, and exposed devices that aren't patched), whether and exploit is available, and impact to your exposure score -- Data visualizations showing the number of, and severity of, vulnerabilities and misconfigurations. Also, graphs with the number of exposed devices -- Tabs with lists of the corresponding security recommendations for the weaknesses and vulnerabilities identified, the named CVEs of discovered vulnerabilities, the names of the devices that the software is installed on, and the specific versions of the software with the number of devices that have each version installed and number of vulnerabilities. +- Side panel with vendor information, prevalence of the software in the organization (including number of devices it's installed on, and exposed devices that aren't patched), whether and exploit is available, and impact to your exposure score. +- Data visualizations showing the number of, and severity of, vulnerabilities and misconfigurations. Also, graphs with the number of exposed devices. +- Tabs showing information such as: + - Corresponding security recommendations for the weaknesses and vulnerabilities identified. + - Named CVEs of discovered vulnerabilities. + - Devices that have the software installed (along with device name, domain, OS, and more). + - Software version list (including number of devices the version is installed on, the number of discovered vulnerabilities, and the names of the installed devices). ![Software example page for Visual Studio 2017 with the software details, weaknesses, exposed devices, and more.](images/tvm-software-page-example.png) From e1e783fbcf92b1c158e421d31d7a89a3db82ea95 Mon Sep 17 00:00:00 2001 From: ManikaDhiman Date: Mon, 21 Dec 2020 16:52:09 -0800 Subject: [PATCH 189/486] Added Logon policies --- windows/client-management/mdm/TOC.md | 1 + .../mdm/policies-in-policy-csp-admx-backed.md | 15 + .../policy-configuration-service-provider.md | 50 + .../mdm/policy-csp-admx-grouppolicy.md | 245 ++++ .../mdm/policy-csp-admx-logon.md | 1207 +++++++++++++++++ 5 files changed, 1518 insertions(+) create mode 100644 windows/client-management/mdm/policy-csp-admx-grouppolicy.md create mode 100644 windows/client-management/mdm/policy-csp-admx-logon.md diff --git a/windows/client-management/mdm/TOC.md b/windows/client-management/mdm/TOC.md index a4329d7e1b..0dc397819a 100644 --- a/windows/client-management/mdm/TOC.md +++ b/windows/client-management/mdm/TOC.md @@ -215,6 +215,7 @@ #### [ADMX_LanmanServer](policy-csp-admx-lanmanserver.md) #### [ADMX_LanmanWorkstation](policy-csp-admx-lanmanworkstation.md) #### [ADMX_LinkLayerTopologyDiscovery](policy-csp-admx-linklayertopologydiscovery.md) +#### [ADMX_Logon](policy-csp-admx-logon.md) #### [ADMX_MicrosoftDefenderAntivirus](policy-csp-admx-microsoftdefenderantivirus.md) #### [ADMX_MMC](policy-csp-admx-mmc.md) #### [ADMX_MMCSnapins](policy-csp-admx-mmcsnapins.md) diff --git a/windows/client-management/mdm/policies-in-policy-csp-admx-backed.md b/windows/client-management/mdm/policies-in-policy-csp-admx-backed.md index 0d38a8664a..a66d12c325 100644 --- a/windows/client-management/mdm/policies-in-policy-csp-admx-backed.md +++ b/windows/client-management/mdm/policies-in-policy-csp-admx-backed.md @@ -363,6 +363,21 @@ ms.date: 10/08/2020 - [ADMX_LanmanWorkstation/Pol_EnableOfflineFilesforCAShares](./policy-csp-admx-lanmanworkstation.md#admx-lanmanworkstation-pol-enableofflinefilesforcashares) - [ADMX_LinkLayerTopologyDiscovery/LLTD_EnableLLTDIO](./policy-csp-admx-linklayertopologydiscovery.md#admx-linklayertopologydiscovery-lltd-enablelltdio) - [ADMX_LinkLayerTopologyDiscovery/LLTD_EnableRspndr](./policy-csp-admx-linklayertopologydiscovery.md#admx-linklayertopologydiscovery-lltd-enablerspndr) +- [ADMX_Logon/BlockUserFromShowingAccountDetailsOnSignin](./policy-csp-admx-logon.md#admx-logon-blockuserfromshowingaccountdetailsonsignin) +- [ADMX_Logon/DisableAcrylicBackgroundOnLogon](./policy-csp-admx-logon.md#admx-logon-disableacrylicbackgroundonlogon) +- [ADMX_Logon/DisableExplorerRunLegacy_1](./policy-csp-admx-logon.md#admx-logon-disableexplorerrunlegacy-1) +- [ADMX_Logon/DisableExplorerRunLegacy_2](./policy-csp-admx-logon.md#admx-logon-disableexplorerrunlegacy-2) +- [ADMX_Logon/DisableExplorerRunOnceLegacy_1](./policy-csp-admx-logon.md#admx-logon-disableexplorerrunoncelegacy-1) +- [ADMX_Logon/DisableExplorerRunOnceLegacy_2](./policy-csp-admx-logon.md#admx-logon-disableexplorerrunoncelegacy-2) +- [ADMX_Logon/DisableStatusMessages](./policy-csp-admx-logon.md#admx-logon-disablestatusmessages) +- [ADMX_Logon/DontEnumerateConnectedUsers](./policy-csp-admx-logon.md#admx-logon-dontenumerateconnectedusers) +- [ADMX_Logon/NoWelcomeTips_1](./policy-csp-admx-logon.md#admx-logon-nowelcometips-1) +- [ADMX_Logon/NoWelcomeTips_2](./policy-csp-admx-logon.md#admx-logon-nowelcometips-2) +- [ADMX_Logon/Run_1](./policy-csp-admx-logon.md#admx-logon-run-1) +- [ADMX_Logon/Run_2](./policy-csp-admx-logon.md#admx-logon-run-2) +- [ADMX_Logon/SyncForegroundPolicy](./policy-csp-admx-logon.md#admx-logon-syncforegroundpolicy) +- [ADMX_Logon/UseOEMBackground](./policy-csp-admx-logon.md#admx-logon-useoembackground) +- [ADMX_Logon/VerboseStatus](./policy-csp-admx-logon.md#admx-logon-verbosestatus) - [ADMX_MicrosoftDefenderAntivirus/AllowFastServiceStartup](./policy-csp-admx-microsoftdefenderantivirus.md#admx-microsoftdefenderantivirus-allowfastservicestartup) - [ADMX_MicrosoftDefenderAntivirus/DisableAntiSpywareDefender](./policy-csp-admx-microsoftdefenderantivirus.md#admx-microsoftdefenderantivirus-disableantispywaredefender) - [ADMX_MicrosoftDefenderAntivirus/DisableAutoExclusions](./policy-csp-admx-microsoftdefenderantivirus.md#admx-microsoftdefenderantivirus-disableautoexclusions) diff --git a/windows/client-management/mdm/policy-configuration-service-provider.md b/windows/client-management/mdm/policy-configuration-service-provider.md index addca8a9df..d5ff3b63a2 100644 --- a/windows/client-management/mdm/policy-configuration-service-provider.md +++ b/windows/client-management/mdm/policy-configuration-service-provider.md @@ -1396,6 +1396,56 @@ The following diagram shows the Policy configuration service provider in tree fo +### ADMX_Logon policies + +
    +
    + ADMX_Logon/BlockUserFromShowingAccountDetailsOnSignin +
    +
    + ADMX_Logon/DisableAcrylicBackgroundOnLogon +
    +
    + ADMX_Logon/DisableExplorerRunLegacy_1 +
    +
    + ADMX_Logon/DisableExplorerRunLegacy_2 +
    +
    + ADMX_Logon/DisableExplorerRunOnceLegacy_1 +
    +
    + ADMX_Logon/DisableExplorerRunOnceLegacy_2 +
    +
    + ADMX_Logon/DisableStatusMessages +
    +
    + ADMX_Logon/DontEnumerateConnectedUsers +
    +
    + ADMX_Logon/NoWelcomeTips_1 +
    +
    + ADMX_Logon/NoWelcomeTips_2 +
    +
    + ADMX_Logon/Run_1 +
    +
    + ADMX_Logon/Run_2 +
    +
    + ADMX_Logon/SyncForegroundPolicy +
    +
    + ADMX_Logon/UseOEMBackground +
    +
    + ADMX_Logon/VerboseStatus +
    +
    + ### ADMX_MicrosoftDefenderAntivirus policies
    diff --git a/windows/client-management/mdm/policy-csp-admx-grouppolicy.md b/windows/client-management/mdm/policy-csp-admx-grouppolicy.md new file mode 100644 index 0000000000..d53e96d965 --- /dev/null +++ b/windows/client-management/mdm/policy-csp-admx-grouppolicy.md @@ -0,0 +1,245 @@ +--- +title: Policy CSP - ADMX_GroupPolicy +description: Policy CSP - ADMX_GroupPolicy +ms.author: dansimp +ms.localizationpriority: medium +ms.topic: article +ms.prod: w10 +ms.technology: windows +author: manikadhiman +ms.date: 12/21/2020 +ms.reviewer: +manager: dansimp +--- + +# Policy CSP - ADMX_GroupPolicy +> [!WARNING] +> Some information relates to prereleased products, which may be substantially modified before it's commercially released. Microsoft makes no warranties, expressed or implied, concerning the information provided here. + +
    + + +## ADMX_GroupPolicy policies + +
    +
    + ADMX_GroupPolicy/AllowX-ForestPolicy-and-RUP +
    +
    + ADMX_GroupPolicy/CSE_AppMgmt +
    +
    + ADMX_GroupPolicy/CSE_DiskQuota +
    +
    + ADMX_GroupPolicy/CSE_EFSRecovery +
    +
    + ADMX_GroupPolicy/CSE_FolderRedirection +
    +
    + ADMX_GroupPolicy/CSE_IEM +
    +
    + ADMX_GroupPolicy/CSE_IPSecurity +
    +
    + ADMX_GroupPolicy/CSE_Registry +
    +
    + ADMX_GroupPolicy/CSE_Scripts +
    +
    + ADMX_GroupPolicy/CSE_Security +
    +
    + ADMX_GroupPolicy/CSE_Wired +
    +
    + ADMX_GroupPolicy/CSE_Wireless +
    +
    + ADMX_GroupPolicy/CorpConnSyncWaitTime +
    +
    + ADMX_GroupPolicy/DenyRsopToInteractiveUser_1 +
    +
    + ADMX_GroupPolicy/DenyRsopToInteractiveUser_2 +
    +
    + ADMX_GroupPolicy/DisableAOACProcessing +
    +
    + ADMX_GroupPolicy/DisableAutoADMUpdate +
    +
    + ADMX_GroupPolicy/DisableBackgroundPolicy +
    +
    + ADMX_GroupPolicy/DisableLGPOProcessing +
    +
    + ADMX_GroupPolicy/DisableUsersFromMachGP +
    +
    + ADMX_GroupPolicy/EnableCDP +
    +
    + ADMX_GroupPolicy/EnableLogonOptimization +
    +
    + ADMX_GroupPolicy/EnableLogonOptimizationOnServerSKU +
    +
    + ADMX_GroupPolicy/EnableMMX +
    +
    + ADMX_GroupPolicy/EnforcePoliciesOnly +
    +
    + ADMX_GroupPolicy/FontMitigation +
    +
    + ADMX_GroupPolicy/GPDCOptions +
    +
    + ADMX_GroupPolicy/GPTransferRate_1 +
    +
    + ADMX_GroupPolicy/GPTransferRate_2 +
    +
    + ADMX_GroupPolicy/GroupPolicyRefreshRate +
    +
    + ADMX_GroupPolicy/GroupPolicyRefreshRateDC +
    +
    + ADMX_GroupPolicy/GroupPolicyRefreshRateUser +
    +
    + ADMX_GroupPolicy/LogonScriptDelay +
    +
    + ADMX_GroupPolicy/NewGPODisplayName +
    +
    + ADMX_GroupPolicy/NewGPOLinksDisabled +
    +
    + ADMX_GroupPolicy/OnlyUseLocalAdminFiles +
    +
    + ADMX_GroupPolicy/ProcessMitigationOptions +
    +
    + ADMX_GroupPolicy/RSoPLogging +
    +
    + ADMX_GroupPolicy/ResetDfsClientInfoDuringRefreshPolicy +
    +
    + ADMX_GroupPolicy/SlowLinkDefaultForDirectAccess +
    +
    + ADMX_GroupPolicy/SlowlinkDefaultToAsync +
    +
    + ADMX_GroupPolicy/SyncWaitTime +
    +
    + ADMX_GroupPolicy/UserPolicyMode +
    +
    + + +
    + + +**ADMX_AuditSettings/IncludeCmdLine** + + +
    + + + + + + + + + + + + + + + + + + + + + + + + +
    Windows EditionSupported?
    Homecross mark
    Procross mark
    Businesscross mark
    Enterprisecheck mark
    Educationcross mark
    + + +
    + + +[Scope](./policy-configuration-service-provider.md#policy-scope): + +> [!div class = "checklist"] +> * Device + +
    + + + +Available in Windows 10 Insider Preview Build 20185. This policy setting determines what information is logged in security audit events when a new process has been created. This setting only applies when the Audit Process Creation policy is enabled. + +If you enable this policy setting, the command line information for every process will be logged in plain text in the security event log as part of the Audit Process Creation event 4688, "a new process has been created," on the workstations and servers on which this policy setting is applied. + +If you disable or do not configure this policy setting, the process's command line information will not be included in Audit Process Creation events. + +Default is Not configured. + +> [!NOTE] +> When this policy setting is enabled, any user with access to read the security events will be able to read the command line arguments for any successfully created process. Command line arguments can contain sensitive or private information, such as passwords or user data. + + +> [!TIP] +> This is an ADMX-backed policy and requires a special SyncML format to enable or disable. For details, see [Understanding ADMX-backed policies](./understanding-admx-backed-policies.md). +> +> You must specify the data type in the SyncML as <Format>chr</Format>. For an example SyncML, refer to [Enabling a policy](./understanding-admx-backed-policies.md#enabling-a-policy). +> +> The payload of the SyncML must be XML-encoded; for this XML encoding, there are a variety of online encoders that you can use. To avoid encoding the payload, you can use CDATA if your MDM supports it. For more information, see [CDATA Sections](http://www.w3.org/TR/REC-xml/#sec-cdata-sect). + + +ADMX Info: +- GP English name: *Include command line in process creation events* +- GP name: *IncludeCmdLine* +- GP path: *System/Audit Process Creation* +- GP ADMX file name: *AuditSettings.admx* + + + +
    + +Footnotes: + +- 1 - Available in Windows 10, version 1607. +- 2 - Available in Windows 10, version 1703. +- 3 - Available in Windows 10, version 1709. +- 4 - Available in Windows 10, version 1803. +- 5 - Available in Windows 10, version 1809. +- 6 - Available in Windows 10, version 1903. +- 7 - Available in Windows 10, version 1909. +- 8 - Available in Windows 10, version 2004. + + + diff --git a/windows/client-management/mdm/policy-csp-admx-logon.md b/windows/client-management/mdm/policy-csp-admx-logon.md new file mode 100644 index 0000000000..54fe3f12cb --- /dev/null +++ b/windows/client-management/mdm/policy-csp-admx-logon.md @@ -0,0 +1,1207 @@ +--- +title: Policy CSP - ADMX_Logon +description: Policy CSP - ADMX_Logon +ms.author: dansimp +ms.localizationpriority: medium +ms.topic: article +ms.prod: w10 +ms.technology: windows +author: manikadhiman +ms.date: 12/21/2020 +ms.reviewer: +manager: dansimp +--- + +# Policy CSP - ADMX_Logon +> [!WARNING] +> Some information relates to prereleased products, which may be substantially modified before it's commercially released. Microsoft makes no warranties, expressed or implied, concerning the information provided here. + +
    + + +## ADMX_Logon policies + +
    +
    + ADMX_Logon/BlockUserFromShowingAccountDetailsOnSignin +
    +
    + ADMX_Logon/DisableAcrylicBackgroundOnLogon +
    +
    + ADMX_Logon/DisableExplorerRunLegacy_1 +
    +
    + ADMX_Logon/DisableExplorerRunLegacy_2 +
    +
    + ADMX_Logon/DisableExplorerRunOnceLegacy_1 +
    +
    + ADMX_Logon/DisableExplorerRunOnceLegacy_2 +
    +
    + ADMX_Logon/DisableStatusMessages +
    +
    + ADMX_Logon/DontEnumerateConnectedUsers +
    +
    + ADMX_Logon/NoWelcomeTips_1 +
    +
    + ADMX_Logon/NoWelcomeTips_2 +
    +
    + ADMX_Logon/Run_1 +
    +
    + ADMX_Logon/Run_2 +
    +
    + ADMX_Logon/SyncForegroundPolicy +
    +
    + ADMX_Logon/UseOEMBackground +
    +
    + ADMX_Logon/VerboseStatus +
    +
    + + +
    + + +**ADMX_Logon/BlockUserFromShowingAccountDetailsOnSignin** + + + + + + + + + + + + + + + + + + + + + + + + + + + +
    Windows EditionSupported?
    Homecross mark
    Procross mark
    Businesscross mark
    Enterprisecheck mark
    Educationcross mark
    + + +
    + + +[Scope](./policy-configuration-service-provider.md#policy-scope): + +> [!div class = "checklist"] +> * Device + +
    + + + +Available in the latest Windows 10 Insider Preview Build. This policy prevents the user from showing account details (email address or user name) on the sign-in screen. + +If you enable this policy setting, the user cannot choose to show account details on the sign-in screen. + +If you disable or do not configure this policy setting, the user may choose to show account details on the sign-in screen. + + +> [!TIP] +> This is an ADMX-backed policy and requires a special SyncML format to enable or disable. For details, see [Understanding ADMX-backed policies](./understanding-admx-backed-policies.md). +> +> You must specify the data type in the SyncML as <Format>chr</Format>. For an example SyncML, refer to [Enabling a policy](./understanding-admx-backed-policies.md#enabling-a-policy). +> +> The payload of the SyncML must be XML-encoded; for this XML encoding, there are a variety of online encoders that you can use. To avoid encoding the payload, you can use CDATA if your MDM supports it. For more information, see [CDATA Sections](http://www.w3.org/TR/REC-xml/#sec-cdata-sect). + + +ADMX Info: +- GP English name: *Block user from showing account details on sign-in* +- GP name: *BlockUserFromShowingAccountDetailsOnSignin* +- GP path: *System\Logon* +- GP ADMX file name: *Logon.admx* + + + +
    + + +**ADMX_Logon/DisableAcrylicBackgroundOnLogon** + + + + + + + + + + + + + + + + + + + + + + + + + + + +
    Windows EditionSupported?
    Homecross mark
    Procross mark
    Businesscross mark
    Enterprisecheck mark
    Educationcross mark
    + + +
    + + +[Scope](./policy-configuration-service-provider.md#policy-scope): + +> [!div class = "checklist"] +> * Device + +
    + + + +Available in the latest Windows 10 Insider Preview Build. This policy setting disables the acrylic blur effect on logon background image. + +If you enable this policy, the logon background image shows without blur. + +If you disable or do not configure this policy, the logon background image adopts the acrylic blur effect. + + +> [!TIP] +> This is an ADMX-backed policy and requires a special SyncML format to enable or disable. For details, see [Understanding ADMX-backed policies](./understanding-admx-backed-policies.md). +> +> You must specify the data type in the SyncML as <Format>chr</Format>. For an example SyncML, refer to [Enabling a policy](./understanding-admx-backed-policies.md#enabling-a-policy). +> +> The payload of the SyncML must be XML-encoded; for this XML encoding, there are a variety of online encoders that you can use. To avoid encoding the payload, you can use CDATA if your MDM supports it. For more information, see [CDATA Sections](http://www.w3.org/TR/REC-xml/#sec-cdata-sect). + + +ADMX Info: +- GP English name: *Show clear logon background* +- GP name: *DisableAcrylicBackgroundOnLogon* +- GP path: *System\Logon* +- GP ADMX file name: *Logon.admx* + + + +
    + + +**ADMX_Logon/DisableExplorerRunLegacy_1** + + + + + + + + + + + + + + + + + + + + + + + + + + + +
    Windows EditionSupported?
    Homecross mark
    Procross mark
    Businesscross mark
    Enterprisecheck mark
    Educationcross mark
    + + +
    + + +[Scope](./policy-configuration-service-provider.md#policy-scope): + +> [!div class = "checklist"] +> * User + +
    + + + +Available in the latest Windows 10 Insider Preview Build. This policy setting ignores the customized run list. + +You can create a customized list of additional programs and documents that the system starts automatically when it runs on Windows Vista, Windows XP Professional, and Windows 2000 Professional. These programs are added to the standard run list of programs and services that the system starts. + +If you enable this policy setting, the system ignores the run list for Windows Vista, Windows XP Professional, and Windows 2000 Professional. + +If you disable or do not configure this policy setting, Windows Vista adds any customized run list configured to its run list. + +This policy setting appears in the Computer Configuration and User Configuration folders. If both policy settings are configured, the policy setting in Computer Configuration takes precedence over the policy setting in User Configuration. + +> [!NOTE] +> To create a customized run list by using a policy setting, use the "Run these applications at startup" policy setting. Also, see the "Do not process the run once list" policy setting. + + +> [!TIP] +> This is an ADMX-backed policy and requires a special SyncML format to enable or disable. For details, see [Understanding ADMX-backed policies](./understanding-admx-backed-policies.md). +> +> You must specify the data type in the SyncML as <Format>chr</Format>. For an example SyncML, refer to [Enabling a policy](./understanding-admx-backed-policies.md#enabling-a-policy). +> +> The payload of the SyncML must be XML-encoded; for this XML encoding, there are a variety of online encoders that you can use. To avoid encoding the payload, you can use CDATA if your MDM supports it. For more information, see [CDATA Sections](http://www.w3.org/TR/REC-xml/#sec-cdata-sect). + + +ADMX Info: +- GP English name: *Do not process the legacy run list* +- GP name: *DisableExplorerRunLegacy_1* +- GP path: *System\Logon* +- GP ADMX file name: *Logon.admx* + + + +
    + + +**ADMX_Logon/DisableExplorerRunLegacy_2** + + + + + + + + + + + + + + + + + + + + + + + + + + + +
    Windows EditionSupported?
    Homecross mark
    Procross mark
    Businesscross mark
    Enterprisecheck mark
    Educationcross mark
    + + +
    + + +[Scope](./policy-configuration-service-provider.md#policy-scope): + +> [!div class = "checklist"] +> * Device + +
    + + + +Available in the latest Windows 10 Insider Preview Build. This policy setting ignores the customized run list. + +You can create a customized list of additional programs and documents that the system starts automatically when it runs on Windows Vista, Windows XP Professional, and Windows 2000 Professional. These programs are added to the standard run list of programs and services that the system starts. + +If you enable this policy setting, the system ignores the run list for Windows Vista, Windows XP Professional, and Windows 2000 Professional. + +If you disable or do not configure this policy setting, Windows Vista adds any customized run list configured to its run list. + +This policy setting appears in the Computer Configuration and User Configuration folders. If both policy settings are configured, the policy setting in Computer Configuration takes precedence over the policy setting in User Configuration. + +> [!NOTE] +> To create a customized run list by using a policy setting, use the "Run these applications at startup" policy setting. Also, see the "Do not process the run once list" policy setting. + + +> [!TIP] +> This is an ADMX-backed policy and requires a special SyncML format to enable or disable. For details, see [Understanding ADMX-backed policies](./understanding-admx-backed-policies.md). +> +> You must specify the data type in the SyncML as <Format>chr</Format>. For an example SyncML, refer to [Enabling a policy](./understanding-admx-backed-policies.md#enabling-a-policy). +> +> The payload of the SyncML must be XML-encoded; for this XML encoding, there are a variety of online encoders that you can use. To avoid encoding the payload, you can use CDATA if your MDM supports it. For more information, see [CDATA Sections](http://www.w3.org/TR/REC-xml/#sec-cdata-sect). + + +ADMX Info: +- GP English name: *Do not process the legacy run list* +- GP name: *DisableExplorerRunLegacy_2* +- GP path: *System\Logon* +- GP ADMX file name: *Logon.admx* + + + +
    + + +**ADMX_Logon/DisableExplorerRunOnceLegacy_1** + + + + + + + + + + + + + + + + + + + + + + + + + + + +
    Windows EditionSupported?
    Homecross mark
    Procross mark
    Businesscross mark
    Enterprisecheck mark
    Educationcross mark
    + + +
    + + +[Scope](./policy-configuration-service-provider.md#policy-scope): + +> [!div class = "checklist"] +> * User + +
    + + + +Available in the latest Windows 10 Insider Preview Build. This policy setting ignores customized run-once lists. + +You can create a customized list of additional programs and documents that are started automatically the next time the system starts (but not thereafter). These programs are added to the standard list of programs and services that the system starts. + +If you enable this policy setting, the system ignores the run-once list. + +If you disable or do not configure this policy setting, the system runs the programs in the run-once list. + +This policy setting appears in the Computer Configuration and User Configuration folders. If both policy settings are configured, the policy setting in Computer Configuration takes precedence over the policy setting in User Configuration. + +> [!NOTE] +> Customized run-once lists are stored in the registry in HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\RunOnce. Also, see the "Do not process the legacy run list" policy setting. + + +> [!TIP] +> This is an ADMX-backed policy and requires a special SyncML format to enable or disable. For details, see [Understanding ADMX-backed policies](./understanding-admx-backed-policies.md). +> +> You must specify the data type in the SyncML as <Format>chr</Format>. For an example SyncML, refer to [Enabling a policy](./understanding-admx-backed-policies.md#enabling-a-policy). +> +> The payload of the SyncML must be XML-encoded; for this XML encoding, there are a variety of online encoders that you can use. To avoid encoding the payload, you can use CDATA if your MDM supports it. For more information, see [CDATA Sections](http://www.w3.org/TR/REC-xml/#sec-cdata-sect). + + +ADMX Info: +- GP English name: *Do not process the run once list* +- GP name: *DisableExplorerRunOnceLegacy_1* +- GP path: *System\Logon* +- GP ADMX file name: *Logon.admx* + + + +
    + + +**ADMX_Logon/DisableExplorerRunOnceLegacy_2** + + + + + + + + + + + + + + + + + + + + + + + + + + + +
    Windows EditionSupported?
    Homecross mark
    Procross mark
    Businesscross mark
    Enterprisecheck mark
    Educationcross mark
    + + +
    + + +[Scope](./policy-configuration-service-provider.md#policy-scope): + +> [!div class = "checklist"] +> * Device + +
    + + + +Available in the latest Windows 10 Insider Preview Build. This policy setting ignores customized run-once lists. + +You can create a customized list of additional programs and documents that are started automatically the next time the system starts (but not thereafter). These programs are added to the standard list of programs and services that the system starts. + +If you enable this policy setting, the system ignores the run-once list. + +If you disable or do not configure this policy setting, the system runs the programs in the run-once list. + +This policy setting appears in the Computer Configuration and User Configuration folders. If both policy settings are configured, the policy setting in Computer Configuration takes precedence over the policy setting in User Configuration. + +> [!NOTE] +> Customized run-once lists are stored in the registry in HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\RunOnce. Also, see the "Do not process the legacy run list" policy setting. + + +> [!TIP] +> This is an ADMX-backed policy and requires a special SyncML format to enable or disable. For details, see [Understanding ADMX-backed policies](./understanding-admx-backed-policies.md). +> +> You must specify the data type in the SyncML as <Format>chr</Format>. For an example SyncML, refer to [Enabling a policy](./understanding-admx-backed-policies.md#enabling-a-policy). +> +> The payload of the SyncML must be XML-encoded; for this XML encoding, there are a variety of online encoders that you can use. To avoid encoding the payload, you can use CDATA if your MDM supports it. For more information, see [CDATA Sections](http://www.w3.org/TR/REC-xml/#sec-cdata-sect). + + +ADMX Info: +- GP English name: *Do not process the run once list* +- GP name: *DisableExplorerRunOnceLegacy_2* +- GP path: *System\Logon* +- GP ADMX file name: *Logon.admx* + + + +
    + + +**ADMX_Logon/DisableStatusMessages** + + + + + + + + + + + + + + + + + + + + + + + + + + + +
    Windows EditionSupported?
    Homecross mark
    Procross mark
    Businesscross mark
    Enterprisecheck mark
    Educationcross mark
    + + +
    + + +[Scope](./policy-configuration-service-provider.md#policy-scope): + +> [!div class = "checklist"] +> * Device + +
    + + + +Available in the latest Windows 10 Insider Preview Build. This policy setting suppresses system status messages. + +If you enable this setting, the system does not display a message reminding users to wait while their system starts or shuts down, or while users log on or off. + +If you disable or do not configure this policy setting, the system displays the message reminding users to wait while their system starts or shuts down, or while users log on or off. + + +> [!TIP] +> This is an ADMX-backed policy and requires a special SyncML format to enable or disable. For details, see [Understanding ADMX-backed policies](./understanding-admx-backed-policies.md). +> +> You must specify the data type in the SyncML as <Format>chr</Format>. For an example SyncML, refer to [Enabling a policy](./understanding-admx-backed-policies.md#enabling-a-policy). +> +> The payload of the SyncML must be XML-encoded; for this XML encoding, there are a variety of online encoders that you can use. To avoid encoding the payload, you can use CDATA if your MDM supports it. For more information, see [CDATA Sections](http://www.w3.org/TR/REC-xml/#sec-cdata-sect). + + +ADMX Info: +- GP English name: *Remove Boot / Shutdown / Logon / Logoff status messages* +- GP name: *DisableStatusMessages* +- GP path: *System* +- GP ADMX file name: *Logon.admx* + + + +
    + + +**ADMX_Logon/DontEnumerateConnectedUsers** + + + + + + + + + + + + + + + + + + + + + + + + + + + +
    Windows EditionSupported?
    Homecross mark
    Procross mark
    Businesscross mark
    Enterprisecheck mark
    Educationcross mark
    + + +
    + + +[Scope](./policy-configuration-service-provider.md#policy-scope): + +> [!div class = "checklist"] +> * Device + +
    + + + +Available in the latest Windows 10 Insider Preview Build. This policy setting prevents connected users from being enumerated on domain-joined computers. + +If you enable this policy setting, the Logon UI will not enumerate any connected users on domain-joined computers. + +If you disable or do not configure this policy setting, connected users will be enumerated on domain-joined computers. + + +> [!TIP] +> This is an ADMX-backed policy and requires a special SyncML format to enable or disable. For details, see [Understanding ADMX-backed policies](./understanding-admx-backed-policies.md). +> +> You must specify the data type in the SyncML as <Format>chr</Format>. For an example SyncML, refer to [Enabling a policy](./understanding-admx-backed-policies.md#enabling-a-policy). +> +> The payload of the SyncML must be XML-encoded; for this XML encoding, there are a variety of online encoders that you can use. To avoid encoding the payload, you can use CDATA if your MDM supports it. For more information, see [CDATA Sections](http://www.w3.org/TR/REC-xml/#sec-cdata-sect). + + +ADMX Info: +- GP English name: *Do not enumerate connected users on domain-joined computers* +- GP name: *DontEnumerateConnectedUsers* +- GP path: *System\Logon* +- GP ADMX file name: *Logon.admx* + + + +
    + + +**ADMX_Logon/NoWelcomeTips_1** + + + + + + + + + + + + + + + + + + + + + + + + + + + +
    Windows EditionSupported?
    Homecross mark
    Procross mark
    Businesscross mark
    Enterprisecheck mark
    Educationcross mark
    + + +
    + + +[Scope](./policy-configuration-service-provider.md#policy-scope): + +> [!div class = "checklist"] +> * User + +
    + + + +Available in the latest Windows 10 Insider Preview Build. This policy setting hides the welcome screen that is displayed on Windows 2000 Professional each time the user logs on. + +If you enable this policy setting, the welcome screen is hidden from the user logging on to a computer where this policy is applied. + +Users can still display the welcome screen by selecting it on the Start menu or by typing "Welcome" in the Run dialog box. + +If you disable or do not configure this policy, the welcome screen is displayed each time a user logs on to the computer. + +This setting applies only to Windows 2000 Professional. It does not affect the "Configure Your Server on a Windows 2000 Server" screen on Windows 2000 Server. + +> [!NOTE] +> This setting appears in the Computer Configuration and User Configuration folders. If both settings are configured, the setting in Computer Configuration takes precedence over the setting in User Configuration. + +> [!TIP] +> To display the welcome screen, click Start, point to Programs, point to Accessories, point to System Tools, and then click "Getting Started." To suppress the welcome screen without specifying a setting, clear the "Show this screen at startup" check box on the welcome screen. + + +> [!TIP] +> This is an ADMX-backed policy and requires a special SyncML format to enable or disable. For details, see [Understanding ADMX-backed policies](./understanding-admx-backed-policies.md). +> +> You must specify the data type in the SyncML as <Format>chr</Format>. For an example SyncML, refer to [Enabling a policy](./understanding-admx-backed-policies.md#enabling-a-policy). +> +> The payload of the SyncML must be XML-encoded; for this XML encoding, there are a variety of online encoders that you can use. To avoid encoding the payload, you can use CDATA if your MDM supports it. For more information, see [CDATA Sections](http://www.w3.org/TR/REC-xml/#sec-cdata-sect). + + +ADMX Info: +- GP English name: *Do not display the Getting Started welcome screen at logon* +- GP name: *NoWelcomeTips_1* +- GP path: *System* +- GP ADMX file name: *Logon.admx* + + + + +
    + + +**ADMX_Logon/NoWelcomeTips_2** + + + + + + + + + + + + + + + + + + + + + + + + + + + +
    Windows EditionSupported?
    Homecross mark
    Procross mark
    Businesscross mark
    Enterprisecheck mark
    Educationcross mark
    + + +
    + + +[Scope](./policy-configuration-service-provider.md#policy-scope): + +> [!div class = "checklist"] +> * Device + +
    + + + +Available in the latest Windows 10 Insider Preview Build. This policy setting hides the welcome screen that is displayed on Windows 2000 Professional each time the user logs on. + +If you enable this policy setting, the welcome screen is hidden from the user logging on to a computer where this policy is applied. + +Users can still display the welcome screen by selecting it on the Start menu or by typing "Welcome" in the Run dialog box. + +If you disable or do not configure this policy, the welcome screen is displayed each time a user logs on to the computer. This setting applies only to Windows 2000 Professional. It does not affect the "Configure Your Server on a Windows 2000 Server" screen on Windows 2000 Server. + +> [!NOTE] +> This setting appears in the Computer Configuration and User Configuration folders. If both settings are configured, the setting in Computer Configuration takes precedence over the setting in User Configuration. + +> [!TIP] +> To display the welcome screen, click Start, point to Programs, point to Accessories, point to System Tools, and then click "Getting Started." To suppress the welcome screen without specifying a setting, clear the "Show this screen at startup" check box on the welcome screen. + + +> [!TIP] +> This is an ADMX-backed policy and requires a special SyncML format to enable or disable. For details, see [Understanding ADMX-backed policies](./understanding-admx-backed-policies.md). +> +> You must specify the data type in the SyncML as <Format>chr</Format>. For an example SyncML, refer to [Enabling a policy](./understanding-admx-backed-policies.md#enabling-a-policy). +> +> The payload of the SyncML must be XML-encoded; for this XML encoding, there are a variety of online encoders that you can use. To avoid encoding the payload, you can use CDATA if your MDM supports it. For more information, see [CDATA Sections](http://www.w3.org/TR/REC-xml/#sec-cdata-sect). + + +ADMX Info: +- GP English name: *Do not display the Getting Started welcome screen at logon* +- GP name: *NoWelcomeTips_2* +- GP path: *System\Logon* +- GP ADMX file name: *Logon.admx* + + + +
    + + +**ADMX_Logon/Run_1** + + + + + + + + + + + + + + + + + + + + + + + + + + + +
    Windows EditionSupported?
    Homecross mark
    Procross mark
    Businesscross mark
    Enterprisecheck mark
    Educationcross mark
    + + +
    + + +[Scope](./policy-configuration-service-provider.md#policy-scope): + +> [!div class = "checklist"] +> * User + +
    + + + +Available in the latest Windows 10 Insider Preview Build. This policy setting specifies additional programs or documents that Windows starts automatically when a user logs on to the system. + +If you enable this policy setting, you can specify which programs can run at the time the user logs on to this computer that has this policy applied. + +To specify values for this policy setting, click Show. In the Show Contents dialog box in the Value column, type the name of the executable program (.exe) file or document file. To specify another name, press ENTER, and type the name. Unless the file is located in the %Systemroot% directory, you must specify the fully qualified path to the file. + +If you disable or do not configure this policy setting, the user will have to start the appropriate programs after logon. + +> [!NOTE] +> This setting appears in the Computer Configuration and User Configuration folders. If both settings are configured, the system starts the programs specified in the Computer Configuration setting just before it starts the programs specified in the User Configuration setting. + +Also, see the "Do not process the legacy run list" and the "Do not process the run once list" settings. + + +> [!TIP] +> This is an ADMX-backed policy and requires a special SyncML format to enable or disable. For details, see [Understanding ADMX-backed policies](./understanding-admx-backed-policies.md). +> +> You must specify the data type in the SyncML as <Format>chr</Format>. For an example SyncML, refer to [Enabling a policy](./understanding-admx-backed-policies.md#enabling-a-policy). +> +> The payload of the SyncML must be XML-encoded; for this XML encoding, there are a variety of online encoders that you can use. To avoid encoding the payload, you can use CDATA if your MDM supports it. For more information, see [CDATA Sections](http://www.w3.org/TR/REC-xml/#sec-cdata-sect). + + +ADMX Info: +- GP English name: *Run these programs at user logon* +- GP name: *Run_1* +- GP path: *System\Logon* +- GP ADMX file name: *Logon.admx* + + + +
    + + +**ADMX_Logon/Run_2** + + + + + + + + + + + + + + + + + + + + + + + + + + + +
    Windows EditionSupported?
    Homecross mark
    Procross mark
    Businesscross mark
    Enterprisecheck mark
    Educationcross mark
    + + +
    + + +[Scope](./policy-configuration-service-provider.md#policy-scope): + +> [!div class = "checklist"] +> * Device + +
    + + + +Available in the latest Windows 10 Insider Preview Build. This policy setting specifies additional programs or documents that Windows starts automatically when a user logs on to the system. + +If you enable this policy setting, you can specify which programs can run at the time the user logs on to this computer that has this policy applied. + +To specify values for this policy setting, click Show. In the Show Contents dialog box in the Value column, type the name of the executable program (.exe) file or document file. To specify another name, press ENTER, and type the name. Unless the file is located in the %Systemroot% directory, you must specify the fully qualified path to the file. + +If you disable or do not configure this policy setting, the user will have to start the appropriate programs after logon. + +> [!NOTE] +> This setting appears in the Computer Configuration and User Configuration folders. If both settings are configured, the system starts the programs specified in the Computer Configuration setting just before it starts the programs specified in the User Configuration setting. + +Also, see the "Do not process the legacy run list" and the "Do not process the run once list" settings. + + + +> [!TIP] +> This is an ADMX-backed policy and requires a special SyncML format to enable or disable. For details, see [Understanding ADMX-backed policies](./understanding-admx-backed-policies.md). +> +> You must specify the data type in the SyncML as <Format>chr</Format>. For an example SyncML, refer to [Enabling a policy](./understanding-admx-backed-policies.md#enabling-a-policy). +> +> The payload of the SyncML must be XML-encoded; for this XML encoding, there are a variety of online encoders that you can use. To avoid encoding the payload, you can use CDATA if your MDM supports it. For more information, see [CDATA Sections](http://www.w3.org/TR/REC-xml/#sec-cdata-sect). + + +ADMX Info: +- GP English name: *Run these programs at user logon* +- GP name: *Run_2* +- GP path: *System\Logon* +- GP ADMX file name: *Logon.admx* + + + +
    + + +**ADMX_Logon/SyncForegroundPolicy** + + + + + + + + + + + + + + + + + + + + + + + + + + + +
    Windows EditionSupported?
    Homecross mark
    Procross mark
    Businesscross mark
    Enterprisecheck mark
    Educationcross mark
    + + +
    + + +[Scope](./policy-configuration-service-provider.md#policy-scope): + +> [!div class = "checklist"] +> * Device + +
    + + + +Available in the latest Windows 10 Insider Preview Build. This policy setting determines whether Group Policy processing is synchronous (that is, whether computers wait for the network to be fully initialized during computer startup and user logon). By default, on client computers, Group Policy processing is not synchronous; client computers typically do not wait for the network to be fully initialized at startup and logon. Existing users are logged on using cached credentials, which results in shorter logon times. Group Policy is applied in the background after the network becomes available. + +Note that because this is a background refresh, extensions such as Software Installation and Folder Redirection take two logons to apply changes. To be able to operate safely, these extensions require that no users be logged on. Therefore, they must be processed in the foreground before users are actively using the computer. In addition, changes that are made to the user object, such as adding a roaming profile path, home directory, or user object logon script, may take up to two logons to be detected. + +If a user with a roaming profile, home directory, or user object logon script logs on to a computer, computers always wait for the network to be initialized before logging the user on. If a user has never logged on to this computer before, computers always wait for the network to be initialized. + +If you enable this policy setting, computers wait for the network to be fully initialized before users are logged on. Group Policy is applied in the foreground, synchronously. + +On servers running Windows Server 2008 or later, this policy setting is ignored during Group Policy processing at computer startup and Group Policy processing will be synchronous (these servers wait for the network to be initialized during computer startup). + +If the server is configured as follows, this policy setting takes effect during Group Policy processing at user logon: + +- The server is configured as a terminal server (that is, the Terminal Server role service is installed and configured on the server); and +- The “Allow asynchronous user Group Policy processing when logging on through Terminal Services” policy setting is enabled. This policy setting is located under Computer Configuration\Policies\Administrative templates\System\Group Policy\\. + +If this configuration is not implemented on the server, this policy setting is ignored. In this case, Group Policy processing at user logon is synchronous (these servers wait for the network to be initialized during user logon). + +If you disable or do not configure this policy setting and users log on to a client computer or a server running Windows Server 2008 or later and that is configured as described earlier, the computer typically does not wait for the network to be fully initialized. In this case, users are logged on with cached credentials. Group Policy is applied asynchronously in the background. + +> [!NOTE] + +> - If you want to guarantee the application of Folder Redirection, Software Installation, or roaming user profile settings in just one logon, enable this policy setting to ensure that Windows waits for the network to be available before applying policy. +> - If Folder Redirection policy will apply during the next logon, security policies will be applied asynchronously during the next update cycle, if network connectivity is available. + + +> [!TIP] +> This is an ADMX-backed policy and requires a special SyncML format to enable or disable. For details, see [Understanding ADMX-backed policies](./understanding-admx-backed-policies.md). +> +> You must specify the data type in the SyncML as <Format>chr</Format>. For an example SyncML, refer to [Enabling a policy](./understanding-admx-backed-policies.md#enabling-a-policy). +> +> The payload of the SyncML must be XML-encoded; for this XML encoding, there are a variety of online encoders that you can use. To avoid encoding the payload, you can use CDATA if your MDM supports it. For more information, see [CDATA Sections](http://www.w3.org/TR/REC-xml/#sec-cdata-sect). + + +ADMX Info: +- GP English name: *Always wait for the network at computer startup and logon* +- GP name: *SyncForegroundPolicy* +- GP path: *System\Logon* +- GP ADMX file name: *Logon.admx* + + + +
    + + +**ADMX_Logon/UseOEMBackground** + + + + + + + + + + + + + + + + + + + + + + + + + + + +
    Windows EditionSupported?
    Homecross mark
    Procross mark
    Businesscross mark
    Enterprisecheck mark
    Educationcross mark
    + + +
    + + +[Scope](./policy-configuration-service-provider.md#policy-scope): + +> [!div class = "checklist"] +> * Device + +
    + + + +Available in the latest Windows 10 Insider Preview Build. This policy setting ignores Windows Logon Background. + +This policy setting may be used to make Windows give preference to a custom logon background. If you enable this policy setting, the logon screen always attempts to load a custom background instead of the Windows-branded logon background. + +If you disable or do not configure this policy setting, Windows uses the default Windows logon background or custom background. + + +> [!TIP] +> This is an ADMX-backed policy and requires a special SyncML format to enable or disable. For details, see [Understanding ADMX-backed policies](./understanding-admx-backed-policies.md). +> +> You must specify the data type in the SyncML as <Format>chr</Format>. For an example SyncML, refer to [Enabling a policy](./understanding-admx-backed-policies.md#enabling-a-policy). +> +> The payload of the SyncML must be XML-encoded; for this XML encoding, there are a variety of online encoders that you can use. To avoid encoding the payload, you can use CDATA if your MDM supports it. For more information, see [CDATA Sections](http://www.w3.org/TR/REC-xml/#sec-cdata-sect). + + +ADMX Info: +- GP English name: *Always use custom logon background* +- GP name: *UseOEMBackground* +- GP path: *System\Logon* +- GP ADMX file name: *Logon.admx* + + + +
    + + +**ADMX_Logon/VerboseStatus** + + + + + + + + + + + + + + + + + + + + + + + + + + + +
    Windows EditionSupported?
    Homecross mark
    Procross mark
    Businesscross mark
    Enterprisecheck mark
    Educationcross mark
    + + +
    + + +[Scope](./policy-configuration-service-provider.md#policy-scope): + +> [!div class = "checklist"] +> * Device + +
    + + + +Available in the latest Windows 10 Insider Preview Build. This policy setting directs the system to display highly detailed status messages. + +This policy setting is designed for advanced users who require this information. + +If you enable this policy setting, the system displays status messages that reflect each step in the process of starting, shutting down, logging on, or logging off the system. + +If you disable or do not configure this policy setting, only the default status messages are displayed to the user during these processes. + +> [!NOTE] +> This policy setting is ignored if the "Remove Boot/Shutdown/Logon/Logoff status messages" policy setting is enabled. + + +> [!TIP] +> This is an ADMX-backed policy and requires a special SyncML format to enable or disable. For details, see [Understanding ADMX-backed policies](./understanding-admx-backed-policies.md). +> +> You must specify the data type in the SyncML as <Format>chr</Format>. For an example SyncML, refer to [Enabling a policy](./understanding-admx-backed-policies.md#enabling-a-policy). +> +> The payload of the SyncML must be XML-encoded; for this XML encoding, there are a variety of online encoders that you can use. To avoid encoding the payload, you can use CDATA if your MDM supports it. For more information, see [CDATA Sections](http://www.w3.org/TR/REC-xml/#sec-cdata-sect). + + +ADMX Info: +- GP English name: *Display highly detailed status messages* +- GP name: *VerboseStatus* +- GP path: *System* +- GP ADMX file name: *Logon.admx* + + + +
    + +Footnotes: + +- 1 - Available in Windows 10, version 1607. +- 2 - Available in Windows 10, version 1703. +- 3 - Available in Windows 10, version 1709. +- 4 - Available in Windows 10, version 1803. +- 5 - Available in Windows 10, version 1809. +- 6 - Available in Windows 10, version 1903. +- 7 - Available in Windows 10, version 1909. +- 8 - Available in Windows 10, version 2004. + + + From 47ecf68cb0b00324b1c127a1b26e2dac416402c4 Mon Sep 17 00:00:00 2001 From: Daniel Simpson Date: Mon, 21 Dec 2020 17:16:38 -0800 Subject: [PATCH 190/486] removing solorigate link --- windows/security/includes/microsoft-defender.md | 3 --- 1 file changed, 3 deletions(-) diff --git a/windows/security/includes/microsoft-defender.md b/windows/security/includes/microsoft-defender.md index 27394df0ea..ff59512a8b 100644 --- a/windows/security/includes/microsoft-defender.md +++ b/windows/security/includes/microsoft-defender.md @@ -9,6 +9,3 @@ author: dansimp ms.prod: w10 ms.topic: include --- - -> [!IMPORTANT] -> [Learn how Microsoft is helping to protect customers from Solorigate, a recent sophisticated attack](https://aka.ms/solorigate). From 8be9a1655b0e52cf785c848385aebbee65612faf Mon Sep 17 00:00:00 2001 From: ImranHabib <47118050+joinimran@users.noreply.github.com> Date: Tue, 22 Dec 2020 20:38:34 +0500 Subject: [PATCH 191/486] Update in PreReq We need to install both with ADK and Windows PE-Addon for copype.cmd to work. Updated the prereq portion. Problem:https://github.com/MicrosoftDocs/windows-itpro-docs/issues/8752 --- windows/deployment/configure-a-pxe-server-to-load-windows-pe.md | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/windows/deployment/configure-a-pxe-server-to-load-windows-pe.md b/windows/deployment/configure-a-pxe-server-to-load-windows-pe.md index fcbd35b410..a435fc417c 100644 --- a/windows/deployment/configure-a-pxe-server-to-load-windows-pe.md +++ b/windows/deployment/configure-a-pxe-server-to-load-windows-pe.md @@ -26,7 +26,7 @@ This walkthrough describes how to configure a PXE server to load Windows PE by ## Prerequisites -- A deployment computer: A computer with the [Windows Assessment and Deployment Kit](https://go.microsoft.com/fwlink/p/?LinkId=526803) (Windows ADK) installed. +- A deployment computer: A computer with the [Windows Assessment and Deployment Kit](https://go.microsoft.com/fwlink/p/?LinkId=526803) (Windows ADK) and Windows PE add-on with ADK installed. - A DHCP server: A DHCP server or DHCP proxy configured to respond to PXE client requests is required. - A PXE server: A server running the TFTP service that can host Windows PE boot files that the client will download. - A file server: A server hosting a network file share. From ea4b0bb33b60911dfec584c2bb7c20bff2b99468 Mon Sep 17 00:00:00 2001 From: Daniel Simpson Date: Tue, 22 Dec 2020 12:48:03 -0800 Subject: [PATCH 192/486] Update windows/deployment/configure-a-pxe-server-to-load-windows-pe.md Co-authored-by: Trond B. Krokli <38162891+illfated@users.noreply.github.com> --- windows/deployment/configure-a-pxe-server-to-load-windows-pe.md | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/windows/deployment/configure-a-pxe-server-to-load-windows-pe.md b/windows/deployment/configure-a-pxe-server-to-load-windows-pe.md index a435fc417c..29ef793b14 100644 --- a/windows/deployment/configure-a-pxe-server-to-load-windows-pe.md +++ b/windows/deployment/configure-a-pxe-server-to-load-windows-pe.md @@ -26,7 +26,7 @@ This walkthrough describes how to configure a PXE server to load Windows PE by ## Prerequisites -- A deployment computer: A computer with the [Windows Assessment and Deployment Kit](https://go.microsoft.com/fwlink/p/?LinkId=526803) (Windows ADK) and Windows PE add-on with ADK installed. +- A deployment computer: A computer with the [Windows Assessment and Deployment Kit](https://go.microsoft.com/fwlink/p/?LinkId=526803) (Windows ADK) and the Windows PE add-on with ADK installed. - A DHCP server: A DHCP server or DHCP proxy configured to respond to PXE client requests is required. - A PXE server: A server running the TFTP service that can host Windows PE boot files that the client will download. - A file server: A server hosting a network file share. From ca50f0fd354dccb14a443651258518eb24c93d5e Mon Sep 17 00:00:00 2001 From: Daniel Simpson Date: Tue, 22 Dec 2020 13:37:45 -0800 Subject: [PATCH 193/486] Update required-windows-diagnostic-data-events-and-fields-2004.md removing version --- ...-diagnostic-data-events-and-fields-2004.md | 34 ------------------- 1 file changed, 34 deletions(-) diff --git a/windows/privacy/required-windows-diagnostic-data-events-and-fields-2004.md b/windows/privacy/required-windows-diagnostic-data-events-and-fields-2004.md index b1c3b25c91..407d8166d6 100644 --- a/windows/privacy/required-windows-diagnostic-data-events-and-fields-2004.md +++ b/windows/privacy/required-windows-diagnostic-data-events-and-fields-2004.md @@ -61,8 +61,6 @@ The following fields are available: - **DatasourceApplicationFile_19H1Setup** The count of the number of this particular object type present on this device. - **DatasourceApplicationFile_20H1** The count of the number of this particular object type present on this device. - **DatasourceApplicationFile_20H1Setup** The count of the number of this particular object type present on this device. -- **DatasourceApplicationFile_21H1** The count of the number of this particular object type present on this device. -- **DatasourceApplicationFile_21H1Setup** The count of the number of this particular object type present on this device. - **DatasourceApplicationFile_RS1** An ID for the system, calculated by hashing hardware identifiers. - **DatasourceApplicationFile_RS2** An ID for the system, calculated by hashing hardware identifiers. - **DatasourceApplicationFile_RS3** The count of the number of this particular object type present on this device. @@ -74,8 +72,6 @@ The following fields are available: - **DatasourceDevicePnp_19H1Setup** The count of the number of this particular object type present on this device. - **DatasourceDevicePnp_20H1** The count of the number of this particular object type present on this device. - **DatasourceDevicePnp_20H1Setup** The count of the number of this particular object type present on this device. -- **DatasourceDevicePnp_21H1** The count of the number of this particular object type present on this device. -- **DatasourceDevicePnp_21H1Setup** The count of the number of this particular object type present on this device. - **DatasourceDevicePnp_RS1** The total DataSourceDevicePnp objects targeting Windows 10 version 1607 on this device. - **DatasourceDevicePnp_RS2** The count of the number of this particular object type present on this device. - **DatasourceDevicePnp_RS3** The count of the number of this particular object type present on this device. @@ -89,8 +85,6 @@ The following fields are available: - **DatasourceDriverPackage_19H1Setup** The count of the number of this particular object type present on this device. - **DatasourceDriverPackage_20H1** The count of the number of this particular object type present on this device. - **DatasourceDriverPackage_20H1Setup** The count of the number of this particular object type present on this device. -- **DatasourceDriverPackage_21H1** The count of the number of this particular object type present on this device. -- **DatasourceDriverPackage_21H1Setup** The count of the number of this particular object type present on this device. - **DatasourceDriverPackage_RS1** The total DataSourceDriverPackage objects targeting Windows 10 version 1607 on this device. - **DatasourceDriverPackage_RS2** The total DataSourceDriverPackage objects targeting Windows 10, version 1703 on this device. - **DatasourceDriverPackage_RS3** The count of the number of this particular object type present on this device. @@ -104,8 +98,6 @@ The following fields are available: - **DataSourceMatchingInfoBlock_19H1Setup** The count of the number of this particular object type present on this device. - **DataSourceMatchingInfoBlock_20H1** The count of the number of this particular object type present on this device. - **DataSourceMatchingInfoBlock_20H1Setup** The count of the number of this particular object type present on this device. -- **DataSourceMatchingInfoBlock_21H1** The count of the number of this particular object type present on this device. -- **DataSourceMatchingInfoBlock_21H1Setup** The count of the number of this particular object type present on this device. - **DataSourceMatchingInfoBlock_RS1** The total DataSourceMatchingInfoBlock objects targeting Windows 10 version 1607 on this device. - **DataSourceMatchingInfoBlock_RS2** The count of the number of this particular object type present on this device. - **DataSourceMatchingInfoBlock_RS3** The count of the number of this particular object type present on this device. @@ -117,8 +109,6 @@ The following fields are available: - **DataSourceMatchingInfoPassive_19H1Setup** The count of the number of this particular object type present on this device. - **DataSourceMatchingInfoPassive_20H1** The count of the number of this particular object type present on this device. - **DataSourceMatchingInfoPassive_20H1Setup** The count of the number of this particular object type present on this device. -- **DataSourceMatchingInfoPassive_21H1** The count of the number of this particular object type present on this device. -- **DataSourceMatchingInfoPassive_21H1Setup** The count of the number of this particular object type present on this device. - **DataSourceMatchingInfoPassive_RS1** The total DataSourceMatchingInfoPassive objects targeting Windows 10 version 1607 on this device. - **DataSourceMatchingInfoPassive_RS2** The count of the number of this particular object type present on this device. - **DataSourceMatchingInfoPassive_RS3** The count of the number of this particular object type present on this device. @@ -130,8 +120,6 @@ The following fields are available: - **DataSourceMatchingInfoPostUpgrade_19H1Setup** The count of the number of this particular object type present on this device. - **DataSourceMatchingInfoPostUpgrade_20H1** The count of the number of this particular object type present on this device. - **DataSourceMatchingInfoPostUpgrade_20H1Setup** The count of the number of this particular object type present on this device. -- **DataSourceMatchingInfoPostUpgrade_21H1** The count of the number of this particular object type present on this device. -- **DataSourceMatchingInfoPostUpgrade_21H1Setup** The count of the number of this particular object type present on this device. - **DataSourceMatchingInfoPostUpgrade_RS1** The total DataSourceMatchingInfoPostUpgrade objects targeting Windows 10 version 1607 on this device. - **DataSourceMatchingInfoPostUpgrade_RS2** The total DataSourceMatchingInfoPostUpgrade objects targeting Windows 10 version 1703 on this device. - **DataSourceMatchingInfoPostUpgrade_RS3** The total DataSourceMatchingInfoPostUpgrade objects targeting Windows 10 version 1709 on this device. @@ -143,8 +131,6 @@ The following fields are available: - **DatasourceSystemBios_19H1Setup** The count of the number of this particular object type present on this device. - **DatasourceSystemBios_20H1** The count of the number of this particular object type present on this device. - **DatasourceSystemBios_20H1Setup** The count of the number of this particular object type present on this device. -- **DatasourceSystemBios_21H1** The count of the number of this particular object type present on this device. -- **DatasourceSystemBios_21H1Setup** The count of the number of this particular object type present on this device. - **DatasourceSystemBios_RS1** The total DatasourceSystemBios objects targeting Windows 10 version 1607 present on this device. - **DatasourceSystemBios_RS2** The total DatasourceSystemBios objects targeting Windows 10 version 1703 present on this device. - **DatasourceSystemBios_RS3** The total DatasourceSystemBios objects targeting Windows 10 version 1709 present on this device. @@ -158,8 +144,6 @@ The following fields are available: - **DecisionApplicationFile_19H1Setup** The count of the number of this particular object type present on this device. - **DecisionApplicationFile_20H1** The count of the number of this particular object type present on this device. - **DecisionApplicationFile_20H1Setup** The count of the number of this particular object type present on this device. -- **DecisionApplicationFile_21H1** The count of the number of this particular object type present on this device. -- **DecisionApplicationFile_21H1Setup** The count of the number of this particular object type present on this device. - **DecisionApplicationFile_RS1** The count of the number of this particular object type present on this device. - **DecisionApplicationFile_RS2** The count of the number of this particular object type present on this device. - **DecisionApplicationFile_RS3** The count of the number of this particular object type present on this device. @@ -171,8 +155,6 @@ The following fields are available: - **DecisionDevicePnp_19H1Setup** The count of the number of this particular object type present on this device. - **DecisionDevicePnp_20H1** The count of the number of this particular object type present on this device. - **DecisionDevicePnp_20H1Setup** The count of the number of this particular object type present on this device. -- **DecisionDevicePnp_21H1** The count of the number of this particular object type present on this device. -- **DecisionDevicePnp_21H1Setup** The count of the number of this particular object type present on this device. - **DecisionDevicePnp_RS1** The total DecisionDevicePnp objects targeting Windows 10 version 1607 on this device. - **DecisionDevicePnp_RS2** The count of the number of this particular object type present on this device. - **DecisionDevicePnp_RS3** The count of the number of this particular object type present on this device. @@ -186,8 +168,6 @@ The following fields are available: - **DecisionDriverPackage_19H1Setup** The count of the number of this particular object type present on this device. - **DecisionDriverPackage_20H1** The count of the number of this particular object type present on this device. - **DecisionDriverPackage_20H1Setup** The count of the number of this particular object type present on this device. -- **DecisionDriverPackage_21H1** The count of the number of this particular object type present on this device. -- **DecisionDriverPackage_21H1Setup** The count of the number of this particular object type present on this device. - **DecisionDriverPackage_RS1** The total DecisionDriverPackage objects targeting Windows 10 version 1607 on this device. - **DecisionDriverPackage_RS2** The count of the number of this particular object type present on this device. - **DecisionDriverPackage_RS3** The count of the number of this particular object type present on this device. @@ -201,8 +181,6 @@ The following fields are available: - **DecisionMatchingInfoBlock_19H1Setup** The count of the number of this particular object type present on this device. - **DecisionMatchingInfoBlock_20H1** The count of the number of this particular object type present on this device. - **DecisionMatchingInfoBlock_20H1Setup** The count of the number of this particular object type present on this device. -- **DecisionMatchingInfoBlock_21H1** The count of the number of this particular object type present on this device. -- **DecisionMatchingInfoBlock_21H1Setup** The count of the number of this particular object type present on this device. - **DecisionMatchingInfoBlock_RS1** The total DecisionMatchingInfoBlock objects targeting Windows 10 version 1607 present on this device. - **DecisionMatchingInfoBlock_RS2** The total DecisionMatchingInfoBlock objects targeting Windows 10 version 1703 present on this device. - **DecisionMatchingInfoBlock_RS3** The total DecisionMatchingInfoBlock objects targeting Windows 10 version 1709 present on this device. @@ -214,8 +192,6 @@ The following fields are available: - **DecisionMatchingInfoPassive_19H1Setup** The count of the number of this particular object type present on this device. - **DecisionMatchingInfoPassive_20H1** The count of the number of this particular object type present on this device. - **DecisionMatchingInfoPassive_20H1Setup** The count of the number of this particular object type present on this device. -- **DecisionMatchingInfoPassive_21H1** The count of the number of this particular object type present on this device. -- **DecisionMatchingInfoPassive_21H1Setup** The count of the number of this particular object type present on this device. - **DecisionMatchingInfoPassive_RS1** The total DecisionMatchingInfoPassive objects targeting Windows 10 version 1607 on this device. - **DecisionMatchingInfoPassive_RS2** The total DecisionMatchingInfoPassive objects targeting Windows 10 version 1703 on this device. - **DecisionMatchingInfoPassive_RS3** The total DecisionMatchingInfoPassive objects targeting Windows 10 version 1803 on this device. @@ -227,8 +203,6 @@ The following fields are available: - **DecisionMatchingInfoPostUpgrade_19H1Setup** The count of the number of this particular object type present on this device. - **DecisionMatchingInfoPostUpgrade_20H1** The count of the number of this particular object type present on this device. - **DecisionMatchingInfoPostUpgrade_20H1Setup** The count of the number of this particular object type present on this device. -- **DecisionMatchingInfoPostUpgrade_21H1** The count of the number of this particular object type present on this device. -- **DecisionMatchingInfoPostUpgrade_21H1Setup** The count of the number of this particular object type present on this device. - **DecisionMatchingInfoPostUpgrade_RS1** The total DecisionMatchingInfoPostUpgrade objects targeting Windows 10 version 1607 on this device. - **DecisionMatchingInfoPostUpgrade_RS2** The total DecisionMatchingInfoPostUpgrade objects targeting Windows 10 version 1703 on this device. - **DecisionMatchingInfoPostUpgrade_RS3** The total DecisionMatchingInfoPostUpgrade objects targeting Windows 10 version 1709 on this device. @@ -240,8 +214,6 @@ The following fields are available: - **DecisionMediaCenter_19H1Setup** The total DecisionMediaCenter objects targeting the next release of Windows on this device. - **DecisionMediaCenter_20H1** The count of the number of this particular object type present on this device. - **DecisionMediaCenter_20H1Setup** The count of the number of this particular object type present on this device. -- **DecisionMediaCenter_21H1** The count of the number of this particular object type present on this device. -- **DecisionMediaCenter_21H1Setup** The count of the number of this particular object type present on this device. - **DecisionMediaCenter_RS1** The total DecisionMediaCenter objects targeting Windows 10 version 1607 present on this device. - **DecisionMediaCenter_RS2** The total DecisionMediaCenter objects targeting Windows 10 version 1703 present on this device. - **DecisionMediaCenter_RS3** The total DecisionMediaCenter objects targeting Windows 10 version 1709 present on this device. @@ -253,8 +225,6 @@ The following fields are available: - **DecisionSystemBios_19H1Setup** The total DecisionSystemBios objects targeting the next release of Windows on this device. - **DecisionSystemBios_20H1** The count of the number of this particular object type present on this device. - **DecisionSystemBios_20H1Setup** The count of the number of this particular object type present on this device. -- **DecisionSystemBios_21H1** The count of the number of this particular object type present on this device. -- **DecisionSystemBios_21H1Setup** The count of the number of this particular object type present on this device. - **DecisionSystemBios_RS1** The total DecisionSystemBios objects targeting Windows 10 version 1607 on this device. - **DecisionSystemBios_RS2** The total DecisionSystemBios objects targeting Windows 10 version 1703 on this device. - **DecisionSystemBios_RS3** The total DecisionSystemBios objects targeting Windows 10 version 1709 on this device. @@ -265,8 +235,6 @@ The following fields are available: - **DecisionSystemBios_TH1** The count of the number of this particular object type present on this device. - **DecisionSystemBios_TH2** The count of the number of this particular object type present on this device. - **DecisionTest_20H1Setup** The count of the number of this particular object type present on this device. -- **DecisionTest_21H1** The count of the number of this particular object type present on this device. -- **DecisionTest_21H1Setup** The count of the number of this particular object type present on this device. - **InventoryApplicationFile** The count of the number of this particular object type present on this device. - **InventoryLanguagePack** The count of the number of this particular object type present on this device. - **InventoryMediaCenter** The count of the number of this particular object type present on this device. @@ -288,8 +256,6 @@ The following fields are available: - **Wmdrm_19H1Setup** The total Wmdrm objects targeting the next release of Windows on this device. - **Wmdrm_20H1** The count of the number of this particular object type present on this device. - **Wmdrm_20H1Setup** The total Wmdrm objects targeting the next release of Windows on this device. -- **Wmdrm_21H1** The count of the number of this particular object type present on this device. -- **Wmdrm_21H1Setup** The count of the number of this particular object type present on this device. - **Wmdrm_RS1** An ID for the system, calculated by hashing hardware identifiers. - **Wmdrm_RS2** An ID for the system, calculated by hashing hardware identifiers. - **Wmdrm_RS3** An ID for the system, calculated by hashing hardware identifiers. From 6a03d26332b6700fba54475a2dc29fc819d31c7d Mon Sep 17 00:00:00 2001 From: Daniel Simpson Date: Tue, 22 Dec 2020 13:46:33 -0800 Subject: [PATCH 194/486] remove version --- ...ndows-diagnostic-events-and-fields-1809.md | 17 ---------- ...ndows-diagnostic-events-and-fields-1903.md | 34 ------------------- ...-diagnostic-data-events-and-fields-2004.md | 2 -- 3 files changed, 53 deletions(-) diff --git a/windows/privacy/basic-level-windows-diagnostic-events-and-fields-1809.md b/windows/privacy/basic-level-windows-diagnostic-events-and-fields-1809.md index 12bf3f543c..40840c2ae8 100644 --- a/windows/privacy/basic-level-windows-diagnostic-events-and-fields-1809.md +++ b/windows/privacy/basic-level-windows-diagnostic-events-and-fields-1809.md @@ -312,7 +312,6 @@ The following fields are available: - **DatasourceApplicationFile_19H1Setup** The count of the number of this particular object type present on this device. - **DatasourceApplicationFile_20H1** The count of the number of this particular object type present on this device. - **DatasourceApplicationFile_20H1Setup** The count of the number of this particular object type present on this device. -- **DatasourceApplicationFile_21H1Setup** The count of the number of this particular object type present on this device. - **DatasourceApplicationFile_RS1** An ID for the system, calculated by hashing hardware identifiers. - **DatasourceApplicationFile_RS2** An ID for the system, calculated by hashing hardware identifiers. - **DatasourceApplicationFile_RS3** The count of the number of this particular object type present on this device. @@ -328,7 +327,6 @@ The following fields are available: - **DatasourceDevicePnp_19H1Setup** The count of the number of this particular object type present on this device. - **DatasourceDevicePnp_20H1** The count of the number of this particular object type present on this device. - **DatasourceDevicePnp_20H1Setup** The count of the number of this particular object type present on this device. -- **DatasourceDevicePnp_21H1Setup** The count of the number of this particular object type present on this device. - **DatasourceDevicePnp_RS1** The total DataSourceDevicePnp objects targeting Windows 10 version 1607 on this device. - **DatasourceDevicePnp_RS2** The count of the number of this particular object type present on this device. - **DatasourceDevicePnp_RS3** The count of the number of this particular object type present on this device. @@ -344,7 +342,6 @@ The following fields are available: - **DatasourceDriverPackage_19H1Setup** The count of the number of this particular object type present on this device. - **DatasourceDriverPackage_20H1** The count of the number of this particular object type present on this device. - **DatasourceDriverPackage_20H1Setup** The count of the number of this particular object type present on this device. -- **DatasourceDriverPackage_21H1Setup** The count of the number of this particular object type present on this device. - **DatasourceDriverPackage_RS1** The total DataSourceDriverPackage objects targeting Windows 10 version 1607 on this device. - **DatasourceDriverPackage_RS2** The total DataSourceDriverPackage objects targeting Windows 10, version 1703 on this device. - **DatasourceDriverPackage_RS3** The count of the number of this particular object type present on this device. @@ -360,7 +357,6 @@ The following fields are available: - **DataSourceMatchingInfoBlock_19H1Setup** The count of the number of this particular object type present on this device. - **DataSourceMatchingInfoBlock_20H1** The count of the number of this particular object type present on this device. - **DataSourceMatchingInfoBlock_20H1Setup** The count of the number of this particular object type present on this device. -- **DataSourceMatchingInfoBlock_21H1Setup** The count of the number of this particular object type present on this device. - **DataSourceMatchingInfoBlock_RS1** The total DataSourceMatchingInfoBlock objects targeting Windows 10 version 1607 on this device. - **DataSourceMatchingInfoBlock_RS2** The count of the number of this particular object type present on this device. - **DataSourceMatchingInfoBlock_RS3** The count of the number of this particular object type present on this device. @@ -376,7 +372,6 @@ The following fields are available: - **DataSourceMatchingInfoPassive_19H1Setup** The count of the number of this particular object type present on this device. - **DataSourceMatchingInfoPassive_20H1** The count of the number of this particular object type present on this device. - **DataSourceMatchingInfoPassive_20H1Setup** The count of the number of this particular object type present on this device. -- **DataSourceMatchingInfoPassive_21H1Setup** The count of the number of this particular object type present on this device. - **DataSourceMatchingInfoPassive_RS1** The total DataSourceMatchingInfoPassive objects targeting Windows 10 version 1607 on this device. - **DataSourceMatchingInfoPassive_RS2** The count of the number of this particular object type present on this device. - **DataSourceMatchingInfoPassive_RS3** The count of the number of this particular object type present on this device. @@ -392,7 +387,6 @@ The following fields are available: - **DataSourceMatchingInfoPostUpgrade_19H1Setup** The count of the number of this particular object type present on this device. - **DataSourceMatchingInfoPostUpgrade_20H1** The count of the number of this particular object type present on this device. - **DataSourceMatchingInfoPostUpgrade_20H1Setup** The count of the number of this particular object type present on this device. -- **DataSourceMatchingInfoPostUpgrade_21H1Setup** The count of the number of this particular object type present on this device. - **DataSourceMatchingInfoPostUpgrade_RS1** The total DataSourceMatchingInfoPostUpgrade objects targeting Windows 10 version 1607 on this device. - **DataSourceMatchingInfoPostUpgrade_RS2** The total DataSourceMatchingInfoPostUpgrade objects targeting Windows 10 version 1703 on this device. - **DataSourceMatchingInfoPostUpgrade_RS3** The total DataSourceMatchingInfoPostUpgrade objects targeting Windows 10 version 1709 on this device. @@ -408,7 +402,6 @@ The following fields are available: - **DatasourceSystemBios_19H1Setup** The count of the number of this particular object type present on this device. - **DatasourceSystemBios_20H1** The count of the number of this particular object type present on this device. - **DatasourceSystemBios_20H1Setup** The count of the number of this particular object type present on this device. -- **DatasourceSystemBios_21H1Setup** The count of the number of this particular object type present on this device. - **DatasourceSystemBios_RS1** The total DatasourceSystemBios objects targeting Windows 10 version 1607 present on this device. - **DatasourceSystemBios_RS2** The total DatasourceSystemBios objects targeting Windows 10 version 1703 present on this device. - **DatasourceSystemBios_RS3** The total DatasourceSystemBios objects targeting Windows 10 version 1709 present on this device. @@ -424,7 +417,6 @@ The following fields are available: - **DecisionApplicationFile_19H1Setup** The count of the number of this particular object type present on this device. - **DecisionApplicationFile_20H1** The count of the number of this particular object type present on this device. - **DecisionApplicationFile_20H1Setup** The count of the number of this particular object type present on this device. -- **DecisionApplicationFile_21H1Setup** The count of the number of this particular object type present on this device. - **DecisionApplicationFile_RS1** The count of the number of this particular object type present on this device. - **DecisionApplicationFile_RS2** The count of the number of this particular object type present on this device. - **DecisionApplicationFile_RS3** The count of the number of this particular object type present on this device. @@ -440,7 +432,6 @@ The following fields are available: - **DecisionDevicePnp_19H1Setup** The count of the number of this particular object type present on this device. - **DecisionDevicePnp_20H1** The count of the number of this particular object type present on this device. - **DecisionDevicePnp_20H1Setup** The count of the number of this particular object type present on this device. -- **DecisionDevicePnp_21H1Setup** The count of the number of this particular object type present on this device. - **DecisionDevicePnp_RS1** The total DecisionDevicePnp objects targeting Windows 10 version 1607 on this device. - **DecisionDevicePnp_RS2** The count of the number of this particular object type present on this device. - **DecisionDevicePnp_RS3** The count of the number of this particular object type present on this device. @@ -456,7 +447,6 @@ The following fields are available: - **DecisionDriverPackage_19H1Setup** The count of the number of this particular object type present on this device. - **DecisionDriverPackage_20H1** The count of the number of this particular object type present on this device. - **DecisionDriverPackage_20H1Setup** The count of the number of this particular object type present on this device. -- **DecisionDriverPackage_21H1Setup** The count of the number of this particular object type present on this device. - **DecisionDriverPackage_RS1** The total DecisionDriverPackage objects targeting Windows 10 version 1607 on this device. - **DecisionDriverPackage_RS2** The count of the number of this particular object type present on this device. - **DecisionDriverPackage_RS3** The count of the number of this particular object type present on this device. @@ -472,7 +462,6 @@ The following fields are available: - **DecisionMatchingInfoBlock_19H1Setup** The count of the number of this particular object type present on this device. - **DecisionMatchingInfoBlock_20H1** The count of the number of this particular object type present on this device. - **DecisionMatchingInfoBlock_20H1Setup** The count of the number of this particular object type present on this device. -- **DecisionMatchingInfoBlock_21H1Setup** The count of the number of this particular object type present on this device. - **DecisionMatchingInfoBlock_RS1** The total DecisionMatchingInfoBlock objects targeting Windows 10 version 1607 present on this device. - **DecisionMatchingInfoBlock_RS2** The total DecisionMatchingInfoBlock objects targeting Windows 10 version 1703 present on this device. - **DecisionMatchingInfoBlock_RS3** The total DecisionMatchingInfoBlock objects targeting Windows 10 version 1709 present on this device. @@ -488,7 +477,6 @@ The following fields are available: - **DecisionMatchingInfoPassive_19H1Setup** The count of the number of this particular object type present on this device. - **DecisionMatchingInfoPassive_20H1** The count of the number of this particular object type present on this device. - **DecisionMatchingInfoPassive_20H1Setup** The count of the number of this particular object type present on this device. -- **DecisionMatchingInfoPassive_21H1Setup** The count of the number of this particular object type present on this device. - **DecisionMatchingInfoPassive_RS1** The total DecisionMatchingInfoPassive objects targeting Windows 10 version 1607 on this device. - **DecisionMatchingInfoPassive_RS2** The total DecisionMatchingInfoPassive objects targeting Windows 10 version 1703 on this device. - **DecisionMatchingInfoPassive_RS3** The total DecisionMatchingInfoPassive objects targeting Windows 10 version 1803 on this device. @@ -504,7 +492,6 @@ The following fields are available: - **DecisionMatchingInfoPostUpgrade_19H1Setup** The count of the number of this particular object type present on this device. - **DecisionMatchingInfoPostUpgrade_20H1** The count of the number of this particular object type present on this device. - **DecisionMatchingInfoPostUpgrade_20H1Setup** The count of the number of this particular object type present on this device. -- **DecisionMatchingInfoPostUpgrade_21H1Setup** The count of the number of this particular object type present on this device. - **DecisionMatchingInfoPostUpgrade_RS1** The total DecisionMatchingInfoPostUpgrade objects targeting Windows 10 version 1607 on this device. - **DecisionMatchingInfoPostUpgrade_RS2** The total DecisionMatchingInfoPostUpgrade objects targeting Windows 10 version 1703 on this device. - **DecisionMatchingInfoPostUpgrade_RS3** The total DecisionMatchingInfoPostUpgrade objects targeting Windows 10 version 1709 on this device. @@ -520,7 +507,6 @@ The following fields are available: - **DecisionMediaCenter_19H1Setup** The total DecisionMediaCenter objects targeting the next release of Windows on this device. - **DecisionMediaCenter_20H1** The count of the number of this particular object type present on this device. - **DecisionMediaCenter_20H1Setup** The count of the number of this particular object type present on this device. -- **DecisionMediaCenter_21H1Setup** The count of the number of this particular object type present on this device. - **DecisionMediaCenter_RS1** The total DecisionMediaCenter objects targeting Windows 10 version 1607 present on this device. - **DecisionMediaCenter_RS2** The total DecisionMediaCenter objects targeting Windows 10 version 1703 present on this device. - **DecisionMediaCenter_RS3** The total DecisionMediaCenter objects targeting Windows 10 version 1709 present on this device. @@ -536,7 +522,6 @@ The following fields are available: - **DecisionSystemBios_19H1Setup** The total DecisionSystemBios objects targeting the next release of Windows on this device. - **DecisionSystemBios_20H1** The count of the number of this particular object type present on this device. - **DecisionSystemBios_20H1Setup** The count of the number of this particular object type present on this device. -- **DecisionSystemBios_21H1Setup** The count of the number of this particular object type present on this device. - **DecisionSystemBios_RS1** The total DecisionSystemBios objects targeting Windows 10 version 1607 on this device. - **DecisionSystemBios_RS2** The total DecisionSystemBios objects targeting Windows 10 version 1703 on this device. - **DecisionSystemBios_RS3** The total DecisionSystemBios objects targeting Windows 10 version 1709 on this device. @@ -549,7 +534,6 @@ The following fields are available: - **DecisionSystemBios_TH2** The count of the number of this particular object type present on this device. - **DecisionSystemProcessor_RS2** The count of the number of this particular object type present on this device. - **DecisionTest_20H1Setup** The count of the number of this particular object type present on this device. -- **DecisionTest_21H1Setup** The count of the number of this particular object type present on this device. - **DecisionTest_RS1** An ID for the system, calculated by hashing hardware identifiers. - **InventoryApplicationFile** The count of the number of this particular object type present on this device. - **InventoryDeviceContainer** A count of device container objects in cache. @@ -579,7 +563,6 @@ The following fields are available: - **Wmdrm_19H1Setup** The total Wmdrm objects targeting the next release of Windows on this device. - **Wmdrm_20H1** The count of the number of this particular object type present on this device. - **Wmdrm_20H1Setup** The count of the number of this particular object type present on this device. -- **Wmdrm_21H1Setup** The count of the number of this particular object type present on this device. - **Wmdrm_RS1** An ID for the system, calculated by hashing hardware identifiers. - **Wmdrm_RS2** An ID for the system, calculated by hashing hardware identifiers. - **Wmdrm_RS3** An ID for the system, calculated by hashing hardware identifiers. diff --git a/windows/privacy/basic-level-windows-diagnostic-events-and-fields-1903.md b/windows/privacy/basic-level-windows-diagnostic-events-and-fields-1903.md index 1623bf2d24..2add73f830 100644 --- a/windows/privacy/basic-level-windows-diagnostic-events-and-fields-1903.md +++ b/windows/privacy/basic-level-windows-diagnostic-events-and-fields-1903.md @@ -274,8 +274,6 @@ The following fields are available: - **DatasourceApplicationFile_19H1Setup** The count of the number of this particular object type present on this device. - **DatasourceApplicationFile_20H1** The count of the number of this particular object type present on this device. - **DatasourceApplicationFile_20H1Setup** The count of the number of this particular object type present on this device. -- **DatasourceApplicationFile_21H1** The count of the number of this particular object type present on this device. -- **DatasourceApplicationFile_21H1Setup** The count of the number of this particular object type present on this device. - **DatasourceApplicationFile_RS1** An ID for the system, calculated by hashing hardware identifiers. - **DatasourceApplicationFile_RS2** An ID for the system, calculated by hashing hardware identifiers. - **DatasourceApplicationFile_RS3** The count of the number of this particular object type present on this device. @@ -287,8 +285,6 @@ The following fields are available: - **DatasourceDevicePnp_19H1Setup** The count of the number of this particular object type present on this device. - **DatasourceDevicePnp_20H1** The count of the number of this particular object type present on this device. - **DatasourceDevicePnp_20H1Setup** The count of the number of this particular object type present on this device. -- **DatasourceDevicePnp_21H1** The count of the number of this particular object type present on this device. -- **DatasourceDevicePnp_21H1Setup** The count of the number of this particular object type present on this device. - **DatasourceDevicePnp_RS1** The total DataSourceDevicePnp objects targeting Windows 10 version 1607 on this device. - **DatasourceDevicePnp_RS2** The count of the number of this particular object type present on this device. - **DatasourceDevicePnp_RS3** The count of the number of this particular object type present on this device. @@ -303,8 +299,6 @@ The following fields are available: - **DatasourceDriverPackage_19H1Setup** The count of the number of this particular object type present on this device. - **DatasourceDriverPackage_20H1** The count of the number of this particular object type present on this device. - **DatasourceDriverPackage_20H1Setup** The count of the number of this particular object type present on this device. -- **DatasourceDriverPackage_21H1** The count of the number of this particular object type present on this device. -- **DatasourceDriverPackage_21H1Setup** The count of the number of this particular object type present on this device. - **DatasourceDriverPackage_RS1** The total DataSourceDriverPackage objects targeting Windows 10 version 1607 on this device. - **DatasourceDriverPackage_RS2** The total DataSourceDriverPackage objects targeting Windows 10, version 1703 on this device. - **DatasourceDriverPackage_RS3** The count of the number of this particular object type present on this device. @@ -319,8 +313,6 @@ The following fields are available: - **DataSourceMatchingInfoBlock_19H1Setup** The count of the number of this particular object type present on this device. - **DataSourceMatchingInfoBlock_20H1** The count of the number of this particular object type present on this device. - **DataSourceMatchingInfoBlock_20H1Setup** The count of the number of this particular object type present on this device. -- **DataSourceMatchingInfoBlock_21H1** The count of the number of this particular object type present on this device. -- **DataSourceMatchingInfoBlock_21H1Setup** The count of the number of this particular object type present on this device. - **DataSourceMatchingInfoBlock_RS1** The total DataSourceMatchingInfoBlock objects targeting Windows 10 version 1607 on this device. - **DataSourceMatchingInfoBlock_RS2** The count of the number of this particular object type present on this device. - **DataSourceMatchingInfoBlock_RS3** The count of the number of this particular object type present on this device. @@ -332,8 +324,6 @@ The following fields are available: - **DataSourceMatchingInfoPassive_19H1Setup** The count of the number of this particular object type present on this device. - **DataSourceMatchingInfoPassive_20H1** The count of the number of this particular object type present on this device. - **DataSourceMatchingInfoPassive_20H1Setup** The count of the number of this particular object type present on this device. -- **DataSourceMatchingInfoPassive_21H1** The count of the number of this particular object type present on this device. -- **DataSourceMatchingInfoPassive_21H1Setup** The count of the number of this particular object type present on this device. - **DataSourceMatchingInfoPassive_RS1** The total DataSourceMatchingInfoPassive objects targeting Windows 10 version 1607 on this device. - **DataSourceMatchingInfoPassive_RS2** The count of the number of this particular object type present on this device. - **DataSourceMatchingInfoPassive_RS3** The count of the number of this particular object type present on this device. @@ -345,8 +335,6 @@ The following fields are available: - **DataSourceMatchingInfoPostUpgrade_19H1Setup** The count of the number of this particular object type present on this device. - **DataSourceMatchingInfoPostUpgrade_20H1** The count of the number of this particular object type present on this device. - **DataSourceMatchingInfoPostUpgrade_20H1Setup** The count of the number of this particular object type present on this device. -- **DataSourceMatchingInfoPostUpgrade_21H1** The count of the number of this particular object type present on this device. -- **DataSourceMatchingInfoPostUpgrade_21H1Setup** The count of the number of this particular object type present on this device. - **DataSourceMatchingInfoPostUpgrade_RS1** The total DataSourceMatchingInfoPostUpgrade objects targeting Windows 10 version 1607 on this device. - **DataSourceMatchingInfoPostUpgrade_RS2** The total DataSourceMatchingInfoPostUpgrade objects targeting Windows 10 version 1703 on this device. - **DataSourceMatchingInfoPostUpgrade_RS3** The total DataSourceMatchingInfoPostUpgrade objects targeting Windows 10 version 1709 on this device. @@ -359,8 +347,6 @@ The following fields are available: - **DatasourceSystemBios_19H1Setup** The count of the number of this particular object type present on this device. - **DatasourceSystemBios_20H1** The count of the number of this particular object type present on this device. - **DatasourceSystemBios_20H1Setup** The count of the number of this particular object type present on this device. -- **DatasourceSystemBios_21H1** The count of the number of this particular object type present on this device. -- **DatasourceSystemBios_21H1Setup** The count of the number of this particular object type present on this device. - **DatasourceSystemBios_RS1** The total DatasourceSystemBios objects targeting Windows 10 version 1607 present on this device. - **DatasourceSystemBios_RS2** The total DatasourceSystemBios objects targeting Windows 10 version 1703 present on this device. - **DatasourceSystemBios_RS3** The total DatasourceSystemBios objects targeting Windows 10 version 1709 present on this device. @@ -375,8 +361,6 @@ The following fields are available: - **DecisionApplicationFile_19H1Setup** The count of the number of this particular object type present on this device. - **DecisionApplicationFile_20H1** The count of the number of this particular object type present on this device. - **DecisionApplicationFile_20H1Setup** The count of the number of this particular object type present on this device. -- **DecisionApplicationFile_21H1** The count of the number of this particular object type present on this device. -- **DecisionApplicationFile_21H1Setup** The count of the number of this particular object type present on this device. - **DecisionApplicationFile_RS1** The count of the number of this particular object type present on this device. - **DecisionApplicationFile_RS2** The count of the number of this particular object type present on this device. - **DecisionApplicationFile_RS3** The count of the number of this particular object type present on this device. @@ -388,8 +372,6 @@ The following fields are available: - **DecisionDevicePnp_19H1Setup** The count of the number of this particular object type present on this device. - **DecisionDevicePnp_20H1** The count of the number of this particular object type present on this device. - **DecisionDevicePnp_20H1Setup** The count of the number of this particular object type present on this device. -- **DecisionDevicePnp_21H1** The count of the number of this particular object type present on this device. -- **DecisionDevicePnp_21H1Setup** The count of the number of this particular object type present on this device. - **DecisionDevicePnp_RS1** The total DecisionDevicePnp objects targeting Windows 10 version 1607 on this device. - **DecisionDevicePnp_RS2** The count of the number of this particular object type present on this device. - **DecisionDevicePnp_RS3** The count of the number of this particular object type present on this device. @@ -404,8 +386,6 @@ The following fields are available: - **DecisionDriverPackage_19H1Setup** The count of the number of this particular object type present on this device. - **DecisionDriverPackage_20H1** The count of the number of this particular object type present on this device. - **DecisionDriverPackage_20H1Setup** The count of the number of this particular object type present on this device. -- **DecisionDriverPackage_21H1** The count of the number of this particular object type present on this device. -- **DecisionDriverPackage_21H1Setup** The count of the number of this particular object type present on this device. - **DecisionDriverPackage_RS1** The total DecisionDriverPackage objects targeting Windows 10 version 1607 on this device. - **DecisionDriverPackage_RS2** The count of the number of this particular object type present on this device. - **DecisionDriverPackage_RS3** The count of the number of this particular object type present on this device. @@ -420,8 +400,6 @@ The following fields are available: - **DecisionMatchingInfoBlock_19H1Setup** The count of the number of this particular object type present on this device. - **DecisionMatchingInfoBlock_20H1** The count of the number of this particular object type present on this device. - **DecisionMatchingInfoBlock_20H1Setup** The count of the number of this particular object type present on this device. -- **DecisionMatchingInfoBlock_21H1** The count of the number of this particular object type present on this device. -- **DecisionMatchingInfoBlock_21H1Setup** The count of the number of this particular object type present on this device. - **DecisionMatchingInfoBlock_RS1** The total DecisionMatchingInfoBlock objects targeting Windows 10 version 1607 present on this device. - **DecisionMatchingInfoBlock_RS2** The total DecisionMatchingInfoBlock objects targeting Windows 10 version 1703 present on this device. - **DecisionMatchingInfoBlock_RS3** The total DecisionMatchingInfoBlock objects targeting Windows 10 version 1709 present on this device. @@ -433,8 +411,6 @@ The following fields are available: - **DecisionMatchingInfoPassive_19H1Setup** The count of the number of this particular object type present on this device. - **DecisionMatchingInfoPassive_20H1** The count of the number of this particular object type present on this device. - **DecisionMatchingInfoPassive_20H1Setup** The count of the number of this particular object type present on this device. -- **DecisionMatchingInfoPassive_21H1** The count of the number of this particular object type present on this device. -- **DecisionMatchingInfoPassive_21H1Setup** The count of the number of this particular object type present on this device. - **DecisionMatchingInfoPassive_RS1** The total DecisionMatchingInfoPassive objects targeting Windows 10 version 1607 on this device. - **DecisionMatchingInfoPassive_RS2** The total DecisionMatchingInfoPassive objects targeting Windows 10 version 1703 on this device. - **DecisionMatchingInfoPassive_RS3** The total DecisionMatchingInfoPassive objects targeting Windows 10 version 1803 on this device. @@ -446,8 +422,6 @@ The following fields are available: - **DecisionMatchingInfoPostUpgrade_19H1Setup** The count of the number of this particular object type present on this device. - **DecisionMatchingInfoPostUpgrade_20H1** The count of the number of this particular object type present on this device. - **DecisionMatchingInfoPostUpgrade_20H1Setup** The count of the number of this particular object type present on this device. -- **DecisionMatchingInfoPostUpgrade_21H1** The count of the number of this particular object type present on this device. -- **DecisionMatchingInfoPostUpgrade_21H1Setup** The count of the number of this particular object type present on this device. - **DecisionMatchingInfoPostUpgrade_RS1** The total DecisionMatchingInfoPostUpgrade objects targeting Windows 10 version 1607 on this device. - **DecisionMatchingInfoPostUpgrade_RS2** The total DecisionMatchingInfoPostUpgrade objects targeting Windows 10 version 1703 on this device. - **DecisionMatchingInfoPostUpgrade_RS3** The total DecisionMatchingInfoPostUpgrade objects targeting Windows 10 version 1709 on this device. @@ -459,8 +433,6 @@ The following fields are available: - **DecisionMediaCenter_19H1Setup** The total DecisionMediaCenter objects targeting the next release of Windows on this device. - **DecisionMediaCenter_20H1** The count of the number of this particular object type present on this device. - **DecisionMediaCenter_20H1Setup** The count of the number of this particular object type present on this device. -- **DecisionMediaCenter_21H1** The count of the number of this particular object type present on this device. -- **DecisionMediaCenter_21H1Setup** The count of the number of this particular object type present on this device. - **DecisionMediaCenter_RS1** The total DecisionMediaCenter objects targeting Windows 10 version 1607 present on this device. - **DecisionMediaCenter_RS2** The total DecisionMediaCenter objects targeting Windows 10 version 1703 present on this device. - **DecisionMediaCenter_RS3** The total DecisionMediaCenter objects targeting Windows 10 version 1709 present on this device. @@ -473,8 +445,6 @@ The following fields are available: - **DecisionSystemBios_19H1Setup** The total DecisionSystemBios objects targeting the next release of Windows on this device. - **DecisionSystemBios_20H1** The count of the number of this particular object type present on this device. - **DecisionSystemBios_20H1Setup** The count of the number of this particular object type present on this device. -- **DecisionSystemBios_21H1** The count of the number of this particular object type present on this device. -- **DecisionSystemBios_21H1Setup** The count of the number of this particular object type present on this device. - **DecisionSystemBios_RS1** The total DecisionSystemBios objects targeting Windows 10 version 1607 on this device. - **DecisionSystemBios_RS2** The total DecisionSystemBios objects targeting Windows 10 version 1703 on this device. - **DecisionSystemBios_RS3** The total DecisionSystemBios objects targeting Windows 10 version 1709 on this device. @@ -488,8 +458,6 @@ The following fields are available: - **DecisionSystemProcessor_RS2** The count of the number of this particular object type present on this device. - **DecisionTest_20H1** The count of the number of this particular object type present on this device. - **DecisionTest_20H1Setup** The count of the number of this particular object type present on this device. -- **DecisionTest_21H1** The count of the number of this particular object type present on this device. -- **DecisionTest_21H1Setup** The count of the number of this particular object type present on this device. - **DecisionTest_RS1** An ID for the system, calculated by hashing hardware identifiers. - **InventoryApplicationFile** The count of the number of this particular object type present on this device. - **InventoryDeviceContainer** A count of device container objects in cache. @@ -518,8 +486,6 @@ The following fields are available: - **Wmdrm_19H1Setup** The total Wmdrm objects targeting the next release of Windows on this device. - **Wmdrm_20H1** The count of the number of this particular object type present on this device. - **Wmdrm_20H1Setup** The total Wmdrm objects targeting the next release of Windows on this device. -- **Wmdrm_21H1** The count of the number of this particular object type present on this device. -- **Wmdrm_21H1Setup** The count of the number of this particular object type present on this device. - **Wmdrm_RS1** An ID for the system, calculated by hashing hardware identifiers. - **Wmdrm_RS2** An ID for the system, calculated by hashing hardware identifiers. - **Wmdrm_RS3** An ID for the system, calculated by hashing hardware identifiers. diff --git a/windows/privacy/required-windows-diagnostic-data-events-and-fields-2004.md b/windows/privacy/required-windows-diagnostic-data-events-and-fields-2004.md index 407d8166d6..a8786a76b9 100644 --- a/windows/privacy/required-windows-diagnostic-data-events-and-fields-2004.md +++ b/windows/privacy/required-windows-diagnostic-data-events-and-fields-2004.md @@ -61,8 +61,6 @@ The following fields are available: - **DatasourceApplicationFile_19H1Setup** The count of the number of this particular object type present on this device. - **DatasourceApplicationFile_20H1** The count of the number of this particular object type present on this device. - **DatasourceApplicationFile_20H1Setup** The count of the number of this particular object type present on this device. -- **DatasourceApplicationFile_RS1** An ID for the system, calculated by hashing hardware identifiers. -- **DatasourceApplicationFile_RS2** An ID for the system, calculated by hashing hardware identifiers. - **DatasourceApplicationFile_RS3** The count of the number of this particular object type present on this device. - **DatasourceApplicationFile_RS4** The count of the number of this particular object type present on this device. - **DatasourceApplicationFile_RS5** The count of the number of this particular object type present on this device. From c06f9b5e5a728900b6baa55d424230b43b05488c Mon Sep 17 00:00:00 2001 From: Daniel Simpson Date: Tue, 22 Dec 2020 14:03:06 -0800 Subject: [PATCH 195/486] Update basic-level-windows-diagnostic-events-and-fields-1809.md --- .../basic-level-windows-diagnostic-events-and-fields-1809.md | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/windows/privacy/basic-level-windows-diagnostic-events-and-fields-1809.md b/windows/privacy/basic-level-windows-diagnostic-events-and-fields-1809.md index 40840c2ae8..792337ed12 100644 --- a/windows/privacy/basic-level-windows-diagnostic-events-and-fields-1809.md +++ b/windows/privacy/basic-level-windows-diagnostic-events-and-fields-1809.md @@ -1,5 +1,5 @@ --- -description: Use this article to learn more about what Windows diagnostic data is gathered at the basic level. +description: Use this article to learn more about what Windows 10 version 1809 diagnostic data is gathered at the basic level. title: Windows 10, version 1809 basic diagnostic events and fields (Windows 10) keywords: privacy, telemetry ms.prod: w10 From 586f74e8743de5a69b631bd4f9eb7bb1441df6e4 Mon Sep 17 00:00:00 2001 From: Daniel Simpson Date: Tue, 22 Dec 2020 14:03:57 -0800 Subject: [PATCH 196/486] Update required-windows-diagnostic-data-events-and-fields-2004.md --- .../required-windows-diagnostic-data-events-and-fields-2004.md | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/windows/privacy/required-windows-diagnostic-data-events-and-fields-2004.md b/windows/privacy/required-windows-diagnostic-data-events-and-fields-2004.md index a8786a76b9..2605b80713 100644 --- a/windows/privacy/required-windows-diagnostic-data-events-and-fields-2004.md +++ b/windows/privacy/required-windows-diagnostic-data-events-and-fields-2004.md @@ -1,5 +1,5 @@ --- -description: Use this article to learn more about what required Windows diagnostic data is gathered. +description: Use this article to learn more about what required Windows 10 version 2004 and version 20H2 diagnostic data is gathered. title: Windows 10, version 20H2 and Windows 10, version 2004 required diagnostic events and fields (Windows 10) keywords: privacy, telemetry ms.prod: w10 From ae30ef94a0d3fe6ce72a4544f525efa5ece71e26 Mon Sep 17 00:00:00 2001 From: Daniel Simpson Date: Tue, 22 Dec 2020 14:04:33 -0800 Subject: [PATCH 197/486] Update basic-level-windows-diagnostic-events-and-fields-1903.md --- .../basic-level-windows-diagnostic-events-and-fields-1903.md | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/windows/privacy/basic-level-windows-diagnostic-events-and-fields-1903.md b/windows/privacy/basic-level-windows-diagnostic-events-and-fields-1903.md index 2add73f830..51c8baac0e 100644 --- a/windows/privacy/basic-level-windows-diagnostic-events-and-fields-1903.md +++ b/windows/privacy/basic-level-windows-diagnostic-events-and-fields-1903.md @@ -1,5 +1,5 @@ --- -description: Use this article to learn more about what required Windows diagnostic data is gathered. +description: Use this article to learn more about what required Windows 10 version 1903 diagnostic data is gathered. title: Windows 10, version 1909 and Windows 10, version 1903 required diagnostic events and fields (Windows 10) keywords: privacy, telemetry ms.prod: w10 From d31df04aab4c7733e2731d11759f4407b3200135 Mon Sep 17 00:00:00 2001 From: ManikaDhiman Date: Tue, 22 Dec 2020 15:09:50 -0800 Subject: [PATCH 198/486] Added GroupPolicy policies --- windows/client-management/mdm/TOC.md | 1 + .../mdm/policies-in-policy-csp-admx-backed.md | 43 + .../policy-configuration-service-provider.md | 134 + .../mdm/policy-csp-admx-grouppolicy.md | 3192 ++++++++++++++++- 4 files changed, 3357 insertions(+), 13 deletions(-) diff --git a/windows/client-management/mdm/TOC.md b/windows/client-management/mdm/TOC.md index 0dc397819a..3b37a6caf1 100644 --- a/windows/client-management/mdm/TOC.md +++ b/windows/client-management/mdm/TOC.md @@ -207,6 +207,7 @@ #### [ADMX_FileSys](policy-csp-admx-filesys.md) #### [ADMX_FolderRedirection](policy-csp-admx-folderredirection.md) #### [ADMX_Globalization](policy-csp-admx-globalization.md) +#### [ADMX_GroupPolicy](policy-csp-admx-grouppolicy.md) #### [ADMX_Help](policy-csp-admx-help.md) #### [ADMX_HelpAndSupport](policy-csp-admx-helpandsupport.md) #### [ADMX_ICM](policy-csp-admx-icm.md) diff --git a/windows/client-management/mdm/policies-in-policy-csp-admx-backed.md b/windows/client-management/mdm/policies-in-policy-csp-admx-backed.md index a66d12c325..552222926f 100644 --- a/windows/client-management/mdm/policies-in-policy-csp-admx-backed.md +++ b/windows/client-management/mdm/policies-in-policy-csp-admx-backed.md @@ -306,6 +306,49 @@ ms.date: 10/08/2020 - [ADMX_Globalization/TurnOffInsertSpace](./policy-csp-admx-globalization.md#admx-globalization-turnoffinsertspace) - [ADMX_Globalization/TurnOffOfferTextPredictions](./policy-csp-admx-globalization.md#admx-globalization-turnoffoffertextpredictions) - [ADMX_Globalization/Y2K](./policy-csp-admx-globalization.md#admx-globalization-y2k) +- [ADMX_GroupPolicy/AllowX-ForestPolicy-and-RUP](./policy-csp-admx-grouppolicy.md#admx-grouppolicy-allowx-forestpolicy-and-rup) +- [ADMX_GroupPolicy/CSE_AppMgmt](./policy-csp-admx-grouppolicy.md#admx-grouppolicy-cse-appmgmt) +- [ADMX_GroupPolicy/CSE_DiskQuota](./policy-csp-admx-grouppolicy.md#admx-grouppolicy-cse-diskquota) +- [ADMX_GroupPolicy/CSE_EFSRecovery](./policy-csp-admx-grouppolicy.md#admx-grouppolicy-cse-efsrecovery) +- [ADMX_GroupPolicy/CSE_FolderRedirection](./policy-csp-admx-grouppolicy.md#admx-grouppolicy-cse-folderredirection) +- [ADMX_GroupPolicy/CSE_IEM](./policy-csp-admx-grouppolicy.md#admx-grouppolicy-cse-iem) +- [ADMX_GroupPolicy/CSE_IPSecurity](./policy-csp-admx-grouppolicy.md#admx-grouppolicy-cse-ipsecurity) +- [ADMX_GroupPolicy/CSE_Registry](./policy-csp-admx-grouppolicy.md#admx-grouppolicy-cse-registry) +- [ADMX_GroupPolicy/CSE_Scripts](./policy-csp-admx-grouppolicy.md#admx-grouppolicy-cse-scripts) +- [ADMX_GroupPolicy/CSE_Security](./policy-csp-admx-grouppolicy.md#admx-grouppolicy-cse-security) +- [ADMX_GroupPolicy/CSE_Wired](./policy-csp-admx-grouppolicy.md#admx-grouppolicy-cse-wired) +- [ADMX_GroupPolicy/CSE_Wireless](./policy-csp-admx-grouppolicy.md#admx-grouppolicy-cse-wireless) +- [ADMX_GroupPolicy/CorpConnSyncWaitTime](./policy-csp-admx-grouppolicy.md#admx-grouppolicy-corpconnsyncwaittime) +- [ADMX_GroupPolicy/DenyRsopToInteractiveUser_1](./policy-csp-admx-grouppolicy.md#admx-grouppolicy-denyrsoptointeractiveuser-1) +- [ADMX_GroupPolicy/DenyRsopToInteractiveUser_2](./policy-csp-admx-grouppolicy.md#admx-grouppolicy-denyrsoptointeractiveuser-2) +- [ADMX_GroupPolicy/DisableAOACProcessing](./policy-csp-admx-grouppolicy.md#admx-grouppolicy-disableaoacprocessing) +- [ADMX_GroupPolicy/DisableAutoADMUpdate](./policy-csp-admx-grouppolicy.md#admx-grouppolicy-disableautoadmupdate) +- [ADMX_GroupPolicy/DisableBackgroundPolicy](./policy-csp-admx-grouppolicy.md#admx-grouppolicy-disablebackgroundpolicy) +- [ADMX_GroupPolicy/DisableLGPOProcessing](./policy-csp-admx-grouppolicy.md#admx-grouppolicy-disablelgpoprocessing) +- [ADMX_GroupPolicy/DisableUsersFromMachGP](./policy-csp-admx-grouppolicy.md#admx-grouppolicy-disableusersfrommachgp) +- [ADMX_GroupPolicy/EnableCDP](./policy-csp-admx-grouppolicy.md#admx-grouppolicy-enablecdp) +- [ADMX_GroupPolicy/EnableLogonOptimization](./policy-csp-admx-grouppolicy.md#admx-grouppolicy-enablelogonoptimization) +- [ADMX_GroupPolicy/EnableLogonOptimizationOnServerSKU](./policy-csp-admx-grouppolicy.md#admx-grouppolicy-enablelogonoptimizationonserversku) +- [ADMX_GroupPolicy/EnableMMX](./policy-csp-admx-grouppolicy.md#admx-grouppolicy-enablemmx) +- [ADMX_GroupPolicy/EnforcePoliciesOnly](./policy-csp-admx-grouppolicy.md#admx-grouppolicy-enforcepoliciesonly) +- [ADMX_GroupPolicy/FontMitigation](./policy-csp-admx-grouppolicy.md#admx-grouppolicy-fontmitigation) +- [ADMX_GroupPolicy/GPDCOptions](./policy-csp-admx-grouppolicy.md#admx-grouppolicy-gpdcoptions) +- [ADMX_GroupPolicy/GPTransferRate_1](./policy-csp-admx-grouppolicy.md#admx-grouppolicy-gptransferrate-1) +- [ADMX_GroupPolicy/GPTransferRate_2](./policy-csp-admx-grouppolicy.md#admx-grouppolicy-gptransferrate-2) +- [ADMX_GroupPolicy/GroupPolicyRefreshRate](./policy-csp-admx-grouppolicy.md#admx-grouppolicy-grouppolicyrefreshrate) +- [ADMX_GroupPolicy/GroupPolicyRefreshRateDC](./policy-csp-admx-grouppolicy.md#admx-grouppolicy-grouppolicyrefreshratedc) +- [ADMX_GroupPolicy/GroupPolicyRefreshRateUser](./policy-csp-admx-grouppolicy.md#admx-grouppolicy-grouppolicyrefreshrateuser) +- [ADMX_GroupPolicy/LogonScriptDelay](./policy-csp-admx-grouppolicy.md#admx-grouppolicy-logonscriptdelay) +- [ADMX_GroupPolicy/NewGPODisplayName](./policy-csp-admx-grouppolicy.md#admx-grouppolicy-newgpodisplayname) +- [ADMX_GroupPolicy/NewGPOLinksDisabled](./policy-csp-admx-grouppolicy.md#admx-grouppolicy-newgpolinksdisabled) +- [ADMX_GroupPolicy/OnlyUseLocalAdminFiles](./policy-csp-admx-grouppolicy.md#admx-grouppolicy-onlyuselocaladminfiles) +- [ADMX_GroupPolicy/ProcessMitigationOptions](./policy-csp-admx-grouppolicy.md#admx-grouppolicy-processmitigationoptions) +- [ADMX_GroupPolicy/RSoPLogging](./policy-csp-admx-grouppolicy.md#admx-grouppolicy-rsoplogging) +- [ADMX_GroupPolicy/ResetDfsClientInfoDuringRefreshPolicy](./policy-csp-admx-grouppolicy.md#admx-grouppolicy-resetdfsclientinfoduringrefreshpolicy) +- [ADMX_GroupPolicy/SlowLinkDefaultForDirectAccess](./policy-csp-admx-grouppolicy.md#admx-grouppolicy-slowlinkdefaultfordirectaccess) +- [ADMX_GroupPolicy/SlowlinkDefaultToAsync](./policy-csp-admx-grouppolicy.md#admx-grouppolicy-slowlinkdefaulttoasync) +- [ADMX_GroupPolicy/SyncWaitTime](./policy-csp-admx-grouppolicy.md#admx-grouppolicy-syncwaittime) +- [ADMX_GroupPolicy/UserPolicyMode](./policy-csp-admx-grouppolicy.md#admx-grouppolicy-userpolicymode) - [ADMX_Help/DisableHHDEP](./policy-csp-admx-help.md#admx-help-disablehhdep) - [ADMX_Help/HelpQualifiedRootDir_Comp](./policy-csp-admx-help.md#admx-help-helpqualifiedrootdir-comp) - [ADMX_Help/RestrictRunFromHelp](./policy-csp-admx-help.md#admx-help-restrictrunfromhelp) diff --git a/windows/client-management/mdm/policy-configuration-service-provider.md b/windows/client-management/mdm/policy-configuration-service-provider.md index d5ff3b63a2..fff1b3e3ca 100644 --- a/windows/client-management/mdm/policy-configuration-service-provider.md +++ b/windows/client-management/mdm/policy-configuration-service-provider.md @@ -1206,6 +1206,140 @@ The following diagram shows the Policy configuration service provider in tree fo
    +### ADMX_GroupPolicy policies + +
    +
    + ADMX_GroupPolicy/AllowX-ForestPolicy-and-RUP +
    +
    + ADMX_GroupPolicy/CSE_AppMgmt +
    +
    + ADMX_GroupPolicy/CSE_DiskQuota +
    +
    + ADMX_GroupPolicy/CSE_EFSRecovery +
    +
    + ADMX_GroupPolicy/CSE_FolderRedirection +
    +
    + ADMX_GroupPolicy/CSE_IEM +
    +
    + ADMX_GroupPolicy/CSE_IPSecurity +
    +
    + ADMX_GroupPolicy/CSE_Registry +
    +
    + ADMX_GroupPolicy/CSE_Scripts +
    +
    + ADMX_GroupPolicy/CSE_Security +
    +
    + ADMX_GroupPolicy/CSE_Wired +
    +
    + ADMX_GroupPolicy/CSE_Wireless +
    +
    + ADMX_GroupPolicy/CorpConnSyncWaitTime +
    +
    + ADMX_GroupPolicy/DenyRsopToInteractiveUser_1 +
    +
    + ADMX_GroupPolicy/DenyRsopToInteractiveUser_2 +
    +
    + ADMX_GroupPolicy/DisableAOACProcessing +
    +
    + ADMX_GroupPolicy/DisableAutoADMUpdate +
    +
    + ADMX_GroupPolicy/DisableBackgroundPolicy +
    +
    + ADMX_GroupPolicy/DisableLGPOProcessing +
    +
    + ADMX_GroupPolicy/DisableUsersFromMachGP +
    +
    + ADMX_GroupPolicy/EnableCDP +
    +
    + ADMX_GroupPolicy/EnableLogonOptimization +
    +
    + ADMX_GroupPolicy/EnableLogonOptimizationOnServerSKU +
    +
    + ADMX_GroupPolicy/EnableMMX +
    +
    + ADMX_GroupPolicy/EnforcePoliciesOnly +
    +
    + ADMX_GroupPolicy/FontMitigation +
    +
    + ADMX_GroupPolicy/GPDCOptions +
    +
    + ADMX_GroupPolicy/GPTransferRate_1 +
    +
    + ADMX_GroupPolicy/GPTransferRate_2 +
    +
    + ADMX_GroupPolicy/GroupPolicyRefreshRate +
    +
    + ADMX_GroupPolicy/GroupPolicyRefreshRateDC +
    +
    + ADMX_GroupPolicy/GroupPolicyRefreshRateUser +
    +
    + ADMX_GroupPolicy/LogonScriptDelay +
    +
    + ADMX_GroupPolicy/NewGPODisplayName +
    +
    + ADMX_GroupPolicy/NewGPOLinksDisabled +
    +
    + ADMX_GroupPolicy/OnlyUseLocalAdminFiles +
    +
    + ADMX_GroupPolicy/ProcessMitigationOptions +
    +
    + ADMX_GroupPolicy/RSoPLogging +
    +
    + ADMX_GroupPolicy/ResetDfsClientInfoDuringRefreshPolicy +
    +
    + ADMX_GroupPolicy/SlowLinkDefaultForDirectAccess +
    +
    + ADMX_GroupPolicy/SlowlinkDefaultToAsync +
    +
    + ADMX_GroupPolicy/SyncWaitTime +
    +
    + ADMX_GroupPolicy/UserPolicyMode +
    +
    + ### ADMX_HelpAndSupport policies
    diff --git a/windows/client-management/mdm/policy-csp-admx-grouppolicy.md b/windows/client-management/mdm/policy-csp-admx-grouppolicy.md index d53e96d965..5ee096c63f 100644 --- a/windows/client-management/mdm/policy-csp-admx-grouppolicy.md +++ b/windows/client-management/mdm/policy-csp-admx-grouppolicy.md @@ -157,7 +157,7 @@ manager: dansimp
    -**ADMX_AuditSettings/IncludeCmdLine** +**ADMX_GroupPolicy/AllowX-ForestPolicy-and-RUP** @@ -200,16 +200,20 @@ manager: dansimp -Available in Windows 10 Insider Preview Build 20185. This policy setting determines what information is logged in security audit events when a new process has been created. This setting only applies when the Audit Process Creation policy is enabled. +Available in the latest Windows 10 Insider Preview Build. This policy setting allows user-based policy processing, roaming user profiles, and user object logon scripts for interactive logons across forests. -If you enable this policy setting, the command line information for every process will be logged in plain text in the security event log as part of the Audit Process Creation event 4688, "a new process has been created," on the workstations and servers on which this policy setting is applied. +This policy setting affects all user accounts that interactively log on to a computer in a different forest when a trust across forests or a two-way forest trust exists. -If you disable or do not configure this policy setting, the process's command line information will not be included in Audit Process Creation events. +If you do not configure this policy setting: -Default is Not configured. +- No user-based policy settings are applied from the user's forest. +- Users do not receive their roaming profiles; they receive a local profile on the computer from the local forest. A warning message appears to the user, and an event log message (1529) is posted. +- Loopback Group Policy processing is applied, using the Group Policy Objects (GPOs) that are scoped to the computer. +- An event log message (1109) is posted, stating that loopback was invoked in Replace mode. -> [!NOTE] -> When this policy setting is enabled, any user with access to read the security events will be able to read the command line arguments for any successfully created process. Command line arguments can contain sensitive or private information, such as passwords or user data. +If you enable this policy setting, the behavior is exactly the same as in Windows 2000: user policy is applied, and a roaming user profile is allowed from the trusted forest. + +If you disable this policy setting, the behavior is the same as if it is not configured. > [!TIP] @@ -221,10 +225,3173 @@ Default is Not configured. ADMX Info: -- GP English name: *Include command line in process creation events* -- GP name: *IncludeCmdLine* -- GP path: *System/Audit Process Creation* -- GP ADMX file name: *AuditSettings.admx* +- GP English name: *Allow cross-forest user policy and roaming user profiles* +- GP name: *AllowX-ForestPolicy-and-RUP* +- GP path: *System\Group Policy* +- GP ADMX file name: *GroupPolicy.admx* + + + +
    + + +**ADMX_GroupPolicy/CSE_AppMgmt** + + +
    + + + + + + + + + + + + + + + + + + + + + + + + +
    Windows EditionSupported?
    Homecross mark
    Procross mark
    Businesscross mark
    Enterprisecheck mark
    Educationcross mark
    + + +
    + + +[Scope](./policy-configuration-service-provider.md#policy-scope): + +> [!div class = "checklist"] +> * Device + +
    + + + +Available in the latest Windows 10 Insider Preview Build. This policy setting determines when software installation policies are updated. + +This policy setting affects all policy settings that use the software installation component of Group Policy, such as policy settings in Software Settings\Software Installation. You can set software installation policy only for Group Policy Objects stored in Active Directory, not for Group Policy Objects on the local computer. + +This policy setting overrides customized settings that the program implementing the software installation policy set when it was installed. + +If you enable this policy setting, you can use the check boxes provided to change the options. If you disable or do not configure this policy setting, it has no effect on the system. + +The "Allow processing across a slow network connection" option updates the policies even when the update is being transmitted across a slow network connection, such as a telephone line. Updates across slow connections can cause significant delays. + +The "Process even if the Group Policy objects have not changed" option updates and reapplies the policies even if the policies have not changed. Many policy setting implementations specify that they are updated only when changed. However, you might want to update unchanged policy settings, such as reapplying a desired policies in case a user has changed it. + + +> [!TIP] +> This is an ADMX-backed policy and requires a special SyncML format to enable or disable. For details, see [Understanding ADMX-backed policies](./understanding-admx-backed-policies.md). +> +> You must specify the data type in the SyncML as <Format>chr</Format>. For an example SyncML, refer to [Enabling a policy](./understanding-admx-backed-policies.md#enabling-a-policy). +> +> The payload of the SyncML must be XML-encoded; for this XML encoding, there are a variety of online encoders that you can use. To avoid encoding the payload, you can use CDATA if your MDM supports it. For more information, see [CDATA Sections](http://www.w3.org/TR/REC-xml/#sec-cdata-sect). + + +ADMX Info: +- GP English name: *Configure software Installation policy processing* +- GP name: *CSE_AppMgmt* +- GP path: *System\Group Policy* +- GP ADMX file name: *GroupPolicy.admx* + + + +
    + + +**ADMX_GroupPolicy/CSE_DiskQuota** + + + + + + + + + + + + + + + + + + + + + + + + + + + +
    Windows EditionSupported?
    Homecross mark
    Procross mark
    Businesscross mark
    Enterprisecheck mark
    Educationcross mark
    + + +
    + + +[Scope](./policy-configuration-service-provider.md#policy-scope): + +> [!div class = "checklist"] +> * Device + +
    + + + +Available in the latest Windows 10 Insider Preview Build. This policy setting determines when disk quota policies are updated. + +This policy setting affects all policies that use the disk quota component of Group Policy, such as those in Computer Configuration\Administrative Templates\System\Disk Quotas. + +This policy setting overrides customized settings that the program implementing the disk quota policy set when it was installed. + +If you enable this policy setting, you can use the check boxes provided to change the options. If you disable or do not configure this policy setting, it has no effect on the system. + +The "Allow processing across a slow network connection" option updates the policies even when the update is being transmitted across a slow network connection, such as a telephone line. Updates across slow connections can cause significant delays. + +The "Do not apply during periodic background processing" option prevents the system from updating affected policies in the background while the computer is in use. When background updates are disabled, policy changes will not take effect until the next user logon or system restart. + +The "Process even if the Group Policy objects have not changed" option updates and reapplies the policies even if the policies have not changed. Many policy implementations specify that they are updated only when changed. However, you might want to update unchanged policies, such as reapplying a desired setting in case a user has changed it. + + +> [!TIP] +> This is an ADMX-backed policy and requires a special SyncML format to enable or disable. For details, see [Understanding ADMX-backed policies](./understanding-admx-backed-policies.md). +> +> You must specify the data type in the SyncML as <Format>chr</Format>. For an example SyncML, refer to [Enabling a policy](./understanding-admx-backed-policies.md#enabling-a-policy). +> +> The payload of the SyncML must be XML-encoded; for this XML encoding, there are a variety of online encoders that you can use. To avoid encoding the payload, you can use CDATA if your MDM supports it. For more information, see [CDATA Sections](http://www.w3.org/TR/REC-xml/#sec-cdata-sect). + + +ADMX Info: +- GP English name: *Configure disk quota policy processing* +- GP name: *CSE_DiskQuota* +- GP path: *System\Group Policy* +- GP ADMX file name: *GroupPolicy.admx* + + + +
    + + +**ADMX_GroupPolicy/CSE_EFSRecovery** + + + + + + + + + + + + + + + + + + + + + + + + + + + +
    Windows EditionSupported?
    Homecross mark
    Procross mark
    Businesscross mark
    Enterprisecheck mark
    Educationcross mark
    + + +
    + + +[Scope](./policy-configuration-service-provider.md#policy-scope): + +> [!div class = "checklist"] +> * Device + +
    + + + +Available in the latest Windows 10 Insider Preview Build. This policy setting determines when encryption policies are updated. + +This policy setting affects all policies that use the encryption component of Group Policy, such as policies related to encryption in Windows Settings\Security Settings. + +It overrides customized settings that the program implementing the encryption policy set when it was installed. + +If you enable this policy setting, you can use the check boxes provided to change the options. If you disable or do not configure this policy setting, it has no effect on the system. + +The "Allow processing across a slow network connection" option updates the policies even when the update is being transmitted across a slow network connection, such as a telephone line. Updates across slow connections can cause significant delays. + +The "Do not apply during periodic background processing" option prevents the system from updating affected policies in the background while the computer is in use. When background updates are disabled, policy changes will not take effect until the next user logon or system restart. + +The "Process even if the Group Policy objects have not changed" option updates and reapplies the policies even if the policies have not changed. Many policy implementations specify that they are updated only when changed. However, you might want to update unchanged policies, such as reapplying a desired setting in case a user has changed it. + + +> [!TIP] +> This is an ADMX-backed policy and requires a special SyncML format to enable or disable. For details, see [Understanding ADMX-backed policies](./understanding-admx-backed-policies.md). +> +> You must specify the data type in the SyncML as <Format>chr</Format>. For an example SyncML, refer to [Enabling a policy](./understanding-admx-backed-policies.md#enabling-a-policy). +> +> The payload of the SyncML must be XML-encoded; for this XML encoding, there are a variety of online encoders that you can use. To avoid encoding the payload, you can use CDATA if your MDM supports it. For more information, see [CDATA Sections](http://www.w3.org/TR/REC-xml/#sec-cdata-sect). + + +ADMX Info: +- GP English name: *Configure EFS recovery policy processing* +- GP name: *CSE_EFSRecovery* +- GP path: *System\Group Policy* +- GP ADMX file name: *GroupPolicy.admx* + + + +
    + + +**ADMX_GroupPolicy/CSE_FolderRedirection** + + + + + + + + + + + + + + + + + + + + + + + + + + + +
    Windows EditionSupported?
    Homecross mark
    Procross mark
    Businesscross mark
    Enterprisecheck mark
    Educationcross mark
    + + +
    + + +[Scope](./policy-configuration-service-provider.md#policy-scope): + +> [!div class = "checklist"] +> * Device + +
    + + + +Available in the latest Windows 10 Insider Preview Build. This policy setting determines when folder redirection policies are updated. + +This policy setting affects all policies that use the folder redirection component of Group Policy, such as those in WindowsSettings\Folder Redirection. You can only set folder redirection policy for Group Policy objects, stored in Active Directory, not for Group Policy objects on the local computer. + +This policy setting overrides customized settings that the program implementing the folder redirection policy setting set when it was installed. + +If you enable this policy setting, you can use the check boxes provided to change the options. If you disable or do not configure this policy setting, it has no effect on the system. + +The "Allow processing across a slow network connection" option updates the policies even when the update is being transmitted across a slow network connection, such as a telephone line. Updates across slow connections can cause significant delays. + +The "Process even if the Group Policy objects have not changed" option updates and reapplies the policies even if the policies have not changed. Many policy implementations specify that they are updated only when changed. However, you might want to update unchanged policies, such as reapplying a desired setting in case a user has changed it. + + +> [!TIP] +> This is an ADMX-backed policy and requires a special SyncML format to enable or disable. For details, see [Understanding ADMX-backed policies](./understanding-admx-backed-policies.md). +> +> You must specify the data type in the SyncML as <Format>chr</Format>. For an example SyncML, refer to [Enabling a policy](./understanding-admx-backed-policies.md#enabling-a-policy). +> +> The payload of the SyncML must be XML-encoded; for this XML encoding, there are a variety of online encoders that you can use. To avoid encoding the payload, you can use CDATA if your MDM supports it. For more information, see [CDATA Sections](http://www.w3.org/TR/REC-xml/#sec-cdata-sect). + + +ADMX Info: +- GP English name: *Configure folder redirection policy processing* +- GP name: *CSE_FolderRedirection* +- GP path: *System\Group Policy* +- GP ADMX file name: *GroupPolicy.admx* + + + +
    + + +**ADMX_GroupPolicy/CSE_IEM** + + + + + + + + + + + + + + + + + + + + + + + + + + + +
    Windows EditionSupported?
    Homecross mark
    Procross mark
    Businesscross mark
    Enterprisecheck mark
    Educationcross mark
    + + +
    + + +[Scope](./policy-configuration-service-provider.md#policy-scope): + +> [!div class = "checklist"] +> * Device + +
    + + + +Available in the latest Windows 10 Insider Preview Build. This policy setting determines when Internet Explorer Maintenance policies are updated. + +This policy setting affects all policies that use the Internet Explorer Maintenance component of Group Policy, such as those in Windows Settings\Internet Explorer Maintenance. + +This policy setting overrides customized settings that the program implementing the Internet Explorer Maintenance policy set when it was installed. + +If you enable this policy setting, you can use the check boxes provided to change the options. If you disable or do not configure this policy setting, it has no effect on the system. + +The "Allow processing across a slow network connection" option updates the policies even when the update is being transmitted across a slow network connection, such as a telephone line. Updates across slow connections can cause significant delays. + +The "Do not apply during periodic background processing" option prevents the system from updating affected policies in the background while the computer is in use. When background updates are disabled, policy changes will not take effect until the next user logon or system restart. + +The "Process even if the Group Policy objects have not changed" option updates and reapplies the policies even if the policies have not changed. Many policy implementations specify that they are updated only when changed. However, you might want to update unchanged policies, such as reapplying a desired policy setting in case a user has changed it. + + +> [!TIP] +> This is an ADMX-backed policy and requires a special SyncML format to enable or disable. For details, see [Understanding ADMX-backed policies](./understanding-admx-backed-policies.md). +> +> You must specify the data type in the SyncML as <Format>chr</Format>. For an example SyncML, refer to [Enabling a policy](./understanding-admx-backed-policies.md#enabling-a-policy). +> +> The payload of the SyncML must be XML-encoded; for this XML encoding, there are a variety of online encoders that you can use. To avoid encoding the payload, you can use CDATA if your MDM supports it. For more information, see [CDATA Sections](http://www.w3.org/TR/REC-xml/#sec-cdata-sect). + + +ADMX Info: +- GP English name: *Configure Internet Explorer Maintenance policy processing* +- GP name: *CSE_IEM* +- GP path: *System\Group Policy* +- GP ADMX file name: *GroupPolicy.admx* + + + +
    + + +**ADMX_GroupPolicy/CSE_IPSecurity** + + + + + + + + + + + + + + + + + + + + + + + + + + + +
    Windows EditionSupported?
    Homecross mark
    Procross mark
    Businesscross mark
    Enterprisecheck mark
    Educationcross mark
    + + +
    + + +[Scope](./policy-configuration-service-provider.md#policy-scope): + +> [!div class = "checklist"] +> * Device + +
    + + + +Available in the latest Windows 10 Insider Preview Build. This policy setting determines when IP security policies are updated. + +This policy setting affects all policies that use the IP security component of Group Policy, such as policies in Computer Configuration\Windows Settings\Security Settings\IP Security Policies on Local Machine. + +This policy setting overrides customized settings that the program implementing the IP security policy set when it was installed. + +If you enable this policy setting, you can use the check boxes provided to change the options. If you disable or do not configure this policy setting, it has no effect on the system. + +The "Allow processing across a slow network connection" option updates the policies even when the update is being transmitted across a slow network connection, such as a telephone line. Updates across slow connections can cause significant delays. + +The "Do not apply during periodic background processing" option prevents the system from updating affected policies in the background while the computer is in use. When background updates are disabled, policy changes will not take effect until the next user logon or system restart. + +The "Process even if the Group Policy objects have not changed" option updates and reapplies the policies even if the policies have not changed. Many policy implementations specify that they are updated only when changed. However, you might want to update unchanged policies, such as reapplying a desired policy setting in case a user has changed it. + + +> [!TIP] +> This is an ADMX-backed policy and requires a special SyncML format to enable or disable. For details, see [Understanding ADMX-backed policies](./understanding-admx-backed-policies.md). +> +> You must specify the data type in the SyncML as <Format>chr</Format>. For an example SyncML, refer to [Enabling a policy](./understanding-admx-backed-policies.md#enabling-a-policy). +> +> The payload of the SyncML must be XML-encoded; for this XML encoding, there are a variety of online encoders that you can use. To avoid encoding the payload, you can use CDATA if your MDM supports it. For more information, see [CDATA Sections](http://www.w3.org/TR/REC-xml/#sec-cdata-sect). + + +ADMX Info: +- GP English name: *Configure IP security policy processing* +- GP name: *CSE_IPSecurity* +- GP path: *System\Group Policy* +- GP ADMX file name: *GroupPolicy.admx* + + + +
    + + +**ADMX_GroupPolicy/CSE_Registry** + + + + + + + + + + + + + + + + + + + + + + + + + + + +
    Windows EditionSupported?
    Homecross mark
    Procross mark
    Businesscross mark
    Enterprisecheck mark
    Educationcross mark
    + + +
    + + +[Scope](./policy-configuration-service-provider.md#policy-scope): + +> [!div class = "checklist"] +> * Device + +
    + + + +Available in the latest Windows 10 Insider Preview Build. This policy setting determines when registry policies are updated. + +This policy setting affects all policies in the Administrative Templates folder and any other policies that store values in the registry. It overrides customized settings that the program implementing a registry policy set when it was installed. + +If you enable this policy setting, you can use the check boxes provided to change the options. If you disable or do not configure this policy setting, it has no effect on the system. + +The "Do not apply during periodic background processing" option prevents the system from updating affected policies in the background while the computer is in use. When background updates are disabled, policy changes will not take effect until the next user logon or system restart. + +The "Process even if the Group Policy objects have not changed" option updates and reapplies the policies even if the policies have not changed. Many policy implementations specify that they are updated only when changed. However, you might want to update unchanged policies, such as reapplying a desired policy setting in case a user has changed it. + + +> [!TIP] +> This is an ADMX-backed policy and requires a special SyncML format to enable or disable. For details, see [Understanding ADMX-backed policies](./understanding-admx-backed-policies.md). +> +> You must specify the data type in the SyncML as <Format>chr</Format>. For an example SyncML, refer to [Enabling a policy](./understanding-admx-backed-policies.md#enabling-a-policy). +> +> The payload of the SyncML must be XML-encoded; for this XML encoding, there are a variety of online encoders that you can use. To avoid encoding the payload, you can use CDATA if your MDM supports it. For more information, see [CDATA Sections](http://www.w3.org/TR/REC-xml/#sec-cdata-sect). + + +ADMX Info: +- GP English name: *Configure registry policy processing* +- GP name: *CSE_Registry* +- GP path: *System\Group Policy* +- GP ADMX file name: *GroupPolicy.admx* + + + +
    + + +**ADMX_GroupPolicy/CSE_Scripts** + + + + + + + + + + + + + + + + + + + + + + + + + + + +
    Windows EditionSupported?
    Homecross mark
    Procross mark
    Businesscross mark
    Enterprisecheck mark
    Educationcross mark
    + + +
    + + +[Scope](./policy-configuration-service-provider.md#policy-scope): + +> [!div class = "checklist"] +> * Device + +
    + + + +Available in the latest Windows 10 Insider Preview Build. This policy setting determines when policies that assign shared scripts are updated. + +This policy setting affects all policies that use the scripts component of Group Policy, such as those in WindowsSettings\Scripts. It overrides customized settings that the program implementing the scripts policy set when it was installed. + +If you enable this policy setting, you can use the check boxes provided to change the options. If you disable or do not configure this setting, it has no effect on the system. + +The "Allow processing across a slow network connection" option updates the policies even when the update is being transmitted across a slow network connection, such as a telephone line. Updates across slow connections can cause significant delays. + +The "Do not apply during periodic background processing" option prevents the system from updating affected policies in the background while the computer is in use. When background updates are disabled, policy changes will not take effect until the next user logon or system restart. + +The "Process even if the Group Policy objects have not changed" option updates and reapplies the policies even if the policies have not changed. Many policy implementations specify that they are updated only when changed. However, you might want to update unchanged policies, such as reapplying a desired policy setting in case a user has changed it. + + +> [!TIP] +> This is an ADMX-backed policy and requires a special SyncML format to enable or disable. For details, see [Understanding ADMX-backed policies](./understanding-admx-backed-policies.md). +> +> You must specify the data type in the SyncML as <Format>chr</Format>. For an example SyncML, refer to [Enabling a policy](./understanding-admx-backed-policies.md#enabling-a-policy). +> +> The payload of the SyncML must be XML-encoded; for this XML encoding, there are a variety of online encoders that you can use. To avoid encoding the payload, you can use CDATA if your MDM supports it. For more information, see [CDATA Sections](http://www.w3.org/TR/REC-xml/#sec-cdata-sect). + + +ADMX Info: +- GP English name: *Configure scripts policy processing* +- GP name: *CSE_Scripts* +- GP path: *System\Group Policy* +- GP ADMX file name: *GroupPolicy.admx* + + + +
    + + +**ADMX_GroupPolicy/CSE_Security** + + + + + + + + + + + + + + + + + + + + + + + + + + + +
    Windows EditionSupported?
    Homecross mark
    Procross mark
    Businesscross mark
    Enterprisecheck mark
    Educationcross mark
    + + +
    + + +[Scope](./policy-configuration-service-provider.md#policy-scope): + +> [!div class = "checklist"] +> * Device + +
    + + + +Available in the latest Windows 10 Insider Preview Build. This policy setting determines when security policies are updated. + +This policy setting affects all policies that use the security component of Group Policy, such as those in Windows Settings\Security Settings. + +This policy setting overrides customized settings that the program implementing the security policy set when it was installed. + +If you enable this policy setting, you can use the check boxes provided to change the options. If you disable or do not configure this policy setting, it has no effect on the system. + +The "Do not apply during periodic background processing" option prevents the system from updating affected policies in the background while the computer is in use. When background updates are disabled, policy changes will not take effect until the next user logon or system restart. + +The "Process even if the Group Policy objects have not changed" option updates and reapplies the policies even if the policies have not changed. Many policy implementations specify that they be updated only when changed. However, you might want to update unchanged policies, such as reapplying a desired policy setting in case a user has changed it. + + +> [!TIP] +> This is an ADMX-backed policy and requires a special SyncML format to enable or disable. For details, see [Understanding ADMX-backed policies](./understanding-admx-backed-policies.md). +> +> You must specify the data type in the SyncML as <Format>chr</Format>. For an example SyncML, refer to [Enabling a policy](./understanding-admx-backed-policies.md#enabling-a-policy). +> +> The payload of the SyncML must be XML-encoded; for this XML encoding, there are a variety of online encoders that you can use. To avoid encoding the payload, you can use CDATA if your MDM supports it. For more information, see [CDATA Sections](http://www.w3.org/TR/REC-xml/#sec-cdata-sect). + + +ADMX Info: +- GP English name: *Configure security policy processing* +- GP name: *CSE_Security* +- GP path: *System\Group Policy* +- GP ADMX file name: *GroupPolicy.admx* + + + +
    + + +**ADMX_GroupPolicy/CSE_Wired** + + + + + + + + + + + + + + + + + + + + + + + + + + + +
    Windows EditionSupported?
    Homecross mark
    Procross mark
    Businesscross mark
    Enterprisecheck mark
    Educationcross mark
    + + +
    + + +[Scope](./policy-configuration-service-provider.md#policy-scope): + +> [!div class = "checklist"] +> * Device + +
    + + + +Available in the latest Windows 10 Insider Preview Build. This policy setting determines when policies that assign wired network settings are updated. + +This policy setting affects all policies that use the wired network component of Group Policy, such as those in Windows Settings\Wired Network Policies. + +It overrides customized settings that the program implementing the wired network set when it was installed. + +If you enable this policy, you can use the check boxes provided to change the options. + +If you disable this setting or do not configure it, it has no effect on the system. + +The "Allow processing across a slow network connection" option updates the policies even when the update is being transmitted across a slow network connection, such as a telephone line. Updates across slow connections can cause significant delays. + +The "Do not apply during periodic background processing" option prevents the system from updating affected policies in the background while the computer is in use. When background updates are disabled, policy changes will not take effect until the next user logon or system restart. + +The "Process even if the Group Policy objects have not changed" option updates and reapplies the policies even if the policies have not changed. Many policy implementations specify that they are updated only when changed. However, you might want to update unchanged policies, such as reapplying a desired setting in case a user has changed it. + + +> [!TIP] +> This is an ADMX-backed policy and requires a special SyncML format to enable or disable. For details, see [Understanding ADMX-backed policies](./understanding-admx-backed-policies.md). +> +> You must specify the data type in the SyncML as <Format>chr</Format>. For an example SyncML, refer to [Enabling a policy](./understanding-admx-backed-policies.md#enabling-a-policy). +> +> The payload of the SyncML must be XML-encoded; for this XML encoding, there are a variety of online encoders that you can use. To avoid encoding the payload, you can use CDATA if your MDM supports it. For more information, see [CDATA Sections](http://www.w3.org/TR/REC-xml/#sec-cdata-sect). + + +ADMX Info: +- GP English name: *Configure wired policy processing* +- GP name: *CSE_Wired* +- GP path: *System\Group Policy* +- GP ADMX file name: *GroupPolicy.admx* + + + +
    + + +**ADMX_GroupPolicy/CSE_Wireless** + + + + + + + + + + + + + + + + + + + + + + + + + + + +
    Windows EditionSupported?
    Homecross mark
    Procross mark
    Businesscross mark
    Enterprisecheck mark
    Educationcross mark
    + + +
    + + +[Scope](./policy-configuration-service-provider.md#policy-scope): + +> [!div class = "checklist"] +> * Device + +
    + + + +Available in the latest Windows 10 Insider Preview Build. This policy setting determines when policies that assign wireless network settings are updated. + +This policy setting affects all policies that use the wireless network component of Group Policy, such as those in WindowsSettings\Wireless Network Policies. + +It overrides customized settings that the program implementing the wireless network set when it was installed. + +If you enable this policy, you can use the check boxes provided to change the options. + +If you disable this setting or do not configure it, it has no effect on the system. + +The "Allow processing across a slow network connection" option updates the policies even when the update is being transmitted across a slow network connection, such as a telephone line. Updates across slow connections can cause significant delays. + +The "Do not apply during periodic background processing" option prevents the system from updating affected policies in the background while the computer is in use. When background updates are disabled, policy changes will not take effect until the next user logon or system restart. + +The "Process even if the Group Policy objects have not changed" option updates and reapplies the policies even if the policies have not changed. Many policy implementations specify that they are updated only when changed. However, you might want to update unchanged policies, such as reapplying a desired setting in case a user has changed it. + + +> [!TIP] +> This is an ADMX-backed policy and requires a special SyncML format to enable or disable. For details, see [Understanding ADMX-backed policies](./understanding-admx-backed-policies.md). +> +> You must specify the data type in the SyncML as <Format>chr</Format>. For an example SyncML, refer to [Enabling a policy](./understanding-admx-backed-policies.md#enabling-a-policy). +> +> The payload of the SyncML must be XML-encoded; for this XML encoding, there are a variety of online encoders that you can use. To avoid encoding the payload, you can use CDATA if your MDM supports it. For more information, see [CDATA Sections](http://www.w3.org/TR/REC-xml/#sec-cdata-sect). + + +ADMX Info: +- GP English name: *Configure wireless policy processing* +- GP name: *CSE_Wireless* +- GP path: *System\Group Policy* +- GP ADMX file name: *GroupPolicy.admx* + + + +
    + + +**ADMX_GroupPolicy/CorpConnSyncWaitTime** + + + + + + + + + + + + + + + + + + + + + + + + + + + +
    Windows EditionSupported?
    Homecross mark
    Procross mark
    Businesscross mark
    Enterprisecheck mark
    Educationcross mark
    + + +
    + + +[Scope](./policy-configuration-service-provider.md#policy-scope): + +> [!div class = "checklist"] +> * Device + +
    + + + +Available in the latest Windows 10 Insider Preview Build. This policy setting specifies how long Group Policy should wait for workplace connectivity notifications during startup policy processing. If the startup policy processing is synchronous, the computer is blocked until workplace connectivity is available or the wait time is reached. If the startup policy processing is asynchronous, the computer is not blocked and policy processing will occur in the background. In either case, configuring this policy setting overrides any system-computed wait times. + +If you enable this policy setting, Group Policy uses this administratively configured maximum wait time for workplace connectivity, and overrides any default or system-computed wait time. + +If you disable or do not configure this policy setting, Group Policy will use the default wait time of 60 seconds on computers running Windows operating systems greater than Windows 7 configured for workplace connectivity. + + +> [!TIP] +> This is an ADMX-backed policy and requires a special SyncML format to enable or disable. For details, see [Understanding ADMX-backed policies](./understanding-admx-backed-policies.md). +> +> You must specify the data type in the SyncML as <Format>chr</Format>. For an example SyncML, refer to [Enabling a policy](./understanding-admx-backed-policies.md#enabling-a-policy). +> +> The payload of the SyncML must be XML-encoded; for this XML encoding, there are a variety of online encoders that you can use. To avoid encoding the payload, you can use CDATA if your MDM supports it. For more information, see [CDATA Sections](http://www.w3.org/TR/REC-xml/#sec-cdata-sect). + + +ADMX Info: +- GP English name: *Specify workplace connectivity wait time for policy processing* +- GP name: *CorpConnSyncWaitTime* +- GP path: *System\Group Policy* +- GP ADMX file name: *GroupPolicy.admx* + + + +
    + + +**ADMX_GroupPolicy/DenyRsopToInteractiveUser_1** + + + + + + + + + + + + + + + + + + + + + + + + + + + +
    Windows EditionSupported?
    Homecross mark
    Procross mark
    Businesscross mark
    Enterprisecheck mark
    Educationcross mark
    + + +
    + + +[Scope](./policy-configuration-service-provider.md#policy-scope): + +> [!div class = "checklist"] +> * User + +
    + + + +Available in the latest Windows 10 Insider Preview Build. This policy setting controls the ability of users to view their Resultant Set of Policy (RSoP) data. + +By default, interactively logged on users can view their own Resultant Set of Policy (RSoP) data. + +If you enable this policy setting, interactive users cannot generate RSoP data. + +If you disable or do not configure this policy setting, interactive users can generate RSoP. + +> [!NOTE] +> This policy setting does not affect administrators. If you enable or disable this policy setting, by default administrators can view RSoP data. +> +> To view RSoP data on a client computer, use the RSoP snap-in for the Microsoft Management Console. You can launch the RSoP snap-in from the command line by typing RSOP.msc. +> +> This policy setting exists as both a User Configuration and Computer Configuration setting. Also, see the "Turn off Resultant set of Policy logging" policy setting in Computer Configuration\Administrative Templates\System\GroupPolicy. + + +> [!TIP] +> This is an ADMX-backed policy and requires a special SyncML format to enable or disable. For details, see [Understanding ADMX-backed policies](./understanding-admx-backed-policies.md). +> +> You must specify the data type in the SyncML as <Format>chr</Format>. For an example SyncML, refer to [Enabling a policy](./understanding-admx-backed-policies.md#enabling-a-policy). +> +> The payload of the SyncML must be XML-encoded; for this XML encoding, there are a variety of online encoders that you can use. To avoid encoding the payload, you can use CDATA if your MDM supports it. For more information, see [CDATA Sections](http://www.w3.org/TR/REC-xml/#sec-cdata-sect). + + +ADMX Info: +- GP English name: *Determine if interactive users can generate Resultant Set of Policy data* +- GP name: *DenyRsopToInteractiveUser_1* +- GP path: *System\Group Policy* +- GP ADMX file name: *GroupPolicy.admx* + + + +
    + + +**ADMX_GroupPolicy/DenyRsopToInteractiveUser_2** + + + + + + + + + + + + + + + + + + + + + + + + + + + +
    Windows EditionSupported?
    Homecross mark
    Procross mark
    Businesscross mark
    Enterprisecheck mark
    Educationcross mark
    + + +
    + + +[Scope](./policy-configuration-service-provider.md#policy-scope): + +> [!div class = "checklist"] +> * Device + +
    + + + +Available in the latest Windows 10 Insider Preview Build. This policy setting controls the ability of users to view their Resultant Set of Policy (RSoP) data. + +By default, interactively logged on users can view their own Resultant Set of Policy (RSoP) data. + +If you enable this policy setting, interactive users cannot generate RSoP data. + +If you disable or do not configure this policy setting, interactive users can generate RSoP + +> [!NOTE] +> This policy setting does not affect administrators. If you enable or disable this policy setting, by default administrators can view RSoP data. +> +> To view RSoP data on a client computer, use the RSoP snap-in for the Microsoft Management Console. You can launch the RSoP snap-in from the command line by typing RSOP.msc. +> +> This policy setting exists as both a User Configuration and Computer Configuration setting. Also, see the "Turn off Resultant set of Policy logging" policy setting in Computer Configuration\Administrative Templates\System\GroupPolicy. + + +> [!TIP] +> This is an ADMX-backed policy and requires a special SyncML format to enable or disable. For details, see [Understanding ADMX-backed policies](./understanding-admx-backed-policies.md). +> +> You must specify the data type in the SyncML as <Format>chr</Format>. For an example SyncML, refer to [Enabling a policy](./understanding-admx-backed-policies.md#enabling-a-policy). +> +> The payload of the SyncML must be XML-encoded; for this XML encoding, there are a variety of online encoders that you can use. To avoid encoding the payload, you can use CDATA if your MDM supports it. For more information, see [CDATA Sections](http://www.w3.org/TR/REC-xml/#sec-cdata-sect). + + +ADMX Info: +- GP English name: *Determine if interactive users can generate Resultant Set of Policy data* +- GP name: *DenyRsopToInteractiveUser_2* +- GP path: *System\Group Policy* +- GP ADMX file name: *GroupPolicy.admx* + + + +
    + + +**ADMX_GroupPolicy/DisableAOACProcessing** + + + + + + + + + + + + + + + + + + + + + + + + + + + +
    Windows EditionSupported?
    Homecross mark
    Procross mark
    Businesscross mark
    Enterprisecheck mark
    Educationcross mark
    + + +
    + + +[Scope](./policy-configuration-service-provider.md#policy-scope): + +> [!div class = "checklist"] +> * Device + +
    + + + +Available in the latest Windows 10 Insider Preview Build. This policy setting prevents the Group Policy Client Service from stopping when idle. + + +> [!TIP] +> This is an ADMX-backed policy and requires a special SyncML format to enable or disable. For details, see [Understanding ADMX-backed policies](./understanding-admx-backed-policies.md). +> +> You must specify the data type in the SyncML as <Format>chr</Format>. For an example SyncML, refer to [Enabling a policy](./understanding-admx-backed-policies.md#enabling-a-policy). +> +> The payload of the SyncML must be XML-encoded; for this XML encoding, there are a variety of online encoders that you can use. To avoid encoding the payload, you can use CDATA if your MDM supports it. For more information, see [CDATA Sections](http://www.w3.org/TR/REC-xml/#sec-cdata-sect). + + +ADMX Info: +- GP English name: *Turn off Group Policy Client Service AOAC optimization* +- GP name: *DisableAOACProcessing* +- GP path: *System\Group Policy* +- GP ADMX file name: *GroupPolicy.admx* + + + +
    + + +**ADMX_GroupPolicy/DisableAutoADMUpdate** + + + + + + + + + + + + + + + + + + + + + + + + + + + +
    Windows EditionSupported?
    Homecross mark
    Procross mark
    Businesscross mark
    Enterprisecheck mark
    Educationcross mark
    + + +
    + + +[Scope](./policy-configuration-service-provider.md#policy-scope): + +> [!div class = "checklist"] +> * User + +
    + + + +Available in the latest Windows 10 Insider Preview Build. Prevents the system from updating the Administrative Templates source files automatically when you open the Group Policy Object Editor. + +Administrators might want to use this if they are concerned about the amount of space used on the system volume of a DC. + +By default, when you start the Group Policy Object Editor, a timestamp comparison is performed on the source files in the local %SYSTEMROOT%\inf directory and the source files stored in the GPO. + +If the local files are newer, they are copied into the GPO. + +Changing the status of this setting to Enabled will keep any source files from copying to the GPO. + +Changing the status of this setting to Disabled will enforce the default behavior. + +Files will always be copied to the GPO if they have a later timestamp. + +> [!NOTE] +> If the Computer Configuration policy setting, "Always use local ADM files for the Group Policy Object Editor" is enabled, the state of this setting is ignored and always treated as Enabled. + + +> [!TIP] +> This is an ADMX-backed policy and requires a special SyncML format to enable or disable. For details, see [Understanding ADMX-backed policies](./understanding-admx-backed-policies.md). +> +> You must specify the data type in the SyncML as <Format>chr</Format>. For an example SyncML, refer to [Enabling a policy](./understanding-admx-backed-policies.md#enabling-a-policy). +> +> The payload of the SyncML must be XML-encoded; for this XML encoding, there are a variety of online encoders that you can use. To avoid encoding the payload, you can use CDATA if your MDM supports it. For more information, see [CDATA Sections](http://www.w3.org/TR/REC-xml/#sec-cdata-sect). + + +ADMX Info: +- GP English name: *Turn off automatic update of ADM files* +- GP name: *DisableAutoADMUpdate* +- GP path: *System\Group Policy* +- GP ADMX file name: *GroupPolicy.admx* + + + +
    + + +**ADMX_GroupPolicy/DisableBackgroundPolicy** + + + + + + + + + + + + + + + + + + + + + + + + + + + +
    Windows EditionSupported?
    Homecross mark
    Procross mark
    Businesscross mark
    Enterprisecheck mark
    Educationcross mark
    + + +
    + + +[Scope](./policy-configuration-service-provider.md#policy-scope): + +> [!div class = "checklist"] +> * Device + +
    + + + +Available in the latest Windows 10 Insider Preview Build. This policy setting prevents Group Policy from being updated while the computer is in use. This policy setting applies to Group Policy for computers, users, and domain controllers. + +If you enable this policy setting, the system waits until the current user logs off the system before updating the computer and user settings. + +If you disable or do not configure this policy setting, updates can be applied while users are working. The frequency of updates is determined by the "Set Group Policy refresh interval for computers" and "Set Group Policy refresh interval for users" policy settings. + +> [!NOTE] +> If you make changes to this policy setting, you must restart your computer for it to take effect. + + +> [!TIP] +> This is an ADMX-backed policy and requires a special SyncML format to enable or disable. For details, see [Understanding ADMX-backed policies](./understanding-admx-backed-policies.md). +> +> You must specify the data type in the SyncML as <Format>chr</Format>. For an example SyncML, refer to [Enabling a policy](./understanding-admx-backed-policies.md#enabling-a-policy). +> +> The payload of the SyncML must be XML-encoded; for this XML encoding, there are a variety of online encoders that you can use. To avoid encoding the payload, you can use CDATA if your MDM supports it. For more information, see [CDATA Sections](http://www.w3.org/TR/REC-xml/#sec-cdata-sect). + + +ADMX Info: +- GP English name: *Turn off background refresh of Group Policy* +- GP name: *DisableBackgroundPolicy* +- GP path: *System\Group Policy* +- GP ADMX file name: *GroupPolicy.admx* + + + +
    + + +**ADMX_GroupPolicy/DisableLGPOProcessing** + + + + + + + + + + + + + + + + + + + + + + + + + + + +
    Windows EditionSupported?
    Homecross mark
    Procross mark
    Businesscross mark
    Enterprisecheck mark
    Educationcross mark
    + + +
    + + +[Scope](./policy-configuration-service-provider.md#policy-scope): + +> [!div class = "checklist"] +> * Device + +
    + + + +Available in the latest Windows 10 Insider Preview Build. This policy setting prevents Local Group Policy Objects (Local GPOs) from being applied. + +By default, the policy settings in Local GPOs are applied before any domain-based GPO policy settings. These policy settings can apply to both users and the local computer. You can disable the processing and application of all Local GPOs to ensure that only domain-based GPOs are applied. + +If you enable this policy setting, the system does not process and apply any Local GPOs. + +If you disable or do not configure this policy setting, Local GPOs continue to be applied. + +> [!NOTE] +> For computers joined to a domain, it is strongly recommended that you only configure this policy setting in domain-based GPOs. This policy setting will be ignored on computers that are joined to a workgroup. + + +> [!TIP] +> This is an ADMX-backed policy and requires a special SyncML format to enable or disable. For details, see [Understanding ADMX-backed policies](./understanding-admx-backed-policies.md). +> +> You must specify the data type in the SyncML as <Format>chr</Format>. For an example SyncML, refer to [Enabling a policy](./understanding-admx-backed-policies.md#enabling-a-policy). +> +> The payload of the SyncML must be XML-encoded; for this XML encoding, there are a variety of online encoders that you can use. To avoid encoding the payload, you can use CDATA if your MDM supports it. For more information, see [CDATA Sections](http://www.w3.org/TR/REC-xml/#sec-cdata-sect). + + +ADMX Info: +- GP English name: *Turn off Local Group Policy Objects processing* +- GP name: *DisableLGPOProcessing* +- GP path: *System\Group Policy* +- GP ADMX file name: *GroupPolicy.admx* + + + +
    + + +**ADMX_GroupPolicy/DisableUsersFromMachGP** + + + + + + + + + + + + + + + + + + + + + + + + + + + +
    Windows EditionSupported?
    Homecross mark
    Procross mark
    Businesscross mark
    Enterprisecheck mark
    Educationcross mark
    + + +
    + + +[Scope](./policy-configuration-service-provider.md#policy-scope): + +> [!div class = "checklist"] +> * Device + +
    + + + +Available in the latest Windows 10 Insider Preview Build. This policy setting allows you to control a user's ability to invoke a computer policy refresh. + +If you enable this policy setting, users are not able to invoke a refresh of computer policy. Computer policy will still be applied at startup or when an official policy refresh occurs. + +If you disable or do not configure this policy setting, the default behavior applies. By default, computer policy is applied when the computer starts up. It also applies at a specified refresh interval or when manually invoked by the user. + +Note: This policy setting applies only to non-administrators. Administrators can still invoke a refresh of computer policy at any time, no matter how this policy setting is configured. + +Also, see the "Set Group Policy refresh interval for computers" policy setting to change the policy refresh interval. + +> [!NOTE] +> If you make changes to this policy setting, you must restart your computer for it to take effect. + + +> [!TIP] +> This is an ADMX-backed policy and requires a special SyncML format to enable or disable. For details, see [Understanding ADMX-backed policies](./understanding-admx-backed-policies.md). +> +> You must specify the data type in the SyncML as <Format>chr</Format>. For an example SyncML, refer to [Enabling a policy](./understanding-admx-backed-policies.md#enabling-a-policy). +> +> The payload of the SyncML must be XML-encoded; for this XML encoding, there are a variety of online encoders that you can use. To avoid encoding the payload, you can use CDATA if your MDM supports it. For more information, see [CDATA Sections](http://www.w3.org/TR/REC-xml/#sec-cdata-sect). + + +ADMX Info: +- GP English name: *Remove users' ability to invoke machine policy refresh* +- GP name: *DisableUsersFromMachGP* +- GP path: *System\Group Policy* +- GP ADMX file name: *GroupPolicy.admx* + + + +
    + + +**ADMX_GroupPolicy/EnableCDP** + + + + + + + + + + + + + + + + + + + + + + + + + + + +
    Windows EditionSupported?
    Homecross mark
    Procross mark
    Businesscross mark
    Enterprisecheck mark
    Educationcross mark
    + + +
    + + +[Scope](./policy-configuration-service-provider.md#policy-scope): + +> [!div class = "checklist"] +> * Device + +
    + + + +Available in the latest Windows 10 Insider Preview Build. This policy setting determines whether the Windows device is allowed to participate in cross-device experiences (continue experiences). + +If you enable this policy setting, the Windows device is discoverable by other Windows devices that belong to the same user, and can participate in cross-device experiences. + +If you disable this policy setting, the Windows device is not discoverable by other devices, and cannot participate in cross-device experiences. + +If you do not configure this policy setting, the default behavior depends on the Windows edition. Changes to this policy take effect on reboot. + + +> [!TIP] +> This is an ADMX-backed policy and requires a special SyncML format to enable or disable. For details, see [Understanding ADMX-backed policies](./understanding-admx-backed-policies.md). +> +> You must specify the data type in the SyncML as <Format>chr</Format>. For an example SyncML, refer to [Enabling a policy](./understanding-admx-backed-policies.md#enabling-a-policy). +> +> The payload of the SyncML must be XML-encoded; for this XML encoding, there are a variety of online encoders that you can use. To avoid encoding the payload, you can use CDATA if your MDM supports it. For more information, see [CDATA Sections](http://www.w3.org/TR/REC-xml/#sec-cdata-sect). + + +ADMX Info: +- GP English name: *Continue experiences on this device* +- GP name: *EnableCDP* +- GP path: *System\Group Policy* +- GP ADMX file name: *GroupPolicy.admx* + + + +
    + + +**ADMX_GroupPolicy/EnableLogonOptimization** + + + + + + + + + + + + + + + + + + + + + + + + + + + +
    Windows EditionSupported?
    Homecross mark
    Procross mark
    Businesscross mark
    Enterprisecheck mark
    Educationcross mark
    + + +
    + + +[Scope](./policy-configuration-service-provider.md#policy-scope): + +> [!div class = "checklist"] +> * Device + +
    + + + +Available in the latest Windows 10 Insider Preview Build. This policy setting allows you to configure Group Policy caching behavior. + +If you enable or do not configure this policy setting, Group Policy caches policy information after every background processing session. This cache saves applicable GPOs and the settings contained within them. When Group Policy runs in synchronous foreground mode, it refers to this cache, which enables it to run faster. When the cache is read, Group Policy attempts to contact a logon domain controller to determine the link speed. When Group Policy runs in background mode or asynchronous foreground mode, it continues to download the latest version of the policy information, and it uses a bandwidth estimate to determine slow link thresholds. (See the “Configure Group Policy Slow Link Detection” policy setting to configure asynchronous foreground behavior.) + +The slow link value that is defined in this policy setting determines how long Group Policy will wait for a response from the domain controller before reporting the link speed as slow. The default is 500 milliseconds. + +The timeout value that is defined in this policy setting determines how long Group Policy will wait for a response from the domain controller before determining that there is no network connectivity. This stops the current Group Policy processing. Group Policy will run in the background the next time a connection to a domain controller is established. Setting this value too high might result in longer waits for the user at boot or logon. The default is 5000 milliseconds. + +If you disable this policy setting, the Group Policy client will not cache applicable GPOs or settings that are contained within the GPOs. When Group Policy runs synchronously, it downloads the latest version of the policy from the network and uses bandwidth estimates to determine slow link thresholds. (See the “Configure Group Policy Slow Link Detection” policy setting to configure asynchronous foreground behavior.) + + +> [!TIP] +> This is an ADMX-backed policy and requires a special SyncML format to enable or disable. For details, see [Understanding ADMX-backed policies](./understanding-admx-backed-policies.md). +> +> You must specify the data type in the SyncML as <Format>chr</Format>. For an example SyncML, refer to [Enabling a policy](./understanding-admx-backed-policies.md#enabling-a-policy). +> +> The payload of the SyncML must be XML-encoded; for this XML encoding, there are a variety of online encoders that you can use. To avoid encoding the payload, you can use CDATA if your MDM supports it. For more information, see [CDATA Sections](http://www.w3.org/TR/REC-xml/#sec-cdata-sect). + + +ADMX Info: +- GP English name: *Configure Group Policy Caching* +- GP name: *EnableLogonOptimization* +- GP path: *System\Group Policy* +- GP ADMX file name: *GroupPolicy.admx* + + + +
    + + +**ADMX_GroupPolicy/EnableLogonOptimizationOnServerSKU** + + + + + + + + + + + + + + + + + + + + + + + + + + + +
    Windows EditionSupported?
    Homecross mark
    Procross mark
    Businesscross mark
    Enterprisecheck mark
    Educationcross mark
    + + +
    + + +[Scope](./policy-configuration-service-provider.md#policy-scope): + +> [!div class = "checklist"] +> * Device + +
    + + + +Available in the latest Windows 10 Insider Preview Build. This policy setting allows you to configure Group Policy caching behavior on Windows Server machines. + +If you enable this policy setting, Group Policy caches policy information after every background processing session. This cache saves applicable GPOs and the settings contained within them. When Group Policy runs in synchronous foreground mode, it refers to this cache, which enables it to run faster. When the cache is read, Group Policy attempts to contact a logon domain controller to determine the link speed. When Group Policy runs in background mode or asynchronous foreground mode, it continues to download the latest version of the policy information, and it uses a bandwidth estimate to determine slow link thresholds. (See the “Configure Group Policy Slow Link Detection” policy setting to configure asynchronous foreground behavior.) + +The slow link value that is defined in this policy setting determines how long Group Policy will wait for a response from the domain controller before reporting the link speed as slow. The default is 500 milliseconds. + +The timeout value that is defined in this policy setting determines how long Group Policy will wait for a response from the domain controller before determining that there is no network connectivity. This stops the current Group Policy processing. Group Policy will run in the background the next time a connection to a domain controller is established. Setting this value too high might result in longer waits for the user at boot or logon. The default is 5000 milliseconds. + +If you disable or do not configure this policy setting, the Group Policy client will not cache applicable GPOs or settings that are contained within the GPOs. When Group Policy runs synchronously, it downloads the latest version of the policy from the network and uses bandwidth estimates to determine slow link thresholds. (See the “Configure Group Policy Slow Link Detection” policy setting to configure asynchronous foreground behavior.) + + +> [!TIP] +> This is an ADMX-backed policy and requires a special SyncML format to enable or disable. For details, see [Understanding ADMX-backed policies](./understanding-admx-backed-policies.md). +> +> You must specify the data type in the SyncML as <Format>chr</Format>. For an example SyncML, refer to [Enabling a policy](./understanding-admx-backed-policies.md#enabling-a-policy). +> +> The payload of the SyncML must be XML-encoded; for this XML encoding, there are a variety of online encoders that you can use. To avoid encoding the payload, you can use CDATA if your MDM supports it. For more information, see [CDATA Sections](http://www.w3.org/TR/REC-xml/#sec-cdata-sect). + + +ADMX Info: +- GP English name: *Enable Group Policy Caching for Servers* +- GP name: *EnableLogonOptimizationOnServerSKU* +- GP path: *System\Group Policy* +- GP ADMX file name: *GroupPolicy.admx* + + + +
    + + +**ADMX_GroupPolicy/EnableMMX** + + + + + + + + + + + + + + + + + + + + + + + + + + + +
    Windows EditionSupported?
    Homecross mark
    Procross mark
    Businesscross mark
    Enterprisecheck mark
    Educationcross mark
    + + +
    + + +[Scope](./policy-configuration-service-provider.md#policy-scope): + +> [!div class = "checklist"] +> * Device + +
    + + + +Available in the latest Windows 10 Insider Preview Build. This policy allows IT admins to turn off the ability to Link a Phone with a PC to continue reading, emailing and other tasks that requires linking between Phone and PC. + +If you enable this policy setting, the Windows device will be able to enroll in Phone-PC linking functionality and participate in Continue on PC experiences. + +If you disable this policy setting, the Windows device is not allowed to be linked to Phones, will remove itself from the device list of any linked Phones, and cannot participate in Continue on PC experiences. + +If you do not configure this policy setting, the default behavior depends on the Windows edition. Changes to this policy take effect on reboot. + + +> [!TIP] +> This is an ADMX-backed policy and requires a special SyncML format to enable or disable. For details, see [Understanding ADMX-backed policies](./understanding-admx-backed-policies.md). +> +> You must specify the data type in the SyncML as <Format>chr</Format>. For an example SyncML, refer to [Enabling a policy](./understanding-admx-backed-policies.md#enabling-a-policy). +> +> The payload of the SyncML must be XML-encoded; for this XML encoding, there are a variety of online encoders that you can use. To avoid encoding the payload, you can use CDATA if your MDM supports it. For more information, see [CDATA Sections](http://www.w3.org/TR/REC-xml/#sec-cdata-sect). + + +ADMX Info: +- GP English name: *Phone-PC linking on this device* +- GP name: *EnableMMX* +- GP path: *System\Group Policy* +- GP ADMX file name: *GroupPolicy.admx* + + + +
    + + +**ADMX_GroupPolicy/EnforcePoliciesOnly** + + + + + + + + + + + + + + + + + + + + + + + + + + + +
    Windows EditionSupported?
    Homecross mark
    Procross mark
    Businesscross mark
    Enterprisecheck mark
    Educationcross mark
    + + +
    + + +[Scope](./policy-configuration-service-provider.md#policy-scope): + +> [!div class = "checklist"] +> * User + +
    + + + +Available in the latest Windows 10 Insider Preview Build. This policy setting prevents administrators from viewing or using Group Policy preferences. + +A Group Policy administration (.adm) file can contain both true settings and preferences. True settings, which are fully supported by Group Policy, must use registry entries in the Software\Policies or Software\Microsoft\Windows\CurrentVersion\Policies registry subkeys. Preferences, which are not fully supported, use registry entries in other subkeys. + +If you enable this policy setting, the "Show Policies Only" command is turned on, and administrators cannot turn it off. As a result, Group Policy Object Editor displays only true settings; preferences do not appear. + +If you disable or do not configure this policy setting, the "Show Policies Only" command is turned on by default, but administrators can view preferences by turning off the "Show Policies Only" command. + +> [!NOTE] +> To find the "Show Policies Only" command, in Group Policy Object Editor, click the Administrative Templates folder (either one), right-click the same folder, and then point to "View." + +In Group Policy Object Editor, preferences have a red icon to distinguish them from true settings, which have a blue icon. + + +> [!TIP] +> This is an ADMX-backed policy and requires a special SyncML format to enable or disable. For details, see [Understanding ADMX-backed policies](./understanding-admx-backed-policies.md). +> +> You must specify the data type in the SyncML as <Format>chr</Format>. For an example SyncML, refer to [Enabling a policy](./understanding-admx-backed-policies.md#enabling-a-policy). +> +> The payload of the SyncML must be XML-encoded; for this XML encoding, there are a variety of online encoders that you can use. To avoid encoding the payload, you can use CDATA if your MDM supports it. For more information, see [CDATA Sections](http://www.w3.org/TR/REC-xml/#sec-cdata-sect). + + +ADMX Info: +- GP English name: *Enforce Show Policies Only* +- GP name: *EnforcePoliciesOnly* +- GP path: *System\Group Policy* +- GP ADMX file name: *GroupPolicy.admx* + + + +
    + + +**ADMX_GroupPolicy/FontMitigation** + + + + + + + + + + + + + + + + + + + + + + + + + + + +
    Windows EditionSupported?
    Homecross mark
    Procross mark
    Businesscross mark
    Enterprisecheck mark
    Educationcross mark
    + + +
    + + +[Scope](./policy-configuration-service-provider.md#policy-scope): + +> [!div class = "checklist"] +> * Device + +
    + + + +Available in the latest Windows 10 Insider Preview Build. This security feature provides a global setting to prevent programs from loading untrusted fonts. Untrusted fonts are any font installed outside of the %windir%\Fonts directory. + +This feature can be configured to be in 3 modes: On, Off, and Audit. By default, it is Off and no fonts are blocked. If you aren't quite ready to deploy this feature into your organization, you can run it in Audit mode to see if blocking untrusted fonts causes any usability or compatibility issues. + + +> [!TIP] +> This is an ADMX-backed policy and requires a special SyncML format to enable or disable. For details, see [Understanding ADMX-backed policies](./understanding-admx-backed-policies.md). +> +> You must specify the data type in the SyncML as <Format>chr</Format>. For an example SyncML, refer to [Enabling a policy](./understanding-admx-backed-policies.md#enabling-a-policy). +> +> The payload of the SyncML must be XML-encoded; for this XML encoding, there are a variety of online encoders that you can use. To avoid encoding the payload, you can use CDATA if your MDM supports it. For more information, see [CDATA Sections](http://www.w3.org/TR/REC-xml/#sec-cdata-sect). + + +ADMX Info: +- GP English name: *Untrusted Font Blocking* +- GP name: *DisableUsersFromMachGP* +- GP path: *System\Mitigation Options* +- GP ADMX file name: *GroupPolicy.admx* + + + +
    + + +**ADMX_GroupPolicy/GPDCOptions** + + + + + + + + + + + + + + + + + + + + + + + + + + + +
    Windows EditionSupported?
    Homecross mark
    Procross mark
    Businesscross mark
    Enterprisecheck mark
    Educationcross mark
    + + +
    + + +[Scope](./policy-configuration-service-provider.md#policy-scope): + +> [!div class = "checklist"] +> * User + +
    + + + +Available in the latest Windows 10 Insider Preview Build. This policy setting determines which domain controller the Group Policy Object Editor snap-in uses. + +If you enable this setting, you can which domain controller is used according to these options: + +"Use the Primary Domain Controller" indicates that the Group Policy Object Editor snap-in reads and writes changes to the domain controller designated as the PDC Operations Master for the domain. + +"Inherit from Active Directory Snap-ins" indicates that the Group Policy Object Editor snap-in reads and writes changes to the domain controller that Active Directory Users and Computers or Active Directory Sites and Services snap-ins use. + +"Use any available domain controller" indicates that the Group Policy Object Editor snap-in can read and write changes to any available domain controller. + +If you disable this setting or do not configure it, the Group Policy Object Editor snap-in uses the domain controller designated as the PDC Operations Master for the domain. + +> [!NOTE] +> To change the PDC Operations Master for a domain, in Active Directory Users and Computers, right-click a domain, and then click "Operations Masters." + + +> [!TIP] +> This is an ADMX-backed policy and requires a special SyncML format to enable or disable. For details, see [Understanding ADMX-backed policies](./understanding-admx-backed-policies.md). +> +> You must specify the data type in the SyncML as <Format>chr</Format>. For an example SyncML, refer to [Enabling a policy](./understanding-admx-backed-policies.md#enabling-a-policy). +> +> The payload of the SyncML must be XML-encoded; for this XML encoding, there are a variety of online encoders that you can use. To avoid encoding the payload, you can use CDATA if your MDM supports it. For more information, see [CDATA Sections](http://www.w3.org/TR/REC-xml/#sec-cdata-sect). + + +ADMX Info: +- GP English name: *Configure Group Policy domain controller selection* +- GP name: *GPDCOptions* +- GP path: *System\Group Policy* +- GP ADMX file name: *GroupPolicy.admx* + + + +
    + + +**ADMX_GroupPolicy/GPTransferRate_1** + + + + + + + + + + + + + + + + + + + + + + + + + + + +
    Windows EditionSupported?
    Homecross mark
    Procross mark
    Businesscross mark
    Enterprisecheck mark
    Educationcross mark
    + + +
    + + +[Scope](./policy-configuration-service-provider.md#policy-scope): + +> [!div class = "checklist"] +> * User + +
    + + + +Available in the latest Windows 10 Insider Preview Build. This policy setting defines a slow connection for purposes of applying and updating Group Policy. + +If the rate at which data is transferred from the domain controller providing a policy update to the computers in this group is slower than the rate specified by this setting, the system considers the connection to be slow. + +The system's response to a slow policy connection varies among policies. The program implementing the policy can specify the response to a slow link. Also, the policy processing settings in this folder lets you override the programs' specified responses to slow links. + +If you enable this setting, you can, in the "Connection speed" box, type a decimal number between 0 and 4,294,967,200, indicating a transfer rate in kilobits per second. Any connection slower than this rate is considered to be slow. If you type 0, all connections are considered to be fast. + +If you disable this setting or do not configure it, the system uses the default value of 500 kilobits per second. + +This setting appears in the Computer Configuration and User Configuration folders. The setting in Computer Configuration defines a slow link for policies in the Computer Configuration folder. The setting in User Configuration defines a slow link for settings in the User Configuration folder. + +Also, see the "Do not detect slow network connections" and related policies in Computer Configuration\Administrative Templates\System\User Profile. Note: If the profile server has IP connectivity, the connection speed setting is used. If the profile server does not have IP connectivity, the SMB timing is used. + + +> [!TIP] +> This is an ADMX-backed policy and requires a special SyncML format to enable or disable. For details, see [Understanding ADMX-backed policies](./understanding-admx-backed-policies.md). +> +> You must specify the data type in the SyncML as <Format>chr</Format>. For an example SyncML, refer to [Enabling a policy](./understanding-admx-backed-policies.md#enabling-a-policy). +> +> The payload of the SyncML must be XML-encoded; for this XML encoding, there are a variety of online encoders that you can use. To avoid encoding the payload, you can use CDATA if your MDM supports it. For more information, see [CDATA Sections](http://www.w3.org/TR/REC-xml/#sec-cdata-sect). + + +ADMX Info: +- GP English name: *Configure Group Policy slow link detection* +- GP name: *GPTransferRate_1* +- GP path: *System\Group Policy* +- GP ADMX file name: *GroupPolicy.admx* + + + +
    + + +**ADMX_GroupPolicy/GPTransferRate_2** + + + + + + + + + + + + + + + + + + + + + + + + + + + +
    Windows EditionSupported?
    Homecross mark
    Procross mark
    Businesscross mark
    Enterprisecheck mark
    Educationcross mark
    + + +
    + + +[Scope](./policy-configuration-service-provider.md#policy-scope): + +> [!div class = "checklist"] +> * Device + +
    + + + +Available in the latest Windows 10 Insider Preview Build. This policy setting defines a slow connection for purposes of applying and updating Group Policy. + +If the rate at which data is transferred from the domain controller providing a policy update to the computers in this group is slower than the rate specified by this setting, the system considers the connection to be slow. + +The system's response to a slow policy connection varies among policies. The program implementing the policy can specify the response to a slow link. Also, the policy processing settings in this folder lets you override the programs' specified responses to slow links. + +If you enable this setting, you can, in the "Connection speed" box, type a decimal number between 0 and 4,294,967,200, indicating a transfer rate in kilobits per second. Any connection slower than this rate is considered to be slow. If you type 0, all connections are considered to be fast. + +If you disable this setting or do not configure it, the system uses the default value of 500 kilobits per second. + +This setting appears in the Computer Configuration and User Configuration folders. The setting in Computer Configuration defines a slow link for policies in the Computer Configuration folder. The setting in User Configuration defines a slow link for settings in the User Configuration folder. + +Also, see the "Do not detect slow network connections" and related policies in Computer Configuration\Administrative Templates\System\User Profile. Note: If the profile server has IP connectivity, the connection speed setting is used. If the profile server does not have IP connectivity, the SMB timing is used. + + +> [!TIP] +> This is an ADMX-backed policy and requires a special SyncML format to enable or disable. For details, see [Understanding ADMX-backed policies](./understanding-admx-backed-policies.md). +> +> You must specify the data type in the SyncML as <Format>chr</Format>. For an example SyncML, refer to [Enabling a policy](./understanding-admx-backed-policies.md#enabling-a-policy). +> +> The payload of the SyncML must be XML-encoded; for this XML encoding, there are a variety of online encoders that you can use. To avoid encoding the payload, you can use CDATA if your MDM supports it. For more information, see [CDATA Sections](http://www.w3.org/TR/REC-xml/#sec-cdata-sect). + + +ADMX Info: +- GP English name: *Configure Group Policy slow link detection* +- GP name: *GPTransferRate_2* +- GP path: *System\Group Policy* +- GP ADMX file name: *GroupPolicy.admx* + + + +
    + + +**ADMX_GroupPolicy/GroupPolicyRefreshRate** + + + + + + + + + + + + + + + + + + + + + + + + + + + +
    Windows EditionSupported?
    Homecross mark
    Procross mark
    Businesscross mark
    Enterprisecheck mark
    Educationcross mark
    + + +
    + + +[Scope](./policy-configuration-service-provider.md#policy-scope): + +> [!div class = "checklist"] +> * Device + +
    + + + +Available in the latest Windows 10 Insider Preview Build. This policy setting specifies how often Group Policy for computers is updated while the computer is in use (in the background). This setting specifies a background update rate only for Group Policies in the Computer Configuration folder. + +In addition to background updates, Group Policy for the computer is always updated when the system starts. + +By default, computer Group Policy is updated in the background every 90 minutes, with a random offset of 0 to 30 minutes. + +If you enable this setting, you can specify an update rate from 0 to 64,800 minutes (45 days). If you select 0 minutes, the computer tries to update Group Policy every 7 seconds. However, because updates might interfere with users' work and increase network traffic, very short update intervals are not appropriate for most installations. + +If you disable this setting, Group Policy is updated every 90 minutes (the default). To specify that Group Policy should never be updated while the computer is in use, select the "Turn off background refresh of Group Policy" policy. + +The Set Group Policy refresh interval for computers policy also lets you specify how much the actual update interval varies. To prevent clients with the same update interval from requesting updates simultaneously, the system varies the update interval for each client by a random number of minutes. The number you type in the random time box sets the upper limit for the range of variance. For example, if you type 30 minutes, the system selects a variance of 0 to 30 minutes. Typing a large number establishes a broad range and makes it less likely that client requests overlap. However, updates might be delayed significantly. + +This setting establishes the update rate for computer Group Policy. To set an update rate for user policies, use the "Set Group Policy refresh interval for users" setting (located in User Configuration\Administrative Templates\System\Group Policy). + +This setting is only used when the "Turn off background refresh of Group Policy" setting is not enabled. + +> [!NOTE] +> Consider notifying users that their policy is updated periodically so that they recognize the signs of a policy update. When Group Policy is updated, the Windows desktop is refreshed; it flickers briefly and closes open menus. Also, restrictions imposed by Group Policies, such as those that limit the programs users can run, might interfere with tasks in progress. + + +> [!TIP] +> This is an ADMX-backed policy and requires a special SyncML format to enable or disable. For details, see [Understanding ADMX-backed policies](./understanding-admx-backed-policies.md). +> +> You must specify the data type in the SyncML as <Format>chr</Format>. For an example SyncML, refer to [Enabling a policy](./understanding-admx-backed-policies.md#enabling-a-policy). +> +> The payload of the SyncML must be XML-encoded; for this XML encoding, there are a variety of online encoders that you can use. To avoid encoding the payload, you can use CDATA if your MDM supports it. For more information, see [CDATA Sections](http://www.w3.org/TR/REC-xml/#sec-cdata-sect). + + +ADMX Info: +- GP English name: *Set Group Policy refresh interval for computers* +- GP name: *GroupPolicyRefreshRate* +- GP path: *System\Group Policy* +- GP ADMX file name: *GroupPolicy.admx* + + + +
    + + +**ADMX_GroupPolicy/GroupPolicyRefreshRateDC** + + + + + + + + + + + + + + + + + + + + + + + + + + + +
    Windows EditionSupported?
    Homecross mark
    Procross mark
    Businesscross mark
    Enterprisecheck mark
    Educationcross mark
    + + +
    + + +[Scope](./policy-configuration-service-provider.md#policy-scope): + +> [!div class = "checklist"] +> * Device + +
    + + + +Available in the latest Windows 10 Insider Preview Build. This policy setting specifies how often Group Policy is updated on domain controllers while they are running (in the background). The updates specified by this setting occur in addition to updates performed when the system starts. + +By default, Group Policy on the domain controllers is updated every five minutes. + +If you enable this setting, you can specify an update rate from 0 to 64,800 minutes (45 days). If you select 0 minutes, the domain controller tries to update Group Policy every 7 seconds. However, because updates might interfere with users' work and increase network traffic, very short update intervals are not appropriate for most installations. + +If you disable or do not configure this setting, the domain controller updates Group Policy every 5 minutes (the default). To specify that Group Policies for users should never be updated while the computer is in use, select the "Turn off background refresh of Group Policy" setting. + +This setting also lets you specify how much the actual update interval varies. To prevent domain controllers with the same update interval from requesting updates simultaneously, the system varies the update interval for each controller by a random number of minutes. The number you type in the random time box sets the upper limit for the range of variance. For example, if you type 30 minutes, the system selects a variance of 0 to 30 minutes. Typing a large number establishes a broad range and makes it less likely that update requests overlap. However, updates might be delayed significantly. + +> [!NOTE] +> This setting is used only when you are establishing policy for a domain, site, organizational unit (OU), or customized group. If you are establishing policy for a local computer only, the system ignores this setting. + + +> [!TIP] +> This is an ADMX-backed policy and requires a special SyncML format to enable or disable. For details, see [Understanding ADMX-backed policies](./understanding-admx-backed-policies.md). +> +> You must specify the data type in the SyncML as <Format>chr</Format>. For an example SyncML, refer to [Enabling a policy](./understanding-admx-backed-policies.md#enabling-a-policy). +> +> The payload of the SyncML must be XML-encoded; for this XML encoding, there are a variety of online encoders that you can use. To avoid encoding the payload, you can use CDATA if your MDM supports it. For more information, see [CDATA Sections](http://www.w3.org/TR/REC-xml/#sec-cdata-sect). + + +ADMX Info: +- GP English name: *Set Group Policy refresh interval for domain controllers* +- GP name: *GroupPolicyRefreshRateDC* +- GP path: *System\Group Policy* +- GP ADMX file name: *GroupPolicy.admx* + + + +
    + + +**ADMX_GroupPolicy/GroupPolicyRefreshRateUser** + + + + + + + + + + + + + + + + + + + + + + + + + + + +
    Windows EditionSupported?
    Homecross mark
    Procross mark
    Businesscross mark
    Enterprisecheck mark
    Educationcross mark
    + + +
    + + +[Scope](./policy-configuration-service-provider.md#policy-scope): + +> [!div class = "checklist"] +> * User + +
    + + + +Available in the latest Windows 10 Insider Preview Build. This policy setting specifies how often Group Policy for users is updated while the computer is in use (in the background). This setting specifies a background update rate only for the Group Policies in the User Configuration folder. + +In addition to background updates, Group Policy for users is always updated when users log on. + +By default, user Group Policy is updated in the background every 90 minutes, with a random offset of 0 to 30 minutes. + +If you enable this setting, you can specify an update rate from 0 to 64,800 minutes (45 days). If you select 0 minutes, the computer tries to update user Group Policy every 7 seconds. However, because updates might interfere with users' work and increase network traffic, very short update intervals are not appropriate for most installations. + +If you disable this setting, user Group Policy is updated every 90 minutes (the default). To specify that Group Policy for users should never be updated while the computer is in use, select the "Turn off background refresh of Group Policy" setting. + +This setting also lets you specify how much the actual update interval varies. To prevent clients with the same update interval from requesting updates simultaneously, the system varies the update interval for each client by a random number of minutes. The number you type in the random time box sets the upper limit for the range of variance. For example, if you type 30 minutes, the system selects a variance of 0 to 30 minutes. Typing a large number establishes a broad range and makes it less likely that client requests overlap. However, updates might be delayed significantly. + +> [!IMPORTANT] +> If the "Turn off background refresh of Group Policy" setting is enabled, this setting is ignored. + +> [!NOTE] +> This setting establishes the update rate for user Group Policies. To set an update rate for computer Group Policies, use the "Group Policy refresh interval for computers" setting (located in Computer Configuration\Administrative Templates\System\Group Policy). + +> [!TIP] +> Consider notifying users that their policy is updated periodically so that they recognize the signs of a policy update. When Group Policy is updated, the Windows desktop is refreshed; it flickers briefly and closes open menus. Also, restrictions imposed by Group Policies, such as those that limit the programs a user can run, might interfere with tasks in progress. + + +> [!TIP] +> This is an ADMX-backed policy and requires a special SyncML format to enable or disable. For details, see [Understanding ADMX-backed policies](./understanding-admx-backed-policies.md). +> +> You must specify the data type in the SyncML as <Format>chr</Format>. For an example SyncML, refer to [Enabling a policy](./understanding-admx-backed-policies.md#enabling-a-policy). +> +> The payload of the SyncML must be XML-encoded; for this XML encoding, there are a variety of online encoders that you can use. To avoid encoding the payload, you can use CDATA if your MDM supports it. For more information, see [CDATA Sections](http://www.w3.org/TR/REC-xml/#sec-cdata-sect). + + +ADMX Info: +- GP English name: *Set Group Policy refresh interval for users* +- GP name: *GroupPolicyRefreshRateUser* +- GP path: *System\Group Policy* +- GP ADMX file name: *GroupPolicy.admx* + + + +
    + + +**ADMX_GroupPolicy/LogonScriptDelay** + + + + + + + + + + + + + + + + + + + + + + + + + + + +
    Windows EditionSupported?
    Homecross mark
    Procross mark
    Businesscross mark
    Enterprisecheck mark
    Educationcross mark
    + + +
    + + +[Scope](./policy-configuration-service-provider.md#policy-scope): + +> [!div class = "checklist"] +> * Device + +
    + + + +Available in the latest Windows 10 Insider Preview Build. Enter “0” to disable Logon Script Delay. + +This policy setting allows you to configure how long the Group Policy client waits after logon before running scripts. + +By default, the Group Policy client waits five minutes before running logon scripts. This helps create a responsive desktop environment by preventing disk contention. + +If you enable this policy setting, Group Policy will wait for the specified amount of time before running logon scripts. + +If you disable this policy setting, Group Policy will run scripts immediately after logon. + +If you do not configure this policy setting, Group Policy will wait five minutes before running logon scripts. + + +> [!TIP] +> This is an ADMX-backed policy and requires a special SyncML format to enable or disable. For details, see [Understanding ADMX-backed policies](./understanding-admx-backed-policies.md). +> +> You must specify the data type in the SyncML as <Format>chr</Format>. For an example SyncML, refer to [Enabling a policy](./understanding-admx-backed-policies.md#enabling-a-policy). +> +> The payload of the SyncML must be XML-encoded; for this XML encoding, there are a variety of online encoders that you can use. To avoid encoding the payload, you can use CDATA if your MDM supports it. For more information, see [CDATA Sections](http://www.w3.org/TR/REC-xml/#sec-cdata-sect). + + +ADMX Info: +- GP English name: *Configure Logon Script Delay* +- GP name: *LogonScriptDelay* +- GP path: *System\Group Policy* +- GP ADMX file name: *GroupPolicy.admx* + + + +
    + + +**ADMX_GroupPolicy/NewGPODisplayName** + + + + + + + + + + + + + + + + + + + + + + + + + + + +
    Windows EditionSupported?
    Homecross mark
    Procross mark
    Businesscross mark
    Enterprisecheck mark
    Educationcross mark
    + + +
    + + +[Scope](./policy-configuration-service-provider.md#policy-scope): + +> [!div class = "checklist"] +> * User + +
    + + + +Available in the latest Windows 10 Insider Preview Build. This policy setting allows you to set the default display name for new Group Policy objects. + +This setting allows you to specify the default name for new Group Policy objects created from policy compliant Group Policy Management tools including the Group Policy tab in Active Directory tools and the GPO browser. + +The display name can contain environment variables and can be a maximum of 255 characters long. + +If this setting is Disabled or Not Configured, the default display name of New Group Policy object is used. + + +> [!TIP] +> This is an ADMX-backed policy and requires a special SyncML format to enable or disable. For details, see [Understanding ADMX-backed policies](./understanding-admx-backed-policies.md). +> +> You must specify the data type in the SyncML as <Format>chr</Format>. For an example SyncML, refer to [Enabling a policy](./understanding-admx-backed-policies.md#enabling-a-policy). +> +> The payload of the SyncML must be XML-encoded; for this XML encoding, there are a variety of online encoders that you can use. To avoid encoding the payload, you can use CDATA if your MDM supports it. For more information, see [CDATA Sections](http://www.w3.org/TR/REC-xml/#sec-cdata-sect). + + +ADMX Info: +- GP English name: *Set default name for new Group Policy objects* +- GP name: *NewGPODisplayName* +- GP path: *System\Group Policy* +- GP ADMX file name: *GroupPolicy.admx* + + + +
    + + +**ADMX_GroupPolicy/NewGPOLinksDisabled** + + + + + + + + + + + + + + + + + + + + + + + + + + + +
    Windows EditionSupported?
    Homecross mark
    Procross mark
    Businesscross mark
    Enterprisecheck mark
    Educationcross mark
    + + +
    + + +[Scope](./policy-configuration-service-provider.md#policy-scope): + +> [!div class = "checklist"] +> * User + +
    + + + +Available in the latest Windows 10 Insider Preview Build. This policy setting allows you to create new Group Policy object links in the disabled state. + +If you enable this setting, you can create all new Group Policy object links in the disabled state by default. After you configure and test the new object links by using a policy compliant Group Policy management tool such as Active Directory Users and Computers or Active Directory Sites and Services, you can enable the object links for use on the system. + +If you disable this setting or do not configure it, new Group Policy object links are created in the enabled state. If you do not want them to be effective until they are configured and tested, you must disable the object link. + + +> [!TIP] +> This is an ADMX-backed policy and requires a special SyncML format to enable or disable. For details, see [Understanding ADMX-backed policies](./understanding-admx-backed-policies.md). +> +> You must specify the data type in the SyncML as <Format>chr</Format>. For an example SyncML, refer to [Enabling a policy](./understanding-admx-backed-policies.md#enabling-a-policy). +> +> The payload of the SyncML must be XML-encoded; for this XML encoding, there are a variety of online encoders that you can use. To avoid encoding the payload, you can use CDATA if your MDM supports it. For more information, see [CDATA Sections](http://www.w3.org/TR/REC-xml/#sec-cdata-sect). + + +ADMX Info: +- GP English name: *Create new Group Policy Object links disabled by default* +- GP name: *NewGPOLinksDisabled* +- GP path: *System\Group Policy* +- GP ADMX file name: *GroupPolicy.admx* + + + +
    + + +**ADMX_GroupPolicy/OnlyUseLocalAdminFiles** + + + + + + + + + + + + + + + + + + + + + + + + + + + +
    Windows EditionSupported?
    Homecross mark
    Procross mark
    Businesscross mark
    Enterprisecheck mark
    Educationcross mark
    + + +
    + + +[Scope](./policy-configuration-service-provider.md#policy-scope): + +> [!div class = "checklist"] +> * Device + +
    + + + +Available in the latest Windows 10 Insider Preview Build. This policy setting lets you always use local ADM files for the Group Policy snap-in. + +By default, when you edit a Group Policy Object (GPO) using the Group Policy Object Editor snap-in, the ADM files are loaded from that GPO into the Group Policy Object Editor snap-in. This allows you to use the same version of the ADM files that were used to create the GPO while editing this GPO. + +This leads to the following behavior: + +- If you originally created the GPO with, for example, an English system, the GPO contains English ADM files. + +- If you later edit the GPO from a different-language system, you get the English ADM files as they were in the GPO. + +You can change this behavior by using this setting. + +If you enable this setting, the Group Policy Object Editor snap-in always uses local ADM files in your %windir%\inf directory when editing GPOs. + +This leads to the following behavior: + +- If you had originally created the GPO with an English system, and then you edit the GPO with a Japanese system, the Group Policy Object Editor snap-in uses the local Japanese ADM files, and you see the text in Japanese under Administrative Templates. + +If you disable or do not configure this setting, the Group Policy Object Editor snap-in always loads all ADM files from the actual GPO. + +> [!NOTE] +> If the ADMs that you require are not all available locally in your %windir%\inf directory, you might not be able to see all the settings that have been configured in the GPO that you are editing. + + +> [!TIP] +> This is an ADMX-backed policy and requires a special SyncML format to enable or disable. For details, see [Understanding ADMX-backed policies](./understanding-admx-backed-policies.md). +> +> You must specify the data type in the SyncML as <Format>chr</Format>. For an example SyncML, refer to [Enabling a policy](./understanding-admx-backed-policies.md#enabling-a-policy). +> +> The payload of the SyncML must be XML-encoded; for this XML encoding, there are a variety of online encoders that you can use. To avoid encoding the payload, you can use CDATA if your MDM supports it. For more information, see [CDATA Sections](http://www.w3.org/TR/REC-xml/#sec-cdata-sect). + + +ADMX Info: +- GP English name: *Always use local ADM files for Group Policy Object Editor* +- GP name: *OnlyUseLocalAdminFiles* +- GP path: *System\Group Policy* +- GP ADMX file name: *GroupPolicy.admx* + + + +
    + + +**ADMX_GroupPolicy/ProcessMitigationOptions** + + + + + + + + + + + + + + + + + + + + + + + + + + + +
    Windows EditionSupported?
    Homecross mark
    Procross mark
    Businesscross mark
    Enterprisecheck mark
    Educationcross mark
    + + +
    + + +[Scope](./policy-configuration-service-provider.md#policy-scope): + +> [!div class = "checklist"] +> * Device +> * User + +
    + + + +Available in the latest Windows 10 Insider Preview Build. This security feature provides a means to override individual process MitigationOptions settings. This can be used to enforce a number of security policies specific to applications. The application name is specified as the Value name, including extension. The Value is specified as a bit field with a series of flags in particular positions. Bits can be set to either 0 (setting is forced off), 1 (setting is forced on), or ? (setting retains its existing value prior to GPO evaluation). The recognized bit locations are: + +PROCESS_CREATION_MITIGATION_POLICY_DEP_ENABLE (0x00000001) +Enables data execution prevention (DEP) for the child process + +PROCESS_CREATION_MITIGATION_POLICY_DEP_ATL_THUNK_ENABLE (0x00000002) +Enables DEP-ATL thunk emulation for the child process. DEP-ATL thunk emulation causes the system to intercept NX faults that originate from the Active Template Library (ATL) thunk layer. + +PROCESS_CREATION_MITIGATION_POLICY_SEHOP_ENABLE (0x00000004) +Enables structured exception handler overwrite protection (SEHOP) for the child process. SEHOP blocks exploits that use the structured exception handler (SEH) overwrite technique. + +PROCESS_CREATION_MITIGATION_POLICY_FORCE_RELOCATE_IMAGES_ALWAYS_ON (0x00000100) +The force Address Space Layout Randomization (ASLR) policy forcibly rebases images that are not dynamic base compatible by acting as though an image base collision happened at load time. If relocations are required, images that do not have a base relocation section will not be loaded. + +PROCESS_CREATION_MITIGATION_POLICY_BOTTOM_UP_ASLR_ALWAYS_ON (0x00010000) +PROCESS_CREATION_MITIGATION_POLICY_BOTTOM_UP_ASLR_ALWAYS_OFF (0x00020000) +The bottom-up randomization policy, which includes stack randomization options, causes a random location to be used as the lowest user address. + +For instance, to enable PROCESS_CREATION_MITIGATION_POLICY_DEP_ENABLE and PROCESS_CREATION_MITIGATION_POLICY_FORCE_RELOCATE_IMAGES_ALWAYS_ON, disable PROCESS_CREATION_MITIGATION_POLICY_BOTTOM_UP_ASLR_ALWAYS_OFF, and to leave all other options at their default values, specify a value of: +???????????????0???????1???????1 + +Setting flags not specified here to any value other than ? results in undefined behavior. + + +> [!TIP] +> This is an ADMX-backed policy and requires a special SyncML format to enable or disable. For details, see [Understanding ADMX-backed policies](./understanding-admx-backed-policies.md). +> +> You must specify the data type in the SyncML as <Format>chr</Format>. For an example SyncML, refer to [Enabling a policy](./understanding-admx-backed-policies.md#enabling-a-policy). +> +> The payload of the SyncML must be XML-encoded; for this XML encoding, there are a variety of online encoders that you can use. To avoid encoding the payload, you can use CDATA if your MDM supports it. For more information, see [CDATA Sections](http://www.w3.org/TR/REC-xml/#sec-cdata-sect). + + +ADMX Info: +- GP English name: *Process Mitigation Options* +- GP name: *ProcessMitigationOptions* +- GP path: *System\Mitigation Options* +- GP ADMX file name: *GroupPolicy.admx* + + + +
    + + +**ADMX_GroupPolicy/RSoPLogging** + + + + + + + + + + + + + + + + + + + + + + + + + + + +
    Windows EditionSupported?
    Homecross mark
    Procross mark
    Businesscross mark
    Enterprisecheck mark
    Educationcross mark
    + + +
    + + +[Scope](./policy-configuration-service-provider.md#policy-scope): + +> [!div class = "checklist"] +> * Device + +
    + + + +Available in the latest Windows 10 Insider Preview Build. This setting allows you to enable or disable Resultant Set of Policy (RSoP) logging on a client computer. + +RSoP logs information on Group Policy settings that have been applied to the client. This information includes details such as which Group Policy Objects (GPO) were applied, where they came from, and the client-side extension settings that were included. + +If you enable this setting, RSoP logging is turned off. + +If you disable or do not configure this setting, RSoP logging is turned on. By default, RSoP logging is always on. + +> [!NOTE] +> To view the RSoP information logged on a client computer, you can use the RSoP snap-in in the Microsoft Management Console (MMC). + + +> [!TIP] +> This is an ADMX-backed policy and requires a special SyncML format to enable or disable. For details, see [Understanding ADMX-backed policies](./understanding-admx-backed-policies.md). +> +> You must specify the data type in the SyncML as <Format>chr</Format>. For an example SyncML, refer to [Enabling a policy](./understanding-admx-backed-policies.md#enabling-a-policy). +> +> The payload of the SyncML must be XML-encoded; for this XML encoding, there are a variety of online encoders that you can use. To avoid encoding the payload, you can use CDATA if your MDM supports it. For more information, see [CDATA Sections](http://www.w3.org/TR/REC-xml/#sec-cdata-sect). + + +ADMX Info: +- GP English name: *Turn off Resultant Set of Policy logging* +- GP name: *RSoPLogging* +- GP path: *System\Group Policy* +- GP ADMX file name: *GroupPolicy.admx* + + + +
    + + +**ADMX_GroupPolicy/ResetDfsClientInfoDuringRefreshPolicy** + + + + + + + + + + + + + + + + + + + + + + + + + + + +
    Windows EditionSupported?
    Homecross mark
    Procross mark
    Businesscross mark
    Enterprisecheck mark
    Educationcross mark
    + + +
    + + +[Scope](./policy-configuration-service-provider.md#policy-scope): + +> [!div class = "checklist"] +> * Device + +
    + + + +Available in the latest Windows 10 Insider Preview Build. Enabling this setting will cause the Group Policy Client to connect to the same domain controller for DFS shares as is being used for Active Directory. + + +> [!TIP] +> This is an ADMX-backed policy and requires a special SyncML format to enable or disable. For details, see [Understanding ADMX-backed policies](./understanding-admx-backed-policies.md). +> +> You must specify the data type in the SyncML as <Format>chr</Format>. For an example SyncML, refer to [Enabling a policy](./understanding-admx-backed-policies.md#enabling-a-policy). +> +> The payload of the SyncML must be XML-encoded; for this XML encoding, there are a variety of online encoders that you can use. To avoid encoding the payload, you can use CDATA if your MDM supports it. For more information, see [CDATA Sections](http://www.w3.org/TR/REC-xml/#sec-cdata-sect). + + +ADMX Info: +- GP English name: *Enable AD/DFS domain controller synchronization during policy refresh* +- GP name: *ResetDfsClientInfoDuringRefreshPolicy* +- GP path: *System\Group Policy* +- GP ADMX file name: *GroupPolicy.admx* + + + +
    + + +**ADMX_GroupPolicy/SlowLinkDefaultForDirectAccess** + + + + + + + + + + + + + + + + + + + + + + + + + + + +
    Windows EditionSupported?
    Homecross mark
    Procross mark
    Businesscross mark
    Enterprisecheck mark
    Educationcross mark
    + + +
    + + +[Scope](./policy-configuration-service-provider.md#policy-scope): + +> [!div class = "checklist"] +> * Device + +
    + + + +Available in the latest Windows 10 Insider Preview Build. This policy setting allows an administrator to define the Direct Access connection to be considered a fast network connection for the purposes of applying and updating Group Policy. + +When Group Policy detects the bandwidth speed of a Direct Access connection, the detection can sometimes fail to provide any bandwidth speed information. If Group Policy detects a bandwidth speed, Group Policy will follow the normal rules for evaluating if the Direct Access connection is a fast or slow network connection. If no bandwidth speed is detected, Group Policy will default to a slow network connection. This policy setting allows the administrator the option to override the default to slow network connection and instead default to using a fast network connection in the case that no network bandwidth speed is determined. + +> [!NOTE] +> When Group Policy detects a slow network connection, Group Policy will only process those client side extensions configured for processing across a slow link (slow network connection). + +If you enable this policy, when Group Policy cannot determine the bandwidth speed across Direct Access, Group Policy will evaluate the network connection as a fast link and process all client side extensions. + +If you disable this setting or do not configure it, Group Policy will evaluate the network connection as a slow link and process only those client side extensions configured to process over a slow link. + + +> [!TIP] +> This is an ADMX-backed policy and requires a special SyncML format to enable or disable. For details, see [Understanding ADMX-backed policies](./understanding-admx-backed-policies.md). +> +> You must specify the data type in the SyncML as <Format>chr</Format>. For an example SyncML, refer to [Enabling a policy](./understanding-admx-backed-policies.md#enabling-a-policy). +> +> The payload of the SyncML must be XML-encoded; for this XML encoding, there are a variety of online encoders that you can use. To avoid encoding the payload, you can use CDATA if your MDM supports it. For more information, see [CDATA Sections](http://www.w3.org/TR/REC-xml/#sec-cdata-sect). + + +ADMX Info: +- GP English name: *Configure Direct Access connections as a fast network connection* +- GP name: *SlowLinkDefaultForDirectAccess* +- GP path: *System\Group Policy* +- GP ADMX file name: *GroupPolicy.admx* + + + +
    + + +**ADMX_GroupPolicy/SlowlinkDefaultToAsync** + + + + + + + + + + + + + + + + + + + + + + + + + + + +
    Windows EditionSupported?
    Homecross mark
    Procross mark
    Businesscross mark
    Enterprisecheck mark
    Educationcross mark
    + + +
    + + +[Scope](./policy-configuration-service-provider.md#policy-scope): + +> [!div class = "checklist"] +> * Device + +
    + + + +Available in the latest Windows 10 Insider Preview Build. This policy directs Group Policy processing to skip processing any client side extension that requires synchronous processing (that is, whether computers wait for the network to be fully initialized during computer startup and user logon) when a slow network connection is detected. + +If you enable this policy setting, when a slow network connection is detected, Group Policy processing will always run in an asynchronous manner. +Client computers will not wait for the network to be fully initialized at startup and logon. Existing users will be logged on using cached credentials, +which will result in shorter logon times. Group Policy will be applied in the background after the network becomes available. +Note that because this is a background refresh, extensions requiring synchronous processing such as Software Installation, Folder Redirection +and Drive Maps preference extension will not be applied. + +> [!NOTE] +> There are two conditions that will cause Group Policy to be processed synchronously even if this policy setting is enabled: +> +> - 1 - At the first computer startup after the client computer has joined the domain. +> - 2 - If the policy setting "Always wait for the network at computer startup and logon" is enabled. + +If you disable or do not configure this policy setting, detecting a slow network connection will not affect whether Group Policy processing will be synchronous or asynchronous. + + +> [!TIP] +> This is an ADMX-backed policy and requires a special SyncML format to enable or disable. For details, see [Understanding ADMX-backed policies](./understanding-admx-backed-policies.md). +> +> You must specify the data type in the SyncML as <Format>chr</Format>. For an example SyncML, refer to [Enabling a policy](./understanding-admx-backed-policies.md#enabling-a-policy). +> +> The payload of the SyncML must be XML-encoded; for this XML encoding, there are a variety of online encoders that you can use. To avoid encoding the payload, you can use CDATA if your MDM supports it. For more information, see [CDATA Sections](http://www.w3.org/TR/REC-xml/#sec-cdata-sect). + + +ADMX Info: +- GP English name: *Change Group Policy processing to run asynchronously when a slow network connection is detected.* +- GP name: *SlowlinkDefaultToAsync* +- GP path: *System\Group Policy* +- GP ADMX file name: *GroupPolicy.admx* + + + +
    + + +**ADMX_GroupPolicy/SyncWaitTime** + + + + + + + + + + + + + + + + + + + + + + + + + + + +
    Windows EditionSupported?
    Homecross mark
    Procross mark
    Businesscross mark
    Enterprisecheck mark
    Educationcross mark
    + + +
    + + +[Scope](./policy-configuration-service-provider.md#policy-scope): + +> [!div class = "checklist"] +> * Device + +
    + + + +Available in the latest Windows 10 Insider Preview Build. This policy setting specifies how long Group Policy should wait for network availability notifications during startup policy processing. If the startup policy processing is synchronous, the computer is blocked until the network is available or the default wait time is reached. If the startup policy processing is asynchronous, the computer is not blocked and policy processing will occur in the background. In either case, configuring this policy setting overrides any system-computed wait times. + +If you enable this policy setting, Group Policy will use this administratively configured maximum wait time and override any default or system-computed wait time. + +If you disable or do not configure this policy setting, Group Policy will use the default wait time of 30 seconds on computers running Windows Vista operating system. + + +> [!TIP] +> This is an ADMX-backed policy and requires a special SyncML format to enable or disable. For details, see [Understanding ADMX-backed policies](./understanding-admx-backed-policies.md). +> +> You must specify the data type in the SyncML as <Format>chr</Format>. For an example SyncML, refer to [Enabling a policy](./understanding-admx-backed-policies.md#enabling-a-policy). +> +> The payload of the SyncML must be XML-encoded; for this XML encoding, there are a variety of online encoders that you can use. To avoid encoding the payload, you can use CDATA if your MDM supports it. For more information, see [CDATA Sections](http://www.w3.org/TR/REC-xml/#sec-cdata-sect). + + +ADMX Info: +- GP English name: *Specify startup policy processing wait time* +- GP name: *SyncWaitTime* +- GP path: *System\Group Policy* +- GP ADMX file name: *GroupPolicy.admx* + + + +
    + + +**ADMX_GroupPolicy/UserPolicyMode** + + + + + + + + + + + + + + + + + + + + + + + + + + + +
    Windows EditionSupported?
    Homecross mark
    Procross mark
    Businesscross mark
    Enterprisecheck mark
    Educationcross mark
    + + +
    + + +[Scope](./policy-configuration-service-provider.md#policy-scope): + +> [!div class = "checklist"] +> * Device + +
    + + + +Available in the latest Windows 10 Insider Preview Build. This policy setting directs the system to apply the set of Group Policy objects for the computer to any user who logs on to a computer affected by this setting. It is intended for special-use computers, such as those in public places, laboratories, and classrooms, where you must modify the user setting based on the computer that is being used. + +By default, the user's Group Policy Objects determine which user settings apply. If this setting is enabled, then, when a user logs on to this computer, the computer's Group Policy Objects determine which set of Group Policy Objects applies. + +If you enable this setting, you can select one of the following modes from the Mode box: + +"Replace" indicates that the user settings defined in the computer's Group Policy Objects replace the user settings normally applied to the user. + +"Merge" indicates that the user settings defined in the computer's Group Policy Objects and the user settings normally applied to the user are combined. If the settings conflict, the user settings in the computer's Group Policy Objects take precedence over the user's normal settings. + +If you disable this setting or do not configure it, the user's Group Policy Objects determines which user settings apply. + +> [!NOTE] +> This setting is effective only when both the computer account and the user account are in at least Windows 2000 domains. + + +> [!TIP] +> This is an ADMX-backed policy and requires a special SyncML format to enable or disable. For details, see [Understanding ADMX-backed policies](./understanding-admx-backed-policies.md). +> +> You must specify the data type in the SyncML as <Format>chr</Format>. For an example SyncML, refer to [Enabling a policy](./understanding-admx-backed-policies.md#enabling-a-policy). +> +> The payload of the SyncML must be XML-encoded; for this XML encoding, there are a variety of online encoders that you can use. To avoid encoding the payload, you can use CDATA if your MDM supports it. For more information, see [CDATA Sections](http://www.w3.org/TR/REC-xml/#sec-cdata-sect). + + +ADMX Info: +- GP English name: *Configure user Group Policy loopback processing mode* +- GP name: *UserPolicyMode* +- GP path: *System\Group Policy* +- GP ADMX file name: *GroupPolicy.admx* @@ -241,5 +3408,4 @@ Footnotes: - 7 - Available in Windows 10, version 1909. - 8 - Available in Windows 10, version 2004. - - + \ No newline at end of file From c3eb6d09bb3ffa2a0ababd79ec91750fb9bb833a Mon Sep 17 00:00:00 2001 From: ManikaDhiman Date: Tue, 22 Dec 2020 15:23:09 -0800 Subject: [PATCH 199/486] Minor formatting --- windows/client-management/mdm/policy-csp-admx-logon.md | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/windows/client-management/mdm/policy-csp-admx-logon.md b/windows/client-management/mdm/policy-csp-admx-logon.md index 54fe3f12cb..1c04d119eb 100644 --- a/windows/client-management/mdm/policy-csp-admx-logon.md +++ b/windows/client-management/mdm/policy-csp-admx-logon.md @@ -1026,7 +1026,7 @@ If this configuration is not implemented on the server, this policy setting is i If you disable or do not configure this policy setting and users log on to a client computer or a server running Windows Server 2008 or later and that is configured as described earlier, the computer typically does not wait for the network to be fully initialized. In this case, users are logged on with cached credentials. Group Policy is applied asynchronously in the background. > [!NOTE] - +> > - If you want to guarantee the application of Folder Redirection, Software Installation, or roaming user profile settings in just one logon, enable this policy setting to ensure that Windows waits for the network to be available before applying policy. > - If Folder Redirection policy will apply during the next logon, security policies will be applied asynchronously during the next update cycle, if network connectivity is available. From 8b119a506ef92e3a0de0640f96b5a12a35cc50d1 Mon Sep 17 00:00:00 2001 From: adirdidi <68847945+adirdidi@users.noreply.github.com> Date: Wed, 23 Dec 2020 02:07:53 +0200 Subject: [PATCH 200/486] API pages update 1. Adding US Gov reference to all pages with URIs. 2. Adding geo reference to all pages with URIs. 3. Replace MDE URLs ending with "windows.com" with "microsoft.com". 4. Replace the login endpoint from "login.windows.net" to "login.microsoftonline.com". --- .../add-or-remove-machine-tags.md | 11 +++++++---- .../microsoft-defender-atp/alerts.md | 7 ++++++- .../microsoft-defender-atp/api-hello-world.md | 4 ++-- .../microsoft-defender-atp/api-power-bi.md | 4 ++-- .../collect-investigation-package.md | 11 +++++++---- .../create-alert-by-reference.md | 10 ++++++---- .../delete-ti-indicator-by-id.md | 11 ++++++----- .../exposed-apis-create-app-nativeapp.md | 8 ++++---- .../exposed-apis-create-app-partners.md | 9 +++++---- .../exposed-apis-create-app-webapp.md | 8 ++++---- .../exposed-apis-full-sample-powershell.md | 10 +++++++--- .../exposed-apis-list.md | 4 ++-- .../exposed-apis-odata-samples.md | 4 ++-- .../microsoft-defender-atp/files.md | 5 +++++ .../find-machines-by-ip.md | 8 +++++--- .../get-alert-info-by-id.md | 4 ++++ .../get-alert-related-domain-info.md | 10 ++++++---- .../get-alert-related-files-info.md | 10 ++++++---- .../get-alert-related-ip-info.md | 10 ++++++---- .../get-alert-related-machine-info.md | 11 ++++++----- .../get-alert-related-user-info.md | 11 ++++++----- .../microsoft-defender-atp/get-alerts.md | 7 ++++--- .../get-all-recommendations.md | 9 +++++++-- .../get-all-vulnerabilities-by-machines.md | 9 +++++++-- .../get-all-vulnerabilities.md | 9 +++++++-- .../get-device-secure-score.md | 9 +++++++-- .../get-discovered-vulnerabilities.md | 8 ++++++-- .../get-domain-related-alerts.md | 8 +++++--- .../get-domain-related-machines.md | 9 +++++---- .../get-domain-statistics.md | 10 ++++++---- .../get-exposure-score.md | 9 +++++++-- .../get-file-information.md | 10 ++++++---- .../get-file-related-alerts.md | 8 +++++--- .../get-file-related-machines.md | 8 +++++--- .../get-file-statistics.md | 10 ++++++---- .../get-installed-software.md | 8 ++++++-- .../get-investigation-collection.md | 15 +++++++-------- .../get-investigation-object.md | 7 ++++++- .../get-ip-related-alerts.md | 9 +++++---- .../get-ip-statistics.md | 10 ++++++---- .../get-machine-by-id.md | 10 ++++++---- .../get-machine-group-exposure-score.md | 9 +++++++-- .../get-machine-log-on-users.md | 10 ++++++---- .../get-machine-related-alerts.md | 4 ++++ .../get-machineaction-object.md | 12 +++++++----- .../get-machineactions-collection.md | 18 +++++++++--------- .../get-machinegroups-collection.md | 6 +++++- .../get-machines-by-software.md | 9 +++++++-- .../get-machines-by-vulnerability.md | 9 +++++++-- .../microsoft-defender-atp/get-machines.md | 13 +++++++------ .../get-missing-kbs-machine.md | 6 +++++- .../get-missing-kbs-software.md | 7 ++++++- .../get-package-sas-uri.md | 13 +++++++------ .../get-recommendation-by-id.md | 12 +++++++++--- .../get-recommendation-machines.md | 10 +++++++--- .../get-recommendation-software.md | 10 +++++++--- .../get-recommendation-vulnerabilities.md | 10 +++++++--- .../get-security-recommendations.md | 8 ++++++-- .../get-software-by-id.md | 9 +++++++-- .../get-software-ver-distribution.md | 9 +++++++-- .../microsoft-defender-atp/get-software.md | 9 +++++++-- .../get-ti-indicators-collection.md | 16 +++++++++------- .../get-user-information.md | 10 ++++++---- .../get-user-related-alerts.md | 8 +++++--- .../get-user-related-machines.md | 8 +++++--- .../get-vuln-by-software.md | 9 +++++++-- .../get-vulnerability-by-id.md | 9 +++++++-- .../initiate-autoir-investigation.md | 6 ++++-- .../microsoft-defender-atp/investigation.md | 5 +++++ .../microsoft-defender-atp/isolate-machine.md | 10 ++++++---- .../microsoft-defender-atp/machine.md | 4 ++++ .../microsoft-defender-atp/machineaction.md | 5 +++++ .../offboard-machine-api.md | 10 ++++++---- .../onboarding-notification.md | 7 ++++++- .../post-ti-indicator.md | 11 ++++++----- .../pull-alerts-using-rest-api.md | 6 +++--- .../microsoft-defender-atp/recommendation.md | 5 +++++ .../restrict-code-execution.md | 8 ++++++-- .../run-advanced-query-api.md | 5 ++--- .../run-advanced-query-sample-powershell.md | 3 +-- .../run-advanced-query-sample-python.md | 4 ++-- .../microsoft-defender-atp/run-av-scan.md | 8 ++++++-- .../microsoft-defender-atp/score.md | 5 +++++ .../microsoft-defender-atp/set-device-value.md | 5 +++++ .../microsoft-defender-atp/software.md | 5 +++++ .../stop-and-quarantine-file.md | 8 ++++++-- .../microsoft-defender-atp/ti-indicator.md | 5 +++++ .../troubleshoot-onboarding-error-messages.md | 4 ++-- .../unisolate-machine.md | 10 ++++++---- .../unrestrict-code-execution.md | 10 ++++++---- .../microsoft-defender-atp/update-alert.md | 8 +++++--- .../microsoft-defender-atp/user.md | 5 +++++ .../microsoft-defender-atp/vulnerability.md | 5 +++++ 93 files changed, 518 insertions(+), 254 deletions(-) diff --git a/windows/security/threat-protection/microsoft-defender-atp/add-or-remove-machine-tags.md b/windows/security/threat-protection/microsoft-defender-atp/add-or-remove-machine-tags.md index 94849b6b18..bfed28074d 100644 --- a/windows/security/threat-protection/microsoft-defender-atp/add-or-remove-machine-tags.md +++ b/windows/security/threat-protection/microsoft-defender-atp/add-or-remove-machine-tags.md @@ -25,6 +25,11 @@ ms.topic: article - Want to experience Defender for Endpoint? [Sign up for a free trial.](https://www.microsoft.com/microsoft-365/windows/microsoft-defender-atp?ocid=docs-wdatp-exposedapis-abovefoldlink) +[!include[Microsoft Defender for Endpoint API URIs for US Government](../../includes/microsoft-defender-api-usgov.md)] + +[!include[Improve request performance](../../includes/improve-request-performance.md)] + + ## API description Adds or remove tag to a specific [Machine](machine.md). @@ -54,7 +59,7 @@ Delegated (work or school account) | Machine.ReadWrite | 'Read and write machine ## HTTP request ```http -POST https://api.securitycenter.windows.com/api/machines/{id}/tags +POST https://api.securitycenter.microsoft.com/api/machines/{id}/tags ``` ## Request headers @@ -84,10 +89,8 @@ If successful, this method returns 200 - Ok response code and the updated Machin Here is an example of a request that adds machine tag. -[!include[Improve request performance](../../includes/improve-request-performance.md)] - ```http -POST https://api.securitycenter.windows.com/api/machines/1e5bc9d7e413ddd7902c2932e418702b84d0cc07/tags +POST https://api.securitycenter.microsoft.com/api/machines/1e5bc9d7e413ddd7902c2932e418702b84d0cc07/tags Content-type: application/json { "Value" : "test Tag 2", diff --git a/windows/security/threat-protection/microsoft-defender-atp/alerts.md b/windows/security/threat-protection/microsoft-defender-atp/alerts.md index eaa7c56c2f..d7949c4065 100644 --- a/windows/security/threat-protection/microsoft-defender-atp/alerts.md +++ b/windows/security/threat-protection/microsoft-defender-atp/alerts.md @@ -25,6 +25,11 @@ ms.topic: article - Want to experience Defender for Endpoint? [Sign up for a free trial.](https://www.microsoft.com/microsoft-365/windows/microsoft-defender-atp?ocid=docs-wdatp-exposedapis-abovefoldlink) +[!include[Microsoft Defender for Endpoint API URIs for US Government](../../includes/microsoft-defender-api-usgov.md)] + +[!include[Improve request performance](../../includes/improve-request-performance.md)] + + ## Methods Method |Return Type |Description @@ -71,7 +76,7 @@ comments | List of Alert comments | Alert Comment is an object that contains: co ### Response example for getting single alert: ``` -GET https://api.securitycenter.windows.com/api/alerts/da637084217856368682_-292920499 +GET https://api.securitycenter.microsoft.com/api/alerts/da637084217856368682_-292920499 ``` ```json diff --git a/windows/security/threat-protection/microsoft-defender-atp/api-hello-world.md b/windows/security/threat-protection/microsoft-defender-atp/api-hello-world.md index f9c9891569..81f125ba22 100644 --- a/windows/security/threat-protection/microsoft-defender-atp/api-hello-world.md +++ b/windows/security/threat-protection/microsoft-defender-atp/api-hello-world.md @@ -28,6 +28,8 @@ ms.topic: article [!include[Microsoft Defender for Endpoint API URIs for US Government](../../includes/microsoft-defender-api-usgov.md)] +[!include[Improve request performance](../../includes/improve-request-performance.md)] + ## Get Alerts using a simple PowerShell script @@ -97,8 +99,6 @@ Done! You have successfully registered an application! - Copy the script below to PowerShell ISE or to a text editor, and save it as "**Get-Token.ps1**" - Running this script will generate a token and will save it in the working folder under the name "**Latest-token.txt**". -[!include[Improve request performance](../../includes/improve-request-performance.md)] - ``` # That code gets the App Context Token and save it to a file named "Latest-token.txt" under the current directory # Paste below your Tenant ID, App ID and App Secret (App key). diff --git a/windows/security/threat-protection/microsoft-defender-atp/api-power-bi.md b/windows/security/threat-protection/microsoft-defender-atp/api-power-bi.md index 39d611f4ca..32dda775a4 100644 --- a/windows/security/threat-protection/microsoft-defender-atp/api-power-bi.md +++ b/windows/security/threat-protection/microsoft-defender-atp/api-power-bi.md @@ -28,6 +28,8 @@ ms.topic: article [!include[Microsoft Defender for Endpoint API URIs for US Government](../../includes/microsoft-defender-api-usgov.md)] +[!include[Improve request performance](../../includes/improve-request-performance.md)] + In this section you will learn create a Power BI report on top of Defender for Endpoint APIs. The first example demonstrates how to connect Power BI to Advanced Hunting API and the second example demonstrates a connection to our OData APIs, such as Machine Actions or Alerts. @@ -46,8 +48,6 @@ The first example demonstrates how to connect Power BI to Advanced Hunting API a - Copy the below and paste it in the editor: -[!include[Improve request performance](../../includes/improve-request-performance.md)] - ``` let AdvancedHuntingQuery = "DeviceEvents | where ActionType contains 'Anti'", diff --git a/windows/security/threat-protection/microsoft-defender-atp/collect-investigation-package.md b/windows/security/threat-protection/microsoft-defender-atp/collect-investigation-package.md index 0d6949ea0b..20536ad64b 100644 --- a/windows/security/threat-protection/microsoft-defender-atp/collect-investigation-package.md +++ b/windows/security/threat-protection/microsoft-defender-atp/collect-investigation-package.md @@ -26,6 +26,11 @@ ms.topic: article - Want to experience Defender for Endpoint? [Sign up for a free trial.](https://www.microsoft.com/microsoft-365/windows/microsoft-defender-atp?ocid=docs-wdatp-exposedapis-abovefoldlink) +[!include[Microsoft Defender for Endpoint API URIs for US Government](../../includes/microsoft-defender-api-usgov.md)] + +[!include[Improve request performance](../../includes/improve-request-performance.md)] + + ## API description Collect investigation package from a device. @@ -49,7 +54,7 @@ Delegated (work or school account) | Machine.CollectForensics | 'Collect forensi ## HTTP request ``` -POST https://api.securitycenter.windows.com/api/machines/{id}/collectInvestigationPackage +POST https://api.securitycenter.microsoft.com/api/machines/{id}/collectInvestigationPackage ``` ## Request headers @@ -76,10 +81,8 @@ If successful, this method returns 201 - Created response code and [Machine Acti Here is an example of the request. -[!include[Improve request performance](../../includes/improve-request-performance.md)] - ``` -POST https://api.securitycenter.windows.com/api/machines/fb9ab6be3965095a09c057be7c90f0a2/collectInvestigationPackage +POST https://api.securitycenter.microsoft.com/api/machines/fb9ab6be3965095a09c057be7c90f0a2/collectInvestigationPackage Content-type: application/json { "Comment": "Collect forensics due to alert 1234" diff --git a/windows/security/threat-protection/microsoft-defender-atp/create-alert-by-reference.md b/windows/security/threat-protection/microsoft-defender-atp/create-alert-by-reference.md index a5c286ef37..05729852d3 100644 --- a/windows/security/threat-protection/microsoft-defender-atp/create-alert-by-reference.md +++ b/windows/security/threat-protection/microsoft-defender-atp/create-alert-by-reference.md @@ -25,6 +25,10 @@ ms.topic: article - Want to experience Defender for Endpoint? [Sign up for a free trial.](https://www.microsoft.com/microsoft-365/windows/microsoft-defender-atp?ocid=docs-wdatp-exposedapis-abovefoldlink) +[!include[Microsoft Defender for Endpoint API URIs for US Government](../../includes/microsoft-defender-api-usgov.md)] + +[!include[Improve request performance](../../includes/improve-request-performance.md)] + ## API description Creates new [Alert](alerts.md) on top of **Event**. @@ -56,7 +60,7 @@ Delegated (work or school account) | Alert.ReadWrite | 'Read and write alerts' ## HTTP request ``` -POST https://api.securitycenter.windows.com/api/alerts/CreateAlertByReference +POST https://api.securitycenter.microsoft.com/api/alerts/CreateAlertByReference ``` ## Request headers @@ -91,10 +95,8 @@ If successful, this method returns 200 OK, and a new [alert](alerts.md) object i Here is an example of the request. -[!include[Improve request performance](../../includes/improve-request-performance.md)] - ``` -POST https://api.securitycenter.windows.com/api/alerts/CreateAlertByReference +POST https://api.securitycenter.microsoft.com/api/alerts/CreateAlertByReference ``` ```json { diff --git a/windows/security/threat-protection/microsoft-defender-atp/delete-ti-indicator-by-id.md b/windows/security/threat-protection/microsoft-defender-atp/delete-ti-indicator-by-id.md index 123ce4959e..b3c2960440 100644 --- a/windows/security/threat-protection/microsoft-defender-atp/delete-ti-indicator-by-id.md +++ b/windows/security/threat-protection/microsoft-defender-atp/delete-ti-indicator-by-id.md @@ -25,6 +25,10 @@ ms.topic: article - Want to experience Defender for Endpoint? [Sign up for a free trial.](https://www.microsoft.com/microsoft-365/windows/microsoft-defender-atp?ocid=docs-wdatp-exposedapis-abovefoldlink) +[!include[Microsoft Defender for Endpoint API URIs for US Government](../../includes/microsoft-defender-api-usgov.md)] + +[!include[Improve request performance](../../includes/improve-request-performance.md)] + ## API description Deletes an [Indicator](ti-indicator.md) entity by ID. @@ -45,12 +49,9 @@ Application | Ti.ReadWrite.All | 'Read and write Indicators' ## HTTP request ``` -Delete https://api.securitycenter.windows.com/api/indicators/{id} +Delete https://api.securitycenter.microsoft.com/api/indicators/{id} ``` -[!include[Improve request performance](../../includes/improve-request-performance.md)] - - ## Request headers Name | Type | Description @@ -72,5 +73,5 @@ If Indicator with the specified id was not found - 404 Not Found. Here is an example of the request. ``` -DELETE https://api.securitycenter.windows.com/api/indicators/995 +DELETE https://api.securitycenter.microsoft.com/api/indicators/995 ``` diff --git a/windows/security/threat-protection/microsoft-defender-atp/exposed-apis-create-app-nativeapp.md b/windows/security/threat-protection/microsoft-defender-atp/exposed-apis-create-app-nativeapp.md index 6f75ba2ca8..9f93b7365e 100644 --- a/windows/security/threat-protection/microsoft-defender-atp/exposed-apis-create-app-nativeapp.md +++ b/windows/security/threat-protection/microsoft-defender-atp/exposed-apis-create-app-nativeapp.md @@ -26,6 +26,10 @@ ms.topic: article - Want to experience Microsoft Defender for Endpoint? [Sign up for a free trial.](https://www.microsoft.com/microsoft-365/windows/microsoft-defender-atp?ocid=docs-wdatp-exposedapis-abovefoldlink) +[!include[Microsoft Defender for Endpoint API URIs for US Government](../../includes/microsoft-defender-api-usgov.md)] + +[!include[Improve request performance](../../includes/improve-request-performance.md)] + This page describes how to create an application to get programmatic access to Defender for Endpoint on behalf of a user. If you need programmatic access Microsoft Defender for Endpoint without a user, refer to [Access Microsoft Defender for Endpoint with application context](exposed-apis-create-app-webapp.md). @@ -112,10 +116,6 @@ This page explains how to create an AAD application, get an access token to Micr For more information on AAD tokens, see [Azure AD tutorial](https://docs.microsoft.com/azure/active-directory/develop/active-directory-v2-protocols-oauth-client-creds) -[!include[Improve request performance](../../includes/improve-request-performance.md)] - -[!include[Microsoft Defender for Endpoint API URIs for US Government](../../includes/microsoft-defender-api-usgov.md)] - ### Using C# - Copy/Paste the below class in your application. diff --git a/windows/security/threat-protection/microsoft-defender-atp/exposed-apis-create-app-partners.md b/windows/security/threat-protection/microsoft-defender-atp/exposed-apis-create-app-partners.md index 06af8266e6..cfb61033a4 100644 --- a/windows/security/threat-protection/microsoft-defender-atp/exposed-apis-create-app-partners.md +++ b/windows/security/threat-protection/microsoft-defender-atp/exposed-apis-create-app-partners.md @@ -25,6 +25,11 @@ ms.topic: article **Applies to:** [Microsoft Defender for Endpoint](https://go.microsoft.com/fwlink/p/?linkid=2146631) - Want to experience Microsoft Defender for Endpoint? [Sign up for a free trial.](https://www.microsoft.com/microsoft-365/windows/microsoft-defender-atp?ocid=docs-wdatp-exposedapis-abovefoldlink) + +[!include[Microsoft Defender for Endpoint API URIs for US Government](../../includes/microsoft-defender-api-usgov.md)] + +[!include[Improve request performance](../../includes/improve-request-performance.md)] + This page describes how to create an Azure Active Directory (Azure AD) application to get programmatic access to Microsoft Defender for Endpoint on behalf of your customers. @@ -129,10 +134,6 @@ The following steps will guide you how to create an Azure AD application, get an
    For more information on AAD token, see [AAD tutorial](https://docs.microsoft.com/azure/active-directory/develop/active-directory-v2-protocols-oauth-client-creds) -[!include[Improve request performance](../../includes/improve-request-performance.md)] - -[!include[Microsoft Defender for Endpoint API URIs for US Government](../../includes/microsoft-defender-api-usgov.md)] - ### Using PowerShell ``` diff --git a/windows/security/threat-protection/microsoft-defender-atp/exposed-apis-create-app-webapp.md b/windows/security/threat-protection/microsoft-defender-atp/exposed-apis-create-app-webapp.md index 3e602760b0..f4dc27179e 100644 --- a/windows/security/threat-protection/microsoft-defender-atp/exposed-apis-create-app-webapp.md +++ b/windows/security/threat-protection/microsoft-defender-atp/exposed-apis-create-app-webapp.md @@ -26,6 +26,10 @@ ms.topic: article - Want to experience Microsoft Defender for Endpoint? [Sign up for a free trial.](https://www.microsoft.com/microsoft-365/windows/microsoft-defender-atp?ocid=docs-wdatp-exposedapis-abovefoldlink) +[!include[Microsoft Defender for Endpoint API URIs for US Government](../../includes/microsoft-defender-api-usgov.md)] + +[!include[Improve request performance](../../includes/improve-request-performance.md)] + This page describes how to create an application to get programmatic access to Defender for Endpoint without a user. If you need programmatic access to Defender for Endpoint on behalf of a user, see [Get access with user context](exposed-apis-create-app-nativeapp.md). If you are not sure which access you need, see [Get started](apis-intro.md). Microsoft Defender for Endpoint exposes much of its data and actions through a set of programmatic APIs. Those APIs will help you automate work flows and innovate based on Defender for Endpoint capabilities. The API access requires OAuth2.0 authentication. For more information, see [OAuth 2.0 Authorization Code Flow](https://docs.microsoft.com/azure/active-directory/develop/active-directory-v2-protocols-oauth-code). @@ -107,10 +111,6 @@ This article explains how to create an Azure AD application, get an access token For more information on Azure AD tokens, see the [Azure AD tutorial](https://docs.microsoft.com/azure/active-directory/develop/active-directory-v2-protocols-oauth-client-creds). -[!include[Improve request performance](../../includes/improve-request-performance.md)] - -[!include[Microsoft Defender for Endpoint API URIs for US Government](../../includes/microsoft-defender-api-usgov.md)] - ### Use PowerShell ``` diff --git a/windows/security/threat-protection/microsoft-defender-atp/exposed-apis-full-sample-powershell.md b/windows/security/threat-protection/microsoft-defender-atp/exposed-apis-full-sample-powershell.md index 31142c2936..676e6a5185 100644 --- a/windows/security/threat-protection/microsoft-defender-atp/exposed-apis-full-sample-powershell.md +++ b/windows/security/threat-protection/microsoft-defender-atp/exposed-apis-full-sample-powershell.md @@ -25,6 +25,10 @@ ms.date: 09/24/2018 **Applies to:** - [Microsoft Defender for Endpoint](https://go.microsoft.com/fwlink/p/?linkid=2146631) +[!include[Microsoft Defender for Endpoint API URIs for US Government](../../includes/microsoft-defender-api-usgov.md)] + +[!include[Improve request performance](../../includes/improve-request-performance.md)] + Full scenario using multiple APIs from Microsoft Defender for Endpoint. @@ -63,7 +67,7 @@ $appSecret = '22222222-2222-2222-2222-222222222222' # Paste your own app secret $suspiciousUrl = 'www.suspiciousUrl.com' # Paste your own URL here $resourceAppIdUri = 'https://securitycenter.onmicrosoft.com/windowsatpservice' -$oAuthUri = "https://login.windows.net/$TenantId/oauth2/token" +$oAuthUri = "https://login.microsoftonline.com/$TenantId/oauth2/token" $authBody = [Ordered] @{ resource = "$resourceAppIdUri" client_id = "$appId" @@ -75,7 +79,7 @@ $aadToken = $authResponse.access_token #Get latest alert -$alertUrl = "https://api.securitycenter.windows.com/api/alerts?`$top=10" +$alertUrl = "https://api.securitycenter.microsoft.com/api/alerts?`$top=10" $headers = @{ 'Content-Type' = 'application/json' Accept = 'application/json' @@ -108,7 +112,7 @@ $query = "NetworkCommunicationEvents | where RemoteUrl == `"$suspiciousUrl`" | summarize ConnectionsCount = count() by MachineId" -$queryUrl = "https://api.securitycenter.windows.com/api/advancedqueries/run" +$queryUrl = "https://api.securitycenter.microsoft.com/api/advancedqueries/run" $queryBody = ConvertTo-Json -InputObject @{ 'Query' = $query } $queryResponse = Invoke-WebRequest -Method Post -Uri $queryUrl -Headers $headers -Body $queryBody -ErrorAction Stop diff --git a/windows/security/threat-protection/microsoft-defender-atp/exposed-apis-list.md b/windows/security/threat-protection/microsoft-defender-atp/exposed-apis-list.md index 4a8aac1dc4..e5f0ac91e0 100644 --- a/windows/security/threat-protection/microsoft-defender-atp/exposed-apis-list.md +++ b/windows/security/threat-protection/microsoft-defender-atp/exposed-apis-list.md @@ -45,10 +45,10 @@ ms.topic: article > If you don't specify any version (e.g. https://api.securitycenter.microsoft.com/api/alerts ) you will get to the latest version. -[!include[Improve request performance](../../includes/improve-request-performance.md)] - [!include[Microsoft Defender for Endpoint API URIs for US Government](../../includes/microsoft-defender-api-usgov.md)] +[!include[Improve request performance](../../includes/improve-request-performance.md)] + Learn more about the individual supported entities where you can run API calls to and details such as HTTP request values, request headers and expected responses. diff --git a/windows/security/threat-protection/microsoft-defender-atp/exposed-apis-odata-samples.md b/windows/security/threat-protection/microsoft-defender-atp/exposed-apis-odata-samples.md index ef758bf348..9c0ee43caf 100644 --- a/windows/security/threat-protection/microsoft-defender-atp/exposed-apis-odata-samples.md +++ b/windows/security/threat-protection/microsoft-defender-atp/exposed-apis-odata-samples.md @@ -26,10 +26,10 @@ ms.topic: article - [Microsoft Defender for Endpoint](https://go.microsoft.com/fwlink/p/?linkid=2146631) -[!include[Improve request performance](../../includes/improve-request-performance.md)] - [!include[Microsoft Defender for Endpoint API URIs for US Government](../../includes/microsoft-defender-api-usgov.md)] +[!include[Improve request performance](../../includes/improve-request-performance.md)] + If you are not familiar with OData queries, see: [OData V4 queries](https://www.odata.org/documentation/) Not all properties are filterable. diff --git a/windows/security/threat-protection/microsoft-defender-atp/files.md b/windows/security/threat-protection/microsoft-defender-atp/files.md index 6289c8645b..677387cad1 100644 --- a/windows/security/threat-protection/microsoft-defender-atp/files.md +++ b/windows/security/threat-protection/microsoft-defender-atp/files.md @@ -25,6 +25,11 @@ ms.topic: article - Want to experience Microsoft Defender for Endpoint? [Sign up for a free trial.](https://www.microsoft.com/microsoft-365/windows/microsoft-defender-atp?ocid=docs-wdatp-exposedapis-abovefoldlink) +[!include[Microsoft Defender for Endpoint API URIs for US Government](../../includes/microsoft-defender-api-usgov.md)] + +[!include[Improve request performance](../../includes/improve-request-performance.md)] + + Represent a file entity in Defender for Endpoint. ## Methods diff --git a/windows/security/threat-protection/microsoft-defender-atp/find-machines-by-ip.md b/windows/security/threat-protection/microsoft-defender-atp/find-machines-by-ip.md index 3db35c6164..616dfffb2e 100644 --- a/windows/security/threat-protection/microsoft-defender-atp/find-machines-by-ip.md +++ b/windows/security/threat-protection/microsoft-defender-atp/find-machines-by-ip.md @@ -25,6 +25,10 @@ ms.topic: article - Want to experience Microsoft Defender for Endpoint? [Sign up for a free trial.](https://www.microsoft.com/microsoft-365/windows/microsoft-defender-atp?ocid=docs-wdatp-exposedapis-abovefoldlink) +[!include[Microsoft Defender for Endpoint API URIs for US Government](../../includes/microsoft-defender-api-usgov.md)] + +[!include[Improve request performance](../../includes/improve-request-performance.md)] + ## API description Find [Machines](machine.md) seen with the requested internal IP in the time range of 15 minutes prior and after a given timestamp. @@ -75,8 +79,6 @@ If the timestamp is not in the past 30 days - 400 Bad Request. Here is an example of the request. -[!include[Improve request performance](../../includes/improve-request-performance.md)] - ``` -GET https://api.securitycenter.windows.com/api/machines/findbyip(ip='10.248.240.38',timestamp=2019-09-22T08:44:05Z) +GET https://api.securitycenter.microsoft.com/api/machines/findbyip(ip='10.248.240.38',timestamp=2019-09-22T08:44:05Z) ``` diff --git a/windows/security/threat-protection/microsoft-defender-atp/get-alert-info-by-id.md b/windows/security/threat-protection/microsoft-defender-atp/get-alert-info-by-id.md index 07ac59b945..210a00624f 100644 --- a/windows/security/threat-protection/microsoft-defender-atp/get-alert-info-by-id.md +++ b/windows/security/threat-protection/microsoft-defender-atp/get-alert-info-by-id.md @@ -25,6 +25,10 @@ ms.topic: article - Want to experience Microsoft Defender for Endpoint? [Sign up for a free trial.](https://www.microsoft.com/microsoft-365/windows/microsoft-defender-atp?ocid=docs-wdatp-exposedapis-abovefoldlink) +[!include[Microsoft Defender for Endpoint API URIs for US Government](../../includes/microsoft-defender-api-usgov.md)] + +[!include[Improve request performance](../../includes/improve-request-performance.md)] + ## API description Retrieves specific [Alert](alerts.md) by its ID. diff --git a/windows/security/threat-protection/microsoft-defender-atp/get-alert-related-domain-info.md b/windows/security/threat-protection/microsoft-defender-atp/get-alert-related-domain-info.md index e9d18d97e7..607206740c 100644 --- a/windows/security/threat-protection/microsoft-defender-atp/get-alert-related-domain-info.md +++ b/windows/security/threat-protection/microsoft-defender-atp/get-alert-related-domain-info.md @@ -25,6 +25,10 @@ ms.topic: article - Want to experience Microsoft Defender for Endpoint? [Sign up for a free trial.](https://www.microsoft.com/microsoft-365/windows/microsoft-defender-atp?ocid=docs-wdatp-exposedapis-abovefoldlink) +[!include[Microsoft Defender for Endpoint API URIs for US Government](../../includes/microsoft-defender-api-usgov.md)] + +[!include[Improve request performance](../../includes/improve-request-performance.md)] + ## API description Retrieves all domains related to a specific alert. @@ -72,10 +76,8 @@ If successful and alert and domain exist - 200 OK. If alert not found - 404 Not Here is an example of the request. -[!include[Improve request performance](../../includes/improve-request-performance.md)] - ``` -GET https://api.securitycenter.windows.com/alerts/636688558380765161_2136280442/domains +GET https://api.securitycenter.microsoft.com/alerts/636688558380765161_2136280442/domains ``` **Response** @@ -86,7 +88,7 @@ Here is an example of the response. HTTP/1.1 200 OK Content-type: application/json { - "@odata.context": "https://api.securitycenter.windows.com/$metadata#Domains", + "@odata.context": "https://api.securitycenter.microsoft.com/$metadata#Domains", "value": [ { "host": "www.example.com" diff --git a/windows/security/threat-protection/microsoft-defender-atp/get-alert-related-files-info.md b/windows/security/threat-protection/microsoft-defender-atp/get-alert-related-files-info.md index 6e61e17504..95743e8fdc 100644 --- a/windows/security/threat-protection/microsoft-defender-atp/get-alert-related-files-info.md +++ b/windows/security/threat-protection/microsoft-defender-atp/get-alert-related-files-info.md @@ -25,6 +25,10 @@ ms.topic: article - Want to experience Microsoft Defender for Endpoint? [Sign up for a free trial.](https://www.microsoft.com/microsoft-365/windows/microsoft-defender-atp?ocid=docs-wdatp-exposedapis-abovefoldlink) +[!include[Microsoft Defender for Endpoint API URIs for US Government](../../includes/microsoft-defender-api-usgov.md)] + +[!include[Improve request performance](../../includes/improve-request-performance.md)] + ## API description Retrieves all files related to a specific alert. @@ -72,10 +76,8 @@ If successful and alert and files exist - 200 OK. If alert not found - 404 Not F Here is an example of the request. -[!include[Improve request performance](../../includes/improve-request-performance.md)] - ``` -GET https://api.securitycenter.windows.com/api/alerts/636688558380765161_2136280442/files +GET https://api.securitycenter.microsoft.com/api/alerts/636688558380765161_2136280442/files ``` **Response** @@ -87,7 +89,7 @@ Here is an example of the response. HTTP/1.1 200 OK Content-type: application/json { - "@odata.context": "https://api.securitycenter.windows.com/api/$metadata#Files", + "@odata.context": "https://api.securitycenter.microsoft.com/api/$metadata#Files", "value": [ { "sha1": "f2a00fd2f2de1be0214b8529f1e9f67096c1aa70", diff --git a/windows/security/threat-protection/microsoft-defender-atp/get-alert-related-ip-info.md b/windows/security/threat-protection/microsoft-defender-atp/get-alert-related-ip-info.md index 62db50d08a..dd5859b46d 100644 --- a/windows/security/threat-protection/microsoft-defender-atp/get-alert-related-ip-info.md +++ b/windows/security/threat-protection/microsoft-defender-atp/get-alert-related-ip-info.md @@ -25,6 +25,10 @@ ms.topic: article - Want to experience Microsoft Defender for Endpoint? [Sign up for a free trial.](https://www.microsoft.com/microsoft-365/windows/microsoft-defender-atp?ocid=docs-wdatp-exposedapis-abovefoldlink) +[!include[Microsoft Defender for Endpoint API URIs for US Government](../../includes/microsoft-defender-api-usgov.md)] + +[!include[Improve request performance](../../includes/improve-request-performance.md)] + ## API description Retrieves all IPs related to a specific alert. @@ -73,10 +77,8 @@ If successful and alert and an IP exist - 200 OK. If alert not found - 404 Not F Here is an example of the request. -[!include[Improve request performance](../../includes/improve-request-performance.md)] - ``` -GET https://api.securitycenter.windows.com/alerts/636688558380765161_2136280442/ips +GET https://api.securitycenter.microsoft.com/alerts/636688558380765161_2136280442/ips ``` **Response** @@ -88,7 +90,7 @@ Here is an example of the response. HTTP/1.1 200 OK Content-type: application/json { - "@odata.context": "https://api.securitycenter.windows.com/$metadata#Ips", + "@odata.context": "https://api.securitycenter.microsoft.com/$metadata#Ips", "value": [ { "id": "104.80.104.128" diff --git a/windows/security/threat-protection/microsoft-defender-atp/get-alert-related-machine-info.md b/windows/security/threat-protection/microsoft-defender-atp/get-alert-related-machine-info.md index 98f64ac8d1..ab1cfd8107 100644 --- a/windows/security/threat-protection/microsoft-defender-atp/get-alert-related-machine-info.md +++ b/windows/security/threat-protection/microsoft-defender-atp/get-alert-related-machine-info.md @@ -25,6 +25,10 @@ ms.topic: article - Want to experience Microsoft Defender for Endpoint? [Sign up for a free trial.](https://www.microsoft.com/microsoft-365/windows/microsoft-defender-atp?ocid=docs-wdatp-exposedapis-abovefoldlink) +[!include[Microsoft Defender for Endpoint API URIs for US Government](../../includes/microsoft-defender-api-usgov.md)] + +[!include[Improve request performance](../../includes/improve-request-performance.md)] + ## API description Retrieves [Device](machine.md) related to a specific alert. @@ -74,11 +78,8 @@ If successful and alert and device exist - 200 OK. If alert not found or device Here is an example of the request. -[!include[Improve request performance](../../includes/improve-request-performance.md)] - - ``` -GET https://api.securitycenter.windows.com/api/alerts/636688558380765161_2136280442/machine +GET https://api.securitycenter.microsoft.com/api/alerts/636688558380765161_2136280442/machine ``` **Response** @@ -90,7 +91,7 @@ Here is an example of the response. HTTP/1.1 200 OK Content-type: application/json { - "@odata.context": "https://api.securitycenter.windows.com/api/$metadata#Machines/$entity", + "@odata.context": "https://api.securitycenter.microsoft.com/api/$metadata#Machines/$entity", "id": "1e5bc9d7e413ddd7902c2932e418702b84d0cc07", "computerDnsName": "mymachine1.contoso.com", "firstSeen": "2018-08-02T14:55:03.7791856Z", diff --git a/windows/security/threat-protection/microsoft-defender-atp/get-alert-related-user-info.md b/windows/security/threat-protection/microsoft-defender-atp/get-alert-related-user-info.md index 3e96ce7383..c5461ce794 100644 --- a/windows/security/threat-protection/microsoft-defender-atp/get-alert-related-user-info.md +++ b/windows/security/threat-protection/microsoft-defender-atp/get-alert-related-user-info.md @@ -25,6 +25,10 @@ ms.topic: article - Want to experience Microsoft Defender for Endpoint? [Sign up for a free trial.](https://www.microsoft.com/microsoft-365/windows/microsoft-defender-atp?ocid=docs-wdatp-exposedapis-abovefoldlink) +[!include[Microsoft Defender for Endpoint API URIs for US Government](../../includes/microsoft-defender-api-usgov.md)] + +[!include[Improve request performance](../../includes/improve-request-performance.md)] + ## API description Retrieves the User related to a specific alert. @@ -73,11 +77,8 @@ If successful and alert and a user exists - 200 OK with user in the body. If ale Here is an example of the request. -[!include[Improve request performance](../../includes/improve-request-performance.md)] - - ``` -GET https://api.securitycenter.windows.com/api/alerts/636688558380765161_2136280442/user +GET https://api.securitycenter.microsoft.com/api/alerts/636688558380765161_2136280442/user ``` **Response** @@ -89,7 +90,7 @@ Here is an example of the response. HTTP/1.1 200 OK Content-type: application/json { - "@odata.context": "https://api.securitycenter.windows.com/api/$metadata#Users/$entity", + "@odata.context": "https://api.securitycenter.microsoft.com/api/$metadata#Users/$entity", "id": "contoso\\user1", "accountName": "user1", "accountDomain": "contoso", diff --git a/windows/security/threat-protection/microsoft-defender-atp/get-alerts.md b/windows/security/threat-protection/microsoft-defender-atp/get-alerts.md index a7c825d739..687c2dffa2 100644 --- a/windows/security/threat-protection/microsoft-defender-atp/get-alerts.md +++ b/windows/security/threat-protection/microsoft-defender-atp/get-alerts.md @@ -25,6 +25,10 @@ ms.topic: article - Want to experience Microsoft Defender for Endpoint? [Sign up for a free trial.](https://www.microsoft.com/microsoft-365/windows/microsoft-defender-atp?ocid=docs-wdatp-exposedapis-abovefoldlink) +[!include[Microsoft Defender for Endpoint API URIs for US Government](../../includes/microsoft-defender-api-usgov.md)] + +[!include[Improve request performance](../../includes/improve-request-performance.md)] + ## API description Retrieves a collection of Alerts. @@ -87,9 +91,6 @@ Here is an example of the request. GET https://api.securitycenter.microsoft.com/api/alerts ``` -[!include[Improve request performance](../../includes/improve-request-performance.md)] - - **Response** Here is an example of the response. diff --git a/windows/security/threat-protection/microsoft-defender-atp/get-all-recommendations.md b/windows/security/threat-protection/microsoft-defender-atp/get-all-recommendations.md index a5cde6e4a0..b0b573c0e7 100644 --- a/windows/security/threat-protection/microsoft-defender-atp/get-all-recommendations.md +++ b/windows/security/threat-protection/microsoft-defender-atp/get-all-recommendations.md @@ -23,6 +23,11 @@ ms.topic: article **Applies to:** - [Microsoft Defender for Endpoint](https://go.microsoft.com/fwlink/p/?linkid=2146631) +[!include[Microsoft Defender for Endpoint API URIs for US Government](../../includes/microsoft-defender-api-usgov.md)] + +[!include[Improve request performance](../../includes/improve-request-performance.md)] + + [!include[Prerelease information](../../includes/prerelease.md)] Retrieves a list of all security recommendations affecting the organization. @@ -61,7 +66,7 @@ If successful, this method returns 200 OK with the list of security recommendati Here is an example of the request. ``` -GET https://api.securitycenter.windows.com/api/recommendations +GET https://api.securitycenter.microsoft.com/api/recommendations ``` **Response** @@ -71,7 +76,7 @@ Here is an example of the response. ```json { - "@odata.context": "https://api.securitycenter.windows.com/api/$metadata#Recommendations", + "@odata.context": "https://api.securitycenter.microsoft.com/api/$metadata#Recommendations", "value": [ { "id": "va-_-microsoft-_-windows_10", diff --git a/windows/security/threat-protection/microsoft-defender-atp/get-all-vulnerabilities-by-machines.md b/windows/security/threat-protection/microsoft-defender-atp/get-all-vulnerabilities-by-machines.md index f2de05191d..843f4cca7c 100644 --- a/windows/security/threat-protection/microsoft-defender-atp/get-all-vulnerabilities-by-machines.md +++ b/windows/security/threat-protection/microsoft-defender-atp/get-all-vulnerabilities-by-machines.md @@ -23,6 +23,11 @@ ms.topic: article **Applies to:** [Microsoft Defender for Endpoint](https://go.microsoft.com/fwlink/p/?linkid=2146631) +[!include[Microsoft Defender for Endpoint API URIs for US Government](../../includes/microsoft-defender-api-usgov.md)] + +[!include[Improve request performance](../../includes/improve-request-performance.md)] + + Retrieves a list of all the vulnerabilities affecting the organization per [machine](machine.md) and [software](software.md). - If the vulnerability has a fixing KB, it will appear in the response. - Supports [OData V4 queries](https://www.odata.org/documentation/). @@ -65,7 +70,7 @@ If successful, this method returns 200 OK with the list of vulnerabilities in th Here is an example of the request. ``` -GET https://api.securitycenter.windows.com/api/vulnerabilities/machinesVulnerabilities +GET https://api.securitycenter.microsoft.com/api/vulnerabilities/machinesVulnerabilities ``` **Response** @@ -75,7 +80,7 @@ Here is an example of the response. ```json { - "@odata.context": "https://api-us.securitycenter.windows.com/api/$metadata#Collection(microsoft.windowsDefenderATP.api.PublicAssetVulnerabilityDto)", + "@odata.context": "https://api.securitycenter.microsoft.com/api/$metadata#Collection(microsoft.windowsDefenderATP.api.PublicAssetVulnerabilityDto)", "value": [ { "id": "5afa3afc92a7c63d4b70129e0a6f33f63a427e21-_-CVE-2020-6494-_-microsoft-_-edge_chromium-based-_-81.0.416.77-_-", diff --git a/windows/security/threat-protection/microsoft-defender-atp/get-all-vulnerabilities.md b/windows/security/threat-protection/microsoft-defender-atp/get-all-vulnerabilities.md index 9847c928d4..138a8399ab 100644 --- a/windows/security/threat-protection/microsoft-defender-atp/get-all-vulnerabilities.md +++ b/windows/security/threat-protection/microsoft-defender-atp/get-all-vulnerabilities.md @@ -23,6 +23,11 @@ ms.topic: article **Applies to:** - [Microsoft Defender for Endpoint](https://go.microsoft.com/fwlink/p/?linkid=2146631) +[!include[Microsoft Defender for Endpoint API URIs for US Government](../../includes/microsoft-defender-api-usgov.md)] + +[!include[Improve request performance](../../includes/improve-request-performance.md)] + + [!include[Prerelease information](../../includes/prerelease.md)] Retrieves a list of all the vulnerabilities affecting the organization. @@ -61,7 +66,7 @@ If successful, this method returns 200 OK with the list of vulnerabilities in th Here is an example of the request. ``` -GET https://api.securitycenter.windows.com/api/Vulnerabilities +GET https://api.securitycenter.microsoft.com/api/Vulnerabilities ``` **Response** @@ -71,7 +76,7 @@ Here is an example of the response. ```json { - "@odata.context": "https://api-us.securitycenter.windows.com/api/$metadata#Vulnerabilities", + "@odata.context": "https://api.securitycenter.microsoft.com/api/$metadata#Vulnerabilities", "value": [ { "id": "CVE-2019-0608", diff --git a/windows/security/threat-protection/microsoft-defender-atp/get-device-secure-score.md b/windows/security/threat-protection/microsoft-defender-atp/get-device-secure-score.md index e14a6859a7..15eece5384 100644 --- a/windows/security/threat-protection/microsoft-defender-atp/get-device-secure-score.md +++ b/windows/security/threat-protection/microsoft-defender-atp/get-device-secure-score.md @@ -25,6 +25,11 @@ ms.topic: article - Want to experience Microsoft Defender for Endpoint? [Sign up for a free trial.](https://www.microsoft.com/microsoft-365/windows/microsoft-defender-atp?ocid=docs-wdatp-exposedapis-abovefoldlink) +[!include[Microsoft Defender for Endpoint API URIs for US Government](../../includes/microsoft-defender-api-usgov.md)] + +[!include[Improve request performance](../../includes/improve-request-performance.md)] + + Retrieves your [Microsoft Secure Score for Devices](tvm-microsoft-secure-score-devices.md). A higher Microsoft Secure Score for Devices means your endpoints are more resilient from cybersecurity threat attacks. ## Permissions @@ -63,7 +68,7 @@ If successful, this method returns 200 OK, with the device secure score data in Here is an example of the request. ``` -GET https://api.securitycenter.windows.com/api/configurationScore +GET https://api.securitycenter.microsoft.com/api/configurationScore ``` ### Response @@ -75,7 +80,7 @@ Here is an example of the response. ```json { - "@odata.context": "https://api-us.securitycenter.windows.com/api/$metadata#ConfigurationScore/$entity", + "@odata.context": "https://api.securitycenter.microsoft.com/api/$metadata#ConfigurationScore/$entity", "time": "2019-12-03T09:15:58.1665846Z", "score": 340 } diff --git a/windows/security/threat-protection/microsoft-defender-atp/get-discovered-vulnerabilities.md b/windows/security/threat-protection/microsoft-defender-atp/get-discovered-vulnerabilities.md index 5b16a71cfc..9bf4ba7a3d 100644 --- a/windows/security/threat-protection/microsoft-defender-atp/get-discovered-vulnerabilities.md +++ b/windows/security/threat-protection/microsoft-defender-atp/get-discovered-vulnerabilities.md @@ -24,6 +24,10 @@ ms.topic: article **Applies to:** - [Microsoft Defender for Endpoint](https://go.microsoft.com/fwlink/p/?linkid=2146631) +[!include[Microsoft Defender for Endpoint API URIs for US Government](../../includes/microsoft-defender-api-usgov.md)] + +[!include[Improve request performance](../../includes/improve-request-performance.md)] + Retrieves a collection of discovered vulnerabilities related to a given device ID. ## Permissions @@ -62,7 +66,7 @@ If successful, this method returns 200 OK with the discovered vulnerability info Here is an example of the request. ``` -GET https://api.securitycenter.windows.com/api/machines/ac233fa6208e1579620bf44207c4006ed7cc4501/vulnerabilities +GET https://api.securitycenter.microsoft.com/api/machines/ac233fa6208e1579620bf44207c4006ed7cc4501/vulnerabilities ``` ### Response @@ -71,7 +75,7 @@ Here is an example of the response. ``` { - "@odata.context": "https://api.securitycenter.windows.com/api/$metadata#Collection(Analytics.Contracts.PublicAPI.PublicVulnerabilityDto)", + "@odata.context": "https://api.securitycenter.microsoft.com/api/$metadata#Collection(Analytics.Contracts.PublicAPI.PublicVulnerabilityDto)", "value": [ { "id": "CVE-2019-1348", diff --git a/windows/security/threat-protection/microsoft-defender-atp/get-domain-related-alerts.md b/windows/security/threat-protection/microsoft-defender-atp/get-domain-related-alerts.md index 26fdbad6f4..2ef6ab2307 100644 --- a/windows/security/threat-protection/microsoft-defender-atp/get-domain-related-alerts.md +++ b/windows/security/threat-protection/microsoft-defender-atp/get-domain-related-alerts.md @@ -25,6 +25,10 @@ ms.topic: article - Want to experience Microsoft Defender for Endpoint? [Sign up for a free trial.](https://www.microsoft.com/microsoft-365/windows/microsoft-defender-atp?ocid=docs-wdatp-exposedapis-abovefoldlink) +[!include[Microsoft Defender for Endpoint API URIs for US Government](../../includes/microsoft-defender-api-usgov.md)] + +[!include[Improve request performance](../../includes/improve-request-performance.md)] + ## API description Retrieves a collection of [Alerts](alerts.md) related to a given domain address. @@ -74,8 +78,6 @@ If successful and domain exists - 200 OK with list of [alert](alerts.md) entitie Here is an example of the request. -[!include[Improve request performance](../../includes/improve-request-performance.md)] - ```http -GET https://api.securitycenter.windows.com/api/domains/client.wns.windows.com/alerts +GET https://api.securitycenter.microsoft.com/api/domains/client.wns.windows.com/alerts ``` diff --git a/windows/security/threat-protection/microsoft-defender-atp/get-domain-related-machines.md b/windows/security/threat-protection/microsoft-defender-atp/get-domain-related-machines.md index 5bf5182ede..588bbbb442 100644 --- a/windows/security/threat-protection/microsoft-defender-atp/get-domain-related-machines.md +++ b/windows/security/threat-protection/microsoft-defender-atp/get-domain-related-machines.md @@ -25,6 +25,10 @@ ms.topic: article - Want to experience Microsoft Defender for Endpoint? [Sign up for a free trial.](https://www.microsoft.com/microsoft-365/windows/microsoft-defender-atp?ocid=docs-wdatp-exposedapis-abovefoldlink) +[!include[Microsoft Defender for Endpoint API URIs for US Government](../../includes/microsoft-defender-api-usgov.md)] + +[!include[Improve request performance](../../includes/improve-request-performance.md)] + ## API description Retrieves a collection of [Machines](machine.md) that have communicated to or from a given domain address. @@ -75,9 +79,6 @@ If successful and domain exists - 200 OK with list of [machine](machine.md) enti Here is an example of the request. -[!include[Improve request performance](../../includes/improve-request-performance.md)] - - ```http -GET https://api.securitycenter.windows.com/api/domains/api.securitycenter.windows.com/machines +GET https://api.securitycenter.microsoft.com/api/domains/api.securitycenter.microsoft.com/machines ``` diff --git a/windows/security/threat-protection/microsoft-defender-atp/get-domain-statistics.md b/windows/security/threat-protection/microsoft-defender-atp/get-domain-statistics.md index cb49efb465..a1174ffd17 100644 --- a/windows/security/threat-protection/microsoft-defender-atp/get-domain-statistics.md +++ b/windows/security/threat-protection/microsoft-defender-atp/get-domain-statistics.md @@ -25,6 +25,10 @@ ms.topic: article - Want to experience Microsoft Defender for Endpoint? [Sign up for a free trial.](https://www.microsoft.com/microsoft-365/windows/microsoft-defender-atp?ocid=docs-wdatp-exposedapis-abovefoldlink) +[!include[Microsoft Defender for Endpoint API URIs for US Government](../../includes/microsoft-defender-api-usgov.md)] + +[!include[Improve request performance](../../includes/improve-request-performance.md)] + ## API description Retrieves the statistics on the given domain. @@ -71,10 +75,8 @@ If successful and domain exists - 200 OK, with statistics object in the response Here is an example of the request. -[!include[Improve request performance](../../includes/improve-request-performance.md)] - ``` -GET https://api.securitycenter.windows.com/api/domains/example.com/stats +GET https://api.securitycenter.microsoft.com/api/domains/example.com/stats ``` **Response** @@ -86,7 +88,7 @@ Here is an example of the response. HTTP/1.1 200 OK Content-type: application/json { - "@odata.context": "https://api.securitycenter.windows.com/api/$metadata#microsoft.windowsDefenderATP.api.InOrgDomainStats", + "@odata.context": "https://api.securitycenter.microsoft.com/api/$metadata#microsoft.windowsDefenderATP.api.InOrgDomainStats", "host": "example.com", "orgPrevalence": "4070", "orgFirstSeen": "2017-07-30T13:23:48Z", diff --git a/windows/security/threat-protection/microsoft-defender-atp/get-exposure-score.md b/windows/security/threat-protection/microsoft-defender-atp/get-exposure-score.md index 43d7ac20e9..2dc25a2049 100644 --- a/windows/security/threat-protection/microsoft-defender-atp/get-exposure-score.md +++ b/windows/security/threat-protection/microsoft-defender-atp/get-exposure-score.md @@ -25,6 +25,11 @@ ms.topic: article - Want to experience Microsoft Defender for Endpoint? [Sign up for a free trial.](https://www.microsoft.com/microsoft-365/windows/microsoft-defender-atp?ocid=docs-wdatp-exposedapis-abovefoldlink) +[!include[Microsoft Defender for Endpoint API URIs for US Government](../../includes/microsoft-defender-api-usgov.md)] + +[!include[Improve request performance](../../includes/improve-request-performance.md)] + + [!include[Prerelease information](../../includes/prerelease.md)] Retrieves the organizational exposure score. @@ -65,7 +70,7 @@ If successful, this method returns 200 OK, with the exposure data in the respons Here is an example of the request. ``` -GET https://api.securitycenter.windows.com/api/exposureScore +GET https://api.securitycenter.microsoft.com/api/exposureScore ``` ### Response @@ -77,7 +82,7 @@ Here is an example of the response. ```json { - "@odata.context": "https://api-us.securitycenter.windows.com/api/$metadata#ExposureScore/$entity", + "@odata.context": "https://api.securitycenter.microsoft.com/api/$metadata#ExposureScore/$entity", "time": "2019-12-03T07:23:53.280499Z", "score": 33.491554051195706 } diff --git a/windows/security/threat-protection/microsoft-defender-atp/get-file-information.md b/windows/security/threat-protection/microsoft-defender-atp/get-file-information.md index 61ab343580..c69bbf38e5 100644 --- a/windows/security/threat-protection/microsoft-defender-atp/get-file-information.md +++ b/windows/security/threat-protection/microsoft-defender-atp/get-file-information.md @@ -25,6 +25,10 @@ ms.topic: article - Want to experience Microsoft Defender for Endpoint? [Sign up for a free trial.](https://www.microsoft.com/microsoft-365/windows/microsoft-defender-atp?ocid=docs-wdatp-exposedapis-abovefoldlink) +[!include[Microsoft Defender for Endpoint API URIs for US Government](../../includes/microsoft-defender-api-usgov.md)] + +[!include[Improve request performance](../../includes/improve-request-performance.md)] + ## API description Retrieves a [File](files.md) by identifier Sha1, or Sha256 @@ -71,10 +75,8 @@ If successful and file exists - 200 OK with the [file](files.md) entity in the b Here is an example of the request. -[!include[Improve request performance](../../includes/improve-request-performance.md)] - ``` -GET https://api.securitycenter.windows.com/api/files/4388963aaa83afe2042a46a3c017ad50bdcdafb3 +GET https://api.securitycenter.microsoft.com/api/files/4388963aaa83afe2042a46a3c017ad50bdcdafb3 ``` **Response** @@ -86,7 +88,7 @@ Here is an example of the response. HTTP/1.1 200 OK Content-type: application/json { - "@odata.context": "https://api.securitycenter.windows.com/api/$metadata#Files/$entity", + "@odata.context": "https://api.securitycenter.microsoft.com/api/$metadata#Files/$entity", "sha1": "4388963aaa83afe2042a46a3c017ad50bdcdafb3", "sha256": "413c58c8267d2c8648d8f6384bacc2ae9c929b2b96578b6860b5087cd1bd6462", "globalPrevalence": 180022, diff --git a/windows/security/threat-protection/microsoft-defender-atp/get-file-related-alerts.md b/windows/security/threat-protection/microsoft-defender-atp/get-file-related-alerts.md index d1c53228ac..e9088291e8 100644 --- a/windows/security/threat-protection/microsoft-defender-atp/get-file-related-alerts.md +++ b/windows/security/threat-protection/microsoft-defender-atp/get-file-related-alerts.md @@ -25,6 +25,10 @@ ms.topic: article - Want to experience Microsoft Defender for Endpoint? [Sign up for a free trial.](https://www.microsoft.com/microsoft-365/windows/microsoft-defender-atp?ocid=docs-wdatp-exposedapis-abovefoldlink) +[!include[Microsoft Defender for Endpoint API URIs for US Government](../../includes/microsoft-defender-api-usgov.md)] + +[!include[Improve request performance](../../includes/improve-request-performance.md)] + ## API description Retrieves a collection of alerts related to a given file hash. @@ -74,8 +78,6 @@ If successful and file exists - 200 OK with list of [alert](alerts.md) entities Here is an example of the request. -[!include[Improve request performance](../../includes/improve-request-performance.md)] - ``` -GET https://api.securitycenter.windows.com/api/files/6532ec91d513acc05f43ee0aa3002599729fd3e1/alerts +GET https://api.securitycenter.microsoft.com/api/files/6532ec91d513acc05f43ee0aa3002599729fd3e1/alerts ``` diff --git a/windows/security/threat-protection/microsoft-defender-atp/get-file-related-machines.md b/windows/security/threat-protection/microsoft-defender-atp/get-file-related-machines.md index c60f272c69..99313ac5c8 100644 --- a/windows/security/threat-protection/microsoft-defender-atp/get-file-related-machines.md +++ b/windows/security/threat-protection/microsoft-defender-atp/get-file-related-machines.md @@ -25,6 +25,10 @@ ms.topic: article - Want to experience Microsoft Defender for Endpoint? [Sign up for a free trial.](https://www.microsoft.com/microsoft-365/windows/microsoft-defender-atp?ocid=docs-wdatp-exposedapis-abovefoldlink) +[!include[Microsoft Defender for Endpoint API URIs for US Government](../../includes/microsoft-defender-api-usgov.md)] + +[!include[Improve request performance](../../includes/improve-request-performance.md)] + ## API description Retrieves a collection of [Machines](machine.md) related to a given file hash. @@ -74,8 +78,6 @@ If successful and file exists - 200 OK with list of [machine](machine.md) entiti Here is an example of the request. -[!include[Improve request performance](../../includes/improve-request-performance.md)] - ``` -GET https://api.securitycenter.windows.com/api/files/1e5bc9d7e413ddd7902c2932e418702b84d0cc07/machines +GET https://api.securitycenter.microsoft.com/api/files/1e5bc9d7e413ddd7902c2932e418702b84d0cc07/machines ``` diff --git a/windows/security/threat-protection/microsoft-defender-atp/get-file-statistics.md b/windows/security/threat-protection/microsoft-defender-atp/get-file-statistics.md index 59f525f594..d81d9b8af3 100644 --- a/windows/security/threat-protection/microsoft-defender-atp/get-file-statistics.md +++ b/windows/security/threat-protection/microsoft-defender-atp/get-file-statistics.md @@ -25,6 +25,10 @@ ms.topic: article - Want to experience Microsoft Defender for Endpoint? [Sign up for a free trial.](https://www.microsoft.com/microsoft-365/windows/microsoft-defender-atp?ocid=docs-wdatp-exposedapis-abovefoldlink) +[!include[Microsoft Defender for Endpoint API URIs for US Government](../../includes/microsoft-defender-api-usgov.md)] + +[!include[Improve request performance](../../includes/improve-request-performance.md)] + ## API description Retrieves the statistics for the given file. @@ -71,10 +75,8 @@ If successful and file exists - 200 OK with statistical data in the body. If fil Here is an example of the request. -[!include[Improve request performance](../../includes/improve-request-performance.md)] - ``` -GET https://api.securitycenter.windows.com/api/files/0991a395da64e1c5fbe8732ed11e6be064081d9f/stats +GET https://api.securitycenter.microsoft.com/api/files/0991a395da64e1c5fbe8732ed11e6be064081d9f/stats ``` **Response** @@ -86,7 +88,7 @@ Here is an example of the response. HTTP/1.1 200 OK Content-type: application/json { - "@odata.context": "https://api.securitycenter.windows.com/api/$metadata#microsoft.windowsDefenderATP.api.InOrgFileStats", + "@odata.context": "https://api.securitycenter.microsoft.com/api/$metadata#microsoft.windowsDefenderATP.api.InOrgFileStats", "sha1": "0991a395da64e1c5fbe8732ed11e6be064081d9f", "orgPrevalence": "14850", "orgFirstSeen": "2019-12-07T13:44:16Z", diff --git a/windows/security/threat-protection/microsoft-defender-atp/get-installed-software.md b/windows/security/threat-protection/microsoft-defender-atp/get-installed-software.md index 293d458f27..f686ea7ed2 100644 --- a/windows/security/threat-protection/microsoft-defender-atp/get-installed-software.md +++ b/windows/security/threat-protection/microsoft-defender-atp/get-installed-software.md @@ -23,6 +23,10 @@ ms.topic: article **Applies to:** - [Microsoft Defender for Endpoint](https://go.microsoft.com/fwlink/p/?linkid=2146631) +[!include[Microsoft Defender for Endpoint API URIs for US Government](../../includes/microsoft-defender-api-usgov.md)] + +[!include[Improve request performance](../../includes/improve-request-performance.md)] + [!include[Prerelease information](../../includes/prerelease.md)] Retrieves a collection of installed software related to a given device ID. @@ -61,7 +65,7 @@ If successful, this method returns 200 OK with the installed software informatio Here is an example of the request. ``` -GET https://api.securitycenter.windows.com/api/machines/ac233fa6208e1579620bf44207c4006ed7cc4501/software +GET https://api.securitycenter.microsoft.com/api/machines/ac233fa6208e1579620bf44207c4006ed7cc4501/software ``` **Response** @@ -71,7 +75,7 @@ Here is an example of the response. ``` { -"@odata.context": "https://api.securitycenter.windows.com/api/$metadata#Software", +"@odata.context": "https://api.securitycenter.microsoft.com/api/$metadata#Software", "value": [ { "id": "microsoft-_-internet_explorer", diff --git a/windows/security/threat-protection/microsoft-defender-atp/get-investigation-collection.md b/windows/security/threat-protection/microsoft-defender-atp/get-investigation-collection.md index 296f7c81ce..b58d1ddd9e 100644 --- a/windows/security/threat-protection/microsoft-defender-atp/get-investigation-collection.md +++ b/windows/security/threat-protection/microsoft-defender-atp/get-investigation-collection.md @@ -25,6 +25,10 @@ ms.topic: article - Want to experience Microsoft Defender for Endpoint? [Sign up for a free trial.](https://www.microsoft.com/microsoft-365/windows/microsoft-defender-atp?ocid=docs-wdatp-exposedapis-abovefoldlink) +[!include[Microsoft Defender for Endpoint API URIs for US Government](../../includes/microsoft-defender-api-usgov.md)] + +[!include[Improve request performance](../../includes/improve-request-performance.md)] + ## API description Retrieves a collection of [Investigations](investigation.md). @@ -54,7 +58,7 @@ Delegated (work or school account) | Alert.ReadWrite | 'Read and write alerts' ## HTTP request ``` -GET https://api.securitycenter.windows.com/api/investigations +GET https://api.securitycenter.microsoft.com/api/investigations ``` ## Request headers @@ -71,30 +75,25 @@ Empty If successful, this method returns 200, Ok response code with a collection of [Investigations](investigation.md) entities. -[!include[Improve request performance](../../includes/improve-request-performance.md)] - - ## Example **Request** Here is an example of a request to get all investigations: - ``` -GET https://api.securitycenter.windows.com/api/investigations +GET https://api.securitycenter.microsoft.com/api/investigations ``` **Response** Here is an example of the response: - ``` HTTP/1.1 200 Ok Content-type: application/json { - "@odata.context": "https://api.securitycenter.windows.com/api/$metadata#Investigations", + "@odata.context": "https://api.securitycenter.microsoft.com/api/$metadata#Investigations", "value": [ { "id": "63017", diff --git a/windows/security/threat-protection/microsoft-defender-atp/get-investigation-object.md b/windows/security/threat-protection/microsoft-defender-atp/get-investigation-object.md index 6953ccabba..866f046908 100644 --- a/windows/security/threat-protection/microsoft-defender-atp/get-investigation-object.md +++ b/windows/security/threat-protection/microsoft-defender-atp/get-investigation-object.md @@ -25,6 +25,11 @@ ms.topic: article - Want to experience Microsoft Defender for Endpoint? [Sign up for a free trial.](https://www.microsoft.com/microsoft-365/windows/microsoft-defender-atp?ocid=docs-wdatp-exposedapis-abovefoldlink) +[!include[Microsoft Defender for Endpoint API URIs for US Government](../../includes/microsoft-defender-api-usgov.md)] + +[!include[Improve request performance](../../includes/improve-request-performance.md)] + + ## API description Retrieves specific [Investigation](investigation.md) by its ID.
    ID can be the investigation ID or the investigation triggering alert ID. @@ -50,7 +55,7 @@ Delegated (work or school account) | Alert.ReadWrite | 'Read and write alerts' ## HTTP request ``` -GET https://api.securitycenter.windows.com/api/investigations/{id} +GET https://api.securitycenter.microsoft.com/api/investigations/{id} ``` ## Request headers diff --git a/windows/security/threat-protection/microsoft-defender-atp/get-ip-related-alerts.md b/windows/security/threat-protection/microsoft-defender-atp/get-ip-related-alerts.md index 6d078cbf15..184d6eb709 100644 --- a/windows/security/threat-protection/microsoft-defender-atp/get-ip-related-alerts.md +++ b/windows/security/threat-protection/microsoft-defender-atp/get-ip-related-alerts.md @@ -25,6 +25,10 @@ ms.topic: article - Want to experience Defender for Endpoint? [Sign up for a free trial.](https://www.microsoft.com/microsoft-365/windows/microsoft-defender-atp?ocid=docs-wdatp-exposedapis-abovefoldlink) +[!include[Microsoft Defender for Endpoint API URIs for US Government](../../includes/microsoft-defender-api-usgov.md)] + +[!include[Improve request performance](../../includes/improve-request-performance.md)] + ## API description Retrieves a collection of alerts related to a given IP address. @@ -74,9 +78,6 @@ If successful and IP exists - 200 OK with list of [alert](alerts.md) entities in Here is an example of the request. -[!include[Improve request performance](../../includes/improve-request-performance.md)] - - ``` -GET https://api.securitycenter.windows.com/api/ips/10.209.67.177/alerts +GET https://api.securitycenter.microsoft.com/api/ips/10.209.67.177/alerts ``` diff --git a/windows/security/threat-protection/microsoft-defender-atp/get-ip-statistics.md b/windows/security/threat-protection/microsoft-defender-atp/get-ip-statistics.md index b58fd359e9..839b32dbf4 100644 --- a/windows/security/threat-protection/microsoft-defender-atp/get-ip-statistics.md +++ b/windows/security/threat-protection/microsoft-defender-atp/get-ip-statistics.md @@ -25,6 +25,10 @@ ms.topic: article - Want to experience Defender for Endpoint? [Sign up for a free trial.](https://www.microsoft.com/microsoft-365/windows/microsoft-defender-atp?ocid=docs-wdatp-exposedapis-abovefoldlink) +[!include[Microsoft Defender for Endpoint API URIs for US Government](../../includes/microsoft-defender-api-usgov.md)] + +[!include[Improve request performance](../../includes/improve-request-performance.md)] + ## API description Retrieves the statistics for the given IP. @@ -71,10 +75,8 @@ If successful and ip exists - 200 OK with statistical data in the body. IP do no Here is an example of the request. -[!include[Improve request performance](../../includes/improve-request-performance.md)] - ``` -GET https://api.securitycenter.windows.com/api/ips/10.209.67.177/stats +GET https://api.securitycenter.microsoft.com/api/ips/10.209.67.177/stats ``` **Response** @@ -86,7 +88,7 @@ Here is an example of the response. HTTP/1.1 200 OK Content-type: application/json { - "@odata.context": "https://api.securitycenter.windows.com/api/$metadata#microsoft.windowsDefenderATP.api.InOrgIPStats", + "@odata.context": "https://api.securitycenter.microsoft.com/api/$metadata#microsoft.windowsDefenderATP.api.InOrgIPStats", "ipAddress": "10.209.67.177", "orgPrevalence": "63515", "orgFirstSeen": "2017-07-30T13:36:06Z", diff --git a/windows/security/threat-protection/microsoft-defender-atp/get-machine-by-id.md b/windows/security/threat-protection/microsoft-defender-atp/get-machine-by-id.md index 30fd9d4263..331dca7bc1 100644 --- a/windows/security/threat-protection/microsoft-defender-atp/get-machine-by-id.md +++ b/windows/security/threat-protection/microsoft-defender-atp/get-machine-by-id.md @@ -25,6 +25,10 @@ ms.topic: article - Want to experience Defender for Endpoint? [Sign up for a free trial.](https://www.microsoft.com/microsoft-365/windows/microsoft-defender-atp?ocid=docs-wdatp-exposedapis-abovefoldlink) +[!include[Microsoft Defender for Endpoint API URIs for US Government](../../includes/microsoft-defender-api-usgov.md)] + +[!include[Improve request performance](../../includes/improve-request-performance.md)] + ## API description Retrieves specific [Machine](machine.md) by its device ID or computer name. @@ -77,10 +81,8 @@ If machine with the specified ID was not found - 404 Not Found. Here is an example of the request. -[!include[Improve request performance](../../includes/improve-request-performance.md)] - ```http -GET https://api.securitycenter.windows.com/api/machines/1e5bc9d7e413ddd7902c2932e418702b84d0cc07 +GET https://api.securitycenter.microsoft.com/api/machines/1e5bc9d7e413ddd7902c2932e418702b84d0cc07 ``` **Response** @@ -92,7 +94,7 @@ Here is an example of the response. HTTP/1.1 200 OK Content-type: application/json { - "@odata.context": "https://api.securitycenter.windows.com/api/$metadata#Machine", + "@odata.context": "https://api.securitycenter.microsoft.com/api/$metadata#Machine", "id": "1e5bc9d7e413ddd7902c2932e418702b84d0cc07", "computerDnsName": "mymachine1.contoso.com", "firstSeen": "2018-08-02T14:55:03.7791856Z", diff --git a/windows/security/threat-protection/microsoft-defender-atp/get-machine-group-exposure-score.md b/windows/security/threat-protection/microsoft-defender-atp/get-machine-group-exposure-score.md index 112ed575be..437599c09a 100644 --- a/windows/security/threat-protection/microsoft-defender-atp/get-machine-group-exposure-score.md +++ b/windows/security/threat-protection/microsoft-defender-atp/get-machine-group-exposure-score.md @@ -25,6 +25,11 @@ ms.topic: article - Want to experience Defender for Endpoint? [Sign up for a free trial.](https://www.microsoft.com/microsoft-365/windows/microsoft-defender-atp?ocid=docs-wdatp-exposedapis-abovefoldlink) +[!include[Microsoft Defender for Endpoint API URIs for US Government](../../includes/microsoft-defender-api-usgov.md)] + +[!include[Improve request performance](../../includes/improve-request-performance.md)] + + [!include[Prerelease information](../../includes/prerelease.md)] Retrieves a collection of alerts related to a given domain address. @@ -65,7 +70,7 @@ If successful, this method returns 200 OK, with a list of exposure score per dev Here is an example of the request. ``` -GET https://api.securitycenter.windows.com/api/exposureScore/ByMachineGroups +GET https://api.securitycenter.microsoft.com/api/exposureScore/ByMachineGroups ``` ### Response @@ -75,7 +80,7 @@ Here is an example of the response. ```json { - "@odata.context": "https://api-us.securitycenter.windows.com/api/$metadata#ExposureScore", + "@odata.context": "https://api.securitycenter.microsoft.com/api/$metadata#ExposureScore", "value": [ { "time": "2019-12-03T09:51:28.214338Z", diff --git a/windows/security/threat-protection/microsoft-defender-atp/get-machine-log-on-users.md b/windows/security/threat-protection/microsoft-defender-atp/get-machine-log-on-users.md index 55bdffa21c..42ceb10f0e 100644 --- a/windows/security/threat-protection/microsoft-defender-atp/get-machine-log-on-users.md +++ b/windows/security/threat-protection/microsoft-defender-atp/get-machine-log-on-users.md @@ -25,6 +25,10 @@ ms.topic: article - Want to experience Microsoft Defender for Endpoint? [Sign up for a free trial.](https://www.microsoft.com/microsoft-365/windows/microsoft-defender-atp?ocid=docs-wdatp-exposedapis-abovefoldlink) +[!include[Microsoft Defender for Endpoint API URIs for US Government](../../includes/microsoft-defender-api-usgov.md)] + +[!include[Improve request performance](../../includes/improve-request-performance.md)] + ## API description Retrieves a collection of logged on users on a specific device. @@ -73,10 +77,8 @@ If successful and device exists - 200 OK with list of [user](user.md) entities i Here is an example of the request. -[!include[Improve request performance](../../includes/improve-request-performance.md)] - ```http -GET https://api.securitycenter.windows.com/api/machines/1e5bc9d7e413ddd7902c2932e418702b84d0cc07/logonusers +GET https://api.securitycenter.microsoft.com/api/machines/1e5bc9d7e413ddd7902c2932e418702b84d0cc07/logonusers ``` **Response** @@ -88,7 +90,7 @@ Here is an example of the response. HTTP/1.1 200 OK Content-type: application/json { - "@odata.context": "https://api.securitycenter.windows.com/api/$metadata#Users", + "@odata.context": "https://api.securitycenter.microsoft.com/api/$metadata#Users", "value": [ { "id": "contoso\\user1", diff --git a/windows/security/threat-protection/microsoft-defender-atp/get-machine-related-alerts.md b/windows/security/threat-protection/microsoft-defender-atp/get-machine-related-alerts.md index 49e6162ab5..73d13b3564 100644 --- a/windows/security/threat-protection/microsoft-defender-atp/get-machine-related-alerts.md +++ b/windows/security/threat-protection/microsoft-defender-atp/get-machine-related-alerts.md @@ -25,6 +25,10 @@ ms.topic: article - Want to experience Defender for Endpoint? [Sign up for a free trial.](https://www.microsoft.com/microsoft-365/windows/microsoft-defender-atp?ocid=docs-wdatp-exposedapis-abovefoldlink) +[!include[Microsoft Defender for Endpoint API URIs for US Government](../../includes/microsoft-defender-api-usgov.md)] + +[!include[Improve request performance](../../includes/improve-request-performance.md)] + ## API description Retrieves all [Alerts](alerts.md) related to a specific device. diff --git a/windows/security/threat-protection/microsoft-defender-atp/get-machineaction-object.md b/windows/security/threat-protection/microsoft-defender-atp/get-machineaction-object.md index dc294c9002..cca2d17971 100644 --- a/windows/security/threat-protection/microsoft-defender-atp/get-machineaction-object.md +++ b/windows/security/threat-protection/microsoft-defender-atp/get-machineaction-object.md @@ -25,6 +25,10 @@ ms.topic: article - Want to experience Defender for Endpoint? [Sign up for a free trial.](https://www.microsoft.com/microsoft-365/windows/microsoft-defender-atp?ocid=docs-wdatp-exposedapis-abovefoldlink) +[!include[Microsoft Defender for Endpoint API URIs for US Government](../../includes/microsoft-defender-api-usgov.md)] + +[!include[Improve request performance](../../includes/improve-request-performance.md)] + ## API description Retrieves specific [Machine Action](machineaction.md) by its ID. @@ -50,7 +54,7 @@ Delegated (work or school account) | Machine.ReadWrite | 'Read and write machine ## HTTP request ``` -GET https://api.securitycenter.windows.com/api/machineactions/{id} +GET https://api.securitycenter.microsoft.com/api/machineactions/{id} ``` ## Request headers @@ -72,10 +76,8 @@ If successful, this method returns 200, Ok response code with a [Machine Action] Here is an example of the request. -[!include[Improve request performance](../../includes/improve-request-performance.md)] - ``` -GET https://api.securitycenter.windows.com/api/machineactions/2e9da30d-27f6-4208-81f2-9cd3d67893ba +GET https://api.securitycenter.microsoft.com/api/machineactions/2e9da30d-27f6-4208-81f2-9cd3d67893ba ``` **Response** @@ -87,7 +89,7 @@ Here is an example of the response. HTTP/1.1 200 Ok Content-type: application/json { - "@odata.context": "https://api.securitycenter.windows.com/api/$metadata#MachineActions/$entity", + "@odata.context": "https://api.securitycenter.microsoft.com/api/$metadata#MachineActions/$entity", "id": "5382f7ea-7557-4ab7-9782-d50480024a4e", "type": "Isolate", "scope": "Selective", diff --git a/windows/security/threat-protection/microsoft-defender-atp/get-machineactions-collection.md b/windows/security/threat-protection/microsoft-defender-atp/get-machineactions-collection.md index 026a5fe161..4828b5ec67 100644 --- a/windows/security/threat-protection/microsoft-defender-atp/get-machineactions-collection.md +++ b/windows/security/threat-protection/microsoft-defender-atp/get-machineactions-collection.md @@ -25,6 +25,10 @@ ms.topic: article - Want to experience Defender for Endpoint? [Sign up for a free trial.](https://www.microsoft.com/microsoft-365/windows/microsoft-defender-atp?ocid=docs-wdatp-exposedapis-abovefoldlink) +[!include[Microsoft Defender for Endpoint API URIs for US Government](../../includes/microsoft-defender-api-usgov.md)] + +[!include[Improve request performance](../../includes/improve-request-performance.md)] + ## API description Retrieves a collection of [Machine Actions](machineaction.md). @@ -54,7 +58,7 @@ Delegated (work or school account) | Machine.ReadWrite | 'Read and write machine ## HTTP request ``` -GET https://api.securitycenter.windows.com/api/machineactions +GET https://api.securitycenter.microsoft.com/api/machineactions ``` ## Request headers @@ -77,10 +81,8 @@ If successful, this method returns 200, Ok response code with a collection of [m Here is an example of the request on an organization that has three MachineActions. -[!include[Improve request performance](../../includes/improve-request-performance.md)] - ``` -GET https://api.securitycenter.windows.com/api/machineactions +GET https://api.securitycenter.microsoft.com/api/machineactions ``` **Response** @@ -92,7 +94,7 @@ Here is an example of the response. HTTP/1.1 200 Ok Content-type: application/json { - "@odata.context": "https://api.securitycenter.windows.com/api/$metadata#MachineActions", + "@odata.context": "https://api.securitycenter.microsoft.com/api/$metadata#MachineActions", "value": [ { "id": "69dc3630-1ccc-4342-acf3-35286eec741d", @@ -147,20 +149,18 @@ Content-type: application/json Here is an example of a request that filters the MachineActions by machine ID and shows the latest two MachineActions. ``` -GET https://api.securitycenter.windows.com/api/machineactions?$filter=machineId eq 'f46b9bb259ed4a7fb9981b73510e3cc7aa81ec1f'&$top=2 +GET https://api.securitycenter.microsoft.com/api/machineactions?$filter=machineId eq 'f46b9bb259ed4a7fb9981b73510e3cc7aa81ec1f'&$top=2 ``` **Response** Here is an example of the response. -[!include[Improve request performance](../../includes/improve-request-performance.md)] - ``` HTTP/1.1 200 Ok Content-type: application/json { - "@odata.context": "https://api.securitycenter.windows.com/api/$metadata#MachineActions", + "@odata.context": "https://api.securitycenter.microsoft.com/api/$metadata#MachineActions", "value": [ { "id": "69dc3630-1ccc-4342-acf3-35286eec741d", diff --git a/windows/security/threat-protection/microsoft-defender-atp/get-machinegroups-collection.md b/windows/security/threat-protection/microsoft-defender-atp/get-machinegroups-collection.md index 93f27a6093..f4c7216ceb 100644 --- a/windows/security/threat-protection/microsoft-defender-atp/get-machinegroups-collection.md +++ b/windows/security/threat-protection/microsoft-defender-atp/get-machinegroups-collection.md @@ -24,9 +24,13 @@ ms.date: 10/07/2018 **Applies to:** - - [Microsoft Defender for Endpoint](https://go.microsoft.com/fwlink/p/?linkid=2146631) +[!include[Microsoft Defender for Endpoint API URIs for US Government](../../includes/microsoft-defender-api-usgov.md)] + +[!include[Improve request performance](../../includes/improve-request-performance.md)] + + Retrieves a collection of RBAC device groups. ## Permissions diff --git a/windows/security/threat-protection/microsoft-defender-atp/get-machines-by-software.md b/windows/security/threat-protection/microsoft-defender-atp/get-machines-by-software.md index 7490907216..042f48719b 100644 --- a/windows/security/threat-protection/microsoft-defender-atp/get-machines-by-software.md +++ b/windows/security/threat-protection/microsoft-defender-atp/get-machines-by-software.md @@ -25,6 +25,11 @@ ms.topic: article - [Microsoft Defender for Endpoint](https://go.microsoft.com/fwlink/p/?linkid=2146631) +[!include[Microsoft Defender for Endpoint API URIs for US Government](../../includes/microsoft-defender-api-usgov.md)] + +[!include[Improve request performance](../../includes/improve-request-performance.md)] + + [!include[Prerelease information](../../includes/prerelease.md)] Retrieve a list of device references that has this software installed. @@ -62,7 +67,7 @@ If successful, this method returns 200 OK and a list of devices with the softwar Here is an example of the request. ``` -GET https://api.securitycenter.windows.com/api/Software/microsoft-_-edge/machineReferences +GET https://api.securitycenter.microsoft.com/api/Software/microsoft-_-edge/machineReferences ``` **Response** @@ -72,7 +77,7 @@ Here is an example of the response. ```json { - "@odata.context": "https://api-us.securitycenter.windows.com/api/$metadata#MachineReferences", + "@odata.context": "https://api.securitycenter.microsoft.com/api/$metadata#MachineReferences", "value": [ { "id": "7c7e1896fa39efb0a32a2cf421d837af1b9bf762", diff --git a/windows/security/threat-protection/microsoft-defender-atp/get-machines-by-vulnerability.md b/windows/security/threat-protection/microsoft-defender-atp/get-machines-by-vulnerability.md index bbd94f8b8d..eb8b9da158 100644 --- a/windows/security/threat-protection/microsoft-defender-atp/get-machines-by-vulnerability.md +++ b/windows/security/threat-protection/microsoft-defender-atp/get-machines-by-vulnerability.md @@ -24,6 +24,11 @@ ms.topic: article - [Microsoft Defender for Endpoint](https://go.microsoft.com/fwlink/p/?linkid=2146631) +[!include[Microsoft Defender for Endpoint API URIs for US Government](../../includes/microsoft-defender-api-usgov.md)] + +[!include[Improve request performance](../../includes/improve-request-performance.md)] + + [!include[Prerelease information](../../includes/prerelease.md)] Retrieves a list of devices affected by a vulnerability. @@ -62,7 +67,7 @@ If successful, this method returns 200 OK with the vulnerability information in Here is an example of the request. ``` -GET https://api.securitycenter.windows.com/api/vulnerabilities/CVE-2019-0608/machineReferences +GET https://api.securitycenter.microsoft.com/api/vulnerabilities/CVE-2019-0608/machineReferences ``` **Response** @@ -72,7 +77,7 @@ Here is an example of the response. ```json { - "@odata.context": "https://api.securitycenter.windows.com/api/$metadata#MachineReferences", + "@odata.context": "https://api.securitycenter.microsoft.com/api/$metadata#MachineReferences", "value": [ { "id": "235a2e6278c63fcf85bab9c370396972c58843de", diff --git a/windows/security/threat-protection/microsoft-defender-atp/get-machines.md b/windows/security/threat-protection/microsoft-defender-atp/get-machines.md index aef7e2789a..725fa8e4b2 100644 --- a/windows/security/threat-protection/microsoft-defender-atp/get-machines.md +++ b/windows/security/threat-protection/microsoft-defender-atp/get-machines.md @@ -25,6 +25,10 @@ ms.topic: article - Want to experience Defender for Endpoint? [Sign up for a free trial.](https://www.microsoft.com/microsoft-365/windows/microsoft-defender-atp?ocid=docs-wdatp-exposedapis-abovefoldlink) +[!include[Microsoft Defender for Endpoint API URIs for US Government](../../includes/microsoft-defender-api-usgov.md)] + +[!include[Improve request performance](../../includes/improve-request-performance.md)] + ## API description Retrieves a collection of [Machines](machine.md) that have communicated with Microsoft Defender for Endpoint cloud. @@ -56,7 +60,7 @@ Delegated (work or school account) | Machine.ReadWrite | 'Read and write machine ## HTTP request ```http -GET https://api.securitycenter.windows.com/api/machines +GET https://api.securitycenter.microsoft.com/api/machines ``` ## Request headers @@ -79,11 +83,8 @@ If successful and machines exists - 200 OK with list of [machine](machine.md) en Here is an example of the request. -[!include[Improve request performance](../../includes/improve-request-performance.md)] - - ```http -GET https://api.securitycenter.windows.com/api/machines +GET https://api.securitycenter.microsoft.com/api/machines ``` **Response** @@ -94,7 +95,7 @@ Here is an example of the response. HTTP/1.1 200 OK Content-type: application/json { - "@odata.context": "https://api.securitycenter.windows.com/api/$metadata#Machines", + "@odata.context": "https://api.securitycenter.microsoft.com/api/$metadata#Machines", "value": [ { "id": "1e5bc9d7e413ddd7902c2932e418702b84d0cc07", diff --git a/windows/security/threat-protection/microsoft-defender-atp/get-missing-kbs-machine.md b/windows/security/threat-protection/microsoft-defender-atp/get-missing-kbs-machine.md index 52846f5bdf..089381bade 100644 --- a/windows/security/threat-protection/microsoft-defender-atp/get-missing-kbs-machine.md +++ b/windows/security/threat-protection/microsoft-defender-atp/get-missing-kbs-machine.md @@ -25,6 +25,10 @@ ms.topic: article - Want to experience Microsoft Defender for Endpoint? [Sign up for a free trial.](https://www.microsoft.com/microsoft-365/windows/microsoft-defender-atp?ocid=docs-wdatp-exposedapis-abovefoldlink) +[!include[Microsoft Defender for Endpoint API URIs for US Government](../../includes/microsoft-defender-api-usgov.md)] + +[!include[Improve request performance](../../includes/improve-request-performance.md)] + Retrieves missing KBs (security updates) by device ID ## HTTP request @@ -54,7 +58,7 @@ If successful, this method returns 200 OK, with the specified device missing kb Here is an example of the request. ``` -GET https://api.securitycenter.windows.com/api/machines/2339ad14a01bd0299afb93dfa2550136057bff96/getmissingkbs +GET https://api.securitycenter.microsoft.com/api/machines/2339ad14a01bd0299afb93dfa2550136057bff96/getmissingkbs ``` ### Response diff --git a/windows/security/threat-protection/microsoft-defender-atp/get-missing-kbs-software.md b/windows/security/threat-protection/microsoft-defender-atp/get-missing-kbs-software.md index 21506f3767..b9b44afb2d 100644 --- a/windows/security/threat-protection/microsoft-defender-atp/get-missing-kbs-software.md +++ b/windows/security/threat-protection/microsoft-defender-atp/get-missing-kbs-software.md @@ -25,6 +25,11 @@ ms.topic: article - Want to experience Defender for Endpoint? [Sign up for a free trial.](https://www.microsoft.com/microsoft-365/windows/microsoft-defender-atp?ocid=docs-wdatp-exposedapis-abovefoldlink) +[!include[Microsoft Defender for Endpoint API URIs for US Government](../../includes/microsoft-defender-api-usgov.md)] + +[!include[Improve request performance](../../includes/improve-request-performance.md)] + + Retrieves missing KBs (security updates) by software ID ## Permissions @@ -63,7 +68,7 @@ If successful, this method returns 200 OK, with the specified software missing k Here is an example of the request. ``` -GET https://api.securitycenter.windows.com/api/Software/microsoft-_-edge/getmissingkbs +GET https://api.securitycenter.microsoft.com/api/Software/microsoft-_-edge/getmissingkbs ``` ### Response diff --git a/windows/security/threat-protection/microsoft-defender-atp/get-package-sas-uri.md b/windows/security/threat-protection/microsoft-defender-atp/get-package-sas-uri.md index ffd04c4f62..17ac22ae88 100644 --- a/windows/security/threat-protection/microsoft-defender-atp/get-package-sas-uri.md +++ b/windows/security/threat-protection/microsoft-defender-atp/get-package-sas-uri.md @@ -25,6 +25,10 @@ ms.topic: article - Want to experience Defender for Endpoint? [Sign up for a free trial.](https://www.microsoft.com/microsoft-365/windows/microsoft-defender-atp?ocid=docs-wdatp-exposedapis-abovefoldlink) +[!include[Microsoft Defender for Endpoint API URIs for US Government](../../includes/microsoft-defender-api-usgov.md)] + +[!include[Improve request performance](../../includes/improve-request-performance.md)] + ## API description Get a URI that allows downloading of an [Investigation package](collect-investigation-package.md). @@ -45,7 +49,7 @@ Delegated (work or school account) | Machine.CollectForensics | 'Collect forensi ## HTTP request ``` -GET https://api.securitycenter.windows.com/api/machineactions/{machine action id}/getPackageUri +GET https://api.securitycenter.microsoft.com/api/machineactions/{machine action id}/getPackageUri ``` ## Request headers @@ -69,7 +73,7 @@ If successful, this method returns 200, Ok response code with object that holds Here is an example of the request. ``` -GET https://api.securitycenter.windows.com/api/machineactions/7327b54fd718525cbca07dacde913b5ac3c85673/GetPackageUri +GET https://api.securitycenter.microsoft.com/api/machineactions/7327b54fd718525cbca07dacde913b5ac3c85673/GetPackageUri ``` @@ -77,15 +81,12 @@ GET https://api.securitycenter.windows.com/api/machineactions/7327b54fd718525cbc Here is an example of the response. -[!include[Improve request performance](../../includes/improve-request-performance.md)] - - ``` HTTP/1.1 200 Ok Content-type: application/json { - "@odata.context": "https://api.securitycenter.windows.com/api/$metadata#Edm.String", + "@odata.context": "https://api.securitycenter.microsoft.com/api/$metadata#Edm.String", "value": "\"https://userrequests-us.securitycenter.windows.com:443/safedownload/WDATP_Investigation_Package.zip?token=gbDyj7y%2fbWGAZjn2sFiZXlliBTXOCVG7yiJ6mXNaQ9pLByC2Wxeno9mENsPFP3xMk5l%2bZiJXjLvqAyNEzUNROxoM2I1er9dxzfVeBsxSmclJjPsAx%2btiNyxSz1Ax%2b5jaT5cL5bZg%2b8wgbwY9urXbTpGjAKh6FB1e%2b0ypcWkPm8UkfOwsmtC%2biZJ2%2bPqnkkeQk7SKMNoAvmh9%2fcqDIPKXGIBjMa0D9auzypOqd8bQXp7p2BnLSH136BxST8n9IHR4PILvRjAYW9kvtHkBpBitfydAsUW4g2oDZSPN3kCLBOoo1C4w4Lkc9Bc3GNU2IW6dfB7SHcp7G9p4BDkeJl3VuDs6esCaeBorpn9FKJ%2fXo7o9pdcI0hUPZ6Ds9hiPpwPUtz5J29CBE3QAopCK%2fsWlf6OW2WyXsrNRSnF1tVE5H3wXpREzuhD7S4AIA3OIEZKzC4jIPLeMu%2bazZU9xGwuc3gICOaokbwMJiZTqcUuK%2fV9YdBdjdg8wJ16NDU96Pl6%2fgew2KYuk6Wo7ZuHotgHI1abcsvdlpe4AvixDbqcRJthsg2PpLRaFLm5av44UGkeK6TJpFvxUn%2f9fg6Zk5yM1KUTHb8XGmutoCM8U9er6AzXZlY0gGc3D3bQOg41EJZkEZLyUEbk1hXJB36ku2%2bW01cG71t7MxMBYz7%2bdXobxpdo%3d%3bRWS%2bCeoDfTyDcfH5pkCg6hYDmCOPr%2fHYQuaUWUBNVnXURYkdyOzVHqp%2fe%2f1BNyPdVoVkpQHpz1pPS3b5g9h7IMmNKCk5gFq5m2nPx6kk9EYtzx8Ndoa2m9Yj%2bSaf8zIFke86YnfQL4AYewsnQNJJh4wc%2bXxGlBq7axDcoiOdX91rKzVicH3GSBkFoLFAKoegWWsF%2fEDZcVpF%2fXUA1K8HvB6dwyfy4y0sAqnNPxYTQ97mG7yHhxPt4Pe9YF2UPPAJVuEf8LNlQ%2bWHC9%2f7msF6UUI4%2fca%2ftpjFs%2fSNeRE8%2fyQj21TI8YTF1SowvaJuDc1ivEoeopNNGG%2bGI%2fX0SckaVxU9Hdkh0zbydSlT5SZwbSwescs0IpzECitBbaLUz4aT8KTs8T0lvx8D7Te3wVsKAJ1r3iFMQZrlk%2bS1WW8rvac7oHRx2HKURn1v7fDIQWgJr9aNsNlFz4fLJ50T2qSHuuepkLVbe93Va072aMGhvr09WVKoTpAf1j2bcFZZU6Za5PxI32mr0k90FgiYFJ1F%2f1vRDrGwvWVWUkR3Z33m4g0gHa52W1FMxQY0TJIwbovD6FaSNDx7xhKZSd5IJ7r6P91Gez49PaZRcAZPjd%2bfbul3JNm1VqQPTLohT7wa0ymRiXpSST74xtFzuEBzNSNATdbngj3%2fwV4JesTjZjIj5Dc%3d%3blumqauVlFuuO8MQffZgs0tLJ4Fq6fpeozPTdDf8Ll6XLegi079%2b4mSPFjTK0y6eohstxdoOdom2wAHiZwk0u4KLKmRkfYOdT1wHY79qKoBQ3ZDHFTys9V%2fcwKGl%2bl8IenWDutHygn5IcA1y7GTZj4g%3d%3d\"" } diff --git a/windows/security/threat-protection/microsoft-defender-atp/get-recommendation-by-id.md b/windows/security/threat-protection/microsoft-defender-atp/get-recommendation-by-id.md index 79fcaae0ff..857d3458e0 100644 --- a/windows/security/threat-protection/microsoft-defender-atp/get-recommendation-by-id.md +++ b/windows/security/threat-protection/microsoft-defender-atp/get-recommendation-by-id.md @@ -20,7 +20,13 @@ ms.topic: article [!INCLUDE [Microsoft 365 Defender rebranding](../../includes/microsoft-defender.md)] -**Applies to:** [Microsoft Defender for Endpoint](https://go.microsoft.com/fwlink/p/?linkid=2146631) +**Applies to:** +- [Microsoft Defender for Endpoint](https://go.microsoft.com/fwlink/p/?linkid=2146631) + +[!include[Microsoft Defender for Endpoint API URIs for US Government](../../includes/microsoft-defender-api-usgov.md)] + +[!include[Improve request performance](../../includes/improve-request-performance.md)] + [!include[Prerelease information](../../includes/prerelease.md)] @@ -60,7 +66,7 @@ If successful, this method returns 200 OK with the security recommendations in t Here is an example of the request. ``` -GET https://api.securitycenter.windows.com/api/recommendations/va-_-google-_-chrome +GET https://api.securitycenter.microsoft.com/api/recommendations/va-_-google-_-chrome ``` **Response** @@ -69,7 +75,7 @@ Here is an example of the response. ```json { - "@odata.context": "https://api.securitycenter.windows.com/api/$metadata#Recommendations/$entity", + "@odata.context": "https://api.securitycenter.microsoft.com/api/$metadata#Recommendations/$entity", "id": "va-_-google-_-chrome", "productName": "chrome", "recommendationName": "Update Chrome", diff --git a/windows/security/threat-protection/microsoft-defender-atp/get-recommendation-machines.md b/windows/security/threat-protection/microsoft-defender-atp/get-recommendation-machines.md index 079ab2c449..9322ad8635 100644 --- a/windows/security/threat-protection/microsoft-defender-atp/get-recommendation-machines.md +++ b/windows/security/threat-protection/microsoft-defender-atp/get-recommendation-machines.md @@ -21,9 +21,13 @@ ms.topic: article [!INCLUDE [Microsoft 365 Defender rebranding](../../includes/microsoft-defender.md)] **Applies to:** - - [Microsoft Defender for Endpoint](https://go.microsoft.com/fwlink/p/?linkid=2146631) +[!include[Microsoft Defender for Endpoint API URIs for US Government](../../includes/microsoft-defender-api-usgov.md)] + +[!include[Improve request performance](../../includes/improve-request-performance.md)] + + [!include[Prerelease information](../../includes/prerelease.md)] Retrieves a list of devices associated with the security recommendation. @@ -62,7 +66,7 @@ If successful, this method returns 200 OK with the list of devices associated wi Here is an example of the request. ``` -GET https://api.securitycenter.windows.com/api/recommendations/va-_-google-_-chrome/machineReferences +GET https://api.securitycenter.microsoft.com/api/recommendations/va-_-google-_-chrome/machineReferences ``` **Response** @@ -71,7 +75,7 @@ Here is an example of the response. ```json { - "@odata.context": "https://api.securitycenter.windows.com/api/$metadata#MachineReferences", + "@odata.context": "https://api.securitycenter.microsoft.com/api/$metadata#MachineReferences", "value": [ { "id": "e058770379bc199a9c179ce52a23e16fd44fd2ee", diff --git a/windows/security/threat-protection/microsoft-defender-atp/get-recommendation-software.md b/windows/security/threat-protection/microsoft-defender-atp/get-recommendation-software.md index 0656c420e8..d0c62de5ce 100644 --- a/windows/security/threat-protection/microsoft-defender-atp/get-recommendation-software.md +++ b/windows/security/threat-protection/microsoft-defender-atp/get-recommendation-software.md @@ -21,9 +21,13 @@ ms.topic: article [!INCLUDE [Microsoft 365 Defender rebranding](../../includes/microsoft-defender.md)] **Applies to:** - - [Microsoft Defender for Endpoint](https://go.microsoft.com/fwlink/p/?linkid=2146631) +[!include[Microsoft Defender for Endpoint API URIs for US Government](../../includes/microsoft-defender-api-usgov.md)] + +[!include[Improve request performance](../../includes/improve-request-performance.md)] + + [!include[Prerelease information](../../includes/prerelease.md)] Retrieves a security recommendation related to a specific software. @@ -62,7 +66,7 @@ If successful, this method returns 200 OK with the software associated with the Here is an example of the request. ``` -GET https://api.securitycenter.windows.com/api/recommendations/va-_-google-_-chrome/software +GET https://api.securitycenter.microsoft.com/api/recommendations/va-_-google-_-chrome/software ``` **Response** @@ -71,7 +75,7 @@ Here is an example of the response. ```json { - "@odata.context": "https://api.securitycenter.windows.com/api/$metadata#Analytics.Contracts.PublicAPI.PublicProductDto", + "@odata.context": "https://api.securitycenter.microsoft.com/api/$metadata#Analytics.Contracts.PublicAPI.PublicProductDto", "id": "google-_-chrome", "name": "chrome", "vendor": "google", diff --git a/windows/security/threat-protection/microsoft-defender-atp/get-recommendation-vulnerabilities.md b/windows/security/threat-protection/microsoft-defender-atp/get-recommendation-vulnerabilities.md index 95b525bf6b..07d26afe6f 100644 --- a/windows/security/threat-protection/microsoft-defender-atp/get-recommendation-vulnerabilities.md +++ b/windows/security/threat-protection/microsoft-defender-atp/get-recommendation-vulnerabilities.md @@ -21,9 +21,13 @@ ms.topic: article [!INCLUDE [Microsoft 365 Defender rebranding](../../includes/microsoft-defender.md)] **Applies to:** - - [Microsoft Defender for Endpoint](https://go.microsoft.com/fwlink/p/?linkid=2146631) +[!include[Microsoft Defender for Endpoint API URIs for US Government](../../includes/microsoft-defender-api-usgov.md)] + +[!include[Improve request performance](../../includes/improve-request-performance.md)] + + [!include[Prerelease information](../../includes/prerelease.md)] Retrieves a list of vulnerabilities associated with the security recommendation. @@ -62,7 +66,7 @@ If successful, this method returns 200 OK, with the list of vulnerabilities asso Here is an example of the request. ``` -GET https://api.securitycenter.windows.com/api/recommendations/va-_-google-_-chrome/vulnerabilities +GET https://api.securitycenter.microsoft.com/api/recommendations/va-_-google-_-chrome/vulnerabilities ``` **Response** @@ -71,7 +75,7 @@ Here is an example of the response. ```json { - "@odata.context": "https://api.securitycenter.windows.com/api/$metadata#Collection(Analytics.Contracts.PublicAPI.PublicVulnerabilityDto)", + "@odata.context": "https://api.securitycenter.microsoft.com/api/$metadata#Collection(Analytics.Contracts.PublicAPI.PublicVulnerabilityDto)", "value": [ { "id": "CVE-2019-13748", diff --git a/windows/security/threat-protection/microsoft-defender-atp/get-security-recommendations.md b/windows/security/threat-protection/microsoft-defender-atp/get-security-recommendations.md index 91a19e9c18..a6e9564b8b 100644 --- a/windows/security/threat-protection/microsoft-defender-atp/get-security-recommendations.md +++ b/windows/security/threat-protection/microsoft-defender-atp/get-security-recommendations.md @@ -24,6 +24,10 @@ ms.topic: article - [Microsoft Defender for Endpoint](https://go.microsoft.com/fwlink/p/?linkid=2146631) +[!include[Microsoft Defender for Endpoint API URIs for US Government](../../includes/microsoft-defender-api-usgov.md)] + +[!include[Improve request performance](../../includes/improve-request-performance.md)] + [!include[Prerelease information](../../includes/prerelease.md)] Retrieves a collection of security recommendations related to a given device ID. @@ -62,7 +66,7 @@ If successful, this method returns 200 OK with the security recommendations in t Here is an example of the request. ``` -GET https://api.securitycenter.windows.com/api/machines/ac233fa6208e1579620bf44207c4006ed7cc4501/recommendations +GET https://api.securitycenter.microsoft.com/api/machines/ac233fa6208e1579620bf44207c4006ed7cc4501/recommendations ``` **Response** @@ -72,7 +76,7 @@ Here is an example of the response. ``` { - "@odata.context": "https://api.securitycenter.windows.com/api/$metadata#Recommendations", + "@odata.context": "https://api.securitycenter.microsoft.com/api/$metadata#Recommendations", "value": [ { "id": "va-_-git-scm-_-git", diff --git a/windows/security/threat-protection/microsoft-defender-atp/get-software-by-id.md b/windows/security/threat-protection/microsoft-defender-atp/get-software-by-id.md index 07550126c1..e5246656fb 100644 --- a/windows/security/threat-protection/microsoft-defender-atp/get-software-by-id.md +++ b/windows/security/threat-protection/microsoft-defender-atp/get-software-by-id.md @@ -25,6 +25,11 @@ ms.topic: article - [Microsoft Defender for Endpoint](https://go.microsoft.com/fwlink/p/?linkid=2146631) +[!include[Microsoft Defender for Endpoint API URIs for US Government](../../includes/microsoft-defender-api-usgov.md)] + +[!include[Improve request performance](../../includes/improve-request-performance.md)] + + [!include[Prerelease information](../../includes/prerelease.md)] Retrieves software details by ID. @@ -62,7 +67,7 @@ If successful, this method returns 200 OK with the specified software data in th Here is an example of the request. ``` -GET https://api.securitycenter.windows.com/api/Software/microsoft-_-edge +GET https://api.securitycenter.microsoft.com/api/Software/microsoft-_-edge ``` **Response** @@ -72,7 +77,7 @@ Here is an example of the response. ```json { - "@odata.context": "https://api.securitycenter.windows.com/api/$metadata#Software/$entity", + "@odata.context": "https://api.securitycenter.microsoft.com/api/$metadata#Software/$entity", "id": "microsoft-_-edge", "name": "edge", "vendor": "microsoft", diff --git a/windows/security/threat-protection/microsoft-defender-atp/get-software-ver-distribution.md b/windows/security/threat-protection/microsoft-defender-atp/get-software-ver-distribution.md index 7ae8324de9..68faccd755 100644 --- a/windows/security/threat-protection/microsoft-defender-atp/get-software-ver-distribution.md +++ b/windows/security/threat-protection/microsoft-defender-atp/get-software-ver-distribution.md @@ -25,6 +25,11 @@ ms.topic: article - [Microsoft Defender for Endpoint](https://go.microsoft.com/fwlink/p/?linkid=2146631) +[!include[Microsoft Defender for Endpoint API URIs for US Government](../../includes/microsoft-defender-api-usgov.md)] + +[!include[Improve request performance](../../includes/improve-request-performance.md)] + + [!include[Prerelease information](../../includes/prerelease.md)] Retrieves a list of your organization's software version distribution. @@ -62,7 +67,7 @@ If successful, this method returns 200 OK with a list of software distributions Here is an example of the request. ``` -GET https://api.securitycenter.windows.com/api/Software/microsoft-_-edge/distributions +GET https://api.securitycenter.microsoft.com/api/Software/microsoft-_-edge/distributions ``` **Response** @@ -72,7 +77,7 @@ Here is an example of the response. ```json { - "@odata.context": "https://api-us.securitycenter.windows.com/api/$metadata#Distributions", + "@odata.context": "https://api.securitycenter.microsoft.com/api/$metadata#Distributions", "value": [ { "version": "11.0.17134.1039", diff --git a/windows/security/threat-protection/microsoft-defender-atp/get-software.md b/windows/security/threat-protection/microsoft-defender-atp/get-software.md index 6a02de62a0..e6eba350a0 100644 --- a/windows/security/threat-protection/microsoft-defender-atp/get-software.md +++ b/windows/security/threat-protection/microsoft-defender-atp/get-software.md @@ -25,6 +25,11 @@ ms.topic: article - Want to experience Defender for Endpoint? [Sign up for a free trial.](https://www.microsoft.com/microsoft-365/windows/microsoft-defender-atp?ocid=docs-wdatp-exposedapis-abovefoldlink) +[!include[Microsoft Defender for Endpoint API URIs for US Government](../../includes/microsoft-defender-api-usgov.md)] + +[!include[Improve request performance](../../includes/improve-request-performance.md)] + + Retrieves the organization software inventory. ## Permissions @@ -61,7 +66,7 @@ If successful, this method returns 200 OK with the software inventory in the bod Here is an example of the request. ``` -GET https://api.securitycenter.windows.com/api/Software +GET https://api.securitycenter.microsoft.com/api/Software ``` **Response** @@ -71,7 +76,7 @@ Here is an example of the response. ```json { - "@odata.context": "https://api-us.securitycenter.windows.com/api/$metadata#Software", + "@odata.context": "https://api.securitycenter.microsoft.com/api/$metadata#Software", "value": [ { "id": "microsoft-_-edge", diff --git a/windows/security/threat-protection/microsoft-defender-atp/get-ti-indicators-collection.md b/windows/security/threat-protection/microsoft-defender-atp/get-ti-indicators-collection.md index ea42bf22ac..5cd725bebe 100644 --- a/windows/security/threat-protection/microsoft-defender-atp/get-ti-indicators-collection.md +++ b/windows/security/threat-protection/microsoft-defender-atp/get-ti-indicators-collection.md @@ -25,6 +25,10 @@ ms.topic: article - Want to experience Microsoft Defender for Endpoint? [Sign up for a free trial.](https://www.microsoft.com/microsoft-365/windows/microsoft-defender-atp?ocid=docs-wdatp-exposedapis-abovefoldlink) +[!include[Microsoft Defender for Endpoint API URIs for US Government](../../includes/microsoft-defender-api-usgov.md)] + +[!include[Improve request performance](../../includes/improve-request-performance.md)] + ## API description Retrieves a collection of all active [Indicators](ti-indicator.md). @@ -48,11 +52,9 @@ Delegated (work or school account) | Ti.ReadWrite | 'Read and write Indicators' ## HTTP request ``` -GET https://api.securitycenter.windows.com/api/indicators +GET https://api.securitycenter.microsoft.com/api/indicators ``` -[!include[Improve request performance](../../includes/improve-request-performance.md)] - ## Request headers Name | Type | Description @@ -76,7 +78,7 @@ If successful, this method returns 200, Ok response code with a collection of [I Here is an example of a request that gets all Indicators ``` -GET https://api.securitycenter.windows.com/api/indicators +GET https://api.securitycenter.microsoft.com/api/indicators ``` **Response** @@ -87,7 +89,7 @@ Here is an example of the response. HTTP/1.1 200 Ok Content-type: application/json { - "@odata.context": "https://api.securitycenter.windows.com/api/$metadata#Indicators", + "@odata.context": "https://api.securitycenter.microsoft.com/api/$metadata#Indicators", "value": [ { "id": "995", @@ -139,7 +141,7 @@ Content-type: application/json Here is an example of a request that gets all Indicators with 'AlertAndBlock' action ``` -GET https://api.securitycenter.windows.com/api/indicators?$filter=action+eq+'AlertAndBlock' +GET https://api.securitycenter.microsoft.com/api/indicators?$filter=action+eq+'AlertAndBlock' ``` **Response** @@ -150,7 +152,7 @@ Here is an example of the response. HTTP/1.1 200 Ok Content-type: application/json { - "@odata.context": "https://api.securitycenter.windows.com/api/$metadata#Indicators", + "@odata.context": "https://api.securitycenter.microsoft.com/api/$metadata#Indicators", "value": [ { "id": "997", diff --git a/windows/security/threat-protection/microsoft-defender-atp/get-user-information.md b/windows/security/threat-protection/microsoft-defender-atp/get-user-information.md index bc5b69d9cd..184e70576e 100644 --- a/windows/security/threat-protection/microsoft-defender-atp/get-user-information.md +++ b/windows/security/threat-protection/microsoft-defender-atp/get-user-information.md @@ -23,6 +23,10 @@ ms.topic: article **Applies to:** - [Microsoft Defender for Endpoint](https://go.microsoft.com/fwlink/p/?linkid=2146631) +[!include[Microsoft Defender for Endpoint API URIs for US Government](../../includes/microsoft-defender-api-usgov.md)] + +[!include[Improve request performance](../../includes/improve-request-performance.md)] + Retrieve a User entity by key (user name). @@ -58,10 +62,8 @@ If successful and user exists - 200 OK with [user](user.md) entity in the body. Here is an example of the request. -[!include[Improve request performance](../../includes/improve-request-performance.md)] - ``` -GET https://api.securitycenter.windows.com/api/users/user1 +GET https://api.securitycenter.microsoft.com/api/users/user1 Content-type: application/json ``` @@ -74,7 +76,7 @@ Here is an example of the response. HTTP/1.1 200 OK Content-type: application/json { - "@odata.context": "https://api.securitycenter.windows.com/api/$metadata#Users/$entity", + "@odata.context": "https://api.securitycenter.microsoft.com/api/$metadata#Users/$entity", "id": "user1", "firstSeen": "2018-08-02T00:00:00Z", "lastSeen": "2018-08-04T00:00:00Z", diff --git a/windows/security/threat-protection/microsoft-defender-atp/get-user-related-alerts.md b/windows/security/threat-protection/microsoft-defender-atp/get-user-related-alerts.md index b6282b18f3..3126731b11 100644 --- a/windows/security/threat-protection/microsoft-defender-atp/get-user-related-alerts.md +++ b/windows/security/threat-protection/microsoft-defender-atp/get-user-related-alerts.md @@ -25,6 +25,10 @@ ms.topic: article - Want to experience Defender for Endpoint? [Sign up for a free trial.](https://www.microsoft.com/microsoft-365/windows/microsoft-defender-atp?ocid=docs-wdatp-exposedapis-abovefoldlink) +[!include[Microsoft Defender for Endpoint API URIs for US Government](../../includes/microsoft-defender-api-usgov.md)] + +[!include[Improve request performance](../../includes/improve-request-performance.md)] + ## API description Retrieves a collection of alerts related to a given user ID. @@ -76,8 +80,6 @@ If successful and user exists - 200 OK. If the user does not exist - 404 Not Fou Here is an example of the request. -[!include[Improve request performance](../../includes/improve-request-performance.md)] - ``` -GET https://api.securitycenter.windows.com/api/users/user1/alerts +GET https://api.securitycenter.microsoft.com/api/users/user1/alerts ``` diff --git a/windows/security/threat-protection/microsoft-defender-atp/get-user-related-machines.md b/windows/security/threat-protection/microsoft-defender-atp/get-user-related-machines.md index 33fbf7f79a..8956cf7608 100644 --- a/windows/security/threat-protection/microsoft-defender-atp/get-user-related-machines.md +++ b/windows/security/threat-protection/microsoft-defender-atp/get-user-related-machines.md @@ -25,6 +25,10 @@ ms.topic: article - Want to experience Defender for Endpoint? [Sign up for a free trial.](https://www.microsoft.com/microsoft-365/windows/microsoft-defender-atp?ocid=docs-wdatp-exposedapis-abovefoldlink) +[!include[Microsoft Defender for Endpoint API URIs for US Government](../../includes/microsoft-defender-api-usgov.md)] + +[!include[Improve request performance](../../includes/improve-request-performance.md)] + ## API description Retrieves a collection of devices related to a given user ID. @@ -77,8 +81,6 @@ If successful and user exists - 200 OK with list of [machine](machine.md) entiti Here is an example of the request. -[!include[Improve request performance](../../includes/improve-request-performance.md)] - ``` -GET https://api.securitycenter.windows.com/api/users/user1/machines +GET https://api.securitycenter.microsoft.com/api/users/user1/machines ``` diff --git a/windows/security/threat-protection/microsoft-defender-atp/get-vuln-by-software.md b/windows/security/threat-protection/microsoft-defender-atp/get-vuln-by-software.md index ac266cf40f..281e8cdb0b 100644 --- a/windows/security/threat-protection/microsoft-defender-atp/get-vuln-by-software.md +++ b/windows/security/threat-protection/microsoft-defender-atp/get-vuln-by-software.md @@ -25,6 +25,11 @@ ms.topic: article - [Microsoft Defender for Endpoint](https://go.microsoft.com/fwlink/p/?linkid=2146631) +[!include[Microsoft Defender for Endpoint API URIs for US Government](../../includes/microsoft-defender-api-usgov.md)] + +[!include[Improve request performance](../../includes/improve-request-performance.md)] + + [!include[Prerelease information](../../includes/prerelease.md)] Retrieve a list of vulnerabilities in the installed software. @@ -62,7 +67,7 @@ If successful, this method returns 200 OK with a a list of vulnerabilities expos Here is an example of the request. ``` -GET https://api.securitycenter.windows.com/api/Software/microsoft-_-edge/vulnerabilities +GET https://api.securitycenter.microsoft.com/api/Software/microsoft-_-edge/vulnerabilities ``` **Response** @@ -72,7 +77,7 @@ Here is an example of the response. ```json { - "@odata.context": "https://api-us.securitycenter.windows.com/api/$metadata#Collection(Analytics.Contracts.PublicAPI.PublicVulnerabilityDto)", + "@odata.context": "https://api.securitycenter.microsoft.com/api/$metadata#Collection(Analytics.Contracts.PublicAPI.PublicVulnerabilityDto)", "value": [ { "id": "CVE-2017-0140", diff --git a/windows/security/threat-protection/microsoft-defender-atp/get-vulnerability-by-id.md b/windows/security/threat-protection/microsoft-defender-atp/get-vulnerability-by-id.md index 3e66207db5..5fb7863435 100644 --- a/windows/security/threat-protection/microsoft-defender-atp/get-vulnerability-by-id.md +++ b/windows/security/threat-protection/microsoft-defender-atp/get-vulnerability-by-id.md @@ -23,6 +23,11 @@ ms.topic: article **Applies to:** - [Microsoft Defender for Endpoint](https://go.microsoft.com/fwlink/p/?linkid=2146631) +[!include[Microsoft Defender for Endpoint API URIs for US Government](../../includes/microsoft-defender-api-usgov.md)] + +[!include[Improve request performance](../../includes/improve-request-performance.md)] + + [!include[Prerelease information](../../includes/prerelease.md)] Retrieves vulnerability information by its ID. @@ -61,7 +66,7 @@ If successful, this method returns 200 OK with the vulnerability information in Here is an example of the request. ``` -GET https://api.securitycenter.windows.com/api/Vulnerabilities/CVE-2019-0608 +GET https://api.securitycenter.microsoft.com/api/Vulnerabilities/CVE-2019-0608 ``` **Response** @@ -70,7 +75,7 @@ Here is an example of the response. ```json { - "@odata.context": "https://api-us.securitycenter.windows.com/api/$metadata#Vulnerabilities/$entity", + "@odata.context": "https://api.securitycenter.microsoft.com/api/$metadata#Vulnerabilities/$entity", "id": "CVE-2019-0608", "name": "CVE-2019-0608", "description": "A spoofing vulnerability exists when Microsoft Browsers does not properly parse HTTP content. An attacker who successfully exploited this vulnerability could impersonate a user request by crafting HTTP queries. The specially crafted website could either spoof content or serve as a pivot to chain an attack with other vulnerabilities in web services.To exploit the vulnerability, the user must click a specially crafted URL. In an email attack scenario, an attacker could send an email message containing the specially crafted URL to the user in an attempt to convince the user to click it.In a web-based attack scenario, an attacker could host a specially crafted website designed to appear as a legitimate website to the user. However, the attacker would have no way to force the user to visit the specially crafted website. The attacker would have to convince the user to visit the specially crafted website, typically by way of enticement in an email or instant message, and then convince the user to interact with content on the website.The update addresses the vulnerability by correcting how Microsoft Browsers parses HTTP responses.", diff --git a/windows/security/threat-protection/microsoft-defender-atp/initiate-autoir-investigation.md b/windows/security/threat-protection/microsoft-defender-atp/initiate-autoir-investigation.md index 683be6e6bf..84ab44bf10 100644 --- a/windows/security/threat-protection/microsoft-defender-atp/initiate-autoir-investigation.md +++ b/windows/security/threat-protection/microsoft-defender-atp/initiate-autoir-investigation.md @@ -25,6 +25,10 @@ ms.topic: article - Want to experience Defender for Endpoint? [Sign up for a free trial.](https://www.microsoft.com/microsoft-365/windows/microsoft-defender-atp?ocid=docs-wdatp-exposedapis-abovefoldlink) +[!include[Microsoft Defender for Endpoint API URIs for US Government](../../includes/microsoft-defender-api-usgov.md)] + +[!include[Improve request performance](../../includes/improve-request-performance.md)] + ## API description Start automated investigation on a device. @@ -79,8 +83,6 @@ If successful, this method returns 201 - Created response code and [Investigatio Here is an example of the request. -[!include[Improve request performance](../../includes/improve-request-performance.md)] - ``` POST https://api.securitycenter.microsoft.com/api/machines/1e5bc9d7e413ddd7902c2932e418702b84d0cc07/startInvestigation Content-type: application/json diff --git a/windows/security/threat-protection/microsoft-defender-atp/investigation.md b/windows/security/threat-protection/microsoft-defender-atp/investigation.md index 9a079ca9cb..98d5f63bef 100644 --- a/windows/security/threat-protection/microsoft-defender-atp/investigation.md +++ b/windows/security/threat-protection/microsoft-defender-atp/investigation.md @@ -27,6 +27,11 @@ ms.topic: article - Want to experience Defender for Endpoint? [Sign up for a free trial.](https://www.microsoft.com/microsoft-365/windows/microsoft-defender-atp?ocid=docs-wdatp-exposedapis-abovefoldlink) +[!include[Microsoft Defender for Endpoint API URIs for US Government](../../includes/microsoft-defender-api-usgov.md)] + +[!include[Improve request performance](../../includes/improve-request-performance.md)] + + Represent an Automated Investigation entity in Defender for Endpoint.
    See [Overview of automated investigations](automated-investigations.md) for more information. diff --git a/windows/security/threat-protection/microsoft-defender-atp/isolate-machine.md b/windows/security/threat-protection/microsoft-defender-atp/isolate-machine.md index 98cfaa0d40..e52dcfca9e 100644 --- a/windows/security/threat-protection/microsoft-defender-atp/isolate-machine.md +++ b/windows/security/threat-protection/microsoft-defender-atp/isolate-machine.md @@ -25,6 +25,10 @@ ms.topic: article - Want to experience Defender for Endpoint? [Sign up for a free trial.](https://www.microsoft.com/microsoft-365/windows/microsoft-defender-atp?ocid=docs-wdatp-exposedapis-abovefoldlink) +[!include[Microsoft Defender for Endpoint API URIs for US Government](../../includes/microsoft-defender-api-usgov.md)] + +[!include[Improve request performance](../../includes/improve-request-performance.md)] + ## API description Isolates a device from accessing external network. @@ -52,7 +56,7 @@ Delegated (work or school account) | Machine.Isolate | 'Isolate machine' ## HTTP request ``` -POST https://api.securitycenter.windows.com/api/machines/{id}/isolate +POST https://api.securitycenter.microsoft.com/api/machines/{id}/isolate ``` ## Request headers @@ -85,10 +89,8 @@ If successful, this method returns 201 - Created response code and [Machine Acti Here is an example of the request. -[!include[Improve request performance](../../includes/improve-request-performance.md)] - ```console -POST https://api.securitycenter.windows.com/api/machines/1e5bc9d7e413ddd7902c2932e418702b84d0cc07/isolate +POST https://api.securitycenter.microsoft.com/api/machines/1e5bc9d7e413ddd7902c2932e418702b84d0cc07/isolate Content-type: application/json { "Comment": "Isolate machine due to alert 1234", diff --git a/windows/security/threat-protection/microsoft-defender-atp/machine.md b/windows/security/threat-protection/microsoft-defender-atp/machine.md index 817ecce65b..ab02cb5c21 100644 --- a/windows/security/threat-protection/microsoft-defender-atp/machine.md +++ b/windows/security/threat-protection/microsoft-defender-atp/machine.md @@ -25,6 +25,10 @@ ms.topic: article - Want to experience Microsoft Defender for Endpoint? [Sign up for a free trial.](https://www.microsoft.com/microsoft-365/windows/microsoft-defender-atp?ocid=docs-wdatp-exposedapis-abovefoldlink) +[!include[Microsoft Defender for Endpoint API URIs for US Government](../../includes/microsoft-defender-api-usgov.md)] + +[!include[Improve request performance](../../includes/improve-request-performance.md)] + [!include[Prerelease information](../../includes/prerelease.md)] ## Methods diff --git a/windows/security/threat-protection/microsoft-defender-atp/machineaction.md b/windows/security/threat-protection/microsoft-defender-atp/machineaction.md index 94f6a0a86b..4f6e60ca31 100644 --- a/windows/security/threat-protection/microsoft-defender-atp/machineaction.md +++ b/windows/security/threat-protection/microsoft-defender-atp/machineaction.md @@ -25,6 +25,11 @@ ms.topic: article - Want to experience Microsoft Defender for Endpoint? [Sign up for a free trial.](https://www.microsoft.com/microsoft-365/windows/microsoft-defender-atp?ocid=docs-wdatp-exposedapis-abovefoldlink) +[!include[Microsoft Defender for Endpoint API URIs for US Government](../../includes/microsoft-defender-api-usgov.md)] + +[!include[Improve request performance](../../includes/improve-request-performance.md)] + + - For more information, see [Response Actions](respond-machine-alerts.md). | Method | Return Type | Description | diff --git a/windows/security/threat-protection/microsoft-defender-atp/offboard-machine-api.md b/windows/security/threat-protection/microsoft-defender-atp/offboard-machine-api.md index 8cc6f7bed9..9dddb35e92 100644 --- a/windows/security/threat-protection/microsoft-defender-atp/offboard-machine-api.md +++ b/windows/security/threat-protection/microsoft-defender-atp/offboard-machine-api.md @@ -25,6 +25,10 @@ ms.topic: article - Want to experience Defender for Endpoint? [Sign up for a free trial.](https://www.microsoft.com/microsoft-365/windows/microsoft-defender-atp?ocid=docs-wdatp-exposedapis-abovefoldlink) +[!include[Microsoft Defender for Endpoint API URIs for US Government](../../includes/microsoft-defender-api-usgov.md)] + +[!include[Improve request performance](../../includes/improve-request-performance.md)] + ## API description Offboard device from Defender for Endpoint. @@ -55,7 +59,7 @@ Delegated (work or school account) | Machine.Offboard | 'Offboard machine' ## HTTP request ``` -POST https://api.securitycenter.windows.com/api/machines/{id}/offboard +POST https://api.securitycenter.microsoft.com/api/machines/{id}/offboard ``` ## Request headers @@ -82,10 +86,8 @@ If successful, this method returns 201 - Created response code and [Machine Acti Here is an example of the request. -[!include[Improve request performance](../../includes/improve-request-performance.md)] - ``` -POST https://api.securitycenter.windows.com/api/machines/1e5bc9d7e413ddd7902c2932e418702b84d0cc07/offboard +POST https://api.securitycenter.microsoft.com/api/machines/1e5bc9d7e413ddd7902c2932e418702b84d0cc07/offboard Content-type: application/json { "Comment": "Offboard machine by automation" diff --git a/windows/security/threat-protection/microsoft-defender-atp/onboarding-notification.md b/windows/security/threat-protection/microsoft-defender-atp/onboarding-notification.md index ff6119eee4..f405b1996b 100644 --- a/windows/security/threat-protection/microsoft-defender-atp/onboarding-notification.md +++ b/windows/security/threat-protection/microsoft-defender-atp/onboarding-notification.md @@ -25,6 +25,11 @@ ms.topic: article **Applies to:** - [Microsoft Defender for Endpoint](https://go.microsoft.com/fwlink/p/?linkid=2146631) +[!include[Microsoft Defender for Endpoint API URIs for US Government](../../includes/microsoft-defender-api-usgov.md)] + +[!include[Improve request performance](../../includes/improve-request-performance.md)] + + Create a notification rule so that when a local onboarding or offboardiing script is used, you'll be notified. ## Before you begin @@ -56,7 +61,7 @@ You'll need to have access to: 5. Enter the following HTTP fields: - Method: "GET" as a value to get the list of devices. - - URI: Enter `https://api.securitycenter.windows.com/api/machines`. + - URI: Enter `https://api.securitycenter.microsoft.com/api/machines`. - Authentication: Select "Active Directory OAuth". - Tenant: Sign-in to https://portal.azure.com and navigate to **Azure Active Directory > App Registrations** and get the Tenant ID value. - Audience: `https://securitycenter.onmicrosoft.com/windowsatpservice\` diff --git a/windows/security/threat-protection/microsoft-defender-atp/post-ti-indicator.md b/windows/security/threat-protection/microsoft-defender-atp/post-ti-indicator.md index ab2b412ae2..e5fe251155 100644 --- a/windows/security/threat-protection/microsoft-defender-atp/post-ti-indicator.md +++ b/windows/security/threat-protection/microsoft-defender-atp/post-ti-indicator.md @@ -25,6 +25,10 @@ ms.topic: article - Want to experience Defender for Endpoint? [Sign up for a free trial.](https://www.microsoft.com/microsoft-365/windows/microsoft-defender-atp?ocid=docs-wdatp-exposedapis-abovefoldlink) +[!include[Microsoft Defender for Endpoint API URIs for US Government](../../includes/microsoft-defender-api-usgov.md)] + +[!include[Improve request performance](../../includes/improve-request-performance.md)] + ## API description Submits or Updates new [Indicator](ti-indicator.md) entity. @@ -47,12 +51,9 @@ Delegated (work or school account) | Ti.ReadWrite | 'Read and write Indicators' ## HTTP request ``` -POST https://api.securitycenter.windows.com/api/indicators +POST https://api.securitycenter.microsoft.com/api/indicators ``` -[!include[Improve request performance](../../includes/improve-request-performance.md)] - - ## Request headers Name | Type | Description @@ -88,7 +89,7 @@ rbacGroupNames | String | Comma-separated list of RBAC group names the indicator Here is an example of the request. ``` -POST https://api.securitycenter.windows.com/api/indicators +POST https://api.securitycenter.microsoft.com/api/indicators Content-type: application/json { "indicatorValue": "220e7d15b011d7fac48f2bd61114db1022197f7f", diff --git a/windows/security/threat-protection/microsoft-defender-atp/pull-alerts-using-rest-api.md b/windows/security/threat-protection/microsoft-defender-atp/pull-alerts-using-rest-api.md index d656f995c8..bd9ab75684 100644 --- a/windows/security/threat-protection/microsoft-defender-atp/pull-alerts-using-rest-api.md +++ b/windows/security/threat-protection/microsoft-defender-atp/pull-alerts-using-rest-api.md @@ -203,7 +203,7 @@ Here is an example return value: The following code examples demonstrate how to obtain an access token for calling the Microsoft Defender for Endpoint SIEM API. ```csharp -AuthenticationContext context = new AuthenticationContext(string.Format("https://login.windows.net/{0}", tenantId)); +AuthenticationContext context = new AuthenticationContext(string.Format("https://login.microsoftonline.com/{0}", tenantId)); ClientCredential clientCredentials = new ClientCredential(clientId, clientSecret); AuthenticationResult authenticationResult = context.AcquireTokenAsync(detectionsResource, clientCredentials).GetAwaiter().GetResult(); ``` @@ -218,7 +218,7 @@ $appId = '' ### Paste your Application ID here $appSecret = '' ### Paste your Application secret here $resourceAppIdUri = 'https://graph.windows.net' -$oAuthUri = "https://login.windows.net/$tenantId/oauth2/token" +$oAuthUri = "https://login.microsoftonline.com/$tenantId/oauth2/token" $authBody = [Ordered] @{ resource = "$resourceAppIdUri" client_id = "$appId" @@ -237,7 +237,7 @@ tenantId='' ### Paste your tenant ID here appId='' ### Paste your Application ID here appSecret='' ### Paste your Application secret here resourceAppIdUri='https://graph.windows.net' -oAuthUri="https://login.windows.net/$tenantId/oauth2/token" +oAuthUri="https://login.microsoftonline.com/$tenantId/oauth2/token" scriptDir=$(pwd) apiResponse=$(curl -s X POST "$oAuthUri" -d "resource=$resourceAppIdUri&client_id=$appId&client_secret=$appSecret&\ diff --git a/windows/security/threat-protection/microsoft-defender-atp/recommendation.md b/windows/security/threat-protection/microsoft-defender-atp/recommendation.md index 4d71206462..d53ac74ba4 100644 --- a/windows/security/threat-protection/microsoft-defender-atp/recommendation.md +++ b/windows/security/threat-protection/microsoft-defender-atp/recommendation.md @@ -25,6 +25,11 @@ ms.topic: article - Want to experience Defender for Endpoint? [Sign up for a free trial.](https://www.microsoft.com/microsoft-365/windows/microsoft-defender-atp?ocid=docs-wdatp-exposedapis-abovefoldlink) +[!include[Microsoft Defender for Endpoint API URIs for US Government](../../includes/microsoft-defender-api-usgov.md)] + +[!include[Improve request performance](../../includes/improve-request-performance.md)] + + [!include[Prerelease information](../../includes/prerelease.md)] ## Methods diff --git a/windows/security/threat-protection/microsoft-defender-atp/restrict-code-execution.md b/windows/security/threat-protection/microsoft-defender-atp/restrict-code-execution.md index 414c106934..9a05137743 100644 --- a/windows/security/threat-protection/microsoft-defender-atp/restrict-code-execution.md +++ b/windows/security/threat-protection/microsoft-defender-atp/restrict-code-execution.md @@ -25,6 +25,10 @@ ms.topic: article - Want to experience Defender for Endpoint? [Sign up for a free trial.](https://www.microsoft.com/microsoft-365/windows/microsoft-defender-atp?ocid=docs-wdatp-exposedapis-abovefoldlink) +[!include[Microsoft Defender for Endpoint API URIs for US Government](../../includes/microsoft-defender-api-usgov.md)] + +[!include[Improve request performance](../../includes/improve-request-performance.md)] + ## API description Restrict execution of all applications on the device except a predefined set. @@ -51,7 +55,7 @@ Delegated (work or school account) | Machine.RestrictExecution | 'Restrict code ## HTTP request ``` -POST https://api.securitycenter.windows.com/api/machines/{id}/restrictCodeExecution +POST https://api.securitycenter.microsoft.com/api/machines/{id}/restrictCodeExecution ``` ## Request headers @@ -79,7 +83,7 @@ If successful, this method returns 201 - Created response code and [Machine Acti Here is an example of the request. ``` -POST https://api.securitycenter.windows.com/api/machines/1e5bc9d7e413ddd7902c2932e418702b84d0cc07/restrictCodeExecution +POST https://api.securitycenter.microsoft.com/api/machines/1e5bc9d7e413ddd7902c2932e418702b84d0cc07/restrictCodeExecution Content-type: application/json { "Comment": "Restrict code execution due to alert 1234" diff --git a/windows/security/threat-protection/microsoft-defender-atp/run-advanced-query-api.md b/windows/security/threat-protection/microsoft-defender-atp/run-advanced-query-api.md index ddf250a58f..6eca5df06d 100644 --- a/windows/security/threat-protection/microsoft-defender-atp/run-advanced-query-api.md +++ b/windows/security/threat-protection/microsoft-defender-atp/run-advanced-query-api.md @@ -28,6 +28,8 @@ ms.topic: article [!include[Microsoft Defender for Endpoint API URIs for US Government](../../includes/microsoft-defender-api-usgov.md)] +[!include[Improve request performance](../../includes/improve-request-performance.md)] + ## Limitations 1. You can only run a query on data from the last 30 days. 2. The results will include a maximum of 100,000 rows. @@ -79,9 +81,6 @@ Request Here is an example of the request. -[!include[Improve request performance](../../includes/improve-request-performance.md)] - - ``` POST https://api.securitycenter.microsoft.com/api/advancedqueries/run Content-type: application/json diff --git a/windows/security/threat-protection/microsoft-defender-atp/run-advanced-query-sample-powershell.md b/windows/security/threat-protection/microsoft-defender-atp/run-advanced-query-sample-powershell.md index ea7771fd0a..c22b6113f1 100644 --- a/windows/security/threat-protection/microsoft-defender-atp/run-advanced-query-sample-powershell.md +++ b/windows/security/threat-protection/microsoft-defender-atp/run-advanced-query-sample-powershell.md @@ -26,6 +26,7 @@ ms.topic: article [!include[Microsoft Defender for Endpoint API URIs for US Government](../../includes/microsoft-defender-api-usgov.md)] +[!include[Improve request performance](../../includes/improve-request-performance.md)] Run advanced queries using PowerShell, see [Advanced Hunting API](run-advanced-query-api.md). @@ -74,8 +75,6 @@ where Run the following query: -[!include[Improve request performance](../../includes/improve-request-performance.md)] - ``` $query = 'RegistryEvents | limit 10' # Paste your own query here diff --git a/windows/security/threat-protection/microsoft-defender-atp/run-advanced-query-sample-python.md b/windows/security/threat-protection/microsoft-defender-atp/run-advanced-query-sample-python.md index ed35434cfc..b09ec393cd 100644 --- a/windows/security/threat-protection/microsoft-defender-atp/run-advanced-query-sample-python.md +++ b/windows/security/threat-protection/microsoft-defender-atp/run-advanced-query-sample-python.md @@ -28,6 +28,8 @@ ms.topic: article [!include[Microsoft Defender for Endpoint API URIs for US Government](../../includes/microsoft-defender-api-usgov.md)] +[!include[Improve request performance](../../includes/improve-request-performance.md)] + Run advanced queries using Python, see [Advanced Hunting API](run-advanced-query-api.md). In this section, we share Python samples to retrieve a token and use it to run a query. @@ -38,8 +40,6 @@ In this section, we share Python samples to retrieve a token and use it to run a - Run the following commands: -[!include[Improve request performance](../../includes/improve-request-performance.md)] - ``` import json diff --git a/windows/security/threat-protection/microsoft-defender-atp/run-av-scan.md b/windows/security/threat-protection/microsoft-defender-atp/run-av-scan.md index 9525f7a282..e1e4afef67 100644 --- a/windows/security/threat-protection/microsoft-defender-atp/run-av-scan.md +++ b/windows/security/threat-protection/microsoft-defender-atp/run-av-scan.md @@ -25,6 +25,10 @@ ms.topic: article - Want to experience Defender for Endpoint? [Sign up for a free trial.](https://www.microsoft.com/microsoft-365/windows/microsoft-defender-atp?ocid=docs-wdatp-exposedapis-abovefoldlink) +[!include[Microsoft Defender for Endpoint API URIs for US Government](../../includes/microsoft-defender-api-usgov.md)] + +[!include[Improve request performance](../../includes/improve-request-performance.md)] + ## API description Initiate Microsoft Defender Antivirus scan on a device. @@ -51,7 +55,7 @@ Delegated (work or school account) | Machine.Scan | 'Scan machine' ## HTTP request ``` -POST https://api.securitycenter.windows.com/api/machines/{id}/runAntiVirusScan +POST https://api.securitycenter.microsoft.com/api/machines/{id}/runAntiVirusScan ``` ## Request headers @@ -87,7 +91,7 @@ If successful, this method returns 201, Created response code and _MachineAction Here is an example of the request. ``` -POST https://api.securitycenter.windows.com/api/machines/1e5bc9d7e413ddd7902c2932e418702b84d0cc07/runAntiVirusScan +POST https://api.securitycenter.microsoft.com/api/machines/1e5bc9d7e413ddd7902c2932e418702b84d0cc07/runAntiVirusScan Content-type: application/json { "Comment": "Check machine for viruses due to alert 3212", diff --git a/windows/security/threat-protection/microsoft-defender-atp/score.md b/windows/security/threat-protection/microsoft-defender-atp/score.md index d911b24cb2..aab54c586f 100644 --- a/windows/security/threat-protection/microsoft-defender-atp/score.md +++ b/windows/security/threat-protection/microsoft-defender-atp/score.md @@ -25,6 +25,11 @@ ms.topic: article - Want to experience Microsoft Defender for Endpoint? [Sign up for a free trial.](https://www.microsoft.com/microsoft-365/windows/microsoft-defender-atp?ocid=docs-wdatp-exposedapis-abovefoldlink) +[!include[Microsoft Defender for Endpoint API URIs for US Government](../../includes/microsoft-defender-api-usgov.md)] + +[!include[Improve request performance](../../includes/improve-request-performance.md)] + + [!include[Prerelease information](../../includes/prerelease.md)] ## Methods diff --git a/windows/security/threat-protection/microsoft-defender-atp/set-device-value.md b/windows/security/threat-protection/microsoft-defender-atp/set-device-value.md index b2a76a6693..98266678c3 100644 --- a/windows/security/threat-protection/microsoft-defender-atp/set-device-value.md +++ b/windows/security/threat-protection/microsoft-defender-atp/set-device-value.md @@ -25,6 +25,11 @@ ms.topic: article - Want to experience Microsoft Defender for Endpoint? [Sign up for a free trial.](https://www.microsoft.com/microsoft-365/windows/microsoft-defender-atp?ocid=docs-wdatp-exposedapis-abovefoldlink) +[!include[Microsoft Defender for Endpoint API URIs for US Government](../../includes/microsoft-defender-api-usgov.md)] + +[!include[Improve request performance](../../includes/improve-request-performance.md)] + + ## API description Set the device value of a specific [Machine](machine.md).
    diff --git a/windows/security/threat-protection/microsoft-defender-atp/software.md b/windows/security/threat-protection/microsoft-defender-atp/software.md index 617a6c15ec..a471bd94f2 100644 --- a/windows/security/threat-protection/microsoft-defender-atp/software.md +++ b/windows/security/threat-protection/microsoft-defender-atp/software.md @@ -25,6 +25,11 @@ ms.topic: article - Want to experience Microsoft Defender for Endpoint? [Sign up for a free trial.](https://www.microsoft.com/microsoft-365/windows/microsoft-defender-atp?ocid=docs-wdatp-exposedapis-abovefoldlink) +[!include[Microsoft Defender for Endpoint API URIs for US Government](../../includes/microsoft-defender-api-usgov.md)] + +[!include[Improve request performance](../../includes/improve-request-performance.md)] + + [!include[Prerelease information](../../includes/prerelease.md)] ## Methods diff --git a/windows/security/threat-protection/microsoft-defender-atp/stop-and-quarantine-file.md b/windows/security/threat-protection/microsoft-defender-atp/stop-and-quarantine-file.md index a91edcf37d..83727872ac 100644 --- a/windows/security/threat-protection/microsoft-defender-atp/stop-and-quarantine-file.md +++ b/windows/security/threat-protection/microsoft-defender-atp/stop-and-quarantine-file.md @@ -25,6 +25,10 @@ ms.topic: article - Want to experience Microsoft Defender for Endpoint? [Sign up for a free trial.](https://www.microsoft.com/microsoft-365/windows/microsoft-defender-atp?ocid=docs-wdatp-exposedapis-abovefoldlink) +[!include[Microsoft Defender for Endpoint API URIs for US Government](../../includes/microsoft-defender-api-usgov.md)] + +[!include[Improve request performance](../../includes/improve-request-performance.md)] + ## API description Stop execution of a file on a device and delete it. @@ -51,7 +55,7 @@ Delegated (work or school account) | Machine.StopAndQuarantine | 'Stop And Quara ## HTTP request ``` -POST https://api.securitycenter.windows.com/api/machines/{id}/StopAndQuarantineFile +POST https://api.securitycenter.microsoft.com/api/machines/{id}/StopAndQuarantineFile ``` ## Request headers @@ -80,7 +84,7 @@ If successful, this method returns 201 - Created response code and [Machine Acti Here is an example of the request. ``` -POST https://api.securitycenter.windows.com/api/machines/1e5bc9d7e413ddd7902c2932e418702b84d0cc07/StopAndQuarantineFile +POST https://api.securitycenter.microsoft.com/api/machines/1e5bc9d7e413ddd7902c2932e418702b84d0cc07/StopAndQuarantineFile Content-type: application/json { "Comment": "Stop and quarantine file on machine due to alert 441688558380765161_2136280442", diff --git a/windows/security/threat-protection/microsoft-defender-atp/ti-indicator.md b/windows/security/threat-protection/microsoft-defender-atp/ti-indicator.md index 2b37172304..39a5774d5c 100644 --- a/windows/security/threat-protection/microsoft-defender-atp/ti-indicator.md +++ b/windows/security/threat-protection/microsoft-defender-atp/ti-indicator.md @@ -25,6 +25,11 @@ ms.topic: article - Want to experience Microsoft Defender for Endpoint? [Sign up for a free trial.](https://www.microsoft.com/microsoft-365/windows/microsoft-defender-atp?ocid=docs-wdatp-exposedapis-abovefoldlink) +[!include[Microsoft Defender for Endpoint API URIs for US Government](../../includes/microsoft-defender-api-usgov.md)] + +[!include[Improve request performance](../../includes/improve-request-performance.md)] + + - See the corresponding [Indicators page](https://securitycenter.windows.com/preferences2/custom_ti_indicators/files) in the portal. Method|Return Type |Description diff --git a/windows/security/threat-protection/microsoft-defender-atp/troubleshoot-onboarding-error-messages.md b/windows/security/threat-protection/microsoft-defender-atp/troubleshoot-onboarding-error-messages.md index ce25cadea3..a6af2f344d 100644 --- a/windows/security/threat-protection/microsoft-defender-atp/troubleshoot-onboarding-error-messages.md +++ b/windows/security/threat-protection/microsoft-defender-atp/troubleshoot-onboarding-error-messages.md @@ -78,8 +78,8 @@ You'll need to allow the `securitycenter.windows.com` and all subdomains under i ## Portal communication issues If you encounter issues with accessing the portal, missing data, or restricted access to portions of the portal, you'll need to verify that the following URLs are allowed and open for communication. -- `*.blob.core.windows.net -crl.microsoft.com` +- `*.blob.core.windows.net` +- `crl.microsoft.com` - `https://*.microsoftonline-p.com` - `https://*.securitycenter.windows.com` - `https://automatediracs-eus-prd.securitycenter.windows.com` diff --git a/windows/security/threat-protection/microsoft-defender-atp/unisolate-machine.md b/windows/security/threat-protection/microsoft-defender-atp/unisolate-machine.md index 211e184891..2f5e42faa5 100644 --- a/windows/security/threat-protection/microsoft-defender-atp/unisolate-machine.md +++ b/windows/security/threat-protection/microsoft-defender-atp/unisolate-machine.md @@ -26,6 +26,10 @@ ms.topic: article - Want to experience Microsoft Defender for Endpoint? [Sign up for a free trial.](https://www.microsoft.com/microsoft-365/windows/microsoft-defender-atp?ocid=docs-wdatp-exposedapis-abovefoldlink) +[!include[Microsoft Defender for Endpoint API URIs for US Government](../../includes/microsoft-defender-api-usgov.md)] + +[!include[Improve request performance](../../includes/improve-request-performance.md)] + ## API description Undo isolation of a device. @@ -52,7 +56,7 @@ Delegated (work or school account) | Machine.Isolate | 'Isolate machine' ## HTTP request ``` -POST https://api.securitycenter.windows.com/api/machines/{id}/unisolate +POST https://api.securitycenter.microsoft.com/api/machines/{id}/unisolate ``` ## Request headers @@ -80,10 +84,8 @@ If successful, this method returns 201 - Created response code and [Machine Acti Here is an example of the request. -[!include[Improve request performance](../../includes/improve-request-performance.md)] - ``` -POST https://api.securitycenter.windows.com/api/machines/1e5bc9d7e413ddd7902c2932e418702b84d0cc07/unisolate +POST https://api.securitycenter.microsoft.com/api/machines/1e5bc9d7e413ddd7902c2932e418702b84d0cc07/unisolate Content-type: application/json { "Comment": "Unisolate machine since it was clean and validated" diff --git a/windows/security/threat-protection/microsoft-defender-atp/unrestrict-code-execution.md b/windows/security/threat-protection/microsoft-defender-atp/unrestrict-code-execution.md index 49037547d6..ef5ea2434a 100644 --- a/windows/security/threat-protection/microsoft-defender-atp/unrestrict-code-execution.md +++ b/windows/security/threat-protection/microsoft-defender-atp/unrestrict-code-execution.md @@ -25,6 +25,10 @@ ms.topic: article - Want to experience Microsoft Defender for Endpoint? [Sign up for a free trial.](https://www.microsoft.com/microsoft-365/windows/microsoft-defender-atp?ocid=docs-wdatp-exposedapis-abovefoldlink) +[!include[Microsoft Defender for Endpoint API URIs for US Government](../../includes/microsoft-defender-api-usgov.md)] + +[!include[Improve request performance](../../includes/improve-request-performance.md)] + ## API description Enable execution of any application on the device. @@ -51,7 +55,7 @@ Delegated (work or school account) | Machine.RestrictExecution | 'Restrict code ## HTTP request ``` -POST https://api.securitycenter.windows.com/api/machines/{id}/unrestrictCodeExecution +POST https://api.securitycenter.microsoft.com/api/machines/{id}/unrestrictCodeExecution ``` ## Request headers @@ -77,10 +81,8 @@ If successful, this method returns 201 - Created response code and [Machine Acti Here is an example of the request. -[!include[Improve request performance](../../includes/improve-request-performance.md)] - ``` -POST https://api.securitycenter.windows.com/api/machines/1e5bc9d7e413ddd7902c2932e418702b84d0cc07/unrestrictCodeExecution +POST https://api.securitycenter.microsoft.com/api/machines/1e5bc9d7e413ddd7902c2932e418702b84d0cc07/unrestrictCodeExecution Content-type: application/json { "Comment": "Unrestrict code execution since machine was cleaned and validated" diff --git a/windows/security/threat-protection/microsoft-defender-atp/update-alert.md b/windows/security/threat-protection/microsoft-defender-atp/update-alert.md index a62ac7611a..9e142b87bc 100644 --- a/windows/security/threat-protection/microsoft-defender-atp/update-alert.md +++ b/windows/security/threat-protection/microsoft-defender-atp/update-alert.md @@ -25,6 +25,10 @@ ms.topic: article - Want to experience Microsoft Defender for Endpoint? [Sign up for a free trial.](https://www.microsoft.com/microsoft-365/windows/microsoft-defender-atp?ocid=docs-wdatp-exposedapis-abovefoldlink) +[!include[Microsoft Defender for Endpoint API URIs for US Government](../../includes/microsoft-defender-api-usgov.md)] + +[!include[Improve request performance](../../includes/improve-request-performance.md)] + ## API description Updates properties of existing [Alert](alerts.md). @@ -76,8 +80,6 @@ classification | String | Specifies the specification of the alert. The property determination | String | Specifies the determination of the alert. The property values are: 'NotAvailable', 'Apt', 'Malware', 'SecurityPersonnel', 'SecurityTesting', 'UnwantedSoftware', 'Other' comment | String | Comment to be added to the alert. -[!include[Improve request performance](../../includes/improve-request-performance.md)] - ## Response If successful, this method returns 200 OK, and the [alert](alerts.md) entity in the response body with the updated properties. If alert with the specified id was not found - 404 Not Found. @@ -89,7 +91,7 @@ If successful, this method returns 200 OK, and the [alert](alerts.md) entity in Here is an example of the request. ``` -PATCH https://api.securitycenter.windows.com/api/alerts/121688558380765161_2136280442 +PATCH https://api.securitycenter.microsoft.com/api/alerts/121688558380765161_2136280442 Content-Type: application/json { diff --git a/windows/security/threat-protection/microsoft-defender-atp/user.md b/windows/security/threat-protection/microsoft-defender-atp/user.md index 948460d6a9..8d75aea649 100644 --- a/windows/security/threat-protection/microsoft-defender-atp/user.md +++ b/windows/security/threat-protection/microsoft-defender-atp/user.md @@ -25,6 +25,11 @@ ms.topic: article - Want to experience Microsoft Defender for Endpoint? [Sign up for a free trial.](https://www.microsoft.com/microsoft-365/windows/microsoft-defender-atp?ocid=docs-wdatp-exposedapis-abovefoldlink) +[!include[Microsoft Defender for Endpoint API URIs for US Government](../../includes/microsoft-defender-api-usgov.md)] + +[!include[Improve request performance](../../includes/improve-request-performance.md)] + + Method|Return Type |Description :---|:---|:--- [List User related alerts](get-user-related-alerts.md) | [alert](alerts.md) collection | List all the alerts that are associated with a [user](user.md). diff --git a/windows/security/threat-protection/microsoft-defender-atp/vulnerability.md b/windows/security/threat-protection/microsoft-defender-atp/vulnerability.md index eaaa313b18..924169d5d8 100644 --- a/windows/security/threat-protection/microsoft-defender-atp/vulnerability.md +++ b/windows/security/threat-protection/microsoft-defender-atp/vulnerability.md @@ -25,6 +25,11 @@ ms.topic: article - Want to experience Microsoft Defender for Endpoint? [Sign up for a free trial.](https://www.microsoft.com/microsoft-365/windows/microsoft-defender-atp?ocid=docs-wdatp-exposedapis-abovefoldlink) +[!include[Microsoft Defender for Endpoint API URIs for US Government](../../includes/microsoft-defender-api-usgov.md)] + +[!include[Improve request performance](../../includes/improve-request-performance.md)] + + [!include[Prerelease information](../../includes/prerelease.md)] ## Methods From d6769ab4ecb09499d691460a33440bfa07f32ea6 Mon Sep 17 00:00:00 2001 From: ManikaDhiman Date: Tue, 22 Dec 2020 16:54:51 -0800 Subject: [PATCH 201/486] Added ADMX-backed Power settings --- .../mdm/policy-csp-admx-power.md | 1882 +++++++++++++++++ 1 file changed, 1882 insertions(+) create mode 100644 windows/client-management/mdm/policy-csp-admx-power.md diff --git a/windows/client-management/mdm/policy-csp-admx-power.md b/windows/client-management/mdm/policy-csp-admx-power.md new file mode 100644 index 0000000000..c8d950a87f --- /dev/null +++ b/windows/client-management/mdm/policy-csp-admx-power.md @@ -0,0 +1,1882 @@ +--- +title: Policy CSP - ADMX_Power +description: Policy CSP - ADMX_Power +ms.author: dansimp +ms.localizationpriority: medium +ms.topic: article +ms.prod: w10 +ms.technology: windows +author: manikadhiman +ms.date: 12/22/2020 +ms.reviewer: +manager: dansimp +--- + +# Policy CSP - ADMX_Power +> [!WARNING] +> Some information relates to prereleased products, which may be substantially modified before it's commercially released. Microsoft makes no warranties, expressed or implied, concerning the information provided here. + +
    + + +## ADMX_Power policies + +
    +
    + ADMX_Power/ACConnectivityInStandby_2 +
    +
    + ADMX_Power/ACCriticalSleepTransitionsDisable_2 +
    +
    + ADMX_Power/ACStartMenuButtonAction_2 +
    +
    + ADMX_Power/AllowSystemPowerRequestAC +
    +
    + ADMX_Power/AllowSystemPowerRequestDC +
    +
    + ADMX_Power/AllowSystemSleepWithRemoteFilesOpenAC +
    +
    + ADMX_Power/AllowSystemSleepWithRemoteFilesOpenDC +
    +
    + ADMX_Power/CustomActiveSchemeOverride_2 +
    +
    + ADMX_Power/DCBatteryDischargeAction0_2 +
    +
    + ADMX_Power/DCBatteryDischargeAction1_2 +
    +
    + ADMX_Power/DCBatteryDischargeLevel0_2 +
    +
    + ADMX_Power/DCBatteryDischargeLevel1UINotification_2 +
    +
    + ADMX_Power/DCBatteryDischargeLevel1_2 +
    +
    + ADMX_Power/DCConnectivityInStandby_2 +
    +
    + ADMX_Power/DCCriticalSleepTransitionsDisable_2 +
    +
    + ADMX_Power/DCStartMenuButtonAction_2 +
    +
    + ADMX_Power/DiskACPowerDownTimeOut_2 +
    +
    + ADMX_Power/DiskDCPowerDownTimeOut_2 +
    +
    + ADMX_Power/Dont_PowerOff_AfterShutdown +
    +
    + ADMX_Power/EnableDesktopSlideShowAC +
    +
    + ADMX_Power/EnableDesktopSlideShowDC +
    +
    + ADMX_Power/InboxActiveSchemeOverride_2 +
    +
    + ADMX_Power/PW_PromptPasswordOnResume +
    +
    + ADMX_Power/PowerThrottlingTurnOff +
    +
    + ADMX_Power/ReserveBatteryNotificationLevel +
    +
    + + +
    + + +**ADMX_Power/ACConnectivityInStandby_2** + + + + + + + + + + + + + + + + + + + + + + + + + + + +
    Windows EditionSupported?
    Homecross mark
    Procross mark
    Businesscross mark
    Enterprisecheck mark
    Educationcross mark
    + + +
    + + +[Scope](./policy-configuration-service-provider.md#policy-scope): + +> [!div class = "checklist"] +> * Device + +
    + + + +Available in the latest Windows 10 Insider Preview Build. This policy setting allows you to control the network connectivity state in standby on modern standby-capable systems. + +If you enable this policy setting, network connectivity will be maintained in standby. + +If you disable this policy setting, network connectivity in standby is not guaranteed. This connectivity restriction currently applies to WLAN networks only, and is subject to change. + +If you do not configure this policy setting, users control this setting. + + +> [!TIP] +> This is an ADMX-backed policy and requires a special SyncML format to enable or disable. For details, see [Understanding ADMX-backed policies](./understanding-admx-backed-policies.md). +> +> You must specify the data type in the SyncML as <Format>chr</Format>. For an example SyncML, refer to [Enabling a policy](./understanding-admx-backed-policies.md#enabling-a-policy). +> +> The payload of the SyncML must be XML-encoded; for this XML encoding, there are a variety of online encoders that you can use. To avoid encoding the payload, you can use CDATA if your MDM supports it. For more information, see [CDATA Sections](http://www.w3.org/TR/REC-xml/#sec-cdata-sect). + + +ADMX Info: +- GP English name: *Allow network connectivity during connected-standby (plugged in)* +- GP name: *ACConnectivityInStandby_2* +- GP path: *System\Power Management\Sleep Settings* +- GP ADMX file name: *Power.admx* + + + +
    + + +**ADMX_Power/ACCriticalSleepTransitionsDisable_2** + + + + + + + + + + + + + + + + + + + + + + + + + + + +
    Windows EditionSupported?
    Homecross mark
    Procross mark
    Businesscross mark
    Enterprisecheck mark
    Educationcross mark
    + + +
    + + +[Scope](./policy-configuration-service-provider.md#policy-scope): + +> [!div class = "checklist"] +> * Device + +
    + + + +Available in the latest Windows 10 Insider Preview Build. This policy setting allows you to turn on the ability for applications and services to prevent the system from sleeping. + +If you enable this policy setting, an application or service may prevent the system from sleeping (Hybrid Sleep, Stand By, or Hibernate). + +If you disable or do not configure this policy setting, users control this setting. + + +> [!TIP] +> This is an ADMX-backed policy and requires a special SyncML format to enable or disable. For details, see [Understanding ADMX-backed policies](./understanding-admx-backed-policies.md). +> +> You must specify the data type in the SyncML as <Format>chr</Format>. For an example SyncML, refer to [Enabling a policy](./understanding-admx-backed-policies.md#enabling-a-policy). +> +> The payload of the SyncML must be XML-encoded; for this XML encoding, there are a variety of online encoders that you can use. To avoid encoding the payload, you can use CDATA if your MDM supports it. For more information, see [CDATA Sections](http://www.w3.org/TR/REC-xml/#sec-cdata-sect). + + +ADMX Info: +- GP English name: *Turn on the ability for applications to prevent sleep transitions (plugged in)* +- GP name: *ACCriticalSleepTransitionsDisable_2* +- GP path: *System\Power Management\Sleep Settings* +- GP ADMX file name: *Power.admx* + + + +
    + + +**ADMX_Power/ACStartMenuButtonAction_2** + + + + + + + + + + + + + + + + + + + + + + + + + + + +
    Windows EditionSupported?
    Homecross mark
    Procross mark
    Businesscross mark
    Enterprisecheck mark
    Educationcross mark
    + + +
    + + +[Scope](./policy-configuration-service-provider.md#policy-scope): + +> [!div class = "checklist"] +> * Device + +
    + + + +Available in the latest Windows 10 Insider Preview Build. This policy setting specifies the action that Windows takes when a user presses the Start menu Power button. + +If you enable this policy setting, select one of the following actions: + +- Sleep +- Hibernate +- Shut down + +If you disable this policy or do not configure this policy setting, users control this setting. + + +> [!TIP] +> This is an ADMX-backed policy and requires a special SyncML format to enable or disable. For details, see [Understanding ADMX-backed policies](./understanding-admx-backed-policies.md). +> +> You must specify the data type in the SyncML as <Format>chr</Format>. For an example SyncML, refer to [Enabling a policy](./understanding-admx-backed-policies.md#enabling-a-policy). +> +> The payload of the SyncML must be XML-encoded; for this XML encoding, there are a variety of online encoders that you can use. To avoid encoding the payload, you can use CDATA if your MDM supports it. For more information, see [CDATA Sections](http://www.w3.org/TR/REC-xml/#sec-cdata-sect). + + +ADMX Info: +- GP English name: *Select the Start menu Power button action (plugged in)* +- GP name: *ACStartMenuButtonAction_2* +- GP path: *System\Power Management\Button Settings* +- GP ADMX file name: *Power.admx* + + + +
    + + +**ADMX_Power/AllowSystemPowerRequestAC** + + + + + + + + + + + + + + + + + + + + + + + + + + + +
    Windows EditionSupported?
    Homecross mark
    Procross mark
    Businesscross mark
    Enterprisecheck mark
    Educationcross mark
    + + +
    + + +[Scope](./policy-configuration-service-provider.md#policy-scope): + +> [!div class = "checklist"] +> * Device + +
    + + + +Available in the latest Windows 10 Insider Preview Build. This policy setting allows applications and services to prevent automatic sleep. + +If you enable this policy setting, any application, service, or device driver prevents Windows from automatically transitioning to sleep after a period of user inactivity. + +If you disable or do not configure this policy setting, applications, services, or drivers do not prevent Windows from automatically transitioning to sleep. Only user input is used to determine if Windows should automatically sleep. + + +> [!TIP] +> This is an ADMX-backed policy and requires a special SyncML format to enable or disable. For details, see [Understanding ADMX-backed policies](./understanding-admx-backed-policies.md). +> +> You must specify the data type in the SyncML as <Format>chr</Format>. For an example SyncML, refer to [Enabling a policy](./understanding-admx-backed-policies.md#enabling-a-policy). +> +> The payload of the SyncML must be XML-encoded; for this XML encoding, there are a variety of online encoders that you can use. To avoid encoding the payload, you can use CDATA if your MDM supports it. For more information, see [CDATA Sections](http://www.w3.org/TR/REC-xml/#sec-cdata-sect). + + +ADMX Info: +- GP English name: *Allow applications to prevent automatic sleep (plugged in)* +- GP name: *AllowSystemPowerRequestAC* +- GP path: *System\Power Management\Sleep Settings* +- GP ADMX file name: *Power.admx* + + + +
    + + +**ADMX_Power/AllowSystemPowerRequestDC** + + + + + + + + + + + + + + + + + + + + + + + + + + + +
    Windows EditionSupported?
    Homecross mark
    Procross mark
    Businesscross mark
    Enterprisecheck mark
    Educationcross mark
    + + +
    + + +[Scope](./policy-configuration-service-provider.md#policy-scope): + +> [!div class = "checklist"] +> * Device + +
    + + + +Available in the latest Windows 10 Insider Preview Build. This policy setting allows applications and services to prevent automatic sleep. + +If you enable this policy setting, any application, service, or device driver prevents Windows from automatically transitioning to sleep after a period of user inactivity. + +If you disable or do not configure this policy setting, applications, services, or drivers do not prevent Windows from automatically transitioning to sleep. Only user input is used to determine if Windows should automatically sleep. + + +> [!TIP] +> This is an ADMX-backed policy and requires a special SyncML format to enable or disable. For details, see [Understanding ADMX-backed policies](./understanding-admx-backed-policies.md). +> +> You must specify the data type in the SyncML as <Format>chr</Format>. For an example SyncML, refer to [Enabling a policy](./understanding-admx-backed-policies.md#enabling-a-policy). +> +> The payload of the SyncML must be XML-encoded; for this XML encoding, there are a variety of online encoders that you can use. To avoid encoding the payload, you can use CDATA if your MDM supports it. For more information, see [CDATA Sections](http://www.w3.org/TR/REC-xml/#sec-cdata-sect). + + +ADMX Info: +- GP English name: *Allow applications to prevent automatic sleep (on battery)* +- GP name: *AllowSystemPowerRequestDC* +- GP path: *System\Power Management\Sleep Settings* +- GP ADMX file name: *Power.admx* + + + +
    + + +**ADMX_Power/AllowSystemSleepWithRemoteFilesOpenAC** + + + + + + + + + + + + + + + + + + + + + + + + + + + +
    Windows EditionSupported?
    Homecross mark
    Procross mark
    Businesscross mark
    Enterprisecheck mark
    Educationcross mark
    + + +
    + + +[Scope](./policy-configuration-service-provider.md#policy-scope): + +> [!div class = "checklist"] +> * Device + +
    + + + +Available in the latest Windows 10 Insider Preview Build. This policy setting allows you to manage automatic sleep with open network files. + +If you enable this policy setting, the computer automatically sleeps when network files are open. + +If you disable or do not configure this policy setting, the computer does not automatically sleep when network files are open. + + +> [!TIP] +> This is an ADMX-backed policy and requires a special SyncML format to enable or disable. For details, see [Understanding ADMX-backed policies](./understanding-admx-backed-policies.md). +> +> You must specify the data type in the SyncML as <Format>chr</Format>. For an example SyncML, refer to [Enabling a policy](./understanding-admx-backed-policies.md#enabling-a-policy). +> +> The payload of the SyncML must be XML-encoded; for this XML encoding, there are a variety of online encoders that you can use. To avoid encoding the payload, you can use CDATA if your MDM supports it. For more information, see [CDATA Sections](http://www.w3.org/TR/REC-xml/#sec-cdata-sect). + + +ADMX Info: +- GP English name: *Allow automatic sleep with Open Network Files (plugged in)* +- GP name: *AllowSystemSleepWithRemoteFilesOpenAC* +- GP path: *System\Power Management\Sleep Settings* +- GP ADMX file name: *Power.admx* + + + +
    + + +**ADMX_Power/AllowSystemSleepWithRemoteFilesOpenDC** + + + + + + + + + + + + + + + + + + + + + + + + + + + +
    Windows EditionSupported?
    Homecross mark
    Procross mark
    Businesscross mark
    Enterprisecheck mark
    Educationcross mark
    + + +
    + + +[Scope](./policy-configuration-service-provider.md#policy-scope): + +> [!div class = "checklist"] +> * Device + +
    + + + +Available in the latest Windows 10 Insider Preview Build. This policy setting allows you to manage automatic sleep with open network files. + +If you enable this policy setting, the computer automatically sleeps when network files are open. + +If you disable or do not configure this policy setting, the computer does not automatically sleep when network files are open. + + +> [!TIP] +> This is an ADMX-backed policy and requires a special SyncML format to enable or disable. For details, see [Understanding ADMX-backed policies](./understanding-admx-backed-policies.md). +> +> You must specify the data type in the SyncML as <Format>chr</Format>. For an example SyncML, refer to [Enabling a policy](./understanding-admx-backed-policies.md#enabling-a-policy). +> +> The payload of the SyncML must be XML-encoded; for this XML encoding, there are a variety of online encoders that you can use. To avoid encoding the payload, you can use CDATA if your MDM supports it. For more information, see [CDATA Sections](http://www.w3.org/TR/REC-xml/#sec-cdata-sect). + + +ADMX Info: +- GP English name: *Allow automatic sleep with Open Network Files (on battery)* +- GP name: *AllowSystemSleepWithRemoteFilesOpenDC* +- GP path: *System\Power Management\Sleep Settings* +- GP ADMX file name: *Power.admx* + + + +
    + + +**ADMX_Power/CustomActiveSchemeOverride_2** + + + + + + + + + + + + + + + + + + + + + + + + + + + +
    Windows EditionSupported?
    Homecross mark
    Procross mark
    Businesscross mark
    Enterprisecheck mark
    Educationcross mark
    + + +
    + + +[Scope](./policy-configuration-service-provider.md#policy-scope): + +> [!div class = "checklist"] +> * Device + +
    + + + +Available in the latest Windows 10 Insider Preview Build. This policy setting specifies the active power plan from a specified power plan’s GUID. The GUID for a custom power plan GUID can be retrieved by using powercfg, the power configuration command line tool. + +If you enable this policy setting, you must specify a power plan, specified as a GUID using the following format: XXXXXXXX-XXXX-XXXX-XXXX-XXXXXXXXXXXX (For example, 103eea6e-9fcd-4544-a713-c282d8e50083), indicating the power plan to be active. + +If you disable or do not configure this policy setting, users can see and change this setting. + + +> [!TIP] +> This is an ADMX-backed policy and requires a special SyncML format to enable or disable. For details, see [Understanding ADMX-backed policies](./understanding-admx-backed-policies.md). +> +> You must specify the data type in the SyncML as <Format>chr</Format>. For an example SyncML, refer to [Enabling a policy](./understanding-admx-backed-policies.md#enabling-a-policy). +> +> The payload of the SyncML must be XML-encoded; for this XML encoding, there are a variety of online encoders that you can use. To avoid encoding the payload, you can use CDATA if your MDM supports it. For more information, see [CDATA Sections](http://www.w3.org/TR/REC-xml/#sec-cdata-sect). + + +ADMX Info: +- GP English name: *Specify a custom active power plan* +- GP name: *CustomActiveSchemeOverride_2* +- GP path: *System\Power Management* +- GP ADMX file name: *Power.admx* + + + +
    + + +**ADMX_Power/DCBatteryDischargeAction0_2** + + + + + + + + + + + + + + + + + + + + + + + + + + + +
    Windows EditionSupported?
    Homecross mark
    Procross mark
    Businesscross mark
    Enterprisecheck mark
    Educationcross mark
    + + +
    + + +[Scope](./policy-configuration-service-provider.md#policy-scope): + +> [!div class = "checklist"] +> * Device + +
    + + + +Available in the latest Windows 10 Insider Preview Build. This policy setting specifies the action that Windows takes when battery capacity reaches the critical battery notification level. + +If you enable this policy setting, select one of the following actions: + +- Take no action +- Sleep +- Hibernate +- Shut down + +If you disable or do not configure this policy setting, users control this setting. + + +> [!TIP] +> This is an ADMX-backed policy and requires a special SyncML format to enable or disable. For details, see [Understanding ADMX-backed policies](./understanding-admx-backed-policies.md). +> +> You must specify the data type in the SyncML as <Format>chr</Format>. For an example SyncML, refer to [Enabling a policy](./understanding-admx-backed-policies.md#enabling-a-policy). +> +> The payload of the SyncML must be XML-encoded; for this XML encoding, there are a variety of online encoders that you can use. To avoid encoding the payload, you can use CDATA if your MDM supports it. For more information, see [CDATA Sections](http://www.w3.org/TR/REC-xml/#sec-cdata-sect). + + +ADMX Info: +- GP English name: *Critical battery notification action* +- GP name: *DCBatteryDischargeAction0_2* +- GP path: *System\Power Management\Notification Settings* +- GP ADMX file name: *Power.admx* + + + +
    + + +**ADMX_Power/DCBatteryDischargeAction1_2** + + + + + + + + + + + + + + + + + + + + + + + + + + + +
    Windows EditionSupported?
    Homecross mark
    Procross mark
    Businesscross mark
    Enterprisecheck mark
    Educationcross mark
    + + +
    + + +[Scope](./policy-configuration-service-provider.md#policy-scope): + +> [!div class = "checklist"] +> * Device + +
    + + + +Available in the latest Windows 10 Insider Preview Build. This policy setting specifies the action that Windows takes when battery capacity reaches the low battery notification level. + +If you enable this policy setting, select one of the following actions: + +- Take no action +- Sleep +- Hibernate +- Shut down + +If you disable or do not configure this policy setting, users control this setting. + + +> [!TIP] +> This is an ADMX-backed policy and requires a special SyncML format to enable or disable. For details, see [Understanding ADMX-backed policies](./understanding-admx-backed-policies.md). +> +> You must specify the data type in the SyncML as <Format>chr</Format>. For an example SyncML, refer to [Enabling a policy](./understanding-admx-backed-policies.md#enabling-a-policy). +> +> The payload of the SyncML must be XML-encoded; for this XML encoding, there are a variety of online encoders that you can use. To avoid encoding the payload, you can use CDATA if your MDM supports it. For more information, see [CDATA Sections](http://www.w3.org/TR/REC-xml/#sec-cdata-sect). + + +ADMX Info: +- GP English name: *Low battery notification action* +- GP name: *DCBatteryDischargeAction1_2* +- GP path: *System\Power Management\Notification Settings* +- GP ADMX file name: *Power.admx* + + + +
    + + +**ADMX_Power/DCBatteryDischargeLevel0_2** + + + + + + + + + + + + + + + + + + + + + + + + + + + +
    Windows EditionSupported?
    Homecross mark
    Procross mark
    Businesscross mark
    Enterprisecheck mark
    Educationcross mark
    + + +
    + + +[Scope](./policy-configuration-service-provider.md#policy-scope): + +> [!div class = "checklist"] +> * Device + +
    + + + +Available in the latest Windows 10 Insider Preview Build. This policy setting specifies the percentage of battery capacity remaining that triggers the critical battery notification action. + +If you enable this policy setting, you must enter a numeric value (percentage) to set the battery level that triggers the critical notification. + +To set the action that is triggered, see the "Critical Battery Notification Action" policy setting. + +If you disable this policy setting or do not configure it, users control this setting. + + +> [!TIP] +> This is an ADMX-backed policy and requires a special SyncML format to enable or disable. For details, see [Understanding ADMX-backed policies](./understanding-admx-backed-policies.md). +> +> You must specify the data type in the SyncML as <Format>chr</Format>. For an example SyncML, refer to [Enabling a policy](./understanding-admx-backed-policies.md#enabling-a-policy). +> +> The payload of the SyncML must be XML-encoded; for this XML encoding, there are a variety of online encoders that you can use. To avoid encoding the payload, you can use CDATA if your MDM supports it. For more information, see [CDATA Sections](http://www.w3.org/TR/REC-xml/#sec-cdata-sect). + + +ADMX Info: +- GP English name: *Critical battery notification level* +- GP name: *DCBatteryDischargeLevel0_2* +- GP path: *System\Power Management\Notification Settings* +- GP ADMX file name: *Power.admx* + + + +
    + + +**ADMX_Power/DCBatteryDischargeLevel1UINotification_2** + + + + + + + + + + + + + + + + + + + + + + + + + + + +
    Windows EditionSupported?
    Homecross mark
    Procross mark
    Businesscross mark
    Enterprisecheck mark
    Educationcross mark
    + + +
    + + +[Scope](./policy-configuration-service-provider.md#policy-scope): + +> [!div class = "checklist"] +> * Device + +
    + + + +Available in the latest Windows 10 Insider Preview Build. This policy setting turns off the user notification when the battery capacity remaining equals the low battery notification level. + +If you enable this policy setting, Windows shows a notification when the battery capacity remaining equals the low battery notification level. + +To configure the low battery notification level, see the "Low Battery Notification Level" policy setting. + +The notification will only be shown if the "Low Battery Notification Action" policy setting is configured to "No Action". + +If you disable or do not configure this policy setting, users can control this setting. + + +> [!TIP] +> This is an ADMX-backed policy and requires a special SyncML format to enable or disable. For details, see [Understanding ADMX-backed policies](./understanding-admx-backed-policies.md). +> +> You must specify the data type in the SyncML as <Format>chr</Format>. For an example SyncML, refer to [Enabling a policy](./understanding-admx-backed-policies.md#enabling-a-policy). +> +> The payload of the SyncML must be XML-encoded; for this XML encoding, there are a variety of online encoders that you can use. To avoid encoding the payload, you can use CDATA if your MDM supports it. For more information, see [CDATA Sections](http://www.w3.org/TR/REC-xml/#sec-cdata-sect). + + +ADMX Info: +- GP English name: *Turn off low battery user notification* +- GP name: *DCBatteryDischargeLevel1UINotification_2* +- GP path: *System\Power Management\Notification Settings* +- GP ADMX file name: *Power.admx* + + + +
    + + +**ADMX_Power/DCBatteryDischargeLevel1_2** + + + + + + + + + + + + + + + + + + + + + + + + + + + +
    Windows EditionSupported?
    Homecross mark
    Procross mark
    Businesscross mark
    Enterprisecheck mark
    Educationcross mark
    + + +
    + + +[Scope](./policy-configuration-service-provider.md#policy-scope): + +> [!div class = "checklist"] +> * Device + +
    + + + +Available in the latest Windows 10 Insider Preview Build. This policy setting specifies the percentage of battery capacity remaining that triggers the low battery notification action. + +If you enable this policy setting, you must enter a numeric value (percentage) to set the battery level that triggers the low notification. + +To set the action that is triggered, see the "Low Battery Notification Action" policy setting. + +If you disable this policy setting or do not configure it, users control this setting. + + +> [!TIP] +> This is an ADMX-backed policy and requires a special SyncML format to enable or disable. For details, see [Understanding ADMX-backed policies](./understanding-admx-backed-policies.md). +> +> You must specify the data type in the SyncML as <Format>chr</Format>. For an example SyncML, refer to [Enabling a policy](./understanding-admx-backed-policies.md#enabling-a-policy). +> +> The payload of the SyncML must be XML-encoded; for this XML encoding, there are a variety of online encoders that you can use. To avoid encoding the payload, you can use CDATA if your MDM supports it. For more information, see [CDATA Sections](http://www.w3.org/TR/REC-xml/#sec-cdata-sect). + + +ADMX Info: +- GP English name: *Low battery notification level* +- GP name: *DCBatteryDischargeLevel1_2* +- GP path: *System\Power Management\Notification Settings* +- GP ADMX file name: *Power.admx* + + + +
    + + +**ADMX_Power/DCConnectivityInStandby_2** + + + + + + + + + + + + + + + + + + + + + + + + + + + +
    Windows EditionSupported?
    Homecross mark
    Procross mark
    Businesscross mark
    Enterprisecheck mark
    Educationcross mark
    + + +
    + + +[Scope](./policy-configuration-service-provider.md#policy-scope): + +> [!div class = "checklist"] +> * Device + +
    + + + +Available in the latest Windows 10 Insider Preview Build. This policy setting allows you to control the network connectivity state in standby on modern standby-capable systems. + +If you enable this policy setting, network connectivity will be maintained in standby. + +If you disable this policy setting, network connectivity in standby is not guaranteed. This connectivity restriction currently applies to WLAN networks only, and is subject to change. + +If you do not configure this policy setting, users control this setting. + + +> [!TIP] +> This is an ADMX-backed policy and requires a special SyncML format to enable or disable. For details, see [Understanding ADMX-backed policies](./understanding-admx-backed-policies.md). +> +> You must specify the data type in the SyncML as <Format>chr</Format>. For an example SyncML, refer to [Enabling a policy](./understanding-admx-backed-policies.md#enabling-a-policy). +> +> The payload of the SyncML must be XML-encoded; for this XML encoding, there are a variety of online encoders that you can use. To avoid encoding the payload, you can use CDATA if your MDM supports it. For more information, see [CDATA Sections](http://www.w3.org/TR/REC-xml/#sec-cdata-sect). + + +ADMX Info: +- GP English name: *Allow network connectivity during connected-standby (on battery)* +- GP name: *DCConnectivityInStandby_2* +- GP path: *System\Power Management\Sleep Settings* +- GP ADMX file name: *Power.admx* + + + +
    + + +**ADMX_Power/DCCriticalSleepTransitionsDisable_2** + + + + + + + + + + + + + + + + + + + + + + + + + + + +
    Windows EditionSupported?
    Homecross mark
    Procross mark
    Businesscross mark
    Enterprisecheck mark
    Educationcross mark
    + + +
    + + +[Scope](./policy-configuration-service-provider.md#policy-scope): + +> [!div class = "checklist"] +> * Device + +
    + + + +Available in the latest Windows 10 Insider Preview Build. This policy setting allows you to turn on the ability for applications and services to prevent the system from sleeping. + +If you enable this policy setting, an application or service may prevent the system from sleeping (Hybrid Sleep, Stand By, or Hibernate). + +If you disable or do not configure this policy setting, users control this setting. + + +> [!TIP] +> This is an ADMX-backed policy and requires a special SyncML format to enable or disable. For details, see [Understanding ADMX-backed policies](./understanding-admx-backed-policies.md). +> +> You must specify the data type in the SyncML as <Format>chr</Format>. For an example SyncML, refer to [Enabling a policy](./understanding-admx-backed-policies.md#enabling-a-policy). +> +> The payload of the SyncML must be XML-encoded; for this XML encoding, there are a variety of online encoders that you can use. To avoid encoding the payload, you can use CDATA if your MDM supports it. For more information, see [CDATA Sections](http://www.w3.org/TR/REC-xml/#sec-cdata-sect). + + +ADMX Info: +- GP English name: *Turn on the ability for applications to prevent sleep transitions (on battery)* +- GP name: *DCCriticalSleepTransitionsDisable_2* +- GP path: *System\Power Management\Sleep Settings* +- GP ADMX file name: *Power.admx* + + + +
    + + +**ADMX_Power/DCStartMenuButtonAction_2** + + + + + + + + + + + + + + + + + + + + + + + + + + + +
    Windows EditionSupported?
    Homecross mark
    Procross mark
    Businesscross mark
    Enterprisecheck mark
    Educationcross mark
    + + +
    + + +[Scope](./policy-configuration-service-provider.md#policy-scope): + +> [!div class = "checklist"] +> * Device + +
    + + + +Available in the latest Windows 10 Insider Preview Build. This policy setting specifies the action that Windows takes when a user presses the Start menu Power button. + +If you enable this policy setting, select one of the following actions: + +- Sleep +- Hibernate +- Shut down + +If you disable this policy or do not configure this policy setting, users control this setting. + + +> [!TIP] +> This is an ADMX-backed policy and requires a special SyncML format to enable or disable. For details, see [Understanding ADMX-backed policies](./understanding-admx-backed-policies.md). +> +> You must specify the data type in the SyncML as <Format>chr</Format>. For an example SyncML, refer to [Enabling a policy](./understanding-admx-backed-policies.md#enabling-a-policy). +> +> The payload of the SyncML must be XML-encoded; for this XML encoding, there are a variety of online encoders that you can use. To avoid encoding the payload, you can use CDATA if your MDM supports it. For more information, see [CDATA Sections](http://www.w3.org/TR/REC-xml/#sec-cdata-sect). + + +ADMX Info: +- GP English name: *Select the Start menu Power button action (on battery)* +- GP name: *DCStartMenuButtonAction_2* +- GP path: *System\Power Management\Button Settings* +- GP ADMX file name: *Power.admx* + + + +
    + + +**ADMX_Power/DiskACPowerDownTimeOut_2** + + + + + + + + + + + + + + + + + + + + + + + + + + + +
    Windows EditionSupported?
    Homecross mark
    Procross mark
    Businesscross mark
    Enterprisecheck mark
    Educationcross mark
    + + +
    + + +[Scope](./policy-configuration-service-provider.md#policy-scope): + +> [!div class = "checklist"] +> * Device + +
    + + + +Available in the latest Windows 10 Insider Preview Build. This policy setting specifies the period of inactivity before Windows turns off the hard disk. + +If you enable this policy setting, you must provide a value, in seconds, indicating how much idle time should elapse before Windows turns off the hard disk. + +If you disable or do not configure this policy setting, users can see and change this setting. + + +> [!TIP] +> This is an ADMX-backed policy and requires a special SyncML format to enable or disable. For details, see [Understanding ADMX-backed policies](./understanding-admx-backed-policies.md). +> +> You must specify the data type in the SyncML as <Format>chr</Format>. For an example SyncML, refer to [Enabling a policy](./understanding-admx-backed-policies.md#enabling-a-policy). +> +> The payload of the SyncML must be XML-encoded; for this XML encoding, there are a variety of online encoders that you can use. To avoid encoding the payload, you can use CDATA if your MDM supports it. For more information, see [CDATA Sections](http://www.w3.org/TR/REC-xml/#sec-cdata-sect). + + +ADMX Info: +- GP English name: *Turn Off the hard disk (plugged in)* +- GP name: *DiskACPowerDownTimeOut_2* +- GP path: *System\Power Management\Hard Disk Settings* +- GP ADMX file name: *Power.admx* + + + +
    + + +**ADMX_Power/DiskDCPowerDownTimeOut_2** + + + + + + + + + + + + + + + + + + + + + + + + + + + +
    Windows EditionSupported?
    Homecross mark
    Procross mark
    Businesscross mark
    Enterprisecheck mark
    Educationcross mark
    + + +
    + + +[Scope](./policy-configuration-service-provider.md#policy-scope): + +> [!div class = "checklist"] +> * Device + +
    + + + +Available in the latest Windows 10 Insider Preview Build. This policy setting specifies the period of inactivity before Windows turns off the hard disk. + +If you enable this policy setting, you must provide a value, in seconds, indicating how much idle time should elapse before Windows turns off the hard disk. + +If you disable or do not configure this policy setting, users can see and change this setting. + + +> [!TIP] +> This is an ADMX-backed policy and requires a special SyncML format to enable or disable. For details, see [Understanding ADMX-backed policies](./understanding-admx-backed-policies.md). +> +> You must specify the data type in the SyncML as <Format>chr</Format>. For an example SyncML, refer to [Enabling a policy](./understanding-admx-backed-policies.md#enabling-a-policy). +> +> The payload of the SyncML must be XML-encoded; for this XML encoding, there are a variety of online encoders that you can use. To avoid encoding the payload, you can use CDATA if your MDM supports it. For more information, see [CDATA Sections](http://www.w3.org/TR/REC-xml/#sec-cdata-sect). + + +ADMX Info: +- GP English name: *Turn Off the hard disk (on battery)* +- GP name: *DiskDCPowerDownTimeOut_2* +- GP path: *System\Power Management\Hard Disk Settings* +- GP ADMX file name: *Power.admx* + + + +
    + + +**ADMX_Power/Dont_PowerOff_AfterShutdown** + + + + + + + + + + + + + + + + + + + + + + + + + + + +
    Windows EditionSupported?
    Homecross mark
    Procross mark
    Businesscross mark
    Enterprisecheck mark
    Educationcross mark
    + + +
    + + +[Scope](./policy-configuration-service-provider.md#policy-scope): + +> [!div class = "checklist"] +> * Device + +
    + + + +Available in the latest Windows 10 Insider Preview Build. This policy setting allows you to configure whether power is automatically turned off when Windows shutdown completes. + +This setting does not affect Windows shutdown behavior when shutdown is manually selected using the Start menu or Task Manager user interfaces. + +Applications such as UPS software may rely on Windows shutdown behavior. + +This setting is only applicable when Windows shutdown is initiated by software programs invoking the Windows programming interfaces ExitWindowsEx() or InitiateSystemShutdown(). + +If you enable this policy setting, the computer system safely shuts down and remains in a powered state, ready for power to be safely removed. + +If you disable or do not configure this policy setting, the computer system safely shuts down to a fully powered-off state. + + +> [!TIP] +> This is an ADMX-backed policy and requires a special SyncML format to enable or disable. For details, see [Understanding ADMX-backed policies](./understanding-admx-backed-policies.md). +> +> You must specify the data type in the SyncML as <Format>chr</Format>. For an example SyncML, refer to [Enabling a policy](./understanding-admx-backed-policies.md#enabling-a-policy). +> +> The payload of the SyncML must be XML-encoded; for this XML encoding, there are a variety of online encoders that you can use. To avoid encoding the payload, you can use CDATA if your MDM supports it. For more information, see [CDATA Sections](http://www.w3.org/TR/REC-xml/#sec-cdata-sect). + + +ADMX Info: +- GP English name: *Do not turn off system power after a Windows system shutdown has occurred.* +- GP name: *Dont_PowerOff_AfterShutdown* +- GP path: *System* +- GP ADMX file name: *Power.admx* + + + +
    + + +**ADMX_Power/EnableDesktopSlideShowAC** + + + + + + + + + + + + + + + + + + + + + + + + + + + +
    Windows EditionSupported?
    Homecross mark
    Procross mark
    Businesscross mark
    Enterprisecheck mark
    Educationcross mark
    + + +
    + + +[Scope](./policy-configuration-service-provider.md#policy-scope): + +> [!div class = "checklist"] +> * Device + +
    + + + +Available in the latest Windows 10 Insider Preview Build. This policy setting allows you to specify if Windows should enable the desktop background slideshow. + +If you enable this policy setting, desktop background slideshow is enabled. + +If you disable this policy setting, the desktop background slideshow is disabled. + +If you disable or do not configure this policy setting, users control this setting. + + +> [!TIP] +> This is an ADMX-backed policy and requires a special SyncML format to enable or disable. For details, see [Understanding ADMX-backed policies](./understanding-admx-backed-policies.md). +> +> You must specify the data type in the SyncML as <Format>chr</Format>. For an example SyncML, refer to [Enabling a policy](./understanding-admx-backed-policies.md#enabling-a-policy). +> +> The payload of the SyncML must be XML-encoded; for this XML encoding, there are a variety of online encoders that you can use. To avoid encoding the payload, you can use CDATA if your MDM supports it. For more information, see [CDATA Sections](http://www.w3.org/TR/REC-xml/#sec-cdata-sect). + + +ADMX Info: +- GP English name: *Turn on desktop background slideshow (plugged in)* +- GP name: *EnableDesktopSlideShowAC* +- GP path: *System\Power Management\Video and Display Settings* +- GP ADMX file name: *Power.admx* + + + +
    + + +**ADMX_Power/EnableDesktopSlideShowDC** + + + + + + + + + + + + + + + + + + + + + + + + + + + +
    Windows EditionSupported?
    Homecross mark
    Procross mark
    Businesscross mark
    Enterprisecheck mark
    Educationcross mark
    + + +
    + + +[Scope](./policy-configuration-service-provider.md#policy-scope): + +> [!div class = "checklist"] +> * Device + +
    + + + +Available in the latest Windows 10 Insider Preview Build. This policy setting allows you to specify if Windows should enable the desktop background slideshow. + +If you enable this policy setting, desktop background slideshow is enabled. + +If you disable this policy setting, the desktop background slideshow is disabled. + +If you disable or do not configure this policy setting, users control this setting. + + +> [!TIP] +> This is an ADMX-backed policy and requires a special SyncML format to enable or disable. For details, see [Understanding ADMX-backed policies](./understanding-admx-backed-policies.md). +> +> You must specify the data type in the SyncML as <Format>chr</Format>. For an example SyncML, refer to [Enabling a policy](./understanding-admx-backed-policies.md#enabling-a-policy). +> +> The payload of the SyncML must be XML-encoded; for this XML encoding, there are a variety of online encoders that you can use. To avoid encoding the payload, you can use CDATA if your MDM supports it. For more information, see [CDATA Sections](http://www.w3.org/TR/REC-xml/#sec-cdata-sect). + + +ADMX Info: +- GP English name: *Turn on desktop background slideshow (on battery)* +- GP name: *EnableDesktopSlideShowDC* +- GP path: *System\Power Management\Video and Display Settings* +- GP ADMX file name: *Power.admx* + + + +
    + + +**ADMX_Power/InboxActiveSchemeOverride_2** + + + + + + + + + + + + + + + + + + + + + + + + + + + +
    Windows EditionSupported?
    Homecross mark
    Procross mark
    Businesscross mark
    Enterprisecheck mark
    Educationcross mark
    + + +
    + + +[Scope](./policy-configuration-service-provider.md#policy-scope): + +> [!div class = "checklist"] +> * Device + +
    + + + +Available in the latest Windows 10 Insider Preview Build. This policy setting specifies the active power plan from a list of default Windows power plans. To specify a custom power plan, use the Custom Active Power Plan setting. + +If you enable this policy setting, specify a power plan from the Active Power Plan list. + +If you disable or do not configure this policy setting, users control this setting. + + +> [!TIP] +> This is an ADMX-backed policy and requires a special SyncML format to enable or disable. For details, see [Understanding ADMX-backed policies](./understanding-admx-backed-policies.md). +> +> You must specify the data type in the SyncML as <Format>chr</Format>. For an example SyncML, refer to [Enabling a policy](./understanding-admx-backed-policies.md#enabling-a-policy). +> +> The payload of the SyncML must be XML-encoded; for this XML encoding, there are a variety of online encoders that you can use. To avoid encoding the payload, you can use CDATA if your MDM supports it. For more information, see [CDATA Sections](http://www.w3.org/TR/REC-xml/#sec-cdata-sect). + + +ADMX Info: +- GP English name: *Select an active power plan* +- GP name: *InboxActiveSchemeOverride_2* +- GP path: *System\Power Management* +- GP ADMX file name: *Power.admx* + + + +
    + + +**ADMX_Power/PW_PromptPasswordOnResume** + + + + + + + + + + + + + + + + + + + + + + + + + + + +
    Windows EditionSupported?
    Homecross mark
    Procross mark
    Businesscross mark
    Enterprisecheck mark
    Educationcross mark
    + + +
    + + +[Scope](./policy-configuration-service-provider.md#policy-scope): + +> [!div class = "checklist"] +> * User + +
    + + + +Available in the latest Windows 10 Insider Preview Build. This policy setting allows you to configure client computers to lock and prompt for a password when resuming from a hibernate or suspend state. + +If you enable this policy setting, the client computer is locked and prompted for a password when it is resumed from a suspend or hibernate state. + +If you disable or do not configure this policy setting, users control if their computer is automatically locked or not after performing a resume operation. + + +> [!TIP] +> This is an ADMX-backed policy and requires a special SyncML format to enable or disable. For details, see [Understanding ADMX-backed policies](./understanding-admx-backed-policies.md). +> +> You must specify the data type in the SyncML as <Format>chr</Format>. For an example SyncML, refer to [Enabling a policy](./understanding-admx-backed-policies.md#enabling-a-policy). +> +> The payload of the SyncML must be XML-encoded; for this XML encoding, there are a variety of online encoders that you can use. To avoid encoding the payload, you can use CDATA if your MDM supports it. For more information, see [CDATA Sections](http://www.w3.org/TR/REC-xml/#sec-cdata-sect). + + +ADMX Info: +- GP English name: *Prompt for password on resume from hibernate/suspend* +- GP name: *PW_PromptPasswordOnResume* +- GP path: *System\Power Management* +- GP ADMX file name: *Power.admx* + + + +
    + + +**ADMX_Power/PowerThrottlingTurnOff** + + + + + + + + + + + + + + + + + + + + + + + + + + + +
    Windows EditionSupported?
    Homecross mark
    Procross mark
    Businesscross mark
    Enterprisecheck mark
    Educationcross mark
    + + +
    + + +[Scope](./policy-configuration-service-provider.md#policy-scope): + +> [!div class = "checklist"] +> * Device + +
    + + + +Available in the latest Windows 10 Insider Preview Build. This policy setting allows you to turn off Power Throttling. + +If you enable this policy setting, Power Throttling will be turned off. + +If you disable or do not configure this policy setting, users control this setting. + + +> [!TIP] +> This is an ADMX-backed policy and requires a special SyncML format to enable or disable. For details, see [Understanding ADMX-backed policies](./understanding-admx-backed-policies.md). +> +> You must specify the data type in the SyncML as <Format>chr</Format>. For an example SyncML, refer to [Enabling a policy](./understanding-admx-backed-policies.md#enabling-a-policy). +> +> The payload of the SyncML must be XML-encoded; for this XML encoding, there are a variety of online encoders that you can use. To avoid encoding the payload, you can use CDATA if your MDM supports it. For more information, see [CDATA Sections](http://www.w3.org/TR/REC-xml/#sec-cdata-sect). + + +ADMX Info: +- GP English name: *Turn off Power Throttling* +- GP name: *PowerThrottlingTurnOff* +- GP path: *System\Power Management\Power Throttling Settings* +- GP ADMX file name: *Power.admx* + + + +
    + + +**ADMX_Power/ReserveBatteryNotificationLevel** + + + + + + + + + + + + + + + + + + + + + + + + + + + +
    Windows EditionSupported?
    Homecross mark
    Procross mark
    Businesscross mark
    Enterprisecheck mark
    Educationcross mark
    + + +
    + + +[Scope](./policy-configuration-service-provider.md#policy-scope): + +> [!div class = "checklist"] +> * Device + +
    + + + +Available in the latest Windows 10 Insider Preview Build. This policy setting specifies the percentage of battery capacity remaining that triggers the reserve power mode. + +If you enable this policy setting, you must enter a numeric value (percentage) to set the battery level that triggers the reserve power notification. + +If you disable or do not configure this policy setting, users can see and change this setting. + + +> [!TIP] +> This is an ADMX-backed policy and requires a special SyncML format to enable or disable. For details, see [Understanding ADMX-backed policies](./understanding-admx-backed-policies.md). +> +> You must specify the data type in the SyncML as <Format>chr</Format>. For an example SyncML, refer to [Enabling a policy](./understanding-admx-backed-policies.md#enabling-a-policy). +> +> The payload of the SyncML must be XML-encoded; for this XML encoding, there are a variety of online encoders that you can use. To avoid encoding the payload, you can use CDATA if your MDM supports it. For more information, see [CDATA Sections](http://www.w3.org/TR/REC-xml/#sec-cdata-sect). + + +ADMX Info: +- GP English name: *Reserve battery notification level* +- GP name: *ReserveBatteryNotificationLevel* +- GP path: *System\Power Management\Notification Settings* +- GP ADMX file name: *Power.admx* + + + +
    + +Footnotes: + +- 1 - Available in Windows 10, version 1607. +- 2 - Available in Windows 10, version 1703. +- 3 - Available in Windows 10, version 1709. +- 4 - Available in Windows 10, version 1803. +- 5 - Available in Windows 10, version 1809. +- 6 - Available in Windows 10, version 1903. +- 7 - Available in Windows 10, version 1909. +- 8 - Available in Windows 10, version 2004. + + + From 7c0b00e858893f237d46eea97b0c6907e33d9922 Mon Sep 17 00:00:00 2001 From: Max Stein Date: Tue, 22 Dec 2020 19:58:35 -0800 Subject: [PATCH 202/486] Doc update and screenshot refresh Updating text and screenshots. --- .../hello-feature-pin-reset.md | 19 ++++++++----------- 1 file changed, 8 insertions(+), 11 deletions(-) diff --git a/windows/security/identity-protection/hello-for-business/hello-feature-pin-reset.md b/windows/security/identity-protection/hello-for-business/hello-feature-pin-reset.md index e4e7af1253..93b01bb01b 100644 --- a/windows/security/identity-protection/hello-for-business/hello-feature-pin-reset.md +++ b/windows/security/identity-protection/hello-for-business/hello-feature-pin-reset.md @@ -13,7 +13,7 @@ manager: dansimp ms.collection: M365-identity-device-management ms.topic: article localizationpriority: medium -ms.date: 09/09/2019 +ms.date: 12/22/2020 ms.reviewer: --- @@ -45,37 +45,34 @@ Before you can remotely reset PINs, you must on-board the Microsoft PIN reset se 1. Go to the [Microsoft PIN Reset Service Production website](https://login.windows.net/common/oauth2/authorize?response_type=code&client_id=b8456c59-1230-44c7-a4a2-99b085333e84&resource=https%3A%2F%2Fgraph.windows.net&redirect_uri=https%3A%2F%2Fcred.microsoft.com&state=e9191523-6c2f-4f1d-a4f9-c36f26f89df0&prompt=admin_consent), and sign in using the Global administrator account you use to manage your Azure Active Directory tenant. 2. After you have logged in, choose **Accept** to give consent for the PIN reset service to access your account. -![PIN reset service application in Azure](images/pinreset/pin-reset-service-prompt.png) + ![PIN reset service application in Azure](images/pinreset/pin-reset-service-prompt.png) 3. Go to the [Microsoft PIN Reset Client Production website](https://login.windows.net/common/oauth2/authorize?response_type=code&client_id=9115dd05-fad5-4f9c-acc7-305d08b1b04e&resource=https%3A%2F%2Fcred.microsoft.com%2F&redirect_uri=ms-appx-web%3A%2F%2FMicrosoft.AAD.BrokerPlugin%2F9115dd05-fad5-4f9c-acc7-305d08b1b04e&state=6765f8c5-f4a7-4029-b667-46a6776ad611&prompt=admin_consent), and sign in using the Global administrator account you use to manage your Azure Active Directory tenant. 4. After you have logged in, choose **Accept** to give consent for the PIN reset client to access your account. - + ![PIN reset client application in Azure](images/pinreset/pin-reset-client-prompt.png) > [!NOTE] > After you have accepted the PIN reset service and client requests, you will land on a page that states "You do not have permission to view this directory or page." This behavior is expected. Be sure to confirm that the two PIN reset applications are listed for your tenant. - -![PIN reset client application in Azure](images/pinreset/pin-reset-client-prompt.png) - 5. In the [Azure portal](https://portal.azure.com), verify that the Microsoft PIN Reset Service and Microsoft PIN Reset Client are integrated from the **Enterprise applications** blade. Filter to application status "Enabled" and both Microsoft Pin Reset Service Production and Microsoft Pin Reset Client Production will show up in your tenant. -![PIN reset service permissions page](images/pinreset/pin-reset-applications.png) + ![PIN reset service permissions page](images/pinreset/pin-reset-applications.png) ### Configure Windows devices to use PIN reset using Group Policy You configure Windows 10 to use the Microsoft PIN Reset service using the computer configuration portion of a Group Policy object. 1. Using the Group Policy Management Console (GPMC), scope a domain-based Group Policy to computer accounts in Active Directory. -2. Edit the Group Policy object from step 1. -3. Enable the **Use PIN Recovery** policy setting located under **Computer Configuration->Administrative Templates->Windows Components->Windows Hello for Business**. +2. Edit the Group Policy object from Step 1. +3. Enable the **Use PIN Recovery** policy setting located under **Computer Configuration > Administrative Templates > Windows Components > Windows Hello for Business**. 4. Close the Group Policy Management Editor to save the Group Policy object. Close the GPMC. #### Create a PIN Reset Device configuration profile using Microsoft Intune 1. Sign-in to [Enpoint Manager admin center](https://endpoint.microsoft.com/) using a Global administrator account. -2. Click **Endpoint Security**-> **Account Protection**-> **Properties**. +2. Click **Endpoint Security** > **Account Protection** > **Properties**. 3. Set **Enable PIN recovery** to **Yes**. > [!NOTE] > You can also setup PIN recovery using configuration profiles. > 1. Sign in to Endpoint Manager. -> 2. Click **Devices** -> **Configuration Profiles** -> Create a new profile or edit an existing profile using the Identity Protection profile type. +> 2. Click **Devices** > **Configuration Profiles** > Create a new profile or edit an existing profile using the Identity Protection profile type. > 3. Set **Enable PIN recovery** to **Yes**. #### Assign the PIN Reset Device configuration profile using Microsoft Intune From 272fc4ceda6b43d82bf09ff5701fec8f67645a4a Mon Sep 17 00:00:00 2001 From: Max Stein Date: Tue, 22 Dec 2020 20:22:06 -0800 Subject: [PATCH 203/486] Doc update and screenshot refresh Updating text and screenshots. --- .../pinreset/pin-reset-client-home-screen.png | Bin 0 -> 90751 bytes .../pinreset/pin-reset-service-application.png | Bin 0 -> 113741 bytes .../pinreset/pin-reset-service-home-screen.png | Bin 0 -> 71281 bytes 3 files changed, 0 insertions(+), 0 deletions(-) create mode 100644 windows/security/identity-protection/hello-for-business/images/pinreset/pin-reset-client-home-screen.png create mode 100644 windows/security/identity-protection/hello-for-business/images/pinreset/pin-reset-service-application.png create mode 100644 windows/security/identity-protection/hello-for-business/images/pinreset/pin-reset-service-home-screen.png diff --git a/windows/security/identity-protection/hello-for-business/images/pinreset/pin-reset-client-home-screen.png b/windows/security/identity-protection/hello-for-business/images/pinreset/pin-reset-client-home-screen.png new file mode 100644 index 0000000000000000000000000000000000000000..fce622e7f7a0fbee64e868b71ff042806524ed4f GIT binary patch literal 90751 zcmd?RbyO687%onS(kLO_A}q)v4NI4V2ug>_QUcN~jRKNOEYeDf^n!E>61#wOcQ?|o z)SdnQ&hP$n|GwwkdoJeyJHyN{^NII;p67i&6RD%EN_y|nJuECNQgt;YT`Vl@QYV|PU9PIAz_U-nyX3ZT&%hYuDv7-3tIq&mNC2)munmAN~ ztbwo3^hSNamnN{mdv{#$p}JUOW4^w@$zK$OK8+bDj_;B@g6+hu~-aF8LhXa3s zU2MU|Pi4x`=T8<}47TAWmoO7A#x1no{I`C)3n7G*eRsS-O(&7DBqI1>1?v z9K$|D&uPa6e8>@28-9*C%O*ZA8FRt_t2!U%%uM+Nec(J!$Y+3ZvW(nnj`|+m$i66-w)C+IPevVkWf=?v*sdTBtYjY( znq5}O%lere-MFqZ*{9H21bTnV$8=S+d$c#uoqueQ$5Q2{D*h{qYeT8G1=8rM+icZ> zD;=M=y)4OvWim~SzE>ZuVyGdn#$|uq*@Vv9B(Fe5Im#uF!sW9P|MR8-3QmXJ*8Vgb z2*zEnDy|(`1m;OY&Rb7zq(!e}lV}anN~JwID%T>UXdg42M%baM(1A7E{^PQ1ife)s zw?Cz?kaM^ouCC8s3;wlDx9FX<(%Sh);t9YINu-@)Ep7JAJ6&P6WBXBmYq9XxQuglZ zX!*+lY}~>(@7LS7>Y7cMUMu;sak;8-IJvwr<1t@(ldie%R{r)6iQVttq7j0v*GIO6 z`;)?drS;7H_I{z8i@mS*YEdh3vgT!V%U@jAQ*GesPAxtqXw2|b59TbDSKDbPWGNv- zU#!Fl(we!y^f~I~A@mrHlQ}c2|M&Yos+T9*bU<>aZbb)@E5%f| zwXgTa+IF-(PoQQcaTy^8n`0-=|b0g7t?-c~{ zNpTXX=;SwR`cP0*rr&=3uif{>rTUp@;Oy6N=O;#RPeiDVlH1W)+N>fT)*XWyBQ8`)&Kb~Aa6x*3>xyp~uD!hKIOKBj3u`s1Y)u$#ZQ ztl_=H)o#^}(5nAVX)Qd{bGnG}@8-PAxt(B)9KrxxLC59F!L(y21Wh6iWVODaf1n|>XDQ$j8DCcrAl>G{Esn{ z_|DJAy#O z)PD?gvZ=>yae0d`7naeB#b83_$1@)q9jB~P%-*Lmc}~718CJl7lfn{9?(NraWDRlF zOG#FcHGLY5a2?7N$e-pW z%y51MM9MvHS-gYIS_P%GZ3et*!z+&6_6D`%xO?=0*ZON3tlP+R|6r4Q~DN zvI7>k|K!)!#1=RbMdQ1VP=Xdr&C!IslQK4;Dh@pryx6?GX%5=9iSXT>7lCNKDVuEn z?csE;R-jXB6WDYU`se%(n%8P(KJWoq&%E>;ff6V-BGpa25&v+WV+HACy>bIx_E=q# z3Gv4Lph!6TC2tP3+4?K<7#wm8m!^biMv)MyT2NBDBI=bqy+&WEzJ8~hfh!=^-hyy|3ON8llG|Hs`JUV+`jI`&$`8B^8yE5G_4>sm0 zDxU&Rk)LI;u(R%kjEnQB>hnjYTb0Q}WM!B7j|!un*B=h~J+Jp4IvViF=07k!$#0k4 z_?Xk=c08Qlbk-)PVacwx6TuPtW55LduH)019DM{y_i*Z!gs5p<;R6ka8?~t1THKcf ztBv+(Y#~-+ys;*7Yr>qqo&<9WeXOP4cqjxpl_yWL8tO1>pa^NMEQQ)j==pS~JDa!C zSbRKuZi_^Y_E_c;X9kfn?@zFSrZQs~F*h!Ox$#e8^B@zmL*vW1=4`pR|&XaDwuJ+AK%Zq{ZRkmRb1Eyw3W|F60=aIP-mg)dndD-VrIM31(`|CQdaU8 zHH&SI0smV2N%slcoz-@}TE-U9li|?wkK7wZj84uL{ctpTwETWSNZazup*aZF4#R6N$COpz`N{5DD)XYm9iYn*j|Sl2*!L_t*4r;g@w zYIxsRiVh^zP-vy7a(#Q>hfRh>X*H5&--Qh%_l@rPE&Fpmn;*|F*1 zIk*u_&9vfTS|~Dxvy?3>qP=pahB*%(J{nIS?my=-5pz3K;U~-3vI5&<Qvd zJon?Khe=+K6Z0B>sp6neS60a{S$Q{%W(C5v8mJUj!5ijbk2u#Lg;hzbm>jJY8N0@jF%p02sXPXw~PAVrC~BX z6(-ZetwdVYUGIL@Yx0;VfJKEmLtW&@Ijg1}YvoybSJH!WRc9VO<2nx$d zHG;wAlf)5yqhk)VQ1Cw2l&BzemB`#L&ucavdJ2Uh2)le(M1-cN?B}KkcoWg&DS|7n z&;t3V>z>D@8NClbt!Q8df39K<(U4Q`uIMXK06ubaB~%lzfzC51lJXmS3b0_4ytega zKBl7U-K~sXQ0t6VNe5yl$a2pD{1IhRTtAsh-2I{=MKf@fC`F>Ll_dQ5`e3?%zb7Ud z44K)5eU0JNV&!yg;ITQzA0DxmYE;x-eOcziGH^N|QAU32wC|~j8MFVPsVF^_N4HLv z6_$s@7k(9zZS`lDm1fk=%r8mx1-9vbl8_XdCT)2^21r%cF(XI^fTxHx|3+pz|L>~C zvfHrn6Pb|h^GnaT>e~iC=U8Iy{}@NKGzP}ro_e7OQkwK{&jwIQ@Mp^n=@?)sKS=!l5h0xa^9j)SQY^2$1ZgH^_}`o%hf*L)qbOs#7;?7 zR}_Di?{*Oam^pAz&16pWBa!!uoBv$qeKwK-r1|UPx^Omc_SNhLQWbIpLky`fB&#y} zK%3N@6@r>z))+F$r1#8juXZ6|ZMW)gRtY^BBHe930+nW8X2k4&GW1;MPy&E!NQL{L zR|55`32E(GWdAV-02)08Ztt=U2K4NvfTW@^e8${oE%|8H?Qil%c3?{rfKV;@Z`eLf znERDx1p<%}1+ZEp;Zor8g$Zzn4xbIv@{HXMms1FUch^4An*UfxKfSy#VIpc15o|uu z^#RzzJWr@E2I0ESx^$0uCQaz~+>g-g@&HIhoJ*;%qJZl&brAYtc0A>E>4!D5jgQs% zEiAxYTZNK}{%}nsKH)`|YE~UAHbJCsPDXNf-1!GYtb75~*IidbdgI=VK>wKAY~1M) znUpws&xicceQCQO;!cYI*fcLgCR-^X%g2h6#{Gu1s_Yww%j*qU3w>j|eAk2KbFvK3 zT4gsgpNUhm$K_E`Yh?8NB zIPT~Ew-?>A=8)5(7s&vnDyz8_O?n zB0lRt2mjm%kmJT6oaWn+>|6I{>qIS4UI4Ny$piuzHyP;WI%Hv7SGQqDzu1Cl_Zy%q z%l*+vgBD%5k#(vo0NIiNCid&>lwsjQg-NwDRgJUYqkBlT(lEHtFA*Y99DgSa$uZ<$ESX41kwQcLC^pDorTUK_Z+4AkOAlfWC?7O#zsb zPpIfcbB}^lhKQ=fO0+Qip@C_o^zFsUFETRybcDbp08f#BXe~_d;A@vX(0J4%`;wR1 zvNtE_a}0&70WLmGR!7#0^c;BV(^g(fIr&?ynasafi@IS zrG2$|k?lbXUnlEAfF>f93is`LC1-^d-e7={hiQg5&a^{S|IcF*XKz9#cO8kl>*Hc- zPgy&FJA%A``L%i6v)oDjf-zIRM?ZcPmt0yWQ?{EWFP|CZn_>}gX}e)dAHSjsf&Yph z#So^*_vOuJKT~lMaEvBACd>@(T6W4BpHLe4CJvPVEIavu_!4)Lh5L}QeRg{M=~mPc zI2q`a#%=7Lu3)#-AZPKj(wga?0TY6&^+2SUXvGC5Q)`QVKckQAePkA@mP39LxLs7( z;^g+FMEgu_L2KFh8sLYZa3)W~F?H&b@=}gCY1imzJ$>#*Wly*cK0X)~pB##Hpn05P;w80iy77LDQNeowLUvF$hLRbFpHakUs>oyrIG4Z$ zave32!E#|CBvwYA4{L&Lt$4xF+)!ov@@7vi%Di8b@1kP3&GY2Pficx|)?TP?-189D zvzX?b5esz)lBO|y6MR%`ar09kHQ_Zqr=^~1qHT4IX1uDN{#1esrD=RFaeHVDzX5x1 z&`Jn#aKxdKj+*`zYtJBACXQM6=X5~NdxuozQA4?AaB+}jxNWqFTWbWhSOB7o2nrUA zA5ZmL{&^^jW}`3*VB`!R>fTl-DjP@WnSrqf^tij~Q53O~+dq7@>$%{DIk$1nPyJ z7DI!ALTjbz&ZD9D89z(sum?;<+vQQw++21>`=Nkp)B>+H?Rm>VX2f>ny3hrl{~K^t zl~%7*Q&6Hs(1X3SDM(oA51u~x9*C6M5N8)(jaS@0?cgfa0^-k!k0U^dU2{_=M>WXM z6huLq$X{|SXytH>LQ-1XY!|ADR@b(CXOmrm5}JZLJg9yVIPDfw@-x+n-Nm<1Z{>rL z2u3}{lT5U8`JmR}&#tt3uI<^{OEG)wVlGO9dJeCE62VK`L=bRMJCRJLjs1XoJfJAp zOFTPXp8HGHq18}|>FAP3%dyXz!FtLB5bOz&R>E2GVOl&TPwna990Vi6&koK6(n{#) z3Y&Be38FAbtWJVW;oBLpE5GX@hp|35AB~T5P?>|9Q_3P-1;3CWo}d$g*~s^#Uhs&z z4t|n!oc<!vNfJzR4eXJQiy!+tbs9&-t5v=9i5nfv%idW$-r^ z7dsU7vmPf}3vsK8{Ht!+TbIiv@<79#4+325IIE#e*e?x@t5)e!sZuGjuYzGQ?1EM; zx2NS3zK-f%AXXxDrd>fQvbObRuc2QWp)U8nXIkHTW^)3-HNJQEqC>AdPUzBk9Kf)t z%OV_lhd!cAhHQLV(~1upwN@4dw5uEy|1$S;1SFMBh4y=9yew%w0C|d+Hj@psxVs`u z*X0@DDtDDpv(~m%nB8){sVe((H3%!*wS>)2_A*>jj4}E}vtnjwWv0`+9|*-v4C&#P zR5mtK9HB2%)CRVQRsU~L)nh26G4KkIBzb{&J>3RV4;5SZSS5WnX^GJkA2(Mri>Ik+ zieq5r5g@{*U~*Lx0AcJbBGp3%;^D+?l?#D)H*0`;2Rfhgvbedp{ntUB0w|T~`?obBc#Bp(VR24O^3@cYpp!NQT9VI57gm=wg6?Y$fc zpdfR4@kBLEY4^|77!}zS&~B2IX^ir&*Tq_S-TumWr2kf?jWG{I_~aJ7P+481nK2&^gRdk&?B$FbFVdfi!0;$&73HL0nUO~M6WOs zXs-e*Mm$ahP$jAxa#ktHf}arC*{NcqrXkAy<*N1W{0<(7E)0BKcQ|$J@deu(_mq0+HD!2jZp^y=Z#0enf0@P z9F1#3rT1ta02~b@9|35P0_4+*S)h$^ZMd1rT5r)uGYhvh1WJv2H6~{4nw;FC0D{h` z0f2bR$HOQKez!g$)vaD*;ZK;HxLdapE3$&_QHAJYCP)e(!xlDOEJxuQ#C~*s8UeSY ze0T*ZVqI3z_nP;y@c|$eVJvsSGa?;r$*sJ!%j<1})+YcYzimrZ4`(ec4>&Cb3P|do zwPElph?;%n9~wT4s4X+l4(Ru&U-*ZJ3MJFNoyH z{)k9;oI18Ja@dx7zUaGw8OSXg@=Sq(uwbJ%kGp_w?~aKe^?RtN{b^AIo8Vl6(14cB@m zukR}HVm%8TLM!n-eQAhPR<4zl9JQL3fGZWdYRbs2Wa{kjz- zppBXYphvRd82TV$A`FxG?##}80N_CLlvnzOZ$G(SuBA-uU~u>&dElK!X&95Wmbtzsz*&-PLd9?yj0e4pmf>nPZeskD8LiplifCN+hVfCwhSv~R`;6O(J zQz|*T#PAWTQ9mSa;j5`TfJx{Vj^O!7oZym)f8(#}1D`SjiQuARI#8p^0H8#4cuGzY z?#Zw9i*DQw!XP)Y3m=b@vw>QwN699Aujtz*3Nogj*_!CqPAZL2t5Vj;_O_zwS2-~l zDclq&MtCr8suVb;s^fspAm{TLr&a_I3*i5S`DNPH#{jUg z@>t)7)jL!VspN{?4DvPq1&;R+`DVs5h`Z%Ti=Hh}R}j`+&Ae~#%GfdwFV*;`DqFW(zH29lA^-VP8D ze8$LSidg7tyjIzz8}i9DjCv_&y@Dk+AopB5VshhxGyFZJ|jMaNYxK}VlB{RbEZm;#Gwjm1Ep=1a& zuEynXO3SO;y@lIS$;B)PAGXWKjN}@~?O|NXi;v6HV?rqH5Ps#KIeH$h%P@JDfX0Is zKM#_!2|)xa5gGG$997p1i z8S~uaJ$ci_H1j5u^gaDIuN!%NoT@^P*WU80jVVvT%E13*ev^iL4N>iGgC9b%to2J>hRA^w`&%+`Pu>Waiy*7zG19s4^MA_wB*P2%a+C&ym1=l#m!ce!Fh@o9JAoMI-TE_%bypNf%-3gRIA-%4Q{!11<$JW@F7fCT_r_(M zv8-#|R;dX;dgeZFPeqS7dzG8z|wF zHRxq87*_f_IyGz+cou(_c#tVeMXzYTw`*ecaQ z3v#(lsn2;rs&CKlZWn%ijHj`Qsr&Uw8uVHuMeqjnyY_xeti;)7l_Y;AJE#*XjkCHk zDXyFv>no4N%D22a0cZ+C=fB(PU{%fhV+4M3SgT8%__Y03Pfsi(HQ>Pxv-S=+>TXS7 zwXu?g+Yy{eR7PY2>W2%-JA-T?;^z9S{wn302i_uV&N_q&wX<`ku_6Rr&*gZcRDw=8 z_^7cEFd(seR%eFn!~|Eum$>Y>xE}(5_yhlyBRn$NL7Z`j)n@VQ8WqakB{7quhNMRx z#Rw(Z*SKWGJLfV*(MKWMp?WF&yMS`&oqZgw8MU%e2X)tq(4~xzMA5r4V^cHKBRip- zOYQ_5pqD}+o~EmO%j@D2?c5Z6%Q5`D&CIKmN{n>T)#5f9juH9`n+>FnUm7GFhCKO; zekz9D04b$Tz)B>OMOAeIOyCRI{1&?H;$Z||E5Uydf@>5i*{!0F4Q77o1hB2)C;B*<@`tOVG|8F{YOp|@Hk#76D7aO~LFT#cVU zvq+klsF}mfG%_2so*#Lx`NTc8IzBm)gB`9Mi3cOISq@KH8dRQRcO(nWU1Rl!QXkfG zLC(Fz|3xUl;79E5sT=o5LaJvqmcFGK;dH7HQfIB$Nxn_(e$H3=Dw~cK8Do{wt`_B{ z7y_?@#)IWv3T(6!E7#;^a6O8BK)jjjr@VhWNd&IZ)VSL3W!)han{|%n=WE06RRCqO z>1ZTT=3f?#5Y9)-iXSn>@BE1^Au%ckBrpx*%h%x0b%=D1$O7^-#_EpFi z&<^7LdH!UIeMXh3fSzS~@OL%T1v~r7J9Wuv`vLN)^#vefjo+1;_VmTKUT#1>oHP@Q zzU2o5{6wluQ|8rIvsa4_b2F~wp}F>wCfX5+BEeA0{Xd2+;G$WZ!==&dzc0J{?Iu`3 zVhE5dnX)m_4=v*eVYT~jPdGrUi_B``8|`ZMDX7C8wv<1w%oEyts;~-S%l15x_v{UB zC@fgmw=v9dGdBaOpNh*D@w|nzNfK??E=n16nf0Hx|e zcs8Q>+T1Eeo&x>GHUS=ktyVxRS!IO7Hb|f27~9;sH_6$UFVFzXA1OWVj{##ZIOYLG z@IzNYO1mu$w^S-9FPlbUb#&BKvRV!(n>?o~`pawwB&Ig=>%Qs~jE*6wgoJ3D-In1? zbu>(Km)-IdSXR(G3=Ff~!r_^OCNtXm7h!E^s2JtMJj`gg;_k`hXEaK$<`*7O?SV$~6Kr7b# z5=N;6Hq59ZY?QA9dn|`_+I>5!1H1B&?>7gMnUaIrkO4Yeq}s`U5bd25eiqd01IEw$#Y3CJc_ zRiHVq&dq+qA}Ho|9=-R`DQG`D=K!5oi+iC$Z`4qo>v{Z*&kpSB3!2w5JG}0KLjQ&N zxtee*{fHRrA{yw_g$Ib+2nQqfS&Wt|o9BjEHoD)QcGVrgy}&*0Cz-Kh-CMkIj6L0K zyp~0e%k;wg;&yM~gc7gtcu^6hGooa4v{ENM_BMHtdn(m&VGiZY_vDSIe?^aRgDUDj zmkvJcj-iWgB$*}mnmewll-I}3sLvO?ad$%bxL)>v`5TebR>u8n@)g&g2YVC`P7Wkj zY`U|*De1_q55mr(Q&)&$90w&b2OIqm(+`QTO>%{A-rUC_b*xbJn8c&Bd|zU=ac+cO zVg3o3VT4kDs(f1v=8&v?C9v{N>I6`3zn?r@wY+>$V8<~8z<7($2dE+BaI#;y=!YIg z;r}A_=W21Yp>i&MdKCveItFpWmla&#POIPbmwQgs#^Vpf>M0+vE2?EgN7QQ>v%fm$ znQfzW496vR=G?Ba3(>QcbUBw4uK+N>ou5Ym5e5IR9-`66uM)x)xPu2Mr84L`h4L;V zDG#Ma9=m5OgTxGTd0d7-4y7`Oh1_RMjnA?Bz$Iy^iha{EstykN%&*RlJ z9|QUaH%TESy|PpX{XK3ToG%eNpE)%s^BZ_rO|YrWJab7@-wjKRhi$%m#;-?3S)1J( zuIad;-`amqYdFer?8A7J&dTRzKglu}F;esQp<&w6zw4~%D)%g53VAnAwsfw?jqOTH z@Q;8mBr1(kspp$H9yi#)Cfzx?ic|e>4|Sz8;>6mg=qA)+uQ+rih3lfyOeLEe^O*fV(T$>{)dL=n%@-PUOPav1~(0x`wRpqkg(~z($fwI&KOI`p~Oi zkDy@vo`_6CmEBrOjy83Z@n`Vq%E}IpE+d*;Gq9K=j;Rf*em88d9$vDmr$d2CSr5{p z40(!%hT;Ixq_4X9n)eMAl<3vy&Z8p{M>sQx2}RNmazv4VJ|X^`eYIB%dQ+qmNYQk* z6%DG>u0fi2(Rg!Gt%ME$Sd(4v>5|f~y+~Qn$4*rBS&56A5{II^sYz@pl63(!hZK{i>G8Iw z=UY*3K*VhrB$|bO8qMlfmEjxC?lX}tHsoYEST^D<^&ul^#A%@eG7}*=Hc@?Cf#03! zR11iLB!DPL6-oXm<6=?`P~kO=F&5_zB|vdKZ07)Uc{=WRxSzPFY;|oD4^?C@#@PJs ztDLcCx-V%Ik8Cu``WsL#cft6eNvK6>Ce60RtOEw#jK~9?hbD~r-G%KbGhMoIH_Mcw zrWx?R`lm%G7bEX8Tdwe8o7GD!Fl?av6kb&QtHyf~LAP53xEwFq6y0T-JA}zq6C8aU z(rX`i%N^^;_Gw3J0yi%Gz1=cITEE*eLi$73O5jIn9 zED2InOLm0JW2@N3Sw6O685_4Tdu+cVJDrz`m_$pwKj+w3#U}Z*pUGtPRf#l9>$jzD z(g2f$S#ZTCh&woZ{dR8Q#?1d8fA~&gc)71cp3M&*>xI>@4P16m;)w8S*O}UPaw_QY ziQ9|Qvqb~R<0kRH0(mP+@7@Jvo?ff_KdlUZjVaHGG-jLr<5wcb{Q&W!zTV@#WZt$X zTm4JZ5Dw^r;dShw18Idf%bAKN$zY9-)XCI3a&`zW zNk`6)jL9%bXDR*dUHwqk*%@YV0JI9GHkkcVyq?whaI17c`3MdlbDL>UIT|jUSuZNnnpKa#?KVBmG=P&b9ifLdPQEft6N;6Pz&s1q2H?3 zLh3P8*iZcZ1w+K>oH94G}tWW>35z&n}A@ke8cGI`~LS;P4!NHXIHkP;XNC2_|oQY>G!df|9Nwboi-Wz zgb==sRc_|y)7N#~&#hfM8Q(aqfA#7ds!yr#CE&bF7v1r9oEO;plyCmzeIl$)GZW2S z!Id%>eIh&g@#SYTAMy+rgYm2WCW{hMD@Uwjb1}4-zMSm5#=0-sZbuelgi%Ay7}Ce| z<8%ADO`$kf8B1MEAk~qI1xs3`RsEtS{>^pZ{c~@Z>_TtUcvDch1ZBI-vrb#ygtv+> zoK8OrgP*#jY4@2#%Fxg1e)9Vu8tYvQ`n@RUcz^u!S@USzM{dJoN_obL$b(;7^EI=x zYlWcL!5MFuovaNhQG(+6_&WxJlb3f}!KN9y;(W1x!nmtk;Z(_P$I}e{y}d?+o20~2 z8v(hF1L(8bz^mF*ttR(rZlc8`hj)i?Q?%Pklh$|!8zGOYN{Rf}3@n>n(h;G8)jUF1 zXF7)*i2(EYA|~+J%+rokgVfvM!FTL4lHZvKK>m^t@0s105}*}Stg9DXZd&$4H-&UG#eRKfLS>JIFs zn?IS{tj5qfhb*@3n~>kWW-*F>=+pFR(%a=9_5iwZ;pW3HzxIr5^})uoNvcLAxsVV# z*%imoxWyg0{#|-hD2| z7EJTICDCG{cl`_3T9-gw;Z^V4*O7eJES4z}EP1(Qu1a(vnW%E%F7n3Jsa-`E`$lQI z>x*OM!*+Z#pDN*-3MNraS)kg+qpnf?u-sqFMOg$v`?*Iv-6?!cM?x_X)>AQ^Nh0FwT)#9%y&D}`NUd75ugj?L9Cp>g7VRdvU^x4{?Q4wm7Np+Zs9j!UxBXYOR9-oE~g{D>|7UXE{z85HUi z`3os7{OCU3sJ58wv+81Lo?HkXqiw97>~I48mw^~93=f?9UbYq#)BM;%r$ZpUbCMuo zjdLr3iHQGtHmGTS)`3LaK)e4r7M@+Dq9{m?3Xe{zyP56l90yK=s6Nqa0(pVduMT0k zwC+7+Q(T*FP0eY0m0rbEU6WpCHqpNx>U1@|3xtBt9JE;ac#fY-fxE+50_w~ycbi_O zIh1{O`bJJ)c=i$ciYVDp3-CuIe*{=E>GYu2)R)$NmNk4AXud37p@qZ5*TLFvI{p!f zW`;5GLkUrRt0I5X^45I)IYR9_%1R#CW|Pt>wsb`a$os2lu#E8%ahFT{4E#vb_&q#7 z#T@PL6rvq11!zX>ZwEl06vzxsDn(>t&SwS2kF_vD@JuS zUT<&-+dcY4ECkfoCVq?*Pg~mk#)E_Uq>uY7<7s%7#U-?+ACr@$xg|eTdJz3lc^u7t zB+Ay7r$~UQ8hSVbw*SM;2z?fDer+!J8v>?g6Lp|=aQ7Z%f|nw??wN5+ zZ+aqIB=EI)%MycGePjDqS5Lxm>Az{d^v_VMB6nxu>>P52c8%{GOa(FJs(~Upc(zyG zh(9yAR5W0WJOnf;DBbp+s__Y%Yb-xxAcl0>#$tDT=L9rEZ@_|hWb(3kF|vxlgM&v@ zK=17eY>aSHXs##WX1?dLf>u&NbJyH?`P^IH80nmW6YJcBT?73ULMA@b^S+CU^4D9a{(ADJ*hOgoeM z*GJYTBp2AixyrFxg|plsYPnac+=*X=9TsYz!e#^CZ05+vepXz0061$G@Otb2a)(fV z=a4(6iH}hazNX;Mu@&GYBiP$ijn_}?wEDbD8+uU(5`2Pb(%~--O;ZKOAwuWxqnk;Dprp=qYN1(p#`4BmL~o!*IFzY) zjl-&r4dt{)>>v$GsFHQRL%TS}sr8!dSW|zQ&WC`bl>5Xh-La;~Eq;DV!Os+n7nbbL zihbP4xJC$7x>jt43cIyP>X8*7SkG!eAHWT5fiZhd$|Y$g7JPB}M+6*Ik6{ zT%2q;G%jqi1F4DQv1;aX!J>A-`OHdoMsfvhKXT_TerTK^x0GH*ee2nVe2wfZiVSeX z`KPF+6u~I&P94vmBTnWePWPp{CpsQh!1deOnl6G=kXxWTcvAvDmVC=_rZx{Oz#5v4 zcK>14K;ZkD2PY<94W)SUlOMdLI$GIx{NnE9g$KP*fSe>-o>j@@{pMQYcTef0(0P0s zHa91B(z6^?5xsDHe2Tn3p7>9-;%5@*czOat2h()~Z`fu;?S^W7-j?+7_DDj&iOwZjhC zKsAD_&-B+{$ySIQ>t;{p9Xck^n6Y>-1_MbCccI;Yo(C+JVn)3ZJ^+LFyc~UG^w36d z*z#NSv=XuE`Xd6C)u4>oucwsXFQ58~jcW0u+}`A{5-0vn$oUcV*7b-x&f~(6IXEEi zPpZk2MGA4wy=OBqaW%@ZY*h}=S>`&H+MuN9KQ4BOp~98bTaN}(EgAL^9XfedK5Esa z0jT^N@Vx=-Ue`C=%`Qa4U?DAYG(GJmZTCi&A+(7Rhp-)HOcu@B-b}1*$l4~4Hzn3i zS%3bRnpURUA5P2#TCv9+bXJclqmc3^qro#Ye%+d{s%^napf#-UKx;6CB)vt#FSa$N zT@95{L1I_0cZ2v?({JbY4~Nq-3VH>jnMpOw%a_3>nj7{{^lobszUw2@i1UOY+@@-L z+5`HFBIS)m_iQ^1jc5)CkNaiJ{Skam!2_%y$9p;HYQt$4oBVbnUgXA4R-jr>cDgF{ zdRLcswRBRGNZKCN`%w|GLAZlAo3>twznz#Gwy(k>e6wtfB<7*pR5gZA^9xSiVJwN(rii`=-cDVDirMZS4q+ zW1_br-E=PXwa+BfP||q}8~Elp1)}_fj{-aGV?{QIWr*+b(AaGiA9NwTPeSF8GFrhu z{G5jVa+dZ+@rG2(!8?6~RXV8}yXZ(%Bk=fTtC_~$EHY|+7)ptlzxfPQm~Z{1?tRxX z=Kjq8Cn05xxIYEe?T;`;Y?SJu-y`bgiIn#` z2tw@vNpYURoejG4T>kqPrT1-S`>K_GdTt5nzHGcxz931$78~L&{TdWK=0T+PivIjN zmPEbRx-q3GHMCmuk53v2d#iIrS)!E-JDg(7QGuKm=-4T!I9LYtn%&5wQAJ5$1x8xO z_M&DoZ}~bbfo3oq{mZF@g2b#kWsE=ErHS4AJi6y0*!7;;!=m0tmi43*u(mE&kg9;m z%i6y5l?_H191Jv>90Bju28orlrwsyhbgz069zYZu5;P|Jz%KYIAR@C#A8+!>@*3yO zvo^$I-8U>Jl-LoXAlgS3Q|={?D(o9xv4lf-)%Z?S2<27Y-mQw#K;G^^t#hFYk6oOG zrN3YSws3?~0u4jONB#>$#)p>lg^xs2Xc!Hv=Y)h!s`T!2xi=DU=9pwRHjRYw)$Rw1 z#*61tV0NXrTV-`c;jU|@`Qo1QLFt8<;aQV-g|@_k zA)g|ZjghXC5mBbw=sSlWH2R;!eR2Hu`8zlzpJz1lOZl9tnbj*33|2 z$dTY92vlx1gaDoK6%~r6%(D|P=6chLqb_MXpnArwQG+6*tPfYR8IoP2%qq#~yAgfY zV~%f%Ruz~q6sbIcJg_4sD(y1VcXynGT#hPQ2eUU5CRB6FV!)(EmvxRYvz=m6mk;=Z z_6s~3>KD)URLY1oc>3Qn9O#^>@BMgHtT&f0 zu1@|`Mt!iVa-YKE;pR}7Wqdw@9d}>T`P@d_EEYLzEOnnW9#-|VD}#L_qC#8=VW{m$ zO|#j`Wj@d?!fwx?k(4r|Vm-{sGmz3D+Ok_FLDPXPG22=_)mCS(I5S;|*Vij*by~|m zF2m>R?DUf*$qhs}0H3NB5^3oI*q7(K*|g(78Bb%;mJa>IQ{*3*`)?$%qK#VA_owf~YPHhZ8N-Qlqm!5;MNkqO#wcM3<5w`SzRt9`sUeA} zgt23E{f!kPN8|By45Y5iLY6V{uoJA?7>yoX`gq*Z=lp$cQ?K<57x}4=O+!3SRDlqJ zj3z%p<*lCwIS zVv8&?9UoJ>^%QR1Pg|LFl4i2seufmi8t&9)OmpLNa^cEcn~f-M2>E+-P+ak6s?iq}6k8HocN@&phMm zC;bvn!2{qxh>oGQi|mj#M0V2MqODBy{5@4@=zM(B0(=UzX&x1~@SvglQ^hQYt6*1i ztJ1sYzt+YNpr}U81;!zkYn3+nblz*u!(i_mSn>*XcK5Lm%#yr_bd;u{cj<%#D!7PBdJgaRr`_E`f zZ#c+iG+HxYPK7g=Kz@HjfK007u|!-F(F(jJ#kqZC3~a9D~+Ao8QBcn3X1b?}|%n zev-}l6*SrE{^NM_m5y%4dni9>$LV(6X`A6w%mm;Y)`y#UPPzVhXh4#b=KV$yW8?F; zKkW3DrEg|y2i|W`NDv-GVF0)w5rF-3&99Lv@gZRLehKNm&KLAA!nm0*j%PaYD|0BX z-qN>boqqsrE=$yS)vu0u5yaYBiUsrIn=I;=g*(4pBH1bb2Xk*371bC1eM?9Pl1fN3 zg#IW2=?)1g6_JpV8APPJ8wF(O5*bQR6v-i!20?1*?rsnS29QDE-pBjp^Wu4)weEGV z|4Y|$I5Tt3-gE8i`hGv(%*)KfsLmQQ`B;g?@8T(TYWdymQsWZa;ZW1IJD`g@?FsR= ziS8fBQ5A1Y!yEb#GE;2btN%r>1XJiU&#=kzc`*s3wd(5AgH0QH6>$!du@50H&4b4p z@dPtK9Q?H&Xbn#kyH0W((bd~nucixPQ+i*!Ea2(FbVK@%W1wkP(ll(UC)|gGgxs9) z7+FN-PRJpv*sCYp#CBIX)yxv%L8l@zghGF!(%bu11iNkR+n>^4jS+DQ}CovA&DlbzTI=121c)&?72F)DM!}K7RKR<{{Hp^X^H>xO_n*i6nj> zp0+kEqwxDS)W_9|cV*>8Uj(%5rzqB2LwqnhP$v=Mag1rCh8Y1%%B$+K)3uCoZlTp_ zMH5Jf+FOLbqH3~2==vJ=F%FWWnt~PMQG*3urXtLfFl+4W3eHm9lX7dM_gpl$!nnD^GGxz}3v%-5+TtDYH6Zd_?K)f6* zB#QT%Nv{t$GafYvk)OLjV%A> z&-#!z-ITs;rRQSQ4SZ#WQWMEF+%hPj?*7VB;p9;}_U<)*`)%xJijXIwMk9LblY&EP z$2%3qJU}-htz^Q(UC{nfc08=9vd zr>z#=2yAQy=!F}BXVdekpjB5ZDDWjaPh@Zm_#364XF~K43J~!DQl-}3<*AKoywzX4Ep-7o2K|?r=08)IjB$xBu{ZvHEtH&nfi0*a zw;584r#pE4a?h*j%*=xywF?{rrkcpGx7H$BkyA!s9<^NqCPv>%TPcT@{)hv$d7(mh zp5r9_Iw_^XU*}1urt`u%tl2{)wiW%-az)urZZwDP+hrLD7t&h5R(n_*K#{JJ$A@W2 zRYFDxi{N_+S`Drg8pIt!uD$bg?o$byLF-uog3=e6Dwr#=%o#ge|C_-_^xC?4H9=TT^Qrc87qB+yc!SKS@EVd$J! z(jTzv_RpzM#ikWT()(^W&NBEf+G+VVtwd9g+)DJqk;GH{iOL=aaI+ZYEO68ToP(5L zL+hJ#eWcgEwZqWB&6-ZD-nqyE8dRgC&mN1As)lOZNqwVjPTLzn>$6kd@!#gVGET+V zmNuHq(8zhOq^HR-vhlnHuaS}#x@5WOC{)OqA~UzmkNwZXZE005M$B=6x8Wk-J3bzL zo@fw&YmIt8@BvPt)ZhT{77tdqM)f2j-;v{-Hnq=4A`XWs(OX*aL}>CQJ5G&g7;p4W z>I_6?;1)!`8h@N2qGYuNx>T278!04g(HtZWWtZ?lPA)|YnX_;^o0iayGEt5fj(af@ z`}pJUS{DOTgjn<4H(|M&Chl6geJIC}5-F$jdvb2=yAoYvn*%=5t22`XoJtfsJrkdk zDn7xCX=>iP5`|Wd=sCH!EDkr7|7LmqU8q1|>!I%Kl!V%rr`%~m#P)_-8BdOKApTWG zA^aE-G~5$OuB4E1KM+TXf3@v}IVtnVw)D|vnp7Beg1W4H)X<_~ilJsAyj&izdA7uM z(u+y{OMVS`tN&Sq@Pcb>`Z&~;LN9n}T9pbkFkC7WJTs7n{!;BO=OBckVO?(n5(>L( z1%1@wX>6u%CW63Z|MZ=?ms1Fru(pH+R1Kmk3&b9g1+;0j`r4PN=dt=Zo%mm7q<0 zb7aV4G53x%nb6s};!KsAT33`P(add_M{c`)Fc&UvHyT3QG)L>V=!q-5(ao)cu7BG@ z8;O{N@{gkQ{67$hY>forT^;g@S+$jR6s$`$lbIr85BiEPBB2SSKF3^Y$^VEwP7Cn`+OsFMoz0*mqn(Q#-s`n;u6(tqIj^vRvNO~H;L;Ghs ze~D{^KAwd`r>{Bu+sq3Q&g*??{ybHCW54p`2Piw>np)VeW`tA}afd5}U0p3$mH1Q= zi-0LZL;fS%3LTTFgc`+oy3E9;>+34nEBip+3Bwelc&*lw`I%f^b%rz|6iF=V+O;Zm zVq+xczK?|<5RM4LY&!wGb`OLEYiB5crf9J@Yj$7ZH@yA^H0KgUTyGe4I$~if>#DOE z!|FJiC(eb!^5XrHbSpaj?V+t~_Vp9%z!A4!i+xc~b^Qm)^uo^M3##a9q;NWwZ8N%b zq0<{fQFW)x$_DS;>JZyq(i7%6t0AMIb@%z5_zQSSE-6k-KC+(8wnm7XjF!3Gr;MlqCm$a!L}xwV>prJ zXUy@R?4)}w@41#4A}l9`nF}^d#p&~J>UK8}#13Bf(QR+5yfMy2P?g7}+7T+Ma~wfT z?m~W*;oK7ogi?W%M2|O#LzLrFKh6d!D()`E$6dsH+`oIAOR4MqSv&f0-C4@_{@P2qtTY+ zy?ElRie;&%6Y0La1Of4P@Xp^6;1d~_l)E(?!`=;z#}9g^6NiSEt+ET?#o(^Sw^!FZ zu@fXUivL=RFquLaDpKVCYzLatR&dV4G>{O*)+@T(Fm_J`%;-`7%s?^g#HU8RW{|vn zLZHn#Nl<|4G74QrN@?~L)yQ@Zx^?rUXzs4bMo?!kN=nmG)v)WRu6}Abwy#_um!crV z)HsVUmvfgHnJm>;O(UJ9#@H@?M~vov*R_~Zd?#{KEA6~lIPnn=b^cGEXR!pjQT3=t zerM8>dJ2f)Y)Lf>ca44&ETD^7QZBY5Kn*v*=5UKQC<313ut^*7;&1$I{A1z3ga-DT zN~GsZ67U@e&SFm95`lZJ8$u{T|_dURVd=lfu<>m-UE#aoQdRJ0f(p?#A(Jp@mKc zsS@|FFaHvHiM$#QYs$c5l4FG9ShgAwoP(;s#LPuqoG!^s^A4=+b&f3p-Tsx8A{~<0 zhsoW!oD7f3e6?xXmV^3`@a2^q*%fBVZ^2!>&ysRo{^M!1lf+ki*XLFOu3@bGGFFjM zD~+eZE_z^F>zOpo*g76bSH zOdMN%Vxx86KbuR4=m}L(rCC{PqmGatx~d-c9Z4pVAmD6S{?~?igW1Qe8f!H}^=gMk zl_a$S@z(wAM(Dlw597FvPrU7O*wduDRK?jC!{rA^(*wNp)B{lR>H^Ek3(Q~luw*2e zf7`jHczJzbzZGAi$~~<=B&0~ROa^UgS@_Nic3wfhP@rZHKF0RD@}F*`?TDn7`M41z zNC|nf%QOrTr*Aw;@9di>^$Dw-;2y$1Y<-+-=Z}>6fsnwps+pF~Q}1wSSrdj&<-)lT zvYU^q)%)9@Ss<)piCr@C)`aTv=T)sFLFsO6vcSMUe#)k;syjY(U(!RjjZi$-3`TP^ zfHQ%eleW_*DaOrUPEddlzI^3_ozT8BGf(A5Ca#-Wn$35nOrLN5loO?fi^AfsN47~x zV~{BQ;nTOTs;15HVXz-)vAPB&g+ss zl?)gk$gaj_P*gdXT4QkbGgc^N-2<41Ydjk^a}FzPNh+|zlY^4Kt(7G%8FV0)_BLbT zkJj_fPi4T`0>nDEV3*`a=R1xwyk;Z3SjbZ?m) z&c?~zPQL8A%zZO9>y1u1?ePquUN+|nre9KfCeFHV3g*x8D^x$Qfm#~^+h{2M|Lupz%!W6tJZ$dvDIG3_O9 z`#H?v2FMzkI{Z5~EhYE6JG$4@XN@VE{w!wI3yn$tdn=1zblHHNdbSEMd_vDy+-xSX zoig1V4fbkJX%+vAQ#kPzg8Amj{vP?ddLWa1XMFa|-)DFAM1&l$Hp$$DgxF^XgUDcI|2|J?7v6IfrIdrQ=EtkF4cg8r z1Wtn6Y=O_D_SSgqKCMZAUoTI?q%68JK%+dI45|1y=Qnj;dDbmhF!StKYWo7c#_=uLfU@@E-}Tp&hKWPv zq9s8e?EPkD8xARxi(?xq_`mJNSRdx?-8P&*H1#zUcz)(==CO6%Qpx&3pdq+VNCF`EL!F(<{g}9D^ZQS!(_~C)XUuiuG$_FP z^Nw}-Y>80Q>{_>Lk9Ax!-(Fy~x=~*Dt%wsB^EpTYTxR7kc&qYM0ZX;x5vfTB2R?<(h76R8{LZiKuOl&^tW<23G zeyhi_%Z=twJq&9u_YJ$L=@n*R>2?_72IOt$z&QW04Qu%Vi<3WRB5YcTOeZ4JT(E8F z8g*5&J%0zOMevMnJ2e`5uIumKnPv_0^4ZutS(!K=IqQB-k1QPj(Z@SK3@gs)4%55z zSniCL!#DN+w%u(!t^f#2qQ(#>_YDxwj+w>Pn~v>T-`!^R)vEcP#*yiM1h;NwP5*1V z$D}4iJtw{O6TKTW_mmX2D?CY8xw_xRW^hI)m9oom*$3Mm^u}1YKBQ?!R~QCT7nMF7?^)lh5UK zaQV0DW;l&v3Gk+9;1J$}C+g7Ax9|l|G#1UA4<~i}BIk5FXyRh)AkF-kaF@wARc0$O zLS3k)hR*hve|JO56MHi+A$}5~o!`?X>Lxbkmu(w6cYq{eOvU5`VC@tQh*5`@dlL?; z#}V@|<@_qWxXQm-^{vS{t;n;PXQTT1b_t z^9TMuON&+??WLtZLRU32j>{W=`)uLXf4EoI^h9$zvMDiDhh5`v$}gKq$7E|RM;)>I zMJawPslVx)YR#T8<&!1fvi&-dliJjYbDZm9uU=f=wSQEsdup<_lXQVyzxtC?D87GT z_Sm$r&}93LjkUoXoXtInty>xdEVET}DaOelGs!~cd70|-C@;guU%7_2)0Yn&y$mLI zHe|NN!1noYa^d$hCdmA5;a*&Xz-F<_Zvkrze77)tXpuhVKfYf<`ZWiAO^IWya!aPG z&Cj+(V7KieIIKb+=`}swOP?&>z`=!rDpMyf!u__A#|UkjJ~+puSRGTw3TD9q0^ z!tD1$sl~S^;^wBV)1s?6tb?=X8+<8*E#kgRs`g#P2=A$?xU_YPQ$EtU{Z1|GX!tI_ z9jmL|>~7<-=1JPF+`930}yOKzcl^DJzK3|#l!lI<$SDKxA6H&^Hy7Z%>DN% zW$L5;`YBjy8ec-axN~;*-beco!?nV??60aG>v=+>Y-E&btd;wJF-~JhEk>>I{)WF} z40YrJ9RJZOJbXGUNi=mv~5{c7;?f9x@4oq901 zSk3a=y#wH6b~RucK@=Msm1gey1?4ejyb8d&tdb%;YB9GAD5O^6T|v8jbPuAd8ap){ zZM|y%=m-x}2&j9|&g2C64xp~!fS!wT*FcEyQ3IOJ7(khORt@MyTQ{f&fPvePWe*@) zpZNyd1|{@bb4t)vPKZZ_0qw=7|0o!FQFBIyXcIu(#TXcxi8;G#%Yt6mDxmc8`+-hW zbAm8+tpdOgY)X2VD&*_}TBfmk z;B&76G>0by3fX>q^ZPC|@QD@c>^p&mA^zArHUTpJGQ}EznBLwOS3QEds;2<3Ve%>c z#e4M0oL?Hfxp!`sN)812Jr9BgC;x~dA{c&AH6BZ!9Wa9ufD}&Y@K~u=j2Ih{cYzBl zrGSn-h(ST49%Epj-o9jqPr7ulV1QZkVH1os{2-;&|0C2=y$$i=)wb6Ffs3z$)o+I( z{1DjLpEfW%H{%_hfgzSOFkL_CIy>JBYWn*-LV-WSvDWrF5#swfRsN`GJ}%QV)xH$M zkASxk!z19@?db)c4u~H(wykIZ+U&arPM60{1`27Wu9|Xl;r7qybUp=Lo&=R@wQl(w zPugtz;2>-P#zx_6QUs_n)4;>w<^KDJAl70m4J^etAd`V0%IMwN?Nsm`7D&&W?KL&c zwN61)YA}F$l=;p2quj|%MdBEsw>{l+$^?II6|{kisAYMl_5vrsZ8XmWlNouV(rI9A z-}Z0@47~BPSJ1$STTa)w4xHkAxF0Y4P9R+`7U&yxojRU&vd9X=ZJK-{Jqe-`a>aA- z2hh7B5!b)F!o_7ju2or(*h88 zs_v8;ZNh}DEgY1w;~uE2CK!w+cv}Jn{$JZ0fWxW zeNY%plF!Ab{1lfT&_-3(_O=qhrXz4HwjBQXuO&B-CHUAcvE>4kM7A89^9dwFu0lva z<|&K6#XyYk1Y1ySBV`oVC>$B%!33W0=P59>?qqH?BDQx`{b);JazY<;8dr(%(ix)Jhefdq0H^kIW9?v33%lYfTq2!w4@s2%81Ju=%Ap4- zmNS%ZKPsPm?a^t19jnz(}{0qpEtxWrDGjhZEbKl%z{Q$FU`=G2vw7&^d3elK^m zlbd$fa3IK+WFwDTmx(c_M)u`b=}=FdW*R0bYz13;wd`#S7g^{m02iq{RSu*sqv6Y< z%9lL%`+!dg@(Lar!h1C$AP=0T4*9*-TlhJN3~Vz)~b z4et(flaG~IYmBlM%O9vOxo&+Q+g(^X8GELSs_p6ZVaworkN$bUUht*(vyFXZHU1Wt z8@7PdLCvCb%ARe6cKw`1nlR{_mxh{;$Nke5_Zz;khmXEpE~6;hyv`#JE-266_&b~e zV7OHNjnyTi&Y4}z#1>!}&nm5J*m2?68fU$7YappZm-_Cfk8k=&3DfKPbc61u_P3`Yp)FhS41h#@@$r2Y7&V3 z(;Ou>`xnaAkNP!+_B2$sYN7Fx|14^D#YHnivv|j zAqs$jK^%haor3H@+{Sn|@ZJJ91cTENLr0Wk<7D$FzqS zp!^yp8$31sNF;$D1qJ`C0%TrLb}ZHd&~U%h-oJ64Qw zO?F6`5C6hHP5`7ie+Q_MKCaW^x_tnJEg4D{>47L!{#f9HTRY(;vF0YzReOqe82b70tKx*@8OC8bp;~HP`KP(tHVZc?< zXq8`4)n3m<0)XxusXlZfQg##7)Oa3FR!nVBj4@UgJ zLz4`PmHdDLqKCXQZoZ*67p^1ih1W$K04~fUopQqy%9RL6k|XTgm;sn00|E}$gszDJ znRxX#QT*8KzaseO)`t-kH2ua4+m;eus|uwqr3a0uC_W*(zx zh*K3<7$*Rcu&PXD%Gjelud*R>^@LPD$}rM1c7?T7e$n;4m%ULr?~kyV`bh7AE&yV$ zye)ze?n4PWbbY*L(*#4EJmAU|#)JfRz3SmZ6q$R5qpqr$_x#uSGSoDb8Wo58D5rEu@80+as@UxlLqk_mKLQ-}+EgJ>s;pc|XIwSP=el=O}7Ueq(hx;SGp9 zLH4tYZnzlt3I8F_PP(qbN`Lo8QilGjD#IORJfihK5FEK86UcE&bs5yU)7?5#P3TOW zTOQmXpFhIzS7^)ialCuUg9?OBXb{P|^fCiW4(&MnV8uK4dTQ4mtFHTlxRu#K5n*?( zt^}8rAV8hl4!`?Iip>LN`3nO3?PZh+hxm#=w0@dxA3KBFt8WwloI;PGZGsx?uYUl+ z_={K3b6r{|jnO$N^g3>zA#y_c^EZs$kZA1EQQGT#>E%XN#egF%^9m?@9vvwwK*Xt0 zJVr_8@bY0@nG`5J#U7G9BwQ)rWqRm%*eg+radn6HNdAGy*dF}n{ezt7fB3rcHX5-d zx&SvW>`)t+1{+ljm+2hY%`<)7g)YlCZ~iyO*>MSzURL#W6;rQ!h#nB1Im|}7x7jzN6&&boB### zt96%}g0Nbw$9yxY8?(?G-fRU38Q%~xv5o7B}o{q}E2-aS&) zb_aHC*MB0B_xHLaInLLxrZC^Dg9@3>6sVZ4@ol-9<>CM2MM; z(;9~~{oJCDlcW8(H0(g*q(ljin0_243)i8S_d|4l%x%Eo?Gat6C0%%udyqo1c^F-PfGps-AaCb~0j{C&(24T=#t0GkKNM zns4w;xfrWlfvG}{V@SR>xPM@8#|uNe<4iB7riYXNSkh>o&bimaqUlP)nw@O&Wact!JWgV~*_JF+Z=BjbSQ%IrJu zv8Av|ZJJmXZIiz6F#9lBksBvBIlIY*gpKcGP`nX~zOhMvdGeNVEiShRmbnKWW(%v3 zw-ee%$y#$V2TGoaOInS04sd!u{Ko(KaDl6;i-!cYTw#fJ0I7!^+Fh7-uwfiu$LYc$+dEUv&b2)*x5hmV+EG>{$8u%FtuA zhW$)!ltpkuVFvRGtn}sl#LJGyoB?O7ksI@WYTx*Wa$6GbJh?m6e@w_Fa&0-se3`3x zP@?vppoUg}y=Z6H;R_k&fM@gFwR+V6CpmUjxrHQ06{jmiMvI<&t4^Rgzjh1x#gdwk zGYE(+3z=8)gwhj^uS%03S&75s$*}Qh+r4h*<%yPA(rR?oyulw7;Ng`@^M8xU&ojud zU1~jfB$ijh+lxsX-^7qfpVFQWQJhzMh*y1}&A+N-`oWO4NQd0=A*1kmXIXnhS+Gk6 z12T1yqX`6|p0>T z;@Mhzd1Yq0-RL@Nl(f`?0Uq8_E`g&rts*W|?*hdZrD=_CI8Cbil`LvhafgZS3&_|~ zK6gb<;fLVc1b3>=b@Ra|i6&3k4U!V|@5yua9;@C6k;rrQNMIB0`lS6*WFW24O^`E4 zOIU>Tgqd^e1zF^y_!eWePt5tR?{&6yUEOSZ=hEFiW3*XH$-DQS2Pw5a#3K;EE|amS zy?Hf(F$r?rT|>P0ET%xTcX1Hp$gD6E66}~#ebfv7ZM_8~!X_*#(l({;4Dsnn84esw z`K;nJ4xdGFql9Piiww`;mVw~{WII3+M&H7)k$3tWIknsu!WVbfYP9+Lm7&2{VF`*0 zUJJq)?7Acij3Ceoh+%KZ&HIlO1RP=x0(L4L^3uy0*;bS&*Yd72KjQThm#{8cxvREw zeIj1iG7g`+_Wnq_KGnyf!`O^7odKr#uDF~l4 z{wC$%C+aARhb^ypGnVwUCWhTkQV}O*$S3X3k>W~HC+rO26r^o)Q4@M~Q%a@5Z6ifFvMx(RulwE*A5{0VXxRWY^Ujn9reh6!3ejD|1 z9$sP=uA2eQEVFKo?k&{a=8{en*9KK<;*%OBrKLG6Xxm4^*Pcjv1}M_uU-hU}yYZC` zOY0%sZY-{;#U(hcOoOtje62C^g#z#ON3mFj=NoM2Zj#Kt$W}{BKGZ8@?y)r~!kNWS z)!+UKHsYMfwj4GnK7F_E!ZQ}Of=Ed9dsLqMpyPw5mVSwi4O)v)$G(j8?70>qm+4$} zZ0&WNuy_`(SYR0#zvA&(#MX@z{o2#RuAdVlfO~nNTUh$T zANZ;;GLc284|i`7txKvP5ImK)vj<&dng4^WBU$K`&YZ8Icw4`ja$U2jMAbCD>>#Wl zTtXf26l!bGEil8>0(IhBxExMWig@z*d$}T4TOvOkk!~JiDkU|fWBizSc+_vdisODX zd8G!+%LxzQ;FWWJT(V9g#j%?3X}R0&6ACRK^+f9GJVD8Fv*a^ej>WiZa(l2S?W5t` zW2(IEg#SJWQz)6_WKOtKb&Re{qqi#>+40~xPRwt)^&DPiGlL+ISJHerY~w^6xRThH z(TC+ktPhNAhvaz6D%iVczX=|xQZ2Mh&t$6KcOjlvdd3y4#??|+jDM{YW5tP8`+flLprqPHL z(bUwf&LvvRG`1kKvohFzjWIM|3pfv$nBaRCDe@fRzux)%jSK#Pg3lu?Ti0Bd)H&} zPv)l@e3S2oitwz$UE2=wS6TW*(C>L9O?6vTUlJs!x0PI{h@-`;g=y{Bzxoj_zGqY6j21k4UyQ|n%F?-cxCyHS4Ns0nY)_aU+-)5W? zEKmK#Aid|05Ln6;CMv>Cn)j;s?!`^NmMu*uQ!PP83teO|oFuMs+V=+6fRNv{Kf1ch z&jZsH+LhVj%cQAD<&3CpiFo=ri1DJOUS$n(4-ojpaM$s4uHC9G(stV!i5VH`$eOI) zKN42MvEEhdB-i|Ta6A2Pu{}0Bp#8C9Jd;$flv|Gr;SBTT7nV#efxDZGUr0NBj@$y1 z2o_1E8MeI7W}M?dFh9pzvz7Z`!>#y;L(hOUFoVVGc zHh3=|2He`2v0UXSVJzx-xZX~GzLjy~mo_PI9f$C%TocrxALXK9BUD{TRZe&+ovvy% z^kMjaC)s`>`~Mz!yG;f1vr8s>MP#&;yQ3` z!zejlYb)xs+U3bN%LH*%`+uuCM-YyzEF=Deecyk?Rmi0lo(}XwvIkp@p)G>Ah=Z~R z{Z!b>>-`@Ouju!a9-_qi&O@(n`yI6F{^7{Ty#MJTyYYCNOVF9O?t7b~pKe5Q zH%5~x<+Q8MgGZpt-+?Y~Y#`gqLKPhm$B9QtcQl~gwyZhHij9i&t^G&(cSCPXy5@x;lDWj>p z(O>oCNFICM*2gaBVG>d=5ms6GF~M>lWz0DlOT&J1*w zb;j<(c)B0IpX_=|aVanUZje_JU%S(rCCOGw8=t_zHA#j}Pb)&&vKDJw8#$3peQsi+$Q+TtqR`s-BkA*V@id?&N`?X%-mGz;me7E^$L#k)?5`{S)oTM+A+RrFzn;S2DcQvozV5-=$ z=^F5>w(6ojwIyRT@l4kA(Yx`PQpr~gKmPh1SPgU+qM*B=zgB|QU!i?#Rq_Kfa zpy)61qNtg_q2<48z#*{0O%Pr5U+|UL;lxvKizHW<;@WyG;#}{DB;T+~{9Qw1T=c3| zzV+$AxtLRQl`Nxk@ob!k_?{@5KavD5x5kiXI+R_25KP}_VAPr>0aWR!AH@iNY^u|} zu0&O^u*Sdj(}`6FjpU(&={qMyRF4oQBJ7yxIhyF18Navm8ln7MXx5>`*Tys;d(=O+ zE^h5Uvc&dwgWvKKkOBx#k1O&tWET2f^f07a##H)Q=kAbDE=&z86Ze`!Aelc+teA%7;dGjR{VyHaAP2VtAxHt#;2QTAEs>5-I(yRnSprzy^Iug&epFd+@fjBjinveV zVI-Yw-9>Zg1@weg`J9@3k3z5qQ4G*OfTH0Mhg&j-cmwp!P#%i;H;z`Q2b=gnC>xdN40Hr(P~=e~-c+EF z^>Tke^yL>JEBnTMZ&y6L6Y|`~)F9U@kN)}fK(|~FAo@p|2X|W~p-d2K5Dsuw z8dPII)R<9NC}{3h6oKjb>C=sW7ab*@o2vuKD>KLFc z`4<6v0D8rv2iVsO>mZ<11PWdN{jg$I;uQpGGOC1o8{*1UV0c&oU!_oAn(&g0^Pfw0 z_Fx*c-kzP+gK-7Y{1f*&WL8`QyYHay7(m3(hUZew^)dghesSIiQYHQ+RlmscSwkQ8 z$)rIB)~o{9_)w;}${Q#Z57_QxtwFRJUxSo>n){Ix=&$n6gZR2vm;F-fDCsO>W@p9T z?gYBi(8|t&K8y1$Lu>H4*m#+AxIVoA@+y&zi*X<D!R1ZV_Ac=Jp80^xn$hY~@W?(efd&NJ zL*N6JW-YUKkx;$IvXuw0aW9VT6Wq1&8iTl=4(Byy@};FeK=QJ;)eINKBNnJwRF%@Eh=;{&n6N?eqOG{!}rBEVld9QBFaZyoWb?z#{pjQxKDbWq<1(ub#cHLTfC0sXkdREuaLu^2r`(B z?=Ue*P_bE2#6OaoigIyo>hb!u1D;ZYxfgG4-tA*@sC>ko&aQXzA-0kTXm6xz-ET4<_fXXuzEaQ zqVn5vM7TZwY?UT}KTCorv+U82#gHvhjPJfSHoPpvzq9=SRh{67BG9F4sob-5`Q-jt zFyQy2rrtYHhRdru1z_lYC9X_y(5VRKP!`Ehq={e#Csi!VBeixuzH)nB%)ki`fP#eI zJTH@R0)dOg@GDqRD2L}?oJ!X&6lBRwf=g~GiwI=0K?;W^a{OfAqzLH%H^Q)EW?pF^ zvg3qju+Y%i>SnOxIM~$&kH4JXd}_29kk3u_7n;XIPDyD;(Vn|1r%<*f2JlyN2T6zU zDH4)yz5O0q#(!c|%V_cAl`;!jyw9lpM*eCRZA7PWM5|kWD-i`nnhN>Q+ryHS8uEzB znQ79Y$Gpn6NpuBUs7opH$wYDjTbGj5CB?Hy72^QK>Rq3!lBNL(y<*h)9|b)MBU)2# zcB&qkUG5Y;Ay#&4B5vW#H=^LGBOj%6UihBy?PIkkQ8-{TaPZ|2keqeKp1B zU3#~>R}_&`u0kz(h*ER*V8H?wW%sDUn!`nU=L7nZFZb|m3Nwr-3}m?N`v}{YDQ&c zlq|wtBnvQYSBK&w{)#`?DCPHo6idIZJYJunwthxWGVs{yZ(H+Fp0!E%2qF4$pDQc= zuxI>z#d&}bs?G6AH$mn$a+ohi^t{jK_T!0`C+g~YNX_$OupMAoWJnCEH@rddAOX(R z?2*yKYrm!9+4*&=H)lGCcl(V3adRh)hJkKAr_SlZL7v-_W*d{4ocN&c4SLj-8* zbBw3rnMRy_u)nny1PRy{lnsJ0fYlv4(N5&?g%(RDytM~uIS!WDF276r>av#q3;%-T zkzZwZUw3sX(!DU8^=dks-Ksy*{4{FLI`Szecn*Yg9{cKPigOVpeKCGpq0&F}-c>{K zIJA=g8E}iw7uA92#agPwp6@!b3-z@r<w@ z)T3D35^ADirE>rDZFWCQ{?@h}Nd80VZpm_|GS9fHiNk?X?e2;53zGJEk&G*eQP(MS zKC3@Ntgt6!~~534r^Ks zxh;3y>gTj!{78xfF9g3%{QXZiF|k-RHte!_wsa@RO5hev9kiX6n$HxK@2>KoKv=2Z zv!rL(Rnf!kcCZZsdCkgAT}p8rVcV!^_SZct9&(coyOFg4Hm&Wk=Y)fxj?V=MUHn*T zs4oT>I&H?(!WK@Pg+WhO(1bcq4mAzaRLAIt&eP$mD1JB9NiPplBi&d(VKU7d+; zf&TzenSp$x50FOwr)qWo-?|M0j6=Sl#NFl{NUDHR@QyCq&Xf$pHrw|FHw180a5fRj z(Qj?Psiaw=UQY8$fwHRi0H_ql`@eU~C7wy&QS{PBJM931!UV+O3}nd0s{w@r2JGkN zj$jNK@>pMxVcwa?Ecp;BWzV+Oz@+gu_@#BK0RmN`Sfr`!(TM&k6qy#_^LM`k^Z8L; z_jYNM`DGxePqyZ1uhni1t*~17WQ>=GfKg|eET}P$&NNy<5%?4cGfNJD3wvyD?Oc;L z^9jftu6704?FKaoMs?19>+WBb@LR8v*P1e2yOm1~_llg$;-gLCI*}88>UhK>H zs=gY*oF3eEsRgO#S=b_A1l$406vy5i(;$%dn+h>lvh;2AOL#`uM8wZ-yzHK~&+h4a zt^46(pulbLGVtg>+Vfbuzm)rO3wuyC$sF`|fAlm990ZP>0vyAbr$(xqGLFIn1C}J! z8^OuSAmC{Dk?C+L+ar3G@SXE1XTeyp=?%lDOjE8!v#eHCwPoPA1E@NbTP`ue_G4_$ zyCCUX5QGF;jHdV8#6y7uoFo4_frIu5v9mEkAF~3ac*?%ZjM(`W`Ljn}6@8!n=0*gQ z+x|=YHB^xLATVCN?LKpfp9KPV(Sc6N&*Y!;l#_A@A!+@yUdY$KdHSXxqqU?yCt2@K?3 zO_S)mv#KrM(sc)q7(WO$x-Ularn$xW#tIKXYuU`t&&RV~^Cl5+@}7L?*|d9NdnY{1 zbr;N;|EUost)c~99gp;Xue7nc09it}0fR-Ww}>9q|{Z0^G?9GVr|eJ%gx5Bvm(@pezkk7Sck=00NuI4 zrNg~nq2@g*zo5YEe+kqc8DwkMH|C+k^jW(g61I`%@?kzNPQLbqp)m2}8~fkT(RLE7 zy01DjK)dB(o+MTxW`k8HBE@PsPNqnC16BWsUeA88_(W4p9;NV8+z2z@_)nuR>K4hP z7Sil8*?^x^IHGiATw6xbX%RE<7e1qF^7v746<^MCGdM7TVh2WNi6j;JI!?S;AR$CRz1C|@ac_}yV` z(UhNb&x&;Ccxv#^>s~-~AV#5r!pofw$(q>R7`z`;rk{g=eyhmUE&~pC>xSGPqZBAu zHX8dC)o45ga_aAQgJZvO*X?Gy_$yK`fV{g_R(HJndm!++6v2_GPU?jb?5xoyZ^4@E z>1H?cdmz=?a^d0&Ry2aV6PbLe@2Z&aZj~|VX6kIvS}oj7h^X1T)p71H)63!sXB`-a zLN7~|h%_{$4w5?j>6`}`9}nue)~T6cc@>x9yQ(1ZhRnEvu5qTj)o2StnO;yvp2N@w zg4$uP#`~95+tSN4@SpNkd;g2I^9*O}|Kq+rYSXGz5G(XoGg^CZwc2VGwFOl(R!ePa z)Jjk_Vn&NnwQG-3V%DtHTCrylMJn9K|GJ;wPwr2x#uIQjIge3kHyisn6wxkb8-)Wk4H<5kKZL9ELX)RRMP*x|NQCW0;9TDtsZkDr?@ z5cm&SU{xU^eSjo<#f7BifyY*HI!k&J8gVL?Z<3i#x?T&S$0TnEsvgk9 zNcxaesKLQ^g&ao=?HRiOsUwKond3xfVgO6f;!c>f&DN!wQ@Xh;>AT9mg?i%^4fd8| zg@qdc;*$t?5IENDO&5#afBS*QIxDfU$IikKvgrPRPvqfP?a5ViY`>;=ZVQxB$$QUG zXe#;;${w8A%@@en6?Mcl-l%57Qdy&<5rfyZ2N23D__IAM|-N+>8?sPNJE{Y}m9`JbjO_%>&zzETQxv z-Rwv%p-<=weuE@^l|*VGp&C03K{L6Z0vV@F^WO&bbh|@OnB|IOazbn1<^V@?G@JHy zaILC(rE1Se=E2Pl4x8icFOn4DT(3u|>>o3wIC#eX1lzygqA%1+CrnMyBAFyLo8eNX zTjOn2tY+WMP%IPi5`)fDgp9J;d&)aM8&s#6=BWOv-gKMzB|(j4Kd$8Rk9$5-F3GPF z`YjI?)6PK;le|b$!Pq#khG4J7o-N9T+WLjJSZM%KrA`hGZAhJGL^$Mz_75+5*_eUb z3KiV8wh1wkrKuGB091dn`KK4=8gHpn8^@a z$*^1PAYCM0agVX;@%1}Yqyl|*eW&5OBYNem5CL38o70LLJzQuOcHuTRJ*v=P{TlyW zEJ4bO*I#oVxN(q?yFP<3v7}_~P0a;9%)|Ho3B@5byo8(isAsJ#X?OjAArn#6t%}Xm z)``A0rWP)Yzi&$P0f*mnkBro2+%*_L^K%xGIQ$0Rk;bUF4O>2HS5A#ny2eZv6fZro zo`o&nFjSe5)bygp+T^Smgo*4Zo4R1XT?_(-NRT-NiUmSBjX@MB$UD;Y{8prrUt;U? zXai+`%<-iJipMM8uo1N!YT30N5RSVPU9adlbk-D#2V*(j^f`^lky3@F8Cb7!0OmSb z*LCoE5J=F$!FN_e0xfq|>%9Ct#wQ8O;{q`rrtN#viBg-uSRba0!`S%g#_Yq;l)V$a z>7?@BiO;R%^c{hZEO({imW{UtX!hTkSk)x2t>GAhi*;eZU45UIosDdMMi4_V#%nH_y3`#(pVuVXo$+@5y4 zjs|Gnqaflx3qZg=2*0y!w?E4-g^7AP0>an>_Cd}#Y?R%Ipqy!@08_Ix4e z-p>^XXRDm^-X_yOnT3dwTDx;qo>OjIak+G@sHz{BlvIHabAgHzXQrqea{ zLpcr<2v5PnR1ybV8gryx0pp7OG9qahaSkns`}P2o?tQU_<%oB6)ZF5Ytgb)}mGn}W zKx4@`Dg|%!%FcukO_R6l`oe`VHXRu(rL=vGqgJwB!}nk7HfAbiKxPYNM(b&0`bQJv zoIr8oqdIJ+%xaf~4+q3%<3r4)-N;AFm_GG>Q$q9@EUr zBEy3&o(>+FUB@u|7crhBa$e!} zE>x9d(c52E@uzYi#@GJ$qcUDoT=ayFRLf1gIh^~0m*sc}ZO;{{U zH$I7(GD3z&z0IG>W1a>~AxF?KQp*c5GxV~&toxAH&rjpi9rL+T2OcJzNY~2yY~_Q; zUoG|~@0LuLQPN<#|H^fd<1P18ray-bHdF}`YFGM`fGZnBp$pjDUL?Ic(~u$d+-Dzt zKa$$^!p3U$CcLky?;|6R596R8fl}J@99!H%&uN$WJ_z~Geb!G2#+QdEbbxmY)#=3t zABF;jQ2&V^`@E*|lD*B*xxe`HYWX;A73r-g9GC0fFLZ>(PiV$t|LZu2yC%x-l}2@) zBU8`zfuS^;w!*AiM5KfsM;Of;7Rl$TNzl|Z>mC-A1>hIBIoh;sAlz#x%!oWVn-h=; zkV}iz4!3(Fwf>w>|Ao5BMwE$d15~k>1p48xoRl|$1pEmGeXBf5>);VV4`vULyR|#c zFgEtX%Ro1=i-f|?KI1vw1;)P}l5cXXQ|oN0^(K~f&ypY|#xox4y`o*GzJ z`=6RoM`Kn4Ho=5u3?sxChu%fJWGL>>o#67vS*(1UDWN+Huc8wYfsh@__keEk`1i>n zUhIg$xEVP&Awici?hsWSG=p=|<;v>maU3RbqlKXfnhlBC8>IHRwvo0wB3UVedrO~) z$fihCY28p58#5+&C1_~pR`CiD78R8mqYb@&uF*F8+}G7J9rP^E&0GOaLsJydz#Ltl@b2tIIrdrwZ*ikT`R1K`8^Suc zne`mFCnY(Vga_9DaGjf!bC2GPfKlNchif>GCe4o2?BYp@{9j1Ey^5?_%05+sMe{r| zvgKTDiUPLPULCOpwyDXHETgqt%y$`lgCr)7iNg%0Z2{Y6MJBRAsbiuIxIFDG|0!IjDl1z!_*;c&^mpUPbM1+)nw(J- z??4*T_Rn@|va!|tAe}P89=qeqJSzz?FJ4#Th!SFc3Hq(!2aQfeS8Q_Bdm8Q9nZcqa z5)eHZ^Ako&R9eZ`UEmaxInqFXTrcVasTPgCA~O^>_ghb2I3bET(IudnR} z$~moT%VVEg8{BU;ks;Q2?)F`54j@9m9N{QPL@<(n?+9`fhJ%Pz$y8f+u$Ak*Nk_}mkc`JkcGBeN>_Xr6dW zrd~)|&&U9oc)qu3)DMVqz94G#)T14xQU^^xuF9k&-P0RCEMQQFXS2d21D#$DDJL;h zRPlE8l>KFG_aRGU3fyd`14e^0?;Kwu{e1P^{5KiuUvEW*{eBMh6nlSu1Nx!k+X~kd z?OV-_yL*`>T|L>;jWSgo(Ta=%`(E}_x2Ban%e)lgIrMB@v7OQvdI2_1Ax_0Sh1DXS z=Ir5Tb4F%rdgFWVo-$I!p)kS!{- z8uDZ(SL1Oj=D%kT?@0}^Wf4V z&_Wlq?)EqjJ;CKy(8djHx$%m?*T5_gM!7~xoe#~-HglY`zprEbK@a@KPFUi-2UbGfOy zfF#3A`J0359OA@aZKXTsl-IM3MGKKB#3{a-+ zH~UYrH2fhzRVJEtGQ3Xye9+8iG*wi)v+@!eQf3$TgTnEbfA?9if!kj|kw?~eu;1*O z{Rd;h7A`r*w|Bx3;P5zBxCRuiu3d?%~5Lu>D^D9wVq?KBst^8 z)w71B6;N5h^-U9=bMBZ5%VNg%%}R!aWJN<&M>Bq>veUlJ?m^@V_Y3l3P(&rpx z7??~`?KAR7vRQH%4)APK@)C$>d)2kQm_i`o6z~`(_I@R2${*afffl-=uV&fu+TFs+2p+7hAQu8(zfV{=N<%sM4r7}7`d&} zyCSs~5JzeyS?xBAl9?U&r&lJ=f3 zZhm3B%0CRx>covs(r0;y9?y^Y3$--Hv}sM!_)d%91~<7HnlkE};%+$% znY+YS$ldefykpcS=kV!jYh;rhqB#&wI9>Xr_XAX7JQLgVFT8E~hWQMm`NmI4!k@1W zv$*o(7=9KqCfk;>QQ{9D^j*2JANgD;U!Gd>wr-mE2U7Jn<>K)Z(l`$MVO`|+V-xl0bfB(mC zJC++#Ems|;{EDniu1radO#q#C6<%sdg`Nm{2c1Ga!q>j60`n8L- zuLE(BNaMBDJ~Vk~-mfxD1fO**e^$6Te-z3@Dx2z9>4$0Lz63x2R$tH}3Z;pCE4 zqIW1|xg9rSkCOAhU;5fNe&T{t$U>S@pTw?gs{g?l`F9)PpF)`ZHl&;_TJ zf9i;4B!?FW$piM9w)zAVQ|k*2uda`xHs8^=5^9lEkp4QFn`tK0&K}k}A914Jd&*~Q z0EmUY<&RvXB_>5aW)hLFItJn&RoP7D2? zVvIK4Dq&l$=-#v1@Rx4Zp))XH*9wkgq*TYpcYgDVA8!Vp$k0%nDgITibLdWG$KY%^ zGS%3Qy-w+K54>8SW57_5l+r~~bJaj1+CD{Z3Y6noR}ezgt2!~nf`CJ-`lx|vb{Ux8 zR}|w$R+@Rv_moW#O64p(>nh($qA>|AwC{$dOCud>M09RZu%#N9!v=KE4Q0@_oCFMd zHH~D9eQ2{-Se#oQBjUYyU9}a=&h?*j3h#}>xN9u;8sX*GI3wBTjM||IsW|9|IQ^KU z7;Ap!B`kQo1Q80c`4Ihjdxm|cSk1|Eo<1jm~!ZkwlcG-Tvxuo3`={i4i_N?Tx zUi?zFZ$cLT;a9bFO;K_VUF}X)6qC?=RNt!nI!965w?78lY?GQ&aay|c>W|^yq?DsS zGemoOXLYM7qH}bUG#v2Y=X1<`g8@Dvd@Amx`ptz7Y&Dz0VMlA{hVpFWBE}Z-NEUAh zI?a(HdQdO+!Da`7jT4c9gu)`8M@l`o*=VJs&DhtC0lq7`J4j33D_+QKZYb+YT>yrY zhtwdgQ~V2c9~xb(z=Y81`EKALpArm$nBt?r6&VGqa;%IgAIkJ>2}o5xN@FaY@H!wvG{ap1WNvs7az=xXoY ziQ(8JV=f@bB0}SrCySZXSPd)hIc{3B3;z3{!iesgfLihE)K^$Z_j2Q({d7=nU@WNR z50zK@w4?fOYs@(lbBH(gZ}Of8^Sesr(|VKoe>Nr<-GoCh2X-cSxLD(`nU?KXRDi2x zf@IEi^8xu39e$c~Bah^+o2kDZHGE9So0DfZLxm;3WUhtsX!1TCF~$5De1s|(qUJA# zxySB{QNa&+jx}O2rl(%)l+%vsn ze)QLn)SIMrOY+3KsMgpq!$3AY_y)MQvw+IrdGP4dzzLgO;baLBeN>{!^?L(OxZDEe zj1@Emb)nVezv0{Bz-n{M0Q{MZ5&Vv9=CAf;)r2xgC%j%Ua)McT`MAK?h!XXzur{C* zz8<@Y#(9Zy$S`(fc%}GG434N?%Beb%RbXBdKRm1N1y$(8B;vrqX-f5-u$#Oh(=cTB3G=B_zF;GScUcqKll$OuD6 z_w_%guU%yh9iY*?!{TzU6A6N(z%n_aT($JU!o3B<8SvR<#iFeQGve0juW!@mLw`V7 zeY2KLv=Z>5ZzJbiqvig!qtd^^9I1x$*EC+A zq?&_y^bK=TaR48c(?=t3 zF8_|t_j3fp3|3cs<>aN*oVHX7UbW1F`J# zQwx=E!ag|pfp`Si9fy+tuo0Fmr^9fwrlzJq*oFL`o0HruEmu!aeANT#bhUSwm%T#( zhxN0&k19_E8%gBF2wP6&ZYAK!&VhU`rG(b%-L{va)ww47A~i1Z2=%U>|5DTbkw(wk zKUtmKMP$`1n&z2$2_gb6i4d%fbu6u=~Id$^n z*<{AFsztieXJP!nTUH)$O071t$kV2$4&M?4%C(r( zy2sVM z#Taln;By#%t<=+RWbnKrxTm()ea@Nw zB$|p>sLX9mm?tyvtTt#@GI=lfsMnIZZ9Ms+L3(S<2KORfT#i^TTp>wS@3NgII?#B) z55RVT{bko-q=JgbyP?yZ=zk_5BhR05E~~23Xf&RZ=3mO0=tri1l{ISTJ(z>2lpkYM zhHn;}iblyZ=L}JWwC>ACZJt=@s(z%>4FmfOO6m|%n1$pshG?GKgz$167Q!fR0Fu(& zYQHxxMBx5j{WV2Uw#Qq z-(;rnKDra)KFZrjM6xxWg;y?gPWKx@kH<3QQ8BJ8v|Iu5F|Z_skLW-wd_Z~mVRA^r z{H4FvR`L4A@lN?)(trSO($+>(X2@&7GRZ&uPTss?QCYwZkOL7_c%=x90mRWka5L~N zXRKXd^&2;}+9WsTgn$2`OJ2jU1IZ#R$iv+7&eDI!P1~~imjeQ6xC}=%8l4=Pk^q&# z9>(^x^-9savx7X>TK?CuHf=sz=n9`)4i+YgI`qcvYjD-9ep0ffj^lw|4Ox_EAw9%; z?nmACgMnAf=*t`ooyr4kGs36jYC}y!D)UTl-32xQ%NSo4mPSWCLegCky8c0AJUz-F zS4_1XzeJ7h(XyF{yGz_)?JLa-A`~gZu-zNvDBAxNpL7Qh(th*WWR@i)D8^bTU{!z^ z7y!DZ2{R!#LgDZme8V#iRzW%xH2Ttuo~v@&0^d6MB|)*hg;)W_Cag|R2jbbh#tYr} zqXZ!a2z2;sqe1V%0LSv?^;pyqkWQ@TOv=Xm#pr^fMf6|OBsl!luoAG76RVb=$xG0b z3r?+?Ss4`&b>FTLH1sm!Qp@0uUuoH%#03P$T02E|ce3&?$Hqi{qRZS6-$*VWMGW|) zUodANApE~a+~GD`yyTDg@;*FpH;<-2B!d?(RG@Z8dF{!F_!3@H5+cZC;hn22bM8w=viA;yd_Go_O*I+a^^6;-h6oMu z`ZQHD?Dh~pl7N`Ay~A2$eKVd51Wh)geLGOY{5uQ4tb5;&0y3O}9HUFgLeU z7*M^IPC;bS)vwp^@aB~-+OY70Xc*;L*HXgsnTlxfD~gSzn*)Oz)~z(4T0vZ)jRT}P z0xRa2moB9Abhw84_ZRQbVQ(I!#?RHr#SMc1Rf{b_1>`6PM6=s*^YNN%Ia^%!M4SpmO4?_QoIJK*6=k-KxDEH!l$rYIobQrJAuZi z$KFLk+KvLd$c;4U8Oz#97*8_fYx5!KQph16_GmeQ^nQ(}P@2!C-awgrjBHT!8jmsY z-2bLwTCG(Cl2>J?p=#Vp1vb0i@lSq6{NgGWQl+UD^d_|z@`PLHlG*WF6(tV#xzS_w zwFgRLO|`d`bER1xGrvlp5UYdz-JC?y)A(4|)qwfANHY{q8PV zoP0t?xAC*=hL@vSz)I>`&tqw5w_oC){MB+IQbrZ=_)_?;gMagLbc>dyB)TZ`VDI-_5a%=gm@XTU+1LE0&-k@O!kmF z#d{6g0ELU>;-@%|z6r$rSRy35Y9Sp+QfAeL5OCT%B8Hd$yyNZxeBJ(%VX| z)=$|yX)@9l9Tewk*4fH(Ti+Yc5tgi8Sx3l&UzLTw{26eE5Y>^**wQ3yJtALsCAA|9 zILrIG1hYsTq+TZ)1B!9$*WJEF-#iolL2P5)vXneZ)G|y{R{g1t?#d;9eelp zF${NP=dzTXUe2Ai&o3 zqC<&SqKzi)w}8B+1r)`ES?xe&yk|3F_(Nr96et|qbQOCdQ@BFl3to*!V8D$r5t3fZ(p|V2Y(SekXXhta(wvE zFCKa}@Xoe{BSp&0@!gaDuWiSl|0|XuMD(4O*$_YVciQ><1l|EG|0{1@5mOIoLAiO9tnX$``wew|$T^F)9=Fk-$a-D zRxiK3V=A}7m(B&~d9TcZQ;7HjcBN-dkLRbWWE{$WowQ#P1Iy)%e2G^Dw|#GD0L3kM zv5r4h?iPPHFLS}u8DnIfWa@X0;wlcu?!;hhpHfo9H=;IPG{-I``|=bXA>7F>SNgroInd;RIXch6uR9OlOLGWm+>4XDrOErkQ3Q<%lq1vUN^dkEVS9hHG6(`|NX<-^dIE~p zQW;Q8e?4~X$;IqpR^VYOc>pr81u7-f2ihWU<-1SFzd0qZ?QwzxkJ~V2<8VQ!=%>4P z*z{GE!Plx)r)M?iXC-bkDxWS|P=j(bqVcvZ$m+KF&`Y8N{C1DVOvd9WOCLi&G1xua zr(mP|3$phYeyCiYZ{er4kR}~Pt2C5!WC;)rhgSeC`ezl!b&8KZSf=s#X}hRign!y9 z9w`xHXDKVI_V#i!pB7h=d(|$LFQJLu$ZGwhb4h8iqupNn*`}JyC?#n*L@)rK%Eims zB*|V;;2e0*!|h>cgv2zcxZEvl_?=9&+ao67J61l{_G$7K%!$a%^ZQN4Himn7p<$dBc;nZGg7A5wJzP> zh()KrpTiZX^e|)V24Mq_i5$tV_#4jDpXz$J6@5skPsI4pyqTZWF(LwEb$P3^IgUHV z=`c^32mK5@#l43L5=+QOTdSkt$f#~kmiXqL^rcX_UblSZo zgBJn?p5XQ&(D3L}Bs;m&Ih2XaMgA3IWGBBAgzfjX!ib9fq-S+@H{clT+_*^1QJ!Fe zOS{NY6JVu%-}LTq;zsC|!@%gpe%2U}HzFbkmOP^AQ?%El! zMA0^nYI7#Gsl2@om#v1f06MdOGq(=B`LKyNT)C(Au7(?Q*`wNJ+JOefMuOldyy^-Sx>SDeJbLzQf zcWVHefN6}?4Cb>%d_DyGh2>Pb6KX#(hw%0Ykd1|1G(;x?wob7po-6QFY zR4Y)DYAf^^lAY|J)zCsWxid4YP!N?zdk1D81oi3=*wYEZ>NF?hYAjK3h*Ni)ImmGK zb~R`k6KaQ~=O$bY@;jM}-YDYDo#2fVE2#*?p_;|TPvf3jE7!f00%SELmV(!(!|1ox zff44tkwp4$)if!%4n7SsHl2W7%5b@l<#BHo?U$+0QhI$$@{G6pg?WlTh#CpfEJVGu z%B}@Ft8773V6Zbo55|OG8v1E=t6MjdbVrWH^Db&+0!&c4++N$&tyqcxDAo0$?ft} z`p1{3zbEv_jj@zOa;MR9a8|#VYowtkdNNkBWab~uQX8SI#%%C4N*8Lkc2M(?wHvwQ z9#qu69aMdSK6ZC(&yl97iybX@pAI?(uj$}ZbK(8IFv~I41di9c*SHf>8wbTl`2Qs~ z=A$q8#E+6aPP4+=2o%0k&=wr7KQdJF}7wjvl2yE>{Xw95?@S%Sm?G z4k>Z~3gk$4xn8UxBe}h*+=TECGgQ((G(2u-1eB=uGC0+XqXGuaC2(XDki3|*Pcr+M z3`O)qw^62U#?MYp~koDkP$T3pxGg*Zz2WaFKD<8go*A>G+`o% zUppXJMF2C6D-`2MsFfA+{@!rQSo%9D=+5w0Ia5Op9pY53Zm!7-s@t}MD0Zvb&f77# z3FA@4nBh`$f@85EQVIPi?AL4^SWmpeDe*&ooP+PeZ5WrTe0o10$tHDhl4_w+9>BX} z^omMv_?9^?=iG0d(Ah~TTZgZQG3s*$CjW127m4Ko^ttq`9doH;n}*#kk@&COxM5TFQHcZb>>;P(`?)g z+mjtlZBC<^%bvI{Cmg<`-i;>Tm@(z|Fz|M-vyncktbtZ-u~m;*zgFhG&DgN%OX((E zHf`V#r)RT~n?vK|X30y=xhAn`s4^sj8~iyf2m9bKm6;7dp;UaI?^WHDURBP&F#jf1 zJfYP-TM#Obt37@P-Vviga`7EHse(p?9M>Zht3P&&P&(8< z*QZd6{oNlH0CF($Ke<1oufGfz41Eunw(U#MpVgvcpU;kpW&EMajeH@mHZ`CvYpV^` z7od+aS?RWS(N=KplH8!0ihA%R?uH*yaBEGZ>(4u!nPw1gS-q@euZHqr*4+vr9ocY_ z7=iyLKUNRvimU3({#8NBz|uzY0w=Z`+SPcl+}=&YjScLDdq{C`yYg5Zt|IZ^p|wgM zcvVAew^RX&a!sHndt{>;u&%xaRabUA|Lpm&y*+q#s{25AJt(2hzt7kdHxP~05eqyB z#nM&8w{3=E-Gjh%N))x<4`kQJEob?d6ui(@BiV=WM9FI-TuNFz_6c3}wVd@Iz}+01 z@1?&fXLGnIH~u`R^zkzIJv+i~r4_vL;ZBoX*YNkc;ZeyLeeQL2PdoA*VK+hiGR{Jt z?#!~d0?CWty+w!*oLk6#@YLic-teR9wEn;S%0wt|BW_MxKGF`@jkyT=mOHJEy)N%# zX_MW=SfUeb$5fFRNHm=C-3uf#D4i{wd{p|+xYsV;cf?qQ9|TPK5#bvTwmff_E6M5n z$BcTO%F9TZs#Whe_P>cj?Ct1US>F>_(RBLu?C6Lt)mSyfXhO$7Qd<7{3M2v;EEu>M zJj_hT%cTc3QMd#ZU0lJ!Ilv~r4s8pYEB!r#m6T!qr}Q`bn@p`7B4Mz@rL>&1*bv~C zUooc@J4X}BGz{q(WquO9rjqpM{C6#Cy81mdPX7HW;b#0b_?7%e(&rGFI`ZK&(K+B) z-h4mQXm}MajZwOMcB9fn)ZY~fG;IOkNp2-^TKYxv8&)=|0Ze_)Khd|J|5PVIz|T_M z_Y>U*9U^VN)j9Ck_Xr;wvWQMdq&!$^I&!OZY{V0cQ@f$M z#lx5*_c@Z|H%UZek9CaE$i7pa>Kt$g$&d+84l%}v9!H_`6Xel!bCDbG+hpez-|HF} z0%vQ8z+9@u+qjUlZJqF?Uz(poup7NqL+hV--+`Pm3NC2IzAU?s{NZF#x%QX5{i;-s z38i=&bpB_&W<~QK`pf6l3gVShhyM`5GSb5rFY+kVZTt3kHHA^nmpNkP;ljo4!WNt8 zIX8w@g<#U-soxQxLi3kgEvcVLjCeZ1#Lx#aN<0sFU}(Ck$g82fd;$t-aE-sbQgupJ zD>FX1%R_kZlc~b0H!cubz=I~J)vZb{8URqLg(>Hh(GRX0gP2@Jzp(jiW6uZ43teYw z#p}n!-q3R$;={7-^9%CZ8+pltJ(7XP7;P1g3Gw!`gCYut)!q-eBTG6tRRSB-9}K;# zq$Z9-rnjik!0Ke8ywhE4uyLDVr-$GFoMw_Kb|zk)=#D<$cxnzboazfa6doqZ<#0;L z{|%Bcmi$9*Mm$hdQ3?Ct5PU#x_ao22HJ{6W6=zZHk~j2V$ zUv-`Ib5x6Uf7cu;vW?d5_7Z_vBDs8xA~qoY1@Tdv(E5gRBElZpqWff}uj;$_hTKwY z1`E0O;T`WJvD{CKH#gB}8v?Z?FRwdArkADr^vB^DudRN_ZKEhQC^^~k$ehtT@&uic zR|bjyK!ooHsgVvh4V#NKlv(_aW+G=FrE?>>sXt!smXo{imcA-yY{YiE5MDhBYns&Y zBz)mwv}{FJ7junBrW6?;%lH*|uHflj8$TJLsvZ>zL@0e*^dkO2U9coBWH!cV*}%9L zPzC#FX>-2j<>ltSV>zIjG^m^AS*gF z8YAVu(WO0|R6kQHWCgho&;7r5FA4NEHE}dKq*l4QTdG#}?#a7lH8ez_YN8wEqf2Tu z?2xM2RSiS6m4`(xnaNQMQ^hPs^*bPCIT@|jRwTtM=!%nMUVJHQaUXTNqH?nVP**#w^4?|tx%lCvO%P@j?58!jMyd1Nq!OR4d{e&hls z7Ty8lOQu}j$sT~KS@eA4&zb;bey*lT*i)L-mR|MjjtRmGg@I>~4n4g1FQUmkaRxR# zSgn}FQS&Vg4?;vY-&{(;C`!`K(~XjJGY>NOD$vP_!eV%wGD360*U^uJSrn9==?M&l zZM##`;|A<92hm93X^Qo8M}4rdEc2qUtUgofN&|V}%Yi$F>zF;r^%En-;2GEhk$nhM zGbX5Zj>6f1s_0vRS2Rq@kBoKkvFtX~1rY&;6&rE8qu$hvCkw}?Y2vU{E-0JdXs|jL zBY;skkT42-$W+XT77DhgU%o4+BLMt+8ohI2>A9#0XYTp}ahm>P$oQXfIn4qq2ezU& zQHlCTYQ-08u`HVaKjUX49xKwt`z*nZZOB01)IEWZ(@w^H3|6sKFW@3VUM<_n^cxr# z*=|H%P)gZaZirUnA)@Zs5oD_?_DxVkZGz}sy?D_E>r2R9==YfwWS6s$4I^y|bU$@O4E7Aox+Wz!kmO_N|I7Dr_ z9gTcSX*;oRQx7{v8;S)Twsb7Ew1j61$lV)_wT!`S(&wUGBhugMK zVnZVLTqht{gN8shd&pIQWYMc86{s4P-=6q;92r#2x6*g<>k{w{$6x@{kYHwDLXB!T z!0_e9mKpgA)i~$*8afm5_wfRBk7KrH!rMx-m08NG@?%~-lK*#{BbMf4s8D%d;G?Fm zeE{=qFE5Xu&EZM4a2WU+bw}J>%i;y4I+;-i+k2&VXxtiFRxO)WBs8Eg-ykNkHp;<# z(4;kZ{q$Gy!(z_kq&ke5yN@sIMpC4dIwbvz;_l2EB`{ua>+YdCyt{oPuDR2Lmd)i2 zzoyX@Xz=s1Y;=*U)>`3tND(DCTj>6rS^fexM@okSugfHz)_q(Uc;c)m_$#0&J_s&b zFa^aMM=$rChS+FL4ZYWCVgym*BX_JrK*ludwWyMMN6rdNs5$6RlO22iqxL$w;e&p* zZp-rgsSNKkEnR}x>r_NDyIY~ECH}1eUcCB6xAx8SgXzrb6_|3hry8*PYmB7n>z8&Y zN18CVNaLl_Yx?#ASM1{+s^E>=>!=C)7Zxo|T&Ny|S^|WYFF%DemGpoYr)hs5NN3;a zaH;JhUk2cv4|=nDV_ugh9yC(%^{-dXaqJM5e*W&Uol4w32!W`mAAt7mNr*ZA;V#&xV~_K&wVud<{>;z z=EcF{ALA`G5Q0ryRyu4p8uZZtM9P~f8VB+ zGPp$qpS`-#*UdE>E6Zi^XH&yyTi=3cBKDWdQY**U~NV6g=O+tEnk!+QZj* z*|vlFu-3>y#jK3s+1L9m#-h6YboW|S81(MhhzhysCeLm7~NTfW8uF0nHneDM8>LlzG@`YrzI;E!TzC41z%e3GrI7R z;kixlET6+Oriv%YfqnZymgC$%WaoF@AHivfspRU$%1L+Fyu|utdg&&5&jKA_F>5U{ zvUE-pTsQ!-p=mu5N*Zy~)H|U-h^BGb4F8_{{C9082YIiCF|myrEaZt#Y*VXu+v^#S zYpord%X{}!2MCUt^k&0e+<}L$HHNhX20Vv9SSy$D|LW+1x$T)?#b%c}JZ>09-(Lf2 zI^n}dGT+ml=6?` z41@G^z8j#0IKK0};=SktCr57)<yy8MDT zEHr1^=S*4r$5~Xwr&Ri&s_C;rmun?lghl|)H+X(cOmH&P@wCuOg)}Eb1)jVLbe9^kKr2FfuIbc97t9U-A1F-r&Wp4@bRF5vG5I2pJ zzrv|xxsO}+gZIk_gG-2ro+%E^%LFM)K%@7ra)QQU>=!WBhx`z?vFN-don-E)%L z-pB}=U7wsb4$dUwKei4saMG>2V(?$`PXaM2zS_v%fTr{v*`f5>4Gm`Y%>P5vxyLj8 zhX3E0kYm^w<`i5?i{dv}z(bvb7l(t?O$tL_V+aGNI?2am)T61PRJmP3tC}Du=i^%wp|a2&*W9$pNDI6Eh_DNcvd ziU1=s`wOChU|PlZXnpZ9CB+y^_h>QZLH9DIfki(G>hlIywGoI4VZaatNA?k>lS$J{ zpiEk*bG7s}_x>xkUE0@&NK)eKhN)6g0osHn;f)|gkoNYmD(xa`YvNv70_=mC%3O8+ z$FS7@D5%tTMB7pJqD}^2hXr0yTDngM|BtwIcQIx^_oES@u@i8^Q^yY-NkOgDGd$HW zio@ahIEUq9Uw}NXqtEzy{utyn9tE=g6jpqKzdw(D8syw}FRm>hWYfllFcOR$PF1>% zmlQ}*Vn#>?ElX0NOf~T6crmRNerv_ZH<=?I@`SsX80}abw)qI`I;y=;Lh%z(P%u;M zvlFU=-zh>a+rU}g<)@c7pE`mVI>v#%X}g>8ej5UeB!^{jDQiDE0pevPmL=77<0Ng# z_-RM5!7`~Z98Eu$-P*(~P_9=Q6=HaC5yD0i_@TrQSv0&Sinyw96!+u{1 zW;iYR1~zYU_7jGZId6v=n$*QsDyfV*JR1E2ePT~v<@uX9)FI|@D5i@Q3LEGke;+nF zNrB=(Z_HujUJ_@?a>M!+C=Z({FTV~A<5&t*oXzT-0Hgz~c&X>Uyv&-`XPMLuYmlwR z&nbm4$jhv~7~((4>GA37@Jfdq#M0XM6UOcM`H~t=+*X6FaBYB9;Xf##S8hwxwc zPeBF_WW%v(LF(eRiJQIXt?5tR#Xs&gXf}!U^l8#GD1WxfM^$Sr{XV}Ry`9fqk#&&w zb5r2&GzG+@JtWkKN+EpwZlGYad`1 zqcKWB*K+eJZp&gJj5CsQoV>MtoFs*T+R%Hs*XMR<=IRJH>3$?d6hP8F zN*M*P&{YW~=nCmX;iQuFj|oQNCQ*3nM*_>f!h?gUSnd*~&txJ4cR5@5Xa}@_w)$7O z9R5-&mgSoWOS7KZfn7<%(!&gsh2DCL9uf;MD1j_bQ;>LKHi|DoJQbj!)5#7IiwgN-75-%*SGaYLqLE z@h)8%B|xTiEKA8f>t?A={&M!s>jvBW5D{9)jZwT_esu}aM0IGigRC7g9Kvc`Ea6q* ze2|$T?Wkx}a1a}HYL?ZPPxFYV+02P-k|WnPlJ(dRavH(hD!l#v^Mb;8-`MF977h&g z+387A@R;9yR*8uD2lX$X_wn9SrW(cST{pY>gQ9*@M6BDHvIOv>EptCqe1W2l-*Uh) zGzQIMVY%AXeM4&SuN({kbepr9{k0mKmHp^A>x~>Nom{Y>4whcy1Sl8H!#_C0j}TX5$wv;TWoQX?6T&oLM9-Mexf;XwNcCO zv0LqC&gkKeQKcvf3(M3Q)mEvMGyqfV{*p|YZINr>JP!&516FPkI+9i#ePh<9DeNnqKyfNaTXCf48pxHnh5f! zvlYf>qQnH&CuoZU4?n$W;~-$L5E9$FnvVzQ%yIu%k#&FdxePUu7wNeYbJ#1N&iADo z)za|hs)b0f_s)GE@rnKj|@ZB?k z^Sm2v%oa^~Lvw-RtOQLfFMVI_4&ciRW#ojdK*)9mNdtSU^#IXwf2WJ%*YEPrU{xBl>`%vYk~=W+w_#wuf>baQ~o;EJ>*u88EmUEHE)A*LZ7%#W84(os)}X+iuY~&w~RRsa$GFiV9d&G>|jBC{8X(&-TUw^iv-@jv&H1%rW`K#Kv_wR?zihbPkawSHB z92mIrZirUb@=Hdx*)0{_kK;}am5p;M8x2+GCiR@YUHLXvxPAlOnwS1?w}@B-7B98E z#mY@tyV3Y*{SkI+8@w1X`$v#n{>5!C6NkQ6XCGlGOoNUrNNIhYpDnMqIO3Ll zaX82Ojl!yCj1Nr1K2GBGFl}@MuUP(z`j3-NMRc^Ob#0nZ%E5Z|h|HaoBD>u_9g!4Ft4LNpvTj?4F5@WXE&xO+-!BsIPM9 zUVv%jieO|7%dXe0_ff$zaDmo5zjm<2s^f5$dh5*t^J38KSbzV$ZR7N&0Mp&~@)A{w zgoM{i^BP9$JQg6?y~@H;N5wo!-$;8Dv5iLG3;jI!`X)%&WbK$BaYm3W6qF@KcNs{SX_z@NV&x&##q_!roZg zFM)MjF{#T!HTg@h24}LnLE*XR?ZAL2^}*#>i}O?xt`|k)Qdlnt5}cfoXB+DH6*_qH zJ{Mne=7vtDd6AG!3mNnFa3ZX<|M;4i$;QwZXiFp*fzXj(c|KzPcT-th2=w{tdduRg zw^L&#NI_fnB5YprgF~~B>M;=42UYp+VkCQB1p2yqa+2LyhGhn~^Z2hAC5mtO#+C`% zxn8aTRf?K5pN(hy=qt1+p>7Q6Yt%&4 zDfGc?07cC7WTOq`nM2TxBTTPqk&n@58*(&C_(ySU*lHLe&xeE(h2NUyWAY;Ud)axLwMrH32fFW8gqABJhrt%bYIz3v_Y}6R9aV{56b-L> zikap%8%Yp`MY#W8yq zjYNP7iPiJeZ27w={o!>xsR%$CsfgO{!_QzyZmII|&9z}^g?Km!J>8e?yT-kEy~P>! zUHhdRh_27T6r>{%9JjDrL&H$%Odj-pKpU7pr>Nq~B)Pt1Opy23eH;eYTPew0h$jm)x_sJXU71ajPgwdgS7&pU%y&K)M z?Kid8h&uipZEahPTTmN+BSjTtqB_)a^i#*?`pAy*D3-HTC!;5WaZi$hiIK6-DOkW= z4Kv7PCnAKu8IIz)P5_>Wh8?2sJgByP6HJ@wP>g1Ys~N<{&6Bu4RBTa2x&17Di0uK)QlV^?j(#Ax-u)&+fA-K z;$We6G|Z1J_uh$17CJ@wFb!aslz@?C1h|EQoT1UaA(|oQ@DwC3!(DFi<;?DWBD8aD()EA1XB~LY0}qJ>}Ui z4zbZ(-vJ?vkH~Yv1u=_^mnflh&%+tp#`8O+BgwBNxsfj)BB($m-5qSHq4fEhCmG^s zZm`4hLt^@fAbSew&}8w78!fIGWspgPXUY+%FY!Nap8QFu@yNuZ`!Z#9>}hTu#>;*R zo%3hi&^%Y-#pi#MGRYTEYTp0pV7+6WB`u!w;o@egP zDGe=3qmNzh(q!cdNM*poj(D$=0>coszl+I#Vd)6uWHj6W8u@sk6R7K1U`ib4ml$81 zV_~gqu0Rl{7-t?NbZ=Lci*a2ncr;xMLO<}QH92S80y+AA8fY1U$zQ(sY`8A=kfGj{ z{NW_+4K@L?tO@F4hhbX1B5kTAFqZ5cf#^+Dmtk;0eoJN4a_jveMFbX_(ZKml+#gWrnLm>*AN%_X!|U zK_Di1q*lV>T+hKbDXj%fzixgXMyk*rPzkjgcTqLWpNxys)K@N**UN%2flqBKhYDfz03MNz+7_&<({Yzc!+mNuEw z2fXW9g-&`yK$WTxbR~qz*HSY%wi#5wHiviSQGzA>3K2rmhvD{t5Q^z4Z93>HP;nnoxGYo zZHwrY?&O`wu03x^HI1FR8qZ5Zm1!(IZTuN2;kbk(0GC>-2Vj^kH5d?SER24-rN7po z{1cxc1bDnE8eq<7HDrmF7~J?3rO3GmLJV8qN8B=5I5a6DURrvBKtug~*Ix|@%_Y*d zFQCT#)lAs%mSr^LmytCmrZ<4XNRvUN!lO$fhp+X6$Aw3UCpA-~xMmXV4<(lr8l5=> zF!vWK*s!)UyntYQU$>UTJjXAib9ru)eNKuobu(S_QbO*+aNd0GR(LqcpPK1}U$vL& z*@A2eY9hpXFeT5IP(x_+Z$FrjjoY=V*+n%(O(3kFtk4{QYZ!GL>67sef9d(-)OW;X z{x)L?2Oh)&OFsgT4A;yo^fngAUa18iRKrDP<;V6_v{rFXoYAgl)nmw(G)Mo;8v^ z$>@85ti%n69mH=CLv8xX!AFK+@n8S?Q|8A|1*SZZX$9&9t9}3XqgceET}i!AHQ!vS z3Q%CR9eEii$2cYuRL(iqmC60X2*by?>~FpRVB#ly#@7Wt6OCXqkA`FO$r~9>Rmw)$ zuf_B_E1qz$lHioPtkb603GRBnMcER@U*uqS!T#hK(SvW5G>BVeA4CF)n-cZB#2D>d z?@fMbmS?$7*-l%8V?{ItoV|i`e6b28wxuZ5sO?)?PI~^44YWWe(1vi}Q^uOUIkTI0 z8SzEV1EJ$L6C}PUeb=EH&O%N2B^b^+_X%M<7W_7HOw$D^i7K6LqW=qeFxGn)XfzuI ze!TP4agiTcS3<6eQZt3)>Sd1_*>>ovjV*GE3qx6xTBJ%S7pT=dsaNs-Ey=y=Tax{t|XeIs*U)ZHCEu2)%$NYAIYshlV@`-cIU^&DnWyADc zozrvo?-F?t({XQeEf(?w5j5mR`Bk8>M{;-T>YrkvFYJ#7J61OQ1)A@$m0Z#Y>RvdA zeaq=2Oi6~|>31=XXgzdsbRN)GRFeF{bmu`9Jx=d0Jv*wQn|dzUCH^Sq@!3`75Wsr; z#kIjTr^rjr)1LwD>ENSjIax0w7GQZ$$_M~QQ>Fmv#nXG!;j(RU9`BO)vmDZgMu<0UeNP9b9bNDeM$Nh$?N1(2Mtf8Z{5ca(AIQ!By20?X z2sT#9p~ih2b)TMGE=V&KRwR9>Q?Sv|cJQnC6Em^?8!vrFK|bZ5m*0Zq@yiY>eEm^T zO0+7sd+^i65EWx@-B`m*n`-+gAA|2cl$HTmyFM=_AFa&9p3=E=v#|t{?0J|^M$`pR zRoG8>Bo^GY&G%HGqzr>^tVl8T$J!5hOMIVy%jkKxV32`h4X1`nWq9{m&A<6)a6paC z%**ECYr%JYSc;52_k#^YiatrBd-7h}q&S35e3%SHXbXQS&P%h=5{;Ydo$leurYZBR z{L1@y{Aq~J2u}AEf;!QM^Cb_K2%-446~}*3(qvE8ik0s(o-1e6HJ;CurNa8$jMFDl z!HCq;7w=JNWZ>F7db>=1B+`0%4x6v(Emrk+?C;qanU&)1>|~c44maHXD^p;=13e6q0DT93V#?AR9sxWYWU|L&tL3&nAzrQnlLcgP6^uB zd&%*~uc8~&)+`jxlzpXN*eUMAANvD0*c;h~#JO0C$fRrZ$~bqH&Ui*`;OIf`7m+Ma z$bjUl{Xg`lVV%G27%1ibhf~>MkRofZ#youf*RfR1oGzYm8tYk!QccR%2*=^+mB$7j zJt;2ztu3;i%wbw)pR$Mx4Zw1xSF11U8ms?#aH;;;Ejn3d9$&mBwh5h7A;NZQh6pRS z3iGWo)GN!pK1zM|M?xXY*w-JRwC6yHA3rFA z(a$k|V58Y@+|Xm^im+@JroSnF>qxz*I{-PVoJdRHYJ%T+AsnSFn>nm(QE5DO0iaD< z2c0jUz0DugT*vp}wXcefV?<7dc{3Q3b)sr?mSe5XFVCrEo$UmHL{Mmm#qz@Uv%kJpAYY$6KP@4!=(Ulq%|Vs z*S%0yjn+#Jr?IT>o|-g7eEs^}X7zaw?_E-vidSuSLW5NNyFvrSH8SJ&S3r{$MNfI> zbOW~~Mtg_N*@5C;7?yF_O?%FVXCz5QcuKDHKb}KZwP6Ixsuc(&4gBzsZBXYAn>e2# zA%d*{9dH+Xeimb1vuxo|1Cx3oeaWQjGS{k7>(aY$hFnMxt5JGfko($qpfv5W_V%*r zPAye#b}txc-n12cm%ljKx5R&+?Pf5=W=>bDeIj*faCjW3vd)qD<Aw>gAJqnGP0mpKh4=v;J<-$A27BjAEAxdbO!2Cl0WbhlK*H zze2r{x9&IC)(}Geb$aoijE26vDU8!S5P7_p|A~GM_&R{$y;R<^MkYumPBrs@W+>pp z_vs3Y8VFWNQlcDdu*tXgutXFP9a!_2CQ0?}(&aq2>78(3a#OHr+xy;ZzHd8K0?`>iaM6phYScbbjA+*hS`|?)5+xAe9@sHectp6t9 zvs2EpIeCBigC@}%5n`ay5J3^5Ic>SoHdtv1AbPe9-0qE#a7yLJ2a|6^{r0NHQsOl* zFSlAsF1#fF6bMIrbo_qXg<@l!ZK42m(tn}4_lEN2`GeY8`ngP|5f9T!Bi3urksl;6 z9o-S6$ftQW&&A4i6iVN~bfIu!o$MgAWcBQ&*syu!BQ-yF0#7&#-nHwAi++#CV{-Su9DIqG zt9@0I4*&4li{;-&+#*J9zFv+~}mj&Wv9$ zDh5}#4-ICs>7saBK98-%w-9)&ypx-8$!~K%HHk4I`uxt!{4PE}M%HVp?Ks(U0L4~9 zYQ(f{Ms@bc39_7TnvwiO9rJ_PLOK$ghKQ&5qC?xucbnGoCznDvVOnw3|4d%bPY-4v zGM%TmDc<)azy%J9&0E87`P11PBxE%CFYB)74Jo{%r1u+r-Ar`!A&_cMbu_mtPft;$Z^M1EM?L_y;(Ru$rNXDVh~Va$(n_z z?FWGo+0rOkoS$ijQeb8_H`N5oz@k3X+5E0X%Ge!V+6i7}0zf-#lV_)v9#+ZHs^K0Js$GJlt-Aq=`IJA&rN6q${opb z_r0|>i6;JZYzJv0Lm!paS-j||$hZCusXs*jb*m?uME~Jzi<|#4^9-EgzZl(85&r=|>CJdgRbY6_(?H;nn*^>s_bHq*p{Rh~Oyn;@<`6?fBLD>K_~p$-CZ+1GUwKz!E;r#SpT!JQ+R?=S=B6^8$vz43 z!zYeTEmI6#e;V&oD0yuMgF1gP&~G!Y>jKt2L+0;qd1fSPj!TB?e_wR%eSRcz2A1ng zRwrLjw-jWEz%)&YH)1r$^(-6Ouo*|#o;Dxhxoo8#(HO-%pC=nQ)a6O$z;^Zxxn_ds zjDIHcpQI$pkk60u1W^Ddl<_L_j~M7p&I+AnR%w9VJtTDIFr&4$0ppG5d&cGhx{ z-ss!k(B=nH7!DBOAylc^BZgpD^VDhOdRmKVd};zvvq*aCP9{qK)z5`-76Dq7%P-`J zo}I~4J#Az!{rxupS3E;0w`2=uxJ+*)QzPA}V(g|JBK{m_2%nVG;jk!>h<^ zWZrUsKp=xT|IpAjojk<{W&YQln4B5(=aFvo`!^H*qrCQZq+a{ygLd_O3-_r=VRToS z5^$aZ}{-hER(SA$a_S}DqO5IMLEnz zA7t!5W!d@jO8B(|aorVZe0-2|0T4L6)+KS%lC8(xiq4)ncUor*lYknx)u)h+DP@>c zEfKwby>(N>lvO16SyR1L__dT}Nm5lOI=yMX9VIGx&S5mJ5O`bb6xm1A9-9L#@b(r3 zZCugNy*S9z;8$n^9?z2@0MY+nd(}y?#87$AB;9ut?OGCtg{S$&NI@w^Jc2mEJV6w) z`kS+aI)qK^j*8yz#w{3lc*mb%1T~jCrsK`MuCD`pFrq;l=>7`#EK=#4sKc6~^be^? z_fS!vVGzS`iqs2Mj)M}tJh|8qQRCx!KzBGX>>=}5Z2D)|BZ&L_CROAQMOgHpX-3*6 zfL4!tA}FRt;UPX2q^E+c?-6y5ma$!c(X$cWC|+CUENa~HkWMkr9bV*A^nA*WltG9o zcmQ7$+{ucc^x*{a;#^~w6oDm25hwrjO$|5kr$=o* zt!f6&$(4v8GVKKMT)kM~o64FV)!7BXlP@!j-`#Dn5hH>eMWI_6c`*>s-l; zPgD$C33-vPBzIO+oe*y`luo>Bl|HwRd(Iy8em}%+&k5Vl4Z4tGnui=Pl?p4>Q9G9$ zr!>2VL;o}W?N~JGX-mOxuI&GzU1i3XXlc1|RC`!TQziQH^hROz^x30=)KqBaKfoG- z*`N(?kLIBaI}77~clc)wi$Pg(h;#0E-79-(fK#pSG;F<03_RN*d*v+bpiV!?6Vd2_E*{^6{8dKwJT_+cQ)O z9<_TMZuuW~bjyil8l0T(tueC3wQ!9I<*L>w>4&8b(I$)fq^<5#@MWXe>eiT;s_U!X z*D9iEHI#ncyEbyAaHEt0JzF=Ly!8+E>81#ngf#jp#XN2E8*Wp5%N>1L72VbJLNy!# zJDN{u3RwPP77`sVFu8mCOsys(~wjgP$& zlTAw48=`ww1yx5^ZMDMkB2z}*Y38nW7tcK#T8CCOt=>v1nahVVaiz6!+JrQ<=Av0@ zh7Z@}n;yWFIw((cRCYclylpUh3dQJ2>R|eqBPlu+b}isNPPc0$+>h26$UW8&I}>0d zakOxuII3vgv>obl^Me)UBrHm{bYIUQzjRDNK~3=5A7K+xP79uvGN&M_G-e)J{*zuI zR43B%m5*oS&!HfYP~gGhbH;ObNV3~yDk^t`vA)ioSZc9j*2G95ngg`CX;aFyta2t} zmO*6cz;AWNd4gWc-}8mP&aP?F z%6H^zNhg50EJigAJ@L4$zFcE;@Z2iuv9@-x4d^mb-d*~NTb*GY{jh1H}fACF{TP*i7bgi=m1cv0Gh&{#^0kGgD~ z=Gg0i51{7m(5s`Z#9!e%oA9sAUgwA7)t$R4qH@U8DpM|PcZEJnMP5sFD{SOB+ zu=*!)6u-%0{*M1y50zg2>OJ4aw-9{uqcNK~PktK>q1+7BM1s1y*qR6eGI=#cwJlU} zUatfD6#Fh}T-tX#J`z(`KHj$|q;3-x)5n|8;c`+sAn+ab@t_xPrYEOq@VX}Go`;rE%F{pLjxY6T~vJ zIDRSg>=Or;_QUHy%aHznnU_xN0y62!2M%C1=P;oM2S}~kg*+{05$KGzZ~{cgaxKM_ zPt=^vt_a5#hT&Wv9zwAa0l(XiFa=G@qefZrSXg)pprS6zX=gu#i#<8e?|a*XbZ~H> zoGIc#I_hqt=@rlUlQGZ;UkXfi>>sYJP+0u1A7X=eU=6J?fA2&itgv_vW7`%74WOg zg@_wT+hDv=B>sH|KGBqfat~BW+0e1i^D;lsD+0bGWQwBP7vC7ASi7qe5~os5Y2^S< zrO-i(rn&J(0Odqm-bCI@ftIWZQ_I_&dYF8&{?X1>w)Sagn_2Po2KgW7wbA5S zvSR)5w{uE4)?$YRE_Tav1XObYR)b8lMfzTP$`0g)8;&A}fg&Oad^$9f%Tn8L2b7TK zruzBAEin6X`Fs>ZjX(a=x+WdBsFx0N+*H)!A9PuugH#T;{v+z}fu_LUXsA3xGvu;`_s~8#FvcX%DRodF-vVfhpX;n4@u^2Tii~ zJm(F@%^VPZeY0IlpPAHHtat2sySDJ@o6Ol?oi^`kmNb@F~A2SS`! z%fP$p6wtR~z5K}A1`aN4Y5E5BM4sd3Tw0s};(EyvUPCvxM8tc19V|BruaRI$mliSC znI-@Z?>e?-G-WsbI!Sqf=rq0w>(+#ZuPpLsW{=jX5jOzN_|7s{X$W^6g9ft|G6_6TD--ASJZ#FnQayW$4XhWWOJX zhB$hZ5!+PRj{nbhpfG-S!n|4RF@iqo_?#-j0K-Y5Ye{vXE?Lq0!xa)YLY|9o4^(8D zto#DG1Z1M2t`^B&d4bK6P4BggvS+5@7Hr4*v#l8u|LQu)28N*oigICDqu zEA-CjRX<`-3#i`PDDrM&Hx-=py`t{+lokQA{GgUPPx^L2Z@6A3JvB(u6Ta4L9GlRz zetqZ$j=w)rYlnG{Dk00%Y)m99dP<~voPmicRauO0{Q)hbH*>n!wANf0M>>SWG?_Mn zLoavpd9puxuVFXURkMk7IX80UHSfs?8j;eE&_2P{M#Ef=m!CXvi6p|ikpsN{%7#S0 z&Qz}rv5v0_KEFIKH)KdZw$6y-B{!IWRF-f%rq_nv?x9iii0C-=s+tAE1E&}q!9f6{ zC~*B-I+Yj`D?se{C4KIS@ngm~|MtXsoYJUiY|$6Ej&z=p1s$(FE3MME z-X_a8Rw=Cg@0c?c79BjKr=l{QoWTwhH#gK688=Qe6?sps_R|GWWt$Y}0m4C(1yRpOL8Z~HiB(yVl=gB1hmSho`ta!s`xTfXTqS4h- z&)Mf>`TzrOz*%k1D+Ud?95tueY!*!Ikym{bR$?wFtupd&pzi2v*GQ}6y%x#l7T!_i zt00NmHBg`xgO~8_=7mD*}bofMk{SUCD)<=M-UhW+C1AH z2m7${@*-C%s-K3UB2YiRY+6_NIn_Hs|Hs^iX`Hm@RK(A`P6a;T+#9{5due8C*+yt( zUg#v`lUrIMcKDU)C2_7G+L|s?=l^~-543#eh;cHD9k}izs?=cTR?Eo!k0-58IgZIP z1jIx0+sAzD)ZL!L54Mx!L-B;o+Ba4=d){A;QZ1G%Xq)tbfVq!kGx88S%C7%D$21Aa zSf3O4*mU}eI7*AzHKdbCenCu={ISl!QR8X)0!<^+qh>#o=cVJm&wVg-$LhuOe+93I zANRucc*N}nJk(!aN#_Zt9Q%3)+>Aa3i3(lc?t^>@ofML_HVD{#IQ}|O*5Y0M3?AYD zO!2gY9`(;BMqGo~v4>~ByX#v@-~8M+ij{+MB%JC48+}aE>R<5={)LMeka4lHRSWyv z-9Q1zi(WuCLp&)lL|&sg=v%?d|$9<^B+cl9@mtsh4>9hA(R>J;&xM=&+8dy{Rh#jgBF-p4VB7>GG04`w$-D z*UT9cI&Ks8J!+{ix%K6rslQGs7$dYQLyk9!Tw1ToE3~(K1twXhl^NQs5W6AVQ0<<$UbV7sIVt?>O|z|KrK8%ed43MtClx|8oZ4T!)ciysf^yR(79v;t|1&#KEidP zFYvCJVGd(*N>#U|uAG3IS<)<-{T5o+u*aE`{PH{_SIzm^PTt0|uPF9sqL)2IPwE=sazY!x;<)wef3v9BalYm8iDnqc%0)9<0@X?Wb=ru|K6wLSx1 zVrn{@Ey1KlCshN;lhB?}(cji_@_!L zs0R5nF=ERJKW^yaxNAXU#R;?-v!4Ur4)1mfuf#LKJ|0~n{}G@TZ93YakE)m9b)&rW z`mKGJ`U?e)>Jds=%i z>Kv{@;1DVNNt>VmNKu+FPw;0hd@*C}mts_|6Vm+bs5F1iOaSjFOhdyNYs{fi#Khs` zzfH1w8#iPJD?qmzV`BAlTDVeo2iz!-BQrWSIqxA$sHL?QIBsplVNzFi$r9#d5A@u0 z@CaJ@&NIl_wz!fjX!W*E(>&|-WyWEVz+5JygRx$?Gp_B08AC#7>zq%jD7T(?&2>(U z8WMx+YR2%oXM{to6RuSAoG-i0cs>~IAf$*Lf7h84{NhisQuN=zbzGp%%AZW7>Np(b zVC8BKXn1?TJV^FU>-;?tBa`1TtY=pl?MtOKi+~?kVcuCUC^^C_guWJ;BCi6n#}_h3 zLfkkdb?ZoY)e7UqVkksi_q+0fR7Dk3`W@tqmYMa(bkdY{#6aS;E~oDRck(OP{Pp11hJVbPQ6{NCipke*E?MT?%kc=@uIY=@ zrnJo;QicZFuElF}FzML9<#ims70zx!w^XK@g?C9>w~re`yj3TEoFUYa^3A;ZCMpnx zNE92eYZQ>J0R(#{h|$_m92W=RA~4r-x&JWaGsN1Xt01|MVA_MJg|x7^|7Vf^%x~Gl zv_+{V-b^4)1@2b9FdQV?{G*V|T%2n;UI&vOAp%n2qRvd*Un-1wy}#z|zpzF!bqvda ztxLSdp1&!$HxW0M+8+#|o(lY)yW_MP7%m#jmLG(!6KCVz9b$qmX-l?m0(OEl;2>af zNWiuc9TNVNcIb;JLi+)4${)q54XxuejKbuPJ8~|s-sqfuP-679FJH>o{TYpV3+mo5 zXSpl;0@GA@)jBf*Q3Lq)H_eoV8Y2ewUM+Mn$VKXf49~EyO52{6=&9@kIn^9K8D8ob zi}Z7*t2Ecn=T&>VNU!jW1@7LIz&awz7C8k^xQ9Cw^seIuQtR#~p^hbX_{6~vJ-Q^1 zEBW3%`^@Pv#ppi}y~N^b$LFrk;EN;NgvcR0uH6>qlq?dnO{k0Z4ahbU$J0_KXU%P< zM><-1JXqbdBxM~_5xCanW+8J6{OX(iA8Ksb2rerz!C4|wMl@h_bis`tT+5evecZnQ z@-<{YDc~I|Z4(1%_On;~mdVWg^xEvb=nHoK@Cinx}u^yj~-$JaYwic7Hun`|8uX zfXay6+-;0(qDWlOe3UN07=w|CzTmON+7+A)^ycsO$fe(&tu z)Ps9!imneSW*Z78=D6D9+UT8vQ&a5m=UO>3EC60v1Sv#{ko|a|O8YSJ*f#%EuP=lw>=HAV(J574^3vV)i3YK)S z>SQh)Q<6s3?5%PJAJ);XRKkK6&Jl`(AP(g`W-%su&L6NxB$OFf*8tz7DtO^{u&N{D zP0kzkD<%0QS_lc{<9{sL&66X7A71eHA8S-zn|_YOhdVxYLH~9}OwjN|mOGp!ObqIp z6E)y&enIo*u;yUO+q}1%(vq(jQS)`)->57!T)d`rAA2O&2rfGSJEk}A%V87i5Ju#u zcMid~`9hBE!!XC1_el!r}Y zw0~cr6kH)wjJ^$CQ7Q0_j^mbb#oqG?jh6JwH=;pBFLn^-W-sGuzYyqLIIxHsW5;Q~ zOC!T+sq>QH1%l~V-fL&-BoqK_sdBzi7G1gnW+Ap+Q%u{Hd(v*sBU{cw-Oo2gE4x;> z!5AEH{Vy5=9_B>Xv$yRY+7eP8r}9`nwPa|_`w4dWKL(eqfONm$Xcn?nV4il<3I{YlU@giyvwyc=tPL07eZ7?UM zIYDExSC{C(5ZZ0~h2<^p%Yw6?jvFXzmqT#*Zc(3J!V+(;>*My*AEM*ISTcm#0{z~( ziOk0G6F@WYFQ8!4|Co!?{vIf~R_0{JyCA(S7Ns%EasIn^BU{$M(4t=;tz{m43-jCE zmqnMLsf1Atys&c2^Tqxn)e|(f!o2$eD?c}Us^curb!)CjisXd7(1!&T+{P5Nvf-qy z(KHnI#0JZD6FT<9{SG_p9ZH38uQ)3is6R3cv$)uohFrfz9_p`({`&UkEi3kD!rFRz zr|~$oc2Ao3a4$uTrouE~e~b3=S+c$LHDO}&l!bPCf_(dFc|+rIA-;JDeU6wa z8qfm7r~gyA!U16w|3ASV79iLBmu5jX2_U2_$E`zwxtnw4*!m4k{R*YO;k2U%^o$?y zNNFJNV!wH!t-5uIZTBPkr?@k#ohiVWat2NHb}|EAky_pOyE{6EKllUfkNqdO>IFJ zxA5iVNLKrkP2#srK=Mu&kls;tMe|bn-R#Sf#82`vGCjp?4s*gqXNY2A|CK^C|AdK9D?5sBw)Dg5L6?iKIZ7={)4+wo%52cqa{sMQRz4M6B!67PbR-^&f=^_2XuhRo@ol>S@%Au7Ha+ z-k}9D)sy4~eKr93%^LG}2!$7f?}%GgR`-RLSfMB-qG=_w(sx+DH0&=b6i5#eV0CZx zWHTfcpfYAEmR$gcl))<=%`MA>yPPaSB|f z5=4lM#5$EOK}&AOm2(rDM326#&$SxCwvrL8oHPHMQ(NWL&8!>5+5)87GKhBox20h5$?nb(jvbN>W^X_c^f|v1sxE^o+ z5rT3I-u}bc_3t?Q5bJHpw@G+tPeaTC{jn-!23g^(r|>-NYTAfyXc?dHto3-0EN@6< zgRC5am_D8WZ|!{9LZ(I&y(pWMk}59$R&#ForLm$Tmktfz5EqDo=3Z@|tBi%0+9Po4 z*7q|cdwHk7Cc5&cBJ@s94&~T$7Gr}tTACU0OXez0L9YozUoXxLjUZ(5US^T{svR|* zCqU2f?iU2jlt|IT-D?F`_kBQK2x$eh)VD`+v%-;66dBusOq4x{tnx+MC8Rs zjkRthG`?wV;^U!5T;lLw6qD5cf>cCY%<5G&bpi+ky?rr4i-E{Rw26>ay?=KQ5*pxg zLB?3r=t|#}%q@&aoTde|C+EKuRkGSE;&(Y|yEs^%L??y$u1p z|3F>DxO2H18roKbW#Mm0h~bj(O3EoI6rz6eVg+1ilf)&Sq=pj2I{vDo9i-G2Q#?sf zcQ2m3VQ&_4wj#J5v&d5Ko!%ES2e8&A{Jv?HqQzt+aUNxNHDY6;Af{e@Je746+Hbx$ z(ye$B2s7*@7u-RE14opCU`6|d-ziU0m?#nxxHsv^HteZ16BzZ}J;EqWGL_$A@{z<- zJR5);)`^qa)M3*soXqjX3@NdM4nC|ID!zR`FqmsdF#<(Oy!??3ol0%yk&iVYA6W#a z-t|fqAWwmm_tCpl9^9ZGj6*>|rGirpePC75lw|%q5n|vFmPo=^ajiwRz8Sf>ULd|5 z*)1&s%*izH+^ma2ms0G+Jh%i0A%+oh*N9VP1|K+?gIAsZ#eglPkMlJXkG zN!gZno;VJ8rEy1u7(ETBkLIZ0Cy6V3^w1_H^K#0rm0)w=6YYAKe8uugw(Oc{pVJ;u z_;o8uk%cwhgwFrnxMa5tQ0Vo?MW7taxcQ@$Rp4eshER(b01j+*V z<-RXur-FO?V?G=+{+!QsZ}(4}V=-6uWa4cJhahqNhK#)jDkN#-sFb& zP>HsB@R(ua4l@BEbWW<1o~Xw!6+5D&D5G2@JSl>jqlqv9BpTpLf;x^koX%LCJc+^7 z(U?N@0%4X?YSP+>5Es52&lKu(WV#d1@tmbh_9(K}OOM*T#g(#CeE&t&u!sQ~>aoAE zScPfx6;tM2{_IB6>0hGNf4Wf+cEf)?*^>_WvSg`F46)#YL0SnEEdBYbPwPCyKjL+J zQZRC985I^XqS3*|C)nE;MKby-z@<6I6{FrpSwC-rAGwK;vRba_n4)#C(L+7W0e=o@ zsB;Tn#tg1P{aFliT_Y}J{I)eI9n?&YR9G(%RilPAN5kJXVSpe}EerDmZA(pOScNf` zZW@6vC2Kjre9V;CC@z7GaWpHj;g|j;c~{1M-*cq|LkCCk)kE#ovU$Rqb(d%hfWMKz zt#S(2ZFh^qS(KI>z*`U!d|F0;o$JrHlyMi^*6m@5O;*+nh8zHeZ<1K`PZfX7`6Doi zy=@9*XU8D?zf>oqDh*~!lu&KYoeX7%mvsWSdibGXK!8h?EZcRQnTBlw!=Cs%zkAVt znv`k@88nVVZ|6i)ZaBU{m9~VOB`!mUaakdRgaKFzR>^KqZfK^Q zBw@Ys7BZ^Yta`k`myD@S$k2Ose$?MlQpPT01PVV$E%4LSe8I5xOVl_1*ZS=dRrK=5 z8l)l&+t=5+_Aycr`Wm@@%B;oI5pdu{}x@gV6POj+)ox7gRfFUOqgE|~T zZSiyRG=wdqCQj3GLcXva{enml6H}1tDxnJG*JBp=_6~uz^PSWf9RVJEpHsG<4Te15 zo2lz;qN$jNUb=*73=@??{h?SM{7StP2~VN5H>UltlA>Xl5WVDHWQFE^?|6ZvgpZQb zXg*uIH_RV7u8CMhr8CoK{*3%uOACqm`VzGnbV^|q?!Gm-F7ghf#v(V9-XQ|qOsrd4nn#2qX$g5*tEhhh@K z8J1rsTDtrKH~K+MloATsf3P&fxT;()LcP>1(Af|-Hl}FR9hGGaXW5xq3WV>i*!o*> z7s;m%+zXT=4}CZ8mBL%05=rc+cw|CbSRrk&I`5&jC4n`Z0hB_P18C$J1iUZkk)$b^ z0W!b8HU2PAmczvAd(^qc9l)iRzkA|{!YS_DQdMRjEOC#~Vg*9xw;!?J@oqm*<-_Qn zV{Wa<2N${^q2D#05b*DfRBl@GI{LD>sF%A+mA8Ij>(O#&gGBx^mrBe&tfhs+rZKNZ zpFHGLZFZyj#TQ%xbBI+Z@ziU9Tc9nh*I|q6zzpNawX>+1;>S%Pj7=+&>-$P){;k1+ zyP9mdvuB;*T#!i;K8eOIQ!Z8_QoKyu>le}G&ez}UpKZewwW!vAQpq#O3<^#TB?d&q zz;(qHX6)7i{v!n%8a(l4Kz^U|;cS81^At`yX3+bcc&8r!o9HC5)Mx5ny%~y~?ZK1i zkNm+ZQPeTFF*!hR=AN%4*S5EYgL_76`+zble*YU@JT-^mgTvpi%^in6Me>tq z9FM_?*lLe*x`K0(Meq(!Lbtv(LM49(CX6xNb>KYoH#i((%<`Vi$}=Y@`9$p`y`%82 z#ZjVX4(guU*A)tvy-A$EfLh9EjYzP#`LuW{@oApw*_i#f^+5U){_UR!hGpHhLjwFr zGScGZ_I*!6Is!IItt{$JJ^cj;GQ34T1end|?i)l^<mo_5_dhg)NLFL~1;{7m;FT&TBc7~UdS8U zb;^jYR9LeyLa@72iR zmeG9!iU|;czrbYPa*1w_+ytMvchFv9COr)j>(Vsn;t$ecAyd0k`~|M*L;R?~XD3xC z+`HgpB7T#cYKE|sCNDtNzcDfRvcS`;x}l=mr`&#d=fY?*QhecM0#%;pz(*UErl~4} z{c-aC8sQ@;@?mm#s^Fx?b$V|_w1q0)VPAd2cvn3j8kd175fcDD=p#o?bZthxM$_lNTBc@&5QPA>dGDc{~voyz{}(Y-;YkX zrS!p2xk;e<>SMPz_uSzh5SQ0WVAy;>*GK{VEV~qj=^icH8fSTJV>Yf{jeJ;+<_gg4 z^UWW2PMr5o=ws!oT4tmcQ}tb!<5qje{SqG7ALA!Wkrf2W%I1 zF}4(LKs(-?uLkHKbNm9g8H4R+=JfI6HwA_J5^#mqXskHxXY_AYlS@A4I!@yyo0-HC zr-pXOedGPY8up)3FTjrzIubs9?aiT0j=b{BT&5Y6WKbTGkq;2+d@SV;+~Bc(+3}eP z2WmpxRO!q)H#$tgTpf?m%fXryWmTgE{6 zB(iM>+v*dym%ZiMdEn=hu}ie=0A$zG^t?_j7w~`7aXIJYEPu+N*r~YWD8H8IcOZB{ zHOr@F(|AFXYa@8UoO?`3GCM)ruA7qtj8XvnPylAU&A=chX^0k3z#6ec3O>Y#32>1~ z@Y8q2w_h9=@|QTyXvOVwQpODwNw^uLL8z010-_`e}6LEX8ku8ZqVWjqIN!*+(FSD9i3ME+H97~wF7wjsviK>=h66Wq$ z40DqJa=DKiqkQKwEVruWG03hsN*VpZDzeBiK7{I9>~acAR9*diWa_dDL8ZktrsquS zy=~uP7H_K5vUZR(sK|?6qRHdMRAN-R3;0rZ5Iy(W12qNTl6hXY@(~bwKyiu*M5ZhZ zG?9|AluYWy)qL)RP8Du`#HjWC7gd<|NnCrs6fRfgp$zu!35oFs7+5aU$le7^jHYk$ zcm&RpSkDu(Xt0rQd!aYG%=n1evP>F?Z78dpnZC`<8CqA|?K76Wmg|+$>N)Z(;BIi) zbc{{`N+S#~8tYMz1rpTVp)U-c$R)fP@LldMBR>57yMn@~2l_Hn7Fjcd2H95jpMty_ z)HSh%w1*9Bk_gFsABw&{3sN3e?Un>8?lFUfkBLMI#c6{)f>Jgdi*_)ebenEAgJ!V} zbKxK8+BhInXfKaMUz*Ud$}Kfwe#^M_z2*elt1~AwwL3GP0n8j^WzeNj!|^|Xto1q4 zaQ?zY=!_43K9C9d0?9Q}nWhszF4YLvh(cSi)gVR|T5mV5Zhx^HzKFQhmB{eu3pDNQU_3lLv*oIWhb`)(U*Y}hhn8|@3b#O*jds0^4^{q56 z6#|;$Y4y}1K2!-6F7^*@jtX*$m4W5+*3`^LyFp&rSY>5b<+G{ffPjTca%`dXRHx^N z3}6=|*8ak^R4R*GT?HJxSZ+4|&<7wg7zsuGO!eUGOo8gZbtvRFg4&X}DBn)EA7og0!m~mMRm2vfPw4<+4|< zLwasLhf@YeQ&ZD+5vdjaMpDIKL1cVAwQ}e`xpu`pn75KHc@_I(OR}21wr9Cp>TL-z zI3oB)WrKttK1y;_iRQ_pUlEZeWwnd07BDwz1Ahl?5%B@X4%xnUU7sRJd_Kp_pI!M` z1OuRB%~Y<4aa1D?oX=; zn5w+yC%lexvi=hqjE0VIv642B0Oq9P=2r30@VV4fN2E)l73Crr% zq-+vwAo@v{f<10;^*aFzvfE2llTjh}BFCkaK@KmClja??{jQP(j3pj7h{yaS87&bl z(b8=>Qqt;AxFPqHcb>B(`8*uEmuvMPdahPlUAIQL^CNp92R7!Ij2m}n?E!<)KCNwy zii7eHDQ1v|4?#uh#04Uh(EgDlo?=(jn4BtO-yeSAmD~^sA`ak8`@pc=J^vASvL%lvtn+XDHsHRxVYy<(FTv4N6GidUF7Oo-ik_1J+!_h3oaI&Fnkb@|l1=C*x6jfjN^I{F ze$w|X1BlXL_oRoEBAuRI4M~zu_D%ASN$^fc7I#wCB*2v1tIpu`CHG4sYX@5* z%^J%cQxGl9KVVh75mgk*{065gAEb-4TrC9IP+K?jo0XyCQgAKR>BkdB(EE2KO4aqL zmYX-~jSBDU8j;K3NI)ERCKP<~w=lFSp4kq`t{AOn8gt7!ZV`|U1eavelVg3ijg&o3 z@n(!RtGE3?xL~dbi|Ald&{~V%rr;UG4?iq8*mN5ehGdf_$8rg7`?BQ@v#(&ICix#1 zx)bbMkJOaKbWYYODcmeF0DHf@ePIEx%N%7Hd=1{mS)KPi3a+;8aLv0Mrr0(%pt@2~ zK&Q#C#~ZTCSkI5C!NT*oEc{|z6ZjM!vJ)x{H%iSniq4k@clz|^`?NVRqTdD;yZEN> zegV-o+Xy8_*Zw!Y6^GEgQR#}{!et+UWPw>~dIWuriS#9!h>Lz0qV`aXN%dQf^Mjbw zM=X@(y!(ZPV39Y4L50+DoEv{E_>=ajWr>%cfH)y)vTi+<{o>~tx;e9fi?8|lDdL3q zlUa-Q^eY}cQD$M%dw#gUD-3_y(eO=E3B*eQLb!KPE(vcCzT0pY+ap6DjGEi-^kuTB zGre$B)BW#0iuFQ}vM{E!w;=(iV0&ctia>PG-8aUc1mwl zIEO`sb3P7g4qqe%jPc2)-xPE1Wg&t6e63Lr^#7+PqP+!_R-P4XmRKS7&2xd3_ZJ8S zxZAxOnd(72sKU6hY6A-62mgu3$SAMK%+E*Mi0TxDWj>HAfW@!Bu%vXqD9B{@k47qNmfy|!psA^~d+?HN&%mtK+dvTYThwyqH}DBWF1 zi1$WZ(Kt>;fD^>a8EGi&kT1v(>ZQvSA;Hd(w7%<=;!is2`ZSeLPYW<6E$J%cTHQ^> z#~!5wt-+*Cj%e7ksoRI@(??y;-yqE>|0C0j`9wDBt(Ql*v#;XnYJQ%QVPAqJyZn-x zb=7EJ4i0dxI@Iqt>TV)@9EiyKMYdmCpf}3gGa6Ba;zLjEjZ>sh1(Tmg_Dt{n;yte) z>X>5WbO}+NKAaVwaE`xpxGPoZw#0b8?vIKGo3-rMgbb5NNh;Zhm1bmv#lQyI>Ajwf zHqT?2oy1Y<#B>4?X}2+o&}DTyH!f{Kar2lB_18PN9(jM|!`Lc4Cp4oWHy4$put2{v z^Z7qzr?y#aIjNV#%5Xshi7{Il8^PEimW;XVV@igASWW=9xHQl%TVxrSj$1wV9ylN_ zll$4ZRtMxNoDQKCm8vufk} z{sF)HbKl){-yVH6JUzIBo^LBSgTFE17B~9mnJY!Q&vOmwdyK}!mh40>sX0Gm8qgnE zzAs##c~fE9OU6mpzWyuOa)p7J5Y6m}iqw!36j=lO&9yu08c*~C(8!e{R2^J4QYlYU&N(5|k zN#kAk7J1w&? ze7oll=z~$^oX}UPq-Vy2T)k1YWZTzQXh~^tKY;SuhdK3UCAV}cqBbqUpSHTiRUMi% zWiD0<5{AF~I`Ha}UKXhli(PM|g*^X(pZxGKD`*mS!5e5lvtbQLi-9kU>z?MODd*cC zf0x>v6H;r*k((+{aw4Kx6c{&%)C|H?AM}!BvSSYbQi_am>bFKnVCT@2`@Q!T)?{Q2 zro7eXG8bZfYOZ3lGP%iV6TDDU-P&CI%d7WjO}RB_<-H8Veczx`NcsA2!g#~vGd{S{ zo(3q>3#_v`mWs0f9krtU{wY3<2G7nZN~^)GXz)8SGbB(jhC)Z?nh9*1lG#kJu6|80 z%w$(R8Yco$ITPNtD){{D@`@=lQ$TJJ>Cq0MbMf#>2aOQ4SQ#v}y4^EBKhikAVIz0X zYbKjg9n%&0vrKL2&)Bg)`wH&1`|h}5sclewUTe8t&f^u0x65$(RGK?pGitdG@lf+w z;``n2x_Me~_QdF%c|qoXdiUd@N*uj_AO^pU$%h>J1VHHqt(%ZV4Zq7n2A`c#CPn%rdIe2Il4J$H zJ|MRHvnDKupMheTkf7c{Plyj`7~PTeYEcMaQ*-LGqx;s8N_^&>LQo!D-u>1Xo!027 zVh}?`fAb!yAniW$d7oLE6-46-T$31?Sp;Pkcj7D8m2yb_>)`1SHG>N8K7K~Jy>VjB zl#qR>GEL73x~JRBskKm=DiSg3xUFV(%t}$W)*Z6a9Fq8O{Npxn^y~9CwPL(z&A>j> z!eWJ(87L?Bb%Sz#o%~T6V(lh~KT;ma_JhWJ6kQ;X5iA1YkYoiy(vK`?9mRLQ3+MW; z#_o@+#w>)3(O%_-x|V>s`d`OSS1 z^47@$2wds6>Z8&gxe3a>>eC@*jmZc~$?1#?0rj^FjoEgbr&vj&0NulQKzg`Cs!EvK zh?;Sh#3NbiW#Az1#Pv(%9`P;ZIUo6jZ^yT&%{X0DZkVP)EFs>e=~AQ^t|@h3mLxAW z7s8tR?;&IvSrmga5E+PptplxjV`3uh){4!O2HbmAvc1EMnQXnX6XdCzlL1>BCH_t1 zA_~eydVkSxx2H*qil}0q@wvGO{;z9-cn#*N0+5j=pT=uK{fTV zpM=2{fT`6MQL4A(`K}B{{FPf6|H*inV?pfl884sioK{x{p)$FSi&O0~NkBmTdy_LO z2y4^#)I5PA=N%iT@Fe3M=f0nw2=8DeoL6-f$==6!S2(DS9?#8plycKcnPuvBjJDK3 zg`CpD)jR5Jp)HtI9VE)e>(#Tb_dopSvz&79;-UyHB<(qAVKq!xQwxK@mxY$LAYEZSV84s!>aku4cPxto|VK zazHlbo|b6EmprBD1)aPOJCOd&cZ1R+Vo-yZ&@bR!iiy#K8&?nWo#>+?_3DQ^Qg2RT zgd`-5-H`lu;_V%_?}djAK%L?fdiOX3N*$2(RJH4X4xJU};V{ehIa@K&Q|&u3^HLn< zkXAe8CWzbEzBmyblk|H+*8QmeJ{vP-&atudh^ijA!)u-Adl3WX`zTkQQL_DD>`y^u zLx17nN5mXE?Y|OG!@9hdrXaz zM!r_UKOPd2I&$$oT)R$?y!V^FT7AlPOp45lq%ajp2hE>Eo=?D4WQ<6Pa;mz!I4@+P zR&E;2$25pW(x8bIlnpT=b#$Y=b4{az@&+A6d03&45FH$bjyk0KOh6!o@GM3hQV&XHC98c&iiw!lp6g4Bj5BMVB)J3#7Zqd4(Wl9A z;aBaX+6#jpELbcFavn&ZRrcE5+E1()S3IPsrFv_pV{8sjCZ?W%yuOU))ap$LzoA~H zyAwf`!+fcCA59OGJm{fcP=8ifw?K3GogTWELu^NK)i8EZgR8C z1o~iLSKm(xX&!utp}dKPlBFcukbtH+N+kqSV5B^SwAIGF9~C1G$b=k*RYUD92o1#- zzxpT(w+`F`t+>VAfVzX{PG{5m>hxIkRe{RH1lPK-M|zt-7(Jz(cCOKG~-wiVK4N@G+;e0OGlk4eV_a?DExt3_me z44_9`2O1vSvC>}-G`nIW6D>Gm@^e=x$gP3xFIpCKTLS{2P4h`u#wBj4JmdDU!q=*+ zH#n?LAku8Gd4I=XJedP|f97BTvXUa{_F!Hq0R0O6;!PlX5DFYThgkVd^+EyZ0 zBbm0-ksNYz;f22Y%D00<$u{Ee0wh$VLkU4sS3$upK#}LAcDC**+5UQF@i>rOL}@MN z*b$P%b4RVKP^%xm(jDs|qWC;oU2i&^+BW0qGlBo1HTGWXLBgdGuh>2t#{;>O<3E${ z5%}|I4~6STA0Kt6Y~x4Z`ifI0|CFBwFfSWL@JF_}Pi?F3UB*Qjd!vsWLKUA-PBj6# zl`J6pv3e&9g!(HJ3kYF5{s~@uWwEcam80C_uvrdSRsrj>WcMZr#9#c*oA)L9g^WA2 zSm%px9cuTxPkx`CJ8t+VAsrWe2z#NLGb_t<4Q{#~@+Cr`#RE${l}a)8nsvS+k-3rhMfh zF0H$%`x*0=MrBs7%}tLb`6ib5tmK!BA7H<=w!FwtFcjFGzFe;R)9#pQUOsesy2y5- zXmNG&*99BS*7y7Rth!Z0QL$dA0q42$wWAd!|MxEgsLT%>*tNal*gO9y#A^$+{}yre zglYEAx4IK|k(yrOS99lDXGU4@;H!zO%-Ik>Pt#Q#Uq(TJ$K_8`lAQNHJ!A6>Kl)mP z_C~HWtkY&$=liIg&D4kpwp<-9>ioj(hN6O276kiS{1j?~)>s|0zRLOoc8pt*Ji-gD zL36X^V=@qH+=?qy*ZRh>Hf6yNyq^B0hZhjrzTBSJ5!^mok9FR){n+cTIJv`~nyiU! zT@?JXQ_jhZ%d9?7DDjvA*NXNzGvj9pzDvwj2xF+$H&`R~Zu%JH9USwRt_VgO-{kg5 z=sp(kooINet$UvFNAfSB8Zih90JQuG!9^44Y4qvc5t6%FE0z@wcrjsu zxH{^S&g>p)|6nn7bS7Os^Sm5f6O8=E5F3jw)Q-1bj)6+jq>`+D>uO_5ie2(b#t&z?ST zSqv%MWec|SUrX(MaCZ5z{~O`kQocx_-2VF{3&*tseKzqBe2mM3J@BhP+rGAa<_&TU zt#}+?X5;Q_i^--+YxDNW)V);voLNoNM~Lv`*t8$CL1+RV?LOz`Z0fR$!>(r;?nFZw zsA$M_&5#n&KbkzhUnMzl(G@|2C!Rmye4KUHK~KXyDssQK!t0{0iSvDD$oaMj+kfT#f4J`qat!w|eYbt@mA1at5dxJi z4n5a%sgJ)4&>Hd;Vbfhrbs$h--PF}an!r=jX#2ALnTeZ^odK~WvsYT5QwOzHfqqd$ zT^}|bsb_4%sW$7`%jR;K1j%}?RidP&nORQlrNJJ9-t~L>A|Yq2w6Rjk4zPrYO{7=g=dD6;a4VvC;bW!!W|6d}iaS8J!B4ws z`7P*DRZnTNu431x6xXXaBD>MN->H_IS>S_^`DwC=+s3f0FLb9`JMm4=VN98GDtbK-*kp0Fw0s7MwBiMCrd* zOg;DS7{2LB$<$y$(s?|fgt%pTD;EdgT*^YA$JvXjPs$RYm8QZl=Hd8O{j+*f`+(a5 z`O5ix*QHFs*W-n0pkY2*A0g%rA#lKM0iV{i_a^Q_T1-&V8Jn)Wf%d-%zm zyic3LY(ydt&knMSw=YvqB?ozKQPQW2mWZ=e1lLIlO2X|oSTrmaWP3#9hF|5d$wUhL z5Dh)+&nP6`q33ehR@Ewl+Ut>lBt-GK`wT+A`Eq&Eq#(COR9`QL#iR+-P_H{LsrVOQY*yCxBzr?VZ6eiK}ueb%t{rWt{vr~K`gF`9*4Hr+&v`YER6N62O50;@`!#@)qg#Fhs4v*xs zl!!!$Y)O2c4GnQR)6Wu6oYGU^{r4Y@Q<$dI#oQFgZSHpg5TF6wc}sYf?pVmXw&SVF zx#x}Flu5U*C{HICXL5mr@n+ABvKj{)EXwnRL@v`t#v9W|T=8*lNW?Aq;}@4LdjDW4 zp;P~ayh5#izr$yJCqAqHwiYX*j=v?e571Q^OOM8CLh23dMF7u@FX1*9F)X=M*zEPD z`Mg=pW{sV?UY-8^HFx6|S5jn6zwP2PJ~vD`mmR=*D7S#$^R?6~k~a>*(4?l^u2Vhz zXT9RN4m-fCz(oU1Eq`-M;$Xq`bZEvZA%+|bucgZ$tSXi86YbI0ob0${rs9wDiy%{@ zluFKpf1&0oVbuSj$Dr$wkvmUbLKdw7ptZA-{^czu48vNYhH#ndzeFsvYU=54reXVW zCauL-{upXgIo?P2$WC4*wX8MlYr)KH2(CwM2EryjlW1w0wmK2J=Rx?Te!E#e9sHU; zZT0n-WIxlqOwEqD*960cvIMyfkLQ&|9*^IA!ueZN%mSxqvD)s&TMzT&9A@^rd&bdG@`V&6Bqpfwu z>%@A9_x>G*H-J_7XDowwp8b36Cj+*PRA8uFYHNj3>O($8oc!R@g(Y(@)D%C>hg-y? z4^yZKJapHa=X%(YA!>)`moY8n#h$o_I@6^y1RI4^c`YO9i!Q5Svf^wQ@&0{_ za@ydC+aE=--k<#h;w|hRvO~*)d}Wvnrb8}om2bO~;^)Jza=p~pwZzI+M}=7)6}afZ zrtoIl4N5VYt`0>KcFR$iVw#DUuTt6?SRj{DNik3JYN1i`v+?oAq_*LEMvXSA*BNkR zVqEk;3h6cNJ^(}x_ zhi>ey^t_45b^YpAYYR{&=2Ip6b-xMpaN>v~_l_al&g;TEpZp*l zKb!w&p?xMJ)6$iic;|V;sZS)L=PivoPkh?bfgxox4xoJAIfsdE0iIt&T5U6XQsV@P zQj= zQ0hvbL7d26nBaV3)faOh|6l#V|Hmih|7|e-f4zVnKQz6==ei%E*9hwV@1L8QJiNna z{OFe&ZN@sTJga55U9M4lCMb4_xx!qY@VlV@Y2%Ew!MD>Sub=*n8A^Et(@+Gg;FXKa zCbp$N??mzOO;<|53r$T-x%sKG`ayY~pP9^hX&SbVuK+pCf>Co41&7R*g)okh2JFnVJGFqF)A0!+NjVV@4nRCe;ss+nL&G; zM<=x^?swob%y&ZUX3!v@F`=?h-LmrlpC9PPWo*+1MS}u9Hw@z_+}VS(>4xNB0he4%HpGH~0VdCv@Wf zm|{DoUL#hi!6No(D zaeFtp+_mG3!m1w04+YH>t1Kt2u$B}@pXd2O$i__x$Bej|bm7#wQ z_v?f;3#3IGvlOp(slUrQukQLc@cJ)L-8wFh zSBm3B2$glKV^Ys1pl!l%EeSM@V?HzE-spHsI5UM&VwL&>)4kQGWBmCw13X=UJjbf2aWS zz%zl(>K3=N$)S*E{qfB-il+-Y%9Yj4&I9@FN1xrt+6!JU#;yojpXvAmT?>=`tKYqf z&-(qg0OPFhyK$k0>x+e=6^ysLu<=mGXE4;)tZ8!&h8;gIFu95L%%R1%!Ls%)mQOeP zlaq7D5ffR-+o2);UA)n+NMGrl?RS}^7vzgA{iZFmGEqEC{MvsYrC8M(9KF;}6xv*U zfs&hlcz$seSJyMhH|o-GwR5)80<$t!ygbnDr$yo{ueTx90xrAWni+lV6xOEI?Pu*? zuO{+Knvb_HO5(9{ezNWI*J?mV=6|gp32iC?{XE%vAlPA7fP($C4NsX7ev(G%;%^<$ zelbz4{R}h};Wcf?pL)}4M<45E{7*DTtDa;v(AmjoHGuw!dN0oAh2esiBuafUPBur> zKb^FT7sfg&9^{yn2R@T%6KDG|oQoygF{|&>y*1+h&v2jh(WVEt&B+k6h{R zXe)LdhyRB>xXCdY4Au@fA;^raFz zd!k?#5=t0Ysf@OGI@s1dEwY-ebs#trpGwG zETE~PmeF-rde$Ul^78U?ceMz!eoHyh@5~bZ)jiL=;kxV1%7x2rMb5aWEFjDM z*0IwSX>!OrZUMS${Tx?+qw7u=<0tgAd5?idtDy?0S&uH9aAg_sqV36* zSEB)g?*j|0+zPI=WVWiz`&kvG>O<=6*A4R@J)2n?mH5#AvF!h9?n=X&y3(+1r$em@ zw(gaPO3@-qKq^9lPywMLf)-iAmT`%w5cVW&A@iUVtTqu5A}#?6grZp_A~6JrT?9=q zR1gA$kQNL}0*M5Y5JHk3be4ZJ^K3`2s!lOEWkIdvxtpq#}Dk2H45+Ye~$N% z6|0BWSUSNWS;sjOrcS;Uu_9vQ;P^m}un>|)XH7K7%m^b6(~=hN{A^kNA7R`6}O}#j*b3ya7)Pf3bot5ER%jhluldpyFgt*@=`y8#VtHy;_0z~eAZ+Q zk1YaXJ7yzTF+x3}YiBRBf&2VQA33$n_h<%A7D38u`^1hwUO=oTE-}WFg2`xsk1}r ziSd8@@}y?#iQRE|3E96_cfwfQx+VGRt^A+rrLRyYabyQ>*9Da{K3)r-m*>pvwtQT* zL`bxW-E@wof7;6jWRerXYpk3#M5!-RK`?Qg`9%Xiz(5H%p)dLf=QdpW*DrVe8TM^* zzbbD69ttByopOD;yhINSo$y^M@DA>U;S*_%9l<@(=tq5WPa%#zgVf%y!JK< zHzp!$l3v^0&*{BAa-#l2kbf?UZYF@NeWs{O=zHyRI&Wlcx4V>EWlJnlte5Plm&RJc zWF5=2b6Js%F~d_?AXdD88CjWmnlqye!E^F3g6i|;oL*|naE4oF9URnjZYrbee0Vf-nVTRQ;)yp;D)@AqPpr-; zSR~}#X$pZ(#JjaEnSke^t~^jjx!B}B`LzOB5)rr)ZL=%qA13H<^uZt-paCMsfARVU zCzjpTZ^j-t-G~C~Sjq8J2WBfP7Bo=9Y4ASJ0ospHpg;E@wOg>h%HH?a)8D;(-zw}f zKaIZODqDh$;Q$SX3wo+mS=lOAN~w!Kmn0@>*#j-A2)kU*sSERLJ(ETBmk3rHk;S8#DQ-$K$eQ3m7&~ z>C%sCErjI2^VCy=g0|*sXlep|k*hW{FsaKvS`WFT$8yO23@wd*>(ZDs4)V2e?qWeJ!agOUQVW z=_jlFW1GTm%H52($?Bs1@V~1FW`l$Mhv%Qy4wLuFevB2}mWvZA@$wW=I}p8Opl&&5 zS{)r^HK3aZsh?IEA{l-sC|kprg`2~u!S+DC;K=m|cH0Bn;&7eUqgb5ygMGHXe>G38 zo0DkoV62>D@Vcd2XybV8ZT>ghyT{(*jl<+wny&02{}db&i8c4xp(dO&qOrPC#W(tg zj9c*$5=9g1we#**6ZgDlFU|?TIMiR#@3$NQQn9F|f={{D$Y!IdP<9^}q;eGlUM2Wp z8-5xZ_pJyOUJ0+GE$PGfHp0i8`w9x{U}SfqcY3g$`S?t#_|o?&xn$JuaBys-3-i zXC}Y@3`l3}zo2K)A=rWH5uXg+$Im^H9kTXYxu;UV3Sa!?NXE*p?|c#4(;r%!Gb#QVvYlv&|JOI{Z`z6SbY2krU5TMeFLZDpZ{3z_`g2sPHNMCMX>wT+8M1=%P(oNC#M+>R$fa{o|+!GAZ^p|aU$;xaq;R+Y<9U~1LPpS z$+r7SOHOzDqLP&m_-(ODA9wfPU9{PvhgCr=)l37Rf>O2V7!@UjYa3UOoEX*d%*LE9 z9&5XQy@aY?LeCb?-RXXLTMY+-Mtk(z-R^(n)Zy~|Byu9~?D$C8hRez;oNl|^jNk+1 z0>P7lwG$fmkXo73dexBTlG@Z3%3S3#T0tA2_{fS`zGMh}1QiMe$#6V$);UBrDU82M z>cs`#83%O{T8XG%fn-gU$b9yDx6)=o9PzC5R$7t-FZ?29F!_QVrO+E2j9?nt2J_vB z_$otg2`Q8=CQ(D~_ZH=1&YbAh_j_Xcs_WFxjs<91=%j{AoT>fY_KEnZ`Ni_pX9k)v zJAwP}f2zR6xfXT&5;j#B8Jl)UvKDb|?P#MKsdyXdh~B*HuEC`8Q%!fXFyZ1k)pVo+&)1n+s%(`IsqG$IOjM zQ}Wz9O>~FeJ$?q{Z>aO;gp0e0#zb%^S~W2BSbb%T3DtSOiHcjTCNQ;JMwibklnOe{ zxEx;akzDGYIb$Q>rDR6oC1I~Tq0RrS_J*ye&an}YM4iuFG#1sR95|Ca77*PGgLs_c zy=c^CEh$xmU7aI6DBQNMv~M01+L+s4R`07(AY+*97o!9IDe~ZDgS!G;#5n+B^*y&} zFO2t|V!arSY=b?jgkhdF{hTIVhQKR*ulFyc9F7i6if}NAEUcJe#MwNN$2&~5<8a~< z=*!(HrLHnv=DX@$tKDZ3)4mqW4-^DNkF~!;I{S`Cpwkw z2Bn(J^ZLU#`L^j8FilK*1zy(0Qd8>tBX`K$cZq>1F4KBEN;0<1Da78}vZuRAq@gT8 zG`McgY(dm46xrl^04#s?=#i-Rn0s65Y?-%}eDriP+~%GQZ=U#T_5Z9{_8%#Q&p-X| zqG$iVH~9T&6&Jqdd~$ZMm#m z?2(*x@A}3}Lefoe-g4ns3#RswTDtTC>}IQ1U;bsyngGM(3a}kM6yneD{aeAG>{FW| literal 0 HcmV?d00001 diff --git a/windows/security/identity-protection/hello-for-business/images/pinreset/pin-reset-service-application.png b/windows/security/identity-protection/hello-for-business/images/pinreset/pin-reset-service-application.png new file mode 100644 index 0000000000000000000000000000000000000000..970e9f8109d547f92db305a726fbd123fa9b975b GIT binary patch literal 113741 zcmdqJWmKF?(>9vmG6Z)B!QDMrAh=s#a0VM(LLkThK?c|04nY!vLkO;edvJFN!3H1v zV}I|n_xtQ0=g;|f&RR3;UVX1M)z#fq-B(pzJrSDf3OHC4SkIn4!%)BPj7T(U2C5n&)u~ZWS&)wQtdr8P{7h^($Ah%$6?=rP@meEu8Ick&z`-2{q=p` z=km?!*|WzYC0S`*FVll;R4=Of1*q?Od$bex`uOP>?^mGcF_ros|VQ&4ri?m|u z!ytLFi1hS%hXoVv9J7q&x>+LiY@yZLE%E&X0Scvpd0^k?9sbdDez4(ZMFxThS-OP( zJp3Wanf#-pqt>dRf4x^MqXgL4Xmm-5UbrgW&U$P2claLGiyJrs$KHL9Qa!>Fan+wKs_xVY*4sYlR%HOi5PV!K-OL52mH1hQ5*_o(wodB@oY^;RA zAmz!^aX$$$1@5spxpskwH+`jyiiz0JFp+wU+S%$Fdz@6W_CW#5L-^N`6A|`_EVDGj zPosBt8593lpcH9qzVs%kNu;0t2G565;mhluYUyuG!+UllXh1KEulhfD3W|%}9SDV$ zxoV#`%ge#<){w8Xjg>I^zF)rp?kB&Pg%fzqrp2B=yu(_Z)8xo?f_hgpy5g3yjwpQp zrk&;Sq5IXMm)?>7`ANSv;<{n;OyYS%|ILROyOmOb;?%Zv;C17Kq>;~w3!O%18k^6) z_)4apGF`^6-y_cHfo^5`G@*i|zQ znHuewtU}`ti*Wo5lCtQ4m8`(9mfvisrXj=~>jqpT6bk10Ed&;gfK;x~wOSm(tkOgf zilmfj2ul9tCu6q25jW3R)7$vJEnZ6OX;R!J)PvfJQ{CV`NGX6zmHq+(3&-Bn+KvEtcN&#WXweyQC)*D3hRB?pQ0i?Y zMAZt$m>aulLf^N)XCiObK)(cn5-#K*qSG#R zTi5*c!aT>#?r-ke4V9$tJr0{6hRV)2z1q6?7+@HXYEJYq-8Tl(_#}2QY3+_NT|E|h zG*H0NQA>``^}Az7x~W%+;%drtZSJ zhxG0CqJO@;+1;x!%Tf2`_$KZ&-DE%6#^6`}o%3F$VhC)2aTN{q)h#Ei42y5Oag4(? zA-#uupN3NJ_vs%Y`&@Cfpn$Wf%q+%#U(E7cwji4Hd2Q|6AA{`6bhh2?|Ku*QEVs{M zMM367#mC^XWR>+@sVUrRJsSx3eM-(=(XT2z-oT=`S_HE1AxKxySYri$3=aFDBGR2R zU#tFt%qmm!!ML^J$wgr3(=G)Wr{5itDFy!UErq|6DgV4V;Z4#9j;P{${G|hE>tg1T zj+Xfi$l$qKQLXJ(%1Q_uLl7{-T<`W2g<9V0#@D#UDwlMWXMzxQ5lrPZZ=xOK?$C*I z#I1J8`Yi1}q0D2^Hhxmnjr1Gk?Yam6Q3YP6V&gMuIamfx1QC?|;?lV(brOPLvv25P zF(M(?jtBMJZx^E|JBcWi>(X=QlU;>utG}MYBPCi7t0N9oX+!|BI7=GX(5!ka4){jj ziii~ml;Rc4Krv1N7BhlLGosmOx!HqL!6?I%*MWeF3Xc05o;#2Vktf)$Yt+mfw6kED zOaMCJt5V62->JK5%c3dyrSPBg@P>R32Pea_KCx=88(BnR zBs6XXKvA*p=3+l?Wzo08Kev_~oUm6nCB>hM@4<=#4?)7d`}cW@sU8vSiJ{T zNbxczx$7p0KVwuPa_lQrCk=^N?~#HiJeCu-ja~7rehil#r~G7u0qoe6i!;`sdaz<2 zhsIw9pN&BOb>WIKst{^<_=TTGB!GC6B)3;T5qI+{O5FTfM4#oYoM_!pK8Xkn9zxlc zZ3%T&=yGE!Byz5(u;q&zQ#H4)YQWtGqrxKyHV12O(^}v}5B$l=zIWtl)iowI$W|{U zl`y12+cjQ?94Wxo2!Q>6bkIs+W&Rc9A~ap#R7Ka#@5~RiSNI2}MC(3l644oc_?czd z@abV#nhzH?DXgc#^+B9sR3elcczfrTE*vX46s8f4(pLt|9I5GAofGr{%B?wSCTLci z?T+R@P^I{v;@{crTZ*7Z+GqE4fg7@pne+ zNZ9z@nMh{wkvPgGyF+T$+j8#@ecEP9a1^9hj=@3U(TJ>R{q;eYsrdlF*Rds?Iql^N z$I(GLKf;D&D6wunS0AxK)SUA11M3T#pEe#ghdoCcxrDzO@U$7o2*4)BaH*V}>3eRm zoEmtSAz1nZ5=-?O`Zy{Q%5Crv0J_cv5OhY>4WKeJL#mmd`CercZ9EFC3(PDH&XTFL za7(s9@oQr@b9D@SD_TP(gf7X93#4KD_~AumM~@jc&~^>C;B9Mt2&hER7AWQ`)fBPL zAG=92>D3sQx4H*x*dM8I^Zd}=4&|$HC~w2^^^Z{y=27(>-PJL!uFp`?LCWo$<#qid zN40jlYzuA%c&b_)YHgEq1pH(RqyF*XlUq5O8fMnv0dF^}lE|h1d&0NC<;!=1siyf? z7US@F@h1$vnRR2N4D_>VS@_v!A^mOqR6MocY8_8R@8JPz+k~Pc|&Rk7?AE_u&TKT2z zXlHcUE9j9I~GW!b!k zIV_s`Vz!@;N~~)T!i!A$0c}K(`)=&CdM3|1{KUN+eqYUEj4@57OFEX*88Ca>`KK{_ zn-e;nF6Ig#UJr`Ge%dxLvx1}CIC-%bqvI@dj9#`>c&)eZ18+#_5WV5+Lr414w_03! zNBgtlaF>(^uU8so-<8I?Doq-r16&#gd(EKmsMPhT^+dA%UZIM0i>#`e-uB`wn5QQW zjcKnt7+$%o;mQH?1_6EL&_O4GZ)WP1 zU7_2x({M60S9gXMBGS=@H8UMt%Ta6RIk=}sXR1R*RSi)!ANod^-3y*3GnS>q(y=3p zt>}V-r3SWIPi0_$M(8gec8+s4tFdr0eT1YKf86?+$@3uTZ9?L3)XB1{{wPY-GPCZ& z&ZRY$9aFYX==(HaYHIlQ4W+A<^?4M@X80s$gKS$z7wZ$I>mS{{AiDYNznq3}-(CB} zeJMez%6QD;IjY;I%x^6YlWpj}LCX!);Vp<58wPGq6lmH~KoL6E9XO4ZQA8 zo|hC}ZOtw$E_1@Z=^7oiRvd%XIYw~epflqAnFIf(+To##1<<}k9OI%&H@=R#YAhcE zCuK!Aa*E~F9p>WN53+N!^%e^*2@D3ddqzwmUFHIElg|`tF^t#bqk_g9F?+%L_O_%c zvy~(Cyn?aGaz)+QVoxqDLO?C!P5ll7Te%##)4gxoarJ#bfhdZTovSnDZ6~70o5-^z zMH;5A&E~r4iBhUS_Ru8w+!!|vjz6vO8>!@g;yoQ zJhlxLHJ$f{U%_dfzex^gz*wPJW;0#rA2%EzQyCZS?iE?@2^2od+T z%w_HAFRs$~mYVj$LeV7W{JC|~%Gbz8a41O~;p?@w%Iky%h2$SX&(dj0c?OvPFFGx} znwmBiTX9_{q;hd=85=I|Bzwus0;e~rgr4nsZ0$sO;%1=6aBJTEH}=*|8s>c}@3V$uZ^{ti66G z!~beWKIyix77^Lk&N99=GU$1RCbf%y5Uk>QSA;g=7oFqrd@*-xjgP(A#gT$TNVM~} z%?qxY=Mvmsd49+3W*)zHXTjcm3v2`$j5TF-;w_RHLwsm9cN;8*U>prIHM+&dOXgl~ zG?w6Ii~UVUC!ZDhy@RGcp4H@Sn(qCP)Dy2YGvAywM_bld>emspLcFfTHjP!DzMi=B z!p4Du!j2Z&=EH-I5M~U^M3BBj7JJX#4lkETGjIs)FFHqM>x5f%dS5ADcv4aHGn zGP=6G?|ro>V(jljS^#dcXb#|70!o+}l1eYlu@K!9HOJ$wDln;Aj*EzG()eD>w?Spn z{g98$yLI&stUW|_x55K{+jPJoUw~%r6(C#+&z#&!v9>u^>Prq9wKOvQN@If2kKn7{ zSq1cMOIK9eE*=|)u#NVmGe9ccXY-oT=fyt7Sh_X9HopW5HpyEi|j$JS4r~9XPpIlb?MXFn~I? ziLd5^sc8kmA|TIZFG=X&QxP$V&;InI;JGP)LV9}#M)|$Cu%|@?;a_L(bSZ_dx|CraTIBj zsW?ytwi_qD>8(g48m+KQ!sw$K0T3oDN5In{9OA=QJrNx<0wfhl>t8Z^z1E8dX*lRy z+ro>IBdc9FRq7kN@~#6Z**HdMIOzoW{fPJ)PTUPl*ap8RON%_z2oh=lb-oQEdOHq` zCl&8@A*`o!C7+*xh&t9XAa2-}-OPSIHa{t_Y z6|bL`U($$1+{`TZg}{;VpS;w0{sj}i?VS18ksDf*bHk^-FqeYNK+0mOhKPBE<1d>F zXTZaLv|7hk1C!Gq{L3x&{49oCuO4uIq&dWh=A^?L{g9nfv$}V61dtUf+SOl&D2<{yf5Lfv{hk&yug#Km4WJO#hcxd>s=Ed=8AfIbLo{7h=||kW8-Jk1tT1&# zB4QV>&&ccuU-Xeer*WQK6L_4hJ#Ruod}H517#>~R`}+qVFnL1ZM$=~o1(ibl3O2Oxc2BUoxW4C_6M+Z@{*?NAlb*YBg~#wj#v zvlWT^DusQ<+z5|UBekKw*JxjXh>o#IWnrv*iCnc``jtVagpyAcuj*yE`Eyg2}CmYJ=tpR48QFq0wx$j$=)*D3FKSGNhx~) zM&S=FnoQ@_DiYZQW=gwbK8~-t$W!)S<*lRPtTx+J`L&qa+l^X!K;B~q&#r#bLCL+? z2=$vDW-`seBVISLFq_-_1@4+r~O#z$!0y z>63hE$Wg0C(R3MmfSp|d?iWvP<`&tTchWX|>ZcYgk3pEC_>N2MX%>Q+bO`mP^F-+j*U{7}sw!i2bph^u zR?%)sonGbgwdiF73ijuJ=TZITeV!Bpk3#A%sfL%{LfgNc;h5pBDt4@AI=c4z@7yL% zeQ-Y9pd8QxoVQpGy6y$B%P-1rwA6EF9Ql5-d_e6gqkdp>k*?+#xjsYqTp?#|sALgr z9b{pXIT3zOm)4oiYxF>k5%L1f22*unOc>X0W#eR&7mv<)2_he9Ss4FHj;YJH!Nj6D zPiMZ{7f_kWg4sJ ziu=-tui(S?x5cCnwKJrB!HFQy7D}*DBi#JTP%5D9Duy^$TE}_Z)$&acHrRw`Sn@^l z6;&TWoVYQ-a&HJH1M+0yplgm9`Puh_Bj_44%uj3dp_tP1j9j5HU60{kAu=0;D>Ok`Y30&&u^XI@J)6(PJ3AlZ73%cuz$7qt>Ejz7E&$WuLi` z#AIkx>h_@Zox>q<){B{uJl0NfUj;~`@EiW%P?O!EG>w!HVQ&(LZbPEOivj4a0$ z-K_jr{5xZ>&SGryLXC^$9bMT}NMog1hVwutBgld(v3y_n1+FO^R%E(Y)z8By02FQA zd(X|Jb(wktCCWHBmXA5u&F$o9_I zz4dpzK)#9h9ckYgRKlU~3mu0cW$5bkQ)(+kq|t0Dsc6C|3z)HLDBBrNsoo+vK$qpi z7F6DjA@m$7lK5pF%p^#cn9NP}*rpjx$0t>ioue+RrtgVs#E}5}iq? z3cSk++)*1IYEb9^E64kh5C>Uuu4dDYN6(e8i%E!HA5Yo+I!fEz9o}VN&pQBx=?ovR zRtRxyuW_(DlmisK5?uWNZPt71(}(l9lQHr`XRx5C55 z+h{|tBvp!u{I^xIPS@}mdj>3p5LXl~R5<2~k;PTA3z_laO99?|Any>C`|{};#qgp){PeHy5L^ngnVo|9Mt5KfWmG#+3dUwk zUv+mWUQSuAA+;zppzI=8uoV4R!}p+~R>=I?cHfVc1Ct4@uR6Slbm7fMrx_YVY5TQ& zU&gi$V^^L0ut;d&S4(J-R>n`ZknOfj;DO0;x|}?H5# zUT&Lra^l}%Ul*qHWx3<@RL)-vUArH$IVMOZ&@LDk zl0E|&P+{-tS%VBurYOZf!LcSzQfUs<)vUQ0A)t;8Xh&H@^5YB{-{&ChgDOR+QAsgi z{>cF`Ew0`4FTA-@=H%9nBiSyYE?lT_-*|=2WJP&+;f7aFF=aV z)zOJI(Hw@txF^_JH!}aO9NxV0fl9-KZ|nRDdBMZndP3lpcPqcF;pcGKOlTjpNI6$S zJjD5KM83-?tgr!pBW|8ueKSC(EQIl8fZ-q1AqDS-3VIbK(@ND@r6K@4$UxzJY0A&*K1K&CxQ|>^BuPV_Dw_B%t8+y#lheoeX zV$1pCOZC8afD8minMwD=&8dW~0KXo@!n#WAFr?SL435fvyUO&kJBi<*frt<@xJU>Q zYO;Tv_@ZDpLNRMI6xHk}(H+VpNiIRk;a$wM#{$$*$ZPjHxr>{YATy=<3}F<_)C3x1 z{0MO$r@7>gbd7N#5Fb-(MvvK%yzU(^cOQI?V^jMx9fA_D@_-TxLEa4EIGDE&a{$h%yLOWr zH9ZT9*9{zG_|_tRLEBO)wJw;Io2s)^#*s-Ia|x4V&ZIh^ag06ws>vye$A!Z<_s+88 zs;1LL*o#wZliOTud4jlh!UtI;bxe|`f5wXfnn}3j@4C0rg+Broh0D> zc#Bd=4KO`-r8oRSA5@u{4cn(m#EMeOaQ9w35pS;oOo&y=KrnT$Te)_&N32eltpWOw~LO~+_yYc9&9E?`Vf`ddHV_keAKCZ#?AuM%R zjYBt9w48 zNC~SlDPdgM!$pd6HMnb*v@M~z`pgag7PO%l-a1Wwt7 z%>d0q)yWHS|MG5k{x*OF&a$~D?^bID|8}GmvS%wJM_ckKICzXr#cmM&!DkmPu)TXi zPO-iB;rnM(#Zt`Dq}bG=-ka(8ln7i$4{yB@eNw$T$s3Pyoc*W&d{2v+^Nb7D8aStCMIomzsV#o{w#jb7IgBSKdT-Q_n%&N1 zqY<@*UZ@>PGB7DBhdBJCXQeg4)&`+TA;XC+tq%$-o!=6joclRcSm zS_qE`#d5VN1#&A-cF4W$d8~(>2iusw#x{S9efZ?+YVpkeo)T#VjoyX$y$IJm-@BO2 z38{Lay+JJ8bxffDi|_IOK(VlM!ceUQPm6r}i3=?V-=5eq|FrN>wEF(P)`su|%bOOz@r*z+ zxFIP0QGFalVNHPAjdchT)Wu6>)4G)8x_HqKypP(lKh!$xx8nPzd#nenQ^rg%6$97a z4E=DELZ7m~5UWd6F0sp1Z50|!U@_3RQCz>UzGqg@?#o7afVSWDC-*1X50>h(yxQ=C z`w8(h%ctuG8XpQ`1ikv7kH0g7EI1Tr_-G+)tyT?$2)2`L^si-p2|5;W)hWR;uV+Ug z5lqn?K?~dCF`#_DEAFI8ou~cHb(ssLz?so*lRH{U>4yL;s<5D&IsYL)~% zg0MZ`L|3El5&o1@Y=VW_sLCIhz|};l%k;lCR7v{3(Eewj8@v7J{I)NfLO`b`62U=G zRI}*rV__(a?eH)R$d-(ue%n<=FGHz`DVQ_}aGWQCx?eBkz5YZgP@mn!v*%nbROm^B zg=%bKvN~9(l|0}&#tCR&rijZVaLO}8wex3tu@Z1mXNEac%ES8-Cfq}>NvW&<ZD~o1_$9=&VaU>5p&K<|M;!& zbz92Vp665WzwI4D@nkGJfhuIZt87zfwxD&ns{%N7^Z99eP^lG`6$yKMXLo8|_=UWe zy|&P<_bphA3nCR9 ztum|z-nE6wiYkI`O~j-vWliUMa_^TQYQdprdQ36e&@6>th-5heQ^CrR`sxbDmhwm< z;#tkA21h;2^rU1XO0%+<-CFlAU7Ng10xyLJ=Pm}>hZb_CbHC1Rm$Vl~ayJfgfA81$ z@=?P~FGc_4N#smkdV?tD`ob%}r1y+9^Y_~-ry)00eB1W3eI@Vsx|ta*vkf??YIIr5 zuS_t&7o_`t#wK=umw%nyW=?_Muy#tm0(n{$+3@>IAr&@W2187!flZ5A>MV%{1#+rC$)%z-VuxuV)-Al>}tghC?D zB4474DyqVr%F52^wz19iYd`Gn?lj%h$2z5^>4fj>buwEW)Zzp}PTnpgC8b~XC0+FI z1)XA*s*r|hZZlfm^a7VQ(d~&hAawA6VtfR>nSTu{5v8eZsFHmV5-4XKkt}pn$>iq6 zkwq7jXiWyVo2-U%?}6Of`NKPSL3**Hc@ZJ+EM9Y{0<&DXqBNf91Ztyrq`RQ8SUg(w z#E&SkUw@<7+Osg&%{6GbAJGiUoHR>BC~j`P7J3zZh7AMHU{*=s1xmR@K*PebX_MCz z6h!<7POl5RQ6BtXJy*!?;@uX+p@=o+3ZPF6rIhpc1f|^~w)p`>Mb-_QB#~oY^Ij&x zVV1pu3B?tT<5YhLLm$Pm(WLZN%&G+fcyVBJ`v+~+zKK`jB)R0F>-w2p@Wqh?#7tsk zrgi}jH#&*YTX;arQ_TjkyTdYPZ97zEfxI3LJYVieC4g?yEY7!v|B@Y0DQq|z9JCl7 zB8Y8w!t7hhoWAWJ^0G{ncNmYZSL|>S8XvO>c5}8OI!$Pi2@DC-Lcl6SjL##wx&OkC zXRZ);+Dy5cn?6SKPts)moqrw!b`orN(w>u-21wfo4cCWa`JD-8(vPpvX^fd)@!Uug z`PWOlKtF_?hz`xtDhD#JtRp74h~p&a;pEL|QeP8RMDec-$UVE)pNZ{8EuV-`ewC#f z+Qlx_?MzDAiE{gGTjh!yFf{mUg4V<#d>}p}KE&I>V3pr`x8|p*!QyZUAGzsLxYbqS zGJm4$ou3MWzgPcc&24%z^li#I4!_~}?{2XhlENz1ZV9*d4 z7{FsOmZ3%V(9BQ5OzLW#LkL<*de|E2 zf#h9EokQY1CVYG(i=AjQ$QR|$d|^i?lX3t4nNtGrqEI$mZzr{5K{#{KBEAVzQiCf!6ADn}dU&SVfWHSHCN1v_+kq z1EB&1@3(u|3fqBBw4Lsd53A|K@xus0kXg1w=Uk}J_;bOPnG+YOL&dc11Zt`ETImYtGz2R?fBjT zU{-?&@}e4@ISDIDi;zWi+DGHUBD?oKtoDqj8ymkqayBa%zTG=J`~^IVUVXzzKqI%w zpU6^%yG2>dl8~7dUQ(PeM>(XS_l1WWM{LB>P0dwSmt|n6_lSBO`0~rVxtuoele`@zVxyWRd|Ib!ageby|ALd>lWS*VrnZ(}_MpzQA+elH>h^ zTG*Yr^SjY2#n8>XSn;1fppq{ksu!n&m#a0ID-WD?yMB!5UU*YJ1Uqf~D28@Hg{Tjv zKph|lwh1C-A3LzKa}#c~uVf;vC$OZfZKP}7*=f+B&?xn699O-s+6-fSFMHExo?%U) z?PVANkSjsWIL7`PJB7dA=*yLc;SdEY8sh<;#bS{|(x2-XTF}WmMUvVKetWOY^U;Ap zotX`~jm_A_5({-m6*(kC8>bQq8Bywz^;{wJ>^@s5z9wymg zlG$c`VsWBUC}Ig(40KHkv*qs6v`>{QBw=x#=LHZt*EW5d4sRz3G{ffS5LxONfR&i6 zi*Q6k1mP04IaN39M+D5&P$;yjwiZ?kUi#xjzLbaGnUL(QP`(pN!B^7DQ9W_xOQhVr z@&toMt*RN=LQEn$j=Al@GH`bWRM&Z$K#49Eedw2NlxShKDGF=l@Qn@LZgI?$JK(2m zdXjYx$}*QYt3!RgXTGJ1!)*qiTC^GYpn~iWQNtIp$Fbd*lI}8L#(`Co35ZDp=kiv` z#>Pe&F;rB{A|Fv7-*Md}gD9Cm1T!yUDB^>j49=-G`CS%__ZI*74O{rBHV8z5%?W=4jjZd`r{lO#lq~4(}h!Uk5 z(H9}$8A_0V>tPd3A`u)qb{pwU6z1~;5-U}qO9Ug@Qj+vczdZ#c!QO>KbNsqxvOXzf z`g3)~65kqEPqsBtp;%T)DYOhi0 zNu;cVS!+!8mNgvgala7Sto$A^Yd&tA`n)GSUF5?nlF_;)i$?8;A2N(J*gXwne?*u0 z-thpp8Z8<`d=|N|E3AVw3{KxsRv7}gq1Ht22 zlQBZm@k4x7(=5tkt`^s#ST(limD~f$2 zo3;&m%%I@&mNzpy3ffv-6Cv)wy>(r#Y>8ViPcsw_ROGTqX&Bn%{Fnti3|2C31}uta zbItb1PRA9@=To9RxC+~RA}S+}uT_(3&boW-<{T-4Rc_R}(04i7SB;8f>M3^KZEbI_ zpYKg#VEc|#e6L4W`zG{_s$BYPchhbg`GY|OASZTxp~&(nU0;NR3F#dPb-n8`o(0px z`#697h6rI}b*e^muB!h@dBuwo%!KsVQg&s?nM}p{3p4F~P`i?{DwQY&x)Eq28BmRn`MXh)X!Rg2>@DE<{%?qi=h25Q zXd7a{ybW(P+j6bLfh{p-X!*=Xk=_)QnD z`uXWoVUAW?+dEjNE~73x+6BTMG?ed3hWZCbV%}Wp8U$!-N$Ml82amUO<&lFk!trP` zsJ}9RitWTJ{+MX$8HS#D;#UzYs6q)Mc6``Mkm{-4!gtTgTCJe2;zZ9U&0A~wuRrGj z@0uZ-@u`WqxpD5hqqJN{I4gbUHEKa-lX<+tQPBD|LYDaC_;6^SwpIaW?;jX=T$kUr zg$|A@yv)HUZ$O^29Nrl~UE_7^S0W9A=^mKcZ)_<>#K61~MU07A@z2Cx#4MR@`u$-e zw=nCrK>Q@KW#VCtPtQRrC_j+2$H^!_FR0c}6D-OX`AXF1L|4Tti=;TTwuv9;a<0Y{ zf%37UH?Nc2v~mGFu2|#ldTI-}Owus0WCcoTCo8%=`VjqDw993z10)2xrCFr2wKzpl z3XHyZLT_J+$px^w(RwXcR)|19vtxtKE#}1fx}eOg__Oxob0;2Z2juwJCR(vmb5>-A z-Cc$Oo}_>0U%KOlpQ33*baH3gwIaI}@~dJZt(WT6fsd=|g?2V(-=-DYDWOuLh4i)I zMfd}F2ZRx3&J$z;-^a^%rbdnyTx z7SfldZ5zFU6{z4N_$d!g^K+C9P-Y475!rqeQTiCOF}`>)QjQvEW7@1^UCxs%R2n-& z6;_H?$R7&S)``(ZrZMgeU6fu3yB;;mZ*bod;u(H)ck}^%7u~Z5;BuV?vV3o|LKVRai74Axk0JLEFRmL8~0AgR-EeT7C?-&PFikk zwvmPFYm*3Zy#O~iNk@ZwurVoZ+-$;jPwMW;yva7&2&P1>92-pHis#PRh^nPlx1TG4 zPCycWpTmL{0Z|t1YLqT;`IAH`K+dAWg6AReQg1+c3uBkba&d)WiB+dSKp3aFUfvRn z5m)*xbw^Fnr+>cof`#N!EIpKA25r94!nl-U zXXDuJ`jm(UZc8_BMvN%+o+5MdidsH_k7Lr9>^eSZt3QOP%&5(+w+x-5K&t3BQA6`x*Yop?4ZrcBy4-V3Vd$zs+5i8r}(@c#P6QyjNj(a2!o#kz3;?Nf0r% zCd8{_Lst-1z;cniiIPLHF;(rF$R6| z!;$mEBB?q<)UZk}?yOw`y(AR7X@&)6A1oC32J6c}a0xrET4|vGnG)y z;alD=$~dp3-AqEaZgvWlm+r8)F$_X@_l8%O6rA=&SYyWYCt_{7QPaD*j^pHeeBlSGsbMx8J7Q&d-4BNq>)W|!qevM6m?u)1~^OJVaNeky=qXgQ|*KcL> zWv33w1mF`UxyMHIUGs^&BKgZYVPh)|zLH3feMe>z>zwM2E!>W>0N{v7&hQ(9YFH+bx)Jf*Q>wAi)c z(?Y6uGW>fNf5(*#nYGyy56~HP*GhsQ6(d}J;$`&NiqQaRJ3Z?9je$*Lg@>>b9&l2W{-er zp>~|Kja0uLFm2b%KE4q40RmM>C1LUrz(Hu;{kj2qI*jCE%G+1x&{WWGPG?t`{2-3_^H z-oOcwIJfRvPXWpYo8(#5743WhG29g2xoeKG)pXe}nQA11hs_q4;+5TBj-6U1Y$x2! z9dbjW_LK{u%y~4;mygv#_p1+H2Qf1j&;AKxn$}@t0w~h9-|TQR;;@LZY6X4Av&L6d z4RZE22^qY((4Joxhl#t9LEN*uOCj&78IPby4ix_>Z5VoV3vf|C2#@ zQtwOb{}0<<$Wxl^$_ben(NjMhlUROqcB^Q?C-^K>H7*E|5n7Js4lOptX!_FHqxWvuX;nP zIiN}AMMaq57i@FbYXN>GDo`o^T1!SXmo2be+ux11D0_TjxT6nUWF zn|D)qYMI= zcKHvKG1n{e3p}ALXl;w3`HN}S@Ebc}ThWPb2N9u4oKWs6h42+pW78^jAsoj~6_X#= zM&owGzvpW!Yia9-cUc(Jk=qry%~pX8Req5Fq~Ow8c=I2hMua0!a5A19I8S38F4Vv6 zt7zr59e)L=D5NEm>_VEAThLi~UZ)-1y}0W(=ZMeb2$xHETC^yFi64t|?T#Ew91F3O zB@5;oj8it_&)Ae+1Y+7!4>D|5N3o!OyLbp3J9jx-$>{)Zo=E z->0W-tV(yf;$4c>hTHQN2r;5jTl}Fgd*RRWs~0bqppH_&BSM^;f^_zd&}@1?{Gs4# zZGFrKIpL$AEm1$#>o^>kuSNfR_q35ev7lP@r|ORpHJ|ODP*s$<3h7)u`syx5V@mn| z^e#m$nI;YUnwrWw#gaVD5vyzJPDL8GIYrdhb5`*hdO!V}T!6a$?W{)|%XDu`fNs1B zQdO-S_K&?eatR?*s4V4Mh%zJ#E#}KB5=r@sUk!HpfS2{88vZkjn5_lU^h$3(T_Anf z6GL9Smx2FYGym{g7!y5bYDY0%T1VJw6I%Nm&66xj5NuyR_IE+cayyt@K$MZK0bL1n zrf978Gfr@ywdL)gee~`r_GHWS&UtXgro`Jq7O%~0$kWX-hgP%J1I6+;ZhA-rgo*K4 z3==ISvb6Hj>J-`pgb7J$kV@&NVzpYo)n)6y;cSkhrZLg%m}e5nR>4@TFl(swUiNgsuO6RF>pYc)Q~h1 z%hYr*1&Kb>ZCU-P=t;^5EW49QdY75d{XQ|3PD+fLRY{za-NlgPG-_zYtMa8_v%=>M zajUPj`&fsmEG^`$?CluV@Az~|2Q|~k$Nr>8PfgLO-F{=hvo5k99R8D&WAe=H9ZaS? z=!*a;=1I#@Nk8e55V2KHqoRiT)Op+w)h*(^)*_`m&*0E@R;48Tv4zBT;?lIDvge*A zjSZT%lSzdrPRkPsCYpfs2dLLIaB;W#Hmi4#{)gXZo5UG{)}!JbU%G8ZS|<3513mbC zN|Sj9hK_OMfGkC+uVGU$6(n&s%S%rvC+s2f>$zs>7T*3%`M76UZXviJ4`|rRWzXnP zN;TtuqNuKhKBSF7NNR<-y?xjx?83=ax~F_+Shj>Z-)}yq`Q_5kE?pF_TJrJF!>Kb` zjL0@^?3jJf@z>)n_Xw;KVNTxfmS(Dwh`b%&%N!hvmC=bVW2@7qGhezN?<6CO-qEmK z-bKjuTddNgL#;C`?PzNzKZp2drX>yLM0}>mkxS9$3T5F>sAKiDK~x7x+=}iUcu$zd z`GJ#kn@ta&{x0F?&{^qT%J(D|_5lT^eKBH>!M6#rrX`gp4{Z3`ujm;Kev4()5as>Q zW+aLy*?zirPqTuanr{|{5A@o4O~9`Me6${m947%35y^?NDh~7qHiQbT-D{b$S*+3@ zh{gE@^qu+lwzZ!|GQ`i059rodY=IeSz-6*t#mN&ETgA2SYmWQ6w*;)Blxa(g+}XT+ z&yKgcQM&tT_p89K>#Hu$|0kQ#{k0RF*A~G&_p(!4wQ97_DicZdwaK-6q*`12=x}pG zFJj=pJ=2W$ik@fv!-dy_DAaEya^_**-a!!uu{wX7{5_i5ubOH9knh-dNA5(W z%pVno{ttC;)fQLNbqj|eLAr5mEV#RSa1ty8cbY~Thu|LEEog8F7TgIIv>~{=1b27M z*Z01k_j$iRun+bLN4@H*#hNv1&QW8GayZOW+r%Wk=rOuO+O-)b1zSxaroG&<_$=k( z=($3}Fprn=e1~ArkEi<64wHZiEG?y9yN}am{SvUBBRpKS-aI~!$4$`j5;hbS&TM8z1U~;=kx7{2n+fyuI3gA3-BaE}g%#)I{ukob z;nz)9Z@ya-nB7O5-3o>iY#;=ZHk>B23A?ggc71E-RaKyTtD&2{ z`8>A82D?~#US%f{nZ2rizQv_FVN)EsmE3Q^!;Pukpq))FVHgz^{xFIu)Q03O3!x zn%%OYfslE3AynOD3LE=qbDEt1me@+lA(XY4vynOD0?AFeJy8#o;aE{~u_w*8C`t9` z;H5X5KaXDx3zIR|2MO+r$0}KctZoiFR=}cuNd(EU5m9abBvnZp?oSi<9WOMrskd1} z5R+%^y{S`8(E9y7g?fKSO{r`RPrdv}O%FfFrg0}tqESG&!8U}SycOI#dE9))NKmLL zYHGEiNtUfe>03l5|4xl6ziOe=v`gpec=@&6VxxSVnqu|kGT!&kcsg;50MPq3tQ*zJ zxYJ^Nnv%%<+#~`jwmab?H}?LL7sGSIL;j=I$Qi3UsUzXX{3kn$AGM;i;$l%WD9)Te z+#OsjTpgA=XuRSKW7~<0->T=sSNqvhG@2a0btwG76#q4J>m^*aN0lBFqGNxXZ>mmS zo|Z1@&FFJKY|FlDB~b}HFfC(N_SI9BD;+Q8`aa(5Jv}=P3y6fUNRnV{-+y9`5sYGk zfFSd@mcd)*Z~qLlvu4dx8ZPof)*e^5?2oAo&_+t(H8d563an01zS;_Aa&@qXX{X;H z+dtaQc_&-lfs{TB&X(@x}w?am)6Gsglc2cq*0!6ckFz zrMdajgMuh%)n(#ivKW+biH4UBEh54vG+HG>VKQSqKdE?gxjV%+zI)Pr6(BICOuSl( z6$+pXn4k&GH*VsGPW?dEb5D=LV0r?)XdjwnlJVoy$OENL-Ru@j0)WA-Se*kC1)LU7 zGD>1)D<&F!D1We2{)ACnk2kw&Ur`F9Z}!Lb%}+>k`wU}hrS4N<#ZFIu!hmn16Zo%gLqr{wn+hSm53v!R% z(4U{fPjqs1FA4XS3$T>z_ZN)=He^)OFw5gYNA&Xaf8`PLxRJrmTcU}B6M9g(g!M9# z8sb<50F@}d6XC$YUx#8y1;OK$gujvuSK`huAYT0m;Kw1?=?q`dEzvJp9L zw;0#cH(}A;X9z13*~xW=yYH)gjJRsQ5(f8pS<^M#f(Y=|7gCX_y~3GO1iB$p>-2i&w+GRxVH5#GbZX;~fa3 zT<0Z7Kh*j0QmCM%f4>OSX?A!*2QJ-ozcs?j6YDpb9{1Z@ZRFB(GYk3!0e36mnS*id zb#MA}yUOFPO%ONTjweca4y9R7)o6;q=gh|7FRYOr(ZF)U3|G=%G;c~xklByO#It!X zCNI7xLS=I$KGZl7p#6o%#C{( zw`AJCg}KKSFD6eD27&&ngs$bI>A8}Bp~Lj5nos!Nvt}>k#aj}Va@-2}6FxyK5If^A ztN_>-!Q|O(K@XiA@_Z8%+EB4JyAI`YC32; zwvL+>-@KRSA)DO3~X{@(XEy~2{ zf=txl*vagYI{IYj#Pb$B??KHLh@aZIbjJxQ4>BlKmZ7))EShpX0ld7kDxIu0&+$mp4uQ2@mLU)*-CokS$7BV`mtvD?bSV${0a0Doe8i%gD*mREA`}ZFDAh>?5XP~K4eQ;%H2o6)<5^^ z{sm(H_W$Q9J|BZDYL&%{<}Vi5pVWDrLn&1u8)@D|GsF_fzV>q<-b4?bWRI8MBcNM% zc-3UAqt7Q<@Nhl;&NwDLw=dwM-2-}1k)8gCv3V<&5qfKwZg=N9&98u8hBOoHuB0w^ zl{BH`GY;b7i90xM^?wvIg$o{A%CN0RNacyE8L3n*dqXLJz*87T5=N{4L1ZU#<#)2qk5IGMJ4MXx6&Tf?vSCCm6@kYoWnOK()q z^F*$$zRNKmC`FZdhpu$KQ}iW;tr9wdl+26ql0q|4;$-7O!cFd7X$eIUvljY5vkd0U z71OIfjiz8>uLYl!eaz=QMJu0wJFp|kJ;=~j@_hhPFs83PBj3FLfwBs-=fyct+^jbsV{%52q?W#z~c91ZJ|IEpvjc~bZ5KETiR6Vk=>t1*OA_F-3 z9Jy^^vrxN$l?I8(O-VlPW@MsBT@}Fft6;@>&kg_*l2J=FnLqT0PPT}70W)GNFkck# zS^_{9Pe{SbZZPHJ4Cq$A*|LZ*$qpuh0?RF-?$Yq!5K36zEC~7L0ZE&DgkI8Yo$(%(K za2Y#s!(>J1;V+J$&>0Cn6s)#W8b#84>Fjl^;%&PL=Vg?;6ytmV)2(eyQiIbYm64?g1V{ z(uX3HnAcWVw$=F#zAoRaVxw?0E#5_PC*YAs3+8b!Cy*1x%Fkuz{y?TzYzf)K&?{Jr zW^2~{4gK8}#S=gaY#`?CThE>sFXUUqGzRv|YwGJoly}x~Qp^GjVda4Z zMs$4>sg91TP0;x^28%SIjgXg&aoY1{FAwqbCQyXA{PWN+d1vE!$W%27aXYMNIeao# z?tLjfaz3-2)W7J1&!>O*pHI$c^z&Pg$$e3!tsMSERX0&xoAESHBCsj&d^u_1K%17B zceA3b|8k6}(eso)s7TCz#ElX_!j05()o1xuP~+)$ohgd4h|9q;))K|R-`69SLw69% z;uPpo9$t%*P*`MB(}i+iP6{cn82_E7o=Ra#>f5aW6JDzYgcTG}-ls-D2rZ5ZB)vdW zKBem3a3t5r0Yy3Nw8ivG*R!=^Ju?8LwR(aG_Nf{i%D6Y82$1J&bj7GYUIzNcK^;7Q zN>1S(i?~RhzE{yiagWvmfRewz!fI-gnIa^gC>TR&E@tB0e6k);`|5%dmBBBybmGhP zY!J$CfU%~!JLpw!vj`IN8VNmQkze)ECM$&*tlu`4H?;96x384oHYOVv?abAg~OJf?|OU6Wgu`ZZ!^wowMcd>eAPRCUs>|W zYXCjp5o|@uYqyHChP51S(_M1J21uWD5fu{zt?}B2R6a964r4y>>+(&PznDwWl;nL? zRQr?`*S5@RMkl{sGxCAgei^AfG`icWy*PuE*C9 znP@O|vpqpl9XoPJUoPM8*ZsVwYLocsOo`@)0ot~cp95gmvB}Bb^W?jxjLkJIhXKK%hEah%)CUGTmE#=GT>>BNHvI3|D*J9}=swC8tXDvC@{yI)dP=U8}yq zsRH-wiwm2f4}ngmsA~*)EDz;pft(tX`Ww@EHmcE%v&z2X1%yGNr!k59Hi6mXdbzHx zH+y345~4XWZ-w|UsGnEd2u#h4`6Q=`*v2d7ZUtQ!-jqfVxT=IlNewgvrA?QUbR5nQ z!Q8Duj9QX~Uj#*P^5QBxXDlfBtBhm66?he>Ry9H=YS|W>j)TR6hMg3bG~gOiy$d?? zH#p^Jv(m^;qY$#Au}PPsm^{)dYo+Q7I+b!;Uld4)F;FW&DOhkWnN?Z+icAo{7};T0 z83^M0z?1W5uf$=ZUfBVVs@d8Qt<%+vD!5+nt`?O<{^L^LQ@m#JJtc>XAm-M_^S`k#0GLd{f7%{@Y9)qPH z7M8f*y&XzVj_=z=0V)`&@pZ?Z* z;gwgj1X3`D57x^#luOlOqi%8V)MWwP3DW^T_n&|vdw_4BklVkf4SOOPYj^{ z8C$hpKsw=u_y*of<&B}1i*JPG2D5I>)}nF!r#jp}ho5v?`g4Wm40MHmHc$O4dhp$1 z@&Ps!;$_9WABYmI^o7xS6hxa_ZD z%<>&+e*}-a$W@6Kf4o0^0c~y2HnTz_wJLPeUuLm)Fsy*-7Vzrjq#f+n8d`b-4;A>H zM9}1})LR|kJ5eC5&TBm$4?JP$I=WI0Hn$ddP9~rkbVEt6yJ&KlLm46UQ!gA{Lr1(y zsnE-Z2xR|dDS9j;U^GMQ3aazUReRpqTP~v{ZN}{1tHI;4y7~0P*_LeLcuj5=u(VkD z2|ls@PH^muB^sAU`cxfhp6(C@G4J4e9{qP?x%&^#ACEkAI#vr`r_f(Va)AWwBP*Xn z!Nu`%_n{~;Wce}+7QK3XOk0;6p1)9Z1#DZqTaWhPD>Zi8*;gH8;u;1 zh1g@I!}hpba50fJN|RYh!9=srjWA_c*Q=Fq&B&wpC^)l}^4Z&6u9dz#j@K^A@6vtq zsYeGtX_jAKF{gSXNhZf1`hS ze(1RKBgF9jEtUXlfvgSh5Z4{?N;Qn3uLW6*)nler!x|R9A<6m2}o{2#pSH;)8CP`XB9& zli4jb5%CXZaXN|8tCUD?GC*ME&U%Tt@E_)fss(gNPSuSu#oT{FiQakr(eOmw?1ksjz zIx&GNdX}T7dm;<2cGo!aFY!-Zjgu@GMGIUi5{FJWGqYB~wD=Q;J~^IVy{;z_Eo+gS z^1|N9MxPATlnw0F@8>KwGFIYg@A>c}zya6CRFVadWfSvc z+v^2*$O?7sf_Y0=ipnqi3MC5$Jy2UU#U@(T49MEEN>;|+N6})gzOl@G-ZMY7A2+k< z_8Q^socUoxc+D8$(o^~Sm=ipsyGOqW1*G2)|9TLmw%H2;1??CU*F!N*_DOhOAAB-H z_S!fL^(3AtL)3EzeOXBHQ}7C5Q2w_=cxtsfe zkGFUmM~mc<@4??O%Nwg(uIj+yRIS?P!R{o8eq^!WG=8R;IofZ{Cn8bs5luzKHk#hf z%XEM&?BbclI-ivT-7>{LL~g_ja_3QzP%NDurLepG=dokjc6@pY#Or;2*Km^yzU6qp zRnni8Ppm}b^qW&|7eL+rSoipu=neg>{O0U4mwg}K$jR^vGN(Y7@LWLxtzEykDYU|2Dari-Jk+dGPMN#9Uibc6h|9;Mk=T_y37gQv;_$DP$Klg9>O7m?bd1u`dd3ByV zk&^LgjJ0y|^J`1so7~O$bc=D@&M&c$ng^vqR3IM-Z^(Lcy{qUVz~D;|mi5xQLP*jh zL-luU)nWc$dPdpq+|Vm*3wpNW5VOU@0H%vBIF5}@2s!y?Ff5T6=E?pu ztzV*{A7h@ua<`!yw7FXc8OjLh2BZtI&ureG2iAF>p?mk!sg!Zh$me}2SJE;>A8}Yd zwH`m($~bpB3O*TPm*UY-mo#7w(qocM+LZB`YXb_qribFacn0okAgrA=z)$~J4FoFv z5QB+dSxbgUi4Wa2V0-`iRvf2X@2@Y-Hd8l0aW zq;O8>l|6)WBJRf3?F6OOqVfIta}Ro#^5}y?9dMUX483oA+? z$MXqVfN8;yuElOEAgJTL<5H~HcoX%Kh*0Hzg(I?7v*BN-s zRDVjc*r=INsJEL0WO-rrK47df;tvfjy|4Hx`6(&P)a{Vgw%W_o%a_+`0x_sR^Ia}I znlzf)vM*WsoZ9@|&vbZag`wIb2c53xL5W=j+%$7(91$w&L=X&AnJ1d)8VN4XHb~dW z*^Orat?jZ?bCoKi%*Rq05md=$3mn>updu#Rvqm!@dfZ1NI1cw$@aa#fW#IHc28frs*JvSjeeI@KCa8>$lw2>;w94e~+0LHWD600LSnDl# zd?5a&mqM}QIM_+?2Z;B>7Shiy+vUIGRvI&6P}`clvZ6hS1+or4B}e9n)(}Jq7g_HY zIqG)0uj$Hxf1?PWi%e`{7+@Q)m;1d{d%&!ScIKU21`?56kNcPm9Dk(4l3I<-lXr6 z4ZoU?_|5jKpI6<1R(n6?^#-HCf*6*s*I3_;KEagj>T)i4EcFwbX9JTHu1xDm_mw|Z z=hx%gt7!3mNi!SjoAAc5m@+kYZXIw{DG5g{{C;mM=30N43bTsw?l2j@64VjPj@n({ zGp>Q|U61oXgll3%QbWybe0s*jLV66DJZQt?hCS%O?H_lePhIt#;+ADMX%iTC=<5 zw8s&xpNB)X<04Rdvz+xgI|x`5Qzg@Ei>-uQb#Y#+sz^5R!;wX0`Di}DSev*WY+RhE z`GJo}%Qu0?2#CXF=7@`MgPARHSVsrjM7gH-)tw(x`Drk`oyA31z0r}VVDY+v2D!mu zuP45xHs6Q1Gyr1j5-K`+_hrBKA2WW$l>-6EjME43*9n4=BP>lr1tQd^a~Eg zO;>8_v+k>tW=hzFA8?}Cob-xV=*{eQpT9F)s-wZAbQaQ=s{&ohCxMrGfx1gsj+gHl zrHtA-6K!_Et?r1U=OhXn_{)n61Z*Gy`QlZ?YS;-*Hw1!xeuk@3k=6NN>pqJz0|aS0 zG2827O4Z4Yj2Di*vaR+F@03?{dK?CV31dqLgHV3pewPrA*k2LJRgRj4tBESQk_DneABMpA=EjF3T()Q`c?_Zw{P=ijm;?Fi8tghdP z13lcCVn2X7?4K0qx=)`1na|Anm)>`0c4vYTGm?mV zC7Kz#D$mVJAAMFTbW*?rUA`DE3-z$?EdQBQ%mu~NjN9$^jr$z5qluC9qZ+Ky$je=_zfpOj`K763t(@E|Ym&WR?RUcE9itZfe9})$INx>3t3>;hbo%jz zl-GI@P$6=KosuIu9fL!FODi;nW8vg-GzsjtIpbtb5p|WV`$F zT2Bxfde=$bVl6pp{=I(pfl0=FIAoiXT==%L=n%ffnnrZe>G#G982}DYITq$p)VNze zhI-2>6l09--8t*UA7U+7#4#j8DsP*gs$frSpC$yG{CGpJ4kOs@GV*ZBoPFI?o>71k z`Ld)g6ucC59PM7DY7OPY2`6Pbk8ZMaZmg8E9Y9cR?KOGS&o`AlHuBPNB$Gny@!PuA z44q1aSHAIIh~Q}rAV{P^4#Vz|*W$KDKZh! zRY5IF`UWs+`+smDa#g!q);mm~UVDnnSeo0;qCdmNLc-37-zSi|5DqDs=5n2Am*sW~SX$ zk0)!~-BP71aWstuahG7tVWNG@AvIVbt;1VO`QYLZm!eEs{n-ED7K8$wI1#x5@nT{C zDsXZox|CCb&M?Xr_zns%T7NxeYY9N5#;Upn)~fHi@T!f|unT33zB5EGRr}3+r#kTO zc_g$slvAFlRCm{!rQ`gG&Em7xmI+6Cwg%8eqh{9l-u<;&TK_xv-m6fd#T$PL)YKKf zz>uelt^I|V0|Ri(``WqfilR0UdS^=!twOWgdC3QN{j2$$bc?BUw2VM5d<{$Mv#GI~ zAyXn2M2Qk03oV%WP){yM&M-8$Z*`NaI}a8tI{w_f(2h4@(}_B4)Q(1~H45A7I3Dk~ z{K&ev6WGbzT7Z#(^miPg!15?`>RT2ZmE@2cF+}T$8RE3GRdqSKBbQ@c40V=FHrDQq zNu#OLHyJQk`rtjMfLrcw}^$8QW?~BK|;*qNIm%1VX&9(eMHXCHULkTz8oN*yZBp-s zP=t9LJ4*g&TC~r!T=99VSBAn`9%?= z@ntuRm}xb74w-aZ z4I}M{#Ns}*7VLV+t#A-Cw181^R^3~NH9gX4lcCzXh0uE}q!ujxG06qvF$}Y3?^{&$ zD3!vP<78eiEd&1QtbX;^h7}~Ym+Ae>YOj8$W|Z#*i#MZ3e!a#`z13hEPMdu%K~1Hy z@wa30%MI=6cjlyj$cla00Ue8O-r881Ok z@K{2>3?1o#(To}0rwGIfieXy?r>XDV zx!-IIm-I8OCBNs`}MxhAGQ-Wf{+)k#%Pzc!>8B*fe}2JtSXe7gK{ zlSu9^oXZ8>$r-Z%&uog+j?vk}NeWr!aH{LVz6rB!_T=}oAMkNL59HqCQ^BjJ|Mk*x z9fM<^C%uZ*&t3@X9XIO5K1XeN3&>sPx=u0YPgC2T3GrjIHhlf3CZ3`S-^mHeq)h{wWEKK4 zQ#;2K4Ub&C&>l44WFTi|<^vmuZ@p@*v7)imxxz6BHuviKKtQHH8?kzuf`nIs+-v~g z*qiT$$a#M;wvd}ZeLspeY_*ETql#kPV}xZj2_(yy0w7vu%YD2i&-*vQqXypL+;PI| z^v;`%`@4+ytS=Uz{$BBgG5_71qdN@ek+xW>S*tr6;Q5nty`iuMYmNlTW%c0s)15Q@ zP%B@1+}4zwS_;D22!zXNQfXNK56Xxsw^UfUAVsQ@JoqVCNT;?NFP*647s}u#GYL`V zwr%U1?rlNxl3O>n4I25_HdN!I^cpf))$_ym9BQAUc#%dWJ@hEW?J74fHnVRpj!WEV zEI-;}BK{+8`8P6-+SR}OwTg3i0;8(e?iuV|lP2{{Ck_Wm#YByChsA`%?9JMG627 z@6Days1W?hDc-K!`zT$d1`ofd?HyvB)ghvb|MBAbXP3QWy6gg^R|s63F(g8t7I-5| zFLu|4`5tKi!dZb5`yq$oe@zKv5^hQZB`>`<2QD0+$9|>Dg2&(rjejHk|NOn%zeKPc z-`dd5fV(Hjfu7|ae_x9vDo`1&;l00e1)l%nitRMXFoRE}ujtJB+~5~v(f#z8|4D;I zRv|V*)|OS>fULG~F+2y&T9c_34>y5j3S}DEnjnd8K|yJ-Cxb{Dn4FJI;#A7$)8Fo) z`GM&|eFMAyw88P$Wx zPa%Wf(+K+rAiYMV^iCCc{uh$&BUjhEZ@iTMqwjJImQr&T#g22~={x-qpPuHS1CO87 zHZU)bDmq#jeA$fc@Ye#)J1AUGc!Hwbp(|Ya)VQ9QlC|j<0m~4#3I{G0qdgU|HoI)_ zgGiZ>_emIW?So%`mGT!%r|2&*rFvjflVnB@*{rqFY3m}EJMts7{s{SqPsrG4jFR-5AeQ#6PUmksN>+CG!HZodo`};%uj%7s5Vfop|N}#uKiDClY2|DDG)T3(V zKkEh_B7QgjaxJQrTHDdnV)+vqngYS^ zycB}Bd=($ll&Qb7Op&pK`$*c$#3HkJEmrNQ40*$> zfH4_AT6|KH9AEpGsrT`Vi(6cXx$2QoiZPARDTuYAjTUjDoXym9BO#4GP$@IAlLdZ# zsvo9gY3abG;;zPLH@|vEKc({33uZ012*(N^w+fx!qTT8Ti+pNtlE^wd-JF7-g8wy{ z$a$R;D_QU<|0IFE1Qvc_>J}xSY`hqMrBNjE&|J^(2Jy)*%g1;}qT-lY^n2oOX{IY`#%9Ss=5>C( z8jE%4Wmd-{&Paz0$&P%g%CC29KGB6;nD56Z*H|6uiW0StTww}*sP(CFxP>H1g+^zz zntYBO%Ttr4_e5C&qHyx^2Tp|2r3twM%PF>{QvQU-Wccv%gimuP!J17A@;EMX0|j?p z&$5eP?yA#Q&%5DpG2`G;7RT*zyTQkn-8$7NihRul&<`Mj}`-+aGZUWsK&j z4XMR@ATj{8>K;H{K1(VFsLK5_S!LBe>!#)W3$bFWYVkxXJpuRf=Q0m~;#AU2)0Um9 z+I-$Sdt;O^!FQRsfSgUaayDJhMq8NQEu)5!vSyTIK}!Bx7@mHkfqdl;)b(8e*e{tb zJ__3_Wo5S@R?wmm*xJ59^&TVimTQHt@z0-a;;y7mM8$9KhWS~!IL&T7NN*O!-+6r% zXspr+m5tKwak)kCV5s%Z_=B}eu2>zhqAyM3oOaq8?P$*);f(D9cWDl%iFH_g%_HJI z@38zjjx{ehehapK(MTY85q$&uZ|c9pzY7L{kh$B~Ot!w20!yMlP{FcRFiidw8pifa zMo}Dfu>>;b_!~E1zQn zAZ*A7Ojv4l|FI=A`|MBl%_c%$mViersn&FP`56(=-hdhWDYVVIwZ`mLOrsV$ZCw)i z35S57@EiOJq{&gQ(sz9q=yd|Hj#u_nj8r4-QSC)U%pA_2et#s}ij{T?h_B(@xEtbJ z^8t3d4O#2nJBbSjm~wPN7wDTYWLc!&H{)qlxJp7*2)Vy*V(&NL)nVOTDu~UyVg#<6 ze10`{zl9~s#BHzN-L1I^w-sa%UrJqftakel{RLz$%XGFsKY z%FBl7bW>au!+2M`N9!m-oRJU zUc;5Bid2uktkU*v0ynlTuQ2e$d%}O45@8A=X{ssk=j`&7 zdxa9tmUjYWlv$-?yRZ7IjjX~_emRJ)N4IpmA@wxB3(=L|$E%@nuB( zHy`(o#i{n^f)VY_M-h+oYso3B2ps%B!6`BW13?-IK;uipv)@xA`f8FXn_*dHnK(m! zD(9RbKdUS{kOZJ#hvEp}dpo{F<}7cP)XnQ+069*+GZYRjATM-!-1=4|`r82?I+rsENLM#?jobao99dU=K8~G`T7oxbc|2Y{O>BZghMiCeI4=YFbX=2Lsq zEje$Ks&hKpGISh2C(@hcAC9s3Aq%KNzc5s&_M3f=u#Gg_asQ`Zc^jU?loKzB2o73E z8_EDfcfN#iO@zlrN}2WIHH)lCvnSa)+D9k1a?qso$;t(9#*S#|+|k$I5h%2np+X!+ z6tW!t=sA@KvkqepxqDNwv!ng|%DODlfgo2*fp#ww9JbNjrCjYhD!(tQ5D_hdzlJK< zg~brPjDw8ay&PR*9rtF#6oUPGa;bRMR;}F+(?dbyBZ|(EnrDrpnH0UX#=t# z79Jy=l0?V!zBiei-VvZ6^~s)!Hvdtub{-@Zrt$tGz8Cr-n;T?o8$hL4SdWUZt5oCn zO8|Gn6q|q`X1klI>ur|gH!U*gMag=ZagG8!wykP# z(E+&f$Z~|2f{_l{!wZH_iuv%CD%+6et04^)>8Fmcm|qytbEiQLuWg!2h>t@j%^AaQ z`q+6GL=}}~<%|%rGr25wAE~*hFma9+JBrt13B;NH;rPf*1Ql@da}!#)r|FWtSsT*A(+uvHR|cEezQ*f_I4#}nHlp^C zNH6!Et@iv*((GJNyphHc7uhR|!IP#()+5cosx<^zw}uIzTHL4E!7wR1A~1}(2~fk7 zebjaF((G0d9Af5PB^v~X$t#&K8qB?3vU`1Qp^sG8HZ3Nn zye&q0N5955ilnTGD|)2Kq<>p5MQ-%qGk%erT=^5B;K2!yA?($eyGC;1N>EINe;+P= zGGL>`nUjk*FrtP_Nx&iOI`Kls$SGXieluw$YETXhBlY`A7*HT@KCg|I%rXY3>l*{^ zuoDoy1HCOIE)~G)nYU%R@#ud?hZgcE?m&x5!bru29(ahUXfRDu|A3*4MsGA zKxXZ|#jaEEoTlTG={FXsoYQKAFS$t_RwEDvn2UN#h9VQ-Sz2Z6LszOen#3E8;p(ph z#hbH!(!^&r#JVO7EQ!^TAGD&cNZ(XPIN;j00KLhxG3qR~WFwkKCo_)cvDP$F{NID@ zkJe~29n2aL-;Bytf2wheKs|3dUcWH#CyXV_ug?%{bHroEsQj1M)`Az{mS_O%@6Y~8=e6vA`%E9b|AlG(8T9`>3-tdR^UuNl{F97?gybW0a(9gqy|kWQ`WX-W zhQ<;df6eL+MV}`|0(8bS)D7RBUx;_^2>-BNo-+S&nGwfnX2Qe8eJvs)Qlh~e-e-Du zf4}~4eYl8EDe)m0bdO8-!Hn4s^_=OWfkt@wFyI*HoJ&1EC#-Fm>=;L~O`^6APFc|@ z5&K6E8lJ-d|F*phuLLZmq@|s%_SBG&kWhK7*p1r45#L}!)t`6=@L0fq4T2AA=oYaz z)ZcP2yg9F#Sfts2(9^IHF#V2LENGHu)uyU>7dt>klK+yw*F9ivv+(J!QAy>OzEg2F)FJGKBH&mDkTqDLK|mlKNVV7KNSaqzW3FQsA{T7 zmMVRRL~{73*7=?zE#_wCr#~cW!Da~n%OG^FNh*@HnlsF>O|E%*wARxd>VmYC6C8L1 zQ&PaeoefJBKR@xC<0XbP?#$h>9LUSlefO9I-<`48oTp{?;;(oAOs@?qsHjAVZn!%9 zcSSiPVM-yn2f=&euSLNqmQ_8EoKQd;H`j;|@HAd$)R<>Soov# ziDHK|M~O9CpHRNaru$ZWR!rt>PYDudz~daJk6^-y2a}q^>U*epb zlro3=&m4*Wouic%6T5K-fQX2wt9(7<_31+08xEtk@uIu^cPPrhfyjh!xG}k`B)N=I zdbZfvy&Y9I2~tVJ7k;>5uSbsl3a`WIbO@!mte;i;^=AFA8je1Po)J06`hPgK8b$X1 z)6PNbsh|`qZN}ajCjnj!ldPNIz?d2ZXi$qPtS?&c4?<7`e`J zH^{@=d?3;*pmo(9n>ZCCg8yoF82+D#t~3KDYloiszt>a|XX_*`#uqhTBhd65>>!m} zWZ2XjmalEo`WpF%L15ikf{aA=bYDdJYb??Gg`=OF#y8ZoqEXTo9mJ=W`W8&w+459$ zWk?do4ubFy$HMw2wV`z?rz@tiqmd#J5fD&`h>#Kz5_;SmedF&_4Z1ZSALtVbNAn4{ zJTF|tW~;@;HVv0REb;E6`2b4R7u^JTlIQT!u;p z$IAn%My$n1XMv4#zZM5{vaqUdt|rbcYw5uR^Noeg*5=QBZ#w+)25^(D{wX2EmEmx0 zxGGZC`^~K_TC&SIJBOu4Al$vB`&<>le%#h1h%e)dI}a4y)ZSz$Etc5g;EQ1UFZ(j* zp7Ty8nqm9D!AAR;cmQ{O^QU(WwRKNw4*qEmT#u0+17B87LT$vBf#@N-zLz7m zN568yF1utM(OApXQoAE3)`W3LeT?nKWsDbNW;VScSJ9q2oZjf6>;`e|{~vR2*%jB) zwTHmBvEjJzM?7)ENmOJe0wa8|Zs@n@i!Dy`6s_v6ULQ~SBoa6>-AodoM z7e$H+too2#5EkZo>Jw7G&Uy5J!}p$IKN{JaTQhZ@P2 z*m0$4Efw(;tULsY zs%7KpN}}mG5r(AMDWrBlFSM~j6zV=tEh#VD=%{i{LF4(W_FDwjco%7El|vF-abF%`UL zF9d?;2hJhmO)Am|2fg;-2*@QH_5G%7A{zCRHn-J^&kj1sMX`J})A>ibBxF|wt zKD3gOqc?7s2;`-Ou|h1RGa~OVwUR=P5HsBYc+|XIP%+^am6H|^2nLtX0%Lxj*&jJ6 zbEv3Ne#*)GQT=?<@gOYXA=huP5}9Cv(e)Gxo?wOzDyn-~kA{A57ikDNA8GCmiCiP@Y$ev?5Pj zWRu>@AaK&X5G?Hu(uB98HZLaTwzB4$kPIk0F(himXJ>$#jGd;;2QGk)1|_y(Ka^?@ zaa};1UizeYXs%e9jFkal3L~5jyI6rPjuaFS74#xA^0jaAvdPf{H)?c#JIo$C{)$sE zjgA33)|cxslxE*5M@xM3*V;)4AP36H=eZrMi-;Mx{?Xd>N`dD2@?qLV40a`?3QX&h-A`H31``g# z-HR3Y>YGEsUlF!@VFwkj<`b*BOdW~jC(O4ry5TI{9{boUvVR)nPqBgb-Fc*Y+trGH z)!rnB3;v0jN9GJP*W zq_tGSqvTq_5|F5bRIZjd0+Rc$W2h8*A|X7R`@LtPN`yDG;-z&4UGLefJ`3;6vBu7~ za#CEiIlz7)AgjltcrI@r#*BhNe->5trs_$C1A-sVg1g2BjPB+;Yp^Ltc%>P8qwh97>n8sO=YBEtLZ&FyxZ-@HO@n$YpK^{hwl5ZML zuO4rAxYx&v9@*+f3V)&qJ*N~Mjh@{eLg0EGv*{JYEd8{qzE9F!Z9Bf_65z_G$1JM) zcSU@2Yf4Xwd4Nc=CA~Y4dgiqh}=byBM?HpPCgATyBK+Ey%fIB zojM2T%CcG@)N%5*2w8rYalZTJJt@_*>1PNW1q;*jeEXfx5Z#B$2*X4y_|X{(x?#`) zr^6~Vd2*hR&t+-nw9Sg)$I{5_aK*>zRzO(Ov2SSYNoZvA3(MH~6HPC!@#&jhD!`7+ zyh<|?CZ($9>DNc|sKZzSS@{k8Tu-!!oX-%ygc{9;TLd(l^cY8&5~Jp3$`6mW^k%-Z z!?0x#h2DBA#+v0j;py*;FVh>&JP*OP2|sGm6oHf@(>fZSfoN6D7to`EJmS) zR7a!8wmCXpsBG9Ys(K`;(edN;!npxl|4i0`IX6LBN=A=i67@Lzo+veH(0TT)Cbu2G zxk6ej>Ru(npkbh_fwN8H3UZa2t*|({q5BF(Wh{)N^D)T@pdBS|A6F=NzS8yNg`nq= zh?!-}vl!cvgw}A|0fV)E;%RK`y4w5|QSj5tx+ZUWR!Fp-5_JLK^e0T?_*smI=o6Ho zn_QqV2C1B&$J$!gxCl=8|BcevL`fz+!%{PkW^^52lPcuRA0n?E)SeQk6!(Ilpkt9I zxh`@5bir=S@&A#T@33%I*YDZMYfGxWxft$SE#&-prKPoI?Nc!j->`J^dpY<@L@pba z9ek=uG}aqMFvITEfM|0rfdq5AHJMSp+60GOqS&1%z3jNDuTu2)%kqUVN_ss-v*Fz( zwKHE)l?8$0OtL-G=sM=z5%8~|&A~S2>RU7x9%<|RoixB5v;L1oRdbWGa%oM=T6CVr z6T&F~@p1>ktH3?vB9GE&2t_vfkwMRq_q)3b%-^AN_&r~jF zeu>Iul=;8r*4lnu+333JhbBeRnA}B4Ynr+tfGM0mCP-!benhiQF@ffOr3#N=?z>g> zvdN;a$Zk$({Dr2--q#WMTr+Npx;K^@_9pAuQA$|HcFYh%#ALDQ%x@x#De$;y`eF|}Kv75yT@lR#Ra@#|}z z(o0P~3Sscq%VuL+>(C<*P6d54O6ENkywz=K_O8VyWx8_0bj?GbQ$?icJjMN<|2%8K zbZ#m2TF=k)B-E$xUmv@Aa`Yb+_)DM_X7z|m*I(HM398btI6S_WBkUf``q0p(OV@RX zh1i^2Y>*Vi%vWEyQ&}aXu>f6$*`;+wfBClm(NcL2sg;|NN(N)892~ckpu1He~B}|xpp?= zeG1ty_-##b`->w!tjYAZI&Nu$I|TBEW>T(%Z4)5*HGo$jp5E!?1p)21i5&%UPMDPO zviO_E5nXh{PN6)1^Q!TLahj?O;neEH+6=C&y!1F)p>&zujOjDsMp`_>_m~~>v}EBR zSPcMc<#X|zqZgcu(S=P67c{oDBhBO4082T+_BG=6Y}%X=L%6085ABqQvtqNOuQ)M6 zpqnAd+`@BP?XSgq*9NCDu2iDR&BFSlW1j+4ZV~bwU}n*u3%E6Mt*32Y_BMn-2^H@8 z{AgOrOeE?8F^>IlxYkOH=c3)9$Wr8m;-@RxyrnYKopNM!buQ*aZZ6dp3jRcDH!`%+z8-C1DI3%q`+C+N@1 z+LPcbjJ-~Alf3@SbL9<1?xy0l&QU+9GS%}EL3$Iee#@;K?3Y1mTjoBh5j>`mYpo@_+AgWkUQmx=1#0!Oee*fMw_hS#v46W7bpQF&DX6WBNl46)k#E6|Qgc)#u)yDkQ+9;!M8B`v35N0_rS(Z-9F ztV{DP@_r!eAMUsf#eeU4w#CCdzwz(;tKEc(^o~}*|BJP+%JCgP4bSKBVI~TL%+O&? z=MHO3$;-gjLelntXkOYOccdm&rLUFq^lSI@g;o3k_r&o-$HEt~JuZajXYP)_`)|J~ zI*mw>fE~2jdg%+4YL{L24U21HYEOuf7>sKk@?f;M&<&|cVIWL|-Z^i<#$R_H3GZmv zH{e5i=-Z#wp7Y&!{7zNnZeL@y#*v^RSu%>l5*w)>F9h!zrvw5g-;5h~#<8v?zW_h? zpzbyqZxtxofS{NRPj~B=bKd5bsY*(`y>MAT4D`cbJQtLh!?R?L+%G@1h4TVjGyz5} zy@g2{wOqLRjW9ekmS;p7)k!Bo=h3~p_k2Dlbm#4UVXFHtoT?IpoRwA0R_4($k~bPV zTfY2(o*4M9MM1`IeoNbq@@_O%bdkLaouWIcZ9zb@N#dl{ti9zXER$&0S=DaH91_-N zPY*uby~)i2V()t%Vqx##4Y!&TFg_<1Lk` zoR1)QTQAnjlp(cHc*h}rU($NBf7Tz5yft;FdjxYj%3YKCL0JLWGEA?#|Dbg!aO0x& z+>q2i!$@y>^c(NSp|$MX54-e5h84T)eSuEC(L<~)eFwRN10&*XBz%nBTQ;7kgFapD z3{{87STZ&5g!Fciehsj2e1Id-N4t$yCewnbm`y%X+vEXDV!eXPonEgHi4{& zGNH8cP$8|1^Nv#A4hCxyoN(gFt`1v3DPeTphHcCy76|Vlt_k8e8RffIH_mWeXM^j z5MA=Ii$85#vVDc$H*KcVFQb4q)>&83U6|J^sz4-3j#I*6@SZyu244FGRs5=Q{S+n; zwiTr87V9hPSAn7mQTzQ&%C>AEx{_p_>1~jCt!jU{T}2r8hmEopccd(PF;NJhK0$S8 z{BG}ipP}n8p6~qKG_0hN>^r(3-6MUNnej~oBh3%e9DW~#JwXWej!6satJ|rhj})EvC3Pi%71&E zu#|FYHA=P?aq=q!pqCjl+{ptshz8iv+ZTMTnzt@LXS%K~i`T3I_-N(=wB63;RX%-> zDtXy@k^nY4j<+3CXUs_5z>S4!$+7pH8j7N|?$+I-wF{_As-)uZ6e4oY%dKF+MI)fp z)gnA)LaY8z($W1P_?)fw2$*SVNp;-#q^1@ zKuJ$Be+l?-G5!{&QCLHqud3ou!%0g?8NhN%m@`Yji54uVdDsJF`|G{UB3fstfS(pK zf5M5rJe<(+e8K9Tf_#%OMNgK#%ImG>gov|NO8wa38kMZ6S`vKm7t!pv?hOLfRb}P0 z?cC!g5rOPa8wSpd(4XzV4sq}MCcCW@QK`{`KOc89dQDgA`vAq6p%d(uAu8h9?CuYG zq}&WV*!ODpE?(I#On&zIP<@2Ya$4|D24@z$&iIS)Ueo{~b0fEAhJ-S=-vwY%wUFeF zmhqg#+C(~&yP78dyT^L{Qn}NnizRN+(pW9pJOGabcVi9`T77C^$S8_7&+0ARXgEF4z}~rWJ#J6o$mMdGNO1k#f+I6mt%O_RRC) zfLec)P#$42G*}ab#!$R_`M@FSOhnqOu=*O9wEJkI_$}VtIdR5fHH@W2wDRS&|ZD((VrNvhhm|y9*MC+`5tB_=C&sygdwENnv3tp=zZwY9R zXAE9_{$8sB4>&QYdEBko>qCd7hAyk0A!O{nG{*id!qC1_bs#B4^M)x>AoyDBRA?3a zJQNe&18j+wj1943k=b`s5Jtp^@sRkadX1i ztgm+-05E_I-NDSA?{_c~Vq`)cP5rHi_stY%7@b+4TQEh#kmU28heEIj>&&>DJhUCk z6oH~ai@ihRP5K;t0{Sb+P8@@Dze_CM_ut^L`*|I9UEU2mO^2uO0-~x-Jda_eb$vszv`Uvy#6e3PtMHVmeDG2Ne9& z?qVXp_(rlAxSybAA`UYYa?t*;KKJ?IX!vnv%ZsJydti#r=C-35iTdWLO-QiDCoOlU zp<$_#r^=J@`d&3jp(28`os}V~o^AfkMYAV%={E=c5E05nfYs;~sfu9JXjQ(%!^ZvL z+zqE{|3f;Vp${Oja8%dH*=djwq5s;6stEPUI46JQmUDonGN@#Q9B3ejo>>*AIoDIK z?kOSFY8R4Fhu*x3#Uu;}oA=#XzoP+wH7t^2@eFOPqEsCU=X|*tDWh9{hNfTEP8|+^ zBmxLhsx~EfXN>9;xkL@wciT>Gy8UepV5LyKYEo7Eaup1Ij2%(-3M|IB*D%ObJ*Z$fs!GE;WU8oI%6ugBT z_>!dSS3zHWmH@4A-}Y4-D9L^INXXXPdp?%taHVoqdQaFq6MSvxCiXk`RUj4^1(hW? zsU6?93rbjv@S+ijwj5Rvw8*MdyOmD8|9-%3b-q#i==6}~&PVe>$mAV6qCfIE7s32Y z!*t^s`7$8mGedIc7`rH~kM=zUgr0vopY1i8hu+=B^ZeAk+4NMrTR*ebBX%jDx9zxJ zUqiB#J_6F}R^_AKyq+8~=52rdwu!9Syl-t{!{m~<{rZVNmp7Ifia%>BK-8)4zbPcjF8=Ks|VdVECqDSll;hmp? zfk}DZPoH;f;i1KNs8eB2)kN!0g{JD7_cxIF`lD%Z^7mEi9X=B5 z?%7i%jK8dB7*TK|4y!rF@R#u!a>)b&oL+gWYrS=4#Xt6Q-Fr?ZM6XAK`KTsJLg zsngrHa+8Q=+Ok6*=9=tz&-V%*_VDpMGRmBR0T$3R*OJNf;K|Y%>bsUYgn&j zjPp)A*g>uwTe41Cqn@^StHV=j#apg`;lTGy{_=j?jDR!#Di6nx&@UF~el*iE`r5rW zDvX8wwCwaaX%yq{pt~}^-d)o4(YFSfM2RWcfX^rFzF%m)wK_Ny{%GrIl`ONW^QXvz zs)6HlYSGd$ntTP;GfcHT_<8d?RkpHZzo*B&yr9#P=daFFxjk4hI$Bnz5FVx26vCD+h2} z*OdGEu7emI2F>BhY1Z7nMWnf+H%bi2o^Q=cXQ6>Es;pXTzmgiT*jrd(Z_~yDCAQ7Z zeCN!Z!6BL@-}5ES{L4QFxJdMW4sh?zG%k;9v6Rib-l}|uR5^!ka>R&r z;-}FyMck?x0|oQq5`5wX`|;cdVgNa6ItXHt`a;fRf1HhEaF2*~d>#cS;}?)#2GM@$h4<0F zPmk9oF5()4{z6#`d+*Z=?)Wu2F~;$P80gnu()*_uUQWShS~(Ou!UDuxw`ZPn?<*J# zbzsrGc_{tk!BX-mwqcw7CR;3v+dlES=??-eecfue7IxHt_Wva!Ixa8&HR0`pp{b)| z;(CjP#+|Pu2=9p=cmLskCQ1F*4F+8zbZ`DyDN?`1zjpZl{q^r4Y?3Ha@L#t;cafmr zA2<5H5B$#%F@bM3`JY+-x#%-M7bx*xw?Nq@K;oax|L^B=*bP1enx~9CvWJi`9hczz zuYZLN+H?cWtrF*k1vzGBq!cHL>zi}Zm|trZBeR$XYNH-E%;_Vaw4f8$nRt6=G&l3@ z?e8Zg{ukYNS;37B1WI6Lj$f{MS6$y7S6%NN+h4717NmYm;b_Y@IGi!G$Qa^Kw0ZfR zHZ=j&19LtT5fP!FqdD7K26+cU(Z&8lDo_(?F)OcU3-YoJMI}g@9bV{zA&I(I!te<< zct7rRV!0$a9-T_a5nsI6u9R$LEKoDUnG~p!ui?;@b@Sq&Cush2UIA|H9bH{E<+;o;DLqY0=E&CeEhe?S zZc;H^O4NenG~)1Y_AJr&06Q=5#*CFwwBnsYs6VrJ5$D~$tFdYBzcwK;(Zvf9Zj7ZB zeTMI8_I*pDa<5*{+&xPjoOA6CbSg0M4SE2-#rw1W7TXbJS~e;jPkw(nGMYZ?E%-^i zVxPIOa0tj0@=gWJ3(>W(=C@=qADzAh0pAZj+XQW!z1V;J9@kuZE2}b5Zzx_KyQARZ zUf&>%T`~SzZea0T^3os9SvX(IwI&zz_;K9FBfhRg!Qn2Qz9#G1CYHu|$NmjAG(}t9*|!OB1wzpV-7YKacuf81N7+e41I7o#pj?2eSY6qr$bD z-njbK;djZ6Tt5Bzg2DgY4FRThar6!;$?bhiLt&qzRY2lus_H`hC3RtwFghE!qha6C z?cS~})~I21@hA+u`gRxf^-_9qb@AI?RQ!KvTGi_kZtRQ&8C-RRZctYsolXW1f|IXf ze7~8EG#!f=YR0tlx%O`2tmu}ZQ~*BEn9q(>s|77;y#EB-Zc8glQ_<5C+$Z=C8Tfic zYBgFpy)wM}aOk{LSh#1D=3Dz*OS06LpV#W{cg1#?$wb?v*R|&XELqIh!83{ntZ&Kw z?ZjWyzjH{3hX)b8Ms&V}I$}fjNbf1g!!Y{l;R5!Iz)T{cU&6U} z#q=KVY9 zc>RS$7+U%7;gfT&HCM-wA_(ngy7e~JxvgWLz4?Tr*P>yUYGR=?$Sc64(RvkFwW!3N zIUc^=$I+-8yvoB84^WGmny*qW?)X!oNcl}S#T|?|^Gl>^yWGd|X2?yw6CE^$C?e3kLYVZa)|9GEA^i6`J zx4^Y|C>ffAlv)%`Uk5q6V=9tZ-_Rgo_vpA1)m?U}&?6z@1gBYmoHE|`I>)ZkW|C#p zwc-?F2B+q1*yq+?2+%4+UMQUYYNQ=%ejwFtXxu9)ajrj8hcdf_JQPCe|4@;|tqKYu zMnH`Z4@s|R=T?O?oTipGw2^5~gS-Ej@-~&%9i({C%%T#zx5_`k{`KDd;%H@dV$HmK zGQ@pNFb3q!hCz-I1lJlrOPM^xZbtkT(8-tdR%k@gn8w^Z4)ov7@HvNHTbXsQiieZW zdNsHJm)KhwxMQB$DE@o2QudH81zx$yZXkiKv-AKNM zbv`UtT}b?X@=N%7NdXmG|M~9Yr|Z0=;i6+!!zEN;D%e~6qK}KYAE@Toi|!5Y7FP8N z>HF{jbuM0J*91bXt=2cY4<@!Q;fxw~hNn65RVT*vtz!<^eCm$OEmgo%%CT&?ukvy= zgC|(3Pt5{4Pq#V^EQ+7GXGu7-Qj(_~sB@zF>xja0=VaW{*f-hnp+DB%c z9Mrdd)H$whZo6Kw{qKbfv#R_X`cm_pf*ac#M$@rw9gSrIXmX3_43kAq32{Ph9eKQi z!W*^J_rVKm8_mm%^#37WlEQx@=%rT_sOc56pXX8<55_-}A4_m`1IPLf8QB+Jq{x1Jqe_hC=oIliwaE+%k(Cw}K9obXqq zc(6$G@RyxWH!t=NKXnC#?iaSwrgac^n%gsF_}ZS3nJ=J%U}C$D1W zW^FnJ!Tmt%oY2dkVviM(SIaAA*W!seZ@lhve%?aQ#xlgqOBOyhvJ~iBJ~cHXbJxl5 zB=M`1yEQ&){7Vb!-uEAr4Zs@WzDdt1`|huo>o#HhH<_mmoMKO{UzbNF4BkBBS*o^D zvlHgm8&9^S6N`B5wF!jXA1%sp9DTNQ?ZThmol`nZZ6jMkhZ_eGv_QDRn`FoP7s z)TXj)dVv?`vg6@76a$x7TuzGa?+y@EAtzfc-G?Ye>d7U5UiN!!2Yo>JXN+7s*2vrB zN@t{)6VnHshFX4LR>Pku3X|{*Gqg}XI=(k%#pR)=|!Cl8I6tf zbHIca8dMNY$na6=(7E{)h}XbhY4y|m*b*+fK+C~*f{o2-)kCImFEI1bi6&*y(A$G2 z{07mtFTUWWzfYhlzGF(|5~8}>JU-L!qT*jEp%X(R#Z4i2&)*L%t<7Ba!0Q4o=2MbH zLaaI*RmiJJ^1hABCGP%p zEKh=Cc=?b}&tzYf+p1Cg5zPf1l#(>jdr9xOuE8wyk6PMM{(n#2VCJohvL-N{kH)_08X_4{f3->ENy>YN;((ntx(Ru3uWSu=MJ zmVw(j{?2eS$GE(ndsCF#b+K5PKA1yaJp5udTWxn5nY&awf7w;q)Uk2MSa>FwORmg~U(S3-9Irh`18gX^bO%_{re|T%v5ckyI9Ul8)eAIvG`v;0;JahFb>_rrL z=z9?##ZJI0oSuK}CR|D`FBh5nk^noXLqrj0OV|C{)0%l1YoP}F#@gQDqpgkWYTFT+ z_~TPsV7k`&BhyhjuYr!NOYyFgKua=6(%-Uu!N}b^VejIvuRfTT8F=@_uP$y2YfHxY zjUg!R$R|uJj@!eomFWVX{7OQbE40q=KVq3{3~(O1(3mG=O%5J7Us1SqYZjCLO+KC& z6?UcL>(s2kUuRj{kTpI>UYyMxDNJo^-)(v1>C^jK+VXCyzgr7Rta}iHRbfsE_nz#w z%}F{-9U#&eQT6invRX zLSlV>lob%wB{-jic~0nPK(o-L4`X%ybrt6@Gao0_$O}^ zm>EFidF?+`#EhopW)V{%@P!5}C8Ourwj^I{QM=?yH%6S4*}>0b!T3e?sS_o5%* zTMqTeD+B`Lbj95w`6eqYWx18tlbJcPWmMffL90|dcgC%+wtaqu%2Y7DuFctgUXrlL zqbN#oo4r*gG<`u*Zou}>r_Nhgs5oL7YlSL(nC0@*4gzpG5Qa4B&+x4#LoT~-)D->` zZ~RPw^dR)bU{TnQgvQU1fdJjg9M%|-W2C|y+E&5xND~mVmm81Ea`}ka7CxGrLHys7 zUItvA>~;@a!V0p-43t-tt-?|T5~7JyF$i&ueU2>kRPkrtsn`T75rRX>sI>y|1N!GFI>}at!!N@x(swP3 zf;9#;FMOUe+N6iEdd1+1Q&|ng`(abo_CU`CoagBnonl7^J*`k&uR(-J8n)kh8Ht0} zZ{?-b(^$JrlvmWpWg$|kbJAMLPHBy#pu6#q4xhUi5wceFp^5F0Q&Q3@VR_}0de>d{ z)1v!7jY}Z6P0l(f1tD{c>H6 zYT@CFNmwl88EhR%jBShY4oDM;Y2zONx>B)CL~ zE)g_B{+f)0;ey3N1$*HwG{@_2ulqIicIsEcts0Lvkb3vF>4Qnk`9?fX{!~dVKMI4| zktM9>+37@AsTanCx%HXsMfLRNC;o;`pmK?+@b2xkK&ySYt*P~wQy)Rafb`$mYyS6a z;WhLWWAdQvCMdRC@;{o@G-<`Z4h7+F!lfdVs8P?Tsx8SJ22-f8Cs(nKR5>hpgEiqC zvAAbELVxZW8kvH=AR`c1)@>1cYg?t18aXo6hE3=Aw357PL4+=L*g zKJT$0^i{(gd9~uvqxmsDRew|nqy9{4+srkoGzJNCrTy|&VZ&{WPKOBj#$vZmE+V+neml?E2775Qd^>JFfvwyqWL3bx{ zH0(5^WuR$&`KzrnJWfrvhbN75$w7y?p{-mD`yW+VEi1mX%{1)QEYsT7(19muZg;oT zLmL{1Y%!^{wwnM}EsJ1!5tu_Zv4Y2MQ!8tr%uixZs zt+-!bz`87|0c9#<{j01Vw|?bXpQ+j;C5(|WugRF`O}N=ugZBu-VbX}$qs>IjjCNvB z71R5IK;r$d!Ncv(jM3#S6g`~92hXrwqcm)=Tn%%Cy>DB>5w<F14{ zJB%kt_`&mOGezy|YIW44M)Nwan70CTa5F*So(nrO(%qDyz(-}_{IiF+#F?(0K=Rsx z1VqHaf=1rIS?@KkhC@>E_T7PBQhuIHqxhZ%y8NkE$-t|cExpO7p%HU6vPyr8F(QnJ zY)bf~Xm=PCR-%Dl*(Msr3uiy!!qCT6%MOq-v&G^P-6{{iaVHs@TK*%dF^|ye+U}wr zL&4(cm>Y?rzJpO=>n&>|Fm_ge_+6)^^m7~@nVh>?q?5g=i$eLkWr!UV4e#|M|8_3| zx?Iug4-v|-F!)EKATb(ciqIQve;?gi#t2QBjv`LW->JCav5D?e-vo+BMhc{lkf-aN zcd(?JeGliW|GybTbp{ir;B}tfHeMYLy z7hjdm&-aX{2DNd@t3S*3zlyBTuKG&R9nH05U^|1rcc;KroJM9bf)bOAamZ`3~nGEkW&26Gfh>zZ4{b&me(Scl>!{}c&2eP>8d zy}xR3%}#miFx_yT%$@p>?X)G|F>Vwo)k9qFh=8~q;7EMW6>6Biw~Ub~NYeXbLA{X* zy$G}>BX#UY&HI9t;V{DZT^;L{v+Bc8~n?(^qqU48Nv+YFF^ ze%tFF>thuU$^{Z#zQKBf3>q09a6zp6QlRZ_+rXiZCTJmD7{lek`O;U^=c{1z-KN#J zel>Njs;QTGK=xMyiVx*A9N@0$VNhHjF3IqQ7;>?jxI>+oh8MQP`qQVnFtVtLh%c90 z;&!;q;a|0PjqI_~y7L~iHH~ZyqlLvx z1kLBRgiw#D!f6l%-mYBnLY_nXf}WnRNOB}cn!>DfR1w)Z8u7bVZC7&-HV#pdgvLgBrPF9H)HHq>#meR^3 z?F?O3;c^BE2lhzV|EL6L7?REHsi$TvZs4ZLh9WeP!pBk2tuC1h0wZivNrVTauRl#ciz~Ix8_STK8>1gqa_b72g=EAs!r`GgZnjY( zx)4LhA#li-~C!yloMpB z)fu~Tk;jIdl!&2aJiN}Q3>v2tL+83!`x7C9O<&TVO6VfMJ1cwwD%a;VRO9{0NMR!SEtNn?-MAI>2X_XIXC)-5_oB`*&9D3q)q3B=PK*YUAr&Shu?RP3`zVc7||qz zD5(P`(s^;M_=jpzBpA1=gr&m1Hiukb9)1+S|35GfPwsl^XyAnoxj%lY_Qx|J1H&=E=NaJs^84#&ew`NO?I}8_L&>-K|8+;9 zq)$E3SBOVl0|zj!*FG<)JQ0+7lLdTRWzC5X6}tBD1w0};OUN`fNee2MS6sK<+*1dR zmY}5fugMrQ`}ZYLJ*x7S-*7uFPbL2HV`ra}@%v-Of;*Vg@A~ui2?JnNTOw?TK2t~R zL;Nhp_pMbv+r_?QhsdhP~8f8X?Qe} z6&iB0`xCxeBP{M5k7a?js6w_qH7gvkt;dVCFrspA`@;GnP?80ZmJNflwmGLQv@R1=}RI?@ubZS zd8?K4IRy~pG)tN!e};^iAVd-yTQ_CDTx5ui&_)Pbra)o5f&gQOyg;B6%nZ?djazJ? zjg)BtAfZbZ2;t2&K<=ZBP(|pllj+Wx2b>hQ%9hBVR3IEU#YgY@c?{ew1@FFJZR~4_LH~-RaoWq*eho0#5h(@XrV4 zDs0Bxxe>=W&InvdF;cB?kfhl%qIvf?46C5=W5kfPx64`~>n z+S<;i!<_HxUGe#SjRX=e0~i;I03@5Oso1l{qs}JQ69kh3;l>2TaY21voNTni6n}bR zFA~WKBCYRHO2Y+pzOGhn;$w%(%dz878kaVqLsPz|-QkZSqN(V~Q^=e3{0U=v(u=E8s%m;j7+;08Cm+MBDU{41{B8^x0Rp59#t5lfNftiL6zc0 zp(R{?B;oag*NwuWCR)NZ>{Gm%yirN+gidW|X#zC(*-c_%L!zhnZUQfk&bQ=cRw+Zo zFki(;bnx6tT{(9KtVCCOW~5{hH-_(7HV%|4(`L09318V8f??xb%CHy7!gk$yDsvzU zk7!P*cr+Yru1K^sZlKM=8GK!#=&T$mRz9@jd;R`Cfj|Xi_d7WytH~$}J=}X%n60vs zhL_WNuZ;~%v5ux45_5yC_+U!D)#-ABf+w&EZoINVDhHn~t(@5zhQ zwA>RZ@}2Sq%KBoyZQtF(BApU8bRBvgo*(nUMZZKySI!^z$%;y}E!&SpO(tSRIgcU$ ze3Pga(^Poc@stM5--x2-xIlIp5mAv1m*|Ze1S|{`5A!vgt5r1f+o+f>(Mp<4I$vYX zm-}wQ4%7UQrhPnlp0aTtgvT@F+#{bGsKvB+RcRm)O~Mj#+U$%<)Rvmh$u!~}m<~?# z7EJ}8?t7~oh9@yqMNOhmqa4u{3SB#ILpd#R58IODH>O-TkFBi3&vf`;No34?Y=Z>y zLSB|zHEIA;w)Vz&QcknHfGnIs&lZfVbrJ6nT2OF>DYWup=Fh0@IsTLB{KxhhD%5m~ zfm{q%5q>H_wABidpmYeag@oKh!{8yh6hTl@GPa7ZB8Z83C(6WnXtuvw`8IMxV z4lY3-&?{%n0RAu@Pp^=~G;*8GQM=uSV2e9*+`4tcJVTHn{t%AxM0-3KeoNIP669g5 zhZ{n#fbH5_m6mnOS3#Yal|?O*S7VBe0$4Q=jqinT^BabhrF48T?vx<8G;L%K_ku!w z?_8duU~iec3$J%>NT?YiY}%O<3t9CM06hapl}TM92Z_X`I*oM_$Ic8fz?eP=R$fxx z9&pMb{jn*i*m21l@=9a4Wv@6?uzVXkxW&=?%3MqoLcX8q?prz3WZiOw#`n6##LQGz zfe=GKPB+NfPI+GNTN}|Pk-^|(ALSDxpt{ql_gl^X;q9%W;(E5W-+zJ!cXtcHfZt=3guL>gPf}8K^PM6zkq_O~tM1VceVyx#@(;9l;yQ>Amti>sD~a@v`!!&m$A2aAjE$#G|LElx3pO9I637{w zzn`qJT_8IeFW1CEv1hOFl-Z;_P|&#azcAIrP=OKcxddoDkTFpI_U51e5xV6LbUB6x z*l)e<5FPh2=1`BfHj8Z4*Gy41vwQVPmpRE|H!f4>Pnz&;q(RThDY=ED{&*{of*Yz8 z=r`q4K>imfrb(4(o?Q(?bnqjWYAkk!@ab37LqvEOZmCX;K;gQqM`{L#3(MaTz@<>= z;~6*(7WT_SZ3XETl>>)~cT-T@g!V{a!;Hw{p#LZS{6xy&wDKf&w@KUEM0foXZnY67 z`rWyC@10)virbiVf$-lQD*Z0XVajhNzqJh}3dEa!wDLn&3B;@?W->9iA99yw2h+d> zh1wXc@oy8*bcMoHF-x^z+B8RsxEo;Sq8*j@36?VQcKr5AN<ohchrHMr7OcfHeSMOr9ZCwTV#cu^;&Shla3s*gnV88TC{gGL-!j)|ye94esHdJpb z9TJ`BJQii^nA7zg5W7~S6;;zJDEl*;);hR7Y6YY3`71LgLwoi++AM}kYcFBhF%eC0 zyE_RIUrXg%ZBts_LsD-Yn_zE!F0H05g$f&{S-u~l4F+EZP!e@#2IJh^g+7Vv`ik|B zcJzwO_vghYKY0^ex#K$B%!pKs*r!o}@}j4&WGMc?mC?uUGsyDH;>G%uLwTWh1A?nhp}Q&EFSjXidtV0ugs$o`y0X^;OK!Y%Uc2k zun2R8k86gclAnF~4jRW+%31=;pYs~m3@N6ReHQc;f)=s6i@WG_X-nxvez2n^E5`~r zL64B<8d^V1b2g!iJmZ|ZtR5J`ir{A+39$LofzHjNm(}K>Ndbp`J(%C6;*EXW_fW+X zc2$lD{}qyfqpv+WmOS(%^XM=2>*a6?%5i;eUg`$w>E6*O%Jc*6IH%INN@9z6YD8q? z(cg><&kjp3%TeyTRV3DOsBsCCswaOL7||gWP@jK~uFT5hBd=#!#qshDtS{XrnK5B! zN@3kWo4{b|jsI(eza-)yu_$~*%tn=A_7qvSmcGk{JKfk&|H8_Pfjc1`&ZL1Di(?t( z!=JIc(ZV~m4b(~jBXp?$s>=UEax=;iJsU^N_WJCdE=F&ycwm32A>5(0-txoS+q*dS zk^nR9c^BwB`Eq+#!L?QH#N1&m|C&cjYG%-QzEHD?HQP^RQ)OkDfBcR)zNWn5uL4ig z?8YvWgO)x$G2tr8i0IxYh~LO_T=tyU(NV)co=7@Vbj__5L3t;$;+haUlq=wrm51M9yNIsodE1NJi~xw?MV^@f+sBrJo7p z))P#47JhO;jX!tLk|Hi)`#Cb>hCNj2v7a94y7295os-@|XdJ>1@&*M(zCcX_EoxG+ zJRMh7p#0McA2RIKVRtP-&YnI=%O;s|`#1;L;enN`e@00kgcs*ed8Ssr1AhcH+lf)@ zpQ(nkwyKa!@H0>4)l`{Sx1fMXjj{;L`RWI(0vT~h2r?-`(hUShcaTOrR_KMsqM$I5 zm5xGN6e0Jfm|gf+*-t+@01ipNklC}(@6!FlTcu0YTD@N)03x{lh{pG=v zW1qz;j>9;NCMv6{)(Jh2(VfMj0}TF2=^&q3*PGl0(0uWf(`TpTkARaCCicXwfJMpG z2IvZ)?jbR5N;du#=eY6(wvKI7)}NJ=oTuk#pO4!qM@;*9qtT-=3S`#^K4skUVPmL- z6;~oi_Kp$f<#8~st6+nHW%e)gobQ(ZadmXO2&w-xK^a{d2_Sc;%;+K{p!{^y&0?O? zc!#oc^zGsJy!T_5N$6&pO`CX_3Y+nl9B3cQ>+C`W((p(j>u_YFO5ngYlOYITsA*)xF6&rCaeW{EhjikVLN1#K_L-l7eNxL#oOqn0Q~ zsl0WS{nsg;(r>lVJl!=ST+VX_k+$m5tedZ;pWk*w`Dp}NNOx36o;*bMpCfLW%t%>I z9gE{^)s?{BoFcmd${u3`Pc}DC+Bx-ee4x??#7$-7PQ|F>BP@W_Jnr5pF5!zdkZTqD zynqWWf5Zt+p8sv0+L|OBB#ZXT4FE-nd^`GCc%jWePhwFG*vpJ#(8#jDjZRCdU9p0| zuqIW%?j|!o$7y@YVWyW<_e#q!g>O*y4(IuK|7=xuT=N?bD7un8ab5C#Rm2apSS}A2 z5bN^pTqdf&narRLPj^qhDQvn~Jc&Z*IR33`NX8^|%sT*H!rR`9ZSv)3Yw}4a<$iAc zZj+i_iSj{X$_d0sGCF`ieKKV2)kZ!pj-L#8tI+p&Ma=a94gc>B=g<0O{y|d%qk=k) zG~0P>g|~$2$;<2~A-TnK5+LEjbBXw{sZNmn}sK7=0eXDMGd z5_(HMOxL@^nu~7kE#~JFn~~2NHy@)| zjJ$+}rs}O*F-BgQH)RfAclTAWx^{o^gn%XQe7z$6w)}+g)Oj1Z(Wa^zE&3a-_B}Ei%r%ux{Ns|C@%TihRRVa2d`F-=GqiumfxkBjXY+S{<-E1(H*NXF%Pl+Thr$(U0&gV~FRi=;pp^JF5+oo;onJ*I(X!Le_l#I1{~#z7mC1&3{S%XPGkg%#Y%Mq}Ls6 ztKR6T+*1ZD$XWj*+>!2!q=md77ndcTm+n0>yJ1hMYV(8)MIskoGUyu|4t{YDqv2}$ zWs`2AJJTbcD1Efa6f-m-wLK}2@jV{E4uyJ^r0~9j#oiLeZc!5|6^h-utS-@IIglBf zmO%@BW#}uBA~RmGjuyz*6;koGe473-81*)HRzt{6y6zVlfjgKUZ-BCY0cKCBE3=$; zyxyqbABQ0n_4-$me|IBooY{i}D+i&>hl`&Jd4t1b&q2JXpVGwzyFrlcf4Wab4P-)O z`FO>CkC6XsTghEx*eZGX5m}P_@d&xG!bH0v%KM&oEt-8B*M35XJ$K?ofe7to6|@R6 zW6wxF!2XT&p~2azNWt{d62BS9nNx9;+)K^&=c}^lV~?q;Y=*$3qUQ>xs zNj;oL)!rI~t-+qZe|zH^O#RBaf2G-s?&lB(YW*Br-Aw3O|D|{h$5$>$fakIOYHcNP z2-Jbl=~GsxtqD-S(V;`4dfjk+L(-Oq2d4nXpgq7;o@8{&4{y&uzchp>^=Re&dxD)E z1v{TA!TmEcEr|^wu*-=o-7BCvkpSrg0MggK$ztQ+&c_;It{FpL3+eGPe?@Q7IS)4I z;e+EK;gYoIt$sA0B|9nrpKwX!RcZj*NtK~nIj8jOED@O`TtPl$PS>@3>blgeb8jOP z>%YusYKepG3oDt#5CLpnxmjx4OxhZvR|2}Y68on71U{WN>c`UFE$Y- z@Lub+=ZY4VnvS=<@!iUZDuaQues?h3OuYm<<1!4Q>pruG8{YYKfAWduyP;WXX!c6D z+eW{Z`rdKjkfWZ-lY>NqmiZMF#*M2tbcM^r)Sj(S6Z>c@vu$bF7I^$OQ{P3c)b2Br z;Ix8jGoKKc(rGJ#GQ96`1iH08Ug#j20&`~VQqy0)xU1SA(vrC?N?T3&L6Gf*T=UmZXbz9nuo5mjWw!Zq=Reea_(I06y; zb%G^Y%sDs1LB6B_oR04dZYmmLvAAI#*mRaoiX17_e52*L#~*0n>6sj}|JlV=k37|A zmGE-TXPE8RVS!NzYvYMZly_UD>pKDQ%WpI!6sAL5<(3}>y9uUm-!QV39emese8Rsy zc|yFl$qaR0ZNC}bG?fR^7?A`~p+9*;{|grBpzoN(pV%Ij$I?2<`cW4kD2 ze*5Qd&9{#0=?iUpPJ3~P9>h*u9kum(2k3U0o00PH!K<8P&&g72S3L_Yy;0urMX7j_ zL#3m|9UsF{=U?9z`9n43=*bz1fLWOrsX*KIZ!6u|KD@7_zhszO#gxPDSbwLoD32LQgKYQOC3DA*nybq5W}dX3p2=n>+;<=4w%BKOV*WwJ;`wy)JjX z?OwWlZ(HfGHqC(HB6N=I;RxzyFEMrmm$NHR4p@*~uKJp?X>?FE2ys)bdsB_B+5{ z9@~NT)Rb-SWqAd@`@iSVBfVp#4CbkzDQXB}{TyqAW%_ zHvIc!U+nl>PTjA(AQRt{J2Mfey%`N|3bacM#<_eX%Y4gt@$U4M-nZ5JF#GF=_*?5$ zpBGtH%%E#wawJ$nKJn(3$MWBb=$oslmuh=MDr4JR7ln7azG4 zJ2umYz4#SGgch_x>63Sqm@vf}_pi*A-w#hWB5c#mTJ>AKf9JoY{w4Od_D>~j+PgO#;RnRz zZVWi{A()IqE+(-{Qatb6FOHuOwEZfV--fXgp=cl$c=Mo<1?tfCW#9NXE(id6{gR#| zT~Q0p=G>(ytch`)MoszhmZ&q6)OtdGXpZ!Pbo8L()6#UvuQQv%GYdxMvC)}OPdE{+C5JMzAf%(u*4mpOM*CcXd#5@lxWLLxuB zijVvGM=$ln|1F*O@4D{B&M?SFExoZac@@-o1h8=oloGkPQ8jdnn8e?xD= zB~!V!-pC)?8N%bMFhXm&`B_=Pn7a||e~K-c#_khW(q$G)O8F8Ny%EbSoCZ=f94cjCce@ay!~$3PIU&KW-{W2er%Omu=E?c?F8t}*Ze!i zy<#%{|C{(zR5WsWnPt1zMQ8}yGvQ|n-my-Mq0VOm#Ik4|+kor#kz}hkTI#c2*i&XI zZ6tMLzoz%;a*W%-o|r60rs`G$Eo7>(?PJTmkoRq)MX=TGpkgAST!oFUdEkbaDTk`A zu|20-&uhz5!QDl3*S9H*&s*-tgwiz)4J=K95k`nVkr4Q+t;TuQA-|)&-sltF6tAdG zmy?OzQ#;k^{qNC3*zq~Z6C$DxUvX+a7=-NbaQoB;TnOqkn+}1Vn%J&g3M;i_HDAD^ z^B2LgpUD3}Z(i`Z^C-3_w(m(*C@Xum0aBamARMYNt0w{z?SMn~b0)0i69B{s`(k6q2f2%exoN9k{%Gdi=WJ@BfAt$$DZ&^bA+%=!y^L1!Ga)1ez)j zQ53?T4{WlZRH%I(kUso*LUQnCJ`5q61e zdB7)I%`mpiN8XY?7>NpU9WJ&9`B4UM#!|n~!T-Vkh?kQ(OvtmyoLy&Et3R!{$2}iN z^gcULZgY#HvXOr?_HfSxOz&cb-#<$u9%4Is_+M}`+TUxdz>gc}(pgUL{+{m(Kra<fxR+75Fq_{)3T?P#@|$_{>@I{6+cMNc9n6H1^o6 zJ!-RzFg%7;ujR({EY?xgU3M=|6LRCKiB;*jOo}A>KB#DTEE@hE*ljnuXx*^Ck=U=V z6Oc?^gk*KnH(nDg`*?5pLNeX0*RTf8yNpB&DB;?%$Gb@gK11(Wym=h|O_MdNZs#Xi zfc)8w6dK#!xY$^16Zcbt=2C6;D9Ss>j`5~g$OIc2CCPFOlm6e%PFv+{8;Qa@g8vgv z7|yTHkU@F}TtI)$w8wo0JV>0ZKgX(YKSTVvpN$}fPhFOHkSXgFp{LKGCaEWjZ>Ub} zTD+%K_gP}NX20ir{|8*5x7XKTM`+xUwt>eVo#D68F|Mz8W^uGubh-h_7?d3v|`hRlI|2`eNT3lT- zw{%TCiKhPF&HvY({{JJ1|6eWs2Y`PU^@2kFC#?Vfzc~Q+YM!;hVwbf`V5{6RTtuyw zeMYe5qtjNNL&$%Bu+*qjhY7dJ6DK>XXd(F5{cnqt9>JsBs<^N_p z5W!8(J(_o*H=WKi6*QE+zR6yxq_bl5QoEU_v$0DrT!2c=_Pebd_@3bfoqeFWpA#gC zKC<+;UNp9~PjWeZM{~I6$J?k2T2Kse6qtsK1TbIb|BDJHfP1ELv<1zk>u0 zL^Re)&AoSR>5Xl>-SKhRx2dW;a(>e<@H>smkANd3s9^c!?80+4ANMYDRow!4UpUCA zP!Di)**mvM)+h8Fpww~%7eQMvFmC0^N;JAHPy;Caha*G8ct)zlgjaOc#p;~*8U*qO z#6Nx>i(Q8(^3U05uqV-;uX%gSRB(@bI#*vOu7H?4b?qO*1sNG3{QS?Zd3rDE#kry} z;SEF|8g=!44V^N0E@4~UMFq^JiajGH1%B~!#Poii2#6xqHXztBA^Lbw%;oecuVG z`gHk$F^usPq~MwcmJ8dMvX)@^^_*^B|GUSB%YRX`Xxo{Y-yN)@+fCmYz)@9PfB}Pr zEyXA)Le$RX^W4JUCsxd3cFjB~cHJWR`K-W^QS~@x56PoD7#AbaJazS5lP7|=ZtUXW zgGXQVSR@*7$)N)My(6!EwYf9udlro!C*PaXq`Nhmn;IX<%U1Cl&gs}h_K(b9DJkh? ziMf!)mtz)5YQmndu`W-i3D~Cin)((+aVtxgU9mE*gVk$QqTe^*9eM8*5c6bm#5Tlj zXh|w*3bU{XHp5AIhEOkOyT~G}g*q8n>fKTFpd$i7rgjWt!GY{+4Rvso2(?_|63Ed| zjGeJUR@Ffa!DgQ~wbzsIPA9A02=&GYD%{Hy8FbJ6#eAgcHP|r(Mp(q$sVr z7P4YQz-1h2MpAunS!+DA1o0sECd{#`jf*xEfs~Jte#M8cK?wcW9K0s}>zI*zCT5*JieqJ@fa` z>cpBZg(q6AiDM?#+iE{LEi2ju71_TIHsGH17XA1fnr>ctbKpm#U4EwK_LzVOZB_a+N%t9xw&`&3x+06E>o zX<%$NlB#O-Ch-&79BDJ<6AkF`ka<({_4)1jALuR?DobC6ZtX=L-gM_3ja;AxI(BrP zn^kslfS*H~E6wGfe_s2WFA8t&&xH7KIRY|@7H-NBh$8NAjHf$a@4vt;RLhkQI>g?& z)0F&EM9T*L@~$)FBhg40N#=G(LFIap@|J<=A^+e!pV%&xlx&{DB2LN}vs~O5dFk;1 zLZo(M**i94{_zp=b?lggzH(v+8EW)!Ca}S$Q`*Q;U6>Z@2I0*0YojcSgV8sCFVq;~ zEG=uQVzL(A$mUWNB1~($zoafmw34rquUa_Q2T%QC`e1JE8^EFFp^-|cl==HZL~5TR zH?j2r(@xac=4O=yFQwoG>gS~OYqS_OK^1Kv3UOZ`1M?8-t?k9zA+Xt% zi1=3kCr#syhPv)pd+hnrMYTX?#BW8}r2L|^at1EC)M2p5`L>tj@s}-xlBmfgYM%hd z+IoUZ8O-a?)+=Nnu7~W~NRE8}?_WUxom~eTtYYk*5m1ovg^6wnA6vxK?gIx<=GDns z6%$u!%#%n>x2nk8dINof&leELD?u(BLnftxhwYR&ImK^YBD&St+w8V1Y^bCIq$)bL z(fwVqwO0a=Z2FQeiCE7~wV60}cJv9aYZASi?)7*o_)7!Q6YCD2L&E|iHmbsC%_pks z`mDMgg_8v_^+uchPF|-^-7l<~w={(-tSZ`pQ!h5wKTL3yG={w7*X~e$Ut!C5G}3%_ z@CgH*x3j16rnqE)Bpl=-ujo9QbR0c4N&#Il^{4ucELt73Uy)X#lRtm+AT(IV)3-JUhqIdKh!gkk^RTtU zs1jkpOBp(ZK*%C5a&pI@u=VM)K#A5SeWT#VrEo(1%1PGd_TfhgB++Ij8QW+Un!L#62Q-zup5BtI;+~>*{RtA?>NhwkgFp}M_+Fhpl2w5@ z1xuA`?%{fA0tagoO{sEhp8md61LpacBY-DO+s=jwj3hUd(2MWgwC<%80wgsAl zGc0vrkg)62#FitqgSt0v!2v8Dps8(tWzgWElV#Pnhpl(`X&7_VIO~2K^F@%eU|?48 zCn6X4h;@*$(e%fwhOnw5=MR=`RC4oqol%K(*;@&&%?v6V=FQa8OW3T^Ok4Fob}>&Y z@3D-cXR$KW`Z-oT8F=8{D@wF@z9r(JPFvdYQ~IXCo1f}>0ufYppeuGRIP%m38hOgN z>5r_;wdUm%u?NPU(^0yn3jg!Qck?4RX$scvy_fuo#b4!sv`=Q!R z?NRrp(>|gv{qylcpSgiV= z&s{GsR<;gt>(^OPfjmZS%1<{Ew8xtfJQ^=+Ac@d6x4;rxmw;Ty}0$5@xxftQXC>Oy{BJXOX>9HlfI>WcQB4=xi?>X z)>eZlZWYeubT-+~RWdEEnw)@fjc%vX@lCDw?oxlyukxNJKtzmUt^qBRY)^*eHG8zj z->#rcqIMj!-yeHEhR7`8QnWQ&`w%NpicU4KP*QSe>s-#Siv|QoqmVFgTa?U;T=bmc zBeH<1qM1i-vXsU)T=RU}GmhYR2%XFIFPv0Ri|huls!;A~prgO|7{!BT_V3wjrr1re zj09=xnfDkOKVOZt%h=i>Sx#u zw(_t$lqnOFF=^o$Q(`ko!e*MBzh^VqjCVY$^S&!oXYrefwROySbR?DU&U|lp1xI7A z%e|;EoJ*}-xrxce9^?~zuB9}u_L7=A{qzI!1acV?zmrDxj%Ufd6vZzC#- zAbjCR^H@$-vH82{*!2J?y=n@J2{Un2TB?_YWn3blGBOok_d)0B3t-w zEd%LHvQA3sYvPX&U4|JPolaWuCCO2uY|1NmH4N0GRYhit54`j{BLeiOP_li6zPC%7 zYL5}b?sHZY9e+G)UeJ@Q9l*xI!g7urEmms8(}NZA4^c}qB1Nf44Y8%p!;oj2vb^?K zJ9it5sJgf$a$&^+{pIh<2Cb(XJcy4~lU!Lx&>2llYy97f6#I@xvweWgOn?2XU<`ae zUu8JJUL4gSUTAjC#f;%V7V!`)`TavN<2dH|%V~JT!06crA*|O!;M4q4L8O5u;9z;x zW5kvaAsdW%pnXaOn8hy3@GQ%MPc%2UV((HVjPfAV*IL!dFsD*r_dPv1UW!8RU2~H* zT`atLdO|9>BYad|5;Z{91;o`$dfoO@6D~nw^Koe3ZhSUV)Xu z%6B1T+>8$TLQFOJsop0(dPSTyVPiKeuwLX%I@p#F0`p)tBN+Wfo!M=C{v|Ds_jk}- zNBW~@Oelj22+i3)>}Zs`DjUtE>kIKD@Fp#75T2oURQ>Cr+<*z0?Ciw?cw=I6+H2c` zr>;(3&JU--KJkImrP0?Eh{ktart%X^9y1m_Li}GkEP@S9$95BV+bky6qMre z;^OkO2JU`JmH3iuL5O!4QP$z&M_FPkBQMj^=g{SL$|(#p>B z@`q%dxN3MI>67X!WK{Up3*}h`IxkYPW5mt?Rol-n(=RS=s|Sl1-NFb6^`eS%wv6gK znMLiujenoUX-xF8B`>ugERVcHIFylEX^&F#-Lht3PgF(-M3%FgQ{GJ%PWfyjVwKHv zvs=dSb+tv@Z4nQ-oN?k3CHuQ!YtKzws?uYcnGS$qbdGo+3!=ug z4)Q?-G*VSlNxUO&5O4`v`5Ob|$e(R-Fd1)G&3F=*tgX9YfQ6^*|_lh>9&PrZ3Oah@%b&O z4AKU08pe{azB_Zj?1c^!A0_O?G!_aE`U$x!u)eRzux#UrpDxv)jn%7pFO$EwjJSl% z%gbXk4-SxPM?!T(=EC3GrG~0t=sygP3m@gm+kB?W0pF16tkM;!bwrK6blCi6I?=Tg z9p4WqAbJ8kaIz>7Azfu`ajGDnCrT5rCX)=V5m=QDi6jO~(t9oII-iWZh#X6FTQg(s z?{U2zA)6?IoSAcrTKMlvzTYBI4i{tA3G}Q=IgaVK{?L|3?}EXEzxi&Jpx9lym5Q8= zb<%df=ShBVgyukD(6s=*VCylQj38NE|tEgHuAs7EeE=`H6_x7UmN3uCO{S!^I?u$-w^Gn8 zO~Bnhb$^5j0t20EJNgA2K^F~}9`cS8UliFxmr20F8Km@%m+X(hOmH&eqhlrcAJjOK zWl1-7eDhzGE0$Hnq`RG3Tv8$h4T)AMOFMakT&rkz2bbs3-&vX2`R05h719SYGc4ED zE~$Mj63|wOI>*Ll-Y!A^V6drhn%LkQr(CDh_ArNCu|)=U0BJ=yYdhw zVc-M+XxlWEtTOyQBoMW54>GNckmJ$<{Mx5}9k&h0TapKq0!KFrPfhXkWtO)YOs_q| zJUsuf^JDE{(z#9iEL?dnCI1Fj=mF)}@$Pu?+sbO}6HltN%YG{1 z=BhrQ70V|>&*5ssjY{p3j}=s{A9mt+@x*NEz*7GnkPJlc(W5~qL=ibEJSqEnL6s3M$dpUMmWBW_6>2+u-trNawwHQ=4@13(7Ge5fl z_*!xM>zNL! zHHpBM8Rz^)#`<}$`=3ckG3ORY9z?H7$|SgH`*0{@zd1ebswvFIIEP;Ekmv(}>BoC7 zF*K7ss>I-L#PL?0pfV!=)T!XhZQ9DJzQy}p72p*%$X`2Wudba}so^}=xxp(tI$vk) z@f25n?)k6|QZwi@49UWpS&H0;2p@EA*0*;nw`0=km?xT_zxuRPg>%Gl)#tn|4qboT zd22l(lfAtjD^u_Qo@c>CO3wnFATw{`&C$^CTW#0GYS=w8uDy4_7l{x1=hj%np(-a& zp622L`IF%DNO`K+A39QQK7+dVroaFBr;SHJM)C{opZL1`6~d#jra>MnH-jt-NP&n) z@6Do1e2DV&sp-V=dDugC7vfOP7!K2l*sB}*VvF;{3RY(=`TD>fet)L&^VY92*jNz} zd+A^J9%jwz9eS`PCI;|J9gL?YS(<+Txa+)PbLFspLDzs!>h)~XBCk7h`$AHPf|CZb1wD!09|F@x>*T#2g%$vEFG2c zla~(gPiVmXh!xL_py#wfjZjmmop&~5V@w~|lX4~Ts5Y$WiC!z%|3T*4Q{najb_Ovl z(USEUjHkW9>wcco?9Dt?Dc&QPo@-zXbjVIes}pOk0(q$vZ4n#>xrb-bY&1&Ky~0U` zbE#f_@xA+No&jF99N_y|!*{dybv>trS60>x4;HUw;%K_9OX+-J!nE_vwT0N`=SWQ_ zx$3DhYk&o~8BTNTh~T%K@k#r;dsyY}FCh>5P5g?1tYV(Gf%!tBXC{a%bS1WjVFIb? zodIQghnee(p4@tZJBO==ucqC(~ zWh-l5+M__#qZIC*L5%zZf7^hLMyYS+0!>Y|tUz0%r?ZLffGk-y?89v0kr zLz-3N$n2AKx9xhKb^n73X#(cyP${LtW(HP5|IeEdeNz{^QIm^%yU0u(HGDeS>7B&aMX)rUrL@U zr0T*`9btU($u=eF^7L<(eyHFvRI)!o*gjLrJr|Zii_O=^T9qBTiII&+!8aDU?G^QA z88Esmsoxmd=<_V6zDw3ab>H&Q+)pOde^YMx-mgI_zG)#gt3`KVC`qy zD^4r^z>f2_^aQ6HJ6J@d$K4aFNp&+=&#%#YF0TC=xB&q_{`SK#Xj3}eQOe>WJ$jQKqI+@Hn7q5OwCG0>5_$&d;Z&g5vaL*lB{lX4ES5*k;Rhs zZRsx^4PqSewx;8w+Oa|ha3tIdM5r7U^3E|cQ%{KB6w+fbEry98q6=z|a^2}A~I zEg=*(g-7gxc4-v~<+KKer|z{nsR9j}XdqCr3T(pZwb)Yg+f>jwen1Znru~q<(EDEH zq{4gbmntN!0*Rl`@hhUI{h;YRDR8}*Uq_F9jXJ>xr%0E9L~@iDM@UGu$0IAn9}bD; zl9f2zw*SIi(MDG$Yr3tpaK-@Gq}mVED2+Je zUX<-&H8utHje@6t;N9K|tmK0uzR3mG5S)f`S_OrPQom3UA+BxovHKI|xeXWial=GI ze7*bVs}OvW!;zZ1*S>RO(8@G?7X$M_H~cYOKJKiu4|?lO1qEuzY2 zX5;**EGAF^Y@a$KUrZlKyyhLqZ+;1;!o(tlY#Qk57J|BEn&$RrFeks8GvfQD2}xhF z^PY8Jf5*2KNzt%~*a7xi@2}U$#GX>k&OKzAwgdOc0hlm%-rp1q&?QQ>0T<3{f4hkl z6P+T%6Dq}K`zJ!q2^u0e0WG2Ya<{O^*AC?7nf+1fnp6hS?rwu$B;ljUMH|L$fw+#y z@!BPjj9d%vwm5!mMl4l*);m=ZQ#dUGqN#j#ac(w_n-Um9Vu51v{d?5OEF+?KBJ(ec z!Q!e4Z};?k=!eI;`+HQC*H6)#pUlhRSL9ul!G?c0iw~VWIr>O5Ys|oDOrJkjRlO&~ z_d+gGU#|4DqGm@Zg4lgyhwA*US_Pxh42OMx~j2+0xGfh12IiGsO!Y>}C+{y+{1S~a_LfilrFI75M zHz_jcp4=^Y-#pw@u?~G-2t_94=dD`_dMJl&e~CKoyu1$SjIjJF(lhRcO~E?Z9k^m~ z?xg29(9QN!H2Y$oMZs@6ta{mhQ=(QLWJbrrA|woA3?K9Tz_+ImSn?*+s5#L{sH0Pj zhS+71?&rI62k{I9g>2_+UOL_mTCxYAPoyp!qkX7O&p(>*eAX=zX_XBy8azXh1bDIa zmryc{kz`Domgry4v^dueAy2xM5PkhqztqJp=CpVAtg~g$ndzbFvG$q+0%5-*{)9(D zCF2zL<$b>KsG69(hbPSxk@j$22g>lA{Hv~40mz|2cuNyf+EV2bP6?HcFm*hlkDouI z8yl;L+0|^%$Mb3|8Mkx>-OaT(vDd)nq%*ekZXO~|?KmgM2tMWw%E?=i^}+wKwe$@i z;{d%z`t&5#9d&~c5{O@ z=Rhn5>#J1DZ`o*Jhj(h}@?jx0>jtp`%AG;fKBW%w*_GHw1iSM!g z`ezSA_{kFJxTak~$v+P8Dj*;zL{7aCK+`WsS=XM#(r^-cR8v+)Ew|Rs0#hZ&(}R+3cuA& zfe0KyS~on<4kcogQoFkD{Xq8>DydpWPx-0dBt83J!CIaI5MjGC<|Z1=BXwz}_MIz-c#Z0LH=>LlVQglJ6-i8|=c0(u8rs;#KUC^2G~aI$Q!%{O zWgW3s@#5AJqZ5^MyNqsag7m)AihexJev~jmBTzJc4+=V^c-Ltom1M>w~F_ z1CR808$WvoM+N_YvB%~E;x_(h;hWBPbC2*_L*H!7M(5Um`p`=!?2A9YHP(NBs&*HO zxI!j%p#e{F<qPi?(jy>+XIj-D@)lg4zo{H z@Ca_My7UmlZnn1fUKah=U6O^g?A_9JU*h?C+0_T>M4{7%qJ(l^ky#yXNQAZzy}#bH zS#~uGZ_Cb~KUYXWhOu-;lt~o_x`8D!Be}}k_NhcJzBEQX6tS>`1hVi#$A6v*I{HO& z_aKdBNzp*6!2a;7?haO<-67@&IUQq6S9TSzwnOD_ed3RewfQ5NcRSQ%jtBp2os)Qx z;7n!ur&B8I)Z5N)lVMEd4INIlN1kHEXXC4dwFsn2NA4#y1$`TMsd3lFij|=+;Wk{P zuwucIVDv!EX_ezRQN7rwlF77G!unR&Ghilz=FvCjW#8&2*hchHZ4o;y0ftueoRY$m zp}_Yc&{&-{ns6MX3%`ozbcBa{oszA2f;t_vBLH~zSQ(gp>}Nw`QV{?R4;mgF+JVW$ zd5l;LR-KIhi?y$cifie*JqZCqaCZnEg1bwAKyY^pH16&eG`IyChu}_dx8UwH?$E($ zn#Se!Ip_QC{l~Zu_vOB92D^4wt-Y(ps#UdS%~?sUf(mizAKc>ymJbM4+k`1#`&kwep z_uQG?P@-0cn5&8svv}n3*+B7sI$?0>E=~jKoEP{eD6+lv8)&L>zh@0W-QsMbT|dDE$z9kgKd%W}o#qnXAGRqFY&*E+a6K>F_v}%52A{Gw$8Y7lwHB0ga5*9uG7WcE zl+zMagLpPkRjNs=^gY1WqNLn><~Oslbq2Bgjzpg`33{ubPCg;a3xEeWzf=BF|z#Q&pjUT%+U8Qj8+gW|)ES%+EPHXctEb?i@x(bE zQ1@=8Xx9Be5y5jrnS7brB7s>FK|vvggNNhy-fX5px9-3am!b$BTUeuaTfW#< zh0zr0Zym_c;G_cKooJ0S|A8}tL+k{yo5j-Q3dBpAfW8b(a3C<-g?4c0?QR9AC15Z( z)B2LIpM|2K5O5dU+)6?g-a6yXy52HwUBceh_{Sx6Lm`m$SqH+uYMIxcJNd#9;llU!-9~#xpll|*R5$(L!Ot_@g*&q;^z;g zN>0`6n2DQ8_mDS^3Nwk8Q?XD-XH7d>8;fsYfjG?#$_wMuiF;!y#?q&mbYmf(&AcCj zzpQ_iSN_GbEFRvM`FNGjfPMd|m`_?r7Vl1A7ufXjx?NCBI%^=%^|qXn$|8J?-!p}Y zaQ*x79O8Fdngz3roUM6T+;Igo_6Ep%I91%SMEUKmNreywCh(XapVH3wqmDKG;&Kub z>%w@f=8kP(q-V`4_MSrwq!pUgeIg&TXa*NB!}5$V7MpT+G-i&ezUVC)(~;iis)kMf zq3K&g^sQH`J$TzZk>$+JGOv)dzX3;*Ry!RoxhupfN7~Y)w^egQsgt$39cFnQWNh1d zXL&Mb*UlluE$=wgF<3+x_3FIQ^FM~p3$|~&(R~7mc$Q^84%-@Zy2X&v)2HbyePy{+ z6{0U_q)2k)-!|25+f>u=V0#zul4oHSKFaM_ZP@*7gh!Hj!t{efMnL(((ML%{+1u~F zu|Fa1F;&dpnXDJ$0QEFTmIaa>4msl1{w(Pz7zV9=Mq}OG``7`1?MTb2$rU~O=-)Fc zm9`|3k&iobaAY32g23|`vBJ1N3SavuX|d65Gi%*!%IDH2%^0*;0ZWHqWhMONkGzi( z^?Dv5$rwNJcM)% zzLa2KPs%ZvgOlKVa4~L8!Tzg`sExbwJ67+_Ms0;04v(dfPuF{?PP8JVI79{12>MvD(=RX4NFgd5EL8* zO%JV@avT}>?|$NYPhci|<|4V1WJLo1X?v%Y0VQwe&aSOjkGc!gO*Y~yCRRnggOfy_ zp)nY^9A?gd12~DN3c&1RBtE}e;HsrjQ^8YVpP>Wh;Z?VJN{dW`tGO zdd#DV62LsEmori3<$Z9z+VJuV*(ynWh~fMm?EKu<);i0V-1|@G4~At!ll+p)>cdLz>7!W*n7OkrBWe-cGR-Ru66b?f}9T(6qFCUueq;1xNmqNUZB>6 zqS^!&rFD~9HXad%CnxD^>_by!*CjnIt3xuFDf1mbE{^6Qhu0n}Hb^)61MG9sh8};t zGSz>%eVq|;Q(f(iWV>o*n=>7(IkF;!+xcWa&a5z}ms-3}HO-c|lZst+JezFCKBFVo zmfQVhHNJmGOZr;xwcXUTnlozdAF_-=EnQOE;t#68myQnMI(?Z#zfv*NS_fBeK~auY z?u|LaKU|9VYZzApLu{D`2fQ}Y=gyuM*)k!Td;L+ukxz(be6y{aK1z_!`>KJW=WAsHU3sW{llKF(0OG8B-)N|5xSjUy2-1MlI*Ao6TOG1=8$7i^lUMSF> z{>^!LL_dNIwaVWtt0?}~*|mu-d9RIvKJ|toC;rb^)j@TOk_RO$IhjCSC84G1$zevg zHIGY$A+u$jvp>Y#d3Py0kFhEnyjHdpHD*FCOOxs$}eA#)Eg z9y)W!5F8fVRcv;CPAA9rJ@*bQRNz}k^qPoHLYUb*QsH29fcue}TzI6bw)ejGxmxGc zebqY{@#yncu(#x9)Mt1BCrPLGrby!2GZ==LL3`RF(2Fu5+_aC+mRWUV%P)mDCsw7) z|4-xa(*}Px4yew3+=4#7e-sF5{5AO0=4SUi7Lz14TRfau@Bc%_ucxTuK&t-`iFXZP zzJ=k;7Z?>nRw47#3meVM1Z)yv(u*6?_$P6<$7{!nH|lz5q5&>&L@Aez+Fct@T@Uv5 z|28P=cZ{@wjeZXS;jyK(3cg;e6fkoN$;yE|EqeZKiSB+Rw`h6c`{<>ENSkof|{DNVWgOYZ_YPsd)Em6^Tr>@4Z>@I%QCpVQp z53R@iZNQ|4P?-Hw46|?z+w{AT0hk+1@wlDnqtQosku{~Lp6(NhIU6ekc;f<}{%?7~ z|JR|0F7~S_yRR;mQR;`da@`S=<_c~6!yCGVSzix@hg_8Q|jl4 ze}oSqWp$m61JhgYmvz(EP-YAub^UuUPX7X^CT{nb*3_TU&lkY`&XyVS=>q{NHZowRTIuzZRG!IZ;P^H&Bxk~q@y%!B4 zid86b9* z>h!8N-15nKx!OnVw$*RACBB#FeEKB%aC7E?jzX2O*5Jz4Z;ZSY}dCvAz6j5~}_=1yn1HFQ_C`T?f}JmYewY zvh8k11_|&Mghz+;QLR>*5MzNQ1k?TP;h|WHg@}qwJR+$W>bp7P=AUt<8|-EOe!mR( zRqB{F4|}JC=2a|~Sau0tUSvsMgN~qrDo;VaUE@9w}XAobtMDN zbicq2U@W8DM#~oZyyWtxKId5OW%}a>_oN`{@40bsYaiWmMuRMr zgvmWfTeXh`p_6QTxjJJNgdjie%i2Oqc_Eh zwvF+m2aA}b$l|s6Ttj*_q@I#kOtMN+e`?R~v9Zt46)~`2{arhYzF4Cc{0ma$Sj3Y~ z&!?2&)VY$(l_;4HHZUq=w+FL)v-SgljRBu|ZzP+YSv%3i7`s);iz^?b-VCU$h4+T8 z{}_h_@tm}&{2`e`k~6(n;RD7$MJmNgD5;xwjKu0T5Q`2fKA}eDMRH=C9G(){CEOYE`iPK0d~@ht z5m%m}7k9Aoi)XRcMj7Wt+V+$~C}*Q&bjfq52d|s+dQj)0&GDdT;C0SiYBv7R1J!=Z zIybxM((q4Ti;gp`UpyZoUikS`G0CoiifdB`EJykMhQ`Cy86P_rB`iJ2L|&tjwb+^+ z4bnb0Rp|q*U~rvi8V;?}NtXSpOcd_b$4cl6lEa717Q4iFkQf{ zG1RlUADY=(`*>b3P}yyMV3viL>r0>NRelE^fPgYx(+RByxi*4t)?KvVBpo+gu4$g_ zsW_eA)I#*M=~k!8?^Xd~yea<-?B!h~?&9&|6VfM&=(yYMyIj9v-4vHKY;=w2+d`nHrYRPg3o1tDpGP&+WyDSCgeL#?*;t!@Ag@V~i({c7* zR-@Esm(m?Ip{{N#rcGJxGO9LspM=I>kPC5O}HNFygl*bw6K$=rX->x)Qz^s(knHxiwbZq69t-C^AIC-V zsoEHW&J6THI#zdbyGN&dzHqkPveoMukGOGCcR@LKiHq%?^cD3X_RSdFQ ztkF*n;2$#h9`?4kI5AKFT!S)XmafGe2Jj2AcTpgKY+>&tD#`GKgp1RXu-Mqx7!sbS z{V^b*mVb3FAi0D!FP&UIBAKAhPD`RQ>29^`&~Cg@-H{V=lte3%M@+1(TqS6v*p?vE z>^|}sD1>HErA2DNeW@IcqXV=bIQZo_V^&aYoHq(O&MZ)l zsHc0vsG9qYN3)|_ARPl$O(*AgO-z2h{A!VXvF@GpncOxdpE-2Yp>c9fQ={}Vj-%Oy z@xdSz6Fvo$0?ibLcg3n$=`~(-H7;JtHj`f(PG(N6ci~gyTL`!BV-P*kd68|)KFQp8 zmh5fnw%eW4JBAPh{==r|Mpp|?Hf~H`0I{c1wb}C@AW`cP9%0R%$~k+Yn>il)^>P z)3DcspvO&lee;yIhDJEiu_pG{Bd3YXhnT{6vc1=n(~muzf3Ms?cwl{lg*_2%ZG*!-Nt0s-%{LFFWPnVyFgdw z9p%HH-c&jcym)I|o#tJ<0EQ;lz5amTm-D@!?(wfH_Wco*>U^O%2drwV+1e3|`^*)^ zN?Xw8gRKA<@ACfVHIcT=Fyq^!W83lWxR-F}aYK)ozXFXh&Nh1n5%gQCi`dOM$c#l} zfZZ7($`_0s9`-884DvdZWy*VJ1Ay`67G%suOt{*;v*b(t?9^P9e)H{4G}}^(bAjzR z=0!*1!LQbP2Zj86OEQ3!#WfQelij6$-QZGi8V+b9#r z;W|Q(!Jwh)d;Zpzx5_M@X}FO2_4&HcvhT+iA^i>%NXzTjuf5JYZ@OTe4Hgq5(s5)X z*+QNMfUf0a3@ehFDHC1s4=96gnxy4>Y;ZNv0c78TB&9^=2YjCo-`ZJ@D zE1LcI=*XXEynxu#_>_~K}yF0MWlRfO_LRVYm^BiOQ+ zB3{D8bJVU~iJ*?`$2DfK%&t2h<(ntohRGq>wsOp1^#>O`QrZT1JkGc7cH`P=MDy z{$p$t<|@sejqZPfJKxA;0kEL2bXPy}ZV8wDrPKlQruf(J43+GO0e=8d!+56YY2UP- zf*-X( z)AD5G5fjJLn$lob?Q1cXc@?s7sbEjVooGPo(&+hCz1w@PwTz5LB3V(_?}(IlrYi9O zC5P=XY_Q>6mW>Pb#jHYH ze(Sm-_c2{lsuB1zLpSw)c6loy7Wqn!mY1V6w0!QSYR?OdYq5emQd_KDSbur%OVPK=2tJUPw?~7I+?h8i3NYk$1Ojfc zR+R)cWx|;@yxJ(~^2-ELu4&Z zjOGbyBsFwB^`dVc;;yWM@+JFA1iITHXQ;RHqu z9f2PXv)53jb9^<`W;KR24)m@WK1{LoYmm8L9pl~&={mcmseE^Ag;TZJU{5dE=yrTa z?9Oz~#bAmt&^}j}aVCCQqR!K86i&n#lW!^AcnSaU+JkVlj7MwQ*BPhVzUJ$;?DeN) z!|_d4*%F{&OV!}yldbn-p8^7?VT#?A$Mx|Y@u~4Jp^ciSL&oj?=eooBsR5G&*Q@_4rbt1+_c3Yo2Ni+SsU$kd6fxdhPyZ~!Yb&bH8!&O+PJfN_ngKnph@OcM zU0=h@MRAh`KG)|*&RnJJk*hNGG~NR)(fb{MG-8?K?>eEZ^?MA`%$FrSCAn#A0{^WL zrd(CyYNQ?3b}qn#JM;dG&GS#YI1feJcUGcT(n3~N(1Mq19y*oA9(*H4+S}gV9bo#EtyA&)!yAIoRvcmg8SqJ)16=OfLVt|&yc%BL zIdCVVsrS~hDe$|a2ZHr0WZmllM(yeRrKlG2oym@g=34lX;TJ1$t|R86*fImi=I>cs zOpLCKg#&C)50-*KC9}~|Wg;$r3X4A9>45LWevJwIAM z&2+pxKPY7JV;9V{-gGs%~ zhA`8)9CKi>bXNwnp|8PUTT8tvFpN4Z@7WNVGwccA6v|BMWR8gZ%k$H6n>!N^&m=Fy zCSTT!@JtXrD0)QRuf+?LVw&n*=Rd{hz+g*={?W4uIx?vqYQfX^etfULL`VQPqwHz< zTYW{dGd-tbcGjM=--2kcqs6RW*iS5btIaNdxAP6d7uGq63`(3ytDN#6i$(uuBBO#h zgwwSPWw0@*=)xFOcySIica=D1F7L|NhT;(Wb{jduw46%5YkOL7-YU=u9I2FZv?l}_ zVAUA!6b_*9NkF}v^?4~bD<#Jq-#J=BZlDJK(^ju0qG$v7M8eqANXmHlRQ8+_{AiK` zD-1X0SFRgBi}VH+(>MPJEVx#VNb$~^zt5WyH1?1;S1&`5ktEOTth)oEmpz&XQsMg7 z|8Xh|#Rt3GLF>4Ea;oyhg<4pdx0_3tI7~=L2~mAS1L-X1 zzqX5Q^<2eWaV#a1_0YVV`42sU3^P6IpY>Sxi4$8CpQ9!MKE1ikaua=7c5)~rg8fxO z2T=H{!uVdK#;<(6Rc@g_(U1KE0clF8CV~}x8F;ZNnnmvOWyegZt=j0^@3&%O;Vrr8 zGNC2K71(rwW@nUxzP04o6YSl9I8itA4R3)K>rYn}u{K4krLyL$<~|Irz+B{4&(F6l z_GWY8<|hkNfn79tkmbqmyXp6M47fKEO7#HUH=3HYUK9qCw>`zh#G16Z7<*eS>ih-Y zK3;NFJF7j#*{%2mk@KxyC~2L3`1mpEr)0#DVpn7Fc3%W0!-o&UJTQpxNKo*3P#tAKt~0hQbtA&`dZcIu$OGsq0;I_*Z+detV}t?N0u4yR|%j{7bqx z>sqID-VN0n4Q&qgDR{n2{pxg8`y9b$qr=+|wxGSq1RwbD`nkUnNQR?Z{P~V@Z}~LN zn0qOA4$=jC4iVc)pKm2sZG>8I8(wLAfBEkJCZhQ8lfvn~$jLipD(D%p>FD@d!$&54gR(-2w-` zi(fxp`t_B0Lk~xd=-b0pK#Z=l_Dg<=C~!4^H2v2R8A17%OZ~nj&jXi1_=VX&4a2C376pmZC(&lhYnT|9TQ> z>-aRpv4{B4bHegI9Q|ZrL+Fkw{tY+1!5L=J$eMDM$$t4Roh2C2{0JoaUoH&dLAw+63J7Ttr^^ zLD&?_kIJWJ-PVs;UeDIr7=4|n-j>SLySSwD*j6-_@r0a4#SI z;35GrZ}9>f2c(eBcej7O42B4OWSQD>=W!_1#&`j!zMG;P2h%jN$yfuK%bs|2PT_}q z>WNNtd$eEKWaa8TTM-26;7vKsi$1n1E_a-&_5f`H?9-K%%^;SIXPe`(;Fsl;v5VwM z>%MiITevrtcstWJ)YZ=j{irYYXEcFhE=|z;HSXX90G6tsc2tid#2)$WOp!0In(lnj zn-|?_?qPB|IF6_W1uYPOWZPVESDWBxjesj1FkC2`Jnv&sXV<6O@ZhTht=VpFqa3T| z^)Ju(g1IqPs7+tLy@W&`_Y?)e9jddrq2u}NZ+#%W)!rt?l;JoCc;D-ZIkzeJiG#Vhbx)RBX)&; zL)?t!8iU)aRXAIlr0$)fpH|m6(ABfvc9wt8kK@}&vZssm`4`Za;1{Lh4&D@ZnZ+`D z$`SrkR!N7%$)EySk|~k;+a4KIX*4Oy^^ucp1{eXmyTFlq71@+FrLx&h8Va)kxVLdf z?d*ZoY$c&4jotedv}D`@k|AIhJ$s!JvZLQs`Ov~v03xU6EJ=7c6H0%GjPDYypo)W% z9&niqe`uUyULl!<0EI~**Wci{3t107F0~N{Xw61(&BhQ=J}nmFXdFDe0u9MiMj62%H^gE z#BD{w=@i`7J0fIo1a~tpQ(Hi2t9o%APhpud1Jw%9!?UEYkQOw311)@=adc4@qaPSL zcAuN1U;5T!WBBt43QOM6H9>f_h>}V<#n1q#aFkqvS)v{j788mnx=YVJHLPs%C&y#u$Yo(Z0^3E zG|Q$N%3Ks(Lzyz-yT&(LFQBrBOZ)-%d{{?kzG&i7Q=kg-n!GNOa0j&`iCTV5#w+!-Ua zA1|P=-l-{M%G~-;!^z@sJvq*EoW%7j;Ac{vK~uFFGr^a-(k|u-dG(e(_o#$1T_0B` z-;~53@iGMT z7T~?up$nT{1 zI43S}RM+V@!kXj_H$P)bYCf9OOz#!kdBCVF!?i_DJ%Stw2O%BS*?zC=IajE$JV<|V z9^cX#S{UJzQy&_>PAkfkedPisY%6H`ex;xDCe%QE*QT}WRQqiUeO@3!}G^X}N zK9c^%R;WFECzSt82CSy4Dd(bx1EEs{{^n6h&5+cJ)_+)BTkhX@;u3g1_2eVivD}9H zXaUgovGLxkKbD<~!B87K*<}kDNBUsw9$D1KOrPy?x*KVdu+J$+xN~JYidBn&0#PzKRsKFXFX=Zm!X@I#d61&)7hm ziy`Nwoedc8cloCtzJPTw_ZbTD_S;G6gRami#49;|tXdd8AQQb{{MtVvY_y!zZ`{ah ztPjsy+Ux%(YCaDtjwuWhQSk3GJfAuM7t_<=P4U#U3yKG5aCpX_n=Z0X$=vs0D@T{` z$x-jOe(* zKg|rd5|2KQ9S9jnA5pnl16jb9cgtoKtW<3KB#c!QyYs4vnV;4sgrDkIAy?jd2pQ%1 zUer@Lbez@VU2_BKyVmGdF^t$*m~UySryn(7Q*;6A0g10B=HPwNU@wCHDz;BG>PEX8 zZ2WTfGHpNmnZid%kR)>T?%jI(^$y$aBP@Gc$Ge%fNPsQLdG$O z8s*(1Bdasc&f$(foK@tkHGCx;7(p;?)%=Jn(a-=`B~aM6C!4N>cRn)cO6zsTfb8b_ zicC2y<4NNUH_{`6sPa&40rAuCh&SAx2U|T3ZIk(3l0*Wiv7M%ZuE-TV>!^}>TaxxL;T3BjqaHA-JuHWXlK+3 z>$AdHlNze0agPIqtez{np%z!BG(^-m7m#~z^}5!mdvmJ-G2b_0rZ|_eEi$%HE3vRJ z#FNc-nNHs@ESAqkvF|@z#MqYFuXQ+gPDoNx1)wPT_+Sy<{IQ1ykmV*D_4iBtonI$8 z#ZZ|f;I@CTyc;kndVK1T5>$vxfdd{`;^Kv&W%hozU;N-A2!U0GrVA^aYMTagyLY2C zSVMEz(;ea^_LgtSV1yem7uff$Uw{tbSR>>6t_hk z;J3@Xr@`&VqVl1-&P7o58hpdj?S*=m+SIw#V2F@0xq5EW#hwh$t5d5U^GzE`T(oGX z;~VvM+S{}-<;^(W**L*8cYh@Yo=E1Lwq;B4Sg~E0@1T;WALxr`-z(OoW?Np@Pq7R2 zdn4$}XcE)ii#mU`?HK%RnPZ~&3(-zD>v8Kd5_5OZCtnABI^vS`b)()(Dt9#uDreFmy44BwVdGqSm!-DJ{}pF)H-io%+;1V0_jAep!ggU%jolR zVC@iAW+P;Hl}1^>dVo4`#4t@?vdI&HOTl386APx^wAFT00sp%fgbJNb8{XZ`z%bVA z=6w4YifOl#eh2?CvZbn<0ozJI`6Ddwus_MRnqEdv z9JjGnAg`>A9Vphxo^<-{=Nsf4I`#`PLTZ{XA5!&0-~AtZV7PC%G3=Jl{Fe3=Hx6$^ zAGoS~bS~fLIe!%v2@ky6#e3a23D;PVswTV5el-!@KCiJV($sOw)={gT`6rJR#%^5Z zU4ops&|oJl`b^Wwko~@1ORwA{_S{9iYW$-E?||-B{>Q6OVIs)X3lMgnjYYmhTA%~zen}Uzo0TA@Nwn?Sn&>^h z+z&NBL0#*c4_stbFISl(VT=?Qj`{gSbU6c5FzP^^VoCn9X8!S;9z*XnTpt(6eqCVV zcfb6$i;OQZ%r?Z?-IDn~{U`Ajl57nOl5Vdo+cM(cJ|qDBLU0|VW3|-a#ndh=JG_aW zW)rUisStUlPrHKOMvoR3zE8b~KD3e-I(pYa7?9|u4PwWTK`bNu-I}&-;OXxz=*f!Y z%F3N|n`Fwl&`~>}2;^Dj=r^X~=1+@m=3+O{Q!25v#5rnHPcEp9nb+UW!hA>l;flIh zeJlYr>;G7#Zd(#`Fygv&YGwr4&sj{9w)FmGnctKBGy49yh+%eb1r5s0 zMnYnqFI}bmo&|FKo{5t!9Kaf>#~vI1<3Zf+r68n;kd+;N2V+rXCnt6)phH4}df3`G z5m_Hb@laz=TiS| zQaQQ?kvk>zU4Y&GftkFltjN!g!&3$2vuj7b&Skj`S<45J&*J#5oLc&MzB=vvadw?mq^{{*N-eJ^8;u8UK{TC;VIc-}tqEZ&?MN5=?6l zEktHlGz=9J^yyjm#ZS(y_!Jfv=Ggs>Q2Y0Xr!|JJNm%Sgn3(BArgWDPk={k2PyGGx z%5AZUeE^DeVPQZ3%WN07@oxXs=i5T-J}nzG0ot|6p1o;HFPHMV zRyP-cbG9p5UaE8#c>!5ahwd2^ol0Kwm1+(u@pCV`=>3KNMqnW47~lF&)yzc|S!a*e zGrIWqmH&Rr@5a?0C{_*(q(mOm{m2m-Wr2j*oG#pTF*k;NeVW#Ns7k=&zI%Qi7Qw2@ z1=!OxXL`jiEt2l*+Y&~EgHgew@yQ_q*pl9|R?U=n*yqlij7zOzS=mN=k@TR!ZvsM5 z_LSG)`p@bu4j!=%vno>KGuRzVhv>XAB8O53*!z)d0-fOl%?5qwtp+G7qwS>mhBOo= z-@&uJ)-jv@iKY6WNdD82ICIqWK-M{)kpIjTpghCZ8OM=G;cdj;H$fj^=fOdo7&7I~ z)!R23wtgVjr9`oQQQ13Qvn}nGhH`3|fv!>qr<|k*`qLzdxhufS$2$Q1a%4G1biF)ku~x z(vDbCICjG@`UWRVK8M;G&zC`-q2A!^pB*n7Uo5Kl!xkrpR8zlPtUROn6=AY}%fEj*aNkc!-pIbWn*#wmA7y5_r*IKut?3zx^1Z zj5qxQe;=!Bhj`G(+?0bL86Wq{aOVl-^iP1B)K1ny>rvI+3wVXPnjP<%UByH;?vTv{u^V=^|~k$esz zdUT$BO~!B3BA3WPCTrVonrgCWKAEsBZpzoMX9dc!7OR+7`MamHzT(#HjF)vYa>rtc zIPQF9oco2jkpMRmh{@s6heGXOw0m^g-cQ^B=1g=t`^(s`1*tpjgTv=HyX~%gq^WCz z3J3#y@pYaHUd3nKvMzoU;SDMtHR+?rbJwmyjKq?idY@6@QO99tQY>GCyDiBGdi>S} zve6!QvGa;OE9D(=9(~GOMfmh?f$Z%@%TR1R!%~|aFV~dS>c@Xwlh;b4ym)e!{%99d zIjhhMEdC=EC#3fx09M0$QZmRl(JYq#<44CL=w?DwBAqIn2B8?T5DMhS(}ukNi;;!; z?v|*nGJYN*<6x)?kz}9#h~(&3TlwI;O9yfN$eM6f?SQ!&e)U*!gM50{oNbv0O9dh~ zp|+=Kz9#`e^0!eE((7{0m}+xH{8Z%QO6^s9mEG9=`L;pp)sfLHGO>x5#9V5p|xX1DK|%HAZlT-X_rkukfYciiZ`PpmN1UO>NT0^p&DC zHv_PG+th)A&{NrRJVnl5&fP=UQk!M#s{ujev%C&|Sz}(=dy&1j&<$w*8&nAJ=3+Yo zs&Oo@W8I*wuBrZM@UBxK&=PgV!`_d^+}Y&h*^Xmq7KSZHE^sqdZ&FKIcGO95-W zP{rAH9WRmWl9;sg9opw|xF{pd7dqWvP>YJ0t0-rUABrRsH!;0_O0T+;^0u=WZQ*)M z3-})PuZI%DgggB;1=fAZ8&grie7UFgJ-BVvz>A-@w*Yw0b$p2hg*V=b3g{_l*c=}} z407TDVm2f=<&HyyCoLv<<=hnK0*>r| ziU|Ka9r?n;J}Ohi&xJ_U=2wyJ8X2SP#OQc$*tCw-Yqr--{2uSv)92>rs)Qlhc?)94qm5EQK?_i6rrSH;Kow8rK+dt7w=(g`3xp+y1mL+iC{lX)hMN z&t~>C%i79y7s;;ksn?=zuP>!SU?I z6Y7PSpd??e&{Ii_@gCbNr{^di(PM3_ZdU&@6sF);DTHa=a5N4 zK)TZjb?eG~EClm)#;BAMxo$oMP!Op8K+ST+y(*?zv&{3KSPyb#1NWCMekkkB1V;-1 zeJX%R^pbOJnnSfol}GuuD#d3v?fAw!AA7bv8`F`S6XgN%ljkl4wDA&Zp&$qw8(1x8 zrZoGWmIvbw3aYoAlu#5OGp);hY z{8%122|eO|spnL69cf9n$GX3u!Y1G;951t1G@E)uVJ8wvtPgdzE)1fEzESdoXUWDH zL!Eubv(8WGHi~pV)`a_iz2b6e$C60%LH`!P$Nq%tsAe5jl8KU-EHJkbnwWqGKYfv3Vv4ltokh$M}B8*k0#GTW`Z1L@@N z$zN+v(du+Nt052o1on z$i|FFrdlOv_KVW9C_w40REU!V@8P(6BDoK;u_eEHt0!NRS~H^p7NJZns;Y8_oqaKf z+$l7XVe=YVD&`+Gj)~>tTR-8EpvnphMzL~XBpPVQHWs~hH4&!3ZQ~H*kB>@Pi+D}) zR2%POkRdZa2~68d4Xs^KNLemax>Xwn87W`;&wgyczAo_JY=z%*BkzR^>u%URCXFE7M@UC z&^3S<4J9agX7|P4`Y`me_}Pl9D-I5Py_Wk=%-_!@(f)?}hEqPxw>Ze#2fq&NLiLSf zpxQZXT+A>J^IUDWaogL*>v{S0PMw^dp>c)z2YLo4R)4Uxifu)oo^iaQ6nFz&OK;3U;AEGZ7vKKCwC)>q&5VC5whF|P_TD17(0 zitoWDtdm>6k60B%Qj{B4l#+i2J?bOh`UMkuAE?!xlUbgYYI}R$me_S_ee$2n&Mz!9 z_wrg}JBw;65LV{cH;O-g-?(PsA24~R0k`N$xaJS$#=-?JKxJ%HW z12Z@bFoS)Q>}S8RxNztJd48sW@$5&d&OPLCrJefP=rA zQKYYo*dB8+>PzHd28VSFRIABy*~@WWMn?nE;|g*iZ6`ZM*kmZ`{C;Oz!3IsIG#p^J z%*E)6)Z+y){VISUXsAQFhyIg0de}rX#gI{tNfK9g*B% z06UdY*HF1i)}uys5FQmmcoo5=Em~QaI`)O2?YT^9d)m-27~* z2*XH9-weHW^dw@q-cc`1p2bKf_GVByrx~~CwPK|?uz3z0Bex#j=MW^ZO%}H+pe$p2 zIq?Akj-T2$X0E@HapTq2Fo^$Y&%EC0>B)bKH8^^ZDS#;DnnC~O>BjRVT9G06X`)+$5>J|4y zR1zwglh4o8!{_tE)mXJ0yzMK#JO0o(;+VHqjHqn*)Yc^b&Eh4MV^BgrfG>z0$+qKC zRFp(uoA3=&mTzppT7{)rqdbs5gef%4EcQRaVCf7R1hF%IabL@y5M+?@{b=5r`^F9z zE_HU*30_~T8h_tT8n`AVH@ca56bt8RPEwWf#Jp`W+v}!>8{i@18 zMGv=6OY2UM%`SpT#npD^D8*Gyq_tK+ovJS3E^EHYaDv>*V<3JjZ{>{Qq$1A7ikiK#;C7Q6KxZdeEnYeE8^$4`oV7_EurD-oo zjIVz~gYP~gYADwQ9*7Oalf?)fG5Q=9>bfrVX5G!Lz&Jd=OJ6yB6?4>(y?l>o=KL57 zCIlSH3}{b$wVNX7`O_yZbBX$MNQnE%28DYx9;$pWvhzp#xrOp*Y-HxR3u{lRn^xsn z8)%G^U8dMvdsD^t@+sbAf9XL}K+cxmq!l6A`GEjo(Q^vIZ`riEPDW4rUTlEJ89tPrJKexVZv%&^)?~cK+;qqR3vK#p&uRX_eSq|4~!C z(%X|wZ+u7YwCco0?os{FK4aAoLfOO=k!#1v{zm^BJNxN$!}Zjt)KOXGP#QhSx=^E} zu~s(w>5QCdf{C`K^_IXeM(8OR>RH*i%^&FGXC!VblLpM3T(HPo#PzgTZWF)tw4XL^ zd=Yexs5ds776qdgfevtYFH;4BR z;AXc-pF63DWmG>$WoRD@`H*j~Pc=UzT3HDl)Op(f>D8f3uU4*!?D?*T^wU0j?=Q+D zw}E^zXII7#~EV(dNeF z->RZNe@@=f<;KOwqvn1m^88b5ac%w~X?`B@?`<<}3C#JEn*UEAvaSQ|Z%|mpy3W9a zis(NTQ7;aoPn-Ao_fqJU_RF~csT0i*Jx%!k{g*@IhaG2g9JwRn^Oj=DR=FftY%Cv6 zE9DwTnH$@G-54A_=S25BaNr<3zGv;|2{HwRAyQ^GWxTJ{ln#%Nh*m6Bn$qs8IYaNi z6*;wN?*0p=p{v-KFI{<<-uza`Bb9j2g+Y${-WUw>SD9tYUi10z(mV824eJwfv>=03 zI0tG7gZ9Qib|1pUPhV@{7+`(U7xf`ow}H-34X9c=Vf(H5yu8Goe?$GQye#sYTMmEX zWF2mT6)<{6o5=P0$Fu%X+`qmK!7zm z@ez%UC&*)rWv=rl$)2-$gV z->blr7v-N$OCd1Y-YUuKN4#ZYjC!009{fDoAqCo;T(4t&Ki*}=P$+aTeUKKAFb7ET z=9TJAGB z;rj9QDJUe)HKTi%q4i++`^}~M;Gn%L!u-qP67Pga`h;VM+2p+m2V$1v&nK2m&Z0+% z$eXTx?M^9dKD6%I365F>#?~6nmzagO928#7Or6(O$atJW!zL8r>?$>93<`lh4qsXY;TAbmtS#Xk(L8ZWFys+RMBT3@Nl2 ze%xMb!5{jQiAGlKsZL^q$3RdlPi3!p`7HSBisKQxj)h<2g<9~mV`N6#?H(z6vObsT z>fn|d<{1hTcpToSzBWVGmp)VqF*`Yg-}?G>>wc;O%p||@)YvCJc`;D6ym{VI<>PV; z$2Qwn0$B&Ie*FN`e&{v!Yr4^F6Y^F%t(hnO(+&f(F1K2x32C<;)^WZhoh{ijp7iL30T}(&kM+Xvf)_sW&Z>#WZc2OdzZ)_OpbWSC2q98qL zzrncuXui*E`{RE>#spT$hfwgvwD+{u=2#>PLAjuOyq%Tx2Z`pz>>$irQ<%(UjF>N? zlDZ$VK9Ed3_3!q=M#x-r{v^&@8|JD9Y5 z5YKG*no`A2?n{H^V8=+P8;0-N0r#bs+Ild@vcf!rw)o$6iZkykxf0|%C7oBIH&M-E zBmUlh(ay`2R(&^gmzqC5tP4PTDE;kCJ6`RuC?dLc|B|6fxI2lANT}spYZd8ANWD0q zuJa_XRqkZ<^TFqp_F;lp0_A&m8qAl5$Q^<|lSu^OMBBT0&y+z(y{HXykL7!gessv1 zEKuObb$4)?+IGgP=hEjo>%?5uc|j0nIfQsm4_){RC%#xC& zN34NKszIp4;BXxn_GE98j5N|?E^tg{;KgR$r&!GKEp0B_mD zU23clH_=7K7wzFs+`#J9(2C-tXw4SK=(JS@PKzBL|RphgopA7mJK|zHftVke6IhTzaN_ z_cog{as5*^wHkqUH5cP1y8>&m1@*7u@i&f5=fb=(>c!pm@gDQ)&Tp$4I*`ic#~l+? zagB;a)X&i2IutaDyX{LLmmcY-RXrf?lBMedlhZJu_Yl>>&f(x=OK zOCt+!Gn!BAc;3pDFaw8AV$|jTB z3a8+j3;D`*1?`l2J}w!&L}zJJ)Njy2EoUrBEK@OBxJ>lg&E-jzpj=F!FRNX9b9RS` zEbxs&mOsJckVshMC_mY5&sC}VJ$+{45u zXoli&M?*ltm`=Co-i@j^lH3d|j{10wzd*?qvb+DniugiHdMW9IgH5CQgFD2ZA6Zd*k@a~)A5{%Yb%+{f5GJ7n|n>jsE4EI+PH z(Fvm>mBsjo+z*4#J9*N+m2hvNbR1zj6e;4Cz46n&B*sDuYX2y0R^5pe(=@B=?iHJ^ zmr7%Ao#hRFeLp`=+N!d@8;QBj;$U%bXu1_{;A&Wa{aABG=|PEt#9%LYxLN(+rs=z( zlEwr%h&?8^-?VQu8io@%GkeizDD8aw5XFY2LnX^@=#UCL+YK5?>)=hTJ2pb%V^+!5 zTEWD*At?rCZ{x4!cVz7_U=V1I?RPr0y%L>zEVOL^&j&nzB?z^q)EuYRF>%c5@D6IO z1{<_SFu|*>>E9EKbJl6KMdWhop7OCxU?Y(wS7R8PG$uzpKMi}nIwkw5fI6{f)MJkJ zfeT`u!WS9HWa7zH{YHI9Ga21@dl&H$XNGQ;^?6f z2tu}&ir}^xC)O}6SZRd*7)v{7s`y^=36ADCQdXkn=IDM56EnVsH*2VQ#xzr9JjNlM zwMxgG^6DXNJU**TeuflKmx|cK2h*9v$N*Trx%%8 z?CWDKr*&{@X2shF8%pwov$w`0N`?Js`|k47Jo-y8c{7An=u4XYo?_0m*zt?E#tHJB zqXFes(0=aSsu#-9$y&fZg}87(Kd4iW_#F1v6P$gyssJXyrz{jJ z%w}{}RwXdqE`?Uc3HF_xua;{#Y|zAeGI3x5HoCk#@mTEIUIEK)sx58GsqqZ|c{HhB z*52q9)5lbDo#n;l5CiiuJW)AmzUIJ$G*@t6pf|62()wuAPwKIWevMdqFOCFER)&(j zbOt|)ozK$B#vT+bkXIoimbI67ZSPdR98J8MXgew|W)V~_HC_;m``D9G3q)YA-b@e$ zqvBOA*1E!|Dj8n$2S;6%`>+!al2IYW&>tx*MIe1puqxE-dV*kq_c8BLtr+;pCWSze zH`PcwmhUT@!ua%LRaw;+^aP!?*$00j1xh1Yy_Ac5c(V`)AAi!u`fImGthImqoX5sPAT zi?bkYN(&IF${a!;=LlN~;gXvw0ru9`*%C2;iX{Fvo?7uKh3n%omOFh}lN~1-sJ;e} z52AoYacK!EHO&vM^MeM_Ftl@)1XN$KP@0byBV@jF*IX~tar*(e~ zoCk97h`mlA4IpY}cN31IM|Vm2*2lbOpWOF2_ejx;-)IOCyW1{^N(w)lQSfj)QBMxY ze#h~dL3})1gx0=V=vo0OPR@_D&Xc`;@3l7!ufnzZs(b4H-2@}nTAx!$ci0gLaJ2$YW(n2uz%$9&Jo+T@K+w&n-x*6DpDK>)wKygcy>M?sH^egi?hRqwPIzkiSQz|Vxj=&r%N<;$ou$fIBPd9|)_Ob0cG+uFMNflp zidiNdL?%+X!s){(93n)jqE>p^M?9u9wX%}pyGO-xrY@Vj_^tC7Ttw017LAmPre!|$ zE$40P*k%L8K90Bky}!4qo5`4Eqb|@_gQMREVCxin@pgIxzc|9xMr)7DW z9+ss3iZe#SX>>yNnQ%7=Rg*$!U%AmJbW5=U0bR!pgLb`quCKC84r z35q=_(5~!c--JIH&8n=#h=(k8H5;txlNaL5YQ_0{eXDhmV1Pf|z;$~v1?HaQoqONXl*l9}s^74kj*=(* z7Ldw=Hng_)e&WaLtyH->#Gn~W$i3Tn6Y}xsTD>B0Udg$c=K!I4?tlA|0lY9C)0}gB zDq>1JbL6J`OH&+v%aDy?W|kLgMT7Yv#dGuV>DfVNuct-Y%P<=kA>SWg`Wx^|wZ@?6 zpJ1b(2rk+Lg-sa!!R|!M;*@|b$Hk9}2f=6#+^Vi~pw7R6_DS$uZJ+Z_HWbhwaPb+3e>+JV2Hb!E~LmJC@3XiMp%&|KP zR&X%$NSIxyd(Z$zWY{WxvK_u33D$NY!fXh&<8SBu)NX1-GI3Av1ea7khY#xZq=BEb zR*VEOfYV!^*H0MhHlvxoJMd{NfP}MJqNyJFpyU%SKb@tlCSLAp`|#h7%j z*$*D&-_@5Q@!uG=hh)I-l2jHw_1Wy%?55h&7SLu9?Y1XF!?!*M(I1s1GCy3T*;bYR zT1*eJmdZu15y^36YuPI{Bb{&0=ee&c1%3upejzPasT|G`;!xZ9I(HHU8l{gTBbg2& zcmZM@(FH_|*Hx?yJI)0&Q!j?K*N|Fj;64V&EN0dZzZiXGZ53x$(w<{-Mqu?dJ5D7~ z;qlHX{^?9g;{|$ZWzK&iKxOM-D1x)-YC2sFGzrZVo%b^vHLvV3&Xkq~G28FKgs=(E zqxAmt=z6KFabou$?B(B1@*DyxQh{|$+_UBmq$Vy!yc`MV_1aTFB`$%5*(ud%8%PYz zO9VKLio$D#_{Sh~{vyn<-!!;}Gb5^=S98|Q{H<>#NVc%wH+(w%%wWr^d~c6ri=-^0 zQKeNemsdcV0&1;gtP{>868S9xGlhvS{n?K}W!k!?C+OYOP~s9VV$X||l3-jZTk%QR zMakoIjWee|9Gu@~<)jTi`!Oc3S0xa<+|A8QmLbeI$Ez8apM9ODRN$D3#XZP68DmLS zqJGVx)G8(2-p>me*VIxhwO>u!NGU;s$u64HU**E-GePjn&WgPUn4bOEiW$N^PT$Qd z3wZO1mGYxEv=VmP;FNqai)3%2qoVL_*O&pmM(uTY>0J*KK+{E~FI%y>jp#aJWU=TC z7;d8%PHXzt?Q)HSv;gpt0^^)PS)H@90!v<(yF%;8lHCPo6$}e_lh*SJxg` zth0Cy%0G)v$<79^epR840AUD}K*s`)m&ZJ z8fPoo>)-khXK>Qn{4hPqyl+>JCIFA*JLcbN0I*4CEmjQNnWTiT?SS}S>3{8T2o|4BoH4yG7iKHf{Sf{O(_{g=G>#&+`w<6m+7 zbF^1%@c%G5=pt&V|DXN(l9Man#14u6D@@P$>~0 zL|*9<$<-Z=ejbT#J~Uj)8bBYzs+v7 zRQ_didpSP-sWkoHrubs^@SiIF=akMz2b2@Myu7X#`vy<&C`U#!1Q2dz1q;;UnN6Y1vdFe8a$o@cKtswye zmIrxIQ$lfi1zKcp^&1p#)QY)!8lw`6y*mFHYqQXq1ONcwT$ji2c^%rB@nZjHeyoe5 zW3L@A>>jW_3N~rgZ}nn3JUmp+7EME;Kmi?Q1P)@zVw(w6e%1&;tz-Zp1CqMteIPoieof-gA6sIMmKk-&dxC-l2 zxEani#@!aw%Ibf@!VnpqeuSuXBu2}^nyJG(b>KI}h2b}&WxTRwIkp*f^RC;Pgi5#3 zV>vwnOpUG+EaA9Vvku0IKhQ}I8ya>P(vKtCwS4bw3dN0_qEUC{^^?CQFoV8EV83it z+jgZZhggj$np<#L&Np9-ZoIn#81ZA_Lq3$S@y2_IrQANCU%t(I5M3ER{nnrYk1r4E zjw>=d8=a`PWOwu8TIP2fZ=`%1#UN$#nM7qG(RO^tXJ?l1xyn}r1bfrU3@dHT;6Z%g2KbmxTguyn*i<`|Iu@eV@~e^F6#A>7fQ~g4mG`BMCMRZ|LkM z$;eebahJ#(nuC6MCYt~vEXfxDL+F{ZOit>{5!?;^N{Gs?;MIzt<&rM3s)*$l*)k_w z#TgP{?&Q$Kf?*&~1Ivuk(nNwGx3rR;PBaadMN>a;u0$MS2q<_XmJ`d^e+CVfdDYZ^ zXRN)QE=2J)B!x%l+nd6#?ao41jf>BUvU^j>=k}Rje_K^m@FZBD=T3#(l6@*2u%Kt` z_>d*%e!@08XTKR(5eH%9UPwU(XPo&5GfVYMr3F;XkTCd1<5((kSEv9L@1DsxI z|7;?2qT6cu*yfHk96*WAzRu$=jB+w1*&nhyfbhqIL}CvpA7^qcaLvrQa?ym9I{(ZZ zafxK$h^AZlvE7CK2xkQ9^dw1#)yRBz%l}y%?=Fhw)+`;g-JA~h_V-&r3`@b_Iq8h9 zE=g1W6Pflt<$17)P!L)b+R1N{!NI@~ibiSoHajvf{5DPa#Ux&MX3l@2aQH}-z>r-; zahHt>UVuesrcK3(k&K!9S@OAw2y^q?4Bqn@e=++s@YJqem*@VvEUnT2LZ`P>qkjO? z>Lm#W+|L`j70d|>I#y4L6s6;u6GAd|E2}Q$9`o`+9+|0aN*s*++Nv==tlwu`(NyV8 zvRV~S9o)H?$(^GHqkvBs`w{=u6h6eaA>Q7{d)!Y!X; zm^^4AWL|iq!14b42Hi>BXoBjfv+(lEGU4isOUP1WRA!1~SO_{@N%Kd*ZRVQLU3rl; zzs<2ieM3}MZ3VtfMU>unMweNYYTi;ZZ-@4hXHWM$M52UOV`8P n0?5Q6BkJ5 zju=wBF#GWf^7lOb`y#~{Uq<*fw2I%B`!G<8*mU?HBh4eL+zH4njWJ~WU5TwRy`MvV zy$3z(HuL#pspR$SKME8P$PQXf=!qMVGxSMLGYDdi7U&tSfm{hTmakRHW}sr2!S8Db zCzhv7<=EEO4M3b4-^O*Mt*oAy?34u*XP=z`w*gTWRSf$UxUFsO3k8AM6gG^fwvGO( zWPlQR_Ko3fz`et@pYyYvOrBHMv03?{1JUK1h%fff)Q6N=@rJaoH7ms$A2v>46Z+Vm z>}+Vun#|utX$&W^ka$c5uEK1Q#lgrcf(CgrYywB|?01+59^VVJpv@n6{FIgcR1C=fB$f-16;jlv6>GaFJPD<9-bOZ7WNXNM_ zou)uSPdek_brr~n8HeJQz*3z-77UcLO_mlUu2#tyE7J-I_}UB2+ZMdP`IEeMGCaY~ zX6LoP@V3!;rOE3cU0l_HDc=)26TQZZDP&PlRh<*TW@loWgm(HPYsEXm!otMwy@5}7 zGelH(M$lT0AODb;-7+bg$vQbT)OkSooih{4c=2lJYZ|~G57lY$fFm1NWCBv1R^u;$Cb7DF_i5{vbF; zv!vh9;i!7Ak7#dk`*926Q0`vH)JOHG2(NRYodd&6Og{ZWZxeO8Q2yG4=al zDcym8ob#fnOU1hEneWHoP?%4HH(V;#l!Iq?_Lk0uYSZb`BLE<+L%!4km`0U3=@0ca zT=!HymoSQbiJo3Zy6>AT%r(3yLS+veQSgIV=GixR2;bAN5|Hrcr1I^0&jvY3E$Lig zp`)FY@uVNDAQ^thr2`!YeJq=Z)=$EuaqvorRauQ^ND{eVa`#P>Fye*wIC8=x`)9&9 z4nnwgn$@_|R9VWCO>SiqNwoxQwyV~focKcBn8@a*nda7xuay=3neJtVYC#=aYiL=U z#RcWqj%!(#g%WL_4nIP{Y9P_1n*lOXK{jT+@pAZQ30p#5z~4eYRJd!WX%i?)aaj=v zx_8hTA2q_(seNsJQIMRttz_M{WDOl;Js)u2wqb;}3J-2- z;-2%h*~r#YP&Hx7n;Q}s5gt$=_f~eShFBQ|u#g9@}DvM;>JHjjj zZL!iZ0s(#*JuEyd-P|NEOmKu4I*cg>{#w(FhwsmnK^2>l2fwW#$;az0E6O$2`T(t} zg!zFt>JH|&X&#}ENq#uEs>j>BABqt~`6R_jQ#5whE^O+}Ef1B`fnPP&g?zSqpps=c z$CETa16;N7`}~VKrWx0gIfQ>N>2KWY(N0p6hP}&8 zZoz0X>D``1Cx~8!exAgfU8Q6F*hh$O{eVm7Z9|}5@xZ0vgXrM?>sDWDFdj)Lz8E%h zrKa3xTr!++Okdxjr&B|UOzb1{9+p(P#=4l*uq{TwEl=BmgNXMK4ly&#FtcB%dTzy1 zt+V;6sLZ~wFELrSw8z8Ap9a$`Jwnc%#JUf;^{8rln;>Ooy^28V&;&R7aHOT2A2)ti zJX%Y{6QWlUTQS0z zjeL`YxzvgrN?0aKbl}gF@-yU4f``RsQM6!d&dvI`Q+%w}*n(=_!oEUoK-z~1UJxir zw0>k;9-{oAE=hH9u4Rzl}t+Fnnv(-5m|xt}mRfvP=mK+#Q++A;-g#Oj70R1V0M zdr^aO=YN*)Y+)xGz9`;jVSeAI94bS?MZZ;dD9LVX#9zhAQ@5_o+>;^l9!v|9<_o@Qco%3jO8x=S%)aNIwd3)~ds~o$8qD!6@G5bU3S}E4 zR-?z0*36QlwGH@L&#gOZAVZ1oL1+0Bf&s>9kwU1otBK1qKhacs@IFt3TLp|p=`-vk)Us(;L| zWd@EXo!Kq@(fNHT)eY8f1=i?TSd^%WJsEDo zByK)NlL^44JC`;e^UhUl`rmc4pBiiNc{x0NTjy7M(&6yANAY$Aa=wsJMk(;Ty^wZu z=IPLUX+mx&c}&p7LqB(ueBOp95o4oyxO_PRl;5E9IL$AlY9WVD<)?0*eG{~c87$~f@tHcV*5p(a3wziol69Ln_ zbIcKARRv4guMi8$y+aZ_XAutR&pYwg(9Ss&cXzrvYbDHwiSw>~+5-{ifPOmNI?;06 zBX^Od$o(kQ3iB3WCIm~#R#9P$+n(;7B0RRJuZ7akh3pY;Ru4;;abMc>9;<43A@y39 z+a>wKGO|InG3(8-FgG1+YEO*~*d}YewIY33A!p z#Ke+CWBg^}_o2^nW+ii&D%7njKp~UE*F4~;s*A$oz^DsfK>nNNuNq1ld)4xANqzVm zz1Gif!Y{|{&0cvfcg78Nm7cWyGVSF%7-Gy%s|=gH0pcSY7jK5~k)suYAaZt^%DiMH z>OEyK(?vxyNi@PUoZN%_9Hj#WB>R&_ z(xpe=L}~qkYZq4CO?0tL^U@r@yrExre&Br9$A-$Vr`wjL#8gX)zlwgK@*;)#z-mqN zEQ@K~G_t(VgC8rq!=6>$Y#DW_50un;8&H{sgx01$-+cDoW7ZgZ%p%D3abe+hlt|iG z;*Qc>+2430R!2WiU5>>y7Lk>Vq0x*1%!>OASt&x0h?S zXs6xLkI{1*JFwYuY$|bMsykFh{er#0}u8ZxM?JZXlwfiBoXM;^wM9%gTU$esg;?YYE{|?0Pdy$m48&9 z%pZ_Xcs!eqkC2Vu1TJ*&B}iY^?RlzROV-7smpGDIGS;eSBWIg{cCFR9hv{FnTdo?L z+T-(+jl8+je7`*sqik3#Ei2s~yY+7%AB0+XQ4~vQ?d<^A^0kJIV~4C7Y)erd?hUy} z@dqj!E97&BOur0+qiJqyX)+9lgxKkjzBsKq^*6(_7nm6Y!Etz2EykqyCLFq`Z+{sPcHXAg? zeJfNhNLI2VVsCe7RLI(leL0Ozdnl0Eu9+_XkjqU*4@0EPEo2;#&XP~?LOKR{$_^B4 z6F~=~%q;qZ@qMYpv@%@Hj;C)n6wg*x9KxTCTP3Wv44{E`)6Uu**WN_+p&CiH+?qIF zo{Z>h8DpnOLAgtc2cr*Oq zgbw5A#T;LagL`eG72F)|6`Ln57SJn%B|NiJc#^I=% z`b5okY+^RVf+GTim0k*^6f1N5o)^N~_i87kX1$QWxT0EPUm*MB4yhld0%s{4vCA_R zSq0xeco2Q3Z&};{!_6>TMvr*ls{GBiVem`xzTcuCY`#vG361NHF=MH>s=RWxZT%X0 z1HDo=@nWV}>411PJoc2yu@H{ZZSf`-bIbH_VTXKBqYy#K&%pE#{k}q)I_C5a{L9cz z=kc8{bIKv1Xv4HugaGr9!U!?vr=q}xU;9+$ZOI$&foosb)+`mU z5%)ZSp`bfW$j?deoF6-%uMKWXaV_tlva>%S7038{r3PTy;zO*k8EzngkokQeUGAXL zknL~>xvCf`@m|NO!ZC&fd#;cxO%7azBxG=e{hoKVEmw74g;2MZ@uYz=FyJMN(B;|B ztz<)9=`cERc0|72g}ksJGsJIW@6i0U(r5-qEHaug;>(OF zs4|4l)G(~SZ+Rw=>kKDqExxz<*E2+d?#z)&5o(OB=TosabEGOs)@?63FVj{Tpvb28 zY36P*J<_G-%m~a~lekTpwm)y^LqJNx_Kyuv;QH?_`HG0>Y>1_*8iW9dl}s9riYj8c z^Si8$EH?uY$a-=6`efeN(N)Q@@bO*l>j+`(8M{h==Fj;$T9(6ITEpsTyW`DrD1SmO zMJ5%QOl(LTAUsT{BKE~Z(*kVxm;y;|v^neM+#-_i$GTz2lHpQ0-siA?w(m(1?(kr= z5@(!SYH$ zj5GQEv`RUKkB_OeqIa4@qqBU%4@woy1^d#PFp63U@fTy!o&LscP++>rMyjAQ-fX8t z83$f|+lmnn{mDz%C)N^MY1Ow=wSS@+uYb#3+-dMt zG9_5%9iY;FMm)f!VNn;6em_5_?A6;kXJYytoS=X*`FN+%zJp7~O-!_TqmWoklGd~% zejg~u;_Wt7I`1ZuVjj79wPFE1Yv0wCY?^Z|o#~|+w_5E4A9Mm#b5zZ{x%7hgtr__J z>V3wdNt9=U!h+dwb;PJ`!avC<*Nb}cpvgRv~zkqDT#lPOJ*Q0gG- zCAJslE0JquW)52f7v!K0AGva&EbgV&bKv+wrSpl-UZL_TMb&+_mwsmVmOS*RmAc_` ztlkQ=^N`~;@6v}VHRigTj6-Lg!9w8PdG`9v%1uu;c}!t*pekThV?Zly%Kxc00gYaq~B`)fo@(;yT;$S~Qz*tGi?v zV0J4a!y|XV_3?uUSTP zUd9hhdA@(mje*-N_0o@G+Z>1lrmSM?d%UG6S}Ijt?tzYb6|emzFg5d3?r?BYv{h&6 z1E>};0LFEwN4vQ5JKWd4xW%-r>LZ3^ycqA4kIfDsIUdpl%YcjF?2rn+oP?LclR9wT zt3tiqPLYUyIhQh;UXBUx$GnT3V)1wXG$ z{2ued&T2Zoht}*ZzC`?-vV&-pHWb@0l!cZ%?4zJbb5C8JvT!P6fmsdym0tEyNe?3l z@-L_h`e*0L2S(vDg4Lx6?GoR5WW5NVPV1bx-sWi1*vVsnzwc(S6SByf7dIog1w@9& zuS4eLtc08g(d$)72mH;~9up>1tkcZy3ji&*k$AP@E)B$hatKxHIG% z^G!+)4t;`1pKLdRP_^wqUxQPw3g;i^?u};cFHWJ z01U$os}%6%jMzxvEZD z?H8?;gzl<3okWX%(gz7eQ0;`QdM6Ex_) zmB^&^V`OAT}e9+iMG@Sf9fLDPow{X}^bp&r*SyArQxJssVj z8(mryk8~UL!4=q^Nej0%igD=-wXd|4)#X*qd4c+4w(^ho6Xxklwqm9wXq z%5THxKSRT}N{AmC;1YhsPa4h3E0~dKcMs@U^f_tT=ha@ZkRDL=fKO&+ue45H7OpzB zBXfaT)Pd1xFvy;{(k$)Xt1^8aAC_vg>$=*fAVwK?@T=3LYTX5_Jxy(FG~ZaI_AlxC z&gfd=~+ok`>7Jg^+JCE^1`#SHz zXzU-B`yU$mHv#?smWKZ4O8+{OpuJ;%v(BQk&e{vR&#m&L?Y7nQpe(*f)o2H-|FGQ~ z1OHsTPPoe|I3lO1Y#)sCPfJUE;eU;8^$kWHEv=q|rAGAb=k|3i-j|1JrrtV`2DaZB zoBtjX1-~zJQ$UW3sap;i9kQt_OIi#(bzg9*bpF4k@!v#dtr=HrNW9a&w?g2hl>3S_ zj6oj%Ly-S{viWDL*fPGAzS3YX@4}q2?lK>P!wtHB?%7WIpT~61aQa8Z@c)RR|GzX1 zI_*}04dTw8m)&(Gtb=$|8U!&vSWE7K&UC&7ufIpQw0wsdq8;W$DgTS-ccPpS)JFEs z9Ivmt6FxT7F9FzmFrb>da}v5aiF23D=7b}{Tc6(h@r@;+HJz3yt_Ld9CTWHl7f%1( zgOwzKqGjm;+5JO$Oqpo@U$#8$9vfh zqz9${47mJS5o##zjCIj(=3aQ)wPn&jVjK4 zzfSDSg`30&Doz>%<+${dP{k03k(XN~+pCq>*;$0+XJOBp=YNsjquG8Bjs#z$Q$cIj zX#Cg``W?e3KyM;^%|lWIP*>yoX|*H6TDg1l)yc@yC*p#s{ZUOhu!TQ*ij6@4+T7^J z0rQhXcCQ%qjR;cW>hjbAeCT8w|8kHm*AW$et#HN1q_R~B?fw&ywac!tkL_G>PFccJ z+kNaF0W~aQeuwmdy8n&%d3Prr9p!Lnfmv=rW=lSd4@rT$lQU)dE`)2w}f z8wu_*!3pl}65QQ2xH}9E!QDb|7zj>~!QI{6-JRfW@8o`-bAH3SKlEO^XYE=o)4i+u zx~fX`(NWJ8!GKP2P|}@jPErb1a!t$G6RiA&%JGIe?y?^z8~AYDI!U>MUFd&R(y>JR{HS) z2zp|)#Z(?9jT~thJJb(Nkkg&ER|QYXH;0TX#`3(nZrOGsy1C_xLPUC!{>AIX)Hz?g z|AYDWOxTDti>erMW5RtlYzjyjQy-}NZc@em3-cdjTs=(o$W3nAV;5o9j55M^s`_11 z{0sl?c8HqHC(Ij;W|tsaI8IPhjqwgXSpG%&+Xt^d)moi~wEcA9%8|CT{muSp%^pW5 zDmt6))%J7Yy7+_vD+#UWa)Z-yv`AMD)NkHG} zB+pdlpG@-75;b@pCEa;*+|IRNrpdT&`mzrDckM64a*$JDAF$q04P_3v4aFM;NWTyc zf5v!F4^#NunLY1xsPNR*q)`TKxRx^6tyc*%c(K>z5NoQ{D3di-Hn?z&H(*@&^#jG_ zn{AAx?O~kTpP6*LR`=q`K>0&~O~4dS)xuy+^X`q?$u+s4&*ZMC>mrYht^q?P1lCkI zm5<->Tk^XQ$^-?(#bq1jx@z4Kx{6knU?sKk`>=D*dF7s1mG5t)93C%Kvm5YvwDcdW5`#zQ!PhI;<7^6?l0Uw%iRO*(N zE)vcwb1S4GD`UV&++8XVz>wKbkLmR;{Rz$vyYS$87@2cZK%;CH-zEQ;y&-Vzr@l}I z26!P+gt`&hv&#ErkH6hBR@G&la6lCvVG`HvpDCctWA|EgH{9VU|4@ca1M% zn)q(JT=wv;)sF`DiMssx$Z^X05tGgdW1 z2nSt(SWo(nBc^op%Os#~TMUcCs%ljQCAU8$^`OLQh11e)Ni)7l8?e15Cin#~C*%^> zxgj8w-l&vp3Ly&ZxYg)}ucRzry*`{T6S~#ETC1km^a+xpec*2YT(9i#$mob48M6~U zS&4Hekase8R!ej+xky(p^0c_V-@$INmod*V!q`@b{cfl6kHLh+=)S1K=CJYXH0GaU zT2OLNlc=PXFigF|2gIbIz9r2E^<^%%RlYG;QnC$Aig?d*)fK>Ukfr->yoM*h?Ktk$ z@aO*Adj?G8OqyJExOF%wZKVfOuBm3)PSROEYc5XuTCnAWrg>hfl~QuCMF&3L6tNwf z!C_Ij%$=$mrBUuTh3>iV%-)UK*KZMJ4Byk^oHVMEd^L0v>P@v7rMevKUA99V+OFNV z@dW)omhtuK7xfNHyz`C*Xnj*tpCIS1sQ=L*7}@sO>WdWQpCcY-v3rm`9HvI_s`5g# zlGXnk`*=|ify^JEL+EP`pw5#mbvWmzxj_g%^u*FyxNTk=+Bb(;22zs9@ta+z{{dI+ zO0p(1E}Ro;iE6a2B^70CrO#d}XjukUw7(DTS(OwObr+Fj3R#!F_^=LBgu2MJuYhbs z5AH2|)KOxEgU^mqD-EDCvJ-Ix8fjA{wMaM;A(;njSyPAoaZ|FvmU+(){rQErordE# z{78?Z&xC&Oe%$)-OPdn5g03F)27@m*3Mi}R3vAHE9>zZ$G44+G3R`M|Y%^O}sO4Kz z-ZEhTQl_+l?1pA?>iK+Vzx%Sz`hObwOaUNHR3=N)1`5#)szz!u=0$k^9`oDPyeRQk z*~{ev+#D-a+zU>YkP~nCG75bu7>U5yW3K+xnE`K`vaz2K-=T+Q9axrM8+m-m8kgV{?vY8A+U-n_!mN@}3Y+ek>&py1T=j zD^qtB>hzZ{Cyun?TYeCQ>R13l(xwL9oXNZrXKteho|VtYH7ljlVD=hF?i`c(33c2x zcVZD7Gxe%BaXMSItZilMuth4^G#+Mqq16u{}VxLiIjy9mUbzqu#3> zW`tL&&`|QjfuAhAaryo=yQb`XQFqbPtcH6~bfMjD;f$G7^gONwj=%o-+UB#PW!a)~ zm$`kQ3%j0T@r`%H0%C23TA+1|ux_3aSDAss4SICwIkAj@PeI6>lyF)Z-Lf-R_Tog! zan6lbq~wB+g$wCo6vblSBd7E29TTOILhS*5`bGB0ph{&5b?81JZ|eAjJeCZ1jkbG9 zn)cmiJ;Kb%w)S*8nK^%4jWtE)14$c73Fjv}!4#$MKqAd{0k`+Lv zHF@yYcU8>!2RUhFHa{+lYT@xa9|JR!iA1xoQ2cq2vg}CuMbbdAR^6u7XB`z@J0X=J zowsK&orAvgVW_#ayn^Z|UUIEed)OO+0#qyk+MVmBn~H6jDa8wriT&QPTFLQFeYk$l z#G#l|8K5=d8_xhN<_p+Fw((5Y!j+oy&tDkpp`dN^DnhcgMwXbZctB*3zW}a%iqhZfN4_DKjoDM##tAtguSOVt9p7ez1ul=;ukbjuzb$&`_dx}hcK*C;ai zWgex^0HDgKxW3ltWAgEK6)-ZX(GeH)EYqAE^b`6oO#AXR)szuJYp{op8lHtCs@IQ} z-o43w5?}r-)0qmvehN0nO^)MyE1LkHG|bYMfDEzqGH8vu)1X?O!h~tLog)@z700*P z7i|pZXBW+D%(;8QiT=jpi~`v^K4uHHTOjX20W??BzH^cJk(!M~YyjYb)8Jl=h?To$ z*(SBK89*&$i%=N&Sj`KE|zv%tlOZlaAGd4kvpd6X) zBrskwfUY(j14u*CU>e3yFn4(8riiqpDa$K7$?GEMzFkkDtCYjy zDW#dItZaXwP+qeI4{QFF!iw}>m&s=We~1ZeR$&AnDcx*5*j3Jt>Z+Oo3yM_VLV-d@gAj6(9x$IZLi_U+Si{z*XmIP+bLpeCI#?^a}rC0G+31+lc+q1^)e4=a5d10UQ-B+yP>#%97 z4r_ez*bT+wyME32==*)jz0CiJVz^K#?fK69`sB*}V{XxOp_*IU_npfUw|$}uG!RY!?@SVr}SJ-T}gb?m!ZnYK=SvXqi_@z4cggQV->#b$aK97)!+>D}THnJCTXaeQhV6!RGPg zAD!UiyfB4?K;ZxEY3!Zg?b^^|oKL2U+FDEFG2?$mL02a z2kp~i2rQnwxHoT0!g^pMkIp~bQV%bRAO5iguiIt5ZIuhBh#dZd5(R^>mHFGQIw~Ey zbF|l^8f@0pv{S$De9o*OX_^kOr6Y%sUbhrM z#f}U8Kg-4{GH`2Oi6-Mj1I~ty?@Y`y@g}vFSvprDUQv;l(g@QkAGTHpVfMi~7xw5@ zCh?IM{IxhwImcDnWAbN=>r2-v>{0r}b#q*%8fhYG@rz}QRU971vnfhbTK-dF0Ub!3oa-I(=! z*jXjbYazD`I+E(Ec6}3i=vDwa@Xqj_ETwdnn_T4jQk3d`F(>tJ<}f4i>$APVpkB;6PiY1;h3q>W^I z`66065@DM{aQQe!|9CaPmGv`2z7vCh1a{5t=W9)NX|nWV6P9-|5p|zfC$^OXwx(p% ztxzk$%Z=^TTnlPe_2ZP*Y?vj*YIO7*f%;qq*Bmz=fO@U)~aO`O=vhQV^|_)|7d8N0D{BGjxX z%*!Y~M<`s|7lW)y>Zzej2X?w@8w-6xA#b@r$;vbWs;P)c^W9|&Gm&K;3?mOp zh0ng-ws}Q}r`*rY^Fas3qYaoMvC=vK8s^gG->vbhtW5+=Hu%DT`S|g4LS4H_yR0YK zyGIfx`zz%hqiCeD0OAQ)5;9v_vl*;RmJn z`}tc9ZRh27UypMdNG;eu$>7THY3I#3t+i9)R=}%rUYOTPanROgG{U>m7Hn_dkw5qL1i5K;h{EX*%M0@O2 z96rAvD)mMHcyWPy0mUE36ft;v?w!a~xqY4IJC0vK3?VK@u#hPBr=_J8}i{fj?wnACiLGgqpv=c?|`7Q4~FwaBA+hav*0C{l!NoVEKZ-6w zU$d`Upkrz9vb|va8-1}>HC(&Sfxp}*k^8_T9a;MW&2B$0nn^=auvG7;t4Yu8VfhYlssK+?!*^(Vd3X~(x02V z17m!ji~NoI0}Q!L#db-NO)e9RzA>82rA=?O??Nk#VbF#&sTi#Xp=ok{JMS;UFK$}! z%msIVL}nw$$|cXDZjB+0n07*uw_bYUrzFsG%TJbSQ4$tSUcyQEaTPh1TG*14(SUR+9r4 z4M!bQ(Vh%hOI5U{*3{QFp(tje09S|C{X{lz11b@>e9xjOAi;ndM{II4hP$u>Q!t^hw`Z76KJ&bGtRy}G4C3unW@bPP#>{{ zr`g%fm|T;{F;Io*1tqhH)cO?G4K{dbNtwkFb7u0kN9&1<>dS?=fzjjI=xGf-8E24~ zMz4jujvt`nSD?N4ido`<#gF_dF?|oz2Ce&^N}

    d^bD0=O_xnQ%yeH;hq3Lnt3Yf`T0?6 ztIXw@fP@#8+-6o*`D2%{-?JMMCh?(6k(W`;ciY+5SGPxtjd&KioQ&+IAnuQkZ$svw$XpAsKgS!Few%r9%RNYk(nnowuRo9wgitp(Q1#K^ls zD3FYiAb4KKUU$jKJdoq9GJ>^EcA*?}gn(0Sowm6Xz7Ns8o2RYr)XSL3VR9g8_g{ zuDFa%em;s=$F})T(8)^1m`N=CiBXEX?v!k=A$3eB&GeoLBNthsj7yO?Qemt9@p@Y$ zm^}@-z>k%^6QXs)IRiFh0%*|XlHTHzvcZ2v(yq}_$y)a42 z!)a8f0RHu=9!YP7XpHtG8u1y{)PYGtQz;xVo%+JDo{zU%Y&3>S`LpLBtt01)Jvnoo zQX}fZjZgy-FY4r>w6WHd8860VmydFkn>8kkaS^=-n<=fDg?T4G^#yJ#o^P)hmI!F| ztwV0Xm#BrGZPr$us%fBHt{3@SC;RxawZ)%dwh~ginRViE+y@bCH*T9ZNsuwEouVg^ zF4J^{b0mL1UzO6h=cFbG8B0>X`%N+fh&(SEzZ6(cK+Xqj7yle$4mAp+#~n8bz%7^0 zt`Eqn-Jr)h#QLl+11f-8-Ze2N9v?45wv+Tb_J|qSY>w<__rTW7JXa6=O}9syu^N!` zS+KYa7mT;DfD6-*n80;VgAU~C(wX{ko4PDJzpiSonAKxrBii?nDM^2=+1PjobACHg z-;z;#dZo4F1n;}9S0FOu^sm;BGe3%fHJdHd}Af(m374rOZUFb2| z&voCgyPdPETc>Sa;KIrRPD4lStbNnc8(styiRh{40Zs60W=J7MIuA~i?e$wWp{ki> zEpa*SJrO?M2;TucyyD;bD@Qneo3^6@Y#15Kyr@|Aif#m&y3GDOs4BSXNZsE@`%-C6 zU^Zfryo75l{RV~Mz!+8=poelGAB2uI8Wijsm9)BBUFVoLlB~7ZZxBW3q6)yw!}(&i zRx1)yzXNXb#f84LE?G{|<6OMy3tSVi{*`*(8Eyu7_NiNcehMCpdla84(JbZm3o9-o z*mhzeVFM-X9US>sIju(#*Qg5!<3AG zsGGQ2DSyNB-Vu5vOB0h|XJrFhoD5=^)h7};Q$nS>I@IYD?syGWYtDC?9fHd+jnvq0 zI3#-#Il)YXn5GC8dtts?RTcY7Ry`uC2dQ31qNms7#3S?}}d zK*u4Wykvp!WDxl&|DmoMu5Po&xAuH8h{gw7E!tSa*H5Wf=`ZR@M(1{baSa;WzLmUX z87zoqpx%5b15D5)+oo_={Upz=7c!KiCjwk5Sr}{IIo>fwC4fc*6En1mpKB4; zr?o~CevB-6+?XEf*2UM5i|eR4E|!0hNBY`IV99=JQeH{NJ7FxYXT+5+NW$VAfzsaz zPiHivozIf7w+exrKoJI!6;AK^Bz%n94aLeU$udS-)m$eMoV_P@l1i+TXOnq$nz!rB z8uF)0PHfhmE~@l|UA3G95`C7lpA^gk@ZR@LQ&(&$m)K+(xds@LuSSiyzWv`#QDZJQx?0(~qZzUhC|knq)2owJd@^UNoZMnC)h8vYljn8Ci2z zC=r+sP!o7xu1{4#=_iXctZUlTLvy%vx0(R)dbkL6{f#4M?sMAD@*uZkN1!vkC-0|C zz>qoAqpB5&Qx7VrWh&PKQ;iesp8T9?_}Pf?h-r7Uzw0p#SI(|s5)u`I^b*G2Ddiue zZK?uKO$25MKO32%G=WUZF=n3>b+PsCVc$Y zEd0Mqo0?8i^dHXVloT^=3fWJpe6M@FAgd(SydNU0NC!-6;Thh?^~o01Qow`17&g{b z3k|~Ur2bA*a@}QNOwf#Zm3=2|5RmTN*-W9fPV~^Q011^K?h8;Yfn_mtg&Gra>d7Bt zCWkD`4M}6n-I*h<7X_HlXV1ES=WfX?P1AWFlT8Y_Q}#m5?_z5@CColqbPhe4awfh8 zQZp^is`nek!odMvgMlr3C&zKcVZCv8!kMmOR{7GuRT-ecHNgqL@tj$}x=cuv4Go)q~O^`LE`GC=5 zwC671GNi6o`*|$KkJTxNze#2q5idtOZ(l~RaN|<37%m>vqs`@ zV3tcNmo-4o-&pLGg!Skgz^D28pxk&od3h+! z{$+|atCTAQn#cAN*QTnQqR$+da7CnIFR5WJ%S$gFx>M`(d^5eLsnnn2uF*U%+*EhI zcSKw?W_=$0xOVltdm^k%is}rgw(x3vFUQWn@nftqit|TkK@m5p*C^e*!4AQn&7ua7 zi|6vt{gut)<8t5F_a;}II&uUs2#$iDoK;kj{j^mcWc+tNAL0yh{njQc%7{QUshKp; z*-m|+n&RxbWgOV19YO}0SpHv6B>CFqf=6Wmh)v{ue~!j(vzsi zzwJ&mb5wq{*3)%Jnc=27)vCY3jus26IHGtr5zg1I8|jJ+{-hcmK_G>Yi7$HTt0*DS}+_rgL4XV;8qRE{>&&X0y8sn9~q z(LutH#4wKI?&3d?2Hrlp=*^;OzjJ>q-@k_k8673nKdo$Kt_yOjWIQigfa_N&UgLs$3&Z0&&ifB^a=7xB5`cB3 zti{V|{Uhz?lX2qxL*KnhrIF;Rh@gJKSdE;^$}xTEP6U{5eX@J5Tj$a+WlyOb_u+L} z7xyXg?^O5m^ZY5~Ty)o_`j~<6n6dX1YM0T%^NcNzWvHAcZ(APs^KJ$rkTvl7AcO=* z(?zZD;>d$DP7$hGd^NdqC3JU~X^?7YrmD93uvei3x$yi;ka1Wq4)%S!D;x? zwsFy@x3hJ>@S~&B6(Y~6jWvLpM5$gO64J;LH`bZS%kRf3{Jr%)bFFcG{jBj;t@CLS zmCZ(h%(4NNqDj}5j>^iSC`y#;a9_g88_@I;_4XXV&Ut@#{X#_FA3N4bsV9PSZ2j5y z3j9^eKLMmWlZX>JKg!eSHxHv!B_=C-tHz}g9^XFnf-5358w#5bLNR2@M%&gu!&xsL z_GLYs!bc#$GO$-YG51abqJZ2--CN_AnHHaGfW4?kStgOkS7VykWU z+!^IAptoh+r37LRAnypXMhb+R+Jyj2r{4p90eSo5-px~Ok;+GYte{gWHR-M_Uu2XLr zUMK$*%XRP5AAa9u0Ci%D5S>nue7(G4riY5>DSk~8q{;HGJQRzDi<_IG;^z)*cm%F* z8VP;dkNB029pJ6SoaEMz1#A2>x%G%h{;b5AKi!%Rubnq8eyrx2#rXnT>qjbWoVu&2 zO}ED>@p-SL&#&Dd_g!8)KOaC+ex`a&#q$E6Y9s*N8>Xu26%`eimzSsRM0ui$FMimz z&cD~X4zj;Du6p>};=_-5Ws<5xprjek=gqUam~woebbVnS1oT<$8H~j1G`#~roVvUe zGXhutSy*crE2Mrdfo7Pyrq}bFFIpG6y7lYmD5%JIQN^_z;K)vBzWCck)4g)l6NWRU z^99=B{;p-YoV=}kBj@aR=FHzl-Z)ll*oL`M>K|dLT;Qd6IyHH_NqIzZ!?}FqyKan^ zeQzOb*)RL)y3XMKKR^us4iSCKn~BV^?$`)p;N#~{Vg|LEjS~2^b=of0noj0Qa<92> z8b=E@+OF~)dF&M=MJ)s!t+rh^F55cIE4%L?k+_TCm1JCc^hMy~ft+LfN(i}ZG$Fnn zLgjiLcZYT3a~&4uKC^u=)QVB7R$}>d3B?H477XUBlj7)lBF5RgZ>eG!X<9A?l)<39 zRbWfp!}_|YQe@*mhJB{P*E4P2O3bEp-!}NSZ(bEE_GvCB41L`D0AY-&olJx`9e?}D zvOrF?n!~anV6jUd`!PR*s*CH5w06nw8QgmScW%{Eah5u+l{ro&{rn}460t^6?9-11 zadLO(jG=KKP^gg35&1fkjexAQ_Aegs%ugx>MC-wv&*ihSgfNYjGMw!1pH0_PxfV_K;S?KO4Q>x{&W99_ zs~#;`@bc65T|2F((`3~Lq>AP4r#p?s2;Y#P!qy)-TpT0mylSVt$k;xKdNF;D(A;&7 z;v<*_m1Xcz`EV5$rH6U~f^!M&+EogY4iIX64n@?&=KOYA)gNZ+9eTrXTtkT4yl)+! zWiL2qq&8L0Po({)6!ST>&j;_|aE@Ga0c9F{EQ3xb$LNwkyT4Bb*L&*_tP5@NxOcLbSCD zkU|@yUqA401g-#{%&zrn;~45zVG61Oa};^bhk=)yj3^;jlbWygv?=BV~} z21TqHZpJ^euM1E$C}(G_hSih=CB=ayiqJ696qPq4JL*GpgjY1E!%y3UuJN~D9hr*C z7RdO5gsj_YmA*H#eV!}9Lw)l;mG#VN-3NfeTabXE<%`{hdQdSp_9U4~sKaJMJYD#V zrfVVpS(nZTwg-(gL^5?S!Fq_Fuz&{1J~CrT;a*2#YR8)l1I|htR3feHUBiYn*Y|FU z!B;d_up(%%FM8SaAh<48wPyPej=|_M&f2@yqJYPgTxK~T1jjKkRhFgfHj;JneyU;5 z=t2}&##Fj==k_X)Jdf^rv}DA2OeeRm=?V_3K~aQX7=H#JZ=z$Jm@!<-j$7|Wf69I~ zM(PGFCA~9<4vxJnXldhea&IEWD|M8=)=8v`j&I4y0VYlkiCQ;Ijpc+Cc{k;h@ro0{ z&D6JsAwKe;pm3di(kB#W{MZufWZ)<#7ap#G8}X3EhoDiVS8-Ij2J$*;&=4I-NkxyM z`v3{=w?nOQ5biC)>iE$1epUl?5VVT;1d3Hlp^Yj1(Kx`JFZj8y(!GEB%Rz!3EFhc> z+-);*?)-37mr(@#CU;sB+g%bHhi6tF)hrwkW{Sp^(Pij75$;;by*gaP8ZvbPSyx8{ z^S~8b}0l0$IJTp}IY z&~J=%bEVL>5$WLCK3HKq>y*dWECMj@LUVMA(8_Oz+H=3Yt>Yr$a2fk0bF14M>EyNu zE?r_8tZ~@<0zu`ME&jtnItQloYkZ`_chXC1BcWk-$SLhj%sfSi63c?tE*oi?F&Aa6 zj2*q&t{l=o|6>t?@KxKctyauv;w}-LStZm|lx8RYBUqge*TUw(pSWNtbC3~{ju3ZK zwGJMD_d9r4V!Z5ip3@uSU#!GI9BImCp-DA=EiXEqpOf+vI0^Fi(f$3wt^4So#tmqR zguFje!1=%Z^7ZNIsk2k)P&w^0H#be(AWHFPd1Tlhl|}!(9QE(}?Eh2#4L@{Nf}!Dz zP8}hyAZh*o?9}1f7-b-A_Jod(z6HI>h80HChX%H{ z%_4;7@K+J9ktH^RJ3BikwOt`KH8H6qrdlduL|6#0ru@Gxiu~{DSip?o3qkjt*Y&ZW z`(FbkB_$vb$ev;Ydx60ju&LD6U>qC9Kf08i2CzUL9PR9?mf2ZZv#UPn@Vgzyx26jF z2@#;Wa9TP4gH!MA%Gj;Bm@NDIK7wHY_6bgZ2BaEsQ^ezS)C`T(K2NNtyLFRyc?H|; z-&xdZw0B7cyNAn7O0A`3Wo18wrZklVFJ~g~IkrdB<`))1CY6ERB-QP)ERO?npk&10 zE*0ci9PDprm7TC@d0tzFn?Mjb>=M$_tTMokr@I4RFM#3IoBH~CX|slghCKu`2@s(C z^y^nd9MKO$Pn=}4bMZH8b>G=g;TC8nDO8faEU`b?KipBXZgB{6BHOFU+zY|~l zl>>5c^xE3m(Q*@B-44t3tle5x0+L_-%|Ny+YIkmBm?`x7dg3!8j>-5Rf9OGzG14dI zUkg9Z?hiUojnvroQO!?kvg`>P|uj~{8Pm8^X{7iav9RMUvQ0#sg9(jaGS zym`1-*JQV@XOPt!r`pthKJgnqxAM3LOQ|QHH^=-P>>k0%!hXJgX7R6xWV|5vHEPqa)-rct-Y;iQ@XWwI7|%8?qsxzx5nR*N7LZ} z9B)MMVR5@K#-dFqQ?#RC7DZ$Wy68e>k?`|8In;Z^;ZYun0Kl3;^-32{va+%^>BtI$!r~=rCkmxRlhHHp)kJ=s zbyyxL1$K(Q`u4UEn$)}RPuDU~clc5HgN16lAv3S3^UW#RZOejCZ?&o2ihpb|^>HZa z?Ot(U<syJM67BoC|oD)Ny6*QlG z&uhUWw1bm^v*;oq|KK}cArSOxHj%|^PiQWAKWKRek z%yU{%Dfkx^MV^;lK~Db~vC&O6e~`$^ z@ZI5sL7ag6o8JH{g0HBo#9iOk7jzjfIbZARZMEj@5h3Y~n(qDv8o|JAEI^~}BGYO1`yy|5tp^ZotH{_TDnWJW% zkC!K&{rJ>sB-8`c3clB(DhD?K2??7qM5lm)W4Uz`-4ylgGHpmcD)#v|DD}RoqfXzirr?X8auA z(;Mj+CaAHD!i&$fiMevt>&Hb$8{?2n9wc@hqSLf%S*WE$hT#TU| zVwsH~=J)q&&i11`mcIuJC%G(bE~&wew~t+O$R}hIv0uWR-%`F;2!rgva>AVY(LX|f z-hTkg=t;dwdj5z(syi>fpQjmY&q)%D6!m!huI1MdTB>F86+54VL5a^#r=_@`l+(2f z;r32Wgs(1^MU{@~8-Twb!pZGT5w`8P8SN@G#|V&bGX_i#rpzdwu1@{WFA5c(z5>#8 zMqmg>zcHEnoyH30a)ZzF1G|HOt!o_GZ0b4EEap|zp~B#!S*qh9_f9QED2cnCd8$Ao zeFs@93v7ldWc|Jw8xUx&c4jN6=gbF?iJR|XmggX=SL)7!>EX<2rr-cqq?7uZwP z7cBZa4IuHhi@~2pzo7#LD^5Y6{$ff&4JTY!a`H_ut9t1ASd~ha$2~^5*>7l~;g`Tq z6G9laKx{E2%=xF*WA4Gbp2r9Fv{lmIXg*dl4=ey;=+x7mm%U7p2Dn{FruJJ9-@O7U(w)&ou#Uo5@dk1bq z{+#@}U!0RFuYr_lS(d9VmDRk}&0o_YJG8{%St6v&vfAw*4!T+NJvIO4`QDLkBe?_w zU+R?++*t|kZOYf5{mTVi1y+&j0E4TvEq2@+ivVvaIQS&-e0v-X_ zku7v@LsHjF79{jr=+~48_DnZPIl@y3;|mpSAPOaJfeEeQh(*EL z3>(FGALzx~c@0K4&p_6Ey?tj!#KJ;bNkXnf3m=o`N@3(D)=9Mf9oY9=;rg(%=4~k( z`8tc*{EbTe)}?0!Um9E&nXfKM>8t7R(;9C;p)P22>L+?=cbjH>1#r9sZ%g+&+n&PR ztEt=zk{QJUv_Ic^#(6r;VJ(e3A(oimkrZ-A2RPc-Z%Q}YYM+GD9gAx@+1Yi~%T+f! zCC)p6B1|4<+A!$BIJ=?gj}ogqGOC^DAigJ~ zVnHns(0tze8=;ktm~hq z0$36By_Fk!ejA4KL8jbmW&?gn<9|tQJz`k2l>2W=S5?!)lHV@aE6?Q%*X~1AGw3LJ7g9pQHdQ)28 z*^tDKK+tnabWHU1^`&W?g)J;jtL61iwTEpV51%p~Ap-N;m^A7q(-SE-cwEsBi*ap8_C9sIb957^d1$|4QYtVSR~n{&a!D zXVB;V0cr$3Z!7c!Via)%>xB@VRqd;{uypN={CpCKCQpc!*YCGfjsww#<=4stS$)Ty z>c(g?Pa&089T808)}t(!I3CqGjtye5`B4W;d$@k-C+52ex(%D(S)8ug_}Zmp{E)== zG?#==D9HNIp1KyG{BuuV^=CU)Ld*{8YwfXov(sZXS*5ZyQE2-8REPEPigrR*#X9rG9VLO^Zcme19AKj&3^jjOybWuUK9 zNF(>opNncLzTJ#T(SE~bN(E8U+Q!wU&G>P{JRHSeD?g>C&6h6eRM}f2#Ram_Rvz!E z&$phDO+MU1`U*#h5e!UmkYg)oaqps6a;4{pvZ|0%jB_gzfP+a>y%T9g^tvNkYQ-~S zEJDXp+9;x4rdvM?bZJ4VtuQrK~2U(0GWkPqzuVl3oW363Tf5S?v@S(#Ib^EeK&mW9uYTh++ND~J0E#u7( z9mgs=j9$%Z)yDklH+rG;@8!ABt*58SBITS|avDG6%4gq(3$%~|o5IJugYxfa{h0T1 zHbm(`2L$)Q8g-^!9y3ys*%%{U%hnxgQ1D5Vw?7sXH;u2*p_jY_AJ=iu1&~amyh6Vo zlNUDC^aBnQewR*aD^y2{Jk-a+0e>ClfunW^z$kpsy z|G+{2{+a(k9shS3Z}CTdGx{5(ySBEb^J2s2&$sYf@DjKEjVT>jnYXsTe&TRaM#50r zzwlhEGq1<80lv*&nbm(+%>SQ>{zJ%rDL^7%)H9p?J_Xx(ud9)i(muKX1+0y(uvo`> zOmMXmJ{#hjB^Sw?eec)qlQ7vOfL{8Nny10t(fF`YacGVpXGr<{Y3n=;jdJQ!LcXE~ z_-i+V5qC0Sem&jm>))BRuNq9$%>!&6fUV1jRpE(AXCtJP?)TZ7kd9CPR&cm>WsTGe z8gj;0n~Sl&%Pv!XuWhOw?FGOt>nO*5fa`Fg<@!8rHs{t1cfiF4;#fO?;z{}2&V|iF zwA}Z7@73Pn-paByG4k#oPMX(DP$p8w$zM;oGb2kafQI}!T)BHbOM+1yatB3BZ4Vez zxyY9!t**^M!U=aWxql3T zWK4t-?m$`E3;eU1gvU`=f~ze1-~h(=T`ztuzTJY{iXJ8sxQ%gxD}d#$^#h7uxzYm5K94lqJ<+U4gukM*tcG1qJ!h4i&H z3pRVr{@`4$Blkn<7MH*CC2NN|cW-`Fa=Kc=WNG3df^yl0GOXk&xVzTf6yNIku> zp<9!bj)s7?n)Q5NPMj^A9m;Vr(f7W|LV*cRTA;Q{6@i9iCmtt{wnyEXkDsW>}U#k|i8fTG&`wRr}(wciMfRlpuhI+%hcC|bK zJo`q<8cM)8NRuw@sVMVp+Q(yx8f52&wI_Bv>F>BGY2>fz0!Nuc2)+r@I~3-azR;B* z!n}modIsrg0!&XU;`u~Dw&!Pss+HuuW^&9i?C9tb-}UjM)Ta?95w9KCe0BjFPTe^B zBg{T*jQ8r}`Rtt`Eo7IZ;L+?m|m`Qb8Ne=py2V0LBUDi1n>E%!hziFR`5#n&FCltOK|qtwX~{& zVa`8*iEe%%pQOh_fX25+HBCaKvPvRQUww4s&xr~Nv5((l<-tldigug0w z64hE=P@UY#Nj1EDVYaMi&T))jnUF<<*)%u?z;t>5g{~^ZOS?I5i}t;U!8bP8093Qu zxuC@bkN3H4S`uixMoQ=|lgL9JjoKn%&Y^IGkz@`a}c3Dw| zS)htF)=mj5_w?yX@Rr`;q5Y~zJI~9YT*LT*x}K@D%bjZ*FuRm~`|8%f@AT#i!_8IX zIhu$L(J>>#g&Bx+$4N$Az(qu zG~V2e3ztqM#>S*rXrdp!-);^QG9%_5J(<}0p$0v&vQ%RHwV`M#Hi1TJA=G4q(+ST^ z&Q4F*&;!MdCpBMb(6xd|-a}fziUyt>XCR#&%Cy{xUofeYe(P0X9J7}m7ZyLi`PO-G z0h!1#Vr- zS-MZjdWU&KOIp3MLz`ml)dF@6Jz~hP$oVtsA=;l0BkkX))HC~-}e{3w}q=6n|@AT|wta)|J z!}fPuN2&Q?$J;t}XsmRdos@GlpY=EI+oD#_OZ~#8^=~7>3R?%q z!tN)n@v7tllP`M%Na`0^P0*P1j0h$jh|+94bX8m5$gOopO*7M~sUPU=*i<2tHEDF= zU)?Lw@+UEo7T6=Ka% zYR+$C$h&V-J;L|l0Fkhc5p%Sl(6klRDI_>*3%ZOSVweU=l(kb8??Fko?A*A^_&F*D1F*sSJ&I6NSGKr5ZufctP zjj=$RWIlBHb471$b#--lxrey?a|p?H1hzRfC%_?Qtr?qN|M_l1N0NJokdTz($b{Fx z##XpiE&U%^qHH!crW&C$j{hq3TFPB{IvqbLJ}P~e)H|_q3r+sz@>ynqX;_|oYz`~_ zag;YSj^2FIX08CASNpk7-Wuxjs<4{s=MsQ((}7iC^J6H` z{Hm2II`szXvwVWiuVS8ry(;z`9S3F8$E>d`E^2XKckxbp-lC>o809k0^uR!$;{#BR z)`4_Xdc!dEaR2>-FmtW%(>Xe;p?=l!spUGW@UPWQjnVchrr`3x-dc>p!NGlDk1Y8w zi%IW}scoP>ZAW zy!zn)jj8&r;Ky-c0zKV3Yr>7N1K_%keJ%FB=tz?GZ?#U1vXqH~U*4UvKC7Dw4SQZi zWlmHFx0^&rJ zOc>B7=Z&K#y-l_!{k=w-FH|j*Qpy;n@U)IE=G+1f9Zf7<=@+PdISLyy-f*%>Kex0k z3}YR0DW8nc>Jm14K@ZYd+;6g>pY#~J{Xy+8`m*14*NVvAa=*-+L-WI*_*juTU^lC( zT;4d}GkEr^V&BMM6^Yh(Z%4Lb`$wu>JAuM}5Xw zwgw}KzbZ7?Pv%29&CrgOM|>IK$L-Us{OjWhtS_&Z3~CNs)R_VCksKxVw%32{70We! zD3EyO=nq`kB=0r&E%WW^KI6m*^Ht%yNjVAJnXM|@1^gr&s@JAIYMm$07_Aw~8)q>j zI+j}Uik#<9FgZP3bv4J%bkH~PF#zt5Aro6u!+eLha&EKSOILTm-YNtfV%tx{ev{%za=C~om-g3JsC@_ zaKbOlbNd)c-|IL@{2qAsd?9}&RM>7GIFlNd8e|CSqLCM%`Wv3R&r*84lL>=mm`U<} zqv20x1l-)O34$=~_;iC5#9|g(7Eh=5qs_LkxO-^iqv7E?vZz{*;mx+qP1SX(=uxLN zueo0ZzQ~U@(43U-uc#kfUenP~C51QUm-21`VJ8YWl>j3DjO_Ea<)x|uM<7m<02N-r zI^UvI{GoLtMStZq$a4hja`ubWWR-){<(S6d-OTfSr|#jR>O)B8eI+FK5D1saa|x_t z;2rsgZsQ)@0UMvgwrCx>_)rK>EIgq$# z_#WZe?6H(Es>d2;`y1FXn3?Bo)hb=~8_IFZ@d@0j;`NuVY-OcOtyXceJLTvs+m5g! zTi?pM*j2DQ?X===m5_$4FB+K)-kcnxSVK8#+M2$q?>5zP=Mj2631^O^N>Zut6kW0( zy~F?o4%u2DkdAmkZF8a(VIC~PQ@OSPPs&aE_3<%JW}OZ@jI%Pq^^m0G>(lOJz9Kv>kJ?NnD<-8%OSPjXKI%H2=b#{yqN4bapC&;;<36Zsw2P!#nK0eAvG`Y8fMFj`nL0 zrTyq{QVA3)W}&{m4gRJz_DN{Ip;O3#V*arywpwp#5=hlCA4Mr0TC~3cNbC&)$H-{` zq~r{MuE-V^8xh-{elQGU4gE%W1}J0<qsn3H z6T8bewLJbIwJlCiWONdhk$A)2izXk5zi=0A&i?Ciw`EjvR+lt>&3&`2%8Jp z3~ISPtWP}VU`(91YdFv4UqhJbl>YYJ(T?27=Bu7*kGA!X)~4ZEHa0Q>YEOFc!Y@7) z)h-+QCn=|p4SC=H1?fbhwr@PVtqt*x)3k>|iBwf;pB?ffo^-9wD9^n#nBSH-9Hbc9 zKfnzR^dHz~BIsAojMm@OF6cRPB>K7IP}jksc-5MPc;OU>LZ8c9mJOk&V)wZ)`E3c% zXz4-o3c)GTY&L`ax9D_7`c>;1yTQQl?7`$))nGnmNHtcPdhq)I9io`C*l_8JgzjZg zqv~%?Ch-!w(%#U8^Jv`mq%2Lo ztMrJus96?HTI&)Q&Sb)fKyjQ7JH6ih^_Wc%@z*?TZF?{EcGqlSS?JMzr-J6HswQ;W z>Y4wu!gbAYqQiOe+YdG@<1MdI^l{j^X?C&~-=p17gY~(i?66!KiO( zWwI#>r0+TF_7{l1+_da530m^reG<6gu~}~4r9kN8r?c;;76$T2FTx`IsXjOcmuI5% zac@UPASv1@h7C#cV#IKk&H}wJnn2+22E@h9{iUFwfPNCN!c*wb6iHv@G+Sz1XJ*|6 zMU&=?p-mFwbt&fZ{LZgly{bh5T>T4FR4K>+`}ZRW4{q2AB_oqQ<_Q`hBDxWT6u~Yo z&14VjD-;&Is(@P#GEfA%pQpG3T$gzI{p=q@e;+;_`seWJJOB0W)1k|k9RpbAHmzek z`er|V{8)bN=aq^|K-|)Eb4ru{e(?YDgh4F6+6I%EAp^^l_eTX}eEfKejjcb{Pu_2T zP8U_Ad095{GFYWZa1K zb3zsNyXEbDm1uz}lm6XL4_#haSy_EwsC62z6_+E$LT!4LE(JBf*83kCC14Fg5OY@7 z>%PAN)#_X8OSskUWKk!lT94S-*f@q(dI5y3zK1fNE9FyvPpB)y4^VE+rRnl_-T#?-woC2&?OG`||z9e0@eQ zx1)_P-7Tz96jO~TrHotqrDs76r7=)gMi$@nJs40=O1_5Yu-~42#$47t1PRe)ue@}C z(4MqkH;8}m!5>_BoVMxkZbZj26k{3^{~Ow{T5I&#IW?7UHz)aJ^g*m;_YvO5xL8>O zsR+(;_;j8%@GKOrG)%DZfH4iRHeGs{H_YvFz&1-8#V)KRw z0d?vw%;x5%|KVP~P{F8rlAXgE7MCPyjB^k)>=U{_9QT+HRvb+jwEz9*0bc=-=4EQlbm;ViC?g%v7b4& zZ@EC(S|v#^u{3_^DeYNm<; z^B9ZdgIBvTA!bgoZN3lY2e_p55GFCP-nBa3m3yR9Q1dAVI=+N<6J9cN)WKQS3?NXr4e9ugXfN=*k(Qmgol!1lbrbh^lkij1O6py3 zyfZ^Lvgk74D9zN^&DYPJ1?{3Y?DJrZ>+!oe_;0nBhqzPG&jd=>`h*DmZ9R}qYZ|$z zc;!mXTlGCJ`y`%VZ}wH)?T&rG>`@Nu3bl={wIwmgwLQ)$9$n8B_s4*srUe| zc*yY7N~Bv>gSr!{+uKgmdZp^fwKgr+w3o0z+% z)PCLh4p=+E-@twQ=T2y$P%t9Vvn#X^AB=WtDxn>?onK0yu9+bXR1nHIc^zC`UG43= z*}s1uhDmx}o$%Z4tDErY0b;O!Y{fWp{=^IwPcG8C>^#*i7W`Gis}VtCwx(TljU4KHJ%x$gI4|&wGgmjN-$y4@(>F`Bq*o z8F$_SCyQhikD_dAq(>{~9qOp_Ths?l8;^v=0vOEZX_sbnSar(?2G5MY#aBO_$7B&7 z=mgHjKOB^!Nx-Zkx~<|+FFEZB$~d2iFtf8Gdr}?n)15Ik7N)hIe(PSc{+@nU%vJf> zWyI}du|wzgc49_yH_C+qZ0`!c<-HGE?5^Jwixb)39iq>zeJ7{p?!P8kV;P2;)3KM~+fT?i$T^3x-3MR{PUY zBM%jfdzU5>bch*%FO4WQ*_g;$C@*g#_Ix58O%Win>fqYv^J7&uTBcUgm`maT1kKns&RH_AniFb(hUgztKdSmZ&~*bLkz+ZzBHwjyVWgg_xEoS6-qOc znAk6Fc^V-hH5i_B-<;Ln+2NTd`HqvI6UF5NBCtBh-Q%(E^@t{+;o|77m9xpa>rzqb z1WTP}A=JdkrL{HMo5e%ArdTu`vH`(uKWuD!^T4(e)$VNX%a=7h9$CBLI)psv;d90@WkpozFVr7@d$M z1qqQMFh-!xo2|n%no_R#rK%yFN1sVX3+uv;yn#uXa<+8svRjSXZg<+=wkp@u@7iks77nE+w`rS=>zvTMqY1xiSbSmC)RZt$gHT-UDh^BrC4S|mXJ^zYj@+ovH)dpMY?4$qNChN~fT zz59M-^j>MhVfsm}$)ddmA`B0fTX3F3iB;#i6P@SRV#|DOEaqv(Engr1$#0bBY6U>Z>3axLX-M)_~t*>6DwC5&A$vD|&j7chbBIf@L5?Vcf1LLLQZr+QU zVY$?hRKq4R1e?@Y&C#>ob?uWJ8d(Rc@HtPsxDGBn$XzlcI%_T&)$cu_U|}68ycs&!ILw=fqOV3_`Jpuh)>n~xYI+G`fu}DIVcAwfYX&zJGZ|9Eu zU7|qtQL*Pl;CHR6Q8O0Kt4->==VE=@-7}O+>OeJf#pCGR-3sg>?PREo6(osvGqZIO zrf$+Ncca(Vzu88c!N{3qDg1H?-oSRZ?rGH`K0{yGN_oIIfEz~7q z?9JoD&Q!W2oG?HN63 zzeT0s*WqI^FwCyct1OB_ofEjpT)GCI@sgkU63A&m*72ays4jRTzD zy!nav2;7a3z-SimdS*hUlsdL-r1l*#%8xt?DWNiySIr{ND8b2dM1lpFVh|hphETKK zt+0G18G|(ryH*N_&sBWZaMlF&kBs-9Y3<*$-M=Nlf6I1zd#W%^Kc!}BaNJq&O-_dk zfaEtMhwB!1 zxPgKfNd?eSV-h9s(H~qEew&g&uItdrHw0fc@!e3(c7-k^nV9>s4#`w&=L!cHBMyfk&3%TRu>*l>0vuo%hgbKqcJ&K4-~_AE&{U{31>gSlIu@U#9uCl{S2vx+wje1P5T-2$SI47 zgdJ-bfQ`+NyFXyPgGRXdU{y~AiMF@RPo7d@Kb}9GrNYTZsU%f-$tR|B6LjXRhjZL} zepcu6z_+Eni0f>J^w*KiFWmrxDz81Ro?a3**FYJKb$s1TPInHNq=j#=H^2Vy*Q;{- zqqz0M86?uN6HJ28|MFPrA}1EwTH$|SolpSwuuW^PG}C;Yk<4#`3mEuTf|&2cgiCJ$T3>YL_BQLr$>YE z_C8Twny8O#lCSsPh{yqI#eUYJ5)!+45b{A^^&w|2)+M84Xfy zSi{3=Fj=G9ag&GbdYS!z1+_45V=Fd|$rFA4tPsj3Um}n=XJP^t*;n^xwfr1$M>abR zd08lO9QWGM0!I?^2Ux%- zH&)y*?9yJipn`)9Dup-8f>M*@jqBT4--eh@7t#_fz1JrbunIxVPYW#q-kT76?Z?f{ zmC$pQ-zsfRR>uG9o#Oo&sXV%PQpSbP&d~+q{Opd*PKzl~Ve82~ye#*o z`vr^CuWQtXJ~479!z~3_W{)MvssK2LK5k+puL+X}IoEkU6+dOU-FV!OF(*$Dd)n=mcmZXeU~bCc}Q*cfu~= zRP%^M>a&t!|5sk2W(y!?Hk|+`RNTtt>1({4@1B5iCSTv= zSf_|Od(*O-n(w=2?%%)9RB726eZ#nF!41F-PouSi76e%!-)R!vq-j!6sBXAf z7zDW~(XQth%00-c5YX6HVTHd8O%`m*p^1P_X2A2it;5LPD#@^u_o)qgmB%Awc~P zU(zmW4ss}BXI^Xx*eCO~@;n7Q7n2pyPDDOW8t8c;_o*|B)W6BanO_JEusSbMdHD%O zlWTg{o?p|8R|C{4Vkv?c@+7=fmF$dRH(%I_jE?5I92FUP8|2E-BRM_0=M+7Zr?nfL zAN;xaMmz>PkVH>1w<75U$OG`{JtY(_VK=GyYY3I(S(^)Q)t(fiS_=Equo%xcFORdd zCbHqlaobg{hLCiG>0PsgYN1?|wtwaa{g7eO*D)b(qf*#U-u= z=8xZ!UpXiPmjM-a3!wmy@<0i{J|ej1c+ip&$}pSJ4{#%Ch6K z(GH;V)>H5upbz&%1SUxUUm%d3Tsg--(40~#!>a(Gf&*fR^2GmRKx07|uXnTYWttov zH6(gStNj6b6n6uKikS^xOaxPwTn8KoXupZvr6_sm4{3?8i+RGn(8Pq2uHIXpG^Y;%W8n%W&W17x z-nWXUq@tT~qgEKun<_C55Q6|% zgp7wSxiYJJr@#y@Owy0IMwp(SW^!E_tvFI|LH!)^pMTJ@|)iHf8Xo@X` zQ#M7HJt;oA&B|JO7wF6FiABFjz6h3ksS#zuX%!rdKq-iBGcz&SaZ{a1?)r~)t3N}Y zzJC2W&?~BO0TG;ds~Y&t>JIpi>wiT)_xiIG)_d=iztYT<1=QQ;uEDB1B0@>Yrms;zMPwTF# MPc@&EDOv>me=r)lU;qFB literal 47770 zcmeFZby$>dw>AujC?FvSNQsm*NK5O`AT@MLN`rKR(vm|r4l*D^I&>>JG!nuPgLHR; z;Ctim+0WklegFFY{PwYrLyvn#XXd_Eo$Fj{UDq9@t}0J}M}>!hfkB|CAOpt0xC^|* z8o7@JTwc;CVFDNIx35%QVPJfX$Nz11`@gs@3i@ss7=-P&e=*5em4bnPq;!|nbJujX zcK0%KwZd>QvvqRkcCvDRD!~1mn^&0MDbE4}qme>U=9QMW$<8%?HEoa2)Wwt0M9!W# zF2h`zI9mCGPF}7aT$YT6g+7&TrA0yM_@iF~gDnteC)b*6LE(?IGvoc(bR@D$k7Q8- zj-ohh>-FUL2`K-hYPxsjpu-}K=`9+NJibfoF9|N1{eMrys&vu`s++JVuBw*aRec}85fACN2emZGFCp>o^MgA^% z8=oa?MWg?M*)&_yrM;O)S~rtGzc7PQ#YV&m|J9B}BkTO!^SU=^3djYimuWxyyIx0b zJz-B8N!!&Ysim-SNMeSw&*J_>JWccY>D=MG_V8f8b^5SUqJ>uve?>1yN8JBcOWjW6 z@%!t>Z(&{h)^V0rXABzVf+MKD@QXuN={<#-FcF!-vL1VUFurpbYWY|n_{xDRTav~3P~o@=3m|VN39QxZJnC0;arJmCQow6ibC^JW?9cl+x`@zw9KuBs$EgmCJ2yR8OjUE%9U4>eiun)MoxC>si0wP$&GQ@{B< zZX=D829Z^4cAm&R=C4zjj|P*Jyibm4I*2lBZJs3-1IwE!RdI>=C#SM*!Tm!udeA<~ z$Xg})G671wUj}L__6}{OHgLXt1=&5jbGGL<=`qvHY{^*XTd-Xp8?CdOjP{P?v@$!0 zSzb8waDMNkAj~1y<4>QljFC93z_Y_Oh|fmXYdq+c&ptm6W-c{r^%)`tZs9W6ybYI@ zFe_d`f(oMRSE4#Pn0J)yiUkI|{$uB~x zxBbb`hSP^uK@Ug~V9M1#y*~V2-5v84j|IWh*_CyVJ7=NvpYcR^3$jD21xW7Ii0UZo zm*#qt49}Kv>G8-73tMuLtg58bsG}U_o_N8)l6_$a?@ZO!n zV$Q)hiX}!|-9?k+6g>jVs<{wz>5^;{vA_NY^DJm>Prg`*hLu<7I&D2 z&0mPLwDP^TzEvPR%8#$s2jCdU8|%8+KIkL%UFa zV7?v)Jxn5;fEu zw@f%t{dlbm0hysrrk!niw=gKSs8Z?>w<#z7wHfeu^zX2TYQbAG|B_H64idYN>4Vaa znBG`#N=UrZFX=n4^Z+GZ6)CPw2Ev;QJ3sw`7Xg-buRO_NHU2NMdK(lLGE+RrRUIF5 zM9JrZYc*5Zlv|g}bqB7*VW+xzPaq35Oz*A1;k%jcJzuTffcWS4U zcJew2#izuct@g&^k-q7*faUrf70ImNR?0A)QFANT(O;!EeFwqo2(Oi83o<9_ip~G= z=uV3QUL$^nc&GU~yZ8apKU_wt8hr5&nwVpg zDGu%#yTihYFnJs9ieK6Fu}(e11EXI#=7%3A`*;SNu!Cvp%hTAqwD1WvE1F@iWrh} z2!+36GEMPCEH2#P3kglWxVJmcqIvvT9ZP+y@S{4ed^_N}^r;E|VOU${CgO_|krrd5 z1FC~o#6KSnQV_U-COf#G9G_wCvfSdETL1V=)DEjm+S9kD0a*<1#AJ| z4gBlB1gW7N52*|z2tWQDR#50;xrX~2FQu{&D#yX^A%zHZ`*0Ng&^0bnZRVel$IK?k zD#l&jCe-E;9Gm(qvkkH`2ZcY`Vtr{Iil6T@f2(nVv-(AnZr}=2LmBz9;Xq^bj{-CQ&1=erO2^FB8k$fIHx8t8Pghodn1m@=v$%JwQXa zv2aq??tpZ6?&Yic*)f~2JwC8@-!bM<+}V)~v{6_)S)wyaG!?@TLXvtvXS}+nKlZF_ zTJxOW#y>nW?hW$%Z-9GbvsPIK>PP#8kUz!T{lr`S`npS1l=0|h_7_{Aav6)2Skb*d z$wvO-qMbLJ^BR%IRiI%~=)6shVVxImFOCgSxwC{XJ##hdWC6uCG2SFYksF&~)VZ|g zLpCq7u8m4?T$oRuhNHeV_^&q{P!u|}4e(sNbQ-eIPP~P(-W0L!!9m_xXaTx?C;Wyc zAy$dx%}%JB^rjDLR*l&y7_E~)AaZF1Y~^_OLnAVm4)$>7uH;QpxPZw=Qk3yh8Qj=iSApX_WF7y&UxhpM8Vgzdlxn=i(1yxG`QC8rDMWrt%ZY5+}nRD!o`?bnZR4|8E^| zNNKE&uG;>?P`>P@ve70CWDiOg;43SZl%9Jky)Bshj^_uXKh<5geRh)s=hP8;>W7y` zo4nx^!L12uQ?Z-Rbk(#H#;YyutUx0$}SHi68_ z+6fN6W?cPtQ}W9%gK@dH?v2|^yQI|XJ?Sl2-C5x2GiD_ZYRK>};5ZEJ{@HL(mJlYK zC0Cs1Ee<6}K$}P=-Z#EVK@OhD*oaAoJw=4sG759y8aJGP#@-y|h+9mJtK&v6e3kGN z!%W>kXA2=rakVwF&TWY_A45$g0EPlC=t=5hOBrmIDvE=S6VsM*i+nAI)Bj{R>Ngmm zt_EuAd$#=43o`yOUamtI*3R@zXb09YgJb8t)(Jy4wnA|n3 zVpjv6(DGP&$@hfSasG+$aet3e?i+1TrZ7#fuC97xwW?6RRt8NG^+!>J)1BrhyCmh2-e=v>F$pE_0T@rOQUzN3X8M&a;S z?iH+hlQI`1B6SgTy}uiIP$LzVE9JTje(DT9X_FPHB-6p($c6hgY<`+Ag%+>ltIeGQ zV`oFe0)ENZ+&C!IW*h$LsVcToe(_Zz+%B_pXh0(jK~2YAckEk!oK`ctuk+BB;8qL3g7HFI)K1r3;UVj*mIDVn6p5-sJT$W~rHb83SW?SrRm~w|6tg!Qx)s4^omf?W ztQlq-g*<)AcbvSZl)UK{F=YxZdXF5DNA4oKEh)IK(gW00f`ZRPZ3gwg;qEzXQ;2ZG z=m%`uuwNrB(Mm&hd^2G_f4(V-sx-iu2Crh^eeia>rC2w*@J$*D2{ccbPh2y;a!WT>Yl{PcCS4;`>=aU}%jWJ86 zP1PSaDyQu^HjH&=q%e{@Y;T=~2%LWzDxto&ID{P2JH_X~CLIwEm7a&1?DfT-S9q9r z%!16Rvad579%LERhLX-$d@1bR9H7x=Z90JJ7y+p1*AEs#FcJeEF#2`|6TG{dTHhjX=&)>%3_E&*|e$%Gm?GTi2EWqes(1BNB$A$QrP+9kdZxBsh|io-+pYeiIL5n zMf!QZ`C&%K!7NkhX&eJIeEY7f} zGa0e!Qp5&v{#^qL35jWkXRG508`jU{*FVjKuzGaNA=N#Ng)q4d?_0&bWn~63r(*C` z6n1^crhNvKUfJmpp*h1$aRBVPm)|M!I#$YdBN1)7>aNxSz7L(~B-BKR zYF0`=4&Z9kgk-C$T|`L_8}YFo1SXtnfpsQy?r8M*v@nMiZvLPmH~Yg}fW%PFhCyXX$hd{)BmrUiw^^3>3<`8W$vH!vn3PyWn?JZ5i1;O8Dtdl5$a z)gj7#>+&-7dtL|IwswfeaKewX{6nBhe^F6a^!&CFFqklsweBt;wfNkL0j>m{~RRpS;pfu4M3J8Y6br@ux~6JH*hDVMBd4R{XZq@rWGr;KWQFO(Kai>Q6~% z1-(60pkR{k%R+_wFB{*>{e-Po()ja8G#qRfNvI=Ss)hUDD|v?LPxF5F%5?=Vp0zvtY@fz&`Wj5b?<1y?l|LzwT5rUy)MSfWmbm+JqpULY|BNI* z(p?zr2DAdzMv&9m$;1^8J^drNm$b2W_aKB@ZZ=vJV1paY=-l@4@AI-8UP=uB;g3$$ zO?lK{VPwd6*nWk?7kgWVTbbbSGmBp$TsgSr>_~DVlBQl=B>AH{C_h$9y7pCO?Q6)f zBFID`?~T+62z-ZONYW9gk5DqDIu7 zSdsox2%YxRuOWn$(u?XjhQK!WiR~d5R$QwD2En({ZIj{4n0ji&cI;11CqwR3baQU( zEoOdsqjXx55poLOa3?!FX$K`>re@Dr_Q3d4GGH_V_b}&Jr!)XZxYp=s?)|KbZ&fiC zbWZHr=}~XwZAbHtXYuFUP&x3Ad$N39yrvM6|Vs zjwX%-zYwS;Oo=LGb?xGN(!u-wA4+(#*6Ly->y14$D&;v}J5$)}1Y1K2t?r4sGqQz1Bwza4K^fhCg&HXJ-RI z&8b%g=ev^_9*h}^`OfAmB*Z+(iIrNK<=a*VQJ-8npJFt%sBRkVc+;_)Eg&HzQ)j;L zBR%1}kLoIJ_Dk#kmTp#|A)QVB)g|3tG%P;{*Cjxj%^q-LT@5%P(SLK}LjcPhE~>Zr zPQ2EUJUKw;rs(1vB(vbUY-BEWjhGBfIUYB_8l~;uZ+}ft=>;Oc;Ti*qbtRyM(Jj{y zV$5vCYMS=WP^mnB%~&KdY~p2HJt2d1$NgbeD{W0d;+ova8K5&YI>lty`M!Q)2%ZSQ z+E!|ePRy*!y(SBV;4pvomF)o7^KjMRu;e!3knr(*;V)qTSE}ryHvId|$i<4z# z;*HD;x0}}Dou%g<&%=Ik)_r2+Du=Htv0ak+-q z=lNkY3t0yW+IUsqP?U|dQfH8OQ&5o{hJ1h!6}GfzUZ(lf^o;&GZ~-MD^Rt|BJ9*y8 z%CgX&lk=-0=aj>v-0nrZIvuqsS5_-y1j>5zjsH{I<|k?1Pu3G5sd2T;wh(8Z4jcW} zZ1){v`jrp4N^B(~u#`;r`vj{#alRs-yifZs^_v_6$Bycm6{&Nm`qOP=eb16v7iBpP zHK+QjSQbojaJnz1l!TmOurBt^hE`Pjycom$VEDGyLJEgt!N$8@;|eCvh7@P`<4fY6 z6MD>4r-JSKGI5dF=glija;#(JaN=;yG4(z{nR_LUm0Gk<%(?!v38}uqrCH&;O!#8a z{VP=2Eoz2s%}-x}spCgYC`fW*ws$~+b1o)XYLw$R5ZP{@NNQXu6h0NGyYRD*T#lPq zQ6o*Fo^Lu%{N5M(Fir1sBQ`6tOU2egyQkeQCKbicl^sJyFU5V8y=va>DFL-xBeO*W z)C4Ib+(2cBRa)ScV)kw~+~?hoz8qJZfk~Pu>gNH!LWM(OlkHVp>tQ-FqRhA`NW{n8 zeJz9|pPRoemGrU4gcJPn0da);3(P=ZsKFiZCg^wf;R_K#WCJ72SV7@#>bS705YS!^ zFQoOTk!G7Drsc$Sk%9m${L% zeD*P~uv>4w<@+e9maVufVN5_|C#FJLCVPBmuT`E%H{hghl@r| z8Hz9T{b{6bmrHUwO8P5t?>9?uKpc+6bBf|LxqbL5sDra` z7fr`ffTfocdf!(~NQ2Ny>r{*?9dJNDIv47FjIiYsi?D9D{N#)NU3@#)|KE*A<#4yW zTE6<8dJ9=LW>_?UkJRX1EDRRDvs_5dSjr}F!$*r#p+vN80*~H(i|b%%xnKtQv4iXn zK;-tV>JQoKBCO+#uaU2!&d{~WrpV-DvYO>e-_s|?$tWEOVV_zb$G)K;u4(a4hHN;HOqh|$4(8CWqxVbKyqQ?olNj{81H4&3(I58bUerSix;09 z+5{Mk=Tz)XQv#ZSIVz&<&~$F4^C+_^$0JHImNNxj|`&M5h1DnDM=w%o{>&(BW#D_Zh*= zU=Jm|>r`+QSH+}@uM$!WT4la?rWnVCUaY!$I1gJ2evyld6VOxqXh#*%Yu+;9qXBOz z*h>@8&d{HBSU`GY_dm!X1j(7kF;Uai2jv|rqe&1DJxsXhr;V;BQ4S(8dgf%g?OHZ| z@SU`9#t5*`((O=`qmQ8Ybk*LcIl~c9f#07NH?#v4ViE`ol@oT7jTWooF2Z++mn;yB z&!MxLVRE%ejexzJp9mw?kh5;myFOpGeS`(tV!kp+9sd+HsXK_XukA}Oc97@vV>dk} zC&Oc#I^XN#5-A0R%diz!5Ku~GI1|ElrFA?npyrh3VuQkIC4PR-N?r+iyE9o@wn3M> zzJY+z?{ZleJ|#hxKIwz6reMrPwyhUw8R_BrpE>0>vuM=!q9F>DW6^NJbrWgU&v*N)iM5lW_S ztP9W#3lk!9M!%t?+^(!1f(`9K|Fz{piG~1s)R9wxTk?_7I!^9E%%q@_@j%RS2{a+j zghcn~IwqAy=b@>$5S3!EAec}ewW6DDp5e?b9KMtB31{Nhj~@wlpFIObao4~5X&6Q^ zN)#HW`g7!pIqRW8KOjb8ctf~J9Fs1aZor&^_^vkX2sC;w)_>k&l^>SrjV>1fx^LK1L#z15r zx0F^>_>}6=;7WIuMAGOdDsfRE?q(nP%PC%`%Wt^O3k?v-acZkJkjIZbtcgAMkAL79XkA*v$t!2)}cApEZl^7 z)G*GZW6TRP=M`3rtLvUkiXMRZ{5`?hzgj4py?X==2TSjaUU~D|EE7HgR*o;$Gb?WQ zd&z?>={(k?gP_&{c_@9SqMN9sps!)_vs1Ni8K|^EW>8AEPXsFOIDUmU6e#;Jtq!p8E z4zWcVQOwkFj+wI*37$CgU1jgC^~6W-)=A+6D21x}6)LGx$a}~Dk5B!;Q~G$tAUzXzKbx& zMjE(ak|2Z2@EIiF5qdyq0GP9+W5k!~Qhu%D6hCHrDDn^Bsj_N70%r$!i8npxT>dnE zKDI{}ksyeV4qTx_-0o@ zdmEY7V)mS!*aQRh+}4s4+{||8za-?OjA^Ujx@bp~I>-`aB(K!}xWN$|0;f3MpZoRH zRG2^Z&2_nObC;4rR$rVcGl|!8t2TxonLoAmcJX8hCV>>^j^s$UHyVfAD(fX<*SGEb82~tWcICw$5b)< zJU_B3^>vawlb6t?y*JLkie0~}nSS3fo`UgInT>&^4;YbE)vcSJejNVAHF7JCI&UG< zH?D1MP>YqXHqEZ(dsPNZIopP_ZwgZ;exgSaq|5#Z5*NL!uhu9U`X5}sHrZ_EAQ_G( zITKS$9~U;EfSA1SBIC0@w620&#nbd*FbGH{-GO9*h5Yo~hKs43CyB#!>6svIw13?<;FJ{&~It&X5Zk;Pm<8*r9;m(XQ4t8~P}d)@_|I64j_}qHoZn z_u2U%mhsu0No0%Yk8QKT>#wNrWbJj&V2yEKq>Rl4I1%yDAvExurzwZt!&yzpVCGZj zi})c(m?kRkqX1Yg{~dzCIfDezI0D>fD@n)vBEq2DT?Lr!-5SYGgpc^lx=O>dMIV6; zeC#vb|0^1Ar&-@&sx5$jvm>}JDk;xlLl1r!rounwZ}(#5$Y8~cf>>0u@-5Xo(j+UT z&T`3jc&pOLnG2SF!mLtuwq4hVBrIJ4^6o3i?PtQ-qzwr&mArcTv2-#^o)N6n0D~_` z7TOE?=`prt&Llt+nOLAdMv3htEE%eQt54;hhNhA#O@M^;el|)ZO?;A>lkagViuuBD zb{uDtCzWt!1FP1#P$19sGh*r(-;-lX4LW6cPH?75T=LzDoV_M{1VhvdzaPF4>s%bp(ymWbef3%wV$f3@}$=Zu4{3-nm)K4V)#ifs%rTV(Y31CF5 z8fQNsqY3d$AYFbY*Pa6_#pr!<4zoHTuOo2x8T1+v#wI&k_}4cr`M(C2DvqLN1n%gbwFF^STX zB4ZO?NG+QS=zZEjL_gaEF@uJk-?J~TiVNf7!XG7HJzX3D)v0#w?I*J~o4%{R9!+RT z8v4$O`$R$T?3?43HlAPqG5kwkF6W3M)3?WRP8Gfjzle^l#-8Nl`k9Z6y*{;}Iu4v2UimP+>#4lV@~(38Mw<)8J*lm7UmRR(*AYnw7Ez|e-Bk~m{M2ToZ$1UhT+ z!Lq1pS4MaK(o0G*&N-q)NQgWwf;4nzB%MS@d=;n6R ze&hlsOVl)8Y#AY8!;ks0mry)%DE*KMKh;>ZIGi{NJi~bV1Jy;ZiVc(*AA#>{!&=Sh z_tpBRvbbc|-?sqUIRxFXley@qeeWogzvJfDQUi^qk!~1Bw{bm#p8#>UBl}-%_M}M+ zTE;cQ(+wdl#P1+&(X+G0oaxAO0S7JBd$EiigpYf(0}K zG_p!5Q;$`FNVM=Of(I5S)Ui^Z%4Y)%Y&OQ2;cPvE^jL2)+QJ0mf?yVps`irViCAZJGf+(>Yea?DPaL% zhYJvLPrSU?Hvr&N)$>$aX)ZMWD91{P&-@MHh|Z>J=z1b52hBT@De)yEID5K^$0bzv zI{csP2MCAnj>@B+%T)$H+tZBN&THloKTF=+mf8Jnl6LvNS?V$`7T&!D(e&F@afb{h z$!28GjCMtY+Z=GWe(#`S=m;D6r3ez58qhTaPakds5rrfu2q5E34fV#Nd0>2!T&;!8%>VLd+v79yE&rT-`^c>Fuv zxz_c}2$TszwrLFLZB2=q~%6OHv-IQO8VFs zVi_bDgsrr+CCi0)s>WRxCrOy^exyMG9CZb4t$&7jqEK?sT0+0_W|b8T@9h3-EoUz| zAkE1ha@ZcC>?fgj9*SBhC9Vz@)2|urt*@aYV8F+%4a!j_R_kcK7Is3fzomhN!lIs_(rGBPj95P`sV4*Ee^9xWd*Z-Cw{YsNzBPm(5LSW|r zgL{Yx%Qd{0YF&z=m$s~`2d30L6RTFK264+o2lD*Onj-b1S&Hq9a|liu6Xnf(sb{O6 z?f;nWjm8-p=b0gDj`FK1`=j1Pre#KvoDBVYeb2r@=u9oEV8@ns3Yet5bd+U$ySn{S z7H%nWocBLMdWXGznDPAz$~!*U^iZ@#KP)GQ<)E1rPuMx~z}Hvd-HPON0r+G2bI_WW zE@Q-m#7^(ygT)!I{zoDfipXfB9)G~MH0?8bYV!+3)oOp-h%1Opvf$?qBx=<{K8qU2 z2=r$0aRRB^5|60(jMvzd4@28MGf5y<9{6YW_W@62Vz;$|;=f~q>^$gkc_{&{W&3No z+RjbMuoWk@-QAc`9+*NgHO1@;j+tiE|C|yHF&1dyQCzGm~(QWqTNHsaK-%y*CEuDQ}g zpIeX64lh9Kfk(*05g z=vWjVEdnGK!d2?roa@T5$12S&veWe^0ILMjVNgFhn?PE5aihK|X(`QV+V|Zb_0T{S zRSo^C{iPLv1lw^D;GV6Q5=mi*%u4)5N%0juw6%fGu!8`KugbmUSp?psn6<=o4ZgN5Al)Z7XB-^?r8R@@ zaldO*q6CU#4Kt1;wFsnJGq$(*z40*xEY3}_TW7KK3g1c_?Tz9a-_&GC^u$A*(+B!P zL@iqLe!xv&4!5qN6m$59>=_k6_EuAG*2N{;vCNR7WLQI{ka z;US#7YYNaEUpqV5n^svNCJj!(cBkdaa6Iuxu4r1`D>9(FNuO%EFd|;^kHW>d9Mo%4 z!$ZB?861TU5_6c3{FEyJeG7;ENz9H37-5(=UQ}$Yk$9;qI5!#Gu81qCR z1*1gtHcyhy=g?omz?M}@QUvn(&v`kr-UR)+30TeYF_ z!wb|VsPuMo(3bI_G-)crpy8-r=IGta-8wi`McY=R<82{wkh^T;dYE*i|9i3HN@s_1 z7qCsL z_Hn>*nA20tZiNC;NG^vkgG9Y>5y8gmK^hIdtTWlzk@(JrBZ_k6)YSl4hC@Fyo04XQ z*&Z4E=(m+RL_=r4AxGi?}>zm6!*k55yIg&DJq*EW( z?zA#pk4UPxHq2h>Gz(6DISuwL;5li9Y1D&D5=lz-Z(~2KiP3N?KsLV+KLnwN;z5ZS z3NuwZt@}o_mI1XBu$_9>oVh?@OfA!MzU50TN#P`=Gmh{8P27li3+pV!G2Z_k$TE43 zyFdQX_QTWr|N67;`WUVCU*78de|pP$#Pap_1RKUW>;K?0ZS`d26cq7vQmtkk;S(jg zYHDhGb4|J?GA8}m@^Lf^CofDZOxps@%-&Bf`EwO`r0f2e9G1M=u63Ltd?Lxf2~Qp!Q69L0_4e&stEU`AuPMj-4398_Esu_l{7$zsGBO|#)4F>>h$1z~i{+zXsfr2@ z28{c?KwufwIni3+Vnja0beaNIVaeIQSM!qD@^_tC2hLGpw52=8l?@u>Wp{gf`|sc4 zw0AK=6EK9g&kvR?+g^q-VWO+v#`}!X7pdi;>)$O!k+KZu31h&YGPYe`on;BrBE0rY6oUt;F(RkGT13R~4p3tRhhWz$-s7j9@6BaYa?@RqZE9*CxAb z7}!7hr%HK%X^1CqEY6k*^B{G?Ec06O=6tEib4S#5IWhz9P5a>R@E)q_?OdbB=(jxo z!``tXwJf51-x*S@mo&I8%5!ZSU-*w%?wb>b%!dGHA-`281*;NX;dyQT`W^zDae*|v z#C9KDT+9cWF=Ar&&txGOcV2Rn{CXyo+?|$0^ymihU#lwnbOd~OI{SQw=~Gfi zYkQ6X)gylN-A3*f*cd&=e=HO2lK1q!@M|&L^);>$e54F-i9%d5L9|0vkA&==CjQCqsNn(C z0EeR0Z`RK+EVSg6?**FxwA|cT}1x=t8{aXTS@Ux3>t2bKr*)Ox??(jc}ZYT zc)h8+db4>l)8hP4hPr)x{2%yVq$2snQTGSwAy!K#TC52?V&GzE%M&TH$7%#@$nkTx z`v~mG=`Ve-{`EN3#3up+W9}u^EEtWfm_EM>s@6!m%nWlwKiT%{qdPc z(_MDP)DeHMdH(t?!TNthfd|t!-L^yYFjrIlO?2Ko8)?gD;5iU6^1jLy&C(dbKwSoi zvAi7n8~%~*{CwbJ1QAW31?mL-XdYFyKipbBV@UN%fUM92#|7VAJ5}kbZ)dOBsVA;u z6>q=4g6oD=H~9VP|D{Y|nTh9N!#kI&+wZDA9I9pmv(0(Q-#IdDU6Yg1alzkYHlKX{izmPa>Z|h4=l6WAZU*z$ z0+QxVaxUo3U&LdRs)QFuW9HDDlI@O+jr^R)PZ*BITbEihd)Kx%{&FzS+p zf6{Qbp24}|TaM@K8(7qGF2>g4Z<2T`3k=C!jpf1fiJh-7fcV95jiT^g>N zleDw+t{jOb;A~Q&nCVx#7GNrg(p5vBE&gcR|2madbvanEE9TbCNx!v_G0EI>+B!Ou zuqYAey1^6M@_V{B@AtrHTcUyDZFK3cDo3c@>%h>(n3|TpRVj4q+32ap9vF090Xt`@g=EvZ$sPzZ~Y|=2n6?2mJ}W zuE_X^{g2(ZUk0t8-^34>&Rm3Z@8nX%-FW2*Y$PpfBx>eJx}A<3XomSro3@!R2SHW=S(+$Ag4SE@?x~&xw%O5 z^yBx2&g}K>HeutsIN3yn{S!(Rvp0;BJ5zzk-(k(P5o)bRjkJ6}#PGlxJ3oq!m-ymO$$;s$o!YlPn7C_tFW zX&9KiQaH~ByZGBKQyS`w%*w}FCoZz|ge$}x-V%2Cq^bSsJrXI-Onkj(8srmymO|e? zh*Oo3dsS@N%(vpG>tqY;bsaX~;mrNo#%5VGm9P_ZxDp1t){nz}AyM545)}~@2dWDn zvgePbCENng0H*nz2qB7Ns0)^&ns^#|!N>A5b^vIYaH7K9BeQ6kx_F zUiZ1a2K~8Fz3Ib^F+ba#%MxKrRokf&)^CoIROT;q7nu#O7RNWL z5+66wg)OGCn0M?Bi+duof+9y8Ja^X@50Z*n`ipKI{!T?+V$`LYfGyT+`(tiQRTM4B zuh|5?D8S2|JHiQ8wZFa5GLpvfUpe(Msq46*w&iK7J^!3jk0mZF%u>A98gSLRAI9S_ z*EsR|t^v>ANUQDy>QB`?p*kbXZ^S@#_((*=$KpHv;@7me8R~Gso31p^nR~wRoY|N6 z>b8@!H|3=$W4uh7PUOqye9yvvk-a(CAK2Pu56AZtnQX13v%O5aW)&-1KJtv=HiT{D z4|!g6+!I)+zI*8W$9=aez?pE>xG|1Pu~mg9=;qAS*J;TA_|TqZ&O!W`%Q%|3cQYu< zFs`2`KFK|oS$BgvN#WCXQw zSuA59HJbS1c(19U_eYC#=^AgoO7GolE7N-8=*bP6UQJIv@!x-S)$aei(&uQ^Z@1yC znc2dS*q)Kd{Q zqZ!YeD1e+#rupk%No4MVV+81MoVHgmRo9_?w*Y${Gtz4^1=NtPt*$PY4Z1Ss`EFGE zci!p#VnoXofH?L)drzDxCwfaH?BJAMIuyI6q2;M{`Sk79RYHHpkG20Gl2{U6jl6N%sPV_bAo*Xe@@lbgm(Qjt)qjKS7~<1ZFF~Ar`pP3 zxRrCw02w%T)<^X(?egtt&jUe{-NZwSj~a_q&AmhAgLB^ex_9Qq-XX4PFmqH*+FL=& z)A9o))h#qdi|5WXV28EkUYOr&hP+L;uHF3LzJHK8mDT?V_Igpd(1qx~@&Iojkd@}q z+LJln=*IB-!dVlOnR`}6TlRZpg<)uI9fCbWlFYP5{wDo8l^1Jq+>K|lJ#AKRA4^~k zl`B-uwqs8@HL%p_i4t3%VTt+>+ALH4QXSo@7J^QcPPCFa`IcIKY+0th7)SqkO&D_t zu!eHa`(bT3f4c`s3@j|p^-|_W=l8^z?D?Y0GwaIf+f_6jan3nPP8Gs!kLnb#XcPsd zaVy2#gi<{C6hup9@0NAvm<@uCF_J$8pfEn3110osSyL;&v}5l1|IVR&kkz1pcqHc z(`95li(M|s{N(GPl%2IW&32&1rBc=VUZdd_bJ=FEmwMudhlYS|OqGGow*tS*jiR^K z)+PZS8w*YMGsc=h5C3r{AT{&e?9W6Dy4wFLvya>#)l#`gzNS`%U{9?M9P02S-R#zx zOvsy6;Z~{`?F@*+o5w@lw(sMl zxGSZSB%vZgC`1ucNkXWEYAh|5WSO$>qeap}_9R=jBqrO8ZHy>8W7k+ll5Lo=4a1C? z`CVgad7k_Ee1Cu3uh;#mX6AZd*SQ?$c^$|3MmY4}UH7rR!B4kBdVS0RyTyjvfn)(| z_a?{36Sik1u>M4NVtIF)t)#=C zh1q@H6p~q<^~Vm^ae)iQNaO?Ruu)_tEgoTEQvrL8aRIS)N z<`g2Oz^%9pS(HhMtVy5gwyr3OQ94q*jHsJ;gj#TbY@UsqOw)_CRI+_C%yAL8FCZPt_h z?DIQrY*fvAwYL?2{-cQ=QLBwhf3)NK0!j>6=VOMDbsR}n>wt27$NHghyRL&FOn6*aX`2$uam zXy1ks=o5L^HxvOghZ$E^4Um%N#qnkPU|PWm2)`MnQ3G#(wqB#n8m)T$#|WI6%1=Q{ z8cqa^GQK2k;tE|x?+CvkbOO{k9<#6*$HE%nVQlHmJC(^3j!TA#jv&Hk!evh6(hMN< zd>^lgZ@KViBBM`0%TRX?wB=rUCWL-dIK>M1mkrVEKc3#7Eq-g`4>XSpx(S5gq0iap zNUnpu)h|>HA30tPvf@MqJ$9^t$HEup#+Vk4{c)8fSCnfJvDN_MHoZrG$UqAK{_}dr2AiJ!$TD#(8rd-G9(j_5`N;$g z_@KKr8u7Erz|We7VbDlKN9@GM6SG2{Vh$DW$tec*Jbz}lCvgA%_ z$ntXZqu4!HVLqqfeX1qS`v+B>8NYd+<$otRxDy>(pvJc^XR{qlDeajcs7`9^7>{2jOsHzMP!HRPwbS2@RLfU&Qi2FwyH@-;uwd3Cf5Q ziJ>GZ|p-!0$ zE!95?q1J1$D)R_@tMufy>j!cz9_5Y=n{ym6ugq8)TmFU&{MEb<3kA$#>>nQoOy>&^ z#zj6CM?oHLPy}FYmitKa(Z7%2!yq_<#W)!HZs*a5V3uOgxymbF{8tjMM@Ig^KKi#{ z5oW{0vHs&8#AGh`4~4uqrp+sVB>+*u{rh&}i581Rrv94zDO(VH(O4zmHvf z4>u_ER&!-)Ync-*#1wU#mK3gHRXq?6D(%1vkrva}#k*OycTI|zY2i6J5*0Zj=jWFWz8cJk zJR-ab#tzVq9g1}%9ozTg*xR~*g<1`eC&Lc~v(o!_Px0J`aMC%F`<+*3^n zr30x32z3|w?La&o7wy5hn^mBV2;4}#y|(PsiBk#tp4x+EPIImEsoPjK-SfrXtoF~8 zN#cXmsx<1mzzy=QW2I6o1aRe+0!i$j19G6P{~gqVfBOz7l=IJ8VmPhZ8qu6*|8gMl z)7u=ETSnZ8nXOP2(76!eMGRbF{DKt*+a3$1#jSUl+1p&BP|nsZ{vQVRXV?G#wEfjf zhwr=Yu$e`IaM!*6?7ZDYC6`B|A3e6D&!mg41n{*B4FC1Jm+uGS**R6j|8#-hJ<=2Y zz|)?RqnZ@TPgQ@hJ01xU0(tw7E07U3@acWPw@p;n$FrYAH!-`4==bzBlpDw)F ztqq)yWAp<#3g5AHKg;2g1kc)hUHzu;1IIf4x(Si`k4FdLZEo$0Sg9O%%Bd8T%bzQT z*8TbhaQai+N7zD_A07Ok*YiE*d@PJ4mGhsMA}mZ93WDjDzI`gv|Mu))JZiJiznSCO z$4+mREc(->*v$M6Z4zI?NO~acCMeaPZze*%gIAU*^I9-H|Ya?(45NE!Tp^ zUuU|y$zX>b*!bHW)Sd+GHPd{j^tX41Fk#K+)N(()JD|o#Y;-tD>UX&^59@$95(|E{_8pR{%@Y3{SoH=F+S$&o1^Hvs zOEhb2k8D**OGXVk!)FaFE+9e;T0ueE`J zxGakXPI2g~8fsU(%^)CHGQp8I#JnY=24!1fa1e$M z;LB)P9RD+BrMmC?=fF-7lK$&Koq>jj1Spp=$|IvfEy;3w|4f~&s@v9Y-voB~FW1ny zkIf1g!F^<1S%dMn;FGM;y0}T8G}SUae&tu%BX3=Q`f`yjRkv!)?wMYzAW31<{?^RoVnXTjpi1_Ccqpx5P8*$ z>*2mL|L(?N-i|USu}^aQ!LWy#IP<#$|NNOR*Y@#GpDi5eT<}zipqDZ6MHBrGjmI`? z{p)#y6twDeAXP^Eh=+=f;Cd(AZ%$tzVL0p$%I>|tX4;qk<*?lgG`i3vsy%Ur$FksLUQ=xXBANbXowFmvSmAvs`4eKWSUk+`u>?RG^$y|Y0 zKA=H-KxD1*9vWkv6=?-bJS-cim-+EaeX~vj+I#n}Ee`mdYc+NKX%E)^v1k=KER6Ny zvTT_zs_{0$!uQVCN-lE2tHUPhjpl=TwSECUm%?m()qppGVO9jYh(8SjR`@$V|G7Ep zy(Pd4OJLu!-OtvKgJ{%XU8J>3KNUP8I(|aD^3YmZ`QHiZo?fY4p0u#~Jvu=ntlu0k zJiy~v6HbKD%P2@QN!%m>Hwfk*MSudt@_=drS-Kpo|QxWQvYwPkljIkz#EoENWeJNMzF?~JXWGzlGS!U zXyj%yJl5ax{|8CzH6n@JjcTWWK{m0Zy< za>4+J&`9CP~I()!bPN&$HkM18UX zJ782LH#kr2gIld1{TL9i!FG7OGfQDI86>0R`o;%efh@@nXyYgQU0fzxzOuX$1Y~sV z+giWzZNGzRJAgu?Tc{f!HhX|&tU%n0$D<uHHVMZj*m#N3OTrh zcWM9t?hLjvNKi-n(Yzm27h!lF{@ z!sxr=GmfrbtsoI!04|voJ94^kKMq#6u`mI3YO?@8Aspm{vtj16TTDhf{JGJvGNSk( zz_Mo!sJ#zRr$QHCi+C`%AWTZP!XBS|`Ip^QyeX!PzH?EYEOv~I=G=C+|IFonU6R*9 z214#CTF?J0;H)V*bmu$v6{m)a`DedscOR^JSsfyxtf$5fV3SiAo339h4Yo)7$r6~c zAl3^B4!Ha4;NEAP5>mnC7OO;UxX25jw~#Sb7y}?7Uc?7~1htPhkB1}q`sz}+6YW4w z9wl7ebxN;TWzVp{_bM>P-UFN&5%bsuL?8aF-WZSPyUv|n3Clks7rq4XwzahZ&R&YK zd*VonjD2^$tzW#2|D#bw|E;={9Faa>O9@e|>>5PAalsMHyYE3K;5>f1nB`n#e4b%1MIn%>OVlP!X+@bL}B#BVvb6%-U& zWj8T1dH@L8RGkYxhf1Y9c=l&~7}W~L=C${Gucw}3p4c`k4kD9(Mb6-d4#;1Bbp$R?OKl|^>$Htp_DJrnPmAF8*N*=0n&ha_-Wnj8`!7iP zXF-Da(tdlNbgJ!dAoj zsDg7_h01@mQ?8Ug<3RuQ*UL!yzpdiG;K#PO-!Ne9M_705-~#`zht!_dIeAM>-4~Eu zPjhpd$Di<>Z^%&iL2hLRC#cbeae2?>>EwzrLy4bEPKDzZb^~C zFvx-yc4Da!hF*GZ5l`b!NWiOLZdk9o8{VpT&R&(+KA})fmN=#RpJlI<`B&YR?e8CR z-?S?9yv~{ZT%sxd`qe%0@qV)tW4ty72@y9Z#@ZyJpCFp<7+FVcAN{Os0PCetyR5hR zF>0f;eLSiWy#+)O#^+fGJtG}Imow?Z3@oD~EofCx=3rMkV~~JxokJl@tNi&2bZz$- z6~r0a)-Eq5uN6w&t@8NXUp4mhsF5jGMwNg-YWJngC6lT&`MrEIZexw(@^j=LN#QmL z-gAvwNFru@(L}w#i$u>vG6$JUz5UdNCm6T6JovPz!3BEvn+ywPXM3uFf$vmNMo8)L zxt2!5Xool|Q4dx$5s<-ynaWG>@tU=RZH?O4ekj!zG{J{P4g8}(i8SZ>Pvf(Ru0;Fd zqAvfn%q#v?diwp`LPOAJzSpVyGjzp?Cp_H-Ljz!CON2f_9zVi#7Xv~eF@_?sJ|pGR z%zM~|5VN@n9-qqu&%V2knocet&K#f|s9bAsR-b6HnuZ!(x+ntc0&G#aG z)w0IVW~3uujz@h3Ep|B3&Z1-_-djKZq^D!&5L!M1A z#n20GUPcrZov7_aI`-Yg^Vs7{PpGyuok-gF$q`fUSarxdrQdhzGgl)m8yt@)GS2Pp zyuf$uF$4c5&@yEi(T_j7em`0=7usQEN9Led1K&G??ON&Sva#2^%1ARrLusU(nRU^v zde3N#2jkhx5ybA3_bENGcxsQ_$zsYJb8Z%zre0`8aEdX!J#1`V1L09L#8Sh)t92pzY9mjW9*J+#K;)e8z1QE&JVGq05<5 z<6G)|qLwmq!nI$3ia-}Z5vT7NQ0aSeCbm{i}6>+Q%s5X+|P_)(XaWFD){k$aS6U*Twe zC;hP_^5Yeo=74%9OJd+wq1^sf#J3@D&F;jAw4=9r1b74%ZE-B>ie%TRH@=)#OCAP+ znC1w~kqGB3v{!!5f-!5^h?UnRd+(n#{F zCK#%bvQ~#fGcl(&y&=Xs^?I83#!rX$Q#O6NfbA3W9hdpiqn~84QRZ~LM9D$Q)b#~YAeL8=+h#+$E0Yr;>KVZZnM5gQr zG5^|kGgVM#@26sZ69@S*t4O7u{Mo{dpJJPeluvkX-tJiZnttUQpJzhd^)fmU*6&N{ zD?Z>Z6NEDIF3J>tM~eEU=HzJ-znS;@f_|-?J36Z2yLsXK|`}xcr zW7{Ink0>o!clWb5*S*a(#P4_<%{G2!;-JOK(tvi+Kw538oFh%@_<^odD?U4n^in?W z|KKP%aZ=>vw#obpILC{cZV>c6f9;*WptQ-4?c+JBA6=5;IE-VvYB$FQ*;XC0z3QkQ z6~<%3S&v{L$#yFzlE0$8!xy zc0i-xklS@?6{(Tz(`;f6CFyaLx+2Z^e1+s@_|H%+mv^#DWi*m=*P+>O zFQ<`>k+0dtt!zr@VQ=chaVYa*>0HAfss~}l+M5PNYLNQ6kbYxbK*YU zO1`dP>(vBLd(!AvU5-vY{F3G+oWBv55&o%;gxAJcp?x}2)hv40>X94Y0YxXB3;sh{LKd5FS8Da0-L)hL4fuala}8(aCahf! zv(H-}*>Lnk%2axKdShoo8(E>;yi&QPn;~{K_DNQcPEUj~NV_`c+Hb6za9dZ$%Dn9! zuve|P;9C(D0wLrmb#P-o;`Zo60hX;=8vE2JlYWf%Hs~L0F=hm503!3WRQxT1sN8UM zpt7E?cQk4u^{D6rz3ow zcu|Mn`AOI=4r68$f)6Xm7^Z&z?Rvxba>e zgvUsBMpekE<5DGShBvtB2NulCG=VIdAp8#S8kErn4VDTryO;|S@rywr@R2?f1Wi!H zV%E^amxjU2w4_sn=mWN6Uzgr1wF~f+Xo^)-uZ5aY_5g64=HiC2&8}A)AZW>a_4?NuV7opz12;60@ z>!@kVBB&xX-s`Xe3+q{TnFydxIR`jJ#AG8lUmH zdGmCe^}tJcS8fT*2Y`Yyz2nB@-7ul6-q1+Bc}q@j&FjkA(c6kI#0g=#jV!fV!vx1$ zAD47lxBA<^P>uZ*%ik@T6e}a$A>cBQyZ0I`Nh5FqMV5A3G!K=M2|vH?hOW8g^QJyd z8q_~#u-Dyr(t}4vNl|TR^aZ%d<5yR1DO}DCeqIA9&CiIPBbRd>?(M|A8T+s_l5|&D zU92R^zUMJ$?Mi=KievFF0F2KOX7(AVM+q_q3o@B_3Cto20iAVMFCtBvqK08`!gNB3 zTVH?KydZWmf!SCRzYvpIHqa;%vKdk^uhx}KA2aw!<5%__kMvYI+%B7H`{J8hRb}v! zrN5EKR}DoP_ouEYhYPph?>wKcW^vM|20{0_r5RV%vu*#9$8#Cub}E|T=R7leZfh0G z+mPOyqy?Uf!VA}ud-YmT_%o%%oz%$Y9r-@F&;z^<0t9GM|4h{P))N{uJIs)SrJG=G z=0AMF%IOVJedpa>gS2dR0yH^Q6jT*SL{7JotE;?I!T2c zBxFlwaGH1Qxc)o>YGD6-8*+~ghV*RdWJKTQYltq)SaGj-qG1Fyp)sX_v;IRpBjsSP z%%#g8+;otSU4?rJq)_{xH=lcwW}~}L-7LcFO2Cg}r4@Dkp5X5N!`z9eRIXX4K@H&C zOBJnyZX)i=GxW{_i9Oi2#Z85D(lmSpI{cJ3)-|kzzF^l zE4!+pQ}oj*zB9;9AO8=!_97kemc@Z#=2lYe;Du zYNiH?ShR#hB5dH$P<|w%aMr^D+nN^IcLSz*X1F11Kt7$;ZAT+HmHM4Bae%%pD^Rde zF0aehEE_NA?QN`)c{c&QcHK?zvR}@#=nEN|Mwu0R@XpJ7XVQ?tr|{sLlItQeLmDZA zzIqf*jy8d)%+f{7FxHNYXvZFT*Nh9(!y(mC8TD2_sTEi=$`?iW`pvBR)e80?DyM51 zoxgbg_H`S=<7ow2Uos}iYERkApb3MC-MZC4>xX|>^%sy$L8Y2$;zs+*)2lrhFdSa8QOXPt>#ozBHBAA1(Un%RtJ4}ue$II z|2uD~QU@^oZ(nb2f$la^)QICFX!p#VDydMz=H6xr_sO%Cu5LX)R;=<$;F0aCSnk6Z z=Vo~QE2*DCcUE?@Fo7^$vA$NX0v#|CHnUgp`8TWv$xn0ssQX~w7B}dtu6IKvjA+q(`Fug{ws`GWdvmH{nw9Qa9!dy3HC zDI9kRuwKbFz*klZuD53b7B3*pJ!R_c)Nvn-ULP)U_zd-U+LYFTmF@4l;+{FtfRmY4 zQt#Q-EAYgzC3jojm7(lQmb%ALy%Y9HmtWfZykCE&E%54<0^rCW>iW4@BpMcko&J9J zg8o}~9GTUkU_9gRpXrIkT1;2859ylNgN?N7YDCZLq8#27lQm(ChlM^p?L%_4JN)L0 zZF=6a*;QZh7(PVdE@6)wV;@VLtY}((jp`f|%1h2iljuQ05=Ai~LX&l0 z?4Q}$)YGq2yWzIysUB2!3GZ^VjxkJNbnsJ8CQ&p~>l+$#OQ$pI`$S=ry?xtp0Uq9$ z3IS3DuaCPrI(n^aROWMd$(G_>I44>~T=s^r688gTD!MlHYAVS9kx63N42+fESIu&N zLROzwYv`0-_2f)rN4{1Z`RSoPPT0Wx;%PUcqh3_!h>RG8vIjQkx=|$-Frp8#&(}3a z$_(^6B>n^mXo?M(9lDF^6b*UWS zQ%#fYSw!~x&Br>=^7kW)Cj940`C>66xq5~oUZhE%nVueV!7^Zq>1I#PPxR|bx(=U; z1)COuOg1@rAujfDs72*+7z{F=mk7w$xajC5dYgajps@GEQTLC-bHc6HibMt7?W2W8 z#_njFgwn5!?s34Rtm5q#w3X1`(~n+n`qwVAS|Lcu1-(g z>dC;9df}3Ll)xt+dmXmPn;~bLlQiZTHUqo#4{dmcXyOy;=aB$ew@K-KU*aAts6O57TTihXY-JwG=r~B`2IovB8^3g0fLrI!uMxUK4GBQ!FRk{EhM4uxF6l+!s zo<}}*u5WDGCDpM|1yzA6-FHn7DSY2zbhXl(#ZNm1;W)WF9X+B|@dxTuiOI>2 z^C3&C9hTE{?E_;rXef;nkRKRT*xnaoh6KZ-|#J4JnZA4b5Q&_H}1)h`Jre)Fo z^mnFRcF-L4*C_IZI0mJ6oAcCY-;Hu94!xKIB4$c-UlCugQTFlH=OOl9*z|b3e7pa# z_M7bB65*T}`+T;?RVQk1n~rq}ufDzHL4|zKR0F#CMxp$Taj#W><__u$gctSKZLP87 z%(^1qGmgN>CKM+h6yO_6KcITDmC+oRtvl;=zGTz(J=?UNSm1@n%*R_T4XqSoN>o)^ z1QRoB^lQ8FVvp9{!+o^gmn-0y^V9KBGhb~3$ch!)9c@dXeAnV)u4A|8jmfCFq`Ek< zHVE|IwZ&YGbgCL3SUod-ZI7;VxQ2A|Ot`C-qucq_OZ0$QNm*m(h3NJw`&g&UOxbH8 zxn>W2>dRijN~e^*(MgA7RND1|>^E+PDg1!-J&FYHG}`er;sQ={%-$%dYwE5v9L1u_ zng?lptY)>SCyVR{TL(QsZ%tXrY)`s=*0IIO+nE*_|Gd7OJX2;tQEqfcAruD!es;Ee>2C<+;b`d96g6 zq2NuA8#h{Q+hO1zAg+7n32&%DfDr7?{Ci&48_6Pk!&j1s`HFGKm{=#&XJ}!`w8~er z0M*&!yf+3M&mGb*Ch2H^7nMCYU%LvjX6pKHu7WJkX6?92t=6=>a`(1v1TLFB)2%M4 z>5_V@V>?alvg#hxq_d4N(r~_MFaE83Y}wYVrtvZ>WN+5j-6@JMC%BWOg^4z9iDMv% zyoazC%b-)e^IQ`JuMB!}7J8Q|@`XQLp=5Q?xTl65B@v#*%w{)x^J8C{MxTq(9c(w= za`hP3E)vWdXR+nrSV12ORAjKX_$4m~T;mPb0o>OQHH2Qxq-&t4E7?Ge?O#gk%+|J? z->(qWr~?p*o-ur#%T@3y1)K46%I^=9Kn}$g7k>^K?lXP4ajko{nu1v810R#C8-+)6 zW{ku@cMZ7;BEH>WWZ0Ewytg z>$7Uw?+Fqh9&q2pLZ^RF4!^YMQN7V2B3TgI`J(+T8#YLy+;NAr!ng5S-1={NE=E4C z73OKf;_o;?B<~dfs-3y7a(3=6lrfY?cIkfO85#ZEN9F{vdcIR%GkEF`Igj7?a-#5wGmdJrI{RHj5 zYJezuapJ{-SN>@56fmAi*5Vl8)}zeLrw`x7Sopd)UgkOq=~br5VLmO2&>6E}ec=#t z(lHqQWe3=;pJ2E2%!-F(Fw@@%YFdoxEcqLe`#-+0Le(7VT#5vtKEzhNTFfct`z1WwK>o8(g zW=nYX`J2mE90jaxaY$KH$%y)BL>au@)tMG`mXE?U9zP=r#Cv>9wCNuST+?GLB%G&s;#++k6yRd!_l{aw~JkC;4 zkoE+49!lG0uGeRO8HLBe>|Ei56So=O!}&}7H^RbplJdC~cuGA9FTn}zy|&QZNw?^o znvoEWp`qZVbNr6@srYf_r7zW(Sq%|JClpQ`$YADs5gy4u>raDeX&$*>t6gU!;JDE!oU9gzwA+|X{7Z`J>{J-EbY z82I7Q{>&Gbv31Q(j0s#D9 zC4jO1jtRKD=X^~ef=;U#zp+u1{`8x{5=W55IkoOyYra%p1$ z92efL^>Z(;-L3;ZL)$yR_ErRlEFJKYg8tg)A18Jtu8XXZf})u&kOh@auG<-&(e9H_jI|tZoareuozh3VE^l4z!R|I@o%>8zfmi|9rh|g@V5wqmCjce zY1y;-3x6>@#NuzW*8$szvsYcAq_ckGMO-tqed+@cD+O5`eE?R^36}mpsqept6@a?& z-%Rtb(nsfZ*Zlblf05o}zc?R01=3)0xI^FyL!U(+&*5ETyiZGuv-XEYQ2(DwfVG1M zOq?~w>mQ;PkArE#9Dn`7UmAdLkKhf505QcSm-w49yJ`uhPv#l1p(`TYxkef|dz$MP%<=+Jf5%uP)dC)v4yL^$o!^GP5Mx_4MNot=DI zN94ToK=nFp#P#Xy<&ucdga%u4*YkB(qx3mO zkzdp=y3RRWw8W5=AA&2#S>e&B1>S9;A>YAu*$(A#4lqdUgg-QvEuyuf<(}n4{{6vo zxN+8KGs>yJQYs|2V`3ziG^*p4wqJ4UFWr>5 zx-n+xy<$T*%!gW@m!FFM1|d$fhK?2C+vm7rKCcN<2@?|&i61zoY8R^V!`Wi0O9`)5 zNLjoAfRsfTO01xFm$=J8HoUtn48}cFh+r(0W;bcF+AIPs1dH4OVc~LDP}zSDN=$q% z_x9!vzTic`I&0FM;4u1O&l|`k^uTmgmHXmO8}{BQ1V|bB=9E7o9Uy*ZllYIk%f^#0 zaj_I2D$}X6f@UXQg@O>ZD0*kWJbjIo<#pm|@YWj5w(~1$Ix`i_rH}_N{*&M3KIgP8 zy2#)31$!$C?aRN@gH*Dk!z4|3dSU5zw3ZD5#MLqh`?l8~Lc-lgizF*_E^ z@6)Fn1h4pC3p$s7y$=kb8(Chu$lpt^@zb7HJtUkM8}BotZP+z?&-pA%H?D1@gpkjF z2d3FIX@k(Sv_1ciNQ>UP6X#1GxjZs5(&(Kit^fA;(L2-}qzH58^60d?gv2nz5O$0I zBBg=HFBxez202X3I_xb|e$4WpLJD)emgtwp?G%A#{B!h}bi=#lB!vs@L zSlS4hvQUR4-lIL(kbf7p7mz|B^pdS}{p~U=$yA0Pq9|sA!^NxU60bHbp=F_BbwELB z1R&m`z&z0~ocX=MkK7tvlU^D>0QI=B+6G$&>k!rsvw8yFG^2MehuJ1V1d7>iDOh9m zDZ3QKEr0{7P-~ld+w;!wYqD4v*&IWCb)mscUKvbx7&A`^UxZ>H()$sOHf&*Ff?Pa% z_A@#?IQCj|Vgl%fnR)P`Bg>JbiSFfnfd)- z<4e~%@c#9vh^rPHMBsZ;fY8=5ye!~-Wo`v#2$tgSFQkx#!>9~Kw@IJ=IqF-HLa*T{ ziLK-It>_wi>UMt@mR2JA(Sec#^W*zjC!A6U^f}LbdzD=jo|9df3$rD7x1lJ^QU*&O zL`Xm7yD5|MG!kR7d^k4#sdj$#d~ID2q|3E)=V1)PggAOF*1k&?8ivQrj5$EO+jLcq z@U<584A>jIRrjUZfdLh2lwRkVpV|r=vjCJ{Uh|BNfB&qv96htd;wX&Mo!gIDZNnfY zkV3m!2hNKxwP93g7~km<0R;B}BCmkj*}z9hARKV2K2A&F*RKJyOa=C^UTp>h4JE_H zxY%nXpZR08;Vd0f0yT~(&kQlmd%2l&_n&rU;~yZF-)b1EY=boi!|B1J>r*L^>&y>6 zV$8^3ypPg?3y?81#8Mj@8~eP*vuN|al%h8Uc3obEgenggfTLNbjA4$2xcN*PL3=G4 z8DntIMLFNQ>>Q z65v_#r>K!e-o3Hc7?pHyIJrAZUQ=%W`E-d{@=sV=^ZjF)pS)(d@3DfECgJ`~8980A zyV~wVp(YRzSL=`E(=;seZ8fR znsS~68hZZ`*xs!r^Vmfm^%1g!%tVgnl_A5YsqdzfD?gtFz!Koo$6&riFU8lsUL*_h z5tfRfN+;mwmEn|B(MOO;cMul(?>BbB7m6m$w?#<~dcJvNK>`k>^>GQkEKt-Fx-ug* zp7TN-ve@_t;?vk!FWfCR*zRtsFnhbp!JB3T#e?%k6YFI7m+&7;qwW(R%vKU>_7&V5 zepTeY01pZp-6g-b!ChP=otQ*<3!@-a9sv5?9tR)CeOZR5ExQje|nh=9B zFB(dRyO)ray57|5Ea<$d=n8M{Q%9j1Se zFJumeSg>X`Glva^e`5N-%@?B|Xv#5zM{Kvsu@6U=2upp$iyAYQr;YVt*+i}#cLn1? z<;r|Blri6{QZYqRx0{*MkjblR-lkP)aN-kUGy_FvX~daBafqd<0%*FiJ!3Wt!6bjr za-qnl`{**HZ(l=W)76pCgoFfU1%KJp_eVT$c$!*He{h0C@|HWG`ot|FV6|E*&mx0b zRpkyJ?)4mrqw>LAVoMZ@=d^*hpM$B&v^UxKqxFX;@uh=839lF1m3jQeaEr5Y{WGCl z6y_wL_#3D*XZmTCLj3)V+=kh4IC4@Aqb!ZCd#x(KzhaUi@WAFmaz)UqqhTopUbQAQ z-?YzZ!I>d$e*M+RlPHQFCAbKvfw5@SVq@fBYgcQ+RJ~dMPGeX+yFM$cUr%5!1FyQH z>pq#Oz+(@~rARY}cPhL^>G5RKrGgFmYG}XheGEhe&U38;y(938E?Uz^yFi zt#r3>FvOyfc(ow8E8&D|`CV0C`i6G8-j&g_0_kPbRjq1K)J}%Zp6h$o3>c_7;$Hl$ zWYTR=%%3($x_d$|RT`c<;tf%njgn4--<+C!r7I!Ip(WQPWFRs4ZpEr^leSffvjV<= zE8^f+IuoxziH|jJjlISixB~H*Yjrpbac`UG$?lz*g-?ay8)kSQsBtYspBHxX>|jxh zrmC!8(Rkjk+_W=;l_i>irfC=-H5>VIHf)+vUTx!NIrd>P|H+Gs;LM}c)hIkCYW$7V zX!nL53P$B(lArb%Dii|1RpctHn{6&EJ0qnL}%C4N7sL?*Vxow?ZA zg`s?iu_$!tvf>e15X30ZFg^oApM{*;fD8s+En&@|o6H9jt#|49FAim6K}5e7i2<(= z2O9s3M>^`4)y#n!5a@3P=(dcx68x*2F=Zs05haaWqDQI@VN_1irww2U*K^2SpK`lw zgx{PHPhUUwqmj1f4ocR{VO~p*=;@Gt*u|PyjZR9>)wtk09(-CC59&+z!(8m6fuhXAS?FFV$zVYTa_Gs5Zs32-LAin!?JnDH88zs^~|YGGx>WFA(o{J6vn;k5=e=eSD3q>Q>JB6 zYwZP*C`RA>#hM#rp{|Cd zM^HCL!^^yx`APbKJF^q++Z*3a%VXezza8^JIksdOJc~#JrR(i9@C0D0;UvZ@gYwi} zzMqmK16c@4g;Yo&a~i2&tA=tF8b!jIA7h=5?5Lj!-oDgfy_h=uMf*V7|w)gkG4xb0!xkvB~R3EGQkA zy9)-)`g&FlVUj!OB#UDa)9*_i2??iLY4_|g6ZoibBP2BB@QVMu)Mxy2y|7F2pkadO z=Jb^QSBl?CMO@^g)m**{C48eQC^zZw47$n7pDG1XRjSw0=)EH?pmk#+$F)ocJc(~S z3_`ar#EICM?k2b8F=Hkj$rzPD5gwJn2L=_G1X3zwk5n5_qG2(`-XZv-%1>giEevf1 z7FJl-Z@{{PZErt)5Rofv;W4|FvNZwjGM)`E2o3~LgC|+7WA!}=3^N5KzSc(}M9-50 zZsSz9)L9d*)YvE#QZCBCVFZeV@+YOP9Ka=q9^0Ub9DAMG_UduPUAwTQv?n->7hS2= z8wMmnKvX`TYBOTx@;(8)2;$JAuhSMZqhD#R9z-_v#nI1TAY~`UwM}=L73kgwXupOp zK9^&Hvj@j;$vtq`%@nu@s8GBk>iU7oS?}44JDcr1CBvvX>+JDw)x3eK*p~&z`VvS- zC$aJLE(^RUy%6msI>ILKDVTWRld>=$?ox88ks}tY-K1#M&yy>VZNfw!&a0kkRX~c^ zI#4>27VS3z9lliq-hzC-il&S`SpEaN_0^PmiUDSI39jO!4;o;W#K757prz$G&J_FU z4eKc&6fFWUnF_I!tCXNv@1j?}8(fsZju+w|D0m!nyv(1M6twK)+y+y{mtNA zdq0NrnU#&IehYiTsi0bzpp~7ZC^W%5<XJl~BPT$}Z$Rd276Y4swHhw_k>Lkw@HiuWOiXNOE4diuT zI-2}FAMh$#`3n(2ASH4iILH+he4a7xw`t!cR@3kMep4{sz}xv5cht{00D|X4dEQK1 zN?QuYPEwQXkc8BAIX4|oSLw=|^{<-)`?v;jQqs0cd0Nda)Kp}24%wu_31sh9q4BnWrh_2@GbZ?-~@VnRB1CH5SFgTqC%3Z4D#e@oi+O45U)?|s7 zM1k+7{mzT67WZHAhfV94G)+do{s;Uf3EB2k3BvJqTnkb}4hb0TxS=ADCAJ$9A|5FJI+IyKqjL1xXS$!i?$Z@CBV z*1TP&gKf+QJ&(T7x;Y25fGdMY1}mtKPfE_$pc&u_SbkRmZbnboco5Tqch;$`2@DLGNJ>aQ$|7H!Tz_34GrMp8EPS zrj?!^tKO<3F%N+|jv+do6*lj=^80J76WBS$FD>^bVhTY&vmK~qD4#UW%e}n}3U*fE z3o|JgSnY-O+^*h+hgE#PAm4I>;S>aj`2J|G$^rvg zo4W#HV7f3z*>aypAqg~U-y5$qp>;u^UmkN34*HURw>Z7O?N0%$+xx##0c#Ac)$iZ< zJ!IjjBLL*9J|F5;YTdYJkqi`-!)pEyPBSfzl#Puju!N8z+{NW7dl4usTY|c8cPW?3 z*-VsYxCBFTc{*%+`%6LPt%MV7{a~WMZMU|6!)?$o99V7`234qEoCEWkY!ZBppZ_zO za?Gytb#c6w^$`SXvZZ$Db|QFd0(g%@R)>&(fghb}V&U7tYQ{DGYR0h?l3_88nfO;X zJ6Nr%4I5mrc(k{k8MbY;OC#pk$wg?!f~_v^=+J-Ew5>+-dMGQ3x%>dq(?!ukeH;8Q z7lQ^8>u;9(XJU7yE(Yo&4?8-nyQsqh4wd>MZTS-~?mSRo4HwALW7D~*$W7j4tH~-B zkG|VLU}@@`|Lg0)-m`)KM)_7oCSEcGpU<_rZ^!F@`Hw$leI88jVM8gg9|~wW(kz|A z$Lh%}zg7Vp%_$SrEh-xO_*Z_cC5XcnG{ht1*JMp64AkZ#788YIm0^A?Jy2|(O;@&= zH&%`E_M~TPshlksWoJ*Ri-e*aj~TXkKpzGV2z;M@rF2|}H@kPNEgdsofY1&+LNzXM z=(?VHaKqQ*`&l-+D$Fe`$Pj;Xs=NJC_`r4N?_exO-}SzQuV23g3VXe8|L4W}!X6LK zZwCwd^e*)xlP9>X;Nc(S7IQK_M$U*v+haj>HD3jWm{LS{dv)bo7&$E5Y@$WxO^EY- zKx~aTvvLj&!Y#;@qfjB5rePDpSI|8;@0%)^O4FI9a;N%7YRP32*M&m~>Pu6VfJR#c zq+O}AMJqa@^w~lVL)FfRon%tUWR$3tL~*jLfRktCH8TWp3%Lyp;GG~?hLff1=7n>Y z0P(J}DXo|EwePfmF`>(zcUJ@6hrjvlgxV zrFSPDZ+F+zk-r}++PnQOPD8Y`t#X@gjguDP))%3MJtJdD;Y9~-<5Yf%zj{+$cb53k z{*45&Y5t5OFS75W&!yb6sv)W~&NPBOtpkN8Ot_S&&2-bUDSSioQEpsAU!%*&2N9dM zI0StX{FvFip&JjSak-~ApD`mUKIxImLMwSkbTj4<@IIwYs7Oyed5W^6cU44?Q&rBE z&&cgJW0QKCdxtaBo;c`HW!z=(N}DO;Nv>l%2S@?>(`BmEY}=wD40UWr_iW``XpOL0 zF14L)_jo<&B(2Z!oR-QGRLUiAsc~TJOrC9$&=Jo{Q3pnA zzn2gq&Jpvz&5ZP{bbkCLlGx=CejgLt6KuIr<)1b^C*{g)-CYN6AA|Mu%4{S?po~Z+ zmbWK7cFKHFC>Mr$7kJrGQ(Swp8qCAY(MX_gFNmR++5;c{+gJ18I zZ1)^*66n8=u+YIV&SQR-MdI?E+a#0DG^6TvJw>G_J#0nk?O*9w=$y+(;_NWxa&N}g zwid-vVCi=)7_}Mi_5ZbZ?cq?aUH?ImB&D50MZ1txMk!6$4kZbZc7>AD4iPgWg^)4r zV(+$2${`~)l|#;Q8q8p}Lt>)InK2_mNk+~&)wdq8_jFy~AK&|3`+fg<{S!U+`Ce;1 z>$%sue?Q#H-~=Yzc^c16Z^pkfkkEnP!uE32aGrb*{u<4vvuV}by0B_ScE8+;oyFsy zHK)PN`1G63G4UGpO`gs+SFOG}yT}CuYhej)c&1m0B%!3WcT-1hlH1dyr4#*yTCEKq zeG1q1;f?8)c{V*nr8;klxQuv!M-R2p+NKpQ__UkYwI~*m*OPff+eno&2CbyZ^+BiF z$Z;K96WmU!f!HHc&%_p6PugPV!$Up+-QKPsB~mAEHupIjAE7<@QN^0j*eW+M6(2ru zYt)o$0UdgV9iwRSRwa;OY<)!>>uYX1G*Y3O|XBek)3_h8q~7X)keN!LiwNPd3d|${B0mk{y#A zdMD)m>|>hLoQ&WA`T$eU*_&fwrG4YbxG6d2nAc>6rJIgvwfls}@fJmcGgOvJOD)9h zF(+u-EC-h}bZD_T0TN_KoL~-Q(S+Ow9!g!a#V&HF2*1;3~r{iAmMw z4;6C0u+NBO-7qcLn1eq4fQM)?CTILmyQ!Fd+GZdx&! zMZZy%3bcE05$wr}xOF(V*ni?@x00D2HFkqx$^_igiwZCi*D%KQwVlmbS#YBQW3na` zmo~iGI0Q9lw&c{VXO;5jt&-^)A8fSk>bwim8j0Orw3{ps?jMrAs z*cyHN;t1CU^KJ0g*y{(Qx{sbnqGkIC2c&Xh$6Q#=+y@~`P4sX}-(E#s*yQ8{lj-mS zo4+`8}Hokhx;w=Nwy8GYYr?2C4EI&=N96*ED( zN2J_i;%G$&gy!)z?j=N+?7+9 z&mOjITxu58JnosF!5Ii|me3hxL2%bY50l;6%zHelF!9Dk!t$xpXxeSf_*K4VJeyO* zE`-*`?6nW*k=o)jn_~%BDxU83pZ&xWRr17_a^gHPB6^5ov*oTbxVOvYEi~tKGxFBqsOp9hVv2iD>SFsKRhcP3k7ry&|U%Py!XtHORVdVZO z#6&XTTfzsD6ne!;uV0V|K(}BkCo|BR{jM+ZAyQj`5Yq zo3Prw2eEr}bU2eQEygbpiNvuFjlk*JEys2X8^ zF#40J#R)}58pSR1SXbv7B!gKj_4CKx)fumnrgOtf)&*ZMda0iesytsX^sRfr6 zvlfdFpN%j-{r;Rml%463gBovu1WzpK558I~_da3gA2tNO0qFg18-%pt|3eUXdENB* z06W(`%1;O}dva8ewMT2?1tHPxZ?wHXG$bESDgIocRy^4o<06Ud`psNa|LyzVS+a@@ z(%?1a2iBUO;0ApCAwg0vOGUtSo!m+-xTtLH(or1PRVEDGO15UMn5TdADFhSNB8C|`(K|pxf;JCarbqbNun{QzP zS}@I`PUPn|iZJfIp6?E5)UEFX1l$URMz61ml_WiXz4FmrxQ*O0po4({Y?q&JGkv4L zfsP8o;JI@t5~LlJ`FYBSZl6m3^sT3-Yv-$%L3QW2Ranj>C<-h-d?$p0;J%$QD+u#c-=z=7vxy_PvIJ8UB!9f;89Csjb5#^jBpl3^WG8h*>onD3Htbj?4iosdV zTR?w8RQJz4rL2>YXj`-J@QN3Lupo2>V}f+U>mqu)7g~fj{dW2PTX$n36d38Hl0#RfZHS9!cP&f5SL^xwZkEiN6=x3@Dy*A!+OkH;0P?SmN(< zARWi=)*2SS6z?6bf>=W!;D?S7CEH8--UAThFI-SEi3Pd*4aK;2v-|i}#|ve0Z9G5HTNC#eu&;#*zbc%?-LuID zrR=R)L@rN^5}IlRt1zS3SnQRK15a(EOIzIO%S^`g`3ehg<@b zxVI+8aV{OK#J83%TZ4x70GifsXX;X_2yj*WwPBO*w@fD98ke^X4?cFW0tM?9;xRISfSR-}p`l-zkuxVS%JCZzx{F5i7Q zzh5D_TjIoVFJJ5;ehcyGcUX=3=_qfSG{A+rk4q__)_cKREWa+or|OzOsjWJ%=fcmg z@aw3Ij0C@aF)s3pm=HqZ&MT6G!%yE?xXVNTM0bHZu~=U=j#@PId~L7J^I$&BZqJ5m zQxP{GonJse3z)+KbF3P_C{|^z5)8|apwozIDg;8&SX1Eic=SXSn8HqeQ#jte z={{r%zN)&bTr)kiQGmCMf65O${5AFTf-2>F-y1p2Ap5)F1sMzL)_u}%Vw1u z%8UY2YXDt?%b`>}X9}R!_Nv)4F)!Ssjkx%h%)Rg0>3-Q9kI8DFHJb!xEb+)Gj_tuy z#Oj+Q{`uTB+oPcwe(7-iPt!?eKPuVgP>uV4A{)0E`q_u~g~j*Tn7TBT*Y#j5rJUb2 z^cDWOd!@HkH?e!uc$S#`*Qw@`$r?hn`=ih`zf5k-Q2?8_@X8JFAfJI-XEie3Qykw8 zTt?8@y8hbJ(mjDkf+G_MX&=X(5;p@Ng?LjR_YZmst*~{N1Azm$lHS@k-f!78Y@jX3 zZx$R5?=H#_eL!cey=F@mY3pVceQ}d^K3^MO5xeRHdFultK&;Blq9~U}aCUb-a%YG* z+ixGGlI1iRxoyPMe(Fx`?W~z{IRU(%i3Kr=vgq zN#x5(GzMU&-Ke6KJz*G)X+3?(Et0BJYJP6jF*B3%tBwV_53(XNS{7MTJK-!VTa5no z%kf%Ov#Zgbv+6T7Ld#mVrd_(Y*UDwaWlQ%4teWjh^Ynu&apumihR`JY1#Y^K)!51pGMXU+LV^ z8NWwcae~=f6EooJyn3pFji(LVz;bV^@ajfGd36VwulM|A38K9Fn_~BzE2XO#|9sR~ zP2=4$^4Z#&8lBH?uBcy$qoBbBX(=fleZ;)RR>>G{)zg$>BBWC+)9TtA6Y|x+%K5fG zlFg;AIFV{b8Ze5qO`UGDU4tO{Qs~=|IXXHTreLJFSYwcxc`cNFP>0er; zyR9{;$RXvznex) z3YHmmfS^1D7g7AeE@rrF7Km)V^DDkJ%TP~TiP8G8A?7`1KerIDk&C{hQuTe+1ey#e zmHR%OR4R@nr)I?KQai^WWIYLIV(Ybi4&{j>EMQPUNXNn!S*zEn1x+%^K_3>|z!OMkRZ Date: Thu, 24 Dec 2020 02:38:21 +0200 Subject: [PATCH 209/486] API pages update 1. Add a few missing Gov/performance references. 2. Align "applies to" + "trial" section at the top of the pages. --- .../microsoft-defender-atp/add-or-remove-machine-tags.md | 2 +- .../threat-protection/microsoft-defender-atp/alerts.md | 4 ++-- .../microsoft-defender-atp/api-microsoft-flow.md | 2 +- .../microsoft-defender-atp/api-power-bi.md | 2 +- .../microsoft-defender-atp/apis-intro.md | 5 ++--- .../collect-investigation-package.md | 2 +- .../microsoft-defender-atp/create-alert-by-reference.md | 2 +- .../microsoft-defender-atp/delete-ti-indicator-by-id.md | 2 +- .../exposed-apis-full-sample-powershell.md | 5 +++-- .../microsoft-defender-atp/exposed-apis-odata-samples.md | 4 ++-- .../microsoft-defender-atp/find-machine-info-by-ip.md | 8 ++++++-- .../get-alert-related-files-info.md | 2 +- .../microsoft-defender-atp/get-all-recommendations.md | 5 +++-- .../get-all-vulnerabilities-by-machines.md | 2 ++ .../microsoft-defender-atp/get-all-vulnerabilities.md | 5 +++-- .../microsoft-defender-atp/get-cvekbmap-collection.md | 8 ++++++-- .../microsoft-defender-atp/get-device-secure-score.md | 3 --- .../get-discovered-vulnerabilities.md | 5 +++-- .../microsoft-defender-atp/get-domain-related-machines.md | 2 +- .../microsoft-defender-atp/get-installed-software.md | 5 +++-- .../microsoft-defender-atp/get-ip-related-alerts.md | 2 +- .../microsoft-defender-atp/get-ip-statistics.md | 2 +- .../microsoft-defender-atp/get-kbinfo-collection.md | 8 ++++++-- .../microsoft-defender-atp/get-machine-by-id.md | 2 +- .../get-machine-group-exposure-score.md | 2 +- .../microsoft-defender-atp/get-machine-related-alerts.md | 2 +- .../microsoft-defender-atp/get-machineaction-object.md | 2 +- .../get-machineactions-collection.md | 2 +- .../get-machinegroups-collection.md | 5 +++-- .../microsoft-defender-atp/get-machines-by-software.md | 4 ++-- .../get-machines-by-vulnerability.md | 4 ++-- .../microsoft-defender-atp/get-machines.md | 2 +- .../get-machinesecuritystates-collection.md | 8 ++++++-- .../microsoft-defender-atp/get-missing-kbs-software.md | 2 +- .../microsoft-defender-atp/get-package-sas-uri.md | 2 +- .../microsoft-defender-atp/get-recommendation-by-id.md | 5 +++-- .../microsoft-defender-atp/get-recommendation-machines.md | 5 +++-- .../microsoft-defender-atp/get-recommendation-software.md | 5 +++-- .../get-recommendation-vulnerabilities.md | 5 +++-- .../get-security-recommendations.md | 4 ++-- .../microsoft-defender-atp/get-software-by-id.md | 4 ++-- .../get-software-ver-distribution.md | 4 ++-- .../microsoft-defender-atp/get-software.md | 2 +- .../microsoft-defender-atp/get-user-information.md | 5 +++-- .../microsoft-defender-atp/get-user-related-alerts.md | 2 +- .../microsoft-defender-atp/get-user-related-machines.md | 2 +- .../microsoft-defender-atp/get-vuln-by-software.md | 4 ++-- .../microsoft-defender-atp/get-vulnerability-by-id.md | 5 +++-- .../initiate-autoir-investigation.md | 2 +- .../microsoft-defender-atp/investigation.md | 2 +- .../microsoft-defender-atp/isolate-machine.md | 2 +- .../microsoft-defender-atp/offboard-machine-api.md | 2 +- .../microsoft-defender-atp/onboarding-notification.md | 5 +++-- .../microsoft-defender-atp/post-ti-indicator.md | 4 ++-- .../microsoft-defender-atp/pull-alerts-using-rest-api.md | 7 ++----- .../microsoft-defender-atp/recommendation.md | 2 +- .../microsoft-defender-atp/restrict-code-execution.md | 2 +- .../microsoft-defender-atp/run-advanced-query-api.md | 2 +- .../run-advanced-query-sample-powershell.md | 5 +++-- .../run-advanced-query-sample-python.md | 4 ++-- .../microsoft-defender-atp/run-av-scan.md | 2 +- .../troubleshoot-onboarding-error-messages.md | 4 ++-- 62 files changed, 123 insertions(+), 98 deletions(-) diff --git a/windows/security/threat-protection/microsoft-defender-atp/add-or-remove-machine-tags.md b/windows/security/threat-protection/microsoft-defender-atp/add-or-remove-machine-tags.md index bfed28074d..2cb1370de1 100644 --- a/windows/security/threat-protection/microsoft-defender-atp/add-or-remove-machine-tags.md +++ b/windows/security/threat-protection/microsoft-defender-atp/add-or-remove-machine-tags.md @@ -23,7 +23,7 @@ ms.topic: article **Applies to:** [Microsoft Defender for Endpoint](https://go.microsoft.com/fwlink/p/?linkid=2146631) -- Want to experience Defender for Endpoint? [Sign up for a free trial.](https://www.microsoft.com/microsoft-365/windows/microsoft-defender-atp?ocid=docs-wdatp-exposedapis-abovefoldlink) +- Want to experience Microsoft Defender for Endpoint? [Sign up for a free trial.](https://www.microsoft.com/microsoft-365/windows/microsoft-defender-atp?ocid=docs-wdatp-exposedapis-abovefoldlink) [!include[Microsoft Defender for Endpoint API URIs for US Government](../../includes/microsoft-defender-api-usgov.md)] diff --git a/windows/security/threat-protection/microsoft-defender-atp/alerts.md b/windows/security/threat-protection/microsoft-defender-atp/alerts.md index d7949c4065..0668c313a5 100644 --- a/windows/security/threat-protection/microsoft-defender-atp/alerts.md +++ b/windows/security/threat-protection/microsoft-defender-atp/alerts.md @@ -21,9 +21,9 @@ ms.topic: article [!INCLUDE [Microsoft 365 Defender rebranding](../../includes/microsoft-defender.md)] -**Applies to:** [Defender for Endpoint](https://go.microsoft.com/fwlink/p/?linkid=2146631) +**Applies to:** [Microsoft Defender for Endpoint](https://go.microsoft.com/fwlink/p/?linkid=2146631) -- Want to experience Defender for Endpoint? [Sign up for a free trial.](https://www.microsoft.com/microsoft-365/windows/microsoft-defender-atp?ocid=docs-wdatp-exposedapis-abovefoldlink) +- Want to experience Microsoft Defender for Endpoint? [Sign up for a free trial.](https://www.microsoft.com/microsoft-365/windows/microsoft-defender-atp?ocid=docs-wdatp-exposedapis-abovefoldlink) [!include[Microsoft Defender for Endpoint API URIs for US Government](../../includes/microsoft-defender-api-usgov.md)] diff --git a/windows/security/threat-protection/microsoft-defender-atp/api-microsoft-flow.md b/windows/security/threat-protection/microsoft-defender-atp/api-microsoft-flow.md index 95525bbf97..44003ec0b9 100644 --- a/windows/security/threat-protection/microsoft-defender-atp/api-microsoft-flow.md +++ b/windows/security/threat-protection/microsoft-defender-atp/api-microsoft-flow.md @@ -24,7 +24,7 @@ ms.topic: article **Applies to:** [Microsoft Defender for Endpoint](https://go.microsoft.com/fwlink/p/?linkid=2146631) -- Want to experience Defender for Endpoint? [Sign up for a free trial.](https://www.microsoft.com/microsoft-365/windows/microsoft-defender-atp?ocid=docs-wdatp-exposedapis-abovefoldlink) +- Want to experience Microsoft Defender for Endpoint? [Sign up for a free trial.](https://www.microsoft.com/microsoft-365/windows/microsoft-defender-atp?ocid=docs-wdatp-exposedapis-abovefoldlink) Automating security procedures is a standard requirement for every modern Security Operations Center. The lack of professional cyber defenders forces SOC to work in the most efficient way and automation is a must. Microsoft Power Automate supports different connectors that were built exactly for that. You can build an end-to-end procedure automation within a few minutes. diff --git a/windows/security/threat-protection/microsoft-defender-atp/api-power-bi.md b/windows/security/threat-protection/microsoft-defender-atp/api-power-bi.md index 32dda775a4..57369b9d50 100644 --- a/windows/security/threat-protection/microsoft-defender-atp/api-power-bi.md +++ b/windows/security/threat-protection/microsoft-defender-atp/api-power-bi.md @@ -24,7 +24,7 @@ ms.topic: article **Applies to:** [Microsoft Defender for Endpoint](https://go.microsoft.com/fwlink/p/?linkid=2146631) -- Want to experience Defender for Endpoint? [Sign up for a free trial.](https://www.microsoft.com/microsoft-365/windows/microsoft-defender-atp?ocid=docs-wdatp-exposedapis-abovefoldlink) +- Want to experience Microsoft Defender for Endpoint? [Sign up for a free trial.](https://www.microsoft.com/microsoft-365/windows/microsoft-defender-atp?ocid=docs-wdatp-exposedapis-abovefoldlink) [!include[Microsoft Defender for Endpoint API URIs for US Government](../../includes/microsoft-defender-api-usgov.md)] diff --git a/windows/security/threat-protection/microsoft-defender-atp/apis-intro.md b/windows/security/threat-protection/microsoft-defender-atp/apis-intro.md index c105db89bb..ba3e749a61 100644 --- a/windows/security/threat-protection/microsoft-defender-atp/apis-intro.md +++ b/windows/security/threat-protection/microsoft-defender-atp/apis-intro.md @@ -22,10 +22,9 @@ ms.topic: conceptual [!INCLUDE [Microsoft 365 Defender rebranding](../../includes/microsoft-defender.md)] -**Applies to:** -- [Microsoft Defender for Endpoint](https://go.microsoft.com/fwlink/p/?linkid=2146631) +**Applies to:** [Microsoft Defender for Endpoint](https://go.microsoft.com/fwlink/p/?linkid=2146631) -> Want to experience Defender for Endpoint? [Sign up for a free trial.](https://www.microsoft.com/microsoft-365/windows/microsoft-defender-atp?ocid=docs-wdatp-exposedapis-abovefoldlink) +- Want to experience Microsoft Defender for Endpoint? [Sign up for a free trial.](https://www.microsoft.com/microsoft-365/windows/microsoft-defender-atp?ocid=docs-wdatp-exposedapis-abovefoldlink) Defender for Endpoint exposes much of its data and actions through a set of programmatic APIs. Those APIs will enable you to automate workflows and innovate based on Defender for Endpoint capabilities. The API access requires OAuth2.0 authentication. For more information, see [OAuth 2.0 Authorization Code Flow](https://docs.microsoft.com/azure/active-directory/develop/active-directory-v2-protocols-oauth-code). diff --git a/windows/security/threat-protection/microsoft-defender-atp/collect-investigation-package.md b/windows/security/threat-protection/microsoft-defender-atp/collect-investigation-package.md index 20536ad64b..b3cb7a04fa 100644 --- a/windows/security/threat-protection/microsoft-defender-atp/collect-investigation-package.md +++ b/windows/security/threat-protection/microsoft-defender-atp/collect-investigation-package.md @@ -24,7 +24,7 @@ ms.topic: article **Applies to:** [Microsoft Defender for Endpoint](https://go.microsoft.com/fwlink/p/?linkid=2146631) -- Want to experience Defender for Endpoint? [Sign up for a free trial.](https://www.microsoft.com/microsoft-365/windows/microsoft-defender-atp?ocid=docs-wdatp-exposedapis-abovefoldlink) +- Want to experience Microsoft Defender for Endpoint? [Sign up for a free trial.](https://www.microsoft.com/microsoft-365/windows/microsoft-defender-atp?ocid=docs-wdatp-exposedapis-abovefoldlink) [!include[Microsoft Defender for Endpoint API URIs for US Government](../../includes/microsoft-defender-api-usgov.md)] diff --git a/windows/security/threat-protection/microsoft-defender-atp/create-alert-by-reference.md b/windows/security/threat-protection/microsoft-defender-atp/create-alert-by-reference.md index 05729852d3..eefccc5624 100644 --- a/windows/security/threat-protection/microsoft-defender-atp/create-alert-by-reference.md +++ b/windows/security/threat-protection/microsoft-defender-atp/create-alert-by-reference.md @@ -23,7 +23,7 @@ ms.topic: article **Applies to:** [Microsoft Defender for Endpoint](https://go.microsoft.com/fwlink/p/?linkid=2146631) -- Want to experience Defender for Endpoint? [Sign up for a free trial.](https://www.microsoft.com/microsoft-365/windows/microsoft-defender-atp?ocid=docs-wdatp-exposedapis-abovefoldlink) +- Want to experience Microsoft Defender for Endpoint? [Sign up for a free trial.](https://www.microsoft.com/microsoft-365/windows/microsoft-defender-atp?ocid=docs-wdatp-exposedapis-abovefoldlink) [!include[Microsoft Defender for Endpoint API URIs for US Government](../../includes/microsoft-defender-api-usgov.md)] diff --git a/windows/security/threat-protection/microsoft-defender-atp/delete-ti-indicator-by-id.md b/windows/security/threat-protection/microsoft-defender-atp/delete-ti-indicator-by-id.md index b3c2960440..dfde8bf37e 100644 --- a/windows/security/threat-protection/microsoft-defender-atp/delete-ti-indicator-by-id.md +++ b/windows/security/threat-protection/microsoft-defender-atp/delete-ti-indicator-by-id.md @@ -23,7 +23,7 @@ ms.topic: article **Applies to:** [Microsoft Defender for Endpoint](https://go.microsoft.com/fwlink/p/?linkid=2146631) -- Want to experience Defender for Endpoint? [Sign up for a free trial.](https://www.microsoft.com/microsoft-365/windows/microsoft-defender-atp?ocid=docs-wdatp-exposedapis-abovefoldlink) +- Want to experience Microsoft Defender for Endpoint? [Sign up for a free trial.](https://www.microsoft.com/microsoft-365/windows/microsoft-defender-atp?ocid=docs-wdatp-exposedapis-abovefoldlink) [!include[Microsoft Defender for Endpoint API URIs for US Government](../../includes/microsoft-defender-api-usgov.md)] diff --git a/windows/security/threat-protection/microsoft-defender-atp/exposed-apis-full-sample-powershell.md b/windows/security/threat-protection/microsoft-defender-atp/exposed-apis-full-sample-powershell.md index 676e6a5185..8100c26890 100644 --- a/windows/security/threat-protection/microsoft-defender-atp/exposed-apis-full-sample-powershell.md +++ b/windows/security/threat-protection/microsoft-defender-atp/exposed-apis-full-sample-powershell.md @@ -22,8 +22,9 @@ ms.date: 09/24/2018 [!INCLUDE [Microsoft 365 Defender rebranding](../../includes/microsoft-defender.md)] -**Applies to:** -- [Microsoft Defender for Endpoint](https://go.microsoft.com/fwlink/p/?linkid=2146631) +**Applies to:** [Microsoft Defender for Endpoint](https://go.microsoft.com/fwlink/p/?linkid=2146631) + +- Want to experience Microsoft Defender for Endpoint? [Sign up for a free trial.](https://www.microsoft.com/microsoft-365/windows/microsoft-defender-atp?ocid=docs-wdatp-exposedapis-abovefoldlink) [!include[Microsoft Defender for Endpoint API URIs for US Government](../../includes/microsoft-defender-api-usgov.md)] diff --git a/windows/security/threat-protection/microsoft-defender-atp/exposed-apis-odata-samples.md b/windows/security/threat-protection/microsoft-defender-atp/exposed-apis-odata-samples.md index 9c0ee43caf..8cea855481 100644 --- a/windows/security/threat-protection/microsoft-defender-atp/exposed-apis-odata-samples.md +++ b/windows/security/threat-protection/microsoft-defender-atp/exposed-apis-odata-samples.md @@ -22,9 +22,9 @@ ms.topic: article [!INCLUDE [Microsoft 365 Defender rebranding](../../includes/microsoft-defender.md)] -**Applies to:** +**Applies to:** [Microsoft Defender for Endpoint](https://go.microsoft.com/fwlink/p/?linkid=2146631) -- [Microsoft Defender for Endpoint](https://go.microsoft.com/fwlink/p/?linkid=2146631) +- Want to experience Microsoft Defender for Endpoint? [Sign up for a free trial.](https://www.microsoft.com/microsoft-365/windows/microsoft-defender-atp?ocid=docs-wdatp-exposedapis-abovefoldlink) [!include[Microsoft Defender for Endpoint API URIs for US Government](../../includes/microsoft-defender-api-usgov.md)] diff --git a/windows/security/threat-protection/microsoft-defender-atp/find-machine-info-by-ip.md b/windows/security/threat-protection/microsoft-defender-atp/find-machine-info-by-ip.md index 0d640fa36f..b94742b61d 100644 --- a/windows/security/threat-protection/microsoft-defender-atp/find-machine-info-by-ip.md +++ b/windows/security/threat-protection/microsoft-defender-atp/find-machine-info-by-ip.md @@ -21,9 +21,13 @@ ms.topic: article [!INCLUDE [Microsoft 365 Defender rebranding](../../includes/microsoft-defender.md)] -**Applies to:** +**Applies to:** [Microsoft Defender for Endpoint](https://go.microsoft.com/fwlink/p/?linkid=2146631) -- [Microsoft Defender for Endpoint](https://go.microsoft.com/fwlink/p/?linkid=2146631) +- Want to experience Microsoft Defender for Endpoint? [Sign up for a free trial.](https://www.microsoft.com/microsoft-365/windows/microsoft-defender-atp?ocid=docs-wdatp-exposedapis-abovefoldlink) + +[!include[Microsoft Defender for Endpoint API URIs for US Government](../../includes/microsoft-defender-api-usgov.md)] + +[!include[Improve request performance](../../includes/improve-request-performance.md)] Find a device by internal IP. diff --git a/windows/security/threat-protection/microsoft-defender-atp/get-alert-related-files-info.md b/windows/security/threat-protection/microsoft-defender-atp/get-alert-related-files-info.md index 95743e8fdc..f95776b987 100644 --- a/windows/security/threat-protection/microsoft-defender-atp/get-alert-related-files-info.md +++ b/windows/security/threat-protection/microsoft-defender-atp/get-alert-related-files-info.md @@ -21,7 +21,7 @@ ms.topic: article [!INCLUDE [Microsoft 365 Defender rebranding](../../includes/microsoft-defender.md)] -**Applies to:** [Microsoft Defender for Endpoint ](https://go.microsoft.com/fwlink/p/?linkid=2146631) +**Applies to:** [Microsoft Defender for Endpoint](https://go.microsoft.com/fwlink/p/?linkid=2146631) - Want to experience Microsoft Defender for Endpoint? [Sign up for a free trial.](https://www.microsoft.com/microsoft-365/windows/microsoft-defender-atp?ocid=docs-wdatp-exposedapis-abovefoldlink) diff --git a/windows/security/threat-protection/microsoft-defender-atp/get-all-recommendations.md b/windows/security/threat-protection/microsoft-defender-atp/get-all-recommendations.md index b0b573c0e7..a076a373b1 100644 --- a/windows/security/threat-protection/microsoft-defender-atp/get-all-recommendations.md +++ b/windows/security/threat-protection/microsoft-defender-atp/get-all-recommendations.md @@ -20,8 +20,9 @@ ms.topic: article [!INCLUDE [Microsoft 365 Defender rebranding](../../includes/microsoft-defender.md)] -**Applies to:** -- [Microsoft Defender for Endpoint](https://go.microsoft.com/fwlink/p/?linkid=2146631) +**Applies to:** [Microsoft Defender for Endpoint](https://go.microsoft.com/fwlink/p/?linkid=2146631) + +- Want to experience Microsoft Defender for Endpoint? [Sign up for a free trial.](https://www.microsoft.com/microsoft-365/windows/microsoft-defender-atp?ocid=docs-wdatp-exposedapis-abovefoldlink) [!include[Microsoft Defender for Endpoint API URIs for US Government](../../includes/microsoft-defender-api-usgov.md)] diff --git a/windows/security/threat-protection/microsoft-defender-atp/get-all-vulnerabilities-by-machines.md b/windows/security/threat-protection/microsoft-defender-atp/get-all-vulnerabilities-by-machines.md index 843f4cca7c..8839180405 100644 --- a/windows/security/threat-protection/microsoft-defender-atp/get-all-vulnerabilities-by-machines.md +++ b/windows/security/threat-protection/microsoft-defender-atp/get-all-vulnerabilities-by-machines.md @@ -23,6 +23,8 @@ ms.topic: article **Applies to:** [Microsoft Defender for Endpoint](https://go.microsoft.com/fwlink/p/?linkid=2146631) +- Want to experience Microsoft Defender for Endpoint? [Sign up for a free trial.](https://www.microsoft.com/microsoft-365/windows/microsoft-defender-atp?ocid=docs-wdatp-exposedapis-abovefoldlink) + [!include[Microsoft Defender for Endpoint API URIs for US Government](../../includes/microsoft-defender-api-usgov.md)] [!include[Improve request performance](../../includes/improve-request-performance.md)] diff --git a/windows/security/threat-protection/microsoft-defender-atp/get-all-vulnerabilities.md b/windows/security/threat-protection/microsoft-defender-atp/get-all-vulnerabilities.md index 138a8399ab..d899f7c360 100644 --- a/windows/security/threat-protection/microsoft-defender-atp/get-all-vulnerabilities.md +++ b/windows/security/threat-protection/microsoft-defender-atp/get-all-vulnerabilities.md @@ -20,8 +20,9 @@ ms.topic: article [!INCLUDE [Microsoft 365 Defender rebranding](../../includes/microsoft-defender.md)] -**Applies to:** -- [Microsoft Defender for Endpoint](https://go.microsoft.com/fwlink/p/?linkid=2146631) +**Applies to:** [Microsoft Defender for Endpoint](https://go.microsoft.com/fwlink/p/?linkid=2146631) + +- Want to experience Microsoft Defender for Endpoint? [Sign up for a free trial.](https://www.microsoft.com/microsoft-365/windows/microsoft-defender-atp?ocid=docs-wdatp-exposedapis-abovefoldlink) [!include[Microsoft Defender for Endpoint API URIs for US Government](../../includes/microsoft-defender-api-usgov.md)] diff --git a/windows/security/threat-protection/microsoft-defender-atp/get-cvekbmap-collection.md b/windows/security/threat-protection/microsoft-defender-atp/get-cvekbmap-collection.md index 7a5a5aacb3..fb60d09e95 100644 --- a/windows/security/threat-protection/microsoft-defender-atp/get-cvekbmap-collection.md +++ b/windows/security/threat-protection/microsoft-defender-atp/get-cvekbmap-collection.md @@ -23,9 +23,13 @@ ROBOTS: NOINDEX [!INCLUDE [Microsoft 365 Defender rebranding](../../includes/microsoft-defender.md)] -**Applies to:** +**Applies to:** [Microsoft Defender for Endpoint](https://go.microsoft.com/fwlink/p/?linkid=2146631) -- [Microsoft Defender for Endpoint](https://go.microsoft.com/fwlink/p/?linkid=2146631) +- Want to experience Microsoft Defender for Endpoint? [Sign up for a free trial.](https://www.microsoft.com/microsoft-365/windows/microsoft-defender-atp?ocid=docs-wdatp-exposedapis-abovefoldlink) + +[!include[Microsoft Defender for Endpoint API URIs for US Government](../../includes/microsoft-defender-api-usgov.md)] + +[!include[Improve request performance](../../includes/improve-request-performance.md)] Retrieves a map of CVE's to KB's and CVE details. diff --git a/windows/security/threat-protection/microsoft-defender-atp/get-device-secure-score.md b/windows/security/threat-protection/microsoft-defender-atp/get-device-secure-score.md index bf5679b787..920e2fab04 100644 --- a/windows/security/threat-protection/microsoft-defender-atp/get-device-secure-score.md +++ b/windows/security/threat-protection/microsoft-defender-atp/get-device-secure-score.md @@ -23,9 +23,6 @@ ms.topic: article **Applies to:** [Microsoft Defender for Endpoint](https://go.microsoft.com/fwlink/p/?linkid=2146631) ->[!NOTE] ->If you are a US Gov customer, please refer to API endpoints listed in [here](gov.md#api). - - Want to experience Microsoft Defender for Endpoint? [Sign up for a free trial.](https://www.microsoft.com/microsoft-365/windows/microsoft-defender-atp?ocid=docs-wdatp-exposedapis-abovefoldlink) [!include[Microsoft Defender for Endpoint API URIs for US Government](../../includes/microsoft-defender-api-usgov.md)] diff --git a/windows/security/threat-protection/microsoft-defender-atp/get-discovered-vulnerabilities.md b/windows/security/threat-protection/microsoft-defender-atp/get-discovered-vulnerabilities.md index 9bf4ba7a3d..14425d3b01 100644 --- a/windows/security/threat-protection/microsoft-defender-atp/get-discovered-vulnerabilities.md +++ b/windows/security/threat-protection/microsoft-defender-atp/get-discovered-vulnerabilities.md @@ -21,8 +21,9 @@ ms.topic: article [!INCLUDE [Microsoft 365 Defender rebranding](../../includes/microsoft-defender.md)] -**Applies to:** -- [Microsoft Defender for Endpoint](https://go.microsoft.com/fwlink/p/?linkid=2146631) +**Applies to:** [Microsoft Defender for Endpoint](https://go.microsoft.com/fwlink/p/?linkid=2146631) + +- Want to experience Microsoft Defender for Endpoint? [Sign up for a free trial.](https://www.microsoft.com/microsoft-365/windows/microsoft-defender-atp?ocid=docs-wdatp-exposedapis-abovefoldlink) [!include[Microsoft Defender for Endpoint API URIs for US Government](../../includes/microsoft-defender-api-usgov.md)] diff --git a/windows/security/threat-protection/microsoft-defender-atp/get-domain-related-machines.md b/windows/security/threat-protection/microsoft-defender-atp/get-domain-related-machines.md index 588bbbb442..8c70e05df5 100644 --- a/windows/security/threat-protection/microsoft-defender-atp/get-domain-related-machines.md +++ b/windows/security/threat-protection/microsoft-defender-atp/get-domain-related-machines.md @@ -21,7 +21,7 @@ ms.topic: article [!INCLUDE [Microsoft 365 Defender rebranding](../../includes/microsoft-defender.md)] -**Applies to:** [Microsoft Defender for Endpoint(https://go.microsoft.com/fwlink/p/?linkid=2146631) +**Applies to:** [Microsoft Defender for Endpoint](https://go.microsoft.com/fwlink/p/?linkid=2146631) - Want to experience Microsoft Defender for Endpoint? [Sign up for a free trial.](https://www.microsoft.com/microsoft-365/windows/microsoft-defender-atp?ocid=docs-wdatp-exposedapis-abovefoldlink) diff --git a/windows/security/threat-protection/microsoft-defender-atp/get-installed-software.md b/windows/security/threat-protection/microsoft-defender-atp/get-installed-software.md index f686ea7ed2..09233fa7ab 100644 --- a/windows/security/threat-protection/microsoft-defender-atp/get-installed-software.md +++ b/windows/security/threat-protection/microsoft-defender-atp/get-installed-software.md @@ -20,8 +20,9 @@ ms.topic: article [!INCLUDE [Microsoft 365 Defender rebranding](../../includes/microsoft-defender.md)] -**Applies to:** -- [Microsoft Defender for Endpoint](https://go.microsoft.com/fwlink/p/?linkid=2146631) +**Applies to:** [Microsoft Defender for Endpoint](https://go.microsoft.com/fwlink/p/?linkid=2146631) + +- Want to experience Microsoft Defender for Endpoint? [Sign up for a free trial.](https://www.microsoft.com/microsoft-365/windows/microsoft-defender-atp?ocid=docs-wdatp-exposedapis-abovefoldlink) [!include[Microsoft Defender for Endpoint API URIs for US Government](../../includes/microsoft-defender-api-usgov.md)] diff --git a/windows/security/threat-protection/microsoft-defender-atp/get-ip-related-alerts.md b/windows/security/threat-protection/microsoft-defender-atp/get-ip-related-alerts.md index 184d6eb709..b18a482d19 100644 --- a/windows/security/threat-protection/microsoft-defender-atp/get-ip-related-alerts.md +++ b/windows/security/threat-protection/microsoft-defender-atp/get-ip-related-alerts.md @@ -23,7 +23,7 @@ ms.topic: article **Applies to:** [Microsoft Defender for Endpoint](https://go.microsoft.com/fwlink/p/?linkid=2146631) -- Want to experience Defender for Endpoint? [Sign up for a free trial.](https://www.microsoft.com/microsoft-365/windows/microsoft-defender-atp?ocid=docs-wdatp-exposedapis-abovefoldlink) +- Want to experience Microsoft Defender for Endpoint? [Sign up for a free trial.](https://www.microsoft.com/microsoft-365/windows/microsoft-defender-atp?ocid=docs-wdatp-exposedapis-abovefoldlink) [!include[Microsoft Defender for Endpoint API URIs for US Government](../../includes/microsoft-defender-api-usgov.md)] diff --git a/windows/security/threat-protection/microsoft-defender-atp/get-ip-statistics.md b/windows/security/threat-protection/microsoft-defender-atp/get-ip-statistics.md index 839b32dbf4..7492cfa46e 100644 --- a/windows/security/threat-protection/microsoft-defender-atp/get-ip-statistics.md +++ b/windows/security/threat-protection/microsoft-defender-atp/get-ip-statistics.md @@ -23,7 +23,7 @@ ms.topic: article **Applies to:** [Microsoft Defender for Endpoint](https://go.microsoft.com/fwlink/p/?linkid=2146631) -- Want to experience Defender for Endpoint? [Sign up for a free trial.](https://www.microsoft.com/microsoft-365/windows/microsoft-defender-atp?ocid=docs-wdatp-exposedapis-abovefoldlink) +- Want to experience Microsoft Defender for Endpoint? [Sign up for a free trial.](https://www.microsoft.com/microsoft-365/windows/microsoft-defender-atp?ocid=docs-wdatp-exposedapis-abovefoldlink) [!include[Microsoft Defender for Endpoint API URIs for US Government](../../includes/microsoft-defender-api-usgov.md)] diff --git a/windows/security/threat-protection/microsoft-defender-atp/get-kbinfo-collection.md b/windows/security/threat-protection/microsoft-defender-atp/get-kbinfo-collection.md index e7ac39a93c..b3e1d5574a 100644 --- a/windows/security/threat-protection/microsoft-defender-atp/get-kbinfo-collection.md +++ b/windows/security/threat-protection/microsoft-defender-atp/get-kbinfo-collection.md @@ -23,9 +23,13 @@ ROBOTS: NOINDEX [!INCLUDE [Microsoft 365 Defender rebranding](../../includes/microsoft-defender.md)] -**Applies to:** +**Applies to:** [Microsoft Defender for Endpoint](https://go.microsoft.com/fwlink/p/?linkid=2146631) -- [Microsoft Defender for Endpoint](https://go.microsoft.com/fwlink/p/?linkid=2146631) +- Want to experience Microsoft Defender for Endpoint? [Sign up for a free trial.](https://www.microsoft.com/microsoft-365/windows/microsoft-defender-atp?ocid=docs-wdatp-exposedapis-abovefoldlink) + +[!include[Microsoft Defender for Endpoint API URIs for US Government](../../includes/microsoft-defender-api-usgov.md)] + +[!include[Improve request performance](../../includes/improve-request-performance.md)] Retrieves a collection of KB's and KB details. diff --git a/windows/security/threat-protection/microsoft-defender-atp/get-machine-by-id.md b/windows/security/threat-protection/microsoft-defender-atp/get-machine-by-id.md index 331dca7bc1..f46e912d8c 100644 --- a/windows/security/threat-protection/microsoft-defender-atp/get-machine-by-id.md +++ b/windows/security/threat-protection/microsoft-defender-atp/get-machine-by-id.md @@ -23,7 +23,7 @@ ms.topic: article **Applies to:** [Microsoft Defender for Endpoint](https://go.microsoft.com/fwlink/p/?linkid=2146631) -- Want to experience Defender for Endpoint? [Sign up for a free trial.](https://www.microsoft.com/microsoft-365/windows/microsoft-defender-atp?ocid=docs-wdatp-exposedapis-abovefoldlink) +- Want to experience Microsoft Defender for Endpoint? [Sign up for a free trial.](https://www.microsoft.com/microsoft-365/windows/microsoft-defender-atp?ocid=docs-wdatp-exposedapis-abovefoldlink) [!include[Microsoft Defender for Endpoint API URIs for US Government](../../includes/microsoft-defender-api-usgov.md)] diff --git a/windows/security/threat-protection/microsoft-defender-atp/get-machine-group-exposure-score.md b/windows/security/threat-protection/microsoft-defender-atp/get-machine-group-exposure-score.md index 437599c09a..e13a900af5 100644 --- a/windows/security/threat-protection/microsoft-defender-atp/get-machine-group-exposure-score.md +++ b/windows/security/threat-protection/microsoft-defender-atp/get-machine-group-exposure-score.md @@ -23,7 +23,7 @@ ms.topic: article **Applies to:** [Microsoft Defender for Endpoint](https://go.microsoft.com/fwlink/p/?linkid=2146631) -- Want to experience Defender for Endpoint? [Sign up for a free trial.](https://www.microsoft.com/microsoft-365/windows/microsoft-defender-atp?ocid=docs-wdatp-exposedapis-abovefoldlink) +- Want to experience Microsoft Defender for Endpoint? [Sign up for a free trial.](https://www.microsoft.com/microsoft-365/windows/microsoft-defender-atp?ocid=docs-wdatp-exposedapis-abovefoldlink) [!include[Microsoft Defender for Endpoint API URIs for US Government](../../includes/microsoft-defender-api-usgov.md)] diff --git a/windows/security/threat-protection/microsoft-defender-atp/get-machine-related-alerts.md b/windows/security/threat-protection/microsoft-defender-atp/get-machine-related-alerts.md index 73d13b3564..86de75298d 100644 --- a/windows/security/threat-protection/microsoft-defender-atp/get-machine-related-alerts.md +++ b/windows/security/threat-protection/microsoft-defender-atp/get-machine-related-alerts.md @@ -23,7 +23,7 @@ ms.topic: article **Applies to:** [Microsoft Defender for Endpoint](https://go.microsoft.com/fwlink/p/?linkid=2146631) -- Want to experience Defender for Endpoint? [Sign up for a free trial.](https://www.microsoft.com/microsoft-365/windows/microsoft-defender-atp?ocid=docs-wdatp-exposedapis-abovefoldlink) +- Want to experience Microsoft Defender for Endpoint? [Sign up for a free trial.](https://www.microsoft.com/microsoft-365/windows/microsoft-defender-atp?ocid=docs-wdatp-exposedapis-abovefoldlink) [!include[Microsoft Defender for Endpoint API URIs for US Government](../../includes/microsoft-defender-api-usgov.md)] diff --git a/windows/security/threat-protection/microsoft-defender-atp/get-machineaction-object.md b/windows/security/threat-protection/microsoft-defender-atp/get-machineaction-object.md index cca2d17971..da012c1b41 100644 --- a/windows/security/threat-protection/microsoft-defender-atp/get-machineaction-object.md +++ b/windows/security/threat-protection/microsoft-defender-atp/get-machineaction-object.md @@ -23,7 +23,7 @@ ms.topic: article **Applies to:** [Microsoft Defender for Endpoint](https://go.microsoft.com/fwlink/p/?linkid=2146631) -- Want to experience Defender for Endpoint? [Sign up for a free trial.](https://www.microsoft.com/microsoft-365/windows/microsoft-defender-atp?ocid=docs-wdatp-exposedapis-abovefoldlink) +- Want to experience Microsoft Defender for Endpoint? [Sign up for a free trial.](https://www.microsoft.com/microsoft-365/windows/microsoft-defender-atp?ocid=docs-wdatp-exposedapis-abovefoldlink) [!include[Microsoft Defender for Endpoint API URIs for US Government](../../includes/microsoft-defender-api-usgov.md)] diff --git a/windows/security/threat-protection/microsoft-defender-atp/get-machineactions-collection.md b/windows/security/threat-protection/microsoft-defender-atp/get-machineactions-collection.md index 4828b5ec67..ec9d161528 100644 --- a/windows/security/threat-protection/microsoft-defender-atp/get-machineactions-collection.md +++ b/windows/security/threat-protection/microsoft-defender-atp/get-machineactions-collection.md @@ -23,7 +23,7 @@ ms.topic: article **Applies to:** [Microsoft Defender for Endpoint](https://go.microsoft.com/fwlink/p/?linkid=2146631) -- Want to experience Defender for Endpoint? [Sign up for a free trial.](https://www.microsoft.com/microsoft-365/windows/microsoft-defender-atp?ocid=docs-wdatp-exposedapis-abovefoldlink) +- Want to experience Microsoft Defender for Endpoint? [Sign up for a free trial.](https://www.microsoft.com/microsoft-365/windows/microsoft-defender-atp?ocid=docs-wdatp-exposedapis-abovefoldlink) [!include[Microsoft Defender for Endpoint API URIs for US Government](../../includes/microsoft-defender-api-usgov.md)] diff --git a/windows/security/threat-protection/microsoft-defender-atp/get-machinegroups-collection.md b/windows/security/threat-protection/microsoft-defender-atp/get-machinegroups-collection.md index f4c7216ceb..925103b0d1 100644 --- a/windows/security/threat-protection/microsoft-defender-atp/get-machinegroups-collection.md +++ b/windows/security/threat-protection/microsoft-defender-atp/get-machinegroups-collection.md @@ -23,8 +23,9 @@ ms.date: 10/07/2018 [!INCLUDE [Microsoft 365 Defender rebranding](../../includes/microsoft-defender.md)] -**Applies to:** -- [Microsoft Defender for Endpoint](https://go.microsoft.com/fwlink/p/?linkid=2146631) +**Applies to:** [Microsoft Defender for Endpoint](https://go.microsoft.com/fwlink/p/?linkid=2146631) + +- Want to experience Microsoft Defender for Endpoint? [Sign up for a free trial.](https://www.microsoft.com/microsoft-365/windows/microsoft-defender-atp?ocid=docs-wdatp-exposedapis-abovefoldlink) [!include[Microsoft Defender for Endpoint API URIs for US Government](../../includes/microsoft-defender-api-usgov.md)] diff --git a/windows/security/threat-protection/microsoft-defender-atp/get-machines-by-software.md b/windows/security/threat-protection/microsoft-defender-atp/get-machines-by-software.md index 042f48719b..8cb9e3c2d3 100644 --- a/windows/security/threat-protection/microsoft-defender-atp/get-machines-by-software.md +++ b/windows/security/threat-protection/microsoft-defender-atp/get-machines-by-software.md @@ -21,9 +21,9 @@ ms.topic: article [!INCLUDE [Microsoft 365 Defender rebranding](../../includes/microsoft-defender.md)] -**Applies to:** +**Applies to:** [Microsoft Defender for Endpoint](https://go.microsoft.com/fwlink/p/?linkid=2146631) -- [Microsoft Defender for Endpoint](https://go.microsoft.com/fwlink/p/?linkid=2146631) +- Want to experience Microsoft Defender for Endpoint? [Sign up for a free trial.](https://www.microsoft.com/microsoft-365/windows/microsoft-defender-atp?ocid=docs-wdatp-exposedapis-abovefoldlink) [!include[Microsoft Defender for Endpoint API URIs for US Government](../../includes/microsoft-defender-api-usgov.md)] diff --git a/windows/security/threat-protection/microsoft-defender-atp/get-machines-by-vulnerability.md b/windows/security/threat-protection/microsoft-defender-atp/get-machines-by-vulnerability.md index eb8b9da158..bc0c969c79 100644 --- a/windows/security/threat-protection/microsoft-defender-atp/get-machines-by-vulnerability.md +++ b/windows/security/threat-protection/microsoft-defender-atp/get-machines-by-vulnerability.md @@ -20,9 +20,9 @@ ms.topic: article [!INCLUDE [Microsoft 365 Defender rebranding](../../includes/microsoft-defender.md)] -**Applies to:** +**Applies to:** [Microsoft Defender for Endpoint](https://go.microsoft.com/fwlink/p/?linkid=2146631) -- [Microsoft Defender for Endpoint](https://go.microsoft.com/fwlink/p/?linkid=2146631) +- Want to experience Microsoft Defender for Endpoint? [Sign up for a free trial.](https://www.microsoft.com/microsoft-365/windows/microsoft-defender-atp?ocid=docs-wdatp-exposedapis-abovefoldlink) [!include[Microsoft Defender for Endpoint API URIs for US Government](../../includes/microsoft-defender-api-usgov.md)] diff --git a/windows/security/threat-protection/microsoft-defender-atp/get-machines.md b/windows/security/threat-protection/microsoft-defender-atp/get-machines.md index 725fa8e4b2..6c89d74e65 100644 --- a/windows/security/threat-protection/microsoft-defender-atp/get-machines.md +++ b/windows/security/threat-protection/microsoft-defender-atp/get-machines.md @@ -23,7 +23,7 @@ ms.topic: article **Applies to:** [Microsoft Defender for Endpoint](https://go.microsoft.com/fwlink/p/?linkid=2146631) -- Want to experience Defender for Endpoint? [Sign up for a free trial.](https://www.microsoft.com/microsoft-365/windows/microsoft-defender-atp?ocid=docs-wdatp-exposedapis-abovefoldlink) +- Want to experience Microsoft Defender for Endpoint? [Sign up for a free trial.](https://www.microsoft.com/microsoft-365/windows/microsoft-defender-atp?ocid=docs-wdatp-exposedapis-abovefoldlink) [!include[Microsoft Defender for Endpoint API URIs for US Government](../../includes/microsoft-defender-api-usgov.md)] diff --git a/windows/security/threat-protection/microsoft-defender-atp/get-machinesecuritystates-collection.md b/windows/security/threat-protection/microsoft-defender-atp/get-machinesecuritystates-collection.md index aba82de482..4f1d4fedec 100644 --- a/windows/security/threat-protection/microsoft-defender-atp/get-machinesecuritystates-collection.md +++ b/windows/security/threat-protection/microsoft-defender-atp/get-machinesecuritystates-collection.md @@ -22,9 +22,13 @@ ms.topic: article [!INCLUDE [Microsoft 365 Defender rebranding](../../includes/microsoft-defender.md)] -**Applies to:** +**Applies to:** [Microsoft Defender for Endpoint](https://go.microsoft.com/fwlink/p/?linkid=2146631) -- [Microsoft Defender for Endpoint](https://go.microsoft.com/fwlink/p/?linkid=2146631) +- Want to experience Microsoft Defender for Endpoint? [Sign up for a free trial.](https://www.microsoft.com/microsoft-365/windows/microsoft-defender-atp?ocid=docs-wdatp-exposedapis-abovefoldlink) + +[!include[Microsoft Defender for Endpoint API URIs for US Government](../../includes/microsoft-defender-api-usgov.md)] + +[!include[Improve request performance](../../includes/improve-request-performance.md)] Retrieves a collection of devices security states. diff --git a/windows/security/threat-protection/microsoft-defender-atp/get-missing-kbs-software.md b/windows/security/threat-protection/microsoft-defender-atp/get-missing-kbs-software.md index b9b44afb2d..a74bad1490 100644 --- a/windows/security/threat-protection/microsoft-defender-atp/get-missing-kbs-software.md +++ b/windows/security/threat-protection/microsoft-defender-atp/get-missing-kbs-software.md @@ -23,7 +23,7 @@ ms.topic: article **Applies to:** [Microsoft Defender for Endpoint](https://go.microsoft.com/fwlink/p/?linkid=2146631) -- Want to experience Defender for Endpoint? [Sign up for a free trial.](https://www.microsoft.com/microsoft-365/windows/microsoft-defender-atp?ocid=docs-wdatp-exposedapis-abovefoldlink) +- Want to experience Microsoft Defender for Endpoint? [Sign up for a free trial.](https://www.microsoft.com/microsoft-365/windows/microsoft-defender-atp?ocid=docs-wdatp-exposedapis-abovefoldlink) [!include[Microsoft Defender for Endpoint API URIs for US Government](../../includes/microsoft-defender-api-usgov.md)] diff --git a/windows/security/threat-protection/microsoft-defender-atp/get-package-sas-uri.md b/windows/security/threat-protection/microsoft-defender-atp/get-package-sas-uri.md index 17ac22ae88..332e875e6e 100644 --- a/windows/security/threat-protection/microsoft-defender-atp/get-package-sas-uri.md +++ b/windows/security/threat-protection/microsoft-defender-atp/get-package-sas-uri.md @@ -23,7 +23,7 @@ ms.topic: article **Applies to:** [Microsoft Defender for Endpoint](https://go.microsoft.com/fwlink/p/?linkid=2146631) -- Want to experience Defender for Endpoint? [Sign up for a free trial.](https://www.microsoft.com/microsoft-365/windows/microsoft-defender-atp?ocid=docs-wdatp-exposedapis-abovefoldlink) +- Want to experience Microsoft Defender for Endpoint? [Sign up for a free trial.](https://www.microsoft.com/microsoft-365/windows/microsoft-defender-atp?ocid=docs-wdatp-exposedapis-abovefoldlink) [!include[Microsoft Defender for Endpoint API URIs for US Government](../../includes/microsoft-defender-api-usgov.md)] diff --git a/windows/security/threat-protection/microsoft-defender-atp/get-recommendation-by-id.md b/windows/security/threat-protection/microsoft-defender-atp/get-recommendation-by-id.md index 857d3458e0..3666ef7955 100644 --- a/windows/security/threat-protection/microsoft-defender-atp/get-recommendation-by-id.md +++ b/windows/security/threat-protection/microsoft-defender-atp/get-recommendation-by-id.md @@ -20,8 +20,9 @@ ms.topic: article [!INCLUDE [Microsoft 365 Defender rebranding](../../includes/microsoft-defender.md)] -**Applies to:** -- [Microsoft Defender for Endpoint](https://go.microsoft.com/fwlink/p/?linkid=2146631) +**Applies to:** [Microsoft Defender for Endpoint](https://go.microsoft.com/fwlink/p/?linkid=2146631) + +- Want to experience Microsoft Defender for Endpoint? [Sign up for a free trial.](https://www.microsoft.com/microsoft-365/windows/microsoft-defender-atp?ocid=docs-wdatp-exposedapis-abovefoldlink) [!include[Microsoft Defender for Endpoint API URIs for US Government](../../includes/microsoft-defender-api-usgov.md)] diff --git a/windows/security/threat-protection/microsoft-defender-atp/get-recommendation-machines.md b/windows/security/threat-protection/microsoft-defender-atp/get-recommendation-machines.md index 9322ad8635..dfec0fb89f 100644 --- a/windows/security/threat-protection/microsoft-defender-atp/get-recommendation-machines.md +++ b/windows/security/threat-protection/microsoft-defender-atp/get-recommendation-machines.md @@ -20,8 +20,9 @@ ms.topic: article [!INCLUDE [Microsoft 365 Defender rebranding](../../includes/microsoft-defender.md)] -**Applies to:** -- [Microsoft Defender for Endpoint](https://go.microsoft.com/fwlink/p/?linkid=2146631) +**Applies to:** [Microsoft Defender for Endpoint](https://go.microsoft.com/fwlink/p/?linkid=2146631) + +- Want to experience Microsoft Defender for Endpoint? [Sign up for a free trial.](https://www.microsoft.com/microsoft-365/windows/microsoft-defender-atp?ocid=docs-wdatp-exposedapis-abovefoldlink) [!include[Microsoft Defender for Endpoint API URIs for US Government](../../includes/microsoft-defender-api-usgov.md)] diff --git a/windows/security/threat-protection/microsoft-defender-atp/get-recommendation-software.md b/windows/security/threat-protection/microsoft-defender-atp/get-recommendation-software.md index d0c62de5ce..c0adaddae0 100644 --- a/windows/security/threat-protection/microsoft-defender-atp/get-recommendation-software.md +++ b/windows/security/threat-protection/microsoft-defender-atp/get-recommendation-software.md @@ -20,8 +20,9 @@ ms.topic: article [!INCLUDE [Microsoft 365 Defender rebranding](../../includes/microsoft-defender.md)] -**Applies to:** -- [Microsoft Defender for Endpoint](https://go.microsoft.com/fwlink/p/?linkid=2146631) +**Applies to:** [Microsoft Defender for Endpoint](https://go.microsoft.com/fwlink/p/?linkid=2146631) + +- Want to experience Microsoft Defender for Endpoint? [Sign up for a free trial.](https://www.microsoft.com/microsoft-365/windows/microsoft-defender-atp?ocid=docs-wdatp-exposedapis-abovefoldlink) [!include[Microsoft Defender for Endpoint API URIs for US Government](../../includes/microsoft-defender-api-usgov.md)] diff --git a/windows/security/threat-protection/microsoft-defender-atp/get-recommendation-vulnerabilities.md b/windows/security/threat-protection/microsoft-defender-atp/get-recommendation-vulnerabilities.md index 07d26afe6f..9c06a2df8f 100644 --- a/windows/security/threat-protection/microsoft-defender-atp/get-recommendation-vulnerabilities.md +++ b/windows/security/threat-protection/microsoft-defender-atp/get-recommendation-vulnerabilities.md @@ -20,8 +20,9 @@ ms.topic: article [!INCLUDE [Microsoft 365 Defender rebranding](../../includes/microsoft-defender.md)] -**Applies to:** -- [Microsoft Defender for Endpoint](https://go.microsoft.com/fwlink/p/?linkid=2146631) +**Applies to:** [Microsoft Defender for Endpoint](https://go.microsoft.com/fwlink/p/?linkid=2146631) + +- Want to experience Microsoft Defender for Endpoint? [Sign up for a free trial.](https://www.microsoft.com/microsoft-365/windows/microsoft-defender-atp?ocid=docs-wdatp-exposedapis-abovefoldlink) [!include[Microsoft Defender for Endpoint API URIs for US Government](../../includes/microsoft-defender-api-usgov.md)] diff --git a/windows/security/threat-protection/microsoft-defender-atp/get-security-recommendations.md b/windows/security/threat-protection/microsoft-defender-atp/get-security-recommendations.md index a6e9564b8b..1cf2a7793b 100644 --- a/windows/security/threat-protection/microsoft-defender-atp/get-security-recommendations.md +++ b/windows/security/threat-protection/microsoft-defender-atp/get-security-recommendations.md @@ -20,9 +20,9 @@ ms.topic: article [!INCLUDE [Microsoft 365 Defender rebranding](../../includes/microsoft-defender.md)] -**Applies to:** +**Applies to:** [Microsoft Defender for Endpoint](https://go.microsoft.com/fwlink/p/?linkid=2146631) -- [Microsoft Defender for Endpoint](https://go.microsoft.com/fwlink/p/?linkid=2146631) +- Want to experience Microsoft Defender for Endpoint? [Sign up for a free trial.](https://www.microsoft.com/microsoft-365/windows/microsoft-defender-atp?ocid=docs-wdatp-exposedapis-abovefoldlink) [!include[Microsoft Defender for Endpoint API URIs for US Government](../../includes/microsoft-defender-api-usgov.md)] diff --git a/windows/security/threat-protection/microsoft-defender-atp/get-software-by-id.md b/windows/security/threat-protection/microsoft-defender-atp/get-software-by-id.md index e5246656fb..8c13f1d5da 100644 --- a/windows/security/threat-protection/microsoft-defender-atp/get-software-by-id.md +++ b/windows/security/threat-protection/microsoft-defender-atp/get-software-by-id.md @@ -21,9 +21,9 @@ ms.topic: article [!INCLUDE [Microsoft 365 Defender rebranding](../../includes/microsoft-defender.md)] -**Applies to:** +**Applies to:** [Microsoft Defender for Endpoint](https://go.microsoft.com/fwlink/p/?linkid=2146631) -- [Microsoft Defender for Endpoint](https://go.microsoft.com/fwlink/p/?linkid=2146631) +- Want to experience Microsoft Defender for Endpoint? [Sign up for a free trial.](https://www.microsoft.com/microsoft-365/windows/microsoft-defender-atp?ocid=docs-wdatp-exposedapis-abovefoldlink) [!include[Microsoft Defender for Endpoint API URIs for US Government](../../includes/microsoft-defender-api-usgov.md)] diff --git a/windows/security/threat-protection/microsoft-defender-atp/get-software-ver-distribution.md b/windows/security/threat-protection/microsoft-defender-atp/get-software-ver-distribution.md index 68faccd755..2bb098203c 100644 --- a/windows/security/threat-protection/microsoft-defender-atp/get-software-ver-distribution.md +++ b/windows/security/threat-protection/microsoft-defender-atp/get-software-ver-distribution.md @@ -21,9 +21,9 @@ ms.topic: article [!INCLUDE [Microsoft 365 Defender rebranding](../../includes/microsoft-defender.md)] -**Applies to:** +**Applies to:** [Microsoft Defender for Endpoint](https://go.microsoft.com/fwlink/p/?linkid=2146631) -- [Microsoft Defender for Endpoint](https://go.microsoft.com/fwlink/p/?linkid=2146631) +- Want to experience Microsoft Defender for Endpoint? [Sign up for a free trial.](https://www.microsoft.com/microsoft-365/windows/microsoft-defender-atp?ocid=docs-wdatp-exposedapis-abovefoldlink) [!include[Microsoft Defender for Endpoint API URIs for US Government](../../includes/microsoft-defender-api-usgov.md)] diff --git a/windows/security/threat-protection/microsoft-defender-atp/get-software.md b/windows/security/threat-protection/microsoft-defender-atp/get-software.md index e6eba350a0..7629b66bff 100644 --- a/windows/security/threat-protection/microsoft-defender-atp/get-software.md +++ b/windows/security/threat-protection/microsoft-defender-atp/get-software.md @@ -23,7 +23,7 @@ ms.topic: article **Applies to:** [Microsoft Defender for Endpoint](https://go.microsoft.com/fwlink/p/?linkid=2146631) -- Want to experience Defender for Endpoint? [Sign up for a free trial.](https://www.microsoft.com/microsoft-365/windows/microsoft-defender-atp?ocid=docs-wdatp-exposedapis-abovefoldlink) +- Want to experience Microsoft Defender for Endpoint? [Sign up for a free trial.](https://www.microsoft.com/microsoft-365/windows/microsoft-defender-atp?ocid=docs-wdatp-exposedapis-abovefoldlink) [!include[Microsoft Defender for Endpoint API URIs for US Government](../../includes/microsoft-defender-api-usgov.md)] diff --git a/windows/security/threat-protection/microsoft-defender-atp/get-user-information.md b/windows/security/threat-protection/microsoft-defender-atp/get-user-information.md index 184e70576e..d9af8b76ce 100644 --- a/windows/security/threat-protection/microsoft-defender-atp/get-user-information.md +++ b/windows/security/threat-protection/microsoft-defender-atp/get-user-information.md @@ -20,8 +20,9 @@ ms.topic: article [!INCLUDE [Microsoft 365 Defender rebranding](../../includes/microsoft-defender.md)] -**Applies to:** -- [Microsoft Defender for Endpoint](https://go.microsoft.com/fwlink/p/?linkid=2146631) +**Applies to:** [Microsoft Defender for Endpoint](https://go.microsoft.com/fwlink/p/?linkid=2146631) + +- Want to experience Microsoft Defender for Endpoint? [Sign up for a free trial.](https://www.microsoft.com/microsoft-365/windows/microsoft-defender-atp?ocid=docs-wdatp-exposedapis-abovefoldlink) [!include[Microsoft Defender for Endpoint API URIs for US Government](../../includes/microsoft-defender-api-usgov.md)] diff --git a/windows/security/threat-protection/microsoft-defender-atp/get-user-related-alerts.md b/windows/security/threat-protection/microsoft-defender-atp/get-user-related-alerts.md index 3126731b11..d16cd4cfee 100644 --- a/windows/security/threat-protection/microsoft-defender-atp/get-user-related-alerts.md +++ b/windows/security/threat-protection/microsoft-defender-atp/get-user-related-alerts.md @@ -23,7 +23,7 @@ ms.topic: article **Applies to:** [Microsoft Defender for Endpoint](https://go.microsoft.com/fwlink/p/?linkid=2146631) -- Want to experience Defender for Endpoint? [Sign up for a free trial.](https://www.microsoft.com/microsoft-365/windows/microsoft-defender-atp?ocid=docs-wdatp-exposedapis-abovefoldlink) +- Want to experience Microsoft Defender for Endpoint? [Sign up for a free trial.](https://www.microsoft.com/microsoft-365/windows/microsoft-defender-atp?ocid=docs-wdatp-exposedapis-abovefoldlink) [!include[Microsoft Defender for Endpoint API URIs for US Government](../../includes/microsoft-defender-api-usgov.md)] diff --git a/windows/security/threat-protection/microsoft-defender-atp/get-user-related-machines.md b/windows/security/threat-protection/microsoft-defender-atp/get-user-related-machines.md index 8956cf7608..88a70fd056 100644 --- a/windows/security/threat-protection/microsoft-defender-atp/get-user-related-machines.md +++ b/windows/security/threat-protection/microsoft-defender-atp/get-user-related-machines.md @@ -23,7 +23,7 @@ ms.topic: article **Applies to:** [Microsoft Defender for Endpoint](https://go.microsoft.com/fwlink/p/?linkid=2146631) -- Want to experience Defender for Endpoint? [Sign up for a free trial.](https://www.microsoft.com/microsoft-365/windows/microsoft-defender-atp?ocid=docs-wdatp-exposedapis-abovefoldlink) +- Want to experience Microsoft Defender for Endpoint? [Sign up for a free trial.](https://www.microsoft.com/microsoft-365/windows/microsoft-defender-atp?ocid=docs-wdatp-exposedapis-abovefoldlink) [!include[Microsoft Defender for Endpoint API URIs for US Government](../../includes/microsoft-defender-api-usgov.md)] diff --git a/windows/security/threat-protection/microsoft-defender-atp/get-vuln-by-software.md b/windows/security/threat-protection/microsoft-defender-atp/get-vuln-by-software.md index 281e8cdb0b..abb77af560 100644 --- a/windows/security/threat-protection/microsoft-defender-atp/get-vuln-by-software.md +++ b/windows/security/threat-protection/microsoft-defender-atp/get-vuln-by-software.md @@ -21,9 +21,9 @@ ms.topic: article [!INCLUDE [Microsoft 365 Defender rebranding](../../includes/microsoft-defender.md)] -**Applies to:** +**Applies to:** [Microsoft Defender for Endpoint](https://go.microsoft.com/fwlink/p/?linkid=2146631) -- [Microsoft Defender for Endpoint](https://go.microsoft.com/fwlink/p/?linkid=2146631) +- Want to experience Microsoft Defender for Endpoint? [Sign up for a free trial.](https://www.microsoft.com/microsoft-365/windows/microsoft-defender-atp?ocid=docs-wdatp-exposedapis-abovefoldlink) [!include[Microsoft Defender for Endpoint API URIs for US Government](../../includes/microsoft-defender-api-usgov.md)] diff --git a/windows/security/threat-protection/microsoft-defender-atp/get-vulnerability-by-id.md b/windows/security/threat-protection/microsoft-defender-atp/get-vulnerability-by-id.md index 5fb7863435..df3bc5a56f 100644 --- a/windows/security/threat-protection/microsoft-defender-atp/get-vulnerability-by-id.md +++ b/windows/security/threat-protection/microsoft-defender-atp/get-vulnerability-by-id.md @@ -20,8 +20,9 @@ ms.topic: article [!INCLUDE [Microsoft 365 Defender rebranding](../../includes/microsoft-defender.md)] -**Applies to:** -- [Microsoft Defender for Endpoint](https://go.microsoft.com/fwlink/p/?linkid=2146631) +**Applies to:** [Microsoft Defender for Endpoint](https://go.microsoft.com/fwlink/p/?linkid=2146631) + +- Want to experience Microsoft Defender for Endpoint? [Sign up for a free trial.](https://www.microsoft.com/microsoft-365/windows/microsoft-defender-atp?ocid=docs-wdatp-exposedapis-abovefoldlink) [!include[Microsoft Defender for Endpoint API URIs for US Government](../../includes/microsoft-defender-api-usgov.md)] diff --git a/windows/security/threat-protection/microsoft-defender-atp/initiate-autoir-investigation.md b/windows/security/threat-protection/microsoft-defender-atp/initiate-autoir-investigation.md index 84ab44bf10..90bd7b9256 100644 --- a/windows/security/threat-protection/microsoft-defender-atp/initiate-autoir-investigation.md +++ b/windows/security/threat-protection/microsoft-defender-atp/initiate-autoir-investigation.md @@ -23,7 +23,7 @@ ms.topic: article **Applies to:** [Microsoft Defender for Endpoint](https://go.microsoft.com/fwlink/p/?linkid=2146631) -- Want to experience Defender for Endpoint? [Sign up for a free trial.](https://www.microsoft.com/microsoft-365/windows/microsoft-defender-atp?ocid=docs-wdatp-exposedapis-abovefoldlink) +- Want to experience Microsoft Defender for Endpoint? [Sign up for a free trial.](https://www.microsoft.com/microsoft-365/windows/microsoft-defender-atp?ocid=docs-wdatp-exposedapis-abovefoldlink) [!include[Microsoft Defender for Endpoint API URIs for US Government](../../includes/microsoft-defender-api-usgov.md)] diff --git a/windows/security/threat-protection/microsoft-defender-atp/investigation.md b/windows/security/threat-protection/microsoft-defender-atp/investigation.md index 98d5f63bef..d5a2cf97cf 100644 --- a/windows/security/threat-protection/microsoft-defender-atp/investigation.md +++ b/windows/security/threat-protection/microsoft-defender-atp/investigation.md @@ -25,7 +25,7 @@ ms.topic: article **Applies to:** [Microsoft Defender for Endpoint](https://go.microsoft.com/fwlink/p/?linkid=2146631) -- Want to experience Defender for Endpoint? [Sign up for a free trial.](https://www.microsoft.com/microsoft-365/windows/microsoft-defender-atp?ocid=docs-wdatp-exposedapis-abovefoldlink) +- Want to experience Microsoft Defender for Endpoint? [Sign up for a free trial.](https://www.microsoft.com/microsoft-365/windows/microsoft-defender-atp?ocid=docs-wdatp-exposedapis-abovefoldlink) [!include[Microsoft Defender for Endpoint API URIs for US Government](../../includes/microsoft-defender-api-usgov.md)] diff --git a/windows/security/threat-protection/microsoft-defender-atp/isolate-machine.md b/windows/security/threat-protection/microsoft-defender-atp/isolate-machine.md index e52dcfca9e..7d5d12f3e4 100644 --- a/windows/security/threat-protection/microsoft-defender-atp/isolate-machine.md +++ b/windows/security/threat-protection/microsoft-defender-atp/isolate-machine.md @@ -23,7 +23,7 @@ ms.topic: article **Applies to:** [Microsoft Defender for Endpoint](https://go.microsoft.com/fwlink/p/?linkid=2146631) -- Want to experience Defender for Endpoint? [Sign up for a free trial.](https://www.microsoft.com/microsoft-365/windows/microsoft-defender-atp?ocid=docs-wdatp-exposedapis-abovefoldlink) +- Want to experience Microsoft Defender for Endpoint? [Sign up for a free trial.](https://www.microsoft.com/microsoft-365/windows/microsoft-defender-atp?ocid=docs-wdatp-exposedapis-abovefoldlink) [!include[Microsoft Defender for Endpoint API URIs for US Government](../../includes/microsoft-defender-api-usgov.md)] diff --git a/windows/security/threat-protection/microsoft-defender-atp/offboard-machine-api.md b/windows/security/threat-protection/microsoft-defender-atp/offboard-machine-api.md index 9dddb35e92..b87d77da37 100644 --- a/windows/security/threat-protection/microsoft-defender-atp/offboard-machine-api.md +++ b/windows/security/threat-protection/microsoft-defender-atp/offboard-machine-api.md @@ -23,7 +23,7 @@ ms.topic: article **Applies to:** [Microsoft Defender for Endpoint](https://go.microsoft.com/fwlink/p/?linkid=2146631) -- Want to experience Defender for Endpoint? [Sign up for a free trial.](https://www.microsoft.com/microsoft-365/windows/microsoft-defender-atp?ocid=docs-wdatp-exposedapis-abovefoldlink) +- Want to experience Microsoft Defender for Endpoint? [Sign up for a free trial.](https://www.microsoft.com/microsoft-365/windows/microsoft-defender-atp?ocid=docs-wdatp-exposedapis-abovefoldlink) [!include[Microsoft Defender for Endpoint API URIs for US Government](../../includes/microsoft-defender-api-usgov.md)] diff --git a/windows/security/threat-protection/microsoft-defender-atp/onboarding-notification.md b/windows/security/threat-protection/microsoft-defender-atp/onboarding-notification.md index f405b1996b..452f25222e 100644 --- a/windows/security/threat-protection/microsoft-defender-atp/onboarding-notification.md +++ b/windows/security/threat-protection/microsoft-defender-atp/onboarding-notification.md @@ -22,8 +22,9 @@ ms.topic: article [!INCLUDE [Microsoft 365 Defender rebranding](../../includes/microsoft-defender.md)] -**Applies to:** -- [Microsoft Defender for Endpoint](https://go.microsoft.com/fwlink/p/?linkid=2146631) +**Applies to:** [Microsoft Defender for Endpoint](https://go.microsoft.com/fwlink/p/?linkid=2146631) + +- Want to experience Microsoft Defender for Endpoint? [Sign up for a free trial.](https://www.microsoft.com/microsoft-365/windows/microsoft-defender-atp?ocid=docs-wdatp-exposedapis-abovefoldlink) [!include[Microsoft Defender for Endpoint API URIs for US Government](../../includes/microsoft-defender-api-usgov.md)] diff --git a/windows/security/threat-protection/microsoft-defender-atp/post-ti-indicator.md b/windows/security/threat-protection/microsoft-defender-atp/post-ti-indicator.md index e5fe251155..ac9c3929ea 100644 --- a/windows/security/threat-protection/microsoft-defender-atp/post-ti-indicator.md +++ b/windows/security/threat-protection/microsoft-defender-atp/post-ti-indicator.md @@ -21,9 +21,9 @@ ms.topic: article [!INCLUDE [Microsoft 365 Defender rebranding](../../includes/microsoft-defender.md)] -**Applies to:** [Microsoft Defender for Endpoint]https://go.microsoft.com/fwlink/p/?linkid=2146631) +**Applies to:** [Microsoft Defender for Endpoint](https://go.microsoft.com/fwlink/p/?linkid=2146631) -- Want to experience Defender for Endpoint? [Sign up for a free trial.](https://www.microsoft.com/microsoft-365/windows/microsoft-defender-atp?ocid=docs-wdatp-exposedapis-abovefoldlink) +- Want to experience Microsoft Defender for Endpoint? [Sign up for a free trial.](https://www.microsoft.com/microsoft-365/windows/microsoft-defender-atp?ocid=docs-wdatp-exposedapis-abovefoldlink) [!include[Microsoft Defender for Endpoint API URIs for US Government](../../includes/microsoft-defender-api-usgov.md)] diff --git a/windows/security/threat-protection/microsoft-defender-atp/pull-alerts-using-rest-api.md b/windows/security/threat-protection/microsoft-defender-atp/pull-alerts-using-rest-api.md index bd9ab75684..9587df251a 100644 --- a/windows/security/threat-protection/microsoft-defender-atp/pull-alerts-using-rest-api.md +++ b/windows/security/threat-protection/microsoft-defender-atp/pull-alerts-using-rest-api.md @@ -22,12 +22,9 @@ ms.topic: article [!INCLUDE [Microsoft 365 Defender rebranding](../../includes/microsoft-defender.md)] -**Applies to:** -- [Microsoft Defender for Endpoint](https://go.microsoft.com/fwlink/p/?linkid=2146631) +**Applies to:** [Microsoft Defender for Endpoint](https://go.microsoft.com/fwlink/p/?linkid=2146631) - - ->Want to experience Defender for Endpoint? [Sign up for a free trial.](https://www.microsoft.com/microsoft-365/windows/microsoft-defender-atp?ocid=docs-wdatp-pullalerts-abovefoldlink) +- Want to experience Microsoft Defender for Endpoint? [Sign up for a free trial.](https://www.microsoft.com/microsoft-365/windows/microsoft-defender-atp?ocid=docs-wdatp-exposedapis-abovefoldlink) >[!Note] >- [Microsoft Defender for Endpoint Alert](alerts.md) is composed from one or more detections. diff --git a/windows/security/threat-protection/microsoft-defender-atp/recommendation.md b/windows/security/threat-protection/microsoft-defender-atp/recommendation.md index d53ac74ba4..6a3c3ce05d 100644 --- a/windows/security/threat-protection/microsoft-defender-atp/recommendation.md +++ b/windows/security/threat-protection/microsoft-defender-atp/recommendation.md @@ -23,7 +23,7 @@ ms.topic: article **Applies to:** [Microsoft Defender for Endpoint](https://go.microsoft.com/fwlink/p/?linkid=2146631) -- Want to experience Defender for Endpoint? [Sign up for a free trial.](https://www.microsoft.com/microsoft-365/windows/microsoft-defender-atp?ocid=docs-wdatp-exposedapis-abovefoldlink) +- Want to experience Microsoft Defender for Endpoint? [Sign up for a free trial.](https://www.microsoft.com/microsoft-365/windows/microsoft-defender-atp?ocid=docs-wdatp-exposedapis-abovefoldlink) [!include[Microsoft Defender for Endpoint API URIs for US Government](../../includes/microsoft-defender-api-usgov.md)] diff --git a/windows/security/threat-protection/microsoft-defender-atp/restrict-code-execution.md b/windows/security/threat-protection/microsoft-defender-atp/restrict-code-execution.md index 9a05137743..3c91b9c04c 100644 --- a/windows/security/threat-protection/microsoft-defender-atp/restrict-code-execution.md +++ b/windows/security/threat-protection/microsoft-defender-atp/restrict-code-execution.md @@ -23,7 +23,7 @@ ms.topic: article **Applies to:** [Microsoft Defender for Endpoint](https://go.microsoft.com/fwlink/p/?linkid=2146631) -- Want to experience Defender for Endpoint? [Sign up for a free trial.](https://www.microsoft.com/microsoft-365/windows/microsoft-defender-atp?ocid=docs-wdatp-exposedapis-abovefoldlink) +- Want to experience Microsoft Defender for Endpoint? [Sign up for a free trial.](https://www.microsoft.com/microsoft-365/windows/microsoft-defender-atp?ocid=docs-wdatp-exposedapis-abovefoldlink) [!include[Microsoft Defender for Endpoint API URIs for US Government](../../includes/microsoft-defender-api-usgov.md)] diff --git a/windows/security/threat-protection/microsoft-defender-atp/run-advanced-query-api.md b/windows/security/threat-protection/microsoft-defender-atp/run-advanced-query-api.md index 6eca5df06d..50b5f9255d 100644 --- a/windows/security/threat-protection/microsoft-defender-atp/run-advanced-query-api.md +++ b/windows/security/threat-protection/microsoft-defender-atp/run-advanced-query-api.md @@ -24,7 +24,7 @@ ms.topic: article **Applies to:** [Microsoft Defender for Endpoint](https://go.microsoft.com/fwlink/p/?linkid=2146631) -- Want to experience Defender for Endpoint? [Sign up for a free trial.](https://www.microsoft.com/microsoft-365/windows/microsoft-defender-atp?ocid=docs-wdatp-exposedapis-abovefoldlink) +- Want to experience Microsoft Defender for Endpoint? [Sign up for a free trial.](https://www.microsoft.com/microsoft-365/windows/microsoft-defender-atp?ocid=docs-wdatp-exposedapis-abovefoldlink) [!include[Microsoft Defender for Endpoint API URIs for US Government](../../includes/microsoft-defender-api-usgov.md)] diff --git a/windows/security/threat-protection/microsoft-defender-atp/run-advanced-query-sample-powershell.md b/windows/security/threat-protection/microsoft-defender-atp/run-advanced-query-sample-powershell.md index c22b6113f1..247f300dac 100644 --- a/windows/security/threat-protection/microsoft-defender-atp/run-advanced-query-sample-powershell.md +++ b/windows/security/threat-protection/microsoft-defender-atp/run-advanced-query-sample-powershell.md @@ -21,8 +21,9 @@ ms.topic: article [!INCLUDE [Microsoft 365 Defender rebranding](../../includes/microsoft-defender.md)] -**Applies to:** -- [Microsoft Defender for Endpoint](https://go.microsoft.com/fwlink/p/?linkid=2146631) +**Applies to:** [Microsoft Defender for Endpoint](https://go.microsoft.com/fwlink/p/?linkid=2146631) + +- Want to experience Microsoft Defender for Endpoint? [Sign up for a free trial.](https://www.microsoft.com/microsoft-365/windows/microsoft-defender-atp?ocid=docs-wdatp-exposedapis-abovefoldlink) [!include[Microsoft Defender for Endpoint API URIs for US Government](../../includes/microsoft-defender-api-usgov.md)] diff --git a/windows/security/threat-protection/microsoft-defender-atp/run-advanced-query-sample-python.md b/windows/security/threat-protection/microsoft-defender-atp/run-advanced-query-sample-python.md index b09ec393cd..7cda7c8cd9 100644 --- a/windows/security/threat-protection/microsoft-defender-atp/run-advanced-query-sample-python.md +++ b/windows/security/threat-protection/microsoft-defender-atp/run-advanced-query-sample-python.md @@ -22,9 +22,9 @@ ms.topic: article [!INCLUDE [Microsoft 365 Defender rebranding](../../includes/microsoft-defender.md)] -**Applies to:** +**Applies to:** [Microsoft Defender for Endpoint](https://go.microsoft.com/fwlink/p/?linkid=2146631) -- [Microsoft Defender for Endpoint](https://go.microsoft.com/fwlink/p/?linkid=2146631) +- Want to experience Microsoft Defender for Endpoint? [Sign up for a free trial.](https://www.microsoft.com/microsoft-365/windows/microsoft-defender-atp?ocid=docs-wdatp-exposedapis-abovefoldlink) [!include[Microsoft Defender for Endpoint API URIs for US Government](../../includes/microsoft-defender-api-usgov.md)] diff --git a/windows/security/threat-protection/microsoft-defender-atp/run-av-scan.md b/windows/security/threat-protection/microsoft-defender-atp/run-av-scan.md index e1e4afef67..f2d979889c 100644 --- a/windows/security/threat-protection/microsoft-defender-atp/run-av-scan.md +++ b/windows/security/threat-protection/microsoft-defender-atp/run-av-scan.md @@ -23,7 +23,7 @@ ms.topic: article **Applies to:** [Microsoft Defender for Endpoint](https://go.microsoft.com/fwlink/p/?linkid=2146631) -- Want to experience Defender for Endpoint? [Sign up for a free trial.](https://www.microsoft.com/microsoft-365/windows/microsoft-defender-atp?ocid=docs-wdatp-exposedapis-abovefoldlink) +- Want to experience Microsoft Defender for Endpoint? [Sign up for a free trial.](https://www.microsoft.com/microsoft-365/windows/microsoft-defender-atp?ocid=docs-wdatp-exposedapis-abovefoldlink) [!include[Microsoft Defender for Endpoint API URIs for US Government](../../includes/microsoft-defender-api-usgov.md)] diff --git a/windows/security/threat-protection/microsoft-defender-atp/troubleshoot-onboarding-error-messages.md b/windows/security/threat-protection/microsoft-defender-atp/troubleshoot-onboarding-error-messages.md index a6af2f344d..1ecd70b09d 100644 --- a/windows/security/threat-protection/microsoft-defender-atp/troubleshoot-onboarding-error-messages.md +++ b/windows/security/threat-protection/microsoft-defender-atp/troubleshoot-onboarding-error-messages.md @@ -22,9 +22,9 @@ ms.topic: troubleshooting [!INCLUDE [Microsoft 365 Defender rebranding](../../includes/microsoft-defender.md)] -**Applies to:** +**Applies to:** [Microsoft Defender for Endpoint](https://go.microsoft.com/fwlink/p/?linkid=2146631) -- [Microsoft Defender for Endpoint](https://go.microsoft.com/fwlink/p/?linkid=2146631) +- Want to experience Microsoft Defender for Endpoint? [Sign up for a free trial.](https://www.microsoft.com/microsoft-365/windows/microsoft-defender-atp?ocid=docs-wdatp-exposedapis-abovefoldlink) >Want to experience Microsoft Defender for Endpoint? [Sign up for a free trial.](https://www.microsoft.com/microsoft-365/windows/microsoft-defender-atp?ocid=docs-wdatp-troublshootonboarding-abovefoldlink) From 564127205d603c4af019ebc946d790181464d6b7 Mon Sep 17 00:00:00 2001 From: "Trond B. Krokli" <38162891+illfated@users.noreply.github.com> Date: Thu, 24 Dec 2020 15:02:20 +0100 Subject: [PATCH 210/486] Update basic-permissions.md From issue ticket #8864 (**typo**): > For more information, see Assign administrator and non-administrator roles to uses with Azure Active Directory. > (near the bottom of the page) > > uses should read users Thanks to andrePKI for pointing out the typo. This seemingly simple typo correction escalated somewhat into a format improvement and link update to replace outdated MSDN and TechNet links with current MS Docs links. You want to verify if the new links are the proper ones for this source page, or request the links either to be reverted back to the old ones, in case there is specific information in the old documents not present in the new documents, or suggest more correct links to replace the old ones. Proposed changes: - typo correction, "uses" -> users - typo correction: remove 2 commas from "see, Add, or remove group memberships" - Connect-MsolService: replace the old MSDN URL with a new one pointing to its current PowerShell docs page - old URL: https://msdn.microsoft.com/library/dn194123.aspx - new URL: https://docs.microsoft.com/powershell/module/msonline/connect-msolservice - "Add, or remove group memberships" link text (document title: "Manage Azure AD group and role membership") replaced with "Add or remove group members using Azure Active Directory" - old URL: https://technet.microsoft.com/library/321d532e-407d-4e29-a00a-8afbe23008dd#BKMK_ManageGroups (anchor link jump broken by redirection) - new URL: https://docs.microsoft.com/azure/active-directory/fundamentals/active-directory-users-assign-role-azure-portal Whitespace & formatting changes: - remove redundant end-of-line blanks (2 occurrences) - add editorial blank line after MarkDown H2 and H3 headings (4 occurrences) - MD syntax highlighting phrase "text" corrected to "PowerShell" (MD code blocks containing PS cmdlets) - reduce double blank spacing in bullet point list to single space (1 occurrence) - add MD indent marker compatibility spacing (1 occurrence) Closes #8864 --- .../basic-permissions.md | 21 +++++++++++-------- 1 file changed, 12 insertions(+), 9 deletions(-) diff --git a/windows/security/threat-protection/microsoft-defender-atp/basic-permissions.md b/windows/security/threat-protection/microsoft-defender-atp/basic-permissions.md index fed2ad3911..730e666b20 100644 --- a/windows/security/threat-protection/microsoft-defender-atp/basic-permissions.md +++ b/windows/security/threat-protection/microsoft-defender-atp/basic-permissions.md @@ -13,7 +13,7 @@ author: mjcaparas ms.localizationpriority: medium manager: dansimp audience: ITPro -ms.collection: M365-security-compliance +ms.collection: M365-security-compliance ms.topic: article --- @@ -26,28 +26,30 @@ ms.topic: article - Azure Active Directory - [Microsoft Defender for Endpoint](https://go.microsoft.com/fwlink/p/?linkid=2146631) ->Want to experience Defender for Endpoint? [Sign up for a free trial.](https://www.microsoft.com/microsoft-365/windows/microsoft-defender-atp?ocid=docs-wdatp-basicaccess-abovefoldlink) +> Want to experience Defender for Endpoint? [Sign up for a free trial.](https://www.microsoft.com/microsoft-365/windows/microsoft-defender-atp?ocid=docs-wdatp-basicaccess-abovefoldlink) -Refer to the instructions below to use basic permissions management. +Refer to the instructions below to use basic permissions management. You can use either of the following solutions: - Azure PowerShell -- Azure portal +- Azure portal For granular control over permissions, [switch to role-based access control](rbac.md). ## Assign user access using Azure PowerShell + You can assign users with one of the following levels of permissions: - Full access (Read and Write) - Read-only access ### Before you begin + - Install Azure PowerShell. For more information, see, [How to install and configure Azure PowerShell](https://azure.microsoft.com/documentation/articles/powershell-install-configure/).
    > [!NOTE] > You need to run the PowerShell cmdlets in an elevated command-line. -- Connect to your Azure Active Directory. For more information, see, [Connect-MsolService](https://msdn.microsoft.com/library/dn194123.aspx). +- Connect to your Azure Active Directory. For more information, see, [Connect-MsolService](https://docs.microsoft.com/powershell/module/msonline/connect-msolservice). **Full access**
    Users with full access can log in, view all system information and resolve alerts, submit files for deep analysis, and download the onboarding package. @@ -61,19 +63,20 @@ Assigning read-only access rights requires adding the users to the "Security Rea Use the following steps to assign security roles: - For **read and write** access, assign users to the security administrator role by using the following command: - ```text + ```PowerShell Add-MsolRoleMember -RoleName "Security Administrator" -RoleMemberEmailAddress "secadmin@Contoso.onmicrosoft.com" ``` - For **read-only** access, assign users to the security reader role by using the following command: - ```text + ```PowerShell Add-MsolRoleMember -RoleName "Security Reader" -RoleMemberEmailAddress "reader@Contoso.onmicrosoft.com" ``` -For more information, see, [Add, or remove group memberships](https://technet.microsoft.com/library/321d532e-407d-4e29-a00a-8afbe23008dd#BKMK_ManageGroups). +For more information, see [Add or remove group members using Azure Active Directory](https://docs.microsoft.com/azure/active-directory/fundamentals/active-directory-groups-members-azure-portal). ## Assign user access using the Azure portal -For more information, see [Assign administrator and non-administrator roles to uses with Azure Active Directory](https://docs.microsoft.com/azure/active-directory/fundamentals/active-directory-users-assign-role-azure-portal). +For more information, see [Assign administrator and non-administrator roles to users with Azure Active Directory](https://docs.microsoft.com/azure/active-directory/fundamentals/active-directory-users-assign-role-azure-portal). ## Related topic + - [Manage portal access using RBAC](rbac.md) From 323600c55844d1a9ab3ae8fa613506593d2e963e Mon Sep 17 00:00:00 2001 From: aviveldan <39082532+aviveldan@users.noreply.github.com> Date: Thu, 24 Dec 2020 17:22:26 +0200 Subject: [PATCH 211/486] Added response fields descriptions table --- .../microsoft-defender-atp/get-ip-statistics.md | 9 +++++++++ 1 file changed, 9 insertions(+) diff --git a/windows/security/threat-protection/microsoft-defender-atp/get-ip-statistics.md b/windows/security/threat-protection/microsoft-defender-atp/get-ip-statistics.md index b58fd359e9..b3531c3636 100644 --- a/windows/security/threat-protection/microsoft-defender-atp/get-ip-statistics.md +++ b/windows/security/threat-protection/microsoft-defender-atp/get-ip-statistics.md @@ -93,3 +93,12 @@ Content-type: application/json "orgLastSeen": "2017-08-29T13:32:59Z" } ``` + + +Name | Description +:---|:---|:--- +Org prevalence | the distinct count of devices that opened network connection to this IP. +Org first seen | the first connection for this IP in the organization. +Org last seen | the last connection for this IP in the organization. +>[!Note] +> This statistic information is based on data from the past 30 days. From 07fe23266baa7d1a1fc0eb4c8e663b0846e2201e Mon Sep 17 00:00:00 2001 From: MaratMussabekov <48041687+MaratMussabekov@users.noreply.github.com> Date: Sat, 26 Dec 2020 20:41:57 +0500 Subject: [PATCH 212/486] Update deployment-vdi-microsoft-defender-antivirus.md --- .../deployment-vdi-microsoft-defender-antivirus.md | 3 +-- 1 file changed, 1 insertion(+), 2 deletions(-) diff --git a/windows/security/threat-protection/microsoft-defender-antivirus/deployment-vdi-microsoft-defender-antivirus.md b/windows/security/threat-protection/microsoft-defender-antivirus/deployment-vdi-microsoft-defender-antivirus.md index a7990f4bca..5185a99f15 100644 --- a/windows/security/threat-protection/microsoft-defender-antivirus/deployment-vdi-microsoft-defender-antivirus.md +++ b/windows/security/threat-protection/microsoft-defender-antivirus/deployment-vdi-microsoft-defender-antivirus.md @@ -84,11 +84,10 @@ See the [Download and unpackage](#download-and-unpackage-the-latest-updates) sec Now you can get started on downloading and installing new updates. We’ve created a sample PowerShell script for you below. This script is the easiest way to download new updates and get them ready for your VMs. You should then set the script to run at a certain time on the management machine by using a scheduled task (or, if you’re familiar with using PowerShell scripts in Azure, Intune, or SCCM, you could also use those scripts). ```PowerShell -$vdmpathbase = 'c:\wdav-update\{00000000-0000-0000-0000-' +$vdmpathbase = "$env:systemdrive\wdav-update\{00000000-0000-0000-0000-" $vdmpathtime = Get-Date -format "yMMddHHmmss" $vdmpath = $vdmpathbase + $vdmpathtime + '}' $vdmpackage = $vdmpath + '\mpam-fe.exe' -$args = @("/x") New-Item -ItemType Directory -Force -Path $vdmpath | Out-Null From b33b63572691a3e4ba36999d9bf2e09886415185 Mon Sep 17 00:00:00 2001 From: MaratMussabekov <48041687+MaratMussabekov@users.noreply.github.com> Date: Sat, 26 Dec 2020 22:54:30 +0500 Subject: [PATCH 213/486] Update deploy-enterprise-licenses.md --- windows/deployment/deploy-enterprise-licenses.md | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/windows/deployment/deploy-enterprise-licenses.md b/windows/deployment/deploy-enterprise-licenses.md index e43658fdb5..7c7c2b7d4e 100644 --- a/windows/deployment/deploy-enterprise-licenses.md +++ b/windows/deployment/deploy-enterprise-licenses.md @@ -34,7 +34,7 @@ This topic describes how to deploy Windows 10 Enterprise E3 or E5 licenses with To determine if the computer has a firmware-embedded activation key, type the following command at an elevated Windows PowerShell prompt ``` -(Get-WmiObject -query ‘select * from SoftwareLicensingService’).OA3xOriginalProductKey +(Get-CimInstance -query ‘select * from SoftwareLicensingService’).OA3xOriginalProductKey ``` If the device has a firmware-embedded activation key, it will be displayed in the output. If the output is blank, the device does not have a firmware embedded activation key. Most OEM-provided devices designed to run Windows 8 or later will have a firmware-embedded key. From 6d4fd807f25c240c109a7f5e7391b8aa773b0f65 Mon Sep 17 00:00:00 2001 From: VLG17 <41186174+VLG17@users.noreply.github.com> Date: Sun, 27 Dec 2020 20:32:52 +0200 Subject: [PATCH 214/486] add note about AMD processors https://github.com/MicrosoftDocs/windows-itpro-docs/issues/8514 --- .../system-guard-secure-launch-and-smm-protection.md | 3 +++ 1 file changed, 3 insertions(+) diff --git a/windows/security/threat-protection/windows-defender-system-guard/system-guard-secure-launch-and-smm-protection.md b/windows/security/threat-protection/windows-defender-system-guard/system-guard-secure-launch-and-smm-protection.md index c141b00025..4a2dd888c5 100644 --- a/windows/security/threat-protection/windows-defender-system-guard/system-guard-secure-launch-and-smm-protection.md +++ b/windows/security/threat-protection/windows-defender-system-guard/system-guard-secure-launch-and-smm-protection.md @@ -91,3 +91,6 @@ To verify that Secure Launch is running, use System Information (MSInfo32). Clic |Modern/Connected Standby|Platforms must support Modern/Connected Standby.| |Platform firmware|Platform firmware must carry all code required to perform a launch.| |Platform firmware update|System firmware is recommended to be updated via UpdateCapsule in Windows Update. | + +> [!NOTE] +> For more details around AMD processors please check this [link](https://www.microsoft.com/security/blog/2020/09/01/force-firmware-code-to-be-measured-and-attested-by-secure-launch-on-windows-10/) From 80cc1c7b1961acbe3ca1739146ab665313efb64a Mon Sep 17 00:00:00 2001 From: VLG17 <41186174+VLG17@users.noreply.github.com> Date: Sun, 27 Dec 2020 20:39:02 +0200 Subject: [PATCH 215/486] update event ID https://github.com/MicrosoftDocs/windows-itpro-docs/issues/8434 --- ...onfigure-network-connections-microsoft-defender-antivirus.md | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/windows/security/threat-protection/microsoft-defender-antivirus/configure-network-connections-microsoft-defender-antivirus.md b/windows/security/threat-protection/microsoft-defender-antivirus/configure-network-connections-microsoft-defender-antivirus.md index 1be93dc8a6..8ac5917a9e 100644 --- a/windows/security/threat-protection/microsoft-defender-antivirus/configure-network-connections-microsoft-defender-antivirus.md +++ b/windows/security/threat-protection/microsoft-defender-antivirus/configure-network-connections-microsoft-defender-antivirus.md @@ -113,7 +113,7 @@ You will also see a detection under **Quarantined threats** in the **Scan histor > [!NOTE] > Versions of Windows 10 before version 1703 have a different user interface. See [Microsoft Defender Antivirus in the Windows Security app](microsoft-defender-security-center-antivirus.md). - The Windows event log will also show [Windows Defender client event ID 2050](troubleshoot-microsoft-defender-antivirus.md). + The Windows event log will also show [Windows Defender client event ID 1116](troubleshoot-microsoft-defender-antivirus.md). ## Related articles From af853a81d073ea57376075e3390c6ce489d3bb11 Mon Sep 17 00:00:00 2001 From: VLG17 <41186174+VLG17@users.noreply.github.com> Date: Sun, 27 Dec 2020 21:09:59 +0200 Subject: [PATCH 216/486] Update windows/security/threat-protection/windows-defender-system-guard/system-guard-secure-launch-and-smm-protection.md Co-authored-by: Trond B. Krokli <38162891+illfated@users.noreply.github.com> --- .../system-guard-secure-launch-and-smm-protection.md | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/windows/security/threat-protection/windows-defender-system-guard/system-guard-secure-launch-and-smm-protection.md b/windows/security/threat-protection/windows-defender-system-guard/system-guard-secure-launch-and-smm-protection.md index 4a2dd888c5..93a31b46c4 100644 --- a/windows/security/threat-protection/windows-defender-system-guard/system-guard-secure-launch-and-smm-protection.md +++ b/windows/security/threat-protection/windows-defender-system-guard/system-guard-secure-launch-and-smm-protection.md @@ -93,4 +93,4 @@ To verify that Secure Launch is running, use System Information (MSInfo32). Clic |Platform firmware update|System firmware is recommended to be updated via UpdateCapsule in Windows Update. | > [!NOTE] -> For more details around AMD processors please check this [link](https://www.microsoft.com/security/blog/2020/09/01/force-firmware-code-to-be-measured-and-attested-by-secure-launch-on-windows-10/) +> For more details around AMD processors, please read this Microsoft Security blog post: [Force firmware code to be measured and attested by Secure Launch on Windows 10](https://www.microsoft.com/security/blog/2020/09/01/force-firmware-code-to-be-measured-and-attested-by-secure-launch-on-windows-10/). From a187d96a823d9e277d0211cdb4d49b58eaa7cd32 Mon Sep 17 00:00:00 2001 From: =?UTF-8?q?Robin=20M=C3=BCller?= Date: Sun, 27 Dec 2020 21:04:32 +0100 Subject: [PATCH 217/486] Link fix in how-to-enable-network-unlock Fixed wrong HTML tag in heading 'Confirm the WDS Service is running' --- .../bitlocker/bitlocker-how-to-enable-network-unlock.md | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/windows/security/information-protection/bitlocker/bitlocker-how-to-enable-network-unlock.md b/windows/security/information-protection/bitlocker/bitlocker-how-to-enable-network-unlock.md index 5c7b1190b1..2061c1421c 100644 --- a/windows/security/information-protection/bitlocker/bitlocker-how-to-enable-network-unlock.md +++ b/windows/security/information-protection/bitlocker/bitlocker-how-to-enable-network-unlock.md @@ -95,7 +95,7 @@ The server side configuration to enable Network Unlock also requires provisionin The following steps allow an administrator to configure Network Unlock in a domain where the Domain Functional Level is at least Windows Server 2012. -###     Install the WDS Server role +### Install the WDS Server role The BitLocker Network Unlock feature will install the WDS role if it is not already installed. If you want to install it separately before you install BitLocker Network Unlock you can use Server Manager or Windows PowerShell. To install the role using Server Manager, select the **Windows Deployment Services** role in Server Manager. From badb28bbd4d401364027aecd06f0c499bde05cfe Mon Sep 17 00:00:00 2001 From: "Trond B. Krokli" <38162891+illfated@users.noreply.github.com> Date: Sun, 27 Dec 2020 23:54:35 +0100 Subject: [PATCH 218/486] Update manage-windows-20H2-endpoints.md From issue ticket #8873 (**typo in FQDN**) : > The FQDN "1storecatalogrevocation.storequality.microsoft.com" does not exist, it should probably be "storecatalogrevocation.storequality.microsoft.com" See also the comment below, stating as follows: > It would probably make sense to merge the lines and use "TLSv1.2/HTTPS/HTTP" as the protocol like on other lines. > I did not see any use of 1storecatalogrevocation.storequality.microsoft.com in my tests, also there is no A or AAAA DNS record for this endpoint, which makes me assume this is a typo. Thanks to ruffy91 for noticing and reporting this typo issue. Changes proposed: - Remove the leading digit 1 from the hostname in `1storecatalogrevocation.storequality.microsoft.com` - Remove 1 redundant `HTTPS` from the row below, making it only `HTTPS/HTTP` - Merge the 2 lines since they now point to the same host FQDN Whitespace changes: - add 1 editorial blank line between the metadata section and the page title - remove 2 redundant end-of-line blanks Closes #8873 --- windows/privacy/manage-windows-20H2-endpoints.md | 8 ++++---- 1 file changed, 4 insertions(+), 4 deletions(-) diff --git a/windows/privacy/manage-windows-20H2-endpoints.md b/windows/privacy/manage-windows-20H2-endpoints.md index a2c7dbbed9..57c2ce989d 100644 --- a/windows/privacy/manage-windows-20H2-endpoints.md +++ b/windows/privacy/manage-windows-20H2-endpoints.md @@ -14,6 +14,7 @@ ms.collection: M365-security-compliance ms.topic: article ms.date: 12/17/2020 --- + # Manage connection endpoints for Windows 10 Enterprise, version 20H2 **Applies to** @@ -35,7 +36,7 @@ The following methodology was used to derive these network endpoints: 1. Set up the latest version of Windows 10 on a test virtual machine using the default settings. 2. Leave the device(s) running idle for a week ("idle" means a user is not interacting with the system/device). -3. Use globally accepted network protocol analyzer/capturing tools and log all background egress traffic. +3. Use globally accepted network protocol analyzer/capturing tools and log all background egress traffic. 4. Compile reports on traffic going to public IP addresses. 5. The test virtual machine(s) was logged into using a local account, and was not joined to a domain or Azure Active Directory. 6. All traffic was captured in our lab using a IPV4 network. Therefore, no IPV6 traffic is reported here. @@ -85,8 +86,7 @@ The following methodology was used to derive these network endpoints: |Microsoft Store|||[Learn how to turn off traffic to all of the following endpoint(s).](manage-connections-from-windows-operating-system-components-to-microsoft-services.md#26-microsoft-store)| ||The following endpoint is used to download image files that are called when applications run (Microsoft Store or Inbox MSN Apps). If you turn off traffic for these endpoints, the image files won't be downloaded, and apps cannot be installed or updated from the Microsoft Store. Additionally, the Microsoft Store won't be able to revoke malicious apps and users will still be able to open them.|HTTPS|img-prod-cms-rt-microsoft-com.akamaized.net| ||The following endpoint is used for the Windows Push Notification Services (WNS). WNS enables third-party developers to send toast, tile, badge, and raw updates from their own cloud service. This provides a mechanism to deliver new updates to your users in a power-efficient and dependable way. If you turn off traffic for this endpoint, push notifications will no longer work, including MDM device management, mail synchronization, settings synchronization.|TLSv1.2/HTTPS|*.wns.windows.com| -||The following endpoints are used to revoke licenses for malicious apps in the Microsoft Store. To turn off traffic for this endpoint, either uninstall the app or disable the Microsoft Store. If you disable the Microsoft Store, other Microsoft Store apps cannot be installed or updated. Additionally, the Microsoft Store won't be able to revoke malicious apps and users will still be able to open them|TLSv1.2|1storecatalogrevocation.storequality.microsoft.com| -|||HTTPS/HTTPS/HTTP|storecatalogrevocation.storequality.microsoft.com| +||The following endpoints are used to revoke licenses for malicious apps in the Microsoft Store. To turn off traffic for this endpoint, either uninstall the app or disable the Microsoft Store. If you disable the Microsoft Store, other Microsoft Store apps cannot be installed or updated. Additionally, the Microsoft Store won't be able to revoke malicious apps and users will still be able to open them|TLSv1.2/HTTPS/HTTP|storecatalogrevocation.storequality.microsoft.com| ||The following endpoint is used to get Microsoft Store analytics.|HTTPS|manage.devcenter.microsoft.com| ||The following endpoints are used to communicate with Microsoft Store. If you turn off traffic for these endpoints, apps cannot be installed or updated from the Microsoft Store.|TLSv1.2/HTTPS/HTTP|displaycatalog.mp.microsoft.com| |||HTTPS|pti.store.microsoft.com| @@ -130,7 +130,7 @@ The following methodology was used to derive these network endpoints: ||The following endpoint is used for content regulation. If you turn off traffic for this endpoint, the Windows Update Agent will be unable to contact the endpoint and fallback behavior will be used. This may result in content being either incorrectly downloaded or not downloaded at all.|TLSv1.2/HTTPS/HTTP|tsfe.trafficshaping.dsp.mp.microsoft.com| |Xbox Live|The following endpoint is used for Xbox Live.||[Learn how to turn off traffic to all of the following endpoint(s).](manage-connections-from-windows-operating-system-components-to-microsoft-services#26-microsoft-store)| |||HTTPS|dlassets-ssl.xboxlive.com| -| + ## Other Windows 10 editions From 7c95151405f9ba5186c8ff57117da9c8366fffae Mon Sep 17 00:00:00 2001 From: MaratMussabekov <48041687+MaratMussabekov@users.noreply.github.com> Date: Mon, 28 Dec 2020 17:05:06 +0500 Subject: [PATCH 219/486] Update windows/deployment/deploy-enterprise-licenses.md Co-authored-by: Trond B. Krokli <38162891+illfated@users.noreply.github.com> --- windows/deployment/deploy-enterprise-licenses.md | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/windows/deployment/deploy-enterprise-licenses.md b/windows/deployment/deploy-enterprise-licenses.md index 7c7c2b7d4e..fbfeba0ca6 100644 --- a/windows/deployment/deploy-enterprise-licenses.md +++ b/windows/deployment/deploy-enterprise-licenses.md @@ -33,7 +33,7 @@ This topic describes how to deploy Windows 10 Enterprise E3 or E5 licenses with To determine if the computer has a firmware-embedded activation key, type the following command at an elevated Windows PowerShell prompt -``` +```PowerShell (Get-CimInstance -query ‘select * from SoftwareLicensingService’).OA3xOriginalProductKey ``` From 097edab0b5839ebd613f0ab27ccce357578e534b Mon Sep 17 00:00:00 2001 From: MaratMussabekov <48041687+MaratMussabekov@users.noreply.github.com> Date: Mon, 28 Dec 2020 17:05:22 +0500 Subject: [PATCH 220/486] Update windows/deployment/deploy-enterprise-licenses.md Co-authored-by: JohanFreelancer9 <48568725+JohanFreelancer9@users.noreply.github.com> --- windows/deployment/deploy-enterprise-licenses.md | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/windows/deployment/deploy-enterprise-licenses.md b/windows/deployment/deploy-enterprise-licenses.md index fbfeba0ca6..ef7a0b86fb 100644 --- a/windows/deployment/deploy-enterprise-licenses.md +++ b/windows/deployment/deploy-enterprise-licenses.md @@ -31,7 +31,7 @@ This topic describes how to deploy Windows 10 Enterprise E3 or E5 licenses with ## Firmware-embedded activation key -To determine if the computer has a firmware-embedded activation key, type the following command at an elevated Windows PowerShell prompt +To determine if the computer has a firmware-embedded activation key, type the following command at an elevated Windows PowerShell prompt: ```PowerShell (Get-CimInstance -query ‘select * from SoftwareLicensingService’).OA3xOriginalProductKey From 63d9212da87971d2e66dce379a4151ddd8dc4e00 Mon Sep 17 00:00:00 2001 From: Denise Vangel-MSFT Date: Mon, 28 Dec 2020 07:03:36 -0800 Subject: [PATCH 221/486] Update configure-network-connections-microsoft-defender-antivirus.md --- ...onfigure-network-connections-microsoft-defender-antivirus.md | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/windows/security/threat-protection/microsoft-defender-antivirus/configure-network-connections-microsoft-defender-antivirus.md b/windows/security/threat-protection/microsoft-defender-antivirus/configure-network-connections-microsoft-defender-antivirus.md index 8ac5917a9e..1485e83d0a 100644 --- a/windows/security/threat-protection/microsoft-defender-antivirus/configure-network-connections-microsoft-defender-antivirus.md +++ b/windows/security/threat-protection/microsoft-defender-antivirus/configure-network-connections-microsoft-defender-antivirus.md @@ -11,7 +11,7 @@ ms.localizationpriority: medium author: denisebmsft ms.author: deniseb ms.custom: nextgen -ms.date: 11/18/2020 +ms.date: 12/28/2020 ms.reviewer: manager: dansimp --- From 9fa5711599c1e1a2b787d1083292b2a3c0a6c5d7 Mon Sep 17 00:00:00 2001 From: Denise Vangel-MSFT Date: Mon, 28 Dec 2020 07:05:24 -0800 Subject: [PATCH 222/486] Update system-guard-secure-launch-and-smm-protection.md --- .../system-guard-secure-launch-and-smm-protection.md | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/windows/security/threat-protection/windows-defender-system-guard/system-guard-secure-launch-and-smm-protection.md b/windows/security/threat-protection/windows-defender-system-guard/system-guard-secure-launch-and-smm-protection.md index 93a31b46c4..f38f5ce14a 100644 --- a/windows/security/threat-protection/windows-defender-system-guard/system-guard-secure-launch-and-smm-protection.md +++ b/windows/security/threat-protection/windows-defender-system-guard/system-guard-secure-launch-and-smm-protection.md @@ -93,4 +93,4 @@ To verify that Secure Launch is running, use System Information (MSInfo32). Clic |Platform firmware update|System firmware is recommended to be updated via UpdateCapsule in Windows Update. | > [!NOTE] -> For more details around AMD processors, please read this Microsoft Security blog post: [Force firmware code to be measured and attested by Secure Launch on Windows 10](https://www.microsoft.com/security/blog/2020/09/01/force-firmware-code-to-be-measured-and-attested-by-secure-launch-on-windows-10/). +> For more details around AMD processors, see [Microsoft Security Blog: Force firmware code to be measured and attested by Secure Launch on Windows 10](https://www.microsoft.com/security/blog/2020/09/01/force-firmware-code-to-be-measured-and-attested-by-secure-launch-on-windows-10/). From 3182310f60802a00faace4c6f0eabd1843f64cca Mon Sep 17 00:00:00 2001 From: Denise Vangel-MSFT Date: Mon, 28 Dec 2020 07:05:52 -0800 Subject: [PATCH 223/486] Update system-guard-secure-launch-and-smm-protection.md --- .../system-guard-secure-launch-and-smm-protection.md | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/windows/security/threat-protection/windows-defender-system-guard/system-guard-secure-launch-and-smm-protection.md b/windows/security/threat-protection/windows-defender-system-guard/system-guard-secure-launch-and-smm-protection.md index f38f5ce14a..5dd9dc063d 100644 --- a/windows/security/threat-protection/windows-defender-system-guard/system-guard-secure-launch-and-smm-protection.md +++ b/windows/security/threat-protection/windows-defender-system-guard/system-guard-secure-launch-and-smm-protection.md @@ -8,7 +8,7 @@ ms.sitesec: library ms.pagetype: security ms.localizationpriority: medium author: dansimp -ms.date: 03/01/2019 +ms.date: 12/28/2020 ms.reviewer: manager: dansimp ms.author: dansimp From 8c3919fa63f11da3317d7f67fe0161423c106c5e Mon Sep 17 00:00:00 2001 From: Denise Vangel-MSFT Date: Mon, 28 Dec 2020 07:10:36 -0800 Subject: [PATCH 224/486] Update deployment-vdi-microsoft-defender-antivirus.md --- .../deployment-vdi-microsoft-defender-antivirus.md | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/windows/security/threat-protection/microsoft-defender-antivirus/deployment-vdi-microsoft-defender-antivirus.md b/windows/security/threat-protection/microsoft-defender-antivirus/deployment-vdi-microsoft-defender-antivirus.md index 5185a99f15..172fb7952f 100644 --- a/windows/security/threat-protection/microsoft-defender-antivirus/deployment-vdi-microsoft-defender-antivirus.md +++ b/windows/security/threat-protection/microsoft-defender-antivirus/deployment-vdi-microsoft-defender-antivirus.md @@ -10,7 +10,7 @@ ms.localizationpriority: medium author: denisebmsft ms.author: deniseb ms.custom: nextgen -ms.date: 11/18/2020 +ms.date: 12/28/2020 ms.reviewer: jesquive manager: dansimp --- From 682b74814d7c7ba5cd957febffe608deecd99bc6 Mon Sep 17 00:00:00 2001 From: Denise Vangel-MSFT Date: Mon, 28 Dec 2020 07:12:05 -0800 Subject: [PATCH 225/486] Update windows/security/threat-protection/microsoft-defender-atp/get-ip-statistics.md Co-authored-by: Trond B. Krokli <38162891+illfated@users.noreply.github.com> --- .../microsoft-defender-atp/get-ip-statistics.md | 11 ++++++----- 1 file changed, 6 insertions(+), 5 deletions(-) diff --git a/windows/security/threat-protection/microsoft-defender-atp/get-ip-statistics.md b/windows/security/threat-protection/microsoft-defender-atp/get-ip-statistics.md index b3531c3636..61b9b25be5 100644 --- a/windows/security/threat-protection/microsoft-defender-atp/get-ip-statistics.md +++ b/windows/security/threat-protection/microsoft-defender-atp/get-ip-statistics.md @@ -95,10 +95,11 @@ Content-type: application/json ``` -Name | Description -:---|:---|:--- -Org prevalence | the distinct count of devices that opened network connection to this IP. -Org first seen | the first connection for this IP in the organization. -Org last seen | the last connection for this IP in the organization. + +| Name | Description | +| :--- | :---------- | +| Org prevalence | the distinct count of devices that opened network connection to this IP. | +| Org first seen | the first connection for this IP in the organization. | +| Org last seen | the last connection for this IP in the organization. | >[!Note] > This statistic information is based on data from the past 30 days. From 6d922b5a3fb3fb7380b60f52d6d56804c2192347 Mon Sep 17 00:00:00 2001 From: Denise Vangel-MSFT Date: Mon, 28 Dec 2020 07:12:12 -0800 Subject: [PATCH 226/486] Update windows/security/threat-protection/microsoft-defender-atp/get-ip-statistics.md Co-authored-by: Trond B. Krokli <38162891+illfated@users.noreply.github.com> --- .../microsoft-defender-atp/get-ip-statistics.md | 3 ++- 1 file changed, 2 insertions(+), 1 deletion(-) diff --git a/windows/security/threat-protection/microsoft-defender-atp/get-ip-statistics.md b/windows/security/threat-protection/microsoft-defender-atp/get-ip-statistics.md index 61b9b25be5..4f76236a07 100644 --- a/windows/security/threat-protection/microsoft-defender-atp/get-ip-statistics.md +++ b/windows/security/threat-protection/microsoft-defender-atp/get-ip-statistics.md @@ -101,5 +101,6 @@ Content-type: application/json | Org prevalence | the distinct count of devices that opened network connection to this IP. | | Org first seen | the first connection for this IP in the organization. | | Org last seen | the last connection for this IP in the organization. | ->[!Note] + +> [!Note] > This statistic information is based on data from the past 30 days. From 41e8df746f3b9c42482e7ef178742adec589c89e Mon Sep 17 00:00:00 2001 From: ImranHabib <47118050+joinimran@users.noreply.github.com> Date: Mon, 28 Dec 2020 22:59:10 +0500 Subject: [PATCH 227/486] Broken link update A link to the OMA standard was broken and has been updated to the correct one. --- .../mdm/disconnecting-from-mdm-unenrollment.md | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/windows/client-management/mdm/disconnecting-from-mdm-unenrollment.md b/windows/client-management/mdm/disconnecting-from-mdm-unenrollment.md index 3cb1682333..36cae102c0 100644 --- a/windows/client-management/mdm/disconnecting-from-mdm-unenrollment.md +++ b/windows/client-management/mdm/disconnecting-from-mdm-unenrollment.md @@ -44,7 +44,7 @@ In Windows, after the user confirms the account deletion command and before the This action utilizes the OMA DM generic alert 1226 function to send a user an MDM unenrollment user alert to the MDM server after the device accepts the user unenrollment request, but before it deletes any enterprise data. The server should set the expectation that unenrollment may succeed or fail, and the server can check whether the device is unenrolled by either checking whether the device calls back at scheduled time or by sending a push notification to the device to see whether it responds back. If the server plans to send a push notification, it should allow for some delay to give the device the time to complete the unenrollment work. -> **Note**  The user unenrollment is an OMA DM standard. For more information about the 1226 generic alert, refer to the OMA Device Management Protocol specification (OMA-TS-DM\_Protocol-V1\_2\_1-20080617-A), available from the [OMA website](https://go.microsoft.com/fwlink/p/?LinkId=267526). +> **Note**  The user unenrollment is an OMA DM standard. For more information about the 1226 generic alert, refer to the OMA Device Management Protocol specification (OMA-TS-DM\_Protocol-V1\_2\_1-20080617-A), available from the [OMA website](https://www.openmobilealliance.org/release/DM/V1_1_2-20031209-A/).   The vendor uses the Type attribute to specify what type of generic alert it is. For device initiated MDM unenrollment, the alert type is **com.microsoft:mdm.unenrollment.userrequest**. From 5d37dd768df520be49b21cbda6e5b6fc96440c7b Mon Sep 17 00:00:00 2001 From: Denise Vangel-MSFT Date: Mon, 28 Dec 2020 15:11:38 -0800 Subject: [PATCH 228/486] Update microsoft-defender-antivirus-in-windows-10.md --- .../microsoft-defender-antivirus-in-windows-10.md | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/windows/security/threat-protection/microsoft-defender-antivirus/microsoft-defender-antivirus-in-windows-10.md b/windows/security/threat-protection/microsoft-defender-antivirus/microsoft-defender-antivirus-in-windows-10.md index 23c85194d0..fb9db59528 100644 --- a/windows/security/threat-protection/microsoft-defender-antivirus/microsoft-defender-antivirus-in-windows-10.md +++ b/windows/security/threat-protection/microsoft-defender-antivirus/microsoft-defender-antivirus-in-windows-10.md @@ -7,7 +7,7 @@ ms.prod: w10 ms.mktglfcycl: manage ms.sitesec: library ms.pagetype: security -ms.localizationpriority: medium +ms.localizationpriority: high author: denisebmsft ms.author: deniseb ms.date: 12/16/2020 From dd629682cb02b9c12f59233f7171ec2aa4f38ec5 Mon Sep 17 00:00:00 2001 From: Gary Moore Date: Mon, 28 Dec 2020 15:18:25 -0800 Subject: [PATCH 229/486] Replaced blind link with targeted title --- windows/security/includes/microsoft-defender-api-usgov.md | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/windows/security/includes/microsoft-defender-api-usgov.md b/windows/security/includes/microsoft-defender-api-usgov.md index ff93c71ecd..4fe2a734da 100644 --- a/windows/security/includes/microsoft-defender-api-usgov.md +++ b/windows/security/includes/microsoft-defender-api-usgov.md @@ -17,4 +17,4 @@ ms.topic: article --- >[!NOTE] ->If you are a US Government customer, please use the URIs listed in [here](../threat-protection/microsoft-defender-atp/gov.md#api). +>If you are a US Government customer, please use the URIs listed in [Microsoft Defender for Endpoint for US Government GCC High customers](../threat-protection/microsoft-defender-atp/gov.md#api). From 8368db79c2613c1caf186d34aab485675bc7f2d1 Mon Sep 17 00:00:00 2001 From: ImranHabib <47118050+joinimran@users.noreply.github.com> Date: Tue, 29 Dec 2020 11:12:43 +0500 Subject: [PATCH 230/486] Update windows/client-management/mdm/disconnecting-from-mdm-unenrollment.md Co-authored-by: Trond B. Krokli <38162891+illfated@users.noreply.github.com> --- .../mdm/disconnecting-from-mdm-unenrollment.md | 4 ++-- 1 file changed, 2 insertions(+), 2 deletions(-) diff --git a/windows/client-management/mdm/disconnecting-from-mdm-unenrollment.md b/windows/client-management/mdm/disconnecting-from-mdm-unenrollment.md index 36cae102c0..35fe6568b0 100644 --- a/windows/client-management/mdm/disconnecting-from-mdm-unenrollment.md +++ b/windows/client-management/mdm/disconnecting-from-mdm-unenrollment.md @@ -44,7 +44,8 @@ In Windows, after the user confirms the account deletion command and before the This action utilizes the OMA DM generic alert 1226 function to send a user an MDM unenrollment user alert to the MDM server after the device accepts the user unenrollment request, but before it deletes any enterprise data. The server should set the expectation that unenrollment may succeed or fail, and the server can check whether the device is unenrolled by either checking whether the device calls back at scheduled time or by sending a push notification to the device to see whether it responds back. If the server plans to send a push notification, it should allow for some delay to give the device the time to complete the unenrollment work. -> **Note**  The user unenrollment is an OMA DM standard. For more information about the 1226 generic alert, refer to the OMA Device Management Protocol specification (OMA-TS-DM\_Protocol-V1\_2\_1-20080617-A), available from the [OMA website](https://www.openmobilealliance.org/release/DM/V1_1_2-20031209-A/). +> [!NOTE] +> The user unenrollment is an OMA DM standard. For more information about the 1226 generic alert, refer to the OMA Device Management Protocol specification (OMA-TS-DM\_Protocol-V1\_2\_1-20080617-A), available from the [OMA website](https://www.openmobilealliance.org/release/DM/V1_1_2-20031209-A/).   The vendor uses the Type attribute to specify what type of generic alert it is. For device initiated MDM unenrollment, the alert type is **com.microsoft:mdm.unenrollment.userrequest**. @@ -157,4 +158,3 @@ When the disconnection is completed, the user is notified that the device has be - From 46936a5bb14a9499dddfb866ba7ead8c268fbcfa Mon Sep 17 00:00:00 2001 From: Joe Skeen Date: Tue, 29 Dec 2020 09:14:30 -0700 Subject: [PATCH 231/486] Update bitlocker-how-to-enable-network-unlock.md fix wording --- .../bitlocker/bitlocker-how-to-enable-network-unlock.md | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/windows/security/information-protection/bitlocker/bitlocker-how-to-enable-network-unlock.md b/windows/security/information-protection/bitlocker/bitlocker-how-to-enable-network-unlock.md index 2061c1421c..1284208f66 100644 --- a/windows/security/information-protection/bitlocker/bitlocker-how-to-enable-network-unlock.md +++ b/windows/security/information-protection/bitlocker/bitlocker-how-to-enable-network-unlock.md @@ -26,7 +26,7 @@ ms.custom: bitlocker This topic for the IT professional describes how BitLocker Network Unlock works and how to configure it. Network Unlock was introduced in Windows 8 and Windows Server 2012 as a BitLocker protector option for operating system volumes. Network Unlock enables easier management for BitLocker enabled desktops and servers in a domain environment by providing automatic unlock of operating system volumes at system reboot when connected to a wired corporate network. This feature requires the client hardware to have a DHCP driver implemented in its UEFI firmware. -Without Network Unlock, operating system volumes protected by TPM+PIN protectors require a PIN to be entered when a computer reboots or resumes from hibernation (for example, by Wake on LAN). This can make it difficult to enterprises to roll out software patches to unattended desktops and remotely administered servers. +Without Network Unlock, operating system volumes protected by TPM+PIN protectors require a PIN to be entered when a computer reboots or resumes from hibernation (for example, by Wake on LAN). This can make it difficult for enterprises to roll out software patches to unattended desktops and remotely administered servers. Network Unlock allows BitLocker-enabled systems with TPM+PIN and that meet the hardware requirements to boot into Windows without user intervention. Network Unlock works in a similar fashion to the TPM+StartupKey at boot. Rather than needing to read the StartupKey from USB media, however, the key for Network Unlock is composed from a key stored in the TPM and an encrypted network key that is sent to the server, decrypted and returned to the client in a secure session. From 3aad2708061405158296540b1deb349fac267b50 Mon Sep 17 00:00:00 2001 From: Jeff Borsecnik <36546697+jborsecnik@users.noreply.github.com> Date: Tue, 29 Dec 2020 08:59:31 -0800 Subject: [PATCH 232/486] Update hello-feature-pin-reset.md fix typo "Enpoint" --- .../hello-for-business/hello-feature-pin-reset.md | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/windows/security/identity-protection/hello-for-business/hello-feature-pin-reset.md b/windows/security/identity-protection/hello-for-business/hello-feature-pin-reset.md index 93b01bb01b..b1fda98d52 100644 --- a/windows/security/identity-protection/hello-for-business/hello-feature-pin-reset.md +++ b/windows/security/identity-protection/hello-for-business/hello-feature-pin-reset.md @@ -65,7 +65,7 @@ You configure Windows 10 to use the Microsoft PIN Reset service using the comput #### Create a PIN Reset Device configuration profile using Microsoft Intune -1. Sign-in to [Enpoint Manager admin center](https://endpoint.microsoft.com/) using a Global administrator account. +1. Sign-in to [Endpoint Manager admin center](https://endpoint.microsoft.com/) using a Global administrator account. 2. Click **Endpoint Security** > **Account Protection** > **Properties**. 3. Set **Enable PIN recovery** to **Yes**. From 0bedf58ded5e6baf79572605cc8f4d564a10dc2d Mon Sep 17 00:00:00 2001 From: ManikaDhiman Date: Tue, 29 Dec 2020 11:17:56 -0800 Subject: [PATCH 233/486] Added Power policies --- windows/client-management/mdm/TOC.md | 1 + .../mdm/policies-in-policy-csp-admx-backed.md | 25 ++++++ .../policy-configuration-service-provider.md | 80 +++++++++++++++++++ 3 files changed, 106 insertions(+) diff --git a/windows/client-management/mdm/TOC.md b/windows/client-management/mdm/TOC.md index 3b37a6caf1..3675333e76 100644 --- a/windows/client-management/mdm/TOC.md +++ b/windows/client-management/mdm/TOC.md @@ -231,6 +231,7 @@ #### [ADMX_OfflineFiles](policy-csp-admx-offlinefiles.md) #### [ADMX_PeerToPeerCaching](policy-csp-admx-peertopeercaching.md) #### [ADMX_PerformanceDiagnostics](policy-csp-admx-performancediagnostics.md) +#### [ADMX_Power](policy-csp-admx-power.md) #### [ADMX_PowerShellExecutionPolicy](policy-csp-admx-powershellexecutionpolicy.md) #### [ADMX_Printing](policy-csp-admx-printing.md) #### [ADMX_Printing2](policy-csp-admx-printing2.md) diff --git a/windows/client-management/mdm/policies-in-policy-csp-admx-backed.md b/windows/client-management/mdm/policies-in-policy-csp-admx-backed.md index 552222926f..c6e37891f5 100644 --- a/windows/client-management/mdm/policies-in-policy-csp-admx-backed.md +++ b/windows/client-management/mdm/policies-in-policy-csp-admx-backed.md @@ -789,6 +789,31 @@ ms.date: 10/08/2020 - [ADMX_PerformanceDiagnostics/WdiScenarioExecutionPolicy_2](./policy-csp-admx-performancediagnostics.md#admx-performancediagnostics-wdiscenarioexecutionpolicy-2) - [ADMX_PerformanceDiagnostics/WdiScenarioExecutionPolicy_3](./policy-csp-admx-performancediagnostics.md#admx-performancediagnostics-wdiscenarioexecutionpolicy-3) - [ADMX_PerformanceDiagnostics/WdiScenarioExecutionPolicy_4](./policy-csp-admx-performancediagnostics.md#admx-performancediagnostics-wdiscenarioexecutionpolicy-4) +- [ADMX_Power/ACConnectivityInStandby_2](./policy-csp-admx-power.md#admx-power-acconnectivityinstandby-2) +- [ADMX_Power/ACCriticalSleepTransitionsDisable_2](./policy-csp-admx-power.md#admx-power-accriticalsleeptransitionsdisable-2) +- [ADMX_Power/ACStartMenuButtonAction_2](./policy-csp-admx-power.md#admx-power-acstartmenubuttonaction-2) +- [ADMX_Power/AllowSystemPowerRequestAC](./policy-csp-admx-power.md#admx-power-allowsystempowerrequestac) +- [ADMX_Power/AllowSystemPowerRequestDC](./policy-csp-admx-power.md#admx-power-allowsystempowerrequestdc) +- [ADMX_Power/AllowSystemSleepWithRemoteFilesOpenAC](./policy-csp-admx-power.md#admx-power-allowsystemsleepwithremotefilesopenac) +- [ADMX_Power/AllowSystemSleepWithRemoteFilesOpenDC](./policy-csp-admx-power.md#admx-power-allowsystemsleepwithremotefilesopendc) +- [ADMX_Power/CustomActiveSchemeOverride_2](./policy-csp-admx-power.md#admx-power-customactiveschemeoverride-2) +- [ADMX_Power/DCBatteryDischargeAction0_2](./policy-csp-admx-power.md#admx-power-dcbatterydischargeaction0-2) +- [ADMX_Power/DCBatteryDischargeAction1_2](./policy-csp-admx-power.md#admx-power-dcbatterydischargeaction1-2) +- [ADMX_Power/DCBatteryDischargeLevel0_2](./policy-csp-admx-power.md#admx-power-dcbatterydischargelevel0-2) +- [ADMX_Power/DCBatteryDischargeLevel1UINotification_2](./policy-csp-admx-power.md#admx-power-dcbatterydischargelevel1uinotification-2) +- [ADMX_Power/DCBatteryDischargeLevel1_2](./policy-csp-admx-power.md#admx-power-dcbatterydischargelevel1-2) +- [ADMX_Power/DCConnectivityInStandby_2](./policy-csp-admx-power.md#admx-power-dcconnectivityinstandby-2) +- [ADMX_Power/DCCriticalSleepTransitionsDisable_2](./policy-csp-admx-power.md#admx-power-dccriticalsleeptransitionsdisable-2) +- [ADMX_Power/DCStartMenuButtonAction_2](./policy-csp-admx-power.md#admx-power-dcstartmenubuttonaction-2) +- [ADMX_Power/DiskACPowerDownTimeOut_2](./policy-csp-admx-power.md#admx-power-diskacpowerdowntimeout-2) +- [ADMX_Power/DiskDCPowerDownTimeOut_2](./policy-csp-admx-power.md#admx-power-diskdcpowerdowntimeout-2) +- [ADMX_Power/Dont_PowerOff_AfterShutdown](./policy-csp-admx-power.md#admx-power-dont-poweroff-aftershutdown) +- [ADMX_Power/EnableDesktopSlideShowAC](./policy-csp-admx-power.md#admx-power-enabledesktopslideshowac) +- [ADMX_Power/EnableDesktopSlideShowDC](./policy-csp-admx-power.md#admx-power-enabledesktopslideshowdc) +- [ADMX_Power/InboxActiveSchemeOverride_2](./policy-csp-admx-power.md#admx-power-inboxactiveschemeoverride-2) +- [ADMX_Power/PW_PromptPasswordOnResume](./policy-csp-admx-power.md#admx-power-pw-promptpasswordonresume) +- [ADMX_Power/PowerThrottlingTurnOff](./policy-csp-admx-power.md#admx-power-powerthrottlingturnoff) +- [ADMX_Power/ReserveBatteryNotificationLevel](./policy-csp-admx-power.md#admx-power-reservebatterynotificationlevel) - [ADMX_PowerShellExecutionPolicy/EnableModuleLogging](./policy-csp-admx-powershellexecutionpolicy.md#admx-powershellexecutionpolicy-enablemodulelogging) - [ADMX_PowerShellExecutionPolicy/EnableScripts](./policy-csp-admx-powershellexecutionpolicy.md#admx-powershellexecutionpolicy-enablescripts) - [ADMX_PowerShellExecutionPolicy/EnableTranscripting](./policy-csp-admx-powershellexecutionpolicy.md#admx-powershellexecutionpolicy-enabletranscripting) diff --git a/windows/client-management/mdm/policy-configuration-service-provider.md b/windows/client-management/mdm/policy-configuration-service-provider.md index fff1b3e3ca..8bfdfd90cc 100644 --- a/windows/client-management/mdm/policy-configuration-service-provider.md +++ b/windows/client-management/mdm/policy-configuration-service-provider.md @@ -2749,6 +2749,86 @@ The following diagram shows the Policy configuration service provider in tree fo

    w!lEK96_ks27|Ai6v~-5kD~JW z8bQQm4Aj%R!F`-fRwsko61&xB;&?&DeY5+4Kh4gF4|WQA!*?yet>WZo7)C!}S&$a1 z@>hPf5XA(}>-^*ueS5Bs5~0BRII6{}+EJgJ;uPmM$5`D~?*sD$`~NpJH(=b8HV3zj}sdxZ?}E@&m+RvnvI@6rPDSHieXu5>(U68Eg0z z!J$p4#@Vl21*YRCIjdk~5py`Sicrux*6-F+2ztK3rCdLe`Y-PF=D0IS6v)uB@2dLj znZ3e2u35e9!HN$~_9o_9k!_$0!Y4lI2)|aUG7#ZJdtF;<25z4AB#&8*t>I})`nThA z7{2H*#70SJ7NG7v^jI&2Sx@gK6pEkR^{i@rpQP)f^*{nD#P{$KV2iSRnbH>LqL)pH z>sf-O&XvcKXsy7T#o)Fj+2dG-gslpc>^F7nuS_*bAXpp8L?>_N4IGHleUb}}BJ`FW z6Y4Ld6%!_f`|(SqOu?*`A6j9{cy+ZXLcRjEe=@dPd74#>Hbe6* zpRu=PO}KAOfj~yk4<>QHV9&RFz$=%kGKRifZlZ(YQ}O4^;zsu&-j)1vO+-YF%vNQ} zKa2Y&f*`}`h}iM#DBv8&!V7+E)fmw3>jw`7F2eBoE$X(y#4amuV*TDRBIi-{7*L~?No__3{+qdhMt~8$Gu@&Qwtyf9b8*; zKj7HIAJS35aiUL!*^72e+>N&cvk;e1;fo$=KK=3;}0 z^_~HCd`uC|V3M~XBNmKLtZ2LYZE@fEH8iMp*qOQ*wBTS%yI-!Xo4$QQ5aec@if9?I z_z54HOqy(q9oSEtVi-Ht#9?lVn2&9xnF?D%wEYD1fst;XQV?mCtHWHht2G*9_7=G}!M6DIA` z29pd`OF~RcRhX{~Z%o>X%-usJtkOSQd7iRq^zINW4&kYKh<$_=+i%!o;-bEur8%eZ ze6ZjCK6lcYG=0jibyD`LRMpSAA44~n2+GI45WGgnGs$NK`jX>fubm-Mh!PVz0AUp> zczszqO&+$v8k%O@u$tIbby3Vzv{SyPiijM=ZV@V)qX=!lEPDH{XkLRIR<)g=%HN+x z7wc$S8)O2hY;75FOUNS|Cu0=!=vhttIVBk?`*-2JxA5F8E=nbOs+GTXee&Dacx95= z^Q%WhtFY-pY*rQb<-X?vlFO_n9%p;MwrFDk2}{6DQPlHn!szCj8Yp+JRo3YIKyH&( z+@Jk6UpG1c<`4Nshf;rb_C(B|G|F{11Gi66`V1{#Fd8yy^vN;VWCLv z4ZC2EBJg7~e@f{B1t>z1AU4b2|s%s+-J(0kNZX zbZUG#II3GPWps{Bgd9 zPe85c6Ads+xO7l&nTSTqB9Tj9z_d&Kn2qZL(S*xm>*w4rUn)YnlEL_c2rdTfdtIWU zYycB7E%f*=H~~Fx`#_6DkoVa7dNeAh%#7Z8ur<9n3GP4od1me1pDIQp-r!FznOz>r zp4>gHTZx&8+oO)7R+HdcW-MMUu5g?KY%X8)1#!|9En(JBZ zN4g@5lw1mq%NS9L8tTdj1XP9@Osy?>7M?0>`2$k0xANGJ9*9;~95tL-rtkKGXl8ax=gA$S5DAW4x%dVlZc6ik`Ys~R)t z@csAA&SwwVTnzimsL94z?m2vdFPvvDqQucqGBSyk(uO2!GXd%nDXDUz`(T`mmpJM? z#mF_CVan^FwwZGY=Vi@VoW;)-aS1NhD~og#iTh@HqJy&FA?6#Ka|DU|(fm6K=)%dJ ztk(^cH@&ae33uM2&*fyR)Gs7_!phIbiEqlNKeJ2gI)(#{xD-;7gcfu=`#Qhwwa;F! zitD5fmE|r_&hDcjC5EKbhNUFw7Zb6q=dbl%KEDc0zen(qU&vXJ1l@fq05^%X$JJE< zts=fGZ`gvchI{}G^7`Z}G#6!UAdV|X{Ofj7F#Tk+nb)!*XZ%_Gy^zbudz9<1hbiip zGEl1DwBj(|xyd~>_4jM{N z*VN2-xnQWep7sR6@GCN@&(v*oVfty34~#D%w#R&;n8Lxy)r#T0TaGk_Mv;e2OHBw_ zzbpEVCyubtgB_FEjs)lK-cam`K_v;X+i_Vf_#sx(7qcv)5UI+gCq#Oy@;t$X-eLUD zt+7?Y(4a*VoS;BiP?cC{hqvYj*#z0?NA*1IRv!e}>2YcfN}AqpFx~0Y zqdtuwhRIS2S{r#>5@iMSg4X%?YK1lL~cVu=nhx=;j4)`lyt;!GDx z%462SH%JFc`hRdoeLXoR-pY{^#CIM8TK)t0OKM608ab7B@8C){zEc-{i8z&{_%oe||1?2+TUu>o z!zC0(yPJ=GHzeJb<^#8Cm=S5fN6W)G-@%nSd@q8IuEUI&JOsN1yZ z{7cnJD6V?Z8%y@9qu)qQo;~rw(Bs_%#)D{>AIyK}=;`-bj0nYg*84#StT3JXH*5YW zx{gzNBB3^I^X>tvr0dbq1Ao%zD7;M}+G~C5h27y2?IPH1ANj;#~C z&cVVaM3f5r`<{K5o?}FYZHW2j>caeM^e9NLh=09%KG{D9o~c+KN$H^_JE{umO;TRR zAVzcCNS1sCx;s#8M%~PA=9}Lik&YVAPG>65QT6pUw3>Ig%CmQd^7qwN@~O(~r)PTm<4%)5k*?<1 zP(!_fL<|dwbV=r2G29K91#bbm!W0|mz~Udkc!$?o&_zzeH)*L5ixyhk7@=?CB&V!L^5y*(-L0b zA%<_lONJhX6|}{`Ca7);o|4P=;V0}SW5dpc;wsCIl}Oen1dc^IZnOWBgR;DvShriV zmV2F&SmxT6SiN4EC^_`@Kd=DNA;0koB#sY{{J&Z^#G-ylU=kxXDmX1)2p@=1*HeZbg8<9WfZZc$oeB_@7$FzW-|{MD&{J|G!V literal 0 HcmV?d00001 diff --git a/windows/security/identity-protection/hello-for-business/images/pinreset/pin-reset-service-home-screen.png b/windows/security/identity-protection/hello-for-business/images/pinreset/pin-reset-service-home-screen.png new file mode 100644 index 0000000000000000000000000000000000000000..9903a59bf515023bffa4a5b2a0932755efde96b1 GIT binary patch literal 71281 zcmd?RWmHt}9|tI+gfu7}!_ZO!N;d-xQUXd0CCx~;w1kA@&`85jQUXJl0+LcggMbp! zAOnc>-ueCa?3;bRXZI}Uc)Y{RTyA`y=liMWM!(QfC3!&q;Le>pBx+EI?wvb0Rd?>( zl_J0ceq$cedjkB2*a?&-kQQ=o`qxu|G{A!cchdZVX2P zdrT(q!=uyt{l6c_Q=j1da<|>B&ck=hh~M9*Zha5F`;&PZ7#PfURkV)D9EROqjon_o z4#FhoU9EG;P43urUH`q5OZ|Lxba;Dn=(EWscRr{cgb}F=LEDFW5d+eo~4e%^!q zH1?g6Z)5LJ)y%Hbo1BR=F8FVcN5qc*x3BZe-?BZ>-4UED4$5c-=q5XV`eB-X*eXcSh7@D9~b8idk?mr#IKb-mH>W*aLdIet?h!@7v$M@*+D=Ix*^yzWmm=?=r z`oDG-iDK@kk?xp~-Y9SZHZb*F+zD4FW0673xf@;S>9gj|KZ5%wY-%dH^hL$b18pWJ zBZ5U40%oLd0yoyP^l1}kJk}hZYY@A%AF24BP8$q=(eGnX1B%24|C+7Jg%nDpaJ_y@ zaxHz;ajS1;=2C$9!larigO6;ud503EOPu^nwhFTXBTt8TYf@;;-WEvTUL8;Cbe;bm z*l|19NH?#Z?K(lLQ&oHIm6zsz8toh#k8e9@t;qI2XxZ4S9}`HBz1aFE0+j2~0Z7dO zjP#n+6iZFkk}PNR`Qf&K85XQre@1!Gd3oUeJJT+WN?W>C(!2NmX0`{Zayo-^b3yyf z#qO!$%DZ;K&VQ?Qr!&Us&t?pZZfaz3?#a*>a8XA08vbv;S4aKn&t^^PE88(cHp!Zz zJiz|@|B1NtTSPMH&zSk|*DbuMcvULUdN&xmtBr9bvZ{&aEAL{-F`|o(dTFNK^L3lK z{%Q52k`+IERsuI_`b&x7CDaL)kBYVHlk_qod07D$UrrWv7zH*s+%WS;yZ6 zhqbXAW^LJX>v{KK{$aGbps5_eK{Qux*`}7nMoL{jvwsS2O?zE>yeaJD>Ud1BqNdYt z-m!jUNapN^UV?hq2gN4f&^`)iV280DgBpyAwaO}9qJ*#O3S(0gC;GUevhMl3Q`6E= z51E|w&E6p^KX>@WpQYyP!%hT(hkLCclKE4fU9RtMCkF1yhL)9cRc2pg ziToP4^0llZcSHbZrfhn@DOn7`g$=l-ymW;X-Ubgo`PVv zgZAUmtQTCML}QnZhDM9c9G_}0M&ES=71Tf?O68%~xB~vPL*n>^DvRkXW*~$QxIOF7 z7kI0iEscV&Pj?%@FPxU%uEp`HsWUOV53s&63r_*04E>5^F-wEJDR=LsPN4@SmIEKHm z>|Uw!=SwoW=a;Oo4Rr@RLRPJbS=q}yy&|5xD9-7afgikg>kl@~E}?tA6E7qbFw zd%D%FJD=Py_nT&KmDLM{PGPD_lrue*#ioAS#m^*_xS=mzdhR#O&OpDn(yh8)1M>%L zmx2{x`dsh%;i%MMrB30?;^PB_kLxnmCzHG0-ojDMm22lLN9DNl<&z)NFg4AqALtd5 z?hmp$);aV;;X^=kd|SFj0`It5a2X~clhzw;-$u9}R3*gybG!L;nae-c;Tr6_eN;4j zOtxp78@#om`tM5B_uximhCsRko}~Xh9gGpiJ>bn@K}T?+Te5p5r)J z9n`8*P)KqGHV=SfUb-L4?C7K&Mn##3>Ot<6#fdGywTk;lPG1OdMSrl?Z}blJdcvbg z!5kV(z&i`{_}(c+7wGOp`Z8aZ*^SEis7_6~dGXr|m2X9#!2)AdmHpF0&b%&91Ha$UECE$fUTRoKp}ejEVWg`oDR8BcWL-Z@6t zheSEH{u^-#(%U_5+ERmX7b>El`18>RmP}f`wv)<4Su%+elE>2>tOX`fj-}DWk8^SncnJ_nrx%6`_oBXhl#Dv#7Hgk=lKD^jnA>7{u@t z)~y7CPL)uQiKsppbITHgM9r*{=X!z)!EEPMJq_~T3l)$X=`x83Xp*!kI!QnoHq$$h zgPoPA)L?q@Fh*Ihq6uT0JtyPeUMSIoiR;(_(_F{p9z1l%|Q9X<+SePx6q)8WJxp?uN|1gie>8PI5^bKG&X=0B1}j@4cg7TwXU z?OXFLF}y^CdQ_cq-ve1n{`rFI&}-c$-Y*!M)ThKgK=_pvv>A%}5<#>vhYT^yK4Ve? zi`ew`bTy8!X*kJSJ5)93SB?FCApd#&?VGGR(87Om53$g7(2Wp%{0@p&j@p&Y4X$e& zQz07jnh&AP;z)d$g!;>Yrs8QJpMV~*lDA!vmv&L)K}pCXxwTrV6|x&U7XxWAAI2RA zJ`246VZ!!)tLeTejT~vL^`I8>It>MT6sdC9!L*9b!siq_Y{A@5LUAg>W+J4mc^}P$ zDy2)VeOdI($Wv2f%q{)!jB8AeRRl6kNiO_nFU2kwB9rT;TkSCA;DN78o966MWA`mF zen5>$K{%fnsirb!X4F)NQ`B~_E{RBPRU~zIz3)dy${^Jlr`}x2y{c_yJACr4wc|MtwD{$L9CbGfiPj-7X z?W~>dtIfM{aEX7LeLI2KLEu_S+NO-L;-XuE>{4sfw|bN(f-FRh@~9K3ER1->XzRh|HGUBJaqpsuzJvTD4;Ib;R)ci zz#)$@8L^u!`9-sJc!8+HC|s7Yn=`B5u<^`~be(=L}s zTkhJEqZ0smZLthu)jxngyjGLj3OXxFkcACm=ByH!f}aA%d=a^fNPC&Zy#X8^|Crou zfG^Oz`|{42#J3F0e2bI99BP1mUk8A`Y3Q&7`#LlGI=#)eBP?l1+r0sC-*#Q>R5b7< zE+03Iect^AfKb6NarfzaAGv>k9&u#flD!%JC-pO3_z?tQq?YJ>W zPv}~c4*lV~nd9}=se$bEtYHds?oY3S6<4Z1*9a4J?!=;`=P`dwaQJ zo@U}cNT`#zWuN0U!=uXN_3}FC&sY5P9PfqlG?7Ke`qZwAimt~F)h)Jh)^~AbW{$I; zl(qt>KUF*UVsgWv>*AG>|9-1pUUWKT!)L)A={Spjwp-SD*sZeSc?` z4qf~r3vT8^jVr!NaQ*hkAf;t9x9w_a<=V6=IUqqA1C>!#vAzZ52;|kN`K{M^H%;e@ z$s7e_p@A^^)K2blzV259gI04Bk(2cA467l&`tQ23|Gtu?9R?oyZ>%S4S8tM!0u;`; z^C-^c<++Imz{Rvd1wj3@I@W%pesy@^S(0h{X@6SaG&#q)2B=QIKw#Pkn&3sRP9eqs z9AwCpbKA7+x4T2E@H~F9>85uuD}=2~Vl%tmB;e@V>Bs%XMSzU6#fuk8>RN}tpf>fK za9;^LOU06&B-~P33Ov=Ib%g57rG%b!%ZTXWOT{%LPYh_`J-(k%~+o@Xs5jN&3dR|B6SNnIzQnt1-M*fRJ=$M zOI|9HYTXl=BvO0^Inq;J=^GVi1AwPNz-uzbJH~a&2jH$Vjk!L{zNc-CQGElqz@T|$ z>iGF9Uc(4jWo6q?E()xiOk?7zz@HF%FwMdrf{Rh`UU>I;FviuT<8)?$d0(`}HLp&f z;{^S97TbvrOSyV^s&>pEw^c5I6;~&va{RMq{!aYnT`mpN`mYWE?sZ-0gP;aSc~X~l z0&l%ijmw8+Vv=TJ^RTc76+^(NcwKvSV@|JtDl!L#Q6(c-M z1~4muX&#T?+R{f5jz0gxjwZ_cTnEAOqS+$&WQB}p;CrJ1#i{zAPVb{qlVy*3sdyC< zn4CiJF!4_Y?UfScd^SBc1PrfI=SS22NrUNOOwIWS@i zgoW(9 zUoTQ4$s-Um@~U1Q%ELJcCygb0D|Qj|lawxAEA7-9D5!piRJx=m#fjs*r%kEc00W`{ic znS5R@nRrepyGX=mfcY2h`@+CvQFSLGrmXz?F9f%!E~2<8A?S-|K%dI!1ggAlwAa_Y z5vt1m!GrXHV|zU2I{mQuB7 zsEuVK70IuvPsMfc?^5zawZcH`z1<;A5YVUknIf~Zs82Hh1wOJ1)`o#uwvuK5ift%X z1{%QvbOi$IB0HWQ^Q%>w(`N3Z%7L=`x+TUsFo?mXf-~x{OoH@2j_rBig-=(XBjwbk_d4`m2N3>J1@w2=B z`xQBRIPeHQ@!pf6EP=7Gc-#WXzD=VBosZ5Se?kd)j3cQsH}ffl<2g9%5IVNr?c>V) zgY5!UO&t}4=7g)QXJduVd;PgI(Z}gUp8j)>WrBX8(KwIB-_~ODfUaa-Q~UcD z{jMb12P`5Vp51mEhJx^C3vUjzu*q2C67ZvgaS++hvOtf*3(ZEUx4Ff#pDDWYb>cJX zRdb{16TKuDIHr2ejVqMW3LkA&a7p6nWF0@oOK>pUC2e0r#8_YcC zZPKSNtg4`XR1?iwIh+JL1yrr37VjUuX?@uRVnK%dXh3x47;uiikE2D$L-zn-thyIU zdffta#90*BlG2E^c#Z^m1{EYw>q?xYxBb#_k`A1s#>&DTyu8=@@A+n4m*i_wssgt}M(`?OsDg80LY8wY{4U&Ws+uZfZmDlxwN=BqXHY%! z{?xBY6{evEFXJg28BNbsHn6<=egh69#JcmOSTMCF=(NIS$!oUC8c!iN@AAjyj?yqX zp5i{MfH1Gvms+;dxu^oCsBeG0+n6ZuLAyX3ZaR>DS-Q)HR_a98HjYh->FPS)$(;Xs zc9am@9;Cb+}w@F-MVRn$)xKn}-p2IqT}Bp^xaXh(&v ze*z=)@~#9ZQwI&8O|$qZ!@iumxy#k13mW<}5{vvx3{WI#rFlWE?MHnKYYFi(%K!wx0EL}in(Oze9S~jD5;!Rj869`u z)0lB5$lbif&Zi}xn7C{;PU2C-cf)=G>K8w@yI-$tV#Q3XMCsLyr^VuSdwrG;bjiv} zpyzG?tSjry{?C{3GJoglh8|a>uq8;>Q5u4UsGr=B%3b}b`z}13vgEy36+Z&85VdnYMEETWn+3{MK(C7+$4*=4|}i`((lYdVqQ@4>e0lJL!=FjHQ{|DhIkK#@c86 z=ONSn|8AcZ0C4$H}!Xm!eqj!+Mz_A^vmNElQksd<_CqKOVz%Q1-vZ`U` z6Ov<^^9`K!BZ9fUdd&H!$l$ zTIV+j+5lZ1ytW1wsq=WinhGi}m@58IE^_5q03T_~>F1eE0TUx`sflYHll0^mv1 zwEo&qmAlZ%bZVR*0yv@BX}?6{J!Bv-dAu=IpSsztZmZsL1e$-P(?p4;=sZ#j1hdmL z^PAOg<6P2S#u9|T1;U(oPL}u!ma6MjP0O&wlHewQ-F+hai4<&EPx_RO1r{5?_zp4x z6y0I0&vH83h%X*^tq^a1y<_kSfA0Xe%{BY3hl)h}FE7~-rsI{VjgUJUru?YWa4M}b zn_4-F7euGcy=F}vvKFGF>&VNVeF9!I?aZEHd6rW>AtBf(=zPNg z_Tuq1)^#1G>HPB^lXDnQ>fAXIe}}=Q3)k)iHDJrY(mLm`UJT$*$y(G+b{k6WlobsD zc-Pno);4#dDYo>|%Q1ixxc7L#y%)|9{o&e!@d-Zjd4_HUuHCMih))0QhWSl#z$#T< znTU3lXiCp7y3YzGj6agp1&o%@I?rC&@h@4Bw=r87`Us16osYQ8IOxOR#eQ*LFEhsi zO0Ix!+nfVcv*@?4Ok?_z=IbD)STL|$lB^9^4xo{*RGD<>vjhLmZzSCQOW6HQNh+RQ zAnMe*U9vH3e&c=)0DjXAu9#bjL!g+9YSsoEMO2Vj586Z)C_}Agt!qX;5L5UWe()ds zRO|0)xV22nrw1fVZUHRUTdEanN@n~8QREVQSr#|jc{k;h1@`HToeqM5uAf+WLE2jM zA@&9*(f)~A15)(WofkU`r57PG8MIq8b>O#NpkEyH9hQ~8Kx~$mrG+j1UDs*ch~mn>KCxxRH#;J3 zin@EM^94k~S?d{hlzpLuLcFT}Cc8>53j@CqEld7;BZhy@BZL1%UgQL60WJ+JO?X}e zGa-Ab+*QvIzO^8_D*RhRaZ4++@UfHr!2{mP7i#Hzj=XBTLNikT&j2Hj z2k`qGIB4sQ!d~@q4C$m_W>f8h1hw#Z0ExuyS(58${$^}w_V*wOAE)~0UboS1VkWpN zc_B@F-qp}rtOU=jdqAQ3er=fgWwzb{Yb2vC8%};bN19yOfFIVwnMglLacCF}B;eQ816qL@ho}>kP@;BQqVL=dYK&vp%AxK55HlN}Z9 zSeotrJTAZMw8~}Ld#CGbbLP+S=}W9Aa4@vK)rR~QK^{`3+12lM8oi1r3Yx%==LxF< zF-~L#S^5v?7?UFho~lM+ma=tA_d;!9yj+gFiAWq+zp0TYM04N4~q_=(%#qyR(10mIpDiGoLW?FB6H6|#tU@oK4J zpP=ZzB3d+GNoq)1_=^Rg#W!!InJ^kkwc(dH0K@3s;tN%@rcN;|`5vy<+m7`^E3@qMGV@i)%E^ zY->Vj{|QdMYAbGCb6>c;+{n{O4Hq_k1ou)b1V%tffd`++dB{#TXR*6JXa_Eq+a}0N zwgDhe%_*C9_@fv2{)CwO4uPE318CAk>Y=3jAS&?w0yRTI)Fsf|tNWb+6e!6vkP zgYR)*gzDFuNo4z_LGUj=Vjl8|)ct}TQzhrGOLM$Gh2`)qMJaqje^DW2q+1QKKyHM^ z7CU|SEBaD-HiRac7lFBmdt4Dh(Rg(6BggZ)`w1&7Wc_{!HA2x zpyIKr*_H%c>WTXkF{4PT;-N&wyDn-1uM5}xY&!MOt0&6BP#U@<-u2_IR%F?HTNGJ& z9lqDD9YuyiqLR8kj!l_%2d8JAMqCEOnp|&L9Qbv?f`b8IjH1!z_Iz{W?PEXTX zpO7Zf`HIM7WYBLtgP#W+c;r>|+K_v&QzsQ`cl)xkIxsLkR$Z4AS^w9(;^qL>eQNug z5jXM_yO(MQxt`n|GV}$@?OO25&=1_4UkcdxN!hYJ<(X#G6BC(C6@Uy65z^g};1@SU zWJU<0sOvLBvnn}}-M~Q+>Y2Fv{R7jQG`NsK1;$uYruZRF3mF{|BCr)LTdcq)tPHzQ zGDl^Z%cng4`15LuO_bHum9fQ(7W2{5uxQO>I*gnv0#tQ-+I3@~Y3#)$#>5)nm%8A1 zxvZLlMlOUwoL+yXhKv;sS#(ueQd%-d7*mFzkj2-@N-%U&6hnd3Y^pX3_z@MicL~{i zqo;^JS7~%8A>Cc)eVkAfDp|8p7+$e88Xi~Wy*nf8cjr5%9I8=yuSkFmxE) z{7{_+p!+;E%#6w{35+Pa(T0vU5dbNZ|j#u|Wo=cVuKv>`2P;N(p4BqLNBZg0xMPz~#X6$LBN1r?;Uk`EL^{!^lLSKf zbQE$^{7L{07h3|o!ZZj!RyU2>k7A3@kYD$Fv!wQNE#Rd7S%-J>_g-jBu9ek`3Yt7x z1_Jt!dj8&u1PuX*t!Z*+jHIMLMqZ%bhgNu`hdi!!|W!7 zI0zD7LQ$%KQw64r&{KplmZRo-!Bx})>N|KkAEKr#s!IH;ygkec`9}L4mu&H!CP#sT zY9a`22WxMCb?w8M1<4{P=p-y=A%5iW%mQP7xDY)&#C>GEShM&`rOe0cWHC|V*zhz| zrLvbA(L{1|wc|viMA5!~uoS1JUEP{XGOJUqn}wktc?<7YsU{h0Od)h&qSZ#7yn4c} zcAE>TeqDGVcReXr<&YN@9vB`V%gQ3tXmepKH(6SzY%&ld0~w-&vr0QeIu^VS5=*O; zi$-ePOiflTMlMYx{QZPKp|0+2A!Fc|>ZE=SKq??(z{yWKo1aIEBpP`)!aSniR&Pi8 z-s3}*9SqDLuO?Zx8!Lf7`iPFzg(5-JGp8~oo+&i=L^b&3A~*@qZ;0K5=kV!+y7Dc zdY$hhe9+h&ZM1jesHWaZ%*q8uNO9_{{`5jIr+t zTDYwdr$8NMJ=F-}-$d?6?>Ta^2*gAbdNiI+UXKgE0JfQd~FDK-* zv#*a<2l_*H{L{=!r{eSr%w8&8+smZC@2#?5qU)T)P~gD#bCB|Rl9GzeTyN|WV`5q;a+EueBbE^)r4lJ_BCJG5E`R-l>7;Zfr-AI6;^1I1PO zki8EpnxsY!rXdB`8tn9v;y|Np0_-KyEZ&gP1=a_6h#C?$QHomJ;K`f>A?rfc>3D)- zWHJiyF##{h{)>Q|i2gQy_*0<_8F$J;0v;yB-A#*}VZX?P6qUpnC?B(c=+DJxq3=$~ zcqnH3|s5%ggtac$qa|1jYPQOp(styfdW=a9uXe8UCMP8((EU9RoFcX z<3zPx8wYe3QIlTY`ftn~-??@e$;|Kn*%?hMo~SeeX?tb9;vI%1pOPSop@Q<}*`JtP zcYZq>NBu=jR=n7XExLyRd&TR^=tRmURa0_k5byVV%Qbpn+89NE=p?6!e4cOuH+_I` zAFnlo;6uNPSTBq!Oy1YccS*jtzf}$276dHs*O-uh4TF8O`>Fsrcas*uKZz`Z94u(d zo+eF8rtfOTnv@1cafn(p>oYAVlC3)w=|Lhr$%*|_9!y0>F`(#b!B4&F8CrEXvyyjE zoIe(#qR?zi)w9gA{kG)c@V(C#V;Lk_e>f-)?*Ssozeo2)bi-=Ba*IOrXj0Y8=Q#P$ z6lx%05y*B{2K>_e-fNZE#E7aao){`&sg3ovQFQE#pnTMWwu$_KK9%S>9NJOcsh=5* z%5O&Tw-LB%9*)epzq7@!4UgTJ@LBJ(f4~HgbUzaMxZUKGuY}y8mrU_{6T?qP-t7OT#3!;LB~_;rY~&IK3b&{ctW(fE-qhZpWf+K<(1<6=?!g4LEK5` zmQuPYNK5!R+-)2>uY$7+Eu`Btwl7k<7pa*5&8=L=d_MiW6edsO&AMZL=Bx4@mJ}U& zk;(>(c?ka!NI)y0c8o}1`ds@Jl=E6?NAW@wFucYY>OQk7T`EtQ4rnDRv|PvoL^4HK z^Sg$0q2OG>-aU-yJp3}WYNBm-Fn{HwVk_2Zg3y@Uv_c9&tBw`Tn6(m%Qj#hkh}%-{(u@484pX)qYEnUWh_}!oZq5r}HAa@)9ZjBv#kwmx_qSn^O8sx` zU+ACoKr#0fNoQ5F29~C+Vm?1R3pe3>*aLKl13gv$yhiWgo$hC&{a$RREG^so)sxj0 z?)MhlQza@#tUm}39<)wegvLb#qP!Uct12fvv!EJ;04$8|^(QHp;pv)y0%>9mCTvzX zIT}b3uXg+=@Mp@y&|#vn*k2zCU<1X2;ZDE3vlm!t$qa#1r4K$JJoQ?4Ye}_{?*H7A zeFp?lO8(E!nYw#VpZCVM{4dk_f6FQhg*T9Pef((`EB$&Ne-84KhOeD#utwOFgF`&pE-<%U>2QGy^2ht`!cU!(^@(Uv;`392gK@fvN~1drsMM zg3cHGv#thq+ni$YBIy{rPuiR&g&{>jvC}nfYY#pVE-2z!;7X*j(=ZjW2&Ykt5dq zc=EgRoGtl8K4$%I$K*gaiq7IvM1E+&z9?=-9haoto728=OS5eq?2%QTbAX>9`i_ZJ5((Fn$#FoZkGe}wDKzR{rG8$YQQ7R{IO{N~)2kH5KU2Vo zsqR(aUXJHd1KUPDulKg8rdOR2!z`bbt(m>u?*M{zpXg^T)W{Vuzaj~=B<8rrPmfU z*>W)ano2KXTL4`bxTwAjP`}Bf$dJwVQ8TVclAGP&>ze=RP>X>b#8{7^W|nR*b~)=U z(;;Qi*Z9i4=6dfw#GU@vY!Mf2*6`0y0$kD?e*eX)Hm5-`Q;dd=ZLjp(g=Q_?q~wVO zaL2FBtmhiz%m#L31w$F}-2Dsk(vAHlYs7Y8pfkUJa{t2Q%3LZMPMIuurAt>wS{9Ve z(b3CEyH%)cxg0!kGvV>7TM|Q;`;9s(ZEfMSt}K)dwYIGi5Ad&(RsOaIHQTb2ZpM*#ooWRvda^m@67{5wi$1@l|v7wml?RcV>xt0 zXxGY5IAQ=wW}5Y+q+P;z#r0xgGwg{*#*`YFtmrE`56?mqNEsipS0HsvWqOl;?%>SU z21#j^;`G@-GT+LbM_b18U1EqCDvR0J|E|}^w|*3yS;rA>7`hr!0TTb{(u+7=KQYA7 zWy%jRdZd)t`DIVkqPS;3P-Deqoxiozr=qK}2?CNfH8p8I*|>xl)su_Rpm`kw&iIcq zuEMsz6<`;W#!*X=;!YPrVZW~iq-vij#3M{WkB~Ns%7UD73qKo9<0tjn-y)8uoJ9d) zEU@BlGIy^vXt^=glOj!xzJtxxWobrxS#)GDXwQnJVszFquNsGNf&)!yGjWRz9Sn=f zPL;=Q8P85K;A>GE5&s=b+g9k>#&^Lzlf1dZFfFiuOw1OzL&OjaiP;-<3->*Q7%NIlPZi&7)_h+a;e`b zpr7n3KKft}`RB<+`Aomzy}$yL242h1*`Jk15dg8fY3eXraWL>Vx5P}Sqb;Rl5tG)8 z*gRE^jK@nn#>j4=COEEE5AQtPr`cT(GrZ4arN5WoPD4x%Grk@eO5uw7i}i?nK}Ow$ z#+dNKSv6J02*G?|bNR0X&$C4s))K`7XBiUlstt;y@bHi!MFH_DD37gz$Qh3V)?~W6 z5T>)(dtPmQ3wcH$4CLb1xOg|{b=X3z$;GfQ>FGy@>hc;Ju`-Er=qwKv1?Xw=1H=Qa z)lP1Ic4*FcNaj=3xt*+Iv~4(}hz%7^d~z;il;FF}&QX`0i#SE=#vkxC1G3nOz=9SI zpL~K=yvryer67LcV!3};>v_1czG##yd6NGrFV~m^ngO3dC(Pmd4h2WYKZMynLEw&v z4I;9gV7yvx%$#1v2G zR=1MDUWN;YXI&V(CwPaq_hqVOs^R#Pwwz=hm65g9p)0mt%y10I`|dpZg`}a1`5Xu6 z8SI2CD{qGbAqP}ZfR+wME$@%p-!RlFZ$^poj z7&#&D3>hQj;mQtaMc$uQ>L=*r2!6q32X_T~?K*ym&b&smB}GGBb@NGV|DJr%SoFeM zcT^dvRoxjEeIxl(zB17B^Z{e}C1gqHa<)nDIgCi4`8CI#WUxC*RFq!B5g9ViqDn(5 zBk%1rwZho0_Hf)kF%8Ozp2g9k_$oeT(YNr1=&zFYUIjwyk;Sc^q$d(73RMG2$-6fPvz$D!tGVpZf@at$WQb|5>^JgS0h{J5DyVBC6c z2ONS3T&vzrRT%Df&-E?3qItl|5 zSud6KsTnmq2fCrvw|r3^_JvdtHF1oB{g(XCAHGi!CoY$FcWosgG2&HS z+@~0!eVx694Q?g)um*CID5^|=`zu_&2W)?N=S&!=`?~1eRw`Tc!_vRe)Z}$9b&=}I zl8m*T+mhq&z6I&vEU8E>69R+qEHgx#k7+J6=d)({bDm{^6T#AwrEIClp$S%g;Usev zg@@C35mDc_vaa!UP)|aXIDrDRgO2ycc!;SLTFt688Fg7$S)A=y)f2mzY*(R+>(#twFVyl?hwXbVuhx`$ekD=DMP zcYBh*Z$X(M{WbQzT%y*7m8q1`(C->C7WBQg1+SZua1P%3&@2KXNZ9%nNx0#-lN?w% z{>$$N^{T>bq!d~Z-|X}yS6!}!_egPap69snMH^3ux73za=I;CmI z139bhrU__F;P$4sE}%CUx>aX$yYGaWfEApq*|OWL6kyiH=?5@^MJ}qW$;ci8K&8R) zW@A#H<#gl3;gm+Z&$On%*OVZ`3NU8G6NQ~2bW&PFxf%z5G67s0lNr8!IP>drF(XDa z@oQ_bTGaP@Nwv||e9)MVq24HAAd9bgH&&COG%*ch)qWpdOE&Rl5pP_8YK^_hC*CYs z-)Fe(s(l2PAXF*dGdjfLSC#@@nYXymTU^w&;g@G@4{+`Bsn6)jPFRc5x-IvJ>oswJ zJ4J~AF)%PAnG@xk%vgM#ovij4(++ojrI4t^ztc-jTYW;pC^DjeKVwvOLP2?0qM*_Z zMRHgcGQ{`YQF`42YDL^#e+UU%=j;L`dk131rS(ve2?0b&XB;ZieG!A4-@?~vBD&?@ zNB~7`lib9u3lXN*;}ZNyB~>-EQk&0$MC#np2LZFv?SbEDgS^ zjgdd0S=CRt41K8a5<%VVUy4)~ZDc*|Uxt{OCMK9dalu0w8MV_O{x#`!0(N*DQwc9x z_@_7l?z^@6m=CPN?(wNgi5PkIo7P!daKvD6G?3&g61D%k6;_{kF;tR12YDg)G zl`;$rk$NWKoSa)-xi=#jf07*qZmi4NPEdhGeI0$OCCVwrKh>kqnpaPZMxPOIgFmD} zPa1N33MUchFrXwaC_~t&!{0a(vk`6#1#KmGR}l}q8-SE9LDhFA!}~Jiw(`T4RU&|C z@$HP<#T>iqoOKj)tP7Qu_rncNc!z&RHIzu4^*j(aspzxTUE5g3S{!HZ$C^Dx_lQX; zA~3KpkuMSzQP#)@B+Cc3q`*Z2O>c-}L|lu{?q-9H9Qo{L`@35{V7^C4kgq?g`}SHT zAIuzYf!xfGuwX~u9aZu}-$6YQP-WTQcZPh42jr=x2f07;jk|ZaSySLsI z$Lo`lT+9pc(6^u&2_AN9)wCHSca7?4Q3f{0*Azl*5?K`Da*%;}x7WZK56z~ZD08;4 z^=z{dlBNW1J5VLME(0z?pe@tXy^#(A=Iwe4}Abvl~VciW*0)DlHf;V@= z0}{ul!2EyNHP!RhILn9SOc>4n z;U&+GwEqsWvd61__+FEuhf%J-&lmh0$-yDUXZhhJxPLZ@I`pR}u{689sE8Fyu!nW_ zt6hS@7)J3I;dZVFemq<|yEG>Qa0~ICbF2H)L_%NVqD0C4Q3#3RM#YNix{^5w z)=k897pndgY8KDW*t_1%Nqjn9yoKuvP4!~6oWZ+xY>bBv(n_6@Q`e2pP!o*b>+309 zC=_7Xe!~7M2ss^x64$&}nAdjkkyhM`fp$wbxIAoWJGhRQ27zkhL=bRo=UO1|_u(@5 z#1Ycjy$NOG;Ol=zC!?exSLV?Zf?L5V+HO>i>-0?8@G+V1?)V3CLdFy%3ClY z#6F3tcQ+`@Z%!6%xwiN6p(EdCwsJk;WQE)E**S8BtegYs;O$e4k2ff(%!$aO_hB{V8L3x8Hl*}I+cq@flqV4%VI7w|D zJz5D&`PEDq9yJtM#Sq2`zla@y1*a`P70^^fHWbxdyCg-v-d1WkNQiqf)1sj<@Rb_& zhbo>foik=nse|+04i&9lEWtJ|ZuKkyKk4b&A^PR+i|Jgv1lK zMDM2skT+cT}ejf^+fwXYNhnhwBoww!aKel-HM45p8XP%bzAej%soy+FhBCq*yMebnp{i7=&FKiBT}nerS-lS zZ(axSuJOLR3|gsBXc;oFP*!zP6%ekXH7hyVxtL(JQ(6lB#mlvzIzuaR(cS#?cdIB} zpkn~H!L72NE<;0>V^87RC!K|3(-rZe4J(CA6+LxwJD?^>F59u_2_QWAT;uj9W2IGe z24wKp9javfUa&uiGTn%Fd$WTwS{8WpgU|?$jv9^;+Y>2G4LS&XrT|GJlOf=)#(ojc zUe)^)2M&U>Awsch~-0Vj4=AxmYA9*ftuG{qzwOLqH|(Vbv5 z-lJSxiTRe_IF4=q_C61P+ffUPqin2U6R@^9`?yrzXmGhL+-9SCaWoGpOaPuf(Z2b4 zLh<8py(~D=LW+v2#{xfx$t`My^tmKza{MCIX+M)vL&N3&xyMv=fU80rPg5UZmp!!r z@!7~5`hUZMT_)zUK|u0S<1I__tk@4AT6TJgy4dj+Q~(x}OAX(rF?n&&ycVx^;pN=* z=NcgBDZpYZ)PEtZ%KFhy``&y%IX*1E-Zkhlm1_Y-n!h&ar?bn}*==4=Qh(!XovZ%` zi0sZZG5Qy`&$|6XS6;%zyDLao;`!67;H8%;5cigvaxpc1FzQf>~J2iy2b_@1?I|qyPBaDesYRk z0e*QLV}50MJ{x>J`(_MyYJyD*utvDw{F(P_E_Hzx>v_u<{yr98J9!OG^CPrcs|03% zt-`539kQBJ=!5(}s5{H3sJ`&uOGrpd%K*dBAT2FDlr$A$|Ax{nxs$@0)wqx^H~rTEm$$=j{FL@AG{=-|wM=z(jNWqXbMw=?6Bw z48anX71QG*e|Y_GW&0rArMW&~0eGLqp4u)wzBA~1bv(rf83H zNo;?xjFqZ|CTL1ElRRXOh7~^lReFL@A6dJ;*f;BS(#@^o-M9oM8(spQYHc0`iqEXS=6R#AzbhsFx=M_#9uc}CA1L-xTn`vWldG;uTzU=I3Y zo~2=O3<&8MMqeBU?8&r-0?z#sVu_9H4~IJv$?#I}yyQI#Jf1kFF^s2Y zAFROaE-alLjQ6OXZI39LYhqSZmou_inI$Zf0_Mt3F+-C3-~7~Pj=1v`WjtxDCD=>V zL}#_i^n5&5q_38xud+)=Th9+6x9H4^&!sOIz4E@}G6sCP{MRj07O%1~*JSgrwD}up z{9>MqMP(kZA1YS5kefx7N&?4PwaUFUS9(*fmYtIBm_towgp(d+A#ZvLe|(iscuImb zD*twIwM6=P3nC{!#pqMPL4Y#x>Nnv3{#5!k7Iw6g;Vn_Pz?0i#|ySsriWfg@}nJTueU$AA7j&B{S02RbR4Bz;2Of#%%YLp zVJTA`__{%F@0M-j4(KH2^o|*_w{l8qCXK8CT%}y|WFs%OtXq5%SU#&I{?g0?Yn71~ z=FN%Ajb2_Q7^eS53|kulBQn-Mgr`c5;e=ROd4}NGaiD-^1ScGjE&`j$kAK!Ta;oz&`I)%JVc^!| zEH1{If87oZj-cffG>4R1Qn}(vulk+T7{@jrbg|2R6pg3TS?087W}W=>#lq?oA50=} zBvF;nwHX>xaY{d&o_*%=<7p;urX9PyUO2^nZufh%Of({hS;fPxDZP=gFDhSHdHirV zjSO#l-`)P0^{h|*cc0TboDbycxvfA3Nr9~XH3P^ zR<`jb;FX?K#V&GyTy|?ig8la=%1Fdl<0NvP?BUA%YdcIX56C|ezpxo%OWVS+8Vu^$ z^t-v>-NF)46k(KjQa4^#`(?c|3OE(0?*2R?Bt=?Yg@*}wtW5_hv%zYfFu^mdQw$4; z@AG#&2ovSV5c({%EG}>gry6X1uI!qD8(sxQH1rX&BCt2xNEnWYp;!sZXh8ahQL-vk z*rY%h&4_{j3>dij^jHWbUYx9FR6J>I(5I-+TVR=L2^2nha ztVB<{f4f{+;b@8wqpE({{V3XWf^6T3_*H>I4vDy$<1AriZ^=HZgawIf$7m!`ki`fp zlASYFAZV~PZ1)})oCK`UEfqEVoHpqoR<{##aY9m^$CE#;?a>a-0&}p(-}W=gE01pH zDh;TNSm9S7=mHDWkz^;+nD(k9m2S0|M{23L)UW0Ch649ICW17o$763T2m!#)Wbf@O zXreWlf;7sZI%`2qYRlidT&5JGQgI4yTFbEg{YWF|6!{=FL_>Nbxrs~Pf2L7Dh2&zd z(WS=l9BI@?VV`K0l}P^6fllhZSZ~4?`r1|;3*FX&qtCs$s`|*52wHNWQVlM&t{YfP zI(ysj!^wmKuo~2iY~uU)r;)@Ng`u7Ah<*dLqp;U>8>Cf+6$hcBFzMRH@{5ra*u&7o`x zoM+18x+nZ&PiT@DQ`JlKsA61-L|o=Zn0khBwa(VtyivaMaN>CW?ziv~Ta@+*uupPn zZD<>z$Q83;_oY0}k6wvjII_5YnB{$;mwM6LjgdfPzd~?W?9A%gr(hJij4hL6xgq0^|HhX26S!(J{s8dR}K<9I$iVA-&t?Yw-p1Nlm zp)>}E`=jbG$@P5Rut*P&0Y9ZUxJo^Wxa2mf3oT5hPpA^3J(H2?@HSK^`O(TPvb>^! z7?E?l@OFGpRke$fH4JuDpCbh=6QmzMg3^j-RyM%qvNdhigk$vQpX#izDF%s1Pek|j zw;za6Cj?zLnqz^PXqDNkS1uuS#a+Eclki;a!E-^<5%#neFcUXHAFC67Q`61z+ESk} z9WN8ZSm^ImH%cYg?NeDeoX5$PaE7aJTU*htjQj`kVk3rpeZUey{)gVao&h70cjIo_ z2DcN1>gHdSx(e<@tVW{f$Pf_~;ZKqDa5V=sPelTWT#q(~KaD+;=4-jEO3dqmSl;=e zlnv?8lbGA~BeZGxyc6WZyfb8LM&vAs8^)cq4#DS32J8gs>R|t2wRdB|DSYz&0R{U& zc0S9%Y+MQ$5UD2Qi0R!KliFpA0lkTrIHef4eQS7gv|NS#7;fG_dk9^HR7V&KEl&C? z`n%Pb6|FFBYBN&P{_z81NKYshP3;LrhQvBtu)?6!$& zI#(|4=zG_3x_|49O84x=$ z5WBlIMPp@TK5Rify0VF^U}JjIt>cRBP>EDnb{(iq4yRH0C>xhjY0;GPX1fr_-c4{c z7KK4;EbAkqOy}TNksh^j)KWtb_bAG)zvM$6f<#w0HJYSsDkv~N7R`Jtgj+zwGmRZi z)i^fKJ<-XaZYmbII~9EXgdSmOZ|o%owD9lVu9^lE**C8oUsWS!<1MViQK9s&HRAEj zBWmN}z7u)79h014)o~YJgp~qkS$W{x?&Bo01;l~OPi-y2;c+@fl`2wSopes4R2R^C&n4UWTRS3Bn1HBMJWbl7xbrxL8q^ zcnQlzCEGOL%GPPbub>EpBct)p*kN=Oii3ZL3Lg>As z{ip&SKg=csOL;)ov12l?r<^z@m3-JcM)RWmryJL-O*Eg)6pt95M9z>%APT)1vUh}` zD>oS9_Ekh1E=jC$Hra?|_Eb=|xmZ=V9WGPBeNi5fVAoHB z;1ka$B$I+up2urW#Ih0Xm@>Y97}^|5pX#~i;`iLlvCV*d;YIi%KoD5uQml*!oN_O{ zjKCw!Nq@hU_gC_6%yu)!!9@B6pyF$zOy#J~VCJlYWcbqJoQRQa>@eq+;82r|j0IKzcb zyg2nfj#s+;18&jf-tL3iH4NL{g9u{ggiVCae4obDdpH&jur3B3;Yaxi=nHj)iiB5LL@Iu<_^O zpL+DIZb^vvA;`n;Q?gEccItav)}v}@@`cGk?p)dm(}~o{s`L<&94nePH4sUI5N&{Lc)iHy2!cv~RcsoQ;<2Tx5BGjrRyy7NArTaIn z)3Ec^3-xM;&yL?&wC@;aapG>MG&<#^zIdRNk;h$&JKHJ(_Bngqjv$3tE0N;d@C_F) zy3?+fAT_YUQrh2c81$!Um?CWKuJ~6?yO1@+Jgk>v`F{f7q?F>uH@{e%YS=%Reiemq`%i{X=EF zfyVp3z)B7@;thyKw1DsQe+KriYH!sAmK6Lj*pUN1U(jko#Uxf|UmzQ`CN3Vrc?Qu^nTsZn(MMu>@7m}HsiazfA zTb`VU6W=d^yYx&?@=urh`Gjf5m4Ag9U0g?h`3-OK=_R*I68lI0numXXIkd1xw*`-S z54Jo+efW4UY5ha08J*NC_ba-UZC_tf;bP^ZqoeE{_AGy=KXv-wrpAsN)=rw5FS~tD zrz(w0r7wPMuk~W!ON$qsz6lLD%MJ$f-|F}LRE>Nd9?8#aANlvYrAp}%KfGwJJQk=+ zZDhQ<;*(i=x$j|pBec(_Y<8$UbNx@U4^#4)q2A*DTlY2%Elv1`Jl>!$m+NOFPjn4~ zvbOumYnyTl=(1k!m9{uh%Q{Mabk!H%FIc(~JQYZleiHL_BL~A*T31hexvT9eH8pVP zYx%>!uclOzD(6&vQq!iSTLv0NSgk8e%6X?2{yMT&hJOqwE;-m2O;Pl&Z@6Fi_o?-^ zrAs*)ViQJ00O^&rUEGP(aM!gxb8QmC*W~5jMC<&kaz0zL(~DCYlYsujwZe20-QNp) zeeN5#Nm8oHgTFZn!)u?OwB$VV>wa7l6;0Au6JVQ3(4V5bpf~vS_lWyZ$m^7ui-yYW zULTU&g1W>W1+6CC$MLwCe;XOM7S_;`{Zmt7<&N&1rEBA#0e2|V*CowKdwp|C+Gs3% zYT@b`Yd;ZjeSXHv?;SM*a|{7F_nR*!tYaVVa~3{3w!13%vQPB%Ew$P870DU^dLS*t zfCE$H`Hpwr!kWxrU^d`;rmw|>o6(RC^H|@2$7U$j=Q4Hif{Pvfcj$#5`5mP#6=DtDLs}ue^gH{X zJ7K@7rgBhm=$1p*U58-r(!zD;`8$4xCSaX1UK3Fmj^B8?wC;jh)2iT+?!W3LMPrXze z{xS!*R3KFPyGUM`ShvviITy|g!#^$U>sIU4F30GnIN*|@aSOkw7i^%>L_YMb@O*wp|FXd*m6A#(AIkmKbh}31R zdw*Pb1YgU_<|D-V;vZza9qAiYlCr=*8eUEglN!8buRSKcVyEo7_>AE6=-S2L#V5a) zuHOl6cTrE(R49M+y%>~x=_rd-IoMEREL%E#c>J+)O~)q*_k)U4y5&B{9El2tH>2~* zjncL0eulI^YBZR|iRA&+0~Kr5$3p9qsmZ{<#~=?F91)$J0O*$R+yDIgRR80lCOx1o z?Y5|xhkvZjDBAu;msQkw6w`S5(|rp5uHk3%dS6o*ibF&e_2S`N%~^b1GTpv^?fm)h z-?f5^tj~0kO6_!E{!X(modb|Z0|e#z?k|GZ+HnX;Xq6u&JnX6caUMUf*+qwYydW0W zFPugRU4W`W`D8U4q(rbBUbT6u8l^5?KbhJ1 zV%%3BhH@~V_&dtoQaa?f>)CFyc5tw*1>NNLCjur3DLlW2nvZ5*hx;|kS}`C``r!D|(<9WmXz_r!0{@-;c{!e%N|Bdkm5YU<_Q*M0|uctH4jk|r22q*${;q!x2J!7Y* zLsI{i!`5CA@N)bIs%Tt%$DS2X`5%D;^ewmmaOLt}9)3d;AanEq48_A-Qy|etxQ{4O zKc)8(_>$%h@r;_J0c3RzLW$UBxG9OBttR#Z#D~FN%gyzFWM+T`wz{N;?wK_>f0hFD zsx_b>@Pg@TeM8^1WNv#Cpwh1a_;D#qm!Uh_1YSz6DV8HK%u>39RRK{ltgC*A&^>zO z3h|#I=+j+e>hhLrzlqPyvZj13m+s==@Am_0vVkf1IClWBn35g~w#2v!0J{E^A9+M) z)Em=$TmbL*aSo7Xwx1Fof@aO9j_4Jr&Ei#Ja~Yx94f-`th^3B(D*-wrHJriE?sBB= z7eLA02kNQ@1jOrRJd=v+<}A$61?`T^M@A+Pr`j6AVvt8xv_eQ!hHg@qReYeVmf7n9aAs>jHC?b4FTngORgETqK-3?(EG3kJL|KxR6Yn4#~K#Wqj2XxP{IgkTGRc0 znLia*>3L6(N*KI%(NCpWh#m7SZ*P(2oerN)|e=+#xioIw39x@1^NhbFDlDhID z0h*z7D_6~EOZ*p#xer1^=gqCe$~0eV`IuCrS%tS7w>RGGY}u<4U?gabD^ZCZk3V)W z>E~^9OjfL(yq$Ieh{J~vQx0M{S%XdrAE3iHNEK=ZHh0}~7?-{){(^bqaYN3{uquGi zvjgkRuW9l7n*M;pR;n{q9(=WZF52z~_|Km#7a@RQ)sVC?=mAw$jwsP31F+qf5+JTy z$4Z?Ptv(=xgz@MHXaxB2j<@*5&0LoN5L-{x35dyMQzZaHll-;)?9&Qh=c^{a`Kw&^ zxwO{EPAKnZA#SOdN3KDaJ5r$oVW01G!#icG172;_$VefZS31|!Xg zK*0!LVmw&qz>s&&U75RMBCj7wON`haS?rF~Qvp913k0YE%@{?tBkI6ifKIGg038{x zR;)}<+!W}{Ig!!+OO;&sepWp(q45W zA_Kk9F3xnf>LuB$i@3?`%;fBh3kc7f$q_CifE|CocG^N%iqgTh52B1O$xG|H>zcqg zQ6XY;D*K^NKAeY_GOJquhnWj-sb5QZ)T!$UP5HB8?ovl^lAO6-@@(98`$|lvamU_1 ztmnHFp87Z?ur|6`I2Zu~Nf&-1{(8I)`bZYLu@#eG97PkV=JF05z(_R_Z&JS+U8H(5 z;-taoPV3?mpoe(E6T=73|K8?t z37~eyUV9l^fKT{%NV0I=zzowp?JAPxmVLw@v4aqm_A&|d=$nl@I>lH_Fz;z|;ik7q ziez}5H@V1Tk6%3Vu^Ba#Og^gp73SzS85>WJP}5k5PSqI{&`8nm0=lB<^z(EM$NX=R z@c|M+^2-fxsI|!0oiEk6k&sf9@DXh>=b5`QS|hSuEujUr!Y)r*dsS;iwD4Vfw-bz! zsAG~&3nArsx-VYFe*F@%n?l-b;d4qxpci6hq93u~*{A2SEvsmbDs@tj^^|2> zLokluyFZQ@r%{fEkrKR;Jnx7hRDo|zv>ip~!lP1z&ctVSz3zi#_EM!=ypw|M|a zD8=1I>R=-KoID4iT09HTb1&tOn7Nb;dUT}@Xz>RPMaOUCbZ4oy^)c4C_0M?HKsgk*0nEd^kYa`_L5!IZH=arw z#Ft`K{*w2@FLA+rZ_OZo3RdThqcZp#V^u-KD(rcw1JN7|uB$zi;W22~E8E#l#ywU* zf=x43tdHg(!WA)tlR21*ynqwOEcmP^jQ?VmV-r-<5*&R#WDLlsSlW?f^?{o?!pY+A|rsiqBg&5_hRq$Icly~c&Q zZ!Zv1J)yH-m+#Rb9{w8$jg-Lj?qXt`f<{lQ0gt~JIaxr_NP1lK_yvi$TTgB?)X#SD z{T=bQ*4uKfd7F8`8#EEe|H5jb@pM0kgiX8iy~^Wep^w*#qjEbM!*1UNI%P^46#a zn_c&ozu?P*??VF4%rKJhy)g-Tn*frQ~Hp*NXFpOi(@<|c6Hzh*IVYf`;sNH+TANr5+4_ir+m*PR<`R_`8= z3i%=e*>mr@MG#ID24SnQuclVQ^t4)~tQ6!cA{3=!nEFHMr+UDHf5g$WIa{j*&PX@I zYNPkmuxbCP6Ed5y=l=O=r`*tmLq=@4DljT+85)r+Rqv&>cf60SGliZM-D&8pmjUY- ziO@s)=-ZA8`+E#K@_yRbA^!s)wpJOvhovHV9#w0Kc*;gEIx3+7#03^MV9)^-=l|WH zmJjkT`BHt|<6%*}$KhzXF*3|lw*R!bcn>7h6 zTn1MH*8ALlP5Jie>2^)b!I9RJ#a;tDBf5^!U+4??M;rkIVG+mH?@%@+%ikjw8DM-i z0ita=er~_wl^G0!qpufk*#?0SgK@t?_IY3%u?9Ap5|{duTs1xtYZ*3dQ<|;PVeq+q zacJQ?-*|%|q)2&r7U13fSBN+_pZ)e5obw@@G)Ran+U;e}f{krB>4sL9fjaV0*J9G8 zb4U;_j=^^3$LE4o`^^`Vz2QZMEWLW)>V4;&>PlVeGyw+vElVjGT=DIfZw;o%<);Ai z`)$z#`|a~zR|cl#`x95DXS{1`-%cF>-yX@yG&oQ)$Ne`vK9fUJd{6G(o;Om%DTT$MAXOtVX%%P|;`rh<=@cCxpl;_isoyEV_zk}OuQzroqa^0lj3Ds;4 zZ0emvezU9;MAZ=o<`ah`n&k|rtmcY!U!lB)&;B{T2GvfZ5);@=U)F;esqU;RsSQ*~ z4tqlZK?BBdCNRg;1RZvHS&cEA=PGEoY;TTzzO2cgkkNHBU3w8&)U#A35DJg{i;&-( zYojR+l%qyGZkVu9k|^E z8-z(cNJ?QBD^m@15Wja?JLqAtJbVf;a3I|xT-`M&=1o;%mn0~eUz}wu$4KrO1YK>L zrGjHcW3yi{sIEQ{f2cA7f2JSw?)9O{LhxdzYHH?$ANRk+7O1=YvGMl@hdzLlHZ>cO zfne}MAUwo~-i8{s2GNnrX+@o%l@g511M=2?))lBCG6YAGeoTV<+RV2a#)+|22O$6$ zgdMa7euColu=iL!mVjVXZe0Q>RLLB1s3J!&==Yx$2Lj=J_F!YQ9kd?;#3O6)o0M3U zO2=eMLzbt?(MR0LJazMxlj8TKP=AmtWL^jfa=haN7vOdJbRPez5d?5-3FFDOY=lFm zkh_Rc*%wEjnkn@RauQTOcLP3OZNXnaPp-T7G|`X|l)P2R|Bl=4Ih5#FKm83rZ6*=Q zlFvT#*2j(w-(+tF4oRJsIE}O8>9#PjSb;Jva^eD+ zxge@ORwJ!jSc{shP7dhHkwLG)nkqQ`C>CB6-b@677UWZLevG)9<)u5NZe7l^q$($HexX&t!W<55u`%ar<%M;=0pxF(V}Hm?E=d8 zRF2wJBW<9+dmh{>{}2<*EmZ?D<+rtm;p~)CCXILPOF`j2G2>Rd7s){quOeBqhK=+` zXz#8TDe50g15^pqOf{iq117X!ecoGgpWGhn3Y)a zN9{4nBt#apSMH(Pe!i&@etOr4(Ka16AFOiw?NtDemv@pT&6Rk+y@xjGV_yU%wf zP-?U$jX=3*QQn`d7BdwZA3;S{x$@$vbqeK^61la*tdX2COju}EiM#d@3}7w~%SBaf zoSf8)X*?o6B`Kw$O<+()kZ^}HNf4ko zX7c^XXkIZyS0kNt6Tph;v&&bxCA0b64*c3LC4tmCe3$y}PZ*}0!C(`4``w?eaXc08 zeIsw7QDPPZ8yT@)4C!|;tyZunH1v=ZtG5y#8D$76;tq&+7 z$)d6C>!}3n6-eVnMyLvfp%CwkmJC1t%Gm z=fG3BQKC?1YY?J+9*md)j2U_(<~&9^`=0HGGsga4BXUvXQzanuTZMmkhjJ*vBM@UD zrf*ZJcl!XNOj!LYGGmqa=oXAPoQ;R|)6bGidIuvs+0K!K=xrqPt~z~*LIi2G#?jAa zI8V3OnrjJ$m%#@042rNMtH`)dEz^oj_0~F9<X9N!9ZBC0=1 z-5!54pIK#&jRD})gok^tp7r^}2I|nDc-{q+OdXjYw5FhlwfH54^e}A@wKF8G))+NbQ5>ll2z(Pvx z!5dObdWCVO4{{IjLOLjDnOFu#70_0)55UF#W>#8mY% zO@2!pHmxF_%|48yJ<0iw?I%L3F(p$GOBIa>oDGsT@x@nFPc`X^QEbrxF^|{5rY1vVswpE(1mQeaYktqE%W!vxZ7R9d7$r!~ zJ38euJuNcJY7)V>_CESh-Aec|@0VEMr4-fc+bXQ1A}|Xz!Jbc7gYk;1oxLA48gWUr z#2zeP&hBG$zoM9Hkvn5vpce9TSNbsM)v?Fq(X;z-CQf&L{aIa1{Fb*m-NMpV_rY-5 zVW7U!X~qfBXTIe{=k)ASYBJ;u>1k)+;91eiW%RM4O=L7fdXq!H+I{; zX)2B?soZg5)Auqb&@)YMJTYR!JRjQv~^SUkxU z5+*s8)tmM@BX3{%HQsd3w)yp!pSpROH7&jQtN+YRF>sDAw*lm!ZGWC?A`ZHrZDOkV z&zT%mhvPryaq84-@;V@peG~koga4JP9~QS4Tfj(v3Z!2h*Bpt?yLSAm+K0jZK+$1K z?olvhtoGIUCe5WlQ|4e$sl@hj3n#5->aPCby6_=4JplUXh1StprfJ=N@|mULD3E)A zlzi_tgjEMSqRFQY3Nm;U&?CzsyYBHrTRzOlslGa$TX)^(xn~+j)ci@51AwAM$XZ$( zP;PaaD^I-WW{qPWAv?c6)@-rZw71>&8_d@S>%cIf01OA?6{9Imt*h(UsZPm#ms8F; zlRxRyXSgCA9dLMkuml!ebU`YvthO4y8~)z)MqVYl-p<4u}PF1C@-AV6?cx z;>*kJ_?l&wk|)!a4idau-+;NUA1KUv&S1Ygzbb3o=U(;LF0D&Z zAd#xROW2+*c`nP*$I34FpE?aD@(uSrGJ7IRX8nOEm;`}{w-%*PR*)R~n!PD}U_n`A zHyG&ZTx4UJ`xrX(f$*=N%Njlvm`y=KdCwlx1r!c&tjw@GCbEtUh0Y~S%4YMRTs;P` z;ilT_*w>I+bs!8ho=r+n<{`o%mERGhTaY8dM_eJ~IH1TBEUql}-VT@UhIx#uZ22!; zm`2~R*nN}u`=8>246${PHpL07F)NpfFJVW*-hNSzF{$T()0=_8^x4OVaWsLd%jJ4NHo+5(mD zb8#1Fcm#r`=4~iVl7&p4G-al~$ovuf-LC)_aH!q-GQqudYos3{b$`&TQniGL7{w3B zD53ESVJQx;V@R$|pmLYPfqAr6IQx-C0EJ3iIGSo(Z;%->NTpPwx6q>@E7X*#oS)Ji zReZpwa;KX5*-I(ErRrm@vwORuUvR=iv4(*l>y1d-Sn#!1e2u}Q6EROph^gMI&a9;G=hw?JeVIY0+YV4d{H{cuEfPpG*QHiJsXcGo(>H`K$`oXLR=V zS=AYWWcU{ERJ2~Nn2xZ&8u3QnMJr09nOHZZSI0~&6K26^+<^j`AYUP0KA--WHZviy z8N)YX6)`IRd}~DMB)ch%L7k-_7))h`&oPBS3Kg zzjMQkZLfg6G7BA88BRrYjR8`7`=+PkJjJ7IJwuT)!^KB~Ai|(SH`O8k#8EyjMd3kD z2M!)~$Bc2X`@C|sf(VPM2xIYs)z=0P>bs%1Ly3e_vVnq=iN~7hX{T+pT6I4CaVl{Rcw;FM_noU%t;YJ zZeW>5U|jA^??|#Sg;nMzI6S9m+feVZ64WOZYi4m6FKj*LYpU^zn>gT*oLvsyb@2iL zt_500AFE}#el*0}A&-(@`h+4$^Sr)>5;ZwtDFM|kin4%URIo#2?xc6-q>)4?F`862 znt>nG`w_)&HeXfW-RD7{pbyYzKuxrG0cPZ&7_a}IGn%0=gWu^clUl7y(0G_HIDLa? z;A)y9+bd5w7f+F$`Dz?@r5obyo6aP2qrD6BlQW>xPYoqaJ54zk_}Fo`sF;n>fte*B z7CeKJO!@(g-n0eCVt>~F+?@l6O_uc#O}%217H6vy=i^_2Y|!nSa0lu{5>N&Uf=Isp z23sUA==qt}gI;MjW2Uzol&=Iv^}e0lfZ|CHw3t8smw5rjO$@9SR`q(l-lxosWw#+P z@!W4*iIMCBH2}Xx?FHB(?}NlA^JIY?FYtA^uo$0$7=R4F7%6qG>0YQi3pDk#1LXoU z8alAK+CYu;t?9JIVeV0juTdvQV_M})@l#Mc9g-c~!CpLJImS&m4C#7czJg#S_8UFU zDcD?}@Pchlf-dj?pJfqP2a}Ey6R{l?A5n zwp@=RQ5ZU)MQ!AD$$URhc-CO!Rpt(8IVOMGaP@mDa*qz`7-p_&xd7Lq)cHo<8lcz~ zkzua?x{<@`yELltR4uV(Wj^g8z(PuYSG3vdIAJj%GdRXexUO#?TF`WRxN9NVx(E7vlUn~8d;WIw&iwwl*q#exH&Y*8925xknYe!msBBuS)#iXk zuI6lwOj~|-g!}IX1c>qePueYS4~59eP3`@4(jw^?Y5gn-*#1eq<=}UL)5fWTuS@ks zLsC4?hRFWIW{ZYOu1Ya944H{+h_o74<|k_F;@XDvH=@+udsw4=ZmXn>L=CTR;W zTA*NSNN5_I?LaN8NZ?qKzK@3jUtG3T$lirEgQU0#j(t#qXFlIpg$Q|lKxEb5_Ib8i z1v~|*P~gPiUD^T(O{wGYN-&_A3<*)1U`3ur-+f;(+8iVYbs9kovL) zm0yP7jqC>(_;h<)e%#9Y_-a46MS^`-X9ybK#4YhxES^R33QB_mf|s5H)gx!*aCGy= z0XSilRzhFkX=>lHI+|%b#}v&Kh}*}XC{va1vspIpWOqma9IJxF|Onc$lP`?-q1I3vh4~1yITKK|w#mXh9BS_^vYhMUO&P{9|bLLucOP?PIqlVV|+3(RT|a_mY}9D4{XyDJLI(=sS&6HM@D_g9QIwo z+Reu|6~UE~TGHJb49S+imW=|iEQhf;m14OprG$G$IJAYHV>C@rFnxD{Op6O3DF#LR*rq^1Z$OVwZhblM>&Nfj4g(^1H!a!SH4fS#s41}abP&obwAOC6 zgoHrW?DukBaxzhK%X%po_QP-fiWK#BVK7-?F9#QsW7$9^46r_4&gBwGRGi4!qI%)^ z#$hB(ZqpeJwXV82??T%)N68Cq;f9IJo>;Tif3~o$e!F1B?-9Zq)}q9dpn&wP#ihLX zlu%9Ft-OvfVu_+zJX|H2BYC}s^-FP^b1MSqRG7@<$eHc3krgDyW2Nk^`II&$G1Br^ zc6{#jWVxeGx+4A-I+$3wrAR**;VF?T)Sz^0)h%j%*YSe}XE3CKUgeN%M3!=7T?bC< ztIvjf3#a!sfO3xNb@@cAq1^ zAYAaP9(KF$*`TV>miOes8-KA|UAr!o!(nYNM7o&HV;(9fqckKZ=*YCF_q^yaMbymP zds(>+-;2>`@98s!XR8Y-hE2*ou#@MFS#Vpz+Ec{Kn9D{;V7&g%xmW-AP#+a&>>0i&&fnTGk#Y=ISV_v&=!sZ~kUsi} zR5XD^4li`y^3F{7N#zjAb^Lp6b(N$q9*Rng#S6}y2!Bm+%p}-gd%**o(2^3v79##>VMd6pyInz~QIwKr~&z5jD&oT)p_MuImZ z1y2}J@|J7q8UJbc3uvsB9_EARwA z@hfO1eT{MQj+(dPJ0cUG&Jp1pQf5TpR3Z?;SZ6a?2Lz6DUwxV?kFu^~+-1=PQnLjl zakcp5jEa2cy=b(PTI=-h^`kue7wXSV`l%0uY%{&|k|RpL)9ey}#(q=+(?)=h-eA?6 zP{%*-*S4$}m0CB%f1p0XR*F0snAbyS#BE!d1e$s6nWWcgUST*43t0)###G+MZG#)< z3WNz-Mx}9BCX4VtCwdm9HV2mv+!dG}|Je}V`X^4vU4SM)44ZK|Zo-^j$l_4I)v7g= zmJoHT4ZGUx0%_f+7?L3(<*rh8Dif#Sze!fn$gb;z7o9i4=OhtkDU8Zk;U{D}+@!v; zrc#}X0VbdL{sG-U*&rd^?iqsIUv^1(&#?4vz5qY4YUJJwS$M~$n^gv$VLbVnWvc^q zeV`G0D=#`Qjv;fns^@7#qQ{ub4$7%Q>Ku(rmLu(M5+a?{9n{nJalUW~YnEZK=uNXX z%r~_8c^Jk@=lw;mS^IV*`zouJD5fw&vRrDPTUIj}rLy1X&3W(D5&MTx#^Avk^369$p(HQ#7KpIYS+j8_K~xV`1ke!6Owbs}G7tmaIHu zdwFR8VY$PfHLQtF`-jlSs|Aa>l-#02#(0ug$-R~hpJgoWxMhNP93LnBhv~B&>PLK< z%<|2&dPrbVx{QKBnRUwuV;9lYrh|k}aMV)s^I`TYCZ2cHxZiU~J}hKS2HxTq%Y^yPKH zeXLyz9MxK?WZbu@C6MoC+l#l%tlbSVs`vXwe6|!H9&t&?z0HNMx2Hw)WRPrdOGK&a ziaoCV*?7S`i?2+{uR5l*qC`LY>N2;94QF;m+R2hzMZmF|z*?-(MNw-N^`KIsI+TZr z(ehm&o#avOGwV^>?xE%l^@Xk&5d_hxeV+ej>_TFqGvdxVR+M?=d#hVB8obBib2i+b zldL=v&&?|G5`I)jk$pT2I7;-JVZ@B25ReotwzBN=idmASxI}GV4zZaqvUFWflMZ8H zj+&V(&wggyjBfdxS^75Xj|shFpTPrStn-B6$l5CUL`JJJ#}!3Jx~$6t)uiq7*QW7Q z%+|{pDTCwcq^g10Z0-OdT`T)M;=iB<+N-Oj$xuOeo+c}qw=Y zU()N)=cM-@WW*?Lx~+6gv^i+gJ<$zSyI+B%e;qXx@_Z*I{j9NTIhjpY^p`fVA?-K0 z-_lB3e#Gy?1PzS7#_;yAHYv!!R0nX9+s-@$!AvR5x3(^EuJmSDWT?i_78AMeW>2eU zENy8U`=dDd1k4o!(x$fkuiN<@Xi9OE_g&Iq2B(!LZL*XTZg*Qp+=5_uCbW(jO*0R~ zjcCTLvSo@9gW4ayW50^2FWm&2yTNVFsGoI4TT90*XXN;1$MK`3wL;e&DG5z#4C}@$%SpXNd=YEG4z>+Nx(&5p&O|I> zrKIjjF|A!z8RJymaW;2XG^+asg{M=2vG$(ki%GZTuT@jVRkXULZkl7P^mNIA@_MQ1 z2EP64m>E1ek1P@sCidFm8}*Ql4+|sgO$J%-DjYGDm1^IiOQar^CcG(YYeKQCW{Wz- z#RwBelY6U+=+IwS1Ut$#Zu}7N6G@q%bj_+zmg$?YWdkQH_OmnE-PQ1@8XBKKxpEaX zTsT9RUikKXs~oHbep19I{&f5exMth3aH|DQag`#cjT2!TA>U-KQPG(1V2|UQs>pL% zj4=Ms?(IwxatY}P z*@C+rWA-+bo)kJeDQho?B&J0H#fC`P!UpxM=U0Y=zjYFqrPtoAI6VciJuLTra~x}AFc+p3{l%&E+lWqF=8yL$(2N^H`v;aS z!p*$fsWw{ONHZ%Wy|dN*lnHkkfbZSRGq&F#%;#;Fj*EahmbgODf6SX{D_e~PU z0?Qt!SmMdZHV-$JDBYJDzU}YYvU2ppJM;(Q&v4^Sv{O7~U;PzTY4RT1g^iW|y5;!i*XEz0p@T!h*>77$1Szs|Ama z7&-s>TUM7DSr`v?{9H2<*JV3;Njg+cV_)l~#1BiwzW*U%d8>AvNMwZEkX>)jK;9%n z;Md9@MK_zJ(!V5z?8;>$WsKg==xz4nS@Z6O_X+;bb<6P8O9oCJ(iOOLDl9QCi0Y;> z(`Qjcd8N6T`R}V(6E%wPj~>lAu zcV^?N`H|-~R!WzqbkFa!e+Ivm%eON9*B4xaW zC?eaF##Q{cbG+SC&Iku}c^`MvMSRo#`$3|@V1QAAz0s}qm3a#d%STMF65hS@ zin?XeLLSI0KQWisZssw91=<#ae4%w{Zj?>YuQN;Pu7bnhtKQo4dcnE6$f zV9v*QuRognCUGg>R}Jv$#CG-#w1djqd%1 zh%$lR9m%*D)gP-iFt4595l*USp@A3H?zP}$=a=Gqva^J7>d_Eov00l4eJ@Ecj zU80{T#*4FOshVh`71U=v9L1{jU2A^h4EZQtYYRq)De6#-){r|pKlxg}5?hH)du$w#6lh$x5Xp3Og%{$d_u>m6xl?Ubj~9Ikt0 zlnF}CY~GOl$ujMt(ZDm`%UH_-dYcDDjNekMRU99}iXE8kNLsIpk)D-Ks5Vu+4klX~ z)>j0fBP1*o6(wWhD5zaEVNO_5M6&Ghcj>O|jm&zp4F`pMF711L`CP|Y+_TM2m!ISK^ldAz zyt1zYN%puN8q`vLPpfCzeAY61_j2r1i2J*!xd#iHcfkkD>NT1)?d9S*CRl198@b>u zPvQ^)wtOBulMs{ul)g-1yuaXY@ zp|a^wX4FvrZ$?i&GNgfVlzH^eP;R>g`Ih3*zu=7E%yD2ui8TwF`lgt`Y;aCLmly=kzsV>VIeS`u_|cNwag`LY4fY5UUkE z3JcwFM)sL9;_S;`uTg7Jq-fh5nr;J5(`}1epyW=~cIL##9sSXFHgZ13bHS@X$f8tEF^)1>H22>&rwvcQxDzob}% zQHS*sY@q0+FuToX3-XsE0@AXD0jCqJ3k378n7Mxca%d*Ql7{R4<-I>x;=fnm4+zol zx=bDl=?=WxAE>&-B8f2=UKCyXG^vE%*{+^wQqOu@y4@a(lz1`(H2ow*Z4T-i)p_Z zgZ4)(!q&%d=|h@|i4x91fac}Sl;BEEc%;es%0cJfR+oGJ?tIrb52xKnC4_rL^Ea@q zD+PZkpK>Wjb~ee?;IK8D7r>oLFSaqNCj1s@a=-gf{u)#2N5hO%ga|8=ooQ*EzPoohD0WXI`9+j`*9;LjhcE(h z;RxYfGF8;L5_74KLdu~?!;n+VLTqCFm<_}FE;->(4%s<7{iFE|e@OdHb=o`MnzHgs z)H`kJm%SFXq*QN0MO;`em;O|IJz_7o;EF1s)>81rS*Lvz&`LD~a|gm$x(9vxhzYlN zkQT}?%W<*Xvxr-?WP6hjF=Z#o=|mfRa3)7~*(Tg6f|9^)tHhQ>a#?PMWI=^-h9c=D zCrO#iIGF*(Ca;LwN`-st(M&k$oq-xVG5Oc1Fs;kVa{P>|<##j*?4{o-B=w-{$Bb+X zE7@hUN-lST)~vX{0zIbv2(H^Oqm{S96+Cn6-}2bNK%@rq=8O56Y#B@OLNuLGRzTuw zlP$JOR4J~h{gR+|AkmB72CYfT4GdHi($^-8MHn9L%hT<4XSf)%yp16_kMlfg0yR~U z$aIH4y|grU$0=wFTMv{5Yd~k9l6mSi^yzK2T*+dAF)3Rqxp|V|ipEy-qT5b=P=6he zZyf7Ut(}{#y$0o(kVGze96%N)Qs@)SjtZR*aHw>axuJj|mX>%U%*3=5lhoPEP5(Z# z45c7-GRn~o7pCmc*__ZG9(NCr>(J-nB6xCX z?$CCTsOYzh`Yh?4hgP<^&C2i&9VkNLx5lw9jANbgV%!-VsmH-({d;F49L9m4oW@9x zp}Bj!wbUe$LYuKfasrql!UMnM7xhNcU3r1HVYTrXx2Y~Cn3SJY48}+46{g02Mps?m z0a>vLHe}HuYr%g!SV%j7+Vqw2L08@AFD+NjePuakv^pROcb10)~ z=`iV=7oXZ;i)VVpKY}!sW}3MbS`nHC-xhK31uUU~o6}?LJ-cc(H%OqV|6JulZ=`La z)Kx;X`6u=GEQ+2pMK4at-g>dERm4qR#u71OCfC#o4RN%bZo;mRSo?= z9JALg2ipF5|H7hrJWCmC? zS?Lu>yz5Y0(b9v)3^w9o-a8^RyfVOkd$~DdmJnGRPpvYf)1Buww3}4ju>6Nye>}}C zHD7~LZ&3bn&1Gar#M(A!Y$DHU)59Vp%hT;HYcSdIqnV1AoGT?PNLhqoQ%J^Em_+Fts&pNu>=p>-{7KK;P9P=K32k}ttHhWIW0U?d$L3m z^NMWGS{=&b>DK(qRx=UDwo#e@*E`~6DQnWs#gcLTNFtD=u|qKMDz2ek{EVsVR}q{G zE82WMnOC_LZ$Veg%?MY0Jg#uvNYXh$WRO00w?&AP4XYC$WWl>zz&NlixhD=XH>@TR z*-<^M611u^V!zi+1#=pLcum(5T{9BRKE$qKLT;l7po)*p^lII zaUb|(L7JR_yFn+zPSni)7VWr!5exp9w#`9Hc@}l=x1!m$qW%Z*{>jWiD8BtWN004X za=ogU`fM!8@fEUL@*|4`!T{xl2~|X%LGRJ8hI_yh7DDJW_Rp6KWGSbLj|~;pFq2la z=*KW}u`P%={cPO6PcGNnO(>-DjFYVv9pWBM%GW{TwhZF1F|UfKmiR5XdY}LwbhLT5 zFKX-XzKSyJMHm5GnsP+@AuDw}vyNSq2<)f8rqZN^sk$@+0wl7bK=Q-bJftx#XG?Q| zbjj3>f`R z4O7n07uc#j+8hk0EkiKWGMy4;L-F*;ZO#@o&;mV+S&V~xmSG`FtfCmP!^D}eKpbx~ zjnR=Lz@ty6u%l{MJl*|yykDq&X?1}mGZ1l_6=57Jsj$Dplu~v*6*Z&(P4|OXZQmaf z(f@$+vBdXfF&BEe)yK4d%?M)qxvuuZLLXI;Ps>H`z+^-@L^mL8E zdZ;;7a|5rcCl8UcwrbLD%D2D#EmPyw9#t_Hn zN%#6+UGv{B_PAod`cIl_5~Go`p$S(BS7aH9P>GF!@`Tl(JyswysyF-8ka5Fsde8*S5bvbE^5#W_t$=Kt*~t%-%6 zDw+23D3EQO7$d=;`1?_ar%#pi`K+6wyITnLXn1D4+~D;g7^Q7!E~L2IKY_j6j@&vJ z@I^|QFF5FjFyuZ?Ns016r4-nH%J$^Er^|>P;PiwxcoX$P3IfCtBEohE?E78_2dmYJ zXgN(7_p|qtySm%f`q8&&MJZ=Y#rI%O%%q+Q<7I^%O(UWF_B3>Z>!^}68hvEab>doau-Nj`hK!1`D^v`xV~`7SLH z&Bo-rw>NZwC}VV5c}Iga8))?Qto~rMUqugykZNW2`CG|y65`^z4vAR%@}4tU>`SjM zU#~7vlS8R^1oXLSLx!J|LJDE^uoS7blTmh1b5HGkY*^0xAM(hJR;h&5rhKpQjL$hb z)of~OH#viiPf~^Vb@IICPWBnH8XF==dx_$59vlUvknpZH(TOzoHF%8fClV=zh&@Av z^xGL!oIK5%dw_B=vY3d7dL{ij;&a_gr82Exe^9^TfS232pc~ffa#>HnYOYNqxZyM` z=D}?HlOGNSDf&>%(Wfy6U zZFyZ5s={7mF;*WjQo%-b;(L}vqcKQv%IIJ^~J|!M{vgyoxBe{;~=c0kPF&h z-Gm3OXPo;FnxqsP@0jr`SwqRf34RQ%d|6hKCgo@tf*NS|^igHK8>8k{9TjF1(lQK3 z@qIlCp*>x@23Q;VOu=MYKLtr_(;pX$K^4b8AfjcYGPSvaE?#%vLz5NA#f!zCy(DBW zBA1{x@d*~hXmqZ};e-aJezq~?;l_xXTZfnmssLs~ za|^qo0XNn9p-tSBV6i3#*P3p8NLZHOPPc_JgubMgD}s_5~*tpP%G$d@8sWms{%ATH3D-hR5U3W&YG{K~?{REMG?E zj_Bm7MYuuZKDGx;CVcJJ>f6^|dCG3>0K`*^F3lqax8+}v4oXl*(QDDjtGQ+lt5dx% zbDtqqdLJ*!ROkIIGWw0`3h;)ypP)%Ooa0eae9RG%z)rP zan8{eMYtr=8DW{Yb@gxw%N7)a;hjn$lxTMIAI=Dqr5;a@=;gYpOAi&nkg6j1s=m&X z%qc;NXjoMF;Y|dZ1z3Vx&>ar2h>JD2rPT5!(-IV?hmY=hkd3Hi=u6m1ESSNg5sWWV%QC4lH;}g(i`TOTbN$9P1cF z`daCiG4XE_38NARVn!{gj>CU6FO-Uz<`M`Jllw_{xOMT#7i+7y;tObYG$x=#wJ72R zx)p(Puq>fMvxg}tLAm$x-0feqO{7|2b3LN|6mu*4k%BUT^>MiR)uUJwTWyJYB8fIp z^2hyB4JnqVVQorf2n4`8)_lOCGe0#|dIEXAvW#Y^p^k|7D;kp?^e%;2gxU0Q%N)^41+Ts}UA?wYXj_X{$sMLWmKXY<5$@zrYcyzJ$J?4WU26){~Ab zjht(dc!YmNb7!J6L{j*zYzrXLTNxDe2u_@JoX$L&GEnvLM=24de@gEVT1)z}6Jp&T zmda1Jvh23FDu5rA7T}>zS2D=(Pj=ZkyhGS+#(Lj%u^wy|aIkoQ`3JLPUj=(q{`JN% zf{xv>gFD9ams&DzAH^*_gTXNp`TmX%3n=D)p<{N!xQPa#>F%s1UmV8yZg4z^Q-6C4O&N< z4QQq&uGDI!>Zk(fBAvvdDGSJ_*c#xg#)kjDm&<|I|BGXiiC@|(zJ2;{k=F;%+u6_> z+li$8vEMY#+e~Gen0F@g<52&%GNcyjo#30v**aAEM}n>rd)S;M^G$O7Yf`WOavjGN z^9cx99p*iAQ*)*@K6wNPFF)e|7eda*W3FCifWdrVa`co^@BwcBqc_>&lXZ$_os!oM z^r*cZ@elVwXhN{_>9GW5<=Saj&sJPrT^wyDxYd^`&BBqR9|KECGk5&q}d;ZVeN{*Z%<0*wA#`%D(?$lejT4c4Y@xwo9pwSx38S`#`o{)yoR)W=~J>Y{yNK1o@nz}NsqS0iCt-4fti*{X+7=-8~T;Mbe*TS z6$58_f3!1dH_8EZ;2}PDc@^Irl}gq%(zoOqd}{q z()dQFK;Qa&kuiGs<50m3)#=biJ#b>L{o;FjigwUZ^3)a^oXC4U^|e6ozc0ZCfGZ*% ze_}BMw`uOEder9X};9p&>dYOt3aBzPqtwat)xg z_z3*j6U4?eXQ&t<$%nVrio|*Bn#rXD{vcWSfRc{a-ovqy-n&MS=YjigyjM`RHknpw z|FtxXbChVD2-ua4Hoh8_y;_z1ai~srQZkxaDPtjnE!=h=G3Y9E!k+^u@t0Tl%IoI; zIUDruwuL#?Zj1(B{k1A9PWw2{l>vEw9~*swOA+l$pOgD9vhN5pHLduq|X)p1agX>FM3Qal+Sy` z+jQ=fldUJK{p&BOES7J5f+_bW!vhwM*}142epYK#cFmWB;EPqO;?!5$j_;dZ17kQL zrO1PqM=4H;!cwM_z!=q?so&bO!aKY3ZJw(b`8W8IXCvkB$@27!I7*<39xIQqflx;F zAuvlfsc_!k3=+U`{n2BDedukv(lW696L8TE`N(>@Nt*;ot+dG1u8r&`XC_LLTcBcl za)Bd;sw_ZhkQ#xMe>=Fg3FBV7Upcw~2@ogv`rbH;&C!ldRn=7^i$+?Scr!$ly+kC% z`40o})dy#-oQYqSn}e<+KB+HXl?5so6VX@OvnjAi+T`UHMZnaWp_M5QS|{@DX=s_G z03zG5KJhYr>qN4DVS8d$^JY)f$mU4B@w=uQJXf1J38=kasXhGXpl$X&pVsSw7yl|qW?~u&S^XphCly8FCyyk5$V>dP75=f#0-1pqf~)eU{ibKT9FM z%&*ltou&)M=TlUHij{~Md4^4Lm6A+h204iZc>D-F@_~@M@aCLeL@4Wu@G7-kX7trE ziEQb}M4kwOo{;`ND)tvETVx+W2qDN$nDkVbbomARHi-T1oxX1w%6Ixht8bIvi@$x| z*b7oY2)TCbpb$Ok=5g&3D*FMd(@^2P!XA&6OP1nDSYkd z-+JLc1O;xO-04|fqw~hxWLY3=&pCwJ`hJOum4Q*j_d!_O?J3x;*r+9xS9U5|oU$(& zCYOzg-bl{%6P<6FT$XAblk~rRCfRp>Mmg7GHj#e(?S>QdQU<>l<}L?vxa({CW%j>~ z-dQ&}L==+t4$xC$sXznIoZ+R(S!tWXgv7?#W?O@6xYifUohs?|cbxF}n~+cn9g`;$ z$2Z00iivbw50A=+5W_ZiuemjSbdjx9egxgelWj~8%3pts4Evn&k{dz06JXt_(uPmW&0`h%`zKr&wW#coSxo zWQIMMcu)z7|0KD8PI_Vm9@nv78hm`NY&Z^bDL?ruTX6?#&KvN3`%|Uy`j}Q;x^wWq z`E??eGr4*yuNx>Ghn=P)eK-a~o!#|2Bw|6L&vf63#$T_&J^M>y=W3fr)#B4^|8<#~P=i>*MIxS-k?mu0MD z$)7jL?7L=rB_b`XE-*BGMVA;;U?(9=IZ8lc<-+OFsm4kkuP$k{6O6=anEcy($9&1O z^_()tUF@t*6cgQyPICu6f^RB>_g1rd_YJiTKSzf&>=0Q=RsgRCLq3D^EO0g_l$L-7 zgG6E~_%GlKnui({S^ePCR1VUjtp?dOX=mYDCF;~$wvZFc4u*=hx()dqm?5mpJ&>C76pIoR|kRsltJf;Lbo_+9n4!jqr5bJ7rye zJ@L*YFtK-wvYg!L@<#O4{QJY2M^OXry_Z$YyQeFTHCLBo5mxi0Vklgieecfs84vh8 zSCldwa^WLKPN?3Km-nMh)1{2;Rj_+7r`9n^8+7lw? zLqXss^b8pzOu%MQg~|6w?JS`@x&X?~rI8gBguPv`;w}2GZiy)ku!lt)*p6yL|vUF)8W1u<67=KnP2;dvp7@n z>Y8k~^NepuM9$h5={-Xd;C1FVEv1;NgC4F$h4mqcY zQn!7TOMr(>)hxH10NIER9g~{H8+vgAc9L^w&xg^ifj}9+tRYN~7F-CC@roBf|9;(e zl-gV^w;k?o+c^$}0jmjNoIUuU{EZEY;vrt^5Hht3s9~TqHglE_2*|6p}L& znJJhw?<FlQ@nJXj5J1Dc%0M z&j9oCvSY~kcVLr0r!rn~1zH_r?>)m0Xa_y7oY>%>t+98s{`=exJK&+_G?L6V6}8)` z6sJ+G79!m;dfY33c-hb}szt3VDL{l6=A>stCx#CE=TEip-hsXr&&nCm+j?l0+2Q9d z{-0H_$HOxD<|i_^rmH-vOqQUiVfzGOjvAVLwePdtX19J$$yU)wB(?o`)jS^6%a~;~ z;ZQ>sXmd0erS|KuK`$Nj#OQk5?u>dhmG6QnH*_d2vn^k|==Oct&lB^jSJRy`Anj8h z_4`-Wi88K6MI`XACqaKstF-+Egmznw$mw?MK!ZYcrxd(}|5{UJWfmH`sv1D#9$L4y zB*b^$!xqawwK~n5(jB(8j$9ixT`V-@UlOal)jn-L+oxS`*dTJ%%=^^7FWt3$+I}!n zf9ib@cc9aY5V<{fv_jO?7A56M{!{Wf6DK9&F-nHoN?EoJ<=(Y@H`YVb-|@6wN!sSF zQY{+N0MjPN_r{AzHkmWx5YN)DFkpp%FL_K2G3p1ida!!k0I$=nPd=FC)?18^&dUDl zOVRSu=-$1bN~yiF&5~5dN%JG%vnP&GYlHB5)^7@57ov(vI6vHG+9Vr|o4xp> z1;yEw%hD#t13yZ$6--*y@?qoAq~`X`DTGKBaE?EUA;lhwKRo;*a=~BDzP|2DH8NWr zax`q5YNH|mxRtg=-wf@-pIoaN<+N63FYpOr?GKk(N+kG-^Rje^0`gktel-G( z&7_3gwFxKBCY6t%Ld=# z@hCOk8+RIAX>3>5$H#u&ejV>NP$|9rNQ{iG-uI0}PN?olhu4m%)SSxVk4&Bf@Y)13 z#9$`e0>4-*?D#$|2(B_Zxi!6+zNrgj_ID;Xj3ul@=YFkzwPyle|Nkr*US3Qb^>j43 ztuN_fR42dWmoX`dSU~A8rhLjxRi`6mz|{u1GG)0k-$}~;jFT4|Qyo#g4tE-Ow5ll? z`gsuY=_u-$~e?Y!f`-KO58Tho~aav^hYpd0R36x%=GG zH*c!nNu$ViX2@^y3x!Y{RWKV#Aj1U+iaj2y%k4bkWdhOpDk%h=MDH@cU89$>)O<}E zYJB-SucmlaN^YyuN^7vzXbJ!0%Qi9hj>ZU!mF(hjawfu0IR3s4D#a%vLg0u~A*(v*KoWBKS~!FlIXS4A zU}^g*vhf{6(>L_yz~!8g6*I%YJi)y%i!5yT?!*#qkJW+-FVP$APd!UC?JzC)#$(SY z*q1wp!f)B6eTSsQOPaf!1;=kd#<1B_dE!q!PX$U&FrE{eD7m6#NB}IIbEqrD=QyCP zHJm`|LohAqP-PW38lQMy?>H;UMLMw}cUCi2a3e0b%zbq#YJq_ZM`8I~Ch$K|;S*qe z2-A;r^2I2s-pgrDXEvXV?R7;mn=v4sbCC=ED1fmO%^b&S58kz7ZS`^y78^-MF25m1 z5WO!XHFu9|hYNeM64ZK5pUEx)T%f1-&_y5QAw|3;Bl4&pO$js1!Jy~cDED`kL`uMD(!TmR`B4P6>!-7BD(5=DIjfq6lgi{KCM-3Hp{BkC? zVZ8EA#6iCjoYt7B(Y zOXg#3Xpug7;>*r^Lh>S4hTkg&1U?>-arBx{XPbOC3m()F&papbjL2?ItC%5cW&G}7 zl>3Ke-0O6(>dd5_TbqUB10{go>F9JrfVoMW<<6I42TUK+cgU>?DanB=Lnk@-DZ8)9 zMXaX@iTb25Ivs%(o-C@{CC)?fm*MYbKZSDL5+%clyUc+yGTRu0`+lgn%L%ABHS8^j zTbF|37|Kp*GJn0*uH(;hD2hm#w697`XNxNxf~?xoNJE8p#K~SIg{D@bUO8(sCuoMy$TOb>CZm<2t7Ka6&??hvf|ctj z-MCHvTd0)+wVfosSo>L;+t0$F%KATlB{3}rgvU*h0j`*t9+F;skj+4HQNE}r$dIL5>9u9tod>gM^1z-0N^E(x!?*8g zlRYdD8Di_*8prUre4FYg1sH<)@rS5)6k~x((b3haz`Vtk-mrgAV?0kRMnQ|5$9f(7 zUzClU`!nmk*a=mfWr)iVdCFgrQUf8kkrzg07;C$2PyU)`pjB07Fr&@eKdk)m)62<& zLIy8D8>YY27DHAsO?t)hB~qf6MDuW#_4Ai*j@#dkL5~Vnefn4Mjbb2%Cbm}Ebv)z& z(Qt^$WT+ZIy+cd5#qa8TkO4kR9M$nzy1!mIy)K2(Eh9sTeWpNNe<6;3ADCls!RN&$ zG8+;Tq;1)JTWBBJs;SSD4Q0*L`spZbvilr)Ge+KQYt1~z%8Pz-$77*$7KXeD|BDU z{8?tGup1Go8g7%P^kQ9ta(0O%d%n1gCnPDfy;?GY&^5k+3S*+U2}OZ&S~)&UQVoRKKhJgx(-<4D0V(0(>d@AOQvnmvQnW$R~-EtzgO!Lrn2eF$vm_%#E8& z*i-F0UzXxdQX02H*5=f1)`XMV_drbI&QOgqBOY1%Qg%Z{K=eEs{YvB33}sX?mC^_< z%yu(Z>mq?(1#T6RpQzq{?0gIus%<1P}+`2;UFpNb@CF6wDOKe=p< zl7@inp1O@kNF4J+^KJTWImBqq3Z8dd_lDo0u^CC*(rO=!(8z<&n{Jc41HJJZ97w+Amw?%$LjM!RglMM z3NEgp(;6AdkV7|Pv!9@+5BF;qIU-oipL6v&Ya$+a`ix?x8x@zLbg8)DA%N^=%f^mRcT3kA{)a9)V`tq*KR zFjbX2-u6Eg(r(w*Q%tjViubC;u;PHXFh&r7)4&Ri(_ed_Qj;)^sYCa0~s{QdC~={ zOTKDeCe;itnu78CX^*?L`z?lOKr~Yc$Bo(bYs^Uw9UBu%q*~MT z(!!_^aP@Somv+F)KLl!rv)<9D`_k1p<;mw({^lhEkAtiX2R0+o;?wR!*mNss?r-Rc zKZfN)l+(FUchh*qmbv+9h6jW$nT8$PTH!z1-G;Pat1p%&A=O+%1<>j~1Y*ddkXqeZ z2D>8i&ZWCZ61!+V=%5C>^?e9`vYw8k_XKv5cqJ(?@m5;%-iK>ii-g5QItx>Jtn0!H zl@&lIHVh4%((K~6Hz7%#>hZPCElUhDCzP31k@6@3=VHEH@On!=9{%lci^1AiX8gxl zi{mxIkACayjd@)&@Lx!_nK?eVuUj~@b(?l4W}p)>9d)&O@h0`3llfE29P9}vCy;_D zM~^)kw#}H_`M}A^iDW1=G7)2(i8X6!W(uZD<^N;wLcB0G`|Saz!y_GWcyp~DqXr-5 z-wd&t_xl%d{*j%Ww|A1n-o;K0&6qdF-NlJJxDWeBoMQJUd2f9|KF2qbU79j+itTFL zO&PfQIlZu8heX9`L74-oM@`lC5=ygQO|g8KPZ%Bh?%WhHXn-p^Of>U3Dn0LOkv z?sfr?P~_x9++r-T#6+N+Wj|7d&GFbuk5)Wx z`R3pn{Kf3qT#t2(Y?!SX)37$5?_&b9SyweD$@0ifSI4?}016vPF=J(Iv*s_q-PI9o z&#QW74CD5)-oO|Id3Ac4+2kw)H2l#17*J7Lv1{g*{D}@RSZn6c=~J8a!%5*pLjN2! zyf4=vTV^?~(8?*_Z{c=4I>~93we{J$pa!$IT zXnt_P6VIQriY&UgMRf03q(#BQ_K4pY3&+;bQtu+t-t)7@B~Kld$%P=Qnamy?z_c-V z>6(K)Dh+5KY<4@H&kB zsH#Z>cn==jcWCD4F0&2R+*ojj$`*CdP|m+%*^73YZ)QsH%l<2?Bnc)9cQ9%)v@rNe zApw1c!e1QFMBI=bPZWVMjKPY`#!PPX3#q%*as)y42|qrUe?H0@p#$ZYUEA_~ zFgoi)`Zy=nHFJr{W zd!J2J{wsF7%=@@`U%0f8Lm*JTWbkM_o%1E9xyLA|euB6|m3^SMj(@wrVj4hP%|WAOgC(=iOdQ`lw;GAOI$c#8_uB@7L^BwQ85 zR3YiMPggs0`tBVw7Ur-d-yVDAhSinI{a}1~??l_lvzi8-v!f6-_tAt#S1DocDGOpe zL6~j+>^5WI_xS!@WBjUp(SLD_8?kzUpN;(6#Ip97{WBvbDS*{xg zw|zgljCGkpeD;a#Tu0>f!MP^R8<>F&LRF+z3;e&4A@UhvDn7RD24FhN{Vk#WM*@esB3?fTdFa}5XNQsS!Ra;llCIJ9gaBVdEM?R z;<4AMU(>u{Z}Lx{fBM*ZZtmAFqd-L&ys9B$g#6{DbvLOjb}WNBv$VI|ujkhzxOt4A;tHw5EMmuG{u`EiM^Qz{@#GiBj zWq%0XO4szEo;&WX^XpgbvlP`+U>~%Kvb?<-J|QOjrzPrnGUltW#n)P%zzxE0d}Y`TKJ4SiJQOmlG874Wt`*and53|xVzq;6=^%t)_qyPJGl+KXE#8X5-NE=mBVIFf>VLFp!h z{#Clw&8~9Io%?s~P0P_XSu!Mko;;&%mX_-iCA(_S<+icamUiHNi$9D#nR?G6Yi(^4 zAPXp8_J>_5ecsItDB!lLBHW1Ot(mAl7M!l3ZQ$Hf7T@Ku9A^efO>_&mJm50C7JG-x zKp8nL?OLV4N$N&KBZUu@s7 zl#P1tdGbp?V%bgCnEUNatK8OeR>UhdAdW^;>BxR_U#Ozs?v-gbuQ3gPB{Wh$U=$rd znH-bK7PCNmwlf;^um5I)+p^?ri5P{>3!E)bOjYOA`jSDFQwAg%*XrVA9qCM6a zuR_v0lsPf!8#K!p4U0D<7a8e>j8|I=gUJiUt6+-Z4@7;eSf7kMEn)mhp6g0a3QD<# ztJ9=qf}>1NdVD$wHd3Zyh%sc?mCZ=A$5;^<%)KvVqxGq!*AQO}?K+GaC2v`EJFITA z2Ld6^UA=%htL-DEr3OU@2VQY7T9p@cLg4QETWA+$K7?$tuhHbxMMUsY6!ZqTRS`rn!3&LzQgzC`J@XBm39izOI zhqGIr!zJ7EI|Ziypg>d2WR}NVIA4del;QJj;Dcbre?$gYt^S_{?Ox(&n)g<;gDWU~y>4{<2sc`MOM}-lzZus%WsP6Hs7rla3Pga`ZMWw zWx#ju{StydA|8N4QP=IQ|3c#gHO{{yCz>?JganYsNN_22D4 zmYLvky~-T--$T2zqP5qxrb% zV0)U-%a~-o2^0%AKcy~**ROE|@4V3=F*>T-OsigJ8jCsXs}jzkBh2Gt=ANY~u-CtX z-dNXP6e6k!?r2OOT^Sa(bo`}S(px5!EaTC7n~+U2*p%EpU7}u557jXv9%;CA_b)oW zp3E*&o&4kBs2rp0U;$%bx%QCaMx1=0GRYi&dw?7XqN7h}U~b#hPLi$M$iwp2vw1Vj zrnAW5BF^exK>gWR+9O|T=Cxsi`=3;o{&uG*%Ur&^6CT7)ChYfRGw-!U&(BgnhlmT( ztaQ7@q@@71_K4dVwS#3b1Qzvk|G7t1@V%{%`-)dt8Z>$6cl>|6y=7bz>>D*;k8UXi2}xmeN{<$48Ka~GhO~5dDKWZZG{R^kMo7am|M&a-eLg)O$L|{a zxZ;fCJkR53qgbRfqKHz?)SIPd+LL#GW}7<6cJFM_6cvnp8P~7{XnMjwTlx`5+CwE1 z68wFEW^`Nk4ZK;e99R<(%IW-#Da6i!$_0Pw6u&|yvWDc7t2zam(CwYdCzbDrR|fF% zM_bfA-pm$tRSH0S6LB^AggKVdVletj3h%81H;c`w@grqlbv}z=5|~Emx_~F5IV=cj z#EIqW)iq~pmKg>byy@=&+6xmaM||#Kj&W<@Qe564E!@IO2*$b~22YAL*SzFriekav zkrWu~T2;LkCd+pqJ7TKS#9JjlII*l90km60M^lx7aBNhV^p}DyO@=Kc)Q(kElJJ38 ztkPXAwF1hhamPwNPMrBo&@ijEPB>{>kSfMyZx}EVAr$ZP@UzV{Yp-Fmm zaf@u!Yfb+1$pD#a8&Aa-N7}Y+b!R)clVA!eeHjIaK?F=ner9)+)HXdDr*g!=Y1aL3$X`%MHOGS&I=$IRpl<O)$j#;q^k=oa!3ShRAxX^r2 z1;rcHyWgsG^BW1?(0fZ$OpOVnZ*nd5VuxS82UdzP0@=w_!u1s*$aY_nHIsfxB*e?k zQ7649kq>DH=vts=zHZ?=anC=9RU?(}fTh77%4s2G%nwtIj-D5wI)4fRGJo2|#zmRQ z@&n#qJ$T?vWYx7YXOQ`G=)0~KdD8n2lLTv4zkwPF-+XMzck20}gH#`U_)~Xx20jWs z2ioAjHkOsPP*4NZxKf$#eMf%YH7=060CJeIa!TFcricw4z6T?@@oP*CsUC`rS$#m> z<1;f>!p9H6x@APO@4a_lw?DO@5{G_7Jbe`WW5y==LmIeSr#v^* z_3r8fxY}iy$<3MzlJ-)0e%s(#(9#eXiI@6RO;0hICpvQ)Y%9scZ3eEIREY&x4CAz zYx-qI%q2akK-r>7DB~7=8y)EOrhS)vkDYzdLt!o>EPHbp#Qh!BJjEe>RVnpyc|c+J zl(!zP_qCpGuczs9@vDKEtALp9midzLdeHQ);mE;nn1b)pWxb$I%`L;<1uy1~YqN`6 zjBlJImZmB_YZwl8&JLQ}ZfJ9CDskN)=JUtyIwnKtDbbl(!BQJ;sP)DCNG-j+6#DZY zOliC6cH^HDEt`=EALCtY*(kE$=57y-hVES$jNLZViE~1&dknBz?afVf5`pYF7-ddu z_|I4H0?;#PXxf&jzVzXPkckiv+-SprQvCETKo%s+=n3&4ch>wZwncab3OTZa3B@V5 zycFYyaL{wz4%mNpx#~KQg&@JdUzFY2g%EC;%$_dMiLedxlr2AJEY=Tn24uxPYE&uD zBO$g)z+SvUea3DqZP=?*MkdD~n7NmN(xQ-$ii9_PIn}rl#)*CzOY}`z<3(nCavDzx zSajK#3ijo9YM5`(q9k@wKBnIpy3+VaBA%TfjxO`k{ zo}*YI-$JoHN%Lx&gO6pruJ>MOl2$zdh<&b6Gce;eRM}&ziYgF32m|--om3G(4nhq=rd)grw<5E1QGWOA~@S6ELIwP$?30aOBXzs zeUMxhwH~#c6_w}yu}4l`YVlRj#>IETW2YZ#NH-*_G`BSkLtpn)&4vv>-SQl*-6v9=+zwfAI)V95vlYRm% z=m(h!R+VYT2yN$h_Bzj3mu?7I$BtzG(C2r8|I4p48rRf2vr{>$O$XHxavft{^r-zl z%HtZZ_wLBnl(V~r{AS=K}yZlI|*}?6sL2dV3`L~Zdz?SM`3m5St zAN!z1=MFYDv$$4l3uL6Tx^N^%KkiYC_r_0`ktaC5Jx1|OQTpI7phExU= zkC?Ylz+%oe{+);KLmk-U@hi3@YwcIdg6OYn$ayWEs&UB?>wji%@;OK5zYIH{{PG5( zV@Kp-ERJa(w!$Ps0&dzlMR<6oX+nJ|J^X~NVW>q{~we@cNz*70~M?GZo-HDiG-6TmB#G_w8m>Cx{(SC(FzQ~*RI zc_M0{9E-_=;B4mxWs6oQ~!`}u>`5>?06%|Ub>W!OZi1WV_P}$#VD`$c4Fn9 z4U#>k95;8p<(h0B{~R7@tlCL<1vlG{^HEWh$xXhYkIcuT_{iIBh15Aa#JgUQb?&AC zv>3$hSd}Y%>UG26c_4VD6q#Q?!95V@03v< zX&i++S3aQnePWc4;m4`QKF1^G2V|o^EK|HK@mZk`ul0zF$>B*?P_`xrTuQDSP_9tu z{N5ArlrKp)QL^v-kwFmF%1@)?K^dsxG5(x=3eY&L@BP`ugM`cyi=$zIuF+SIl?T=i z5i)yB!H*ERu{x~0&RV02oN8-b%J$*pAgwwdg&9Cx%E z0YF_sY8Dkw)H}%|zSpHU2(_p9@ujXZ{(9Mo?a<4NH&CEA^IQx|t8T>u#l6b~ z!Co0DAZOV+NVLp2U{~r0R!efk9A2q1Jgw8Lkcc(2Bwi~ZfGSJ!Z$s0Jfi@T!?-MiH zRE7>8xF}tGW&lZ%0=4YR04}7_gqYP--bkY6lcQp}v}iYI$IR3A~O znhQun;m$ExY#pi* zr@i+xRFnsTPD2D zUqeEzFH=lBR@-6s)oZ~ZQ{l5K)te(dO?`UDBKmuWAA!PVHIFg>zB`|P%wpATs<#OE zx-8hz|C;|}nPvJZO$^~1a0&q8-TO@=toqaN7n$&3kdov3nMA|RF!H(VMN~azO^=>b zAnXJWico_;iXyu34(l&hG;QqXstfdW&Pcs=w~l zS_ZHI@GO`M(rd`4(p?|-F^E&sIJ%y?{Bgp(T|fK%mIp~@{2vp8e}_C&Q+r^UXm{T* zV6kvK?-0uxg2sn2aSA466R&7j#)X-kPt~2! zwK<73Kpp%@a6Isd<7wbh`JZzsIpqLOhp2y>?EZDl2~_<2v(_hxA$6CX-|$C+$qfR` zzeC{hR?gr}>$5QR3pg-GmAJ#|**l&Wah%mZ8J_UV~H4iP|~4toK1b z?We6z3|e!==;wO!s)`CaMrpL&ExC%LT877jb7GWF1s3%m_G&U*4rWKTO%`(bbCx%G zH=T?<#vq(d8mnqe7uO2udG5bSKH^I0l^;?5=m2kSBh4N=iXkfZiJQuE6h#N@|e{2YN)dMTZQ27vYrh61} zh+T%e^4z?=-cfx=V;dGv?!OT%KOR!}O(#2k63Kl{6>|%K2ww`38mcSg_hbBA-tUi} ze|`B{j!a1FP?{t~~9c;5Zg>iQYS_Ihk3XR@Eg%y)IX?L#QM{n9AC#0RBck0vp4fFRZct~D5f_B z#3`{Y>>aHxuar5rZ}KLCo&3nA9)hX`XWyLsvzF}^CGYmyH1=o1>QG!XoQak~5k-C< zd|PB~9BI@{QgBBTyrYwO@zDX+8u8W3<{r*oqWh=N?iyYc85@Q6(acc-{u)Z|CKBAo zddtkLOWD^D=?g;%?iHJ^LVpSc2o%lHV+vaR^HACxot=X#|GsZ1Ioa_v3+@Bs&HnI2 zyt(HMc$=WnR`!0C55x)`p7(< z8IP=$RE_fsG;dIOvhHol$(*gMKpFf&%36fnRWYrFP$efwq^xyK7e5vF?i5Y*h^^F5 zXQW>zd@8RB_|daBW-B&c^1katYtso4=Cw?q`-TW}@qQWnBfqyqM9q#S1BgJ(^5M4L z&012CWN-FeF^|Dd)zRCcK*#Ky7vdL_+NVssP!)nB&IFT5P>lSO)8Hdm3gpF&Lsls8 zrw59xY7Bq9R!%%x0;+b`D@VCACRsIw{mygAr?E|D1|s#*4sWt+Ud!|HHttNb4Q(Qb4BWjMQ2i~|lCQj* z_`@z*=4t*@u?hn9%9n<+qa*yinO#6`}ho5Qf6wu z^56^~mLt?u6JF;@eo}oUxnJu+-n94JVd>fdo?gYY?`>`d$gF`(JDsGz?pjSuGw&-h zKGSHiR?Xv_c0@D|2z|Mob2%jbk-km?UA^|GEUmHZD^dpsDxlMnNh6W+N^wbPm31vg zh`Au;bmvx?==TN;b2oA;^r30pryGr8A)gk~14`qPXomJL8nFvgRzdst<7@57Q0`0?xFA3pk;sXR3I52 zi`BI*Oj{B@ZC-LPD{ne@uJ#<++vuek6`;w37!%Oz9(^=m{`>b-D6kGSMLdYurB9!S zNjKkDwm%e5#cX>}rk~?-z4b8Dd(L~_8{I&MOrET$HobVU{ zF8Qx3_EGHkqdW46&qjAy7dOe`Q`Zq3xvwL-DN61PtI(O%eMcW$S{s4-^WM-g=#2%5 zqk0|PqKk>4{mjU;o~5qVgZ0Bp7%QS#*ea@QuL>Zc*bX&o27Vjq%hbL1)gH5dtV~}0E4npUTX!Ucyj(>q+IY^mbO5*3A@8X(cD$A38)i;l z!V*VONwzID|5ajltzJ?(x0D2xi)T4%%{qH|tx2^u^vC~ll81kykb8S>1e(uGpYf;t znMzD*qZp#q$q%zKSy<(AT&LgeVz_X!)zaY8n+}xpR#*^o4^T5X{FK~ocQf5^x1Hw# z#hUB~`lysVZx21m=Qg6`oc4Z}4L=~KG4}+ea2sYuIp+O-rz+Gnr{%<1=j6+S8hS@p zPn5~vPj5+)ZR5C)5ozAfH`;!)v>9 zDiszxvv8zK;!$H}T|iprq6(VWd&llA%S$I8Ujl8M1*Glj8dL$yn2}#T(zCV7c#Y=+ zDbv2sJ3bwuuf*Y=W9Z`$X&z_g!(Z9q0)06E;tHQFvRS@;_y<rYag#64|jr$ zENwaE%IT2%?DYiP8PJ*9+2G<~?~k*cO>lvW*lGgq+Ke)Yp4LxBX8xW;6-m^RkhRz; z3AaDv^AZ2CyrvrMRQmptQ7+f-7UtpU6{VYoU(^Y9%ACo*K|ya%8<&F1`*R7pHlm** ziknF(7kz%scXU>3xbLWQtd(^UMQAM!8`i|4!Gz>ZpkNYa3GuLoSf18+!&ZpRjSd5B zT61ohT(@MA6is0+h9h(TJeG-$1$4~nww8a3kvbPpzm+LyWBqSUetze@2FSW zbtcK$9AnOD*t)Ro&$lnJW6qNu`W5C-BgqfCa1NGmBPR}%InnMY!x~p8mua&o59g*8 zm(R*=Ap~kwiXaOV2M4_E7ulPRbQxDC!z@TnJa&2ZJpJtr92!lT|i+C4WqE@(}TwI?6oJ1|m=Lt4uD_iS zEUfed^`#zDtI!*{BHz+m6ZX6>99Wb5RH^BQz-xk>fe-dkLg4<=vs0kEk9mrW=o<98 zHrZjA+0Fwbxt7nR*!Bt18#-7^)c@=G7z3j&Iw9!xX?*Mp|9Cmr6Hz_f>oe+okNxOQ zLc`JdsS~TaMX+fg!5qRlX?R5svpxy^wXK+GILK&-H1SXBm+b^z`P0A_o_mbq3A2lA`&blaqn3pIIMirxdGxaB7k%o^8 z1#@*E+5NPy7Cy+LssAii|SJ&S*Jhgt}F?v1^h zLZcsnXv3m~yMGRk_ zvDDrf#U4I7#2K7&#+N1$aYl2iu+TfgjG~qf!rUDj0W(V``Z^n{!J7K`EImMLhgt_BD$UXEZDW$I_t4f7`>~7$ z!mhz1U;BO?rEdVK-!qx22Is-NAkCtx!Y|LpNv6y9nMdlj?k2NE_QM{j11mwLtBcqg zCptDr!wr%mK0|M=L_*oa^*L|c)^l9>8bpd(umh4j%Yk#*%_xaP-z(#^XX&D;EZV%` zvx3mBKv0M*dB*;gb&*XURKgj?KoR+~T-qF9eo6uqG?TdaDOie35(^#OAqwEUd4(uT z9HDs@!m++y8;55r$_6fpKUR*5(+R(NhqxMmjyvHq+-sJ~S6^eNxi7=gBEkR9NbpiR zJA?VCBArIOekZ6gPn=-%V}v5{J=0Evf4_92m8Z=mGCZ|G1sLo*SJ* zpX>!B2r)q|)>B-k*8eR(c`suI`jJ3--(6#N=PiY-PC-TGZ4NK=9+rtax1YHtmc&OV zpqNs)K6X&2dn$1b0usR2-hK?1f6Hz@}261gd-sGfMl7E%$)Dcn8sSmpL)Lj`Pevf7YKG95%2gINA@%$^Kg zZoN)rbMW@X?#Gg*mND?xV~3~7&1tT2ZcktH`O$nKhcnZdHV)!3SAGhB5&+V4Ab6d> z_+9~?K?i;b)C3q>HY0v2S?q7}DeKObC5+rqgpE8-PX@L7f@HNIpPJ$~jTu9BDs}ig z0gQ~#EOm)LK>&`dqM(<#I&#JcWY&*0?p_-~%r4F?D5 z`$zHWsl9Y&lNB`13aP^a!;rU^=I7h*B=li+Ev3A+Av$R{mx z(9H}YoW^vFCznZU;cSb`PHDpGr?!bG%KC34WAPi38b0vbSaNoizi*Q zu!lSxOTVBAbQ9Q(hF9Z-k;YRUmJyzBu#zr6Y;=zxQ(2JtYe~*eywUX>>f|B8V zf3UJ^B%1YQQgD>LMeVy4cz4~zGMAlH?f~kS-?WHj&hCePPr)rX1)s=sBnAxQ+`p*0H+QwVf zTiVq9^?s%e=1o(!f2w~AYtItSsc&QS((ByKY_UMk58mY*nj1Kao?R9rKk;hsI^Qgj zw=~Su|JV_pFd-Vv7^(C7Q=J)&_eA8I_fOX=!?#vE1`Ou{?`78mu|8H>I)=S(DgL5TEHw9=Vmq8cTq4gQ)kx%Xfexks8 zlbVs|MvCX3sB+U@#GubfOdEy+jxQ3l@dIWq~#t^?_A#7i1eH z(c%n-=hpHh&R4LFBmQN!!S?>0{o%C! zR^3Wu#=Fchd*5@{#lDeM;drO6)ql5L?Gvr&!VFu8Sp$CIF+||BcB{SJAm=BMRjqMI zrERwt0rg=!M!OStnde>XUtRqnaRn;Er;eABYTNam7gd$KFL8u#49=3D3Kx8qgi(?> za;+Yh9=fv@YdI;%LXohE=ahBnfO#mv6Ui!GC(6Iw zekOoj`}@P>@!=-4UeWraem7?f2;YVa`L+Y|pGmGmR9+eg%?y#3l5XRp4F`RDdrE3I z{deB(%Z3^Qs3KEEKqzml$Ro<4zpQiD|vBuIFpB6pHS+$LI6px zOwKLTkaw%yQ=OQkq$)PlRIqhV55l+RBBY&{yA!28zdC+pg;EOC$3a4cKr!2^vl)^M zUe>#HZZjR1cKSsKs_>27Z0TzjC;kIu!T)+so}*1;utHUG zU>`5GH!MgFUp5kudR(?WU+?U87ZOB@uoKjRr}M?}K4w;Jr8y>t5B{c@62smtz-y(i?Pv)R z_N4Nq1;6#Pr8k5asRgX0Y=S&d--u}jpi1Mej=mmVmg`An`Q7DK}(pDAn3 ziFS^xcFH8RUKVV;FaW!X+=gM*=}mdsEPj-Tti_LYrx`BzA@08ZbX$$!?CEC4B%>~6 z`N(C%JK0Mk1XSNuCp*|2`QLr6B>Gvm5qyblL3{E%Q;rQKU z**6Dz6C$#UoeCmGS(_htW{gkCVnQI0mz)8LH5nxaD-(Bj=P`FPFtHX$SRz)39xqDz zDbY9yV$G3}442(At>@KDkG(Pgi19uv{Am9rTz`u&^6;bdMZg3op1tRd65SMu;;Df_ zki`>;lhF;xR)XjFDissM5()njPX3$bsQA|@BcjOnjJWpA&6-}FeQkTZnvXw$L(juy0-ncpAmxmiD*8b_r9JfpNx7qIM)Cm$Mb86j)y#-0xINm?ENcK|k0wMZ^ z9M)w~FHQS>=UPmVbyAm0DA4~V<;8)YLx7R{!HKNrE+(QFB}7ksA?5m8F1kmkA@)E$ zW-u!1F?Oy6bdx=DGTs)BA(IMtd0UuEoLFZfZt+JIaVoz$CEb%i0qt)#w+a0PV@Oo{ z_|)aKAz$rI>;Tz`i+I# zi4@(hO!wVyRBr_cnwxR-1&8=4ng;aMLP+R8`U!>*>}Y8SPQO-BHECirB+3HGipc&flc>l>G4KL}-bS_CXY9&ROCYfBx+D3g2^Bf%rZr2Zvg9dfq# z^mdEz64o*_|yd2ZLMrs-?XRcHD%KO`SaM0}nEP?c#<&IZ1 z?df7yV=-p?U9tJ^be$pgYp?7o`Bfb`9Drc#3n%B}YT;NBP)yP@8)$^+P6A@@2DIfA z;cLV2H$+}K9p9y4T8nvM6~I5qOr_JiRByu?P6I{Fzh2FKoGuYBOvu;YK9ZlvODrUdHLJ$GHveKcc*A#)nk(^GqPo}g5>3Yl9yyiIBa}M;ae$>H?XTgd$qSU;E zMR>iWA>FYe^f5c}4uVjHnZU|@9OgQrs=%v@2LWERo-=0AaY_qo?9D{fm$Io5|2!Ax zq5YgY6}+Y)vJ#@$z9zo)Ef{&0(yKWV5lm2bcY7s#bDPKOUsyOV`=FAE+uw}q;oXiZ z;isL{ZK<;%cv|b9x#BpTRtixi27h6eHH1h{aFU6wVRlNJ0KK*xVt^4n;^4 z_N8alYkjuG<_E`_ z4nn?uhg$@g5E^!h7-u&O)>v#SbTL9Uiv8Nk+^?cW8|dC1g@hM)g@}+v?&E5S6u})c z{4W4Ba%?qdJN@fSGX>IKIM|I&{~aNLsC8{QS5HVhE#}7kbdVTti0^UjyTXCa=I`rA zOtjkdmoNckR4c_g|5rh0P9V&+H;1l&CFAg6T%_BaerMv&+R&jLiOX)IZY*WoR2?Hb zKTfyXevz*5X3k3Pp|@fAo6Ne{48N1PB74WTCXPAw-|7ZLn{+g$qFWH+_#JUAjQ;EC zw}m*O;`>zT69@aEAc#LmvsCY*KaN0U+SO=RI5oD?bF_MQ2lh>M?_N)0-gQ}p%Rrre zrKcO_;v-eH-%!4lK-dr&p`O#{=Y-R!FS4|%x{gi|^0QK&_CPDQWt;wv+R73mQ#9Yu zO@-{o1Y_;tQls`(iA$IDChp4o*w-0fAVn9PLfs{-Gy&`<^_ABY{n}+2@cqgmgDS94 zt+(Z_ki`62acJ3M&FRI5oL!2eSM(3~zAiC8P<#wSx!#Z>?Yrx=H2R{m4gV zdt44vk<#N2Rhvx*K4jX;%^z#wvfo5z6;52LOG+2~A1}T;AReduffL05E04dz{YCj6 z#{WkPev|TXwVkFGp5u7WVu&rSiiqjN?GC4Ii1qvQHkbaNL))5^$Q^io+;5Bvz8e_R*X?uRSf<4E?^x)hD^mt=P z+=t8jILR9GS*CjRMhOrpbvxaP4QsvX&a~Pg-zM@sjk>cQ@x?gD(2}A7NOF5&oN!W3 zJxGOf>`jVh^Tgl)M-iBvgHs}CCL8zJDJ+;%ws-T}D~TIPm=+f}EjmeFZk4*N ziJfkvgir}kmM@Rlw^IK7hj4pwpkW+8jhhu(N{^kUIooHrGCsG!*8DvuJ#yTA5NEaZ zFnNVLt){2{_n%rLYmhjZ0hBa)%}ejX(~?O}vwv(}WtZ+QAh6|TnLseGS?tb7?Joc# zoLwKQ%Suo+IXMvmn!1crx@t6z^AWHWl-G%GSKndM)XWW2ZjV+b@bGSH*2Y06W6@hg zx!oKB!)RkKV_LUCFt(H7mJcC$xg~PYa%{denl*G$R<=7FQlf~UrK(@@vHv^!4>s?L zpa+dEso`J{*n7X@1@_h4WevDQAo#_SSJy8S86#zA^Ja4HsVfeJ+2S~PX$$U+k-W4q z`tb8#Y^k$9r{pa*re_mJpMQ??C=`F`;4ujCeVe6+L44PVMiZ|XZ%wuBk<&hQZ5bKm zJ$YY=&6qS@AxFK;#!0h_h4t~%^Pky|k)7dPe~Tsu=;Jet6g{=G#7Vb2$eqJk9r7&$ zX^(}k*-O-Cgw!Rx8M<0Moch@J+v)Jbt;R)so@me-?DUdmup)sH5dp20Yy`y13FiHM$s>!D(#Wwl&jw?HjM(9dN8O zvfeGSfMTAMjoaTwTQ1d^rH8tKgz za5cXygd8jnI4w?jX{+Uyo>jKV+BIIFnTd0_WUHfc#E!BN!pnYcZbn)t9N{}X+BDE# zj-PxU#ntpXVY-C z-<*aiD_>`|Z56pmzParA*FV1pqpgeLmfP%Uv82HaisuV~I_jBYS1+!+L3o&7s>si7 zS87qFU)()nl&3dWTuZFQ7o^#Hs}?Nqg9BVNMZL~y z&Sy)>Fca)Vj>>i;Zpa7$=SYFmN!ElJto3DiW=|eInj=h z0XY=iZ}eiKG}8}luD#>(iap(x{(FfM3IHCRmd*H| zEn@z%2++EZ%8a!K-U0dEOUvn-Ui9m&{uM3o!$z6HJD-Sig#oDIb88b$HVKH~i-jRuIqYFhcafhXxxm|7-2(tvGcq$r5js<;-9Z45;qt>)p_CIrs7_`>WkT{)$ z;R034f(%cC!LNdxs2BzYocYj`vnp%ctD9dny*o9(zOF?hVQ+okvFXJT~(`PYGX*8K}K8fz;H})OWXb zS6}WP5F@mmkB2MOd^OGNfo2q;EaQMT*g({1+yf&HtOw3l8hsimFa}uJ|vLD>2wf1Wfbq~K3=t? z`|#tQ%da2;l;qWKvdn8-&92Jld?g%%!>m=}byaJOYde1)aNc&&JsNS4K%-?m(Q zyoa5Tea1QM6q!b!N_ik<{(;u(<{Tw=Y1vMN-9I355_)xg7Q7!Nyg$!7+-h$C%HnqE z#}(m9L%%F!`W)Z8Nn4EYlBnaGcATT|qRhTL{Yd3<@vSNrW~IXQu2nQZr-cjjQ;?>v zn|B{c;XJdu#0H2wUofN*wN$8ngjv8F8IDr#*qFmiz9noA!*U2g+~e{`wvEm@DumeC8jzISL0j^bUfFsdh=C>Y zpTxa`Z!*DOUH^({bOl`PQC=Oi2Oggtb`r<%d(mXS(%kLd9(mGIK6wL!2tYjsP3y8A zjTpNw526NS*r3+sh#0!N4{~bCzYByl5oh#aHTyC3pm$!LGSd6;C)4yGJcLy~+UmH2+-`q+h$)2(MqS4`uwk`a#z>0G*=f?=TGZ8{K<<&_f{L+_kcTE+(o#lHzWY-apM(>u%fL-#o?*X(RL+KvxfGbNPe8j?P$u-Nr7ha!||U{1;9a zSHbo@IA<-&gc>xW!)%sBwvPDn-`<83_q++sMR2H4xjhCUQd*cirJxp~XRm*I{nU0r z(IsHq3IO&UpVI0f^C5t{^^>PqEE#>Y>StjgUn~km<9n4AOl^+odqg&ef46_&e74bK zr|p&d|J{&W)<=(;yxw+(Aknh#aTu1h8{p?dtp9=Ua@1duplEbwFzJgLb$Z*`h@fw4 z#kr?{N!(}2BT|6=OJDgD%juCba>NpovEN2lH>K__tj@kIMz(OGXaDI?t=6t|$~-6{ zT1@pJv%NXP+mFHvxOl7fwOt5@g#a@z`$kbwX1Q@4&BUDkf_87Jp@+BzMBE zww%zeTyhsor(4>U#(wB?`-5X8@&g-3h*88I%5{*ZW8kyiAIeboVeYP%f!+DA_b2fU z*tkY)FT(iq!~W?D^|VY!W#{*xk!D3MIIe>bB^bQfwM>8dK5jio;IMCxEuwA5sf2v> z)dw_fmcX=IKxRr|NIkan2-p|Utb~nRnEUCJp77aZEd4>h6_Ew(cV&-|Wudm{&U3d$ z?8C&x#B1DcBo=r?s1tXtUL{9ImLo-vE_`)PTds^vMWOPv0o^lfYG+}sm)+<9N&Wy= zOo#~PPv77E+qB~Y9>p8=tCJ{y9^h2S)5T1&{U$6nR6AUF?_!>rfoo|t#VRMv4VS|E z$w2~f7KMh_ZoR40W&OvjS#{6IXGZQYDv%ly(%6{E;?0cDU+jGyxG|VImco|> z`f7lL9!)_3?cvGx7yIvYK4~Ld>GZ;PjW8`f*ZYq;;&G>6xXVpIY_m_++6Xh=OTC0Wk=I<`toImXU*ef?WQk$ZAMKzK+ zzq=GhBK2V{w&8q`8$PJ8Ul;henl zKQ|zGfHe48DewP2&48_Uz4Y(}v`5%;EjL#`lXH5W=yz2Kra{jH z{?FV^=CiMib6<9E@|&bBzYBpQJ3TYIK{s@Ui{7g^XP~ssXRmQ(Le^9# zftOf*oZr3t=%Ot;?adw4PY&I9-4yuoW^miF=l-(OR!(1Xe(IN(!EHzF z#QVDT`RjD?&ffO+#nyY>z+%Sz;m+sty3fuwKmP0MYvZqnwj>^IyRobEb>F=z#@FWg z-7kUt^cgo-C&w&{o4n^~-I+I`hRKC5_wy;}(0im|FpPFk*9~>;TgqhoLBlnRt}oQ~ z&;D0@-gdfX@G_s7MqhV*vB``rK5LqF{-pm0s!BaI mW##r|PEou6UzGm~ME{pfTekBCm-0gfAn Date: Wed, 23 Dec 2020 15:45:49 +0300 Subject: [PATCH 204/486] Remove fs.microsoft.com under Maps --- windows/privacy/manage-windows-1909-endpoints.md | 1 - 1 file changed, 1 deletion(-) diff --git a/windows/privacy/manage-windows-1909-endpoints.md b/windows/privacy/manage-windows-1909-endpoints.md index 9721578892..9fe2ca8cc1 100644 --- a/windows/privacy/manage-windows-1909-endpoints.md +++ b/windows/privacy/manage-windows-1909-endpoints.md @@ -73,7 +73,6 @@ The following methodology was used to derive these network endpoints: ||The following endpoints are used for location data. If you turn off traffic for this endpoint, apps cannot use location data.|TLS v1.2|inference.location.live.net| |Maps|||[Learn how to turn off traffic to all of the following endpoint(s).](manage-connections-from-windows-operating-system-components-to-microsoft-services.md#bkmk-offlinemaps)| ||The following endpoints are used to check for updates to maps that have been downloaded for offline use. If you turn off traffic for this endpoint, offline maps will not be updated.|HTTP|*maps.windows.com| -|| The following endpoints are used to check for updates to maps that have been downloaded for offline use.|HTTP|fs.microsoft.com*| |Microsoft Account|||[Learn how to turn off traffic to all of the following endpoint(s).](manage-connections-from-windows-operating-system-components-to-microsoft-services.md#bkmk-microsoft-account)| ||The following endpoints are used for Microsoft accounts to sign in. If you turn off traffic for these endpoints, users cannot sign in with Microsoft accounts. |TLS v1.2|*login.live.com| |Microsoft Edge|||[Learn how to turn off traffic to all of the following endpoint(s).](manage-connections-from-windows-operating-system-components-to-microsoft-services.md#13-microsoft-edge)| From 5ae61cdbd9ab3c9f0d7726d6568d0dfbe73c2c8c Mon Sep 17 00:00:00 2001 From: "Trond B. Krokli" <38162891+illfated@users.noreply.github.com> Date: Wed, 23 Dec 2020 17:39:42 +0100 Subject: [PATCH 205/486] Defender for Endpoint: clarify Note blob contents From in issue ticket #8810 (**Confusing text**): > The Note about server licensing is confusing. some words are repeated and acronyms are not defined. Please review and edit this so that people that are not familiar with server licensing terminology can understand what is needed. The whole topic of Defender for Endpoint in regards to servers is very confusing and needs to be simplified. Changes proposed: - expand and clarify acronyms and initialisms in the details of the Note blob - convert the list within the sentence to a bullet point list for better overview - remove a duplicated word (Microsoft Defender Defender for Endpoint) Whitespace changes: - remove any blanks at end-of-line (redundant blanks) Closes #8810 --- .../microsoft-defender-atp/minimum-requirements.md | 13 +++++++++---- 1 file changed, 9 insertions(+), 4 deletions(-) diff --git a/windows/security/threat-protection/microsoft-defender-atp/minimum-requirements.md b/windows/security/threat-protection/microsoft-defender-atp/minimum-requirements.md index 98cb4690dd..b1b97569c8 100644 --- a/windows/security/threat-protection/microsoft-defender-atp/minimum-requirements.md +++ b/windows/security/threat-protection/microsoft-defender-atp/minimum-requirements.md @@ -44,7 +44,7 @@ Microsoft Defender for Endpoint requires one of the following Microsoft Volume L > [!NOTE] > Eligible Licensed Users may use Microsoft Defender for Endpoint on up to five concurrent devices. -> Microsoft Defender for Endpoint is also available for purchase from a Cloud Solution Provider (CSP). +> Microsoft Defender for Endpoint is also available for purchase from a Cloud Solution Provider (CSP). Microsoft Defender for Endpoint, on Windows Server, requires one of the following licensing options: @@ -52,7 +52,12 @@ Microsoft Defender for Endpoint, on Windows Server, requires one of the followin - Defender for Endpoint for Servers (one per covered server) > [!NOTE] -> Customers with a combined minimum of 50 licenses for one or more of the following may acquire Server SLs for Microsoft Defender Defender for Endpoint for Servers (one per covered Server OSE): Microsoft Defender for Endpoint, Windows E5/A5, Microsoft 365 E5/A5 and Microsoft 365 E5 Security User SLs. This license applies to Defender for Endpoint for Linux. +> Customers may acquire Server Licenses (SLs) (one per covered server Operating System Environment (OSE)) for Microsoft Defender for Endpoint for Servers if they have a combined minimum of 50 licenses for one or more of the following User Licenses: +> +> * Microsoft Defender for Endpoint +> * Windows E5/A5 +> * Microsoft 365 E5/A5 +> * Microsoft 365 E5 Security For detailed licensing information, see the [Product Terms site](https://www.microsoft.com/licensing/terms/) and work with your account team to learn the detailed terms and conditions for the product. @@ -104,7 +109,7 @@ The hardware requirements for Defender for Endpoint on devices are the same for ### Other supported operating systems - Android -- Linux +- Linux - macOS > [!NOTE] @@ -186,7 +191,7 @@ The Defender for Endpoint agent depends on the ability of Microsoft Defender Ant Configure Security intelligence updates on the Defender for Endpoint devices whether Microsoft Defender Antivirus is the active antimalware or not. For more information, see [Manage Microsoft Defender Antivirus updates and apply baselines](../microsoft-defender-antivirus/manage-updates-baselines-microsoft-defender-antivirus.md). -When Microsoft Defender Antivirus is not the active antimalware in your organization and you use the Defender for Endpoint service, Microsoft Defender Antivirus goes on passive mode. +When Microsoft Defender Antivirus is not the active antimalware in your organization and you use the Defender for Endpoint service, Microsoft Defender Antivirus goes on passive mode. If your organization has turned off Microsoft Defender Antivirus through group policy or other methods, devices that are onboarded must be excluded from this group policy. From f4184b2962ddf6a3b26d7502b6f3c2cb32e2fd62 Mon Sep 17 00:00:00 2001 From: Denise Vangel-MSFT Date: Wed, 23 Dec 2020 10:07:07 -0800 Subject: [PATCH 206/486] Update minimum-requirements.md --- .../microsoft-defender-atp/minimum-requirements.md | 8 ++++---- 1 file changed, 4 insertions(+), 4 deletions(-) diff --git a/windows/security/threat-protection/microsoft-defender-atp/minimum-requirements.md b/windows/security/threat-protection/microsoft-defender-atp/minimum-requirements.md index b1b97569c8..8605eac87e 100644 --- a/windows/security/threat-protection/microsoft-defender-atp/minimum-requirements.md +++ b/windows/security/threat-protection/microsoft-defender-atp/minimum-requirements.md @@ -34,7 +34,7 @@ There are some minimum requirements for onboarding devices to the service. Learn > - Defender for Endpoint demonstrated industry-leading optics and detection capabilities in the recent MITRE evaluation. Read: [Insights from the MITRE ATT&CK-based evaluation](https://cloudblogs.microsoft.com/microsoftsecure/2018/12/03/insights-from-the-mitre-attack-based-evaluation-of-windows-defender-atp/). ## Licensing requirements -Microsoft Defender for Endpoint requires one of the following Microsoft Volume Licensing offers: +Microsoft Defender for Endpoint requires one of the following Microsoft volume licensing offers: - Windows 10 Enterprise E5 - Windows 10 Education A5 @@ -43,7 +43,7 @@ Microsoft Defender for Endpoint requires one of the following Microsoft Volume L - Microsoft 365 A5 (M365 A5) > [!NOTE] -> Eligible Licensed Users may use Microsoft Defender for Endpoint on up to five concurrent devices. +> Eligible licensed users may use Microsoft Defender for Endpoint on up to five concurrent devices. > Microsoft Defender for Endpoint is also available for purchase from a Cloud Solution Provider (CSP). Microsoft Defender for Endpoint, on Windows Server, requires one of the following licensing options: @@ -52,14 +52,14 @@ Microsoft Defender for Endpoint, on Windows Server, requires one of the followin - Defender for Endpoint for Servers (one per covered server) > [!NOTE] -> Customers may acquire Server Licenses (SLs) (one per covered server Operating System Environment (OSE)) for Microsoft Defender for Endpoint for Servers if they have a combined minimum of 50 licenses for one or more of the following User Licenses: +> Customers may acquire server licenses (one per covered server Operating System Environment (OSE)) for Microsoft Defender for Endpoint for Servers if they have a combined minimum of 50 licenses for one or more of the following user licenses: > > * Microsoft Defender for Endpoint > * Windows E5/A5 > * Microsoft 365 E5/A5 > * Microsoft 365 E5 Security -For detailed licensing information, see the [Product Terms site](https://www.microsoft.com/licensing/terms/) and work with your account team to learn the detailed terms and conditions for the product. +For detailed licensing information, see the [Product Terms site](https://www.microsoft.com/licensing/terms/) and work with your account team to learn more about the terms and conditions. For more information on the array of features in Windows 10 editions, see [Compare Windows 10 editions](https://www.microsoft.com/windowsforbusiness/compare). From 5306624a905ca573aa1c69d42830d02957addb2b Mon Sep 17 00:00:00 2001 From: Sunny Zankharia <67922512+sazankha@users.noreply.github.com> Date: Wed, 23 Dec 2020 14:02:49 -0800 Subject: [PATCH 207/486] Update md-app-guard-browser-extension.md --- .../md-app-guard-browser-extension.md | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/windows/security/threat-protection/microsoft-defender-application-guard/md-app-guard-browser-extension.md b/windows/security/threat-protection/microsoft-defender-application-guard/md-app-guard-browser-extension.md index d01a2ef115..a84686a871 100644 --- a/windows/security/threat-protection/microsoft-defender-application-guard/md-app-guard-browser-extension.md +++ b/windows/security/threat-protection/microsoft-defender-application-guard/md-app-guard-browser-extension.md @@ -48,7 +48,7 @@ Enterprise administrators running Application Guard under managed mode should fi From there, the steps for installing the extension are similar whether Application Guard is running in managed or standalone mode. 1. On the local device, download and install the Application Guard extension for Google [Chrome](https://chrome.google.com/webstore/detail/application-guard-extensi/mfjnknhkkiafjajicegabkbimfhplplj/) and/or Mozilla [Firefox](https://addons.mozilla.org/en-US/firefox/addon/application-guard-extension/). -1. Install the [Windows Defender Application Guard companion app](https://www.microsoft.com/p/windows-defender-application-guard-companion/9n8gnlc8z9c8#activetab=pivot:overviewtab) from the Microsoft Store. This companion app enables Application Guard to work with web browsers other than Microsoft Edge or Internet Explorer. +1. Install the [Microsoft Defender Application Guard companion app](https://www.microsoft.com/p/windows-defender-application-guard-companion/9n8gnlc8z9c8#activetab=pivot:overviewtab) from the Microsoft Store. This companion app enables Application Guard to work with web browsers other than Microsoft Edge or Internet Explorer. 1. Restart the device. ### Recommended browser group policies From 4f4c2ee8517bf15ac90ddf2e36b763ba164dfff8 Mon Sep 17 00:00:00 2001 From: Daniel Simpson Date: Wed, 23 Dec 2020 14:20:41 -0800 Subject: [PATCH 208/486] appguard-hardware-isolation.png --- .../images/appguard-hardware-isolation.png | Bin 47770 -> 32983 bytes 1 file changed, 0 insertions(+), 0 deletions(-) diff --git a/windows/security/threat-protection/microsoft-defender-application-guard/images/appguard-hardware-isolation.png b/windows/security/threat-protection/microsoft-defender-application-guard/images/appguard-hardware-isolation.png index 56acb4be53ed4492fd8f15a8021871e7d900298b..99e590e6ca861867e51255a83d1543af5bafe6bc 100644 GIT binary patch literal 32983 zcmcG0WmsF?wl0NIinqmz7k4l2R@@1}f;$9vEl?;12r9F z>Tv>L;fQOYN}>FwDtNPyFS>AA+*>QcCvdD3N z|A=OI(lGBiuRVTWzVp~Ij{|vrx;KV38BUpO|6*Md5A==fW99BL0f1`-+gl0&MHM<<_Ii-?3&xn<)BomT&fc%i6@-J?q zpmkM3)+k)~_{R^ouO0`1M`hjs5*?~}*U>&uE0>QZPeYE+r4c)7Usjym>Uxp2+C^Pe zQU>2%W;8Lk1~Z8ZqVlZn%_SJ~v2fUjGm_J2*BQ_E(G;=DLbr@_7->#=^T#G;dOKf+ zE?(ghl zxwB;1JUbc;??+O3enr##($59(M zG2^klZ}2;^hu6CvzDF#XQ(b$pGRGVd73M4z5B0v@0}&a9q=47rN2LtKnaaiepWd<| z^?Q2HNA9{}vt8aqCbY_Bs^+LY)32n}f1qmc8pa5-4MOFp`|v~>xq2l!*S2Hq)NkR| zT|93u7KtAF#C{lu7CHr%=rromI=PHhZ;&5xo)3nJ&PpY@_>B3riJGge1HyS?M z*&_x|xU1qmAwcD56CXfP{uXjLGiXf9rx|W$(Pk^rl(z$xmn+K-*{1`jNFvT<2dVk% z<2)T6vRfX_>=mFr3}j9}aeZW-iGq)^<~mM94~#u&9=R;qRU*CMv`}#`*Z`D>rYYH< z#W*`IK1Ap=;YKmxde`fW9Xdr`oTU`k)7zhhJv2ft(V`L#vyZIOIkx+VZZa^0JQw<8 z1MMBUxK-}RWa=U|fd25^oSLnV;t_#sv$dtGmg7kTPKhYKm^SzkC%0_$59QA7#0gGpE2HLTQxv zX=Mi*h}kAHO+~!aQ5oL7c7IQzu(l%nu*-RZ19)>2SrYUr0$+Dg&0r#w!JU~W2Pga& z>p(eo1CGZLJ~D(g%I_(qOFa2pootOZ6W}+%z1$s4(if1(QEU8KS+BWI>;P}9#Mh=e z{+>>sMdC=gLokqQuX}u^Y&`V?n6RGLVaQI<($*DV(eUvoJN1X0ET;X~m^;6~PPRZ= zR&MRlFD1qS5A|ZT>;SwfXPd|9F1#$vXY8EhT^7FFIIHg#`tFC39z>7~lHBi7*SU~b zGh}qDcZ7roor;ee=f}=-WSZ`5Ol`z|Gx?*2p#(!pQvA!b-_C4wVnfB$o}JNi2pNN6 zP4RS26>IdTC)m`zjp%b(|UyKNCX}r_HTfY`i2uwq>`iZi-!*=;j*8t}@2pJgV(U zWb3}wpyK9uE+Xs=MHTWrW}w?~!Nqh^Y-V6THFR-=5UY6MT4+v1?skn#>t0vd$?WtU zze)l>3iYSsk)BhF?zAm+wP+cP*LFW8s{^?_nYG1LGY4r^d^U$eERKelCh+L}b8#qA zcz7g%mF5i`uFe9EV}jP|XPiStUTZqde_ zp{agQVd#w-GenMuuB6uht}kQS^iQ*_>M9zs^|Lj4BqW>g^Ks~$SzJeXrSy4$FHQ*s z5Sg+GvQHYj@Q0O7Dw|TII&pD)dtH#FU!yB0*UTA)B5VYu(gQHP%AxXuXW>(I*Fs7Q zCkazz4~S56|Ei)Wp5m9-s{ZY2o>SB6Ot36-uNH@!-W0rAs5@_~wkLJqWh>A|^4i1L zBQJy=y49MTzRYw(+pxPKuTt`7BM04xP;vdcS(3N6&ONArl zKKLG7q4?AUS``;)wE6rc8eapeIe?7d4oQ%*sD6mfBk#jHOTuNt-zj}@nRcsy<(MD! zXQ+YjN56)WyyafuBv&OV1-5=(t=}-J-Ud@y_*K@h5=@T(hc#czA*Fs_UU2mQ(suDw zH6EF&lfg8{dk`73)W!8I1H{1f*k}Jh+S!NUhTq#9R@tw>xzGynYbGt;aGLIN>Ex5| zjJW}nR$hFJ=We>a;EkMY)D`?WNBN2AgHN(JOFi4GtvfuDhaPzS4}+2yc;M;Uta8lZ z_4Or=@(#X>IO{T^sBmCNO$tlrSal~{8h+WhsRj5zoxKIWR)+S>s>#ByCQSHQsbRS3RU3d@4h?tc>uyKc9o9($?*JpAU3I%l-hh*chB@C=c@t# zjUk`YBOSCM=SzY7fS?#^_deGs0+=1xIdOvNU9-4{>r_5Ukri>}h2VleXHHOhFs$2K z#_-Ip8~M4YXfZOrqo??Itd^%$Im;>dj6jlpcgxo+6i|5x1hzQx9uxgUPpYRvPKSaW z#w={;giilBIqH+)-~*i9sK0=CYDXM9ymG!9O@voT+uk9ZKgu>VrU_OcmIVafmO7}n ztz%<*ZW(#B?v#HXUCeps+}XHg1C7e;eFOiUXqBj|%cnk$?P|LroZjoSGUBvmztFn) zV3gcLH=&o@Y6yXa2pL@_7z*AxqorGc)yKdwNc_md3LC5mmLcl zC%5Nn0QB`+2&c5t_osB@?-KGMySYKOpXIZ)cJ7guR&tdw`ql(CV#n+9&x^h<`(ZL)tfL(0a^aM^D)$WNhK(&L+4A0R#QBV z-4cnFsY8&(;{H&0+hkfuw>$=?#;rr+PxmWPLe58egBYp72(lO};$7yF-Cj-e zCcD0g?&K=G^2468ZxcV3cN2EPDShW8%3j~H4+9-}9|e|pR7AA3WD0W!WGRYjww^`H zy6xuextr>fwOkRG8UA8OUT(~qD=@J@VQSDv80Qu1ZfX(!x&)@1$O7nXP>94lR#RMQ zcW*dxd=3^g&yE7LGSrmx=rHH6Du-F^G)OcnHumcX z7`tsGCRst=jAwThXWoLIe1rn0F>P+IRU92>SdOevk)#+f!rl5e&{ZiV%}!MmR!FrU z+(J_Ac;waFg}4THm3})mRG!U2ukmD=E$O}&BR-^$nr9i@zdAQOC}_Z7ncuVYc|Ga2 zkdSmU&{HN#!^V>VHdb@g^Qa%=*k#&T*~LtvYiIAuHtZ>E*E|=YT|sP7vwJ+TT?n(x zCc`jyHC|qwkZ&5%iNRTlaX9nV+WT^P$3INXe6iTxlK#HAz2`eJ)UJdoiW{%iR}(6F z+Oo$iBZWf?U}*a$kx*LJ704F;p4P08oj{uLGm?XSm|B0L2Up3&qjP;pwo5Xz?@jfZ zDk0D|kV8yi!&Ik=yhTe@va~&%=&k}VCsDBRMSsydWWxQb*4F$7ATu1fb29&Ik)~*) z#^IZ9#@ZM5Tc_$_#dZSwaTgg7jVYRUNqJ!t$&R<0W`J$~Ef-KcrJ!ogSV#gEputU( ztU0HLc}H7;<^@qGGNc}bHc;--R^+cwC^t|lA)EcuUy-UTjsxGCsJ*7`g%qf^wg(oh z(25zjuSNkn6%G0x+liv3HgaagT-#N{e<$qtK!8CjG|vI1xt+uIvVmS5G;}6!fR+ty z@T@FYqT={-y}YiZgdU=k(`ze2W9T8*;k=$TSR5soJyTGd6|+g?G%&;O*Ibv~rYlG; zn#ow>;q_1NP@pihMQtqaA;2SqV>l{`8O-=jzI=5uGLX)$OFS|LVMfBQvT9Y}G! z^{7IF_IeK9dce)iB(j0ZRBa4495{ZqD{jtWK5zB?BNxJ_kVX~E3u1K33iiJ=EX$L6 zm86#&U|kNor-x~cF)OLdYU{^Z{-trf`nFBDG=RBG)@m<)8 zKA{fh_6DLW0%yBOy^U48c0;4dpIVs^o#p+5_|4&`W{*K7#`huWA_F=gAXy_bhqr;Edb%kZ7!@` zV&VA8nbtHqE53pYAN^Oayj?xA1KFs0NzeB@^b&WM1P*3i#FV;9DEDTN>wwnp+u*Y# zL{c%yT=NNUHwEGZ_9VF>>*iGL_v1vlac$0LIBZXS@V>iMrn{+m^a<_-=_~qkke>ly z+ecxV=I?C_^g`T7oR$j3W#0Ju!7AmEl=>!g*}q2h1AEW-#lt(6^2NYz(8X%d!;Cjn zsyIL|({~gPe-%7L4E7&Q4_zoVczP%w+BS<(>a0^8yNy0(?5@$XH&sx-LcGaTUUR>i zI5$dnIM8_JG}NGCTKf)CmHicahEoKQ&qe*k6;4kX|5!C9IV|0-zEUPYuhVhLWFtPb zQn1gA5+Ue@r2T3;dZ`BR;f)}@2`#^|e@n{bQXw;^{z!e%&&8oPgz5uEYLE87EBC7~ z{ubfIuCpZMp6+i!MX7|ZfJRk9ty@#ZuUED7Q z30JU540p-s?wR1a#(M^r$VJhTRtKPl!2-cm4&snph4Q|A*&G8&P$GZRk?oRX{TO!n z_qn(_GyA*rFOT`2!3wJch2faE+~ZesgO*|peyNJW_LQKtuG(MP0d3;e;ceI7Z=&NA z!FWHM$j&rbzZY+`(4A|GS`Uxn=&g-r8Wt25QSE3SHKHA|&gRk^<>qkeD>xc99iATg z7T3Ht2T} znqS2~wGS*zHYh!=I-~O*AYU!vdzs`$BKfA~=-P)z>~N^Fg{{o#S38J#X6L)>>McyQ zx#BfC|L|$(WjzZ0=$x-;h*IHd%1&s@v&*YuXDDMT&qE1RKKN70T7|9IrFl$H( z(2vW`Re93jte0G}{zKwWiy~AunScEyS5bZ8Dg}kPz16R8ACTRr`^v&t9 zt;}G+=MpK@I&JqvNKB zaiT|%ao%uYsyVU>l1vqcO@O(y*e@!ll>gE_jBQSU@5nl8LxDYmN|uWekvGGrEKNr5VTJ@}DzJco%S;m1A z0c`3$5~jY%auR(F_W}t1{Qdgix;|paQw&b|%>~*EaQR;$hY=*3hGV~_j@M3Ci!fKu zYc_{`!8~YKZch(ipH}EYqW!G?e9YkMbn(lw?WqW7QYwpu230OL59@uawYL(7L2b>t zLL_$z^Dr34EX$NO1vO3Nf=wR=w%vR8pDmV;p)^!hmZl&`slFhAgW>yh(NbtQX7p2Q zHjx*aEXkn8jb(wHZXivJMdnoe%q0wLL-lz5wY3y&4wsW2@ErzDKK={Z!?zb_@2bLQ z5VdZp;SQJ`bL4DY{83-}wp8n`jPC9=DtyDxSpv9AeUITgr7CuGW;VUe7Q^piz~#50 zb;^qL&7^3zjmcSNo-{rLibZqSgF7`{;G8A0#8YGTx#vcau@{ z`M1_$)~*SXrt!lQ2Mi$&zXjaktS~?Y=y`SJ5@b;sxU#EzA84fK)S?U$9fC7C2Y0=z zgzEYB#UXp%f3Z-jab~Ci+@&D@g(VVZeiujSo)=)$w|goCxqM?dmX>}~L36jzs))L1 zOw z6UPC5xndq2#=!CqP~AiUdm1WGm`(0GM1Zq0H**pI{t($GqH`Ru1gfsLl^9 zseF=luQK@9X;i(Fn3K{S&DHxPm*12=f9b0&RpfQ?TJ@Md3PjN+;O#^A%=TV1QPP!0 z)$^H)=T98B)$iaba(yiVn&q=?9Lo@1&$1)Mvk0M>jkCt|HR{y=Xb|_l+l#2SipZ5| zG|;uGTT^BH3E}dl2p2b56lRYIc}qEoCHCXlqb+r8L)Qg(+*$ zBl-!lLT&t+$?z4pHxv!8HAe;>MNdA*J0zmIGN(j;Zi@)0sKlPx8s%-9!p;o%I1^Vj#D5Wb zk@M;m?y(CSY!rM;{D1$9sn66A+`(mVit2RSnG)AqgR=r}B6LYS(o;W_}2J$f}_NmTX*TMt0F zRXG&%dvTC$l)m+MV&zq8q|_OcB3loCWY|}uzg}=hl}rTK6U~9zQzNv2*qT=*?RoU~ z-@Z^pFRq8VrnIVtCt;k*Fs?yS%FI{qLo8zqgr!JiL>LZwY%>^?X8Y#)p z7;uj9)!(s6e!$VZG8x(w7q&DnBi}(2@r>Y@&&m~U`WogltG}D03I#-e-&ozu(zf6) zwoyy{g;u*-uofaX!W5ky0joG7&P@Tu*xsXH=%zmppVX@uZhOAlwTzo6--BQ zO0NuL>I}Tia{=C+ zvgUc+?I*g=Gk{H5N>Yh#>b+SL@ZuaU=%&)Mf80NWyR~>n{aG0_Jq;-?%Y@hZQN^zR zNqb0w7t?_u@|C*ra>8tu&6P&+qOM9`;rk$8NAPcPfvPEFCMoQZ23vv6xeARkX5-Er z)oOb)&q;_4cP8jQ{=J15+q|d8AxZ^QSpQ;1$c-@zx*jg<%0Dw>m*C!}Xx&$*^LKuC z%ER!?osEtM9_bk#3){ zUgI!SjraI`05U#wf^@OUQ!Q^kc0Y>8^oYyT#G1+ZnO)>vY17eAuf_oqnhY&NZyw-0 zOrVlCiNewNz2lWMu9|dPHdd*(7Yq(^wzvxv2f*!)Yi0j62-zJ<=N33i<^Kx5c$2s2NrlCzVcL+!gIuo=DV0I%X$Lff_XA&(nN4loLBY3M_TDKz9;(l8z*ka|6$ zWrC~|;U-`ZVwQ%zm+B5psr6IrV2|eqOal7C;GWolPgsBam{&w{?_&d7tU2zR(?)@Z z2`@vh3=Jwpf5M&q#akfLGS4wXQzMSUZWjJWhW zZ*mG>DwI|WZ!J(VI@}?}>~_w@Gd{3=;ao zo9FoY6s;;T0Df{r*tKWP?xew%m4Ga&gW>o@1)RmY2XQ z7XZOkI#Q)TF92_a@+i-)D0O3{gFIXkeVta0`))`h10&L$g+UdqHr_)BSFwWShq@5z zmb!q(-nCTXLb8_M2lvI$Xg=S|j>F^VUnuQQ@0;HP9dAr^@Q+*zZZrq+_uX!BNIV2% zt8_l5F3Nd{p(@!HA6`bx#aY~~MN)>pk%0tN1=uyCL>3SpTOcbRfq_rw|G+MI!K3K$ zd^O~{q(gJG6v4T{=mZTzO$|-GL&W1GO!?pW8ShLh{C?rSbFuaXO(fRS`INfNi`I!nw3*Ct|RGacx48!M>pu~VHtWr($r)@q! z1B9_ks+;MG3qIm!T(Q)kLg)auYv%?xG||}JI$7)YXbVc8y?_E7l#S84VfYg4oxoWw zTvONYhXHB>*@S? z!%xa?Dsa&wC8ym|cGeGVX0Ig|?|Jy(cGH*cA@1gNHhYLl#0ekxN7i#v!T(wo%DC_l z?$%DQs4>yfG<=`lJ8{dh;W%qS-h{HF2k7-^waU(MD06qa zueF9E2ZqnttDk>M%NFd+F3lP^`%*OlI=jIbbqn57IPk>XTfQ}C4Jdma!7mHhTgrV_(!xH{qD@7);D znGUy7@mG)V_`M*Op9Py${QB<)-?EDB4`u%Sefd5k$F!em%d#zwE)Vb_i5z!*LY28P zfje{cPtu+FO6x2W(75QY{*9XV3!LF7Oc!7gF1P41M9V69?f-nPbBkk8qD~t6@pD z65fcU=YM{~*b0wL`O8>4`X0Lp%Dl6H!%?*a@a$aIP6H=4sBlNOqhrQgBa{cx#wcb! zQXH{_u+SN1NV5XDE+x}DpZAL@?(e~0^w^MFT?met+__lHD3RKlOO$HJBFwKz9rxs} zZKV3)cf472I`dcB;K4aZ>61(soxKLnD=Y%1!(C?|Sjf2v9~o*c0)GMzH?V`Gl#mo0 zobrxy4xAlUPPQ&hon=yXW&6GR@N-eF&E5Le9x_K42oH!qZ`)9m9A@BJG!M0m04n>< zYZD5&=qOwJ{3G`UJy;r>tvjuh@TCBMkuOI-4iR714yQkznBmEOT~C9IORD1JxtAe);)IhddQFNgqcm?tJ30U;bp)e7q?G7;`+mdIJnOFpnh1Cy;#H{y)!M5D9>1HS zdRhgrI_NWC>OTjee8f@bO>pa#^0=4N!oa#+V<7~m6VCCE=2c?cnKSCvw#tnz@+O~D z{A9QDznmN9FAY#C&P?(S2jTEEwj=rRWcINC`1R<*gKF-%yZ57io5Mv>X{;qv%l|RF zq;kuv+e}6d6F#D_wYE6v+$ZZehM^>6Hg1n)NT93x&*N38EFD4udYD>{8NHW|WQocY z6%+}>OJ?8+!bca6=oi z97V~_v8&Nvp8gnUE#L6_vlv(+){QG$P%Rv6KDgTw+;N3o}=%Vw< z`t^;lkGb2u-I7^j$HCb%m*o}m!t0@I?u

    +### ADMX_Power policies + +
    +
    + ADMX_Power/ACConnectivityInStandby_2 +
    +
    + ADMX_Power/ACCriticalSleepTransitionsDisable_2 +
    +
    + ADMX_Power/ACStartMenuButtonAction_2 +
    +
    + ADMX_Power/AllowSystemPowerRequestAC +
    +
    + ADMX_Power/AllowSystemPowerRequestDC +
    +
    + ADMX_Power/AllowSystemSleepWithRemoteFilesOpenAC +
    +
    + ADMX_Power/AllowSystemSleepWithRemoteFilesOpenDC +
    +
    + ADMX_Power/CustomActiveSchemeOverride_2 +
    +
    + ADMX_Power/DCBatteryDischargeAction0_2 +
    +
    + ADMX_Power/DCBatteryDischargeAction1_2 +
    +
    + ADMX_Power/DCBatteryDischargeLevel0_2 +
    +
    + ADMX_Power/DCBatteryDischargeLevel1UINotification_2 +
    +
    + ADMX_Power/DCBatteryDischargeLevel1_2 +
    +
    + ADMX_Power/DCConnectivityInStandby_2 +
    +
    + ADMX_Power/DCCriticalSleepTransitionsDisable_2 +
    +
    + ADMX_Power/DCStartMenuButtonAction_2 +
    +
    + ADMX_Power/DiskACPowerDownTimeOut_2 +
    +
    + ADMX_Power/DiskDCPowerDownTimeOut_2 +
    +
    + ADMX_Power/Dont_PowerOff_AfterShutdown +
    +
    + ADMX_Power/EnableDesktopSlideShowAC +
    +
    + ADMX_Power/EnableDesktopSlideShowDC +
    +
    + ADMX_Power/InboxActiveSchemeOverride_2 +
    +
    + ADMX_Power/PW_PromptPasswordOnResume +
    +
    + ADMX_Power/PowerThrottlingTurnOff +
    +
    + ADMX_Power/ReserveBatteryNotificationLevel +
    +
    + ### ADMX_PowerShellExecutionPolicy policies
    From de10c523a1e9faacda55dc9a381519dc60c00534 Mon Sep 17 00:00:00 2001 From: ManikaDhiman Date: Tue, 29 Dec 2020 12:09:25 -0800 Subject: [PATCH 234/486] Updated the availability verbiage --- .../mdm/policy-csp-admx-addremoveprograms.md | 22 +- .../mdm/policy-csp-admx-appcompat.md | 18 +- .../mdm/policy-csp-admx-auditsettings.md | 2 +- .../mdm/policy-csp-admx-ciphersuiteorder.md | 4 +- .../mdm/policy-csp-admx-com.md | 4 +- .../mdm/policy-csp-admx-cpls.md | 2 +- .../mdm/policy-csp-admx-ctrlaltdel.md | 8 +- .../mdm/policy-csp-admx-digitallocker.md | 4 +- .../mdm/policy-csp-admx-dnsclient.md | 44 ++-- .../mdm/policy-csp-admx-dwm.md | 12 +- .../mdm/policy-csp-admx-encryptfilesonmove.md | 2 +- .../mdm/policy-csp-admx-eventforwarding.md | 4 +- .../policy-csp-admx-fileservervssprovider.md | 2 +- .../mdm/policy-csp-admx-filesys.md | 16 +- .../mdm/policy-csp-admx-folderredirection.md | 14 +- .../mdm/policy-csp-admx-help.md | 8 +- .../mdm/policy-csp-admx-helpandsupport.md | 8 +- .../mdm/policy-csp-admx-kdc.md | 12 +- .../mdm/policy-csp-admx-lanmanserver.md | 8 +- ...icy-csp-admx-linklayertopologydiscovery.md | 4 +- .../mdm/policy-csp-admx-mmc.md | 10 +- .../mdm/policy-csp-admx-mmcsnapins.md | 210 +++++++++--------- .../mdm/policy-csp-admx-msapolicy.md | 2 +- .../mdm/policy-csp-admx-nca.md | 16 +- .../mdm/policy-csp-admx-ncsi.md | 14 +- .../mdm/policy-csp-admx-netlogon.md | 70 +++--- .../mdm/policy-csp-admx-offlinefiles.md | 94 ++++---- 27 files changed, 307 insertions(+), 307 deletions(-) diff --git a/windows/client-management/mdm/policy-csp-admx-addremoveprograms.md b/windows/client-management/mdm/policy-csp-admx-addremoveprograms.md index 36128621e3..650e2497ae 100644 --- a/windows/client-management/mdm/policy-csp-admx-addremoveprograms.md +++ b/windows/client-management/mdm/policy-csp-admx-addremoveprograms.md @@ -106,7 +106,7 @@ manager: dansimp -Available in Windows 10 Insider Preview Build 20185. The policy setting specifies the category of programs that appears when users open the "Add New Programs" page. If you enable this setting, only the programs in the category you specify are displayed when the "Add New Programs" page opens. You can use the Category box on the "Add New Programs" page to display programs in other categories. +Available in the latest Windows 10 Insider Preview Build. The policy setting specifies the category of programs that appears when users open the "Add New Programs" page. If you enable this setting, only the programs in the category you specify are displayed when the "Add New Programs" page opens. You can use the Category box on the "Add New Programs" page to display programs in other categories. To use this setting, type the name of a category in the Category box for this setting. You must enter a category that is already defined in Add or Remove Programs. To define a category, use Software Installation. @@ -189,7 +189,7 @@ ADMX Info: -Available in Windows 10 Insider Preview Build 20185. This policy setting removes the "Add a program from CD-ROM or floppy disk" section from the Add New Programs page. This prevents users from using Add or Remove Programs to install programs from removable media. +Available in the latest Windows 10 Insider Preview Build. This policy setting removes the "Add a program from CD-ROM or floppy disk" section from the Add New Programs page. This prevents users from using Add or Remove Programs to install programs from removable media. If you disable this setting or do not configure it, the "Add a program from CD-ROM or floppy disk" option is available to all users. This setting does not prevent users from using other tools and methods to add or remove program components. @@ -270,7 +270,7 @@ ADMX Info: -Available in Windows 10 Insider Preview Build 20185. This policy setting removes the "Add programs from Microsoft" section from the Add New Programs page. This setting prevents users from using Add or Remove Programs to connect to Windows Update. +Available in the latest Windows 10 Insider Preview Build. This policy setting removes the "Add programs from Microsoft" section from the Add New Programs page. This setting prevents users from using Add or Remove Programs to connect to Windows Update. If you disable this setting or do not configure it, "Add programs from Microsoft" is available to all users. This setting does not prevent users from using other tools and methods to connect to Windows Update. @@ -351,7 +351,7 @@ ADMX Info: -Available in Windows 10 Insider Preview Build 20185. This policy setting prevents users from viewing or installing published programs. This setting removes the "Add programs from your network" section from the Add New Programs page. The "Add programs from your network" section lists published programs and provides an easy way to install them. Published programs are those programs that the system administrator has explicitly made available to the user with a tool such as Windows Installer. Typically, system administrators publish programs to notify users that the programs are available, to recommend their use, or to enable users to install them without having to search for installation files. +Available in the latest Windows 10 Insider Preview Build. This policy setting prevents users from viewing or installing published programs. This setting removes the "Add programs from your network" section from the Add New Programs page. The "Add programs from your network" section lists published programs and provides an easy way to install them. Published programs are those programs that the system administrator has explicitly made available to the user with a tool such as Windows Installer. Typically, system administrators publish programs to notify users that the programs are available, to recommend their use, or to enable users to install them without having to search for installation files. If you enable this setting, users cannot tell which programs have been published by the system administrator, and they cannot use Add or Remove Programs to install published programs. However, they can still install programs by using other methods, and they can view and install assigned (partially installed) programs that are offered on the desktop or on the Start menu. @@ -433,7 +433,7 @@ ADMX Info: -Available in Windows 10 Insider Preview Build 20185. This policy setting removes the Add New Programs button from the Add or Remove Programs bar. As a result, users cannot view or change the attached page. The Add New Programs button lets users install programs published or assigned by a system administrator. +Available in the latest Windows 10 Insider Preview Build. This policy setting removes the Add New Programs button from the Add or Remove Programs bar. As a result, users cannot view or change the attached page. The Add New Programs button lets users install programs published or assigned by a system administrator. If you disable this setting or do not configure it, the Add New Programs button is available to all users. This setting does not prevent users from using other tools and methods to install programs. @@ -511,7 +511,7 @@ ADMX Info: -Available in Windows 10 Insider Preview Build 20185. This policy setting prevents users from using Add or Remove Programs. This setting removes Add or Remove Programs from Control Panel and removes the Add or Remove Programs item from menus. Add or Remove Programs lets users install, uninstall, repair, add, and remove features and components of Windows 2000 Professional and a wide variety of Windows programs. Programs published or assigned to the user appear in Add or Remove Programs. +Available in the latest Windows 10 Insider Preview Build. This policy setting prevents users from using Add or Remove Programs. This setting removes Add or Remove Programs from Control Panel and removes the Add or Remove Programs item from menus. Add or Remove Programs lets users install, uninstall, repair, add, and remove features and components of Windows 2000 Professional and a wide variety of Windows programs. Programs published or assigned to the user appear in Add or Remove Programs. If you disable this setting or do not configure it, Add or Remove Programs is available to all users. When enabled, this setting takes precedence over the other settings in this folder. This setting does not prevent users from using other tools and methods to install or uninstall programs. @@ -589,7 +589,7 @@ ADMX Info: -Available in Windows 10 Insider Preview Build 20185. This policy setting removes the Set Program Access and Defaults button from the Add or Remove Programs bar. As a result, users cannot view or change the associated page. The Set Program Access and Defaults button lets administrators specify default programs for certain activities, such as Web browsing or sending e-mail, as well as which programs are accessible from the Start menu, desktop, and other locations. +Available in the latest Windows 10 Insider Preview Build. This policy setting removes the Set Program Access and Defaults button from the Add or Remove Programs bar. As a result, users cannot view or change the associated page. The Set Program Access and Defaults button lets administrators specify default programs for certain activities, such as Web browsing or sending e-mail, as well as which programs are accessible from the Start menu, desktop, and other locations. If you disable this setting or do not configure it, the Set Program Access and Defaults button is available to all users. This setting does not prevent users from using other tools and methods to change program access or defaults. This setting does not prevent the Set Program Access and Defaults icon from appearing on the Start menu. See the "Remove Set Program Access and Defaults from Start menu" setting. @@ -668,7 +668,7 @@ ADMX Info: -Available in Windows 10 Insider Preview Build 20185. This policy setting removes the Change or Remove Programs button from the Add or Remove Programs bar. As a result, users cannot view or change the attached page. The Change or Remove Programs button lets users uninstall, repair, add, or remove features of installed programs. +Available in the latest Windows 10 Insider Preview Build. This policy setting removes the Change or Remove Programs button from the Add or Remove Programs bar. As a result, users cannot view or change the attached page. The Change or Remove Programs button lets users uninstall, repair, add, or remove features of installed programs. If you disable this setting or do not configure it, the Change or Remove Programs page is available to all users. This setting does not prevent users from using other tools and methods to delete or uninstall programs. @@ -746,7 +746,7 @@ ADMX Info: -Available in Windows 10 Insider Preview Build 20185. This policy setting prevents users from using Add or Remove Programs to configure installed services. This setting removes the "Set up services" section of the Add/Remove Windows Components page. The "Set up services" section lists system services that have not been configured and offers users easy access to the configuration tools. +Available in the latest Windows 10 Insider Preview Build. This policy setting prevents users from using Add or Remove Programs to configure installed services. This setting removes the "Set up services" section of the Add/Remove Windows Components page. The "Set up services" section lists system services that have not been configured and offers users easy access to the configuration tools. If you disable this setting or do not configure it, "Set up services" appears only when there are unconfigured system services. If you enable this setting, "Set up services" never appears. This setting does not prevent users from using other methods to configure services. @@ -827,7 +827,7 @@ ADMX Info: -Available in Windows 10 Insider Preview Build 20185. This policy setting removes links to the Support Info dialog box from programs on the Change or Remove Programs page. Programs listed on the Change or Remove Programs page can include a "Click here for support information" hyperlink. When clicked, the hyperlink opens a dialog box that displays troubleshooting information, including a link to the installation files and data that users need to obtain product support, such as the Product ID and version number of the program. The dialog box also includes a hyperlink to support information on the Internet, such as the Microsoft Product Support Services Web page. +Available in the latest Windows 10 Insider Preview Build. This policy setting removes links to the Support Info dialog box from programs on the Change or Remove Programs page. Programs listed on the Change or Remove Programs page can include a "Click here for support information" hyperlink. When clicked, the hyperlink opens a dialog box that displays troubleshooting information, including a link to the installation files and data that users need to obtain product support, such as the Product ID and version number of the program. The dialog box also includes a hyperlink to support information on the Internet, such as the Microsoft Product Support Services Web page. If you disable this setting or do not configure it, the Support Info hyperlink appears. @@ -908,7 +908,7 @@ ADMX Info: -Available in Windows 10 Insider Preview Build 20185. This policy setting removes the Add/Remove Windows Components button from the Add or Remove Programs bar. As a result, users cannot view or change the associated page. The Add/Remove Windows Components button lets users configure installed services and use the Windows Component Wizard to add, remove, and configure components of Windows from the installation files. +Available in the latest Windows 10 Insider Preview Build. This policy setting removes the Add/Remove Windows Components button from the Add or Remove Programs bar. As a result, users cannot view or change the associated page. The Add/Remove Windows Components button lets users configure installed services and use the Windows Component Wizard to add, remove, and configure components of Windows from the installation files. If you disable this setting or do not configure it, the Add/Remove Windows Components button is available to all users. This setting does not prevent users from using other tools and methods to configure services or add or remove program components. However, this setting blocks user access to the Windows Component Wizard. diff --git a/windows/client-management/mdm/policy-csp-admx-appcompat.md b/windows/client-management/mdm/policy-csp-admx-appcompat.md index ef0f985661..a2a770794d 100644 --- a/windows/client-management/mdm/policy-csp-admx-appcompat.md +++ b/windows/client-management/mdm/policy-csp-admx-appcompat.md @@ -108,7 +108,7 @@ manager: dansimp -Available in Windows 10 Insider Preview Build 20185. This policy setting specifies whether to prevent the MS-DOS subsystem (**ntvdm.exe**) from running on this computer. This setting affects the launching of 16-bit applications in the operating system. +Available in the latest Windows 10 Insider Preview Build. This policy setting specifies whether to prevent the MS-DOS subsystem (**ntvdm.exe**) from running on this computer. This setting affects the launching of 16-bit applications in the operating system. You can use this setting to turn off the MS-DOS subsystem, which will reduce resource usage and prevent users from running 16-bit applications. To run any 16-bit application or any application with 16-bit components, **ntvdm.exe** must be allowed to run. The MS-DOS subsystem starts when the first 16-bit application is launched. While the MS-DOS subsystem is running, any subsequent 16-bit applications launch faster, but overall resource usage on the system is increased. @@ -185,7 +185,7 @@ ADMX Info: -Available in Windows 10 Insider Preview Build 20185. This policy setting controls the visibility of the Program Compatibility property page shell extension. This shell extension is visible on the property context-menu of any program shortcut or executable file. +Available in the latest Windows 10 Insider Preview Build. This policy setting controls the visibility of the Program Compatibility property page shell extension. This shell extension is visible on the property context-menu of any program shortcut or executable file. The compatibility property page displays a list of options that can be selected and applied to the application to resolve the most common issues affecting legacy applications. @@ -256,7 +256,7 @@ ADMX Info: -Available in Windows 10 Insider Preview Build 20185. The policy setting controls the state of the Application Telemetry engine in the system. +Available in the latest Windows 10 Insider Preview Build. The policy setting controls the state of the Application Telemetry engine in the system. Application Telemetry is a mechanism that tracks anonymous usage of specific Windows system components by applications. @@ -331,7 +331,7 @@ ADMX Info: -Available in Windows 10 Insider Preview Build 20185. The policy setting controls the state of the Switchback compatibility engine in the system. +Available in the latest Windows 10 Insider Preview Build. The policy setting controls the state of the Switchback compatibility engine in the system. Switchback is a mechanism that provides generic compatibility mitigations to older applications by providing older behavior to old applications and new behavior to new applications. @@ -407,7 +407,7 @@ ADMX Info: -Available in Windows 10 Insider Preview Build 20185. This policy setting controls the state of the application compatibility engine in the system. +Available in the latest Windows 10 Insider Preview Build. This policy setting controls the state of the application compatibility engine in the system. The engine is part of the loader and looks through a compatibility database every time an application is started on the system. If a match for the application is found it provides either run-time solutions or compatibility fixes, or displays an Application Help message if the application has a know problem. @@ -485,7 +485,7 @@ ADMX Info: -Available in Windows 10 Insider Preview Build 20185. This policy setting exists only for backward compatibility, and is not valid for this version of Windows. To configure the Program Compatibility Assistant, use the 'Turn off Program Compatibility Assistant' setting under Computer Configuration\Administrative Templates\Windows Components\Application Compatibility. +Available in the latest Windows 10 Insider Preview Build. This policy setting exists only for backward compatibility, and is not valid for this version of Windows. To configure the Program Compatibility Assistant, use the 'Turn off Program Compatibility Assistant' setting under Computer Configuration\Administrative Templates\Windows Components\Application Compatibility. @@ -552,7 +552,7 @@ ADMX Info: -Available in Windows 10 Insider Preview Build 20185. This policy setting controls the state of the Program Compatibility Assistant (PCA). The PCA monitors applications run by the user. When a potential compatibility issue with an application is detected, the PCA will prompt the user with recommended solutions. To configure the diagnostic settings for the PCA, go to System->Troubleshooting and Diagnostics->Application Compatibility Diagnostics. +Available in the latest Windows 10 Insider Preview Build. This policy setting controls the state of the Program Compatibility Assistant (PCA). The PCA monitors applications run by the user. When a potential compatibility issue with an application is detected, the PCA will prompt the user with recommended solutions. To configure the diagnostic settings for the PCA, go to System->Troubleshooting and Diagnostics->Application Compatibility Diagnostics. If you enable this policy setting, the PCA will be turned off. The user will not be presented with solutions to known compatibility issues when running applications. Turning off the PCA can be useful for system administrators who require better performance and are already aware of application compatibility issues. @@ -626,7 +626,7 @@ ADMX Info: -Available in Windows 10 Insider Preview Build 20185. This policy setting controls the state of Steps Recorder. +Available in the latest Windows 10 Insider Preview Build. This policy setting controls the state of Steps Recorder. Steps Recorder keeps a record of steps taken by the user. The data generated by Steps Recorder can be used in feedback systems such as Windows Error Reporting to help developers understand and fix problems. The data includes user actions such as keyboard input and mouse input, user interface data, and screenshots. Steps Recorder includes an option to turn on and off data collection. @@ -699,7 +699,7 @@ ADMX Info: -Available in Windows 10 Insider Preview Build 20185. This policy setting controls the state of the Inventory Collector. +Available in the latest Windows 10 Insider Preview Build. This policy setting controls the state of the Inventory Collector. The Inventory Collector inventories applications, files, devices, and drivers on the system and sends the information to Microsoft. This information is used to help diagnose compatibility problems. diff --git a/windows/client-management/mdm/policy-csp-admx-auditsettings.md b/windows/client-management/mdm/policy-csp-admx-auditsettings.md index 1aa77b30da..62b80d6108 100644 --- a/windows/client-management/mdm/policy-csp-admx-auditsettings.md +++ b/windows/client-management/mdm/policy-csp-admx-auditsettings.md @@ -74,7 +74,7 @@ manager: dansimp -Available in Windows 10 Insider Preview Build 20185. This policy setting determines what information is logged in security audit events when a new process has been created. This setting only applies when the Audit Process Creation policy is enabled. +Available in the latest Windows 10 Insider Preview Build. This policy setting determines what information is logged in security audit events when a new process has been created. This setting only applies when the Audit Process Creation policy is enabled. If you enable this policy setting, the command line information for every process will be logged in plain text in the security event log as part of the Audit Process Creation event 4688, "a new process has been created," on the workstations and servers on which this policy setting is applied. diff --git a/windows/client-management/mdm/policy-csp-admx-ciphersuiteorder.md b/windows/client-management/mdm/policy-csp-admx-ciphersuiteorder.md index 649079a937..232b4fdce7 100644 --- a/windows/client-management/mdm/policy-csp-admx-ciphersuiteorder.md +++ b/windows/client-management/mdm/policy-csp-admx-ciphersuiteorder.md @@ -78,7 +78,7 @@ manager: dansimp -Available in Windows 10 Insider Preview Build 20185. This policy setting determines the cipher suites used by the Secure Socket Layer (SSL). +Available in the latest Windows 10 Insider Preview Build. This policy setting determines the cipher suites used by the Secure Socket Layer (SSL). If you enable this policy setting, SSL cipher suites are prioritized in the order specified. @@ -151,7 +151,7 @@ ADMX Info: -Available in Windows 10 Insider Preview Build 20185. This policy setting determines the priority order of ECC curves used with ECDHE cipher suites. +Available in the latest Windows 10 Insider Preview Build. This policy setting determines the priority order of ECC curves used with ECDHE cipher suites. If you enable this policy setting, ECC curves are prioritized in the order specified. Enter one curve name per line. diff --git a/windows/client-management/mdm/policy-csp-admx-com.md b/windows/client-management/mdm/policy-csp-admx-com.md index 1da39a32a3..152e8d9044 100644 --- a/windows/client-management/mdm/policy-csp-admx-com.md +++ b/windows/client-management/mdm/policy-csp-admx-com.md @@ -78,7 +78,7 @@ manager: dansimp -Available in Windows 10 Insider Preview Build 20185. This policy setting directs the system to search Active Directory for missing Component Object Model (COM) components that a program requires. +Available in the latest Windows 10 Insider Preview Build. This policy setting directs the system to search Active Directory for missing Component Object Model (COM) components that a program requires. Many Windows programs, such as the MMC snap-ins, use the interfaces provided by the COM components. These programs cannot perform all their functions unless Windows has internally registered the required components. @@ -153,7 +153,7 @@ ADMX Info: -Available in Windows 10 Insider Preview Build 20185. This policy setting directs the system to search Active Directory for missing Component Object Model (COM) components that a program requires. +Available in the latest Windows 10 Insider Preview Build. This policy setting directs the system to search Active Directory for missing Component Object Model (COM) components that a program requires. Many Windows programs, such as the MMC snap-ins, use the interfaces provided by the COM components. These programs cannot perform all their functions unless Windows has internally registered the required components. diff --git a/windows/client-management/mdm/policy-csp-admx-cpls.md b/windows/client-management/mdm/policy-csp-admx-cpls.md index 21bf8792f1..9517dbfe30 100644 --- a/windows/client-management/mdm/policy-csp-admx-cpls.md +++ b/windows/client-management/mdm/policy-csp-admx-cpls.md @@ -74,7 +74,7 @@ manager: dansimp -Available in Windows 10 Insider Preview Build 20185. This policy setting allows an administrator to standardize the account pictures for all users on a system to the default account picture. One application for this policy setting is to standardize the account pictures to a company logo. +Available in the latest Windows 10 Insider Preview Build. This policy setting allows an administrator to standardize the account pictures for all users on a system to the default account picture. One application for this policy setting is to standardize the account pictures to a company logo. > [!NOTE] > The default account picture is stored at %PROGRAMDATA%\Microsoft\User Account Pictures\user.jpg. The default guest picture is stored at %PROGRAMDATA%\Microsoft\User Account Pictures\guest.jpg. If the default pictures do not exist, an empty frame is displayed. diff --git a/windows/client-management/mdm/policy-csp-admx-ctrlaltdel.md b/windows/client-management/mdm/policy-csp-admx-ctrlaltdel.md index 9ecc74d2e9..c4ed633cb6 100644 --- a/windows/client-management/mdm/policy-csp-admx-ctrlaltdel.md +++ b/windows/client-management/mdm/policy-csp-admx-ctrlaltdel.md @@ -83,7 +83,7 @@ manager: dansimp -Available in Windows 10 Insider Preview Build 20185. This policy setting prevents users from changing their Windows password on demand. +Available in the latest Windows 10 Insider Preview Build. This policy setting prevents users from changing their Windows password on demand. If you enable this policy setting, the 'Change Password' button on the Windows Security dialog box will not appear when you press Ctrl+Alt+Del. @@ -153,7 +153,7 @@ ADMX Info: -Available in Windows 10 Insider Preview Build 20185. This policy setting prevents users from locking the system. +Available in the latest Windows 10 Insider Preview Build. This policy setting prevents users from locking the system. While locked, the desktop is hidden and the system cannot be used. Only the user who locked the system or the system administrator can unlock it. @@ -226,7 +226,7 @@ ADMX Info: -Available in Windows 10 Insider Preview Build 20185. This policy setting prevents users from starting Task Manager. +Available in the latest Windows 10 Insider Preview Build. This policy setting prevents users from starting Task Manager. Task Manager (**taskmgr.exe**) lets users start and stop programs, monitor the performance of their computers, view and monitor all programs running on their computers, including system services, find the executable names of programs, and change the priority of the process in which programs run. @@ -297,7 +297,7 @@ ADMX Info: -Available in Windows 10 Insider Preview Build 20185. This policy setting disables or removes all menu items and buttons that log the user off the system. +Available in the latest Windows 10 Insider Preview Build. This policy setting disables or removes all menu items and buttons that log the user off the system. If you enable this policy setting, users will not see the Log off menu item when they press Ctrl+Alt+Del. This will prevent them from logging off unless they restart or shutdown the computer, or clicking Log off from the Start menu. diff --git a/windows/client-management/mdm/policy-csp-admx-digitallocker.md b/windows/client-management/mdm/policy-csp-admx-digitallocker.md index 43d6152747..b2b311f5a1 100644 --- a/windows/client-management/mdm/policy-csp-admx-digitallocker.md +++ b/windows/client-management/mdm/policy-csp-admx-digitallocker.md @@ -77,7 +77,7 @@ manager: dansimp -Available in Windows 10 Insider Preview Build 20185. This policy setting specifies whether Digital Locker can run. +Available in the latest Windows 10 Insider Preview Build. This policy setting specifies whether Digital Locker can run. Digital Locker is a dedicated download manager associated with Windows Marketplace and a feature of Windows that can be used to manage and download products acquired and stored in the user's Windows Marketplace Digital Locker. @@ -148,7 +148,7 @@ ADMX Info: -Available in Windows 10 Insider Preview Build 20185. This policy setting specifies whether Digital Locker can run. +Available in the latest Windows 10 Insider Preview Build. This policy setting specifies whether Digital Locker can run. Digital Locker is a dedicated download manager associated with Windows Marketplace and a feature of Windows that can be used to manage and download products acquired and stored in the user's Windows Marketplace Digital Locker. diff --git a/windows/client-management/mdm/policy-csp-admx-dnsclient.md b/windows/client-management/mdm/policy-csp-admx-dnsclient.md index 79b48babf1..5176ac1024 100644 --- a/windows/client-management/mdm/policy-csp-admx-dnsclient.md +++ b/windows/client-management/mdm/policy-csp-admx-dnsclient.md @@ -137,7 +137,7 @@ manager: dansimp -Available in Windows 10 Insider Preview Build 20185. This policy setting specifies that NetBIOS over TCP/IP (NetBT) queries are issued for fully qualified domain names. +Available in the latest Windows 10 Insider Preview Build. This policy setting specifies that NetBIOS over TCP/IP (NetBT) queries are issued for fully qualified domain names. If you enable this policy setting, NetBT queries will be issued for multi-label and fully qualified domain names, such as "www.example.com" in addition to single-label names. @@ -205,7 +205,7 @@ ADMX Info: -Available in Windows 10 Insider Preview Build 20185. This policy setting specifies that computers may attach suffixes to an unqualified multi-label name before sending subsequent DNS queries if the original name query fails. +Available in the latest Windows 10 Insider Preview Build. This policy setting specifies that computers may attach suffixes to an unqualified multi-label name before sending subsequent DNS queries if the original name query fails. A name containing dots, but not dot-terminated, is called an unqualified multi-label name, for example "server.corp" is an unqualified multi-label name. The name "server.corp.contoso.com." is an example of a fully qualified name because it contains a terminating dot. @@ -282,7 +282,7 @@ ADMX Info: -Available in Windows 10 Insider Preview Build 20185. This policy setting specifies a connection-specific DNS suffix. This policy setting supersedes local connection-specific DNS suffixes, and those configured using DHCP. To use this policy setting, click Enabled, and then enter a string value representing the DNS suffix. +Available in the latest Windows 10 Insider Preview Build. This policy setting specifies a connection-specific DNS suffix. This policy setting supersedes local connection-specific DNS suffixes, and those configured using DHCP. To use this policy setting, click Enabled, and then enter a string value representing the DNS suffix. If you enable this policy setting, the DNS suffix that you enter will be applied to all network connections used by computers that receive this policy setting. @@ -351,7 +351,7 @@ ADMX Info: -Available in Windows 10 Insider Preview Build 20185. This policy setting specifies if the devolution level that DNS clients will use if they perform primary DNS suffix devolution during the name resolution process. +Available in the latest Windows 10 Insider Preview Build. This policy setting specifies if the devolution level that DNS clients will use if they perform primary DNS suffix devolution during the name resolution process. With devolution, a DNS client creates queries by appending a single-label, unqualified domain name with the parent suffix of the primary DNS suffix name, and the parent of that suffix, and so on, stopping if the name is successfully resolved or at a level determined by devolution settings. Devolution can be used when a user or application submits a query for a single-label domain name. @@ -438,7 +438,7 @@ ADMX Info: -Available in Windows 10 Insider Preview Build 20185. This policy setting specifies whether the DNS client should convert internationalized domain names (IDNs) to Punycode when the computer is on non-domain networks with no WINS servers configured. +Available in the latest Windows 10 Insider Preview Build. This policy setting specifies whether the DNS client should convert internationalized domain names (IDNs) to Punycode when the computer is on non-domain networks with no WINS servers configured. If this policy setting is enabled, IDNs are not converted to Punycode. @@ -507,7 +507,7 @@ ADMX Info: -Available in Windows 10 Insider Preview Build 20185. This policy setting specifies whether the DNS client should convert internationalized domain names (IDNs) to the Nameprep form, a canonical Unicode representation of the string. +Available in the latest Windows 10 Insider Preview Build. This policy setting specifies whether the DNS client should convert internationalized domain names (IDNs) to the Nameprep form, a canonical Unicode representation of the string. If this policy setting is enabled, IDNs are converted to the Nameprep form. @@ -576,7 +576,7 @@ ADMX Info: -Available in Windows 10 Insider Preview Build 20185. This policy setting defines the DNS servers to which a computer sends queries when it attempts to resolve names. This policy setting supersedes the list of DNS servers configured locally and those configured using DHCP. +Available in the latest Windows 10 Insider Preview Build. This policy setting defines the DNS servers to which a computer sends queries when it attempts to resolve names. This policy setting supersedes the list of DNS servers configured locally and those configured using DHCP. To use this policy setting, click Enabled, and then enter a space-delimited list of IP addresses in the available field. To use this policy setting, you must enter at least one IP address. @@ -647,7 +647,7 @@ ADMX Info: -Available in Windows 10 Insider Preview Build 20185. This policy setting specifies that responses from link local name resolution protocols received over a network interface that is higher in the binding order are preferred over DNS responses from network interfaces lower in the binding order. Examples of link local name resolution protocols include link local multicast name resolution (LLMNR) and NetBIOS over TCP/IP (NetBT). +Available in the latest Windows 10 Insider Preview Build. This policy setting specifies that responses from link local name resolution protocols received over a network interface that is higher in the binding order are preferred over DNS responses from network interfaces lower in the binding order. Examples of link local name resolution protocols include link local multicast name resolution (LLMNR) and NetBIOS over TCP/IP (NetBT). If you enable this policy setting, responses from link local protocols will be preferred over DNS responses if the local responses are from a network with a higher binding order. @@ -720,7 +720,7 @@ ADMX Info: -Available in Windows 10 Insider Preview Build 20185. This policy setting specifies the primary DNS suffix used by computers in DNS name registration and DNS name resolution. +Available in the latest Windows 10 Insider Preview Build. This policy setting specifies the primary DNS suffix used by computers in DNS name registration and DNS name resolution. To use this policy setting, click Enabled and enter the entire primary DNS suffix you want to assign. For example: microsoft.com. @@ -795,7 +795,7 @@ ADMX Info: -Available in Windows 10 Insider Preview Build 20185. This policy setting specifies if a computer performing dynamic DNS registration will register A and PTR resource records with a concatenation of its computer name and a connection-specific DNS suffix, in addition to registering these records with a concatenation of its computer name and the primary DNS suffix. +Available in the latest Windows 10 Insider Preview Build. This policy setting specifies if a computer performing dynamic DNS registration will register A and PTR resource records with a concatenation of its computer name and a connection-specific DNS suffix, in addition to registering these records with a concatenation of its computer name and the primary DNS suffix. By default, a DNS client performing dynamic DNS registration registers A and PTR resource records with a concatenation of its computer name and the primary DNS suffix. For example, a computer name of mycomputer and a primary DNS suffix of microsoft.com will be registered as: mycomputer.microsoft.com. @@ -869,7 +869,7 @@ ADMX Info: -Available in Windows 10 Insider Preview Build 20185. This policy setting specifies if DNS client computers will register PTR resource records. +Available in the latest Windows 10 Insider Preview Build. This policy setting specifies if DNS client computers will register PTR resource records. By default, DNS clients configured to perform dynamic DNS registration will attempt to register PTR resource record only if they successfully registered the corresponding A resource record. @@ -945,7 +945,7 @@ ADMX Info: -Available in Windows 10 Insider Preview Build 20185. This policy setting specifies if DNS dynamic update is enabled. Computers configured for DNS dynamic update automatically register and update their DNS resource records with a DNS server. +Available in the latest Windows 10 Insider Preview Build. This policy setting specifies if DNS dynamic update is enabled. Computers configured for DNS dynamic update automatically register and update their DNS resource records with a DNS server. If you enable this policy setting, or you do not configure this policy setting, computers will attempt to use dynamic DNS registration on all network connections that have connection-specific dynamic DNS registration enabled. For a dynamic DNS registration to be enabled on a network connection, the connection-specific configuration must allow dynamic DNS registration, and this policy setting must not be disabled. @@ -1014,7 +1014,7 @@ ADMX Info: -Available in Windows 10 Insider Preview Build 20185. This policy setting specifies whether dynamic updates should overwrite existing resource records that contain conflicting IP addresses. +Available in the latest Windows 10 Insider Preview Build. This policy setting specifies whether dynamic updates should overwrite existing resource records that contain conflicting IP addresses. This policy setting is designed for computers that register address (A) resource records in DNS zones that do not use Secure Dynamic Updates. Secure Dynamic Update preserves ownership of resource records and does not allow a DNS client to overwrite records that are registered by other computers. @@ -1087,7 +1087,7 @@ ADMX Info: -Available in Windows 10 Insider Preview Build 20185. This policy setting specifies the interval used by DNS clients to refresh registration of A and PTR resource. This policy setting only applies to computers performing dynamic DNS updates. +Available in the latest Windows 10 Insider Preview Build. This policy setting specifies the interval used by DNS clients to refresh registration of A and PTR resource. This policy setting only applies to computers performing dynamic DNS updates. Computers configured to perform dynamic DNS registration of A and PTR resource records periodically reregister their records with DNS servers, even if the record has not changed. This reregistration is required to indicate to DNS servers that records are current and should not be automatically removed (scavenged) when a DNS server is configured to delete stale records. @@ -1163,7 +1163,7 @@ ADMX Info: -Available in Windows 10 Insider Preview Build 20185. This policy setting specifies the value of the time to live (TTL) field in A and PTR resource records that are registered by computers to which this policy setting is applied. +Available in the latest Windows 10 Insider Preview Build. This policy setting specifies the value of the time to live (TTL) field in A and PTR resource records that are registered by computers to which this policy setting is applied. To specify the TTL, click Enabled and then enter a value in seconds (for example, 900 is 15 minutes). @@ -1234,7 +1234,7 @@ ADMX Info: -Available in Windows 10 Insider Preview Build 20185. This policy setting specifies the DNS suffixes to attach to an unqualified single-label name before submission of a DNS query for that name. +Available in the latest Windows 10 Insider Preview Build. This policy setting specifies the DNS suffixes to attach to an unqualified single-label name before submission of a DNS query for that name. An unqualified single-label name contains no dots. The name "example" is a single-label name. This is different from a fully qualified domain name such as "example.microsoft.com." @@ -1310,7 +1310,7 @@ ADMX Info: -Available in Windows 10 Insider Preview Build 20185. This policy setting specifies that a multi-homed DNS client should optimize name resolution across networks. The setting improves performance by issuing parallel DNS, link local multicast name resolution (LLMNR) and NetBIOS over TCP/IP (NetBT) queries across all networks. In the event that multiple positive responses are received, the network binding order is used to determine which response to accept. +Available in the latest Windows 10 Insider Preview Build. This policy setting specifies that a multi-homed DNS client should optimize name resolution across networks. The setting improves performance by issuing parallel DNS, link local multicast name resolution (LLMNR) and NetBIOS over TCP/IP (NetBT) queries across all networks. In the event that multiple positive responses are received, the network binding order is used to determine which response to accept. If you enable this policy setting, the DNS client will not perform any optimizations. DNS queries will be issued across all networks first. LLMNR queries will be issued if the DNS queries fail, followed by NetBT queries if LLMNR queries fail. @@ -1379,7 +1379,7 @@ ADMX Info: -Available in Windows 10 Insider Preview Build 20185. This policy setting specifies that the DNS client should prefer responses from link local name resolution protocols on non-domain networks over DNS responses when issuing queries for flat names. Examples of link local name resolution protocols include link local multicast name resolution (LLMNR) and NetBIOS over TCP/IP (NetBT). +Available in the latest Windows 10 Insider Preview Build. This policy setting specifies that the DNS client should prefer responses from link local name resolution protocols on non-domain networks over DNS responses when issuing queries for flat names. Examples of link local name resolution protocols include link local multicast name resolution (LLMNR) and NetBIOS over TCP/IP (NetBT). If you enable this policy setting, the DNS client will prefer DNS responses, followed by LLMNR, followed by NetBT for all networks. @@ -1451,7 +1451,7 @@ ADMX Info: -Available in Windows 10 Insider Preview Build 20185. This policy setting specifies the security level for dynamic DNS updates. +Available in the latest Windows 10 Insider Preview Build. This policy setting specifies the security level for dynamic DNS updates. To use this policy setting, click Enabled and then select one of the following values: @@ -1526,7 +1526,7 @@ ADMX Info: -Available in Windows 10 Insider Preview Build 20185. This policy setting specifies if computers may send dynamic updates to zones with a single label name. These zones are also known as top-level domain zones, for example: "com." +Available in the latest Windows 10 Insider Preview Build. This policy setting specifies if computers may send dynamic updates to zones with a single label name. These zones are also known as top-level domain zones, for example: "com." By default, a DNS client that is configured to perform dynamic DNS update will update the DNS zone that is authoritative for its DNS resource records unless the authoritative zone is a top-level domain or root zone. @@ -1597,7 +1597,7 @@ ADMX Info: -Available in Windows 10 Insider Preview Build 20185. This policy setting specifies if the DNS client performs primary DNS suffix devolution during the name resolution process. +Available in the latest Windows 10 Insider Preview Build. This policy setting specifies if the DNS client performs primary DNS suffix devolution during the name resolution process. With devolution, a DNS client creates queries by appending a single-label, unqualified domain name with the parent suffix of the primary DNS suffix name, and the parent of that suffix, and so on, stopping if the name is successfully resolved or at a level determined by devolution settings. Devolution can be used when a user or application submits a query for a single-label domain name. @@ -1684,7 +1684,7 @@ ADMX Info: -Available in Windows 10 Insider Preview Build 20185. This policy setting specifies that link local multicast name resolution (LLMNR) is disabled on client computers. +Available in the latest Windows 10 Insider Preview Build. This policy setting specifies that link local multicast name resolution (LLMNR) is disabled on client computers. LLMNR is a secondary name resolution protocol. With LLMNR, queries are sent using multicast over a local network link on a single subnet from a client computer to another client computer on the same subnet that also has LLMNR enabled. LLMNR does not require a DNS server or DNS client configuration, and provides name resolution in scenarios in which conventional DNS name resolution is not possible. diff --git a/windows/client-management/mdm/policy-csp-admx-dwm.md b/windows/client-management/mdm/policy-csp-admx-dwm.md index ff5b9de5cc..e03d29b3c1 100644 --- a/windows/client-management/mdm/policy-csp-admx-dwm.md +++ b/windows/client-management/mdm/policy-csp-admx-dwm.md @@ -89,7 +89,7 @@ manager: dansimp -Available in Windows 10 Insider Preview Build 20185. This policy setting controls the default color for window frames when the user does not specify a color. +Available in the latest Windows 10 Insider Preview Build. This policy setting controls the default color for window frames when the user does not specify a color. If you enable this policy setting and specify a default color, this color is used in glass window frames, if the user does not specify a color. @@ -162,7 +162,7 @@ ADMX Info: -Available in Windows 10 Insider Preview Build 20185. This policy setting controls the default color for window frames when the user does not specify a color. +Available in the latest Windows 10 Insider Preview Build. This policy setting controls the default color for window frames when the user does not specify a color. If you enable this policy setting and specify a default color, this color is used in glass window frames, if the user does not specify a color. @@ -234,7 +234,7 @@ ADMX Info: -Available in Windows 10 Insider Preview Build 20185. This policy setting controls the appearance of window animations such as those found when restoring, minimizing, and maximizing windows. +Available in the latest Windows 10 Insider Preview Build. This policy setting controls the appearance of window animations such as those found when restoring, minimizing, and maximizing windows. If you enable this policy setting, window animations are turned off. @@ -305,7 +305,7 @@ ADMX Info: -Available in Windows 10 Insider Preview Build 20185. This policy setting controls the appearance of window animations such as those found when restoring, minimizing, and maximizing windows. +Available in the latest Windows 10 Insider Preview Build. This policy setting controls the appearance of window animations such as those found when restoring, minimizing, and maximizing windows. If you enable this policy setting, window animations are turned off. @@ -376,7 +376,7 @@ ADMX Info: -Available in Windows 10 Insider Preview Build 20185. This policy setting controls the ability to change the color of window frames. +Available in the latest Windows 10 Insider Preview Build. This policy setting controls the ability to change the color of window frames. If you enable this policy setting, you prevent users from changing the default window frame color. @@ -448,7 +448,7 @@ ADMX Info: -Available in Windows 10 Insider Preview Build 20185. This policy setting controls the ability to change the color of window frames. +Available in the latest Windows 10 Insider Preview Build. This policy setting controls the ability to change the color of window frames. If you enable this policy setting, you prevent users from changing the default window frame color. diff --git a/windows/client-management/mdm/policy-csp-admx-encryptfilesonmove.md b/windows/client-management/mdm/policy-csp-admx-encryptfilesonmove.md index ec7948b584..82b82ab53f 100644 --- a/windows/client-management/mdm/policy-csp-admx-encryptfilesonmove.md +++ b/windows/client-management/mdm/policy-csp-admx-encryptfilesonmove.md @@ -74,7 +74,7 @@ manager: dansimp -Available in Windows 10 Insider Preview Build 20185. This policy setting prevents File Explorer from encrypting files that are moved to an encrypted folder. +Available in the latest Windows 10 Insider Preview Build. This policy setting prevents File Explorer from encrypting files that are moved to an encrypted folder. If you enable this policy setting, File Explorer will not automatically encrypt files that are moved to an encrypted folder. diff --git a/windows/client-management/mdm/policy-csp-admx-eventforwarding.md b/windows/client-management/mdm/policy-csp-admx-eventforwarding.md index e47d548237..985a4580ad 100644 --- a/windows/client-management/mdm/policy-csp-admx-eventforwarding.md +++ b/windows/client-management/mdm/policy-csp-admx-eventforwarding.md @@ -78,7 +78,7 @@ manager: dansimp -Available in Windows 10 Insider Preview Build 20185. This policy setting controls resource usage for the forwarder (source computer) by controlling the events/per second sent to the Event Collector. +Available in the latest Windows 10 Insider Preview Build. This policy setting controls resource usage for the forwarder (source computer) by controlling the events/per second sent to the Event Collector. If you enable this policy setting, you can control the volume of events sent to the Event Collector by the source computer. This may be required in high volume environments. @@ -151,7 +151,7 @@ ADMX Info: -Available in Windows 10 Insider Preview Build 20185. This policy setting allows you to configure the server address, refresh interval, and issuer certificate authority (CA) of a target Subscription Manager. +Available in the latest Windows 10 Insider Preview Build. This policy setting allows you to configure the server address, refresh interval, and issuer certificate authority (CA) of a target Subscription Manager. If you enable this policy setting, you can configure the Source Computer to contact a specific FQDN (Fully Qualified Domain Name) or IP Address and request subscription specifics. diff --git a/windows/client-management/mdm/policy-csp-admx-fileservervssprovider.md b/windows/client-management/mdm/policy-csp-admx-fileservervssprovider.md index 37b6b9a826..97a0885008 100644 --- a/windows/client-management/mdm/policy-csp-admx-fileservervssprovider.md +++ b/windows/client-management/mdm/policy-csp-admx-fileservervssprovider.md @@ -74,7 +74,7 @@ manager: dansimp -Available in Windows 10 Insider Preview Build 20185. This policy setting determines whether the RPC protocol messages used by VSS for SMB2 File Shares feature is enabled. +Available in the latest Windows 10 Insider Preview Build. This policy setting determines whether the RPC protocol messages used by VSS for SMB2 File Shares feature is enabled. VSS for SMB2 File Shares feature enables VSS aware backup applications to perform application consistent backup and restore of VSS aware applications storing data on SMB2 File Shares. diff --git a/windows/client-management/mdm/policy-csp-admx-filesys.md b/windows/client-management/mdm/policy-csp-admx-filesys.md index fbdc148b37..aadede45cf 100644 --- a/windows/client-management/mdm/policy-csp-admx-filesys.md +++ b/windows/client-management/mdm/policy-csp-admx-filesys.md @@ -93,7 +93,7 @@ manager: dansimp -Available in Windows 10 Insider Preview Build 20185. Compression can add to the processing overhead of filesystem operations. Enabling this setting will prevent access to and creation of compressed files. +Available in the latest Windows 10 Insider Preview Build. Compression can add to the processing overhead of filesystem operations. Enabling this setting will prevent access to and creation of compressed files. > [!TIP] @@ -157,7 +157,7 @@ ADMX Info: -Available in Windows 10 Insider Preview Build 20185. Delete notification is a feature that notifies the underlying storage device of clusters that are freed due to a file delete operation. +Available in the latest Windows 10 Insider Preview Build. Delete notification is a feature that notifies the underlying storage device of clusters that are freed due to a file delete operation. A value of 0, the default, will enable delete notifications for all volumes. @@ -224,7 +224,7 @@ ADMX Info: -Available in Windows 10 Insider Preview Build 20185. Encryption can add to the processing overhead of filesystem operations. Enabling this setting will prevent access to and creation of encrypted files. +Available in the latest Windows 10 Insider Preview Build. Encryption can add to the processing overhead of filesystem operations. Enabling this setting will prevent access to and creation of encrypted files. > [!TIP] @@ -287,7 +287,7 @@ ADMX Info: -Available in Windows 10 Insider Preview Build 20185. Encrypting the page file prevents malicious users from reading data that has been paged to disk, but also adds processing overhead for filesystem operations. Enabling this setting will cause the page files to be encrypted. +Available in the latest Windows 10 Insider Preview Build. Encrypting the page file prevents malicious users from reading data that has been paged to disk, but also adds processing overhead for filesystem operations. Enabling this setting will cause the page files to be encrypted. > [!TIP] @@ -350,7 +350,7 @@ ADMX Info: -Available in Windows 10 Insider Preview Build 20185. Enabling Win32 long paths will allow manifested win32 applications and Windows Store applications to access paths beyond the normal 260 character limit per node on file systems that support it. Enabling this setting will cause the long paths to be accessible within the process. +Available in the latest Windows 10 Insider Preview Build. Enabling Win32 long paths will allow manifested win32 applications and Windows Store applications to access paths beyond the normal 260 character limit per node on file systems that support it. Enabling this setting will cause the long paths to be accessible within the process. > [!TIP] @@ -413,7 +413,7 @@ ADMX Info: -Available in Windows 10 Insider Preview Build 20185. This policy setting provides control over whether or not short names are generated during file creation. Some applications require short names for compatibility, but short names have a negative performance impact on the system. +Available in the latest Windows 10 Insider Preview Build. This policy setting provides control over whether or not short names are generated during file creation. Some applications require short names for compatibility, but short names have a negative performance impact on the system. If you enable short names on all volumes then short names will always be generated. If you disable them on all volumes then they will never be generated. If you set short name creation to be configurable on a per volume basis then an on-disk flag will determine whether or not short names are created on a given volume. If you disable short name creation on all data volumes then short names will only be generated for files created on the system volume. @@ -479,7 +479,7 @@ ADMX Info: -Available in Windows 10 Insider Preview Build 20185. Symbolic links can introduce vulnerabilities in certain applications. To mitigate this issue, you can selectively enable or disable the evaluation of these types of symbolic links: +Available in the latest Windows 10 Insider Preview Build. Symbolic links can introduce vulnerabilities in certain applications. To mitigate this issue, you can selectively enable or disable the evaluation of these types of symbolic links: - Local Link to a Local Target - Local Link to a Remote Target @@ -552,7 +552,7 @@ ADMX Info: -Available in Windows 10 Insider Preview Build 20185. TXF deprecated features included savepoints, secondary RM, miniversion and roll forward. Enable it if you want to use the APIs. +Available in the latest Windows 10 Insider Preview Build. TXF deprecated features included savepoints, secondary RM, miniversion and roll forward. Enable it if you want to use the APIs. > [!TIP] diff --git a/windows/client-management/mdm/policy-csp-admx-folderredirection.md b/windows/client-management/mdm/policy-csp-admx-folderredirection.md index 845c514983..97576c4d96 100644 --- a/windows/client-management/mdm/policy-csp-admx-folderredirection.md +++ b/windows/client-management/mdm/policy-csp-admx-folderredirection.md @@ -91,7 +91,7 @@ manager: dansimp -Available in Windows 10 Insider Preview Build 20185. This policy setting allows you to control whether all redirected shell folders, such as Contacts, Documents, Desktop, Favorites, Music, Pictures, Videos, Start Menu, and AppData\Roaming, are available offline by default. +Available in the latest Windows 10 Insider Preview Build. This policy setting allows you to control whether all redirected shell folders, such as Contacts, Documents, Desktop, Favorites, Music, Pictures, Videos, Start Menu, and AppData\Roaming, are available offline by default. If you enable this policy setting, users must manually select the files they wish to make available offline. @@ -166,7 +166,7 @@ ADMX Info: -Available in Windows 10 Insider Preview Build 20185. This policy setting allows you to control whether individual redirected shell folders are available offline by default. +Available in the latest Windows 10 Insider Preview Build. This policy setting allows you to control whether individual redirected shell folders are available offline by default. For the folders affected by this setting, users must manually select the files they wish to make available offline. @@ -240,7 +240,7 @@ ADMX Info: -Available in Windows 10 Insider Preview Build 20185. This policy setting controls whether the contents of redirected folders is copied from the old location to the new location or simply renamed in the Offline Files cache when a folder is redirected to a new location. +Available in the latest Windows 10 Insider Preview Build. This policy setting controls whether the contents of redirected folders is copied from the old location to the new location or simply renamed in the Offline Files cache when a folder is redirected to a new location. If you enable this policy setting, when the path to a redirected folder is changed from one network location to another and Folder Redirection is configured to move the content to the new location, instead of copying the content to the new location, the cached content is renamed in the local cache and not copied to the new location. To use this policy setting, you must move or restore the server content to the new network location using a method that preserves the state of the files, including their timestamps, before updating the Folder Redirection location. @@ -309,7 +309,7 @@ ADMX Info: -Available in Windows 10 Insider Preview Build 20185. This policy setting allows the administrator to define whether Folder Redirection should use localized names for the All Programs, Startup, My Music, My Pictures, and My Videos subfolders when redirecting the parent Start Menu and legacy My Documents folder respectively. +Available in the latest Windows 10 Insider Preview Build. This policy setting allows the administrator to define whether Folder Redirection should use localized names for the All Programs, Startup, My Music, My Pictures, and My Videos subfolders when redirecting the parent Start Menu and legacy My Documents folder respectively. If you enable this policy setting, Windows Vista, Windows 7, Windows 8, and Windows Server 2012 will use localized folder names for these subfolders when redirecting the Start Menu or legacy My Documents folder. @@ -381,7 +381,7 @@ ADMX Info: -Available in Windows 10 Insider Preview Build 20185. This policy setting allows the administrator to define whether Folder Redirection should use localized names for the All Programs, Startup, My Music, My Pictures, and My Videos subfolders when redirecting the parent Start Menu and legacy My Documents folder respectively. +Available in the latest Windows 10 Insider Preview Build. This policy setting allows the administrator to define whether Folder Redirection should use localized names for the All Programs, Startup, My Music, My Pictures, and My Videos subfolders when redirecting the parent Start Menu and legacy My Documents folder respectively. If you enable this policy setting, Windows Vista, Windows 7, Windows 8, and Windows Server 2012 will use localized folder names for these subfolders when redirecting the Start Menu or legacy My Documents folder. @@ -452,7 +452,7 @@ ADMX Info: -Available in Windows 10 Insider Preview Build 20185. This policy setting controls whether folders are redirected on a user's primary computers only. This policy setting is useful to improve logon performance and to increase security for user data on computers where the user might not want to download private data, such as on a meeting room computer or on a computer in a remote office. +Available in the latest Windows 10 Insider Preview Build. This policy setting controls whether folders are redirected on a user's primary computers only. This policy setting is useful to improve logon performance and to increase security for user data on computers where the user might not want to download private data, such as on a meeting room computer or on a computer in a remote office. To designate a user's primary computers, an administrator must use management software or a script to add primary computer attributes to the user's account in Active Directory Domain Services (AD DS). This policy setting also requires the Windows Server 2012 version of the Active Directory schema to function. @@ -525,7 +525,7 @@ ADMX Info: -Available in Windows 10 Insider Preview Build 20185. This policy setting controls whether folders are redirected on a user's primary computers only. This policy setting is useful to improve logon performance and to increase security for user data on computers where the user might not want to download private data, such as on a meeting room computer or on a computer in a remote office. +Available in the latest Windows 10 Insider Preview Build. This policy setting controls whether folders are redirected on a user's primary computers only. This policy setting is useful to improve logon performance and to increase security for user data on computers where the user might not want to download private data, such as on a meeting room computer or on a computer in a remote office. To designate a user's primary computers, an administrator must use management software or a script to add primary computer attributes to the user's account in Active Directory Domain Services (AD DS). This policy setting also requires the Windows Server 2012 version of the Active Directory schema to function. diff --git a/windows/client-management/mdm/policy-csp-admx-help.md b/windows/client-management/mdm/policy-csp-admx-help.md index d705d091a0..9f96bb2c16 100644 --- a/windows/client-management/mdm/policy-csp-admx-help.md +++ b/windows/client-management/mdm/policy-csp-admx-help.md @@ -83,7 +83,7 @@ manager: dansimp -Available in Windows 10 Insider Preview Build 20185. This policy setting allows you to exclude HTML Help Executable from being monitored by software-enforced Data Execution Prevention. +Available in the latest Windows 10 Insider Preview Build. This policy setting allows you to exclude HTML Help Executable from being monitored by software-enforced Data Execution Prevention. Data Execution Prevention (DEP) is designed to block malicious code that takes advantage of exception-handling mechanisms in Windows by monitoring your programs to make sure that they use system memory safely. @@ -154,7 +154,7 @@ ADMX Info: -Available in Windows 10 Insider Preview Build 20185. This policy setting allows you to restrict certain HTML Help commands to function only in HTML Help (.chm) files within specified folders and their subfolders. Alternatively, you can disable these commands on the entire system. It is strongly recommended that only folders requiring administrative privileges be added to this policy setting. +Available in the latest Windows 10 Insider Preview Build. This policy setting allows you to restrict certain HTML Help commands to function only in HTML Help (.chm) files within specified folders and their subfolders. Alternatively, you can disable these commands on the entire system. It is strongly recommended that only folders requiring administrative privileges be added to this policy setting. If you enable this policy setting, the commands function only for .chm files in the specified folders and their subfolders. @@ -237,7 +237,7 @@ ADMX Info: -Available in Windows 10 Insider Preview Build 20185. This policy setting allows you to restrict programs from being run from online Help. +Available in the latest Windows 10 Insider Preview Build. This policy setting allows you to restrict programs from being run from online Help. If you enable this policy setting, you can prevent specified programs from being run from Help. When you enable this policy setting, enter the file names names of the programs you want to restrict, separated by commas. @@ -311,7 +311,7 @@ ADMX Info: -Available in Windows 10 Insider Preview Build 20185. This policy setting allows you to restrict programs from being run from online Help. +Available in the latest Windows 10 Insider Preview Build. This policy setting allows you to restrict programs from being run from online Help. If you enable this policy setting, you can prevent specified programs from being run from Help. When you enable this policy setting, enter the file names names of the programs you want to restrict, separated by commas. diff --git a/windows/client-management/mdm/policy-csp-admx-helpandsupport.md b/windows/client-management/mdm/policy-csp-admx-helpandsupport.md index 10d08651fc..50be68bfc6 100644 --- a/windows/client-management/mdm/policy-csp-admx-helpandsupport.md +++ b/windows/client-management/mdm/policy-csp-admx-helpandsupport.md @@ -83,7 +83,7 @@ manager: dansimp -Available in Windows 10 Insider Preview Build 20185. This policy setting specifies whether active content links in trusted assistance content are rendered. By default, the Help viewer renders trusted assistance content with active elements such as ShellExecute links and Guided Help links. +Available in the latest Windows 10 Insider Preview Build. This policy setting specifies whether active content links in trusted assistance content are rendered. By default, the Help viewer renders trusted assistance content with active elements such as ShellExecute links and Guided Help links. If you enable this policy setting, active content links are not rendered. The text is displayed, but there are no clickable links for these elements. @@ -152,7 +152,7 @@ ADMX Info: -Available in Windows 10 Insider Preview Build 20185. This policy setting specifies whether users can provide ratings for Help content. +Available in the latest Windows 10 Insider Preview Build. This policy setting specifies whether users can provide ratings for Help content. If you enable this policy setting, ratings controls are not added to Help content. @@ -222,7 +222,7 @@ ADMX Info: -Available in Windows 10 Insider Preview Build 20185. This policy setting specifies whether users can participate in the Help Experience Improvement program. The Help Experience Improvement program collects information about how customers use Windows Help so that Microsoft can improve it. +Available in the latest Windows 10 Insider Preview Build. This policy setting specifies whether users can participate in the Help Experience Improvement program. The Help Experience Improvement program collects information about how customers use Windows Help so that Microsoft can improve it. If you enable this policy setting, users cannot participate in the Help Experience Improvement program. @@ -291,7 +291,7 @@ ADMX Info: -Available in Windows 10 Insider Preview Build 20185. This policy setting specifies whether users can search and view content from Windows Online in Help and Support. Windows Online provides the most up-to-date Help content for Windows. +Available in the latest Windows 10 Insider Preview Build. This policy setting specifies whether users can search and view content from Windows Online in Help and Support. Windows Online provides the most up-to-date Help content for Windows. If you enable this policy setting, users are prevented from accessing online assistance content from Windows Online. diff --git a/windows/client-management/mdm/policy-csp-admx-kdc.md b/windows/client-management/mdm/policy-csp-admx-kdc.md index 4a63715208..baaaa464b2 100644 --- a/windows/client-management/mdm/policy-csp-admx-kdc.md +++ b/windows/client-management/mdm/policy-csp-admx-kdc.md @@ -89,7 +89,7 @@ manager: dansimp -Available in Windows 10 Insider Preview Build 20185. This policy setting allows you to configure a domain controller to support claims and compound authentication for Dynamic Access Control and Kerberos armoring using Kerberos authentication. +Available in the latest Windows 10 Insider Preview Build. This policy setting allows you to configure a domain controller to support claims and compound authentication for Dynamic Access Control and Kerberos armoring using Kerberos authentication. If you enable this policy setting, client computers that support claims and compound authentication for Dynamic Access Control and are Kerberos armor-aware will use this feature for Kerberos authentication messages. This policy should be applied to all domain controllers to ensure consistent application of this policy in the domain. @@ -185,7 +185,7 @@ ADMX Info: -Available in Windows 10 Insider Preview Build 20185. This policy setting defines the list of trusting forests that the Key Distribution Center (KDC) searches when attempting to resolve two-part service principal names (SPNs). +Available in the latest Windows 10 Insider Preview Build. This policy setting defines the list of trusting forests that the Key Distribution Center (KDC) searches when attempting to resolve two-part service principal names (SPNs). If you enable this policy setting, the KDC will search the forests in this list if it is unable to resolve a two-part SPN in the local forest. The forest search is performed by using a global catalog or name suffix hints. If a match is found, the KDC will return a referral ticket to the client for the appropriate domain. @@ -256,7 +256,7 @@ ADMX Info: -Available in Windows 10 Insider Preview Build 20185. Support for PKInit Freshness Extension requires Windows Server 2016 domain functional level (DFL). If the domain controller’s domain is not at Windows Server 2016 DFL or higher this policy will not be applied. +Available in the latest Windows 10 Insider Preview Build. Support for PKInit Freshness Extension requires Windows Server 2016 domain functional level (DFL). If the domain controller’s domain is not at Windows Server 2016 DFL or higher this policy will not be applied. This policy setting allows you to configure a domain controller (DC) to support the PKInit Freshness Extension. @@ -331,7 +331,7 @@ ADMX Info: -Available in Windows 10 Insider Preview Build 20185. This policy setting allows you to configure a domain controller to request compound authentication. +Available in the latest Windows 10 Insider Preview Build. This policy setting allows you to configure a domain controller to request compound authentication. > [!NOTE] > For a domain controller to request compound authentication, the policy "KDC support for claims, compound authentication, and Kerberos armoring" must be configured and enabled. @@ -403,7 +403,7 @@ ADMX Info: -Available in Windows 10 Insider Preview Build 20185. This policy setting allows you to configure at what size Kerberos tickets will trigger the warning event issued during Kerberos authentication. The ticket size warnings are logged in the System log. +Available in the latest Windows 10 Insider Preview Build. This policy setting allows you to configure at what size Kerberos tickets will trigger the warning event issued during Kerberos authentication. The ticket size warnings are logged in the System log. If you enable this policy setting, you can set the threshold limit for Kerberos ticket which trigger the warning events. If set too high, then authentication failures might be occurring even though warning events are not being logged. If set too low, then there will be too many ticket warnings in the log to be useful for analysis. This value should be set to the same value as the Kerberos policy "Set maximum Kerberos SSPI context token buffer size" or the smallest MaxTokenSize used in your environment if you are not configuring using Group Policy. @@ -472,7 +472,7 @@ ADMX Info: -Available in Windows 10 Insider Preview Build 20185. This policy setting controls whether the domain controller provides information about previous logons to client computers. +Available in the latest Windows 10 Insider Preview Build. This policy setting controls whether the domain controller provides information about previous logons to client computers. If you enable this policy setting, the domain controller provides the information message about previous logons. diff --git a/windows/client-management/mdm/policy-csp-admx-lanmanserver.md b/windows/client-management/mdm/policy-csp-admx-lanmanserver.md index ddaddd01f1..bf08d08f1b 100644 --- a/windows/client-management/mdm/policy-csp-admx-lanmanserver.md +++ b/windows/client-management/mdm/policy-csp-admx-lanmanserver.md @@ -83,7 +83,7 @@ manager: dansimp -Available in Windows 10 Insider Preview Build 20185. This policy setting determines the cipher suites used by the SMB server. +Available in the latest Windows 10 Insider Preview Build. This policy setting determines the cipher suites used by the SMB server. If you enable this policy setting, cipher suites are prioritized in the order specified. @@ -172,7 +172,7 @@ ADMX Info: -Available in Windows 10 Insider Preview Build 20185. This policy setting specifies whether a hash generation service generates hashes, also called content information, for data that is stored in shared folders. This policy setting must be applied to server computers that have the File Services role and both the File Server and the BranchCache for Network Files role services installed. +Available in the latest Windows 10 Insider Preview Build. This policy setting specifies whether a hash generation service generates hashes, also called content information, for data that is stored in shared folders. This policy setting must be applied to server computers that have the File Services role and both the File Server and the BranchCache for Network Files role services installed. Policy configuration @@ -255,7 +255,7 @@ ADMX Info: -Available in Windows 10 Insider Preview Build 20185. This policy setting specifies whether the BranchCache hash generation service supports version 1 (V1) hashes, version 2 (V2) hashes, or both V1 and V2 hashes. Hashes, also called content information, are created based on the data in shared folders where BranchCache is enabled. +Available in the latest Windows 10 Insider Preview Build. This policy setting specifies whether the BranchCache hash generation service supports version 1 (V1) hashes, version 2 (V2) hashes, or both V1 and V2 hashes. Hashes, also called content information, are created based on the data in shared folders where BranchCache is enabled. If you specify only one version that is supported, content information for that version is the only type that is generated by BranchCache, and it is the only type of content information that can be retrieved by client computers. For example, if you enable support for V1 hashes, BranchCache generates only V1 hashes and client computers can retrieve only V1 hashes. @@ -338,7 +338,7 @@ ADMX Info: -Available in Windows 10 Insider Preview Build 20185. This policy setting determines how the SMB server selects a cipher suite when negotiating a new connection with an SMB client. +Available in the latest Windows 10 Insider Preview Build. This policy setting determines how the SMB server selects a cipher suite when negotiating a new connection with an SMB client. If you enable this policy setting, the SMB server will select the cipher suite it most prefers from the list of client-supported cipher suites, ignoring the client's preferences. diff --git a/windows/client-management/mdm/policy-csp-admx-linklayertopologydiscovery.md b/windows/client-management/mdm/policy-csp-admx-linklayertopologydiscovery.md index d4f25831ab..f36c218e89 100644 --- a/windows/client-management/mdm/policy-csp-admx-linklayertopologydiscovery.md +++ b/windows/client-management/mdm/policy-csp-admx-linklayertopologydiscovery.md @@ -77,7 +77,7 @@ manager: dansimp -Available in Windows 10 Insider Preview Build 20185. This policy setting changes the operational behavior of the Mapper I/O network protocol driver. +Available in the latest Windows 10 Insider Preview Build. This policy setting changes the operational behavior of the Mapper I/O network protocol driver. LLTDIO allows a computer to discover the topology of a network it's connected to. It also allows a computer to initiate Quality-of-Service requests such as bandwidth estimation and network health analysis. @@ -148,7 +148,7 @@ ADMX Info: -Available in Windows 10 Insider Preview Build 20185. This policy setting changes the operational behavior of the Responder network protocol driver. +Available in the latest Windows 10 Insider Preview Build. This policy setting changes the operational behavior of the Responder network protocol driver. The Responder allows a computer to participate in Link Layer Topology Discovery requests so that it can be discovered and located on the network. It also allows a computer to participate in Quality-of-Service activities such as bandwidth estimation and network health analysis. diff --git a/windows/client-management/mdm/policy-csp-admx-mmc.md b/windows/client-management/mdm/policy-csp-admx-mmc.md index a86907a534..e51d3bfcb5 100644 --- a/windows/client-management/mdm/policy-csp-admx-mmc.md +++ b/windows/client-management/mdm/policy-csp-admx-mmc.md @@ -86,7 +86,7 @@ manager: dansimp -Available in Windows 10 Insider Preview Build 20185. This policy setting permits or prohibits use of this snap-in. +Available in the latest Windows 10 Insider Preview Build. This policy setting permits or prohibits use of this snap-in. If you enable this setting, the snap-in is permitted. If you disable the setting, the snap-in is prohibited. @@ -165,7 +165,7 @@ ADMX Info: -Available in Windows 10 Insider Preview Build 20185. This policy setting permits or prohibits use of this snap-in. +Available in the latest Windows 10 Insider Preview Build. This policy setting permits or prohibits use of this snap-in. If you enable this setting, the snap-in is permitted. If you disable the setting, the snap-in is prohibited. @@ -244,7 +244,7 @@ ADMX Info: -Available in Windows 10 Insider Preview Build 20185. This policy setting permits or prohibits use of this snap-in. +Available in the latest Windows 10 Insider Preview Build. This policy setting permits or prohibits use of this snap-in. If you enable this setting, the snap-in is permitted. If you disable the setting, the snap-in is prohibited. @@ -323,7 +323,7 @@ ADMX Info: -Available in Windows 10 Insider Preview Build 20185. This policy setting prevents users from entering author mode. +Available in the latest Windows 10 Insider Preview Build. This policy setting prevents users from entering author mode. This setting prevents users from opening the Microsoft Management Console (MMC) in author mode, explicitly opening console files in author mode, and opening any console files that open in author mode by default. @@ -396,7 +396,7 @@ ADMX Info: -Available in Windows 10 Insider Preview Build 20185. This policy setting lets you selectively permit or prohibit the use of Microsoft Management Console (MMC) snap-ins. +Available in the latest Windows 10 Insider Preview Build. This policy setting lets you selectively permit or prohibit the use of Microsoft Management Console (MMC) snap-ins. - If you enable this setting, all snap-ins are prohibited, except those that you explicitly permit. Use this setting if you plan to prohibit use of most snap-ins. diff --git a/windows/client-management/mdm/policy-csp-admx-mmcsnapins.md b/windows/client-management/mdm/policy-csp-admx-mmcsnapins.md index cdd93c1d97..2190dbabeb 100644 --- a/windows/client-management/mdm/policy-csp-admx-mmcsnapins.md +++ b/windows/client-management/mdm/policy-csp-admx-mmcsnapins.md @@ -383,7 +383,7 @@ manager: dansimp -Available in Windows 10 Insider Preview Build 20185. This policy setting permits or prohibits the use of this snap-in. +Available in the latest Windows 10 Insider Preview Build. This policy setting permits or prohibits the use of this snap-in. If you enable this policy setting, the snap-in is permitted and can be added into the Microsoft Management Console or run from the command line as a standalone console. @@ -460,7 +460,7 @@ ADMX Info: -Available in Windows 10 Insider Preview Build 20185. This policy setting permits or prohibits the use of this snap-in. +Available in the latest Windows 10 Insider Preview Build. This policy setting permits or prohibits the use of this snap-in. If you enable this policy setting, the snap-in is permitted and can be added into the Microsoft Management Console or run from the command line as a standalone console. @@ -538,7 +538,7 @@ ADMX Info: -Available in Windows 10 Insider Preview Build 20185. This policy setting permits or prohibits the use of this snap-in. +Available in the latest Windows 10 Insider Preview Build. This policy setting permits or prohibits the use of this snap-in. If you enable this policy setting, the snap-in is permitted and can be added into the Microsoft Management Console or run from the command line as a standalone console. @@ -616,7 +616,7 @@ ADMX Info: -Available in Windows 10 Insider Preview Build 20185. This policy setting permits or prohibits the use of this snap-in. +Available in the latest Windows 10 Insider Preview Build. This policy setting permits or prohibits the use of this snap-in. If you enable this policy setting, the snap-in is permitted and can be added into the Microsoft Management Console or run from the command line as a standalone console. @@ -694,7 +694,7 @@ ADMX Info: -Available in Windows 10 Insider Preview Build 20185. This policy setting permits or prohibits the use of this snap-in. +Available in the latest Windows 10 Insider Preview Build. This policy setting permits or prohibits the use of this snap-in. If you enable this policy setting, the snap-in is permitted and can be added into the Microsoft Management Console or run from the command line as a standalone console. @@ -772,7 +772,7 @@ ADMX Info: -Available in Windows 10 Insider Preview Build 20185. This policy setting permits or prohibits the use of this snap-in. +Available in the latest Windows 10 Insider Preview Build. This policy setting permits or prohibits the use of this snap-in. If you enable this policy setting, the snap-in is permitted and can be added into the Microsoft Management Console or run from the command line as a standalone console. @@ -850,7 +850,7 @@ ADMX Info: -Available in Windows 10 Insider Preview Build 20185. This policy setting permits or prohibits the use of this snap-in. +Available in the latest Windows 10 Insider Preview Build. This policy setting permits or prohibits the use of this snap-in. If you enable this policy setting, the snap-in is permitted and can be added into the Microsoft Management Console or run from the command line as a standalone console. @@ -928,7 +928,7 @@ ADMX Info: -Available in Windows 10 Insider Preview Build 20185. This policy setting permits or prohibits the use of this snap-in. +Available in the latest Windows 10 Insider Preview Build. This policy setting permits or prohibits the use of this snap-in. If you enable this policy setting, the snap-in is permitted and can be added into the Microsoft Management Console or run from the command line as a standalone console. @@ -1006,7 +1006,7 @@ ADMX Info: -Available in Windows 10 Insider Preview Build 20185. This policy setting permits or prohibits the use of this snap-in. +Available in the latest Windows 10 Insider Preview Build. This policy setting permits or prohibits the use of this snap-in. If you enable this policy setting, the snap-in is permitted and can be added into the Microsoft Management Console or run from the command line as a standalone console. @@ -1084,7 +1084,7 @@ ADMX Info: -Available in Windows 10 Insider Preview Build 20185. This policy setting permits or prohibits the use of this snap-in. +Available in the latest Windows 10 Insider Preview Build. This policy setting permits or prohibits the use of this snap-in. If you enable this policy setting, the snap-in is permitted and can be added into the Microsoft Management Console or run from the command line as a standalone console. @@ -1162,7 +1162,7 @@ ADMX Info: -Available in Windows 10 Insider Preview Build 20185. This policy setting permits or prohibits the use of this snap-in. +Available in the latest Windows 10 Insider Preview Build. This policy setting permits or prohibits the use of this snap-in. If you enable this policy setting, the snap-in is permitted and can be added into the Microsoft Management Console or run from the command line as a standalone console. @@ -1240,7 +1240,7 @@ ADMX Info: -Available in Windows 10 Insider Preview Build 20185. This policy setting permits or prohibits the use of this snap-in. +Available in the latest Windows 10 Insider Preview Build. This policy setting permits or prohibits the use of this snap-in. If you enable this policy setting, the snap-in is permitted and can be added into the Microsoft Management Console or run from the command line as a standalone console. @@ -1317,7 +1317,7 @@ ADMX Info: -Available in Windows 10 Insider Preview Build 20185. This policy setting permits or prohibits the use of this snap-in. +Available in the latest Windows 10 Insider Preview Build. This policy setting permits or prohibits the use of this snap-in. If you enable this policy setting, the snap-in is permitted and can be added into the Microsoft Management Console or run from the command line as a standalone console. @@ -1394,7 +1394,7 @@ ADMX Info: -Available in Windows 10 Insider Preview Build 20185. This policy setting permits or prohibits the use of this snap-in. +Available in the latest Windows 10 Insider Preview Build. This policy setting permits or prohibits the use of this snap-in. If you enable this policy setting, the snap-in is permitted and can be added into the Microsoft Management Console or run from the command line as a standalone console. @@ -1471,7 +1471,7 @@ ADMX Info: -Available in Windows 10 Insider Preview Build 20185. This policy setting permits or prohibits the use of this snap-in. +Available in the latest Windows 10 Insider Preview Build. This policy setting permits or prohibits the use of this snap-in. If you enable this policy setting, the snap-in is permitted and can be added into the Microsoft Management Console or run from the command line as a standalone console. @@ -1548,7 +1548,7 @@ ADMX Info: -Available in Windows 10 Insider Preview Build 20185. This policy setting permits or prohibits the use of this snap-in. +Available in the latest Windows 10 Insider Preview Build. This policy setting permits or prohibits the use of this snap-in. If you enable this policy setting, the snap-in is permitted and can be added into the Microsoft Management Console or run from the command line as a standalone console. @@ -1625,7 +1625,7 @@ ADMX Info: -Available in Windows 10 Insider Preview Build 20185. This policy setting permits or prohibits the use of this snap-in. +Available in the latest Windows 10 Insider Preview Build. This policy setting permits or prohibits the use of this snap-in. If you enable this policy setting, the snap-in is permitted and can be added into the Microsoft Management Console or run from the command line as a standalone console. @@ -1702,7 +1702,7 @@ ADMX Info: -Available in Windows 10 Insider Preview Build 20185. This policy setting permits or prohibits the use of this snap-in. +Available in the latest Windows 10 Insider Preview Build. This policy setting permits or prohibits the use of this snap-in. If you enable this policy setting, the snap-in is permitted and can be added into the Microsoft Management Console or run from the command line as a standalone console. @@ -1779,7 +1779,7 @@ ADMX Info: -Available in Windows 10 Insider Preview Build 20185. This policy setting permits or prohibits the use of this snap-in. +Available in the latest Windows 10 Insider Preview Build. This policy setting permits or prohibits the use of this snap-in. If you enable this policy setting, the snap-in is permitted and can be added into the Microsoft Management Console or run from the command line as a standalone console. @@ -1856,7 +1856,7 @@ ADMX Info: -Available in Windows 10 Insider Preview Build 20185. This policy setting permits or prohibits the use of this snap-in. +Available in the latest Windows 10 Insider Preview Build. This policy setting permits or prohibits the use of this snap-in. If you enable this policy setting, the snap-in is permitted and can be added into the Microsoft Management Console or run from the command line as a standalone console. @@ -1933,7 +1933,7 @@ ADMX Info: -Available in Windows 10 Insider Preview Build 20185. This policy setting permits or prohibits the use of this snap-in. +Available in the latest Windows 10 Insider Preview Build. This policy setting permits or prohibits the use of this snap-in. If you enable this policy setting, the snap-in is permitted and can be added into the Microsoft Management Console or run from the command line as a standalone console. @@ -2010,7 +2010,7 @@ ADMX Info: -Available in Windows 10 Insider Preview Build 20185. This policy setting permits or prohibits the use of this snap-in. +Available in the latest Windows 10 Insider Preview Build. This policy setting permits or prohibits the use of this snap-in. If you enable this policy setting, the snap-in is permitted and can be added into the Microsoft Management Console or run from the command line as a standalone console. @@ -2087,7 +2087,7 @@ ADMX Info: -Available in Windows 10 Insider Preview Build 20185. This policy setting permits or prohibits the use of this snap-in. +Available in the latest Windows 10 Insider Preview Build. This policy setting permits or prohibits the use of this snap-in. If you enable this policy setting, the snap-in is permitted and can be added into the Microsoft Management Console or run from the command line as a standalone console. @@ -2164,7 +2164,7 @@ ADMX Info: -Available in Windows 10 Insider Preview Build 20185. This policy setting permits or prohibits the use of this snap-in. +Available in the latest Windows 10 Insider Preview Build. This policy setting permits or prohibits the use of this snap-in. If you enable this policy setting, the snap-in is permitted and can be added into the Microsoft Management Console or run from the command line as a standalone console. @@ -2241,7 +2241,7 @@ ADMX Info: -Available in Windows 10 Insider Preview Build 20185. This policy setting permits or prohibits the use of this snap-in. +Available in the latest Windows 10 Insider Preview Build. This policy setting permits or prohibits the use of this snap-in. If you enable this policy setting, the snap-in is permitted and can be added into the Microsoft Management Console or run from the command line as a standalone console. @@ -2318,7 +2318,7 @@ ADMX Info: -Available in Windows 10 Insider Preview Build 20185. This policy setting permits or prohibits the use of this snap-in. +Available in the latest Windows 10 Insider Preview Build. This policy setting permits or prohibits the use of this snap-in. If you enable this policy setting, the snap-in is permitted and can be added into the Microsoft Management Console or run from the command line as a standalone console. @@ -2395,7 +2395,7 @@ ADMX Info: -Available in Windows 10 Insider Preview Build 20185. This policy setting permits or prohibits the use of this snap-in. +Available in the latest Windows 10 Insider Preview Build. This policy setting permits or prohibits the use of this snap-in. If you enable this policy setting, the snap-in is permitted and can be added into the Microsoft Management Console or run from the command line as a standalone console. @@ -2472,7 +2472,7 @@ ADMX Info: -Available in Windows 10 Insider Preview Build 20185. This policy setting permits or prohibits the use of this snap-in. +Available in the latest Windows 10 Insider Preview Build. This policy setting permits or prohibits the use of this snap-in. If you enable this policy setting, the snap-in is permitted and can be added into the Microsoft Management Console or run from the command line as a standalone console. @@ -2549,7 +2549,7 @@ ADMX Info: -Available in Windows 10 Insider Preview Build 20185. This policy setting permits or prohibits the use of this snap-in. +Available in the latest Windows 10 Insider Preview Build. This policy setting permits or prohibits the use of this snap-in. If you enable this policy setting, the snap-in is permitted and can be added into the Microsoft Management Console or run from the command line as a standalone console. @@ -2627,7 +2627,7 @@ ADMX Info: -Available in Windows 10 Insider Preview Build 20185. This policy setting permits or prohibits the use of this snap-in. +Available in the latest Windows 10 Insider Preview Build. This policy setting permits or prohibits the use of this snap-in. If you enable this policy setting, the snap-in is permitted and can be added into the Microsoft Management Console or run from the command line as a standalone console. @@ -2704,7 +2704,7 @@ ADMX Info: -Available in Windows 10 Insider Preview Build 20185. This policy setting permits or prohibits the use of this snap-in. +Available in the latest Windows 10 Insider Preview Build. This policy setting permits or prohibits the use of this snap-in. If you enable this policy setting, the snap-in is permitted and can be added into the Microsoft Management Console or run from the command line as a standalone console. @@ -2781,7 +2781,7 @@ ADMX Info: -Available in Windows 10 Insider Preview Build 20185. This policy setting permits or prohibits the use of this snap-in. +Available in the latest Windows 10 Insider Preview Build. This policy setting permits or prohibits the use of this snap-in. If you enable this policy setting, the snap-in is permitted and can be added into the Microsoft Management Console or run from the command line as a standalone console. @@ -2858,7 +2858,7 @@ ADMX Info: -Available in Windows 10 Insider Preview Build 20185. This policy setting permits or prohibits the use of this snap-in. +Available in the latest Windows 10 Insider Preview Build. This policy setting permits or prohibits the use of this snap-in. If you enable this policy setting, the snap-in is permitted and can be added into the Microsoft Management Console or run from the command line as a standalone console. @@ -2935,7 +2935,7 @@ ADMX Info: -Available in Windows 10 Insider Preview Build 20185. This policy setting permits or prohibits the use of this snap-in. +Available in the latest Windows 10 Insider Preview Build. This policy setting permits or prohibits the use of this snap-in. If you enable this policy setting, the snap-in is permitted and can be added into the Microsoft Management Console or run from the command line as a standalone console. @@ -3012,7 +3012,7 @@ ADMX Info: -Available in Windows 10 Insider Preview Build 20185. This policy setting permits or prohibits the use of this snap-in. +Available in the latest Windows 10 Insider Preview Build. This policy setting permits or prohibits the use of this snap-in. If you enable this policy setting, the snap-in is permitted and can be added into the Microsoft Management Console or run from the command line as a standalone console. @@ -3089,7 +3089,7 @@ ADMX Info: -Available in Windows 10 Insider Preview Build 20185. This policy setting permits or prohibits the use of this snap-in. +Available in the latest Windows 10 Insider Preview Build. This policy setting permits or prohibits the use of this snap-in. If you enable this policy setting, the snap-in is permitted and can be added into the Microsoft Management Console or run from the command line as a standalone console. @@ -3166,7 +3166,7 @@ ADMX Info: -Available in Windows 10 Insider Preview Build 20185. This policy setting permits or prohibits the use of this snap-in. +Available in the latest Windows 10 Insider Preview Build. This policy setting permits or prohibits the use of this snap-in. If you enable this policy setting, the snap-in is permitted and can be added into the Microsoft Management Console or run from the command line as a standalone console. @@ -3243,7 +3243,7 @@ ADMX Info: -Available in Windows 10 Insider Preview Build 20185. This policy setting permits or prohibits use of the Group Policy tab in property sheets for the Active Directory Users and Computers and Active Directory Sites and Services snap-ins. +Available in the latest Windows 10 Insider Preview Build. This policy setting permits or prohibits use of the Group Policy tab in property sheets for the Active Directory Users and Computers and Active Directory Sites and Services snap-ins. If you enable this setting, the Group Policy tab is displayed in the property sheet for a site, domain, or organizational unit displayed by the Active Directory Users and Computers and Active Directory Sites and Services snap-ins. If you disable the setting, the Group Policy tab is not displayed in those snap-ins. @@ -3322,7 +3322,7 @@ ADMX Info: -Available in Windows 10 Insider Preview Build 20185. This policy setting permits or prohibits the use of this snap-in. +Available in the latest Windows 10 Insider Preview Build. This policy setting permits or prohibits the use of this snap-in. If you enable this policy setting, the snap-in is permitted and can be added into the Microsoft Management Console or run from the command line as a standalone console. @@ -3399,7 +3399,7 @@ ADMX Info: -Available in Windows 10 Insider Preview Build 20185. This policy setting permits or prohibits the use of this snap-in. +Available in the latest Windows 10 Insider Preview Build. This policy setting permits or prohibits the use of this snap-in. If you enable this policy setting, the snap-in is permitted and can be added into the Microsoft Management Console or run from the command line as a standalone console. @@ -3476,7 +3476,7 @@ ADMX Info: -Available in Windows 10 Insider Preview Build 20185. This policy setting permits or prohibits the use of this snap-in. +Available in the latest Windows 10 Insider Preview Build. This policy setting permits or prohibits the use of this snap-in. If you enable this policy setting, the snap-in is permitted and can be added into the Microsoft Management Console or run from the command line as a standalone console. @@ -3553,7 +3553,7 @@ ADMX Info: -Available in Windows 10 Insider Preview Build 20185. This policy setting permits or prohibits the use of this snap-in. +Available in the latest Windows 10 Insider Preview Build. This policy setting permits or prohibits the use of this snap-in. If you enable this policy setting, the snap-in is permitted and can be added into the Microsoft Management Console or run from the command line as a standalone console. @@ -3630,7 +3630,7 @@ ADMX Info: -Available in Windows 10 Insider Preview Build 20185. This policy setting permits or prohibits the use of this snap-in. +Available in the latest Windows 10 Insider Preview Build. This policy setting permits or prohibits the use of this snap-in. If you enable this policy setting, the snap-in is permitted and can be added into the Microsoft Management Console or run from the command line as a standalone console. @@ -3707,7 +3707,7 @@ ADMX Info: -Available in Windows 10 Insider Preview Build 20185. This policy setting permits or prohibits the use of this snap-in. +Available in the latest Windows 10 Insider Preview Build. This policy setting permits or prohibits the use of this snap-in. If you enable this policy setting, the snap-in is permitted and can be added into the Microsoft Management Console or run from the command line as a standalone console. @@ -3784,7 +3784,7 @@ ADMX Info: -Available in Windows 10 Insider Preview Build 20185. This policy setting permits or prohibits the use of this snap-in. +Available in the latest Windows 10 Insider Preview Build. This policy setting permits or prohibits the use of this snap-in. If you enable this policy setting, the snap-in is permitted and can be added into the Microsoft Management Console or run from the command line as a standalone console. @@ -3861,7 +3861,7 @@ ADMX Info: -Available in Windows 10 Insider Preview Build 20185. This policy setting permits or prohibits the use of this snap-in. +Available in the latest Windows 10 Insider Preview Build. This policy setting permits or prohibits the use of this snap-in. If you enable this policy setting, the snap-in is permitted and can be added into the Microsoft Management Console or run from the command line as a standalone console. @@ -3938,7 +3938,7 @@ ADMX Info: -Available in Windows 10 Insider Preview Build 20185. This policy setting permits or prohibits the use of this snap-in. +Available in the latest Windows 10 Insider Preview Build. This policy setting permits or prohibits the use of this snap-in. If you enable this policy setting, the snap-in is permitted and can be added into the Microsoft Management Console or run from the command line as a standalone console. @@ -4015,7 +4015,7 @@ ADMX Info: -Available in Windows 10 Insider Preview Build 20185. This policy setting permits or prohibits the use of this snap-in. +Available in the latest Windows 10 Insider Preview Build. This policy setting permits or prohibits the use of this snap-in. If you enable this policy setting, the snap-in is permitted and can be added into the Microsoft Management Console or run from the command line as a standalone console. @@ -4092,7 +4092,7 @@ ADMX Info: -Available in Windows 10 Insider Preview Build 20185. This policy setting permits or prohibits the use of this snap-in. +Available in the latest Windows 10 Insider Preview Build. This policy setting permits or prohibits the use of this snap-in. If you enable this policy setting, the snap-in is permitted and can be added into the Microsoft Management Console or run from the command line as a standalone console. @@ -4169,7 +4169,7 @@ ADMX Info: -Available in Windows 10 Insider Preview Build 20185. This policy setting permits or prohibits the use of this snap-in. +Available in the latest Windows 10 Insider Preview Build. This policy setting permits or prohibits the use of this snap-in. If you enable this policy setting, the snap-in is permitted and can be added into the Microsoft Management Console or run from the command line as a standalone console. @@ -4246,7 +4246,7 @@ ADMX Info: -Available in Windows 10 Insider Preview Build 20185. This policy setting permits or prohibits the use of this snap-in. +Available in the latest Windows 10 Insider Preview Build. This policy setting permits or prohibits the use of this snap-in. If you enable this policy setting, the snap-in is permitted and can be added into the Microsoft Management Console or run from the command line as a standalone console. @@ -4323,7 +4323,7 @@ ADMX Info: -Available in Windows 10 Insider Preview Build 20185. This policy setting permits or prohibits the use of this snap-in. +Available in the latest Windows 10 Insider Preview Build. This policy setting permits or prohibits the use of this snap-in. If you enable this policy setting, the snap-in is permitted and can be added into the Microsoft Management Console or run from the command line as a standalone console. @@ -4400,7 +4400,7 @@ ADMX Info: -Available in Windows 10 Insider Preview Build 20185. This policy setting permits or prohibits the use of this snap-in. +Available in the latest Windows 10 Insider Preview Build. This policy setting permits or prohibits the use of this snap-in. If you enable this policy setting, the snap-in is permitted and can be added into the Microsoft Management Console or run from the command line as a standalone console. @@ -4477,7 +4477,7 @@ ADMX Info: -Available in Windows 10 Insider Preview Build 20185. This policy setting permits or prohibits the use of this snap-in. +Available in the latest Windows 10 Insider Preview Build. This policy setting permits or prohibits the use of this snap-in. If you enable this policy setting, the snap-in is permitted and can be added into the Microsoft Management Console or run from the command line as a standalone console. @@ -4554,7 +4554,7 @@ ADMX Info: -Available in Windows 10 Insider Preview Build 20185. This policy setting permits or prohibits the use of this snap-in. +Available in the latest Windows 10 Insider Preview Build. This policy setting permits or prohibits the use of this snap-in. If you enable this policy setting, the snap-in is permitted and can be added into the Microsoft Management Console or run from the command line as a standalone console. @@ -4631,7 +4631,7 @@ ADMX Info: -Available in Windows 10 Insider Preview Build 20185. This policy setting permits or prohibits the use of this snap-in. +Available in the latest Windows 10 Insider Preview Build. This policy setting permits or prohibits the use of this snap-in. If you enable this policy setting, the snap-in is permitted and can be added into the Microsoft Management Console or run from the command line as a standalone console. @@ -4708,7 +4708,7 @@ ADMX Info: -Available in Windows 10 Insider Preview Build 20185. This policy setting permits or prohibits the use of this snap-in. +Available in the latest Windows 10 Insider Preview Build. This policy setting permits or prohibits the use of this snap-in. If you enable this policy setting, the snap-in is permitted and can be added into the Microsoft Management Console or run from the command line as a standalone console. @@ -4785,7 +4785,7 @@ ADMX Info: -Available in Windows 10 Insider Preview Build 20185. This policy setting permits or prohibits the use of this snap-in. +Available in the latest Windows 10 Insider Preview Build. This policy setting permits or prohibits the use of this snap-in. If you enable this policy setting, the snap-in is permitted and can be added into the Microsoft Management Console or run from the command line as a standalone console. @@ -4862,7 +4862,7 @@ ADMX Info: -Available in Windows 10 Insider Preview Build 20185. This policy setting permits or prohibits the use of this snap-in. +Available in the latest Windows 10 Insider Preview Build. This policy setting permits or prohibits the use of this snap-in. If you enable this policy setting, the snap-in is permitted and can be added into the Microsoft Management Console or run from the command line as a standalone console. @@ -4939,7 +4939,7 @@ ADMX Info: -Available in Windows 10 Insider Preview Build 20185. This policy setting permits or prohibits the use of this snap-in. +Available in the latest Windows 10 Insider Preview Build. This policy setting permits or prohibits the use of this snap-in. If you enable this policy setting, the snap-in is permitted and can be added into the Microsoft Management Console or run from the command line as a standalone console. @@ -5016,7 +5016,7 @@ ADMX Info: -Available in Windows 10 Insider Preview Build 20185. This policy setting permits or prohibits the use of this snap-in. +Available in the latest Windows 10 Insider Preview Build. This policy setting permits or prohibits the use of this snap-in. If you enable this policy setting, the snap-in is permitted and can be added into the Microsoft Management Console or run from the command line as a standalone console. @@ -5093,7 +5093,7 @@ ADMX Info: -Available in Windows 10 Insider Preview Build 20185. This policy setting permits or prohibits the use of this snap-in. +Available in the latest Windows 10 Insider Preview Build. This policy setting permits or prohibits the use of this snap-in. If you enable this policy setting, the snap-in is permitted and can be added into the Microsoft Management Console or run from the command line as a standalone console. @@ -5170,7 +5170,7 @@ ADMX Info: -Available in Windows 10 Insider Preview Build 20185. This policy setting permits or prohibits the use of this snap-in. +Available in the latest Windows 10 Insider Preview Build. This policy setting permits or prohibits the use of this snap-in. If you enable this policy setting, the snap-in is permitted and can be added into the Microsoft Management Console or run from the command line as a standalone console. @@ -5247,7 +5247,7 @@ ADMX Info: -Available in Windows 10 Insider Preview Build 20185. This policy setting permits or prohibits the use of this snap-in. +Available in the latest Windows 10 Insider Preview Build. This policy setting permits or prohibits the use of this snap-in. If you enable this policy setting, the snap-in is permitted and can be added into the Microsoft Management Console or run from the command line as a standalone console. @@ -5324,7 +5324,7 @@ ADMX Info: -Available in Windows 10 Insider Preview Build 20185. This policy setting permits or prohibits the use of this snap-in. +Available in the latest Windows 10 Insider Preview Build. This policy setting permits or prohibits the use of this snap-in. If you enable this policy setting, the snap-in is permitted and can be added into the Microsoft Management Console or run from the command line as a standalone console. @@ -5401,7 +5401,7 @@ ADMX Info: -Available in Windows 10 Insider Preview Build 20185. This policy setting permits or prohibits the use of this snap-in. +Available in the latest Windows 10 Insider Preview Build. This policy setting permits or prohibits the use of this snap-in. If you enable this policy setting, the snap-in is permitted and can be added into the Microsoft Management Console or run from the command line as a standalone console. @@ -5478,7 +5478,7 @@ ADMX Info: -Available in Windows 10 Insider Preview Build 20185. This policy setting permits or prohibits the use of this snap-in. +Available in the latest Windows 10 Insider Preview Build. This policy setting permits or prohibits the use of this snap-in. If you enable this policy setting, the snap-in is permitted and can be added into the Microsoft Management Console or run from the command line as a standalone console. @@ -5555,7 +5555,7 @@ ADMX Info: -Available in Windows 10 Insider Preview Build 20185. This policy setting permits or prohibits the use of this snap-in. +Available in the latest Windows 10 Insider Preview Build. This policy setting permits or prohibits the use of this snap-in. If you enable this policy setting, the snap-in is permitted and can be added into the Microsoft Management Console or run from the command line as a standalone console. @@ -5632,7 +5632,7 @@ ADMX Info: -Available in Windows 10 Insider Preview Build 20185. This policy setting permits or prohibits the use of this snap-in. +Available in the latest Windows 10 Insider Preview Build. This policy setting permits or prohibits the use of this snap-in. If you enable this policy setting, the snap-in is permitted and can be added into the Microsoft Management Console or run from the command line as a standalone console. @@ -5709,7 +5709,7 @@ ADMX Info: -Available in Windows 10 Insider Preview Build 20185. This policy setting permits or prohibits the use of this snap-in. +Available in the latest Windows 10 Insider Preview Build. This policy setting permits or prohibits the use of this snap-in. If you enable this policy setting, the snap-in is permitted and can be added into the Microsoft Management Console or run from the command line as a standalone console. @@ -5786,7 +5786,7 @@ ADMX Info: -Available in Windows 10 Insider Preview Build 20185. This policy setting permits or prohibits the use of this snap-in. +Available in the latest Windows 10 Insider Preview Build. This policy setting permits or prohibits the use of this snap-in. If you enable this policy setting, the snap-in is permitted and can be added into the Microsoft Management Console or run from the command line as a standalone console. @@ -5863,7 +5863,7 @@ ADMX Info: -Available in Windows 10 Insider Preview Build 20185. This policy setting permits or prohibits the use of this snap-in. +Available in the latest Windows 10 Insider Preview Build. This policy setting permits or prohibits the use of this snap-in. If you enable this policy setting, the snap-in is permitted and can be added into the Microsoft Management Console or run from the command line as a standalone console. @@ -5940,7 +5940,7 @@ ADMX Info: -Available in Windows 10 Insider Preview Build 20185. This policy setting permits or prohibits the use of this snap-in. +Available in the latest Windows 10 Insider Preview Build. This policy setting permits or prohibits the use of this snap-in. If you enable this policy setting, the snap-in is permitted and can be added into the Microsoft Management Console or run from the command line as a standalone console. @@ -6017,7 +6017,7 @@ ADMX Info: -Available in Windows 10 Insider Preview Build 20185. This policy setting permits or prohibits the use of this snap-in. +Available in the latest Windows 10 Insider Preview Build. This policy setting permits or prohibits the use of this snap-in. If you enable this policy setting, the snap-in is permitted and can be added into the Microsoft Management Console or run from the command line as a standalone console. @@ -6094,7 +6094,7 @@ ADMX Info: -Available in Windows 10 Insider Preview Build 20185. This policy setting permits or prohibits the use of this snap-in. +Available in the latest Windows 10 Insider Preview Build. This policy setting permits or prohibits the use of this snap-in. If you enable this policy setting, the snap-in is permitted and can be added into the Microsoft Management Console or run from the command line as a standalone console. @@ -6171,7 +6171,7 @@ ADMX Info: -Available in Windows 10 Insider Preview Build 20185. This policy setting permits or prohibits the use of this snap-in. +Available in the latest Windows 10 Insider Preview Build. This policy setting permits or prohibits the use of this snap-in. If you enable this policy setting, the snap-in is permitted and can be added into the Microsoft Management Console or run from the command line as a standalone console. @@ -6248,7 +6248,7 @@ ADMX Info: -Available in Windows 10 Insider Preview Build 20185. This policy setting permits or prohibits the use of this snap-in. +Available in the latest Windows 10 Insider Preview Build. This policy setting permits or prohibits the use of this snap-in. If you enable this policy setting, the snap-in is permitted and can be added into the Microsoft Management Console or run from the command line as a standalone console. @@ -6325,7 +6325,7 @@ ADMX Info: -Available in Windows 10 Insider Preview Build 20185. This policy setting permits or prohibits the use of this snap-in. +Available in the latest Windows 10 Insider Preview Build. This policy setting permits or prohibits the use of this snap-in. If you enable this policy setting, the snap-in is permitted and can be added into the Microsoft Management Console or run from the command line as a standalone console. @@ -6402,7 +6402,7 @@ ADMX Info: -Available in Windows 10 Insider Preview Build 20185. This policy setting permits or prohibits the use of this snap-in. +Available in the latest Windows 10 Insider Preview Build. This policy setting permits or prohibits the use of this snap-in. If you enable this policy setting, the snap-in is permitted and can be added into the Microsoft Management Console or run from the command line as a standalone console. @@ -6479,7 +6479,7 @@ ADMX Info: -Available in Windows 10 Insider Preview Build 20185. This policy setting permits or prohibits the use of this snap-in. +Available in the latest Windows 10 Insider Preview Build. This policy setting permits or prohibits the use of this snap-in. If you enable this policy setting, the snap-in is permitted and can be added into the Microsoft Management Console or run from the command line as a standalone console. @@ -6556,7 +6556,7 @@ ADMX Info: -Available in Windows 10 Insider Preview Build 20185. This policy setting permits or prohibits the use of this snap-in. +Available in the latest Windows 10 Insider Preview Build. This policy setting permits or prohibits the use of this snap-in. If you enable this policy setting, the snap-in is permitted and can be added into the Microsoft Management Console or run from the command line as a standalone console. @@ -6633,7 +6633,7 @@ ADMX Info: -Available in Windows 10 Insider Preview Build 20185. This policy setting permits or prohibits the use of this snap-in. +Available in the latest Windows 10 Insider Preview Build. This policy setting permits or prohibits the use of this snap-in. If you enable this policy setting, the snap-in is permitted and can be added into the Microsoft Management Console or run from the command line as a standalone console. @@ -6710,7 +6710,7 @@ ADMX Info: -Available in Windows 10 Insider Preview Build 20185. This policy setting permits or prohibits the use of this snap-in. +Available in the latest Windows 10 Insider Preview Build. This policy setting permits or prohibits the use of this snap-in. If you enable this policy setting, the snap-in is permitted and can be added into the Microsoft Management Console or run from the command line as a standalone console. @@ -6787,7 +6787,7 @@ ADMX Info: -Available in Windows 10 Insider Preview Build 20185. This policy setting permits or prohibits the use of this snap-in. +Available in the latest Windows 10 Insider Preview Build. This policy setting permits or prohibits the use of this snap-in. If you enable this policy setting, the snap-in is permitted and can be added into the Microsoft Management Console or run from the command line as a standalone console. @@ -6864,7 +6864,7 @@ ADMX Info: -Available in Windows 10 Insider Preview Build 20185. This policy setting permits or prohibits the use of this snap-in. +Available in the latest Windows 10 Insider Preview Build. This policy setting permits or prohibits the use of this snap-in. If you enable this policy setting, the snap-in is permitted and can be added into the Microsoft Management Console or run from the command line as a standalone console. @@ -6941,7 +6941,7 @@ ADMX Info: -Available in Windows 10 Insider Preview Build 20185. This policy setting permits or prohibits the use of this snap-in. +Available in the latest Windows 10 Insider Preview Build. This policy setting permits or prohibits the use of this snap-in. If you enable this policy setting, the snap-in is permitted and can be added into the Microsoft Management Console or run from the command line as a standalone console. @@ -7018,7 +7018,7 @@ ADMX Info: -Available in Windows 10 Insider Preview Build 20185. This policy setting permits or prohibits the use of this snap-in. +Available in the latest Windows 10 Insider Preview Build. This policy setting permits or prohibits the use of this snap-in. If you enable this policy setting, the snap-in is permitted and can be added into the Microsoft Management Console or run from the command line as a standalone console. @@ -7095,7 +7095,7 @@ ADMX Info: -Available in Windows 10 Insider Preview Build 20185. This policy setting permits or prohibits the use of this snap-in. +Available in the latest Windows 10 Insider Preview Build. This policy setting permits or prohibits the use of this snap-in. If you enable this policy setting, the snap-in is permitted and can be added into the Microsoft Management Console or run from the command line as a standalone console. @@ -7172,7 +7172,7 @@ ADMX Info: -Available in Windows 10 Insider Preview Build 20185. This policy setting permits or prohibits the use of this snap-in. +Available in the latest Windows 10 Insider Preview Build. This policy setting permits or prohibits the use of this snap-in. If you enable this policy setting, the snap-in is permitted and can be added into the Microsoft Management Console or run from the command line as a standalone console. @@ -7249,7 +7249,7 @@ ADMX Info: -Available in Windows 10 Insider Preview Build 20185. This policy setting permits or prohibits the use of this snap-in. +Available in the latest Windows 10 Insider Preview Build. This policy setting permits or prohibits the use of this snap-in. If you enable this policy setting, the snap-in is permitted and can be added into the Microsoft Management Console or run from the command line as a standalone console. @@ -7326,7 +7326,7 @@ ADMX Info: -Available in Windows 10 Insider Preview Build 20185. This policy setting permits or prohibits the use of this snap-in. +Available in the latest Windows 10 Insider Preview Build. This policy setting permits or prohibits the use of this snap-in. If you enable this policy setting, the snap-in is permitted and can be added into the Microsoft Management Console or run from the command line as a standalone console. @@ -7403,7 +7403,7 @@ ADMX Info: -Available in Windows 10 Insider Preview Build 20185. This policy setting permits or prohibits the use of this snap-in. +Available in the latest Windows 10 Insider Preview Build. This policy setting permits or prohibits the use of this snap-in. If you enable this policy setting, the snap-in is permitted and can be added into the Microsoft Management Console or run from the command line as a standalone console. @@ -7480,7 +7480,7 @@ ADMX Info: -Available in Windows 10 Insider Preview Build 20185. This policy setting permits or prohibits the use of this snap-in. +Available in the latest Windows 10 Insider Preview Build. This policy setting permits or prohibits the use of this snap-in. If you enable this policy setting, the snap-in is permitted and can be added into the Microsoft Management Console or run from the command line as a standalone console. @@ -7557,7 +7557,7 @@ ADMX Info: -Available in Windows 10 Insider Preview Build 20185. This policy setting permits or prohibits the use of this snap-in. +Available in the latest Windows 10 Insider Preview Build. This policy setting permits or prohibits the use of this snap-in. If you enable this policy setting, the snap-in is permitted and can be added into the Microsoft Management Console or run from the command line as a standalone console. @@ -7634,7 +7634,7 @@ ADMX Info: -Available in Windows 10 Insider Preview Build 20185. This policy setting permits or prohibits the use of this snap-in. +Available in the latest Windows 10 Insider Preview Build. This policy setting permits or prohibits the use of this snap-in. If you enable this policy setting, the snap-in is permitted and can be added into the Microsoft Management Console or run from the command line as a standalone console. @@ -7711,7 +7711,7 @@ ADMX Info: -Available in Windows 10 Insider Preview Build 20185. This policy setting permits or prohibits the use of this snap-in. +Available in the latest Windows 10 Insider Preview Build. This policy setting permits or prohibits the use of this snap-in. If you enable this policy setting, the snap-in is permitted and can be added into the Microsoft Management Console or run from the command line as a standalone console. @@ -7788,7 +7788,7 @@ ADMX Info: -Available in Windows 10 Insider Preview Build 20185. This policy setting permits or prohibits the use of this snap-in. +Available in the latest Windows 10 Insider Preview Build. This policy setting permits or prohibits the use of this snap-in. If you enable this policy setting, the snap-in is permitted and can be added into the Microsoft Management Console or run from the command line as a standalone console. @@ -7865,7 +7865,7 @@ ADMX Info: -Available in Windows 10 Insider Preview Build 20185. This policy setting permits or prohibits the use of this snap-in. +Available in the latest Windows 10 Insider Preview Build. This policy setting permits or prohibits the use of this snap-in. If you enable this policy setting, the snap-in is permitted and can be added into the Microsoft Management Console or run from the command line as a standalone console. @@ -7942,7 +7942,7 @@ ADMX Info: -Available in Windows 10 Insider Preview Build 20185. This policy setting permits or prohibits the use of this snap-in. +Available in the latest Windows 10 Insider Preview Build. This policy setting permits or prohibits the use of this snap-in. If you enable this policy setting, the snap-in is permitted and can be added into the Microsoft Management Console or run from the command line as a standalone console. @@ -8019,7 +8019,7 @@ ADMX Info: -Available in Windows 10 Insider Preview Build 20185. This policy setting permits or prohibits the use of this snap-in. +Available in the latest Windows 10 Insider Preview Build. This policy setting permits or prohibits the use of this snap-in. If you enable this policy setting, the snap-in is permitted and can be added into the Microsoft Management Console or run from the command line as a standalone console. @@ -8096,7 +8096,7 @@ ADMX Info: -Available in Windows 10 Insider Preview Build 20185. This policy setting permits or prohibits the use of this snap-in. +Available in the latest Windows 10 Insider Preview Build. This policy setting permits or prohibits the use of this snap-in. If you enable this policy setting, the snap-in is permitted and can be added into the Microsoft Management Console or run from the command line as a standalone console. @@ -8173,7 +8173,7 @@ ADMX Info: -Available in Windows 10 Insider Preview Build 20185. This policy setting permits or prohibits the use of this snap-in. +Available in the latest Windows 10 Insider Preview Build. This policy setting permits or prohibits the use of this snap-in. If you enable this policy setting, the snap-in is permitted and can be added into the Microsoft Management Console or run from the command line as a standalone console. @@ -8250,7 +8250,7 @@ ADMX Info: -Available in Windows 10 Insider Preview Build 20185. This policy setting permits or prohibits the use of this snap-in. +Available in the latest Windows 10 Insider Preview Build. This policy setting permits or prohibits the use of this snap-in. If you enable this policy setting, the snap-in is permitted and can be added into the Microsoft Management Console or run from the command line as a standalone console. @@ -8327,7 +8327,7 @@ ADMX Info: -Available in Windows 10 Insider Preview Build 20185. This policy setting permits or prohibits the use of this snap-in. +Available in the latest Windows 10 Insider Preview Build. This policy setting permits or prohibits the use of this snap-in. If you enable this policy setting, the snap-in is permitted and can be added into the Microsoft Management Console or run from the command line as a standalone console. @@ -8404,7 +8404,7 @@ ADMX Info: -Available in Windows 10 Insider Preview Build 20185. This policy setting permits or prohibits the use of this snap-in. +Available in the latest Windows 10 Insider Preview Build. This policy setting permits or prohibits the use of this snap-in. If you enable this policy setting, the snap-in is permitted and can be added into the Microsoft Management Console or run from the command line as a standalone console. diff --git a/windows/client-management/mdm/policy-csp-admx-msapolicy.md b/windows/client-management/mdm/policy-csp-admx-msapolicy.md index e8c35ac22e..7a9e6a5a84 100644 --- a/windows/client-management/mdm/policy-csp-admx-msapolicy.md +++ b/windows/client-management/mdm/policy-csp-admx-msapolicy.md @@ -74,7 +74,7 @@ manager: dansimp -Available in Windows 10 Insider Preview Build 20185. This policy setting controls whether users can provide Microsoft accounts for authentication for applications or services. If this setting is enabled, all applications and services on the device are prevented from using Microsoft accounts for authentication. +Available in the latest Windows 10 Insider Preview Build. This policy setting controls whether users can provide Microsoft accounts for authentication for applications or services. If this setting is enabled, all applications and services on the device are prevented from using Microsoft accounts for authentication. This applies both to existing users of a device and new users who may be added. However, any application or service that has already authenticated a user will not be affected by enabling this setting until the authentication cache expires. diff --git a/windows/client-management/mdm/policy-csp-admx-nca.md b/windows/client-management/mdm/policy-csp-admx-nca.md index 840af17067..da9eca2118 100644 --- a/windows/client-management/mdm/policy-csp-admx-nca.md +++ b/windows/client-management/mdm/policy-csp-admx-nca.md @@ -95,7 +95,7 @@ manager: dansimp -Available in Windows 10 Insider Preview Build 20185. This policy setting specifies resources on your intranet that are normally accessible to DirectAccess clients. Each entry is a string that identifies the type of resource and the location of the resource. +Available in the latest Windows 10 Insider Preview Build. This policy setting specifies resources on your intranet that are normally accessible to DirectAccess clients. Each entry is a string that identifies the type of resource and the location of the resource. Each string can be one of the following types: @@ -174,7 +174,7 @@ ADMX Info: -Available in Windows 10 Insider Preview Build 20185. This policy setting specifies commands configured by the administrator for custom logging. These commands will run in addition to default log commands. +Available in the latest Windows 10 Insider Preview Build. This policy setting specifies commands configured by the administrator for custom logging. These commands will run in addition to default log commands. > [!TIP] @@ -239,7 +239,7 @@ ADMX Info: -Available in Windows 10 Insider Preview Build 20185. This policy setting specifies the IPv6 addresses of the endpoints of the Internet Protocol security (IPsec) tunnels that enable DirectAccess. NCA attempts to access the resources that are specified in the Corporate Resources setting through these configured tunnel endpoints. +Available in the latest Windows 10 Insider Preview Build. This policy setting specifies the IPv6 addresses of the endpoints of the Internet Protocol security (IPsec) tunnels that enable DirectAccess. NCA attempts to access the resources that are specified in the Corporate Resources setting through these configured tunnel endpoints. By default, NCA uses the same DirectAccess server that the DirectAccess client computer connection is using. In default configurations of DirectAccess, there are typically two IPsec tunnel endpoints: one for the infrastructure tunnel and one for the intranet tunnel. You should configure one endpoint for each tunnel. @@ -310,7 +310,7 @@ ADMX Info: -Available in Windows 10 Insider Preview Build 20185. This policy setting specifies the string that appears for DirectAccess connectivity when the user clicks the Networking notification area icon. For example, you can specify “Contoso Intranet Access” for the DirectAccess clients of the Contoso Corporation. +Available in the latest Windows 10 Insider Preview Build. This policy setting specifies the string that appears for DirectAccess connectivity when the user clicks the Networking notification area icon. For example, you can specify “Contoso Intranet Access” for the DirectAccess clients of the Contoso Corporation. If this setting is not configured, the string that appears for DirectAccess connectivity is “Corporate Connection”. @@ -377,7 +377,7 @@ ADMX Info: -Available in Windows 10 Insider Preview Build 20185. This policy setting specifies whether the user has Connect and Disconnect options for the DirectAccess entry when the user clicks the Networking notification area icon. +Available in the latest Windows 10 Insider Preview Build. This policy setting specifies whether the user has Connect and Disconnect options for the DirectAccess entry when the user clicks the Networking notification area icon. If the user clicks the Disconnect option, NCA removes the DirectAccess rules from the Name Resolution Policy Table (NRPT) and the DirectAccess client computer uses whatever normal name resolution is available to the client computer in its current network configuration, including sending all DNS queries to the local intranet or Internet DNS servers. Note that NCA does not remove the existing IPsec tunnels and users can still access intranet resources across the DirectAccess server by specifying IPv6 addresses rather than names. @@ -453,7 +453,7 @@ ADMX Info: -Available in Windows 10 Insider Preview Build 20185. This policy setting specifies whether NCA service runs in Passive Mode or not. +Available in the latest Windows 10 Insider Preview Build. This policy setting specifies whether NCA service runs in Passive Mode or not. Set this to Disabled to keep NCA probing actively all the time. If this setting is not configured, NCA probing is in active mode by default. @@ -519,7 +519,7 @@ ADMX Info: -Available in Windows 10 Insider Preview Build 20185. This policy setting specifies whether an entry for DirectAccess connectivity appears when the user clicks the Networking notification area icon. +Available in the latest Windows 10 Insider Preview Build. This policy setting specifies whether an entry for DirectAccess connectivity appears when the user clicks the Networking notification area icon. Set this to Disabled to prevent user confusion when you are just using DirectAccess to remotely manage DirectAccess client computers from your intranet and not providing seamless intranet access. @@ -588,7 +588,7 @@ ADMX Info: -Available in Windows 10 Insider Preview Build 20185. This policy setting specifies the e-mail address to be used when sending the log files that are generated by NCA to the network administrator. +Available in the latest Windows 10 Insider Preview Build. This policy setting specifies the e-mail address to be used when sending the log files that are generated by NCA to the network administrator. When the user sends the log files to the Administrator, NCA uses the default e-mail client to open a new message with the support email address in the To: field of the message, then attaches the generated log files as a .html file. The user can review the message and add additional information before sending the message. diff --git a/windows/client-management/mdm/policy-csp-admx-ncsi.md b/windows/client-management/mdm/policy-csp-admx-ncsi.md index 3e575f3fdf..68f54caf09 100644 --- a/windows/client-management/mdm/policy-csp-admx-ncsi.md +++ b/windows/client-management/mdm/policy-csp-admx-ncsi.md @@ -92,7 +92,7 @@ manager: dansimp -Available in Windows 10 Insider Preview Build 20185. This policy setting enables you to specify the expected address of the host name used for the DNS probe. Successful resolution of the host name to this address indicates corporate connectivity. +Available in the latest Windows 10 Insider Preview Build. This policy setting enables you to specify the expected address of the host name used for the DNS probe. Successful resolution of the host name to this address indicates corporate connectivity. > [!TIP] @@ -157,7 +157,7 @@ ADMX Info: -Available in Windows 10 Insider Preview Build 20185. This policy setting enables you to specify the host name of a computer known to be on the corporate network. Successful resolution of this host name to the expected address indicates corporate connectivity. +Available in the latest Windows 10 Insider Preview Build. This policy setting enables you to specify the host name of a computer known to be on the corporate network. Successful resolution of this host name to the expected address indicates corporate connectivity. > [!TIP] @@ -222,7 +222,7 @@ ADMX Info: -Available in Windows 10 Insider Preview Build 20185. This policy setting enables you to specify the list of IPv6 corporate site prefixes to monitor for corporate connectivity. Reachability of addresses with any of these prefixes indicates corporate connectivity. +Available in the latest Windows 10 Insider Preview Build. This policy setting enables you to specify the list of IPv6 corporate site prefixes to monitor for corporate connectivity. Reachability of addresses with any of these prefixes indicates corporate connectivity. > [!TIP] @@ -287,7 +287,7 @@ ADMX Info: -Available in Windows 10 Insider Preview Build 20185. This policy setting enables you to specify the URL of the corporate website, against which an active probe is performed. +Available in the latest Windows 10 Insider Preview Build. This policy setting enables you to specify the URL of the corporate website, against which an active probe is performed. > [!TIP] @@ -355,7 +355,7 @@ ADMX Info: -Available in Windows 10 Insider Preview Build 20185. This policy setting enables you to specify the HTTPS URL of the corporate website that clients use to determine the current domain location (i.e. whether the computer is inside or outside the corporate network). Reachability of the URL destination indicates that the client location is inside corporate network; otherwise it is outside the network. +Available in the latest Windows 10 Insider Preview Build. This policy setting enables you to specify the HTTPS URL of the corporate website that clients use to determine the current domain location (i.e. whether the computer is inside or outside the corporate network). Reachability of the URL destination indicates that the client location is inside corporate network; otherwise it is outside the network. > [!TIP] @@ -420,7 +420,7 @@ ADMX Info: -Available in Windows 10 Insider Preview Build 20185. This policy setting enables you to specify DNS binding behavior. NCSI by default will restrict DNS lookups to the interface it is currently probing on. If you enable this setting, NCSI will allow the DNS lookups to happen on any interface. +Available in the latest Windows 10 Insider Preview Build. This policy setting enables you to specify DNS binding behavior. NCSI by default will restrict DNS lookups to the interface it is currently probing on. If you enable this setting, NCSI will allow the DNS lookups to happen on any interface. > [!TIP] @@ -485,7 +485,7 @@ ADMX Info: -Available in Windows 10 Insider Preview Build 20185. This Policy setting enables you to specify passive polling behavior. NCSI polls various measurements throughout the network stack on a frequent interval to determine if network connectivity has been lost. Use the options to control the passive polling behavior. +Available in the latest Windows 10 Insider Preview Build. This Policy setting enables you to specify passive polling behavior. NCSI polls various measurements throughout the network stack on a frequent interval to determine if network connectivity has been lost. Use the options to control the passive polling behavior. > [!TIP] diff --git a/windows/client-management/mdm/policy-csp-admx-netlogon.md b/windows/client-management/mdm/policy-csp-admx-netlogon.md index 782b57ba8c..a01bbd5c4d 100644 --- a/windows/client-management/mdm/policy-csp-admx-netlogon.md +++ b/windows/client-management/mdm/policy-csp-admx-netlogon.md @@ -176,7 +176,7 @@ manager: dansimp -Available in Windows 10 Insider Preview Build 20185. This policy setting configures how a domain controller (DC) behaves when responding to a client whose IP address does not map to any configured site. +Available in the latest Windows 10 Insider Preview Build. This policy setting configures how a domain controller (DC) behaves when responding to a client whose IP address does not map to any configured site. Domain controllers use the client IP address during a DC locator ping request to compute which Active Directory site the client belongs to. If no site mapping can be computed, the DC may do an address lookup on the client network name to discover other IP addresses which may then be used to compute a matching site for the client. @@ -253,7 +253,7 @@ ADMX Info: -Available in Windows 10 Insider Preview Build 20185. This policy setting determines the type of IP address that is returned for a domain controller. The DC Locator APIs return the IP address of the DC with the other parts of information. Before the support of IPv6, the returned DC IP address was IPv4. But with the support of IPv6, the DC Locator APIs can return IPv6 DC address. The returned IPv6 DC address may not be correctly handled by some of the existing applications. So this policy is provided to support such scenarios. +Available in the latest Windows 10 Insider Preview Build. This policy setting determines the type of IP address that is returned for a domain controller. The DC Locator APIs return the IP address of the DC with the other parts of information. Before the support of IPv6, the returned DC IP address was IPv4. But with the support of IPv6, the DC Locator APIs can return IPv6 DC address. The returned IPv6 DC address may not be correctly handled by some of the existing applications. So this policy is provided to support such scenarios. By default, DC Locator APIs can return IPv4/IPv6 DC address. But if some applications are broken due to the returned IPv6 DC address, this policy can be used to disable the default behavior and enforce to return only IPv4 DC address. Once applications are fixed, this policy can be used to enable the default behavior. @@ -328,7 +328,7 @@ ADMX Info: -Available in Windows 10 Insider Preview Build 20185. This policy setting specifies whether the computers to which this setting is applied attempts DNS name resolution of single-label domain names, by appending different registered DNS suffixes, and uses NetBIOS name resolution only if DNS name resolution fails. This policy, including the specified default behavior, is not used if the AllowSingleLabelDnsDomain policy setting is enabled. +Available in the latest Windows 10 Insider Preview Build. This policy setting specifies whether the computers to which this setting is applied attempts DNS name resolution of single-label domain names, by appending different registered DNS suffixes, and uses NetBIOS name resolution only if DNS name resolution fails. This policy, including the specified default behavior, is not used if the AllowSingleLabelDnsDomain policy setting is enabled. By default, when no setting is specified for this policy, the behavior is the same as explicitly enabling this policy, unless the AllowSingleLabelDnsDomain policy setting is enabled. @@ -401,7 +401,7 @@ ADMX Info: -Available in Windows 10 Insider Preview Build 20185. This policy setting controls whether the Net Logon service will allow the use of older cryptography algorithms that are used in Windows NT 4.0. The cryptography algorithms used in Windows NT 4.0 and earlier are not as secure as newer algorithms used in Windows 2000 or later, including this version of Windows. +Available in the latest Windows 10 Insider Preview Build. This policy setting controls whether the Net Logon service will allow the use of older cryptography algorithms that are used in Windows NT 4.0. The cryptography algorithms used in Windows NT 4.0 and earlier are not as secure as newer algorithms used in Windows 2000 or later, including this version of Windows. By default, Net Logon will not allow the older cryptography algorithms to be used and will not include them in the negotiation of cryptography algorithms. Therefore, computers running Windows NT 4.0 will not be able to establish a connection to this domain controller. @@ -476,7 +476,7 @@ ADMX Info: -Available in Windows 10 Insider Preview Build 20185. This policy setting specifies whether the computers to which this setting is applied attempt DNS name resolution of a single-label domain names. +Available in the latest Windows 10 Insider Preview Build. This policy setting specifies whether the computers to which this setting is applied attempt DNS name resolution of a single-label domain names. By default, the behavior specified in the AllowDnsSuffixSearch is used. If the AllowDnsSuffixSearch policy is disabled, then NetBIOS name resolution is used exclusively, to locate a domain controller hosting an Active Directory domain specified with a single-label name. @@ -551,7 +551,7 @@ ADMX Info: -Available in Windows 10 Insider Preview Build 20185. This policy setting determines whether domain controllers (DC) will dynamically register DC Locator site-specific SRV records for the closest sites where no DC for the same domain exists (or no Global Catalog for the same forest exists). These DNS records are dynamically registered by the Net Logon service, and they are used to locate the DC. +Available in the latest Windows 10 Insider Preview Build. This policy setting determines whether domain controllers (DC) will dynamically register DC Locator site-specific SRV records for the closest sites where no DC for the same domain exists (or no Global Catalog for the same forest exists). These DNS records are dynamically registered by the Net Logon service, and they are used to locate the DC. If you enable this policy setting, the DCs to which this setting is applied dynamically register DC Locator site-specific DNS SRV records for the closest sites where no DC for the same domain, or no Global Catalog for the same forest, exists. @@ -624,7 +624,7 @@ ADMX Info: -Available in Windows 10 Insider Preview Build 20185. This policy setting allows you to control the domain controller (DC) location algorithm. By default, the DC location algorithm prefers DNS-based discovery if the DNS domain name is known. If DNS-based discovery fails and the NetBIOS domain name is known, the algorithm then uses NetBIOS-based discovery as a fallback mechanism. +Available in the latest Windows 10 Insider Preview Build. This policy setting allows you to control the domain controller (DC) location algorithm. By default, the DC location algorithm prefers DNS-based discovery if the DNS domain name is known. If DNS-based discovery fails and the NetBIOS domain name is known, the algorithm then uses NetBIOS-based discovery as a fallback mechanism. NetBIOS-based discovery uses a WINS server and mailslot messages but does not use site information. Hence it does not ensure that clients will discover the closest DC. It also allows a hub-site client to discover a branch-site DC even if the branch-site DC only registers site-specific DNS records (as recommended). For these reasons, NetBIOS-based discovery is not recommended. @@ -700,7 +700,7 @@ ADMX Info: -Available in Windows 10 Insider Preview Build 20185. This policy setting defines whether a domain controller (DC) should attempt to verify the password provided by a client with the PDC emulator if the DC failed to validate the password. +Available in the latest Windows 10 Insider Preview Build. This policy setting defines whether a domain controller (DC) should attempt to verify the password provided by a client with the PDC emulator if the DC failed to validate the password. Contacting the PDC emulator is useful in case the client’s password was recently changed and did not propagate to the DC yet. Users may want to disable this feature if the PDC emulator is located over a slow WAN connection. @@ -775,7 +775,7 @@ ADMX Info: -Available in Windows 10 Insider Preview Build 20185. This policy setting determines the amount of time (in seconds) to wait before the first retry for applications that perform periodic searches for domain controllers (DC) that are unable to find a DC. +Available in the latest Windows 10 Insider Preview Build. This policy setting determines the amount of time (in seconds) to wait before the first retry for applications that perform periodic searches for domain controllers (DC) that are unable to find a DC. The default value for this setting is 10 minutes (10*60). @@ -853,7 +853,7 @@ ADMX Info: -Available in Windows 10 Insider Preview Build 20185. This policy setting determines the maximum retry interval allowed when applications performing periodic searches for Domain Controllers (DCs) are unable to find a DC. +Available in the latest Windows 10 Insider Preview Build. This policy setting determines the maximum retry interval allowed when applications performing periodic searches for Domain Controllers (DCs) are unable to find a DC. For example, the retry intervals may be set at 10 minutes, then 20 minutes and then 40 minutes, but when the interval reaches the value set in this setting, that value becomes the retry interval for all subsequent retries until the value set in Final DC Discovery Retry Setting is reached. @@ -933,7 +933,7 @@ ADMX Info: -Available in Windows 10 Insider Preview Build 20185. This policy setting determines when retries are no longer allowed for applications that perform periodic searches for domain controllers (DC) are unable to find a DC. For example, retires may be set to occur according to the Use maximum DC discovery retry interval policy setting, but when the value set in this policy setting is reached, no more retries occur. If a value for this policy setting is smaller than the value in the Use maximum DC discovery retry interval policy setting, the value for Use maximum DC discovery retry interval policy setting is used. +Available in the latest Windows 10 Insider Preview Build. This policy setting determines when retries are no longer allowed for applications that perform periodic searches for domain controllers (DC) are unable to find a DC. For example, retires may be set to occur according to the Use maximum DC discovery retry interval policy setting, but when the value set in this policy setting is reached, no more retries occur. If a value for this policy setting is smaller than the value in the Use maximum DC discovery retry interval policy setting, the value for Use maximum DC discovery retry interval policy setting is used. The default value for this setting is to not quit retrying (0). The maximum value for this setting is 49 days (0x49*24*60*60=4233600). The minimum value for this setting is 0. @@ -1005,7 +1005,7 @@ ADMX Info: -Available in Windows 10 Insider Preview Build 20185. This policy setting determines when a successful DC cache entry is refreshed. This policy setting is applied to caller programs that periodically attempt to locate DCs, and it is applied before returning the DC information to the caller program. The default value for this setting is infinite (4294967200). The maximum value for this setting is (4294967200), while the maximum that is not treated as infinity is 49 days (49*24*60*60=4233600). Any larger value is treated as infinity. The minimum value for this setting is to always refresh (0). +Available in the latest Windows 10 Insider Preview Build. This policy setting determines when a successful DC cache entry is refreshed. This policy setting is applied to caller programs that periodically attempt to locate DCs, and it is applied before returning the DC information to the caller program. The default value for this setting is infinite (4294967200). The maximum value for this setting is (4294967200), while the maximum that is not treated as infinity is 49 days (49*24*60*60=4233600). Any larger value is treated as infinity. The minimum value for this setting is to always refresh (0). > [!TIP] @@ -1072,7 +1072,7 @@ ADMX Info: -Available in Windows 10 Insider Preview Build 20185. This policy setting specifies the level of debug output for the Net Logon service. +Available in the latest Windows 10 Insider Preview Build. This policy setting specifies the level of debug output for the Net Logon service. The Net Logon service outputs debug information to the log file netlogon.log in the directory %windir%\debug. By default, no debug information is logged. @@ -1147,7 +1147,7 @@ ADMX Info: -Available in Windows 10 Insider Preview Build 20185. This policy setting determines which DC Locator DNS records are not registered by the Net Logon service. +Available in the latest Windows 10 Insider Preview Build. This policy setting determines which DC Locator DNS records are not registered by the Net Logon service. If you enable this policy setting, select Enabled and specify a list of space-delimited mnemonics (instructions) for the DC Locator DNS records that will not be registered by the DCs to which this setting is applied. @@ -1246,7 +1246,7 @@ ADMX Info: -Available in Windows 10 Insider Preview Build 20185. This policy setting specifies the Refresh Interval of the DC Locator DNS resource records for DCs to which this setting is applied. These DNS records are dynamically registered by the Net Logon service and are used by the DC Locator algorithm to locate the DC. This setting may be applied only to DCs using dynamic update. +Available in the latest Windows 10 Insider Preview Build. This policy setting specifies the Refresh Interval of the DC Locator DNS resource records for DCs to which this setting is applied. These DNS records are dynamically registered by the Net Logon service and are used by the DC Locator algorithm to locate the DC. This setting may be applied only to DCs using dynamic update. DCs configured to perform dynamic registration of the DC Locator DNS resource records periodically reregister their records with DNS servers, even if their records’ data has not changed. If authoritative DNS servers are configured to perform scavenging of the stale records, this reregistration is required to instruct the DNS servers configured to automatically remove (scavenge) stale records that these records are current and should be preserved in the database. @@ -1322,7 +1322,7 @@ ADMX Info: -Available in Windows 10 Insider Preview Build 20185. This policy setting configures whether the domain controllers to which this setting is applied will lowercase their DNS host name when registering SRV records. +Available in the latest Windows 10 Insider Preview Build. This policy setting configures whether the domain controllers to which this setting is applied will lowercase their DNS host name when registering SRV records. If enabled, domain controllers will lowercase their DNS host name when registering domain controller SRV records. A best-effort attempt will be made to delete any previously registered SRV records that contain mixed-case DNS host names. For more information and potential manual cleanup procedures, see the link below. @@ -1398,7 +1398,7 @@ ADMX Info: -Available in Windows 10 Insider Preview Build 20185. This policy setting specifies the value for the Time-To-Live (TTL) field in SRV resource records that are registered by the Net Logon service. These DNS records are dynamically registered, and they are used to locate the domain controller (DC). +Available in the latest Windows 10 Insider Preview Build. This policy setting specifies the value for the Time-To-Live (TTL) field in SRV resource records that are registered by the Net Logon service. These DNS records are dynamically registered, and they are used to locate the domain controller (DC). To specify the TTL for DC Locator DNS records, click Enabled, and then enter a value in seconds (for example, the value "900" is 15 minutes). @@ -1468,7 +1468,7 @@ ADMX Info: -Available in Windows 10 Insider Preview Build 20185. This policy setting specifies the additional time for the computer to wait for the domain controller’s (DC) response when logging on to the network. +Available in the latest Windows 10 Insider Preview Build. This policy setting specifies the additional time for the computer to wait for the domain controller’s (DC) response when logging on to the network. To specify the expected dial-up delay at logon, click Enabled, and then enter the desired value in seconds (for example, the value "60" is 1 minute). @@ -1539,7 +1539,7 @@ ADMX Info: -Available in Windows 10 Insider Preview Build 20185. This policy setting determines the interval for when a Force Rediscovery is carried out by DC Locator. +Available in the latest Windows 10 Insider Preview Build. This policy setting determines the interval for when a Force Rediscovery is carried out by DC Locator. The Domain Controller Locator (DC Locator) service is used by clients to find domain controllers for their Active Directory domain. When DC Locator finds a domain controller, it caches domain controllers to improve the efficiency of the location algorithm. As long as the cached domain controller meets the requirements and is running, DC Locator will continue to return it. If a new domain controller is introduced, existing clients will only discover it when a Force Rediscovery is carried out by DC Locator. To adapt to changes in network conditions DC Locator will by default carry out a Force Rediscovery according to a specific time interval and maintain efficient load-balancing of clients across all available domain controllers in all domains or forests. The default time interval for Force Rediscovery by DC Locator is 12 hours. Force Rediscovery can also be triggered if a call to DC Locator uses the DS_FORCE_REDISCOVERY flag. Rediscovery resets the timer on the cached domain controller entries. @@ -1614,7 +1614,7 @@ ADMX Info: -Available in Windows 10 Insider Preview Build 20185. This policy setting specifies the sites for which the global catalogs (GC) should register site-specific GC locator DNS SRV resource records. These records are registered in addition to the site-specific SRV records registered for the site where the GC resides, and records registered by a GC configured to register GC Locator DNS SRV records for those sites without a GC that are closest to it. +Available in the latest Windows 10 Insider Preview Build. This policy setting specifies the sites for which the global catalogs (GC) should register site-specific GC locator DNS SRV resource records. These records are registered in addition to the site-specific SRV records registered for the site where the GC resides, and records registered by a GC configured to register GC Locator DNS SRV records for those sites without a GC that are closest to it. The GC Locator DNS records and the site-specific SRV records are dynamically registered by the Net Logon service, and they are used to locate the GC. An Active Directory site is one or more well-connected TCP/IP subnets that allow administrators to configure Active Directory access and replication. A GC is a domain controller that contains a partial replica of every domain in Active Directory. @@ -1687,7 +1687,7 @@ ADMX Info: -Available in Windows 10 Insider Preview Build 20185. This policy setting allows you to control the processing of incoming mailslot messages by a local domain controller (DC). +Available in the latest Windows 10 Insider Preview Build. This policy setting allows you to control the processing of incoming mailslot messages by a local domain controller (DC). > [!NOTE] > To locate a remote DC based on its NetBIOS (single-label) domain name, DC Locator first gets the list of DCs from a WINS server that is configured in its local client settings. DC Locator then sends a mailslot message to each remote DC to get more information. DC location succeeds only if a remote DC responds to the mailslot message. @@ -1763,7 +1763,7 @@ ADMX Info: -Available in Windows 10 Insider Preview Build 20185. This policy setting specifies the Priority field in the SRV resource records registered by domain controllers (DC) to which this setting is applied. These DNS records are dynamically registered by the Net Logon service and are used to locate the DC. +Available in the latest Windows 10 Insider Preview Build. This policy setting specifies the Priority field in the SRV resource records registered by domain controllers (DC) to which this setting is applied. These DNS records are dynamically registered by the Net Logon service and are used to locate the DC. The Priority field in the SRV record sets the preference for target hosts (specified in the SRV record’s Target field). DNS clients that query for SRV resource records attempt to contact the first reachable host with the lowest priority number listed. @@ -1836,7 +1836,7 @@ ADMX Info: -Available in Windows 10 Insider Preview Build 20185. This policy setting specifies the Weight field in the SRV resource records registered by the domain controllers (DC) to which this setting is applied. These DNS records are dynamically registered by the Net Logon service, and they are used to locate the DC. +Available in the latest Windows 10 Insider Preview Build. This policy setting specifies the Weight field in the SRV resource records registered by the domain controllers (DC) to which this setting is applied. These DNS records are dynamically registered by the Net Logon service, and they are used to locate the DC. The Weight field in the SRV record can be used in addition to the Priority value to provide a load-balancing mechanism where multiple servers are specified in the SRV records Target field and are all set to the same priority. The probability with which the DNS client randomly selects the target host to be contacted is proportional to the Weight field value in the SRV record. @@ -1909,7 +1909,7 @@ ADMX Info: -Available in Windows 10 Insider Preview Build 20185. This policy setting specifies the maximum size in bytes of the log file netlogon.log in the directory %windir%\debug when logging is enabled. +Available in the latest Windows 10 Insider Preview Build. This policy setting specifies the maximum size in bytes of the log file netlogon.log in the directory %windir%\debug when logging is enabled. By default, the maximum size of the log file is 20MB. If you enable this policy setting, the maximum size of the log file is set to the specified size. Once this size is reached the log file is saved to netlogon.bak and netlogon.log is truncated. A reasonable value based on available storage should be specified. @@ -1980,7 +1980,7 @@ ADMX Info: -Available in Windows 10 Insider Preview Build 20185. This policy setting specifies the sites for which the domain controllers (DC) that host the application directory partition should register the site-specific, application directory partition-specific DC Locator DNS SRV resource records. These records are registered in addition to the site-specific SRV records registered for the site where the DC resides, and records registered by a DC configured to register DC Locator DNS SRV records for those sites without a DC that are closest to it. +Available in the latest Windows 10 Insider Preview Build. This policy setting specifies the sites for which the domain controllers (DC) that host the application directory partition should register the site-specific, application directory partition-specific DC Locator DNS SRV resource records. These records are registered in addition to the site-specific SRV records registered for the site where the DC resides, and records registered by a DC configured to register DC Locator DNS SRV records for those sites without a DC that are closest to it. The application directory partition DC Locator DNS records and the site-specific SRV records are dynamically registered by the Net Logon service, and they are used to locate the application directory partition-specific DC. An Active Directory site is one or more well-connected TCP/IP subnets that allow administrators to configure Active Directory access and replication. @@ -2053,7 +2053,7 @@ ADMX Info: -Available in Windows 10 Insider Preview Build 20185. This policy setting specifies the amount of time (in seconds) the DC locator remembers that a domain controller (DC) could not be found in a domain. When a subsequent attempt to locate the DC occurs within the time set in this setting, DC Discovery immediately fails, without attempting to find the DC. +Available in the latest Windows 10 Insider Preview Build. This policy setting specifies the amount of time (in seconds) the DC locator remembers that a domain controller (DC) could not be found in a domain. When a subsequent attempt to locate the DC occurs within the time set in this setting, DC Discovery immediately fails, without attempting to find the DC. The default value for this setting is 45 seconds. The maximum value for this setting is 7 days (7*24*60*60). The minimum value for this setting is 0. @@ -2125,7 +2125,7 @@ ADMX Info: -Available in Windows 10 Insider Preview Build 20185. This policy setting controls whether or not the Netlogon share created by the Net Logon service on a domain controller (DC) should support compatibility in file sharing semantics with earlier applications. +Available in the latest Windows 10 Insider Preview Build. This policy setting controls whether or not the Netlogon share created by the Net Logon service on a domain controller (DC) should support compatibility in file sharing semantics with earlier applications. If you enable this policy setting, the Netlogon share will honor file sharing semantics that grant requests for exclusive read access to files on the share even when the caller has only read permission. @@ -2203,7 +2203,7 @@ ADMX Info: -Available in Windows 10 Insider Preview Build 20185. This policy setting determines when a successful DC cache entry is refreshed. This policy setting is applied to caller programs that do not periodically attempt to locate DCs, and it is applied before the returning the DC information to the caller program. This policy setting is relevant to only those callers of DsGetDcName that have not specified the DS_BACKGROUND_ONLY flag. +Available in the latest Windows 10 Insider Preview Build. This policy setting determines when a successful DC cache entry is refreshed. This policy setting is applied to caller programs that do not periodically attempt to locate DCs, and it is applied before the returning the DC information to the caller program. This policy setting is relevant to only those callers of DsGetDcName that have not specified the DS_BACKGROUND_ONLY flag. The default value for this setting is 30 minutes (1800). The maximum value for this setting is (4294967200), while the maximum that is not treated as infinity is 49 days (49*24*60*60=4233600). Any larger value will be treated as infinity. The minimum value for this setting is to always refresh (0). @@ -2272,7 +2272,7 @@ ADMX Info: -Available in Windows 10 Insider Preview Build 20185. This policy setting configures whether the computers to which this setting is applied are more aggressive when trying to locate a domain controller (DC). +Available in the latest Windows 10 Insider Preview Build. This policy setting configures whether the computers to which this setting is applied are more aggressive when trying to locate a domain controller (DC). When an environment has a large number of DCs running both old and new operating systems, the default DC locator discovery behavior may be insufficient to find DCs running a newer operating system. This policy setting can be enabled to configure DC locator to be more aggressive about trying to locate a DC in such an environment, by pinging DCs at a higher frequency. Enabling this setting may result in additional network traffic and increased load on DCs. You should disable this setting once all DCs are running the same OS version. @@ -2350,7 +2350,7 @@ ADMX Info: -Available in Windows 10 Insider Preview Build 20185. This policy setting determines the interval at which Netlogon performs the following scavenging operations: +Available in the latest Windows 10 Insider Preview Build. This policy setting determines the interval at which Netlogon performs the following scavenging operations: - Checks if a password on a secure channel needs to be modified, and modifies it if necessary. @@ -2427,7 +2427,7 @@ ADMX Info: -Available in Windows 10 Insider Preview Build 20185. This policy setting specifies the sites for which the domain controllers (DC) register the site-specific DC Locator DNS SRV resource records. These records are registered in addition to the site-specific SRV records registered for the site where the DC resides, and records registered by a DC configured to register DC Locator DNS SRV records for those sites without a DC that are closest to it. +Available in the latest Windows 10 Insider Preview Build. This policy setting specifies the sites for which the domain controllers (DC) register the site-specific DC Locator DNS SRV resource records. These records are registered in addition to the site-specific SRV records registered for the site where the DC resides, and records registered by a DC configured to register DC Locator DNS SRV records for those sites without a DC that are closest to it. The DC Locator DNS records are dynamically registered by the Net Logon service, and they are used to locate the DC. An Active Directory site is one or more well-connected TCP/IP subnets that allow administrators to configure Active Directory access and replication. @@ -2500,7 +2500,7 @@ ADMX Info: -Available in Windows 10 Insider Preview Build 20185. This policy setting specifies the Active Directory site to which computers belong. +Available in the latest Windows 10 Insider Preview Build. This policy setting specifies the Active Directory site to which computers belong. An Active Directory site is one or more well-connected TCP/IP subnets that allow administrators to configure Active Directory access and replication. @@ -2573,7 +2573,7 @@ ADMX Info: -Available in Windows 10 Insider Preview Build 20185. This policy setting controls whether or not the SYSVOL share created by the Net Logon service on a domain controller (DC) should support compatibility in file sharing semantics with earlier applications. +Available in the latest Windows 10 Insider Preview Build. This policy setting controls whether or not the SYSVOL share created by the Net Logon service on a domain controller (DC) should support compatibility in file sharing semantics with earlier applications. When this setting is enabled, the SYSVOL share will honor file sharing semantics that grant requests for exclusive read access to files on the share even when the caller has only read permission. @@ -2651,7 +2651,7 @@ ADMX Info: -Available in Windows 10 Insider Preview Build 20185. This policy setting enables DC Locator to attempt to locate a DC in the nearest site based on the site link cost if a DC in same the site is not found. In scenarios with multiple sites, failing over to the try next closest site during DC Location streamlines network traffic more effectively. +Available in the latest Windows 10 Insider Preview Build. This policy setting enables DC Locator to attempt to locate a DC in the nearest site based on the site link cost if a DC in same the site is not found. In scenarios with multiple sites, failing over to the try next closest site during DC Location streamlines network traffic more effectively. The DC Locator service is used by clients to find domain controllers for their Active Directory domain. The default behavior for DC Locator is to find a DC in the same site. If none are found in the same site, a DC in another site, which might be several site-hops away, could be returned by DC Locator. Site proximity between two sites is determined by the total site-link cost between them. A site is closer if it has a lower site link cost than another site with a higher site link cost. @@ -2726,7 +2726,7 @@ ADMX Info: -Available in Windows 10 Insider Preview Build 20185. This policy setting determines if dynamic registration of the domain controller (DC) locator DNS resource records is enabled. These DNS records are dynamically registered by the Net Logon service and are used by the Locator algorithm to locate the DC. +Available in the latest Windows 10 Insider Preview Build. This policy setting determines if dynamic registration of the domain controller (DC) locator DNS resource records is enabled. These DNS records are dynamically registered by the Net Logon service and are used by the Locator algorithm to locate the DC. If you enable this policy setting, DCs to which this setting is applied dynamically register DC Locator DNS resource records through dynamic DNS update-enabled network connections. diff --git a/windows/client-management/mdm/policy-csp-admx-offlinefiles.md b/windows/client-management/mdm/policy-csp-admx-offlinefiles.md index abd5e758fc..1a170d2024 100644 --- a/windows/client-management/mdm/policy-csp-admx-offlinefiles.md +++ b/windows/client-management/mdm/policy-csp-admx-offlinefiles.md @@ -209,7 +209,7 @@ manager: dansimp -Available in Windows 10 Insider Preview Build 20185. This policy setting makes subfolders available offline whenever their parent folder is made available offline. +Available in the latest Windows 10 Insider Preview Build. This policy setting makes subfolders available offline whenever their parent folder is made available offline. This setting automatically extends the "make available offline" setting to all new and existing subfolders of a folder. Users do not have the option of excluding subfolders. @@ -280,7 +280,7 @@ ADMX Info: -Available in Windows 10 Insider Preview Build 20185. This policy setting lists network files and folders that are always available for offline use. This ensures that the specified files and folders are available offline to users of the computer. +Available in the latest Windows 10 Insider Preview Build. This policy setting lists network files and folders that are always available for offline use. This ensures that the specified files and folders are available offline to users of the computer. If you enable this policy setting, the files you enter are always available offline to users of the computer. To specify a file or folder, click Show. In the Show Contents dialog box in the Value Name column, type the fully qualified UNC path to the file or folder. Leave the Value column field blank. @@ -354,7 +354,7 @@ ADMX Info: -Available in Windows 10 Insider Preview Build 20185. This policy setting lists network files and folders that are always available for offline use. This ensures that the specified files and folders are available offline to users of the computer. +Available in the latest Windows 10 Insider Preview Build. This policy setting lists network files and folders that are always available for offline use. This ensures that the specified files and folders are available offline to users of the computer. If you enable this policy setting, the files you enter are always available offline to users of the computer. To specify a file or folder, click Show. In the Show Contents dialog box in the Value Name column, type the fully qualified UNC path to the file or folder. Leave the Value column field blank. @@ -428,7 +428,7 @@ ADMX Info: -Available in Windows 10 Insider Preview Build 20185. This policy setting controls when background synchronization occurs while operating in slow-link mode, and applies to any user who logs onto the specified machine while this policy is in effect. To control slow-link mode, use the "Configure slow-link mode" policy setting. +Available in the latest Windows 10 Insider Preview Build. This policy setting controls when background synchronization occurs while operating in slow-link mode, and applies to any user who logs onto the specified machine while this policy is in effect. To control slow-link mode, use the "Configure slow-link mode" policy setting. If you enable this policy setting, you can control when Windows synchronizes in the background while operating in slow-link mode. Use the 'Sync Interval' and 'Sync Variance' values to override the default sync interval and variance settings. Use 'Blockout Start Time' and 'Blockout Duration' to set a period of time where background sync is disabled. Use the 'Maximum Allowed Time Without A Sync' value to ensure that all network folders on the machine are synchronized with the server on a regular basis. @@ -499,7 +499,7 @@ ADMX Info: -Available in Windows 10 Insider Preview Build 20185. This policy setting limits the amount of disk space that can be used to store offline files. This includes the space used by automatically cached files and files that are specifically made available offline. Files can be automatically cached if the user accesses a file on an automatic caching network share. +Available in the latest Windows 10 Insider Preview Build. This policy setting limits the amount of disk space that can be used to store offline files. This includes the space used by automatically cached files and files that are specifically made available offline. Files can be automatically cached if the user accesses a file on an automatic caching network share. This setting also disables the ability to adjust, through the Offline Files control panel applet, the disk space limits on the Offline Files cache. This prevents users from trying to change the option while a policy setting controls it. @@ -580,7 +580,7 @@ ADMX Info: -Available in Windows 10 Insider Preview Build 20185. This policy setting determines whether network files remain available if the computer is suddenly disconnected from the server hosting the files. +Available in the latest Windows 10 Insider Preview Build. This policy setting determines whether network files remain available if the computer is suddenly disconnected from the server hosting the files. This setting also disables the "When a network connection is lost" option on the Offline Files tab. This prevents users from trying to change the option while a setting controls it. @@ -664,7 +664,7 @@ ADMX Info: -Available in Windows 10 Insider Preview Build 20185. This policy setting determines whether network files remain available if the computer is suddenly disconnected from the server hosting the files. +Available in the latest Windows 10 Insider Preview Build. This policy setting determines whether network files remain available if the computer is suddenly disconnected from the server hosting the files. This setting also disables the "When a network connection is lost" option on the Offline Files tab. This prevents users from trying to change the option while a setting controls it. @@ -748,7 +748,7 @@ ADMX Info: -Available in Windows 10 Insider Preview Build 20185. Limits the percentage of the computer's disk space that can be used to store automatically cached offline files. +Available in the latest Windows 10 Insider Preview Build. Limits the percentage of the computer's disk space that can be used to store automatically cached offline files. This setting also disables the "Amount of disk space to use for temporary offline files" option on the Offline Files tab. This prevents users from trying to change the option while a setting controls it. @@ -828,7 +828,7 @@ ADMX Info: -Available in Windows 10 Insider Preview Build 20185.This policy setting determines whether the Offline Files feature is enabled. Offline Files saves a copy of network files on the user's computer for use when the computer is not connected to the network. +Available in the latest Windows 10 Insider Preview Build.This policy setting determines whether the Offline Files feature is enabled. Offline Files saves a copy of network files on the user's computer for use when the computer is not connected to the network. If you enable this policy setting, Offline Files is enabled and users cannot disable it. @@ -902,7 +902,7 @@ ADMX Info: -Available in Windows 10 Insider Preview Build 20185. This policy setting determines whether offline files are encrypted. +Available in the latest Windows 10 Insider Preview Build. This policy setting determines whether offline files are encrypted. Offline files are locally cached copies of files from a network share. Encrypting this cache reduces the likelihood that a user could access files from the Offline Files cache without proper permissions. @@ -979,7 +979,7 @@ ADMX Info: -Available in Windows 10 Insider Preview Build 20185. This policy setting determines which events the Offline Files feature records in the event log. +Available in the latest Windows 10 Insider Preview Build. This policy setting determines which events the Offline Files feature records in the event log. Offline Files records events in the Application log in Event Viewer when it detects errors. By default, Offline Files records an event only when the offline files storage cache is corrupted. However, you can use this setting to specify additional events you want Offline Files to record. @@ -1059,7 +1059,7 @@ ADMX Info: -Available in Windows 10 Insider Preview Build 20185. This policy setting determines which events the Offline Files feature records in the event log. +Available in the latest Windows 10 Insider Preview Build. This policy setting determines which events the Offline Files feature records in the event log. Offline Files records events in the Application log in Event Viewer when it detects errors. By default, Offline Files records an event only when the offline files storage cache is corrupted. However, you can use this setting to specify additional events you want Offline Files to record. @@ -1139,7 +1139,7 @@ ADMX Info: -Available in Windows 10 Insider Preview Build 20185. This policy setting enables administrators to block certain file types from being created in the folders that have been made available offline. +Available in the latest Windows 10 Insider Preview Build. This policy setting enables administrators to block certain file types from being created in the folders that have been made available offline. If you enable this policy setting, a user will be unable to create files with the specified file extensions in any of the folders that have been made available offline. @@ -1208,7 +1208,7 @@ ADMX Info: -Available in Windows 10 Insider Preview Build 20185. Lists types of files that cannot be used offline. +Available in the latest Windows 10 Insider Preview Build. Lists types of files that cannot be used offline. This setting lets you exclude certain types of files from automatic and manual caching for offline use. The system does not cache files of the type specified in this setting even when they reside on a network share configured for automatic caching. Also, if users try to make a file of this type available offline, the operation will fail and the following message will be displayed in the Synchronization Manager progress dialog box: "Files of this type cannot be made available offline." @@ -1282,7 +1282,7 @@ ADMX Info: -Available in Windows 10 Insider Preview Build 20185. This policy setting determines whether network files remain available if the computer is suddenly disconnected from the server hosting the files. +Available in the latest Windows 10 Insider Preview Build. This policy setting determines whether network files remain available if the computer is suddenly disconnected from the server hosting the files. This setting also disables the "When a network connection is lost" option on the Offline Files tab. This prevents users from trying to change the option while a setting controls it. @@ -1366,7 +1366,7 @@ ADMX Info: -Available in Windows 10 Insider Preview Build 20185. This policy setting determines whether network files remain available if the computer is suddenly disconnected from the server hosting the files. +Available in the latest Windows 10 Insider Preview Build. This policy setting determines whether network files remain available if the computer is suddenly disconnected from the server hosting the files. This setting also disables the "When a network connection is lost" option on the Offline Files tab. This prevents users from trying to change the option while a setting controls it. @@ -1450,7 +1450,7 @@ ADMX Info: -Available in Windows 10 Insider Preview Build 20185. This policy setting disables the Offline Files folder. +Available in the latest Windows 10 Insider Preview Build. This policy setting disables the Offline Files folder. This setting disables the "View Files" button on the Offline Files tab. As a result, users cannot use the Offline Files folder to view or open copies of network files stored on their computer. Also, they cannot use the folder to view characteristics of offline files, such as their server status, type, or location. @@ -1524,7 +1524,7 @@ ADMX Info: -Available in Windows 10 Insider Preview Build 20185. This policy setting disables the Offline Files folder. +Available in the latest Windows 10 Insider Preview Build. This policy setting disables the Offline Files folder. This setting disables the "View Files" button on the Offline Files tab. As a result, users cannot use the Offline Files folder to view or open copies of network files stored on their computer. Also, they cannot use the folder to view characteristics of offline files, such as their server status, type, or location. @@ -1598,7 +1598,7 @@ ADMX Info: -Available in Windows 10 Insider Preview Build 20185. This policy setting prevents users from enabling, disabling, or changing the configuration of Offline Files. +Available in the latest Windows 10 Insider Preview Build. This policy setting prevents users from enabling, disabling, or changing the configuration of Offline Files. This setting removes the Offline Files tab from the Folder Options dialog box. It also removes the Settings item from the Offline Files context menu and disables the Settings button on the Offline Files Status dialog box. As a result, users cannot view or change the options on the Offline Files tab or Offline Files dialog box. @@ -1672,7 +1672,7 @@ ADMX Info: -Available in Windows 10 Insider Preview Build 20185. This policy setting prevents users from enabling, disabling, or changing the configuration of Offline Files. +Available in the latest Windows 10 Insider Preview Build. This policy setting prevents users from enabling, disabling, or changing the configuration of Offline Files. This setting removes the Offline Files tab from the Folder Options dialog box. It also removes the Settings item from the Offline Files context menu and disables the Settings button on the Offline Files Status dialog box. As a result, users cannot view or change the options on the Offline Files tab or Offline Files dialog box. @@ -1746,7 +1746,7 @@ ADMX Info: -Available in Windows 10 Insider Preview Build 20185. This policy setting prevents users from making network files and folders available offline. +Available in the latest Windows 10 Insider Preview Build. This policy setting prevents users from making network files and folders available offline. If you enable this policy setting, users cannot designate files to be saved on their computer for offline use. However, Windows will still cache local copies of files that reside on network shares designated for automatic caching. @@ -1819,7 +1819,7 @@ ADMX Info: -Available in Windows 10 Insider Preview Build 20185. This policy setting prevents users from making network files and folders available offline. +Available in the latest Windows 10 Insider Preview Build. This policy setting prevents users from making network files and folders available offline. If you enable this policy setting, users cannot designate files to be saved on their computer for offline use. However, Windows will still cache local copies of files that reside on network shares designated for automatic caching. @@ -1892,7 +1892,7 @@ ADMX Info: -Available in Windows 10 Insider Preview Build 20185. This policy setting allows you to manage a list of files and folders for which you want to block the "Make Available Offline" command. +Available in the latest Windows 10 Insider Preview Build. This policy setting allows you to manage a list of files and folders for which you want to block the "Make Available Offline" command. If you enable this policy setting, the "Make Available Offline" command is not available for the files and folders that you list. To specify these files and folders, click Show. In the Show Contents dialog box, in the Value Name column box, type the fully qualified UNC path to the file or folder. Leave the Value column field blank. @@ -1969,7 +1969,7 @@ ADMX Info: -Available in Windows 10 Insider Preview Build 20185. This policy setting allows you to manage a list of files and folders for which you want to block the "Make Available Offline" command. +Available in the latest Windows 10 Insider Preview Build. This policy setting allows you to manage a list of files and folders for which you want to block the "Make Available Offline" command. If you enable this policy setting, the "Make Available Offline" command is not available for the files and folders that you list. To specify these files and folders, click Show. In the Show Contents dialog box, in the Value Name column box, type the fully qualified UNC path to the file or folder. Leave the Value column field blank. @@ -2046,7 +2046,7 @@ ADMX Info: -Available in Windows 10 Insider Preview Build 20185. Hides or displays reminder balloons, and prevents users from changing the setting. +Available in the latest Windows 10 Insider Preview Build. Hides or displays reminder balloons, and prevents users from changing the setting. Reminder balloons appear above the Offline Files icon in the notification area to notify users when they have lost the connection to a networked file and are working on a local copy of the file. Users can then decide how to proceed. @@ -2126,7 +2126,7 @@ ADMX Info: -Available in Windows 10 Insider Preview Build 20185. Hides or displays reminder balloons, and prevents users from changing the setting. +Available in the latest Windows 10 Insider Preview Build. Hides or displays reminder balloons, and prevents users from changing the setting. Reminder balloons appear above the Offline Files icon in the notification area to notify users when they have lost the connection to a networked file and are working on a local copy of the file. Users can then decide how to proceed. @@ -2206,7 +2206,7 @@ ADMX Info: -Available in Windows 10 Insider Preview Build 20185. This policy setting controls whether files read from file shares over a slow network are transparently cached in the Offline Files cache for future reads. When a user tries to access a file that has been transparently cached, Windows reads from the cached copy after verifying its integrity. This improves end-user response times and decreases bandwidth consumption over WAN links. +Available in the latest Windows 10 Insider Preview Build. This policy setting controls whether files read from file shares over a slow network are transparently cached in the Offline Files cache for future reads. When a user tries to access a file that has been transparently cached, Windows reads from the cached copy after verifying its integrity. This improves end-user response times and decreases bandwidth consumption over WAN links. The cached files are temporary and are not available to the user when offline. The cached files are not kept in sync with the version on the server, and the most current version from the server is always available for subsequent reads. @@ -2279,7 +2279,7 @@ ADMX Info: -Available in Windows 10 Insider Preview Build 20185. This policy setting makes subfolders available offline whenever their parent folder is made available offline. +Available in the latest Windows 10 Insider Preview Build. This policy setting makes subfolders available offline whenever their parent folder is made available offline. This setting automatically extends the "make available offline" setting to all new and existing subfolders of a folder. Users do not have the option of excluding subfolders. @@ -2350,7 +2350,7 @@ ADMX Info: -Available in Windows 10 Insider Preview Build 20185. This policy setting deletes local copies of the user's offline files when the user logs off. +Available in the latest Windows 10 Insider Preview Build. This policy setting deletes local copies of the user's offline files when the user logs off. This setting specifies that automatically and manually cached offline files are retained only while the user is logged on to the computer. When the user logs off, the system deletes all local copies of offline files. @@ -2422,7 +2422,7 @@ ADMX Info: -Available in Windows 10 Insider Preview Build 20185. This policy setting allows you to turn on economical application of administratively assigned Offline Files. +Available in the latest Windows 10 Insider Preview Build. This policy setting allows you to turn on economical application of administratively assigned Offline Files. If you enable or do not configure this policy setting, only new files and folders in administratively assigned folders are synchronized at logon. Files and folders that are already available offline are skipped and are synchronized later. @@ -2491,7 +2491,7 @@ ADMX Info: -Available in Windows 10 Insider Preview Build 20185. This policy setting determines how often reminder balloon updates appear. +Available in the latest Windows 10 Insider Preview Build. This policy setting determines how often reminder balloon updates appear. If you enable this setting, you can select how often reminder balloons updates appear and also prevent users from changing this setting. @@ -2565,7 +2565,7 @@ ADMX Info: -Available in Windows 10 Insider Preview Build 20185. This policy setting determines how often reminder balloon updates appear. +Available in the latest Windows 10 Insider Preview Build. This policy setting determines how often reminder balloon updates appear. If you enable this setting, you can select how often reminder balloons updates appear and also prevent users from changing this setting. @@ -2639,7 +2639,7 @@ ADMX Info: -Available in Windows 10 Insider Preview Build 20185. This policy setting determines how long the first reminder balloon for a network status change is displayed. +Available in the latest Windows 10 Insider Preview Build. This policy setting determines how long the first reminder balloon for a network status change is displayed. Reminder balloons appear when the user's connection to a network file is lost or reconnected, and they are updated periodically. By default, the first reminder for an event is displayed for 30 seconds. Then, updates appear every 60 minutes and are displayed for 15 seconds. You can use this setting to change the duration of the first reminder. @@ -2708,7 +2708,7 @@ ADMX Info: -Available in Windows 10 Insider Preview Build 20185. This policy setting determines how long the first reminder balloon for a network status change is displayed. +Available in the latest Windows 10 Insider Preview Build. This policy setting determines how long the first reminder balloon for a network status change is displayed. Reminder balloons appear when the user's connection to a network file is lost or reconnected, and they are updated periodically. By default, the first reminder for an event is displayed for 30 seconds. Then, updates appear every 60 minutes and are displayed for 15 seconds. You can use this setting to change the duration of the first reminder. @@ -2777,7 +2777,7 @@ ADMX Info: -Available in Windows 10 Insider Preview Build 20185. This policy setting determines how long updated reminder balloons are displayed. +Available in the latest Windows 10 Insider Preview Build. This policy setting determines how long updated reminder balloons are displayed. Reminder balloons appear when the user's connection to a network file is lost or reconnected, and they are updated periodically. By default, the first reminder for an event is displayed for 30 seconds. Then, updates appear every 60 minutes and are displayed for 15 seconds. You can use this setting to change the duration of the update reminder. @@ -2846,7 +2846,7 @@ ADMX Info: -Available in Windows 10 Insider Preview Build 20185. This policy setting determines how long updated reminder balloons are displayed. +Available in the latest Windows 10 Insider Preview Build. This policy setting determines how long updated reminder balloons are displayed. Reminder balloons appear when the user's connection to a network file is lost or reconnected, and they are updated periodically. By default, the first reminder for an event is displayed for 30 seconds. Then, updates appear every 60 minutes and are displayed for 15 seconds. You can use this setting to change the duration of the update reminder. @@ -2915,7 +2915,7 @@ ADMX Info: -Available in Windows 10 Insider Preview Build 20185. This policy setting controls the network latency and throughput thresholds that will cause a client computers to transition files and folders that are already available offline to the slow-link mode so that the user's access to this data is not degraded due to network slowness. When Offline Files is operating in the slow-link mode, all network file requests are satisfied from the Offline Files cache. This is similar to a user working offline. +Available in the latest Windows 10 Insider Preview Build. This policy setting controls the network latency and throughput thresholds that will cause a client computers to transition files and folders that are already available offline to the slow-link mode so that the user's access to this data is not degraded due to network slowness. When Offline Files is operating in the slow-link mode, all network file requests are satisfied from the Offline Files cache. This is similar to a user working offline. If you enable this policy setting, Offline Files uses the slow-link mode if the network throughput between the client and the server is below (slower than) the Throughput threshold parameter, or if the round-trip network latency is above (slower than) the Latency threshold parameter. @@ -2994,7 +2994,7 @@ ADMX Info: -Available in Windows 10 Insider Preview Build 20185. This policy setting configures the threshold value at which Offline Files considers a network connection to be "slow". Any network speed below this value is considered to be slow. +Available in the latest Windows 10 Insider Preview Build. This policy setting configures the threshold value at which Offline Files considers a network connection to be "slow". Any network speed below this value is considered to be slow. When a connection is considered slow, Offline Files automatically adjust its behavior to avoid excessive synchronization traffic and will not automatically reconnect to a server when the presence of a server is detected. @@ -3068,7 +3068,7 @@ ADMX Info: -Available in Windows 10 Insider Preview Build 20185. This policy setting determines whether offline files are fully synchronized when users log off. +Available in the latest Windows 10 Insider Preview Build. This policy setting determines whether offline files are fully synchronized when users log off. This setting also disables the "Synchronize all offline files before logging off" option on the Offline Files tab. This prevents users from trying to change the option while a setting controls it. @@ -3146,7 +3146,7 @@ ADMX Info: -Available in Windows 10 Insider Preview Build 20185. This policy setting determines whether offline files are fully synchronized when users log off. +Available in the latest Windows 10 Insider Preview Build. This policy setting determines whether offline files are fully synchronized when users log off. This setting also disables the "Synchronize all offline files before logging off" option on the Offline Files tab. This prevents users from trying to change the option while a setting controls it. @@ -3224,7 +3224,7 @@ ADMX Info: -Available in Windows 10 Insider Preview Build 20185. This policy setting determines whether offline files are fully synchronized when users log on. +Available in the latest Windows 10 Insider Preview Build. This policy setting determines whether offline files are fully synchronized when users log on. This setting also disables the "Synchronize all offline files before logging on" option on the Offline Files tab. This prevents users from trying to change the option while a setting controls it. @@ -3304,7 +3304,7 @@ ADMX Info: -Available in Windows 10 Insider Preview Build 20185. This policy setting determines whether offline files are fully synchronized when users log on. +Available in the latest Windows 10 Insider Preview Build. This policy setting determines whether offline files are fully synchronized when users log on. This setting also disables the "Synchronize all offline files before logging on" option on the Offline Files tab. This prevents users from trying to change the option while a setting controls it. @@ -3382,7 +3382,7 @@ ADMX Info: -Available in Windows 10 Insider Preview Build 20185. This policy setting determines whether offline files are synchronized before a computer is suspended. +Available in the latest Windows 10 Insider Preview Build. This policy setting determines whether offline files are synchronized before a computer is suspended. If you enable this setting, offline files are synchronized whenever the computer is suspended. Setting the synchronization action to "Quick" ensures only that all files in the cache are complete. Setting the synchronization action to "Full" ensures that all cached files and folders are up-to-date with the most current version. @@ -3454,7 +3454,7 @@ ADMX Info: -Available in Windows 10 Insider Preview Build 20185. This policy setting determines whether offline files are synchronized before a computer is suspended. +Available in the latest Windows 10 Insider Preview Build. This policy setting determines whether offline files are synchronized before a computer is suspended. If you enable this setting, offline files are synchronized whenever the computer is suspended. Setting the synchronization action to "Quick" ensures only that all files in the cache are complete. Setting the synchronization action to "Full" ensures that all cached files and folders are up-to-date with the most current version. @@ -3526,7 +3526,7 @@ ADMX Info: -Available in Windows 10 Insider Preview Build 20185. This policy setting determines whether offline files are synchronized in the background when it could result in extra charges on cell phone or broadband plans. +Available in the latest Windows 10 Insider Preview Build. This policy setting determines whether offline files are synchronized in the background when it could result in extra charges on cell phone or broadband plans. If you enable this setting, synchronization can occur in the background when the user's network is roaming, near, or over the plan's data limit. This may result in extra charges on cell phone or broadband plans. @@ -3595,7 +3595,7 @@ ADMX Info: -Available in Windows 10 Insider Preview Build 20185. This policy setting removes the "Work offline" command from Explorer, preventing users from manually changing whether Offline Files is in online mode or offline mode. +Available in the latest Windows 10 Insider Preview Build. This policy setting removes the "Work offline" command from Explorer, preventing users from manually changing whether Offline Files is in online mode or offline mode. If you enable this policy setting, the "Work offline" command is not displayed in File Explorer. @@ -3664,7 +3664,7 @@ ADMX Info: -Available in Windows 10 Insider Preview Build 20185. This policy setting removes the "Work offline" command from Explorer, preventing users from manually changing whether Offline Files is in online mode or offline mode. +Available in the latest Windows 10 Insider Preview Build. This policy setting removes the "Work offline" command from Explorer, preventing users from manually changing whether Offline Files is in online mode or offline mode. If you enable this policy setting, the "Work offline" command is not displayed in File Explorer. From f7464d8ae463afe8a5c93e059a847371f6fedb5c Mon Sep 17 00:00:00 2001 From: ManikaDhiman Date: Tue, 29 Dec 2020 12:32:01 -0800 Subject: [PATCH 235/486] Updated availability verbiage --- .../mdm/policy-csp-admx-peertopeercaching.md | 18 +- .../policy-csp-admx-performancediagnostics.md | 8 +- .../mdm/policy-csp-admx-reliability.md | 8 +- .../mdm/policy-csp-admx-scripts.md | 24 +- .../mdm/policy-csp-admx-sdiageng.md | 6 +- .../mdm/policy-csp-admx-securitycenter.md | 2 +- .../mdm/policy-csp-admx-servicing.md | 2 +- .../mdm/policy-csp-admx-sharedfolders.md | 4 +- .../mdm/policy-csp-admx-sharing.md | 2 +- ...csp-admx-shellcommandpromptregedittools.md | 8 +- .../mdm/policy-csp-admx-smartcard.md | 32 +-- .../mdm/policy-csp-admx-snmp.md | 6 +- .../mdm/policy-csp-admx-systemrestore.md | 2 +- .../mdm/policy-csp-admx-tcpip.md | 26 +- .../mdm/policy-csp-admx-thumbnails.md | 6 +- .../mdm/policy-csp-admx-tpm.md | 20 +- ...y-csp-admx-userexperiencevirtualization.md | 252 +++++++++--------- .../mdm/policy-csp-admx-w32time.md | 8 +- .../mdm/policy-csp-admx-wincal.md | 4 +- .../policy-csp-admx-windowsanytimeupgrade.md | 2 +- .../mdm/policy-csp-admx-windowsconnectnow.md | 6 +- .../mdm/policy-csp-admx-windowsmediadrm.md | 2 +- .../mdm/policy-csp-admx-windowsmediaplayer.md | 42 +-- .../mdm/policy-csp-admx-wininit.md | 6 +- 24 files changed, 248 insertions(+), 248 deletions(-) diff --git a/windows/client-management/mdm/policy-csp-admx-peertopeercaching.md b/windows/client-management/mdm/policy-csp-admx-peertopeercaching.md index 426fcbe069..54b15aabfb 100644 --- a/windows/client-management/mdm/policy-csp-admx-peertopeercaching.md +++ b/windows/client-management/mdm/policy-csp-admx-peertopeercaching.md @@ -97,7 +97,7 @@ manager: dansimp -Available in Windows 10 Insider Preview Build 20185. This policy setting specifies whether BranchCache is enabled on client computers to which this policy is applied. In addition to this policy setting, you must specify whether the client computers are hosted cache mode or distributed cache mode clients. To do so, configure one of the following the policy settings: +Available in the latest Windows 10 Insider Preview Build. This policy setting specifies whether BranchCache is enabled on client computers to which this policy is applied. In addition to this policy setting, you must specify whether the client computers are hosted cache mode or distributed cache mode clients. To do so, configure one of the following the policy settings: - Set BranchCache Distributed Cache mode - Set BranchCache Hosted Cache mode @@ -177,7 +177,7 @@ ADMX Info: -Available in Windows 10 Insider Preview Build 20185. This policy setting specifies whether BranchCache distributed cache mode is enabled on client computers to which this policy is applied. In addition to this policy, you must use the policy "Turn on BranchCache" to enable BranchCache on client computers. +Available in the latest Windows 10 Insider Preview Build. This policy setting specifies whether BranchCache distributed cache mode is enabled on client computers to which this policy is applied. In addition to this policy, you must use the policy "Turn on BranchCache" to enable BranchCache on client computers. In distributed cache mode, client computers download content from BranchCache-enabled main office content servers, cache the content locally, and serve the content to other BranchCache distributed cache mode clients in the branch office. @@ -255,7 +255,7 @@ ADMX Info: -Available in Windows 10 Insider Preview Build 20185. This policy setting specifies whether BranchCache hosted cache mode is enabled on client computers to which this policy is applied. In addition to this policy, you must use the policy "Turn on BranchCache" to enable BranchCache on client computers. +Available in the latest Windows 10 Insider Preview Build. This policy setting specifies whether BranchCache hosted cache mode is enabled on client computers to which this policy is applied. In addition to this policy, you must use the policy "Turn on BranchCache" to enable BranchCache on client computers. When a client computer is configured as a hosted cache mode client, it is able to download cached content from a hosted cache server that is located at the branch office. In addition, when the hosted cache client obtains content from a content server, the client can upload the content to the hosted cache server for access by other hosted cache clients at the branch office. @@ -339,7 +339,7 @@ ADMX Info: -Available in Windows 10 Insider Preview Build 20185. This policy setting specifies whether client computers should attempt the automatic configuration of hosted cache mode by searching for hosted cache servers publishing service connection points that are associated with the client's current Active Directory site. If you enable this policy setting, client computers to which the policy setting is applied search for hosted cache servers using Active Directory, and will prefer both these servers and hosted cache mode rather than manual BranchCache configuration or BranchCache configuration by other group policies. +Available in the latest Windows 10 Insider Preview Build. This policy setting specifies whether client computers should attempt the automatic configuration of hosted cache mode by searching for hosted cache servers publishing service connection points that are associated with the client's current Active Directory site. If you enable this policy setting, client computers to which the policy setting is applied search for hosted cache servers using Active Directory, and will prefer both these servers and hosted cache mode rather than manual BranchCache configuration or BranchCache configuration by other group policies. If you enable this policy setting in addition to the "Turn on BranchCache" policy setting, BranchCache clients attempt to discover hosted cache servers in the local branch office. If client computers detect hosted cache servers, hosted cache mode is turned on. If they do not detect hosted cache servers, hosted cache mode is not turned on, and the client uses any other configuration that is specified manually or by Group Policy. @@ -426,7 +426,7 @@ ADMX Info: -Available in Windows 10 Insider Preview Build 20185. This policy setting specifies whether client computers are configured to use hosted cache mode and provides the computer name of the hosted cache servers that are available to the client computers. Hosted cache mode enables client computers in branch offices to retrieve content from one or more hosted cache servers that are installed in the same office location. You can use this setting to automatically configure client computers that are configured for hosted cache mode with the computer names of the hosted cache servers in the branch office. +Available in the latest Windows 10 Insider Preview Build. This policy setting specifies whether client computers are configured to use hosted cache mode and provides the computer name of the hosted cache servers that are available to the client computers. Hosted cache mode enables client computers in branch offices to retrieve content from one or more hosted cache servers that are installed in the same office location. You can use this setting to automatically configure client computers that are configured for hosted cache mode with the computer names of the hosted cache servers in the branch office. If you enable this policy setting and specify valid computer names of hosted cache servers, hosted cache mode is enabled for all client computers to which the policy setting is applied. For this policy setting to take effect, you must also enable the "Turn on BranchCache" policy setting. @@ -509,7 +509,7 @@ ADMX Info: -Available in Windows 10 Insider Preview Build 20185. This policy setting is used only when you have deployed one or more BranchCache-enabled file servers at your main office. This policy setting specifies when client computers in branch offices start caching content from file servers based on the network latency - or delay - that occurs when the clients download content from the main office over a Wide Area Network (WAN) link. When you configure a value for this setting, which is the maximum round trip network latency allowed before caching begins, clients do not cache content until the network latency reaches the specified value; when network latency is greater than the value, clients begin caching content after they receive it from the file servers. +Available in the latest Windows 10 Insider Preview Build. This policy setting is used only when you have deployed one or more BranchCache-enabled file servers at your main office. This policy setting specifies when client computers in branch offices start caching content from file servers based on the network latency - or delay - that occurs when the clients download content from the main office over a Wide Area Network (WAN) link. When you configure a value for this setting, which is the maximum round trip network latency allowed before caching begins, clients do not cache content until the network latency reaches the specified value; when network latency is greater than the value, clients begin caching content after they receive it from the file servers. Policy configuration @@ -586,7 +586,7 @@ ADMX Info: -Available in Windows 10 Insider Preview Build 20185. This policy setting specifies the default percentage of total disk space that is allocated for the BranchCache disk cache on client computers. +Available in the latest Windows 10 Insider Preview Build. This policy setting specifies the default percentage of total disk space that is allocated for the BranchCache disk cache on client computers. If you enable this policy setting, you can configure the percentage of total disk space to allocate for the cache. @@ -670,7 +670,7 @@ ADMX Info: -Available in Windows 10 Insider Preview Build 20185. This policy setting specifies the default age in days for which segments are valid in the BranchCache data cache on client computers. +Available in the latest Windows 10 Insider Preview Build. This policy setting specifies the default age in days for which segments are valid in the BranchCache data cache on client computers. If you enable this policy setting, you can configure the age for segments in the data cache. @@ -751,7 +751,7 @@ ADMX Info: -Available in Windows 10 Insider Preview Build 20185. This policy setting specifies whether BranchCache-capable client computers operate in a downgraded mode in order to maintain compatibility with previous versions of BranchCache. If client computers do not use the same BranchCache version, cache efficiency might be reduced because client computers that are using different versions of BranchCache might store cache data in incompatible formats. +Available in the latest Windows 10 Insider Preview Build. This policy setting specifies whether BranchCache-capable client computers operate in a downgraded mode in order to maintain compatibility with previous versions of BranchCache. If client computers do not use the same BranchCache version, cache efficiency might be reduced because client computers that are using different versions of BranchCache might store cache data in incompatible formats. If you enable this policy setting, all clients use the version of BranchCache that you specify in "Select from the following versions." diff --git a/windows/client-management/mdm/policy-csp-admx-performancediagnostics.md b/windows/client-management/mdm/policy-csp-admx-performancediagnostics.md index f02fb046cc..fe3507834c 100644 --- a/windows/client-management/mdm/policy-csp-admx-performancediagnostics.md +++ b/windows/client-management/mdm/policy-csp-admx-performancediagnostics.md @@ -83,7 +83,7 @@ manager: dansimp -Available in Windows 10 Insider Preview Build 20185. This policy setting determines the execution level for Windows Boot Performance Diagnostics. +Available in the latest Windows 10 Insider Preview Build. This policy setting determines the execution level for Windows Boot Performance Diagnostics. If you enable this policy setting, you must select an execution level from the dropdown menu. If you select problem detection and troubleshooting only, the Diagnostic Policy Service (DPS) will detect Windows Boot Performance problems and attempt to determine their root causes. These root causes will be logged to the event log when detected, but no corrective action will be taken. If you select detection, troubleshooting and resolution, the DPS will detect Windows Boot Performance problems and indicate to the user that assisted resolution is available. @@ -160,7 +160,7 @@ ADMX Info: -Available in Windows 10 Insider Preview Build 20185. Determines the execution level for Windows Standby/Resume Performance Diagnostics. +Available in the latest Windows 10 Insider Preview Build. Determines the execution level for Windows Standby/Resume Performance Diagnostics. If you enable this policy setting, you must select an execution level from the dropdown menu. If you select problem detection and troubleshooting only, the Diagnostic Policy Service (DPS) will detect Windows Standby/Resume Performance problems and attempt to determine their root causes. These root causes will be logged to the event log when detected, but no corrective action will be taken. If you select detection, troubleshooting and resolution, the DPS will detect Windows Standby/Resume Performance problems and indicate to the user that assisted resolution is available. @@ -237,7 +237,7 @@ ADMX Info: -Available in Windows 10 Insider Preview Build 20185. This policy setting determines the execution level for Windows Shutdown Performance Diagnostics. +Available in the latest Windows 10 Insider Preview Build. This policy setting determines the execution level for Windows Shutdown Performance Diagnostics. If you enable this policy setting, you must select an execution level from the dropdown menu. If you select problem detection and troubleshooting only, the Diagnostic Policy Service (DPS) will detect Windows Shutdown Performance problems and attempt to determine their root causes. These root causes will be logged to the event log when detected, but no corrective action will be taken. If you select detection, troubleshooting and resolution, the DPS will detect Windows Shutdown Performance problems and indicate to the user that assisted resolution is available. @@ -314,7 +314,7 @@ ADMX Info: -Available in Windows 10 Insider Preview Build 20185. Determines the execution level for Windows Standby/Resume Performance Diagnostics. +Available in the latest Windows 10 Insider Preview Build. Determines the execution level for Windows Standby/Resume Performance Diagnostics. If you enable this policy setting, you must select an execution level from the dropdown menu. If you select problem detection and troubleshooting only, the Diagnostic Policy Service (DPS) will detect Windows Standby/Resume Performance problems and attempt to determine their root causes. These root causes will be logged to the event log when detected, but no corrective action will be taken. If you select detection, troubleshooting and resolution, the DPS will detect Windows Standby/Resume Performance problems and indicate to the user that assisted resolution is available. diff --git a/windows/client-management/mdm/policy-csp-admx-reliability.md b/windows/client-management/mdm/policy-csp-admx-reliability.md index e466f85f86..5db45b394d 100644 --- a/windows/client-management/mdm/policy-csp-admx-reliability.md +++ b/windows/client-management/mdm/policy-csp-admx-reliability.md @@ -83,7 +83,7 @@ manager: dansimp -Available in Windows 10 Insider Preview Build 20185. This policy setting allows the system to detect the time of unexpected shutdowns by writing the current time to disk on a schedule controlled by the Timestamp Interval. +Available in the latest Windows 10 Insider Preview Build. This policy setting allows the system to detect the time of unexpected shutdowns by writing the current time to disk on a schedule controlled by the Timestamp Interval. If you enable this policy setting, you are able to specify how often the Persistent System Timestamp is refreshed and subsequently written to the disk. You can specify the Timestamp Interval in seconds. @@ -159,7 +159,7 @@ ADMX Info: -Available in Windows 10 Insider Preview Build 20185. This policy setting controls whether or not unplanned shutdown events can be reported when error reporting is enabled. +Available in the latest Windows 10 Insider Preview Build. This policy setting controls whether or not unplanned shutdown events can be reported when error reporting is enabled. If you enable this policy setting, error reporting includes unplanned shutdown events. @@ -234,7 +234,7 @@ ADMX Info: -Available in Windows 10 Insider Preview Build 20185. This policy setting defines when the Shutdown Event Tracker System State Data feature is activated. +Available in the latest Windows 10 Insider Preview Build. This policy setting defines when the Shutdown Event Tracker System State Data feature is activated. The system state data file contains information about the basic system state as well as the state of all running processes. @@ -312,7 +312,7 @@ ADMX Info: -Available in Windows 10 Insider Preview Build 20185. The Shutdown Event Tracker can be displayed when you shut down a workstation or server. This is an extra set of questions that is displayed when you invoke a shutdown to collect information related to why you are shutting down the computer. +Available in the latest Windows 10 Insider Preview Build. The Shutdown Event Tracker can be displayed when you shut down a workstation or server. This is an extra set of questions that is displayed when you invoke a shutdown to collect information related to why you are shutting down the computer. If you enable this setting and choose "Always" from the drop-down menu list, the Shutdown Event Tracker is displayed when the computer shuts down. diff --git a/windows/client-management/mdm/policy-csp-admx-scripts.md b/windows/client-management/mdm/policy-csp-admx-scripts.md index 7f655514ef..1a7df80d7f 100644 --- a/windows/client-management/mdm/policy-csp-admx-scripts.md +++ b/windows/client-management/mdm/policy-csp-admx-scripts.md @@ -107,7 +107,7 @@ manager: dansimp -Available in Windows 10 Insider Preview Build 20185. This policy setting allows user logon scripts to run when the logon cross-forest, DNS suffixes are not configured, and NetBIOS or WINS is disabled. This policy setting affects all user accounts interactively logging on to the computer. +Available in the latest Windows 10 Insider Preview Build. This policy setting allows user logon scripts to run when the logon cross-forest, DNS suffixes are not configured, and NetBIOS or WINS is disabled. This policy setting affects all user accounts interactively logging on to the computer. If you enable this policy setting, user logon scripts run if NetBIOS or WINS is disabled during cross-forest logons without the DNS suffixes being configured. @@ -176,7 +176,7 @@ ADMX Info: -Available in Windows 10 Insider Preview Build 20185. This policy setting determines how long the system waits for scripts applied by Group Policy to run. +Available in the latest Windows 10 Insider Preview Build. This policy setting determines how long the system waits for scripts applied by Group Policy to run. This setting limits the total time allowed for all logon, logoff, startup, and shutdown scripts applied by Group Policy to finish running. If the scripts have not finished running when the specified time expires, the system stops script processing and records an error event. @@ -251,7 +251,7 @@ ADMX Info: -Available in Windows 10 Insider Preview Build 20185. This policy setting determines whether Windows PowerShell scripts are run before non-Windows PowerShell scripts during computer startup and shutdown. By default, Windows PowerShell scripts run after non-Windows PowerShell scripts. +Available in the latest Windows 10 Insider Preview Build. This policy setting determines whether Windows PowerShell scripts are run before non-Windows PowerShell scripts during computer startup and shutdown. By default, Windows PowerShell scripts run after non-Windows PowerShell scripts. If you enable this policy setting, within each applicable Group Policy Object (GPO), Windows PowerShell scripts are run before non-Windows PowerShell scripts during computer startup and shutdown. @@ -343,7 +343,7 @@ ADMX Info: -Available in Windows 10 Insider Preview Build 20185. This policy setting hides the instructions in logon scripts written for Windows NT 4.0 and earlier. +Available in the latest Windows 10 Insider Preview Build. This policy setting hides the instructions in logon scripts written for Windows NT 4.0 and earlier. Logon scripts are batch files of instructions that run when the user logs on. By default, Windows 2000 displays the instructions in logon scripts written for Windows NT 4.0 and earlier in a command window as they run, although it does not display logon scripts written for Windows 2000. @@ -416,7 +416,7 @@ ADMX Info: -Available in Windows 10 Insider Preview Build 20185. This policy setting displays the instructions in logoff scripts as they run. +Available in the latest Windows 10 Insider Preview Build. This policy setting displays the instructions in logoff scripts as they run. Logoff scripts are batch files of instructions that run when the user logs off. By default, the system does not display the instructions in the logoff script. @@ -487,7 +487,7 @@ ADMX Info: -Available in Windows 10 Insider Preview Build 20185. This policy setting directs the system to wait for logon scripts to finish running before it starts the File Explorer interface program and creates the desktop. +Available in the latest Windows 10 Insider Preview Build. This policy setting directs the system to wait for logon scripts to finish running before it starts the File Explorer interface program and creates the desktop. If you enable this policy setting, File Explorer does not start until the logon scripts have finished running. This policy setting ensures that logon script processing is complete before the user starts working, but it can delay the appearance of the desktop. @@ -558,7 +558,7 @@ ADMX Info: -Available in Windows 10 Insider Preview Build 20185. This policy setting directs the system to wait for logon scripts to finish running before it starts the File Explorer interface program and creates the desktop. +Available in the latest Windows 10 Insider Preview Build. This policy setting directs the system to wait for logon scripts to finish running before it starts the File Explorer interface program and creates the desktop. If you enable this policy setting, File Explorer does not start until the logon scripts have finished running. This policy setting ensures that logon script processing is complete before the user starts working, but it can delay the appearance of the desktop. @@ -629,7 +629,7 @@ ADMX Info: -Available in Windows 10 Insider Preview Build 20185. This policy setting displays the instructions in logon scripts as they run. +Available in the latest Windows 10 Insider Preview Build. This policy setting displays the instructions in logon scripts as they run. Logon scripts are batch files of instructions that run when the user logs on. By default, the system does not display the instructions in logon scripts. @@ -700,7 +700,7 @@ ADMX Info: -Available in Windows 10 Insider Preview Build 20185. This policy setting displays the instructions in shutdown scripts as they run. +Available in the latest Windows 10 Insider Preview Build. This policy setting displays the instructions in shutdown scripts as they run. Shutdown scripts are batch files of instructions that run when the user restarts the system or shuts it down. By default, the system does not display the instructions in the shutdown script. @@ -771,7 +771,7 @@ ADMX Info: -Available in Windows 10 Insider Preview Build 20185. This policy setting lets the system run startup scripts simultaneously. +Available in the latest Windows 10 Insider Preview Build. This policy setting lets the system run startup scripts simultaneously. Startup scripts are batch files that run before the user is invited to log on. By default, the system waits for each startup script to complete before it runs the next startup script. @@ -845,7 +845,7 @@ ADMX Info: -Available in Windows 10 Insider Preview Build 20185. This policy setting displays the instructions in startup scripts as they run. +Available in the latest Windows 10 Insider Preview Build. This policy setting displays the instructions in startup scripts as they run. Startup scripts are batch files of instructions that run before the user is invited to log on. By default, the system does not display the instructions in the startup script. @@ -920,7 +920,7 @@ ADMX Info: -Available in Windows 10 Insider Preview Build 20185. This policy setting determines whether Windows PowerShell scripts are run before non-Windows PowerShell scripts during user logon and logoff. By default, Windows PowerShell scripts run after non-Windows PowerShell scripts. +Available in the latest Windows 10 Insider Preview Build. This policy setting determines whether Windows PowerShell scripts are run before non-Windows PowerShell scripts during user logon and logoff. By default, Windows PowerShell scripts run after non-Windows PowerShell scripts. If you enable this policy setting, within each applicable Group Policy Object (GPO), PowerShell scripts are run before non-PowerShell scripts during user logon and logoff. diff --git a/windows/client-management/mdm/policy-csp-admx-sdiageng.md b/windows/client-management/mdm/policy-csp-admx-sdiageng.md index ce4096ecc5..bc7b4bc48a 100644 --- a/windows/client-management/mdm/policy-csp-admx-sdiageng.md +++ b/windows/client-management/mdm/policy-csp-admx-sdiageng.md @@ -80,7 +80,7 @@ manager: dansimp -Available in Windows 10 Insider Preview Build 20185. This policy setting allows users who are connected to the Internet to access and search troubleshooting content that is hosted on Microsoft content servers. Users can access online troubleshooting content from within the Troubleshooting Control Panel UI by clicking "Yes" when they are prompted by a message that states, "Do you want the most up-to-date troubleshooting content?" +Available in the latest Windows 10 Insider Preview Build. This policy setting allows users who are connected to the Internet to access and search troubleshooting content that is hosted on Microsoft content servers. Users can access online troubleshooting content from within the Troubleshooting Control Panel UI by clicking "Yes" when they are prompted by a message that states, "Do you want the most up-to-date troubleshooting content?" If you enable or do not configure this policy setting, users who are connected to the Internet can access and search troubleshooting content that is hosted on Microsoft content servers from within the Troubleshooting Control Panel user interface. @@ -149,7 +149,7 @@ ADMX Info: -Available in Windows 10 Insider Preview Build 20185. This policy setting allows users to access and run the troubleshooting tools that are available in the Troubleshooting Control Panel and to run the troubleshooting wizard to troubleshoot problems on their computers. +Available in the latest Windows 10 Insider Preview Build. This policy setting allows users to access and run the troubleshooting tools that are available in the Troubleshooting Control Panel and to run the troubleshooting wizard to troubleshoot problems on their computers. If you enable or do not configure this policy setting, users can access and run the troubleshooting tools from the Troubleshooting Control Panel. @@ -220,7 +220,7 @@ ADMX Info: -Available in Windows 10 Insider Preview Build 20185. This policy setting determines whether scripted diagnostics will execute diagnostic packages that are signed by untrusted publishers. +Available in the latest Windows 10 Insider Preview Build. This policy setting determines whether scripted diagnostics will execute diagnostic packages that are signed by untrusted publishers. If you enable this policy setting, the scripted diagnostics execution engine validates the signer of any diagnostic package and runs only those signed by trusted publishers. diff --git a/windows/client-management/mdm/policy-csp-admx-securitycenter.md b/windows/client-management/mdm/policy-csp-admx-securitycenter.md index 3f963a77cb..5016dd12b2 100644 --- a/windows/client-management/mdm/policy-csp-admx-securitycenter.md +++ b/windows/client-management/mdm/policy-csp-admx-securitycenter.md @@ -74,7 +74,7 @@ manager: dansimp -Available in Windows 10 Insider Preview Build 20185. This policy setting specifies whether Security Center is turned on or off for computers that are joined to an Active Directory domain. When Security Center is turned on, it monitors essential security settings and notifies the user when the computer might be at risk. The Security Center Control Panel category view also contains a status section, where the user can get recommendations to help increase the computer's security. When Security Center is not enabled on the domain, neither the notifications nor the Security Center status section are displayed. +Available in the latest Windows 10 Insider Preview Build. This policy setting specifies whether Security Center is turned on or off for computers that are joined to an Active Directory domain. When Security Center is turned on, it monitors essential security settings and notifies the user when the computer might be at risk. The Security Center Control Panel category view also contains a status section, where the user can get recommendations to help increase the computer's security. When Security Center is not enabled on the domain, neither the notifications nor the Security Center status section are displayed. Note that Security Center can only be turned off for computers that are joined to a Windows domain. When a computer is not joined to a Windows domain, the policy setting will have no effect. diff --git a/windows/client-management/mdm/policy-csp-admx-servicing.md b/windows/client-management/mdm/policy-csp-admx-servicing.md index c18852e5ea..c2738859de 100644 --- a/windows/client-management/mdm/policy-csp-admx-servicing.md +++ b/windows/client-management/mdm/policy-csp-admx-servicing.md @@ -74,7 +74,7 @@ manager: dansimp -Available in Windows 10 Insider Preview Build 20185. This policy setting specifies the network locations that will be used for the repair of operating system corruption and for enabling optional features that have had their payload files removed. +Available in the latest Windows 10 Insider Preview Build. This policy setting specifies the network locations that will be used for the repair of operating system corruption and for enabling optional features that have had their payload files removed. If you enable this policy setting and specify the new location, the files in that location will be used to repair operating system corruption and for enabling optional features that have had their payload files removed. You must enter the fully qualified path to the new location in the ""Alternate source file path"" text box. Multiple locations can be specified when each path is separated by a semicolon. diff --git a/windows/client-management/mdm/policy-csp-admx-sharedfolders.md b/windows/client-management/mdm/policy-csp-admx-sharedfolders.md index 7b7f7b195c..365e67295a 100644 --- a/windows/client-management/mdm/policy-csp-admx-sharedfolders.md +++ b/windows/client-management/mdm/policy-csp-admx-sharedfolders.md @@ -76,7 +76,7 @@ manager: dansimp -Available in Windows 10 Insider Preview Build 20185. This policy setting determines whether the user can publish DFS roots in Active Directory Domain Services (AD DS). +Available in the latest Windows 10 Insider Preview Build. This policy setting determines whether the user can publish DFS roots in Active Directory Domain Services (AD DS). If you enable or do not configure this policy setting, users can use the "Publish in Active Directory" option to publish DFS roots as shared folders in AD DS . @@ -149,7 +149,7 @@ ADMX Info: -Available in Windows 10 Insider Preview Build 20185. This policy setting determines whether the user can publish shared folders in Active Directory Domain Services (AD DS). +Available in the latest Windows 10 Insider Preview Build. This policy setting determines whether the user can publish shared folders in Active Directory Domain Services (AD DS). If you enable or do not configure this policy setting, users can use the "Publish in Active Directory" option in the Shared Folders snap-in to publish shared folders in AD DS. diff --git a/windows/client-management/mdm/policy-csp-admx-sharing.md b/windows/client-management/mdm/policy-csp-admx-sharing.md index a293d2b013..92d7458cc6 100644 --- a/windows/client-management/mdm/policy-csp-admx-sharing.md +++ b/windows/client-management/mdm/policy-csp-admx-sharing.md @@ -73,7 +73,7 @@ manager: dansimp -Available in Windows 10 Insider Preview Build 20185. This policy setting specifies whether users can share files within their profile. By default users are allowed to share files within their profile to other users on their network after an administrator opts in the computer. An administrator can opt in the computer by using the sharing wizard to share a file within their profile. +Available in the latest Windows 10 Insider Preview Build. This policy setting specifies whether users can share files within their profile. By default users are allowed to share files within their profile to other users on their network after an administrator opts in the computer. An administrator can opt in the computer by using the sharing wizard to share a file within their profile. If you enable this policy setting, users cannot share files within their profile using the sharing wizard. Also, the sharing wizard cannot create a share at %root%\users and can only be used to create SMB shares on folders. diff --git a/windows/client-management/mdm/policy-csp-admx-shellcommandpromptregedittools.md b/windows/client-management/mdm/policy-csp-admx-shellcommandpromptregedittools.md index e8df85ad6d..70b33efe0d 100644 --- a/windows/client-management/mdm/policy-csp-admx-shellcommandpromptregedittools.md +++ b/windows/client-management/mdm/policy-csp-admx-shellcommandpromptregedittools.md @@ -83,7 +83,7 @@ manager: dansimp -Available in Windows 10 Insider Preview Build 20185. This policy setting prevents users from running the interactive command prompt, Cmd.exe. This policy setting also determines whether batch files (.cmd and .bat) can run on the computer. +Available in the latest Windows 10 Insider Preview Build. This policy setting prevents users from running the interactive command prompt, Cmd.exe. This policy setting also determines whether batch files (.cmd and .bat) can run on the computer. If you enable this policy setting and the user tries to open a command window, the system displays a message explaining that a setting prevents the action. @@ -155,7 +155,7 @@ ADMX Info: -Available in Windows 10 Insider Preview Build 20185. Disables the Windows registry editor Regedit.exe. +Available in the latest Windows 10 Insider Preview Build. Disables the Windows registry editor Regedit.exe. If you enable this policy setting and the user tries to start Regedit.exe, a message appears explaining that a policy setting prevents the action. @@ -227,7 +227,7 @@ ADMX Info: -Available in Windows 10 Insider Preview Build 20185. This policy setting prevents Windows from running the programs you specify in this policy setting. +Available in the latest Windows 10 Insider Preview Build. This policy setting prevents Windows from running the programs you specify in this policy setting. If you enable this policy setting, users cannot run programs that you add to the list of disallowed applications. @@ -302,7 +302,7 @@ ADMX Info: -Available in Windows 10 Insider Preview Build 20185. Limits the Windows programs that users have permission to run on the computer. +Available in the latest Windows 10 Insider Preview Build. Limits the Windows programs that users have permission to run on the computer. If you enable this policy setting, users can only run programs that you add to the list of allowed applications. diff --git a/windows/client-management/mdm/policy-csp-admx-smartcard.md b/windows/client-management/mdm/policy-csp-admx-smartcard.md index 76452c2119..67c2a2ea26 100644 --- a/windows/client-management/mdm/policy-csp-admx-smartcard.md +++ b/windows/client-management/mdm/policy-csp-admx-smartcard.md @@ -119,7 +119,7 @@ manager: dansimp -Available in Windows 10 Insider Preview Build 20185. This policy setting lets you allow certificates without an Extended Key Usage (EKU) set to be used for logon. +Available in the latest Windows 10 Insider Preview Build. This policy setting lets you allow certificates without an Extended Key Usage (EKU) set to be used for logon. In versions of Windows prior to Windows Vista, smart card certificates that are used for logon require an enhanced key usage (EKU) extension with a smart card logon object identifier. This policy setting can be used to modify that restriction. @@ -194,7 +194,7 @@ ADMX Info: -Available in Windows 10 Insider Preview Build 20185. This policy setting lets you determine whether the integrated unblock feature will be available in the logon User Interface (UI). +Available in the latest Windows 10 Insider Preview Build. This policy setting lets you determine whether the integrated unblock feature will be available in the logon User Interface (UI). In order to use the integrated unblock feature your smart card must support this feature. Please check with your hardware manufacturer to see if your smart card supports this feature. @@ -265,7 +265,7 @@ ADMX Info: -Available in Windows 10 Insider Preview Build 20185. This policy setting lets you allow signature key-based certificates to be enumerated and available for logon. +Available in the latest Windows 10 Insider Preview Build. This policy setting lets you allow signature key-based certificates to be enumerated and available for logon. If you enable this policy setting then any certificates available on the smart card with a signature only key will be listed on the logon screen. @@ -334,7 +334,7 @@ ADMX Info: -Available in Windows 10 Insider Preview Build 20185. This policy setting permits those certificates to be displayed for logon that are either expired or not yet valid. +Available in the latest Windows 10 Insider Preview Build. This policy setting permits those certificates to be displayed for logon that are either expired or not yet valid. Under previous versions of Microsoft Windows, certificates were required to contain a valid time and not be expired. The certificate must still be accepted by the domain controller in order to be used. This setting only controls the displaying of the certificate on the client machine. @@ -405,7 +405,7 @@ ADMX Info: -Available in Windows 10 Insider Preview Build 20185. This policy setting allows you to manage the certificate propagation that occurs when a smart card is inserted. +Available in the latest Windows 10 Insider Preview Build. This policy setting allows you to manage the certificate propagation that occurs when a smart card is inserted. If you enable or do not configure this policy setting then certificate propagation will occur when you insert your smart card. @@ -474,7 +474,7 @@ ADMX Info: -Available in Windows 10 Insider Preview Build 20185. This policy setting allows you to manage the cleanup behavior of root certificates. If you enable this policy setting then root certificate cleanup will occur according to the option selected. If you disable or do not configure this setting then root certificate cleanup will occur on logoff. +Available in the latest Windows 10 Insider Preview Build. This policy setting allows you to manage the cleanup behavior of root certificates. If you enable this policy setting then root certificate cleanup will occur according to the option selected. If you disable or do not configure this setting then root certificate cleanup will occur on logoff. > [!TIP] @@ -539,7 +539,7 @@ ADMX Info: -Available in Windows 10 Insider Preview Build 20185. This policy setting allows you to manage the root certificate propagation that occurs when a smart card is inserted. +Available in the latest Windows 10 Insider Preview Build. This policy setting allows you to manage the root certificate propagation that occurs when a smart card is inserted. If you enable or do not configure this policy setting then root certificate propagation will occur when you insert your smart card. @@ -611,7 +611,7 @@ ADMX Info: -Available in Windows 10 Insider Preview Build 20185. This policy setting prevents plaintext PINs from being returned by Credential Manager. +Available in the latest Windows 10 Insider Preview Build. This policy setting prevents plaintext PINs from being returned by Credential Manager. If you enable this policy setting, Credential Manager does not return a plaintext PIN. @@ -683,7 +683,7 @@ ADMX Info: -Available in Windows 10 Insider Preview Build 20185. This policy setting allows you to control whether elliptic curve cryptography (ECC) certificates on a smart card can be used to log on to a domain. +Available in the latest Windows 10 Insider Preview Build. This policy setting allows you to control whether elliptic curve cryptography (ECC) certificates on a smart card can be used to log on to a domain. If you enable this policy setting, ECC certificates on a smart card can be used to log on to a domain. @@ -755,7 +755,7 @@ ADMX Info: -Available in Windows 10 Insider Preview Build 20185. This policy setting lets you configure if all your valid logon certificates are displayed. +Available in the latest Windows 10 Insider Preview Build. This policy setting lets you configure if all your valid logon certificates are displayed. During the certificate renewal period, a user can have multiple valid logon certificates issued from the same certificate template. This can cause confusion as to which certificate to select for logon. The common case for this behavior is when a certificate is renewed and the old one has not yet expired. Two certificates are determined to be the same if they are issued from the same template with the same major version and they are for the same user (determined by their UPN). @@ -831,7 +831,7 @@ ADMX Info: -Available in Windows 10 Insider Preview Build 20185. This policy setting allows you to manage the reading of all certificates from the smart card for logon. +Available in the latest Windows 10 Insider Preview Build. This policy setting allows you to manage the reading of all certificates from the smart card for logon. During logon Windows will by default only read the default certificate from the smart card unless it supports retrieval of all certificates in a single call. This setting forces Windows to read all the certificates from the card. This can introduce a significant performance decrease in certain situations. Please contact your smart card vendor to determine if your smart card and associated CSP supports the required behavior. @@ -902,7 +902,7 @@ ADMX Info: -Available in Windows 10 Insider Preview Build 20185. This policy setting allows you to manage the displayed message when a smart card is blocked. +Available in the latest Windows 10 Insider Preview Build. This policy setting allows you to manage the displayed message when a smart card is blocked. If you enable this policy setting, the specified message will be displayed to the user when the smart card is blocked. @@ -974,7 +974,7 @@ ADMX Info: -Available in Windows 10 Insider Preview Build 20185. This policy setting lets you reverse the subject name from how it is stored in the certificate when displaying it during logon. +Available in the latest Windows 10 Insider Preview Build. This policy setting lets you reverse the subject name from how it is stored in the certificate when displaying it during logon. By default the user principal name (UPN) is displayed in addition to the common name to help users distinguish one certificate from another. For example, if the certificate subject was CN=User1, OU=Users, DN=example, DN=com and had an UPN of user1@example.com then "User1" will be displayed along with "user1@example.com." If the UPN is not present then the entire subject name will be displayed. This setting controls the appearance of that subject name and might need to be adjusted per organization. @@ -1045,7 +1045,7 @@ ADMX Info: -Available in Windows 10 Insider Preview Build 20185. This policy setting allows you to control whether Smart Card Plug and Play is enabled. +Available in the latest Windows 10 Insider Preview Build. This policy setting allows you to control whether Smart Card Plug and Play is enabled. If you enable or do not configure this policy setting, Smart Card Plug and Play will be enabled and the system will attempt to install a Smart Card device driver when a card is inserted in a Smart Card Reader for the first time. @@ -1117,7 +1117,7 @@ ADMX Info: -Available in Windows 10 Insider Preview Build 20185. This policy setting allows you to control whether a confirmation message is displayed when a smart card device driver is installed. +Available in the latest Windows 10 Insider Preview Build. This policy setting allows you to control whether a confirmation message is displayed when a smart card device driver is installed. If you enable or do not configure this policy setting, a confirmation message will be displayed when a smart card device driver is installed. @@ -1189,7 +1189,7 @@ ADMX Info: -Available in Windows 10 Insider Preview Build 20185. This policy setting lets you determine whether an optional field will be displayed during logon and elevation that allows a user to enter his or her user name or user name and domain, thereby associating a certificate with that user. +Available in the latest Windows 10 Insider Preview Build. This policy setting lets you determine whether an optional field will be displayed during logon and elevation that allows a user to enter his or her user name or user name and domain, thereby associating a certificate with that user. If you enable this policy setting then an optional field that allows a user to enter their user name or user name and domain will be displayed. diff --git a/windows/client-management/mdm/policy-csp-admx-snmp.md b/windows/client-management/mdm/policy-csp-admx-snmp.md index 2a83f8346c..4cdc53625c 100644 --- a/windows/client-management/mdm/policy-csp-admx-snmp.md +++ b/windows/client-management/mdm/policy-csp-admx-snmp.md @@ -80,7 +80,7 @@ manager: dansimp -Available in Windows 10 Insider Preview Build 20185. This policy setting configures a list of the communities defined to the Simple Network Management Protocol (SNMP) service. +Available in the latest Windows 10 Insider Preview Build. This policy setting configures a list of the communities defined to the Simple Network Management Protocol (SNMP) service. SNMP is a protocol designed to give a user the capability to remotely manage a computer network, by polling and setting terminal values and monitoring network events. @@ -161,7 +161,7 @@ ADMX Info: -Available in Windows 10 Insider Preview Build 20185. This policy setting determines the permitted list of hosts that can submit a query to the Simple Network Management (SNMP) agent running on the client computer. +Available in the latest Windows 10 Insider Preview Build. This policy setting determines the permitted list of hosts that can submit a query to the Simple Network Management (SNMP) agent running on the client computer. Simple Network Management Protocol is a protocol designed to give a user the capability to remotely manage a computer network by polling and setting terminal values and monitoring network events. @@ -241,7 +241,7 @@ ADMX Info: -Available in Windows 10 Insider Preview Build 20185. This policy setting allows trap configuration for the Simple Network Management Protocol (SNMP) agent. +Available in the latest Windows 10 Insider Preview Build. This policy setting allows trap configuration for the Simple Network Management Protocol (SNMP) agent. Simple Network Management Protocol is a protocol designed to give a user the capability to remotely manage a computer network by polling and setting terminal values and monitoring network events. diff --git a/windows/client-management/mdm/policy-csp-admx-systemrestore.md b/windows/client-management/mdm/policy-csp-admx-systemrestore.md index 8e49043225..41c38ffa9f 100644 --- a/windows/client-management/mdm/policy-csp-admx-systemrestore.md +++ b/windows/client-management/mdm/policy-csp-admx-systemrestore.md @@ -74,7 +74,7 @@ manager: dansimp -Available in Windows 10 Insider Preview Build 20185. Allows you to disable System Restore configuration through System Protection. +Available in the latest Windows 10 Insider Preview Build. Allows you to disable System Restore configuration through System Protection. This policy setting allows you to turn off System Restore configuration through System Protection. diff --git a/windows/client-management/mdm/policy-csp-admx-tcpip.md b/windows/client-management/mdm/policy-csp-admx-tcpip.md index b43d4d2011..403e0686e1 100644 --- a/windows/client-management/mdm/policy-csp-admx-tcpip.md +++ b/windows/client-management/mdm/policy-csp-admx-tcpip.md @@ -110,7 +110,7 @@ manager: dansimp -Available in Windows 10 Insider Preview Build 20185. This policy setting allows you to specify a 6to4 relay name for a 6to4 host. A 6to4 relay is used as a default gateway for IPv6 network traffic sent by the 6to4 host. The 6to4 relay name setting has no effect if 6to4 connectivity is not available on the host. +Available in the latest Windows 10 Insider Preview Build. This policy setting allows you to specify a 6to4 relay name for a 6to4 host. A 6to4 relay is used as a default gateway for IPv6 network traffic sent by the 6to4 host. The 6to4 relay name setting has no effect if 6to4 connectivity is not available on the host. If you enable this policy setting, you can specify a relay name for a 6to4 host. @@ -179,7 +179,7 @@ ADMX Info: -Available in Windows 10 Insider Preview Build 20185. This policy setting allows you to specify the interval at which the relay name is resolved. The 6to4 relay name resolution interval setting has no effect if 6to4 connectivity is not available on the host. +Available in the latest Windows 10 Insider Preview Build. This policy setting allows you to specify the interval at which the relay name is resolved. The 6to4 relay name resolution interval setting has no effect if 6to4 connectivity is not available on the host. If you enable this policy setting, you can specify the value for the duration at which the relay name is resolved periodically. @@ -248,7 +248,7 @@ ADMX Info: -Available in Windows 10 Insider Preview Build 20185. This policy setting allows you to configure 6to4, an address assignment and router-to-router automatic tunneling technology that is used to provide unicast IPv6 connectivity between IPv6 sites and hosts across the IPv4 Internet. 6to4 uses the global address prefix: 2002:WWXX:YYZZ::/48 in which the letters are a hexadecimal representation of the global IPv4 address (w.x.y.z) assigned to a site. +Available in the latest Windows 10 Insider Preview Build. This policy setting allows you to configure 6to4, an address assignment and router-to-router automatic tunneling technology that is used to provide unicast IPv6 connectivity between IPv6 sites and hosts across the IPv4 Internet. 6to4 uses the global address prefix: 2002:WWXX:YYZZ::/48 in which the letters are a hexadecimal representation of the global IPv4 address (w.x.y.z) assigned to a site. If you disable or do not configure this policy setting, the local host setting is used. @@ -323,7 +323,7 @@ ADMX Info: -Available in Windows 10 Insider Preview Build 20185. This policy setting allows you to configure IP-HTTPS, a tunneling technology that uses the HTTPS protocol to provide IP connectivity to a remote network. +Available in the latest Windows 10 Insider Preview Build. This policy setting allows you to configure IP-HTTPS, a tunneling technology that uses the HTTPS protocol to provide IP connectivity to a remote network. If you disable or do not configure this policy setting, the local host settings are used. @@ -398,7 +398,7 @@ ADMX Info: -Available in Windows 10 Insider Preview Build 20185. This policy setting allows you to configure IP Stateless Autoconfiguration Limits. +Available in the latest Windows 10 Insider Preview Build. This policy setting allows you to configure IP Stateless Autoconfiguration Limits. If you enable or do not configure this policy setting, IP Stateless Autoconfiguration Limits will be enabled and system will limit the number of autoconfigured addresses and routes. @@ -467,7 +467,7 @@ ADMX Info: -Available in Windows 10 Insider Preview Build 20185. This policy setting allows you to specify a router name or Internet Protocol version 4 (IPv4) address for an ISATAP router. +Available in the latest Windows 10 Insider Preview Build. This policy setting allows you to specify a router name or Internet Protocol version 4 (IPv4) address for an ISATAP router. If you enable this policy setting, you can specify a router name or IPv4 address for an ISATAP router. If you enter an IPv4 address of the ISATAP router in the text box, DNS services are not required. @@ -536,7 +536,7 @@ ADMX Info: -Available in Windows 10 Insider Preview Build 20185. This policy setting allows you to configure Intra-Site Automatic Tunnel Addressing Protocol (ISATAP), an address-to-router and host-to-host, host-to-router and router-to-host automatic tunneling technology that is used to provide unicast IPv6 connectivity between IPv6 hosts across an IPv4 intranet. +Available in the latest Windows 10 Insider Preview Build. This policy setting allows you to configure Intra-Site Automatic Tunnel Addressing Protocol (ISATAP), an address-to-router and host-to-host, host-to-router and router-to-host automatic tunneling technology that is used to provide unicast IPv6 connectivity between IPv6 hosts across an IPv4 intranet. If you disable or do not configure this policy setting, the local host setting is used. @@ -611,7 +611,7 @@ ADMX Info: -Available in Windows 10 Insider Preview Build 20185. This policy setting allows you to select the UDP port the Teredo client will use to send packets. If you leave the default of 0, the operating system will select a port (recommended). If you select a UDP port that is already in use by a system, the Teredo client will fail to initialize. +Available in the latest Windows 10 Insider Preview Build. This policy setting allows you to select the UDP port the Teredo client will use to send packets. If you leave the default of 0, the operating system will select a port (recommended). If you select a UDP port that is already in use by a system, the Teredo client will fail to initialize. If you enable this policy setting, you can customize a UDP port for the Teredo client. @@ -680,7 +680,7 @@ ADMX Info: -Available in Windows 10 Insider Preview Build 20185. This policy setting allows you to set Teredo to be ready to communicate, a process referred to as qualification. By default, Teredo enters a dormant state when not in use. The qualification process brings it out of a dormant state. +Available in the latest Windows 10 Insider Preview Build. This policy setting allows you to set Teredo to be ready to communicate, a process referred to as qualification. By default, Teredo enters a dormant state when not in use. The qualification process brings it out of a dormant state. If you disable or do not configure this policy setting, the local host setting is used. @@ -751,7 +751,7 @@ ADMX Info: -Available in Windows 10 Insider Preview Build 20185. This policy setting allows you to configure the Teredo refresh rate. +Available in the latest Windows 10 Insider Preview Build. This policy setting allows you to configure the Teredo refresh rate. > [!NOTE] > On a periodic basis (by default, every 30 seconds), Teredo clients send a single Router Solicitation packet to the Teredo server. The Teredo server sends a Router Advertisement Packet in response. This periodic packet refreshes the IP address and UDP port mapping in the translation table of the Teredo client's NAT device. @@ -823,7 +823,7 @@ ADMX Info: -Available in Windows 10 Insider Preview Build 20185. This policy setting allows you to specify the name of the Teredo server. This server name will be used on the Teredo client computer where this policy setting is applied. +Available in the latest Windows 10 Insider Preview Build. This policy setting allows you to specify the name of the Teredo server. This server name will be used on the Teredo client computer where this policy setting is applied. If you enable this policy setting, you can specify a Teredo server name that applies to a Teredo client. @@ -892,7 +892,7 @@ ADMX Info: -Available in Windows 10 Insider Preview Build 20185. This policy setting allows you to configure Teredo, an address assignment and automatic tunneling technology that provides unicast IPv6 connectivity across the IPv4 Internet. +Available in the latest Windows 10 Insider Preview Build. This policy setting allows you to configure Teredo, an address assignment and automatic tunneling technology that provides unicast IPv6 connectivity across the IPv4 Internet. If you disable or do not configure this policy setting, the local host settings are used. @@ -969,7 +969,7 @@ ADMX Info: -Available in Windows 10 Insider Preview Build 20185. This policy setting allows you to configure Window Scaling Heuristics. Window Scaling Heuristics is an algorithm to identify connectivity and throughput problems caused by many Firewalls and other middle boxes that don't interpret Window Scaling option correctly. +Available in the latest Windows 10 Insider Preview Build. This policy setting allows you to configure Window Scaling Heuristics. Window Scaling Heuristics is an algorithm to identify connectivity and throughput problems caused by many Firewalls and other middle boxes that don't interpret Window Scaling option correctly. If you do not configure this policy setting, the local host settings are used. diff --git a/windows/client-management/mdm/policy-csp-admx-thumbnails.md b/windows/client-management/mdm/policy-csp-admx-thumbnails.md index 69fd52c66e..9aabebdc8b 100644 --- a/windows/client-management/mdm/policy-csp-admx-thumbnails.md +++ b/windows/client-management/mdm/policy-csp-admx-thumbnails.md @@ -79,7 +79,7 @@ manager: dansimp -Available in Windows 10 Insider Preview Build 20185. This policy setting allows you to configure how File Explorer displays thumbnail images or icons on the local computer. +Available in the latest Windows 10 Insider Preview Build. This policy setting allows you to configure how File Explorer displays thumbnail images or icons on the local computer. File Explorer displays thumbnail images by default. @@ -150,7 +150,7 @@ ADMX Info: -Available in Windows 10 Insider Preview Build 20185. This policy setting allows you to configure how File Explorer displays thumbnail images or icons on network folders. +Available in the latest Windows 10 Insider Preview Build. This policy setting allows you to configure how File Explorer displays thumbnail images or icons on network folders. File Explorer displays thumbnail images on network folders by default. @@ -221,7 +221,7 @@ ADMX Info: -Available in Windows 10 Insider Preview Build 20185. Turns off the caching of thumbnails in hidden thumbs.db files. +Available in the latest Windows 10 Insider Preview Build. Turns off the caching of thumbnails in hidden thumbs.db files. This policy setting allows you to configure File Explorer to cache thumbnails of items residing in network folders in hidden thumbs.db files. diff --git a/windows/client-management/mdm/policy-csp-admx-tpm.md b/windows/client-management/mdm/policy-csp-admx-tpm.md index aeec40aa7f..da8e499dae 100644 --- a/windows/client-management/mdm/policy-csp-admx-tpm.md +++ b/windows/client-management/mdm/policy-csp-admx-tpm.md @@ -101,7 +101,7 @@ manager: dansimp -Available in Windows 10 Insider Preview Build 20185. This policy setting allows you to manage the Group Policy list of Trusted Platform Module (TPM) commands blocked by Windows. +Available in the latest Windows 10 Insider Preview Build. This policy setting allows you to manage the Group Policy list of Trusted Platform Module (TPM) commands blocked by Windows. If you enable this policy setting, Windows will block the specified commands from being sent to the TPM on the computer. TPM commands are referenced by a command number. For example, command number 129 is TPM_OwnerReadInternalPub, and command number 170 is TPM_FieldUpgrade. To find the command number associated with each TPM command with TPM 1.2, run "tpm.msc" and navigate to the "Command Management" section. @@ -170,7 +170,7 @@ ADMX Info: -Available in Windows 10 Insider Preview Build 20185. This policy setting configures the system to prompt the user to clear the TPM if the TPM is detected to be in any state other than Ready. This policy will take effect only if the system’s TPM is in a state other than Ready, including if the TPM is “Ready, with reduced functionality”. The prompt to clear the TPM will start occurring after the next reboot, upon user login only if the logged in user is part of the Administrators group for the system. The prompt can be dismissed, but will reappear after every reboot and login until the policy is disabled or until the TPM is in a Ready state. +Available in the latest Windows 10 Insider Preview Build. This policy setting configures the system to prompt the user to clear the TPM if the TPM is detected to be in any state other than Ready. This policy will take effect only if the system’s TPM is in a state other than Ready, including if the TPM is “Ready, with reduced functionality”. The prompt to clear the TPM will start occurring after the next reboot, upon user login only if the logged in user is part of the Administrators group for the system. The prompt can be dismissed, but will reappear after every reboot and login until the policy is disabled or until the TPM is in a Ready state. > [!TIP] @@ -235,7 +235,7 @@ ADMX Info: -Available in Windows 10 Insider Preview Build 20185. This policy setting allows you to enforce or ignore the computer's default list of blocked Trusted Platform Module (TPM) commands. +Available in the latest Windows 10 Insider Preview Build. This policy setting allows you to enforce or ignore the computer's default list of blocked Trusted Platform Module (TPM) commands. If you enable this policy setting, Windows will ignore the computer's default list of blocked TPM commands and will only block those TPM commands specified by Group Policy or the local list. @@ -306,7 +306,7 @@ ADMX Info: -Available in Windows 10 Insider Preview Build 20185. This policy setting allows you to enforce or ignore the computer's local list of blocked Trusted Platform Module (TPM) commands. +Available in the latest Windows 10 Insider Preview Build. This policy setting allows you to enforce or ignore the computer's local list of blocked Trusted Platform Module (TPM) commands. If you enable this policy setting, Windows will ignore the computer's local list of blocked TPM commands and will only block those TPM commands specified by Group Policy or the default list. @@ -377,7 +377,7 @@ ADMX Info: -Available in Windows 10 Insider Preview Build 20185. This policy setting configures how much of the TPM owner authorization information is stored in the registry of the local computer. Depending on the amount of TPM owner authorization information stored locally, the operating system and TPM-based applications can perform certain TPM actions which require TPM owner authorization without requiring the user to enter the TPM owner password. +Available in the latest Windows 10 Insider Preview Build. This policy setting configures how much of the TPM owner authorization information is stored in the registry of the local computer. Depending on the amount of TPM owner authorization information stored locally, the operating system and TPM-based applications can perform certain TPM actions which require TPM owner authorization without requiring the user to enter the TPM owner password. You can choose to have the operating system store either the full TPM owner authorization value, the TPM administrative delegation blob plus the TPM user delegation blob, or none. @@ -455,7 +455,7 @@ ADMX Info: -Available in Windows 10 Insider Preview Build 20185. This group policy enables Device Health Attestation reporting (DHA-report) on supported devices. It enables supported devices to send Device Health Attestation related information (device boot logs, PCR values, TPM certificate, etc.) to Device Health Attestation Service (DHA-Service) every time a device starts. Device Health Attestation Service validates the security state and health of the devices, and makes the findings accessible to enterprise administrators via a cloud based reporting portal. This policy is independent of DHA reports that are initiated by device manageability solutions (like MDM or SCCM), and will not interfere with their workflows. +Available in the latest Windows 10 Insider Preview Build. This group policy enables Device Health Attestation reporting (DHA-report) on supported devices. It enables supported devices to send Device Health Attestation related information (device boot logs, PCR values, TPM certificate, etc.) to Device Health Attestation Service (DHA-Service) every time a device starts. Device Health Attestation Service validates the security state and health of the devices, and makes the findings accessible to enterprise administrators via a cloud based reporting portal. This policy is independent of DHA reports that are initiated by device manageability solutions (like MDM or SCCM), and will not interfere with their workflows. > [!TIP] @@ -520,7 +520,7 @@ ADMX Info: -Available in Windows 10 Insider Preview Build 20185. This policy setting allows you to manage the duration in minutes for counting standard user authorization failures for Trusted Platform Module (TPM) commands requiring authorization. If the number of TPM commands with an authorization failure within the duration equals a threshold, a standard user is prevented from sending commands requiring authorization to the TPM. +Available in the latest Windows 10 Insider Preview Build. This policy setting allows you to manage the duration in minutes for counting standard user authorization failures for Trusted Platform Module (TPM) commands requiring authorization. If the number of TPM commands with an authorization failure within the duration equals a threshold, a standard user is prevented from sending commands requiring authorization to the TPM. This setting helps administrators prevent the TPM hardware from entering a lockout mode because it slows the speed standard users can send commands requiring authorization to the TPM. @@ -601,7 +601,7 @@ ADMX Info: -Available in Windows 10 Insider Preview Build 20185. This policy setting allows you to manage the maximum number of authorization failures for each standard user for the Trusted Platform Module (TPM). If the number of authorization failures for the user within the duration for Standard User Lockout Duration equals this value, the standard user is prevented from sending commands to the Trusted Platform Module (TPM) that require authorization. +Available in the latest Windows 10 Insider Preview Build. This policy setting allows you to manage the maximum number of authorization failures for each standard user for the Trusted Platform Module (TPM). If the number of authorization failures for the user within the duration for Standard User Lockout Duration equals this value, the standard user is prevented from sending commands to the Trusted Platform Module (TPM) that require authorization. This setting helps administrators prevent the TPM hardware from entering a lockout mode because it slows the speed standard users can send commands requiring authorization to the TPM. @@ -684,7 +684,7 @@ ADMX Info: -Available in Windows 10 Insider Preview Build 20185. This policy setting allows you to manage the maximum number of authorization failures for all standard users for the Trusted Platform Module (TPM). If the total number of authorization failures for all standard users within the duration for Standard User Lockout Duration equals this value, all standard users are prevented from sending commands to the Trusted Platform Module (TPM) that require authorization. +Available in the latest Windows 10 Insider Preview Build. This policy setting allows you to manage the maximum number of authorization failures for all standard users for the Trusted Platform Module (TPM). If the total number of authorization failures for all standard users within the duration for Standard User Lockout Duration equals this value, all standard users are prevented from sending commands to the Trusted Platform Module (TPM) that require authorization. This setting helps administrators prevent the TPM hardware from entering a lockout mode because it slows the speed standard users can send commands requiring authorization to the TPM. @@ -767,7 +767,7 @@ ADMX Info: -Available in Windows 10 Insider Preview Build 20185. This policy setting configures the TPM to use the Dictionary Attack Prevention Parameters (lockout threshold and recovery time) to the values that were used for Windows 10 Version 1607 and below. Setting this policy will take effect only if a) the TPM was originally prepared using a version of Windows after Windows 10 Version 1607 and b) the System has a TPM 2.0. Note that enabling this policy will only take effect after the TPM maintenance task runs (which typically happens after a system restart). Once this policy has been enabled on a system and has taken effect (after a system restart), disabling it will have no impact and the system's TPM will remain configured using the legacy Dictionary Attack Prevention parameters, regardless of the value of this group policy. The only way for the disabled setting of this policy to take effect on a system where it was once enabled is to a) disable it from group policy and b)clear the TPM on the system. +Available in the latest Windows 10 Insider Preview Build. This policy setting configures the TPM to use the Dictionary Attack Prevention Parameters (lockout threshold and recovery time) to the values that were used for Windows 10 Version 1607 and below. Setting this policy will take effect only if a) the TPM was originally prepared using a version of Windows after Windows 10 Version 1607 and b) the System has a TPM 2.0. Note that enabling this policy will only take effect after the TPM maintenance task runs (which typically happens after a system restart). Once this policy has been enabled on a system and has taken effect (after a system restart), disabling it will have no impact and the system's TPM will remain configured using the legacy Dictionary Attack Prevention parameters, regardless of the value of this group policy. The only way for the disabled setting of this policy to take effect on a system where it was once enabled is to a) disable it from group policy and b)clear the TPM on the system. > [!TIP] diff --git a/windows/client-management/mdm/policy-csp-admx-userexperiencevirtualization.md b/windows/client-management/mdm/policy-csp-admx-userexperiencevirtualization.md index d967a2db8e..b82218ed41 100644 --- a/windows/client-management/mdm/policy-csp-admx-userexperiencevirtualization.md +++ b/windows/client-management/mdm/policy-csp-admx-userexperiencevirtualization.md @@ -450,7 +450,7 @@ manager: dansimp -Available in Windows 10 Insider Preview Build 20185. This policy setting configures the synchronization of user settings of Calculator. +Available in the latest Windows 10 Insider Preview Build. This policy setting configures the synchronization of user settings of Calculator. By default, the user settings of Calculator synchronize between computers. Use the policy setting to prevent the user settings of Calculator from synchronization between computers. @@ -524,7 +524,7 @@ ADMX Info: -Available in Windows 10 Insider Preview Build 20185. This policy setting configures the sync provider used by User Experience Virtualization (UE-V) to sync settings between users’ computers. +Available in the latest Windows 10 Insider Preview Build. This policy setting configures the sync provider used by User Experience Virtualization (UE-V) to sync settings between users’ computers. With Sync Method set to ”SyncProvider,” the UE-V Agent uses a built-in sync provider to keep user settings synchronized between the computer and the settings storage location. This is the default value. You can disable the sync provider on computers that never go offline and are always connected to the settings storage location. @@ -603,7 +603,7 @@ ADMX Info: -Available in Windows 10 Insider Preview Build 20185. This policy setting configures the synchronization of User Experience Virtualization (UE-V) rollback information for computers running in a non-persistent, pooled VDI environment. +Available in the latest Windows 10 Insider Preview Build. This policy setting configures the synchronization of User Experience Virtualization (UE-V) rollback information for computers running in a non-persistent, pooled VDI environment. UE-V settings rollback data and checkpoints are normally stored only on the local computer. With this policy setting enabled, the rollback information is copied to the settings storage location when the user logs off or shuts down their VDI session. @@ -677,7 +677,7 @@ ADMX Info: -Available in Windows 10 Insider Preview Build 20185. This policy setting specifies the text of the Contact IT URL hyperlink in the Company Settings Center. +Available in the latest Windows 10 Insider Preview Build. This policy setting specifies the text of the Contact IT URL hyperlink in the Company Settings Center. If you enable this policy setting, the Company Settings Center displays the specified text in the link to the Contact IT URL. @@ -748,7 +748,7 @@ ADMX Info: -Available in Windows 10 Insider Preview Build 20185. This policy setting specifies the URL for the Contact IT link in the Company Settings Center. +Available in the latest Windows 10 Insider Preview Build. This policy setting specifies the URL for the Contact IT link in the Company Settings Center. If you enable this policy setting, the Company Settings Center Contact IT text links to the specified URL. The link can be of any standard protocol such as http or mailto. @@ -819,7 +819,7 @@ ADMX Info: -Available in Windows 10 Insider Preview Build 20185. This policy setting defines whether the User Experience Virtualization (UE-V) Agent synchronizes settings for Windows apps. +Available in the latest Windows 10 Insider Preview Build. This policy setting defines whether the User Experience Virtualization (UE-V) Agent synchronizes settings for Windows apps. By default, the UE-V Agent synchronizes settings for Windows apps between the computer and the settings storage location. @@ -896,7 +896,7 @@ ADMX Info: -Available in Windows 10 Insider Preview Build 20185. This policy setting configures the synchronization of Windows settings between computers. Certain Windows settings will synchronize between computers by default. These settings include Windows themes, Windows desktop settings, Ease of Access settings, and network printers. Use this policy setting to specify which Windows settings synchronize between computers. You can also use these settings to enable synchronization of users' sign-in information for certain apps, networks, and certificates. +Available in the latest Windows 10 Insider Preview Build. This policy setting configures the synchronization of Windows settings between computers. Certain Windows settings will synchronize between computers by default. These settings include Windows themes, Windows desktop settings, Ease of Access settings, and network printers. Use this policy setting to specify which Windows settings synchronize between computers. You can also use these settings to enable synchronization of users' sign-in information for certain apps, networks, and certificates. If you enable this policy setting, only the selected Windows settings synchronize. Unselected Windows settings are excluded from settings synchronization. @@ -967,7 +967,7 @@ ADMX Info: -Available in Windows 10 Insider Preview Build 20185. This policy setting allows you to enable or disable User Experience Virtualization (UE-V) feature. +Available in the latest Windows 10 Insider Preview Build. This policy setting allows you to enable or disable User Experience Virtualization (UE-V) feature. Reboot is needed for enable to take effect. With Auto-register inbox templates enabled, the UE-V inbox templates such as Office 2016 will be automatically registered when the UE-V Service is enabled. If this option is changed, it will only take effect when UE-V service is re-enabled. @@ -1035,7 +1035,7 @@ ADMX Info: -Available in Windows 10 Insider Preview Build 20185. This policy setting configures the synchronization of user settings for the Finance app. By default, the user settings of Finance sync between computers. Use the policy setting to prevent the user settings of Finance from synchronizing between computers. +Available in the latest Windows 10 Insider Preview Build. This policy setting configures the synchronization of user settings for the Finance app. By default, the user settings of Finance sync between computers. Use the policy setting to prevent the user settings of Finance from synchronizing between computers. If you enable this policy setting, Finance user settings continue to sync. @@ -1106,7 +1106,7 @@ ADMX Info: -Available in Windows 10 Insider Preview Build 20185. This policy setting enables a notification in the system tray that appears when the User Experience Virtualization (UE-V) Agent runs for the first time. By default, a notification informs users that Company Settings Center, the user-facing name for the UE-V Agent, now helps to synchronize settings between their work computers. +Available in the latest Windows 10 Insider Preview Build. This policy setting enables a notification in the system tray that appears when the User Experience Virtualization (UE-V) Agent runs for the first time. By default, a notification informs users that Company Settings Center, the user-facing name for the UE-V Agent, now helps to synchronize settings between their work computers. With this setting enabled, the notification appears the first time that the UE-V Agent runs. @@ -1178,7 +1178,7 @@ ADMX Info: -Available in Windows 10 Insider Preview Build 20185. This policy setting configures the synchronization of user settings for the Games app. By default, the user settings of Games sync between computers. Use the policy setting to prevent the user settings of Games from synchronizing between computers. +Available in the latest Windows 10 Insider Preview Build. This policy setting configures the synchronization of user settings for the Games app. By default, the user settings of Games sync between computers. Use the policy setting to prevent the user settings of Games from synchronizing between computers. If you enable this policy setting, Games user settings continue to sync. @@ -1250,7 +1250,7 @@ ADMX Info: -Available in Windows 10 Insider Preview Build 20185. This policy setting configures the synchronization of user settings for Internet Explorer 8. +Available in the latest Windows 10 Insider Preview Build. This policy setting configures the synchronization of user settings for Internet Explorer 8. By default, the user settings of Internet Explorer 8 synchronize between computers. Use the policy setting to prevent the user settings for Internet Explorer 8 from synchronization between computers. @@ -1324,7 +1324,7 @@ ADMX Info: -Available in Windows 10 Insider Preview Build 20185. This policy setting configures the synchronization of user settings for Internet Explorer 9. By default, the user settings of Internet Explorer 9 synchronize between computers. Use the policy setting to prevent the user settings for Internet Explorer 9 from synchronization between computers. +Available in the latest Windows 10 Insider Preview Build. This policy setting configures the synchronization of user settings for Internet Explorer 9. By default, the user settings of Internet Explorer 9 synchronize between computers. Use the policy setting to prevent the user settings for Internet Explorer 9 from synchronization between computers. If you enable this policy setting, the Internet Explorer 9 user settings continue to synchronize. @@ -1396,7 +1396,7 @@ ADMX Info: -Available in Windows 10 Insider Preview Build 20185. This policy setting configures the synchronization of user settings of Internet Explorer 10. By default, the user settings of Internet Explorer 10 synchronize between computers. Use the policy setting to prevent the user settings for Internet Explorer 10 from synchronization between computers. +Available in the latest Windows 10 Insider Preview Build. This policy setting configures the synchronization of user settings of Internet Explorer 10. By default, the user settings of Internet Explorer 10 synchronize between computers. Use the policy setting to prevent the user settings for Internet Explorer 10 from synchronization between computers. If you enable this policy setting, the Internet Explorer 10 user settings continue to synchronize. @@ -1468,7 +1468,7 @@ ADMX Info: -Available in Windows 10 Insider Preview Build 20185. This policy setting configures the synchronization of user settings of Internet Explorer 11. By default, the user settings of Internet Explorer 11 synchronize between computers. Use the policy setting to prevent the user settings for Internet Explorer 11 from synchronization between computers. +Available in the latest Windows 10 Insider Preview Build. This policy setting configures the synchronization of user settings of Internet Explorer 11. By default, the user settings of Internet Explorer 11 synchronize between computers. Use the policy setting to prevent the user settings for Internet Explorer 11 from synchronization between computers. If you enable this policy setting, the Internet Explorer 11 user settings continue to synchronize. @@ -1540,7 +1540,7 @@ ADMX Info: -Available in Windows 10 Insider Preview Build 20185. This policy setting configures the synchronization of user settings which are common between the versions of Internet Explorer. +Available in the latest Windows 10 Insider Preview Build. This policy setting configures the synchronization of user settings which are common between the versions of Internet Explorer. By default, the user settings which are common between the versions of Internet Explorer synchronize between computers. Use the policy setting to prevent the user settings of Internet Explorer from synchronization between computers. If you enable this policy setting, the user settings which are common between the versions of Internet Explorer continue to synchronize. @@ -1612,7 +1612,7 @@ ADMX Info: -Available in Windows 10 Insider Preview Build 20185. This policy setting configures the synchronization of user settings for the Maps app. By default, the user settings of Maps sync between computers. Use the policy setting to prevent the user settings of Maps from synchronizing between computers. +Available in the latest Windows 10 Insider Preview Build. This policy setting configures the synchronization of user settings for the Maps app. By default, the user settings of Maps sync between computers. Use the policy setting to prevent the user settings of Maps from synchronizing between computers. If you enable this policy setting, Maps user settings continue to sync. @@ -1684,7 +1684,7 @@ ADMX Info: -Available in Windows 10 Insider Preview Build 20185. This policy setting allows you to configure the UE-V Agent to write a warning event to the event log when a settings package file size reaches a defined threshold. By default the UE-V Agent does not report information about package file size. +Available in the latest Windows 10 Insider Preview Build. This policy setting allows you to configure the UE-V Agent to write a warning event to the event log when a settings package file size reaches a defined threshold. By default the UE-V Agent does not report information about package file size. If you enable this policy setting, specify the threshold file size in bytes. When the settings package file exceeds this threshold the UE-V Agent will write a warning event to the event log. @@ -1754,7 +1754,7 @@ ADMX Info: -Available in Windows 10 Insider Preview Build 20185. This policy setting configures the synchronization of user settings for Microsoft Access 2010. By default, the user settings of Microsoft Access 2010 synchronize between computers. Use the policy setting to prevent the user settings of Microsoft Access 2010 from synchronization between computers. +Available in the latest Windows 10 Insider Preview Build. This policy setting configures the synchronization of user settings for Microsoft Access 2010. By default, the user settings of Microsoft Access 2010 synchronize between computers. Use the policy setting to prevent the user settings of Microsoft Access 2010 from synchronization between computers. If you enable this policy setting, Microsoft Access 2010 user settings continue to synchronize. @@ -1826,7 +1826,7 @@ ADMX Info: -Available in Windows 10 Insider Preview Build 20185. This policy setting configures the synchronization of user settings which are common between the Microsoft Office Suite 2010 applications. By default, the user settings which are common between the Microsoft Office Suite 2010 applications synchronize between computers. Use the policy setting to prevent the user settings which are common between the Microsoft Office Suite 2010 applications from synchronization between computers. +Available in the latest Windows 10 Insider Preview Build. This policy setting configures the synchronization of user settings which are common between the Microsoft Office Suite 2010 applications. By default, the user settings which are common between the Microsoft Office Suite 2010 applications synchronize between computers. Use the policy setting to prevent the user settings which are common between the Microsoft Office Suite 2010 applications from synchronization between computers. If you enable this policy setting, the user settings which are common between the Microsoft Office Suite 2010 applications continue to synchronize. @@ -1898,7 +1898,7 @@ ADMX Info: -Available in Windows 10 Insider Preview Build 20185. This policy setting configures the synchronization of user settings for Microsoft Excel 2010. By default, the user settings of Microsoft Excel 2010 synchronize between computers. Use the policy setting to prevent the user settings of Microsoft Excel 2010 from synchronization between computers. +Available in the latest Windows 10 Insider Preview Build. This policy setting configures the synchronization of user settings for Microsoft Excel 2010. By default, the user settings of Microsoft Excel 2010 synchronize between computers. Use the policy setting to prevent the user settings of Microsoft Excel 2010 from synchronization between computers. If you enable this policy setting, Microsoft Excel 2010 user settings continue to synchronize. @@ -1969,7 +1969,7 @@ ADMX Info: -Available in Windows 10 Insider Preview Build 20185. This policy setting configures the synchronization of user settings for Microsoft InfoPath 2010. By default, the user settings of Microsoft InfoPath 2010 synchronize between computers. Use the policy setting to prevent the user settings of Microsoft InfoPath 2010 from synchronization between computers. +Available in the latest Windows 10 Insider Preview Build. This policy setting configures the synchronization of user settings for Microsoft InfoPath 2010. By default, the user settings of Microsoft InfoPath 2010 synchronize between computers. Use the policy setting to prevent the user settings of Microsoft InfoPath 2010 from synchronization between computers. If you enable this policy setting, Microsoft InfoPath 2010 user settings continue to synchronize. @@ -2041,7 +2041,7 @@ ADMX Info: -Available in Windows 10 Insider Preview Build 20185. This policy setting configures the synchronization of user settings for Microsoft Lync 2010. By default, the user settings of Microsoft Lync 2010 synchronize between computers. Use the policy setting to prevent the user settings of Microsoft Lync 2010 from synchronization between computers. +Available in the latest Windows 10 Insider Preview Build. This policy setting configures the synchronization of user settings for Microsoft Lync 2010. By default, the user settings of Microsoft Lync 2010 synchronize between computers. Use the policy setting to prevent the user settings of Microsoft Lync 2010 from synchronization between computers. If you enable this policy setting, Microsoft Lync 2010 user settings continue to synchronize. @@ -2113,7 +2113,7 @@ ADMX Info: -Available in Windows 10 Insider Preview Build 20185. This policy setting configures the synchronization of user settings for Microsoft OneNote 2010. By default, the user settings of Microsoft OneNote 2010 synchronize between computers. Use the policy setting to prevent the user settings of Microsoft OneNote 2010 from synchronization between computers. +Available in the latest Windows 10 Insider Preview Build. This policy setting configures the synchronization of user settings for Microsoft OneNote 2010. By default, the user settings of Microsoft OneNote 2010 synchronize between computers. Use the policy setting to prevent the user settings of Microsoft OneNote 2010 from synchronization between computers. If you enable this policy setting, Microsoft OneNote 2010 user settings continue to synchronize. @@ -2184,7 +2184,7 @@ ADMX Info: -Available in Windows 10 Insider Preview Build 20185. This policy setting configures the synchronization of user settings for Microsoft Outlook 2010. By default, the user settings of Microsoft Outlook 2010 synchronize between computers. Use the policy setting to prevent the user settings of Microsoft Outlook 2010 from synchronization between computers. +Available in the latest Windows 10 Insider Preview Build. This policy setting configures the synchronization of user settings for Microsoft Outlook 2010. By default, the user settings of Microsoft Outlook 2010 synchronize between computers. Use the policy setting to prevent the user settings of Microsoft Outlook 2010 from synchronization between computers. If you enable this policy setting, Microsoft Outlook 2010 user settings continue to synchronize. @@ -2256,7 +2256,7 @@ ADMX Info: -Available in Windows 10 Insider Preview Build 20185. This policy setting configures the synchronization of user settings for Microsoft PowerPoint 2010. By default, the user settings of Microsoft PowerPoint 2010 synchronize between computers. Use the policy setting to prevent the user settings of Microsoft PowerPoint 2010 from synchronization between computers. +Available in the latest Windows 10 Insider Preview Build. This policy setting configures the synchronization of user settings for Microsoft PowerPoint 2010. By default, the user settings of Microsoft PowerPoint 2010 synchronize between computers. Use the policy setting to prevent the user settings of Microsoft PowerPoint 2010 from synchronization between computers. If you enable this policy setting, Microsoft PowerPoint 2010 user settings continue to synchronize. @@ -2328,7 +2328,7 @@ ADMX Info: -Available in Windows 10 Insider Preview Build 20185. This policy setting configures the synchronization of user settings for Microsoft Project 2010. By default, the user settings of Microsoft Project 2010 synchronize between computers. Use the policy setting to prevent the user settings of Microsoft Project 2010 from synchronization between computers. +Available in the latest Windows 10 Insider Preview Build. This policy setting configures the synchronization of user settings for Microsoft Project 2010. By default, the user settings of Microsoft Project 2010 synchronize between computers. Use the policy setting to prevent the user settings of Microsoft Project 2010 from synchronization between computers. If you enable this policy setting, Microsoft Project 2010 user settings continue to synchronize. @@ -2399,7 +2399,7 @@ ADMX Info: -Available in Windows 10 Insider Preview Build 20185. This policy setting configures the synchronization of user settings for Microsoft Publisher 2010. By default, the user settings of Microsoft Publisher 2010 synchronize between computers. Use the policy setting to prevent the user settings of Microsoft Publisher 2010 from synchronization between computers. +Available in the latest Windows 10 Insider Preview Build. This policy setting configures the synchronization of user settings for Microsoft Publisher 2010. By default, the user settings of Microsoft Publisher 2010 synchronize between computers. Use the policy setting to prevent the user settings of Microsoft Publisher 2010 from synchronization between computers. If you enable this policy setting, Microsoft Publisher 2010 user settings continue to synchronize. @@ -2471,7 +2471,7 @@ ADMX Info: -Available in Windows 10 Insider Preview Build 20185. This policy setting configures the synchronization of user settings for Microsoft SharePoint Designer 2010. By default, the user settings of Microsoft SharePoint Designer 2010 synchronize between computers. Use the policy setting to prevent the user settings of Microsoft SharePoint Designer 2010 from synchronization between computers. +Available in the latest Windows 10 Insider Preview Build. This policy setting configures the synchronization of user settings for Microsoft SharePoint Designer 2010. By default, the user settings of Microsoft SharePoint Designer 2010 synchronize between computers. Use the policy setting to prevent the user settings of Microsoft SharePoint Designer 2010 from synchronization between computers. If you enable this policy setting, Microsoft SharePoint Designer 2010 user settings continue to synchronize. @@ -2543,7 +2543,7 @@ ADMX Info: -Available in Windows 10 Insider Preview Build 20185. This policy setting configures the synchronization of user settings for Microsoft SharePoint Workspace 2010. By default, the user settings of Microsoft SharePoint Workspace 2010 synchronize between computers. Use the policy setting to prevent the user settings of Microsoft SharePoint Workspace 2010 from synchronization between computers. +Available in the latest Windows 10 Insider Preview Build. This policy setting configures the synchronization of user settings for Microsoft SharePoint Workspace 2010. By default, the user settings of Microsoft SharePoint Workspace 2010 synchronize between computers. Use the policy setting to prevent the user settings of Microsoft SharePoint Workspace 2010 from synchronization between computers. If you enable this policy setting, Microsoft SharePoint Workspace 2010 user settings continue to synchronize. @@ -2615,7 +2615,7 @@ ADMX Info: -Available in Windows 10 Insider Preview Build 20185. This policy setting configures the synchronization of user settings for Microsoft Visio 2010. By default, the user settings of Microsoft Visio 2010 synchronize between computers. Use the policy setting to prevent the user settings of Microsoft Visio 2010 from synchronization between computers. +Available in the latest Windows 10 Insider Preview Build. This policy setting configures the synchronization of user settings for Microsoft Visio 2010. By default, the user settings of Microsoft Visio 2010 synchronize between computers. Use the policy setting to prevent the user settings of Microsoft Visio 2010 from synchronization between computers. If you enable this policy setting, Microsoft Visio 2010 user settings continue to synchronize. @@ -2687,7 +2687,7 @@ ADMX Info: -Available in Windows 10 Insider Preview Build 20185. This policy setting configures the synchronization of user settings for Microsoft Word 2010. By default, the user settings of Microsoft Word 2010 synchronize between computers. Use the policy setting to prevent the user settings of Microsoft Word 2010 from synchronization between computers. +Available in the latest Windows 10 Insider Preview Build. This policy setting configures the synchronization of user settings for Microsoft Word 2010. By default, the user settings of Microsoft Word 2010 synchronize between computers. Use the policy setting to prevent the user settings of Microsoft Word 2010 from synchronization between computers. If you enable this policy setting, Microsoft Word 2010 user settings continue to synchronize. @@ -2759,7 +2759,7 @@ ADMX Info: -Available in Windows 10 Insider Preview Build 20185. This policy setting configures the synchronization of user settings for Microsoft Access 2013. By default, the user settings of Microsoft Access 2013 synchronize between computers. Use the policy setting to prevent the user settings of Microsoft Access 2013 from synchronization between computers. +Available in the latest Windows 10 Insider Preview Build. This policy setting configures the synchronization of user settings for Microsoft Access 2013. By default, the user settings of Microsoft Access 2013 synchronize between computers. Use the policy setting to prevent the user settings of Microsoft Access 2013 from synchronization between computers. If you enable this policy setting, Microsoft Access 2013 user settings continue to synchronize. @@ -2830,7 +2830,7 @@ ADMX Info: -Available in Windows 10 Insider Preview Build 20185. This policy setting configures the backup of certain user settings for Microsoft Access 2013. Microsoft Access 2013 has user settings that are backed up instead of synchronizing between computers. Use the policy setting to suppress the backup of specific Microsoft Access 2013 settings. +Available in the latest Windows 10 Insider Preview Build. This policy setting configures the backup of certain user settings for Microsoft Access 2013. Microsoft Access 2013 has user settings that are backed up instead of synchronizing between computers. Use the policy setting to suppress the backup of specific Microsoft Access 2013 settings. If you enable this policy setting, certain user settings of Microsoft Access 2013 will continue to be backed up. @@ -2902,7 +2902,7 @@ ADMX Info: -Available in Windows 10 Insider Preview Build 20185. This policy setting configures the synchronization of user settings which are common between the Microsoft Office Suite 2013 applications. By default, the user settings which are common between the Microsoft Office Suite 2013 applications synchronize between computers. Use the policy setting to prevent the user settings which are common between the Microsoft Office Suite 2013 applications from synchronization between computers. +Available in the latest Windows 10 Insider Preview Build. This policy setting configures the synchronization of user settings which are common between the Microsoft Office Suite 2013 applications. By default, the user settings which are common between the Microsoft Office Suite 2013 applications synchronize between computers. Use the policy setting to prevent the user settings which are common between the Microsoft Office Suite 2013 applications from synchronization between computers. If you enable this policy setting, the user settings which are common between the Microsoft Office Suite 2013 applications continue to synchronize. @@ -2974,7 +2974,7 @@ ADMX Info: -Available in Windows 10 Insider Preview Build 20185. This policy setting configures the backup of certain user settings which are common between the Microsoft Office Suite 2013 applications. +Available in the latest Windows 10 Insider Preview Build. This policy setting configures the backup of certain user settings which are common between the Microsoft Office Suite 2013 applications. Microsoft Office Suite 2013 has user settings which are common between applications and are backed up instead of synchronizing between computers. Use the policy setting to suppress the backup of specific common Microsoft Office Suite 2013 applications. If you enable this policy setting, certain user settings which are common between the Microsoft Office Suite 2013 applications will continue to be backed up. @@ -3047,7 +3047,7 @@ ADMX Info: -Available in Windows 10 Insider Preview Build 20185. This policy setting configures the synchronization of user settings for Microsoft Excel 2013. +Available in the latest Windows 10 Insider Preview Build. This policy setting configures the synchronization of user settings for Microsoft Excel 2013. By default, the user settings of Microsoft Excel 2013 synchronize between computers. Use the policy setting to prevent the user settings of Microsoft Excel 2013 from synchronization between computers. @@ -3120,7 +3120,7 @@ ADMX Info: -Available in Windows 10 Insider Preview Build 20185. This policy setting configures the backup of certain user settings for Microsoft Excel 2013. Microsoft Excel 2013 has user settings that are backed up instead of synchronizing between computers. Use the policy setting to suppress the backup of specific Microsoft Excel 2013 settings. +Available in the latest Windows 10 Insider Preview Build. This policy setting configures the backup of certain user settings for Microsoft Excel 2013. Microsoft Excel 2013 has user settings that are backed up instead of synchronizing between computers. Use the policy setting to suppress the backup of specific Microsoft Excel 2013 settings. If you enable this policy setting, certain user settings of Microsoft Excel 2013 will continue to be backed up. @@ -3191,7 +3191,7 @@ ADMX Info: -Available in Windows 10 Insider Preview Build 20185. This policy setting configures the synchronization of user settings for Microsoft InfoPath 2013. By default, the user settings of Microsoft InfoPath 2013 synchronize between computers. Use the policy setting to prevent the user settings of Microsoft InfoPath 2013 from synchronization between computers. +Available in the latest Windows 10 Insider Preview Build. This policy setting configures the synchronization of user settings for Microsoft InfoPath 2013. By default, the user settings of Microsoft InfoPath 2013 synchronize between computers. Use the policy setting to prevent the user settings of Microsoft InfoPath 2013 from synchronization between computers. If you enable this policy setting, Microsoft InfoPath 2013 user settings continue to synchronize. @@ -3263,7 +3263,7 @@ ADMX Info: -Available in Windows 10 Insider Preview Build 20185. This policy setting configures the backup of certain user settings for Microsoft InfoPath 2013. Microsoft InfoPath 2013 has user settings that are backed up instead of synchronizing between computers. Use the policy setting to suppress the backup of specific Microsoft InfoPath 2013 settings. +Available in the latest Windows 10 Insider Preview Build. This policy setting configures the backup of certain user settings for Microsoft InfoPath 2013. Microsoft InfoPath 2013 has user settings that are backed up instead of synchronizing between computers. Use the policy setting to suppress the backup of specific Microsoft InfoPath 2013 settings. If you enable this policy setting, certain user settings of Microsoft InfoPath 2013 will continue to be backed up. @@ -3335,7 +3335,7 @@ ADMX Info: -Available in Windows 10 Insider Preview Build 20185. This policy setting configures the synchronization of user settings for Microsoft Lync 2013. By default, the user settings of Microsoft Lync 2013 synchronize between computers. Use the policy setting to prevent the user settings of Microsoft Lync 2013 from synchronization between computers. +Available in the latest Windows 10 Insider Preview Build. This policy setting configures the synchronization of user settings for Microsoft Lync 2013. By default, the user settings of Microsoft Lync 2013 synchronize between computers. Use the policy setting to prevent the user settings of Microsoft Lync 2013 from synchronization between computers. If you enable this policy setting, Microsoft Lync 2013 user settings continue to synchronize. @@ -3406,7 +3406,7 @@ ADMX Info: -Available in Windows 10 Insider Preview Build 20185. This policy setting configures the backup of certain user settings for Microsoft Lync 2013. Microsoft Lync 2013 has user settings that are backed up instead of synchronizing between computers. Use the policy setting to suppress the backup of specific Microsoft Lync 2013 settings. +Available in the latest Windows 10 Insider Preview Build. This policy setting configures the backup of certain user settings for Microsoft Lync 2013. Microsoft Lync 2013 has user settings that are backed up instead of synchronizing between computers. Use the policy setting to suppress the backup of specific Microsoft Lync 2013 settings. If you enable this policy setting, certain user settings of Microsoft Lync 2013 will continue to be backed up. @@ -3478,7 +3478,7 @@ ADMX Info: -Available in Windows 10 Insider Preview Build 20185. This policy setting configures the synchronization of user settings for OneDrive for Business 2013. By default, the user settings of OneDrive for Business 2013 synchronize between computers. Use the policy setting to prevent the user settings of OneDrive for Business 2013 from synchronization between computers. +Available in the latest Windows 10 Insider Preview Build. This policy setting configures the synchronization of user settings for OneDrive for Business 2013. By default, the user settings of OneDrive for Business 2013 synchronize between computers. Use the policy setting to prevent the user settings of OneDrive for Business 2013 from synchronization between computers. If you enable this policy setting, OneDrive for Business 2013 user settings continue to synchronize. @@ -3550,7 +3550,7 @@ ADMX Info: -Available in Windows 10 Insider Preview Build 20185. This policy setting configures the synchronization of user settings for Microsoft OneNote 2013. By default, the user settings of Microsoft OneNote 2013 synchronize between computers. Use the policy setting to prevent the user settings of Microsoft OneNote 2013 from synchronization between computers. +Available in the latest Windows 10 Insider Preview Build. This policy setting configures the synchronization of user settings for Microsoft OneNote 2013. By default, the user settings of Microsoft OneNote 2013 synchronize between computers. Use the policy setting to prevent the user settings of Microsoft OneNote 2013 from synchronization between computers. If you enable this policy setting, Microsoft OneNote 2013 user settings continue to synchronize. @@ -3622,7 +3622,7 @@ ADMX Info: -Available in Windows 10 Insider Preview Build 20185. This policy setting configures the backup of certain user settings for Microsoft OneNote 2013. Microsoft OneNote 2013 has user settings that are backed up instead of synchronizing between computers. Use the policy setting to suppress the backup of specific Microsoft OneNote 2013 settings. +Available in the latest Windows 10 Insider Preview Build. This policy setting configures the backup of certain user settings for Microsoft OneNote 2013. Microsoft OneNote 2013 has user settings that are backed up instead of synchronizing between computers. Use the policy setting to suppress the backup of specific Microsoft OneNote 2013 settings. If you enable this policy setting, certain user settings of Microsoft OneNote 2013 will continue to be backed up. @@ -3694,7 +3694,7 @@ ADMX Info: -Available in Windows 10 Insider Preview Build 20185. This policy setting configures the synchronization of user settings for Microsoft Outlook 2013. By default, the user settings of Microsoft Outlook 2013 synchronize between computers. Use the policy setting to prevent the user settings of Microsoft Outlook 2013 from synchronization between computers. +Available in the latest Windows 10 Insider Preview Build. This policy setting configures the synchronization of user settings for Microsoft Outlook 2013. By default, the user settings of Microsoft Outlook 2013 synchronize between computers. Use the policy setting to prevent the user settings of Microsoft Outlook 2013 from synchronization between computers. If you enable this policy setting, Microsoft Outlook 2013 user settings continue to synchronize. @@ -3765,7 +3765,7 @@ ADMX Info: -Available in Windows 10 Insider Preview Build 20185. This policy setting configures the backup of certain user settings for Microsoft Outlook 2013. Microsoft Outlook 2013 has user settings that are backed up instead of synchronizing between computers. Use the policy setting to suppress the backup of specific Microsoft Outlook 2013 settings. +Available in the latest Windows 10 Insider Preview Build. This policy setting configures the backup of certain user settings for Microsoft Outlook 2013. Microsoft Outlook 2013 has user settings that are backed up instead of synchronizing between computers. Use the policy setting to suppress the backup of specific Microsoft Outlook 2013 settings. If you enable this policy setting, certain user settings of Microsoft Outlook 2013 will continue to be backed up. @@ -3837,7 +3837,7 @@ ADMX Info: -Available in Windows 10 Insider Preview Build 20185. This policy setting configures the synchronization of user settings for Microsoft PowerPoint 2013. By default, the user settings of Microsoft PowerPoint 2013 synchronize between computers. Use the policy setting to prevent the user settings of Microsoft PowerPoint 2013 from synchronization between computers. +Available in the latest Windows 10 Insider Preview Build. This policy setting configures the synchronization of user settings for Microsoft PowerPoint 2013. By default, the user settings of Microsoft PowerPoint 2013 synchronize between computers. Use the policy setting to prevent the user settings of Microsoft PowerPoint 2013 from synchronization between computers. If you enable this policy setting, Microsoft PowerPoint 2013 user settings continue to synchronize. @@ -3909,7 +3909,7 @@ ADMX Info: -Available in Windows 10 Insider Preview Build 20185. This policy setting configures the backup of certain user settings for Microsoft PowerPoint 2013. Microsoft PowerPoint 2013 has user settings that are backed up instead of synchronizing between computers. Use the policy setting to suppress the backup of specific Microsoft PowerPoint 2013 settings. +Available in the latest Windows 10 Insider Preview Build. This policy setting configures the backup of certain user settings for Microsoft PowerPoint 2013. Microsoft PowerPoint 2013 has user settings that are backed up instead of synchronizing between computers. Use the policy setting to suppress the backup of specific Microsoft PowerPoint 2013 settings. If you enable this policy setting, certain user settings of Microsoft PowerPoint 2013 will continue to be backed up. @@ -3981,7 +3981,7 @@ ADMX Info: -Available in Windows 10 Insider Preview Build 20185. This policy setting configures the synchronization of user settings for Microsoft Project 2013. By default, the user settings of Microsoft Project 2013 synchronize between computers. Use the policy setting to prevent the user settings of Microsoft Project 2013 from synchronization between computers. +Available in the latest Windows 10 Insider Preview Build. This policy setting configures the synchronization of user settings for Microsoft Project 2013. By default, the user settings of Microsoft Project 2013 synchronize between computers. Use the policy setting to prevent the user settings of Microsoft Project 2013 from synchronization between computers. If you enable this policy setting, Microsoft Project 2013 user settings continue to synchronize. @@ -4052,7 +4052,7 @@ ADMX Info: -Available in Windows 10 Insider Preview Build 20185. This policy setting configures the backup of certain user settings for Microsoft Project 2013. Microsoft Project 2013 has user settings that are backed up instead of synchronizing between computers. Use the policy setting to suppress the backup of specific Microsoft Project 2013 settings. +Available in the latest Windows 10 Insider Preview Build. This policy setting configures the backup of certain user settings for Microsoft Project 2013. Microsoft Project 2013 has user settings that are backed up instead of synchronizing between computers. Use the policy setting to suppress the backup of specific Microsoft Project 2013 settings. If you enable this policy setting, certain user settings of Microsoft Project 2013 will continue to be backed up. @@ -4124,7 +4124,7 @@ ADMX Info: -Available in Windows 10 Insider Preview Build 20185. This policy setting configures the synchronization of user settings for Microsoft Publisher 2013. By default, the user settings of Microsoft Publisher 2013 synchronize between computers. Use the policy setting to prevent the user settings of Microsoft Publisher 2013 from synchronization between computers. +Available in the latest Windows 10 Insider Preview Build. This policy setting configures the synchronization of user settings for Microsoft Publisher 2013. By default, the user settings of Microsoft Publisher 2013 synchronize between computers. Use the policy setting to prevent the user settings of Microsoft Publisher 2013 from synchronization between computers. If you enable this policy setting, Microsoft Publisher 2013 user settings continue to synchronize. @@ -4196,7 +4196,7 @@ ADMX Info: -Available in Windows 10 Insider Preview Build 20185. This policy setting configures the backup of certain user settings for Microsoft Publisher 2013. Microsoft Publisher 2013 has user settings that are backed up instead of synchronizing between computers. Use the policy setting to suppress the backup of specific Microsoft Publisher 2013 settings. +Available in the latest Windows 10 Insider Preview Build. This policy setting configures the backup of certain user settings for Microsoft Publisher 2013. Microsoft Publisher 2013 has user settings that are backed up instead of synchronizing between computers. Use the policy setting to suppress the backup of specific Microsoft Publisher 2013 settings. If you enable this policy setting, certain user settings of Microsoft Publisher 2013 will continue to be backed up. @@ -4268,7 +4268,7 @@ ADMX Info: -Available in Windows 10 Insider Preview Build 20185. This policy setting configures the synchronization of user settings for Microsoft SharePoint Designer 2013. By default, the user settings of Microsoft SharePoint Designer 2013 synchronize between computers. Use the policy setting to prevent the user settings of Microsoft SharePoint Designer 2013 from synchronization between computers. +Available in the latest Windows 10 Insider Preview Build. This policy setting configures the synchronization of user settings for Microsoft SharePoint Designer 2013. By default, the user settings of Microsoft SharePoint Designer 2013 synchronize between computers. Use the policy setting to prevent the user settings of Microsoft SharePoint Designer 2013 from synchronization between computers. If you enable this policy setting, Microsoft SharePoint Designer 2013 user settings continue to synchronize. @@ -4339,7 +4339,7 @@ ADMX Info: -Available in Windows 10 Insider Preview Build 20185. This policy setting configures the backup of certain user settings for Microsoft SharePoint Designer 2013. Microsoft SharePoint Designer 2013 has user settings that are backed up instead of synchronizing between computers. Use the policy setting to suppress the backup of specific Microsoft SharePoint Designer 2013 settings. +Available in the latest Windows 10 Insider Preview Build. This policy setting configures the backup of certain user settings for Microsoft SharePoint Designer 2013. Microsoft SharePoint Designer 2013 has user settings that are backed up instead of synchronizing between computers. Use the policy setting to suppress the backup of specific Microsoft SharePoint Designer 2013 settings. If you enable this policy setting, certain user settings of Microsoft SharePoint Designer 2013 will continue to be backed up. @@ -4410,7 +4410,7 @@ ADMX Info: -Available in Windows 10 Insider Preview Build 20185. This policy setting configures the synchronization of user settings for Microsoft Office 2013 Upload Center. By default, the user settings of Microsoft Office 2013 Upload Center synchronize between computers. Use the policy setting to prevent the user settings of Microsoft Office 2013 Upload Center from synchronization between computers. +Available in the latest Windows 10 Insider Preview Build. This policy setting configures the synchronization of user settings for Microsoft Office 2013 Upload Center. By default, the user settings of Microsoft Office 2013 Upload Center synchronize between computers. Use the policy setting to prevent the user settings of Microsoft Office 2013 Upload Center from synchronization between computers. If you enable this policy setting, Microsoft Office 2013 Upload Center user settings continue to synchronize. @@ -4482,7 +4482,7 @@ ADMX Info: -Available in Windows 10 Insider Preview Build 20185. This policy setting configures the synchronization of user settings for Microsoft Visio 2013. By default, the user settings of Microsoft Visio 2013 synchronize between computers. Use the policy setting to prevent the user settings of Microsoft Visio 2013 from synchronization between computers. +Available in the latest Windows 10 Insider Preview Build. This policy setting configures the synchronization of user settings for Microsoft Visio 2013. By default, the user settings of Microsoft Visio 2013 synchronize between computers. Use the policy setting to prevent the user settings of Microsoft Visio 2013 from synchronization between computers. If you enable this policy setting, Microsoft Visio 2013 user settings continue to synchronize. @@ -4554,7 +4554,7 @@ ADMX Info: -Available in Windows 10 Insider Preview Build 20185. This policy setting configures the backup of certain user settings for Microsoft Visio 2013. Microsoft Visio 2013 has user settings that are backed up instead of synchronizing between computers. Use the policy setting to suppress the backup of specific Microsoft Visio 2013 settings. +Available in the latest Windows 10 Insider Preview Build. This policy setting configures the backup of certain user settings for Microsoft Visio 2013. Microsoft Visio 2013 has user settings that are backed up instead of synchronizing between computers. Use the policy setting to suppress the backup of specific Microsoft Visio 2013 settings. If you enable this policy setting, certain user settings of Microsoft Visio 2013 will continue to be backed up. @@ -4626,7 +4626,7 @@ ADMX Info: -Available in Windows 10 Insider Preview Build 20185. This policy setting configures the synchronization of user settings for Microsoft Word 2013. By default, the user settings of Microsoft Word 2013 synchronize between computers. Use the policy setting to prevent the user settings of Microsoft Word 2013 from synchronization between computers. +Available in the latest Windows 10 Insider Preview Build. This policy setting configures the synchronization of user settings for Microsoft Word 2013. By default, the user settings of Microsoft Word 2013 synchronize between computers. Use the policy setting to prevent the user settings of Microsoft Word 2013 from synchronization between computers. If you enable this policy setting, Microsoft Word 2013 user settings continue to synchronize. @@ -4698,7 +4698,7 @@ ADMX Info: -Available in Windows 10 Insider Preview Build 20185. This policy setting configures the backup of certain user settings for Microsoft Word 2013. Microsoft Word 2013 has user settings that are backed up instead of synchronizing between computers. Use the policy setting to suppress the backup of specific Microsoft Word 2013 settings. +Available in the latest Windows 10 Insider Preview Build. This policy setting configures the backup of certain user settings for Microsoft Word 2013. Microsoft Word 2013 has user settings that are backed up instead of synchronizing between computers. Use the policy setting to suppress the backup of specific Microsoft Word 2013 settings. If you enable this policy setting, certain user settings of Microsoft Word 2013 will continue to be backed up. @@ -4770,7 +4770,7 @@ ADMX Info: -Available in Windows 10 Insider Preview Build 20185. This policy setting configures the synchronization of user settings for Microsoft Access 2016. By default, the user settings of Microsoft Access 2016 synchronize between computers. Use the policy setting to prevent the user settings of Microsoft Access 2016 from synchronization between computers. +Available in the latest Windows 10 Insider Preview Build. This policy setting configures the synchronization of user settings for Microsoft Access 2016. By default, the user settings of Microsoft Access 2016 synchronize between computers. Use the policy setting to prevent the user settings of Microsoft Access 2016 from synchronization between computers. If you enable this policy setting, Microsoft Access 2016 user settings continue to synchronize. @@ -4842,7 +4842,7 @@ ADMX Info: -Available in Windows 10 Insider Preview Build 20185. This policy setting configures the backup of certain user settings for Microsoft Access 2016. Microsoft Access 2016 has user settings that are backed up instead of synchronizing between computers. Use the policy setting to suppress the backup of specific Microsoft Access 2016 settings. +Available in the latest Windows 10 Insider Preview Build. This policy setting configures the backup of certain user settings for Microsoft Access 2016. Microsoft Access 2016 has user settings that are backed up instead of synchronizing between computers. Use the policy setting to suppress the backup of specific Microsoft Access 2016 settings. If you enable this policy setting, certain user settings of Microsoft Access 2016 will continue to be backed up. @@ -4914,7 +4914,7 @@ ADMX Info: -Available in Windows 10 Insider Preview Build 20185. This policy setting configures the synchronization of user settings which are common between the Microsoft Office Suite 2016 applications. By default, the user settings which are common between the Microsoft Office Suite 2016 applications synchronize between computers. Use the policy setting to prevent the user settings which are common between the Microsoft Office Suite 2016 applications from synchronization between computers. +Available in the latest Windows 10 Insider Preview Build. This policy setting configures the synchronization of user settings which are common between the Microsoft Office Suite 2016 applications. By default, the user settings which are common between the Microsoft Office Suite 2016 applications synchronize between computers. Use the policy setting to prevent the user settings which are common between the Microsoft Office Suite 2016 applications from synchronization between computers. If you enable this policy setting, the user settings which are common between the Microsoft Office Suite 2016 applications continue to synchronize. @@ -4986,7 +4986,7 @@ ADMX Info: -Available in Windows 10 Insider Preview Build 20185. This policy setting configures the backup of certain user settings which are common between the Microsoft Office Suite 2016 applications. +Available in the latest Windows 10 Insider Preview Build. This policy setting configures the backup of certain user settings which are common between the Microsoft Office Suite 2016 applications. Microsoft Office Suite 2016 has user settings which are common between applications and are backed up instead of synchronizing between computers. Use the policy setting to suppress the backup of specific common Microsoft Office Suite 2016 applications. If you enable this policy setting, certain user settings which are common between the Microsoft Office Suite 2016 applications will continue to be backed up. @@ -5059,7 +5059,7 @@ ADMX Info: -Available in Windows 10 Insider Preview Build 20185. This policy setting configures the synchronization of user settings for Microsoft Excel 2016. By default, the user settings of Microsoft Excel 2016 synchronize between computers. Use the policy setting to prevent the user settings of Microsoft Excel 2016 from synchronization between computers. +Available in the latest Windows 10 Insider Preview Build. This policy setting configures the synchronization of user settings for Microsoft Excel 2016. By default, the user settings of Microsoft Excel 2016 synchronize between computers. Use the policy setting to prevent the user settings of Microsoft Excel 2016 from synchronization between computers. If you enable this policy setting, Microsoft Excel 2016 user settings continue to synchronize. @@ -5131,7 +5131,7 @@ ADMX Info: -Available in Windows 10 Insider Preview Build 20185. This policy setting configures the backup of certain user settings for Microsoft Excel 2016. Microsoft Excel 2016 has user settings that are backed up instead of synchronizing between computers. Use the policy setting to suppress the backup of specific Microsoft Excel 2016 settings. +Available in the latest Windows 10 Insider Preview Build. This policy setting configures the backup of certain user settings for Microsoft Excel 2016. Microsoft Excel 2016 has user settings that are backed up instead of synchronizing between computers. Use the policy setting to suppress the backup of specific Microsoft Excel 2016 settings. If you enable this policy setting, certain user settings of Microsoft Excel 2016 will continue to be backed up. @@ -5203,7 +5203,7 @@ ADMX Info: -Available in Windows 10 Insider Preview Build 20185. This policy setting configures the synchronization of user settings for Microsoft Lync 2016. By default, the user settings of Microsoft Lync 2016 synchronize between computers. Use the policy setting to prevent the user settings of Microsoft Lync 2016 from synchronization between computers. +Available in the latest Windows 10 Insider Preview Build. This policy setting configures the synchronization of user settings for Microsoft Lync 2016. By default, the user settings of Microsoft Lync 2016 synchronize between computers. Use the policy setting to prevent the user settings of Microsoft Lync 2016 from synchronization between computers. If you enable this policy setting, Microsoft Lync 2016 user settings continue to synchronize. @@ -5275,7 +5275,7 @@ ADMX Info: -Available in Windows 10 Insider Preview Build 20185. This policy setting configures the backup of certain user settings for Microsoft Lync 2016. Microsoft Lync 2016 has user settings that are backed up instead of synchronizing between computers. Use the policy setting to suppress the backup of specific Microsoft Lync 2016 settings. +Available in the latest Windows 10 Insider Preview Build. This policy setting configures the backup of certain user settings for Microsoft Lync 2016. Microsoft Lync 2016 has user settings that are backed up instead of synchronizing between computers. Use the policy setting to suppress the backup of specific Microsoft Lync 2016 settings. If you enable this policy setting, certain user settings of Microsoft Lync 2016 will continue to be backed up. @@ -5347,7 +5347,7 @@ ADMX Info: -Available in Windows 10 Insider Preview Build 20185. This policy setting configures the synchronization of user settings for OneDrive for Business 2016. By default, the user settings of OneDrive for Business 2016 synchronize between computers. Use the policy setting to prevent the user settings of OneDrive for Business 2016 from synchronization between computers. +Available in the latest Windows 10 Insider Preview Build. This policy setting configures the synchronization of user settings for OneDrive for Business 2016. By default, the user settings of OneDrive for Business 2016 synchronize between computers. Use the policy setting to prevent the user settings of OneDrive for Business 2016 from synchronization between computers. If you enable this policy setting, OneDrive for Business 2016 user settings continue to synchronize. @@ -5419,7 +5419,7 @@ ADMX Info: -Available in Windows 10 Insider Preview Build 20185. This policy setting configures the synchronization of user settings for Microsoft OneNote 2016. By default, the user settings of Microsoft OneNote 2016 synchronize between computers. Use the policy setting to prevent the user settings of Microsoft OneNote 2016 from synchronization between computers. +Available in the latest Windows 10 Insider Preview Build. This policy setting configures the synchronization of user settings for Microsoft OneNote 2016. By default, the user settings of Microsoft OneNote 2016 synchronize between computers. Use the policy setting to prevent the user settings of Microsoft OneNote 2016 from synchronization between computers. If you enable this policy setting, Microsoft OneNote 2016 user settings continue to synchronize. @@ -5491,7 +5491,7 @@ ADMX Info: -Available in Windows 10 Insider Preview Build 20185. This policy setting configures the backup of certain user settings for Microsoft OneNote 2016. Microsoft OneNote 2016 has user settings that are backed up instead of synchronizing between computers. Use the policy setting to suppress the backup of specific Microsoft OneNote 2016 settings. +Available in the latest Windows 10 Insider Preview Build. This policy setting configures the backup of certain user settings for Microsoft OneNote 2016. Microsoft OneNote 2016 has user settings that are backed up instead of synchronizing between computers. Use the policy setting to suppress the backup of specific Microsoft OneNote 2016 settings. If you enable this policy setting, certain user settings of Microsoft OneNote 2016 will continue to be backed up. @@ -5563,7 +5563,7 @@ ADMX Info: -Available in Windows 10 Insider Preview Build 20185. This policy setting configures the synchronization of user settings for Microsoft Outlook 2016. By default, the user settings of Microsoft Outlook 2016 synchronize between computers. Use the policy setting to prevent the user settings of Microsoft Outlook 2016 from synchronization between computers. +Available in the latest Windows 10 Insider Preview Build. This policy setting configures the synchronization of user settings for Microsoft Outlook 2016. By default, the user settings of Microsoft Outlook 2016 synchronize between computers. Use the policy setting to prevent the user settings of Microsoft Outlook 2016 from synchronization between computers. If you enable this policy setting, Microsoft Outlook 2016 user settings continue to synchronize. @@ -5635,7 +5635,7 @@ ADMX Info: -Available in Windows 10 Insider Preview Build 20185. This policy setting configures the backup of certain user settings for Microsoft Outlook 2016. Microsoft Outlook 2016 has user settings that are backed up instead of synchronizing between computers. Use the policy setting to suppress the backup of specific Microsoft Outlook 2016 settings. +Available in the latest Windows 10 Insider Preview Build. This policy setting configures the backup of certain user settings for Microsoft Outlook 2016. Microsoft Outlook 2016 has user settings that are backed up instead of synchronizing between computers. Use the policy setting to suppress the backup of specific Microsoft Outlook 2016 settings. If you enable this policy setting, certain user settings of Microsoft Outlook 2016 will continue to be backed up. @@ -5707,7 +5707,7 @@ ADMX Info: -Available in Windows 10 Insider Preview Build 20185. This policy setting configures the synchronization of user settings for Microsoft PowerPoint 2016. By default, the user settings of Microsoft PowerPoint 2016 synchronize between computers. Use the policy setting to prevent the user settings of Microsoft PowerPoint 2016 from synchronization between computers. +Available in the latest Windows 10 Insider Preview Build. This policy setting configures the synchronization of user settings for Microsoft PowerPoint 2016. By default, the user settings of Microsoft PowerPoint 2016 synchronize between computers. Use the policy setting to prevent the user settings of Microsoft PowerPoint 2016 from synchronization between computers. If you enable this policy setting, Microsoft PowerPoint 2016 user settings continue to synchronize. @@ -5779,7 +5779,7 @@ ADMX Info: -Available in Windows 10 Insider Preview Build 20185. This policy setting configures the backup of certain user settings for Microsoft PowerPoint 2016. Microsoft PowerPoint 2016 has user settings that are backed up instead of synchronizing between computers. Use the policy setting to suppress the backup of specific Microsoft PowerPoint 2016 settings. +Available in the latest Windows 10 Insider Preview Build. This policy setting configures the backup of certain user settings for Microsoft PowerPoint 2016. Microsoft PowerPoint 2016 has user settings that are backed up instead of synchronizing between computers. Use the policy setting to suppress the backup of specific Microsoft PowerPoint 2016 settings. If you enable this policy setting, certain user settings of Microsoft PowerPoint 2016 will continue to be backed up. @@ -5851,7 +5851,7 @@ ADMX Info: -Available in Windows 10 Insider Preview Build 20185. This policy setting configures the synchronization of user settings for Microsoft Project 2016. +Available in the latest Windows 10 Insider Preview Build. This policy setting configures the synchronization of user settings for Microsoft Project 2016. By default, the user settings of Microsoft Project 2016 synchronize between computers. Use the policy setting to prevent the user settings of Microsoft Project 2016 from synchronization between computers. If you enable this policy setting, Microsoft Project 2016 user settings continue to synchronize. @@ -5924,7 +5924,7 @@ ADMX Info: -Available in Windows 10 Insider Preview Build 20185. This policy setting configures the backup of certain user settings for Microsoft Project 2016. Microsoft Project 2016 has user settings that are backed up instead of synchronizing between computers. Use the policy setting to suppress the backup of specific Microsoft Project 2016 settings. +Available in the latest Windows 10 Insider Preview Build. This policy setting configures the backup of certain user settings for Microsoft Project 2016. Microsoft Project 2016 has user settings that are backed up instead of synchronizing between computers. Use the policy setting to suppress the backup of specific Microsoft Project 2016 settings. If you enable this policy setting, certain user settings of Microsoft Project 2016 will continue to be backed up. @@ -5995,7 +5995,7 @@ ADMX Info: -Available in Windows 10 Insider Preview Build 20185. This policy setting configures the synchronization of user settings for Microsoft Publisher 2016. By default, the user settings of Microsoft Publisher 2016 synchronize between computers. Use the policy setting to prevent the user settings of Microsoft Publisher 2016 from synchronization between computers. +Available in the latest Windows 10 Insider Preview Build. This policy setting configures the synchronization of user settings for Microsoft Publisher 2016. By default, the user settings of Microsoft Publisher 2016 synchronize between computers. Use the policy setting to prevent the user settings of Microsoft Publisher 2016 from synchronization between computers. If you enable this policy setting, Microsoft Publisher 2016 user settings continue to synchronize. @@ -6067,7 +6067,7 @@ ADMX Info: -Available in Windows 10 Insider Preview Build 20185. This policy setting configures the backup of certain user settings for Microsoft Publisher 2016. Microsoft Publisher 2016 has user settings that are backed up instead of synchronizing between computers. Use the policy setting to suppress the backup of specific Microsoft Publisher 2016 settings. +Available in the latest Windows 10 Insider Preview Build. This policy setting configures the backup of certain user settings for Microsoft Publisher 2016. Microsoft Publisher 2016 has user settings that are backed up instead of synchronizing between computers. Use the policy setting to suppress the backup of specific Microsoft Publisher 2016 settings. If you enable this policy setting, certain user settings of Microsoft Publisher 2016 will continue to be backed up. @@ -6138,7 +6138,7 @@ ADMX Info: -Available in Windows 10 Insider Preview Build 20185. This policy setting configures the synchronization of user settings for Microsoft Office 2016 Upload Center. By default, the user settings of Microsoft Office 2016 Upload Center synchronize between computers. Use the policy setting to prevent the user settings of Microsoft Office 2016 Upload Center from synchronization between computers. +Available in the latest Windows 10 Insider Preview Build. This policy setting configures the synchronization of user settings for Microsoft Office 2016 Upload Center. By default, the user settings of Microsoft Office 2016 Upload Center synchronize between computers. Use the policy setting to prevent the user settings of Microsoft Office 2016 Upload Center from synchronization between computers. If you enable this policy setting, Microsoft Office 2016 Upload Center user settings continue to synchronize. @@ -6210,7 +6210,7 @@ ADMX Info: -Available in Windows 10 Insider Preview Build 20185. This policy setting configures the synchronization of user settings for Microsoft Visio 2016. By default, the user settings of Microsoft Visio 2016 synchronize between computers. Use the policy setting to prevent the user settings of Microsoft Visio 2016 from synchronization between computers. +Available in the latest Windows 10 Insider Preview Build. This policy setting configures the synchronization of user settings for Microsoft Visio 2016. By default, the user settings of Microsoft Visio 2016 synchronize between computers. Use the policy setting to prevent the user settings of Microsoft Visio 2016 from synchronization between computers. If you enable this policy setting, Microsoft Visio 2016 user settings continue to synchronize. @@ -6282,7 +6282,7 @@ ADMX Info: -Available in Windows 10 Insider Preview Build 20185. This policy setting configures the backup of certain user settings for Microsoft Visio 2016. Microsoft Visio 2016 has user settings that are backed up instead of synchronizing between computers. Use the policy setting to suppress the backup of specific Microsoft Visio 2016 settings. +Available in the latest Windows 10 Insider Preview Build. This policy setting configures the backup of certain user settings for Microsoft Visio 2016. Microsoft Visio 2016 has user settings that are backed up instead of synchronizing between computers. Use the policy setting to suppress the backup of specific Microsoft Visio 2016 settings. If you enable this policy setting, certain user settings of Microsoft Visio 2016 will continue to be backed up. @@ -6354,7 +6354,7 @@ ADMX Info: -Available in Windows 10 Insider Preview Build 20185. This policy setting configures the synchronization of user settings for Microsoft Word 2016. By default, the user settings of Microsoft Word 2016 synchronize between computers. Use the policy setting to prevent the user settings of Microsoft Word 2016 from synchronization between computers. +Available in the latest Windows 10 Insider Preview Build. This policy setting configures the synchronization of user settings for Microsoft Word 2016. By default, the user settings of Microsoft Word 2016 synchronize between computers. Use the policy setting to prevent the user settings of Microsoft Word 2016 from synchronization between computers. If you enable this policy setting, Microsoft Word 2016 user settings continue to synchronize. @@ -6426,7 +6426,7 @@ ADMX Info: -Available in Windows 10 Insider Preview Build 20185. This policy setting configures the backup of certain user settings for Microsoft Word 2016. Microsoft Word 2016 has user settings that are backed up instead of synchronizing between computers. Use the policy setting to suppress the backup of specific Microsoft Word 2016 settings. +Available in the latest Windows 10 Insider Preview Build. This policy setting configures the backup of certain user settings for Microsoft Word 2016. Microsoft Word 2016 has user settings that are backed up instead of synchronizing between computers. Use the policy setting to suppress the backup of specific Microsoft Word 2016 settings. If you enable this policy setting, certain user settings of Microsoft Word 2016 will continue to be backed up. @@ -6498,7 +6498,7 @@ ADMX Info: -Available in Windows 10 Insider Preview Build 20185. This policy setting configures the synchronization of user settings for Microsoft Office 365 Access 2013. Microsoft Office 365 synchronizes certain settings by default without UE-V. If the synchronization capabilities of Microsoft Office 365 are disabled, then the user settings of Microsoft Office 365 Access 2013 will synchronize between a user’s work computers with UE-V by default. Use this policy setting to prevent the user settings of Microsoft Office 365 Access 2013 from synchronization between computers with UE-V. +Available in the latest Windows 10 Insider Preview Build. This policy setting configures the synchronization of user settings for Microsoft Office 365 Access 2013. Microsoft Office 365 synchronizes certain settings by default without UE-V. If the synchronization capabilities of Microsoft Office 365 are disabled, then the user settings of Microsoft Office 365 Access 2013 will synchronize between a user’s work computers with UE-V by default. Use this policy setting to prevent the user settings of Microsoft Office 365 Access 2013 from synchronization between computers with UE-V. If you enable this policy setting, Microsoft Office 365 Access 2013 user settings continue to sync with UE-V. @@ -6570,7 +6570,7 @@ ADMX Info: -Available in Windows 10 Insider Preview Build 20185. This policy setting configures the synchronization of user settings for Microsoft Office 365 Access 2016. Microsoft Office 365 synchronizes certain settings by default without UE-V. If the synchronization capabilities of Microsoft Office 365 are disabled, then the user settings of Microsoft Office 365 Access 2016 will synchronize between a user’s work computers with UE-V by default. Use this policy setting to prevent the user settings of Microsoft Office 365 Access 2016 from synchronization between computers with UE-V. +Available in the latest Windows 10 Insider Preview Build. This policy setting configures the synchronization of user settings for Microsoft Office 365 Access 2016. Microsoft Office 365 synchronizes certain settings by default without UE-V. If the synchronization capabilities of Microsoft Office 365 are disabled, then the user settings of Microsoft Office 365 Access 2016 will synchronize between a user’s work computers with UE-V by default. Use this policy setting to prevent the user settings of Microsoft Office 365 Access 2016 from synchronization between computers with UE-V. If you enable this policy setting, Microsoft Office 365 Access 2016 user settings continue to sync with UE-V. @@ -6642,7 +6642,7 @@ ADMX Info: -Available in Windows 10 Insider Preview Build 20185. This policy setting configures the synchronization of user settings which are common between the Microsoft Office Suite 2013 applications. Microsoft Office 365 synchronizes certain settings by default without UE-V. If the synchronization capabilities of Microsoft Office 365 are disabled, then the user settings which are common between the Microsoft Office Suite 2013 applications will synchronize between a user’s work computers with UE-V by default. Use this policy setting to prevent the user settings which are common between the Microsoft Office Suite 2013 applications from synchronization between computers with UE-V. +Available in the latest Windows 10 Insider Preview Build. This policy setting configures the synchronization of user settings which are common between the Microsoft Office Suite 2013 applications. Microsoft Office 365 synchronizes certain settings by default without UE-V. If the synchronization capabilities of Microsoft Office 365 are disabled, then the user settings which are common between the Microsoft Office Suite 2013 applications will synchronize between a user’s work computers with UE-V by default. Use this policy setting to prevent the user settings which are common between the Microsoft Office Suite 2013 applications from synchronization between computers with UE-V. If you enable this policy setting, user settings which are common between the Microsoft Office Suite 2013 applications continue to synchronize with UE-V. @@ -6713,7 +6713,7 @@ ADMX Info: -Available in Windows 10 Insider Preview Build 20185. This policy setting configures the synchronization of user settings which are common between the Microsoft Office Suite 2016 applications. Microsoft Office 365 synchronizes certain settings by default without UE-V. If the synchronization capabilities of Microsoft Office 365 are disabled, then the user settings which are common between the Microsoft Office Suite 2016 applications will synchronize between a user’s work computers with UE-V by default. Use this policy setting to prevent the user settings which are common between the Microsoft Office Suite 2016 applications from synchronization between computers with UE-V. +Available in the latest Windows 10 Insider Preview Build. This policy setting configures the synchronization of user settings which are common between the Microsoft Office Suite 2016 applications. Microsoft Office 365 synchronizes certain settings by default without UE-V. If the synchronization capabilities of Microsoft Office 365 are disabled, then the user settings which are common between the Microsoft Office Suite 2016 applications will synchronize between a user’s work computers with UE-V by default. Use this policy setting to prevent the user settings which are common between the Microsoft Office Suite 2016 applications from synchronization between computers with UE-V. If you enable this policy setting, user settings which are common between the Microsoft Office Suite 2016 applications continue to synchronize with UE-V. @@ -6785,7 +6785,7 @@ ADMX Info: -Available in Windows 10 Insider Preview Build 20185. This policy setting configures the synchronization of user settings for Microsoft Office 365 Excel 2013. Microsoft Office 365 synchronizes certain settings by default without UE-V. If the synchronization capabilities of Microsoft Office 365 are disabled, then the user settings of Microsoft Office 365 Excel 2013 will synchronize between a user’s work computers with UE-V by default. Use this policy setting to prevent the user settings of Microsoft Office 365 Excel 2013 from synchronization between computers with UE-V. +Available in the latest Windows 10 Insider Preview Build. This policy setting configures the synchronization of user settings for Microsoft Office 365 Excel 2013. Microsoft Office 365 synchronizes certain settings by default without UE-V. If the synchronization capabilities of Microsoft Office 365 are disabled, then the user settings of Microsoft Office 365 Excel 2013 will synchronize between a user’s work computers with UE-V by default. Use this policy setting to prevent the user settings of Microsoft Office 365 Excel 2013 from synchronization between computers with UE-V. If you enable this policy setting, Microsoft Office 365 Excel 2013 user settings continue to sync with UE-V. @@ -6857,7 +6857,7 @@ ADMX Info: -Available in Windows 10 Insider Preview Build 20185. This policy setting configures the synchronization of user settings for Microsoft Office 365 Excel 2016. Microsoft Office 365 synchronizes certain settings by default without UE-V. If the synchronization capabilities of Microsoft Office 365 are disabled, then the user settings of Microsoft Office 365 Excel 2016 will synchronize between a user’s work computers with UE-V by default. Use this policy setting to prevent the user settings of Microsoft Office 365 Excel 2016 from synchronization between computers with UE-V. +Available in the latest Windows 10 Insider Preview Build. This policy setting configures the synchronization of user settings for Microsoft Office 365 Excel 2016. Microsoft Office 365 synchronizes certain settings by default without UE-V. If the synchronization capabilities of Microsoft Office 365 are disabled, then the user settings of Microsoft Office 365 Excel 2016 will synchronize between a user’s work computers with UE-V by default. Use this policy setting to prevent the user settings of Microsoft Office 365 Excel 2016 from synchronization between computers with UE-V. If you enable this policy setting, Microsoft Office 365 Excel 2016 user settings continue to sync with UE-V. @@ -6929,7 +6929,7 @@ ADMX Info: -Available in Windows 10 Insider Preview Build 20185. This policy setting configures the synchronization of user settings for Microsoft Office 365 InfoPath 2013. Microsoft Office 365 synchronizes certain settings by default without UE-V. If the synchronization capabilities of Microsoft Office 365 are disabled, then the user settings of Microsoft Office 365 InfoPath 2013 will synchronize between a user’s work computers with UE-V by default. Use this policy setting to prevent the user settings of Microsoft Office 365 InfoPath 2013 from synchronization between computers with UE-V. +Available in the latest Windows 10 Insider Preview Build. This policy setting configures the synchronization of user settings for Microsoft Office 365 InfoPath 2013. Microsoft Office 365 synchronizes certain settings by default without UE-V. If the synchronization capabilities of Microsoft Office 365 are disabled, then the user settings of Microsoft Office 365 InfoPath 2013 will synchronize between a user’s work computers with UE-V by default. Use this policy setting to prevent the user settings of Microsoft Office 365 InfoPath 2013 from synchronization between computers with UE-V. If you enable this policy setting, Microsoft Office 365 InfoPath 2013 user settings continue to sync with UE-V. @@ -7000,7 +7000,7 @@ ADMX Info: -Available in Windows 10 Insider Preview Build 20185. This policy setting configures the synchronization of user settings for Microsoft Office 365 Lync 2013. Microsoft Office 365 synchronizes certain settings by default without UE-V. If the synchronization capabilities of Microsoft Office 365 are disabled, then the user settings of Microsoft Office 365 Lync 2013 will synchronize between a user’s work computers with UE-V by default. Use this policy setting to prevent the user settings of Microsoft Office 365 Lync 2013 from synchronization between computers with UE-V. +Available in the latest Windows 10 Insider Preview Build. This policy setting configures the synchronization of user settings for Microsoft Office 365 Lync 2013. Microsoft Office 365 synchronizes certain settings by default without UE-V. If the synchronization capabilities of Microsoft Office 365 are disabled, then the user settings of Microsoft Office 365 Lync 2013 will synchronize between a user’s work computers with UE-V by default. Use this policy setting to prevent the user settings of Microsoft Office 365 Lync 2013 from synchronization between computers with UE-V. If you enable this policy setting, Microsoft Office 365 Lync 2013 user settings continue to sync with UE-V. @@ -7072,7 +7072,7 @@ ADMX Info: -Available in Windows 10 Insider Preview Build 20185. This policy setting configures the synchronization of user settings for Microsoft Office 365 Lync 2016. Microsoft Office 365 synchronizes certain settings by default without UE-V. If the synchronization capabilities of Microsoft Office 365 are disabled, then the user settings of Microsoft Office 365 Lync 2016 will synchronize between a user’s work computers with UE-V by default. Use this policy setting to prevent the user settings of Microsoft Office 365 Lync 2016 from synchronization between computers with UE-V. +Available in the latest Windows 10 Insider Preview Build. This policy setting configures the synchronization of user settings for Microsoft Office 365 Lync 2016. Microsoft Office 365 synchronizes certain settings by default without UE-V. If the synchronization capabilities of Microsoft Office 365 are disabled, then the user settings of Microsoft Office 365 Lync 2016 will synchronize between a user’s work computers with UE-V by default. Use this policy setting to prevent the user settings of Microsoft Office 365 Lync 2016 from synchronization between computers with UE-V. If you enable this policy setting, Microsoft Office 365 Lync 2016 user settings continue to sync with UE-V. @@ -7144,7 +7144,7 @@ ADMX Info: -Available in Windows 10 Insider Preview Build 20185. This policy setting configures the synchronization of user settings for Microsoft Office 365 OneNote 2013. Microsoft Office 365 synchronizes certain settings by default without UE-V. If the synchronization capabilities of Microsoft Office 365 are disabled, then the user settings of Microsoft Office 365 OneNote 2013 will synchronize between a user’s work computers with UE-V by default. Use this policy setting to prevent the user settings of Microsoft Office 365 OneNote 2013 from synchronization between computers with UE-V. +Available in the latest Windows 10 Insider Preview Build. This policy setting configures the synchronization of user settings for Microsoft Office 365 OneNote 2013. Microsoft Office 365 synchronizes certain settings by default without UE-V. If the synchronization capabilities of Microsoft Office 365 are disabled, then the user settings of Microsoft Office 365 OneNote 2013 will synchronize between a user’s work computers with UE-V by default. Use this policy setting to prevent the user settings of Microsoft Office 365 OneNote 2013 from synchronization between computers with UE-V. If you enable this policy setting, Microsoft Office 365 OneNote 2013 user settings continue to sync with UE-V. @@ -7216,7 +7216,7 @@ ADMX Info: -Available in Windows 10 Insider Preview Build 20185. This policy setting configures the synchronization of user settings for Microsoft Office 365 OneNote 2016. Microsoft Office 365 synchronizes certain settings by default without UE-V. If the synchronization capabilities of Microsoft Office 365 are disabled, then the user settings of Microsoft Office 365 OneNote 2016 will synchronize between a user’s work computers with UE-V by default. Use this policy setting to prevent the user settings of Microsoft Office 365 OneNote 2016 from synchronization between computers with UE-V. +Available in the latest Windows 10 Insider Preview Build. This policy setting configures the synchronization of user settings for Microsoft Office 365 OneNote 2016. Microsoft Office 365 synchronizes certain settings by default without UE-V. If the synchronization capabilities of Microsoft Office 365 are disabled, then the user settings of Microsoft Office 365 OneNote 2016 will synchronize between a user’s work computers with UE-V by default. Use this policy setting to prevent the user settings of Microsoft Office 365 OneNote 2016 from synchronization between computers with UE-V. If you enable this policy setting, Microsoft Office 365 OneNote 2016 user settings continue to sync with UE-V. @@ -7288,7 +7288,7 @@ ADMX Info: -Available in Windows 10 Insider Preview Build 20185. This policy setting configures the synchronization of user settings for Microsoft Office 365 Outlook 2013. Microsoft Office 365 synchronizes certain settings by default without UE-V. If the synchronization capabilities of Microsoft Office 365 are disabled, then the user settings of Microsoft Office 365 Outlook 2013 will synchronize between a user’s work computers with UE-V by default. Use this policy setting to prevent the user settings of Microsoft Office 365 Outlook 2013 from synchronization between computers with UE-V. +Available in the latest Windows 10 Insider Preview Build. This policy setting configures the synchronization of user settings for Microsoft Office 365 Outlook 2013. Microsoft Office 365 synchronizes certain settings by default without UE-V. If the synchronization capabilities of Microsoft Office 365 are disabled, then the user settings of Microsoft Office 365 Outlook 2013 will synchronize between a user’s work computers with UE-V by default. Use this policy setting to prevent the user settings of Microsoft Office 365 Outlook 2013 from synchronization between computers with UE-V. If you enable this policy setting, Microsoft Office 365 Outlook 2013 user settings continue to sync with UE-V. @@ -7360,7 +7360,7 @@ ADMX Info: -Available in Windows 10 Insider Preview Build 20185. This policy setting configures the synchronization of user settings for Microsoft Office 365 Outlook 2016. Microsoft Office 365 synchronizes certain settings by default without UE-V. If the synchronization capabilities of Microsoft Office 365 are disabled, then the user settings of Microsoft Office 365 Outlook 2016 will synchronize between a user’s work computers with UE-V by default. Use this policy setting to prevent the user settings of Microsoft Office 365 Outlook 2016 from synchronization between computers with UE-V. +Available in the latest Windows 10 Insider Preview Build. This policy setting configures the synchronization of user settings for Microsoft Office 365 Outlook 2016. Microsoft Office 365 synchronizes certain settings by default without UE-V. If the synchronization capabilities of Microsoft Office 365 are disabled, then the user settings of Microsoft Office 365 Outlook 2016 will synchronize between a user’s work computers with UE-V by default. Use this policy setting to prevent the user settings of Microsoft Office 365 Outlook 2016 from synchronization between computers with UE-V. If you enable this policy setting, Microsoft Office 365 Outlook 2016 user settings continue to sync with UE-V. @@ -7432,7 +7432,7 @@ ADMX Info: -Available in Windows 10 Insider Preview Build 20185. This policy setting configures the synchronization of user settings for Microsoft Office 365 PowerPoint 2013. Microsoft Office 365 synchronizes certain settings by default without UE-V. If the synchronization capabilities of Microsoft Office 365 are disabled, then the user settings of Microsoft Office 365 PowerPoint 2013 will synchronize between a user’s work computers with UE-V by default. Use this policy setting to prevent the user settings of Microsoft Office 365 PowerPoint 2013 from synchronization between computers with UE-V. +Available in the latest Windows 10 Insider Preview Build. This policy setting configures the synchronization of user settings for Microsoft Office 365 PowerPoint 2013. Microsoft Office 365 synchronizes certain settings by default without UE-V. If the synchronization capabilities of Microsoft Office 365 are disabled, then the user settings of Microsoft Office 365 PowerPoint 2013 will synchronize between a user’s work computers with UE-V by default. Use this policy setting to prevent the user settings of Microsoft Office 365 PowerPoint 2013 from synchronization between computers with UE-V. If you enable this policy setting, Microsoft Office 365 PowerPoint 2013 user settings continue to sync with UE-V. @@ -7504,7 +7504,7 @@ ADMX Info: -Available in Windows 10 Insider Preview Build 20185. This policy setting configures the synchronization of user settings for Microsoft Office 365 PowerPoint 2016. Microsoft Office 365 synchronizes certain settings by default without UE-V. If the synchronization capabilities of Microsoft Office 365 are disabled, then the user settings of Microsoft Office 365 PowerPoint 2016 will synchronize between a user’s work computers with UE-V by default. Use this policy setting to prevent the user settings of Microsoft Office 365 PowerPoint 2016 from synchronization between computers with UE-V. +Available in the latest Windows 10 Insider Preview Build. This policy setting configures the synchronization of user settings for Microsoft Office 365 PowerPoint 2016. Microsoft Office 365 synchronizes certain settings by default without UE-V. If the synchronization capabilities of Microsoft Office 365 are disabled, then the user settings of Microsoft Office 365 PowerPoint 2016 will synchronize between a user’s work computers with UE-V by default. Use this policy setting to prevent the user settings of Microsoft Office 365 PowerPoint 2016 from synchronization between computers with UE-V. If you enable this policy setting, Microsoft Office 365 PowerPoint 2016 user settings continue to sync with UE-V. @@ -7576,7 +7576,7 @@ ADMX Info: -Available in Windows 10 Insider Preview Build 20185. This policy setting configures the synchronization of user settings for Microsoft Office 365 Project 2013. Microsoft Office 365 synchronizes certain settings by default without UE-V. If the synchronization capabilities of Microsoft Office 365 are disabled, then the user settings of Microsoft Office 365 Project 2013 will synchronize between a user’s work computers with UE-V by default. Use this policy setting to prevent the user settings of Microsoft Office 365 Project 2013 from synchronization between computers with UE-V. +Available in the latest Windows 10 Insider Preview Build. This policy setting configures the synchronization of user settings for Microsoft Office 365 Project 2013. Microsoft Office 365 synchronizes certain settings by default without UE-V. If the synchronization capabilities of Microsoft Office 365 are disabled, then the user settings of Microsoft Office 365 Project 2013 will synchronize between a user’s work computers with UE-V by default. Use this policy setting to prevent the user settings of Microsoft Office 365 Project 2013 from synchronization between computers with UE-V. If you enable this policy setting, Microsoft Office 365 Project 2013 user settings continue to sync with UE-V. @@ -7647,7 +7647,7 @@ ADMX Info: -Available in Windows 10 Insider Preview Build 20185. This policy setting configures the synchronization of user settings for Microsoft Office 365 Project 2016. Microsoft Office 365 synchronizes certain settings by default without UE-V. If the synchronization capabilities of Microsoft Office 365 are disabled, then the user settings of Microsoft Office 365 Project 2016 will synchronize between a user’s work computers with UE-V by default. Use this policy setting to prevent the user settings of Microsoft Office 365 Project 2016 from synchronization between computers with UE-V. +Available in the latest Windows 10 Insider Preview Build. This policy setting configures the synchronization of user settings for Microsoft Office 365 Project 2016. Microsoft Office 365 synchronizes certain settings by default without UE-V. If the synchronization capabilities of Microsoft Office 365 are disabled, then the user settings of Microsoft Office 365 Project 2016 will synchronize between a user’s work computers with UE-V by default. Use this policy setting to prevent the user settings of Microsoft Office 365 Project 2016 from synchronization between computers with UE-V. If you enable this policy setting, Microsoft Office 365 Project 2016 user settings continue to sync with UE-V. @@ -7719,7 +7719,7 @@ ADMX Info: -Available in Windows 10 Insider Preview Build 20185. This policy setting configures the synchronization of user settings for Microsoft Office 365 Publisher 2013. Microsoft Office 365 synchronizes certain settings by default without UE-V. If the synchronization capabilities of Microsoft Office 365 are disabled, then the user settings of Microsoft Office 365 Publisher 2013 will synchronize between a user’s work computers with UE-V by default. Use this policy setting to prevent the user settings of Microsoft Office 365 Publisher 2013 from synchronization between computers with UE-V. +Available in the latest Windows 10 Insider Preview Build. This policy setting configures the synchronization of user settings for Microsoft Office 365 Publisher 2013. Microsoft Office 365 synchronizes certain settings by default without UE-V. If the synchronization capabilities of Microsoft Office 365 are disabled, then the user settings of Microsoft Office 365 Publisher 2013 will synchronize between a user’s work computers with UE-V by default. Use this policy setting to prevent the user settings of Microsoft Office 365 Publisher 2013 from synchronization between computers with UE-V. If you enable this policy setting, Microsoft Office 365 Publisher 2013 user settings continue to sync with UE-V. @@ -7791,7 +7791,7 @@ ADMX Info: -Available in Windows 10 Insider Preview Build 20185. This policy setting configures the synchronization of user settings for Microsoft Office 365 Publisher 2016. Microsoft Office 365 synchronizes certain settings by default without UE-V. If the synchronization capabilities of Microsoft Office 365 are disabled, then the user settings of Microsoft Office 365 Publisher 2016 will synchronize between a user’s work computers with UE-V by default. Use this policy setting to prevent the user settings of Microsoft Office 365 Publisher 2016 from synchronization between computers with UE-V. +Available in the latest Windows 10 Insider Preview Build. This policy setting configures the synchronization of user settings for Microsoft Office 365 Publisher 2016. Microsoft Office 365 synchronizes certain settings by default without UE-V. If the synchronization capabilities of Microsoft Office 365 are disabled, then the user settings of Microsoft Office 365 Publisher 2016 will synchronize between a user’s work computers with UE-V by default. Use this policy setting to prevent the user settings of Microsoft Office 365 Publisher 2016 from synchronization between computers with UE-V. If you enable this policy setting, Microsoft Office 365 Publisher 2016 user settings continue to sync with UE-V. @@ -7863,7 +7863,7 @@ ADMX Info: -Available in Windows 10 Insider Preview Build 20185. This policy setting configures the synchronization of user settings for Microsoft Office 365 SharePoint Designer 2013. Microsoft Office 365 synchronizes certain settings by default without UE-V. If the synchronization capabilities of Microsoft Office 365 are disabled, then the user settings of Microsoft Office 365 SharePoint Designer 2013 will synchronize between a user’s work computers with UE-V by default. Use this policy setting to prevent the user settings of Microsoft Office 365 SharePoint Designer 2013 from synchronization between computers with UE-V. +Available in the latest Windows 10 Insider Preview Build. This policy setting configures the synchronization of user settings for Microsoft Office 365 SharePoint Designer 2013. Microsoft Office 365 synchronizes certain settings by default without UE-V. If the synchronization capabilities of Microsoft Office 365 are disabled, then the user settings of Microsoft Office 365 SharePoint Designer 2013 will synchronize between a user’s work computers with UE-V by default. Use this policy setting to prevent the user settings of Microsoft Office 365 SharePoint Designer 2013 from synchronization between computers with UE-V. If you enable this policy setting, Microsoft Office 365 SharePoint Designer 2013 user settings continue to sync with UE-V. @@ -7935,7 +7935,7 @@ ADMX Info: -Available in Windows 10 Insider Preview Build 20185. This policy setting configures the synchronization of user settings for Microsoft Office 365 Visio 2013. Microsoft Office 365 synchronizes certain settings by default without UE-V. If the synchronization capabilities of Microsoft Office 365 are disabled, then the user settings of Microsoft Office 365 Visio 2013 will synchronize between a user’s work computers with UE-V by default. Use this policy setting to prevent the user settings of Microsoft Office 365 Visio 2013 from synchronization between computers with UE-V. +Available in the latest Windows 10 Insider Preview Build. This policy setting configures the synchronization of user settings for Microsoft Office 365 Visio 2013. Microsoft Office 365 synchronizes certain settings by default without UE-V. If the synchronization capabilities of Microsoft Office 365 are disabled, then the user settings of Microsoft Office 365 Visio 2013 will synchronize between a user’s work computers with UE-V by default. Use this policy setting to prevent the user settings of Microsoft Office 365 Visio 2013 from synchronization between computers with UE-V. If you enable this policy setting, Microsoft Office 365 Visio 2013 user settings continue to sync with UE-V. @@ -8007,7 +8007,7 @@ ADMX Info: -Available in Windows 10 Insider Preview Build 20185. This policy setting configures the synchronization of user settings for Microsoft Office 365 Visio 2016. Microsoft Office 365 synchronizes certain settings by default without UE-V. If the synchronization capabilities of Microsoft Office 365 are disabled, then the user settings of Microsoft Office 365 Visio 2016 will synchronize between a user’s work computers with UE-V by default. Use this policy setting to prevent the user settings of Microsoft Office 365 Visio 2016 from synchronization between computers with UE-V. +Available in the latest Windows 10 Insider Preview Build. This policy setting configures the synchronization of user settings for Microsoft Office 365 Visio 2016. Microsoft Office 365 synchronizes certain settings by default without UE-V. If the synchronization capabilities of Microsoft Office 365 are disabled, then the user settings of Microsoft Office 365 Visio 2016 will synchronize between a user’s work computers with UE-V by default. Use this policy setting to prevent the user settings of Microsoft Office 365 Visio 2016 from synchronization between computers with UE-V. If you enable this policy setting, Microsoft Office 365 Visio 2016 user settings continue to sync with UE-V. @@ -8079,7 +8079,7 @@ ADMX Info: -Available in Windows 10 Insider Preview Build 20185. This policy setting configures the synchronization of user settings for Microsoft Office 365 Word 2013. Microsoft Office 365 synchronizes certain settings by default without UE-V. If the synchronization capabilities of Microsoft Office 365 are disabled, then the user settings of Microsoft Office 365 Word 2013 will synchronize between a user’s work computers with UE-V by default. Use this policy setting to prevent the user settings of Microsoft Office 365 Word 2013 from synchronization between computers with UE-V. +Available in the latest Windows 10 Insider Preview Build. This policy setting configures the synchronization of user settings for Microsoft Office 365 Word 2013. Microsoft Office 365 synchronizes certain settings by default without UE-V. If the synchronization capabilities of Microsoft Office 365 are disabled, then the user settings of Microsoft Office 365 Word 2013 will synchronize between a user’s work computers with UE-V by default. Use this policy setting to prevent the user settings of Microsoft Office 365 Word 2013 from synchronization between computers with UE-V. If you enable this policy setting, Microsoft Office 365 Word 2013 user settings continue to sync with UE-V. @@ -8151,7 +8151,7 @@ ADMX Info: -Available in Windows 10 Insider Preview Build 20185. This policy setting configures the synchronization of user settings for Microsoft Office 365 Word 2016. Microsoft Office 365 synchronizes certain settings by default without UE-V. If the synchronization capabilities of Microsoft Office 365 are disabled, then the user settings of Microsoft Office 365 Word 2016 will synchronize between a user’s work computers with UE-V by default. Use this policy setting to prevent the user settings of Microsoft Office 365 Word 2016 from synchronization between computers with UE-V. +Available in the latest Windows 10 Insider Preview Build. This policy setting configures the synchronization of user settings for Microsoft Office 365 Word 2016. Microsoft Office 365 synchronizes certain settings by default without UE-V. If the synchronization capabilities of Microsoft Office 365 are disabled, then the user settings of Microsoft Office 365 Word 2016 will synchronize between a user’s work computers with UE-V by default. Use this policy setting to prevent the user settings of Microsoft Office 365 Word 2016 from synchronization between computers with UE-V. If you enable this policy setting, Microsoft Office 365 Word 2016 user settings continue to sync with UE-V. @@ -8223,7 +8223,7 @@ ADMX Info: -Available in Windows 10 Insider Preview Build 20185. This policy setting configures the synchronization of user settings for the Music app. By default, the user settings of Music sync between computers. Use the policy setting to prevent the user settings of Music from synchronizing between computers. +Available in the latest Windows 10 Insider Preview Build. This policy setting configures the synchronization of user settings for the Music app. By default, the user settings of Music sync between computers. Use the policy setting to prevent the user settings of Music from synchronizing between computers. If you enable this policy setting, Music user settings continue to sync. @@ -8294,7 +8294,7 @@ ADMX Info: -Available in Windows 10 Insider Preview Build 20185. This policy setting configures the synchronization of user settings for the News app. By default, the user settings of News sync between computers. Use the policy setting to prevent the user settings of News from synchronizing between computers. +Available in the latest Windows 10 Insider Preview Build. This policy setting configures the synchronization of user settings for the News app. By default, the user settings of News sync between computers. Use the policy setting to prevent the user settings of News from synchronizing between computers. If you enable this policy setting, News user settings continue to sync. @@ -8366,7 +8366,7 @@ ADMX Info: -Available in Windows 10 Insider Preview Build 20185. This policy setting configures the synchronization of user settings of Notepad. By default, the user settings of Notepad synchronize between computers. Use the policy setting to prevent the user settings of Notepad from synchronization between computers. +Available in the latest Windows 10 Insider Preview Build. This policy setting configures the synchronization of user settings of Notepad. By default, the user settings of Notepad synchronize between computers. Use the policy setting to prevent the user settings of Notepad from synchronization between computers. If you enable this policy setting, the Notepad user settings continue to synchronize. @@ -8438,7 +8438,7 @@ ADMX Info: -Available in Windows 10 Insider Preview Build 20185. This policy setting configures the synchronization of user settings for the Reader app. By default, the user settings of Reader sync between computers. Use the policy setting to prevent the user settings of Reader from synchronizing between computers. +Available in the latest Windows 10 Insider Preview Build. This policy setting configures the synchronization of user settings for the Reader app. By default, the user settings of Reader sync between computers. Use the policy setting to prevent the user settings of Reader from synchronizing between computers. If you enable this policy setting, Reader user settings continue to sync. @@ -8511,7 +8511,7 @@ ADMX Info: -Available in Windows 10 Insider Preview Build 20185. This policy setting configures the number of milliseconds that the computer waits when retrieving user settings from the settings storage location. You can use this setting to override the default value of 2000 milliseconds. +Available in the latest Windows 10 Insider Preview Build. This policy setting configures the number of milliseconds that the computer waits when retrieving user settings from the settings storage location. You can use this setting to override the default value of 2000 milliseconds. If you enable this policy setting, set the number of milliseconds that the system waits to retrieve settings. @@ -8581,7 +8581,7 @@ ADMX Info: -Available in Windows 10 Insider Preview Build 20185. This policy setting configures where the settings package files that contain user settings are stored. +Available in the latest Windows 10 Insider Preview Build. This policy setting configures where the settings package files that contain user settings are stored. If you enable this policy setting, the user settings are stored in the specified location. @@ -8651,7 +8651,7 @@ ADMX Info: -Available in Windows 10 Insider Preview Build 20185. This policy setting configures where custom settings location templates are stored and if the catalog will be used to replace the default Microsoft templates installed with the UE-V Agent. +Available in the latest Windows 10 Insider Preview Build. This policy setting configures where custom settings location templates are stored and if the catalog will be used to replace the default Microsoft templates installed with the UE-V Agent. If you enable this policy setting, the UE-V Agent checks the specified location once each day and updates its synchronization behavior based on the templates in this location. Settings location templates added or updated since the last check are registered by the UE-V Agent. The UE-V Agent deregisters templates that were removed from this location. @@ -8727,7 +8727,7 @@ ADMX Info: -Available in Windows 10 Insider Preview Build 20185. This policy setting configures the synchronization of user settings for the Sports app. By default, the user settings of Sports sync between computers. Use the policy setting to prevent the user settings of Sports from synchronizing between computers. +Available in the latest Windows 10 Insider Preview Build. This policy setting configures the synchronization of user settings for the Sports app. By default, the user settings of Sports sync between computers. Use the policy setting to prevent the user settings of Sports from synchronizing between computers. If you enable this policy setting, Sports user settings continue to sync. @@ -8799,7 +8799,7 @@ ADMX Info: -Available in Windows 10 Insider Preview Build 20185. This policy setting allows you to enable or disable User Experience Virtualization (UE-V). Only applies to Windows 10 or earlier. +Available in the latest Windows 10 Insider Preview Build. This policy setting allows you to enable or disable User Experience Virtualization (UE-V). Only applies to Windows 10 or earlier. > [!TIP] @@ -8864,7 +8864,7 @@ ADMX Info: -Available in Windows 10 Insider Preview Build 20185. This policy setting defines whether the User Experience Virtualization (UE-V) Agent synchronizes settings over metered connections. By default, the UE-V Agent does not synchronize settings over a metered connection. +Available in the latest Windows 10 Insider Preview Build. This policy setting defines whether the User Experience Virtualization (UE-V) Agent synchronizes settings over metered connections. By default, the UE-V Agent does not synchronize settings over a metered connection. With this setting enabled, the UE-V Agent synchronizes settings over a metered connection. @@ -8936,7 +8936,7 @@ ADMX Info: -Available in Windows 10 Insider Preview Build 20185. This policy setting defines whether the User Experience Virtualization (UE-V) Agent synchronizes settings over metered connections outside of the home provider network, for example when connected via a roaming connection. By default, the UE-V Agent does not synchronize settings over a metered connection that is roaming. +Available in the latest Windows 10 Insider Preview Build. This policy setting defines whether the User Experience Virtualization (UE-V) Agent synchronizes settings over metered connections outside of the home provider network, for example when connected via a roaming connection. By default, the UE-V Agent does not synchronize settings over a metered connection that is roaming. With this setting enabled, the UE-V Agent synchronizes settings over a metered connection that is roaming. @@ -9008,7 +9008,7 @@ ADMX Info: -Available in Windows 10 Insider Preview Build 20185. This policy setting allows you to configure the User Experience Virtualization (UE-V) sync provider to ping the settings storage path before attempting to sync settings. If the ping is successful then the sync provider attempts to synchronize the settings packages. If the ping is unsuccessful then the sync provider doesn’t attempt the synchronization. +Available in the latest Windows 10 Insider Preview Build. This policy setting allows you to configure the User Experience Virtualization (UE-V) sync provider to ping the settings storage path before attempting to sync settings. If the ping is successful then the sync provider attempts to synchronize the settings packages. If the ping is unsuccessful then the sync provider doesn’t attempt the synchronization. If you enable this policy setting, the sync provider pings the settings storage location before synchronizing settings packages. @@ -9079,7 +9079,7 @@ ADMX Info: -Available in Windows 10 Insider Preview Build 20185. This policy setting defines the default settings sync behavior of the User Experience Virtualization (UE-V) Agent for Windows apps that are not explicitly listed in Windows App List. By default, the UE-V Agent only synchronizes settings of those Windows apps included in the Windows App List. +Available in the latest Windows 10 Insider Preview Build. This policy setting defines the default settings sync behavior of the User Experience Virtualization (UE-V) Agent for Windows apps that are not explicitly listed in Windows App List. By default, the UE-V Agent only synchronizes settings of those Windows apps included in the Windows App List. With this setting enabled, the settings of all Windows apps not expressly disable in the Windows App List are synchronized. @@ -9151,7 +9151,7 @@ ADMX Info: -Available in Windows 10 Insider Preview Build 20185. This policy setting configures the synchronization of user settings for the Travel app. By default, the user settings of Travel sync between computers. Use the policy setting to prevent the user settings of Travel from synchronizing between computers. +Available in the latest Windows 10 Insider Preview Build. This policy setting configures the synchronization of user settings for the Travel app. By default, the user settings of Travel sync between computers. Use the policy setting to prevent the user settings of Travel from synchronizing between computers. If you enable this policy setting, Travel user settings continue to sync. @@ -9222,7 +9222,7 @@ ADMX Info: -Available in Windows 10 Insider Preview Build 20185. This policy setting enables the User Experience Virtualization (UE-V) tray icon. By default, an icon appears in the system tray that displays notifications for UE-V. This icon also provides a link to the UE-V Agent application, Company Settings Center. Users can open the Company Settings Center by right-clicking the icon and selecting Open or by double-clicking the icon. When this group policy setting is enabled, the UE-V tray icon is visible, the UE-V notifications display, and the Company Settings Center is accessible from the tray icon. +Available in the latest Windows 10 Insider Preview Build. This policy setting enables the User Experience Virtualization (UE-V) tray icon. By default, an icon appears in the system tray that displays notifications for UE-V. This icon also provides a link to the UE-V Agent application, Company Settings Center. Users can open the Company Settings Center by right-clicking the icon and selecting Open or by double-clicking the icon. When this group policy setting is enabled, the UE-V tray icon is visible, the UE-V notifications display, and the Company Settings Center is accessible from the tray icon. With this setting disabled, the tray icon does not appear in the system tray, UE-V never displays notifications, and the user cannot access Company Settings Center from the system tray. The Company Settings Center remains accessible through the Control Panel and the Start menu or Start screen. @@ -9292,7 +9292,7 @@ ADMX Info: -Available in Windows 10 Insider Preview Build 20185. This policy setting configures the synchronization of user settings for the Video app. By default, the user settings of Video sync between computers. Use the policy setting to prevent the user settings of Video from synchronizing between computers. +Available in the latest Windows 10 Insider Preview Build. This policy setting configures the synchronization of user settings for the Video app. By default, the user settings of Video sync between computers. Use the policy setting to prevent the user settings of Video from synchronizing between computers. If you enable this policy setting, Video user settings continue to sync. @@ -9364,7 +9364,7 @@ ADMX Info: -Available in Windows 10 Insider Preview Build 20185. This policy setting configures the synchronization of user settings for the Weather app. By default, the user settings of Weather sync between computers. Use the policy setting to prevent the user settings of Weather from synchronizing between computers. +Available in the latest Windows 10 Insider Preview Build. This policy setting configures the synchronization of user settings for the Weather app. By default, the user settings of Weather sync between computers. Use the policy setting to prevent the user settings of Weather from synchronizing between computers. If you enable this policy setting, Weather user settings continue to sync. @@ -9435,7 +9435,7 @@ ADMX Info: -Available in Windows 10 Insider Preview Build 20185. This policy setting configures the synchronization of user settings of WordPad. By default, the user settings of WordPad synchronize between computers. Use the policy setting to prevent the user settings of WordPad from synchronization between computers. +Available in the latest Windows 10 Insider Preview Build. This policy setting configures the synchronization of user settings of WordPad. By default, the user settings of WordPad synchronize between computers. Use the policy setting to prevent the user settings of WordPad from synchronization between computers. If you enable this policy setting, the WordPad user settings continue to synchronize. diff --git a/windows/client-management/mdm/policy-csp-admx-w32time.md b/windows/client-management/mdm/policy-csp-admx-w32time.md index a9b6715a43..0afeb2cfc3 100644 --- a/windows/client-management/mdm/policy-csp-admx-w32time.md +++ b/windows/client-management/mdm/policy-csp-admx-w32time.md @@ -83,7 +83,7 @@ manager: dansimp -Available in Windows 10 Insider Preview Build 20185. This policy setting allows you to specify Clock discipline and General values for the Windows Time service (W32time) for domain controllers including RODCs. +Available in the latest Windows 10 Insider Preview Build. This policy setting allows you to specify Clock discipline and General values for the Windows Time service (W32time) for domain controllers including RODCs. If this policy setting is enabled, W32time Service on target machines use the settings provided here. Otherwise, the service on target machines use locally configured settings values. @@ -228,7 +228,7 @@ ADMX Info: -Available in Windows 10 Insider Preview Build 20185. This policy setting specifies a set of parameters for controlling the Windows NTP Client. +Available in the latest Windows 10 Insider Preview Build. This policy setting specifies a set of parameters for controlling the Windows NTP Client. If you enable this policy setting, you can specify the following parameters for the Windows NTP Client. @@ -318,7 +318,7 @@ ADMX Info: -Available in Windows 10 Insider Preview Build 20185. This policy setting specifies whether the Windows NTP Client is enabled. +Available in the latest Windows 10 Insider Preview Build. This policy setting specifies whether the Windows NTP Client is enabled. Enabling the Windows NTP Client allows your computer to synchronize its computer clock with other NTP servers. You might want to disable this service if you decide to use a third-party time provider. @@ -389,7 +389,7 @@ ADMX Info: -Available in Windows 10 Insider Preview Build 20185. This policy setting allows you to specify whether the Windows NTP Server is enabled. +Available in the latest Windows 10 Insider Preview Build. This policy setting allows you to specify whether the Windows NTP Server is enabled. If you enable this policy setting for the Windows NTP Server, your computer can service NTP requests from other computers. diff --git a/windows/client-management/mdm/policy-csp-admx-wincal.md b/windows/client-management/mdm/policy-csp-admx-wincal.md index bceaf394ed..d5aba0a18f 100644 --- a/windows/client-management/mdm/policy-csp-admx-wincal.md +++ b/windows/client-management/mdm/policy-csp-admx-wincal.md @@ -77,7 +77,7 @@ manager: dansimp -Available in Windows 10 Insider Preview Build 20185. Windows Calendar is a feature that allows users to manage appointments and tasks by creating personal calendars, publishing them, and subscribing to other users calendars. +Available in the latest Windows 10 Insider Preview Build. Windows Calendar is a feature that allows users to manage appointments and tasks by creating personal calendars, publishing them, and subscribing to other users calendars. If you enable this setting, Windows Calendar will be turned off. @@ -150,7 +150,7 @@ ADMX Info: -Available in Windows 10 Insider Preview Build 20185. Windows Calendar is a feature that allows users to manage appointments and tasks by creating personal calendars, publishing them, and subscribing to other users calendars. +Available in the latest Windows 10 Insider Preview Build. Windows Calendar is a feature that allows users to manage appointments and tasks by creating personal calendars, publishing them, and subscribing to other users calendars. If you enable this setting, Windows Calendar will be turned off. diff --git a/windows/client-management/mdm/policy-csp-admx-windowsanytimeupgrade.md b/windows/client-management/mdm/policy-csp-admx-windowsanytimeupgrade.md index 8b06f92864..c0b49d9fae 100644 --- a/windows/client-management/mdm/policy-csp-admx-windowsanytimeupgrade.md +++ b/windows/client-management/mdm/policy-csp-admx-windowsanytimeupgrade.md @@ -75,7 +75,7 @@ manager: dansimp -Available in Windows 10 Insider Preview Build 20185. By default, Add features to Windows 10 is available for all administrators. +Available in the latest Windows 10 Insider Preview Build. By default, Add features to Windows 10 is available for all administrators. If you enable this policy setting, the wizard will not run. diff --git a/windows/client-management/mdm/policy-csp-admx-windowsconnectnow.md b/windows/client-management/mdm/policy-csp-admx-windowsconnectnow.md index 80b7d947fa..bec9255c05 100644 --- a/windows/client-management/mdm/policy-csp-admx-windowsconnectnow.md +++ b/windows/client-management/mdm/policy-csp-admx-windowsconnectnow.md @@ -80,7 +80,7 @@ manager: dansimp -Available in Windows 10 Insider Preview Build 20185. This policy setting prohibits access to Windows Connect Now (WCN) wizards. +Available in the latest Windows 10 Insider Preview Build. This policy setting prohibits access to Windows Connect Now (WCN) wizards. If you enable this policy setting, the wizards are turned off and users have no access to any of the wizard tasks. All the configuration related tasks, including "Set up a wireless router or access point" and "Add a wireless device" are disabled. @@ -149,7 +149,7 @@ ADMX Info: -Available in Windows 10 Insider Preview Build 20185. This policy setting prohibits access to Windows Connect Now (WCN) wizards. +Available in the latest Windows 10 Insider Preview Build. This policy setting prohibits access to Windows Connect Now (WCN) wizards. If you enable this policy setting, the wizards are turned off and users have no access to any of the wizard tasks. All the configuration related tasks, including "Set up a wireless router or access point" and "Add a wireless device" are disabled. @@ -218,7 +218,7 @@ ADMX Info: -Available in Windows 10 Insider Preview Build 20185. This policy setting allows the configuration of wireless settings using Windows Connect Now (WCN). The WCN Registrar enables the discovery and configuration of devices over Ethernet (UPnP), over In-band 802.11 WLAN, through the Windows Portable Device API (WPD), and via USB Flash drives. +Available in the latest Windows 10 Insider Preview Build. This policy setting allows the configuration of wireless settings using Windows Connect Now (WCN). The WCN Registrar enables the discovery and configuration of devices over Ethernet (UPnP), over In-band 802.11 WLAN, through the Windows Portable Device API (WPD), and via USB Flash drives. Additional options are available to allow discovery and configuration over a specific medium. diff --git a/windows/client-management/mdm/policy-csp-admx-windowsmediadrm.md b/windows/client-management/mdm/policy-csp-admx-windowsmediadrm.md index d9845c8533..0fa4658ba7 100644 --- a/windows/client-management/mdm/policy-csp-admx-windowsmediadrm.md +++ b/windows/client-management/mdm/policy-csp-admx-windowsmediadrm.md @@ -74,7 +74,7 @@ manager: dansimp -Available in Windows 10 Insider Preview Build 20185. This policy setting prevents Windows Media Digital Rights Management (DRM) from accessing the Internet (or intranet). +Available in the latest Windows 10 Insider Preview Build. This policy setting prevents Windows Media Digital Rights Management (DRM) from accessing the Internet (or intranet). When enabled, Windows Media DRM is prevented from accessing the Internet (or intranet) for license acquisition and security upgrades. diff --git a/windows/client-management/mdm/policy-csp-admx-windowsmediaplayer.md b/windows/client-management/mdm/policy-csp-admx-windowsmediaplayer.md index 69a27c1fef..22acf9fa38 100644 --- a/windows/client-management/mdm/policy-csp-admx-windowsmediaplayer.md +++ b/windows/client-management/mdm/policy-csp-admx-windowsmediaplayer.md @@ -134,7 +134,7 @@ manager: dansimp -Available in Windows 10 Insider Preview Build 20185. This policy setting allows you to specify the HTTP proxy settings for Windows Media Player. +Available in the latest Windows 10 Insider Preview Build. This policy setting allows you to specify the HTTP proxy settings for Windows Media Player. If you enable this policy setting, select one of the following proxy types: @@ -215,7 +215,7 @@ ADMX Info: -Available in Windows 10 Insider Preview Build 20185. This policy setting allows you to specify the MMS proxy settings for Windows Media Player. +Available in the latest Windows 10 Insider Preview Build. This policy setting allows you to specify the MMS proxy settings for Windows Media Player. If you enable this policy setting, select one of the following proxy types: @@ -295,7 +295,7 @@ ADMX Info: -Available in Windows 10 Insider Preview Build 20185. This policy setting allows you to specify the RTSP proxy settings for Windows Media Player. +Available in the latest Windows 10 Insider Preview Build. This policy setting allows you to specify the RTSP proxy settings for Windows Media Player. If you enable this policy setting, select one of the following proxy types: @@ -373,7 +373,7 @@ ADMX Info: -Available in Windows 10 Insider Preview Build 20185. This policy setting allows you to turn off do not show first use dialog boxes. +Available in the latest Windows 10 Insider Preview Build. This policy setting allows you to turn off do not show first use dialog boxes. If you enable this policy setting, the Privacy Options and Installation Options dialog boxes are prevented from being displayed the first time a user starts Windows Media Player. @@ -444,7 +444,7 @@ ADMX Info: -Available in Windows 10 Insider Preview Build 20185. This policy setting allows you to hide the Network tab. +Available in the latest Windows 10 Insider Preview Build. This policy setting allows you to hide the Network tab. If you enable this policy setting, the Network tab in Windows Media Player is hidden. The default network settings are used unless the user has previously defined network settings for the Player. @@ -513,7 +513,7 @@ ADMX Info: -Available in Windows 10 Insider Preview Build 20185. This policy setting allows you to prevent the anchor window from being displayed when Windows Media Player is in skin mode. +Available in the latest Windows 10 Insider Preview Build. This policy setting allows you to prevent the anchor window from being displayed when Windows Media Player is in skin mode. If you enable this policy setting, the anchor window is hidden when the Player is in skin mode. In addition, the option on the Player tab in the Player that enables users to choose whether the anchor window displays is not available. @@ -584,7 +584,7 @@ ADMX Info: -Available in Windows 10 Insider Preview Build 20185. This policy setting prevents the anchor window from being displayed when Windows Media Player is in skin mode. +Available in the latest Windows 10 Insider Preview Build. This policy setting prevents the anchor window from being displayed when Windows Media Player is in skin mode. This policy hides the anchor window when the Player is in skin mode. In addition, the option on the Player tab in the Player that enables users to choose whether the anchor window displays is not available. @@ -655,7 +655,7 @@ ADMX Info: -Available in Windows 10 Insider Preview Build 20185. This policy setting allows you to prevent video smoothing from occurring. +Available in the latest Windows 10 Insider Preview Build. This policy setting allows you to prevent video smoothing from occurring. If you enable this policy setting, video smoothing is prevented, which can improve video playback on computers with limited resources. In addition, the Use Video Smoothing check box in the Video Acceleration Settings dialog box in the Player is cleared and is not available. @@ -728,7 +728,7 @@ ADMX Info: -Available in Windows 10 Insider Preview Build 20185. This policy setting allows a screen saver to interrupt playback. +Available in the latest Windows 10 Insider Preview Build. This policy setting allows a screen saver to interrupt playback. If you enable this policy setting, a screen saver is displayed during playback of digital media according to the options selected on the Screen Saver tab in the Display Properties dialog box in Control Panel. The Allow screen saver during playback check box on the Player tab in the Player is selected and is not available. @@ -799,7 +799,7 @@ ADMX Info: -Available in Windows 10 Insider Preview Build 20185. This policy setting allows you to hide the Privacy tab in Windows Media Player. +Available in the latest Windows 10 Insider Preview Build. This policy setting allows you to hide the Privacy tab in Windows Media Player. If you enable this policy setting, the "Update my music files (WMA and MP3 files) by retrieving missing media information from the Internet" check box on the Media Library tab is available, even though the Privacy tab is hidden, unless the "Prevent music file media information retrieval" policy setting is enabled. @@ -870,7 +870,7 @@ ADMX Info: -Available in Windows 10 Insider Preview Build 20185. This policy setting allows you to hide the Security tab in Windows Media Player. +Available in the latest Windows 10 Insider Preview Build. This policy setting allows you to hide the Security tab in Windows Media Player. If you enable this policy setting, the default security settings for the options on the Security tab are used unless the user changed the settings previously. Users can still change security and zone settings by using Internet Explorer unless these settings have been hidden or disabled by Internet Explorer policies. @@ -939,7 +939,7 @@ ADMX Info: -Available in Windows 10 Insider Preview Build 20185. This policy setting allows you to specify whether network buffering uses the default or a specified number of seconds. +Available in the latest Windows 10 Insider Preview Build. This policy setting allows you to specify whether network buffering uses the default or a specified number of seconds. If you enable this policy setting, select one of the following options to specify the number of seconds streaming media is buffered before it is played. @@ -1013,7 +1013,7 @@ ADMX Info: -Available in Windows 10 Insider Preview Build 20185. This policy setting allows you to prevent Windows Media Player from downloading codecs. +Available in the latest Windows 10 Insider Preview Build. This policy setting allows you to prevent Windows Media Player from downloading codecs. If you enable this policy setting, the Player is prevented from automatically downloading codecs to your computer. In addition, the Download codecs automatically check box on the Player tab in the Player is not available. @@ -1084,7 +1084,7 @@ ADMX Info: -Available in Windows 10 Insider Preview Build 20185. This policy setting allows you to prevent media information for CDs and DVDs from being retrieved from the Internet. +Available in the latest Windows 10 Insider Preview Build. This policy setting allows you to prevent media information for CDs and DVDs from being retrieved from the Internet. If you enable this policy setting, the Player is prevented from automatically obtaining media information from the Internet for CDs and DVDs played by users. In addition, the Retrieve media information for CDs and DVDs from the Internet check box on the Privacy Options tab in the first use dialog box and on the Privacy tab in the Player are not selected and are not available. @@ -1153,7 +1153,7 @@ ADMX Info: -Available in Windows 10 Insider Preview Build 20185. This policy setting allows you to prevent media sharing from Windows Media Player. +Available in the latest Windows 10 Insider Preview Build. This policy setting allows you to prevent media sharing from Windows Media Player. If you enable this policy setting, any user on this computer is prevented from sharing digital media content from Windows Media Player with other computers and devices that are on the same network. Media sharing is disabled from Windows Media Player or from programs that depend on the Player's media sharing feature. @@ -1222,7 +1222,7 @@ ADMX Info: -Available in Windows 10 Insider Preview Build 20185. This policy setting allows you to prevent media information for music files from being retrieved from the Internet. +Available in the latest Windows 10 Insider Preview Build. This policy setting allows you to prevent media information for music files from being retrieved from the Internet. If you enable this policy setting, the Player is prevented from automatically obtaining media information for music files such as Windows Media Audio (WMA) and MP3 files from the Internet. In addition, the Update my music files (WMA and MP3 files) by retrieving missing media information from the Internet check box in the first use dialog box and on the Privacy and Media Library tabs in the Player are not selected and are not available. @@ -1291,7 +1291,7 @@ ADMX Info: -Available in Windows 10 Insider Preview Build 20185. This policy setting allows you to prevent a shortcut for the Player from being added to the Quick Launch bar. +Available in the latest Windows 10 Insider Preview Build. This policy setting allows you to prevent a shortcut for the Player from being added to the Quick Launch bar. If you enable this policy setting, the user cannot add the shortcut for the Player to the Quick Launch bar. @@ -1359,7 +1359,7 @@ ADMX Info: -Available in Windows 10 Insider Preview Build 20185. This policy setting allows you to prevent radio station presets from being retrieved from the Internet. +Available in the latest Windows 10 Insider Preview Build. This policy setting allows you to prevent radio station presets from being retrieved from the Internet. If you enable this policy setting, the Player is prevented from automatically retrieving radio station presets from the Internet and displaying them in Media Library. In addition, presets that exist before the policy is configured are not be updated, and presets a user adds are not be displayed. @@ -1428,7 +1428,7 @@ ADMX Info: -Available in Windows 10 Insider Preview Build 20185. This policy setting allows you to prevent a shortcut icon for the Player from being added to the user's desktop. +Available in the latest Windows 10 Insider Preview Build. This policy setting allows you to prevent a shortcut icon for the Player from being added to the user's desktop. If you enable this policy setting, users cannot add the Player shortcut icon to their desktops. @@ -1497,7 +1497,7 @@ ADMX Info: -Available in Windows 10 Insider Preview Build 20185. This policy setting allows you to set and lock Windows Media Player in skin mode, using a specified skin. +Available in the latest Windows 10 Insider Preview Build. This policy setting allows you to set and lock Windows Media Player in skin mode, using a specified skin. If you enable this policy setting, the Player displays only in skin mode using the skin specified in the Skin box on the Setting tab. @@ -1570,7 +1570,7 @@ ADMX Info: -Available in Windows 10 Insider Preview Build 20185. This policy setting allows you to specify that Windows Media Player can attempt to use selected protocols when receiving streaming media from a server running Windows Media Services. +Available in the latest Windows 10 Insider Preview Build. This policy setting allows you to specify that Windows Media Player can attempt to use selected protocols when receiving streaming media from a server running Windows Media Services. If you enable this policy setting, the protocols that are selected on the Network tab of the Player are used to receive a stream initiated through an MMS or RTSP URL from a Windows Media server. If the RSTP/UDP check box is selected, a user can specify UDP ports in the Use ports check box. If the user does not specify UDP ports, the Player uses default ports when using the UDP protocol. This policy setting also specifies that multicast streams can be received if the "Allow the Player to receive multicast streams" check box on the Network tab is selected. diff --git a/windows/client-management/mdm/policy-csp-admx-wininit.md b/windows/client-management/mdm/policy-csp-admx-wininit.md index dbbecca9d5..9e17ae7971 100644 --- a/windows/client-management/mdm/policy-csp-admx-wininit.md +++ b/windows/client-management/mdm/policy-csp-admx-wininit.md @@ -80,7 +80,7 @@ manager: dansimp -Available in Windows 10 Insider Preview Build 20185. This policy setting controls the legacy remote shutdown interface (named pipe). The named pipe remote shutdown interface is needed in order to shutdown this system from a remote Windows XP or Windows Server 2003 system. +Available in the latest Windows 10 Insider Preview Build. This policy setting controls the legacy remote shutdown interface (named pipe). The named pipe remote shutdown interface is needed in order to shutdown this system from a remote Windows XP or Windows Server 2003 system. If you enable this policy setting, the system does not create the named pipe remote shutdown interface. @@ -149,7 +149,7 @@ ADMX Info: -Available in Windows 10 Insider Preview Build 20185. This policy setting controls the use of fast startup. +Available in the latest Windows 10 Insider Preview Build. This policy setting controls the use of fast startup. If you enable this policy setting, the system requires hibernate to be enabled. @@ -218,7 +218,7 @@ ADMX Info: -Available in Windows 10 Insider Preview Build 20185. This policy setting configures the number of minutes the system waits for the hung logon sessions before proceeding with the system shutdown. +Available in the latest Windows 10 Insider Preview Build. This policy setting configures the number of minutes the system waits for the hung logon sessions before proceeding with the system shutdown. If you enable this policy setting, the system waits for the hung logon sessions for the number of minutes specified. From 564a005dc434b3bc89e0efe60e9ce7570d45afe1 Mon Sep 17 00:00:00 2001 From: MaratMussabekov <48041687+MaratMussabekov@users.noreply.github.com> Date: Wed, 30 Dec 2020 12:29:07 +0500 Subject: [PATCH 236/486] Update microsoft-cloud-app-security-config.md --- .../microsoft-cloud-app-security-config.md | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/windows/security/threat-protection/microsoft-defender-atp/microsoft-cloud-app-security-config.md b/windows/security/threat-protection/microsoft-defender-atp/microsoft-cloud-app-security-config.md index a05d99d1d6..869c67e8b9 100644 --- a/windows/security/threat-protection/microsoft-defender-atp/microsoft-cloud-app-security-config.md +++ b/windows/security/threat-protection/microsoft-defender-atp/microsoft-cloud-app-security-config.md @@ -44,7 +44,7 @@ Once activated, Microsoft Defender for Endpoint will immediately start forwardin ## View the data collected -To view and access Microsoft Defender for Endpoint data in Microsoft Cloud Apps Security, see [Investigate devices in Cloud App Security](https://docs.microsoft.com/cloud-app-security/wdatp-integration#investigate-machines-in-cloud-app-security). +To view and access Microsoft Defender for Endpoint data in Microsoft Cloud Apps Security, see [Investigate devices in Cloud App Security](https://docs.microsoft.com/en-us/cloud-app-security/mde-integration#investigate-devices-in-cloud-app-security). For more information about cloud discovery, see [Working with discovered apps](https://docs.microsoft.com/cloud-app-security/discovered-apps). From 49e4bf55a51c12da969a07b21540aa81d6e14beb Mon Sep 17 00:00:00 2001 From: ImranHabib <47118050+joinimran@users.noreply.github.com> Date: Wed, 30 Dec 2020 18:24:38 +0500 Subject: [PATCH 237/486] Addition of information in security properties As suggested by the user, there were security properties missing in the document and has been added. Problem: https://github.com/MicrosoftDocs/windows-itpro-docs/issues/8819 --- ...nable-virtualization-based-protection-of-code-integrity.md | 4 +++- 1 file changed, 3 insertions(+), 1 deletion(-) diff --git a/windows/security/threat-protection/device-guard/enable-virtualization-based-protection-of-code-integrity.md b/windows/security/threat-protection/device-guard/enable-virtualization-based-protection-of-code-integrity.md index 8dc3221ed3..fdec65680d 100644 --- a/windows/security/threat-protection/device-guard/enable-virtualization-based-protection-of-code-integrity.md +++ b/windows/security/threat-protection/device-guard/enable-virtualization-based-protection-of-code-integrity.md @@ -196,7 +196,7 @@ Value | Description **5.** | If present, NX protections are available. **6.** | If present, SMM mitigations are available. **7.** | If present, Mode Based Execution Control is available. - +**8.** | If present, APIC virtualization is available. #### InstanceIdentifier @@ -227,6 +227,7 @@ Value | Description **1.** | If present, Windows Defender Credential Guard is configured. **2.** | If present, HVCI is configured. **3.** | If present, System Guard Secure Launch is configured. +**4.** | If present, SMM Firmware Measurement is configured. #### SecurityServicesRunning @@ -238,6 +239,7 @@ Value | Description **1.** | If present, Windows Defender Credential Guard is running. **2.** | If present, HVCI is running. **3.** | If present, System Guard Secure Launch is running. +**4.** | If present, SMM Firmware Measurement is running. #### Version From c18f5cf4561192d2a33c43cd7d80b777fb05ed64 Mon Sep 17 00:00:00 2001 From: MaratMussabekov <48041687+MaratMussabekov@users.noreply.github.com> Date: Wed, 30 Dec 2020 21:19:53 +0500 Subject: [PATCH 238/486] Update indicator-ip-domain.md --- .../microsoft-defender-atp/indicator-ip-domain.md | 4 ++-- 1 file changed, 2 insertions(+), 2 deletions(-) diff --git a/windows/security/threat-protection/microsoft-defender-atp/indicator-ip-domain.md b/windows/security/threat-protection/microsoft-defender-atp/indicator-ip-domain.md index 800f2e0f16..8578ea6865 100644 --- a/windows/security/threat-protection/microsoft-defender-atp/indicator-ip-domain.md +++ b/windows/security/threat-protection/microsoft-defender-atp/indicator-ip-domain.md @@ -53,8 +53,8 @@ It's important to understand the following prerequisites prior to creating indic > NOTE: >- IP is supported for all three protocols >- Only single IP addresses are supported (no CIDR blocks or IP ranges) ->- Encrypted URLs (full path) can only be blocked on first party browsers ->- Encrypted URLS (FQDN only) can be blocked outside of first party browsers +>- Encrypted URLs (full path) can only be blocked on first party browsers (Internet Explorer, Edge) +>- Encrypted URLS (FQDN only) can be blocked outside of first party browsers (Internet Explorer, Edge) >- Full URL path blocks can be applied on the domain level and all unencrypted URLs >[!NOTE] From f9ff878940fae57246d447f84a483b302e7633dd Mon Sep 17 00:00:00 2001 From: Denise Vangel-MSFT Date: Wed, 30 Dec 2020 09:29:20 -0800 Subject: [PATCH 239/486] Update windows/security/threat-protection/microsoft-defender-atp/indicator-ip-domain.md Co-authored-by: Trond B. Krokli <38162891+illfated@users.noreply.github.com> --- .../microsoft-defender-atp/indicator-ip-domain.md | 4 ++-- 1 file changed, 2 insertions(+), 2 deletions(-) diff --git a/windows/security/threat-protection/microsoft-defender-atp/indicator-ip-domain.md b/windows/security/threat-protection/microsoft-defender-atp/indicator-ip-domain.md index 8578ea6865..b32d4960f4 100644 --- a/windows/security/threat-protection/microsoft-defender-atp/indicator-ip-domain.md +++ b/windows/security/threat-protection/microsoft-defender-atp/indicator-ip-domain.md @@ -51,8 +51,8 @@ It's important to understand the following prerequisites prior to creating indic > Only external IPs can be added to the indicator list. Indicators cannot be created for internal IPs. > For web protection scenarios, we recommend using the built-in capabilities in Microsoft Edge. Microsoft Edge leverages [Network Protection](network-protection.md) to inspect network traffic and allows blocks for TCP, HTTP, and HTTPS (TLS). For all other processes, web protection scenarios leverage Network Protection for inspection and enforcement:
    > NOTE: ->- IP is supported for all three protocols ->- Only single IP addresses are supported (no CIDR blocks or IP ranges) +> - IP is supported for all three protocols +> - Only single IP addresses are supported (no CIDR blocks or IP ranges) >- Encrypted URLs (full path) can only be blocked on first party browsers (Internet Explorer, Edge) >- Encrypted URLS (FQDN only) can be blocked outside of first party browsers (Internet Explorer, Edge) >- Full URL path blocks can be applied on the domain level and all unencrypted URLs From ed4e39ec8c49bdd5bc239c8ca110891deea03fd1 Mon Sep 17 00:00:00 2001 From: Denise Vangel-MSFT Date: Wed, 30 Dec 2020 09:29:39 -0800 Subject: [PATCH 240/486] Update windows/security/threat-protection/microsoft-defender-atp/indicator-ip-domain.md Co-authored-by: Trond B. Krokli <38162891+illfated@users.noreply.github.com> --- .../microsoft-defender-atp/indicator-ip-domain.md | 6 +++--- 1 file changed, 3 insertions(+), 3 deletions(-) diff --git a/windows/security/threat-protection/microsoft-defender-atp/indicator-ip-domain.md b/windows/security/threat-protection/microsoft-defender-atp/indicator-ip-domain.md index b32d4960f4..f859c87358 100644 --- a/windows/security/threat-protection/microsoft-defender-atp/indicator-ip-domain.md +++ b/windows/security/threat-protection/microsoft-defender-atp/indicator-ip-domain.md @@ -53,9 +53,9 @@ It's important to understand the following prerequisites prior to creating indic > NOTE: > - IP is supported for all three protocols > - Only single IP addresses are supported (no CIDR blocks or IP ranges) ->- Encrypted URLs (full path) can only be blocked on first party browsers (Internet Explorer, Edge) ->- Encrypted URLS (FQDN only) can be blocked outside of first party browsers (Internet Explorer, Edge) ->- Full URL path blocks can be applied on the domain level and all unencrypted URLs +> - Encrypted URLs (full path) can only be blocked on first party browsers (Internet Explorer, Edge) +> - Encrypted URLS (FQDN only) can be blocked outside of first party browsers (Internet Explorer, Edge) +> - Full URL path blocks can be applied on the domain level and all unencrypted URLs >[!NOTE] >There may be up to 2 hours of latency (usually less) between the time the action is taken, and the URL and IP being blocked. From 450a5f715b91452bac1d738c28e54fe866a36778 Mon Sep 17 00:00:00 2001 From: Denise Vangel-MSFT Date: Wed, 30 Dec 2020 09:29:45 -0800 Subject: [PATCH 241/486] Update windows/security/threat-protection/microsoft-defender-atp/indicator-ip-domain.md Co-authored-by: Trond B. Krokli <38162891+illfated@users.noreply.github.com> --- .../microsoft-defender-atp/indicator-ip-domain.md | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/windows/security/threat-protection/microsoft-defender-atp/indicator-ip-domain.md b/windows/security/threat-protection/microsoft-defender-atp/indicator-ip-domain.md index f859c87358..bda2d79c6e 100644 --- a/windows/security/threat-protection/microsoft-defender-atp/indicator-ip-domain.md +++ b/windows/security/threat-protection/microsoft-defender-atp/indicator-ip-domain.md @@ -57,7 +57,7 @@ It's important to understand the following prerequisites prior to creating indic > - Encrypted URLS (FQDN only) can be blocked outside of first party browsers (Internet Explorer, Edge) > - Full URL path blocks can be applied on the domain level and all unencrypted URLs ->[!NOTE] +> [!NOTE] >There may be up to 2 hours of latency (usually less) between the time the action is taken, and the URL and IP being blocked. ### Create an indicator for IPs, URLs, or domains from the settings page From 9631e4445d6d9b450ac5ad6287b17c5d61b673c5 Mon Sep 17 00:00:00 2001 From: Denise Vangel-MSFT Date: Wed, 30 Dec 2020 09:33:27 -0800 Subject: [PATCH 242/486] Update windows/security/threat-protection/microsoft-defender-atp/microsoft-cloud-app-security-config.md Co-authored-by: Trond B. Krokli <38162891+illfated@users.noreply.github.com> --- .../microsoft-cloud-app-security-config.md | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/windows/security/threat-protection/microsoft-defender-atp/microsoft-cloud-app-security-config.md b/windows/security/threat-protection/microsoft-defender-atp/microsoft-cloud-app-security-config.md index 869c67e8b9..1ec715c5e8 100644 --- a/windows/security/threat-protection/microsoft-defender-atp/microsoft-cloud-app-security-config.md +++ b/windows/security/threat-protection/microsoft-defender-atp/microsoft-cloud-app-security-config.md @@ -44,7 +44,7 @@ Once activated, Microsoft Defender for Endpoint will immediately start forwardin ## View the data collected -To view and access Microsoft Defender for Endpoint data in Microsoft Cloud Apps Security, see [Investigate devices in Cloud App Security](https://docs.microsoft.com/en-us/cloud-app-security/mde-integration#investigate-devices-in-cloud-app-security). +To view and access Microsoft Defender for Endpoint data in Microsoft Cloud Apps Security, see [Investigate devices in Cloud App Security](https://docs.microsoft.com/cloud-app-security/mde-integration#investigate-devices-in-cloud-app-security). For more information about cloud discovery, see [Working with discovered apps](https://docs.microsoft.com/cloud-app-security/discovered-apps). From 7acaaa73b7b7f31de5a738aba63e0e868619dc51 Mon Sep 17 00:00:00 2001 From: adirdidi <68847945+adirdidi@users.noreply.github.com> Date: Thu, 31 Dec 2020 01:24:20 +0200 Subject: [PATCH 243/486] US Gov page Refreshing the US Gov GCC-H page to be a US Gov all-up (GCC & GCC-H) page. --- .../includes/microsoft-defender-api-usgov.md | 2 +- .../microsoft-defender-atp/gov.md | 145 +++++++++--------- .../microsoft-defender-atp/management-apis.md | 5 +- 3 files changed, 76 insertions(+), 76 deletions(-) diff --git a/windows/security/includes/microsoft-defender-api-usgov.md b/windows/security/includes/microsoft-defender-api-usgov.md index 4fe2a734da..4f58a3d8d5 100644 --- a/windows/security/includes/microsoft-defender-api-usgov.md +++ b/windows/security/includes/microsoft-defender-api-usgov.md @@ -17,4 +17,4 @@ ms.topic: article --- >[!NOTE] ->If you are a US Government customer, please use the URIs listed in [Microsoft Defender for Endpoint for US Government GCC High customers](../threat-protection/microsoft-defender-atp/gov.md#api). +>If you are a US Government customer, please use the URIs listed in [Microsoft Defender for Endpoint for US Government customers](../threat-protection/microsoft-defender-atp/gov.md#api). diff --git a/windows/security/threat-protection/microsoft-defender-atp/gov.md b/windows/security/threat-protection/microsoft-defender-atp/gov.md index 1c89d002cb..eaa72a3c35 100644 --- a/windows/security/threat-protection/microsoft-defender-atp/gov.md +++ b/windows/security/threat-protection/microsoft-defender-atp/gov.md @@ -1,7 +1,7 @@ --- -title: Microsoft Defender ATP for US Government GCC High customers -description: Learn about the requirements and the available Microsoft Defender ATP capabilities for US Government CCC High customers -keywords: government, gcc, high, requirements, capabilities, defender, defender atp, mdatp +title: Microsoft Defender ATP for US Government customers +description: Learn about the requirements and the available Microsoft Defender for Endpoint capabilities for US Government customers +keywords: government, gcc, high, requirements, capabilities, defender, defender atp, mdatp, endpoint, dod search.product: eADQiWindows 10XVcnh search.appverid: met150 ms.prod: w10 @@ -17,87 +17,61 @@ ms.collection: M365-security-compliance ms.topic: conceptual --- -# Microsoft Defender for Endpoint for US Government GCC High customers +# Microsoft Defender for Endpoint for US Government customers [!INCLUDE [Microsoft 365 Defender rebranding](../../includes/microsoft-defender.md)] -**Applies to:** -- [Microsoft Defender for Endpoint](https://go.microsoft.com/fwlink/p/?linkid=2146631) +**Applies to:** [Microsoft Defender for Endpoint](https://go.microsoft.com/fwlink/p/?linkid=2146631) -Microsoft Defender for Endpoint for US Government Community Cloud High (GCC High) customers, built in the US Azure Government environment, uses the same underlying technologies as Defender for Endpoint in Azure Commercial. +Microsoft Defender for Endpoint for US Government customers, built in the US Azure Government environment, uses the same underlying technologies as Defender for Endpoint in Azure Commercial. -This offering is currently available to US Office 365 GCC High customers and is based on the same prevention, detection, investigation, and remediation as the commercial version. However, there are some key differences in the availability of capabilities for this offering. +This offering is currently available to US Microsoft 365 GCC and GCC-High customers and is based on the same prevention, detection, investigation, and remediation as the commercial version. However, there are some differences in the availability of capabilities for this offering. + +> [!NOTE] +> If you are a "GCC on Commercial" customer, please refer to the public documentation pages. ## Endpoint versions + +### Standalone OS versions The following OS versions are supported: -- Windows 10, version 1903 -- Windows 10, version 1809 (OS Build 17763.404 with [KB4490481](https://support.microsoft.com/help/4490481)) -- Windows 10, version 1803 (OS Build 17134.799 with [KB4499183](https://support.microsoft.com/help/4499183)) -- Windows 10, version 1709 (OS Build 16299.1182 with [KB4499147](https://support.microsoft.com/help/4499147)) -- Windows Server, 2019 (with [KB4490481](https://support.microsoft.com/help/4490481)) +OS version | GCC | GCC-H +:---|:---|:--- +Windows 10, version 20H2 (with [KB4586853](https://support.microsoft.com/help/4490481)) | ![Yes](../images/svg/check-yes.svg) | ![Yes](../images/svg/check-yes.svg) +Windows 10, version 2004 - 20H1 (with [KB4586853](https://support.microsoft.com/help/4490481)) | ![Yes](../images/svg/check-yes.svg) | ![Yes](../images/svg/check-yes.svg) +Windows 10, version 1909 - 19H2 (with [KB4586819](https://support.microsoft.com/help/4586819)) | ![Yes](../images/svg/check-yes.svg) | ![Yes](../images/svg/check-yes.svg) +Windows 10, version 1903 - 19H1 (with [KB4586819](https://support.microsoft.com/help/4586819)) | ![Yes](../images/svg/check-yes.svg) | ![Yes](../images/svg/check-yes.svg) +Windows 10, version 1809 - RS5 (with [KB4586839](https://support.microsoft.com/help/4586839)) | ![Yes](../images/svg/check-yes.svg) | ![Yes](../images/svg/check-yes.svg) +Windows 10, version 1803 - RS4 | ![No](../images/svg/check-no.svg)
    Coming soon | ![Yes](../images/svg/check-yes.svg)
    With [KB4499183](https://support.microsoft.com/help/4499183) +Windows 10, version 1709 - RS3 | ![No](../images/svg/check-no.svg)
    Note: Will not be supported | ![Yes](../images/svg/check-yes.svg)
    With [KB4499147](https://support.microsoft.com/help/4499147)
    Note: Will be deprecated, please upgrade +Windows 10, version 1703 - RS2 and below | ![No](../images/svg/check-no.svg)
    Note: Will not be supported | ![No](../images/svg/check-no.svg)
    Note: Will not be supported +Windows Server 2019 (with [KB4586839](https://support.microsoft.com/help/4586839)) | ![Yes](../images/svg/check-yes.svg) | ![Yes](../images/svg/check-yes.svg) +Windows Server 2016 | ![Yes](../images/svg/check-yes.svg) | ![No](../images/svg/check-no.svg) +Windows Server 2012 R2 | ![Yes](../images/svg/check-yes.svg) | ![No](../images/svg/check-no.svg) +Windows Server 2008 R2 SP1 | ![Yes](../images/svg/check-yes.svg) | ![No](../images/svg/check-no.svg) +Windows 8.1 Enterprise | ![Yes](../images/svg/check-yes.svg) | ![No](../images/svg/check-no.svg) +Windows 8 Pro | ![Yes](../images/svg/check-yes.svg) | ![No](../images/svg/check-no.svg)
    Coming soon +Windows 7 SP1 Enterprise | ![Yes](../images/svg/check-yes.svg) | ![No](../images/svg/check-no.svg) +Windows 7 SP1 Pro | ![Yes](../images/svg/check-yes.svg) | ![No](../images/svg/check-no.svg) +Mac OS | ![No](../images/svg/check-no.svg) | ![No](../images/svg/check-no.svg) +Linux | ![No](../images/svg/check-no.svg) | ![No](../images/svg/check-no.svg) +iOS | ![No](../images/svg/check-no.svg) | ![No](../images/svg/check-no.svg) +Android | ![No](../images/svg/check-no.svg) | ![No](../images/svg/check-no.svg) ->[!NOTE] ->A patch must be deployed before device onboarding in order to configure Defender for Endpoint to the correct environment. +> [!NOTE] +> A patch must be deployed before device onboarding in order to configure Defender for Endpoint to the correct environment. -The following OS versions are supported via Azure Security Center: -- Windows Server 2008 R2 SP1 -- Windows Server 2012 R2 -- Windows Server 2016 +### OS versions when using Azure Security Center +The following OS versions are supported when using [Azure Security Center](https://docs.microsoft.com/azure/security-center/security-center-wdatp): -The following OS versions are not supported: -- Windows Server 2008 R2 SP1 (standalone, not via ASC) -- Windows Server 2012 R2 (standalone, not via ASC) -- Windows Server 2016 (standalone, not via ASC) -- Windows Server, version 1803 -- Windows 7 SP1 Enterprise -- Windows 7 SP1 Pro -- Windows 8 Pro -- Windows 8.1 Enterprise -- macOS -- Linux +OS version | GCC | GCC-H +:---|:---|:--- +Windows Server 2016 | ![Yes](../images/svg/check-yes.svg) | ![Yes](../images/svg/check-yes.svg) +Windows Server 2012 R2 | ![Yes](../images/svg/check-yes.svg) | ![Yes](../images/svg/check-yes.svg) +Windows Server 2008 R2 SP1 | ![Yes](../images/svg/check-yes.svg) | ![Yes](../images/svg/check-yes.svg) -The initial release of Defender for Endpoint will not have immediate parity with the commercial offering. While our goal is to deliver all commercial features and functionality to our US Government (GCC High) customers, there are some capabilities not yet available that we'd like to highlight. These are the known gaps as of August 2020: - -## Threat Analytics -Not currently available. - -## Threat & Vulnerability Management -Not currently available. - - -## Automated investigation and remediation -The following capabilities are not currently available: -- Response to Office 365 alerts -- Live response - - - -## Management and APIs -The following capabilities are not currently available: - -- Threat protection report -- Device health and compliance report -- Integration with third-party products - - -## Email notifications -Not currently available. - - -## Integrations -Integrations with the following Microsoft products are not currently available: -- Azure Advanced Threat Protection -- Azure Information Protection -- Defender for Office 365 -- Microsoft Cloud App Security -- Skype for Business -- Microsoft Intune (sharing of device information and enhanced policy enforcement) - -## Microsoft Threat Experts -Not currently available. ## Required connectivity settings You'll need to ensure that traffic from the following are allowed: @@ -105,12 +79,39 @@ You'll need to ensure that traffic from the following are allowed: Service location | DNS record :---|:--- Common URLs for all locations (Global location) | ```crl.microsoft.com```
    ```ctldl.windowsupdate.com```
    ```notify.windows.com```
    ```settings-win.data.microsoft.com```

    NOTE: ```settings-win.data.microsoft.com``` is only needed on Windows 10 devices running version 1803 or earlier. -Defender for Endpoint GCC High specific | ```us4-v20.events.data.microsoft.com```
    ```winatp-gw-usgt.microsoft.com```
    ```winatp-gw-usgv.microsoft.com```
    ```*.blob.core.usgovcloudapi.net``` +Common URLs for all US Gov customers | ```us4-v20.events.data.microsoft.com```
    ```*.blob.core.usgovcloudapi.net``` +Defender for Endpoint GCC specific | ```winatp-gw-usmt.microsoft.com```
    ```winatp-gw-usmv.microsoft.com``` +Defender for Endpoint GCC-High specific | ```winatp-gw-usgt.microsoft.com```
    ```winatp-gw-usgv.microsoft.com``` ## API -- Login endpoint: ```https://login.microsoftonline.us``` +Instead of the public URIs listed in our [API documentation](https://docs.microsoft.com/windows/security/threat-protection/microsoft-defender-atp/apis-intro), you'll need to use the following URIs: -- Microsoft Defender for Endpoint API endpoint: ```https://api-gov.securitycenter.microsoft.us``` +Environment | Login endpoint | Defender for Endpoint API endpoint +:---|:---|:--- +GCC | ```https://login.microsoftonline.com``` | ```https://api-gcc.securitycenter.microsoft.us``` +GCC-H | ```https://login.microsoftonline.us``` | ```https://api-gov.securitycenter.microsoft.us``` +## Feature parity with commercial +Defender for Endpoint do not have complete parity with the commercial offering. While our goal is to deliver all commercial features and functionality to our US Government customers, there are some capabilities not yet available that we'd like to highlight. +These are the known gaps as of January 2021: + +Feature | GCC | GCC-H +:---|:---|:--- +Threat analytics | ![Yes](../images/svg/check-yes.svg) | ![No](../images/svg/check-no.svg) +Threat & vulnerability management | ![Yes](../images/svg/check-yes.svg) | ![No](../images/svg/check-no.svg) +Automated investigation and remediation:
    Response to Office 365 alerts | ![No](../images/svg/check-no.svg) | ![No](../images/svg/check-no.svg) +Automated investigation and remediation:
    Live response | ![Yes](../images/svg/check-yes.svg) | ![No](../images/svg/check-no.svg) +Management and APIs:
    Threat protection report | ![Yes](../images/svg/check-yes.svg) | ![No](../images/svg/check-no.svg) +Management and APIs:
    Device health and compliance report | ![Yes](../images/svg/check-yes.svg) | ![No](../images/svg/check-no.svg) +Management and APIs:
    Integration with third-party products | ![Yes](../images/svg/check-yes.svg) | ![No](../images/svg/check-no.svg) +Email notifications | ![Yes](../images/svg/check-yes.svg) | ![No](../images/svg/check-no.svg) +Integrations:
    Azure Sentinel | ![Yes](../images/svg/check-yes.svg) | ![No](../images/svg/check-no.svg) +Integrations:
    Microsoft Cloud App Security | ![No](../images/svg/check-no.svg) | ![No](../images/svg/check-no.svg) +Integrations:
    Microsoft Defender for Identity | ![No](../images/svg/check-no.svg) | ![No](../images/svg/check-no.svg) +Integrations:
    Microsoft Defender for Office 365 | ![No](../images/svg/check-no.svg) | ![No](../images/svg/check-no.svg) +Integrations:
    Microsoft Endpoint DLP | ![No](../images/svg/check-no.svg) | ![No](../images/svg/check-no.svg) +Integrations:
    Microsoft Intune | ![Yes](../images/svg/check-yes.svg) | ![No](../images/svg/check-no.svg) +Integrations:
    Skype for Business / Teams | ![Yes](../images/svg/check-yes.svg) | ![No](../images/svg/check-no.svg) +Microsoft Threat Experts | ![No](../images/svg/check-no.svg) | ![No](../images/svg/check-no.svg) diff --git a/windows/security/threat-protection/microsoft-defender-atp/management-apis.md b/windows/security/threat-protection/microsoft-defender-atp/management-apis.md index 4be39cf3be..3fae073414 100644 --- a/windows/security/threat-protection/microsoft-defender-atp/management-apis.md +++ b/windows/security/threat-protection/microsoft-defender-atp/management-apis.md @@ -23,10 +23,9 @@ ms.topic: conceptual [!INCLUDE [Microsoft 365 Defender rebranding](../../includes/microsoft-defender.md)] -**Applies to:** -- [Microsoft Defender for Endpoint](https://go.microsoft.com/fwlink/p/?linkid=2146631) +**Applies to:** [Microsoft Defender for Endpoint](https://go.microsoft.com/fwlink/p/?linkid=2146631) ->Want to experience Defender for Endpoint? [Sign up for a free trial.](https://www.microsoft.com/microsoft-365/windows/microsoft-defender-atp?ocid=docs-mgt-apis-abovefoldlink) +- Want to experience Microsoft Defender for Endpoint? [Sign up for a free trial.](https://www.microsoft.com/microsoft-365/windows/microsoft-defender-atp?ocid=docs-wdatp-exposedapis-abovefoldlink) Defender for Endpoint supports a wide variety of options to ensure that customers can easily adopt the platform. From e1409a078ba6fbe581b1da7921ae0bf49959e64c Mon Sep 17 00:00:00 2001 From: adirdidi <68847945+adirdidi@users.noreply.github.com> Date: Thu, 31 Dec 2020 01:31:05 +0200 Subject: [PATCH 244/486] Update gov.md --- .../threat-protection/microsoft-defender-atp/gov.md | 10 +++++----- 1 file changed, 5 insertions(+), 5 deletions(-) diff --git a/windows/security/threat-protection/microsoft-defender-atp/gov.md b/windows/security/threat-protection/microsoft-defender-atp/gov.md index eaa72a3c35..d76b6b5d33 100644 --- a/windows/security/threat-protection/microsoft-defender-atp/gov.md +++ b/windows/security/threat-protection/microsoft-defender-atp/gov.md @@ -26,7 +26,7 @@ ms.topic: conceptual Microsoft Defender for Endpoint for US Government customers, built in the US Azure Government environment, uses the same underlying technologies as Defender for Endpoint in Azure Commercial. -This offering is currently available to US Microsoft 365 GCC and GCC-High customers and is based on the same prevention, detection, investigation, and remediation as the commercial version. However, there are some differences in the availability of capabilities for this offering. +This offering is currently available to Microsoft 365 GCC and GCC-High customers and is based on the same prevention, detection, investigation, and remediation as the commercial version. However, there are some differences in the availability of capabilities for this offering. > [!NOTE] > If you are a "GCC on Commercial" customer, please refer to the public documentation pages. @@ -37,7 +37,7 @@ This offering is currently available to US Microsoft 365 GCC and GCC-High custom ### Standalone OS versions The following OS versions are supported: -OS version | GCC | GCC-H +OS version | GCC | GCC-High :---|:---|:--- Windows 10, version 20H2 (with [KB4586853](https://support.microsoft.com/help/4490481)) | ![Yes](../images/svg/check-yes.svg) | ![Yes](../images/svg/check-yes.svg) Windows 10, version 2004 - 20H1 (with [KB4586853](https://support.microsoft.com/help/4490481)) | ![Yes](../images/svg/check-yes.svg) | ![Yes](../images/svg/check-yes.svg) @@ -66,7 +66,7 @@ Android | ![No](../images/svg/check-no.svg) | ![No](../images/svg/check-no.svg) ### OS versions when using Azure Security Center The following OS versions are supported when using [Azure Security Center](https://docs.microsoft.com/azure/security-center/security-center-wdatp): -OS version | GCC | GCC-H +OS version | GCC | GCC-High :---|:---|:--- Windows Server 2016 | ![Yes](../images/svg/check-yes.svg) | ![Yes](../images/svg/check-yes.svg) Windows Server 2012 R2 | ![Yes](../images/svg/check-yes.svg) | ![Yes](../images/svg/check-yes.svg) @@ -90,14 +90,14 @@ Instead of the public URIs listed in our [API documentation](https://docs.micros Environment | Login endpoint | Defender for Endpoint API endpoint :---|:---|:--- GCC | ```https://login.microsoftonline.com``` | ```https://api-gcc.securitycenter.microsoft.us``` -GCC-H | ```https://login.microsoftonline.us``` | ```https://api-gov.securitycenter.microsoft.us``` +GCC-High | ```https://login.microsoftonline.us``` | ```https://api-gov.securitycenter.microsoft.us``` ## Feature parity with commercial Defender for Endpoint do not have complete parity with the commercial offering. While our goal is to deliver all commercial features and functionality to our US Government customers, there are some capabilities not yet available that we'd like to highlight. These are the known gaps as of January 2021: -Feature | GCC | GCC-H +Feature | GCC | GCC-High :---|:---|:--- Threat analytics | ![Yes](../images/svg/check-yes.svg) | ![No](../images/svg/check-no.svg) Threat & vulnerability management | ![Yes](../images/svg/check-yes.svg) | ![No](../images/svg/check-no.svg) From 0c9e99a9b137a0f266e57c281e3f0c2ac98e58f3 Mon Sep 17 00:00:00 2001 From: adirdidi <68847945+adirdidi@users.noreply.github.com> Date: Thu, 31 Dec 2020 01:32:59 +0200 Subject: [PATCH 245/486] Update gov.md --- .../security/threat-protection/microsoft-defender-atp/gov.md | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/windows/security/threat-protection/microsoft-defender-atp/gov.md b/windows/security/threat-protection/microsoft-defender-atp/gov.md index d76b6b5d33..c231415275 100644 --- a/windows/security/threat-protection/microsoft-defender-atp/gov.md +++ b/windows/security/threat-protection/microsoft-defender-atp/gov.md @@ -52,7 +52,7 @@ Windows Server 2016 | ![Yes](../images/svg/check-yes.svg) | ![No](../images/svg/ Windows Server 2012 R2 | ![Yes](../images/svg/check-yes.svg) | ![No](../images/svg/check-no.svg) Windows Server 2008 R2 SP1 | ![Yes](../images/svg/check-yes.svg) | ![No](../images/svg/check-no.svg) Windows 8.1 Enterprise | ![Yes](../images/svg/check-yes.svg) | ![No](../images/svg/check-no.svg) -Windows 8 Pro | ![Yes](../images/svg/check-yes.svg) | ![No](../images/svg/check-no.svg)
    Coming soon +Windows 8 Pro | ![Yes](../images/svg/check-yes.svg) | ![No](../images/svg/check-no.svg) Windows 7 SP1 Enterprise | ![Yes](../images/svg/check-yes.svg) | ![No](../images/svg/check-no.svg) Windows 7 SP1 Pro | ![Yes](../images/svg/check-yes.svg) | ![No](../images/svg/check-no.svg) Mac OS | ![No](../images/svg/check-no.svg) | ![No](../images/svg/check-no.svg) From fe771ab73598467829e068f8973dd7509634e74b Mon Sep 17 00:00:00 2001 From: Thomas Raya Date: Wed, 30 Dec 2020 15:42:54 -0800 Subject: [PATCH 246/486] Update docfx.json Add "**/*.svg" to build.resource.files --- windows/security/docfx.json | 3 ++- 1 file changed, 2 insertions(+), 1 deletion(-) diff --git a/windows/security/docfx.json b/windows/security/docfx.json index 1998bdf279..a27324310a 100644 --- a/windows/security/docfx.json +++ b/windows/security/docfx.json @@ -21,7 +21,8 @@ "files": [ "**/*.png", "**/*.jpg", - "**/*.gif" + "**/*.gif", + "**/*.svg" ], "exclude": [ "**/obj/**", From 0b158377434d87cd259962582a21804cad9ab7d2 Mon Sep 17 00:00:00 2001 From: Gary Moore Date: Wed, 30 Dec 2020 16:04:34 -0800 Subject: [PATCH 247/486] Corrected presentation of cross references --- .../microsoft-defender-atp/management-apis.md | 6 +++--- 1 file changed, 3 insertions(+), 3 deletions(-) diff --git a/windows/security/threat-protection/microsoft-defender-atp/management-apis.md b/windows/security/threat-protection/microsoft-defender-atp/management-apis.md index 3fae073414..da15adaadf 100644 --- a/windows/security/threat-protection/microsoft-defender-atp/management-apis.md +++ b/windows/security/threat-protection/microsoft-defender-atp/management-apis.md @@ -59,7 +59,7 @@ Defender for Endpoint offers a layered API model exposing data and capabilities Watch this video for a quick overview of Defender for Endpoint's APIs. >[!VIDEO https://www.microsoft.com/en-us/videoplayer/embed/RE4d73M] -The **Investigation API** exposes the richness of Defender for Endpoint - exposing calculated or 'profiled' entities (for example, device, user, and file) and discrete events (for example, process creation and file creation) which typically describes a behavior related to an entity, enabling access to data via investigation interfaces allowing a query-based access to data. For more information, see, [Supported APIs](exposed-apis-list.md). +The **Investigation API** exposes the richness of Defender for Endpoint - exposing calculated or 'profiled' entities (for example, device, user, and file) and discrete events (for example, process creation and file creation) which typically describes a behavior related to an entity, enabling access to data via investigation interfaces allowing a query-based access to data. For more information, see [Supported APIs](exposed-apis-list.md). The **Response API** exposes the ability to take actions in the service and on devices, enabling customers to ingest indicators, manage settings, alert status, as well as take response actions on devices programmatically such as isolate devices from the network, quarantine files, and others. @@ -68,11 +68,11 @@ Defender for Endpoint raw data streaming API provides the ability for customers The Defender for Endpoint event information is pushed directly to Azure storage for long-term data retention, or to Azure Event Hubs for consumption by visualization services or additional data processing engines. -For more information, see, [Raw data streaming API](raw-data-export.md). +For more information, see [Raw data streaming API](raw-data-export.md). ## SIEM API -When you enable security information and event management (SIEM) integration, it allows you to pull detections from Microsoft Defender Security Center using your SIEM solution or by connecting directly to the detections REST API. This activates the SIEM connector access details section with pre-populated values and an application is created under your Azure Active Directory (Azure AD) tenant. For more information, see, [SIEM integration](enable-siem-integration.md) +When you enable security information and event management (SIEM) integration, it allows you to pull detections from Microsoft Defender Security Center using your SIEM solution or by connecting directly to the detections REST API. This activates the SIEM connector access details section with pre-populated values and an application is created under your Azure Active Directory (Azure AD) tenant. For more information, see [SIEM integration](enable-siem-integration.md). ## Related topics - [Access the Microsoft Defender for Endpoint APIs ](apis-intro.md) From 297d24ec242fb63d53166832735077bd90f0a4ee Mon Sep 17 00:00:00 2001 From: adirdidi <68847945+adirdidi@users.noreply.github.com> Date: Thu, 31 Dec 2020 02:21:33 +0200 Subject: [PATCH 248/486] Update gov.md 1. Changing "GCC-High" to "GCC High" (aligning with Office documentation). 2. Some styling changes after reviewing the page design. --- .../microsoft-defender-atp/gov.md | 58 ++++++++++--------- 1 file changed, 31 insertions(+), 27 deletions(-) diff --git a/windows/security/threat-protection/microsoft-defender-atp/gov.md b/windows/security/threat-protection/microsoft-defender-atp/gov.md index c231415275..a9913d65b3 100644 --- a/windows/security/threat-protection/microsoft-defender-atp/gov.md +++ b/windows/security/threat-protection/microsoft-defender-atp/gov.md @@ -26,10 +26,11 @@ ms.topic: conceptual Microsoft Defender for Endpoint for US Government customers, built in the US Azure Government environment, uses the same underlying technologies as Defender for Endpoint in Azure Commercial. -This offering is currently available to Microsoft 365 GCC and GCC-High customers and is based on the same prevention, detection, investigation, and remediation as the commercial version. However, there are some differences in the availability of capabilities for this offering. +This offering is currently available to Microsoft 365 GCC and GCC High customers and is based on the same prevention, detection, investigation, and remediation as the commercial version. However, there are some differences in the availability of capabilities for this offering. > [!NOTE] > If you are a "GCC on Commercial" customer, please refer to the public documentation pages. +
    ## Endpoint versions @@ -37,16 +38,16 @@ This offering is currently available to Microsoft 365 GCC and GCC-High customers ### Standalone OS versions The following OS versions are supported: -OS version | GCC | GCC-High +OS version | GCC | GCC High :---|:---|:--- Windows 10, version 20H2 (with [KB4586853](https://support.microsoft.com/help/4490481)) | ![Yes](../images/svg/check-yes.svg) | ![Yes](../images/svg/check-yes.svg) -Windows 10, version 2004 - 20H1 (with [KB4586853](https://support.microsoft.com/help/4490481)) | ![Yes](../images/svg/check-yes.svg) | ![Yes](../images/svg/check-yes.svg) -Windows 10, version 1909 - 19H2 (with [KB4586819](https://support.microsoft.com/help/4586819)) | ![Yes](../images/svg/check-yes.svg) | ![Yes](../images/svg/check-yes.svg) -Windows 10, version 1903 - 19H1 (with [KB4586819](https://support.microsoft.com/help/4586819)) | ![Yes](../images/svg/check-yes.svg) | ![Yes](../images/svg/check-yes.svg) -Windows 10, version 1809 - RS5 (with [KB4586839](https://support.microsoft.com/help/4586839)) | ![Yes](../images/svg/check-yes.svg) | ![Yes](../images/svg/check-yes.svg) -Windows 10, version 1803 - RS4 | ![No](../images/svg/check-no.svg)
    Coming soon | ![Yes](../images/svg/check-yes.svg)
    With [KB4499183](https://support.microsoft.com/help/4499183) -Windows 10, version 1709 - RS3 | ![No](../images/svg/check-no.svg)
    Note: Will not be supported | ![Yes](../images/svg/check-yes.svg)
    With [KB4499147](https://support.microsoft.com/help/4499147)
    Note: Will be deprecated, please upgrade -Windows 10, version 1703 - RS2 and below | ![No](../images/svg/check-no.svg)
    Note: Will not be supported | ![No](../images/svg/check-no.svg)
    Note: Will not be supported +Windows 10, version 2004 / 20H1 (with [KB4586853](https://support.microsoft.com/help/4490481)) | ![Yes](../images/svg/check-yes.svg) | ![Yes](../images/svg/check-yes.svg) +Windows 10, version 1909 / 19H2 (with [KB4586819](https://support.microsoft.com/help/4586819)) | ![Yes](../images/svg/check-yes.svg) | ![Yes](../images/svg/check-yes.svg) +Windows 10, version 1903 / 19H1 (with [KB4586819](https://support.microsoft.com/help/4586819)) | ![Yes](../images/svg/check-yes.svg) | ![Yes](../images/svg/check-yes.svg) +Windows 10, version 1809 / RS5 (with [KB4586839](https://support.microsoft.com/help/4586839)) | ![Yes](../images/svg/check-yes.svg) | ![Yes](../images/svg/check-yes.svg) +Windows 10, version 1803 / RS4 | ![No](../images/svg/check-no.svg)
    Coming soon | ![Yes](../images/svg/check-yes.svg) With [KB4499183](https://support.microsoft.com/help/4499183) +Windows 10, version 1709 / RS3 | ![No](../images/svg/check-no.svg)
    Note: Will not be supported | ![Yes](../images/svg/check-yes.svg) With [KB4499147](https://support.microsoft.com/help/4499147)
    **Note:** Will be deprecated, please upgrade to a later version +Windows 10, version 1703 / RS2 and below | ![No](../images/svg/check-no.svg)
    Note: Will not be supported | ![No](../images/svg/check-no.svg)
    Note: Will not be supported Windows Server 2019 (with [KB4586839](https://support.microsoft.com/help/4586839)) | ![Yes](../images/svg/check-yes.svg) | ![Yes](../images/svg/check-yes.svg) Windows Server 2016 | ![Yes](../images/svg/check-yes.svg) | ![No](../images/svg/check-no.svg) Windows Server 2012 R2 | ![Yes](../images/svg/check-yes.svg) | ![No](../images/svg/check-no.svg) @@ -66,22 +67,23 @@ Android | ![No](../images/svg/check-no.svg) | ![No](../images/svg/check-no.svg) ### OS versions when using Azure Security Center The following OS versions are supported when using [Azure Security Center](https://docs.microsoft.com/azure/security-center/security-center-wdatp): -OS version | GCC | GCC-High +OS version | GCC | GCC High :---|:---|:--- Windows Server 2016 | ![Yes](../images/svg/check-yes.svg) | ![Yes](../images/svg/check-yes.svg) Windows Server 2012 R2 | ![Yes](../images/svg/check-yes.svg) | ![Yes](../images/svg/check-yes.svg) Windows Server 2008 R2 SP1 | ![Yes](../images/svg/check-yes.svg) | ![Yes](../images/svg/check-yes.svg) - +
    ## Required connectivity settings You'll need to ensure that traffic from the following are allowed: Service location | DNS record :---|:--- -Common URLs for all locations (Global location) | ```crl.microsoft.com```
    ```ctldl.windowsupdate.com```
    ```notify.windows.com```
    ```settings-win.data.microsoft.com```

    NOTE: ```settings-win.data.microsoft.com``` is only needed on Windows 10 devices running version 1803 or earlier. +Common URLs for all locations (Global location) | ```crl.microsoft.com```
    ```ctldl.windowsupdate.com```
    ```notify.windows.com```
    ```settings-win.data.microsoft.com```

    Note: ```settings-win.data.microsoft.com``` is only needed on Windows 10 devices running version 1803 or earlier. Common URLs for all US Gov customers | ```us4-v20.events.data.microsoft.com```
    ```*.blob.core.usgovcloudapi.net``` Defender for Endpoint GCC specific | ```winatp-gw-usmt.microsoft.com```
    ```winatp-gw-usmv.microsoft.com``` -Defender for Endpoint GCC-High specific | ```winatp-gw-usgt.microsoft.com```
    ```winatp-gw-usgv.microsoft.com``` +Defender for Endpoint GCC High specific | ```winatp-gw-usgt.microsoft.com```
    ```winatp-gw-usgv.microsoft.com``` +
    ## API @@ -90,28 +92,30 @@ Instead of the public URIs listed in our [API documentation](https://docs.micros Environment | Login endpoint | Defender for Endpoint API endpoint :---|:---|:--- GCC | ```https://login.microsoftonline.com``` | ```https://api-gcc.securitycenter.microsoft.us``` -GCC-High | ```https://login.microsoftonline.us``` | ```https://api-gov.securitycenter.microsoft.us``` +GCC High | ```https://login.microsoftonline.us``` | ```https://api-gov.securitycenter.microsoft.us``` +
    ## Feature parity with commercial Defender for Endpoint do not have complete parity with the commercial offering. While our goal is to deliver all commercial features and functionality to our US Government customers, there are some capabilities not yet available that we'd like to highlight. + These are the known gaps as of January 2021: -Feature | GCC | GCC-High +Feature name | GCC | GCC High :---|:---|:--- Threat analytics | ![Yes](../images/svg/check-yes.svg) | ![No](../images/svg/check-no.svg) Threat & vulnerability management | ![Yes](../images/svg/check-yes.svg) | ![No](../images/svg/check-no.svg) -Automated investigation and remediation:
    Response to Office 365 alerts | ![No](../images/svg/check-no.svg) | ![No](../images/svg/check-no.svg) -Automated investigation and remediation:
    Live response | ![Yes](../images/svg/check-yes.svg) | ![No](../images/svg/check-no.svg) -Management and APIs:
    Threat protection report | ![Yes](../images/svg/check-yes.svg) | ![No](../images/svg/check-no.svg) -Management and APIs:
    Device health and compliance report | ![Yes](../images/svg/check-yes.svg) | ![No](../images/svg/check-no.svg) -Management and APIs:
    Integration with third-party products | ![Yes](../images/svg/check-yes.svg) | ![No](../images/svg/check-no.svg) +Automated investigation and remediation: Response to Office 365 alerts | ![No](../images/svg/check-no.svg) | ![No](../images/svg/check-no.svg) +Automated investigation and remediation: Live response | ![Yes](../images/svg/check-yes.svg) | ![No](../images/svg/check-no.svg) +Management and APIs: Threat protection report | ![Yes](../images/svg/check-yes.svg) | ![No](../images/svg/check-no.svg) +Management and APIs: Device health and compliance report | ![Yes](../images/svg/check-yes.svg) | ![No](../images/svg/check-no.svg) +Management and APIs: Integration with third-party products | ![Yes](../images/svg/check-yes.svg) | ![No](../images/svg/check-no.svg) Email notifications | ![Yes](../images/svg/check-yes.svg) | ![No](../images/svg/check-no.svg) -Integrations:
    Azure Sentinel | ![Yes](../images/svg/check-yes.svg) | ![No](../images/svg/check-no.svg) -Integrations:
    Microsoft Cloud App Security | ![No](../images/svg/check-no.svg) | ![No](../images/svg/check-no.svg) -Integrations:
    Microsoft Defender for Identity | ![No](../images/svg/check-no.svg) | ![No](../images/svg/check-no.svg) -Integrations:
    Microsoft Defender for Office 365 | ![No](../images/svg/check-no.svg) | ![No](../images/svg/check-no.svg) -Integrations:
    Microsoft Endpoint DLP | ![No](../images/svg/check-no.svg) | ![No](../images/svg/check-no.svg) -Integrations:
    Microsoft Intune | ![Yes](../images/svg/check-yes.svg) | ![No](../images/svg/check-no.svg) -Integrations:
    Skype for Business / Teams | ![Yes](../images/svg/check-yes.svg) | ![No](../images/svg/check-no.svg) +Integrations: Azure Sentinel | ![Yes](../images/svg/check-yes.svg) | ![No](../images/svg/check-no.svg) +Integrations: Microsoft Cloud App Security | ![No](../images/svg/check-no.svg) | ![No](../images/svg/check-no.svg) +Integrations: Microsoft Defender for Identity | ![No](../images/svg/check-no.svg) | ![No](../images/svg/check-no.svg) +Integrations: Microsoft Defender for Office 365 | ![No](../images/svg/check-no.svg) | ![No](../images/svg/check-no.svg) +Integrations: Microsoft Endpoint DLP | ![No](../images/svg/check-no.svg) | ![No](../images/svg/check-no.svg) +Integrations: Microsoft Intune | ![Yes](../images/svg/check-yes.svg) | ![No](../images/svg/check-no.svg) +Integrations: Skype for Business / Teams | ![Yes](../images/svg/check-yes.svg) | ![No](../images/svg/check-no.svg) Microsoft Threat Experts | ![No](../images/svg/check-no.svg) | ![No](../images/svg/check-no.svg) From 2f4113f3db7996e6deb98e47c61568721cd52178 Mon Sep 17 00:00:00 2001 From: adirdidi <68847945+adirdidi@users.noreply.github.com> Date: Thu, 31 Dec 2020 02:26:34 +0200 Subject: [PATCH 249/486] Update gov.md --- .../security/threat-protection/microsoft-defender-atp/gov.md | 3 +++ 1 file changed, 3 insertions(+) diff --git a/windows/security/threat-protection/microsoft-defender-atp/gov.md b/windows/security/threat-protection/microsoft-defender-atp/gov.md index a9913d65b3..f05499abc5 100644 --- a/windows/security/threat-protection/microsoft-defender-atp/gov.md +++ b/windows/security/threat-protection/microsoft-defender-atp/gov.md @@ -72,6 +72,7 @@ OS version | GCC | GCC High Windows Server 2016 | ![Yes](../images/svg/check-yes.svg) | ![Yes](../images/svg/check-yes.svg) Windows Server 2012 R2 | ![Yes](../images/svg/check-yes.svg) | ![Yes](../images/svg/check-yes.svg) Windows Server 2008 R2 SP1 | ![Yes](../images/svg/check-yes.svg) | ![Yes](../images/svg/check-yes.svg) +
    ## Required connectivity settings @@ -83,6 +84,7 @@ Common URLs for all locations (Global location) | ```crl.microsoft.com```
    ``` Common URLs for all US Gov customers | ```us4-v20.events.data.microsoft.com```
    ```*.blob.core.usgovcloudapi.net``` Defender for Endpoint GCC specific | ```winatp-gw-usmt.microsoft.com```
    ```winatp-gw-usmv.microsoft.com``` Defender for Endpoint GCC High specific | ```winatp-gw-usgt.microsoft.com```
    ```winatp-gw-usgv.microsoft.com``` +
    @@ -93,6 +95,7 @@ Environment | Login endpoint | Defender for Endpoint API endpoint :---|:---|:--- GCC | ```https://login.microsoftonline.com``` | ```https://api-gcc.securitycenter.microsoft.us``` GCC High | ```https://login.microsoftonline.us``` | ```https://api-gov.securitycenter.microsoft.us``` +
    From 1ca00337aa342f22618c3568a4dea62360b56801 Mon Sep 17 00:00:00 2001 From: adirdidi <68847945+adirdidi@users.noreply.github.com> Date: Thu, 31 Dec 2020 02:44:49 +0200 Subject: [PATCH 250/486] Update gov.md --- .../security/threat-protection/microsoft-defender-atp/gov.md | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/windows/security/threat-protection/microsoft-defender-atp/gov.md b/windows/security/threat-protection/microsoft-defender-atp/gov.md index f05499abc5..a7e469fb1b 100644 --- a/windows/security/threat-protection/microsoft-defender-atp/gov.md +++ b/windows/security/threat-protection/microsoft-defender-atp/gov.md @@ -46,7 +46,7 @@ Windows 10, version 1909 / 19H2 (with [KB4586819](https://support.microsoft.com/ Windows 10, version 1903 / 19H1 (with [KB4586819](https://support.microsoft.com/help/4586819)) | ![Yes](../images/svg/check-yes.svg) | ![Yes](../images/svg/check-yes.svg) Windows 10, version 1809 / RS5 (with [KB4586839](https://support.microsoft.com/help/4586839)) | ![Yes](../images/svg/check-yes.svg) | ![Yes](../images/svg/check-yes.svg) Windows 10, version 1803 / RS4 | ![No](../images/svg/check-no.svg)
    Coming soon | ![Yes](../images/svg/check-yes.svg) With [KB4499183](https://support.microsoft.com/help/4499183) -Windows 10, version 1709 / RS3 | ![No](../images/svg/check-no.svg)
    Note: Will not be supported | ![Yes](../images/svg/check-yes.svg) With [KB4499147](https://support.microsoft.com/help/4499147)
    **Note:** Will be deprecated, please upgrade to a later version +Windows 10, version 1709 / RS3 | ![No](../images/svg/check-no.svg)
    Note: Will not be supported | ![Yes](../images/svg/check-yes.svg) With [KB4499147](https://support.microsoft.com/help/4499147)
    Note: Will be deprecated, please upgrade Windows 10, version 1703 / RS2 and below | ![No](../images/svg/check-no.svg)
    Note: Will not be supported | ![No](../images/svg/check-no.svg)
    Note: Will not be supported Windows Server 2019 (with [KB4586839](https://support.microsoft.com/help/4586839)) | ![Yes](../images/svg/check-yes.svg) | ![Yes](../images/svg/check-yes.svg) Windows Server 2016 | ![Yes](../images/svg/check-yes.svg) | ![No](../images/svg/check-no.svg) From 81ecb7c4a5be13b6c641002d88e98dfe57b6940d Mon Sep 17 00:00:00 2001 From: adirdidi <68847945+adirdidi@users.noreply.github.com> Date: Thu, 31 Dec 2020 02:50:50 +0200 Subject: [PATCH 251/486] Update gov.md --- .../security/threat-protection/microsoft-defender-atp/gov.md | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/windows/security/threat-protection/microsoft-defender-atp/gov.md b/windows/security/threat-protection/microsoft-defender-atp/gov.md index a7e469fb1b..6c05fa0d30 100644 --- a/windows/security/threat-protection/microsoft-defender-atp/gov.md +++ b/windows/security/threat-protection/microsoft-defender-atp/gov.md @@ -1,5 +1,5 @@ --- -title: Microsoft Defender ATP for US Government customers +title: Microsoft Defender for Endpoint for US Government customers description: Learn about the requirements and the available Microsoft Defender for Endpoint capabilities for US Government customers keywords: government, gcc, high, requirements, capabilities, defender, defender atp, mdatp, endpoint, dod search.product: eADQiWindows 10XVcnh From 792bdbe6e49ee8f6736b0edae6d0209ec5067b17 Mon Sep 17 00:00:00 2001 From: adirdidi <68847945+adirdidi@users.noreply.github.com> Date: Thu, 31 Dec 2020 02:52:46 +0200 Subject: [PATCH 252/486] Update TOC.md Renaming the MDE US Gov page. --- windows/security/threat-protection/TOC.md | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/windows/security/threat-protection/TOC.md b/windows/security/threat-protection/TOC.md index 79487e7cc2..47925e97e7 100644 --- a/windows/security/threat-protection/TOC.md +++ b/windows/security/threat-protection/TOC.md @@ -8,7 +8,7 @@ ### [Data storage and privacy](microsoft-defender-atp/data-storage-privacy.md) ### [Overview of Microsoft Defender Security Center](microsoft-defender-atp/use.md) ### [Portal overview](microsoft-defender-atp/portal-overview.md) -### [Microsoft Defender ATP for US Government Community Cloud High customers](microsoft-defender-atp/gov.md) +### [Microsoft Defender for Endpoint for US Government customers](microsoft-defender-atp/gov.md) ### [Microsoft Defender ATP for non-Windows platforms](microsoft-defender-atp/non-windows.md) ## [Evaluate capabilities](microsoft-defender-atp/evaluation-lab.md) From f5a28ebc99bc3478c571e23d3f659c61062fb169 Mon Sep 17 00:00:00 2001 From: adirdidi <68847945+adirdidi@users.noreply.github.com> Date: Thu, 31 Dec 2020 02:55:18 +0200 Subject: [PATCH 253/486] Update gov.md --- .../security/threat-protection/microsoft-defender-atp/gov.md | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/windows/security/threat-protection/microsoft-defender-atp/gov.md b/windows/security/threat-protection/microsoft-defender-atp/gov.md index 6c05fa0d30..3315f0bd21 100644 --- a/windows/security/threat-protection/microsoft-defender-atp/gov.md +++ b/windows/security/threat-protection/microsoft-defender-atp/gov.md @@ -45,7 +45,7 @@ Windows 10, version 2004 / 20H1 (with [KB4586853](https://support.microsoft.com/ Windows 10, version 1909 / 19H2 (with [KB4586819](https://support.microsoft.com/help/4586819)) | ![Yes](../images/svg/check-yes.svg) | ![Yes](../images/svg/check-yes.svg) Windows 10, version 1903 / 19H1 (with [KB4586819](https://support.microsoft.com/help/4586819)) | ![Yes](../images/svg/check-yes.svg) | ![Yes](../images/svg/check-yes.svg) Windows 10, version 1809 / RS5 (with [KB4586839](https://support.microsoft.com/help/4586839)) | ![Yes](../images/svg/check-yes.svg) | ![Yes](../images/svg/check-yes.svg) -Windows 10, version 1803 / RS4 | ![No](../images/svg/check-no.svg)
    Coming soon | ![Yes](../images/svg/check-yes.svg) With [KB4499183](https://support.microsoft.com/help/4499183) +Windows 10, version 1803 / RS4 | ![No](../images/svg/check-no.svg) Coming soon | ![Yes](../images/svg/check-yes.svg) With [KB4499183](https://support.microsoft.com/help/4499183) Windows 10, version 1709 / RS3 | ![No](../images/svg/check-no.svg)
    Note: Will not be supported | ![Yes](../images/svg/check-yes.svg) With [KB4499147](https://support.microsoft.com/help/4499147)
    Note: Will be deprecated, please upgrade Windows 10, version 1703 / RS2 and below | ![No](../images/svg/check-no.svg)
    Note: Will not be supported | ![No](../images/svg/check-no.svg)
    Note: Will not be supported Windows Server 2019 (with [KB4586839](https://support.microsoft.com/help/4586839)) | ![Yes](../images/svg/check-yes.svg) | ![Yes](../images/svg/check-yes.svg) From 15c1cf1431350e75ccf9b3a294a3263abcdf8dc0 Mon Sep 17 00:00:00 2001 From: adirdidi <68847945+adirdidi@users.noreply.github.com> Date: Thu, 31 Dec 2020 03:16:06 +0200 Subject: [PATCH 254/486] Update gov.md --- .../security/threat-protection/microsoft-defender-atp/gov.md | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/windows/security/threat-protection/microsoft-defender-atp/gov.md b/windows/security/threat-protection/microsoft-defender-atp/gov.md index 3315f0bd21..1d8a960e5e 100644 --- a/windows/security/threat-protection/microsoft-defender-atp/gov.md +++ b/windows/security/threat-protection/microsoft-defender-atp/gov.md @@ -113,7 +113,7 @@ Automated investigation and remediation: Live response | ![Yes](../images/svg/ch Management and APIs: Threat protection report | ![Yes](../images/svg/check-yes.svg) | ![No](../images/svg/check-no.svg) Management and APIs: Device health and compliance report | ![Yes](../images/svg/check-yes.svg) | ![No](../images/svg/check-no.svg) Management and APIs: Integration with third-party products | ![Yes](../images/svg/check-yes.svg) | ![No](../images/svg/check-no.svg) -Email notifications | ![Yes](../images/svg/check-yes.svg) | ![No](../images/svg/check-no.svg) +Email notifications | ![Yes](../images/svg/check-no.svg) Coming soon | ![No](../images/svg/check-no.svg) Integrations: Azure Sentinel | ![Yes](../images/svg/check-yes.svg) | ![No](../images/svg/check-no.svg) Integrations: Microsoft Cloud App Security | ![No](../images/svg/check-no.svg) | ![No](../images/svg/check-no.svg) Integrations: Microsoft Defender for Identity | ![No](../images/svg/check-no.svg) | ![No](../images/svg/check-no.svg) From 0899d50c7138683c81942fb9e0da1866d1206082 Mon Sep 17 00:00:00 2001 From: adirdidi <68847945+adirdidi@users.noreply.github.com> Date: Thu, 31 Dec 2020 03:27:14 +0200 Subject: [PATCH 255/486] Update gov.md --- .../security/threat-protection/microsoft-defender-atp/gov.md | 5 ++++- 1 file changed, 4 insertions(+), 1 deletion(-) diff --git a/windows/security/threat-protection/microsoft-defender-atp/gov.md b/windows/security/threat-protection/microsoft-defender-atp/gov.md index 1d8a960e5e..2f6f4b6d4e 100644 --- a/windows/security/threat-protection/microsoft-defender-atp/gov.md +++ b/windows/security/threat-protection/microsoft-defender-atp/gov.md @@ -112,10 +112,13 @@ Automated investigation and remediation: Response to Office 365 alerts | ![No](. Automated investigation and remediation: Live response | ![Yes](../images/svg/check-yes.svg) | ![No](../images/svg/check-no.svg) Management and APIs: Threat protection report | ![Yes](../images/svg/check-yes.svg) | ![No](../images/svg/check-no.svg) Management and APIs: Device health and compliance report | ![Yes](../images/svg/check-yes.svg) | ![No](../images/svg/check-no.svg) +Management and APIs: Streaming API | ![Yes](../images/svg/check-yes.svg) | ![No](../images/svg/check-no.svg) Management and APIs: Integration with third-party products | ![Yes](../images/svg/check-yes.svg) | ![No](../images/svg/check-no.svg) -Email notifications | ![Yes](../images/svg/check-no.svg) Coming soon | ![No](../images/svg/check-no.svg) +Email notifications | ![No](../images/svg/check-no.svg) Coming soon | ![No](../images/svg/check-no.svg) +Web content filtering | ![No](../images/svg/check-no.svg) Coming soon | ![No](../images/svg/check-no.svg) Integrations: Azure Sentinel | ![Yes](../images/svg/check-yes.svg) | ![No](../images/svg/check-no.svg) Integrations: Microsoft Cloud App Security | ![No](../images/svg/check-no.svg) | ![No](../images/svg/check-no.svg) +Integrations: Microsoft Compliance Center | ![No](../images/svg/check-no.svg) | ![No](../images/svg/check-no.svg) Integrations: Microsoft Defender for Identity | ![No](../images/svg/check-no.svg) | ![No](../images/svg/check-no.svg) Integrations: Microsoft Defender for Office 365 | ![No](../images/svg/check-no.svg) | ![No](../images/svg/check-no.svg) Integrations: Microsoft Endpoint DLP | ![No](../images/svg/check-no.svg) | ![No](../images/svg/check-no.svg) From 8b19472b8a296de6de33f097f1c75403e60981e3 Mon Sep 17 00:00:00 2001 From: Gary Moore Date: Wed, 30 Dec 2020 19:24:25 -0800 Subject: [PATCH 256/486] Replaced triple backticks with single backticks Triple backticks are for creating code blocks with a Copy button and possibly a label for the type of content. Single backticks are for simply formatting text in a fixed-width font for code. --- .../threat-protection/microsoft-defender-atp/gov.md | 12 ++++++------ 1 file changed, 6 insertions(+), 6 deletions(-) diff --git a/windows/security/threat-protection/microsoft-defender-atp/gov.md b/windows/security/threat-protection/microsoft-defender-atp/gov.md index 2f6f4b6d4e..3e44dc54bc 100644 --- a/windows/security/threat-protection/microsoft-defender-atp/gov.md +++ b/windows/security/threat-protection/microsoft-defender-atp/gov.md @@ -80,10 +80,10 @@ You'll need to ensure that traffic from the following are allowed: Service location | DNS record :---|:--- -Common URLs for all locations (Global location) | ```crl.microsoft.com```
    ```ctldl.windowsupdate.com```
    ```notify.windows.com```
    ```settings-win.data.microsoft.com```

    Note: ```settings-win.data.microsoft.com``` is only needed on Windows 10 devices running version 1803 or earlier. -Common URLs for all US Gov customers | ```us4-v20.events.data.microsoft.com```
    ```*.blob.core.usgovcloudapi.net``` -Defender for Endpoint GCC specific | ```winatp-gw-usmt.microsoft.com```
    ```winatp-gw-usmv.microsoft.com``` -Defender for Endpoint GCC High specific | ```winatp-gw-usgt.microsoft.com```
    ```winatp-gw-usgv.microsoft.com``` +Common URLs for all locations (Global location) | `crl.microsoft.com`
    `ctldl.windowsupdate.com`
    `notify.windows.com`
    `settings-win.data.microsoft.com`

    Note: `settings-win.data.microsoft.com` is only needed on Windows 10 devices running version 1803 or earlier. +Common URLs for all US Gov customers | `us4-v20.events.data.microsoft.com`
    `*.blob.core.usgovcloudapi.net` +Defender for Endpoint GCC specific | `winatp-gw-usmt.microsoft.com`
    `winatp-gw-usmv.microsoft.com` +Defender for Endpoint GCC High specific | `winatp-gw-usgt.microsoft.com`
    `winatp-gw-usgv.microsoft.com`
    @@ -93,8 +93,8 @@ Instead of the public URIs listed in our [API documentation](https://docs.micros Environment | Login endpoint | Defender for Endpoint API endpoint :---|:---|:--- -GCC | ```https://login.microsoftonline.com``` | ```https://api-gcc.securitycenter.microsoft.us``` -GCC High | ```https://login.microsoftonline.us``` | ```https://api-gov.securitycenter.microsoft.us``` +GCC | `https://login.microsoftonline.com` | `https://api-gcc.securitycenter.microsoft.us` +GCC High | `https://login.microsoftonline.us` | `https://api-gov.securitycenter.microsoft.us`
    From ddd6f911b4be00144a9377291a00bafd0e0a5d72 Mon Sep 17 00:00:00 2001 From: Gary Moore Date: Wed, 30 Dec 2020 21:31:26 -0800 Subject: [PATCH 257/486] Various fixes for layout and presentation --- .../deployment/deploy-enterprise-licenses.md | 62 ++++++++++++------- 1 file changed, 38 insertions(+), 24 deletions(-) diff --git a/windows/deployment/deploy-enterprise-licenses.md b/windows/deployment/deploy-enterprise-licenses.md index e43658fdb5..5c8586af7c 100644 --- a/windows/deployment/deploy-enterprise-licenses.md +++ b/windows/deployment/deploy-enterprise-licenses.md @@ -26,14 +26,15 @@ This topic describes how to deploy Windows 10 Enterprise E3 or E5 licenses with >* Automatic, non-KMS activation requires Windows 10, version 1803 or later, on a device with a firmware-embedded activation key. >[!IMPORTANT] ->An issue has been identified where devices can lose activation status or be blocked from upgrading to Windows Enterprise if the device is not able to connect to Windows Update. A workaround is to ensure that devices do not have the REG_DWORD present HKLM\SOFTWARE\Policies\Microsoft\Windows\WindowsUpdate\DoNotConnectToWindowsUpdateInternetLocations and set to 1. If this REG_DWORD is present, it must be set to 0.
    +>An issue has been identified where devices can lose activation status or be blocked from upgrading to Windows Enterprise if the device is not able to connect to Windows Update. A workaround is to ensure that devices do not have the REG_DWORD present HKLM\SOFTWARE\Policies\Microsoft\Windows\WindowsUpdate\DoNotConnectToWindowsUpdateInternetLocations and set to 1. If this REG_DWORD is present, it must be set to 0. +> >Also ensure that the Group Policy setting: Computer Configuration > Administrative Templates > Windows Components > Windows Update > "Do not connect to any Windows Update Internet locations" is set to "Disabled". ## Firmware-embedded activation key To determine if the computer has a firmware-embedded activation key, type the following command at an elevated Windows PowerShell prompt -``` +```powershell (Get-WmiObject -query ‘select * from SoftwareLicensingService’).OA3xOriginalProductKey ``` @@ -44,19 +45,28 @@ If the device has a firmware-embedded activation key, it will be displayed in th If you are an EA customer with an existing Office 365 tenant, use the following steps to enable Windows 10 Subscription licenses on your existing tenant: 1. Work with your reseller to place an order for one $0 SKU per user. There are two SKUs available, depending on their current Windows Enterprise SA license: -2. **AAA-51069** - Win10UsrOLSActv Alng MonthlySub Addon E3 -3. **AAA-51068** - Win10UsrOLSActv Alng MonthlySub Addon E5 -4. After placing an order, the OLS admin on the agreement will receive a service activation email, indicating their subscription licenses have been provisioned on the tenant. -5. The admin can now assign subscription licenses to users. ->Use the following process if you need to update contact information and retrigger activation in order to resend the activation email: + - **AAA-51069** - Win10UsrOLSActv Alng MonthlySub Addon E3 + - **AAA-51068** - Win10UsrOLSActv Alng MonthlySub Addon E5 + +1. After placing an order, the OLS admin on the agreement will receive a service activation email, indicating their subscription licenses have been provisioned on the tenant. + +1. The admin can now assign subscription licenses to users. + +Use the following process if you need to update contact information and retrigger activation in order to resend the activation email: 1. Sign in to the [Microsoft Volume Licensing Service Center](https://www.microsoft.com/Licensing/servicecenter/default.aspx). -2. Click on **Subscriptions**. -3. Click on **Online Services Agreement List**. + +2. Click **Subscriptions**. + +3. Click **Online Services Agreement List**. + 4. Enter your agreement number, and then click **Search**. + 5. Click the **Service Name**. + 6. In the **Subscription Contact** section, click the name listed under **Last Name**. + 7. Update the contact information, then click **Update Contact Details**. This will trigger a new email. Also in this article: @@ -91,17 +101,21 @@ Devices must be running Windows 10 Pro, version 1703, and be Azure Active Direct Upon acquisition of Windows 10 subscription has been completed (Windows 10 Business, E3 or E5), customers will receive an email that will provide guidance on how to use Windows as an online service: -![profile](images/al01.png) +> [!div class="mx-imgBorder"] +> ![profile](images/al01.png) The following methods are available to assign licenses: 1. When you have the required Azure AD subscription, [group-based licensing](https://docs.microsoft.com/azure/active-directory/active-directory-licensing-whatis-azure-portal) is the preferred method to assign Enterprise E3 or E5 licenses to users. + 2. You can sign in to portal.office.com and manually assign licenses: ![portal](images/al02.png) 3. You can assign licenses by uploading a spreadsheet. + 4. A per-user [PowerShell scripted method](https://social.technet.microsoft.com/wiki/contents/articles/15905.how-to-use-powershell-to-automatically-assign-licenses-to-your-office-365-users.aspx) of assigning licenses is available. + 5. Organizations can use synchronized [AD groups](https://ronnydejong.com/2015/03/04/assign-ems-licenses-based-on-local-active-directory-group-membership/) to automatically assign licenses. ## Explore the upgrade experience @@ -114,50 +128,50 @@ Users can join a Windows 10 Pro device to Azure AD the first time they start the **To join a device to Azure AD the first time the device is started** -1. During the initial setup, on the **Who owns this PC?** page, select **My organization**, and then click **Next**, as illustrated in **Figure 2**.
    +1. During the initial setup, on the **Who owns this PC?** page, select **My organization**, and then click **Next**, as illustrated in **Figure 2**.

    Who owns this PC? page in Windows 10 setup **Figure 2. The “Who owns this PC?” page in initial Windows 10 setup** -2. On the **Choose how you’ll connect** page, select **Join Azure AD**, and then click **Next**, as illustrated in **Figure 3**.
    +2. On the **Choose how you’ll connect** page, select **Join Azure AD**, and then click **Next**, as illustrated in **Figure 3**.

    Choose how you'll connect - page in Windows 10 setup **Figure 3. The “Choose how you’ll connect” page in initial Windows 10 setup** -3. On the **Let’s get you signed in** page, enter the Azure AD credentials, and then click **Sign in**, as illustrated in **Figure 4**.
    +3. On the **Let’s get you signed in** page, enter the Azure AD credentials, and then click **Sign in**, as illustrated in **Figure 4**.

    Let's get you signed in - page in Windows 10 setup **Figure 4. The “Let’s get you signed in” page in initial Windows 10 setup** -Now the device is Azure AD joined to the company’s subscription. +Now the device is Azure AD–joined to the company’s subscription. **To join a device to Azure AD when the device already has Windows 10 Pro, version 1703 installed and set up** >[!IMPORTANT] >Make sure that the user you're signing in with is **not** a BUILTIN/Administrator. That user cannot use the `+ Connect` button to join a work or school account. -1. Go to **Settings > Accounts > Access work or school**, as illustrated in **Figure 5**.
    +1. Go to **Settings > Accounts > Access work or school**, as illustrated in **Figure 5**.

    Connect to work or school configuration **Figure 5. Connect to work or school configuration in Settings** -2. In **Set up a work or school account**, click **Join this device to Azure Active Directory**, as illustrated in **Figure 6**.
    +2. In **Set up a work or school account**, click **Join this device to Azure Active Directory**, as illustrated in **Figure 6**.

    Set up a work or school account **Figure 6. Set up a work or school account** -3. On the **Let’s get you signed in** page, enter the Azure AD credentials, and then click **Sign in**, as illustrated in **Figure 7**.
    +3. On the **Let’s get you signed in** page, enter the Azure AD credentials, and then click **Sign in**, as illustrated in **Figure 7**.

    Let's get you signed in - dialog box **Figure 7. The “Let’s get you signed in” dialog box** -Now the device is Azure AD joined to the company’s subscription. +Now the device is Azure AD–joined to the company's subscription. ### Step 2: Pro edition activation @@ -165,7 +179,7 @@ Now the device is Azure AD joined to the company’s subscription. >If your device is running Windows 10, version 1803 or later, this step is not needed. From Windows 10, version 1803, the device will automatically activate Windows 10 Enterprise using the firmware-embedded activation key. >If the device is running Windows 10, version 1703 or 1709, then Windows 10 Pro must be successfully activated in **Settings > Update & Security > Activation**, as illustrated in **Figure 7a**. - +

    Windows 10 Pro activated
    Figure 7a - Windows 10 Pro activation in Settings @@ -176,7 +190,7 @@ Windows 10 Pro activation is required before Enterprise E3 or E5 can be enabled Once the device is joined to your Azure AD subscription, the user will sign in by using his or her Azure AD account, as illustrated in **Figure 8**. The Windows 10 Enterprise E3 or E5 license associated with the user will enable Windows 10 Enterprise edition capabilities on the device. -Sign in, Windows 10 +

    Sign in, Windows 10 **Figure 8. Sign in by using Azure AD account** @@ -184,7 +198,7 @@ Once the device is joined to your Azure AD subscription, the user will sign in b You can verify the Windows 10 Enterprise E3 or E5 subscription in **Settings > Update & Security > Activation**, as illustrated in **Figure 9**. - +

    Windows 10 activated and subscription active **Figure 9 - Windows 10 Enterprise subscription in Settings** @@ -218,19 +232,19 @@ Use the following figures to help you troubleshoot when users experience these c - [Figure 10](#win-10-not-activated) (below) illustrates a device on which Windows 10 Pro is not activated, but the Windows 10 Enterprise subscription is active. - +

    Windows 10 not activated and subscription active
    Figure 10 - Windows 10 Pro, version 1703 edition not activated in Settings - [Figure 11](#subscription-not-active) (below) illustrates a device on which Windows 10 Pro is activated, but the Windows 10 Enterprise subscription is lapsed or removed. - +

    Windows 10 activated and subscription not active
    Figure 11 - Windows 10 Enterprise subscription lapsed or removed in Settings - [Figure 12](#win-10-not-activated-subscription-not-active) (below) illustrates a device on which Windows 10 Pro license is not activated and the Windows 10 Enterprise subscription is lapsed or removed. - +

    Windows 10 not activated and subscription not active
    Figure 12 - Windows 10 Pro, version 1703 edition not activated and Windows 10 Enterprise subscription lapsed or removed in Settings From 548b526d6f8bd9dd1113222ffa0fe0d1d168ed23 Mon Sep 17 00:00:00 2001 From: Gary Moore Date: Wed, 30 Dec 2020 21:47:22 -0800 Subject: [PATCH 258/486] Removed 1 of 2 added
    --- windows/deployment/deploy-enterprise-licenses.md | 8 ++++---- 1 file changed, 4 insertions(+), 4 deletions(-) diff --git a/windows/deployment/deploy-enterprise-licenses.md b/windows/deployment/deploy-enterprise-licenses.md index 5c8586af7c..1df6e28c22 100644 --- a/windows/deployment/deploy-enterprise-licenses.md +++ b/windows/deployment/deploy-enterprise-licenses.md @@ -198,7 +198,7 @@ Once the device is joined to your Azure AD subscription, the user will sign in b You can verify the Windows 10 Enterprise E3 or E5 subscription in **Settings > Update & Security > Activation**, as illustrated in **Figure 9**. -

    +
    Windows 10 activated and subscription active **Figure 9 - Windows 10 Enterprise subscription in Settings** @@ -232,19 +232,19 @@ Use the following figures to help you troubleshoot when users experience these c - [Figure 10](#win-10-not-activated) (below) illustrates a device on which Windows 10 Pro is not activated, but the Windows 10 Enterprise subscription is active. -

    +
    Windows 10 not activated and subscription active
    Figure 10 - Windows 10 Pro, version 1703 edition not activated in Settings - [Figure 11](#subscription-not-active) (below) illustrates a device on which Windows 10 Pro is activated, but the Windows 10 Enterprise subscription is lapsed or removed. -

    +
    Windows 10 activated and subscription not active
    Figure 11 - Windows 10 Enterprise subscription lapsed or removed in Settings - [Figure 12](#win-10-not-activated-subscription-not-active) (below) illustrates a device on which Windows 10 Pro license is not activated and the Windows 10 Enterprise subscription is lapsed or removed. -

    +
    Windows 10 not activated and subscription not active
    Figure 12 - Windows 10 Pro, version 1703 edition not activated and Windows 10 Enterprise subscription lapsed or removed in Settings From aa46da2c18060429aa2a22336e81b9eacd3ec160 Mon Sep 17 00:00:00 2001 From: Gary Moore Date: Wed, 30 Dec 2020 22:06:15 -0800 Subject: [PATCH 259/486] Removed additional
    tags --- windows/deployment/deploy-enterprise-licenses.md | 4 ++-- 1 file changed, 2 insertions(+), 2 deletions(-) diff --git a/windows/deployment/deploy-enterprise-licenses.md b/windows/deployment/deploy-enterprise-licenses.md index 0132ec9fbd..d13e8feb57 100644 --- a/windows/deployment/deploy-enterprise-licenses.md +++ b/windows/deployment/deploy-enterprise-licenses.md @@ -179,7 +179,7 @@ Now the device is Azure AD–joined to the company's subscription. >If your device is running Windows 10, version 1803 or later, this step is not needed. From Windows 10, version 1803, the device will automatically activate Windows 10 Enterprise using the firmware-embedded activation key. >If the device is running Windows 10, version 1703 or 1709, then Windows 10 Pro must be successfully activated in **Settings > Update & Security > Activation**, as illustrated in **Figure 7a**. -

    +
    Windows 10 Pro activated
    Figure 7a - Windows 10 Pro activation in Settings @@ -190,7 +190,7 @@ Windows 10 Pro activation is required before Enterprise E3 or E5 can be enabled Once the device is joined to your Azure AD subscription, the user will sign in by using his or her Azure AD account, as illustrated in **Figure 8**. The Windows 10 Enterprise E3 or E5 license associated with the user will enable Windows 10 Enterprise edition capabilities on the device. -

    Sign in, Windows 10 +
    Sign in, Windows 10 **Figure 8. Sign in by using Azure AD account** From ae50018fbe86bfa5f9bda65c3d2a7026e14ed0f7 Mon Sep 17 00:00:00 2001 From: adirdidi <68847945+adirdidi@users.noreply.github.com> Date: Thu, 31 Dec 2020 12:22:54 +0200 Subject: [PATCH 260/486] Update gov.md Deployment of some binaries wasn't completed due to EOY freeze, so changing the affected items as "no, coming soon". --- .../microsoft-defender-atp/gov.md | 24 +++++++++---------- 1 file changed, 12 insertions(+), 12 deletions(-) diff --git a/windows/security/threat-protection/microsoft-defender-atp/gov.md b/windows/security/threat-protection/microsoft-defender-atp/gov.md index 3e44dc54bc..451e710c23 100644 --- a/windows/security/threat-protection/microsoft-defender-atp/gov.md +++ b/windows/security/threat-protection/microsoft-defender-atp/gov.md @@ -49,13 +49,13 @@ Windows 10, version 1803 / RS4 | ![No](../images/svg/check-no.svg) Coming soon | Windows 10, version 1709 / RS3 | ![No](../images/svg/check-no.svg)
    Note: Will not be supported | ![Yes](../images/svg/check-yes.svg) With [KB4499147](https://support.microsoft.com/help/4499147)
    Note: Will be deprecated, please upgrade Windows 10, version 1703 / RS2 and below | ![No](../images/svg/check-no.svg)
    Note: Will not be supported | ![No](../images/svg/check-no.svg)
    Note: Will not be supported Windows Server 2019 (with [KB4586839](https://support.microsoft.com/help/4586839)) | ![Yes](../images/svg/check-yes.svg) | ![Yes](../images/svg/check-yes.svg) -Windows Server 2016 | ![Yes](../images/svg/check-yes.svg) | ![No](../images/svg/check-no.svg) -Windows Server 2012 R2 | ![Yes](../images/svg/check-yes.svg) | ![No](../images/svg/check-no.svg) -Windows Server 2008 R2 SP1 | ![Yes](../images/svg/check-yes.svg) | ![No](../images/svg/check-no.svg) -Windows 8.1 Enterprise | ![Yes](../images/svg/check-yes.svg) | ![No](../images/svg/check-no.svg) -Windows 8 Pro | ![Yes](../images/svg/check-yes.svg) | ![No](../images/svg/check-no.svg) -Windows 7 SP1 Enterprise | ![Yes](../images/svg/check-yes.svg) | ![No](../images/svg/check-no.svg) -Windows 7 SP1 Pro | ![Yes](../images/svg/check-yes.svg) | ![No](../images/svg/check-no.svg) +Windows Server 2016 | ![No](../images/svg/check-no.svg) Coming soon | ![No](../images/svg/check-no.svg) +Windows Server 2012 R2 | ![No](../images/svg/check-no.svg) Coming soon | ![No](../images/svg/check-no.svg) +Windows Server 2008 R2 SP1 | ![No](../images/svg/check-no.svg) Coming soon | ![No](../images/svg/check-no.svg) +Windows 8.1 Enterprise | ![No](../images/svg/check-no.svg) Coming soon | ![No](../images/svg/check-no.svg) +Windows 8 Pro | ![No](../images/svg/check-no.svg) Coming soon | ![No](../images/svg/check-no.svg) +Windows 7 SP1 Enterprise | ![No](../images/svg/check-no.svg) Coming soon | ![No](../images/svg/check-no.svg) +Windows 7 SP1 Pro | ![No](../images/svg/check-no.svg) Coming soon | ![No](../images/svg/check-no.svg) Mac OS | ![No](../images/svg/check-no.svg) | ![No](../images/svg/check-no.svg) Linux | ![No](../images/svg/check-no.svg) | ![No](../images/svg/check-no.svg) iOS | ![No](../images/svg/check-no.svg) | ![No](../images/svg/check-no.svg) @@ -69,9 +69,9 @@ The following OS versions are supported when using [Azure Security Center](https OS version | GCC | GCC High :---|:---|:--- -Windows Server 2016 | ![Yes](../images/svg/check-yes.svg) | ![Yes](../images/svg/check-yes.svg) -Windows Server 2012 R2 | ![Yes](../images/svg/check-yes.svg) | ![Yes](../images/svg/check-yes.svg) -Windows Server 2008 R2 SP1 | ![Yes](../images/svg/check-yes.svg) | ![Yes](../images/svg/check-yes.svg) +Windows Server 2016 | ![No](../images/svg/check-no.svg) Coming soon | ![Yes](../images/svg/check-yes.svg) +Windows Server 2012 R2 | ![No](../images/svg/check-no.svg) Coming soon | ![Yes](../images/svg/check-yes.svg) +Windows Server 2008 R2 SP1 | ![No](../images/svg/check-no.svg) Coming soon | ![Yes](../images/svg/check-yes.svg)
    @@ -112,11 +112,11 @@ Automated investigation and remediation: Response to Office 365 alerts | ![No](. Automated investigation and remediation: Live response | ![Yes](../images/svg/check-yes.svg) | ![No](../images/svg/check-no.svg) Management and APIs: Threat protection report | ![Yes](../images/svg/check-yes.svg) | ![No](../images/svg/check-no.svg) Management and APIs: Device health and compliance report | ![Yes](../images/svg/check-yes.svg) | ![No](../images/svg/check-no.svg) -Management and APIs: Streaming API | ![Yes](../images/svg/check-yes.svg) | ![No](../images/svg/check-no.svg) +Management and APIs: Streaming API | ![No](../images/svg/check-no.svg) Coming soon | ![No](../images/svg/check-no.svg) Management and APIs: Integration with third-party products | ![Yes](../images/svg/check-yes.svg) | ![No](../images/svg/check-no.svg) Email notifications | ![No](../images/svg/check-no.svg) Coming soon | ![No](../images/svg/check-no.svg) Web content filtering | ![No](../images/svg/check-no.svg) Coming soon | ![No](../images/svg/check-no.svg) -Integrations: Azure Sentinel | ![Yes](../images/svg/check-yes.svg) | ![No](../images/svg/check-no.svg) +Integrations: Azure Sentinel | ![No](../images/svg/check-no.svg) Coming soon | ![No](../images/svg/check-no.svg) Integrations: Microsoft Cloud App Security | ![No](../images/svg/check-no.svg) | ![No](../images/svg/check-no.svg) Integrations: Microsoft Compliance Center | ![No](../images/svg/check-no.svg) | ![No](../images/svg/check-no.svg) Integrations: Microsoft Defender for Identity | ![No](../images/svg/check-no.svg) | ![No](../images/svg/check-no.svg) From 58cf400cec82ffb9d8828124d9f1588fb24d98c3 Mon Sep 17 00:00:00 2001 From: adirdidi <68847945+adirdidi@users.noreply.github.com> Date: Thu, 31 Dec 2020 12:34:41 +0200 Subject: [PATCH 261/486] Update gov.md 1. Removed internal releases names. 2. Replaced "Azure Security Center" with "Azure Defender". --- .../microsoft-defender-atp/gov.md | 18 +++++++++--------- 1 file changed, 9 insertions(+), 9 deletions(-) diff --git a/windows/security/threat-protection/microsoft-defender-atp/gov.md b/windows/security/threat-protection/microsoft-defender-atp/gov.md index 451e710c23..5ad7cb822e 100644 --- a/windows/security/threat-protection/microsoft-defender-atp/gov.md +++ b/windows/security/threat-protection/microsoft-defender-atp/gov.md @@ -41,13 +41,13 @@ The following OS versions are supported: OS version | GCC | GCC High :---|:---|:--- Windows 10, version 20H2 (with [KB4586853](https://support.microsoft.com/help/4490481)) | ![Yes](../images/svg/check-yes.svg) | ![Yes](../images/svg/check-yes.svg) -Windows 10, version 2004 / 20H1 (with [KB4586853](https://support.microsoft.com/help/4490481)) | ![Yes](../images/svg/check-yes.svg) | ![Yes](../images/svg/check-yes.svg) -Windows 10, version 1909 / 19H2 (with [KB4586819](https://support.microsoft.com/help/4586819)) | ![Yes](../images/svg/check-yes.svg) | ![Yes](../images/svg/check-yes.svg) -Windows 10, version 1903 / 19H1 (with [KB4586819](https://support.microsoft.com/help/4586819)) | ![Yes](../images/svg/check-yes.svg) | ![Yes](../images/svg/check-yes.svg) -Windows 10, version 1809 / RS5 (with [KB4586839](https://support.microsoft.com/help/4586839)) | ![Yes](../images/svg/check-yes.svg) | ![Yes](../images/svg/check-yes.svg) -Windows 10, version 1803 / RS4 | ![No](../images/svg/check-no.svg) Coming soon | ![Yes](../images/svg/check-yes.svg) With [KB4499183](https://support.microsoft.com/help/4499183) -Windows 10, version 1709 / RS3 | ![No](../images/svg/check-no.svg)
    Note: Will not be supported | ![Yes](../images/svg/check-yes.svg) With [KB4499147](https://support.microsoft.com/help/4499147)
    Note: Will be deprecated, please upgrade -Windows 10, version 1703 / RS2 and below | ![No](../images/svg/check-no.svg)
    Note: Will not be supported | ![No](../images/svg/check-no.svg)
    Note: Will not be supported +Windows 10, version 2004 (with [KB4586853](https://support.microsoft.com/help/4490481)) | ![Yes](../images/svg/check-yes.svg) | ![Yes](../images/svg/check-yes.svg) +Windows 10, version 1909 (with [KB4586819](https://support.microsoft.com/help/4586819)) | ![Yes](../images/svg/check-yes.svg) | ![Yes](../images/svg/check-yes.svg) +Windows 10, version 1903 (with [KB4586819](https://support.microsoft.com/help/4586819)) | ![Yes](../images/svg/check-yes.svg) | ![Yes](../images/svg/check-yes.svg) +Windows 10, version 1809 (with [KB4586839](https://support.microsoft.com/help/4586839)) | ![Yes](../images/svg/check-yes.svg) | ![Yes](../images/svg/check-yes.svg) +Windows 10, version 1803 | ![No](../images/svg/check-no.svg) Coming soon | ![Yes](../images/svg/check-yes.svg) With [KB4499183](https://support.microsoft.com/help/4499183) +Windows 10, version 1709 | ![No](../images/svg/check-no.svg)
    Note: Will not be supported | ![Yes](../images/svg/check-yes.svg) With [KB4499147](https://support.microsoft.com/help/4499147)
    Note: Will be deprecated, please upgrade +Windows 10, version 1703 and earlier | ![No](../images/svg/check-no.svg)
    Note: Will not be supported | ![No](../images/svg/check-no.svg)
    Note: Will not be supported Windows Server 2019 (with [KB4586839](https://support.microsoft.com/help/4586839)) | ![Yes](../images/svg/check-yes.svg) | ![Yes](../images/svg/check-yes.svg) Windows Server 2016 | ![No](../images/svg/check-no.svg) Coming soon | ![No](../images/svg/check-no.svg) Windows Server 2012 R2 | ![No](../images/svg/check-no.svg) Coming soon | ![No](../images/svg/check-no.svg) @@ -64,8 +64,8 @@ Android | ![No](../images/svg/check-no.svg) | ![No](../images/svg/check-no.svg) > [!NOTE] > A patch must be deployed before device onboarding in order to configure Defender for Endpoint to the correct environment. -### OS versions when using Azure Security Center -The following OS versions are supported when using [Azure Security Center](https://docs.microsoft.com/azure/security-center/security-center-wdatp): +### OS versions when using Azure Defender +The following OS versions are supported when using [Azure Defender](https://docs.microsoft.com/azure/security-center/security-center-wdatp): OS version | GCC | GCC High :---|:---|:--- From 3403fc0d96b4e8e6dfc684c3f2f16c7149cc0614 Mon Sep 17 00:00:00 2001 From: AlastairBateman <10553180+AlastairBateman@users.noreply.github.com> Date: Thu, 31 Dec 2020 21:48:19 +1100 Subject: [PATCH 262/486] Fixing a minor typo (Brose -> Browse) --- .../hello-for-business/hello-cert-trust-adfs.md | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/windows/security/identity-protection/hello-for-business/hello-cert-trust-adfs.md b/windows/security/identity-protection/hello-for-business/hello-cert-trust-adfs.md index 8e3e7d4f74..a3f57c0d37 100644 --- a/windows/security/identity-protection/hello-for-business/hello-cert-trust-adfs.md +++ b/windows/security/identity-protection/hello-for-business/hello-cert-trust-adfs.md @@ -41,7 +41,7 @@ Prepare the Active Directory Federation Services deployment by installing and up > [!NOTE] >For AD FS 2019, if Windows Hello for Business with a Hybrid Certificate trust is performed, a known PRT issue exists. You may encounter this error in ADFS Admin event logs: Received invalid Oauth request. The client 'NAME' is forbidden to access the resource with scope 'ugs'. To remediate this error: > -> 1. Launch AD FS management console. Brose to "Services > Scope Descriptions". +> 1. Launch AD FS management console. Browse to "Services > Scope Descriptions". > 2. Right click "Scope Descriptions" and select "Add Scope Description". > 3. Under name type "ugs" and Click Apply > OK. > 4. Launch PowerShell as an administrator. From a85c7462d47057723c37b3f21df76c8fff596521 Mon Sep 17 00:00:00 2001 From: adirdidi <68847945+adirdidi@users.noreply.github.com> Date: Thu, 31 Dec 2020 13:15:54 +0200 Subject: [PATCH 263/486] Update gov.md Added "Evaluation lab" and "Power Automate". --- .../security/threat-protection/microsoft-defender-atp/gov.md | 2 ++ 1 file changed, 2 insertions(+) diff --git a/windows/security/threat-protection/microsoft-defender-atp/gov.md b/windows/security/threat-protection/microsoft-defender-atp/gov.md index 5ad7cb822e..de3dac5feb 100644 --- a/windows/security/threat-protection/microsoft-defender-atp/gov.md +++ b/windows/security/threat-protection/microsoft-defender-atp/gov.md @@ -115,6 +115,7 @@ Management and APIs: Device health and compliance report | ![Yes](../images/svg/ Management and APIs: Streaming API | ![No](../images/svg/check-no.svg) Coming soon | ![No](../images/svg/check-no.svg) Management and APIs: Integration with third-party products | ![Yes](../images/svg/check-yes.svg) | ![No](../images/svg/check-no.svg) Email notifications | ![No](../images/svg/check-no.svg) Coming soon | ![No](../images/svg/check-no.svg) +Evaluation lab | ![Yes](../images/svg/check-yes.svg) | ![No](../images/svg/check-no.svg) Web content filtering | ![No](../images/svg/check-no.svg) Coming soon | ![No](../images/svg/check-no.svg) Integrations: Azure Sentinel | ![No](../images/svg/check-no.svg) Coming soon | ![No](../images/svg/check-no.svg) Integrations: Microsoft Cloud App Security | ![No](../images/svg/check-no.svg) | ![No](../images/svg/check-no.svg) @@ -123,5 +124,6 @@ Integrations: Microsoft Defender for Identity | ![No](../images/svg/check-no.svg Integrations: Microsoft Defender for Office 365 | ![No](../images/svg/check-no.svg) | ![No](../images/svg/check-no.svg) Integrations: Microsoft Endpoint DLP | ![No](../images/svg/check-no.svg) | ![No](../images/svg/check-no.svg) Integrations: Microsoft Intune | ![Yes](../images/svg/check-yes.svg) | ![No](../images/svg/check-no.svg) +Integrations: Microsoft Power Automate & Azure Logic Apps | ![Yes](../images/svg/check-yes.svg) | ![No](../images/svg/check-no.svg) Integrations: Skype for Business / Teams | ![Yes](../images/svg/check-yes.svg) | ![No](../images/svg/check-no.svg) Microsoft Threat Experts | ![No](../images/svg/check-no.svg) | ![No](../images/svg/check-no.svg) From 5b6db45b9df68055c4f18f87f397f20f48c279fc Mon Sep 17 00:00:00 2001 From: adirdidi <68847945+adirdidi@users.noreply.github.com> Date: Thu, 31 Dec 2020 13:18:52 +0200 Subject: [PATCH 264/486] Update gov.md --- .../security/threat-protection/microsoft-defender-atp/gov.md | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/windows/security/threat-protection/microsoft-defender-atp/gov.md b/windows/security/threat-protection/microsoft-defender-atp/gov.md index de3dac5feb..db290589a6 100644 --- a/windows/security/threat-protection/microsoft-defender-atp/gov.md +++ b/windows/security/threat-protection/microsoft-defender-atp/gov.md @@ -124,6 +124,6 @@ Integrations: Microsoft Defender for Identity | ![No](../images/svg/check-no.svg Integrations: Microsoft Defender for Office 365 | ![No](../images/svg/check-no.svg) | ![No](../images/svg/check-no.svg) Integrations: Microsoft Endpoint DLP | ![No](../images/svg/check-no.svg) | ![No](../images/svg/check-no.svg) Integrations: Microsoft Intune | ![Yes](../images/svg/check-yes.svg) | ![No](../images/svg/check-no.svg) -Integrations: Microsoft Power Automate & Azure Logic Apps | ![Yes](../images/svg/check-yes.svg) | ![No](../images/svg/check-no.svg) +Integrations: Microsoft Power Automate & Azure Logic Apps | ![No](../images/svg/check-no.svg) Coming soon | ![No](../images/svg/check-no.svg) Integrations: Skype for Business / Teams | ![Yes](../images/svg/check-yes.svg) | ![No](../images/svg/check-no.svg) Microsoft Threat Experts | ![No](../images/svg/check-no.svg) | ![No](../images/svg/check-no.svg) From a6a485341ba465c01e58149a526f6620019848c8 Mon Sep 17 00:00:00 2001 From: adirdidi <68847945+adirdidi@users.noreply.github.com> Date: Thu, 31 Dec 2020 13:30:15 +0200 Subject: [PATCH 265/486] Update gov.md --- .../security/threat-protection/microsoft-defender-atp/gov.md | 4 ++-- 1 file changed, 2 insertions(+), 2 deletions(-) diff --git a/windows/security/threat-protection/microsoft-defender-atp/gov.md b/windows/security/threat-protection/microsoft-defender-atp/gov.md index db290589a6..71d6de5b4d 100644 --- a/windows/security/threat-protection/microsoft-defender-atp/gov.md +++ b/windows/security/threat-protection/microsoft-defender-atp/gov.md @@ -64,8 +64,8 @@ Android | ![No](../images/svg/check-no.svg) | ![No](../images/svg/check-no.svg) > [!NOTE] > A patch must be deployed before device onboarding in order to configure Defender for Endpoint to the correct environment. -### OS versions when using Azure Defender -The following OS versions are supported when using [Azure Defender](https://docs.microsoft.com/azure/security-center/security-center-wdatp): +### OS versions when using Azure Defender for Servers +The following OS versions are supported when using [Azure Defender for Servers](https://docs.microsoft.com/azure/security-center/security-center-wdatp): OS version | GCC | GCC High :---|:---|:--- From 95c5435faeb9e2f77e12a5366bc848e0b3820588 Mon Sep 17 00:00:00 2001 From: ImranHabib <47118050+joinimran@users.noreply.github.com> Date: Thu, 31 Dec 2020 18:52:49 +0500 Subject: [PATCH 266/486] Addition of note As suggested by the user, the rule Block executable content from email client and webmail, have some different names depending on where we are looking at. Keeping this in view, I have created a PR to add a note for the same. Problem: https://github.com/MicrosoftDocs/windows-itpro-docs/issues/8556 --- .../microsoft-defender-atp/attack-surface-reduction.md | 6 ++++++ 1 file changed, 6 insertions(+) diff --git a/windows/security/threat-protection/microsoft-defender-atp/attack-surface-reduction.md b/windows/security/threat-protection/microsoft-defender-atp/attack-surface-reduction.md index a0586d3024..238b8d7a79 100644 --- a/windows/security/threat-protection/microsoft-defender-atp/attack-surface-reduction.md +++ b/windows/security/threat-protection/microsoft-defender-atp/attack-surface-reduction.md @@ -243,6 +243,12 @@ Microsoft Endpoint Configuration Manager name: `Block executable content from em GUID: `BE9BA2D9-53EA-4CDC-84E5-9B1EEEE46550` +> [!Note] +> The rule **Block executable content from email client and webmail** is also reffered as following. +> Intune (Configuration Profiles): Execution of executable content (exe, dll, ps, js, vbs, etc.) dropped from email (webmail/mail client) (no exceptions) +> Endpoint Manager: Block executable content download from email and webmail clients +> Group Policy: Block executable content from email client and webmail + ### Block executable files from running unless they meet a prevalence, age, or trusted list criterion This rule blocks the following file types from launching unless they meet prevalence or age criteria, or they're in a trusted list or an exclusion list: From f2bcf45ebd366d15b832e6318b4611fc63b8e8cd Mon Sep 17 00:00:00 2001 From: ImranHabib <47118050+joinimran@users.noreply.github.com> Date: Thu, 31 Dec 2020 20:37:11 +0500 Subject: [PATCH 267/486] Update windows/security/threat-protection/microsoft-defender-atp/attack-surface-reduction.md Co-authored-by: Trond B. Krokli <38162891+illfated@users.noreply.github.com> --- .../microsoft-defender-atp/attack-surface-reduction.md | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/windows/security/threat-protection/microsoft-defender-atp/attack-surface-reduction.md b/windows/security/threat-protection/microsoft-defender-atp/attack-surface-reduction.md index 238b8d7a79..90dcfbad85 100644 --- a/windows/security/threat-protection/microsoft-defender-atp/attack-surface-reduction.md +++ b/windows/security/threat-protection/microsoft-defender-atp/attack-surface-reduction.md @@ -244,7 +244,7 @@ Microsoft Endpoint Configuration Manager name: `Block executable content from em GUID: `BE9BA2D9-53EA-4CDC-84E5-9B1EEEE46550` > [!Note] -> The rule **Block executable content from email client and webmail** is also reffered as following. +> The rule **Block executable content from email client and webmail** has the following separate descriptions, depending on which application you use: > Intune (Configuration Profiles): Execution of executable content (exe, dll, ps, js, vbs, etc.) dropped from email (webmail/mail client) (no exceptions) > Endpoint Manager: Block executable content download from email and webmail clients > Group Policy: Block executable content from email client and webmail From cd39eabbee12375fcb736c8ee5a3f657811345b4 Mon Sep 17 00:00:00 2001 From: ImranHabib <47118050+joinimran@users.noreply.github.com> Date: Thu, 31 Dec 2020 21:50:24 +0500 Subject: [PATCH 268/486] Correction in Syntax and addition of domain As mentioned by the user, the domain was not added for cloud-based protection and there was a syntax issue with the smart screen domain. Problem: https://github.com/MicrosoftDocs/windows-itpro-docs/issues/8876 --- .../windows-endpoints-20H2-non-enterprise-editions.md | 9 ++++++--- 1 file changed, 6 insertions(+), 3 deletions(-) diff --git a/windows/privacy/windows-endpoints-20H2-non-enterprise-editions.md b/windows/privacy/windows-endpoints-20H2-non-enterprise-editions.md index 6f82f0ddf4..c19e120272 100644 --- a/windows/privacy/windows-endpoints-20H2-non-enterprise-editions.md +++ b/windows/privacy/windows-endpoints-20H2-non-enterprise-editions.md @@ -107,9 +107,10 @@ The following methodology was used to derive the network endpoints: |||TLSv1.2/HTTPS/HTTP|config.edge.skype.com| |Teams|The following endpoint is used for Microsoft Teams application.|TLSv1.2/HTTPS/HTTP|config.teams.microsoft.com| |Windows Defender|The following endpoint is used for Windows Defender when Cloud-based Protection is enabled|TLSv1.2/HTTPS|wdcp.microsoft.com| -|||HTTPS/HTTP|*smartscreen-prod.microsoft.com| +||||wdcpalt.microsoft.com| +|||HTTPS/HTTP|*.smartscreen-prod.microsoft.com| |||TLSv1.2|definitionupdates.microsoft.com| -||The following endpoints are used for Windows Defender SmartScreen reporting and notifications.|TLSv1.2|*smartscreen.microsoft.com| +||The following endpoints are used for Windows Defender SmartScreen reporting and notifications.|TLSv1.2|*.smartscreen.microsoft.com| |||TLSv1.2/HTTP|checkappexec.microsoft.com| |Windows Spotlight|The following endpoints are used to retrieve Windows Spotlight metadata that describes content, such as references to image locations, as well as suggested apps, Microsoft account notifications, and Windows tips.|TLSv1.2/HTTPS/HTTP|arc.msn.com*| |||TLSv1.2/HTTPS/HTTP|ris.api.iris.microsoft.com| @@ -180,6 +181,7 @@ The following methodology was used to derive the network endpoints: |||TLSv1.2/HTTPS/HTTP|config.edge.skype.com| |Teams|The following endpoint is used for Microsoft Teams application.|TLSv1.2/HTTPS/HTTP|config.teams.microsoft.com| |Windows Defender|The following endpoint is used for Windows Defender when Cloud-based Protection is enabled|TLSv1.2/HTTPS|wdcp.microsoft.com| +||||wdcpalt.microsoft.com| |||HTTPS/HTTP|*smartscreen-prod.microsoft.com| ||The following endpoints are used for Windows Defender SmartScreen reporting and notifications.|TLSv1.2|*smartscreen.microsoft.com| |||TLSv1.2/HTTP|checkappexec.microsoft.com| @@ -245,6 +247,7 @@ The following methodology was used to derive the network endpoints: |||TLSv1.2/HTTPS/HTTP|config.edge.skype.com| |Teams|The following endpoint is used for Microsoft Teams application.|TLSv1.2/HTTPS/HTTP|config.teams.microsoft.com| |Windows Defender|The following endpoint is used for Windows Defender when Cloud-based Protection is enabled|TLSv1.2/HTTPS|wdcp.microsoft.com| +||||wdcpalt.microsoft.com| |||HTTPS/HTTP|*smartscreen-prod.microsoft.com| ||The following endpoints are used for Windows Defender SmartScreen reporting and notifications.|TLSv1.2|*smartscreen.microsoft.com| |||TLSv1.2/HTTP|checkappexec.microsoft.com| @@ -261,4 +264,4 @@ The following methodology was used to derive the network endpoints: |Xbox Live|The following endpoints are used for Xbox Live.| |||TLSv1.2/HTTPS/HTTP|dlassets-ssl.xboxlive.com| |||TLSv1.2/HTTPS|da.xboxservices.com| -| \ No newline at end of file +| From ded8a8e23ca92c7d98cc0cdc6865006ea8031de6 Mon Sep 17 00:00:00 2001 From: AlastairBateman <10553180+AlastairBateman@users.noreply.github.com> Date: Fri, 1 Jan 2021 08:54:05 +1100 Subject: [PATCH 269/486] Added Markdown indentation Co-authored-by: Trond B. Krokli <38162891+illfated@users.noreply.github.com> --- .../hello-for-business/hello-cert-trust-adfs.md | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/windows/security/identity-protection/hello-for-business/hello-cert-trust-adfs.md b/windows/security/identity-protection/hello-for-business/hello-cert-trust-adfs.md index a3f57c0d37..18abc2bc44 100644 --- a/windows/security/identity-protection/hello-for-business/hello-cert-trust-adfs.md +++ b/windows/security/identity-protection/hello-for-business/hello-cert-trust-adfs.md @@ -39,7 +39,7 @@ A new Active Directory Federation Services farm should have a minimum of two fed Prepare the Active Directory Federation Services deployment by installing and updating two Windows Server 2016 Servers. Ensure the update listed below is applied to each server before continuing. > [!NOTE] ->For AD FS 2019, if Windows Hello for Business with a Hybrid Certificate trust is performed, a known PRT issue exists. You may encounter this error in ADFS Admin event logs: Received invalid Oauth request. The client 'NAME' is forbidden to access the resource with scope 'ugs'. To remediate this error: +> For AD FS 2019, if Windows Hello for Business with a Hybrid Certificate trust is performed, a known PRT issue exists. You may encounter this error in ADFS Admin event logs: Received invalid Oauth request. The client 'NAME' is forbidden to access the resource with scope 'ugs'. To remediate this error: > > 1. Launch AD FS management console. Browse to "Services > Scope Descriptions". > 2. Right click "Scope Descriptions" and select "Add Scope Description". From 14708380b48e7428b4e49b4d11e79d692d4180fa Mon Sep 17 00:00:00 2001 From: MaratMussabekov <48041687+MaratMussabekov@users.noreply.github.com> Date: Fri, 1 Jan 2021 13:21:58 +0500 Subject: [PATCH 270/486] Update windows/security/threat-protection/microsoft-defender-atp/indicator-ip-domain.md Co-authored-by: Trond B. Krokli <38162891+illfated@users.noreply.github.com> --- .../microsoft-defender-atp/indicator-ip-domain.md | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/windows/security/threat-protection/microsoft-defender-atp/indicator-ip-domain.md b/windows/security/threat-protection/microsoft-defender-atp/indicator-ip-domain.md index bda2d79c6e..3ed8df33d8 100644 --- a/windows/security/threat-protection/microsoft-defender-atp/indicator-ip-domain.md +++ b/windows/security/threat-protection/microsoft-defender-atp/indicator-ip-domain.md @@ -58,7 +58,7 @@ It's important to understand the following prerequisites prior to creating indic > - Full URL path blocks can be applied on the domain level and all unencrypted URLs > [!NOTE] ->There may be up to 2 hours of latency (usually less) between the time the action is taken, and the URL and IP being blocked. +> There may be up to 2 hours of latency (usually less) between the time the action is taken, and the URL and IP being blocked. ### Create an indicator for IPs, URLs, or domains from the settings page From 10a7156ee97e4595336ddfccdb17a3e9aed68854 Mon Sep 17 00:00:00 2001 From: MaratMussabekov <48041687+MaratMussabekov@users.noreply.github.com> Date: Fri, 1 Jan 2021 13:47:50 +0500 Subject: [PATCH 271/486] Update dg-readiness-tool.md --- .../identity-protection/credential-guard/dg-readiness-tool.md | 4 ++-- 1 file changed, 2 insertions(+), 2 deletions(-) diff --git a/windows/security/identity-protection/credential-guard/dg-readiness-tool.md b/windows/security/identity-protection/credential-guard/dg-readiness-tool.md index e609c9469d..76ff4796bb 100644 --- a/windows/security/identity-protection/credential-guard/dg-readiness-tool.md +++ b/windows/security/identity-protection/credential-guard/dg-readiness-tool.md @@ -732,11 +732,11 @@ function IsDomainController function CheckOSSKU { - $osname = $((gwmi win32_operatingsystem).Name).ToLower() + $osname = $((Get-ComputerInfo).WindowsProductName).ToLower() $_SKUSupported = 0 Log "OSNAME:$osname" $SKUarray = @("Enterprise", "Education", "IoT", "Windows Server") - $HLKAllowed = @("microsoft windows 10 pro") + $HLKAllowed = @("windows 10 pro") foreach ($SKUent in $SKUarray) { if($osname.ToString().Contains($SKUent.ToLower())) From d8a892afa921d0a08022a391754486355dea6b49 Mon Sep 17 00:00:00 2001 From: Peter Upfold Date: Fri, 1 Jan 2021 10:52:08 +0000 Subject: [PATCH 272/486] Fix typo MTD -> MDT --- .../prepare-for-windows-deployment-with-mdt.md | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/windows/deployment/deploy-windows-mdt/prepare-for-windows-deployment-with-mdt.md b/windows/deployment/deploy-windows-mdt/prepare-for-windows-deployment-with-mdt.md index 52246fddfd..c4445493e4 100644 --- a/windows/deployment/deploy-windows-mdt/prepare-for-windows-deployment-with-mdt.md +++ b/windows/deployment/deploy-windows-mdt/prepare-for-windows-deployment-with-mdt.md @@ -81,7 +81,7 @@ The following OU structure is used in this guide. Instructions are provided [bel These steps assume that you have the MDT01 member server running and configured as a domain member server. -On **MTD01**: +On **MDT01**: Visit the [Download and install the Windows ADK](https://go.microsoft.com/fwlink/p/?LinkId=526803) page and download the following items to the **D:\\Downloads\\ADK** folder on MDT01 (you will need to create this folder): - [The Windows ADK for Windows 10](https://go.microsoft.com/fwlink/?linkid=2086042) From ebd3cf2155fe6c6aee87510f5a1590f3ef0427f8 Mon Sep 17 00:00:00 2001 From: ImranHabib <47118050+joinimran@users.noreply.github.com> Date: Fri, 1 Jan 2021 21:02:55 +0500 Subject: [PATCH 273/486] Update windows/security/threat-protection/microsoft-defender-atp/attack-surface-reduction.md Co-authored-by: JohanFreelancer9 <48568725+JohanFreelancer9@users.noreply.github.com> --- .../microsoft-defender-atp/attack-surface-reduction.md | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/windows/security/threat-protection/microsoft-defender-atp/attack-surface-reduction.md b/windows/security/threat-protection/microsoft-defender-atp/attack-surface-reduction.md index 90dcfbad85..9733c8b74f 100644 --- a/windows/security/threat-protection/microsoft-defender-atp/attack-surface-reduction.md +++ b/windows/security/threat-protection/microsoft-defender-atp/attack-surface-reduction.md @@ -243,7 +243,7 @@ Microsoft Endpoint Configuration Manager name: `Block executable content from em GUID: `BE9BA2D9-53EA-4CDC-84E5-9B1EEEE46550` -> [!Note] +> [!NOTE] > The rule **Block executable content from email client and webmail** has the following separate descriptions, depending on which application you use: > Intune (Configuration Profiles): Execution of executable content (exe, dll, ps, js, vbs, etc.) dropped from email (webmail/mail client) (no exceptions) > Endpoint Manager: Block executable content download from email and webmail clients From a722bb8029655ae4834e065fba5ec08ec18bbebe Mon Sep 17 00:00:00 2001 From: ImranHabib <47118050+joinimran@users.noreply.github.com> Date: Fri, 1 Jan 2021 21:03:12 +0500 Subject: [PATCH 274/486] Update windows/security/threat-protection/microsoft-defender-atp/attack-surface-reduction.md Co-authored-by: JohanFreelancer9 <48568725+JohanFreelancer9@users.noreply.github.com> --- .../microsoft-defender-atp/attack-surface-reduction.md | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/windows/security/threat-protection/microsoft-defender-atp/attack-surface-reduction.md b/windows/security/threat-protection/microsoft-defender-atp/attack-surface-reduction.md index 9733c8b74f..43ded78026 100644 --- a/windows/security/threat-protection/microsoft-defender-atp/attack-surface-reduction.md +++ b/windows/security/threat-protection/microsoft-defender-atp/attack-surface-reduction.md @@ -245,7 +245,7 @@ GUID: `BE9BA2D9-53EA-4CDC-84E5-9B1EEEE46550` > [!NOTE] > The rule **Block executable content from email client and webmail** has the following separate descriptions, depending on which application you use: -> Intune (Configuration Profiles): Execution of executable content (exe, dll, ps, js, vbs, etc.) dropped from email (webmail/mail client) (no exceptions) +- > Intune (Configuration Profiles): Execution of executable content (exe, dll, ps, js, vbs, etc.) dropped from email (webmail/mail client) (no exceptions). > Endpoint Manager: Block executable content download from email and webmail clients > Group Policy: Block executable content from email client and webmail From c2a94c61c7c35f76b7b9c49cf583347be2753a5f Mon Sep 17 00:00:00 2001 From: ImranHabib <47118050+joinimran@users.noreply.github.com> Date: Fri, 1 Jan 2021 21:03:24 +0500 Subject: [PATCH 275/486] Update windows/security/threat-protection/microsoft-defender-atp/attack-surface-reduction.md Co-authored-by: JohanFreelancer9 <48568725+JohanFreelancer9@users.noreply.github.com> --- .../microsoft-defender-atp/attack-surface-reduction.md | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/windows/security/threat-protection/microsoft-defender-atp/attack-surface-reduction.md b/windows/security/threat-protection/microsoft-defender-atp/attack-surface-reduction.md index 43ded78026..56bb500c7a 100644 --- a/windows/security/threat-protection/microsoft-defender-atp/attack-surface-reduction.md +++ b/windows/security/threat-protection/microsoft-defender-atp/attack-surface-reduction.md @@ -246,7 +246,7 @@ GUID: `BE9BA2D9-53EA-4CDC-84E5-9B1EEEE46550` > [!NOTE] > The rule **Block executable content from email client and webmail** has the following separate descriptions, depending on which application you use: - > Intune (Configuration Profiles): Execution of executable content (exe, dll, ps, js, vbs, etc.) dropped from email (webmail/mail client) (no exceptions). -> Endpoint Manager: Block executable content download from email and webmail clients +- > Endpoint Manager: Block executable content download from email and webmail clients. > Group Policy: Block executable content from email client and webmail ### Block executable files from running unless they meet a prevalence, age, or trusted list criterion From 161b98ac44b9c011314382518b11f8f3b286262d Mon Sep 17 00:00:00 2001 From: ImranHabib <47118050+joinimran@users.noreply.github.com> Date: Fri, 1 Jan 2021 21:03:33 +0500 Subject: [PATCH 276/486] Update windows/security/threat-protection/microsoft-defender-atp/attack-surface-reduction.md Co-authored-by: JohanFreelancer9 <48568725+JohanFreelancer9@users.noreply.github.com> --- .../microsoft-defender-atp/attack-surface-reduction.md | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/windows/security/threat-protection/microsoft-defender-atp/attack-surface-reduction.md b/windows/security/threat-protection/microsoft-defender-atp/attack-surface-reduction.md index 56bb500c7a..a879459cd9 100644 --- a/windows/security/threat-protection/microsoft-defender-atp/attack-surface-reduction.md +++ b/windows/security/threat-protection/microsoft-defender-atp/attack-surface-reduction.md @@ -247,7 +247,7 @@ GUID: `BE9BA2D9-53EA-4CDC-84E5-9B1EEEE46550` > The rule **Block executable content from email client and webmail** has the following separate descriptions, depending on which application you use: - > Intune (Configuration Profiles): Execution of executable content (exe, dll, ps, js, vbs, etc.) dropped from email (webmail/mail client) (no exceptions). - > Endpoint Manager: Block executable content download from email and webmail clients. -> Group Policy: Block executable content from email client and webmail +- > Group Policy: Block executable content from email client and webmail. ### Block executable files from running unless they meet a prevalence, age, or trusted list criterion From e23d0de48a6fa550f9055ee447a66d0ba1b8dae5 Mon Sep 17 00:00:00 2001 From: ImranHabib <47118050+joinimran@users.noreply.github.com> Date: Fri, 1 Jan 2021 21:03:55 +0500 Subject: [PATCH 277/486] Update windows/security/threat-protection/microsoft-defender-atp/attack-surface-reduction.md Co-authored-by: JohanFreelancer9 <48568725+JohanFreelancer9@users.noreply.github.com> --- .../microsoft-defender-atp/attack-surface-reduction.md | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/windows/security/threat-protection/microsoft-defender-atp/attack-surface-reduction.md b/windows/security/threat-protection/microsoft-defender-atp/attack-surface-reduction.md index a879459cd9..212256ae38 100644 --- a/windows/security/threat-protection/microsoft-defender-atp/attack-surface-reduction.md +++ b/windows/security/threat-protection/microsoft-defender-atp/attack-surface-reduction.md @@ -244,7 +244,7 @@ Microsoft Endpoint Configuration Manager name: `Block executable content from em GUID: `BE9BA2D9-53EA-4CDC-84E5-9B1EEEE46550` > [!NOTE] -> The rule **Block executable content from email client and webmail** has the following separate descriptions, depending on which application you use: +> The rule **Block executable content from email client and webmail** has the following alternative descriptions, depending on which application you use: - > Intune (Configuration Profiles): Execution of executable content (exe, dll, ps, js, vbs, etc.) dropped from email (webmail/mail client) (no exceptions). - > Endpoint Manager: Block executable content download from email and webmail clients. - > Group Policy: Block executable content from email client and webmail. From c3b037390bd0960b5a81bcf4cb3af1958ce31645 Mon Sep 17 00:00:00 2001 From: ImranHabib <47118050+joinimran@users.noreply.github.com> Date: Fri, 1 Jan 2021 21:09:46 +0500 Subject: [PATCH 278/486] Update windows/privacy/windows-endpoints-20H2-non-enterprise-editions.md Co-authored-by: Trond B. Krokli <38162891+illfated@users.noreply.github.com> --- .../privacy/windows-endpoints-20H2-non-enterprise-editions.md | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/windows/privacy/windows-endpoints-20H2-non-enterprise-editions.md b/windows/privacy/windows-endpoints-20H2-non-enterprise-editions.md index c19e120272..946361ac1b 100644 --- a/windows/privacy/windows-endpoints-20H2-non-enterprise-editions.md +++ b/windows/privacy/windows-endpoints-20H2-non-enterprise-editions.md @@ -182,7 +182,7 @@ The following methodology was used to derive the network endpoints: |Teams|The following endpoint is used for Microsoft Teams application.|TLSv1.2/HTTPS/HTTP|config.teams.microsoft.com| |Windows Defender|The following endpoint is used for Windows Defender when Cloud-based Protection is enabled|TLSv1.2/HTTPS|wdcp.microsoft.com| ||||wdcpalt.microsoft.com| -|||HTTPS/HTTP|*smartscreen-prod.microsoft.com| +|||HTTPS/HTTP|*.smartscreen-prod.microsoft.com| ||The following endpoints are used for Windows Defender SmartScreen reporting and notifications.|TLSv1.2|*smartscreen.microsoft.com| |||TLSv1.2/HTTP|checkappexec.microsoft.com| |Windows Spotlight|The following endpoints are used to retrieve Windows Spotlight metadata that describes content, such as references to image locations, as well as suggested apps, Microsoft account notifications, and Windows tips.|TLSv1.2/HTTPS/HTTP|arc.msn.com*| From 324a5a11481e1014aebeb400a77e536ecf6cfd9d Mon Sep 17 00:00:00 2001 From: ImranHabib <47118050+joinimran@users.noreply.github.com> Date: Fri, 1 Jan 2021 21:10:18 +0500 Subject: [PATCH 279/486] Update windows/privacy/windows-endpoints-20H2-non-enterprise-editions.md Co-authored-by: Trond B. Krokli <38162891+illfated@users.noreply.github.com> --- .../privacy/windows-endpoints-20H2-non-enterprise-editions.md | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/windows/privacy/windows-endpoints-20H2-non-enterprise-editions.md b/windows/privacy/windows-endpoints-20H2-non-enterprise-editions.md index 946361ac1b..635f62072e 100644 --- a/windows/privacy/windows-endpoints-20H2-non-enterprise-editions.md +++ b/windows/privacy/windows-endpoints-20H2-non-enterprise-editions.md @@ -248,7 +248,7 @@ The following methodology was used to derive the network endpoints: |Teams|The following endpoint is used for Microsoft Teams application.|TLSv1.2/HTTPS/HTTP|config.teams.microsoft.com| |Windows Defender|The following endpoint is used for Windows Defender when Cloud-based Protection is enabled|TLSv1.2/HTTPS|wdcp.microsoft.com| ||||wdcpalt.microsoft.com| -|||HTTPS/HTTP|*smartscreen-prod.microsoft.com| +|||HTTPS/HTTP|*.smartscreen-prod.microsoft.com| ||The following endpoints are used for Windows Defender SmartScreen reporting and notifications.|TLSv1.2|*smartscreen.microsoft.com| |||TLSv1.2/HTTP|checkappexec.microsoft.com| |Windows Spotlight|The following endpoints are used to retrieve Windows Spotlight metadata that describes content, such as references to image locations, as well as suggested apps, Microsoft account notifications, and Windows tips.|TLSv1.2/HTTPS/HTTP|arc.msn.com*| From edd467581c1a0ddab89d37cdbfaac8955691d959 Mon Sep 17 00:00:00 2001 From: "Trond B. Krokli" <38162891+illfated@users.noreply.github.com> Date: Sat, 2 Jan 2021 07:31:44 +0100 Subject: [PATCH 280/486] MarkDown formatting, whitespace consistency, typos This PR is meant to make it easier for the next editor of this page to start with a known ordered content, with regards to layout formatting, general typos and MarkDown usage. Viewing this content in Rich Diff view, or without the "Hide whitespace changes" feature, might look confusing or disordered. Changes proposed: - MarkDown formatting improvements (incorrect usage/layout corrected and properly formatted) - Whitespace corrections, both for consistency, codestyle, and for easier future editing - Typo corrections and a couple of minor phrasing adjustments for readability & coherency Ref. my comments in PR #8732 and at the end of issue ticket #8548 (regarding incorrect MarkDown code block usage) --- .../hello-hybrid-aadj-sso-cert.md | 242 ++++++++++-------- 1 file changed, 135 insertions(+), 107 deletions(-) diff --git a/windows/security/identity-protection/hello-for-business/hello-hybrid-aadj-sso-cert.md b/windows/security/identity-protection/hello-for-business/hello-hybrid-aadj-sso-cert.md index 95638c7735..e8dc2df8f2 100644 --- a/windows/security/identity-protection/hello-for-business/hello-hybrid-aadj-sso-cert.md +++ b/windows/security/identity-protection/hello-for-business/hello-hybrid-aadj-sso-cert.md @@ -1,7 +1,7 @@ --- title: Using Certificates for AADJ On-premises Single-sign On single sign-on description: If you want to use certificates for on-premises single-sign on for Azure Active Directory joined devices, then follow these additional steps. -keywords: identity, PIN, biometric, Hello, passport, AADJ, SSO, +keywords: identity, PIN, biometric, Hello, passport, AADJ, SSO, ms.prod: w10 ms.mktglfcycl: deploy ms.sitesec: library @@ -14,11 +14,12 @@ ms.collection: M365-identity-device-management ms.topic: article localizationpriority: medium ms.date: 08/19/2018 -ms.reviewer: +ms.reviewer: --- + # Using Certificates for AADJ On-premises Single-sign On -**Applies to** +**Applies to:** - Windows 10 - Azure Active Directory joined - Hybrid Deployment @@ -27,7 +28,7 @@ ms.reviewer: If you plan to use certificates for on-premises single-sign on, then follow these **additional** steps to configure the environment to enroll Windows Hello for Business certificates for Azure AD joined devices. > [!IMPORTANT] -> Ensure you have performed the configurations in [Azure AD joined devices for On-premises Single-Sign On](hello-hybrid-aadj-sso-base.md) before you continue. +> Ensure you have performed the configurations in [Azure AD joined devices for On-premises Single-Sign On](hello-hybrid-aadj-sso-base.md) before you continue. Steps you will perform include: - [Prepare Azure AD Connect](#prepare-azure-ad-connect) @@ -45,7 +46,7 @@ You need to install and configure additional infrastructure to provide Azure AD - A Windows Server 2012 R2 domain joined server that hosts the Network Device Enrollment Services role ### High Availaibilty -The Network Device Enrollment Services (NDES) server role acts as a certificate registration authority. Certificate registration servers enroll certificates on behalf of the user. Users request certificates from the NDES service rather than directly from the issuing certificate authority. +The Network Device Enrollment Services (NDES) server role acts as a certificate registration authority. Certificate registration servers enroll certificates on behalf of the user. Users request certificates from the NDES service rather than directly from the issuing certificate authority. The architecture of the NDES server prevents it from being clustered or load balanced for high availability. To provide high availability, you need to install more than one identically configured NDES servers and use Microsoft Intune to load balance then (in round-robin fashion). @@ -58,14 +59,14 @@ The Network Device Enrollment Service (NDES) server role can issue up to three u If you need to deploy more than three types of certificates to the Azure AD joined device, you need additional NDES servers. Alternatively, consider consolidating certificates templates to reduce the number of certificate templates. ### Network Requirements -All communication occurs securely over port 443. +All communication occurs securely over port 443. ## Prepare Azure AD Connect Successful authentication to on-premises resources using a certificate requires the certificate to provide a hint about the on-premises domain. The hint can be the user's Active Directory distinguished name as the subject of the certificate, or the hint can be the user's user principal name where the suffix matches the Active Directory domain name. Most environments change the user principal name suffix to match the organization's external domain name (or vanity domain), which prevents the user principal name as a hint to locate a domain controller. Therefore, the certificate needs the user's on-premises distinguished name in the subject to properly locate a domain controller. -To include the on-premises distinguished name in the certificate's subject, Azure AD Connect must replicate the Active Directory **distinguishedName** attribute to the Azure Active Directory **onPremisesDistinguishedName** attribute. Azure AD Connect version 1.1.819 includes the proper synchronization rules need to for these attributes. +To include the on-premises distinguished name in the certificate's subject, Azure AD Connect must replicate the Active Directory **distinguishedName** attribute to the Azure Active Directory **onPremisesDistinguishedName** attribute. Azure AD Connect version 1.1.819 includes the proper synchronization rules need to for these attributes. ### Verify AAD Connect version Sign-in to computer running Azure AD Connect with access equivalent to _local administrator_. @@ -100,8 +101,8 @@ Sign-in to a domain controller or management workstation with access equivalent Sign-in to a domain controller or management workstation with access equivalent to _domain administrator_. 1. Open **Active Directory Users and Computers**. -2. Expand the domain node from the navigation pane. -3. Click **Computers** from the navigation pane. Right-click the name of the NDES server that will host the NDES server role. Click **Add to a group...**. +2. Expand the domain node from the navigation pane. +3. Click **Computers** from the navigation pane. Right-click the name of the NDES server that will host the NDES server role. Click **Add to a group...**. 4. Type **NDES Servers** in **Enter the object names to select**. Click **OK**. Click **OK** on the **Active Directory Domain Services** success dialog. > [!NOTE] @@ -118,7 +119,7 @@ Sign-in to a domain controller or management workstation with access equivalent 4. Click **Finish**. > [!IMPORTANT] -> Configuring the service's account password to **Password never expires** may be more convenient, but it presents a security risk. Normal service account passwords should expire in accordance with the organizations user password expiration policy. Create a reminder to change the service account's password two weeks before it will expire. Share the reminder with others that are allowed to change the password to ensure the password is changed before it expires. +> Configuring the service's account password to **Password never expires** may be more convenient, but it presents a security risk. Normal service account passwords should expire in accordance with the organizations user password expiration policy. Create a reminder to change the service account's password two weeks before it will expire. Share the reminder with others that are allowed to change the password to ensure the password is changed before it expires. ### Create the NDES Service User Rights Group Policy object The Group Policy object ensures the NDES Service account has the proper user right assign all the NDES servers in the **NDES Servers** group. As you add new NDES servers to your environment and this group, the service account automatically receives the proper user rights through Group Policy. @@ -135,10 +136,10 @@ Sign-in a domain controller or management workstations with _Domain Admin_ equiv 8. In the content pane, double-click **Allow log on locally**. Select **Define these policy settings** and click **OK**. Click **Add User or Group...**. In the **Add User or Group** dialog box, click **Browse**. In the **Select Users, Computers, Service Accounts, or Groups** dialog box, type **Administrators;Backup Operators;DOMAINNAME\NDESSvc;Users** where **DOMAINNAME** is the NetBios name of the domain (Example CONTOSO\NDESSvc) in **User and group names**. Click **OK** twice. 9. In the content pane, double-click **Log on as a batch job**. Select **Define these policy settings** and click **OK**. Click **Add User or Group...**. In the **Add User or Group** dialog box, click **Browse**. In the **Select Users, Computers, Service Accounts, or Groups** dialog box, type **Administrators;Backup Operators;DOMAINNAME\NDESSvc;Performance Log Users** where **DOMAINNAME** is the NetBios name of the domain (Example CONTOSO\NDESSvc) in **User and group names**. Click **OK** twice. 10. In the content pane, double-click **Log on as a service**. Select **Define these policy settings** and click **OK**. Click **Add User or Group...**. In the **Add User or Group** dialog box, click **Browse**. In the **Select Users, Computers, Service Accounts, or Groups** dialog box, type **NT SERVICE\ALL SERVICES;DOMAINNAME\NDESSvc** where **DOMAINNAME** is the NetBios name of the domain (Example CONTOSO\NDESSvc) in **User and group names**. Click **OK** three times. -11. Close the **Group Policy Management Editor**. +11. Close the **Group Policy Management Editor**. ### Configure security for the NDES Service User Rights Group Policy object -The best way to deploy the **NDES Service User Rights** Group Policy object is to use security group filtering. This enables you to easily manage the computers that receive the Group Policy settings by adding them to a group. +The best way to deploy the **NDES Service User Rights** Group Policy object is to use security group filtering. This enables you to easily manage the computers that receive the Group Policy settings by adding them to a group. Sign-in to a domain controller or management workstation with access equivalent to _domain administrator_. @@ -159,7 +160,7 @@ Sign-in to a domain controller or management workstation with access equivalent 3. In the **Select GPO** dialog box, select **NDES Service User Rights** or the name of the Group Policy object you previously created and click **OK**. > [!IMPORTANT] -> Linking the **NDES Service User Rights** Group Policy object to the domain ensures the Group Policy object is in scope for all computers. However, not all computers will have the policy settings applied to them. Only computers that are members of the **NDES Servers** global security group receive the policy settings. All others computers ignore the Group Policy object. +> Linking the **NDES Service User Rights** Group Policy object to the domain ensures the Group Policy object is in scope for all computers. However, not all computers will have the policy settings applied to them. Only computers that are members of the **NDES Servers** global security group receive the policy settings. All others computers ignore the Group Policy object. ## Prepare Active Directory Certificate Authority You must prepare the public key infrastructure and the issuing certificate authority to support issuing certificates using Microsoft Intune and the Network Devices Enrollment Services (NDES) server role. In this task, you will @@ -177,46 +178,52 @@ When deploying certificates using Microsoft Intune, you have the option of provi Sign-in to the issuing certificate authority with access equivalent to _local administrator_. -1. Open and elevated command prompt. Type the command +1. Open an elevated command prompt and type the following command: ``` certutil -setreg Policy\EditFlags +EDITF_ATTRIBUTEENDDATE ``` -2. Restart the **Active Directory Certificate Services** service. +2. Restart the **Active Directory Certificate Services** service. ### Create an NDES-Intune authentication certificate template -NDES uses a server authentication certificate to authenticate the server endpoint, which encrypts the communication between it and the connecting client. The Intune Certificate Connector uses a client authentication certificate template to authenticate to the certificate registration point. +NDES uses a server authentication certificate to authenticate the server endpoint, which encrypts the communication between it and the connecting client. The Intune Certificate Connector uses a client authentication certificate template to authenticate to the certificate registration point. Sign-in to the issuing certificate authority or management workstations with _Domain Admin_ equivalent credentials. -1. Open the **Certificate Authority** management console. +1. Open the **Certificate Authority** management console. 2. Right-click **Certificate Templates** and click **Manage**. 3. In the **Certificate Template Console**, right-click the **Computer** template in the details pane and click **Duplicate Template**. -4. On the **General** tab, type **NDES-Intune Authentication** in **Template display name**. Adjust the validity and renewal period to meet your enterprise's needs. - **Note:** If you use different template names, you'll need to remember and substitute these names in different portions of the lab. -5. On the **Subject** tab, select **Supply in the request**. -6. On the **Cryptography** tab, validate the **Minimum key size** is **2048**. -7. On the **Security** tab, click **Add**. -8. Type **NDES server** in the **Enter the object names to select** text box and click **OK**. -9. Select **NDES server** from the **Group or users names** list. In the **Permissions for** section, select the **Allow** check box for the **Enroll** permission. Clear the **Allow** check box for the **Enroll** and **Autoenroll** permissions for all other items in the **Group or users names** list if the check boxes are not already cleared. Click **OK**. -10. Click on the **Apply** to save changes and close the console. +4. On the **General** tab, type **NDES-Intune Authentication** in **Template display name**. Adjust the validity and renewal period to meet your enterprise's needs. + + > [!NOTE] + > If you use different template names, you'll need to remember and substitute these names in different portions of the lab. + +5. On the **Subject** tab, select **Supply in the request**. +6. On the **Cryptography** tab, validate the **Minimum key size** is **2048**. +7. On the **Security** tab, click **Add**. +8. Type **NDES server** in the **Enter the object names to select** text box and click **OK**. +9. Select **NDES server** from the **Group or users names** list. In the **Permissions for** section, select the **Allow** check box for the **Enroll** permission. Clear the **Allow** check box for the **Enroll** and **Autoenroll** permissions for all other items in the **Group or users names** list if the check boxes are not already cleared. Click **OK**. +10. Click on the **Apply** to save changes and close the console. ### Create an Azure AD joined Windows Hello for Business authentication certificate template During Windows Hello for Business provisioning, Windows 10 requests an authentication certificate from the Microsoft Intune, which requests the authentication certificate on behalf of the user. This task configures the Windows Hello for Business authentication certificate template. You use the name of the certificate template when configuring the NDES Server. -Sign-in a certificate authority or management workstations with _Domain Admin equivalent_ credentials. +Sign in a certificate authority or management workstations with _Domain Admin equivalent_ credentials. 1. Open the **Certificate Authority** management console. 2. Right-click **Certificate Templates** and click **Manage**. 3. Right-click the **Smartcard Logon** template and choose **Duplicate Template**. 4. On the **Compatibility** tab, clear the **Show resulting changes** check box. Select **Windows Server 2012** or **Windows Server 2012 R2** from the **Certification Authority** list. Select **Windows Server 2012** or **Windows Server 2012 R2** from the **Certification Recipient** list. -5. On the **General** tab, type **AADJ WHFB Authentication** in **Template display name**. Adjust the validity and renewal period to meet your enterprise's needs. - **Note:** If you use different template names, you'll need to remember and substitute these names in different portions of the deployment. -6. On the **Cryptography** tab, select **Key Storage Provider** from the **Provider Category** list. Select **RSA** from the **Algorithm name** list. Type **2048** in the **Minimum key size** text box. Select **SHA256** from the **Request hash** list. +5. On the **General** tab, type **AADJ WHFB Authentication** in **Template display name**. Adjust the validity and renewal period to meet your enterprise's needs. + + > [!NOTE] + > If you use different template names, you'll need to remember and substitute these names in different portions of the deployment. + +6. On the **Cryptography** tab, select **Key Storage Provider** from the **Provider Category** list. Select **RSA** from the **Algorithm name** list. Type **2048** in the **Minimum key size** text box. Select **SHA256** from the **Request hash** list. 7. On the **Extensions** tab, verify the **Application Policies** extension includes **Smart Card Logon**. 8. On the **Subject** tab, select **Supply in the request**. 9. On the **Request Handling** tab, select **Signature and encryption** from the **Purpose** list. Select the **Renew with same key** check box. Select **Enroll subject without requiring any user input**. 10. On the **Security** tab, click **Add**. Type **NDESSvc** in the **Enter the object names to select** text box and click **OK**. -12. Select **NDESSvc** from the **Group or users names** list. In the **Permissions for NDES Servers** section, select the **Allow** check box for the **Read**, **Enroll**. Clear the **Allow** check box for the **Enroll** and **Autoenroll** permissions for all other entries in the **Group or users names** section if the check boxes are not already cleared. Click **OK**. +12. Select **NDESSvc** from the **Group or users names** list. In the **Permissions for NDES Servers** section, select the **Allow** check box for the **Read**, **Enroll**. Clear the **Allow** check box for the **Enroll** and **Autoenroll** permissions for all other entries in the **Group or users names** section if the check boxes are not already cleared. Click **OK**. 13. Close the console. ### Publish certificate templates @@ -231,7 +238,7 @@ Sign-in to the certificate authority or management workstations with an _Enterpr 2. Expand the parent node from the navigation pane. 3. Click **Certificate Templates** in the navigation pane. 4. Right-click the **Certificate Templates** node. Click **New**, and click **Certificate Template** to issue. -5. In the **Enable Certificates Templates** window, select the **NDES-Intune Authentication** and **AADJ WHFB Authentication** templates you created in the previous steps. Click **OK** to publish the selected certificate templates to the certificate authority. +5. In the **Enable Certificates Templates** window, select the **NDES-Intune Authentication** and **AADJ WHFB Authentication** templates you created in the previous steps. Click **OK** to publish the selected certificate templates to the certificate authority. 6. Close the console. ## Install and Configure the NDES Role @@ -250,10 +257,10 @@ Install the Network Device Enrollment Service role on a computer other than the Sign-in to the certificate authority or management workstations with an _Enterprise Admin_ equivalent credentials. 1. Open **Server Manager** on the NDES server. -2. Click **Manage**. Click **Add Roles and Features**. +2. Click **Manage**. Click **Add Roles and Features**. 3. In the **Add Roles and Features Wizard**, on the **Before you begin** page, click **Next**. Select **Role-based or feature-based installation** on the **Select installation type** page. Click **Next**. Click **Select a server from the server pool**. Select the local server from the **Server Pool** list. Click **Next**. ![Server Manager destination server](images/aadjCert/servermanager-destination-server-ndes.png) -4. On the **Select server roles** page, select **Active Directory Certificate Services** from the **Roles** list. +4. On the **Select server roles** page, select **Active Directory Certificate Services** from the **Roles** list. ![Server Manager AD CS Role](images/aadjCert/servermanager-adcs-role.png) Click **Add Features** on the **Add Roles and Feature Wizard** dialog box. Click **Next**. ![Server Manager Add Features](images/aadjcert/serverManager-adcs-add-features.png) @@ -271,7 +278,7 @@ Sign-in to the certificate authority or management workstations with an _Enterpr ![Server Manager Web Server Role](images/aadjcert/servermanager-adcs-webserver-role.png) 9. Click **Install**. When the installation completes, continue with the next procedure. **Do not click Close**. > [!Important] - > The .NET Framework 3.5 is not included in the typical installation. If the server is connected to the Internet, the installation attempts to get the files using Windows Update. If the server is not connected to the Internet, you need to **Specify an alternate source path** such as \:\\Sources\SxS\ + > .NET Framework 3.5 is not included in the typical installation. If the server is connected to the Internet, the installation attempts to get the files using Windows Update. If the server is not connected to the Internet, you need to **Specify an alternate source path** such as \:\\Sources\SxS\ ![.NET Side by Side](images/aadjcert/dotNet35sidebyside.png) ### Configure the NDES service account @@ -280,7 +287,7 @@ This task adds the NDES service account to the local IIS_USRS group. The task a #### Add the NDES service account to the IIS_USRS group Sign-in the NDES server with access equivalent to _local administrator_. -1. Start the **Local Users and Groups** management console (lusrmgr.msc). +1. Start the **Local Users and Groups** management console (`lusrmgr.msc`). 2. Select **Groups** from the navigation pane. Double-click the IIS_IUSRS group. 3. In the **IIS_IUSRS Properties** dialog box, click **Add**. Type **NDESSvc** or the name of your NDES service account. Click **Check Names** to verify the name and then click **OK**. Click **OK** to close the properties dialog box. 4. Close the management console. @@ -289,10 +296,14 @@ Sign-in the NDES server with access equivalent to _local administrator_. Sign-in the NDES server with a access equivalent to _Domain Admins_. 1. Open an elevated command prompt. -2. Type the following command to register the service principal name
    -```setspn -s http/[FqdnOfNdesServer] [DomainName\\NdesServiceAccount]```
    -where **[FqdnOfNdesServer]** is the fully qualified domain name of the NDES server and **[DomainName\NdesServiceAccount]** is the domain name and NDES service account name separated by a backslash (\\). An example of the command looks like the following.
    -```setspn -s http/ndes.corp.contoso.com contoso\ndessvc``` +2. Type the following command to register the service principal name + ``` + setspn -s http/[FqdnOfNdesServer] [DomainName\\NdesServiceAccount] + ``` + where **[FqdnOfNdesServer]** is the fully qualified domain name of the NDES server and **[DomainName\NdesServiceAccount]** is the domain name and NDES service account name separated by a backslash (\\). An example of the command looks like the following: + ``` + setspn -s http/ndes.corp.contoso.com contoso\ndessvc + ``` > [!NOTE] > If you use the same service account for multiple NDES Servers, repeat the following task for each NDES server under which the NDES service runs. @@ -306,16 +317,16 @@ Sign-in a domain controller with a minimum access equivalent to _Domain Admins_. 1. Open **Active Directory Users and Computers** 2. Locate the NDES Service account (NDESSvc). Right-click and select **Properties**. Click the **Delegation** tab. -![NDES Delegation Tab](images/aadjcert/ndessvcdelegationtab.png) + ![NDES Delegation Tab](images/aadjcert/ndessvcdelegationtab.png) 3. Select **Trust this user for delegation to specified services only**. 4. Select **Use any authentication protocol**. 5. Click **Add**. 6. Click **Users or Computers...** Type the name of the _NDES Server_ you use to issue Windows Hello for Business authentication certificates to Azure AD joined devices. From the **Avaiable services** list, select **HOST**. Click **OK**. -![NDES Service delegation to NDES host](images/aadjcert/ndessvcdelegation-host-ndes-spn.png) + ![NDES Service delegation to NDES host](images/aadjcert/ndessvcdelegation-host-ndes-spn.png) 7. Repeat steps 5 and 6 for each NDES server using this service account.8. Click **Add**. 8. Click **Users or computers...** Type the name of the issuing certificate authority this NDES service account uses to issue Windows Hello for Business authentication certificates to Azure AD joined devices. From the **Available services** list, select **dcom**. Hold the **CTRL** key and select **HOST**. Click **OK**. 9. Repeat steps 8 and 9 for each issuing certificate authority from which one or more NDES servers request certificates. -![NDES Service delegation complete](images/aadjcert/ndessvcdelegation-host-ca-spn.png) + ![NDES Service delegation complete](images/aadjcert/ndessvcdelegation-host-ca-spn.png) 10. Click **OK**. Close **Active Directory Users and Computers**. ### Configure the NDES Role and Certificate Templates @@ -325,61 +336,65 @@ This task configures the NDES role and the certificate templates the NDES server Sign-in to the certificate authority or management workstations with an _Enterprise Admin_ equivalent credentials. > [!NOTE] -> If you closed Server Manger from the last set of tasks, start Server Manager and click the action flag that shows a yellow exclamation point. +> If you closed Server Manger from the last set of tasks, start Server Manager and click the action flag that shows a yellow exclamation point. ![Server Manager Post-Install Yellow flag](images/aadjcert/servermanager-post-ndes-yellowactionflag.png) 1. Click the **Configure Active Directory Certificate Services on the destination server** link. 2. On the **Credentials** page, click **Next**. -![NDES Installation Credentials](images/aadjcert/ndesconfig01.png) + ![NDES Installation Credentials](images/aadjcert/ndesconfig01.png) 3. On the **Role Services** page, select **Network Device Enrollment Service** and then click **Next** -![NDES Role Services](images/aadjcert/ndesconfig02.png) + ![NDES Role Services](images/aadjcert/ndesconfig02.png) 4. On the **Service Account for NDES** page, select **Specify service account (recommended)**. Click **Select...** Type the user name and password for the NDES service account in the **Windows Security** dialog box. Click **Next**. -![NDES Service Account for NDES](images/aadjcert/ndesconfig03b.png) + ![NDES Service Account for NDES](images/aadjcert/ndesconfig03b.png) 5. On the **CA for NDES** page, select **CA name**. Click **Select...**. Select the issuing certificate authority from which the NDES server requests certificates. Click **Next**. -![NDES CA selection](images/aadjcert/ndesconfig04.png) + ![NDES CA selection](images/aadjcert/ndesconfig04.png) 6. On the **RA Information**, click **Next**. 7. On the **Cryptography for NDES** page, click **Next**. 8. Review the **Confirmation** page. Click **Configure**. -![NDES Confirmation](images/aadjcert/ndesconfig05.png) + ![NDES Confirmation](images/aadjcert/ndesconfig05.png) 8. Click **Close** after the configuration completes. #### Configure Certificate Templates on NDES -A single NDES server can request a maximum of three certificate template. The NDES server determines which certificate to issue based on the incoming certificate request that is assigned in the Microsoft Intune SCEP certificate profile. The Microsoft Intune SCEP certificate profile has three values. +A single NDES server can request a maximum of three certificate template. The NDES server determines which certificate to issue based on the incoming certificate request that is assigned in the Microsoft Intune SCEP certificate profile. The Microsoft Intune SCEP certificate profile has three values. * Digital Signature * Key Encipherment * Key Encipherment, Digital Signature Each value maps to a registry value name in the NDES server. The NDES server translate an incoming SCEP provide value into the correspond certificate template. The table belows shows the SCEP profile value to the NDES certificate template registry value name -|SCEP Profile Key usage| NDES Registry Value Name| -|:----------:|:-----------------------:| -|Digital Signature|SignatureTemplate| -|Key Encipherment|EncryptionTemplate| -|Key Encipherment
    Digital Signature|GeneralPurposeTemplate| +| SCEP Profile Key usage| NDES Registry Value Name | +| :-------------------: | :----------------------: | +| Digital Signature | SignatureTemplate | +| Key Encipherment | EncryptionTemplate | +| Key Encipherment
    Digital Signature | GeneralPurposeTemplate | Ideally, you should match the certificate request with registry value name to keep the configuration intuitive (encryption certificates use the encryptionTemplate, signature certificates use the signature template, etc.). A result of this intuitive design is the potential exponential growth in NDES server. Imagine an organization that needs to issue nine unique signature certificates across their enterprise. - If the need arises, you can configure a signature certificate in the encryption registry value name or an encryption certificate in the signature registry value to maximize the use of your NDES infrastructure. This unintuitive design requires current and accurate documentation of the configuration to ensure the SCEP certificate profile is configured to enroll the correct certificate, regardless of the actual purpose. Each organization needs to balance ease of configuration and administration with additional NDES infrastructure and the management overhead that comes with it. +If the need arises, you can configure a signature certificate in the encryption registry value name or an encryption certificate in the signature registry value to maximize the use of your NDES infrastructure. This unintuitive design requires current and accurate documentation of the configuration to ensure the SCEP certificate profile is configured to enroll the correct certificate, regardless of the actual purpose. Each organization needs to balance ease of configuration and administration with additional NDES infrastructure and the management overhead that comes with it. Sign-in to the NDES Server with _local administrator_ equivalent credentials. 1. Open an elevated command prompt. 2. Using the table above, decide which registry value name you will use to request Windows Hello for Business authentication certificates for Azure AD joined devices. -3. Type the following command
    -```reg add HKLM\Software\Microsoft\Cryptography\MSCEP /v [registryValueName] /t REG_SZ /d [certificateTemplateName]```
    -where **registryValueName** is one of the three value names from the above table and where **certificateTemplateName** is the name of the certificate template you created for Windows Hello for Business Azure AD joined devices. Example:
    -```reg add HKLM\Software\Microsoft\Cryptography\MSCEP /v SignatureTemplate /t REG_SZ /d AADJWHFBAuthentication```
    +3. Type the following command: + ``` + reg add HKLM\Software\Microsoft\Cryptography\MSCEP /v [registryValueName] /t REG_SZ /d [certificateTemplateName] + ``` + where **registryValueName** is one of the three value names from the above table and where **certificateTemplateName** is the name of the certificate template you created for Windows Hello for Business Azure AD joined devices. Example: + ``` + reg add HKLM\Software\Microsoft\Cryptography\MSCEP /v SignatureTemplate /t REG_SZ /d AADJWHFBAuthentication + ``` 4. Type **Y** when the command asks for permission to overwrite the existing value. 5. Close the command prompt. > [!IMPORTANT] -> Use the **name** of the certificate template; not the **display name**. The certificate template name does not include spaces. You can view the certificate names by looking at the **General** tab of the certificate template's properties in the **Certificates Templates** management console (certtmpl.msc). +> Use the **name** of the certificate template; not the **display name**. The certificate template name does not include spaces. You can view the certificate names by looking at the **General** tab of the certificate template's properties in the **Certificates Templates** management console (`certtmpl.msc`). ### Create a Web Application Proxy for the internal NDES URL. Certificate enrollment for Azure AD joined devices occurs over the Internet. As a result, the internal NDES URLs must be accessible externally. You can do this easily and securely using Azure Active Directory Application Proxy. Azure AD Application Proxy provides single sign-on and secure remote access for web applications hosted on-premises, such as Network Device Enrollment Services. -Ideally, you configure your Microsoft Intune SCEP certificate profile to use multiple external NDES URLs. This enables Microsoft Intune to round-robin load balance the certificate requests to identically configured NDES Servers (each NDES server can accommodate approximately 300 concurrent requests). Microsoft Intune sends these requests to Azure AD Application Proxies. +Ideally, you configure your Microsoft Intune SCEP certificate profile to use multiple external NDES URLs. This enables Microsoft Intune to round-robin load balance the certificate requests to identically configured NDES Servers (each NDES server can accommodate approximately 300 concurrent requests). Microsoft Intune sends these requests to Azure AD Application Proxies. Azure AD Application proxies are serviced by lightweight Application Proxy Connector agents. These agents are installed on your on-premises, domain joined devices and make authenticated secure outbound connection to Azure, waiting to process requests from Azure AD Application Proxies. You can create connector groups in Azure Active Directory to assign specific connectors to service specific applications. @@ -395,7 +410,7 @@ Sign-in a workstation with access equivalent to a _domain user_. ![Azure Application Proxy Connectors](images/aadjcert/azureconsole-applicationproxy-connectors-empty.png) 5. Sign-in the computer that will run the connector with access equivalent to a _domain user_. > [!IMPORTANT] - > Install a minimum of two Azure Active Directory Proxy connectors for each NDES Application Proxy. Strategtically locate Azure AD application proxy connectors throughout your organization to ensure maximum availablity. Remember, devices running the connector must be able to communicate with Azure and the on-premises NDES servers. + > Install a minimum of two Azure Active Directory Proxy connectors for each NDES Application Proxy. Strategically locate Azure AD application proxy connectors throughout your organization to ensure maximum availability. Remember, devices running the connector must be able to communicate with Azure and the on-premises NDES servers. 6. Start **AADApplicationProxyConnectorInstaller.exe**. 7. Read the license terms and then select **I agree to the license terms and conditions**. Click **Install**. @@ -412,9 +427,9 @@ Sign-in a workstation with access equivalent to a _domain user_. 1. Sign-in to the [Azure Portal](https://portal.azure.com/) with access equivalent to **Global Administrator**. 2. Select **All Services**. Type **Azure Active Directory** to filter the list of services. Under **SERVICES**, Click **Azure Active Directory**. 3. Under **MANAGE**, click **Application proxy**. -![Azure Application Proxy Connector groups](images/aadjcert/azureconsole-applicationproxy-connectors-default.png) + ![Azure Application Proxy Connector groups](images/aadjcert/azureconsole-applicationproxy-connectors-default.png) 4. Click **New Connector Group**. Under **Name**, type **NDES WHFB Connectors**. -![Azure Application New Connector Group](images/aadjcert/azureconsole-applicationproxy-connectors-newconnectorgroup.png) + ![Azure Application New Connector Group](images/aadjcert/azureconsole-applicationproxy-connectors-newconnectorgroup.png) 5. Select each connector agent in the **Connectors** list that will service Windows Hello for Business certificate enrollment requests. 6. Click **Save**. @@ -426,18 +441,18 @@ Sign-in a workstation with access equivalent to a _domain user_. 3. Under **MANAGE**, click **Application proxy**. 4. Click **Configure an app**. 5. Under **Basic Settings** next to **Name**, type **WHFB NDES 01**. Choose a name that correlates this Azure AD Application Proxy setting with the on-premises NDES server. Each NDES server must have its own Azure AD Application Proxy as two NDES servers cannot share the same internal URL. -6. Next to **Internal Url**, type the internal, fully qualified DNS name of the NDES server associated with this Azure AD Application Proxy. For example, https://ndes.corp.mstepdemo.net). You need to match the primary host name (AD Computer Account name) of the NDES server, and prefix the URL with **https**. -7. Under **Internal Url**, select **https://** from the first list. In the text box next to **https://**, type the hostname you want to use as your external hostname for the Azure AD Application Proxy. In the list next to the hostname you typed, select a DNS suffix you want to use externally for the Azure AD Application Proxy. It is recommended to use the default, -[tenantName].msapproxy.net where **[tenantName]** is your current Azure Active Directory tenant name (-mstephendemo.msappproxy.net). +6. Next to **Internal URL**, type the internal, fully qualified DNS name of the NDES server associated with this Azure AD Application Proxy. For example, https://ndes.corp.mstepdemo.net). You need to match the primary host name (AD Computer Account name) of the NDES server, and prefix the URL with **https**. +7. Under **Internal URL**, select **https://** from the first list. In the text box next to **https://**, type the hostname you want to use as your external hostname for the Azure AD Application Proxy. In the list next to the hostname you typed, select a DNS suffix you want to use externally for the Azure AD Application Proxy. It is recommended to use the default, -[tenantName].msapproxy.net where **[tenantName]** is your current Azure Active Directory tenant name (-mstephendemo.msappproxy.net). ![Azure NDES Application Proxy Configuration](images/aadjcert/azureconsole-appproxyconfig.png) 8. Select **Passthrough** from the **Pre Authentication** list. 9. Select **NDES WHFB Connectors** from the **Connector Group** list. 10. Under **Additional Settings**, select **Default** from **Backend Application Timeout**. Under the **Translate URLLs In** section, select **Yes** next to **Headers** and select **No** next to **Application Body**. 11. Click **Add**. 12. Sign-out of the Azure Portal. + > [!IMPORTANT] > Write down the internal and external URLs. You will need this information when you enroll the NDES-Intune Authentication certificate. - ### Enroll the NDES-Intune Authentication certificate This task enrolls a client and server authentication certificate used by the Intune connector and the NDES server. @@ -449,8 +464,8 @@ Sign-in the NDES server with access equivalent to _local administrators_. 4. Click **Next** on the **Before You Begin** page. 5. Click **Next** on the **Select Certificate Enrollment Policy** page. 6. On the **Request Certificates** page, Select the **NDES-Intune Authentication** check box. -7. Click the **More information is required to enroll for this certificate. Click here to configure settings** link - ![Example of Certificate Properties Subject Tab - This is what shows when you click the above link](images/aadjcert/ndes-TLS-Cert-Enroll-subjectNameWithExternalName.png) +7. Click the **More information is required to enroll for this certificate. Click here to configure settings** link + ![Example of Certificate Properties Subject Tab - This is what shows when you click the above link](images/aadjcert/ndes-TLS-Cert-Enroll-subjectNameWithExternalName.png) 8. Under **Subject name**, select **Common Name** from the **Type** list. Type the internal URL used in the previous task (without the https://, for example **ndes.corp.mstepdemo.net**) and then click **Add**. 9. Under **Alternative name**, select **DNS** from the **Type** list. Type the internal URL used in the previous task (without the https://, for example **ndes.corp.mstepdemo.net**). Click **Add**. Type the external URL used in the previous task (without the https://, for example **ndes-mstephendemo.msappproxy.net**). Click **Add**. Click **OK** when finished. 9. Click **Enroll** @@ -462,44 +477,46 @@ This task configures the Web Server role on the NDES server to use the server au Sign-in the NDES server with access equivalent to _local administrator_. 1. Start **Internet Information Services (IIS) Manager** from **Administrative Tools**. -2. Expand the node that has the name of the NDES server. Expand **Sites** and select **Default Web Site**. -![NDES IIS Console](images/aadjcert/ndes-iis-console.png) +2. Expand the node that has the name of the NDES server. Expand **Sites** and select **Default Web Site**. + ![NDES IIS Console](images/aadjcert/ndes-iis-console.png) 3. Click **Bindings...*** under **Actions**. Click **Add**. -![NDES IIS Console](images/aadjcert/ndes-iis-bindings.png) + ![NDES IIS Console](images/aadjcert/ndes-iis-bindings.png) 4. Select **https** from **Type**. Confirm the value for **Port** is **443**. 5. Select the certificate you previously enrolled from the **SSL certificate** list. Select **OK**. -![NDES IIS Console](images/aadjcert/ndes-iis-bindings-add-443.png) -6. Select **http** from the **Site Bindings** list. Click **Remove**. + ![NDES IIS Console](images/aadjcert/ndes-iis-bindings-add-443.png) +6. Select **http** from the **Site Bindings** list. Click **Remove**. 7. Click **Close** on the **Site Bindings** dialog box. -8. Close **Internet Information Services (IIS) Manager**. +8. Close **Internet Information Services (IIS) Manager**. ### Verify the configuration This task confirms the TLS configuration for the NDES server. Sign-in the NDES server with access equivalent to _local administrator_. -#### Disable Internet Explorer Enhanced Security Configuration +#### Disable Internet Explorer Enhanced Security Configuration 1. Open **Server Manager**. Click **Local Server** from the navigation pane. 2. Click **On** next to **IE Enhanced Security Configuration** in the **Properties** section. 3. In the **Internet Explorer Enhanced Security Configuration** dialog, under **Administrators**, select **Off**. Click **OK**. 4. Close **Server Manager**. #### Test the NDES web server -1. Open **Internet Explorer**. -2. In the navigation bar, type -```https://[fqdnHostName]/certsrv/mscep/mscep.dll``` -where **[fqdnHostName]** is the fully qualified internal DNS host name of the NDES server. +1. Open **Internet Explorer**. +2. In the navigation bar, type + ``` + https://[fqdnHostName]/certsrv/mscep/mscep.dll + ``` + where **[fqdnHostName]** is the fully qualified internal DNS host name of the NDES server. A web page similar to the following should appear in your web browser. If you do not see similar page, or you get a **503 Service unavailable**, ensure the NDES Service account as the proper user rights. You can also review the application event log for events with the **NetworkDeviceEnrollmentSerice** source. ![NDES IIS Console](images/aadjcert/ndes-https-website-test-01.png) -Confirm the web site uses the server authentication certificate. +Confirm the web site uses the server authentication certificate. ![NDES IIS Console](images/aadjcert/ndes-https-website-test-01-show-cert.png) ## Configure Network Device Enrollment Services to work with Microsoft Intune -You have successfully configured the Network Device Enrollment Services. You must now modify the configuration to work with the Intune Certificate Connector. In this task, you will enable the NDES server and http.sys to handle long URLs. +You have successfully configured the Network Device Enrollment Services. You must now modify the configuration to work with the Intune Certificate Connector. In this task, you will enable the NDES server and http.sys to handle long URLs. - Configure NDES to support long URLs @@ -510,7 +527,7 @@ Sign-in the NDES server with access equivalent to _local administrator_. 1. Start **Internet Information Services (IIS) Manager** from **Administrative Tools**. 2. Expand the node that has the name of the NDES server. Expand **Sites** and select **Default Web Site**. 3. In the content pane, double-click **Request Filtering**. Click **Edit Feature Settings...** in the action pane. -![Intune NDES Request filtering](images/aadjcert/NDES-IIS-RequestFiltering.png) + ![Intune NDES Request filtering](images/aadjcert/NDES-IIS-RequestFiltering.png) 4. Select **Allow unlisted file name extensions**. 5. Select **Allow unlisted verbs**. 6. Select **Allow high-bit characters**. @@ -521,21 +538,23 @@ Sign-in the NDES server with access equivalent to _local administrator_. #### Configure Parameters for HTTP.SYS 1. Open an elevated command prompt. -2. Run the following commands
    -```reg add HKLM\SYSTEM\CurrentControlSet\Services\HTTP\Parameters /v MaxFieldLength /t REG_DWORD /d 65534```
    -```reg add HKLM\SYSTEM\CurrentControlSet\Services\HTTP\Parameters /v MaxRequestBytes /t REG_DWORD /d 65534```
    +2. Run the following commands: + ``` + reg add HKLM\SYSTEM\CurrentControlSet\Services\HTTP\Parameters /v MaxFieldLength /t REG_DWORD /d 65534 + reg add HKLM\SYSTEM\CurrentControlSet\Services\HTTP\Parameters /v MaxRequestBytes /t REG_DWORD /d 65534 + ``` 3. Restart the NDES server. ## Download, Install and Configure the Intune Certificate Connector -The Intune Certificate Connector application enables Microsoft Intune to enroll certificates using your on-premises PKI for users on devices managed by Microsoft Intune. +The Intune Certificate Connector application enables Microsoft Intune to enroll certificates using your on-premises PKI for users on devices managed by Microsoft Intune. -### Download Intune Certificate Connector +### Download Intune Certificate Connector Sign-in a workstation with access equivalent to a _domain user_. 1. Sign-in to the [Microsoft Endpoint Manager admin center](https://endpoint.microsoft.com/). 2. Select **Tenant administration** > **Connectors and tokens** > **Certificate connectors** > **Add**. 3. Click **Download the certificate connector software** under the **Install Certificate Connectors** section. -![Intune Certificate Authority](images/aadjcert/profile01.png) + ![Intune Certificate Authority](images/aadjcert/profile01.png) 4. Save the downloaded file (NDESConnectorSetup.exe) to a location accessible from the NDES server. 5. Sign-out of the Microsoft Endpoint Manager admin center. @@ -544,30 +563,33 @@ Sign-in the NDES server with access equivalent to _domain administrator_. 1. Copy the Intune Certificate Connector Setup (NDESConnectorSetup.exe) downloaded in the previous task locally to the NDES server. 2. Run **NDESConnectorSetup.exe** as an administrator. If the setup shows a dialog that reads **Microsoft Intune NDES Connector requires HTTP Activation**, ensure you started the application as an administrator, then check HTTP Activation is enabled on the NDES server. -3. On the **Microsoft Intune** page, click **Next**. +3. On the **Microsoft Intune** page, click **Next**. ![Intune Connector Install 01](images/aadjcert/intunecertconnectorinstall-01.png) 4. Read the **End User License Agreement**. Click **Next** to accept the agreement and to proceed with the installation. 5. On the **Destination Folder** page, click **Next**. 6. On the **Installation Options** page, select **SCEP and PFX Profile Distribution** and click **Next**. ![Intune Connector Install 03](images/aadjcert/intunecertconnectorinstall-03.png) -7. On the **Client certificate for Microsoft Intune** page, Click **Select**. Select the certificate previously enrolled for the NDES server. Click **Next**. +7. On the **Client certificate for Microsoft Intune** page, Click **Select**. Select the certificate previously enrolled for the NDES server. Click **Next**. ![Intune Connector Install 05](images/aadjcert/intunecertconnectorinstall-05.png) + > [!NOTE] > The **Client certificate for Microsoft Intune** page does not update after selecting the client authentication certificate. However, the application rembers the selection and shows it in the next page. 8. On the **Client certificate for the NDES Policy Module** page, verify the certificate information and then click **Next**. 9. ON the **Ready to install Microsoft Intune Connector** page. Click **Install**. ![Intune Connector Install 06](images/aadjcert/intunecertconnectorinstall-06.png) + > [!NOTE] > You can review the results of the install using the **SetupMsi.log** file located in the **C:\\NDESConnectorSetupMsi** folder -10. When the installation completes, select **Launch Intune Connector** and click Finish. Proceed to the Configure the Intune Certificate Connector task. +10. When the installation completes, select **Launch Intune Connector** and click Finish. Proceed to the Configure the Intune Certificate Connector task. ![Intune Connector install 07](images/aadjcert/intunecertconnectorinstall-07.png) ### Configure the Intune Certificate Connector Sign-in the NDES server with access equivalent to _domain administrator_. 1. The **NDES Connector** user interface should be open from the last task. + > [!NOTE] > If the **NDES Connector** user interface is not open, you can start it from **\\NDESConnectorUI\NDESConnectorUI.exe**. @@ -576,10 +598,11 @@ Sign-in the NDES server with access equivalent to _domain administrator_. 3. Click **Sign-in**. Type credentials for your Intune administrator, or tenant administrator that has the **Global Administrator** directory role. ![Intune Certificate Connector Configuration 02](images/aadjcert/intunecertconnectorconfig-02.png) - > [!IMPORTANT] - > The user account must have a valid Intune licenese assigned. If the user account does not have a valid Intune license, the sign-in fails. -4. Optionally, you can configure the NDES Connector for certificate revocation. If you want to do this, continue to the next task. Otherwise, Click **Close**, restart the **Intune Connector Service** and the **World Wide Web Publishing Service**, and skip the next task. + > [!IMPORTANT] + > The user account must have a valid Intune license assigned. If the user account does not have a valid Intune license, the sign-in fails. + +4. Optionally, you can configure the NDES Connector for certificate revocation. If you want to do this, continue to the next task. Otherwise, Click **Close**, restart the **Intune Connector Service** and the **World Wide Web Publishing Service**, and skip the next task. ### Configure the NDES Connector for certificate revocation (**Optional**) @@ -591,7 +614,7 @@ Sign-in the certificate authority used by the NDES Connector with access equival 1. Start the **Certification Authority** management console. 2. In the navigation pane, right-click the name of the certificate authority and select **Properties**. 3. Click the **Security** tab. Click **Add**. In **Enter the object names to select** box, type **NDESSvc** (or the name you gave the NDES Service account). Click *Check Names*. Click **OK**. Select the NDES Service account from the **Group or user names** list. Select **Allow** for the **Issue and Manage Certificates** permission. Click **OK**. -![Configure Intune certificate revocation 02](images/aadjcert/intuneconfigcertrevocation-02.png) + ![Configure Intune certificate revocation 02](images/aadjcert/intuneconfigcertrevocation-02.png) 4. Close the **Certification Authority** #### Enable the NDES Connector for certificate revocation @@ -599,22 +622,26 @@ Sign-in the NDES server with access equivalent to _domain administrator_. 1. Open the **NDES Connector** user interface (**\\NDESConnectorUI\NDESConnectorUI.exe**). 2. Click the **Advanced** tab. Select **Specify a different account username and password**. TYpe the NDES service account username and password. Click **Apply**. Click **OK** to close the confirmation dialog box. Click **Close**. -![Intune Connector cert revocation configuration 04](images/aadjcert/intunecertconnectorconfig-04.png) + ![Intune Connector cert revocation configuration 04](images/aadjcert/intunecertconnectorconfig-04.png) 3. Restart the **Intune Connector Service** and the **World Wide Web Publishing Service**. ### Test the NDES Connector Sign-in the NDES server with access equivalent to _domain admin_. 1. Open a command prompt. -2. Type the following command to confirm the NDES Connector's last connection time is current.
    -```reg query hklm\software\Microsoft\MicrosoftIntune\NDESConnector\ConnectionStatus```
    +2. Type the following command to confirm the NDES Connector's last connection time is current. + ``` + reg query hklm\software\Microsoft\MicrosoftIntune\NDESConnector\ConnectionStatus + ``` 3. Close the command prompt. 4. Open **Internet Explorer**. -5. In the navigation bar, type
    -```https://[fqdnHostName]/certsrv/mscep/mscep.dll```
    -where **[fqdnHostName]** is the fully qualified internal DNS host name of the NDES server.
    -A web page showing a 403 error (similar to the following) should appear in your web browser. If you do not see similar page, or you get a **503 Service unavailable**, ensure the NDES Service account as the proper user rights. You can also review the application event log for events with the **NetworkDeviceEnrollmentSerice** source. -![NDES web site test after Intune Certificate Connector](images/aadjcert/ndes-https-website-test-after-intune-connector.png) +5. In the navigation bar, type: + ``` + https://[fqdnHostName]/certsrv/mscep/mscep.dll + ``` + where **[fqdnHostName]** is the fully qualified internal DNS host name of the NDES server. + A web page showing a 403 error (similar to the following) should appear in your web browser. If you do not see similar page, or you get a **503 Service unavailable**, ensure the NDES Service account as the proper user rights. You can also review the application event log for events with the **NetworkDeviceEnrollmentSerice** source. + ![NDES web site test after Intune Certificate Connector](images/aadjcert/ndes-https-website-test-after-intune-connector.png) 6. Using **Server Manager**, enable **Internet Explorer Enhanced Security Configuration**. ## Create and Assign a Simple Certificate Enrollment Protocol (SCEP) Certificate Profile @@ -629,7 +656,7 @@ Sign-in a workstation with access equivalent to a _domain user_. 5. Under **Group Name**, type the name of the group. For example, **AADJ WHFB Certificate Users**. 6. Provide a **Group description**, if applicable. 7. Select **Assigned** from the **Membership type** list. -![Azure AD new group creation](images/aadjcert/azureadcreatewhfbcertgroup.png) + ![Azure AD new group creation](images/aadjcert/azureadcreatewhfbcertgroup.png) 8. Click **Members**. Use the **Select members** pane to add members to this group. When finished click **Select**. 9. Click **Create**. @@ -646,6 +673,7 @@ Sign-in a workstation with access equivalent to a _domain user_. 7. Next to **Description**, provide a description meaningful for your environment, then select **Next**. 8. Select **User** as a certificate type. 9. Configure **Certificate validity period** to match your organization. + > [!IMPORTANT] > Remember that you need to configure your certificate authority to allow Microsoft Intune to configure certificate validity. @@ -669,7 +697,7 @@ Sign-in a workstation with access equivalent to a _domain user_. 3. Click **WHFB Certificate Enrollment**. 4. Select **Properties**, and then click **Edit** next to the **Assignments** section. 5. In the **Assignments** pane, select **Selected Groups** from the **Assign to** list. Click **Select groups to include**. -![WHFB SCEP Profile Assignment](images/aadjcert/profile04.png) + ![WHFB SCEP Profile Assignment](images/aadjcert/profile04.png) 6. Select the **AADJ WHFB Certificate Users** group. Click **Select**. 7. Click **Review + Save**, and then **Save**. @@ -679,7 +707,7 @@ You have successfully completed the configuration. Add users that need to enrol > [!div class="checklist"] > * Requirements > * Prepare Azure AD Connect -> * Prepare the Network Device Enrollment Services (NDES) Service Acccount +> * Prepare the Network Device Enrollment Services (NDES) Service Account > * Prepare Active Directory Certificate Authority > * Install and Configure the NDES Role > * Configure Network Device Enrollment Services to work with Microsoft Intune From 983c2b7934d0d13d22c8ed7cf2d3afced53968e8 Mon Sep 17 00:00:00 2001 From: Denise Vangel-MSFT Date: Mon, 4 Jan 2021 08:56:40 -0800 Subject: [PATCH 281/486] Update microsoft-defender-antivirus-on-windows-server-2016.md --- .../microsoft-defender-antivirus-on-windows-server-2016.md | 4 ++-- 1 file changed, 2 insertions(+), 2 deletions(-) diff --git a/windows/security/threat-protection/microsoft-defender-antivirus/microsoft-defender-antivirus-on-windows-server-2016.md b/windows/security/threat-protection/microsoft-defender-antivirus/microsoft-defender-antivirus-on-windows-server-2016.md index 8f3a10623e..c125ee496c 100644 --- a/windows/security/threat-protection/microsoft-defender-antivirus/microsoft-defender-antivirus-on-windows-server-2016.md +++ b/windows/security/threat-protection/microsoft-defender-antivirus/microsoft-defender-antivirus-on-windows-server-2016.md @@ -10,8 +10,8 @@ ms.sitesec: library ms.localizationpriority: medium author: denisebmsft ms.author: deniseb -ms.date: 12/17/2020 -ms.reviewer: pahuijbr +ms.date: 01/04/2021 +ms.reviewer: pahuijbr, shwjha manager: dansimp --- From dd45d68fa1220c50427affd1e9eb5e94aca69b19 Mon Sep 17 00:00:00 2001 From: ImranHabib <47118050+joinimran@users.noreply.github.com> Date: Mon, 4 Jan 2021 09:56:54 -0700 Subject: [PATCH 282/486] Update windows/privacy/windows-endpoints-20H2-non-enterprise-editions.md Co-authored-by: Trond B. Krokli <38162891+illfated@users.noreply.github.com> --- .../privacy/windows-endpoints-20H2-non-enterprise-editions.md | 1 - 1 file changed, 1 deletion(-) diff --git a/windows/privacy/windows-endpoints-20H2-non-enterprise-editions.md b/windows/privacy/windows-endpoints-20H2-non-enterprise-editions.md index 635f62072e..b1df5bfda6 100644 --- a/windows/privacy/windows-endpoints-20H2-non-enterprise-editions.md +++ b/windows/privacy/windows-endpoints-20H2-non-enterprise-editions.md @@ -264,4 +264,3 @@ The following methodology was used to derive the network endpoints: |Xbox Live|The following endpoints are used for Xbox Live.| |||TLSv1.2/HTTPS/HTTP|dlassets-ssl.xboxlive.com| |||TLSv1.2/HTTPS|da.xboxservices.com| -| From 8bfcddfa8f7b7f97e5f23d5e3550eea548af08ea Mon Sep 17 00:00:00 2001 From: Denise Vangel-MSFT Date: Mon, 4 Jan 2021 09:00:09 -0800 Subject: [PATCH 283/486] Update microsoft-defender-antivirus-on-windows-server-2016.md --- ...fender-antivirus-on-windows-server-2016.md | 19 ++++--------------- 1 file changed, 4 insertions(+), 15 deletions(-) diff --git a/windows/security/threat-protection/microsoft-defender-antivirus/microsoft-defender-antivirus-on-windows-server-2016.md b/windows/security/threat-protection/microsoft-defender-antivirus/microsoft-defender-antivirus-on-windows-server-2016.md index c125ee496c..9caf13e4a6 100644 --- a/windows/security/threat-protection/microsoft-defender-antivirus/microsoft-defender-antivirus-on-windows-server-2016.md +++ b/windows/security/threat-protection/microsoft-defender-antivirus/microsoft-defender-antivirus-on-windows-server-2016.md @@ -46,7 +46,7 @@ The process of setting up and running Microsoft Defender Antivirus on a server p 5. (As needed) [Configure automatic exclusions](#configure-automatic-exclusions) -6. (Only if necessary) [Uninstall Microsoft Defender Antivirus](#need-to-uninstall-microsoft-defender-antivirus) +6. (Only if necessary) [Set Microsoft Defender Antivirus to passive mode](#need-to-uninstall-microsoft-defender-antivirus) ## Enable the user interface on Windows Server 2016 or 2019 @@ -171,11 +171,11 @@ To help ensure security and performance, certain exclusions are automatically ad See [Configure exclusions in Microsoft Defender Antivirus on Windows Server](configure-server-exclusions-microsoft-defender-antivirus.md). -## Need to uninstall Microsoft Defender Antivirus? +## Need to set Microsoft Defender Antivirus to passive mode? -If you are using a non-Microsoft antivirus product as your primary antivirus solution, you can either disable Microsoft Defender Antivirus, or set it to passive mode, as described in the following procedures. +If you are using a non-Microsoft antivirus product as your primary antivirus solution, set Microsoft Defender Antivirus to passive mode. -### Set Microsoft Defender Antivirus to passive mode +### Set Microsoft Defender Antivirus to passive mode using a registry key If you are using Windows Server, version 1803 or Windows Server 2019, you can set Microsoft Defender Antivirus to passive mode by setting the following registry key: - Path: `HKLM\SOFTWARE\Policies\Microsoft\Windows Advanced Threat Protection` @@ -193,17 +193,6 @@ If you are using Windows Server, version 1803 or Windows Server 2019, you can se Microsoft Defender Antivirus will still run normally without the user interface, but the user interface cannot be enabled if you disable the core **Windows Defender** feature. -### Disable Microsoft Defender Antivirus using PowerShell - ->[!NOTE] ->You can't uninstall the Windows Security app, but you can disable the interface with these instructions. - -The following PowerShell cmdlet uninstalls Microsoft Defender Antivirus on Windows Server 2016 or 2019: - -```PowerShell -Uninstall-WindowsFeature -Name Windows-Defender -``` - ### Turn off the Microsoft Defender Antivirus user interface using PowerShell To turn off the Microsoft Defender Antivirus GUI, use the following PowerShell cmdlet: From 180cad0aa3ace97c1986a531f3557429f52cb456 Mon Sep 17 00:00:00 2001 From: MatiG Date: Mon, 4 Jan 2021 19:00:20 +0200 Subject: [PATCH 284/486] clean linter warnings --- .../linux-support-install.md | 27 ++++++++++++++++--- 1 file changed, 24 insertions(+), 3 deletions(-) diff --git a/windows/security/threat-protection/microsoft-defender-atp/linux-support-install.md b/windows/security/threat-protection/microsoft-defender-atp/linux-support-install.md index 9a2bf09a0d..0f1f9c1af8 100644 --- a/windows/security/threat-protection/microsoft-defender-atp/linux-support-install.md +++ b/windows/security/threat-protection/microsoft-defender-atp/linux-support-install.md @@ -24,7 +24,6 @@ ms.topic: conceptual [!INCLUDE [Microsoft 365 Defender rebranding](../../includes/microsoft-defender.md)] - **Applies to:** - [Microsoft Defender for Endpoint for Linux](microsoft-defender-atp-linux.md) @@ -36,9 +35,11 @@ An error in installation may or may not result in a meaningful error message by ```bash sudo journalctl | grep 'microsoft-mdatp' > installation.log ``` + ```bash grep 'postinstall end' installation.log ``` + ```Output microsoft-mdatp-installer[102243]: postinstall end [2020-03-26 07:04:43OURCE +0000] 102216 ``` @@ -54,6 +55,7 @@ Check if the mdatp service is running: ```bash systemctl status mdatp ``` + ```Output ● mdatp.service - Microsoft Defender for Endpoint Loaded: loaded (/lib/systemd/system/mdatp.service; enabled; vendor preset: enabled) @@ -69,47 +71,59 @@ systemctl status mdatp ## Steps to troubleshoot if mdatp service isn't running 1. Check if "mdatp" user exists: + ```bash id "mdatp" ``` + If there’s no output, run + ```bash sudo useradd --system --no-create-home --user-group --shell /usr/sbin/nologin mdatp ``` 2. Try enabling and restarting the service using: + ```bash sudo systemctl enable mdatp ``` + ```bash sudo systemctl restart mdatp ``` 3. If mdatp.service isn't found upon running the previous command, run: + ```bash sudo cp /opt/microsoft/mdatp/conf/mdatp.service ``` + where `````` is ```/lib/systemd/system``` for Ubuntu and Debian distributions and - ```/usr/lib/systemd/system``` for Rhel, CentOS, Oracle and SLES. + ```/usr/lib/systemd/system``` for Rhel, CentOS, Oracle and SLES. Then rerun step 2. 4. If the above steps don’t work, check if SELinux is installed and in enforcing mode. If so, try setting it to permissive (preferably) or disabled mode. It can be done by setting the parameter `SELINUX` to "permissive" or "disabled" in `/etc/selinux/config` file, followed by reboot. Check the man-page of selinux for more details. Now try restarting the mdatp service using step 2. Revert the configuration change immediately though for security reasons after trying it and reboot. -5. If `/opt` directory is a symbolic link, create a bind mount for `/opt/microsoft`. +5. If `/opt` directory is a symbolic link, create a bind mount for `/opt/microsoft`. 6. Ensure that the daemon has executable permission. + ```bash ls -l /opt/microsoft/mdatp/sbin/wdavdaemon ``` + ```Output -rwxr-xr-x 2 root root 15502160 Mar 3 04:47 /opt/microsoft/mdatp/sbin/wdavdaemon ``` + If the daemon doesn't have executable permissions, make it executable using: + ```bash sudo chmod 0755 /opt/microsoft/mdatp/sbin/wdavdaemon ``` + and retry running step 2. 7. Ensure that the file system containing wdavdaemon isn't mounted with "noexec". @@ -117,24 +131,31 @@ Now try restarting the mdatp service using step 2. Revert the configuration chan ## If mdatp service is running, but EICAR text file detection doesn't work 1. Check the file system type using: + ```bash findmnt -T ``` + Currently supported file systems for on-access activity are listed [here](microsoft-defender-atp-linux.md#system-requirements). Any files outside these file systems won't be scanned. ## Command-line tool “mdatp” isn't working 1. If running the command-line tool `mdatp` gives an error `command not found`, run the following command: + ```bash sudo ln -sf /opt/microsoft/mdatp/sbin/wdavdaemonclient /usr/bin/mdatp ``` + and try again. If none of the above steps help, collect the diagnostic logs: + ```bash sudo mdatp diagnostic create ``` + ```Output Diagnostic file created: ``` + Path to a zip file that contains the logs will be displayed as an output. Reach out to our customer support with these logs. From 5ca316ae4def3482b1b279e1ba4fe35ffae40d98 Mon Sep 17 00:00:00 2001 From: Denise Vangel-MSFT Date: Mon, 4 Jan 2021 09:02:47 -0800 Subject: [PATCH 285/486] Update microsoft-defender-antivirus-compatibility.md --- .../microsoft-defender-antivirus-compatibility.md | 6 +++--- 1 file changed, 3 insertions(+), 3 deletions(-) diff --git a/windows/security/threat-protection/microsoft-defender-antivirus/microsoft-defender-antivirus-compatibility.md b/windows/security/threat-protection/microsoft-defender-antivirus/microsoft-defender-antivirus-compatibility.md index 083cbc45be..e2f17d8448 100644 --- a/windows/security/threat-protection/microsoft-defender-antivirus/microsoft-defender-antivirus-compatibility.md +++ b/windows/security/threat-protection/microsoft-defender-antivirus/microsoft-defender-antivirus-compatibility.md @@ -11,9 +11,9 @@ ms.localizationpriority: medium author: denisebmsft ms.author: deniseb ms.custom: nextgen -ms.reviewer: pahuijbr +ms.reviewer: pahuijbr, shwjha manager: dansimp -ms.date: 12/20/2020 +ms.date: 01/04/2021 --- # Microsoft Defender Antivirus compatibility @@ -47,7 +47,7 @@ The following table summarizes what happens with Microsoft Defender Antivirus wh | Windows Server 2016 or 2019 | Microsoft Defender Antivirus | Yes | Active mode | | Windows Server 2016 or 2019 | Microsoft Defender Antivirus | No | Active mode | -(1) On Windows Server 2016 or 2019, Microsoft Defender Antivirus does not enter passive or disabled mode automatically when you install non-Microsoft antivirus product. In those cases, [disable Microsoft Defender Antivirus, or set it to passive mode](microsoft-defender-antivirus-on-windows-server-2016.md#need-to-uninstall-microsoft-defender-antivirus) to prevent problems caused by having multiple antivirus products installed on a server. +(1) On Windows Server 2016 or 2019, Microsoft Defender Antivirus does not enter passive mode automatically when you install a non-Microsoft antivirus product. In those cases, [set Microsoft Defender Antivirus to passive mode](microsoft-defender-antivirus-on-windows-server-2016.md#need-to-set-microsoft-defender-antivirus-to-passive-mode) to prevent problems caused by having multiple antivirus products installed on a server. If you are using Windows Server, version 1803 or Windows Server 2019, you set Microsoft Defender Antivirus to passive mode by setting this registry key: - Path: `HKLM\SOFTWARE\Policies\Microsoft\Windows Advanced Threat Protection` From 67cee76a3bb382c19cb9fbb68c1b3a901b8ef6d9 Mon Sep 17 00:00:00 2001 From: ImranHabib <47118050+joinimran@users.noreply.github.com> Date: Mon, 4 Jan 2021 10:12:20 -0700 Subject: [PATCH 286/486] Update windows/privacy/windows-endpoints-20H2-non-enterprise-editions.md Co-authored-by: Trond B. Krokli <38162891+illfated@users.noreply.github.com> --- .../privacy/windows-endpoints-20H2-non-enterprise-editions.md | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/windows/privacy/windows-endpoints-20H2-non-enterprise-editions.md b/windows/privacy/windows-endpoints-20H2-non-enterprise-editions.md index b1df5bfda6..ae59ae6afc 100644 --- a/windows/privacy/windows-endpoints-20H2-non-enterprise-editions.md +++ b/windows/privacy/windows-endpoints-20H2-non-enterprise-editions.md @@ -183,7 +183,7 @@ The following methodology was used to derive the network endpoints: |Windows Defender|The following endpoint is used for Windows Defender when Cloud-based Protection is enabled|TLSv1.2/HTTPS|wdcp.microsoft.com| ||||wdcpalt.microsoft.com| |||HTTPS/HTTP|*.smartscreen-prod.microsoft.com| -||The following endpoints are used for Windows Defender SmartScreen reporting and notifications.|TLSv1.2|*smartscreen.microsoft.com| +||The following endpoints are used for Windows Defender SmartScreen reporting and notifications.|TLSv1.2|*.smartscreen.microsoft.com| |||TLSv1.2/HTTP|checkappexec.microsoft.com| |Windows Spotlight|The following endpoints are used to retrieve Windows Spotlight metadata that describes content, such as references to image locations, as well as suggested apps, Microsoft account notifications, and Windows tips.|TLSv1.2/HTTPS/HTTP|arc.msn.com*| |||TLSv1.2/HTTPS/HTTP|ris.api.iris.microsoft.com| From d40da597c5ff4b0c21e8bcaae2dea83d8e632345 Mon Sep 17 00:00:00 2001 From: ImranHabib <47118050+joinimran@users.noreply.github.com> Date: Mon, 4 Jan 2021 10:12:29 -0700 Subject: [PATCH 287/486] Update windows/privacy/windows-endpoints-20H2-non-enterprise-editions.md Co-authored-by: Trond B. Krokli <38162891+illfated@users.noreply.github.com> --- .../privacy/windows-endpoints-20H2-non-enterprise-editions.md | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/windows/privacy/windows-endpoints-20H2-non-enterprise-editions.md b/windows/privacy/windows-endpoints-20H2-non-enterprise-editions.md index ae59ae6afc..66a3637398 100644 --- a/windows/privacy/windows-endpoints-20H2-non-enterprise-editions.md +++ b/windows/privacy/windows-endpoints-20H2-non-enterprise-editions.md @@ -249,7 +249,7 @@ The following methodology was used to derive the network endpoints: |Windows Defender|The following endpoint is used for Windows Defender when Cloud-based Protection is enabled|TLSv1.2/HTTPS|wdcp.microsoft.com| ||||wdcpalt.microsoft.com| |||HTTPS/HTTP|*.smartscreen-prod.microsoft.com| -||The following endpoints are used for Windows Defender SmartScreen reporting and notifications.|TLSv1.2|*smartscreen.microsoft.com| +||The following endpoints are used for Windows Defender SmartScreen reporting and notifications.|TLSv1.2|*.smartscreen.microsoft.com| |||TLSv1.2/HTTP|checkappexec.microsoft.com| |Windows Spotlight|The following endpoints are used to retrieve Windows Spotlight metadata that describes content, such as references to image locations, as well as suggested apps, Microsoft account notifications, and Windows tips.|TLSv1.2/HTTPS/HTTP|arc.msn.com*| |||TLSv1.2/HTTPS/HTTP|ris.api.iris.microsoft.com| From b4aa169c7a4e67bb3cb39dec0bef6ed8c2f27e12 Mon Sep 17 00:00:00 2001 From: Denise Vangel-MSFT Date: Mon, 4 Jan 2021 09:17:12 -0800 Subject: [PATCH 288/486] Update microsoft-defender-antivirus-on-windows-server-2016.md --- ...fender-antivirus-on-windows-server-2016.md | 20 +++++++------------ 1 file changed, 7 insertions(+), 13 deletions(-) diff --git a/windows/security/threat-protection/microsoft-defender-antivirus/microsoft-defender-antivirus-on-windows-server-2016.md b/windows/security/threat-protection/microsoft-defender-antivirus/microsoft-defender-antivirus-on-windows-server-2016.md index 9caf13e4a6..c16f2a4930 100644 --- a/windows/security/threat-protection/microsoft-defender-antivirus/microsoft-defender-antivirus-on-windows-server-2016.md +++ b/windows/security/threat-protection/microsoft-defender-antivirus/microsoft-defender-antivirus-on-windows-server-2016.md @@ -34,19 +34,13 @@ While the functionality, configuration, and management are largely the same for The process of setting up and running Microsoft Defender Antivirus on a server platform includes several steps: -1. [Enable the interface](#enable-the-user-interface-on-windows-server-2016-or-2019) - -2. [Install Microsoft Defender Antivirus](#install-microsoft-defender-antivirus-on-windows-server-2016-or-2019) - -2. [Verify Microsoft Defender Antivirus is running](#verify-microsoft-defender-antivirus-is-running) - -3. [Update your antimalware Security intelligence](#update-antimalware-security-intelligence) - -4. (As needed) [Submit samples](#submit-samples) - -5. (As needed) [Configure automatic exclusions](#configure-automatic-exclusions) - -6. (Only if necessary) [Set Microsoft Defender Antivirus to passive mode](#need-to-uninstall-microsoft-defender-antivirus) +1. [Enable the interface](#enable-the-user-interface-on-windows-server-2016-or-2019). +2. [Install Microsoft Defender Antivirus](#install-microsoft-defender-antivirus-on-windows-server-2016-or-2019). +3. [Verify Microsoft Defender Antivirus is running](#verify-microsoft-defender-antivirus-is-running). +4. [Update your antimalware Security intelligence](#update-antimalware-security-intelligence). +5. (As needed) [Submit samples](#submit-samples). +6. (As needed) [Configure automatic exclusions](#configure-automatic-exclusions). +7. (Only if necessary) [Set Microsoft Defender Antivirus to passive mode](#need-to-set-microsoft-defender-antivirus-to-passive-mode). ## Enable the user interface on Windows Server 2016 or 2019 From 4727cb7d21be56f7bb961e55a60f4e57498f6751 Mon Sep 17 00:00:00 2001 From: MatiG Date: Mon, 4 Jan 2021 19:19:22 +0200 Subject: [PATCH 289/486] add to installaton tsg --- .../linux-support-install.md | 14 ++++++++++++++ 1 file changed, 14 insertions(+) diff --git a/windows/security/threat-protection/microsoft-defender-atp/linux-support-install.md b/windows/security/threat-protection/microsoft-defender-atp/linux-support-install.md index 0f1f9c1af8..cf23de1bf6 100644 --- a/windows/security/threat-protection/microsoft-defender-atp/linux-support-install.md +++ b/windows/security/threat-protection/microsoft-defender-atp/linux-support-install.md @@ -48,6 +48,20 @@ An output from the previous command with correct date and time of installation i Also check the [Client configuration](linux-install-manually.md#client-configuration) to verify the health of the product and detect the EICAR text file. +## Make sure you have the correct package + +Please mind that the package you are installing is matching the host distribution and version. + +| package | distribution | +|-------------------------------|------------------------------------------| +| mdatp-rhel8.Linux.x86_64.rpm | Oracle, RHEL and CentOS 8.x | +| mdatp-sles12.Linux.x86_64.rpm | SuSE Linux Enterprise Server 12.x | +| mdatp-sles15.Linux.x86_64.rpm | SuSE Linux Enterprise Server 15.x | +| mdatp.Linux.x86_64.rpm | Oracle, RHEL and CentOS 7.x | +| mdatp.Linux.x86_64.deb | Debian and Ubuntu 16.04, 18.04 and 20.04 | + +For [manual deployment](linux-install-manually.md), make sure the correct distro and version had been chosen. + ## Installation failed Check if the mdatp service is running: From 19aa1f6eb9adb899dfc58c19652515382de1e960 Mon Sep 17 00:00:00 2001 From: MatiG Date: Mon, 4 Jan 2021 19:29:36 +0200 Subject: [PATCH 290/486] connectivity tsg --- .../linux-support-connectivity.md | 22 ++++++++++++++++++- 1 file changed, 21 insertions(+), 1 deletion(-) diff --git a/windows/security/threat-protection/microsoft-defender-atp/linux-support-connectivity.md b/windows/security/threat-protection/microsoft-defender-atp/linux-support-connectivity.md index 74db615cdb..6c3ebda4cd 100644 --- a/windows/security/threat-protection/microsoft-defender-atp/linux-support-connectivity.md +++ b/windows/security/threat-protection/microsoft-defender-atp/linux-support-connectivity.md @@ -24,7 +24,6 @@ ms.topic: conceptual [!INCLUDE [Microsoft 365 Defender rebranding](../../includes/microsoft-defender.md)] - **Applies to:** - [Microsoft Defender for Endpoint for Linux](microsoft-defender-atp-linux.md) @@ -37,8 +36,29 @@ To test if Defender for Endpoint for Linux can communicate to the cloud with the mdatp connectivity test ``` +expected output: + +```output +Testing connection with https://cdn.x.cp.wd.microsoft.com/ping ... [OK] +Testing connection with https://eu-cdn.x.cp.wd.microsoft.com/ping ... [OK] +Testing connection with https://wu-cdn.x.cp.wd.microsoft.com/ping ... [OK] +Testing connection with https://x.cp.wd.microsoft.com/api/report ... [OK] +Testing connection with https://winatp-gw-cus.microsoft.com/test ... [OK] +Testing connection with https://winatp-gw-eus.microsoft.com/test ... [OK] +Testing connection with https://winatp-gw-weu.microsoft.com/test ... [OK] +Testing connection with https://winatp-gw-neu.microsoft.com/test ... [OK] +Testing connection with https://winatp-gw-ukw.microsoft.com/test ... [OK] +Testing connection with https://winatp-gw-uks.microsoft.com/test ... [OK] +Testing connection with https://eu-v20.events.data.microsoft.com/ping ... [OK] +Testing connection with https://us-v20.events.data.microsoft.com/ping ... [OK] +Testing connection with https://uk-v20.events.data.microsoft.com/ping ... [OK] +Testing connection with https://v20.events.data.microsoft.com/ping ... [OK] +``` + If the connectivity test fails, check if the device has Internet access and if [any of the endpoints required by the product](microsoft-defender-atp-linux.md#network-connections) are blocked by a proxy or firewall. +Failures with curl error 35 or 60, indicate certificate pinning rejection. Please check if the connection is under SSL or HTTPS inspection. If so, please whitelist MDE from such inspection. + ## Troubleshooting steps for environments without proxy or with transparent proxy To test that a connection is not blocked in an environment without a proxy or with a transparent proxy, run the following command in the terminal: From ca98df17c4314ec30de067a38f2ea3e6a80e7184 Mon Sep 17 00:00:00 2001 From: MatiG Date: Mon, 4 Jan 2021 19:31:35 +0200 Subject: [PATCH 291/486] fix linter warnings --- .../linux-support-perf.md | 48 ++++++++++--------- 1 file changed, 26 insertions(+), 22 deletions(-) diff --git a/windows/security/threat-protection/microsoft-defender-atp/linux-support-perf.md b/windows/security/threat-protection/microsoft-defender-atp/linux-support-perf.md index e6585fc97f..627b4a24e7 100644 --- a/windows/security/threat-protection/microsoft-defender-atp/linux-support-perf.md +++ b/windows/security/threat-protection/microsoft-defender-atp/linux-support-perf.md @@ -23,7 +23,6 @@ ms.topic: conceptual [!INCLUDE [Microsoft 365 Defender rebranding](../../includes/microsoft-defender.md)] - **Applies to:** - [Microsoft Defender for Endpoint for Linux](microsoft-defender-atp-linux.md) @@ -43,19 +42,20 @@ The following steps can be used to troubleshoot and mitigate these issues: ```bash mdatp config real-time-protection --value disabled ``` + ```Output Configuration property updated ``` If your device is managed by your organization, real-time protection can be disabled by your administrator using the instructions in [Set preferences for Defender for Endpoint for Linux](linux-preferences.md). -2. To find the applications that are triggering the most scans, you can use real-time statistics gathered by Defender for Endpoint for Linux. +2. To find the applications that are triggering the most scans, you can use real-time statistics gathered by Defender for Endpoint for Linux. > [!NOTE] > This feature is available in version 100.90.70 or newer. This feature is enabled by default on the `Dogfood` and `InsiderFast` channels. If you're using a different update channel, this feature can be enabled from the command line: - + ```bash mdatp config real-time-protection-statistics --value enabled ``` @@ -71,6 +71,7 @@ The following steps can be used to troubleshoot and mitigate these issues: ```bash mdatp config real-time-protection --value enabled ``` + ```Output Configuration property updated ``` @@ -80,16 +81,18 @@ The following steps can be used to troubleshoot and mitigate these issues: ```bash mdatp diagnostic real-time-protection-statistics --output json > real_time_protection.json ``` + > [!NOTE] > Using ```--output json``` (note the double dash) ensures that the output format is ready for parsing. - The output of this command will show all processes and their associated scan activity. + The output of this command will show all processes and their associated scan activity. -3. On your Linux system, download the sample Python parser **high_cpu_parser.py** using the command: +3. On your Linux system, download the sample Python parser **high_cpu_parser.py** using the command: ```bash wget -c https://raw.githubusercontent.com/microsoft/mdatp-xplat/master/linux/diagnostic/high_cpu_parser.py ``` + The output of this command should be similar to the following: ```Output @@ -102,39 +105,40 @@ The following steps can be used to troubleshoot and mitigate these issues: 100%[===========================================>] 1,020 --.-K/s in 0s ``` + 4. Next, type the following commands: + ```bash chmod +x high_cpu_parser.py ``` + ```bash cat real_time_protection.json | python high_cpu_parser.py > real_time_protection.log ``` The output of the above is a list of the top contributors to performance issues. The first column is the process identifier (PID), the second column is te process name, and the last column is the number of scanned files, sorted by impact. - + For example, the output of the command will be something like the below: ```Output ... > python ~/repo/mdatp-xplat/linux/diagnostic/high_cpu_parser.py <~Downloads/output.json | head -n 10 - 27432 None 76703 - 73467 actool     1249 - 73914 xcodebuild 1081 - 73873 bash 1050 - 27475 None 836 - 1    launchd    407 - 73468 ibtool     344 - 549  telemetryd_v1   325 - 4764 None 228 - 125  CrashPlanService 164 + 27432 None 76703 + 73467 actool     1249 + 73914 xcodebuild 1081 + 73873 bash 1050 + 27475 None 836 + 1    launchd    407 + 73468 ibtool     344 + 549  telemetryd_v1   325 + 4764 None 228 + 125  CrashPlanService 164 ``` -   - To improve the performance of Defender for Endpoint for Linux, locate the one with the highest number under the `Total files scanned` row and add an exclusion for it. For more information, see [Configure and validate exclusions for Defender for Endpoint for Linux](linux-exclusions.md). - + + To improve the performance of Defender for Endpoint for Linux, locate the one with the highest number under the `Total files scanned` row and add an exclusion for it. For more information, see [Configure and validate exclusions for Defender for Endpoint for Linux](linux-exclusions.md). + >[!NOTE] > The application stores statistics in memory and only keeps track of file activity since it was started and real-time protection was enabled. Processes that were launched before or during periods when real time protection was off are not counted. Additionally, only events which triggered scans are counted. 5. Configure Microsoft Defender ATP for Linux with exclusions for the processes or disk locations that contribute to the performance issues and re-enable real-time protection. - For more information, see [Configure and validate exclusions for Microsoft Defender ATP for Linux](linux-exclusions.md). - - + For more information, see [Configure and validate exclusions for Microsoft Defender ATP for Linux](linux-exclusions.md). From 6229099d43ef75159b6d5166e680094ca362a122 Mon Sep 17 00:00:00 2001 From: MatiG Date: Mon, 4 Jan 2021 19:43:03 +0200 Subject: [PATCH 292/486] update perf docs --- .../microsoft-defender-atp/linux-support-perf.md | 4 ++++ 1 file changed, 4 insertions(+) diff --git a/windows/security/threat-protection/microsoft-defender-atp/linux-support-perf.md b/windows/security/threat-protection/microsoft-defender-atp/linux-support-perf.md index 627b4a24e7..6e3ff940d3 100644 --- a/windows/security/threat-protection/microsoft-defender-atp/linux-support-perf.md +++ b/windows/security/threat-protection/microsoft-defender-atp/linux-support-perf.md @@ -33,6 +33,8 @@ Real-time protection (RTP) is a feature of Defender for Endpoint for Linux that Depending on the applications that you are running and your device characteristics, you may experience suboptimal performance when running Defender for Endpoint for Linux. In particular, applications or system processes that access many resources over a short timespan can lead to performance issues in Defender for Endpoint for Linux. +Before starting, **please make sure that other security products are not currenly running on the device**. Multilpe security products may conflict and impact the host performance. + The following steps can be used to troubleshoot and mitigate these issues: 1. Disable real-time protection using one of the following methods and observe whether the performance improves. This approach helps narrow down whether Defender for Endpoint for Linux is contributing to the performance issues. @@ -49,6 +51,8 @@ The following steps can be used to troubleshoot and mitigate these issues: If your device is managed by your organization, real-time protection can be disabled by your administrator using the instructions in [Set preferences for Defender for Endpoint for Linux](linux-preferences.md). + If the performance problem persists while real-time protection is off, the origin of the problem could the EDR component. In this case please contact customer support for further instructions and mitigation. + 2. To find the applications that are triggering the most scans, you can use real-time statistics gathered by Defender for Endpoint for Linux. > [!NOTE] From 89ac2af4ffd5d3ac81dfc1b5e4b4f0d06ff65095 Mon Sep 17 00:00:00 2001 From: MatiG Date: Mon, 4 Jan 2021 20:07:30 +0200 Subject: [PATCH 293/486] add support for missing events --- windows/security/threat-protection/TOC.md | 1 + .../linux-support-events.md | 94 +++++++++++++++++++ 2 files changed, 95 insertions(+) create mode 100644 windows/security/threat-protection/microsoft-defender-atp/linux-support-events.md diff --git a/windows/security/threat-protection/TOC.md b/windows/security/threat-protection/TOC.md index 47925e97e7..59c4787025 100644 --- a/windows/security/threat-protection/TOC.md +++ b/windows/security/threat-protection/TOC.md @@ -302,6 +302,7 @@ ##### [Troubleshoot installation issues](microsoft-defender-atp/linux-support-install.md) ##### [Troubleshoot cloud connectivity issues](microsoft-defender-atp/linux-support-connectivity.md) ##### [Troubleshoot performance issues](microsoft-defender-atp/linux-support-perf.md) +##### [Troubleshoot performance issues](microsoft-defender-atp/linux-support-events.md) #### [Privacy](microsoft-defender-atp/linux-privacy.md) diff --git a/windows/security/threat-protection/microsoft-defender-atp/linux-support-events.md b/windows/security/threat-protection/microsoft-defender-atp/linux-support-events.md new file mode 100644 index 0000000000..f541d9d0d0 --- /dev/null +++ b/windows/security/threat-protection/microsoft-defender-atp/linux-support-events.md @@ -0,0 +1,94 @@ +--- +title: Troubleshoot missing events or alerts issues for Microsoft Defender ATP for Linux +description: Troubleshoot missing events or alerts issues in Microsoft Defender ATP for Linux. +keywords: microsoft, defender, atp, linux, events +search.product: eADQiWindows 10XVcnh +search.appverid: met150 +ms.prod: w10 +ms.mktglfcycl: deploy +ms.sitesec: library +ms.pagetype: security +ms.author: dansimp +author: dansimp +ms.localizationpriority: medium +manager: dansimp +audience: ITPro +mms.collection: +- m365-security-compliance +- m365initiative-defender-endpoint +ms.topic: conceptual +--- + +# Troubleshoot missing events or alerts issues for Microsoft Defender for Endpoint for Linux + +[!INCLUDE [Microsoft 365 Defender rebranding](../../includes/microsoft-defender.md)] + +**Applies to:** + +- [Microsoft Defender for Endpoint for Linux](microsoft-defender-atp-linux.md) + +This article provides some general steps to mitigate missing events or alerts in the [security center](https://securitycenter.windows.com/) portal. + +Once MDE had been installed properly on a device, a device page will be generated in the portal and _File_, _Process_, _Network_ and other events should appear in the timeline and advanced hunting pages. +In case events are not appearing or some types of events are missing, that could indicate some problem. + +## Missing network and login events + +MDE utilized `audit` framework from linux to track network and login activity. + +1. Make sure audit framework is working. + + ```bash + service auditd status + ``` + + expected output: + + ```output + ● auditd.service - Security Auditing Service + Loaded: loaded (/usr/lib/systemd/system/auditd.service; enabled; vendor preset: enabled) + Active: active (running) since Mon 2020-12-21 10:48:02 IST; 2 weeks 0 days ago + Docs: man:auditd(8) + https://github.com/linux-audit/audit-documentation + Process: 16689 ExecStartPost=/sbin/augenrules --load (code=exited, status=1/FAILURE) + Process: 16665 ExecStart=/sbin/auditd (code=exited, status=0/SUCCESS) + Main PID: 16666 (auditd) + Tasks: 25 + CGroup: /system.slice/auditd.service + ├─16666 /sbin/auditd + ├─16668 /sbin/audispd + ├─16670 /usr/sbin/sedispatch + └─16671 /opt/microsoft/mdatp/sbin/mdatp_audisp_plugin -d + ``` + +2. If auditd is stopped, please start it. + + ```bash + service auditd start + ``` + +**On SLES15** systems, SYSCALL auditing in `auditd` is disabled by default and can explain missing events. + +1. To validate that SYSCALL auditing is not disabeld, list the current audit rules: + + ```bash + sudo auditctl -l + ``` + + if the following line is present, please remove it or edit it to enable MDE to track specific SYSCALLs. + + ```output + -a task, never + ``` + + audit rules are located at `/etc/audit/rules.d/audit.rules`. + +## Missing file events + +File events are collected with `fanotify` framework. In case some or all file events are missing please make sure fanotify is enabled on the device and that the file system is [supported](microsoft-defender-atp-linux#system-requirements). + +List the filesystems on the machine with: + +```bash +df -Th +``` From 34914b978bc750593e5e0a5ab1ccdf68a8672594 Mon Sep 17 00:00:00 2001 From: MatiG Date: Mon, 4 Jan 2021 20:12:04 +0200 Subject: [PATCH 294/486] fix title --- windows/security/threat-protection/TOC.md | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/windows/security/threat-protection/TOC.md b/windows/security/threat-protection/TOC.md index 59c4787025..25a5417d95 100644 --- a/windows/security/threat-protection/TOC.md +++ b/windows/security/threat-protection/TOC.md @@ -302,7 +302,7 @@ ##### [Troubleshoot installation issues](microsoft-defender-atp/linux-support-install.md) ##### [Troubleshoot cloud connectivity issues](microsoft-defender-atp/linux-support-connectivity.md) ##### [Troubleshoot performance issues](microsoft-defender-atp/linux-support-perf.md) -##### [Troubleshoot performance issues](microsoft-defender-atp/linux-support-events.md) +##### [Troubleshoot missing events issues](microsoft-defender-atp/linux-support-events.md) #### [Privacy](microsoft-defender-atp/linux-privacy.md) From 6a3ab419c597adbc1bd1df06f52d12cb055a1930 Mon Sep 17 00:00:00 2001 From: jcaparas Date: Mon, 4 Jan 2021 10:41:37 -0800 Subject: [PATCH 295/486] Update linux-support-events.md --- .../microsoft-defender-atp/linux-support-events.md | 6 +++--- 1 file changed, 3 insertions(+), 3 deletions(-) diff --git a/windows/security/threat-protection/microsoft-defender-atp/linux-support-events.md b/windows/security/threat-protection/microsoft-defender-atp/linux-support-events.md index f541d9d0d0..0d035c7cf7 100644 --- a/windows/security/threat-protection/microsoft-defender-atp/linux-support-events.md +++ b/windows/security/threat-protection/microsoft-defender-atp/linux-support-events.md @@ -29,12 +29,12 @@ ms.topic: conceptual This article provides some general steps to mitigate missing events or alerts in the [security center](https://securitycenter.windows.com/) portal. -Once MDE had been installed properly on a device, a device page will be generated in the portal and _File_, _Process_, _Network_ and other events should appear in the timeline and advanced hunting pages. +Once Microsoft Defender for Endpoint has been installed properly on a device, a device page will be generated in the portal and _File_, _Process_, _Network_ and other events should appear in the timeline and advanced hunting pages. In case events are not appearing or some types of events are missing, that could indicate some problem. ## Missing network and login events -MDE utilized `audit` framework from linux to track network and login activity. +Microsoft Defender for Endpoint utilized `audit` framework from linux to track network and login activity. 1. Make sure audit framework is working. @@ -75,7 +75,7 @@ MDE utilized `audit` framework from linux to track network and login activity. sudo auditctl -l ``` - if the following line is present, please remove it or edit it to enable MDE to track specific SYSCALLs. + if the following line is present, please remove it or edit it to enable Microsoft Defender for Endpoint to track specific SYSCALLs. ```output -a task, never From 7b08a9c1a6217a54e0bb988c474bd5f995653c2e Mon Sep 17 00:00:00 2001 From: jcaparas Date: Mon, 4 Jan 2021 10:42:38 -0800 Subject: [PATCH 296/486] Update linux-support-perf.md --- .../microsoft-defender-atp/linux-support-perf.md | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/windows/security/threat-protection/microsoft-defender-atp/linux-support-perf.md b/windows/security/threat-protection/microsoft-defender-atp/linux-support-perf.md index 6e3ff940d3..ab5e272c34 100644 --- a/windows/security/threat-protection/microsoft-defender-atp/linux-support-perf.md +++ b/windows/security/threat-protection/microsoft-defender-atp/linux-support-perf.md @@ -51,7 +51,7 @@ The following steps can be used to troubleshoot and mitigate these issues: If your device is managed by your organization, real-time protection can be disabled by your administrator using the instructions in [Set preferences for Defender for Endpoint for Linux](linux-preferences.md). - If the performance problem persists while real-time protection is off, the origin of the problem could the EDR component. In this case please contact customer support for further instructions and mitigation. + If the performance problem persists while real-time protection is off, the origin of the problem could be the endpoint detection and response component. In this case please contact customer support for further instructions and mitigation. 2. To find the applications that are triggering the most scans, you can use real-time statistics gathered by Defender for Endpoint for Linux. From afae7f15ddac1bb06551620e897c1cc19ce1d1bf Mon Sep 17 00:00:00 2001 From: jcaparas Date: Mon, 4 Jan 2021 10:49:09 -0800 Subject: [PATCH 297/486] fix link --- .../microsoft-defender-atp/linux-support-events.md | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/windows/security/threat-protection/microsoft-defender-atp/linux-support-events.md b/windows/security/threat-protection/microsoft-defender-atp/linux-support-events.md index 0d035c7cf7..af7e797106 100644 --- a/windows/security/threat-protection/microsoft-defender-atp/linux-support-events.md +++ b/windows/security/threat-protection/microsoft-defender-atp/linux-support-events.md @@ -85,7 +85,7 @@ Microsoft Defender for Endpoint utilized `audit` framework from linux to track n ## Missing file events -File events are collected with `fanotify` framework. In case some or all file events are missing please make sure fanotify is enabled on the device and that the file system is [supported](microsoft-defender-atp-linux#system-requirements). +File events are collected with `fanotify` framework. In case some or all file events are missing please make sure fanotify is enabled on the device and that the file system is [supported](microsoft-defender-atp-linux.md#system-requirements). List the filesystems on the machine with: From 4667c3bd23d80cd3ce5d077848ee3f69e9630d49 Mon Sep 17 00:00:00 2001 From: jcaparas Date: Mon, 4 Jan 2021 10:55:44 -0800 Subject: [PATCH 298/486] Update linux-support-connectivity.md --- .../microsoft-defender-atp/linux-support-connectivity.md | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/windows/security/threat-protection/microsoft-defender-atp/linux-support-connectivity.md b/windows/security/threat-protection/microsoft-defender-atp/linux-support-connectivity.md index 6c3ebda4cd..9e0a8a30c6 100644 --- a/windows/security/threat-protection/microsoft-defender-atp/linux-support-connectivity.md +++ b/windows/security/threat-protection/microsoft-defender-atp/linux-support-connectivity.md @@ -57,7 +57,7 @@ Testing connection with https://v20.events.data.microsoft.com/ping ... [OK] If the connectivity test fails, check if the device has Internet access and if [any of the endpoints required by the product](microsoft-defender-atp-linux.md#network-connections) are blocked by a proxy or firewall. -Failures with curl error 35 or 60, indicate certificate pinning rejection. Please check if the connection is under SSL or HTTPS inspection. If so, please whitelist MDE from such inspection. +Failures with curl error 35 or 60, indicate certificate pinning rejection. Please check if the connection is under SSL or HTTPS inspection. If so, add Microsoft Defender for Endpoint to the allow list. ## Troubleshooting steps for environments without proxy or with transparent proxy From 130009ae7bcd5672df9e108b244bf0873dd03aef Mon Sep 17 00:00:00 2001 From: Tina Burden Date: Mon, 4 Jan 2021 11:52:09 -0800 Subject: [PATCH 299/486] pencil edit --- .../microsoft-defender-atp/basic-permissions.md | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/windows/security/threat-protection/microsoft-defender-atp/basic-permissions.md b/windows/security/threat-protection/microsoft-defender-atp/basic-permissions.md index af97cb1355..a92747f148 100644 --- a/windows/security/threat-protection/microsoft-defender-atp/basic-permissions.md +++ b/windows/security/threat-protection/microsoft-defender-atp/basic-permissions.md @@ -47,7 +47,7 @@ You can assign users with one of the following levels of permissions: > [!NOTE] > You need to run the PowerShell cmdlets in an elevated command-line. -- Connect to your Azure Active Directory. For more information, see, [Connect-MsolService](https://docs.microsoft.com/powershell/module/msonline/connect-msolservice?view=azureadps-1.0). +- Connect to your Azure Active Directory. For more information, see [Connect-MsolService](https://docs.microsoft.com/powershell/module/msonline/connect-msolservice?view=azureadps-1.0). **Full access**
    Users with full access can log in, view all system information and resolve alerts, submit files for deep analysis, and download the onboarding package. From 5fa5d4f66a21aee83bc4c95be59251909fb92f6e Mon Sep 17 00:00:00 2001 From: jcaparas Date: Mon, 4 Jan 2021 11:54:51 -0800 Subject: [PATCH 300/486] Update windows/security/threat-protection/microsoft-defender-atp/get-ip-statistics.md Co-authored-by: Trond B. Krokli <38162891+illfated@users.noreply.github.com> --- .../microsoft-defender-atp/get-ip-statistics.md | 1 - 1 file changed, 1 deletion(-) diff --git a/windows/security/threat-protection/microsoft-defender-atp/get-ip-statistics.md b/windows/security/threat-protection/microsoft-defender-atp/get-ip-statistics.md index 4f76236a07..29ce380e88 100644 --- a/windows/security/threat-protection/microsoft-defender-atp/get-ip-statistics.md +++ b/windows/security/threat-protection/microsoft-defender-atp/get-ip-statistics.md @@ -95,7 +95,6 @@ Content-type: application/json ``` - | Name | Description | | :--- | :---------- | | Org prevalence | the distinct count of devices that opened network connection to this IP. | From 3e3f2ce52f529fd45b9418b829c4088adb7c7c3f Mon Sep 17 00:00:00 2001 From: jcaparas Date: Mon, 4 Jan 2021 11:54:59 -0800 Subject: [PATCH 301/486] Update windows/security/threat-protection/microsoft-defender-atp/get-ip-statistics.md Co-authored-by: Trond B. Krokli <38162891+illfated@users.noreply.github.com> --- .../microsoft-defender-atp/get-ip-statistics.md | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/windows/security/threat-protection/microsoft-defender-atp/get-ip-statistics.md b/windows/security/threat-protection/microsoft-defender-atp/get-ip-statistics.md index 29ce380e88..04c6b1641c 100644 --- a/windows/security/threat-protection/microsoft-defender-atp/get-ip-statistics.md +++ b/windows/security/threat-protection/microsoft-defender-atp/get-ip-statistics.md @@ -101,5 +101,5 @@ Content-type: application/json | Org first seen | the first connection for this IP in the organization. | | Org last seen | the last connection for this IP in the organization. | -> [!Note] +> [!NOTE] > This statistic information is based on data from the past 30 days. From deb2b53038b3bdeedd956430e3c3c77b3308a5d6 Mon Sep 17 00:00:00 2001 From: jcaparas Date: Mon, 4 Jan 2021 11:55:42 -0800 Subject: [PATCH 302/486] Update get-ip-statistics.md --- .../microsoft-defender-atp/get-ip-statistics.md | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/windows/security/threat-protection/microsoft-defender-atp/get-ip-statistics.md b/windows/security/threat-protection/microsoft-defender-atp/get-ip-statistics.md index 04c6b1641c..ca568de79c 100644 --- a/windows/security/threat-protection/microsoft-defender-atp/get-ip-statistics.md +++ b/windows/security/threat-protection/microsoft-defender-atp/get-ip-statistics.md @@ -42,7 +42,7 @@ Permission type | Permission | Permission display name Application | Ip.Read.All | 'Read IP address profiles' Delegated (work or school account) | Ip.Read.All | 'Read IP address profiles' ->[!Note] +>[!NOTE] > When obtaining a token using user credentials: >- The user needs to have at least the following role permission: 'View Data' (See [Create and manage roles](user-roles.md) for more information) From 3c65f4b71a4ca4c3613ace1822a29593f4d940d3 Mon Sep 17 00:00:00 2001 From: Jordan Geurten Date: Mon, 4 Jan 2021 16:52:22 -0800 Subject: [PATCH 303/486] Updated the levels for the WDAC Wizard topic The WDAC Wizard articles are now parented to "Create your initial WDAC policy" --- .../windows-defender-application-control/TOC.md | 10 +++++----- 1 file changed, 5 insertions(+), 5 deletions(-) diff --git a/windows/security/threat-protection/windows-defender-application-control/TOC.md b/windows/security/threat-protection/windows-defender-application-control/TOC.md index b29a8d0e37..a366bf6b41 100644 --- a/windows/security/threat-protection/windows-defender-application-control/TOC.md +++ b/windows/security/threat-protection/windows-defender-application-control/TOC.md @@ -21,11 +21,11 @@ ##### [Create a WDAC policy for fully-managed devices](create-wdac-policy-for-fully-managed-devices.md) ##### [Create a WDAC policy for fixed-workload devices](create-initial-default-policy.md) ##### [Microsoft recommended block rules](microsoft-recommended-block-rules.md) -### [Using the WDAC Wizard tool](wdac-wizard.md) -#### [Create a base WDAC policy](wdac-wizard-create-base-policy.md) -#### [Create a supplemental WDAC policy](wdac-wizard-create-supplemental-policy.md) -#### [Editing a WDAC policy](wdac-wizard-editing-policy.md) -#### [Merging multiple WDAC policies](wdac-wizard-merging-policies.md) +#### [Using the WDAC Wizard tool](wdac-wizard.md) +##### [Create a base WDAC policy with the Wizard](wdac-wizard-create-base-policy.md) +##### [Create a supplemental WDAC policy with the Wizard](wdac-wizard-create-supplemental-policy.md) +##### [Editing a WDAC policy with the Wizard](wdac-wizard-editing-policy.md) +##### [Merging multiple WDAC policies with the Wizard](wdac-wizard-merging-policies.md) ## [Windows Defender Application Control deployment guide](windows-defender-application-control-deployment-guide.md) From 84f185edd619282636ecaee93761d566c3629ac2 Mon Sep 17 00:00:00 2001 From: Gary Moore Date: Mon, 4 Jan 2021 16:59:42 -0800 Subject: [PATCH 304/486] Added vertical space --- .../microsoft-defender-atp/basic-permissions.md | 3 +++ 1 file changed, 3 insertions(+) diff --git a/windows/security/threat-protection/microsoft-defender-atp/basic-permissions.md b/windows/security/threat-protection/microsoft-defender-atp/basic-permissions.md index 9cddee17c5..1c8fc2eacd 100644 --- a/windows/security/threat-protection/microsoft-defender-atp/basic-permissions.md +++ b/windows/security/threat-protection/microsoft-defender-atp/basic-permissions.md @@ -63,10 +63,13 @@ Assigning read-only access rights requires adding the users to the "Security Rea Use the following steps to assign security roles: - For **read and write** access, assign users to the security administrator role by using the following command: + ```PowerShell Add-MsolRoleMember -RoleName "Security Administrator" -RoleMemberEmailAddress "secadmin@Contoso.onmicrosoft.com" ``` + - For **read-only** access, assign users to the security reader role by using the following command: + ```PowerShell Add-MsolRoleMember -RoleName "Security Reader" -RoleMemberEmailAddress "reader@Contoso.onmicrosoft.com" ``` From b5a5fb637f136d31a5276e2db48a68958a5b6d8a Mon Sep 17 00:00:00 2001 From: Gary Moore Date: Mon, 4 Jan 2021 17:00:10 -0800 Subject: [PATCH 305/486] Labeled code blocks with valid content types --- .../microsoft-defender-atp/get-ip-statistics.md | 7 ++++--- 1 file changed, 4 insertions(+), 3 deletions(-) diff --git a/windows/security/threat-protection/microsoft-defender-atp/get-ip-statistics.md b/windows/security/threat-protection/microsoft-defender-atp/get-ip-statistics.md index 8b78df80cd..c34fe0e526 100644 --- a/windows/security/threat-protection/microsoft-defender-atp/get-ip-statistics.md +++ b/windows/security/threat-protection/microsoft-defender-atp/get-ip-statistics.md @@ -51,7 +51,8 @@ Delegated (work or school account) | Ip.Read.All | 'Read IP address profiles' >- The user needs to have at least the following role permission: 'View Data' (See [Create and manage roles](user-roles.md) for more information) ## HTTP request -``` + +```http GET /api/ips/{ip}/stats ``` @@ -75,7 +76,7 @@ If successful and ip exists - 200 OK with statistical data in the body. IP do no Here is an example of the request. -``` +```http GET https://api.securitycenter.microsoft.com/api/ips/10.209.67.177/stats ``` @@ -84,7 +85,7 @@ GET https://api.securitycenter.microsoft.com/api/ips/10.209.67.177/stats Here is an example of the response. -``` +```http HTTP/1.1 200 OK Content-type: application/json { From b92c3c2028832ee81c77106bc049988a3d82a0b1 Mon Sep 17 00:00:00 2001 From: Jordan Geurten Date: Mon, 4 Jan 2021 17:03:05 -0800 Subject: [PATCH 306/486] Updated the definition of the 'Wizard' as the first reference to the wizard --- .../windows-defender-application-control/wdac-wizard.md | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/windows/security/threat-protection/windows-defender-application-control/wdac-wizard.md b/windows/security/threat-protection/windows-defender-application-control/wdac-wizard.md index 4e765e5339..399ff347f0 100644 --- a/windows/security/threat-protection/windows-defender-application-control/wdac-wizard.md +++ b/windows/security/threat-protection/windows-defender-application-control/wdac-wizard.md @@ -25,7 +25,7 @@ ms.date: 10/14/2020 - Windows 10 - Windows Server 2016 and above -This article describes the supported scenarios for the Windows Defender Application Control (WDAC) policy Wizard. The Wizard was built to provide security architects, security and system administrators with a more user-friendly means to create, edit, and merge WDAC policies. The Wizard desktop application uses the [ConfigCI PowerShell Cmdlets](https://docs.microsoft.com/powershell/module/configci/?view=win10-ps) in the background so the output policy of the Wizard and PowerShell cmdlets is identical. +The Windows Defender Application Control (WDAC) policy Wizard is an open source Windows desktop application written in C# and bundled as an MSIX pacakge. The Wizard was built to provide security architects, security and system administrators with a more user-friendly means to create, edit, and merge WDAC policies. The Wizard desktop application uses the [ConfigCI PowerShell Cmdlets](https://docs.microsoft.com/powershell/module/configci/?view=win10-ps) in the backend so the output policy of the Wizard and PowerShell cmdlets is identical. ## Downloading the application From 695fb9a00ff804726b428b58a636280353a0e394 Mon Sep 17 00:00:00 2001 From: Gary Moore Date: Mon, 4 Jan 2021 17:06:33 -0800 Subject: [PATCH 307/486] Corrected code block labels and second-level list formatting Valid types for code blocks are listed here: https://review.docs.microsoft.com/en-us/help/contribute/metadata-taxonomies?branch=master --- .../microsoft-defender-atp/respond-file-alerts.md | 13 +++++++++---- 1 file changed, 9 insertions(+), 4 deletions(-) diff --git a/windows/security/threat-protection/microsoft-defender-atp/respond-file-alerts.md b/windows/security/threat-protection/microsoft-defender-atp/respond-file-alerts.md index ef8a82a89f..05fd5e59e7 100644 --- a/windows/security/threat-protection/microsoft-defender-atp/respond-file-alerts.md +++ b/windows/security/threat-protection/microsoft-defender-atp/respond-file-alerts.md @@ -94,6 +94,7 @@ This action takes effect on devices with Windows 10, version 1703 or later, wher ![Image of stop and quarantine file modal window](images/atp-stop-quarantine.png) The Action center shows the submission information: + ![Image of stop and quarantine file action center](images/atp-stopnquarantine-file.png) - **Submission time** - Shows when the action was submitted. @@ -118,13 +119,13 @@ You can roll back and remove a file from quarantine if you’ve determined that 1. Open an elevated command–line prompt on the device: - a. Go to **Start** and type _cmd_. + 1. Go to **Start** and type _cmd_. - b. Right–click **Command prompt** and select **Run as administrator**. + 1. Right–click **Command prompt** and select **Run as administrator**. 2. Enter the following command, and press **Enter**: - ```Powershell + ```powershell “%ProgramFiles%\Windows Defender\MpCmdRun.exe” –Restore –Name EUS:Win32/CustomEnterpriseBlock –All ``` @@ -273,11 +274,14 @@ The details provided can help you investigate if there are indications of a pote If you encounter a problem when trying to submit a file, try each of the following troubleshooting steps. 1. Ensure that the file in question is a PE file. PE files typically have _.exe_ or _.dll_ extensions (executable programs or applications). + 1. Ensure the service has access to the file, that it still exists, and has not been corrupted or modified. + 1. You can wait a short while and try to submit the file again, in case the queue is full or there was a temporary connection or communication error. + 1. If the sample collection policy is not configured, then the default behavior is to allow sample collection. If it is configured, then verify the policy setting allows sample collection before submitting the file again. When sample collection is configured, then check the following registry value: - ```Powershell + ```powershell Path: HKLM\SOFTWARE\Policies\Microsoft\Windows Advanced Threat Protection Name: AllowSampleCollection Type: DWORD @@ -287,6 +291,7 @@ If you encounter a problem when trying to submit a file, try each of the followi ``` 1. Change the organizational unit through the Group Policy. For more information, see [Configure with Group Policy](configure-endpoints-gp.md). + 1. If these steps do not resolve the issue, contact [winatp@microsoft.com](mailto:winatp@microsoft.com). ## Related topics From a66d47b32a6d637cdcea3a823c9da0577323836e Mon Sep 17 00:00:00 2001 From: VARADHARAJAN K <3296790+RAJU2529@users.noreply.github.com> Date: Tue, 5 Jan 2021 10:20:55 +0530 Subject: [PATCH 308/486] typo correction as per the user report #8904, so I corrected the word cashed to cached --- windows/security/threat-protection/auditing/event-4624.md | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/windows/security/threat-protection/auditing/event-4624.md b/windows/security/threat-protection/auditing/event-4624.md index b310cd06ca..637a86a151 100644 --- a/windows/security/threat-protection/auditing/event-4624.md +++ b/windows/security/threat-protection/auditing/event-4624.md @@ -156,7 +156,7 @@ This event generates when a logon session is created (on destination machine). I | `9` | `NewCredentials` | A caller cloned its current token and specified new credentials for outbound connections. The new logon session has the same local identity, but uses different credentials for other network connections. | | `10` | `RemoteInteractive` | A user logged on to this computer remotely using Terminal Services or Remote Desktop. | | `11` | `CachedInteractive` | A user logged on to this computer with network credentials that were stored locally on the computer. The domain controller was not contacted to verify the credentials. | -| `12` | `CashedRemoteInteractive` | Same as RemoteInteractive. This is used for internal auditing. | +| `12` | `CachedRemoteInteractive` | Same as RemoteInteractive. This is used for internal auditing. | | `13` | `CachedUnlock` | Workstation logon. | - **Restricted Admin Mode** \[Version 2\] \[Type = UnicodeString\]**:** Only populated for **RemoteInteractive** logon type sessions. This is a Yes/No flag indicating if the credentials provided were passed using Restricted Admin mode. Restricted Admin mode was added in Win8.1/2012R2 but this flag was added to the event in Win10. From 16cd7c964c3ba94b8dba60d4cf82b17f931dcfb3 Mon Sep 17 00:00:00 2001 From: "Trond B. Krokli" <38162891+illfated@users.noreply.github.com> Date: Tue, 5 Jan 2021 10:04:34 +0100 Subject: [PATCH 309/486] missing period dot ( . ) in line 348 Co-authored-by: JohanFreelancer9 <48568725+JohanFreelancer9@users.noreply.github.com> --- .../hello-for-business/hello-hybrid-aadj-sso-cert.md | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/windows/security/identity-protection/hello-for-business/hello-hybrid-aadj-sso-cert.md b/windows/security/identity-protection/hello-for-business/hello-hybrid-aadj-sso-cert.md index e8dc2df8f2..23c62b474a 100644 --- a/windows/security/identity-protection/hello-for-business/hello-hybrid-aadj-sso-cert.md +++ b/windows/security/identity-protection/hello-for-business/hello-hybrid-aadj-sso-cert.md @@ -345,7 +345,7 @@ Sign-in to the certificate authority or management workstations with an _Enterpr ![NDES Installation Credentials](images/aadjcert/ndesconfig01.png) 3. On the **Role Services** page, select **Network Device Enrollment Service** and then click **Next** ![NDES Role Services](images/aadjcert/ndesconfig02.png) -4. On the **Service Account for NDES** page, select **Specify service account (recommended)**. Click **Select...** Type the user name and password for the NDES service account in the **Windows Security** dialog box. Click **Next**. +4. On the **Service Account for NDES** page, select **Specify service account (recommended)**. Click **Select...**. Type the user name and password for the NDES service account in the **Windows Security** dialog box. Click **Next**. ![NDES Service Account for NDES](images/aadjcert/ndesconfig03b.png) 5. On the **CA for NDES** page, select **CA name**. Click **Select...**. Select the issuing certificate authority from which the NDES server requests certificates. Click **Next**. ![NDES CA selection](images/aadjcert/ndesconfig04.png) From fef05431b3baec7f5f13282596ad649e7150e1a0 Mon Sep 17 00:00:00 2001 From: "Trond B. Krokli" <38162891+illfated@users.noreply.github.com> Date: Tue, 5 Jan 2021 10:06:08 +0100 Subject: [PATCH 310/486] missing plural S in "three certificate template" (line 359) Co-authored-by: JohanFreelancer9 <48568725+JohanFreelancer9@users.noreply.github.com> --- .../hello-for-business/hello-hybrid-aadj-sso-cert.md | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/windows/security/identity-protection/hello-for-business/hello-hybrid-aadj-sso-cert.md b/windows/security/identity-protection/hello-for-business/hello-hybrid-aadj-sso-cert.md index 23c62b474a..82d0d79705 100644 --- a/windows/security/identity-protection/hello-for-business/hello-hybrid-aadj-sso-cert.md +++ b/windows/security/identity-protection/hello-for-business/hello-hybrid-aadj-sso-cert.md @@ -356,7 +356,7 @@ Sign-in to the certificate authority or management workstations with an _Enterpr 8. Click **Close** after the configuration completes. #### Configure Certificate Templates on NDES -A single NDES server can request a maximum of three certificate template. The NDES server determines which certificate to issue based on the incoming certificate request that is assigned in the Microsoft Intune SCEP certificate profile. The Microsoft Intune SCEP certificate profile has three values. +A single NDES server can request a maximum of three certificate templates. The NDES server determines which certificate to issue based on the incoming certificate request that is assigned in the Microsoft Intune SCEP certificate profile. The Microsoft Intune SCEP certificate profile has three values. * Digital Signature * Key Encipherment * Key Encipherment, Digital Signature From 8fa226d4f0eabf152c01c7ff57736de5d6819f88 Mon Sep 17 00:00:00 2001 From: "Trond B. Krokli" <38162891+illfated@users.noreply.github.com> Date: Tue, 5 Jan 2021 10:10:47 +0100 Subject: [PATCH 311/486] multiple grammar issues in one sentence (line 364) - translate -> translates - provide -> provided - correspond -> corresponding - belows -> below - value to -> values of - name -> names Co-authored-by: JohanFreelancer9 <48568725+JohanFreelancer9@users.noreply.github.com> --- .../hello-for-business/hello-hybrid-aadj-sso-cert.md | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/windows/security/identity-protection/hello-for-business/hello-hybrid-aadj-sso-cert.md b/windows/security/identity-protection/hello-for-business/hello-hybrid-aadj-sso-cert.md index 82d0d79705..e41296761c 100644 --- a/windows/security/identity-protection/hello-for-business/hello-hybrid-aadj-sso-cert.md +++ b/windows/security/identity-protection/hello-for-business/hello-hybrid-aadj-sso-cert.md @@ -361,7 +361,7 @@ A single NDES server can request a maximum of three certificate templates. The * Key Encipherment * Key Encipherment, Digital Signature -Each value maps to a registry value name in the NDES server. The NDES server translate an incoming SCEP provide value into the correspond certificate template. The table belows shows the SCEP profile value to the NDES certificate template registry value name +Each value maps to a registry value name in the NDES server. The NDES server translates an incoming SCEP provided value into the corresponding certificate template. The table below shows the SCEP profile values of the NDES certificate template registry value names. | SCEP Profile Key usage| NDES Registry Value Name | | :-------------------: | :----------------------: | From d775c3fc4ddb8d1466a548d4de3e66feddde7760 Mon Sep 17 00:00:00 2001 From: "Trond B. Krokli" <38162891+illfated@users.noreply.github.com> Date: Tue, 5 Jan 2021 10:15:06 +0100 Subject: [PATCH 312/486] grammar & template reference naming - missing definite article, 2 occurrences (line 372) - encryptionTemplate -> encryption template Co-authored-by: JohanFreelancer9 <48568725+JohanFreelancer9@users.noreply.github.com> --- .../hello-for-business/hello-hybrid-aadj-sso-cert.md | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/windows/security/identity-protection/hello-for-business/hello-hybrid-aadj-sso-cert.md b/windows/security/identity-protection/hello-for-business/hello-hybrid-aadj-sso-cert.md index e41296761c..5b3a471495 100644 --- a/windows/security/identity-protection/hello-for-business/hello-hybrid-aadj-sso-cert.md +++ b/windows/security/identity-protection/hello-for-business/hello-hybrid-aadj-sso-cert.md @@ -369,7 +369,7 @@ Each value maps to a registry value name in the NDES server. The NDES server tr | Key Encipherment | EncryptionTemplate | | Key Encipherment
    Digital Signature | GeneralPurposeTemplate | -Ideally, you should match the certificate request with registry value name to keep the configuration intuitive (encryption certificates use the encryptionTemplate, signature certificates use the signature template, etc.). A result of this intuitive design is the potential exponential growth in NDES server. Imagine an organization that needs to issue nine unique signature certificates across their enterprise. +Ideally, you should match the certificate request with the registry value name to keep the configuration intuitive (encryption certificates use the encryption template, signature certificates use the signature template, etc.). A result of this intuitive design is the potential exponential growth in the NDES server. Imagine an organization that needs to issue nine unique signature certificates across their enterprise. If the need arises, you can configure a signature certificate in the encryption registry value name or an encryption certificate in the signature registry value to maximize the use of your NDES infrastructure. This unintuitive design requires current and accurate documentation of the configuration to ensure the SCEP certificate profile is configured to enroll the correct certificate, regardless of the actual purpose. Each organization needs to balance ease of configuration and administration with additional NDES infrastructure and the management overhead that comes with it. From bbd85b903da1ce62f7a9d6ada6ed86b5ab1125a2 Mon Sep 17 00:00:00 2001 From: "Trond B. Krokli" <38162891+illfated@users.noreply.github.com> Date: Tue, 5 Jan 2021 10:16:47 +0100 Subject: [PATCH 313/486] URLLs double L typo correction (line 449) Co-authored-by: JohanFreelancer9 <48568725+JohanFreelancer9@users.noreply.github.com> --- .../hello-for-business/hello-hybrid-aadj-sso-cert.md | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/windows/security/identity-protection/hello-for-business/hello-hybrid-aadj-sso-cert.md b/windows/security/identity-protection/hello-for-business/hello-hybrid-aadj-sso-cert.md index 5b3a471495..31b2fc5946 100644 --- a/windows/security/identity-protection/hello-for-business/hello-hybrid-aadj-sso-cert.md +++ b/windows/security/identity-protection/hello-for-business/hello-hybrid-aadj-sso-cert.md @@ -446,7 +446,7 @@ Sign-in a workstation with access equivalent to a _domain user_. ![Azure NDES Application Proxy Configuration](images/aadjcert/azureconsole-appproxyconfig.png) 8. Select **Passthrough** from the **Pre Authentication** list. 9. Select **NDES WHFB Connectors** from the **Connector Group** list. -10. Under **Additional Settings**, select **Default** from **Backend Application Timeout**. Under the **Translate URLLs In** section, select **Yes** next to **Headers** and select **No** next to **Application Body**. +10. Under **Additional Settings**, select **Default** from **Backend Application Timeout**. Under the **Translate URLs In** section, select **Yes** next to **Headers** and select **No** next to **Application Body**. 11. Click **Add**. 12. Sign-out of the Azure Portal. From 49ec0a4a5cef7476eae87e8eb11c73bd2d04ad0e Mon Sep 17 00:00:00 2001 From: "Trond B. Krokli" <38162891+illfated@users.noreply.github.com> Date: Tue, 5 Jan 2021 10:18:13 +0100 Subject: [PATCH 314/486] missing indefinite article, missing noun (line 510) Co-authored-by: JohanFreelancer9 <48568725+JohanFreelancer9@users.noreply.github.com> --- .../hello-for-business/hello-hybrid-aadj-sso-cert.md | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/windows/security/identity-protection/hello-for-business/hello-hybrid-aadj-sso-cert.md b/windows/security/identity-protection/hello-for-business/hello-hybrid-aadj-sso-cert.md index 31b2fc5946..bd48c6427b 100644 --- a/windows/security/identity-protection/hello-for-business/hello-hybrid-aadj-sso-cert.md +++ b/windows/security/identity-protection/hello-for-business/hello-hybrid-aadj-sso-cert.md @@ -507,7 +507,7 @@ Sign-in the NDES server with access equivalent to _local administrator_. ``` where **[fqdnHostName]** is the fully qualified internal DNS host name of the NDES server. -A web page similar to the following should appear in your web browser. If you do not see similar page, or you get a **503 Service unavailable**, ensure the NDES Service account as the proper user rights. You can also review the application event log for events with the **NetworkDeviceEnrollmentSerice** source. +A web page similar to the following should appear in your web browser. If you do not see a similar page, or you get a **503 Service unavailable** message, ensure the NDES Service account has the proper user rights. You can also review the application event log for events with the **NetworkDeviceEnrollmentSerice** source. ![NDES IIS Console](images/aadjcert/ndes-https-website-test-01.png) From e3cbee4767dfa592313d17f3e5079b1fb322191d Mon Sep 17 00:00:00 2001 From: "Trond B. Krokli" <38162891+illfated@users.noreply.github.com> Date: Tue, 5 Jan 2021 10:18:54 +0100 Subject: [PATCH 315/486] missing period dot ( . ) (line 583) Co-authored-by: JohanFreelancer9 <48568725+JohanFreelancer9@users.noreply.github.com> --- .../hello-for-business/hello-hybrid-aadj-sso-cert.md | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/windows/security/identity-protection/hello-for-business/hello-hybrid-aadj-sso-cert.md b/windows/security/identity-protection/hello-for-business/hello-hybrid-aadj-sso-cert.md index bd48c6427b..b72a7ff097 100644 --- a/windows/security/identity-protection/hello-for-business/hello-hybrid-aadj-sso-cert.md +++ b/windows/security/identity-protection/hello-for-business/hello-hybrid-aadj-sso-cert.md @@ -580,7 +580,7 @@ Sign-in the NDES server with access equivalent to _domain administrator_. ![Intune Connector Install 06](images/aadjcert/intunecertconnectorinstall-06.png) > [!NOTE] - > You can review the results of the install using the **SetupMsi.log** file located in the **C:\\NDESConnectorSetupMsi** folder + > You can review the results of the install using the **SetupMsi.log** file located in the **C:\\NDESConnectorSetupMsi** folder. 10. When the installation completes, select **Launch Intune Connector** and click Finish. Proceed to the Configure the Intune Certificate Connector task. ![Intune Connector install 07](images/aadjcert/intunecertconnectorinstall-07.png) From 02d5692cc1c2c9b73284feded43fd68893f1cd6d Mon Sep 17 00:00:00 2001 From: "Trond B. Krokli" <38162891+illfated@users.noreply.github.com> Date: Tue, 5 Jan 2021 10:20:22 +0100 Subject: [PATCH 316/486] Double capitalized letter word typo (line 624) Co-authored-by: JohanFreelancer9 <48568725+JohanFreelancer9@users.noreply.github.com> --- .../hello-for-business/hello-hybrid-aadj-sso-cert.md | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/windows/security/identity-protection/hello-for-business/hello-hybrid-aadj-sso-cert.md b/windows/security/identity-protection/hello-for-business/hello-hybrid-aadj-sso-cert.md index b72a7ff097..7a58e40fde 100644 --- a/windows/security/identity-protection/hello-for-business/hello-hybrid-aadj-sso-cert.md +++ b/windows/security/identity-protection/hello-for-business/hello-hybrid-aadj-sso-cert.md @@ -621,7 +621,7 @@ Sign-in the certificate authority used by the NDES Connector with access equival Sign-in the NDES server with access equivalent to _domain administrator_. 1. Open the **NDES Connector** user interface (**\\NDESConnectorUI\NDESConnectorUI.exe**). -2. Click the **Advanced** tab. Select **Specify a different account username and password**. TYpe the NDES service account username and password. Click **Apply**. Click **OK** to close the confirmation dialog box. Click **Close**. +2. Click the **Advanced** tab. Select **Specify a different account username and password**. Type the NDES service account username and password. Click **Apply**. Click **OK** to close the confirmation dialog box. Click **Close**. ![Intune Connector cert revocation configuration 04](images/aadjcert/intunecertconnectorconfig-04.png) 3. Restart the **Intune Connector Service** and the **World Wide Web Publishing Service**. From c1947a84ad9f4b8d0ad99a46cf3a591d3e14f4a6 Mon Sep 17 00:00:00 2001 From: "Trond B. Krokli" <38162891+illfated@users.noreply.github.com> Date: Tue, 5 Jan 2021 10:22:20 +0100 Subject: [PATCH 317/486] verb typo correction, add missing noun (line 643) Co-authored-by: JohanFreelancer9 <48568725+JohanFreelancer9@users.noreply.github.com> --- .../hello-for-business/hello-hybrid-aadj-sso-cert.md | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/windows/security/identity-protection/hello-for-business/hello-hybrid-aadj-sso-cert.md b/windows/security/identity-protection/hello-for-business/hello-hybrid-aadj-sso-cert.md index 7a58e40fde..88cac79cd9 100644 --- a/windows/security/identity-protection/hello-for-business/hello-hybrid-aadj-sso-cert.md +++ b/windows/security/identity-protection/hello-for-business/hello-hybrid-aadj-sso-cert.md @@ -640,7 +640,7 @@ Sign-in the NDES server with access equivalent to _domain admin_. https://[fqdnHostName]/certsrv/mscep/mscep.dll ``` where **[fqdnHostName]** is the fully qualified internal DNS host name of the NDES server. - A web page showing a 403 error (similar to the following) should appear in your web browser. If you do not see similar page, or you get a **503 Service unavailable**, ensure the NDES Service account as the proper user rights. You can also review the application event log for events with the **NetworkDeviceEnrollmentSerice** source. + A web page showing a 403 error (similar to the following) should appear in your web browser. If you do not see a similar page, or you get a **503 Service unavailable** message, ensure the NDES Service account has the proper user rights. You can also review the application event log for events with the **NetworkDeviceEnrollmentSerice** source. ![NDES web site test after Intune Certificate Connector](images/aadjcert/ndes-https-website-test-after-intune-connector.png) 6. Using **Server Manager**, enable **Internet Explorer Enhanced Security Configuration**. From 2ffc55bd3ec7dac166274a302a36b5e51e8c1dba Mon Sep 17 00:00:00 2001 From: "Trond B. Krokli" <38162891+illfated@users.noreply.github.com> Date: Tue, 5 Jan 2021 10:24:36 +0100 Subject: [PATCH 318/486] verb form correction (line 69) - "need to" -> needed Co-authored-by: JohanFreelancer9 <48568725+JohanFreelancer9@users.noreply.github.com> --- .../hello-for-business/hello-hybrid-aadj-sso-cert.md | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/windows/security/identity-protection/hello-for-business/hello-hybrid-aadj-sso-cert.md b/windows/security/identity-protection/hello-for-business/hello-hybrid-aadj-sso-cert.md index 88cac79cd9..ec87491d7d 100644 --- a/windows/security/identity-protection/hello-for-business/hello-hybrid-aadj-sso-cert.md +++ b/windows/security/identity-protection/hello-for-business/hello-hybrid-aadj-sso-cert.md @@ -66,7 +66,7 @@ Successful authentication to on-premises resources using a certificate requires Most environments change the user principal name suffix to match the organization's external domain name (or vanity domain), which prevents the user principal name as a hint to locate a domain controller. Therefore, the certificate needs the user's on-premises distinguished name in the subject to properly locate a domain controller. -To include the on-premises distinguished name in the certificate's subject, Azure AD Connect must replicate the Active Directory **distinguishedName** attribute to the Azure Active Directory **onPremisesDistinguishedName** attribute. Azure AD Connect version 1.1.819 includes the proper synchronization rules need to for these attributes. +To include the on-premises distinguished name in the certificate's subject, Azure AD Connect must replicate the Active Directory **distinguishedName** attribute to the Azure Active Directory **onPremisesDistinguishedName** attribute. Azure AD Connect version 1.1.819 includes the proper synchronization rules needed for these attributes. ### Verify AAD Connect version Sign-in to computer running Azure AD Connect with access equivalent to _local administrator_. From 5671cfff44e143723262222d1a8c267621db9d1e Mon Sep 17 00:00:00 2001 From: "Trond B. Krokli" <38162891+illfated@users.noreply.github.com> Date: Tue, 5 Jan 2021 10:25:51 +0100 Subject: [PATCH 319/486] missing definite article & infinitive marker (line 125) Co-authored-by: JohanFreelancer9 <48568725+JohanFreelancer9@users.noreply.github.com> --- .../hello-for-business/hello-hybrid-aadj-sso-cert.md | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/windows/security/identity-protection/hello-for-business/hello-hybrid-aadj-sso-cert.md b/windows/security/identity-protection/hello-for-business/hello-hybrid-aadj-sso-cert.md index ec87491d7d..4b4966566f 100644 --- a/windows/security/identity-protection/hello-for-business/hello-hybrid-aadj-sso-cert.md +++ b/windows/security/identity-protection/hello-for-business/hello-hybrid-aadj-sso-cert.md @@ -122,7 +122,7 @@ Sign-in to a domain controller or management workstation with access equivalent > Configuring the service's account password to **Password never expires** may be more convenient, but it presents a security risk. Normal service account passwords should expire in accordance with the organizations user password expiration policy. Create a reminder to change the service account's password two weeks before it will expire. Share the reminder with others that are allowed to change the password to ensure the password is changed before it expires. ### Create the NDES Service User Rights Group Policy object -The Group Policy object ensures the NDES Service account has the proper user right assign all the NDES servers in the **NDES Servers** group. As you add new NDES servers to your environment and this group, the service account automatically receives the proper user rights through Group Policy. +The Group Policy object ensures the NDES Service account has the proper user right to assign all the NDES servers in the **NDES Servers** group. As you add new NDES servers to your environment and this group, the service account automatically receives the proper user rights through the Group Policy. Sign-in a domain controller or management workstations with _Domain Admin_ equivalent credentials. From f3f6450556f26cc071628c2dc1922f3ab4371135 Mon Sep 17 00:00:00 2001 From: "Trond B. Krokli" <38162891+illfated@users.noreply.github.com> Date: Tue, 5 Jan 2021 10:39:07 +0100 Subject: [PATCH 320/486] plural/singular noun correction (line 59) Co-authored-by: JohanFreelancer9 <48568725+JohanFreelancer9@users.noreply.github.com> --- .../hello-for-business/hello-hybrid-aadj-sso-cert.md | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/windows/security/identity-protection/hello-for-business/hello-hybrid-aadj-sso-cert.md b/windows/security/identity-protection/hello-for-business/hello-hybrid-aadj-sso-cert.md index 4b4966566f..94c374762b 100644 --- a/windows/security/identity-protection/hello-for-business/hello-hybrid-aadj-sso-cert.md +++ b/windows/security/identity-protection/hello-for-business/hello-hybrid-aadj-sso-cert.md @@ -56,7 +56,7 @@ The Network Device Enrollment Service (NDES) server role can issue up to three u - Encryption - Signature and Encryption -If you need to deploy more than three types of certificates to the Azure AD joined device, you need additional NDES servers. Alternatively, consider consolidating certificates templates to reduce the number of certificate templates. +If you need to deploy more than three types of certificates to the Azure AD joined device, you need additional NDES servers. Alternatively, consider consolidating certificate templates to reduce the number of certificate templates. ### Network Requirements All communication occurs securely over port 443. From 3cb16011e49b3fa777c0686188502faf821f7e70 Mon Sep 17 00:00:00 2001 From: "Trond B. Krokli" <38162891+illfated@users.noreply.github.com> Date: Tue, 5 Jan 2021 10:40:01 +0100 Subject: [PATCH 321/486] redundant double spacing inside sentence (line 142) Co-authored-by: JohanFreelancer9 <48568725+JohanFreelancer9@users.noreply.github.com> --- .../hello-for-business/hello-hybrid-aadj-sso-cert.md | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/windows/security/identity-protection/hello-for-business/hello-hybrid-aadj-sso-cert.md b/windows/security/identity-protection/hello-for-business/hello-hybrid-aadj-sso-cert.md index 94c374762b..230e8fc1a3 100644 --- a/windows/security/identity-protection/hello-for-business/hello-hybrid-aadj-sso-cert.md +++ b/windows/security/identity-protection/hello-for-business/hello-hybrid-aadj-sso-cert.md @@ -139,7 +139,7 @@ Sign-in a domain controller or management workstations with _Domain Admin_ equiv 11. Close the **Group Policy Management Editor**. ### Configure security for the NDES Service User Rights Group Policy object -The best way to deploy the **NDES Service User Rights** Group Policy object is to use security group filtering. This enables you to easily manage the computers that receive the Group Policy settings by adding them to a group. +The best way to deploy the **NDES Service User Rights** Group Policy object is to use security group filtering. This enables you to easily manage the computers that receive the Group Policy settings by adding them to a group. Sign-in to a domain controller or management workstation with access equivalent to _domain administrator_. From c89b7d07943895d7b6ba9d809b1ee99c4b1af4bd Mon Sep 17 00:00:00 2001 From: "Trond B. Krokli" <38162891+illfated@users.noreply.github.com> Date: Tue, 5 Jan 2021 10:41:07 +0100 Subject: [PATCH 322/486] incorrect definite particle in front of proper noun (line 208) Co-authored-by: JohanFreelancer9 <48568725+JohanFreelancer9@users.noreply.github.com> --- .../hello-for-business/hello-hybrid-aadj-sso-cert.md | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/windows/security/identity-protection/hello-for-business/hello-hybrid-aadj-sso-cert.md b/windows/security/identity-protection/hello-for-business/hello-hybrid-aadj-sso-cert.md index 230e8fc1a3..bd6bc2384e 100644 --- a/windows/security/identity-protection/hello-for-business/hello-hybrid-aadj-sso-cert.md +++ b/windows/security/identity-protection/hello-for-business/hello-hybrid-aadj-sso-cert.md @@ -205,7 +205,7 @@ Sign-in to the issuing certificate authority or management workstations with _Do 10. Click on the **Apply** to save changes and close the console. ### Create an Azure AD joined Windows Hello for Business authentication certificate template -During Windows Hello for Business provisioning, Windows 10 requests an authentication certificate from the Microsoft Intune, which requests the authentication certificate on behalf of the user. This task configures the Windows Hello for Business authentication certificate template. You use the name of the certificate template when configuring the NDES Server. +During Windows Hello for Business provisioning, Windows 10 requests an authentication certificate from Microsoft Intune, which requests the authentication certificate on behalf of the user. This task configures the Windows Hello for Business authentication certificate template. You use the name of the certificate template when configuring the NDES Server. Sign in a certificate authority or management workstations with _Domain Admin equivalent_ credentials. From fa9ef702ed2ea255dae2a85454883ae416dddab2 Mon Sep 17 00:00:00 2001 From: "Trond B. Krokli" <38162891+illfated@users.noreply.github.com> Date: Tue, 5 Jan 2021 10:42:53 +0100 Subject: [PATCH 323/486] incorrect definite particle & conjunction comma (line 226) Co-authored-by: JohanFreelancer9 <48568725+JohanFreelancer9@users.noreply.github.com> --- .../hello-for-business/hello-hybrid-aadj-sso-cert.md | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/windows/security/identity-protection/hello-for-business/hello-hybrid-aadj-sso-cert.md b/windows/security/identity-protection/hello-for-business/hello-hybrid-aadj-sso-cert.md index bd6bc2384e..df2d14cdb3 100644 --- a/windows/security/identity-protection/hello-for-business/hello-hybrid-aadj-sso-cert.md +++ b/windows/security/identity-protection/hello-for-business/hello-hybrid-aadj-sso-cert.md @@ -223,7 +223,7 @@ Sign in a certificate authority or management workstations with _Domain Admin eq 8. On the **Subject** tab, select **Supply in the request**. 9. On the **Request Handling** tab, select **Signature and encryption** from the **Purpose** list. Select the **Renew with same key** check box. Select **Enroll subject without requiring any user input**. 10. On the **Security** tab, click **Add**. Type **NDESSvc** in the **Enter the object names to select** text box and click **OK**. -12. Select **NDESSvc** from the **Group or users names** list. In the **Permissions for NDES Servers** section, select the **Allow** check box for the **Read**, **Enroll**. Clear the **Allow** check box for the **Enroll** and **Autoenroll** permissions for all other entries in the **Group or users names** section if the check boxes are not already cleared. Click **OK**. +12. Select **NDESSvc** from the **Group or users names** list. In the **Permissions for NDES Servers** section, select the **Allow** check box for **Read** and **Enroll**. Clear the **Allow** check box for the **Enroll** and **Autoenroll** permissions for all other entries in the **Group or users names** section if the check boxes are not already cleared. Click **OK**. 13. Close the console. ### Publish certificate templates From c24cb2021a1e760afeb0a1b53faa6c72eb68cfe7 Mon Sep 17 00:00:00 2001 From: "Trond B. Krokli" <38162891+illfated@users.noreply.github.com> Date: Tue, 5 Jan 2021 10:44:30 +0100 Subject: [PATCH 324/486] codestyle: all uppercase in MD [!Important] note blob (line 280) Co-authored-by: JohanFreelancer9 <48568725+JohanFreelancer9@users.noreply.github.com> --- .../hello-for-business/hello-hybrid-aadj-sso-cert.md | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/windows/security/identity-protection/hello-for-business/hello-hybrid-aadj-sso-cert.md b/windows/security/identity-protection/hello-for-business/hello-hybrid-aadj-sso-cert.md index df2d14cdb3..ed0cfab100 100644 --- a/windows/security/identity-protection/hello-for-business/hello-hybrid-aadj-sso-cert.md +++ b/windows/security/identity-protection/hello-for-business/hello-hybrid-aadj-sso-cert.md @@ -277,7 +277,7 @@ Sign-in to the certificate authority or management workstations with an _Enterpr * **Management Tools > IIS 6 Management Compatibility > IIS 6 WMI Compatibility** ![Server Manager Web Server Role](images/aadjcert/servermanager-adcs-webserver-role.png) 9. Click **Install**. When the installation completes, continue with the next procedure. **Do not click Close**. - > [!Important] + > [!IMPORTANT] > .NET Framework 3.5 is not included in the typical installation. If the server is connected to the Internet, the installation attempts to get the files using Windows Update. If the server is not connected to the Internet, you need to **Specify an alternate source path** such as \:\\Sources\SxS\ ![.NET Side by Side](images/aadjcert/dotNet35sidebyside.png) From e06dc94e2bfb7b906a134ec1c91497de9cb56762 Mon Sep 17 00:00:00 2001 From: "Trond B. Krokli" <38162891+illfated@users.noreply.github.com> Date: Tue, 5 Jan 2021 10:45:11 +0100 Subject: [PATCH 325/486] removal of incorrectly placed indefinite article (line 296) Co-authored-by: JohanFreelancer9 <48568725+JohanFreelancer9@users.noreply.github.com> --- .../hello-for-business/hello-hybrid-aadj-sso-cert.md | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/windows/security/identity-protection/hello-for-business/hello-hybrid-aadj-sso-cert.md b/windows/security/identity-protection/hello-for-business/hello-hybrid-aadj-sso-cert.md index ed0cfab100..2ef81da96e 100644 --- a/windows/security/identity-protection/hello-for-business/hello-hybrid-aadj-sso-cert.md +++ b/windows/security/identity-protection/hello-for-business/hello-hybrid-aadj-sso-cert.md @@ -293,7 +293,7 @@ Sign-in the NDES server with access equivalent to _local administrator_. 4. Close the management console. #### Register a Service Principal Name on the NDES Service account -Sign-in the NDES server with a access equivalent to _Domain Admins_. +Sign-in the NDES server with access equivalent to _Domain Admins_. 1. Open an elevated command prompt. 2. Type the following command to register the service principal name From e9bcd27ac267a6376359f598916f8d035116249e Mon Sep 17 00:00:00 2001 From: "Trond B. Krokli" <38162891+illfated@users.noreply.github.com> Date: Tue, 5 Jan 2021 10:48:15 +0100 Subject: [PATCH 326/486] remove unused numbered list item number (line 326) Co-authored-by: JohanFreelancer9 <48568725+JohanFreelancer9@users.noreply.github.com> --- .../hello-for-business/hello-hybrid-aadj-sso-cert.md | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/windows/security/identity-protection/hello-for-business/hello-hybrid-aadj-sso-cert.md b/windows/security/identity-protection/hello-for-business/hello-hybrid-aadj-sso-cert.md index 2ef81da96e..c5273dc500 100644 --- a/windows/security/identity-protection/hello-for-business/hello-hybrid-aadj-sso-cert.md +++ b/windows/security/identity-protection/hello-for-business/hello-hybrid-aadj-sso-cert.md @@ -323,7 +323,7 @@ Sign-in a domain controller with a minimum access equivalent to _Domain Admins_. 5. Click **Add**. 6. Click **Users or Computers...** Type the name of the _NDES Server_ you use to issue Windows Hello for Business authentication certificates to Azure AD joined devices. From the **Avaiable services** list, select **HOST**. Click **OK**. ![NDES Service delegation to NDES host](images/aadjcert/ndessvcdelegation-host-ndes-spn.png) -7. Repeat steps 5 and 6 for each NDES server using this service account.8. Click **Add**. +7. Repeat steps 5 and 6 for each NDES server using this service account. Click **Add**. 8. Click **Users or computers...** Type the name of the issuing certificate authority this NDES service account uses to issue Windows Hello for Business authentication certificates to Azure AD joined devices. From the **Available services** list, select **dcom**. Hold the **CTRL** key and select **HOST**. Click **OK**. 9. Repeat steps 8 and 9 for each issuing certificate authority from which one or more NDES servers request certificates. ![NDES Service delegation complete](images/aadjcert/ndessvcdelegation-host-ca-spn.png) From d33137e0bf65103de2c2868e90baf82b0ca95ee0 Mon Sep 17 00:00:00 2001 From: Daniel Simpson Date: Tue, 5 Jan 2021 07:58:24 -0800 Subject: [PATCH 327/486] Update bitlocker-csp.md --- windows/client-management/mdm/bitlocker-csp.md | 3 +++ 1 file changed, 3 insertions(+) diff --git a/windows/client-management/mdm/bitlocker-csp.md b/windows/client-management/mdm/bitlocker-csp.md index 652a24f8e4..adf3b8c44c 100644 --- a/windows/client-management/mdm/bitlocker-csp.md +++ b/windows/client-management/mdm/bitlocker-csp.md @@ -19,6 +19,9 @@ The BitLocker configuration service provider (CSP) is used by the enterprise to > Settings are enforced only at the time encryption is started. Encryption is not restarted with settings changes. > You must send all the settings together in a single SyncML to be effective. +> [!NOTE] Devices that pass Hardware Security Testability Specification (HSTI) validation or Modern +> Standby devices will not be able to configure a Startup PIN using this CSP. Users are required to manually configure the PIN. + A Get operation on any of the settings, except for RequireDeviceEncryption and RequireStorageCardEncryption, returns the setting configured by the admin. From 9d17692d214d9b40210111a0f9322dd3e8627b73 Mon Sep 17 00:00:00 2001 From: Daniel Simpson Date: Tue, 5 Jan 2021 08:03:33 -0800 Subject: [PATCH 328/486] Update bitlocker-csp.md --- windows/client-management/mdm/bitlocker-csp.md | 3 ++- 1 file changed, 2 insertions(+), 1 deletion(-) diff --git a/windows/client-management/mdm/bitlocker-csp.md b/windows/client-management/mdm/bitlocker-csp.md index adf3b8c44c..aafdb95416 100644 --- a/windows/client-management/mdm/bitlocker-csp.md +++ b/windows/client-management/mdm/bitlocker-csp.md @@ -19,7 +19,8 @@ The BitLocker configuration service provider (CSP) is used by the enterprise to > Settings are enforced only at the time encryption is started. Encryption is not restarted with settings changes. > You must send all the settings together in a single SyncML to be effective. -> [!NOTE] Devices that pass Hardware Security Testability Specification (HSTI) validation or Modern +> [!NOTE] +> Devices that pass Hardware Security Testability Specification (HSTI) validation or Modern > Standby devices will not be able to configure a Startup PIN using this CSP. Users are required to manually configure the PIN. A Get operation on any of the settings, except for RequireDeviceEncryption and RequireStorageCardEncryption, returns From acb77a7ac36583c726117128e92990dac7235ef4 Mon Sep 17 00:00:00 2001 From: Jordan Geurten Date: Tue, 5 Jan 2021 09:08:29 -0800 Subject: [PATCH 329/486] Added links to the WDAC articles on policy and file rules to address feedback on the PR --- .../wdac-wizard-create-base-policy.md | 9 +++++---- 1 file changed, 5 insertions(+), 4 deletions(-) diff --git a/windows/security/threat-protection/windows-defender-application-control/wdac-wizard-create-base-policy.md b/windows/security/threat-protection/windows-defender-application-control/wdac-wizard-create-base-policy.md index d9afb2c2a1..277a5b28a2 100644 --- a/windows/security/threat-protection/windows-defender-application-control/wdac-wizard-create-base-policy.md +++ b/windows/security/threat-protection/windows-defender-application-control/wdac-wizard-create-base-policy.md @@ -40,6 +40,7 @@ Each of the template policies has a unique set of policy allow list rules that w *Italized content denotes the changes in the current policy with respect to the policy prior.* +More information about the Default Windows Mode and Allow Microsoft Mode policies can be accessed through the [Example WDAC base policies article](example-wdac-base-policies.md). ![Selecting a base template for the policy](images/wdac-wizard-template-selection.png) @@ -51,7 +52,7 @@ Upon page launch, policy rules will be automatically enabled/disabled depending ### Policy Rules Description -A description of each policy rule, beginning with the left-most column, is provided below. +A description of each policy rule, beginning with the left-most column, is provided below. The [Policy rules article](select-types-of-rules-to-create.md#windows-defender-application-control-policy-rules) provides a full description of each policy rule. | Rule option | Description | |------------ | ----------- | @@ -66,6 +67,8 @@ A description of each policy rule, beginning with the left-most column, is provi | **Unsigned System Integrity Policy** | Allows the policy to remain unsigned. When this option is removed, the policy must be signed and have UpdatePolicySigners added to the policy to enable future policy modifications. | | **User Mode Code Integrity** | WDAC policies restrict both kernel-mode and user-mode binaries. By default, only kernel-mode binaries are restricted. Enabling this rule option validates user mode executables and scripts. | +![Rule options UI for Windows Allowed mode policy](images/wdac-wizard-rule-options-UI-advanced-collapsed.png) + ### Advanced Policy Rules Description Selecting the **+ Advanced Options** label will show another column of policy rules; advanced policy rules. A description of each policy rule is provided below. @@ -79,16 +82,14 @@ Selecting the **+ Advanced Options** label will show another column of policy ru | **Invalidate EAs on Reboot** | When the Intelligent Security Graph option (14) is used, WDAC sets an extended file attribute that indicates that the file was authorized to run. This option will cause WDAC to periodically revalidate the reputation for files that were authorized by the ISG.| | **Require EV Signers** | In addition to being WHQL signed, this rule requires that drivers must have been submitted by a partner that has an Extended Verification (EV) certificate. All Windows 10 and later drivers will meet this requirement. | - ![Rule options UI for Windows Allowed mode](images/wdac-wizard-rule-options-UI.png) - > [!NOTE] > We recommend that you **enable Audit Mode** initially because it allows you to test new WDAC policies before you enforce them. With audit mode, no application is blocked—instead the policy logs an event whenever an application outside the policy is started. For this reason, all templates have Audit Mode enabled by default. ## Creating custom file rules -File rules in an application control policy will specify the level at which applications will be identified and trusted. File rules are the main mechanism for defining trust in the application control policy. Selecting the **+ Custom Rules** will open the custom file rule conditions panel to create custom file rules for your policy. The Wizard supports four types of file rules: +[File rules](select-types-of-rules-to-create.md#windows-defender-application-control-file-rule-levels) in an application control policy will specify the level at which applications will be identified and trusted. File rules are the main mechanism for defining trust in the application control policy. Selecting the **+ Custom Rules** will open the custom file rule conditions panel to create custom file rules for your policy. The Wizard supports four types of file rules: ### Publisher Rules From 0f1eeb07c89d40d99f0b5b1c74bbf5dd855ad315 Mon Sep 17 00:00:00 2001 From: Jordan Geurten Date: Tue, 5 Jan 2021 09:14:21 -0800 Subject: [PATCH 330/486] Added screenshot with policy rules advanced options collapsed to /images --- ...izard-rule-options-UI-advanced-collapsed.png | Bin 0 -> 42545 bytes 1 file changed, 0 insertions(+), 0 deletions(-) create mode 100644 windows/security/threat-protection/windows-defender-application-control/images/wdac-wizard-rule-options-UI-advanced-collapsed.png diff --git a/windows/security/threat-protection/windows-defender-application-control/images/wdac-wizard-rule-options-UI-advanced-collapsed.png b/windows/security/threat-protection/windows-defender-application-control/images/wdac-wizard-rule-options-UI-advanced-collapsed.png new file mode 100644 index 0000000000000000000000000000000000000000..de3197aabb61d476a4470fb72eaca30fc11bf109 GIT binary patch literal 42545 zcmbrl1yEew6X*#cK|+Aw?iSo(aCdiy;O_1T?(Pik9^56k>mY->yF1JG{r~Un)>gfG zTW@dG)Tw)J&Fv#S-Tmu66Q&?1j_?)dD+B}tf~16q5(LC2a|j4XN7zpvJrh4_d_NjU zCna$qh^h&^!;hQKW`eSU5D+yn@Gk~mKJMY{B{ZENAW)qD`9Q9j61qb`6b?v=2&%a2 zon*pjfFy7S_vOwfCOxw}v%(F}JMPy+4?FHj!Vw@v6$QKf7vV#54A1in)kOr+N=f{G zuzPBbC}F1BQ4G_==lO4Cjy!u^S+A8!Qh;Bs2|Bm(}^DnJPU zAV1n1Xm2UN^Q31Vj!77F#Xmg|F2Imi9Ws>-VAe;`l!b?G|ETT$b8?mEBdHB`y?RFQv=%B}%-K1<12zNE9%p(CoR ztfL+F0Csn__sY30iM|76ABam%g`WBLSa$chH&T4;*TM}P#zo{n5zf&*<0v` z1O|RKV^aC*8yN$)A8ldD(K=4mSgRT0a1wouE_ZI~1I?d*4Sa(Al8C&$nmBCAxNP<3xz-jr}avTg^BuAmt3jH&MuXZNK3?uGqO zTb_1D65+6o5v$Xi&QYslIODm&V`w)+NS1HMWu{VG*x9%3J&xgg!{FQMGck4e84SR2*y{*D1#W)&AR@54uaI(vVUT{nyZQC4@lfxEO0K!|4^_S}C zBb(x$u-#o}yG4tzeFqPJ)DCpDRXXAp=o{QBD(;t@<5rL7JjuPVfRGtx!u2nRzaN4# z8h(RO0;hJrwY!zh^aOE1sm{lf)OoSRXKyPg;IT_s|D!h`lKqKHWi_?Eb|D)Z!vrk) zQ<{gO9?8_P?k{D6=snmN0h1mhV>2=M6|uIKE^klRR!!gOB_+B6VBNOJZ`Yy6`38PU zUV4lJaFjPXz4i}{Eqa$^!ikZ026nPh>N01gj!qJlsA#-tQ#9yv!s;m#?!RhgU(#sQ zpIZ)&cQ;q~#<{}WMv~zveGAE&Ms=+otc_@_qywV!*(4*29@%O`gKs?-tMqsap;{B8 zl6F`n=JB0&w;kGp^Dt|^+@E0RPA(UNvgsC$$|O&G*{ZMJOuhRZqwSCfL_3{mt7A7* z(x_x^meXb%jrE%}d{Vf;Yt*y0HChC2=2PB;19=sA+?Q-d?o>bGsCW06q*KzLp|?e~ zKmp%Y02vlAe$#5Bqh6*@^xxskYA3gBQRj+c2weB>F2U(*GI%K=ux3Zt0lJFry`av> zMkTbuar-xN4{o(xIMwq{Rd43%rwAu}(u{0u&&8uEhU1yS>W;;Uv`xy!=422M-S?A7 zL_j6aI8-)$ndxZwmQr>_7T?5`S)1Q0hkAiUOCp@8sD|dlWpXnGzIrc;)IftOrNJ=I zjbEHv1dXVJUHKlDXdYCw7su7!p>Q2Q4mTwFW`kPy>3Q6KEA})7z4p+s!MY4~ZiaR$ zPHE*#wzW2^O3%Pb@yHRw-asKg@?NLrgCj=#=^&Zh)>^(aoA@k@>$5XPwld*2 zxHiKbb49^-gt};DrtMU=oLz5aRMgo=I+*XegR=l)INaimBqy8PRo=2~Tr(MTJ(hNx zg@9vTic|zFnI@F&SH~*`#(7nPWO}w}Kpix-O7^Fr+BHL!dbQZ{X^eizXG+T!g~>c4 z?YVx1rG$Xshh0|zSml9rI-oS^M9{F$eFzM*N%X8p;DD8~a>%iUy$yrUeW(A&n(2r+&Umq!(=fj3FDT3? zANy1Q7Fqx7CEVaDS`jc={BABQTF80X_r*Assi39mciaRI`C&td1%TyGeqcfJ0Fcg1 zf1A0>!jXV%!o{|DxYZN2;6n>eEL3n$#BM$OYw`^-v3-Ij_CfO!ecn__Z(+iP*QEZKY9h` zLX9WWTY-SCk&^~$C}uk7>r@|BW1U}wqGdv#xPctlzz!(UP-uKN-YTV`+OINsT9M&( zq%g1(flIl&CaGjis9TKVp2N?4Vo(X(1^M;><)Srn~DBvrvgXeN>dCjBFht!SYoGN&;rR{+6 z@8a3hQcNxVIz9UyBH;)0^^JF2Ahg_?iN89|r|}L!x*Wm$41Jgmmr1b8(Np%!lxdc& z6vZx{wG9!o%KNM-FD^qb0b}$Z7a?Le4Ss>V|B1Z|>S^Vo)U8x+ivQgRC)BQs_#EFX1Fue}r=u5=v&$;kTAh1H6_a zc>=tOF&MyV3&yAa81}`sLUE9jjt}eVAu;CnfOnAo`c(ITDLkee-2A!#&mUuHn@Uw} zD03NCP~U`X#$9Twb?#x|f&Zvig$RB;JxwJ-q*_R@o@UK8EnN7$DuG5ZDloWaqp<1? z8b!y9@7-MiMOGs8PtmA$ngA4fZqH+vHT^GfB4e-OUsy>C3O|5b5pC@zg>iAydo)N6 zS2m|ngJ6lC-Hy=-(LH-erj@xiH+8rDPqayDwESx80|D-b$?56Z6XFS>56fPx4Y&D^ zGL}cE0q9u;HOW@TRV$vcVTM5o;@|kQdy7m>izviWph|Ac#C1>S@fvVx+s1lse%aBE zKZS{X%>5y&WVGio8DLL%M+$waM06>AGJhoLCQ!n6+8X6Z$u!P&SEF55MJ#l!Bjf-s zm(JP70S<9G00i925sIX~027cfiwofT3$RJ^&uGnOe0~~JAn;7Uk@yF-q zuTU?eCvdZ_*&pG-!Ra278HU)qexZglyLv1nGYdk`rwKS>i_Qg}XZ zP0QGpJOA?A^0W1d8P12P*zo$qBS+sIw<+u`Jq-)|Qz>;zskOPYUGn!cd$5}eRe7j- za^!hlYfKcGW5XF!W9HK!Q1#7PW-p1HWK+j8i7Wpz)8-2yrT3TnVXn~Y1sS<0fW~IM zHq$!j?keD(bs+yc6qFVY-Wkc>GL>xp;MVTu# zB4NJ$3MVjArAhYql1pDf)%m#NFYp7{v4|DvBzakkb$pjYaKXE*STcMw^&pgv(v)VC z){p9&ZR!&-;Qc>_`C*;b_2lKih&_r88IeWHYeTB9FfI$m*+@WzO^&y}=Y;{RMjjI>P{*HPck>8@yM%O{ds{gMb zty8*>Gs1AX#v0XM`KI^>i6V^$JtG<<&sqDfzXB+n%bWC3mElsl4N2hA}j?<9L&BNNq^Bi@Xh-=2L-bd=LVzDTH#E&nwKvpteS z%?+|QcxLC=;bWno`roG+f0&-Q)Aq^zIU>AE6Inb5h$53B^8{dW6X#1YJAdY1Ml=8(Z!QYfs{3d zX_`v>jlpB-3NZJVf61+(L4U>(Ob_S>49ITc*~)ud)ap#@bXp(^x59Zx`oPBHocHS9 z*IvXsIFfgh$X(1P z-oy&{rW;l!z#nSM&+xx;_5VBH`>T}(7QBSpy$ty#X>#q=+`CCD*@sh2?3)h=%7cq1Edc@nG~`6gr@8^`f~zr%E0 zQ@H+=lkGLM=7qr5#Q>S<2c6gjqp#0cYAP7(UbrOV&LHyI)VX4?C?owiZoQ67nd)^Y zWy!V(CwG44e(6#U*~kdice_v~(mj$lDYTqQP$`&*b@7I5;E_}-7Hy;<#l(OA{%tTw z;fFH%$H*^yloo=NZNLK#@39_Gk*LEm``=&tG$;d?%3F6I=t-GG0OBO94*iv<_|NY46al}pp3ABK2POJHmz;uHgVEG=-AX0aX`~;BAf$TNGui!P{yY6 z`;qs{V$JU;2A!Gx{*NGWZ#UrQj`eA>1V~uf zKND@Xzn~2$7 zkse7)ZC2=9cG5;0S65d@N1h{bHM5ROnfL_z8@B%`@Z149(NQpRv^C!Tmx&Y=i&M*dA#po-ZHPz{PGdc zJA0(=MQHF6#aOPZbxyc~J->k-7jOP9t+I&m!EQ8axdZP21*y}J=0k@eI>kRU1Y=;G ziJ3W?VaK1=N`@-re7ZWLAVi;)Sxa(eRUPNF153{EN{9g`BNgZ1xQ;Z)nTwcpKA4F! zm4xPivXW`dq((yAi0_ik$8DTL$K}Fg!yy6vS>mM=9o>?J3Dk89ZN|@KW^Qe1XgEfT z{UP(gx3sP2F=)Xid^!hgm_G_uIwI?k( zS zG@5~l!GFj<5G`E}cT6#2d(D?Q98@OzHvU0Rz}MBE9A%T4>0K~~@KQctf4=@Ei^*#J z$))v=WMd~39|MqV_Hed1OorWR{sf^n+i#|t6_sAUb8P#v+54La03mpe1AsRC)oh12 z;HmdpsD06;<4Edm654JdnW8*e%GdC;k`-$`2e^g@&BKD=L{3wTiYL_tZi#j8-1G8yXk%%KvP!6=A8dOPpMj?^ z2F@n^IVEDo>=c*&kQh~hL$8hSqXLx0R-H>N5#a5}%RjkST?P3OHN{TCQV!=g51Xd@661apSDgI*vCESc=fe|L$Q?AI^N%*L3Q9T0BfG31XyncrKG(}Ium zx>F?kU6&zKk4c}JV?Iiz$UbqxHQsG`kWGge|5QtWfXnG_A9IEzbqR^@blbwE38*t0 zv<)6msug}3cg|(7k6ELxbPDuA=b_`)bA1a-;0}?kr4($d3FxiOk4jl--|bAL7Y%c7 zHBk=!rt{O1(a-4-a|DPv)~HeIKBa&kY2+)8AH_Ov2xL_kRP^crK{?cC1C{Rn@EzG& zRIQlCQVmS{J!`N7xzkG5S8hoL&iAH3*qB#WI~nY$1r-hZ-e?&XF-x#iMy*jH>zgOB zq*}r7^^}M%SCf8Ti}rtd@+6@O9U1v3=b5XRbg+nr=BM&<2g({J8+2!6LgJzL_g`Y zPi&9&mfyX_;y+{wcjXLy4t)lRBbv-RtlZKc0-k};$@B<+ryqiAq)e#X9 z?{Cj`BnAsry2~|2Ff?YgWD+D{)2%L6@liD0u=_KbH&9w6WTx6R>!GgFd868kgb3O@ z30rkouOGpkQC2mA5M7?6(9)N{r&tg8Ks_b`GmzY?X@VNszL}G%AMzafgyF>Y3Nh~^ zr`+M2SGB6uDHrihZ+_V4Tn>yyb=P~v%D6XBC%@M71)S3;`CfU7MN|jH%hOGXAnEWq z=#piTNKoVM(!Erc6=0|3thX}LUk=@f*F(RnC@H2*w&}_pyoaKQX4=}Fr$2jF9j-sF zv?57@SQ43KWZBVUEtc>Gzewxcuxmb(P8E=SrLQtFZ&@JQ%>;w3*EJ!lZyq^vw3s>z{xNHg}SGWi6rTr8s_o7cxX zVWZ>|MCSxjc0$~?7L5kVFkoV3$t2}R(cS<^i-*oR&DcAx#Ng_}*b7ek*kBq=QdOhU z$#$ho%PEjNlJ5RL&?iU|+&uB2(L{$L~MKWFj`f?da z=n3qK(hJRQ&28M_QB91G%WznRyq%ZoYCnllq-d`ACXO!{Khs?QdH+k^y4W_WewAym zXRmYD)tmWkP=azpi?Y#0hNLo{c>&fA-UzVy9BBdIDB`r^W66I&T6enBvnv9iYZwd* zyspW=+sn^rnCIW>IcaGQr0uagX~!pPmUh5Eo)EpJ+aIzuVEF?$l#K({2g4f!#p!N` zR+N48WPHc!J)BoVX{Y6lB7}nyvMg-|<-cb>l@ARF9G#OlU8m0fP%L`|O#|zOiIxVK zxCU*+-R|Vb@0N#U>WrbYiPeRt0X6L=%nbGEGPf?pD`-rcCzRG{nR;4vhiWPI2+~wH zxD2v|6G1ky@xL_Fvqa>mt1B6o^%mZcKqt zvbb+LYQfZJ4$-WGoD0ZD0vKXThtnASMapWZF$rtWv{e0@dL^sYIyyR97CU@wvJv zevcimdLiO3)p-eEukpzXn`E6W&+K<_xz5jK{T#WOjZa1%`5_8=E?#U3scE!;2LagM zOKYc-W-*ixl_(D46FlBKYa`I04_o<-q`p6pay2k%|H+Z=7-0CC2NPogOX%IMr*+D2S6On*-K zv}fgmusqjtwT~jD3I9Z0=U|=J##XHq+%Uo(Qu4rtm5s6rKkL`tLJH7bvyvQ+!_>N5 z3mq_cHnq$`_VV3}@4lZgPMVRe1u|w@G??lrHHY@Cdz0C7EwF*MDv;&vM>a}czq+0kU z{0=Jvo-CC%zqyEyQz~!L`uHm##XEsn1K*D7?EeZifPGrW{xEE)V|lA6^U(q4%wBgk zcXZU~+*2qlXOPt1anT-Q(nZ_ok4gL)R`2|rU?98Qh9C0{2&F(JE-?{XdepkbYikp$ zkdBl_A)2c(ax!O~Q6p=m0gxdq7oD>P^ZR;{F428}rosu`S(eF=rCC8lK1xDap6{zx zyq9?4iFZL6t$dvEdQv)zg5`v?ym(w-WoLqkvre%C0$Aqf6W`NQbigFHtAF8olF;wq zU7ON?$w{8*1^!Imhd$KG{5ave&K|%%gR3B7!Bwrtgy5*W7(>g*%H#8SNt%6dU?3Xi zEWB$nQV>f(iceqv)zE8mBxq*`6xsYNPOBSjY-X~#1+28fC@U)gB1xj}>^ok9!JG^) zQS&F`!y_XT(Yme9%C4@-5Gh&w=Eb?C4L|>uJs9grU8#3i=Qajj|BZvP<8KxykEayZ z^|yL)A4yTVy6cXE0qQP1%-FoEyM2f7HY0170CD5-I#qVPskt1A7bT{X8 zq9gae3|G~+1-Jv5uxJ)xzI#21nZk-Fp2g4Bgwoc@?IT4x@h$C$O($AU)e6VBS%k*w`Vinnnv6Ed0k1s8kx~?A=CAu zX?C$4&`l(*P0}53(jQoQuU~r*jNfKod2B{TMeRDHj5X zSTs8`=Xo>o1e}A#m3j0uvOK1HU(_spU1RY3=6bzW36TeH#sf-jQ??Rq_cpdb`V|Mw zp~8CdhF={E@04toTkoggf&4RRs1v+igrR3o+Fa`fw%#fSWv3J0xZYHAl)( z@y0cI=o9LNma!(P{7iogd_TUCFzSk8_1Lk^RNr!fc2db)CYyzjY`?3e4VfqUY9gDe za`p&(?VUfnf}i=lfJS}cuYyHyV@EG;-g*E(^M421sm*SSRC0C^cMkVmE{9!m4B4G$ z&m+Wiun^Nh@q-=-i7zgn-A<&Pw%Grp~{`rJVe>wLn-?1%p8_>_*ex_Up$5ENfG~tMRhQ)bb)yT(lT3WH41!9_+6Uc9#q${a)h^hpw%07YdkilOH<8k%m9Q}^Bkc8DCAs#qO zM|(7*cR!1sow6_7PQSe_QYMSYL)opm zxSe!r7T$clll#McP}BLk zz0gaaYstkld5sZz5HHz`j}GgIDOlca*GHi+vpsFCsd?7?vO?eTd28KztV3Ipe5U=fh64l9JqZU(*{}R? zGR+@7DS0t7zRy0`YvxJmPG}q~Wkhg{c?N#I&|^YCZ9IcB)Kf@dNx)|B@YU|Ft9>~f z>y=-r6PJk#K)2fa?uQZXAu?>?)jd1&wSV7UxP!0@WoMYl0}v=@Sx8dtur?DgZRKM~ z$tb)EYY~%&5eR#6jael4#roUyc9=GGHE}6rQK)uc#(v#y2-q#iSmsua$D1(~Ja7U& zvy=DYPv6Fu7Dh*g+sDn?z|7c}Pl(79VE)*>($d);upc>T1lBpa*PVIX>*_YxIIGzH z;x#wm@9#pa6jM2~Ea5yP6u4J0%LsCt1tewe;2`!6`<08Y!jbi{=l_J>sp~ zDv@CTdO`mqXWgp#OXurfCJ#=ft<@HxO=o+bA9`dw40d2*YG8uScB(hpBmN|9Bmd^7 z#0tqs`&z3Z%SI?oXUz#bQ-=zB<`_K_L?p_uNCI`&h z_p;t_e8}B1GjdC%$zo1|td3W~y@_9A_>ea#5g#Sk2T91ym+2ql{5Q?%@}6imEn?Y7 zrRg}Je-dGdQ2&36s0zxPG9P|ZYU_mXKZVyE*HR@wLWK0_)x%3qUS36{3VpPY3d^)@ zi>{$-bWQ;vE#l?#Fz1(`F9mt+{(0@z^k)eLrdRNfX*xOot?gQ-AO$6qm|p3_Qeopr zv0Kz!Yq3sGj8)+AWoO5wYw5&KePd%72!hRZ6X8x!mgFIhNJ&ad7J@G}{R3SIW5#f{ zUi!`>OIPZPAjUw2j%HF&eEkR(abR%=7ocS%FiEn;l$iGU?$VEBVJWL(&?lx!YVr_J z^_1sq&3*c}m|UV;hB6V~$Np|LSzH_NZS*VZRuTx&vVFG!f*qmP|>4N2I+5}bp1=Q_4?C z|9yCw7yWo2m-D->q~h;{M_Ns6ut##+kiVMr`)wB@>24urk-^D09cwWe|M2wO>(1U| z`Tc5HsjL6LCG&<+${?0^0!zTK-|LQpS|=8!6cJiP&CdH0oV|n7O$x+*Lum|2or9)Y z{W|(Rf16bTiduearU#{jyxbTAedYsZ>kWY!;~Qm+zO&6KD=Rp7r=`{M=*Hzflqp|V z_}v(oDArYse8A{(cQ+O2bRB|=Px*Hi1F9c$2|8C9S@RKmIEFL-Kli(~oV{VNTB5%@ z$A^2EyE>w{;X}b;_Ay~s*q*AIG3GifU?4H-?PhLmy7yeK8xzq@DJcrkQVi18GH2{9 zLkOH4n6g1afliJQUwb^jwykfu#l~@0ytorHtRT<~_7p59bfIm=YW^&mZd#np00ZEC zul|y#5{hiH*|aN>0mM;jb&lLzk*cO5{NF_At}=m{gF$Xig-pISuiak4n6&r;_XTaS zv=JN$5G9Jstc&|r+s+7Oa*}3fbkgt4X1>;^4Sj!omr*G#P1{|dcpt>Z0j^p~UBq0N zAD^-J61pmPeY?e&MV8sn*9)eopb)$2|I!;N-^G*1xw!Ee&N7VQ#zL*w7Ahj*EBLk? z`QQ47z^PK9edjyE>s=N$M+PuG4*7JsRM?De94=D~{1bT1{ge-j`TE;;wC^EDvG{JA zHL2J|yE(f#zK~9FTSkW(&nAPmoAYFYXq?lBo2L1xG6P`erQj>)`cy~b<9V;XFom_$ zw!D2)L5%-44VosLtJ5Ql3TWOa?BgFdHmO`Ae{iGH|55F0^btNll+?jWNriv$N1_z8 zfJ=dbcoXGAllwG1aaAlE>WYDZarO8Z^o3JW2PNfqind0od^Y>=_^^+c(Jd@~OpnfG zh~x;NIMt3>q1i`dcsNC%WFROAnGMoVh)s@H(ohjO@$W%-B9d~nL`EAybzur|(d)>|D6-TeXK={XZ*pg>q}i#rIw09Qpy{pDVy9itnG@ z???{0fve2jBT2OM*ilNcS=V!TTC#bcRi_#Lx*$bOxb;b2ws7gLntdJwQd3lFeQQmO zc!ITcb>#$772Kq?x98>g3(2TGg!^o9{vw{pL)Hq6>SsJ=gu^ah{H`QE&DG2KQYxG8kAn^xjL2 zD#ANrE}=p$XB)-D?K0WdHX$)@ueUJqO6$k;=0+6PC;F#f52EuilUq+z>s&!vEsADy zMM#uU=o2E`q(-9S-yqgwwNNL{6DHxztXTrNtXdq1lg+$>ak6($szc^o(?3ju6DYjl zyAZhI78zP~B-RNr_cBs-h9GxYGm6Pnu6mejhZ^d>iq)VkX+6}Jp1%(+_-WO2am>;K7 zuKoKr$nQ~FbLOota`dwQh8Gn%L6_U|t;4bzlKP2v@%VU3Ne>!>4Z*)hycqWqSSo6Q z)}}CQkUA+Sj|1iKmou=jUzjxFn#BU3zp=5a9B_G1QMref+idIVJqjB ztUkTk^1G&_=wng4W0kizlxLa8@Dpte_Ht8`nn56X!^v9y!&i?;hMK1*{eh88p+ zz9h}>5h74iFh7DIqAaOd zgb48v46@k7`>jAR(6*b-(4iH`BKOYz6E4c9(QL)>9i~w@lQfKSYi0T6Qy4t|d96G6 zO24EpdCtffYVhpT&e?Z&XrQx&RYZfUy^zodIDd9@=CnC!pu$Jv32dIMmYB8vojW~t zIqUk<`xVJG4De@7K)LObu9{J`GVNj1gD-13r}M$46@$-Wb<#WX)E1#m4>n_D8_F5B`rQ7&!n{XJcfAeRDkyD*{cN&V2 zx(-sg9qI=Q<9uEINGv00Z}L^{IMnudOglde-i&AkLLLZ>0E9@;jx^($l z@V)+IDy0D8f3@A>_6GW*c)$3gC4*7v$QlLQB}It-mLn0+FiR53iLfQ5RCk@c$Cg4t zbP~I003JEQ&doclhuhzxaL3jn^-s=n#%{pDr+B8WaN983i99@LgI^5VZCT@&&;*ny z=Bm|$9eh}UrtoV^lLyUODMe%3MQDeJ5);NXozacC{o%0Lvbu9C7S@Y$4lc-^z=u>@ z%-P-1r-NDoZJ~(9+Vl>se#YM{Vz2nZmpkjel7{}YMLv8N03=JS>>@KGq}{u->WjXo z(DC(L&B^%Y*Z8sspsI`r)&iJeP#aW+sfBU7u;u!`%Cz~i)?oLMojsR3@I z$&c>dl6V(yWH1U1R%!+rT)PI9fUV#X7J-DW69OY_0R% zH`0zl#L1YFjDQz#M}v_|J4$F&!mASVdQK6#rP24*ZCY|^GP9X3^PnAP8!`*mr_#}a zQp6ZZ1(e)xk!Gw_@4>?(B<@aFxsYQeM4mC%f^g9*^hORzPc*P>6kW==4v!i6$vaJ9 zfA*sH%+BbsbG^c|n#}6U2vI$x4Y+;QH~9{WXwDq-BMEGQOh)+!T$vSQmAT4LPtxu; z4`-qYxjG2riaeF=kTo1*V#2aMskG~{%`b+|R0Xwq;YG*DtAtZEi7RPIKyB&I4xAqK z<#$r4>YrjNcj{Cue|Py>M8H?S^SN`vHCr@cTfJ^fY#CU?k6GV7&pu>C1v^S^S3=3B zyVkZy3+-Gygp9R*U8Vy(WQ9Z*+~OM+5rcAGI@*AIVZIJS4% zdU%%N9=^BW#nD*+dsX(UyOfj+~J`)rRNsI*30~JX)2+!cUJw134d2W=QP>XIKrgU z=E>r~H&qV{m%;pfU5WOucLF2W{dQ~;WWDX}{c7}~q zcN^N15-rg$L6|2)3p0Q(n%F^XE15#sr+dsZj`!d>DWt?qng(I_m;|LK9l>006`MZ3 z+xgythPgzjk?YCZ_DAdUqEpr%YEC!gP14iO!qF{@3GFFO3St)xe<@3n?K&X zpy3s_zzaS@8LQe@Iu&6|vhn(2A^P0g#KR-fqzzVV*rP8-J;QrD@HM#W96Y_bxW--l zg5PnSjOqELB4KJeMCGa)1hb4`*k=6N@e!oe3<<109(FnTw_--L<3{+K^G z7ZnD4^!BZ))VY?imTFZ}N{Ssf^2LPkb6+q(_Q1Vhp(Q0rhIBlRGNfBlUQ!*}6;kC* zXPPNz^@(2u*{LVc^VmGQbf_>OZHZwj!hCl(Cp%wgES+P87_wwYI0&M5mj9;?_z&qk$C)zEh7|@Sne*eVn|Z=tMSRiP7VIGk5 zn>#1(zRc8~9C+wom!&Y&S$u6uhQkV3z2(3LA1@vo0v%dLH-ds5!PcT_FG3tqkgh4~ zW@e_z?flPf>yHH^yQH40sATNIL;MJocpUikCo{A7)OA3@?G&%p$p(fUvl^2wtbdQX ze`H+b)NPEpK?(~3)kZMGRt#VFV$8R%5i#MVDk&Pf5?_kMwMl>s+>MzL%Jl3wdHQO7 z@{=Rd9bLY_%Tk(T7W|ilx*0%MjSgToAxxWURhk*@+6yU#xOEiP$-?64RF5=rVOT0U znQeX{<8hgv<%_6?HJAbVzw2(f;ede>E)6t&=^#x_PPABH|I~GMheQf|ANva^Xb7Yo zSBq6wiRX9O8ai|;xc>YlPf=j2CoMe<*Ja3g=V5bHUYRhdvg@Q};V1dMk5ne&6cR0p zRCByOKb}N6d>a-xx?&_? z5s=!=&SH7M(${CR1&-hPpEx&Sd_tZ$y(UY}^pXxtPzjWtJ<1K{*|JC$trs2-6Q==p zZufrvO|+?4j2KTHezoL!#@YU@>LTS+&*L@m4=O4QSU%wA!WFlc-`Pluhuv=dWb!ctEtLNQ%EiQNq*m|P>q*=^bh@i4b`Ir+jxJ5B zhaNj4mDaul>d+5=e`g|kXMe1Pl@v1rjpf`3@5@O{CoVBtfSb!?db#39or9_;M6hc( z0!;wmhgby@ETO$fMXO8s#G2n4l@J_N_fTNFU154EqLh@v{h5Ee_4zj;=08&!ZTc?P zv%mgBq+a;}C(!QUDR=T~aZ`Tqy4O7IE5fUwsb9{z6gc$A;qRP`qT=+~20pzG0s$bB z@ciNzyf@XqNUSMWn125cD=Vn$GzY+^2(#b0F+2UyQXderPpmA*yI$Y^-{R}j?e;EW zT+OAYgw|)0H%iyA1#++!R!`v(%YbK6EC&7Z=r7NeM zNuI-h{8dVmboTHl4K?+TK1Tf5-Ak7kKZD{AoV<<-y!P63>cL+AmOG(kYb}r`2y?ZZ z`};F)1!CuD$QZxeWRQ5IneK$?HlO^38g^Rc7;Jg<&+kHn^nVP;O~w^zm`87FY}qZz zamj`91ih|~J6#BI(Q3{EQs41j=ji*E8MV7kWeu4zgDwwo?}sc@mK%>|e@JSzwm{=v zy(OLz&C>L_ALg!_myzOX;wuSFWFtv#ej+ruRMG66+ktq^n)ju% zrJ|z1r9yP@n?u;boBdWyeI$LT93A?1_;>Z)T}g9*J=*l!S7=@b?Kxd`Rk4Z@Ht!CVv~Y!iDN7G?kj-QIw$rAEEzV7@ zi6=6?%N!?t1=|NcQcL0}YTv{uMNshC%BOD-&N~`9-##6S@2rClAujs=pTyfDlF6Y4 zAkT0fByW1h`V%;e66%TF&Y#nG$JE);Ga@1QgfOt}tQ!jUJN&a!$n)+&4odaWen&8U-LJ(H5tK?oc@ zol%GM?U2dc(+!^DDn*Fk)&-Y|SB9rWTd?RVY=a+ES@x5bQtkEdzx(n|zv4uT(@JV1~ zc}axn6;nqm74UsR4(1m_5h6V0I|VY&v5EBFt=-FVq6?Wn`h?uLXL8?ZiVAPHvD8Du zUt=9tx3Xa-8y4jk!!C{=( zP~PH==9n^@3FiPWe)?Jd=mwS}xr9$V#FY0^+iu!%!DH5|NetT4$#cP~^kuVS#%^NQ zYm5_=%o~!NEh0H}?>j{~kxPAphtmhT^avf~oQRjuL$Q!q^1(SFvHYF6K(e#!_7jOz zlp6S@gKWp*7kHFp)A+u@8HQ}77(SoboIaV!M~th)BDTCrI%40$9boP;Z9scsftlX4~ zbhwTC%U;Iq`8ofrDou$-GS(qVh=CAf#lHvCQe1fgy^br&hrUQ4GCkwj>G$nH5S zf9QPsc6NX>r2jN2c?}nHi&btg0{bb>J>tM1!nGspaWD0bmGWp!#)?8Q&|v}E*#tI* zV7+y$mwVDYTJI-Mor6!S4b|W=lAhe2?UK!ZfRDyiJ+f_Z*m2qQK_z6cFIMD7 z$lbRTJ8R{@R3@5I*lC&b)1nUyXnl@+Tku@W#~6+W6s z@b0sgmJrP3;@Oo_)1!Gc{-Y0$`f4u8x%}bX9It3)U+;-&a+AOXFH$C=T2okBbn2aT zAWp2lD?^=b!=#&(1tDo|s9hBv@k%krqJseKb0Tz}AWq*8I7gDDm(*|;F!wmv3us(C zxq|YWMV^H9mk(`C{s+jmXYRsiuWtU=?&xmbIMe>A1njQVdgvY7TOl?yVDmUiOCc{E>Xq5l+lR&bRI6UQc@ITM~Bm1!wxVmT1W}= zYRZT|F=pG~n3-7>wA=z0^QPn7cx;kX6L-fOzb~8M;xEMF?>e#mD%+kOU&d;YN=Z>y zP)y{1uHU%5g-Xdg6j(B%zmqgh#{R*rKC76U{n1ndP!<#vR1{?5B0RUxyUg3o`ZnG#$`l^{_3CO*=Ed(+*?J}nXYTvBoH*XI|TRO4#C|mcyM?31b2rS z+}+(F=)?)`?(S|qQ>m(5z1RACuO6ch{v2m8$jk@d`&`d;-|r$%W9c*z#Y603p6SdD zzq!e-MCuD({X1ERNo#WtGVJ4N9Z4@J1qR(l0OD#m1-v&kDKp7kt{fV>vQ(oSO)U?@ zQ>x#t(~MTLBZWcyDgL-DFmJ5R@j9eBknwzf9q|6TwyuuVFpn;2sD`WOueb6oM+eo5 z1<*VL`FaL@)?y`s`5Vr~mU?My9ylkRd8w@qh+3{WPuZ50Bu|UUWgf7NQmaOu!(1I? zJ7cR=?02k<`X5i4vKpQ|!3Q)8)ksCLay9N!52{=cR{`Ry_ABgeJJ-(%B%5S#VPv-R#~@C_lk zfv-*mO`@Q+@f7_u@~EV6W@ z2<7PbHV@m)UJ96vJf{1A`TYT{waq^h2t%O5bfNJcA@n}ZUL7F%s`(+@)Wld7fyCQP zq&Mo-nhARo%U=WKSXxqoO9`-*1gtjn5)~{#*+^NZ|`~^(YVW+M`=c7 zOfWSR#)sbgktsF@jKP^GoX3qG=YAhXhQ6lwW9@4^-2Phr9uVkg$&0!v-JlJuvA+ym zT?QnxN)7axJ?G=UYf^7LdV+UOJoR5t53Oo=kvHkE)Jn}rPnTel%iuEFz2B?ORx2-u z!i(4$)I4&>cXS<$$3|Si*xv4IZcOFa%Vd@rN~ayyHu(Bn7EU3?E-o<^muwPXSLNt1 z<+ZdVvm(I38eBvXI#we1|9IXkD8NW0zcrsLe{YcBEt8Q*&L+A?)+bx@lG=I!S+rJ> zC>*ZK{^`#V)cn|E!SPOGwTIni4~kL}9G`S+iJk%f^avouqWM{_d-3$08R6CPpDSu9 zr)G1K#jL<)NOyd0aUBnZk3Pb<87_^V<;_{Ep7XZYc^6RDJ?E>AwNmY?#*v<@KX|*V z>Kr^@Z-&chSEcT+Wu%fR*VwOboe%2EW1-ypjT4v}nx)r%To22DGUNDTC3 z5bH7TZX?%ihQcXHR5ljgo%4?rL|>B(NlHoR$4ykq~%z4j6}`a=<>3W=||MqK)hv9p25lkKF8WEOcq`Fta2s<*{nkIGS;WeE0 z*$hqEp*wHi1GQ!9SZZNHFPIQf8pR`@8l8Pu6}9&J-gRLAF=O9ntpDH4&}V#Wg>uSl z7C!oMz!?jTq6x&?WRBl2Efq9$h7RiOZ2#y@lZieg@BSD$0(-&$yb>sI#di!|^Ld0S z$EEJI8rRATT;m;|e$C*L?_cW-5)f5Numh%5?Y{V6C;6ge2kg0%Hs9ACgcR;~uX6U^Jxd^5rvL~dm9nhujPM9^^2 zrZ^GgA(Q%R#9ovLu!0b5fSu<+uz#XFibUyo@V<&6=hWwWc>*DdY9 z?((O!*QI$(xR$Q)EOvD@UmBL$@19{57jr^0ny>d+yZb+xeDBJx1qQJ=N+;4K;ulI+ z06o|RjA>L6%ojEcAtP7Hh+3H6Zu$#=2jbvTJEpb9mxWf^eyna+{_*Z(dz*9k78*%g z)3fS*`;mWiIVec^qu}`9RVY^DL#<=pb!I-@*zOvy#w*Jai;j?+2)*X}&Go|c&#Ou( zg8g%XHl|_DyVaG)jeS;uBb)^BK7*D&Y>ndR)0!c3HwzZ?Ua;s3%3DLVDqQyGR)+i6 zqB=u+Fv_#YineY1<5}S$*G&=jX>)d4k{!HCb0UAifYovbS*IwMQ{HSy&xJ*wx84X2g8Rh`AAb>- zVA7D{HnHT;dI?0-&3)d2<}aNFI~?QummiC@pX-H({ek9-LNi{RY~xan)L zyMo$3qdCH^s9*<-njKlb_eE274C}rvo6ig5kqx-9T0OI7$06mRe!$_aOsn5UKBi2c zt*0@o3%RB~`sui8)KQOZ#J4JK^P=y*9_@1MvflZ#IpV@%9eMj>PSNeOln=t@Ob5tb zP)I5L%Us~oEED#V6&@D`n)~Ej*5{;Db0%=B-puj`4jr;=;i{@Lh{V}6N_oQCu{Q~2 zHGap#G|bvl1W`!BF&$U1AM6nRaj`B=>T1W#Hi*STN158ZzahaP&+AmZdWV!1ED>Ye zK@G)ZjPy-mAbvb* z+pd9k8SJJ7pY2!O{pa72_bZHVN(%?`)e6b>rA;HYpDQw74|K_~)vEFS$R%gFa~N&O zX)ax4$-A$(vK%2=egiXWi;UbA$r~8ce_If-Yvm^VK1mjQwSzBQBjU5Ed0|mj-M;>w z)eubnRTdE~$!|m=nLYhvqSX$BE})}H-5!+iZNK#cy@{!nIsCqJ@yY!NOmY{~t+^@e zz=>YH>C(P*VW2x+Da&AdlQ;TYW5>}%nk{I%YCg5G7|?)GcoH16_VSv}_>r>o`nNu%5+0P_EsvZswz&-|C$6XpW~gI% z3G1X1p-o=u-W^RO86=&sHqp}&Ja{-N>|#t+_AYtUPda}TET5_pBkm*l{hPr=0xjdl z#YJ z5>aK>tA6Pg#tl1`hg9A_$DbLGHkI}(GbP=rl0Ca`+hkBNW#2kEV6SUE!h#l%J3n}3 zZwPi7M7H#OF5fq`F>2E8FnaNx%1dFVjQcF-BSQ7XPQoTVkECi%AYz9*d!jU`X}H^H z1y6F|GxWhov?5E|SSVULQ3Npp<{Z4mkfnWS<6?2nxw4Fc+NXLzgdC2^fOiylSP)U` z<4?j~tHjllYp>i2O!|sMr+H&*U~&JMhQV3$YsLQECelpKAsZ87GFc)T{&eB%!=%4h)Ts^&b}`5?ST$x5 z+p^>XF`Sc`RUhGB@P)hh7knYN8gQCUO#IoV-!de%ypy9{w{>f#RR@IXJrX!Jqo9!G z4%RS><6LC_ETf4GA$?$p*nQ!D^eEj-~!y$SP49M!q3E!|I&iZtgR z1+SVb8@kIU!cAs3MF?|15Yziu~ySNB1U zBilelaQ<-kiJq+%;ex_kWn{6*?!I?VQQW8vO=gy)nLjfpf8Oug*MB$^f^IIzV4ftP zA_Q-aVm9KlxpSadBc-TS%irYE|+4E zJH398dho)SUfMfRSVTkwUF2N`hcm5FzOS!uwy(Y;!Ag4=F4UoZN5a#MnQ!=e`1l!o zJrX$%YAFeISnlHwjuH#IMIL?a#tqsNQ@!&Ie=W|jT7~f57Z=)-tZIAKMxq3bS$TQ{obn!im_nMdq z+-O(w`0n(?4n-QT9_3cS<$CAr`-MlMhwPoFr7cp3a-Dtc{7$D)8G%t1=GH)@+UIUa z549!M8`z1^n;;uESEO0;y*qbxw>(t9C_%Gm8ohG`^5zPZnC~9ZI?|##>HcryfX(mj z#eJ`|IqZ5|7_CFc;Rk?Gr;OJ&VOWGUE^mms)XnpC4t-rGCz66*7fJ8-E%s#^z{VXf zGf34v0H2zVdhWF_Ep3+s1xWC|faJmG1%So=jMfjSq;VA%iOYFpMCDZTgOzRh|B_?}Dc}efX z)yV9720lGW@E;9%C$PINpX}OpmN`)GIONiMsnxlV=%zlew=PXDcY?%M4K>!1sN($Q zh?>v@1JAD6E5_HLmi$WM*tOvdUqHG&Z!RXo_;-_iUzx+yBMJzE+@(F5KU#nL{$r_7ycjK>1qsJ$l z-9L483F?SaV~QbrS#uTC)<%atQfiUC6A_t5r_L&NyIt!GlS63__}kwHP0`Rg{|dfh ze$>X-W^Vv}*ptHT-V4%&IFsk)#<+Srt71d}F?PnMPpt9V7qS|7-`a8hycn3(uz#Prqph#PkU`!%GI*>CCI&v}@ z{_gdvjZF`~Kj%)~mt@@%X|lb8-qFIqYLOTlG5H|F4QpTHI)9IQM7yeRj8;L4_00Bm z6K$jT0uDB~!i}W-hm=R=^7gG!t?{v0P2z-&lp#+-ISa5!Ac>kQMI&B~S+auN@G5AASfdKc{0%8&e- zt+5>J%aP5GAH5%3;?7CMJx83p@5QbmIhRJ@?P5~4pRhWXn1wA)eY1R)>AITa2>kQ% z6``)A{$hCtj?<#`Lhw%TS6t4~tvA_UUV_>9PHn3)r_A*qr3P%=YstFqs|^;LIJWh3 zh#!nZo~}w;rydW1*cr|GoRgjWoHP;8gqjklLemQ36T!3zd#1pd$&mGY#vk|IZ;(ev zzV*`N*J06Flvc3U*kLC80bXu?lSMmZ7F^^i(3C2n!E6htduyi-gM zO2^99@8NNTE(b(K*_1Z*_fzI0c9O-#ypR24Fc+C67)WCBii)&Io*Xce`?F;rA*P)b zB>%jP;Vn+473L1v9RS5F#%Gay(9LBr{3PscW`6&JK!Hrct=Bho zxOT}mo5$N)z>W%EdWeCvLufdZ{)F8&b}wh*wdodQj*jMy})23urPbH z>|4-AdS`=gU0Cp=Y;S;WAXxO9$$)!jG)vmn)C^@^Ry(O4e&_DzfA8HHBRO;ga@nqr zweXgsPB`54iiUJpEyT(aaGg}G9&EEST6Ip4uyMx{Dj-k6BOio~YU(Sqig(IZzsWT? zB%nQ3Bq(EW_xT3_J?ORGagMX{S&kl8vgw*yKXrCK?b8)Q^YZi$KW~ambTeQdn3Ygc z>v*dSiog`@WPQeGdPgP?mDun*RiS_=~9q~&uxd&qzmTHk*Q3sfe(k)5oKYSTMz zhxQU21Bn$r&1oe&^XXZA1)Q2kXVEotoju9|%~AW9cx+|zG@~d&wTC6(9o8+1IvmN5+az5~_D#Def<>lb=7Z2m#st7FZ`W5W#h4Yh=!-S&s_|DCnE&Q&fOh6>bD-Q)qI`H9 zx09ufvEfhKM(Wd$hQP>y>fUN0mL(u8k*;lsmy_0P|iI55w^e`x+948*^Di`p!_rPgWC9!i3o+pKKq6H7w8 z(ZL;0RQ)hB-^jqWt#ZawtQ3X;Tw5010)bo9y`1yyZ_wpmd=1Cmt6r}68EL#u$_35~ z-9I_hgzqjnb#N5{=i}6zeAeMs9_fDcU(pX)9rvUe*+N%WN70TvCeaF2FE=}}Mmm-hZVG17TLfJyWn6lBsi|bu%@ATHU$l%5u;MFQ1&;7`!*t;@7$4} zzry()j%!yOx&bJ-CPw3|M&Qt`1q~E)S$T0rAEuEVjowHabB85lelh^M@vbL4FY+In0Tv(lw5eE2Sh?17LIva^R2Jen}pFMK`8 zRn;$+Oc9Kfh_YNS0;Bnbo5!EETunGjeyYr>Dm%d^0TP`j_(IQd{r7^mftovXt%76F zH%c!YDb%!KgjodcFk(&v^9Kn*)i*J>szSJTq1W_587}IrmiG*M4El0~YEfaQr(fp>lY1bGo*PnOixWZc1GBt_zjy8$<=4YiU2J7YFjR zvQGO;^{Y^RW5_#u2!uyM_x5O;@%YbwvM0J`xtq(n>v5xQ zi9nrYj;i)T0L+^8vzLM-cJftQz#ZC#wSADF9U~`waCo*<7O9yRPsupg8N7fntq5uX z8$a^&Eyq|A0y{52{5^KaYYbCbGa}hd{7y&T$0Cz(NG^Wa!+95oDyfqSn~H;8VFSF4 z(7(~hiM*SYVAoHZxO4CnWMfS6%)x~-5&*SDW!jm=p&gDC-AMoaHD6!MVxBsnUr2po zQ^f9;Pg#c1d!^FPzKfCf#xl=^R-owlb&o2d(-`7ct|MIHS^>F_1X*7@5aDkx#vcWz z{`;ftG3|Q&tAK2ujrGw-7AEo`_$)cZXW)MXV)V3BqndPxsmEoVDUxup_eS=$E7Ce+ zT!L66xJxA2+(qN6^r1vK0+JrF(>~(d1^wnuLSg90d@0SvO_RBmX&YTsq~T4})Q9|f zosvbMf<$BNmP{WOxZBShSNgy1syF+*g9&VRzBa5t+K`*bEhaSjpg`2GVdf75M! zv4v5Kn9x|6fRrE5CTi|KQ0H(0;i3{9;EeHFojjB0smO&x949RoJenhu?ZIMpzUr&8BPWB~d25)j~ubAP3KJXaT4?AA%6^9=$Vj%ko&*HZjA0`4V> zUU)~9n!TLl#+81C?*yk>Xw)6b94*#&7l5YtKvF?YtOmmm12C<~g8NhAVc}krWdp0y zq&F?ZJj|l_*yc{*!%}|iY=kWY{4Q1n!a$3qvgUfh0Z2M*p;E{vj4ba`^cJb+(~ZL| zLqkv~0|}ayq~q8_@pbL|!E7_Nd*eoOZ1H)c_rz_&W3!807E9kPhE#+niuK_7(dxm_ zfHvk6Q^rgsp9g9MXLgu{FVg+C8?F-zzk|yFwDqFqbW})dUga}E)vW}(w%u)q4-*sh z3F|rjv}NkaJF#dYk3?F!EE?l~16tsVVw{ocCddfz1-&E+kJd$DL>llDFQji*xu;xj z7X6CtPbwmDohqB8^u-tJiGhBU4!FJGG4x7~tysIP^9*E{@aA0Kzw@!>K;fk2#XwYb z=gfb^)wfKZ&jO4)>(3pGtzld}D&sZy@mijg;&rNgcMS{HgWIWebCC8(Ms1@`o~ea* zu}S>a26PiW`a*udTEp0KC?zbWVGELO@FmvCYsqUctmbm6N;%DCjg|bx;5Y~S&q=&< z(wcx09+KFh{XXA@`@exO)fSCQ6C$FBkB`p<%|hP+s8=AIK0tW}6r149egx+-Pv*sf zZWKlW#EG?-SNOY;+0t`^d2)leN@!Fus{?16?d}v612qJsT_#B;KccqcfJSu@I2f>L6}Qe zs2X1FS?TJ-Jmg&Yr)44_CMgFL@_;@7ly|_)NS${f57HditB?W2I6|; z+6Ci_s}P2!?5POev#Cbu7Jl;HBG`rJf;Jt2>m#El0m$cVHM|^CCckc==Cgo#YJ&bt zUq1hl8WANO?!8WC?q)iK{2x)u+r`;C8P|QPSt0jxlnA#(0%fX>$gaTPo5+_TWe3!9 zhLaMXgF|k9i`Iz$A%_D0T>GN~B*mYBBOzhPWQ^82%A>V|eQQiHpOH-Ia@Fvna zxwTE0Y;Ie@<&nF)Q*i<1MV^(ERmt&hb{INLi_>}vayt_8gGF7^W!z8*J6{n*tKT?5 z{--VbXKAn|lIHG%YTn(+e@hQ!so3hA^PtuR2AVKH`smPlUV$x)%K7|zLB+d!x7>-N zrKRvG*!vK3zIOMcmC0M(inKq83#h?pxSxvSIMb%uyc-gTE|n&yWj|HTOCXuc$ja;2 zuVZX1YOk*-D(Wsu&cI9(QMePLGDs?fFg@oO`wg`t7mb{Gpv#<8VWhwzaKv{0!2Cmn zE5}E25>{3ck_htLd=sPHboGi|=UXdLb48pY03e36^c$@om5%mb)dCJ(NvVmL4tBny zqOl3CsZCEywjEMY265H)a3^W=HO9xy+8zi%6Y^9Zr-4PI>m8C=xI0c#AyZG|yJKbm zeR@ruHvR)S4H=nAG)|5C^+DO93*IffVJ&mOSd_Aot_VMI1}2}tV774d*0vix4R^|2 zGNP`r?t-QB+DeOWm;R~{u3Gs*95p4aq+7dl-SI&L!2s*H?4MDP`%+-i@L0IocTT6{ z6=o2def#a}oi736M6C6xvI9qe-9T58Qr9JlVW3O|Lr;2QF{Uos1IM8U?}qlGe)X4G znbb>h4HMoz5%SO){pzzv&6X{I$5~Ctgo3cjNW42j3n%#Xa z(KLtTY}4lLz3Hb?N9(rYzmp|G9C3>F4i44!uphlytxhId9%-X^2KdYhoVj9q;+v9{ z)~6IpGTn|&zj=iCb`_Wxm)P3nw&wGye^yVmX|jdo9UV%k9d>@y!^z#L9`eh+G73Q(=-J88VOY{<)B-Z{><-$aDkjo$D$A;%yWHMKC~;^eaA zbzfe#tID~A1SeU9@WybQo-u+TBkO(J85Ea!)$w}72D&@z+kty3=%!*lGeu2^19ylW>C#$^7Tj*UmA#>507v^>v7gvqu zW`@-b)!wZG>z2vO{shf=&xd8}wcWLUOLXur-CV%#8VW~wM-jy(*L(TZ4NMx0uMgH5 zI5UnpWMsw~oh>N_I?mS;1o@)Ep4AG&x{?4b&y3IQKG#j|uOp94qc4CabigitvKI^O zqpkQ&OXyzjez9WFpP$8?z5OmFs~^WZdTC2VZpI6}NvHkXxb!Phr)?pz8kQJEPkASdnuWsN?COVW8xk7mh?2rZXb9-2s3iy z9*du%ik6^=l`cLj^Ju7F!&=ossEXv>u_m5pbOW+uADrnUPsCjC+A61vDw6ARW(Fg; zO4z(O#^rPvT!O zy=~9;=&9y5>+zHgJ418kAIpP5BPW+yrhC$0Qr8ce^$QPU&p3vqc)jOQprT9BB&io8 z@DwFcxeds0RTq|my<2!Bp*v~UZrrg(FKQHDyxjlL0PJoZY;YgUwy@!d6R_-sM)cE3 zCh%CX>O6)kZr|_&D|lm&wo$R+iq>RW8z5}*`tfe2KP-lZxh|< z^pYGAfS<34=Cy`>x-)rnb=MFvd_u?h($&WwGP3V>obZ+L$XfL$R(Fj=4bSRh@2(AE z;m^zbj)j26@5YA>Z4zj({~e3n+NqZae4S)DHqhd}771Rgo6dm}j3B4WReh21k8ai^ zMSXrVcJrQ>r-?kR*C#MJR3bnJPu zBc7Qzikz0ue0yw`Fp&I)NR=xl&s!C$l<3bVe6y#XF6_K7Tu*bM_&S9m6$^ftm8`nC zM-CjcY;P}LMlGR$$~DUVt#BD0~C)@~D~mLOBeL ztdz^em?fE%OO=1*eNmkiqi+`T-sN5*&SrF9*S2@}dX4nC5j=YdEy``CnqgNICt|33 z)XAz*NuDkF=28N^t4oE25@?Ajo z&}ue1klJYaDnJ)vk(Q(l<-A1AQiXZAJO&PG!hIM6-B|}kk}Z1Vv~l}IhI&xlPpfbb zWoB8D0mIg-N0=3OT&8al@V_->g#AKj&QR<&zcypB1F{-4>_{?XMoC?mNucFMU3q<<6*YKGAJxi=8%@tW9v?92#r3&(WF7&XqJckG8Uj zgH9pN5>3>B`5tQKklXBAkv1>((gX7>16$AB(8BPKqu)TQcVs0&9Ji*xi*^%Tpc>C#3~UQu#cWUJbCLsZ z-+Z^$=8fwL;KE(ci#$8c%kf775_?}>4})$LC*b8k_O4vmb8|Sy>(q9sEm*hAH<7=; z$G4V%8+#wc@Mam?=XCat5!>SO;)3Sa8HbdO%#<^Ty9ISkCve41W=B}?RImtMlNMjt=U zXNHxlHEmhvoL*^_q4MU025gGd+_IYqbowI`k@7vMxqc_^lj@O)&h@4O3bpBKncGdf z{Yn+f!nxmcKNh-u?(sK~{7L7D=v!|dku3TK&6h>*ul20LXwa=Y>un~|?s%RH z_KWvzhA#AJ`^aU^%|MRVhIG{Hno$vI4v*7J;qRp4Rb8r zC@SBotqk6QQ>2g=>Alsyf9XV7%97WTj)b!>&G`e3wcfEpgL$HYZoIONGFZl!C79^e zH?j1tUFQs;-2&ZNU{vigfqe=_xT7V6L=#|AipacxDi{u@AJZ&V0f~WeqcM^SGl>G} zN^$=P5vHgvoZL42;>|>lJ$wK=x^Jkdb1;)6c5)>>dfHB&EUIYVJU0Pn)fLkHO(nP7 zSn*z;fTFKEoFR-=pxhK0ye)3j9SYCnL9$GXpl7qI-9khqWUbjesf^q~6*{a%>AvT2 z`B`LSW9MW{)u<*3b~hUR2t%b`PJZs$OG!HCmj% zLsEppuXbd>On+2G42% z?S+i`=YjDjIJf-Gy=8lMAWHngD?^|JSHqX9F7!mNI>eu!=0^8Rz^@)>0nF;96**-l z)gMFe&fe#HQM;xpCBJIqY(T`=Ca349kujn8M3a1ZFIWq;5d&w=>Z|<!+fS{M8*NcO(*I4plw1O820I0O z_E+?F0@}i#XvcbPG_Q%;{Trq4!PQpTZzDC_7?yWUzgD8P+kg17#^`STLB+}^q5;p- z(wWvhmjpdz=vQO#nP>Dec&z6`w5b4IEx>iRh78Krc;eD1%XA+zAa5o1sHrG63|zJc z&N>~A;1Id2kuzSr?35~&xS3sDSi%?>S|lvGd>ZQP zcVl&D=69Ie5gNB&np_+U0$f%$ViDlx=%~jSj*-Q1n4UxnhwCoVYkTm%T~ytMc`DM< zPYj${UKI5Y8YpFN=%B7DjP&j6d{oi8p;gxq1TxM44u`4Hfx=-FGYA>v#)#%N;t{oe zg=NIDZ9FbC$Bio#m$Nsv-mAtwlceEYGDRXwQ@~gWr&}?b%fwOgw}`Pp#hL}rPkGoV$PNe+L-;i(?=yb z`J-P;PTZ;!_93$us;oQI$;MJj#yf9WT89+pW+(Xo3;)pXmYHfOti3&YG)Nv0JHsmJ_LH6B%3RQJ!Bk=CE#% zw`zKQpyo4~6jXKq4oxbcrJ1`CpH=Iy*!WsuS{c-BS7jeAcNge!2HgHfR|$l@f{LA& zo$j;Jt5Jpt7(-Oynivo&=8i_s=TYQPxIOJ<3;lSujo_Q7AfB!eKi!!P=w8JqFbIE< z$pU6Ne6#?DPedpA$#qJ364U0q5=@g?|4%}br_q%ZADbK(C&b^8l$I9rFwbC{e|A4_nD_^1s#M4z z4amq4J0K4emqQMUZ?(&L7WA{4O~0&R zo?v1s>L;5VQ)e~@2=gn;9AAOJz~v4-u}X$ko}~v53k8U1rOU=P%IPrc{umt|9u_xX z1y!0%a&{YA+AU`nWjT?344e|BHn~83g8%^3b=~#;_%^7_oz#2I1iddk-*XlIe&!DA zAG~XHhzXF6k{IGp69P;c8uNC#>KTzrm(>9Xg~fKMl~;0lFw}oMJ-$&XnJKMmxjP#P z^Uz^7rsm@GfZ%P%#>l|-ejLsV+qJY(3u+&bl#oEr?JEU!%OBq01HHhpk4X=(it^iw zYfIl_@~3=UjxUWn%^INr{pHpXhCvXLQl~=7P3Lw2HL52(vh`R`Qv;t@f}&Cf){Sya zj0rF2ZcpO=G^aqK5$b5}RI7_iLCHM&_V|igpFnsl4%_wl;#2H|GOyV*PdNU2LqalA z(t>e-$726zXlDo)PD!wrb6ff>$x0m^Ih^xy4`)=a(~NfnDXH{<4M5U0%^G z%ZSU)ge2b|H_d{9szl^CrhEP4#+!V*e4j99$;T#F+O0}LmU@)Nc`C@<;bv{dQ)yn~ zUsa_>@*8WfoTk~h;*Ki6=4Lii3 zlPL?TsCNELx$33av%A}(Uc4;jno}n0f0>Znj4#{DJ+@Rw1OOz*B;Xyj&0Y6Bx3LBJ zp)xDRen&6C`HS6os#(c;*S}mTtn<{DBr;HjD=Jm3qfQV~n{vlc2iJVYu+y5kfv9q! zpMV+i&MTIlLeNEn-TiNDN`gA>tJ^SCs>BUMcc#rB8&{L9y)aAjkBepu+;v7pS{+|NXJ zwkYuv6`G*#VowWD;g5f4R8Fql2Qfm9fziY6ZDkeGI?s#sL)!7*rQHN^lvT+V4EH(W94%_HP9LT&(u0xej0oglGw23sJn63Qc zQ^~J-QVG1-;R+8zq@1+r;&s$6H|wCfdqIcI>!8L;BzEo=yiwZSZ{2rhnmIWQvMIHU z{)F~hUv=TH?z&+a8k0cOS^!VtU$~6ZV`b)0JdJO4dHz(OokdLS8%QUzpCMHH|vp^rWc^Vg8DhfPl|LMEG*m5!7NKh6qZV4r&j7!e>%5DK=~WaA9ZXW?-4wp*Faqq)$7t*Y~4$Tot?jRJ**^E!*E?nf`jdYjw?R`)7 z_DvQ3zuGpxVx%&kIL<{T*QKm~u9IH8J|zX7=RRB)#;H19-V)ESppO0;0*@86V{Bt} zk4a9;f>>K)rQ#A=t{A$B;RBKu>(#uzu;+xria@Vu^uvFGmSI2dyVC>L>jVvSs*#UF zfTB3t1=qbqu_>F>*?Mk;5CmS)s`DeRs0!dT)xC+_1-EcEKWg@s*dBHo1=e8yA@&Fb z6Xkpujnqdb#@Vzb9do6gp=U`@&t}E6_uwnN;SQVS$4GMENkaUhRKzJHVFyuw(Ty-% z2pv*ovjp+KEvE#_WP7uo+hyiXAA<#&TzU+6Ac+?cAN$|c;Z*&cl2;P4=$@yjdQ|BR zP&)nWTWm-ono()r(0Qs$h+(wyN9&`%B)Y0wf!)xOF$URKOdUQ=Kr=4rWtu*1cP68I_FxSq z?RFbh=XvdF^uB`Cxac5zlM1y{oL9cs9hj8`*@Xn0Rd~QDW0%A4YlHI{kYO<;?lXpwaSCw zk!JVhpiu!TrG=CcBg?11wB+Mu4$y@m`F&ZjAcE%dfL^#J=dKG{q+OKglGjXTCifcz z)L*HJo1DtRHF)OyCgIHuqHJf2lEcz?mdtMp=BxIPi&^F(AI3+gBdyhM+)z z!LbDFbuyjm@xk`Fb7){mre&ni=mm6hRJmdU);O#b@`2P*br5dK*qk`C54&)08+m(9 za>QiY8Z?TbN=>alU$xmkYyiA)#J6CXH=q*4fyiQ3m%n!5qSqi--)Zx=tAFMeV3*k1 z>KmH*I59IaF!$RyGMd~4SC*R~kYpL?BGll0s5|AdYXdupejS_t}+UATq{EXGwk z6SjqfS>iSoQ{1)5uFzX(`_$*TyPZOiPP&?CwIq*;>4C{5WpcnnC^S6I%xV_SVZ;bp zxEBw?2A!J3{4~~^|FL;!w4ETU#pSUfps^&7_GeY%-oozueA74{%s0@cy6Bu&Z=*7y zF{-(QJqQ@TTC?=umf$p?tIW$3LH7<;fVP=`cLhEHBpv=Zexn25svv?gv~^?hMK3RI z|6_Y#@evW|_w1dyAD`v2fa{{QPQVC#M-LXv~NueE1U zw7g(0eAnA1N^@iXZGqS;AZEPx?A6c$^uf!5p4uckBV?3|U8DdO`iBmR*GN`%GX6K1 zq@GwxG~r|kk#*#v!*AgA`>Lzrl~ImN4!Q%(`X~|=gHuln(Jw;F)n1^nT=|F zMbDUIrcxk$H7O~{#=+$YpP0l(gJ-?IAS)(jKe@XHf!nM4`v7T({G?e4HY(WHWOVTI_o(?;z`|M6m)OMeXne+Kr7k&yKPiV z)haskGI9L{qTF_7?n6?phZi!=DcmB&O?-8$WkMc99G>nAb9fr}snWInrr3HvJWgyh zvpuXoq(zH^QTCotVN~>W@fpv;iCo<~&DaY!Nb!Hwc9l_WJ=;DtC~ifI6iIM*XrV}p z2X|{BC1|mth0qpSyurP=I|M6QEEFjgoB~CIyXy=6-*w-;pWdhU<*YSl<(xCKv-ixN z*?a$fi}_Cg}b7DR*XwyZ-D*VphM-@&1PY?`zzBc)f>c|nSO zj4r|-qC%s7mU-GOooe00>b3@RzIBLYyes&D-RK=RAG!3jiWbhs)kHryq|OOeS9n%y z;~!LOz!2d5n2ej3WiL+OwYJaU3oH@5;7bvLhX!6InAGW5E4j-QP)YuB2sY}8pc;N# zD4Du59wDDkhSU67ghOOY{LHOUg~?^&g?;J_6$VMa=t-CClP2ej;hVm5?FF}c01f>Q ztul{>{-j4Nu9)bAlCZ0WJ^Z}F;?8Fm3T1}A4vP-nC;bwI;$8m%nIGI%TMP!#4QG7w zyD*OwlXBAy(z-EY$T(;DeJ7(vIhCp_TJgmRRTye=%6mP?b)p#NX-C}p)mfhfWJ8gewG~4|+>{JD!%J>n;c5EFF&o7d z8D`f@QDCd<+F`UAFB`^dgc80%hz==ad;bBhNWU5$lIDhyI|v|FHMFAXO{NSKWVQ|=!uX0X5(X+f8grj?{K?1q^o)}`g)kO?Wc_1gy?6o3yBvNPoU zH2YsufKW*-Kg3t&dWN%{=PDTY!t!35Avft=_+zSMUkE(z&gR#4d0%Z3F)m!wSTc4rj4VICB@ArsotzgQ>c z>m!A0xXrp6*NJwHrds=MEIAw+wmZz$4{}SyO|JU`%h0_ULsh$i$(P>$T?DsNo?-xLUv*pAIUuaoj?DxW6RmRYvcCsx!? zqJQsxuq|E6O?=iSj(F*G)S#&5)AMp9NY)S7j+b&JPJtf*>E9k8mX$d)9D$lj#nBE2?Mfv8`I*hYw; z7V!J=tc76?E6MtF5qX`Le*N4a33YFiFk{Nn14rT zoq+Dq=#s}^Zc(fWfx>~LzynBrZ3 ztwzhYCws$KW*&m2#R(#+GU^t@1>(Ae3$|Tp#%k-LBGW4Zep61sDNKkuJ9@RpSpVOY z)gS0_9N6cE(a6Gc36<^NMw0InKEZCfaZRUP9qnia67DDzz2jQsYO{4%{x{Aof%x=cUl;B# zY!lXD(W^P-p23mefoA1wB!WSN2Gwu;CSh@YfRHJT^KdW|%a5?!*ippX?sbv0_kifc zqjxT?8lPXF6p9|qOb?g0HK%WUpRn(ZGGty$jt|)hiodGU|Wm4GSJ$KRufTC z&!b%9;E}Evv?{1`qQF*-goY@pe{FLFg)J5;x0OK!b#c5vhArcT)$ZSjaaG?xQwTQ3 zHGD1FS-{IL^<)}uIzKd}@JtvjuW?}mhlQ@vS`x($F%%z17r0cBYT`wMN-Q>hu6Ga7 zRaot(=be7DJ~CU3Uoi^RD=mM_-~XjM5CvX)oI23%QSuJXTEV}(G)wiQ#V#-d$R8d% zK2x6bo}Gwci1wi34IOdmmNeN|1hOTi9VAWeh@QkHcb^30G?^J4B&3GsD`}NNYHWx9 z7^I9{oel}BswUQlKH z{k|~?r{^llp6S~ph$81fm>M3Xbf#U=j*{x09ARF{7Bd=bwd&}_^yBy3I>PTh;4}j; z4|xV|sW@0IDKia01Ub1>>cif;K>KBe;fd)n$F0KJQ-ZZe9o`y({aJB`l`|NIXMAbf z5Pa?A;gq_L3sUX1i&q{3=+GBNpy4UZBEZ`Xrd(6*>C3v50Zj}OLee#Y6qgs4+{H| zGU`$h(TO=C{fBk+X-)870DcGPIqC9TzE;pfU@^hIICTP=x9S(Zd zbm=s31T7?DTAl6%NUk(DGRe3kuo%$MkNw z3prswO)F^mWo;tQ+Fq1s`a>>j>i_;3`535XMMIYo=@YpA=5)Kkbkzgf%St})U4v4; zHA1EArq`txqiVX@$luUUSFCS4zEd`Mq}n@x1XH{m*zftt=ZRS1QM@}_hEs(JpChWT z=tK7|WgKFDQNAk~7X$4i)|}l*Y^HnkNZ;j|P9~4VeC2t#2Qr7K{)ASd3VJfVRD8AV z6l&GZ72f3*KlM?C3G0ZVuq4B_=|;jh=~do@wv2v8UL~2cT2B$F>2+SJoZ4D9IPYFP z#}kRX(!961AR1bhnnPBqGJUH;t!!v54k>r9KB=Y0x1ne^HwCppAQQ*>XINOp;)E1z zsf~G&rlIZ5n+Y!;Y4^3#%9&hhDn)#)wwwVhzw)VUn5pG>PTMsSL*HCDRbTFRJ>K32 zIk%=;2oH9&sT=0feWoJKJ97s@;&9Q=TySC^cp?OqO1g59wiQUGkrh$DatI>#&D-`T zZy$PSOcP6^;boXPuius(i@h`7I9N(2xnZMj0DEGC0Jm^VB}zW6ag3*Foyuex77IL- zvaf2+$XuL{pQ8_%y-|si8jG|q3yDEa7#{Y|Ss}iEIiMt@m7Oz@&S{!xCN70$mYEJP z?w`8`66u}%W;dxnP14y(zsjVrVn3uTDLG{v-={pMfXT-6hOs9*(!e*(OQi1tE;TTK z&zBY)6XH{fn8s&L*-3L-JrjT4r3ik6@6F5LapMF2RpJd8`5?iW@_9o@cur6c+|db~ z9^kWj)8RPl^F{qB(RGf`@&<4!SQS`A-RqdgGg0DXZ>n zh=+_|VLofCjPYno9oA4b>ddmisIh7~a_~0eiIRV66VV^~vA8tDc_nv7c`@qXdTH5> zpu82X^Pk_J1U*FCv#(T$RCFzg2f#0PVisn}pNPY_ziHcU9o_xSe3s^mpVo1Z#nHTQ zJGOitjEEPL$1t%C+2r>ClSt*HR=_s98&kyZ=uOK}d0vs3ED@KaT$?V!Z`%B3(xtq< zOO3m^jUUU3=F^qo-JuCjhO`WSWoQr&hI;A$IC{sEs=--CY2e2LLB+I=zQ=E2&|F@N z;wIM_UkoFQHKV-!s813`Rm?ljyW4}aa53!>8H}z4U@H(da?jgi+Uekb;9LR17_g4p z2W$aN{BUfe18F=BGM7Ke;5$E|Zhc6mXZc!c`a$Gv^UB2UqdiaDKagUWHHPg%p ziELMNL6cT4v+PX5DhCEG@G5#8-{%p|4HZXtY=@SRDM8xd5|D?xwJr=o*wdFWrKB?^ zn!=4a(%0C)SbpOxe$Vcv0G@ndvIQxq>1Im}0;yy|F=%G_tgw(YqL76^*=}Uz(GDXvk|UQ0BKdmn-%vWkyXl z6)8O<>U-pS#G{tR|NT*CfUB6Sk}3-x3HbZWPy#yqS_jzrzcr~Wpek$5A{3gThIIL@ z|9>HdZ4VNFXio8u_X^$_XaN8A=3+KC7?1VNqJW;*c=K&F#-C&jOwMwUS$xj;zF`Bk zERaf6mLRCL94Hf5Sf!*ML3d#yW2n=yctnhA`*{*e|2nGJOmv`u88Bmx!;wvBtZ;IeP6 zzZJ_@cAwrDV?Y?9P>;_j)DZY^(7fZUfdR%K>1zwt7Q#Tue z&1{hTWbN1!K15+Q`z3#^_&=)5F8$tnFidxN{cyh2>K4L-;ZWfJIO4Wd1WYAQTaI@D?7t&gGxU1ZZ@F< zC2hJI-`=-@3Saa=FD3_XaNj!x}zzCK^y>?qeFl-~9M+?6zv z=xLDhrUn3B^)aSI+_l&{h0|g(I6Z(<-P`PBH`fEsN2Rql!Z$sE`f{3Oi@Dr`x%uMO#bAm#d1h5*W(ef$uCdG^p(9j2 z2gb<%=OTv@*nw4?L{QzCSLS3n3%*?qkYkGTkM3t65Yfb$yaa*m(?a&?1LZ3AcZ{v< zom}T-I+K(Xk!^(>7g3JTr!~iUk?CnCp4E~X-R-W*Dg8~MLK5uZM9Pj^z&SQ6I9d2h zzv|k}V*i7)%gmNJR%QF@A9f_mo{=*xSpIi3_i>&|j+cI6Y2i&oGNk|j>|0yO^XnAq zzo=jPzzZp6J!P2#Q5#3chld7SaWyp}f$gmV-*qukI~>kYv9YoF+o?Yn1$mz%ut|xE zIW&RDLiSS#=G^nFc+_@o4M*D%+RGwKQ9P@o=Uv`xMe!Y-{8&W==3IFYu5UYSYO8LC znqL`15V-Z0jP^e_*!BGKXl+^IVm%3M?)zqr!N`$tcw(*Httdo)OX8fhOw3!71Pu5P zqvwi@Zbmm%TJ~3~ExOxF%&HaBA<1aOG5Bc#6ZRs$f8I%u6Fe^07U||$yJzX24A;DA z59l+|8a=GFlZyduKWb2~5Y}~Tuu~3s*nRSzcUF`uMPb0VT*I66S!cG?f+Wu#ryWY@TZv5;4PPg2kRFu`N{WpZ-Swkm5}8}Im#%#Itcxq#nC z&cH{S(zwu-%qv@#r}Aa6;H8He(6+RA8p8_b)Ake+|DbCHlX%NO5Io~eTzpCIZ_U`3C8sBE-Fx$yqMaJ9yhPN z3Ehji?$-x>`oqu}{7T(c?g1*n4grKh&JOK+8EIF|qeN^n|KIh3Dm%ckCiOYLt+n8@ z>1ro4Mo6aOTCo3%DWj<5t2gfv8^7+UujY9Slw+)Jihva}!9+~;1w`u}2;j-b%P*H# zi7}%;aqZC#Fm<~6*3Qs34=k@A{1liQ+*KJu3yT0T(-ZZJ3(5ZC;^NCopDSVG+^VXo z@^U^&$%~syI##>9%o#>4iF}SJm4ZfE5vwm)$aNv!BY@ z$`8{kQe|>Xm&`Q^AV5*fJ1?2$^I;NHc;QBBSbrsw+s3ZIGtleFwGp^6fs7U0pTb@} zS}}K=zHW;|5h@(0!^ZpZ=(y#&YImfur86tT2s$2yi|+Ks)e;4zuHuvIMnzF|t}#Jc_f~rD5z) zvP_PrFj8?4#1vE((2aS$=P~nf{#xDaFk6K~;3)BQdm1w?pM9rXroZNqh{M`GMXl)L zcEoO5RW`m%2IMDxsC=h+j`!Hrq-FJ_9w?sTBTRieF>8J4c7k!-t`v&Y57AJ9zhdP| z(e>NR%`h%DTXY+|LwUQz6lBzY#-x>xl{ic3nee9)-`;zL`~B+k*z~mBWjbcXxBPg& uWl&yI2&RGAFjl Date: Tue, 5 Jan 2021 10:12:07 -0800 Subject: [PATCH 331/486] Update bitlocker-csp.md --- windows/client-management/mdm/bitlocker-csp.md | 8 ++++---- 1 file changed, 4 insertions(+), 4 deletions(-) diff --git a/windows/client-management/mdm/bitlocker-csp.md b/windows/client-management/mdm/bitlocker-csp.md index aafdb95416..03a48da95f 100644 --- a/windows/client-management/mdm/bitlocker-csp.md +++ b/windows/client-management/mdm/bitlocker-csp.md @@ -19,10 +19,6 @@ The BitLocker configuration service provider (CSP) is used by the enterprise to > Settings are enforced only at the time encryption is started. Encryption is not restarted with settings changes. > You must send all the settings together in a single SyncML to be effective. -> [!NOTE] -> Devices that pass Hardware Security Testability Specification (HSTI) validation or Modern -> Standby devices will not be able to configure a Startup PIN using this CSP. Users are required to manually configure the PIN. - A Get operation on any of the settings, except for RequireDeviceEncryption and RequireStorageCardEncryption, returns the setting configured by the admin. @@ -304,6 +300,10 @@ If you disable or do not configure this setting, users can configure only basic > [!NOTE] > If you want to require the use of a startup PIN and a USB flash drive, you must configure BitLocker settings using the command-line tool manage-bde instead of the BitLocker Drive Encryption setup wizard. +> [!NOTE] +> Devices that pass Hardware Security Testability Specification (HSTI) validation or Modern +> Standby devices will not be able to configure a Startup PIN using this CSP. Users are required to manually configure the PIN. + Sample value for this node to enable this policy is: ```xml From fdd1852fae0cd516064caa92f37cca1741cd6a0d Mon Sep 17 00:00:00 2001 From: Jordan Geurten Date: Tue, 5 Jan 2021 10:31:54 -0800 Subject: [PATCH 332/486] Updated the supplemental-policy.md to be more specific to the supplemental policy creation workflow. --- ...izard-confirm-base-policy-modification.png | Bin 0 -> 39797 bytes .../wdac-wizard-supplemental-not-base.png | Bin 0 -> 41454 bytes ...rd-supplemental-policy-rule-options-UI.png | Bin 0 -> 59172 bytes .../wdac-wizard-create-supplemental-policy.md | 50 ++++++------------ 4 files changed, 17 insertions(+), 33 deletions(-) create mode 100644 windows/security/threat-protection/windows-defender-application-control/images/wdac-wizard-confirm-base-policy-modification.png create mode 100644 windows/security/threat-protection/windows-defender-application-control/images/wdac-wizard-supplemental-not-base.png create mode 100644 windows/security/threat-protection/windows-defender-application-control/images/wdac-wizard-supplemental-policy-rule-options-UI.png diff --git a/windows/security/threat-protection/windows-defender-application-control/images/wdac-wizard-confirm-base-policy-modification.png b/windows/security/threat-protection/windows-defender-application-control/images/wdac-wizard-confirm-base-policy-modification.png new file mode 100644 index 0000000000000000000000000000000000000000..17ab235dc3abce3a853eb0956ac8125748eb67ba GIT binary patch literal 39797 zcmcG#RZv{f)-@U+xO)P@-7N(7;M%xLkS4ghYk=VH?(QxP!QHiS*WlW4$vNNuaI3zj zzwUkL>RP?`sv4^R#W(C@!Y(AN6A ze?d7aONxG|n)q_`KKKX}kr(;!p*9-%#R&F&jA$pN<@n(Pmeaov)Vdjo+lLS7NYdX$ zRNeH?z_7Zi%d7BzpAERy&+JAU7tVFt`9y@<_^7PE_t=QkwhP0G;7G%;0fcd&a7B(j z8K!*x#5?i4_5msab4~5w(IDEQK1JLZU5W2j~ICTM~AOCYV@HuUp#N9jPSp zL5uEscIPQ&_NA+*;Z%3!n_t>@bYV5dTlSAY1?tP^xC|Ueq_j6Yu8~!4sJ?H=x~0Pt z1_*}8ub%f*Nj3ev%U#J?cKuvKVO>{JJ&6W8>Lt|&tqf~Dt82)D-a`2ZNUa@Tn)VZ` z9vK<9(AYGgAGnBu-ZYl4MsvRTQwqMSsj>y5esYa0i0-n^ zjUB$~jjlcCHG%v99GVa!KG(;AMhx_~_Ax2ZvKhtajf0UKnN9bVlc&ZQj^slbMYE&9 zj)2^9x6@6K?0xpNae$E);xZLo^UHGOeqwxH@nRl3!}4c@>>vTZP0HN>U(F|Q%#(GV zd%@vl|6ivevE1Z?)N(RGdq6Cx*2~=M4ySXY$MPb8G47J~Wo7)Y0CT#EtkhWKrcQH} z2kdmUS~g#;5G`$4UK~1dS-T2`XbCJ84UIvUSLzYQOb!a?T8o*VmVKc%%i`Bip+G|O z0F93afgiU$zxxzz&4Oee_hl#aZnWBj(g^!Yhi}lrB04<~f1F&FkFO^ zcLfo=D1-1GUvr~L3=oSVf*u}44yYFo$UU6_pWGe+BTPcS%G-?&Y{gCf1nD!Z#l5$fE-pFmF@*ShH(IK>^ib}0_L5j&KC?E=_Uivc7FGoJBfuz2e zn6L(U_^OGR_I!o>=i78Hz1Rm;_NHx zW#KT_Nr1}B>78`<=w zl$=a{2b;CKzw9=;m9qXo80OhUxN5kMPjJ%^{zK7ekh>5o)J#70$xGrx`@y6z=7Zkf zP~z26+2|B9e}gG8c$nX`viWs4 z(oRZ`{8Va6ESQ{1-5QFf7m#i_rnYQoMpfOAp!+6r{SlqPomu)=$R=YEwr^;kJ zVEJdcnwL$4LqXwfeHi$CGRYGg>14T4g{ChqCx*~_O9}y8O8*NvY>0Xp6SzYvT{bH) zAs%=9<$gz>%ND%kzJ^c0-{v&Ha=PMfumMfY=Tg1)p|h}H6&P@_7kdRP_7V#Wg!!&p zf$=sA-&>{EjieTfcw>h+33&)B&-K5@3NGO7N2}+OgPJP>IDo!X4SOnVH81@H;F6UCj?Gv1!)G zG-TrYqTS)wTlNpeo%FQ|J09M{CrGc;;p~+|Ird`j$eD?edlzl2pvdM3!z!93>oQVi zTl}$hv~1Plm(^B&#Fj36(z>4Wo`m&gnCSFQge!ZQw0qSv;yr_Z*H5Y`aqqU18|Nm0 zlSEfgr>+Coc=jkKU4zA71Pe$1?_G!c$$~%34eYw(m`q$;!_&W%?fpPXZ7>jNnT6-+ zs3dMWE>c~=;m^Mj6M&rTDB#6@FX%PzsUyUMe|$T8Ma%OM|A^iYNJ4CD?>rWXfzd>c((*7TJIs5D79QV=L# zh>oK(Zo;kq_C+%rI)J0Baq_TCv74*AKF!JQj}h7fFJ19reFUM5XA+&ARj!KtOcBu7 zkUAAS9=)`Co&X`1@-&H+s}l`~y8L+G6+w4p;*7lwz#PZ}GWKifK(~|(F(7`exP+uN zj}lKFBJOykjllh_9r_^pB(E!)u8RSHAnrYwDE)ctQI(!+>H|^6PRmvM73<;bU{4^S zFhZ_kS_Aw6I?mp%&IIcGh``Ac?k>t%J436Jyq;YbKhp6&%1dk|LG2GoVAG!=qd~{I z6}x$y+tE!cObs32)}QJYemFQlg za$CZAu6SdT5xwO!=+PPM(58~GQ%P`$8EyS0z{k~YtZ{_d2-0%p;l26;-2^2L!P!3h z4zNBn`|WE;&DHAQ4ga;>b&lwAhXB0#YNHA?SUX&o4^;$`fXZCbd+d4nXI7PD zxLF%_VW}CBZ`@nMpuBQ5N*}(tXZH5Wm+A5E_VSA6c+%)`G<;<3smjKv0r41acT?tA zJFjz-@%XH21u){JL{b#w7s>Y={}RLBagm?|lS(Zv-<7EiGS(<&C^Y^ok@Tc=f4L&kG4qXts$=1OBwedlO$xdFj`PRW<^wh}T4K`yL8F0>EG~LN**-8)`Cio*yk*4XyKv&pxip^_o)or;!U?es(thU7a+lfWGy1DW6f#`q-P zPOlG0#hG;G*)e!^ZN68wZBn}H=lwu@+zTaB zA{GH0*-0v&9sN8hU)^Hp#H5MYRz5)*O(2 zL3_-ma~UTAdc2~<$Vh`HW)pW9H`F%2sRg@Nv_#>PY;3AV35`wKXW=m0LQ*} zcS;Ad`=YKz0fz=`_z}k3sVGysG_iHsx}hp!#*wUGamh}quDFC39NE@X_fE*kGJpQ< zci`O>71?64GWctYLnS^)dI$?a?6}^D`dlgGG?%4+VY_fjBY}(7C9R6PJ)Hp3v`QLE z7jHKCWZwqE(Uqlf;|E1)i&~VWfHpT9Sumn(p}ikKw6{vaFZFe zEGoG^jkuz+pfHyvEnH2xl)5M$!jqv67gx)#$Jpw4*op7dsePLt50?@uCwh0ohu5==MUI&SA4n(xa*GMHE zhY|p%Nj2i8X#**#+c&`6eIQO|=E0i;UjAC&2xvtOW8u z_=EDgj*m8XO<19lo=rciESm$nHYSJ3gOrd#vWvp7$DATm)TM*|i(Y6H^Fx`P(|jr6%o+HNRj=GOwMF z&o3bHwC$TqVQ~rnijKHEzh+zWhZ)iTd;R|Z6NvwZHu!x6rDkU84fsK8+=BZ4 z5sSIHG=dCwclRj|92g`jDyqN9lLwCZCz#1<5y%e94mSQRZE|BtZ`l8#Cfe%p0re#% zv>Y7Q^^=16pEi8oAa$mrIh#8>v$T9_Lf5E4y0z;!<^i_CIUL+KD3T>FEtg zJ*20k4DD0l+}zyc0dTr10}T2*UyP)YSd>-aH8pX`Fqub$|nZ`_UdipX;;+N`q1ZAh#CoA@Lv)=?ZT^D6xAnBjqZ94{ny(wZcdG)K$ zT+3XxTwpalw(&Hc(SF=JIOftqI1gG!p2+n|UT?%NL~!<;0xREn_YH}gtlgDc$H8Q_ zBhV>aMp3c2xD+-&2Wl|^3RDVCo)N_9g9DC{S(jC#$>m+*i#Mj$n$&)l+au7r8q$v%qQxUA*(CQaGW% z4||&2CMOpk^f+|Zt{<_b?zs83lzH7JZ2Z)?vTb+HG&DzYLt}K!>r z$i>vu;zqgW7LgF_=sk7uls?sX-@2LcfZMMR_(t#mv$}aB2w%oA8-mf^l@QF*Rf$Lz zw4UD#e=u9DxQzX^#q-|A-JOR^7{FQvu!9~_kdkjgS*F8ct@blJKoAf9QJa!2+3X9* zj@O}O%t6-TA;(;89oxtMm1Am@TasFen1+)yu9?!6b zszc;Qb zpFKE?zr5y3aIcY0qSb;*m;BpQC93#-=d@|F?PT*)?VZulXE7Hm&sED&i6Z3Q?=gW8 zNeL`1_V)Hnfj|unjru^A;{DJfX;A6g=CLC}%h5;T@LrM|nwk|n_~K}Z>YYVq8!D9?p4B$rm3E~gC~>y;HI>J^qK zSh4NZOx(|M#Wn0WgWU5&KHV1GL<4J3%{jSBZ1=u;c)!LFzUPyhE<-!4>=sd(>pj;U zyRV8sW#p8Toa(%pRDwK{c9SD4u>aInhJqC4$KuDh`EPh>N}ArGOQTLPT&xD21H^D7 z7n{mfbFg`! zdWF}}*3r??N?WzP+$sBG57)-4GdTd%QLfLQrqUinvIRKxp`wP z2R$8|%{LuiqssYDKWM7QFTLi@F(ZrFMKOFSO(!HIM3#%#5N^mO*Z>c% z>0MDsPgelh^k_Te)-vlwtej1^Hn_v=pnDrM^<})3CF)ZYNm0os{pa~aEWp`AUpe0D zTxGedVrO69CaU(U&-XVplnFB)%URRjGE1k@?aQi7lcIA}HzIAW2kQH`INHN%9%kKE z|7}#l)a-BNgNsf*cbZi%W|J(Qx(Bg2?ty7bU4pi=WH#v16Ok$)#9-ZdOI>|-i=9

    f^r0nf4tvTdu@)P!brkyX4K$Jt(8roVnR)kBq+ zMrcl&?-{yckZDO)z5IyFQmy7VmHx6~Am>)UEyO3c6CPLpd3i^T?+O?FR>Q(gu`%a& zmGAgg_+fqkX!*;LftNrK!;G5&AR##NGFQo`rtczd{H&2Zwn zLc94n^tJ1;Y?pX!_aJA?iO`zISG;8IqSSu)Dk=dSBwe;<&dtD^~Y>Qyg zJo_m=8AW$CON`hFXiv6Kn&G)mIWTX*C)664YtHo~+ z-FfKh#HX7R-r1=&rLNE``cFZLU-GPGI%PGMyo4fh?L68HXIxb%e@maOw5HdV{_Yim z0B!RXHEw}F<^qp70m~QC@-dJG{P^^nP-msg_7n)(OM+~=k!||e>Q=JGVzpknYhkK3?qAr`3N4w@E zA9+C1!gcrKQ!(sa#O>}YKnM5FL}eDr9?!cB;fyFfqu*iworTG*srQaG2fm&s>7!0G zcbvpU`MSziFAC8%2pzoMPd5Z6&8`yP7EXws+;42E+>+`#^Ns1bTBOy*F8@S zdP*l-;pg+B(>}zRix*iP`soR-smxQaZL7(qv3PVB^_|FEes3ibZ@o%)ouv(};#y-q z^u-Pzi$Jn^YItI`5KXj4#{w^~4G?xL`>WD=%PZ1XZ87CxfhI-V7{dtPB_7%fZ<#Ej z+!B&TymLy*<~tAyx|>lxMU;2Ly@{&^(pXiE?7>~qg1WEL#-hOVkBf6Q2(E>cQRqsj zM_>CDI~h-PdojOlCP!)xvgC~r45#6Wt%0*4aqcAVPd$SQnra)HlYHp`#GMsfjQgVs zHKH~<#^;jqdjv@m?)O7lg7#Jh!hUP>>50G7L){vX-Kow$vKy^$XtI%od?+sV&pd?l z+cM-Fk224m@MOD%1)c^)dPs@SxD<%2UxZae~w71I_(Ok5J)VJ~HUbh_Al zk!=S0SQSCg^|mhl_&^S!B=oZT+}8|TM;!Q^m5bqLz5ULQ-Lrj5Clm|~lta;r?1*oD&9lY3+fhP_!RaB&K!t|xRt4*Gt4vMu<5hjk z1^+Xn8i7wsGak?M)h^BT=((%b)RkRbR#@!}`d!h-X^^i=1U5_XazZ<^3BVzZmovd?2& z=Vg}OK>GPy7hL?s8yJDG$(-+H@-KZ`jhR_8Un-*aAnR?%wZN@nTd9i)aL~QB^*JvN-XS3+hEh~z;1g>Y%I$)d21XP-&yjI=ZzyUGw9%m5^UUDbCqcQOZHY+~@dPUxr)x8fny;N^y z$}`>O3skd~-fABYbK2_1S$Fj76!jeH%ueJSw~43zIvcl&PfrY-#-3}q?Euto8*|j5 zCbu@|M1MRufEQ12%7f^sl2YvA@znS2nDDN%)YL_t(7i^-C8zUsgp)ZO1pV$g7H?FV33O zeC%Lz}P@8b(Ay7k-iL`$cYK5k_nzD>+grulv$lyWBq zkI(%|#Z8p?TnwPI_3a+#%OrFWXZa+4cOMTs74P}0$QhmGx#)Ox_I+^oS?R*xqtZ52i^duNtpzmD_Zj zhV7k4r+HF7me#PyJ-|BYii`EzBgY~Gu)3!OvG$7O1qk%q`l9fePT79TL*Xd$JKQo zP3*mgA7pU2{Gt^3hqB{iJ=A;JlA(V!tNPm0aC=cYHr7x8(QZ7ECUGLNIB2>i3u}{H zT&(&~|9XoSAA(MHl10I5*~?f0{u>Ur|vuv_-!`T3pjm zfn%nstF6zteY{TFEUZh-ya}h>`;4Zb^jxJai_oQ~W4Uplb*uWbDj;B)ns%M1QyZ|n zKUKRELkYV@JX<_V)F{j)3kwT-v9#S%U!}D4Ib}$0U_>L0q1*Cey0c5JI&z>>q~ZK5 z6F+5GQDRs0(eD~*zp?rXcVaDC+tH8+XE!nFB9Ocxn}X|}?iwcrXDy9G5(Jrh1Ot!a zr6F2uhFZm2VZxnMGmR5S_00xuXuylMGjdKvr<>o^+3V|i&u;7Tt}gw@%^NOJJ_chY zKb^NkuA9@j^&PuH>d2ef)f5j##%rD0KZvJ%W6!39JFi}qaBppenmmlO{2GsM>uAmG zp3fz)559|u)p5BW80Nd7$91s%S>?J|L#}9D<%>VZ%rGemFsiCUeQx{FH@*SAyt82V zX2)Ucwt!8%?3u-|upa2%tT-|<+3qt;lQwBXCorKUa@SM%7lzNK$t1rg|z={T*m-r-GA0srGwJvOJQpDwRs#QqawCWLc>DJSC@dZ8i8CUp7uKOXcIezc;oU$!!%Wbu1kg=T)jy{@#)OdygtxW$?%g%kJYY2bHDI*46c>fO{ z8yj)8{ph(#+yay=l0q?;{asN345T1fcYcp;T|u3k1F`Qe5Wd^&{7Q=1i#Lh!>MF*A zgM)~Eaw**|;g2e{OsV9m$fTSk#Hwd`9v_KErixs0mB#RpKC*`8h=g+ucVlEIkILD% zoCSy*hoE|1W+f&ERcDxN_V2)bdN25F3aZtmH}_IIgx>b+^r;?0S!f*k?>C8D1fTF< z7NdD7Yc*hjYU=6Ls~p)v5rrjCc8*?+ufIRnPYBSHQx=bF_##TrpI7oZ{we(aiG_lK z!?o(FEz&Z|z#IB9)nU*(0?18C-d!^{YBpqYAR7}+AXlV$y@A z<%txw>xc21va6ZfBo5qN+&;T~=BeJYxKrmU_>QJA#}!xc znbSZ2RjAiLWl$}a+ETA;^8GxGBNZK40nDk0^7??A;#6PcAj;C=t6mEI;Zl)*FB^Mc zgq#5_h*?#Jt=X2+{30|d74M}z|ZroI*n>k`*F&~pwGuYBZFNNo!D(X;bdwYAxe zIpu$v&;QG*V%7?tyvgJm3+np1Yt2#fD!QsPmm1oO1rV$c!TL|NK3AvjUiz(h5SWk_ z3wUlKsxDHMgPcVW1{V}GT=}VQn37$BeGiqS=~sO>IM42qnjCd4M!st;cZ3s=Z?vlr z51&nmC8_>0V#dgb*XBZ)_;BzuWN^nYHe8@PwbZ(zGM{Tx#{vvqJFE9_N~>TI${Xh{ zcPw2m3UopfORp7rz33MW{Ly|#tYATZ_*oj^f0S>P==!{hin=0+avcWO{Yp4wiALU+ zlA2N1Gg9tV?^Ue?pZ$pSA|)1PW+rAj_idX?%jc%ii9&pKfR>V~i)Qsf0&eoMY$Ku~ zwwU_(+=^m%Pu}`tJ;Nz}ET{nrx%5&&Y3Q<^z~UG(CgxcaOM`MeXJDRDqtfh;yJvd( zB>nM!9>dhm%uB>O7Sv(;jV5{0_sd+V7?9}fGE-s&TlsP-mnM~!T0ocMWKIWx}|LN*9R^TB|pkx1cR`CCYp~GuS*9$O+8kX=1 zBSVo^7rA&hwk<*W-il}}!7?%f3o%;@lF6e_oawAuXGbTf;b=0`TrSsy z1x~8=Rl)&bk9%u>W$UW59^L7+cxJ{z>h! z_&;>_N;gbW+u*c)Zr`<1icpX=uZMt~6=;)f~zC%HuIWlbSl}ANz3eCBrNzpD*u&b3p$s750g9MS`p<@3*y5)}pN zS4z;(7o_lm1=}Y(9OVSwyZ6cnsgFdaCmJ6DXS;LEtbYacj?^ZI+qsX}JPt5*7c+v7 zZt71Ie`f8*dS$<**JW5M0sHMN9_2-e&wk=$v_VP$W!IURR)(e(lYcL&KFLCMdVXJq z5VQc!hCTvMCnhD9L8Pk0CU@p;q9)rm^BV`}epi5aW{1`7L+y7%6ZAOB#25dXR~8Ll zyZ6#rV=ojHHIxEK&>f$au0s2}JQ*oWWsjrOB*@JkV zIKn;mIL!Fw#Y5MekMmsoDwWQKiR7u;z$GX1f28lwhYEOI5mKKxox}9GYYCtCp!St( zL-mD1bxh9Insh1P8ZvIEZi9#wMfamMR+5FW(B}$`AB+aOTSDf-b>?@6*EL{^BOCj# z2y25`OBNzmFh`@vM$Ss>VZRqM;Adn<8^|c5sSv5QPB(~#KVjMUI&8Y`kTXkXg8i)o6Xq9t#zS-|*1@jG&A6Y8Fzp}|H$AxV)3fw0{xb93-#g>qzt zJ7x1@KxQ`3mZ~|)d7i&lHAVpkmaK3&6{(z@VbHslBDQk>_iM%#(4#epLU47s1KM-_ z$3q+;=LwB3xMc6wB<&rpw$Lc%2t3yCj(~xJt{l3CL12eTv(O)h98M=I1EdN3WQ)(E zG+yN}MiYMX5k~6Ks1xctNin^SIP-}_quN~8#lca?d?izmcUO8GmM!W#EqZ>JNxNc2 zo?VEd;e-PI(IWP(WDR}H$LITa1nHa-12VpPcXuTgJj7sVD85=@(x9NAITXGQb$xN; z%}Lb*`;l-*v!_8s(G{?WHa2(6?`rF*%lr)hD zpi7Qru|#MOOB#RT@SgLEiIlPdFq(_g|C>fo0s^!SWsLHJ!;8Sz?~t3E^%}MyM3$#z zM64vWw~1U=W4I=4tb84y`Vy2RfxLJqvf0cTgyeDi5VYo+`$X86BkdV(QCu^#zU$jZ zJ$t4ikOR@$KYMo#Qc|tIo7Zsfd7BfB2!sksUjIYaZjS10iWXyz54+z|M5I8kdd0!w z{kTV5re+hWwFccT*HJU%xx%V-)9*$HYZrCwZ5wWrK2A(B&ijt$td4YgT8x4-u^+5F+jPp>ysHL+qx9L+zk9z!Vp}_%Xq~ zqU$~)%G7vU&J!LR+jxht_D7TGC+sGdvk)xh{Tg#V6or?N75k&0ur3hOJ_k+ft4pRS zp0yV6XLs<4>%w!6Nl|BKSZUbs#AU*SDnTKR&3&hHR6 zJC`8aSZiHsdlQNBdOpQQS?jd^_Z$9<*gA9K> z$gW2Wd(F>;23It+bd;Hl1YypajpAw~Ep#H6_}J~^;q;Smk+9h;{dl53gmHQ0RE$DX z=c!RFoHeS7*65dCMv+HXP?u9bTAAwT7wORGCOlLb%t9+GFF!%D9gyow#EcVlmPFDq zM5DMlvXrq~hg8kiT!mwO8rt7WEC8R))z&AS`b`%NBDg>3l>>q(g<(<_$!4cvOy*us zdGzFl#0P7Q&sdVeua;XsASg8RoZ&qciP-i2mU7l-I3|R;`D#hrROk~zY(04AyD?l* zG4}g#E;m1|F0bm^Ulb}k{XtKfAVazQoUsS5%tDPkNI#HIs;q1&zv%q$78?D{k%#5K z201UMR!rv9H4c7q5)Pt;r(D}opu3k1g)Up>Na%C?u`XUgK1JHbpS0IH z=p0m+*LxK{B;;GPk%w46zGLcmjUSPoo%SK{x^gMM)5oNaCKySANA!?$$v8+rpP--S zWe<(@hR#C9PKI8R^tY?i5(Qr8T|1`3W5A{WL%`1UyKiCzJ+Ld8MY(6wi{XwGn8h`_ ziPMvXvw0*d&Ge)qfsm`c<_}PY4n_3rs97HVQ6JCOGgW-({gKA)nF~q8Wx)rv*Yo9x z3}u3=JUh*9w_a~-W=5Ht0tbKAKn*^kLOdI69uc(3*ky)>m^8zUF7I}i_r{mwK@<_+ z+S*!^?M9cps12VB?`rBwwR3Q3YuVeBOLJy=1}fv3>$%;Ig&_ZhQMC0&t7CkuKh;{K zF02L5e_wDYOTcppjn<@ClhLetxeniIc_)HzX{tClpr+z^uyCAaw-dgYwoGggO@g{e zJ0G60^I_q_YTO2bdyQMoq_BD4H+TEqPBjUC%4Ar$nmKEF6x1*SIquF}$+4cp zUGerUPz0@yt*#O(uunnZB7B^BHmR?#nni4JIh+->N4yU6*Z}doz(3)$S>lrLyA1;) zVn>%Lr7C#X>(^`%NE4IjX-i7z-NiK!Y}=IQ6t&YProK*%>#F-RW5iXL(H5K6hSAMt zWo%Ryl;suFg%g^o38*Q@XlQq#hvTm?9t@3pYxhSDX($7@VhLAt;)&F_bkv7a<24XU z`Mv(QhBoHSpJS9L|AhQ&SfYQV#=g>ZxvSVQI!&H88yX(gT3%}X((SPILRSPwc7vy{ zuP-evotm2Z`1tsKlr9+Q=#2O>-5T$(LqN+Y^UXSqDqABB8P#;hnDIbJ_t^(uR5;&B z$R`>yb|Ejohg+h=+!v?jr!|4nf`=O^N5$vZ?ip)#tol?lKLb^X4gQVG_A%z7fQ5sI zjV%nhu&8!lCC?FpC)sBoNC)~0q!?BFEhL=#(Dt@3V3zvS>baz4dUi^A^@SC?_xX*s zEG33%mNyGGmH}Df!bm+rPZ}b!A##UqEh_{w)L!#9Icy>qAAB^8klW1TxIdOJ8NJCL zpPoK?aJ{Sm)YAG4cTkKPSpT`q)^}Y$l3|v;%{9j{_7}5CwrhsahRqaLf~TN;<`VFC zm0G)cw^{75;MsnUTWD#w++2#Sb>Uxc^uUVQqB)i~&2#U|e5%LTgEp5F>q7RXZ+=@h-UCTS9wkd?)ISr=RX74_;3Kp%e8Z(8|in!GS%)`s(T`XI4v9 z^-tGK80ZnPZ__GCAEzI3&cW1vV&KG#g|*tn05MK#xXBlyo#`fRGU@fhQC_=Md^+*E zAAvYWLA-0UEjCmR9(3JpLJd+bg1avlzu*@^|9PDU#50}6KFBTYsah8Lh{405}EnGo{u=B^5!;CeiQzH*;=C`ho=h!7DyFRdXTCj4!f{*|*TA zHcoS6F5tV8Jn^3o42D4y0&JA}*J%0e?s3P6YY# zj%#CjTz=$Z6FnR!<-P#7C&$EmC?+6|9(<3iO-2R=;|6ov0nrv3B3Jnf!O zYcAymdobRvtvG3fBot-Ew4{%I@@P!soS)nzCMJTJzrJ#+u-HDq&N)+4!=C=NJQb)* zW_Y)?xjodpq91)Du7Cl3{`~oIcNm*{es_0Q*bXUJv{qABUq9+U+n%6rr`lI5PqM|i zJ9a1j9u*$tQ3(hR6B$4M+9%A^sKEh`PKK=8(1Dg|q6((GFM1qj=y$yiL|U+iP~Cdb zMglEZqHnQFOG^^L$(>&^$YV=dT0R9{&xU~LI*$Xeqps_ao{WLwc>(YHC;`%PG0qR} z#^B9Txk&=$lsD!zHm(cbss*VIDW(*0n!Q+yzBH#Dt*rbe;)~AwSaLLFtK?Bx~Zlu`P+K*PU5Myzk= zYcDF6$ioC2N7CPh2@+z0NDQ=TMVXM_&C6JD#Wxl|>_np-UvZ!I#`RQ+C}R_vgno)F zYXYLY`yCfpeAm6OxEBt;aNIzz?tD~-fvdOW7v$F161THphzYOpC!k4X+pJ2vlz|Dv zH}LuD_F~w?dJ;-9iCY_NP#x<8^CX~T@~E1acU%+e(RG6mw2t1P8lhjD3Q8S+$KL+? zu;lc~eBTc`KR#vHPW{=eXsti0C!XE^JdFO$g{r{f%I_5q8PDhW#9Xu&E^0Ie z?m?ZK@+cF&gS(gY??Ft0{vHT73!6c6ztaVr z+9Jv$nvxU@-Jnf?#M!S*y!vR0j8OnpO;M@s9{(~Ym;I>?Cq}C*1?+!Z9 zYt7eOKgCHBJW`D3s(Ar721UjpQ~VXyX#=-vkQQe4k_XN8m9_=FDFJ8>7ho3K{E}aB z(fO25*fBIHrck$mI$HKB)E}{yJkiC%Nrcj?@B5%GMiZx+jLQxh4vq4DawNI%<>Thk zk?Z=?$?z^LBEl6rS%}(&8*_doD&N9Xx-@_J>X<@(_<$F>r!f7KYLBXxzyd8Xv9+r! z`4QR(pxscPzta|YPQ&ko1pD#=JzXmHJY!j3-_k)pG(RIi-mS_wGCm$UfHrzMsqd?; zo!~Gsx&fYdAFryXV*}mYjb0SvBEe27c<7_?)-D^(Ub2f$*s=@ZO+>Ui&A9g?9pFAk zNaw~MTjj$}6tfH@00&vGr7`xq$@w-Mqw8H^XqPRCE9xC}Z81qxRhctMI9TC&Xd1d@lv(@ap09 zR}E-`pT9&!nm?Ed6Gs0b_!7B_t&)%w;~c6;k_2Qf7QG>E>qkbCRT6qZv2ciU*C08t zByl^;)P)KZV6vG~iF3#dM0XZABI=bL7O-c~yO`?p8w>Y~Kv%mTNREj+4#yIDvrBD+ zdIrA*64Qv1P`pRf-0o&jQ@}6jvZyfpZ!2f*B4zBjK*Dh8x}p^a(KsAjJWTSLWWWe5 z#bqp@%H@fybo+SiWF?6&;=7X_^dWcFs)^5o2d_}FhGv{8X|cZC5J7&cVmQZch=MdT z1@UMi9uW#nqP+t>>m*KUu1cO`83(gX{krdUUHa{GdTOa0Qh2_ic_pu__XhO+FKE## zivtQ*F0nDsqm?sHG=;pnLkD8A0m<#zJd$cp8Ro||aI(0K{;y+Sa_j*#woZDpC#TKF z`A=s$RP%~i<9~zcj^~_M+Z66q@L8*KaQ^0t%W+z1vMpj-TcV+IGc@V)rYYi+$9+5y zxUg}TnbfiI(WD~-qXryuy$L9s?!?A>a5RmQJ?+HrRI(r;9ND^Kk91n4Jem|nIZrCI zeqKFe1@}Me?CIK(4Yywl-+7reyp8kdhZWGCEkQl;L1T*A27~A_(;Q0gYM*vnb@cR{ z8l2Dh@y}}jsImBRvRkF=_qY!3d zf3W=<{}EZrZ64ni6CD(2aB^ z$?DQZeKyA8o4`3x_FS--nu+I9iVlEgfsR8XeOKi3F@-%>J8>J5(q$i2x$Erwr(5Ld zridX$WI#IVE}{4QSrZ`z_cdwbRmZggah6KAOBeHX{C~pFrWhP<&nvcgRYmtgupLkF zr74rX32JU%o*xxpVuB}kn_!|+5$n{3&ArVs)(%r-v(aZ zDzBu2-`vE0XJt;7)S18lNF-Oyw<_bHC_0t+WQ1F<_TGX9D@-~t+@>6l#T9GXYic}v zeRv3aZ%uKs0O<8fu<)=(10C=Xc4%d0qh_k9qwCNeP`O>wv7oiaz;7$RhF>ugA0A|< zVOBhP$bqlRxSaPT|5k6s8@_4T|Ill#OY+-7fZ8&9tC+sr4F5Oti(nqQTaT}djpF@r zNzN9(^6K>6+0I5h?!E7u9ye10>CK6uJYJ&#>)Wf6b)KT*{ucL}pHc+Q1oGKp>YIOg z@9{H<4!ek!-A%W8aX;pAQB8`XURHHObsUnmpWEr#00MTFZw1Liu96Lxfsh8tuX@}K z_#Grfjt73SR6ewF8boSh5{}F9U~{G9az64@mdZhSes{=enH{W8{-?>X(lJcTG+{)s zCtV1wO!&mi#LBjf;SSapE3$#%8cM47L@LvmzW5AiMd(Dq;Rv{@4Hzt1-_9XFUOvKt z!8SFElXtRPduDrR;W^ddt>6N+YkBF+!4XLCx=EjzT2e3TrHpb`Dg26#t?i1q$BenU z% z-(1I$?e76nW5x{;-3J<}mZYyHxO)FIuYikc)pZDudIKVkYmZaAHu4wec&xRogG5Z1 z?hG&6unL=3hbjffGedxfHT1I=Dgp(VN^=-jSEy$#TcIbF5=*~7D$yJ_Z9`5D#Meso z{dh=Cy-cgerrg3Sft6G!+*{4IQM%roxtDtP{K_AF;RBTU+5kMSO=#m&%Sp(f0th0p z5;6MxVb(D$n4y7h_8n2bezhJ(Cqt1Yq9!ykUon@M?-QZO*In5@)*ygq3zL#wuw!Nk zA@1Em3r_)ue|@yk11ZMR!RA(bp{n!efJ->V6}Jh}N(qT?3U#`+V^`?&dCfJgt#z#t z3HT^qyOj)AeJ?7t0)>=d@kj}M7k!D15OAY2=d#=V#V)W}{s-615^g>XkM%Nh$E|>P zU+wYwaD#6QPLvf7WCJ;5>k;@u^6#nu74pX(&+6U|J1f3(&X$yQXh(yQl&L6xU-4hi z&1FU`+wb>hai&GxGbaprMiSpQz6j$gQiOqw{;F4UZdJQSp68m(2cj#9JX( zLFO$VlOj%}Jy;6dXa+yhO24{4+-kVvJ=78dBYLYpnq1Hm+UW;ZSy`#DZblJ$a{7AO z!OKbyr+%Hn6km4Xiy~KSf-9A&b99Z*XYfi+@VxyE^14<>KHaLiu;kF-poHb>>@?Dx z(qPkl@_B%daidY~d5=h3E2L7w%5T)cL!#5Q^7fQ!wesjSMWoy05P*rg?Er^qC&2TyfZOfe@vl2?A?KkHlOry5j;}k|8z_&Bd5_%lmyK=xhc~all zh}rJ&Sn&IW;d0dZfi+z;#64N}v*@yZ_>zId)xtZNR|PX|F`-v+Z#2EO#Gu3=S87dE zA>)~%n!=C#@>8Xx_X)a;0MosXbJ)wARWbFS$I$F5dD2!58T2T+k}RieQ1Gn88;zWC z7qslw!_H3YkMhhc2NH=ES;rth7@YJfV>QBB76;x|>WsYyq}jyTP8oScIDZ-W=*J+n zTi`S4e^Y1z>&wd6{>mg}IR_f((ciIUN=H@3d2Ai8Hf7rQH6Bou+al^ih&$V94YzE=m2TmVWv^pe$O6wh)sw4XLtmjZV*> zZLw?z>z(*7d=4WT!O6O^t@?%Y%wazQyatSxE>gsy@y8yJoB#L{(B&LL^PGiW%bZD`&0_fei= zw<)pvEg8nx7){b*hO2?msrH8R_CH_0ZDgKg&EU1v76@JB@l7iEb12#%S?JYsT>|&a z9b;(^569&McLjy^Syj+bnKxBr6=k~8P@rui9ulNlMqB1JaT6~7j>sC8k)XLg#qdRY zDldN%^v+7uiguVa4*2ToA~;xvL4j$iB|0P2aBjhj^=G1Hflufcw{ru6VZKUJT%|f; z<4u7fUg8^PHb>V)*PeO+b-qDK3Cn=sz}v|(K7CL&r1ClUPI~Ei1+-IrL^YLXH@&F| zhb|lO@HVypgRajXY%@YaH)pqnO2qgcPlJ!<2h# zA%7zulJs#kOg70Gwm;osEk4{5s)d_2qHL10D%x@qakOF_rE%H3uNBePA+}RQ~|2NpmjxEbf1yD_x=X>;al!^)tL-Q9s=bayVmU+ z%W`E+?qBmiFyFtA7I*)=Hq!!MbPyvLy)Uu{1O;{UCy#-RtKm?Wc8Sv4J<(A8?2@ED zrSf0fb)@#CH(pTQ=t||I1>P>oY1RH-UMzbhml7YW8Q02+Ky6BGN=$IIzI@u#;{J)Q zm_#aM(7A%41{bp_=?mzQ*d;7?ToyOZsFp6r=0*6UoWIHoC@9^GC*6wWe_nOTL6 z1%4b^qiY|DU@qJt>u|aUlX`lEnO{CGqoUkE#QFIQ9v95j21ay2R6Rp>O;t-e}YG=$SsN~G{6*Z`R zTBLhl@1|{qR)mt#cRZQ`dCecF*KW+SRANJD)wy++s&vQ%9IHD_@&v-jNG?{Q;2w%9 z3e|B_m;www+$)2VUc6hL>WZ$3Jf|xQqL!&+80|g8J+a-G^rgc@8&zF(U4UHsEw72PRb(Q30Hp6-?l?!X%sdM#&Gm%iBT5~mVz7xS zu(pi-kjye1>eS%e=HguS6k5zEMCv^(Q%Gm4Z_h7g&cK*BstE8x9(7I|Udao@OfSks z!(dj0Xg96Q^cqGzH-B5ZiccKTl|xKMZYpa(+gM62r$+^u(k>?B3n$wH!7Y)>fts80; zy(>eXe^nGvV{mwBsZey@Uv&^TOemUVG#q?0@?rb&8V_Uia$NsVT5%~;)Von}+I_D| zw=s1P%8HhIt!onhzgSr@QPLv zavVJS2(V=UI9BzQZjJBSKdmHu#mPv;Ybfz}pYT`$*RDQ4K)lJ^sO!ent|KBbuya>= z(_kTQal5H1m8O3X6&2q%4<)F2Eq#jRq^@@6;;BcbB1crXYsFJ*_)yoeRMH(8fB0L* z@&2smz%DnSS_@@^iS6c3wZnS+gAYwr;9&W2`n;_);t)7_QrS_B{wZ(EJ0OM@h+#;p z!bEFYqr4~TF+N`+gRNjR3X~CVMO^TyVPB;=QBQK3C?^JYl%p@Z{+Vkb! zaKXVAJ2~afb|OuM|63kXt=b#Cq*U}LfgVMW$x1O0sq<20vO`z?)KT3rvh3iM?lyGx zxHQ#DO%+H$*Ta;oyE$$LHO81eG1Q)WK&lrb4=87BF0H4D$@j8=1^c$Yw^rJ~wqX9V zM~~Wq1u8Evcujc4(Z=|sUO1mBTNkOoN{Qp?;jHywMcx>n^OQWXZ0O3LK~i)5%@$g> zG*|pe_Jbx!*Q{$|2+e#Z2_uu+J@5%w?6%jb6{HpureJQqTe#7t-+f|YeE+fHP=Mi< zzwJTcw#8^0DiAlfnH-yj{5NK7>etj&ME=!FOENtw5NI4#KCJ>$i7l-dg)eHREcu~2 zt@Sk3(Q5H|e>Bm7DN8GuZvVCR`mk5|`z)S@aA}EV5bC zPGtNLl#4poB$fB4=!T{&esZU)8F9($Lgc(=Yg#SVC@6zRr?LcnGWQfo3GXdAoA|%_ zfi_!Z4f|>*i%xvWObpFzZ0u51=I||eWgK?r32Y&(dJyNbp*P@(16)l~vB|l6wWtHP z#FOa6qUVdDm%947$rfz_P6ue5H|P}XgVk!p{l%Bb^dUxC_NXOcq>Y7BPC@E4!S<~w zv2^4bylo$gfC%{OWQir29Js54E+s6ZmEx3%Y+w#9&hY9}JX~c_cXnRxGD*|d`l?mj z)f<7bY}UPf)n?4n8?2}8A^QdfV!BpqaTrIruz^M))#Bx(+*7ZsCHaZ@eli;1wv)3r zSeZB%(A_#NikEg^{py$wc_{z;i4*E>dyb-OvK6+Kb#}VGz3RfwDTZ8RMT76>Ji%6@ z%4HIcdqO4>(2$wDmqyFk{0gxT<%#6D>h6dzlxWskCW<8I!Gr8-RkqKT$Y(Dhb!ece znY0ls{b)Pe>`|E%56kp4XHuI>gbm7tCk%!r+I2#fO(Q8liChyXqp8IGjK!~_{nyDh z=I>nS`qQi(zQiFl0zwenL-!{M$M6ovlF+~5u(JQ9-!P+fwZ<2Wo%29Twr0NOv~;F& z9e;@tO0ed+3(x-}aFDfRK~peeDs2|E;J7n!`gL(sdwF;-ivPXpeuJ91yoQ?Qtf(&O z$<@)U4Zp{qPQDgbVlE;u;}{Ow%Z_w?k&Bmo^v+;|T9l@DVvM!4SVfzw&RDmG`$ox% zv&u@``lFK|WBj??Q*>^W=vZ}9iyDSIjXJ)3A>Ux7u23n1%Qf=Z{HuD=heX=dY zO+PFTgoBZLH~j@NKdVsTAZMcujg5@r<8V#1!CfDbvM zUAhJbD0hIjBYyanCP$1{*$smzzi>y_YPIdO8Tw#qf_IufEkYOG!lE>F%w?E5eY8DJ`-T|yfOkhPoa;!Oet5$8mc{{86kU3WP!9Ss}} zPuhcSJv1$#+=wWDx0OGkYotxD%baDckdsAe*B$nx2TX%>PCvRB)<~dI(R-HP;K`On zI>14yBrT5ybn0UJz`qzYOn0Jbk3P!h5ZH0ajYN9hCPMEyd4{;D#F73^Zr}7BD@-@Y zfp2Ed4QpinX_9ETb{5*K4~L^qrWZBZPy1sd$$~<#{0(QWO8=PcUNiHWGqF%ZLGmmZ zQo`>|&CVAA@*QAbShyDN$zJbRvVt5N-B+w4KefQ73~aH!!bGy#Oqw{F?#;Fg0NP9)In_@-CasqmOeZhX!;zA)SUnb5KxrlGGOVgwb z*?>Fb^0Hb(?Q@(j=@)gp?T01pTXK#3SFd5plft>S7{?3fgPAo@^2c}w5^QBPbjaNW zsh{keBTYBTLK!k_tR~l-Fu#sC6qq$C;KiaVO+AtUJbUWtc6+KLsTYVQ^@(CYT6^oU zJyWw{pPQc5AJ1#sw%yqD55Cl>jbcuEDHCHam5s`p=i?B9g~@q$-)VJwKSQ%;&l=q2Uj-yrwNz#CLdSVcd~>RpmYbgIy& z=u&I=3c7~R@x_33u0`lrk&!>y!Ho9Z7@9BU zz>**1{C|5o3@R(@4Tx7(K5*U{9efh9#>fchPzWZn!x8x_062gR$F@~Zh`2JVw#jIqm_lek(M- zzP+=1>D1`tTxa00>T(0R+{4s&TUu%P&hU)1n(BK?^e^rRQ+|6J=19r#C~T!wd^^b3cOY0BP$V7Z??N4!sRq9^a;bY@}|Tx|3PM zuuPyNT0NmGg&XCME)LzYmhWNk=Rdd^h8)PSfNo?U;bvnwpFDvW4#T#A$V1=+#`HUK1kvvNf^z z!~O9}o01%ejMOtXQU}CQHb#6U-Y|bDu^VmkZ-BjQ0DH}t@1J^7; z2DQq?`n@ks!i95$zBd(e+5*f;VQ4vBPuu<}3go`PwVk1i(;`%l*5$!vcv{*bTRVO^ zq#%xk0qpR}h_Ie|2Lrr=5 zjY+|jQ;}?l6VPd{@siKi7)9lIPH(PRMxP-+tcd=uRY%%eK#Tbabm7^>S#y`=cfCZihZOfR2{V%OM@+e59Eoiwl- zOlj8%n-gU{A~}j0>tt>Pj1nWG{Ch&nT2ACvu}O7vaiDcIjT)_{nWJ!urImP4(y}M6 zv@8SmF+nK_+O?DA!7y9<`Px9 zAnE|4)JNq&pPJ9tl}uX_mvnVWcK55oZ*+m03(Gqu4xy}B+Ep~)Le>Qemb|E^!zhVkin+2VE99oajt4IT2$y;{s# zrf%pA0SU9wKfl(Nm#|uzWw)Vkb$b?7UzT%8<4Vrt2))sGX?W`+IGa5+7fMy+F0V|- zAt<+Cx;z+omPqaem!#}r{96SE$jF{JwmV1>s@kWu~ePE^|*@><&R5qD0P|UVBQW}_D{`yR$&?2Krb6~x((6t ziDo8=;U1y_o4G!mUrpNE5dt(oyYLINI=yK#E&5bSaRdp|1~VAHiG_B2j1+i0WyBSJB|3=2aI3Mz2$&-~Q#!Dj7awAV)#bM!Nf z;u6RD`~YR~JmKAHUkv@RQpWHp1$Qdk>afK!LqmY1FpGaJq@VDoX1@_P$sNkzry)bu z@!q(MblpJ&9%@x}HFX^PB(*LL+8{*`O0S13Xlk4v-uyAhr-4IHVA)+`a6ogC4ewyf zx2vBVl~(-|105X#YlvsoY|p+}{h>Uu;?lE!Sx{?w>&p~7gp4mCO*W#=r5-o0>{F@uJ3Y+Ljh>YW>MqFF9U2{fY@>UiXyr4OA@VEKJMyddL`AVV z*BZP?-8UvIGya-dPWktib5W$SZ;M=%T_`c4p(!N*>+XHg_ctr<<;F{oEt7>KbwOze z7rs`*A&lN1%-y0)bQ5A@d5Mu)7 zwIh!aY#ML=%pyx56J0>f%*7w?a|1#z(J?`jU%Z$;xe-43C#IaoqXJ$Go%w1wAF2&! z;)b-Y>=@3m5!HEE2JMWrUVJo`xZ*%SFr^e-S;uiY$bPcXbk;!8n;waOm}}ORpl|h3 z(v+1Qa}a#mwH4Mk1GIivL3qHJBO$S z8J`uxj5-jRBG>+a6m)c1*6FPI@&3gt2%56fGHqN|Gp=;NPAX+ zchb41%lb4dEi){BF`J9*B*i7iPu+~EqZhv!g!tAd6<-8gjY zM=`yeRziPOV-T2XOs0*Vwy4Qt$c%%Ov?Hbb(%SV#ZwN~unssu{QL{l(Q%nd#r>WOR z+Q1%Ye~x;wI! zF)jF%4*b^mdYVN&b%3&o>k!JTJJO9f+Wd~|^lD&Th;!v> z9l^&_;1>)lA~}n$x;LTkARr;L@LH6GR+rEX7hRqPTMqC$pIBPr#OrA{$>AiXfR2U+ z3nrmt`OGs;-rM8s3Y$DGbhUZWEeFIuli>bL$O-yB+HJQ8@<{(-xQMa4Ohel%dCuB? zx!hVc=fT_NBE@6>W!EB-U}q1CP=oy}J2Nc;_Iyd9Trj`YqxJ6juIg2- zvOJAROD13bk0K$`^ii(YAg-EY5kN-k+(VnlTE(9~-R_MOyt}g4~8v?<5 zSEM^|aJ5&&E=(C$c7P`jk3a0~p`hP+%sf(n|5TAYgHZGc)F(^>N2b=@LX~#%h8IhD zy&klAFD0(oIXXm}jia_Pl@yHxy^!G_EHgsY8)~_YAW^haN}%Lsl(r;UL53cEj8)e@(yn=NmWWe)4wagS{r`u`)*gp-;=~(+8Yzw2Nu@^Qcw1MB4bXY~lLXk%!Tnkw!fb%w9 z@g__h*FiN0Mlez!@e=N;kbZnBL4Qg|-K(UQwbM?!xap5ooR=q*fue++c32DTAQ;{n2GfL4KYF zB)e*Z%21jkYwh{Pl2qmvqS~QnE)@Ym9xH?upc`jHxz}VjvxFhCyY8ZzFTHkSjeFaj z_Y&KQ$xvYX)i}7qx5~McD--$9mdg zyHAQfMe}(nO4D3oj=XWf-a(0ZJj$Mn zb;E^qR7a#H^*3*WNex-bo-0?D`UynD3GU%@Meal2V-&*r(g9lqXe?%5i3|q%Z3G$_-XuBWs<(%S684AOqHX2P@ zK9>|apy{MXbC#rYbqt$Eox^t3mI0ruU8$r()qN>%tA}cD1Ib>w!K#edZ^o}4_D=<1 zD(B2W$+)voCLGT-sGB)GkJ+No+rF}W4!JJw@MMR93 z?F#`7X3-TfE1p|&vut)lrmC$vSSEuvohgBq)L`z~2*pty@?G|4U~li~qxtva2uH1R z#?_qbRdXC74r!JMjkTs19b)jaS=SpDSG4&S$S@yChsq62hglaaUOvM~|Nf+6y3)_N z7W^N?us27(w;l=o6pe-7P1*`&i zfLN0x>9RLDP@XjN+TLwxLLI_3`DNlDf~%pIf|tY9e%Qajc8_R(HB7+tIiC0T`~RXO zFv|o54#R)+^HUJygK5Ty;4X0ti?FCv^mMIdZO$57ZD|#-C;!+zS-gt zG~CcD;@0;sN}bAGa8(PnCRMZTA+TZ~|AHa+5)WcM?P` z**`fz!*eNjnG6=^UT#m1%)OMVCi~*y$$2ottmn@zHx?Pfjsb7|L(R(tio`$xSLFrh z2iG|)h@Lz44Xz@0lJz~RJ$w&^7mOj=8(Y#qa&XQ2gi50SH~LYY0$2l-X3; znu~+zl;W{*v$AntwErMwQdJlXJeQQdw&dY?Pnyjgt zyU!FwW`EPseZc72ISIf(vOFtG?2QnHu&S)$#>ZO?{H|QvnLeVm!RcXL_}Qy*W?SZ+ zro|Ab!cjL3Kf8rV!nUP;q^k&_dU?ErM-DMBSKp zzP*e99YUU||AR#-d-_-i%3TvX$j~y>2Ds`Yyz=2R&gdaBqsgZ;dCs{MYfk$hlBA{g zW3`?$j?Bv*Mww$F=oXqDhY4cf4LJj|A=73(=(J@mV^#Co;7nPM=4By9YJ;H&Ue8|W zZ^X-V`-UaG(C4I&KYw{{J?Zu(gT-om70p8SL&kgJ%M3;6<`>7w_d+tb*IW>m8I#kF zTnu)+x0Hu6_Vp1A4iDgEd9BwmpvSBbzF>T~mN4BkG<{Qc5dRB{N} z{#brQ^3+;N-V<8=G2$}K0%1m^L;b%j@e;XB=IR+1MWWxO`AHbC6p)$`aJ~3J32VGE zKnYL+etvS_3!aGAMEzEa4L>ZBDRQH#mhG20q=4w@{Sr1A6#ph0smj>lhBsNu&8ba0`lu4W!x~d$UcSgUb)rkuf4by#)`{|3i^%V| zDSRe@QE4ppo~&z!n2t{I<>im{B+btS9_=Zgc050`KP49JPzbxPSLJLhBERT5)nhjk z3=!DniwbV-!dw~_MAaMZ7fZ^JC@7#ekABGH+=8~YuBrv3?a<_nY5ShAa@(Ik9^URt z4U@(OVE&;quqs5;5dVPXD=IR|_l`NZ^-w>aUpEv9?xzA0@}WYn{`ZfntG|RzX|OT@|7bD)-yHj_!}4bAS6N~W9oqkwW)p^;F0?LpcZ=Nbaew^? zI@R{|i>Jj4U#HPmp!>a7t!n=Zmdn!9YWV)H>1s*TiiT8hb7&7A2OrPSvm*w?1I=-XtS%ApWVq;PrYeVGR9bG48CsE$Ye{bp<247=#vW1~a zBTJI-C?t-`nK{1sW^-`~wyeFl^M;)B!BT)=#g6_n(HAu!6%}h(&~x7jzoy3$j;@tp z^aM>_*1W`CiNl>HoA>iD)&jkrEHxcd)AF{$a7RJzO4wE88A75SPr;(@lq^6A<{v0m ze{L>y+m{bOr7`_O6~nR)PEL!vkS!Mlp7@NIsA{6rsF`!*vTvNARNivs@jp!OhB9)e zqz0vp0MjI&7@U24SS}H|bL%Y3#rs{6R^-3k;-KE%A>=BDTo-h(@w4%)!HP2Fn8Cn! zIeWCx1B@O(ZGrFvK94=S?WPP1P%n<(Wm!_pAz2>I5=PxRFS;-^i^JV|DAFqN+AV0sD z@YtF}d~Z`>sALSEQ>eucc;uIAJ~G4`*DUw=re)Yfo8Z29D2OSjt{zlJ399e%xb=id z{?mj1(Oc-D=UK)1>%r45{clMHpVJak2cthJ)z5&}O^Rmz4^_rFgd6>TK1eEb_XB7$ z1D5d#CPTqcPN>BV|9aPL1k=-V^rK5xB-0=}4FhI$Ahsz07b6u4$694=$n*RkS+S5F zw8z=Q<98$FjN!3hQ(eg)A$fluBel60*=Jn&)L_Nq3~(OAmdi;pS((Jt#ogm;gA%1N zOFXDJhN5D=SSTop8aU#~5p%x9NBdN2N3K_QzHa*-n5@}9_kWC2;hyNcZAS`m-}Nt4 zSg7miLqntVjGwTOvspCK(=w%X^Si;IMl zPT!z4|HVju*Cm1S1m)%eb`hfksjq;o7gGOoIMN`POAn0fg`_VwbuW1Q8`LLiaAjpV ztdDybVz(2&4!A^zd0ko2{KY7$5NW?32S!;7U$$fX7#O7)`QOgkBkgs({U4YAWuNr$ z(;b-CwLS!{{_gLGF@UJB>99&2(OgMsvf8*`N=nKAlLCt9kdn^h`0>*x)Bxp0SZG)^ zhp_i&s~@JA&W0s|!_LA=hZ;LbQNSMIZ^Y;fyM*cg(=ojuGX4Gdv!k_|yrd+G01lAk zr_ge08zN%S^k3?YAYJK=QrP6T&z3@u-=8f7ED|zelrl3j4Gj%*$PqQLHL|$PY5)6L z|95gDA^GfW%^yxgZ;`A;s^ojt1Cc09RNdU%`a)jM!q0{Xa_Yfe+UoBbz*7qDX-0)* zwe}&>QmGxn&Tl7np*#slFjh|ZqQfpm`X_PI+?1MQFAcpfnKuuV zmwOzZI`s7e3yq5UBpWQ>8kWH9jRX_r!9I^Z1+U3ju_gAfY$ScDbI)-2JtU7=-Fu*r z{-n*Rkv$v9dE zwCu_%CX7nmG>Y|Z{{T}94p~$_Pco7g!uo&Y^N)L>pA=qvh0Dj3@XphcXWmCWefT1`+x`{ceSUU zU%uUkYz$>9)t``q1ECKE*a=>s7r^7p!J{wK{}Wcj(kT0df2?X7h)`U9EM=-lmTg&J zMea#b{JBaW65KH}%;u$6wYBj!SLmFD#+z5?A<%Z3+@<5PfyLLa!)%IAZ?W)l5iP2g zVEnz6g%$$++a*5pqnU1hf00;Zv$Tgw$>^@oRhXB_jGR4JcJWy$yx#PS=OPQ_Dd2wB zqidzziC^;iJ!F^Vu>UBBA4%h(`lMm_*eU5`lx%)`NW4IyLXY%2>-Y(d%1dzga{xFRK1|Nc8pO6w9n>B3Ym1|2 z@q3kuCDEBK{*3*UH(k}P?A9K=4s}d91@XGHp7LQiE7-b!xy}%5yN^!cavO#WMXxf! zLXQbzm{-cXmm|4ajKiz;FZ$j22pZRJUSjWlH#BKz*SgE4VVBrcH(Nivw+Zb+*VE*( zSxEepqIy)x9+>ZTJagMST71Qk95`7!ML5rwm=E1I7MT-T;p+TN>wTxNKcQE1goY-V zKVRu4OtsZ|@(ZPhQGT*|xVhSCu;!KA-8p%*UB;rOGUPtQ zX<(mr2cefvhe4D6Jp3V4r$)87Z{%GEZ7!QRJT=Nb#|!Iug|uWT^0D$oWFj-yo<43g z^=4hAG6PMW*y*icme6gd)f^O56@ag#EqH5xjv%Ztb^4Z%ixzayrvoHWN*|_pTN&cT zWxtmxz)vu%ZGOM(J+*>`fsvVjQyhK5%k3KZ@Y>o23uA)b__kwgO!wH$ll`Jtak=wg zoq9B3RKvR?c`b349d$FTjOz*x-crw@5SDem7_7CE2;iDR3Ne|$$myQ%MC$!Dmw$A~5F{|r zk`7Zb3GPL^w5ffOcn$;#Y40XBO4|LD=InT^F7jV#_iuHVbcdB9LnKIl$w=5bp|Rf` zl;ygZtJW!@R#Bap3zpvaT$PO!9^QLUGH~mdATPraz`@V|upgSYu+TbrXmbRfDwNAg z)=S9dwjDeU;+G0)(xH^B`{rO~^2g50zT-9~IX?b|)nTk_D7p+~%&xDlL~AI>H0TVn z@Xz;o;TRLeKmt~^9WQa-EOWy{mJz!Y(fhebHjWow1N-kvtjzuzA?c6^}nqt3& zp0woCSo~RskI6VDw#?~lElAQ-1+DVib0E@s!nP~0#hsoyl{}s4$Oqm$99GQ?HjUD^ z!2lX~;`A@+G{5DZFrT|p4IFZ#iD3Q)umu~-#lh;=e7fZH&9{4s#{huel?N|Rl}^)} z=uRjGTscZP2JFVv|K3=l-2Gk#s&#J#xhNxENJz-qT}PBA<#M8P8$`#{>!zA`uTyIC^$1nHBz#hKOOTVL28?%J*VErIJxRI#mY%}K!dh49+4}Q=2MrBvgO@I%d;KvG=Az{P0j)`C zs&hkEQBhG#>k}rjLD5EmR$!_>`sjc8qC~)ajr{%J!0K;)FD)026Fl4r^3tK9A!&K}koCZ7hwZr=rxEe|8X^cJjQCc)bqK3$ok|)QV9Bc* zw`zU0)YII0>9fkpT-vnwf^72@?QBl#r!5&78SE9LK06W2&S-^U=-g@r(WJy;?2V%2O<8iqgNzC2c+!zIBGv4D$MknTK zv{`~!QZBa#M0#Bx?}nkK3lKQRlJMHvVNuRkc!5z0OWelilv} zTW!qY1zYPA5^mcP?afo42QJ}}z7eEovPF^THTZD1mG+81-Q0F=x^{e0v(q!C9O{>z zRq3=Gh3%1*l|%i}ajvcfXZ3t(kjCz|pI&2Rb4;+q#*>9wwCl{FBw2+H>p3|90MIy< z13ubCuVvy=z~(-7GcAhmG{ff}T3G2g;SV&9a2Q&R`^if}`}IM8*yMp%KFU&s?6nj8OB0-GDz_03Jg6&6}5EkTm}(p;y2 z+SsGBtb=yN1X+87FG-8*j0Ce)S$?shyXAUv=8gIbLit<=c*`nlw>f#A1Rswr$`nUk z{M0C!E6U41g%}IbGKj;hAvR14%+1X63wAExji-L1 za&W!U`1Nbh*KpcL=#fd$=C(DQ*Nx(w!r4mMOa1ny;9*;dFQZiN9bN$K+9$b_JM@B* zJpP~7Azwo(!<1NL(}Y;~xnH10DZJc0jp>iDpfBO)Ra z>TFhPKWOACsEl`9>A!E{y<6D8`Kmj*v1ihMeE>M_Oud>A0O4_*)CP(}b8DTxa=W`E zuO(z8YPLwp8?^uQWv{I@0K!a?Y1z>5Q1#iyn0;>oD$17d%tDIxcJv6Rb%pqWKtW!% zSTNq~<-mx~6JjKpVDVbckGdaI(nvR1GrkUM@$PY1I!mSvzX{m^6cn!^PYdxHv}5!3 zHb%7vf)rrdF(r8xFsHSvf~KYBBg#{Usc!C*yVt#EByrwdexvso`v`q}QS+Lte6y$b z)w2PQ$W3`Fz7vpxn#rnUg-_8VcxL#Z)@($ht~b0NpH$mi$n+vX*N<&Lp4`zn8M7Q{ zgJ6SZqbMC}EZ}jmy-;h83I4#(pLSwbGiRC80^2oN!d$BUV;m*!Vkpufq#9^booUJe zbKC+hDsWt7`Kj%SB~^j~^T*VbW=VlN4oWC12}u)e0qo1$9!K=#BSJR(T8i@3MTc4< znJJ~jha(-HraR?1Qo&EO^sctR9~lOpL)gB!B;AAX_~-rS*L46TD@~q0yP9jtAyX)l z^8hdVj}$j8?{a*v;`2RRCji^oxiOww6ZzLPJqav(wn>r@MR^dnp!G*(>1797F21wtRYi8E|C! z&v6aglbpbN6j5$B#RYdA-{o`5MF>|P@bNr8cXD#b&)T%`AevO@*zMzsrqRdf8;f5l z3qP6F)#X##1V4^jUfeSv0Cswf9RD2jZe=_wp#=pI=9KZvx(gXwbIPaz^H_)6)Yd>+ z{A%*V->BNZXQkq6V{1&9y>sCK{RE1agz?7((X6(T(Ot8V#wI36j*<}`x^K@Xz&vfaV>f|FH{hT*b zbVY8wn@P|Zr&$0Z7R_zBIuez*Yrshq|9$Hy3ehYX9-m0hZiD_%>=3&osjLT5e9!oK zHrN>mN0j#rE{3dJu0#KDDTYA3N^Jy9D7baSox@hKhBhcg&`QhDMEav3WB?bF_s2Jb zKPK`jD#W8(wG<%cA;bbm{>Q`LGJhW0bT?dL!xOSnfw!UQXk~kyr{fbUMW9>3oEUf> zxm+5?@8)LzS9{m}))kIv@An%h3PQN$x{c@>3L*>Om#gd7o+!>nz;P#)R(ydh&ORaX4H-f$u!&9s(mT!h;mHF59N(G@45B(J$D4W1)=9Qs6&DShkx6mF8J7H6P-(cHp3i-{fgIsV!{)Nki#+1+PD@}jRT%KD?ec)JBcG*@Uuv$mI>>5?Trye~2 z@F4Zqor)SDX2w}AEax}qPw!d2sV|Vc2h^{S32RA)2rrj$ zdZdesMNI1r*Yy+#S~yuCxP6G$5UeZi*&IEKe%9J|Pf&&P^h9rcs(u|qYh$%E;&wEU zwS-z3cs;|(R^f*6+s2=6Y=|??HEs5fR`actZd{+Tsns0Hzsy!rf#hF_4jx60UQ?^c z9ry^9aXd|MO>M-4{dhhr9R+p!z0?k4(A0X{zRG#>er8??fB0FCOhz+5Y2iIB(5Aws zLoW2VS6PF#Si-|xoQoS_qwzIh0eh1oUwd1YNcm3OEB#*O>iq%{KuOKr-1MgpP!^e< za7eFNuI+g3PazT>U%}_m@I6r|fKcw9^$ z3kEWT2;tCt34+*LNp|Px1oZa}$q+?l`M^5p!-rqLFU1dElod*tpR%6ZaoWlwUG4pm z?2%fj<(<;Av_-Y+(kgAXl&ZYD=V}OX)#60Ab6Ef-xph+FBbgF@C7SUW%G;8)oC!7r zw}{$j)Pn+B;Wy1e?nCpXW~vWzsXFouk|Gig(hE-KzctCo>n>Ykj?`0C-A1dS(+#%A-JR;VX(7oU(ugZ=+-5&FK& zzvY#APj~lw2z5kP-{7E#fPksUNJXgw%mwSIcK1LUssro*k^AIW_b;>WR9{$1K=kRx7cC!0+*l;NKfpx(IS5b!lYo z=(-XJH@Fsa?8pC*f3WLd)c;LOlV+S(%p5U@PXy2&jvp_ zR?pe*XlUI$ZiKdmA{2~U26CIr8B+oF+7WXfazclCzdry z8TjGmvQ37Id~p;?sSiGyGFE3qg2jp2|7ac+?$Qj(4CKDLCzrIRy;@n5X^*08+!&)HF9A>?*36ljju7gsJ4*o4+EVe0N|PDK~;HK z#rnv4Lub^4_p#7~AdUEg<7Chinsw-7JvGm@w$KffKkvnmEw!HiEA6fP?9wr$vmBS0 zAcQ~zHj*uXnifP3n|Q9YPW=`!t)PnfC<1lEXbWDMme4DBg zU8_c$f0$@%e&EvO@XM;xz&km3tx-kyM=$4=&74`|)CWoyZH``A6Ou4{9p%+E_OLM{ zie-={_J}KU(}}P3&de)QP8$0#`Lnfe@xwztQy6fHq4OZGC42?GzFvSAejb`xjo#vi zI3A}f5aqYnAfAvy$~y^@En$tBi+&B$4=ULUC7jhC38rNVNVgrXNrH$xAEs3higNdb z&LmNAq*cknG15h9@Z2IOIkj4O`!bfx5ZwbeB`S8G&89`X;a%1wKU^!$$~w_&KvObX zrokFg_IhMEiIlU&9BIf0$C#|E`-aX$FJ~Jw9m$0JV%Ei6{rifm;m~WwlIe3BlV{{b z4N(Y?OQXxhuwY0>wNbZ3(ul_N(E8Q&2=%C`(z~83*3~Gp>Zom5<%0kcNgjcL3zL1QxvxL*V9SlCUsH#H)kiwk1-Y>ZcvKg=30ldt{&{F zlyrx^O5-UVDm?t~(6y*D<<;}@p1x5gl1n@3MWS=ds^>0!yDHbIRdUNJk9*hiQ4NvG z$Mq=}TOPj*mYKT{I}O`Bqt1D+BrCp5gXo1)g{my`NEYvZ z9aV-}x``H5L^U=r>;-&YW6F)j>!jCfKUW>}LD25!DD7RxTrU#5yQmz)JSsQH%`iKg zS^72x1>AH#S&N|s(x6o2=9ez7mHXAjHfthNhbse{yiN zlC0_I4Go>R?KXUwoE=GyRdfWaZp@@R&sKg~-jjkLW5-QyN5+2}wmT6o4?3@nPnlnRT-@k}mJkC4Mbwp0Wuh z(qwYDy~Nb~bq!lV(~p;jb*cyKN*WtIx_3j?ceG26{YV**N82UyEiIkI_wI8Y9aqj_ z2`KP(E#h>RD##eU)J64wxoS?Co|VC?__8iFBTEwXFPaGolL4{d1g zYk8)@B5(UIXt8afm>$}5AU-*kEixdksW{oPaZf3Y7eFiMlh11%v+Wa)Hz!5P07V?j zYrs!9Mm&mKUS3`;?p{C_UFW6KNvE2f2Ey9~i;JtzE>DvLfV&Pv6wbOyH_U?M%>djk zgT+?!jNsr>Fl|?I?zQ>kf)2>2bI^T;tp2x?;_Q5;gIAG(K(WJL?&d9#*sR zM9)ahGbpf>V-J7n6KNTFJ^z{raZv(rAz=CQuOF2^FVHJN4>;@qJqTQY;l?F^w+47b zTn4&1=wVMufOm8Ge^OQar(6l!v2h|qPas2si8L@=yd0|0809Sp8-iVjF zLM2KOGqXy^`tQyCgL!{tFc|#fYw=4$K@88|+oB;aQ6^|96BNbGQJ8`P94)1HBt_QV z{?Hi7e*a%1tl0h7KT6N|ii-8Asvq%U7U~)rlQtj1!k&b&5%Q7ztYkE`xq$A+I@KG8 zfSB0oYQjNQU3+639-r+CS{eyR_CPo%uu^?YoR0e^xg~D)`(*H+HHWimx+Cr6ScfoH6uTRuV%#5K zB4C>sTb1AQ*%{q|OLPAM8J^o@UtFu^bqFAXLEuns$Zs^CaBu#|t14?u!_aUxDad&K#o{CqQ~@{-oCqgVt8 z^_6+T?PCho1QB0pn$i2S#gy84HPQ6POpE(K`78a3f9iG%Oz!mZ2jX0E8dHbkY(q;N z&piCE_mlS9s?|YnYtHV=3T>MUav)JxwO@y2PC@)StsI{8IT^gntJ#8#i`D2;OSabw zb(R80AU%w;Dnb~TmZ*Jce8rn^a*SEyqLjx8GNQ*si5BO}Wb0+h7H z5=O({MBIjD2=Ke^uPD;I?CreG3^27ei>jD!eCcA9S*boYI{Klo7 zuJt<9oy$xYL?!I&X5HHaRnI<`J;O)Fs*?pD$R(kaK^M8Y%ENxl_n+gWsQTmM{2)X~ z0fcMs8MeK5jhwvcnSm>x@yYd&(Cz{CF0snrTD%rK-;&A)Z1If++X z%ZBC48L_S}iJS;I-%9P|)H<~t6X%oOMvUpfU;_@x9hEs4^wCr=|EyyN2>tU!UKgf) zTusaW_w_Tplz>T-07Xz2w>C;RaW=Orj2i(*)B2;}XlrG#2tQDN!s?--@t!BfT+oOl z93?O=tIDd zoKeNxSk854?*ZKRczT*;aLXXDUcBa6@S2&nA`1s!j$N+m-*_o+%Se`o6Y$swdY9it zoo8QbC1-8u`}0jpd7mj?;R_n7p58=p)14(RrV5pw-{p`#wUFB2#7E!fNiP;$2rzVo zkfAQ`QUR~e--Row;^*|3(>cD^wLi`1Joep=DRlqjshSfL5`vYT>{Qr|OC!WGwsT6E zyD8rGOva~29+Ty^e4qXJ@>89(l4^H| zUzisOUuP30j&?V_=v)o1&%AZq-D*1$14#OS$aW&{AG1TUJ$pB610@@4+Xp5Bj8von z+zN0nA5o~Rtcm`|xZ8q)4sNz2e{%y)8i2ds^w-mJZ@6{-w8rf3MAP^}AP}a^AJFKO zl$&g9y~Xr@V-MYAll$R4<3@^`%@_39xq*RKYheH87LNr=c#eaC63em_2uMI|DNzgj t8Umm<>>)r_QboFTZH56zNcPbFr%*aEHYj%mBK8t+sVKo8m%vPY{|7s%;5PsO literal 0 HcmV?d00001 diff --git a/windows/security/threat-protection/windows-defender-application-control/images/wdac-wizard-supplemental-not-base.png b/windows/security/threat-protection/windows-defender-application-control/images/wdac-wizard-supplemental-not-base.png new file mode 100644 index 0000000000000000000000000000000000000000..0f28e5f409408bc9764515fa382df95cb708a074 GIT binary patch literal 41454 zcmc$`Ra9I})GbOv2o@l?ySqCy!QI{6-5o-(;O_43?(Xi;xVtv4mwe~^<363IGse9S zJ!;qP(Y06ET651et3%{uMB!ktV8Fn@;Kap*6u`i~nt_3Rae(^zd1sQM#^e);$175+g&@6*^V4GvXH!#7Elb@LF}zPCh?u^syZEyH0fOF}lGK_6qUxm~P_ zYiPQm!r&3Q&zrwge@HdWIGHuQPUx1xj)C$y_+1dJtgMR`yT)1UCf&ck&|_2;IButt zYBGp27P0tTlN=Le5D)lxEoS9(yR2`31qi^~E*IokXoe%nNUl@tZ7Oo$MIwc(PO8-z zUUy$cApb1=k;UM?W&$T|fhEt+tsN3*k%~+vEoLsld?3{a7&`DVN)AZPI>Ni2RMxH$ zFu!jnZ*ckoRUsFxUxD^f6N?6AFQi&EgQ#hRvbN`=@|=c0_#G-bc*H~*H=_mQWM6*F z=iBDlc7GX1QsXUSSsO6;tjr8~ZZ{O0HbugNx)yKNY5}}yFo`@@T#y@~wYg|jsK3e< z?xR>=ZySWeIZ_P!hOh{)Q`o5^=v6$f&-Ig9tGk~xs64`a6ob#?h6`?FMB}i=l1kg- z^7y8h>b0n(&ko@z(v`>SdAABv@=nOBvGnC0ErbFA9$Y)7u%8>>~ySZTFh%56P0U@a6o+&&0$(TxI- zW#VaxosV0AEHiK~@JChn42qa96t?%jD4u-rqd2Ves`K&pHT)LED7K2p%JLoLD|aj; zt=J!Nr|(KzsJJu5IlQieZY^OFaSOBYJXKl@P|IAk8z2vZ&_ZalI~CC8PRCFN_aR(GbmE^BbiMz=4qs?f3Zia`Pp-e7rQ;pNan^jV49%sSBX1QkfkLla?oMxjnv7$)$a1&o^y|$fJPWdp# zz|z7)aBjz(2^0o%{C1ub<(Jc%*;6dr@#r~ouJ+i> zU=1?Je7AMpqI}@Q!Ra{HG4`hhc~QXmPc5`a`RDA81%=opZWz+e_kfWl`0(^65gxFjg}s!DA#6(XN6*A;u?g4gpk?HsLLp?^>(~YlV8J|8Nt8X z>~j=-hfsrP*t}&rlC~_?MrZspvKP)oXNWn~WRnr}qs9dei^)BBL&jp72WPu>XWkf? zrb3gMrY7i+O#w5Nh<7BL0Kki~z?0UfR?(3mDLX&es2$<6uw5%}5V2qQ!sIQ~-pvml zR5=&lzLgxN@s=bOW4?wt<43(%rAyQTw@M`WmklSC6XrC%=cK0=yK$5rEC1%gHPWi{~P4aNm9!t27{v4>EQlc0v)qG z!|Sg)KjK33D&?h?z0lHL^6;z{e#?m2?KTcGVa;Q=L|1K}gZ8-lnIbd>RXo z!m%i8oHI%l>|A}st-e`4I> zGu-~}ikq~B_weiEhbzCk8~`Rt0Wl;DabF#E-DLJI^SR#NiPj~{!9PRbqvmm}-9O9$ z)(!T5i1Xm3C%V$Y!Vs(fLMGS|baAgQtGoN2^N)YkX+^n#4~rYn_KN6dEt~wy_P5XS zx6S{tv7a*kes=VoApKuC4fl)VA3Vs${{5d7zu3Y4KWqT%I(O<~wdrGvvkL?76ojPE zQ8F>|D0wcWR04!i$-dDBT&57$;iFsJ8wcL?qWJTA}C9)6!kr_`BnXli5= z8YFv5KQu-cUF@!HQPW4ZpI;AUUY%)#jQ;MH4=?uz4jaZNG};{Y)#li>sVbt7(9*9c z{If%jLTZjS^_?eb?UzNGCgtg)BZ^zkBHn(R7RsWU4m_7RBW#;ABAI!pUJU$sg zKnuzmSa@+OhR^Bkiuq`^WBU-3KSWlC6zC<7!7P8`x$!SPx6xMWD?+)0vvdhwm-LO_ zXor-d6fzRPdGC|M&wI@_E2v#^6E9C9!x^5gn=$M#*t{p> z$D3J=#ioo5*v@FKGz+Smr(DCHP3ZZO zBDk^n6x&}rANd}xX}eIapYwm@7EVU|lh-1-MWTPRZO32q(TS3CXS@c6T+da5B_X4* zh6?4W-y$0S>;>YslyW!~?(-{B62p~S`l$d?3@a9ZhpOqhI>_D*uWnE(j2^HO~@^#ugT&1{VW}? zQ&$nzZBDCzINCf2RrI-h4&y}PjYHn5gy!|LymW)rd{`IRm`xNi9sP5^PcMe?kf%ev zJuAdI8%)XR2d?if0w&;dkN#;FNXRsspXtea^H5>K|OVg2?slTS+c=h zNEeS#FzEnx_qOO2k+ZQpD^NAQ7WYYhr&Kez>wCg)YIPr+zDf^i0q)_yjBWm^kfpHT zh%DiIQJoT_KbZ?$)_LS~2DNx><#%$>jva#cKDxDH22R|2rsLTp--hKwQ#G0dAWxMd z1QI)@==h^#X%hL=8;%}IMj7-eI1dYHlMjL*bbd}I#Zkb2LW`TDU$=Iky)P0=f9~mh za+r6M_5R@p?4OgSTFRKuBe~#-mZHAwMmepeu{iwl;>w6qLdro3!Nk+TE$>qh=9QLI zP=&?#X)8a>0`PFr#j@l>-%2iDWYJL*G?|O|SatmGZ1c1^38$0}Sk_ z0w+#Uj)+iE65w^o?LFjCGO6F6CpfI4ii(kVqHlTbIETYQzIWyRh4TSh>j zS0(33pwFb6`4iUXHssywqD_YjRL9NivYSu2>Ukx`MDH&NEK;MFqDI6T;E(rV2<7g4 zY$2ErmE%NXYipEpTXEwGE~t-7^QS9+b}pr>2uqIkp4Wp|wAoFuBdWJ&xjR<>*6jh^l;+mQc3&jnbm_s5eAo5Aj5QaGBf3{Y!V(%jaTjpyAF&adK{~ zGr4{a7Ip0t0=^Lr>)LX$nt&sJiA#_OjXRbNDNlTKdzKjl8S9`-CdKM)YgzVfq&b&HLJQWUCg!nImlyf;&8!SKwwW!$gTSGiRs(n^ zQcnNws}WEpjM4LcQ;?|~Zsfxl-O{gyDl3`Ur+#6Z?9Rz=fi6U0g|H>H$JVAsr0RR` zQ?+4a=i^Pxoxeog&DKiOUIsbIA&=xTkE=W!*8#(wr`w~A&Ph(fbWPGy)6P{1_Gg=< z7doa>+%`Ug>(x6bOSiP*5Tjx)K00wxZb{10=#All)}<0DNv*7g`j05uPg(@374q4K zns$_cZ6Tof-%2FqrEsFA`RoG+-HC+UP#Dc>80Wo^KD9POuD+c6N%Yc=f&H1c9~2t>;`O*|jv~Z?neS4I^WT*52+< zpppk~d3kxbh>Wi$AuSYkC6k=(=hK5CVYpajLaOKOm%`kPk3V)z7tg}8v4asdp$u?o zrby*+g+uUK%iA;rgd9!PgA2}+xId|cEndh<`>$0)S_co%t6W{QN6PKdLiQ8|9?WUZ zpOD}+?h{MsNU{mb1E$uEZ#8tJYHvI(_5;-xKOOXy?DqgsaewP^5Wtx&=dIgAK7Li5m?R#<0-O$r@fgxQF=3Sl?mrLfTk-op5^D| zqvk0ft?|NkUgp2vW}CWq*s-y)K0Q7%#A1qrW<>EBWzf-+YHOL;@T8r+!w&KhSZqm^ zlCIs17oeM1_>%Ki6m%!3QQ26Vc5bjN$~bPN>RW0$J4-Md*i_?_7TH+{=QY#^hdAxr z3gDLUa|(krY@p*#)BYC+bW2l(D1&48$&{!Oqtj}{$Hv}}!m%aNY6kJL+pPU1u9i2i zwyVszxo#BI;&SZwu0P+Uw5*AFdIYN0FGlLLG~wi+q)Fq$C)Yhf?ilXl0vsQQmKofB zYAY&hCmwU&BJX^x3>ynC9MLw^we_ZG1Kr45cO2YOOg&If|8ZVmxR1=+1B~8qgzfD@hR8Ie$qI`(Qvf{Wv!mK~A5^RW`c#b$~wM$fD zy9dPZoA>)WlZ==$u@ydUDy~8&oLA70SA7-B!fHyqY~8I(F=`Bry^wn& z{VR_w;LQUL-LbM}4oJ=ie$JK2n~0M&wf-Tof>n+fY_Y zSTyNWhLosdZU+b1Zjz`LlPbR7N%<^7z;I_LZb%HlPW%!qQl#E(-q=#($< z_TO3(N*H^hbDtS9Z3WUX7gR$rSP^v<<|}>x>xgFx@nts0fuGiPZ;CzyFtf2WwzQ-; zJCUUuqbe7+8B2G}jy>YQchRhmDY-P6OFKK$vK!Xb9@Up9P634%+2@Nqkv~dHOH-Am zNHvBmsHn?I6&A}^)U_406~{Oof0-YYuTTr4{E35k)PhgD!=6Fi&UYcjhD@rBoXoD@ zIYXvW9|GxZw@+z(-(QyNio@Jyn<11sl#1aLf7Mhd^pR}yoGR^}1ST`y;@p*m)Jrw` z2Ri;mGQ7wXKfe~FSbxIiS~tQJ+`;aHDSBlHZMi!MplNxPlILq)O@FrA{<0Iuo8;Rt zrry2$uZwM4cfBbwG5q-1(A(SFaBy(t{<(J3u)QHYz!2rQni>}sm~`uH^H=#`G} z+9jl}PBZ*EP z0N;IT@IHP6DfAiM^Ho5eJkFvfXDtb-E&4Z86=N^uO7KlN|22Alv2A}TB9aMbkg{E8 zVKGmvB&D$TAR5AF$J()Vh|`l}W07d0-5f%EYbM0Z+u|Z_J3pPSQUu(vK1-EjCts|~ z9(0!T=c^dOD94}9tYWqwvOfh8sct*!oR)3Fr$Vkf;mtZ^x?Zrc<9q0-(*|nDfbOL?Bec?Ia!wz9K5%3T2$w70h|86Fg}K zqCT*`l&tG_{M!SreW!uQ{sXZ&iia;!ssSK!e<$rE)s1)m9>v*c9;PQx%#<(l6Euq| zN1`i1LWaUlk>qoHl7Tr~bhkVWB`b4dH`Jjw@Sr?^u8@}w*ZQUiNL7mFADj}8CF({DzjljGz>1JEg&9c1hrX<>JkEeyp za*>7+Rr^az8M=1NoAg*=wA!ad-EH3j;`YnHOWaJ%_vpp;<_{Cu0h8q^=82Le{mFr` zmXVjd11NXmu>U#Y%b%Zb7#KVUzJB|T-aHL-k-$`rbsBcT>F%J8O(ournu~Pu)6Z7H zHb_5F{p|Fb#_IAc5GLv$?g7jAzu->1G-JKXWiT?CI9y6VOWk~;6=8;8mha~%03529 zUdeY1i%MNrlL@vPVje}wwp%?*n`%cldsuQ{S=crAjhtzwI?j$L0A}*7E^1*qo;HI^ zYW0fl^aQ7|$-WVt_?UjVol@KO9mKMn-qq8tQUjphdCrpqdVQbUm{q$}x?x=gCbhjS zu+ro3DJ8Oc{#AAIA?NN}y<#)mb`~&93=lFyJUv6>0u8#VSgC3*>F0agUteV6i*8kY z2>?|){;+6IeE0>#ZllUYEZe z_OJ0+Wkm9@MVuPEMlM&R>Bat@wTje?&AS=*W7u8dS}P)0d< zk_OPt|3Wwfr#P-4*R9Vend^v31S%{u7c(o@=$v^TkYWi|AVweMk+KNys_Y}F5*_x; zqNwz*UxqJSa_ErV-B<*=&DOH=LR; zlkb;~B0jWdI7lX-piJ@HEI#gn4%4E78*F-Ay&sOO&e*L|Q;wknm6`8shZtI%v&BqG z&PI(j?Vv|nJx#;q22VJAFpg!1DnON{1WmMawtMWBx6fvKMD8y?vl2jdm>m~3x#Yq~#ib+)! zHJ6?R*M(O&DXG|mK}xHtB(>svf-2v0#zxF!Uh7wh42ob-sgpF%69@IklLPQ%Y}v-t zZYHD4VQ#x&bmtt^Ehp&w#pM_54IfF*UiM+H=u|yElw%UAS86RIfG}N^&t3o6Hg=Qkv_J^5x3o+Ef z?)uiguT+(Um1-zYSy47`(^yFHVDM9ts%Wvr-mk#IU*N_jRj1X#;Fp{P>9+imM@7En z`qrPTw#t-ou)EVpK#%VI6#PbbGH6vrrH}79G;F&0o#fp+LjGV+lSUo+@B}}3X)N-+ z+GI$z-ZThM&(nN>0FAsD;rPC3)owqH5r*7aj^9Uu&u)1sm?2KLe{{r_B5dip4Sl8c zMD64yWwW`N$eh@4Fg$mwT9x$1mi;}4@4FOnq{IXNXp^^#jA1PnPw88n(IX9pYG?{i8q(2!d>>eCugz^Fx!U|e!CcHymzV1vIWEpaDe5xI@;S(9g^JD0;I%drBLN4DP8p1#C?faqsVEq~P<4E+aXc6qXWDnw$r#|296mU|jS@ws{2S^rODV#q?Hx z%m^1dU$JMr8b)TcJX}|rpWl`9-wFB}I@S#fwUK$RtN7*ibl5%QCVfc%e!%%T*+jTI zXM0#nmg8n;>p<`eHL4`)#b&+TzM)wyl)!P=lsNVz`s7jHy;$D}|7K>wThd33psGzq zkpKKIDiwkzU1#jGK9RVXqo8HYnmBp9U0&55#3C#z6DPNsY-ehSOz8VKi7I<@FcBOp z4Sp8q$Fxh^J$M=I3x1Qd0z}k1yEnDriOdUad}p_#)j)Q2ZoPb+nQ!E-owFtKijR~E z)k`Iktibk`j>4l+dxuaR%U+}T4Fpe4>4W|%DPd+RGMhspUC5*(UjCmz$9D)Oc7c0f z+%;iPe-x3b|9Jd?(4O#wyoU=Tswl%?(bl6KB{Lfbp;h%T~dfJyYEkkm3h7_WE%V&BZz^x-pJPge_XJKf zYP%*sYqv{QuW#g-+Ck9GGCOMdUER8!fY2?M->Y)0Z?CQ^-K{ydDhHY9gK#xhT@Q@k z`s8-aG-kLL^?fzrv8TAw#6Px0*o}5?bIyBL*wz%UvwxhwtyONY#aH1`&U%`A^WkjV zqLdn`sh`%griiQ#O*qY^}TxFbMrIJVNJ7Z?|m-^p%i>+bTj z-_A`u99GKn#rs3Rwq4EJsD+%kb=Koimx8ghIp8 zW2BqM^O(;is;d*iry|~xDoWr{Z|yfUyZ)@%Qx8TCdS!rT0isYo(q57(nm*9V4m7?z z`8A(cBgEYd$$eT@Kx)nhwjVpHFi%$;wKC0!!%B5k(C%g@K73ynoKEob@cM9Ted>h7 zG#zm>jl9>E8T||gbRb@G$5l-E3a-qqz*l^9t|;wTc?u?|-peIdcp-EJ~lsakBLv^Y{OQX4u` zPeD3S6L22R9l)s=%x3ZY`paWAGD2(l5R!?@TDth4X+V0CD8oN^i}9Y42o=8jJ9(m4 zU_(#ERBv2O&{(D|pi)A76My+#pSh@QY-xjLe}%Mn?U-2ky0GTEX)tm0Yzoymj%12y zY+~abYNqP-u}#&>v8RJJ+v#V@s#SOj?xBv6>NyB2f_;U3es6-wRrVurMc*fhfs&To z5i=u4SBRKpy9iwqxITG^9(?x^IIQE@7j}a*;se~e2gPU9BLuC_oj@3u?)n&6%&K0q zbx7(#t}_2{u^h5)+%@zs=}t}>B+5V6%`0i?@i~8N#K}C5Cj2g$u#$m^uCWw_7kK#K zG9&E-9}#gUduw9TDjV-ec1JiPl-juc&h(x2$MbQEc1K0CYE--|wap7TbMnX0RE-_{ zbBOe+eLfb}Nw4hR`h~dHxjW0T2@cI~99%cW*&$=+g)C_;^+2rJZmK3rp%TwJyFuO$~L$mAKy5%0Og8 zk6()X>h2N63S_0gnr)WdmFOK3q6QHyb^KNKD2owl>y;XFQ)qy5m!sXWghM}Plc3GS z$wDIkfDhWUrIFD+mgn@bnHwRjaJ~#KpuTTD?T-Hst;XJs!cjs8U5XKzYmki1fjC{n zS>n$ebP7pf5|=n@>}GgsQdRmzGW6)lvuIsn%AI(DcUDe6G@>%&iOI}OpP0Q(Mrtgr zMNBUYEBb4BvW>*DDRsRA`QNqL$1ca)67z%Waq>&8t~Qr;3*721-{~;-;yVpr!zPcH zu~;u!SjRg(Z88~yF zEA!n4r(LNWxW&i`4b_5t2YjkZ7WYZ2uO+#R)jfL zDy5Lu?g=|ov$W>p=e;Z(D3|7v>>2!U*HY5AG<~s`cqhxuKW0>hoSg3V@)P;Wx_i-{BSyNd9sg=ddh@H)jQqn z4Cd>C{c=f34@<5heX(~5(8()gvltdCI^rqMc%5~~ksCgAz)lN$7xh*QK6&w3Df($? z3XT3^C?P5N!~-urzR&!f%~FGkzAQ{yo3x04%enMm;2CHEh$2Tx)F0S~9Tf|5k^=T` zd@WB6Sxh^$?F>$}6vJthBbqKK_?j+s)gI~^*!7F!qYmRt-O||6x9m(Iie~Z9c(#&i zOk2hnmqq0UJVK{4;y~7&GtPBLS6#()&*x*nV9^V*o&ONr_lxg?4y03BQefQNvexTZ zQO7VB>QuzD$CnKc^^BD^RX&O$7+F=HkMg9Sthzkb<0Ym1y=QMP_qbeMx0MwMs!nW) zQ@!78SBLD?5FvW8vg#D_RI>UMe-}Q(tiH&o$7CYP_PN^dO$bvA_gG!(@K!y>0!v5R z$etk)@ObpL17Mlvu-x{W=KOzq ziZa9X40*-HPN<<-HAVT4KTD@>|I?>>n6Xvcf(!SJY>;2q?=H_O@K))=-lvyC@8J$J z+L(EA=D3UUtXzji0{WwE4Mc8+5?>TZ_wyTW@$zb1%M%*F} zQl^{Pxf>=MduhY5n@x%roB(SnW9_=b?Sc7p>0|SjoJ7q7>*n#p!YMo+jv6G07x#lb zbnSH(*EnmFe$o=e*r4NM_o#^dA^>&$ooZ<75l(7)V&Arteqb~B|KuuC>>BMLyLYjwsy?sve58_X<2!E%&9GO80_>= zOR+f2k@ec(@>s+j9}#)Av*oa8()N=RqnXVYb39(( zi{B@5_Wr*O!$|0YmX?%?+|#ov!c!Vgi9P~auwpa3J= zE!l(U_6i)Wjn3}w?%v|D2_$%aR#NX9#3GD?QS3#WS90*Tchh5NYA>ZA=Vh+?tEeze zUo|Qj2Hh(}k_b%=Q-}2RD>$=*!(81BgfXgmNY48^VtZ+;Y2b}StfE2-&VkAL#h3r| zMz=H>P~<_Yg{ePq=#qwZ8C5Y-vKygDm+^@ys@$9;UNrOw(Kvx!xNKjqY295SV*3a& zZ;qre(gX>5>cj3Y)sC=B$Ubv{pS;sX8TxBsOl;+2eoK74`xuiw*k z{}&pgte9c*=sLRB139b)cK7)fnz?8uwts9L7%;nZG!*!u*6@Trec#L3{-piA(XWs%5eFn0;LB}ynNE*WEItMQrgD?98KrFchTl?%H2)OkJH3YO^7 z7{8OqCM>{wg!N*otBFzynL-WsQ)O%tSSvHk(L6}~qD1DJAt_pdzR{kYEWQ+!2R7}N z1{lxWt469pR&T8Hx6<#A>z`*5o@24PQ(JcZsy_~%W3OY27zZ2e_E%ILYAfc5Pu&ow zQsBkgXjED1>HnOc-@ht4lty30v*_MzVGj4gI3+7%%*4|@EEK;Mq=})Kvy+XtNC678 zSC<7wgwdh6Gona$TCgl_}`VsijL)jhr_*NVprbJQhc9r(g0s=ZkMgN*f zM7^Vuv)qjJBLV~G`kZi6p1rTu&-D~AQxNBEI*{F%xLw}X>$|Br_J&5v4?2E2PE^av zBp+`l^U1FM$xwsEjGr1zU#EW}}JGNV$*ch~cyy;kH{ zq_!@eCgTZ zG8)<{^OA}!u?B-a+JzTNMehI}!or1$Zqh{?6h@whpo8#%vCckyGN z*+2u1t!=ca^o#>qrsNioD;)3|@*my?b3Cb|LLYrH{X?7EYwxVDVo zN+SM*5xTY{(R#vR#LGK5Q_uS0=3fQ+E`sz_-uO!CA;o&0g8d#UN96xgDU0uXE*aubz5&g8>Sfk448mBmx z1{0KG_9ZMdXZNor@uW+riuGv&m?lcLu_(lxa3u8K)^iZ#P_2U@2 z!Q|`T+`bsl0j6c8iJtST(}oO?82WVIc&d8zht;ut#lO~-ByqMdFKULTjtKf8; zrYrUYVs61O07Oia{^tdSH4xf(nIpB;$nktA#Z!&_zfo9%`4lbmU+dnfD9B?m8>-8B zeOZ+0%r0+lPaoT6Wf6IO9MGac(tWcfn~{M>e@RM$VURKy>@Gbvb=Q*8FnLdYpGz7O z`&(%jLXUbA@;%AU&5I6QR#QCF*ounlV-_!Fu@dUgVXPhTa5xa4uMOM43@yu2QV|lb z@`^_8aL(9N9uw=Su|6#^2~8fH@Pu4Wl?XBwbXj&oLTX zRpP9Q^Oj!WlU?lZb2stsp`ir*DxVMu8Kh$MKY-dBj!*rk`7H+9X>;^{b7Hl-g* z$P|~C*{j6K=Z$IomFO4q2DCrLSI&)>r0-7`k$2+oDCV_KFh{cR5RmV{Y3G44T&uR@ zdI@OZ*mw@eb$MaQHd3_6Wy4Jp-fjy=~}r@nB1cyLNO?{#1f!u==|vze5AyM6PRkvcOWnc<~2V5 z@-buEf+6uqlR=H*)GGxq|19(Gpbd7;Fx;($>n*k>c{!4FU5t!lhn` zoNAV{-roh}cCpN5gX;TazM}H3uR9g@q136t=p1;N9Tx)G186ZFDy*mlQb6`X>fR7W z7>WWV11U@hOMlIU*I<3J2Hp_oE<|L?(9T~Y3O90XN%O{w*Hc5vw$JhFc>n2hyLwIo z>uN|Zq7Wd}HaZKc_0s(mPu>GNtdBh9*`!W(HB;Eb%`8+tbjsuwc5Ou|^A>|fTMO$w z(-JQ|k-T+${H+~~DU(KuwK=H2rMDhDue?3060!L767l$BEo;W_4TG>)4C`WU!S;z& z7TF)XL8~`|OWIuCwAv^#;|qTsZfHg?;uF|ml`hc{c;mz?!mynIZJ1N>n}4jSi=4cm z>S^Ys?vj~L9}nxS_wz~A3L!p^l8K-P)NvMWvMUl134-U2Skpa&d}^dfC=-Go;H}58 zpSfw%yTWn{v+*Ivw$06zm6a8VUAKD^X2+5ov9N%bWG58qUiuMPF@HuqNbg`{pau}~ zP3tQ-UE)Y5b=B5=H#;7StEV4tY4DnMJH%`SmI9F#m*y>yv|4XHHk|6x8{h|G#tlgS z0X(N{YRQJ}O>aOMDyu%`?$sE~YgJS_wdZbc<4l+fas2CBk>gK^j|;_{v)B6pL#HX7 zn3z=szv%tJ5N2m9tkThCE3@r(iW%D`Ljc;O0en{jkzX!g++4V#!oEum+-9w%!{Z)m zOwNzs_Fy^iW~nk6m%WLS-q;r1!?2a~KbicMh7NW5fR>HEl+)KH>zg6^Dv2<7J4X-= zO$E}Got%NWIdn+(u4)3BM{ApVpwJR4%Oz^Yv5H(6X>A4)JUcfh8*f#BqJq{qqLL|x zbOPY>U36~x)~TCav5#2bD!j2YeQNLW;s7m4XP8ia6XyTbmKgw*XvWBY4B@z-AD=I5UGI6_sBl$ZC%FS7eoqK7zgNMq>$a?&e&q+#`-Jr+fnR@fRE*-}ta7zBQ z4`Gis1oxVY!ks#>;R9z0SMv7lL_oIu;xoCtri|smhWB(#zj~q2@6qw6a_Mlw-T32{ zfRx_JS+mWJ9)Z7T3y&Ld6v!*IF{Mk_bF(t=d7@)lm_kMWy`bH4TZ{V|#67+wD<>Hv z_Y*e*`(y87R}CPLpgK+`e8@^Te_~|654|R6ZGaq0HV{3j zv%<8XsfxV}6c#S}wye$(5Z#1vo^k7+-zn@Sp{_}a*iWv3DIxmzGjcLr+c9<*~8`h;BEU z*72+r=h+G55<-h}h27@T?QmfxU||SuM|y0L;#w@?b%z|aCpCo8L}Uk&`;lx9ybORw z4GkRPUN5yf(Z#&DZj%Yl%`F_p_f>BZq>-747$MFe=NYEh^BIY#UY_i|w&RcXsh*1B zVK3BTD<`AwS{8TPDi{xBsNJL95Tqf6SPZ@v%4A)Sl+k&8d#IE!gvFX46~YzP2{``7`lmOYiGBl}A`0FpHV~I7yizL++(q*i z>&=qKN2#~d6|M$P`h$5Ynp-%w!x3GJ_h>zkr-KNJY&$6Z5qPo(EL6Kett6<}B{FR& zfjo^e?6RVC8hKOw*@NAnIb|7BljjZIPVe+rR-8IRGIXJp=VED$NfLIC*R#6qQe@Fx ziON(!=XX}Pk52Y`%mrUH*wWY3+;l?_KAw8rwGJ8kIpv(8K~bM~lPrFj`8ae7ht}(l z$o7&7-)Bi?e2k&J7x!pH^<~drgr{>ggkyHD-gi43k%fFpeY55XsnOY&QMqonLF3aD zl;a?HUk`PU{77RVW{LOR-~`-Yf_%K3A8DP`PHyeDJ}9UoMxoQh>n*!1lhe*>p>ob( ziX(hMtl8x;%=Vcrbe;07e(1VbJ4orwtEl%+v^j%w%j<%0rcC)sC<4k|zG2t{X96qi zRhnZ`Sh87Zd+@kqqK%(%0QoZ^nN4~d$7iITCdW~KiB)S2_qO+f>BsM9L0rtOh4Pte zTW+QG2E5`)?k0B{eYZ0hm`bB}fAL5^<#ni-(vK0hAn!oVTBvKFk+q(Xz-{3aG)l2G zAXYkjc;mQt)C)fNI8YZ4&tU#evVaPoo-Ko;HKcFhT15%3SNqo4L~>2C#R&;;T4X|X zT;W(D!F0DxvkAXL4y;SSd8#qAn2Z*80{jv6SNfOlW|t(OgFGKmdlmC~mRRZi;(v8H zUozEc98r`YHSSpUel;S7#}oDrZ&q;l3px(01A?O>cv2}$%BcPfdx&lSlX(rsE}FfA zKI4s$eqVj{@9$=TXnM#urdxzMtm1nChG>=VRclA&zDQ|BMModk*aIKz_UU7&65w8i ze^?4$)>wVqB5{lUNX@Pr|LcX@=iy{FJgNhTh}iuO;QLGxw&E+(&{NZrcC<8*ZiDc- zs%EzUv(0M=#ky9!JQg)SZBj%Yunz+X8Kn7_j67Cnb35Gs<&?#BgSlQ$lp-=yrxRWu zgOQX#oEhYRE>7C#(=oxd4OGFyb5?EM@O9q8J4u0vyyxg#$cG-pomJNyhpCKM5opq; z#dAA!2EgZZ!hTL??v!YjlUt7U$d=BdUPQ>_LDT+P>}x#_JeA9<*Eri*gXw#-me=iT z2F~SVgxVKu!UU_uKFNaFX0Rf0fU<39<4cz1 zpen*KH4_Xny*_S2Cf8Y9%WbmH+plX{+=VI>0!{m^AlGUzeGez!JQFIA0bkUDn@-!L zOD`<*sVCoLBW+I)X*j`X1;}>{){gjUI>cfGG-i&Enhz)zWjhiFMYjJ8R}NvnMOdQ? zIPo^6)>=yA{(D^0IBMADW_P&&W&D6Uaz9l!xySqH#KKHO%pHoh8lAGsB>y%Hn2It~ zky)=}olsQ?!F?-as)B_fj<@Am%#eA&eh4INj`gb)zpKsT7CLm_ZWnq0`L)E=w)lNu zkEz7|wS^sVj6bQ+l*ssD@2NT-U)N5>oxILFct0T&LHx-9XvZve!s@I19j1`{TL=I7 z4+GFphng{$?pC)7sKJo%uCiyXNZ5}<>|q!mZ$xpj%gyQ-SkUq#*@Si8ulTRO(s{yDQ7mGuK^sB*dtV8#0TRT3IqI;&$%u0KJz{&es+?H^OxR*ZDuxpZw z;HhEP&2p6Qm?AmAYQs1omx2T~T+}QPD)$`{e0)=KI3|}n7VR#pc`oeBiQOm&R$hEx zQzH=w0k6hX6mSM(sMdwW&z$#pB{)_P7yP2A?>wvV?tjfKp=GYXU=R>i~P*Xv<$}vg7 z@&AXmw+f0g?A8Sn5=ejqf(H-UIKdr)ySp{P-Q5%132u$M)3_5{8n?#X-Ca)S-+Q0A zn3}1YIyE6br?kG@o{=O1D2VpKP7_nsf}c-SUDKJQ`H_j z0@(zA3kFiaQ8J@+HDMtwI$DlGD3sH9n+;}K;q>{=Wl@o(82cP+6K|v(!X}xkkuQ#J z8M)Vj5AJ1ZcQ=xzbDPiRrN(Lr3@h2p7t{BW2de6aSc4JZ`?h1LQRTGf11#VJWl)@Y zh3*=Gb^44(e(q|S^;?ABKBI<0Z0N>l$@PT$>u8IFxw<qyg^h z8j^4Mv;49WbnA|4QOWZw3k%G0Ks65qyN^>TRuuPJJGqVHrta;mJ%PgQ=`&zj?jxeH zNPcB&6C7@emhbWAUf%9PJC-({2yfQlVOm_j`?oO13FoGfU`EOQ}G(lf$|zTQs@14Wzjj^Nzm0Jo@I=m6?a; z&B>0&nyO0kjt!q(la40)k~f+)F4XljCTb7VI#XK$Pt3QdVdUOl9m)T}scPvR@CxNJ z7iuqm3Yn11$}vPocP<_ra3X@!KW+~VosceQc9Fd0{lxQm`@-$2@>|#SsJ{QEr*o|f z0jJN^_}kYW1EQqxO=hWx%_+@`DzS~vWPj%3ZhB+2&26(>dO12;<3+mopOmtbdfz@u z$Tj`y#(XG2+~>g>O}*l^7k}V#d3$R~w!^pWJSAUv#~(5GRZt+{96f)q=^%rUxWO#F zhNJaZGs;!u@U*1emU@#>H7&c8E4W!)TA+CNv;6#*Z$@pvE(nY0xm@*d3Kifa{247- z*>a7{?T>~zj-EM|EdMuBL*1+6^(*P@(}Mt5U$rLhR&EE=iXvxrKpZj(a z=YDYTJbuumP<3WQL~?jcO?9hhx5+o&?usq@fO5moE-2WEmhVLuluzO#kF;1@Q; zeH65~?$>;PR2Irv-M0K3vIVDaE@&nq^XKv1E+D3Np6T|K$0#8l`R+b@J#^x2^pWm6 z%TzoU_$O3TTlPDJDFGN3WPs0hl*K~oAOMRa+F0An<^FzTYgfgMfp zSeyX$B=y~-*@XbCLX|(eH^H_>z}IC1e4rO<=}d8UR~mE-1+enmtUH;f(nhb<+jc zxm*=X7i(>)At$SZ*B^v(kyUz(r>&-}ZaI~$X3d3Bl7Tf8Vm`&EqeElvJiW=!;lE9DjF@NkYO5(=pwv7l%7(Jy|eOoGI>N6B-4`Cef8L>q_Xm zw)MYF8(ZceUAb6>YQdKXBwR-QG74!-I6qp_6qv4x;B!UBz4 z=LEa!=_z#9YpBwkE?QlQM**lgY7_v7(s-qNha}|=x}fOC9fQB=QyVjwT@n={$}RWk0SfC_B{jr^vAfXH)>J}f|8;J z_Of6F&W)ds_^L6_-2=KlT{^%z$sdEcp8ADTAtIqR*S%64BHhc>EjOM18j)*5GOu?p z1-PQd330c7DvKjlM1c7=J-)xzPv)_S);1FLS`|-^Q5#}%$@^+ny+*e z4|(N8udB&o8V&TM+&N8DH?xlAE#sas?CRo>EgjrdC9TRsS|j(qffRvER@t7C+0`GO z36KwLmZIm;l@f51vxrpEPjCR6%JZNEj%z6~G06nQ9}|h2FWGry2YtlZdXr%aKoKQ@ z8iGEX-8~FJLyX5AqOw%~F(Vci=WcDeynll90EUmIvawGkF!h;_={1M0C&|+z$W^Ll)(g@D`pD0CopnhtW`knZaF*esVa{T zY$WHoFZHWD%lV@I%e2bFOm<^cMD?F5KjLfji>}z4Ni^)^!URSR`JUpdJ@{7)MdO$K zZSElc+1BROda;;*6|mit5EF|RH1e6v*m#>w zRdlg|n77(fT~XEf@nN53ee2RP3{GwESWYS=G9ro*i;`;SkfXkKJiAx+I`oPTd$*}0 zyQzu&H1tL=4UptyokJVJQQ;G>8XV@O^699R(W;#g81%l=`o3pt3#X%1?Xe=ThK<&? z$vq;KHikVC-(LFjU|N^%iTIJ5)XH;((>S2u*JH=KE6C(zbs{&C1;!)}kCT_?Cu})p z!ZHi9VYKP;xqXuuh+KL6wT|rsR9@Zs+{QPO-okuv8yX~<=d1q*eUHF7BjjW3^09n? zBe8oOmj%P~y@nLfY_j4jsi;_=�=|MZJPb@BQ-kdLy=W}nC=|9_ zEaF{tR%3$z4#xv!B-*$p&Z3tVS*IY)CJoL*43=bzQl}!U4B9AnAZLouSSrF26605c zp|bOSN2B(+d?|8B2sYZb-hG37Gj(5W&V& zda~+?7KXjO^-w6(j*9?A{ty1m56?044)H|1MTYt;)^k-DviC*1t{j&QI9H&*e`M|S z5S!ILcz%Si9Dbs@?Zu9-#d#c60=yYv+_oR0fke8Nwe24q+C7_?sFvi-vD1N^%oLTq zTfYvnxJHHq+5YNSx1mpJRNBQjNYppZ=+ll~vTG1%k#*^C)-T!?dzQAJhfi{`oVeGC zW}taKOtLsPI)@nFR!lKIPBYu3xu%u!aeKG;Jlu+ ze6c{+zTu3q#rzw39i@pQWx**3{ZMEvIg)D8Z9Pnl*^#iHq~$h$H>e_fT2^2eJbZFYC#;ujZLUDw$s; zPmy$nFyqKGjb6k)b6>Am?!jSa5#~ZSKf>pzAPt)@l0UNGGReU15M$8 z?aDAw_!{FzU6MY|lF!>X)WRBo)M}eu&eDd|4#Z#vt8U4| zVX3mDYFgT1QR6k8{05~mu706D9QKkhpI z)NmN_K?R3u#->WgtV%X+ z+T~U0%ZV&IfkNONgu*0voVey0=ybw#{hCntUV%!YD!fU&sH4QV`Q=$vJqHv?sx)(% z^_myHt4{?ejF2aTi2`H2)5zJ7rzPL~VwTAxH`jwlJTtK!*K{az#fV=3f| zb}GTSit`_zp~yriY(7_Dx2|A!8SwZ5gIqMDeLr2Y}2 zH_pMpAwb6(1ld+siLU`x28@VkkZkc~BC3sC-3`PaZMbHqzZ$Qzva`F`*;T#!bz*nA z(w3F=&4n25O%@AmB&2aR=~`r#&TZXjdoxwGd+bu$QlUbjICw; z{Fd4aC^I7KEX_4Fxd8pg6J(WZXJ;XMN_3gLf<_WQNhajjG3a<_=7}JfC^Jx`t}cT+ zI6*NlBkaP-c{6|GAA-ilss?wP;x@mZr1U8|#=DPW4mW>}E}HM+e>6S2|LoXYG`t(G1|-x*lJZ1P@GiPFlF108t+>TYHQ=OeEY-o7vG0BFQEUbl-nPI z5L7a2C7iU)L6;BjaLBw*ORbqLgi>HF4%$$B;=+vIfxNX^%Psj<-)CAr`Vme+S^w{f zlA4ue)u0iP^EV8YyayF`?2ZAGJ-zj8^|fnFJCRim(T@1GK^I{{*3MD7*X`~HSKWmS zVrdL5qFlg^I2{_dG^{0#FQcBRn+z12*4@yK=$^FNpC5wz?dLej3eYum{UiP60H{RG zJ(NAzPy-yHNWaD<<^`eA=F8ntpabK(H29kSa^aBEv$J(!0Pzv_7CB{qFRz_ffHi81 z=Xu}^`P-7J7GK85sgUyFxgUb>j-kSHi#%(q-zy6vSQdDyE{`lPhdyTPrL_BBxR_Q@P*#}A-pv$Z)tK@g zzm%)?X4pi7(usm79kn4W#Qbh+n2Do3`(KHF!dx$Y2^1oCX~vN=RuH0Nn|PQ(C>jE^ zAHr<*uiaMMZQ68H+%v-9ut%-n1N|kwGJtPXl)dY!O4zq2Ql1-fCJE*7o5&L`xya)d zFz-btcjbtcR(-_2m1P%}cxZ6KI>f3lbc6L;A1!;+jxwKWWxz-J5EeI z_15bQi=5~2V3P8A{X@fgcuAM65z1245`_=F<`%O9glUDZm_!&}hLx$3OLc7TR3g0nDr{e@@(ipD zu0U_&z(+*m8u%$G?HFD zMO1L|3w!vSUBYe3$7&qyEOHz_IW?XVYX4Bm&vz4WlA!7;)H&~X;vR=G@^jGQg{!&Q zVA0g-I*|T~TH&o<{Z(imx$KTHz;2;Wkru1OQ$$iy#6>OSnPT?sh_4nRz2zbjOOZZMW zs+5ucB_LYMabfe_F$~`Mn>hv3(SOk+CLmbDPnn*cc5)B?L1(ky1m1xVTZqPF-o*MiE4mBP2$IZhLINedAJsp?~DuN=aXfEt{Zv1)?&EnR9RD zYBG=$vwZnm*>^P8*^#~q+)}L!dm|ql*!6>6q^I)7h?Yj1l;m(6RIY3lqm=MI%{)D=61L>Z3uTkZF$B^R?(ey;@-$r&buM zZAZy0u2D!a0sg3<*To!k%~@HO*^4KO%l>XorigOm3!&aImEDR@q{D3l33kl z3dmu|gP*;gt)fb3KxdRbRG!mW)Itju(f_^7qn3ejypHH-Xp1kclpSTH)RWMWWwIn% z%rhiX(vA0ir0Bo<8FzR7(Mk}+RMns>TqTd>EfI86leMOP`5XW)W-6LGa@x+3V@V4O zB@ftjv~O-92hIX*9i5yIB`L<^5=TW2Z0U3^4s)zZa1s-%*Gu)F_bcSkRsZ}Q;s7s% zih`HHX%=7_bVy+`2&v$d$Ht!En0A%nMPPg<%J^Wm{ME;LLCi7U&htbn-}@12E3kd+ z^aBv}(R7J>d6Bcrdf8b+u9`4XWNRyt>Oep9dEfH&sPxz8Ck2hiGHIxOll+6;-do&Uv-^-WrF+aVJ8xAHUnUMhPvI)g7(A|MMg6 z>xv@o&ha6IOR8pxHHb|;g554`vBsHrqkQwk*cEhYZZkWx&|;g~XMChgP3~$e$&f-{ z{=;Gt4Wn3-=q@0)(=ag}(Y`+=B;}9gn9O9#pJc+1fwvgF`HiJ1~)STe?wg%kiqgLC#2vYq6~VQ z3#+EONK&?QV@S_TSe0fHL%Y>z9v4K11@BxEbyF`)9$D^Cf|`l}W&joZXFCzTCJ$Pn ztU70W^D$e8@+DWrVG-v)uBX0o|Hw)4@yHO3OWW;qBmf6nb9@u=PFvnox1Q_(Zm8ka z!@1=^2Cq&eTV~CxT%IX?)^)jAdO&p9D|Brf=zqDxJhuf#OKji=EEdJ7Fqhv2RT-DxXJ_o1$!iRgq2mf)m zBM}4w$-LR4#Kpy(nHg($d#Iei|00+5;qCep)WFIrBHDlO%{bxY1w0eASY zM$u7%?}c`?C;htyA^R?BexN6W*(dy8Nv-c}#ri9A|CI$0CrQqxCnbHZY?;5Ch(qwL zyX}_GaFvnc2!%P-=)2TqUoJ9Uf3m5Klx@w`E^RbGM`0Cmm2@*QIVO}2&3UZcw9PDv z5$HHL3kEqmqe#+LWM!97>>cldugyWNyfTdTJ+vl9HUQ?+KYmWH4< zdAadoc6D9xehcd+75G0jaD*Xr(5BaS5eQ(&HcN7ceBZaq4IyXw8j=rYny=er?3kopO{mOQ^4;S z4XOEN=ieM({?ob)GUc7$W?xzuR7f2&v#*dl+?X#P*Ku2vLIJy+a%eN|Pj`Kq>CQFv z3ma}xJUF=G)qo=#9_-J0c~x?%g6DZNs_@qIk?DiDL}_CSyiK*Hmm@C6bOcM%5#X@4 zPZax4(eNrc@>?cgxDnX}=|xpz<{SA?~qx%rc2?MA<+)2&&= zVYGIux^;1D&qkHSmLpJ4Q1M9LX?cpaAC;KPYl_W0b5_bdR21wiA?3mrW!r4sxl?mD zkWtVmA!HC^z)PK_p)4d~?_ZtmjwwWq--EgB6h)#^<$kM6;G(2kh%j?HHCNu@(y_5| z8a$%w4fxKuwjrn!X8n!c?;|`e1B*0CU%wt|cSj9Qte;t`$%v+CJv|64@X1U};-cjg z#eIh3eMU}^4?#fCEBEiHpdD0PH9x!^@7F1WZoo&;A!{dT=A`dYWP&Fj63e+TLc5|Y z1n7Ekod?cP>C)xI>j#D)He51l^_e=$x!)?kD<3xYgZa+gPPh1H+rOs#Y*H3KP2Ph` z2#&4@8_9h7i0tbKXTF)3%b7$UE5%KNbSTGbHd6n%mdiNJ7LoH@DM?FXM${mdjj%A9 zP;`UF=7moUF3zhbHI~-SoX+l}x12pFrIEDdjqGM;x|u~Tnzp`9C|utO-d8jW0ne>m zPqMMf2{>>T!W`ymAJI2j%6Mnap9<_}c_mvzIop1k{%mW=W-z~Ia#cB|?l`{NRuH^P ze};%kj9vY)tADw$C+<5CRcu^!yx?rT3TXsME&b{TX2@?0KqqSAlB46Gl-p~aA~PTv zAfZsg{Yo^kzzw3Qi!Q;v{Z~(i`@a7=P=PfC-<*CYo4Dy%sH!@98|HS~M_LMkQfvE% zv{B)M-6~U+;*2|b@+efs&| zdBR>jyxi+Q&W3ny@}z^3zw;BFNM{8?fj34jL9=6DF>qXci>BQ-1{?|MWhx_*p1MQk z`CAey3Jo(YpUEY@R4kWYmv&dVWH%;UsB@I1ijAo^vGlTo{%FA_MGl3yi*3rY$Wc)IyXEe<_l}iCPB$LWUP}t=q+=AJ68)Jq#{M{cOV0yOm@^xZ8$! zxrBjNe|jmm9pX!}4^teRBNab79${TQ!%GV_HPR(gvAQy(WnU)Z20=%XPVD~Hx1Hp) zM5p%;#U{?OvVIL6M(O%I+K`cR_-ypZdMTrFTn6s?dJ7!j4NQX(u433L2%W#txeO7D zL|);@b+Z`9h|aauh3sl)y)d|K5dP8f5w z!{83IGX0_j>^Lsi3y+Y|n9w~cEk?0GAs?EgOGfUHM zHZ>Mjq8TNVf}o_sl+PU9p*xzQi07y2-@Ou37#hS-XUL^239M~wETkOcrYtc=|AU>G zMxt0Avu?zzL1)RS2KM#Wop{@ROWHiwc3E_QQlxbphK0FClt)cD4)yG##)fH6C*f5R zVYS!eKXejYUk>wa($EUCmDjPgZ1Y((p>JdHOa$dZ#UX(qhh7pgVpgx+2HXs93)yl4 z;SEVk12;2Q+U63Ag&ZGe3jE%7#Q78M_-Mau&d%Q-rMiZV;!-R8wR&`)>xP%l56$VuX%hrM%u!OC;E0pba;K2?;>Xt4_QHlhp7bP>*Q8ufHU?Ae zp&RE;;ehdi!ESJ(sNUkT?eHg0>F#ryLO3GNfSp9Xr7TRT2FhUr*HwMPqci)Ky@Cjm z#M8o9nnYv@?3nKX*kPkF*k}N3sC`UEW#1DbsxaJgn?D}p2|FZiDll>?Q8fptPSv!E z(8(fD5>6--CwM5MC;zU;Brf32>90}U16RYnuL97xr|IW8-U9v%E@v)wI zz2Lgm5XF2su!|2FkiT;;qiURK)u6|*ZKMBtkB+eHQ0owCyG;Bm@RB#Tq+IY_fmNTj zwK?KbOBQ{1+=lQlbX_8@pg*@W! zntVsq?fIpLgXQ|0Q0#z*&zX{5Q}pe+1E6CHC2ym{rTYCwwdLt$AN`g9Vxh|d*)H!N zio`tPg%nr~S*haFKLbG#wPo>-nO?GT%quW8f7XZnt`R|srJ*4yedEs-5+FeR)aeid zow@5RgqvdX9)K-}1@nkS8Z#%lw8T|dQpqg(=KDrfAVJf$`E9?PqciATT^9%woWJrs5o-Yv0{$ zWQ0@g>C8&nWdG@2+W7t5l2>KtdK)01NK@9R*>CA$DoUiZJ*VAZgULz8(-o>n&_Tdv z6Qf5BsM*O8UsS*ISMaUSwVV@)@l` zC4OQ z3*;52s{d*1VIyOE&|slL!j^^!^VjnZTxnY<>6swwv8Psx_G3Oho?BP=YF)dhLXNVF zn(ZSmq^cZ@5*-!lesL#>Y?1QaOu|Yib}Hc=avj6B9<)r$U&bHBVb1$3861bhhu+(Y z27Zu0{>z57%M?lfE&Fkb-pn1FOL-O?W!}S-FT|zat^Z;?V3HhH?~M2rq;v;^aV-pW z88ZchnW)($&1W~5r+Izb&2)yRkQ<15waXT5a1ZPy91dKFZ$IZ+bA}j_G1{sI?0T_? zFe0SuN-yj=3V?YXAHG*_**Tqv(DAT{MMp%Aw79-%0fC*<6h;UsCfU~O7>$SVvIY(Z z?4eBjt(1d-R++3>1@qoXc}4})qZ&Hl$3C@urlQWFNlWu-EP#pvagrgRw-HoYUUoCI z9F(BZqe%Fe-4NaH&<#65tooBevm*DG$!cS|os4H1$!z!;;s9r(kXFGDhHmt*YXryFeu#XC zt#|3PHz0r=NXT> zWPvfNVGp);E6}8nh|#3N)>NuimZc{rvAIp1SCgl;zbF-4^7~dwkATgjh-Skt7*)@a zYq*JOX3oE@=JHJXZ)yicyCc97xCn4=^{pj-$(YkvTv!OmJ5!V{c75+nf|mVm0|KTg zM3`HttEMJ#ML@JZSpnNqEWlEZ-1>)TSQ7xlk^on}y7;;e`Y3|~)46w=S1ObJeM3V* z?az4?OOQptgiA*enx^MXLtVQgvCfJoKn`Zu!B*O^j`$a81ds z{6HEVBMdfYjzy*&RB{$p^!niiRLWZP=J8Bxah1kXY|Vtg#+~K50|wt2sO#u6Ba$U@ zGCwwHthQMiN@rG0_lp+BSv&h!$r($#j|x9N*0Z}#4W_HIs`{Yg(>dl4xek0`!|q#c zas;&h0ZwC?XlO1wBT_n6io2fnP#EW7svtUUyq7JK{F5=-Z(p*3K1e9wgs*FtjmVVO z)78W2V5>B$ytI;+_qRpOwK_$p^ofF9yQi6JgXH5F`8AdalXq2|C2hz~59~(YGq_t8)wrpiYVd^+fRp zS+g;qAWktev)qjoaUZ5`e`8k4{9rgX)7M}L>2rIqc0U*%yBis}~&|92yvi&l^9Pj}chlWZ)4$Ux9j6xv%lzx)86v z>1vc<+4=LOr|W{!dHqT)N+%7wW2>bD;B2xgO@G>L@t0p0s~TquDti6?M$b-1k(7qk z|3Ybu17nE_3M%?dRv%59odSI1(}&s9JyjI@0P_x#Uz)}e)l+eaH!u=aKxmh1+1dsM zRu)8YtwkytxHw1Wu;89T^FZ^7-*X>B$7u3x+mA_M;cVd>!i~P0j;WQoo9m~>2T~j1 zD|;D}eP6@ZyK(N;%xynx*bu~zYqV$p5BW||6XQjAWuK+pokK+}n8h_Nxmx0(CL0lb(;Z_|26$^a_QRT#o^jznH3AHhV#63O3 zVRkK^w>Bc!n-=x$me!Wu9HHGh6+Xg0IDZr6Axqb3Y`J;CJ!?oH21C{_Xk(Y^T!`41 zmt04vwWz+0rBn%0j6KKJ>e!g4j9(nJD;LTg60!~LCf169~Nlv47Q*Q zWft$~b^B^^jtmdmp>DnT;YvkE7odLf_HX88LDxO%dIudSG&B_P&A6>IphBp9Ql9Dx$wW$<>UgL zc>lWmM_Gq)VKeeAyEK)QwAAFjBwhj;jX)O{O0DaNL+^D%A~%s~Y4=(ooD^f;6>;6v zG7=K&c5XuYxQ8>c|MO$m?7EA3H%SA;XJq$ux8C;Xr6eWg?nX3_FIo`*F^({>8fRD6 zh;g|a-)`;;0&qlW^UG29ZiE^-Hd)6?#QsS>0+fR-ObC{$uJhJIkAugyaW3s_oSXn%KKhgKWUIm^>!v_QnA{gvs_e*dAS@Ihe0?6T^Ei_w{a40C6;8C440-%Nx1 zxJ||2Y^FgjEWezrzrUtIu}XsWMlkJzoq|?-R_(Z+ke9NT(8AP@q`y6WT}QPMSJQv9 z{s>iM<>loGDWIbhU|zFQQt$=O%9TZ(Gc!Ll(ttEtuxJpjKYvaMjrlFu8Q2=OaPS_! z$y-*ImzFkZ5*8N$)R$0DaMKYoP@*A*0Fp8>iIuMkVNO>6qCa7=4;Z89HlH~hnzrhj zgYXtcN^K>8T*mv>o`q-eOSB#f96A|R%T;Z8?AJ(Ee==TQz_t^ zSa4oCT*n$o-=U`x7PJu%N|{t@Nmb0Q=tLF z(Eml5@j+lyEp_F!2AT7py3X*&18y9w%2 z99OXToa9j z)aca9{cmvd&#Va8q5>(#HmSsp*_>uOch_O)Xa)023d&VB7Zgygy7pS6_XAHDh~&fK zc-4lEZG{F@)amO<#U*|8EI+K*exkA|kyrU6@T*r|4N{byoy{~;=Wj>1QubfC3-c_Ib;w?R_t z3m%}dmU;Z(>>*d((9nQ%+3HxB7$R|6R#Abeh8$&9?A}`t*w|!bB3?Ezmz4gj;?w7s zTq34xoDeeI`Ut~z0+IxnryDo4r&WjW!w`B0lP6nG4Mu&JY;>64T=va%}c z?iyZCDsb0ZHT#)@eVpBTV@5Xg2Xi%0fl_WU>;R=))g@Y{)p0pY4{GEsTi2=sjrt4-6jxNRUnGi*6G4ZG+L^u1AE^k>nSD>oEUqK zadEPe2Ww|!VwzYV;}H`l#&^qxqeP6+VV_-kc?+EzF$wT3Y{!V_#oZ&2?G8EckAnKi z1j&W*1l?zp1pt=#ixIJ5O0hI$Wo3Uv){rIa+1YQG-j$SC9)EIe%tyMb^j!Gg5*BjM zSB50Ow=?OG={j9Cy7h4%UaLv8J6^^rI{u2}~s`SlFe&z*&-M@((sL7oc^|AEjsQw$m|5%)r*xg|M=i&|+Q@Mg1~0$%MUW|8q)x>+D{7|N96a|7S(tIQ<{rwf`@F;DY+LvM7PAWeA_#{6nE}Im4vR z2-YmvMSaiasp70*Xa1PT6Ol4_lH+Tg>x3PQ#4hlIlPBNiH7J3GhGt5H9ZW=*AmGCm z#HL3&Zq(vQWN8=@hY7r%f^Onwo+#gMLNU;2G_su{uH7j7oGs-yBhyaett*TppqEu> z3vSj=9R0Gc7uezqhi(|aBART7yGvU?Fo(gVDV9WtUf?A<0-E{hs`PKdv^{oJ)b3uM zC@fUS@$I@7?s`>b(Du|+WaEI{27`?3D8+{!i`!#IlzYS6){zg&shRP~u@lpNlrLAs zw)$+Fq0t?izE7+Qzwo?nMi%U0Sy*$!4;;OHJ+QJEbQwV`tgaFS69yGk6)kCes>?(*y%fhe4en-N1CmTy@)y;mr+}WG zT0aLX)0mH@huRWGGKJ?%gp0ijv;&dy5;Ucj))hOd9O%SAG~!n^H5DvV@;pZgPd&4) z2>y<#sR~p2@)9bDw9GKQt%&neKzu|}i(jaMid=~x^w^8mVo;(d?>k$!d%dex^wrnO zWMTG^8LVsaqN+d9Vcph3?&bWRJNSJ$-@Hw-%u|&%Hy1500G~7G8{{b}gx^g;7$ZhC zl?0}jfT}QBXVWjcc9ER<{UuEVW4{qW9+$%p5+Nb9+v+& zxj4+5Kh-CqI9sK0Tnbl6l=FBTE>VV8ndJXo?J=mdXsGNv6{8BvX>U5cvQt@QtU=?h zPPP{ErEpX^{~57`6<{%!I65J|M=koiadhys{b4$W#T6CuS*|F*8I1d6^ZH2W6+jCky5*GXK#q}U;+ zB@PgL`vLpw`w13iyvnxA&wghr1$DNS?sMiXE=&2JjOtC+?0s!mpyjs;Sd@5bbM0+A zan{G1F_to8gAt~Q54C{L1H$>1tSJisA>0N=jJlpi{yPs_M z)4n7tyz?x(8t+#Uy?7)(+2-(7R;*SVJ~0a5kg+;^3mxwZKkvY&iBv$Ds(9z<(>|4W z9wj+V$s;Dp;)`Dz!cnofgGZ6|#nMq9n{+X6`UOD(huM1 z33-jhrzK+y^*I}}PshT~`Yd;skOv2Jf{u~c;k2z0TlEiu#Mh^7dg<|dlFYPu%%a;? zR%SEy!5~}=r-N!+f*GYc2~m8Uu`a1qQ$KD=o~W&}!>{n{qy_nj#e-dSuB6fQk8we( zJ2|A5GwP9}+1tYNC31U&E9}=F-mGPQ{J2ZI|7gzGk8Bwqz0&5mc|h1Qz^YwW=YqA4 z5RPR=d>A}&(^5!?Y5+wx{d}}){}zSk91I?EK7@P6doSqkllIHE|AqhQcUyU2ps0!( z1tGF()3J^l-B)~*RT_&fxtC{WJT>?^)0?~EJ6D_6b|>q*cfnHGdl=TT$xeK^_By`ImxkIN z*IGa}t?%(ypH9L85y%&ge7w(3?|@^XKTEPrl*7Dk8Q6Phw0QNej+6pg8{}P!MGYUL zx+TAQjvwj`Q6&Cws@DylAKnc$0gpYHb(8neVVssOWDx~PDDMvJqU^; zVL0+~>O!M=ZmXm^j+wA6!-R?6&g5Z+99*%-H<^x6j5IXt%imoa@Lvb(%@50`0-gfy zuDC<_1=fnwrXCO@0?h3kU-IS7NROjk}hav_^bjHBxOkw0jdCUPj9`TKXbOL z8$#(Ea^&#tS|V!et&9q*@}^T$Ine_Kk}ZkE1tNgwIFKpKPsb`(?yGWZ!@Ec_jx zb$i>zb@rt_SQ-0I=NMksgeVu{7CF!xjbBXJoCv}yrCu$t=N-%!x90I~J_dTR2-URL zD|zmGq_Ypkxz4_I=>Su?;(U;XWnD&PXC#vsk0i zl6Y}Bl9a8>TzL};kxh}C2Go4n-H~Xr%oAeen>3_aP0T^q9N34>D!i+!3LaowWj0S) zrK7|X5~@spPD%9&a141ok;fZVVXlaq;MxdEXgFK6ohy0Z$a!B%xJYN0@b=A}I9%5~ z0Tve;j%-BaSmw2?iOpqkn~}rKusOaJm*<1?8Mpvv(PAWGETd^BjGovMgQtUaL;SMm zAxGLQEZFu-y}P6jA{;s&&*b(nZf-yL*fn_PQ)Y9|bwOZEIpby@np`G#Z~W1oq>Y@t z6>V)>mg7aK_uM^=w65gSeU18*5^1dT;Kuj3fHVTT^`$^@1{+Qr433whVrdQZuiTNZ zUM(L%a{$v(5cpcY*M$#o-qpks6SMAKKA>jVWg{&=Yvz3iK~tn-y^M7 z8c(b@MEMkXJ1il)F$p>5kh`A>ilbPnNsmN1@zUvREizU8?AU?QxMSJ`!Si? zd93~B*UeWuT08AG|7bk#-(+FPbWfa`j$f6UT_pIP5myMJ#oKy}rz zS@s-_&;Zu}|HcEBTjWb3D=Q24I}7tobEpE9(JcwA^mJqU26`1bIyw>(7WRLe#Ummj z@)ZxS`tb{_%525^_nVuWn=<$}%j@gi!DaBUdbAQD;8Iiz&jR_<0oGkw4rsTu2*NkK zFGO!YbARnqF|6sIVe{R`Z+jKtgp{TvL0!{0Hk35ytVAn}AL? zG@PuY@VNYt!8#NzLXB7C#Ls*>Dh2w!Jq{L-zZ7;r8e&F=zzsJ1_-KhkN1_haVs^Tj zT#djCu*h^E={x+1L3%atB;)f4m1-V5-`v$abidk4qAD$-I%eu~$*ycFs%=?2p4a z{IbBh+=6twmvThWWGl^_cN2r%YEt0O7UXKg; z6e#>y(TV@t|AFRm_~DMHlw2+Swg*?Vw3wjjl?s2msWM)NtnPAdl&?SeJ>Z5|)ENw^ zPyRki6u|Y=3rf&*1KmHVIm>v|-QQs8s}?P&x~7@(388t5mB#(?TGZ>2RcwySix}RS zx;^Vra-Ff5dEWWRrps;K>V5rErcyY=%*@?4I>PV4L&TAzlawzV5B3w&;h||0d!V9M z8H^qs9Do!L5chp(+)FFWQ?Ep#5n0*&GdLv}Zo^k94B?}y zH6UMy6zd!7a57mChmR+~=E5vOprb42*faSzAW3%Z$s>Qp;NI zdg?8+j8VP}SryBO#c`LvAjtc*GV=)c(M%`T^5sbw}Ga@I+D9LH$S z355Nx?!GIki7xtAKLrFuK6(cM1pz@M(wj8ty+jB_YUsW94w2p=Gywsn_s~%~hTZ~% zfRxaCui?h;u65Ua{lETS=IP9=Ju~~vnZ1AIIGBBSsMz6oJW!*x0!Mp4*~_>d|Jqz; ze@77GsZf#j@1TslVp_^~5ezc&bc&mgtM6|2s8L)&zD~k@zdZBwceuv%>+y9eGd6*I zmESf`rpNC>x_ubny5Mx>PLafVNP|8J&~6XZQuawH#PA{ zD!{HPtGb#*R+R)G^WE}K6Aofc_MaO0HIUlGkyo32s)iF`T%A`983x57oXKs`MFF%_ zToU!1Z~GV)!6=fr#B@F>1%1!?v$g~7^qVdU2U8|9R?wLl1u&}fu3ra8CtY_dLi{S zOBvzftsB%UEG~upSi?kb&y-=!BdaXJ$tJ8>(0gXBv+2ucoC7kJ+ssGwU`CTsEx2X< z86o)I_X!>pJgwn1z1-8PVqJw~()Lzy4THd}mDatT|P}7bGBD!rJ`Z z`SO>8!vMG0m$`V&T-4l;WIgv%vwzil7GK7Z`uNZwFE-&^XD=%p1_q;A>m19nN+|J5 zylIzX0O^d?e$nV@P8(ZY!xIkG<~GYRPVr31(nk`EB>gsRL{%# zqE$gwrtV<$&qOaD5|f&nZlcc4{qCBCtd8kRZ1vD9#{_X>eg>16Mx0LIiB)@<0>AO>Z)g~XPIH=Vrl|BV zIqh?qeBscHxILYwa1}sbnQ<@Fw|NaFO+t&=Wz%%ZT$!B{3Vx|1sYB%xkDxk@0x(Bs zu3nF3#B*yt9daejk>WYiD?Qlt+a({=ZGpR0F{FpNmg=`>cEcpxx7CMA4`rV%;7Gn0 zrAGH5-Q|_+hqP6mx(LFyCZ*a7Xx;2{0102ezY3}8OCSF1@@*zE3BQQ_RWaH_GEA!) zZb8J?aT-`7m)@JN-PNkGIp4MmVFQH}IgZ7tQ+J0?Y=Q>S!$A;(Z3}Gdpq~AktE#PgL1%!x+T}P`QEt4>SLxm2orMQqqVKRD@WOk3TUS zUh|anYk}`wFZUsXorVzYlmU>OYJxk^yEC9QhL0F3;HUhmlt#pcRot&svD8s)x2?@{ z=`=zZS?1}yNgS>bT68Ke8ZgG26Wz0^LA6{?BnbGh?If#bt#ND?`Qq2KA!q1jD!R#) zqtQZsC0^2cxWXY4=-8HZ_da6?uwMDevQBHiK2XxoMBB#t7#c2DQxZ>^$)S>~Pz*oX zNZEHv$UIF_?#UAJG&56LUH7g_DkYWeJ*(+bz47`CAUUNijbgKZsFv(c_$~HUsqpP< zRn-1oOF-<~%$fRUjN+B~IEIt@lIbM5Lsh_Z?cRr4#R+;Sl~|@PVCKRYSr|%*l5E4Z zRAcr>QA^`i1K%{Qt;d(|m290tZRm*UFG5p7#&u3YNLe4=N~ zhnZHbDcGlkk~pY=4k&NeLR?XX5*(M9yp-+X?d}`FjsCRuvNAHoN$L&I0d_1_=`+iv z@Dmafr}(K>{du0&X<p%6uPa17KrbzQa|<1a2#G0f4|RX17In;Up_hMi+NKH0yS&`X0n-?b5;n79 zcjXz}zly1F88F$17`8-OjEof~a4Y9Y{@&KyDn%p-R{HkFgb;81`ZI@go6^p-&3=e` zq6RY@ZLehMs|VVor(%j#j%nTPRm=H)R&e8=owLD7#XMpst*&BFMB6sDyXTeJo;@PN zZmG3=%|EHZ`R{!vxkTSF9$FvphAG-jz5b&7Lur3olX1AWkG%qCaqjZX)GBfi^kq+= zir>l6!A9N*5ZhO?M26+)^kW-N#12w_ngJzhbO8BcHJ3tE6%C!lQI7~sUMGkiAn0=Y zQqQ$#@?(jT+;hgb*OnW~Po`T$Pr)i-`a)_%^n#};$}GQGq?ij=uD%QH%qAB0JGPp= zy+FCfo{D>{g#8+ij`cEK@e@n`A$*_sJ&sh@M>DT=joB&; z$+eJHVtyU6&mbV^cdAJrcc8ZJZ!dZJCiY$)#j|n@#kmw*NH|^_Tb5Q!8uV8WPjo;y zivJ60q4Cu4FFjahiQKyzY?V}rr}J51WXR~*kcm9nynzUgJKUTnW+mClvlln%UO3K~ zZY1~HAyDEr**STB%R}siT5Kx2k3fP);2QUZ7crF}hfn_|6O|4JZmOmHc)4)&Jvexp zRCBt`=|Z$6xZ`4A4uarX#X`8$20rJ0z0dJ~xCInDM?QP!8AmVVvisaj#E@6erRPP- z!y_|;=d=sY@#F1ehsF2T-0k<{2Y(h_N^tkvE3?@9Q6=?9`)A8dLGEYs$~6qcJ=P$B z8Hvj^X6tKqkLt8Eg}M1|*9J*(affhF6vb*?t~8>Jqp6GbF58dU=e~h$4b$K|jYMVOk=Cu&WsHKAqobXSx%}gCQgF-k)+wQ| z*sE-vW)0Sj!Ldvs(s6E;v-kn98=Y)(2BVN&g5r#+bKs$U-k(ff{-#DX)2MNEx0R;g z;9%++Vnsi{o5zd6BF|Q6v32d=DkD&AI=Nr5cD*%!b-79_sFmclggVX?bXo zg2Q%LENu$E@k@cJwo&bGH|FiVUzTV;D4MJ48g-eR*dZFj*W=EYzWiLoJhbh|aq0kK zu@AB5SXoN~*3RpJ+n3PLN48k7`ezwd&O+&emCm=c2s1r!i@d(R&Jq|j{QL}C0v~c< z-GsxP1nG>8m$0ZDD>l|$@vsE%msc+kCdT#19md;8EUi5liB-%z`HQLKIGwT6m__tq zPX7NY8;e0Z{Ew>j2M@l|{$Hr(g8)`Qjm2;NUf{|{9|W>BE7&G61%Yz?bN}KxmyXzO z3wVmH4-Nlf`4*a1XZjq|{jp={_j;`+Kh@s>2M@ch6t_)ti{p2-_EvjatT_xAK964a zc+K1i)6mf9?ZjGH+t?L%GTnI|rJV(4!tBOdHxpoXt2Z-PNTkj7gP^g({FpJQwDgl4 z9!)KvjuN{G(`fSP;R=nnEcq)O3mrb{Ek5eut4_an@r2T^cYo({nxJkzAJI2Ij8M~9 zQE5l8`h^Y^I?x~ew%7wE+@RQ8_39!weWK^T&yedCl@_;|PAcp+mGO+ds0N2`kIr8b zZ82l<1Wha+RI&@D1|R75tf);Me%9_%V9#{eqsQ z&2wC<=Uw&mv9(gr7KuKuYJ+->*YgW38>`|+I-6cDBz?g(owZfthsZ5_^%d9S>p`ji zLKE1~ZbMY8Dt>@<)>1QJ?^&jLmc>OL!@vQCmYV^vf^}B9;4uSWFWSYs=w&iLK_p>9 zx7Lf?gqL1SQvD%b*(CgwPzGxa+N;3ZHUdYQu8}*z8~HySvK!2soWq1tl|gG`6KH)C z;ip_QShdBu7q@sG{D<^r+QQ*QRW$bPWIbHor7Mr_YTcFdKlzrvp};k4Bp6-?Oh00W zwP*xPhSV72GG5MximY7Ze<$4-mLp_f>%rKt#FCCr0w&5D^AJgkV*vy82s#lN1H@W6 z=8#-?*1A+w8a)xd2E+AH}U3mZ#o3L(-)XFSG$E6slS?awN#~6!7Z< z36>un0q`lKr;BymU5aY=SY`?AVb`2c^Gb9$Ka9GSbymXn$n6%BRP zwl=IwsUpS(q%6h55^0ow7nU{=5zl#0$1PCz}?2AqN z#?1pfKRpo!*@xHLMik#PY65R-XdGKUm4!a_X(zjmRHg87%9D`SAd8O+{*~W%8tE|_t@4FEilN>~!g=b7(7>APD=bLCi;tAi zq|?b7}Y<21P-7Hgt3noCMMBD2W_u_%OaZ<;NLF=8A~UnRRnfZv+0TJx#I*MBE; zkSI+b&rAmI6cJ>MH1Cq@($C!T~HQ>Xx#VjX~A}#vmRh4QvP0!pR9*T#mXHquc4F2(-#$kWCS`oJtr5gTaS zg#&f<@kLat2km0MeHW;4U~hf!@|@ij#K=1~Y^~H}n+{YYchIM_Om>h(lFm} zrW|=G>+89<;5&y8Isj8Xd~hg$T?ZAR;b>~oNT>6IpB|iq`~(fDb(V3~6lvocKDak$ zT5sLYn$^>Iq#-B=F}=uK^b(?g0k7rB1I*H5d%v#t%tN}s5`cM6V3c%Y&_4tK=s;0Z z3}NHH6u6u+{TAG@DMobF4hG+trI}S>ZgEO(AtWYGqUiNL(|j8K_c3lrb)wN%E}ogR z#+1nmv5T9Abi|U-0o)>ULR>!#(3zKTEIN84S`ry}xh|H?P)oVI8+A0kEc~fPZ%^h2`h*ckaSlVXF)}^U1BDfjSLGUjOtP=H-4%W*s|8Yf@2^`{d zakGexdKS4&iX~}{!F-;Sm}_1GK_E^L7EH26tK;%kl$9md*flYzqNd5kIHR*{NNbtY zJxy(UeT`ruWU*{oKeTzN@voDMg;vGwJ#DXj`{Sz+F6;0Ybf?870o_~pJ*)W5#;JSD zAFhpN_MZN3w_SJR{o^c*65p}mCEgh(0y5g87M-;mZ(#+z8EfdI*O!O3!I;wepT^eXpDFe^LveF2;v&FQL&NI&* zhx7&4j>d3qE6SL%i)1sVQWE;x7`+&@ zW{p+4_j%p?fHph}%Kv-*uuQKz`WuYeed9UNOnoZ3Pj!i}Di&AMQ+bzd&kzr%q2>l> z@m*K3hhfuSo8y&x{h}skO-fBdu=3y3zpW9#Yxc9;d*J>W4(Q^pW*%&+pBENVb@nmGpq#xKi1dN zjmvHjdv+&RZRgdVQ(bd2GprC{mo<4EozydEMFKQe$n_%yIte?QM$SD@lyQ7BDVXY} z@73Q|tjsvJU42+g+KcP!o0`6RZFEc~232wHzvj%jXzwlK_RL6+yR&pyT;O7}fg`xF zSe2bnbJ=d}T|kupm5srbR3-nz9Pj;W!MCPTRHS3r&TmkyDbB=}rlzwbEv$PZ?lKi_uo+1@On91(+-sBt7P zXu6C2WvmNmZf;H};MS`w9s7Z}RS?%3?m(YkKHo=ae)?okZKo&weG<8vWhL>K$gQhI zxN+&Yo|Q9fOvkqu&X!kMcAdk&xxA70HuJp{(yMQQ_dYl=oK_hi=)6)d^Tv*G8wc$~ z(9Pp!sP=M#(e{P;i%DAJ{C4+mIa{I2s);yVA`f~lZd4CeQcRr=g%KZ#1~h2r+* zVNLk)3t!_UzblusYP=HFyP2_*;Ljto{VU@jx{+O3!G|x(euSOWPU_vm5sgAQEdogk zm!@02PPJDD=*bc^X0xJ`F7OWhh_ZV*8qa9Xsm*UV#NAh%XWsXw5`;~_0UC~FvI$ib zjS$K~XlBOY(oY^QlHae<|3txXZW3EZGkdra3q{ zk@MHvEI}CQ=aH*_eubWsGGj-IWWv!{g|)D2s}2x|RFm&wXSyT9o)FYgq@XX}3(cBj pWFva;!MNrgq=Mb<2QYcd_M`%$dceERi>=HbD9EbHR7!mg`9A<@Q2qb_ literal 0 HcmV?d00001 diff --git a/windows/security/threat-protection/windows-defender-application-control/images/wdac-wizard-supplemental-policy-rule-options-UI.png b/windows/security/threat-protection/windows-defender-application-control/images/wdac-wizard-supplemental-policy-rule-options-UI.png new file mode 100644 index 0000000000000000000000000000000000000000..53b924fcd9c1b8d764cbaa12ee7fac6805c47ad7 GIT binary patch literal 59172 zcmc$EV{~Ofvv!<`jfrjBwlPU2wryJzJDDUWwr$(CZQIGsy!Wo}&;57*d}pn5cJ0%> zd+)C9UG>yc6{a934hM||4Fm)PCn+JK1OxF)!uqmsA~P~{}f z$@dAEsi3SN5Kv7F%)37L_c@fEgt{XT5VF(1FYu-bz8etGVT+`Q;4e3w^9*n|Z1L40 zXWgqx*Ncq@kEO@aaoIJJ0v4?wj)49!&aggM7lS{BCMG6{R?`1|QxzL&l1T&4KTKSf z?Sm4I5QinWDU0muHFUNg1Q&+U1Lj(vAe}L^~3igKmllplC{+H04VCU13lgLmA z36BB+;{V-Ep0f!}F6&PZMwjK;`4EFS^5SP!Nsi+_1lYgkOamKgKoyNSq^2t%&fvGS zR3aVQhL}w^1BNeq@AaJ%5p0#-)XX5}oF6g~SE!u_iTMU|$)?&PCDm120yRo3ad9#7BSc+Y-QCSCHg3(4d&fz=?Ca5}d?85VNi8r+*8H zDgi_N;R16EA9Qx9a-ocsO3e-lYL! zRRzOut;*SKePDX3Ux7KeT0!6|Wz%7Eu3$ObL&`t41~JiEs&YF-lWwutWXybDEogk$AbGr**+VdTzO9+J9U?s2^T^(izng(Kt4<9K}BW80Jo)&_Vz zc#y?*Zd;a3_t9`W?(XsR?F!+Aj}Rh2`~x}sc(Df6g_xb2o14wB_V_asA+SfDj(W6LbC6zN; zJ!{oVl6>Rf{zgCYZDR~SVAiBXj>9w2b@esl-8pJ>Wh_mc?-`Gy>f?0i1atB8)Gq5^^UN{I`KeP>?- z=SSeEO8tin=Cgu=MksmAxsEA|l3sz}6;K=r+`%7{^^Wrh&D=u-I2_Y~4e(}cK)ySb zE{}_hIevBC6b@aiK{VHqAbTF?eZDr{@JzFLI_r374Z`qBjr4hySVHdzz0Znx_mub6hP@?yIKp8yu-MV$$E;dP2(9WhdiE|mfG z?9!s)yDPKTfQKRn@psd5%MZ19$|%unX_EOgy08d-9SafUr(CpN(?we6s&GNiS_BY& z&IcgCEBGs#wtXH8T+o?R@r$j}+UXJwL%vBDGD)4SovX6N$986Vj;-%KzD)LaU4t;0S*0KRt(QSW= zj=x2p(^K#mDYTv>n2>g#kpdscYU<6=c$rXGIB%qtPSUdx?^-K%6VU$%*w~b@D!nOt z+EV$oX(4D`;j(q1AQ3GWy~N?$gt4RsJJwoz?$!R=@D1iIF~<9KWJr|wZ~pM(9BElJ zp4Qg|og)!~z%1g+2&8UFDHSdwO#k4T@8=`8F)QcG7@c0iDBH60^)D^#jR;c9D{ZgY z#&ydsYcfcZS^BHrgjLP@7o|MtgOW3x*dW1h(-^)lRzEmXewNi)4&Vhxov9wc>H%0f zVCu=fEnrKv2JG4U&77;Ntv0qQcU072dxzcCL)~BFXips-XEaRS`@63fWEZ~QB@i0- zY-%qUy00E@glNIjy{*ies?=E=Z!?}-4SKb6x0=}s(F-5X2N8e9oZQQ^;Mv2s_RtCXtIep+I+tIm;q8-4|Q6?XzjyfaPaPT*$Zpb(IWLz_&VM5ab)| zMzMtaBmnSqT zqVxN4oOH_gFh|o)y)j~lJ#0*wE}OhRWxQMq{-)36!_`zK=T8leSPUCHMK(Xvf%kHm z1qAa0j3O*9NIx@^Z2R9(CC*MqjwKVwu!h>0hsO zbw5AL2hCyHDP($Gcp$sVvY*&pfc`1#>A)OaZV?7G9I{etX%5i^nZqTN#R=i+1q5@0 zpd=kQva91Ir?7DodrG;J6E{k~ug%x%=&H&aCWyII!_6JdIFNY0PGw3d^UI*_F{zGv z^Mil1tV|$$&|y?VlLF1J!&X^N6v6N}E5*fDReR^zc2D=Ze;BkHq6$Zu`{y{H9z(0m zyc`8!YAGQu?uY`l2rDwf18x5oXPL8%JtKpKSWj0xL=eh8!|$(kradb?8t+C2x zAiQn3$WFl=4)$0i+l41SRjA(P64X%)k?`{V^91d-&OL_O6=sAc?i7QD$If z;ptkUv6L-U;(s>v=GdP{j!B4UJV)V^vkjz(^nQH{ol1{bJ<*qjNJ%W>oYGcUt#(=G zx)6K0FkKHxqy2*>LhOe_9^P2$2A?vFj^_Y)X!uRhoy zyG$O>*L>CAJSc?{(*Bq6ZJ?$cs$VVgi-rJ)QJ8$Y%WJDYv(Gzo)|Vm>0Vl6|qgk84 zArFtHuH33fVUEp$97St7FDUjR%wE+feGrts?sf1S&6tC*OKy8G&OFqGE#VH`T|Y4< zzf`BpEIAL`JGj_2WT7w_rPPi?5>0&l>vAt+)Ny3)%H!dk6kp9yQ@r=Ex=GO!qwWtblTa zw&zz2$m?G+h6m+#om%Y75bvON>t&2xeOcuU6Sz{-ISQNkXz;yoC`n&#Z^YRVupPR( zABy->)W0QOOm|ppi2m*PDP>x~objbV&}2xgaLHwwr+iS8xtILQ6_){Q@*P&N16fFD zjlmTaz!Q|KpHht?@#qJd6HiOr6THlAw03b&LyJd+Ie+(&;wrpNlasj-L>xu+0>i~U_N~DDofr|jr zgw$MUV}W1EGG+-*=?sQ8}JH ztKa&cvjlT54MriLyYW18C!mOZO17oJ4luVw?~u$NJ_+uVk@ZI%J)7=k@F@g7Q0Lf6 zwQfFHp_fDaUeMg~Mk?TtqZi};=u+%`3jFQ6j09fl>zU=J1E=H;Sx!0J-a=`?`s*}w zIrY&GFh>C$hMf4lR+2nX0#?sUCA^VIG<;-ktM+Yh6s{B0QD6UI^Qv5$S=kUMb9j1W zP6}Ta%7F#gGe}6Gj*PA_eJHgh1)T(PVh*`c>|rK~sS}8#-N{R4xqOXzVW8{M@`nnw-Z_7=8 zNqR3&Xb~@Xn?7cs&(a{fNai>B_Y*LXH^apP)^KeJWLqrD05E@w(p{vE9hDVw*?s$mS?G3^JskKwk8Y4$pHFS&c1p=G*VA zugsasg_^9t?p%~nB$}d6c!O~NyFVUArp^v3+6suamh1KC<<%Atg!iF$Y~4M{ssDW~ zB~7mgKTk)nOb0Qqy;?Wjn*8y(_A4I4I@M9<1q#6v)xksqgb~=kdBkALSJ_1;w*Xm> z`CT0aR3R(FV&hD*K|t)&XVuFYo;!K#EgCK#9#PU)FhaciN^TdjN>Nq>_qE=pmfP;6 zrYGAKHTa+uBM9%>tpmdhE%|t7(bmiVQNxn4fI3%x|~>nTK=Qqp;r4AnG)RPwXC z^a;K#D7Eb#v871#mENh0zn{#({mO0c8Y_vYl+0=8db^GPM5XBPocuXV@BY2Io|t{h zKMM&+<-^f_U*;-o0>}Rdx>I&<+J+gUOvK1&2U+wH$a%MHNg7Q-9p%614QH^bPGS{A z5B=83AMuzXZ4UNga{#Y*Joql)7a}Wt2z>y{`ZeryB14zku)1SR(k6j+@e% z<6of{qmQM;m`C*lN#@>?QV5p#S}n*VYJe_rSvk`{tU~>&Ta-__y+kkBN0^&jgDT4B)z;t2BqpEA;_}c-S+5}!Jg6Au8!^eN|Lt?dlrWu%!2PcxMD=xN#7RKX>d_9QjM z=qiP;b5r^woLg~Ss9{OgK=`+Pkj5!(q+92 z`Mi*@AaRvQ;u&2)GrYR)n6DUC=FSOg_uuv=ds9oBPAp*Uizjs7&+Flv6m%zdjou4)j>tPA8n&b==faIR51-poX(fi zaE}CYUk8mXPQ~H1S_=#LAV$e20osp!c$A9|BX{@|S92!PkP8S@#Ww2}X>4zP>&XbZ z&(F{H3$A?N z?0jiJvi-P|4Hgc$6btRr>D2bw2>&=7!DMr}tqwS4huVgb$9e?h{TUSNY|7*@-HY8Bx=kUFGt(+m_Nkr42^~HK)U7Ee)KX z+HiR|x>JPF}y#bud^Q^+$y&Io2W z`*E%+aPRMAxR)KrMPw~fmL1#0K)&UX?OEr>vBCN%8 z=SWsoZdWbwz3ta-EQflRtyY!otGJD|XAztqN0h-}$MFre8^thuy_2PdtiQB5^V(kX zNHLtNyzZ{PU@C2&Z?f?JDmvbr*WK%Ox>>w4wjD)*Lo+UNDatNknH}4+1q8e$S8+k-swk2b#f*M6>yR&;oHy}b^yoSd>fSA? z6*W|qyX|qlmB$BSXY2kob)MLhVO4RS0LG2+zi5*|#%T~L9rPEvP>* z`Z8Ib8m{FyOpAB)LKsiB^zNnP+nXh1*Go6c&}y>NSI~L+3H~hlAh;^6b~V?M{eJu9 z^Vj<%vd158Typ#**I|!B+#AlT$D-!L_$u<;)m%nn=* zf6a%Bws)NabNFJplNKvDj7`_4r4o87zgh2w5N?AOW{cx!aC#Z?tL>43SzEUj`yUb& zyd(kOz>`x@6gM`y9E>LA!|Dvh@PGbRQ#(33a{XXAn!r2SO2+9u1*NR2>N7GF#zA6V zO1oXT?8&E|@~+~c1MMV_y4{3WS>C@lJITuYLc;bl@QR|}7ZdlLdq3`gISPq--JZL; z&V0`qw6@fb@ZweA*!fF$cf>pCbfK-d(QWf?U&q(CjPs+Y@HM1cLuo7xr1H2et<-z~ zQBmN!q@y04pt}K^9m~(Ge36gKL-%;t5*>Sx#62hU%SyslK)3|A@&n7m}DJ?Qcm;9ZFE<@ssqPJ+|P42N7% zB4wEvhor?pydBM}`SjZ@W5Ygr5!eT#pd!s~O=0C$O$WNXTw%=#T8t15My=Q{MysrD z392Yf6Aw{taWx9Vz^bABHpKsmw(AB5kp$4Vfvs=8l3cXz;5T|-cG;44?6BEpH~DPW z_AbV;rM2%g&x_$JjJ-VYTCS|YA8RxaRn#M&YUxW!LHzWWhevkh@aW?%f(CVAOQRYE z5ZI_t*PU1{%)Nu5;s$W(mtT8;Jpj*SZm#`GK*r(}$+vu35ruEbgtz2in%~x;|I0cJ||y^XEcB9q{Wy9)MDyH6AhKNhd}$M#`FYe-w(Ac3{c0hEb?XR1g!CjCVS(Jd zp`@*7h{_cTlBt89dFx?6Vb3(u(X`kc8+o{i3=~~T+*_~h=b!VzoAaHn8yBk*Al~2K z$1;iKynh3(&okXGDKUz~#YNSeYlxU@bVtAzZhw$E>ZoQm6qu||aM@{BvM#2~toLKO zcYGLSIbY)KBG$=qvsLM1malGrJu`)`wjdtXq;31n!DR1G$HyVZoo6aE^%DeXIzRc8 zjk3Mv-|dT!D$vl>zDmcbEy-qBYic%X>enwtFWGU4iN0?Sx%e2~qGy@mJdQ3`=nb{N zhokg-zmzodvNJ%Kx`c8Pb(@q1l#R6oGEgy(7HJh@)qKBRQsS{A5K6&GHSm9vcDX)O zl@jmP>ZV+9bhsYi?U5K@z^2E3-4G85lXv-EBt5szK2Xc|u_)dR7HnOpsPdTL{5b-4 z`nW#Cctf!LFoCp_Z1Z`&;o#A+KQoDy6}>4|1d4-7SSVNT{HX7hZ-Ybe)3Vll%xDka zwTD?1>G(Rsr)P8w&7>fB9IZr1E`Ql+tMU$aCoUm_NxtH6b^8c7Fg1LyI$v>pPC=ul z60gxp?;CSH*QirPIu2WlW97G1)_U2bo_rA?u+NX;_wBMfnEiJ5>ZuTK)^iXH<%SpW zpx0SLE%ojofW>1Mcd< zA0PNjwyX7`EzK1|_5(WE%>{TE&cd2Zm2_`%fr80@1m1mQ!qGD%R%G#s@_-0639aN@ zuYIZ?XsU>Y&Z}oWHR` z%xrA%@W`%s2!VP_KH-dGEGY>A4}ziozECcl*TBKIvr|}D;ypTp>crahD2Y=pLObPf z`R}eRU_Xk=PvsNk{ofp&A%kzH5acs?3Yrhjo>aBb!=H_2o(3|4?>29KZN#(W!Mp0$ z>-F(*L_9M5HL=ks6J3?Z^=?}NkW9D}T5dGF?Kf<)etT`@Q7CXiPFy98@F}t_!us_M5E(L_3OwvQ|DmvrdCZaal34i}|4Obs$`v%K~ z1;zFAh*@vq&cnOZ+EJ|wTfgd1cOm(J_OEsjn45@ZR~ibQAbwpq2B+mTNCVbdPuI4l z=~_@XDs~i?XwWO`=(P0}w77#;xQ^(bjHuEuTAfDH9L{_ntye5`;A|tj!2V|0B_}7# z$;iaUX+jEK4p#OCQVln@k#%Mp0G_;3=6~=LQKUjOe7tOSDrR5M{YFd6jd` zXIx=#1K-?#RnQ9sFN!-xZ$%A{8=0xGa^i_jU-Pwhf^7#c2RR|iMNS#Cp4|6 z-h420$B0qI)SRy{t{P<&#qJ8A#jltwz8fg2E2fk+{U}Q`_Z+us72ZCVZ(Vbh3-fnylu$AAGNq%N7K_G@*lyi6SYE%<&0ElwrSJ}NZ0 zaF;AAFoG1vKl%*HNT^z(OoF-gpx$!ivR_|&Na)x&d?nnj*hOiiPI9FNn&g~)STLQu~8?M}pe+SYST8=qu7rE^_!KPFl0tf7A9uug|l?j!aa=tXm~JHp=6row1XM zF1Z!{pu*rXbKA049foG)dJ4E>6BrFm&y~?L9Y1l$zp-a3x+sMgD^S!GNe*awvZSQM z9ETv`n+&K^tPUH$FAn%mKGsHDL+0QHxfccC_V!!wN$)E~jcU>(sT|Iq>i9IXjTEYK zNiw`dYiHAIvd+kJKfAzEl2oB8&L2*IvZehhayUn$%dhq#Cn_CxXII#{Ps`b2ZmFoQ z($jDFp7PFM;kr=PWS}zxWf|-#L7KEkh(kE4AMw zeGEI(5LY%+#jADmhe?YncGkVb-5bGoH4y(HA9)25OD)_3-zP&y?=S-6w!2Lw~kmQm9B%ky@O{De7j%X=REp%hqT56l?*Mou_A8ys1*R!*ky3 z`$4}482KjlsUNlj7>Dznx?Cq1kECKI8BYk_oZRN1j+hcOBv~rFl9atg)UPm#93RD5 zXjw}E9jVMTDB216d!7JEv2&`1hM9uu2>X|@>}3|9Abb?%`bYtJZ#Lmw6~ zEx$O~5)gWTpNAGLMVcyWiZi?O%O1k%6wbP)Llcf?Y8q}o7q+-rK}j_&L6c~Ra!1M9 z&R{BpSih3xZg-w`>FM_~@|e1sHQ;t5pIdo-zWah0Ct18L;pIN2V6ax$m1rMnbjY;D zx@B(y-_0hchCVSMpFTaS`d$I8Yn`~JxtkWl!9-bby{czf9^yk?F~AuYK7`HVNH3`; zKf6R970vsY>o|9poNLjgY|VVsQ9EXN%XV&ucnT1m1tod!7oX3wJa!s;QhZWy9!>*} zfWH~SeiRU7xgWfx7McPPNEL^0pv}`nx7R2{|{ zK7xnYc3lYLVsKTFhEQl3*`_~{bkZl#DLi{M|K^@Jr-JqhcP?#ov(T;{LE&4Y;Hsl7 z&?`8Hw291FDE|ie*oNr%n_MBczkKB;{`C2aj*X|9-#kbH*n!R#p=nTTi4^V{;icOE z#lV7y`(@}uFICd8WOg zNz>P(n2)SGk^TrZh!_3r!OE5n9Qk%3L5bw|cS-i{dE%=56MVV=fl+T!Y#&=WC1ElC zFF#wz>ONu1T5ti5ol60cpBp@)UQdb5ul0DHwM(=?3FwLmgJ{Lu8qzW4xh}VG-%S0X zm-XyDK)%oTYxVG_D+)CEJ!=hzhx2djD~8G;0TGn9=C_V)Ih5X?(6+Y8HZGRYlGf1Y zV4npdBXIcC=(kIjrfrQI+fuU@;Lgtq7c6Yr>!4S2Oru6H`FH6Q|7JV%=Xh-gs0#w)(Y}-Gide!soJl>K7 zJvFXTI!A`OXp&>V#eWUIEqFnOS`2jUo-7|9yNnq;=p7E^ubA?WCelDh2Q`(?k5B4B zVE`sM@pS5@fi3ib8XTHz;rK4YPg;|4@Ac{0W0NQVv-R|=hnwr7@C(tEtx8Tr?Is1- zPAY+Ur7kasZ4%LKs<^oiW)1~JSG-v_~)Ap zzXSh2C3^mMdPuLcmvb278dCC&@qZfeXqr&v7W?P#i+}U5@l77VCYU2;r-6o~R6X8; zCDcNpr@BEx1S^%GqOwroru-PL=Vt0hi;B7(9uE9}Be27eE66TNqmJ4<2w!zx#|tAT z4E;R34K}Fx%gn<=c=knq@C{R6_@N85sf=qv1iAdC_8eD)?T&VkdVxwgqoG*3-tNa_ z-+ncDeKe64QwU-jxZLg(id+bjQ7xaPUHIk8oUEgce%mab-@x_sj zsbRup<0PmM)S&Hhqx0BgMq3nZ5#8Z|YJ9KiFu^MkQ}wuEeGEVyOAOkrt`&^x-1qWGZ~4ge)_5cR$JH zS(0r!lWK2ih7-(dA22FJ^v=KQa`vNZ1lb^$(HglI{~FgJ)B9HKg6H0FmHF@>h3KQe zeBS#Gil%YPMVfO7S9)EDiw#?G!eoFCxdlXF8U^Ld8gS<{2Sx5h+>7WkbsvvCU) zvTP#*j1+3B@JjcnQPICn(R)6X6&KU`#O0=M?$9+IcVs2H(D-_u^kiSUMTvUi3S>sv z@?}l419!4KFUOenL3h18ir0vE;77#&cedqQd*m^W23A%M9vTmGU9arDOY+(pFXg7R zS92JfAiXb}Fjp~7qMsjifdtw-RJchJX?;_j?~B-JaTh{bR4qj2+i}5VbVJC(4YU>3 zB_?Z6Tu1)zkX>GU$>3es1d?5^Z-e(L9d5eeZ04DLT|y$GngKX^*h>Hpp49IYdgc|{o2 z^?L-z|JtuO2*0)DpPw`ebF`<*ZwEu>(OtjtER-_kQ?viLk1Bz^-5-CF+q- zKHa77+APa{{z%C>e1xxff3E0|dP|{wek143s0pi#+5Eg(yueuXyv6Xk_RpQ2y7Kmg z?|c68KCouP|27*piA>*#3Pw)%F@Zw?9(9>fBS$$FBmu6}J%j_39WbDac9$lo>B*WJ z#+u(uWN7g5>Az7D7(nG&*vR}{)BgnJX2Rx?j$SIwJg_Hdwc#4ejN|XbguC0BPiDgc}))P%615t#U*rWFQ2Sj>lc?!(wcFx3dG z?-XYC*vZ3)q@qz=f@}lAM3K+*k|L2I8c8%yY0cf}-2*H9PMj=TF*$)6aCE(Z*+kA* z_BT?3lhS-;SA4`2v|>k>`ETOBhLp!gg|G!JY0m4!df}H5J5XS}24wx6)EZ*T7cawP z>B4jqfoHWLs7I?BSCF#Ex&L`lxkTzt~ z=u=-3IVtb`Q}TCQlBor;vW`+HCqR?bKwFQ~o*`sd*$Pp7szG6%UUsTcs$G+Y^2>?F zRhI?!k0j|+7Jncu8Y8TS(=Q_pMdnl|?B$CF*$*!!roieZwvOD4$o25efa2<2ITvYT zY|qFo?X79{rXX(OW5a+x&}p-o37Y0l!{pDwT9-)?l}PS913wuLSV`J)AcK~x_>$Jn ziW2!^VTOW>tAxfoJO%*&69iI$OS(=d4}3B)zh}*mb#;Ev?wbmaEZa zxOMFYPMOwxRkZSV_bv5gZn_HA8r`WdgXQ)HW5oUj+VrF)9+kf*LlReAZ`0hAvW2dn zPSK)1iOYbwvcnc+^O{l$v3FF!6(|ygfl0e3op`?!{hSp~I!_%K#TaPkca_@VM~ieu zPU|Q4Ys20bzj>N`N%TVKS1OrDq+WdXIGIjH255eYXMB*Uw1JY%w#=8#!K zAs*pbDXWL^A4#=yY*v?6f1<)9B@0_2K*KT^+KN%o(GCo4Q`Ugf*h*p|v{{H3duf5v z2Huiaqqz>3?iJ%s>?C+w^*s2}>rdR! z`NpaVtij@B$mmRtHs?F4v1NFd!k-6IwwW9`&m*B-eh~EQ@7-}IrcKuB) ztiiXZHwoccon5VveL|Hu>(%yE>!%9l)JWmT#Yp_-*ee07roIWN;k6HHtXVr8N zlz?>l0HONF&sud!^PXKeE4?aT%NrLoxQ=Xc!*V4qHlO)r{i?z+HInvjqXcGhj8{_Q zZkQHl=~By*eB(nbq=*zo+wfd(m^MA>*q@gg>&%>+ng{!*NJu-l=(=#o%mL>gdB=~@ zeCstO9Jb1uQ{6%Nxt8AeiV?xmzq~!nRGIII6FzWDcie{lh8Cb42be&vy@`4e4;Pn`QJbV*O3~9uD*#fo#V8-&Hc8C%?Q>c2*ld|>0@18N*j~5$+4F& zCr>8!T9i-H;_-Y}RFmeGl_=(;>|tjD(?qad1FQ4Egy852MaDYU(fcRN8WYo60{*^m zpn18?iElb55mHoQ5I}kUTLnb)RGW;B=jG- zkW5zHOYd4vg9wCJxQruMS=B<#OBzisw_4^Z|tw(TL*e}>K)?(GV7cri1mHwDAM z$(v}lD%KHe!FX(ATFL?pRWXu}P3EF(i6tHzOLoS!ZVbI&;r&6!&x-@(5Dm#%3Y*51 z)-PJGFMuEEw0u$;EIA_eaHvyaAHzvB;Kx&O_ZNAV_47^nhEjG|OoQ`T7K^|_gT$Fy z3`*161X#AW1#z$s50IBN;*c}J>5l^tpFEJ*=XnvMEpF2~gywE&x`;Wo7@gSt5hvqh zi1O!csvy2rQ5ENavcteD2C>~`6Z6wplb$s4mPzrt@LZ-`xEj5SGz9F&3MTjmUHf$B zR%G6eH+3b zl-HkcPVeG(5(}E`DwivCQS49rsA<%-j7o}SnYlX~w(XtSY=Gq{R^2!Cu1FJJ+3XyO zMwDSD&+mVkZfz?Pdv0q@nhOhd2hVBs4F=K}XC@9jbG(L-_lviA1VIhu6Vkbe$dk_w zb>=h7F~g4@{j%*8{`DfD=p;1JV1t;=%FEGigovW5YySs$ru+vz*>Q)#UJsri=*A1( z%(V<~40EMNY${IT9N`IlxWO--J9Y4h6ZkmeX@jKYkfY>*XEpd78F=psxk!>Om&gmYdk8CR6j$S8aO|)$W zO))r13D1s4TU^4~Mu&;V7{Gor<&;1`fR&=%EZ*lf*+K@wu_s`o3^R7aghwS`V;Ak3 z(Ndfe`xo`n+A1jK0zwAA@+LPh!fl$JrizWSUMDC?RKsI%DS$Sv@sRlM{Ng;Q z&U_zhWt=;d&f-K+TeyB$CYg_-eGOyea(_LYNsZ%gEE(e^U3vgB9{FM_HYQGwT}*cu z61KAobfM=m%k~->wc$Kp{r&_&uDfz0b#WM`rI2MVKqH zTrk&kPcs<+XnMXg80JX+;0|%}0QwMf@ou(@AEaxy#97*bD;)yjroFf zk{Z4jedVbiVyyX`^y^cZ<5_fwYSD)0%Evuj5*c6y)scOQhVk^$c6HA0A|xxSGL>Xe z*11W6WCP9Jb(P%vk^y2xDKur>j>GPELydsXb-$`h=|KsaNhN)LC-63;{f-cB`+&-} zQE!n-<;vmwlMYb!^m9n#{6#N#y+#;v9v(;1=6s32ny%m@?dz_&4<-Cy5*uVEXtMtv zu6Jc-$+!QyvA3ky*k@)j;d?W0l0>Pim1pIy$;R@6%SnV$U&t(cAjjw z*Z&R2#!A+EqrU8kbQ5cCJVcwOp2+cF6&gr~e}XqJlZBrIPC;VRN|pIx>hfl$W+U?J zq#^o7K+;J-mAamU)Ce74cwJ14(_Ofrxe;F2Wk8x6sCZZZ^KY&U#eOf;6#Tha2Ul$dE(0+9b}sh}hX4xV zvTeEE5_5nC*c&NA>UR|(wo*qP6arEo4*iLpF%h$)n%>iXC}$7`5b?^C($EY7=1HfC z@wEmj7GQ4A0NK&o^fY!eW510UI-Bz5AT#FKg4*C_F)+@W~#A1sNex(?p)YG zpJ?(Nr>Lk!5k~ja#s)T8uatR-jKs5;ZYBe`O|A!B%-ZmGc&G|!iDm4`3>&kyra?(@ zSCqQ>S93KbaV?OliJIeGjycW3SRr23@g_RkHZ>2e%&RfxqNW+j-x*CbjK3hp^b1pk zwVnQ%nxN;GJYUmVwWrZ6`R=pfKd`qgt;bR`p>&_qaA5d+u;A(@_ghR(!q02CBkKrh@_7v9Y_9?qTN+?cAQ)Yu2QauR z1m?f?v9wc$?*^@~++ zYE#)i_^L)$I42!K)FgZ~%@d_90)Nm2GB_ef!)vMw^4dth1T;7-ZONFR;tR1`Qo}g)C)Z|Z$!nNjb=E&77l&`vN)teAD5s?u*wd!n`Wu>Mv zKU+y7K+{^#=eMFc1$?HDkFCOXB@#@i=iI2|r&C+W)#V8yunr8-v>IeH4)7PmP02h; zo9{1>yOFc}C=9i%XDuIO468tCXR5JJ&Y9ku&ZEOsAMf`im|1ypD@z&*e>U0& z@R{HO2EZgxFyrEW8jtT1L9wa-)r1EZ9j7V}$>`rHB%(^fN&v6g%NYd0ih>}@4wtXi zG~Yp5fTLxdSc>-lts7V24!0UCEeH1AH@OS2yZLOIGc(hEaTMZgbfIozuT+*sB2S!Uqq9@^OBZ=JT+2N# z92zi;8&YJeDlfUJ3X1j%-;HeXwj+A(uAK`@R%TIF6$p!_JjAn%4V10zr$nyfj(h&u z6$ZH$uj3kmf(rm#tvPSOAi)HbUyaogU`g)>dbN5S93XU*Hq;1*wM zgyNzCuD0q$AFS4?k|$xTGCI?9VBWDud!|8TOohi9@8UIeJou+ylP@V?#@3GBs?}T& zCoCr4zpE^Y{GPkT9T8ZlLlALw;z9n>HYTk^+1)K=F~t5&t>mr+y1ReZerD-m609^F z40qkwsLr&zs%$;EXjc%ftcy-au)Magz(q!AQ)zD6pO+V}WZ@+B*(eX@4Ndi{6n$xI zs;y3k&rGnWJRIJ%T2IEs>&!XAJVRoRv&b3dvC+}6kLAaj zMwumLZCE_>%63pB@^87)hLMw|ytG2p80-+lb093iXKOI+yKxJ(k~qR1YZ3ZozDCncYO}2%;FuU*LsoE`vTxIea(N-)epKssT-8yVi5~}grAYY| zgKfwaq{nct8na5QnGBp#0Por+;V8on(=!X9I>=-=ymaZ272&o6#MC@&_~s`e<=!x9 z5J)E*a&IY-uS8>Oq#>jBb^~bqGQS(OY#EX7gf3(X z=E4ferLw7h9y|XmI)t9|B)dZcwG85}iJ<<2M}GhRWZ?GNqRU{$Op{NFqW+uvM%W?A z%8U;f+^no%$FN8h3HVwxrD{3vUPCaiVy6M{f<;?u0!K?>PpKG12$wSc8)mESLX@e0 z;0OIF^WMp7-hPO#245RJg!g-{4O!VoJFM=m!R^ z4}vI5!!oONeCo2*$?JIA2eew_ohJ2@&@b!=JbzlU*=g#h38v!o?E2k8(r$c4{hRV% z_HpvbzwF{=Tu(TokE!mEt|)nJzD99sC#*OvhE!MfGgdWQa>#OUZK*a`&kymYL`qlS z4}uZOey?S1TVU!VZcq%?Ur?k$OxSV!UT&D>f4lCgrQ@Prz(P8^nTBiT?OIuvZ6-)U zI80IzU7_w%q|3%8OxXVs@E^i7a`FpIFL#E*Dp6~@ZiSo zn?4Byytmt{>W1-}wGRITnl1!0RKt!$Sxh3V7`QP17LwAhU2=^$Ixs?)x?hizkRkkW zuif4W6BnLYg5sxr!3Om7JUCPLd<~BhTuW%rFCuhtV*KYG+y8z8bb>9;wu^YGfp2+d z^R~DZE^qt!(#u+8de8vVEtV_JG)^3EQ4o07ZV#-A67klrAire@rhM; z`Vt*B@vv4kEM*8eZjQ?HQN9Z7)q3GNW5s@i3%eMlkz(dXkmO^=<=fty^cyna#{HA3 z3j9F+K-UxEe|*t+)Q)!Tqd_T*k~4IgY5W=bS3fS-57mZ`tM~g}UPTbfz0c@!{Z~?* zoU|xb@6Tc^*=!EQ$?MB~tFWest7@3u-{X_EbKuQ;YhI_f)sbTgS>M~UqWPe^0YlqC z(fae8FWUrs#ym!Eg#wgM81t^!UX|Fb5InsOK9b9o51AVtO^Ou<-M) z|I0)CrN<9>+lxJ4nHI0&{k{JQaFwjsc0O?UvE-rsPwXHIqNu2dmXOelV1zV~FjyeP zb}WnrT9Cl`DFq9o6Z#Y;OCvGC8W&ro?52sMQQ)l53K57m{VhG!7AENdQeVn>bZtp|oZB<~OtS*j7 z{iGXCMDx#OesOukgx!M^J!zAz)<@f5s8f^yH>annj(F5J%Gb^r)Q!zZ1LGVC7F700 z$=X&9vIB;a9#=gmLT?1e2#-6qrisgpDlJw;CB{`w+92}3=~&#P6S9sGJMt5XMzv95 z$Zt3Y*JaL781~7whQ&K7-KTJ%Q+li5gLiC|74ce+g^r)T{WBZW{v2@)C3DLJ<1+2J zy`juum>E6H8V>We+1&y1%1HEep{p(YzBPi_QRne=DLEBq^iHS;Rl>k`ASrT*6(p@oe@7m3M7n2nliz4W1Qi8_E>QCRNELakC))ck8&G7_1e-3VXi2N%JblA z^sH~SV`ZWD#nA$6Pl2Uq-z1H#;pw1li)T{Ht3b=zFeTQG%G#1GR4a}kFbKvsu@J!x z6h=Rek&D~el6ym=!==UyQK_|^$*qM9`nu9iX9?kt<(U2TAyMeVocoOqL|l2DnGm?X zGjlanHZRUCp!FNMaTXpN;lz7cJFbs3!Eme_zdUQipOuV+=P8s9PVQ(Hw5ksp{iRDI z?34@^jale}`=0zppH_CZp8guh1u;LZ*$V2c)Vg>I1sZzNHBK?{=+?M|9JwvdL4w(w#_VKhjwgwu?YA(Y!*@K~8aH#o}RNkAAAz+(_Z z996yH8Ret_Lz;I-d^Of9V(zERju4Zw_f5cvTka*G ztj6YRe}Ar^t)@gZ8HIZ)!B4%|lW9v=)7{QR7il|k=?z2`QJa2ta(1JO^TsQ{D0G>+ zHe=$XR-CU-UjE5xxH~u8w)6!fIib{I%{}+R%=CrPpJ?&xlRterTd9>(b_mD={ zEhj|OGzd*=A2!A3#Ux`aMb|TXhS|$=HsYsTUK<#-&nK!;e$MM66^;s{Z{r4@#A7{% z@5ic7S4avVYx;Oy+Z~nlt8=GVkrI9TRf(|RR;BI&3l`&-pVSx6{_!s zLsxvtJT({nL^A$~*18NQLp4!E-Ky+SjUhRnE~iKjo8uS+2~V`|4HChPL8r89-@nG6 z;3v`6YjziiuqyZ*o_CsQmZl#=h$yCwne)&%MH#|kRiMF?q*o6hkl4u2Fr)hJ3;rfZ zgBzi^82WFXpNjtU*Rtfsy3T;jaL@+t^Y`LSkQCS!!aOp;ON%`*GSe6|4&iLC=Xd<^ z*XhCNTJ-M**!(buGldD8llxq(SSIcz0WQJC0scsaIrwl0o_42!Zw`)7OhnOd&=@w> zzIIivEYy?5iI6lSQmLHl^QpPe9jldTzmXRDsY@ZDi)_#^qp|rwC#(08+I}5rv}&=L z9FSwc(Scxh0fH-WvyHejT~fn@7U^Yud9M^~c;#Qx^QDHKSpUZ|we3uRx2<(qjEkC* znx3nOv#c~gN{fV)i;+1WN9zaRC>d7#Mg}w5YhFz`(?_KoX1}@3?Nvks0%`_6><@_a zDvCOt9SkV*s6zvCAERGX5LW16Ajh-lASaG)ROw~4p6j|BG)sxVR@@7!N~K?wHw0-_ zRfgm_mO-&Dmj|aTqGozq!1M;ANB0N^mSX2g_*Og&rQ>o>>WJP`4XvHChEO*^?Cd@% zm7}e^P^ca|!+@QWqkUi&j9#avvy$ioT3%@q_*S`#k(*o(w!gs8N z26~^ca9{CPgX{VqKG|qz^TkjI1+#lvow$L=p9rLKM6}-=?sTU!>9JdhbA!u0zxSZ>~Kcu4ZRPr}b8sI#8^qa*X-Pm~yX(l(f3 z6-}#IeiQP-`~Sx71}wi9eu9`82uQw(=%A68nn)jZE>YnWPY!LwXUAe=p)F59kzZ?X z1Xgoq)(jH`PwleF7BnI^@vm?Lf1uNcEXy$#;|i& z-pIzy6pMcLQw!By8L?B9@-`Im79{fESYe0p6m`$dSB0Si8j)NR+ca&yX@tpZ9P7)N z9BnPm0LD(Rgpt5v*lf9myN=#1Ns0&SodcPKV$96d)6%J~-h7eAo>pMQ=?~P(T7#pY z)yH^RbvOzu(=NpuokxkuFZziAs^dHRQ)1~fb!dAhm~5cTk;lOvne!h(NDY627iRj{ z01YwlyUs<>Yb>Vk(@hMLo~X}4 z+M!puVQQEtEoYDrGS>U3$?Od^>{Nszij>wa`Dr%x0qhY?BRs1wy~Qn|5TufeU!HaHz;c>JhZ)3!PmV9A2L(z1ubl{H$XP@GEiT=FY zLaHO{$OoG5?pb!1FX!85he=NsYoKp)(?mf{0$)W7$``Sw(YFdzU+rCARZa0Xhg^s} z+(vKB+e^xnowq}jAu$Bt+a9ab2xJpi}(8RLn!j7z$Obg=bf*Ak@k^} zf01^eAvm*t9|IknGO4_>74@*Hrp~m7hVA68!pRczS9gI1LX*Z&sJzuGSob@$=O_ma zBbl)Z2e?5ve{h+a>@bLhrxgMzMf9p9f)W4iNuD@tZJ{=aysEf^yNa0=pP1D3-FF@t zsSP~ztW|YE#L;Y=2d_3>nQS>)m#uFwlui^yw%?|ryFN*Sfi0oG>Fy$$dgj}RfUBA0 zg`JYy?DT;ie2&wRn20E6)^60eWqy}gS#w`i|Cp={^!@f%CSTssDm#Qx8!>nWGhBok zmhebfuoP)Q4J2EW#3vQP;*mklNaY;VR7A=V(K5wcI}x`OC&}JH{2eoRdIDMac1@Y) zVfXZ8076T9U>)B4`&LyYN$n&i`{%=m^*d;aZ6S{jLG)0U89BzViFa z3tX!yLdP9#RIwP@CgR@7@C#p`08*v+U?@ujD7XdCMpH~py z&)17zI-q>oGdEA&EBnhSe=7fKBeHqD?^%LlKaT%!9hX+Uz6qivfkLJKaNw+>doRi4 z>q-{TTIT$r{yIq_N9wj}LNndtEL80C+~jHDFfVG0rrg>}K{GF69N-OCGtJ-=!R2dS z`Ah|X&@vvh^@KfUn4etsX&BA>wXS!%Ysq`Lc-1NU8Ir3F!}XZOti?|D^+_{&K1!G4 z1@n0rmE#GL{+HEOF+R_fOJ#AZ{^c%aol(lBm%By;47!!RfBD3fzQRt?_VWsUNvL~P z=>N*iM*-JWk;tqZtpcJ%{lOJZ6Moa!`^MYR3@*p@ZENFbUVA&G2+j@FXkyqlkCmtu z&17?ZX~YK$?T|&1tE^k{a_}z%L0c%RcI;AfykbaopuuPJ^g6YHRTY88C5~K`Q0|3H z*)jw8#|L8NrgmUfQV(?Lzh}%x5FE*mII_HQM0W9sa(Il7$g0iv&;_CUsQZU^1w7!` zn3&C5!@%Nu~&k^RP-m)GA5Y+2hzl z%}kDD+$%4%UC3Sdl`lmRxZtY1XSuouB^;T_&<=n!m^>T1T!Z6h^(LJf z9`m;ZLu0s%Y6AwF4TItym7fujg5(RBz@JV)3p+gkkeK@cRzl=(+|9))N(%EDZwmL@ z&kl|0@q$t;75o`|9`-TuYdY3y->Zqq84HoHA7GxFFW$*C_&=)ty)AGmD zP3rGlF2!Fx5mWySo=A&;N1!)k+S8kpnYbc`%UX=;?uYnN8h4{!y6aaMfNG_YijAYQ zy0AGj!$g5oRdJS?h@i|Kr<(5MD_%HTa({qAeJQ;+LU!KKA^853pp1#>cr8t*YzzeA z)UeHU(OSwGDam?yUR-Us0Og{>%!&dvF5YxZl=;!DWsB`$!e1iH*DSvCIB|kb!rxmD z8=>zjY)@_cb1SU7zQUcCdw5h7b*CrGEj;jO+T9YE0W?VxQR0CFq*e_%B2i-W6~@V` z(gtYc#xJEmEgU${xu4jToojaC9@5{*aHBADAU!l7&Zk}_(F4r=uU z4|a``;xn-Yqgsi`GvZyj)C8ikjCgagJ*C@(eE_7Zn^wAWd|BcH`sC%v9ZYPVwFMtP3+LIGCUxlfzM^e#!p=B zVXj7}Lbr5^@q9jQoWX5T)fjBMDQ=H4fj84c+ z_YqE;&BSWtXLl(L57ongj6fgrq*+O=Q=Q@MM#7tl$*}_RV0^) zM5y+hlTt0B3fF?)rwmy}9UuKxLdQik_k9P!-Zj?<6y6FOA2n>ifVlSUzoB+J{PDB! zVTi3&AIq{lm9Afmp5lY^8T*lww86YGQCAaEf6G?YF3&D78l7#D#(UCYW~+5Thj-=i z8(2C~7=|(ZhNYilsp1z4 zBX5v>#(|5~R*7e8O8*Dlf4~0!En7z%(SO5Zs2HfJW%&A(Xh$fYq~U1Y8~3GP8j^f5 zy0O10`R1Bg-?xfm_pbfh1Hsb$c+hws`>5R~4uDVdcOsm|9=y?}?ChSo=CbDsy@J)- zojW;5{A|1&>NOACz5D+cTtBG!Kf`s@!v+gwcYAE$WTAiD@W zZA!n)VPJ~we+(N9b8lO(`CRW5`E)i{Zk$ma>gJTCJxf4#o8SB!fB(;*z50Iz?UmMy z8UHh92VOT+4CA=p)>q3w=&PMUS64yKj5Y=@C{-f6TPo5-@-L9>6M>`YF@FvIv`4RB79x| zxc%?4pYIPtytbZQ$t*#}xRu)O#3CdIJ3%13v_7ZR+c4y)vDWK%iT!**8k)a0bL|e^ zQmER(NQvLNIWXq@5mkL2dp+7+#tE1ZfAZazZ)AJr_|!IP(+UeUhMvWZ8Ucwrdx-d| z;yWfiu=)&4>6jBE6DCHCwY%I7%oiZINCvV7%OiVJqC~PcX+^?f_Z#)J#8rv}Q*tON z#anRFkiPB^L+BI5^uZq1{UOH^OqHiG=3oUquDhKsNu( zP3b#8UU-39Sz&WZbf4}#0B)?8x{s5VdvW42&V>|^wTyxFRdXN}=X$ic;{)+Tl6hww zJ8augcJ^Zj?Gota{X^Ktid4wy99!Xo2O?e%b|YRVfP?4)dshGO^LJx!tVnEi$b;neC6@N$LYW(XC)yrvpU2LyW26jjolQ;6f? zQAIeID#gcToRp2_DwtCbN-=w*4XU>qcoMoK!|K?odr{)_npaL3%@F^z5ccX$l_HOY z<-M2`M7=YbH|o0*Ry5zeUWtN!oiRT@;mkEfw1_LKD$I`PRy2!j%8!X}YORY7D!bfJ z?GFH%bFsuGKfp|Q+Xgp$@A_*}w|Y@Re~K23_J|MH$K%-MY6M|wk*KKB+p#Gg8&$`G zX84DM^v>c~C*;o-v&S^Y>VTNMI%(QZqM;!0-^S9ZQd&AH@P9U@Xf1Po8q8;%8ml-t zkQqTRGNtDbO2$M-8R2aZL6(L1rzdH8r!q0N|1eu@KKosho|cJ zoW*L0ikEmZwS#v3VavrX8pC!`M)K0DII+6aF|U{nGNL-1Ssy39y4pXVD_rU6(6%(;j+t_sU-x z5QDBild0}^cD$jWL%=JOfsv{r1s=CHw!mZnMhjh*3b2F(rJ$`2?lfxhLd~UC5}SG# zLO*#ZtJyprl8*DfE@ZYl+P=Zen{jgIBmat!tXdzTOv25JB`r|@C8_c4Ay-64H^l_J zLYj4|X$^V1# zHb5KakXZ2SxV-N$c?ygv+8>lK1O#uOX#5b&GEP4x&*{SyJ+Ab z|3X{03FCUufZk?MraF=Sgs zAtEpth@}xMN26$QGNb3!ec1Lil3HmZz8;ykG?Y7@FZp3?;>1X9IlPWzBUVn zDv)(_rP7}U4+^BDr!{ou4`ynAlbB=x|b+^Nl}FZ z@JXzg-P*Q>sVyb}F(m6_qnDoJzV~sjWM7Fz)B;)M`MRE3k(T^q#ocMWdIe;P+5z?a zY`^g4PXdK)@iO{!U}MtoQ|Cb3Lj|@j@3GSZJnk!oFakA2&~@&#pd(7zwi;Gorc>wG zd}so$#oXN-i;I&8O73+`+~aC*_y7RN&V0nvPZ1S*d3oy0wCG=xTeoeW^#iZBNqQOu z-T8*zSjB;t`j;o#Ya=$}5q9uJt?iu3fKUj!)1juzS$XO`aq-Y%-XucH{oP-j6nRjt z!ptND8+vbqdX;CVvJZ}c>#*FxK{@M9JysJ{idIPZj}2{j4L2d@+P0zSo0~X*jDEf$ zk7@!9-)=+ZoTf`55g2$szMMEeVxH+yz{$bE!2pC73CMYF%g-6&PUph8Mx`aT7>Vir z@fPmB%ekIsg}x~mr&5f_L3a%(IYWP5ZNrE)-!rkhx`HZkZpQW}QQ6Syi$Vap3SRw2))@OEp1c33z!?lS(-*uAY-f0uy#j0%oc4PuP z!b?wye|Q>s(+lqoWkHBk{e2>ftOENjl0yf?zLIqWOp$zHi4Kz{RpK_3&|o z>sJ=14B+>5pIv&YtO$x%W|gN1i~}+DIYZQblz`Rutk} ze&=or17~nzRkMA&v&r>oPGr5>VK3Ks%7xrUlS(gD3D4Yf&u+q-@-ht$xuM!{h;4`a z``#+U=aV{Ta8TyQ;&*H8vvIAK1Ii%nvn3)I@^G*MY#Z)N=ruU0*gsFNgp^ja7k9sh z`5XFPYWy|h=96W&)w*=7pW1RBxv$T_zNFktnqR3!MCOKxJ`ko3fL-Bp-iwf5uXe+y zq+{GmwA_0jfP3zG`@yXb_+Oft9?}NF>+vt=~hTp!DL04uuWR+5KqARvhmAJpDx`ImIM7T;Vo}VM(T(R zfg>j~429Vm71DZC{E?a3Fh0Ny2uvf4TUSQcN6}&AFAA_R7X9rYk)D>_irvqn9kw-D z6Q(%8$U;g|obSJ@60F-!puQ!}%A&nVZI8LBYG3_FQ<#r!*8IqGlJtf|vZtexfDHTS zOh#CA0$->A+<8l$ePUv;1?OcB8)$|JyT+sAIXB$;m+oPv#L^0w3Mknl$6`pP*zsJ2 z2032q8R{s3TCs+gAgN#2bwJBu94D=VS9gEz)hxX3+WGjb7$7Y|koRc%IQVyRac)Lu z$1&2dT^yn=D8%8%Ay#h!8$pk#l8+8&B$DrkXJ)qOTzdKC*FDVwxq0X1zsFyeP=Yp+@B&$ST7xOWknc?Uksecvi**GAU9BMTbNmU9LGB$S?&kK*1Y|&| zS2)Jkv7*l(&}Xod`0E+%JuKu%tjIz6IXVSd{NiwSGF9Y{_je;auJ#FS2sgE*yYzAP z-zjpgGouY~8)G}QIDZ|E-^z=$$Q8M?DpcX3FfUr6%Ec}J-@(SNS z1a0T5Cp4855f+h7=x(Rvt7Eu(u(P%)g^3Ap?~#h8I>9TCx|_c0vRUy-Jk&D*YYVuE zTuBFwrGK!0B9Ya5J!ZamsJo{HNkMwnF6_3LBYQF2=4&CXXZD%4ahRjT-eR3@S{DvmZ;|6Q5D+WG0j!d$t@#h7U zq?B##Us29p0Unu(i}dh`=Z5!9>&8t)S}%x9PG${{q(c+m4VoUJRlBr2Zdbzc*C=NE z4ht&YA5fnw?&diN)lSPA#_)3H)Sph9cd)cRj=->cHGaKW@s^b6R&v9T6cWOv?Ca@z z-ubg`X6?c!g#k#f?rdduq4YdQ+owzLIg2`Ex4zRd$ooXd+{%^pntTjQDVAe?O8`aE z{FTREkNH&wLdvWErS47WX#$mz#p!krtgQiiEKAwy=e{Tyrj}sWaQ~aW+r#wav1Fl`zZo53^oI7w*x4!J?p=W6dYj9->G9kP z)(LuMaGh0H;T!DlpU&P_gdb&>J;(lBxip35^c9TXu*M@A7+Lq4UztU;Nc@xh@;!qE zIE9}saM&7Pw+4wq;NRYV_2V&uA_S=7ZQwx~+UIpWyI#1)+Ug0`xY%&xhg5{am!F^6 zvoDrIM$bR{rZ9L3&K>VUa*HI@5=MhAxV|gsJ;nmjBRe`ROKojC86!C@ElGVb z4^ekMUqm$CQe2CT%NHKfsFJs&CD&bND%q@)T{ zZpNBgs}8q8m9etWhD4uIbs+S$E7D#q`>RfvSKG^x5TNfBvbfmo9aJ|=ujAF5<81II z5WGm_N!jP#wd#q!VmK)f0l*&od(|LQp?f#m{Y1dssjK|(Y}~(<_6d8Rf zIb*>l64&a~!SZYpJ=yJR?W=`2IXy_9{ssM;;bVLF*?CzE=GZ?cZ_0S(vI`rwtzJ>H zdtE2fKIv#q6_2yqi=!ym?sVg8Qgbh4{eiA+kEKo7!M5!=M9v4(+BN~ae;RSmz9*h% zs+G6SB=Y56(^dO7Pi)uYV;WyO@0(r=K-Rqy zw+ZqJ4=>yFoCaW?2M$V5K|`7A;D9xe=|iQz?UeS3g@`eZU=In8Iil{XeP5Zh24SRZ zODA#>1>Df_G@*+iS5$h$W%GJlX?Er(XTBL_m`z@bmFzPmfGK2zl%3?MKlA$;<)(DnLS zlnE=0L$hjHac=q)KQF3?rFDI2OUFT$(x2yrWb-@CJgSIApn4BbwtsBN?>|IvNg9AE z-r?;JLy2~pSYDLoi4t#<@Wh^JmwvFnz{W$iuOkok41VKYmo$7&(ED`KJ#%17-oKI? z>;!y6&LKv++ELEvOpy{o+wl=r`hmlzbcU1WTAZf=tT8(G&>bq3Ne^kGKe!3&xxC+|PT2SY1^DG_|(A`s*6CaLrCo<7VJG*dv2yh;YMqmJT@O z7G(VXfyOrs8)5-#W|O?gZz(*aLhKvx z5*$BXUy;YfG^VRc!ql^fbZMTx@@8#iFUyUt8J7MFn6wCk_@}F|bNuKvGJ@xZ)L5Zj zJ!_5P=jf)hri@6XTt4C;eaQK8rDoJZqGydMoon^Pv>`lBD`chmIKVP=5^;vo2urTrO17KrIA*bKby6J1^e2QC`YLzB2 z-U8lgvZ>$>yAxIxG#R{M>HDX*e34n8l`xC{X3O`rhZQEOHtm_a{Hf?t*XdVNU;k4A z<-UDjo)xb@Kd%wp6|T`tP{wPw*jBsW6!m^JJWrF!UR{QP$hO=N<7?x9kcEkY0zZg^ zC#feaVv@)d0WVOlp{W_)pDS7**h*mBsMOp?$X;ISE0Qm7Sa)3>sP~hYf-7F6@-Ic% zl&hx{dX&V)j)dipAE8jSe?Xc}1(1#!sN9WkSFNoWB#{uKaS8=DZDY_eDfz5bX>4atTgO;e=}qXs}nx5~D36oth{ zzdRT+-$#Ne6Towf+ABJPfi5)cQ^@e_Ivd8j82cxDL-ekPK;nDDy1K%~Cd5cel+KI_ z?pO#7tY~Um6QE{eT7bAcOkQ4G>g$4U0qGOO0XJNMDEEW&Hg&&+x!IwSE3m8SIC{mn zQ(P67N3qArouFna|I;KyVVt7c4?1m+Nt=+J2uojo#%<@^#CroKr>x5+c}kUk+3 zDkfI_{g`7o$heR-kayHPLfjv1lsxTb$6uVm9I{PAD?Ud!|7byo9bPV0A|_P4*8@AZ zT8#*Wkgr}mIYUf(tisB&3OFujTS;#kBV#x}7p~ws7K}H(#|#I*C&-cxtjM4Ki7ba& zek^fhC06=@%awHDwEbDE8ekC&f8 z2KekGq;AAByB>Ip;F!-g zsi{VeYaGAg1*aEW-(PR^j8_Ef^R?qrZ||2@yl`-6f4o!{v%>8c8SA+!%5`{xmGSR~ z0(h`WBjK&FtdFQ$tR_w{CEABf-E>J(xK};THHAz8Pr4Y8d88#Ip91!$)EV9$E+ai? zu7dEC$*I(KT#w*vMrYt~x4Yyb1Tdsr_k8-je_prBriB)!#Kd9JV$eMiy|0X3+nEtPjF$3vD-88xH0X}p%z4u03!kyrrThTIXceRzc5oya`kO!Q& z_V47IHfEr!Fi4g*x%E2^1q(8Ni!>{H-11L8lk=4|>DL=%BC^cT;oyRIg>sPeJkfuA z96Eo|*fd#JR|ibppE)QR1Nl)Zc<@{Ku*Rrusq8^(Uy{{dWi698-lAqGG3cnJKS`*^ z7bqusc?f>?5 zTz2tMB=V&fVouUEQ!R8E5hI#;a?zBK3hZ42!Hr_Z4{M;HL^(+D>0`$A!PTRFD$T*s zqQJS5l9GN0r}hq@xQj*G!Vy5;pd{26JDA_#;t|6Fls; z7RaWU`&p9x0PBZJ|9CPIeQO2*~~Y(e6Gmu+~-lM$exXGC4!!<{q)=Ecg!-I^0sPFI9QQnRKoj`>DUp6$xh zW|eszr?>PUJ1r^yeQba2>jpNac=47_+Gl}fWC;lgPIp4toU|%U<$v@!f=8!pbrgwD zlHTmCBe3D;RKg6x0XchwT!IoI8gk#ndLc0wxOsAqK|@1MR}eCxJUOSxZk>%Q1rw z6JxS0qBFn`Q=(-~y&NHd?cR?Q!LcfF7Frsbx)^7ac}rJp;&M8l<+>7^2J%#S{JR0} z>3e2?5J_At1F#i#__gwwg_i*m!;v&9k+f_8o9)6A6YkiXoUYXB$JAq@&o1lk{lrN& zzO9`6Oji8Tl`<=KPG8ZwqG?dVHAgWc?c@zG<0V6|R9!2k1DAI}{H4X==Q*TNs#q>k zOTD@fC`{#NtHP-I$yyQbC2JXD_wPD2Tp(5`95{q z|CVGeMfYU2sxx{PyY8;R%!y%Kx6Nxx)q9)kfke|QvB}ix=m6aG=15Ti2h+y&y(2B? zrOZ4@ASj-bF@U;dCrFlams9Sp?3JMty82Hqg4@39f%EomfK3TSFKeAs{I&JzrzYK>A<5x?KyMcG6pe>RDn0HM4LdRqR!T-jCT;=D z=D{~{P&9AX=2A*>NPEw!8~vj#+3^Pl%KzBgwNY)yN3kKm0Xd07AJ?2j z&LC?$*G5FKQHif#&N7-uc_{8au1$IyhIsdfj&g5rb==uy{xUAu=_~N>>1^*S8)ljl z&7X^jwd+}0lixwlwdsfpF39oAj8Mvj9iJLP3A*a-y2us>56kH& z-llQL`Jpw6UgzPjzXQEkm~Z5y``^$0lC4kYFuj$}cV@2Z)w9Rp;yJD#$*%10;YzGM zNriW7PR?j8GW=;fcG_$r$QF_nqO*l74}Bc7!ip7VXJ(t*IUq!g{LyA>CIcTQ#yDze z|6t%tyU5C3unnD@WknU@IN-omu=K$iuu4x>;HAOLhNKI~(vlRf2shk5^Wh3vgXmtt zRSO6{tGl=69SU7|3tCj!o{R(bbivlnOkDS(6QtpY4T;Q^0r4?#?8XD8TTe8o_B ze;h5t8azx35>{z?UL(x%UY@r5pLtU=6H8Ck$1T${Ywb=AwKFVW|K$q7xlaH;2AKaW z^y)6m>+<<$Gq*+)59YB^nBYbeXq{RoS+U&JHW5k4i=o%xg%N}s?B(&*XcRnyt2l() z7VJ|I;rWPkk>D|Nwyn5Yl*_n5q0Df#rOpzm`=51ysAw6i z=o?S%^OM@V$IGzqoBhHJw9I9(oIkbFb}&&7&-S!dhA05NIQ2{}XZj{k1F8Wq?QEkf zQ!GqOV{3$LMSPg5=8>+t&~KT5t`a&L#!{V?U2*(c)E%H9TWCV4gX(bLRW_cV$zvHnGxjLpEn5MFb{wjI*Wb^kIt;l{XGNTj`z3r zvrRBX{w6Wox6l)_{qa{;9-ETJQc*czVK#JUF07RV+yh)xGys4EcFV1lwRb>(jfHc5 zg25e>5+i+QB~9yYvOq_^a#Th4BW+u8B)LxMRniq8DL0JsTj!e2C0 zpk0IxvN44IOA@a+*Y1~#OLt9bsu(o1Zmwf}0fhSkg0uv5cta!Y-d;Zbg=cW#9HXd^ z>DNr;JB7SYQoF32S}rngJE&3gLp^d-k>-icN zHPft0i>s^yE)RJ8wQbK3=cJ8}9EY*L26Q*Axl3t%v8`B*sgw#H+tTR~0XOT?{*E9d zP8~_6SKq$Bpw|Zhfnw_Q+7yyY`FVHo=*TpjCRJ&p<3l`*xpPl<#a=`WHBJjQNUD{C zg~8rc8c@cZ{2MM)7wXpckJUsXO0YH;0G{BudBM9|8~yMCA#5DTrRf1B8Up<+5^yG$ zECw$nE^haL0CuY~WXD?fl&9#Gr4@k96gS02&+k2sqhlWBDK%qqc7i#btMN97Mt+x} zVAVHDk1GHu>C{E=cl$h`zha8*Eu?2ZW6{^2{cb8xo4I zeA5ZZXm@ckszJtBiZ0_|Pswcw{XU)fSHYtgJC<2#2xjWaLguFa7EW4%npzrJqRQAb zSWTl1l7f;a76cnmpC;b&j+gDw7 zioiMA?OwE-t9RYds+%nBJe4JcSUO+s1U53j)}pI5>~5@Mf5TpGI-tX#G);zzw9Yfa zk^otiTUq%hAG7pBQf62a+zxDI{Rh_-$@D_IJ|6`*GBaNwBMeZ(xE3b>_so4s=xX>_ z`mlAu=wLdB?=IrV1eLI2e>5u+ZTUPL)wiZekR$EINNH$Q$ENZoiLH)4;+2&4%&u#Q zK8_Au0Q@2G=6Ty85@BED9p9-6E&@ykbvBL{`l0z7nYpREw3V>YD2hGiJ^)d~-ULMBHe(PA}7E zLAyG&JP>HN)kJDlaltDjAx19)Y+OZ3$?Rgz6^SA`#OZ$ggF0lX|Bjnw(+4;8;n@tP ziRFeGn)=3;*ls+y<&^05^Lgj{u1!Grw{9|$qn3uG(#fk|{kHT%f}8v8pZQam6svmw zi|^Jre^BHXC@uS`u=OkG{!weiwGF-+UB=w9SkysV+d*&f?~*3p^d-`dPI!5rx1py1 z`T?|r9Wq?ppLQvoX5%brM&pD?+T9b(4_-!@u%Nz%mV~XxnXP}(V`q5w$zMT4?y1Qi znO_kgXoT6QM&iikZ`8htc5Q*oluT@%wNYb!G>Mm$>$y6> z0==+dm)gJQ6&i*qo_*zX8`KfCKrEX4)MONl?mR#V{8i8>@~49^LFE8QMC5_iA9*2c_^MBcn4tiv@k5iV?@e0G=L>w9~&)lLBaEmjydPH zY>~v3Mj)w{_#M@|)zXC-fwL#Y=*?dowYIVa{zH%OwBa;(oiV#O0b`bs|K}AqnNF1n zJDGd;b7Hy-s6NlwM)Xmw(`8b^;&Vw8O%y{oI$~#o^2zp5rDJ1INzW01wVQW^*o9pJ z7eZAceKT$5ckSfhfq^OsHN`iRCIR01B`+-AH}z}bWhE`GwXk@Y!xrDmLUFuZhs`w2 zrKt`NGbbW87wre0?e{Bdr^!Iy%{APj-h*>->m3*K%&u?I{YDuL3%A8ZE1dt}^izOr z_ZG}UR?NXj+4QN(VWi5m`NK}I7KfCyFGNi4yiu7OW&Z~4(XE-T}Hwk5bNqB^Ll5FWi+Bu(}P}Bdt{~gZ#x)9`{A}wL& z4*vox(#7?`zsG0p<#nm&En%l)=$o7Pndxunqj>g+N7fOA7&i|^V_uQP$lO1GS<_wr zcRF`!mMqJ zrV;VEgj4*O*mp*ps5LTrR!(%iXH;Rg;el`vUPHkdWG834zV&W%PvA?P6^$rZn7S@2 zD+u>fYg>X5MG-(JvORdPqV+Bsc&Bg&0eNGfvHTT`TMY1Ibo($p9hvF|Yvx^JGvV8X zH*Peeb;Zi~V7OU%5Y6dRAA9H0#i)Rr+tkqvF3e2;9DNP#Y_L43+2mb#1!AM|+wig- zb^@*dV;?DxFEMv7OAUAuS<^!M?;ys_^=3F%3a?75-eq_7^e2D16RKudvGWRX2(f_j zoGV*Z`H{lo{=VIMcm|N01#7r5ok+=^J>`|!g zvc}E9-n*EC#u}aFF@4_2yQ0*!V3~*(U%lw#LoeaSB)uGEbWS;iJ< zSx16{q$}kN|5=eCdGAnx8`Dq-+=GON&bVRiPLSjETaR01mk9vj&G>D{{LjPM$_u1l zr&gS0Y5xR`nZl-}G4zaq0&g#j-p4a0ruwssb*AQ!rSFi}kvI{8Pj3DUOq3)o%1Xb4 z51Nz2le+~G;<%;AF_n6gXnEQmYt0>rEYidhLkH&bj@Y+^LG5_N3nvS3?#Q*bb5_Cz zKmX#PVl2QXo(htI*1<9G+T2YDR#4uOYm@7%*z-m@bK7eNsZmleK-QA> zVyt;w{w5zk%Q$3?`WapwVWB4|l)XfO$--TAcv4a7yq>oPtXhT5X|q21?Zeg8@BUf7 zmUbawBP%FKhmvws@72ndkFw{p`s3`J$S zwmG+smddovc$58;zK|$0j6f5teSNOTERkZ~U$K?T#VW!5jq37ZAB4l^WPjkuF>27E z!XZ)7VpMv`h@H}X5IP>ppSeF(&7Ckg^zp<)GlU6x^AtE{<<_C#+vwej$0vsG7TJ8h>#d^=g>_D{cUCFLJH6Wok?!hhuR);`)zz|6(>i@KjxkQ5x@Sl{xx0= zN4zz+EB(t#oBz!*lqfDTP8n7}LLpTk`ZpmDCCYJ}5>RX$Fz3Jp+yeZOJ9}FuFazYU zZf<^$p};xM#V1~wP4%OyD|)g#aSHf{g~JFjKi@PnBYgs`s| zn-`N1c_o#_Azye*{geW{Ix)&4 zV8;Q;bLOTUmXWd9ZtdV|p)ePGp-Q*)tC)_ehSM|1#ZyqJ(za!QTn-BJjO%W*A9rA& ztFTsFL*U11oo)(y`NpLF^zMaELFWeBhg`OQrl5`X^a>7c7?YYf~{r#q5V z&`&g^PaF%i`&JXO|1%|8E{6BzOzd~TCS#L%A0#wPSMRN>5cTiJI>Lk9|LJky`|Ps1 zHacd{biK4 zjr#u%7HP48i;DQnXN>;$%D8MlI~x-<3e@g7E9md5&F$VXq;Sxkz)9pg(U7o0&VD3G z5&qR3Dv_1tWAO4-JQO~B14j|jV52pzpP_jFabpMnw;Akc7sfrOlAm8`W}CGbXgaRx6wih0zUn>AX0c9=5tw`9=otvJX?fs4!qQX z-Kd>+xLQ$>8v)xN>Id@s$1q3jiZ(Mq{_7OCMC2%B&7TqyDFjqGC<{+(WsGi!~e(ZAzZ2a7|;@k4X(zpAG%O za*LxKjP$6f;H6QxkQ6hj_Shf_%WR|1zWf+U3gT66MTP1HEk-I!IfZ#R@qj(O`2bFL zY0dBo-}E360XbU&@Io3@7}SG}DeNZy|3Gc5yEr&_my)@~Db_~;o=-c|Ub(a2m?Hnd^Yo3w4!Iho-=3F{UbKR0_zdzk~2~R6ESoSFxJFR1s z&@2zF?bE8!M%M!Mx`OSeDAnqb?V#`bsx+h|#a3FYp2|MsDy?LsU(9Pf&PPGcTxn_v z=bhEkK6Q8{4`k;WqUCX$OM!-Nqxqj8qE<~QD^(_;eOLWnvV57+TuQS`MtN7)XWeE` z&~jZM6I>QUv&v?3MZ~tV-09s(5cSkoqwlUA;9h;Z@@p)dR9P4ovqkDOsL4!;&|E^H z^MW6uL~X9J-3OgVsRFRs`_x_uSRh1+B=J{;BW`KNlLzi!b?18=7t;NzPDJzi<(oEu zT^_?>i>ioWwwE>Ua?Gy!-v<(Um#UB>;%KxqCJ4eTMv#qQB|TX{3K`srm30Cr$bWY) zlw`LnVs~FJ3kr56&6n59Vy{3xnL_M7NS*%&Fe%R^i=RK2VMWR6&*Ppp^ox6B?(Y-k z$&us1vTosP!E9ril~pSZ+wv9$K$p}{wHETrKbAWgXc6y3ioB{aPg`isVeZ_|;*kBU zIRZS==SH@$c^!@hwv$p>{-tc|V-SHp2w$ezuM0%&`F|yJ^rB$0W#nqB>9()C#{zIi zF5<8C;kI#;^3ymf0mb?-P@hix{w!c z=byAKwRbD92QfWzi2%p8mLu1geOFOEgw`_h=Yas5di|3)sU?@GgRKiAX@@4Lkn-%dW$9l!T@j@H$7oJ2Jt4Nox| zE1Dz)L(>2qdoD5}AU7<+&yP?nb<6X*w)WxYvy0Wg=o#*wXZpe~Vz`#QVE4n9_g+7z ztmEQp;@UksD{Hc^2Xqs~y4)&fV_7gqEz(3DR014&TlKq_PxpC)+QYwk%fIidyU+jY z%m0s{dRb<3_tZ!W>mRo7P?*@5S0U1Jwf1rB)iKPqabBj}a0wHc=BSyYCm9di+6PqF z7;&Wy?NsG=Zxx!i4n00(R^#QdMJJ}{UHnjRNo`HjSQ;X!v4zw4cQ(AJ3mXkKPvK#B z*!>(CUllaeOj!w2SJ}**?7y>lpl zB=>^^C{KLTZ#=U1<#P0kBeU(}l&&9*qSDlN^Y{FdQXn$_s<=1meNQ_cLULB*TEAgH z1J@i&VQnhq(`os-LhyDO!|)Q%oA}oQmqN}FUP2`Axp(0(%yjMrt%s3+nTp{EL3@-G zJeww_8+g!PZEIi#?2~Z#aYK$mX5Rd_B`vHf@)DG+rkzc88$&%#{#1Nhf#ahrd55{# zL7U9%JHN^!`RJD`K=l~IlAArJ&LDNwv-G0Ht)I)&Z!6TtNmHeVSsh}J{g{a0hIG@o zgtEZ6gqYg;>XYbTUf5VLrq9Am4>bqUt}nu<=N2@T+0f0m{>r7kp-Q@AAf%9rQ+MadUSgyjJ zA|^KSxG^KJzaIt;CvP?;25!f`&x8l0!GD3%V7_}(Kx4tuPv;g~bN|IIZfmJ*yi|nd zlF@Q-!v~Y}1T3j53(|ngBD)?bb5kY75VBrTuk@_~L&<-g1B{)cAKqk_=i#PGF6jHz zvvyMCxJ6J$s-(NX*DNX5Z{hxKZYyXl%V}w;W+CsRCJE8-v7iomxQpfupm{L4yN~3h`g$4mhI5!DDbsPQ`XedLOM8BT;}9lRIRQkKRrdB6-~%WF4Ni4 z4_wFxh6U~RiAq~Zs=lp@*eeGF6b4<)wZEn0U6pfM0J?weB2uJZkmVMWH+Z7(y89ao zzE)kN0yRurXj?ADt#XwkeDUd4ls945WP+_JJ4jwH$|&4N%2w<|b^7W8@MmO5eAdGj z1M&9rA6SjpKul`?&BBRbx~_iD=L@ZDw^f^qpMAJ}@)E z^35}2Jj3&7d!XSeB?h{ja?u{|m%Hm}e5lfJE4>3=CZ}Ar!)v)El4+I*Jb+1YzQ`la z!#Qa|ZK2T9#8b-3>*UU`srbFE+VrmCSRu$*19w|#zwiv6iu3osvn zaNWo>0mo4OD zSW7oRQel?GIEPn|nPOXc&jac|V7To8M__8j%mw>uC2ih9)&N(lA+_Qbc?u0aw2fkveT{3JXt z&6=$tyOa9V-iF8TvCUh>B2|iJ+fjBg(Hn#_gZXmH`Q71s*bjQ67kuaM{Z}a;sWI9$vSu*ewqF5m;3gf87EjWu5WeZeoM#V9scGu<^3rOc3sPg~ z-+jf|lZAza17aRwpyW*f1G(UbSg=*A7CH**)!zo$%^CHb&1>gpiVSnk%ue$2=8Q$J4fJ=V+%UiqlN2j*RNULTscnTa$wsc9t_^ zkM)gJM%pHa(x%?=*~x!H{^?pVXmBnJcQATql-m;4xMFs!buRbf6XbBu_5Um{?iyzP zy55FELCv(>2}#O4CH(+rh3A__??fGGA#}P4$tMKGfVH0lQSe}b$%B#L;9+6n;9z_2 zU)X3qu6xhD8ZYOXg-OWvR{Yc3TeHotEn2+Y)w1rCx&@i!D@)9zO$6){JXBN@^Ya*& zhYf_|#^JmVg3y<5jWa#tS9iRbDnG=#oqgEl|V9m8QSeb-8I1MnC>fKp(WWneq z7PznO>Zu8*Gq}1lkn7$L@HbVY&dRxR?8#G+UB8N8XEU?Xs@tr$wk(Irs)fOg@tobA zv)HF@6=BTeUb*6;Z1Kb14{U>Rk@c`m_Fa9a3amw1Fzg@G!E_jSaNS1aXlzT15aE!F zbBv{^_y%od(&Cg~zhYu|)XiR*=#as`35X0Ursx@#lvS7K*vZ+#1FurIsS0YNRAm$o zLTvslzK{E;mz3T6EmUgF+H~uIo5B;8ZdK;1Dtw0R597mXWRA8L#dEepy0VC>AMBh& z>#$KNdhPIu(ol`WT_A8`$Ht99;L{LYufcq`I+ROHjkmy!U(!IwR$$qVJ%rQXV^YT| zE&YX@BquA;l*%eQ0bJJF!PQKg45#eGSyD^f-QJ3i+M10%#8UKi4Ia|NrB8BCsbrI@ zj^2tel6mO~XEZy&RZT<2jEeFvRTmjzVBsB_mB%M3TkVeKq7h`&W9YkUn~CFU2gcoy zlPN|AeK>%d`f}Me&VF?7F#UCDbM?curFVrYl=vZse?aT5%FLGkjAarm&kcJZ0}t%f zlAAg{=4QTP;p1jjz4Gg?;+lmz)!C)4prJmD$f#k6U($s{sfEz!DdnH5yn8mKyJsNrqqgaj}~LQSP~k42-gu}jT)zK>kN zd(?MUp9WO|aueVxI$T|@_`-A5Ur`s`j$e~^gg7(us2+o;`vd#T)z{XH3iB3)@c)L; zRB5l0$YQ^Tv?Ikrw0BLRU6{?U4Ba`nJeUZ%HjHO|CRomSe>B+R^LbYHs2a5w;QGLg zozk*SkG2QMnb6t*M==eyg(UAhiq{jY(6g zje^FH;pI#6$O^;OtG`w8{V_FlIbJH*(Mr)0w+$A&@58*bQIzPynmTIsHk4MuYb8C< zGmdnfTg|S$fl!71d;xUl+o_^t3h&ySGE?JI37#3cZ|n`qK3dt5>r4<7Thuad^0p#O zKh&}4_YB)ti(Fh1JyP(rr_h$ZP2D`wne&T=+e=DYJBjAOwU_?kSWocM2FC|n9qX6R zOI#BAyR@TLc7PTCD&lNIF^vZ{QAP`>3sK_a%s4@EBEW1i0zWni z?9vrc?=(Ep`Zm_C7geHvPn4fq?~B~s4LNgsEX$U6{LGVA!Ft7|rgEg?V$d?Y%9=~U zMo_oAt_@o#dK*mH8&Gaf_5OVDD`>-3=Dwh3&T~na<#4Pie6td9qUSJy)l4fOFvb4M zTJ)SB;&dHG*chxY34In*%Mb0?xt_>q{oKSR9ujVG+f}{xN0N~ecsPTad%uFw+d#su zM@7HX)84craq^@1Xt!FU5xW4*)DFx8iZqKx%XExFlo6e&hJKT?IO>bMm}iqQA4qlL zUq83JoyU3`?Cuc?CtFD-P3Eff1Y2=OVuL1K2SZfMzH#8I>oMgV%4N_MXrH?LcF+?! zzi`%5b#`!{x=yf5_6SHxJht}qi}Yu7y38*pPJ-Eg?WL|MIA$=AkW2E)5~EYBtSm4v zu+T;fhI5e~04OcN6B+GhJmSBn5^dTgO5%~ZZ#=n2#Z0G6qEl@pYW({uORCE#!u zQ$6m)eD7pHr>pRE>zo5W^JnF97E+JXl;_j&_VSeJ`(>WdcNO3wV8!71YMIEpgjotf z@}#MZyzTG6*i~Ki$I>os7Poq`XlV8*_sK&%QHF>V zzsNX`(w*7MG?Pj0u0}@2HTM)9f^j{LlOCdw3W*KK*I@mWkXk+8*2iy7@Up76pn{S5 zkZbGsyTOwm28hZcU*$Vm)W;l=s3m3!VJ3N;IOxAoSsPGD1=cxTL*bl!;r^E zjKh?AM<~v5^a908H=m=2J)?lQmGY4=-F_J&cKlZ^S-KxOd8KS1Sl|z79t$nw9(@wU zWq~cbc#oYK%f&v*r<@THARoEj&ab~~LOQJE?KL{JG0N+QnV_YWe1a5};h|<&A6bok z1ydR297c{e9_jLY58qtxB%J(FjG{{g9}?UqK98WDbAXff*$WOUtuAHw<8vMoh)RSU zoL1M&%&Cf{h^cbrlX67rd=kgDXq9i7sj{^SKsDMu+CRM5Vv}h$0a0sv)mUkVe_&1D zrk9~I{CQ(FTRj?%RYcrZUtfY>*(@~Z%P!@M!H;F(plJ2#?gVHye#XU1Q*p}A+xL!b z#9^Z8mlr3@3)edcPHJ~{W^q?|oc=Y;!9hv&ZJ}7+rh{DMCaZj?oT1IZKeakXVfxE+ zVQhMKISmuW*R%i$Z@KT+i*V1`F5IOpGt2_~V#Z}qWgDCw-H)Ma>G@ra>Cj5M+JCO| zd^$7u(B{`H*+-3O5eIYeSE>yi%&Ib*r%n^h3rZtfzjbeVtE{-JT0>LhWxw4b*;xPy z-P>noMVp)ZLvHrZsMxfFS8fJoWW|;@NuSLu$u8}YbL*JYlk-Bu**$Jr>%5zeU$Qu4 zq|b1OhC`K>p$NyF6pp~GS!blWhjmA2vids{yH1YB2w`bY!%SbsrY-N%0?+gGlvDbK z5={x59wa^Dp}Tl7T&p3$*d}37`Q-X=rE@~2)%XlOEXE0K-F;Nwzxe%V>*p!BNT+7X zbK!3xKscjMO2h!pfP`l`p*9ia4JX&cYGYD+MPBuA@fh zZefEvk7YaMI89|z*Qz*KbcVh$w5+X<#g=6CV97UinADTsZ|34cZ=w`Dd2yesrY&8*{-r3j0xAr>|j>)X~+^-%p;zw(+j{Drl-+xTrLTIuKm_0yGN zbIxw70atBjdjZpI1=`XMSM{DZp-wg@&a8)_iZxoTfigDOHn)VBUnYGoz03w~n!a{` zqP)O?Zbse}N)&J!<2fnij7|9+FHMS?3~IQh@Unha_C>{QR*phfP5k7H#7^Kl^&{o=;AP?tvD7BZSl_Br4^4{9 zG34l}r0uA05bSx`MetbzcNtDNo$iOs!AZ_n*NOVWMd6g^d+_XdYgsdXPfQfj4c+{d zS7_$-WYoRO%dAn}aH^`(ELh<(G(|`8;_`hkyxRx;N9pn^`iH=_<>Q^1Q;6+|-1IBi znn6^jpRn#cTU+UiN)XY`K`(A42dSy4dyG88>;JqzKfKZrwHGiI9BuR>%R+~ziq;wnXS8abF#SjDQQIm*~b$uo=2tSuldTAY@V<(xC$Jjn=W z$Y`PPdzf{9V0e30q&kC}6DntdCX9+TMHGDj*!tZVvC8v z-<#!?!%YQ>%cCLav@p`|1(j}HTW7@s(>4V;T2-|oFh$nSrvj*kK4A9aVvob`v;Jfz@7KRm{al9$o; zZ(bj!&vyIklL!khUbc#YM}r3Kc&Le61m)!DihXqPJb9WfzA^4OQb{^69LvH~P)(g- z5k)2hcza_G!Dr)U5cM%%2vsw?o_Vl16s*%Q1TF2Tx3nN8jH=i|x3@ergXcM!g&`57}a; zF3#mB$WBXTc!2Q~J51E%mKnT)%ecG~ChW#KMle@L9qIpOt_wWh7%!-eGnI^#Z?~)Wn<{!`7CC8z29kCijO}Tg z+#Pmdw0*k#`nte>I(GuMJv9(s68Vy~|B#$vkvgLDy(DjHC93KODhxChn_q1tmcRud zQ)42Qt$NVSX(}G%JArqz5HXGMgSoL0s`v&1tIej{D2WM ze*zFV0o$*i0LN$d`zPS|?ST9QHlRMppI`?Rfcz77fd0=H29TI|cz8HiobBpcywUR} zf&!^Y%v^Q;C!zFB*u?pHAlQKdL!S6>%9QFm5f_J$<~w*;v;2hgL>i*Twyd{LQ=ndj z`K49Ee-Mfc&K?ImG2lcU8E8{F@wb8l(|2Uif7tqv;&j!C3QHXYo}RpWM#^YPO9M%# z;LVie;(zX_{@4rh5%><|M?%a*aX(6e`ouH!#VzwxqfEClIomx=~)sC zy%XiU6xZp-FR&Pam$P3~455M!1%jvO)R69&|{eJ1@oLmdd|3+ zNp>-jOm;luWoAFKc4_vKXiN|Kvz^{!ydX*!34Ql?f7bC|5!pvbH@wbk<*PlmR|@4> z#&qdPL6_LWFfJ;zDdRK&i6ZzP5?p;_?OAMSUo1RWvo~?}$Dgr&9^OD`hAxy;e}XW3 zjX;9x+1AjD!4eW3Pwr{}Q!<0tBLV_*3iTTAWGjqdfbj@y&lO{0R-VzHf69vXNMg}M zAao?O_S?lN_SW#O`Kd-gfn zvFrCoZ4T|0m7_MA+n)yGy!i5<|H2>qS<*V2lYDb?xmnceM z%Dm@FQ}(vN1G9*q+>fv86p9y+@aa>&iEb5{fOD6xQtw*==EvKRWuMMNbr&zLl>bpJ ztvC@UP6z0EX@Hs@e7?_p__*^|CcI#1Z^?^QolaX#l?uu8)pA12Qp z>M}AK6q~bspK7Vv$JOEEM*L)G!MGQM=~t%dYeBA?69m^s;j8@{NKX&n?uv@@B}xxJ zTa2+2jRxnH_re}39$jv3u*C$liyc$g)`DO|HTL>^B#-vAvt6}rGY+nLq7ClHzY%O& zi94U>r-cc#RZoyQRlZTe+U}XJJr3IVs)` zo6|gIv)AUiZG5B;^GnLaK@$|c4pyHjI*+G$?M@#FErsS*ZL03K45x&T!@wRKB-9pt z((5-DVRg$_R$np~=xk+_)o;)m9*yEH(YGKCwkGa5shb9DM0k+lYIxlZI%<=H6ifTa z=e?qe4i_8ye^=KL?T@i^zOBSGcVp-yGYlQuKF48Uz0*{x_gRp|MlT%z` ze70z>{;ZlAv@oQylcpz#MuP&=D6H(J9S=;_tBDA#M2ihUB)!lN~E~#hoQd`rXfAz*$Z5c2hw! z-E(3z(nA0IdC!pq6DoQg#c)G&6(6`~xNQom!o69;X1S>=63Fc)y>a*7;b9uIo*1bGf6FQz+6V{~ z*0~naN9IknU`rt7v5@eT*h0*d-Q_C#Hb6-=h11n(0Nx-bi=w?V#NJF|<}t@c_~7Ej zWP}_GQ%t?-o}pys{q9(=7LR9!1_ih$)?S=bwX;nu!eL-Rw_OlW@5rhNShLLX5;3{-NYHPc6wth zJr}gw+d-)vlj?{1d-^b=wqWc~2vQlGzDXw(R1C z*w>F8zuv`J(EHx>tg;^*EX>5U#~3B#7Iia5q1xTQHX&=Rky_0%=J zl%2{ItJ1ljNdCE>+GqW+LF~;#Lbvh9%ki5QCzG@JN#VVpPS-aY4e|YGldU|Jef}dM zB=Pc=@db9ogtqa+gm`nW5&30J$EFV1v&X7RAN+ZQbN>cD<(IQAcT@wP&aI zj3TVqXPz?~R^HlRgJyyne5+wHwYz|OxagWP;$FOz7a9!{3y4e`Bv!fJc`j3t@ zT~kF{U=t&GwM)XvjOp*6OZz^G8pN!4QS1FOk1gJPq05dSY|mKieU8mj+iyfxk%$^M z*7S%{>FchMFOWtyy6Tn7y=ltXD*w3-+uR-oPh~?xCYOk|g#xIP_d#%2;PW_>(s~xx&5(a<5M8eIS=0ovSC!T7)rq5WE z;;msm4?^eNCV631WOG(%fO$Y^rvGlR4*g#<^4$-DTC>DYlQmMM2O}b^{sw zG=0NuO9z2D_Vw&(<=AW>vqYm8Mt|p9@adSWORAPxwrne}**JA-tYhxkX6Kn2Uu;5Z zlr26XG!}GpTP(eLH-f%`YML%>^n)A~V4H z+jbS?@n~^bl_JyGs0e#U9Q)}{uk4%~O&tah-ZFx|hFgbJ@(;a}X?5#i(AL`-@Ozd; zhh!n|ZtXaUo9i9YyD?iGuujdiVh9}@6{2D#=Y78Jo4cV+gJ0cbIEw1_ZImQnq8&6v zcC1x|G_ttd74}jKu03Y5GT7bhyQH=`CMAn@9(qxaR*RKs|9 zud}nE4FW#AxI(gD4t}$eh5oTft&(+Nw+~p~h}=cjS%|lI=!=*v2?p(gvYT98n{k2I zgjrBy+buxMW#)8aqKbjFT zVyH5uBG@w%@wiLht`8eGm68NV|1UY-X}``3g=e*9=67^6!D{k*P<1v3g>@JwS5ES8 z%iRHs_y-8Ga&IFadFTSsuMNN&$5a_+9#q+mvo$8JB&_B%w8qizw( zb&CN=PyBzAnL)CC=0N^re?~%uCg*K0o6YvB4KAL8di%wfJD0fWGrS<&jX>1m1%`$^ zh>#j^Iu=XS(5`kCt=5-5BV%OLub8@6zyBYlQvaWGu>ZeY7&kDPzDzrw>>@kA|D6@T zq~(5U8C*%$z#QX*BCMUTXoi_5niB+RYHf_%1LFY$1eATegCjOeder&wO4o$^@L+1w zKKP59I8wj^C7r@qL~-Kobe2rm1egEA6P)s)2rKu}b7`W!q~PK`fIvs9NG#UAlyMTq znx;0f33JoSIXU}HjU+pDrk)4(+j>vgV>I_tDbA2{c5;N_KnbtCYrIo(`it9ywMVG) zUy)?&Bqq(Hu%-!PSm-z=&~)lgyMm|#^^81S3WtjA7ZB=ljKX~ML5+lj#9By-yrG(^ zcxzH2Av8J}%pqO6+fiP^sk3^gnjIu1{1WN77zLATVl>5;0+h&osBiHrDorSY62#wj z6MU`kn0^rlhKYK(knGBXAxU&P9qNmr$X5*Vm0%!`G@S7y$W9qJ3ZOsbu+>U0wox4o)5^M)r`N#N}VRz#)s5vNRA|p+f`+&?XHgT}@ zty+U(aP@L6x#qO|R5G%4=;iNFf~^m=vwCxvO31ZtQH8ZhDg~XgNi!R)`C$@rTvRCF zCK5U=1oWOwhL$5S$)`su);r016x!^2v4R{OQ)%OeI4Q1qxi;2yH0#M4{bHu^F$x0E z=_`r^PC9p;GXX7$goG%sM+5-Vd1+axF<$s_K7ijhE7;$D9s~0{SAP!^eYcdP$Sf!o zfNWIkr6YmGZ5R&Q8i1@{Qf-bI1@(j#f#%;VmL~o-LufAK1 zeskU~+uKWuWgAR9qE5nEO=*I5xY16Xz9I#e9Gsclx;Sow-EzFAs-%zy_~aodiC#Fg zIp11);kYgGqtBj+cU0HXQqV!~>i$$#S6;y0TRUP6Q&p9xBLdoSzwHDsQDvsxhE?D{ ztaZ8T)dabHPHst_&XuQqWV7IRilY-Mcz1RfBXv~@!%O4-pbKz&#AY_8XYx>DZJ-ke zMokzVWn1h5xt)gdV4hRjQ4CNETqCQ=Tdi;#dopvfRAj;1FRik*aCUh%Jt5~6N!TFo z{kmSyVCXliPO}sbTa#CE6S8y2d5)Z5zh&p|yh)F!2LaTdV+D2riN{zAByMYxxGxeA z;j|P6svD*Jf#>gB5=`jFM;_GeQA%JBF2eFv)g0Y+fr10@_Far_X?|5IWXMA z=cOD7g&G#WO{PN}WFRr7U}{$$w(XpQ zMiuB7h2BQ0sg6G_!7{~`m7omAT_bRUJH1{o48yox1s5(c*3E8(~r!OSM=+*_6hkvpqY!N zYKXVKg_}r^-~cgNa&;H!9VOK;l1wDExTqOA#1QJ<9jcIfowD3mt{go$+=VG#yp2Fm zQEZ@MNoLDU6 zEV1f4%@^4%;n!21K_@sy+uVoW%=qpWgQ;aH{b*@Pqa>!D!g*wQlrCDd+5Nd zn;T#d2+%M>r?g5Q=}Hpa`lF-vM`%*i&d%qbwZDY*tcF?o3Vr<)W|PF}j+bc%gT|3$ zz>B<1cf5qoW&}V|R9-*HgED|~lu&bF;T_)NgN@CV(gYPHuTB1`RpmBI0HFy9H`Bg! zP0lJ5%4b#hI=}6BbA}qx30xP_C3*h|pOY>1vK=+o5vOU-zB<83!GdNr=L?+)oB5<^ zugrYqv+wl{i-PGeH1+4(TWdH@fJHRB8Y(rf&k2VrLq1q^rt7Si0GV99#j3kyAX*H_ zA^6&qPT)ptxq_a$SL|xd&cpDz2Gs{I5ge21MlDySJ|`Mu#P5E%rQPK6{n$0zBKCj= z$q(?+BeW2%>*V@dNuuoG4+;AY~nB85)%KQuH#>+o3u=X`E zkaECIOpnf2+2uRbirC%!P#1EK@#$E1aku=zfX+vrA&L}+*7sLz)f-Avw~lQ=ioPQE z3lt!mNqpGSAuqrSg+pc9N@x=E0JKvEmV>EBsjeJ)ncQV&y(u3K9 z%4oZV+y!#43KtDGn5~5z-?*SMH`*%@5W(44b~l5y!7SzVzItBT6)CWPf(=slyJ+@r z`{!9DV-rk@K9!7hXzlIbcZ?}=y0M?e1V}m7%}1o$spl$CbeqZ2`@7~b&;G@D?`FA` zF4TD*h4sQJU($EsW88pxE8TL3vBU-P1BQL4HfIPP?o)#W4AvrNE6yhss^eysm?@Ud zP?e3=9&~_PEPPWXuW-8WMp(A=RHmBX=XX*rTs^HEX6jcv%;zi6bCOGy@HFoDG3yPo zDwCj2uPk^qGEOgd4ahBv4~Cd59-QZX<}K5vVCjti8Gh;F2Sv=;`H0+wVa7Ce{w#>$ zpC|IWY2cS|WzMd6JYP$6i*mG%9kdbw0*_z6{_8o0eIZ!EG^-Gt`w8bTeq*d|D5#8HUKD{?>jSW}kdYMcNEo%2zi2hVH1zQcr zxuGb%bNSXzh0dXQGoKHBr5gLPF{Ynwnbt;PBgR-{5|e$qo_Hem`5sz3e|x4a?~T_Z zLF}@73lPdI0?0>6!?odll#BCcVIq=Ir;eSi>u zJIPtCGhfEU^n#2eD`Kaj&HFE%op)3d>(}o^Komqkn$oL)2%JNaP6VVw0O>VK5fJG; z37`}a6p*e|Dbkzt-Z2z`&^v@)lh6qvgg2h^-gWQ#t$WwH_x?Gv)~wkxv!7=_``MrG zo`Z9%0>Uz3#9=>hl?`&W`3h8W1G^hW5zYL-@#$)Xle`kW!B$9qa1De+{$9uZ6U%z3 z1jF+Zm9tUq;K~kXuAtiO!J2wt==g=1%Gs|Q491)=j4>67=OB&79TG<2mn127J^l~ zw0;g`lOC^hn{E=?o0{45Nfu-24oHA6`S!pk0~(+(Xovec7hSxS+@pH#y3)^mxI?uHR>uL$SdwGo~PwY z(?B3-0XvkMp%$7TilK7Bc^reQwT)9Vx9gX^9!lBMg9R&QhiY9fSAI1kMdOunEMac9 z;3hxNB8L|Tr&J`vMYDxkrL*8LH*}qWOySkvkAyh+!Ruk7wr#9aRrpqs9-fgWAiS1{ z#xHZwf*%xJ56I%|Ut+$w%H@D0@AjG6m#Vqk9;F18Mml$2A1AfWzu2sx)7}~MLKq!# zq$yMCM2DmP>W@p8zmLJ*s(PW61JfO7)}Q_klL>;JS0~7MCb6ZK0-@3_0eB!Ri060gq)1gaAy#rN3K+N=0e3c)1)5rX`=2_r* z3Mmvfce#4>f(yb^S7FsH`27LBU9~OxZ@g{6g3|tUOYP@RXqz|kmlSe=mkJl3O)wv_ ztHN?z?wK1oPVdaTlSKzNC0%0_*hnkp_>t!dsvB2wM<{w4po4#`@bw!qCi%xM5ylL& zEx4JTHFR6E3u@pYv058e34yz)04$g)#@lzw$WrZFUaiFuc`9jbw^V)s8pTcTM$6ti zX1j9geUtXYvR9mDcEh@>&08gFAzKXcv~)p;t8K4&h|}l1++pSW?=7aRnmvwkNTjPw z*pj&qQR<6Z56eb>IoG?&Hf^c-oRiFEO|@Tk7Fa^#M|s zz2gx&E>G5_i$Vub_xWrOf9CAW+(F*(u@a!kvd_IdMbFZ#!3wuX$5h|P! zQ#wp99Vw#DT;%!d@3c0VlE&M9-uhMFVm?@y4MiJ>;<5QAB9`qUQqKM{OV1@em>3^i zNGr7?bVvuZ!i?xMH+n~YrJrR1ECV%mHe=D(Sx(Ofq!ktzG{%xV2iSEblPL>%kAL?F zCFtiCBKhl$KSt)L5y^ZwW1Z=PSxXOUzMfa0*(kwXgM+s$WBp6Ef9`GHs+aN_jZ)5m z(XFK$)gx(Mv^_pR+XIG9xg{w)tdu1qo9-vy*>O0J%=Qd9Gn%fsdn#s90c!58y%x7p zEXbKD`FJ1Mvq>A4pTPgRtL&D!vKEoY zWkvWEj-ITq@#>{iVfW7SYGSfds~0m`eNGqIQ?l{kwK_5{To z*TZcQ6c04m6QW+5E*FQ}CJiaO0i`t9%v#WgaKL7GLBQ{@GZ$+w6{E z0so~##N-(h7iB58P5Q=Wd-3eEgbbfxu!;)eHkB3C&WHlXd*7(t+!uZ`wCbJ*b>B|} zMg<*DQ6!%R!N-hx`|?ev)J-%v51-lF0mzTH=ajs{z7;Dc?s~YMwC(G9=~a{0etAI$ z@Ve-SzP!<4K-Sss>amHEE(~`Kv=7sFX9I*(_-t_naaG<~Oiri!%Wf61ey@Ah_!qaM z4Nui9V@eu|bW3kc5RIV7S1VC}WVl(m_SXTnF>j$kqS<3oR(<6OIdH>(QTO)F+J=*T z1QmZSGg>f2fj)ts2y=lVDUS5d#sbXhuPTc#E*6Cw0wP1j^sFY>{mzyuGM#1HEYmCQ z*6RY3;rcB_@Ae87j&|@{P2ZWhwoWa6S?KVLd}QwBGkai}4CRp0W$AcG4K)z0aumbVhFP6YW0^>+{&@&G%bGr)rg#Y@Jybp{BKHn zq=Ae+F$(dB=!{(Bmd)8Wit=Q=!6o&v46Wol+YMloL^a;7-PFLj5aIsU+1!|wUZ=i> zjm`8$KZYb)pW(D{KBtc>2syCcTRf~PNjD=YfkDeDr+ggGab;1!Bl0oZp$BH}(%un? zQxqM+S81%b3bq@}J-?@(om7n!VGhrR#cs%2wxT{(OnnOVV#NC$J*n9K%SOZlq(mhS z1De6uTb~BT%X!9?gTeU1ix~*^9SQjLF^f@ISG)+jv`X2hyIIm4G5K4~g%*%77TkqY z>ItEK7s)CIPysG8Bs0*pXtw){QNm1u@^@(-dEr(UHtxk`dXe?qQm=wzyTh7Jh&u&ho-QFu zN;Xs6GsuTu2UD7rytF-Z=9dbOIs7Ry^69HqR-=d3FQKF$&zVjEE^neqIVL5_4ef+k z12RpywyW3UDun-RoPw;5Kbyz|G02SU#J)!JsQ!;sAi04t*qgk>apM^j>Ul z`NHpcKwVx~5e8oip#r(uupc>4)Vs#3*2g&9lVZ$X^X)%lAGMl(dliJ7I(6Qs!1iZj zMDWLpKaMZk7Ch;B$2*0XF=3><5|%|tf2;KpU+S`$zi;l{^>g`kxXI}=A>&ofDiMEm z1UMY|@HHK0$z236*U?BkZ@HZUU+7odkd@T<&dmNTVK`ij$eiz-P4)n(Ah)r*gswxk zn@VVt8Pp8Vy1*KPm-yyp68v5YT5~*$8F}O&rDQfE{$6ExYJaZs^?WkrYqQcBi-Kqy z_YAI+x{j%C%ROIrqX{F5ecVdk$1h)xT0yegPANbe0r(j+)@>hc$K{U$AYVIcmOclrEXRiMWeqWWgBoj8$!ELK+aU zzpFmiwh8lUfhk;K{S&uXr3ddOnkh9uS6=Y0__kJcAiSaukj(CmNOF%waa%FqZ^w3yVvOPCVluqTgi{rD+eKn1Z^>%$P8Kwfr*Cz&Jc~5g zx)B#2sMuDpU+hEX?_1tr!&dqz&#p+I(&p1M?OEu3;z~QY>CTJhp&G^&;ZolUc9H90 zTFp)_arf)0La#*X;KgxZ!w-s}Mg9^tK6BU^Z3C0y4*jLsdi^kefqj5rNz;gA9Fc#y zqB~x=b;BlP0k*z5FNlbRkGK;!6J8J4qBiSH>j=U`=X9}+3%tKyi-HUt{?zl^Tn+Jh z1pn2v=4YMt;N7*vfAeLT^N4iuL^_cIpejM*mm=w%{YcoZvwFM)+a@N)W?S4p${8sP z;51-e5d>UW_p)5Sl^`UVfXJ<hx7$(zY>4{^ z><0?ac!!zIJTT6{8Gz+-`l#)r&k&!8y_lK2i1oMZsdtm+Y`j{F)jq!bW^z`#EU@b6 z_5?gN4SR;TeZAt=V5d=ak!zwrznSEgXH(DJy9;uI{^Ik_Evw({K>4J#Uk?j2W?A(l zZ+mJT;4b80>u_^WTg`q?z#-a%m5s~cxp81s&~ks_$w}_z)3;{zzkWc)m3I14h4^$@ zwW{_-$`>IvlT+NSfvl@GH*?4uK3B=ux+1OHj11pir*1$f`9Si;1JN$0MIQhjlC+?cgvJ9+8R37garHBYk8D@W4g5fP zU9lLIH$zc#aorfmRg441z?|ZuLEAel6UOMRC#^1uSU7YvzbsREc&Oi4Uh8WPD3$drRW&N;h{{ z)kXvc-P_yE`%IAL)c7ihB$ZE~!g5IqKFOX;!CEjE>NPG~VGb+ESZR&UhZSm(Zfryy zuAqwv6)?mEK_0*i0K9X3qj{v^={}yKrss~DkC{)M>VnuFubJRK4+f=#CCm%PAbUOh z0d(o3Qcni`j#DolXWr@XFnS+y%%8&bSUQsRuE2-`NbciPEB^!Pwo+Y$k+2)oDkT+N zKNLKga|U;Xf)aPR$qpExcHtqZ{a^NSeyfVU_%_c9k}C|l>`c2m`N_K1mfzXWMNUUZ z_rv3ilcLv*8u?uU=Up^(E3kWr!IfJAkrBppYofefCuy+gN|Bz1Fm z&7qHd+4s5KWK@M0R%6-#vRDHDY)QmPMK;+T5ztsDWazf|xxEgc>ph-w8Ds5+9=Sfe zMAw&I4lAISQtpMi9^iYr>(^2Yk)gLQd#orR%%#vHjl?Fe0))L(Dv7RA8O0# zbMa#^q~}4nJ#^#VRnJiC5iHjaZOl4b7pH4_Q0!ERmI$(d4xL1?rX3i~%KeCGN{oy2 z1G=qk&bFG=xcn77Vhjx@aob7AObR3?BP7L7WZ^7oEf; z)p5}GRo5;j>PJaSTt<3!8BUovwa{+UZt%8?YrEem^u`Sg_cQkpKr?QDiBlzmwyIv& z+CYt%P}%SBaZyxZ754~wmKzc^C+Eq;XFo|yJGM>OAVp9ew2(OjsG8C{r?UmnfdVrg z#s7}c&E)EjuUW@8f*6!lW%rb5y>{Z_Vh*+w?||(%^W&^1F@eq@DkX((3b{EWd=&!! zvlT+*|7e9k*=iukc<+B9NpJX%Wga8;B^rb)_TtoI8xne4o5{wb3F@K}6_^_G;l4|5 zub^j?djBAsxb7c>_unHw-D#G#&1MR>D{xW2iuY>IY!Yhv<}@UJrp?>0$SfB6z4CUq z1-6yPsmuv3JK^N6HJh}OWj^zfkx#?eBhk$?tkz51e0q|vYjy%0#^Y?0UM7bV64L&} z6wxOuvfKpf7=K=i1|`5pgW8x>Ugmsu2h|A$#r zMKnEq^I?ho+dh#Fo$=UVtWI_v0c+NsA*kyz%?J2L2D*RaL}fKRd%F54bzMgM?uh^o zpAO^%70WFAx;a!mEukc&3Lr*a2DhaeJ=jcGNF1y=K6*V7qa)319&=Y>+Z0>vuxon3 z3r;JjAO0TasAe&xUfm{eHA2p1BS{bXB7Wh z#F9=MEjn%3)y3W7a%xnn1aJ89lPq(|YL&_CzH5bv#An!Ms8trq zl|Who9rv$zj(chg;>%U&Q5oVaoQbJT1%taD=ZdV9@9T4w!5bgE6m^=rLG7^$o~Gt-5pq{W;F=OQf+7>QP?p7MXMy!zee8Q+al5*Q7SF2*4`E zaXZO8W1HbiG|EO(*DOJ0Sc+-88bIPwCIUn19axyk2inx%#n9Erb+3)`H<$RP?iSbD zhsl?h7@P6&&@{z4Xyl)To7>lO-9Sn|;+3pc{BeEUp87}d}_hG-z(6bfI_|Q(GHU<3?eOcKjaLGp$ zE_sZSMtn-4xQ9V)(nj7dLznZ`5WR%f1$m{k847+k#WY0MUZ^Dbs03}Sb115~2nZ4M zD8(?sJd|0pg%txHY)wy0c>sq#5~!wwrn=8DKR%RgkqUXe-!qTZ)|r^1`)^2P%UYLk zjhq>EI%1@}DqBT!kj{Q9kntJ(enWZdON0qrsTx?a4Rc_GJKwy~!A>CSpHTjvFn>iV zp&N);(*G9*|379of+_!(@c#ei!gryFeI$}K|NBk(9bKwF+)776Z6Sh%g(W>T)ziz1 zHeX6sRu>4oM@czaeckhqfI!Zyoi*K&)5*z+k}^646lA8Mp`oI(5zc509~+Yi#>=Iu zh&EG?5lEL_kt@!wOTU*fPdUeAZw{`F{#YE7v66_$YI#KMA^&a<-Zo{ zLWAg%^sq8cT4L3yUst)Kc$ z|2(ScuAP!hd6=)l{E8>PV76=6l|R8eD=Vw$=xC94oadW2Z}jzPqBP9R%mM-e4Eu(M zhX)5CE8&a;z-yFXC+lK0>k7%?lK9-gM9&PSXGRa?FhY>#`s^#H zWdnZj@YK}W2lFgpS6eU-4YF8*_tKnvx`)hyJ}e!^8K<^DQ=(+B%`#@=wxP!6RUx7# zrG$O3)xmP|Lr8|Jr@KGeoOxvS6VkbCP4l=(OB?CrOXt%6~g7 zfKD!rV>n$plw70@V`FAEEA=Bke^Vs*f+E!)j|-^jn3$kzRkDDQ%r>WT7^4$BBNaK- zV(wC&O@F|JbL1tuS<}m^QZvuZizz_)rCgLB`z!EiSNCteB(3T6f%S$3gA*_(Bux~x zSs;$31>cR`jSUf+F5nL*tXiarWS@0&)o$y#l_nS*RN~C|$7z#glxjY*xT2ihz{cI$ zZq*GAlarM|>>>QlF@JS+HUBTT(lP0ocMFrEHV{}vK}$=!zoQOOJMVef+H!MwlM2q# z#Z}y`eULVC{z*`XMJ`u%~E5`vnNmOItKi+P-tLF|p7nhWm<(E}i zWMEA9f9fDKTvs=|6gfJ&l0E7~_x5nNN0W%RJhsjgl$e|-1vyI(OEgpg^q=#-N|S#I z2f%4cuFri!Y;(DDX{(PrFIGmT)l}iT8*a293A=e}G&(cm0sDgtaa!|!+f>!~(Bdv7 z_Lf-G*>d9$x78D@YcS;>Vb2pEEdi-5z}oM=KGTDT4nQE#*qA|coQzNh-DlO6gj|1F z=dX3DrVvbFod8bCV!J+6Pmokei5Gf)q_bA+fo>pe@R7=f~vX&De6)- zpEq?8@(%c0>NdgUfxgyNj919&H?lHn78J492STYaxKog`Ab9kJvSx_jtikP73%YdP zyGCc~($YLQdSNJ}_tTa^*I%Kf9)PRercZ|MIhTR8aXj7Hq=oj8r=XUgxt~10_N5>v zNgFvXYuxRVh%mxh@*S_+Vdw1Zw449-8h!kkL2kFz=v)??l{*X9=nkAEa*}HRGCF@PtVMrx~8V!(WNSlApxs<+djBX`k zT4w5YPnJ?0RW#h-bw11t>0;HouS)2YD(md+$&mEu1GZ4audW&#@d$RSi1KItYrfGg zjF;iSlHZ-~#F(En3x+EBe8I93H2)4i2KMyQwjhh2WrFQ9t9oK`$u`(4Cx~a2@_9(k zs?KD2cAMY;hJ}gS<6&c>CbcxY*6$_wSc?M-*J{r=k2k?LVije%@a>m?N>@F~WJju5(Z+0{CWTG7M_ z6WMX28r<2j##yI@hvPHC9RBgw-$Uy5>fHh*o}UFBZKnD=M^4vU?rx*a?L6^#gk{v9 zX!Nqk0_x6H+NNkMDC~W9kMgVvRn#bPh9kR~%?<4$sB)twjp!T{e>j Q!to6a72xx7rI#W91&NK*QUCw| literal 0 HcmV?d00001 diff --git a/windows/security/threat-protection/windows-defender-application-control/wdac-wizard-create-supplemental-policy.md b/windows/security/threat-protection/windows-defender-application-control/wdac-wizard-create-supplemental-policy.md index 4383ca390b..f75e4aeaea 100644 --- a/windows/security/threat-protection/windows-defender-application-control/wdac-wizard-create-supplemental-policy.md +++ b/windows/security/threat-protection/windows-defender-application-control/wdac-wizard-create-supplemental-policy.md @@ -34,48 +34,32 @@ Once the Supplemental Policy type is chosen on the New Policy page, policy name ![Base policy allows supplemental policies](images/wdac-wizard-supplemental-expandable.png) -If the base policy is not configured for supplemental policies, first edit the base policy to allow supplementals using the [WDAC Wizard edit workflow](wdac-wizard-editing-policy.md). +If the base policy is not configured for supplemental policies, the Wizard will attempt to convert the policy to one that can be supplemented. Once successful, the Wizard will show a dialog demonstrating that the addition of the Allow Supplemental Policy rule was completed. + +![Wizard confirms modification of base policy](images/wdac-wizard-confirm-base-policy-modification.png) + +Policies that cannot be supplemented, for instance, a supplemental policy, will be detected by the Wizard and will show the following error. Only a base policy can be supplemented. More information on supplemental policies can be found on our [Multiple Policies article](deploy-multiple-windows-defender-application-control-policies.md). + +![Wizard detects a bad base policy](images/wdac-wizard-supplemental-not-base.png) ## Configuring Policy Rules -Upon page launch, policy rules will be automatically enabled/disabled depending on the chosen template from the previous page. Choose to enable or disable the desired policy rule options by pressing the slider button next to the policy rule titles. A short description of the rule will be shown at the bottom of the page when the cursor is placed on the rule title. +Upon page launch, policy rules will be automatically enabled/disabled depending on the chosen base policy from the previous page. Most of the supplemental policy rules must be inherited from the base policy. The Wizard will automatically parse the base policy and set the required supplemental policy rules to match the base policy rules. Inherited policy rules will be grayed out and will not be modifiable in the user interface. -### Policy Rules Description +A short description of the rule will be shown at the bottom of the page when the cursor is placed on the rule title. + +### Configurable Supplemental Policy Rules Description + +There are only three policy rules that can be configured by the supplemental policy. A description of each policy rule, beginning with the left-most column, is provided below. Selecting the **+ Advanced Options** label will show another column of policy rules; advanced policy rules. -A description of each policy rule, beginning with the left-most column, is provided below. | Rule option | Description | |------------ | ----------- | -| **Advanced Boot Options Menu** | The F8 preboot menu is disabled by default for all WDAC policies. Setting this rule option allows the F8 menu to appear to physically present users. | -| **Allow Supplemental Policies** | Use this option on a base policy to allow supplemental policies to expand it. | -| **Disable Script Enforcement** | This option disables script enforcement options. Unsigned PowerShell scripts and interactive PowerShell are no longer restricted to [Constrained Language Mode](https://docs.microsoft.com/powershell/module/microsoft.powershell.core/about/about_language_modes). NOTE: This option is only supported with the Windows 10 May 2019 Update (1903) and higher. Using it on earlier versions of Windows 10 is not supported and may have unintended results. | -|**[Hypervisor-protected code integrity (HVCI)](https://docs.microsoft.com/windows/security/threat-protection/device-guard/enable-virtualization-based-protection-of-code-integrity)**| When enabled, policy enforcement uses virtualization-based security to run the code integrity service inside a secure environment. HVCI provides stronger protections against kernel malware.| | **Intelligent Security Graph Authorization** | Use this option to automatically allow applications with "known good" reputation as defined by Microsoft’s Intelligent Security Graph (ISG). | | **Managed Installer** | Use this option to automatically allow applications installed by a software distribution solution, such as Microsoft Endpoint Configuration Manager, that has been defined as a managed installer. | -| **Require WHQL** | By default, legacy drivers that are not Windows Hardware Quality Labs (WHQL) signed are allowed to execute. Enabling this rule requires that every executed driver is WHQL signed and removes legacy driver support. Going forward, every new Windows 10–compatible driver must be WHQL certified. | -| **Update Policy without Rebooting** | Use this option to allow future WDAC policy updates to apply without requiring a system reboot. | -| **Unsigned System Integrity Policy** | Allows the policy to remain unsigned. When this option is removed, the policy must be signed and have UpdatePolicySigners added to the policy to enable future policy modifications. | -| **User Mode Code Integrity** | WDAC policies restrict both kernel-mode and user-mode binaries. By default, only kernel-mode binaries are restricted. Enabling this rule option validates user mode executables and scripts. | - -### Advanced Policy Rules Description - -Selecting the **+ Advanced Options** label will show another column of policy rules; advanced policy rules. A description of each policy rule is provided below. - -| Rule option | Description | -|------------ | ----------- | -| **Boot Audit on Failure** | Used when the WDAC policy is in enforcement mode. When a driver fails during startup, the WDAC policy will be placed in audit mode so that Windows will load. Administrators can validate the reason for the failure in the CodeIntegrity event log. | -| **Disable Flight Signing** | If enabled, WDAC policies will not trust flightroot-signed binaries. This setting should be used in scenarios where organizations only want to run production binaries, not flight/preivew-signed builds. | | **Disable Runtime FilePath Rule Protection** | Disable default FilePath rule protection (apps and executables allowed based on file path rules must come from a file path that’s only writable by an administrator) for any FileRule that allows a file based on FilePath. | -| **Dynamic Code Security** | Enables policy enforcement for .NET applications and dynamically loaded libraries. | -| **Invalidate EAs on Reboot** | When the Intelligent Security Graph option (14) is used, WDAC sets an extended file attribute that indicates that the file was authorized to run. This option will cause WDAC to periodically revalidate the reputation for files that were authorized by the ISG.| -| **Require EV Signers** | In addition to being WHQL signed, this rule requires that drivers must have been submitted by a partner that has an Extended Verification (EV) certificate. All Windows 10 and later drivers will meet this requirement. | - -![Rule options UI for Windows Allowed mode](images/wdac-wizard-rule-options-UI.png) - - -> [!NOTE] -> We recommend that you **enable Audit Mode** initially because it allows you to test new WDAC policies before you enforce them. With audit mode, no application is blocked—instead the policy logs an event whenever an application outside the policy is started. For this reason, all templates have Audit Mode enabled by default. +![Rule options UI for Windows Allowed mode](images/wdac-wizard-supplemental-policy-rule-options-UI.png) ## Creating custom file rules @@ -90,7 +74,7 @@ The Publisher file rule type uses properties in the code signing certificate cha | **Issuing CA** | PCACertificate | Highest available certificate is added to the signers. This certificate is typically the PCA certificate, one level below the root certificate. Any file signed by this certificate will be affected. | | **Publisher** | Publisher | This rule is a combination of the PCACertificate rule and the common name (CN) of the leaf certificate. Any file signed by a major CA but with a leaf from a specific company, for example a device driver publisher, is affected. | | **File version** | SignedVersion | This rule is a combination of the PCACertificate and Publisher rule, and a version number. Anything from the specified publisher with a version at or above the one specified is affected. | -| **File name** | FilePublisher | Most specific. Combination of the file name, publisher and PCA certificate as well as a minimum version number. Files from the publisher with the specified name and greater or equal to the specified version are affected. | +| **File name** | FilePublisher | Most specific. Combination of the file name, publisher, and PCA certificate and a minimum version number. Files from the publisher with the specified name and greater or equal to the specified version are affected. | ![Custom filepublisher file rule creation](images/wdac-wizard-custom-publisher-rule.png) @@ -115,12 +99,12 @@ The Wizard supports the creation of [file name rules](select-types-of-rules-to-c ### File Hash Rules -Lastly, the Wizard supports creating file rules using the hash of the file. Although this level is specific, it can cause additional administrative overhead to maintain the current product versions’ hash values. Each time a binary is updated, the hash value changes, therefore requiring a policy update. By default, the Wizard will use file hash as the fallback in case a file rule cannot be created using the specified file rule level. +Lastly, the Wizard supports creating file rules using the hash of the file. Although this level is specific, it can cause extra administrative overhead to maintain the current product versions’ hash values. Each time a binary is updated, the hash value changes, therefore requiring a policy update. By default, the Wizard will use file hash as the fallback in case a file rule cannot be created using the specified file rule level. #### Deleting Signing Rules -The table on the left of the page will document the allow and deny rules in the template, as well as any custom rules you create. Rules can be deleted from the policy by selecting the rule from the rules list table. Once the rule is highlighted, press the delete button underneath the table. you will be prompted for additional confirmation. Select `Yes` to remove the rule from the policy and the rules table. +The table on the left of the page will document the allow and deny rules in the template, and any custom rules you create. Rules can be deleted from the policy by selecting the rule from the rules list table. Once the rule is highlighted, press the delete button underneath the table. you will be prompted for additional confirmation. Select `Yes` to remove the rule from the policy and the rules table. ## Up next From 741b744ab13663438c2a1d2365815a81fda795d7 Mon Sep 17 00:00:00 2001 From: mestew Date: Tue, 5 Jan 2021 10:39:55 -0800 Subject: [PATCH 333/486] Fix link typo for language handling --- windows/whats-new/whats-new-windows-10-version-2004.md | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/windows/whats-new/whats-new-windows-10-version-2004.md b/windows/whats-new/whats-new-windows-10-version-2004.md index 8c86914b6b..f8c9549d00 100644 --- a/windows/whats-new/whats-new-windows-10-version-2004.md +++ b/windows/whats-new/whats-new-windows-10-version-2004.md @@ -52,7 +52,7 @@ Note: [Application Guard for Office](https://support.office.com/article/applicat ### Windows Setup -Windows Setup [answer files](https://docs.microsoft.com/windows-hardware/manufacture/desktop/update-windows-settings-and-scripts-create-your-own-answer-file-sxs) (unattend.xml) have [improved language ](https://oofhours.com/2020/06/01/new-in-windows-10-2004-better-language-handling/). +Windows Setup [answer files](https://docs.microsoft.com/windows-hardware/manufacture/desktop/update-windows-settings-and-scripts-create-your-own-answer-file-sxs) (unattend.xml) have [improved language handling](https://oofhours.com/2020/06/01/new-in-windows-10-2004-better-language-handling/). Improvements in Windows Setup with this release also include: - Reduced offline time during feature updates From 61a2969d920b2c5372ecef15fdc70421049d279d Mon Sep 17 00:00:00 2001 From: Jordan Geurten Date: Tue, 5 Jan 2021 10:47:48 -0800 Subject: [PATCH 334/486] Fixed a broken link in editing-policy.md and a recommended link change in wdac-wizard.md --- .../wdac-wizard-editing-policy.md | 7 +++---- .../windows-defender-application-control/wdac-wizard.md | 2 +- 2 files changed, 4 insertions(+), 5 deletions(-) diff --git a/windows/security/threat-protection/windows-defender-application-control/wdac-wizard-editing-policy.md b/windows/security/threat-protection/windows-defender-application-control/wdac-wizard-editing-policy.md index a239d415ec..e8e812e434 100644 --- a/windows/security/threat-protection/windows-defender-application-control/wdac-wizard-editing-policy.md +++ b/windows/security/threat-protection/windows-defender-application-control/wdac-wizard-editing-policy.md @@ -26,10 +26,9 @@ ms.date: 10/14/2020 The WDAC Wizard makes editing and viewing WDAC policies easier than the PowerShell cmdlets or manually. The Wizard currently supports the following editing capabilities:

    ## Configuring Policy Rules diff --git a/windows/security/threat-protection/windows-defender-application-control/wdac-wizard.md b/windows/security/threat-protection/windows-defender-application-control/wdac-wizard.md index 399ff347f0..3c662ab399 100644 --- a/windows/security/threat-protection/windows-defender-application-control/wdac-wizard.md +++ b/windows/security/threat-protection/windows-defender-application-control/wdac-wizard.md @@ -25,7 +25,7 @@ ms.date: 10/14/2020 - Windows 10 - Windows Server 2016 and above -The Windows Defender Application Control (WDAC) policy Wizard is an open source Windows desktop application written in C# and bundled as an MSIX pacakge. The Wizard was built to provide security architects, security and system administrators with a more user-friendly means to create, edit, and merge WDAC policies. The Wizard desktop application uses the [ConfigCI PowerShell Cmdlets](https://docs.microsoft.com/powershell/module/configci/?view=win10-ps) in the backend so the output policy of the Wizard and PowerShell cmdlets is identical. +The Windows Defender Application Control (WDAC) policy Wizard is an open source Windows desktop application written in C# and bundled as an MSIX pacakge. The Wizard was built to provide security architects, security and system administrators with a more user-friendly means to create, edit, and merge WDAC policies. The Wizard desktop application uses the [ConfigCI PowerShell Cmdlets](https://docs.microsoft.com/powershell/module/configci) in the backend so the output policy of the Wizard and PowerShell cmdlets is identical. ## Downloading the application From 6e2c901c5414c3baa394adf0fd5d01bcd1226dfc Mon Sep 17 00:00:00 2001 From: Denise Vangel-MSFT Date: Tue, 5 Jan 2021 11:23:05 -0800 Subject: [PATCH 335/486] Update windows/security/threat-protection/microsoft-defender-atp/attack-surface-reduction.md Co-authored-by: Trond B. Krokli <38162891+illfated@users.noreply.github.com> --- .../microsoft-defender-atp/attack-surface-reduction.md | 6 +++--- 1 file changed, 3 insertions(+), 3 deletions(-) diff --git a/windows/security/threat-protection/microsoft-defender-atp/attack-surface-reduction.md b/windows/security/threat-protection/microsoft-defender-atp/attack-surface-reduction.md index 212256ae38..6224bb44dc 100644 --- a/windows/security/threat-protection/microsoft-defender-atp/attack-surface-reduction.md +++ b/windows/security/threat-protection/microsoft-defender-atp/attack-surface-reduction.md @@ -245,9 +245,9 @@ GUID: `BE9BA2D9-53EA-4CDC-84E5-9B1EEEE46550` > [!NOTE] > The rule **Block executable content from email client and webmail** has the following alternative descriptions, depending on which application you use: -- > Intune (Configuration Profiles): Execution of executable content (exe, dll, ps, js, vbs, etc.) dropped from email (webmail/mail client) (no exceptions). -- > Endpoint Manager: Block executable content download from email and webmail clients. -- > Group Policy: Block executable content from email client and webmail. +> - Intune (Configuration Profiles): Execution of executable content (exe, dll, ps, js, vbs, etc.) dropped from email (webmail/mail client) (no exceptions). +> - Endpoint Manager: Block executable content download from email and webmail clients. +> - Group Policy: Block executable content from email client and webmail. ### Block executable files from running unless they meet a prevalence, age, or trusted list criterion From 9376aa6a6af47570b607021d885e7fc0ec0f313f Mon Sep 17 00:00:00 2001 From: Joey Caparas Date: Tue, 5 Jan 2021 13:53:42 -0800 Subject: [PATCH 336/486] update live response page --- .../microsoft-defender-atp/live-response.md | 31 +++++++++++-------- 1 file changed, 18 insertions(+), 13 deletions(-) diff --git a/windows/security/threat-protection/microsoft-defender-atp/live-response.md b/windows/security/threat-protection/microsoft-defender-atp/live-response.md index 193c067a32..59e886e92d 100644 --- a/windows/security/threat-protection/microsoft-defender-atp/live-response.md +++ b/windows/security/threat-protection/microsoft-defender-atp/live-response.md @@ -43,25 +43,30 @@ With live response, analysts can do all of the following tasks: Before you can initiate a session on a device, make sure you fulfill the following requirements: -- **Verify that you're running a supported version of Windows 10**.
    -Devices must be running one of the following versions of Windows 10: - - [1909](https://docs.microsoft.com/windows/whats-new/whats-new-windows-10-version-1909) or later - - [1903](https://docs.microsoft.com/windows/whats-new/whats-new-windows-10-version-1903) - - [1809](https://docs.microsoft.com/windows/whats-new/whats-new-windows-10-version-1809) - - [1803](https://docs.microsoft.com/windows/whats-new/whats-new-windows-10-version-1803) - - [1709](https://docs.microsoft.com/windows/whats-new/whats-new-windows-10-version-1709) +- **Verify that you're running a supported version of Windows**.
    +Devices must be running one of the following versions of Windows -- **Make sure to install appropriate security updates**.
    - - 1903: [KB4515384](https://support.microsoft.com/help/4515384/windows-10-update-kb4515384) - - 1809 (RS5): [KB4537818](https://support.microsoft.com/help/4537818/windows-10-update-kb4537818) - - 1803 (RS4): [KB4537795](https://support.microsoft.com/help/4537795/windows-10-update-kb4537795) - - 1709 (RS3): [KB4537816](https://support.microsoft.com/help/4537816/windows-10-update-kb4537816) + - **Windows 10** + - [Version 1909](https://docs.microsoft.com/windows/whats-new/whats-new-windows-10-version-1909) or later + - [Version 1903](https://docs.microsoft.com/windows/whats-new/whats-new-windows-10-version-1903) with [KB4515384](https://support.microsoft.com/en-us/help/4515384/windows-10-update-kb4515384) + - [Version 1809 (RS 5)](https://docs.microsoft.com/windows/whats-new/whats-new-windows-10-version-1809) with [with KB4537818](https://support.microsoft.com/help/4537818/windows-10-update-kb4537818) + - [Version 1803 (RS 4)](https://docs.microsoft.com/windows/whats-new/whats-new-windows-10-version-1803) with [KB4537795](https://support.microsoft.com/help/4537795/windows-10-update-kb4537795) + - [Version 1709 (RS 3)](https://docs.microsoft.com/windows/whats-new/whats-new-windows-10-version-1709) with [KB4537816](https://support.microsoft.com/help/4537816/windows-10-update-kb4537816) + + - **Windows Server 2019 - Only applicable for Public preview** + - Version 1903 or (with [KB4515384](https://support.microsoft.com/en-us/help/4515384/windows-10-update-kb4515384)) later + - Version 1809 (with [KB4537818](https://support.microsoft.com/en-us/help/4537818/windows-10-update-kb4537818)) -- **Enable live response from the settings page**.
    +- **Enable live response from the advanced settings page**.
    You'll need to enable the live response capability in the [Advanced features settings](advanced-features.md) page. >[!NOTE] >Only users with manage security or global admin roles can edit these settings. + +- **Enable live response for servers from the advanced settings page** (recommended).
    + + >[!NOTE] + >Only users with manage security or global admin roles can edit these settings. - **Ensure that the device has an Automation Remediation level assigned to it**.
    You'll need to enable, at least, the minimum Remediation Level for a given Device Group. Otherwise you won't be able to establish a Live Response session to a member of that group. From 2967b9c0394b3e88675aa292fa1047df241dd3f7 Mon Sep 17 00:00:00 2001 From: Joey Caparas Date: Tue, 5 Jan 2021 13:55:10 -0800 Subject: [PATCH 337/486] add description in advanced settings page --- .../microsoft-defender-atp/advanced-features.md | 6 ++++++ 1 file changed, 6 insertions(+) diff --git a/windows/security/threat-protection/microsoft-defender-atp/advanced-features.md b/windows/security/threat-protection/microsoft-defender-atp/advanced-features.md index 725daf0761..50b285cef4 100644 --- a/windows/security/threat-protection/microsoft-defender-atp/advanced-features.md +++ b/windows/security/threat-protection/microsoft-defender-atp/advanced-features.md @@ -42,6 +42,12 @@ Turn on this feature so that users with the appropriate permissions can start a For more information about role assignments, see [Create and manage roles](user-roles.md). +## Live response for servers +Turn on this feature so that users with the appropriate permissions can start a live response session on servers. + +For more information about role assignments, see [Create and manage roles](user-roles.md). + + ## Live response unsigned script execution Enabling this feature allows you to run unsigned scripts in a live response session. From d11f2ac409ca3a234724a010bab0bf4d9f795e17 Mon Sep 17 00:00:00 2001 From: Gary Moore Date: Tue, 5 Jan 2021 16:19:25 -0800 Subject: [PATCH 338/486] Added bullets and spacing for readbility --- .../whats-new-windows-10-version-2004.md | 32 ++++++++++++------- 1 file changed, 21 insertions(+), 11 deletions(-) diff --git a/windows/whats-new/whats-new-windows-10-version-2004.md b/windows/whats-new/whats-new-windows-10-version-2004.md index f8c9549d00..38d51da399 100644 --- a/windows/whats-new/whats-new-windows-10-version-2004.md +++ b/windows/whats-new/whats-new-windows-10-version-2004.md @@ -30,8 +30,11 @@ To download and install Windows 10, version 2004, use Windows Update (**Settings ### Windows Hello - Windows Hello is now supported as Fast Identity Online 2 (FIDO2) authenticator across all major browsers including Chrome and Firefox. + - You can now enable passwordless sign-in for Microsoft accounts on your Windows 10 device by going to **Settings > Accounts > Sign-in options**, and selecting **On** under **Make your device passwordless**. Enabling passwordless sign in will switch all Microsoft accounts on your Windows 10 device to modern authentication with Windows Hello Face, Fingerprint, or PIN. + - Windows Hello PIN sign-in support is [added to Safe mode](https://docs.microsoft.com/windows-insider/at-work-pro/wip-4-biz-whats-new#windows-hello-pin-in-safe-mode-build-18995). + - Windows Hello for Business now has Hybrid Azure Active Directory support and phone number sign-in (MSA). FIDO2 security key support is expanded to Azure Active Directory hybrid environments, enabling enterprises with hybrid environments to take advantage of [passwordless authentication](https://docs.microsoft.com/azure/active-directory/authentication/howto-authentication-passwordless-security-key-on-premises). For more information, see [Expanding Azure Active Directory support for FIDO2 preview to hybrid environments](https://techcommunity.microsoft.com/t5/windows-it-pro-blog/expanding-azure-active-directory-support-for-fido2-preview-to/ba-p/981894). ### Windows Defender System Guard @@ -84,7 +87,7 @@ Also see [What's new in Microsoft Intune](https://docs.microsoft.com/mem/intune/ ### Windows Assessment and Deployment Toolkit (ADK) -Download the Windows ADK and Windows PE add-on for Windows 10, version 2004 [here](https://docs.microsoft.com/windows-hardware/get-started/adk-install). +Download the Windows ADK and Windows PE add-on for Windows 10, version 2004 here: [Download and install the Windows ADK](https://docs.microsoft.com/windows-hardware/get-started/adk-install). For information about what's new in the ADK, see [What's new in the Windows ADK for Windows 10, version 2004](https://docs.microsoft.com/windows-hardware/get-started/what-s-new-in-kits-and-tools#whats-new-in-the-windows-adk-for-windows-10-version-2004). @@ -120,8 +123,11 @@ The following [Delivery Optimization](https://docs.microsoft.com/windows/deploym ### Windows Update for Business [Windows Update for Business](https://docs.microsoft.com/windows/deployment/update/waas-manage-updates-wufb) enhancements in this release include: + - Intune console updates: target version is now available allowing you to specify which version of Windows 10 you want devices to move to. Additionally, this capability enables you to keep devices on their current version until they reach end of service. Check it out in Intune, also available as a Group Policy and Configuration Service Provider (CSP) policy. + - Validation improvements: To ensure devices and end users stay productive and protected, Microsoft uses safeguard holds to block devices from updating when there are known issues that would impact that device. Also, to better enable IT administrators to validate on the latest release, we have created a new policy that enables admins to opt devices out of the built-in safeguard holds. + - Update less: Last year, we [changed update installation policies](https://blogs.windows.com/windowsexperience/2019/04/04/improving-the-windows-10-update-experience-with-control-quality-and-transparency/#l2jH7KMkOkfcWdBs.97) for Windows 10 to only target devices running a feature update version that is nearing end of service. As a result, many devices are only updating once a year. To enable all devices to make the most of this policy change, and to prevent confusion, we have removed deferrals from the Windows Update settings **Advanced Options** page starting on Windows 10, version 2004. If you wish to continue leveraging deferrals, you can use local Group Policy (**Computer Configuration > Administrative Templates > Windows Components > Windows Update > Windows Update for Business > Select when Preview builds and Feature Updates are received** or **Select when Quality Updates are received**). For more information about this change, see [Simplified Windows Update settings for end users](https://techcommunity.microsoft.com/t5/windows-it-pro-blog/simplified-windows-update-settings-for-end-users/ba-p/1497215). ## Networking @@ -185,9 +191,13 @@ Several enhancements to the Windows 10 user interface are implemented in this re ### Cortana [Cortana](https://www.microsoft.com/cortana) has been updated and enhanced in Windows 10, version 2004: + - Productivity: chat-based UI gives you the ability to [interact with Cortana using typed or spoken natural language queries](https://support.microsoft.com/help/4557165) to easily get information across Microsoft 365 and stay on track. Productivity focused capabilities such as finding people profiles, checking schedules, joining meetings, and adding to lists in Microsoft To Do are currently available to English speakers in the US. + - In the coming months, with regular app updates through the Microsoft Store, we’ll enhance this experience to support wake word invocation and enable listening when you say “Cortana,” offer more productivity capabilities such as surfacing relevant emails and documents to help you prepare for meetings, and expand supported capabilities for international users. + - Security: tightened access to Cortana so that you must be securely logged in with your work or school account or your Microsoft account before using Cortana. Because of this tightened access, some consumer skills including music, connected home, and third-party skills will no longer be available. Additionally, users [get cloud-based assistance services that meet Office 365’s enterprise-level privacy, security, and compliance promises](https://docs.microsoft.com/microsoft-365/admin/misc/cortana-integration?view=o365-worldwide) as set out in the Online Services Terms. + - Move the Cortana window: drag the Cortana window to a more convenient location on your desktop. For updated information, see the [Microsoft 365 blog](https://aka.ms/CortanaUpdatesMay2020). @@ -246,13 +256,13 @@ For information about Desktop Analytics and this release of Windows 10, see [Wha ## See Also -[What’s new for IT pros in Windows 10, version 2004](https://techcommunity.microsoft.com/t5/windows-it-pro-blog/what-s-new-for-it-pros-in-windows-10-version-2004/ba-p/1419764): Windows IT Pro blog.
    -[What’s new in the Windows 10 May 2020 Update](https://blogs.windows.com/windowsexperience/2020/05/27/whats-new-in-the-windows-10-may-2020-update/): Windows Insider blog.
    -[What's New in Windows Server](https://docs.microsoft.com/windows-server/get-started/whats-new-in-windows-server): New and updated features in Windows Server.
    -[Windows 10 Features](https://www.microsoft.com/windows/features): General information about Windows 10 features.
    -[What's New in Windows 10](https://docs.microsoft.com/windows/whats-new/): See what’s new in other versions of Windows 10.
    -[Start developing on Windows 10, version 2004 today](https://blogs.windows.com/windowsdeveloper/2020/05/12/start-developing-on-windows-10-version-2004-today/): New and updated features in Windows 10 that are of interest to developers.
    -[What's new for business in Windows 10 Insider Preview Builds](https://docs.microsoft.com/windows-insider/at-work-pro/wip-4-biz-whats-new): A preview of new features for businesses.
    -[What's new in Windows 10, version 2004 - Windows Insiders](https://docs.microsoft.com/windows-insider/at-home/whats-new-wip-at-home-20h1): This list also includes consumer focused new features.
    -[Features and functionality removed in Windows 10](https://docs.microsoft.com/windows/deployment/planning/windows-10-removed-features): Removed features.
    -[Windows 10 features we’re no longer developing](https://docs.microsoft.com/windows/deployment/planning/windows-10-deprecated-features): Features that are not being developed.
    + - [What’s new for IT pros in Windows 10, version 2004](https://techcommunity.microsoft.com/t5/windows-it-pro-blog/what-s-new-for-it-pros-in-windows-10-version-2004/ba-p/1419764): Windows IT Pro blog.
    + - [What’s new in the Windows 10 May 2020 Update](https://blogs.windows.com/windowsexperience/2020/05/27/whats-new-in-the-windows-10-may-2020-update/): Windows Insider blog.
    + - [What's New in Windows Server](https://docs.microsoft.com/windows-server/get-started/whats-new-in-windows-server): New and updated features in Windows Server.
    + - [Windows 10 Features](https://www.microsoft.com/windows/features): General information about Windows 10 features.
    + - [What's New in Windows 10](https://docs.microsoft.com/windows/whats-new/): See what’s new in other versions of Windows 10.
    + - [Start developing on Windows 10, version 2004 today](https://blogs.windows.com/windowsdeveloper/2020/05/12/start-developing-on-windows-10-version-2004-today/): New and updated features in Windows 10 that are of interest to developers.
    + - [What's new for business in Windows 10 Insider Preview Builds](https://docs.microsoft.com/windows-insider/at-work-pro/wip-4-biz-whats-new): A preview of new features for businesses.
    + - [What's new in Windows 10, version 2004 - Windows Insiders](https://docs.microsoft.com/windows-insider/at-home/whats-new-wip-at-home-20h1): This list also includes consumer focused new features.
    + - [Features and functionality removed in Windows 10](https://docs.microsoft.com/windows/deployment/planning/windows-10-removed-features): Removed features.
    + - [Windows 10 features we’re no longer developing](https://docs.microsoft.com/windows/deployment/planning/windows-10-deprecated-features): Features that are not being developed.
    From d0dfadfc0882faa806f82ca511b7d0747633a36b Mon Sep 17 00:00:00 2001 From: katoma2017 <48699113+katoma2017@users.noreply.github.com> Date: Tue, 5 Jan 2021 16:46:04 -0800 Subject: [PATCH 339/486] Update security-compliance-toolkit-10.md Add the update baseline to the security baseline toolkit --- .../threat-protection/security-compliance-toolkit-10.md | 3 +++ 1 file changed, 3 insertions(+) diff --git a/windows/security/threat-protection/security-compliance-toolkit-10.md b/windows/security/threat-protection/security-compliance-toolkit-10.md index e8dd6ab29f..e8972cbc75 100644 --- a/windows/security/threat-protection/security-compliance-toolkit-10.md +++ b/windows/security/threat-protection/security-compliance-toolkit-10.md @@ -47,6 +47,9 @@ The Security Compliance Toolkit consists of: - Microsoft Edge security baseline - Version 85 + + - Windows Update security baseline + - Windows 10 20H2 and below (October 2020 Update) - Tools - Policy Analyzer tool From 92fc72fae38caa31ea5ca967cea2914d03a35b4e Mon Sep 17 00:00:00 2001 From: Gary Moore Date: Tue, 5 Jan 2021 16:49:16 -0800 Subject: [PATCH 340/486] Minor fixes and Acrolinx "Italized" --- .../wdac-wizard-create-base-policy.md | 11 ++++++----- 1 file changed, 6 insertions(+), 5 deletions(-) diff --git a/windows/security/threat-protection/windows-defender-application-control/wdac-wizard-create-base-policy.md b/windows/security/threat-protection/windows-defender-application-control/wdac-wizard-create-base-policy.md index 277a5b28a2..f911c0979d 100644 --- a/windows/security/threat-protection/windows-defender-application-control/wdac-wizard-create-base-policy.md +++ b/windows/security/threat-protection/windows-defender-application-control/wdac-wizard-create-base-policy.md @@ -32,13 +32,13 @@ When creating policies for use with Windows Defender Application Control (WDAC), Each of the template policies has a unique set of policy allow list rules that will affect the circle-of-trust and security model of the policy. The following table lists the policies in increasing order of trust and freedom. For instance, the Default Windows mode policy trusts fewer application publishers and signers than the Signed and Reputable mode policy. The Default Windows policy will have a smaller circle-of-trust with better security than the Signed and Reputable policy, but at the expense of compatibility. -| **Template Base Policy** | **Description** | +| Template Base Policy | Description | |---------------------------------|-------------------------------------------------------------------| | **Default Windows Mode** | Default Windows mode will authorize the following components:
    • Windows operating components - any binary installed by a fresh install of Windows
    • Apps installed from the Microsoft Store
    • Microsoft Office365 apps, OneDrive, and Microsoft Teams
    • Third-party [Windows Hardware Compatible drivers](https://docs.microsoft.com/windows-hardware/drivers/install/whql-release-signature)
    | | **Allow Microsoft Mode** | Allow mode will authorize the following components:
    • Windows operating components - any binary installed by a fresh install of Windows
    • Apps installed from the Microsoft Store
    • Microsoft Office365 apps, OneDrive, and Microsoft Teams
    • Third-party [Windows Hardware Compatible drivers](https://docs.microsoft.com/windows-hardware/drivers/install/whql-release-signature)
    • *All Microsoft-signed software*
    | | **Signed and Reputable Mode** | Signed and Reputable mode will authorize the following components:
    • Windows operating components - any binary installed by a fresh install of Windows
    • Apps installed from the Microsoft Store
    • Microsoft Office365 apps, OneDrive, and Microsoft Teams
    • Third-party [Windows Hardware Compatible drivers](https://docs.microsoft.com/windows-hardware/drivers/install/whql-release-signature)
    • All Microsoft-signed software
    • *Files with good reputation per [Microsoft Defender's Intelligent Security Graph technology](use-windows-defender-application-control-with-intelligent-security-graph.md)*
    | -*Italized content denotes the changes in the current policy with respect to the policy prior.* +*Italicized content denotes the changes in the current policy with respect to the policy prior.* More information about the Default Windows Mode and Allow Microsoft Mode policies can be accessed through the [Example WDAC base policies article](example-wdac-base-policies.md). @@ -67,7 +67,8 @@ A description of each policy rule, beginning with the left-most column, is provi | **Unsigned System Integrity Policy** | Allows the policy to remain unsigned. When this option is removed, the policy must be signed and have UpdatePolicySigners added to the policy to enable future policy modifications. | | **User Mode Code Integrity** | WDAC policies restrict both kernel-mode and user-mode binaries. By default, only kernel-mode binaries are restricted. Enabling this rule option validates user mode executables and scripts. | -![Rule options UI for Windows Allowed mode policy](images/wdac-wizard-rule-options-UI-advanced-collapsed.png) +> [!div class="mx-imgBorder"] +> ![Rule options UI for Windows Allowed mode policy](images/wdac-wizard-rule-options-UI-advanced-collapsed.png) ### Advanced Policy Rules Description @@ -120,8 +121,8 @@ The Wizard supports the creation of [file name rules](select-types-of-rules-to-c | **Product name** | Specifies the name of the product with which the binary ships. | | **Internal name** | Specifies the internal name of the binary. | - -![Custom file attributes rule](images/wdac-wizard-custom-file-attribute-rule.png) +> [!div class="mx-imgBorder"] +> ![Custom file attributes rule](images/wdac-wizard-custom-file-attribute-rule.png) ### File Hash Rules From 0a4079fdf4fd86f28f0adf4511f6191210b68937 Mon Sep 17 00:00:00 2001 From: Gary Moore Date: Tue, 5 Jan 2021 16:51:02 -0800 Subject: [PATCH 341/486] Acrolinx: "pacakge" --- .../windows-defender-application-control/wdac-wizard.md | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/windows/security/threat-protection/windows-defender-application-control/wdac-wizard.md b/windows/security/threat-protection/windows-defender-application-control/wdac-wizard.md index 3c662ab399..0232249e8a 100644 --- a/windows/security/threat-protection/windows-defender-application-control/wdac-wizard.md +++ b/windows/security/threat-protection/windows-defender-application-control/wdac-wizard.md @@ -25,7 +25,7 @@ ms.date: 10/14/2020 - Windows 10 - Windows Server 2016 and above -The Windows Defender Application Control (WDAC) policy Wizard is an open source Windows desktop application written in C# and bundled as an MSIX pacakge. The Wizard was built to provide security architects, security and system administrators with a more user-friendly means to create, edit, and merge WDAC policies. The Wizard desktop application uses the [ConfigCI PowerShell Cmdlets](https://docs.microsoft.com/powershell/module/configci) in the backend so the output policy of the Wizard and PowerShell cmdlets is identical. +The Windows Defender Application Control (WDAC) policy Wizard is an open source Windows desktop application written in C# and bundled as an MSIX package. The Wizard was built to provide security architects, security and system administrators with a more user-friendly means to create, edit, and merge WDAC policies. The Wizard desktop application uses the [ConfigCI PowerShell Cmdlets](https://docs.microsoft.com/powershell/module/configci) in the backend so the output policy of the Wizard and PowerShell cmdlets is identical. ## Downloading the application From 85f66153f659cfc3feb4fb2d0d9895d30242a34c Mon Sep 17 00:00:00 2001 From: ShowMeMore Date: Wed, 6 Jan 2021 16:45:56 +0100 Subject: [PATCH 342/486] Update minimum-requirements.md Updated licensing requirements match academic licensing: - Added Microsoft 365 A5 Security to the list of licensing requirements for Microsoft Defender for Endpoint - Added Microsoft 365 A5 Security to the note for Microsoft Defender for Endpoint for Servers --- .../microsoft-defender-atp/minimum-requirements.md | 5 +++-- 1 file changed, 3 insertions(+), 2 deletions(-) diff --git a/windows/security/threat-protection/microsoft-defender-atp/minimum-requirements.md b/windows/security/threat-protection/microsoft-defender-atp/minimum-requirements.md index 8605eac87e..96515f8a95 100644 --- a/windows/security/threat-protection/microsoft-defender-atp/minimum-requirements.md +++ b/windows/security/threat-protection/microsoft-defender-atp/minimum-requirements.md @@ -39,8 +39,9 @@ Microsoft Defender for Endpoint requires one of the following Microsoft volume l - Windows 10 Enterprise E5 - Windows 10 Education A5 - Microsoft 365 E5 (M365 E5) which includes Windows 10 Enterprise E5 -- Microsoft 365 E5 Security - Microsoft 365 A5 (M365 A5) +- Microsoft 365 E5 Security +- Microsoft 365 A5 Security > [!NOTE] > Eligible licensed users may use Microsoft Defender for Endpoint on up to five concurrent devices. @@ -57,7 +58,7 @@ Microsoft Defender for Endpoint, on Windows Server, requires one of the followin > * Microsoft Defender for Endpoint > * Windows E5/A5 > * Microsoft 365 E5/A5 -> * Microsoft 365 E5 Security +> * Microsoft 365 E5/A5 Security For detailed licensing information, see the [Product Terms site](https://www.microsoft.com/licensing/terms/) and work with your account team to learn more about the terms and conditions. From 5547d1d461653e0fe57b7bd77ed99251c8e52e3e Mon Sep 17 00:00:00 2001 From: Denise Vangel-MSFT Date: Wed, 6 Jan 2021 09:54:04 -0800 Subject: [PATCH 343/486] antivirus platform updates started section for older versions --- ...on-updates-microsoft-defender-antivirus.md | 2 +- ...-baselines-microsoft-defender-antivirus.md | 265 ++++++++++++++++++ 2 files changed, 266 insertions(+), 1 deletion(-) diff --git a/windows/security/threat-protection/microsoft-defender-antivirus/manage-protection-updates-microsoft-defender-antivirus.md b/windows/security/threat-protection/microsoft-defender-antivirus/manage-protection-updates-microsoft-defender-antivirus.md index 613d0bb3b1..7dcee83d5a 100644 --- a/windows/security/threat-protection/microsoft-defender-antivirus/manage-protection-updates-microsoft-defender-antivirus.md +++ b/windows/security/threat-protection/microsoft-defender-antivirus/manage-protection-updates-microsoft-defender-antivirus.md @@ -1,5 +1,5 @@ --- -title: Manage how and where Microsoft Defender AV receives updates +title: Manage how and where Microsoft Defender Antivirus receives updates description: Manage the fallback order for how Microsoft Defender Antivirus receives protection updates. keywords: updates, security baselines, protection, fallback order, ADL, MMPC, UNC, file path, share, wsus search.product: eADQiWindows 10XVcnh diff --git a/windows/security/threat-protection/microsoft-defender-antivirus/manage-updates-baselines-microsoft-defender-antivirus.md b/windows/security/threat-protection/microsoft-defender-antivirus/manage-updates-baselines-microsoft-defender-antivirus.md index 9700678379..e5bb66a2ff 100644 --- a/windows/security/threat-protection/microsoft-defender-antivirus/manage-updates-baselines-microsoft-defender-antivirus.md +++ b/windows/security/threat-protection/microsoft-defender-antivirus/manage-updates-baselines-microsoft-defender-antivirus.md @@ -336,6 +336,271 @@ When this update is installed, the device needs the jump package 4.10.2001.10 to
    +### Previous version updates: Technical upgrade support only + +
    + + +
    + November-2020 (Platform: 4.18.2011.6 | Engine: 1.1.17700.4) + + Security intelligence update version: **1.327.1854.0** + Released: **December 03, 2020** + Platform: **4.18.2011.6** + Engine: **1.1.17700.4** + Support phase: **Security and Critical Updates** + +### What's new +- Improved SmartScreen status support logging +- Apply CPU throttling policy to manually initiated scans + +### Known Issues +No known issues +
    +
    + October-2020 (Platform: 4.18.2010.7 | Engine: 1.1.17600.5) + + Security intelligence update version: **1.327.7.0** + Released: **October 29, 2020** + Platform: **4.18.2010.7** + Engine: **1.1.17600.5** + Support phase: **Security and Critical Updates** + +### What's new +- New descriptions for special threat categories +- Improved emulation capabilities +- Improved host address allow/block capabilities +- New option in Defender CSP to Ignore merging of local user exclusions + +### Known Issues +No known issues +
    +
    + September-2020 (Platform: 4.18.2009.7 | Engine: 1.1.17500.4) + + Security intelligence update version: **1.325.10.0** + Released: **October 01, 2020** + Platform: **4.18.2009.7** + Engine: **1.1.17500.4** + Support phase: **Security and Critical Updates** + +### What's new +- Admin permissions are required to restore files in quarantine +- XML formatted events are now supported +- CSP support for ignoring exclusion merges +- New management interfaces for: + - UDP Inspection + - Network Protection on Server 2019 + - IP Address exclusions for Network Protection +- Improved visibility into TPM measurements +- Improved Office VBA module scanning + +### Known Issues +No known issues +
    +
    +
    + August-2020 (Platform: 4.18.2008.9 | Engine: 1.1.17400.5) + + Security intelligence update version: **1.323.9.0** + Released: **August 27, 2020** + Platform: **4.18.2008.9** + Engine: **1.1.17400.5** + Support phase: **Security and Critical Updates** + +### What's new + +- Add more telemetry events +- Improved scan event telemetry +- Improved behavior monitoring for memory scans +- Improved macro streams scanning +- Added `AMRunningMode` to Get-MpComputerStatus PowerShell cmdlet +- [DisableAntiSpyware](https://docs.microsoft.com/windows-hardware/customize/desktop/unattend/security-malware-windows-defender-disableantispyware) is ignored. Microsoft Defender Antivirus automatically turns itself off when it detects another antivirus program. + + +### Known Issues +No known issues +
    +
    + +
    + July-2020 (Platform: 4.18.2007.8 | Engine: 1.1.17300.4) + + Security intelligence update version: **1.321.30.0** + Released: **July 28, 2020** + Platform: **4.18.2007.8** + Engine: **1.1.17300.4** + Support phase: **Security and Critical Updates** + +### What's new +* Improved telemetry for BITS +* Improved Authenticode code signing certificate validation + +### Known Issues +No known issues +
    +
    + +
    + June-2020 (Platform: 4.18.2006.10 | Engine: 1.1.17200.2) + + Security intelligence update version: **1.319.20.0** + Released: **June 22, 2020** + Platform: **4.18.2006.10** + Engine: **1.1.17200.2** + Support phase: **Technical upgrade Support (Only)** + +### What's new +* Possibility to specify the [location of the support logs](https://docs.microsoft.com/windows/security/threat-protection/microsoft-defender-antivirus/collect-diagnostic-data) +* Skipping aggressive catchup scan in Passive mode. +* Allow Defender to update on metered connections +* Fixed performance tuning when caching is disabled +* Fixed registry query +* Fixed scantime randomization in ADMX + +### Known Issues +No known issues +
    +
    + +
    + May-2020 (Platform: 4.18.2005.4 | Engine: 1.1.17100.2) + + Security intelligence update version: **1.317.20.0** + Released: **May 26, 2020** + Platform: **4.18.2005.4** + Engine: **1.1.17100.2** + Support phase: **Technical upgrade Support (Only)** + +### What's new +* Improved logging for scan events +* Improved user mode crash handling. +* Added event tracing for Tamper protection +* Fixed AMSI Sample submission +* Fixed AMSI Cloud blocking +* Fixed Security update install log + +### Known Issues +No known issues +
    +
    + +
    + April-2020 (Platform: 4.18.2004.6 | Engine: 1.1.17000.2) + + Security intelligence update version: **1.315.12.0** + Released: **April 30, 2020** + Platform: **4.18.2004.6** + Engine: **1.1.17000.2** + Support phase: **Technical upgrade Support (Only)** + +### What's new +* WDfilter improvements +* Add more actionable event data to attack surface reduction detection events +* Fixed version information in diagnostic data and WMI +* Fixed incorrect platform version in UI after platform update +* Dynamic URL intel for Fileless threat protection +* UEFI scan capability +* Extend logging for updates + +### Known Issues +No known issues +
    +
    + +
    + March-2020 (Platform: 4.18.2003.8 | Engine: 1.1.16900.2) + + Security intelligence update version: **1.313.8.0** + Released: **March 24, 2020** + Platform: **4.18.2003.8** + Engine: **1.1.16900.4** + Support phase: **Technical upgrade Support (Only)** + +### What's new + +* CPU Throttling option added to [MpCmdRun](https://docs.microsoft.com/windows/security/threat-protection/microsoft-defender-antivirus/command-line-arguments-microsoft-defender-antivirus) +* Improve diagnostic capability +* reduce Security intelligence timeout (5 min) +* Extend AMSI engine internal log capability +* Improve notification for process blocking + +### Known Issues +[**Fixed**] Microsoft Defender Antivirus is skipping files when running a scan. + +
    +
    + +
    + + February-2020 (Platform: - | Engine: 1.1.16800.2) + + + Security intelligence update version: **1.311.4.0** + Released: **February 25, 2020** + Platform/Client: **-** + Engine: **1.1.16800.2** + Support phase: **N/A** + +### What's new + + +### Known Issues +No known issues +
    +
    + +
    + January-2020 (Platform: 4.18.2001.10 | Engine: 1.1.16700.2) + + +Security intelligence update version: **1.309.32.0** +Released: **January 30, 2020** +Platform/Client: **4.18.2001.10** +Engine: **1.1.16700.2** +Support phase: **Technical upgrade Support (Only)** + +### What's new + +* Fixed BSOD on WS2016 with Exchange +* Support platform updates when TMP is redirected to network path +* Platform and engine versions are added to [WDSI](https://www.microsoft.com/wdsi/defenderupdates) +* extend Emergency signature update to [passive mode](https://docs.microsoft.com/windows/security/threat-protection/microsoft-defender-antivirus/microsoft-defender-antivirus-compatibility) +* Fix 4.18.1911.3 hang + +### Known Issues +[**Fixed**] devices utilizing [modern standby mode](https://docs.microsoft.com/windows-hardware/design/device-experiences/modern-standby) may experience a hang with the Windows Defender filter driver that results in a gap of protection. Affected machines appear to the customer as having not updated to the latest antimalware platform. +
    +> [!IMPORTANT] +> This updates is needed by RS1 devices running lower version of the platform to support SHA2.
    This update has reboot flag for systems that are experiencing the hang issue.
    the This update is re-released in April 2020 and will not be superseded by newer updates to keep future availability. +
    +> [!IMPORTANT] +> This update is categorized as an "update" due to its reboot requirement and will only be offered with a [Windows Update](https://support.microsoft.com/help/4027667/windows-10-update) +
    +
    + +
    + November-2019 (Platform: 4.18.1911.3 | Engine: 1.1.16600.7) + +Security intelligence update version: **1.307.13.0** +Released: **December 7, 2019** +Platform: **4.18.1911.3** +Engine: **1.1.17000.7** +Support phase: **No support** + +### What's new + +* Fixed MpCmdRun tracing level +* Fixed WDFilter version info +* Improve notifications (PUA) +* add MRT logs to support files + +### Known Issues +When this update is installed, the device needs the jump package 4.10.2001.10 to be able to update to the latest platform version. +
    +
    + + ## Microsoft Defender Antivirus platform support Platform and engine updates are provided on a monthly cadence. To be fully supported, keep current with the latest platform updates. Our support structure is dynamic, evolving into two phases depending on the availability of the latest platform version: From 2e112248e6888198bc74baf1fe9e35a8fcb7cff4 Mon Sep 17 00:00:00 2001 From: Denise Vangel-MSFT Date: Wed, 6 Jan 2021 09:56:26 -0800 Subject: [PATCH 344/486] Update manage-updates-baselines-microsoft-defender-antivirus.md pared down current version section --- ...-baselines-microsoft-defender-antivirus.md | 200 ------------------ 1 file changed, 200 deletions(-) diff --git a/windows/security/threat-protection/microsoft-defender-antivirus/manage-updates-baselines-microsoft-defender-antivirus.md b/windows/security/threat-protection/microsoft-defender-antivirus/manage-updates-baselines-microsoft-defender-antivirus.md index e5bb66a2ff..369b94de5a 100644 --- a/windows/security/threat-protection/microsoft-defender-antivirus/manage-updates-baselines-microsoft-defender-antivirus.md +++ b/windows/security/threat-protection/microsoft-defender-antivirus/manage-updates-baselines-microsoft-defender-antivirus.md @@ -135,206 +135,6 @@ No known issues No known issues
    -
    - August-2020 (Platform: 4.18.2008.9 | Engine: 1.1.17400.5) - - Security intelligence update version: **1.323.9.0** - Released: **August 27, 2020** - Platform: **4.18.2008.9** - Engine: **1.1.17400.5** - Support phase: **Security and Critical Updates** - -### What's new - -- Add more telemetry events -- Improved scan event telemetry -- Improved behavior monitoring for memory scans -- Improved macro streams scanning -- Added `AMRunningMode` to Get-MpComputerStatus PowerShell cmdlet -- [DisableAntiSpyware](https://docs.microsoft.com/windows-hardware/customize/desktop/unattend/security-malware-windows-defender-disableantispyware) is ignored. Microsoft Defender Antivirus automatically turns itself off when it detects another antivirus program. - - -### Known Issues -No known issues -
    -
    - -
    - July-2020 (Platform: 4.18.2007.8 | Engine: 1.1.17300.4) - - Security intelligence update version: **1.321.30.0** - Released: **July 28, 2020** - Platform: **4.18.2007.8** - Engine: **1.1.17300.4** - Support phase: **Security and Critical Updates** - -### What's new -* Improved telemetry for BITS -* Improved Authenticode code signing certificate validation - -### Known Issues -No known issues -
    -
    - -
    - June-2020 (Platform: 4.18.2006.10 | Engine: 1.1.17200.2) - - Security intelligence update version: **1.319.20.0** - Released: **June 22, 2020** - Platform: **4.18.2006.10** - Engine: **1.1.17200.2** - Support phase: **Technical upgrade Support (Only)** - -### What's new -* Possibility to specify the [location of the support logs](https://docs.microsoft.com/windows/security/threat-protection/microsoft-defender-antivirus/collect-diagnostic-data) -* Skipping aggressive catchup scan in Passive mode. -* Allow Defender to update on metered connections -* Fixed performance tuning when caching is disabled -* Fixed registry query -* Fixed scantime randomization in ADMX - -### Known Issues -No known issues -
    -
    - -
    - May-2020 (Platform: 4.18.2005.4 | Engine: 1.1.17100.2) - - Security intelligence update version: **1.317.20.0** - Released: **May 26, 2020** - Platform: **4.18.2005.4** - Engine: **1.1.17100.2** - Support phase: **Technical upgrade Support (Only)** - -### What's new -* Improved logging for scan events -* Improved user mode crash handling. -* Added event tracing for Tamper protection -* Fixed AMSI Sample submission -* Fixed AMSI Cloud blocking -* Fixed Security update install log - -### Known Issues -No known issues -
    -
    - -
    - April-2020 (Platform: 4.18.2004.6 | Engine: 1.1.17000.2) - - Security intelligence update version: **1.315.12.0** - Released: **April 30, 2020** - Platform: **4.18.2004.6** - Engine: **1.1.17000.2** - Support phase: **Technical upgrade Support (Only)** - -### What's new -* WDfilter improvements -* Add more actionable event data to attack surface reduction detection events -* Fixed version information in diagnostic data and WMI -* Fixed incorrect platform version in UI after platform update -* Dynamic URL intel for Fileless threat protection -* UEFI scan capability -* Extend logging for updates - -### Known Issues -No known issues -
    -
    - -
    - March-2020 (Platform: 4.18.2003.8 | Engine: 1.1.16900.2) - - Security intelligence update version: **1.313.8.0** - Released: **March 24, 2020** - Platform: **4.18.2003.8** - Engine: **1.1.16900.4** - Support phase: **Technical upgrade Support (Only)** - -### What's new - -* CPU Throttling option added to [MpCmdRun](https://docs.microsoft.com/windows/security/threat-protection/microsoft-defender-antivirus/command-line-arguments-microsoft-defender-antivirus) -* Improve diagnostic capability -* reduce Security intelligence timeout (5 min) -* Extend AMSI engine internal log capability -* Improve notification for process blocking - -### Known Issues -[**Fixed**] Microsoft Defender Antivirus is skipping files when running a scan. - -
    -
    - -
    - - February-2020 (Platform: - | Engine: 1.1.16800.2) - - - Security intelligence update version: **1.311.4.0** - Released: **February 25, 2020** - Platform/Client: **-** - Engine: **1.1.16800.2** - Support phase: **N/A** - -### What's new - - -### Known Issues -No known issues -
    -
    - -
    - January-2020 (Platform: 4.18.2001.10 | Engine: 1.1.16700.2) - - -Security intelligence update version: **1.309.32.0** -Released: **January 30, 2020** -Platform/Client: **4.18.2001.10** -Engine: **1.1.16700.2** -Support phase: **Technical upgrade Support (Only)** - -### What's new - -* Fixed BSOD on WS2016 with Exchange -* Support platform updates when TMP is redirected to network path -* Platform and engine versions are added to [WDSI](https://www.microsoft.com/wdsi/defenderupdates) -* extend Emergency signature update to [passive mode](https://docs.microsoft.com/windows/security/threat-protection/microsoft-defender-antivirus/microsoft-defender-antivirus-compatibility) -* Fix 4.18.1911.3 hang - -### Known Issues -[**Fixed**] devices utilizing [modern standby mode](https://docs.microsoft.com/windows-hardware/design/device-experiences/modern-standby) may experience a hang with the Windows Defender filter driver that results in a gap of protection. Affected machines appear to the customer as having not updated to the latest antimalware platform. -
    -> [!IMPORTANT] -> This updates is needed by RS1 devices running lower version of the platform to support SHA2.
    This update has reboot flag for systems that are experiencing the hang issue.
    the This update is re-released in April 2020 and will not be superseded by newer updates to keep future availability. -
    -> [!IMPORTANT] -> This update is categorized as an "update" due to its reboot requirement and will only be offered with a [Windows Update](https://support.microsoft.com/help/4027667/windows-10-update) -
    -
    - -
    - November-2019 (Platform: 4.18.1911.3 | Engine: 1.1.16600.7) - -Security intelligence update version: **1.307.13.0** -Released: **December 7, 2019** -Platform: **4.18.1911.3** -Engine: **1.1.17000.7** -Support phase: **No support** - -### What's new - -* Fixed MpCmdRun tracing level -* Fixed WDFilter version info -* Improve notifications (PUA) -* add MRT logs to support files - -### Known Issues -When this update is installed, the device needs the jump package 4.10.2001.10 to be able to update to the latest platform version. -
    -
    ### Previous version updates: Technical upgrade support only From 416714f3047acf819fdd17f7a1af61e609ccba4a Mon Sep 17 00:00:00 2001 From: Denise Vangel-MSFT Date: Wed, 6 Jan 2021 09:57:33 -0800 Subject: [PATCH 345/486] Update manage-updates-baselines-microsoft-defender-antivirus.md set the previous versions section right --- ...-baselines-microsoft-defender-antivirus.md | 58 ------------------- 1 file changed, 58 deletions(-) diff --git a/windows/security/threat-protection/microsoft-defender-antivirus/manage-updates-baselines-microsoft-defender-antivirus.md b/windows/security/threat-protection/microsoft-defender-antivirus/manage-updates-baselines-microsoft-defender-antivirus.md index 369b94de5a..51619b0baa 100644 --- a/windows/security/threat-protection/microsoft-defender-antivirus/manage-updates-baselines-microsoft-defender-antivirus.md +++ b/windows/security/threat-protection/microsoft-defender-antivirus/manage-updates-baselines-microsoft-defender-antivirus.md @@ -141,64 +141,6 @@ No known issues
    -
    - November-2020 (Platform: 4.18.2011.6 | Engine: 1.1.17700.4) - - Security intelligence update version: **1.327.1854.0** - Released: **December 03, 2020** - Platform: **4.18.2011.6** - Engine: **1.1.17700.4** - Support phase: **Security and Critical Updates** - -### What's new -- Improved SmartScreen status support logging -- Apply CPU throttling policy to manually initiated scans - -### Known Issues -No known issues -
    -
    - October-2020 (Platform: 4.18.2010.7 | Engine: 1.1.17600.5) - - Security intelligence update version: **1.327.7.0** - Released: **October 29, 2020** - Platform: **4.18.2010.7** - Engine: **1.1.17600.5** - Support phase: **Security and Critical Updates** - -### What's new -- New descriptions for special threat categories -- Improved emulation capabilities -- Improved host address allow/block capabilities -- New option in Defender CSP to Ignore merging of local user exclusions - -### Known Issues -No known issues -
    -
    - September-2020 (Platform: 4.18.2009.7 | Engine: 1.1.17500.4) - - Security intelligence update version: **1.325.10.0** - Released: **October 01, 2020** - Platform: **4.18.2009.7** - Engine: **1.1.17500.4** - Support phase: **Security and Critical Updates** - -### What's new -- Admin permissions are required to restore files in quarantine -- XML formatted events are now supported -- CSP support for ignoring exclusion merges -- New management interfaces for: - - UDP Inspection - - Network Protection on Server 2019 - - IP Address exclusions for Network Protection -- Improved visibility into TPM measurements -- Improved Office VBA module scanning - -### Known Issues -No known issues -
    -
    August-2020 (Platform: 4.18.2008.9 | Engine: 1.1.17400.5) From 73a985f3c311e4c1d5ca49669d34a88560c1a6ed Mon Sep 17 00:00:00 2001 From: Denise Vangel-MSFT Date: Wed, 6 Jan 2021 10:04:11 -0800 Subject: [PATCH 346/486] Update manage-updates-baselines-microsoft-defender-antivirus.md --- .../manage-updates-baselines-microsoft-defender-antivirus.md | 3 +-- 1 file changed, 1 insertion(+), 2 deletions(-) diff --git a/windows/security/threat-protection/microsoft-defender-antivirus/manage-updates-baselines-microsoft-defender-antivirus.md b/windows/security/threat-protection/microsoft-defender-antivirus/manage-updates-baselines-microsoft-defender-antivirus.md index 51619b0baa..44ab2eeb3b 100644 --- a/windows/security/threat-protection/microsoft-defender-antivirus/manage-updates-baselines-microsoft-defender-antivirus.md +++ b/windows/security/threat-protection/microsoft-defender-antivirus/manage-updates-baselines-microsoft-defender-antivirus.md @@ -138,8 +138,7 @@ No known issues ### Previous version updates: Technical upgrade support only -
    - +Previous version updates are listed below, and are provided for technical upgrade support only.
    August-2020 (Platform: 4.18.2008.9 | Engine: 1.1.17400.5) From cc317b344eb1ab1b72f9447bee04657ef53ea525 Mon Sep 17 00:00:00 2001 From: Denise Vangel-MSFT Date: Wed, 6 Jan 2021 10:06:27 -0800 Subject: [PATCH 347/486] Update manage-updates-baselines-microsoft-defender-antivirus.md --- ...s-baselines-microsoft-defender-antivirus.md | 18 ++++++++++-------- 1 file changed, 10 insertions(+), 8 deletions(-) diff --git a/windows/security/threat-protection/microsoft-defender-antivirus/manage-updates-baselines-microsoft-defender-antivirus.md b/windows/security/threat-protection/microsoft-defender-antivirus/manage-updates-baselines-microsoft-defender-antivirus.md index 44ab2eeb3b..fcdf912ecb 100644 --- a/windows/security/threat-protection/microsoft-defender-antivirus/manage-updates-baselines-microsoft-defender-antivirus.md +++ b/windows/security/threat-protection/microsoft-defender-antivirus/manage-updates-baselines-microsoft-defender-antivirus.md @@ -174,8 +174,9 @@ No known issues  Support phase: **Security and Critical Updates** ### What's new -* Improved telemetry for BITS -* Improved Authenticode code signing certificate validation + +- Improved telemetry for BITS +- Improved Authenticode code signing certificate validation ### Known Issues No known issues @@ -192,12 +193,13 @@ No known issues  Support phase: **Technical upgrade Support (Only)** ### What's new -* Possibility to specify the [location of the support logs](https://docs.microsoft.com/windows/security/threat-protection/microsoft-defender-antivirus/collect-diagnostic-data) -* Skipping aggressive catchup scan in Passive mode. -* Allow Defender to update on metered connections -* Fixed performance tuning when caching is disabled -* Fixed registry query -* Fixed scantime randomization in ADMX + +- Possibility to specify the [location of the support logs](https://docs.microsoft.com/windows/security/threat-protection/microsoft-defender-antivirus/collect-diagnostic-data) +- Skipping aggressive catchup scan in Passive mode. +- Allow Defender to update on metered connections +- Fixed performance tuning when caching is disabled +- Fixed registry query +- Fixed scantime randomization in ADMX ### Known Issues No known issues From b8b63496d4d95ade904771ceebe2963fa6b155b0 Mon Sep 17 00:00:00 2001 From: Denise Vangel-MSFT Date: Wed, 6 Jan 2021 10:08:53 -0800 Subject: [PATCH 348/486] Update manage-updates-baselines-microsoft-defender-antivirus.md --- .../manage-updates-baselines-microsoft-defender-antivirus.md | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/windows/security/threat-protection/microsoft-defender-antivirus/manage-updates-baselines-microsoft-defender-antivirus.md b/windows/security/threat-protection/microsoft-defender-antivirus/manage-updates-baselines-microsoft-defender-antivirus.md index fcdf912ecb..e03dbc86af 100644 --- a/windows/security/threat-protection/microsoft-defender-antivirus/manage-updates-baselines-microsoft-defender-antivirus.md +++ b/windows/security/threat-protection/microsoft-defender-antivirus/manage-updates-baselines-microsoft-defender-antivirus.md @@ -138,7 +138,7 @@ No known issues ### Previous version updates: Technical upgrade support only -Previous version updates are listed below, and are provided for technical upgrade support only. +Previous version updates are listed below, and are provided for technical upgrade support only.
    August-2020 (Platform: 4.18.2008.9 | Engine: 1.1.17400.5) From 826a1a8811b502b5ea1919939cbd17e6d907a624 Mon Sep 17 00:00:00 2001 From: Denise Vangel-MSFT Date: Wed, 6 Jan 2021 10:15:42 -0800 Subject: [PATCH 349/486] Update manage-updates-baselines-microsoft-defender-antivirus.md --- .../manage-updates-baselines-microsoft-defender-antivirus.md | 5 +++-- 1 file changed, 3 insertions(+), 2 deletions(-) diff --git a/windows/security/threat-protection/microsoft-defender-antivirus/manage-updates-baselines-microsoft-defender-antivirus.md b/windows/security/threat-protection/microsoft-defender-antivirus/manage-updates-baselines-microsoft-defender-antivirus.md index e03dbc86af..1a71bfa5e6 100644 --- a/windows/security/threat-protection/microsoft-defender-antivirus/manage-updates-baselines-microsoft-defender-antivirus.md +++ b/windows/security/threat-protection/microsoft-defender-antivirus/manage-updates-baselines-microsoft-defender-antivirus.md @@ -68,7 +68,7 @@ For more information, see [Manage the sources for Microsoft Defender Antivirus p ## Monthly platform and engine versions -For information how to update or how to install the platform update, see [Update for Windows Defender antimalware platform](https://support.microsoft.com/help/4052623/update-for-windows-defender-antimalware-platform). +For information how to update or install the platform update, see [Update for Windows Defender antimalware platform](https://support.microsoft.com/help/4052623/update-for-windows-defender-antimalware-platform). All our updates contain - performance improvements; @@ -138,7 +138,8 @@ No known issues ### Previous version updates: Technical upgrade support only -Previous version updates are listed below, and are provided for technical upgrade support only.
    +Previous version updates are listed below, and are provided for technical upgrade support only. +
    August-2020 (Platform: 4.18.2008.9 | Engine: 1.1.17400.5) From fca8929adac3fdb1f6b1477f674cab953066fdab Mon Sep 17 00:00:00 2001 From: Denise Vangel-MSFT Date: Wed, 6 Jan 2021 10:20:10 -0800 Subject: [PATCH 350/486] Update manage-updates-baselines-microsoft-defender-antivirus.md --- ...-baselines-microsoft-defender-antivirus.md | 26 +++++++++---------- 1 file changed, 12 insertions(+), 14 deletions(-) diff --git a/windows/security/threat-protection/microsoft-defender-antivirus/manage-updates-baselines-microsoft-defender-antivirus.md b/windows/security/threat-protection/microsoft-defender-antivirus/manage-updates-baselines-microsoft-defender-antivirus.md index 1a71bfa5e6..ced116a6ed 100644 --- a/windows/security/threat-protection/microsoft-defender-antivirus/manage-updates-baselines-microsoft-defender-antivirus.md +++ b/windows/security/threat-protection/microsoft-defender-antivirus/manage-updates-baselines-microsoft-defender-antivirus.md @@ -148,7 +148,6 @@ Previous version updates are listed below, and are provided for technical upgrad  Released: **August 27, 2020**  Platform: **4.18.2008.9**  Engine: **1.1.17400.5** - Support phase: **Security and Critical Updates** ### What's new @@ -172,7 +171,7 @@ No known issues  Released: **July 28, 2020**  Platform: **4.18.2007.8**  Engine: **1.1.17300.4** - Support phase: **Security and Critical Updates** + Support phase: **Technical upgrade support (only)** ### What's new @@ -191,7 +190,7 @@ No known issues  Released: **June 22, 2020**  Platform: **4.18.2006.10**  Engine: **1.1.17200.2** - Support phase: **Technical upgrade Support (Only)** + Support phase: **Technical upgrade support (only)** ### What's new @@ -214,7 +213,7 @@ No known issues  Released: **May 26, 2020**  Platform: **4.18.2005.4**  Engine: **1.1.17100.2** - Support phase: **Technical upgrade Support (Only)** + Support phase: **Technical upgrade support (only)** ### What's new * Improved logging for scan events @@ -236,7 +235,7 @@ No known issues  Released: **April 30, 2020**  Platform: **4.18.2004.6**  Engine: **1.1.17000.2** - Support phase: **Technical upgrade Support (Only)** + Support phase: **Technical upgrade support (only)** ### What's new * WDfilter improvements @@ -259,7 +258,7 @@ No known issues  Released: **March 24, 2020**  Platform: **4.18.2003.8**  Engine: **1.1.16900.4** - Support phase: **Technical upgrade Support (Only)** + Support phase: **Technical upgrade support (only)** ### What's new @@ -280,11 +279,11 @@ No known issues February-2020 (Platform: - | Engine: 1.1.16800.2) - Security intelligence update version: **1.311.4.0** - Released: **February 25, 2020** - Platform/Client: **-** - Engine: **1.1.16800.2** - Support phase: **N/A** + Security intelligence update version: **1.311.4.0** + Released: **February 25, 2020** + Platform/Client: **-** + Engine: **1.1.16800.2** + Support phase: **Technical upgrade support (only)** ### What's new @@ -302,7 +301,7 @@ Security intelligence update version: **1.309.32.0** Released: **January 30, 2020** Platform/Client: **4.18.2001.10** Engine: **1.1.16700.2** -Support phase: **Technical upgrade Support (Only)** + Support phase: **Technical upgrade support (only)** ### What's new @@ -317,8 +316,7 @@ Support phase: **Technical upgrade Support (Only)**
    > [!IMPORTANT] > This updates is needed by RS1 devices running lower version of the platform to support SHA2.
    This update has reboot flag for systems that are experiencing the hang issue.
    the This update is re-released in April 2020 and will not be superseded by newer updates to keep future availability. -
    -> [!IMPORTANT] +> > This update is categorized as an "update" due to its reboot requirement and will only be offered with a [Windows Update](https://support.microsoft.com/help/4027667/windows-10-update)
    From dc492ee3d0ce928a299c4a0cfa47a44dfa6a9ded Mon Sep 17 00:00:00 2001 From: Denise Vangel-MSFT Date: Wed, 6 Jan 2021 10:21:36 -0800 Subject: [PATCH 351/486] Update manage-updates-baselines-microsoft-defender-antivirus.md --- ...e-updates-baselines-microsoft-defender-antivirus.md | 10 +++++----- 1 file changed, 5 insertions(+), 5 deletions(-) diff --git a/windows/security/threat-protection/microsoft-defender-antivirus/manage-updates-baselines-microsoft-defender-antivirus.md b/windows/security/threat-protection/microsoft-defender-antivirus/manage-updates-baselines-microsoft-defender-antivirus.md index ced116a6ed..1a06c92c1c 100644 --- a/windows/security/threat-protection/microsoft-defender-antivirus/manage-updates-baselines-microsoft-defender-antivirus.md +++ b/windows/security/threat-protection/microsoft-defender-antivirus/manage-updates-baselines-microsoft-defender-antivirus.md @@ -305,11 +305,11 @@ Engine: **1.1.16700.2** ### What's new -* Fixed BSOD on WS2016 with Exchange -* Support platform updates when TMP is redirected to network path -* Platform and engine versions are added to [WDSI](https://www.microsoft.com/wdsi/defenderupdates) -* extend Emergency signature update to [passive mode](https://docs.microsoft.com/windows/security/threat-protection/microsoft-defender-antivirus/microsoft-defender-antivirus-compatibility) -* Fix 4.18.1911.3 hang +- Fixed BSOD on WS2016 with Exchange +- Support platform updates when TMP is redirected to network path +- Platform and engine versions are added to [WDSI](https://www.microsoft.com/wdsi/defenderupdates) +- extend Emergency signature update to [passive mode](https://docs.microsoft.com/windows/security/threat-protection/microsoft-defender-antivirus/microsoft-defender-antivirus-compatibility) +- Fix 4.18.1911.3 hang ### Known Issues [**Fixed**] devices utilizing [modern standby mode](https://docs.microsoft.com/windows-hardware/design/device-experiences/modern-standby) may experience a hang with the Windows Defender filter driver that results in a gap of protection. Affected machines appear to the customer as having not updated to the latest antimalware platform. From d96c503113c007458469f126bae0d898f3ed4b14 Mon Sep 17 00:00:00 2001 From: Denise Vangel-MSFT Date: Wed, 6 Jan 2021 10:44:40 -0800 Subject: [PATCH 352/486] Update manage-updates-baselines-microsoft-defender-antivirus.md --- ...pdates-baselines-microsoft-defender-antivirus.md | 13 ++++++++----- 1 file changed, 8 insertions(+), 5 deletions(-) diff --git a/windows/security/threat-protection/microsoft-defender-antivirus/manage-updates-baselines-microsoft-defender-antivirus.md b/windows/security/threat-protection/microsoft-defender-antivirus/manage-updates-baselines-microsoft-defender-antivirus.md index 1a06c92c1c..5ad59164fb 100644 --- a/windows/security/threat-protection/microsoft-defender-antivirus/manage-updates-baselines-microsoft-defender-antivirus.md +++ b/windows/security/threat-protection/microsoft-defender-antivirus/manage-updates-baselines-microsoft-defender-antivirus.md @@ -47,7 +47,7 @@ Microsoft Defender Antivirus uses [cloud-delivered protection](utilize-microsoft Cloud-delivered protection is always on and requires an active connection to the Internet to function. Security intelligence updates occur on a scheduled cadence (configurable via policy). For more information, see [Use Microsoft cloud-provided protection in Microsoft Defender Antivirus](utilize-microsoft-cloud-protection-microsoft-defender-antivirus.md). -For a list of recent security intelligence updates, please visit: [Antimalware updates change log - Microsoft Security Intelligence](https://www.microsoft.com/en-us/wdsi/definitions/antimalware-definition-release-notes). +For a list of recent security intelligence updates, see [Antimalware updates change log - Microsoft Security Intelligence](https://www.microsoft.com/en-us/wdsi/definitions/antimalware-definition-release-notes). Engine updates are included with security intelligence updates and are released on a monthly cadence. @@ -315,9 +315,12 @@ Engine: **1.1.16700.2** [**Fixed**] devices utilizing [modern standby mode](https://docs.microsoft.com/windows-hardware/design/device-experiences/modern-standby) may experience a hang with the Windows Defender filter driver that results in a gap of protection. Affected machines appear to the customer as having not updated to the latest antimalware platform.
    > [!IMPORTANT] -> This updates is needed by RS1 devices running lower version of the platform to support SHA2.
    This update has reboot flag for systems that are experiencing the hang issue.
    the This update is re-released in April 2020 and will not be superseded by newer updates to keep future availability. -> -> This update is categorized as an "update" due to its reboot requirement and will only be offered with a [Windows Update](https://support.microsoft.com/help/4027667/windows-10-update) +> This update is: +> - needed by RS1 devices running lower version of the platform to support SHA2; +> - has a reboot flag for systems that have hanging issues; +> - is re-released in April 2020 and will not be superseded by newer updates to keep future availability; +> - is categorized as an update due to the reboot requirement; and +> - is only be offered with [Windows Update](https://support.microsoft.com/help/4027667/windows-10-update).
    @@ -439,7 +442,7 @@ We recommend updating your Windows 10 (Enterprise, Pro, and Home editions), Wind | Article | Description | |:---|:---| |[Microsoft Defender update for Windows operating system installation images](https://support.microsoft.com/help/4568292/defender-update-for-windows-operating-system-installation-images) | Review antimalware update packages for your OS installation images (WIM and VHD files). Get Microsoft Defender Antivirus updates for Windows 10 (Enterprise, Pro, and Home editions), Windows Server 2019, and Windows Server 2016 installation images. | -|[Manage how protection updates are downloaded and applied](manage-protection-updates-microsoft-defender-antivirus.md) | Protection updates can be delivered through a number of sources. | +|[Manage how protection updates are downloaded and applied](manage-protection-updates-microsoft-defender-antivirus.md) | Protection updates can be delivered through many sources. | |[Manage when protection updates should be downloaded and applied](manage-protection-update-schedule-microsoft-defender-antivirus.md) | You can schedule when protection updates should be downloaded. | |[Manage updates for endpoints that are out of date](manage-outdated-endpoints-microsoft-defender-antivirus.md) | If an endpoint misses an update or scheduled scan, you can force an update or scan the next time a user signs in. | |[Manage event-based forced updates](manage-event-based-updates-microsoft-defender-antivirus.md) | You can set protection updates to be downloaded at startup or after certain cloud-delivered protection events. | From 8dcc321629d71e40ba144d416f16a58282dd616d Mon Sep 17 00:00:00 2001 From: Denise Vangel-MSFT Date: Wed, 6 Jan 2021 10:53:25 -0800 Subject: [PATCH 353/486] Update manage-updates-baselines-microsoft-defender-antivirus.md --- .../manage-updates-baselines-microsoft-defender-antivirus.md | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/windows/security/threat-protection/microsoft-defender-antivirus/manage-updates-baselines-microsoft-defender-antivirus.md b/windows/security/threat-protection/microsoft-defender-antivirus/manage-updates-baselines-microsoft-defender-antivirus.md index 5ad59164fb..5f8677d0a2 100644 --- a/windows/security/threat-protection/microsoft-defender-antivirus/manage-updates-baselines-microsoft-defender-antivirus.md +++ b/windows/security/threat-protection/microsoft-defender-antivirus/manage-updates-baselines-microsoft-defender-antivirus.md @@ -74,7 +74,7 @@ All our updates contain - performance improvements; - serviceability improvements; and - integration improvements (Cloud, Microsoft 365 Defender). -
    +

    From a7c9d594764abfdcf662c3209e6f38b5de726d38 Mon Sep 17 00:00:00 2001 From: Denise Vangel-MSFT Date: Wed, 6 Jan 2021 12:47:02 -0800 Subject: [PATCH 354/486] Update manage-updates-baselines-microsoft-defender-antivirus.md --- .../manage-updates-baselines-microsoft-defender-antivirus.md | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/windows/security/threat-protection/microsoft-defender-antivirus/manage-updates-baselines-microsoft-defender-antivirus.md b/windows/security/threat-protection/microsoft-defender-antivirus/manage-updates-baselines-microsoft-defender-antivirus.md index 5f8677d0a2..0eca49c841 100644 --- a/windows/security/threat-protection/microsoft-defender-antivirus/manage-updates-baselines-microsoft-defender-antivirus.md +++ b/windows/security/threat-protection/microsoft-defender-antivirus/manage-updates-baselines-microsoft-defender-antivirus.md @@ -139,7 +139,7 @@ No known issues ### Previous version updates: Technical upgrade support only Previous version updates are listed below, and are provided for technical upgrade support only. -
    +

    August-2020 (Platform: 4.18.2008.9 | Engine: 1.1.17400.5) From e09403ba403f4b2eef8e5ffc73e38487695d0fdd Mon Sep 17 00:00:00 2001 From: Denise Vangel-MSFT Date: Wed, 6 Jan 2021 12:49:31 -0800 Subject: [PATCH 355/486] Update manage-updates-baselines-microsoft-defender-antivirus.md --- ...-baselines-microsoft-defender-antivirus.md | 52 +++++++++---------- 1 file changed, 26 insertions(+), 26 deletions(-) diff --git a/windows/security/threat-protection/microsoft-defender-antivirus/manage-updates-baselines-microsoft-defender-antivirus.md b/windows/security/threat-protection/microsoft-defender-antivirus/manage-updates-baselines-microsoft-defender-antivirus.md index 0eca49c841..8c2cf4a503 100644 --- a/windows/security/threat-protection/microsoft-defender-antivirus/manage-updates-baselines-microsoft-defender-antivirus.md +++ b/windows/security/threat-protection/microsoft-defender-antivirus/manage-updates-baselines-microsoft-defender-antivirus.md @@ -216,12 +216,13 @@ No known issues  Support phase: **Technical upgrade support (only)** ### What's new -* Improved logging for scan events -* Improved user mode crash handling. -* Added event tracing for Tamper protection -* Fixed AMSI Sample submission -* Fixed AMSI Cloud blocking -* Fixed Security update install log + +- Improved logging for scan events +- Improved user mode crash handling. +- Added event tracing for Tamper protection +- Fixed AMSI Sample submission +- Fixed AMSI Cloud blocking +- Fixed Security update install log ### Known Issues No known issues @@ -238,13 +239,13 @@ No known issues  Support phase: **Technical upgrade support (only)** ### What's new -* WDfilter improvements -* Add more actionable event data to attack surface reduction detection events -* Fixed version information in diagnostic data and WMI -* Fixed incorrect platform version in UI after platform update -* Dynamic URL intel for Fileless threat protection -* UEFI scan capability -* Extend logging for updates +- WDfilter improvements +- Add more actionable event data to attack surface reduction detection events +- Fixed version information in diagnostic data and WMI +- Fixed incorrect platform version in UI after platform update +- Dynamic URL intel for Fileless threat protection +- UEFI scan capability +- Extend logging for updates ### Known Issues No known issues @@ -262,11 +263,11 @@ No known issues ### What's new -* CPU Throttling option added to [MpCmdRun](https://docs.microsoft.com/windows/security/threat-protection/microsoft-defender-antivirus/command-line-arguments-microsoft-defender-antivirus) -* Improve diagnostic capability -* reduce Security intelligence timeout (5 min) -* Extend AMSI engine internal log capability -* Improve notification for process blocking +- CPU Throttling option added to [MpCmdRun](https://docs.microsoft.com/windows/security/threat-protection/microsoft-defender-antivirus/command-line-arguments-microsoft-defender-antivirus) +- Improve diagnostic capability +- reduce Security intelligence timeout (5 min) +- Extend AMSI engine internal log capability +- Improve notification for process blocking ### Known Issues [**Fixed**] Microsoft Defender Antivirus is skipping files when running a scan. @@ -335,10 +336,10 @@ Support phase: **No support** ### What's new -* Fixed MpCmdRun tracing level -* Fixed WDFilter version info -* Improve notifications (PUA) -* add MRT logs to support files +- Fixed MpCmdRun tracing level +- Fixed WDFilter version info +- Improve notifications (PUA) +- add MRT logs to support files ### Known Issues When this update is installed, the device needs the jump package 4.10.2001.10 to be able to update to the latest platform version. @@ -350,10 +351,9 @@ When this update is installed, the device needs the jump package 4.10.2001.10 to Platform and engine updates are provided on a monthly cadence. To be fully supported, keep current with the latest platform updates. Our support structure is dynamic, evolving into two phases depending on the availability of the latest platform version: -* **Security and Critical Updates servicing phase** - When running the latest platform version, you will be eligible to receive both Security and Critical updates to the anti-malware platform. +- **Security and Critical Updates servicing phase** - When running the latest platform version, you will be eligible to receive both Security and Critical updates to the anti-malware platform. - -* **Technical Support (Only) phase** - After a new platform version is released, support for older versions (N-2) will reduce to technical support only. Platform versions older than N-2 will no longer be supported.* +- **Technical Support (Only) phase** - After a new platform version is released, support for older versions (N-2) will reduce to technical support only. Platform versions older than N-2 will no longer be supported.* \* Technical support will continue to be provided for upgrades from the Windows 10 release version (see [Platform version included with Windows 10 releases](#platform-version-included-with-windows-10-releases)) to the latest platform version. @@ -437,7 +437,7 @@ We recommend updating your Windows 10 (Enterprise, Pro, and Home editions), Wind
    -## See also +## Additional resources | Article | Description | |:---|:---| From e70b00fdb317a77d4af5e179e4a46a255763c772 Mon Sep 17 00:00:00 2001 From: Denise Vangel-MSFT Date: Wed, 6 Jan 2021 12:51:23 -0800 Subject: [PATCH 356/486] Update manage-updates-baselines-microsoft-defender-antivirus.md --- .../manage-updates-baselines-microsoft-defender-antivirus.md | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/windows/security/threat-protection/microsoft-defender-antivirus/manage-updates-baselines-microsoft-defender-antivirus.md b/windows/security/threat-protection/microsoft-defender-antivirus/manage-updates-baselines-microsoft-defender-antivirus.md index 8c2cf4a503..ab98ec1db1 100644 --- a/windows/security/threat-protection/microsoft-defender-antivirus/manage-updates-baselines-microsoft-defender-antivirus.md +++ b/windows/security/threat-protection/microsoft-defender-antivirus/manage-updates-baselines-microsoft-defender-antivirus.md @@ -13,7 +13,7 @@ ms.author: deniseb ms.custom: nextgen ms.reviewer: manager: dansimp -ms.date: 12/05/2020 +ms.date: 01/06/2021 --- # Manage Microsoft Defender Antivirus updates and apply baselines From 3d534fd878ebe46062e47359c39ad3adc08c1334 Mon Sep 17 00:00:00 2001 From: Denise Vangel-MSFT Date: Wed, 6 Jan 2021 12:52:38 -0800 Subject: [PATCH 357/486] Update manage-updates-baselines-microsoft-defender-antivirus.md --- .../manage-updates-baselines-microsoft-defender-antivirus.md | 4 +++- 1 file changed, 3 insertions(+), 1 deletion(-) diff --git a/windows/security/threat-protection/microsoft-defender-antivirus/manage-updates-baselines-microsoft-defender-antivirus.md b/windows/security/threat-protection/microsoft-defender-antivirus/manage-updates-baselines-microsoft-defender-antivirus.md index ab98ec1db1..05f8205f31 100644 --- a/windows/security/threat-protection/microsoft-defender-antivirus/manage-updates-baselines-microsoft-defender-antivirus.md +++ b/windows/security/threat-protection/microsoft-defender-antivirus/manage-updates-baselines-microsoft-defender-antivirus.md @@ -377,7 +377,9 @@ Windows 10 release info: [Windows lifecycle fact sheet](https://support.microsof ## Updates for Deployment Image Servicing and Management (DISM) -We recommend updating your Windows 10 (Enterprise, Pro, and Home editions), Windows Server 2019, and Windows Server 2016 OS installation images with the latest antivirus and antimalware updates. Keeping your OS installation images up to date helps avoid a gap in protection. For more information, see [Microsoft Defender update for Windows operating system installation images](https://support.microsoft.com/help/4568292/defender-update-for-windows-operating-system-installation-images). +We recommend updating your Windows 10 (Enterprise, Pro, and Home editions), Windows Server 2019, and Windows Server 2016 OS installation images with the latest antivirus and antimalware updates. Keeping your OS installation images up to date helps avoid a gap in protection. + +For more information, see [Microsoft Defender update for Windows operating system installation images](https://support.microsoft.com/help/4568292/defender-update-for-windows-operating-system-installation-images).
    1.1.2012.01 From 626b657efce0437d1b286550b1a9d53c40f6f678 Mon Sep 17 00:00:00 2001 From: Denise Vangel-MSFT Date: Wed, 6 Jan 2021 12:56:43 -0800 Subject: [PATCH 358/486] Update manage-updates-mobile-devices-vms-microsoft-defender-antivirus.md --- ...updates-mobile-devices-vms-microsoft-defender-antivirus.md | 4 ++-- 1 file changed, 2 insertions(+), 2 deletions(-) diff --git a/windows/security/threat-protection/microsoft-defender-antivirus/manage-updates-mobile-devices-vms-microsoft-defender-antivirus.md b/windows/security/threat-protection/microsoft-defender-antivirus/manage-updates-mobile-devices-vms-microsoft-defender-antivirus.md index fbbf677933..dd49d3b0d9 100644 --- a/windows/security/threat-protection/microsoft-defender-antivirus/manage-updates-mobile-devices-vms-microsoft-defender-antivirus.md +++ b/windows/security/threat-protection/microsoft-defender-antivirus/manage-updates-mobile-devices-vms-microsoft-defender-antivirus.md @@ -1,6 +1,6 @@ --- -title: Define how mobile devices are updated by Microsoft Defender AV -description: Manage how mobile devices, such as laptops, should be updated with Microsoft Defender AV protection updates. +title: Define how mobile devices are updated by Microsoft Defender Antivirus +description: Manage how mobile devices, such as laptops, should be updated with Microsoft Defender Antivirus protection updates. keywords: updates, protection, schedule updates, battery, mobile device, laptop, notebook, opt-in, microsoft update, wsus, override search.product: eADQiWindows 10XVcnh ms.prod: w10 From f0bac1eec4ef42ca874ba877510e85e8ef7f63b9 Mon Sep 17 00:00:00 2001 From: Denise Vangel-MSFT Date: Wed, 6 Jan 2021 12:56:56 -0800 Subject: [PATCH 359/486] added ms.reviewer --- ...e-protection-update-schedule-microsoft-defender-antivirus.md | 2 +- .../manage-protection-updates-microsoft-defender-antivirus.md | 2 +- .../manage-updates-baselines-microsoft-defender-antivirus.md | 2 +- 3 files changed, 3 insertions(+), 3 deletions(-) diff --git a/windows/security/threat-protection/microsoft-defender-antivirus/manage-protection-update-schedule-microsoft-defender-antivirus.md b/windows/security/threat-protection/microsoft-defender-antivirus/manage-protection-update-schedule-microsoft-defender-antivirus.md index add2af0433..acbc359a64 100644 --- a/windows/security/threat-protection/microsoft-defender-antivirus/manage-protection-update-schedule-microsoft-defender-antivirus.md +++ b/windows/security/threat-protection/microsoft-defender-antivirus/manage-protection-update-schedule-microsoft-defender-antivirus.md @@ -12,7 +12,7 @@ ms.localizationpriority: medium author: denisebmsft ms.author: deniseb ms.custom: nextgen -ms.reviewer: +ms.reviewer: pahuijbr manager: dansimp --- diff --git a/windows/security/threat-protection/microsoft-defender-antivirus/manage-protection-updates-microsoft-defender-antivirus.md b/windows/security/threat-protection/microsoft-defender-antivirus/manage-protection-updates-microsoft-defender-antivirus.md index 7dcee83d5a..9cfcd64a5d 100644 --- a/windows/security/threat-protection/microsoft-defender-antivirus/manage-protection-updates-microsoft-defender-antivirus.md +++ b/windows/security/threat-protection/microsoft-defender-antivirus/manage-protection-updates-microsoft-defender-antivirus.md @@ -10,7 +10,7 @@ ms.pagetype: security ms.localizationpriority: medium author: denisebmsft ms.author: deniseb -ms.reviewer: +ms.reviewer: pahuijbr manager: dansimp ms.custom: nextgen --- diff --git a/windows/security/threat-protection/microsoft-defender-antivirus/manage-updates-baselines-microsoft-defender-antivirus.md b/windows/security/threat-protection/microsoft-defender-antivirus/manage-updates-baselines-microsoft-defender-antivirus.md index 05f8205f31..943036f62c 100644 --- a/windows/security/threat-protection/microsoft-defender-antivirus/manage-updates-baselines-microsoft-defender-antivirus.md +++ b/windows/security/threat-protection/microsoft-defender-antivirus/manage-updates-baselines-microsoft-defender-antivirus.md @@ -11,7 +11,7 @@ ms.localizationpriority: medium author: denisebmsft ms.author: deniseb ms.custom: nextgen -ms.reviewer: +ms.reviewer: pahuijbr manager: dansimp ms.date: 01/06/2021 --- From f11d7c5bb46be69cdab41a8e9041a45dcd272e46 Mon Sep 17 00:00:00 2001 From: Denise Vangel-MSFT Date: Wed, 6 Jan 2021 13:04:22 -0800 Subject: [PATCH 360/486] Update manage-updates-mobile-devices-vms-microsoft-defender-antivirus.md --- ...es-mobile-devices-vms-microsoft-defender-antivirus.md | 9 ++++----- 1 file changed, 4 insertions(+), 5 deletions(-) diff --git a/windows/security/threat-protection/microsoft-defender-antivirus/manage-updates-mobile-devices-vms-microsoft-defender-antivirus.md b/windows/security/threat-protection/microsoft-defender-antivirus/manage-updates-mobile-devices-vms-microsoft-defender-antivirus.md index dd49d3b0d9..788464ca9c 100644 --- a/windows/security/threat-protection/microsoft-defender-antivirus/manage-updates-mobile-devices-vms-microsoft-defender-antivirus.md +++ b/windows/security/threat-protection/microsoft-defender-antivirus/manage-updates-mobile-devices-vms-microsoft-defender-antivirus.md @@ -11,7 +11,6 @@ ms.localizationpriority: medium author: denisebmsft ms.author: deniseb ms.custom: nextgen -ms.date: 09/03/2018 ms.reviewer: manager: dansimp --- @@ -25,14 +24,14 @@ manager: dansimp - [Microsoft Defender for Endpoint](https://go.microsoft.com/fwlink/p/?linkid=2146631) -Mobile devices and VMs may require additional configuration to ensure performance is not impacted by updates. +Mobile devices and VMs may require more configuration to ensure performance is not impacted by updates. -There are two settings that are particularly useful for these devices: +There are two settings that are useful for these devices: -- Opt-in to Microsoft Update on mobile computers without a WSUS connection +- Opt in to Microsoft Update on mobile computers without a WSUS connection - Prevent Security intelligence updates when running on battery power -The following topics may also be useful in these situations: +The following articles may also be useful in these situations: - [Configuring scheduled and catch-up scans](scheduled-catch-up-scans-microsoft-defender-antivirus.md) - [Manage updates for endpoints that are out of date](manage-outdated-endpoints-microsoft-defender-antivirus.md) - [Deployment guide for Microsoft Defender Antivirus in a virtual desktop infrastructure (VDI) environment](deployment-vdi-microsoft-defender-antivirus.md) From c3db2e4504e7aef50e2875f930c91906f16fbd3c Mon Sep 17 00:00:00 2001 From: Denise Vangel-MSFT Date: Wed, 6 Jan 2021 13:05:03 -0800 Subject: [PATCH 361/486] Update manage-updates-mobile-devices-vms-microsoft-defender-antivirus.md --- ...-mobile-devices-vms-microsoft-defender-antivirus.md | 10 +++++----- 1 file changed, 5 insertions(+), 5 deletions(-) diff --git a/windows/security/threat-protection/microsoft-defender-antivirus/manage-updates-mobile-devices-vms-microsoft-defender-antivirus.md b/windows/security/threat-protection/microsoft-defender-antivirus/manage-updates-mobile-devices-vms-microsoft-defender-antivirus.md index 788464ca9c..d4f2648721 100644 --- a/windows/security/threat-protection/microsoft-defender-antivirus/manage-updates-mobile-devices-vms-microsoft-defender-antivirus.md +++ b/windows/security/threat-protection/microsoft-defender-antivirus/manage-updates-mobile-devices-vms-microsoft-defender-antivirus.md @@ -36,21 +36,21 @@ The following articles may also be useful in these situations: - [Manage updates for endpoints that are out of date](manage-outdated-endpoints-microsoft-defender-antivirus.md) - [Deployment guide for Microsoft Defender Antivirus in a virtual desktop infrastructure (VDI) environment](deployment-vdi-microsoft-defender-antivirus.md) -## Opt-in to Microsoft Update on mobile computers without a WSUS connection +## Opt in to Microsoft Update on mobile computers without a WSUS connection You can use Microsoft Update to keep Security intelligence on mobile devices running Microsoft Defender Antivirus up to date when they are not connected to the corporate network or don't otherwise have a WSUS connection. This means that protection updates can be delivered to devices (via Microsoft Update) even if you have set WSUS to override Microsoft Update. -You can opt-in to Microsoft Update on the mobile device in one of the following ways: +You can opt in to Microsoft Update on the mobile device in one of the following ways: 1. Change the setting with Group Policy 2. Use a VBScript to create a script, then run it on each computer in your network. -3. Manually opt-in every computer on your network through the **Settings** menu. +3. Manually opt in every computer on your network through the **Settings** menu. -### Use Group Policy to opt-in to Microsoft Update +### Use Group Policy to opt in to Microsoft Update -1. On your Group Policy management machine, open the [Group Policy Management Console](https://technet.microsoft.com/library/cc731212.aspx), right-click the Group Policy Object you want to configure and click **Edit**. +1. On your Group Policy management machine, open the [Group Policy Management Console](https://technet.microsoft.com/library/cc731212.aspx), right-click the Group Policy Object you want to configure and select **Edit**. 3. In the **Group Policy Management Editor** go to **Computer configuration**. From fc6aa4c6fbc44a975595272f6b3b6f2d8a54b7a8 Mon Sep 17 00:00:00 2001 From: Denise Vangel-MSFT Date: Wed, 6 Jan 2021 13:06:10 -0800 Subject: [PATCH 362/486] Update manage-updates-mobile-devices-vms-microsoft-defender-antivirus.md --- ...e-devices-vms-microsoft-defender-antivirus.md | 16 ++++++++-------- 1 file changed, 8 insertions(+), 8 deletions(-) diff --git a/windows/security/threat-protection/microsoft-defender-antivirus/manage-updates-mobile-devices-vms-microsoft-defender-antivirus.md b/windows/security/threat-protection/microsoft-defender-antivirus/manage-updates-mobile-devices-vms-microsoft-defender-antivirus.md index d4f2648721..0aebecaa24 100644 --- a/windows/security/threat-protection/microsoft-defender-antivirus/manage-updates-mobile-devices-vms-microsoft-defender-antivirus.md +++ b/windows/security/threat-protection/microsoft-defender-antivirus/manage-updates-mobile-devices-vms-microsoft-defender-antivirus.md @@ -44,21 +44,21 @@ This means that protection updates can be delivered to devices (via Microsoft Up You can opt in to Microsoft Update on the mobile device in one of the following ways: -1. Change the setting with Group Policy -2. Use a VBScript to create a script, then run it on each computer in your network. -3. Manually opt in every computer on your network through the **Settings** menu. +- Change the setting with Group Policy. +- Use a VBScript to create a script, then run it on each computer in your network. +- Manually opt in every computer on your network through the **Settings** menu. ### Use Group Policy to opt in to Microsoft Update -1. On your Group Policy management machine, open the [Group Policy Management Console](https://technet.microsoft.com/library/cc731212.aspx), right-click the Group Policy Object you want to configure and select **Edit**. +1. On your Group Policy management machine, open the [Group Policy Management Console](https://technet.microsoft.com/library/cc731212.aspx), right-click the Group Policy Object you want to configure and select **Edit**. -3. In the **Group Policy Management Editor** go to **Computer configuration**. +2. In the **Group Policy Management Editor** go to **Computer configuration**. -4. Click **Policies** then **Administrative templates**. +3. Click **Policies** then **Administrative templates**. -5. Expand the tree to **Windows components** > **Microsoft Defender Antivirus** > **Signature Updates**. +4. Expand the tree to **Windows components** > **Microsoft Defender Antivirus** > **Signature Updates**. -6. Double-click the **Allow security intelligence updates from Microsoft Update** setting and set the option to **Enabled**. Click **OK**. +5. Double-click the **Allow security intelligence updates from Microsoft Update** setting and set the option to **Enabled**. Click **OK**. ### Use a VBScript to opt-in to Microsoft Update From 46347c664d31c280299be5b2b46bcb6fe27722b8 Mon Sep 17 00:00:00 2001 From: Denise Vangel-MSFT Date: Wed, 6 Jan 2021 13:07:11 -0800 Subject: [PATCH 363/486] Update manage-updates-mobile-devices-vms-microsoft-defender-antivirus.md --- ...evices-vms-microsoft-defender-antivirus.md | 24 ++++++++++--------- 1 file changed, 13 insertions(+), 11 deletions(-) diff --git a/windows/security/threat-protection/microsoft-defender-antivirus/manage-updates-mobile-devices-vms-microsoft-defender-antivirus.md b/windows/security/threat-protection/microsoft-defender-antivirus/manage-updates-mobile-devices-vms-microsoft-defender-antivirus.md index 0aebecaa24..e9c2d12071 100644 --- a/windows/security/threat-protection/microsoft-defender-antivirus/manage-updates-mobile-devices-vms-microsoft-defender-antivirus.md +++ b/windows/security/threat-protection/microsoft-defender-antivirus/manage-updates-mobile-devices-vms-microsoft-defender-antivirus.md @@ -63,14 +63,17 @@ You can opt in to Microsoft Update on the mobile device in one of the following ### Use a VBScript to opt-in to Microsoft Update -1. Use the instructions in the MSDN article [Opt-In to Microsoft Update](https://msdn.microsoft.com/library/windows/desktop/aa826676.aspx) to create the VBScript. -2. Run the VBScript you created on each computer in your network. +1. Use the instructions in the MSDN article [Opt-In to Microsoft Update](https://msdn.microsoft.com/library/windows/desktop/aa826676.aspx) to create the VBScript. + +2. Run the VBScript you created on each computer in your network. ### Manually opt-in to Microsoft Update -1. Open **Windows Update** in **Update & security** settings on the computer you want to opt-in. -2. Click **Advanced** options. -3. Select the checkbox for **Give me updates for other Microsoft products when I update Windows**. +1. Open **Windows Update** in **Update & security** settings on the computer you want to opt-in. + +2. Click **Advanced** options. + +3. Select the checkbox for **Give me updates for other Microsoft products when I update Windows**. ## Prevent Security intelligence updates when running on battery power @@ -80,15 +83,14 @@ You can configure Microsoft Defender Antivirus to only download protection updat 1. On your Group Policy management machine, open the [Group Policy Management Console](https://technet.microsoft.com/library/cc731212.aspx), right-click the Group Policy Object you want to configure and click **Edit**. -3. In the **Group Policy Management Editor** go to **Computer configuration**. +2. In the **Group Policy Management Editor** go to **Computer configuration**. -4. Click **Policies** then **Administrative templates**. +3. Click **Policies** then **Administrative templates**. -5. Expand the tree to **Windows components > Microsoft Defender Antivirus > Signature Updates** and configure the following setting: - - 1. Double-click the **Allow security intelligence updates when running on battery power** setting and set the option to **Disabled**. - 2. Click **OK**. This will prevent protection updates from downloading when the PC is on battery power. +4. Expand the tree to **Windows components > Microsoft Defender Antivirus > Signature Updates** and configure the following setting: + - Double-click the **Allow security intelligence updates when running on battery power** setting and set the option to **Disabled**. + - Click **OK**. This will prevent protection updates from downloading when the PC is on battery power. ## Related articles From ba0e74fc8109ec3be756de9b64ce3e118ee8f255 Mon Sep 17 00:00:00 2001 From: Denise Vangel-MSFT Date: Wed, 6 Jan 2021 13:09:57 -0800 Subject: [PATCH 364/486] Update manage-updates-mobile-devices-vms-microsoft-defender-antivirus.md --- ...-devices-vms-microsoft-defender-antivirus.md | 17 ++++++++--------- 1 file changed, 8 insertions(+), 9 deletions(-) diff --git a/windows/security/threat-protection/microsoft-defender-antivirus/manage-updates-mobile-devices-vms-microsoft-defender-antivirus.md b/windows/security/threat-protection/microsoft-defender-antivirus/manage-updates-mobile-devices-vms-microsoft-defender-antivirus.md index e9c2d12071..816025ec14 100644 --- a/windows/security/threat-protection/microsoft-defender-antivirus/manage-updates-mobile-devices-vms-microsoft-defender-antivirus.md +++ b/windows/security/threat-protection/microsoft-defender-antivirus/manage-updates-mobile-devices-vms-microsoft-defender-antivirus.md @@ -54,24 +54,24 @@ You can opt in to Microsoft Update on the mobile device in one of the following 2. In the **Group Policy Management Editor** go to **Computer configuration**. -3. Click **Policies** then **Administrative templates**. +3. Select **Policies** then **Administrative templates**. 4. Expand the tree to **Windows components** > **Microsoft Defender Antivirus** > **Signature Updates**. -5. Double-click the **Allow security intelligence updates from Microsoft Update** setting and set the option to **Enabled**. Click **OK**. +5. Set **Allow security intelligence updates from Microsoft Update** to **Enabled**, and then select **OK**. -### Use a VBScript to opt-in to Microsoft Update +### Use a VBScript to opt in to Microsoft Update 1. Use the instructions in the MSDN article [Opt-In to Microsoft Update](https://msdn.microsoft.com/library/windows/desktop/aa826676.aspx) to create the VBScript. 2. Run the VBScript you created on each computer in your network. -### Manually opt-in to Microsoft Update +### Manually opt in to Microsoft Update -1. Open **Windows Update** in **Update & security** settings on the computer you want to opt-in. +1. Open **Windows Update** in **Update & security** settings on the computer you want to opt in. -2. Click **Advanced** options. +2. Select **Advanced** options. 3. Select the checkbox for **Give me updates for other Microsoft products when I update Windows**. @@ -87,10 +87,9 @@ You can configure Microsoft Defender Antivirus to only download protection updat 3. Click **Policies** then **Administrative templates**. -4. Expand the tree to **Windows components > Microsoft Defender Antivirus > Signature Updates** and configure the following setting: +4. Expand the tree to **Windows components** > **Microsoft Defender Antivirus** > **Signature Updates**, and then set **Allow security intelligence updates when running on battery power** to **Disabled**. Then select **OK**. - - Double-click the **Allow security intelligence updates when running on battery power** setting and set the option to **Disabled**. - - Click **OK**. This will prevent protection updates from downloading when the PC is on battery power. +This action prevents protection updates from downloading when the PC is on battery power. ## Related articles From 8780dfa7a688808075a706f2327abc00fb41acdd Mon Sep 17 00:00:00 2001 From: Denise Vangel-MSFT Date: Wed, 6 Jan 2021 13:11:02 -0800 Subject: [PATCH 365/486] acrolinx fixes --- .../manage-updates-baselines-microsoft-defender-antivirus.md | 5 +++++ ...pdates-mobile-devices-vms-microsoft-defender-antivirus.md | 4 ++-- 2 files changed, 7 insertions(+), 2 deletions(-) diff --git a/windows/security/threat-protection/microsoft-defender-antivirus/manage-updates-baselines-microsoft-defender-antivirus.md b/windows/security/threat-protection/microsoft-defender-antivirus/manage-updates-baselines-microsoft-defender-antivirus.md index 943036f62c..4f60e5d308 100644 --- a/windows/security/threat-protection/microsoft-defender-antivirus/manage-updates-baselines-microsoft-defender-antivirus.md +++ b/windows/security/threat-protection/microsoft-defender-antivirus/manage-updates-baselines-microsoft-defender-antivirus.md @@ -87,6 +87,7 @@ All our updates contain  Support phase: **Security and Critical Updates** ### What's new + - Improved SmartScreen status support logging - Apply CPU throttling policy to manually initiated scans @@ -103,12 +104,14 @@ No known issues  Support phase: **Security and Critical Updates** ### What's new + - New descriptions for special threat categories - Improved emulation capabilities - Improved host address allow/block capabilities - New option in Defender CSP to Ignore merging of local user exclusions ### Known Issues + No known issues
    @@ -121,6 +124,7 @@ No known issues  Support phase: **Security and Critical Updates** ### What's new + - Admin permissions are required to restore files in quarantine - XML formatted events are now supported - CSP support for ignoring exclusion merges @@ -132,6 +136,7 @@ No known issues - Improved Office VBA module scanning ### Known Issues + No known issues
    diff --git a/windows/security/threat-protection/microsoft-defender-antivirus/manage-updates-mobile-devices-vms-microsoft-defender-antivirus.md b/windows/security/threat-protection/microsoft-defender-antivirus/manage-updates-mobile-devices-vms-microsoft-defender-antivirus.md index 816025ec14..e2fb5173d8 100644 --- a/windows/security/threat-protection/microsoft-defender-antivirus/manage-updates-mobile-devices-vms-microsoft-defender-antivirus.md +++ b/windows/security/threat-protection/microsoft-defender-antivirus/manage-updates-mobile-devices-vms-microsoft-defender-antivirus.md @@ -81,11 +81,11 @@ You can configure Microsoft Defender Antivirus to only download protection updat ### Use Group Policy to prevent security intelligence updates on battery power -1. On your Group Policy management machine, open the [Group Policy Management Console](https://technet.microsoft.com/library/cc731212.aspx), right-click the Group Policy Object you want to configure and click **Edit**. +1. On your Group Policy management machine, open the [Group Policy Management Console](https://technet.microsoft.com/library/cc731212.aspx), choose the Group Policy Object you want to configure, and open it for editing. 2. In the **Group Policy Management Editor** go to **Computer configuration**. -3. Click **Policies** then **Administrative templates**. +3. Select **Policies** then **Administrative templates**. 4. Expand the tree to **Windows components** > **Microsoft Defender Antivirus** > **Signature Updates**, and then set **Allow security intelligence updates when running on battery power** to **Disabled**. Then select **OK**. From fe649b4c7c31cb96b839b1239afa9629c24a3c37 Mon Sep 17 00:00:00 2001 From: Gary Moore Date: Wed, 6 Jan 2021 13:48:15 -0800 Subject: [PATCH 366/486] Removed "en-us" from a Microsoft URL (and verified that it works) --- .../manage-updates-baselines-microsoft-defender-antivirus.md | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/windows/security/threat-protection/microsoft-defender-antivirus/manage-updates-baselines-microsoft-defender-antivirus.md b/windows/security/threat-protection/microsoft-defender-antivirus/manage-updates-baselines-microsoft-defender-antivirus.md index 4f60e5d308..7835dd3bfa 100644 --- a/windows/security/threat-protection/microsoft-defender-antivirus/manage-updates-baselines-microsoft-defender-antivirus.md +++ b/windows/security/threat-protection/microsoft-defender-antivirus/manage-updates-baselines-microsoft-defender-antivirus.md @@ -47,7 +47,7 @@ Microsoft Defender Antivirus uses [cloud-delivered protection](utilize-microsoft Cloud-delivered protection is always on and requires an active connection to the Internet to function. Security intelligence updates occur on a scheduled cadence (configurable via policy). For more information, see [Use Microsoft cloud-provided protection in Microsoft Defender Antivirus](utilize-microsoft-cloud-protection-microsoft-defender-antivirus.md). -For a list of recent security intelligence updates, see [Antimalware updates change log - Microsoft Security Intelligence](https://www.microsoft.com/en-us/wdsi/definitions/antimalware-definition-release-notes). +For a list of recent security intelligence updates, see [Antimalware updates change log - Microsoft Security Intelligence](https://www.microsoft.com/wdsi/definitions/antimalware-definition-release-notes). Engine updates are included with security intelligence updates and are released on a monthly cadence. From 42cd42a769e77b375de26bac0b2d699e431202ea Mon Sep 17 00:00:00 2001 From: Gary Moore Date: Wed, 6 Jan 2021 13:52:15 -0800 Subject: [PATCH 367/486] Acrolinx: "Powershell" --- .../manage-protection-updates-microsoft-defender-antivirus.md | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/windows/security/threat-protection/microsoft-defender-antivirus/manage-protection-updates-microsoft-defender-antivirus.md b/windows/security/threat-protection/microsoft-defender-antivirus/manage-protection-updates-microsoft-defender-antivirus.md index 9cfcd64a5d..42af3da160 100644 --- a/windows/security/threat-protection/microsoft-defender-antivirus/manage-protection-updates-microsoft-defender-antivirus.md +++ b/windows/security/threat-protection/microsoft-defender-antivirus/manage-protection-updates-microsoft-defender-antivirus.md @@ -170,7 +170,7 @@ Set up a network file share (UNC/mapped drive) to download security intelligence MD C:\Temp\TempSigs\x86 ``` -3. Download the Powershell script from [www.powershellgallery.com/packages/SignatureDownloadCustomTask/1.4](https://www.powershellgallery.com/packages/SignatureDownloadCustomTask/1.4). +3. Download the PowerShell script from [www.powershellgallery.com/packages/SignatureDownloadCustomTask/1.4](https://www.powershellgallery.com/packages/SignatureDownloadCustomTask/1.4). 4. Click **Manual Download**. From e8871be545839500d584cf5fee416289e1db85ae Mon Sep 17 00:00:00 2001 From: adirdidi <68847945+adirdidi@users.noreply.github.com> Date: Thu, 7 Jan 2021 00:53:32 +0200 Subject: [PATCH 368/486] Update gov.md Updating GCC-H items. --- .../microsoft-defender-atp/gov.md | 40 +++++++++---------- 1 file changed, 20 insertions(+), 20 deletions(-) diff --git a/windows/security/threat-protection/microsoft-defender-atp/gov.md b/windows/security/threat-protection/microsoft-defender-atp/gov.md index 71d6de5b4d..115eb14cc6 100644 --- a/windows/security/threat-protection/microsoft-defender-atp/gov.md +++ b/windows/security/threat-protection/microsoft-defender-atp/gov.md @@ -49,13 +49,13 @@ Windows 10, version 1803 | ![No](../images/svg/check-no.svg) Coming soon | ![Yes Windows 10, version 1709 | ![No](../images/svg/check-no.svg)
    Note: Will not be supported | ![Yes](../images/svg/check-yes.svg) With [KB4499147](https://support.microsoft.com/help/4499147)
    Note: Will be deprecated, please upgrade Windows 10, version 1703 and earlier | ![No](../images/svg/check-no.svg)
    Note: Will not be supported | ![No](../images/svg/check-no.svg)
    Note: Will not be supported Windows Server 2019 (with [KB4586839](https://support.microsoft.com/help/4586839)) | ![Yes](../images/svg/check-yes.svg) | ![Yes](../images/svg/check-yes.svg) -Windows Server 2016 | ![No](../images/svg/check-no.svg) Coming soon | ![No](../images/svg/check-no.svg) -Windows Server 2012 R2 | ![No](../images/svg/check-no.svg) Coming soon | ![No](../images/svg/check-no.svg) -Windows Server 2008 R2 SP1 | ![No](../images/svg/check-no.svg) Coming soon | ![No](../images/svg/check-no.svg) -Windows 8.1 Enterprise | ![No](../images/svg/check-no.svg) Coming soon | ![No](../images/svg/check-no.svg) -Windows 8 Pro | ![No](../images/svg/check-no.svg) Coming soon | ![No](../images/svg/check-no.svg) -Windows 7 SP1 Enterprise | ![No](../images/svg/check-no.svg) Coming soon | ![No](../images/svg/check-no.svg) -Windows 7 SP1 Pro | ![No](../images/svg/check-no.svg) Coming soon | ![No](../images/svg/check-no.svg) +Windows Server 2016 | ![No](../images/svg/check-no.svg) Coming soon | ![No](../images/svg/check-no.svg) In development +Windows Server 2012 R2 | ![No](../images/svg/check-no.svg) Coming soon | ![No](../images/svg/check-no.svg) In development +Windows Server 2008 R2 SP1 | ![No](../images/svg/check-no.svg) Coming soon | ![No](../images/svg/check-no.svg) In development +Windows 8.1 Enterprise | ![No](../images/svg/check-no.svg) Coming soon | ![No](../images/svg/check-no.svg) In development +Windows 8 Pro | ![No](../images/svg/check-no.svg) Coming soon | ![No](../images/svg/check-no.svg) In development +Windows 7 SP1 Enterprise | ![No](../images/svg/check-no.svg) Coming soon | ![No](../images/svg/check-no.svg) In development +Windows 7 SP1 Pro | ![No](../images/svg/check-no.svg) Coming soon | ![No](../images/svg/check-no.svg) In development Mac OS | ![No](../images/svg/check-no.svg) | ![No](../images/svg/check-no.svg) Linux | ![No](../images/svg/check-no.svg) | ![No](../images/svg/check-no.svg) iOS | ![No](../images/svg/check-no.svg) | ![No](../images/svg/check-no.svg) @@ -106,24 +106,24 @@ These are the known gaps as of January 2021: Feature name | GCC | GCC High :---|:---|:--- -Threat analytics | ![Yes](../images/svg/check-yes.svg) | ![No](../images/svg/check-no.svg) -Threat & vulnerability management | ![Yes](../images/svg/check-yes.svg) | ![No](../images/svg/check-no.svg) +Threat analytics | ![Yes](../images/svg/check-yes.svg) | ![No](../images/svg/check-no.svg) In development +Threat & vulnerability management | ![Yes](../images/svg/check-yes.svg) | ![No](../images/svg/check-no.svg) In development Automated investigation and remediation: Response to Office 365 alerts | ![No](../images/svg/check-no.svg) | ![No](../images/svg/check-no.svg) -Automated investigation and remediation: Live response | ![Yes](../images/svg/check-yes.svg) | ![No](../images/svg/check-no.svg) -Management and APIs: Threat protection report | ![Yes](../images/svg/check-yes.svg) | ![No](../images/svg/check-no.svg) -Management and APIs: Device health and compliance report | ![Yes](../images/svg/check-yes.svg) | ![No](../images/svg/check-no.svg) -Management and APIs: Streaming API | ![No](../images/svg/check-no.svg) Coming soon | ![No](../images/svg/check-no.svg) -Management and APIs: Integration with third-party products | ![Yes](../images/svg/check-yes.svg) | ![No](../images/svg/check-no.svg) -Email notifications | ![No](../images/svg/check-no.svg) Coming soon | ![No](../images/svg/check-no.svg) -Evaluation lab | ![Yes](../images/svg/check-yes.svg) | ![No](../images/svg/check-no.svg) -Web content filtering | ![No](../images/svg/check-no.svg) Coming soon | ![No](../images/svg/check-no.svg) -Integrations: Azure Sentinel | ![No](../images/svg/check-no.svg) Coming soon | ![No](../images/svg/check-no.svg) +Automated investigation and remediation: Live response | ![Yes](../images/svg/check-yes.svg) | ![No](../images/svg/check-no.svg) In development +Management and APIs: Threat protection report | ![Yes](../images/svg/check-yes.svg) | ![No](../images/svg/check-no.svg) In development +Management and APIs: Device health and compliance report | ![Yes](../images/svg/check-yes.svg) | ![No](../images/svg/check-no.svg) In development +Management and APIs: Streaming API | ![No](../images/svg/check-no.svg) Coming soon | ![No](../images/svg/check-no.svg) In development +Management and APIs: Integration with third-party products | ![Yes](../images/svg/check-yes.svg) | ![No](../images/svg/check-no.svg) In development +Email notifications | ![No](../images/svg/check-no.svg) Coming soon | ![No](../images/svg/check-no.svg) In development +Evaluation lab | ![Yes](../images/svg/check-yes.svg) | ![No](../images/svg/check-no.svg) In development +Web content filtering | ![No](../images/svg/check-no.svg) Coming soon | ![No](../images/svg/check-no.svg) In development +Integrations: Azure Sentinel | ![No](../images/svg/check-no.svg) Coming soon | ![No](../images/svg/check-no.svg) In development Integrations: Microsoft Cloud App Security | ![No](../images/svg/check-no.svg) | ![No](../images/svg/check-no.svg) Integrations: Microsoft Compliance Center | ![No](../images/svg/check-no.svg) | ![No](../images/svg/check-no.svg) Integrations: Microsoft Defender for Identity | ![No](../images/svg/check-no.svg) | ![No](../images/svg/check-no.svg) Integrations: Microsoft Defender for Office 365 | ![No](../images/svg/check-no.svg) | ![No](../images/svg/check-no.svg) Integrations: Microsoft Endpoint DLP | ![No](../images/svg/check-no.svg) | ![No](../images/svg/check-no.svg) Integrations: Microsoft Intune | ![Yes](../images/svg/check-yes.svg) | ![No](../images/svg/check-no.svg) -Integrations: Microsoft Power Automate & Azure Logic Apps | ![No](../images/svg/check-no.svg) Coming soon | ![No](../images/svg/check-no.svg) -Integrations: Skype for Business / Teams | ![Yes](../images/svg/check-yes.svg) | ![No](../images/svg/check-no.svg) +Integrations: Microsoft Power Automate & Azure Logic Apps | ![No](../images/svg/check-no.svg) Coming soon | ![No](../images/svg/check-no.svg) In development +Integrations: Skype for Business / Teams | ![Yes](../images/svg/check-yes.svg) | ![No](../images/svg/check-no.svg) In development Microsoft Threat Experts | ![No](../images/svg/check-no.svg) | ![No](../images/svg/check-no.svg) From 7be16fb46bf696a82e35d4f6f6adf57f65a07190 Mon Sep 17 00:00:00 2001 From: adirdidi <68847945+adirdidi@users.noreply.github.com> Date: Thu, 7 Jan 2021 00:57:28 +0200 Subject: [PATCH 369/486] Update gov.md --- .../security/threat-protection/microsoft-defender-atp/gov.md | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/windows/security/threat-protection/microsoft-defender-atp/gov.md b/windows/security/threat-protection/microsoft-defender-atp/gov.md index 115eb14cc6..84f767e39e 100644 --- a/windows/security/threat-protection/microsoft-defender-atp/gov.md +++ b/windows/security/threat-protection/microsoft-defender-atp/gov.md @@ -123,7 +123,7 @@ Integrations: Microsoft Compliance Center | ![No](../images/svg/check-no.svg) | Integrations: Microsoft Defender for Identity | ![No](../images/svg/check-no.svg) | ![No](../images/svg/check-no.svg) Integrations: Microsoft Defender for Office 365 | ![No](../images/svg/check-no.svg) | ![No](../images/svg/check-no.svg) Integrations: Microsoft Endpoint DLP | ![No](../images/svg/check-no.svg) | ![No](../images/svg/check-no.svg) -Integrations: Microsoft Intune | ![Yes](../images/svg/check-yes.svg) | ![No](../images/svg/check-no.svg) +Integrations: Microsoft Intune | ![Yes](../images/svg/check-yes.svg) | ![No](../images/svg/check-no.svg) In development Integrations: Microsoft Power Automate & Azure Logic Apps | ![No](../images/svg/check-no.svg) Coming soon | ![No](../images/svg/check-no.svg) In development Integrations: Skype for Business / Teams | ![Yes](../images/svg/check-yes.svg) | ![No](../images/svg/check-no.svg) In development Microsoft Threat Experts | ![No](../images/svg/check-no.svg) | ![No](../images/svg/check-no.svg) From e45c64a19d9b466f61c5d51741343251be314cd1 Mon Sep 17 00:00:00 2001 From: adirdidi <68847945+adirdidi@users.noreply.github.com> Date: Thu, 7 Jan 2021 01:09:45 +0200 Subject: [PATCH 370/486] Update gov.md --- .../microsoft-defender-atp/gov.md | 14 +++++++------- 1 file changed, 7 insertions(+), 7 deletions(-) diff --git a/windows/security/threat-protection/microsoft-defender-atp/gov.md b/windows/security/threat-protection/microsoft-defender-atp/gov.md index 84f767e39e..3d962dd0a1 100644 --- a/windows/security/threat-protection/microsoft-defender-atp/gov.md +++ b/windows/security/threat-protection/microsoft-defender-atp/gov.md @@ -106,16 +106,16 @@ These are the known gaps as of January 2021: Feature name | GCC | GCC High :---|:---|:--- -Threat analytics | ![Yes](../images/svg/check-yes.svg) | ![No](../images/svg/check-no.svg) In development -Threat & vulnerability management | ![Yes](../images/svg/check-yes.svg) | ![No](../images/svg/check-no.svg) In development -Automated investigation and remediation: Response to Office 365 alerts | ![No](../images/svg/check-no.svg) | ![No](../images/svg/check-no.svg) Automated investigation and remediation: Live response | ![Yes](../images/svg/check-yes.svg) | ![No](../images/svg/check-no.svg) In development -Management and APIs: Threat protection report | ![Yes](../images/svg/check-yes.svg) | ![No](../images/svg/check-no.svg) In development -Management and APIs: Device health and compliance report | ![Yes](../images/svg/check-yes.svg) | ![No](../images/svg/check-no.svg) In development -Management and APIs: Streaming API | ![No](../images/svg/check-no.svg) Coming soon | ![No](../images/svg/check-no.svg) In development -Management and APIs: Integration with third-party products | ![Yes](../images/svg/check-yes.svg) | ![No](../images/svg/check-no.svg) In development +Automated investigation and remediation: Response to Office 365 alerts | ![No](../images/svg/check-no.svg) | ![No](../images/svg/check-no.svg) Email notifications | ![No](../images/svg/check-no.svg) Coming soon | ![No](../images/svg/check-no.svg) In development Evaluation lab | ![Yes](../images/svg/check-yes.svg) | ![No](../images/svg/check-no.svg) In development +Management and APIs: Device health and compliance report | ![Yes](../images/svg/check-yes.svg) | ![No](../images/svg/check-no.svg) In development +Management and APIs: Integration with third-party products | ![Yes](../images/svg/check-yes.svg) | ![No](../images/svg/check-no.svg) In development +Management and APIs: Streaming API | ![No](../images/svg/check-no.svg) Coming soon | ![No](../images/svg/check-no.svg) In development +Management and APIs: Threat protection report | ![Yes](../images/svg/check-yes.svg) | ![No](../images/svg/check-no.svg) In development +Threat & vulnerability management | ![Yes](../images/svg/check-yes.svg) | ![No](../images/svg/check-no.svg) In development +Threat analytics | ![Yes](../images/svg/check-yes.svg) | ![No](../images/svg/check-no.svg) In development Web content filtering | ![No](../images/svg/check-no.svg) Coming soon | ![No](../images/svg/check-no.svg) In development Integrations: Azure Sentinel | ![No](../images/svg/check-no.svg) Coming soon | ![No](../images/svg/check-no.svg) In development Integrations: Microsoft Cloud App Security | ![No](../images/svg/check-no.svg) | ![No](../images/svg/check-no.svg) From 4e3f511b6407affadd31bfdf5ee41438c05f9bad Mon Sep 17 00:00:00 2001 From: adirdidi <68847945+adirdidi@users.noreply.github.com> Date: Thu, 7 Jan 2021 03:47:56 +0200 Subject: [PATCH 371/486] Update gov.md --- .../threat-protection/microsoft-defender-atp/gov.md | 6 +++--- 1 file changed, 3 insertions(+), 3 deletions(-) diff --git a/windows/security/threat-protection/microsoft-defender-atp/gov.md b/windows/security/threat-protection/microsoft-defender-atp/gov.md index 3d962dd0a1..b4e6a21755 100644 --- a/windows/security/threat-protection/microsoft-defender-atp/gov.md +++ b/windows/security/threat-protection/microsoft-defender-atp/gov.md @@ -56,8 +56,8 @@ Windows 8.1 Enterprise | ![No](../images/svg/check-no.svg) Coming soon | ![No](. Windows 8 Pro | ![No](../images/svg/check-no.svg) Coming soon | ![No](../images/svg/check-no.svg) In development Windows 7 SP1 Enterprise | ![No](../images/svg/check-no.svg) Coming soon | ![No](../images/svg/check-no.svg) In development Windows 7 SP1 Pro | ![No](../images/svg/check-no.svg) Coming soon | ![No](../images/svg/check-no.svg) In development -Mac OS | ![No](../images/svg/check-no.svg) | ![No](../images/svg/check-no.svg) -Linux | ![No](../images/svg/check-no.svg) | ![No](../images/svg/check-no.svg) +Mac OS | ![No](../images/svg/check-no.svg) In development | ![No](../images/svg/check-no.svg) In development +Linux | ![No](../images/svg/check-no.svg) In development | ![No](../images/svg/check-no.svg) In development iOS | ![No](../images/svg/check-no.svg) | ![No](../images/svg/check-no.svg) Android | ![No](../images/svg/check-no.svg) | ![No](../images/svg/check-no.svg) @@ -116,7 +116,7 @@ Management and APIs: Streaming API | ![No](../images/svg/check-no.svg) Coming so Management and APIs: Threat protection report | ![Yes](../images/svg/check-yes.svg) | ![No](../images/svg/check-no.svg) In development Threat & vulnerability management | ![Yes](../images/svg/check-yes.svg) | ![No](../images/svg/check-no.svg) In development Threat analytics | ![Yes](../images/svg/check-yes.svg) | ![No](../images/svg/check-no.svg) In development -Web content filtering | ![No](../images/svg/check-no.svg) Coming soon | ![No](../images/svg/check-no.svg) In development +Web content filtering | ![No](../images/svg/check-no.svg) In development | ![No](../images/svg/check-no.svg) In development Integrations: Azure Sentinel | ![No](../images/svg/check-no.svg) Coming soon | ![No](../images/svg/check-no.svg) In development Integrations: Microsoft Cloud App Security | ![No](../images/svg/check-no.svg) | ![No](../images/svg/check-no.svg) Integrations: Microsoft Compliance Center | ![No](../images/svg/check-no.svg) | ![No](../images/svg/check-no.svg) From 57756ccc29977a9c507ee80efac23862981764a6 Mon Sep 17 00:00:00 2001 From: Denise Vangel-MSFT Date: Wed, 6 Jan 2021 17:56:22 -0800 Subject: [PATCH 372/486] Update manage-updates-baselines-microsoft-defender-antivirus.md --- ...-baselines-microsoft-defender-antivirus.md | 22 +++++++++---------- 1 file changed, 11 insertions(+), 11 deletions(-) diff --git a/windows/security/threat-protection/microsoft-defender-antivirus/manage-updates-baselines-microsoft-defender-antivirus.md b/windows/security/threat-protection/microsoft-defender-antivirus/manage-updates-baselines-microsoft-defender-antivirus.md index 7835dd3bfa..1b9cc2aad0 100644 --- a/windows/security/threat-protection/microsoft-defender-antivirus/manage-updates-baselines-microsoft-defender-antivirus.md +++ b/windows/security/threat-protection/microsoft-defender-antivirus/manage-updates-baselines-microsoft-defender-antivirus.md @@ -64,7 +64,7 @@ You can manage the distribution of updates through one of the following methods: For more information, see [Manage the sources for Microsoft Defender Antivirus protection updates](https://docs.microsoft.com/mem/configmgr/protect/deploy-use/endpoint-definitions-wsus#to-synchronize-endpoint-protection-definition-updates-in-standalone-wsus). > [!NOTE] -> We release these monthly updates in phases. This results in multiple packages visible in your WSUS server. +> Monthly updates are released in phases, resulting in multiple packages visible in your [Window Server Update Services](https://docs.microsoft.com/windows-server/administration/windows-server-update-services/get-started/windows-server-update-services-wsus). ## Monthly platform and engine versions @@ -143,7 +143,7 @@ No known issues ### Previous version updates: Technical upgrade support only -Previous version updates are listed below, and are provided for technical upgrade support only. +After a new package version is released, support for the previous two versions is reduced to technical support only. Versions older than that are listed in this section, and are provided for technical upgrade support only.

    @@ -369,16 +369,16 @@ The below table provides the Microsoft Defender Antivirus platform and engine ve |Windows 10 release |Platform version |Engine version |Support phase | |:---|:---|:---|:---| -|2004 (20H1) |4.18.2004.6 |1.1.17000.2 | Technical upgrade Support (Only) | -|1909 (19H2) |4.18.1902.5 |1.1.16700.3 | Technical upgrade Support (Only) | -|1903 (19H1) |4.18.1902.5 |1.1.15600.4 | Technical upgrade Support (Only) | -|1809 (RS5) |4.18.1807.18075 |1.1.15000.2 | Technical upgrade Support (Only) | -|1803 (RS4) |4.13.17134.1 |1.1.14600.4 | Technical upgrade Support (Only) | -|1709 (RS3) |4.12.16299.15 |1.1.14104.0 | Technical upgrade Support (Only) | -|1703 (RS2) |4.11.15603.2 |1.1.13504.0 | Technical upgrade Support (Only) | -|1607 (RS1) |4.10.14393.3683 |1.1.12805.0 | Technical upgrade Support (Only) | +|2004 (20H1) |4.18.2004.6 |1.1.17000.2 | Technical upgrade support (only) | +|1909 (19H2) |4.18.1902.5 |1.1.16700.3 | Technical upgrade support (only) | +|1903 (19H1) |4.18.1902.5 |1.1.15600.4 | Technical upgrade support (only) | +|1809 (RS5) |4.18.1807.18075 |1.1.15000.2 | Technical upgrade support (only) | +|1803 (RS4) |4.13.17134.1 |1.1.14600.4 | Technical upgrade support (only) | +|1709 (RS3) |4.12.16299.15 |1.1.14104.0 | Technical upgrade support (only) | +|1703 (RS2) |4.11.15603.2 |1.1.13504.0 | Technical upgrade support (only) | +|1607 (RS1) |4.10.14393.3683 |1.1.12805.0 | Technical upgrade support (only) | -Windows 10 release info: [Windows lifecycle fact sheet](https://support.microsoft.com/help/13853/windows-lifecycle-fact-sheet). +For Windows 10 release information, see the [Windows lifecycle fact sheet](https://support.microsoft.com/help/13853/windows-lifecycle-fact-sheet). ## Updates for Deployment Image Servicing and Management (DISM) From 0644be036d2aa5048fa318d3975c1c15da9d0a5a Mon Sep 17 00:00:00 2001 From: Denise Vangel-MSFT Date: Wed, 6 Jan 2021 18:04:16 -0800 Subject: [PATCH 373/486] Update introduction-to-device-guard-virtualization-based-security-and-windows-defender-application-control.md --- ...-and-windows-defender-application-control.md | 17 ++++++++--------- 1 file changed, 8 insertions(+), 9 deletions(-) diff --git a/windows/security/threat-protection/device-guard/introduction-to-device-guard-virtualization-based-security-and-windows-defender-application-control.md b/windows/security/threat-protection/device-guard/introduction-to-device-guard-virtualization-based-security-and-windows-defender-application-control.md index f60748b37b..9483ca4022 100644 --- a/windows/security/threat-protection/device-guard/introduction-to-device-guard-virtualization-based-security-and-windows-defender-application-control.md +++ b/windows/security/threat-protection/device-guard/introduction-to-device-guard-virtualization-based-security-and-windows-defender-application-control.md @@ -1,13 +1,12 @@ --- -title: WDAC and virtualization-based code integrity (Windows 10) -description: Hardware and software system integrity-hardening capabilites that can be deployed separately or in combination with Windows Defender Application Control (WDAC). +title: Windows Defender Application Control and virtualization-based code integrity (Windows 10) +description: Hardware and software system integrity-hardening capabilities that can be deployed separately or in combination with Windows Defender Application Control (WDAC). keywords: virtualization, security, malware, device guard ms.prod: w10 ms.mktglfcycl: deploy ms.localizationpriority: medium author: denisebmsft ms.author: deniseb -ms.date: 07/01/2019 ms.reviewer: manager: dansimp ms.custom: asr @@ -19,24 +18,24 @@ ms.custom: asr - Windows 10 - Windows Server 2016 -Windows 10 includes a set of hardware and OS technologies that, when configured together, allow enterprises to "lock down" Windows 10 systems so they operate with many of the properties of mobile devices. In this configuration, specific technologies work together to restrict devices to only run authorized apps by using a feature called configurable code integrity, while simultaneously hardening the OS against kernel memory attacks through the use of virtualization-based protection of code integrity (more specifically, HVCI). +Windows 10 includes a set of hardware and OS technologies that, when configured together, allow enterprises to "lock down" Windows 10 systems so they operate with many of the properties of mobile devices. In this configuration, specific technologies work together to restrict devices to only run authorized apps by using a feature called configurable code integrity, while simultaneously hardening the OS against kernel memory attacks by using virtualization-based protection of code integrity (more specifically, HVCI). -Configurable code integrity policies and HVCI are very powerful protections that can be used separately. However, when these two technologies are configured to work together, they present a very strong protection capability for Windows 10 devices. +Configurable code integrity policies and HVCI are powerful protections that can be used separately. However, when these two technologies are configured to work together, they present a strong protection capability for Windows 10 devices. Using configurable code integrity to restrict devices to only authorized apps has these advantages over other solutions: 1. Configurable code integrity policy is enforced by the Windows kernel itself. As such, the policy takes effect early in the boot sequence before nearly all other OS code and before traditional antivirus solutions run. 2. Configurable code integrity allows customers to set application control policy not only over code running in user mode, but also kernel mode hardware and software drivers and even code that runs as part of Windows. -3. Customers can protect the configurable code integrity policy even from local administrator tampering by digitally signing the policy. This would mean that changing the policy would require both administrative privilege and access to the organization’s digital signing process, making it extremely difficult for an attacker with administrative privilege, or malicious software that managed to gain administrative privilege, to alter the application control policy. -4. The entire configurable code integrity enforcement mechanism can be protected by HVCI, where even if a vulnerability exists in kernel mode code, the likelihood that an attacker could successfully exploit it is significantly diminished. Why is this relevant? That’s because an attacker that compromises the kernel would otherwise have enough privilege to disable most system defenses and override the application control policies enforced by configurable code integrity or any other application control solution. +3. Customers can protect the configurable code integrity policy even from local administrator tampering by digitally signing the policy. This would mean that changing the policy would require both administrative privilege and access to the organization’s digital signing process, making it difficult for an attacker with administrative privilege, or malicious software that managed to gain administrative privilege, to alter the application control policy. +4. The entire configurable code integrity enforcement mechanism can be protected by HVCI, where even if a vulnerability exists in kernel mode code, the likelihood that an attacker could successfully exploit it is diminished. Why is this relevant? That’s because an attacker that compromises the kernel would otherwise have enough privilege to disable most system defenses and override the application control policies enforced by configurable code integrity or any other application control solution. ## Windows Defender Application Control -When we originally designed this configuration state, we did so with a specific security promise in mind. Although there were no direct dependencies between configurable code integrity and HVCI, we intentionally focused our discussion around the lockdown state you achieve when deploying them together. However, given that HVCI relies on Windows virtualization-based security, it comes with additional hardware, firmware, and kernel driver compatibility requirements that some older systems can’t meet. As a result, many IT Professionals assumed that because some systems couldn't use HVCI, they couldn’t use configurable code integrity either. +When we originally designed this configuration state, we did so with a specific security promise in mind. Although there were no direct dependencies between configurable code integrity and HVCI, we intentionally focused our discussion around the lockdown state you achieve when deploying them together. However, given that HVCI relies on Windows virtualization-based security, it comes with more hardware, firmware, and kernel driver compatibility requirements that some older systems can’t meet. As a result, many IT Professionals assumed that because some systems couldn't use HVCI, they couldn’t use configurable code integrity either. Configurable code integrity carries no specific hardware or software requirements other than running Windows 10, which means many IT professionals were wrongly denied the benefits of this powerful application control capability. -Since the initial release of Windows 10, the world has witnessed numerous hacking and malware attacks where application control alone could have prevented the attack altogether. With this in mind, we are discussing and documenting configurable code integrity as a independent technology within our security stack and giving it a name of its own: [Windows Defender Application Control](https://docs.microsoft.com/windows/security/threat-protection/windows-defender-application-control). +Since the initial release of Windows 10, the world has witnessed numerous hacking and malware attacks where application control alone could have prevented the attack altogether. With this in mind, we are discussing and documenting configurable code integrity as an independent technology within our security stack and giving it a name of its own: [Windows Defender Application Control](https://docs.microsoft.com/windows/security/threat-protection/windows-defender-application-control). We hope this change will help us better communicate options for adopting application control within an organization. ## Related articles From 0033e3f269e1d40daebd3fc293dd1a039f3c4462 Mon Sep 17 00:00:00 2001 From: Denise Vangel-MSFT Date: Wed, 6 Jan 2021 18:07:50 -0800 Subject: [PATCH 374/486] Update network-protection.md --- .../microsoft-defender-atp/network-protection.md | 9 ++++----- 1 file changed, 4 insertions(+), 5 deletions(-) diff --git a/windows/security/threat-protection/microsoft-defender-atp/network-protection.md b/windows/security/threat-protection/microsoft-defender-atp/network-protection.md index 0b6737027d..ce1b2006f7 100644 --- a/windows/security/threat-protection/microsoft-defender-atp/network-protection.md +++ b/windows/security/threat-protection/microsoft-defender-atp/network-protection.md @@ -11,7 +11,6 @@ ms.localizationpriority: medium audience: ITPro author: denisebmsft ms.author: deniseb -ms.date: 04/30/2019 ms.reviewer: manager: dansimp ms.custom: asr @@ -33,7 +32,7 @@ Network protection expands the scope of [Microsoft Defender SmartScreen](../micr Network protection is supported beginning with Windows 10, version 1709. -For more details about how to enable network protection, see [Enable network protection](enable-network-protection.md). Use Group Policy, PowerShell, or MDM CSPs to enable and manage network protection in your network. +For more information about how to enable network protection, see [Enable network protection](enable-network-protection.md). Use Group Policy, PowerShell, or MDM CSPs to enable and manage network protection in your network. > [!TIP] > You can visit the Windows Defender Testground website at [demo.wd.microsoft.com](https://demo.wd.microsoft.com?ocid=cx-wddocs-testground) to confirm the feature is working and see how it works. @@ -46,7 +45,7 @@ You can also use [audit mode](audit-windows-defender.md) to evaluate how Network ## Requirements -Network protection requires Windows 10 Pro, Enterprise E3, E5 and Microsoft Defender AV real-time protection. +Network protection requires Windows 10 Pro, Enterprise E3, E5, and Microsoft Defender AV real-time protection. Windows 10 version | Microsoft Defender Antivirus -|- @@ -76,7 +75,7 @@ You can review the Windows event log to see events that are created when network 1. [Copy the XML directly](event-views.md). -2. Click **OK**. +2. Select **OK**. 3. This will create a custom view that filters to only show the following events related to network protection: @@ -88,6 +87,6 @@ You can review the Windows event log to see events that are created when network ## Related articles -- [Evaluate network protection](evaluate-network-protection.md) | Undertake a quick scenario that demonstrate how the feature works, and what events would typically be created. +- [Evaluate network protection](evaluate-network-protection.md) | Undertake a quick scenario that demonstrates how the feature works, and what events would typically be created. - [Enable network protection](enable-network-protection.md) | Use Group Policy, PowerShell, or MDM CSPs to enable and manage network protection in your network. From 91c990c82656292d74841b1619ea33d2a8739057 Mon Sep 17 00:00:00 2001 From: Denise Vangel-MSFT Date: Wed, 6 Jan 2021 18:10:38 -0800 Subject: [PATCH 375/486] Update customize-controlled-folders.md --- .../customize-controlled-folders.md | 10 +++++----- 1 file changed, 5 insertions(+), 5 deletions(-) diff --git a/windows/security/threat-protection/microsoft-defender-atp/customize-controlled-folders.md b/windows/security/threat-protection/microsoft-defender-atp/customize-controlled-folders.md index 629775a962..8c2ab186eb 100644 --- a/windows/security/threat-protection/microsoft-defender-atp/customize-controlled-folders.md +++ b/windows/security/threat-protection/microsoft-defender-atp/customize-controlled-folders.md @@ -1,6 +1,6 @@ --- title: Customize controlled folder access -description: Add additional folders that should be protected by controlled folder access, or allow apps that are incorrectly blocking changes to important files. +description: Add other folders that should be protected by controlled folder access, or allow apps that are incorrectly blocking changes to important files. keywords: Controlled folder access, windows 10, windows defender, ransomware, protect, files, folders, customize, add folder, add app, allow, add executable search.product: eADQiWindows 10XVcnh ms.prod: w10 @@ -12,7 +12,7 @@ author: denisebmsft ms.author: deniseb ms.reviewer: jcedola, dbodorin, vladiso, nixanm, anvascon manager: dansimp -ms.date: 12/16/2020 +ms.date: 01/06/2021 --- # Customize controlled folder access @@ -38,7 +38,7 @@ This article describes how to customize controlled folder access capabilities, a ## Protect additional folders -Controlled folder access applies to a number of system folders and default locations, including folders such as **Documents**, **Pictures**, and **Movies**. You can add additional folders to be protected, but you cannot remove the default folders in the default list. +Controlled folder access applies to many system folders and default locations, including folders such as **Documents**, **Pictures**, and **Movies**. You can add additional folders to be protected, but you cannot remove the default folders in the default list. Adding other folders to controlled folder access can be helpful for cases when you don't store files in the default Windows libraries, or you've changed the default location of your libraries. @@ -72,7 +72,7 @@ You can use the Windows Security app, Group Policy, PowerShell cmdlets, or mobil ### Use PowerShell to protect additional folders -1. Type **powershell** in the Start menu, right-click **Windows PowerShell** and select **Run as administrator** +1. Type **PowerShell** in the Start menu, right-click **Windows PowerShell** and select **Run as administrator** 2. Enter the following cmdlet: @@ -125,7 +125,7 @@ An allowed application or service only has write access to a controlled folder a ### Use PowerShell to allow specific apps -1. Type **powershell** in the Start menu, right-click **Windows PowerShell** and select **Run as administrator** +1. Type **PowerShell** in the Start menu, right-click **Windows PowerShell** and select **Run as administrator** 2. Enter the following cmdlet: ```PowerShell From bca7802e363b4a98f84ff922bf4250e6e444a1a1 Mon Sep 17 00:00:00 2001 From: Denise Vangel-MSFT Date: Wed, 6 Jan 2021 18:13:59 -0800 Subject: [PATCH 376/486] Update configure-remediation-microsoft-defender-antivirus.md --- ...emediation-microsoft-defender-antivirus.md | 22 +++++++++---------- 1 file changed, 11 insertions(+), 11 deletions(-) diff --git a/windows/security/threat-protection/microsoft-defender-antivirus/configure-remediation-microsoft-defender-antivirus.md b/windows/security/threat-protection/microsoft-defender-antivirus/configure-remediation-microsoft-defender-antivirus.md index cc8fa8dec9..b080c70faa 100644 --- a/windows/security/threat-protection/microsoft-defender-antivirus/configure-remediation-microsoft-defender-antivirus.md +++ b/windows/security/threat-protection/microsoft-defender-antivirus/configure-remediation-microsoft-defender-antivirus.md @@ -11,7 +11,7 @@ ms.localizationpriority: medium author: denisebmsft ms.author: deniseb ms.custom: nextgen -ms.date: 09/03/2018 +ms.date: 01/06/2021 ms.reviewer: manager: dansimp --- @@ -39,20 +39,20 @@ To configure these settings: 1. On your Group Policy management computer, open the [Group Policy Management Console](https://technet.microsoft.com/library/cc731212.aspx), right-click the Group Policy Object you want to configure and click **Edit**. -2. In the **Group Policy Management Editor** go to **Computer configuration** and click **Administrative templates**. +2. In the **Group Policy Management Editor** go to **Computer configuration** and select **Administrative templates**. 3. Expand the tree to **Windows components > Microsoft Defender Antivirus** and then the **Location** specified in the table below. -4. Double-click the policy **Setting** as specified in the table below, and set the option to your desired configuration. Click **OK**, and repeat for any other settings. +4. Select the policy **Setting** as specified in the table below, and set the option to your desired configuration. Select **OK**, and repeat for any other settings. -Location | Setting | Description | Default setting (if not configured) ----|---|---|--- -Scan | Create a system restore point | A system restore point will be created each day before cleaning or scanning is attempted | Disabled -Scan | Turn on removal of items from scan history folder | Specify how many days items should be kept in the scan history | 30 days -Root | Turn off routine remediation | You can specify whether Microsoft Defender Antivirus automatically remediates threats, or if it should ask the endpoint user what to do. | Disabled (threats are remediated automatically) -Quarantine | Configure removal of items from Quarantine folder | Specify how many days items should be kept in quarantine before being removed | Never removed -Threats | Specify threat alert levels at which default action should not be taken when detected | Every threat that is detected by Microsoft Defender Antivirus is assigned a threat level (low, medium, high, or severe). You can use this setting to define how all threats for each of the threat levels should be remediated (quarantined, removed, or ignored) | Not applicable -Threats | Specify threats upon which default action should not be taken when detected | Specify how specific threats (using their threat ID) should be remediated. You can specify whether the specific threat should be quarantined, removed, or ignored | Not applicable +|Location | Setting | Description | Default setting (if not configured) | +|:---|:---|:---|:---| +|Scan | Create a system restore point | A system restore point will be created each day before cleaning or scanning is attempted | Disabled| +|Scan | Turn on removal of items from scan history folder | Specify how many days items should be kept in the scan history | 30 days | +|Root | Turn off routine remediation | You can specify whether Microsoft Defender Antivirus automatically remediates threats, or if it should ask the endpoint user what to do. | Disabled (threats are remediated automatically) | +|Quarantine | Configure removal of items from Quarantine folder | Specify how many days items should be kept in quarantine before being removed | Never removed | +|Threats | Specify threat alert levels at which default action should not be taken when detected | Every threat that is detected by Microsoft Defender Antivirus is assigned a threat level (low, medium, high, or severe). You can use this setting to define how all threats for each of the threat levels should be remediated (quarantined, removed, or ignored) | Not applicable | +|Threats | Specify threats upon which default action should not be taken when detected | Specify how specific threats (using their threat ID) should be remediated. You can specify whether the specific threat should be quarantined, removed, or ignored | Not applicable | > [!IMPORTANT] > Microsoft Defender Antivirus detects and remediates files based on many factors. Sometimes, completing a remediation requires a reboot. Even if the detection is later determined to be a false positive, the reboot must be completed to ensure all additional remediation steps have been completed. From 94e5652bdd38b7899b06f768ef34a901700d2fdc Mon Sep 17 00:00:00 2001 From: Denise Vangel-MSFT Date: Wed, 6 Jan 2021 18:16:46 -0800 Subject: [PATCH 377/486] Update common-exclusion-mistakes-microsoft-defender-antivirus.md --- ...n-mistakes-microsoft-defender-antivirus.md | 80 +++++++++---------- 1 file changed, 40 insertions(+), 40 deletions(-) diff --git a/windows/security/threat-protection/microsoft-defender-antivirus/common-exclusion-mistakes-microsoft-defender-antivirus.md b/windows/security/threat-protection/microsoft-defender-antivirus/common-exclusion-mistakes-microsoft-defender-antivirus.md index 58cd36777d..8e12b6b966 100644 --- a/windows/security/threat-protection/microsoft-defender-antivirus/common-exclusion-mistakes-microsoft-defender-antivirus.md +++ b/windows/security/threat-protection/microsoft-defender-antivirus/common-exclusion-mistakes-microsoft-defender-antivirus.md @@ -21,12 +21,12 @@ manager: dansimp You can define an exclusion list for items that you don't want Microsoft Defender Antivirus to scan. Such excluded items could contain threats that make your device vulnerable. -This topic describes some common mistake that you should avoid when defining exclusions. +This article describes some common mistake that you should avoid when defining exclusions. Before defining your exclusion lists, see [Recommendations for defining exclusions](configure-exclusions-microsoft-defender-antivirus.md#recommendations-for-defining-exclusions). ## Excluding certain trusted items -There are certain files, file types, folders, or processes that you should not exclude from scanning even though you trust them to be not malicious. Refer to the following section for items that you should not exclude from scanning. +Certain files, file types, folders, or processes should not be excluded from scanning even though you trust them to be not malicious. Refer to the following section for items that you should not exclude from scanning. **Do not add exclusions for the following folder locations:** @@ -61,44 +61,44 @@ There are certain files, file types, folders, or processes that you should not e - C:\Windows\Temp\* **Do not add exclusions for the following file extensions:** -- .7zip -- .bat -- .bin -- .cab -- .cmd -- .com -- .cpl -- .dll -- .exe -- .fla -- .gif -- .gz -- .hta -- .inf -- .java -- .jar -- .job -- .jpeg -- .jpg -- .js -- .ko -- .ko.gz -- .msi -- .ocx -- .png -- .ps1 -- .py -- .rar -- .reg -- .scr -- .sys -- .tar -- .tmp -- .url -- .vbe -- .vbs -- .wsf -- .zip +- `.7zip` +- `.bat` +- `.bin` +- `.cab` +- `.cmd` +- `.com` +- `.cpl` +- `.dll` +- `.exe` +- `.fla` +- `.gif` +- `.gz` +- `.hta` +- `.inf` +- `.java` +- `.jar` +- `.job` +- `.jpeg` +- `.jpg` +- `.js` +- `.ko` +- `.ko.gz` +- `.msi` +- `.ocx` +- `.png` +- `.ps1` +- `.py` +- `.rar` +- `.reg` +- `.scr` +- `.sys` +- `.tar` +- `.tmp` +- `.url` +- `.vbe` +- `.vbs` +- `.wsf` +- `.zip` >[!NOTE] > You can chose to exclude file types, such as .gif, .jpg, .jpeg, .png if your environment has a modern, up-to-date software with a strict update policy to handle any vulnerabilities. From 95caab5d1850238686ae630d70e10d65379a7dcd Mon Sep 17 00:00:00 2001 From: Denise Vangel-MSFT Date: Wed, 6 Jan 2021 18:17:50 -0800 Subject: [PATCH 378/486] Update common-exclusion-mistakes-microsoft-defender-antivirus.md --- .../common-exclusion-mistakes-microsoft-defender-antivirus.md | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/windows/security/threat-protection/microsoft-defender-antivirus/common-exclusion-mistakes-microsoft-defender-antivirus.md b/windows/security/threat-protection/microsoft-defender-antivirus/common-exclusion-mistakes-microsoft-defender-antivirus.md index 8e12b6b966..d33ce3552f 100644 --- a/windows/security/threat-protection/microsoft-defender-antivirus/common-exclusion-mistakes-microsoft-defender-antivirus.md +++ b/windows/security/threat-protection/microsoft-defender-antivirus/common-exclusion-mistakes-microsoft-defender-antivirus.md @@ -150,7 +150,7 @@ Do not use a single exclusion list to define exclusions for multiple server work Microsoft Defender Antivirus Service runs in system context using the LocalSystem account, which means it gets information from the system environment variable, and not from the user environment variable. Use of environment variables as a wildcard in exclusion lists is limited to system variables and those applicable to processes running as an NT AUTHORITY\SYSTEM account. Therefore, do not use user environment variables as wildcards when adding Microsoft Defender Antivirus folder and process exclusions. See the table under [System environment variables](configure-extension-file-exclusions-microsoft-defender-antivirus.md#system-environment-variables) for a complete list of system environment variables. See [Use wildcards in the file name and folder path or extension exclusion lists](configure-extension-file-exclusions-microsoft-defender-antivirus.md#use-wildcards-in-the-file-name-and-folder-path-or-extension-exclusion-lists) for information on how to use wildcards in exclusion lists. -## Related topics +## Related articles - [Configure and validate exclusions in Microsoft Defender Antivirus scans](configure-exclusions-microsoft-defender-antivirus.md) - [Configure and validate exclusions based on file extension and folder location](configure-extension-file-exclusions-microsoft-defender-antivirus.md) From 77e349339171392fe1520fde896011843551c35e Mon Sep 17 00:00:00 2001 From: Denise Vangel-MSFT Date: Wed, 6 Jan 2021 18:22:32 -0800 Subject: [PATCH 379/486] Update exploit-protection-reference.md --- .../exploit-protection-reference.md | 14 +++++++------- 1 file changed, 7 insertions(+), 7 deletions(-) diff --git a/windows/security/threat-protection/microsoft-defender-atp/exploit-protection-reference.md b/windows/security/threat-protection/microsoft-defender-atp/exploit-protection-reference.md index 99f4521685..8219039c09 100644 --- a/windows/security/threat-protection/microsoft-defender-atp/exploit-protection-reference.md +++ b/windows/security/threat-protection/microsoft-defender-atp/exploit-protection-reference.md @@ -11,7 +11,7 @@ ms.localizationpriority: medium audience: ITPro author: denisebmsft ms.author: deniseb -ms.date: 07/20/2020 +ms.date: 01/06/2021 ms.reviewer: cjacks manager: dansimp ms.custom: asr @@ -223,7 +223,7 @@ Block low integrity images will prevent the application from loading files that ### Description -Block remote images will prevent the application from loading files that are hosted on a remote device, such as a UNC share. This helps protect against loading binaries into memory that are on an external device controlled by the attacker. +Blocking remote images helps to prevent the application from loading files that are hosted on a remote device, such as a UNC share. Blocking remote images helps protect against loading binaries into memory that are on an external device controlled by the attacker. This mitigation will block image loads if the image is determined to be on a remote device. It is implemented by the memory manager, which blocks the file from being mapped into memory. If an application attempts to map a remote file, it will trigger a STATUS_ACCESS_DENIED error. @@ -257,7 +257,7 @@ The most common use of fonts outside of the system fonts directory is with [web ### Description -Code integrity guard ensures that all binaries loaded into a process are digitally signed by Microsoft. This includes [WHQL](https://docs.microsoft.com/windows-hardware/drivers/install/whql-release-signature) (Windows Hardware Quality Labs) signatures, which will allow WHQL-approved drivers to run within the process. +Code integrity guard ensures that all binaries loaded into a process are digitally signed by Microsoft. Code integrity guard includes [WHQL](https://docs.microsoft.com/windows-hardware/drivers/install/whql-release-signature) (Windows Hardware Quality Labs) signatures, which will allow WHQL-approved drivers to run within the process. This mitigation is implemented within the memory manager, which blocks the binary from being mapped into memory. If you attempt to load a binary that is not signed by Microsoft, the memory manger will return the error STATUS_INVALID_IMAGE_HASH. By blocking at the memory manager level, this prevents both binaries loaded by the process and binaries injected into the process. @@ -275,9 +275,9 @@ This mitigation specifically blocks any binary that is not signed by Microsoft. ### Description -Control flow guard (CFG) mitigates the risk of attackers leveraging memory corruption vulnerabilities by protecting indirect function calls. For example, an attacker may user a buffer overflow vulnerability to overwrite memory containing a function pointer, and replace that function pointer with a pointer to executable code of their choice (which may also have been injected into the program). +Control flow guard (CFG) mitigates the risk of attackers using memory corruption vulnerabilities by protecting indirect function calls. For example, an attacker may user a buffer overflow vulnerability to overwrite memory containing a function pointer, and replace that function pointer with a pointer to executable code of their choice (which may also have been injected into the program). -This mitigation is provided by injecting an additional check at compile time. Before each indirect function call, additional instructions are added which verify that the target is a valid call target before it is called. If the target is not a valid call target, then the application is terminated. As such, only applications that are compiled with CFG support can benefit from this mitigation. +This mitigation is provided by injecting another check at compile time. Before each indirect function call, another instructions are added which verify that the target is a valid call target before it is called. If the target is not a valid call target, then the application is terminated. As such, only applications that are compiled with CFG support can benefit from this mitigation. The check for a valid target is provided by the Windows kernel. When executable files are loaded, the metadata for indirect call targets is extracted at load time and marked as valid call targets. Additionally, when memory is allocated and marked as executable (such as for generated code), these memory locations are also marked as valid call targets, to support mechanisms such as JIT compilation. @@ -296,7 +296,7 @@ Since applications must be compiled to support CFG, they implicitly declare thei ### Description -Data execution prevention (DEP) prevents memory that was not explicitly allocated as executable from being executed. This helps protect against an attacker injecting malicious code into the process, such as through a buffer overflow, and then executing that code. +Data execution prevention (DEP) prevents memory that was not explicitly allocated as executable from being executed. DEP helps protect against an attacker injecting malicious code into the process, such as through a buffer overflow, and then executing that code. If you attempt to set the instruction pointer to a memory address not marked as executable, the processor will throw an exception (general-protection violation), causing the application to crash. @@ -304,7 +304,7 @@ If you attempt to set the instruction pointer to a memory address not marked as All x64, ARM, and ARM-64 executables have DEP enabled by default, and it cannot be disabled. Since an application will have never been executed without DEP, compatibility is assumed. -All x86 (32-bit) binaries will have DEP enabled by default, but it can be disabled per process. Some old legacy applications, typically applications developed prior to Windows XP SP2, may not be compatible with DEP. These are typically applications that dynamically generate code (for example, JIT compiling) or link to older libraries (such as older versions of ATL) which dynamically generate code. +All x86 (32-bit) binaries have DEP enabled by default, but DEP can be disabled per process. Some old legacy applications, typically applications developed prior to Windows XP SP2, might not be compatible with DEP. Such applications typically generate code dynamically (for example, JIT compiling) or link to older libraries (such as older versions of ATL) which dynamically generate code. ### Configuration options From c299ce4d7580d99d6c07722d5ea5cc85c849816a Mon Sep 17 00:00:00 2001 From: Denise Vangel-MSFT Date: Wed, 6 Jan 2021 18:23:39 -0800 Subject: [PATCH 380/486] Update exploit-protection-reference.md --- .../exploit-protection-reference.md | 26 +++++++++---------- 1 file changed, 13 insertions(+), 13 deletions(-) diff --git a/windows/security/threat-protection/microsoft-defender-atp/exploit-protection-reference.md b/windows/security/threat-protection/microsoft-defender-atp/exploit-protection-reference.md index 8219039c09..fbbb9f9107 100644 --- a/windows/security/threat-protection/microsoft-defender-atp/exploit-protection-reference.md +++ b/windows/security/threat-protection/microsoft-defender-atp/exploit-protection-reference.md @@ -324,7 +324,7 @@ This includes: ### Compatibility considerations -Most of these extension points are relatively infrequently used, so compatibility impact is typically small, particularly at an individual application level. The one consideration is if users are using third party Legacy IMEs that will not work with the protected application. +Most of these extension points are relatively infrequently used, so compatibility impact is typically small, particularly at an individual application level. The one consideration is if users are using third-party Legacy IMEs that will not work with the protected application. ### Configuration options @@ -341,7 +341,7 @@ Win32k.sys provides a broad attack surface for an attacker. As a kernel-mode com ### Compatibility considerations -This mitigation is designed for processes that are dedicated non-UI processes. For example, many modern browsers will leverage process isolation and incorporate non-UI processes. Any application that displays a GUI using a single process will be impacted by this mitigation. +This mitigation is designed for processes that are dedicated non-UI processes. For example, many modern browsers will use process isolation and incorporate non-UI processes. Any application that displays a GUI using a single process will be impacted by this mitigation. ### Configuration options @@ -379,18 +379,18 @@ This mitigation is primarily an issue for applications such as debuggers, sandbo ### Configuration options -**Validate access for modules that are commonly abused by exploits** - This option, also known as EAF+, adds protections for additional commonly attacked modules: +**Validate access for modules that are commonly abused by exploits** - This option, also known as EAF+, adds protections for other commonly attacked modules: -- mshtml.dll -- flash*.ocx -- jscript*.ocx -- vbscript.dll -- vgx.dll -- mozjs.dll -- xul.dll -- acrord32.dll -- acrofx32.dll -- acroform.api +- `mshtml.dll` +- `flash*.ocx` +- `jscript*.ocx` +- `vbscript.dll` +- `vgx.dll` +- `mozjs.dll` +- `xul.dll` +- `acrord32.dll` +- `acrofx32.dll` +- `acroform.api` Additionally, by enabling EAF+, this mitigation adds the PAGE_GUARD protection to the page containing the "MZ" header, the first two bytes of the [DOS header in a PE file](https://docs.microsoft.com/windows/win32/debug/pe-format#ms-dos-stub-image-only), which is another aspect of known memory content which shellcode can look for to identify modules potentially of interest in memory. From 15da08b047ded1955d26389dd8f62cb9d275c03c Mon Sep 17 00:00:00 2001 From: Denise Vangel-MSFT Date: Wed, 6 Jan 2021 18:24:51 -0800 Subject: [PATCH 381/486] Update exploit-protection-reference.md --- .../exploit-protection-reference.md | 50 +++++++++---------- 1 file changed, 25 insertions(+), 25 deletions(-) diff --git a/windows/security/threat-protection/microsoft-defender-atp/exploit-protection-reference.md b/windows/security/threat-protection/microsoft-defender-atp/exploit-protection-reference.md index fbbb9f9107..68401d1360 100644 --- a/windows/security/threat-protection/microsoft-defender-atp/exploit-protection-reference.md +++ b/windows/security/threat-protection/microsoft-defender-atp/exploit-protection-reference.md @@ -427,31 +427,31 @@ The memory pages for all protected APIs will have the [PAGE_GUARD](https://docs. This mitigation protects the following Windows APIs: -- GetProcAddress -- GetProcAddressForCaller -- LoadLibraryA -- LoadLibraryExA -- LoadLibraryW -- LoadLibraryExW -- LdrGetProcedureAddress -- LdrGetProcedureAddressEx -- LdrGetProcedureAddressForCaller -- LdrLoadDll -- VirtualProtect -- VirtualProtectEx -- VirtualAlloc -- VirtualAllocEx -- NtAllocateVirtualMemory -- NtProtectVirtualMemory -- CreateProcessA -- CreateProcessW -- WinExec -- CreateProcessAsUserA -- CreateProcessAsUserW -- GetModuleHandleA -- GetModuleHandleW -- RtlDecodePointer -- DecodePointer +- `GetProcAddress` +- `GetProcAddressForCaller` +- `LoadLibraryA` +- `LoadLibraryExA` +- `LoadLibraryW` +- `LoadLibraryExW` +- `LdrGetProcedureAddress` +- `LdrGetProcedureAddressEx` +- `LdrGetProcedureAddressForCaller` +- `LdrLoadDll` +- `VirtualProtect` +- `VirtualProtectEx` +- `VirtualAlloc` +- `VirtualAllocEx` +- `NtAllocateVirtualMemory` +- `NtProtectVirtualMemory` +- `CreateProcessA` +- `CreateProcessW` +- `WinExec` +- `CreateProcessAsUserA` +- `CreateProcessAsUserW` +- `GetModuleHandleA` +- `GetModuleHandleW` +- `RtlDecodePointer` +- `DecodePointer` ### Compatibility considerations From 13afd5971a6fa8f0a729e7b19a9e171226cda9e8 Mon Sep 17 00:00:00 2001 From: Denise Vangel-MSFT Date: Wed, 6 Jan 2021 18:27:05 -0800 Subject: [PATCH 382/486] Update exploit-protection-reference.md --- .../exploit-protection-reference.md | 136 +++++++++--------- 1 file changed, 68 insertions(+), 68 deletions(-) diff --git a/windows/security/threat-protection/microsoft-defender-atp/exploit-protection-reference.md b/windows/security/threat-protection/microsoft-defender-atp/exploit-protection-reference.md index 68401d1360..57e45c13c2 100644 --- a/windows/security/threat-protection/microsoft-defender-atp/exploit-protection-reference.md +++ b/windows/security/threat-protection/microsoft-defender-atp/exploit-protection-reference.md @@ -488,40 +488,40 @@ Simulate execution (SimExec) is a mitigation for 32-bit applications only. This The APIs intercepted by this mitigation are: -- LoadLibraryA -- LoadLibraryW -- LoadLibraryExA -- LoadLibraryExW -- LdrLoadDll -- VirtualAlloc -- VirtualAllocEx -- NtAllocateVirtualMemory -- VirtualProtect -- VirtualProtectEx -- NtProtectVirtualMemory -- HeapCreate -- RtlCreateHeap -- CreateProcessA -- CreateProcessW -- CreateProcessInternalA -- CreateProcessInternalW -- NtCreateUserProcess -- NtCreateProcess -- NtCreateProcessEx -- CreateRemoteThread -- CreateRemoteThreadEx -- NtCreateThreadEx -- WriteProcessMemory -- NtWriteVirtualMemory -- WinExec -- CreateFileMappingA -- CreateFileMappingW -- CreateFileMappingNumaW -- NtCreateSection -- MapViewOfFile -- MapViewOfFileEx -- MapViewOfFileFromApp -- LdrGetProcedureAddressForCaller +- `LoadLibraryA` +- `LoadLibraryW` +- `LoadLibraryExA` +- `LoadLibraryExW` +- `LdrLoadDll` +- `VirtualAlloc` +- `VirtualAllocEx` +- `NtAllocateVirtualMemory` +- `VirtualProtect` +- `VirtualProtectEx` +- `NtProtectVirtualMemory` +- `HeapCreate` +- `RtlCreateHeap` +- `CreateProcessA` +- `CreateProcessW` +- `CreateProcessInternalA` +- `CreateProcessInternalW` +- `NtCreateUserProcess` +- `NtCreateProcess` +- `NtCreateProcessEx` +- `CreateRemoteThread` +- `CreateRemoteThreadEx` +- `NtCreateThreadEx` +- `WriteProcessMemory` +- `NtWriteVirtualMemory` +- `WinExec` +- `CreateFileMappingA` +- `CreateFileMappingW` +- `CreateFileMappingNumaW` +- `NtCreateSection` +- `MapViewOfFile` +- `MapViewOfFileEx` +- `MapViewOfFileFromApp` +- `LdrGetProcedureAddressForCaller` If a ROP gadget is detected, the process is terminated. @@ -543,40 +543,40 @@ Validate API invocation (CallerCheck) is a mitigation for return-oriented progra The APIs intercepted by this mitigation are: -- LoadLibraryA -- LoadLibraryW -- LoadLibraryExA -- LoadLibraryExW -- LdrLoadDll -- VirtualAlloc -- VirtualAllocEx -- NtAllocateVirtualMemory -- VirtualProtect -- VirtualProtectEx -- NtProtectVirtualMemory -- HeapCreate -- RtlCreateHeap -- CreateProcessA -- CreateProcessW -- CreateProcessInternalA -- CreateProcessInternalW -- NtCreateUserProcess -- NtCreateProcess -- NtCreateProcessEx -- CreateRemoteThread -- CreateRemoteThreadEx -- NtCreateThreadEx -- WriteProcessMemory -- NtWriteVirtualMemory -- WinExec -- CreateFileMappingA -- CreateFileMappingW -- CreateFileMappingNumaW -- NtCreateSection -- MapViewOfFile -- MapViewOfFileEx -- MapViewOfFileFromApp -- LdrGetProcedureAddressForCaller +- `LoadLibraryA` +- `LoadLibraryW` +- `LoadLibraryExA` +- `LoadLibraryExW` +- `LdrLoadDll` +- `VirtualAlloc` +- `VirtualAllocEx` +- `NtAllocateVirtualMemory` +- `VirtualProtect` +- `VirtualProtectEx` +- `NtProtectVirtualMemory` +- `HeapCreate` +- `RtlCreateHeap` +- `CreateProcessA` +- `CreateProcessW` +- `CreateProcessInternalA` +- `CreateProcessInternalW` +- `NtCreateUserProcess` +- `NtCreateProcess` +- `NtCreateProcessEx` +- `CreateRemoteThread` +- `CreateRemoteThreadEx` +- `NtCreateThreadEx` +- `WriteProcessMemory` +- `NtWriteVirtualMemory` +- `WinExec` +- `CreateFileMappingA` +- `CreateFileMappingW` +- `CreateFileMappingNumaW` +- `NtCreateSection` +- `MapViewOfFile` +- `MapViewOfFileEx` +- `MapViewOfFileFromApp` +- `LdrGetProcedureAddressForCaller` If a ROP gadget is detected, the process is terminated. From 18627d1a1ee38d1838c808471c2f1f11d62ebf2c Mon Sep 17 00:00:00 2001 From: Denise Vangel-MSFT Date: Wed, 6 Jan 2021 18:29:47 -0800 Subject: [PATCH 383/486] Update exploit-protection-reference.md --- .../exploit-protection-reference.md | 68 +++++++++---------- 1 file changed, 34 insertions(+), 34 deletions(-) diff --git a/windows/security/threat-protection/microsoft-defender-atp/exploit-protection-reference.md b/windows/security/threat-protection/microsoft-defender-atp/exploit-protection-reference.md index 57e45c13c2..e7ee3c6454 100644 --- a/windows/security/threat-protection/microsoft-defender-atp/exploit-protection-reference.md +++ b/windows/security/threat-protection/microsoft-defender-atp/exploit-protection-reference.md @@ -676,40 +676,40 @@ This mitigation intercepts a number of Windows APIs, and inspects the value of t The APIs intercepted by this mitigation are: -- LoadLibraryA -- LoadLibraryW -- LoadLibraryExA -- LoadLibraryExW -- LdrLoadDll -- VirtualAlloc -- VirtualAllocEx -- NtAllocateVirtualMemory -- VirtualProtect -- VirtualProtectEx -- NtProtectVirtualMemory -- HeapCreate -- RtlCreateHeap -- CreateProcessA -- CreateProcessW -- CreateProcessInternalA -- CreateProcessInternalW -- NtCreateUserProcess -- NtCreateProcess -- NtCreateProcessEx -- CreateRemoteThread -- CreateRemoteThreadEx -- NtCreateThreadEx -- WriteProcessMemory -- NtWriteVirtualMemory -- WinExec -- CreateFileMappingA -- CreateFileMappingW -- CreateFileMappingNumaW -- NtCreateSection -- MapViewOfFile -- MapViewOfFileEx -- MapViewOfFileFromApp -- LdrGetProcedureAddressForCaller +- `LoadLibraryA` +- `LoadLibraryW` +- `LoadLibraryExA` +- `LoadLibraryExW` +- `LdrLoadDll` +- `VirtualAlloc` +- `VirtualAllocEx` +- `NtAllocateVirtualMemory` +- `VirtualProtect` +- `VirtualProtectEx` +- `NtProtectVirtualMemory` +- `HeapCreate` +- `RtlCreateHeap` +- `CreateProcessA` +- `CreateProcessW` +- `CreateProcessInternalA` +- `CreateProcessInternalW` +- `NtCreateUserProcess` +- `NtCreateProcess` +- `NtCreateProcessEx` +- `CreateRemoteThread` +- `CreateRemoteThreadEx` +- `NtCreateThreadEx` +- `WriteProcessMemory` +- `NtWriteVirtualMemory` +- `WinExec` +- `CreateFileMappingA` +- `CreateFileMappingW` +- `CreateFileMappingNumaW` +- `NtCreateSection` +- `MapViewOfFile` +- `MapViewOfFileEx` +- `MapViewOfFileFromApp` +- `LdrGetProcedureAddressForCaller` ### Compatibility considerations From c255d102968b539afcb363ef7429d8e287f50fec Mon Sep 17 00:00:00 2001 From: Denise Vangel-MSFT Date: Wed, 6 Jan 2021 18:32:55 -0800 Subject: [PATCH 384/486] Update exploit-protection-reference.md --- .../exploit-protection-reference.md | 14 +++++++------- 1 file changed, 7 insertions(+), 7 deletions(-) diff --git a/windows/security/threat-protection/microsoft-defender-atp/exploit-protection-reference.md b/windows/security/threat-protection/microsoft-defender-atp/exploit-protection-reference.md index e7ee3c6454..f1867fadcb 100644 --- a/windows/security/threat-protection/microsoft-defender-atp/exploit-protection-reference.md +++ b/windows/security/threat-protection/microsoft-defender-atp/exploit-protection-reference.md @@ -400,7 +400,7 @@ Additionally, by enabling EAF+, this mitigation adds the PAGE_GUARD protection t ### Description -Address Space Layout Randomization (ASLR) mitigates the risk of an attacker using their knowledge of the memory layout of the system in order to execute code that is already present in process memory and already marked as executable. This can mitigate the risk of an attacker leveraging techniques such as return-to-libc attacks, where the adversary sets the context and then modifies the return address to execute existing code with context that suits the adversary's purpose. +Address Space Layout Randomization (ASLR) mitigates the risk of an attacker using their knowledge of the memory layout of the system in order to execute code that is already present in process memory and already marked as executable. This can mitigate the risk of an attacker using techniques such as return-to-libc attacks, where the adversary sets the context and then modifies the return address to execute existing code with context that suits the adversary's purpose. Mandatory ASLR forces a rebase of all DLLs within the process. A developer can enable ASLR using the [/DYNAMICBASE](https://docs.microsoft.com/cpp/build/reference/dynamicbase-use-address-space-layout-randomization?view=vs-2019&preserve-view=true) linker option, and this mitigation has the same effect. @@ -471,7 +471,7 @@ The size of the 32-bit address space places practical constraints on the entropy ### Compatibility considerations -Most applications that are compatible with Mandatory ASLR (rebasing) will also be compatible with the additional entropy of Bottom-up ASLR. Some applications may have pointer-truncation issues if they are saving local pointers in 32-bit variables (expecting a base address below 4 GB), and thus will be incompatible with the high entropy option (which can be disabled). +Most applications that are compatible with Mandatory ASLR (rebasing) are also compatible with the other entropy of Bottom-up ASLR. Some applications may have pointer-truncation issues if they are saving local pointers in 32-bit variables (expecting a base address below 4 GB), and thus will be incompatible with the high entropy option (which can be disabled). ### Configuration options @@ -594,7 +594,7 @@ This mitigation is incompatible with the Arbitrary Code Guard mitigation. ### Description -Validate exception chains (SEHOP) is a mitigation against the *Structured Exception Handler (SEH) overwrite* exploitation technique. [Structured exception handling](https://docs.microsoft.com/windows/win32/debug/structured-exception-handling) is the process by which an application can ask to handle a particular exception. Exception handlers are chained together, so that if one exception handler chooses not to handle a particular exception, it can be passed on to the next exception handler in the chain until one decides to handle it. Because the list of handler is dynamic, it is stored on the stack. An attacker can leverage a stack overflow vulnerability to then overwrite the exception handler with a pointer to the code of the attacker's choice. +Validate exception chains (SEHOP) is a mitigation against the *Structured Exception Handler (SEH) overwrite* exploitation technique. [Structured exception handling](https://docs.microsoft.com/windows/win32/debug/structured-exception-handling) is the process by which an application can ask to handle a particular exception. Exception handlers are chained together, so that if one exception handler chooses not to handle a particular exception, it can be passed on to the next exception handler in the chain until one decides to handle it. Because the list of handler is dynamic, it is stored on the stack. An attacker can use a stack overflow vulnerability to then overwrite the exception handler with a pointer to the code of the attacker's choice. This mitigation relies on the design of SEH, where each SEH entry contains both a pointer to the exception handler, as well as a pointer to the next handler in the exception chain. This mitigation is called by the exception dispatcher, which validates the SEH chain when an exception is invoked. It verifies that: @@ -619,7 +619,7 @@ Compatibility issues with SEHOP are relatively rare. It's uncommon for an applic ### Description -*Validate handle usage* is a mitigation that helps protect against an attacker leveraging an existing handle to access a protected object. A [handle](https://docs.microsoft.com/windows/win32/sysinfo/handles-and-objects) is a reference to a protected object. If application code is referencing an invalid handle, that could indicate that an adversary is attempting to use a handle it has previously recorded (but which application reference counting wouldn't be aware of). If the application attempts to use an invalid object, instead of simply returning null, the application will raise an exception (STATUS_INVALID_HANDLE). +*Validate handle usage* is a mitigation that helps protect against an attacker using an existing handle to access a protected object. A [handle](https://docs.microsoft.com/windows/win32/sysinfo/handles-and-objects) is a reference to a protected object. If application code is referencing an invalid handle, that could indicate that an adversary is attempting to use a handle it has previously recorded (but which application reference counting wouldn't be aware of). If the application attempts to use an invalid object, instead of simply returning null, the application will raise an exception (STATUS_INVALID_HANDLE). This mitigation is automatically applied to Windows Store applications. @@ -639,7 +639,7 @@ Applications that were not accurately tracking handle references, and which were The *validate heap integrity* mitigation increases the protection level of heap mitigations in Windows, by causing the application to terminate if a heap corruption is detected. The mitigations include: - Preventing a HEAP handle from being freed -- Performing additional validation on extended block headers for heap allocations +- Performing another validation on extended block headers for heap allocations - Verifying that heap allocations are not already flagged as in-use - Adding guard pages to large allocations, heap segments, and subsegments above a minimum size @@ -672,7 +672,7 @@ Compatibility issues are uncommon. Applications that depend on replacing Windows The *validate stack integrity (StackPivot)* mitigation helps protect against the Stack Pivot attack, a ROP attack where an attacker creates a fake stack in heap memory, and then tricks the application into returning into the fake stack that controls the flow of execution. -This mitigation intercepts a number of Windows APIs, and inspects the value of the stack pointer. If the address of the stack pointer does not fall between the bottom and the top of the stack, then an event is recorded and, if not in audit mode, the process will be terminated. +This mitigation intercepts many Windows APIs, and inspects the value of the stack pointer. If the address of the stack pointer does not fall between the bottom and the top of the stack, then an event is recorded and, if not in audit mode, the process will be terminated. The APIs intercepted by this mitigation are: @@ -713,7 +713,7 @@ The APIs intercepted by this mitigation are: ### Compatibility considerations -Applications that are leveraging fake stacks will be impacted, and there is also a small risk of revealing subtle timing bugs in multi-threaded applications. +Applications that are using fake stacks will be impacted, and there is also a small risk of revealing subtle timing bugs in multi-threaded applications. Applications that perform API interception, particularly security software, can cause compatibility problems with this mitigation. This mitigation is incompatible with the Arbitrary Code Guard mitigation. From 37799450e22422f557a80fc57a3cb55e1fe80a9c Mon Sep 17 00:00:00 2001 From: Denise Vangel-MSFT Date: Wed, 6 Jan 2021 18:38:11 -0800 Subject: [PATCH 385/486] Update evaluate-exploit-protection.md --- .../evaluate-exploit-protection.md | 12 ++++++------ 1 file changed, 6 insertions(+), 6 deletions(-) diff --git a/windows/security/threat-protection/microsoft-defender-atp/evaluate-exploit-protection.md b/windows/security/threat-protection/microsoft-defender-atp/evaluate-exploit-protection.md index a6dcacc047..3885e8407c 100644 --- a/windows/security/threat-protection/microsoft-defender-atp/evaluate-exploit-protection.md +++ b/windows/security/threat-protection/microsoft-defender-atp/evaluate-exploit-protection.md @@ -11,7 +11,7 @@ ms.localizationpriority: medium audience: ITPro author: denisebmsft ms.author: deniseb -ms.date: 08/28/2020 +ms.date: 01/06/2021 ms.reviewer: manager: dansimp --- @@ -38,20 +38,20 @@ You can set mitigation in audit mode for specific programs either by using the W ### Windows Security app -1. Open the Windows Security app by clicking the shield icon in the task bar or searching the start menu for **Defender**. +1. Open the Windows Security app by selecting the shield icon in the task bar or searching the start menu for **Defender**. -2. Click the **App & browser control** tile (or the app icon on the left menu bar) and then click **Exploit protection**. +2. Click the **App & browser control** tile (or the app icon on the left menu bar) and then select **Exploit protection**. 3. Go to **Program settings** and choose the app you want to apply protection to: - 1. If the app you want to configure is already listed, click it and then click **Edit** - 2. If the app is not listed, at the top of the list click **Add program to customize** and then choose how you want to add the app. + 1. If the app you want to configure is already listed, select it and then select **Edit** + 2. If the app is not listed, at the top of the list select **Add program to customize** and then choose how you want to add the app. - Use **Add by program name** to have the mitigation applied to any running process with that name. You must specify a file with an extension. You can enter a full path to limit the mitigation to only the app with that name in that location. - Use **Choose exact file path** to use a standard Windows Explorer file picker window to find and select the file you want. 4. After selecting the app, you'll see a list of all the mitigations that can be applied. Choosing **Audit** will apply the mitigation in audit mode only. You will be notified if you need to restart the process or app, or if you need to restart Windows. -5. Repeat this for all the apps and mitigations you want to configure. Click **Apply** when you're done setting up your configuration. +5. Repeat this for all the apps and mitigations you want to configure. Select **Apply** when you're done setting up your configuration. ### PowerShell From f602e4fb0735f676c481496759b03fe0f76a867a Mon Sep 17 00:00:00 2001 From: Denise Vangel-MSFT Date: Wed, 6 Jan 2021 18:39:35 -0800 Subject: [PATCH 386/486] Update evaluate-exploit-protection.md --- .../microsoft-defender-atp/evaluate-exploit-protection.md | 6 +++--- 1 file changed, 3 insertions(+), 3 deletions(-) diff --git a/windows/security/threat-protection/microsoft-defender-atp/evaluate-exploit-protection.md b/windows/security/threat-protection/microsoft-defender-atp/evaluate-exploit-protection.md index 3885e8407c..a7d1eb5399 100644 --- a/windows/security/threat-protection/microsoft-defender-atp/evaluate-exploit-protection.md +++ b/windows/security/threat-protection/microsoft-defender-atp/evaluate-exploit-protection.md @@ -40,18 +40,18 @@ You can set mitigation in audit mode for specific programs either by using the W 1. Open the Windows Security app by selecting the shield icon in the task bar or searching the start menu for **Defender**. -2. Click the **App & browser control** tile (or the app icon on the left menu bar) and then select **Exploit protection**. +2. Select the **App & browser control** tile (or the app icon on the left menu bar) and then select **Exploit protection**. 3. Go to **Program settings** and choose the app you want to apply protection to: 1. If the app you want to configure is already listed, select it and then select **Edit** 2. If the app is not listed, at the top of the list select **Add program to customize** and then choose how you want to add the app. - - Use **Add by program name** to have the mitigation applied to any running process with that name. You must specify a file with an extension. You can enter a full path to limit the mitigation to only the app with that name in that location. + - Use **Add by program name** to have the mitigation applied to any running process with that name. Specify a file with an extension. You can enter a full path to limit the mitigation to only the app with that name in that location. - Use **Choose exact file path** to use a standard Windows Explorer file picker window to find and select the file you want. 4. After selecting the app, you'll see a list of all the mitigations that can be applied. Choosing **Audit** will apply the mitigation in audit mode only. You will be notified if you need to restart the process or app, or if you need to restart Windows. -5. Repeat this for all the apps and mitigations you want to configure. Select **Apply** when you're done setting up your configuration. +5. Repeat this procedure for all the apps and mitigations you want to configure. Select **Apply** when you're done setting up your configuration. ### PowerShell From 195de92fda8a67c2a9ec2992ca1e7bed4fb7d10b Mon Sep 17 00:00:00 2001 From: Denise Vangel-MSFT Date: Wed, 6 Jan 2021 18:41:59 -0800 Subject: [PATCH 387/486] Update deploy-microsoft-defender-antivirus.md --- .../deploy-microsoft-defender-antivirus.md | 8 ++++---- 1 file changed, 4 insertions(+), 4 deletions(-) diff --git a/windows/security/threat-protection/microsoft-defender-antivirus/deploy-microsoft-defender-antivirus.md b/windows/security/threat-protection/microsoft-defender-antivirus/deploy-microsoft-defender-antivirus.md index 97eeac6ba1..56d70bda19 100644 --- a/windows/security/threat-protection/microsoft-defender-antivirus/deploy-microsoft-defender-antivirus.md +++ b/windows/security/threat-protection/microsoft-defender-antivirus/deploy-microsoft-defender-antivirus.md @@ -11,7 +11,7 @@ ms.localizationpriority: medium author: denisebmsft ms.author: deniseb ms.custom: nextgen -ms.date: 09/03/2018 +ms.date: 01/06/2021 ms.reviewer: manager: dansimp --- @@ -29,11 +29,11 @@ Depending on the management tool you are using, you may need to specifically ena See the table in [Deploy, manage, and report on Microsoft Defender Antivirus](deploy-manage-report-microsoft-defender-antivirus.md#ref2) for instructions on how to enable protection with Microsoft Intune, Microsoft Endpoint Configuration Manager, Group Policy, Active Directory, Microsoft Azure, PowerShell cmdlets, and Windows Management Instruction (WMI). -Some scenarios require additional guidance on how to successfully deploy or configure Microsoft Defender Antivirus protection, such as Virtual Desktop Infrastructure (VDI) environments. +Some scenarios require more guidance on how to successfully deploy or configure Microsoft Defender Antivirus protection, such as Virtual Desktop Infrastructure (VDI) environments. -The remaining topic in this section provides end-to-end advice and best practices for [setting up Microsoft Defender Antivirus on virtual machines (VMs) in a VDI or Remote Desktop Services (RDS) environment](deployment-vdi-microsoft-defender-antivirus.md). +The remaining article in this section provides end-to-end advice and best practices for [setting up Microsoft Defender Antivirus on virtual machines (VMs) in a VDI or Remote Desktop Services (RDS) environment](deployment-vdi-microsoft-defender-antivirus.md). -## Related topics +## Related articles - [Microsoft Defender Antivirus in Windows 10](microsoft-defender-antivirus-in-windows-10.md) - [Deploy, manage updates, and report on Microsoft Defender Antivirus](deploy-manage-report-microsoft-defender-antivirus.md) From fee4a005f198eca3a96b7d8bbd892f16b40829f6 Mon Sep 17 00:00:00 2001 From: ImranHabib <47118050+joinimran@users.noreply.github.com> Date: Thu, 7 Jan 2021 10:51:47 +0500 Subject: [PATCH 388/486] Updated the broken link A link was pointing to a point where there was no information for Bluetooth pairing. Link updated to point to the correct information. Problem: https://github.com/MicrosoftDocs/windows-itpro-docs/issues/8905 --- windows/whats-new/whats-new-windows-10-version-2004.md | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/windows/whats-new/whats-new-windows-10-version-2004.md b/windows/whats-new/whats-new-windows-10-version-2004.md index 38d51da399..562b8ec51b 100644 --- a/windows/whats-new/whats-new-windows-10-version-2004.md +++ b/windows/whats-new/whats-new-windows-10-version-2004.md @@ -212,7 +212,7 @@ You can now [rename your virtual desktops](https://docs.microsoft.com/windows-in ### Bluetooth pairing -Pairing Bluetooth devices with your computer will occur through notifications, so you won't need to go to the Settings app to finish pairing. Other improvements include faster pairing and device name display. For more information, see [Improving your Bluetooth pairing experience](https://docs.microsoft.com/windows-insider/at-home/Whats-new-wip-at-home-20h1#improving-your-bluetooth-pairing-experience-build-18985). +Pairing Bluetooth devices with your computer will occur through notifications, so you won't need to go to the Settings app to finish pairing. Other improvements include faster pairing and device name display. For more information, see [Improving your Bluetooth pairing experience](https://docs.microsoft.com/windows-insider/archive/new-in-20h1#improving-your-bluetooth-pairing-experience-build-18985). ### Reset this PC From de8b12ba6ffa680009b12d2665fad81240a67dc0 Mon Sep 17 00:00:00 2001 From: Denise Vangel-MSFT Date: Thu, 7 Jan 2021 08:00:54 -0800 Subject: [PATCH 389/486] Update windows/security/threat-protection/security-compliance-toolkit-10.md Co-authored-by: Trond B. Krokli <38162891+illfated@users.noreply.github.com> --- .../threat-protection/security-compliance-toolkit-10.md | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/windows/security/threat-protection/security-compliance-toolkit-10.md b/windows/security/threat-protection/security-compliance-toolkit-10.md index e8972cbc75..9aa1555aa0 100644 --- a/windows/security/threat-protection/security-compliance-toolkit-10.md +++ b/windows/security/threat-protection/security-compliance-toolkit-10.md @@ -48,7 +48,7 @@ The Security Compliance Toolkit consists of: - Microsoft Edge security baseline - Version 85 - - Windows Update security baseline +- Windows Update security baseline - Windows 10 20H2 and below (October 2020 Update) - Tools From d36ef29c53ac6d9a49967862ed1937ea10d93541 Mon Sep 17 00:00:00 2001 From: adirdidi <68847945+adirdidi@users.noreply.github.com> Date: Thu, 7 Jan 2021 18:02:05 +0200 Subject: [PATCH 390/486] Update gov.md --- .../microsoft-defender-atp/gov.md | 32 +++++++++---------- 1 file changed, 16 insertions(+), 16 deletions(-) diff --git a/windows/security/threat-protection/microsoft-defender-atp/gov.md b/windows/security/threat-protection/microsoft-defender-atp/gov.md index b4e6a21755..397955688f 100644 --- a/windows/security/threat-protection/microsoft-defender-atp/gov.md +++ b/windows/security/threat-protection/microsoft-defender-atp/gov.md @@ -45,17 +45,17 @@ Windows 10, version 2004 (with [KB4586853](https://support.microsoft.com/help/44 Windows 10, version 1909 (with [KB4586819](https://support.microsoft.com/help/4586819)) | ![Yes](../images/svg/check-yes.svg) | ![Yes](../images/svg/check-yes.svg) Windows 10, version 1903 (with [KB4586819](https://support.microsoft.com/help/4586819)) | ![Yes](../images/svg/check-yes.svg) | ![Yes](../images/svg/check-yes.svg) Windows 10, version 1809 (with [KB4586839](https://support.microsoft.com/help/4586839)) | ![Yes](../images/svg/check-yes.svg) | ![Yes](../images/svg/check-yes.svg) -Windows 10, version 1803 | ![No](../images/svg/check-no.svg) Coming soon | ![Yes](../images/svg/check-yes.svg) With [KB4499183](https://support.microsoft.com/help/4499183) -Windows 10, version 1709 | ![No](../images/svg/check-no.svg)
    Note: Will not be supported | ![Yes](../images/svg/check-yes.svg) With [KB4499147](https://support.microsoft.com/help/4499147)
    Note: Will be deprecated, please upgrade +Windows 10, version 1803 | ![No](../images/svg/check-no.svg) Rolling out | ![Yes](../images/svg/check-yes.svg) With [KB4499183](https://support.microsoft.com/help/4499183) +Windows 10, version 1709 | ![No](../images/svg/check-no.svg)
    Note: Will not be supported | ![Yes](../images/svg/check-yes.svg) With [KB4499147](https://support.microsoft.com/help/4499147)
    Note: [Deprecated](https://docs.microsoft.com/lifecycle/announcements/revised-end-of-service-windows-10-1709), please upgrade Windows 10, version 1703 and earlier | ![No](../images/svg/check-no.svg)
    Note: Will not be supported | ![No](../images/svg/check-no.svg)
    Note: Will not be supported Windows Server 2019 (with [KB4586839](https://support.microsoft.com/help/4586839)) | ![Yes](../images/svg/check-yes.svg) | ![Yes](../images/svg/check-yes.svg) -Windows Server 2016 | ![No](../images/svg/check-no.svg) Coming soon | ![No](../images/svg/check-no.svg) In development -Windows Server 2012 R2 | ![No](../images/svg/check-no.svg) Coming soon | ![No](../images/svg/check-no.svg) In development -Windows Server 2008 R2 SP1 | ![No](../images/svg/check-no.svg) Coming soon | ![No](../images/svg/check-no.svg) In development -Windows 8.1 Enterprise | ![No](../images/svg/check-no.svg) Coming soon | ![No](../images/svg/check-no.svg) In development -Windows 8 Pro | ![No](../images/svg/check-no.svg) Coming soon | ![No](../images/svg/check-no.svg) In development -Windows 7 SP1 Enterprise | ![No](../images/svg/check-no.svg) Coming soon | ![No](../images/svg/check-no.svg) In development -Windows 7 SP1 Pro | ![No](../images/svg/check-no.svg) Coming soon | ![No](../images/svg/check-no.svg) In development +Windows Server 2016 | ![No](../images/svg/check-no.svg) Rolling out | ![No](../images/svg/check-no.svg) In development +Windows Server 2012 R2 | ![No](../images/svg/check-no.svg) Rolling out | ![No](../images/svg/check-no.svg) In development +Windows Server 2008 R2 SP1 | ![No](../images/svg/check-no.svg) Rolling out | ![No](../images/svg/check-no.svg) In development +Windows 8.1 Enterprise | ![No](../images/svg/check-no.svg) Rolling out | ![No](../images/svg/check-no.svg) In development +Windows 8 Pro | ![No](../images/svg/check-no.svg) Rolling out | ![No](../images/svg/check-no.svg) In development +Windows 7 SP1 Enterprise | ![No](../images/svg/check-no.svg) Rolling out | ![No](../images/svg/check-no.svg) In development +Windows 7 SP1 Pro | ![No](../images/svg/check-no.svg) Rolling out | ![No](../images/svg/check-no.svg) In development Mac OS | ![No](../images/svg/check-no.svg) In development | ![No](../images/svg/check-no.svg) In development Linux | ![No](../images/svg/check-no.svg) In development | ![No](../images/svg/check-no.svg) In development iOS | ![No](../images/svg/check-no.svg) | ![No](../images/svg/check-no.svg) @@ -69,9 +69,9 @@ The following OS versions are supported when using [Azure Defender for Servers]( OS version | GCC | GCC High :---|:---|:--- -Windows Server 2016 | ![No](../images/svg/check-no.svg) Coming soon | ![Yes](../images/svg/check-yes.svg) -Windows Server 2012 R2 | ![No](../images/svg/check-no.svg) Coming soon | ![Yes](../images/svg/check-yes.svg) -Windows Server 2008 R2 SP1 | ![No](../images/svg/check-no.svg) Coming soon | ![Yes](../images/svg/check-yes.svg) +Windows Server 2016 | ![No](../images/svg/check-no.svg) Rolling out | ![Yes](../images/svg/check-yes.svg) +Windows Server 2012 R2 | ![No](../images/svg/check-no.svg) Rolling out | ![Yes](../images/svg/check-yes.svg) +Windows Server 2008 R2 SP1 | ![No](../images/svg/check-no.svg) Rolling out | ![Yes](../images/svg/check-yes.svg)
    @@ -108,22 +108,22 @@ Feature name | GCC | GCC High :---|:---|:--- Automated investigation and remediation: Live response | ![Yes](../images/svg/check-yes.svg) | ![No](../images/svg/check-no.svg) In development Automated investigation and remediation: Response to Office 365 alerts | ![No](../images/svg/check-no.svg) | ![No](../images/svg/check-no.svg) -Email notifications | ![No](../images/svg/check-no.svg) Coming soon | ![No](../images/svg/check-no.svg) In development +Email notifications | ![No](../images/svg/check-no.svg) Rolling out | ![No](../images/svg/check-no.svg) In development Evaluation lab | ![Yes](../images/svg/check-yes.svg) | ![No](../images/svg/check-no.svg) In development Management and APIs: Device health and compliance report | ![Yes](../images/svg/check-yes.svg) | ![No](../images/svg/check-no.svg) In development Management and APIs: Integration with third-party products | ![Yes](../images/svg/check-yes.svg) | ![No](../images/svg/check-no.svg) In development -Management and APIs: Streaming API | ![No](../images/svg/check-no.svg) Coming soon | ![No](../images/svg/check-no.svg) In development +Management and APIs: Streaming API | ![No](../images/svg/check-no.svg) Rolling out | ![No](../images/svg/check-no.svg) In development Management and APIs: Threat protection report | ![Yes](../images/svg/check-yes.svg) | ![No](../images/svg/check-no.svg) In development Threat & vulnerability management | ![Yes](../images/svg/check-yes.svg) | ![No](../images/svg/check-no.svg) In development Threat analytics | ![Yes](../images/svg/check-yes.svg) | ![No](../images/svg/check-no.svg) In development Web content filtering | ![No](../images/svg/check-no.svg) In development | ![No](../images/svg/check-no.svg) In development -Integrations: Azure Sentinel | ![No](../images/svg/check-no.svg) Coming soon | ![No](../images/svg/check-no.svg) In development +Integrations: Azure Sentinel | ![No](../images/svg/check-no.svg) Rolling out | ![No](../images/svg/check-no.svg) In development Integrations: Microsoft Cloud App Security | ![No](../images/svg/check-no.svg) | ![No](../images/svg/check-no.svg) Integrations: Microsoft Compliance Center | ![No](../images/svg/check-no.svg) | ![No](../images/svg/check-no.svg) Integrations: Microsoft Defender for Identity | ![No](../images/svg/check-no.svg) | ![No](../images/svg/check-no.svg) Integrations: Microsoft Defender for Office 365 | ![No](../images/svg/check-no.svg) | ![No](../images/svg/check-no.svg) Integrations: Microsoft Endpoint DLP | ![No](../images/svg/check-no.svg) | ![No](../images/svg/check-no.svg) Integrations: Microsoft Intune | ![Yes](../images/svg/check-yes.svg) | ![No](../images/svg/check-no.svg) In development -Integrations: Microsoft Power Automate & Azure Logic Apps | ![No](../images/svg/check-no.svg) Coming soon | ![No](../images/svg/check-no.svg) In development +Integrations: Microsoft Power Automate & Azure Logic Apps | ![No](../images/svg/check-no.svg) Rolling out | ![No](../images/svg/check-no.svg) In development Integrations: Skype for Business / Teams | ![Yes](../images/svg/check-yes.svg) | ![No](../images/svg/check-no.svg) In development Microsoft Threat Experts | ![No](../images/svg/check-no.svg) | ![No](../images/svg/check-no.svg) From 41abac616fa79f7872c48a628aadd81692ed292c Mon Sep 17 00:00:00 2001 From: adirdidi <68847945+adirdidi@users.noreply.github.com> Date: Thu, 7 Jan 2021 18:09:49 +0200 Subject: [PATCH 391/486] Update gov.md --- .../microsoft-defender-atp/gov.md | 16 ++++++++-------- 1 file changed, 8 insertions(+), 8 deletions(-) diff --git a/windows/security/threat-protection/microsoft-defender-atp/gov.md b/windows/security/threat-protection/microsoft-defender-atp/gov.md index 397955688f..99fced566c 100644 --- a/windows/security/threat-protection/microsoft-defender-atp/gov.md +++ b/windows/security/threat-protection/microsoft-defender-atp/gov.md @@ -58,8 +58,8 @@ Windows 7 SP1 Enterprise | ![No](../images/svg/check-no.svg) Rolling out | ![No] Windows 7 SP1 Pro | ![No](../images/svg/check-no.svg) Rolling out | ![No](../images/svg/check-no.svg) In development Mac OS | ![No](../images/svg/check-no.svg) In development | ![No](../images/svg/check-no.svg) In development Linux | ![No](../images/svg/check-no.svg) In development | ![No](../images/svg/check-no.svg) In development -iOS | ![No](../images/svg/check-no.svg) | ![No](../images/svg/check-no.svg) -Android | ![No](../images/svg/check-no.svg) | ![No](../images/svg/check-no.svg) +iOS | ![No](../images/svg/check-no.svg) On engineering backlog | ![No](../images/svg/check-no.svg) On engineering backlog +Android | ![No](../images/svg/check-no.svg) On engineering backlog | ![No](../images/svg/check-no.svg) On engineering backlog > [!NOTE] > A patch must be deployed before device onboarding in order to configure Defender for Endpoint to the correct environment. @@ -107,7 +107,7 @@ These are the known gaps as of January 2021: Feature name | GCC | GCC High :---|:---|:--- Automated investigation and remediation: Live response | ![Yes](../images/svg/check-yes.svg) | ![No](../images/svg/check-no.svg) In development -Automated investigation and remediation: Response to Office 365 alerts | ![No](../images/svg/check-no.svg) | ![No](../images/svg/check-no.svg) +Automated investigation and remediation: Response to Office 365 alerts | ![No](../images/svg/check-no.svg) On engineering backlog | ![No](../images/svg/check-no.svg) On engineering backlog Email notifications | ![No](../images/svg/check-no.svg) Rolling out | ![No](../images/svg/check-no.svg) In development Evaluation lab | ![Yes](../images/svg/check-yes.svg) | ![No](../images/svg/check-no.svg) In development Management and APIs: Device health and compliance report | ![Yes](../images/svg/check-yes.svg) | ![No](../images/svg/check-no.svg) In development @@ -118,11 +118,11 @@ Threat & vulnerability management | ![Yes](../images/svg/check-yes.svg) | ![No]( Threat analytics | ![Yes](../images/svg/check-yes.svg) | ![No](../images/svg/check-no.svg) In development Web content filtering | ![No](../images/svg/check-no.svg) In development | ![No](../images/svg/check-no.svg) In development Integrations: Azure Sentinel | ![No](../images/svg/check-no.svg) Rolling out | ![No](../images/svg/check-no.svg) In development -Integrations: Microsoft Cloud App Security | ![No](../images/svg/check-no.svg) | ![No](../images/svg/check-no.svg) -Integrations: Microsoft Compliance Center | ![No](../images/svg/check-no.svg) | ![No](../images/svg/check-no.svg) -Integrations: Microsoft Defender for Identity | ![No](../images/svg/check-no.svg) | ![No](../images/svg/check-no.svg) -Integrations: Microsoft Defender for Office 365 | ![No](../images/svg/check-no.svg) | ![No](../images/svg/check-no.svg) -Integrations: Microsoft Endpoint DLP | ![No](../images/svg/check-no.svg) | ![No](../images/svg/check-no.svg) +Integrations: Microsoft Cloud App Security | ![No](../images/svg/check-no.svg) On engineering backlog | ![No](../images/svg/check-no.svg) On engineering backlog +Integrations: Microsoft Compliance Center | ![No](../images/svg/check-no.svg) On engineering backlog | ![No](../images/svg/check-no.svg) On engineering backlog +Integrations: Microsoft Defender for Identity | ![No](../images/svg/check-no.svg) On engineering backlog | ![No](../images/svg/check-no.svg) On engineering backlog +Integrations: Microsoft Defender for Office 365 | ![No](../images/svg/check-no.svg) On engineering backlog | ![No](../images/svg/check-no.svg) On engineering backlog +Integrations: Microsoft Endpoint DLP | ![No](../images/svg/check-no.svg) On engineering backlog | ![No](../images/svg/check-no.svg) On engineering backlog Integrations: Microsoft Intune | ![Yes](../images/svg/check-yes.svg) | ![No](../images/svg/check-no.svg) In development Integrations: Microsoft Power Automate & Azure Logic Apps | ![No](../images/svg/check-no.svg) Rolling out | ![No](../images/svg/check-no.svg) In development Integrations: Skype for Business / Teams | ![Yes](../images/svg/check-yes.svg) | ![No](../images/svg/check-no.svg) In development From e93e2506ceb785ce1b599693af512ae0953c98f7 Mon Sep 17 00:00:00 2001 From: Denise Vangel-MSFT Date: Thu, 7 Jan 2021 08:34:56 -0800 Subject: [PATCH 392/486] Update edr-in-block-mode.md --- .../microsoft-defender-atp/edr-in-block-mode.md | 4 ++-- 1 file changed, 2 insertions(+), 2 deletions(-) diff --git a/windows/security/threat-protection/microsoft-defender-atp/edr-in-block-mode.md b/windows/security/threat-protection/microsoft-defender-atp/edr-in-block-mode.md index f519113f0c..a5a0fd9fb0 100644 --- a/windows/security/threat-protection/microsoft-defender-atp/edr-in-block-mode.md +++ b/windows/security/threat-protection/microsoft-defender-atp/edr-in-block-mode.md @@ -15,7 +15,7 @@ ms.localizationpriority: medium ms.custom: - next-gen - edr -ms.date: 12/14/2020 +ms.date: 01/07/2021 ms.collection: - m365-security-compliance - m365initiative-defender-endpoint @@ -71,7 +71,7 @@ The following image shows an instance of unwanted software that was detected and |Permissions |Global Administrator or Security Administrator role assigned in [Azure Active Directory](https://docs.microsoft.com/azure/active-directory/fundamentals/active-directory-users-assign-role-azure-portal). See [Basic permissions](https://docs.microsoft.com/windows/security/threat-protection/microsoft-defender-atp/basic-permissions). | |Operating system |One of the following versions:
    - Windows 10 (all releases)
    - Windows Server 2016 or later | |Windows E5 enrollment |Windows E5 is included in the following subscriptions:
    - Microsoft 365 E5
    - Microsoft 365 E3 together with the Identity & Threat Protection offering

    See [Components](https://docs.microsoft.com/microsoft-365/enterprise/microsoft-365-overview?view=o365-worldwide&preserve-view=true#components) and [features and capabilities for each plan](https://www.microsoft.com/microsoft-365/compare-all-microsoft-365-plans). | -|Cloud-delivered protection |Make sure Microsoft Defender Antivirus is configured such that cloud-delivered protection is enabled.

    See [Enable cloud-delivered protection](https://docs.microsoft.com/windows/security/threat-protection/microsoft-defender-antivirus/enable-cloud-protection-microsoft-defender-antivirus). | +|Cloud-delivered protection |Microsoft Defender Antivirus must be installed and running in either active mode or passive mode. You can use Microsoft Defender Antivirus alongside another antivirus solution.

    In addition, make sure Microsoft Defender Antivirus is configured such that cloud-delivered protection is enabled. See [Enable cloud-delivered protection](https://docs.microsoft.com/windows/security/threat-protection/microsoft-defender-antivirus/enable-cloud-protection-microsoft-defender-antivirus). | |Microsoft Defender Antivirus antimalware client |Make sure your client is up to date. Using PowerShell, run the [Get-MpComputerStatus](https://docs.microsoft.com/powershell/module/defender/get-mpcomputerstatus?view=win10-ps&preserve-view=true) cmdlet as an administrator.
    In the **AMProductVersion** line, you should see **4.18.2001.10** or above. | |Microsoft Defender Antivirus engine |Make sure your engine is up to date. Using PowerShell, run the [Get-MpComputerStatus](https://docs.microsoft.com/powershell/module/defender/get-mpcomputerstatus?view=win10-ps&preserve-view=true) cmdlet as an administrator.
    In the **AMEngineVersion** line, you should see **1.1.16700.2** or above. | From cc2e9c09d23fbefc08e6dc675efa95258e30ca08 Mon Sep 17 00:00:00 2001 From: adirdidi <68847945+adirdidi@users.noreply.github.com> Date: Thu, 7 Jan 2021 18:49:14 +0200 Subject: [PATCH 393/486] Update gov.md --- .../security/threat-protection/microsoft-defender-atp/gov.md | 4 ++-- 1 file changed, 2 insertions(+), 2 deletions(-) diff --git a/windows/security/threat-protection/microsoft-defender-atp/gov.md b/windows/security/threat-protection/microsoft-defender-atp/gov.md index 99fced566c..42f48c7a27 100644 --- a/windows/security/threat-protection/microsoft-defender-atp/gov.md +++ b/windows/security/threat-protection/microsoft-defender-atp/gov.md @@ -56,10 +56,10 @@ Windows 8.1 Enterprise | ![No](../images/svg/check-no.svg) Rolling out | ![No](. Windows 8 Pro | ![No](../images/svg/check-no.svg) Rolling out | ![No](../images/svg/check-no.svg) In development Windows 7 SP1 Enterprise | ![No](../images/svg/check-no.svg) Rolling out | ![No](../images/svg/check-no.svg) In development Windows 7 SP1 Pro | ![No](../images/svg/check-no.svg) Rolling out | ![No](../images/svg/check-no.svg) In development -Mac OS | ![No](../images/svg/check-no.svg) In development | ![No](../images/svg/check-no.svg) In development Linux | ![No](../images/svg/check-no.svg) In development | ![No](../images/svg/check-no.svg) In development -iOS | ![No](../images/svg/check-no.svg) On engineering backlog | ![No](../images/svg/check-no.svg) On engineering backlog +Mac OS | ![No](../images/svg/check-no.svg) In development | ![No](../images/svg/check-no.svg) In development Android | ![No](../images/svg/check-no.svg) On engineering backlog | ![No](../images/svg/check-no.svg) On engineering backlog +iOS | ![No](../images/svg/check-no.svg) On engineering backlog | ![No](../images/svg/check-no.svg) On engineering backlog > [!NOTE] > A patch must be deployed before device onboarding in order to configure Defender for Endpoint to the correct environment. From 7ed424f85a07cb639ef44d74510e0b78fc19e086 Mon Sep 17 00:00:00 2001 From: Denise Vangel-MSFT Date: Thu, 7 Jan 2021 09:22:34 -0800 Subject: [PATCH 394/486] Update edr-in-block-mode.md --- .../edr-in-block-mode.md | 31 ++++++++++++++++++- 1 file changed, 30 insertions(+), 1 deletion(-) diff --git a/windows/security/threat-protection/microsoft-defender-atp/edr-in-block-mode.md b/windows/security/threat-protection/microsoft-defender-atp/edr-in-block-mode.md index a5a0fd9fb0..a2071821fe 100644 --- a/windows/security/threat-protection/microsoft-defender-atp/edr-in-block-mode.md +++ b/windows/security/threat-protection/microsoft-defender-atp/edr-in-block-mode.md @@ -71,7 +71,7 @@ The following image shows an instance of unwanted software that was detected and |Permissions |Global Administrator or Security Administrator role assigned in [Azure Active Directory](https://docs.microsoft.com/azure/active-directory/fundamentals/active-directory-users-assign-role-azure-portal). See [Basic permissions](https://docs.microsoft.com/windows/security/threat-protection/microsoft-defender-atp/basic-permissions). | |Operating system |One of the following versions:
    - Windows 10 (all releases)
    - Windows Server 2016 or later | |Windows E5 enrollment |Windows E5 is included in the following subscriptions:
    - Microsoft 365 E5
    - Microsoft 365 E3 together with the Identity & Threat Protection offering

    See [Components](https://docs.microsoft.com/microsoft-365/enterprise/microsoft-365-overview?view=o365-worldwide&preserve-view=true#components) and [features and capabilities for each plan](https://www.microsoft.com/microsoft-365/compare-all-microsoft-365-plans). | -|Cloud-delivered protection |Microsoft Defender Antivirus must be installed and running in either active mode or passive mode. You can use Microsoft Defender Antivirus alongside another antivirus solution.

    In addition, make sure Microsoft Defender Antivirus is configured such that cloud-delivered protection is enabled. See [Enable cloud-delivered protection](https://docs.microsoft.com/windows/security/threat-protection/microsoft-defender-antivirus/enable-cloud-protection-microsoft-defender-antivirus). | +|Cloud-delivered protection |Microsoft Defender Antivirus must be installed and running in either active mode or passive mode. (If you are using a non-Microsoft antivirus solution, you can still use Microsoft Defender Antivirus. See [How do I confirm Microsoft Defender Antivirus is in active or passive mode?](#how-do-i-confirm-microsoft-defender-antivirus-is-in-active-or-passive-mode).)

    In addition, make sure Microsoft Defender Antivirus is configured such that cloud-delivered protection is enabled. See [Enable cloud-delivered protection](https://docs.microsoft.com/windows/security/threat-protection/microsoft-defender-antivirus/enable-cloud-protection-microsoft-defender-antivirus). | |Microsoft Defender Antivirus antimalware client |Make sure your client is up to date. Using PowerShell, run the [Get-MpComputerStatus](https://docs.microsoft.com/powershell/module/defender/get-mpcomputerstatus?view=win10-ps&preserve-view=true) cmdlet as an administrator.
    In the **AMProductVersion** line, you should see **4.18.2001.10** or above. | |Microsoft Defender Antivirus engine |Make sure your engine is up to date. Using PowerShell, run the [Get-MpComputerStatus](https://docs.microsoft.com/powershell/module/defender/get-mpcomputerstatus?view=win10-ps&preserve-view=true) cmdlet as an administrator.
    In the **AMEngineVersion** line, you should see **1.1.16700.2** or above. | @@ -97,6 +97,35 @@ Because Microsoft Defender Antivirus detects and remediates malicious items, it' Cloud protection is needed to turn on the feature on the device. Cloud protection allows [Defender for Endpoint](https://docs.microsoft.com/windows/security/threat-protection) to deliver the latest and greatest protection based on our breadth and depth of security intelligence, along with behavioral and device learning models. +### How do I set Microsoft Defender Antivirus to passive mode? + +See [Enable Microsoft Defender Antivirus and confirm it's in passive mode](https://docs.microsoft.com/windows/security/threat-protection/microsoft-defender-atp/switch-to-microsoft-defender-setup#enable-microsoft-defender-antivirus-and-confirm-its-in-passive-mode). + +### How do I confirm Microsoft Defender Antivirus is in active or passive mode? + +To confirm whether Microsoft Defender Antivirus is running in active or passive mode, you can use Command Prompt or PowerShell on a device running Windows. + +#### Use PowerShell + +1. Select the Start menu, begin typing `PowerShell`, and then open Windows PowerShell in the results. + +2. Type `Get-MpComputerStatus`. + +3. In the list of results, look for one of the following: + - `AMRunningMode: Normal` + - `AMRunningMode: Passive Mode` + - `AMRunningMode: SxS Passive Mode` + +To learn more, see [Get-MpComputerStatus](https://docs.microsoft.com/powershell/module/defender/get-mpcomputerstatus?view=win10-ps). + +#### Use Command Prompt + +1. Select the Start menu, begin typing `Command Prompt`, and then open Windows Command Prompt in the results. + +2. Type `sc query windefend`. + +3. In the list of results, in the `STATE` row, confirm that the service is running. + ## See also - [Tech Community blog: Introducing EDR in block mode: Stopping attacks in their tracks](https://techcommunity.microsoft.com/t5/microsoft-defender-atp/introducing-edr-in-block-mode-stopping-attacks-in-their-tracks/ba-p/1596617) From 2409e91582f8f7b45a60d6f469e2cff43b5e6e4d Mon Sep 17 00:00:00 2001 From: Denise Vangel-MSFT Date: Thu, 7 Jan 2021 09:24:52 -0800 Subject: [PATCH 395/486] Update edr-in-block-mode.md --- .../microsoft-defender-atp/edr-in-block-mode.md | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/windows/security/threat-protection/microsoft-defender-atp/edr-in-block-mode.md b/windows/security/threat-protection/microsoft-defender-atp/edr-in-block-mode.md index a2071821fe..023c3aad47 100644 --- a/windows/security/threat-protection/microsoft-defender-atp/edr-in-block-mode.md +++ b/windows/security/threat-protection/microsoft-defender-atp/edr-in-block-mode.md @@ -71,7 +71,7 @@ The following image shows an instance of unwanted software that was detected and |Permissions |Global Administrator or Security Administrator role assigned in [Azure Active Directory](https://docs.microsoft.com/azure/active-directory/fundamentals/active-directory-users-assign-role-azure-portal). See [Basic permissions](https://docs.microsoft.com/windows/security/threat-protection/microsoft-defender-atp/basic-permissions). | |Operating system |One of the following versions:
    - Windows 10 (all releases)
    - Windows Server 2016 or later | |Windows E5 enrollment |Windows E5 is included in the following subscriptions:
    - Microsoft 365 E5
    - Microsoft 365 E3 together with the Identity & Threat Protection offering

    See [Components](https://docs.microsoft.com/microsoft-365/enterprise/microsoft-365-overview?view=o365-worldwide&preserve-view=true#components) and [features and capabilities for each plan](https://www.microsoft.com/microsoft-365/compare-all-microsoft-365-plans). | -|Cloud-delivered protection |Microsoft Defender Antivirus must be installed and running in either active mode or passive mode. (If you are using a non-Microsoft antivirus solution, you can still use Microsoft Defender Antivirus. See [How do I confirm Microsoft Defender Antivirus is in active or passive mode?](#how-do-i-confirm-microsoft-defender-antivirus-is-in-active-or-passive-mode).)

    In addition, make sure Microsoft Defender Antivirus is configured such that cloud-delivered protection is enabled. See [Enable cloud-delivered protection](https://docs.microsoft.com/windows/security/threat-protection/microsoft-defender-antivirus/enable-cloud-protection-microsoft-defender-antivirus). | +|Cloud-delivered protection |Microsoft Defender Antivirus must be installed and running in either active mode or passive mode. (You can use Microsoft Defender Antivirus alongside a non-Microsoft antivirus solution.) See [How do I confirm Microsoft Defender Antivirus is in active or passive mode?](#how-do-i-confirm-microsoft-defender-antivirus-is-in-active-or-passive-mode).)

    In addition, make sure Microsoft Defender Antivirus is configured such that cloud-delivered protection is enabled. See [Enable cloud-delivered protection](https://docs.microsoft.com/windows/security/threat-protection/microsoft-defender-antivirus/enable-cloud-protection-microsoft-defender-antivirus). | |Microsoft Defender Antivirus antimalware client |Make sure your client is up to date. Using PowerShell, run the [Get-MpComputerStatus](https://docs.microsoft.com/powershell/module/defender/get-mpcomputerstatus?view=win10-ps&preserve-view=true) cmdlet as an administrator.
    In the **AMProductVersion** line, you should see **4.18.2001.10** or above. | |Microsoft Defender Antivirus engine |Make sure your engine is up to date. Using PowerShell, run the [Get-MpComputerStatus](https://docs.microsoft.com/powershell/module/defender/get-mpcomputerstatus?view=win10-ps&preserve-view=true) cmdlet as an administrator.
    In the **AMEngineVersion** line, you should see **1.1.16700.2** or above. | From a3d29f03306322f9a4f4012e1d72a3d0840cb3b2 Mon Sep 17 00:00:00 2001 From: Denise Vangel-MSFT Date: Thu, 7 Jan 2021 09:26:48 -0800 Subject: [PATCH 396/486] Update edr-in-block-mode.md --- .../microsoft-defender-atp/edr-in-block-mode.md | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/windows/security/threat-protection/microsoft-defender-atp/edr-in-block-mode.md b/windows/security/threat-protection/microsoft-defender-atp/edr-in-block-mode.md index 023c3aad47..a85f4dfe14 100644 --- a/windows/security/threat-protection/microsoft-defender-atp/edr-in-block-mode.md +++ b/windows/security/threat-protection/microsoft-defender-atp/edr-in-block-mode.md @@ -83,7 +83,7 @@ The following image shows an instance of unwanted software that was detected and ### Do I need to turn EDR in block mode on even when I have Microsoft Defender Antivirus running on devices? -We recommend keeping EDR in block mode on, whether Microsoft Defender Antivirus is running in passive mode or in active mode. EDR in block mode gives you an added layer of defense with Microsoft Defender for Endpoint. It allows Defender for Endpoint to take actions based on post-breach behavioral EDR detections. +We recommend keeping EDR in block mode on, whether Microsoft Defender Antivirus is running in passive mode or in active mode. EDR in block mode provides an additional layer of defense with Microsoft Defender for Endpoint. It allows Defender for Endpoint to take actions based on post-breach behavioral EDR detections. ### Will EDR in block mode have any impact on a user's antivirus protection? From ab4b15a77dead9e2ac42c54cab88e265a914762e Mon Sep 17 00:00:00 2001 From: Daniel Simpson Date: Thu, 7 Jan 2021 09:32:52 -0800 Subject: [PATCH 397/486] Update use.md --- .../security/threat-protection/microsoft-defender-atp/use.md | 5 +++++ 1 file changed, 5 insertions(+) diff --git a/windows/security/threat-protection/microsoft-defender-atp/use.md b/windows/security/threat-protection/microsoft-defender-atp/use.md index 3b37769671..94a305a5eb 100644 --- a/windows/security/threat-protection/microsoft-defender-atp/use.md +++ b/windows/security/threat-protection/microsoft-defender-atp/use.md @@ -36,6 +36,11 @@ Use the **Threat & Vulnerability Management** dashboard to expand your visibilit Use the **Threat analytics** dashboard to continually assess and control risk exposure to Spectre and Meltdown. +## Microsoft Defender for Endpoint interactive guide +In this interactive guide, you'll learn how to investigate threads to your organization with Microsoft Defender for Endpoint. You'll see how Microsoft Defender for Endpoint can help you identify suspicious activities, investigate risks to your organization, and remediate threats. + +[!VIDEO https://aka.ms/MSDE-IG] + ### In this section Topic | Description From b386e6d9848b0d91e02bcc5cc81514fb84fb9e4a Mon Sep 17 00:00:00 2001 From: Denise Vangel-MSFT Date: Thu, 7 Jan 2021 09:33:19 -0800 Subject: [PATCH 398/486] Update edr-in-block-mode.md --- .../microsoft-defender-atp/edr-in-block-mode.md | 8 ++++---- 1 file changed, 4 insertions(+), 4 deletions(-) diff --git a/windows/security/threat-protection/microsoft-defender-atp/edr-in-block-mode.md b/windows/security/threat-protection/microsoft-defender-atp/edr-in-block-mode.md index a85f4dfe14..def71f7250 100644 --- a/windows/security/threat-protection/microsoft-defender-atp/edr-in-block-mode.md +++ b/windows/security/threat-protection/microsoft-defender-atp/edr-in-block-mode.md @@ -32,7 +32,7 @@ ms.collection: ## What is EDR in block mode? -When [endpoint detection and response](https://docs.microsoft.com/windows/security/threat-protection/microsoft-defender-atp/overview-endpoint-detection-response) (EDR) in block mode is turned on, Defender for Endpoint blocks malicious artifacts or behaviors that are observed through post-breach protection. EDR in block mode works behind the scenes to remediate malicious artifacts that are detected, post breach. +[Endpoint detection and response](https://docs.microsoft.com/windows/security/threat-protection/microsoft-defender-atp/overview-endpoint-detection-response) (EDR) in block mode provides protection from malicious artifacts, even when Microsoft Defender Antivirus is running in passive mode. When turned on, EDR in block mode blocks malicious artifacts or behaviors that are detected on a device. EDR in block mode works behind the scenes to remediate malicious artifacts that are detected post breach. EDR in block mode is also integrated with [threat & vulnerability management](https://docs.microsoft.com/windows/security/threat-protection/microsoft-defender-atp/next-gen-threat-and-vuln-mgt). Your organization's security team will get a [security recommendation](https://docs.microsoft.com/windows/security/threat-protection/microsoft-defender-atp/tvm-security-recommendation) to turn EDR in block mode on if it isn't already enabled. @@ -83,15 +83,15 @@ The following image shows an instance of unwanted software that was detected and ### Do I need to turn EDR in block mode on even when I have Microsoft Defender Antivirus running on devices? -We recommend keeping EDR in block mode on, whether Microsoft Defender Antivirus is running in passive mode or in active mode. EDR in block mode provides an additional layer of defense with Microsoft Defender for Endpoint. It allows Defender for Endpoint to take actions based on post-breach behavioral EDR detections. +We recommend keeping EDR in block mode on, whether Microsoft Defender Antivirus is running in passive mode or in active mode. EDR in block mode provides another layer of defense with Microsoft Defender for Endpoint. It allows Defender for Endpoint to take actions based on post-breach behavioral EDR detections. ### Will EDR in block mode have any impact on a user's antivirus protection? -EDR in block mode does not affect third-party antivirus protection running on users' devices. EDR in block mode works if the primary antivirus solution misses something, or if there is a post-breach detection. EDR in block mode works just like [Microsoft Defender Antivirus in passive mode](https://docs.microsoft.com/windows/security/threat-protection/microsoft-defender-antivirus/microsoft-defender-antivirus-compatibility#functionality-and-features-available-in-each-state), with the additional steps of blocking and remediating malicious artifacts or behaviors that are detected. +EDR in block mode does not affect third-party antivirus protection running on users' devices. EDR in block mode works if the primary antivirus solution misses something, or if there is a post-breach detection. EDR in block mode works just like [Microsoft Defender Antivirus in passive mode](https://docs.microsoft.com/windows/security/threat-protection/microsoft-defender-antivirus/microsoft-defender-antivirus-compatibility#functionality-and-features-available-in-each-state), except it also blocks and remediates malicious artifacts or behaviors that are detected. ### Why do I need to keep Microsoft Defender Antivirus up to date? -Because Microsoft Defender Antivirus detects and remediates malicious items, it's important to keep it up to date to leverage the latest device learning models, behavioral detections, and heuristics for EDR in block mode to be most effective. The [Defender for Endpoint](https://docs.microsoft.com/windows/security/threat-protection) stack of capabilities works in an integrated manner, and to get best protection value, you should keep Microsoft Defender Antivirus up to date. +Because Microsoft Defender Antivirus detects and remediates malicious items, it's important to keep it up to date to use the latest device learning models, behavioral detections, and heuristics for EDR in block mode to be most effective. The [Defender for Endpoint](https://docs.microsoft.com/windows/security/threat-protection) stack of capabilities works in an integrated manner, and to get best protection value, you should keep Microsoft Defender Antivirus up to date. ### Why do we need cloud protection on? From 898eb448d332fca090a9d76cfef7919bdc1c8d3d Mon Sep 17 00:00:00 2001 From: Daniel Simpson Date: Thu, 7 Jan 2021 09:34:04 -0800 Subject: [PATCH 399/486] Update use.md --- .../security/threat-protection/microsoft-defender-atp/use.md | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/windows/security/threat-protection/microsoft-defender-atp/use.md b/windows/security/threat-protection/microsoft-defender-atp/use.md index 94a305a5eb..081596f1aa 100644 --- a/windows/security/threat-protection/microsoft-defender-atp/use.md +++ b/windows/security/threat-protection/microsoft-defender-atp/use.md @@ -37,7 +37,7 @@ Use the **Threat & Vulnerability Management** dashboard to expand your visibilit Use the **Threat analytics** dashboard to continually assess and control risk exposure to Spectre and Meltdown. ## Microsoft Defender for Endpoint interactive guide -In this interactive guide, you'll learn how to investigate threads to your organization with Microsoft Defender for Endpoint. You'll see how Microsoft Defender for Endpoint can help you identify suspicious activities, investigate risks to your organization, and remediate threats. +In this interactive guide, you'll learn how to investigate threats to your organization with Microsoft Defender for Endpoint. You'll see how Microsoft Defender for Endpoint can help you identify suspicious activities, investigate risks to your organization, and remediate threats. [!VIDEO https://aka.ms/MSDE-IG] From ee3f82a8654f8fa713a7f012af54b21f1c575532 Mon Sep 17 00:00:00 2001 From: Denise Vangel-MSFT Date: Thu, 7 Jan 2021 09:35:40 -0800 Subject: [PATCH 400/486] Update edr-in-block-mode.md --- .../microsoft-defender-atp/edr-in-block-mode.md | 10 +++++----- 1 file changed, 5 insertions(+), 5 deletions(-) diff --git a/windows/security/threat-protection/microsoft-defender-atp/edr-in-block-mode.md b/windows/security/threat-protection/microsoft-defender-atp/edr-in-block-mode.md index def71f7250..07e482586e 100644 --- a/windows/security/threat-protection/microsoft-defender-atp/edr-in-block-mode.md +++ b/windows/security/threat-protection/microsoft-defender-atp/edr-in-block-mode.md @@ -43,7 +43,7 @@ EDR in block mode is also integrated with [threat & vulnerability management](ht ## What happens when something is detected? -When EDR in block mode is turned on, and a malicious artifact is detected, blocking and remediation actions are taken. You'll see detection status as **Blocked** or **Prevented** as completed actions in the [Action center](https://docs.microsoft.com/windows/security/threat-protection/microsoft-defender-atp/respond-machine-alerts#check-activity-details-in-action-center). +When EDR in block mode is turned on, and a malicious artifact is detected, Microsoft Defender for Endpoint blocks and remediates that artifact. You'll see detection status as **Blocked** or **Prevented** as completed actions in the [Action center](https://docs.microsoft.com/windows/security/threat-protection/microsoft-defender-atp/respond-machine-alerts#check-activity-details-in-action-center). The following image shows an instance of unwanted software that was detected and blocked through EDR in block mode: @@ -111,10 +111,10 @@ To confirm whether Microsoft Defender Antivirus is running in active or passive 2. Type `Get-MpComputerStatus`. -3. In the list of results, look for one of the following: - - `AMRunningMode: Normal` - - `AMRunningMode: Passive Mode` - - `AMRunningMode: SxS Passive Mode` +3. In the list of results, in the `AMRunningMode` row, look for one of the following values: + - `Normal` + - `Passive Mode` + - `SxS Passive Mode` To learn more, see [Get-MpComputerStatus](https://docs.microsoft.com/powershell/module/defender/get-mpcomputerstatus?view=win10-ps). From d8959ac9eb6c8fa7ea36ef2f422bb5cb2411dced Mon Sep 17 00:00:00 2001 From: Denise Vangel-MSFT Date: Thu, 7 Jan 2021 09:43:06 -0800 Subject: [PATCH 401/486] Update edr-in-block-mode.md --- .../microsoft-defender-atp/edr-in-block-mode.md | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/windows/security/threat-protection/microsoft-defender-atp/edr-in-block-mode.md b/windows/security/threat-protection/microsoft-defender-atp/edr-in-block-mode.md index 07e482586e..9c53fcc49a 100644 --- a/windows/security/threat-protection/microsoft-defender-atp/edr-in-block-mode.md +++ b/windows/security/threat-protection/microsoft-defender-atp/edr-in-block-mode.md @@ -116,7 +116,7 @@ To confirm whether Microsoft Defender Antivirus is running in active or passive - `Passive Mode` - `SxS Passive Mode` -To learn more, see [Get-MpComputerStatus](https://docs.microsoft.com/powershell/module/defender/get-mpcomputerstatus?view=win10-ps). +To learn more, see [Get-MpComputerStatus](https://docs.microsoft.com/powershell/module/defender/get-mpcomputerstatus). #### Use Command Prompt From 47fc5b95cbd10bd19059e8ed65b896e53e2b4537 Mon Sep 17 00:00:00 2001 From: Denise Vangel-MSFT Date: Thu, 7 Jan 2021 09:48:24 -0800 Subject: [PATCH 402/486] Update edr-in-block-mode.md --- .../microsoft-defender-atp/edr-in-block-mode.md | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/windows/security/threat-protection/microsoft-defender-atp/edr-in-block-mode.md b/windows/security/threat-protection/microsoft-defender-atp/edr-in-block-mode.md index 9c53fcc49a..79a5673036 100644 --- a/windows/security/threat-protection/microsoft-defender-atp/edr-in-block-mode.md +++ b/windows/security/threat-protection/microsoft-defender-atp/edr-in-block-mode.md @@ -71,7 +71,7 @@ The following image shows an instance of unwanted software that was detected and |Permissions |Global Administrator or Security Administrator role assigned in [Azure Active Directory](https://docs.microsoft.com/azure/active-directory/fundamentals/active-directory-users-assign-role-azure-portal). See [Basic permissions](https://docs.microsoft.com/windows/security/threat-protection/microsoft-defender-atp/basic-permissions). | |Operating system |One of the following versions:
    - Windows 10 (all releases)
    - Windows Server 2016 or later | |Windows E5 enrollment |Windows E5 is included in the following subscriptions:
    - Microsoft 365 E5
    - Microsoft 365 E3 together with the Identity & Threat Protection offering

    See [Components](https://docs.microsoft.com/microsoft-365/enterprise/microsoft-365-overview?view=o365-worldwide&preserve-view=true#components) and [features and capabilities for each plan](https://www.microsoft.com/microsoft-365/compare-all-microsoft-365-plans). | -|Cloud-delivered protection |Microsoft Defender Antivirus must be installed and running in either active mode or passive mode. (You can use Microsoft Defender Antivirus alongside a non-Microsoft antivirus solution.) See [How do I confirm Microsoft Defender Antivirus is in active or passive mode?](#how-do-i-confirm-microsoft-defender-antivirus-is-in-active-or-passive-mode).)

    In addition, make sure Microsoft Defender Antivirus is configured such that cloud-delivered protection is enabled. See [Enable cloud-delivered protection](https://docs.microsoft.com/windows/security/threat-protection/microsoft-defender-antivirus/enable-cloud-protection-microsoft-defender-antivirus). | +|Cloud-delivered protection |Microsoft Defender Antivirus must be installed and running in either active mode or passive mode. (You can use Microsoft Defender Antivirus alongside a non-Microsoft antivirus solution.) [Confirm Microsoft Defender Antivirus is in active or passive mode](#how-do-i-confirm-microsoft-defender-antivirus-is-in-active-or-passive-mode).

    In addition, make sure Microsoft Defender Antivirus is configured such that cloud-delivered protection is enabled. See [Enable cloud-delivered protection](https://docs.microsoft.com/windows/security/threat-protection/microsoft-defender-antivirus/enable-cloud-protection-microsoft-defender-antivirus). | |Microsoft Defender Antivirus antimalware client |Make sure your client is up to date. Using PowerShell, run the [Get-MpComputerStatus](https://docs.microsoft.com/powershell/module/defender/get-mpcomputerstatus?view=win10-ps&preserve-view=true) cmdlet as an administrator.
    In the **AMProductVersion** line, you should see **4.18.2001.10** or above. | |Microsoft Defender Antivirus engine |Make sure your engine is up to date. Using PowerShell, run the [Get-MpComputerStatus](https://docs.microsoft.com/powershell/module/defender/get-mpcomputerstatus?view=win10-ps&preserve-view=true) cmdlet as an administrator.
    In the **AMEngineVersion** line, you should see **1.1.16700.2** or above. | From a0a5572da3848dd5bfbfeb11aa85cfb77db8391e Mon Sep 17 00:00:00 2001 From: Denise Vangel-MSFT Date: Thu, 7 Jan 2021 09:49:24 -0800 Subject: [PATCH 403/486] Update edr-in-block-mode.md --- .../microsoft-defender-atp/edr-in-block-mode.md | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/windows/security/threat-protection/microsoft-defender-atp/edr-in-block-mode.md b/windows/security/threat-protection/microsoft-defender-atp/edr-in-block-mode.md index 79a5673036..6344d50b9a 100644 --- a/windows/security/threat-protection/microsoft-defender-atp/edr-in-block-mode.md +++ b/windows/security/threat-protection/microsoft-defender-atp/edr-in-block-mode.md @@ -71,7 +71,7 @@ The following image shows an instance of unwanted software that was detected and |Permissions |Global Administrator or Security Administrator role assigned in [Azure Active Directory](https://docs.microsoft.com/azure/active-directory/fundamentals/active-directory-users-assign-role-azure-portal). See [Basic permissions](https://docs.microsoft.com/windows/security/threat-protection/microsoft-defender-atp/basic-permissions). | |Operating system |One of the following versions:
    - Windows 10 (all releases)
    - Windows Server 2016 or later | |Windows E5 enrollment |Windows E5 is included in the following subscriptions:
    - Microsoft 365 E5
    - Microsoft 365 E3 together with the Identity & Threat Protection offering

    See [Components](https://docs.microsoft.com/microsoft-365/enterprise/microsoft-365-overview?view=o365-worldwide&preserve-view=true#components) and [features and capabilities for each plan](https://www.microsoft.com/microsoft-365/compare-all-microsoft-365-plans). | -|Cloud-delivered protection |Microsoft Defender Antivirus must be installed and running in either active mode or passive mode. (You can use Microsoft Defender Antivirus alongside a non-Microsoft antivirus solution.) [Confirm Microsoft Defender Antivirus is in active or passive mode](#how-do-i-confirm-microsoft-defender-antivirus-is-in-active-or-passive-mode).

    In addition, make sure Microsoft Defender Antivirus is configured such that cloud-delivered protection is enabled. See [Enable cloud-delivered protection](https://docs.microsoft.com/windows/security/threat-protection/microsoft-defender-antivirus/enable-cloud-protection-microsoft-defender-antivirus). | +|Cloud-delivered protection |Microsoft Defender Antivirus must be installed and running in either active mode or passive mode. (You can use Microsoft Defender Antivirus alongside a non-Microsoft antivirus solution.) [Confirm Microsoft Defender Antivirus is in active or passive mode](#how-do-i-confirm-microsoft-defender-antivirus-is-in-active-or-passive-mode).

    In addition, make sure Microsoft Defender Antivirus is configured such that [cloud-delivered protection is enabled](https://docs.microsoft.com/windows/security/threat-protection/microsoft-defender-antivirus/enable-cloud-protection-microsoft-defender-antivirus). | |Microsoft Defender Antivirus antimalware client |Make sure your client is up to date. Using PowerShell, run the [Get-MpComputerStatus](https://docs.microsoft.com/powershell/module/defender/get-mpcomputerstatus?view=win10-ps&preserve-view=true) cmdlet as an administrator.
    In the **AMProductVersion** line, you should see **4.18.2001.10** or above. | |Microsoft Defender Antivirus engine |Make sure your engine is up to date. Using PowerShell, run the [Get-MpComputerStatus](https://docs.microsoft.com/powershell/module/defender/get-mpcomputerstatus?view=win10-ps&preserve-view=true) cmdlet as an administrator.
    In the **AMEngineVersion** line, you should see **1.1.16700.2** or above. | From aa303399ccb7ffb9b9e7445d4f98d9070dfa30f3 Mon Sep 17 00:00:00 2001 From: Denise Vangel-MSFT Date: Thu, 7 Jan 2021 09:51:01 -0800 Subject: [PATCH 404/486] Update edr-in-block-mode.md --- .../microsoft-defender-atp/edr-in-block-mode.md | 3 +-- 1 file changed, 1 insertion(+), 2 deletions(-) diff --git a/windows/security/threat-protection/microsoft-defender-atp/edr-in-block-mode.md b/windows/security/threat-protection/microsoft-defender-atp/edr-in-block-mode.md index 6344d50b9a..b53e114acc 100644 --- a/windows/security/threat-protection/microsoft-defender-atp/edr-in-block-mode.md +++ b/windows/security/threat-protection/microsoft-defender-atp/edr-in-block-mode.md @@ -76,8 +76,7 @@ The following image shows an instance of unwanted software that was detected and |Microsoft Defender Antivirus engine |Make sure your engine is up to date. Using PowerShell, run the [Get-MpComputerStatus](https://docs.microsoft.com/powershell/module/defender/get-mpcomputerstatus?view=win10-ps&preserve-view=true) cmdlet as an administrator.
    In the **AMEngineVersion** line, you should see **1.1.16700.2** or above. | > [!IMPORTANT] -> To get the best protection value, make sure your antivirus solution is configured to receive regular updates and essential features, and that your exclusions are defined. - +> To get the best protection value, make sure your antivirus solution is configured to receive regular updates and essential features, and that your [exclusions](../microsoft-defender-antivirus/configure-exclusions-microsoft-defender-antivirus.md) are defined. EDR in block mode respects exclusions that are defined for Microsoft Defender Antivirus. ## Frequently asked questions From 29a4ef88256a2ace31d71724ddae949ca09919f9 Mon Sep 17 00:00:00 2001 From: Daniel Simpson Date: Thu, 7 Jan 2021 09:57:51 -0800 Subject: [PATCH 405/486] Update use.md --- .../security/threat-protection/microsoft-defender-atp/use.md | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/windows/security/threat-protection/microsoft-defender-atp/use.md b/windows/security/threat-protection/microsoft-defender-atp/use.md index 081596f1aa..eeeba70ccd 100644 --- a/windows/security/threat-protection/microsoft-defender-atp/use.md +++ b/windows/security/threat-protection/microsoft-defender-atp/use.md @@ -39,7 +39,7 @@ Use the **Threat analytics** dashboard to continually assess and control risk ex ## Microsoft Defender for Endpoint interactive guide In this interactive guide, you'll learn how to investigate threats to your organization with Microsoft Defender for Endpoint. You'll see how Microsoft Defender for Endpoint can help you identify suspicious activities, investigate risks to your organization, and remediate threats. -[!VIDEO https://aka.ms/MSDE-IG] +> [!VIDEO https://aka.ms/MSDE-IG] ### In this section From 47dac969b5512a26efdf3578cdee4ed0a982ed54 Mon Sep 17 00:00:00 2001 From: Denise Vangel-MSFT Date: Thu, 7 Jan 2021 10:00:11 -0800 Subject: [PATCH 406/486] Update edr-in-block-mode.md --- .../microsoft-defender-atp/edr-in-block-mode.md | 3 ++- 1 file changed, 2 insertions(+), 1 deletion(-) diff --git a/windows/security/threat-protection/microsoft-defender-atp/edr-in-block-mode.md b/windows/security/threat-protection/microsoft-defender-atp/edr-in-block-mode.md index b53e114acc..5300626bd2 100644 --- a/windows/security/threat-protection/microsoft-defender-atp/edr-in-block-mode.md +++ b/windows/security/threat-protection/microsoft-defender-atp/edr-in-block-mode.md @@ -71,7 +71,8 @@ The following image shows an instance of unwanted software that was detected and |Permissions |Global Administrator or Security Administrator role assigned in [Azure Active Directory](https://docs.microsoft.com/azure/active-directory/fundamentals/active-directory-users-assign-role-azure-portal). See [Basic permissions](https://docs.microsoft.com/windows/security/threat-protection/microsoft-defender-atp/basic-permissions). | |Operating system |One of the following versions:
    - Windows 10 (all releases)
    - Windows Server 2016 or later | |Windows E5 enrollment |Windows E5 is included in the following subscriptions:
    - Microsoft 365 E5
    - Microsoft 365 E3 together with the Identity & Threat Protection offering

    See [Components](https://docs.microsoft.com/microsoft-365/enterprise/microsoft-365-overview?view=o365-worldwide&preserve-view=true#components) and [features and capabilities for each plan](https://www.microsoft.com/microsoft-365/compare-all-microsoft-365-plans). | -|Cloud-delivered protection |Microsoft Defender Antivirus must be installed and running in either active mode or passive mode. (You can use Microsoft Defender Antivirus alongside a non-Microsoft antivirus solution.) [Confirm Microsoft Defender Antivirus is in active or passive mode](#how-do-i-confirm-microsoft-defender-antivirus-is-in-active-or-passive-mode).

    In addition, make sure Microsoft Defender Antivirus is configured such that [cloud-delivered protection is enabled](https://docs.microsoft.com/windows/security/threat-protection/microsoft-defender-antivirus/enable-cloud-protection-microsoft-defender-antivirus). | +|Microsoft Defender Antivirus |Microsoft Defender Antivirus must be installed and running in either active mode or passive mode. (You can use Microsoft Defender Antivirus alongside a non-Microsoft antivirus solution.) [Confirm Microsoft Defender Antivirus is in active or passive mode](#how-do-i-confirm-microsoft-defender-antivirus-is-in-active-or-passive-mode). | +|Cloud-delivered protection |Make sure Microsoft Defender Antivirus is configured such that [cloud-delivered protection is enabled](https://docs.microsoft.com/windows/security/threat-protection/microsoft-defender-antivirus/enable-cloud-protection-microsoft-defender-antivirus). | |Microsoft Defender Antivirus antimalware client |Make sure your client is up to date. Using PowerShell, run the [Get-MpComputerStatus](https://docs.microsoft.com/powershell/module/defender/get-mpcomputerstatus?view=win10-ps&preserve-view=true) cmdlet as an administrator.
    In the **AMProductVersion** line, you should see **4.18.2001.10** or above. | |Microsoft Defender Antivirus engine |Make sure your engine is up to date. Using PowerShell, run the [Get-MpComputerStatus](https://docs.microsoft.com/powershell/module/defender/get-mpcomputerstatus?view=win10-ps&preserve-view=true) cmdlet as an administrator.
    In the **AMEngineVersion** line, you should see **1.1.16700.2** or above. | From 40762f3bbd912ef4cc766dd2c6130295b4f578d8 Mon Sep 17 00:00:00 2001 From: Denise Vangel-MSFT Date: Thu, 7 Jan 2021 10:06:13 -0800 Subject: [PATCH 407/486] Update edr-in-block-mode.md --- .../microsoft-defender-atp/edr-in-block-mode.md | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/windows/security/threat-protection/microsoft-defender-atp/edr-in-block-mode.md b/windows/security/threat-protection/microsoft-defender-atp/edr-in-block-mode.md index 5300626bd2..8f97a4b56f 100644 --- a/windows/security/threat-protection/microsoft-defender-atp/edr-in-block-mode.md +++ b/windows/security/threat-protection/microsoft-defender-atp/edr-in-block-mode.md @@ -77,7 +77,7 @@ The following image shows an instance of unwanted software that was detected and |Microsoft Defender Antivirus engine |Make sure your engine is up to date. Using PowerShell, run the [Get-MpComputerStatus](https://docs.microsoft.com/powershell/module/defender/get-mpcomputerstatus?view=win10-ps&preserve-view=true) cmdlet as an administrator.
    In the **AMEngineVersion** line, you should see **1.1.16700.2** or above. | > [!IMPORTANT] -> To get the best protection value, make sure your antivirus solution is configured to receive regular updates and essential features, and that your [exclusions](../microsoft-defender-antivirus/configure-exclusions-microsoft-defender-antivirus.md) are defined. EDR in block mode respects exclusions that are defined for Microsoft Defender Antivirus. +> To get the best protection value, make sure your antivirus solution is configured to receive regular updates and essential features, and that your [exclusions are configured](../microsoft-defender-antivirus/configure-exclusions-microsoft-defender-antivirus.md). EDR in block mode respects exclusions that are defined for Microsoft Defender Antivirus. ## Frequently asked questions From afaf7b099df4b8a2387318097aeb79d53dcade08 Mon Sep 17 00:00:00 2001 From: adirdidi <68847945+adirdidi@users.noreply.github.com> Date: Thu, 7 Jan 2021 22:13:32 +0200 Subject: [PATCH 408/486] Update gov.md --- .../security/threat-protection/microsoft-defender-atp/gov.md | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/windows/security/threat-protection/microsoft-defender-atp/gov.md b/windows/security/threat-protection/microsoft-defender-atp/gov.md index 42f48c7a27..a8904d84f6 100644 --- a/windows/security/threat-protection/microsoft-defender-atp/gov.md +++ b/windows/security/threat-protection/microsoft-defender-atp/gov.md @@ -126,4 +126,4 @@ Integrations: Microsoft Endpoint DLP | ![No](../images/svg/check-no.svg) On engi Integrations: Microsoft Intune | ![Yes](../images/svg/check-yes.svg) | ![No](../images/svg/check-no.svg) In development Integrations: Microsoft Power Automate & Azure Logic Apps | ![No](../images/svg/check-no.svg) Rolling out | ![No](../images/svg/check-no.svg) In development Integrations: Skype for Business / Teams | ![Yes](../images/svg/check-yes.svg) | ![No](../images/svg/check-no.svg) In development -Microsoft Threat Experts | ![No](../images/svg/check-no.svg) | ![No](../images/svg/check-no.svg) +Microsoft Threat Experts | ![No](../images/svg/check-no.svg) In development | ![No](../images/svg/check-no.svg) In development From c8969b6e4f8fc3b2357972e7ba054c4bbfd52792 Mon Sep 17 00:00:00 2001 From: adirdidi <68847945+adirdidi@users.noreply.github.com> Date: Thu, 7 Jan 2021 22:13:52 +0200 Subject: [PATCH 409/486] Update gov.md --- .../security/threat-protection/microsoft-defender-atp/gov.md | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/windows/security/threat-protection/microsoft-defender-atp/gov.md b/windows/security/threat-protection/microsoft-defender-atp/gov.md index a8904d84f6..9f89eda253 100644 --- a/windows/security/threat-protection/microsoft-defender-atp/gov.md +++ b/windows/security/threat-protection/microsoft-defender-atp/gov.md @@ -126,4 +126,4 @@ Integrations: Microsoft Endpoint DLP | ![No](../images/svg/check-no.svg) On engi Integrations: Microsoft Intune | ![Yes](../images/svg/check-yes.svg) | ![No](../images/svg/check-no.svg) In development Integrations: Microsoft Power Automate & Azure Logic Apps | ![No](../images/svg/check-no.svg) Rolling out | ![No](../images/svg/check-no.svg) In development Integrations: Skype for Business / Teams | ![Yes](../images/svg/check-yes.svg) | ![No](../images/svg/check-no.svg) In development -Microsoft Threat Experts | ![No](../images/svg/check-no.svg) In development | ![No](../images/svg/check-no.svg) In development +Microsoft Threat Experts | ![No](../images/svg/check-no.svg) On engineering backlog | ![No](../images/svg/check-no.svg) On engineering backlog From 7953f7477d523a50d9cf944001e95b7dfe93c407 Mon Sep 17 00:00:00 2001 From: Denise Vangel-MSFT Date: Thu, 7 Jan 2021 14:41:29 -0800 Subject: [PATCH 410/486] Update edr-in-block-mode.md --- .../microsoft-defender-atp/edr-in-block-mode.md | 6 +++--- 1 file changed, 3 insertions(+), 3 deletions(-) diff --git a/windows/security/threat-protection/microsoft-defender-atp/edr-in-block-mode.md b/windows/security/threat-protection/microsoft-defender-atp/edr-in-block-mode.md index 8f97a4b56f..640feefc2f 100644 --- a/windows/security/threat-protection/microsoft-defender-atp/edr-in-block-mode.md +++ b/windows/security/threat-protection/microsoft-defender-atp/edr-in-block-mode.md @@ -91,7 +91,7 @@ EDR in block mode does not affect third-party antivirus protection running on us ### Why do I need to keep Microsoft Defender Antivirus up to date? -Because Microsoft Defender Antivirus detects and remediates malicious items, it's important to keep it up to date to use the latest device learning models, behavioral detections, and heuristics for EDR in block mode to be most effective. The [Defender for Endpoint](https://docs.microsoft.com/windows/security/threat-protection) stack of capabilities works in an integrated manner, and to get best protection value, you should keep Microsoft Defender Antivirus up to date. +Because Microsoft Defender Antivirus detects and remediates malicious items, it's important to keep it up to date. For EDR in block mode to be effective, it uses the latest device learning models, behavioral detections, and heuristics. The [Defender for Endpoint](https://docs.microsoft.com/windows/security/threat-protection) stack of capabilities works in an integrated manner. To get best protection value, you should keep Microsoft Defender Antivirus up to date. ### Why do we need cloud protection on? @@ -111,7 +111,7 @@ To confirm whether Microsoft Defender Antivirus is running in active or passive 2. Type `Get-MpComputerStatus`. -3. In the list of results, in the `AMRunningMode` row, look for one of the following values: +3. In the list of results, in the **AMRunningMode** row, look for one of the following values: - `Normal` - `Passive Mode` - `SxS Passive Mode` @@ -124,7 +124,7 @@ To learn more, see [Get-MpComputerStatus](https://docs.microsoft.com/powershell/ 2. Type `sc query windefend`. -3. In the list of results, in the `STATE` row, confirm that the service is running. +3. In the list of results, in the **STATE** row, confirm that the service is running. ## See also From 6dd2bf3e0ed3102e1c2750d31c5688b85354f2db Mon Sep 17 00:00:00 2001 From: Denise Vangel-MSFT Date: Thu, 7 Jan 2021 14:47:56 -0800 Subject: [PATCH 411/486] Update prevent-changes-to-security-settings-with-tamper-protection.md --- ...ecurity-settings-with-tamper-protection.md | 24 +++++++++++-------- 1 file changed, 14 insertions(+), 10 deletions(-) diff --git a/windows/security/threat-protection/microsoft-defender-antivirus/prevent-changes-to-security-settings-with-tamper-protection.md b/windows/security/threat-protection/microsoft-defender-antivirus/prevent-changes-to-security-settings-with-tamper-protection.md index 567fc845b6..02e271f7a0 100644 --- a/windows/security/threat-protection/microsoft-defender-antivirus/prevent-changes-to-security-settings-with-tamper-protection.md +++ b/windows/security/threat-protection/microsoft-defender-antivirus/prevent-changes-to-security-settings-with-tamper-protection.md @@ -14,7 +14,7 @@ audience: ITPro author: denisebmsft ms.author: deniseb ms.custom: nextgen -ms.date: 11/19/2020 +ms.date: 01/07/2021 --- # Protect security settings with tamper protection @@ -24,8 +24,12 @@ ms.date: 11/19/2020 **Applies to:** +- [Microsoft Defender for Endpoint](https://go.microsoft.com/fwlink/p/?linkid=2146631) + +Tamper protection is available on devices running the following versions of Windows: + - Windows 10 -- Windows Server 2019 (if using tenant attach with [Configuration Manager, version 2006](#manage-tamper-protection-with-configuration-manager-version-2006)) +- Windows Server 2016 and 2019 (if using tenant attach with [Configuration Manager, version 2006](#manage-tamper-protection-with-configuration-manager-version-2006)) ## Overview @@ -74,7 +78,7 @@ Tamper protection doesn't prevent you from viewing your security settings. And, If you are a home user, or you are not subject to settings managed by a security team, you can use the Windows Security app to turn tamper protection on or off. You must have appropriate admin permissions on your machine to do change security settings, such as tamper protection. -1. Click **Start**, and start typing *Defender*. In the search results, select **Windows Security**. +1. Click **Start**, and start typing *Security*. In the search results, select **Windows Security**. 2. Select **Virus & threat protection** > **Virus & threat protection settings**. @@ -101,15 +105,15 @@ You must have appropriate [permissions](../microsoft-defender-atp/assign-portal- 3. Select **Devices** > **Configuration Profiles**. -4. Create a profile as follows: +4. Create a profile that includes the following settings: - - Platform: **Windows 10 and later** + - **Platform: Windows 10 and later** - - Profile type: **Endpoint protection** + - **Profile type: Endpoint protection** - - Category: **Microsoft Defender Security Center** + - **Category: Microsoft Defender Security Center** - - Tamper Protection: **Enabled** + - **Tamper Protection: Enabled** ![Turn tamper protection on with Intune](images/turnontamperprotect-MEM.png) @@ -132,7 +136,7 @@ If you are using Windows 10 OS [1709](https://docs.microsoft.com/windows/release > [!IMPORTANT] > The procedure can be used to extend tamper protection to devices running Windows 10 and Windows Server 2019. Make sure to review the prerequisites and other information in the resources mentioned in this procedure. -If you're using [version 2006 of Configuration Manager](https://docs.microsoft.com/mem/configmgr/core/plan-design/changes/whats-new-in-version-2006), you can manage tamper protection settings on Windows 10 and Windows Server 2019 by using a method called *tenant attach*. Tenant attach enables you to sync your on-premises-only Configuration Manager devices into the Microsoft Endpoint Manager admin center, and then deliver your endpoint security configuration policies to your on-premises collections & devices. +If you're using [version 2006 of Configuration Manager](https://docs.microsoft.com/mem/configmgr/core/plan-design/changes/whats-new-in-version-2006), you can manage tamper protection settings on Windows 10, Windows Server 2016, and Windows Server 2019 by using a method called *tenant attach*. Tenant attach enables you to sync your on-premises-only Configuration Manager devices into the Microsoft Endpoint Manager admin center, and then deliver your endpoint security configuration policies to your on-premises collections & devices. 1. Set up tenant attach. See [Microsoft Endpoint Manager tenant attach: Device sync and device actions](https://docs.microsoft.com/mem/configmgr/tenant-attach/device-sync-actions). @@ -209,7 +213,7 @@ Your regular group policy doesn’t apply to tamper protection, and changes to M ### For Microsoft Defender for Endpoint, is configuring tamper protection in Intune targeted to the entire organization only? -Configuring tamper protection in Intune or Microsoft Endpoint Manager can be targeted to your entire organization as well as to specific devices and user groups. +Configuring tamper protection in Intune or Microsoft Endpoint Manager can be targeted to your entire organization and to specific devices and user groups. ### Can I configure Tamper Protection in Microsoft Endpoint Configuration Manager? From b4ee3e3c0eb2f87a273b57c0b3c688ff389997b9 Mon Sep 17 00:00:00 2001 From: Denise Vangel-MSFT Date: Thu, 7 Jan 2021 14:49:33 -0800 Subject: [PATCH 412/486] Update prevent-changes-to-security-settings-with-tamper-protection.md --- ...event-changes-to-security-settings-with-tamper-protection.md | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/windows/security/threat-protection/microsoft-defender-antivirus/prevent-changes-to-security-settings-with-tamper-protection.md b/windows/security/threat-protection/microsoft-defender-antivirus/prevent-changes-to-security-settings-with-tamper-protection.md index 02e271f7a0..ad05cd6b37 100644 --- a/windows/security/threat-protection/microsoft-defender-antivirus/prevent-changes-to-security-settings-with-tamper-protection.md +++ b/windows/security/threat-protection/microsoft-defender-antivirus/prevent-changes-to-security-settings-with-tamper-protection.md @@ -94,7 +94,7 @@ If you are part of your organization's security team, and your subscription incl You must have appropriate [permissions](../microsoft-defender-atp/assign-portal-access.md), such as global admin, security admin, or security operations, to perform the following task. -1. Make sure your organization meets all of the following requirements to manage tamper protection using Intune: +1. Make sure your organization meets all of the following requirements to use Intune to manage tamper protection: - Your organization uses [Intune to manage devices](https://docs.microsoft.com/intune/fundamentals/what-is-device-management). ([Intune licenses](https://docs.microsoft.com/intune/fundamentals/licenses) are required; Intune is included in Microsoft 365 E5.) - Your Windows machines must be running Windows 10 OS [1709](https://docs.microsoft.com/windows/release-information/status-windows-10-1709), [1803](https://docs.microsoft.com/windows/release-information/status-windows-10-1803), [1809](https://docs.microsoft.com/windows/release-information/status-windows-10-1809-and-windows-server-2019) or later. (For more information about releases, see [Windows 10 release information](https://docs.microsoft.com/windows/release-information/).) From 5d6b341c0bb2e780ab14f67652d6ba00b0f9ca64 Mon Sep 17 00:00:00 2001 From: Denise Vangel-MSFT Date: Thu, 7 Jan 2021 14:51:48 -0800 Subject: [PATCH 413/486] Update edr-in-block-mode.md --- .../microsoft-defender-atp/edr-in-block-mode.md | 4 ++-- 1 file changed, 2 insertions(+), 2 deletions(-) diff --git a/windows/security/threat-protection/microsoft-defender-atp/edr-in-block-mode.md b/windows/security/threat-protection/microsoft-defender-atp/edr-in-block-mode.md index 640feefc2f..0c01e2faf7 100644 --- a/windows/security/threat-protection/microsoft-defender-atp/edr-in-block-mode.md +++ b/windows/security/threat-protection/microsoft-defender-atp/edr-in-block-mode.md @@ -73,8 +73,8 @@ The following image shows an instance of unwanted software that was detected and |Windows E5 enrollment |Windows E5 is included in the following subscriptions:
    - Microsoft 365 E5
    - Microsoft 365 E3 together with the Identity & Threat Protection offering

    See [Components](https://docs.microsoft.com/microsoft-365/enterprise/microsoft-365-overview?view=o365-worldwide&preserve-view=true#components) and [features and capabilities for each plan](https://www.microsoft.com/microsoft-365/compare-all-microsoft-365-plans). | |Microsoft Defender Antivirus |Microsoft Defender Antivirus must be installed and running in either active mode or passive mode. (You can use Microsoft Defender Antivirus alongside a non-Microsoft antivirus solution.) [Confirm Microsoft Defender Antivirus is in active or passive mode](#how-do-i-confirm-microsoft-defender-antivirus-is-in-active-or-passive-mode). | |Cloud-delivered protection |Make sure Microsoft Defender Antivirus is configured such that [cloud-delivered protection is enabled](https://docs.microsoft.com/windows/security/threat-protection/microsoft-defender-antivirus/enable-cloud-protection-microsoft-defender-antivirus). | -|Microsoft Defender Antivirus antimalware client |Make sure your client is up to date. Using PowerShell, run the [Get-MpComputerStatus](https://docs.microsoft.com/powershell/module/defender/get-mpcomputerstatus?view=win10-ps&preserve-view=true) cmdlet as an administrator.
    In the **AMProductVersion** line, you should see **4.18.2001.10** or above. | -|Microsoft Defender Antivirus engine |Make sure your engine is up to date. Using PowerShell, run the [Get-MpComputerStatus](https://docs.microsoft.com/powershell/module/defender/get-mpcomputerstatus?view=win10-ps&preserve-view=true) cmdlet as an administrator.
    In the **AMEngineVersion** line, you should see **1.1.16700.2** or above. | +|Microsoft Defender Antivirus antimalware client |Make sure your client is up to date. Using PowerShell, run the [Get-MpComputerStatus](https://docs.microsoft.com/powershell/module/defender/get-mpcomputerstatus?view=win10-ps&preserve-view=true) cmdlet as an administrator. In the **AMProductVersion** line, you should see **4.18.2001.10** or above. | +|Microsoft Defender Antivirus engine |Make sure your engine is up to date. Using PowerShell, run the [Get-MpComputerStatus](https://docs.microsoft.com/powershell/module/defender/get-mpcomputerstatus?view=win10-ps&preserve-view=true) cmdlet as an administrator. In the **AMEngineVersion** line, you should see **1.1.16700.2** or above. | > [!IMPORTANT] > To get the best protection value, make sure your antivirus solution is configured to receive regular updates and essential features, and that your [exclusions are configured](../microsoft-defender-antivirus/configure-exclusions-microsoft-defender-antivirus.md). EDR in block mode respects exclusions that are defined for Microsoft Defender Antivirus. From 3dba1bbb77367ad88111e6c6043b8afcc49adaa9 Mon Sep 17 00:00:00 2001 From: Denise Vangel-MSFT Date: Thu, 7 Jan 2021 14:58:56 -0800 Subject: [PATCH 414/486] fixing applies to --- ...igure-block-at-first-sight-microsoft-defender-antivirus.md | 2 +- ...cloud-block-timeout-period-microsoft-defender-antivirus.md | 2 +- ...figure-network-connections-microsoft-defender-antivirus.md | 2 +- ...onfigure-server-exclusions-microsoft-defender-antivirus.md | 4 ++++ 4 files changed, 7 insertions(+), 3 deletions(-) diff --git a/windows/security/threat-protection/microsoft-defender-antivirus/configure-block-at-first-sight-microsoft-defender-antivirus.md b/windows/security/threat-protection/microsoft-defender-antivirus/configure-block-at-first-sight-microsoft-defender-antivirus.md index 43aa53b445..c3ec759d81 100644 --- a/windows/security/threat-protection/microsoft-defender-antivirus/configure-block-at-first-sight-microsoft-defender-antivirus.md +++ b/windows/security/threat-protection/microsoft-defender-antivirus/configure-block-at-first-sight-microsoft-defender-antivirus.md @@ -22,7 +22,7 @@ ms.date: 10/22/2020 **Applies to:** -- Microsoft Defender Antivirus +- [Microsoft Defender for Endpoint](https://go.microsoft.com/fwlink/p/?linkid=2146631) Block at first sight provides a way to detect and block new malware within seconds. This protection is enabled by default when certain prerequisite settings are enabled. These settings include cloud-delivered protection, a specified sample submission timeout (such as 50 seconds), and a file-blocking level of high. In most enterprise organizations, these settings are enabled by default with Microsoft Defender Antivirus deployments. diff --git a/windows/security/threat-protection/microsoft-defender-antivirus/configure-cloud-block-timeout-period-microsoft-defender-antivirus.md b/windows/security/threat-protection/microsoft-defender-antivirus/configure-cloud-block-timeout-period-microsoft-defender-antivirus.md index 4be673460a..2555377694 100644 --- a/windows/security/threat-protection/microsoft-defender-antivirus/configure-cloud-block-timeout-period-microsoft-defender-antivirus.md +++ b/windows/security/threat-protection/microsoft-defender-antivirus/configure-cloud-block-timeout-period-microsoft-defender-antivirus.md @@ -23,7 +23,7 @@ manager: dansimp **Applies to:** -- Microsoft Defender Antivirus +- [Microsoft Defender for Endpoint](https://go.microsoft.com/fwlink/p/?linkid=2146631) When Microsoft Defender Antivirus finds a suspicious file, it can prevent the file from running while it queries the [Microsoft Defender Antivirus cloud service](utilize-microsoft-cloud-protection-microsoft-defender-antivirus.md). diff --git a/windows/security/threat-protection/microsoft-defender-antivirus/configure-network-connections-microsoft-defender-antivirus.md b/windows/security/threat-protection/microsoft-defender-antivirus/configure-network-connections-microsoft-defender-antivirus.md index 1485e83d0a..e4896f9709 100644 --- a/windows/security/threat-protection/microsoft-defender-antivirus/configure-network-connections-microsoft-defender-antivirus.md +++ b/windows/security/threat-protection/microsoft-defender-antivirus/configure-network-connections-microsoft-defender-antivirus.md @@ -23,7 +23,7 @@ manager: dansimp **Applies to:** -- Microsoft Defender Antivirus +- [Microsoft Defender for Endpoint](https://go.microsoft.com/fwlink/p/?linkid=2146631) To ensure Microsoft Defender Antivirus cloud-delivered protection works properly, you need to configure your network to allow connections between your endpoints and certain Microsoft servers. diff --git a/windows/security/threat-protection/microsoft-defender-antivirus/configure-server-exclusions-microsoft-defender-antivirus.md b/windows/security/threat-protection/microsoft-defender-antivirus/configure-server-exclusions-microsoft-defender-antivirus.md index 1fa6c1665b..7c834bd8e4 100644 --- a/windows/security/threat-protection/microsoft-defender-antivirus/configure-server-exclusions-microsoft-defender-antivirus.md +++ b/windows/security/threat-protection/microsoft-defender-antivirus/configure-server-exclusions-microsoft-defender-antivirus.md @@ -19,6 +19,10 @@ ms.custom: nextgen [!INCLUDE [Microsoft 365 Defender rebranding](../../includes/microsoft-defender.md)] +**Applies to:** + +- [Microsoft Defender for Endpoint](https://go.microsoft.com/fwlink/p/?linkid=2146631) + Microsoft Defender Antivirus on Windows Server 2016 and 2019 automatically enrolls you in certain exclusions, as defined by your specified server role. See the [list of automatic exclusions](#list-of-automatic-exclusions) (in this article). These exclusions do not appear in the standard exclusion lists that are shown in the [Windows Security app](microsoft-defender-security-center-antivirus.md#exclusions). From d6bf4b4138ecceaf7681002939deb5b2877ea4d0 Mon Sep 17 00:00:00 2001 From: Denise Vangel-MSFT Date: Thu, 7 Jan 2021 15:02:00 -0800 Subject: [PATCH 415/486] fixing applies to --- .../enable-cloud-protection-microsoft-defender-antivirus.md | 2 +- .../office-365-microsoft-defender-antivirus.md | 4 ++-- 2 files changed, 3 insertions(+), 3 deletions(-) diff --git a/windows/security/threat-protection/microsoft-defender-antivirus/enable-cloud-protection-microsoft-defender-antivirus.md b/windows/security/threat-protection/microsoft-defender-antivirus/enable-cloud-protection-microsoft-defender-antivirus.md index 2dfddb6de2..69956ae919 100644 --- a/windows/security/threat-protection/microsoft-defender-antivirus/enable-cloud-protection-microsoft-defender-antivirus.md +++ b/windows/security/threat-protection/microsoft-defender-antivirus/enable-cloud-protection-microsoft-defender-antivirus.md @@ -21,7 +21,7 @@ ms.custom: nextgen **Applies to:** -- Microsoft Defender Antivirus +- [Microsoft Defender for Endpoint](https://go.microsoft.com/fwlink/p/?linkid=2146631) > [!NOTE] > The Microsoft Defender Antivirus cloud service is a mechanism for delivering updated protection to your network and endpoints. Although it is called a cloud service, it is not simply protection for files stored in the cloud; rather, it uses distributed resources and machine learning to deliver protection to your endpoints at a rate that is far faster than traditional Security intelligence updates. diff --git a/windows/security/threat-protection/microsoft-defender-antivirus/office-365-microsoft-defender-antivirus.md b/windows/security/threat-protection/microsoft-defender-antivirus/office-365-microsoft-defender-antivirus.md index eb9a31fb16..3ca4e0239b 100644 --- a/windows/security/threat-protection/microsoft-defender-antivirus/office-365-microsoft-defender-antivirus.md +++ b/windows/security/threat-protection/microsoft-defender-antivirus/office-365-microsoft-defender-antivirus.md @@ -24,9 +24,9 @@ manager: dansimp **Applies to:** - +- [Microsoft Defender for Endpoint](https://go.microsoft.com/fwlink/p/?linkid=2146631) - Microsoft Defender Antivirus -- Office 365 +- Microsoft 365 You might already know that: From 25d41dd409ac343ca06c27d94e8a888a95691867 Mon Sep 17 00:00:00 2001 From: Denise Vangel-MSFT Date: Thu, 7 Jan 2021 15:02:37 -0800 Subject: [PATCH 416/486] Update specify-cloud-protection-level-microsoft-defender-antivirus.md --- ...ecify-cloud-protection-level-microsoft-defender-antivirus.md | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/windows/security/threat-protection/microsoft-defender-antivirus/specify-cloud-protection-level-microsoft-defender-antivirus.md b/windows/security/threat-protection/microsoft-defender-antivirus/specify-cloud-protection-level-microsoft-defender-antivirus.md index 433c59bb6f..79cb4f70cc 100644 --- a/windows/security/threat-protection/microsoft-defender-antivirus/specify-cloud-protection-level-microsoft-defender-antivirus.md +++ b/windows/security/threat-protection/microsoft-defender-antivirus/specify-cloud-protection-level-microsoft-defender-antivirus.md @@ -23,7 +23,7 @@ ms.custom: nextgen **Applies to:** -- Microsoft Defender Antivirus +- [Microsoft Defender for Endpoint](https://go.microsoft.com/fwlink/p/?linkid=2146631) You can specify your level of cloud-delivered protection offered by Microsoft Defender Antivirus by using Microsoft Endpoint Manager (recommended) or Group Policy. From 92028eaf0c6845828c9a60a013570fde6b1ba9b6 Mon Sep 17 00:00:00 2001 From: Gary Moore Date: Thu, 7 Jan 2021 15:02:45 -0800 Subject: [PATCH 417/486] Acrolinx: "Mac OS" --- .../security/threat-protection/microsoft-defender-atp/gov.md | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/windows/security/threat-protection/microsoft-defender-atp/gov.md b/windows/security/threat-protection/microsoft-defender-atp/gov.md index 9f89eda253..2942c525e6 100644 --- a/windows/security/threat-protection/microsoft-defender-atp/gov.md +++ b/windows/security/threat-protection/microsoft-defender-atp/gov.md @@ -57,7 +57,7 @@ Windows 8 Pro | ![No](../images/svg/check-no.svg) Rolling out | ![No](../images/ Windows 7 SP1 Enterprise | ![No](../images/svg/check-no.svg) Rolling out | ![No](../images/svg/check-no.svg) In development Windows 7 SP1 Pro | ![No](../images/svg/check-no.svg) Rolling out | ![No](../images/svg/check-no.svg) In development Linux | ![No](../images/svg/check-no.svg) In development | ![No](../images/svg/check-no.svg) In development -Mac OS | ![No](../images/svg/check-no.svg) In development | ![No](../images/svg/check-no.svg) In development +macOS | ![No](../images/svg/check-no.svg) In development | ![No](../images/svg/check-no.svg) In development Android | ![No](../images/svg/check-no.svg) On engineering backlog | ![No](../images/svg/check-no.svg) On engineering backlog iOS | ![No](../images/svg/check-no.svg) On engineering backlog | ![No](../images/svg/check-no.svg) On engineering backlog From ea93ea5f97bada546a57ad649b80bfa2b1c7347e Mon Sep 17 00:00:00 2001 From: Denise Vangel-MSFT Date: Thu, 7 Jan 2021 15:03:07 -0800 Subject: [PATCH 418/486] Update utilize-microsoft-cloud-protection-microsoft-defender-antivirus.md --- ...e-microsoft-cloud-protection-microsoft-defender-antivirus.md | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/windows/security/threat-protection/microsoft-defender-antivirus/utilize-microsoft-cloud-protection-microsoft-defender-antivirus.md b/windows/security/threat-protection/microsoft-defender-antivirus/utilize-microsoft-cloud-protection-microsoft-defender-antivirus.md index da103c7192..b0a598436f 100644 --- a/windows/security/threat-protection/microsoft-defender-antivirus/utilize-microsoft-cloud-protection-microsoft-defender-antivirus.md +++ b/windows/security/threat-protection/microsoft-defender-antivirus/utilize-microsoft-cloud-protection-microsoft-defender-antivirus.md @@ -21,7 +21,7 @@ ms.custom: nextgen **Applies to:** -- Microsoft Defender Antivirus +- [Microsoft Defender for Endpoint](https://go.microsoft.com/fwlink/p/?linkid=2146631) Microsoft next-generation technologies in Microsoft Defender Antivirus provide near-instant, automated protection against new and emerging threats. To dynamically identify new threats, these technologies work with large sets of interconnected data in the Microsoft Intelligent Security Graph and powerful artificial intelligence (AI) systems driven by advanced machine learning models. From 1d2dcd86fa81c9e180615e1233a5ddb222ebda77 Mon Sep 17 00:00:00 2001 From: Denise Vangel-MSFT Date: Thu, 7 Jan 2021 15:28:08 -0800 Subject: [PATCH 419/486] Update manage-updates-baselines-microsoft-defender-antivirus.md --- ...tes-baselines-microsoft-defender-antivirus.md | 16 +++++++++++++++- 1 file changed, 15 insertions(+), 1 deletion(-) diff --git a/windows/security/threat-protection/microsoft-defender-antivirus/manage-updates-baselines-microsoft-defender-antivirus.md b/windows/security/threat-protection/microsoft-defender-antivirus/manage-updates-baselines-microsoft-defender-antivirus.md index 1b9cc2aad0..cd30c7318d 100644 --- a/windows/security/threat-protection/microsoft-defender-antivirus/manage-updates-baselines-microsoft-defender-antivirus.md +++ b/windows/security/threat-protection/microsoft-defender-antivirus/manage-updates-baselines-microsoft-defender-antivirus.md @@ -13,7 +13,7 @@ ms.author: deniseb ms.custom: nextgen ms.reviewer: pahuijbr manager: dansimp -ms.date: 01/06/2021 +ms.date: 01/07/2021 --- # Manage Microsoft Defender Antivirus updates and apply baselines @@ -387,6 +387,20 @@ We recommend updating your Windows 10 (Enterprise, Pro, and Home editions), Wind For more information, see [Microsoft Defender update for Windows operating system installation images](https://support.microsoft.com/help/4568292/defender-update-for-windows-operating-system-installation-images).
    +1.1.2101.02 + + Package version: **1.1.2101.02** + Platform version: **4.18.2011.6** + Engine version: **1.17700.4** + Signature version: **1.329.1796.0** + +### Fixes +- None + +### Additional information +- None +
    +
    1.1.2012.01  Package version: **1.1.2012.01** From 382f6671f37e1b372ddf193b163026e6cfe81d52 Mon Sep 17 00:00:00 2001 From: Denise Vangel-MSFT Date: Thu, 7 Jan 2021 15:29:02 -0800 Subject: [PATCH 420/486] Update manage-updates-baselines-microsoft-defender-antivirus.md --- .../manage-updates-baselines-microsoft-defender-antivirus.md | 1 - 1 file changed, 1 deletion(-) diff --git a/windows/security/threat-protection/microsoft-defender-antivirus/manage-updates-baselines-microsoft-defender-antivirus.md b/windows/security/threat-protection/microsoft-defender-antivirus/manage-updates-baselines-microsoft-defender-antivirus.md index cd30c7318d..b0d94c4785 100644 --- a/windows/security/threat-protection/microsoft-defender-antivirus/manage-updates-baselines-microsoft-defender-antivirus.md +++ b/windows/security/threat-protection/microsoft-defender-antivirus/manage-updates-baselines-microsoft-defender-antivirus.md @@ -355,7 +355,6 @@ When this update is installed, the device needs the jump package 4.10.2001.10 to ## Microsoft Defender Antivirus platform support Platform and engine updates are provided on a monthly cadence. To be fully supported, keep current with the latest platform updates. Our support structure is dynamic, evolving into two phases depending on the availability of the latest platform version: - - **Security and Critical Updates servicing phase** - When running the latest platform version, you will be eligible to receive both Security and Critical updates to the anti-malware platform. - **Technical Support (Only) phase** - After a new platform version is released, support for older versions (N-2) will reduce to technical support only. Platform versions older than N-2 will no longer be supported.* From 1dc25a2dc52b8d2d932ad3a83b8cd97d06a739c0 Mon Sep 17 00:00:00 2001 From: Joey Caparas Date: Thu, 7 Jan 2021 15:51:47 -0800 Subject: [PATCH 421/486] add link to onboarding video --- .../microsoft-defender-atp/onboarding.md | 9 +++++++++ 1 file changed, 9 insertions(+) diff --git a/windows/security/threat-protection/microsoft-defender-atp/onboarding.md b/windows/security/threat-protection/microsoft-defender-atp/onboarding.md index 5cbe6e5c30..bdcafd18a1 100644 --- a/windows/security/threat-protection/microsoft-defender-atp/onboarding.md +++ b/windows/security/threat-protection/microsoft-defender-atp/onboarding.md @@ -43,6 +43,15 @@ These are the steps you need to take to deploy Defender for Endpoint: ## Step 1: Onboard endpoints using any of the supported management tools The [Plan deployment](deployment-strategy.md) topic outlines the general steps you need to take to deploy Defender for Endpoint. + +Watch this video for a quick overview of the onboarding process and learn about the available tools and methods. +
    +
    + +> [!VIDEO https://www.microsoft.com/en-us/videoplayer/embed/RE4bGqr] + + + After identifying your architecture, you'll need to decide which deployment method to use. The deployment tool you choose influences how you onboard endpoints to the service. ### Onboarding tool options From 6c9cf28542a96b25c59d2d1571ff7371553ac46d Mon Sep 17 00:00:00 2001 From: "Trond B. Krokli" <38162891+illfated@users.noreply.github.com> Date: Fri, 8 Jan 2021 01:27:31 +0100 Subject: [PATCH 422/486] Update enable-exploit-protection.md From issue ticket #8927 (**No such property as TerminateOnHeapError**): > In the list of properties used for different security exploit settings for the cmdlets, the properties to be set for 'Validate heap integrity' is labeled wrong. > > | Validate heap integrity | System and app-level | TerminateOnHeapError | Audit not available | > > **The property 'TerminateOnHeapError' doesn't exist for Heap. It should be TerminateOnError.** Thanks to dennisl68-castra for noticing and reporting this incorrect term variant. Changes proposed: - Change "TerminateOnHeapError" to 'TerminateOnError' Whitespace changes: - Add recommended minimum cell divider spacing to the MarkDown table cells - Align table dividing row cell dividers with the table title row cell dividers - Add editorial line between footnote mark [2] and second last H2 (##) heading Closes #8927 Ref. old PR #4351 from July 5, 2019 (before Windows Defender Exploit Guard was changed or retired) --- .../enable-exploit-protection.md | 53 ++++++++++--------- 1 file changed, 27 insertions(+), 26 deletions(-) diff --git a/windows/security/threat-protection/microsoft-defender-atp/enable-exploit-protection.md b/windows/security/threat-protection/microsoft-defender-atp/enable-exploit-protection.md index 7b1c044a64..cb9f2e13d1 100644 --- a/windows/security/threat-protection/microsoft-defender-atp/enable-exploit-protection.md +++ b/windows/security/threat-protection/microsoft-defender-atp/enable-exploit-protection.md @@ -54,8 +54,8 @@ You can also set mitigations to [audit mode](evaluate-exploit-protection.md). Au 3. Go to **Program settings** and choose the app you want to apply mitigations to.
    - If the app you want to configure is already listed, click it and then click **Edit**. - If the app is not listed, at the top of the list click **Add program to customize** and then choose how you want to add the app.
    - - Use **Add by program name** to have the mitigation applied to any running process with that name. You must specify a file with an extension. You can enter a full path to limit the mitigation to only the app with that name in that location. - - Use **Choose exact file path** to use a standard Windows Explorer file picker window to find and select the file you want. + - Use **Add by program name** to have the mitigation applied to any running process with that name. You must specify a file with an extension. You can enter a full path to limit the mitigation to only the app with that name in that location. + - Use **Choose exact file path** to use a standard Windows Explorer file picker window to find and select the file you want. 4. After selecting the app, you'll see a list of all the mitigations that can be applied. Choosing **Audit** will apply the mitigation in audit mode only. You are notified if you need to restart the process or app, or if you need to restart Windows. @@ -114,7 +114,7 @@ The result will be that DEP will be enabled for *test.exe*. DEP will not be enab 3. Name the profile, choose **Windows 10 and later** and **Endpoint protection**.
    ![Create endpoint protection profile](../images/create-endpoint-protection-profile.png)
    -4. Click **Configure** > **Windows Defender Exploit Guard** > **Exploit protection**. +4. Click **Configure** > **Windows Defender Exploit Guard** > **Exploit protection**. 5. Upload an [XML file](https://docs.microsoft.com/windows/client-management/mdm/policy-csp-exploitguard) with the exploit protection settings:
    ![Enable network protection in Intune](../images/enable-ep-intune.png)
    @@ -209,29 +209,29 @@ Set-Processmitigation -Name test.exe -Remove -Disable DEP This table lists the PowerShell cmdlets (and associated audit mode cmdlet) that can be used to configure each mitigation. -|Mitigation | Applies to | PowerShell cmdlets | Audit mode cmdlet | -|:---|:---|:---|:---| -|Control flow guard (CFG) | System and app-level | CFG, StrictCFG, SuppressExports | Audit not available | -|Data Execution Prevention (DEP) | System and app-level | DEP, EmulateAtlThunks | Audit not available | -|Force randomization for images (Mandatory ASLR) | System and app-level | ForceRelocateImages | Audit not available | -|Randomize memory allocations (Bottom-Up ASLR) | System and app-level | BottomUp, HighEntropy | Audit not available -|Validate exception chains (SEHOP) | System and app-level | SEHOP, SEHOPTelemetry | Audit not available -|Validate heap integrity | System and app-level | TerminateOnHeapError | Audit not available -|Arbitrary code guard (ACG) | App-level only | DynamicCode | AuditDynamicCode -|Block low integrity images | App-level only | BlockLowLabel | AuditImageLoad -|Block remote images | App-level only | BlockRemoteImages | Audit not available -|Block untrusted fonts | App-level only | DisableNonSystemFonts | AuditFont, FontAuditOnly -|Code integrity guard | App-level only | BlockNonMicrosoftSigned, AllowStoreSigned | AuditMicrosoftSigned, AuditStoreSigned -|Disable extension points | App-level only | ExtensionPoint | Audit not available -|Disable Win32k system calls | App-level only | DisableWin32kSystemCalls | AuditSystemCall -|Do not allow child processes | App-level only | DisallowChildProcessCreation | AuditChildProcess -|Export address filtering (EAF) | App-level only | EnableExportAddressFilterPlus, EnableExportAddressFilter     \[1\] | Audit not available\[2\] | -|Import address filtering (IAF) | App-level only | EnableImportAddressFilter | Audit not available\[2\] | -|Simulate execution (SimExec) | App-level only | EnableRopSimExec | Audit not available\[2\] | -|Validate API invocation (CallerCheck) | App-level only | EnableRopCallerCheck | Audit not available\[2\] | -|Validate handle usage | App-level only | StrictHandle | Audit not available | -|Validate image dependency integrity | App-level only | EnforceModuleDepencySigning | Audit not available | -|Validate stack integrity (StackPivot) | App-level only | EnableRopStackPivot | Audit not available\[2\] | +| Mitigation | Applies to | PowerShell cmdlets | Audit mode cmdlet | +| :--------- | :--------- | :----------------- | :---------------- | +| Control flow guard (CFG) | System and app-level | CFG, StrictCFG, SuppressExports | Audit not available | +| Data Execution Prevention (DEP) | System and app-level | DEP, EmulateAtlThunks | Audit not available | +| Force randomization for images (Mandatory ASLR) | System and app-level | ForceRelocateImages | Audit not available | +| Randomize memory allocations (Bottom-Up ASLR) | System and app-level | BottomUp, HighEntropy | Audit not available +| Validate exception chains (SEHOP) | System and app-level | SEHOP, SEHOPTelemetry | Audit not available | +| Validate heap integrity | System and app-level | TerminateOnError | Audit not available | +| Arbitrary code guard (ACG) | App-level only | DynamicCode | AuditDynamicCode | +| Block low integrity images | App-level only | BlockLowLabel | AuditImageLoad | +| Block remote images | App-level only | BlockRemoteImages | Audit not available | +| Block untrusted fonts | App-level only | DisableNonSystemFonts | AuditFont, FontAuditOnly | +| Code integrity guard | App-level only | BlockNonMicrosoftSigned, AllowStoreSigned | AuditMicrosoftSigned, AuditStoreSigned | +| Disable extension points | App-level only | ExtensionPoint | Audit not available | +| Disable Win32k system calls | App-level only | DisableWin32kSystemCalls | AuditSystemCall | +| Do not allow child processes | App-level only | DisallowChildProcessCreation | AuditChildProcess | +| Export address filtering (EAF) | App-level only | EnableExportAddressFilterPlus, EnableExportAddressFilter \[1\] | Audit not available\[2\] | +| Import address filtering (IAF) | App-level only | EnableImportAddressFilter | Audit not available\[2\] | +| Simulate execution (SimExec) | App-level only | EnableRopSimExec | Audit not available\[2\] | +| Validate API invocation (CallerCheck) | App-level only | EnableRopCallerCheck | Audit not available\[2\] | +| Validate handle usage | App-level only | StrictHandle | Audit not available | +| Validate image dependency integrity | App-level only | EnforceModuleDepencySigning | Audit not available | +| Validate stack integrity (StackPivot) | App-level only | EnableRopStackPivot | Audit not available\[2\] | \[1\]: Use the following format to enable EAF modules for DLLs for a process: @@ -239,6 +239,7 @@ This table lists the PowerShell cmdlets (and associated audit mode cmdlet) that Set-ProcessMitigation -Name processName.exe -Enable EnableExportAddressFilterPlus -EAFModules dllName1.dll,dllName2.dll ``` \[2\]: Audit for this mitigation is not available via Powershell cmdlets. + ## Customize the notification See the [Windows Security](../windows-defender-security-center/windows-defender-security-center.md#customize-notifications-from-the-windows-defender-security-center) topic for more information about customizing the notification when a rule is triggered and blocks an app or file. From 22a2aaed3a53254cad33114b48768ac2a43003f3 Mon Sep 17 00:00:00 2001 From: "Trond B. Krokli" <38162891+illfated@users.noreply.github.com> Date: Fri, 8 Jan 2021 01:59:20 +0100 Subject: [PATCH 423/486] Ticket #8926 (Table of PowerShell cmdlets isn't) > "This table lists the PowerShell cmdlets" doesn't list the cmdlets (there are only three). > The column marked PowerShell cmdlets seems to refer to property names. Current table description text: "This table lists the PowerShell cmdlets (and associated audit mode cmdlet) that can be used to configure each mitigation." **Suggested description:** This table lists the individual **Mitigations** (and **Audits**, when available) to be used with the `-Enable` or `-Disable` cmdlet parameters. Closes #8926 --- .../microsoft-defender-atp/enable-exploit-protection.md | 6 +++--- 1 file changed, 3 insertions(+), 3 deletions(-) diff --git a/windows/security/threat-protection/microsoft-defender-atp/enable-exploit-protection.md b/windows/security/threat-protection/microsoft-defender-atp/enable-exploit-protection.md index cb9f2e13d1..8fe52a9432 100644 --- a/windows/security/threat-protection/microsoft-defender-atp/enable-exploit-protection.md +++ b/windows/security/threat-protection/microsoft-defender-atp/enable-exploit-protection.md @@ -207,10 +207,10 @@ If you need to restore the mitigation back to the system default, you need to in Set-Processmitigation -Name test.exe -Remove -Disable DEP ``` -This table lists the PowerShell cmdlets (and associated audit mode cmdlet) that can be used to configure each mitigation. +This table lists the individual **Mitigations** (and **Audits**, when available) to be used with the `-Enable` or `-Disable` cmdlet parameters. -| Mitigation | Applies to | PowerShell cmdlets | Audit mode cmdlet | -| :--------- | :--------- | :----------------- | :---------------- | +| Mitigation type | Applies to | Mitigation cmdlet parameter keyword | Audit mode cmdlet parameter | +| :-------------- | :--------- | :---------------------------------- | :-------------------------- | | Control flow guard (CFG) | System and app-level | CFG, StrictCFG, SuppressExports | Audit not available | | Data Execution Prevention (DEP) | System and app-level | DEP, EmulateAtlThunks | Audit not available | | Force randomization for images (Mandatory ASLR) | System and app-level | ForceRelocateImages | Audit not available | From a6b6fb7504436fdb26503baadf99034da0e358de Mon Sep 17 00:00:00 2001 From: VARADHARAJAN K <3296790+RAJU2529@users.noreply.github.com> Date: Fri, 8 Jan 2021 07:15:27 +0530 Subject: [PATCH 424/486] added admx templates link for windows 10 20h2 as per user report #8922 , so i added admx templates link for windows 10 20h2 --- ...unwanted-apps-microsoft-defender-antivirus.md | 16 +++++++++------- 1 file changed, 9 insertions(+), 7 deletions(-) diff --git a/windows/security/threat-protection/microsoft-defender-antivirus/detect-block-potentially-unwanted-apps-microsoft-defender-antivirus.md b/windows/security/threat-protection/microsoft-defender-antivirus/detect-block-potentially-unwanted-apps-microsoft-defender-antivirus.md index cb05c08abe..73b0e26503 100644 --- a/windows/security/threat-protection/microsoft-defender-antivirus/detect-block-potentially-unwanted-apps-microsoft-defender-antivirus.md +++ b/windows/security/threat-protection/microsoft-defender-antivirus/detect-block-potentially-unwanted-apps-microsoft-defender-antivirus.md @@ -110,19 +110,21 @@ For System Center 2012 Configuration Manager, see [How to Deploy Potentially Unw #### Use Group Policy to configure PUA protection -1. On your Group Policy management computer, open the [Group Policy Management Console](https://docs.microsoft.com/previous-versions/windows/it-pro/windows-server-2008-R2-and-2008/cc731212(v=ws.11)), right-click the Group Policy Object you want to configure, and select **Edit**. +1. First download and install [Administrative Templates (.admx) for Windows 10 October 2020 Update (20H2)](https://www.microsoft.com/download/details.aspx?id=102157) -2. In the **Group Policy Management Editor**, go to **Computer configuration** and select **Administrative templates**. +2. On your Group Policy management computer, open the [Group Policy Management Console](https://docs.microsoft.com/previous-versions/windows/it-pro/windows-server-2008-R2-and-2008/cc731212(v=ws.11)), right-click the Group Policy Object you want to configure, and select **Edit**. -3. Expand the tree to **Windows Components** > **Microsoft Defender Antivirus**. +3. In the **Group Policy Management Editor**, go to **Computer configuration** and select **Administrative templates**. -4. Double-click **Configure detection for potentially unwanted applications**. +4. Expand the tree to **Windows Components** > **Microsoft Defender Antivirus**. -5. Select **Enabled** to enable PUA protection. +5. Double-click **Configure detection for potentially unwanted applications**. -6. In **Options**, select **Block** to block potentially unwanted applications, or select **Audit Mode** to test how the setting will work in your environment. Select **OK**. +6. Select **Enabled** to enable PUA protection. -7. Deploy your Group Policy object as you usually do. +7. In **Options**, select **Block** to block potentially unwanted applications, or select **Audit Mode** to test how the setting will work in your environment. Select **OK**. + +8. Deploy your Group Policy object as you usually do. #### Use PowerShell cmdlets to configure PUA protection From 1bac573680eca1f8f8856b85e0aedb5eb942a1b8 Mon Sep 17 00:00:00 2001 From: Denise Vangel-MSFT Date: Fri, 8 Jan 2021 09:39:32 -0800 Subject: [PATCH 425/486] Update detect-block-potentially-unwanted-apps-microsoft-defender-antivirus.md --- ...ck-potentially-unwanted-apps-microsoft-defender-antivirus.md | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/windows/security/threat-protection/microsoft-defender-antivirus/detect-block-potentially-unwanted-apps-microsoft-defender-antivirus.md b/windows/security/threat-protection/microsoft-defender-antivirus/detect-block-potentially-unwanted-apps-microsoft-defender-antivirus.md index 73b0e26503..2e9a3babb4 100644 --- a/windows/security/threat-protection/microsoft-defender-antivirus/detect-block-potentially-unwanted-apps-microsoft-defender-antivirus.md +++ b/windows/security/threat-protection/microsoft-defender-antivirus/detect-block-potentially-unwanted-apps-microsoft-defender-antivirus.md @@ -11,7 +11,7 @@ author: denisebmsft ms.author: deniseb ms.custom: nextgen audience: ITPro -ms.date: 11/30/2020 +ms.date: 01/08/2021 ms.reviewer: manager: dansimp --- From 9841d91419757ca722fdd55cdb356b6d9c91384f Mon Sep 17 00:00:00 2001 From: Denise Vangel-MSFT Date: Fri, 8 Jan 2021 09:41:20 -0800 Subject: [PATCH 426/486] Update detect-block-potentially-unwanted-apps-microsoft-defender-antivirus.md --- ...wanted-apps-microsoft-defender-antivirus.md | 18 ++++++++++-------- 1 file changed, 10 insertions(+), 8 deletions(-) diff --git a/windows/security/threat-protection/microsoft-defender-antivirus/detect-block-potentially-unwanted-apps-microsoft-defender-antivirus.md b/windows/security/threat-protection/microsoft-defender-antivirus/detect-block-potentially-unwanted-apps-microsoft-defender-antivirus.md index 2e9a3babb4..9be1ca37a3 100644 --- a/windows/security/threat-protection/microsoft-defender-antivirus/detect-block-potentially-unwanted-apps-microsoft-defender-antivirus.md +++ b/windows/security/threat-protection/microsoft-defender-antivirus/detect-block-potentially-unwanted-apps-microsoft-defender-antivirus.md @@ -110,21 +110,23 @@ For System Center 2012 Configuration Manager, see [How to Deploy Potentially Unw #### Use Group Policy to configure PUA protection -1. First download and install [Administrative Templates (.admx) for Windows 10 October 2020 Update (20H2)](https://www.microsoft.com/download/details.aspx?id=102157) +1. Download and install [Administrative Templates (.admx) for Windows 10 October 2020 Update (20H2)](https://www.microsoft.com/download/details.aspx?id=102157) -2. On your Group Policy management computer, open the [Group Policy Management Console](https://docs.microsoft.com/previous-versions/windows/it-pro/windows-server-2008-R2-and-2008/cc731212(v=ws.11)), right-click the Group Policy Object you want to configure, and select **Edit**. +2. On your Group Policy management computer, open the [Group Policy Management Console](https://docs.microsoft.com/previous-versions/windows/it-pro/windows-server-2008-R2-and-2008/cc731212(v=ws.11)). -3. In the **Group Policy Management Editor**, go to **Computer configuration** and select **Administrative templates**. +3. Select the Group Policy Object you want to configure, and then choose **Edit**. -4. Expand the tree to **Windows Components** > **Microsoft Defender Antivirus**. +4. In the **Group Policy Management Editor**, go to **Computer configuration** and select **Administrative templates**. -5. Double-click **Configure detection for potentially unwanted applications**. +5. Expand the tree to **Windows Components** > **Microsoft Defender Antivirus**. -6. Select **Enabled** to enable PUA protection. +6. Double-click **Configure detection for potentially unwanted applications**. -7. In **Options**, select **Block** to block potentially unwanted applications, or select **Audit Mode** to test how the setting will work in your environment. Select **OK**. +7. Select **Enabled** to enable PUA protection. -8. Deploy your Group Policy object as you usually do. +8. In **Options**, select **Block** to block potentially unwanted applications, or select **Audit Mode** to test how the setting will work in your environment. Select **OK**. + +9. Deploy your Group Policy object as you usually do. #### Use PowerShell cmdlets to configure PUA protection From 2e7e01b0ae18ed40d1c6b0a5506e51e258197957 Mon Sep 17 00:00:00 2001 From: Denise Vangel-MSFT Date: Fri, 8 Jan 2021 09:43:28 -0800 Subject: [PATCH 427/486] Update enable-exploit-protection.md --- .../microsoft-defender-atp/enable-exploit-protection.md | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/windows/security/threat-protection/microsoft-defender-atp/enable-exploit-protection.md b/windows/security/threat-protection/microsoft-defender-atp/enable-exploit-protection.md index 8fe52a9432..6af9be7d68 100644 --- a/windows/security/threat-protection/microsoft-defender-atp/enable-exploit-protection.md +++ b/windows/security/threat-protection/microsoft-defender-atp/enable-exploit-protection.md @@ -47,7 +47,7 @@ You can also set mitigations to [audit mode](evaluate-exploit-protection.md). Au ## Windows Security app -1. Open the Windows Security app by clicking the shield icon in the task bar or searching the start menu for **Defender**. +1. Open the Windows Security app by clicking the shield icon in the task bar or searching the start menu for **Security**. 2. Click the **App & browser control** tile (or the app icon on the left menu bar) and then click **Exploit protection settings**. From f556d65b446200c395df9087b5e3a12645fb3513 Mon Sep 17 00:00:00 2001 From: Denise Vangel-MSFT Date: Fri, 8 Jan 2021 09:46:11 -0800 Subject: [PATCH 428/486] Update enable-exploit-protection.md --- .../enable-exploit-protection.md | 22 ++++++++----------- 1 file changed, 9 insertions(+), 13 deletions(-) diff --git a/windows/security/threat-protection/microsoft-defender-atp/enable-exploit-protection.md b/windows/security/threat-protection/microsoft-defender-atp/enable-exploit-protection.md index 6af9be7d68..c015175767 100644 --- a/windows/security/threat-protection/microsoft-defender-atp/enable-exploit-protection.md +++ b/windows/security/threat-protection/microsoft-defender-atp/enable-exploit-protection.md @@ -30,14 +30,13 @@ manager: dansimp Many features from the Enhanced Mitigation Experience Toolkit (EMET) are included in exploit protection. -You can enable each mitigation separately by using any of these methods: - -* [Windows Security app](#windows-security-app) -* [Microsoft Intune](#intune) -* [Mobile Device Management (MDM)](#mdm) -* [Microsoft Endpoint Configuration Manager](#microsoft-endpoint-configuration-manager) -* [Group Policy](#group-policy) -* [PowerShell](#powershell) +You can enable each mitigation separately by using any of these methods: +- [Windows Security app](#windows-security-app) +- [Microsoft Intune](#intune) +- [Mobile Device Management (MDM)](#mdm) +- [Microsoft Endpoint Configuration Manager](#microsoft-endpoint-configuration-manager) +- [Group Policy](#group-policy) +- [PowerShell](#powershell) Exploit protection is configured by default in Windows 10. You can set each mitigation to on, off, or to its default value. Some mitigations have additional options. @@ -160,11 +159,8 @@ Get-ProcessMitigation -Name processName.exe > [!IMPORTANT] > System-level mitigations that have not been configured will show a status of `NOTSET`. -> -> For system-level settings, `NOTSET` indicates the default setting for that mitigation has been applied. -> -> For app-level settings, `NOTSET` indicates the system-level setting for the mitigation will be applied. -> +> - For system-level settings, `NOTSET` indicates the default setting for that mitigation has been applied. +> - For app-level settings, `NOTSET` indicates the system-level setting for the mitigation will be applied. > The default setting for each system-level mitigation can be seen in the Windows Security. Use `Set` to configure each mitigation in the following format: From e1b5c852b3ad22d351b96c9be83f1a63278f8e0c Mon Sep 17 00:00:00 2001 From: Tina Burden Date: Fri, 8 Jan 2021 09:59:09 -0800 Subject: [PATCH 429/486] added file name extension lines 66 74 131 --- windows/privacy/manage-windows-20H2-endpoints.md | 6 +++--- 1 file changed, 3 insertions(+), 3 deletions(-) diff --git a/windows/privacy/manage-windows-20H2-endpoints.md b/windows/privacy/manage-windows-20H2-endpoints.md index 57c2ce989d..d449b47b4c 100644 --- a/windows/privacy/manage-windows-20H2-endpoints.md +++ b/windows/privacy/manage-windows-20H2-endpoints.md @@ -63,7 +63,7 @@ The following methodology was used to derive these network endpoints: |||HTTPS|s-ring.msedge.net| |Device authentication|||[Learn how to turn off traffic to all of the following endpoint(s).](manage-connections-from-windows-operating-system-components-to-microsoft-services.md#bkmk-priv-feedback)| ||The following endpoint is used to authenticate a device. If you turn off traffic for this endpoint, the device will not be authenticated.|HTTPS|login.live.com*| -|Device metadata|The following endpoint is used to retrieve device metadata. If you turn off traffic for this endpoint, metadata will not be updated for the device.||[Learn how to turn off traffic to all of the following endpoint(s).](manage-connections-from-windows-operating-system-components-to-microsoft-services#4-device-metadata-retrieval)| +|Device metadata|The following endpoint is used to retrieve device metadata. If you turn off traffic for this endpoint, metadata will not be updated for the device.||[Learn how to turn off traffic to all of the following endpoint(s).](manage-connections-from-windows-operating-system-components-to-microsoft-services.md#4-device-metadata-retrieval)| |||HTTP|dmd.metaservices.microsoft.com| |Diagnostic Data|The following endpoints are used by the Connected User Experiences and Telemetry component and connects to the Microsoft Data Management service. If you turn off traffic for this endpoint, diagnostic and usage information, which helps Microsoft find and fix problems and improve our products and services, will not be sent back to Microsoft. ||[Learn how to turn off traffic to all of the following endpoint(s).](manage-connections-from-windows-operating-system-components-to-microsoft-services.md#bkmk-priv-feedback)| |||TLSv1.2/HTTPS/HTTP|v10.events.data.microsoft.com| @@ -71,7 +71,7 @@ The following methodology was used to derive these network endpoints: |||HTTP|www.microsoft.com| ||The following endpoints are used by Windows Error Reporting. To turn off traffic for these endpoints, enable the following Group Policy: Administrative Templates > Windows Components > Windows Error Reporting > Disable Windows Error Reporting. This means error reporting information will not be sent back to Microsoft.|TLSv1.2|telecommand.telemetry.microsoft.com| |||TLS v1.2/HTTPS/HTTP|watson.*.microsoft.com| -|Font Streaming|The following endpoints are used to download fonts on demand. If you turn off traffic for these endpoints, you will not be able to download fonts on demand.||[Learn how to turn off traffic to all of the following endpoint(s).](manage-connections-from-windows-operating-system-components-to-microsoft-services#6-font-streaming)| +|Font Streaming|The following endpoints are used to download fonts on demand. If you turn off traffic for these endpoints, you will not be able to download fonts on demand.||[Learn how to turn off traffic to all of the following endpoint(s).](manage-connections-from-windows-operating-system-components-to-microsoft-services.md#6-font-streaming)| |||HTTPS|fs.microsoft.com| |Licensing|The following endpoint is used for online activation and some app licensing. To turn off traffic for this endpoint, disable the Windows License Manager Service. This will also block online activation and app licensing may not work.||[Learn how to turn off traffic to all of the following endpoint(s).](manage-connections-from-windows-operating-system-components-to-microsoft-services.md#9-license-manager)| |||TLSv1.2/HTTPS/HTTP|licensing.mp.microsoft.com| @@ -128,7 +128,7 @@ The following methodology was used to derive these network endpoints: |||TLSv1.2/HTTPS/HTTP|*.update.microsoft.com| ||The following endpoint is used for compatibility database updates for Windows.|HTTPS|adl.windows.com| ||The following endpoint is used for content regulation. If you turn off traffic for this endpoint, the Windows Update Agent will be unable to contact the endpoint and fallback behavior will be used. This may result in content being either incorrectly downloaded or not downloaded at all.|TLSv1.2/HTTPS/HTTP|tsfe.trafficshaping.dsp.mp.microsoft.com| -|Xbox Live|The following endpoint is used for Xbox Live.||[Learn how to turn off traffic to all of the following endpoint(s).](manage-connections-from-windows-operating-system-components-to-microsoft-services#26-microsoft-store)| +|Xbox Live|The following endpoint is used for Xbox Live.||[Learn how to turn off traffic to all of the following endpoint(s).](manage-connections-from-windows-operating-system-components-to-microsoft-services.md#26-microsoft-store)| |||HTTPS|dlassets-ssl.xboxlive.com| From 3feb98073f1dd6cb03f646e9f623a95715a0a316 Mon Sep 17 00:00:00 2001 From: Thomas Date: Fri, 8 Jan 2021 10:19:23 -0800 Subject: [PATCH 430/486] Update customize-exploit-protection.md update links --- .../customize-exploit-protection.md | 50 +++++++++---------- 1 file changed, 25 insertions(+), 25 deletions(-) diff --git a/windows/security/threat-protection/microsoft-defender-atp/customize-exploit-protection.md b/windows/security/threat-protection/microsoft-defender-atp/customize-exploit-protection.md index 964158b256..3c72846e6a 100644 --- a/windows/security/threat-protection/microsoft-defender-atp/customize-exploit-protection.md +++ b/windows/security/threat-protection/microsoft-defender-atp/customize-exploit-protection.md @@ -48,27 +48,27 @@ For the associated PowerShell cmdlets for each mitigation, see the [PowerShell r | Mitigation | Description | Can be applied to | Audit mode available | | ---------- | ----------- | ----------------- | -------------------- | -| Control flow guard (CFG) | Ensures control flow integrity for indirect calls. Can optionally suppress exports and use strict CFG. | System and app-level | [!include[Check mark no](../images/svg/check-no.svg)] | -| Data Execution Prevention (DEP) | Prevents code from being run from data-only memory pages such as the heap and stacks. Only configurable for 32-bit (x86) apps, permanently enabled for all other architectures. Can optionally enable ATL thunk emulation. | System and app-level | [!include[Check mark no](../images/svg/check-no.svg)] | -| Force randomization for images (Mandatory ASLR) | Forcibly relocates images not compiled with /DYNAMICBASE. Can optionally fail loading images that don't have relocation information. | System and app-level | [!include[Check mark no](../images/svg/check-no.svg)] | -| Randomize memory allocations (Bottom-Up ASLR) | Randomizes locations for virtual memory allocations. It includes system structure heaps, stacks, TEBs, and PEBs. Can optionally use a wider randomization variance for 64-bit processes. | System and app-level | [!include[Check mark no](../images/svg/check-no.svg)] | -| Validate exception chains (SEHOP) | Ensures the integrity of an exception chain during exception dispatch. Only configurable for 32-bit (x86) applications. | System and app-level | [!include[Check mark no](../images/svg/check-no.svg)] | -| Validate heap integrity | Terminates a process when heap corruption is detected. | System and app-level | [!include[Check mark no](../images/svg/check-no.svg)] | -| Arbitrary code guard (ACG) | Prevents the introduction of non-image-backed executable code and prevents code pages from being modified. Can optionally allow thread opt-out and allow remote downgrade (configurable only with PowerShell). | App-level only | [!include[Check mark yes](../images/svg/check-yes.svg)] | -| Block low integrity images | Prevents the loading of images marked with Low Integrity. | App-level only | [!include[Check mark yes](../images/svg/check-yes.svg)] | -| Block remote images | Prevents loading of images from remote devices. | App-level only | [!include[Check mark no](../images/svg/check-no.svg)] | -| Block untrusted fonts | Prevents loading any GDI-based fonts not installed in the system fonts directory, notably fonts from the web. | App-level only | [!include[Check mark yes](../images/svg/check-yes.svg)] | -| Code integrity guard | Restricts loading of images signed by Microsoft, WHQL, or higher. Can optionally allow Microsoft Store signed images. | App-level only | [!include[Check mark yes](../images/svg/check-yes.svg)] | -| Disable extension points | Disables various extensibility mechanisms that allow DLL injection into all processes, such as AppInit DLLs, window hooks, and Winsock service providers. | App-level only | [!include[Check mark no](../images/svg/check-no.svg)] | -| Disable Win32k system calls | Prevents an app from using the Win32k system call table. | App-level only | [!include[Check mark yes](../images/svg/check-yes.svg)] | -| Don't allow child processes | Prevents an app from creating child processes. | App-level only | [!include[Check mark yes](../images/svg/check-yes.svg)] | -| Export address filtering (EAF) | Detects dangerous operations being resolved by malicious code. Can optionally validate access by modules commonly used by exploits. | App-level only | [!include[Check mark yes](../images/svg/check-yes.svg)] | -| Import address filtering (IAF) | Detects dangerous operations being resolved by malicious code. | App-level only | [!include[Check mark yes](../images/svg/check-yes.svg)] | -| Simulate execution (SimExec) | Ensures that calls to sensitive APIs return to legitimate callers. Only configurable for 32-bit (x86) applications. Not compatible with ACG | App-level only | [!include[Check mark yes](../images/svg/check-yes.svg)] | -| Validate API invocation (CallerCheck) | Ensures that sensitive APIs are invoked by legitimate callers. Only configurable for 32-bit (x86) applications. Not compatible with ACG | App-level only | [!include[Check mark yes](../images/svg/check-yes.svg)] | -| Validate handle usage | Causes an exception to be raised on any invalid handle references. | App-level only | [!include[Check mark no](../images/svg/check-no.svg)] | -| Validate image dependency integrity | Enforces code signing for Windows image dependency loading. | App-level only | [!include[Check mark no](../images/svg/check-no.svg)] | -| Validate stack integrity (StackPivot) | Ensures that the stack hasn't been redirected for sensitive APIs. Not compatible with ACG | App-level only | [!include[Check mark yes](../images/svg/check-yes.svg)] | +| Control flow guard (CFG) | Ensures control flow integrity for indirect calls. Can optionally suppress exports and use strict CFG. | System and app-level | ![Check mark no](../images/svg/check-no.svg) | +| Data Execution Prevention (DEP) | Prevents code from being run from data-only memory pages such as the heap and stacks. Only configurable for 32-bit (x86) apps, permanently enabled for all other architectures. Can optionally enable ATL thunk emulation. | System and app-level | ![Check mark no](../images/svg/check-no.svg) | +| Force randomization for images (Mandatory ASLR) | Forcibly relocates images not compiled with /DYNAMICBASE. Can optionally fail loading images that don't have relocation information. | System and app-level | ![Check mark no](../images/svg/check-no.svg) | +| Randomize memory allocations (Bottom-Up ASLR) | Randomizes locations for virtual memory allocations. It includes system structure heaps, stacks, TEBs, and PEBs. Can optionally use a wider randomization variance for 64-bit processes. | System and app-level | ![Check mark no](../images/svg/check-no.svg) | +| Validate exception chains (SEHOP) | Ensures the integrity of an exception chain during exception dispatch. Only configurable for 32-bit (x86) applications. | System and app-level | ![Check mark no](../images/svg/check-no.svg) | +| Validate heap integrity | Terminates a process when heap corruption is detected. | System and app-level | ![Check mark no](../images/svg/check-no.svg) | +| Arbitrary code guard (ACG) | Prevents the introduction of non-image-backed executable code and prevents code pages from being modified. Can optionally allow thread opt-out and allow remote downgrade (configurable only with PowerShell). | App-level only | ![Check mark yes](../images/svg/check-yes.svg) | +| Block low integrity images | Prevents the loading of images marked with Low Integrity. | App-level only | ![Check mark yes](../images/svg/check-yes.svg)| +| Block remote images | Prevents loading of images from remote devices. | App-level only | ![Check mark no](../images/svg/check-no.svg | +| Block untrusted fonts | Prevents loading any GDI-based fonts not installed in the system fonts directory, notably fonts from the web. | App-level only | !include[Check mark yes](../images/svg/check-yes.svg) | +| Code integrity guard | Restricts loading of images signed by Microsoft, WHQL, or higher. Can optionally allow Microsoft Store signed images. | App-level only | ![Check mark yes](../images/svg/check-yes.svg) | +| Disable extension points | Disables various extensibility mechanisms that allow DLL injection into all processes, such as AppInit DLLs, window hooks, and Winsock service providers. | App-level only | ![Check mark no](../images/svg/check-no.svg) | +| Disable Win32k system calls | Prevents an app from using the Win32k system call table. | App-level only | ![Check mark yes](../images/svg/check-yes.svg) | +| Don't allow child processes | Prevents an app from creating child processes. | App-level only | ![Check mark yes](../images/svg/check-yes.svg) | +| Export address filtering (EAF) | Detects dangerous operations being resolved by malicious code. Can optionally validate access by modules commonly used by exploits. | App-level only | ![Check mark yes](../images/svg/check-yes.svg) | +| Import address filtering (IAF) | Detects dangerous operations being resolved by malicious code. | App-level only | ![Check mark yes](../images/svg/check-yes.svg) | +| Simulate execution (SimExec) | Ensures that calls to sensitive APIs return to legitimate callers. Only configurable for 32-bit (x86) applications. Not compatible with ACG | App-level only | ![Check mark yes](../images/svg/check-yes.svg) | +| Validate API invocation (CallerCheck) | Ensures that sensitive APIs are invoked by legitimate callers. Only configurable for 32-bit (x86) applications. Not compatible with ACG | App-level only | ![Check mark yes](../images/svg/check-yes.svg) | +| Validate handle usage | Causes an exception to be raised on any invalid handle references. | App-level only | ![Check mark no](../images/svg/check-no.svg) | +| Validate image dependency integrity | Enforces code signing for Windows image dependency loading. | App-level only | ![Check mark no](../images/svg/check-no.svg) | +| Validate stack integrity (StackPivot) | Ensures that the stack hasn't been redirected for sensitive APIs. Not compatible with ACG | App-level only | ![Check mark yes](../images/svg/check-yes.svg) | > [!IMPORTANT] > If you add an app to the **Program settings** section and configure individual mitigation settings there, they will be honored above the configuration for the same mitigations specified in the **System settings** section. The following matrix and examples help to illustrate how defaults work: @@ -76,10 +76,10 @@ For the associated PowerShell cmdlets for each mitigation, see the [PowerShell r > > | Enabled in **Program settings** | Enabled in **System settings** | Behavior | > | ------------------------------- | ------------------------------ | -------- | -> | [!include[Check mark yes](../images/svg/check-yes.svg)] | [!include[Check mark no](../images/svg/check-no.svg)] | As defined in **Program settings** | -> | [!include[Check mark yes](../images/svg/check-yes.svg)] | [!include[Check mark yes](../images/svg/check-yes.svg)] | As defined in **Program settings** | -> | [!include[Check mark no](../images/svg/check-no.svg)] | [!include[Check mark yes](../images/svg/check-yes.svg)] | As defined in **System settings** | -> | [!include[Check mark no](../images/svg/check-no.svg)] | [!include[Check mark yes](../images/svg/check-yes.svg)] | Default as defined in **Use default** option | +> | ![Check mark yes](../images/svg/check-yes.svg) | ![Check mark no](../images/svg/check-no.svg) | As defined in **Program settings** | +> | ![Check mark yes](../images/svg/check-yes.svg) | ![Check mark yes](../images/svg/check-yes.svg) | As defined in **Program settings** | +> | ![Check mark no](../images/svg/check-no.svg) | ![Check mark yes](../images/svg/check-yes.svg) | As defined in **System settings** | +> | ![Check mark no](../images/svg/check-no.svg) | ![Check mark yes](../images/svg/check-yes.svg) | Default as defined in **Use default** option | > > > From ad73f161db7095f445502d8f7bbb1dc1e058b961 Mon Sep 17 00:00:00 2001 From: Thomas Date: Fri, 8 Jan 2021 10:21:55 -0800 Subject: [PATCH 431/486] Update enable-exploit-protection.md update links --- .../microsoft-defender-atp/enable-exploit-protection.md | 8 ++++---- 1 file changed, 4 insertions(+), 4 deletions(-) diff --git a/windows/security/threat-protection/microsoft-defender-atp/enable-exploit-protection.md b/windows/security/threat-protection/microsoft-defender-atp/enable-exploit-protection.md index c015175767..91a6dc887a 100644 --- a/windows/security/threat-protection/microsoft-defender-atp/enable-exploit-protection.md +++ b/windows/security/threat-protection/microsoft-defender-atp/enable-exploit-protection.md @@ -71,10 +71,10 @@ If you add an app to the **Program settings** section and configure individual m |Enabled in **Program settings** | Enabled in **System settings** | Behavior | |:---|:---|:---| -|[!include[Check mark yes](../images/svg/check-yes.svg)] | [!include[Check mark no](../images/svg/check-no.svg)] | As defined in **Program settings** | -|[!include[Check mark yes](../images/svg/check-yes.svg)] | [!include[Check mark yes](../images/svg/check-yes.svg)] | As defined in **Program settings** | -|[!include[Check mark no](../images/svg/check-no.svg)] | [!include[Check mark yes](../images/svg/check-yes.svg)] | As defined in **System settings** | -|[!include[Check mark no](../images/svg/check-no.svg)] | [!include[Check mark yes](../images/svg/check-yes.svg)] | Default as defined in **Use default** option | +|![Check mark yes](../images/svg/check-yes.svg) | ![Check mark no](../images/svg/check-no.svg) | As defined in **Program settings** | +|![Check mark yes](../images/svg/check-yes.svg) | ![Check mark yes](../images/svg/check-yes.svg) | As defined in **Program settings** | +|![Check mark no](../images/svg/check-no.svg) | ![Check mark yes](../images/svg/check-yes.svg) | As defined in **System settings** | +|![Check mark no](../images/svg/check-no.svg) | ![Check mark yes](../images/svg/check-yes.svg) | Default as defined in **Use default** option | ### Example 1: Mikael configures Data Execution Prevention in system settings section to be off by default From da5b55e02a6238dae3042b348ec186ffe45932ad Mon Sep 17 00:00:00 2001 From: Denise Vangel-MSFT Date: Fri, 8 Jan 2021 10:36:11 -0800 Subject: [PATCH 432/486] Update attack-surface-reduction.md --- .../microsoft-defender-atp/attack-surface-reduction.md | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/windows/security/threat-protection/microsoft-defender-atp/attack-surface-reduction.md b/windows/security/threat-protection/microsoft-defender-atp/attack-surface-reduction.md index 6224bb44dc..822248f510 100644 --- a/windows/security/threat-protection/microsoft-defender-atp/attack-surface-reduction.md +++ b/windows/security/threat-protection/microsoft-defender-atp/attack-surface-reduction.md @@ -14,7 +14,7 @@ ms.author: deniseb ms.reviewer: sugamar, jcedola manager: dansimp ms.custom: asr -ms.date: 12/10/2020 +ms.date: 01/08/2021 --- # Use attack surface reduction rules to prevent malware infection From 34939f9bc55c5f9880bd01b93d3d635137b1508c Mon Sep 17 00:00:00 2001 From: Denise Vangel-MSFT Date: Fri, 8 Jan 2021 10:36:45 -0800 Subject: [PATCH 433/486] Update attack-surface-reduction.md --- .../microsoft-defender-atp/attack-surface-reduction.md | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/windows/security/threat-protection/microsoft-defender-atp/attack-surface-reduction.md b/windows/security/threat-protection/microsoft-defender-atp/attack-surface-reduction.md index 822248f510..bc606abd44 100644 --- a/windows/security/threat-protection/microsoft-defender-atp/attack-surface-reduction.md +++ b/windows/security/threat-protection/microsoft-defender-atp/attack-surface-reduction.md @@ -468,4 +468,4 @@ GUID: `c1db55ab-c21a-4637-bb3f-a12568109d35` - [Evaluate attack surface reduction rules](evaluate-attack-surface-reduction.md) -- [Compatibility of Microsoft Defender with other antivirus/antimalware](../microsoft-defender-antivirus/microsoft-defender-antivirus-compatibility.md) +- [Compatibility of Microsoft Defender Antivirus with other antivirus/antimalware solutions](../microsoft-defender-antivirus/microsoft-defender-antivirus-compatibility.md) From 28fcf74b43190e649ce3140c622765482be83a32 Mon Sep 17 00:00:00 2001 From: "Trond B. Krokli" <38162891+illfated@users.noreply.github.com> Date: Sat, 9 Jan 2021 17:33:49 +0100 Subject: [PATCH 434/486] Credential Guard: Windows 10 Enterprise required From issue ticket #8935 (**clarify enterprise sku**): > based on the discussion here #4025, the following confirmation from MSRC 61355 and the resulting PR #8435 - > > could this page also be updated to specifically list "Windows 10 Enterprise" in the requirements list, to avoid confusion from Windows 10 Pro/Home? Thanks to @rrsit for noticing and reporting the lack of clarity in this document. Changes proposed: - State _specifically_ that Credential Guard _supports_ and _requires_ Windows 10 **Enterprise** - Dictionary correction: "writeable" => 'writable' (2 occurrences; the 2017 table Description text, ending Note blob) Closes #8935 --- .../credential-guard/credential-guard-requirements.md | 6 +++--- 1 file changed, 3 insertions(+), 3 deletions(-) diff --git a/windows/security/identity-protection/credential-guard/credential-guard-requirements.md b/windows/security/identity-protection/credential-guard/credential-guard-requirements.md index 2e56e0803c..6768635d8f 100644 --- a/windows/security/identity-protection/credential-guard/credential-guard-requirements.md +++ b/windows/security/identity-protection/credential-guard/credential-guard-requirements.md @@ -20,7 +20,7 @@ ms.reviewer: ## Applies to -- Windows 10 +- Windows 10 Enterprise - Windows Server 2016 For Windows Defender Credential Guard to provide protection, the computers you are protecting must meet certain baseline hardware, firmware, and software requirements, which we will refer to as [Hardware and software requirements](#hardware-and-software-requirements). Additionally, Windows Defender Credential Guard blocks specific authentication capabilities, so applications that require such capabilities will break. We will refer to these requirements as [Application requirements](#application-requirements). Beyond these requirements, computers can meet additional hardware and firmware qualifications, and receive additional protections. Those computers will be more hardened against certain threats. For detailed information on baseline protections, plus protections for improved security that are associated with hardware and firmware options available in 2015, 2016, and 2017, refer to the tables in [Security Considerations](#security-considerations). @@ -135,7 +135,7 @@ The following table lists qualifications for Windows 10, version 1703, which are |Protections for Improved Security|Description|Security Benefits |---|---|---| -|Firmware: **VBS enablement of No-Execute (NX) protection for UEFI runtime services**|**Requirements**:
    - VBS will enable NX protection on UEFI runtime service code and data memory regions. UEFI runtime service code must support read-only page protections, and UEFI runtime service data must not be executable. UEFI runtime service must meet these requirements:
    - Implement UEFI 2.6 EFI_MEMORY_ATTRIBUTES_TABLE. All UEFI runtime service memory (code and data) must be described by this table.
    - PE sections must be page-aligned in memory (not required for in non-volatile storage).
    - The Memory Attributes Table needs to correctly mark code and data as RO/NX for configuration by the OS:
    - All entries must include attributes EFI_MEMORY_RO, EFI_MEMORY_XP, or both.
    - No entries may be left with neither of the above attributes, indicating memory that is both executable and writable. Memory must be either readable and executable or writeable and non-executable.
    (**SEE IMPORTANT INFORMATION AFTER THIS TABLE**)|Vulnerabilities in UEFI runtime, if any, will be blocked from compromising VBS (such as in functions like UpdateCapsule and SetVariable)
    - Reduces the attack surface to VBS from system firmware.| +|Firmware: **VBS enablement of No-Execute (NX) protection for UEFI runtime services**|**Requirements**:
    - VBS will enable NX protection on UEFI runtime service code and data memory regions. UEFI runtime service code must support read-only page protections, and UEFI runtime service data must not be executable. UEFI runtime service must meet these requirements:
    - Implement UEFI 2.6 EFI_MEMORY_ATTRIBUTES_TABLE. All UEFI runtime service memory (code and data) must be described by this table.
    - PE sections must be page-aligned in memory (not required for in non-volatile storage).
    - The Memory Attributes Table needs to correctly mark code and data as RO/NX for configuration by the OS:
    - All entries must include attributes EFI_MEMORY_RO, EFI_MEMORY_XP, or both.
    - No entries may be left with neither of the above attributes, indicating memory that is both executable and writable. Memory must be either readable and executable or writable and non-executable.
    (**SEE IMPORTANT INFORMATION AFTER THIS TABLE**)|Vulnerabilities in UEFI runtime, if any, will be blocked from compromising VBS (such as in functions like UpdateCapsule and SetVariable)
    - Reduces the attack surface to VBS from system firmware.| |Firmware: **Firmware support for SMM protection**|**Requirements**:
    - The [Windows SMM Security Mitigations Table (WSMT) specification](https://download.microsoft.com/download/1/8/A/18A21244-EB67-4538-BAA2-1A54E0E490B6/WSMT.docx) contains details of an ACPI table that was created for use with Windows operating systems that support Windows virtualization-based security (VBS) features.|- Protects against potential vulnerabilities in UEFI runtime services, if any, will be blocked from compromising VBS (such as in functions like UpdateCapsule and SetVariable)
    - Reduces the attack surface to VBS from system firmware.
    - Blocks additional security attacks against SMM.| > [!IMPORTANT] @@ -148,7 +148,7 @@ The following table lists qualifications for Windows 10, version 1703, which are > > Please also note the following: > -> - Do not use sections that are both writeable and executable +> - Do not use sections that are both writable and executable > > - Do not attempt to directly modify executable system memory > From 821c2ac0c367f9eba6f3c51bb5b494816c942d8e Mon Sep 17 00:00:00 2001 From: MatiG Date: Mon, 11 Jan 2021 14:31:09 +0200 Subject: [PATCH 435/486] change log level to debug --- .../microsoft-defender-atp/linux-resources.md | 8 ++++++-- 1 file changed, 6 insertions(+), 2 deletions(-) diff --git a/windows/security/threat-protection/microsoft-defender-atp/linux-resources.md b/windows/security/threat-protection/microsoft-defender-atp/linux-resources.md index 3b12f36855..2fc939ef09 100644 --- a/windows/security/threat-protection/microsoft-defender-atp/linux-resources.md +++ b/windows/security/threat-protection/microsoft-defender-atp/linux-resources.md @@ -36,20 +36,23 @@ If you can reproduce a problem, first increase the logging level, run the system 1. Increase logging level: ```bash - mdatp log level set --level verbose + mdatp log level set --level debug ``` + ```Output Log level configured successfully ``` 2. Reproduce the problem. -3. Run the following command to back up Defender for Endpoint's logs. The files will be stored inside of a .zip archive. +3. Run the following command to back up Defender for Endpoint's logs. The files will be stored inside of a .zip archive. ```bash sudo mdatp diagnostic create ``` + This command will also print out the file path to the backup after the operation succeeds: + ```Output Diagnostic file created: ``` @@ -59,6 +62,7 @@ If you can reproduce a problem, first increase the logging level, run the system ```bash mdatp log level set --level info ``` + ```Output Log level configured successfully ``` From f0f90ce9d474af605fc0786ecfab269ce0b6ec63 Mon Sep 17 00:00:00 2001 From: MatiG Date: Mon, 11 Jan 2021 14:45:52 +0200 Subject: [PATCH 436/486] adding edr cli documentation --- .../microsoft-defender-atp/linux-resources.md | 4 ++++ 1 file changed, 4 insertions(+) diff --git a/windows/security/threat-protection/microsoft-defender-atp/linux-resources.md b/windows/security/threat-protection/microsoft-defender-atp/linux-resources.md index 2fc939ef09..fa1b975d62 100644 --- a/windows/security/threat-protection/microsoft-defender-atp/linux-resources.md +++ b/windows/security/threat-protection/microsoft-defender-atp/linux-resources.md @@ -128,6 +128,10 @@ The following table lists commands for some of the most common scenarios. Run `m |Quarantine management |Add a file detected as a threat to the quarantine |`mdatp threat quarantine add --id [threat-id]` | |Quarantine management |Remove a file detected as a threat from the quarantine |`mdatp threat quarantine remove --id [threat-id]` | |Quarantine management |Restore a file from the quarantine |`mdatp threat quarantine restore --id [threat-id]` | +|Endpoint Detection and Response |Set early preview (unused) |`mdatp edr early-preview [enable|disable]` | +|Endpoint Detection and Response |Set group-id |`mdatp edr group-ids --group-id [group-id]` | +|Endpoint Detection and Response |Set/Remove tag, only `GROUP` supported |`mdatp edr tag set --name GROUP --value [tag]` | +|Endpoint Detection and Response |list exclusions (root) |`mdatp edr exclusion list [processes|paths|extensions|all]` | ## Microsoft Defender for Endpoint portal information From 3609c8cf1b6aaeef7aa98a2d4eb95f261ede0a55 Mon Sep 17 00:00:00 2001 From: Elizabeth Ross Date: Mon, 11 Jan 2021 08:59:37 -0800 Subject: [PATCH 437/486] Update bitlocker-group-policy-settings.md Updated supported operating systems to include the ones from the previous file we redirected due to formatting issues. --- .../bitlocker/bitlocker-group-policy-settings.md | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/windows/security/information-protection/bitlocker/bitlocker-group-policy-settings.md b/windows/security/information-protection/bitlocker/bitlocker-group-policy-settings.md index f6f72e035f..1fa0d3b9e3 100644 --- a/windows/security/information-protection/bitlocker/bitlocker-group-policy-settings.md +++ b/windows/security/information-protection/bitlocker/bitlocker-group-policy-settings.md @@ -22,7 +22,7 @@ ms.custom: bitlocker **Applies to** -- Windows 10 +- Windows 10, Windows Server 2019, Windows Server 2016, Windows 8.1, and Windows Server 2012 R2 This topic for IT professionals describes the function, location, and effect of each Group Policy setting that is used to manage BitLocker Drive Encryption. From 330baaf27cdc43db275c1154478d92b6a96addcf Mon Sep 17 00:00:00 2001 From: Denise Vangel-MSFT Date: Mon, 11 Jan 2021 09:01:06 -0800 Subject: [PATCH 438/486] Update microsoft-defender-antivirus-compatibility.md --- .../microsoft-defender-antivirus-compatibility.md | 4 ++-- 1 file changed, 2 insertions(+), 2 deletions(-) diff --git a/windows/security/threat-protection/microsoft-defender-antivirus/microsoft-defender-antivirus-compatibility.md b/windows/security/threat-protection/microsoft-defender-antivirus/microsoft-defender-antivirus-compatibility.md index e2f17d8448..a487a3c18c 100644 --- a/windows/security/threat-protection/microsoft-defender-antivirus/microsoft-defender-antivirus-compatibility.md +++ b/windows/security/threat-protection/microsoft-defender-antivirus/microsoft-defender-antivirus-compatibility.md @@ -13,7 +13,7 @@ ms.author: deniseb ms.custom: nextgen ms.reviewer: pahuijbr, shwjha manager: dansimp -ms.date: 01/04/2021 +ms.date: 01/11/2021 --- # Microsoft Defender Antivirus compatibility @@ -71,7 +71,7 @@ The following table summarizes the functionality and features that are available |State |[Real-time protection](https://docs.microsoft.com/windows/security/threat-protection/microsoft-defender-antivirus/configure-real-time-protection-microsoft-defender-antivirus) and [cloud-delivered protection](https://docs.microsoft.com/windows/security/threat-protection/microsoft-defender-antivirus/enable-cloud-protection-microsoft-defender-antivirus) | [Limited periodic scanning availability](https://docs.microsoft.com/windows/security/threat-protection/microsoft-defender-antivirus/limited-periodic-scanning-microsoft-defender-antivirus) | [File scanning and detection information](https://docs.microsoft.com/windows/security/threat-protection/microsoft-defender-antivirus/customize-run-review-remediate-scans-microsoft-defender-antivirus) | [Threat remediation](https://docs.microsoft.com/windows/security/threat-protection/microsoft-defender-antivirus/configure-remediation-microsoft-defender-antivirus) | [Security intelligence updates](https://docs.microsoft.com/windows/security/threat-protection/microsoft-defender-antivirus/manage-updates-baselines-microsoft-defender-antivirus) | |--|--|--|--|--|--| |Active mode

    |Yes |No |Yes |Yes |Yes | -|Passive mode |Yes |No |Yes |Only during [scheduled or on-demand scans](https://docs.microsoft.com/windows/security/threat-protection/microsoft-defender-antivirus/scheduled-catch-up-scans-microsoft-defender-antivirus) |Yes | +|Passive mode |No |No |Yes |Only during [scheduled or on-demand scans](https://docs.microsoft.com/windows/security/threat-protection/microsoft-defender-antivirus/scheduled-catch-up-scans-microsoft-defender-antivirus) |Yes | |[EDR in block mode enabled](../microsoft-defender-atp/edr-in-block-mode.md) |No |No |Yes |Yes |Yes | |Automatic disabled mode |No |Yes |No |No |No | From 2c6833a08516d06aa067d0bb27ac08125d2c742e Mon Sep 17 00:00:00 2001 From: Ben Watt <13239035+wattbt@users.noreply.github.com> Date: Mon, 11 Jan 2021 17:09:53 +0000 Subject: [PATCH 439/486] Title text change to new naming The web page title was left still referring to Defender ATP, so updated for Defender for Endpoint. Not sure if other pages also are missing this change when the rest of the page was updated. --- .../microsoft-defender-atp/onboard-offline-machines.md | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/windows/security/threat-protection/microsoft-defender-atp/onboard-offline-machines.md b/windows/security/threat-protection/microsoft-defender-atp/onboard-offline-machines.md index e3aea210fc..0d267cf0ea 100644 --- a/windows/security/threat-protection/microsoft-defender-atp/onboard-offline-machines.md +++ b/windows/security/threat-protection/microsoft-defender-atp/onboard-offline-machines.md @@ -1,5 +1,5 @@ --- -title: Onboard devices without Internet access to Microsoft Defender ATP +title: Onboard devices without Internet access to Microsoft Defender for Endpoint ms.reviewer: description: Onboard devices without Internet access so that they can send sensor data to the Microsoft Defender ATP sensor keywords: onboard, servers, vm, on-premise, oms gateway, log analytics, azure log analytics, mma From 8b0eada3f567ea5f00ae70bf40252b3b1045bc3c Mon Sep 17 00:00:00 2001 From: Caroline Gitonga Date: Mon, 11 Jan 2021 20:23:32 +0300 Subject: [PATCH 440/486] Update diagnostic data level taxonomy Sections changed: Insider Preview builds and Feedback & diagnostics --- ...ndows-operating-system-components-to-microsoft-services.md | 4 ++-- 1 file changed, 2 insertions(+), 2 deletions(-) diff --git a/windows/privacy/manage-connections-from-windows-operating-system-components-to-microsoft-services.md b/windows/privacy/manage-connections-from-windows-operating-system-components-to-microsoft-services.md index 4c6e0b8880..b40f5823e6 100644 --- a/windows/privacy/manage-connections-from-windows-operating-system-components-to-microsoft-services.md +++ b/windows/privacy/manage-connections-from-windows-operating-system-components-to-microsoft-services.md @@ -390,7 +390,7 @@ Windows Insider Preview builds only apply to Windows 10 and are not available fo > [!NOTE] -> If you upgrade a device that is configured to minimize connections from Windows to Microsoft services (that is, a device configured for Restricted Traffic) to a Windows Insider Preview build, the Feedback & Diagnostic setting will automatically be set to **Full**. Although the diagnostic data level may initially appear as **Basic**, a few hours after the UI is refreshed or the machine is rebooted, the setting will become **Full**. +> If you upgrade a device that is configured to minimize connections from Windows to Microsoft services (that is, a device configured for Restricted Traffic) to a Windows Insider Preview build, the Feedback & Diagnostic setting will automatically be set to **Optional (Full)**. Although the diagnostic data level may initially appear as **Required (Basic)**, a few hours after the UI is refreshed or the machine is rebooted, the setting will become **Optional (Full)**. To turn off Insider Preview builds for a released version of Windows 10: @@ -1302,7 +1302,7 @@ To change how frequently **Windows should ask for my feedback**: To change the level of diagnostic and usage data sent when you **Send your device data to Microsoft**: -- Click either the **Basic** or **Full** options. +- Click either the **Required (Basic)** or **Optional (Full)** options. -or- From 650539f1d34c0dbb1a6800fd6279b293c4f7cb15 Mon Sep 17 00:00:00 2001 From: Denise Vangel-MSFT Date: Mon, 11 Jan 2021 10:23:49 -0800 Subject: [PATCH 441/486] Update microsoft-defender-antivirus-compatibility.md --- .../microsoft-defender-antivirus-compatibility.md | 7 +++++-- 1 file changed, 5 insertions(+), 2 deletions(-) diff --git a/windows/security/threat-protection/microsoft-defender-antivirus/microsoft-defender-antivirus-compatibility.md b/windows/security/threat-protection/microsoft-defender-antivirus/microsoft-defender-antivirus-compatibility.md index a487a3c18c..9f5add4dfe 100644 --- a/windows/security/threat-protection/microsoft-defender-antivirus/microsoft-defender-antivirus-compatibility.md +++ b/windows/security/threat-protection/microsoft-defender-antivirus/microsoft-defender-antivirus-compatibility.md @@ -66,7 +66,10 @@ See [Microsoft Defender Antivirus on Windows Server 2016 and 2019](microsoft-def ## Functionality and features available in each state -The following table summarizes the functionality and features that are available in each state: +The table in this section summarizes the functionality and features that are available in each state. + +> [!IMPORTANT] +> The following table is informational, and it is designed to describe the features & capabilities that are turned on or off according to whether Microsoft Defender Antivirus is in Active mode, in Passive mode, or disabled/uninstalled. Do not turn off capabilities, such as real-time protection, if you are using Microsoft Defender Antivirus in passive mode or are using EDR in block mode. |State |[Real-time protection](https://docs.microsoft.com/windows/security/threat-protection/microsoft-defender-antivirus/configure-real-time-protection-microsoft-defender-antivirus) and [cloud-delivered protection](https://docs.microsoft.com/windows/security/threat-protection/microsoft-defender-antivirus/enable-cloud-protection-microsoft-defender-antivirus) | [Limited periodic scanning availability](https://docs.microsoft.com/windows/security/threat-protection/microsoft-defender-antivirus/limited-periodic-scanning-microsoft-defender-antivirus) | [File scanning and detection information](https://docs.microsoft.com/windows/security/threat-protection/microsoft-defender-antivirus/customize-run-review-remediate-scans-microsoft-defender-antivirus) | [Threat remediation](https://docs.microsoft.com/windows/security/threat-protection/microsoft-defender-antivirus/configure-remediation-microsoft-defender-antivirus) | [Security intelligence updates](https://docs.microsoft.com/windows/security/threat-protection/microsoft-defender-antivirus/manage-updates-baselines-microsoft-defender-antivirus) | |--|--|--|--|--|--| @@ -78,7 +81,7 @@ The following table summarizes the functionality and features that are available - In Active mode, Microsoft Defender Antivirus is used as the antivirus app on the machine. All configuration made with Configuration Manager, Group Policy, Intune, or other management products will apply. Files are scanned and threats remediated, and detection information are reported in your configuration tool (such as Configuration Manager or the Microsoft Defender Antivirus app on the machine itself). - In Passive mode, Microsoft Defender Antivirus is not used as the antivirus app, and threats are not remediated by Microsoft Defender Antivirus. Files are scanned and reports are provided for threat detections that are shared with the Microsoft Defender for Endpoint service. Therefore, you might encounter alerts in the Security Center console with Microsoft Defender Antivirus as a source, even when Microsoft Defender Antivirus is in Passive mode. - When [EDR in block mode](../microsoft-defender-atp/edr-in-block-mode.md) is turned on and Microsoft Defender Antivirus is not the primary antivirus solution, it can still detect and remediate malicious items. -- When disabled, Microsoft Defender Antivirus is not used as the antivirus app. Files are not scanned and threats are not remediated. +- When disabled, Microsoft Defender Antivirus is not used as the antivirus app. Files are not scanned and threats are not remediated. Disabling/uninstalling Microsoft Defender Antivirus is not recommended. ## Keep the following points in mind From 678b19d2f03169a6448b97193e61492404788766 Mon Sep 17 00:00:00 2001 From: Denise Vangel-MSFT Date: Mon, 11 Jan 2021 10:30:27 -0800 Subject: [PATCH 442/486] Update microsoft-defender-antivirus-compatibility.md --- .../microsoft-defender-antivirus-compatibility.md | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/windows/security/threat-protection/microsoft-defender-antivirus/microsoft-defender-antivirus-compatibility.md b/windows/security/threat-protection/microsoft-defender-antivirus/microsoft-defender-antivirus-compatibility.md index 9f5add4dfe..066b363f5e 100644 --- a/windows/security/threat-protection/microsoft-defender-antivirus/microsoft-defender-antivirus-compatibility.md +++ b/windows/security/threat-protection/microsoft-defender-antivirus/microsoft-defender-antivirus-compatibility.md @@ -87,7 +87,7 @@ The table in this section summarizes the functionality and features that are ava If you are enrolled in Microsoft Defender for Endpoint and you are using a third-party antimalware product, then passive mode is enabled. [The service requires common information sharing from Microsoft Defender Antivirus service](../microsoft-defender-atp/defender-compatibility.md) in order to properly monitor your devices and network for intrusion attempts and attacks. -When Microsoft Defender Antivirus is automatically disabled, it can automatically re-enabled if the protection offered by a third-party antivirus product expires or otherwise stops providing real-time protection from viruses, malware, or other threats. This is to ensure antivirus protection is maintained on the endpoint. It also allows you to enable [limited periodic scanning](limited-periodic-scanning-microsoft-defender-antivirus.md), which uses the Microsoft Defender Antivirus engine to periodically check for threats in addition to your main antivirus app. +When Microsoft Defender Antivirus is disabled automatically, it can be re-enabled automatically if the protection offered by a non-Microsoft antivirus product expires or otherwise stops providing real-time protection from viruses, malware, or other threats. Automatic re-enabling helps to ensure that antivirus protection is maintained on your devices. It also allows you to enable [limited periodic scanning](limited-periodic-scanning-microsoft-defender-antivirus.md), which uses the Microsoft Defender Antivirus engine to periodically check for threats in addition to your main antivirus app. In passive mode, you can still [manage updates for Microsoft Defender Antivirus](manage-updates-baselines-microsoft-defender-antivirus.md); however, you can't move Microsoft Defender Antivirus into the normal active mode if your endpoints have an up-to-date third-party product providing real-time protection from malware. From a9613ad0aabbe85b8bc9c35ea8fdfe75d916b4eb Mon Sep 17 00:00:00 2001 From: Denise Vangel-MSFT Date: Mon, 11 Jan 2021 10:32:31 -0800 Subject: [PATCH 443/486] Update microsoft-defender-antivirus-compatibility.md --- .../microsoft-defender-antivirus-compatibility.md | 6 +++--- 1 file changed, 3 insertions(+), 3 deletions(-) diff --git a/windows/security/threat-protection/microsoft-defender-antivirus/microsoft-defender-antivirus-compatibility.md b/windows/security/threat-protection/microsoft-defender-antivirus/microsoft-defender-antivirus-compatibility.md index 066b363f5e..f58cdac130 100644 --- a/windows/security/threat-protection/microsoft-defender-antivirus/microsoft-defender-antivirus-compatibility.md +++ b/windows/security/threat-protection/microsoft-defender-antivirus/microsoft-defender-antivirus-compatibility.md @@ -1,7 +1,7 @@ --- title: Microsoft Defender Antivirus compatibility with other security products -description: Microsoft Defender Antivirus operates in different ways depending on what other security products you have installed, and the operating system you are using. -keywords: windows defender, atp, advanced threat protection, compatibility, passive mode +description: Get an overview of what to expect from Microsoft Defender Antivirus with other security products and the operating systems you are using. +keywords: windows defender, next-generation, atp, advanced threat protection, compatibility, passive mode search.product: eADQiWindows 10XVcnh ms.pagetype: security ms.prod: w10 @@ -11,7 +11,7 @@ ms.localizationpriority: medium author: denisebmsft ms.author: deniseb ms.custom: nextgen -ms.reviewer: pahuijbr, shwjha +ms.reviewer: tewchen, pahuijbr, shwjha manager: dansimp ms.date: 01/11/2021 --- From 41aa1b595f3897f3695d45f1ad0572b1fa3f022e Mon Sep 17 00:00:00 2001 From: Tudor Dobrila Date: Mon, 11 Jan 2021 11:19:46 -0800 Subject: [PATCH 444/486] Release notes for 101.18.53 --- .../microsoft-defender-atp/linux-resources.md | 4 ++-- .../microsoft-defender-atp/linux-whatsnew.md | 10 ++++++++++ 2 files changed, 12 insertions(+), 2 deletions(-) diff --git a/windows/security/threat-protection/microsoft-defender-atp/linux-resources.md b/windows/security/threat-protection/microsoft-defender-atp/linux-resources.md index fa1b975d62..b8e1e244b8 100644 --- a/windows/security/threat-protection/microsoft-defender-atp/linux-resources.md +++ b/windows/security/threat-protection/microsoft-defender-atp/linux-resources.md @@ -114,9 +114,9 @@ The following table lists commands for some of the most common scenarios. Run `m |Configuration |Turn off PUA protection |`mdatp threat policy set --type potentially_unwanted_application --action off` | |Configuration |Turn on audit mode for PUA protection |`mdatp threat policy set --type potentially_unwanted_application --action audit` | |Diagnostics |Change the log level |`mdatp log level set --level verbose [error|warning|info|verbose]` | -|Diagnostics |Generate diagnostic logs |`mdatp diagnostic create` | +|Diagnostics |Generate diagnostic logs |`mdatp diagnostic create --path [directory]` | |Health |Check the product's health |`mdatp health` | -|Protection |Scan a path |`mdatp scan custom --path [path]` | +|Protection |Scan a path |`mdatp scan custom --path [path] [--ignore-exclusions]` | |Protection |Do a quick scan |`mdatp scan quick` | |Protection |Do a full scan |`mdatp scan full` | |Protection |Cancel an ongoing on-demand scan |`mdatp scan cancel` | diff --git a/windows/security/threat-protection/microsoft-defender-atp/linux-whatsnew.md b/windows/security/threat-protection/microsoft-defender-atp/linux-whatsnew.md index 85ee3ab500..d769c548fd 100644 --- a/windows/security/threat-protection/microsoft-defender-atp/linux-whatsnew.md +++ b/windows/security/threat-protection/microsoft-defender-atp/linux-whatsnew.md @@ -23,6 +23,16 @@ ms.topic: conceptual [!INCLUDE [Microsoft 365 Defender rebranding](../../includes/microsoft-defender.md)] +## 101.18.53 + +- EDR for Linux is now [generally available](https://techcommunity.microsoft.com/t5/microsoft-defender-for-endpoint/edr-for-linux-is-now-is-generally-available/ba-p/2048539) +- Added a new command-line switch (`--ignore-exclusions`) to ignore AV exclusions during custom scans (`mdatp scan custom`) +- Extended `mdatp diagnostic create` with a new parameter (`--path [directory]`) that allows the diagnostic logs to be saved to a different directory +- Performance improvements & bug fixes + +## 101.12.99 + +- Performance improvements & bug fixes ## 101.04.76 From 1478980db53529a8d8ae98ccaef2ab31e13faa2d Mon Sep 17 00:00:00 2001 From: Peter Smith Date: Mon, 11 Jan 2021 11:34:53 -0800 Subject: [PATCH 445/486] Removed Lockdown as a setting for VPNv2CSP Lockdown has been removed from the VPNv2CSP code; removing it also from the docs --- windows/client-management/mdm/vpnv2-csp.md | 19 ------------------- 1 file changed, 19 deletions(-) diff --git a/windows/client-management/mdm/vpnv2-csp.md b/windows/client-management/mdm/vpnv2-csp.md index 0325decbfc..dc6cd495a9 100644 --- a/windows/client-management/mdm/vpnv2-csp.md +++ b/windows/client-management/mdm/vpnv2-csp.md @@ -281,25 +281,6 @@ Valid values: Value type is bool. Supported operations include Get, Add, Replace, and Delete. -**VPNv2/**ProfileName**/LockDown** (./Device only profile) -Lockdown profile. - -Valid values: - -- False (default) - this is not a LockDown profile. -- True - this is a LockDown profile. - -When the LockDown profile is turned on, it does the following things: - -- First, it automatically becomes an "always on" profile. -- Second, it can never be disconnected. -- Third, if the profile is not connected, then the user has no network. -- Fourth, no other profiles may be connected or modified. - -A Lockdown profile must be deleted before you can add, remove, or connect other profiles. - -Value type is bool. Supported operations include Get, Add, Replace, and Delete. - **VPNv2/**ProfileName**/DeviceTunnel** (./Device only profile) Device tunnel profile. From 8e59e45f291825c2eed5c019b36dfedde0a8d7a1 Mon Sep 17 00:00:00 2001 From: Tudor Dobrila Date: Mon, 11 Jan 2021 12:38:46 -0800 Subject: [PATCH 446/486] Add note on versions out of support --- .../threat-protection/microsoft-defender-atp/linux-whatsnew.md | 3 +++ 1 file changed, 3 insertions(+) diff --git a/windows/security/threat-protection/microsoft-defender-atp/linux-whatsnew.md b/windows/security/threat-protection/microsoft-defender-atp/linux-whatsnew.md index d769c548fd..db4c18a233 100644 --- a/windows/security/threat-protection/microsoft-defender-atp/linux-whatsnew.md +++ b/windows/security/threat-protection/microsoft-defender-atp/linux-whatsnew.md @@ -23,6 +23,9 @@ ms.topic: conceptual [!INCLUDE [Microsoft 365 Defender rebranding](../../includes/microsoft-defender.md)] +> [!IMPORTANT] +> Product versions 101.04.76 and older are nearing end of support. Customers running on version 101.04.76 or older must upgrade to a newer version of Microsoft Defender for Endpoint for Linux by February 1st, 2021. + ## 101.18.53 - EDR for Linux is now [generally available](https://techcommunity.microsoft.com/t5/microsoft-defender-for-endpoint/edr-for-linux-is-now-is-generally-available/ba-p/2048539) From db5a79e110ef77e18da095687b054ef75552df0f Mon Sep 17 00:00:00 2001 From: Elizabeth Ross Date: Mon, 11 Jan 2021 12:56:01 -0800 Subject: [PATCH 447/486] Update windows/security/information-protection/bitlocker/bitlocker-group-policy-settings.md Co-authored-by: Trond B. Krokli <38162891+illfated@users.noreply.github.com> --- .../bitlocker/bitlocker-group-policy-settings.md | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/windows/security/information-protection/bitlocker/bitlocker-group-policy-settings.md b/windows/security/information-protection/bitlocker/bitlocker-group-policy-settings.md index 1fa0d3b9e3..2bda9b48ce 100644 --- a/windows/security/information-protection/bitlocker/bitlocker-group-policy-settings.md +++ b/windows/security/information-protection/bitlocker/bitlocker-group-policy-settings.md @@ -20,7 +20,7 @@ ms.custom: bitlocker # BitLocker Group Policy settings -**Applies to** +**Applies to:** - Windows 10, Windows Server 2019, Windows Server 2016, Windows 8.1, and Windows Server 2012 R2 From 89b2ef370b1929801d7a1645dd8d9096e496377c Mon Sep 17 00:00:00 2001 From: Joey Caparas Date: Mon, 11 Jan 2021 13:04:37 -0800 Subject: [PATCH 448/486] add windows virtual desktop support --- .../microsoft-defender-atp/minimum-requirements.md | 1 + .../whats-new-in-microsoft-defender-atp.md | 5 +++++ 2 files changed, 6 insertions(+) diff --git a/windows/security/threat-protection/microsoft-defender-atp/minimum-requirements.md b/windows/security/threat-protection/microsoft-defender-atp/minimum-requirements.md index 96515f8a95..714f80adb2 100644 --- a/windows/security/threat-protection/microsoft-defender-atp/minimum-requirements.md +++ b/windows/security/threat-protection/microsoft-defender-atp/minimum-requirements.md @@ -95,6 +95,7 @@ Access to Defender for Endpoint is done through a browser, supporting the follow - Windows Server 2016 - Windows Server, version 1803 or later - Windows Server 2019 +- Windows Virtual Desktop Devices on your network must be running one of these editions. diff --git a/windows/security/threat-protection/microsoft-defender-atp/whats-new-in-microsoft-defender-atp.md b/windows/security/threat-protection/microsoft-defender-atp/whats-new-in-microsoft-defender-atp.md index 9a8ae62bdb..43382105c2 100644 --- a/windows/security/threat-protection/microsoft-defender-atp/whats-new-in-microsoft-defender-atp.md +++ b/windows/security/threat-protection/microsoft-defender-atp/whats-new-in-microsoft-defender-atp.md @@ -40,6 +40,11 @@ For more information preview features, see [Preview features](https://docs.micro > https://docs.microsoft.com/api/search/rss?search=%22Microsoft+Defender+ATP+as+well+as+security+features+in+Windows+10+and+Windows+Server.%22&locale=en-us > ``` + +## January 2021 + +- [Windows Virtual Desktop](https://azure.microsoft.com/services/virtual-desktop/)
    Microsoft Defender for Endpoint now adds support for Windows Virtual Desktop. + ## December 2020 - [Microsoft Defender for Endpoint for iOS](microsoft-defender-atp-ios.md)
    Microsoft Defender for Endpoint now adds support for iOS. Learn how to install, configure, update, and use Microsoft Defender for Endpoint for iOS. From 4d670199bb53eff8180f0af844126af53b28b4be Mon Sep 17 00:00:00 2001 From: julihooper <65675989+julihooper@users.noreply.github.com> Date: Mon, 11 Jan 2021 13:50:05 -0800 Subject: [PATCH 449/486] Update defender-csp.md adding CSP description for DisableLocalAdminMerge config. --- windows/client-management/mdm/defender-csp.md | 19 +++++++++++++++++++ 1 file changed, 19 insertions(+) diff --git a/windows/client-management/mdm/defender-csp.md b/windows/client-management/mdm/defender-csp.md index da9959c0a2..21e9063233 100644 --- a/windows/client-management/mdm/defender-csp.md +++ b/windows/client-management/mdm/defender-csp.md @@ -390,6 +390,25 @@ Intune tamper protection setting UX supports three states: When enabled or disabled exists on the client and admin moves the setting to not configured, it will not have any impact on the device state. To change the state to either enabled or disabled would require to be set explicitly. +**Configuration/DisableLocalAdminMerge**
    +This policy setting controls whether or not complex list settings configured by a local administrator are merged with managed settings. This setting applies to lists such as threats and exclusions. + +If you disable or do not configure this setting, unique items defined in preference settings configured by the local administrator will be merged into the resulting effective policy. In the case of conflicts, management settings will override preference settings. + +If you enable this setting, only items defined by management will be used in the resulting effective policy. Managed settings will override preference settings configured by the local administrator. + +**Note:** Applying this setting will not remove exclusions from the device registry, it will only prevent them from being applied/used. This is reflected in Get-MpPreference. + +Supported OS versions: Windows 10 + +The data type is integer. + +Supported operations are Add, Delete, Get, Replace. + +Valid values are: +- 1 – Enable. +- 0 (default) – Disable. + **Configuration/EnableFileHashComputation** Enables or disables file hash computation feature. When this feature is enabled Windows defender will compute hashes for files it scans. From e09556520a05b088fcd23f619c8ac8794a58d3b3 Mon Sep 17 00:00:00 2001 From: Tudor Dobrila Date: Mon, 11 Jan 2021 14:17:10 -0800 Subject: [PATCH 450/486] Revert notice pending further discussion with PM --- .../threat-protection/microsoft-defender-atp/linux-whatsnew.md | 3 --- 1 file changed, 3 deletions(-) diff --git a/windows/security/threat-protection/microsoft-defender-atp/linux-whatsnew.md b/windows/security/threat-protection/microsoft-defender-atp/linux-whatsnew.md index db4c18a233..d769c548fd 100644 --- a/windows/security/threat-protection/microsoft-defender-atp/linux-whatsnew.md +++ b/windows/security/threat-protection/microsoft-defender-atp/linux-whatsnew.md @@ -23,9 +23,6 @@ ms.topic: conceptual [!INCLUDE [Microsoft 365 Defender rebranding](../../includes/microsoft-defender.md)] -> [!IMPORTANT] -> Product versions 101.04.76 and older are nearing end of support. Customers running on version 101.04.76 or older must upgrade to a newer version of Microsoft Defender for Endpoint for Linux by February 1st, 2021. - ## 101.18.53 - EDR for Linux is now [generally available](https://techcommunity.microsoft.com/t5/microsoft-defender-for-endpoint/edr-for-linux-is-now-is-generally-available/ba-p/2048539) From 1c80371f586cc218260256c79a76499a42100f92 Mon Sep 17 00:00:00 2001 From: Gary Moore Date: Mon, 11 Jan 2021 14:46:02 -0800 Subject: [PATCH 451/486] Corrected note style --- windows/client-management/mdm/defender-csp.md | 3 ++- 1 file changed, 2 insertions(+), 1 deletion(-) diff --git a/windows/client-management/mdm/defender-csp.md b/windows/client-management/mdm/defender-csp.md index 21e9063233..37205534c5 100644 --- a/windows/client-management/mdm/defender-csp.md +++ b/windows/client-management/mdm/defender-csp.md @@ -397,7 +397,8 @@ If you disable or do not configure this setting, unique items defined in prefere If you enable this setting, only items defined by management will be used in the resulting effective policy. Managed settings will override preference settings configured by the local administrator. -**Note:** Applying this setting will not remove exclusions from the device registry, it will only prevent them from being applied/used. This is reflected in Get-MpPreference. +> [!NOTE] +> Applying this setting will not remove exclusions from the device registry, it will only prevent them from being applied/used. This is reflected in **Get-MpPreference**. Supported OS versions: Windows 10 From 708e8a2e60fc4af35a494852c7a17546fbc8ab9f Mon Sep 17 00:00:00 2001 From: Joey Caparas Date: Mon, 11 Jan 2021 15:10:26 -0800 Subject: [PATCH 452/486] last seen updates --- .../threat-protection/microsoft-defender-atp/machine.md | 2 +- .../microsoft-defender-atp/machines-view-overview.md | 2 +- 2 files changed, 2 insertions(+), 2 deletions(-) diff --git a/windows/security/threat-protection/microsoft-defender-atp/machine.md b/windows/security/threat-protection/microsoft-defender-atp/machine.md index ab02cb5c21..53bdfe131c 100644 --- a/windows/security/threat-protection/microsoft-defender-atp/machine.md +++ b/windows/security/threat-protection/microsoft-defender-atp/machine.md @@ -54,7 +54,7 @@ Property | Type | Description id | String | [machine](machine.md) identity. computerDnsName | String | [machine](machine.md) fully qualified name. firstSeen | DateTimeOffset | First date and time where the [machine](machine.md) was observed by Microsoft Defender for Endpoint. -lastSeen | DateTimeOffset | Last date and time where the [machine](machine.md) was observed by Microsoft Defender for Endpoint. +lastSeen | DateTimeOffset |Time and date of the last received full device report. A device typically sends a full report every 24 hours. osPlatform | String | Operating system platform. version | String | Operating system Version. osBuild | Nullable long | Operating system build number. diff --git a/windows/security/threat-protection/microsoft-defender-atp/machines-view-overview.md b/windows/security/threat-protection/microsoft-defender-atp/machines-view-overview.md index fae0dfc00e..efae39c258 100644 --- a/windows/security/threat-protection/microsoft-defender-atp/machines-view-overview.md +++ b/windows/security/threat-protection/microsoft-defender-atp/machines-view-overview.md @@ -28,7 +28,7 @@ ms.topic: article >Want to experience Defender for Endpoint? [Sign up for a free trial.](https://www.microsoft.com/microsoft-365/windows/microsoft-defender-atp?ocid=docs-wdatp-machinesview-abovefoldlink) -The **Devices list** shows a list of the devices in your network where alerts were generated. By default, the queue displays devices with alerts seen in the last 30 days. +The **Devices list** shows a list of the devices in your network where alerts were generated. By default, the queue displays devices seen in the last 30 days. At a glance you'll see information such as domain, risk level, OS platform, and other details for easy identification of devices most at risk. From 7a7450e0f652a6f5ee5a6246139b4612e03dd664 Mon Sep 17 00:00:00 2001 From: Denise Vangel-MSFT Date: Mon, 11 Jan 2021 15:39:05 -0800 Subject: [PATCH 453/486] Update microsoft-defender-antivirus-compatibility.md --- .../microsoft-defender-antivirus-compatibility.md | 11 +++++------ 1 file changed, 5 insertions(+), 6 deletions(-) diff --git a/windows/security/threat-protection/microsoft-defender-antivirus/microsoft-defender-antivirus-compatibility.md b/windows/security/threat-protection/microsoft-defender-antivirus/microsoft-defender-antivirus-compatibility.md index f58cdac130..d1fbec7602 100644 --- a/windows/security/threat-protection/microsoft-defender-antivirus/microsoft-defender-antivirus-compatibility.md +++ b/windows/security/threat-protection/microsoft-defender-antivirus/microsoft-defender-antivirus-compatibility.md @@ -85,16 +85,16 @@ The table in this section summarizes the functionality and features that are ava ## Keep the following points in mind -If you are enrolled in Microsoft Defender for Endpoint and you are using a third-party antimalware product, then passive mode is enabled. [The service requires common information sharing from Microsoft Defender Antivirus service](../microsoft-defender-atp/defender-compatibility.md) in order to properly monitor your devices and network for intrusion attempts and attacks. +- If you are enrolled in Microsoft Defender for Endpoint and you are using a third-party antimalware product, then passive mode is enabled. [The service requires common information sharing from Microsoft Defender Antivirus service](../microsoft-defender-atp/defender-compatibility.md) in order to properly monitor your devices and network for intrusion attempts and attacks. -When Microsoft Defender Antivirus is disabled automatically, it can be re-enabled automatically if the protection offered by a non-Microsoft antivirus product expires or otherwise stops providing real-time protection from viruses, malware, or other threats. Automatic re-enabling helps to ensure that antivirus protection is maintained on your devices. It also allows you to enable [limited periodic scanning](limited-periodic-scanning-microsoft-defender-antivirus.md), which uses the Microsoft Defender Antivirus engine to periodically check for threats in addition to your main antivirus app. +- When Microsoft Defender Antivirus is disabled automatically, it can be re-enabled automatically if the protection offered by a non-Microsoft antivirus product expires or otherwise stops providing real-time protection from viruses, malware, or other threats. Automatic re-enabling helps to ensure that antivirus protection is maintained on your devices. It also allows you to enable [limited periodic scanning](limited-periodic-scanning-microsoft-defender-antivirus.md), which uses the Microsoft Defender Antivirus engine to periodically check for threats in addition to your main antivirus app. -In passive mode, you can still [manage updates for Microsoft Defender Antivirus](manage-updates-baselines-microsoft-defender-antivirus.md); however, you can't move Microsoft Defender Antivirus into the normal active mode if your endpoints have an up-to-date third-party product providing real-time protection from malware. +- When Microsoft Defender Antivirus is in passive mode, you can still [manage updates for Microsoft Defender Antivirus](manage-updates-baselines-microsoft-defender-antivirus.md); however, you can't move Microsoft Defender Antivirus into active mode if your devices have an up-to-date, non-Microsoft antivirus product providing real-time protection from malware. -If you uninstall the other product, and choose to use Microsoft Defender Antivirus to provide protection to your endpoints, Microsoft Defender Antivirus will automatically return to its normal active mode. + If you uninstall the non-Microsoft antivirus product, and use Microsoft Defender Antivirus to provide protection to your devices, Microsoft Defender Antivirus will return to its normal active mode automatically. > [!WARNING] -> You should not attempt to disable, stop, or modify any of the associated services used by Microsoft Defender Antivirus, Microsoft Defender for Endpoint, or the Windows Security app. This includes the *wscsvc*, *SecurityHealthService*, *MsSense*, *Sense*, *WinDefend*, or *MsMpEng* services and process. Manually modifying these services can cause severe instability on your endpoints and open your network to infections and attacks. It can also cause problems when using third-party antivirus apps and how their information is displayed in the [Windows Security app](microsoft-defender-security-center-antivirus.md). +> Do not disable, stop, or modify any of the associated services that are used by Microsoft Defender Antivirus, Microsoft Defender for Endpoint, or the Windows Security app. This includes the *wscsvc*, *SecurityHealthService*, *MsSense*, *Sense*, *WinDefend*, or *MsMpEng* services and processes. Manually modifying these services can cause severe instability on your devices and can make your network vulnerable. Disabling, stopping, or modifying those services can also cause problems when using non-Microsoft antivirus solutions and how their information is displayed in the [Windows Security app](microsoft-defender-security-center-antivirus.md). ## See also @@ -103,5 +103,4 @@ If you uninstall the other product, and choose to use Microsoft Defender Antivir - [Microsoft Defender Antivirus on Windows Server 2016 and 2019](microsoft-defender-antivirus-on-windows-server-2016.md) - [EDR in block mode](../microsoft-defender-atp/edr-in-block-mode.md) - [Configure Endpoint Protection](https://docs.microsoft.com/mem/configmgr/protect/deploy-use/endpoint-protection-configure) -- [Configure Endpoint Protection on a standalone client](https://docs.microsoft.com/mem/configmgr/protect/deploy-use/endpoint-protection-configure-standalone-client) - [Learn about Microsoft 365 Endpoint data loss prevention](https://docs.microsoft.com/microsoft-365/compliance/endpoint-dlp-learn-about) From bd675d72c5f6b59b8699f473ca28cd1a60a2b9a8 Mon Sep 17 00:00:00 2001 From: Joey Caparas Date: Mon, 11 Jan 2021 15:51:45 -0800 Subject: [PATCH 454/486] delete page --- .openpublishing.redirection.json | 5 ++ .../get-machinegroups-collection.md | 89 ------------------- 2 files changed, 5 insertions(+), 89 deletions(-) delete mode 100644 windows/security/threat-protection/microsoft-defender-atp/get-machinegroups-collection.md diff --git a/.openpublishing.redirection.json b/.openpublishing.redirection.json index 9e3480430e..0cf060785e 100644 --- a/.openpublishing.redirection.json +++ b/.openpublishing.redirection.json @@ -1534,6 +1534,11 @@ "source_path": "windows/security/threat-protection/windows-defender-atp/get-machinegroups-collection.md", "redirect_url": "https://docs.microsoft.com/windows/security/threat-protection/microsoft-defender-atp/get-machinegroups-collection", "redirect_document_id": true + }, + { + "source_path": "windows/security/threat-protection/microsoft-defender-atp/get-machinegroups-collection.md", + "redirect_url": "https://docs.microsoft.com/windows/security/threat-protection/microsoft-defender-atp/exposed-apis-list", + "redirect_document_id": false }, { "source_path": "windows/security/threat-protection/windows-defender-atp/get-machinesecuritystates-collection-windows-defender-advanced-threat-protection.md", diff --git a/windows/security/threat-protection/microsoft-defender-atp/get-machinegroups-collection.md b/windows/security/threat-protection/microsoft-defender-atp/get-machinegroups-collection.md deleted file mode 100644 index 925103b0d1..0000000000 --- a/windows/security/threat-protection/microsoft-defender-atp/get-machinegroups-collection.md +++ /dev/null @@ -1,89 +0,0 @@ ---- -title: Get RBAC machine groups collection API -description: Learn how to use the Get KB collection API to retrieve a collection of RBAC device groups in Microsoft Defender Advanced Threat Protection. -keywords: apis, graph api, supported apis, get, RBAC, group -search.product: eADQiWindows 10XVcnh -search.appverid: met150 -ms.prod: w10 -ms.mktglfcycl: deploy -ms.sitesec: library -ms.pagetype: security -ms.author: leonidzh -author: mjcaparas -ms.localizationpriority: medium -manager: dansimp -audience: ITPro -ms.collection: M365-security-compliance -ms.topic: article -ms.date: 10/07/2018 ---- - -# Get KB collection API - -[!INCLUDE [Microsoft 365 Defender rebranding](../../includes/microsoft-defender.md)] - - -**Applies to:** [Microsoft Defender for Endpoint](https://go.microsoft.com/fwlink/p/?linkid=2146631) - -- Want to experience Microsoft Defender for Endpoint? [Sign up for a free trial.](https://www.microsoft.com/microsoft-365/windows/microsoft-defender-atp?ocid=docs-wdatp-exposedapis-abovefoldlink) - -[!include[Microsoft Defender for Endpoint API URIs for US Government](../../includes/microsoft-defender-api-usgov.md)] - -[!include[Improve request performance](../../includes/improve-request-performance.md)] - - -Retrieves a collection of RBAC device groups. - -## Permissions -User needs read permissions. - -## HTTP request -``` -GET /testwdatppreview/machinegroups -``` - -## Request headers - -Header | Value -:---|:--- -Authorization | Bearer {token}. **Required**. -Content type | application/json - -## Request body -Empty - -## Response -If successful - 200 OK. - -## Example - -**Request** - -Here is an example of the request. - -``` -GET https://graph.microsoft.com/testwdatppreview/machinegroups -Content-type: application/json -``` - -**Response** - -Here is an example of the response. -Field id contains device group **id** and equal to field **rbacGroupId** in devices info. -Field **ungrouped** is true only for one group for all devices that have not been assigned to any group. This group as usual has name "UnassignedGroup". - -``` -HTTP/1.1 200 OK -Content-type: application/json -{ - "@odata.context":"https://graph.microsoft.com/testwdatppreview/$metadata#MachineGroups", - "@odata.count":7, - "value":[ - { - "id":86, - "name":"UnassignedGroup", - "description":"", - "ungrouped":true}, - … -} -``` From 70bfcd4ce48432ceba03373a03ad7a47dcc45714 Mon Sep 17 00:00:00 2001 From: schmurky Date: Tue, 12 Jan 2021 13:19:27 +0800 Subject: [PATCH 455/486] changed ATP to Endpoint --- .../microsoft-defender-atp/investigate-files.md | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/windows/security/threat-protection/microsoft-defender-atp/investigate-files.md b/windows/security/threat-protection/microsoft-defender-atp/investigate-files.md index a9e415015a..940312a02f 100644 --- a/windows/security/threat-protection/microsoft-defender-atp/investigate-files.md +++ b/windows/security/threat-protection/microsoft-defender-atp/investigate-files.md @@ -20,7 +20,7 @@ ms.topic: article ms.date: 04/24/2018 --- -# Investigate a file associated with a Microsoft Defender ATP alert +# Investigate a file associated with a Microsoft Defender for Endpoint alert [!INCLUDE [Microsoft 365 Defender rebranding](../../includes/microsoft-defender.md)] From c4fa84e1dc3620c144718bc29780aa8bcdf697b9 Mon Sep 17 00:00:00 2001 From: Tudor Dobrila Date: Mon, 11 Jan 2021 21:58:03 -0800 Subject: [PATCH 456/486] Add release notes for MDEP for Mac 101.19.21 --- .../threat-protection/microsoft-defender-atp/mac-whatsnew.md | 4 ++++ 1 file changed, 4 insertions(+) diff --git a/windows/security/threat-protection/microsoft-defender-atp/mac-whatsnew.md b/windows/security/threat-protection/microsoft-defender-atp/mac-whatsnew.md index 692a50914e..4f5d0daced 100644 --- a/windows/security/threat-protection/microsoft-defender-atp/mac-whatsnew.md +++ b/windows/security/threat-protection/microsoft-defender-atp/mac-whatsnew.md @@ -29,6 +29,10 @@ ms.topic: conceptual > [!IMPORTANT] > Support for macOS 10.13 (High Sierra) will be discontinued on February 15th, 2021. +## 101.19.21 + +- Bug fixes + ## 101.15.26 - Improved the reliability of the agent when running on macOS 11 Big Sur From 7073288e7ecb0c5b166e4dacf48db018e8ae861f Mon Sep 17 00:00:00 2001 From: amirsc3 <42802974+amirsc3@users.noreply.github.com> Date: Tue, 12 Jan 2021 14:51:51 +0200 Subject: [PATCH 457/486] Update live-response.md fixed missing command in the example --- .../threat-protection/microsoft-defender-atp/live-response.md | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/windows/security/threat-protection/microsoft-defender-atp/live-response.md b/windows/security/threat-protection/microsoft-defender-atp/live-response.md index 193c067a32..df1251aaec 100644 --- a/windows/security/threat-protection/microsoft-defender-atp/live-response.md +++ b/windows/security/threat-protection/microsoft-defender-atp/live-response.md @@ -186,7 +186,7 @@ Here are some examples: |Command |What it does | |---------|---------| -|`"C:\windows\some_file.exe" &` |Starts downloading a file named *some_file.exe* in the background. | +|`Download "C:\windows\some_file.exe" &` |Starts downloading a file named *some_file.exe* in the background. | |`fg 1234` |Returns a download with command ID *1234* to the foreground. | From 4228e205afdb313a4c91bcc1a72d3cf56a9eae1b Mon Sep 17 00:00:00 2001 From: Jeff Borsecnik <36546697+jborsecnik@users.noreply.github.com> Date: Tue, 12 Jan 2021 08:44:55 -0800 Subject: [PATCH 458/486] fix pre-existing typo "behaviours" --- .../microsoft-defender-atp/investigate-files.md | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/windows/security/threat-protection/microsoft-defender-atp/investigate-files.md b/windows/security/threat-protection/microsoft-defender-atp/investigate-files.md index 940312a02f..3ac5eb62bb 100644 --- a/windows/security/threat-protection/microsoft-defender-atp/investigate-files.md +++ b/windows/security/threat-protection/microsoft-defender-atp/investigate-files.md @@ -1,6 +1,6 @@ --- title: Investigate Microsoft Defender Advanced Threat Protection files -description: Use the investigation options to get details on files associated with alerts, behaviours, or events. +description: Use the investigation options to get details on files associated with alerts, behaviors, or events. keywords: investigate, investigation, file, malicious activity, attack motivation, deep analysis, deep analysis report search.product: eADQiWindows 10XVcnh search.appverid: met150 From e89aa7b54a4b532f16bcc9baf35ebd3df4d1a2b2 Mon Sep 17 00:00:00 2001 From: Matthew Palko Date: Tue, 12 Jan 2021 10:07:54 -0800 Subject: [PATCH 459/486] update face authentication areas for masks --- .../hello-for-business/hello-biometrics-in-enterprise.md | 6 +++++- .../identity-protection/hello-for-business/hello-faq.yml | 8 ++++++-- 2 files changed, 11 insertions(+), 3 deletions(-) diff --git a/windows/security/identity-protection/hello-for-business/hello-biometrics-in-enterprise.md b/windows/security/identity-protection/hello-for-business/hello-biometrics-in-enterprise.md index 01dffaef6d..c7680c8fe3 100644 --- a/windows/security/identity-protection/hello-for-business/hello-biometrics-in-enterprise.md +++ b/windows/security/identity-protection/hello-for-business/hello-biometrics-in-enterprise.md @@ -15,7 +15,7 @@ manager: dansimp ms.collection: M365-identity-device-management ms.topic: article localizationpriority: medium -ms.date: 03/05/2020 +ms.date: 01/12/2021 --- # Windows Hello biometrics in the enterprise @@ -81,6 +81,10 @@ To allow facial recognition, you must have devices with integrated special infra - Effective, real world FRR with Anti-spoofing or liveness detection: <10% +> [!NOTE] +>Windows Hello face authentication does not currently support wearing a mask during enrollment or authentication. Wearing a mask to enroll is a security concern because other users wearing a similar mask may be able to unlock you device. The product group is aware of this behavior and is investigating this topic further. Please remove a mask if you are wearing one when you enroll or unlock with Windows Hello face authentication. If your working environment doesn’t allow you to remove a mask temporarily, please consider unenrolling from face authentication and only using PIN or fingerprint. + + ## Related topics - [Windows Hello for Business](hello-identity-verification.md) - [How Windows Hello for Business works](hello-how-it-works.md) diff --git a/windows/security/identity-protection/hello-for-business/hello-faq.yml b/windows/security/identity-protection/hello-for-business/hello-faq.yml index aae7b07f4a..d7a41ce150 100644 --- a/windows/security/identity-protection/hello-for-business/hello-faq.yml +++ b/windows/security/identity-protection/hello-for-business/hello-faq.yml @@ -14,7 +14,7 @@ metadata: ms.collection: M365-identity-device-management ms.topic: article localizationpriority: medium - ms.date: 08/19/2018 + ms.date: 01/12/2021 ms.reviewer: title: Windows Hello for Business Frequently Asked Questions (FAQ) @@ -137,7 +137,11 @@ sections: - question: Can I use both a PIN and biometrics to unlock my device? answer: | Starting in Windows 10, version 1709, you can use multi-factor unlock to require users to provide an additional factor to unlock their device. Authentication remains two-factor, but another factor is required before Windows allows the user to reach the desktop. To learn more, see [Multifactor Unlock](feature-multifactor-unlock.md). - + + - question: Can I wear a mask to enroll or unlock using Windows Hello face authentication? + answer: | + Wearing a mask to enroll is a security concern because other users wearing a similar mask may be able to unlock you device. The product group is aware of this behavior and is investigating this topic further. Please remove a mask if you are wearing one when you enroll or unlock with Windows Hello face authentication. If your working environment doesn’t allow you to remove a mask temporarily, please consider unenrolling from face authentication and only using PIN or fingerprint. + - question: What's the difference between Windows Hello and Windows Hello for Business? answer: | Windows Hello represents the biometric framework provided in Windows 10. Windows Hello lets users use biometrics to sign in to their devices by securely storing their user name and password and releasing it for authentication when the user successfully identifies themselves using biometrics. Windows Hello for Business uses asymmetric keys protected by the device's security module that requires a user gesture (PIN or biometrics) to authenticate. From 86bed88682697c4f85e3fa2f4daa8f3dede89f31 Mon Sep 17 00:00:00 2001 From: Jeff Borsecnik <36546697+jborsecnik@users.noreply.github.com> Date: Tue, 12 Jan 2021 10:45:02 -0800 Subject: [PATCH 460/486] Update hello-biometrics-in-enterprise.md regards --> regard per Acrolinx --- .../hello-for-business/hello-biometrics-in-enterprise.md | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/windows/security/identity-protection/hello-for-business/hello-biometrics-in-enterprise.md b/windows/security/identity-protection/hello-for-business/hello-biometrics-in-enterprise.md index c7680c8fe3..d0857ccd72 100644 --- a/windows/security/identity-protection/hello-for-business/hello-biometrics-in-enterprise.md +++ b/windows/security/identity-protection/hello-for-business/hello-biometrics-in-enterprise.md @@ -53,7 +53,7 @@ The biometric data used to support Windows Hello is stored on the local device o ## Has Microsoft set any device requirements for Windows Hello? We've been working with the device manufacturers to help ensure a high-level of performance and protection is met by each sensor and device, based on these requirements: -- **False Accept Rate (FAR).** Represents the instance a biometric identification solution verifies an unauthorized person. This is normally represented as a ratio of number of instances in a given population size, for example 1 in 100 000. This can also be represented as a percentage of occurrence, for example, 0.001%. This measurement is heavily considered the most important with regards to the security of the biometric algorithm. +- **False Accept Rate (FAR).** Represents the instance a biometric identification solution verifies an unauthorized person. This is normally represented as a ratio of number of instances in a given population size, for example 1 in 100 000. This can also be represented as a percentage of occurrence, for example, 0.001%. This measurement is heavily considered the most important with regard to the security of the biometric algorithm. - **False Reject Rate (FRR).** Represents the instances a biometric identification solution fails to verify an authorized person correctly. Usually represented as a percentage, the sum of the True Accept Rate and False Reject Rate is 1. Can be with or without anti-spoofing or liveness detection. From a88fc360e88d4663857949ff7bf93c36932e35ed Mon Sep 17 00:00:00 2001 From: Matthew Palko Date: Tue, 12 Jan 2021 12:04:19 -0800 Subject: [PATCH 461/486] update hybrid cert trust adfs scope note --- .../hello-hybrid-cert-whfb-settings-adfs.md | 11 +++++++---- 1 file changed, 7 insertions(+), 4 deletions(-) diff --git a/windows/security/identity-protection/hello-for-business/hello-hybrid-cert-whfb-settings-adfs.md b/windows/security/identity-protection/hello-for-business/hello-hybrid-cert-whfb-settings-adfs.md index 8a9763ebcd..f301ec009c 100644 --- a/windows/security/identity-protection/hello-for-business/hello-hybrid-cert-whfb-settings-adfs.md +++ b/windows/security/identity-protection/hello-for-business/hello-hybrid-cert-whfb-settings-adfs.md @@ -65,14 +65,17 @@ Sign-in a domain controller or management workstation with _Domain Admin_ equiva 7. Restart the AD FS server. > [!NOTE] ->For AD FS 2019, if Windows Hello for Business with a Hybrid Certificate trust is performed, a known PRT issue exists. You may encounter this error in ADFS Admin event logs: Received invalid Oauth request. The client 'NAME' is forbidden to access the resource with scope 'ugs'. To remediate this error: +> For AD FS 2019, if Windows Hello for Business with a Hybrid Certificate trust is performed, a known PRT issue exists. You may encounter this error in ADFS Admin event logs: Received invalid Oauth request. The client 'NAME' is forbidden to access the resource with scope 'ugs'. To remediate this error: > > 1. Launch AD FS management console. Browse to "Services > Scope Descriptions". > 2. Right click "Scope Descriptions" and select "Add Scope Description". > 3. Under name type "ugs" and Click Apply > OK. -> 4. Launch Powershell as Administrator. -> 5. Execute the command "Get-AdfsApplicationPermission". Look for the ScopeNames :{openid, aza} that has the ClientRoleIdentifier is equal to 38aa3b87-a06d-4817-b275-7a316988d93b and make a note of the ObjectIdentifier. -> 6. Execute the command "Set-AdfsApplicationPermission -TargetIdentifier -AddScope 'ugs'. +> 4. Launch PowerShell as an administrator. +> 5. Get the ObjectIdentifier of the application permission with the ClientRoleIdentifier parameter equal to "38aa3b87-a06d-4817-b275-7a316988d93b": +> ```PowerShell +> (Get-AdfsApplicationPermission -ServerRoleIdentifiers 'http://schemas.microsoft.com/ws/2009/12/identityserver/selfscope' | ?{ $_.ClientRoleIdentifier -eq '38aa3b87-a06d-4817-b275-7a316988d93b' }).ObjectIdentifier +> ``` +> 6. Execute the command `Set-AdfsApplicationPermission -TargetIdentifier -AddScope 'ugs'`. > 7. Restart the ADFS service. > 8. On the client: Restart the client. User should be prompted to provision WHFB. > 9. If the provisioning window does not pop up then need to collect NGC trace logs and further troubleshoot. From c27c8d67503bb45cc8139081c0afad99ffc0f5e7 Mon Sep 17 00:00:00 2001 From: Denise Vangel-MSFT Date: Tue, 12 Jan 2021 12:23:39 -0800 Subject: [PATCH 462/486] Update common-exclusion-mistakes-microsoft-defender-antivirus.md --- ...n-mistakes-microsoft-defender-antivirus.md | 120 ++---------------- 1 file changed, 11 insertions(+), 109 deletions(-) diff --git a/windows/security/threat-protection/microsoft-defender-antivirus/common-exclusion-mistakes-microsoft-defender-antivirus.md b/windows/security/threat-protection/microsoft-defender-antivirus/common-exclusion-mistakes-microsoft-defender-antivirus.md index d33ce3552f..c4401ca56a 100644 --- a/windows/security/threat-protection/microsoft-defender-antivirus/common-exclusion-mistakes-microsoft-defender-antivirus.md +++ b/windows/security/threat-protection/microsoft-defender-antivirus/common-exclusion-mistakes-microsoft-defender-antivirus.md @@ -26,128 +26,30 @@ This article describes some common mistake that you should avoid when defining e Before defining your exclusion lists, see [Recommendations for defining exclusions](configure-exclusions-microsoft-defender-antivirus.md#recommendations-for-defining-exclusions). ## Excluding certain trusted items -Certain files, file types, folders, or processes should not be excluded from scanning even though you trust them to be not malicious. Refer to the following section for items that you should not exclude from scanning. -**Do not add exclusions for the following folder locations:** +Certain files, file types, folders, or processes should not be excluded from scanning even though you trust them to be not malicious. -- %systemdrive% -- C: -- C:\ -- C:\* -- %ProgramFiles%\Java -- C:\Program Files\Java -- %ProgramFiles%\Contoso\ -- C:\Program Files\Contoso\ -- %ProgramFiles(x86)%\Contoso\ -- C:\Program Files (x86)\Contoso\ -- C:\Temp -- C:\Temp\ -- C:\Temp\* -- C:\Users\ -- C:\Users\* -- C:\Users\\AppData\Local\Temp\ -- C:\Users\\AppData\LocalLow\Temp\ -- C:\Users\\AppData\Roaming\Temp\ -- %Windir%\Prefetch -- C:\Windows\Prefetch -- C:\Windows\Prefetch\ -- C:\Windows\Prefetch\* -- %Windir%\System32\Spool -- C:\Windows\System32\Spool -- C:\Windows\System32\CatRoot2 -- %Windir%\Temp -- C:\Windows\Temp -- C:\Windows\Temp\ -- C:\Windows\Temp\* +Do not define exclusions for the folder locations, file extensions, and processes that are listed in the following table: -**Do not add exclusions for the following file extensions:** -- `.7zip` -- `.bat` -- `.bin` -- `.cab` -- `.cmd` -- `.com` -- `.cpl` -- `.dll` -- `.exe` -- `.fla` -- `.gif` -- `.gz` -- `.hta` -- `.inf` -- `.java` -- `.jar` -- `.job` -- `.jpeg` -- `.jpg` -- `.js` -- `.ko` -- `.ko.gz` -- `.msi` -- `.ocx` -- `.png` -- `.ps1` -- `.py` -- `.rar` -- `.reg` -- `.scr` -- `.sys` -- `.tar` -- `.tmp` -- `.url` -- `.vbe` -- `.vbs` -- `.wsf` -- `.zip` +| Folder locations | File extensions | Processes | +|:--|:--|:--| +| `%systemdrive%`
    `C:`
    `C:\`
    `C:\*`
    `%ProgramFiles%\Java`
    `C:\Program Files\Java`
    `%ProgramFiles%\Contoso\`
    `C:\Program Files\Contoso\`
    `%ProgramFiles(x86)%\Contoso\`
    `C:\Program Files (x86)\Contoso\`
    `C:\Temp`
    `C:\Temp\`
    `C:\Temp\*`
    `C:\Users\`
    `C:\Users\*`
    `C:\Users\\AppData\Local\Temp\`
    `C:\Users\\AppData\LocalLow\Temp\`
    `C:\Users\\AppData\Roaming\Temp\`
    `%Windir%\Prefetch`
    `C:\Windows\Prefetch`
    `C:\Windows\Prefetch\`
    `C:\Windows\Prefetch\*`
    `%Windir%\System32\Spool`
    `C:\Windows\System32\Spool`
    `C:\Windows\System32\CatRoot2`
    `%Windir%\Temp`
    `C:\Windows\Temp`
    `C:\Windows\Temp\`
    `C:\Windows\Temp\*` | `.7zip`
    `.bat`
    `.bin`
    `.cab`
    `.cmd`
    `.com`
    `.cpl`
    `.dll`
    `.exe`
    `.fla`
    `.gif`
    `.gz`
    `.hta`
    `.inf`
    `.java`
    `.jar`
    `.job`
    `.jpeg`
    `.jpg`
    `.js`
    `.ko`
    `.ko.gz`
    `.msi`
    `.ocx`
    `.png`
    `.ps1`
    `.py`
    `.rar`
    `.reg`
    `.scr`
    `.sys`
    `.tar`
    `.tmp`
    `.url`
    `.vbe`
    `.vbs`
    `.wsf`
    `.zip` | `AcroRd32.exe`
    `bitsadmin.exe`
    `excel.exe`
    `iexplore.exe`
    `java.exe`
    `outlook.exe`
    `psexec.exe`
    `powerpnt.exe`
    `powershell.exe`
    `schtasks.exe`
    `svchost.exe`
    `wmic.exe`
    `winword.exe`
    `wuauclt.exe`
    `addinprocess.exe`
    `addinprocess32.exe`
    `addinutil.exe`
    `bash.exe`
    `bginfo.exe`[1]
    `cdb.exe`
    `csi.exe`
    `dbghost.exe`
    `dbgsvc.exe`
    `dnx.exe`
    `fsi.exe`
    `fsiAnyCpu.exe`
    `kd.exe`
    `ntkd.exe`
    `lxssmanager.dll`
    `msbuild.exe`[2]
    `mshta.exe`
    `ntsd.exe`
    `rcsi.exe`
    `system.management.automation.dll`
    `windbg.exe` | >[!NOTE] -> You can chose to exclude file types, such as .gif, .jpg, .jpeg, .png if your environment has a modern, up-to-date software with a strict update policy to handle any vulnerabilities. - -**Do not add exclusions for the following processes:** -- AcroRd32.exe -- bitsadmin.exe -- excel.exe -- iexplore.exe -- java.exe -- outlook.exe -- psexec.exe -- powerpnt.exe -- powershell.exe -- schtasks.exe -- svchost.exe -- wmic.exe -- winword.exe -- wuauclt.exe -- addinprocess.exe -- addinprocess32.exe -- addinutil.exe -- bash.exe -- bginfo.exe[1] -- cdb.exe -- csi.exe -- dbghost.exe -- dbgsvc.exe -- dnx.exe -- fsi.exe -- fsiAnyCpu.exe -- kd.exe -- ntkd.exe -- lxssmanager.dll -- msbuild.exe[2] -- mshta.exe -- ntsd.exe -- rcsi.exe -- system.management.automation.dll -- windbg.exe +> You can chose to exclude file types, such as `.gif`, `.jpg`, `.jpeg`, or `.png` if your environment has a modern, up-to-date software with a strict update policy to handle any vulnerabilities. ## Using just the file name in the exclusion list -A malware may have the same name as that of the file that you trust and want to exclude from scanning. Therefore, to avoid excluding a potential malware from scanning, use a fully qualified path to the file that you want to exclude instead of using just the file name. For example, if you want to exclude **Filename.exe** from scanning, use the complete path to the file, such as **C:\program files\contoso\Filename.exe**. + +A malware may have the same name as that of the file that you trust and want to exclude from scanning. Therefore, to avoid excluding a potential malware from scanning, use a fully qualified path to the file that you want to exclude instead of using just the file name. For example, if you want to exclude `Filename.exe` from scanning, use the complete path to the file, such as `C:\program files\contoso\Filename.exe`. ## Using a single exclusion list for multiple server workloads + Do not use a single exclusion list to define exclusions for multiple server workloads. Split the exclusions for different application or service workloads into multiple exclusion lists. For example, the exclusion list for your IIS Server workload must be different from the exclusion list for your SQL Server workload. ## Using incorrect environment variables as wildcards in the file name and folder path or extension exclusion lists + Microsoft Defender Antivirus Service runs in system context using the LocalSystem account, which means it gets information from the system environment variable, and not from the user environment variable. Use of environment variables as a wildcard in exclusion lists is limited to system variables and those applicable to processes running as an NT AUTHORITY\SYSTEM account. Therefore, do not use user environment variables as wildcards when adding Microsoft Defender Antivirus folder and process exclusions. See the table under [System environment variables](configure-extension-file-exclusions-microsoft-defender-antivirus.md#system-environment-variables) for a complete list of system environment variables. + See [Use wildcards in the file name and folder path or extension exclusion lists](configure-extension-file-exclusions-microsoft-defender-antivirus.md#use-wildcards-in-the-file-name-and-folder-path-or-extension-exclusion-lists) for information on how to use wildcards in exclusion lists. ## Related articles From 38c178a46b614dfdcf63f215d2d83dcaf758abdf Mon Sep 17 00:00:00 2001 From: Denise Vangel-MSFT Date: Tue, 12 Jan 2021 12:25:20 -0800 Subject: [PATCH 463/486] Update TOC.md --- windows/security/threat-protection/TOC.md | 3 +-- 1 file changed, 1 insertion(+), 2 deletions(-) diff --git a/windows/security/threat-protection/TOC.md b/windows/security/threat-protection/TOC.md index 25a5417d95..99c0b4887e 100644 --- a/windows/security/threat-protection/TOC.md +++ b/windows/security/threat-protection/TOC.md @@ -195,8 +195,7 @@ ##### [Customize, initiate, and review the results of scans and remediation]() ###### [Configuration overview](microsoft-defender-antivirus/customize-run-review-remediate-scans-microsoft-defender-antivirus.md) -###### [Configure and validate exclusions in antivirus scans]() -###### [Exclusions overview](microsoft-defender-antivirus/configure-exclusions-microsoft-defender-antivirus.md) +###### [Configure and validate exclusions in antivirus scans](microsoft-defender-antivirus/configure-exclusions-microsoft-defender-antivirus.md) ###### [Configure and validate exclusions based on file name, extension, and folder location](microsoft-defender-antivirus/configure-extension-file-exclusions-microsoft-defender-antivirus.md) ###### [Configure and validate exclusions for files opened by processes](microsoft-defender-antivirus/configure-process-opened-file-exclusions-microsoft-defender-antivirus.md) ###### [Configure antivirus exclusions Windows Server](microsoft-defender-antivirus/configure-server-exclusions-microsoft-defender-antivirus.md) From e5a5466ec95e154c7c4c774cea0b2e2a4ea38db2 Mon Sep 17 00:00:00 2001 From: Denise Vangel-MSFT Date: Tue, 12 Jan 2021 12:38:23 -0800 Subject: [PATCH 464/486] AV content fixes --- ...exclusions-microsoft-defender-antivirus.md | 2 - ...exclusions-microsoft-defender-antivirus.md | 40 ++----------------- 2 files changed, 4 insertions(+), 38 deletions(-) diff --git a/windows/security/threat-protection/microsoft-defender-antivirus/configure-process-opened-file-exclusions-microsoft-defender-antivirus.md b/windows/security/threat-protection/microsoft-defender-antivirus/configure-process-opened-file-exclusions-microsoft-defender-antivirus.md index 725634e323..4943302a17 100644 --- a/windows/security/threat-protection/microsoft-defender-antivirus/configure-process-opened-file-exclusions-microsoft-defender-antivirus.md +++ b/windows/security/threat-protection/microsoft-defender-antivirus/configure-process-opened-file-exclusions-microsoft-defender-antivirus.md @@ -77,8 +77,6 @@ See [How to create and deploy antimalware policies: Exclusion settings](https:// 5. Click **OK**. -![The Group Policy setting for specifying process exclusions](images/defender/wdav-process-exclusions.png) - ### Use PowerShell cmdlets to exclude files that have been opened by specified processes from scans Using PowerShell to add or remove exclusions for files that have been opened by processes requires using a combination of three cmdlets with the `-ExclusionProcess` parameter. The cmdlets are all in the [Defender module](https://technet.microsoft.com/itpro/powershell/windows/defender/defender). diff --git a/windows/security/threat-protection/microsoft-defender-antivirus/configure-server-exclusions-microsoft-defender-antivirus.md b/windows/security/threat-protection/microsoft-defender-antivirus/configure-server-exclusions-microsoft-defender-antivirus.md index 7c834bd8e4..3ac64a1e57 100644 --- a/windows/security/threat-protection/microsoft-defender-antivirus/configure-server-exclusions-microsoft-defender-antivirus.md +++ b/windows/security/threat-protection/microsoft-defender-antivirus/configure-server-exclusions-microsoft-defender-antivirus.md @@ -204,43 +204,11 @@ This section lists the default exclusions for all Windows Server 2016 and 2019 r #### Hyper-V exclusions -This section lists the file type exclusions, folder exclusions, and process exclusions that are delivered automatically when you install the Hyper-V role +The following table lists the file type exclusions, folder exclusions, and process exclusions that are delivered automatically when you install the Hyper-V role. -- File type exclusions: - - - `*.vhd` - - - `*.vhdx` - - - `*.avhd` - - - `*.avhdx` - - - `*.vsv` - - - `*.iso` - - - `*.rct` - - - `*.vmcx` - - - `*.vmrs` - -- Folder exclusions: - - - `%ProgramData%\Microsoft\Windows\Hyper-V` - - - `%ProgramFiles%\Hyper-V` - - - `%SystemDrive%\ProgramData\Microsoft\Windows\Hyper-V\Snapshots` - - - `%Public%\Documents\Hyper-V\Virtual Hard Disks` - -- Process exclusions: - - - `%systemroot%\System32\Vmms.exe` - - - `%systemroot%\System32\Vmwp.exe` +|File type exclusions |Folder exclusions | Process exclusions | +|:--|:--|:--| +| `*.vhd`
    `*.vhdx`
    `*.avhd`
    `*.avhdx`
    `*.vsv`
    `*.iso`
    `*.rct`
    `*.vmcx`
    `*.vmrs` | `%ProgramData%\Microsoft\Windows\Hyper-V`
    `%ProgramFiles%\Hyper-V`
    `%SystemDrive%\ProgramData\Microsoft\Windows\Hyper-V\Snapshots`
    `%Public%\Documents\Hyper-V\Virtual Hard Disks` | `%systemroot%\System32\Vmms.exe`
    `%systemroot%\System32\Vmwp.exe` | #### SYSVOL files From 6325beafe40f41a4d79f250ef22b4a650fdf39e0 Mon Sep 17 00:00:00 2001 From: Denise Vangel-MSFT Date: Tue, 12 Jan 2021 12:39:54 -0800 Subject: [PATCH 465/486] Update configure-extension-file-exclusions-microsoft-defender-antivirus.md --- ...n-file-exclusions-microsoft-defender-antivirus.md | 12 ++++++------ 1 file changed, 6 insertions(+), 6 deletions(-) diff --git a/windows/security/threat-protection/microsoft-defender-antivirus/configure-extension-file-exclusions-microsoft-defender-antivirus.md b/windows/security/threat-protection/microsoft-defender-antivirus/configure-extension-file-exclusions-microsoft-defender-antivirus.md index 88a2e71534..37b5c8ad0a 100644 --- a/windows/security/threat-protection/microsoft-defender-antivirus/configure-extension-file-exclusions-microsoft-defender-antivirus.md +++ b/windows/security/threat-protection/microsoft-defender-antivirus/configure-extension-file-exclusions-microsoft-defender-antivirus.md @@ -36,12 +36,12 @@ You can exclude certain files from Microsoft Defender Antivirus scans by modifyi This article describes how to configure exclusion lists for the files and folders. See [Recommendations for defining exclusions](configure-exclusions-microsoft-defender-antivirus.md#recommendations-for-defining-exclusions) before defining your exclusion lists. -Exclusion | Examples | Exclusion list ----|---|--- -Any file with a specific extension | All files with the specified extension, anywhere on the machine.
    Valid syntax: `.test` and `test` | Extension exclusions -Any file under a specific folder | All files under the `c:\test\sample` folder | File and folder exclusions -A specific file in a specific folder | The file `c:\sample\sample.test` only | File and folder exclusions -A specific process | The executable file `c:\test\process.exe` | File and folder exclusions +| Exclusion | Examples | Exclusion list | +|:---|:---|:---| +|Any file with a specific extension | All files with the specified extension, anywhere on the machine.
    Valid syntax: `.test` and `test` | Extension exclusions | +|Any file under a specific folder | All files under the `c:\test\sample` folder | File and folder exclusions | +| A specific file in a specific folder | The file `c:\sample\sample.test` only | File and folder exclusions | +| A specific process | The executable file `c:\test\process.exe` | File and folder exclusions | Exclusion lists have the following characteristics: From 80ced9e5f49884b8fdff4ff41d5aa245c5390963 Mon Sep 17 00:00:00 2001 From: Denise Vangel-MSFT Date: Tue, 12 Jan 2021 12:42:50 -0800 Subject: [PATCH 466/486] Update configure-extension-file-exclusions-microsoft-defender-antivirus.md --- ...exclusions-microsoft-defender-antivirus.md | 52 ++++++++----------- 1 file changed, 23 insertions(+), 29 deletions(-) diff --git a/windows/security/threat-protection/microsoft-defender-antivirus/configure-extension-file-exclusions-microsoft-defender-antivirus.md b/windows/security/threat-protection/microsoft-defender-antivirus/configure-extension-file-exclusions-microsoft-defender-antivirus.md index 37b5c8ad0a..2643fbb1a0 100644 --- a/windows/security/threat-protection/microsoft-defender-antivirus/configure-extension-file-exclusions-microsoft-defender-antivirus.md +++ b/windows/security/threat-protection/microsoft-defender-antivirus/configure-extension-file-exclusions-microsoft-defender-antivirus.md @@ -48,21 +48,18 @@ Exclusion lists have the following characteristics: - Folder exclusions apply to all files and folders under that folder, unless the subfolder is a reparse point. Reparse point subfolders must be excluded separately. - File extensions apply to any file name with the defined extension if a path or folder is not defined. ->[!IMPORTANT] ->Using wildcards such as the asterisk (\*) will alter how the exclusion rules are interpreted. See the [Use wildcards in the file name and folder path or extension exclusion lists](#use-wildcards-in-the-file-name-and-folder-path-or-extension-exclusion-lists) section for important information about how wildcards work. -> ->You cannot exclude mapped network drives. You must specify the actual network path. -> ->Folders that are reparse points that are created after the Microsoft Defender Antivirus service starts and that have been added to the exclusion list will not be included. You must restart the service (by restarting Windows) for new reparse points to be recognized as a valid exclusion target. +> [!IMPORTANT] +> - Using wildcards such as the asterisk (\*) will alter how the exclusion rules are interpreted. See the [Use wildcards in the file name and folder path or extension exclusion lists](#use-wildcards-in-the-file-name-and-folder-path-or-extension-exclusion-lists) section for important information about how wildcards work. +> - You cannot exclude mapped network drives. You must specify the actual network path. +> - Folders that are reparse points that are created after the Microsoft Defender Antivirus service starts and that have been added to the exclusion list will not be included. You must restart the service (by restarting Windows) for new reparse points to be recognized as a valid exclusion target. To exclude files opened by a specific process, see [Configure and validate exclusions for files opened by processes](configure-process-opened-file-exclusions-microsoft-defender-antivirus.md). The exclusions apply to [scheduled scans](scheduled-catch-up-scans-microsoft-defender-antivirus.md), [on-demand scans](run-scan-microsoft-defender-antivirus.md), and [real-time protection](configure-real-time-protection-microsoft-defender-antivirus.md). ->[!IMPORTANT] ->Exclusion list changes made with Group Policy **will show** in the lists in the [Windows Security app](microsoft-defender-security-center-antivirus.md#exclusions). -> ->Changes made in the Windows Security app **will not show** in the Group Policy lists. +> [!IMPORTANT] +> Exclusion list changes made with Group Policy **will show** in the lists in the [Windows Security app](microsoft-defender-security-center-antivirus.md#exclusions). +> Changes made in the Windows Security app **will not show** in the Group Policy lists. By default, local changes made to the lists (by users with administrator privileges, including changes made with PowerShell and WMI) will be merged with the lists as defined (and deployed) by Group Policy, Configuration Manager, or Intune. The Group Policy lists take precedence when there are conflicts. @@ -134,13 +131,13 @@ Remove item from the list | `Remove-MpPreference` The following are allowed as the ``: -Exclusion type | PowerShell parameter ----|--- -All files with a specified file extension | `-ExclusionExtension` -All files under a folder (including files in subdirectories), or a specific file | `-ExclusionPath` +| Exclusion type | PowerShell parameter | +|:---|:---| +| All files with a specified file extension | `-ExclusionExtension` | +| All files under a folder (including files in subdirectories), or a specific file | `-ExclusionPath` | ->[!IMPORTANT] ->If you have created a list, either with `Set-MpPreference` or `Add-MpPreference`, using the `Set-MpPreference` cmdlet again will overwrite the existing list. +> [!IMPORTANT] +> If you have created a list, either with `Set-MpPreference` or `Add-MpPreference`, using the `Set-MpPreference` cmdlet again will overwrite the existing list. For example, the following code snippet would cause Microsoft Defender AV scans to exclude any file with the `.test` file extension: @@ -175,29 +172,26 @@ See [Add exclusions in the Windows Security app](microsoft-defender-security-cen You can use the asterisk `*`, question mark `?`, or environment variables (such as `%ALLUSERSPROFILE%`) as wildcards when defining items in the file name or folder path exclusion list. The way in which these wildcards are interpreted differs from their usual usage in other apps and languages. Make sure to read this section to understand their specific limitations. ->[!IMPORTANT] ->There are key limitations and usage scenarios for these wildcards: -> ->- Environment variable usage is limited to machine variables and those applicable to processes running as an NT AUTHORITY\SYSTEM account. ->- You cannot use a wildcard in place of a drive letter. ->- An asterisk `*` in a folder exclusion stands in place for a single folder. Use multiple instances of `\*\` to indicate multiple nested folders with unspecified names. +> [!IMPORTANT] +> There are key limitations and usage scenarios for these wildcards: +> - Environment variable usage is limited to machine variables and those applicable to processes running as an NT AUTHORITY\SYSTEM account. +> - You cannot use a wildcard in place of a drive letter. +> - An asterisk `*` in a folder exclusion stands in place for a single folder. Use multiple instances of `\*\` to indicate multiple nested folders with unspecified names. The following table describes how the wildcards can be used and provides some examples. |Wildcard |Examples | -|---------|---------| +|:---------|:---------| |`*` (asterisk)

    In **file name and file extension inclusions**, the asterisk replaces any number of characters, and only applies to files in the last folder defined in the argument.

    In **folder exclusions**, the asterisk replaces a single folder. Use multiple `*` with folder slashes `\` to indicate multiple nested folders. After matching the number of wild carded and named folders, all subfolders are also included. | `C:\MyData\*.txt` would include `C:\MyData\notes.txt`

    `C:\somepath\*\Data` would include any file in `C:\somepath\Archives\Data and its subfolders` and `C:\somepath\Authorized\Data and its subfolders`

    `C:\Serv\*\*\Backup` would include any file in `C:\Serv\Primary\Denied\Backup and its subfolders` and `C:\Serv\Secondary\Allowed\Backup and its subfolders` | |`?` (question mark)

    In **file name and file extension inclusions**, the question mark replaces a single character, and only applies to files in the last folder defined in the argument.

    In **folder exclusions**, the question mark replaces a single character in a folder name. After matching the number of wild carded and named folders, all subfolders are also included. |`C:\MyData\my?` would include `C:\MyData\my1.zip`

    `C:\somepath\?\Data` would include any file in `C:\somepath\P\Data` and its subfolders

    `C:\somepath\test0?\Data` would include any file in `C:\somepath\test01\Data` and its subfolders | |Environment variables

    The defined variable is populated as a path when the exclusion is evaluated. |`%ALLUSERSPROFILE%\CustomLogFiles` would include `C:\ProgramData\CustomLogFiles\Folder1\file1.txt` | ->[!IMPORTANT] ->If you mix a file exclusion argument with a folder exclusion argument, the rules will stop at the file argument match in the matched folder, and will not look for file matches in any subfolders. -> ->For example, you can exclude all files that start with "date" in the folders `c:\data\final\marked` and `c:\data\review\marked` by using the rule argument `c:\data\*\marked\date*`. -> ->This argument, however, will not match any files in subfolders under `c:\data\final\marked` or `c:\data\review\marked`. +> [!IMPORTANT] +> If you mix a file exclusion argument with a folder exclusion argument, the rules will stop at the file argument match in the matched folder, and will not look for file matches in any subfolders. +> For example, you can exclude all files that start with "date" in the folders `c:\data\final\marked` and `c:\data\review\marked` by using the rule argument `c:\data\*\marked\date*`. +> This argument, however, will not match any files in subfolders under `c:\data\final\marked` or `c:\data\review\marked`. From b25fa3e84517722d7da5c09172084dfbacf199fb Mon Sep 17 00:00:00 2001 From: Denise Vangel-MSFT Date: Tue, 12 Jan 2021 13:12:44 -0800 Subject: [PATCH 467/486] Update configure-extension-file-exclusions-microsoft-defender-antivirus.md --- ...exclusions-microsoft-defender-antivirus.md | 329 ++++-------------- 1 file changed, 62 insertions(+), 267 deletions(-) diff --git a/windows/security/threat-protection/microsoft-defender-antivirus/configure-extension-file-exclusions-microsoft-defender-antivirus.md b/windows/security/threat-protection/microsoft-defender-antivirus/configure-extension-file-exclusions-microsoft-defender-antivirus.md index 2643fbb1a0..6715d17298 100644 --- a/windows/security/threat-protection/microsoft-defender-antivirus/configure-extension-file-exclusions-microsoft-defender-antivirus.md +++ b/windows/security/threat-protection/microsoft-defender-antivirus/configure-extension-file-exclusions-microsoft-defender-antivirus.md @@ -199,273 +199,68 @@ The following table describes how the wildcards can be used and provides some ex The following table lists and describes the system account environment variables. - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - -
    System environment variablesWill redirect to:
    %APPDATA%C:\Users\UserName.DomainName\AppData\Roaming
    %APPDATA%\Microsoft\Internet Explorer\Quick LaunchC:\Windows\System32\config\systemprofile\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch
    %APPDATA%\Microsoft\Windows\Start MenuC:\Windows\System32\config\systemprofile\AppData\Roaming\Microsoft\Windows\Start Menu
    %APPDATA%\Microsoft\Windows\Start Menu\ProgramsC:\Windows\System32\config\systemprofile\AppData\Roaming\Microsoft\Windows\Start Menu\Programs
    %LOCALAPPDATA% C:\Windows\System32\config\systemprofile\AppData\Local
    %ProgramData%C:\ProgramData
    %ProgramFiles%C:\Program Files
    %ProgramFiles%\Common Files C:\Program Files\Common Files
    %ProgramFiles%\Windows Sidebar\Gadgets C:\Program Files\Windows Sidebar\Gadgets
    %ProgramFiles%\Common FilesC:\Program Files\Common Files
    %ProgramFiles(x86)% C:\Program Files (x86)
    %ProgramFiles(x86)%\Common Files C:\Program Files (x86)\Common Files
    %SystemDrive%C:
    %SystemDrive%\Program FilesC:\Program Files
    %SystemDrive%\Program Files (x86) C:\Program Files (x86)
    %SystemDrive%\Users C:\Users
    %SystemDrive%\Users\PublicC:\Users\Public
    %SystemRoot% C:\Windows
    %windir%C:\Windows
    %windir%\FontsC:\Windows\Fonts
    %windir%\Resources C:\Windows\Resources
    %windir%\resources\0409C:\Windows\resources\0409
    %windir%\system32C:\Windows\System32
    %ALLUSERSPROFILE%C:\ProgramData
    %ALLUSERSPROFILE%\Application DataC:\ProgramData\Application Data
    %ALLUSERSPROFILE%\DocumentsC:\ProgramData\Documents
    %ALLUSERSPROFILE%\Documents\My Music\Sample Music -

    C:\ProgramData\Documents\My Music\Sample Music

    -

    .

    -
    %ALLUSERSPROFILE%\Documents\My Music C:\ProgramData\Documents\My Music
    %ALLUSERSPROFILE%\Documents\My Pictures -

    C:\ProgramData\Documents\My Pictures -

    -
    %ALLUSERSPROFILE%\Documents\My Pictures\Sample Pictures C:\ProgramData\Documents\My Pictures\Sample Pictures
    %ALLUSERSPROFILE%\Documents\My Videos C:\ProgramData\Documents\My Videos
    %ALLUSERSPROFILE%\Microsoft\Windows\DeviceMetadataStore C:\ProgramData\Microsoft\Windows\DeviceMetadataStore
    %ALLUSERSPROFILE%\Microsoft\Windows\GameExplorer C:\ProgramData\Microsoft\Windows\GameExplorer
    %ALLUSERSPROFILE%\Microsoft\Windows\Ringtones C:\ProgramData\Microsoft\Windows\Ringtones
    %ALLUSERSPROFILE%\Microsoft\Windows\Start Menu C:\ProgramData\Microsoft\Windows\Start Menu
    %ALLUSERSPROFILE%\Microsoft\Windows\Start Menu\Programs C:\ProgramData\Microsoft\Windows\Start Menu\Programs
    %ALLUSERSPROFILE%\Microsoft\Windows\Start Menu\Programs\Administrative ToolsC:\ProgramData\Microsoft\Windows\Start Menu\Programs\Administrative Tools
    %ALLUSERSPROFILE%\Microsoft\Windows\Start Menu\Programs\StartUp C:\ProgramData\Microsoft\Windows\Start Menu\Programs\StartUp
    %ALLUSERSPROFILE%\Microsoft\Windows\Templates C:\ProgramData\Microsoft\Windows\Templates
    %ALLUSERSPROFILE%\Start Menu C:\ProgramData\Start Menu
    %ALLUSERSPROFILE%\Start Menu\Programs C:\ProgramData\Start Menu\Programs
    %ALLUSERSPROFILE%\Start Menu\Programs\Administrative Tools C:\ProgramData\Start Menu\Programs\Administrative Tools
    %ALLUSERSPROFILE%\Templates C:\ProgramData\Templates
    %LOCALAPPDATA%\Microsoft\Windows\ConnectedSearch\Templates C:\Windows\System32\config\systemprofile\AppData\Local\Microsoft\Windows\ConnectedSearch\Templates
    %LOCALAPPDATA%\Microsoft\Windows\History C:\Windows\System32\config\systemprofile\AppData\Local\Microsoft\Windows\History
    -

    -%PUBLIC%

    -    		C:\Users\Public
    %PUBLIC%\AccountPictures C:\Users\Public\AccountPictures
    %PUBLIC%\Desktop C:\Users\Public\Desktop
    %PUBLIC%\Documents C:\Users\Public\Documents
    %PUBLIC%\Downloads C:\Users\Public\Downloads
    %PUBLIC%\Music\Sample Music -

    C:\Users\Public\Music\Sample Music

    -

    .

    -
    %PUBLIC%\Music\Sample Playlists -

    C:\Users\Public\Music\Sample Playlists

    -

    .

    -
    %PUBLIC%\Pictures\Sample Pictures C:\Users\Public\Pictures\Sample Pictures
    %PUBLIC%\RecordedTV.library-msC:\Users\Public\RecordedTV.library-ms
    %PUBLIC%\VideosC:\Users\Public\Videos
    %PUBLIC%\Videos\Sample Videos -

    C:\Users\Public\Videos\Sample Videos

    -

    .

    -
    %USERPROFILE% C:\Windows\System32\config\systemprofile
    %USERPROFILE%\AppData\Local C:\Windows\System32\config\systemprofile\AppData\Local
    %USERPROFILE%\AppData\LocalLow C:\Windows\System32\config\systemprofile\AppData\LocalLow
    %USERPROFILE%\AppData\Roaming C:\Windows\System32\config\systemprofile\AppData\Roaming
    +| This system environment variable... | Redirects to this | +|:--|:--| +| `%APPDATA%`| `C:\Users\UserName.DomainName\AppData\Roaming` | +| `%APPDATA%\Microsoft\Internet Explorer\Quick Launch` | `C:\Windows\System32\config\systemprofile\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch` | +| `%APPDATA%\Microsoft\Windows\Start Menu` | `C:\Windows\System32\config\systemprofile\AppData\Roaming\Microsoft\Windows\Start Menu` | +| `%APPDATA%\Microsoft\Windows\Start Menu\Programs` | `C:\Windows\System32\config\systemprofile\AppData\Roaming\Microsoft\Windows\Start Menu\Programs` | +| `%LOCALAPPDATA%` | `C:\Windows\System32\config\systemprofile\AppData\Local` | +| `%ProgramData%` | `C:\ProgramData` | +| `%ProgramFiles%` | `C:\Program Files` | +| `%ProgramFiles%\Common Files` | `C:\Program Files\Common Files` | +| `%ProgramFiles%\Windows Sidebar\Gadgets` | `C:\Program Files\Windows Sidebar\Gadgets` | +| `%ProgramFiles%\Common Files` | `C:\Program Files\Common Files` | +| `%ProgramFiles(x86)%` | `C:\Program Files (x86)` | +| `%ProgramFiles(x86)%\Common Files` | `C:\Program Files (x86)\Common Files` | +| `%SystemDrive%` | `C:` | +| `%SystemDrive%\Program Files` | `C:\Program Files` | +| `%SystemDrive%\Program Files (x86)` | `C:\Program Files (x86)` | +| `%SystemDrive%\Users` | `C:\Users` | +| `%SystemDrive%\Users\Public` | `C:\Users\Public` | +| `%SystemRoot%` | `C:\Windows` | +| `%windir%` | `C:\Windows` | +| `%windir%\Fonts` | `C:\Windows\Fonts` | +| `%windir%\Resources` | `C:\Windows\Resources` | +| `%windir%\resources\0409` | `C:\Windows\resources\0409` | +| `%windir%\system32` | `C:\Windows\System32` | +| `%ALLUSERSPROFILE%` | `C:\ProgramData` | +| `%ALLUSERSPROFILE%\Application Data` | `C:\ProgramData\Application Data` | +| `%ALLUSERSPROFILE%\Documents` | `C:\ProgramData\Documents` | +| `%ALLUSERSPROFILE%\Documents\My Music\Sample Music` | `C:\ProgramData\Documents\My Music\Sample Music` | +| `%ALLUSERSPROFILE%\Documents\My Music` | `C:\ProgramData\Documents\My Music` | +| `%ALLUSERSPROFILE%\Documents\My Pictures` | `C:\ProgramData\Documents\My Pictures` | +| `%ALLUSERSPROFILE%\Documents\My Pictures\Sample Pictures` | `C:\ProgramData\Documents\My Pictures\Sample Pictures` | +| `%ALLUSERSPROFILE%\Documents\My Videos` | `C:\ProgramData\Documents\My Videos` | +| `%ALLUSERSPROFILE%\Microsoft\Windows\DeviceMetadataStore` | `C:\ProgramData\Microsoft\Windows\DeviceMetadataStore` | +| `%ALLUSERSPROFILE%\Microsoft\Windows\GameExplorer` | `C:\ProgramData\Microsoft\Windows\GameExplorer` | +| `%ALLUSERSPROFILE%\Microsoft\Windows\Ringtones` | `C:\ProgramData\Microsoft\Windows\Ringtones` | +| `%ALLUSERSPROFILE%\Microsoft\Windows\Start Menu` | `C:\ProgramData\Microsoft\Windows\Start Menu` | +| `%ALLUSERSPROFILE%\Microsoft\Windows\Start Menu\Programs` | `C:\ProgramData\Microsoft\Windows\Start Menu\Programs` | +| `%ALLUSERSPROFILE%\Microsoft\Windows\Start Menu\Programs\Administrative Tools` | `C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Administrative Tools` | +| `%ALLUSERSPROFILE%\Microsoft\Windows\Start Menu\Programs\StartUp` | `C:\ProgramData\Microsoft\Windows\Start Menu\Programs\StartUp` | +| `%ALLUSERSPROFILE%\Microsoft\Windows\Templates` | `C:\ProgramData\Microsoft\Windows\Templates` | +| `%ALLUSERSPROFILE%\Start Menu` | `C:\ProgramData\Start Menu` | +| `%ALLUSERSPROFILE%\Start Menu\Programs` | C:\ProgramData\Start Menu\Programs | +| `%ALLUSERSPROFILE%\Start Menu\Programs\Administrative Tools` | `C:\ProgramData\Start Menu\Programs\Administrative Tools` | +| `%ALLUSERSPROFILE%\Templates` | `C:\ProgramData\Templates` | +| `%LOCALAPPDATA%\Microsoft\Windows\ConnectedSearch\Templates` | `C:\Windows\System32\config\systemprofile\AppData\Local\Microsoft\Windows\ConnectedSearch\Templates` | +| `%LOCALAPPDATA%\Microsoft\Windows\History` | `C:\Windows\System32\config\systemprofile\AppData\Local\Microsoft\Windows\History` | +| `%PUBLIC%` | `C:\Users\Public` | +| `%PUBLIC%\AccountPictures` | `C:\Users\Public\AccountPictures` | +| `%PUBLIC%\Desktop` | `C:\Users\Public\Desktop` | +| `%PUBLIC%\Documents` | `C:\Users\Public\Documents` | +| `%PUBLIC%\Downloads` | `C:\Users\Public\Downloads` | +| `%PUBLIC%\Music\Sample Music` | `C:\Users\Public\Music\Sample Music` | +| `%PUBLIC%\Music\Sample Playlists` | `C:\Users\Public\Music\Sample Playlists` | +| `%PUBLIC%\Pictures\Sample Pictures` | `C:\Users\Public\Pictures\Sample Pictures` | +| `%PUBLIC%\RecordedTV.library-ms` | `C:\Users\Public\RecordedTV.library-ms` | +| `%PUBLIC%\Videos` | `C:\Users\Public\Videos` | +| `%PUBLIC%\Videos\Sample Videos` | `C:\Users\Public\Videos\Sample Videos` | +| `%USERPROFILE%` | `C:\Windows\System32\config\systemprofile` | +| `%USERPROFILE%\AppData\Local` | `C:\Windows\System32\config\systemprofile\AppData\Local` | +| `%USERPROFILE%\AppData\LocalLow` | `C:\Windows\System32\config\systemprofile\AppData\LocalLow` | +| `%USERPROFILE%\AppData\Roaming` | `C:\Windows\System32\config\systemprofile\AppData\Roaming` | ## Review the list of exclusions From 88dbf9fdaddb2dbd1ef54532128c81cbb41bdffc Mon Sep 17 00:00:00 2001 From: Denise Vangel-MSFT Date: Tue, 12 Jan 2021 13:14:48 -0800 Subject: [PATCH 468/486] Update configure-extension-file-exclusions-microsoft-defender-antivirus.md --- ...n-file-exclusions-microsoft-defender-antivirus.md | 12 +++++------- 1 file changed, 5 insertions(+), 7 deletions(-) diff --git a/windows/security/threat-protection/microsoft-defender-antivirus/configure-extension-file-exclusions-microsoft-defender-antivirus.md b/windows/security/threat-protection/microsoft-defender-antivirus/configure-extension-file-exclusions-microsoft-defender-antivirus.md index 6715d17298..a969dcf58a 100644 --- a/windows/security/threat-protection/microsoft-defender-antivirus/configure-extension-file-exclusions-microsoft-defender-antivirus.md +++ b/windows/security/threat-protection/microsoft-defender-antivirus/configure-extension-file-exclusions-microsoft-defender-antivirus.md @@ -12,7 +12,6 @@ ms.author: deniseb ms.custom: nextgen ms.reviewer: manager: dansimp -ms.date: 10/21/2020 --- # Configure and validate exclusions based on file extension and folder location @@ -107,7 +106,6 @@ See [How to create and deploy antimalware policies: Exclusion settings](https:// 7. Click **OK**. - ![The Group Policy setting for extension exclusions](images/defender/wdav-extension-exclusions.png) @@ -123,11 +121,11 @@ The format for the cmdlets is as follows: The following are allowed as the ``: -Configuration action | PowerShell cmdlet ----|--- -Create or overwrite the list | `Set-MpPreference` -Add to the list | `Add-MpPreference` -Remove item from the list | `Remove-MpPreference` +| Configuration action | PowerShell cmdlet | +|:---|:---| +|Create or overwrite the list | `Set-MpPreference` | +|Add to the list | `Add-MpPreference` | +|Remove item from the list | `Remove-MpPreference` | The following are allowed as the ``: From d536a77139a0cc30d5069ca781cc11292500cd4b Mon Sep 17 00:00:00 2001 From: Denise Vangel-MSFT Date: Tue, 12 Jan 2021 13:16:03 -0800 Subject: [PATCH 469/486] Update configure-exclusions-microsoft-defender-antivirus.md --- .../configure-exclusions-microsoft-defender-antivirus.md | 4 +++- 1 file changed, 3 insertions(+), 1 deletion(-) diff --git a/windows/security/threat-protection/microsoft-defender-antivirus/configure-exclusions-microsoft-defender-antivirus.md b/windows/security/threat-protection/microsoft-defender-antivirus/configure-exclusions-microsoft-defender-antivirus.md index 4d3ba69753..55b286bcf0 100644 --- a/windows/security/threat-protection/microsoft-defender-antivirus/configure-exclusions-microsoft-defender-antivirus.md +++ b/windows/security/threat-protection/microsoft-defender-antivirus/configure-exclusions-microsoft-defender-antivirus.md @@ -10,7 +10,6 @@ ms.localizationpriority: medium author: denisebmsft ms.author: deniseb ms.custom: nextgen -ms.date: 03/12/2020 ms.reviewer: manager: dansimp --- @@ -41,8 +40,11 @@ Defining exclusions lowers the protection offered by Microsoft Defender Antiviru The following is a list of recommendations that you should keep in mind when defining exclusions: - Exclusions are technically a protection gap—always consider additional mitigations when defining exclusions. Additional mitigations could be as simple as making sure the excluded location has the appropriate access-control lists (ACLs), audit policy, is processed by an up-to-date software, etc. + - Review the exclusions periodically. Re-check and re-enforce the mitigations as part of the review process. + - Ideally, avoid defining proactive exclusions. For instance, don't exclude something just because you think it might be a problem in the future. Use exclusions only for specific issues—mostly around performance, or sometimes around application compatibility that exclusions could mitigate. + - Audit the exclusion list changes. The security admin should preserve enough context around why a certain exclusion was added. You should be able to provide answer with specific reasoning as to why a certain path was excluded. ## Related articles From a6e292c1822bd0b912fe5fa4c871cb9e5388935c Mon Sep 17 00:00:00 2001 From: Denise Vangel-MSFT Date: Tue, 12 Jan 2021 13:20:50 -0800 Subject: [PATCH 470/486] Update configure-process-opened-file-exclusions-microsoft-defender-antivirus.md --- ...ocess-opened-file-exclusions-microsoft-defender-antivirus.md | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/windows/security/threat-protection/microsoft-defender-antivirus/configure-process-opened-file-exclusions-microsoft-defender-antivirus.md b/windows/security/threat-protection/microsoft-defender-antivirus/configure-process-opened-file-exclusions-microsoft-defender-antivirus.md index 4943302a17..db2519b9ab 100644 --- a/windows/security/threat-protection/microsoft-defender-antivirus/configure-process-opened-file-exclusions-microsoft-defender-antivirus.md +++ b/windows/security/threat-protection/microsoft-defender-antivirus/configure-process-opened-file-exclusions-microsoft-defender-antivirus.md @@ -104,7 +104,7 @@ For example, the following code snippet would cause Microsoft Defender AV scans Add-MpPreference -ExclusionProcess "c:\internal\test.exe" ``` -For more information on how to use PowerShell with Microsoft Defender Antivirus, see Manage antivirus with PowerShell cmdlets and [Microsoft Defender Antivirus cmdlets](https://docs.microsoft.com/powershell/module/defender/?view=win10-ps&preserve=true). +For more information on how to use PowerShell with Microsoft Defender Antivirus, see Manage antivirus with PowerShell cmdlets and [Microsoft Defender Antivirus cmdlets](https://docs.microsoft.com/powershell/module/defender). ### Use Windows Management Instruction (WMI) to exclude files that have been opened by specified processes from scans From 006f0e658ee935411581f4ef272b3495b89ec7c0 Mon Sep 17 00:00:00 2001 From: Daniel Simpson Date: Tue, 12 Jan 2021 13:21:20 -0800 Subject: [PATCH 471/486] Update .openpublishing.redirection.json --- .openpublishing.redirection.json | 5 +++++ 1 file changed, 5 insertions(+) diff --git a/.openpublishing.redirection.json b/.openpublishing.redirection.json index 0cf060785e..edaafad269 100644 --- a/.openpublishing.redirection.json +++ b/.openpublishing.redirection.json @@ -16510,6 +16510,11 @@ "redirect_url": "https://docs.microsoft.com/mem/autopilot/windows-autopilot", "redirect_document_id": true }, + { + "source_path": "windows/security/threat-protection/mbsa-removal-and-guidance.md", + "redirect_url": "https://docs.microsoft.com/windows/security/threat-protection", + "redirect_document_id": true + }, { "source_path": "windows/hub/windows-10.yml", "redirect_url": "https://docs.microsoft.com/windows/windows-10", From 308a4437c19903e4eba7b154e92ad991db15676d Mon Sep 17 00:00:00 2001 From: Denise Vangel-MSFT Date: Tue, 12 Jan 2021 13:21:29 -0800 Subject: [PATCH 472/486] Update configure-process-opened-file-exclusions-microsoft-defender-antivirus.md --- ...ocess-opened-file-exclusions-microsoft-defender-antivirus.md | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/windows/security/threat-protection/microsoft-defender-antivirus/configure-process-opened-file-exclusions-microsoft-defender-antivirus.md b/windows/security/threat-protection/microsoft-defender-antivirus/configure-process-opened-file-exclusions-microsoft-defender-antivirus.md index db2519b9ab..4d432355f1 100644 --- a/windows/security/threat-protection/microsoft-defender-antivirus/configure-process-opened-file-exclusions-microsoft-defender-antivirus.md +++ b/windows/security/threat-protection/microsoft-defender-antivirus/configure-process-opened-file-exclusions-microsoft-defender-antivirus.md @@ -108,7 +108,7 @@ For more information on how to use PowerShell with Microsoft Defender Antivirus, ### Use Windows Management Instruction (WMI) to exclude files that have been opened by specified processes from scans -Use the [**Set**, **Add**, and **Remove** methods of the **MSFT_MpPreference**](https://msdn.microsoft.com/library/dn455323(v=vs.85).aspx) class for the following properties: +Use the [**Set**, **Add**, and **Remove** methods of the **MSFT_MpPreference**](https://docs.microsoft.com/previous-versions/windows/desktop/legacy/dn455323(v=vs.85)) class for the following properties: ```WMI ExclusionProcess From 1ccca48e53b4bef374612464b0fbcba1280732af Mon Sep 17 00:00:00 2001 From: Denise Vangel-MSFT Date: Tue, 12 Jan 2021 13:22:04 -0800 Subject: [PATCH 473/486] Update configure-process-opened-file-exclusions-microsoft-defender-antivirus.md --- ...ocess-opened-file-exclusions-microsoft-defender-antivirus.md | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/windows/security/threat-protection/microsoft-defender-antivirus/configure-process-opened-file-exclusions-microsoft-defender-antivirus.md b/windows/security/threat-protection/microsoft-defender-antivirus/configure-process-opened-file-exclusions-microsoft-defender-antivirus.md index 4d432355f1..14b6cea060 100644 --- a/windows/security/threat-protection/microsoft-defender-antivirus/configure-process-opened-file-exclusions-microsoft-defender-antivirus.md +++ b/windows/security/threat-protection/microsoft-defender-antivirus/configure-process-opened-file-exclusions-microsoft-defender-antivirus.md @@ -116,7 +116,7 @@ ExclusionProcess The use of **Set**, **Add**, and **Remove** is analogous to their counterparts in PowerShell: `Set-MpPreference`, `Add-MpPreference`, and `Remove-MpPreference`. -For more information and allowed parameters, see [Windows Defender WMIv2 APIs](https://msdn.microsoft.com/library/dn439477(v=vs.85).aspx). +For more information and allowed parameters, see [Windows Defender WMIv2 APIs](https://docs.microsoft.com/previous-versions/windows/desktop/defender/windows-defender-wmiv2-apis-portal). ### Use the Windows Security app to exclude files that have been opened by specified processes from scans From 659fbcd62042f39f0e2eb33e9b8426b8a3e3bb7c Mon Sep 17 00:00:00 2001 From: Daniel Simpson Date: Tue, 12 Jan 2021 13:22:08 -0800 Subject: [PATCH 474/486] Delete mbsa-removal-and-guidance.md --- .../mbsa-removal-and-guidance.md | 44 ------------------- 1 file changed, 44 deletions(-) delete mode 100644 windows/security/threat-protection/mbsa-removal-and-guidance.md diff --git a/windows/security/threat-protection/mbsa-removal-and-guidance.md b/windows/security/threat-protection/mbsa-removal-and-guidance.md deleted file mode 100644 index 59f32f84e6..0000000000 --- a/windows/security/threat-protection/mbsa-removal-and-guidance.md +++ /dev/null @@ -1,44 +0,0 @@ ---- -title: Guide to removing Microsoft Baseline Security Analyzer (MBSA) -description: This article documents the removal of Microsoft Baseline Security Analyzer (MBSA) and provides alternative solutions. -keywords: MBSA, security, removal -ms.prod: w10 -ms.mktglfcycl: deploy -ms.localizationpriority: medium -ms.author: dansimp -author: dulcemontemayor -ms.date: 10/05/2018 -ms.reviewer: -manager: dansimp ---- - -# What is Microsoft Baseline Security Analyzer and its uses? - -Microsoft Baseline Security Analyzer (MBSA) is used to verify patch compliance. MBSA also performed several other security checks for Windows, IIS, and SQL Server. Unfortunately, the logic behind these additional checks had not been actively maintained since Windows XP and Windows Server 2003. Changes in the products since then rendered many of these security checks obsolete and some of their recommendations counterproductive. - -MBSA was largely used in situations where neither Microsoft Update nor a local WSUS or Configuration Manager server was available, or as a compliance tool to ensure that all security updates were deployed to a managed environment. While MBSA version 2.3 introduced support for Windows Server 2012 R2 and Windows 8.1, it has since been deprecated and no longer developed. MBSA 2.3 is not updated to fully support Windows 10 and Windows Server 2016. - -> [!NOTE] -> In accordance with our [SHA-1 deprecation initiative](https://aka.ms/sha1deprecation), the Wsusscn2.cab file is no longer dual-signed using both SHA-1 and the SHA-2 suite of hash algorithms (specifically SHA-256). This file is now signed using only SHA-256. Administrators who verify digital signatures on this file should now expect only single SHA-256 signatures. Starting with the August 2020 Wsusscn2.cab file, MBSA will return the following error "The catalog file is damaged or an invalid catalog." when attempting to scan using the offline scan file. - -## The Solution -A script can help you with an alternative to MBSA’s patch-compliance checking: - -- [Using WUA to Scan for Updates Offline](https://docs.microsoft.com/windows/desktop/wua_sdk/using-wua-to-scan-for-updates-offline), which includes a sample .vbs script. -For a PowerShell alternative, see [Using WUA to Scan for Updates Offline with PowerShell](https://gallery.technet.microsoft.com/Using-WUA-to-Scan-for-f7e5e0be). - -For example: - -[![VBS script](images/vbs-example.png)](https://docs.microsoft.com/windows/desktop/wua_sdk/using-wua-to-scan-for-updates-offline) -[![PowerShell script](images/powershell-example.png)](https://gallery.technet.microsoft.com/Using-WUA-to-Scan-for-f7e5e0be) - -The preceding scripts leverage the [WSUS offline scan file](https://support.microsoft.com/help/927745/detailed-information-for-developers-who-use-the-windows-update-offline) (wsusscn2.cab) to perform a scan and get the same information on missing updates as MBSA supplied. MBSA also relied on the wsusscn2.cab to determine which updates were missing from a given system without connecting to any online service or server. The wsusscn2.cab file is still available and there are currently no plans to remove or replace it. -The wsusscn2.cab file contains the metadata of only security updates, update rollups and service packs available from Microsoft Update; it does not contain any information on non-security updates, tools or drivers. - -## More Information - -For security compliance and for desktop/server hardening, we recommend the Microsoft Security Baselines and the Security Compliance Toolkit. - -- [Windows security baselines](windows-security-baselines.md) -- [Download Microsoft Security Compliance Toolkit 1.0](https://www.microsoft.com/download/details.aspx?id=55319) -- [Microsoft Security Guidance blog](https://blogs.technet.microsoft.com/secguide/) From d173252d051e82c185b9393208f4c8f2cbee3ae9 Mon Sep 17 00:00:00 2001 From: Denise Vangel-MSFT Date: Tue, 12 Jan 2021 13:23:06 -0800 Subject: [PATCH 475/486] Update configure-process-opened-file-exclusions-microsoft-defender-antivirus.md --- ...ess-opened-file-exclusions-microsoft-defender-antivirus.md | 4 ++-- 1 file changed, 2 insertions(+), 2 deletions(-) diff --git a/windows/security/threat-protection/microsoft-defender-antivirus/configure-process-opened-file-exclusions-microsoft-defender-antivirus.md b/windows/security/threat-protection/microsoft-defender-antivirus/configure-process-opened-file-exclusions-microsoft-defender-antivirus.md index 14b6cea060..51ae6f0011 100644 --- a/windows/security/threat-protection/microsoft-defender-antivirus/configure-process-opened-file-exclusions-microsoft-defender-antivirus.md +++ b/windows/security/threat-protection/microsoft-defender-antivirus/configure-process-opened-file-exclusions-microsoft-defender-antivirus.md @@ -164,7 +164,7 @@ Use the following cmdlet: Get-MpPreference ``` -See [Use PowerShell cmdlets to configure and run Microsoft Defender Antivirus](use-powershell-cmdlets-microsoft-defender-antivirus.md) and [Defender cmdlets](https://technet.microsoft.com/itpro/powershell/windows/defender/index) for more information on how to use PowerShell with Microsoft Defender Antivirus. +See [Use PowerShell cmdlets to configure and run Microsoft Defender Antivirus](use-powershell-cmdlets-microsoft-defender-antivirus.md) and [Defender cmdlets](https://docs.microsoft.com/en-us/powershell/module/defender) for more information on how to use PowerShell with Microsoft Defender Antivirus. ### Retrieve a specific exclusions list by using PowerShell @@ -175,7 +175,7 @@ $WDAVprefs = Get-MpPreference $WDAVprefs.ExclusionProcess ``` -See [Use PowerShell cmdlets to configure and run Microsoft Defender Antivirus](use-powershell-cmdlets-microsoft-defender-antivirus.md) and [Defender cmdlets](https://technet.microsoft.com/itpro/powershell/windows/defender/index) for more information on how to use PowerShell with Microsoft Defender Antivirus. +See [Use PowerShell cmdlets to configure and run Microsoft Defender Antivirus](use-powershell-cmdlets-microsoft-defender-antivirus.md) and [Defender cmdlets](https://docs.microsoft.com/powershell/module/defender) for more information on how to use PowerShell with Microsoft Defender Antivirus. ## Related articles From 32e33487a5d384ee2b7611c7d6824fd64ec63bb2 Mon Sep 17 00:00:00 2001 From: Denise Vangel-MSFT Date: Tue, 12 Jan 2021 13:31:38 -0800 Subject: [PATCH 476/486] antivirus --- ...exclusions-microsoft-defender-antivirus.md | 21 +++++++++---------- ...exclusions-microsoft-defender-antivirus.md | 2 +- 2 files changed, 11 insertions(+), 12 deletions(-) diff --git a/windows/security/threat-protection/microsoft-defender-antivirus/configure-extension-file-exclusions-microsoft-defender-antivirus.md b/windows/security/threat-protection/microsoft-defender-antivirus/configure-extension-file-exclusions-microsoft-defender-antivirus.md index a969dcf58a..dcf0ef8305 100644 --- a/windows/security/threat-protection/microsoft-defender-antivirus/configure-extension-file-exclusions-microsoft-defender-antivirus.md +++ b/windows/security/threat-protection/microsoft-defender-antivirus/configure-extension-file-exclusions-microsoft-defender-antivirus.md @@ -28,7 +28,7 @@ manager: dansimp ## Exclusion lists -You can exclude certain files from Microsoft Defender Antivirus scans by modifying exclusion lists. **Generally, you shouldn't need to apply exclusions**. Microsoft Defender Antivirus includes a number of automatic exclusions based on known operating system behaviors and typical management files, such as those used in enterprise management, database management, and other enterprise scenarios and situations. +You can exclude certain files from Microsoft Defender Antivirus scans by modifying exclusion lists. **Generally, you shouldn't need to apply exclusions**. Microsoft Defender Antivirus includes many automatic exclusions based on known operating system behaviors and typical management files, such as those used in enterprise management, database management, and other enterprise scenarios and situations. > [!NOTE] > Automatic exclusions apply only to Windows Server 2016 and above. These exclusions are not visible in the Windows Security app and in PowerShell. @@ -81,31 +81,30 @@ See [How to create and deploy antimalware policies: Exclusion settings](https:// >[!NOTE] >If you specify a fully qualified path to a file, then only that file is excluded. If a folder is defined in the exclusion, then all files and subdirectories under that folder are excluded. -1. On your Group Policy management computer, open the [Group Policy Management Console](https://technet.microsoft.com/library/cc731212.aspx), right-click the Group Policy Object you want to configure and click **Edit**. +1. On your Group Policy management computer, open the [Group Policy Management Console](https://docs.microsoft.com/previous-versions/windows/it-pro/windows-server-2008-R2-and-2008/cc731212(v=ws.11)), right-click the Group Policy Object you want to configure and click **Edit**. -2. In the **Group Policy Management Editor** go to **Computer configuration** and click **Administrative templates**. +2. In the **Group Policy Management Editor** go to **Computer configuration** and select **Administrative templates**. -3. Expand the tree to **Windows components > Microsoft Defender Antivirus > Exclusions**. +3. Expand the tree to **Windows components** > **Microsoft Defender Antivirus** > **Exclusions**. -4. Double-click the **Path Exclusions** setting and add the exclusions. +4. Open the **Path Exclusions** setting for editing, and add your exclusions. - Set the option to **Enabled**. - Under the **Options** section, click **Show...**. - Specify each folder on its own line under the **Value name** column. - If you are specifying a file, ensure you enter a fully qualified path to the file, including the drive letter, folder path, filename, and extension. Enter **0** in the **Value** column. -5. Click **OK**. +5. Choose **OK**. ![The Group Policy setting for file and folder exclusions](images/defender/wdav-path-exclusions.png) -6. Double-click the **Extension Exclusions** setting and add the exclusions. +6. Open the **Extension Exclusions** setting for editing and add your exclusions. - Set the option to **Enabled**. - - Under the **Options** section, click **Show...**. + - Under the **Options** section, select **Show...**. - Enter each file extension on its own line under the **Value name** column. Enter **0** in the **Value** column. -7. Click **OK**. - +7. Choose **OK**. @@ -277,7 +276,7 @@ You can retrieve the items in the exclusion list using one of the following meth If you use PowerShell, you can retrieve the list in two ways: -- Retrieve the status of all Microsoft Defender Antivirus preferences. Each of the lists are displayed on separate lines, but the items within each list are combined into the same line. +- Retrieve the status of all Microsoft Defender Antivirus preferences. Each list is displayed on separate lines, but the items within each list are combined into the same line. - Write the status of all preferences to a variable, and use that variable to only call the specific list you are interested in. Each use of `Add-MpPreference` is written to a new line. ### Validate the exclusion list by using MpCmdRun diff --git a/windows/security/threat-protection/microsoft-defender-antivirus/configure-process-opened-file-exclusions-microsoft-defender-antivirus.md b/windows/security/threat-protection/microsoft-defender-antivirus/configure-process-opened-file-exclusions-microsoft-defender-antivirus.md index 51ae6f0011..968b2a6975 100644 --- a/windows/security/threat-protection/microsoft-defender-antivirus/configure-process-opened-file-exclusions-microsoft-defender-antivirus.md +++ b/windows/security/threat-protection/microsoft-defender-antivirus/configure-process-opened-file-exclusions-microsoft-defender-antivirus.md @@ -164,7 +164,7 @@ Use the following cmdlet: Get-MpPreference ``` -See [Use PowerShell cmdlets to configure and run Microsoft Defender Antivirus](use-powershell-cmdlets-microsoft-defender-antivirus.md) and [Defender cmdlets](https://docs.microsoft.com/en-us/powershell/module/defender) for more information on how to use PowerShell with Microsoft Defender Antivirus. +See [Use PowerShell cmdlets to configure and run Microsoft Defender Antivirus](use-powershell-cmdlets-microsoft-defender-antivirus.md) and [Defender cmdlets](https://docs.microsoft.com/powershell/module/defender) for more information on how to use PowerShell with Microsoft Defender Antivirus. ### Retrieve a specific exclusions list by using PowerShell From 2fde0b93007535aa84cce056c82774709f95c9a9 Mon Sep 17 00:00:00 2001 From: Denise Vangel-MSFT Date: Tue, 12 Jan 2021 13:32:35 -0800 Subject: [PATCH 477/486] Update configure-process-opened-file-exclusions-microsoft-defender-antivirus.md --- ...ess-opened-file-exclusions-microsoft-defender-antivirus.md | 4 ++-- 1 file changed, 2 insertions(+), 2 deletions(-) diff --git a/windows/security/threat-protection/microsoft-defender-antivirus/configure-process-opened-file-exclusions-microsoft-defender-antivirus.md b/windows/security/threat-protection/microsoft-defender-antivirus/configure-process-opened-file-exclusions-microsoft-defender-antivirus.md index 968b2a6975..466126fe0d 100644 --- a/windows/security/threat-protection/microsoft-defender-antivirus/configure-process-opened-file-exclusions-microsoft-defender-antivirus.md +++ b/windows/security/threat-protection/microsoft-defender-antivirus/configure-process-opened-file-exclusions-microsoft-defender-antivirus.md @@ -152,8 +152,8 @@ To check exclusions with the dedicated [command-line tool mpcmdrun.exe](https:// MpCmdRun.exe -CheckExclusion -path ``` ->[!NOTE] ->Checking exclusions with MpCmdRun requires Microsoft Defender Antivirus CAMP version 4.18.1812.3 (released in December 2018) or later. +> [!NOTE] +> Checking exclusions with MpCmdRun requires Microsoft Defender Antivirus CAMP version 4.18.1812.3 (released in December 2018) or later. ### Review the list of exclusions alongside all other Microsoft Defender Antivirus preferences by using PowerShell From 01d866018e9f61aa59e4b27d9822c6100eba9e1d Mon Sep 17 00:00:00 2001 From: Thomas Raya Date: Tue, 12 Jan 2021 14:29:21 -0800 Subject: [PATCH 478/486] remove mbsa-removal-and-guidance from TOC --- windows/security/threat-protection/TOC.md | 1 - 1 file changed, 1 deletion(-) diff --git a/windows/security/threat-protection/TOC.md b/windows/security/threat-protection/TOC.md index 25a5417d95..90d6dfa378 100644 --- a/windows/security/threat-protection/TOC.md +++ b/windows/security/threat-protection/TOC.md @@ -1334,7 +1334,6 @@ #### [Windows security baselines](windows-security-configuration-framework/windows-security-baselines.md) ##### [Security Compliance Toolkit](windows-security-configuration-framework/security-compliance-toolkit-10.md) ##### [Get support](windows-security-configuration-framework/get-support-for-security-baselines.md) -### [MBSA removal and alternatives](mbsa-removal-and-guidance.md) ### [Windows 10 Mobile security guide](windows-10-mobile-security-guide.md) From b4bbcfefa942343ea8f11d5621a5e85d588f7edd Mon Sep 17 00:00:00 2001 From: dstrome Date: Wed, 13 Jan 2021 00:29:22 +0000 Subject: [PATCH 479/486] Initialize Docs repository: https://github.com/MicrosoftDocs/windows-docs-pr of branch master --- .openpublishing.publish.config.json | 10 +++++----- 1 file changed, 5 insertions(+), 5 deletions(-) diff --git a/.openpublishing.publish.config.json b/.openpublishing.publish.config.json index 3e1c1d1d11..f9ebdac192 100644 --- a/.openpublishing.publish.config.json +++ b/.openpublishing.publish.config.json @@ -390,7 +390,7 @@ "elizapo@microsoft.com" ], "sync_notification_subscribers": [ - "daniha@microsoft.com" + "dstrome@microsoft.com" ], "branches_to_filter": [ "" @@ -431,9 +431,9 @@ "template_folder": "_themes.pdf" } }, - "need_generate_pdf": false, - "need_generate_intellisense": false, "docs_build_engine": { "name": "docfx_v3" - } -} + }, + "need_generate_pdf": false, + "need_generate_intellisense": false +} \ No newline at end of file From 61f1f92e4240818b08c64114b468f98d50bc0453 Mon Sep 17 00:00:00 2001 From: dstrome Date: Wed, 13 Jan 2021 00:29:22 +0000 Subject: [PATCH 480/486] Initialize Docs repository: https://github.com/MicrosoftDocs/windows-docs-pr of branch live --- .openpublishing.publish.config.json | 10 +++++----- 1 file changed, 5 insertions(+), 5 deletions(-) diff --git a/.openpublishing.publish.config.json b/.openpublishing.publish.config.json index 3e1c1d1d11..f9ebdac192 100644 --- a/.openpublishing.publish.config.json +++ b/.openpublishing.publish.config.json @@ -390,7 +390,7 @@ "elizapo@microsoft.com" ], "sync_notification_subscribers": [ - "daniha@microsoft.com" + "dstrome@microsoft.com" ], "branches_to_filter": [ "" @@ -431,9 +431,9 @@ "template_folder": "_themes.pdf" } }, - "need_generate_pdf": false, - "need_generate_intellisense": false, "docs_build_engine": { "name": "docfx_v3" - } -} + }, + "need_generate_pdf": false, + "need_generate_intellisense": false +} \ No newline at end of file From 9d726047980cc19578ad51ca1f12251d74fe0727 Mon Sep 17 00:00:00 2001 From: Daniel Simpson Date: Tue, 12 Jan 2021 21:47:01 -0800 Subject: [PATCH 481/486] returning MBSA topic --- .openpublishing.redirection.json | 5 --- .../mbsa-removal-and-guidance.md | 44 +++++++++++++++++++ 2 files changed, 44 insertions(+), 5 deletions(-) create mode 100644 windows/security/threat-protection/mbsa-removal-and-guidance.md diff --git a/.openpublishing.redirection.json b/.openpublishing.redirection.json index edaafad269..0cf060785e 100644 --- a/.openpublishing.redirection.json +++ b/.openpublishing.redirection.json @@ -16510,11 +16510,6 @@ "redirect_url": "https://docs.microsoft.com/mem/autopilot/windows-autopilot", "redirect_document_id": true }, - { - "source_path": "windows/security/threat-protection/mbsa-removal-and-guidance.md", - "redirect_url": "https://docs.microsoft.com/windows/security/threat-protection", - "redirect_document_id": true - }, { "source_path": "windows/hub/windows-10.yml", "redirect_url": "https://docs.microsoft.com/windows/windows-10", diff --git a/windows/security/threat-protection/mbsa-removal-and-guidance.md b/windows/security/threat-protection/mbsa-removal-and-guidance.md new file mode 100644 index 0000000000..59f32f84e6 --- /dev/null +++ b/windows/security/threat-protection/mbsa-removal-and-guidance.md @@ -0,0 +1,44 @@ +--- +title: Guide to removing Microsoft Baseline Security Analyzer (MBSA) +description: This article documents the removal of Microsoft Baseline Security Analyzer (MBSA) and provides alternative solutions. +keywords: MBSA, security, removal +ms.prod: w10 +ms.mktglfcycl: deploy +ms.localizationpriority: medium +ms.author: dansimp +author: dulcemontemayor +ms.date: 10/05/2018 +ms.reviewer: +manager: dansimp +--- + +# What is Microsoft Baseline Security Analyzer and its uses? + +Microsoft Baseline Security Analyzer (MBSA) is used to verify patch compliance. MBSA also performed several other security checks for Windows, IIS, and SQL Server. Unfortunately, the logic behind these additional checks had not been actively maintained since Windows XP and Windows Server 2003. Changes in the products since then rendered many of these security checks obsolete and some of their recommendations counterproductive. + +MBSA was largely used in situations where neither Microsoft Update nor a local WSUS or Configuration Manager server was available, or as a compliance tool to ensure that all security updates were deployed to a managed environment. While MBSA version 2.3 introduced support for Windows Server 2012 R2 and Windows 8.1, it has since been deprecated and no longer developed. MBSA 2.3 is not updated to fully support Windows 10 and Windows Server 2016. + +> [!NOTE] +> In accordance with our [SHA-1 deprecation initiative](https://aka.ms/sha1deprecation), the Wsusscn2.cab file is no longer dual-signed using both SHA-1 and the SHA-2 suite of hash algorithms (specifically SHA-256). This file is now signed using only SHA-256. Administrators who verify digital signatures on this file should now expect only single SHA-256 signatures. Starting with the August 2020 Wsusscn2.cab file, MBSA will return the following error "The catalog file is damaged or an invalid catalog." when attempting to scan using the offline scan file. + +## The Solution +A script can help you with an alternative to MBSA’s patch-compliance checking: + +- [Using WUA to Scan for Updates Offline](https://docs.microsoft.com/windows/desktop/wua_sdk/using-wua-to-scan-for-updates-offline), which includes a sample .vbs script. +For a PowerShell alternative, see [Using WUA to Scan for Updates Offline with PowerShell](https://gallery.technet.microsoft.com/Using-WUA-to-Scan-for-f7e5e0be). + +For example: + +[![VBS script](images/vbs-example.png)](https://docs.microsoft.com/windows/desktop/wua_sdk/using-wua-to-scan-for-updates-offline) +[![PowerShell script](images/powershell-example.png)](https://gallery.technet.microsoft.com/Using-WUA-to-Scan-for-f7e5e0be) + +The preceding scripts leverage the [WSUS offline scan file](https://support.microsoft.com/help/927745/detailed-information-for-developers-who-use-the-windows-update-offline) (wsusscn2.cab) to perform a scan and get the same information on missing updates as MBSA supplied. MBSA also relied on the wsusscn2.cab to determine which updates were missing from a given system without connecting to any online service or server. The wsusscn2.cab file is still available and there are currently no plans to remove or replace it. +The wsusscn2.cab file contains the metadata of only security updates, update rollups and service packs available from Microsoft Update; it does not contain any information on non-security updates, tools or drivers. + +## More Information + +For security compliance and for desktop/server hardening, we recommend the Microsoft Security Baselines and the Security Compliance Toolkit. + +- [Windows security baselines](windows-security-baselines.md) +- [Download Microsoft Security Compliance Toolkit 1.0](https://www.microsoft.com/download/details.aspx?id=55319) +- [Microsoft Security Guidance blog](https://blogs.technet.microsoft.com/secguide/) From 515a89a3428c3e4df151440f197f7bad073fb13e Mon Sep 17 00:00:00 2001 From: Daniel Simpson Date: Tue, 12 Jan 2021 21:52:14 -0800 Subject: [PATCH 482/486] Update mbsa-removal-and-guidance.md --- .../security/threat-protection/mbsa-removal-and-guidance.md | 3 +-- 1 file changed, 1 insertion(+), 2 deletions(-) diff --git a/windows/security/threat-protection/mbsa-removal-and-guidance.md b/windows/security/threat-protection/mbsa-removal-and-guidance.md index 59f32f84e6..24bcf88c2d 100644 --- a/windows/security/threat-protection/mbsa-removal-and-guidance.md +++ b/windows/security/threat-protection/mbsa-removal-and-guidance.md @@ -6,8 +6,7 @@ ms.prod: w10 ms.mktglfcycl: deploy ms.localizationpriority: medium ms.author: dansimp -author: dulcemontemayor -ms.date: 10/05/2018 +author: dansimp ms.reviewer: manager: dansimp --- From d5d0eea52c9b5bc15a8bb089d02194ce609faf19 Mon Sep 17 00:00:00 2001 From: adirdidi <68847945+adirdidi@users.noreply.github.com> Date: Wed, 13 Jan 2021 09:29:14 +0200 Subject: [PATCH 483/486] Update gov.md Update Windows 10 version 1803 required KB and marking as supported for GCC. --- .../security/threat-protection/microsoft-defender-atp/gov.md | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/windows/security/threat-protection/microsoft-defender-atp/gov.md b/windows/security/threat-protection/microsoft-defender-atp/gov.md index 2942c525e6..165f8e65d7 100644 --- a/windows/security/threat-protection/microsoft-defender-atp/gov.md +++ b/windows/security/threat-protection/microsoft-defender-atp/gov.md @@ -45,7 +45,7 @@ Windows 10, version 2004 (with [KB4586853](https://support.microsoft.com/help/44 Windows 10, version 1909 (with [KB4586819](https://support.microsoft.com/help/4586819)) | ![Yes](../images/svg/check-yes.svg) | ![Yes](../images/svg/check-yes.svg) Windows 10, version 1903 (with [KB4586819](https://support.microsoft.com/help/4586819)) | ![Yes](../images/svg/check-yes.svg) | ![Yes](../images/svg/check-yes.svg) Windows 10, version 1809 (with [KB4586839](https://support.microsoft.com/help/4586839)) | ![Yes](../images/svg/check-yes.svg) | ![Yes](../images/svg/check-yes.svg) -Windows 10, version 1803 | ![No](../images/svg/check-no.svg) Rolling out | ![Yes](../images/svg/check-yes.svg) With [KB4499183](https://support.microsoft.com/help/4499183) +Windows 10, version 1803 (with [KB4586839](https://support.microsoft.com/help/4598245)) | ![Yes](../images/svg/check-yes.svg) | ![Yes](../images/svg/check-yes.svg) Windows 10, version 1709 | ![No](../images/svg/check-no.svg)
    Note: Will not be supported | ![Yes](../images/svg/check-yes.svg) With [KB4499147](https://support.microsoft.com/help/4499147)
    Note: [Deprecated](https://docs.microsoft.com/lifecycle/announcements/revised-end-of-service-windows-10-1709), please upgrade Windows 10, version 1703 and earlier | ![No](../images/svg/check-no.svg)
    Note: Will not be supported | ![No](../images/svg/check-no.svg)
    Note: Will not be supported Windows Server 2019 (with [KB4586839](https://support.microsoft.com/help/4586839)) | ![Yes](../images/svg/check-yes.svg) | ![Yes](../images/svg/check-yes.svg) From 42f360182c1ec8164c1f6babeca0eee677565cf5 Mon Sep 17 00:00:00 2001 From: adirdidi <68847945+adirdidi@users.noreply.github.com> Date: Wed, 13 Jan 2021 09:45:49 +0200 Subject: [PATCH 484/486] Update gov.md Some Acrolinx fixes. --- .../threat-protection/microsoft-defender-atp/gov.md | 6 +++--- 1 file changed, 3 insertions(+), 3 deletions(-) diff --git a/windows/security/threat-protection/microsoft-defender-atp/gov.md b/windows/security/threat-protection/microsoft-defender-atp/gov.md index 165f8e65d7..58e711d459 100644 --- a/windows/security/threat-protection/microsoft-defender-atp/gov.md +++ b/windows/security/threat-protection/microsoft-defender-atp/gov.md @@ -46,8 +46,8 @@ Windows 10, version 1909 (with [KB4586819](https://support.microsoft.com/help/45 Windows 10, version 1903 (with [KB4586819](https://support.microsoft.com/help/4586819)) | ![Yes](../images/svg/check-yes.svg) | ![Yes](../images/svg/check-yes.svg) Windows 10, version 1809 (with [KB4586839](https://support.microsoft.com/help/4586839)) | ![Yes](../images/svg/check-yes.svg) | ![Yes](../images/svg/check-yes.svg) Windows 10, version 1803 (with [KB4586839](https://support.microsoft.com/help/4598245)) | ![Yes](../images/svg/check-yes.svg) | ![Yes](../images/svg/check-yes.svg) -Windows 10, version 1709 | ![No](../images/svg/check-no.svg)
    Note: Will not be supported | ![Yes](../images/svg/check-yes.svg) With [KB4499147](https://support.microsoft.com/help/4499147)
    Note: [Deprecated](https://docs.microsoft.com/lifecycle/announcements/revised-end-of-service-windows-10-1709), please upgrade -Windows 10, version 1703 and earlier | ![No](../images/svg/check-no.svg)
    Note: Will not be supported | ![No](../images/svg/check-no.svg)
    Note: Will not be supported +Windows 10, version 1709 | ![No](../images/svg/check-no.svg)
    Note: Won't be supported | ![Yes](../images/svg/check-yes.svg) With [KB4499147](https://support.microsoft.com/help/4499147)
    Note: [Deprecated](https://docs.microsoft.com/lifecycle/announcements/revised-end-of-service-windows-10-1709), please upgrade +Windows 10, version 1703 and earlier | ![No](../images/svg/check-no.svg)
    Note: Won't be supported | ![No](../images/svg/check-no.svg)
    Note: Won't be supported Windows Server 2019 (with [KB4586839](https://support.microsoft.com/help/4586839)) | ![Yes](../images/svg/check-yes.svg) | ![Yes](../images/svg/check-yes.svg) Windows Server 2016 | ![No](../images/svg/check-no.svg) Rolling out | ![No](../images/svg/check-no.svg) In development Windows Server 2012 R2 | ![No](../images/svg/check-no.svg) Rolling out | ![No](../images/svg/check-no.svg) In development @@ -100,7 +100,7 @@ GCC High | `https://login.microsoftonline.us` | `https://api-gov.securitycenter. ## Feature parity with commercial -Defender for Endpoint do not have complete parity with the commercial offering. While our goal is to deliver all commercial features and functionality to our US Government customers, there are some capabilities not yet available that we'd like to highlight. +Defender for Endpoint does not have complete parity with the commercial offering. While our goal is to deliver all commercial features and functionality to our US Government customers, there are some capabilities not yet available that we'd like to highlight. These are the known gaps as of January 2021: From 6d92e929b3db2fbda09bf768a044cfde76468b19 Mon Sep 17 00:00:00 2001 From: adirdidi <68847945+adirdidi@users.noreply.github.com> Date: Wed, 13 Jan 2021 09:56:09 +0200 Subject: [PATCH 485/486] Update gov.md --- .../security/threat-protection/microsoft-defender-atp/gov.md | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/windows/security/threat-protection/microsoft-defender-atp/gov.md b/windows/security/threat-protection/microsoft-defender-atp/gov.md index 58e711d459..488bdb73d9 100644 --- a/windows/security/threat-protection/microsoft-defender-atp/gov.md +++ b/windows/security/threat-protection/microsoft-defender-atp/gov.md @@ -100,7 +100,7 @@ GCC High | `https://login.microsoftonline.us` | `https://api-gov.securitycenter. ## Feature parity with commercial -Defender for Endpoint does not have complete parity with the commercial offering. While our goal is to deliver all commercial features and functionality to our US Government customers, there are some capabilities not yet available that we'd like to highlight. +Defender for Endpoint doesn't have complete parity with the commercial offering. While our goal is to deliver all commercial features and functionality to our US Government customers, there are some capabilities not yet available that we'd like to highlight. These are the known gaps as of January 2021: From c35d9dc74070e02efc8a0dc1fe5b15e587b26f38 Mon Sep 17 00:00:00 2001 From: adirdidi <68847945+adirdidi@users.noreply.github.com> Date: Wed, 13 Jan 2021 12:22:17 +0200 Subject: [PATCH 486/486] Update gov.md --- .../threat-protection/microsoft-defender-atp/gov.md | 6 +++--- 1 file changed, 3 insertions(+), 3 deletions(-) diff --git a/windows/security/threat-protection/microsoft-defender-atp/gov.md b/windows/security/threat-protection/microsoft-defender-atp/gov.md index 488bdb73d9..6f872b82ce 100644 --- a/windows/security/threat-protection/microsoft-defender-atp/gov.md +++ b/windows/security/threat-protection/microsoft-defender-atp/gov.md @@ -40,12 +40,12 @@ The following OS versions are supported: OS version | GCC | GCC High :---|:---|:--- -Windows 10, version 20H2 (with [KB4586853](https://support.microsoft.com/help/4490481)) | ![Yes](../images/svg/check-yes.svg) | ![Yes](../images/svg/check-yes.svg) -Windows 10, version 2004 (with [KB4586853](https://support.microsoft.com/help/4490481)) | ![Yes](../images/svg/check-yes.svg) | ![Yes](../images/svg/check-yes.svg) +Windows 10, version 20H2 (with [KB4586853](https://support.microsoft.com/help/4586853)) | ![Yes](../images/svg/check-yes.svg) | ![Yes](../images/svg/check-yes.svg) +Windows 10, version 2004 (with [KB4586853](https://support.microsoft.com/help/4586853)) | ![Yes](../images/svg/check-yes.svg) | ![Yes](../images/svg/check-yes.svg) Windows 10, version 1909 (with [KB4586819](https://support.microsoft.com/help/4586819)) | ![Yes](../images/svg/check-yes.svg) | ![Yes](../images/svg/check-yes.svg) Windows 10, version 1903 (with [KB4586819](https://support.microsoft.com/help/4586819)) | ![Yes](../images/svg/check-yes.svg) | ![Yes](../images/svg/check-yes.svg) Windows 10, version 1809 (with [KB4586839](https://support.microsoft.com/help/4586839)) | ![Yes](../images/svg/check-yes.svg) | ![Yes](../images/svg/check-yes.svg) -Windows 10, version 1803 (with [KB4586839](https://support.microsoft.com/help/4598245)) | ![Yes](../images/svg/check-yes.svg) | ![Yes](../images/svg/check-yes.svg) +Windows 10, version 1803 (with [KB4598245](https://support.microsoft.com/help/4598245)) | ![Yes](../images/svg/check-yes.svg) | ![Yes](../images/svg/check-yes.svg) Windows 10, version 1709 | ![No](../images/svg/check-no.svg)
    Note: Won't be supported | ![Yes](../images/svg/check-yes.svg) With [KB4499147](https://support.microsoft.com/help/4499147)
    Note: [Deprecated](https://docs.microsoft.com/lifecycle/announcements/revised-end-of-service-windows-10-1709), please upgrade Windows 10, version 1703 and earlier | ![No](../images/svg/check-no.svg)
    Note: Won't be supported | ![No](../images/svg/check-no.svg)
    Note: Won't be supported Windows Server 2019 (with [KB4586839](https://support.microsoft.com/help/4586839)) | ![Yes](../images/svg/check-yes.svg) | ![Yes](../images/svg/check-yes.svg)

    Administrative Templates\Microsoft Edge\SmartScreen settings\Prevent bypassing of Microsoft Defender SmartScreen warnings about downloads (Microsoft Edge version 77 or later) Enable. Stops employees from ignoring warning messages and continuing to download potentially malicious files. From b69035ebc4644ab790b7a6d124c2cf99704fe61f Mon Sep 17 00:00:00 2001 From: ShannonLeavitt Date: Tue, 27 Oct 2020 13:58:45 -0600 Subject: [PATCH 006/486] edit pass: enable-network-unlock --- .../bitlocker-how-to-enable-network-unlock.md | 44 ++++++++----------- 1 file changed, 18 insertions(+), 26 deletions(-) diff --git a/windows/security/information-protection/bitlocker/bitlocker-how-to-enable-network-unlock.md b/windows/security/information-protection/bitlocker/bitlocker-how-to-enable-network-unlock.md index 5c7b1190b1..7ba0b08f43 100644 --- a/windows/security/information-protection/bitlocker/bitlocker-how-to-enable-network-unlock.md +++ b/windows/security/information-protection/bitlocker/bitlocker-how-to-enable-network-unlock.md @@ -1,5 +1,5 @@ --- -title: BitLocker How to enable Network Unlock (Windows 10) +title: BitLocker - How to enable Network Unlock (Windows 10) description: This topic for the IT professional describes how BitLocker Network Unlock works and how to configure it. ms.assetid: be45bc28-47db-4931-bfec-3c348151d2e9 ms.reviewer: @@ -23,45 +23,37 @@ ms.custom: bitlocker **Applies to** - Windows 10 -This topic for the IT professional describes how BitLocker Network Unlock works and how to configure it. +This article for IT professionals describes how BitLocker Network Unlock works and how to configure it. -Network Unlock was introduced in Windows 8 and Windows Server 2012 as a BitLocker protector option for operating system volumes. Network Unlock enables easier management for BitLocker enabled desktops and servers in a domain environment by providing automatic unlock of operating system volumes at system reboot when connected to a wired corporate network. This feature requires the client hardware to have a DHCP driver implemented in its UEFI firmware. -Without Network Unlock, operating system volumes protected by TPM+PIN protectors require a PIN to be entered when a computer reboots or resumes from hibernation (for example, by Wake on LAN). This can make it difficult to enterprises to roll out software patches to unattended desktops and remotely administered servers. +Network Unlock was introduced in Windows 8 and Windows Server 2012 as a BitLocker protector option for operating system volumes. Network Unlock helps you manage BitLocker-enabled desktops and servers in a domain environment by automatically unlocking operating system volumes when the system is rebooted and is connected to a wired corporate network. This feature requires the client hardware to have a DHCP driver implemented in its UEFI firmware. -Network Unlock allows BitLocker-enabled systems with TPM+PIN and that meet the hardware requirements to boot into Windows without user intervention. Network Unlock works in a similar fashion to the TPM+StartupKey at boot. Rather than needing to read the StartupKey from USB media, however, the key for Network Unlock is composed from a key stored in the TPM and an encrypted network key that is sent to the server, decrypted and returned to the client in a secure session. +Without Network Unlock, operating system volumes that are protected by TPM+PIN protectors require a PIN when a computer reboots or resumes after hibernation (for example, by Wake on LAN). For enterprises, this setup can make software patches difficult to roll out to unattended desktops and remotely administered servers. -This topic contains: - -- [Network Unlock core requirements](#bkmk-nunlockcorereqs) -- [Network Unlock sequence](#bkmk-networkunlockseq) -- [Configure Network Unlock](#bkmk-configuringnetworkunlock) -- [Create the certificate template for Network Unlock](#bkmk-createcerttmpl) -- [Turning off Network Unlock](#bkmk-turnoffnetworkunlock) -- [Update Network Unlock certificates](#bkmk-updatecerts) -- [Troubleshoot Network Unlock](#bkmk-troubleshoot) -- [Configure Network Unlock on unsupported systems](#bkmk-unsupportedsystems) +Network Unlock allows BitLocker-enabled systems that use TPM+PIN and that meet the hardware requirements to boot into Windows without user intervention. Network Unlock works like the TPM+StartupKey at boot. But the StartupKey doesn't need to be read from USB media. Instead, the key for Network Unlock is composed from a key that's stored in the TPM and an encrypted network key that's sent to the server. It's decrypted and returned to the client in a secure session. ## Network Unlock core requirements -Network Unlock must meet mandatory hardware and software requirements before the feature can automatically unlock domain joined systems. These requirements include: +Network Unlock must meet mandatory hardware and software requirements before the feature can automatically unlock domain-joined systems: - You must be running at least Windows 8 or Windows Server 2012. -- Any supported operating system with UEFI DHCP drivers can be Network Unlock clients. +- Any supported operating system that uses UEFI DHCP drivers can be Network Unlock clients. - Network Unlock clients must have a TPM chip and at least one TPM protector. -- A server running the Windows Deployment Services (WDS) role on any supported server operating system. -- BitLocker Network Unlock optional feature installed on any supported server operating system. -- A DHCP server, separate from the WDS server. -- Properly configured public/private key pairing. -- Network Unlock Group Policy settings configured. +- You must have a server running the Windows Deployment Services (WDS) role on any supported server operating system. +- The BitLocker Network Unlock optional feature can be installed on any supported server operating system. +- You must have a DHCP server, separate from the WDS server. +- You must have a properly configured public/private key pairing. +- Network Unlock Group Policy settings must be configured. -The network stack must be enabled to use the Network Unlock feature. Equipment manufacturers deliver their products in various states and with different BIOS menus, so you need to confirm that the network stack has been enabled in the BIOS before starting the computer. +The network stack must be enabled to use the Network Unlock feature. Equipment manufacturers deliver their products in various states and with different BIOS menus, so you need to confirm that the network stack has been enabled in the BIOS before you start the computer. > [!NOTE] -> To properly support DHCP within UEFI, the UEFI-based system should be in native mode without a compatibility support module (CSM) enabled. +> To properly support DHCP within UEFI, the UEFI-based system should be in native mode and shouldn't have a compatibility support module (CSM) enabled. -For Network Unlock to work reliably on computers running Windows 8 and later, the first network adapter on the computer, usually the onboard adapter, must be configured to support DHCP and used for Network Unlock. This is especially worth noting when you have multiple adapters, and you wish to configure one without DHCP, such as for a lights-out management protocol. This configuration is necessary because Network Unlock will stop enumerating adapters when it reaches one with a DHCP port failure for any reason. Thus, if the first enumerated adapter does not support DHCP, is not plugged into the network, or fails to report availability of the DHCP port for any reason, then Network Unlock will fail. +On computers running Windows 8 and later, the first network adapter on the computer, usually the onboard adapter, must be configured to support DHCP. This adapter must be used for Network Unlock. + +Use this configuration especially when you have multiple adapters and you want to configure one without DHCP, such as for a lights-out management protocol. The configuration is necessary because Network Unlock stops enumerating adapters when it reaches an adapter that has a DHCP port that has failed for any reason. So if the first enumerated adapter doesn't support DHCP, isn't plugged into the network, or fails to report availability of the DHCP port for any reason, then Network Unlock will fail. -The Network Unlock server component installs on supported versions of Windows Server 2012 and later as a Windows feature using Server Manager or Windows PowerShell cmdlets. The feature name is BitLocker Network Unlock in Server Manager and BitLocker-NetworkUnlock in Windows PowerShell. This feature is a core requirement. +On supported versions of Windows Server 2012 and later, the Network Unlock server component installs as a Windows feature. It uses Server Manager or Windows PowerShell cmdlets. In Server Manager, the feature name is BitLocker Network Unlock. In Windows PowerShell, the feature name is BitLocker-NetworkUnlock. This feature is a core requirement. Network Unlock requires Windows Deployment Services (WDS) in the environment where the feature will be utilized. Configuration of the WDS installation is not required; however, the WDS service needs to be running on the server. From 5c9fae720f702d3253bc77c2f786571e0ed47a31 Mon Sep 17 00:00:00 2001 From: ShannonLeavitt Date: Tue, 27 Oct 2020 17:55:11 -0600 Subject: [PATCH 007/486] more edits --- .../bitlocker-how-to-enable-network-unlock.md | 174 +++++++++--------- 1 file changed, 85 insertions(+), 89 deletions(-) diff --git a/windows/security/information-protection/bitlocker/bitlocker-how-to-enable-network-unlock.md b/windows/security/information-protection/bitlocker/bitlocker-how-to-enable-network-unlock.md index 7ba0b08f43..a514c327a4 100644 --- a/windows/security/information-protection/bitlocker/bitlocker-how-to-enable-network-unlock.md +++ b/windows/security/information-protection/bitlocker/bitlocker-how-to-enable-network-unlock.md @@ -55,138 +55,134 @@ Use this configuration especially when you have multiple adapters and you want t On supported versions of Windows Server 2012 and later, the Network Unlock server component installs as a Windows feature. It uses Server Manager or Windows PowerShell cmdlets. In Server Manager, the feature name is BitLocker Network Unlock. In Windows PowerShell, the feature name is BitLocker-NetworkUnlock. This feature is a core requirement. -Network Unlock requires Windows Deployment Services (WDS) in the environment where the feature will be utilized. Configuration of the WDS installation is not required; however, the WDS service needs to be running on the server. +Network Unlock requires WDS in the environment where the feature will be used. Configuration of the WDS installation is not required. But the WDS service needs to be running on the server. -The network key is stored on the system drive along with an AES 256 session key, and encrypted with the 2048-bit RSA public key of the unlock server's certificate. The network key is decrypted with the help of a provider on a supported version of Windows Server running WDS, and returned encrypted with its corresponding session key. +The network key is stored on the system drive along with an AES 256 session key. It's encrypted with the 2048-bit RSA public key of the unlock server's certificate. The network key is decrypted with the help of a provider on a supported version of Windows Server that's running WDS. It's returned encrypted with its corresponding session key. ## Network Unlock sequence -The unlock sequence starts on the client side, when the Windows boot manager detects the existence of Network Unlock protector. It leverages the DHCP driver in UEFI to obtain an IP address for IPv4 and then broadcasts a vendor-specific DHCP request that contains the network key and a session key for the reply, all encrypted by the server's Network Unlock certificate, as described above. The Network Unlock provider on the supported WDS server recognizes the vendor-specific request, decrypts it with the RSA private key, and returns the network key encrypted with the session key via its own vendor-specific DHCP reply. +The unlock sequence starts on the client side, when the Windows boot manager detects the existence of the Network Unlock protector. It uses the DHCP driver in UEFI to get an IP address for IPv4. Then it broadcasts a vendor-specific DHCP request that contains the network key and a session key for the reply, all encrypted by the server's Network Unlock certificate, as described earlier. The Network Unlock provider on the supported WDS server recognizes the vendor-specific request, decrypts it with the RSA private key, and returns the network key encrypted with the session key via its own vendor-specific DHCP reply. -On the server side, the WDS server role has an optional plugin component, like a PXE provider, which is what handles the incoming Network Unlock requests. The provider can also be configured with subnet restrictions, which would require that the IP address provided by the client in the Network Unlock request belong to a permitted subnet in order to release the network key to the client. In instances where the Network Unlock provider is unavailable, BitLocker fails over to the next available protector to unlock the drive. In a typical configuration, this means the standard TPM+PIN unlock screen is presented to unlock the drive. +On the server side, the WDS server role has an optional plug-in component, like a PXE (preboot execution environment) provider, which is what handles the incoming Network Unlock requests. The provider can also be configured with subnet restrictions. These restrictions would require that the IP address provided by the client in the Network Unlock request belong to a permitted subnet in order to release the network key to the client. If the Network Unlock provider is unavailable, then BitLocker fails over to the next available protector to unlock the drive. So in a typical configuration, the standard TPM+PIN unlock screen is presented to unlock the drive. -The server side configuration to enable Network Unlock also requires provisioning a 2048-bit RSA public/private key pair in the form of an X.509 certificate, and for the public key certificate to be distributed to the clients. This certificate must be managed and deployed through the Group Policy editor directly on a domain controller with at least a Domain Functional Level of Windows Server 2012. This certificate is the public key that encrypts the intermediate network key (which is one of the two secrets required to unlock the drive; the other secret is stored in the TPM). +The server-side configuration to enable Network Unlock also requires provisioning a 2048-bit RSA public/private key pair in the form of an X.509 certificate. The configuration also requires the public key certificate to be distributed to the clients. This certificate must be managed and deployed through the Group Policy editor directly on a domain controller that has a domain functional level of at least Windows Server 2012. This certificate is the public key that encrypts the intermediate network key. The intermediate network key is one of the two secrets required to unlock the drive; the other secret is stored in the TPM. -![bitlocker network unlock sequence](images/bitlockernetworkunlocksequence.png) +![Diagram showing the BitLocker network unlock sequence.](images/bitlockernetworkunlocksequence.png) -**Phases in the Network Unlock process** +The Network Unlock process follows these phases: -1. The Windows boot manager detects that a Network Unlock protector exists in the BitLocker configuration. -2. The client computer uses its DHCP driver in the UEFI to obtain a valid IPv4 IP address. +1. The Windows boot manager detects a Network Unlock protector in the BitLocker configuration. +2. The client computer uses its DHCP driver in the UEFI to get a valid IPv4 IP address. 3. The client computer broadcasts a vendor-specific DHCP request that contains: - 1. A Network Key (a 256-bit intermediate key) encrypted using the 2048-bit RSA Public Key of the Network Unlock certificate from the WDS server. - 2. An AES-256 session key for the reply. + - A network key (a 256-bit intermediate key) that's encrypted by the 2048-bit RSA public key of the Network Unlock certificate from the WDS server. + - An AES-256 session key for the reply. 4. The Network Unlock provider on the WDS server recognizes the vendor-specific request. -5. The provider decrypts it with the WDS server’s BitLocker Network Unlock certificate RSA private key. -6. The WDS provider then returns the network key encrypted with the session key using its own vendor-specific DHCP reply to the client computer. This forms an intermediate key. -7. The returned intermediate key is then combined with another local 256-bit intermediate key that can only be decrypted by the TPM. +5. The provider decrypts it with the WDS server's BitLocker Network Unlock certificate RSA private key. +6. The WDS provider then returns the network key encrypted with the session key by using its own vendor-specific DHCP reply to the client computer. This key is an intermediate key. +7. The returned intermediate key is then combined with another local 256-bit intermediate key. This key can be decrypted only by the TPM. 8. This combined key is used to create an AES-256 key that unlocks the volume. 9. Windows continues the boot sequence. ## Configure Network Unlock -The following steps allow an administrator to configure Network Unlock in a domain where the Domain Functional Level is at least Windows Server 2012. +The following steps allow an administrator to configure Network Unlock in a domain where the domain functional level is at least Windows Server 2012. ### Install the WDS Server role -The BitLocker Network Unlock feature will install the WDS role if it is not already installed. If you want to install it separately before you install BitLocker Network Unlock you can use Server Manager or Windows PowerShell. To install the role using Server Manager, select the **Windows Deployment Services** role in Server Manager. +The BitLocker Network Unlock feature installs the WDS role if it's not already installed. If you want to install it separately before you install BitLocker Network Unlock, use Server Manager or Windows PowerShell. To install the role by using Server Manager, select the **Windows Deployment Services** role in Server Manager. -To install the role using Windows PowerShell, use the following command: +To install the role by using Windows PowerShell, use the following command: ```powershell Install-WindowsFeature WDS-Deployment ``` -You must configure the WDS server so that it can communicate with DHCP (and optionally Active Directory Domain Services) and the client computer. You can do using the WDS management tool, wdsmgmt.msc, which starts the Windows Deployment Services Configuration Wizard. +Configure the WDS server so that it can communicate with DHCP (and optionally Active Directory Domain Services) and the client computer. You can do so by using the WDS management tool, `wdsmgmt.msc`. This tool starts the Windows Deployment Services Configuration Wizard. -### Confirm the WDS Service is running +### Confirm the WDS service is running -To confirm the WDS service is running, use the Services Management Console or Windows PowerShell. To confirm the service is running in Services Management Console, open the console using **services.msc** and check the status of the Windows Deployment Services service. +To confirm the WDS service is running, use the Services Management console or Windows PowerShell. To confirm the service is running in the Services Management console, open the console by using `services.msc`. Then check the status of the WDS service. -To confirm the service is running using Windows PowerShell, use the following command: +To confirm the service is running by using Windows PowerShell, use the following command: ```powershell Get-Service WDSServer ``` ### Install the Network Unlock feature -To install the Network Unlock feature, use Server Manager or Windows PowerShell. To install the feature using Server Manager, select the **BitLocker Network Unlock** feature in the Server Manager console. +To install the Network Unlock feature, use Server Manager or Windows PowerShell. To install the feature by using Server Manager, in the Server Manager console, select **BitLocker Network Unlock**. -To install the feature using Windows PowerShell, use the following command: +To install the feature by using Windows PowerShell, use the following command: ```powershell Install-WindowsFeature BitLocker-NetworkUnlock ``` ### Create the certificate template for Network Unlock -A properly configured Active Directory Services Certification Authority can use this certificate template to create and issue Network Unlock certificates. +A properly configured Active Directory Services Certification Authority can use the certificate template to create and issue Network Unlock certificates. -1. Open the Certificates Template snap-in (certtmpl.msc). -2. Locate the User template. Right-click the template name and select **Duplicate Template**. -3. On the **Compatibility** tab, change the **Certification Authority** and **Certificate recipient** fields to Windows Server 2012 and Windows 8 respectively. Ensure the **Show resulting changes** dialog box is selected. -4. Select the **General** tab of the template. The **Template display name** and **Template name** should clearly identify that the template will be used for Network Unlock. Clear the checkbox for the **Publish certificate in Active Directory** option. -5. Select the **Request Handling** tab. Select **Encryption** from the **Purpose** drop down menu. Ensure the **Allow private key to be exported** option is selected. -6. Select the **Cryptography** tab. Set the **Minimum key size** to 2048. (Any Microsoft cryptographic provider that supports RSA can be used for this template, but for simplicity and forward compatibility we recommend using the **Microsoft Software Key Storage Provider**.) -7. Select the **Requests must use one of the following providers** option and clear all options except for the cryptography provider you selected, such as the **Microsoft Software Key Storage Provider**. -8. Select the **Subject Name** tab. Select **Supply in the request**. Select **OK** if the certificate templates pop-up dialog appears. -9. Select the **Issuance Requirements** tab. Select both **CA certificate manager approval** and **Valid existing certificate** options. -10. Select the **Extensions** tab. Select **Application Policies** and choose **Edit…**. -11. In the **Edit Application Policies Extension** options dialog box, select **Client Authentication**, **Encrypting File System**, **and Secure Email** and choose **Remove**. -12. On the **Edit Application Policies Extension** dialog box, select **Add**. -13. On the **Add Application Policy** dialog box, select **New**. In the **New Application Policy** dialog box enter the following information in the space provided and then click **OK** to create the BitLocker Network Unlock application policy: +1. Open the certificate template snap-in (`certtmpl.msc`). +2. Locate the user template. Right-click the template name and then select **Duplicate Template**. +3. On the **Compatibility** tab, change the **Certification Authority** and **Certificate recipient** fields to Windows Server 2012 and Windows 8, respectively. Ensure the **Show resulting changes** dialog box is selected. +4. Select the **General** tab of the template. The **Template display name** and **Template name** should clearly identify that the template will be used for Network Unlock. Clear the check box for **Publish certificate in Active Directory**. +5. Select the **Request Handling** tab. In the **Purpose** drop-down menu, select **Encryption**. Ensure the **Allow private key to be exported** option is selected. +6. Select the **Cryptography** tab. Set the **Minimum key size** to *2048*. (For this template, you can use any Microsoft cryptographic provider that supports RSA. But for simplicity and forward compatibility, we recommend using **Microsoft Software Key Storage Provider**.) +7. Select **Requests must use one of the following providers**. Then clear all options except for your selected cryptography provider, such as the **Microsoft Software Key Storage Provider**. +8. Select the **Subject Name** tab. Select **Supply in the request**. If the certificate templates dialog box appears, select **OK**. +9. Select the **Issuance Requirements** tab. Then select both **CA certificate manager approval** and **Valid existing certificate**. +10. Select the **Extensions** tab. Then select **Application Policies** > **Edit**. +11. In the **Edit Application Policies Extension** dialog box, select **Client Authentication**, **Encrypting File System**, and **Secure Email**. Then choose **Remove**. +12. In the **Edit Application Policies Extension** dialog box, select **Add**. +13. In the **Add Application Policy** dialog box, select **New**. In the **New Application Policy** dialog box, enter the following information in the space provided and then click **OK** to create the BitLocker Network Unlock application policy: - - **Name:** **BitLocker Network Unlock** - - **Object Identifier:** **1.3.6.1.4.1.311.67.1.1** + - **Name**: **BitLocker Network Unlock** + - **Object Identifier**: **1.3.6.1.4.1.311.67.1.1** -14. Select the newly created **BitLocker Network Unlock** application policy and select **OK**. -15. With the **Extensions** tab still open, select the **Edit Key Usage Extension** dialog, select the **Allow key exchange only with key encryption (key encipherment)** option. Select the **Make this extension critical** option. +14. Select the newly created **BitLocker Network Unlock** application policy and then select **OK**. +15. With the **Extensions** tab still open, select **Edit Key Usage Extension**, and then select **Allow key exchange only with key encryption (key encipherment)**. Then select **Make this extension critical**. 16. Select the **Security** tab. Confirm that the **Domain Admins** group has been granted **Enroll** permission. 17. Select **OK** to complete configuration of the template. -To add the Network Unlock template to the Certification Authority, open the Certification Authority snap-in (certsrv.msc). Right-click the **Certificate Templates** item and choose **New, Certificate Template to issue**. Select the previously created BitLocker Network Unlock certificate. +To add the Network Unlock template to the certificate authority, open the certificate authority snap-in (`certsrv.msc`). Right-click **Certificate Templates** and then choose **New, Certificate Template to issue**. Select the previously created BitLocker Network Unlock certificate. -After adding the Network Unlock template to the Certification Authority, this certificate can be used to configure BitLocker Network Unlock. +After you add the Network Unlock template to the certificate authority, you can use this certificate to configure BitLocker Network Unlock. ### Create the Network Unlock certificate -Network Unlock can use imported certificates from an existing PKI infrastructure, or you can use a self-signed certificate. +Network Unlock can use imported certificates from an existing public key infrastructure (PKI), or you can use a self-signed certificate. -To enroll a certificate from an existing certification authority (CA), do the following: +To enroll a certificate from an existing certificate authority: -1. Open Certificate Manager on the WDS server using **certmgr.msc** -2. Under the Certificates - Current User item, right-click Personal -3. Select All Tasks, then **Request New Certificate** -4. Select **Next** when the Certificate Enrollment wizard opens -5. Select Active Directory Enrollment Policy -6. Choose the certificate template created for Network Unlock on the Domain controller and select **Enroll**. When prompted for more information, add the following attribute to the certificate: +1. On the WDS server, open Certificate Manager by using `certmgr.msc`. +2. Under **Certificates - Current User**, right-click **Personal**. +3. Select **All Tasks** > **Request New Certificate**. +4. When the Certificate Enrollment wizard opens, select **Next**. +5. Select **Active Directory Enrollment Policy**. +6. Choose the certificate template that was created for Network Unlock on the domain controller. Then select **Enroll**. +1. When you're prompted for more information, select **Subject Name** and provide a friendly name value. Your friendly name should include information for the domain or organizational unit for the certificate. Here's an example: *BitLocker Network Unlock Certificate for Contoso domain*. +7. Create the certificate. Ensure the certificate appears in the **Personal** folder. +8. Export the public key certificate for Network Unlock: - - Select the **Subject Name** pane and provide a friendly name value. It is suggested that this friendly name include information for the domain or organizational unit for the certificate. For example "BitLocker Network Unlock Certificate for Contoso domain" - -7. Create the certificate. Ensure the certificate appears in the Personal folder. -8. Export the public key certificate for Network Unlock - - 1. Create a .cer file by right-clicking the previously created certificate, choosing **All Tasks**, then **Export**. + 1. Create a *.cer* file by right-clicking the previously created certificate and choosing **All Tasks** > **Export**. 2. Select **No, do not export the private key**. - 3. Select **DER encoded binary X.509** and complete exporting the certificate to a file. - 4. Give the file a name such as BitLocker-NetworkUnlock.cer. - -9. Export the public key with a private key for Network Unlock - - 1. Create a .pfx file by right-clicking the previously created certificate, choosing **All Tasks**, then **Export**. + 3. Select **DER encoded binary X.509** and then finish exporting the certificate to a file. + 4. Give the file a name, such as *BitLocker-NetworkUnlock.cer*. +9. Export the public key with a private key for Network Unlock: + 1. Create a *.pfx* file by right-clicking the previously created certificate. Then choose **All Tasks** > **Export**. 2. Select **Yes, export the private key**. - 3. Complete the wizard to create the .pfx file. + 3. Complete the steps to create the *.pfx* file. To create a self-signed certificate, you can either use the New-SelfSignedCertificate cmdlet in Windows PowerShell or use Certreq. -Windows PowerShell example: +Here's a Windows PowerShell example: ```powershell New-SelfSignedCertificate -CertStoreLocation Cert:\LocalMachine\My -Subject "CN=BitLocker Network Unlock certificate" -Provider "Microsoft Software Key Storage Provider" -KeyUsage KeyEncipherment -KeyUsageProperty Decrypt,Sign -KeyLength 2048 -HashAlgorithm sha512 -TextExtension @("1.3.6.1.4.1.311.21.10={text}OID=1.3.6.1.4.1.311.67.1.1","2.5.29.37={text}1.3.6.1.4.1.311.67.1.1") ``` -Certreq example: +Here's a Certreq example: -1. Create a text file with an .inf extension. For example, notepad.exe BitLocker-NetworkUnlock.inf. +1. Create a text file with an *.inf* extension. For example, *notepad.exe* *BitLocker-NetworkUnlock.inf*. 2. Add the following contents to the previously created file: ```ini @@ -208,53 +204,53 @@ Certreq example: _continue_ = "1.3.6.1.4.1.311.67.1.1" ``` -3. Open an elevated command prompt and use the certreq tool to create a new certificate using the following command, specifying the full path to the file created previously, along with the file name: +3. Open an elevated command prompt and use the `certreq` tool to create a new certificate. Use the following command, specifying the full path to the file that you created previously. Also specify the file name: ```cmd certreq -new BitLocker-NetworkUnlock.inf BitLocker-NetworkUnlock.cer ``` -4. Verify the previous command properly created the certificate by confirming the .cer file exists. -5. Launch Certificates - Local Machine by running **certlm.msc**. -6. Create a .pfx file by opening the **Certificates – Local Computer\\Personal\\Certificates** path in the navigation pane, right-clicking the previously imported certificate, selecting **All Tasks**, then **Export**. Follow through the wizard to create the .pfx file. +4. Verify the previous command properly created the certificate by confirming the *.cer* file exists. +5. Launch **Certificates - Local Machine** by running `certlm.msc`. +6. Create a *.pfx* file by opening the *Certificates – Local Computer\\Personal\\Certificates* path in the navigation pane. Right-click the previously imported certificate, and then select **All Tasks** > **Export**. Follow through the steps to create the *.pfx* file. ### Deploy the private key and certificate to the WDS server -With the certificate and key created, deploy them to the infrastructure to properly unlock systems. To deploy the certificates, do the following: +Now that the certificate and key are created, deploy them to the infrastructure to properly unlock systems. To deploy the certificates: -1. On the WDS server, open a new MMC and add the certificates snap-in. Select the computer account and local computer when given the options. -2. Right-click the Certificates (Local Computer) - BitLocker Drive Encryption Network Unlock item, choose All Tasks, then **Import**. -3. In the **File to Import** dialog, choose the .pfx file created previously. -4. Enter the password used to create the .pfx and complete the wizard. +1. On the WDS server, open a new Microsoft Management Console (MMC) and then add the certificates snap-in. Select the computer account and local computer when these options appear. +2. Right-click **Certificates (Local Computer) - BitLocker Drive Encryption Network Unlock** and then choose **All Tasks** > **Import**. +3. In the **File to Import** dialog box, choose the *.pfx* file that you created previously. +4. Enter the password that you used to create the *.pfx*, and finish the steps. ### Configure Group Policy settings for Network Unlock -With certificate and key deployed to the WDS server for Network Unlock, the final step is to use Group Policy settings to deploy the public key certificate to computers that you want to be able to unlock using the Network Unlock key. Group Policy settings for BitLocker can be found under **\\Computer Configuration\\Administrative Templates\\Windows Components\\BitLocker Drive Encryption** using the Local Group Policy Editor or the Microsoft Management Console. +Now that you've deployed the certificate and key to the WDS server for Network Unlock, the final step is to use Group Policy settings to deploy the public key certificate to computers that you want to be able to unlock by using the Network Unlock key. You can find Group Policy settings for BitLocker in *\\Computer Configuration\\Administrative Templates\\Windows Components\\BitLocker Drive Encryption* by using the Local Group Policy Editor or the MMC. -The following steps describe how to enable the Group Policy setting that is a requirement for configuring Network Unlock. +To enable the Group Policy setting that's required to configure Network Unlock: -1. Open Group Policy Management Console (gpmc.msc). -2. Enable the policy **Require additional authentication at startup** and select the **Require startup PIN with TPM** or **Allow startup PIN with TPM** option. +1. Open Group Policy Management Console (`gpmc.msc`). +2. Enable the policy **Require additional authentication at startup**, and then select **Require startup PIN with TPM** or **Allow startup PIN with TPM**. 3. Turn on BitLocker with TPM+PIN protectors on all domain-joined computers. -The following steps describe how to deploy the required Group Policy setting: +To deploy the required Group Policy setting: > [!NOTE] > The Group Policy settings **Allow network unlock at startup** and **Add Network Unlock Certificate** were introduced in Windows Server 2012. -1. Copy the .cer file created for Network Unlock to the domain controller. -2. On the domain controller, launch Group Policy Management Console (gpmc.msc). +1. Copy the *.cer* file that you created for Network Unlock to the domain controller. +2. On the domain controller, launch Group Policy Management Console (`gpmc.msc`). 3. Create a new Group Policy Object or modify an existing object to enable the **Allow network unlock at startup** setting. 4. Deploy the public certificate to clients: - 1. Within Group Policy Management Console, navigate to the following location: **Computer Configuration\\Policies\\Windows Settings\\Security Settings\\Public Key Policies\\BitLocker Drive Encryption Network Unlock Certificate**. - 2. Right-click the folder and choose **Add Network Unlock Certificate**. - 3. Follow the wizard steps and import the .cer file that was copied earlier. + 1. In Group Policy Management Console, go to the following location: *Computer Configuration\\Policies\\Windows Settings\\Security Settings\\Public Key Policies\\BitLocker Drive Encryption Network Unlock Certificate*. + 2. Right-click the folder and then choose **Add Network Unlock Certificate**. + 3. Follow the steps and import the *.cer* file that you copied earlier. -> [!NOTE] -> Only one network unlock certificate can be available at a time. If a new certificate is required, delete the current certificate before deploying a new one. The Network Unlock certificate is located in the **HKEY\_LOCAL\_MACHINE\\Software\\Policies\\Microsoft\\SystemCertificates\\FVE\_NKP** key on the client computer. + > [!NOTE] + > Only one network unlock certificate can be available at a time. If a new certificate is required, delete the current certificate before you deploy a new one. The Network Unlock certificate is located in the *HKEY\_LOCAL\_MACHINE\\Software\\Policies\\Microsoft\\SystemCertificates\\FVE\_NKP* key on the client computer. -5. Reboot the clients after deploying the group policy. +5. Reboot the clients after you deploy the group policy. > [!NOTE] > The **Network (Certificate Based)** protector will be added only after a reboot with the policy enabled and a valid certificate present in the FVE_NKP store. From 373561d1e82e0e6908a478803e5cac7f5212c19e Mon Sep 17 00:00:00 2001 From: ShannonLeavitt Date: Wed, 28 Oct 2020 07:57:44 -0600 Subject: [PATCH 008/486] more edits --- .../bitlocker-how-to-enable-network-unlock.md | 118 +++++++++--------- 1 file changed, 60 insertions(+), 58 deletions(-) diff --git a/windows/security/information-protection/bitlocker/bitlocker-how-to-enable-network-unlock.md b/windows/security/information-protection/bitlocker/bitlocker-how-to-enable-network-unlock.md index a514c327a4..4a7d9d600f 100644 --- a/windows/security/information-protection/bitlocker/bitlocker-how-to-enable-network-unlock.md +++ b/windows/security/information-protection/bitlocker/bitlocker-how-to-enable-network-unlock.md @@ -252,15 +252,15 @@ To deploy the required Group Policy setting: 5. Reboot the clients after you deploy the group policy. > [!NOTE] - > The **Network (Certificate Based)** protector will be added only after a reboot with the policy enabled and a valid certificate present in the FVE_NKP store. + > The **Network (Certificate Based)** protector is added only after a reboot. The policy must be enabled, and a valid certificate must be present in the FVE_NKP store. -### Subnet policy configuration files on WDS Server (Optional) +### Subnet policy configuration files on the WDS server (Optional) -By default, all clients with the correct Network Unlock Certificate and valid Network Unlock protectors that have wired access to a Network Unlock-enabled WDS server via DHCP are unlocked by the server. A subnet policy configuration file on the WDS server can be created to limit which subnet(s) Network Unlock clients can use to unlock. +By default, clients are unlocked by the server if they have the correct Network Unlock certificate and valid Network Unlock protectors that have wired access to a Network Unlock-enabled WDS server via DHCP. You can create a subnet policy configuration file on the WDS server to limit the subnets that Network Unlock clients can use to unlock. -The configuration file, called bde-network-unlock.ini, must be located in the same directory as the Network Unlock provider DLL (%windir%\System32\Nkpprov.dll) and it applies to both IPv6 and IPv4 DHCP implementations. If the subnet configuration policy becomes corrupted, the provider will fail and stop responding to requests. +The configuration file, called *bde-network-unlock.ini*, must be located in the same directory as the Network Unlock provider DLL (*%windir%\System32\Nkpprov.dll*). It applies to both IPv6 and IPv4 DHCP implementations. If the subnet configuration policy becomes corrupted, then the provider fails and stops responding to requests. -The subnet policy configuration file must use a “\[SUBNETS\]” section to identify the specific subnets. The named subnets may then be used to specify restrictions in certificate subsections. Subnets are defined as simple name-value pairs, in the common INI format, where each subnet has its own line, with the name on the left of the equals sign, and the subnet identified on the right of the equal sign as a Classless Inter-Domain Routing (CIDR) address or range. The key word “ENABLED” is disallowed for subnet names. +The subnet policy configuration file must use a `[SUBNETS]` section to identify the specific subnets. The named subnets can then be used to specify restrictions in certificate subsections. Subnets are defined as simple name-value pairs, in the common INI format. In this format, each subnet has its own line. The name is on the left of the equals sign. The subnet that's identified on the right of the equals sign is a Classless Interdomain Routing (CIDR) address or range. The keyword `ENABLED` is disallowed for subnet names. ```ini [SUBNETS] @@ -270,110 +270,112 @@ SUBNET3= 2001:4898:a:2::/64 ; an IPv6 subnet SUBNET4=2001:4898:a:3::/64; in production, the admin would likely give more useful names, like BUILDING9-EXCEPT-RECEP. ``` -Following the \[SUBNETS\] section, there can be sections for each Network Unlock certificate, identified by the certificate thumbprint formatted without any spaces, which define subnets clients can be unlocked from with that certificate. +Following the `[SUBNETS]` section are sections for each Network Unlock certificate. A certificate is identified by the certificate thumbprint, which is formatted without any spaces. These sections define subnet clients that can be unlocked by using that certificate. > [!NOTE] -> When specifying the certificate thumbprint, do not include any spaces. If spaces are included in the thumbprint the subnet configuration will fail because the thumbprint will not be recognized as valid. +> When you specify the certificate thumbprint, don't include spaces. Thumbprints that include spaces aren't recognized as valid. These will cause the subnet configuration to fail. -Subnet restrictions are defined within each certificate section by denoting the allowed list of permitted subnets. If any subnet is listed in a certificate section, then only those subnets listed are permitted for that certificate. If no subnet is listed in a certificate section, then all subnets are permitted for that certificate. If a certificate does not have a section in the subnet policy configuration file, then no subnet restrictions are applied for unlocking with that certificate. This means for restrictions to apply to every certificate, there must be a certificate section for every Network Unlock certificate on the server, and an explicit allowed list set for each certificate section. -Subnet lists are created by putting the name of a subnet from the \[SUBNETS\] section on its own line below the certificate section header. Then, the server will only unlock clients with this certificate on the subnet(s) specified as in the list. For troubleshooting, a subnet can be quickly excluded without deleting it from the section by simply commenting it out with a prepended semi-colon. +Each certificate section defines subnet restrictions by denoting the allowed list of permitted subnets. If any subnets are listed in a certificate section, then only those subnets are permitted for that certificate. If no subnet is listed in a certificate section, then all subnets are permitted for that certificate. If a certificate has no section in the subnet policy configuration file, then no subnet unlocking restrictions are applied for that certificate. So to apply restrictions to every certificate, you must add a certificate section for every Network Unlock certificate on the server. And you must add an explicit allow list set for each certificate section. + +Create subnet lists by putting the name of a subnet from the `[SUBNETS]` section on its own line below the certificate section header. Then, the server will unlock clients that have this certificate only on the subnets that the list specifies. To troubleshoot, you can quickly exclude a subnet without deleting it from the section by simply commenting it out with a prepended semicolon. ```ini [2158a767e1c14e88e27a4c0aee111d2de2eafe60] ;Comments could be added here to indicate when the cert was issued, which Group Policy should get it, and so on. -;This list shows this cert is only allowed to unlock clients on SUBNET1 and SUBNET3 subnets. In this example, SUBNET2 is commented out. +;This list shows this cert is allowed to unlock clients only on the SUBNET1 and SUBNET3 subnets. In this example, SUBNET2 is commented out. SUBNET1 ;SUBNET2 SUBNET3 ``` -To disallow the use of a certificate altogether, its subnet list may contain the line “DISABLED". +To disallow the use of a certificate altogether, you can add a `DISABLED` line to its subnet list. -## Turning off Network Unlock +## Turn off Network Unlock -To turn off the unlock server, the PXE provider can be unregistered from the WDS server or uninstalled altogether. However, to stop clients from creating Network Unlock protectors the **Allow Network Unlock at startup** Group Policy setting should be disabled. When this policy setting is updated to disabled on client computers any Network Unlock key protectors on the computer will be deleted. Alternatively, the BitLocker Network Unlock certificate policy can be deleted on the domain controller to accomplish the same task for an entire domain. +To turn off the unlock server, you can unregister the PXE provider from the WDS server or uninstall it altogether. However, to stop clients from creating Network Unlock protectors, you should disable the **Allow Network Unlock at startup** Group Policy setting. When you disable this policy setting on client computers, any Network Unlock key protectors on the computer are deleted. Alternatively, you can delete the BitLocker Network Unlock certificate policy on the domain controller to accomplish the same task for an entire domain. > [!NOTE] -> Removing the FVE_NKP certificate store that contains the Network Unlock certificate and key on the WDS server will also effectively disable the server’s ability to respond to unlock requests for that certificate. However, this is seen as an error condition and is not a supported or recommended method for turning off the Network Unlock server. +> Removing the FVE_NKP certificate store that contains the Network Unlock certificate and key on the WDS server will also effectively disable the server's ability to respond to unlock requests for that certificate. However, this is seen as an error condition. It's not a supported or recommended method for turning off the Network Unlock server. ## Update Network Unlock certificates -To update the certificates used by Network Unlock, administrators need to import or generate the new certificate for the server and then update the Network Unlock certificate Group Policy setting on the domain controller. +To update the certificates that Network Unlock uses, administrators need to import or generate the new certificate for the server. Then they must update the Network Unlock certificate Group Policy setting on the domain controller. > [!NOTE] -> Servers that do not receive the Group Policy Object (GPO) will require a PIN when booting. In such cases, the reason why the server did not receive the GPO to update the certificate needs to be investigated. +> Servers that don't receive the Group Policy Object (GPO) will require a PIN when they boot. In such cases, find out why the server didn't receive the GPO to update the certificate. ## Troubleshoot Network Unlock -Troubleshooting Network Unlock issues begins by verifying the environment. Many times, a small configuration issue will be the root cause of the failure. Items to verify include: +To troubleshoot Network Unlock issues, begin by verifying the environment. Many times, a small configuration issue is the root cause of the failure. Verify these items: -- Verify client hardware is UEFI-based and is on firmware version is 2.3.1 and that the UEFI firmware is in native mode without a Compatibility Support Module (CSM) for BIOS mode enabled. Do this by checking that the firmware does not have an option enabled such as "Legacy mode" or "Compatibility mode" or that the firmware does not appear to be in a BIOS-like mode. -- All required roles and services are installed and started -- Public and private certificates have been published and are in the proper certificate containers. The presence of the Network Unlock certificate can be verified in the Microsoft Management Console (MMC.exe) on the WDS server with the certificate snap-ins for the local computer enabled. The client certificate can be verified by checking the registry key **HKEY\_LOCAL\_MACHINE\\Software\\Policies\\Microsoft\\SystemCertificates\\FVE\_NKP** on the client computer. -- Group policy for Network Unlock is enabled and linked to the appropriate domains. -- Verify group policy is reaching the clients properly. This can be done using the GPRESULT.exe or RSOP.msc utilities. -- Verify the clients were rebooted after applying the policy. -- Verify the **Network (Certificate Based)** protector is listed on the client. This can be done using either manage-bde or Windows PowerShell cmdlets. For example the following command will list the key protectors currently configured on the C: drive of the local computer: +- Client hardware is UEFI-based and is using firmware version 2.3.1, and the UEFI firmware is in native mode doesn't have a Compatibility Support Module (CSM) for BIOS mode enabled. Verify this configuration by checking that the firmware has no enabled option such as **Legacy mode** or **Compatibility mode** or that the firmware doesn't appear to be in a BIOS-like mode. +- All required roles and services are installed and started. +- Public and private certificates have been published and are in the proper certificate containers. Verify the presence of the Network Unlock certificate by using Microsoft Management Console (*MMC.exe*) on the WDS server. The certificate snap-ins for the local computer should be enabled. Verify the client certificate by checking the registry key *HKEY\_LOCAL\_MACHINE\\Software\\Policies\\Microsoft\\SystemCertificates\\FVE\_NKP* on the client computer. +- Group Policy for Network Unlock is enabled and linked to the appropriate domains. +- Group Policy is reaching the clients properly. Verify this functionality by using the *GPRESULT.exe* utility or *RSOP.msc* utility. +- The clients were rebooted after the policy was applied. +- The **Network (Certificate Based)** protector is listed on the client. Check for this protector by using either `manage-bde` or Windows PowerShell cmdlets. For example, the following command lists the key protectors that are currently configured on drive C on the local computer. ```powershell manage-bde -protectors -get C: ``` > [!NOTE] - > Use the output of manage-bde along with the WDS debug log to determine if the proper certificate thumbprint is being used for Network Unlock + > Use the output of `manage-bde` along with the WDS debug log to determine whether the proper certificate thumbprint is being used for Network Unlock. -Files to gather when troubleshooting BitLocker Network Unlock include: +Gather the following files to troubleshoot BitLocker Network Unlock. -1. The Windows event logs. Specifically the BitLocker event logs and the Microsoft-Windows-Deployment-Services-Diagnostics-Debug log +- The Windows event logs. Specifically, get the BitLocker event logs and the Microsoft-Windows-Deployment-Services-Diagnostics-Debug log. - Debug logging is turned off by default for the WDS server role, so you will need to enable it first. You can use either of the following two methods to turn on WDS debug logging. + Debug logging is turned off by default for the WDS server role, so you need to enable it before you can retrieve it. Use either of the following two methods to turn on WDS debug logging. - 1. Start an elevated command prompt and run the following command: + - Start an elevated command prompt and then run the following command: ```cmd wevtutil sl Microsoft-Windows-Deployment-Services-Diagnostics/Debug /e:true ``` - 2. Open Event Viewer on the WDS server. + - Open Event Viewer on the WDS server. - In the left pane, click **Applications and Services Logs**, click **Microsoft**, click **Windows**, click **Deployment-Services-Diagnostics**, and then click **Debug**. + In the left pane, select **Applications and Services Logs** > **Microsoft** > **Windows** > **Deployment-Services-Diagnostics** > **Debug**. - In the right pane, click **Enable Log**. + In the right pane, selet **Enable Log**. -2. The DHCP subnet configuration file (if one exists). -3. The output of the BitLocker status on the volume, this can be gathered into a text file using **manage-bde -status** or **Get-BitLockerVolume** in Windows PowerShell. -4. Network Monitor capture on the server hosting the WDS role, filtered by client IP address. +- The DHCP subnet configuration file (if one exists). +- The output of the BitLocker status on the volume. Gather this output into a text file by using `manage-bde -status`. Or in Windows PowerShell, use `Get-BitLockerVolume`. +- The Network Monitor capture on the server that hosts the WDS role, filtered by client IP address. ## Configure Network Unlock Group Policy settings on earlier versions -Network Unlock and the accompanying Group Policy settings were introduced in Windows Server 2012 but can be deployed using operating systems running Windows Server 2008 R2 and Windows Server 2008. +Network Unlock and the accompanying Group Policy settings were introduced in Windows Server 2012. But you can deploy them by using operating systems that run Windows Server 2008 R2 and Windows Server 2008. -**Requirements** +Requirements: -- The server hosting WDS must be running any of the server operating systems designated in the **Applies To** list at the beginning of this topic. -- Client computers must be running any of the client operating systems designated in the **Applies To** list at the beginning of this topic. +- The server that hosts WDS must be running a server operating system that's designated in the **Applies to** list at the beginning of this article. +- Client computers must be running a client operating system that's designated in the **Applies to** list at the beginning of this article. -The following steps can be used to configure Network Unlock on these older systems. +Follow these steps to configure Network Unlock on these older systems. -1. [Install the WDS Server role](#bkmk-installwdsrole) -2. [Confirm the WDS Service is running](#bkmk-confirmwdsrunning) -3. [Install the Network Unlock feature](#bkmk-installnufeature) -4. [Create the Network Unlock certificate](#bkmk-createcert) -5. [Deploy the private key and certificate to the WDS server](#bkmk-deploycert) +1. [Install the WDS Server role.](#bkmk-installwdsrole) +2. [Confirm the WDS service is running.](#bkmk-confirmwdsrunning) +3. [Install the Network Unlock feature.](#bkmk-installnufeature) +4. [Create the Network Unlock certificate.](#bkmk-createcert) +5. [Deploy the private key and certificate to the WDS server.](#bkmk-deploycert) 6. Configure registry settings for Network Unlock: - Apply the registry settings by running the following certutil script (assuming your network unlock certificate file is called **BitLocker-NetworkUnlock.cer**) on each computer running any of the client operating systems designated in the **Applies To** list at the beginning of this topic. -```console - certutil -f -grouppolicy -addstore FVE_NKP BitLocker-NetworkUnlock.cer - reg add "HKLM\SOFTWARE\Policies\Microsoft\FVE" /v OSManageNKP /t REG_DWORD /d 1 /f - reg add "HKLM\SOFTWARE\Policies\Microsoft\FVE" /v UseAdvancedStartup /t REG_DWORD /d 1 /f - reg add "HKLM\SOFTWARE\Policies\Microsoft\FVE" /v UsePIN /t REG_DWORD /d 2 /f - reg add "HKLM\SOFTWARE\Policies\Microsoft\FVE" /v UseTPMPIN /t REG_DWORD /d 2 /f - reg add "HKLM\SOFTWARE\Policies\Microsoft\FVE" /v UseTPM /t REG_DWORD /d 2 /f - reg add "HKLM\SOFTWARE\Policies\Microsoft\FVE" /v UseTPMKey /t REG_DWORD /d 2 /f - reg add "HKLM\SOFTWARE\Policies\Microsoft\FVE" /v UseTPMKeyPIN /t REG_DWORD /d 2 /f -``` + Apply the registry settings by running the following `certutil` script (assuming your Network Unlock certificate file is called *BitLocker-NetworkUnlock.cer*) on each computer that runs a client operating system that's designated in the **Applies to** list at the beginning of this article. -7. Set up a TPM protector on the clients -8. Reboot the clients to add the Network (Certificate Based) protector + ```console + certutil -f -grouppolicy -addstore FVE_NKP BitLocker-NetworkUnlock.cer + reg add "HKLM\SOFTWARE\Policies\Microsoft\FVE" /v OSManageNKP /t REG_DWORD /d 1 /f + reg add "HKLM\SOFTWARE\Policies\Microsoft\FVE" /v UseAdvancedStartup /t REG_DWORD /d 1 /f + reg add "HKLM\SOFTWARE\Policies\Microsoft\FVE" /v UsePIN /t REG_DWORD /d 2 /f + reg add "HKLM\SOFTWARE\Policies\Microsoft\FVE" /v UseTPMPIN /t REG_DWORD /d 2 /f + reg add "HKLM\SOFTWARE\Policies\Microsoft\FVE" /v UseTPM /t REG_DWORD /d 2 /f + reg add "HKLM\SOFTWARE\Policies\Microsoft\FVE" /v UseTPMKey /t REG_DWORD /d 2 /f + reg add "HKLM\SOFTWARE\Policies\Microsoft\FVE" /v UseTPMKeyPIN /t REG_DWORD /d 2 /f + ``` + +7. Set up a TPM protector on the clients. +8. Reboot the clients to add the **Network (Certificate Based)** protector. ## See also From 0683698c0e40089c58ede8850fd50ffa8a381ae0 Mon Sep 17 00:00:00 2001 From: ShannonLeavitt Date: Wed, 28 Oct 2020 09:52:27 -0600 Subject: [PATCH 009/486] more edits --- .../bitlocker-how-to-enable-network-unlock.md | 121 +++++++++--------- 1 file changed, 64 insertions(+), 57 deletions(-) diff --git a/windows/security/information-protection/bitlocker/bitlocker-how-to-enable-network-unlock.md b/windows/security/information-protection/bitlocker/bitlocker-how-to-enable-network-unlock.md index 4a7d9d600f..68ca0dcc0c 100644 --- a/windows/security/information-protection/bitlocker/bitlocker-how-to-enable-network-unlock.md +++ b/windows/security/information-protection/bitlocker/bitlocker-how-to-enable-network-unlock.md @@ -1,6 +1,6 @@ --- title: BitLocker - How to enable Network Unlock (Windows 10) -description: This topic for the IT professional describes how BitLocker Network Unlock works and how to configure it. +description: This article for the IT professional describes how BitLocker Network Unlock works and how to configure it. ms.assetid: be45bc28-47db-4931-bfec-3c348151d2e9 ms.reviewer: ms.prod: w10 @@ -27,16 +27,16 @@ This article for IT professionals describes how BitLocker Network Unlock works a Network Unlock was introduced in Windows 8 and Windows Server 2012 as a BitLocker protector option for operating system volumes. Network Unlock helps you manage BitLocker-enabled desktops and servers in a domain environment by automatically unlocking operating system volumes when the system is rebooted and is connected to a wired corporate network. This feature requires the client hardware to have a DHCP driver implemented in its UEFI firmware. -Without Network Unlock, operating system volumes that are protected by TPM+PIN protectors require a PIN when a computer reboots or resumes after hibernation (for example, by Wake on LAN). For enterprises, this setup can make software patches difficult to roll out to unattended desktops and remotely administered servers. +Without Network Unlock, operating system volumes that use TPM+PIN protectors require a PIN when a computer reboots or resumes after hibernation (for example, by Wake on LAN). For enterprises, this setup can make software patches difficult to roll out to unattended desktops and remotely administered servers. Network Unlock allows BitLocker-enabled systems that use TPM+PIN and that meet the hardware requirements to boot into Windows without user intervention. Network Unlock works like the TPM+StartupKey at boot. But the StartupKey doesn't need to be read from USB media. Instead, the key for Network Unlock is composed from a key that's stored in the TPM and an encrypted network key that's sent to the server. It's decrypted and returned to the client in a secure session. ## Network Unlock core requirements -Network Unlock must meet mandatory hardware and software requirements before the feature can automatically unlock domain-joined systems: +Network Unlock requires the following mandatory hardware and software configurations before it can automatically unlock domain-joined systems: - You must be running at least Windows 8 or Windows Server 2012. -- Any supported operating system that uses UEFI DHCP drivers can be Network Unlock clients. +- Any supported operating system that uses UEFI DHCP drivers can be a Network Unlock client. - Network Unlock clients must have a TPM chip and at least one TPM protector. - You must have a server running the Windows Deployment Services (WDS) role on any supported server operating system. - The BitLocker Network Unlock optional feature can be installed on any supported server operating system. @@ -44,28 +44,30 @@ Network Unlock must meet mandatory hardware and software requirements before the - You must have a properly configured public/private key pairing. - Network Unlock Group Policy settings must be configured. -The network stack must be enabled to use the Network Unlock feature. Equipment manufacturers deliver their products in various states and with different BIOS menus, so you need to confirm that the network stack has been enabled in the BIOS before you start the computer. +The network stack must be enabled to use the Network Unlock feature. Equipment manufacturers deliver their products in various states and with different BIOS menus. So confirm that the network stack has been enabled in the BIOS before you start the computer. > [!NOTE] > To properly support DHCP within UEFI, the UEFI-based system should be in native mode and shouldn't have a compatibility support module (CSM) enabled. -On computers running Windows 8 and later, the first network adapter on the computer, usually the onboard adapter, must be configured to support DHCP. This adapter must be used for Network Unlock. +On computers that run Windows 8 and later, the first network adapter on the computer, usually the onboard adapter, must be configured to support DHCP. This adapter must be used for Network Unlock. Use this configuration especially when you have multiple adapters and you want to configure one without DHCP, such as for a lights-out management protocol. The configuration is necessary because Network Unlock stops enumerating adapters when it reaches an adapter that has a DHCP port that has failed for any reason. So if the first enumerated adapter doesn't support DHCP, isn't plugged into the network, or fails to report availability of the DHCP port for any reason, then Network Unlock will fail. On supported versions of Windows Server 2012 and later, the Network Unlock server component installs as a Windows feature. It uses Server Manager or Windows PowerShell cmdlets. In Server Manager, the feature name is BitLocker Network Unlock. In Windows PowerShell, the feature name is BitLocker-NetworkUnlock. This feature is a core requirement. -Network Unlock requires WDS in the environment where the feature will be used. Configuration of the WDS installation is not required. But the WDS service needs to be running on the server. +Network Unlock requires WDS in the environment where the feature will be used. Configuration of the WDS installation isn't required. But the WDS service must be running on the server. -The network key is stored on the system drive along with an AES 256 session key. It's encrypted with the 2048-bit RSA public key of the unlock server's certificate. The network key is decrypted with the help of a provider on a supported version of Windows Server that's running WDS. It's returned encrypted with its corresponding session key. +The network key is stored on the system drive along with an AES 256 session key. It's encrypted with the 2048-bit RSA public key of the unlock server's certificate. The network key is decrypted with the help of a provider on a supported version of Windows Server that's running WDS. The network key is returned encrypted with its corresponding session key. ## Network Unlock sequence The unlock sequence starts on the client side, when the Windows boot manager detects the existence of the Network Unlock protector. It uses the DHCP driver in UEFI to get an IP address for IPv4. Then it broadcasts a vendor-specific DHCP request that contains the network key and a session key for the reply, all encrypted by the server's Network Unlock certificate, as described earlier. The Network Unlock provider on the supported WDS server recognizes the vendor-specific request, decrypts it with the RSA private key, and returns the network key encrypted with the session key via its own vendor-specific DHCP reply. -On the server side, the WDS server role has an optional plug-in component, like a PXE (preboot execution environment) provider, which is what handles the incoming Network Unlock requests. The provider can also be configured with subnet restrictions. These restrictions would require that the IP address provided by the client in the Network Unlock request belong to a permitted subnet in order to release the network key to the client. If the Network Unlock provider is unavailable, then BitLocker fails over to the next available protector to unlock the drive. So in a typical configuration, the standard TPM+PIN unlock screen is presented to unlock the drive. +On the server side, the WDS server role has an optional plug-in component, like a PXE (preboot execution environment) provider. The plug-in component handles the incoming Network Unlock requests. The provider can also be configured with subnet restrictions. These restrictions require the IP address that's provided by the client in the Network Unlock request to belong to a permitted subnet in order to release the network key to the client. If the Network Unlock provider is unavailable, then BitLocker fails over to the next available protector to unlock the drive. So in a typical configuration, the standard TPM+PIN unlock screen is presented to unlock the drive. -The server-side configuration to enable Network Unlock also requires provisioning a 2048-bit RSA public/private key pair in the form of an X.509 certificate. The configuration also requires the public key certificate to be distributed to the clients. This certificate must be managed and deployed through the Group Policy editor directly on a domain controller that has a domain functional level of at least Windows Server 2012. This certificate is the public key that encrypts the intermediate network key. The intermediate network key is one of the two secrets required to unlock the drive; the other secret is stored in the TPM. +The server-side configuration to enable Network Unlock requires provisioning a 2048-bit RSA public/private key pair in the form of an X.509 certificate. The configuration also requires the public key certificate to be distributed to the clients. + +Manage and deploy this certificate through the Group Policy editor directly on a domain controller that has a domain functional level of at least Windows Server 2012. This certificate is the public key that encrypts the intermediate network key. The intermediate network key is one of the two secrets that are required to unlock the drive; the other secret is stored in the TPM. ![Diagram showing the BitLocker network unlock sequence.](images/bitlockernetworkunlocksequence.png) @@ -77,19 +79,19 @@ The Network Unlock process follows these phases: - A network key (a 256-bit intermediate key) that's encrypted by the 2048-bit RSA public key of the Network Unlock certificate from the WDS server. - An AES-256 session key for the reply. 4. The Network Unlock provider on the WDS server recognizes the vendor-specific request. -5. The provider decrypts it with the WDS server's BitLocker Network Unlock certificate RSA private key. -6. The WDS provider then returns the network key encrypted with the session key by using its own vendor-specific DHCP reply to the client computer. This key is an intermediate key. -7. The returned intermediate key is then combined with another local 256-bit intermediate key. This key can be decrypted only by the TPM. +5. The provider decrypts the request by using the WDS server's BitLocker Network Unlock certificate RSA private key. +6. The WDS provider returns the network key encrypted with the session key by using its own vendor-specific DHCP reply to the client computer. This key is an intermediate key. +7. The returned intermediate key is combined with another local 256-bit intermediate key. This key can be decrypted only by the TPM. 8. This combined key is used to create an AES-256 key that unlocks the volume. 9. Windows continues the boot sequence. ## Configure Network Unlock -The following steps allow an administrator to configure Network Unlock in a domain where the domain functional level is at least Windows Server 2012. +The following steps allow an administrator to configure Network Unlock in a domain where the functional level is at least Windows Server 2012. -### Install the WDS Server role +### Install the WDS server role -The BitLocker Network Unlock feature installs the WDS role if it's not already installed. If you want to install it separately before you install BitLocker Network Unlock, use Server Manager or Windows PowerShell. To install the role by using Server Manager, select the **Windows Deployment Services** role in Server Manager. +The BitLocker Network Unlock feature installs the WDS role if it's not already installed. If you want to install it separately before you install BitLocker Network Unlock, use Server Manager or Windows PowerShell. To install the role in Server Manager, select the **Windows Deployment Services** role. To install the role by using Windows PowerShell, use the following command: @@ -97,7 +99,7 @@ To install the role by using Windows PowerShell, use the following command: Install-WindowsFeature WDS-Deployment ``` -Configure the WDS server so that it can communicate with DHCP (and optionally Active Directory Domain Services) and the client computer. You can do so by using the WDS management tool, `wdsmgmt.msc`. This tool starts the Windows Deployment Services Configuration Wizard. +Configure the WDS server so that it can communicate with DHCP (and optionally Active Directory Domain Services) and the client computer. Use the WDS management tool, `wdsmgmt.msc`. This tool starts the Windows Deployment Services Configuration Wizard. ### Confirm the WDS service is running @@ -110,7 +112,7 @@ Get-Service WDSServer ``` ### Install the Network Unlock feature -To install the Network Unlock feature, use Server Manager or Windows PowerShell. To install the feature by using Server Manager, in the Server Manager console, select **BitLocker Network Unlock**. +To install the Network Unlock feature, use Server Manager or Windows PowerShell. To install the feature in the Server Manager console, select **BitLocker Network Unlock**. To install the feature by using Windows PowerShell, use the following command: @@ -119,21 +121,21 @@ Install-WindowsFeature BitLocker-NetworkUnlock ``` ### Create the certificate template for Network Unlock -A properly configured Active Directory Services Certification Authority can use the certificate template to create and issue Network Unlock certificates. +A properly configured Active Directory Services Certification Authority can use the certificate template to create and issue Network Unlock certificates. To create a certificate template: 1. Open the certificate template snap-in (`certtmpl.msc`). 2. Locate the user template. Right-click the template name and then select **Duplicate Template**. -3. On the **Compatibility** tab, change the **Certification Authority** and **Certificate recipient** fields to Windows Server 2012 and Windows 8, respectively. Ensure the **Show resulting changes** dialog box is selected. +3. On the **Compatibility** tab, change the **Certification Authority** and **Certificate recipient** fields to **Windows Server 2012** and **Windows 8**, respectively. Ensure **Show resulting changes** is selected. 4. Select the **General** tab of the template. The **Template display name** and **Template name** should clearly identify that the template will be used for Network Unlock. Clear the check box for **Publish certificate in Active Directory**. 5. Select the **Request Handling** tab. In the **Purpose** drop-down menu, select **Encryption**. Ensure the **Allow private key to be exported** option is selected. -6. Select the **Cryptography** tab. Set the **Minimum key size** to *2048*. (For this template, you can use any Microsoft cryptographic provider that supports RSA. But for simplicity and forward compatibility, we recommend using **Microsoft Software Key Storage Provider**.) +6. Select the **Cryptography** tab. Set the **Minimum key size** to **2048**. (For this template, you can use any Microsoft cryptographic provider that supports RSA. But for simplicity and forward compatibility, we recommend using **Microsoft Software Key Storage Provider**.) 7. Select **Requests must use one of the following providers**. Then clear all options except for your selected cryptography provider, such as the **Microsoft Software Key Storage Provider**. 8. Select the **Subject Name** tab. Select **Supply in the request**. If the certificate templates dialog box appears, select **OK**. 9. Select the **Issuance Requirements** tab. Then select both **CA certificate manager approval** and **Valid existing certificate**. 10. Select the **Extensions** tab. Then select **Application Policies** > **Edit**. 11. In the **Edit Application Policies Extension** dialog box, select **Client Authentication**, **Encrypting File System**, and **Secure Email**. Then choose **Remove**. 12. In the **Edit Application Policies Extension** dialog box, select **Add**. -13. In the **Add Application Policy** dialog box, select **New**. In the **New Application Policy** dialog box, enter the following information in the space provided and then click **OK** to create the BitLocker Network Unlock application policy: +13. In the **Add Application Policy** dialog box, select **New**. In the **New Application Policy** dialog box, enter the following information in the space provided and then select **OK** to create the BitLocker Network Unlock application policy. - **Name**: **BitLocker Network Unlock** - **Object Identifier**: **1.3.6.1.4.1.311.67.1.1** @@ -149,7 +151,7 @@ After you add the Network Unlock template to the certificate authority, you can ### Create the Network Unlock certificate -Network Unlock can use imported certificates from an existing public key infrastructure (PKI), or you can use a self-signed certificate. +Network Unlock can use imported certificates from an existing public key infrastructure (PKI). Or it can use a self-signed certificate. To enroll a certificate from an existing certificate authority: @@ -172,7 +174,7 @@ To enroll a certificate from an existing certificate authority: 2. Select **Yes, export the private key**. 3. Complete the steps to create the *.pfx* file. -To create a self-signed certificate, you can either use the New-SelfSignedCertificate cmdlet in Windows PowerShell or use Certreq. +To create a self-signed certificate, either use the `New-SelfSignedCertificate` cmdlet in Windows PowerShell or use `certreq`. Here's a Windows PowerShell example: @@ -180,9 +182,9 @@ Here's a Windows PowerShell example: New-SelfSignedCertificate -CertStoreLocation Cert:\LocalMachine\My -Subject "CN=BitLocker Network Unlock certificate" -Provider "Microsoft Software Key Storage Provider" -KeyUsage KeyEncipherment -KeyUsageProperty Decrypt,Sign -KeyLength 2048 -HashAlgorithm sha512 -TextExtension @("1.3.6.1.4.1.311.21.10={text}OID=1.3.6.1.4.1.311.67.1.1","2.5.29.37={text}1.3.6.1.4.1.311.67.1.1") ``` -Here's a Certreq example: +Here's a `certreq` example: -1. Create a text file with an *.inf* extension. For example, *notepad.exe* *BitLocker-NetworkUnlock.inf*. +1. Create a text file that has an *.inf* extension. For example, *notepad.exe* *BitLocker-NetworkUnlock.inf*. 2. Add the following contents to the previously created file: ```ini @@ -204,7 +206,7 @@ Here's a Certreq example: _continue_ = "1.3.6.1.4.1.311.67.1.1" ``` -3. Open an elevated command prompt and use the `certreq` tool to create a new certificate. Use the following command, specifying the full path to the file that you created previously. Also specify the file name: +3. Open an elevated command prompt and use the `certreq` tool to create a new certificate. Use the following command, specifying the full path to the file that you created previously. Also specify the file name. ```cmd certreq -new BitLocker-NetworkUnlock.inf BitLocker-NetworkUnlock.cer @@ -216,16 +218,16 @@ Here's a Certreq example: ### Deploy the private key and certificate to the WDS server -Now that the certificate and key are created, deploy them to the infrastructure to properly unlock systems. To deploy the certificates: +Now that you've created the certificate and key, deploy them to the infrastructure to properly unlock systems. To deploy the certificates: -1. On the WDS server, open a new Microsoft Management Console (MMC) and then add the certificates snap-in. Select the computer account and local computer when these options appear. +1. On the WDS server, open a new Microsoft Management Console (MMC) and then add the certificates snap-in. When you're prompted, select the computer account and local computer. 2. Right-click **Certificates (Local Computer) - BitLocker Drive Encryption Network Unlock** and then choose **All Tasks** > **Import**. 3. In the **File to Import** dialog box, choose the *.pfx* file that you created previously. 4. Enter the password that you used to create the *.pfx*, and finish the steps. ### Configure Group Policy settings for Network Unlock -Now that you've deployed the certificate and key to the WDS server for Network Unlock, the final step is to use Group Policy settings to deploy the public key certificate to computers that you want to be able to unlock by using the Network Unlock key. You can find Group Policy settings for BitLocker in *\\Computer Configuration\\Administrative Templates\\Windows Components\\BitLocker Drive Encryption* by using the Local Group Policy Editor or the MMC. +You've now deployed the certificate and key to the WDS server for Network Unlock. In the final step, you'll use Group Policy settings to deploy the public key certificate to computers that you want to be able to unlock by using the Network Unlock key. Find Group Policy settings for BitLocker in *\\Computer Configuration\\Administrative Templates\\Windows Components\\BitLocker Drive Encryption* by using the Local Group Policy Editor or the MMC. To enable the Group Policy setting that's required to configure Network Unlock: @@ -239,45 +241,51 @@ To deploy the required Group Policy setting: > The Group Policy settings **Allow network unlock at startup** and **Add Network Unlock Certificate** were introduced in Windows Server 2012. 1. Copy the *.cer* file that you created for Network Unlock to the domain controller. -2. On the domain controller, launch Group Policy Management Console (`gpmc.msc`). +2. On the domain controller, open Group Policy Management Console (`gpmc.msc`). 3. Create a new Group Policy Object or modify an existing object to enable the **Allow network unlock at startup** setting. 4. Deploy the public certificate to clients: - 1. In Group Policy Management Console, go to the following location: *Computer Configuration\\Policies\\Windows Settings\\Security Settings\\Public Key Policies\\BitLocker Drive Encryption Network Unlock Certificate*. + 1. In Group Policy Management Console, go to *Computer Configuration\\Policies\\Windows Settings\\Security Settings\\Public Key Policies\\BitLocker Drive Encryption Network Unlock Certificate*. 2. Right-click the folder and then choose **Add Network Unlock Certificate**. 3. Follow the steps and import the *.cer* file that you copied earlier. > [!NOTE] - > Only one network unlock certificate can be available at a time. If a new certificate is required, delete the current certificate before you deploy a new one. The Network Unlock certificate is located in the *HKEY\_LOCAL\_MACHINE\\Software\\Policies\\Microsoft\\SystemCertificates\\FVE\_NKP* key on the client computer. + > Only one network unlock certificate can be available at a time. If you need a new certificate, delete the current certificate before you deploy a new one. The Network Unlock certificate is located in the *HKEY\_LOCAL\_MACHINE\\Software\\Policies\\Microsoft\\SystemCertificates\\FVE\_NKP* key on the client computer. -5. Reboot the clients after you deploy the group policy. +5. Reboot the clients after you deploy the Group Policy. > [!NOTE] - > The **Network (Certificate Based)** protector is added only after a reboot. The policy must be enabled, and a valid certificate must be present in the FVE_NKP store. + > The **Network (Certificate Based)** protector is added only after a reboot where the policy is enabled and a valid certificate is present in the FVE_NKP store. -### Subnet policy configuration files on the WDS server (Optional) +### Subnet policy configuration files on the WDS server (optional) -By default, clients are unlocked by the server if they have the correct Network Unlock certificate and valid Network Unlock protectors that have wired access to a Network Unlock-enabled WDS server via DHCP. You can create a subnet policy configuration file on the WDS server to limit the subnets that Network Unlock clients can use to unlock. +By default, the server unlocks clients that have the correct Network Unlock certificate and valid Network Unlock protectors that have wired access to a Network Unlock-enabled WDS server via DHCP. You can create a subnet policy configuration file on the WDS server to limit the subnets that Network Unlock clients can use for unlocking. -The configuration file, called *bde-network-unlock.ini*, must be located in the same directory as the Network Unlock provider DLL (*%windir%\System32\Nkpprov.dll*). It applies to both IPv6 and IPv4 DHCP implementations. If the subnet configuration policy becomes corrupted, then the provider fails and stops responding to requests. +The configuration file, called *bde-network-unlock.ini*, must be located in the same directory as the Network Unlock provider dynamic-link library (*%windir%\System32\Nkpprov.dll*). The configuration file applies to both IPv6 and IPv4 DHCP implementations. If the subnet configuration policy becomes corrupted, then the provider fails and stops responding to requests. -The subnet policy configuration file must use a `[SUBNETS]` section to identify the specific subnets. The named subnets can then be used to specify restrictions in certificate subsections. Subnets are defined as simple name-value pairs, in the common INI format. In this format, each subnet has its own line. The name is on the left of the equals sign. The subnet that's identified on the right of the equals sign is a Classless Interdomain Routing (CIDR) address or range. The keyword `ENABLED` is disallowed for subnet names. +The subnet policy configuration file must use a `[SUBNETS]` section to identify the specific subnets. You can then use the named subnets to specify restrictions in certificate subsections. + +Subnets are defined as simple name-value pairs, in the common INI format. In this format, each subnet has its own line. The name is on the left of the equals sign. The subnet on the right of the equals sign is a Classless Interdomain Routing (CIDR) address or range. The keyword `ENABLED` is disallowed for subnet names. ```ini [SUBNETS] -SUBNET1=10.185.250.0/24 ; comment about this subrange could be here, after the semi-colon +SUBNET1=10.185.250.0/24 ; a comment about this subrange could be here, after the semicolon SUBNET2=10.185.252.200/28 SUBNET3= 2001:4898:a:2::/64 ; an IPv6 subnet SUBNET4=2001:4898:a:3::/64; in production, the admin would likely give more useful names, like BUILDING9-EXCEPT-RECEP. ``` -Following the `[SUBNETS]` section are sections for each Network Unlock certificate. A certificate is identified by the certificate thumbprint, which is formatted without any spaces. These sections define subnet clients that can be unlocked by using that certificate. +Following the `[SUBNETS]` section are sections for each Network Unlock certificate. A certificate is identified by the certificate thumbprint, which is formatted without any spaces. These sections define subnet clients that you can unlock by using that certificate. > [!NOTE] -> When you specify the certificate thumbprint, don't include spaces. Thumbprints that include spaces aren't recognized as valid. These will cause the subnet configuration to fail. +> When you specify the certificate thumbprint, don't include spaces. Thumbprints that include spaces aren't recognized as valid. The spaces will cause the subnet configuration to fail. -Each certificate section defines subnet restrictions by denoting the allowed list of permitted subnets. If any subnets are listed in a certificate section, then only those subnets are permitted for that certificate. If no subnet is listed in a certificate section, then all subnets are permitted for that certificate. If a certificate has no section in the subnet policy configuration file, then no subnet unlocking restrictions are applied for that certificate. So to apply restrictions to every certificate, you must add a certificate section for every Network Unlock certificate on the server. And you must add an explicit allow list set for each certificate section. +Each certificate section defines subnet restrictions by denoting the allowed list of permitted subnets. If any subnets are listed in a certificate section, then only those subnets are permitted for that certificate. If no subnet is listed in a certificate section, then all subnets are permitted for that certificate. If a certificate has no section in the subnet policy configuration file, then no subnet unlocking restrictions are applied for that certificate. -Create subnet lists by putting the name of a subnet from the `[SUBNETS]` section on its own line below the certificate section header. Then, the server will unlock clients that have this certificate only on the subnets that the list specifies. To troubleshoot, you can quickly exclude a subnet without deleting it from the section by simply commenting it out with a prepended semicolon. +So to apply restrictions to every certificate, you must add a certificate section for every Network Unlock certificate on the server. And you must add an explicit allow list set for each certificate section. + +Create subnet lists by putting the name of a subnet from the `[SUBNETS]` section on its own line below the certificate section header. Then, the server will unlock clients that have this certificate only on the subnets that the list specifies. + +To troubleshoot, you can quickly exclude a subnet without deleting it from the section. Just comment it out by using a prepended semicolon. ```ini [2158a767e1c14e88e27a4c0aee111d2de2eafe60] @@ -288,14 +296,14 @@ SUBNET1 SUBNET3 ``` -To disallow the use of a certificate altogether, you can add a `DISABLED` line to its subnet list. +To disallow the use of a certificate altogether, add a `DISABLED` line to its subnet list. ## Turn off Network Unlock To turn off the unlock server, you can unregister the PXE provider from the WDS server or uninstall it altogether. However, to stop clients from creating Network Unlock protectors, you should disable the **Allow Network Unlock at startup** Group Policy setting. When you disable this policy setting on client computers, any Network Unlock key protectors on the computer are deleted. Alternatively, you can delete the BitLocker Network Unlock certificate policy on the domain controller to accomplish the same task for an entire domain. > [!NOTE] -> Removing the FVE_NKP certificate store that contains the Network Unlock certificate and key on the WDS server will also effectively disable the server's ability to respond to unlock requests for that certificate. However, this is seen as an error condition. It's not a supported or recommended method for turning off the Network Unlock server. +> Removing the FVE_NKP certificate store that contains the Network Unlock certificate and key on the WDS server will also effectively disable the server's ability to respond to unlock requests for that certificate. However, this condition is seen as an error. It's not a supported or recommended method for turning off the Network Unlock server. ## Update Network Unlock certificates @@ -306,13 +314,13 @@ To update the certificates that Network Unlock uses, administrators need to impo ## Troubleshoot Network Unlock -To troubleshoot Network Unlock issues, begin by verifying the environment. Many times, a small configuration issue is the root cause of the failure. Verify these items: +To troubleshoot Network Unlock problems, begin by verifying the environment. Often, a small configuration issue is the root cause of the failure. Verify these items: -- Client hardware is UEFI-based and is using firmware version 2.3.1, and the UEFI firmware is in native mode doesn't have a Compatibility Support Module (CSM) for BIOS mode enabled. Verify this configuration by checking that the firmware has no enabled option such as **Legacy mode** or **Compatibility mode** or that the firmware doesn't appear to be in a BIOS-like mode. +- Client hardware is based on UEFI and uses firmware version 2.3.1, and the UEFI firmware is in native mode and has no compatibility support module (CSM) for BIOS mode enabled. Verify this configuration by ensuring that the firmware has no enabled option such as **Legacy mode** or **Compatibility mode** and that the firmware doesn't appear to be in a BIOS-like mode. - All required roles and services are installed and started. - Public and private certificates have been published and are in the proper certificate containers. Verify the presence of the Network Unlock certificate by using Microsoft Management Console (*MMC.exe*) on the WDS server. The certificate snap-ins for the local computer should be enabled. Verify the client certificate by checking the registry key *HKEY\_LOCAL\_MACHINE\\Software\\Policies\\Microsoft\\SystemCertificates\\FVE\_NKP* on the client computer. - Group Policy for Network Unlock is enabled and linked to the appropriate domains. -- Group Policy is reaching the clients properly. Verify this functionality by using the *GPRESULT.exe* utility or *RSOP.msc* utility. +- Group Policy is reaching the clients properly. Verify this functionality by using the *GPRESULT.exe* utility or the *RSOP.msc* utility. - The clients were rebooted after the policy was applied. - The **Network (Certificate Based)** protector is listed on the client. Check for this protector by using either `manage-bde` or Windows PowerShell cmdlets. For example, the following command lists the key protectors that are currently configured on drive C on the local computer. @@ -335,9 +343,8 @@ Gather the following files to troubleshoot BitLocker Network Unlock. ``` - Open Event Viewer on the WDS server. - In the left pane, select **Applications and Services Logs** > **Microsoft** > **Windows** > **Deployment-Services-Diagnostics** > **Debug**. - - In the right pane, selet **Enable Log**. + 1. In the left pane, select **Applications and Services Logs** > **Microsoft** > **Windows** > **Deployment-Services-Diagnostics** > **Debug**. + 1. In the right pane, select **Enable Log**. - The DHCP subnet configuration file (if one exists). - The output of the BitLocker status on the volume. Gather this output into a text file by using `manage-bde -status`. Or in Windows PowerShell, use `Get-BitLockerVolume`. @@ -347,21 +354,21 @@ Gather the following files to troubleshoot BitLocker Network Unlock. Network Unlock and the accompanying Group Policy settings were introduced in Windows Server 2012. But you can deploy them by using operating systems that run Windows Server 2008 R2 and Windows Server 2008. -Requirements: +Your system must meet these requirements: -- The server that hosts WDS must be running a server operating system that's designated in the **Applies to** list at the beginning of this article. -- Client computers must be running a client operating system that's designated in the **Applies to** list at the beginning of this article. +- The server that hosts WDS must be running a server operating system that's designated in the "Applies to" list at the beginning of this article. +- Client computers must be running a client operating system that's designated in the "Applies to" list at the beginning of this article. Follow these steps to configure Network Unlock on these older systems. -1. [Install the WDS Server role.](#bkmk-installwdsrole) +1. [Install the WDS server role.](#bkmk-installwdsrole) 2. [Confirm the WDS service is running.](#bkmk-confirmwdsrunning) 3. [Install the Network Unlock feature.](#bkmk-installnufeature) 4. [Create the Network Unlock certificate.](#bkmk-createcert) 5. [Deploy the private key and certificate to the WDS server.](#bkmk-deploycert) 6. Configure registry settings for Network Unlock: - Apply the registry settings by running the following `certutil` script (assuming your Network Unlock certificate file is called *BitLocker-NetworkUnlock.cer*) on each computer that runs a client operating system that's designated in the **Applies to** list at the beginning of this article. + Apply the registry settings by running the following `certutil` script (assuming your Network Unlock certificate file is called *BitLocker-NetworkUnlock.cer*) on each computer that runs a client operating system that's designated in the "Applies to" list at the beginning of this article. ```console certutil -f -grouppolicy -addstore FVE_NKP BitLocker-NetworkUnlock.cer From f62824ae2a7b3cdc5adabf2333477400e624b707 Mon Sep 17 00:00:00 2001 From: ShannonLeavitt Date: Wed, 28 Oct 2020 10:10:37 -0600 Subject: [PATCH 010/486] small fixes --- .../bitlocker-how-to-enable-network-unlock.md | 22 +++++++++---------- 1 file changed, 11 insertions(+), 11 deletions(-) diff --git a/windows/security/information-protection/bitlocker/bitlocker-how-to-enable-network-unlock.md b/windows/security/information-protection/bitlocker/bitlocker-how-to-enable-network-unlock.md index 68ca0dcc0c..092a234e68 100644 --- a/windows/security/information-protection/bitlocker/bitlocker-how-to-enable-network-unlock.md +++ b/windows/security/information-protection/bitlocker/bitlocker-how-to-enable-network-unlock.md @@ -37,7 +37,7 @@ Network Unlock requires the following mandatory hardware and software configurat - You must be running at least Windows 8 or Windows Server 2012. - Any supported operating system that uses UEFI DHCP drivers can be a Network Unlock client. -- Network Unlock clients must have a TPM chip and at least one TPM protector. +- Network Unlock clients must have a TPM (trusted platform module) chip and at least one TPM protector. - You must have a server running the Windows Deployment Services (WDS) role on any supported server operating system. - The BitLocker Network Unlock optional feature can be installed on any supported server operating system. - You must have a DHCP server, separate from the WDS server. @@ -89,7 +89,7 @@ The Network Unlock process follows these phases: The following steps allow an administrator to configure Network Unlock in a domain where the functional level is at least Windows Server 2012. -### Install the WDS server role +### Install the WDS server role The BitLocker Network Unlock feature installs the WDS role if it's not already installed. If you want to install it separately before you install BitLocker Network Unlock, use Server Manager or Windows PowerShell. To install the role in Server Manager, select the **Windows Deployment Services** role. @@ -101,7 +101,7 @@ Install-WindowsFeature WDS-Deployment Configure the WDS server so that it can communicate with DHCP (and optionally Active Directory Domain Services) and the client computer. Use the WDS management tool, `wdsmgmt.msc`. This tool starts the Windows Deployment Services Configuration Wizard. -### Confirm the WDS service is running +### Confirm the WDS service is running To confirm the WDS service is running, use the Services Management console or Windows PowerShell. To confirm the service is running in the Services Management console, open the console by using `services.msc`. Then check the status of the WDS service. @@ -110,7 +110,7 @@ To confirm the service is running by using Windows PowerShell, use the following ```powershell Get-Service WDSServer ``` -### Install the Network Unlock feature +### Install the Network Unlock feature To install the Network Unlock feature, use Server Manager or Windows PowerShell. To install the feature in the Server Manager console, select **BitLocker Network Unlock**. @@ -119,7 +119,7 @@ To install the feature by using Windows PowerShell, use the following command: ```powershell Install-WindowsFeature BitLocker-NetworkUnlock ``` -### Create the certificate template for Network Unlock +### Create the certificate template for Network Unlock A properly configured Active Directory Services Certification Authority can use the certificate template to create and issue Network Unlock certificates. To create a certificate template: @@ -149,7 +149,7 @@ To add the Network Unlock template to the certificate authority, open the certif After you add the Network Unlock template to the certificate authority, you can use this certificate to configure BitLocker Network Unlock. -### Create the Network Unlock certificate +### Create the Network Unlock certificate Network Unlock can use imported certificates from an existing public key infrastructure (PKI). Or it can use a self-signed certificate. @@ -216,14 +216,14 @@ Here's a `certreq` example: 5. Launch **Certificates - Local Machine** by running `certlm.msc`. 6. Create a *.pfx* file by opening the *Certificates – Local Computer\\Personal\\Certificates* path in the navigation pane. Right-click the previously imported certificate, and then select **All Tasks** > **Export**. Follow through the steps to create the *.pfx* file. -### Deploy the private key and certificate to the WDS server +### Deploy the private key and certificate to the WDS server Now that you've created the certificate and key, deploy them to the infrastructure to properly unlock systems. To deploy the certificates: 1. On the WDS server, open a new Microsoft Management Console (MMC) and then add the certificates snap-in. When you're prompted, select the computer account and local computer. 2. Right-click **Certificates (Local Computer) - BitLocker Drive Encryption Network Unlock** and then choose **All Tasks** > **Import**. 3. In the **File to Import** dialog box, choose the *.pfx* file that you created previously. -4. Enter the password that you used to create the *.pfx*, and finish the steps. +4. Enter the password that you used to create the *.pfx* file, and finish the steps. ### Configure Group Policy settings for Network Unlock @@ -298,14 +298,14 @@ SUBNET3 To disallow the use of a certificate altogether, add a `DISABLED` line to its subnet list. -## Turn off Network Unlock +## Turn off Network Unlock To turn off the unlock server, you can unregister the PXE provider from the WDS server or uninstall it altogether. However, to stop clients from creating Network Unlock protectors, you should disable the **Allow Network Unlock at startup** Group Policy setting. When you disable this policy setting on client computers, any Network Unlock key protectors on the computer are deleted. Alternatively, you can delete the BitLocker Network Unlock certificate policy on the domain controller to accomplish the same task for an entire domain. > [!NOTE] > Removing the FVE_NKP certificate store that contains the Network Unlock certificate and key on the WDS server will also effectively disable the server's ability to respond to unlock requests for that certificate. However, this condition is seen as an error. It's not a supported or recommended method for turning off the Network Unlock server. -## Update Network Unlock certificates +## Update Network Unlock certificates To update the certificates that Network Unlock uses, administrators need to import or generate the new certificate for the server. Then they must update the Network Unlock certificate Group Policy setting on the domain controller. @@ -341,7 +341,7 @@ Gather the following files to troubleshoot BitLocker Network Unlock. ```cmd wevtutil sl Microsoft-Windows-Deployment-Services-Diagnostics/Debug /e:true ``` - - Open Event Viewer on the WDS server. + - Open Event Viewer on the WDS server: 1. In the left pane, select **Applications and Services Logs** > **Microsoft** > **Windows** > **Deployment-Services-Diagnostics** > **Debug**. 1. In the right pane, select **Enable Log**. From bbf1bff0771821a4d0ab178a6d454a0e91ebe9d5 Mon Sep 17 00:00:00 2001 From: Nathaniel Chin <22572406+nathanielcwm@users.noreply.github.com> Date: Thu, 29 Oct 2020 08:04:13 +0800 Subject: [PATCH 011/486] Update windows/deployment/upgrade/windows-10-edition-upgrades.md Co-authored-by: Trond B. Krokli <38162891+illfated@users.noreply.github.com> --- windows/deployment/upgrade/windows-10-edition-upgrades.md | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/windows/deployment/upgrade/windows-10-edition-upgrades.md b/windows/deployment/upgrade/windows-10-edition-upgrades.md index ff9c6ae451..033f0e0e0d 100644 --- a/windows/deployment/upgrade/windows-10-edition-upgrades.md +++ b/windows/deployment/upgrade/windows-10-edition-upgrades.md @@ -93,7 +93,7 @@ You can run the changepk.exe command-line tool to upgrade devices to a supported `changepk.exe /ProductKey ` -You can also upgrade using slmgr.vbs and a [KMS client setup key](https://docs.microsoft.com/en-us/windows-server/get-started/kmsclientkeys). For example, the following command will upgrade to Windows 10 Enterprise. +You can also upgrade using slmgr.vbs and a [KMS client setup key](https://docs.microsoft.com/windows-server/get-started/kmsclientkeys). For example, the following command will upgrade to Windows 10 Enterprise. `Cscript.exe c:\windows\system32\slmgr.vbs /ipk NPPR9-FWDCX-D2C8J-H872K-2YT43` From 97929f6f9264c183dc7978818a1965a1883767bf Mon Sep 17 00:00:00 2001 From: Jordan Geurten Date: Mon, 2 Nov 2020 11:20:46 -0800 Subject: [PATCH 012/486] Fixed WDAC typo in TOC.md --- .../windows-defender-application-control/TOC.md | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/windows/security/threat-protection/windows-defender-application-control/TOC.md b/windows/security/threat-protection/windows-defender-application-control/TOC.md index 731cab3d76..b29a8d0e37 100644 --- a/windows/security/threat-protection/windows-defender-application-control/TOC.md +++ b/windows/security/threat-protection/windows-defender-application-control/TOC.md @@ -22,7 +22,7 @@ ##### [Create a WDAC policy for fixed-workload devices](create-initial-default-policy.md) ##### [Microsoft recommended block rules](microsoft-recommended-block-rules.md) ### [Using the WDAC Wizard tool](wdac-wizard.md) -#### [Create a base WDC policy](wdac-wizard-create-base-policy.md) +#### [Create a base WDAC policy](wdac-wizard-create-base-policy.md) #### [Create a supplemental WDAC policy](wdac-wizard-create-supplemental-policy.md) #### [Editing a WDAC policy](wdac-wizard-editing-policy.md) #### [Merging multiple WDAC policies](wdac-wizard-merging-policies.md) From 1539eeb41ff9599f311409cecabc6d3d74473165 Mon Sep 17 00:00:00 2001 From: Jordan Geurten Date: Mon, 2 Nov 2020 11:23:10 -0800 Subject: [PATCH 013/486] Converted **Headers** to ### Headers to align with style guide. --- .../wdac-wizard-create-base-policy.md | 16 ++++++++-------- 1 file changed, 8 insertions(+), 8 deletions(-) diff --git a/windows/security/threat-protection/windows-defender-application-control/wdac-wizard-create-base-policy.md b/windows/security/threat-protection/windows-defender-application-control/wdac-wizard-create-base-policy.md index 269ee7607e..0d1d32ff12 100644 --- a/windows/security/threat-protection/windows-defender-application-control/wdac-wizard-create-base-policy.md +++ b/windows/security/threat-protection/windows-defender-application-control/wdac-wizard-create-base-policy.md @@ -49,7 +49,7 @@ Once the base template is selected, give the policy a name and choose where to s Upon page launch, policy rules will be automatically enabled/disabled depending on the chosen template from the previous page. Choose to enable or disable the desired policy rule options by pressing the slider button next to the policy rule titles. Hovering the mouse over the policy rule title will display a short description of the rule at the bottom of the page. -**Policy Rules Description** +### Policy Rules Description A description of the policy rules, beginning with the left-most column are provided below. @@ -66,7 +66,7 @@ A description of the policy rules, beginning with the left-most column are provi | **Unsigned System Integrity Policy** | Allows the policy to remain unsigned. When this option is removed, the policy must be signed and have UpdatePolicySigners added to the policy to enable future policy modifications. | | **User Mode Code Integrity** | WDAC policies restrict both kernel-mode and user-mode binaries. By default, only kernel-mode binaries are restricted. Enabling this rule option validates user mode executables and scripts. | -**Advanced Policy Rules Description** +### Advanced Policy Rules Description Selecting the **+ Advanced Options** label will show another column of policy rules; advanced policy rules. A description of the policy rules are provided below. @@ -90,7 +90,7 @@ Selecting the **+ Advanced Options** label will show another column of policy ru File rules in an application control policy will specify the level at which appiations will be identified and trusted. File rules are the main mechanism for defining trust in the application control policy. Selecting the **+ Custom Rules** will open the custom file rule conditions panel to create and customize targeted file rules for your policy. The Wizard supports 4 types of file rules: -**Publisher** +### Publisher Rules The Publisher file rule type uses properties in the code signing certificate chain to base file rules. Once the file to base the rule off of, called the *reference file*, is selected, use the slider to indicate the specifity of the rule. The table below shows the relationship between the slider placement, the corresponding WDAC rule level and its description. The lower the placement on the table and the UI slider, the greater the specificity of the rule. @@ -104,11 +104,11 @@ The Publisher file rule type uses properties in the code signing certificate cha ![Custom filepublisher file rule creation](images/wdac-wizard-custom-publisher-rule.png) -**Path** +### Filepath Rules -Filepath rules do not provide the same security guarantees that explicit signer rules do, as they are based on mutable access permissions. To create a fileopath rule, simply select the file using the *Browse* button. +Filepath rules do not provide the same security guarantees that explicit signer rules do, as they are based on mutable access permissions. To create a filepath rule, simply select the file using the *Browse* button. -**File Attributes** +### File Attribute Rules The Wizard supports the creation of [file name rules](select-types-of-rules-to-create#windows-defender-application-control-filename-rules) based on authenticated file attributes. File name rules are useful when an application and its dependencies (eg. DLLs) may all share the same product name, for instance. This allows users to easily create targeted policies based on the Product Name filename rule level. To select the file attribute to create the rule, move the slider on the Wizard to the desired attribute. The table below describes each of the supported file attributes off which to create a rule. @@ -122,12 +122,12 @@ The Wizard supports the creation of [file name rules](select-types-of-rules-to-c ![Custom file attributes rule](images/wdac-wizard-custom-file-attribute-rule.png) -**File Hash** +### File Hash Rules Lastly, the Wizard supports creating file rules using the hash of the file. Although this level is specific, it can cause additional administrative overhead to maintain the current product versions’ hash values. Each time a binary is updated, the hash value changes, therefore requiring a policy update. By default, the Wizard will use file hash as the fallback in case a file rule cannot be created using the specified file rule level. -#### Deleting Signing Rules #### +#### Deleting Signing Rules The policy signing rules list table on the left of the page will document the allow and deny rules in the template, as well as any custom rules you create. Template signing rules and custom rules can be deleted from the policy by selecting the rule from the rules list table. Once the rule is highlighted, press the delete button underneath the table. you will be prompted for additional confirmation. Select `Yes` to remove the rule from the policy and the rules table. From 9b7fd06c9c07e178ae7b604d10f5ac2d14307390 Mon Sep 17 00:00:00 2001 From: Jordan Geurten Date: Mon, 2 Nov 2020 12:13:27 -0800 Subject: [PATCH 014/486] Wrote the documentation for the supplemental policy workflow. Added two pictures - allows and disallows supplemental policies. --- .../wdac-wizard-supplemental-expandable.png | Bin 0 -> 43188 bytes ...dac-wizard-supplemental-not-expandable.png | Bin 0 -> 50493 bytes .../wdac-wizard-create-supplemental-policy.md | 109 +++++++++++++++++- 3 files changed, 108 insertions(+), 1 deletion(-) create mode 100644 windows/security/threat-protection/windows-defender-application-control/images/wdac-wizard-supplemental-expandable.png create mode 100644 windows/security/threat-protection/windows-defender-application-control/images/wdac-wizard-supplemental-not-expandable.png diff --git a/windows/security/threat-protection/windows-defender-application-control/images/wdac-wizard-supplemental-expandable.png b/windows/security/threat-protection/windows-defender-application-control/images/wdac-wizard-supplemental-expandable.png new file mode 100644 index 0000000000000000000000000000000000000000..d59559152524da6425262187a27702c8c075aa19 GIT binary patch literal 43188 zcmbSyWmFwO(@=`>Cp@gMZ11!^2?1KtMpiOG=0+LO^^rgMj!1fd2eZa#a6)_v7#hpeQZ` zQ9h1)_;K;oL{L@`0-`Ds_T>-c$Mttx2@L=Q1d7AI{nMH;feQpgp`@gUpt6hZ$tt8a z+6V!}#p3bb98m$rO0APKI#MeUMYLa4ooA|@sz^v^$d%iRtE;palxg$N8Era9RU5n> zUh8fh=i=wa#wH(I1%Kb`KT0$#Vubal3&9||pVZKl zYvv)J{@tmy=^qEn7{kCgBr)6^Qv_ zO^98I!(P82AU571`PBmB|JIE9bQtdpMyr&l8Zkj{ve5luTE87zcpSKdEvj~6PoM8_ z+N~^yt~(_9jX_9y!Wzth8i0y39zx2wY)5?a(?rP4a4jbkU#MU_U7gkG*W{nEYx|=| z!8u`KYs{1b#gcO^X6wrM+ddiP2g0)p0PZtdOFe$~?(%*ACIg#`K*uh3g@VNWOxT*+`w+JtmyBJo*qmA}+)4(28p=+WD*Mur0Z{ap|QRyDaevdOV(% z;E$a7vM#prR$a6jcQTDDCJGe84-OBNoUzGIOWADHogJ$00s;@f-zpRx&2NuGpin6@ zG~jU?8D4Jc3z5t%;f_RXW7+SANw5{6oI{xk>iXQgXyk0}(eMjhEW#EI zTdq?e3zw+EeK8nsU2)pU`MEoS_Q&tzbyQqG)7?;uia$E{H5@j}VAa=DBa9c;9PvnF zMeMw4FT98VnPNEGm6xYhz*7ifyn`OT7t;-R^&5N%Ps^h^)r)(`)_Pza2~hk`hh)w- zXm+vl+Jo&#Sbrhp_EVl|`1SfyqpOEgjaN@k4qp8iQjDzBwx>7!XDJTuI*U9|p@HM= zTifzvdtSi)L|@dahsjC$Vx7||s!gq(zal_D$Av@;m&t5)=zq@6F8Xir;Aq@LRPo|b7V**bqzyfI1Y{mw634hx^=CjtCK^{ zAMq%l6Dl+0VwsV1+=rT%y? zl+SqM^EPqdFlP-l;H^ZEij2Q8MhL0B2rOv(1d-`}ce*@~sy5rHVccZ{H^E^il53J- zq|D{C22A31+Cv@rw&LqtDqgF}Yw~bb7kEOgOlZS9==DIFSmY<16L=p)MA90NVt(s* zhsU%sRKZP0LzC+xZH?h5S4+qaDx7{?z1-z!^BB`F3OUxNNWlX6)hw6iv4|Ho5Sr+Q zI7GE*6^xf}mxiYssx&{JEDl$Fv4ad#9zxO!L%nx)(`Cn{VmO;qCr4bWbxeDQBWcaz zF_%VIwNO58e}Sm7!p(wO?SIrS)Cp{jW}^?%z*^* zVDQ^m@WldTyM|tvOX{pFcbhbB=JH@z6^9i06&We{1D6s?${I~8lrDAm_q>3B*xCc! zCX(!$Pu0g0@6~dDblI4&X%O@3uQp|Q%-PxJmjxCazSZUTvmG`ey@IS3 zAz?@GmcLb1^bI*G^L9boMEGwb^90;~f^fQJ&5loDlRl;yI_qOmLDZ$KALoqC`D2ye zF#)8n%dCa~&iwGB*<;47)w?Xf7bjK%uHq03amA*rswe?-1+NLp`$RZh*EGx>6Qwru za1?5`?C1Q&PYzEidk5ty&Wew9yG4jcQhfQS=st;K$$%{fbmZpSw?Avi!qnHz=b$-Z zB|N(uko*Z99+Q(Q*#EQqv77;ga~1xHd-A+VPopXftMo)G@)}nnnb}fxfkWi{K=Uij z7-`)RxOmDyd8o};Nf;bt9W_RLaHDo?%VFuxJ)W07i&R0AW_*gR+U)w&U;Foa2Kk;I z_g9`QRV&@CQ=UifgTYB0tge;1SnGFHue9u>(Xt#f7HM2r=3W7HPK2*35AoT*+TzI^lfQeTW4TSVY{V2(dr*!%UH#2|q%KbaItJ8e$ zruaDfh0vQ%+r{P!h4CicK`tMYTV7r+qPVrp`f;yQPrySph)~^W8db3VN>i+M2TWQKJS7AiF<17v|S|nPWL!@ zS}}$$aBQtJ*K5b+A^T#xB1vY^2saP-t1DtCTRF9*FZVq+81GRTge|**!JMZTq+NZr z0M%8JN!N(2q^wHmu$`C7ApHqqWBrhyfV+auYP0c4kWEt3<0pT;d_TPi7pMteQ0sE)_EBvEziZiiA6G7@zI_j*1m(D#lo>b{Hepiyqt2<$szfxYDLz2 z&BQymRap3`+^M7Fw{q)pOak&Ljj+yW?)$ZZ>uJeElji1@r{_E(G%lOo$1P(30b+7f zw4_&nd2wUYSWQ5@w$Z{05~;@#7YUqvenB`sGqWvs4fOLk$Hy>te$;`_4HaG`s`e$n zyrX-ERq;-qd=z^Zq>8rB$3g;qbVD7;nXF+RP0ltf`gMx_AlMGFhrj>!N8Mig9Xoj; zthfeV+nr2lUaT$UUqZNcw!V?VIenmS_x6->>$8LD5~|;-cW#JS|K|AVsJ1iV40g0M zFTMrFm_5PXA6|{vQS3v^F4h@R>5cEb4#dD`>ud#!Vn4#q^m)o`@eZb@<_&LLZE?S^ ze@&x5wcd<{3q#L14K1O6#UcoodA8rGh)k;XFR!0jKa0d!ba>*nx5lGy8m?MajC167 zsX{FQIt$iODWKv8(_LR?SHP2hDD?{xsKL6XrYc4%Po}FQRI_YuYHDhFTK`J#+Q}^{ zuS7lo7fQl+ka{A3oxM;3DN<5VujXdFl}>ma$gA^9KpBz9$V7@3JB^8~RO;`pl+~3% zYJM0~NyA+@hSy6~CSL4&%Gp=OBXrJUuGqXCTndNMTtmStjFw^xs#tl|>+f4clEq)3 z92;3_99zEVgc1f>#yGH$YvPl>YI;sahnaVAGw<>)Qd0yl=tvij&&--KKVe&Wt~-^g z^dPDc_sF$*2*eyRFFEnedAByn)Vxp$))LuSum;0`cBzZSkZzr${0lg~R-G{(DyS(z zN(YluA&gL{Jdg<*`9RZ>w!kKlk?{}(0bLA};`#K*v}K(<(1pNoq(jdsePAaeQVn0i zvxFZqf%|e3&SBF#AAZ(-9kV&RyDGE_)^1uv#-QZYMk_vv<`0ZaL`rC^Ndh1d^hlG* z4D%WxoA|Zo&b4Cbl|5>NcKf0iF7LI0#4c46OU6)KRIL3I5RmnxS==ZR6%;sBT zA9O}}QxFougS%gZw(AR{K6D#Kz;Ua{;8gKY`=G%=_g+AIXoBofwPD|^$&`XhsnwyF zl)~`U=n_pg_X0%L0$~36=4^mQpsa+@;X4ss;1CHLCKMYwlPxtuYEqRjRIY9W_l@;2 z)Srq9$Z>l2b}6+L3&?b1%#QdKWvDEZ;P2-hxF#P?H^twDM@g^upQwHa7Hh6K`exCQ z&*WLPxVfrChMMM6CD3YlaqghMJ&P1nbs;^J2;zOyj#PKkSoI)XyGlN)2hEdQ9Zk+m z;dLT(78`F>l&j{kHpvRn8j-=_f!!wpJBvixdt2+7QIo5tB)o!&G`n<$2#pSCgw3(C zd^!#MO4}~m=3W8PacY`3E~z^$KZnbc)`uI$TMZ)Km087ez5q*XHk-5R+wC^q25W;5 z&mD`B%4E0PK`{x-5UA&xE*X9dfAec^y^Lv)lAYIe$x?@uDJ z({ySLuD1u!YGZoj*7;(3qtx4#HENx5U(_@v->XzY5@)E_1chFB9M0le zHT!IPiX3l?cC>u|$~D33I({1BJ42CY+zG%OYp!f&f8|VX?^Wtq zdUg24J^&%hSLLcC?yffDfzQS2@gmqY{DGDNtADn^z}}zw8h>9pTYx*fsfbX|;U^fK z@_asE`RL7iZ^uK1H1Z}T6r5EVnaLgnaO5l+U{%3SXG+1 z=mDDFKQA3BD>*{&G;P8|VQh;do(C3KRcCKmN>cbN7rK2k>C9|=WKP-&Nrhqu>V$mC z^#bZjYrAVpC%kSl`*r}xu?MIF^(6qlJ^U`CL&~49HW~@y=i6DO;1uV5)8eF|r`yR= zRg%HAPW=a|Eb?ns@Z-Wn$C{EkIxaWhkhwPES@ci?%1+^6-*?gIw{$brzjklb2xZF9 zeD7wD#+6Gmp)HwEbw!Z@!;%g`rF>Yzi*J{Szd*9#*?qI`QXI8yg03jpfRPL~1jO4W zp_2~*Hz>31xf`Eci7ii!(fX9d2s`#0#9uEC4ingaaNup(4cI0-ZF}!F|y|{C#R!>fPQ$v>%YiE4n&> zm1h+^HC3eB)|{A#+0M$wwpMSooX+be6)2C(ah)Ei(HM@9!C`By#j)p#?ppk+2x?W-oL6zP=@guvYlBC4=fxoNjYHe$G6<}>~Ea~V5R2CgnKBR0oU->Qs z8{`HD4;8DFq_A4dwYpx%#l=nKh;M79_DhQrBZJ2J9S?@#FfcF4f<#57_+TX;f<}aR zXg#)GAu%!Mu}XwQzman&2GH3_OU6ENM!>nHYAHywI$jOV+98IKen!yKD)c-)KiOh3 z@YgIH@W1%Le;e%AZ41G^#EBzTv&Hcp9sCFxBMG$3Y;66pa_*rsjiii>RaVROjpHVp zv16juZm|?V`6Pxex2+vFCQ>A#+0{C9nlc9}6*)d8Nqs&UEv;5|Qxji|wmNf_)XAyt zLRrMRgg(VYI-GP{N5I5E5{t=vxmAqwx<~=uvikWs&nh<)S8&op(htwTAAkw>!x7#{ z`{aKHB!G;YBtiZNi4X|bA5S};ui$sN*m%6&Uu||Yz##OSY5ba~*JKYl-^H2?sYim6 zLpHO&P}bgV*0;6FuDmy-V3G@6H0f;;nLxL;vG8MT1?YTTj4u5R#P6Ee_9w^g5rbNn@gKg1fXC(T zz~V!P5uM4Gm5kA@{N1%T21=eL{`i>fyheobp*Vdi$Sro=Ci0(zgoLJJ!~O2L#8aRh zpMF`39h3YKSOH7;X*zrl+fRUe@o11g9t*qd~ z!*b6{F?*PIeN$L-e3~&j+gk)!aI()^SrQ*;>!4ZcM2A^EacSsob8j-gwns)HrvGt^ zaOAfq^QU}KLI@lkkll1b(3LR^;hR?xIFS?kc^h+_eJX?e&kG48NJaXvN2cV`%F3wm zxpEzDDyrg-|LlPApLV3ZehrkbqoJS>&liJ1j~R;Ap&v<>i|qrVyHIK&l4pC?MQaa% z`=%1*3TMq%<}xG3=vx&^R~ucA=V+~Yn^AE!rmpk~@1_%btf=HpO*?m_3Dssj9O?H# z6gH^zP>`Y$wIa;{ny*W$+74N!6~i{qTbzlgi{HeA5)q8+0TB#&WCu7T$e2WI@>(}_ z72iJmfrpm3!?E7224-0qnE*H}#R^?sF0CgeAr>PdMPmjtKc={!%%~brczASc;m4@x zs~7`(4BaynkW}EWDX9*Qd=XU~DEqkuo-*fL?+2tcsLHZFm9;vVWwiNJuTsvac|RpF zID6xUyt-T~hkAvJWb)B)7mhV1^cr0*eN^1EX{`DBn8BrHGq3%T*B5%ONkzUWCR{Cz zPtP5Lc_x$Rul*d{&lQuo(u7kFMkSb|h!P5Ep&c1ZqtQD9Ho;~o+4K?NSar4ra|5AkwVHWCK;~?7#Anx zKM@v}D^4{%&O%9vW!04CUywvvguh;D@u8Bj;OKWAib3K?99~)!8 z=eIr&CRM4X=7Pj3*5f(nx#H1l*}EscftDU>F>(E9A_4&~AD7!)m|40ox!#Y;`8qZ! zk2^*ZtqP&tm6@L4`nSdqwm)~(LXOr~BoymNerHI2oF$&GQcVre*|e)-jL~e4EpFxf zQ)}3H14zbr4kgNxE5}00_FcOVjxb$f2dBxB(%H6iv#AFSPj)H>a`TKmQ?ZTFf|0g= z#-|{=CcIubtv^(2L&9bQUsr?mGk!S9haTF$Tc^cowZn@*{;LJJaP#mG3l$Y`xh0Ab zI$Nkf!UIpsm-CFHSTf7S#igmKDf4EL{~C=A;J?3Bh9!UZcaxkZkIjhUPGNeC!M7nf znn+>oQ4quEr9-F<@vI%jmmjV{6v21BdjW$x5e@IY`BXN(64#l*n^*rZRbov#X2{M; zLOLqHyIqWu&;(7w6HPd+geMjyH!jp#nRn;S^499Xx&1g(hD=nZ2=X9pTJiY-3_ZF3 z!#i-DcIB?;V@p1in4*FV#FVS$ksu#HU?MC%kBZonVf^TK8P+D?GlB_jJJa4z_I)Af zBZ>3`%*HZeVqzVhuc~F5{?eY;of=~BR2SRp7!1i3P056!=no%?%7dFd;quztG79~y zYjmc=>-gu)d+2Kx4sa_;v0T8C2eLHXi52L*5AiZ=@D!1FIE|}BD`>2$y4CW4tdw8> z^YWVoFvi}QigkHhx{*}qU~0J)qpYwqn6)BI*NE6@s)|^h=H`x-si0kdgu&S|9pzp< z-JY<4`RhmQ;bC^zVH^W$5I5ZCGgZIDhlM`VL#HlCNaMw2HNI_vo|z79kAm2mW%i`C z$xE$445I1{hu!fdtvSkWJw5px^+HT2S$;SHulKkeQdA^~O<{nlBhRZm_rs9cPoFHv z;ZMZf-)=#*q~zY5nsry$J7tpneXZiYw^5}BHKXQvxGGhG=h;1LN{fJoi0$PxqVd~D zbaAVnuXd&%BQn2Evi^R@+Rx*VvINi9(4Qj{1^YY`k(KZL6u}p07j{8=zOsJzWp|w7 z1vH_YSS)c*WqE?2@*E#rKan2u;G(`%WbW}3X6IGjhG9V}X(Z#cf}^+}Z#QUhYFoXo z=eugFwcV`fR`VHId_{37VK8yfLswu*4r)p6nzf-+&6U1$DqT&$sJna1Vje~v(}$Av z0)O^Ar@fmRxpu_n^S`?q7r!jsVAE22JbfDsI_Sk?94bhhJ=7=C5AjrM8h8m)HJ6kh z{eAV(7SHgs7AN78mtID4J2!16rVZ5+VyO|e-S$Co@)r|NR&y*Se#Lig3qd5^^Ff99 zWSW1{zUuF*iL8u!CQ;2GS3b|7urvDWeFPvNF0gR9H($r6#Was-j&-^^YCio_CWId3 zf5mtHA0gNHd%3Wd4~pljW8Vk~g(G7PX220Qrz_jIe`2kOX&2b;?_o6?C5-JYganc zl}!0mpEOmcx@I)}?i|Qg>QbOTO=i_l&cVTxKEx0M54oDWgGh=bLguGzRIaBuH~sjK z%os=*mh59wqGbWzYRaBlmSgJ0672ndJ@5t7wOyrlV;DGQ2r)ICEJG?SR(nzfK@l!HXHh* zCkpX-AVO_=C@MXIWi8Iu@BK>Xf_q#b7FQqN!vT)p8XWed%|M@nwu{kxc9(BiwzYe& zS-23tg+(BdlY&~|ao|ikK_rL6@5K1{G3h6Bs$xu++d_-Sqy1+C>w-<6$uaK-wp(L| zlT~>OJk4X)h2elDY@n3^>!8IcQS*ypZ|hXK_4ApL1ptY-DE}aRl1px-vAcZDN^PdjqJ1m}7oq4t| zJ595)SLh1pfZ}3MQS7fKmoC5X`X2C{?GRFfFqP5vgX$ijCH0-oGBFBu7c{gYb({aJ z&Ph;dWk;X5;iMZIa>;4?&IIz8rH5**)eJj2(l}z-wi;A{O%d0fxBuK~ie)j20c~D{ zl_DA*%rH$;gnxTn*j)|Z5;+X*b>=->Ak@@hZ?!O9KCRI^zvt}*EvPT+jfi*~KtPql1!si9oNtYoTGL7N?7AEEOF^@c~eExZH(hoEGJ0%tJYG|RgP zcq|omG8Z>Pp;TwUG}creL1po$jp!*X!q*ZtEm7%=i2Tz<>4uwAu<*+b;{)|B3#<$1 zRLL3N(-gD6EW zoLMoXct8~55w&jdl&}>DED|nCM&5d^z%A0+C&4Z3IDm9vd}a7~8#rXCd7IssL8h6r zSK$D4*Fi{z65JkPKlb#y_|3$Ne50Yk)xuOv47k++4n!od2LOsn^xv?hf!LO=y}4Cw zXR^mY>w(~XoB&N5cj>)za}Gn^wjlSm`r)7j3qXsFyUZ?j@Yv;P62`Zpp~P@*`rbnm zXPaNJKZnf6biBR;GbMk!t)$d~98*a%B+Q$)EH97D4%x#rCrBl6Hzqw|!Ya)g>1As^ zOY*HU)IN8Ya9mz&j`U}TaM)S>Y1mvw8Kee`_4{p=%7dCKB&+@F^C_h-zo54lh;Yuq zy361bte2XGo{<(6T382SqMxhfDE!$O6E!yIw*ABHw-%F2=jronOFJew7g4hK@CmR4 z<|OaApSP$>@jhpXv14%wIG2|*<2*ka7@S(g(Cy(AmLrLYn`5dYAL2okq}Nu=(E1c9 zJe^|_%gxH8&>XGY{Az*|5T~v~Y5dg5u`?sayu|qpdN+1wI9)}5dayw&V5a5QI$uz^ zSpM16u>_uv-@VPAqp5&%qicu2yOS7riC`_tQ1x}fxueMf{8)6#y6tO1%hPJwk~XC2 z4#C&pX4!(uKB4}caeIdia92H-ofz`9hELG$m*z7SE6V&<*Da)(YUiYg+OicElb#DTKu*iT6 z$KRuvyfkYXX)&}XL*(*umg4WH;N2fvS}(tymXe)}6-%}{8n?vV0BuJcjQxtR_mwJS zaX!qh;<8ZX{r7R%J+EhDAoYDQGW??q1fxOjtH08(Hh4v&+LZ0HFQVdlNpok^UP%c{ zE;He-8Bea@8pfHFH;5P>trc&N?IlZBNxEa@^H6@&3$0~jbolG>4!^#qlh$OIsy3cN zfYhd2q>(Q4O)~!LQ$N|wo%@*PZCk-PTNGiFjHJ%BveRCB*u`y{!@k{k}t2AoI}_ONSLdZ1u;Q;#!$j9#b0K<*4QoE7wq9icd}Z) zsp678mzjNRX0wEUdb|ijair#%zV?Slt~Ry(LR02pj&)f`HN0P=C}nH{XzOczWcJoa z0oMGXM!01cmC|QipA;JwC6txxdD-aF!MDD#ff4 zGkv=s;97RU4*+!OS6ujWlw_4!T8ryYmMs@{$4+Twm(!)Lq3n}8j5GzP^AtlSsEb2& zuy`$7{={Dixiv3a*s3aZAhB6PzVJx*Zc2kDf`!cqlc~M# zv;$)5YIDh|35$6QUW17wrplPO-Emj{+|#b*h&z>-Os*UwrLz|sWt_i_NEduh|HaJL z-MshZg1AbM49hXNaUu$aa;mY$#m2;FChx>YTamfm{V2PP##l)5Pk%@mmJ_h7A4n!&b=<$+m)f*SQpn3%t-?MQe~lpX2#Q zF`E)6(&Fz@gQ#a-(T=eh%D!Lf6l@`Ee9?^x%n$H-H2Li5jKuwpLctF8?mw!*2gkoE zk!PODfco8?tqcZkDfZqzPM#43d|?%2Bv?^83C?8iC<6e@jc8M$ojIxSnU@i_W% zGo_pfW-3n-)G5X#3idw=-eWPIrk-w0NDs;=cO~BhK>L^5g`3ML;olZ@$0X5KUjmAS z@^jNQs4-8~o?d0IK4YySs9isKEB}(G7EO98OeomcTzR~Q+_ta?!AfCwsow6xI5o$n z)HN%Acs&R%#`aXrzLyWzV^)qQRoKs_)U)wZY$2v5p; zOb(Ji_c`g&m8F%5D&qW#w-hEk%X47Wl$4!vreOFqR!hlSLC7fRS^u0IS)c1ZnmZt# zl{-GSnV3y8m*^#HDECbh8*S^{FiuV2Rxm*=^Dw5~*uivE9lb(E5BYUU$v0m=UNItY z>%+`k!_>8p?xv(?>Nx{3aLn-;PQ%wp;$+UH2bvtIvE8c*)H$ID2DEMq1V>!4^|vY| znQ30{FxxmU4x;lJ)m-TNorozU$j2=R=Mu zt_Vxk$s-!aa^-4@zV~??`F8r55hd1|bq`5^Q~74;T;T=xY@N?o#It*}$+E#&r0VP3 ziuh~>A@A9CcOSzYXRc!b4Cg(8qEU*c6abJkCvkLZJA_cUOIqB`bJXtc=es_)f1OWk zSuT)Gw2|PlV|vls+^mmZezBWfff7_(7|`2SvFa)C6XV@?t7&S(Q40=pCIh`1mqAu= z@Y)c(-oLOQ9SZ{g*ygaGo>Rh6gR@!y2ANHV2kz_4nKa=MdejX_Xv9rFoV<}02EOWi<;ZR2$6gHZe1R|a>2X! zZa0v;FToc_Y}WDf-MrjL!mI>x;#qJ;p0RL>SUew$V%(k8aZm8#nH#hi@3$hT^glm{ zY6GJJslLJ)rgYCxW3Q>E!=W4JF=~Oe&6n#pXYmoPSMOId@)zmP9RqoD*}tR!_BZ z7s@LBGNH!Uk&N<{*T|Zi?Q0iJ5w?!|Oowlj{Q}|Oxb23{@?+H-cZHF|->){OC8qh- zxO6D;XGc$sW?^-ZN0bNX`mvk|5cn)|uy>eh0mK|_?d@Dm8C&7E;EV4U&*Z=JPDJlx zgd^4|thjtafMwr9_9GjghN6G-IZ@Z?uSRBKN`UX+|C1 z0YOGo5m)yzLwW=4zRD>95lCD5w;DBuk9(zWAm|shF((|B#rlch{h}E9Ge|E7pP^)& zZ?~Oqy82@}*9Ev+3dtp`&DbM&jz!Q()f1QXX3DNR8OMtw0@c5vw|NipOs6)F@%^@b zG%erDa*O;4lrY6_1{3&ydwvD|xDQ?v#pAdXMZ`fnEp@~|G0J74Wk8fLpFApWkj^3) zRqM8lU2Dt3p?@@8XQT1PFBbv-4%oe=qcbRg15v9?Zl2C;rZ?L=iEXt^5FCx}wF7dW zA~ZRvZIuni^lG&wG0-ZW9|`uLlx=EwXC`X?)bs8=GnN%`{4}u{Lf9EDlytq!LC{H6 zx+41OsnwfMmQ|mj=L$nL%#PcTfg-C=qePou`(r=Osjyr;B~1A0l*RN|u3%r&mY=4} zr*4%z2wd3>tNE8Ru-q@$AKv+n1YA8{u?;QL3ExiYBjE?mc`Mx5;W2EJC4#(!tPEN66PJFKNVUf-6^gvlBW|=v$BtOIt=N@(O3d5y z_Xp;{rRC)%YmfJ_&fs5SZG!C?{3Hi*w*=#)BS#}*o@pHbExoD1xdQ*Uis$L>j356R zz|ViwnQ;;CN`auv{<-u^^u*L++x>HGgcqMEuzM_ki<`+Rt*3*3UX}!W~SWyBeY0HVI3gVcU>Bi4i!n{R% zf50HxJ^CC zYZS`b=GyKqo|09y@Y~e63viVblbkhNN?(tWY3KwujyEeJo=ksYgd`O#2VDb}G%Gq;4- z(m&6^d}kcE6>fff5PqZ6w%>VW5BV=ZvZ3|>JlTQmEAV{{R7cc!S6uvgA1rsPX|6%U z#IjxBDI!WhZdeuMOb~32u3)U{qzP25(7-9TO5*qGNgD$I_b>(}>!kEm4_|Y%w25vh ziOK~=^Z5SCw{fT3TvQQnR*xJYJJr{a+oW*kd~rKGHU_bmT8s=0i%68KViLw(U8(q| z)bU%zjm4nv?3)O0{0j}g-`_51M8&Sn*{zlHGM+jx_2I2n-^oht!e&@&Tm3eom>5YI zR{6-5Gm9TF=MOCuZGP(~Poztazr)2E0C%`e0K#vWssZ#0Y+66qR~ikPVLe3yKcZzR-+Q!x&qCGFuMtyS{m zLkC+vS_1Ie==6TJCaaME7hAznu+Oi2J|d+RGIX-vyJM+-9-#I82EX(;Wgj36a8@hu zdEr^vc#ga7d4~VNQ~54kt=n7n%+33>P})SmWs~13P=CJH-qhws7c4XQ?$YLx^8)C0m ztVcv0MHL)_vm15AkIcPUBlItPS8n5}Dv=kJ@Ulf7{N+c2ygx5c!46X651(#~+OMc| z^3j-qM3~g1T0(gx!4S}&&lLHpitu|ozrrUEU%G|HoVjMDu*T7c`Q~y64t2fmDPS^Ush4VBtdrwQvymIOIVm;|4htWPVDiCCq z9F~fmqMzy7$v8{jZ)|YFf~Cm=*6`7d!GM0*(Az|9)Oi#jd_ifwe1_^SPTtT!rbxO6kq>}QH@8zaCf0UV<1 zyxk&o8K?5#&AEQ2itx#g*xVxZC8qPDobDK5HG1`0Yi3D|6cRKZ8x);eF`3^htCo&0 z!54su3jYdwhpUPCxIns;|Dvg}BeRHHLG2+CR(2hr$wWpfmlrL_d`)w#MpXXCL?Ye?>kIhVKXX!|Iv3DRa$ z(nV@k4+^xDG#Z~C`X0-!fC6h>QjSc=1oXjY4Y$YhdP`YXtx6I}K+mnteoss#Lz4t# zzwrwz`EUT@A=vRbCoWUwFTZ!{6)4Kk zS+7lc9K4OBgKFdH5C|l!1wCw{SYc%6z{}^7?byXJnOO}CdMv9}gt<<_tn$W1f~9Ww z-q%W#nP(8?p_7=gf_sC)bJSjPeV3HJDNhW=M%bS+Io}!j3}D_SHJKcT9P|(s_Wy;7 zwop4;4Nc#2T?@eWmRr@uFcs>|metC?{CextKx6htVYRi1 z7U-fgQ!(+K?7$9Mu!zlWppEU|skvcRIkDS#O!wA!x$wI|A_*;{l0w*x!&F$-cuvoH zU}*{}kkC_84=Pe~2uGLbhWJ3vabDGd_ha5h{Hb)ZbK#Ey&sX5!;Vq&!YOo2TNB4v) zEyJFbMTWxA*YOGO6Ls0&W{jdHIz&oocjXXL>aFiTg_8Zvam5d->1QpN`8b|S0a5E*VUHrtNZU6ujUrJd<8m(LB= zipuhev{Kd&_FB%#EMm?hsTE-HdjI5XpBKGshSJ+U^rAMqKS|S_H}sKbzG+Gn38h2@ zwL-ZyU~zmN%9S7!K9T!;dn}fI{rO}2lAt`ps#qA8qRHWe5eTTmo)4jM@66(Eb@)3Hjuk;N5hvef z@%RVDW8Lh}9P^zrc5fr)>qEE3PcF8hP(J?5zijndh^~&8*n_DgNMJh8q8SS6jFBkXSv0Efl{3W)0TNrXzi1ervTFTVDI>Qn5&~ajww>Mhji-@ zwXL13iL?kGU0i&Oo35Xji(JsHNWi+GRM7MGEv=cnQqP5QdF?AP(bWU}QB)MrZazt|Ld6d>#+yS%rQ#)iS%I%^DX*K$ zT*LMSW2=m?dMe{>US{WQ^Um%msL&pv+|tLUzHxM_x+`$5|VM( zE{WMlws9oalcR)cTROMCCD#8MD_#f>S|}r?W^VFot^Zo3EnENYrn~n+T(|kXU%qO@ zJ4+6p+qR1d_@<*}T9JfQ;CwI8Thb``MY}ujetJmNC*Uj2>6^rP+cAp2fDcXZx5_sp>m9$`}|B$8`@8`v3t3T{h z`mZf@Ogq!vrA7#-J4v}t>W>-NrEs?$y}Svo5j9g`K;jAu(vH^G1zT3(K2i9 z?TzgEyHc@gbPXnf;;`S}d_rdmnKj#REKCXqI}U@J3|Nt|7QxNly+$TNu|x9BH12j! zj&JQ)tQn802Ieo6#t6vMGZ`M7JCKs~#xd{iX$eumME~LMF%P401DF-X#+ET~P<2A% zsY({5kGJNO5$*?eBi3x?nj^P2+l@ykVJbz7YP6 zl@{mH`enL_C1V{ttshbrcXnp^AT2MU)Dl(g48HQmc(`bdz`eB6Wx&;LhH)B)tyC*H zLRL?KHqo(x8Ry`b3c1>aU-n2ApbV;+!2Ozmp7(sb<^cKi=`O>$v-|J!eZYUby#db` z4Wh6fOcbdip}t;5pRrjC*jXu8UGF$u5&N$WklqrZ1AmH;k6%*pqgmOl>nf6{X&TmkIxKq zI$P4oUwEXj6-DuG-uNJTz#wGAjNZ`T;z6Q#)U%ZApxv7MXHCY&KGnd!<%qOG)b(m- za1k?$H)`yj;Yzx5g~FdbC?S*h`^N>k)BNJYqWjoePF%#inS58?qsH6vhnHQgWC zdOFF@e=dQ4e{B3c367h)1zGr1ZD7S1rv3CXi&hQAb4WZeP)ox24{C9W>>Lc1JEdSE}5@_&j^mxR=)A^Yy-mg}Y}qeL%`$MFpNuMK{Tu zx8xfsvT!k7Q}7mI8Lbu+1cZ_31b2}n#T%4&&5Ql_?%zr>GKSzYD#bma$@R;Z$pD<> z4#Ozwl$5xK_&0fxW--k?`p+afb%qqNFQ5KE8j$!Ie&qR48honw+H-6=N={xMuiIJq z_@^+1$4(OG)DXJV?5I-|=J6kbS#+L`3_kpX#7;f1UiC=ZY@7k)jm^eV7;e)*lfqbg zgz%{eQJijtQyM-7t8;E9wU!BIByL|1s9pmxB=o;;5>amkk5A|KW zC4=$J;AP1c%h>M;v3e{%*QMM&S-hmrGLQNBqO|){Y2<;V>8UdX{%vlj*sSZnGAf44 z|NJ@I-EKRU%I1T`OJ52%ua9MJLvbR}pMtHsySz*ww}NuJDLt&bH9DI;a6ZJu!^6aM zwqMrLW^4!$Mb8K}fcB9PkO(B~m;KT3e06w=bC1r~c}p*w+9)u;5@TJHpG%b{@KaI% zDb_^RO1o!^#qsgnnbiX9)L=7ZbtU-HTITAoTcLvzjCqn4#=SS)2+}zM3nc)D=-^FUmPIv_!bF5-4>IX~2?U$*{9Ce@^kx;nDdvU!~_08X{)NA!JXx z@_4xx5D&5_Z%R?&;q%FcdJewzOd*+eIE^RGFYJxbR?X?bmzBmFu(~88FIzvDZXpqr z-&y(|Z4Lj_bdLM2%Ecg-Dw^|n~1N?p1^VC^L15rIHM2vWzz zDsnR-X5PVcLb3w|`+6ez$wjA?lPM1&X4V(5gr`%GL6JBfFB+^Z1|sY0g@je!{kC9LTLw zzu&_lPzaXwmAO{{jTKuPho6sIWpLZM6g11VSdShzU4Ex?(QW$XI6JyZLi^U}ihjto zakH=3@8$*~+N33yw*Fz*y!|E3-B_P5uGxz~!%BJdl2TTUKhvJ?6uX^B$s9b#!ad4z zgRT;!paYb9+g!Crty}e>;%bvn)R|vFFbUya%uIi-I;1^xBCj1d9mG-2p^7rJhgVwh z%70t!(^)}8i$Y9r&~y>5L3{osT@yq~4|3G{!JV(V<3_~{ZncM@tdKr+6NG2RiIHI` zW71X%Z+(pyn+|zWsxoy%mDT&{GLRfyY8ZKbq-F_jS8_{TIPQYGO+^q3w7=lx)sMN) zEf!=g-XqusZSpShm(wxxS()ppDSXHF5GjU3FuWpj>dig&xqj36&@Ye`kN!;4(7*uC z_M-2ONTp*oZ$oVdycbh8y21QhR{$oO>>LYfhtnz|`wsne{>4h%FHZ8}U#lIJUegz8FB0-KMGX-iDbD#nf(TwHpK#-hHRINLRgDK4=mOQLCLw<^z!+ zQ5{2Brr9>uSLW&Ue!Kt~4JYZ;$y*)tXg=AvdtrJqT!qRX!kZhoEgc1^; zoga8joR@E|>yL6;>tn5(N2jGJ8}G&e%1*i`V0LVB`s&3=&FTQw11b3*M%_4dxkklA z^rS?+T%LYP${~DN;f@TalwchDhLZPF?N(~pG@m?2_wAeK4^hCN=w46(vv2es`gaNe zZ*HtI0(p3u>(-ia(wyVx^>uSWP2c1cD+dEcdR~xfF=rKx4@qwHtr5xD@IR02CZzEc z5kZY9)9b5v>s<1uZ!;exh$;1AA2uJJtSRxN1_#Ykddo59oj0Z)^xqTBt@m9OaV=xG z*}&?wf6OuiM10nB44X~SL5n;ZjSXduU&0%{Ru?*2&d$^cim_9Eu2sB$XDvscAPXlkok=gfC5|_f*>AN$1 zz)$KdKaIx7S?@v(e>}7gTheSL2+xI@7`BIz+8Bcp<=r1P$%Tljszv_E)))54g4`?U z+d6*$S-w;Fos|#DQmt8NI89VoAM5bUt5|YTdtwny0SDUvI#D2Z+rHlusn-3WnMsLK zlsK75XaXd;o`u&8H$9c^i@SqUWk$40JR{8@nopLtxKPlO>1J9+S!^Tar)qWSqjb>h z=b>ToQsZ?kxaM_zfM1KD@G3XeGZe$$%OTjyNG2XDdf1&FLUXr83@tttEr&^{-ecFJ zgb@E~2}$$NM~~B>4?gQHnAxkn)7!r+uD^((l-RoCqO80SvYUd@mNi zk<4ET{%8-dn9RHN^VvPLudJd!uAKin&S_vr`q1(Ekn^%7@87cB?Jq2;WZ-so+;Zl& zh*QdKeP_=0GK*=uOSi9lFC|MC7W<`KWIbMdU*m|3kZp;St#2YjkG{-`UP`BTh9XwF zNz{S)kD&G{aLh%SGoXpOv(3%h^JEpz?l*M5dVgyXtKDiQt~Dv9-M_cZ(~kDriVYW# z+wLH(GJf|5Zk3+g|)m^aW-X&NFK^{5D>Y% zY{J+QYJP!a)#tfKJ%_KfdluI`M@_0I`bwIxk_vV`0(##^vA7nAqE?>S$n->zWZaw` zUf#L1CmAJHM+P)1O!V?`QwTO{@bm=)Ak6cbxHf*4(7^&zeCH|nH9B@}LKcDrSBO(~ zEK4f3*LFFa#lQq`yF@*CLZc0it_ThN2i&I%kbOO~9P4pJ`!b8LI8;jeKZO4#Sw)^6 zz3es5wvyQ^fJx_alj7z1pe*iaaY(O#9sJ@-m1?lwFo>Cr&Z!z?2dmqZxyiiXo@V=7 zUNLDp-4Zu9W!A_IX7DsAn%acZ`5q;6I&lb$kdi-V*e}}9>Cl<*o?AQw76eWZ{x8{( zXV>YC{p$$wXAtxM)E1X0)+Udyqw??{PIu7{;@O@Fy!#I~pTO}4p<*C(wdcltSD-PY z8~${=?fC9dp-*%O>cNiuV*bjnJ-xYiIqY-cxSQ&aC7nZh|4w*#=T}Rvc6acF`ycB= z4XXX?sRO6;PI6I~HI^vDM&GB1@x;XSgLx!}I3b;!)9AO>)7TGsv_15gfIDO?!^f`3 ziM6MiJuE$7Ct*a)7 z_))J2q{QqtTDXn^r>kmPET+AMahvh_(yw7 zUaG4wf+j`nUvjHN>Hln4m)n)wrbJ&R5z8FY*l=r4 z7}t%7JT_9mci}5(Y*oEDcvS?Q z2B{X)i}I$|Xyb2fqaQ_bw>*71uhWw@;O-?a!_N&1@E<@+X#4W*h{f;Tv8ETys*A5f69B!hX(Td?%3UqV*^skN6CD zm}U`1DGFT9l7bFP!apbvN>4{dx6ts0FQ*P}?`|nZ1upsAheL@idS>3;04J#I<@Z3=2qp?7$kP!bKLi^|0;1u^!@t zO@#u#L7Q3uvY#Cled8mo4&eQKxbqjnw>((1k+dANLgA$ZEq*ULG9(!Z`m4f7tL*vd zMr7Cv&r(K42P9gJrtym11=ZBOC(Zd<**}W1^wd|~;d-IfaphKG4_FBrPJ1hXz?1vW zO(Rd%{rkl!{- z)R`32nBr(R*_vpLL%0ij$IzB*YX_OIe+k2b(?r11P1lzSd`=!ObXC)AB@2z&gimiT z0H)HAT(zicZKsOzqjdvqZ#5t!ZTd1q9<~Y$v}U%h6FYSnVJv-A(w9|jW7XXs<)(w} z3w0L1pZy^r(&i@V+$n2HsG{AfH1soHpVh7)CmG|Fk5!ftv>Gr~_K1tCl>L}hMKV3f z$)gofcSK>6>sB7%8R!;I8{g1psFE$Ma74llR=gdWcVx~79jPXZc}ULW8*fLoYB$>jQ(`2uU|JB|iv-S&mw@57HA@Hu*(ZQm;e%;AL(zSJ zeE_rn;ZQ09QI8@?8^H@;nuyFiDaV>YxlL0Uti@Y?>qY7KzZ@>kZ+p0=4hY#6Iqe2N zUo`B7Ma!86iWN7y*(mo|gzSF5}U!L*3+e5|E zhsd zzMRbT{N^7CQhuUW=m)L@!-@hiTZBwjx7P_`0Y`sN?XT9n6m3ieInKur+w>27Nvw(R zkJ4LuDr{2eCB>*CD3l~wd~?P(IJ$0Fd*4Q?O0foN2Pgdz`nh1%iaT-7Z%-v^&}2EG zZ~{~TqcD5&eIj5gmuS*dQZI;-#S~)Y5o4#f^Bt?N#i{W>9Jh3B#IK3*iYOW&PpcUA z2QV&H_|pdOCezwv^^iie%U8D&AlzNT#)G;KmZ0BNK7h6Rkp>B_85PP0{gtfd3)3X! zWZNtN_gaMpiZT?P(k)Sz@^Op%%Qu3296AS9YMe3E7sP3VXp{1S{Uw39$O#| zw@T|79OOjWIFNZITQ93=C)8*rGljRS7Vk|K_ea<3TwQ53*9_h?oCr<0^`kUDhpXS8 z<8wDEN*n1( z8AzTvt&p=FM^zb#?AvEddh<%Z0YzidxJ=_sJL~-mPLC3#jk%rm8!Mc*yko$N(^RT* zJ=lvOJQ_zwC&&zEnkT$pN@YUAs34t%ehrQi7H(-NVDiY@xtY8`$B!UTwA&$KYpm#S zv4DE&GZ~84Opa>3;55m8L)U4WslMFP|J8kw>O06m2L6tx0< zMF}F@F17)`QaRa0C&vnktYJ*ZOYM|3(wGr~lMW@y#SXn-I#u=jy*|*+ZO)#5$vh-?Ph6AVvBdU*={+J37tAbyh7lXZyWQkgI7Z0nN8xf) zQbG~C`e}poTnQUS|K?wz*`&48nw^W1#W~%N&wHv&*5ahV5s14?6VK)9GfOPJqm|+n zn#xM!RRdY}K^*ki{{+~+%tgZKqFxC#%HTTEHJhPJWgYLs_`uWlX=?6QP}`n;olV6( z1>vKM18uKYC&^TeG0)pzm%zEP`Z5*c;;PKa>EH1^SfT*{*0z6qOVH&vkzXC6OYLGt zd{Lctf%3onVx)N|*Z)SPL1?`X%*fS5L@;wQw5zH&XO{b1mXmvL)RpWqd8f@uKiU}l zsOPuW9*6rXJ79D)iH%l#7cI~aK1qDHQc;{`Y_o5>4&f1@qms9uUFdn|X zdx{;S)KFQ}YmUciyMK$xee)rp?!{4BX7m@G|7sD-U7z+PRs|EL82CiJe((Mht$W4i zr9h#ZeVMyZi^ZyUHoLa@bab=X1^;!wey68unSm2&iWb zeJ0ch9wl0%w@msjvcPkbUt3{~94av$-ADBx`{N~}^i})Ji zY-qq$6x}1B{c%Ie8#P_26haf%`7UyB6L(sIxTKW4zl4qRS*Xj}?`*OPNI>fNL%B;{ z_29v99L2su?#1DGOj@Pi2xd@p2HH6V)4o}w{B~h*+MU-lC-&03w&;%&pAta9KN?9t zOND<&TmARe`kzzx>&m`u4P1BXuCPD~qIEVq?`iM)_=>{3>fqLO`v3m}eHhyRr||$f z!vB@-?Y~p~@&BJ38)V%7b!N7A&pK%bUUg*^iuEoMpVOJNa*c?7ca9X}x}d77*{U)2 z$Cl!|w${yV4=>rBp6eKjB4iseYOmI%7kxmm6|CxA=$7s1e3@x`mmVsd8Jv7pz zq9U7}`9HG)I*eLalif{7E`{jJXf2nZ;8J&Y@bDW|D;F0RUS3|s_is*-$b^FY!D-{$ z9qs=A8Y*@Ht)gv)WYxPDeP*n+vQckwBc)Cymk`;yiEJ)hBKo_-CGvC&i)eQ=X2>y3 zSk~0D8Eh>MD+Ok1ST8_;e!`eDChv`yw5T91NAjAHs2rql*;Yu}-S;JPX(Npf;CsR` zz>al)X|>xew^EI!5IB!sX6usmysxyFCh0ysR&6dVp&eq0tSgUuF$_MAXI0I|Nwcez z*4!dKk z>F^i95igDh$}js})gP*imT+z^RQ6tNkaD%=CeY5_nXwv6Pae~I9;Ig2z^ihFEH}5F z6`IKY;eBhzS78pPnhG9QKvrDjU+oQYIUV71$@Zq2>Z}j|2aH>0xwQ*-o+@4r@Ytno z@n&pIzDX2j?Jn`5k5eS8J~v$unYp?s#`qHGc@Do2vZ0%Kvbx1QqDo~hMGK-7rYGDG z(wSGg$)Sx@ws$(PFz^~O>*Jdq6?5h+2{!5;@eoqw`?9qzv-78)4a`R=2dVsX*1<{p@sV|GWfKPj15eXR8 zD~M>SJi_$^vgH{q)mrc7^jZQ2uy{EA#%aWgb{FRxNzHZU196nG>~&#~ zMj4}J587#QS~$xe?bqsdV%9jE4eRhgPq)u(+)VIUa_i|U{34cHWmh=%DErs>vEVNX z6|0cJ*d{*ymgO#Lgy*DK;B!>n^;g!ilt6S%Hs(W)k>=*iLr-~xm~rh22n%7%c-{tm zc)vuZ0CA?uTkR_E5huf1{fcnv@c{w%+`6Y?-BZ2^p}T1>nSnd+Yh5bnQ7LBYA`dV3 zoao(_LEpA(jb49mpBubdnna!HmSM9^ zk4w6AJ-3`1SIwIB#rB7eQK#7zsOmDQbS-wQ0(UWU=n{dWyIY0LUZ(sePl$c9Zd46t zf26Y4?>fG|X~~CRu&v>3OBa6tD;DZIs#;!&v$yv*G3`+%2!&2qP{HnQF#GxWa&Pcc z}2!XfF@x48LcA-d|172icK#k9g$kR?*GJBb1;=-qs z3~mW^rmA-AR13;_)&X9QwRn5?weEr{0~Kz;<~;%?c@te=Xih(;M~E}|>t{ZWvme~k zUWwUcPXD0HX>N_5rH4jIIf@@uLkTshagfmy?^IVR$3K_I%>R~6NDnrK%PScN0^$4d$297c?CPUvXsY4wwNUR+ zV2rER9R#T9G!D@DnllCO%dmd7gRNWoMAWf|YOEFKT`PPEMqBvIP}C>R`U}0wgLj^4 zK_47K@tSUZS=yS%^Qep@)Ha_WUEePn2GhKFxTX7*2l(xCPyWxU*8(kvYc+(dlQJC74qyzcx zqW&SH0wA(O6ecAE;(oaTU5F`ryZV`&?E>+agsSPKet9eO0ORSz3)%%c4#@S0k7eEi zV8%X}ryG2oi^|v=I^Ll(Hh*&NXstFka4*l(i#I(Ww{T!97Q4G<1ZJc-{E0j<;H_=B zi33S+IY$dgmEu_TCQ`P||D-x~)}M$(cIjb~q#RF@@gDWN_N~pXiEe?< zH=SY^=nP4CNf|V@OEVVD(2s3D%p;{Y09&&uG*UXvwvoOdP!OR98+>-;po{nDK{hm*1BWR(tUxv9U^C1#2` z^3I_vEQva(U%)`Jd|E3+3S&0y!g_ma3xA6$eh4QrQ4qQulozZ*M5}M@+pu$ zN4e}*ZlbRJ=UkccRQ1dd|MllcwxjV)&@4E;$d)TrQ~%cYC2 z1A`}CoEct8nw01$QH}Di5>R>8_en59_~j7hV7M}PqpL?#vNY& zuv*yHUYg6{Er}nT+K**Rb`ps<^bx(Ike8(!Uv1d;yoWQs^h5RCg*^*IKntta>rFYx z^E$sV8VHN&f>1~uVAqqDhO0h9=6o)HKdpfp*ZyQe4#Lbu!Gs%SSdJ6!T@-j6xL)sW zzIdEdJB{zwvQ3=)?b-~ttlU3h!@Tsa-9%)BFTw9bx8X*{5H^6qvFeTRsP~UsKUWLd za#y*xA1WjZJ0MTO(8-43(7rY$#qkrm&I7GhIQ+&5t}zOMGHYQyel3YP&;+I2ieJz@ z2I2e5ApJaHp7GNBl3FLZ);C+;(<4E~?~-J!X(;|VSv>~r{9s|6k(j?0H@37$Q?k#c zR<&4F^)p@xPt_FbW-*UP>8uGVpvzb~Jnp&6dW~i7RhE)0aCNtnWHYaAb)7sn6OO+r zePb2(x4GFPDv(OLIC5^5*h0v9bf4d?Y2$evQXqqY7ODD+C_-A%q( z)W>LA_0IU(xB?W~v=S8Z)9%J%&?c~ckZu&l^77;J`3qU|8jDS*{;pvF zSDPOm9a0n*Hj__A$}eMfrbSQ~>PtWbh+a%E0dIcRG0e1IR$Pjaxtw8 z;hE)CD03QMd2f^##2p1xeE*X(R0i`6OlQumX)RZ_tgwseRY$W%AL_H)MfgZ4d^@w& zyoPX#`M*uru>P-1*kEc1Z~SMfB;BtulAlWs3<-F+ET`W*5}c9~y!m&t_AmP7ETaPT zQDgmiMhNlW1mXoasH&xfKgpt64)H6oOY6$3I~TitLln3gq=-bp4lgfzvA3)F+=_PB zllpr6n=a-{r}tfZ7|(#GhZ`&sNuwq5-del|qA)pqlw=hfyUS598&&CcB_|fbPpc0AZnR- z3iukf+d4dNlHhHm%ohcDZ~q^osbQ{Qlx_B=Fca(7yODP$KzI{as#vR0XzqP++Vscc z01?rPI>55;ni>`t$M3x3@M4Vg9uqJe&*r%D*U{nozq?&Mv%um12lsg?InBhyPH$(n z^;!k#$5eAl;fJtRE(|!TzJ0w4#^47os-B+w{DLFFhU1f21BTlXm0DOlhVaetj8=D- zlMB(P!EKz*%y=!W(fNFb0O`>d|McqWItBz?fc)gh!GRK=0Z|wr6GvvnC#0yM*7SY0 z^qmsZO}99#(T`gWpLcX_Zou;d4^DgyIXjgS0^9zo_X^9E@8}Gg9WwoPcnB`mkea)K zPgZQQrm?(0el^EbT{QJ}h&)P+Y<1abA9PM+ZmFo2^Njz+YOcRv@{qbgGO7&q?6c%- zt!e4Hkv*HT41W8b!bjYQJ8+c6z|O91Gz*D#hV~#uZoSN>*UNVQR|dOa1TPwopsXPgiNcL%5bSZuQe`h`ttf=6qMoE9isgy+4DF{w< z*wT{zEH6q^T3VVa!}Qe5HnwKHJ=@9l_S<5kL2wq=(-LRRsGfbTZng?5v%V1?zmG)i zE2f3JDQ1kxtS{vBk-Ou+tJ!!w>b4*7ehR3de_+EJXvcHEj2chhEWPWlVi%fw1b@^EE= z)j)k2iE`@-2WRFan@L z+?J+`e7r({hxdc!_hVEOD;&4n=gEc9LfOSfH`9bK1?S>CKdjMBaC$k`y-wCGs=K2q zeanzi@93YQ*VGKW^GPhRQK$!fiesSZ*!=6HkEOD4Lv-r*Woh5(8k4% zp1bK-My4xi-wODMMJBuk8w2dzuw$7-?|)H)GyvpirTFd=Bd+h)gS6AF>g-hF`JQx>L928Ho$JT zg)`jzoVlU4j>~Bh_71)||5kHJGff>?b8uiSBY1&Vyn>ngtWKfJ_?D<&`MPNzUnmtifzj; z5ai*=H|9^U4tN4*lkRoJ=y@~5lxg+=Gh{k=j&c>gp6uq>yNb|l9gQ|-YE!kAW4+#rgd;X3-N{m7rC5gCFCme5UT62E=Ljf7uE$R~Z%BJf=WM=a^ z`9hXw&AQBOr(JT5YU_JhEZwLNHunYVx0gF$!KsfmuXf2v zO%1Txjyo)`v0w`Qs;@$>#3Em9C^@(!^o^+1`?2{)u-}F?Q8i?`@>f&c@W`K5;LA{4 z>cOJYxrbNz@?`K*c&d5X8Cl435Zz>Zh|O%z_IRqD%1K1Lr{UwqqA@+(LnQ_>U$oRS z0Tx{Ao)UJ>p8v{z`nx05>K$7}Vq)!cOR(}HL%n08z9Yrk%4|M({k>@Q4fo`TjdfD2 z&d&hIl6(7ON?`qkxgDRsSW(;eA*V6nB;EB<%hfU<%Hmp2JIf~}+D5_tpwo%SC z9Na8#Mf8jpP3>;K%uHNYpE2~!KSbx22Kd-J{Mw%Vdz859E5t%iW+{(wtMgh7DTF(1 zw>AEL+|KL2QV-_)%lh;YJAc;rHXgpK4d~yxONK7AU=S{k*onp3SdAPh_>8wUi^k6VCXA7FV#g|7FRTSR#qu={@)UXIeAQ}U%X0rXL0 zhyH{yn0K?78vk=Y8&Z}kl?zf=t!GX(w4F1(eOz=iNwx?w@3z7 zU{Rj3n61x|dmb9M%~v*jFzn%@r(2B3f(E9N!>hf6j`Y`*GN(Q54cFt6)8f zuM<+5dgD#MDx=g6BWv?|OKHg*vl>}t(4j1?ZRM%G6Y+!6;bQ+H@_LBvHSwmGYu42E zuM(|X&1@l6mqc&4$A+0}>XN22tCc#d*xNio-$xDp0%CzIIU~&4(SC=kRD0+D@-<}FIhqB9Wlb)V*In7PMH*D#Nv;`L z=$BDZdL{JpO%i=pF48hcUmX(WhWUibHe0Fr0`sEJMqJ_~r?e$OG zw^HELC=r9h{cpEfZ|RB7EV?~Mm5vaXic9HLf9H9M&EB3TyEzKsC|{_#>vx5QuMCri zoNuxGCM9JetyqPx#n76YO^S$v8O^Es^(8i$cF@U@->(LBTF!Kf@SRx8fHv=q{R;DX z6`duRUbr=^r&%!b(l-5~CB=jy zw}zh5R*pzURUs0OgOB@MoUVGN@oJqN;}*>tXu9@I`c+o7y7rhNjQvLDd1HXzV)w)%Xo1$l-8O7LW|cN-ErgYagkq z=;+i(%p&8I7_5p~bHr7b=gBH{BYgYDI;yB3m*nNbDK_memeE8WLG&7Lr9MIg!tx+7 z?RxUJtg!Vfy=K;(m$8b|!rVx!Xm&ZzShb!Ss?{(gGu~o^uIM+|a(|-RaiwU}!AkxC z;=4bQR8(%L#42FqhpmXM1+VBA&gZ7DOp<-5cFqxMqaIr_Xsv@3J#SFDELAd^% zfcIM8rSHaDB-tTa`Lty9%pC^2#YJL!?X&tuiShgYK#O7OD1ob6MmkaB^zhAoVvbfDxRt#1&$I0Oh zppwYoZgW7nz1ISI@LOmxw8v zi$E)hR9r&7j;Q+$T0M=i^PEX7$-Hgvcva1kZwq>SNhoWjaBG&5949yFdd~7w;d2z^ z)m(2gIb7m@pm|RI!83Ps9rE4XO(#arZ8we#5^z>MZt%_N$VjMF3;45*kJlku&kVP5 zhi!)Q%}bC$$Tu#|X}m609##if)2Y`TlDyV)%5z6`p$MrNS1L_CIcUi$VXLYX$(-;+ z0B5ar+df3%{-4z;cap!JyO3VBdOs@(o-fZPoEMgv=q0PQF;v~bM!Qo&M_X*UvnFK# z?o6&2!pJ$&A$xKTSl%L#*$`Weft&GttG~x@Pvr=W2&5T)Y>uxs5xM%5N`t4o6l;>5 z{nUY(e!1Qoxw2yTxOE$Idu?+GkbCwtGdDjw%6h8t0(rsVTeHPaUjRonv7W`rwY?Q% zZJ!1gwK`(y4q;Be6CU`ngh<oUoXdb;2T>G8RYjoi*MOqDbH)$)O}lcC4b*n_e5ssqMUti?X0qGP2y=N!F0ms zFuUT?H!0=kRI_I#m(I7}sqf+%q1}s6%VB50+noD-dDiB@+_$ZRp4?z((Jv)gVQ@$3 zI^a{i@_5b6*nrPhh0*o(+Re6`j{;5QJ|2%5OT6VuF1~8?2k9g9tX&K8PrQoOjtN`W z91dk?hg*_K&7_>$7$?aV6HF1*0BztRZ=ErF{4m%d>jMVnp%8a89L;6A;=79mfxME4NhSk_rmMOO<;~lzvh0k?&cy`E$JKlDsrM<7Q9xFP4Z>- z0#}xKHeEZN=X|jttw82OdU>tNu&Oh?~J>#S-1X6cLSn4{a9+oYqHSCPo))?yIG-RhxJu67!pwK$p}H0A>G7e5!dB&^PY&V)9jbJO zbw)OMDw&%f|8R8D)AI^&*_Jge!c1!%ua;zQ%XR$h=ht2VgWIABXRmj(1t7AQJM^WZ zSc)q&3yob1c6x{ZQKB~nwRdTKYrlU}!PdSq&m4MF-pEqy?Y`9RYQUCvAZ)`TCRQ=a zeD8GE4?7vt?Y!)p-JkXQ-jxU2eE_Ca8NfRAa)l27ctT$;55RE+G-rS7enFUf>C zRbM*^|l=)h3+$J`sOYl#2(E;{a9-T3*kLv>8qXHL9&y` z5*ugUiN38g{IgT|w7~Y!gVnyDHtp?e55P5grUNJHwNp7@NfDT51fMBsVi((fHO+G7 z9o?0Qs2`lu!<3e_QU0?=8EU&Mokm)V)?Wc($xp9Nmj&NUyvj0P#HXx^6_x>ra43;& zqJFi{O)@R^`Bpe*wd&6l`96vMicJUfJ7LLk^ddBbt0Q%FZ3b5JwZ64xoQw~*E8D=l zRB`~59hfj(@rBM&ri#u_#rC=?e)ZW*jM?+Q4Ia@)>eOKx*2t<0iUem`c${+A^Hr(a zP2`+!I6xjiMlz3iQm}Eq<+eSCTCgV*Ler4Ryh^ZAVt>s~7d!E1>! z7^mkGjZ$yW`#$AUyr&`<0d7>^JGqW;jI3kq_m>mRwLVLTaq3FgvTCYB{`TumZ)%hO z1F}!sB;NQ_KGMOuh~t1Xk2$OiCG0^Hgs-VYU*-NwD1yDl7X4&T-TaR<{Gzlp>*e@z z_Dt@F5J>suyP5B;sc8sIe!;Ek%NGnnx8mx1qpa*Y3Pa*`;? zgiz`J)8+l-WVmQg{*KObyFzI~oiV;%TNZ&Tnk$p;Pg$+P2R2Q|+!D?s^eA$`JQAmBUH*O2al4JaByH9H%!r& zV!+?u+jr&8OZflf3#046>k(mnu2HzaLAudS!M^=3ak7flxz7Q|^}q_MwCDH}BI zY7Y{-GdsNB^rFZS3^XtiTh4RKRm$!KKm&@XM5sNR=DjB-PcfeKJp+^pBUL)})e_R# z8z`sOu0t!caq6Gu?5{{pQfY|RqoUJ0J6-o2f@KX7!_b@Gvl|IcSr6yUg9HU9%&eXG za}m~GqptqJ_6OBoGa2gY&N192(NamQQ(Xnj+FJx9ETYC<}Y{^OGP%k3TY$kN-!!f6$ZC(AlM>yC~NdT+nB z2>@^+CDp+FXY-BsO3xTg@fsIm$dLFD%+{7dT7;NbeY3DUXau1Lg7y z3j9BoNj(nRjnx3_c!TXqftQmhpK=0m7GiNCLlboKeQugR%z=%P|Iv)fWPfrk^K)Em ze&wqFVHr6sEZ5$?P{NXOTxoS&9U)*&S|ot;9B3~m(6Wxzm~PKU^Yi&#AJXsJ=OT@= zJ7xy3)|~%L+rfx@fUlq|2QWbfioXSlI{o|SiR9z6Gw!SVgMj;EYaO0olP~mDKQOjv z$RoFr!890CZa3=s>KbM1VT|c@G(eoa3vQ=76sU5t?0s+aI%reM_N>V>()IXhg0+6N zc+tdgMN8IuKkn=4_-|b2xlfNC^VHVEA-n8?hy`Wwh9r-fpT#6D2Y$@43Yjp$i^P`y zFTh}{`H=-^aLo6*;jvkCFOHIrO{>c6;IuF~b*>l4J42CsdIA8Sv^isNR&6xPA_$*) zOdGqpDq=>f;-`5;llMGVfoNDF58BCvQM#pDgIScuhDV26WUd^E;2p8{y^W2HX5o(| z>_=80{V3J@#v||QeJ%*!wX50qd*7^HfI%JUGGUcAqlu!MyJ5!(s?jU<@#psl?`O4P zjT8_bo#MxnqnR3?Z8VIwwS{PENmFI%i$HTarL5V`2pTE2%r7qLC&nVajg>h$`G0e{ zTMY_89rq0*!|RwI7dk(Q!B*;I9Ly1X#B67@Xeps!4)V#L%o^)Wsjjw(#p1v86GyqS z_k?^DyLKqK>dx{>1kq;bpf2GnmG12VCa`GM@_oZNUB|g8W2R)AxjUN{|EYRvgnH`< zlIdytb4qq^lny0T&1&tAaO2{zAMtKsdXXbnq@rSb&U)d3czs8RfuZuPAW0FcC#t2a zWnv**`+MyQaTH3L1G%JY?5t=OQXI3e;_Ow^(-%^b*DfEeoLrp0sC%isKDSCBxcprDwT-`W1L3jk(?}V?^iCI!^b~BF+w%Nk) zlkj?<=@G>!`JchWAF6EI>7%xHNAGDBUSH{47_tlzZ`OP9^x`scbuOF?`0JS!= z=WD(m&GVJVkRFN07xoU7vZVF*f!O>n@4_qpc*0Q83E44qTSsSb9nhh3<^xs2>Pkr# zZ=v(v=h8_&oSe{lzFB&NcDyA4c#L9=+h=31iS(q2xHNVe`zkfdFlBTOzRVcd zw)m+;V8&3_1GG6Z8bH#*4(hDS&9TyYpB-N8JCP$iH9BJ#@GtJ{2sIfghLB|cI=h+M zdAu&XfC(?zYQlp=6LM0Dwk^y6XCgp9fHS;bzN7HFln<_Bf!}`&f=e?q8>Li#+IQPR z+h_M7c&+spGi)KT0;8b6>E>;REA|dEINpeZR4jEAVa39JBBFQsI(~IZ7I))j4%leyslXjkOOnmXHnnNHo(gAlG9F;>Nchr* zE&;UK5@|_DzO6QE`$J1%?n?Qd$OD30Pv9;cAK1y`i))osgMe~e*@(sKYkZ8z&wqKo5$fi%+`rL%`(GAl zU=X%Y5G81IPUU;jYbOwB{(s8vd?r4>HP5r&$W&Z>jMn<~6zviEmWVOaA~U5qQ16j) z`H{Imsh2g(L{S2j{zX!#%WM$gO&38F5SG_;vI-vV4^Sk!NOJ>oS&~#hS6Uzy9GTM; zKeW6|lkn-0)IXl6H}skqgYODQymb8qP5h` z1nI`(a9pz-o3W&EFMqAGH6ba0Cica>eDrsM822`VRc6dl-?+Q}H=It(d0)ylQ-#ev z|1q?9@uqJx-23CreQza8$A5ogBfN~LEOGd~1d6@e?`({*nyd%h>~0q4_y_&ijFVYL zH1Mk2ZgCiqoK#`XP`9FwUAru)wBbocE3@gf>8}Bbu4dsuCHVdx4Ge4YF;3Ofv z>tFMKto<&`tkC(Fnawe>u@S1p^rk}LxCdw%NUg&@7`-8)#NW*9-Fu(c3#4GSbgO)? zgvBO;?;ifSm)vATb!1zl#R-|uzRkxO7#i9eWiuOYc1+k$%Ph;*0fP6*Wv1>(14LI3 z)qc_=*E0`V!86(#sH4?X)iEcl?E&dNlWowk3w~%-9YZ7y^1L)UR>$XIAxQ^%PR0gr zB20y0I%zEzUx}%lY9B>G?yuQSLj?342}6YJ<;GLkFhVROBhyhOBuFd<`_S!`J4|yH z>oVy*mF^DHF!JpmCQ(2z z*Riu&VJ#Q9oB|(kJRXacOMgZgxU(AOmGpPBFme2K881oKZq9W1H6n~+EAVs);7v72 z*y?*PeOm_Vs5YL87$Ou|TK^7p9kZpYv9Xwt@eeZS0`vRtLMLw#NG97Ry8Fo~F?o64u&z49l zvCK5Ylg$yuPMPGO#*6basTH)s4cjVXDR#@i=_n+u8jm}py!j=gnc_AvjB}J<^iNqN zU4?TzlMP=_SXe{%QAxY*<-SzEjFZ&%(&lAlmV`5z~+@;b8L94z^~|s%Yw4?8v#A z>!54a&m=1;389_kuv3N>h4HwcKzZtRfBcJA{VDhpqRaYN+Rlk=T_8dE|F5#Ij%w@sx1>s23PlPO zFII}TxKp4&@#4k5xCajoZL#9THBj84xCSdy+=7J!_W%I`1R4mF{@$B6^WK^@Gw+|Q zb=S%{_pZCnxo3YqpS|}-Hevc)Fw4itqDzXu{E1j*vSAg~>=*nI|H=SaDI>TG)ZRfu zL2$Y!R=9flYk3;!+yc+paAm4YjnvW%0so2K@yFM@c`e|=!A*XvZ)!yooOW&IQ#7`F zouUT2eU21{M1<{p?OTbYc?Y&JFIrtc!@H*-37}nQ{!KUgN?CojMAgBhOfCNV*GJG3D0 zG>`~cxM(Lg79Ku9IAG67;2C1rx*&cpw0A(TCtUea=J<#+8 zN-JTWC@L#1l{kA}=fS`P)m!(^B!+oZ&xB+nFCS?B4#IsoJsx>Tr!JR1V}0ZgyO_6w`Q??lxl(clb?rDhT2!x zJi=s_!Z+A9Z)T*YoWg?in&KMy&R|Kn zG+UF+W3d2uyHc`!IX}EwwXC{5anNgaa!Xr#$#%+cczJufi^CX#|MF?Z+rmTrO9=z} z&q|p8={DPK8-|Cs(y-5$>7S}}J2Q3|6R^Z*kB5ya-No%K9Bm)!9vubZ^v{b1W$W{6jC-idDVHRq=moI7?uGOU~hXEM@ioyHw_CaenLm z?VYBkCeObO$<4klT)9xt(H*X?c3a`SuE(*^XlQ7}2>&MkdR&;VvwC9w0w$7gAT#u~ zQ$y0mUuIN(wbdJWYbK+;BQdMe8>n1O`rXVkSofEpx0o`7%{9?iOUn!$(VIQ;VEogx z5+Vs+E56|9Iw!YaRa)HfhU$q^L8hNI2YQ^ZbXN)9L~?)vI|iv9d!fO9j1=iVn-N;< z%$pEqt#~T;jhnn(YNvu(4i7W^Z?Y0i{TLqEpJC)n3xt1Yf_ZO}M)hK;McdorclBM= zoj6STqLzH9R?2wyb?9WbR^Gdcjh2u~%T|5RirmOUkP1Xf_e|FjB>gewreE9JGHC|< zYJLPK+;xP`_4K=?>rbwgWL2sy5mD`!>-XnBt8Q8;YWlhJB>U5%qEYbbLy2u}8ew;D zZ_xfo- z17Nh0We2tH9`}(O7GewTyptIgbAyQkEjfYrd1OU}g%16PlPxm5Lo_xL{`nXPknSx| z6wLbUsG2a)1IBz64txHl)g>_}9p*FrI9p`bp#H1ceRX3q=+ex5J!qvYF-(8EG0QCn zvVB`v@_@n{vJUzpgOD~oP8UFYzg}F+Lc5$F%HJenry5N|s+@RsUM73K-CS@qc4zSc zblhE`e8{yJholf$SeyS*0bCi_L#@^0KWmaYlMS1}IVHaY2GQYqwA7Y`HYfzrp6Fej zWvz-2)m^13hwa#<_M~^XJX#V@WY@eP(&O{HV0S za_)LM=RtpU4Oe7^ozYX|48bb(o z`+rTjZ8LK8YZi&lJy{N&ca!w-)5;xhGDYpEMaBoO3fOER1{vi_t2_tpXvk@{A|?qP zL*mrR#kgN3O>FTlQ_<0OdQ^FLjY{;7a<|X9MEUx=yK-j{l2;fumVXb`|E|0bDK&J9 zZk$atLJPYrU$6Geg{RICme0}JB>T`Y7CiZLiI?fsu-wA4yNwbSrd7>l^bkUmm}a<_3<-zU2w3lt`)9BGXiBqPOeD8aZq%f#(^KxC%B>$ zDRGEdNK;jEP;eEzywcnsef0RK8Wjql{JetKH(o<#zjxm+{>9E3(>&r^?$I_+ma@od%dHRU1i|u zQ1iEuEr+bf<9~9U0wiBuE|;ZqR&c{FD1Ug&aHkEv9QucE=gmy_1n@|xra&rbfN1Bt zddl&0m&)Twj?mEli3C~-1O#McNG?vdvMxPf8L255X}&BtQ9$WWnAHhPLRQV}yeAh2 z5oJVj#I7D1g>rbB2z1QD(?xxgh(eu+L`Bpjt&a{A)#hE`KZn{ttxV3hr{0ALKrrha z%h<8<e?ZAs{^06%MCvYL(IE=-;F}(n$y+!io)nzI4$ua>w5N2Ic zvK~btPDsZ;Z9cnPV!>GRGA%Rlhl8Atum(AY?ubo;vst^gewX!!)L;ec$yi^@W~D3+ zB+C7X1n@q7>)6yx$|{pqPXPCnuhr5`^HlagWs4KbCUHL@wG@9 z4dxjk;S!C`$k={*wHDbs)%lKA-Lm`PRpC{S7RLG2%<9}xFrlyF-sl?ayTgss&$Y7L zU|+_O4Zxr?Ls!r2*nsVgdPQ7D^UA476CCGG@(RL&-ePW))q~j<1?XzdT>X`iTA6(QB@{gg*{hrW; z9M;&U!V9LtEn?2!BNqg*#$D_Si+1P)gnlH)zr<4KF2{GMSQ3#l%#w)3%K7z#|By+^ zj5>UH^#<84<@yVhrTM6+l;lhFBPM?F-2VK;Z(}wOVUt24=Fv5Sb^c4V9Mh~_AJ|l` zu4+0gRUnksDhW+Z%KWW!BsR9&JkZ<8ifsb2kuQ9Jkn`wmMffNjQle*Q!(-ZcwNBIV z;h$xqnuT}SSz)XtZo*W2+ zGC7cF?P%t1r>c-chMKdv$j0=Zc*mCJ8M|fQ8}|ouUrf+sRUAlBv!R#3tpi zJk+>+cm&kjITr;}1+_ILJ}h=daDJ<(QR|j)Yt{=Jj zp4F{dHvcioSHMb%+t6=BKjTm3BrTlQCtl)cl-}avd>b{cIpn;f7MtysJg7^FZha?1u|1;llprH5 ztHQT%vNTz_3X-(@`w2>nXx?cH9-CHUs`e-b7H|qZl@Wx{`t{ckG|U>d`bR`szD(lf zE3S#lz3o*lz+AXFbxyhX*%+m{kYhd9)o+$TQllI0MOy6RhB_>!Tbf(Xa->Tw!n3pX zpE1x%nLCNo(Ded!>l}>=ciWO#l7#TZA@fJ(<=pAb_G87d2*74ykh2sa8Q!fKv3QpZ zJDNcVHZ$vYZ=~5}WUeagUrMW(Rx6#$pT3reQE&9W)4a+r#Wv?b^&qc(?D}|Ywuwmu z`jFO-W|4}75z?+=H*HrCHm?RoWbf?>H5uN^)vn#xj@|1xG2nJrCE`ob zgsjx#hm3*!h^_lmLh_~jjv}a_k{k-}ysVItc8_0-7=ROP&gDg*ETb4HWf&=$=^$I% z;o{DGWkN)R;ugm}dbnxk^IH!7dyUy7z{3H(j@nR^zr=vAm-FJ!tIU#fSNcY6asZ{9 zl%S9K&E)qX(4O`Wy=bCv#a1D}+^m}q<~u5tTL%FL7b}>y$M1ml7)}Ttp1r+c?i^FY zc00dSB~?Bw_%-^Wv+W15hJ|ija&k-?+;5C_LC|R#l1dbG)e8+-qG5t)al@;JIbR>4 zve0_~&cmqi2Sp{tLI+Ssh1_blHT{(PyeFqT8ZPlNjx16_*Ofw+dkGC7dLEX-GW$`= zp$o2EMQ@)?Xc9Zaa%W&x!%p|+E1l-0DrnLa47vLpCr2%AF65+ieCuo8o#>oI%?$C; z+MTwZDgH>_X?QtPNv86H|w5<>bF z|DCC4jl`$v@Uy;I*=yzf1DKw!e@iRcR0OzG*E*;X=P=znHU>7?fC{go6jqz>;Ig}2 z8L;MBOoG2)25dtA)X2{am8Xa%XH!qj0VVfDXj-mw6dzIf?-~mh-%pYbO4P2YUi(ZR zNR;zqSrp@Z_+qMGIv7EhmEP`@@p=OTT!ngX-22u) zGsnvZ#A)e$tU=ztO|ZV<*1rs5!&||}J%jXc>EzVy{Dbk^M(-UrO1-`)wp<5acl~X?v6%oqOeb1pD%&)Szs&&>>tvydcn}hptCyNO&Up z$sr9j=0;jfq)bLbScKiLFX{nXQQV7Jqt|+K2`PIXq|EktH>>gbHJ4I?g6A0W3QqcL zypJTm$8GxquS0jv)3Bi((!mEbcVxFxpY2qewga4Z9AwEk`n^6_G30$R;3cF*CuV)D zroGl9{5;qzxD;IFg_v`@@b|^zP=A#~C*k7?ZLp8ys9wAad)75Ufk)4}hnLZrmMnSe z@=W)+m4zZHT(9)5#A7QqJc;21N2^w73cIK8yVR8#TLq2jPC#U*hN~czrVeX@CLa3~wB% zGOni7D+iPsu8g)cJhChXF)%VFUJ@|V9GUBxs*qktPM4`gPkYc~n)y}8b}EUZf)k?X z(59Y{H756D`gL_)(cT_3$gQjj=O+nG<*Sz2R2HHZHZP@a zc*TPHMW`M;F~ZWt*=O zHT+H1fNkO|A+oLZMZMQ_Jk4#W(4q2@>A{8}ZuK8jdHc{ol@serCt9JS+E zEZ90=&>#Q27??ynGYugeVhAO~TD4xCPJsO$j^#&Lf8R9sP3#k+sym56I^Q?l%_H>b^85$en~ z)e9NF(_VF!ps!=I&cO5PsuRrNEK4co;Ha8as4C{LTH%JjORpjSa7$`0M=W<`1 zbxAMjpy6RqtmUgppkAG(ri;L-9XXiQNO_unIKyp2N(89Tg>JBXUQ42M_O038+=}gV z@>frkq$}4x%%cYu!p1-%|PM)3~{}ZD_SEXg{Bnuf=deg!9CvALc#-jDhZ#7#nC?9ldD$IS^Oeb`3QnRa3Vxy6!&aE!n(-as%b`#^^6NXQQ2J8A&hP6GK%pMyU z;NBd&KwOvS0r8YD%&mnKUZsAai8XX*Oyjl9X_{jx^lv>&ac=t_*ONG6N!{jEaM+I? z$C)5kj97(1l(v+O%3(xyLE7#^{WZ*v^^a<zgyhv z>Lyye!Xrbl8i``LJHSS0wW_#A6@75ZiLI*^N2J1QczbN{GNgP8+GtIg`vOy2FIarj!$%QBl*l}Y>!H*I?x}7MX{r%?CxGOBX8476ITZIO)8B>U1_6td`JB4BJwS!cM$AJnL<}5 zo(0=%uN32BGr<@UxrHURTvFetuTmJSzBUyd5ADhM4{RDwmE&wi?tEXN!RBwB@W;<{ zsPR5ykpU-(kWQBip^QuK%3y|6YZDU_5C|0J7j}g-uM;CMSJKZFcu!}IKgJt_ZM40R zj7X8A-iaTHvFFg?+&o2_*p$y~gV}X*!#M>d^Q$RNns+{?_>O6;vNI6jnZD-Kt4cWA zBZIx}UU2}U6X(0`4Z7iWAkPkOchovJdYIp=tOD?Uq*3RbE|%zVn)IJanGU@*PDrj8 zTiIv<;2-WZOcw|0qhj+>fU}Q}SL4S(ju&M*i%no+vlO2(jrD)KOP6g+>gEUaHM z&;N8|bMt+3gQ}5T`y|f0Y&GoU@}RI{bYWp(dn{|d$_NccFK>v%0T8nlibi(gaL%*# z*n}1zpK0Lm(yw#uy*H#83PrBTDGs(};D{vSg7ZoTm%kopivFrVy)rFpNU5gu?KOYw z=skQQE}R0NVi)Iq4Q}}9i?V4;yCCt?jw#G!6X%&st5##TzPZ!XzLE5hZAel?(3(G1 zgF3sS3;U*G)Sw#T+NEx@=}er91Edp!T-aBQF0L*~WyW?bS!rqWl?L@f&d>&zmClX9 z_-4DQ-l?2~1etjdNX%=0v7XH&kmC7s5on4o>=q+~$m;@bsb#DRm zx~xyvoVM4sl05Xv`Thua+esZV7=x(XlL;=&U6S1Zx-8dTs}6?Muu7ew$ByF@ymfBs zp5zq?Dvw4;EXKj6m2M}lQ@{5<$=SO_VtaToLjSQfaXumvE~&g`)w2$JnAVTM6uVQB z5)yas-Lv=IDsPM*Rxi?Ob=w%olZzmt5#nNG#1YkOt*x)Fu0WFhb1N$=|GbHz69=BG z_p7Aw9Ky4tLL!MYTm1^3+8qaiG~!r0^#OcPCyJ1S@31PU%}v!cpi4_m4?kSgJ~${= zp4p(e!3z413tkS%)D8INd2{}byGSpo2aoDnMkbta*!^Aa>mM2 z>lNKJW=5BD@PVY5R03{mO|+Y|10USKzu+X4hvj$S1sMWaBaxhLQ z=@qwOgWYg4yJz4Y0-=%??x`};VBPcefhX^woWEFjx@S=V<#low%UAkh%iZ>N-gHUH z*6^`Exz?f_9(rsmM<;CKffc&~;d)+TCbxgAw57T#6gtO;euYVeRAl;iUq>~)zfT*f zG^U(2&1S$bfc`D5x~Z(yWbK)lQ{%pU+(fT{s+UN?Esf`sy2OOzw(35D!1${UZLV<} zcI~-V)tRa@RUcdDnr%~qop^E*t+X!DG1r5FEVR| zzbN!lh|_pfCPS3NPa^+4u;@2GQf+vIHzCk=k~bHRpp+#!)6D|R_hC2V{QdHju7Z_Tv{v;7wzH2Z%4~sV#AYD51fO+iq<7V zR@5S{tB^8nja;cJtuj77zU!MC`<$u24>dYEimOmU2T#n|ihypp!n?Wy6(@sauR_7w zC`)xjv%e?9iZA}gl$Gjex(qlIf)pGn2^2?RH}jYyN}QzTizAmlV;O&itIykSRwmqT zPX8w59F$Hef_*a9x>#%}WevGe=o<(ZB4Eu~X2IYO)KB5(2DM5%x3}4gXB}Snk>lZ+ zdJ2ftHwDyVs7n$@bXiMMuLJhKoUrTb>yG5^)*&n(&U_pl8fpa|QghS9Dzv#;8DI-k z24(q$h0*)770n?@9N>hm^+K;-X*W@T=a|d**Ot#Hwzt%lY?h97?M}wB=+Bp7Cu9Eo zs%akWokGu3Q&K5Z_7@!z7?a=u4?OP=!CDKS135kHIe0dTQ5_WcW zf%gRk1!QDo_Ftcv(7jN|`^dRTn%YQp=7+6d4b^-dMp4l7kELjtah0Ajw?fF&u)P5F zNMBS4MA0ZC@b^*rQ{MgdM^{HTK{_%|CS(bl>9g5TAEIr3c0|v+Dd; z=+nzoVd%3(-=i9C$|D+ad&)_b?ThbGKAVV6-rRhLa%E z`1z!f4n4WAxU%1JO93rTe|{k$V-8m=d{Y@2{)#!KG$zXQu+gxJBAQiLSeTbL9$=r* z^az916TrC+PETtEwz_ii;*=TprdFLGjy}x#fu^Qc`*NKALS7kXGZ!fB2=Dj|+J!mp zK}=QH2?4&3X*oIH)@ogbLTlahi9w!Y(*&<^{R2FoW!>vcZdTpWZ~b=Gkx4pv-xp$R z^s4kwE7=0n)=x5~{?RJerKr~}NKV;%8sBcat&!4dgQI628~;$josQ2{RJQbbYafEE zbxP`?P68tK?L+@G7;qO^d_@KQuME#|{6HNS>Y3|~yk)>L4n^GB;p}L<-2DbPC8@I; z9p^7jPxH5;g1S&wVYqbB=Prui8sfn^p^C9Tyz;jt?>4m4aa`+evo8kC*b-qmKLSDA zN5-en3voN5ik0Y8O2UhN5d0nY$0k-QB&oySsaFcPZ|!gS)#s6!*a&+W+r<-w$(5a&pd| zeX^6Cm6bK&^0HzGusELP2!z= zRv=6TWCTD!YGdJE4In@3Fm~b^jvydko&J76H-8ekfq?YSN(c)myXl^7KzhxK<3ewL zNVacyL?#Q`ySk?IH3qaxeHN&y1}a+!>{{B}wIKhrEl#k-H))yqJM`Rlc@p}Nri~ag z#&3AL{*p0ngqqkcL!Uybl#Q*9ujP})d!qn8^J1#`t~cbgcG#jU#?r_Sib{uqu@bQH z#Kd8UL0;d&g!h|#V001W&C;b%#1%`4?5@#9MFs|$&t8?pC%^GXN0PFwAvIoFT8Cu} zhHTA^6KcM@eog*}hI}18_+b29I5UDTXaD5eoVKMR7lC28YB-mC!~TGiJfKFNP;5`e zVQ*sWFo*YG%3Svd!bCl5$LBk9rpZer5?Ya@yACsNg` z+am95+5KDiIRM4aHfGjI>=hy#P%qwYQ{bC%U0fj!Ife}Pg!1cy!Tr!wBDc@S%?odD zGX}C4_pczu*Di6x?l00M*T9BMe6!bSCr!oM+X8?fkabk!7azd@b*+~+C@KtOzx_L% zjk{n|s_p#g&aPERZi;_cLyee+7&`K9sGMDpcAl{ayLy>P&0O$q;361omuygo?=u?8GZiLfFo<^iEoJPZLSj3`I?5s*yj@xUhu+fG^#- zLH02Vz18jF+?>F#4#}97QRpFFHu*;6Rmic?w_}Q0seAJWo^diOEwQ*8O|{HP$bw&p zgI?!~X*Xb6lSO_7{jGn$pRNT`SINcvYb?ZJ98PFs-Ema236(PXdTwO?@1~$vt5+4v zt%U?umoC0VAVfs?(t^J{9sh@@H0ocQaXHdZ9GH)h0mfeNpqa{C_UC`>8H7IYG7q8j zlU4qAPoW?_my7hxrP^wXeF1Z_y2I1Rj_=#kM0P`g*i_HT2-G4gE4$+br(o8W!NI`X ztg^!ROm8Xs^)LE&3v1N^p2;prTN~N+H!OIf&_f-N_agtBI4lNStbfX zzS-*cC8*YFrkx?od8BHzTtZx_Gf7bV#yfFTGS3#+z!#gw}g}Uaw=h{)>c4|`Jz!?e8|0_1@aYIZ*XLxyykwCV_vmh`i-Q8 z)f#Ha{xq18u!^)Hp}EV~yM@Kvub$A*?j3-b$I}5m>%#q_AP(s5Rltj9SFwsfm%`i| zM#iP?oLV$7@BTh^WG*kX>`KoqFgF;@VDctWvC$@)8q#B_e!t{saF;REL)f^D{DLEs z(Viz(y=lhggPwsCtUHmO8+>G#SMd?evt0X=1LMpcDoF2n_ir2p-w|}XeWEit9AWof z5f|8vf|WOY)u|M zu&WfO!0{d}h@oGS1%0+;`&ubfEbRrXxW_*lKLePVG2*;=qbO;=Ud$TZs%5p@p$JXf zIa|r>nuegpeAypdyMtQ2xn9Bbil$eUdCGioLaBBUi_OMy(I;88lX|;e@IgL$ z<0tgI>m^Vn5Zux>>QM1rjlr6eR&rQkx~a0A-pO`N70c)91hCRZi#BMvKSBc!w;Jea zw%@WWmC*7haQRt6v(6bYaZp6`B6hqnh+!hlK65P-dVS9%dT&j`^9m*=l6R2hzKtr8 z;vh9U2`?D9`MG%z!;CV znU!9C=i*#Elr;;s>RpQUw*bUFn)#61>^_Od+1 zhjEQ>s8+1fZr6nvZSomniO?cfHs8odnTLbbb}K3sDsZ|h9%rn{R$$VjAjsUJv53B6 zv8tV(I$;O~X)80tC@@~I&3a29ZVVoa?UJ^*)fD3m4Ck$h9Q~PlBC_%vRC<}0@NJy|2>p83E zsdTr4uwH8r+UT^kcYlJ3a+PW8SRDifHbAFO-Uc;PR)QD9(*#fq3DvH}L9vYgiy~;3 zRvd%2K;*3kLsdSy*NRJ(S~c-A9XBLb5sGN**9qJs@BkM;lMSFYFI-||#QbyR_&u}P z>DkSGKYaAoz3VxxUV*+B~yXj)}~=NF3U%3d!7W6XxP_=v6G6GE0932q0p$wc4wZA7%RxM_mDuI zI!Co50i#`!EW)S?0B+!S+Ot?wsT-Gu=WF73Bv%7=6$;{GWFo_(P{4>|HCy94FQ_ZF zS_oudjm3v4WVIru{+y*IJG2tx`B zkBmBlbj2-XX?Gd|J5s82t3L-oZws3Sx>($a`c*y-$r&P}qSH2&WRxe3xV-+b8VW1z zSIf5NC^wipj4n-vva>9eZ1R%+zGixoE^tKCwD)$Z#y#xCk!V#-{h|EY z&1)~)^+jL^XSUI;lt}(d%`>u*FC~gX<%T`yZl1;YGmaPUFB$ z)NCyp)Z%QeNpUPoxi0QumG(ExH3j0cz;Cm^)HP`%<$NnUew|bKESFej z=5t5r!-VJ0?;5Yh13$E|+-G?lm=MQ*u-$^VwCq*yG=k7%HC*eu=0_XLKzPcs)<4${ ztIU9Gt2Zi0bFxC4JPFV?KWStBj5tN#7Lfj2|d?&}+U( zq$J0d%i$mJVW8zKnX?74iT7Hg9G+Do<34H?8TrxL_OSI(Q>p}iH|!T7xnws zn=P}GY070Iv(UZUb_tHZ0Q4zskZwKshUi=-6~%%HdsgdxHK*q9cnf+}let=bIM=fC zqAkzL1pDhzP@G=ahq+lq;J*s;jpg-*0a_u--6fYAJ!1-686#lPZ(f5rRcJ^PZA}$H!f4_-z|DP{{uM<{93V*F2|B4t6 z4i)<6Vw`f&MS|$Ri_dm=|Mw8e{}rO60{-`o^J1b){~6+Sfh0G38i1n=FfO|-nRajx(mVX@7aFB zV;`?{{FEY}ul{O-_hz?^*~$%G#5La6NiVxRygu|YjlTg`$;=@Ei>_}&L8^ENOlMGc ze9cOH#!Wmt<3q0qa50>rVSu9#OntefNP=ZfcaT~a)rN2?7cEf#sGOZI{9Or>Mux`0 zBL{Q)#)DmGa_dVhC@b!jZlv_t3vs?7(y}F7zTw`dk01w7xp9?=@l`}sygb>+$H2|L z;i`=p>v=4oq=p_)GOh1+C|4|&AocM`1p`F4-~Xj&EI}8GGncL7!;36QvPXocZ@G4F zy4jX63Y$xBR7R5eMJm=arKGQZm(Wo4>*P3gxQ*45Ba${6lNVjy#xVLW`|bOkY6Uxx zUlKIqXTwktlHx8?d>&yDgQfQJ5|V4jlDN74W~##RVkhq8)?SQs{x;p-gvBYJ#wf&+~8Vb^k!#E>FJeoarv6Lo5(>*G(BrQ<&aM{hMkNf>u> z!R{T_^?-mK!0U4%_L1}oQ#KrPUAqj8I$_lJPKmI)Xu=*&jD$4gxt6D7Y7(=&v*Hz& z46XyQAsNps+BY4isVHR7e+j{lL#H5*%BVk}?m+gVPP0;IwIgexX{Fr1HHO6~eA0>F z1jpY?Hpv^KwSF4y{5fzHN$f=*w9G6wW`wblaara>i`V*Qm5b zF3fQXWEWsi*O?A1g5ndE^Gf_kc(M1UZ$9EqHF5w z0~;F~6K|buS>5u4o8P}I)&?;mu z*e#h#lG4>5Bx1@6xD3+>J)?7uPd1^{1!VLNWa?j6!bcK19H;3~PQooCY78!h?HcwD z)o7?=Ut%FPQumMOdGseM@GoCnFML-R@*oMtpZFbPq4B!h@DX16@8wCSj}7zYge88{1w-QndIpbQ-)HH&J9M(s zPg7 zFwCbnnECfiuJ}!`7$Wujo6E0s--gt{8jQayh#~kS-FxvBo}{Gj));;8UB7|6kM?|j zr2Cuf!9<^(k1l8I=2h8icZg5Gidx|2_TG8V@gX2W>UjWqsL2!~jC8CnfdYLy6VSZh zC8?7qN|e(@>52pNQ?8Mg8#ht()R@GGo~Z;hGvOR@@*Lih#is_Jl1)@I3J!x#!&e7B zlJw`&A1))xeJ=p{Y4y|fQtpXod=REytb6-uO2>@3NO~KXz@9qgIfGPQOVDCz8A8 zaV4fS5EYEqo=;=mm`=u-adLm7OZOhh3u)f%r*^b@%%j&K+(`bl%QOGGhYJ^NWUzrd?5`4PW@ z&6dN1&eV-e`O4Q~3uyqn+g3h&B-YV>M*-BiM3zJ;ZajKS+`NU9uvf zdwi2e$~uo60dlqXWQEd=U^KERO=Go;_fNN0)Mh)$Oi{i$e}cLqj~{Ar%s{KVGm7iP zd(}0<%Fo}S0an^$w)yN(U2IfzILn|cT-3<7>Mg2eZqNqQuCd`g;V8$RJz$QjVZFAJ zq#B`_dO44~?Dcs<54fo=?GC%TSp4cI3q(QyFq@76asTUz7?-}XLiQ7duQNpMxCB8@Sp z6mL5q68Mre{N^=up{%=U!-O{?__3-&s(v3kJv<0|A14~EF#bcYgl}1YsC7f}&(L=bu@Hx2W~Y|Kzbuar?|V47 zQ`;@q%!%wj&_=s=!uuZ@i}Hs)FW2Ly?+|G#Gx)d?M~qUjZAaQgsk=%s>Wot+q;7dLto6OR?e2ETN^U4SJ6%HtIQcnBLUKyNfSh z=Jkz3UDO}x!LTch7_7v(#@C#YPONBhl~?$!y#f_<+VW42SLn;|)xFV5|MvC%mQ>a2 zWHvMJHX{?0&?kq>U@`xLSU!WpvDhvm;ZkHT)GK}J@%~;U7#2O~Mi0W`6Ka@W>JRhF z!DG>bWP^up$6(adKp5K62|j<7F-YNndqqMDsFbo?URF1VUBW=4)WKYIXEfwb$`n`Y zVvSnlU?{M3ruH_5dI?jiaioM4+3c{3=zt?{kB~RE171g-`^3Afy%FI8k?UBSiB7$s zX_>N(9s|FaQ~vEW@qkO8o;Jnb{gqnHcK3f&*4tf?moQryQrCQpfRCp(q2Wh>8L4gzMzq#5bf&=( zbRzW43Solv-e{_j_IF#rL!}+hgi=n7*kfGX4jl?P$ITXke zST>}-<8hdF$4UO%i-oc8xk8zHbP^0iVq)gEjUNCiVlpd^q)D=%%Jp#Hppq zBMc|K=&03eKy+`9a!Vsj9D6K3%+P4E;S`7krUgRs)BM(ij>V7UB`vZgwoUIa8IX zl#?Csr%tBqjgf~V%|~elg@y`^fl+u<=bDIYy#MfL$O`EhCFU6iSKR@LM8VlN8DkN@ zW$?Pf95Q3BdvY>UEJB;?Tr`@gLsxIKAZ=T!f=p8!!`KbXX-`15mNLzNj`D@`HBRi*<=+C1_>+95nkfk+XKceRFjAd zS`fc9BcLacut=E^SX$5TD4ouTFh@2ua8bo! z|HiNdjv28-BARcTla0l46sNAb9m()HOV>&j+%Qm>4#nuOhEm?kave0pyf$$k5FlI{*xP#$ry%$|5N^31$d*?^^W4 z-fuzIOUtRw9{eoF`N|B-+S*O0Zlwjlu+0&c{B8V0rKgVsi_L{OUv1j}PloLU>&%vgaXc6)z05YCq7YetUDDfq; zD4Knp!2r!TDIHvZH;zLs#Cx&gYGV$)Zd@n$#OnvGQq9L^CLs4jE4agkmXSI25qX92 zheClP?)D6A!>tFAG#nozc6m;5faCPPWDNR}n}nd-;E%i21p3XWLDA+0=viRB)`Z}C zxry#k>2NR_{7KXH4GlpbP32%_bIKQrqvW|x+%+73fWO~S`hx3OT3S*ZorZioq42tr zTsf%Ae&PVvSLPqA`zS3F14WtNxwYXmdTX(`+Q1vMnO$VH!iv`j^{cqHBC$i>G7$Gh z=1{Sku6SB%imX2N`zK5Z6}VHD#~N!ySSwg>`PTrdalg+QZ0&rh?+>QeB~q!6b!Onl zXd^a~RnsW9_d?-P)z+Yc;NaY`V;QCgctT8kh`@L)G^L2b|AxEzW{h-* zkP#5}CZuj>jC8ptW-xsM3c00~1n!^GY~*k$DoD>`czPg1ceT9}=q-WBdhamP~!wn<1V^O9f@tp{UW5Jb_{4us;mcbM0`4X$gBAjXatK zEdq1d$)g2%At_Vv`%Ch8kx!aQKb^?(g6z>fAARH(3=jqJ4Pd8;fu@)0z;F?%$Ch7q zck)2tKZi9PoEOcjrIJE8SVF@GbNbp#r!iq>YZ=v=zH!2z%VSL69J%vtYp#YYd!I3~ z_mPdCtwQT$ECTeVoKqP*2{5QrV+Epd`IGytCBfbbQ6xf(O=haYOA=Qhb6okEpqsD~ z2rqCDIEgIbw$EKEjON@;ZSYV-v=*HN1XM&D^wRI>0{-$(zaUnSxG^HUx*sN(^3S5G zw{(pbS3aGN28ce|zV`TCR(iCE9%Ju)aN8;i0^{>iPi`?gG{fcG%<5h#k?|*Cwep<_ zsA?o_s$*!d}lRTsJgQW;Q%JnRBR;Gr#(7U(Mvu zMDQ_{MF%nXP1TER|0X@&|F)>-y>F7IeKDC3v=dR~9z^_i+3k{PdEg>lDtt>Rx=U|h zk4eb>wqJm#Cb}<}HXd%PGUL)t$NB=?+aLET%}(HJ1%8n49*Y-d7$Hnt&nP1PvtR-k z?L;f|t|mm7b;I}asx?UAiyMSrsn`5QPl|6}}!|NIALgG>J-{1)OzD8&BQ7ozT+=z)omh25Cw-Mzp5`V=ukP8lv{bY(S<>uwpy?4%Q?MuD4 zXM16PNoQy6iap|Dv^Dv`tIQx~>b|$Aq}Rz%(_G5X#AOemp6RAyoTv{}8`-&@kfQ^9 zn>S9lnr|iGX5sW2xQ@fkTZia+p(FCf#~sWlhH)>tcZeEvZTgbZTUi9X&Rq<9vH_jb z=UK|7O6WeJSUppy0B*%g_+7fa!J0Ci#WJFDi5JFP0bZ2V7BM#2X4!*6eH4|4rwIl6 z(N<`#nC42G&Sa1m_0PHoDePd$%eEtv{P2Trtvr@bM;AVqEqT?^cD|3<;2-4lpcJ#2 z2AF3W&L7fyI?L=R`0dU^n_LDp3U%q|J=we>>XIH!sx|)-R-Ql`CqJ~$iG_%@0 z5$*}Sd|J9_F)WtvhNrWb(Vm_X?z?R)2Ip>M5Gj)C8s*E=7`$4nx7dIO2cxy-y{IDf z4vU1;q0~iu7gGuX=+NB0o+rU)`Fu{2po5F-HH2FiUgY9iO!_ml2S?nqP8ULso5H}y zW0x!KhZ5#2TeV&5PoWM}`d*Ka@3=;t=%~rL27BOJwSeVPu^EROwpaCqgi8i*N=zii z#D+a7g!*zh!!xaf`oqyU9^<#}9mwpuYoybX0i?F^ap!@hrlj<$W_0ay&P-JTo&sjiq zUx5Y*Yi#_%aTog{pRdgK&W-oUF58erCAPegmiyF2_V&0eH*5j3k)~G5oE1e*e_)$^ zUu&+u^qpP8D*kA(*>dfYPQApQYvOkPx8hrDL-Iux}ugyz{nW zzic0v^G-Qq`8b1lDHX1F6#giI>=|njO@L2M;^-kpA&1tC2c)+#K6o8=fsbO>yHel+)4HdgR&r-2K6cae*JwY0yaT zk@`##eTM`N2?mEk*mrex-909CKVEJ*qM)Fx^O<;LF|Ut8D+<5#A_g|L zx$?qSsg2ExiDLlZ+sjmIelm9OHIOvsGy|xb~TVB-31I4Tl{*X@2=pR#|;%}BD8Gx1g9U<_X zy&;a3MI#}j*VnzVqrDi5r`mGu?7D(r?s&c-L9h!LzUL+Rs`37@^%5EU)^w$+FG_Qi zku@JI+S$?*EA+n>UP9yarl~t?yx$18cS4kD#_{FqE@H38eCrwxOr3Gq%YhGM?91I9 z4LNN)8>ZIl`-G(n4+CS=hC&IP*2|*;5XUf01zCKe_J(bR7 zns!gF*Va0>9>{TA@IMN!-$i@Pbr?U)F=#7rBmR(=#3pX z+fWwn#g0tHqy)ZE*^9hbV+=rv}{K|IIKOt^^sWvnj~H}X5nh^RyIuJ)D|%KpPU|^=^X_TSLan?KZYY%%RD^& ze9w(}43~Nl(c&Vn*DYR~yomI04XvewQjPNE8>yD2f`3}FDWUOS|1DsG+DVtzH7Uih zk37hgQiHKrZuQd+)Jt?9g;r_L{WW!XKh^8ynWed2Dt=0LFFdxE#g@aycPU_t+eYvk zGeF);Z+$WgSC`@GvFw(R_3r}wBMRgUBOcp2m`_bHRF3^saUG=p0KWsjPL~9Uz!P^b~^I76HA7ADn03f+7rM2`D)U0Ckd(0T0m|iwo+?C zN&X9X)^)U_Dwu^7U^lA{D>A1S`VQ1R<86kvOzG-*7Pn+JP!P&Iz-=;CLV)4tY-Rk>XIzR zeEy5->ni%iREWnh!Y-4!O!L%>R!WV>g@vjww1MV~17vS)U0QuRad*H}c#?+^^YyKq z`VvyTSQg-ZWNzB_4UJgNm>&a^ZGT71vPo=QZ>`qh)I=IvK{S;!_a}Q5KcZuvE=R@L z+49xb%|t6mpV*(&anSW@5B=lcPZtO1d{3U|au&>mC-LmhWpZbZQBX%>MZO_erjX)} zr7__L2>H>x#17a7nqtb{1Ph=1@#mr<00({0V6gGd0Xm=8&Z6S4EeQKF7foLhZ5^2e zv4&eeXD*O4sY$KrMZeNU2QjLeGYa8mIT3=DEb*&0;8Z*)2j&6cf8>(@37KGClm;F% zZ`P=))THBT_|Rr~V@*t+@2#lz?Hq9{1}(c^xs^3>a4ud%6KUrI^I=pAuv?Rf}Ss9(;BYqxmgDri6x z@$fM)Oa4He+E0xd{)PUjyUOVtZuG_hd@INcj|f=}L02{rO}1*JcfH_V zkJ_Ie$99{tzrxn|x=?n9@#kyD)!=xPkiAV7=Blzwh^)3WcUH^?A1#xSV3q>j`m)+X z*$k{QA4d4kq;$dSV!oTA-{eW?2P1JPy=T!X`WdLTv4u)5K6E`M!{E?T=mCX~)=7#` zo!(IUquDi4*^mR~Igz$00UyTm^?rg;hIOe{Il1j)d6A2QOSWVK-I=;xByw@|d^dL? z18*>?PD^0kw-FjJg{N`=-Cjylk$u^cAvivU)7}F0EAo27J=UanB-i@hMLBMKYM{kN ze#cqD^DXE7>eSj8Z$v?U?x7KAYA@DfZ-4Sc^K_c^T#I$Ccehw7Ssj0v6TC9*7WD8Y zQx}g86KJca6(pt;zQ53E4RRkWtLuNauvz7t@?b zrjA8@Eo7=r$Z&o-0 z?x`Ty9cTucN~a37Q9oDeEj}AhX0_zOpbV_+ZtM(z%;3ic+)JTE^ZMrr1@Ftze1_i4vvmgn>PCzN} zrgnE%-e@OT$`-JoB^|D>caoToKnRvD$xc?Tf{&!dWl6!e!(!tR zHL~31J!L;vFLES&8QEdHH3r~du1+V|alMR8D7>E&4kD)xMeXkL*;Flv!N=4<)fF4* ztb%!Jv*otuH~2}Msdw~2J^q#O!5(IL zvI&c7PB!vmhd*4jFE8Z;`8WF3caQT9KjHz0JjYNMtcE`j$rCogfCJ5Z*ZZn3NRfh- zkO}l{X1rEisi5WDn+3v=v}WpK;MKb4g1;%xcV-6R`i`P7|9suQ4J}Y7|n6hBfo|m^zs~1 z8wsSvFE<>`qckl#vfj<+g)%q{jH9@W~X7>bHxX<);GJ~xr z*CdB-2lDB;0v(qvj=#NGwh?3t1^uXQll5%~ZR1OK#*;3t0BtBm33| z2P7a#v1MdhwSFV-i<2RGPj@VnvWT^UE#SLZ?O}Cc^V-(>V{5rnut1*Jw&}~y z{#B*awR)FVR$D`d->R>t#Y!?!YnK6Ek;ufWXSmL!v;Yj$U7`bzQ1M`wx-Ypy{Bj9R z1adz+VbiSI55EMH2Jn&1<9=wOKFIh`+rx$Vp6hBJ!FD&>?xwswoqAcHB3-}qr_h)> zg_oCZHe!Y}WrIZX(#ji3$BY=9rNTdWXY^Zg=gDk2uFu=@K^tKaNN>0L2)KChV7pn_epP}sgQtH34% zWNZ?=-`Bugsw>2okk)6S{CvY{!#hUiDWe$rXt%3tAjmmj9w*g=7v+?SZ^*xt@mPK( zxN}*03-4FT1}j>C z;^N{`(j>Au*@=+@ z`#6yO#zkMP{Syyfsjrt90q@Le=lJ-?U1m6sc^NQI+Tc?%={YpJyw*!>t@$H(PQrn` z&>mTK=GtnGE6-LIJEr6$hR5>}z_i2!ukDR0OKn%*SnID@6co&okwY`)zfkgXOfkK@ zD4WNVeO043BHA{U3lk4lv-T#rDMqh>CMyu1>SOEJnuJ0>50I*QVdv^RQ0BUYIPIs8 zX2!@K&ZgxFkGmj>^Pw=Z@Fpi=eJ-Jkvh@Dr{706<>$%Th7x_o`J5M#qFAvhSgh6Qb zB@E^v!MmY&d*|9}Uk+g6M)0cdLT^B>;+IxujL6va;0b@#R8wAzKIc7pQ6>m-=%0R4 zJ07JPjhu+xk^F~Rm^Hja$idWL@f*eLRggSFR_gH7TbF*7rxbQ{tbi#x9O~ zJ$`Zp^Rks~FLvF#d0V64u$+TxX)&1Xcy7)XNdj(-h+zp}~&s~4Mu7|RcN%?hQn5=t!*B15q zApw4c>65uN_yP|*KxmY*J31?o+Hi-V8dV(_W|nnzN~m=-?)JD1H9o(K1T{`wp-=W& ztV_3k(R=wWbj+tMycA=-bI6Gylq}bCJPJGRrty_3nN}3iMAEO)184=3Ppo^Cbx0L zzj2-74L%hzDCKiR-?anZvm*1BYVO4odSNgpb3zt7kTuou2IB90bBQovz@hD+XwU{Y zbDfV}8gyKAS`g0{7vodg-az%|drR4fbQ)uZ@t&X@m#hP(Ch<$-i1BRs((^nYMSDu% zTJ({96>N%B`TPEiFSl%^SVw*dO#blZ`pbF_cMq!()=Wa{q>XyyYM^KZL4@#^FYPH6 z(g3#fgqxr5>F=Dez0|kx51(*)8-qyjq+0UL1>lr(ykJmoH$?UZqiY{S`1Yy&D7EsK zIh`*S?Jz#}?~>zq;+o z6DifT%5s-Pg^c37XIM!~UMK``-t7GT629GI%9qva0fCt1OJ4R1ZIGL$mUBxAq9IbktLlP4}sM;K6?DKq4hf%l-cy;-XjhFR|!V0+oE zJA@Ranyf4ML!sf%y|Cb>a^x@lC8F~%=pE}|@ zI*RA)vGDi54dQ>kL730~CwD0GI{!~Vv7aMU@*ky)o#xi|@2oVakjx7c=TrYPGnkQw z^?oEK&4nJs`Hy?<`o2ys^BaVE9LOgNRJuW0`_89wr1Kuv*cSd^x!HGQ1MxEx zMzFRQi5T|=c`DFJk>VeD9dDP@pyuy@*HYOZ-!6I9UDRJ63ky5%lkb#})BCbduAQy| zvi?iZjf0vTK)w&!Tm+$+Tqkys{b=`~(xCi|`+8xd+CrEjjDP&7K7%7m=XIEz*KJOnOh>8~iY(1Tjsa{}6&nw@Jr zfSFg_6N3nPt6lWHYm(~?87tSMSHmE2%n($FI+Uil&;FtjE796I4Mxe+RA`}AF6d5; zM*~5l7;sfT;@3c&BTuUJvm=S@jfT>4cy9HRv#ZXIhKD986lTO@0!fynKpFbq8E@|< z3QAW-kj=JnIfDjyVzXAV~@Oh z*l}2o+-?)v3;e^rnByKnb$XO9RH6{}tJqTxKTzKYS=7la)ZLR%qBT5Ag9T2f-K97E z_A=P%ZjP^ZyGMsxgAe*#Y!c<>B3nDa+}>kf9gJuDO#J$Nx*HF zAR`K#6mFqo+*cn=hB8aFsPt}_JULnYr#$Fci0$`xQgzqElAzANvsg~R8@_wESc^Ky zo>`0olLcNB5kI91bhhrtvL?)O1~KJ4$Ro|JdkZAOtWn?oa;vE zh?(L^9I(cV0*iv$)|tnT!e@dK2!+z`b;DrS(5!_8ZXcmT;n(y|i*g_n{1$kzSzs_& zM;;zmsj1+BYFC>Wd=Rqq(~h>Yo%=SvQV;Dm{wUlj=fE2*7_yGvw0)PJrtZ9o)Y1qk ze>gQ^?ALr#Pag}wTsDoG3(BS|@TMhV zz_yO$0l*oB&z3S^aL$msM2+EA=lrX5r4&38L9F>tK+Nfu!NmIY)#e9m->GM=DS`wDXQ6v=}zgp6!KwR$K>afjK;y=GEBrKQtkc$>SB6=b8t_=OCdcWKJPdL6v?pdUd2xrbhIn z9B_9$^z3uAq<*N-3(dnHt>Zt#Z6*nSIx7Kt(yY0^?bS4Y8*(}eb&%lEkE702O zXqvCG6cvs(OU0~FrX!ul!H}RO$uTG`4PIk5b?-P#yEJP}G4-%>jSvpE1amN9uBMEt z4bAZ@7=79}WWpm4=oVeW&&#jyP6qA|E7zOj@CGOh^6JaGb9tbK8Y#5u4u1;dLuEK~ zf3fg&!=F~R@9pkO@^6!4@kKP>enDK0#xNf^VN8P^(hU-F zH)YFZ7#mxXoD0|eUJ(=ge9^)zqDlUH!b>Ly%pXG+X=cMBYkm;yYALdt3~QktWYm)u zW$@o14*cjSqql=o`>tn%1+SS$Qs6VAK2KE1bbL_57&B&?CV}5Wv8JEF}0pDaJXh0Rv5%bFFO>zI!Bsrr5&tg zP|?U$B*3k!21p{23tK#8W0KAmdWUvsi0+QGd(%6_4`&rK+lX}-6Atqp{_XBfYBwaBZ~0G+Tv)&*~tOydHz4v-YP22uIthc?iQeM2qCz; zOV9*&x5C{mxVt8}yCgV8;jY2m-Q8XPdfxYY`akIIvp%bn8sol4?b>_IwdTCGoiCtZ z5)tD0)YS278yKF6`XuOd+e*J;7W9s5u51EB_F2IUMSvhvZ0PYB8vRDBh{W{L##o0| zN;Mm9g5QYOBw-4+v{N6pE}EFGDES~8vLu1UmCG5m*&rS(B7{`>*NLHHKq+ zyYuyMycYO8rG}*HdVqpbdKm-I*g8sLmC*PiJ7uBq2@`$2En3RCS(Hh`@F)P$&<kS}(5 z)|2AyfX4CpEhRUYm;GZ(CZEbbn(m95v}1fRxVGzP@^oVfgb@4eIQV#n9L;;(Z7~5u zPzyz7AY$gU2^M7lU9cU+^}eFeyUl=3;|paQpU?i4VGdfN@}% z5rxHJh@hNU4-)F+J23i;WxW$Gqz9k+=+pbheSe}}#VfP6GAf^|D|}aZyu>c)Bzc1i zSL#|6e9*iL6N&aC_(&ytb7z?5gd{5i&SJ6Xr*K@|fTV@I?+^YcbK)?kDIVZ&d4&BI zN$G#e@-msoAW-=XzU{_jegURm^%Zu8D$Owwh z+Ck`cF*V+=10(A?fas!jwlFI;i z?Z>8W0gQCX>?ilON*YVDfIt|xyo_6>nLqPrN@>&3V@XQCt(;YrCBLSW5sRiZA2hG!I9bI#sfj9QKI|KfcbkY0-OjP1#p3F(31s^V~0Z|D{lXP z1=KHZ65j|%#JjrJ*2V9L%746=X`f5;Ulk!+M3-4HL zRg7Fy3NXn_Qrtr5ogjzUO2)Yt@oPG9tYv-zr5<)GQX9N2M|F)W6YNb>6zwcyp-4hS zFv$DOt^zAzQutL0rj_h*^TU5cZ(Qn88~^UtrEx&>m4UOH=yceo}L>PDp57$M=g9?|n%B@#c{EzK`qcnAP<>R>8jAyD|1wdLdy1DPaEB)su+Wv(Xi`FmVxd z?RUm`lBgC^(-nk=+;e_iaQfcVUjOPBR(S8&efRwh|AElALp8bIuPuhL4*2A{G20~} zJfRLLEO}#vSO4A@N{9~!>vO!tL4#)KpxLwt8SXE;iYxfz)viT`-h~t}nELAD*E{Ul z&78W;$2Syur-Vq#)xKxB&KsWHFiv?$mnH~_@o~+(ZM@{L8{hIG8$14QPf;U(2YC#3 z6BoCi{eFUuB<*gkA4LbpDS!PvOb7Wz*$NIB9ZXvE3POP-THF>^ix8dW&;8ZUjJ4!3 zk#|PJmUx|woj*8O&T6_GvVRzjO6e`u@a1v1AXi6q8Q8ndMPzeEEzgf*)lL!(JT^P8NuOn7qc0Zq=k5*YVWrMx>IWUeu~_6?|% zG&y{*4L*2$A(waNvKzM7QaxR!kPd9%TNp{yLkT7#u(5c=Fp^Zl*(5<`)u#Sn@d=#^1ce|I1y zIx#kCOVj1A!q6_|8USz6S74^je?CkAa)t%^__#a*SNJm3jIKD z)pBGDq4&ayil+W~Gl{H7~TLku;_j~Ag>{^G@9q&;MU5r*FFTf0WI zVc-Cg7n;lYBI2kFu0&7BeaK^_LS;15@=J&#q(tNAi8Zz_jpB0HB>$RORmJ@3vwQyf ze6K4m4!dmj9=&+W?jUpi4e9R~X%WQF(tEip$L8o2vKQjSo0);~!<|{w9+rHduYJc8CLZqFU;jS=pWKhF$pFaDGz6vxlm&S9B*Ig>28CF7kUt&&R*EG>? z!SrX9%*JBps-^LgAY!gUF@SVs63cY!m`pLE%3uI@h$(rO$B#*a%J&s}uS2kcZ{FCC zV_-F7OfAbvZV}oFVAynM zNiub;CCz3vfa-MILb(K+np3aSe)!=vc~NhWKD7o>qs)pD=&djw>?6?b#CK-MBMfLT zuxWDFWzcbVY!`k`#sLqv3q4|k{T^FaW;GoJK8?6!%{qScxF>avPje@{%-#f zIYVE0v{h*WFs3`BpbKnsfky5|T{TDV9;=nXE59Fna;kmYs9jNcE(Szk&2tKba=Ikr zoYDx#u?OHHmaPrCRq&&98oF1(j@ZA=IJDNlK9we-2@L49A!(*3>qDcJZ?{F&3 zrQ4VDd``^;<4?^l7vfcv1sk(G%xmv%7GLR9UFAR9RR@AN4|I)p4T$OybK{i&)l9^S?@<-W+!LQ$04Ba|aC+iQR{g z`bx|_o`rB8*&?*yn~2Twpgi8BwTtE06G6BoK1}K7XCgEs<>e1JE}k_5{VuCZ3dgbL z3f|ktaY=;zhkZg{-n2QCx?d!u?0SZ0Ram_jluq#Vqz9u0z%hdWUIrYG9gLmCv3%T- zs!n3IelF1zFq=ae*&g zEdt-1?P^$jUHkD>ZB}uUhIRt(=kP?=4EE1N%nk61wv&1N@XH_TBtEu00L&a)}q6A~i>(6Y_i~ z$nO{MnnPOjvz*`g&U`vtZW|wNR6Pod5-XZBS?xuSXavh9 zpAtp?Nt6WbK%8Rlc?!R1E@{Kr3sqpN;Zq zuht{-@$cFy3;XuH3o(IyTN_oh9`JN@J&$_r`DvgkBVqgE;QPweOk-3ajcvjWD~-8* z@a3|H2FK72JwlZ6R+-vcYUNT5Uj70&+}aqQzxAU&4DndDXWZVkWUl^UsAltsT&jJ~ zj9p`AP8fA?JXznQ&(xb>BGX3Wr<+9I)ko+>rPT^Dx|Zafh12v*A`*&ry5V|(dnTS8pcA!cA>@F9jKdU{RyjJ^?SrwVzg6|) zCl6P5NP?S#E17@ZG54pa#L?}P*>yMUbWYoV26bLX{v&8@4%@&OFidr&E#D5w1$8_kVeDf&|EiMLc_VYs!Qs^O$udvSK@QTP6WQEwx9H%KR}KhJJ8 zV6ZQFUQD}T`g~N$=|Rb5yEuP+3q0|Z5G$$vZs z4Q=bb_%5PKfiv@_ny;5@GhxC+#onYruUT?NH4+W_ePnnlEfF2sxRCPUSi2}drftn8 z$NPu39`Z2FPT%7apMYKmj)V@H*zAe_;;?h~3)3`n0ZYdDRe+<#j0;Dt8%dD#Ut*Z^ z7`%x*6?bnCBYMaR$G5tHqmUq$>LPxw>bpuO_s*Sbg^zO;=C**vtY`y$EUtms_`CUpBf zhB%#_I3@hKso4+xZ4Se?N8ebp+n&rfA*Y7Xw_U$-*D#?1xiW`82yMUWQ;TKh-LIEu zTkjvra^*uExYjEl?@J*2SzJ2Uml@7-J?dX+u~oMTtnJzv!lJG_#rp~2u6!Jk3{ z$+r#1R6FxaKbWDH&w^3>AS&?9OBtu|@@vX_(6uJmg%!Z0=`RH|tLBi=g(J(&(p@0p zCmY^yzecQVkA3-17cjrZ@=Sn1s~I|jt7711pT1_z@yI&j%)^IK493*~UqI<4lr|3f ziST*1 zMnY3`dU|V3t=}OALUg-qsX9xY-O+GjHl@l#i_kjr7gnd4Z#Nc7xP)y=sq>MqWjIdch@g6KU^?UUSSZ@;meV6oe2$s1 z>E9~`psi(BgC_C>PI>DBKlO}hQBR(jhM~PZN|SCv>D$av-*n1F0%?7t(KX3PJ1%Xs zJ>LuJCLJf+LdMDiErIpD(DUcg4H&gBzlVUyj#{+u70#JtdUkyL*AJTw&k-@DYP5KB zE;QlC8RJG$E34tc*Bpvr5;1IsUwdve=f1!k?bY=5FK^Q9=ZCroYe6LEJ2~4O)UPcC znvgVPNgs~S1v3uzT8P}|AzM%Vj`+NOxKFpI2*O#AIPvAKzCK?#_hfSQo9gemfS^=-l95CHfZV$2XgY$Sl;_Iy7(l zLQ9j|nPv$!J0xc9&xGH`CqOCB=G0KvfuJMnTzMwUc-pcS3l+ST)t?4U7Ee|#JMHnn z4mb~|bEeOq4GjCEZ*81t;J@9z@0Q5b2WY1tk1cr82m9+VH z)jW9MZTzCGD8_(NEMXXN!np&<)c6hiq`y7=J{Wa7uG5I+*v8fDW#eyL>I*;l-;TRZ zJo||>(KfI;EK{gze{?VLo$PhxX7OA{QO$P5ofj*T{XRgT!7{N=dlVxS6qO0J_!M=I zGA-;IFtseSx!dG5$hOTC`n)35US`y`*h1V_>NBqN<3Q^KC|6_jtV6Zm&;qYkY|xc^ zdavYtrjlnfW*0Uw`OHd(Asna9PYS#Md(l*jWV+pLFoNwA6m3@|UU1=F>W}G&sn>cD z!R4RpvOg>#3dGO-cxGobvu!5mAid}C@52*pC9X{ajfNR$$bE^7>j>}Sw=39boo5KD zS3@49viZS;%1qoE+Z~l{*x7t+A$ZP5clt!Lv;J~T^`y(1@6Gha1Dknbf+$zaep-ia zd9!dDx7@Bxd)=i2Db$sPAjJk2xi0m*R2-&q@~d!e}O zua(wP+w8u$K?vz^ zI9wu{3Zq}aDP*ma{AJda21O%8Wyu?#^Ec6(HVf3~)=^I1k%nK3)KO0SpL}+GLFCZ4 z@0ij!<4`CB@0MhtsnG-r6aJX=L<|>$Vbj@*EI-D*c=nw`&B;-EhZr5tKcZ00fN84K z4Yh{750rT}_3e?1h|!a!N0weN)rbI{FUgON?Fzn@zb(86K8DZr<%g>=6zj7bB1b-j z-^LlUt}|l9%2q@ov%%O@^y({zq(NKGoLm?|c`ZLZvQAfE@-06B{qQ&9Dbb2K|Asi% zMdgmZ3{(S8Yt`vl%_li!3Dg1C0?0t!=D3A1fa!iF)G^;~Pl6i(xy*5N6C+AN??Bu{ zt*g72VGw)P)z(d+@&WHFRC&e7M2iI0h~Y3D;T2SlDp#o?ZDpO59d2knqg^fOW;Mri zEtzZ*ZJw=QvS8QE?mVlp2i%A&Gd%Y$3UTxY%_L}RdbdoXz=?}W#WD>@Z@Kw`85Z;bAVD2!$)jUY)4=Pz<4d>>3QVDB!w`hdvusqPnAEub=Z-g{m zn}c8mQ?i&SnRZ|}zMv#VCEDtC%0;RZA+LHzQZWnb*Z6w=kiQI=I=a*_-T89hI5p2! z{A@TFuy8>6EY?G94{as2vR(Fth!tZ;P-^rXU2yHAsiSQOwE7DS)}rrTm5w)Vao^DD z_-4~CmV6m|zB(a9MVC0U18v%Pz~dg7$^o5mO5vy&eTX^K2lbb5Pc3zZ2Ij$`RdK9C zG2P8a(ZmnbKYVLQmC8xH4X*YJO)qTgSbMiPpFhXzdB(f7qjGtW7KVuOwLd2#Y+Gn=q}$f|dO+vy^XyIf_4G;2>-G{wo=zZ3dn3_jvz0K^r<<%>n^sbL;K zhoXe;jY&3TRbdA8OOfs?gN^|&N_q0bN`G+jW3`X0R%`R?_w*rgE1&@j%0qj@ZOZGy zPucv4`*wUR!zeh?A2r}&%DZP;tQ&I0RFL7jGoUOYEJeBzK0&M_iVx(jT+5?ezTKZ- zPNVlX{BrR-3EmT2{>?XxtzVPEs1PAgO5!+y%ZF+wHnIz~ zp;dE^NtjN10NJ!?^pk*UHpaXSL!ql#m&exa#=Ia``S)E`z{lc+vO(>#ggk zbHNyRkSQ1P39xbbIp0OmY$Q7V`o0ih-P++P1}bLNId8NxBlVOV&NLIXM~5eB`>zL) znFx=yw@5HlUzTe41R;b5$Kh0nJ^`W(>TrxC=;SB_f_>(<~Vce%XEVU#t^csDA!jo5&EC zsl~Q6mhlPnNA2UJa&A&8GOshQSk>%ju}MBfp}Ve7JwMT`dXCy+wJs_j^*p;+<6S2{ ziew-ElE0Y5l#bZCtCMaBfumVt zo1!QcH2lJFZrkVC{$^7Y&lv+3eJLo2#FK0e1VTAOI^bfz4DLaPCradXgica22cs2} zm7mDMq4uQV==N)Hq16hcLpCd$SWI7Gh+j&3cdpz9f3A|A(iMj6hf*VQG>HC1-SWI> z%jQC#J5U@VZQ~N?%hpL~Z{ESuERwxN&*K|pp_f6bRz>MtTAx0yIaUM4UnAZr20d&))f`0Vb|-;rYjM@*ZY;kO2N9{0 zc$tEaSgLJSoQZFFZdj0KotM8IGS7~fMxb$1Ts-_jzkjK3y!;wuwaBP6^1U@1lExqO z8(v(F`$W`g0>j;YdoSGbs{;)onh)^ujX|I+wl@bqC3GR29&Tz(oCP zdku`llaoi}sUaVPf2gVn{RSWydeCRnUulKU0!R`(i{Ku~(hM*w^g;hJzV;$7pA!Hv z7K?hAsOGatJL8Tlg#Au{OZL8?Hoi{H_?rtnuHYy$$g$}AH~~>oBacDc)s)6S21ZIa zHUfoOmOB z0}!+M;DB;+x}T6}{u8wxJnu%Zq;01>z%~@FUL}u`d^L_`M)0s(*A``s)lt?$#Hr7g}3uQh7XUPlwLF_ zQB3byktL5lb|u6&(qhbE)zA?ujthh`i+6nbGW?|vbf(#c&L>vRlAQ`skN`xCxSvxU zVUrfYSy?3I6%|FqSMIG4=#WOGZh&%Gq7&kyy@RW3Qa|L4eyGf!$!W#+BPhLLjBQW! zc}*OmmaY|(Me^ZeR&YyG_I^0s>0U!DV?{76h}&)x<4yc)_Btvu3bG4Y^B1kxE->@; z61SB5hkkS|CUalE05-m|N1K7zo|?e+>*yF57_<_Dem#|XEfe_?D6|ld-{0*Z5Kh*a zYHHf{W8dqbY5{k@!aCFIYCK zUTq>qpS0kWuc}q!WQ6_k=q#jWTWVuy#J3Uux1sB`>xDbYCJYDtFLE+W?TF#}S`%8{ z@?g_aAkdCVR>239I$c1d4R#vH4`MD9z)okkSn>GceYcvz)-DnC{dB2ILt1d50~({d zP@GOm@Sic~;C#_TI>-Mb1y&rW%(HA6K-{#87*XAIDA88)+KzQd{5m=1!+^3>_+fMk zkkU3_xYLS@&tir&RkX|Ec<_nA01QiipRG_7p#1@Gay0<1;Kyv@!6?>GuH7EQQ8Z`3 zXrKxyjJ8MWfiSElipBxtuFK{^c43GGUwA_s7!cd3DSh*BnD)E(^d8!%FCgbgp_}kc z57hsN2I~Qe#{Yw8V8I)@Y%{i!kvTD7g^3Ae5?jwMV6nX=Ze6R-gwsl1@Zu%bJ8BW3 z&tl@#D08%WW*f;7Ccz4U?+WUp%WUFg_;_2$%0@YYdS7!UPsNbNLma~<&}ER4v!$Mk zEg4N5(^c_XtYA9IR0X%)T#+%_^>~idJ^P`@%aF3s%}L@ddHRDIACLH%R7qEfqmwdB zqT_L7KIdxua#1h~Mpddatz~q{*DiP!#oI|9T_7!ywe`X>OcXq4r+-(FV!jJ?@-s18 znxG{5jkq?Rc{Dy3w4BUd&rV0+0%+diU@tay)~e?jO{U!dBh40u>*|^KL@l$vDl&1Z z){&s~O!}`0>SMu&m1Z}Ix1rObOdOWh?tYSnqTY3PpLsyA^mc?dI8#qAs=LV33qK2$HgADuGAGtMD6DJZEe{IsB4n@9!YfCynm$QKuXpA0R7gDH4+SOFthF$2Hz z2UFV^ib2kjWO3T~&6|AX49dm|>B#8~VUs0(_A}X)U9sqrttMAOM0R$r> zHXAmMgavPOk$;5#IPM2yFpbg&oIU3Uuu~`+t$i(HQu^l4EScFFNk{2L5v4-dTfG2U zU$LC1>72i~fz?06wbcJo;dx8`CH*@Cww&U_B0TWP_%dp#v0C+n0&RpQV9KsBfq_*gYj3WTxY8%Ox_ zbz!3o8Af1*#c5iil^2AGmVOr!P?fmI-oQ`DNkSdHzScrSpDZUjZT1>+Lo?51aWV-- zB>!Zz3hNHJ%EkDv65vw1bTI|@mrAp=bF_9dlungUR~eSkr&dQBY>q<;cp18SI2#fY z!-4)dh9d;-IIw1GH%iI+_jxaPy@8>Q?5J%jH_sp4)Qa%Sg;Sx<3rG9tIrTygw|f4< zTCk1pYcS>7uEY{!vT%Ogf-VDZ5ctleoqjh0g*Ry+}DX9oeNxFZ$p#YI)6$Za+6<& z6K)rZ9?kP1Z#{4e>IVUo*HT+OK~fBz&w29Q2C^t9DNmZU4zzZ9>qApeHnzPJDpV+6 zH4`)8>P0^y|GF!2)r-NPM=01I;nzG)P#Q|Ye>~j}cV;9lxEpF1B=Lr;mDSfgs{ar~ zh#R(+Yu;7m@tJYR&_DE@1inNBfZ{AJ5o&xjb(q?`qY%7~<)!S)ZL12q0Ct+iQ&N+f_SYKJ`hzl;{np8qNS0j5%P7lt+6LX# zFT!Ep@=?a^yl;h%SIYq}0N{AIq=gj$`j$dPY)d%S6%Z8W0DK^0V20IuKIscQ6`C0N z9n2{I>S$p}Yhu}i<$D~qVY-^cQ(Zz#cPr$dvD{Aq8sRxvRU|1|wiO#-lB;%k_5@WW zAdyg?bjFhKU)X3;w3==vYjwNh2FQjlR&EqT5$QA8hPQCu0dto5XLMdL38t1e3-6g; znkx7K!QhbbJGs)`tzh3aN#tw!gE^Flcsa`rVWc!VvEniwLzNX0hT^a=T1eOibK)8K~wA?n;6M_@Dp9XoGwyO0b`;iO1?>! z6^%)MAa5BFW96B*Wy0PMfB9@O}R@TMz(zOAv=m06~z*>v7gGaKmoMrMg2kUEBf@s=c?k9`KSb`vU`}K!{+ohxfWe^7+*g7VGi0Q*yhVS#Cyh9CQ zWPRt1sAOU)2Viq^Gd%W#r(I68T7mpVRRBAy?Y=`A(? zCft%)_DMQpVC&%Un5U(hjL&^3;%>B7blg<3;-^is9FBT3M$u~`o-dA6t3|w z^7YQ2{ZL^S?vP7oEHy=ev@u`>`R4p=>jP-=gFKVICnhN=D!-0nYrGagD|!o6^mVYy z1i=RO^HjX}Kda^a!`gKuZ4dkV^`s0z+=;$Rm5&x#Aef^f$8jE zD@C&a)Q&b9x}F5h=uH778G9S$?>~j}d{{8IzpQ)%M5hpwx zO=X9V>IrLPU2v|NV%|TCY*SV)BgSCbTz=I+1$nmNr(RlG@;VO3OkO}y8Dz)22Yxus z!Hd38lYCu=wJ45kypvMHyM*r-n09HX9djT9iQ~tmSQ~vTtG#giMCF+yHxmf9=8)AA*tvhO((jS@eheHzGsJz=J#&;KZekF zN$V|zJb*^MiV5I$jOxzKy@G)#8X|ey3$kX{MS?xkOJzzHzK(>3M7|!S{wlBix-*dA zu6u22UoF6dp$?5zYc(3PDqI42R-{>RFC-K|#u$k)6FKrmx+Q>D5M01q^jma)E z6fTUcTe&FsD^U#eErOwH3$pU}D|-<^%i#F)q%CUnmlUP=JLkzT+(+j8?QG1ew&J3j z2*|w;4DfG+5aSGa@Rx`Vkx8m_X3^|6G*dn^I=& zyD^{jA0fMg_Y29L^q(jm!~z=;{rbP5bdxq0g#T5h|Gz|Cj1w???TEDN`il6tX!ihJ zVjzPQXtn77Gp!Jo{N3@zIPX8<)HiZ(|Ni$h`oidU8sFD#FdVt~m+g0mx93?=VQIWi zxF>%5Axs}K^)oax3;m-}Wpp%Cri{*VpO2q=Lr-t|62{mJeP9&Og5U{weRY&f5>p?i)?ZgUY89U6FgI8ZYAJY)!JHk)fUz5Rv|kG+|Lx;{Z*!h;P( zJm2a-GEv82bKTaLMhu#bFb*7s+o3({Sl*Bc>lZF>jYU{*|GoDOfn-L#XbBX&jgx6b z%`zd3e@C&!S0aobP~0Akm*+^rbu$rEm}M3nO^{33lf!g=i9((V)^M}k&_=fbU8li5 zOlQ~0Vxf#_2JlxH^l~;9!gI}~E?qPNI-+z4B4ZtoIU^ZD{LwLWJiRx>O&!-00dZ;Jv}uIpF6LeOJEPRfzU{`|9EK$A_{`4H=w|&7Jki3N`IS{?9wpvs(Agr8 z!)^vYEax!fM%qo6!~QHZN;zPBIwwV;CKWq%!3?GRl(7gE@(%;!z*(9B)EjHfKFJ>q z0dKYoarwJltI5+{S2S-H5bJs#20a@UkH z8WE9o4HkpQrUK>f+2m^H>ad?3MzKo&s||tIA4?WM&;Gn=R0^%G&ZUSHB72kw&EZ^+ zTduh}r~X2ePpmH5W~G^WZTmodd8&?LyxLqpkVXA=L8^&VnWdZ1vCAQngpQu@JZX7h znVC8B!E~iL-$IUi$BmYJq=$Y_SDJ8JOO(_BNAUShR3=WH$N8Ctk3$F1JjI5m$rF?B z?p~Y|(3s9vS8cM)2y7TXR+7|he}*M*vvzO=uP_a2|Hci>Arl!m%RbO-V*spQ_GR(M zv4ULPZPvl~r%!Ki=fK&IOR)orf2Rt9%oTQ+cbH~o2h~G4nL{SYoPMl+!69qM;&&U7 za`W#D*6Kr{w zHp!Z@q7QKNL411t)o|jOVhd(>oPp4QvfU?xZ&y4wEUr2`O>8|fjn;7cz(4WcoqGSH zv}z7*40S*A{dMZfB-CqLlWu6=MMpWQ$F zsU`({4|v5_4Dp&yu}N7%~4LgGVJ z)xQEfoiy(HzOu>zPZBoXee^dw)%607*oKqG`+$y^q-R5^f;72GGmJ?PUd;H=-zAde z=6IQC?Kma>YZ{@)P#U}yUAQ?f^o%J8t0>iG zAerIfs@{_~z8I`?_`V(9Af)0D4>$F_1uh4{wP-h|3!$|qxFfP=x3VkaSZ6c!4_5l# zbT_#I{E4m$;i&F$xAm~J2dEs8Xq)vxAUflonX81DQUY{tU?i;zUF$YOi- z4>pp7bMH^~wP=(hk3BCiceH%De!ew$Zd+ySsf*_DQHKl;d$Ul9Oswg<#XtjMhTz?! z&ml$&#*GoNlmdq9<-%?;nG8FZ2I{gU_oXYLF@j&yt|*n*4D^ZdJPq_IH0}frrkc?E z-(bms8yLFsGC#b|DLcqI^BDJ5V_9gkkx{+(xevEVigCNUl&cd7m1pD1 zq2z|^U^FJtAyzetG^v?C5VuA5CrS6zxpUuS`C*Qcwrwv%?vdC$b7eK6*XF~ZQl$x= z_IAk^j&X`f?rf2BoH^uzE+UySqUPsH=KPyNV>{ZuvG5sFPHw5D)sisLi73QPtv1(x z`4j5dB+?^_7vk^&dr3;;yY|(vA2bTBCbM!gy}m(n;6THCfpM6n$DIiVAJSJp%aNAf z0WnX*qz1mrQB@PlgCXWN574GXr=F9Dg~J=+LNWa0(Qq@5i+87Mby(>sbb+4NXUNWi z`U^N&;DTWz|X%^9?mA@#Ut54lu_>Fb3=pxI+Ri)1H(N>0`VSZ+;!fDhGB2ddH$Dsjda`^^NUYhL8= zcVrR8v(8=k84k5Qx<&nEr^76MZ!Y3Egs^d<<)?c#O%a|`_-P-_LZ3C=sj-t~iDM-R zvNx)R6&&d&kSHW$`#02Q^CtV+Y~QhabFKb%7d7?;etL5$QhG>Wv~FgA1u8iWZbPd8 zVIrrREBnKef+n5!NXl;qX?7!{;eU~NAM}xCX=cHXF*u}h*g@;pX01%<55|^&WB)8i zGiqqJ3*hISI4Gvy)ZQ{}1edzev-tIWTsW*pM2nJk>Fgb+uNPDwfc`FNoY*r0+R#9? zLBApN`25#@3L^aI!`zH-_rLD+Ffve!AWLf)?q?SI~vhAsf1(<%3kF~s7~`fLo{-4_@sI7Yl9Cl6M}YbatnUB z`}hlCv+}57ftx|Ojxci5HJ2DR`GI@)ThcNRVwG94j$Ge|^gTNZOe}9!?mrx_uCi(@ zRf_T32PV}M64W*uN{2zvZs7BwU4-iAC%s@>qve>x1|695Ir;9!(D$<3hzF1^QkoKV z^wJXFX9iv34#7Gq913uc(zox2o68T}LioRE#;qH+cp2uBqz)6hJQ~`Fpee5WnzE*Z zdQTCHZX~YfAsC#zUG8Gr8~`>SC>1=w+WI4xJ*NV6&?zWKg5&3o+RkKNqzSIn5Jy<9!K!kv{3! z;}@2u?AOG%smrrp_r+&7`>30b0UTb8W4JI{4=)JHbsO|QIIys|MZz06;+SNyC|JxG zFsD{Dx}6}3nW)XDV}}bA`y9WvMmWj(LS(dsvh2EqKVv71@0wNLNPszNBph;KEz_in z9`dtoQ+ihu9`obak!LiVv-x(-ZyGi;<|x|J%*lZQK&V|KI(?L1EwvoRJBIHRPZiG* z&#AwTIk(ODM!;wF&5L*Z55hiZF5|wKuFbAN&cMqQLkj7Y-n2}g;7eFfZ`2JK#0aIR zcoD9SN+Y;&e9b~^~&*?oY8vNwOP(8Xb z^5!M)PDQ3DDHWPG->SBe%_zPk45-d*j2q{%dC#Eqp1{y^B-3+hseb&tP@-nM($NyN z>nqB@Kc|U^uu3V!lDx8n{9|=)14JlZEw=z1Hjbvvf|B%-+LQpA(gU{T^>RLH#E&){d|0{m7h zwB_t}%~kU+Ja@Z&q4u%eRBv$1V9sPXiM#F!#g9{N3=W*Nw)nB%BbKnD5%WlZ<%thZ z;D+xo=#vq522C98;fCi>0z!~_2bqud=UE2Lf%&rdpj`C&e)jde@pFtdzV1{q+`^Oi zvKp07RK#;2=D;u`^PXK+l&oKPTZBN;6e`yg53^9#UnIA$TYY94_8lUBmG@ZI^!x!D zD-M>Tw&cQ3#fhXU5f!Ck`BxGsRKCo^8-{Tc=5Zm81j}6CZK*?E?pN$2O)Y~cPy{v? zOQ7^;JcV=njrf|Jt_Z?Y*7Z z&Rbg=K{seBkae8)G#J=NXTP#ghbT6**AuurU+rClQOs}K=Y0p~k9l=G$fGp`fs#x# zSG$vSkEkgQ6*%sz(;!1`WU?$laM`U%}5r-abfS zlNHg^0j0g>g-tW-B~0u|bdYK~?{p*Y!ler3H4LS?Vgg2HFRnKXAx_gjC136BZ!P(V zgFGRg+`=WIkhRZ+#WG?tUEpb0gW+g7-9hyoS8RoL2*&*#((c{rgyH+=_JQ6R^V>2y zr0c3I6*NWw@jyhqwd3WAS-3`5gm!s*(7ky>x7Rc}sLCh|NOTr4yw0khDr9)C0&HSt z{!#Glx!&VppKV0n2Mfd9HK=tDM|?%_19yYaLUkz>e0i(o)ZNEMKc&`6+wQ(+n*LBP z(GH(x=PqCRn^9*0q1>Iz`C8juFFm*{De)$({Z=Q+RYI_!rrfao%M#mc3dTfcr=_T_ev(I$*I1{0xxcyGhcXjGxdQm zcY7=f*XT@wMRfl4hn^LS&WSm}i54lwMwiI$I@7HR(IZsLxV~-q&MDC}i>FgdwMnb4 zFD_#Sghkixf%Bnj7n+TjuTeYVDY2X^p1%mL;LF9wW7}BA_KCet@v(3+F(<4ZE&6i1 zbigNb)*AUTlT!x^m7K+=ZE(Hfk<(fq&W?#9D@Aix@LSxNBp0Vh5fL#YW9GIv{k@;( zMg>E)e2((O_U%fwn}v!`Qe%?^>AEWt>6^LEy7lS3$LrvOmhR1#%LUQP%>#ZjEPPo- zXFeB}=&1iQ!I|a;3m0LF@xBw~(3q>Deu(n5e(XfA51M@HW>Dd6LL1lrWDgc}EPzod zW^J5~bJGDCmi4u#rjcd{=q*qKFeA^=1QgDBFPB|s?Gzq5?n2I&-9?|_5tkbXJ;z(3 zlqu$c-;T*O1%88A*5#`LE`B^CGA>0zo!Cu-YT1^g4PxE+FeDkT-4$_2!remjyH-bG z?DI(>H>V`J*@iwhOCQ89N-^a8#dbaQhd;qz1;CbDo_;`W2{dP~>#V(%*2L#Duq(+G zxg#x+Fe$}veUn}~K%61kfUBY$c6Ww^#(M52Y6DQH^mZ_vEm#Nvs-NxOSHmYH41rZ&50=U(Viy{>FfN@0 zMF*LC+C@rsge;vx2)gz4`;!Z}7sK+fOw(PY>UH^S)_)MiWX$?&^~!kI^2J6zP8qKH z5Ji{%?v)yFqS+!2YV$hpnXTY)ds_J!$~^)4fhN%6g3p>pUm&h;4naU-y9YUmKJVdM zMQ4Vcc(zOR65HF8;tlP{nZxVU1N7OsI*oOOi8Hu}0K0#>1-^xa%AugRa#?AU?3I%^ ztDgr<@==H0l}F+_&wUm(i(?A%{ECa4zQg@s|7d>x3lOcv9&5aScuAQ1j_^MBT$n_o zfzHkB_g1$uv+cFSU16p*BkU-FSoll&U5NEywVdSh=>r)C0TzK-z^s@0R$bloI`s|a zZ!h1@GPJFFR2^*BJ-zNA6BaRFO;{$c>b0OBxg&EEk6<>B8Aw_I?dp3wW=t&cuF6kp%2(S7W zF*-^~pvT(|YcqOA;K-b09v;Ko;JU9EQpMcGq9XH(QIK#B@bM0x&$C1Pc16jfiaCx| zkN%T@_Q@9J5WZ_UsSssY$PzK%oId+oI^eBc%;^qos!;w-n}^dc17j>4KPEeA|9rpy zD^bB?-iH{ef10xgX5jbCD4o`Xz5?vpZ{{Y#3hzX#D|{Hbt6ymzD{_3^dVF2u``??L zcSOl7K-vq*mN9+VF&CRt>MOO@{-JQa&Nm2nw>|0D?f6@5D7cTOMSejM8Kgk(l4hG1 zTq;}7NXM+V51+}p+pazC)>5$e-I+e_3AWiWB$N5T2N@Hb=(2qqeAa>(lfKkgTKipL z|9_2rV{~O(6K&A3(=j`?I=1bkW2@7#*|BZgwr$(CZS$S(d++zgc)wnLos5mO*4}5; zshU+aCj>Qh`8NY^B+qh;Pa@D*v(L_OFc%gy2@F*}GGDxDo5L&xs6Wsr^vsYa61UAa zmpU3qar2uItvl7COJP6gdPRv>@rwdBbRKvGDyIu5Gxu}QsKjlwv<|s+T zSr+_a`d`s5cPbA66gxMv)ks#^kC~#Y-cfx|cG7dP59xn!+nd_!c2U6yaVQ^l2f+VP zY`bXZS>Mio|5ND{wQ00dlWzYH`51A%yc+p`LKYVK1^{Wezp`q1BL98({#^|kze?tB zQ;Y|~e^4^!M={rbXK?&?ulxTi+s3gj{^yDq=wXk$K+x}CfBR*=D~cs=ie@tf3aFOA zQpPt&B_hAQ*^DYvE@2UOYg)j?E0D%XSHS))u`&hd7fb6!z>diM(Y^|8N7MhzN8iLP zy5^rj{7hR75GdzJ29oi!_o%Hz3gX$fajgO(D?+j zK+<%_75DyICiY>Z;3}OWfBmzOB zz9*$Wj)YzO)MQXVzwbb zqgfjuES7^kx(ptE=dvMH4S*PI)PGKKNMg3fi0E*OXmxtG@i;`rX?4ISi&*!|HNfC1 zneV+pJ)O!Q)cr+`8zqAj;Nkwe_xHO36S*R&Ec+~Z5>-`z~8p zT4%`kEP@AzB!Dnzw7tz9(JF^VFZc0lLAg3NC?oj8;GHj>o|SPR8Rwwh@v<)T+}{^J zl2=70O`1r=!~|_}Mx7nW4DAA*9>I$c%**wnJJy8vWY+zK341?$`BX&zb&sTIp$1{Z zsFu&wm>C}5IiN)8CM!jhcaAPKTxm#DTV!d!B4E20JWG*+M20(}JM;8smg}WI#*!y- zit;2_Ze1DM0h)3Z3qrtRgs63?VOPi~yy|y7@&q`Opkt~>K?{Nmf&Jeba|sDco%-Nd za9RN!+@g9bC+yDcX6$2X9~-0FM+%!@>h3!)e;@vb2?g{FTP_kj`~oC&Xh5>_J#XB> z!5ac%*6aXZ?lgf^Y40!%41>Xn%$$WHI<{#2pwjKg)!7;(xB)d)p|N*58n}BIedjl2 z1nyD|GcRj*4QsJ4Gpiaz9HihPL}aMQ$)$5__3jJ>QaZuasR%tJR}_XaGC{#1K0Q3R zumqW^^vTw6DQRFn-gPVadR_x zz29Rn!pkdsOjfyjlX1P?+(&q4#wDV_G|==cTLV-}gHUP}4Db8+b;>^nh4hyY8Ug_c zqi4?qfZ!rRpJ~HIWbSQi&twuj{DWhY>k07_Jy`;nB0!qXC*T7?5upp1}tiY&GV_UP9_4SLOYRNxdF)8}T z;QvQ)`!_?2nN!5xlM2larijcASkXb%wYC>%hqY4!{mbQFtL+5(s=CjdLR?F}!l!gy z3ls1Guc^8;rQf8VU(w*S{1ASc=+3)6RTu635Cj&YOxuN6Ag4;~?0l*f4 z%4~EIC8w{=?!dNu6v#W-WY2T_t~JSb7_4|3{%satJtqrX$F!#)G#W}G$`PD!EEOSp zLt;&d1reFkUnr)m5K1;Ew`e+iANsU%Ntn;STcG&Sbw~rl(YB-Isp**rzpufDCWH@! zKp9vIYeDp$8uPCR%tx6iSD5N~$`DPYO{ceAFrffVVzy=D zaKekAr?3d&#pbg6U>j4bMK4`tGiZCHN+|6viq@Jk+QX@i^7`ru$9PzS=F01Gt4hCK zZl<#Kl-K?C;k$F{`CFg6O|~;yfl$&B!05uc@p^a&;4-6CwF5{20_R+0imE6d0_t=8 z@BDG0PB8!?i7G6R+{W*La03&e9Yb0}{2Yix9lvf@if<9koCCITIdnHRL=|WOChx{G z!kxaL4U|YZ5XhGs92Uc?BjbHK>jzpMou(G#%#$twDHldQmi<5$zporcA`OUr0|vb{ z;>m|RwrAY1cNP%$8U!5wIN|fPXnPH$F~4%|Ks+KYDp(?NeKe~tSW~M;^;-=v<(iOl zfe3Zdj1Mn6mYFU;mX3&eLRXQfUo#^(Jf6=4oW!=Gb&?!uVme-O$UO3hh#xqV1s0d{ zHwoj$-v02~EzN#hta9a&y+uYvwVmN@FluMq&;+A2hP_GSt;)3DxBQXR%XV3Hf{^A$ z@lQBIX;eg#-965(U7+a8Au6%M){N@@0?9WVUPn+;9ZZk@c! zH!X+qv^l|G#-BE4;qiG@RatZ{*C0HG;zS}&q+5D8bRkG_p^-)&OjnSeON>wlVsC%l zf3CE`cu~gi!f$PgvQiT2di!gotsAG?fI~Xw_yL1AWT-BIg@_+5pQmSJtQ)_wPFM;H zqeNe@elEL6x`0!jD0*go;yeCyblf;Q%eWl;DH~VG`IV(VRM&7FB*{4n9q++g{<(#I zSO-xSA+mRhrt*q1Ex$6?TNxBXeNTzG>(#(8r*8-;V`{hA2Rc^Dy@J5BEcFD8X7_=f zQXYipe6;JbhMW|z={l^!JSAP9KPTEa8-=9a5@A#~Bo!eBT-C+oDW4XdzwhkWJ;dda zA|%xG zb+GBgyLz6BkK)VcbH@=&*Vlo`MFDv?tb>TturK-WKB92lS5&a=k|itgY)j--N<2sN z9t#9zR&KB%-4a!xoxwF8@uk|;*T7r%B%3sE}-Q_o0!l;Ht4!0 z>H-NDF{)HJ_b@4$nNd}fMc7N?bTT?qv(D84p-4Jl}45Zi`mm4;o14x#MXlw8|7 z%4mqFf8xLkEEj-4chR|X5oZv#JZt8_%YP9iU{}mc#WTDbEev!QhuWzOCd$RqOXz2M zV=pQx`m6k1=?2o^-WOd*N5Bjw)eP>)o+f!;;;iWkTzG~~*YNA~)GT9HM!dmQ=UwRH zkDWMx{E9q->37^`_z1yLZ9#@6V;brfxv%9e_V*yeQ4`3bx1T0h^?dKYJ9GI`wXg7| zA+YkXLXC`JsUcW1XOre*9`~7N;M#k+2lbA05$o2#mV;m1f3qA-^9j^_OB^kG=_8B|C@Vhk@8~j5DJ7-y|Rf z)!1%j-ba#SGdue%ZRJ8lqN88o@0`2F*Z0L*+u^*O%E}iymj0|V-KCkSyiGdx_5sw? zX%Gu_`lau>X|i*`K3Z+|GHoo{@ZL(?4}Lqikr(22fgD}&NIJO)JMskmUcSpWy>RjS zvqyjqHoB#235h3Y*N8yv#Z3Va(VxS8jRqN6`JE+tzPK3o$7z7SrZc~9BbA18KVdf6 zghtl@GriEWZit5Yh{G&O*efoEEFL>pYGh9oH%^4NlvTaGIBoS< z#>^Ekurno#Z!sEI|faF=vnL%q1)Od{3d$XDwZQpJ;>LMudA6@WUwKfWVdw?y7 z0)@V|cGu;gzG=P~8tAy;o2*-UUN!uo#y|x#(HZW`4DIshwfO=;%|F#0$i|(G7iA4a zqh2>~!8x2W5o7mqMA^Q})voE9jQsfa4QGWze=J1l%47;;c*Uvu*gVM;Pk}z?WU}py zCxR!mZvwrgiKh)=;L8WiBm|4hCFo$cXvubMcT_uHE_klco1{Zrn#(>M;ez>8^yAn}!rgODI zbjHS-U#%*keN)?sIP8!7-U+%wV^@XN$7>HljYzDtcoZtGUY_!P!$Z6_{NmMxmnGBB z*c6d>wQ>T=^A*e%UDUfhn76jJ?h!`l{&~)ZaGNHZOw_~{4j}D&9jOQzJ2xp=C;n6bs7XD|0qx}src-+N^*Ax zUdB=2s^Xt{sn6hE#R}Al$1Qp*-a1XdO8=M#yn+RKD|1r(AiO+0KRd;v*olv;nHpY= z1NTTWi-?FweG|iaPL^s+gZM06Sq@OyeiQ3^b!>Z6sVNGwe%KrS`r* zC-;il4P;^HTw1+lD>TMuUg&1qPJtAU@cQuq_Wd7uFIVi7Djc7(39=p3g90G%~bV*EJHXs<*%mf<5yh zWqHcg^-GY4%ittK=iVU@)cPD{m4BZhMO*zC@)Eu-b{DT2=DfI_`%KC)r0dA&RvXx& z;{lH!vk>x-E3irZ9bXN<-<6Oiu0Q6>_@S=LK3PT?BG{xAn7D+bv(K-E^H zq3xFPfN$LJn+w+f7zg=0o-pkmR|CghPcBu2IF3PV!r7t8QnvE?V=90jxUn36A*&UHDL|8lwoK z}Os}x1(+YeqAyLy)#%i5YVk_<20!gI8ni;5oHxrT5sc54 zLmC(2U)+3T59`TkD`mfwt`@P}VjT5nrAI>SktLtgC4)F!*jXle(KeiA240UDd~mSn z=V7;A98SDlFtC)=fVGYvBG4L>Hm0&TnrQ#L(@=!|z-J7txx^ohxoK%P<9&{eGy-_% zWhX~r4t3}43h|@>D>$_0HI9;J^mthN#bhmor+?|JS5(!7Q?^+Md2lS`bENPw+2MGM zf5{@Dluwj>d}$ggeEG=t+Ezw54p-u!80DvdqI8_axk>=d7Sd)-gR;5oig)Q^9HpFa zymLdE(h1_&f&*3ehg&h_OMMV{Y(%r#a>HI{?0yIL*bMsc!2gWuR7bSeWHWr@G`E@Mw#aVjg zJu)R7y2)QXKecuVdeRci`+(SxRqYlbrVagz+S3k?n9 z!Zdi86$s#0dRvSitG$&m)%IdNT_TBsX?v;>U!h`M#C%Y1X=?#v-!3($#eg#pYhf@c z1!BwA7!f|AB27D^NG~v65qAqw?k zfH!{8`?YKp>{mKK8pe|mc3-eOUv3M@Kn&VmAoHj=r#)hFVDudR;QWJ_4$PjW%)iMI zRJgNHi2lr?04xqSs=PX`&5ZYY!v=eT8j-YjBGloG-IA4Kz6rrUC#?xL9e^96DEc%^ z!z|RE{`Tm0ee40p_@Ia1-+LQ$#+U-zy?;lX>zAUHH$YI%k-Ic@uCprAjAAs1n(YWa zM{dFLZ{Zn#Q1wuJ1)yMV!T^N;c}BC3Zp42@!cY1GBmTjZi|~*0)BgpHi!hIs z0T|m~RCx{&VI~jM6c9i_5(uSFg@Y~&u>$CpY*)@ay{-fIV7s5dy;Nw}1&0u1T5P-^ zOsHI<7JPi_9<#oMBgV`oWGI4})TV$ih}&)>42eNtw1}eSHUH#dO^(6`sA}MQ0oa|y zWMX}oD%bh$el>4F{Nw^ldWQis@yol0T9M#aca)DxsJ&Qk4OA?Y;g^(@q$SuJ+yW>f z6_SgM{^{hcxq&JmGFcYkSD#St^xy_KLEjD`pBcxOFo<KbxDg3<@8TI(H*96U2M;>MXgT zu|J?*$A4-SlrMb9oH+hCf>1dJqK&Ner9 z3h1o^fpWk0YVx8ttjl+v%RmnE{24NKlq~0_DqgkLlE}l#Fd)?SIq-LYOR8YC`GNh|g! zMopc_>JDTjGx&UUB-|azt6$rIBKPfOs%l@=WZILxUAVTMVQ$sGd6vT; z&E_(4y?ylD_rr5-BE7Gt>uQxXs~$x1kYsP#7l=)oT843zqu-?$vS>Y}p`j6q$kW9va#oBvJ^gNV}XO1&!`@z@i?yEw}Dw1MWxgPIBQOV$*8{`6ebk-eXMu53U30cda<- zlP%&8$h7wDwjq2q2Ka{u_$3=Er9CKuOmsjT;N6e`Y|o^0?6+e?;4fDT(a`s;lAx+| zMk|iBTmduVU2}`UigVI`OQrDPXgLeYr}oXL3`$VYJ=)ghI3ko)0Ew#!9_KfEj{P8o zR|UK6;9Ib^cA&MczT^+P6W@^VG`XCrbX5_B;TBrNdQ|Ax1l!?6=3;rUFdlm-@6iO^ zc^wsoZU%hy6mmoy5H{IgffSNY=p_M2H_3+zG+7p2gu>9fT~Bz{7*hz+T7}=9C4g2| z5d>nv!?T6HOHh<;Z}VVF4&HkaRnAsD8nR8E1s?-DIWt)UrKgL2^Y?6htWfv zugU51yDR%-&w8o%5&6qB-xoQ`Ve+}EuV@pGy%z*57}X3QEh{ZaH9xsQl*_u^CKG~! z#0Qr0Pq#XqiSW*911(zptLjWbPo6VE(2%7hvYWz55;*Gm=j;-z42O|5JKA9P&qaF1 z3chfp@^+hOPjcztb%+9iov`apgYc%cyWksh>6oYvV4$U7c zmwGQq*_ zDA+3&qMC^wV{mbzdtvsldb*T$(>R~Se47dv7Jj+sbsn)|0&bhl5TPtob@#e{|0apm zug)ceNjdz!zqp>>_R$@-TuZnr zLRX1BUhhZY+7h|&VxrGfe>)XO_i1T&G30?S+l}A`V*w$BT#F?adMcnI8z|>kXLc(x^f8Bat5N zA|Xa9(wSbxz-~r_kNWG(++!w|kfkoz{rKMX&;h$MZe(K~^Ozcqmi&AMike>~kpy@E ztO^|N06_TyOpHX!V^Nw5V zB9IAzj#sT#0@TWkPBq2b~keVX%1MRQz}ttnm-smTRSt(RuU6M8F&i zAJsi+>!>2vh0`(-G&v=*qU9z>RZeO&;Tdq56pE+3N5Wx3*|1d9C4Ds5qC8I3$O&%> zUEKm8pRph1fetdw(IcSa6zv?{%^DD68?LwkFC0OkXo2+3annc~#*aiiB&f54a{}ox z_tVyM_TL!LAQZ=^$lnz@B#KPlAsOUttaWgKcvYM?Vt$I>nT-sq9lxll?JiWI6EJ zEtlhVKas?K>2$P*FgT|sN#9X`_u;gSFa{+bz6i^s{UXxLKwu5dlDQeS2|?`_YQ_nB zr{mjjPiXz&P5bgi%S%vRR}Lz`fh%X-^&RIe6(vwW9;B77Qvgqqh#sIG9!~T0dq?2z zY%dbV7(w^AtQ+$1RL?XovYY6j(CU@{RUpg89pdEy-z&hbm!8;zMBvp5Y4vH6VERhi z8ds#*mcQAGa3U@}(g=9;%J35WENvaq*OB-t-R4V3m@35rGh?AmY_-j{W!b(bJGEBb z7X+VoYlHF4Bkno^EO=bN@5X!k>Zl|rUTTg_wG-YKnvc{^`FyO=NfHKHtZ|5Ey$d(b zKJ!~Yhgx>}?+o2t9~Jr^#GkcS_=>`LhfT^}m(4l9VlqFkV_bon18{oV0j|Qy6+Dxp z6@syfO4DAWk47dBefi24n1oC3gL)F{OHQCjodNyTU>q(SX-F4P5&o4$MD(x0^4+Cd zooqnu=T(HmeIG-Auu(B8k^UC*v$&MfNGkQsN)|75 zw6C6HNCq!LIb8kCZqq>aVRNrT3S*FCbxl(sBnn<)rsc@5PWC1DXupYua%ILL`nIH# z?KX-lc3EZ)r2i&pLr<&rE+WK@4M7UjiHV9T!iVP2B2iOCd(D}=$$ve=;VyrXUXlrG8Zb=W=8Bd_jxfgUUg#P`~`qVzZ zz`^8<#ZLqxcR{6(aO7xcCEe`O@)hvn;gVe$YNdL+{%fAP3!f{^(kr6HUct$ zH!lKGN<6Djux_+7Mh3Zf4?-Ct``-q@qUGwK(4OhKl5;ubIGm7U6gKe1k~nX&?A6J_ zRIvia@$&a(q{>zZKI{=?j)Z%?K4mptJuzB&vCe6p+S=f)(iXG5OsAO&1`5t zPaFGsK|T3JHL#(exFGjK)F`b*9X!wyt+W&1X>*+RxsLQZL402pL^u_}aEt?c^3gW! zuw`~vcPSFS*z>9Fk`7sw1ww@$>R%J`bWFqMnvQ%nAqwyy_@m@a;|uC&OCXClUHEv= z!mAc-`=ia9W(9oE-aX#+?S&8O;eFDT{IKt;ElMm}Zvo?=O^MtXE$W%VaBBbe`xherzZh=oWg`|Z!!(keF#iu2L_^)IIJrsYbV8%j-QbapHpn6gF?ZI_{w@e z_~j5Bk^?88=Ke&tH)o-$!Nkw9lcn1mJvb;**&QbQL|bL9cq1oz2;m|gzgEWEGoG|3 z=a?^P%z{Y9zdo(N+sFeZinWSrjjOHdHgk1IsR|~{7iW8|72>QN(H^4DD z$S@zorjjst~6dWzIn0RfUANwD4mUT@ z^SW8JptoG-)8#7ocW=$$;ANX(Q=$k+uP4H;*pK+_eG4Wu^7Y<~BCcb8-W4o(+^zvx zK!JA*yeJtVN9dSjDaC*MCfemX=7Hp$RwiYy zMJ<0vd&KI%;0>Ptn9qk?w+r00GGd5MXtUVpmfx2*crkivtQJ}?f1DaD=g{Bfxitfe z8&>6AhRb+g*V7mSF3dPTe4Wv13sJ=7*1DM#cUGqM@3`pHWljyFeY0YE1s<>ZsRC*K z?Dl9AU;SvvmB-5fA6^NcN?KuU#)9eYTVU{(;eMoDOsT20F4w9ro|gR^8S=R;2?V;* zpDNjD5G_bN>oBi<^zk9BE}Mq3$Kp^pF6vfi<#aOCwH1-cgzM|?$LEn}StOr}iBvtz z1~7Lg91*1EA0$vJmBQIl$8Epn^Vl0M*GUpRd6k{sG0{rlbE?x+&=oqNuRZ2tZ>?^( zp1@QWE56{o!?oi*h*+azyG#_OE>-hzRB(=gqT<1>{wD066Z?|K5bb)k+Jf@D@0uBs z5&PhHm-aUV-VhL-@sOg6uG~1PM9Xqd@?l5G5{K^T=y6bOruLxWi#^f>l=reV*!5K@ zZR&WD9_IuArwE-azJf3XcU-{L9j*@A=mg`yP33*!*;75BipF&HR_AN5Za?miR=Yi4 zF2(u&Nfx;w`U}9%9L@OPOX0!dKO69zZ+c7-!dfb-PZ%-VcY~X+v_akHnS}?f46EdW zvRs|ln)sZ|=}!#%BIWLhwz>VhLo^l`3e1{KUlywLA5ohz!6(&ek{ycV)6l>!l+6r? zjEvM2DCA_!olW;M+^=;500GOwfbgBTaGV!RihID9>E#f8prxyb!%Nhm*((Y^Z4#P7 zELOW}BNzZVWdDU6Cb)q=T)rI5sL2r*0M$bS^G*wU`9UfwTki6&fZ*jhZ1bygftg$i z0B-vyD;hVvb0O1W@>i@>sGa_}Ue5lU<_vE-LZQf^)91J^U)9DF>Ej26Uer%(~?uHr=9A3TVEa}q@UG_Flm z$lHl7-szBgOMdJ);lsp@g}0g!9m zWE3gn?2IU~NbQO%CU0^hs)Ip^lT@m^LFe11X^nn+LPD<8Ops(`>hczCd=ei*ZhR+$#+@bR~ycg9eE zy!}eT`lDE-VT490hJhn+tv*HRamj`qYPS+Q=AS|>T@r?IY+oInc^UU_9N-+|1@gDB=?j+1H zejWdHYPKJBl~$xjH59$7%tF#}>@sixes_P(>^)(9trnT{Lo=|!Vs+S{FaOalamaGT z2D`g=#b7z&l#s6ZdZp>;#$kHb!KMuN8|pz`Qa2^ zAtBIaM>#{+Cm>04Q_wP#1i*%-d`posoZ%XHd zOuTxv-s|5kCs>RW+XIEsW0bN~JluV@i>cH~daSf*NQ&`?)N}|=mSV&1y-Tu0k3kCC z7jDXJgCZ;i37D;v`+^r$hCIcFs;VOl#+-tV>`KJ`<(Bbk#~xI|E&3ix={GAb{daSF zB4vvy=;oVI>gLnZ0}ZVS2DNn8q@b-e1F^Cp9IPMky8fk+NXO#$619R9gcN<}xZ}`l z5TSQnDf!D>69#Ff2^`&N^t<{zjgS{$_^v9iIG zE)M5UmtU!!>Z{#e_&8XHo=$4w&qr!4=<={AY4h**cs7iS&!DJuXN2M^&*cN2Z!mvz zml|RzVt;VPV;Zk$*B7K2K?E*D^LCoOyr|fyjYhy$5>*~@e>`){AfGvrQ8oA>Y~*^; zS{0`@Y!cVb_^0=MN3v4AWG`g2a7G)sW4te3@rylsF3G?&$X4?Hl+kT?#(iQ6P)mLz z92qq|G?3tdYj#TqYyM$qxA#uKxf=Bc+KvTfVFdU@sO0tzvyoXOo9*G&o0!f=b2xN~ zFThwO(m6&-K+qP)kU|f{BqTlA<@PC*tT)2`H^nTl_xZgt_uUa;{;_5{LZ}slO7SFw zvU+4o62l_vNX^Ee)}QneO9}pmLvZvnia9!+EaV2tV0f(;f-q#(1oFUil>|?l_o_Ip zq*zD_*-!|N6@=@Jv{kQjCd5p*#5eOIG6UQDp;@_wWH&R@WQu~i*O#Z;^OY^+weR_? zrv0T6#1;w(g6`7MC_iO2g1VNug*o_(p~8&|5!cCc&tp%0tG6$EgV;_&y@?igH$hvs z8LHAtHaRVO6y|=&Q`SutYkkewF+d^1o#)8NFYg_F&)z#l#?R#_Nes~X$Eg{ajQq8;q@CPDh+56SX(sv;bKv=|dY&DPmmICh`& z!n+H1Zt4}^CBn^@+|NHYP-lc{HHaryr#AR4Y_0<(t<{0^`4+F?R9N|Wz6+5xHJ!Mq zh@TJB7?a?Yt;T<>)vj7^F{yDdM(%mz;I+>dSWaK_FCP+8Dc)>a-b{8V8Ey6N^ue5Wl9n8MRKwLA>(Ww5tG&g34-yo=U{X!0FalhcCIpVuTMf8YO(dzwy=D;v;nn(OCcTTm_L zZ%@d`Y|+%uqYD~aSfU6(Ms)%oE&k{^$pbnN{4rTApp5i=(sqG=Y!MQ#H$ms>s1w@m zVhLHQl1y&LnQU5G#e`KEV{U5ORAvyV;{b_M$qw9JIe#;yqFgwSfY*AX*H38t!Cw$8 z`pDX2QAHM_f)&O*x}q1hNJp-dOZ4)-2C)**Tx~69cXu)i@ricslfvObU%St}RDT+t zaIdjluolwSHT0#UcWr8M7(OxeBfzbyi)+xhXk`PA1Uqanct67Vm!H7*tem|9UiNyZn{YsIHy2 z2zLeSynjlfe|s$#TLc`p&-{_J!~^}*hs9+tpo!W5)GreNic+jjT>%F#VAyml^n9=dFf7aEHCu6(TdY-e=%dp{%yt!Hi2|&@%QhS z7Y?(ps$V&NDIUP4y@dDWp^^zfCL2k4CXX$0fK4O7>vw%asBUk#?g+SHkj5UZyT?a! z`=TyBU3m^u;^67IPS3;aZSWlXYuX*nP>nuxIiCouf(vuwE9rM$Z=b6p4aW?Qt z`8*}2wE4$CNEH+m(0~6PBgvC-mjriAD|1Zh?H77TpoLSUlKnlW!2(4wJ*PkV<_-#v zgGF$9H*qh2Zm}i92SBo>Uj|_0SJ2O~9dBFS_SkvpRY?IQ4NSno$a&wRK z))MT(>Vv{xS;@C801Ix2{iw3n`F$a|&2xwIDqpZCe$LXhNip~>+$O8I~NbiMy_qPYG(7Z=2T@}TmZVV{wJ+~c48DD(ey z=vz7ewkOO*#r%8hzL$vUzcCO2Da}8QzG={Z7v^RKE+hZBM-c%aDf{P`&^x^dLhYaB z1BQTxlm72oID@+jnZKje$3`XnZ@_7}|3wwOasSN{+dlyO-=R(drhCo*nbOz)Mi0dM zDfwsGfR+AxOJc;O{$0RH0E6onh`#|6R*oou4(-nh za4Goy<+c(UCqE7c{pZXe8K-|2$Poh&u?378@Ly>3lKtPM{~HxP{oki6_;1IO5Y7K0 zDxMqr!h{60y83!OBO@?C8kiyeMuGj$Bp{#d@p1C@hhrgRGkJu~&8bnK@%BxA1r^67 zj^sc8oyXo+w<999Jffey0dRu-A*k|ozvP>mnyy%qlF+D>rQ#%S^Ifg-ru>4{v>9|> zhK+x|EWnd9)$0{iQXK+ugA)B3j%T)q)r)6Mr2JF#i+HpC>@}M{Ffeem*~$Cya!QAk zl+NJ*EtyD*YGUGgw!{#<(QH>(L^eO^1Mv&ZCH|_W7EN>`55Ii}H~J-jPa1ma>W+yN z>;lC*1trTOi4}!4Cp;_H7}9YL8#>+epKx=pHUE!0?c!wao#ZFfd^A2bKF(lwAa%A> z4LTT!KiD6NE?=xb;zDb^-2-MrTyDAE@@qQBpDpL%?b*(SHp@5-!V|VQL|gRKOG^Wi zoc`d29C2Higx7TV{?u&~xZ}@g)eZ{}FxL#@UuMNZLQH~| z2GaA#N-$JaeZ&9)MW7L4KYxFsc#|L^#{iC$wy^8`*sHr`NsN@F?!KtS-JKk5!tW33 zr)kLw#eT)b6k%aud;h%pQf9M-pjyY7$Hzv#lfvX=%(JsIp^a5fg9jfbZfjrQ%+Qy5TC(6uHT(1wPFCYM`Mi3IB4rY1I6JT8pU1R6nWYkKv1Q-43dFVg`X z#h4(R30;(_)lZq3FvwqbqEk}Bnw)uVk2kAIrhqAOa%ggPEVCK}yhjx>7@3$*7TfZh z?Yq%YSMY#a8=>}HxKAUPuNGTk-6mw66Wq|A>-48P%fQgI_eYPecfN4aJHmft?9=Oh zpiYaF+MHHTl-e|aGXLF>QC5T9z7T+vx(S|H-U!KwG)FH68d`z}(AcV{;)9IS$Q#CqhC7JI zW={s?a{E1Q2Y5xA2O+kLGlyHvZ{YB<=HdR;=fapUoTDmUqNdZW&R%Gxlm_C~6_x={c~%C!e~^s5 zUNH!jJfL%pmtmhls$~FSyJGd6q0s5_7C$vYOio2_a|WuqGSguA>Zc%Erp^yRhjjI2 zU~ew+-_SxLgzU7?BYmoUWVaYpc+LbNxj#hL3}?JswAW3)vG72_ohY}@4VE<#F-;Mw;e4yeRj%!a=WiIIZP$}fo=?Nz&Gp?^D z{nYSwY%G_=sAH%?*ZtGA0hh~-(BAIuZofR;aatwY3kg1RY=t}w6x1+smUs?fPt}7h zbi=rffODUuYJ$CJ-3^nrUqFwsEM>#EL*J-MrLOWA@T-sJm4ZBeBm9KmTIeq!llH#8 z^+kr37Cikh=T@|N`n6{EnAq4Yt~u0awYnyx>>qZMFp_E15^LKu1$4y37O%QwY&;lE*B3ie6d?V zLIg1EU0oCoe&7=d>BY^QP)XB=R3w6sxf>xqH4$-t|F`%?BDgZNxT)YK=tglWIr>f# zc$!pL_r>!i<{B3LSmx})QC=cu;kDqBm$S3%zy1Tjx_rF9%9s2o{?v~8#B(Kesp`Kq z{?&MREyagHJ5j@zPa$D$`3}kGcqsC$If$g3Xa6nu_;nIjb*ainzsqHGE`P~O!6 z85t6*@j^e7JbZO^71qj$UiMn`O`5R%LEQB&0HtbaX=y0G3!wjtgo#NZ+*S0clYTetntIhCmMIPkQs=Jz z{7ImCj_;MEULMU#g0(6my1fkMiKnWz%VFTmR17Ag4CVFPh-4>*=c3u%3VMd=3RpCj zSOJI>S3Wkv)QD%DVn6?;5-Uqwl~O;6q(C;+2P`yE_m^)-CQjC0do>sxgAqA&#nx28 z7G`nb8&xzFV8H`ZhkF=GGV4xnv_wvQwvJhmt2sT$j0kN6lD8z)vcx-h^&}%{3t27r=Nr zmD2__@YampNOsT9C~LK(G#Nhl%%L|NM{<<(hzGqa+jor0h*+7MXy=V(CAM9E<#e!K zZPXy^^ilMW48_g))6#4@@-dbZ@gR{f1-G{#dP_=ikgP&TBTcYqaQ~p7h6?tz4b&9l zl&GyjNK^7R4$=!Ec=zJA=YM1@AjQdWrDFm3{C5(h>tKqg4R$o)T;BJnv za#CuozTqcJf13gUrbTBpu0J*V7nd7{nOrpra;)7Ge;vC!z9~F6o{XvRd_B&kt}-V6 z-MKz~4G4R!JCF3iM@KPlW)pwM&cj>MGyvD0U3tw?8u_8tjs29hzKe^ZAlSw~ohBB# zL;d}c_4bT)f0OcdYz)qJ=0%LhKD~w$KKb>DcKQ8{wf^x#m~nAv%}4X20(=HSjM*i# ztei1pl05q6GFF*075`B?`Sn&g^GR=JXXdc25wjyYAErWsqiIHnCLuU6Q7WyST7kWKXU!ddN@DYJU7b)}rZOGPxM$Mc3$O`gqWEZg ltR{cP(aEpfsbkM;&uh3=LMBaUYaqa%xUh^+g@CTl{{dHF_W=L^ literal 0 HcmV?d00001 diff --git a/windows/security/threat-protection/windows-defender-application-control/wdac-wizard-create-supplemental-policy.md b/windows/security/threat-protection/windows-defender-application-control/wdac-wizard-create-supplemental-policy.md index b94efa4c7c..77ebccf335 100644 --- a/windows/security/threat-protection/windows-defender-application-control/wdac-wizard-create-supplemental-policy.md +++ b/windows/security/threat-protection/windows-defender-application-control/wdac-wizard-create-supplemental-policy.md @@ -18,4 +18,111 @@ ms.topic: conceptual ms.date: 10/14/2020 --- -# Creating a new Supplemental Policy with the Wizard \ No newline at end of file +# Creating a new Supplemental Policy with the Wizard + +**Applies to** +- Windows 10 +- Windows Server 2016 and above + +Beginning in Windows 10 version 1903, WDAC supports the creation of multiple active policies on a device. One or more supplemental policies allow customers to expand a [WDAC base policy](wdac-wizard-create-base-policy.md) to increase the circle of trust of the policy. A supplemental policy can expand only one base policy, but multiple supplementals can expand the same base policy. When using supplemental policies, applications allowed by the base or its supplemental policy/policies will be allowed to execute. + +Prerequisite information about application control can be accessed through the [WDAC design guide](windows-defender-application-control-design-guide.md). This page outlines the steps to create a supplemental application control policy, configure the policy options, and the signer and file rules. + +## Expanding a Base Policy + +Once the Policy Creator > Supplemental Policy type is chosen, a policy name and file location dialog will appear to name and save the supplemental policy. The next step requires selecting a base policy to expand. To expand a base policy, the base must allow supplemental policies. The WDAC Wizard will verify whether the base poliy allows supplementals and will show either of the following confirmations. + +![Base policy allows supplemental policies](images/wdac-wizard-supplemental-expandable.png) +![Base policy does not allow supplemental policies](images/wdac-wizard-supplemental-not-expandable.png) + +If the base policy is not configured for supplemental policies, first edit the base policy to allow supplementals using the [WDAC Wizard edit workflow](edac-wizard-editing-policy.md). + +## Configuring Policy Rules + +Upon page launch, policy rules will be automatically enabled/disabled depending on the chosen template from the previous page. Choose to enable or disable the desired policy rule options by pressing the slider button next to the policy rule titles. Hovering the mouse over the policy rule title will display a short description of the rule at the bottom of the page. + +### Policy Rules Description + +A description of the policy rules, beginning with the left-most column are provided below. + +| Rule option | Description | +|------------ | ----------- | +| **Advanced Boot Options Menu** | The F8 preboot menu is disabled by default for all WDAC policies. Setting this rule option allows the F8 menu to appear to physically present users. | +| **Allow Supplemental Policies** | Use this option on a base policy to allow supplemental policies to expand it. | +| **Disable Script Enforcement** | This option disables script enforcement options. Unsigned PowerShell scripts and interactive PowerShell are no longer restricted to [Constrained Language Mode](https://docs.microsoft.com/powershell/module/microsoft.powershell.core/about/about_language_modes). NOTE: This option is only supported with the Windows 10 May 2019 Update (1903) and higher. Using it on earlier versions of Windows 10 is not supported and may have unintended results. | +|**[Hypervisor-protected code integrity](https://docs.microsoft.com/en-us/windows/security/threat-protection/device-guard/enable-virtualization-based-protection-of-code-integrity)**| When enabled, policy enforcement uses virtualization-based security to run the code integrity service inside a secure environment. This provides stronger protections against kernel malware.| +| **Intelligent Security Graph Authorization** | Use this option to automatically allow applications with "known good" reputation as defined by Microsoft’s Intelligent Security Graph (ISG). | +| **Managed Installer** | Use this option to automatically allow applications installed by a software distribution solution, such as Microsoft Endpoint Configuration Manager, that has been defined as a managed installer. | +| **Require WHQL** | By default, legacy drivers that are not Windows Hardware Quality Labs (WHQL) signed are allowed to execute. Enabling this rule requires that every executed driver is WHQL signed and removes legacy driver support. Going forward, every new Windows 10–compatible driver must be WHQL certified. | +| **Update Policy without Rebooting** | Use this option to allow future WDAC policy updates to apply without requiring a system reboot. | +| **Unsigned System Integrity Policy** | Allows the policy to remain unsigned. When this option is removed, the policy must be signed and have UpdatePolicySigners added to the policy to enable future policy modifications. | +| **User Mode Code Integrity** | WDAC policies restrict both kernel-mode and user-mode binaries. By default, only kernel-mode binaries are restricted. Enabling this rule option validates user mode executables and scripts. | + +### Advanced Policy Rules Description + +Selecting the **+ Advanced Options** label will show another column of policy rules; advanced policy rules. A description of the policy rules are provided below. + +| Rule option | Description | +|------------ | ----------- | +| **Boot Audit on Failure** | Used when the WDAC policy is in enforcement mode. When a driver fails during startup, the WDAC policy will be placed in audit mode so that Windows will load. Administrators can validate the reason for the failure in the CodeIntegrity event log. | +| **Disable Flight Signing** | If enabled, WDAC policies will not trust flightroot-signed binaries. This would be used in the scenario in which organizations only want to run released binaries, not flighted builds. | +| **Disable Runtime FilePath Rule Protection** | Disable default FilePath rule protection (apps and executables allowed based on file path rules must come from a file path that’s only writable by an administrator) for any FileRule that allows a file based on FilePath. | +| **Dynamic Code Security** | Enables policy enforcement for .NET applications and dynamically-loaded libraries. | +| **Invalidate EAs on Reboot** | When the Intelligent Security Graph option (14) is used, WDAC sets an extended file attribute that indicates that the file was authorized to run. This option will cause WDAC to periodically re-validate the reputation for files that were authorized by the ISG.| +| **Require EV Signers** | In addition to being WHQL signed, this rule requires that drivers must have been submitted by a partner that has an Extended Verification (EV) certificate. All Windows 10 and later drivers will meet this requirement. | + + +![Rule options UI for Windows Allowed mode](images/wdac-wizard-rule-options-UI.png) + + +> [!NOTE] +> We recommend that you **enable Audit Mode** initially because it allows you to test new WDAC policies before you enforce them. With audit mode, no application is blocked—instead the policy logs an event whenever an application outside the policy is started. For this reason, all templates have Audit Mode enabled by default. + +## Creating custom file rules + +File rules in an application control policy will specify the level at which appiations will be identified and trusted. File rules are the main mechanism for defining trust in the application control policy. Selecting the **+ Custom Rules** will open the custom file rule conditions panel to create and customize targeted file rules for your policy. The Wizard supports 4 types of file rules: + +### Publisher Rules + +The Publisher file rule type uses properties in the code signing certificate chain to base file rules. Once the file to base the rule off of, called the *reference file*, is selected, use the slider to indicate the specifity of the rule. The table below shows the relationship between the slider placement, the corresponding WDAC rule level and its description. The lower the placement on the table and the UI slider, the greater the specificity of the rule. + +| Rule Condition | WDAC Rule Level | Description | +|------------ | ----------- | ----------- | +| **Issuing CA** | PCACertificate | Highest available certificate is added to the signers. This is typically the PCA certificate, one level below the root certificate. Any file signed by this certificate will be affected. | +| **Publisher** | Publisher | This rule is a combination of the PCACertificate rule and the common name (CN) of the leaf certificate. Any file signed by a major CA but with a leaf from a specific company, for example a device driver corp, is affected. | +| **File version** | SignedVersion | This rule is a combination of PCACertificate, Publisher and a version number. Anything from the specified publisher with a version at or above the one specified is affected. | +| **File name** | FilePublisher | Most specific. Combination of the file name, publisher and PCA certificate as well as a minimum version number. Files from the publisher with the specified name and greater or equal to the specified version are affected. | + + +![Custom filepublisher file rule creation](images/wdac-wizard-custom-publisher-rule.png) + +### Filepath Rules + +Filepath rules do not provide the same security guarantees that explicit signer rules do, as they are based on mutable access permissions. To create a filepath rule, simply select the file using the *Browse* button. + +### File Attribute Rules + +The Wizard supports the creation of [file name rules](select-types-of-rules-to-create#windows-defender-application-control-filename-rules) based on authenticated file attributes. File name rules are useful when an application and its dependencies (eg. DLLs) may all share the same product name, for instance. This allows users to easily create targeted policies based on the Product Name filename rule level. To select the file attribute to create the rule, move the slider on the Wizard to the desired attribute. The table below describes each of the supported file attributes off which to create a rule. + +| Rule level | Description | +|------------ | ----------- | +| **Original Filename** | Specifies the original file name, or the name with which the file was first created, of the binary. | +| **File description** | Specifies the file description provided by the developer of the binary. | +| **Product name** | Specifies the name of the product with which the binary ships. | +| **Internal name** | Specifies the internal name of the binary. | + + +![Custom file attributes rule](images/wdac-wizard-custom-file-attribute-rule.png) + +### File Hash Rules + +Lastly, the Wizard supports creating file rules using the hash of the file. Although this level is specific, it can cause additional administrative overhead to maintain the current product versions’ hash values. Each time a binary is updated, the hash value changes, therefore requiring a policy update. By default, the Wizard will use file hash as the fallback in case a file rule cannot be created using the specified file rule level. + + +#### Deleting Signing Rules + +The policy signing rules list table on the left of the page will document the allow and deny rules in the template, as well as any custom rules you create. Template signing rules and custom rules can be deleted from the policy by selecting the rule from the rules list table. Once the rule is highlighted, press the delete button underneath the table. you will be prompted for additional confirmation. Select `Yes` to remove the rule from the policy and the rules table. + +## Up next + +- [Editing a WDAC policy using the Wizard](wdac-wizard-editing-policy.md) \ No newline at end of file From ad081c331b090d9a1c16c49ae8b6824a124cac81 Mon Sep 17 00:00:00 2001 From: Jordan Geurten Date: Mon, 2 Nov 2020 14:47:40 -0800 Subject: [PATCH 015/486] Added the edit policy content - how to edit policy rules, add file rules and remove file rules. --- .../images/wdac-wizard-edit-policy-rules.png | Bin 0 -> 57280 bytes .../wdac-wizard-edit-remove-file-rule.png | Bin 0 -> 46086 bytes .../wdac-wizard-editing-policy.md | 54 +++++++++++++++++- 3 files changed, 53 insertions(+), 1 deletion(-) create mode 100644 windows/security/threat-protection/windows-defender-application-control/images/wdac-wizard-edit-policy-rules.png create mode 100644 windows/security/threat-protection/windows-defender-application-control/images/wdac-wizard-edit-remove-file-rule.png diff --git a/windows/security/threat-protection/windows-defender-application-control/images/wdac-wizard-edit-policy-rules.png b/windows/security/threat-protection/windows-defender-application-control/images/wdac-wizard-edit-policy-rules.png new file mode 100644 index 0000000000000000000000000000000000000000..fbbad28cf2cefe4e97f2058a019238189e0816ff GIT binary patch literal 57280 zcmb5VV{~Or@GpFlOsq*Vu`{u4+n(6AZA~z-ZQHh!iS3-&wsSMj|K9iGyYBsP*4bUX zc2)PTy{mqO4wIJ^gNMO_0RRB-65_&&005{t0080$1^PufX@cJW`U7!P6cYqgP2wDX z4ZfKQ$Or%cwb8I|`ruzE91z(*)lQ0091y5Ef8&(>coo*Fu#-?=iJS zPo^zALu-Fs2@_xWU9j;?ofYX%)I>z7PqiHRr!q7kFVu;x*|2-19TwDJ>oJSt6aOre zgNdu1%hY5tL&jf6_ZSJIXt znfb`BFu~V&=hWXNUKAYZe`avA>oXs-Q56Y8&rngnIDE}d9XK{Qjuzc@iq(frzg`dk zA<2=M4gT>V_%P!&=VH3`qj+8JhfEF&-JzlNhD%9G`|;mw7u7CrfaKFB6ckjBAc+@s zX@cD9WH`F53fls*nfV5sZ-Oq5`O*fqGAJM}yq=Rb+Ry*VTgak4Bf$UY+#4MT;dwAQ zK4(-ia=zdHFsQg)4c6VArPJM9oGzt#S|oOPs5pz9W$S3oVb_}Q$2;!f-BT%7PSHLiKM{SW5Wl>DMw5I5iJe+jGoCC(^OYiKmzDtNS2J4J{O#K*impREne$e z<-a27b8=62p@&EU{MJlKUETq3R^7cQXm~;X?}wOkTp-~(8_pmt9=mnTuivxjCt5Px zEki4ndQiej5o%vbWwL~xz4oVNgT&Ez+@^CX4|n}{275~VRXR`lk>xzv;jwmdzY*-tgr%#>AvRqT zz?XgQ5E>p_liaojyds{WW{Cc$`TKbY zTuUNRt2fy<8(7Ini>MbBQiaf}D!l9b-iG{%$@8_zsm0X~P^}H#Lcy#yFpr+U-~KMK z210s1>#m`=!J=7ILt}b}}?Oa)fWtlz&31)RbH0jZVYM`rH0+GTz7^ zs=PSyV5d{W5VEr^zdbRUU?I@g=| zEn?|=E+@0+w)+{P2j~7U%)2e`TlYO7VxBF2OPFuP`xbBwjqe@rcz6+Ogkal9#9NC7I#v3rH{_*XG%yWjLfzEGo&L$CGVF#UOS7( z-pX{bYyWz*-_#ch)tmc|8uUWodBizBLxm_|5=tAS8%vftD1HX5(%?P8VCcHvq_Md? zK1Qy=1{4!dTMlwG9G&0Be&*_#kdXpJ`_EVX^1}5c_Wsc1plCD$=?%~&U?y=n@63kA zF{2T1+bW20>@N3}a@}k$S))PBF4;RkAk5B-(s(_@P1w*z292PQo9V2VwVuW<7&ATZ zE<7o(H>1j>&M6PJ zEsg^!;%A|;_0`Dd@6+byPaQs>3w;pLVquvX&Q=bE&Z zOiC7*gU`2K2o6(f=n8+7?u8e3erYDpB7@WU4`+4RKiid!abzzTF7A=7D{3H_l zx|4zynQEH78fDRLe>@UXnTsGQ`m{?v6P`juiNYLdqa?-=na0?Wmh(BFF8gzs?g;uf zGPJ(dpPMkpyq!GI@jA_<7p}yE)3zKgU*6nqJiKqK_L>X5jp~vfDRs$KO?xt2Rj8 zSFwin(s?}JJpy0#Qa}RAjr=A;{0|B75aEIyBR=brM!j9mHk<5X3D@NrYDtE(8ZGa% z5AnD73iKm)cJd6!`wB&f7X0wyXpp9xOupeEKx%kb?C<@7b@s0#`0Q6=gCwKlNyKk9 z-z{nhV44%XoMD?@tGTC7m_l^hKwj)0?V$$LAxfjHti(SrK}6cl*l{8ucY9fKgYwZs zLWnG}S-{uFqwmLSCR5JylZ=fMS;dvaEH4ss`HU)<_T|$ed$+WNEuFX=+3~Y^>+!|B z+v7>tgV5tp0_Chop1rw`S}M%Sc$=Sz3}oQ5<^ADkH8CPQ-K{9#o}@SJ-n>f0AUnBh z1xb=aw`5Nqr8}f4!09E==)e5sTdA75`rzPTFF-4)^WoY3sHy)foz+};5Kv+=Fgc=t zhB^ux{wIsHq4l;d39Wp2T2ilI>|{kz+&G}d^4R{)imMU4XZlYR{LupZiy9n6y+S`J z97Mi;{)-dDMuWtyy7yg(bP90ASq6-$-^K-{5dCmUv;Hs}_7Dy;M;13rzrQ!KToW1| z9-`U&`eRn7`S+<8oerxXcyC^Vlbp2>Lr^y$HBC*WYq_hpK`H7j@vD+;goG^=?(x1x3^nha%|u|* zvUfk|DV}Z_Ls87;`TfN zx1-#@7lz<_H|?~GichsXICZ1>h#k>C{3dYos|n@b9F#D{h|7N@1r{@AxKz3SP*)kC z$#5x4UkFmlXKr}U9%pH01_@@2TRZUI9Rr^r_SN5mXO5hPE@3idi)UgCBfsdOz9>ej z|6#)ttpAT?%=v%#FwcTu?duVINn7CmAGx7r{#IoFt?n1titPUu8vK7qp#O&iSC{!8 zrc{PE;`$F={$KJwU+0SSrzpF`x#HIuaNN#pZj4*<9zVijPlRdw!3-7 zK!rY>y6d+lHQ>r!2qTNDi`!Qk(SsL?k-Gve;34Vw!h~caS;x?+D2}@))VrU#Cc9>l z%}|Rn*!pYcY$@Eq?;`vWq9sJSK+M=NkExQYr9-+gNM6zPEJ2b8QLFeb%;EYSN}>MQ z2g$c>pTnPUmYwe$7n?zU#De&&fvp^<&&XPEV?*}5sIS#2bAjj!*EhctarK}2;-cPV z=X-VW2;%=T=CPWzu`IP`)1rQ&#W9R?Lk~}s9Ci1GYpad*x15op(hM`fod)kdE5m)g zIzC8WJG%WSGv+V1E!_@^3BEnfRi7pafGX28HQx(_s{uJxIkgOO=8ooJxB2}9@C`~Kr%GVQ)882Nbj{hJmEJZ~Z!_GR&8K?1pjtL?dDa&ATbOL9B z6QjsEa$U!LPZ0^T#8v^Dn5@5N*b^$Z7Mx(H*vL^`DD5=HU4w?##x!*0Spl#7?#2u5 zls|Y(N%%cE=6)usm9?MKotAz+^dQUEeaSU|G*nxPOfdvQUuJzHf;mpZmxf4~L<_i= zgM`vj@#U&$;8dJJC@8)WTuLSSed&%5(YN8;>tUzSxSLnGARz=>BVsc}IwO1#QThj# z`F#lE?g;@mHBU%P*rp9WW*RIl>b3@ezZ+$Ej=u<_CPJ?X8g0mYgB6L9JC_%Lg9ez+ zO3Y|5a&Y#m#e>68S!(xu=#4cZiK62Fiv+f|LXqZt^2Ftb1seLdv4F4BGmbhUHxF^)UJbaeaid4%hw_G~*kGVibmVgQ2L2 zhwI~DfneC%^2p z-yPheks#jZFrHKU^7{U_nS-_(u1+i|3pyr~Y(}SBII#E?iG$>L4&%*)1WU z`?`5x_|Ct%LNyTfyc{E3V-f_NdWXroS^Ev3oVR1|$%Zn?SkH&=SNX}_yA{Lh3(|@M zVWdd!v~FZz40tnf>cH}VtD#t1X|0Z|B0uS21x89eVgtUv!yHTo zpYp9u>xb@bB_g#zroLxw!lQ=x0AjXUq zEc)ZL?>%}HBqPMgj908okwtM5sPxU8WSOj%7f#lczw_An9AlQ0W=YmM&EOJ@d<_sO zLU~5P_`99tm}{0E&^>HDKPGLnO5a)WNZxSpFH^n;17gt7EoTd1T5OHPNtdh=_(=;N zbb3$@&`r$tglFG;Fi6cj4puiF2Q5$=E~jUA*;7$&2LDH2fB05inzUQserR8X=jFw? zUZRA!oZ5W|VxU4k=F~4B0S3`8^M3W>$mGs=NDhJ|SJom3(hztENvcsgW1@&%tA;}y zXAG4uRsf}I?E7c;Iq`Y0KqtshXX$f<%BRkAVXzuqFh)4yB%u}acD5WYlJ3zDA~0(A z=6m0>3f^wLIt<%ttQ-Wd%-sZW8Na)1dzB-ALHQ<3f^NO9!q%`}p^zcGy3v_`^Fv;h zLvYecoyHUL@D?HY=U%4z@qH$nep$t|iz!u13}A+%(^{!#YL^dP;psH1MK7tlWVaZs zP{Uc;HlOp3tE#~jNdC16-RFl0@ySUN(iHro%t%1vci`|FtU;qurRu3Y)%ZMI#19_6 zaMVsaX1!1UqG2X5=ph{tc_mP25SC)M2DM7pIm=_fVY2Bk(>FLr%G&?5I$))^caf`zP%z*=?b#J&SZ0V~N}J76RI9GE13@CcR*3HAo_)G}8}AB%A|`}8L*^n) znd|LlMCJ5E{<$jVgYR#UzvAUF^fQbT_^b3Q-II>%@}U?uQW$&`~vCE`>M#;@; z96{FY)J%B6hL-lEJW-)?4b*sXmjh2I$0(*f`85ZzxnHaQ+O8XErL|RXu6C4N=R?bK za2#tn@nSoN6HaeAX+545Pr&Uj?p)ryV0~^W`~K4dZeM+N_ZM;szRtLI94W6MMsb0xj57l zH+zARv}+ocX1V=shIi+|)fX5fK+OrC67&}ixK{Gtq`I?pc%3ah=(L9Frgi31@fO63 zQZl9Yg~8KP(}a$4{Bl@RB_0^wADW-njV0{=JYrPNBh35Q-a1E~`wmKfnH&e^&*xM) zvSov{^hL)BUsHC%R!oBOoHMYze=w$()=!m=bPG@3 z)>l=9JCtDjLpwe^A7*PSzh$~c0DZ0Zac|_}9386XH|+^_wgOx!yHu6h)^*(QT=+>H zQJrw9(Lyfg8ow^~FaBYmr@}9@R4flw#__bp&YMDV`m$t4E&SMW%Ly!f%1M^GEJ; zhmVBFF^erfEp%;3;)jJ9t+xI+-vJGWC8Mc$!mKrBOV*=|`p*X>@O@-d9^~s`S^%WS z2M-TaFB#j!r%s;3j4@OY{~k||)V8#$Hq&XbV?yR21+u`Hp7Bh-`vk(;}xFJd))9D6HR*68wum8qRL*E?4H8r?U#0?@BW5zqpV)MQS8I61i*kHKZP76XNK#0iKnMm9 zzle1Mb$eQA8a=i@oZWVvk%Z&Z1+U2DE8V7GT5VO2getUzV16lwauFfVm8UXmY_+3r zHD~8kTq2iF^Vai7MF;3(f0LSGTA-l~a&@CM5&MH8A+)4G1s;W1NC^MscFDlK#rD^r z(-thAhEyFoQaU1`{;9|p^oWb{6aCn2*Z8A2X8S7+2<7`i@!grn*of4)fmJeJQO5v2 zG-K-H=6Oz3=@NL3*|b87k4zw2Xjf>1AeR2@9r#HwbM1$JN1wFm$%Qy zTRwKhFYCc{^@~+TSNC(H-F4b)Xm}Xd;f_Mf0GH0;cyP8-|67nSF)V0kD_kd}0yu?k zW>xIh?dv^aiG;r@%NY;P1pCB2q1p{q|JR7|n;>EIV2_!TKR`nhEfz4A!<36-QW&rP ziQP2On7PLa*Uw%RKlBpR>4VY27Wl-jhN?h<$AyFJagB=lZc%m4A>Fa~02%MT_rydA zr9ff@#FzcujpwoW(8*SEmF(v9CeHhoTWrN=7m}b1lUPaF^FrPJmn}gax<-(FzV>3;+5^cIk2DMl!Ro+&?_ntkfBot5h;FG7d#zLnhP1DY~qvuV?2*{GHDzMy%G zAibMK0N!mib+?$u+B!;j@B7TzS|9`*Cpsh`ePSE>4(<-%W@~H7Wi#V*0LbL{cIE5?q3oJ*L(}hq&OimNsZyHf^)TOSz_ExJJ8YNUWv#HUw#x(_@ zUrrXU)5~jkXtx?96qnhqC-+L45pi#3be9a#wh2?z>+I}0OwNQ#wTl|72!bbWPkWiy zpZTJ3<{pSjQNF0fo{8T+Qhg-|oOnfc;GW6~cyP`zeJ4JnSnpKpcYw(~F zqyzSa++^>2dokB49lH}7q16~5eUu(Jr-UDsNjHyVyy-w}VMQ82TOr>U(w9ip;Tl6& zLeK)I#%L6J$cholUdJbqpNW`76lmz*O|v0aC-_E7<~P39PS+DB@X-Hr30W_e0e^uN zYJ=1Gs0Qf~Sa!;|!-qqm&S4u$s$!nV%jIlP41`I~RsQ+)Y4g!>xn7PZGyUzvzg6~7#~=%0yOc^MuFM>abGcfCW8+>fX30@ zob%URb4*5tma?+2&rvyJoTVzZbZ`@#b;mYC6nd7`i5mgDZ{pGecmZ)w={B2&x{o1A%6AK)5ioeAeMnhz$=Cs zr0?Q`8ERFJy@;EuCor(8UJg&IMx;J5>cVvKu>=j;(Wql=x&jaz%Xb57Eed{tKjU;U z%8YTkWRIiO)@c2v5)Y-mRD7^n%#PQUbDS{-nUUs2xz?A|mUaUiv-bj|uI3sud~{`J zR+DD#5vmSDd^Bv`#*2eQ$yu%vgGX1actFFE4Rm|ATEnO_Rc6W!*_<;m5a17AF5)-% zkHevyU?wk)Yhs0zFf4JhWSP$r@HX+}hXPHtv<-x+oGnOpp0;FBADf6ZNBy15)PuV9 z9l~ad*m_k2SPIXYF;KomH}5S^onvpmY1G508-|b}P^b!~_AMb=x$ETTG$FL>SReDe zVnyj@ueqL5bra%BoHv|YBc{fee7E4U{N7lsuMrPX^JgO6DR4W?yPe$LYfJ1E|J)L2 z2!8F}s+t^ShK(2q;#M%qzPTqWxI_Q^`4buWep=mK^6g*sEQgzj2=u_8qcrI6)^+d6v(z~o?{clr zuMwd{5sxirio2nn)Fry5idEi4Eb7g7tK!F(1tA&(WZ0&u3=Q9!5Ps4F%?3t5bTpr# zQg--9bSxEITO)wKJdFdp+i7>El17O%f{%5vXm2b-@?Q7dvtM@!1b6d5MCEi3x*zXc zCJPmWG`wG;Q{8*nab4D z>S5m!(Z-@_XL`--B`RkVW6|n{<);HGV22LZY@=(!XsNPol{rFx+sqKOr;|(}HtT}6 z3=P*m+p&4&d9f3d>CuHgdpn8S*O^W3O(BfiNlz4PsQey+Fv^ITu*7I@-nM?Rx& zf&AZ+00I~hvdBLh5KbcyJ)NfQ+wnZrBtOCg=8Pw7^f8k9Dx7Z@!Rk!3a4d1zlh`~H zSOFClZW1VQT5QMS3*)y$zp_DuBNr_72r2FJ3lza?cPZ^dY&N!RJ4G9R%(BVps&JE2 zY99MDUzSkH-%ZbVi$vme=BAag)D4MTxk*L6(*zcyJ{~E*#$m;eCGJa-D?OcUCAPD` zXy9`n->HwbTmYP~12;PUBA>*pB3+eOLe>bDyj!WE6v?B;kq6kk{K(%iig{Ds%tp}R z_R_IO=_RD#N^1D+@6mbEcru*|#a#AF>$|xmYkCtzwBP;T1JrV-ad|0lo5gyP8K}tK z%V+JM1J(W-$X7?YEl2j33X*kcFrPmBYtIt5rSjxyY_fLWmvSqL1q1}#B@lBVMjx~h?fa^|QYzF2!Ho_MB9k=4-nG|INt;|9N9bXpV@($Z4K{kp`ePiFsxf$al%^^)3= ze)gi#jqg+;VfRbG2kC9!F9MDs6mdN>V2&6(uc;E8g;}%Knz%!?A~R~2H7tuva`MeO zg^`SSr?-g(;h1C4AxvC4CEF#q&OosnwAFV*dm<@w^5(wENkI6*q7DTDk=0FNKoPZh>d(2cnaA?wLsrHj4ebpn^n{CY zg{S5@HQgoweFn0)76Nkuu^f(sH?~u?4u#KTg+Y8_z{oid0=gC zHDq;b_x-O?=6FH0w~Fr{K|q-WE#z00r@njHRxR52QDWr3J@e(NboBH!=_ZT_{thWH zw=pw_{I{h^sAy<^=ckWB898b$=M1i&R=l)-stjG!m+JBJ5QG>8L6~`u`e{@K8^a&Z zQoeN>lmjQfFlFoANf?7sq0WS_-{f2OaD1)}3J-NySkS(3NRcy7--l!d&%DVIm5Dba zD!n`1lr0XM$=-q5j=^$#dN~9l*4xy*8{nIe*z%njkhJZnp|kQlPl`^z%yI1mfytYt z+&o9qL;4FgNUH5UZwK}@;wB^5ZaCRR&)^lenKvO%n9Kis&8@7YaeQ%JLmqZ?o!@8` zvR1`G^^CLxT099$O?XQyBqz1r0R+lXL_E4XAkmWxJV*9_>==+)^=h)N5E1R;2;pp{lNH60Hq@tO@Pr7ofAWV+H%SRi$xK|B4?D!gDgwAFWlb-e`Wj z4=t}}W@&OVq9Xg0`e(t|jTFNIINxw>eAb5!N>(;Rti`@-f6`LgA%sFpsoqMx zd<5Q3-EgryxK_BD_^ge6Al?9cuGNPsIu(i)=iM1bCn0rZIgq1I9q&M(pd+!6GQO#X zQ8yDl54{O9J`LU&;{_ZQr@L>J< zNh}9Qr@NIubN-&j3ENfSX{K)EU7K_B>}hhgm{s1~ADE9vYHQ#g66)LT)1u*L6^tN( zkAo~YkV_+!PRsk8B#N*7YWdb5XV{SoPrS?XA@|V}hfeYoJ4Mzw(b$D6#lsG`5qWK) zm9XifD|rxz4kmc3_xE;yNX*tiFT3f5HNrK;3p-f#b-lBgcrnoGs?)v84<-bs)t8YM zXm+54alv>V42QmUChNC7!Ig)g9j%2Hxyw-N@|EvCYZbC7IqjXN;bjZ+M7R-26$atM zyYVZGJ31Q(vsB`al~XS(T8DawDYG9jyi5BUc}mGn=WZWUcNu z(DjCn5ap|G)0K@wn$j)&;by#7*I(a3uN?^~@LI_%=3^g~e*l1|?&!8dJhY0J?nGRl z8V6qi2Y@u8Y!$J>_d@dTM@|rn?9iodv9s=@-Nm)CHLGZTeVdxT-xzD*?(ok+Y{;V? z!L*ceysvm6r~|?|!aS8Dhs54RbVNTPi{(e1*&vDP!=}mTgcD{a7V_g^wE16O8pTrk zopst|q3(N??RkLT%h2BzEv$GMn@~C>Xc2`?fRaJ8To7uTme7^%FLw1Rr=LAZYN8Cf%RUxfaDCB|+@tzP{@(hyNKg_(+ky&`y5#0ux_?51>~O{XS< zZ`}|Cnh6EUAOvR7#a0PWl^|CLKApBUr_S#Yj3Sb)f+YT77S8_48}+oF`|wCOzWxb0nXZu6x z4aEe3Q5b5T8z1DxG8>|8eS|W}3SRb}1sdapK~@!m&zG_o;Lcnf#a`;ONd^`PT9 zH2`vQ9x9GDCmO{NZI*SQF8F+!S&;FUMB7ab19=D)*!(65A#Y!!70a3{5ZHeFC_Va% zKGB)D(U7{Ik+csSx(#GU#`r2a-!6gwSKEC$mfvew({Z!a7!~sC#+r8VS-6)S@Ez`c zf>Ivnzhi7p_2ny&e7mae>lx|uD+a%GK%E?(v#j5h~ zehhtk0jj^B=rU>nCEbJ#PLdO@_S8?7I*zz^6huersdqR^%arP%CAQ`$(dmiE8#BR+ zQz?pDDTYJkfZQYGniWLV`ai$&QMRM_)?BSxMSkiIj5-h7+XXzuc|(`Jty~&#es5=| z8K|DXO|STK-Gf+CP%Rf?BI6H#^fCNBvJPp7_1iQrG|G~_?E&PDLQFD=2)2`jEtNX`G&&_x5COz*FP|s8>&e^OCV@2O0|; ztg1PCQ=&$Q@9p5Gm6%Iv4*N3-{_a=u0!p6^&1^)vixv(88Wz4ncRLbqGHw3FEWpKA zTy=+I3F)L#fu5%!NYN7)MDaP3^7(}_{Ie1pN9NOsd(*;lF&+t0ozYx0TUhj!#(7P) zuHGQh`Cn_AuA5yKN%T%7+-d3>Dv5_KO2alq)T&ahdiXW!fXu2 z9ZlJqgrsuAY~__2QkXy~O6CYS!AeJ!s2-${QZ=>5pf17T%$yo9l58v($CQV=hybsZ zZ0vI=pT6XSc1@YpHSL7CGj^DrO(DY(?2cRtlgy7&GQ{rg z{^Bg7KMC!OIW_1OJv6|u$ZB$^*GF>TzFcw|b|=S~5Qs?1mt{brT3S8$%k2>DUw%~O zZKg>nSAGsN&9TWz`)BGOH}+#XSRVBQk)&(9_BNVj##AgiqAYsQ!f58O#6rZ3o!^Q? z5|m5aK?RD3QVScFOk=zm#43V9#X^be{aR`_saKVRg@{t636$z(-+u5)_f}rrUwQBk2*dzJB%rjyLuUU;ue(-(5KzvO%A$wFZ zZ{!ODDBi7;@Xjb1W~y}W0|TkyLkDMU;2JAyCEbLU4^OAmS{e<_lNUt31Pel@Y<&ss z4+B35Q+3sRD}s1|AgOqI{>z!(lZnO>8O(rq)*%?2`Vxr!6i2yEhF6{J5%ByI1v%1t zTU++sp3^0mCLtbNOIZEo^C$jP9XovQz%68+WD6w9SCgZtd%6=@$S z!ySH|4)JSu4Y%Z?_U4c({nTGSEaWFr*b1!Se>t60=G@d_oQ#Za{)P<2C5wY`3}-Rm&6JEpoG{j-smBJ<(NN6(YG(Y_s*cbN;< zmO5gO1ZUR*@k47G$hv;dDb;k4|0)25IM9NZqF)zZJ%yC~Yhf3tg8yCrUo`_k{QndN z%t*4gC?PXPku0|8j}uD1q3Mc+Oa)-_%D!OGW>W|INffh+7+&88;naP@3Y;)b?kL9j zx1La4f5|slvxT~!LfV;R5m>z3)Uvq~&w6V)+a0%Z(K@I2=seJOh;nZoUxffBv-;tu zS`>nQ-1Cbfy=gDOehNfgb=xxr1tU9t;UeyfzN{M65wCx(Q#HgmJaHk+B`TlZl1~^tBH?}j_EP1WE40(+Cbr^;UXe_ zYiNvorOo~oU)8aR@CSKt$&Ggc84J|ArZF6)(6byLX{Z#5eP{q~;fUV|IYxYVic(aQ$5-@z< z?+9+Ck6N4Ayl~IZMt{sip0M88T`uJeTc9Y>pg?%<%#W_gbqXK+*H6ZWo!y}tI*1BN zkh$XsoH%Ja+@+P1d+qjZagK>Bmly9)#Z8kF5_%uiUaROzs&k#Hioh;bm9c5LRuh~o zMJ>u|2UmQPt_pg)^MGY@-LPJ-g%EUQKyUWCL zu-eG8*+|ljyybK2N7HQnEEH__InD8gf(~9`{u6)QzpRQV4F zOva4=YPZm(>n?v_9XTVk@tk(d#Ll^W(39Vkn3z`9ReiAUtWAKx+&& zS{ySN!xXBGKBlo66~vDjn>360;HkHYaGJoMq{Fbkpt;zDmk)xEzYnt^vEi;aCQ{RO zr1dLW;uZ?ZV9B-lrFXbmPM6jf2O_*$x@Ohpky#GR7cRQYVJ*_zDhoxMs^uGB#;($- z(5QKOE^ae%KB`P;c3xgGMX$l!kVuM_AIPBo{am^nu+QkkC@ulQ!7MVC-h;sfeqh{n=?d-N10=! zJmO@aL1Bf66&~8IQ6I-&nfrHc#pQg{_Hm}U`dAtPg}eafZ;pXe5n48^@*lz2AZbMa zX{!IketoJ_qvGhn{&5ZG-VXG$`3i{**>#HKu^~0G0@CEx)v|P}bTCMw)&zmn^qvAL z`X4oJkZ^(cuyA9^jN$!Il7ZIsPn5g!Qy@gD#{1G-5Z5vI*6q&%tm;a#mihHM2y~eg zANLEMXy`6Cl&D;GSuNtSdCszJXi0V;Zb%z*{@M>WQzE$Q@HaSY4{>|1-` zduj*L7zcV5aFiC*3PO*G>Nzl89t-{j-%r9d!2W#96Fuk7b(jA{WD=Sl|c+NQp^vHbrn3*^E=a&802Q)Z04IVltNqF-`wA%-r z@{R96_W}g3$Vq2Tj%TUz9{RV{F^+T>V5Ap?Dml1TlzdOfA_`?^z)&taBz&=CVVB+E zwgC|A@8|3K9^38ct5tavCmC0B#r7LXD3AxPAFfm!8nSaSv}CIrKwatd!?(knz+}aG zRas7`YO=ItY67uNRb>F>9yzbdO=E zRt-NjLZ5LCfA1|2?2CM|89`X_Gf-A-I9j1>yk$J6=-_c}A;U@^pe@&<&&d-y6{ni3 z`(DiAXAE3(IO9N7=&;qq?H^y`nJD^(e_Q*&vZW*S;m`L;ef_e}sqxD_I}Ow88X{0& z4h5z-5@%VckXfU1iocp`f^;{3wwnV}a`T!j< zGYJ!RS)FEi5f#rcf8-Pni}J`J#V`47R2BqN1#X1bUtT-C^{V7Eu7|n}ncc)$oAyjN z_svOgmbscd!<=-K^cA<<+(#Y(pprkJlOMFiuXHci4F;fw6aD3pJt?+~)IvKeWv)7L zCL~)Q9v);75Ds^8102t-tj~(A7Dh^E>l({^**(P#qtu;^!lP|fTGr;>#c~OpP7`uj z`!Dv)6&LIunuN}iA$zuZx9TO>I>fkWC>IO(o7c-4J&pF>ak*RuhPp5HWm96bA?1Qz zWN{6eL4y&^Z=$hxjSuRK8-;|(DU|BmHV)?e%QJ&Hs{)WlB*i?7w-Gi87KMVipYv61dpSivint=b2cw)S? zKfh~AD_|Xk+sR0^%W0)Wg5CFollQ%4eqO}I+)%31_iW~N`2AIy#+;^`ySVDN&}X1P zF^wbsLajQA64-m132BuJ*sH4*P5dYyp7eIgSk9b?!SM<zoGVT^`Iulp zCYr>WKU>an>ni#&rHBhLvrJ7e^@a~iA8Ou@!D0caTiX*ttiwoObIy-S+Rh ztLe&c4n>}>d% zA{0#3>1)Yg)&WM{Za?eH7w)ZlJ+CY*(`7_GPtP+b)M2G81HW1qZ)I4py=pzBhbJ&m zJmxpOj)=38Jxtx(jp14bRa7t@kcTH2sL_XS5!+e27Jj<-jZOAy_pv?9S3q8Qo;IkK zz)aB)h3K=7J!Q=wZ4^7kBQrkGF@2&DDj69|amQB5$S`A>ET-X~Yhbd}=$m#B!rfEJg-- z4_CJMQ9F;U9~nuA?dY5B&?N83s1{q<%FP6>U#FjzOIYXf_+z17Db>MvY~jMxmQX~) zh?Cs?xg}ux|Jc194-wjo&IMv$q>yUJ&Zj3n_&>qhmB(H5JYmnRCajbz^Fg5e%6;F_`4lq;66KmShppZZ(ahHF)_N3~1_EbQ& zva0NWmviB?Mq2+tXO7nmVwhZ!EN&dw-iXbTQ!FSjZb0aSMN?hkHpA*$s|?d$P(w|b zm^P|+rp+7wNA4RTvD-z=M@#EpJJ{};EuD1uO8 z1@0c69XDhXy{tASbUMVITzN}}ctg;G!eKGl3^BkJySK=#_%NNEtiXHf#1;NxV=BS| zy;B_!c`tgkT0PP9vasma?^;9be9)eU`O07%*Vt`WSnMM9)l7~Qruu)-6C@{PE*YqS zYg2%fOALF^PdhtJ7Ao1L@gEGUX?a^;Py)q_MzOUuUU)ny_FOBW{c=3sT@|8vOeZsx zC*~JcQWruQGrqT$h>Hscp>N%51%Nyomig`OA zQRVk0_A4&D-$w*}0~(=)ZqF#iM(Z=FNt={z6U&#MUb9sB{F+=*DFNx(o8GBfs!}ps zjleV@+2*D{${fKG_x?naf+CAAfHAg+>yF*kNy&AO)>-vxist)eYd-jUjkSUivmT$+ zJYB7H0pEszTmW41FLgP($?m3nVgW1FMW6{w#3+c!AqqRGk)bD!3#g%8k$amNvM`Rk=Ct zP}Us98Fek%aKd=Wv80@~dI8%fUX1AkU%>9oC{j^uD|wO8Sxi{?tK6->kLd_QpPdaI z6H)E6h8F7rQYwzmN|!|SQdc|Soe?5wVnY&oF4;&1AF7A}!=0lUMo}dRIZFodf#^%( zOD3^oW0@Lt5fL!?tAV?U_f8n2b8^sI!x*swLiZZ45BN4H)@^iFC*5^%LrG;!W!^|*H8D1GxFudi<+VV;(K zbJdOz+KQ|J%)l)^7MRlIv0QquPC$=M8xZ~-7N)2bTHC;^09vupl2Gms7OmfM2RXdf$6Qf?Y26}6O}ps_sNKz zp$-y{r_Q88z^7I^au=u7=s8M;>#d20x^GxxHhfSS8V*8;77e`&+K`lD@~uJUb*ZO? z`f9Wb3=)-Ht#oXG0e*}CSk_ze$CyqROk}JTPF?8hM3|dF%6R{7NlQSPbw z3Vg~p%Enc3-Q+)BRKL#CW9oj6u0r}1CMn?-&nCIZFRA|4#Q8AkfP4}XY4#gK(CC{Hf zlk-yNaFZJ0fSBDOBT;>a0|p&FIsG9Jt>ER5?c=-iusL&mrP*zs3{0|oe3-&zJm%j^ z{aBqSrb%^Wj%}G=F&jF8*V*jCYZM5_tkm&rcb7fCs8gvL7<^WLM$YRzAU>2Vcjb9l zO2z72A40TfIY`X+Ew4FfLdhJC!s47dG@2iso#mac(?B}g=UkYpw4qt!s-C2S?xbI6 z>uT4`7P=AX_q=~JcgU@b_dHL_x7FGhKI)==Pw9;BM=omz^al)cRaneBy1G_t_Md1V z>q|E%5*10OR~a%KOhz_V;Em~j)S|E&GyE7G#Vo(v{3*p7;R!#l@CQ|$zFR{jgRBs! zy|Pl49B!#gw*;!7$gp0wE*|!OQFhirarF(BMgk;g(BK3J z65QQ_TX1)GcX!v|?$WrsLnFc6-QC@{Uz_>n+ufPnf4i!yy6>&J)%`r@oS(s?-cj$~ z`H$m%$L!O#s|`~PJBk@Nns^&Royz2_eeKzd*rYdV?CTx}UlgIGcNSJi;(zh?flBC@5B4Rd`!HWia zzCmxoRJ`EmBCwRLOM*EwKGBty0b97pW7oHWB6`60Snl$CILovBdS1BLa;@ZRXbbZV zYaw6p6gz>KF15fnn8%_tEhI=*Z?yue7ZpV=J&<-J%il{o+`7Z`UYkUuJs=RM{FI0l zvS%w@mf`6CN#F_d$V^_Ym-b^iWJZ(Q^GIaKORgSABx3910CwCwHq>#l*xgIi+U1TM6*FQ&11LHoNdQ?*EUj#M{mOU;T*(=>Mh$dRgBP2Sok& z>0wt{=K$wGraM}vs#)?Wc$rXFLEi6|<{h&i4`i#AwOlR-igW8a9Grz1Fq`t|GQGJ?^j_+VaImiqZNf^dX~6pi zT~CB8l@d&>2R>zn42k@WE!nkM6fAttQVvIvMDe8Xc`wKFF-%inGi5}S)r$a>y*qHAdE8GR2>qhLI@UQlIx=YkbuJx07+O&O#pDucm!(MKY!8=ewO(5w3-YB1V9be6 z^J?Ad?H#OER#OJQMUaFKa?_{9Vy2~Le(Rw@Xu0EZX5GD*noN^!+o=g{L}pmvO30U~ zK%>f9y4x8YsS5O5W^ZOLoBt}+@3$8>xW~=eK++;AqI_BLV->pM%>Q($4zrGZYGL8P zS6Mk}gUNvBk815@+=b!tcZ!j9Cz`F$#%(Y%K=n3@jmvnF7K67Fi%ryFq)#IiB5F&5 zbkeU_GiO9@@9M4G$=cdreJd@jsrE6KN`Yxh9I@X>{Kz!LG~qEUEBhTu{(4WgtH#C< zTT$b-czsnXOrHplthwNf2$3#d+KkL}3_V@%kuS+znuXOX=%(Y)Rvf8J-L zjo}7V@{O#X~X_TH+Cv+^R~pPQ!{JN zNcdWNgQz+}P=S1n=8za)ze$kVs@*esI#ERSd3zo=G!$rQh-YT+gjWhRW9cWJb2>3K z(NN1P0irkV&Lp9)SLW(Z@%qEyu6HRk2vNU;7U-YCoL?YKGb?CvpdPlZ*ekr#m%eC( z33bjod;WQYB(8Vw7pGFv(*Xl}mfRvR;>%E+C)lR+uz41m@3L5R>`q;-(>1km`w_dl zytATe&?hSS8P_gF;a`fDuTPBb7hi)-mT5B?@^c{Q@&uf}u;4GQMHI?xVrG=nMpxTv znXZ`bbo3Eh;jfUJ?v}keSUdS6d!{PFX)$m9&WMPSconYKZ9Ln&+}P^AS>ZRcF8Sz| zb$TvRCtBEh8NCiAJtb)WMsT^DtxzIYYtLYJWq36-Ku!~^Z&qZT3y{e3ERp@{MFQfr z@-=qXVPRlzlZ(Q*69-J(ITItjGF`7R+^^>AP)MU>+S@!sBt*shfs-j}9yBtP;b8^1 z_!2~ki7_F%RzziTXki8(IegTpaR5s!3!1_Jb9wD?GG$rH-9EkVDFKXZ2GEGoU3wEU zK2GMQl>&}0pd1jISTSm+BGls8zW`e82eqt!0Il%gC#2rW;r4y{?l0D)g@zk86ZyIX z-p#1FO50UpGxc;h#?!5t1z4a*xL=oRto1~S2z|8>(I>p4)|$$(?!;_`VuwJ#G3r#w zszU+LBXz=Q3I?IUbfF4=#Z+7gt4Zzqbaud~0xB7i9Tfa`bnMc*A95(9J53N3{2npM zeC4@wg%bvG=1OF7;*8|zc0^*N^#_L*%fDVngHZjp*@A(()g5M-Kij`J(3iHDx-A@j z$mlnEKb?PPb+fcsFW^RhRDK+a-Ruq`IewiFezd+6ref{5A`&YBljOKGJ&t}C=lwOD zy-T5>zGlEQvCFbYOmOpM?_|`SGb$*w0L4d_A3TdGoeME-RIetP;EhRESWEYEH)LRs zG-$6sXy@piyLVupv#x-L@bMP!NS^yfapCOwsKpWCZ6dn(hkLWlamRu4Cko~e|U{7gF*WHNk@u+r13 ze!)=0Fua+WSEuIaAO`fr?FZb#Y5xZ*S9EM?MtGbP_Emis^^O!6k|zoU8_D+<>W!ge zI2G>s&pG7Q@aBM+_U@{?OLxoGH+yAN#acQ&H|3lE!j(}!$-Eh_k=*kzGd^q~K>M@( zV71)&Ogm0bxia8jZCNhUgXPp$0jbz!Fu`sy_aC%ZjQ7y*GF3X`WUbJPx{-T6dq=|a zN4?%CC{c1KlZDMX6~(D<*+Z_+m7Bvw!Vp%!0Do?Ed{g+_ov7eD4%z|mBJ%Er+5zn4B zwZXWh;JMsbq>Mjky_R1dJNE%NufU7EmXC+h`SmDqMpFL;rU zI2}V)Vadh3U0%c=968ene;`*`>w6$->wl>EiyH^#j0^w}Kb$yWvQSY$r!ODr>Yoec zL)r|#pMzR60_$CRB*!dSh#IF%Gq&jQ1h7154nX&lg9KHq`P0*k^pjI!yPT#v0|chR zZM{zF<*{dkHuhtNlf+MdlV&uRDypy62OGP)6Q6~FNHq3#4!G4s*}#CG`S}K|f-ob| zAM2d`@Vw11B0QW~NQ_WB1zIW<-4^VxyjQsY^&>U=M1&d`w_ihDh z;HN{eb1Wh657X4E+dw%Wn5<+$=4Sy7de5kSNPGqv3`p_vqnabcJa?i4y#eH+VtQvp)70M^OeOHOsjf{F%X=1SIv%7lQ zhP%!FLGT@J4y1=?3Nj>0%j~pnZ`mjhOrOCEfbjnZH(!xY-tUe#fJpN`9FE0}Dw968 z?wa@}>@D%U)1n;P-A?f~aUFe(DKpakql}lyDd^`o3Sal`s&m-ybiU5YxmQP)>B2LP z`?-nVH)2)yqk_5PC)(8**o)}fL9>@P?A$_ThuCEDTI=dCQe>(Vfe>9` z>n{tT@*>fMFH0a%^P`|(30`i_~D=1##(cgpViXF%X=6}E_U`ikar zL*Rfcu_kyrNpHsT0Z!(#SJLav{;0p7zwu&S7)L#ZIFChRv}^~3k~81$$?UFQ)R3r* z#Sooj<|uYufVCM>jaM0wx~i@O*g#n2BHIUffiB0gLbz%Cz0e{HMZUVTm`618iy8ON zijeI$8!`$&gNMs)!ei*EIsC{dxLfMdUDGjn-39YDJQjmdi)A&8m;QXIH2C$3@1ON% z0w1w4P=3ju4q?1{-goVG0f8b;eWoMVX@Hhi${y20CXQ z`tGlDg=-7d&syCh>w~MizAG_9F9E8dbFU<#vO=keQ z@zT{9^c+<04j!K>)Wb*va4)qOMt5;MuiqoS*oMj!NRmz$OS5VqIF^57s*o}H^pK&> z5<|(X49V*!4E)C6decfF8S^d#>h)qZ*d2y=vq0ocmf%Pf*kG$NNOphP0kPVSaJB9W z;iN)!{P`0_YQ&<7!;v;TZ#S>a(Ft(*ff#n(&fndai>K7*Wv3OEt-!XHPr+iCLYave zFS>K)+DO7JQDe<6*i}tYQb3&%OP|?67xc7Y$UkxEG}j8iqVtjMYZeIo$`mZ|Mof{;Z$VtQPBh zVJB|uA9-LZ<(EgtxZete!`tLDL|R%-hAd45(VjB~sXhb6NYNiLS^WD9D2Ag7%pAE# zmvMi9P%>=2VnywqZt_ALDiz9i%-|7qr=10IKTjmhGVW@Lt2TW{0Zx%UCMoJw&1<*~ou>Jbz! zpKowOX%^c=Xi4#shIjleEp_T*nmR{{!5&!NPx5eev7 zU06 zNM6ve-jR7fJi`k%)puGutZ0`w`zY!ihrmY$P<>-v$IxO!Bohxb(~D0+Gxowf5ejXJ zAxW3)uK1{5U45v80ZLmSER-GngQnr75yXZ^5{5%d@yxF7DC@EFCKv1mukg~G9xUBe z0;22lzl1Z7H>oK0siRb1!R%pct)H*P<^R{6ZP^Y{n`I2&l z{-!=Dhf6Joi>Z(X^2E^^!d&OsJ)uc`A+vmG@n$Yb>4@fi;{*GCB6+`Hn&CO_4rdPu zup`Co!4(T~C$T)N2u&lrdwysulV?ww$at!-50MGPUBIbUh(|CgE)6OQa?3UoRVhU!b0?$$bcz znMFp{Ppx;dwLLXiC5PgZ5Yu>+9}bI?XIyA!DI};RU|e$_2xZq?f=^@X+igk5oMg=J zJ^EI&wNf{NOQE+{2iWavkUFb3kLqxDcNV^SW`J>DpI#bT?Q5RvI#iQHk1vaC60vL) z+WwH5*+H|uy84=0b-(3n*m~`(mstRgi&iWOwSg%PXdcL)N|7Xm=hx1X@&`_h#d{L+s$aTba^knI**hMXP2Ndt1g=?LeV#|qfIn}xl~APy!Ui83 z8kki;sYfg*JO2Z(TLim#+5yNq!?o($w*@YJy18W%MHflC55lgXe zxd7v*OD&7_-}E}ZqVz>yrE?7pdZ`aOR`LeSMIQ4lyY6;RH|;1Csk3GFK;2MEYekZy zh3cXtRKibSB@Ci#s-YyjAm}t*-9@qQwDVs&DbL*j42_J?ikqDi8|#mDx0dG3#k&eM z)eD^|rssDm&s(CitW24Ye)OhB>;%~14YaHYd{V68Pe*#jMh7>m>CXSs580k$CG>o< zTF5rC&|}E(r=8FnOG+agh16MW)53e=JZ1ZN_I@j@<=tiW(B zJR%60LfbXFbZFalqebE6`ATuz`K{$;VxKc%X|EhMwkXY-c<$!T8m&fuf{fQW>;Vl* zJYnon6s&z*I-@z^JE_fFSu| zIopMkQTvq-Tw6C?wA~pZ&YTTLHqNHY(|8qSr}Dcn{Uvp7YvD2zE?;kksHxSzedEf> z=S5idlUjFqz;(MS$C*1^FJ?~b3zPnd#NjQUBd2sBD3;y7Ni~$?tPJQ_1tooU%(Kp4 z9DQ$}Z$aOBS%(U`{pOMuJA;s^TzUQi$qC>xS$xHu7?j za?S7wuve=49!E(w!;onvwbu7k=}S2y$vvFt_`Xf{@h8Xqy!%0iO}pXz=AI(HlsD=J zjf#$jIbc#XMLoyWZENeeeot1L==j)nRdNEh)Pe1kXtJ)8{up-W=d$rR z637so@>20xC0dvLlWID)i=}dRV{evD)TuhD(fRW~z!Bp$?3u9ex+}&j`4d8<@Cwh* zU2@2DvO$BehREaQh5G@DPTs3dlA}I}9cLmh1blRHHIX)OapudaApi%QR74(M3&7;vAd7j(rg+Mm#i4Ci}X0X63`>vX8~SwXj0< zjaZICnDUgQEH7MI zLTFwWBguua&UrkO8LuKa8pR?$Jk++Rm?LL~tiO2s);iRZl$r;N(;e3KiaoSO$6&VN zZiUyM5c5sY1Ri^XF4P@!Q|`Kp^-t~`GJYx2i39#;EZQ3EpSeX4SeJrMqnzn_J4jf; z&B4zS@&~1=OZZF)=_pB_zy#L8+L^%qcuyy^Hb}ed^=TuevU#0|k^$7&H3*-9Lb4`o zNRdVDPvEbbMdzVKFXPGMQ~biwxL!L}4T#Zh;Cav{Y}>cZtG^!q*oEw+?N(kK8|cQt zX+Gz5WU+CDJgwr-jEbtLXpoVXjuskVknKbOADGzks(JrGC4jvGT|}k-a7us z)X7bhW&mkBM zk3}bbOp8o$IdWy#L}^R+D73?|l&t&>Pt_KaSGx3&DH1qRHUFNf`AeHaC zoh;ShmvBujEN;3=OC@a7LLYaknP|*w=e}}lKmRUTq6E$s7Ji!8HlY6m9MrRu9yyyG zn{2j4Qbt9cXiQ+fkq20D`HuX#cIidYG33PGq}Djp?$gy2_`T+G^JUHm^e=nEicS2a zG$;}SOGs;*1cl~BEe@npuFd;JZ~97)&1m6FS?17u-%*VLBXyNM|Q!&(H4b}H{Dv(?V?RudG@Un!n#+tBa8|I8fEx7>rS*-R4Z*lZ+BHYZU^!Z|^ z7?#K6=v2pZKLJulJ8Ubb6aHK5nXhk7xXqkQ*CTzWLoZxglwIq+NUzXXTiVbKlRG0P z3jy&D@iVbi*Dx4*BqL z#s40nhf1di@SyokLaAwp#U$sEbnP;v2Z{CC(L|FVOAN;Ps;Pd9y{vy=%EmxPPqMgE z=R5a%w`{uSB7NBUxsYLlJ7F@xrlf~AYqrqBrwLbU%hG8uZ~y!{Bm+6vAQQ`sA>fQmRhP6BP!lOwxY~ z1iXP*bY&b0GA6dBs1Vq~L46GD>*pFGXru#giqs~Tmu36AJ??Y=f$3WN1BaF<88EU8 z2ad?`-H$FSHQxN-(%}Pv*VBFK_aa=;g-UPtUGhXufp6x0Z>6UIlf{}?@P`_47tU}@kBBjRt_`#4pZxXG2-i|_sX&I;sW zviz-A3#?5g-o5pM?(D`2SDlHqhtS2rlZeqSa&7~-+xc08$IzM5DH5J~GJ?ZBk;oGW zBuAY0N-g$Tvp;`HWKQQL8>O?T8cbnO&kqoWpnUyK7C$LYZ+{IK1rQ5?}g+7ds@(Y zxkQGe9slbm37lJ=9)&-7aw8|AkBUaW&>#& zj~|-L+91TA4AI~%DH-C?*mCDW_!u<6sh-yo^~XW!ZuB}OZ~=H6UVULpygZ;Z<&NK} zG5X7+N8B@$pn4!LLUFl7BJDk)S7+}4EQy=%zC-k;<)aaP`~hSMx_N_4_qd#zMFGO| za*;b@P*oH>hb|tka52L+gMVu3y0x->O(3`fH+b;j%~u|Yw@4u3;%cFkleK(j;&P_B z49Z)e{&!_|u}v7n0MIVW)i09qWER!vJ|wqv2{GOuruHRfz^Xkx;3{b}0ppPAUKHor zYHOMIcQ5RRV$G8H*q_R4i9E|vJgk^rBwmC$-%}PZidyTw|{2}IDo+tL7Zj;ak5DUI@!(h zFC!BRvsHY9mWNh03GBqvW&K7DfjESj1)RS*wBS_7dH${*`c-V~P;3&f;`Ea9Dc@w7 zuBRc8Kx1#`fK5-xhx}KqM-dSX-a(Y}nA?v$U>EagTU-9PxEo1?vKP^gyGu_$+r?y=Gu5SMTlz zGRqUJbhQTmWV%s6a})n$!=HT5PC?MyhGHmtI|kHrbCM;6}LOFABrbdOLYt(mY$7cMC1)x^}g8b2O$$PB|O#$V#>skx19Ud3qV-c+1#LI`#4J{Oy!mt{`oHMuSwk(4%*;;I@1DTdVGsN zr9f;+^j9jK<{{ncCXG?U`PijrormACtd@(3l${)H<0jW#tZ2bi4ha=%);^q`5Mi1aNK_=EiI9n`xU&u@dH$r=U zDRVF(hbg;i738|CT74HRI-enQqSR5jdm0g;ZjNmblxxU%Xovpv#aSf(vnK6?JC4PO zS^`3lLAz@(7hzu3--=*iptZ5u$r)22uf>#E;MM6TPI(H4@3=1NydDpPlRbW#Ju3qT zaj-?yI*!FdnSa=kQ%$~H4c-s^|)|f*%Db<0bsvwrl$g9le)faD{M{ua&$dBwyU)K zXX11o#2~0iO0eya$x+~)RZR10&b!FwB6rj~fD^>!g%50QZ?ZL^d|B}mIexA{vsms) zp1%{Wi~w3ybx{g6;f31@SL~RF`Rr&U>oaXe9d8IfK0b1EFhB+Dnwxe`RjEn@^_))d?VEPCVs;e z3)kAFLhCX2G$O~bzDoATa|h3wQ%WT5w{=ECEdXG)v3iF6*RRTOU0XIQG?r%P-hwC2(QDf5;q`{&QBVpVvtX@&|&T;$e6>zd5!jlQG+L6o0EoSfAWa@RM@E% z?z&e=uBgQ5Yp7xC2X2%cX`I4X4G8GC(&lcPvt5}@PwFUbVLowTZYk}rpgA2Xu@~go zSd(nGt-Q>oi*7+k?Coa)Eeu?&RKWMM>m3JLNOB72)xRMPSZe!<{NG<6qW`FlVFs(YwJUBaWKohNRZ7QfUg`&45}C~JH~o1)L)k4529*0A)Y~m2O_v9jNPSF=i%0nezr_7!ps|+ z@(+loIK=vs``AUU4>6$)-Rm<^hROwS~P0_+0m z(a%={VwIqZoYN%Q&#fCL1*Pyp(GGN>n_U_{1qpR+-{PoU>kxDGly-E?mZpmj z;7&}VFdpuU(T*WEVC@dBFd~($k7%`ll~L461n{TnEHL9%I@{~kb0-#qSM0Rxs$T^+ z%)B0D2jdi*hoLVGPF_ZCX%Ou<8sE&ZaH{`W@iD%YdeI%=uqZeB!m8BNi8;4?D?zyG z&iO0QBg`C$$Qd7Qw@Q`Ael^g8=7w2}J#LT-&58MDj+>@6mJEHfO*Kb>efjQqZ7CJS zlQ!fycg;TVfEX}H4StS4Wz`PI{2J~jUx$mEwYqjSwsh7Hyti2K zVsrt1CbtAh4VA+5y+a5fW_m%*AqAha15pr4BRB?G_PXCDK}8`ys{qB(MjgachKOI3 z)Pa!-6%Y^CGN&!3`GDJkm7*uC?8bAawFn*F!ojrRRkoq4g^?+}gtN3t_ZdEf;qQXL zAh!puli%3Z(lRQie5bm zW?aE6D-CPI1|wdWb1c<82a*?OZl@f~g`>%YN*Ji)%EbycbBKCKWQtQLJ`GG>TXl!b zWzd4VnOW^uM=*xmqq`%)a#4}Du@@L zqfyK#HIJnR>-yn-->kOevT4t!N6QG4FUD~=qWX|M{L%EGnYlIhx8DDuAi;+r!DNAf z2cZAmu#}(pbao0EM10p{bB*8L@dnqO0;OjHRs4IP3X6)gcE$#!X!e%r92{!hZL9&e zNln5;P`}2MZYp0Mwzs=7+RJ0wKd5RGuWVw948Uc=*5#|LtJ4OGC1R7I!#-fYG91@ef`bjr%y`9f zN3hIH(U7w#FD666vS9=}SzPm?H8~!E#o%^rLctE7qvXi^n3lTL;h&#;oTv4RcSl#V z3vBox0>+=6!_S#ht!qAI!7l;#rXwk}*iE-3xDn4@JLsm*{N%S8fEL;}F`lEF+>n?( zV-uT zQMiw{vOkh6Z6ArS>Sl0@Nxw*jCHO8m{7XG`dRCknl&xoNT&`KQE*+U?COJyEfQJ6mS(Pf!r&z7U6aCe!HeFH~3c1I75#;=Lf6BV0B_0;eU;$0`i{ z`b=S?!y-$xfneC6gCW%CMnYW0Lg%1M4vLk%`ZddSzgqs25s$?VP#!v{CO^58RZTXz_i;%UP!8 z3y8FXez<#P!5en|tg={@DUgXRalNG|SDnWGj`dv-JE@?coU!R=w7vCKqs7upicka_ zk;zxxSj2My?xcnfdV;0Z&ck~T_trSIKE;_w{xxMc3T9h%__z!QO3c#|w@^OkM>+k> zRGLosIa@X^Pv(9%6KzyVuTd4pw9&YHtk?M{U_QX0!cjWkFd0hQwOC==X^KqNGE@Ad z94wTCzA9{V23e>;42%h9_sTvJR!6!m1nngXQ&at9nQ$#CVwf7D=1ifV#LTKE*UIBd zj_;JafqU?@q6*2$;<^IFoS z#eob421u`F&o9VSh>m_{rytz!i|tADLeuqBSly9 zGYW$rPK;T_7?{OPbTy<#_`EGEL~#-;oRb#YVY%to6Q7ZQj}W*dFs9I~Qq7o*|TZG(GCou~3+{ z@zNi=!gcpxog!jI;7|1>e8#6_1bsqnrYh^fe{>WQLO-h3+SKG!XB7{z@ljMmUiM$a zm$RKp?%^?S5J&)Z{dgbp2iOi4OMdhR|1wd@<;t8Z^DRhBp@ZS?!hvd_z4PY0M{51y z<{pb_mGzGe8-4ajfs#F+lzAT>;*2TJQw?sBv6b{RT8=hr;lFDXG-Q(VSM2Re_s*~` z)7IXl*XZgHGR7fs5+ZeWLsL+ffrm25T4+cIs}i^M4}wuro%IXPZI5`vOFm1n?gM76 z($LvPZ+Z5wMjSt6gP0&`l8`NpW)6d+!M~ne`>44;)42AXK9k_6v8X6JJGClvYXac2 zcBwH!n>^bn$(eA9K6=`>hyv5;%VvWB)u^d)kvZTuv={Tvs{_)Fb=Z!#FJZg;6~FrM zV`;J1N;{?F;4Cv%%;#}Ew~u&)?+vRK{%WZ__SxBbVJs@y$J!|%1UI3d);gzc(don8 zmu3y78JmIucop&?WVRhr-6bjT8Xz$P{JArr%X`PrwgSo%FfJ1(tbI;JRhB=TB6rC+aZr!BypUJeQcUTj5Lhs95h-e-L|z2 z+MDqg#1b#C{;dkq>MEzU*Z$iCGv_J+W{lI73sEB}%v-xk)BSFF5iwExQ{Ri%%g(s7 zaM|JMI=R8X*HIi#FWlt$DS;L@WRA4<~utM?cCKN>dXZUj3 zCabNKGp5|3KcmZ-r8QEBmb~n}6AU+GPqX6l1ZR322RS}Dn~fS(Z^=*lkF6^d#iMh{ zqAZMV&Mf|?NfVureah};LBN?IUZc3-ggCx8_Nx3GIrcequGBn4YvGyw|5<>QqwvZw z$28*KWztn(+X|hqZcat9o4@c^@u(-k7YT=UdO;{a^0ugSC zM4s>Q;+NuDbqFGI&_T=_wVWpJ!d_2V2GfiR<#pocYydo)%h~iCGWOV(f7UP`ID+xh@Uqu(qvdMN zqml)W_VwNtO7^Cty`75R-{yxOw0M|;`}W$-STVRvoyt2<-Kwa?GciXh3EC(^y=dkF zXR@)tQ2rW#+~FhAc9!CRb;yrri632BK=QT0cM=K$JZX4(ZdTVMb1Iin)%rZMcn;_} zIQ4ixFV&nTy?Fouv1ZV$z%G{cf50eoSg&5>tp!* z+-NGfVa*YB%gpDUpdjIk`rGZXiaU+w0rxY^`O*1I0yQqHwH9tlKm}anG`jeBAos*H zrOnBl^}rY;s;04+YfI3L-}gA~yJu^Hi9!)7Ei<0Q)VTWeR7Vq6AvM+pw-22%I7bBn z(Q)JRm{OS+Yj1sUENAH*3-c3T+C0X4h`j5X04w6_KL#5^2!1D70u+esw3-MvUoa|f zaXcFFlrN!hS%S;M)ZMW-o4oGA7HJ$*pd+mqy~a*%y*s%*arJE$0xadt=MPz|&u%Wu zG3T|#XmC}gSM`S@OyMkA=9Q8>@O}ICw2r5SGw^O1b!N*W+cpfq)6bIwTiG8bnJt0hRSzT#-R>J%>tRCSq2gv#=~Y;Az==PYC*X>%0j!8{P|>6 z&(h&cgAh}P7Pa!iNfQU?!}uP}Jm0pSl{V$H_W4dd^|Tq2W9F6?fc`i;48bM)@AE(H zDAG2l|B?#i1W0|UT7XYwyE65P6L#Cuqn{|QjOrlXzSQDz2fMF$Q;TwOU`Eho!X!;DxKi>6;zM)?VfKoP zIx`EfanY&F#w7yULPL1EFv{yc;pDXXCq62F`BM-R0OvjYBMSR|v%6e8oT@i+HdmS$ ze=ra)G>pU+cxJs^#n-XWdtvft&-S#e=xE0O07Ur_$!sTW*j&PKv zzTV6$ZIiSwkp`ljd);ZQS{`zA-qqo1-<~$wy%Muta127Mzp8zch@)iWy)+(qTB@WZ z_9FZ>^^W_m(?BTGjKi-5hA5SxNx#{81G@=|Z@y?hA~0ZQh@}Id_`V18d>b=jq~kE3 zUvkBr7Pi*zw97m;B$W{$lPl=giIps*s#Tc4qB0?N4NdAl^`38!B3GUCsQwWRsCD+glU~PFLTIt?*OOczgA3q z-^ZO5*tmFtP?gCGP-F*Jd9#AXrnczf%~Za?RtM0fuLr*mI6+erV8|?RkGM0SzlSa! z)Z6ZDr6}w;??kF--3v2iPlt4hcdi!qgIfev=_3=k_4-I+%`^n%#ULg;p?*F%Wz?Bd zAVhz*eEgEOWu1Lvy@zB%Ut zzQt%}olB&>p9V4hXN{p;r;I*mH|~leH&_?3bzL?_+RvR@70O!&?s+8T{;whkB;?h2kC;^+S!&DoQ zBcp%2O1qB?pUXWE#nbuiAkAvQ$I<9{&J!f5a5)!q)Gk{_0g%d^2#y*EaeL#-H*Y<> z&om?uzf7z-XS`g&&Aa(R)w zv}BC_$_{~Gle=W^4fc*cVb6DEm#=7VZ;$f_jyhC%hrWg&6XPnQByQ+jEau~^ZTGvR zG+U^iPJ9;U|HmG|henDg&%63`B!4HSpw7{o7y$q=Nz%mX|)P5Bv7Kgz)7G;}(X3 zbDLBaX3qYz*z;!*L1u9T%wTzOX+e6i%plw!&g*r}h_ zj-GdyHl+@@OCx$UT9zZF)LFMWk7UFFhKd$IGe4%|Lq(Frk$7!wOzl){BYZhOtQLpf zG*`^E*H57Wp&Wfa`aDe0gUfZ)$D50OU3^>k@c;>Z0y;erC3Le=1V4{GoL&VTTiC33iv38_3c3c zF5{ig)aNi&=HqWGE9o=q@jE*^xw%Aamc{XzOI>rGR}a;BL5Qj$+j=TEwrpBxM~j!| z!QX?0rCY!Hxjt0AZn~@yezCv*wF4=Yy-tDYdBk1RS0+z)L4LJcOWoklI?#3T8P1F8 zW%9ye*@n-Wsn3#--mvFV%E68Pvb3bGPUINIO9R5dNTP}sk3bP`Md7n7B$!rr77iSh zh9Am3J9gxSe>Dcgui$OwM+~|$B>0V~2=JN>q)ew*F`CQp?ehjiTqip8PUgz#h+(=X z8_g_2&NUwO>1M#Z0A~FMuru|;YUg{mmYgr{&J@*K_2J#U`hm>v7N)R zUr$mbX_P5<3O1US=o!E@LOy)Sk{9y8QmkJp|1EPQc5ek|wVtv*=x}0%SuV}meTkWE znJ3no9NYo3bQOBP;Z$qw^*aJtOo@xJsaM}at@Q)<{n^^|F?d8h^irxg3Hdsg z)%9^xcb2ysQ+Prjn5Lb;m(8FS`avUNR@(1X1@;@yo>8QEp_Yf>HnIWX{M@b7aAb1K zTuT=EwU1a)s8Vpn6L;Zfo6Z=&O5P`?r~<1N4-#?tkFn-s?>K*zBeO*NE^BQz?#Go< z9h=xim`EcXH)wwF79DY6X6md2>pVZUd=2tNjUB?8ElWU7XHt z|5v?j=cO3Pz6{PrX7i1skb1ROr8r%LuqpcPsqKYuq;etcz-?yno3(|(q>rCPHsKxjYUX!>SoR%1;ScO(_FR6V(q*?DxdS(CvP(wUADaR5Y>x| zeNT{~#Q*HpXInAfL~_jghSTb@8uD0L$?b#i=5GIuZYTPV6AtbG=2Iu*MsKlqwmJAg zh8e`yA}wBa7V%<*L3G#)gN(HcPdWf-fk)N%jV+vWbQ((7xSS2AP4^>woyC$3@GSf$ zIm7BKPTo!k#DpJX>i3Z~Ts6C?a&=YUH&;u;b8f~`#U++cykECbzm z-uZ>ojg`!I;J+MlaO`iHc5QKRAo$Zaf-8}2EA9;61TI0BG_}|1K4&LDb>*wuub%p2 z&*8BdPF5QS(%XtJ5Eb-l=}=X4usA226R!)E>p0{|NOT(02EJ76RCk8Eoq!H2`wL{3 z2_p)M@urSI*zOviiY~xo#1&I<(kuS4-&1=>k=`M{?GOnNTorEdAMKpdDRlDmA%#7)~s zZH5q6l7^L}wL-qkmFXW9rPhnp!<~X~RCP2zO3WG$$NEjSD1@=4IyjC^!8aNxHKD5E z?w)%(`%gm!Hg-tc`m2nm$%wU9ks^iMZ2>iPd6Ug@kRoWwSAdY~0|o;54CW%X?)63u zCPQ(&hT&mH=e5&L`n$HF4{&U#DjJwwc;xYc}0 z#Zm2zR`S>B4Kvc88x79%t|#(HQeQ$16x`{OzWtDP5H%fl3#L~=XOc@!AKHP1cX+T@ zl7kcqM#Kx%`$SiElI?CSaF{IPadgqrK51Z1UusH2!}dix_a4+pVQMC{Fd;T>Y;3D- zXpNc9%+rmQKyUGU<;4X+rozr!TWDpBZgzdn7~Hf^{^P-$BT7Y@c|JgAN$p$nqR3}Y z{3`w`g;JoVNJYAmd5+{JQ-cOy#5Av`NO85rSRn^qs&+U@`;kyIJ~bI4L5(7zNA%R} z=6^BwR#9*+=eu zzE3qqRgHeBRb6Y&wdOY)M3zZ62J=T;td=$#P7P4nfAh^Puag&k{Bf|q?a-AgI4JyE zWwY1h&HaX&u520=j{eWKCdZwl9T!!D=Rq5^RMDq*I*@T_sVXZ4UcaHyOc`wmNUD=j zXSxhfFwi=?^Krv3sc?mh-SIef&ZyTuUx=bxV^WhurTp(`39(2Ye+AG4>XaJAFZfR! z^J6y^;NK{r)Gysci2WugStC#AsllNmbw;>}#4`xL6Fjr_l^M+|&f~LB8a^jl;|g6- zC82Ok3eu>=5c{>uye~}j7vih&)1y~fI9jh>TSfMf=xxY+H&HX z10rK!nqmT&8AnbG7x${(ssVSIeWWHa9fj%yjfKTs4Y;odVLguw%}ol)&nl8kifT^l zyYAh}Z$%m-A;1pY}&dA+?2s;!W9K%LF?HeFd<8EfDlFo$(6w zb@aL@x{JPNKnl9wGa$OFynbsEmkR@UAF6a@OR&u>FxHk16${J+4MZc&_Y5kN=Gb2t z6=Hsz_G1OV$cjP?#@SaJZl2)AX_zZTP7D`n!3WWB(q1XGVI}CyN&i=5XD^GVze|+} zojZGc*-TM|{kL~k{$gcya_yXc#R`%Czif3CfRmaWf6a5708n}Qu-3kW9{#_;M6aKW zzq6$`s}B+rBE|VO#$_jBnC)PWgxO!g!TYUM^3gHWJK0z0I$WpVYuS?d3e}%p<$?{L@DE*Ywx^xNMLc!p!!-n7D;#t(z+c^FWKI&-% zeJ9A*h=r2&9mxEjl%l80fRuMLcz~E%>BB+lq{SIiaj&%-BP}eGmpgt%zU2pc^FZ7K=&bF9+sx`A zuJ%yIC^lp}UdqPfp_UjHhoG3N7mZC!JEh)N2C6Tm_g2I1j1r+>DzMW&q&Z6($;plV zxLbl%6)@ZpXlG*RSEeiT)`^r<7R?XtjKSEC>+Amh7iI`zN-G^d@%vOL`6-U<$QpO) z_!r8gBO|kvAXX8qUM%lfbQm@rPZIIMb*(LI9`7=PCw?i0_mTMTg%5O~i%CrYKRO`| zm$RZbd-2vu9_HPikpVdQs#Ml-HUOTcY- zO)!3)L+!abc699CaeByYa!(6Px$GhI4z%|{h_uvZI$+ILa=PzU#othxB6!i18X&2U1obbsQ2TVy(LX(V_HNB^eEy-)hVQH0+K zRsMfLkQ9pi{)Ql>x{$uX{7(o{s^)V;j_2MBC{v50VNn5m-ltCJZ~ZYmgDG@2LuFk` zH5yE*_}F28BETXr@xkW*8-2tXg%#F|)Yig%bNX&AlfHpis6)=-Z}0GtsbPIZLEw*; zFI3GlrjyZiWr)4@3%cJFp%zA0CEezLz0C9-Ctyas>|Q?|uIvKvU&YBxW}f)?_-75A z_dd9C5-PMt+n49o??vh^uuTL5!27p>`4YnIiR^2i{RJOG@0^d0gi95QbTqyJg%#^% zi$s?bnZI8O8A@%P^8ZS}NakJM%Hnd~o=Szb^Sqm2&$ztQziOjgKmG!Y1zh~9B(Y5n z6fVPE2Tj|z788<-JXe3se^dOfe)$ix*|7*5?SxcUrcx4db93VEbT*SsPX2QCtbdO2 zNdCS4ii5O7<1tTxx^FJQnfh;687&%{#2fG3GWs^lDc4%7rel9B?)Luqo8L;qecq5n z{SU(!(Xs7cyVygh1FZhFo&P-}{U6bZ|K!z2R@7%;XO#MlJzu5?9w1<5e8V=X={QoZ zWfail4A2A1abv1~_q0gsdgT24Z+ER5v?#|tk{sLNcC}~CuRSi(>$T=7#FKQtb9rpl zxgUx|$b0wRQhQa{(R$k8wVXJXW(1eq%6$IvGw5mwGuo)4vX*k6sFgwNZ{=WjF|roKj2pMLc@$_NN9T_eKymT#f2q3n{6I@+ zYBb4+DIea`yTD7w9x;iX>h!?dsK^ek{tTTqLG=`6{qF>dN4u4)2L9P1U+Lrcilx-Z z@Cd`ftk0lV7S-8EgViePr-O%?LRnodlcO=6lil4;0uSUrX)JeJEe#V{h3ou#9*2kF zrAe6whZvmB#|=jNexcQS(80$>m=ZD~h)Vhsa=II|!vAL%G@%F=| zd>f7ds+VOgi?!`P^W`(vYb%G_+DzpgaXOrp1uX-KI5U_FjumC}R~er$gBgD8KK|@o za8WvIEj(^{-;Q|VSL%|nX&<88KFP6r>1yU&j>9?ttX}R`^!>c}+y`yr$67x#nj7bVw#}HW36iEoN=7eToQm0@mOTD9TE+=1Ai`9{Le8 z%B}N=*Qxt!z7}~B3Xy;cbqK=)N)b9-omRmoD+)f2ia`nSuZa@F-s8Xivdq`^>fAwb zJ=vIxRmsK0B4jzo*wk0mjJQsb@j(WQP*9$j!nE}C-}VsB|F|5^bD6YtK^9*N3;qSV z|NeaUSHgzn0Tg0^#lclrjOgT4OQh350o5oKNrN87K89OU#yzgzSm{N#dg8x@Nr&6V z=k`aTq^{2Gut^kwUAN#tq|Ed);>+gye{yL;sEESrVwa2Z;q61xN;`dBLN2B6nNKOZ08Ts#c8jo^{tPD5bWLdY;vwM_q*-yt@ovt^) z@S{g#{oL0`3+hMaQ>FTfR7;zs^5>b0OjmoNUZ>w? z#|(9CoXg7FoK)<)Eqi?v4V>tLP*aVY(k*5tmIjtNmh+xy(+UC&o1#J!2(i$xRV*jV zk*~&v0w~W?8?5w4R>+u%%^W8Z4I>R+(K(|WIPo!$O9>MMpLaUdQqxli(qd4v;!=|{ zAHe!*-o%}Z{J{ZUN4e1<`tjzmw6f)+&%IeprI$cbQg6|J`ry=#7rnJITWnxdoZuc) zudRTE^ms$`1WtmY-JL!uinN~J22xEj+5JDD>$DIZI$_gB{4%M; z28@}>)5d)1DKonK+2fL2EmmG#R*ysCFix>}Tzm^qFonnx&?Ua-IxN!al>LgcEZ+4M zGx^F9Y*btH+oU0q(#>%`X;8rWW~ybwhb>AJgNlvvD&tRJUfwT{2_t`owV$h>2R=kX zM;ejO$2NZP^=rm7-L`TE)v)H~h3I4cCtg3nGopkR&|06lq2w@vtHUb&8t4~qwEmkV z+R!ju1eN<_r!q~MipY0WzgX!I4k|;NHRZ=laGbXbWI&X6;JTzA4cm9n7xhx94)Ibo z6rpdVEJa^atB}J~0c;Up494O#q|4%tXPr)F%I#*xGqhD05)}%yM=&LPE$daAF<*&4 zHgV+(8O+wI^T5yVBU0|vco$Be15A%oe`*D9GAX_ey5Fo_escw=YOUi>v)h`+Z^nc2KE*jh2gNKrm*)AGv25;g1gTiRge(P zfNRTktTMC--y4*^ZNvw~4;b_eQHDQkzVCL~!NAmya<#HCG`D$n@M_?kTpp+vULHoj zP<_rSeY1b>0f?+#!{@F7e$hqgiVxi!#_d z%`{bpjQbCoReNtnzV+V=3^%3Ep#OwcxkKyyza&=l+)lk>XY}+lm`-l02=3RXB zlkZ~yx!AmCc2HFdawjZ_U-IDlEzdUDEk=tr=}RFcvI&E@PQ1l~IwDQ6*%us|2QKP8 zS&*f!Kg@-(X%}sn6)QbGyn*3A%MOhOQ6J2g97;_vRi^#BK)_<9E^IYjuCS~4s`S1$ zz^p~$A*E%LA`K~u@*Mq2DAoX*6rj9H3i=K2w;ffFC} zC^NW#O?6Y~ffILP5-G|Up`n}^Aor`+ogbkv>yGcQ-d`-*2VjWE-)3CCQuC*;L?gPId7IuE~vWX>=_g?@nF)b7q|h`7T{k zDR+AjZS*sWza*VtS6#_h@L9Ir+@yDYA|Q-k;MP=`50(tY|3Pg?8;29s$jNdbJ0^N( zuw$Heu#tjAe2%Uz&o{3k&5F+7a{H$kc+$wmf%jCn#&rctIJMLH6OSQoT|%{xR5X~O z_0eqoV@s(hQPfy! zGVTG0mBp?OZ=u7;GDYUquH#YP!{q~(=q(Jy^Vn^*V=hT@h(GoZ7c9cBCN$L9B+i*` z^*K4dIYkG>3)l;*?i84YSR@kk%WQ8PEgy3Z4&B#^eZ1GB>Cf9z+*o*S(m3i|uZ);d z3`4En4y7HZl9;Uj9EwrDGd(S&2)A?HrQX3lNFG;CO2FOmhaRltZ zQ9LT^uoj#Jh`6BZNH^aZAAEyZ+uFHAe()9eHcj#zFr&{}ZlDQTk~vYPoiQ?vUIdU?5tz zI`s%GyOG?-(}?!bEU|r-5Egya^o^;mAhUQwm8B3uI~ThD8DqR&K222=z!p`ftE@Nu za!{=M29xYjgI-VTT-(12bm;XmhYY;{t?hQ~o(p1FdR^lg098lA~* zVkNYh@REUC$uj#57VxG-<|f+MpdJnH#z{rh)EjPx!op;#X|h_{x zQ7;;|aCevO8l&wB`#{=&2m2 zj7XH>oGDw{{VuKGeJK%oefpTI{LxaTc9f5nxJ0Ev^FZ19@hdXeg!<2TGljm|gpzCq z$KYy`$(PlZy{+4M%dNLm#@3-}Kf+y`^%0>_DOKylPn zG;vnVBYh8bS2`ZQAsAhCKK}Ooy%<4RaP5ulkCE_H8{p63F!H5dOLmb$R1}W}oviFKfHyh@G`~n=(1RrNAEet|YxJ)P7{bb*mKNh& z$mDlj5*zvcxOazW(fYenVEg1AWFqZRM+%K0Tr=V>)b;=R4SjdJ-sd#dOdW1<4-Tz+ zOH-XTi&15v%V{cuO>Nx_%pK}V(`Wb21x>JHLdRO(PXd1XnX!?oP0S zbUgZx0ACpxlwDqhllrN-;1EKG^#wR7;s$q7@$Jab#N61@Yi}mJfvL~lCbJ>LH?0M) zO-|!CeVO5oGwW;k4Pm1xsxIeibFpqD%!k?cdzjIo;&-R|7d9iKi;@$oHdDQvR)b19jgAtP3v1bL*VfwgRw=;xJ|F3V6yKhm z%Pf2yR1bau6T$EtlWPh8$r!g5r?!XJ6eiP!-_c1zJZPQ>h z=A5RJsl4O&puV}J=g%M4m}WF6TNQL$PQ5jU((+C!-Fp9hIIGtXQfhS@?{(CpN7)!fKxB-F^yJ1iA9bofABI=Qw~j)JVe1j@9Bm#T|oV8MEgZicS{6v zv-=Xi8)ZcaLF-P_$tA@}QsB8Zl6<(h!GLEbX&ob$0uK3*@fYAOuC8iZi}%(a(&FrP ze~Ca>S~5lRA~Yj796s%Pb|;DKs?c(3Zu8^zSbE``im`FaZoW%SY2C8w`eY?fcAM{B z@yY?G6CE*m#*?zshHl+LD~+`ceSX_~I)#5XgAQW1TLx+Md1~P!V!!XIHo7ZEUb)TK7&?UM#S<#D~ixqlye6f-epE zU>FL-MonG!a1$%Qk5jsyuGuk))*d;^nm0rO`OLH< z$dX?_@N+8m?CEBT0(vtgmp-b2AZbkCdylT;>9r`@zr{c?FLeoBtcb|^aX}ciYb)SM-$w4#-wSoo#S`itp z=-HTa@VBhz1gNdt4c=4K9F%)nqv$T_8mKxxyJa5z{)v6kI-rlHRyjyGEPh`R9E??T zG~*O_0RX6ZP7X_(h~qPI9v9o!BcA4^#6XS|UN@O0KRi3!3RlfgJX;}--8Vm>P?6jz zM%eD&K?RpWX(kWLaQS*3Cl%Z}34dgDZ(n8t9#JKC7Mhq6bQPc-V=A(feph~>_BF2_DDj7wy7BS4j8Tt@^4)*Vq1_r(Zhv%b1hyB zX11hPi{kJX-*Sj5alaV1UkB8E7)ex0(BZlmT+B^ZDN!+3kNOR5Dk{u`_eJLOT-^6I zKpNiCa{0mON-iW%Wv0`p+mXA}ktIfU-hA>_x%VwTGE5I0N0Ff1Dkj!>xYx@{;y~uK z?kJxpX{n2HcvG|DiWzGqBkH>Rz^-PrL!iBrFO9A$!@%7bKN3mGl5?=ea-1qP8#6{V zi=n`<>er}1p6PMSiA(6cy=s+`l3e&?3fILR;BSD){v}8b zk#^MZSh0+#{%WF*q76Xw(gfvDMB}}$me}bC4%oC@s~KQ&JtxFm1gA{)z}YMf?@)py zyHp(j;MwZ=R$#Q-aOcERog}nu4=LA9A5`;MX=r-^bQ2k-+hq74R~^%?BFu{Wjhj(6 zsef(A^_=iXi$b4`)6~3k7k6VW@jKwu`V)XHyiaLZb+E1hIMjW-x^*ugO8{4YUaz6gIU0`HqJp>Zv^3`-r z{nzZm34@vgx11Q|34$U?$l$2589;Oz_q_EjzoXHbLf=O45KaB)F(nmBHn=Ozmtl&I zlz#o|o#06&Y8%z=H7%VUoGV@G?EMUlb=PJfw2f0R6bvO5e!1BA08FU`nVXG6`dDUW zPyAu{ovKwR4eMK7IsTSjtS-XBjy^n| z4648$5m3w=&D_8BHbf9;l+qCuE*NnylKB02Xy$oAwYNcZV05YA8r`ryzxNnO zV(-QS9ps>35SPSEhm;lbKq1laao&z&I2u)~b=R4H1LT>Bsa)zlR7$~vzKXf8*SXMR zeo081hub#04efZE@4V;^)@9g1yWyTar1ob2y16(zRlXa3$3yEaXf?ugd=3q4yi49_ zVlBr|Geo~jnmxqu*=IFiZ*Pw+ZgKFjRs|W0PSJ2MNLst^&l;iH4On(SW-1Z}6*&ht z&vOv-cG#!0m7-xT-!bO zttWAy%$WCr5$%v@qkBHD<4uCc#BI0|47@| zbRVu+Y)cUGrEn`}RT-}a5IrBY0h7G(BNW-^U{w49)r`4YX`K=5?i>Fu<(OlFBBUn< zGVmkY!TihHcoe*7e0WV@d}Z=+5TWY6>9DPcBOwzId@`7vt*Y3jcxDls-6K|ur1x7P z4i3;XvK!bmq2HnHVb@}VW9{)vExUhmYps_ArGu1BT0jR*PQCc*5#3)UL!V8~rDC#? zO?&_`t>a~-J$bGaYixO8;!)+&C?zrwMUO@f*X6zq&kN6IrEi3E1@JS_c|~UY%rq=| zskjb>0X({LXWeU+S1{gqr8S6zKmmK#$3X-==hXojZ-LbV9pz|y;;=ROCj}<@7_gj| zJYD0Jv|D~1=JMFft#*vloUkci?$NB`WXyy^o#1}8iAF{e&T*xVqnV_9wvDj59&D>T z*XbJ^oPYIJR^i=#1?E$1)DA&^?J-L$?c$X(0Qd2Y{hCRJid+}1sPi&nH# zzpqaO5$%@aZYmybUx+^)Z`>fN(K8V~uJ&Z5q;as@M{1Szrzw9Qz?`E_Od8w?X3%Si zeN3L%{S}qLY5P9UCroOw(kaUR;AH+$s@e9`Q2CAmtB_-5dFS3gD$82qo>M(S+Up@V z^O8!TSQa_|>&oNvN{V)qeMs&uf;c=L`>~Z@?RJK`R6aD7YGIlh(4wTx6T+KnO8YLe z-5n2QFxRw>evG#ff4qhR*g(jgt5V7j2tC>u!zbc?axuqQD8|seCX!ld{%A;f50&2J z?6DhVOf4FxLk~lgwMF-r_seX%g-IDcgwN4g;e6wBys)2yDL{8|@KJVq%_rhe8)jI{cye`WF#GEeTK)ZoMz%r|=nuQ|Zz6CYmf17SS7(3y{uvMs-Yt==q(>0P zFZp)cPcv%{(yaClNRMT?35$1Ls!;bI%0K55CJ`z!#epCA$n^GHn=A*NZU~^465Kmr z?wvM1uCG##pYwQ8btv>2GlEeW+D5_C{lVkxn0xJ~X)acmJ!=;bRcOzKaJ^fjC%kpH z1?$nVutfPwn%da5BjYVD!#{aQ77?>$!~pzFlqM)YYkZe`dwuC4J2*W*$+Xp~DLKmC z3v*_sVt+oN^|=s4?UjRofcP%J>72OxWc2|8!Wa0V3hn*WB=Ub=@jkm{dp`r=30ceY zeh0+M_mfZWhwG33{l+i<=fx^+{w~k}+L{@>xA!~AN7h-+RIXhId^nddvAw9NxsaO1 zgnco~4AGJ2nf>iW*GA8Pm_+(z=VK_gOi)vm9h5eW@GHmb;DbxH2NrLy+y#82Cy&!| zEDHk*vt;WFW5{&JN~i@Z8HvJ87zVVfldXNx_asONZ>akXPSfLd%VOkrCKAQkpumlC zfa{fd@tkRY(AaSkw3}0&^qa#4y(=GWN*lTleMXx|(u=^=MrZ0rWVpl83A4A9kyt#J zwy|*o=9Gf|AYS_5A!FEkUg3}4Lq7dM&|=WfNx&L!{i@gL)2HiB2;VHisHE-0@}^{a z`D~R<_WY`B2yyw=e4pABywCUVZ_iw64_5grVf=5U;)BgM2NOMRag`7gJTHl{OB z+~;xrfKR8nEa$N`h2vd5domf}0(QCLWpppN`7|qEW?RQL7(3j>_@#kUqWY)Z*U++i z>uN;sPqQM^mlfnqbJp0*tfM`%j@RR9j)&{bEtU_NFmT*g@oujamdmj-w3tri6ghXm zn&6u>jQNVX;54QD>DPrDn2Q{Pnq=2_?Y85MmR87Sbl(bv;IGZdcwDt+!h(U>j#KK2 zK4VCJC7$N4lfECkU=T8wCvtC#J~m%!hjY&o`6wlcaj74Jz_9S}Ow7d*4(_LB-cB?P zl!ay{+Z8LrZMQ@{kDFtjjzmBsKR>C+hRbLU2hRhm&TW3zTl?+TZO18}a)bf7`t5$4 z42n#9fC_ATuG7U|nbBPi#WhdwYFYq;QoyR=M%Jo;Q*yS=d!#FWFnSWn3jXU1o$2uT#r66^< zxwPh#FVNR=xz^MhUbAedaJfrYAm#*EbS&AW-L`VKky%~bS4pc`1`F9qzkcI}P*%OX zkZ*D$r+40+dw#Z){lij0xoN=H66urV1_vTI*mt2yI%05sFM>@*>3A6LwrG##a<6Ux zevh_JawxJ9i07l6*c4X8jAtVKBR|7k?wp93K(i2Z?|eKxD@?EcYpwiZZ@`eb4|VZ% zCh33#q8$>83C$?6k3uihR;P(1kovvWeY9yZH~4J<9Pg~>`Sg7MD1A5^mW16T6p*aF z#j#BwWYt|B4@Sc}_x`EiR}r10e-8&JBGKtx#A-3r73$9V436g@ln>ANLzBh4zpxZ& z?Rc17hS$5++-z^6V=%6N2y3nT)a7kD5EyY?qaBZAb$11(UXrT`7r)*cmTOIMIpjnw z-2ZeBb$cDX;w`*9!SI!a^1MGF*cA`B+DSLMUZdpJVy}i72>_)EkVtfHD}fB9y3(3H zB)Kr{dYj4->RzwEqf~h+#N8&uSmH?VKX+e$meeA`UfWb!57)hAUtio?iE{>Fd5jw} zEa55kjC8rK!e<9(_n=L|!?gFnAHqv_Q>S^F$$SxtYi-(Tm;{kF%;{hdXBM9>vTlmD z;|TsLk0GRq)Be)BN7~)uh>x<8e>B&ZS>t46$EtbP`kOzgk(!cDaeP&MqIvG+#qHK$ zF8_fr?fBG1-?F0($<21UPBg<5SLC!Je$rE2TW5dN)S2Fc*bMdTFKOu{j0C z$f1QtiU36-v^4$kXv>WRS2jT@IiT^=Ga0CVQ)sUz4yhqKbTqZ!wRUP){&VGXdgmw` z!(!kaILbDU_~39L;1sJualTffm{orIODexSX6VNbMp%IeFlNx0vy6sTvTVLm^G_X% z_>3DwdmeEYw`9pDiP0^tQey_7nEUvTga!6Rj4UdBz_^@6@~ksI*DIiNH#Aa{K!*B+ z!PQz`!!&kr7uL`Lb8$&ZS#je+=^2hsW0O1HjWX7zyPkvmy_t?9c4vQo`E;$u_7`5m zE>%;~gKRf{m}kQ8V@mP@^^B0^O=0hFEw142gXxvSbX8e6sZ11cY<(QLZ)rcf#t}+Y z##-LN24+hrP2yVQY|Gkq+SaWpZ)+j8G9)m|*~;P#4QCq_r4N)YmleMnGlqES%^vO< zjXn@HusQ8ov3tz;p$(ZaTs7(FN=n{0Y8ERY-yW_k^+eJ?R*=~Q9A}`j8M2o~#27r_ zRuHYu70ton%!%mKZ=$oX(X(2)y4!4K?vn+J5Y z8s$b+0`7lzIJgV{;cygp7KZDL|#Uxc`^JO!Y zjVPZBP1e(MJ-~KOE<_CJr6vq=bWSeI(Fv5ay?CK*Wo#LsZgObe^3cxTjxEZ;U0?0t ze>y_@R{Z!cOM=19SrW2Maod{3bPE4C#-uTZv2x2Hg*Nj;wCw2@goua>BH>d>ssiQh zc{NzRmHRL=JSJ9J-rLdDoz+GiagELui8`LQUOzN5$_WI$_RHI=1)Lsr+UXnLCd6f- z5;>~HKm>mY;lZWuk{$1$F)~U2U80SE8v2AeWI}v5`rqP?FP%32eKXd3U8H}TP|3>2 zAlP(`Y!Uxuu6yk?Y#dA&If8#!A0*i0qQM$SU z2fq`iH31Gw5~kGQhrWsnk@@%>3JS-`pw%=i0*ermB5QO4Ya91pkz`^;#GD>0g_f4Z z7h&1p@oP3mx1R%e-14+IHvUrGzX8#})oc&p)cx~X6m@bESOC+I@e+5P3Nw?g*-hn2 znU`r>6`q#v@(1EvB($GH9or)DYul(%e}n)>D&;l{k;)Y@j~n>W4{eM=Bw zJ)h3^cATi2Mu`HLU(_u5^5}t?G1`Bn~K_*W}bXc_M0TnRP8#;QTBM6ev&1f{go9+LzL_Q&ty05>k z*AzAr6SMJpiYc4I{*~c4(q>`oSSXF{fax3W{V)HeGud?=xM*w(t*Ui>EHg7+pG1cI z94ngwnb-I_9zLCt%>}pTiZpq>4g(`v%-7D-;XJgYpN5~$MDElfZ6by-hB0q^QoLa9 zag0gX>Q*oRDbD7s)7Uaqa8Xkmh8Z01fyChtpB8N-XOHOTg2WIwwSM;=XW2Bwq})W6 z37l}XH zEou3DpjRc(lnIi`U-P{G6gs#y_N*#4zx(TnQ~2(VctwScabwfq@Yx4G^ZeNvt6bOW zXl-ZfI>;jpUw^VnWaP4AcUy;v{$}^d2vm{JT;;;xntvDB{?<0S(pnX3ISXK0ONZpH zFH);&6`>ID1TRI-4tUZRI-d0UDd($QHLjR!3n3yFsX;=lkF8?VVQQ~R!{*hzwPzU% zTmi$^n(waXmP5W1vXwen>~-zhX12Mt+)U!+YuzYHtH1#F?k5*Jghx8%$_{eg6t?OK zWG2q^*fKI~I}1l%J2oChw!xhENEvVCQRTQCKD*92+hN7JBU7RR-_I;1=bU9Nr?~jO z;A7TE_B=YCQJN0!YbRstw%sX|P37hBwYl=#tVFf|Ypz`JZz(@g+SoDUL`->k@i&XW zbqa`6vspO=KhE6x!Q-|w<-2&Hq52ZeQgdbd@z;2g2nkY}iJ7&*Me*|D2Z)YOo}Zq% zX|!o$ryr0vT>*w1!HzB2zN#?Zgy{N?TnHCiYrh^y8vf+|7tCdQ6cDURx6c!T78Yy;k^Z#~^ zS4daD%Z*R;g;Q2)|2oLh;pD3DqM}S+H`Gz<$M@$=amTaeRdU#z{h&gweU2@~?dN$P z-t{fdVmDzkDbCi{yUI<{py1$+YvNQ?3z|brR5zrkb5&2iMDs9N`!)%JmEP z-6{3Po9n0!DLgMA{dNDU%%87(|0SL3(oC^KZ~sU8e|&e*`olf+L3I}bJv@&Jjj8(~EER`xH2E0!sn6WrUk zZJPV>v?AR*p`78A@Gb3)!gim>*`H?7332B_zFGw#Zp?-+?5Y_Wx&ythOda&oC+E)b zgGMaoZz#9qR~$-#CwPFr}4!w_~b7#I)IcWWSpy;F5p z0^?62MIY{IK*;flepKT%(l$6evRwX%G_EDN0F`Te@=1W|*!X5C8NbO+V zH~_b*@Y>odH{ETm*2HYenDXDSYFo^>RK|U9%Jo5O#R9iQK8ljYE@|*tsY2~kXB?KE z{##-y$flv8*|-Kl1)SNXZ(Su&OKVh`4N035Ph@V7(c?IQgW0>TaicxtK2~Fl%*@@N zkGm~Vg0t#BXHb$2UBw?O_n2#b-Pz>AkQau5dy@3ltp!3Qr@4a$a$V&YPSw zmt9_rR(c*Hjo7X5^>`@**!8AwC73$Ba5p6L{q+we`y4iUxJ-lL!5|jafpuJ>;S~V; zZKrQ!g+!cIDsHP*P0{%okEgEw6Y?He5M_Jzxn~@26uL!f?7$h_t;%a1Qg)Kl$6OdI zPrs)>zZ~){Ci}7V3-MJj%Nmr;C}7&3EN@30T-&keGjI&|+DIIa zZ<-xfA$+TI{tU=bh&N>N+o0_$K4#G8*ej{ zO__XA8WOp`|3G=~8C6cUJoo~RElN73#MxHc7;J0qCQ+Gmb`(UFT)T?6j^2YtS`)?2 zQGe&2K0c~-WyxxDR2+5Wxyp^7ha+?GXJ6;hp8@pjqbz1;7r=I*AF#yPD28*zre+Eu zg&vmHEL^=qjfo~CWr*n}`xWwHza~I~eD^VIdUKr1XtpMzY!1eju^5=wvlIC_X;kBu z6czY19ER|Fmf$gI50nsn`qXpH{$zSZ>)oND2s+W)c!e|?^km`$Fd{BQB;o7~z^ctYe5ZvzUx)6ifrfNARmjteb@C?MKN`E>wiHHkH|)5{~dk)xH=tm_9|R?Dtt=SI;0> zperzX27zLD0gn%GzqN&D?MRMBSq}f=HA`8jK;9$BNTeQ;V!tjQp_8qYP@+HZj^jDK zAQX-kkQlILi&gRaqUu*`9~gVk0~WrGdhH_NEyip0x_(s6OuUV8r9PcYjc zz+Xy6$%&W4zP8SSW-3|jR0%B`DFJUhm49fdoGLS(CVVdsLzf6jUTx}YR`P7P%VpSp zvIK2SWwzGQ3+W!+f)fVO$FDW(7Y6<=d=rak{Tr8Y`YGSoD4j^B3CIUkIHR^8@dvbL zzZXS&usr9h<^L882)?;I@*k(gum5pYO~xDMX}qUOklm|0(5Pc`)Xqg&Bmw9!pU%6S zIB=MS@MR8MY->@MHKR-jsZd~x)=Qvvbv)cUGJllYoLsFb z`w*U6GTU2I<}uN=3ZGXENnBW}E`6kgC)8F;-n4iWBk3T#tk$LjfWx7!|E1pH(NMry ziAc-DR8|zaX+}dJJzs(M(_(#Pm0O=oX+Z@z-Kn@cH9ynV9LY>txD8yb3s5=4VqPNI z6#>X4s$N}`@)R5db#IxD8@I4J*VZ4fdTu^Lm9ImT-tz29WaBo`_uB@g%>%B9xfr42G&T`jBDFGlM_tT$xWDUQ(VI_WnBm@U7$woCFS$GeKia=UM$w2ggnd)YfQAEq}39Zr^6 z^hV(H&R8BQ+4RP>p>b<2vmfea#J@a~GZt3v>GlVO>c1b<4IoumR z?@cS0DyMyIH6)rziGHp@{NS4U z-8SG{5xVNVvy({o>b=GkoJCTv$rZn{-F!lPI^ngWb1>BdoIW3^JLk`rAUwGNU)^01 zh0ds>9xgcsFZhhZ9$>Xsw$_<64Nr#(|}USt0# za7sw|)M}OJXgJ#T9b}A&cYU7I1j?Dq?I*rZ)Ei{s4`j z;hB}K1>D+P|9B76Vx{*qwbL}mS(Wt8K2Fubl!QsyezA(#+P2eOZQEWbSCw|oC%(S$ zqP!s$AOdz2t049nb%3Wxcpee5TO*G_5eOG)wTD~b9~E`mf{xds6x|CB_iAjsihc;U z`6|%(yf*I-DF?_Kr>*ijZ}gU{GQsGtuheudw+u{yQdr!*D`|@kduhxJFK<`X?QRXX zvbbU1F8q|}-Im-INYgng~2GQIVd@%y$#vJ`(;UE9Jh zg}4lZ;yv!jY;~uCCZ(!wvT;tyx14;fiDRO?zY=xs#O)ddv&QWBw2lClkITd2Rl3kG zDe`exe2*2Ytga^^#NNft{B@Ylf4JXpC5Mqn)nL+Z>Z?43m3w8Yu$^k!qf1-vu`rE^#lcn!Suxin ztJV4v1eQB(rX5+z{J0tUS=W#l&wE|0#N}r+w(i4VCU0v~-GZPtxATVi0Nb1$V}?76 z!m>Ba^-=h@u9|CdNoU|KxS=P$VS_?4Gfjnb%XX>yRy5v)fyq(Dwqq(7HP~@7isWX) zIjMZx&ak=R2{F)l5S3dc+jP58a3secCR}nlS5r9sbme;6j_ypy#8U}c4&A9FGD(vz zF))Zsf2G;SQ}5XBeBYrA88aor8uQ`TNTFInYF6Q6sO%GayBoVoU=y^$E= z0)DaDiAU!=ugVP)37$Cdd#73KDBOotx)`mMdIy-5p`oT6jc((b6l)$uptX~IF@>bS z#C84>nj9N|G!7Tv!zD_8|81A}1wM~b5AzQiV>rps znu<>?LM@N?oa=uw%&^j}7khOzVhll6*mB6$YT&cdt90K(PHP*}kwk%JZw?a;jml=d znXQINLLONJ^GJnK@7@%npMn@A)VcQTOIYIudzl8qUXsjDK?J3C&Nc}MH!gxp`i4|u zl{81t#htN40zKc#rOE}#DK8g_JI2KVVGvgqCzb^z0hGzO;VMtBJmf+?i|li9wnod# zfh9=ZZMN=Lx7Vu5cv~W;+|?r>peO4hb4r|43AwCRUAIpLKvi*=aJBXBuQ39uM-m!) zRFU$rKf$jtzm)reUmsiiW8jv` zorv35`OW30lFiD4s}9)=f9D8h_J||po!Ym3F|H0#S8r8EhjvGm#kUvF^6M@VOBG7> z9IKf?EmdkYz)Uuw&@RBuc2-He?k)@s0$WBSOoGl2iMDgl!fdjNWtjS`XJ~VVvsAnNU;i!1J^Rd>x7GqW zyOp9eN^$%0t&iM5aFk2I-kyHb`}nY=+OATj!<=H^-pwAB`Rtz9NReS&lxG+Ucb-2B z1vQI^rc|XNTau?#tRT^5psJI|8mQ7qYFW@CXesU!k5`YG1(l{?gglqE!zcJ^m*v*1T*`4>8?P zGsy-vu6M&>=2ign%!;GKbETBB%vA1ax=(86+ZI2^Uo{mPGKDmLmrBvjw1F@kFheNz z)7+746%aiy%JG$8$(f%;^F;YtiCPq<%8N>#xo_M`B0%I6)uF-JMumaLsPk@3saWXf z(NJ%S(ju8I8 z=Vhi(`;q@;7`_u#$neLvja{ct~>->G%Z zS!b`c*V@ms_9nI_Z4En0_D{0Vwb@RE>#a(;%EOvaEHj##(hBlO?{$VDViqyp(~hNI zHS+Q~0nUnkSx?4V3uhZzb>VAmy(8_9#6#1w`VSvdP&umB>YSr2p{nC*xxA?&d!(tk z4tE~g4WImpJmxD)mzQrNi=q^Kw1v#@>6O`jrZ&4iFEco#YT#+AGyFb-QDb)>*N09t zu){$#KEFeNx-st)%*>(6Ewe=u3FQaT#u*`KAVX5huDN2@=0+PEyHC9E290le84&vL z+!@;9nvnmR!Z_P;LP{Jxt}*-!{>6z3yz2Qo+X+GnuL!U(4&sR4ng?}cIxTO4TG|lO zDQ*AwxIC$;u~_SI!N2`uvgy?r28oRECpaewV6Ir3`yM`51l2|5!t3frdA;eM{`vKA zM<2~|iFpRon-qF8v<#JbD|G5ZKaxKil>ot~viO5yqJcQ9g8aNs;$B^LXsZ6y>5ULB zs#V+36-MF8wlLqzQ?C-SQ|yz>41vHr_X&7dJl9Rb-K#EWelDQdAymN z9-BlVlOYxHk05sD!?n>VUbP#B&^dE%MyVHc-|3%K!Fk3RXZ3^5z*H}b-o}TcSy?&z z5@8eE6K!!8-_q$tsOxAM2_Y^Yk zrR7eyA~@1>9aL=wYz{XUkD3wqM>dXaHe&WwJjk)Hx-D&;osZk)o&>I*rl=SP`1=SV z_~J^2>oi6=U!;)q#WSwY>pX&Gk4$K2b&XekpA(Jo$#hP~%LRdHzK~Z;*FeT0hqUIS zAKoVw+bnG5c8kJxj|@WFqH&r8Z_k3yxA1*^g?u)=^Nja8gE#7>ni^j#r(kkv+{R12 zLRa^D>h@~uJA(8Z`S4{+57i019)`Ik!CeUcYy9`Yt^ii>bg!p1BXELj@&~-{MM3jN|6enm;Vf&eo&D^(!mf)Xt=Iyv#PCyi@AI!nUJ7vcF z9Z?qTgaL1{))&7a7(fv-=U;C`3MQ@XpPw*No|3pRiYMav^^MCEXcNmKMy76FFu1rn zsKLwFg!O1*xI)<%<~sf}?`YDjAyH&%e6b%NOhZP2nRy8RBw-!imVlK#nF*Ygn*P0z z9!S_RBE2?t;DR1wcC^~R-<+p}CK(Z{gY*4lVZKGRTwFXu0P*vO81V)OJS{kwX}((h z$#^JT*A(yi?AzKP>gbz|z}?Y*e1djGi?tA0Vsq2uGEM6rsUqg-FNv-4D(sGqW!67r%#&lo`)%o%UV>W*A<*xxx=2}iyhy<>U)4n@q8%x$o1 zD+#C^0wjTHLTWD(%J+UQHP>-ja*?a)?sell&u=jM;gI%$8I#ZUT(=L{(vzgslM8;G+P)DX}#QN%2_ zQ;|DB1EA%HZ}K#+*IwQvvZ%666n%KJ_0*Vqy;w;fWbwOU@!56`!A35zob22W&yE7* zDm+NU%MIh_JgBf;Fv|bk&Gz+*)js^(of)0O&;s55U@trj1C&adGl{A|~zu*R2u! zAKCf8Phz1|l$4Yq6w=HVcK|JeZ{w}cLhm?u#cY>xtX1TOPZU z-oXhArK+;GkbfZPpU00?YY09ade?&1Pq`9QG>*bBm7GEb%3h=qnVRv?A@@vnmeFxk zyhFcnaCR@*T&M1B^$9W$3s!2Ow85xRKWLG&kQJ$)?S{Ia7c4F^{p5gr-_~B!q#hUNI=vbd8c3TK zM#XQSnkDu)-few|C}KAOQK1of+nBueKr{z8&@neXG4nPRvs}P=qPj(R|14p#Odz*FtH--={E2#VEZq`VO*zhL%PsiJpjSBwoAlyJibq=9mWY)vaOP}(1WS=ajA*;FV`$FL$J0|49e1__ zHE4{j?KqkcHS{F`LFa685i@7wap-j2P+7m>uOR(?gWdAa`eBv2cs5t}!BeHZ<%@6P z=)b(R)RV&_!NIwXu6`tSK*B&SDQGHdXVA)*{i8v6qep|Myz<(H446aGe$+yWyhSQq zpSf>1Qe%aqn3$MRr{8HK&uo>_QkI{zT8rO7B-n2(_1)LCq;khPHFN~^|5R=5_D%gP zBPZ^_1_VF14S^LE&FpPy0`>n*G>WU8Wy-6Z$!vNK0;3hG<*Di-(2*ppHoHQ|a|z)h zmL2s}Z#UrgHl(dj1k5L{H>~iz7<)TfTDtUzKhLenM%V*U5arXJQoDld!i64P%rzYGo7C5PkWTwExhE=rZskbeoJdf z9e`l>iAyt~9tE#khHt8LbcxM(l}`1ja?aQU;#=%1)cZ6(wyQNYdr-v~A_2=n@dk@q z0(jrgmtr4w1c^xE-&o-CV+lQ;-7koCTvUzvY;R9Z3lKwcvHmKW`dzKJJ7W9Rk_@Co zJUY@(FZmCYJZq!BI%`M|MvqT9)YFebPb3dS(iXg)v2_`$g8y9+;;FaP|Gl_LMSNti z2i&#yG;t*|E%Svfx^{tjo9Y(Mg%f)B>US50utdRF0E7&*8|mu)Q+kH)lMrt?Q;Zpi z#f_;UoLG5>O|`CP3zjr2I!a)?bTdUDeC zrze0$Fwwn&j2h#S66~qnm>ce9?VYx4yW0E18*2F|aeh9j#8u0<*qds8Co1b8X+_w@ zJE93!i0_CvrPqFmP2QP7P{h_eP}cg%Cj17oy{7g@QCy5{H~6o63Nm>Bv*cT-eq&gC zBhfPWE4o+GjCsp{HBGPh1<&`&>ZUoU&+2@%llNyGtKucM$P%C^cR_!g~DYz_J7BdEGo$XR8u z=DYH}Oc$a_csQtx1z0BhXUYSdUAGCO%MB2&KisBek)^;ax;HsKx#$axQ@sC4-Rkex zlEY{3g|LeY#EGaLeh!6GxPA&*DdYk^N&7zlwwy>UsPgPTUNZ3S;3xrb=Z!Z8+$gZg z|6gOJ|MtfJ-;<}9i7xA^3Fo?;oSe!^{;SsYMN2k(Kngk)7MHWKvO-Hs3oI(cd>0_& z$a&CZ%zGkly6^lRtmkHHWsk>FI|6|){AM1|nZ&}Tw%E^OSUyi~p73Mnl8QC6ojM)P zP*eAWTjo|o7xgXz`K-Swsdy{0nQX!|%ds1f6PAaeu`W$c9{lHZ3kidGn8HdLudxyA z)kg~K!Nuu;xX14Ni)pG8g_DnDn)DjInSms5m$JaPBJ4~E#dAg?Cix_Ig$Xux88NZ7ksb+ zwA=Lvv%H4?QOd#}EC#(SD|jSMALk?4CJ4tkbTnPgdj(fKA= z!di~J>pugOi_{~D&GY%mF}9j`!<_;~;_)`Cb2&A?-Nic+nev3}(7?o@;NGmLsSFYl z61YR`O%wVGs=e>mb~!KW6WOWwYoX%Uu8n}=_Fzx_^*ZN$4UKB$t*{t6@*nkO2!&Ea zJ(J6_XkwFTvMQwx6+2ir2MvDzkh&d?Pl0DUvolOXnEpSr`Q&S zsF-LNslKTm*~ox=xz3+b2F^P)`1$4fxh2@6W*!lR<(VweAD&SzLC&y6m*|IVPofKbem;Mj#Nod+c1 z)}zxUwkdtuan`mN5zN-D#KSJMF`agvJwJ7Jt}^1~Ry_E(nqb%R{Ko`ThYM5dBnIxw zPD)C07%t%leP3&fr}6dm#Zr`dsJXj8*^WDJe!GGHx@zKt@fDa%^_M3RJ=1Rs#>*qs zX!zE5ex*$GTLLK7%;H4068mXsvHV2urF83-xDV$n|J8vMV+k>TErF;Ad z6x0G_td9fze4rSgWS11>xcDl(7JQftwk$l})GF*GKm0)PR)Vs+1tQfkNqtJl2wjZ0 z6D8bE^l`^b#(P?P4uk3(qLZ1^G#O)%ap`Ik?jSO!hmN*w83ONX_lP9hA!aNmL}6co zA*A^di+3VND=UFtf}b7gjX5I3TguPO&AnRbrO!@RFNQCa4eDeF_z?Gg`0!yIW=TV! zrJ0$L=C4uRYA$n}QYCX1&`ggW-{hZG7hGBCvvVwPUPqa*2|Q0|NNhVr zbq6|O9LFFwUeyOmhp_;IDK$Xc7bV@uI?$5gAMADP;6;w$q=+mVC9;r zAbH`Az&9t+|DvnWYP~T?uIL`%{odfQu9GTtM^jjbo;tf86*uYKOjZ7L9)E^t6P{H< zA}aFatRj0{LI?4H6NRe@or3JGb&;CW=JN+Hoq3Fe0?bR4D?h2SVbIqk(_p|}8YK(; z;v_K_N5<3OZeh_mnL?2%x!{0cBeXR{(o5tAvJvFp+B13>QM6EG(L%qY9RRA)ozKsz zzq0)p_+6Awg{vUu!mOR)+1b0Eo}SH$?V8c%0*}E$C2nqR?ObWo8hhdwq}YS?;ZpeR zj8F#gr=L>0TjdLM*oN+Cm6yS96KG`{bF%@se>o|XI^Lb23RDSDe*HehL7UW$SToR+ zJRb|Hs=_i(H%w#T6s7jx`zX37JzWeJ1qp6ye(XLfv)dW|5$mx%h@e1>*(=xBx7t(q zZ7-813v*Zoyq#+wTKV-QWow3>_>r_KXt4;2LY22=K_KyFdGK(P;6Cb7k9z{8=h%!S zM>2;WR#($&h8{L%2s>NCbx%P4yuSO73T74Zp9?*?1IeBd7BiT3Cy>E(goIbe%eY4) zy#9K-^YgXuluHJfBN!LWg107LrKuMi@ObbZY)#eQSp2=2Ez78u(!2GVQPvV~c?AKf zyK3U@W1EujlJ~%(9jC_?W{+>&;G^-jYwGI?E5Nsa8YXcv)JZE&(Drfc^fOM=Q0x9Y1Ig4sA9YDJTDaw zZlVR(r{Lekjc$m)VZ{ZH`!EGyDv|o0RF6f-t5mtjp(BnA;vNXi$A%TDzhETUdADyW zqMG^>nhWScj%d3O^B0%YVg|%c8f}nW5UKS z`=K~DLCeL4G6z^FmMJ(rm91;ek*==XIc)g9!ycWJ`^j`4LB&Rwd3qJ2;=x0fG=M&^ zjIkC!PEP%Uh9rPJoQq0ek9-*1=i}jF#Ir!41{@0$w5l=n+bOwvppf!l`@o+ASPU8m OM@>mf@teF=#J>PSpdu0g literal 0 HcmV?d00001 diff --git a/windows/security/threat-protection/windows-defender-application-control/images/wdac-wizard-edit-remove-file-rule.png b/windows/security/threat-protection/windows-defender-application-control/images/wdac-wizard-edit-remove-file-rule.png new file mode 100644 index 0000000000000000000000000000000000000000..74cf1a5f45a32b658a2301c6bc313636ff5bfea2 GIT binary patch literal 46086 zcmd42W0WON^etF+m(k^}>N2}*cG*%je3qh3y z8yPFkIdS&cJ2F&8O85s177P#&&<{}&0XZNb5ECFEU^^&~?<-SewO-#}!1i*&{6JMx zI49pHV8(osd_X|8(Xj8j;NR!aHX^F_KtRY2|31K*M))p3K=tXO0(=TCTIZSI8fcOj z!ADLrKL~UEazeuLR8~Uga(@w!{mRpEc7_ZIQwbphVRrKMUFjl$U>140cs07B3Hi}= z>qT*Qd}U|kWM+J|@s$->Pn0SFfd~Z#;>)`LPk)2q%liuvN`RWTFZ90#?*DE)XW2B> zwufTZA^5iZ&rP65>3yx9-k0tC56!JW*HSSqkcKbuq2T{@#;DUpp24tW8)lsnK#KyB zG(k;xClvwb7nRFR<>)}^8Od{8_6phe&~Cg59?TKPKXGqvZUTsp>i3(U zlWeRk0OyK#1pEwvXh1Pp@`oTZ2`V7GqxtT3i^v+BE@Y4>eqj^FfeMa$PDN`fj~JZp zj|nwqlRVX8ulJXW&Dz}&mg?HqArlmKU*t2E^9ueVo}lzBR|nAoHm&GYl21JNz^ zZr-g%?Oq?RrgVVdY4e~|n<^>b`R*lK+@!aM4W`m9OCls(1Oz-{a(O1D|?CgoD$mHnz zw!Tk{kTv7pTKcm-R1nco&6Z?Zr2CdedND_)#EQ!OCd)8a+3p~#gnVx>bnod_dy92= z-ZEdDT7=ytkCErfG_}G%a5Q{;xTixXMr)OxTrnr(rU;xO=RoW|2Z}>0Eog^RpxtWilyo z5vqZ)ofw;Qcq++S#b0PqYBklK)2(%|zM^fWdw*&1GKvjXUomjTV8LE)QrDWRaFh>RTUKzRo?4+iXtK- zLjy8s?Y*$X#mD!Cqj|hP*9Qj!M_!S%Z&<%vA&P$Bm5-o4q-7iEyY<&P4%9mj5aJNa z&z}!R<8x7-S(sD0zMa4HXDm@C6!?hc17U_Pl-V!$YDHb)bB}kpHFpQQFKc!FNYMj= zxx7nXeLB88oc&TejdzMnWs`|eczCICT+lJ|Dax4M4`Uuh%uRr;? zj_gC+mi%YOYLGD1Y;I4e>KbEdlP?O_x60=*n<=duoBlvWemYmcaSbV(<>8?F9a#3I zfoP-x(e$R+vCJV^-@C9!9J~S_Cr~V$jL5Y-S*++dC1p-1A0cokFBA`*fnMxN$=~!N zQ`37Af74&(0ewZFZN@&!rMMh*Wz&^$A-;;7t%a*?j;^Hz$(F-W%o`sX?!a`)gh-%t z!jlVFdRMq>0puj|e>!7qLB`J9Fh#xYmH zt?~N|7LmIWrh1hAa;tG`kM%TaNOs>o42S#i=fyrB_893Rj5#Ohe00!NBIqx zYn@FKGKLEFC1t+CIXRk^jc$vCww9|xEcwe1m5DLw-7r*fo6qOUIu0$f05ebCyU#e3N8xqeW#&-ceo23w#6e0?~$Xv6Q)mHaOIr*KD6*> z(G!24g#1dvnK`3p>0eg-y{2Wq$ny1${!rf&6&jrT@Kd0N5b+Z3hUeIf5GA6mNBy;k z9wgTM9)6Pm7+EC1M|gOS2A3;it+JXp2a{WByyj0qN%-AMm=W(Y{m!*uSyvUh;wHOA z&bj7V;dp7WwD#dohXv3~h(~tBX3~eJK)6<9_NasphH;3(I!L#zpGROa#<{ zD_Sjyt@62zkol8w0)L@)dA*@|JMd86{kUq2f;q)tVG}3FP zBH8)wyR;dc?@^Ey77VTZ;y+M%N84}v4icHverycZ}swTD@7P81$dj> z?k&A+V5w9M@nQA*U;z#fx52f}I*q5@PNJJNDs=3hKM|q->*|x~7>o43-yMOV|9{drY98&r=r$qM{iq$*?%d_|QwW?KpTU%wsY0#3hng$ilG~e%uPtMel6OvPP z86|C?PYnq6OQAa^_*TnyM1Id2aaG%|a*w3%pDhHaO=9{)3xRS7(?1gesd6gH;Bz*y?pQu_pY=WS6W>~oD%Y+h*` zSfYGojeOu(;I0Nleot|T+Ki6$BFy-KH{83P1<*>uSTOU^Y@#fmFN1MaJnhSfZwPsD z_MOe!K-+3>Z?CzO7NjeNaK&1*F~5|6G~0WPpNI}>77Zxn@8KP2fZ&^6zxx6wEzBDh z+Z+%5=jG-IopU%4SsR1d0Wi>QQPg#M`wo^C#H0IRB3Q!uhaFOZ5v=oV=mZv&*uFRF z!$(F#&uVyeuBN@96U}Y6Iz%*qnM)5Ff|1S{4@aro#)Xv{1yt+~?AgCY%+pfxZ_%I9F|YJ!T*Pl4A~KWZeyoYB~&^ z^;FiP3D0Dw3MY%>aJe_jR}vF|`D3X1g+F#77|$!?Tn0=UI8}PCY|>P_She zEOFKI=A)@qndECtdP)W6)}R-flO5Wl`+4ing!j9HylJ%-c^{@P@`cmc0#qL-rJq*msa+w>MYymgu`mDhiEXPTu8KuHQ@W#te7~0@( zll;JwlbRBS+`IbwKVBbdHZ~ov@ESCgov)UJJY=)DSwe6n&^d(LvmJ9+GcAiTAQc>Lde z*MIfOFOweU#W5mcy@NgFt?o@m7*u>nUPB)ZCW6N(tL8arAoffV(4HLMgmKKj{G=$R zY~spO9Ss&pjEA)18cnwhivfR>vfINoji@}IcSb1Ww>Eeskz`DO41jVD$(K2y@b4^h zStvmzg4RI@kum?&n3sdqNn?=nDzkl1QhNX=PI zIFTX=wZD|IS>rou*EgQ`{5MpAtA!mZ@cJ9=i~H z#pKN&2PlB&1pK7}Wu(y6@f?X&#KbRc6(RXBg2nfx9MR&jH`>*#q9l#mZA%?V1R=;) z5qBZu{S_EUhm^D>E+AuL0RxmY^L+h0hKOAl!}m%)=wkXkvnI!kD$(+OTQ~x|^|%!v zYj3;GmmSz01fEN~qdxMLk~0Ybw5bm|=~sVU8{cO0i?3YZBUAI&9?fSrtZY$})KPTR z?uxRcVQvHp?-KS2bQyr7VFzTICnABbx9(AC$UM9#6JbphG33p`m-xrk8h#B~D~h2f ziy=hW0&Wo+s3jBkoQU~VeB9AK53kYsF-BWmQ8!f!!I^AN@9qEx(6J{Az_T(+2% zc5ye4gJVR5>ncLzJ(^U;x1m-(7`B|-tLCBmoei0O$gzgUi@0IO#Usb>4QI6|iWzwM z7j~{~kW5_VmQX zG4Czj>wZC)be_)D*Y({nji?4&{D4Z$EiV>aX$;QIEtEw|{}P77VX?EnXgU-wVGljJlJ!-f> zuh5F>M#Ytso?7#=tx%=3j7K-WwL|^I%;q|kCJZxs%7YEey2n19)~;=YxBC-x zXXQq~c9if;sph98L|{;9%*a&_hvAEhTEnf+Abe#~v^+QUS^3a(6^y9?+#;mY<+JV{giW1y3_>!|HnH1M@ohzIsySFG=? zI?0gaFxccar8nvnmVNqY37tsBkEtfgY{Th$I1%>Dotesh($4X!c@ZO(tBau?S@p3@ zHrDvmxuNO#{d~U{I9$i68@gQe^;ZX9$KtDwf~^onJ(HUD#uq<(L7!PWYR%~m3=Vcike{<4`<0VCf)=VHEZx+Mk9&X1%av^wG3FKRUGT9z z@G2KQq2JrR0~RlF5ZP>@l*;{ibdJq#qyTHWuRlH(uyan&l=lEpyuZp!L;7AAmCZCR z03ich8YIHQlN%=|6pLm>)_l;o$VC{Enaomv06`}BQ+rcGsBcsJ++w@95lKHhI zH2;B45}l3s_IglMIi7N`2#LpZl(Y_zUn)V*t77i=EcgEq-7pQ0K(lShpdR| zZAG9W4?0bz;HO%?`Rygc(Q9i3CHpNQo%LH{l}h8IdI31B$lTnh&NmHNdFlMu|C=M7 zm~Ii;Et?ba{SFUUNvsYVyA@1Nq7G$O{FD|D5$B4MzHd7wLyOI6i1?lTyQ}NsI?(>8 zJ7F|PA#=V=R)UE5b|0SP*TKP2k>oOR4 zb@u2MB1!)y%wui46c!tr#)S5PxF`+~A=kvxx%#{b&?DXqML{C6g){}Re&1+PHc}!K zPt%NVUKX{xa)WV%?G^a#?N5(fM3^WUkZa)NM6`I3x-qQkM>sZ*r|p$X2%=m4TJE=x zbYoNttb$wR%24oUmyv?By?w2A>7ij-Yh>X8486eG#rK^UAm}Up;RN@<0*qR6y^jHc z%1zKn9M{pLD%mgx%&ti8f+_L#ClRm1W+CnDX=*x=wc)Flf{KXW-mwyQd9?1yEX3&K zJJ~IU97a-B@KrX zOT3$b3TJyTYwEUah5U4%YpkY@=C?#c-^+oG*-a&{9?MuazuEnZgC{d*2aJJz$zn(1 zT>_3V=q!00HyuQ*3S0ppd7#Q!ns)c8HOF_}Kircl+?laGWLrzytm5PAhkWAkXbn;K zz3}OC`Yz*&`l0Zv!9$z-``u|Cp;PJ2j_<^5Wn>_+!-3tanehPc7TG>NG)?{GPg=mf znKydYf<#ubrc;3PnoM({rsJ91KyQV2mA{bDnH7GXSn0iEyXhrCd#WrXpYyJ~xL-XJikfa4BSsCqh<_eq*t|8|o4 z2(Xn@rk5DligRJLk;s!>mDXQA`^yBcL3gJiFf^VTcydWdREu&4M0JQ(?v&TVJ8n9h z$7*S(Caja*^i90u8*udS5^e|>47d=!n3FLxUc04CE)BK}+e1nc{KWEq3UK}2RzSNiqq@x7cIoPJz-dM^= z0`yRiHG?^V%>{eQ6N8^nm&wf_H;+0l zGBugbqD!LD=Kf@*xLDocBqAs;%_k`?F3Be?4^A=)7r1_hJvt*u9IH^_SJLJNF3c~o zU_^bO${}U+lTvSK!avoF!fYSGIOW!(E{<5355e@m+4iFBDi%*mOJiqeudS_}*=uNO zVrF6*yvv>K@^nvW_5SkG)YMdgn;w>(UC`7o4i&`@Eii2sQWgjGK}fP>Op92JwAg2F%a%p#3P!wH3gGO9~GtPJLk*CWQStg}4(Bd)0GYx18W8M5Vb z1#K)SI9R4wj>qlMVlta&yElZ?YNvy2)F()(Too`FqQPbu*cvZ|syFxDT~Ka3D;UqHOeGRhNePtkQ*wE`5eA%k+Ia3O*#-k}O(da*j9B;YY`+j+1^ zTPs=08d8j5-<}OMVBLd2LvZ`z5h}n>1myB?swkNn5UvAEC>!WQimqc_HyjfNwmW8* zvoKvgt1g$%S6>w9kde}$^Kw5{hfF8E8KnT$a*J+&oLT@z_L#nY#3`Du=%Vs`-CHRE zK_e?~q$~c<8GWC*N&uZK;Nakdu^}QJKY*+4a=sFLjbK2IrNh8sj6jQ@5y)sM!@V`T zxLaNT&4s~N`_YXtBN1hHYg^Zh4ohiHp$RN4M#=-HnCxdbKffAntNz8A+O8ZB{^Zelh}XlP9DyTN~S#jIdNO9cUj9 zhOoAhBp_O`n38CnhQzMi#o2YaYWyl>pjlLVE`K=AVZDp9T7TFz*%rHaTgJz=N0#tr zxt0>vg%ia5E_A zjMz>|RVj<-h|1~I?PPZX9!LHjptrZTySu*$3JT+SD?rTmDHk_odWTX2>qt~brC)BW zcd)hP9Sbo7K?4pH3sh-ns>YQCi8McAJjr)vZUme$ia#)AzR290E((EG%N~Rusj&|^ zQR9t8#0*M;mkS<{+FM<)#8^VtEbq%4v6<0fr`_SNec6!AA9Y_=m-XcB6B83v9nLo_ zll6|+Iob<2hZ|b%*SMc_v+(eA!T%5hf0xl!BAgC@IsF^GXr&nyMpVki2a74+eB;f+ zsvAt^a%9?@VY^?+f66eOe-AUebvd7k~$bECW(lrZl09)aJonf*%7Ftpz%&ixvY2tcGv=6DNQtf08~@FAdhNnv z(48{-3N7NI`$9&>IbRK3qo6WKiYO~Z;2jaE2%{g|-|htkB|BQi^ZGnAP%x2mo$Kwt za2WLOvx4ZIvWWP6`|mf>MjfFM6rrJ~>kjNTS!q;t%gLM$x5AHX{I z73^ECz3#tRkVNJdBsC6NN|r9?{)KG*F+-EcDUY3zl2Aiy+aJ@cZC|gIp@JPR+tfz; z*P2VIjQB3My4sqfn9UYi95s~Cn*#C{DnIQvP{6o$`CbwD;TA;cjAVkJ(-W^2x5*bG zTno5Wf^TtR&lB{vIB&6fjwggjvY#Y^&jaYTJ!C@%0tpu=b=5c^?(c8VAPs-ClojK0 zz{=4($2LBlOujGdRZj>;&Jie8{gou*BV2@M9=duq=NzA$KhP&Z} zYT&5?ZZJMgK}q|I@DI6w9m4X>4--_(dt9!dww{7OV8}};MbsQA(a{7e85gvN$?z>6 z^~Q(Kq0|dqU*I62MN*Ixi9qwwaN&mqM{ky$nF3~@kc5Okq$&LR6n{)-bm~)(+G*vo z1ft_5U;@o6tk@``c?@fLI@?RT#0hTAx#H)Q(>gk{iDiq!m(C1KrFn$l$s%% zIef{bfzv^pRQ+0g;Y-X2|eG)(@ICQZpd@X_V3vI)d@q%ej3zr&`pm0cx*z4sv}&`yS#3n(G=vCQTz^=Ul0|Ccv*k(? z^wt@lMt@uQW|SCCu}eny(kgY%l(3k;Ofp@*`Bm7*dG3Q{-Acpbt2?eY$E zw{tb{2#vVCsmKDm+}J4&kjSN|8M{&LSy=zc&s|&(IJYcqMag!H2%!b>d1&M1=C&mc z4M0m6Gms##?oD!3XSVK8rNLe$J8F_}V&hgjsySLoh>oK4mwb+|iAvDs!)*{Fc|+{9 zG$D0VCuU9*Q0`0q%$;C_1WfR18`k85Uzd6nvg5{>J+FI^%f!KwO2ctZ^!5t%Y;%sF z_QQd=qEg8~*o)-w2W1Wp((;$f@jh@|v>+qS!Hu|qPP(rsh#e@d+)9U{9#i@U4s9D+ z&-jAWz4_#E>S!e2^?du}bRGe0F=O;w*IIwL)HIa2J|4XrZ-+%~K9-AOlqSn~r3*M& zXWSc(<(zdxx99jOWVixk<*!bf)Xj%Ib$)G&J2}%UJoYu}bGc+T+(qsEZlKetd`hR5 zXuKmjUC?l$y(IL6K2K(#L06oTY}X9VV{S1%f{9od3hj=GRlB>Ec%e6+8~v${1Eprl z!^FdVJq*gDg7GRh^C?NRYP{<*>uc6&QFAc8)S9~I$+r%)WqObA^Z)~MxmLA^UDp2~=wGwYwdYgOs&N2~$ECmEh>;8)@5}v+W!1zqcgkMl~VngnvkP zB;7rfO34FNI?9vjbHjvqk9zM0Qp5;++1yj|mXiSDWbA9|$}5kVBJbOP1LqDWr0UZH zH$wnApyH#!jW`lmFY-y~Zx_o+9!v?rX0un@D*?oR=i3St;RSMds6Y0~2l0NABTaHl z$m0z-gcw2b-(|J;BR}1r`rrA&tZ~yYeo2doipS^onoC7}O@Fy8rJ%<=zfFb1{O4{*W#y0t1YDJebe0Ok#Q${jV81q3Y@n_zm;YbN7ozJiiZHG3S zuaI{~qnn;zK2<7zPH-*FfFAAe?+O)jd=Pjifjnjlup+~e4x(VGr-{f6l=fB3fjjD| z#7b0JnAzMbSsP5ISYi3;iK-l#pqrZ*97QO9KbD+MZyPFBJYRADfVK^=5)m?Vpf*_3 z%VLif6zq*VZ(*Ku(Jw@AYVCQF)P!F8m0HKMv)hGQ(4f*1^Fo23_EuL78iQFfRA&D{ z@C8Y8=DBBNT%+C^-F^?x4;IUfl-nAxG19MtQCtkI-8J&x^6d~bfJP4Plb+la*WYAe zX5_KDcv?GyVeEvwfHs06B8CHEAe3N)aQ08JZQBdAwL>HIh#l40#ajN` zg4Fg3LT(BhJ!TRryF!<{05lZ`Df^FQOP8P0a0&{kGUnFI696U)zga!biQBPUjtx?? zsc1{)4)nknFN~wK{ z(@1BNNK{tzqrY*|puG`2;#MQe?Z`LZO^z1L&(Cx4kcJ&3SL0Fur0QE^)okC}-9;g3 zQ?H8Xsy8_N6)I2w5Rr#5uz*kx0_RA!10LZ*FFkEgQtx3vNL6uQ6%{g$!lBEMmy1w9 zxiRJ|l+*sMYYj$X}HR{9P}WiO-g1(1)FOlZvV*y1sI?} z{`@5uWU#U#LLhdM$=hrmVg{9*Kk7M^;6!r3`0fZ8Am0PYpUp8KAtvs{7ZeZ>V7uvJ z{q}t2n??D?IesmxQUL`G4GjgAx*e0T4DQKy4|lu-$p>rTO+|DO-v*yMsks$P^=5{k z4NqbA#;n?>!qsb$>ne*n{ohqU-suFtLXBIZX>lKT zk7{IO6<|7cBF=BzQL?I?%<9@rcJ~aIe=b*cj{Oj>#$O(si>X0mwXa<|YW0V)FfsY^ zD=I9WE;rE7&<5zghuM4`IV{_-7+#*m{2g;;V=#KP31Ude2{ueMf`g~GAaKNv=z>&9 zvIfYuqYsLgH$tYdQ-f$L`lK<_c)~lOBV}W7u`&}1I_O8}rO4DJbfd`J*|1#75TX)! zGOcKaa&5@>Qr@9XOOLh*aqV{qN7GOEyhP?UZhK`$z48(vEON`Kb8~V+R9Itj5w#(J{u+vpx*`U!oorbSV>Cz{&Ambf372=n{xCv(lI;08`KR4+}Grn zNB>^MO+=9bl~0witE;K4Xkmnk0P40PDn@cra&qFez%Hrk0=PU5MGL-kZP?3!D|ii| z5OFdsl5KdH*cc_ntv&1jzB<`AwHdrSMok+8aUMb&2gO$SRXglzw>k#C$ATD2F_(O= zmIVwEL9B4M(eHeF?mgI9;P@m4^%h)U740VIa^=Y1VB7RGu(uKO9^2zpsX^>F#BWR?Qlu(N?uFw%LUIXf4wyEgy^Rj6^X}!apmYIOSOytNL z=;zw{@mxG*P}ⅅ%Tfxu@tn`synJyv(!uqOhXy@G+V3N?LvSjrO;qOI8LRcPE_lI z&Q9co%i*CzY+I1n;o6ES7`qR*EE$3;|8I1nZZ^P%Dj>Oja!;g`s2k zgoDu8c|Snsa1NJFjzF6XoL{Oiu68sW_DJ{eC7f0wjUpLcznF*8r7!y$LeK-gQ|t#d z7SpX-m)+v2BxQf!$cK_<^St^@uw_YEq;XXycX>$(?>j>m6iAvr<%%vGFk=veJFq9a3R3t5V?z-Hm%yf&X|o4-BG=JSBNTwb4pjb@XnR z&Hc}*tjE7N?N9idx)Ws#Btq%Ka_ z?RtA{Xtk}Ua}00n<*$sVplqS>0Hdv38jM^Q^()!Ad(F+RZR*c1*=XXJyygwv)IgE^2iaXymi!1s%8|LCTK^GqTg3!jO6T2h zx1Xz;jSmCG&WnVfJUQ)VNFfj){~O+j{4bpI|I|3cz={+qo(~o11a>E&`p2j&F#Ncw zQiFvJe|~m>5B?p$XgvUd97+@`qC=}d(fIk==bkG=_Rz^5Vhw!Mty*t1Ha51k26kMf z_Kn^02w;j!OHb~Orb7j|;r4v4nD`_I6xe^lXO}3~YbWOf>$o1ET~5_3-fA7>+-N-Km5aP){kOnMyWIK&6MK)qgA(%T?hb2RzXmDEF?Y zz8FZ7p!Cf6BAYm7`70h!Kn2uiar@!rFE-~@Am`53{Bqa4`S&e})+yVkX<6yv8IwQ# zLYUre_?b5KUq=%zx!#{IHw$U7A1}ls;%M+V&#+v)Y4m1JJ)xmR;o%S8zaEL}zRQI# z!ODR6%8II@yo!p7yu1Ozy8W^jR^r1o_Y;O?gpK?6FVUv6yIBS~QgGs1TMA;gSUM3QUc#@KKoi-Og8x#n7-A&G-$#BU3RA z>$<9YO(-{NJc5h8z|}oHD@4RCis$ObeFJHbcr0|5O;&vZ(ZC;v8I%iiOS3y$S9;AP zmIof$G06{Dt?`7(2 zZ=khk+4L^wQ>1T?*{eK`{g3I*%)){@mdf3t3Q8IVRv=V~iGTT*Hzlwbz{=^#bo7gk z%@p2%FXQ=*nHZS3@Jynrbr`llf9Z>d1Ajmw(1&wmJ|Ax;GF0Cv7kG23>5XMC+cL#= z-zb#hPuMaHTIg@|X2g|0U1}1RnXt}@?*Tob>aXxP^y>C-as4VT)c-Y`P4*=b(FN9$4%oY#YfQ5;Ny?5!RFLvsoejHJU zS{78$L+JH0TdEZ4FTZYG;H{|hdi~kjIXJj0TC9HY<4Hl&n*d#UAg2^q9^bd{VNiZD z2;OwDjfaD}y|C<#yC6lPE~~2Q8wG3Jlpsa0!{(xHr>-eYtE^nwot2fviBe|NM3~BM z<&jbvx*D4vD8q3um|%(uldg%^N~5ZH02(;=(~LBf-~VL{#)3H<(G)%W5drn*iU^uY!f0%@G>Jqivg`9;BV=c#R;H#$gK;!TbM!F0I`P);FQN&A zWfZ@^ARDCk-C2y$w1u^pHb#n!imU5kb*ZuDDAL)JD%^2na$p8QMQL?